samba-winbind-4.15.8+git.527.8d0c05d313e-150400.3.14.1 >  A cp9|kaAA~@ѕjY`¤;EQc^vۑ:[]ZǁVD`ג3}ke5}ħfք{Q3I2u?R!+#w@e]kQ Ȑ9I&>[ 킒 Swgk4CLnL+P;ISpLbp?b`d+ 9 Q .4<.1\ ~    T8|48(9899=:N=U>U ?U@UBU"FU6GULHUIUXUYUZVt[Vx\V]V^WbXcYdZ!eZ&fZ)lZ+uZ@vZ w]x^$y^hzaaaabbbb\Csamba-winbind4.15.8+git.527.8d0c05d313e150400.3.14.1Winbind Daemon and ToolThis is the winbind-daemon and the wbinfo-tool.clibs-arm-4lSUSE Linux Enterprise 15SUSE LLC GPL-3.0-or-laterhttps://www.suse.com/Productivity/Networking/Sambahttps://www.samba.org/linuxaarch64# we need this group for squid (ntlmauth) # read access to /var/lib/samba/winbindd_privileged getent group winbind >/dev/null || groupadd -r winbind if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : for service in winbind.service ; do sysv_service=${service%.*} if [ ! -e /usr/lib/systemd/system/$service ] && [ ! -e /etc/init.d/$sysv_service ]; then mkdir -p /run/systemd/rpm/needs-preset touch /run/systemd/rpm/needs-preset/$service elif [ -e /etc/init.d/$sysv_service ] && [ ! -e /var/lib/systemd/migrated/$sysv_service ]; then /usr/sbin/systemd-sysv-convert --save $sysv_service || : mkdir -p /run/systemd/rpm/needs-sysv-convert touch /run/systemd/rpm/needs-sysv-convert/$service fi done fi/sbin/ldconfig if test ${1:-0} -eq 1; then ln -fs /etc/sysconfig/network/scripts/samba-winbindd /etc/sysconfig/network/if-down.d/55-samba-winbindd ln -fs /etc/sysconfig/network/scripts/samba-winbindd /etc/sysconfig/network/if-up.d/55-samba-winbindd else for if_case in if-down.d if-up.d; do test -h /etc/sysconfig/network/${if_case}/samba-winbindd || \ continue rm -f /etc/sysconfig/network/${if_case}/samba-winbindd ln -fs /etc/sysconfig/network/scripts/samba-winbindd /etc/sysconfig/network/${if_case}/55-samba-winbindd done fi if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$YAST_IS_RUNNING" != "instsys" ]; then /usr/bin/systemctl daemon-reload || : fi for service in winbind.service ; do sysv_service=${service%.*} if [ -e /run/systemd/rpm/needs-preset/$service ]; then /usr/bin/systemctl preset $service || : rm "/run/systemd/rpm/needs-preset/$service" || : elif [ -e /run/systemd/rpm/needs-sysv-convert/$service ]; then /usr/sbin/systemd-sysv-convert --apply $sysv_service || : rm "/run/systemd/rpm/needs-sysv-convert/$service" || : touch /var/lib/systemd/migrated/$sysv_service || : fi done fi [ -z "${TRANSACTIONAL_UPDATE}" -a -x /usr/bin/systemd-tmpfiles ] && /usr/bin/systemd-tmpfiles --create samba.conf || : PNAME=samba SUBPNAME=-winbind SYSC_TEMPLATE=/usr/share/fillup-templates/sysconfig.$PNAME$SUBPNAME # If template not in new /usr/share/fillup-templates, fallback to old TEMPLATE_DIR if [ ! -f $SYSC_TEMPLATE ] ; then TEMPLATE_DIR=/var/adm/fillup-templates SYSC_TEMPLATE=$TEMPLATE_DIR/sysconfig.$PNAME$SUBPNAME fi SD_NAME="" if [ -x /bin/fillup ] ; then if [ -f $SYSC_TEMPLATE ] ; then echo "Updating /etc/sysconfig/$SD_NAME$PNAME ..." mkdir -p /etc/sysconfig/$SD_NAME touch /etc/sysconfig/$SD_NAME$PNAME /bin/fillup -q /etc/sysconfig/$SD_NAME$PNAME $SYSC_TEMPLATE fi else echo "ERROR: fillup not found. This should not happen. Please compare" echo "/etc/sysconfig/$PNAME and $TEMPLATE_DIR/sysconfig.$PNAME and" echo "update by hand." fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable winbind.service || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services test "$DISABLE_STOP_ON_REMOVAL" = yes -o \ "$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0 /usr/bin/systemctl stop winbind.service ) || : fi/sbin/ldconfig if [ $1 -eq 0 ]; then /usr/sbin/pam-config --delete --winbind if [ -x /usr/sbin/nscd ]; then /usr/sbin/nscd -i passwd /usr/sbin/nscd -i group fi fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ $1 -eq 0 ]; then # Package removal for service in winbind.service ; do sysv_service="${service%.*}" rm "/var/lib/systemd/migrated/$sysv_service" || : done fi if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -ge 1 ]; then # Package upgrade, not uninstall if [ -x /usr/bin/systemctl ]; then ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services test "$DISABLE_RESTART_ON_UPDATE" = yes -o \ "$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0 /usr/bin/systemctl try-restart winbind.service ) || : fi fi<rX%0F^큤큤AAcccccccccccccccc2c2dbd95eb7e0d1e8c973d39fb53be9be46276b21bcacd8b0ae1adeeb63651f6fbea676af835bac5e037fd6f6d9950ea49ff3f39bc693d479069190927c1c53083993a1caa0988f1da58a965d7a954f36d791af7b63f8f4d458a49b7b48dedc7909319d70182f15ac22224ca61ac59241e4265bf5e587bc2c3e748ba10343e175b37b588bcd932a468cc7ac78f46391a0bc266e95d792bfeeb344887ef40eb87ae348c787a47c3127f9c5fdde2848eeac71a06e22cbf997c132d74ada549c086e0dc6dc767b770f58bd9cdd2535047601f33d4b32b2c86c6deee150ab46ffeda84b9a16eb3e6b8e2bf0b1ee56f8a98e8ed307633badc5f3c02d8a82a4293ea4743904e876f9ff998b30f6bf1a70c5252c10fc13b7f1e923eb782044d3c9d69c5ca4a8bbacfb64ed69cf6da09803637525a65c5c21220c35222087cf9f041a64c92762c7de9fa1ec5743627aae7cc055f922956f6eb280aa7b4e4d9b17e232087fd5c6b4b0325dd3211474ac785379683cc4e7f17e211327fb9d536c1ff9138de03eservice@@rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootwinbindsamba-4.15.8+git.527.8d0c05d313e-150400.3.14.1.src.rpmconfig(samba-winbind)samba-client:/usr/sbin/winbinddsamba-winbindsamba-winbind(aarch-64)@ @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    /bin/bash/bin/sh/bin/sh/bin/sh/bin/sh/sbin/ldconfig/sbin/ldconfig/usr/sbin/groupaddconfig(samba-winbind)coreutilsld-linux-aarch64.so.1()(64bit)ld-linux-aarch64.so.1(GLIBC_2.17)(64bit)libMESSAGING-samba4.so()(64bit)libMESSAGING-samba4.so(SAMBA_4.15.8_GIT.527.8D0C05D313E150400.3.14.1_SUSE_OS15.0_AARCH64)(64bit)libads-samba4.so()(64bit)libads-samba4.so(SAMBA_4.15.8_GIT.527.8D0C05D313E150400.3.14.1_SUSE_OS15.0_AARCH64)(64bit)libauth-samba4.so()(64bit)libauth-samba4.so(SAMBA_4.15.8_GIT.527.8D0C05D313E150400.3.14.1_SUSE_OS15.0_AARCH64)(64bit)libauthkrb5-samba4.so()(64bit)libauthkrb5-samba4.so(SAMBA_4.15.8_GIT.527.8D0C05D313E150400.3.14.1_SUSE_OS15.0_AARCH64)(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libcli-ldap-common-samba4.so()(64bit)libcli-ldap-common-samba4.so(SAMBA_4.15.8_GIT.527.8D0C05D313E150400.3.14.1_SUSE_OS15.0_AARCH64)(64bit)libcli-smb-common-samba4.so()(64bit)libcli-smb-common-samba4.so(SAMBA_4.15.8_GIT.527.8D0C05D313E150400.3.14.1_SUSE_OS15.0_AARCH64)(64bit)libcliauth-samba4.so()(64bit)libcliauth-samba4.so(SAMBA_4.15.8_GIT.527.8D0C05D313E150400.3.14.1_SUSE_OS15.0_AARCH64)(64bit)libcmdline-samba4.so()(64bit)libcmdline-samba4.so(SAMBA_4.15.8_GIT.527.8D0C05D313E150400.3.14.1_SUSE_OS15.0_AARCH64)(64bit)libcom_err.so.2()(64bit)libcommon-auth-samba4.so()(64bit)libcommon-auth-samba4.so(SAMBA_4.15.8_GIT.527.8D0C05D313E150400.3.14.1_SUSE_OS15.0_AARCH64)(64bit)libdbwrap-samba4.so()(64bit)libdbwrap-samba4.so(SAMBA_4.15.8_GIT.527.8D0C05D313E150400.3.14.1_SUSE_OS15.0_AARCH64)(64bit)libdcerpc-binding.so.0()(64bit)libdcerpc-binding.so.0(DCERPC_BINDING_0.0.1)(64bit)libdcerpc-samba-samba4.so()(64bit)libdcerpc-samba-samba4.so(SAMBA_4.15.8_GIT.527.8D0C05D313E150400.3.14.1_SUSE_OS15.0_AARCH64)(64bit)libdcerpc-samba4.so()(64bit)libdcerpc-samba4.so(SAMBA_4.15.8_GIT.527.8D0C05D313E150400.3.14.1_SUSE_OS15.0_AARCH64)(64bit)libdcerpc-server-core.so.0()(64bit)libdcerpc-server-core.so.0(DCERPC_SERVER_CORE_0.0.1)(64bit)libflag-mapping-samba4.so()(64bit)libflag-mapping-samba4.so(SAMBA_4.15.8_GIT.527.8D0C05D313E150400.3.14.1_SUSE_OS15.0_AARCH64)(64bit)libgenrand-samba4.so()(64bit)libgenrand-samba4.so(SAMBA_4.15.8_GIT.527.8D0C05D313E150400.3.14.1_SUSE_OS15.0_AARCH64)(64bit)libgensec-samba4.so()(64bit)libgensec-samba4.so(SAMBA_4.15.8_GIT.527.8D0C05D313E150400.3.14.1_SUSE_OS15.0_AARCH64)(64bit)libgnutls.so.30()(64bit)libgnutls.so.30(GNUTLS_3_4)(64bit)libgnutls.so.30(GNUTLS_3_6_3)(64bit)libgse-samba4.so()(64bit)libgse-samba4.so(SAMBA_4.15.8_GIT.527.8D0C05D313E150400.3.14.1_SUSE_OS15.0_AARCH64)(64bit)libidmap-samba4.so()(64bit)libidmap-samba4.so(SAMBA_4.15.8_GIT.527.8D0C05D313E150400.3.14.1_SUSE_OS15.0_AARCH64)(64bit)libkrb5.so.3()(64bit)libkrb5.so.3(krb5_3_MIT)(64bit)libkrb5samba-samba4.so()(64bit)libkrb5samba-samba4.so(SAMBA_4.15.8_GIT.527.8D0C05D313E150400.3.14.1_SUSE_OS15.0_AARCH64)(64bit)liblibcli-lsa3-samba4.so()(64bit)liblibcli-lsa3-samba4.so(SAMBA_4.15.8_GIT.527.8D0C05D313E150400.3.14.1_SUSE_OS15.0_AARCH64)(64bit)liblibcli-netlogon3-samba4.so()(64bit)liblibcli-netlogon3-samba4.so(SAMBA_4.15.8_GIT.527.8D0C05D313E150400.3.14.1_SUSE_OS15.0_AARCH64)(64bit)liblibsmb-samba4.so()(64bit)liblibsmb-samba4.so(SAMBA_4.15.8_GIT.527.8D0C05D313E150400.3.14.1_SUSE_OS15.0_AARCH64)(64bit)libmsrpc3-samba4.so()(64bit)libmsrpc3-samba4.so(SAMBA_4.15.8_GIT.527.8D0C05D313E150400.3.14.1_SUSE_OS15.0_AARCH64)(64bit)libndr-samba-samba4.so()(64bit)libndr-samba-samba4.so(SAMBA_4.15.8_GIT.527.8D0C05D313E150400.3.14.1_SUSE_OS15.0_AARCH64)(64bit)libndr-samba4.so()(64bit)libndr-samba4.so(SAMBA_4.15.8_GIT.527.8D0C05D313E150400.3.14.1_SUSE_OS15.0_AARCH64)(64bit)libndr-standard.so.0()(64bit)libndr-standard.so.0(NDR_STANDARD_0.0.1)(64bit)libndr.so.2()(64bit)libndr.so.2(NDR_0.0.1)(64bit)libndr.so.2(NDR_0.0.4)(64bit)libndr.so.2(NDR_0.2.0)(64bit)libnpa-tstream-samba4.so()(64bit)libnpa-tstream-samba4.so(SAMBA_4.15.8_GIT.527.8D0C05D313E150400.3.14.1_SUSE_OS15.0_AARCH64)(64bit)libnss-info-samba4.so()(64bit)libnss-info-samba4.so(SAMBA_4.15.8_GIT.527.8D0C05D313E150400.3.14.1_SUSE_OS15.0_AARCH64)(64bit)libpopt.so.0()(64bit)libpopt.so.0(LIBPOPT_0)(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.17)(64bit)libreplace-samba4.so()(64bit)libreplace-samba4.so(SAMBA_4.15.8_GIT.527.8D0C05D313E150400.3.14.1_SUSE_OS15.0_AARCH64)(64bit)libsamba-credentials.so.1()(64bit)libsamba-credentials.so.1(SAMBA_CREDENTIALS_1.0.0)(64bit)libsamba-debug-samba4.so()(64bit)libsamba-debug-samba4.so(SAMBA_4.15.8_GIT.527.8D0C05D313E150400.3.14.1_SUSE_OS15.0_AARCH64)(64bit)libsamba-errors.so.1()(64bit)libsamba-errors.so.1(SAMBA_ERRORS_1)(64bit)libsamba-hostconfig.so.0()(64bit)libsamba-hostconfig.so.0(SAMBA_HOSTCONFIG_0.0.1)(64bit)libsamba-modules-samba4.so()(64bit)libsamba-modules-samba4.so(SAMBA_4.15.8_GIT.527.8D0C05D313E150400.3.14.1_SUSE_OS15.0_AARCH64)(64bit)libsamba-passdb.so.0()(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.2.0)(64bit)libsamba-security-samba4.so()(64bit)libsamba-security-samba4.so(SAMBA_4.15.8_GIT.527.8D0C05D313E150400.3.14.1_SUSE_OS15.0_AARCH64)(64bit)libsamba-sockets-samba4.so()(64bit)libsamba-sockets-samba4.so(SAMBA_4.15.8_GIT.527.8D0C05D313E150400.3.14.1_SUSE_OS15.0_AARCH64)(64bit)libsamba-util.so.0()(64bit)libsamba-util.so.0(SAMBA_UTIL_0.0.1)(64bit)libsamba3-util-samba4.so()(64bit)libsamba3-util-samba4.so(SAMBA_4.15.8_GIT.527.8D0C05D313E150400.3.14.1_SUSE_OS15.0_AARCH64)(64bit)libsamdb-common-samba4.so()(64bit)libsamdb-common-samba4.so(SAMBA_4.15.8_GIT.527.8D0C05D313E150400.3.14.1_SUSE_OS15.0_AARCH64)(64bit)libsecrets3-samba4.so()(64bit)libsecrets3-samba4.so(SAMBA_4.15.8_GIT.527.8D0C05D313E150400.3.14.1_SUSE_OS15.0_AARCH64)(64bit)libsmbconf.so.0()(64bit)libsmbconf.so.0(SMBCONF_0.0.1)(64bit)libsmbd-shim-samba4.so()(64bit)libsmbd-shim-samba4.so(SAMBA_4.15.8_GIT.527.8D0C05D313E150400.3.14.1_SUSE_OS15.0_AARCH64)(64bit)libsocket-blocking-samba4.so()(64bit)libsocket-blocking-samba4.so(SAMBA_4.15.8_GIT.527.8D0C05D313E150400.3.14.1_SUSE_OS15.0_AARCH64)(64bit)libsys-rw-samba4.so()(64bit)libsys-rw-samba4.so(SAMBA_4.15.8_GIT.527.8D0C05D313E150400.3.14.1_SUSE_OS15.0_AARCH64)(64bit)libtalloc.so.2()(64bit)libtalloc.so.2(TALLOC_2.0.2)(64bit)libtdb.so.1()(64bit)libtdb.so.1(TDB_1.2.1)(64bit)libtevent-util.so.0()(64bit)libtevent-util.so.0(TEVENT_UTIL_0.0.1)(64bit)libtevent.so.0()(64bit)libtevent.so.0(TEVENT_0.9.12)(64bit)libtevent.so.0(TEVENT_0.9.14)(64bit)libtevent.so.0(TEVENT_0.9.20)(64bit)libtevent.so.0(TEVENT_0.9.21)(64bit)libtevent.so.0(TEVENT_0.9.36)(64bit)libtevent.so.0(TEVENT_0.9.37)(64bit)libtevent.so.0(TEVENT_0.9.9)(64bit)libtrusts-util-samba4.so()(64bit)libtrusts-util-samba4.so(SAMBA_4.15.8_GIT.527.8D0C05D313E150400.3.14.1_SUSE_OS15.0_AARCH64)(64bit)libutil-tdb-samba4.so()(64bit)libutil-tdb-samba4.so(SAMBA_4.15.8_GIT.527.8D0C05D313E150400.3.14.1_SUSE_OS15.0_AARCH64)(64bit)libwbclient.so.0()(64bit)libwbclient.so.0(WBCLIENT_0.10)(64bit)libwbclient.so.0(WBCLIENT_0.13)(64bit)libwbclient.so.0(WBCLIENT_0.9)(64bit)libwinbind-client-samba4.so()(64bit)libwinbind-client-samba4.so(SAMBA_4.15.8_GIT.527.8D0C05D313E150400.3.14.1_SUSE_OS15.0_AARCH64)(64bit)pam-configrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)samba-clientsamba-winbind-libs4.15.8+git.527.8d0c05d313e-150400.3.14.13.0.4-14.6.0-14.0-15.2-14.15.8+git.527.8d0c05d313e4.15.8+git.527.8d0c05d313e4.14.3cM@b@b@b@ba@bascabrero@suse.denopower@suse.comnopower@suse.comscabrero@suse.denopower@suse.comscabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comddiss@suse.comnopower@suse.comdmulder@suse.comdmulder@suse.comnopower@suse.comscabrero@suse.descabrero@suse.dedimstar@opensuse.orgscabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comnopower@suse.comnopower@suse.comscabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comnopower@suse.comscabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.denopower@suse.comscabrero@suse.deddiss@suse.comddiss@suse.comddiss@suse.comscabrero@suse.descabrero@suse.dedmulder@suse.comnopower@suse.comscabrero@suse.descabrero@suse.dedmulder@suse.comscabrero@suse.descabrero@suse.denopower@suse.comnopower@suse.comnopower@suse.comdmulder@suse.comscabrero@suse.denopower@suse.comddiss@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comscabrero@suse.denopower@suse.comnopower@suse.comjmcdonough@suse.comnopower@suse.comscabrero@suse.denopower@suse.comnopower@suse.comddiss@suse.comddiss@suse.comnopower@suse.comnopower@suse.comddiss@suse.comnopower@suse.comdmulder@suse.comdmulder@suse.comddiss@suse.comscabrero@suse.dedmulder@suse.comddiss@suse.comnopower@suse.comjengelh@inai.dedmulder@suse.comscabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comdmulder@suse.comdmulder@suse.comjmcdonough@suse.comdmulder@suse.comscabrero@suse.dedmulder@suse.comscabrero@suse.dedmulder@suse.comdmulder@suse.comvcizek@suse.comdmulder@suse.comdmulder@suse.comnopower@suse.comscabrero@suse.dejmcdonough@suse.comscabrero@suse.deaaptel@suse.comjengelh@inai.dedimstar@opensuse.orgdmulder@suse.comjmcdonough@suse.comdavid.mulder@suse.comjmcdonough@suse.comaaptel@suse.comdmulder@suse.comscabrero@suse.comscabrero@suse.comkukuk@suse.dedavid.mulder@suse.comscabrero@suse.comrbrown@suse.comdmulder@suse.comscabrero@suse.comdimstar@opensuse.orgscabrero@suse.comaaptel@suse.comnopower@suse.comnopower@suse.comaaptel@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comddiss@suse.comnopower@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comdmulder@suse.comnopower@suse.comjmcdonough@suse.comaaptel@suse.comkukuk@suse.comkukuk@suse.denopower@suse.comaaptel@suse.comdmulder@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comddiss@suse.comjmcdonough@suse.comddiss@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comjmcdonough@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comtchvatal@suse.comlmuelle@suse.comnopower@suse.comcrrodriguez@opensuse.orglmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comnoel.power@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comnopower@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.commpluskal@suse.comlmuelle@suse.comnopower@suse.deddiss@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.denopower@suse.delmuelle@suse.comnopower@suse.deddiss@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.com- CVE-2022-1615: Do not ignore errors in random number generation; (bso#15103); (bsc#1202976); - CVE-2022-32743: Implement validated dnsHostName write rights; (bso#14833); (bsc#1202803);- Fix Use after free when iterating smbd_server_connection->connections after tree disconnect failure; (bso#15128); (bsc#1200102).- CVE-2022-32746: samba: Use-after-free occurring in database audit logging; (bso#15009); (bso#15096); (bsc#1201490). - CVE-2022-32745: samba: ldb: AD users can crash the server process with an LDAP add or modify request; (bso#15008); (bso#15096); (bsc#1201492). - CVE-2022-2031: samba, ldb: AD users can bypass certain restrictions associated with changing passwords; (bso#15047); (bsc#1201495); - CVE-2022-32742:SMB1 code does not correct verify SMB1write, SMB1write_and_close, SMB1write_and_unlock lengths; (bso#15085); (bsc#1201496). - CVE-2022-32744: samba, ldb: AD users can forge password change requests for any user; (bso#15074); (bso#15047); (bsc#1201493).- Update to 4.15.8 * Use pathref fd instead of io fd in vfs_default_durable_cookie; (bso#15042); * Setting fruit:resource = stream in vfs_fruit causes a panic; (bso#15099); * Add support for bind 9.18; (bso#14986); * logging dsdb audit to specific files does not work; (bso#15076); * vfs_gpfs with vfs_shadowcopy2 fail to restore file if original file had been deleted; (bso#15069); * netgroups support removed; (bso#15087); (bsc#1199247); * net ads info shows LDAP Server: 0.0.0.0 depending on contacted server; (bso#14674); (bsc#1199734); * waf produces incorrect names for python extensions with Python 3.11; (bso#15071); * smbclient commands del & deltree fail with NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100); (bsc#1200556); * vfs_gpfs recalls=no option prevents listing files; (bso#15055); * waf produces incorrect names for python extensions with Python 3.11; (bso#15071); * Compile error in source3/utils/regedit_hexedit.c; (bso#15091); * ldconfig: /lib64/libsmbconf.so.0 is not a symbolic link; (bso#15108); * smbd doesn't handle UPNs for looking up names; (bso#15054); * Out-by-4 error in smbd read reply max_send clamp; (bso#14443); - Move pdb backends from package samba-libs to package samba-client-libs and remove samba-libs requirement from samba-winbind; (bsc#1200964); (bsc#1198255); - Use the canonical realm name to refresh the Kerberos tickets; (bsc#1196224); (bso#14979);- Fix smbclient commands del & deltree failing with NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100); (bsc#1200556).- Revert NIS support removal; (bsc#1199247);- Use requires_eq macro to require the libldb2 version available at samba-dsdb-modules build time; (bsc#1199362);- Add missing samba-client requirement to samba-winbind package; (bsc#1198255);- Update to 4.15.7 * Share and server swapped in smbget password prompt; (bso#14831); * Durable handles won't reconnect if the leased file is written to; (bso#15022); * rmdir silently fails if directory contains unreadable files and hide unreadable is yes; (bso#15023); * SMB2_CLOSE_FLAGS_FULL_INFORMATION fails to return information on renamed file handle; (bso#15038); * vfs_shadow_copy2 breaks "smbd async dosmode" sync fallback; (bso#14957); * shadow_copy2 fails listing snapshotted dirs with shadow:fixinodes; (bso#15035); * PAM Kerberos authentication incorrectly fails with a clock skew error; (bso#15046); * username map - samba erroneously applies unix group memberships to user account entries; (bso#15041); * NT_STATUS_ACCESS_DENIED translates into EPERM instead of EACCES in SMBC_server_internal; (bso#14983); * Simple bind doesn't work against an RODC (with non-preloaded users); (bso#13879); * Crash of winbind on RODC; (bso#14641); * uncached logon on RODC always fails once; (bso#14865); * KVNO off by 100000; (bso#14951); * LDAP simple binds should honour "old password allowed period"; (bso#15001); * wbinfo -a doesn't work reliable with upn names; (bso#15003); * Simple bind doesn't work against an RODC (with non-preloaded users); (bso#13879); * Uninitialized litemask in variable in vfs_gpfs module; (bso#15027); * Regression: create krb5 conf = yes doesn't work with a single KDC; (bso#15016);- Add provides to samba-client-libs package to fix upgrades from previous versions; (bsc#1197995);- Add missing samba-libs requirement to samba-winbind package; (bsc#1198255);- Update to 4.15.6 * Renaming file on DFS root fails with NT_STATUS_OBJECT_PATH_NOT_FOUND; (bso#14169); * Samba does not response STATUS_INVALID_PARAMETER when opening 2 objects with same lease key; (bso#14737); * NT error code is not set when overwriting a file during rename in libsmbclient; (bso#14938); * Fix ldap simple bind with TLS auditing; (bso#14996); * net ads info shows LDAP Server: 0.0.0.0 depending on contacted server; (bso#14674); * Problem when winbind renews Kerberos; (bso#14979); (bsc#1196224); * pam_winbind will not allow gdm login if password about to expire; (bso#8691); * virusfilter_vfs_openat: Not scanned: Directory or special file; (bso#14971); * DFS fix for AIX broken; (bso#13631); * Solaris and AIX acl modules: wrong function arguments; (bso#14974); * Function aixacl_sys_acl_get_file not declared / coredump; (bso#7239); * Regression: Samba 4.15.2 on macOS segfaults intermittently during strcpy in tdbsam_getsampwnam; (bso#14900); * Fix a use-after-free in SMB1 server; (bso#14989); * smb2_signing_decrypt_pdu() may not decrypt with gnutls_aead_cipher_decrypt() from gnutls before 3.5.2; (bso#14968); * Changing the machine password against an RODC likely destroys the domain join; (bso#14984); * authsam_make_user_info_dc() steals memory from its struct ldb_message *msg argument; (bso#14993); * Use Heimdal 8.0 (pre) rather than an earlier snapshot; (bso#14995); * Samba autorid fails to map AD users if id rangesize fits in the id range only once; (bso#14967);- Fix mismatched version of libldb2; (bsc#1196788). - Drop obsolete SuSEfirewall2 service files.- Drop obsolete Samba fsrvp v0->v1 state upgrade functionality; (bsc#1080338).- Fix ntlm authentications with "winbind use default domain = yes"; (bso#13126); (bsc#1173429); (bsc#1196308).- Fix samba-ad-dc status warning notification message by disabling systemd notifications in bgqd; (bsc#1195896); (bso#14947).- libldb version mismatch in Samba dsdb component; (bsc#1118508);- Update to 4.15.5 * CVE-2021-44141: UNIX extensions in SMB1 disclose whether the outside target of a symlink exists; (bso#14911); (bsc#1193690). * CVE-2021-44142: Out-of-Bound Read/Write on Samba vfs_fruit module; (bso#14914); (bsc#1194859). * CVE-2022-0336: Re-adding an SPN skips subsequent SPN conflict checks; bso#14950); (bsc#1195048).- CVE-2021-44141: Information leak via symlinks of existance of files or directories outside of the exported share; (bso#14911); (bsc#1193690); - CVE-2021-44142: Out-of-bounds heap read/write vulnerability in VFS module vfs_fruit allows code execution; (bso#14914); (bsc#1194859); - CVE-2022-0336: Samba AD users with permission to write to an account can impersonate arbitrary services; (bso#14950); (bsc#1195048);- Update to 4.15.4 * Duplicate SMB file_ids leading to Windows client cache poisoning; (bso#14928); * Failed to parse NTLMv2_RESPONSE length 95 - Buffer Size Error - NT_STATUS_BUFFER_TOO_SMALL; (bso#14932); * kill_tcp_connections does not work; (bso#14934); * Can't connect to Windows shares not requiring authentication using KDE/Gnome; (bso#14935); * smbclient -L doesn't set "client max protocol" to NT1 before calling the "Reconnecting with SMB1 for workgroup listing" path; (bso#14939); * Cross device copy of the crossrename module always fails; (bso#14940); * symlinkat function from VFS cap module always fails with an error; (bso#14941); * Fix possible fsp pointer deference; (bso#14942); * Missing pop_sec_ctx() in error path inside close_directory(); (bso#14944); * "smbd --build-options" no longer works without an smb.conf file; (bso#14945);- Use pkgconfig(krb5) as dependency for the -devel package: allow OBS to pick the right flavor of krb5-devel (full vs mini). - Do not require the 'krb5' symbol by samba-client-libs: this package has an automatic dependency due to linkage on libgssapi_krb5.so.2. Automatic deps are always better. - Do not require the 'krb5' symbol from samba-libs: samba-libs requires samba-client-libs, which in turn requires krb5 libraries. Samba-libs itself has no need for krb5 (but get it indirectly anyway).- Reorganize libs packages. Split samba-libs into samba-client-libs, samba-libs, samba-winbind-libs and samba-ad-dc-libs, merging samba public libraries depending on internal samba libraries into these packages as there were dependency problems everytime one of these public libraries changed its version (bsc#1192684). The devel packages are merged into samba-devel. - Rename package samba-core-devel to samba-devel - Add python-rpm-macros to build requirements - Update the symlink create by samba-dsdb-modules to private samba ldb modules following libldb2 changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba- Update to 4.15.3 * Recursive directory delete with veto files is broken in 4.15.0; (bso#14878); * A directory containing dangling symlinks cannot be deleted by SMB2 alone when they are the only entry in the directory; (bso#14879); * SIGSEGV in rmdir_internals/synthetic_pathref - dirfsp is used uninitialized in rmdir_internals(); (bso#14892); * MaxQueryDuration not honoured in Samba AD DC LDAP; (bso#14694); * The CVE-2020-25717 username map [script] advice has undesired side effects for the local nt token; (bso#14901); (bsc#1192849); * User with multiple spaces (eg FredNurk) become un-deletable; (bso#14902); * Avoid storing NTTIME_THAW (-2) as value on disk; (bso#14127); * smbXsrv_client_global record validation leads to crash if existing record points at non-existing process; (bso#14882); * Crash in vfs_fruit asking for fsp_get_io_fd() for an XATTR call; (bso#14890); * Samba process doesn't log to logfile; (bso#14897); * set_ea_dos_attribute() fallback calling get_file_handle_for_metadata() triggers locking.tdb assert; (bso#14907); * Kerberos authentication on standalone server in MIT realm broken; (bso#14922); * Segmentation fault when joining the domain; (bso#14923); * Support for ROLE_IPA_DC is incomplete; (bso#14903); * rpcclient cannot connect to ncacn_ip_tcp services anymore; (bso#14767); * winexe crashes since 4.15.0 after popt parsing; (bso#14893); * net ads status -P broken in a clustered environment; (bso#14908); * Memory leak if ioctl(FSCTL_VALIDATE_NEGOTIATE_INFO) fails before smbd_smb2_ioctl_send; (bso#14788); * winbindd doesn't start when "allow trusted domains" is off; (bso#14899); * smbclient login without password using '-N' fails with NT_STATUS_INVALID_PARAMETER on Samba AD DC; (bso#14883); * A schannel client incorrectly detects a downgrade connecting to an AES only server; (bso#14912); * Possible null pointer dereference in winbind; (bso#14921); * Fix -k legacy option for client tools like smbclient, rpcclient, net, etc.; (bso#14846); * Add Debian 11 CI bootstrap support; (bso#14872); * Crash in recycle_unlink_internal(); (bso#14888);- Fix dependency problem upgrading from libndr0 to libndr2 and from libsamba-credentials0 to libsamba-credentials1; (bsc#1192684);- Fix regression introduced by CVE-2020-25717 patches, winbindd does not start when 'allow trusted domains' is off; (bso#14899); - Update to 4.15.2 * CVE-2016-2124: SMB1 client connections can be downgraded to plaintext authentication; (bso#12444); (bsc#1014440); * CVE-2020-25717: A user on the domain can become root on domain members; (bso#14556); (bsc#1192284); * CVE-2020-25718: Samba AD DC did not correctly sandbox Kerberos tickets issued by an RODC; (bso#14558); (bsc#1192246); * CVE-2020-25719: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets; (bso#14561); (bsc#1192247); * CVE-2020-25721: Kerberos acceptors need easy access to stable AD identifiers (eg objectSid); (bso#14557); (bsc#1192505); * CVE-2020-25722: Samba AD DC did not do suffienct access and conformance checking of data stored; (bso#14564); (bsc#1192283); * CVE-2021-3738: Use after free in Samba AD DC RPC server; (bso#14468); (bsc#1192215); * CVE-2021-23192: Subsequent DCE/RPC fragment injection vulnerability; (bso#14875); (bsc#1192214); - Update to 4.15.1 * vfs_shadow_copy2: core dump in make_relative_path; (bso#14682); * Log clutter from filename_convert_internal; (bso#14685); * MacOSX compilation fixes; (bso#14862); * rodc_rwdc test flaps; (bso#14868); * Provide a fix for MS CVE-2020-17049 in Samba [SECURITY] 'Bronze bit' S4U2Proxy Constrained Delegation bypass in Samba with embedded Heimdal; (bso#14642); * Python ldb.msg_diff() memory handling failure; (bso#14836); * "in" operator on ldb.Message is case sensitive; (bso#14845); * Release LDB 2.4.1 for Samba 4.15.1; (bso#14848); * samldb_krbtgtnumber_available() looks for incorrect string; (bso#14854); * Fix Samba support for UF_NO_AUTH_DATA_REQUIRED; (bso#14871); * Allow special chars like "@" in samAccountName when generating the salt; (bso#14874); * Correctly ignore comments in CTDB public addresses file; (bso#14826); * Fix transit path validation; (bso#12998); * Fix that child winbindd logs to log.winbindd instead of log.wb-; (bso#14852); * SMB3 cancel requests should only include the MID together with AsyncID when AES-128-GMAC is used; (bso#14855); * Prepare to operate with MIT krb5 >= 1.20; (bso#14870); * Heimdal prefers RC4 over AES for machine accounts; (bso#14864);- Enable samba-tool without ad dc.- Adjust spec to use pam macros; (bsc#1191046).- Adjust spec for size * allow some Recommends instead Requires to be configured for cifs-utils, samba-libs-python3 & samba-gpupdate; (bsc#1182847). * remove fam, undocumented and unneeded.- Add missing build dependency on bison when building with the embedded Heimdal Kerberos- Update to 4.15.0 * Removed SMB development dialects SMB2_22, SMB2_24 and SMB3_10 * VFS layer modernized. * Add the ability to set allow/deny lists for zone transfer clients in Bind DLZ plugin * Server multi-channel support no longer experimental * Improved command line user experience, unifying the options in different commands * Winbindd no longer scans trusted domains on startup and will use enterprise principals by default. * The net utility is now able to support the offline domain join feature * New options for 'samba-tool dns zoneoptions' for aging control and to mark old records as static or dynamic * DNS tombstones are now deleted as appropriate and use a consistent timestamp format * The 'samba-tool dns update' command validates and rejects now malformed IPv4 and IPv6 addresses * The 'samba-tool domain backup' command correctly takes out locks against concurrent modification during backup when using the LMDB backend * TruACL support has been removed * NIS support has been removed- Fix 'net rpc' authentication when using the machine account; (bsc#1189017); (bso#14796);- Fix dependency problem upgrading from libndr0 to libndr1; (bsc#1189875); - Fix dependency problem upgrading from libsmbldap0 to libsmbldap2; (bsc#1189875); - Fix wrong kvno exported to keytab after net ads changetrustpw due to replication delay; (bsc#1188727); - Add Certificate Auto Enrollment Policy; (jsc#SLE-18456). - Update to 4.13.10 * s3: smbd: Ensure POSIX default ACL is mapped into returned Windows ACL for directory handles; (bso#14708); * Take a copy to make sure we don't reference free'd memory; (bso#14721); * s3: lib: Fix talloc heirarcy error in parent_smb_fname(); (bso#14722); * s3: smbd: Remove erroneous TALLOC_FREE(smb_fname_parent) in change_file_owner_to_parent() error path; (bso#14736); * samba-tool: Give better error information when the 'domain backup restore' fails with a duplicate SID; (bso#14575); * smbd: Correctly initialize close timestamp fields; (bso#14714); * Spotlight RPC service doesn't work with vfs_glusterfs; (bso#14740); * ctdb: Fix a crash in run_proc_signal_handler(); (bso#14475); * gensec_krb5: Restore ipv6 support for kpasswd; (bso#14750); * smbXsrv_{open,session,tcon}: Protect smbXsrv_{open,session,tcon}_global_traverse_fn against invalid records; (bso#14752); * samba-tool domain backup offline doesn't work against bind DLZ backend; (bso#14027); * netcmd: Use next_free_rid() function to calculate a SID for restoring a backup; (bso#14669); - Update to 4.13.9 * s3: smbd: SMB1 SMBsplwr doesn't send a reply packet on success; (bso#14696); * Add documentation for dsdb_group_audit and dsdb_group_json_audit to "log level", synchronise "log level" in smb.conf with the code; (bso#14689); * Fix smbd panic when two clients open same file; (bso#14672); * Fix memory leak in the RPC server; (bso#14675); * s3: smbd: Fix deferred renames; (bso#14679); * s3-iremotewinspool: Set the per-request memory context; (bso#14675); * rpc_server3: Fix a memleak for internal pipes; (bso#14675); * third_party: Update socket_wrapper to version 1.3.2; (bso#11899); * third_party: Update socket_wrapper to version 1.3.3; (bso#14639); * idmap_rfc2307 and idmap_nss return wrong mapping for uid/gid conflict; (bso#14663); * Fix the build on OmniOS; (bso#14288); - Update to 4.13.8 * CVE-2021-20254: Fix buffer overrun in sids_to_unixids(); (bso#14571 - Update to 4.13.7 * Release with dependency on ldb version 2.2.1.- CVE-2021-20254 Buffer overrun in sids_to_unixids(); (bnc#14571); (bsc#1184677).- Fix offline domain backup not possible using lmdb version >= 0.9.26; (bso#14676); - Require libldb >= 2.2.1; (bsc#1183572); (bsc#1183574); - Update to 4.13.6 * CVE-2020-27840: samba: Unauthenticated remote heap corruption via bad DNs; (bso#14595); (bsc#1183572). * CVE-2021-20277: samba: out of bounds read in ldb_handler_fold; (bso#14655); (bsc#1183574). - Update to 4.13.5 * s3:modules:vfs_virusfilter: Recent talloc changes cause infinite start-up failure; (bso#14634); * s3: libsmb: Add missing cli_tdis() in error path if encryption setup failed on temp proxy connection; (bso#13992); * smbd: In conn_force_tdis_done() when forcing a connection closed force a full reload of services; (bso#14604); * dbcheck: Check Deleted Objects and reduce noise in reports about expired tombstones (bso#14593); * s3: Fix fcntl waf configure check; (bso#14503); * s3/auth: Implement "winbind:ignore domains"; (bso#14602); * smbd: Use fsp->conn->session_info for the initial delete-on-close token; (bso#14617); * s3: VFS: nfs4_acls. Add missing TALLOC_FREE(frame) in error path; (bso#14648); * classicupgrade: Treat old never expires value right; (bso#14624); * g_lock: Fix uninitalized variable reads; (bso#14636); * s3:pysmbd: Fix fd leak in py_smbd_create_file(); (bso#13898); * lib:util: Avoid free'ing our own pointer; (bso#14625); * HEIMDAL: krb5_storage_free(NULL) should work; (bso#12505);- Spec file fixes around systemd and requires; (bsc#1182830); - Align systemd service unit files with upstream provided ones.- Update to 4.13.4 * Work around special SMB2 IOCTL response behavior of NetApp Ontap 7.3.7; (bso#14607); * Temporary DFS share setup doesn't set case parameters in the same way as a regular share definition does; (bso#14612); * lib: Avoid declaring zero-length VLAs in various messaging functions; (bso#14605); * Do not create an empty DB when accessing a sam.ldb; (bso#14579); * vfs_fruit may close wrong backend fd; (bso#14596); * Temporary DFS share setup doesn't set case parameters in the same way as a regular share definition does; (bso#14612); * vfs_virusfilter: Allocate separate memory for config char*; (bso#14606); * vfs_fruit may close wrong backend fd; (bso#14596); * Work around special SMB2 IOCTL response behavior of NetApp Ontap 7.3.7; (bso#14607); * The cache directory for the user gencache should be created recursively; (bso#14601); * Be more flexible with repository names in CentOS 8 test environments; (bso#14594);- Uninstalling samba-client: Failed to disable unit, cifs.service does not exists; (bsc#1180388);- Update to 4.13.3 + libcli: smb2: Never print length if smb2_signing_key_valid() fails for crypto blob; (bso#14210); + s3: modules: gluster. Fix the error I made in preventing talloc leaks from a function; (bso#14486); + s3: smbd: Don't overwrite contents of fsp->aio_requests[0] with NULL via TALLOC_FREE(); (bso#14515); + s3: spoolss: Make parameters in call to user_ok_token() match all other uses; (bso#14568); + s3: smbd: Quiet log messages from usershares for an unknown share; (bso#14590); + samba process does not honor max log size; (bso#14248); + vfs_zfsacl: Add missing inherited flag on hidden "magic" everyone@ ACE; (bso#14587); + s3-libads: Pass timeout to open_socket_out in ms; (bso#13124); + s3-vfs_glusterfs: Always disable write-behind translator; (bso#14486); + smbclient: Fix recursive mget; (bso#14517); + clitar: Use do_list()'s recursion in clitar.c; (bso#14581); + manpages/vfs_glusterfs: Mention silent skipping of write-behind translator; (bso#14486); + vfs_shadow_copy2: Preserve all open flags assuming ROFS; (bso#14573); + interface: Fix if_index is not parsed correctly; (bso#14514);- Update to 4.13.2 + s3: modules: vfs_glusterfs: Fix leak of char **lines onto mem_ctx on return; (bso#14486); + RN: vfs_zfsacl: Only grant DELETE_CHILD if ACL tag is special; (bso#14471); + smb.conf.5: Add clarification how configuration changes reflected by Samba; (bso#14538); + daemons: Report status to systemd even when running in foreground; (bso#14552); + DNS Resolver: Support both dnspython before and after 2.0.0; (bso#14553); + s3-vfs_glusterfs: Refuse connection when write-behind xlator is present; (bso#14486); + provision: Add support for BIND 9.16.x; (bso#14487); + ctdb-common: Avoid aliasing errors during code optimization; (bso#14537); + libndr: Avoid assigning duplicate versions to symbols; (bso#14541); + docs: Fix default value of spoolss:architecture; (bso#14522); + winbind: Fix a memleak; (bso#14388); + s4:dsdb:acl_read: Implement "List Object" mode feature; (bso#14531); + docs-xml/manpages: Add warning about write-behind translator for vfs_glusterfs; (bso#14486); + nsswitch/nsstest.c: Avoid nss function conflicts with glibc nss.h. + vfs_shadow_copy2: Avoid closing snapsdir twice; (bso#14530); + third_party: Update resolv_wrapper to version 1.1.7; (bso#14547); + examples:auth: Do not install example plugin; (bso#14550); + ctdb-recoverd: Drop unnecessary and broken code; (bso#14513); + RN: vfs_zfsacl: Only grant DELETE_CHILD if ACL tag is special; (bso#14471);- Adjust smbcacls '--propagate-inheritance' feature to align with upstream; (bsc#1178469).- Update to samba 4.13.1 + CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with easily crafted records; (bsc#1177613); (bso#14472); + CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994); (bso#14436); + CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify; (bsc#1173902); (bso#14434); - Adjust systemd tmpfiles.d configuration, use /run/samba instead of /var/run/samba; (bsc#1177355);- Fix vfs_ceph query_directory regression; (bso#14519) - Drop liburing-devel for SLE15-SP2; (bsc#1177245)- Register CTDB recovery lock holder with ceph-mgr - Add liburing-devel dependency- Update to samba 4.13.0 + Require Python 3.6 + Move wide links functionality into VFS module + Deprecate NT4-like 'classic' Samba domain controllers + Deprecate SMBv1 only protocol options + Remove deprecated "ldap ssl ads" option + Unify asynchronous DCE-RPC server; (jsc#SES-645) + Replay multichannel lease break requests; (bso#11897); (jsc#SES-655) + Drop internal byteorder.h header from util-devel package + Remove final code for the AD DC LDAP backend + Add AD DC Group Policy Scripts + Only use gnutls_aead_cipher_encryptv2() for GnuTLS > 3.6.14; (bso#14399) + Fix %U substitutions if it contains a domain name; (bso#14467) + Fix krb5.conf creation for 'net ads join'; (bso#14479) + Fix build problem if libbsd-dev is not installed; (bso#14482) + Toggle vfs_snapper using "--with-shared-modules"; (bso#14437) + Fix idmap_ad RFC4511 response handling; (bso#14465) + Fix panic in get_lease_type(); (bso#14428)- Update to samba 4.11.13 + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2 against unencrypted passwords; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Support "server require schannel:WORKSTATION$ = no" about unsecure configurations; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): s4 torture rpc: repeated bytes in client challenge; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): libcli/auth: Reject weak client challenges in netlogon_creds_server_init() "server require schannel:WORKSTATION$ = no"; (bsc#1176579); (bso#14497); - Update to samba 4.11.12 + s3: libsmb: Fix SMB2 client rename bug to a Windows server; (bso#14403); + dsdb: Allow "password hash userPassword schemes = CryptSHA256" to work on RHEL7; (bso#14424); + dbcheck: Allow a dangling forward link outside our known NCs; (bso#14450); + lib/debug: Set the correct default backend loglevel to MAX_DEBUG_LEVEL; (bso#14426); + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428); + lib/util: do not install "test_util_paths"; (bso#14370); + lib:util: Fix smbclient -l basename dir; (bso#14345); + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428); + util: Allow symlinks in directory_create_or_exist; (bso#14166); + docs: Fix documentation for require_membership_of of pam_winbind; (bso#14358); + s3:winbind:idmap_ad: Make failure to get attrnames for schema mode fatal; (bso#14425);- Add obsoletes to libsmbldap2 package to fix upgrades from previous versions; (bsc#1172810);- Fix net command unable to negotiate SMB2; (bsc#1174120);- Update to samba 4.11.11 + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ and VLV combined; (bso#14364); (bsc#1173159] + CVE-2020-10745: invalid DNS or NBT queries containing dots use several seconds of CPU each; (bso#14378); (bsc#1173160). + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP server with paged_result or VLV; (bso#14402); (bsc#1173161) + CVE-2020-14303: Endless loop from empty UDP packet sent to AD DC nbt_server; (bso#14417); (bsc#1173359). - Update to samba 4.11.10 + Fix segfault when using SMBC_opendir_ctx() routine for share folder that contains incorrect symbols in any file name; (bso#14374). + vfs_shadow_copy2 doesn't fail case looking in snapdirseverywhere mode; (bso#14350) + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr; (bso#14413). + Malicous SMB1 server can crash libsmbclient; (bso#14366) + winbindd: Fix a use-after-free when winbind clients exit; (bso#14382) + ldb: Bump version to 2.0.11, LMDB databases can grow without bounds. (bso#14330) - Update to samba 4.11.9 + nmblib: Avoid undefined behaviour in handle_name_ptrs(); (bso#14242). + 'samba-tool group' commands do not handle group names with special chars correctly; (bso#14296). + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo is not valid; (bso#14237). + Missing check for DMAPI offline status in async DOS attributes; (bso#14293). + smbd: Ignore set NTACL requests which contain S-1-5-88 NFS ACEs; (bso#14307). + vfs_recycle: Prevent flooding the log if we're called on non-existant paths; (bso#14316) + smbd mistakenly updates a file's write-time on close; (bso#14320). + RPC handles cannot be differentiated in source3 RPC server; (bso#14359). + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313). + nsswitch: Fix use-after-free causing segfault in _pam_delete_cred; (bso#14327). + Fix fruit:time machine max size on arm; (bso#13622) + CTDB recovery corner cases can cause record resurrection and node banning; (bso#14294). + ctdb: Fix a memleak; (bso#14348). + libsmb: Don't try to find posix stat info in SMBC_getatr(). + ctdb-tcp: Move free of inbound queue to TCP restart; (bso#14295); (bsc#1162680). + s3/librpc/crypto: Fix double free with unresolved credential cache; (bso#14344); (bsc#1169095) + s3:libads: Fix ads_get_upn(); (bso#14336). + CTDB recovery corner cases can cause record resurrection and node banning; (bso#14294) + Starting ctdb node that was powered off hard before results in recovery loop; (bso#14295); (bsc#1162680). + ctdb-recoverd: Avoid dereferencing NULL rec->nodemap; (bso#14324) - Update to samba 4.11.8 + CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with ASQ; (bso#14331); (bsc#1169850); + CVE-2020-10704: LDAP Denial of Service (stack overflow) in Samba AD DC; (bso#14334); (bsc#1169851); - Update to samba 4.11.7 + s3: lib: nmblib. Clean up and harden nmb packet processing; (bso#14239). + s3: VFS: full_audit. Use system session_info if called from a temporary share definition; (bso#14283) + dsdb: Correctly handle memory in objectclass_attrs; (bso#14258). + ldb: version 2.0.9, Samba 4.11 and later give incorrect results for SCOPE_ONE searches; (bso#14270) + auth: Fix CIDs 1458418 and 1458420 Null pointer dereferences; (bso#14247). + smbd: Handle EINTR from open(2) properly; (bso#14285) + winbind member (source3) fails local SAM auth with empty domain name; (bso#14247) + winbindd: Handling missing idmap in getgrgid(); (bso#14265). + lib:util: Log mkdir error on correct debug levels; (bso#14253). + wafsamba: Do not use 'rU' as the 'U' is deprecated in Python 3.9; (bso#14266). + ctdb-tcp: Make error handling for outbound connection consistent; (bso#14274). - Update to samba 4.11.6 + pygpo: Use correct method flags; (bso#14209). + vfs_ceph_snapshots: Fix root relative path handling; (bso#14216); (bsc#1141320). + Avoiding bad call flags with python 3.8, using METH_NOARGS instead of zero; (bso#14209). + source4/utils/oLschema2ldif: Include stdint.h before cmocka.h; (bso#14218). + docs-xml/winbindnssinfo: Clarify interaction with idmap_ad etc; (bso#14122). + smbd: Fix the build with clang; (bso#14251). + upgradedns: Ensure lmdb lock files linked; (bso#14199). + s3: VFS: glusterfs: Reset nlinks for symlink entries during readdir; (bso#14182). + smbc_stat() doesn't return the correct st_mode and also the uid/gid is not filled (SMBv1) file; (bso#14101). + librpc: Fix string length checking in ndr_pull_charset_to_null(); (bso#14219). + ctdb-scripts: Strip square brackets when gathering connection info; (bso#14227).- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);- Installing: samba - samba-ad-dc.service does not exist and unit not found; (bsc#1171437);- Fix samba_winbind package is installing python3-base without python3 package; (bsc#1169521);- Require libldb2 >= 2.0.10 after security release.- CVE-2020-10704: LDAP Denial of Service (stack overflow) in Samba AD DC; (bso#14334); (bsc#1169851); - CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with ASQ; (bso#14331); (bsc#1169850);- Fix smbclient crash with double free (with unresolved krb5 credential cache); (bso#14344); (bsc#1169095).- Starting ctdb node that was powered off hard before results in recovery loop; (bso#14295); (bsc#1162680).- CTDB doesn't retry outgoing connections on bind (and some other) failures; (bso#14274); (bsc#1162680).- Revert: Allow idmap_rid to have primary group other than "Domain Users"; (bsc#1087931).- Fix nmbstatus not reporting detailed information about workgroups; (bsc#1159464); - Fix querying all names registered within broadcast area; (bso#8927);- Update to samab 4.11.5 + CVE-2019-14902: Replication of ACLs down subtree on AD Directory is not automatic; (bso#12497); (bsc#1160850). + CVE-2019-19344: Fix server crash with dns zone scavenging = yes; (bso#14050); (bsc#1160852). + CVE-2019-14907: server-side crash after charset conversion failure (eg during NTLMSSP processing); (bso#14208); (bsc#1160888). - Update to samba 4.11.4 + Ensure SMB1 cli_qpathinfo2() doesn't return an inode number; (bso#14161). + Ensure we don't call cli_RNetShareEnum() on an SMB1 connection; (bso#14174). + NT_STATUS_ACCESS_DENIED becomes EINVAL when using SMB2 in SMBC_opendir_ctx; (bso#14176). + SMB2 - Ensure we use the correct session_id if encrypting an interim response; (bso#14189). + Prevent smbd crash after invalid SMB1 negprot; (bso#14205). + printing: Fix %J substition; (bso#13745). + Remove now unneeded call to cmdline_messaging_context(); (bso#13925). + Fix incomplete conversion of former parametric options; (bso#14069). + Fix sync dosmode fallback in async dosmode codepath; (bso#14070). + vfs_fruit returns capped resource fork length; (bso#14171). + libnet_join: Add SPNs for additional-dns-hostnames entries; (bso#14116). + smbd: Increase a debug level; (bso#14211). + Prevent azure ad connect from reporting discovery errors reference-value-not-ldap-conformant; (bso#14153). + krb5_plugin: Fix developer build with newer heimdal system library; (bso#14179). + replace: Only link libnsl and libsocket if required; (bso#14168); + ctdb: Incoming queue can be orphaned causing communication; breakdown; (bso#14175). + ldb: Release ldb 2.0.8. Cross-compile will not take cross-answers or cross-execute; (bso#13846). + heimdal-build: Avoid hard-coded /usr/include/heimdal in asn1_compile-generated code; (bso#13856).- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).- Update to samba 4.11.3 + CVE-2019-14861: DNSServer RPC server crash, an authenticated user can crash the DCE/RPC DNS management server by creating records with matching the zone name; (bso#14138); (bsc#1158108). + CVE-2019-14870: DelegationNotAllowed not being enforced, the DelegationNotAllowed Kerberos feature restriction was not being applied when processing protocol transition requests (S4U2Self), in the AD DC KDC; (bso#14187); (bsc#1158109).- CVE-2019-14861: DNSServer RPC server crash, an authenticated user can crash the DCE/RPC DNS management server by creating records with matching the zone name; (bso#14138); (bsc#1158108). - CVE-2019-14870: DelegationNotAllowed not being enforced, the DelegationNotAllowed Kerberos feature restriction was not being applied when processing protocol transition requests (S4U2Self), in the AD DC KDC; (bso#14187); (bsc#1158109).- Update to samba 4.11.2 + CVE-2019-10218: Client code can return filenames containing path separators; (bsc#1144902); (bso#14071). + CVE-2019-14833: Samba AD DC check password script does not receive the full password; (bso#12438). + CVE-2019-14847: User with "get changes" permission can crash AD DC LDAP server via dirsync; (bso#14040). - Fixes from 4.11.1 + Overlinking libreplace against librt and pthread against every binary or library causes issues; (bso#14140); + kpasswd fails when built with MIT Kerberos; (bso#14155); + Fix spnego fallback from kerberos to ntlmssp in smbd server; (bso#14106); + Stale file handle error when using mkstemp on a share; (bso#14137); + non-AES schannel broken; (bso#14134); + Joining Active Directory should not use SAMR to set the password; (bso#13884); + smbclient can blunder into the SMB1 specific cli_RNetShareEnum() call on an SMB2 connection; (bso#14152); + Deleted records can be resurrected during recovery; (bso#14147); + getpwnam and getpwuid need to return data for ID_TYPE_BOTH group; (bso#14141); + winbind does not list forest trusts with additional trust attributes; (bso#14130); + fault report points to outdated documentation; (bso#14139); + pam_winbind with krb5_auth or wbinfo -K doesn't work for users of trusted domains/forests; (bso#14124); + classicupgrade results in uncaught exception - a bytes-like object is required, not 'str'; (bso#14136); + pod2man is not longer required, stop checking at build time; (bso#14131); + Exit code of ctdb nodestatus should not be influenced by deleted nodes; (bso#14129); + username/password authentication doesn't work with CUPS and smbspool; (bso#14128); + smbc_readdirplus() is incompatible with smbc_telldir() and smbc_lseekdir(); (bso#14094);- CVE-2019-14847: User with "get changes" permission can crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598); - CVE-2019-10218: Client code can return filenames containing path separators; (bso#14071); (bsc#1144902);- CVE-2019-14833: samba: Accent with "check script password" Samba AD DC check password script does not receive the full password; (bso#12438); (bsc#1154289).- Update to samba 4.11.0 + For details on all items see WHATSNEW.txt in samba-doc package + Python2 runtime support removed; python 3.4 or later required + Security improvements: - SMB1 disabled by default - lanman and plaintext authentication deprecated - winbind: PAM_AUTH and NTLM_AUTH events logged - GnuTLS 3.2 required; system FIPS mode setting honored + CephFS Snapshot integration, exposed as previous file versions + ctdb changes: - onnode -o option removed - ctdbd logs when using more than 90% of a CPU thread - CTDB_MONITOR_SWAP_USAGE variable removed + AD Domain controller improvements: - Upgrade AD databse format - BIND9_FLATFILE deprecated - default process model chagned to prefork - bind9 dns operation duration logging - Default schema updated to 2012_R2; function level is unchanged - many performance improvements + Configuration webserver support removed- Fix broken username/password authentication with CUPS and smbspool; (bsc#1152143); (bso#14128).- Fix auth problems when printing via smbspool backend with kerberos; (bnc#1148539); (bso#13832).- Update to samba 4.10.8 + CVE-2019-10197: user escape from share path definition; (bso#14035); (bsc#1141267);- Fix build on newer systems by modifying samba.spec to use consistent non-relative paths for pammodules in configure line and specification of pam_winbind.so library to package.- Update to samba 4.10.7 + Unable to create or rename file/directory inside shares configured with vfs_glusterfs_fuse module; (bso#14010). + build: Allow build when '--disable-gnutls' is set; (bso#13844) + samba-tool: Add 'import samba.drs_utils' to fsmo.py; (bso#13973). + Fix 'Error 32 determining PSOs in system' message on old DB with FL upgrade; (bso#14008). + s4/libnet: Fix joining a Windows pre-2008R2 DC; (bso#14021) + join: Use a specific attribute order for the DsAddEntry nTDSDSA object; (bso#14046). + vfs_catia: Pass stat info to synthetic_smb_fname(); (bso#14015). + lookup_name: Allow own domain lookup when flags == 0; (bso#14091). + s4 librpc rpc pyrpc: Ensure tevent_context deleted last; (bso#13932). + DEBUGC and DEBUGADDC doesn't print into a class specific log file; (bso#13915). + Request to keep deprecated option "server schannel", VMWare Quickprep requires "auto"; (bso#13949). + dbcheck: Fallback to the default tombstoneLifetime of 180 days; (bso#13967). + dnsProperty fails to decode values from older Windows versions; (bso#13969). + samba-tool: Use only one LDAP modify for dns partition fsmo role transfer; (bso#13973). + third_party: Update waf to version 2.0.17; (bso#13960). + netcmd: Allow 'drs replicate --local' to create partitions; (bso#14051). + ctdb-config: Depend on /etc/ctdb/nodes file; (bso#14017).- CVE-2019-10197: user escape from share path definition; (bso#14035); (bsc#1141267).- Prepare for use future use of kernel keyrings, modify /etc/pam.d/samba to include pam_keyinit.so; (bsc#1144059).- Update samba-winbind script to work with systemd; (bsc#1132739); - Drop samba dhcpcd hook scripts - Update to samba 4.10.6 + s3: winbind: Fix crash when invoking winbind idmap scripts; (bso#13956). + smbd does not correctly parse arguments passed to dfree and quota scripts; (bso#13964). + samba-tool dns: use bytes for inet_ntop; (bso#13965). + samba-tool domain provision: Fix --interactive module in python3; (bso#13828). + ldb_kv: Skip @ records early in a search full scan; (bso#13893). + docs: Improve documentation of "lanman auth" and "ntlm auth" connection; (bso#13981). + python/ntacls: Use correct "state directory" smb.conf option instead of "state dir"; (bso#14002). + registry: Add a missing include; (bso#13840). + Fix SMB guest authentication; (bso#13944). + AppleDouble conversion breaks Resourceforks; (bso#13958). + vfs_fruit makes direct use of syscalls like mmap() and pread(); (bso#13968). + s3:mdssvc: Fix flex compilation error; (bso#13987). + s3/vfs_glusterfs[_fuse]: Avoid using NAME_MAX directly; (bso#13872). + dsdb:samdb: schemainfo update with relax control; (bso#13799). + s3:util: Move static file_pload() function to lib/util; (bso#13964). + smbd: Fix a panic; (bso#13957). + ldap server: Generate correct referral schemes; (bso#12478). + s4 dsdb/repl_meta_data: fix use after free in dsdb_audit_add_ldb_value; (bso#13941). + s4 dsdb: Fix use after free in samldb_rename_search_base_callback; (bso#13942). + dsdb/repl: we need to replicate the whole schema before we can apply it; (bso#12204). + ldb: Release ldb 1.5.5; (bso#12478). + Schema replication fails if link crosses chunk boundary backwards; (bso#13713). + 'samba-tool domain schemaupgrade' uses relax control and skips the schemaInfo update provision; (bso#13799). + dsdb_audit: avoid printing "... remote host [Unknown] SID [(NULL SID)] ..."; (bso#13916). + python/ntacls: We only need security.SEC_STD_READ_CONTROL in order to get the ACL; (bso#13917). + s3:loadparm: Ensure to truncate FS Volume Label at multibyte boundary; (bso#13947). + Using Kerberos credentials to print using spoolss doesn't work; (bso#13939). + wafsamba: Use native waf timer; (bso#13998). + ctdb-scripts: Fix tcp_tw_recycle existence check; (bso#13984).- Update to samba-4.10.5 (including updates for 4.10.4, 4.10.3) + CVE-2019-12435 rpc/dns: Avoid NULL deference if zone not found in DnssrvOperation2; (bso#13922); (bsc#1137815). + CVE-2019-12436 dsdb/paged_results: Ignore successful results without messages; (bso#13951); (bsc#1137816). - Update to samba-4.10.4 + s3: SMB1: Don't allow recvfile on stream fsp's; (bso#13938). + py/provision: Fix for Python 2.6; (bso#13882). + netcmd: Fix 'passwordsettings --max-pwd-age' command; (bso#13873). + s3-libnet_join: 'net ads join' to child domain fails when using "-U admin@forestroot"; (bso#13861). + vfs_ceph: Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245). + vfs_ceph: Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697). + ctdb-common: Avoid race between fd and signal events; (bso#13895). + ctdb-common: Fix memory leak in run_proc; (bso#13943). + lib: Initialize getline() arguments; (bso#13892). + winbind: Fix overlapping id ranges; (bco#13903). + lib util debug: Increase format buffer to 4KiB; (bso#13902). + nsswitch pam_winbind: Fix Asan use after free; (bso#13927). + s4 lib socket: Ensure address string owned by parent struct; (bso#13929). + s3 rpc_client: Fix Asan stack use after scope; (bso#13936). + s3:smbd: Handle IO_REPARSE_TAG_DFS in SMB_FIND_FILE_FULL_DIRECTORY_INFO; (bso#10097). + smb2_tcon: Avoid STATUS_PENDING completely on tdis; (bso#10344). + smb2_sesssetup: avoid STATUS_PENDING responses for session setup; (bso#12845). + smb2_tcon: Avoid STATUS_PENDING completely on tdis; (bso#13698). + smb2_sesssetup: avoid STATUS_PENDING responses for session setup; (bso#13796). + dbcheck: Fix the err_empty_attribute() check; (bso#13843). + vfs_snapper: Drop unneeded fstat handler; (bso#13858). + vfs_default: Fix vfswrap_offload_write_send() NT_STATUS_INVALID_VIEW_SIZE check; (bso#13862). + smb2_server: Grant all 8192 credits to clients; (bso#13863). + smbd: Implement SMB_FILE_NORMALIZED_NAME_INFORMATION handling; (bso#13919). + s3/vfs_glusterfs: Dynamically determine NAME_MAX; (bso#13872). + s3: modules: ceph: Use current working directory instead of share path; (bso#13918); (bsc#1134452). + winbind: Use domain name from lsa query for sid_to_name cache entry; (bso#13831). + memcache: Increase size of default memcache to 512k; (bso#13865). + docs: Update smbclient manpage for "--max-protocol"; (bso#13857). + s3:utils: If share is NULL in smbcacls, don't print it; (bso#13937). + s3:smbspool: Fix regression printing with Kerberos credentials; (bso#13939). + ctdb-scripts: CTDB restarts failed NFS RPC services by hand, which is incompatible with systemd; (bso#13860). + ctdb-daemon: Revert "We can not assume that just because we could complete a TCP handshake"; (bso#13888). + ctdb-daemon: Never use 0 as a client ID; (bso#13930). + ctdb-common: Fix memory leak; (bso#13943). + s3:debug: Enable logging for early startup failures; (bso#13904) - Update to samba-4.10.3 + CVE-2018-16860: Heimdal KDC: Reject PA-S4U2Self with unkeyed checksum; (bso#13685); (bsc#1134024).- CVE-2019-12435: zone operations can crash rpc server; (bso#13922); (bsc#1137815).- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697). - Add ceph_snapshots VFS module; (jsc#SES-183).- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).- Update to samba-4.10.2: + CVE-2019-3870 (World writable files in Samba AD DC private/ dir); (bso#13834). + CVE-2019-3880 (Save registry file outside share as unprivileged user); (bso#13851). + py/kcc_utils: py2.6 compatibility; (bso#13837). + libcli: permit larger values of DataLength in SMB2_ENCRYPTION_CAPABILITIES of negotiate response; (bso#13869). + regfio: Improve handling of malformed registry hive files; (bso#13840). + ctdb-version: Simplify version string usage; (bso#13789). + lib: Make fd_load work for non-regular files; (bso#13859). + dbcheck: in the middle of the tombstone garbage collection causes replication failures, dbcheck: add --selftest-check-expired-tombstones cmdline option; (bso#13816). + ndr_spoolss_buf: Fix out of scope use of stack variable in NDR_SPOOLSS_PUSH_ENUM_OUT(); (bso#13818). + s4/messaging: Fix undefined reference in linking libMESSAGING-samba4.so; (bso#13854). + acl_read: Fix regression for empty lists; (bso#13836). + s4:dlz make b9_has_soa check dc=@ node; (bso#13841). + s3:client: Fix printing via smbspool backend with kerberos auth; (bso#13832). + s4:librpc: Fix installation of Samba; (bso#13847). + s3:lib: Fix the debug message for adding cache entries; (bso#13848). + s3:utils: Add 'smbstatus -L --resolve-uids' to show username; (bso#13793). + s3:lib: Fix the debug message for adding cache entries; (bso#13848). + s3:waf: Fix the detection of makdev() macro on Linux; (bso#13853). * ctdb-build: Drop creation of .distversion in tarball; (bso#13789). * ctdb-packaging: Test package requires tcpdump, ctdb package should not own system library directory; (bso#13838). - Update to samba-4.10.1: + py/kcc_utils: py2.6 compatibility; (bso#13837); + libcli: permit larger values of DataLength in SMB2_ENCRYPTION_CAPABILITIES of negotiate response; (bso#13869); + regfio: Improve handling of malformed registry hive files; (bso#13840); + ctdb-version: Simplify version string usage; (bso#13789); + lib: Make fd_load work for non-regular files; (bso#13859); + dbcheck in the middle of the tombstone garbage collection causes replication failures, dbcheck: add --selftest-check-expired-tombstones cmdline option; (bso#13816); + ndr_spoolss_buf: Fix out of scope use of stack variable in NDR_SPOOLSS_PUSH_ENUM_OUT(); (bso#13818); + s4/messaging: Fix undefined reference in linking libMESSAGING-samba4.so; (bso#13854); + acl_read: Fix regression for empty lists; (bso#13836); + s4:dlz make b9_has_soa check dc=@ node; (bso#13841); + s3:client: Fix printing via smbspool backend with kerberos auth; (bso#13832); + s4:librpc: Fix installation of Samba; (bso#13847); + s3:lib: Fix the debug message for adding cache entries; (bso#13848); + s3:utils: Add 'smbstatus -L --resolve-uids' to show username; (bso#13793); + s3:lib: Fix the debug message for adding cache entries; (bso#13848); + s3:waf: Fix the detection of makdev() macro on Linux; (bso#13853); + ctdb-build: Drop creation of .distversion in tarball; (bso#13789); + ctdb-packaging: Test package requires tcpdump, ctdb package should not own system library directory; (bso#13838); - Update to samba-4.10.0: + s4-server: Open and close a transaction on sam.ldb at startup; (bso#13760); + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812); + s4/scripting/bin: Open unicode files with utf8 encoding and write + unicode string. + sambaundoguididx: Use the right escaped oder unescaped sam ldb files; (bso#13759); + Fix idmap cache pollution with S-1-22- IDs on winbind hickup; (bso#13813); + passdb: Update ABI to 0.27.2. + lib/winbind_util: Add winbind_xid_to_sid for --without-winbind; (bso#13813); + lib:util: Move debug message for mkdir failing to log level 1; (bso#13823);- MacOS credit accounting breaks with async SESSION SETUP; (bsc#1125601); (bso#13796). - Mac OS X SMB2 implmenetation sees Input/output error or Resource temporarily unavailable and drops connection; (bso#13698)- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).- CVE-2019-3880: Save registry file outside share as unprivileged user; (bso#13851); (bsc#1131060 ).- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0); (bso#13834); (bsc#1130703);- Update to samba-4.9.5 + audit_logging: Remove debug log header and JSON Authentication: prefix; (bso#13714); + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760); + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso# CID: 1433607; (bso#11495); + smbd: uid: Don't crash if 'force group' is added to an existing share connection; (bso#13690); + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility code; (bso#13770); + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803); + s3:utils/smbget fix recursive download with empty source directories; (bso#13199); + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716); + s3:libsmb: cli_smb2_list() can sometimes fail initially on a connection; (bso#13736); + join: Throw CommandError instead of Exception for simple errors; (bso#13747); + ldb: Avoid inefficient one-level searches; (bso#13762); + s3: libsmb: use smb2cli_conn_max_trans_size() in cli_smb2_list(); (bso#13736); + tldap: Avoid use after free errors; (bso#13776); + Fix idmap xid2sid cache churn; (bso#13802); + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812); + s3-smbd: Avoid assuming fsp is always intact after close_file call; (bso#13720); + s3-vfs-fruit: Add close call; (bso#13725); + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746); + s3-vfs: add glusterfs_fuse vfs module; (bso#13774); + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766); + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS) ftruncate and fallocate; (bso#13807); + lib/audit_logging: Actually create talloc; (bso#13737); + netcmd/user: python[3]-gpgme unsupported and replaced by python[3]-gpg; (bso#13728); + dns: Changing onelevel search for wildcard to subtree; (bso#13738); + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721); + sambaundoguididx: Use the right escaped oder unescaped sam ldb files; (bso#13759); + ctdb: Print locks latency in machinereadable stats; (bso#13742); + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786); + audit_logging: auth_json_audit required auth_json; (bso#13715); + man pages: Document prefork process model; (bso#13765); + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773); + s3:auth: ignore create_builtin_guests() failing without a valid idmap configuration; (bso#13697); + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC without trusts; (bso#13722); + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd is not available; (bso#13723); + s4:server: Add support for 'smbcontrol samba shutdown' and 'smbcontrol debug/debuglevel'; (bso#13752); + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616); + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330); + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774); + notifyd: Fix SIGBUS on sparc; (bso#13704); + waf: Check for libnscd; (bso#13787); + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770); + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717); + Recovery lock bug fixes; (bso#13800); + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726); + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727); + vfs_fileid: Fix get_connectpath_ino; (bso#13741); + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).- Fix update-apparmor-samba-profile script after apparmor switched to using named profiles. The change is backwards compatible; (bsc#1126377);- LoadParm().load_default() fails with "Unable to load default file"; (bsc#1089758);- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);- Update to samba-4.9.4 + libcli/smb: Don't overwrite status code; (bso#9175). + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164). + Session setup reauth fails to sign response; (bso#13661). + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677). + vfs_shadow_copy2: Nicely deal with attempts to open previous version for writing; (bso#13688). + Restoring previous version of stream with vfs_shadow_copy2 fails with NT_STATUS_OBJECT_NAME_INVALID fsp->base_fsp->fsp_name; (bso#13455). + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571). + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708) + PEP8: fix E231: missing whitespace after ','. + winbindd: Fix crash when taking profiles;(bso#13629) + CVE-2018-14629 dns: Fix CNAME loop prevention using counter regression; (bso#13600) + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686). + CVE-2018-16853: Do not segfault if client is not set; (bso#13571). + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679) + ctdb-daemon: Exit with error if a database directory does not exist; (bso#13696). + s3:libads: Add net ads leave keep-account option; (bso#13498).- Drop more %if..%endif guards which are idempotent. - Drop requires on ldconfig which are already auto-discovered. - Do not ignore errors from useradd/groupadd.- Remove python2 build dependency from samba-libs; (bsc#1116900);- Update update-apparmor-samba-profile script to ignore the shares's paths containing substitution variables in any place, not only at the beginning of the path.- Update to samba-4.9.3 + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD Internal DNS server; (bso#13600); (bsc#1116319); + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628); (bsc#1116320); + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server; (bso#13674); (bsc#1116322); + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers; (bso#13669); (bsc#1116321); + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos configuration (unsupported); (bso#13678); (bsc#1116324); + CVE-2018-16857: Bad password count in AD DC not always effective; window; (bso#13683); (bsc#1116323);- Update to samba-4.9.2 + dsdb: Add comments explaining the limitations of our current backlink behaviour; (bso#13418); + Fix problems running domain backups (handling SMBv2, sites); (bso#13621); + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3; (bso#13465); + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642); + File saving issues with vfs_fruit on samba >= 4.8.5; (bso#13646); + Enabling vfs_fruit looses FinderInfo; (bso#13649); + Cancelling of SMB2 aio reads and writes returns wrong error NT_STATUS_INTERNAL_ERROR; (bso#13667); + Fix CTDB recovery record resurrection from inactive nodes and simplify vacuuming; (bso#13641); + examples: Fix the smb2mount build; (bso#13465); + libtevent: Fix build due to missing open_memstream on Illiumos; (bso#13629); + winbindd_cache: Fix timeout calculation for sid<->name cache; (bso#13662); + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path; (bso#13653); + Extended DN SID component missing for member after switching group membership; (bso#13418); + Return STATUS_SESSION_EXPIRED error encrypted, if the request was encrypted; (bso#13624); + python: Allow forced signing via smb.SMB(); (bso#13621); + lib:socket: If returning early, set ifaces; (bso#13665); + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8 encoded unicode; (bso#13616); + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute; (bso#13673); + waf: Add -fstack-clash-protection; (bso#13601); + winbind: Fix segfault if an invalid passdb backend is configured; (bso#13668); + Fix bugs in CTDB event handling; (bso#13659); + Misbehaving nodes are sometimes not banned; (bso#13670);- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);- winbind requires latest version of libtevent-util0 to start- Backport latest gpo code from master + Read policy from local gpt cache + Offline policy application + Make group policy extensible via register/unregister gpext + gpext's run via a process_group_policy method- Enable profiling data collection- Change samba-kdc package name to samba-ad-dc - Move samba-ad-dc.service to the samba-ad-dc package- Update to samba-4.9.1 + s3: nmbd: Stop nmbd network announce storm; (bso#13620); + s3-rpcclient: Use spoolss_init_spoolss_UserLevel1 in winspool cmds; (bso#13597); + CTDB recovery lock has some race conditions; (bso#13617); + s3-rpc_client: Advertise Windows 7 client info; (bso#13597); + ctdb-doc: Remove PIDFILE option from ctdbd_wrapper man page; (bso#13610);- Tumbleweed doesn't define the sle_version macro, so we must include a check for suse_version also. Otherwise python3 is disabled on Tumbleweed.- Update to samba-4.9.0 + samba_dnsupdate: Honor 'dns zone scavenging' option, only update if needed; (bso#13605); + wafsamba: Fix 'make -j'; (bso#13606);- Update to samba-4.9.0rc5 + s3: VFS: vfs_full_audit: Ensure smb_fname_str_do_log() only returns absolute pathnames; (bso#13565); + s3: util: Do not take over stderr when there is no log file; (bso#13578); + Durable Reconnect fails because cookie.allow_reconnect is not set; (bso#13549); + krb5-samba: Interdomain trust uses different salt principal; (bso#13539); + vfs_fruit: Don't unlink the main file; (bso#13441); + smbd: Fix a memleak in async search ask sharemode; (bso#13602); + Fix Samba GPO issue when Trust is enabled; (bso#11517); + samba-tool: Add "virtualKerberosSalt" attribute to 'user getpassword/syncpasswords'; (bso#13539); + Fix CTDB configuration issues; (bso#13589); + ctdbd logs an error until it can successfully connect to eventd; (bso#13592);- Update to samba-4.9.0rc4 + s3: smbd: Ensure get_real_filename() copes with empty pathnames; (bso#13585); + samba domain backup online/rename commands force user to specify password on CLI; (bso#13566); + wafsamba/samba_abi: Always hide ABI symbols which must be local; (bso#13579); + Fix a panic if fruit_access_check detects a locking conflict; (bso#13584); + Fix memory and resource leaks; (bso#13567); + python: Fix print in dns_invalid.py; (bso#13580); + Aliasing issue causes incorrect IPv6 checksum; (bso#13588); + Fix CTDB configuration issues; (bso#13589); + s3: vfs: time_audit: fix handling of token_blob in smb_time_audit_offload_read_recv(); (bso#13568);- Add missing zlib-devel dependency which was previously pulled in by libopenssl-devel- Update to samba-4.9.0rc3+git.22.3fff23ae36e + CVE-2018-10858: libsmb: Harden smbc_readdir_internal() against returns from malicious servers; (bso#13453); + CVE-2018-1140: ldbsearch '(distinguishedName=abc)' and DNS query with escapes crashes, ldb: Release LDB 1.3.5 for CVE-2018-1140; (bso#13374); + CVE-2018-10918: cracknames: Fix DoS (NULL pointer de-ref) when not servicePrincipalName is set on a user; (bso#13552); + CVE-2018-10919: acl_read: Fix unauthorized attribute access via searches; (bso#13434); + ctdb_mutex_ceph_rados_helper: Set SIGINT signal handler; (bso#13540); + CVE-2018-1139 libcli/auth: Do not allow ntlmv1 over SMB1 when it is disabled via "ntlm auth"; (bso#13360); + s3-tldap: do not install test_tldap; (bso#13529); + ctdb_mutex_ceph_rados_helper: Fix deadlock via lock renewals; (bso#13540); + CVE-2018-1140 Add NULL check for ldb_dn_get_casefold() in ltdb_index_dn_attr(); (bso#13374); + ctdb-eventd: Fix CID 1438155; (bso#13554); + Fix CIDs 1438243, (Unchecked return value) 1438244 (Unsigned compared against 0), 1438245 (Dereference before null check) and 1438246 (Unchecked return value); (bso#13553); + ctdb: Fix a cut&paste error; (bso#13554); + systemd: Only start smb when network interfaces are up; (bso#13559); + Fix quotas don't work with SMB2; (bso#13553); + s3/smbd: Ensure quota code is only called when quota support detected; (bso#13563); + s3/libsmb: Explicitly set delete_on_close token for rmdir; (bso#13204); + s3:waf: Install eventlogadm to /usr/sbin; (bso#13561); + Shorten description in vfs_linux_xfs_sgid manual; (bso#13562);- Update to samba-4.9.0rc2+git.21.a1069afb007 + s3: smbd: Using "sendfile = yes" with SMB2 can cause CPU spin; (bso#13537); + s3: smbd: Fix path check in smbd_smb2_create_durable_lease_check(); (bso#13535); + samba-tool trust: Support discovery via netr_GetDcName; (bso#13538); + s4-dsdb: Only build dsdb Python modules for AD DC; (bso#13542); + Fix portability issues on freebsd; (bso#13520); + DNS wildcard search does not handle multiple labels correctly; (bso#13536); + samba-tool domain trust: Fix trust compatibility to Windows Server 1709 and FreeIPA; (bso#13308); + Fix portability issues on freebsd; (bso#13520); + ctdb-protocol: Fix CTDB compilation issues; (bso#13545); + ctdb-docs: Replace obsolete reference to CTDB_DEBUG_HUNG_SCRIPT option; (bso#13546); + ctdb-doc: Provide an example script for migrating old configuration; (bso#13550); + ctdb-event: Implement event tool "script list" command; (bso#13551);- Update to samba-4.8.4+git.37.a7a861d7982; + CVE-2018-1139: Weak authentication protocol allowed; (bsc#1095048); (bsc#13360); + CVE-2018-1140: Denial of Service Attack on DNS and LDAP server; (bsc#1095056); (bso#13466); (bso#13374); + CVE-2018-10858: Insufficient input validation on client directory listing in libsmbclient; (bsc#1103411); (bso#13453); + CVE-2018-10918: Denial of Service Attack on AD DC DRSUAPI server; (bsc#1103414); (bso#13552); + CVE-2018-10919: Confidential attribute disclosure from the AD LDAP server; (bsc#1095057); (bso#13434); + s3:winbind: winbind normalize names' doesn't work for users; (bso#12851); + winbind: Fix UPN handling in canonicalize_username(); (bso#13369); + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428); + samdb: Fix building Samba with gcc 8.1; (bso#13437); + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440); + smbd: Flush dfree memcache on service reload; (bso#13446); + ldb: Save a copy of the index result before calling the + lib/util: No Backtrace given by Samba's AD DC by default; (bso#13454). + s3: smbd: printing: Re-implement delete-on-close semantics for print files missing since 3.5.x; (bso#13457). + python: Fix talloc frame use in make_simple_acl(); (bso#13474). + krb5_wrap: Fix keep_old_entries logic for older Kerberos libraries;(bso#13478). + krb5_plugin: Add winbind localauth plugin for MIT Kerberos; (bso#13480).- Add missing package descriptions; (bsc#1093864); - Fix dependency issue between samba-python and samba-kdc; (bsc#1062876); - Call update-apparmor-samba-profile when running samba-ad-dc; (bsc#1092099);- Update to 4.8.2 + After update to 4.8.0 DC failed with "Failed to find our own NTDS Settings objectGUID" (bso#13335). + fix incorrect reporting of stream dos attributes on a directory (bso#13380). + vfs_ceph: add asynchronous fsync; fake synchronous call (bso#13412). + vfs_ceph: add fake async pwrite/pread send/recv hooks; (bso#13425) + vfs_ceph: Fix memory leak; (bso#13424). + libsmbclient: Fix hard-coded connection error return of ETIMEDOUT; (bso#13419). + s4-lsa: Fix use-after-free in LSA server; (bso#13420). + winbindd: Do re-connect if the RPC call fails in the passdb case; (bso#13430). + cleanupd: Sends MSG_SMB_UNLOCK twice to interested peers; (bso#13416). + cleanupd: Use MSG_SMB_BRL_VALIDATE to signal cleanupd unclean process shutdown; (bso#13414). + ctdb-client: Remove ununsed functions from old client code; (bso#13411). + printing: Return the same error code as windows does on upload failures; (bso#13395). + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged pipe is not accessable; (bso#13400). + s4:lsa_lookup: remove TALLOC_FREE(state) after all dcesrv_lsa_Lookup{Names,Sids}_base_map() calls; (bso#13420). + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407). + s3:smbspool: Fix cmdline argument handling; (bso#13417).- Move libdfs-server-ad-samba4.so library from kdc to libs package, as it is required by some client libs; (bsc#1074135); - Update to 4.8.1; (bsc#1091179); + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error, we don't own it here; (bso#13244); + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't support fdopendir(); (bso#13270); + Round-tripping ACL get/set through vfs_fruit will increase the number of ACE entries without limit; (bso#13319); + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit issues; (bso#13347); + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without delete access; (bso#13358); + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372); + s3: smbd: Unix extensions attempts to change wrong field in fchown call; (bso#13375); + ms_schema/samba-tool visualize: Fix python2.6 incompatibility; (bso#13337); + Fix invocation of gnutls_aead_cipher_encrypt(); (bso#13352); + Windows 10 cannot logon on Samba NT4 domain; (bso#13328); + winbindd: Recover loss of netlogon secure channel in case the peer DC is rebooted; (bso#13332); + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363); + ctdb-client: Fix bugs in client code; (bso#13356); + ctdb-scripts: Drop "net serverid wipe" from 50.samba event script; (bso#13359); + s3: lib: messages: Don't use the result of sec_init() before calling sec_init(); (bso#13368); + libads: Fix the build '--without-ads'; (bso#13273); + winbind: Keep "force_reauth" in invalidate_cm_connection, add 'smbcontrol disconnect-dc'; (bso#13332); + vfs_virusfilter: Fix CIDs 1428738-1428740; (bso#13343); + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367); + rpc_server: Fix core dump in dfsgetinfo; (bso#13370); + smbclient: Fix notify; (bso#13382); + Fix smbd panic if the client-supplied channel sequence number wraps; (bso#13215); + Windows 10 cannot logon on Samba NT4 domain; (bso#13328); + lib/util: Remove unused '#include ' from tests/tfork.c; (bso#13342); + Fix build errors with cc from developerstudio 12.5 on Solaris; (bso#13343); + Fix the picky-developer build on FreeBSD 11; (bso#13344); + s3:modules: Fix the build of vfs_aixacl2.c; (bso#13345); + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338); + lib:replace: Fix linking when libtirpc-devel overwrites system headers; (bso#13341); + winbindd: 'wbinfo --name-to-sid' returns misleading result on invalid query; (bso#13312); + s3:passdb: Do not return OK if we don't have pinfo set up; (bso#13376); + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);- Use new foreground execution flags for systemd samba daemons; (bsc#1088574); (bsc#1071090); (bsc#1065551); + Add %post scriptlet to clear old sysconfig flags - Update vendor-files to commit 880b3e7. + Set samba sysconfig template variables to "" + Add required daemon flags directly to systemd unit- Specfile cleanup + Remove %if..%endif guards which don't affect the build + Remove redundant %clean section + Replace old $RPM_* shell vars with macros- BuildRequire pkgconfig(systemd) and pkgconfig(libsystemd) in place of systemd and systemd-devel: Allow OBS to optimize the workload by allowing the usage of the 'build-optimized' systemd packages.- Enable building samba with python3, and create a samba-python3 package.- Update to 4.8 + New GUID Index mode in sam.ldb for the AD DC + GPO support for samba KDC + Time machine support with vfs_fruit + Encrypted secrets + AD Replication visualization + Improved trust support - ability to not scan global trust list - AD external trusts have limited support - verbose trusted domain listing + VirusFilter VFS module + NT4-style replication removed + vfs_aio_linux removed- Disable samba-pidl package, due to the removal of dependency perl-Parse-Yapp; (bsc#1085150);- Update to 4.7.6; + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally; (bso#11343); (bsc#1081741); + CVE-2018-1057: Authenticated users can change other users' password; (bso#13272); (bsc#1081024).- Disable python until full python3 port is done; (bsc#1082139); + Remove contents of package samba-python + Remove contents of package libsamba-policy0 + Remove contents of package libsamba-policy-devel + Remove library libsamba-python-samba4.so from samba-libs package + Remove library libsamba-net-samba4.so from samba-libs package + Remove smbtorture binary and manpage from samba-test- samba fails to build with glibc2.27; (bsc#1081042);- Update to 4.7.5; (bsc#1080545); + smbd tries to release not leased oplock during oplock II downgrade; (bso#13193); + Fix copying file with empty FinderInfo from Windows client to Samba share with fruit; (bso#13181); + build: Deal with recent glibc sunrpc header removal; (bso#10976); + Make Samba work with tirpc and libnsl2; (bso#13238); + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208); (bsc#1075206); + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue; (bso#12986); + ctdb-recovery-helper: Deregister message handler in error paths; (bso#13188); + samba: Only use async signal-safe functions in signal handler; (bso#13240); + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue; (bso#12986); + repl_meta_data: Fix linked attribute corruption on databases with unsorted links on expunge. dbcheck: Add functionality to fix the corrupt database; (bso#13228); + Fix smbd panic when chdir returns error during exit; (bso#13189); + Make Samba work with tirpc and libnsl2; (bso#13238); + Fix POSIX ACL support on HPUX and possibly other big-endian OSs; (bso#13176);- Update to 4.7.4; (bsc#1080545); + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140); + s3: libsmb: Fix valgrind read-after-free error in cli_smb2_close_fnum_recv(); (bso#13171); + s3: libsmb: Fix reversing of oldname/newname paths when creating a reparse point symlink on Windows from smbclient; (bso#13172); + Build man page for vfs_zfsacl.8 with Samba; (bso#12934); + repl_meta_data: Allow delete of an object with dangling backlinks; (bso#13095); + s4:samba: Fix default to be running samba as a deamon; (bso#13129); + Performance regression in DNS server with introduction of DNS wildcard, ldb: Release 1.2.3; (bso#13191); + vfs_zfsacl: Fix compilation error; (bso#6133); + "smb encrypt" setting changes are not fully applied until full smbd restart; (bso#13051); + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052); + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155); + winbindd: Dependency on trusted-domain list in winbindd in critical auth codepath; (bso#13173); + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120); + ctdb: sock_daemon leaks memory; (bso#13153); + TCP tickles not getting synchronised on CTDB restart; (bso#13154); + winbindd: winbind parent and child share a ctdb connection; (bso#13150); + pthreadpool: Fix deadlock; (bso#13170); + pthreadpool: Fix starvation after fork; (bso#13179); + messaging: Always register the unique id; (bso#13180); + s4/smbd: set the process group; (bso#13129); + Fix broken linked attribute handling; (bso#13095); + The KDC on an RWDC doesn't send error replies in some situations; (bso#13132); + libnet_join: Fix 'net rpc oldjoin'; (bso#13149); + g_lock conflict detection broken when processing stale entries; (bso#13195); + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired sessions; (bso#13197); + s3:libads: net ads keytab list fails with "Key table name malformed"; (bso#13166); (bsc#1067700); + Fix crash in pthreadpool thread after failure from pthread_create; (bso#13170); + s4:samba: Allow samba daemon to run in foreground; (bso#13129); (bsc#1065551); + third_party: Link the aesni-intel library with "-z noexecstack"; (bso#13174); + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I" options; (bso#13125);- Re-enable usage of libnsl (did got lost with glibc change) - Use TI-RPC (sunrpc is deprecated and will be removed soon from glibc)- smbc_opendir should not return EEXIST with invalid login credentials; (bnc#1065868).- Update to 4.7.3; (bsc#1069666); + Non-smbd processes using kernel oplocks can hang smbd; (bso#13121); + python: use communicate to fix Popen deadlock; (bso#13127); + smbd on disk file corruption bug under heavy threaded load; (bso#13130); + tevent: version 0.9.34; (bso#13130); + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118); + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug; (bsc#1060427);(bso#13041); + CVE-2017-15275: s3: smbd: Chain code can return uninitialized memory when talloc buffer is grown; (bsc#1063008); (bso#13077); - Build with AD DC support only in openSUSE.- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- samba-tool requires samba-python; (bnc#1067771).- Run all daemons in the foreground and let systemd handle it; (bsc#1065551). - Update to 4.7.1; + Fix exporting subdirs with shadow_copy2; (bso#13091); + Currently if getwd() fails after a chdir(), we panic; (bso#13027); + Ensure default SMB_VFS_GETWD() call can't return a partially completed struct smb_filename; (bso#13068); + sys_getwd() can leak memory or possibly return the wrong errno on older systems; (bso#13069); + smbclient doesn't correctly canonicalize all local names before use; (bso#13093); + Fix broken linked attribute handling; (bso#13095); + Missing LDAP query escapes in DNS rpc server; (bso#12994); + Link to -lbsd when building replace.c by hand; (bso#13087); + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem; (bso#6133); + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module; (bso#7909); + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module; (bso#7933); + Missing assignment in sl_pack_float; (bso#12991); + Wrong Samba access checks when changing DOS attributes; (bso#12995); + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062); + groupmap cleanup should not delete BUILTIN mappings; (bso#13065); + Enabling vfs_fruit results in loss of Finder tags and other xattrs; (bso#13076); + man pages: Properly ident lists; (bso#9613); + smb.conf.5: Sort parameters alphabetically; (bso#13081); + Fix GUID string format on GetPrinter info; (bso#12993); + Remote serverid check doesn't check for the unique id; (bso#13042); + CTDB starts consuming memory if there are dead nodes in the cluster; (bso#13056); + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070); + libgpo doesn't sort the GPOs in the correct order; (bso#13046); + Remote serverid check doesn't check for the unique id; (bso#13042); + vfs_catia: Fix a potential memleak; (bso#13090); + Fix file change notification for renames; (bso#12903); + Samba DNS server does not honour wildcards; (bso#12952); + Can't change password in samba from a Windows client if Samba runs on IPv6 only interface; (bso#13079); + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086); + Apple client can't cope with SMB2 async replies when creating symlinks; (bso#13047); + s4:rpc_server:backupkey: Move variable into scope; (bso#12959); + Fix ntstatus_gen.h generation on 32bit; (bso#13099); + Fix a double free in vfs_gluster_getwd(); (bso#13100); + Fix resouce leaks and pointer issues; (bso#13101); + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);- Add samba-kdc to baselibs.conf. - Do not wrap samba-kdc's package definition into if/endif: the package won't be generated simply based on the fact that there is no files section for the package. Allows the source validator to ensure samba-kdc is a built package.- Update to 4.7.0; + Whole DB read locks: Improved LDAP and replication consistency; (bso#12858). + Samba AD with MIT Kerberos + Dynamic RPC port range: Default range changed from "1024-1300" to "49152-65535". + Authentication and Authorization audit support: New auth_audit debug class. + Multi-process LDAP Server: The LDAP server in the AD DC now honours the process model used for the rest of the 'samba' process. + Improved Read-Only Domain Controller (RODC) Support; (bso#12977). + Additional password hashes stored in supplementalCredentials. + Improvements to DNS during Active Directory domain join. + Significant AD performance and replication improvements. + Query record for open file or directory. + Removal of lpcfg_register_defaults_hook(). + Change of loadable module interface. + SHA256 LDAPS Certificates: The self-signed certificate generated for use on LDAPS will now be generated with a SHA256 self-signature, not a SHA1 self-signature. + CTDB no longer allows mixed minor versions in a cluster. + CTDB now ignores hints from Samba about TDB flags when attaching to databases. + New configuration variable CTDB_NFS_CHECKS_DIR. + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed. + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed. + The example NFS Ganesha call-out has been improved. + A new "replicated" database type is available.- CVE-2017-12163: Prevent client short SMB1 write from writing server memory to file; (bso#13020); (bsc#1058624).- CVE-2017-12150: Some code path don't enforce smb signing, when they should; (bso#12997); (bsc#1058622).- CVE-2017-12151: Keep required encryption across SMB3 dfs redirects; (bso#12996); (bsc#1058565).- Clean specfile assuming SUSE-only system and product >=SLE11 + %{ul_version}, %{rhel_version}, %{mandriva_version}, %{centos_version} are always undefined + %{_vendor} is "suse" and %{suse_version} is at least 1100- Update to 4.6.7; (bsc#1054017) + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392). + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937). + vfs_ceph provides inconsistent directory listings; (bso#12911). + Misused talloc context can cause a user to crash their smbd by chaining SMB1 commands.; (bso#12836). + Use-after free can crash libsmbclient code.; (bso#12927). + Server exit with active AIO can crash.; (bso#12925). + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910). + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs; (bso#12898). + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897). + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for authentication; (bso#12886). + finder sidebar showing question mark instead of icon when using ip to connect with vfs_fruit; (bso#12840). + Winbind stops obtaining the 'unixHomeDirectory' & 'loginShell' attributes from AD.; (bso#12720). + KCC run at selftest startup can fail spuriously due to a race; (bso#12869). + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for the remote change; (bso#12782). + rpc_pipe_client memory leaks due to long term memory context passed to rpc_pipe_open_interface(); (bso#12890). + CVE-2017-2619 breaks accessing previous versions of directories with snapshots in subdirectories of the share; (bso#12885). + dns_name_equal doing OOB read; (bso#12813). + replica_sync tests flap; (bso#12753). + Selftest should not call 'net cache flush' and wipe important winbind entries; (bso#12868). + Old Samba versions don't support using recent ldb versions (>=1.1.30); (bso#12859). + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490). + race starting winbindd against posixacl test; (bso#12843). + Crash in the reentrant smbd_smb2_create_send() if the something fails in the subsequent try; (bso#12832). + spnego.c passes the wrong argument order to gensec_update_ev() for the FALLBACK case; (bso#12788). + Clients with SMB3 support can't connect with "server max protocol = SMB2_02"; (bso#12772). + A log message of samb-tool user syncpasswords reverses string arguments in a debug message "Call Popen[...".; (bso#12768). + The smb tarmode tests kills the share dir contents; (bso#12867). + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862). + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860). + manpage/index.html lists links not in alphabetical order; (bso#12854). + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831). + If a record is locked in a database, then recovery does not complete; (bso#12857). + debug_locks.sh script does not log any information; (bso#12856). + SIGSEGV in cm_connect_lsa_tcp dereferencing conn->lsa_tcp_pipe->transport after error; (bso#12852). + smbclient can't parse DOMAIN+username if a different winbind separator is used; (bso#12849). + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845). + Related requests with TreeConnect fail with NETWORK_NAME_DELETED; (bso#12844). + cli->server_os not filled correctly; (bso#12779). + REGRESSION: smbclient doesn't print the session setup anymore; (bso#12824). + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808). + CTDB NFS call-out failures do not cause event failures; (bso#12837). + net command fails due to incorrectly return code; (bso#12828). + Fix building Samba with GCC 7.1; (bso#12827).- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again; (bsc#1048339).- fix cephwrap_chdir(); (bsc#1048790). - Update to 4.6.6 + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation; (bsc#1048278).- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).- Fix inconsistent ctdb socket path; (bsc#1048352). - Fix non-admin cephx authentication; (bsc#1048387).- Update to 4.6.5; (bsc#1040157) + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at startup; (bso#12814). + vfs_expand_msdfs tries to open the remote address as a file path; (bso#12687). + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type); (bso#12798). + With clustering get update_num_read_oplocks failed and PANIC: num_share_modes == 1 assertion failure; (bso#11844). + contend_level2_oplocks_begin_default oplock optimisation doesn't carry over to leases; (bso#12766). + `ctdb nodestatus` incorrectly displays status for all nodes with wrong exit code; (bso#12802). + CTDB can spin hard on revoking readonly delegations if a node becomes disconnected; (bso#12697). + Printing a share mode entry with leases can crash in the ndr code; (bso#12793). + Fix flakey unit tests for eventd; (bso#12792). + CTDB daemon crashes if built with clang; (bso#12770). + smbcacls fails if no password is specified; (bso#12765). + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757). + samba-tool user syncpasswords doesn't trigger the script when a user gets removed; (bso#12767). + systemd: fix detection of libsystemd; (bso#12764). + Notify subsystem only maps first inotify mask to Windows notify filter; (bso#12760). + Allow passing trusted domain password as plain-text to PASSDB layer; (bso#12751). + Can't case-rename files with vfs_fruit; (bso#12749). + wrong sid->uid mapping for SIDs residing in sIDHistory; (bso#12702). + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562). + Ordering of notify responses broken; (bso#12756).- s3: libsmb: Fix error where short name length was read as 2 bytes, should be 1; (bso#11822); (bsc#1042419).- Revert explicit winbind %{version}-%{release} dependency. + The ABI has stabilized since (bsc#936909), so remove to fix cross-media dependencies; (bsc#1037899).- Fix CVE-2017-7494 remote code execution from a writable share; (bso#12780); (bsc#1038231).- Update to 4.6.3; (bsc#1036011) + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots from shares with GlusterFS backend; (bso#12743). + Fix for Solaris C compiler; (bso#12559). + s3: locking: Update oplock optimization for the leases era; (bso#12628). + Make the Solaris C compiler happy; (bso#12693). + s3: libgpo: Allow skipping GPO objects that don't have the expected LDAP attributes; (bso#12695). + Fix buffer overflow caused by wrong use of getgroups; (bso#12747). + lib: debug: Avoid negative array access; (bso#12746). + cleanupdb: Fix a memory read error; (bso#12748). + streams_xattr and kernel oplocks results in NT_STATUS_NETWORK_BUSY; (bso#7537). + winbindd: idmap_autorid allocates ids for unknown SIDs from other backends; (bso#11961). + vfs_fruit: Resource fork open request with flags=O_CREAT|O_RDONLY; (bso#12565). + manpages/vfs_fruit: Document global options; (bso#12615). + lib/pthreadpool: Fix a memory leak; (bso#12624). + Lookup-domain for well-known SIDs on a DC; (bso#12727). + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728). + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729). + credentials_krb5: use gss_acquire_cred for client-side GSSAPI use case; (bso#12611). + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690). + ctdb-readonly: Avoid a tight loop waiting for revoke to complete; (bso#12697). + ctdb_event monitor command crashes if event is not specified; (bso#12723). + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733). + smbd: Fix smb1 findfirst with DFS; (bso#12558). + smbd: Do an early exit on negprot failure; (bso#12610). + winbindd: Fix substitution for 'template homedir'; (bso#12699). + s4:kdc: Disable principal based autodetected referral detection; (bso#12554). + idmap_autorid: Allocate new domain range if the callers knows the sid is valid; (bso#12613). + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724). + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for trusted domain; (bso#12725). + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731). + winbindd: Fix password policy for pam authentication; (bso#12725). + s3:gse: Correctly handle external trusts with MIT; (bso#12554). + auth/credentials: Always set the realm if we set the principal from the ccache; (bso#12611). + replace: Include sysmacros.h; (bso#12686). + s3:vfs_expand_msdfs: Do not open the remote address as a file; (bso#12687). + s3:libsmb: Only print error message if kerberos use is forced; (bso#12704). + winbindd: Child process crashes when kerberos-authenticating a user with wrong password; (bso#12708). + vfs_fruit: Office document opens as read-only on macOS due to CNID semantics; (bso#12715). + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is fragmented; (bso#12737).- Generate and update vendor-files tarball from Git + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).- Generate source tarball directly from Git using OBS tar_scm + use version string derived from parent Git tag and commit hash - remove obsolete vendor-files/tools/package-data version ID + explicitly generate ctdb manpages, needed without "make dist"- Update to 4.6.2 + remove bso#12721 patches now upstream- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622). + x86-64 and aarch64- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).- Build and install the html man pages (bsc#1021907).- Fix CVE-2017-2619 regression with "follow symlinks = no"; (bso#12721).- Update to 4.6.1 + symlink race permits opening files outside share directory; CVE-2017-2619; (bso#12496); (bsc#1027147) + testparm checks for valid idmap parameters + add new krb client encryption types + support for printer driver upload from windows 10 + inherit owner = 'unix only' for improved quota support + improved CTDB event support + new primary group support for idmap_ad + idmap_hash deprecated + mvxattr added to recursively rename extended attributes- Remove chkconfig requirements for systemd systems- Don't call insserv if systemd is used- Fix check if we need to require insserv- async_req: make async_connect_send() "reentrant"; (bso#12105); (bsc#1024416).- Force usage of ncurses6-config thru NCURSES_CONFIG env var; (bsc#1023847).- add missing patch for libnss_wins segfault; (bsc#995730).- Fix vfs_ceph builds against recent Ceph versions; (bsc#1021933).- Document "winbind: ignore domains" parameter; (bsc#1019416).- Add base Samba dependency to samba-ceph package.- Update to 4.5.3 + Heap-based Buffer Overflow Remote Code Execution Vulnerability; CVE-2016-2123; (bso#12409); (bsc#1014437). + Don't send delegated credentials to all servers; CVE-2016-2125; (bso#12445); (bsc#1014441). + denial of service due to a client triggered crash in the winbindd parent process; CVE-2016-2126; (bso#12446); (bsc#1014442). - 4.5.1 and 4.5.2 updates + various streams vfs fixes + various printing fixes + ntlm_auth: do not map explicitly empty domain + various stability fixes in smbd + match file compression ReFS behavior- Add missing ldb module directory; (bnc#1012092).- s3/client: obey 'disable netbios' smb.conf param, don't connect via NBT port; (bsc#1009085); (bso#12418).- Include vfstest in samba-test; (bsc#1001203).- s3/winbindd: using default domain with user@domain.com format fails; (bsc#997833).- Fix segfault in libnss_wins; (bso#12277); (bso#12269); (bsc#995730).- Update to 4.5.0 + NTLM1 Authentication disabled by default + SMB2.1 leases enabled by default + Support for OFD locks + ctdb tool rewritten + Added shadow copy snapshot prefix parameter- Fix illegal memory access after memory has been deleted; (bso#11836); (bsc#975299).- Prevent core, make sure response->extra_data.data is always cleared out; (bsc#993692).- Don't package man pages for VFS modules that aren't built; (boo#993707).- Fix population of ctdb sysconfig after source merge; (bsc#981566).- Enable vfs_ceph builds for Factory (x86-64) + Package as samba-ceph to avoid Ceph dependency in base package.- Update to 4.4.5 + Prevent client-side SMB2 signing downgrade; CVE-2016-2119; (bso#11860); (bsc#986869).- Remove obsolete syslog.target; (bsc#983938).- Honor smb.conf socket options in winbind; (bsc#975131).- Don't use htons() with IP_PROTO_RAW; (bso#11705); (bsc#969522).- Update to 4.4.4 + SMB3 multichannel: Add implementation of missing channel sequence number verification; (bso#11809). + smbd:close: Only remove kernel share modes if they had been taken at open; (bso#11919). + notifyd: Prevent NULL deref segfault in notifyd_peer_destructor; (bso#11930). + s3:rpcclient: Make '--pw-nt-hash' option work; (bso#10796). + Fix case sensitivity issues over SMB2 or above; (bso#11438). + s3:smbd: Fix anonymous authentication if signing is mandatory. (bso#11910) + Fix NTLM Authentication issue with squid; (bso#11914). + pdb: Fix segfault in pdb_ldap for missing gecos; (bso#11530). + Fix memory leak in share mode locking; (bso#11934).- Update to 4.4.3 + Various post-badlock regressions; (bso#11841); (bso#11850); (bso#11858); (bso#11870); (bso#11872). + Only allow idmap_hash for default idmap config (bso#11786). + smbd: Avoid large reads beyond EOF; (bso#11878). + vfs_acl_common: Avoid setting POSIX ACLs if "ignore system acls" is set; (bso#11806). + libads: Record session expiry for spnego sasl binds; (bso#11852).- Fix NTLMSSP regressions caused by previous CVE fixes; (bso#11849); (bsc#975962); (bsc#979268), (bsc#977669).- Revert shared library packaging to comply with SLPP- Update to 4.4.2 + A man-in-the-middle can downgrade NTLMSSP authentication; CVE-2016-2110; (bso#11688); (bsc#973031). + Domain controller netlogon member computer can be spoofed; CVE-2016-2111; (bso#11749); (bsc#973032). + LDAP conenctions vulnerable to downgrade and MITM attack; CVE-2016-2112; (bso#11644); (bsc#973033). + TLS certificate validation missing; CVE-2016-2113; (bso#11752); (bsc#973034). + Named pipe IPC vulnerable to MITM attacks; CVE-2016-2115; (bso#11756); (bsc#973036). + "Badlock" DCERPC impersonation of authenticated account possible; CVE-2016-2118; (bso#11804); (bsc#971965). + DCERPC server and client vulnerable to DOS and MITM attacks; CVE-2015-5370; (bso#11344); (bsc#936862).- Fix samba.tests.messaging test and prevent potential tdb corruption by removing obsolete now invalid tdb_close call; (bsc#974629).- Obsolete libsmbclient from libsmbclient0 while not providing it; (bsc#972197).- Update to 4.4.0. + Read of uninitialized memory DNS TXT handling; (bso#11128); (bso#11686); CVE-2016-0771. + Getting and setting Windows ACLs on symlinks can change permissions on link target; (bso#11648); CVE-2015-7560. + Sockets with htons(IPPROTO_RAW); (bso#11705); CVE-2015-8543. + s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystem with no ACL support; (bso#10489). + docs: Add example for domain logins to smbspool man page; (bso#11643). + smbd: Show correct disk size for different quota and dfree block sizes; (bso#11681). + docs: Add smbspool_krb5_wrapper manpage; (bso#11690). + winbindd: Return trust parameters when listing trusts; (bso#11691). + ctdb: Do not provide a useless pkgconfig file for ctdb; (bso#11696). + Crypto.Cipher.ARC4 is not available on some platforms, fallback to M2Crypto.RC4.RC4 then; (bso#11699). + s3:utils/smbget: Set default blocksize; (bso#11700). + Streamline 'smbget' options with the rest of the Samba utils; (bso#11700). + s3:clispnego: Fix confusing warning in spnego_gen_krb5_wrap(); (bso#11702). + s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703). + loadparm: Fix memory leak issue; (bso#11708). + lib/tsocket: Work around sockets not supporting FIONREAD; (bso#11714). + s3:vfs:glusterfs: Fix build after quota changes; (bso#11715). + ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ..."; (bso#11719). + lib:socket: Fix CID 1350010: Integer OVERFLOW_BEFORE_WIDEN; (bso#11723). + smbd: Fix CID 1351215 Improper use of negative value; (bso#11724). + smbd: Fix CID 1351216 Dereference null return value; (bso#11725). + s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new file; (bso#11727). + docs: Add manpage for cifsdd; (bso#11730). + param: Fix str_list_v3 to accept ; again; (bso#11732). + lib/socket: Fix improper use of default interface speed; (bso#11734). + lib:socket: Fix CID 1350009: Fix illegal memory accesses (BUFFER_SIZE_WARNING); (bso#11735). + libcli: Fix debug message, print sid string for new_ace trustee; (bso#11738). + Fix installation path of Samba helper binaries; (bso#11739). + Fix memory leak in loadparm; (bso#11740). + tevent: version 0.9.28: Fix memory leak when old signal action restored; (bso#11742). + smbd: Ignore SVHDX create context; (bso#11753). + Fix net join; (bso#11755). + s3:libads: setup the msDS-SupportedEncryptionTypes attribute on ldap_add; (bso#11755). + passdb: Add linefeed to debug message; (bso#11763). + s3:utils/smbget: Fix option parsing; (bso#11767). + libnet: Make Kerberos domain join site-aware; (bso#11769). + Reset TCP Connections during IP failover; (bso#11770). + ldb: Version 1.1.26; (bso#11772). + s3:smbd: Add negprot remote arch detection for OSX; (bso#11773). + vfs_glusterfs: Fix use after free in AIO callback; (bso#11774). + mkdir can return ACCESS_DENIED incorrectly on create race; (bso#11780). + "trustdom_list_done: Got invalid trustdom response" message should be avoided; (bso#11782). + Mismatch between local and remote attribute ids lets replication fail with custom schema; (bso#11783). + Quota is not supported on Solaris 10; (bso#11788). + Talloc: Version 2.1.6; (bso#11789). + smbd: Enable multi-channel if 'server multi channel support = yes' in the config; (bso#11796). + build: Fix build when '--without-quota' specified; (bso#11798). + lib/socket/interfaces: Fix some uninitialied bytes; (bso#11802). + Access based share enum: handle permission set in configuration files; (bso#8093). + See also WHATSNEW.txt from the samba-doc package.- Update to 4.3.6. + Getting and setting Windows ACLs on symlinks can change permissions on link target; CVE-2015-7560; (bso#11648); (bsc#968222). + Fix Out-of-bounds read in internal DNS server; CVE-2016-0771; (bso#11128); (bso#11686); (bsc#968223).- Upgrade on-disk FSRVP server state to new version; (bsc#924519).- Only obsolete but do not provide gplv2/3 package names; (bsc#968973).- Relocate existing lock files to /var/lib/samba/lock; (bsc#968963).- Obsolete no longer existing samba-32bit package; (bsc#967625).- Update to 4.3.5. + s3:utils/smbget: Fix recursive download; (bso#6482). + s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystemi with no ACL support; (bso#10489). + s3:smbd/oplock: Obey kernel oplock setting when releasing oplocks; (bso#11400). + vfs_shadow_copy2: Fix case where snapshots are outside the share; (bso#11580). + smbclient: Query disk usage relative to current directory; (bso#11662). + winbindd: Handle expired sessions correctly; (bso#11670). + smbd: Show correct disk size for different quota and dfree block sizes; (bso#11681). + smbcacls: Fix uninitialized variable; (bso#11682). + s3:smbd: Ignore initial allocation size for directory creation; (bso#11684). + s3-client: Add a KRB5 wrapper for smbspool; (bso#11690). + s3-parm: Clean up defaults when removing global parameters; (bso#11693). + Use M2Crypto.RC4.RC4 on platforms without Crypto.Cipher.ARC4; (bso#11699). + s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703). + ctdb: Remove error messages after kernel security update; CVE-2015-8543; (bso#11705). + loadparm: Fix memory leak issue; (bso#11708). + lib/tsocket: Work around sockets not supporting FIONREAD; (bso#11714). + ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ..."; (bso#11719). + s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new file; (bso#11727). + param: Fix str_list_v3 to accept ";" again; (bso#11732).- Shift samba-client sysconfig data into samba and samba-winbind; (bsc#947361).- Simplify shared library packaging; (bsc#966956).- Enable clustering (CTDB) support; (bsc#966271).- s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703); (bsc#964023).- Add quotes around path of update-apparmor-samba-profile; (bnc#962177).- Remove autoconf build-time requirement.- Update to 4.3.4. + vfs_fruit: Enable POSIX directory rename semantics; (bso#11065). + Crash: Bad talloc magic value - access after free; (bso#11394). + Copying files with vfs_fruit fails when using vfs_streams_xattr without stream prefix and type suffix; (bso#11466). + samba-tool: Fix uncaught exception if no fSMORoleOwner attribute is given; (bso#11613). + Fix a typo in the smb.conf manpage, explanation of idmap config; (bso#11619). + Correctly initialize the list head when keeping a list of primary followed by DFS connections; (bso#11624). + Reduce the memory footprint of empty string options; (bso#11625). + lib/async_req: Do not install async_connect_send_test; (bso#11639). + Fix typos in man vfs_gpfs; (bso#11641). + Make "hide dot files" option work with "store dos attributes = yes"; (bso#11645). + Fix a corner case of the symlink verification; (bso#11647); (bnc#960249). + Do not disable "store dos attributes" on-the-fly; (bso#11649). + Update lastLogon and lastLogonTimestamp; (bso#11659).- Prevent access denied if the share path is "/"; (bso#11647); (bnc#960249).- Update to 4.3.3. + Malicious request can cause Samba LDAP server to hang, spinning using CPU; CVE-2015-3223; (bso#11325); (bnc#958581). + Remote read memory exploit in LDB; CVE-2015-5330; (bso#11599); (bnc#958586). + Insufficient symlink verification (file access outside the share); CVE-2015-5252; (bso#11395); (bnc#958582). + No man in the middle protection when forcing smb encryption on the client side; CVE-2015-5296; (bso#11536); (bnc#958584). + Currently the snapshot browsing is not secure thru windows previous version (shadow_copy2); CVE-2015-5299; (bso#11529); (bnc#958583). + Fix Microsoft MS15-096 to prevent machine accounts from being changed into user accounts; CVE-2015-8467; (bso#11552); (bnc#958585).- Update to 4.3.2. + vfs_gpfs: Re-enable share modes; (bso#11243). + dcerpc.idl: Accept invalid dcerpc_bind_nak pdus; (bso#11327). + s3-smbd: Fix old DOS client doing wildcard delete - gives an attribute type of zero; (bso#11452). + Add libreplace dependency to texpect, fixes a linking error on Solaris; (bso#11511). + s4: Fix linking of 'smbtorture' on Solaris; (bso#11512). + s4:lib/messaging: Use correct path for names.tdb; (bso#11562). + Fix segfault of 'net ads (join|leave) -S INVALID' with nss_wins; (bso#11563). + async_req: Fix non-blocking connect(); (bso#11564). + auth: gensec: Fix a memory leak; (bso#11565). + lib: util: Make non-critical message a warning; (bso#11566). + Fix winbindd crashes with samlogon for trusted domain user; (bso#11569); (bnc#949022). + smbd: Send SMB2 oplock breaks unencrypted; (bso#11570). + ctdb: Open the RO tracking db with perms 0600 instead of 0000; (bso#11577). + s3:smb2_server: Make the logic of SMB2_CANCEL DLIST_REMOVE() clearer; (bso#11581). + s3-smbd: Fix use after issue in smbd_smb2_request_dispatch(); (bso#11581). + manpage: Correct small typo error; (bso#11584). + s3: smbd: If EAs are turned off on a share don't allow an SMB2 create containing them; (bso#11589). + Backport some valgrind fixes from upstream master; (bso#11597). + auth: Consistent handling of well-known alias as primary gid; (bso#11608). + winbind: Fix crash on invalid idmap configs; (bso#11612). + s3: smbd: have_file_open_below() fails to enumerate open files below an open directory handle; (bso#11615). + Changing log level of two entries to DBG_NOTICE; (bso#9912).- Ensure samlogon fallback requests are rerouted after kerberos failure; (bnc#953382); (bnc#953972).- Ensure to link with --as-needed flag by removing SUSE_ASNEEDED=0. - Always use the default optimization even on pre-9.2 systems.- Remove redundant configure options while adding with-relro.- Relocate the lockdir to the /var/lib/samba/lock directory.- Cleanup and enhance the pidl sub package.- Require renamed python-ldb-devel and python-talloc-devel at build-time. - Requires python-ldb and python-talloc from the python subpackage.- Update to 4.3.1. + s3: smbd: Fix our access-based enumeration on "hide unreadable" to match Windows; (bso#10252). + nss_winbind: Fix hang on Solaris on big groups; (bso#10365). + smbd: Fix file name buflen and padding in notify repsonse; (bso#10634). + kerberos: Make sure we only use prompter type when available; winbind: Fix 100% loop; (bso#11038). + source3/lib/msghdr.c: Fix compiling error on Solaris; (bso#11053). + s3:ctdbd_conn: make sure we destroy tevent_fd before closing the socket; (bso#11316). + s3: smbd: Fix mkdir race condition; (bso#11486). + pam_winbind: Fix a segfault if initialization fails; (bso#11502). + s3: dfs: Fix a crash when the dfs targets are disabled; (bso#11509). + s4:lib/messaging: Use 'msg.lock' and 'msg.sock' for messaging related subdirs; (bso#11515). + s3: smbd: Fix opening/creating :stream files on the root share directory; (bso#11522). + lib/param: Fix hiding of FLAG_SYNONYM values; (bso#11526). + net: Fix a crash with 'net ads keytab create'; (bso#11528). + s3: smbd: Fix a crash in unix_convert(); (bso#11535). + s3: smbd: Fix NULL pointer bug introduced by previous 'raw' stream fix (bso#11522); (bso#11535). + vfs_fruit: Return value of ad_pack in vfs_fruit.c; (bso#11543). + vfs_commit: set the fd on open before calling SMB_VFS_FSTAT; (bso#11547). + s3:locking: Initialize lease pointer in share_mode_traverse_fn(); (bso#11549). + s3:smbstatus: Add stream name to share_entry_forall(); (bso#11550). + s3:lib: Validate domain name in lookup_wellknown_name(); (bso#11555). + s3: lsa: lookup_name() logic for unqualified (no DOMAIN component) names is incorrect; (bso#11555).- Fix 100% CPU in winbindd when logging in with "user must change password on next logon"; (bso#11038).- Relocate the tmpfiles.d directory to the client package; (bnc#947552).- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf instead; (bnc#942716).- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).- Package /var/lib/samba/msg with 0755 permissions; (bso#11515); (bnc#945502).- Require to install libfam0-gamin from samba-libs on post-12.1 and pre-13.15 systems; (bnc#945013).- Update to 4.3.0. + Samba "map to guest = Bad uid" doesn't work; (bso#9862). + revert LDAP extended rule 1.2.840.113556.1.4.1941 LDAP_MATCHING_RULE_IN_CHAIN changes; (bso#10493). + No objectClass found in replPropertyMetaData on ordinary objects (non-deleted); (bso#10973). + Stream names with colon don't work with fruit:encoding = native; (bso#11278). + NetApp joined to a Samba/ADDC cannot resolve SIDs; (bso#11291). + tevent_fd needs to be destroyed before closing the fd; (bso#11316). + "force group" with local group not working; (bso#11320). + strsep is not available on Solaris; (bso#11359). + smbtorture does not build when configured --with-system-mitkrb5; (bso#11411). + Build with GPFS support is broken; (bso#11421). + Build broken with --disable-python; (bso#11424). + net share allowedusers crashes; (bso#11426). + nmbd incorrectly matches netbios names as own name; (bso#11427). + Python bindings don't check integer types; (bso#11429). + Python bindings don't check array sizes; (bso#11430). + CTDB's eventscript error handling is broken; (bso#11431). + Fix crash in nested ctdb banning; (bso#11432). + Cannot build ctdbpmda; (bso#11434). + samba-tool uncaught exception error; (bso#11436). + Crash in notify_remove caused by change notify = no; (bso#11444). + Poor SMB3 encryption performance with AES-GCM; (bso#11451). + Poor SMB3 encryption performance with AES-GCM (part1); (bso#11451). + fix recursion problem in rep_strtoll in lib/replace/replace.c; (bso#11455). + --bundled-libraries=!ldb,!pyldb,!pyldb-util doesn't disable ldb build and install; (bso#11458). + xid2sid gives inconsistent results; (bso#11464). + ctdb: Fix the build on FreeBSD 10.1; (bso#11465). + Handling of 0 byte resource fork stream; (bso#11467). + AD samr GetGroupsForUser fails for users with "()" in their name; (bso#11488).- Configure with --bundled-libraries=NONE; (bso#11458).- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).- Remove libiniparser-devel build-time requirement.- Update to 4.2.3. + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780). + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924). + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991). + Logon via MS Remote Desktop hangs; (bso#11061). + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068). + tevent: Add a note to tevent_add_fd(); (bso#11141). + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170). + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217). + smbd: Fix a use-after-free; (bso#11218); (bnc#919309). + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces; (bso#11245). + s3:smb2: Add padding to last command in compound requests; (bso#11277). + Add IPv6 support to ADS client side LDAP connects; (bso#11281). + Add IPv6 support for determining FQDN during ADS join; (bso#11282). + s3: IPv6 enabled DNS connections for ADS client; (bso#11283). + Fix invalid write in ctdb_lock_context_destructor; (bso#11293). + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295). + vfs_fruit: Add option "veto_appledouble"; (bso#11305). + tstream: Make socketpair nonblocking; (bso#11312). + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313). + Group creation: Add msSFU30Name only when --nis-domain was given; (bso#11315). + tevent_fd needs to be destroyed before closing the fd; (bso#11316). + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared"; (bso#11319). + smbd/trans2: Add a useful diagnostic for files with bad encoding; (bso#11323). + Change sharesec output back to previous format; (bso#11324). + Robust mutex support broken in 1.3.5; (bso#11326). + Kerberos auth info3 should contain resource group ids available from pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info exists in PAC; (bso#11328); (bnc#912457). + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329). + tevent: Fix CID 1035381 Unchecked return value; (bso#11330). + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331). + s3: smbd: Use separate flag to track become_root()/unbecome_root() state; (bso#11339). + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342). + pidl: Make the compilation of PIDL producing the same results if the content hasn't change; (bso#11356). + winbindd: Disconnect child process if request is cancelled at main process; (bso#11358). + vfs_fruit: Check offset and length for AFP_AfpInfo read requests; (bso#11363). + docs: Overhaul the description of "smb encrypt" to include SMB3 encryption; (bso#11366). + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server(); (bso#11367). + ncacn_http: Fix GNUism; (bso#11371).- Disable rpath usage; (bnc#902421).- Make the winbind package depend on the matching libwbclient version and vice versa; (bnc#936909).- Backport changes to use resource group sids obtained from pac logon_info; (bso#11328); (bnc#912457).- Order winbind.service Before and Want nss-user-lookup target.- Remove fam-devel build-time dependency for post-6 RHEL systems.- Update to 4.2.2. + s3:smbXsrv: refactor duplicate code into smbXsrv_session_clear_and_logoff(); (bso#11182). + gencache: don't fail gencache_stabilize if there were records to delete; (bso#11260). + s3: libsmbclient: After getting attribute server, ensure main srv pointer is still valid; (bso#11186). + s4: rpc: Refactor dcesrv_alter() function into setup and send steps; (bso#11236). + s3: smbd: Incorrect file size returned in the response of "FILE_SUPERSEDE Create"; (bso#11240). + Mangled names do not work with acl_xattr; (bso#11249). + nmbd rewrites browse.dat when not required; (bso#11254). + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff; (bso#11213). + s3:smbd: Add missing tevent_req_nterror; (bso#11224). + vfs: kernel_flock and named streams; (bso#11243). + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244). + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses are used; (bso#11284). + ctdb: check for talloc_asprintf() failure; (bso#11201). + spoolss: purge the printer name cache on name change; (bso#11210); (bnc#901813). + CTDB statd-callout does not scale; (bso#11204). + vfs_fruit: also map characters below 0x20; (bso#11221). + ctdb: Coverity fix for CID 1291643; (bso#11201). + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225). + Fix terminate connection behavior for asynchronous endpoint with PUSH notification flavors; (bso#11226). + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007). + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201). + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the directory is deleted; (bso#11257). + s3:winbindd: make sure we remove pending io requests before closing client sockets; (bso#11141); (bnc#931854). + Fix panic triggered by smbd_smb2_request_notify_done() -> smbXsrv_session_find_channel() in smbd; (bso#11182). + 'sharesec' output no longer matches input format; (bso#11237). + waf: Fix systemd detection; (bso#11200). + CTDB: Fix portability issues; (bso#11202). + CTDB: Fix some IPv6-related issues; (bso#11203). + CTDB statd-callout does not scale; (bso#11204). + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you enter invalid values; (bso#11234). + libads: record service ticket endtime for sealed ldap connections; (bso#11267). + lib/util: Include DEBUG macro in internal header files before samba_util.h; (bso#11033).- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).- Remove the independently built libraries ldb, talloc, tdn, and tevent and the post-10.3 renamed libsmbclient from baselibs.conf.- Drop redundant doc attribute from man pages.- Update to 4.2.1. + s3:winbind:grent: Don't stop group enumeration when a group has no gid; (bso#8905). + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791). + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with servers that don't send the 2 unused fields; (bso#10016). + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476). + waf: Fix the build on openbsd; (bso#10476). + s3: client: "client use spnego principal = yes" code checks wrong name; (bso#10888). + spoolss: Retrieve published printer GUID if not in registry; (bso#11018). + s3: lib: libsmbclient: If reusing a server struct, check every cli->timout miliseconds if it's still valid before use; (bso#11079). + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125). + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135). + replace: Remove superfluous check for gcrypt header; (bso#11135). + Backport subunit changes; (bso#11137). + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with implementation; (bso#11140). + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143). + talloc: Version 2.1.2; (bso#11144). + Update libwbclient version to 0.12; (bso#11149). + brlock: Use 0 instead of empty initializer list; (bso#11153). + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164). + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169); (bnc#913304). + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev fails in the SMB1 case; (bso#11173). + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174). + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175). + s3: libsmbclient: Add missing talloc stackframe; (bso#11177). + s4-process_model: Do not close random fds while forking; (bso#11180). + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).- Prevent samba package updates from disabling samba kerberos printing.- Add sparse file support for samba; (fate#318424).- Purge printer name cache on spoolss SetPrinter change; (bso#11210); (bnc#901813).- Correctly retain errno from Btrfs snapshot ioctls; (bnc#923374).- Simplify libxslt build requirement and README.SUSE install. - Remove no longer required cleanup steps while populating the build root.- Remove deprecated base_rid example from idmap_rid manpage; (bso#11169); (bnc#913304).- Update to 4.2.0. + smbd: Stop using vfs_Chdir after SMB_VFS_DISCONNECT; (bso#1115). + pam_winbind: fix warn_pwd_expire implementation; (bso#9056). + nsswitch: Fix soname of linux nss_*.so.2 modules; (bso#9299). + Make 'profiles' work again; (bso#9629). + s3:smb2_server: protect against integer wrap with "smb2 max credits = 65535"; (bso#9702). + Make validate_ldb of String(Generalized-Time) accept millisecond format ".000Z"; (bso#9810). + Use -R linker flag on Solaris, not -rpath; (bso#10112). + vfs: Add glusterfs manpage; (bso#10240). + Make 'smbclient' use cached creds; (bso#10279). + pdb: Fix build issues with shared modules; (bso#10355). + s4-dns: Add support for BIND 9.10; (bso#10620). + idmap: Return the correct id type to *id_to_sid methods; (bso#10720). + printing/cups: Pack requested-attributes with IPP_TAG_KEYWORD; (bso#10808). + Don't build vfs_snapper on FreeBSD; (bso#10834). + nss_winbind: Add getgroupmembership for FreeBSD; (bso#10835). + idmap_rfc2307: Fix a crash after connection problem to DC; (bso#10837). + s3: smb2cli: query info return length check was reversed; (bso#10848). + s3: lib, s3: modules: Fix compilation on Solaris; (bso#10849). + lib: uid_wrapper: Fix setgroups and syscall detection on a system without native uid_wrapper library; (bso#10851). + winbind3: Fix pwent variable substitution; (bso#10852). + Improve samba-regedit; (bso#10859). + registry: Don't leave dangling transactions; (bso#10860). + Fix build of socket_wrapper on systems without SO_PROTOCOL; (bso#10861). + build: Do not install 'texpect' binary anymore; (bso#10862). + Fix testparm to show hidden share defaults; (bso#10864). + libcli/smb: Fix smb2cli_validate_negotiate_info with min=PROTOCOL_NT1 max=PROTOCOL_SMB2_02; (bso#10866). + Integrate CTDB into top-level Samba build; (bso#10892). + samba-tool group add: Add option '--nis-domain' and '--gid'; (bso#10895). + s3-nmbd: Fix netbios name truncation; (bso#10896). + spoolss: Fix handling of bad EnumJobs levels; (bso#10898). + Fix smbclient loops doing a directory listing against Mac OS X 10 server with a non-wildcard path; (bso#10904). + Fix print job enumeration; (bso#10905); (bnc#898031). + samba-tool: Create NIS enabled users and unixHomeDirectory attribute; (bso#10909). + Add support for SMB2 leases; (bso#10911). + btrfs: Don't leak opened directory handle; (bso#10918). + s3: nmbd: Ensure NetBIOS names are only 15 characters stored; (bso#10920). + s3:smbd: Fix file corruption using "write cache size != 0"; (bso#10921). + pdb_tdb: Fix a TALLOC/SAFE_FREE mixup; (bso#10932). + s3-keytab: fix keytab array NULL termination; (bso#10933). + s3:passdb: fix logic in pdb_set_pw_history(); (bso#10940). + Cleanup add_string_to_array and usage; (bso#10942). + dbwrap_ctdb: Pass on mutex flags to tdb_open; (bso#10942). + Fix RootDSE search with extended dn control; (bso#10949). + Fix 'samba-tool dns serverinfo ' for IPv6; (bso#10952). + libcli/smb: only force signing of smb2 session setups when binding a new session; (bso#10958). + s3-smbclient: Return success if we listed the shares; (bso#10960). + s3-smbstatus: Fix exit code of profile output; (bso#10961). + socket_wrapper: Add missing prototype check for eventfd; (bso#10965). + libcli: SMB2: Pure SMB2-only negprot fix to make us behave as a Windows client does; (bso#10966). + vfs_streams_xattr: Check stream type; (bso#10971). + s3: smbd: Fix *allocate* calls to follow POSIX error return convention; (bso#10982). + vfs_fruit: Add support for AAPL; (bso#10983). + Fix spoolss IDL response marshalling when returning error without clearing info; (bso#10984). + dsdb-samldb: Check for extended access rights before we allow changes to userAccountControl; (bso#10993); CVE-2014-8143; (boo#914279). + Fix IPv6 support in CTDB; (bso#10996). + ctdb-daemon: Use correct tdb flags when enabling robust mutex support; (bso#11000). + vfs_streams_xattr: Add missing call to SMB_VFS_NEXT_CONNECT; (bso#11005). + s3-util: Fix authentication with long hostnames; (bso#11008). + ctdb-build: Fix build without xsltproc; (bso#11014). + packaging: Include CTDB man pages in the tarball; (bso#11014). + pdb_get_trusteddom_pw() fails with non valid UTF16 random passwords; (bso#11016). + Make Sharepoint search show user documents; (bso#11022). + nss_wrapper: check for nss.h; (bso#11026). + Enable mutexes in gencache_notrans.tdb; (bso#11032). + tdb_wrap: Make mutexes easier to use; (bso#11032). + lib/util: Avoid collision which alread defined consumer DEBUG macro; (bso#11033). + winbind: Retry after SESSION_EXPIRED error in ping-dc; (bso#11034). + s3-libads: Fix a possible segfault in kerberos_fetch_pac(); (bso#11037). + vfs_fruit: Fix base_fsp name conversion; (bso#11039). + vfs_fruit: mmap under FreeBSD needs PROT_READ; (bso#11040). + Fix authentication using Kerberos (not AD); (bso#11044). + net: Fix sam addgroupmem; (bso#11051). + vfs_snapper: Correctly handles multi-byte DBus strings; (bso#11055); (bnc#913238). + cli_connect_nb_send: Don't segfault on host == NULL; (bso#11058). + utils: Fix 'net time' segfault; (bso#11058). + libsmb: Provide authinfo domain for encrypted session referrals; (bso#11059). + s3-pam_smbpass: Fix memory leak in pam_sm_authenticate(); (bso#11066). + vfs_glusterfs: Add comments to the pipe(2) code; (bso#11069). + vfs/glusterfs: Change xattr key to match gluster key; (bso#11069). + vfs_glusterfs: Implement AIO support; (bso#11069). + s3-vfs: Fix developer build of vfs_ceph module; (bso#11070). + s3: netlogon: Ensure we don't call talloc_free on an uninitialized pointer; (bso#11077); CVE-2015-0240; (bnc#917376). + vfs: Add a brief vfs_ceph manpage; (bso#11088). + s3: smbclient: Allinfo leaves the file handle open; (bso#11094). + Fix Win8.1 Credentials Manager issue after KB2992611 on Samba domain; (bso#11097). + debug: Set close-on-exec for the main log file FD; (bso#11100). + s3: smbd: leases - losen paranoia check. Stat opens can grant leases; (bso#11102). + s3: smbd: SMB2 close. If a file has delete on close, store the return info before deleting; (bso#11104). + doc:man:vfs_glusterfs: improve the configuration section; (bso#11117). + snprintf: Try to support %j; (bso#11119). + ctdb-io: Do not use sys_write to write to client sockets; (bso#11124). + doc-xml: Add 'sharesec' reference to 'access based share enum'; (bso#11127).- Update to 4.2.0rc5. + Ensure we don't call talloc_free on an uninitialized pointer; CVE-2015-0240; (bso#11077); (bnc#917376).- Fix usage of freed memory on server exit; (bso#11218); (bnc#919309).- Fix tdb_store_flag_to_ntdb() gcc5 build failure.- Fix vfs_snapper DBus string handling; (bso#11055); (bnc#913238).- Update to 4.1.16. + dsdb-samldb: Check for extended access rights before we allow changes to userAccountControl; (bso#10993); CVE-2014-8143; (boo#914279).- Adjust baselibs.conf due to libpdb0 package rename to libsamba-passdb0.- Fix libsmbclient DFS referral handling. + Reuse connections derived from DFS referrals; (bso#10123); (fate#316512). + Set domain/workgroup based on authentication callback value; (bso#11059).- Update to 4.2.0rc4. - Add libsamba-debug, libsocket-blocking, libsamba-cluster-support, and libhttp to the libs package; (boo#913547). - Rename libpdb packages to libsamba-passdb. - Drop libsmbsharemodes packages.- Enable avahi support on post-12.2 systems.- Update to 4.1.15. + pam_winbind: Fix warn_pwd_expire implementation; (bso#9056). + nsswitch: Fix soname of linux nss_*.so.2 modules; (bso#9299). + Fix profiles tool; (bso#9629). + s3-lib: Do not require a password with --use-ccache; (bso#10279). + s4:dsdb/rootdse: Expand extended dn values with the AS_SYSTEM control; (bso#10949). + s4-rpc: dnsserver: Fix enumeration of IPv4 and IPv6 addresses; (bso#10952). + s3:smb2_server: Allow reauthentication without signing; (bso#10958). + s3-smbclient: Return success if we listed the shares; (bso#10960). + s3-smbstatus: Fix exit code of profile output; (bso#10961). + libcli: SMB2: Pure SMB2-only negprot fix to make us behave as a Windows client does; (bso#10966). + s3: smbd/modules: Fix *allocate* calls to follow POSIX error return convention; (bso#10982). + Fix 'domain join' by adding 'drsuapi.DsBindInfoFallBack' attribute 'supported_extensions'; (bso#11006). + idl:drsuapi: Manage all possible lengths of drsuapi_DsBindInfo; (bso#11006). + winbind: Retry LogonControl RPC in ping-dc after session expiration; (bso#11034).- yast2-samba-client should be able to specify osName and osVer on AD domain join; (bnc#873922).- Lookup FSRVP share snums at runtime rather than storing them persistently; (bnc#908627).- Specify soft dependency for network-online.target in Winbind systemd service file; (bnc#889175).- Fix spoolss error response marshalling; (bso#10984).- Update to 4.1.14. + pidl/wscript: Remove --with-perl-* options; revert buildtools/wafadmin/ Tools/perl.py back to upstream state; (bso#10472). + s4-dns: Add support for BIND 9.10; (bso#10620). + nmbd fails to accept "--piddir" option; (bso#10711). + nss_winbind: Add getgroupmembership for FreeBSD; (bso#10835). + S3: source3/smbd/process.c::srv_send_smb() returns true on the error path; (bso#10880). + vfs_glusterfs: Remove "integer fd" code and store the glfs pointers; (bso#10889). + s3-nmbd: Fix netbios name truncation; (bso#10896). + spoolss: Fix handling of bad EnumJobs levels; (bso#10898). + s3: libsmbclient-smb2. MacOSX 10 SMB2 server doesn't set STATUS_NO_MORE_FILES when handed a non-wildcard path; (bso#10904). + spoolss: Fix jobid in level 3 EnumJobs response; (bso#10905). + s3: nmbd: Ensure NetBIOS names are only 15 characters stored; (bso#10920). + s3:smbd: Fix file corruption using "write cache size != 0"; (bso#10921). + pdb_tdb: Fix a TALLOC/SAFE_FREE mixup; (bso#10932). + s3-keytab: Fix keytab array NULL termination; (bso#10933). + Cleanup add_string_to_array and usage; (bso#10942).- Remove and cleanup shares and registry state associated with externally deleted snaphots exposed as shadow copies; (bnc#876312).- Use the upstream tar ball, as signature verification is now able to handle compressed archives.- Fix leak when closing file descriptor returned from dirfd; (bso#10918).- Fix spoolss EnumJobs and GetJob responses; (bso#10905); (bnc#898031). + Fix handling of bad EnumJobs levels; (bso#10898).- Remove dependency on gpg-offline as signature checking is implemented in the source validator.- Update to 4.1.13. + s3-libnet: Add libnet_join_get_machine_spns(); (bso#9984). + s3-libnet: Make sure we do not overwrite precreated SPNs; (bso#9984). + s3-libads: Add all machine account principals to the keytab; (bso#9985). + s3: winbindd: Old NT Domain code sets struct winbind_domain->alt_name to be NULL. Ensure this is safe with modern AD-DCs; (bso#10717). + Fix unstrcpy; (bso#10735). + pthreadpool: Slightly serialize jobs; (bso#10779). + s3: smbd: streams - Ensure share mode validation ignores internal opens (op_mid == 0); (bso#10797). + s3: smbd:open_file: Open logic fix; Use a more natural check; (bso#10809). + vfs_media_harmony: Fix a crash bug; (bso#10813). + docs: Mention incompatibility between kernel oplocks and streams_xattr; (bso#10814). + nmbd: Send waiting status to systemd; (bso#10816). + libcli: Fix a segfault calling smbXcli_req_set_pending() on NULL; (bso#10817). + nsswitch: Skip groups we were not able to map; (bso#10824). + s3-winbindd: Use correct realm for trusted domains in idmap child; (bso#10826). + s3: nmbd: Ensure the main nmbd process doesn't create zombies; (bso#10830). + s3: lib: Signal handling - ensure smbrun and change password code save and restore existing SIGCHLD handlers; (bso#10831). + idmap_rfc2307: Fix a crash after connection problem to DC; (bso#10837). + s3-winbindd: Do not use domain SID from LookupSids for Sids2UnixIDs call; (bso#10838). + s3: smb2cli: Query info return length check was reversed; (bso#10848). + registry: Don't leave dangling transactions; (bso#10860).- Update to 4.2.0rc2./bin/sh/bin/sh/bin/sh/bin/shsamba-gplv3-winbindibs-arm-4 1662105452 4.15.8+git.527.8d0c05d313e-150400.3.14.14.15.8+git.527.8d0c05d313e-150400.3.14.14.15.8+git.527.8d0c05d313e-150400.3.14.14.15.8+git.527.8d0c05d313e samba-winbindpam_winbind.conf55-samba-winbindd55-samba-winbinddsamba-winbinddntlm_authwbinfowinbind.servicercwinbindwinbinddsysconfig.samba-winbindntlm_auth.1.gzwbinfo.1.gzwinbindd.8.gzwinbind.xmlkrb5rcachewinbindd_privileged/etc/logrotate.d//etc/security//etc/sysconfig/network/if-down.d//etc/sysconfig/network/if-up.d//etc/sysconfig/network/scripts//usr/bin//usr/lib/systemd/system//usr/sbin//usr/share/fillup-templates//usr/share/man/man1//usr/share/man/man8//usr/share/omc/svcinfo.d//var/cache//var/lib/samba/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:25691/SUSE_SLE-15-SP4_Update/b518cfb68f7ddfb5e239b417674eefa1-samba.SUSE_SLE-15-SP4_Updatecpioxz5aarch64-suse-linux ASCII textemptyBourne-Again shell script, ASCII text executableELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, BuildID[sha1]=c5c95e6f5ce0fe1bd7e0802c0fbe7ce2c55adfda, for GNU/Linux 3.7.0, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, BuildID[sha1]=d0e324a99cb2614a5d97073609b523470a1cbb08, for GNU/Linux 3.7.0, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, BuildID[sha1]=b0cfee2d169375c99e94b05f5762246d51d02da9, for GNU/Linux 3.7.0, strippedUTF-8 Unicode texttroff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix)XML 1.0 document, ASCII textdirectory3O2RRR RoRkReR2RSR.RWRRR5R}RRqR]R[R_RYRRyR0RRRiRnRR/R4RVRjRdR\RpR|RhRRXR^RRZRR-RRxR1R~RRRR R RRSR.RRURRWRiRyRR[RRRRRRhRRRVR-RZRxRRRTRR R RR,RRsRmRSRQRRRaRWRgR=RR7R RYR3R2R;RuRER.R{R[R_R}R*RCRkRR"R]RGRRORRRRRRRR5R?RyRwR0R R$R&R(R9RRMRLRKRRqRIRRoRARURcReRiRJR RRR#RRbRPRVRdRDRRnRR:R\RtRBR'R)R|R6R%RhR^RNRFR>Rs N)? ߻ [=F9HS=HJguN.fF|tL㭥4vv7cK<&8' |{y# Ӷ+ʛXP,䶲"ߕu{hK?v8Ԡ(*,wshўCՎ/*qG,E\}W`ښ ,b&bwԅg%0R9􏭤ruia0)fOhNĹ)~ o#e {Tܞ..=*Tsj"jwSz`I/CϘX7 Iɣ^P}sgi(Ԙc[Hz]SK ^hQTW@Th1b~YFOStWiDSٖchD60Q]!pψ :q-6GZ'lyEN,&Đl.JQMԫpT%wUw ~ŜHf=}3 ;}?|`w+X9khF/ <М`{z1}p!>|1 ҺK|0[z dh)CŒO7T> /EfDYmiW:- lM5}&270\톟<u$V 59}NᴼCy,_JI+Isac6~#wXt U;0<d:СƓZ:137&?4B˹A%R23H6=/w@vFlQnUqGP7Qz(Ȑ'O^t5oX$k)§i_S<\?B/{kDoW͒UG`;j:.ӍMP?/SL(A3:ѨUbg/k<LKak^]oʹ)pmcߝ;@{*Sh0(1IH - R%8k^ݻl*Z~jN6债g7Ҟ̮ۺL\c{UqÙ; oJ 4qY$j'je-o8I2 u!J%u)`])W7 S}-G̴mmvlO҄w9J띅DxNu7VM}%B>nŧI=A!!.ZA{f_ N` o8K^l ⃕6vc@FZ!jaeZ7%{.LXSqNP'^TIzTSgs. 䬏5H|Ko.CMs{K81yf`cD,JH663[|^ *yYFIL25Ӑ@SW*טDt|~eX}ܶ_ xC!E.gOǞb_ HINYshΜ:N^%Wp~W@?dfI$g) :s=@U.O(mOұJJ="و1X5\ԥdi.F\g*fJFZba3[oNlw:mJ/]jdձk#-ecvdCˁ6Cw L:L|Q?)x;ɫ,~ؒt?K/<03ˣfF`HMf@ۡvK~[QZr%t9l|wBTh으ʖtsY h{(VQ%+xI,$.tEWH NgۡI*a=8M?'&%V|gF1uܮ")5]7] Y}g swKV9Gm9>!kFbfwirҜ#wdkJ5y49qwre[6չ>ʿ})0<(7/%g1S#ށpKy/A\JsdB_?EZ/%@̾^/3Az4z'8!d5{fGuU|py{UqNcul*+8Ia,5Ƣa֭rU?h޻;Y`XY; =Ueh]O7E63#$2Y)7+gd^tr ?]b/xI9Y#$>>]\[*K 2r?ϧ7 DYTWU8 fW)LqN#Wlg=6}EJm2ْ;)DiG2ďӉÇPrPNњ.~g\n ybβC҅YP3l7}.BAequ"|~!ft%H.DF5}*3g<75v6#Oy!+b:*S JRqK;yH('I9Tj,ٖJ:vFᓉ7h&fZlP޵G Ocƞa>·ps'tijZ}eZs4j> ħ7m%'ǣZBL.Ulgࢇh+򜏸ߦ69Ul.il># : ] [ i;(v/zW!W^рjaON\3^''n˩YAp<cIqO:ELE(ZݻP9>R [b_&#)\~Mfu1qe6z(Kَk>؈9y%"<\"4"}_&?vaJy@$#Rwv43 `XdcbޔBr1-w]b1 )라ɢX iŦ*#n(jU'9Fi倕|5c4^Tk9G}VE ? "Qhf ;A7ӰKҏB_{1g\KH^ڄJw+UWN||c͛_]PGWy \Jy粵Vn'֕+hb*렓߱gͻ ܷG&\HtT]<732P.3c0DLZ-+ԫ+_5*c ߪّFlAvY;'sfF}! cZ%~tϣ 5Ҋl]Dm: \:/bv!7,iD&h *]&e8lDz@uꮡ}{9KaEYs-vyHm'$avݓZmfn֞"Я)jk3ݰ,%lUw4("-bVx^Tt7j>k;˩MߐDa|St"D%6 oߎ{w]^P=8n uCFnpVsaYjq{)SLWǚK:0>۵3Pd %UMP5K8G{V5,S+CDU8A|pZ:I:BbXpS_x~z?E,Hq?WN@[nk}5jQ=?T HƬWkh#f9# ftd=;k&N!(( _k 'N 1֌ؚ{.kǷFղu/?O-y| +喫RUy&d(UQ ݪJas\tX<L=50s-1QH늍$֑!ba .{>j] 1ni?<1N; <5hxL 3YJ E+)C-KQ$VpTW:zJ%*"=IЗ;-m\IY` FBEI a}! yFkr "=Y [XgtiB@XMFf(mdơAQjFmu$0{_m#T<&MơT E5u[p/=0>ik: O-Ɖ<+s8nB< 4b76!TI&#<̕R ]PS8oj /y'.*6DK. ;}̧.>nj8E-f-^i/],ľm87n`/ybew ]r,OY[VI1+>R5mH؂3,y"ڌ2|%?0P$k'c1Eh%0ܛ~-@b"=<jΆ4k|{Vc7/E%%5n(ic3X8-iӀ4zb%=69q>F%fx){_xCߴkD4*Ќq!#I"' 7Q+Uڏa .uqMA+lɆ=-Ųh~/=Er V]x䂖!M_ާJM_%CTkZ줲`"( Yn[#VE"?_>0NĄZe$}GpwEz+3G@IByJܑlG4zJ ]zi޲rXq{m0_˞+ [uAHGyJc8كjNk"=a\{-Ƙ$1}*nɻ$VDQ`_6wCq2'VIT#kӦ+@ow[XrnkFA4ɌdyrEyvI6 Z$'8#׌>j×*F;ƥYIDT]Z&P{I5Q)QiB) z";4RM e 9BwpNjl9QC=~dS+ӆZ¹)!OpS0w.hV B`o8Tnv ;-ȍ I.ofQ줯13{Kz& NE͍[.x|pFzWTB'<$It缁X>l7ne2x+jD3="Y[=sV" _=6KѧR{r&*_pIb|^Jf<_Qpi+И6'yU˖aq5H2e cR[QGqƲ ]yՙ d29ZGuc 1DZYmY 5BR! VŦ-uR<k0!Q o#NM?, BeghСeV$B;d2}o2`A$7bED&ITXD# `v^kTf YƗIEeRH,6t \T`(\phIiH_St agdUA\drejG@xd5;S:9ݭjWp7}>ke9b"˛h`O7 o`lr+[W0 D5{|<[*zPI'1?K~jc^$ ApuhsZS"Y-1#/Xa^L  ƼM$]k5$p;fN$ xC=B7-w0\P&'.!~Ju y9k,nCAt1Xd73`Q;™Z!6y.#+a4ij-n:P"C[.SCe^n@s嵊H5LU/gD5c9no>ZWAɣFgEC5 ^Өz(Czq\[[T'~v@M1tmzl* -A;`2ID-CGbƌAxbI`"Ԡ*MKK2E$=w'ex~;|5UPF3Lo텬DoKkT ز +(Vĝm§3%eؗ__nT]`UTVC T}Eo=mi%Kʝ(j.L#qq)dk6}#{W/e.˞DX &7*7oB/ys 4ߣT9u~D6L53 k^x-+[V?q m f0X2xL*&QE7fLB$նPs0XVH[6Ibwmo? #+E3SL=*6KXD<*'yϸ7ݽ&X@_DzNP$Un~\go* w aD InXee1Cה ny&*\99DWitgK+!y6i%!׍)4Z+Hi1Z(X9{h7_M耊\1Qp=gc!3ܻr` G3f sn߁!NJSLKW 'Rlt'ahM|Rٮ"NY-zgq 1ݐղs %Hә`fkfLiA-r6).|]»=+Bi!7^ڄ2@T׉1g4yf+i+IZw0d&ERM7nJ!ߍ{Ia`.SB9柚 BmBB5pk'uf;/0K{ LRR܁}oʛgְTAkr c4hfuF1XlmA|Ho5e{I =QC8ZO$?RJk!<'O$UxT>&ش$f:fcm>4))ڔ{A1dDGǃ\؝pQd@~;':D@?V sɝ ÊAW HS{:i .iԊ?7SkbB< +7L{vپ-sG*qcm$c8uO)xݣX!3;|Jācos4@`r4tG˘Gqi(b،}%6< U)b -kuQ"j:_Z^jeo\WW6>;f!n7~BoɎ20 8N B{U/zĹ{/ Dy? ڠSә!p&ۈpWO2ퟩȎKϑ;vJ-~B.xa't2* 7]h2K1!ӿY7s7 \K* %NPw@ Rf]&v5N5 rȻh=$jVz =e?i9W W &%ǯHV%PWj}G'g3ۨ1UG`.ש:'ծ}|4h /D*[˜^Gf,+'~4.*x?ipxzo*ϵ1؜/ d@1x xNL$uFKj,]KfSUyBgmg7R,Tn\|Zb-y=9L_ÀL`^I{rV]n,C8 heS}oh,-20&NÐ_ZV<(4TH0K^hPb$DkWҜ)0hAQ@27#L^vϰ!sœ*IwT~ 8ye# 7#sV c+8u1^'ޖ38 "C=9NyNqtb_ZjN`s-Gڕ} wuW^6N8p:k2Bq9cW :{Kl iސSRؤA#B٢)1*D>k8#A &n.(v3` Jq[?EH$ uz4,a[v91abW~nA;V%O`+پ`k >BxU#qd񪆌.}J@1Mۢ N:yDͦkBu%Qj XV+/Ux;pqhwK'%$X^ ɀ` ` Qf WrY@]5֓AbH Sym2⺰ng&mڪi7=HMw O+H 9r@YgMu zoMݪ֨0r" ] D/ P{4+934FL%|ܷ=,Y&ߩox/ -n$JB N&kx'hs@lHlL6ɩKl$q^J ͅq{@b|?-)h26 Cu-p u޶N ܍Ly8\4QqI fǓ4} y'ϻ$sZ_MFs96!? Ȩw_#γ(1UF2 v78?j=hTB}9 cJ^%Y<(h3R-kG 0t&!dYI528E$īWJo\faxs 7Gx# b fZn 8a vа#/E!we58yO#{6[UIRiH\{"A;YBD_UWBջ{LIqRJ2Gl̥*"xL<{GQYRob4Tj3nt龒T?.P@s4zEEŊ/ Y"S^Pp=xHt#RQo _-]G%b04ٙ[v.dBHI7+ vMg+#m$Uu/ykQEhF-ipu+A֥M|@B٨i4Kave>hu-WThD2^1A]A;f 1YiM:rgo,; *\HFj$ȸŖV8eà:HCʛL34 i^Cv8}YOGSExGG'A,"z"G|>W a>,a=S*E|t D=f|N9URu*Np&)>2ȍ$0!>䇔j< Qof6}t!﵆16DJ Ě^"ȬqY*l~p % P^'^\f\" JS]%3fy9=#Pu/l(X{ r(BNBJ: =7IHi! au߭? D 9}.$;쪥NB|di[4shrGAi,qo^w[;NI}\ wTc9>"0v"z*heX{(a!>a58{%[7gNbث՗C)KelIV}<7O晄fz~yiq"O7bį4Sc[-&/}2KxUh 1O;&*r2=5\qw&CFݭ(1X`o"KO zNifDP\qa&.YN%+Jwkρ#g2.,ɎOt_Q#YR7](V$Z^?oQd{J*_ggO,t<<7E}s *up\>Kou'V;+^$xI`ώQZTd-UwX'4ufh V 3nL| q[g p?&;c  J)习<+pJNM)E :sjY⮅ m8(+x,#+'d:%;8x-xTEFB.@I8y `[lCaP|q<X޷ Pkqui,XL# c hSNBWz|\(m+i6C5wryW+«8.N[s6d,O*"zܛ#R=,s{\*V,M,!*W4pRϷJoy x׬eٲ,q'M=6W}>$;C\j|J!Sڥ#-bݤ@ O_NR"NC 3( t=&;aZdcŠe@1,qMхܢLJɠ?&+Ԍ(sA/܏8o\TiLUpNL>p`0}+Z@./^YB^c{YeL$F'J²2 𾜥 >Ə |Z!q׃jD^č3ʌd.90q|*KcǬ7ɯ{y%@½Q("kyzi%7Fp 8})2ѳِpnwi7W gܨZ< Q" EW]DUpp pXPЈ&e#r>M)dLR+~aH. |FG#SP&rcxU"?&AÿSmr,Q8f?à\g"RhSrMײVK>'BI|D=~f빎 M:)% 8 J%ROxY*j9JU,P3&uwi6IWUT},n$Sf {(]cӡ]]eQ|K桃gC₏;[e}]7Zto4ZGV[JkμE9!䴊"\I}4|P Ug]1{B7#C_H֕sT2Łf=j*Jwޭ!a,VMCi>;Cr\vtt WU!Vي9ڈ I>If`o1sr2''_D"YIq&#y -eRc)Ggca솱ώQCmѡ mڻWk >tu(Z825eJġž;H!4 ;uGO"3-vrοb3Ab'N97^].k֙vÜ4N\9 4=lpT1M _\ x%Wӛ[dφcTVR7C&k&V;-nSQ(W0%rQo%>v@"Knչ{yrkd1Ax #=6&mWX7ݪTB] +:T Ez ze54\?B!bRLJ*"r/$Ap7RS|؈_/F$ FD=bfJPc DqVl>eK[[ʢM揮E&S擙ȧPUm޲Q |oi t>fHAx@Jm3){j)ӧ>pnu!ۧvL7'©\V{/5xI* YkXzYa{Uʉi\\~R_`A}OFx?4p-̰;):(P\xnLdxT<F-00c*je.,)KGZkքP0/<3cHPc>EWiޥ&aa*5vg#ng iɹ8ek#[&q])qfgO"0Φ_7x+ZemGc[Hc/Q(ŰcHH3oÐLHMB'J!o̺Rr'v ,<4M/mTME{8t?%u`q)WaRw[y "e9TV$?˔]TZ[^3{yE*NN5%c8~!,~jGD-|{ZLɐZ3/MZ+"/@mH̨)9cFQGKϗc1iMߍQI3{#}c|=\0ݵތF6Z`o ]Z&I wRG &nWΣ_VC+*]ν³MyA\v#f((wەJi 94FF2 tgx?IAV9y']",@dmCKgVUۧ'U) ?Cg\T\1ϕcˆix[],t+h?nEM2nȹqv/o|9yr+8Y8qoki/:\{Ũ*l6B;*~Mu PnkqF 4R~E]7(0jQ`VHE *}4¬fPqT*4/N'w̮\Q^h(q"#T8uޥHX+XK)GBnTXc<ՕmVUlB@Cl,)(d\`M1b;Wn ϨMt`XeDqKw:''ʒ9jRL٨ ˁ9SUzM?x&2@eg &:+tH(%d*N.و?iqz?hPcz JR>)hBXb5OwYi.]w$N"M~w}TWPSQv!\NT6/nPuָh|Ǘ{}=A8 -bNI4m1!l/ؕBoULp 5&aۥE | pe ŸXaOu۔1!hi{S$"V.31U]_U <khH-/Z"vxuZ!+ul9Tv̕ x 6@jwt@n&ݍ>= b|Q`:0kTBgjQιfo:xvLGE,ƗD,2=wjٌ/:68/aZ.6?@ dm$iRhܴl,.J.3H2s[9Iv} ȼh"C:B/ǵx`Юn)@n; Sܪz~'"v`y`qkB! Ʒa{h݉5;-'`3o )Ohǣ"ǭ;2I=tŽܲ"MoT=7"B!oݝvo>5 )*}C颾$~0WΨ]@!NŬ.((/|{*ٜAÊ8ŕjkY" av޺ ,pضCPb{~rY)ӗ?w !dlO|Iՙ&?wK| YD]4%=GpEѫ:1Klq8t ,ұrAV>qJa .]yczVN66%fPbL /(7AqΖ%{i〩*4M.k!e-+Y *ٍj(ylUR%$>\'?TpWq,$ S_ b{B =jЇ~ ~e%K"o2PoSx@/z ob@‡xT}!8ρįVx4Xu~r G]ȅDkD1)3X1cYřlT R ±[oޢLOI](ryC2MC^i$WrzvPT9l̢C{}ٯWmrP/iOpŽ`G/,BVӑhNqKjUyV ^8ZXA/Lh·rRzM2|Һܑ^K_/{9T? Lפ|'=)+'ĴiMw;,6xb_Ln #B3mB$~ܣ6{9Hy#V9h{LzW>sT !ƺa4,u:鷠oi1(\MO>@.uΟԲ$På)8?=LN~A+ b:^sdӢ{)-⟕"UKd,|9ly-l߽hU]47 Gwxj*n8FqP`kqK&)@^qWʆgU i+4=Tg% ɥN!X?f@IiמƟ $;n{ڳqA?N*~8S҉Dݮph7Rj*욍hyk Q=Drybd@7;P%"H^ +2߮t͗Ht+yQʡ8$KnE= {/ l==[>XB$MVHb07~qF->/E8vasp6+[N phC&H5 nقk1"ݡyNOصbDž% X%Tl;AbJ]ʩ5ԄY`%ye iw $pCY%n0\+o_ 9-&9df'Z`_zЬ(eKԋ4Aʝ@1T_lybDԾLzQ3=<‹ߔ3y&:J%EXwϜw.n Dh8v6탄h{RqD>VrlK=Jy+ё!Ksq\C:XeFhJ»j49$T{#Y\lk&r 0r$ehc؊ɳG&j3Me7eS+wP,}Ɔ˰vGq>(a7MN yyq=%${*YU8_Ќz~-?(;ԫw?s3iަUl\p{y厃U'%p.Îkb-KF M V1.{ڥgkߺK0ѷX{͞ HN%oH{V?(j2𳭪{X嵌QVO?% HMA [GN?}!0$9[ yP3Q\cki[FKHrHMҮ9z(7o~g0Fc5 PS>pa_otCUUybSjWb2~T3OZ]E'7S±?=h4Z%&ljԲ3< $ɗu:~2*zeI,~Kej(/y.dX6;lgl'h!IY/]2J e"?쬅Hŗ\Vyb@H#(zPrU@=D4r dz2{9K1uH>x-Da3jUԄ2+:CD~7FVl5H!2 D^n2 d $\}Ň`¦ WVho')3vg,bE<"QuP0[Xnޢnit(7!2䵶īh(QƭN8('#T@x F6b).''?X*KJ9KW1ZZiq2&D)GwYP,"QcĖ3:} *aq(nDCw7_S.}Xef:8KE~yeV4wmDqwJoXc^,t 9 ê PbT 3#=Fqe=LJw(XP}OF!iwZo.* ^Bhig5$+] ݣV2]AV#~um;)\ScJC4weX3lJnGyYpeּ%G.zߘ"T nL$x^txHJ) #Ix(\{S&y!4̈'˯ ʜZ#z"ѳu-ufuy4A%ȝ],0;I zHL;p%:|dқ4.ʨRU? ] ') w+;[ `7vX$6T9l<(ʜ0,;(9y: _5Yލ>@i06UAeM5mݚEQKAm m5 X=cll kVV(x`~$H9By!qUft$XpK 1 !t6X`0rgg{, M8q9LXh2h&kj_ 50?U/ .}@tP sIOt&=Q1`F#lLfL!c#);IA1ri 3 繾ۓ@DZkKΤ{ D&uO9BaMUx3$AZ@Ϙ&ÌhWN=qx(`VS–{~c-5AMag^@],xuOAomJ9g[c1yj wi(^p\DG^܎Ԥe P xo݊RGtejiRZZ0K%W_x3uI'@o xVLHAaOO7~w!:y5|x^hW7Zm5Q_ }_Wf*]kUT`Ay$:)Zb%\fW/ Ze9DzX`ss(Ν}[`R"ϣUwdsĝpp 3uN~}Rvcx ,PJ(!74c?=LN rf n/M<8y2jW;_dY.uySq贸>'$-Y)l[mwߧyR0Ŀx  83)zacRQoF9zj .X@og>jk~;@7#$Ub~7Cu[n5R%'䑋 g Nw hi}cl k R a}p)JdwDXq\_*,KpVJhzUnl[ 0n0星 ,@ R|g5ە8?]Mc.0U Hl6ApkPD5.D:0XEb3@0'l$ې-Sq0 hh1kxQ| 3t֯*vLW HYhtDc5U/JmIX{?r 7ZGN2'5s4<":`_ 7gTPtK$=AG25 0\i̖BJ'0Fg M j8!  Fc`Tay`ˡa-"i]@Bu9,v`хlkI Wr^IvDc̘#T[+p޳y.tGïϴ^r?y:GV%'JCw)?cΈjSV󛌇~c8*&V p&0Q36FYw52XBCW˖E,<( dC1xfk]MYE,m#9]DĪӟ4~MJ̘#-\yO\JޯrMmOF/R>Z:-KѝNfNgXѹRU}36z ,2ӽ 0$V2x<). :n]~EM0\"a2c |)|Ē:#$~n} r2&Ɣ wř^MdWЋl8:k 4]ʹl6?n*9cB|ф,dD̮* W]0w,[d0`O =Q0gMGEMġթN.$n6H@.|%5% Ƚ6F_~Ta}3QqCAFa;Gsmy7OQ4cN0.dkyn)\.@G|>RLXiIP<]P5(t C6R+4>#/y&}ѳMMPk>v3E VJI:vGB*3 ojWZI(fbtO~]U*) GUU9%݅{~iR-1M?6ruܰR _HPgb3Dwr!w@فN|)Zk2eyL4,F}Ԭϻ'e'x>>ȍ%)vxqvKh1}g)=p2>} mmC(i6@9h![ոÓP!ԕ/.P[1i!DPV6Qr }(B}UfI/m_љTNN뜩N k\k k/'\.DG=-j4rB'`p1eb4_L1bt;D#(_A޾ǜQ|ia^#y^:AOYO%)26ݣ}ެ=SIʧKE+m7ΏBbB)uu?T#Fqh#um*vh倖vP'HLT~ ndz:56&&Noߗ-+4mN[=mS~Nxl%$@fΜ{xt"Cȭ$A:}R:#|W_-[Ys9S)_$`\==1JZ̈́9@ -m{enSǔUz{œ<$u,͌^sGoaA?+kȘZNJ30<_6H|]_btI> Bh@ :C!,zV3.Gޟ;.đ0T߬NI0cFîs?srVp7(B7ڝ&+:ã Ze0ftaoAX@'xe૔yK& eCǡEo;&ﰗOXV,MB&~3 ;crvfR/4+kW\DnTМDUTY!DC`)QA_ZB }O>~ g[a\Oӕ2_MdEZ'DAD=Ɏe ߞ͸l_6AYYt3rNC6 Uk2!u/1D*HBZDW-CXnR&zƯh( R=&:)_jS6pcfAѽ!!{XJSlW_7ݑ~͛۸t2)Bșy% ZԵYSbq顀Q>#ebUch#K?D9Pl}%fW'tZ_a0# y )YcESGg;!z0ZS@~rD4[YSL/++]u?BR QH].8ˌe~{6,KdPRQ+IN>'-igϦ]CG̒Fi^r9F"T90B.>w]9w,dk*5Z0EÛ折$w\Iw sc2E)3p7&Rsӱ 17 MؚƩgD-;,ho ktNwM=tD".߆*`@&Aav/({) j$ r:Fw%6/ Vb0^uĺMs!L̩1.~EꘚGcVr&wI@FVm+Fkhk!VFjU{͙I/ &HN\: <oL6,"&4cvեyejd,?`Hsu21]E{Z<% %JZ3b\a*"zKm$\%*m_U ՅN)>HkFg2T7 ‚mCgwrܫϖ&Rx8*3 RC6^%#ڦZ){OE?s4מ[F5!}p({:L &8S;%(VE`k@_Fv{5~upo0PV߻`9`vq S,L:1h#J*FxR9yib3E#d;:YL1l|﬘tD+Q!UM-N7OT%[:]RSYuʿyBE0= `ykJml P|5_ TSh;Ni:Z:3uzya6 T{N)/&-EUU/mnVQ,>M?u7`^&`.]yGuk Wq la6QX hg墘p2z}Ez$v_xʃM>F;OZ|_g2d)1ĨJ_|阱KMޛ쌸&RnaìZ.~k6zxk]2^֑\!}j!9*ԪHuZڗV{R ˝w/D#>mtn{w0!M>?24˧^NhllZ%u2̣ lS/2tv9OwCh|yI,J섫nV'nTdsR2c^u[m7u@0 ԨJ[tN~sK&ZQPF[#"0r7@^9Emi8Ύhqc޹쨔!Eb@I,փeF!WHk3ͼw :˺ ->֙Mc=qC8mG/^܉ v\|P JWiol7F$KoT|u bmSG.M7qD4D-ܒ]!Q־ s0vc'ꎨB+zJ' -0ֿIۊ2|Ma"MiڴUc[_,$ײ `zcUj?eGUXJi@e?jd̆>}oldWyvS~[LKb#ft5+M6mU,uh8I8!Ӷߌp&unIavv7Al+c =zZwIvlŹ_cp@h9<18tiWH):1 Pr\㮒/8CVR@SGLttK5]w\*BMɂ6pXwG> e}} +(cx]'7aK`gje0Bli$_NeѩB^}2zNV2kuF zHDsQ_,b>9TqJ WS{?)jZb AUL7;cSP WC椦Ԃ?@xQo~ bښ잆tzנ}ܶ.%?KLo6qfPXA~Iv%>Ar_ eMy&Tdֳ+g=|O͡×(ĕ&j|[Q1_%ԚPZB:[\LYdED>t*9z}^vLCSRS;qs;.1ڤ(b81"Z:qBATbf䦞]Gp`(_8Ob\Lg[Svi˴DDX{d)@w $W k С!3;K3s2dc=V{OtRCnL|~V717HL9F0gMNy]/ӴTS21¤h&L~U{QT@K!(%Tݼ&c"ׅ: cOF)tGOD.-q':H+"A>p'<ys}Z͝ah3$𻙆+FjԟLiR6Jd#(*Xk>qg*)0G*N084IHut469v=U+uեWbkP,xAl6 ѯZW(ڙ)Sn7wHpZ_Te:C E(UJ|# y ,I($KU\f$lՀxk+j>v?7|VY$Ca-,Dj[sV: ƗB؄pA(jCO !XE.7Q4:iBl^Y!t2QH.ួҔrϡy9R>iWn*K -TmKHD-dxR2R.|̇+aTIh>D_\_x~g 4N6$sbʁ7øSbpcaep{װnKIZ_P i7'o7(0u7gC㫄`fLئ6YhG#~VX)fݐUG̠yX?Ы5%GOx5><_WdP֦|JǿC|9ͅe־|8lH h+O Ia2-6ßM'f{Pcm'"+lR'GL{dvyl#I g] 8rnsM3p2wZ>؃ԭ)IM^N^bL{906MBr(yVE=N_IBg/bpuKw]-(\yK䙍]z//qh{'@Nt*y*jUYj7^D!4I]K 8=kqoI GVT-gE䡛yUP%Gv=nf-3tEQTl%h/N3yD'/SLW@u.2DU+(k`o9EH:c?|s8onx䴠˟ sm֖K'.E"pU2LE;8(u!.IIlF46|f}3{+Y<b?6In5<Ɗh\\V5WT2fF&Y= 78&"U/tDo JlLx2\_kX6j1(ʐ1"ݓ4<ǶM c#LDdS_E`FW.䉴/d#uGd|{ҚT*f! Gz\h0o4jW~򶵶~^AYָ|X T bҰNu4tm~u0; rjn /l@@HK'7F-{`@/!F~W2Ө Sz\"a6MO 8'zy5a3oPXlprV8N%C:+bne]%{Ȫi̿@e{|Kg1-w^u_VuY I[ײG͙2ߏ7'|wGϮy%)k%%PUa*ܞL*. dM,XBHB.CY:hr̰KE6:{Tc҈gsΫvgjf8zŌMd^ԕp 2Ҋ-\BZa >& #9'/&%]n&m\=lȫn'䣜zm6ȍ1Zcl8X0OmZX8 ΔN*@3 5(d:*'nNZIGj7V+?U-++>* Z,r+ɠk5U;w ̏66D Lښ֍F*h ^sȴ*+U˸^즯63Q/v紨ة(UӮ/is/:5d]?oٷc0wUM'-¾. y9S^[xUaV^?$|£kX"!p6P΄4N[P x<KC]+t~{01E$UM+6+mKqra=(^4Jv@hu,S *JL=WipOe= "vXѓijzۙ 3Z\cr?KtR2ZwYY61S:qsҷdžr||5Ȓe0OMM5F` ER!yte,C앎fBض $G&vsE t1"Y#"1R ie FKWS&ߠRQa9^`MΫ\]5kzwQ< ^;bVx*YkEƋ5'g#?;8 /vk( { }BܤW A(ˑ9"<3=90(3CbXdӭC87Y1hvǍBտj{ W2%xyt_`o a:2?{sI&s5o,&\+r6<*{i豝EsQ`ۉLj P)&j_ׅMdOjE%gݠY7? œF| R.Ύg3X#zjsێ*,n/%& 8w Y9\k<H#oSW. 0vLu|A2֐7q7Eyd,Ŕd=k.7ѿX+CviA1(#ǾV(SKUH|Lo΍Ϝ kb|ϸ1k I`3ZuXɽdI&e t(gD} GS\;0Mr̋վg+fg]״ d95+;~#I5Nmάox2OXi@.LT^ς$c*Ciق-8QxwR5`䜟'$S  \rwQ86^Ü*ġtHլmCo/(j+2X#?Mۙ7DܡDբlw|"s p|j*2,AiBMۓ,aCe\H`?IZ_#_K}ƶt^*Уj=)XO dʹx  c~%gsջߟ.6gKkgk cbg#ޭdBIgȵİbWRճU>y vQ<|Z8?.x<-8 F69$ŚTOT$E/N~,h6ԕ#}N^K0hm J&0Ap Ƹ#L7]_8f(:Iy"i?arUO#$Svh7wě1#zgڧ(kmY ?/AO=A-ՠ[*}y+"4xP;kLbl| ~ 8gGS>34wOshJ8K/fܝlf#Cp]Z[-fաloJص z=LK,u^@S cem™or ʼn{ҁT _eTyȓ.)o=jj=/awQMz1,ߋFI*V**u&97q&l>r|MlQkLƹ\%!x@=u{xR5qP噪`%ss@J9-lg,?p XpL ST~*%cKn9W'M G]DuY۬m^9<T?IެBPnSUi>}pvɚ{!0[}}u%THyw~Gg;D*<܂z1hG$F|#Y[ȣOB%76oaFPpQdM8_9~m|htqC{rO mA/\b!ɼh< IVrfv~ O$mU|(`v*P;(L T ,b`sd?>@{8]4n!G^Q Nj.([/> _/qnV)Hg k:2Q$"ɉ3 s-wR\ZÀ3MZ)W#3\b~ 5=1D$cix\/ #;֣m >UֲP5͞9@r7e8SˍCy;_ X,f}Qޫ@ e]C \D$G?EƈwR1e;}?}rWW%2w>#3y ;Y@rk*tmT-i/CLk|A .4<&>Gj`܁(% oTw ÇC*Ok Zks.E9 ]lԄ9^|6/wMӲߒEWo VxV%~ NS IP?4([Ƒ'^ Q1mK(V58/^Rm8A0eew5 /*=.0>/`{,( ׄ|4Cos!*,Kyw]P2@!83\pJn_Pnδz8`P7Y;q6.(MbT]QÈ9'!Qx>p|:+Q4y9dR츬Ë=vŔl|PG|xcͪ@K)r$SV @D\DM.eMXH˿B)>"z6;]k"VLm;;.!4h7ؖEM7%b<1TȸIdc9MGo#FP#د{hL?; \׌'ـUo S?8%: >}pJkn@yp(O+H7F2uwH۴iN &cݴ;5pEAUBDӀ54}Wu:!yKt2eop@ .Ou][1b"/{TmSӏ7|yє'7)$26]Λ 8XKc|w|̔yԔØJc;n͡ar=P%\7*NgL͊o(1"l,A̔:Td#Wbz.ۨg١NI.ou3q . '5Uڑ)c6>92d<lR=(RHF=ԀiW6x\ RVGlٮ (mOű/\1JޙQW@V2bP6V4'z߲`4rׅgͼ́M/ .J. pAN5;u@~vO8AqӆlPZĘyq6+MT-9{IhN!Z.N3Lg'YFm! yzv X._$wS$a<,Bs"H)JϖvBDILv ;m-ӊضeJab~ j6eزrW/x>ooc.=qMQP6`jY|F){K&P:Ĩ:Nhۖ ZF|B L[I"_a2g\i&BIKxy07f-~Ee3P(tb"KTeƩJR@>]D(Ip<ԧ6j`MfhTR7ވ᱈8*g zxg9?B;h-f䣒FYDByJu?Kl9(7Jf^+rWۆ2 |Mȝ;GDQjZ/yi:$FT.Mb]R p "9O'(-MUMQ`XXC CzPrASFS?^@ֽ#뭧z8dæPo*D C\q򟦔DulVdЧ Ԋd',+e߀4+S2#؛ij+7i>< L!w ͦ? J4UEl0(뱐 $79P7{w-iŊW hB-. s#! #ط:@9wXS°Pb?krG=.[cG1 ^Ԫq E'8}^ Lt]|z"W@/>2呝9i6.[NP]TvMFevU:ظ\%۽YRZ ?|FOT,2 WTI%{u(Dq`/KG #n! ^UGL‡.맩D6MWԞZ :貴<cY|Pi()HƲ`'!!k9Qh ϴ+cNAAoVH B9=j(nMQQͭ,@ 9p0"<r/ D7R:ktl͎ 1Nq6nYOrCPP gJP~7'詞P($M9޳H:9tz5<YBumdY> g׻wO})8ISaq6fC@).D!킐h}%w37:R݆? Xd&|d>P Lp5зoB;φ@?XkCΘDA+qQN1yhT߭+u.NW!wy>.OZ4ᅻ:pDX=WŘ*쨦Qe^锇Pf W~j:#/K\祎!ܡniOj΂:ǾgxNǿ!dבstIдC(i<{ ȑ趣 ?>|2S.tծ0aF:Q}/گe߾|3N@{L[K3*q˵bƷTp3mXt 2„i'D^5`U*ZrNV-|"&@Lנ x:WLD6u0 = `Y$tkT*w3SwfN˖xʱ)?pvm4xT48U 2]䋵4'R~F; B *P{h*>,hnbJ"C,a>@N2%Q9CͫF){tjN=$y<ߜ-dF5+bJ  5DRxw2px֑2>x)4Z#ۇVVjJ+3*tT'P1XxXGI4l8eWr󂬗qnos; 2t:T7Ruw텫ZT*thϤ> ϲ/j )MMkT}ک-@(_KW% \h,~)peXӄlGSdNWwD#;S!9p?AT inu&aDi`z Lڑ$K +/{叢`ҿ}5@c"8?S:㠷N"@i=CjsEgIJ#CJh2YtKaЋyrjWEK]2{/ji4' $w|@ue'K>1N(rMc/Mmq`yM=-sn7OywuZGټ܉t/UAU/ Uw| 0>dheHlJ{7fFZLGϫl^cߌ#쩉-&*Q/:6i}0LY6D!0nt=}v~1܈$0̥*':_5(z[`ZW #(=cSZ"9ad^j"5'ӒQ9zsGv [ s&IG䮦i5s0 ; hmޟ~NtKCv_6Qll&G5v^m n1V ޼9"NfsHWSgq[/'&&KQFUͺ#)'mO ӹ$''AeP5[ՎVfH'#BH4tD r= yX}?^7Vwxa>o#=+!EV-/O=br2۶q]YTXN2⩒'l2FGѺsMM$I>z9/ _%3̞>Л%i0" Y!O lfRD"9H! m<9VPZⵤKE_=t8{:eD)K:G˭7%n5UnSʿ?쩟\=~(ނjФd xCiE im:|j<ʺȾoFx6<}8k8붝us:Єf[x=IfEGU`X`{Du\cy2!{k9 02ɯ%̅dWEdO=kS[b똕[0}`'J3J9'Sv< +j[J.Qk[0e c71?*o=isG0ui:qz> Wə1*{^ p٠TE/cKо|7C,sA痃q ` 2HND|P(伧t r/~u/jG ^IʢQ!f-S.$-kˀ0X6vZ=tTȒT8~'Bn[98͆cI vnMXo\ [u"!|h81j'_#Pdr0z1-9]-$ܙJ[adwj6=Rm cIm4y1FBIU(jx=m&I0%ns@ cD>T~\ۙfhF5zHz8 aoa:TJC0x"*fť}@ĸ+Htdwjtƕ8su&& #yz: 4˚z m$ u^(x6j|r̯ Vp^ $tωI: ofVM0T`4B6>8(ǀ-Ƚk1Nz=xS(qu٥q:pV|~0I9YQ:{"> P NpГ_Ngo2|$c SEv7,VQ΃{f6RיD ǁo`t3~nU`h'gYw"Bb-]w2IyzO|2}:<]^X7, >HQX1P<ׄM0Ir?6 NN{y b} n`=%{>n ?ƍx&&tQB4]^8s$>ο 2+< $1'opI߬3פ+ҵ'ڣuվD9^mG9JPot椽%П OZcŨKSþo2M '1:5[h$2TJz5 8)6LN??JKI[wLhBXFm]xB\ fjiD Ӱre@$2u A-'TuN+zǣJڲ,fKiFb~x-%w*r<8H cWSjՎpyn~P^dg[%ɡH-PG}C9CnM7Ḳ۲.V lS49."lPaR+@>/ڳ q:wGgpbV\VJzbeJuVޕUs;Jp^/Y:l s24lW5/"08۰:9ݯ'S[.P>4%7s.'iD탃V W扒0jHH:J>)"܂(gh݄x@'ӛrdd 4 x} d3f vfsC:xB D pef74;,ȀxRS^:SR|c_- |?ap}v<VeN3 C8_]ȄO7~>M^#.0!Qv欗P_J2\%E]iHʑ@S1_ٙng7Yˆ)GjJ JXr g17 }2PѶR O;,x./e#v DS[`P'}(QlOLrӅz̒*C~j XMșˣ~`;gݩFpHjsԜa@`",˥z.5W{CR1 `ݫ% π-G"!+_Shaj*I2\6fV :?ߩd^ZSf߯ : Um'9?j׃p4@LwZ >,7mO@Nڷ E. *V5ì(!qG!nFR/ex p+͟0O]۵HXh~˜tLLuJZR_?|3TӼz n@5 0ts"f$4[aϲf|M0ɷ)yߛp S)7#=d v54ڡ z  7]ަPF qaSY3Y*M/sT:O_/ɯe6Mf̂2Mc ?b17͘'*ݹJTv$ŷkbF+ZP3H t9r[Ϙf&6> U0xzܮރv -F3  T&gQ?8ٝuCV 6_Q^;v} GKnW @:_z)Ӯ`'z$XLBV$`D{fxݣpe#@HW35iϧ4UH B'4Me p/t/@qNC)+f0֡(H@d՞t{'5 *EpH꼆G }iJ䇃c$n]]fw{pc|gJlGtx@ .SHs3&< š>zӤBOSܺO3 9ct 'mS([);3V9f@  v3x,EG{߲AN#h$6ʲ5 .wO;Kl 7eݏf;힨ZORxeqAIP+h򫝓ƴ|}F%=D".# )K7Ѥqᶅ5G ξ1UdP6ʭLUޏJꫩзJԳ%p%Ua0ڴt6f>DdlyQM2V5̲kHa[|y13vL$*,̣5abq`<Uh*&r.n+"d[>uq]J?̶4o!y{Zƛ2Z|sw= tQAz#mtA;{yE 79Ջ mZ@9kKo1?m~.˃O'%ΠV\Ę* cnB٠NELx$#I]~\k:OЄ Nq%N7T_̡ʩ)OcG9X_#54K$6;E -5 ߭}i XZȐ 'uc5=X=jw{MNHI iA΀WE S7-;\n|8y<'H1_b;r DN{į0.c`aq5뻟3/6xoDrDZ|q~ye\no}XyqFxVhO>٬jpð.'*ψZJfi Ӭ >e=\$Yˤ\ u.\zn*_T[)TNuE5U?b#H1\F0#8[ݻ)m(3F"(cTXvoJ3OZLqHn@Čjn>ĕ .3xY+`udF?YuO_;1 [H.۲2d)Xu QJ_ϭdia!]^;ePiC@yqDtꀊ׀SWdLK UmQپ[ij(vZ:p]DQ&\GN@ Um2gFҡ'r#e>^/t?O."G.^B` ל ӆiȥCOh:CΕ $3RT?ރ|t_ɵI{,:NVhX"4Fx,8]bGGa ;xYi9m7Wɨp=6#sl0V ʫEJ9ؾj<1DpܱA47О 6 ȼDLRt܃m?be v$wmst:= I@EO&uS(NVT37/'סgkmDb@ ڪ4wFB[mk~~zz'LCQ6v ǒ΅1Kc ǩhJA1$1B*ۢ"oa{Zh"!|;.Kh?|{m 9QAdlmo'{UR[ Kh?ʬSnf<$lЉ]ѓ ]Yy=\71pz 6rv+y#[9%A]8 ,Shj|a)F²Z3) O߁'?[:Ka=4|"9Gd$R-T`y,H^>$랡,N;b8֋zuJw]L[5fs[a}_Bkr* xvLq\Y?$^`U& zUrqԥہ ^gQnOYJ/3\`kY=dohDB"|wIvS0^rjE@& >-о-C;\jDC6Ty@HmoEjp)g^A\;xxÇ 9džkMh%0Z@sqv;Q#/FРZd?wQW` D{Im [#%=S,5/X̔I Dze)yi\~60`M'~i놼H`<9] nj/tzo7 JК eVn Oz`ɿQŤLg$5qE7.CeXSSw14h#2:OsoEXGd]"WGc`x'tl]m [hYٚč$EjDB3m&rkΖ_k'%Ur ճzϵ$K2ܼx[R nݍ#Jh皰IO"%tFFs(Ee%&$ w xQпO ]A^I*[sqnFVsʋE&rqxV.dLpm&K*) (۪}3d26Nn߶AmrfRt ~{YX7#멊~짇}){)V/2RʦT/F!r]rܠa&lPjLI%Z|*dF`NOeX(tm )]&$qH&"Ø-gE{>"F4 7ߏ]᯸|iPxv.ҷ >-P Rs9*NNgU ?=m"$1FhH)4aa L0ʊ1θ=L.a}%Ν%L0V0 Ð+zӶ&set̸B@Pӛ[i#ˆv Z3 @FfTw' Ix[+IVopX]$E$cKH{گ m֐mg;k04\v$7\Q_ʽPU'59].e Xmժ6Ԍ2'ZN$جJ,],#/` ml-+Ъf DxgYa%u(7Ф^x+>n0X`vh?J9͒JmF &zJYoXqFlV ^'.v'scZ!ƒg z!ӱN_0z4R6G/5MfBd>vt9``LMa0"uD7@iվ&B1g`'i%"n-CS䉣wOte6tD z_o3iL ,7Dw&%뽬C,`:/ydz50'/TtsI+C̹/% 'fD&ft ,v_]Wh:743:o7$䘩z'4[p3X^N]]  C7vnO,$i`7P\L*us۴7&rvzd h6$D,E$)/x hg3ds: &toq_"&i0գApcZ1;OmSөBdj&uYwc9gSg(4(rF,R ,|\UI]$bS2߈s D9^ᯟR,?/=I>z#.eg߬;)ulSJ93Qo!v4(`0.+?yð`hR.Bʦ1t~T?4)Ȫ}ѵ-y?b[^ȟy!td׼XECßWɣw=F21DzXM!oZ ymyd@J;Q~#H5v c:I,jf|W1P5yvfibTrN͘Z߽Ê ##:$i0_$hj1H5tUR;vc?唿>f`AHNw-- aqP}EWoъ@17T<Qe?~RK~igN鵶iWb޾db>CWyٖA}D46ڏӉceۊ|o  t.2tq,o^k`=_HO*i!}gIlE^UPaRM. 8$ɬ2Q1X[pXq1w6,VYV鞠յ‘G=ַgWLB0;3[X;f h@H޽ut N8+%g57rIApL9ԁፀzy(V|MpsQ<hJ[ e,z4 EAռ e^A)Jng/xQr6:|d?5'ɾU#x;,bS ic3Nt˕IޜtznΈ>:H޵#*s-+Ys-.}/WDb A cPU+B!H+wTu,˩G {4k@fJp] ? Akn'_S -^ 8`0jgS,"t'rA.RcY$ =ISJ,+Zk%X~zl!(` mm_=yr. 6 ?6SQ pśU-O-'Nhʘ&k ,+Dl^? -IcD燭λjUzMg?G.=g,Q'SR n}+[)#7:13p2lcN"oPS)yg5h1=<)9ǫ70tv JJ_J Vr3V^?87ĠQT]őshFڅ[`Q`ȷ6S tN2l!nB&LE|K 2= G#j H` _mue?Gq$z@K&p8eK}5/TJvll:qk \*0n৏o./|03c(A 6+?#LKr$#&.y9m= %UyJ:.7֪gSdP49d*-mUD66uiw`l|&BL$i)EuGW3?E0(Ve`wZ5KI`p@!8<ѸA?V+K~D USo:Gm ({IJ2qv[-ۇ3 .RR.Z}ˍz} :Z3y:KOa[]n#ZmwX~ 'T}T"5٫7#h,}l8%VēC Om2 PlؗL_AoȪtu-9ͮ9tR$CD[ :Jue].@}6GY\U#Lfjk꽔M:~vK˯&l B.'2~p K0y9OZe@*.aGB4 & 9y٫e;Tfɱ?3 vAoW^)@Ѷz~CΨwוVﲲMg]$u1!f'i,5٤:H\|C}c}5p++DpXQUÀ!CKΓyesϫ{G9G@Br1WIѼwvZ^| >pc&qlM,!U߮OnEdpIukI7HӞ^;Clw6 l&/.($ْ-<+ XY;Cتv>ܰ|dQp`eXb~ ·M@=S9R1i4T ܃4ڇZ3f%%kH7T¹&'N{\[Vf/(YT;bp8Ra˲d2]mydXg"x-;ܶnpV,j9?BTUF% ,iKղ8Ɓo)'Q?*OQJ-}awӭcx4Q鶄:ޏUiYw׾ DjǾxﶜ;u=ѦA-&qGCm! 4N_0z@es/>΂k=WCEtv}*Z&<`ۤr}h} ڢ~Zӥg^bpXI @v^B1\'F"FWmGy٤Y[M!^ND#saq2`謢)jYQWEx*nT[/} }uj{vl"8!ӳS*t_n77@JU Hj~?H;)(Yz dcFV `Y[銠0'mIpeAD˟S;eec:uq4mR[ w# 1:ۨM}D!*Y,i]{$R6Da"㼯*ü M8U3xRs{oqд{24rmi~'} eݴ >䵟$g?<)FJ6_NN%>e$+F[,ljba>%GcDE|rsK1Be'1PC@kԇX ;ӦoفSF6,c|,X%BOPL[Qk7^ (P%cb^;j%!ET\*$6;f\]iLա!c^0QR$dwGY5%LNLO@<wB+enyߖyV܋CRG3CNRt4aD+Vjwp.nhXx}Z7녥Dur+yiG'KП)x2tdG.8]}ik$_6Ibc|*CXHC #!(YkH).ODM8Id\&|މ^xZUTAS=&7#MQV;XLJj’St=eCr>Ik7ju|:*3DQsm#| D:.4rwJLcBsȶQN%$XaHr)\H^qwx,7?${.HTV< |*|֌ì4Q[-L%<J L (wzs:\(Zg^&78*L|xINӊzg8|.>9;$ o0u{he~I`ӈ\M]Bת0xZ2:0h>׮5kVw[aPs1ц{J0T47`yYfsaj *)AlW\ t ӤMP^X( Dx>vA>Prky]$D- _<@i[W3"ۣBfXI?32U-\^7Wboj'b sKq͍C]5HUnΒ}4~E5,zMiz'.PW~5}~5I?3ۧK¦]]^VLX1Q_p4StHqF&aȢ6GmoUh`^y$OޔIW4׼ (_a?tcThď~8#|9=X½#_P֠)IH󔒪W娸+Z^bC7ºf%GbQzM x 2(B5Fdh0YI#ɫ(|>ꬽĸ6klMcBDhq:YL)a\F[L2"4T[%3dsv-2کo9BV܂2T|o@_' fu]G3c^YXiFߐ X"!|Zj&z`P[<+L~JwleC-4GS! l /ql:J ͨ RրN͔J]3oG"|k5&E xʜ+2h|H#2y/*A4hњQ5N1[ҍ7u nF-+"m|i,$@G+X1@+$F)gNMLj X[+Ir& LNjns@6b C|vS,PkM"I 0W0(OŭiLS*tQ3|ܓ @J@S\QQ)(߯U´>Q=Y%?˘oG!xAy5E2\̔ᇉuߴbcʎǁ*W4~;AcfZA` "%wp:1}_w+JIb0)[B Z 4ְutYaW⫿+ņǒx{ [Keس0 wZ6 \\<u-g eqD24oނdŬD]X +8rJ+ FF${$7rGtOJ)tލf/<4gg8X3$ia(*E"u;z[#fTH/{l.}}/7}ցt&j[@A^8]W3W.a0VLEhPiQ)DHQ3X=Erh0nO0g$PO :v'>\\0$`g^8eo?%x>6@o ǃ*J0 ,e.fm{ЈI"(/"h kK7WD8XreZ.H"͖m1e@סdGxKh0}紪o;* M!FG@RyؤTݻ t)*.%}1֎t5h5'_S7_FѺ| S/8Ez_RpξПTq} `4plMWF}w(FLg>㘱{K :p߲Y蘥،H m(:Ԁ!xg'+h}0^5-j~ñ5H\V{|)mߪr͜fbgàFERF )9hoY]ϣ@2 \ @Yu 0 @֬2@0Ok Pg^5ŲR|[D z"P|̛'mbG_w 6[(j |N\ vRs7W..Dj*: kcqLJ\6ʕ-Jr=5/F/U]nx>R\o`p",Kr/7 T{#,9`Y]kbpNzs¦6ċ[y/S y5>Q=2jh~Jݔwlvuz_5Sr|4E>e{y ._(ڞxj}@@͓! [u݀/LzZH<+'r?rPʙIE+}ʱ "°t -=4t knY޻,{^0SuqӇZZiATY9pG Uh28yN0:6a 4O\xVI> {7UԼ! OgcEќB'B2T8AhI#;}g=Sz.Jiv;D܃d{6kJw/3gD" %[3}*-Ҍ6<9$j=+eBb6JκHf%dC%N9dLo=hv\@>ڔnѤ61/Q#4`#LZÑ a̸RGRbss`p/c~fuI.$qg^Qo5,jun˔>MXv{B7F "P.#nvBCT45)D[i6^;ಛ)aRœu&}Fy@6z" Sdwg7xdaz"/Zd˜FGܛ򒋔K |} ufe$"]^#{؈;z*d RzqCOQ\bIܐMdrt2Xg cZbhܲ[em <sREwIiL+R%*nE*@Taĭ ݬPN;f3@)*G UO@(Rs71/ plapw;(N}Ҁ~(G~ :U+~c\^`s=;vڿVjӛ:Dr8;rg#[ tN3pIk TI!nL{>`pXއ/QT鋸pw05#хWhz9 {Xڵ9?wH^kSclGe$?HeESXz* <}¦{q88qUD5b5?GɆ,,c%ѝ| G$Sb&u \/gK#VK|ďV=Fw0 Eߒ4PTOuzq\UŞ6 s4sR!ySCwI+߼>uG*( *vi|^PEܭ=9E_fTZW<8v]*3xG%_y*1/RC@0A+*Jx U$4V൪>~Qfqe5R {2V)4ZPL,vXI:㵱Eٿ~UBӂbOj9E &srĞULv )@#?\qWD!i%X"5E@;=߰?i.Nn YWtC_#~ ce+䱆yDóTP/̇ 4FEո}}Zvbf1&iY? q(3Nx,G,1i+Od E B j]x 5<#Kg_cIb\ŋY`or.Up<$[E/i>WD|ͪ(tsT4Bu$ E=PiQ7<N)xF|Zѧj"Xauk/kɦn(؂@*ߍrR[wӿx!6]d4U7L3kE~ˮ5F^DݢW* IDX[UHEBK4ohfi{_לI E7%_:PL-"|%{OdVHTv$9By]˲^ScrtEK 25G.`}ACg7Q+

74mKqAJ+h+p"[}P\mm 7Z"*PGfUO|2"&5>V7W `>hMi4H~R%:-9 ZϺzx $2pϱZυgVZF$0"'4Dԃ\Ft]/{Ǘis(،&3rs1?ǶFȩU/oyl p+hdf/Dx(ƚ ] yl6,q㻫2AE/In.='d+Xv-jyLo}aˎvwl-]J"S} 2D~D 5ߩɊUM,͔ghkh-E=\1lRAijeU‰~'O~X^o^f7+w{l L:!.֒NWhIbas)ͅN}@sKSzUЗu<,bz`XĖ wn.]Vsw >4,C8zVj :Z4aGv-c^v9ڐp+3W9C,,qY$BƧ+Az1M|?Jucdt4;^EB*V<=@2BQ8ï\"W,9I@n4E/6`$ p o ouވdqO*z:eW}QhQ>ž0:% bˠDS%aDr)=~`dn8,<01Pelx&YD<-\[]?2 ʄ^әJ;y fsљ@WrX+_gcH9"Rdf{sjxV2`id9!J IIB eґ^P9Bs.!6sL1RUY_cl D٢䔪)!zI}BܿzXLe3oJ3OqVw.M2\D߹_؄7I:oKPhe ,'2x%όM,E62N}I  GjTMbQ DU$1&K d,H;m~ 6vh"͖G݆_-^:Z]xT]m.Y1!<'gfR& }،1^}*v_NL?Dl$ޘ9 3TcNqs3\z Lnr!V lېҠ挺Ps^{"47Y?ڤ'")de-!KGگ䥦_q 'm!L3zv@1;I?2/ﮛ1Ӈ{ŏ9xHGc(5  &QB'2PI'w6ɰb z·mKqʖ/J"M/ C>j}qLwsu}9j]fa.v -u^SP#S=x˂(W)$R5Ĝ.Met_I%܁_p+fKI:Jt{Deo+m-ʹr;0_[y:u9[(c/ k*Gf) @XBNJ ҌV漟 QsY4[i<+^ OqPO ר&xB~}*W 3e7E(̠11D82.<]G0D"UR$#Px|s}C~!0PD{H*hcܰhNS]y‚XId fXM'gøh3pt&p~Loty2$ \/~.TN0UVW6k^w iIeA<kr  %]2He3@;hb&O@V'.|@axV5TꛓzH gtQ!DMi{)ǀT}ק Fܰ:&)⠿g Ե:Mr0A^XrچERS*+a`\tFkr3\|E0_mMj33EwZ.\>]MQv=s|Ϊc+mhucң2T=f=8ʉ m"mǑj=; .2gAU6r$TSh=ilT֏fUh_WW Q #3sSq 5!fP M}J ^^/!u[#$m6>h5'Fu&| 6'hs@N $7 L˞ECs`9P",B5=-ꛦY2x5u-vũwU$9 | Q7퓢rwqeƌAXxm76aiRxvU(| <& \`=a8ƠI>J'~2{o*MdK+qZ@OlכyӚg~Wr "|#J|m)=$GT`gqϊ0\ E-x#Tk-J~\ITUD\&G՚BꡮwZz7u0GA7UFF`R7߮'`ƭst{+KUeKCGZW5`9v}[^jtpu`Դg3O|D@ k%g妿TQ5wZx?/Ckfkv7^X%񠓈PjE+-i,>v[:k$Ho 8k ,$qX~ȓK_8n]`:GBΝ=:T ᶣֶMRtrv"&pvs ,#5ПǷS2Uʦ e{N-m(ab,* EA St  AVI!QsC:n<kJ4(Qoʟ_sux tr x ١0&XhD%H.ﳭNL`QMpk{ipvLnϾ!LXZLϞ?1ћ(% /I E:aŊmلa/!N[6&mY-z[UxAm. zNHK= #BMۯ]]Ln hV> "i \`F2m\ ZJ_h‰o @%j"k5K$>yK)GXYIQ>4e?Q\QRKW`mMl%GK2Z#xsN  ~!tlޗErWZM> _0wpdwj7Mt:w\$ͬu#gEɂ FhQ4{\Ne}m`*էC"OM/'MoC}f " s'zӼa;l?)l+ۆ*5"ue{j**;Swt*J*m'MQ|n|PsŋE&Zq .o }QQ YN:5ĄTD7w鲉oB t7< ktJ)Hͥ=Bnq=nM3 .^ů2B4 UVV,3_kYR-5ƿr `Zq<P%GMTy(8#4ޝJp>< IE ^őےtw^}qrH[a g#4K*RPe`6Z̟]|3qR8<(c!*5MI4W\g+baWlMLsk@?g#)Rus̏qc칹2HP CC1s3 Wǥ*MҢ#z[P S7i*̑ϛKS?+`Z hYc" DTSIȐ > +y^ ۟1D)" Ay혻,O !"bB=+#9Vl6R(K/<sF2%6\bӒRAڜl0Re wh2"/ L g@i4QOq&ϱGE>\5 Z :.S3SzǤ|I`_P"ǼpfP_yŒuv'I7M49iѪr]Uv d K8}0ʝ`M$'{'waF_P8VyzCŴ2_$ԞfEqeӋb${_dҁWD?U9!{(Q~LS-ޓ0:Dd7J;A큞O_>9tg/&9O\v}lP* Cՠri#8c(鵏Wξl ` j ] =o_s9M[}Ky_] %:xFG8jmK+hМ'M^fgTTrFw?vcLb/$Td XU㇟Y6wiqb h@zEx\ȅ)43z"A0-VBA<bF> Xɹ*Rwνfu&n3@NISqA0;HNRѝ̷cޑiÊlѲ> T,FDw~sdB*%7^|bUwM DtӚFzxs$<5:QGgv[iwێ.RspXć PtT<,K#DA=ȦV͋٭$olXs ~Bpʔv֥*5&B38t;K4yg5GwT7ˀ$VvPr¹ha bK~=RaPhv':MRuw1BpTb!-~'8+7i6#[Mk6>2U!z{187 \t~WӴwy(rKoIj½Ykٻfd6m2'OztZCEwQE#wcyl2L3{Fl*+z:&^@@?w*m$"/[]ii*͟8>GEң nZVm8l*B<2w[XUǥy#lpŽ]|ᡊS ޭpzjb,C%kZ^B8kn\\F)iΌ#I:,uFѐur&fT{\}1?W>c[ .niC50P[ш34Q0R%~)cyAgO6DU&&~;z&p 8ahr,6u5^}^ZtW6 D>L՞zFj`B R$GIG">0"l6`9]yCrw7CK6|R+0MXjv+#l彊uwػ# <pswc66݆4, tZpdP/C^\MAnT_ :T@1`3x{Ay56g="|CQ2JMDט;WboB>a%Kgke)pɒ/+ e2;:6Y(g b=~%\{;^$k$^j&/M_z$"dQWsGMh3}<᠗zq5|KrsTHD؃;=9`?ƾ<8YL2So77uG2X,Q5Y"߾uu@_=6-cwn YbdDB~:Pv%ʿw]Г4fX>_C{#>@Jf>m ƨRO)7I_x N74ԈQ߰o,ㄵ9Z{Y N\9aSGA ("ɘ*Ndkܟn` [Ih QΒN-S[\$!J'u[T`Ӵ"0-1ܝ?Xp>*8cĠFFY+᷈];۩<$ykKNKkzߜ&l'&lo,gkDL^(CJИQ D9+}yϞ1}8R:j揯7)ˉCWjB1t{T\c'g䁻F36N أOv,'! !jl')KI.F^6w@q)!!\j-)J7В~"Ç?~[6$$X2fCV#i_MCH)7UhBDM e2`*_HrYq&~G$ꁴ(Nuu깿>|0?,MÒ{,䟺EWR3IRSrݓ28 _c05E^M$WT~+lp1s( we@ɥpo6D*Ḅܲ(c^N3U?*GEby_/N3 ƸYׇZz(S2c*¹ Y{K'[\bEUWYRjfO{tq!~zycMښM+R: mr/Ee /"PX R2W |gGHts`hN~{|F@'m!Q~v:.T5XIllki~t,am tp JZd 1о\w3pt{+"A =zhaFqF][I,:yPc@{w&JWl^UR? `u]itfS*Hv.[IT*Vg1s zKrlo0[-ZytmSBF\O yd>_뻆pa:S4}q1$Hr o|r Rz؇Q"*2lprҔD%~Vl '5:Vs,GL"5v$/ tofM%5m_xLc4y9h 3˨A{p,L޸1j{#d6j&>O& Ž[vyN> Y͍Ra٘qK})4zk(J7}A `#3Y=4=b^r;CD;BΝ&9o\D2on#A#^!PR͌T%f,yFcTxUYaz2 bFaIfhI~(xM֟`7mY?v K$i2E @!nr5*Wm-Lk+LK=IUOz?2o&y&)ӑ ӥ6 (dC$>1OR)Y:eAIWZwy 1ͽ$czRPȶ&HVd10Hx&alK^]w|ߥ\Fb' C h?^ &+$mS<63=+/??zFV;i+tp1`{{WN,e z,Lc[@c. ,IkJ%218'cSƑ{Kęakm;LG+BmrqQ yLHOxg=Xb7Ι5OJ_hlx: 9e;oJ"9.j[H|Hf #Q=fIﮡSr0݈sA]66{Tմ 4K`]ЍQ/_Ās!EgI'acsr`yI+]9a8>Z2C\#-=~ N.X>4ԴNԾ}ʸh,Hcð>޿0W>=;g<}umK}ļP>$ ۋ?/čm.dhO`.? T׊\GiTe$|PH/6hBAT~H1۔bz`5Wb1ǰTyGB8j5w:dyDR>b:c$= ,#Wvܡq6D&#[#(2#-b_z<adүZ4d3Myzbr@=LiA7!m$(Ӊ!9rEKߨ;Śמ4@.]"rH'y W[#դR)qi1sA:rO8R0%ЇP C[=cCj;rRۆ9<&Џ@kLIxe@N+]h6=JEgdaS xݒI~טtй$'oOÛg/ q9:ȏJkS !dXžLK>Mz165O73 ‹/}J̬sOpd&H3Z%"u0^^Z讕w0d2J'^YE*ctl>Edb)+mr+<E]؂fٗ hD&,wg&HM U͙\~PdkWb?ԬV.iL=E?\X}P9=*ϼxW3@S#hɇ#vjVT3i:L~ 3̅Ʌi\,&f_w-~!hE-7j Qh<6Y#aSV_ }&Q2xX@l^]gG$='k`_;;Pb>"Э0(?* ȴiQ"ɊI}-AVmXNkTU/ӹ^׮tTrYW_TzQEig>x@-x_?IKt-ZPb!+ ,0bF{]; ##$+I'zAH29T,Z|#,$WSFR̸0O4F=~x&|$I7=p((, NQLXGN27hf7쩨Vy!tbCb2*z l%-a \Q[UB #C''U')61cU D hﻼ7oU;;.AYO,]o'@[r$E 0tZ˽FHQǨd*PO2O c}bp6NJ_I5r3THr#m&*T (&i =UE9~cӅ lf!gc3$" YUHZa;W%?2_xzl*2v̇!6wv|[ w RR/&>DO8+p?/B}Ef kJ-IriоoG mY@D?Lnu3ioef`j0Q](vMF<.A|c *oϙx2s9=X]%6qW`N>-Y,18WMƕ]~@?[Ln:PqR kik}4$nVCUb`D0˹d ÌeP6qH6,L=1ڇ.T5Py38}ﱤ3`7zES_|Pw;GPaǥT(SsAS$5@XrF|:vC}m# A]E'Fp]ov1kx|/}+V ZK4baA ;T,Ȱ$@w iy^ ɨܑ1>=Qľ koB6epO3,tgT͕lXr~IJ.g5$ r@8_P쨦h4+<"G^ًFH5Й1gLtF9XԩJA"~HedwkM;M6vSFsyL!fDLLSAf"Ѣ:yjL%k>0a0ZJtf ~pN'ŝ<48<jO>(9FP+yιPR{>Q!R ȭP+=^m`vV7-9Qv1O$,aIS"RNȔȟ/2/|[oƽ#sa`q+H_ "NI2Ӷy#-ȓs}cKTM=/mA MVm'v Y]&6|"%Bi2N#Ѯ!d7ނD 1/iAzϢ+ DK2G͏FT91yE36FA!A^I18tȺ˴P||H~/i =Θz/-ݠzo^LMjD*g\8XU|0 A %mt^d^5GE "= O&c>X{IѢؐ,0SDүݶJׯgdf3.[ćIZ "ВeNE.3W! n_WPq-Tc3n뵦Z:1.lRhرs婆۬{]} bUP*R GH_%;\tv/گ{cL!}R*6u#sgcL v}d]U8l/ =:o]`X\IL'x9\VPƣFk@7);L3HBoj\(EXZICS4D湀h%f\l蟓FɒAgXb=l| ;}mVGFNlMkIJWhv$bTR&C߄~C/# 0kl{ ֙1:GRd-G.Qлۧcy73LA =0*_yM.- Yr+ Ccx<ʺ.3-@} ;M?t ;ΌV0um?^_\ YX|9lItn_v`eFà\h2OAڊN4d|P3hh`'DUbϤ2}p'.ߢ~_񤹸?ke\f)c`N#sdϒY,>t09yX8q^WGvGz.O# QZ i9]Z*DgۆQTLpy F"U+@ukQ) 0;H3'XD}-g ՘r&J2R{F,=ukˈaZH;令~s<Y ٤ bOM)~&ECO*]IZ8_/ǖMS @hH>_s;;Z¹>Ysn0Ll߸Tvc3 Tal@'lf?m5#_ .O"+@ԵWuJ$B*T%`u;VU ̠4A*Z,'& H`\!R>$_vQO:yS@UfDj#h#.(>Ⱥ hh!Wեk=LP$LLS1nW0bqgn$xRu?U|΂IBS o[sƁzj>iK2ER)k*1Q̗z] X~&xG ʔ:7[Ael퀹LkH[U(||Do};M" ϠA ٓtaO( Or=4 6rUg:#glCefӀSBk:\@ś0tҘMʺ]=l(=G[;D +e5i ݍ'[F/WװI7 /d9v4cqAM.[ȯO4I7ښh#ÊR9 W|'9S\~ "(*KDT̞ "O^ ='収!p5~~YW~φ߄R yu;[YrTVL~z7/=,Z,RdwP}b+mb L tʑB/{c&Ҵ\fD,iۑQ7Y5Q#vtDO`\@BV#%K[r A:iJ޼$yEO3DnբH-OVR{>}n<KyY{VP"}8(<Ǡrl2Ii9ixfܟ9Ncx>/AAMM  lPa(9^rb([ߺ"T'/a%B@ݍ#<;rb節+i%%WM;c賀<Br轂 3j3Wb);FpY44^5`~, WnMZ Sr(XOxge,E;'ɘ^bYmIN܈ќ,M-Q U7)y x/BcPb&DE)$F@0D 9c{U;[xhnÍT3=cz:'HTMʌMYԇtYO%>2KT'ITL]n( N;_MVtGwn<`ґ+4z.,}25H`* t;Oz7 ISFKYKGtgh>Żb[W*vbIkkff6B@%nU1Vf/V8FGR5$A xBAH(V޾ CpOܥtB!@8* [%/otwsBޑ\fufժ1A1$ǽ"83ێ/y6 &Y7M>b˯0qR@iQ& ؜_}ܪ!|v">T3 7foODk)r=ˡ\nv;ڱm4P˳V'(B"9݄a;S>G 8*qHCې-=E+d2'f@ʇ3w!dQ[*A 41ql(^W[{b/Ӳ{twA*5vCuP(e;I3o ؅3R>ΤOǸuYԓnXוe EﱶB{=]:>tJ{j*"BWtL"Btc#QՄ3g@1v9XA~$.5yATڜMx}A&EBP"X[YfB җWiG)6e;kOH6e.|X]$ w`"c]#, ɼgiw=.K3lRd)(C3=V 2GYmVؔ +CF[Ơq`uU슗,I8U47uT]6Qw&(ڂe8miUjZ/,a9.emKw],N.#qR O^;^D۸<$ FJ5iW:qK='j[VAj\0Ny#.X1T@;v3 Gj}'t{wiv!inay GHO㷂i}qhw9XMңimj\j./¯B|:%c]{o\Kx gg.'P5NtqU7ܽ6}#M[R^3/Zp$)v($:Sj":bA(5a͔q9߀%"6Famc2Km4 v{@/5m*8NÄ;2v|LGn@<v@xήi4Yg9o%[1< $lQɈ ʸ!- BNQ !ѤjTq~]E>w̻L7$}ןU]>h{?ڏ?lpd1 IKj˸?@z{gȼk7 :6»E\pJfS,ƴ^HP.;%?*oZ lsvQbڲzWjtݽb18eL7YCwJ%i§ƨ)=EdlŵA)%|G85 W5߄ۑaz4™U`!>pU\0`ndK{. 1z:iENלEK\@´q@$5jDXUL}?h"1O~&hRcUp[2nDl/cgv@oeYƞ4XDRTFhM X%\Kth'M"?/GF-vr\FoU]O&| gkӶ,G*|:\ 7ypI M˦,)`\yq=)2h)RhG3D!w,;] 3 Oyx/ʆ2P?r;BҾaeZJЀ8zW{*2`]R#=0JҺUW$>7/UmǠF)j[ʗŭbe=ľ<_  o3o3Ro`~} )(ga㋚ru®6p4҆^Fm6mƯŧ/"#y!Gx=9vxp/ \$f]1vuwP  *KM$oڈ/De Ef.4ZU/ %ج07w!KMmba8\-"zk]Zctn (\..YjoM%MA+B1vȜ~ #HlMLA!uVk].l~j fs$| `~)[8VSN$mheE]අmH3*(]E2y@l NxOЀӉ *)vt$ͼbEx&V"''/l/  8I l]XD$P"8C^Ŝk1`{lACly;m",^Ss٤/%Y#>Φ^C'= oʇ_%,iUMtIȨd"zb(,*⪟bԤJZ瀑&sXl0>_aB-(P=z^B>pv+ޢ"QkM5[ QK0f%5cb.YLcdiŕqB"{Kѻqȥ'LǎW~I.&23= ^HS>#gO"bk^RVMr?zv)O>ZD@y<e"c5(@66AOhq/wݽwxZ%|"9Ѓa]Bk».o;e1h}C%T= g1Ij_HL!%֣NOW[/ϢG˭wNOѷ^u*q/%ث a;9T瓩~ \$~wJ(z<˞?*]&IY[{ :2Ǒw!-^3t: G-Ѩr-EnuUѠe6' (IOA,Vje\8#&y~D.""C"zI3əhtjNY߾o+3פ^CL+BxrOUH&K| Gl1@)!S)7>PoeѴX LǤj!G[~.ik7$đ zXK3@[9ZK'+d񕔟w-o-h׵ j[nPT)qGCIW4 (3BՎ.Pql~ R9&_Girj@-/DE-R_{h3[- ,wGgSȉiTt$lRkI0耸e"ue2|Wl ?dbB&P~Uw@8iyPxZAٻqGOP6f̚o-(RϦ vJrzp|OSlZ+j·BKi 檙/ 6Cن U5{V{҂ zFw' H5od-.?rZeL`vEb@L3mؔ\ UU4Q6۟d#Es¥<bᕜʈ5i+BFM[&x fg_ I ')~ ˘ո>p)zoii|%V&0ok<V0vc'Dm&5c*ei6R*2hrVJ@,3Oy Gԭ1[Ye IO3zG P$ӠZZ) ؖ>Y^AQ;4Hȿhس 5k i3Q6tq6HJ"}<[Igǚ 8770EnIRvZ +TtIVz2F=)<'gK q-mBjׇ)L .dkFʺlT㭖U3v$0|MO)">;B6T!2Ho YX3w`|,?T> K$@KIVJ LȲ˼Clh;xR\ p k{#vv F0] ǭV9/shW$ 8rymPtY'yijLeJaL8uxN$۸WāG!Ⱦ*^mƢUo뜬`*qC:ZTJߨw@k̥ *|^ 7j)b[?NJk̞g y3q]1Ɍ(]eCup8p<~Uf:W#ݦ9jKwfe:"do _H`dy &4u1.yuklef18w_/0{^<i_knۢ?]~(u, Ε= eҰvrGٵݢH\yJu=\Yś` ak"sI<$"NߝPLC/c"OhSD}U&lbȼͿɘ(1TρS#[0:N@J >~, m f1{_Q@!چ+kBc5gC暔&jGHX}kǼc^'w"vT}G N!=N@.B.!}Ow.6aBp>I87+A*L{e1Y1 13~ n`Z_RΣD %15fǯȳ2 45MIvzvskrJmv(1^ݾ c/8;TfG"-[I7ϠiE1Ute>XnoX)%gIԳbm҄Ђkx_]"%d{Vd)Rk7U &D.M}Z0W,u< NJh1``:$gJV%M& |]j+ۥ-'_ ZF@x~P-&Cg4~)IOR݈G k }L 9\SgrLh'=R7w`r8D`U1Vh)xazT=H7f_*X/' s@zE`c5@qnhHN Qnx#6%>͞VϤ/Arpώ,왎R+=Cӆܑp`Lf\yU wAPkyJMgܽ #O"Y9,vVXbi:d ys7f)f"04}6b71$ l`W}lr =ʠ]SXJs;aJgCQœ"0*)lXtj>ⓒ?1f$~O?a[%J*E{JnIWnz,O*riGD5=_7wvQ֏=Wsk&\iڟi3#*ϕ並J.Q$zL:,ޝ76nt-N"PǠZ-c/PL|Ϋ=v l5d[ H`잔vx]#;sO,'e[z{bn55c9'O[kf'Hq?Dbf3J73DNC磅w\U؃:GdeE>W#)p&kAwjYC픉h vF I "0ay ޓ2<mwk%(7.̉q1V8YNN} L3`r硱pa)_~Ot&8^  9i Q_FlA?3Ilz(y3t2Kr'jA$/ẃLރOѓ߶*踺Eyf~ҾLw(cSl;qMFVV5aMm?^n0L*>hRȤtT&*PLu2bKїz%M%K 6 ypqH=񠰅CMm,KDZYѤ;.L#R˩Y#87)Cr^JAs2JClo(;NZL;Zm<I *}谘nSH@nr  ۍ<>_v.KAyi}>*wvc<B_њ47Wt2Ć|˃B=SOTG:Ls8ߨmaw}4W_{FETF 謷&6;>A)xֿQ|IVNj\ŴP3ƞQקzȓ%m l( A0Q)цU wV12/_\ђ19 l9:|¸p+k dUMjp; >H4z:J@ S:u7*a^*&g]Y_Ҽkp)n=+xau{E&2X,/Oq-kő 8)c<^WB뚙hs3kh?; lkAZL7|2VbI ;l08wJJ6F`"Q} tQ1e%πU}fM+>K,lhk!;Š7HW9V |FrE%X(դΤ*!iò~1zӜtC4 s\ǁ~"'9Z0^5~2o3doZ]B&ѺQ)ᭀkq4\?ɟ*p9ɽ۾{'֘:UI6$tbg_L?Nrp֎^eAGU\ 哤:|Sۨ 9eFfiR#cI bgqXty5c]78 \7V,{gQ~Syp`zu[?r591QZAbOB؜4(u <90()I\C]gl d28.ڠ_R86u뗟 c3/X 7fd/O^! _--r@G/`ӗ /NgVHM"нᾦkAJ; q]%.IJ;O2asZ&b́\ߤZSڱ#-=iXx ac JljR$zfnOX5#[3Sk~ILڌ8yʃ RTs1u5GzG1z༪sg+s\a'h_ojB@|AY.# #B^[rW OR%ce;v:J@n`ՊwO<-woDapudkeZgTzGڈϓ5Qîʹ!1flK4Wo!D%%@RͲ-x\9RpǽP" Z% QwWt[#,܋LHhy\Ep{f3ׅJ<[c;-ZD<6&& )7ʞܵ&`#lBu1'rPoΨq[) k Haut%=hR g8 S_6Rcmqe;wG+ k5O~z#K!DxSRFpBn6Ee>wI>ua狼Pg xc&WfNU)U3.?zZq k#[ߧ&P(ƣM徏Wlvb4'}֫4ۦ~L#T8/@ n>%c:ǯ OO {R3(( y_=`J<~V_{c s,؀XǙjEÊ[}Bh@L<ϺV%ªbWp23tb({ ı-.z!z>>kޖf(Ĭ uqCIK^fgqx[.u}|VӨ9vx*"Hѭ1w xꫂa%FEkoOY35k*B8ǥSu$%& -T{wbݍx4 ?ƩVf1IX‰\:N L>j"=Dt>D8)͊ -«t-EX&Q) ԃC^Cy 'ۀ~$,FIaHb|I,&{f(QT $yXy~(ӗ@\튙wi>)^$[ul fDt-c;"02]>α|[ 벼lz^=4 Uc=L-%t>Iy;s,-V:W!rXUenje/I6^ Odެ+Z }Q*z):Z:N /0}j3il5H> Cf-fcȟJs;%2eh6v!$|{NƈLq뢳֋f,ז]͕XeNI Cq sl^ͺjԟ'y7…fR.NpfY6:o@REd5FF=_{E;IGc+Vo6MƎJIڇ| a9Nv&v)~,~^)ǖb.B4ʘthvj'1vϫ (qma*X}h39d%ӲQH3=;Kr &J߇t3Ϡ\w_lE~J?Xt3:4ؽ;[Wbt'򾸖Í2bއ~9B >0͎k\qJH Ï79 ^GR . 3tz&xܓBf2w|ބCjΛ VuUO` r(lS&H d+uJ8 Q꫇3gHZ*$;iNx}#577Əޫ`B 1X1 ryV Aʝh{ '-hfV 1_bif+;b_x{fDKe1΁ M C45'ZBmYL y7Np2im`_+5z9&_g_. _9?R85J;:VW"24L /;&,$+c_@f(lZ``T£пKWFAAo"5Si7ߚcCf/-MOiGjJbG9xqw}98")?-er[,|L?0''fPyiĔ鐂C`3~l. 87&QbÄp$s%^)³fڝEε怍[n,WΧz0M1,P}QߔV&6nY3_0EU{d53Ϙ0X8qm6%\rTy2gtkh\YN@!WjWyX3Gq+՜}~</vߩο8pWA.][וc.VH_9SyF-dk6iSDaGjosE9)ۃ.ɉ($O`ܥ >gQD?DkyzlfH} ^eCW1`:[;Waeewے@f= NW}lЋ:y!nXx$Q kRTX\WXS[2#;E- ϘEojs5XKњ. |#%ӌwhQǥҺU $1> ]: SS|bqO'į+uiN6.VC53Y$&ڎ4{&X|ZF-bs=ߊ,pFeO:tP>fzEZemB?b0 Ik=mqlŬh:^w7}vYڍEȤvVMv#&Wj/tA\N%zaʘ F@nŭ5 L]b8X 1`:0袳'3Ku$,J?8PuNn<,5=xf'GX\zO9ف˪?ZnbѳaF֖aļ 8*qh ;jMp_Fʣ2~$m!w7$16nUɂtu)N4iaI=Cv< j˨_=臊TܕMUy6N,Lj0HGWxN"ۆ+֟%2e} jŴFFQ75~Hy 3"ț"Fp4E]nf\c~Jtڃ 3t",lwp`\*N4~VfcbjO(s'6bA9D6bO9&a pE˗Lyl^[IJF1`gg^zP gwb#Lc35@UVm7AOMN,71n{f^&sFNӊIb`H AgJAҏX{hB'?fr߽?w͢ƃzLު|,f:ISjRU ʠv/l"-3+i%k|)a۱K޾X$ R;>RDsX[=OOFG(&ձrKBrɊRgNkPpbp-*;c$DOFN$'dJm`2d ",dh]R[3z)vh:"Kz!d0~}."/@CDhđ>1^I>?\bX}ԎͱSXMOtkO PO/B̧<+mbxPώ\d6y섄ŭA!*C{R'D-s:i`6U$?ĤIM'i=7ɍ1!6Z|Ჲ7Bb{We6k춈]lꢧwnYbdu U?wMM@ QلCOn^jOx&A7/[k}1'<rk) Uq } r'oaW$\&CF.d-:St=1!0kIҟ+xUICܦE]/%oc.Lp!>If;>B:8zd$@߂.k:ݝ1eÚn :WyuVh-A$&aγqJB$\<̺2$N9Iҽ~Z$O +t^"(Dc5 we'֎8P ;u,QBi?-Pux͜e|oO ϐg=3{b`L_-Yb<A`܌$3@\u:Çj.>0 c*K(It->ߴ_nuyeY} yu`PW=Z?~7"Y|r 1ZA?*~K xhBwIOsX\n8cG66t俖Չ5#ӀC S{OvNQȱ9y*qN9 !-َ1wK^zgI$ˑ 4">#qq뗦\v?Y1nh27N^[>bkA|hI2&7G`j]ľxuI껮 $*|?pLkS6Fqw3ܑ4^fk6@2Vo.:CE믒 H*-yZ݀A>6Zu^o'H'dܓo^Gª %c)1򂇵gF:#7MHv>‮jRRĔT/y zvԠ9@*cō 1eM |3o;6Z[*i;&ـFtՄ⮎ Y'gw>_@P P~I˼z-XHDe5 )fN߱[1fZxiT5âCSPI]7R l{3A.@.:'XΔ:`w̆c:I};COtqRS J_?{ e)"1x^n}Gʒ Dfe`iam, g 3:0aأ6-|zVGbN~.Jb̡7JyxRB?{"S>8*B59jꝤPv&? He]= \ kNcKfk7iO{]eV!cz 1.;LdܨXEl-}\bS{g *Oe_jvKP=J[J v7ԸI;WԦ8XV\96m/y0TfE; U$"_ч8L"IT~ E,ڬ-f#\P=ɦ:\w}-*/aFؤSھTD.9I8\l z'tUR4lF@/C_:+J)3B#c^/?-n<|¿V)y;) 'fʳxݬ&w *|WQRgQL{y:GO+G֢"jPD)s؁H&XoڋJ<1zyhFx!j}25F`oFiSѱ7ǎ2E -=Sa]t& )jBhOԠ%%ua=Xf/h}LNe{" } 3sEW6m ]ͬ;;J/,;BQ7TA#j,1= =ߨhF<ljI|8GcA]t 0)ۊ6m3%Uzv21gӵ`vT*ėcV_H}jSU͡v?J=P D n'65B:aQ=2E@3j*%x[dPhz 0^NnzwSLE ]뽟~00\uGyV[S_DeWV_Nܑ"9Um$7ua'uxݲl}VMw;~@K+` /X' L=A{'82 gOrcR wtտȜ^,0d> +aϴ bX? 8,Uno.=={NXrcgεQ]3Bjx/g s0iIoA-FEhZxNg˹G[׋kv-<^5*I%dj{j('^5fP,I‡:Fq(VJcEZ\areQY44dqu6"n­MI S:y7,:5B-J j>#p2~L7v08b^2!T8JL{.5aK9 T(2?5G]XDxh%nhg OjzN̈,z@T&RJe7_Y \ayJ]!xX0!Z<tD(ǤUaUɉ^h]f0r%-b՚N%]H0`%P}/ ;#<݅9osEhe߲1@UYyUH&A3K/.dB#Y2'VV K6\ʘGH-BdX0s#Ɩ5-%7B-#$8)ش%P`ȇܚz_K<o܂29V8Z<]xK[#W_K!`%>;&+p$9! arguavM+z_Z RV0eH\[ 1XgOj5SF/CF"pXLwXz_!Ǵǻc̳ ).ˏel_0U%5y+X'0Zsvv(ArXu7Us-@ᶅ׷ :5}ڒװׄ7a#a,oBM (BLr%H:l32>م<\"h H3uTjK<=al_֜y E ];eSL>#=pw.?:`29KٟHr.4ۧEQ`ow[Q4 kGz؆CD({7'=h k¬8M^gR%2"d7`j1fk 7I*]/aDwypfUa!dB")4 +$zegA~eHXFzr3y\vT'%ӍIRm([1'$ md^Dc쭹ګMTG5̭kn\T*w~'\I#!v&Fh (p DI[9*EKY\; wkiy_G~,<[[c9_#2JL% ZL~n0 +7X֣X`o3h /QP|OU%Ǿo7vzbn&&?l['] Թ'N\<9CuZL}x-?@x%U(Ґh~4ϒoI qE!o5J8eY ʚL$ mt~åAŅ$pdҼ 4ex'6!p` s] : Xc'S\Q!4y yBpY7r(;MJ-y 2 +GEr0lT 8$L(:Dl֣߬k:⟃#.A99`vLOfX~cJɇ#dQX.o5ymA/op^vכ0*I܃c0נl_6鲬[w5͸L5Ak^WŁV!۸Pg'9O1\t.z]'aoˡe9;"Ri@5 v*3[iKdx>Y蛻ts@mw$ϵ+x (:5/8H6ySo[4k.!(~ӻji$4;*3z{?0@/}}![&T&ضNޥ"qN~(A< T)E݈1uh P8IeG1k< #}0[Pkܽ:";7P25_%[#h YWuV詶B/Cxay\b䌷AiMIW-Q ?F(ݭ,WB?O[`Z-CI,Ty&/1 QpG"]x>o)JI Շ͟8 tӵ[Un86b`J^E) vt}YEz"x KJW wJ#{y]@ [4g#HC6.>l<3*{6ېє+HE޹c=YhKE=PĞMb$0 /̵=(AZbt[Rd];^5QPa]BGiT<Qx 0b8"p//Z악sߥ;3Z VCu }O65aGuJXwU~|TT3BȄbɆRU@drl[(8@>AH'^4;wVNXcbK6k/ l&`vEPyl{#r% Ѱ Օ@eK?Kb#,\XͮnިphRzŅ2,xԜo~:ҺVw(ݞq u8>z=1a:Tɉg_ yp57fks.Awȯ#/pxvyV N.nqȼ*Nf2֧l\1Q|l2|(ϟ[}eԠ 78yENۥZ;(i#d1Ȏ˂J>p1^Tsyl5rc0fxxqS;>ʶZO*4s*ҕ f$  =C_@|yh_z֙ٱE;ӈƄ$36m~M_qLOkX_l{-!h7]J`Ʈ=W  lrX)huY_.-O<+RDwO ȺRx0 vA{_}^sў qVP;8xqke0h+\n& Kd?C(ڢYo}4nz׌|+䷎-+p,gvox;Qa]cIIʻYt U_VŸφ@g9"Jm{ZᏘ7<%kB3x~% ͪID=|F}Bq] KILT(d@Zok¢: L6]g/2p3z|gH_ F|ʹŜ)Me.!1dZV~W4@v#p Ȏ8$4"V8崀#o=k;ޟ޷k%[N}M)mB7hi)70\95;k >VARb)A! bY,i6[ ?+ԀmUL5>;yގL⸠l9 K#sΜ_8.,(N* ౙŵWɡ?}\%4al)ӿ4. 93G9_dsd]ZZ<YkaqDUA[]hf).XٔmPیn#YYaGX]n8_4^*q*i55쎬av "=W$/?*,e%[7a?Hsh- &!d(XXw;氁Y^68 0Y&Q\G=*h4{HOH@JFR*6Nږ_;u+dٻªDq5=.~ p1 !@މ& Tj!s'NIUZݨ&j}b ;̬g-<ڹ{pcl\+tsaq /}(jV+ORrSƸ_ Q PS8]IִJ ZSYz;8V 6L.' bnzUaW㇙se.wX8#d&nj@>?;(X{/',uFb "=^j19i,*JP7lCZH/,|4]R)sX]J[sZZ`|TvR뽳L*N`ܧ}Wc' }4tR.jFmS4$˘Ml™t-H)Ǖia"G*XgX #s=dyniW]$k"`B H/RGm2n𘪋$  _Z)XjkGݚJ8p,V~Vk)ޱBմ]1{Lp2rIia!tl`߼pȏC5ʤvCǶ-4rmTAsUfqIS.r`UX\w7.e }Z3B/6aSK3)fV .jIcí."S6G[W zpWhN>iIpF.FeMxw5 d}-gԬhXSR7j'5XauGD=&.xS8mBH4aYY9HLmPQR,afaaho兮C$w@jm7N[y8N|q#pfH†h-qDJ8y׿Jrl'ϸ yhGSLŽ4[s+9a)= ?O"*f X!9o͇D> `K&熒*ôH=ͨgRm,D.v/Ե3:>B)Ly 'k 50擗[dȱ;!ZNqp;:"3e0"hP[:j)j'δ"nCp*5'ykGD]-)PYR&WOn#Y m? j50Zb +JЎ'MshDnE1[.EL^'PMkA!ab65q6mzl>>G49zZn8r$,SVG O?w$!kOS$DÑ9l X??w㭝)tb!/\=Z2v> dc'dY;Rzާh ]UysԢ{ K|Hk& b5T-#yK1/I7u"4׀HY!m["p7G?xwn8Jxkdbsn+ li}QT&K[PI]Nq"kM†}eivUs=wzw~E3;&KwGpG^}W"PDk7Lvz1RrJ} >q}7zƥz0pͽhWK#PɆcl_9W374$ڦ&d = )=̕[W 9zEE5t;CͦczX_i#u4F٣b [,|-wի^$5܅[ࣈL?G0[*V#N% W˩w~Y)b- NQaPFgs*"~15h\>U6 j׏ľfXĻQHm`]ޣiYsRs/f᤽Vd%ʷ{Y'*P^IZBb!Ck2h;L`5;4YLq󹀽Qe2'ϭTAnޫVئșA,nyM0'|-9s!Q䗛#š>!M)7*8_է֯~lrPOױxP`7^q$鱦F|K$Y3UȆd *so6&0*q{;*.3kZyŚJ#cB۪)h 74̝cBȄ_*7eьBZ!gHn[ni}~R2!cmy>br($oz2,k8CIG/ MGXSJG=f#OMS%C'XD{AMQIbw0'x.iQP1tB }we=Xʤ߃ b70E tP[}·W!;p.C KO4CP>2*/Z?$yǶ0d,'_B{;)w\NpdJHst;Q3)]F;ˎ#;w{mOV}Ak [6M ̑ 1+^ [6I7༒+N"'oQA =,uI_n{e > 88ȌEe Nb6Xb}:qc2RzaSnvX%iؾKtI~BtTdYlCCEw.!ILbPqt|rՙ a 'O1zf^3sLU(%>r.Ay*5`h| MP#_cT"?[z upOr6+BƍpD.Nˬ _Ixp+d\'JF'ٛwGV=p)C՛6476Kxğp=>gÏ -i&MX$ t~l~=Stx#d/c5 )a}JL-&ԜwPM0헫A5hV{"l`nsy gQ_>2F0z#9D>u*>NgoI&c`IC[AkC΅aSaM7vm3KJ~!r/VSg9Q zR#3foX%oZS >y4=/".ipX*"im9I" joͳJ䤷Bm*&V.z:HS`aUzH[^h8'^x?wMr>+%Szdy1-. HhNwo)dTpcMk U|$3Bm>uULH׭:^suXm̻RGxv']c(iG`ro_i#~]0x஻y!6,j$Zm'ƜDZÂ.&޷u'zW 8> )J*~ 0K:$K޷r&iGYTve XlO:%&Eq}nvF1 w~ך~V"|\<% bɻjZ ]}^'@):8v5:E!G?_OE..3B܉њšJ%jBKoS@b2߾PNWs_ٚp#~tde€Kr$/7Uh!v6Ѣeej1).#tдYv4Pu L>%=f8zIVUTez{A^-E*=$e YsmfO/4]le6k'}Om_m ݬ0R,rs5^ejGlz(.Yi<lD ϖ}12USq;[ԁ@Q9RK@{hC>DZЋ5A6hm 9)e4^ d=p~mҺG,̨ [GaȊ),8cpKR+*`?M II-z}Xzʹ4z D*r ?MM MP+u%{=/g8'$ _ eցjՂZK?6`kpnhB)yj"@P^V!4[T|T9g' jMn$f8D';?lzujvYO&Ixs]lLA.Vt~_bֲÄVsT(I%6OIFh_ސMi(8w+Fζ؄>Tzs6?.voqCe|}ReG3 i\hceyPr~rtWRu8µ%ԁm)ݷ|*=?dy~i6"Xm!QpK6B.D]fMa:t/ڟ4M)?:ج.V0=s/ap@JjeMz.goԡei7BUߚf$/vb jtyn!Q}z!ƞ 5)['C?y`(D*F041ݚ&ϘswK7fr jUDs7[ H-P2Fil6 qU-y5ʩ HX6z*K|UyT|:5HU|NT2֪@ |w^ 8 S3E*@W KHrPjǼA_( $+GNy)ᖀ8R>g2y>H!%pŀF~u Zwc+\{:~&N. l? =Y I6|?&ȇMjøHAyժm{N *~Űk>c2 ?C3xD;?wKwԷF=W5{[?GQ}\zXwis$zTtGۧ; [F5E-]40s]j޷-Vw40ŃT?qt=2x]/͛@GZzs/K%,BOv0LyRlE`Um^j[x{nsQXܔytE?waC'><|(^uXuXA'ÞPO=d_7sȤb Soږ: cy*%yM#a^QrE#zPn5#&^$/TiWha c3&I5Ry xqGi+&HEb̥=GWT{EA 3R+ ͥ{#$΃%Ak&p1֞q@ ~>z>As*GKr3l9|[X>6!.= H6I=ܰѨ#uDhڱqIJAij 輖&eaphNH ^6ĺn8Ma2QC4T%d+Cr e7u}gk<-plx?)/S.p'y46Lwsp`1[ . ܐ$s  ,>^/f=!ҲK^]Z~$EZ%)EDVa;"UkdRkn@ȦւKNkzC=;Ʒ*k] ^k[gOv&?0O)ك#e:4ӧgEXjm835YPmNX(Xd1BP۵nFѧuGy>ONġ\yDݒ*T}z䱽VJZeDZ[/ $4cVg#Fbm[ ?ظ/=\0ܓX{vaxؠ6(2T.¥+?%> Ψ 1TVRxUxFqz&ǥ-洫%j4:@8u{jcژn;eПvݴBW UWfmm^ܲ1cbRuVb1؀K(Qaj¶5becbű0N¿ {Njn0Dl}|unw,YH6;&_N>Ts#gqF7to)g_ƃAs \1H<rz&Kӫ]x !mDyw Iu:sؘxxx &kX(Z0 sk?dƐ*߰f%wjd2/3-M$Jfȶ6);úAsfQbPWm}֟]5>FP/F7-w0R=fN;B_!4! y|Lu/4?RPq)ܠ`!J8<+k#ڗĄꯢ[9^b0' g2.-=$Y3s׼U8#˱7蚦[[uVCBjK UW.o,φ?EOz̓_GOe+-p ;e$MU@ةǫ'%d'B+S B Alw ḵwG64 Q~ǘ5d-ǘm p bg*ʪVth2b" &^&ף=⍓"s\]%J{@'-)!ÜLz;G^JX!i V इ gD#}f5YQ1_{j{_dw RJۨ+%`C;{yEf<:PY^Q|~#70vA>~7Ξy.'2P/%YA#<]e#kUezwЖmos[j/}8p5X>xW)b :P?vqS,Z65ejMP 0Qý[Y5b y~JD }}Q2ڞ;`X q̑X{1KZ]~wO4~3Zj3c_v;ehc.`52Suq5ƨ2rF<Uks soV3 uz2f$ &-2G#wX{ͮ/t":DJrA=t ,xшmL=-Xך}(%WHI_tzZkgƬTͯ:ZНBUU0 c(~*lP5e;S$u'WRi/Tԋ$O9yq xGʬ im_#qLgaK$c;,n<D:21 80K+T.$!沿ƦԑhǮḱ4pF[A(a.2`Bݧ= l徑Taf R&`pX79u7F07nvi­vj:ӨnUݧ "%VQ\@!9xu , E> yUﳢ~-J0Fט1'"guoW(D 1p01}R}HT]ݭ`yE!r4kGp&sU98k"$j,(׬S1g![Z [u\BCnD}'mqMߧko?io:8@S av]>#z:%(נP5`w9)77- _/de: UBT!Dԣ򺈵jA&Vr@pK +`{^OI(P.%߽pfb|q`^)Pf5zIVdKq{FIHEgv3dZ^M*OZK M(|ݟLL+E3q熹nD7ȡy(PyR| 3]( Ŝ?ҩ8Yn.=˚ekm ~q3Ùi`S iftFĞy9k${⤁pM'v?x |1\)ypk.lA+m#c_\;A$ۜɥm{q2],SF MTP-q{?|XBrJN)9nX!_Xl]AjM ‡d.(ۯ 7)MAm"ܩ)aWcDMbPf'W$Qw4ߣBV6nz()>C"'g;ґjتN.;]P /Dc!DϿ ̶!(YF1VH5UV+SBS_|}n&Jsңo(a2!qDSip^=E/pLI/P<p=PHm5,jH+2DY,ހ+NaSH|g՟殁􆀁Ct:zuؠ?=Кg쎈;+UTIdTK;c "Z`:Qaw> \T|L_v]pXeACʱJ֍pvbiPԅ>†՛Lxh d B ~2-F 6q Ӣ8U$o?h2R{ x^F/5;/~wLŐ!?=2ѡClS'ġ V-ϩHJJ}X:u Ϛn_.a;PɘPy} F7 A?y]z9Dij2f ٲMތ) tHgzcwCV ߲$6s"Mn%u9͗/);y^]7"](q['e<ͨNa',>ꏛE'5\|?`auOVK$g rʙ.PE-d8Z66LN>"L[En9^8Ur _\wz9Q`RqF3>_v莔; {Wh&!/Åx=׈lL@W[ae1Zrf*0ZW@wG~bDgyh<aYmWiٓ!R$%k[t=:c7O-)Z⛢L_/l\'"$5 M 9(V61wp༈ds4 tB^Bg=Яł3L }ӤubRx"iOMMxIh,b`Aiyipɔ>&ޔxfq|Mi5;/+T$xyrZVJ6cܯT^5C{e!"6wNgĆ Uv3F|+cb@w!g!;rҥE5IhX ,Nl_%7jϙ=)1MK}[:3]KbrC翗D-KN`% H h/ILz-nU"3Yૅ냔X"u6&yNb2Vƴ J7PIJ/H~gy4Ͷ׀,JU֢Y]Ʒ>( )>ɳ4*sL P5MiTߺ-f^dSIɓ6[DLnՒ1 |Za)@W]S:;_5\u&Ao /d1* FsTjL=Vj Kup~ݪN+( XR9?i4Ba%%^'frP[Ӊ-kݨl@"DyM`lg`n 0¼m3f4Z\Pwș]/<ݦv }aY1V!/4a8i]1Yp")nbmBq0мeW BR/ho(ry7^dYQ[|aTDʯKfI8[Uc쁼7EҦX~917F1V?ǝ%x&9i]`2;Ir|V >}(FM;EQ63E6l$Qu: # sn!R >)ᄡHg{ <BRb#Oѱ+;IfD]IfEsrެe[P)R@O`#$kE|u LjZoAu@)=Bb^k_9>eD>@5@_I1.g$o03U^1 RcѠJBjCWOVu`|[s2+/]2;2 ~2[D "BYP勬hVɟK/ ~w0[;T ACO& ߬tB+ F V\sy  p)!T}4We^=$G" " ر2{ERx Z;KߵEJ ZkBSmaeﲁ. <$Oryp ҄ʭ$hhZq' EC (pf }l;OIfᨍNHtWpLޠda_~=y0__d9@Qš@[.:A@[Ϣ r@8a4H:l=AY񚅬ݨ*4f4-8%h*E>ͳ#Z{=ܛ:(=Iv]^u>ci!fGIjLB$U42 {=SY<)LAPt Bsw~- 5#,&6."z," u3 Rx}s2{ba @ xt`jul{q3ΗM$(ma73Ix>,T0R;W҄5Av0uwaPӦDOWH]+ӪoPC)u5=q+ otO" 8Oz]Fφ)_ෙ.*99eiQ 3Rsߑ;xq{Ѹ {^MJdH4a=~wRi<q7/ugԎq5_V؞&:ϗ2z<`BƠ{ʼJ}lBWˣ$2[9A\dܛ}$dW>j-%鶇4 z>Zt>ch/eQ,5%@1u lL5-H0U0W#tSE8Ho@pWf;y;WtmߴD-ffnz|G`-6hb6ԡ%{o߻TBn#b܃[?+^űIr2h9OoL] Z뭐O'86[䆾c ܌ j^Bp~vKiM'd\%.ឮkEC ~|C|M].P⇙6kTFv %kP-TL]'!="}Msa_y6I?lS -p+ͱю Q۶LƱ)I"4axY.tCHp'QbmXf1 \H}I׃o d>KjҦ^B28ӓכ# YZ3UMf:׋z%nc du:(l.bFN׼EwuQPSw,q Pﭨ8;qz]Ľ^,źb/);h@F$!3 NlS=l5\&kvc`pgJf9-ݰ&ۃX%]Q..`4}s'/1^ϵF KWb!$^Q ooLeBߙ/DwS)}jZpv;@1cųçc*u0#ozU +RByY4s %Wb!(>TnמyifBa[ê;{hr277b}'=G2dAīzvꉖUf9|{=ׂJZpqC>+"Xm;*DLmՐƪꦫ%MZ㘞6 ewj,Y=N&#+‘FlYcͤˇšE vrKy=AF'6wƂMN(p 6T;Boc@2"4za~c>|3^w<.Iz  ]8N@d1)~c["s'9Z̵0F߲u[.aI|$hfL*'C?y*7+gY@'|7Yӽ-jOИLx/a .t#_A- Dhy{v|3OWl0~x(`X]+C ,%FqwYsF?aߺosQ-;;ixĚMT@с:qt;[{|q\uАq\$xnA_b*찰mŅ]1^*$qWM,|b;ނLR^udjy3="c 0R[ "B]"{FQC=vG~AܧyPfvl>Аn&l%5:T#g'|!mIp2S͛|ڰ( Nz%L *S+hIBL _ s =+&DCf.0Td6BX' q)Di1c 3lXz;|,)5G}0–T. yO8$@3߰Y7 IivGZijřy?.!e%eB("{M%'tw$)BbH *Az_, )yʸ[N/X%Қ(6:~GOMcl"A pBU}v)X_VN+^9-=9~4ڼ縿Y0vX4>RK[cRYNӞ1WQw"ڮ} Xw+PwhSE#cbѥjpA'jOVelUõ".rczogF9=XU )a1ͫNeK4Bۦi KfV~\7oެ(W y1wOtI>z 3|҂I]`O*<5K)jt#s)ĮբFV*hv~ntwe`]c|(:ɣ} wUkN%Fy@U;^m/C"izDǝk|)LP_o&H T6%{PMGqX<<@L<8h|z7(QIOK%i,ckemlW%vU>mU4)S\a2K^SǾb6NjanQ)Q0/>Ǝb;Y%eP&pt2$\\Ĭ0gC>{$ׇ/]"ȳH~(HC̥z,Y Q*IHhBra&44lPAe)o{i9rl x|X]_@B|^aCݺ6cqz]mf'.Mqnr(&Aarw` Qpд2Y_oN^#&׿K8~|9Q߱/k_ 6>m٭;&.u!6#>F;`DI#$3,|gNӞ$#St_qЛsS/a.(/bp1{2yEVﻈ+8~ ?թձUѥ d~=bt iX = h4veJxe"Nq.{ք܉!.huԝ"_N)SO H*Ǖ 5ve4dIӓ!` yloydg yMl ٴg&wH5EyZ'9e&eRuCxn8盱W- y݀;ٱCA]I y_tO#ܜRн]o>7qF!rh"@Oґl9bB]Т:M @Z6PE(?s˙? 0/Mv+W eL3Su2>LCڋJ*ƣ zd3ܑWv_K <S!uVT!Y?T>'X6NWv)}O4jTDL샡ER3>𞶌IA{ qs h $MJXC| >oohO{V,aY4 -v|0:a/ |$+5`n/5$*2sHqIyR7OCXں)iOjsy<Mk_,q9{\UP0QAR>pxpLD^PAjqHoq3'.`R6] SE\qOia٠*F9P;Xxe"NѰ`9ߊ!k3IBOfƍf*q`{S;T,u`& AdtWI>|+rfYT%MO)} :U K Xfry]+͢Y3ma"%~n`{c}v0CiHw26+g,O8CrL6ZQ:E9M]jM N5G3!1s4; w} ֲO'9ϱp词_WkwZ QTfFa,GK1~^33@1:Y_%{2?:b~+IQt]=#pA)Esl`:VM{t`2d' ^r7n}T^8|> <׺‰iMi~VBjoX㑿&£z"a'M HюO9kƬ}40e(G%w(qҟ\js:p}Sa c^^D4$!_>c+9zUpYخ+) #_4a_JiV$#0q`azۥ^H=O;sͥ2Z_ 4r:]WcOo!E :if$2rR o)mՈlϬWbZ=6 - P b6g 2U%rڪ>SpnZrnCO#z6pIPPn}"b=p6LGuN@*q)g"4|rfm1󓬆и&Cl` D/4$'7 5Jk~$! lT+tf:~썸`ƨԘJ }hz, :iM6ajWn^miC+K(ƅ?aҭ,~xDoc_lts<,HcU_eKHCh[-B(/ѼoN{Q jźh #} @P+)H݄iq&EV&t\y(rC⿂rl΁A4/u̍5;{?4cn~ӁQSkPg" (PgKtX^+F}znU IBjx?3ު^ gY,['Bˇ_\5=39tP;q-UzCz yח:ה/掗gxRFt=>2l @h*3(uI"Eq<o{p$O_ |Ns@֓sWk++t*- :t0 ;x NS i]#4_]e9Y1XJwnPpSZbp(Qox v]UyadPQ0WMJ*lMxP6LS^ݨu+fBt4jzSufHl*"<%e6yY'@{d9aNdrYx=N֍QM-à2rVwUkǡ~Exv<݆zj?y-uqIaݎ3?NZ8Upeī(#2FSD$E!˷uׅЉ-Cy,"օ.fa0Zy4d\1)NdbT;[뙌"G V$Mx!s1'ISy#}}6 ؠn0zˑ+祿{)x>07~9hXrd()ث9A󭁞T[/.PO~ lr n>^Lj R kNjrUޓZwE]kW& ՒmA3S3|F? ުHfQ-'Z*TMIS1S'(d5,r_/pJoȆxw>G롍`<:mk,{#t>J^Zӷ pKgh;ob̽r8K^]DT=iZIb<Ïx)QIq'O}j:z1Wutxa)y_ =y(hSE> 8Ai ?I-UMu\[Wi*lμhnW4J@SiQBv&5.* &"hq *k{)`jjn(XqE|b}E`0ۉ7-ov;lNk9CHS9nE#CXwJK1˫BO"!H L Ύ]RvA.aiw)D/gD27 w#s=t'z52h^!Z]'|5gc tig|=b٠4@9@:uBza.bN+!\*6TAj6S7rnLG֨p0SЗ7F,i*ɭ̐BhKyO6) ,63+TGkez4:Zu@rۄirj}oŃ.|oWmea!i'aV-Pԥ7Gc׳zL0cWݔ[u{9V u鼢 g[ /فiҨ'Rңag7A H?o]TgqN uq!!]d8mF2Qx4uv|bdHs `R4zܞ0 Y`;kDq\=*I~)㞂TQUG/a.U3f>2ek:ר)+hc\QRd>O۳('[C&:CR[$Ѣ998 CP 0:=lV϶:Qlv,?a#>aU9ȉq.!kS rF$ ctNAsQJ&y\lHg!QtiRpiD,[Z(o qDْTs圖Ku{;+OҐmXD_;7+~/#[1@MqC iNA u'j~셑@2;A3?񍈣 `?E/Uji_W[&\.>W%ʔxHeWyLZV4*RC`˶VKt:n4TFU\ !e g90fyA'W*?໪ 0œwP1 ޷J@IK@ԗ m&}_|6Py I~oun*[!@[i@U+(1^'g2%^ښȧ+ $"1Shw$ ҍdA5Zs7RkylB]ט^^H{ ppVY +cvtfA3M$*(wѣ,K4'6>0! a; ^n ¾e?8hmͪW^txV/Ȝcq\<8N%ypHJ.\ 9;Dg4n BbH^'k 5T6w{ c/7Q_h,>CB2lŻMe.>- ̂Ve-SR@pŤ#gQjrre=r> [F&K 6 McL4tE1NLmRmn(|CwJa*&j^D6r?i" ^v ,;lcj_ DC)Dљ70ve)JLK;zrA٪_9 ?oW.Y=nÁ&™IAc;5##p_^ [6)]^TYwXP䇡W<~^ETkª )DQn/Ha;x܂[(L0?nܱ_`9\DD[pX e\'ϳ`SJ*, KeZ,`,Fk#_4w%Պҩ9Jd v_QfzWdz[ϯ2&=/f'&YRΦπȋ5KluVO}`#PD/umd =o"s2x쟯0{ԕVԾHJz. I_9X 4$5Ra(/^9X2~eَ8Cۂ(ܩr߉>f5mbKܻ4WMr3,)KKo:k!%@vi=4ACgłɌMRRmGv*+.Ki]: [Tʚ8e. N4af0+g(ծ7JјzVkz/,5SGR$Iԕ.>tJG#3%Da=A ܃-D[_=ЀYVk1&@ΰ#o[,r.N}5ݼx*X(sbըEN$G!}o MsoV>k^ ĸ>Y/Oj: 'X'58^>^'B1ԟǣ,L8Zkta*v5XvaZmg" h,f&Wx-5/1/Z45T]>$L3QMz0a7Y1ϋ8T|,_#^#i:}Xm~ H+;F EِX.)wȷ32øw0 R`">`UQ-):|0B>Ia/MSI΍4U3H8V!'X9l`pq~^ey,r䪹2s)➛Ó$KQ9>ޗq+_Y9c.^AAC؀ {5Q 3HSl"s- Kl=ή~^,GAK|`Pb(d}Z+@Q"7f=l`4tLwnO]#h xtvvAx]܈}~+ }j:0W̺e($ͯr }f>X D1"k;y]>qn;0y##\GJt%W 8#`qz֠/L]i0v-Rt7o8̖_-/]!n;Kŷ]i(y2LH]Zu$UWKccmj޽% QN iƌLYS?BSFͭ' RT%ĜNh2C@BU#tz!5oSFǻ;88?*I/ P9Ũ-E(nX@LA7l E ].iS18]DlvO'j)!|%L%i>U3d_Xkfv9̝fhUtdvKbW?ҿ)ϭk08P2!~h Yv"D;El&v"szrS sXέ"Go1ŠWXR~ʙO&U$Sbp ZH q6}2ֲz$Yu[aRi* =\1p*R# (Ѷ.w-}Nx45}}iaJ.8/jh,q&˩+~sziZ[0D;֡AI.z.C"F6fՒ}~jq l`[$P|k-CUp 1P&kek!7'6&fQɟ.j'Ehƣ\JQFXJ3^| 0Tv6sp)є((/@S O dֈ̚ ͑iNb)7 hm$\|;M]nаs'b|6`x3ABsjԘ :DCFZM4̖&9{P`E=RX DAO.-~B/n*P9Rp7xƼ9~WIJ!N-O13Jq=Ef"_f9dCw )is}ņL[gX3k5cw$?с,AHޫ\8PIv+Ƀ/QqUd$WޕƊL>AZ-|" ~XL}S-7!кu U S)]6@ѰZܜ HcwēlwjT\J*e|2p(iK}40h]TQ$unm+~|pWz;3g#L$3LGΈZP~N_ bCLfe=%@$܃1^hԍN/Xnif^+*X.€lDWx/aLu:y6gOV]bU n/Zʐ Z)qr7%܋v}eAwɄy3<KZKº9/@Hݏ*(FxO$.j,M[~ԡѭd<P>ⰪV$;)N$S,zl.ԦR㥶e/k-TYY8 ; ($n<鱛tcJ '\<|=h7fGT9)esYdEPF_??&.V7W|kOG;B($e^d ThѲF_+ޘ&?ƒȃ8fTKjt\I:ӆBDZ8GZ5ki [{>Ǧjz'Pw8&n5Ɛ _J3T=]m͂]AN0<+Gl䡳!odi0e]Ngu-O95Mp=+t]V|qPpF*F2E%Bum+3TVQJIe5[Fnv׆Ɍ(/$8DT]RfeΗ[rs*&7{@ԛ@8ϐ.j{/(pf1?5EaI>E1ȺzS{7/gC*L4Zrs$ǜ$dFR~+t 5QrϤ:GV KB֘RUowNtĵMl:3AZ?љOzѹ c͟uRH+BWגɋۣULx)L'7kj~ST|?=elPZjˇ fymRngVu4ps/=&*)ݕntCF|1Ȗč ⋯K˱$=SFa }J/{g`6!+z*wI"'_pN޳ڳdO`DiWu2Εd9ܧ1J%ҩ>>4W0TƸ9qvilDbzs+3ƼAFBpbb&nK'p~!3 u6vgO$\A4J3gܖ2E`UbաLsrnBKE6ϫlsg`:uh[3\e3qmB=5o=(}JmuȐuKtν?h= /[roG_,"ucz@8<L_HU-7&4cr2 ~)eʜ# kYmyl_o`o 64m M0iFRt70Ƹ-jbVߓV,,G-OZjds\Ԙ abWOnh7] ,as)>)d[˜U$;UHL}\岎Kud:QVxRv rEGz oKVg-m1ngSN`Vy *H'PXDRe(QLj!9?cWkZR&3gkέT<Y*S\_e[='8PtPvħV9+vutSr sZÔ'2QY猵SRv5V.+$C. 2L pBHR樵IW>58`2ތhK'Z `VjOg/2Mi`cD"*kB />Qplnw}t O-eHDHK8&7W,gЬS*1?Yz%Sꕑ \i4I3~  a5m4^C-I Mv_Ѭ3*PӘPm(%eeB`9yC6"|N_$igE ˵Uڊsc.F f~0B ת%ŋ)xZS7pG7cp~rKḛmSe%W8%rևZQ%@5Ղڲ|34c֯cB\t%E乯;Gxѓi}Ar2vlehȇ} X =jA/Ume0 RhTҋ?os)y|W^O:d~ R wB[oK5˴捠^Rz(̇Ѕ0%@"o9(h11VXJA6o=iתLz] +՜Vo!&\+TF#ۙ 7s/D\ڔW_&WVY`"1}i5]ǙIU8S )#"\KM=q0nx\ק #6hscؿƫ:; ҃Ps^II1aR f!r+LPYi0\uV!vf ui^7b0Is `8l]K&X :l3aCނHڹ}t(賭Խ+G^ɬ K(؅#V%Qhin צht+CWYC'DU::xon.8ڊ8VAjV ε}Q,E~"$ ] gWotJ4;ևN[,"^ 6a=WjDU¨+QV,"7z[<+WA7DD붌1NWBK jP!oR0^߁kK57êj) ۜȶO_.u+"48#T'*dE )UVGd|(?Qjآ%PY-RZcT03MP,{-pB 䙰 n8+Iteb2k4]2O3ލK8>|~܃kIQEFMӟH gp'UI>15 l#`L?a:߇_M4y-%q@sPm-/3ZqrRrͿ&Wj"{aWԎ- "ؿRpY<;4tbNeZ$V[•ft|aM9ФcP*lQBa1EeX-GZzVGvɻ4 &9aۄS bd Ý}e{>0W]y,/CtxN&:amR!݉ni" .'&"#y\($mU_6↘fȯ Hq2 $j8ᗂFu+wVl ۏ0 Cnʍ0vhIM7[#WO9@)S})gMرp.Ǜ~UܷVN;ia*(Teu!Ob. "{JrN"F[~97ŋhVX\݂?}> *>' [ـvO-Vs)_+2[g_!$n1D1bj+uz&dNv锸ٖ]e[6ȍ="U~!' 8u?26Z-$zɒaDɊ#']7+녆Э {Q3#Q+QdIYM=)z}HR3(KhW` w*:M_JrIh l WqMľ!<: (N^7R#kI@%kIoCF\ʯ2,*z?ȁ P#z4AdÝ,L܈m)Te6| E0ګg#9F+rFVJ21ɬȁr86~oMFvۑ@nV[Eς3ӥsʱN(2kႥGR/Y8/͹ljgw~iOzĕYtf T1WkЎ1W w}bfXM9&[oھs6f$*gUUa8~8S(Ln5Y& PjPJ {?J tlp* X2nodM 1jJĚ{W(שДݕ[MC"9ZsՑ9"*MԣHQmNבBէBd)rISW6TUoUrʸlp{ 3^Qf4V >Fk ZC+;CRd2еHPy10ꌤNr˯9Q^./5tm!u2M Jx{w4uΞ]HxQX' Eg7/jiyϻ6uD4IoiU;7dF0h,FǷ'K9j-TQ DǸ/X޸cb:1يS),/wXwHY9$ 1$˗\!x1w$" j}D곯x&QZwj8v^umpytziu3g\Ů~mE|.@P胰po^GT[xC(PQt`+}Ta=YIf̶!$LV,j=#2'z߭@##~,+c^;ӦA̴CZwzN3 Cz{k IyT2 x#d)Gu t[,^h4˨ָjtQ-l|mܮqi5D]pٯeuӪ7f2݋G=ȋ^[eug&Gi]}Ooml9ւ`oe9Dl??&Ƞbg~ Uwb>hJEbnaHgmʽ$H+HӾbY;=!PZ6tnl_%ÌxuB":xr~KFekm"pY<>=4> *3[(<p:P=F"kmoU39]܍Jٟg<%b4T3Հ#u N>;s D4N@,4|t\p5D,%TThXJIAWiuSsHqT`(|%$dшl24A0 b /7MӮ.n- >dM_㥽qy>{ n/487O[ߖW7'#tTNolO L*9&{/Tb=o#l!IK/*Sl XkQ6#߹hE oUj4}{39#|"v9˜񳊄nL+#҉,8T}.u`Nkmegq_tiQS`-%տ ,.'9mK{, .1~SiqHL Ƅ3晬1vK"ϝQ K.#K _W~˕}=bM#ʻG٘-#MJ yBD#5$|0ShiWfaЫx8Tr$Keo٨A?rC-틟Tǩq r7e;V,γk+/)%RN*O{R][~mo]6s|hfʮs6pH)% mG,f1CQ*ewGLr){H7uD!EKRGѺ>l1q㨋kqX{l(rDYBMJoSDz"w?$ބ&4ޥLXOx6o=p (vJsG`&hav%XcĉpEIϢaͫeW}=2>;1>ȯcǚa+0͐au>˦#bqP@wa]B;??أPi7wX_W"c]q<4?L+8$K~"i̪5~g&բV^AiDK UeVFZ\pY0ZŽ\lo"5zi V#W7vlBt+Gw\ \xz ٌk#_."acyi+T m+-U&Jn7'揖z{P@O[Qm(fYTkŏ>>"Ƀ GjNVw K-cJLPlq?R!P):2MEG*g , Lm؍Z|Ta@Ts]{"`Y׺!oDѯɿ4ŤSTN | DBPw~"]Y~|fm Y{]$R)2'Echpbt2xRqTjN.܅='?LB"t.ō̧щUs0YӖP}YN_I9YjO}0DI/b'@=j ԴiNKY};LA i>YzٻdG=* pELHڭ ɂ{wٓDzJ(a,-r0ZQKHXI'qX hy.R'#xB: 9rx08y2VP\Fpbewrq%aV Xrb휇ne_ K <%T,SbLJ-[M6h  z3`۩9ŹX:Bk3wBak/~Z~칢ꨃ9Г $=c\]EZ"lST)1S*0z|]wMk28CLʻ0%@:7WV8aAz￟ʑdxQJ᜴>ovzn[o$}ؤ1z <U%LC?c& p [HߣU1)O̎8y FC@n0ވ]PsK 80!U,1KsSZbk.; -ٺʘ:o je44sm>cΛ,W7cc:WIȰs1؍Ȁ@;]\wPx8:4D0Xso"qOjcUбjn4@ZB%Isv"{=:><~yGt,7 N9@R8yut#i''DgKx@> o՗K̑0?rݑ% [sxϞjt?dN (_!i!t.r$RBɏ̗džX".j(sCY*keh 6l T,,cOzgvB"Q*?akçm+:#+!ӵ֔쳃'4M!vQIGnM& ZRR73؎Sb:7c?2KjA =9noح?[nekw,T 8dΣr0>j孋MAFB|o/Tr3-X -8j.v'k/ӂ WN]ĽЁ&&" En_6LE]P]|v/cݷ5nG/L|qz 6ϔK9&ClCtJ3ΡMb̜FX=/FN{fz˼<g䲉&muIE 7_?CyUT?S$A5t ɬ?*uɛB|I ;\7lJs:̝0BΣQȨܮKkFt'Zܻ訑=p۶ŗA*R=h%]=E;BeOUOR\}t=G z/~WC; hB:um9s3yi.1rvω%,퐞﶐kލ%wʒΗ-{dӫ/?7Oϥ⻅?hyF1\P7 Rf+Jv aMl(WJ9GtMI (+D҄ſhq @EsHat^Np0٧Ga%nq}j|0j>igbX@:Rƻ'XE:!GO(p(YjYЇ ӼoMpA ,)c>W(n,WHO̧t⊒cZs>'g>Nbz7܋xD ŸeɌ}&l˃6/Khh9H,FsY8ɋb0Jػ뫬?*z_/ZpI3$M) |MODu1&|;ߢzTA1kPrj'HLbtdž3qI Vá.Ho8j Ğj$'S!ucͶK3ӴGkb@.`,3!K:h-DlQ ɧτ%~y,lsb6ffi$nn]Hf)$NR* f]ZN\ebt8BO/DEڸ}P +a=NQ设 s8!~gRW6v`44=.hsk:MHٟKch7+~P%vЦEκêy^>y!pbZ"[>NmV El%}[mmDOtS>r]pqܑfo6^uvo0-C "μ(@2yڐ?Ley:j>죯+,#=:jϗx3!w| } Sg^ -zqQ)uF;o̡d7B<G7-:8$Cͱ7"{sdEU8 e$] `p'5n7;m |ugXUo±• 2bsRR L}vf0ӫ0Kr xGaTuY!ݻ+kAbk=oc//RB`?Ug)ȿpԀqJp PՑ#c)/TI,t+ꝩ">Aoh1%*ϑy6A*YźuV#a;Ej]fdm}΋bM>Wi'X5LfҙBn>@I軱˓2!?hs֜ʦTTLcHArq)1@+u0X=CD  s h#\d G7n/8r-`[UbM5~68aZJ$hQ *vBdDŽۥpÊ@[>r jHѣ)3nÈ}5}jt\sìв(fԈא0ĀI%ٸD_ȰBE6e ȥP95I;o( B/rw)Tqd酼 >smR O f6^ urcDV؃#]mS@]ڷrYl&{z{<ޛ~3B<CxERiy0I6 roYy[> qq^&ɻ=TE9?+qu?{-O7 u"(,P<}H7rMsrQXdB}&5t]]sn"(E_0((me!3|"j ]dsTsuR~7;P8+mM8:|hW5_`nJş/՟š_WaQ.[jPNIt --R&V` g>7tEڋ&"~%r 3fWima 5K"A%Pm]Q≕Աv]l &s4uՏ;d%3ͻ2:e(X躏E:<(?=6Y%-9I;QAsWۓ_?ٶT {7ZE7gUH1Xnզ]\+6fY{;>C -(S6=tEiuهk4_gV sG؁[,i" ?Afz1-ޏN}Ä{cX޻I'05jϪ~kT Y+*cBQm b%T&~k*ZpvP[RYR02Α+/Jk-'¥ȽH ~+x|HY[1݇22Y@0d7Ffdž9]KWK}F0iDG6cDy´+%43OĹ[F}B&+q1dG'ՠA=.Q(5h{Wѻ$ θ/y;)[ b5P{66iyuT3aS(9[ʩJbi_2FnpXo\6AW/Y<0KF#Q]%H`' {d4h̚&*|fPT+D,H~Ǝu*uF{(R`:P1;=OCfslBU]JlWwcBZ^4(\m@yӣZ+1ęf8<Zzfb]=o%b=xio^YFR .7/1U+p$R7{r"I t>?5Ⴠ>l<6G,YL[ w9領xykR {#X5G^ +PF7sڊ'#(yLƐ 1mb@/)چR3׌*3YHpc'Br|QqV!-PW]SLD@=swl i"l<0'3Qy 6v}KxE" [9pr`9+ @:7*僫uB4.R+D ٽf{?u;$Uf.UT}H>O646V6ݙR[`F$I5 ,K$H+[X(${mWRN?a4g`&\M %,ck%Ϯ祎Br"D<:7lszaOL)}z>\dkԓlf9@L'Grョ[}JW C[Bw-YܔA=̶t8=fé=|n^T!#.@窪XnHX(`,3V~صے]QbR:A怄R_At Do% 0|Ry~1 MW9P5?ϸU![lc?g-Phg}\?!+,畵>buiC4OM8)#Q̴ᔏk؁$b1NaԚ[{;ӁExk6(;Oxxo&tH1a|0^̨\e6Plpi=;v34xSԽc?ZևYw|S$Ha/Z@NL|_qXR7O3Iz$Y2VciLn-уNj1ى%Av>!*]YswGQ:5s)QJ}F]s "o q|`*.rrUQOAA1^0ƳlUC?yX8 >_L='(I#4#i#Fwhq4!v~%"tUF=S\ +0~jJ%ǻ nF|f: Hu(yBȱWL6`*T*fAlq $#+[1:_!:>!YpJSP*_y{B^M8u1HUjA!8fND<|XR.( X.󅧶ҾmnY%6\UVV>ڙ1?fj-hs:l=poY]ǿZN0$9st<1|أrJW\0Xd͙!ʛ=muvwSv? G;`z]y'3fל i$upT",= V]T:%.h5?̏yf54x@foƙܸxj,9[ֻ{I[UѼw &/~<ݿh[fL^mMb2F4*ʔ0-* _j(D|uS&}]m׍07IId:\qƥ`v)^@f`yuU፧,%$'Jv1SOU |qG_L#gCsX551b;lc֘t+,$+<_s{g@e4 Hm0Z}L61QX\tk4;FB?5r܅t n}5Efl՘ %1z/a6bD>xXUo<#3ys %˳j~JrYqiHrǧ) >GIbVt75$_?@ /Ďb=ɧN?S4]#}oEМ*.Eu*օ0tAanQ{w%5]?"U9VRh_;niYp{JNϧIl= )PpV7>7UW%ËBZKyFj*;&^G"@OL>-T\kH6*dPRQ}X0,IP]uզ.FASZ5$smU^B³Hו9<w:{GtvfJNim8Nʇa1;1(O/\~~ߐ +{uZű zF:6VLe Iwj~;VʃQęPb qI 5giš'wjQi m"\~.Ms9U8nD=F(B`.A|Uaw c\n.m pOʚ{-Mdk$ysE b-.j2&M닪ݮ{Ș5`-ꏡrF6CgUp[xґTJA rB]=:.i kɀ`(!FՏ]"x#:rJ@Gvwoq=*~N%Vlx'2!,#,CD mUτp4X $(;rneke__C$ T1C:t(m2_%J *T6)gYȀy&VZc W7-mz-B+]쁄q!`*B_'?x:*?9IZvwN\Qvs[rmYYkz6)7hSV ^pkF;$^oH^?4{ fZ!DP˗(JLg8p樉l.TlnϠO?[I076a|Ht"9NpE(TnbF T6D+oq^%(ok|z$ۺVO ~R_c@b*} =0Ce?Δԏ!BUoq)9[xN~>O7F1sANOn!^ϜOI,E?xa?Η?w d_.] @sW˩\D;Yv߶MNkWu H@aQ y Nt˱u?t51ɭ4]Ȧ<#~X}p7?jӤ TgC?:~Tib:[lsYQj!F|!4)n:t ݵxku#H 3!AwavǶ$\OhI EƩ^]^y] Ѷ#VEiZ/ikJ`ٍ>t50}MLp<=Ε pdiv CVǗ S5t?SaL֘˩ \Nd<FsB׀<΍R}OtpBx- [9ˀ-m^"4&r[vz"@"_̪Uy5F5EKQ=D9'A]ڢ v/9> rF1B2'Pì]={p BmEEDnC5u}N:!Ȯu%\\1{ܮFӌM!rڥK#<}FUn_gu"BobDnTs`O;/\טv .Sle~HdSb˨/6Aس+O}OًpNTzh$jx! @QYܩ߄0+\sqFDo'x2pbS-%l/那܅gzР*q78XNl E/uybܚcF9Z4̕ ,h"ѼV6G41zx!R_r͌(q٣,Ԃ/ PY qq/ hUd/vH~<+| A\Q2i3 *-^;# NP8B9n.%˽')bT yۢ?k &82:6sܞzcwz=Tl/\ sXM™}+(Ͽ+|3fࢆ^ꥒT*O\/5-RЦЗI[X}sZ܈rע8XOK翌3˳cAVU$3cEŅdĪI3[67*:WLL|Ni&oiwÉ-@D9yIe؅S՛E4Ç[ɽZЍ+2V$Z,+(K ®L5I$5aa>_ArJ0YCݎKAN$p!HLHL@"+55zB&9a{˕ETo;j%qXʇPڈ۟"QUҧ^2 /;o;;XPE uݐ8qϒtOי| XAU4ԐGb\\_pP )KLMћd$DA_UZؐ+ˠӟƹfma%%N㣁`i<‡{oZ–fhlߎ~E0py;3/U߹?ꏽa܇}b>Z'[ؑ5#vjގ@?^QoNq.o%3;N۸ |WcA с levz|=:=h}I_S1 Přtp}Rz+tj=2Iwl(׃_1ª+1؅OX3CeC||stL@j)bl$>Hnig.(, cj9#znv0*ȼ;-Juj9|}|z Xw5ϯ#0\|-JI1G xhBFOucj٭hg1t?H@RmT+;N:1SY"Y'SD4={ '8P;kQTD=&6l%CFUY-u`+OTtEؿxhƆA)P79t,֛)s! 8 g~%ru#F51 pnKydž?j[tDoVlȄ ^:Ff=[tMsI8TJÉȣVpJ;@*ГnkTU(#Oy)4N!XX Ǭ?wrh̚}fJt^tgo{hxQHed cDXcwV}鳠o*L>k*g E#^ ݙ'4;nDS7Rͻ W'/Ki,+vHەH@YtlJZH)הqR0&w;B );n/+.@Яb('XC& GJh%/ܤIv25nЖ8 ""#YTYđ02EF#<)\slV%V6kv\B$)9#`48h*  ;S @CA(T.CC(䗣R4t]58 s?=Sű}lX4FKG@ ^DcSZC0 vAnr!ipTb猋ڕqVN5>462܋E?=)$m mj.D04)ހvLh)AE-ƂYRFuvGD%~v*ۺ2R(~&v'[L8Uϑ>M ΍!yRyy`Zĵp,^?<)RMg~i]w_nbi 3g\KDI+& aȜKxH]:4?7KE1x(?::u2Vy2(^JJH^T|z-A.\Ԫr~ :P g'޸dgncJ)3lijH[᩸2hj"zB[q*9H#Z{L걧(ʾ?5dYAēg_Pи8E.cކ*.[$R!#o5iv0B$p5}CSpwd. d\P`$GbA깱9?Vs8J$Gqd 4r[2Υ=Z_vaDi ]5~Ee5v e9 2_އ/tBSoXFB2N=-w[S#QP81'.1!#$g :A=W{7 υ#Yϛy/2_zx jϻR&mFG Q ] 4:l{+&MW]Z6Y2rtOP4(NG`/6x2ldh>Vi(ـN/{~nD=><:ciu%v=vrpٳcRߚ,DzIjQRG k~tU#-"N\tKZ mF-r>gΏAK1t2,/͙(LB)Շ+y)Wk0tB*w$SuJr95Qr9XУU(qѭ&nxwOP>p l vCV͕>] uHҔ22ǎN:lX s^HeM%.E(AGˍ}H"{4"|$ډv﹟d.j5TBXaCKPQ*^#fPjÊ{GXS1\ҕ 9^ ϩ`lFnKtx`B3)UDi1Mw᫋kir;+n_ \.Ş(P ~Ѧ5v#ꌻiE=A~֐A8k0 XS{ޱOJ"|t8TųDيe}i)p2R f4d>E@¡6T%׀Msǧ*9s5fUxO`0k[Qy O1/LK!龢u]DHd&ưu[=I/ vK0eL=ű(;,sےj1?=f% ,y [֝F o~D'DEKX/nZ c S{#6H0w-C]$7wIƬ&a YmꛗZn$^R\a`@҅GT|M^%A`7v֕aTHKy&[Qob"(kοMR^l<8k{iqnEBRn--zbf13ǀIuʡB0r@Q=kY(ZẺP\_ߒw:b 3ls\qg8%4Q"Go0fņuIAAv Hj Ւ q+1jtl(~9 ZO_U6 H#K 2'pk9T̢.u8~Lg )v&+nJ<2-cGtZn=]̄ݧewVVϚ-CfCA!3jaxeջ=S8nj"׺gT3;'#jx6"Hgժd%@)I^\v^Iqh;((7yq `,w}}w`ҎɵMQa _颅)1Հi~zv̡rED {tac`4x?1! la/Ǿm± nR>~b@ߟ?ߍ{0=RÇV ) ҦEt~H&c[))OiƉښu$zHO17D9nu_@C{5芷XMVKfy% F網ťSpٍ=X =v':SP}hB'ɭO,.k5 )|"-aUKzp|rS [K)J4%v_曟RFs5)A4j}x&ݶA+cڬTζkĔ~ߋf섨gO5U$УN* !6A9xz!O?Pk"XrC,xL?gAi^d/A53bv&l&OV\i;T_x;£KG1u,Y ǭ̖BL}{pY_g@CMP(bΫNQiRT%knM8 %HQ5˞Bic `vu |v<8ζ2r4VN#q|Px*Eȋ%<"w#czP(쐱쌦'"}D$_B' E Q]]x/yOTaEajN kAyϲG)g&GW݆%HlGG_w͠wY(>q3wE҇7x{FOՃ^[$] !qKnC|2+ܭ'GOr#5Ғ7OTTurbf^2VɶKJE:ǖ +\:PW;]@o;*U$qO0\[#'!uf/*` ip;sI}ݺ ѴUfǙN pӐ$H0g!75}'{BeBFJAt):yA-~Grë!VS<]+z6tTIIgZ̈D룪&s]ÖiSai 2MrPە(rG36 %] k Nn>b1&9$̗l[F*UiW?.co2"AQ%P\iZE=܃FY_vlFlf9}+*ո6XDNT?Hg"lNmg3v!ACwÇRqYl K@ՍwsbH2 3ij)3_UZl6``3AaēlGDߢ =N^G6 {iKpW%'b|Y^9E(!#vN9&Pdv q,6F+3Dy/ ե2/- y *d|޹/uS{w) bF#QD],qY""Y=+}:2*XïuHOgQ0q<+WG=ridS,p zb+NGp%q`f L fzUd1 !n8Fl|$؍b<9}Lg]]NׁPnDvO>&$D$n5]mx\ MAJWż7v7x|9!%r c*$̽ c ɝ&k !cK\tKqz)TH_0;] H`+5ugV;l. 4X?>Wh!ԗiOk8 fP!Oa3Lsͨ2 N'1hW'7"2)`bⰴdeVIέ*af!!B {/ ,J+*kK$fW+G~>ؼ%9/gpӂk"@[Ҥ@nKfKDqZ6jm)dȭe?2DƫMͧMroG?l̆ stɀg(ԕk]&Eu)_ 4F>.B1ڤqiPBݱ_wS-N))IFʀ'(h5(xH)Щ3DI%K2b9D2'r:T$J;|yD@/;ȅ!WlnmzѦhݲ^e={e ;62Y*&(Ӟ d ;*cEb(ɩu#ꐬu~JϚlcd+lW3N9*S ō Qu͘u ^ٟ<1&^˩H)gݷf6v&ZT Xal1-ug[1:p] zWF - ۭ^ mx^p lNy15<nb{SPK7H\SGp8P2+[ARH2yyu<|z˟1ʺJA@ 䭽T8;;F SwxTNS3s2ѧojo}{ &c{'8njJ\',K]"7Wy׃zh4 Bd?oxsUU$k*nVL;F8W< YK+˲ViI!_*R8 /kj0@a5B{vt6/x;Bow|.V$Spb ST5l+QW2GΠME>q(5k$e >(QxiyU6=^h#mM׍3_(d5SAܠB tnv{`V*ck)!_ήf`J]FIAد˥CVnqO遖Q+/>`RJsjӰLڂE/+f><4M%rψnp)hѢ/vlZ(wNnU@W./K? :/AoDϑ'qD$bT GMuP$umfQ49,<ʦCh%DIeCYtMa |s$m =QaP#/!^@2tnzn6$ S0XT,#G8c^SLϥMl^TkvezQ ϡRtaX?ܩ)H7jwBgOQ#$Mw^@%7ڗxaM<ù=OբfwmAB Y2V(,i.\K_+'9XDr%'=@fZl#TBy d!Bk&E!"4tb2>+ :S١x 0)wˢm hO Edqgp\Ssl&'0Jt{b) PAi+ZgWfc̎PF>7ӌ"~S[<@GÕy? ި@s9'4{([ …Dqy(TWy}3_)Nd7@u{xع5:\b> -$iք"V4H+?!R˹P:4_ǫ r8kߪ*T)4t[7-{B+s|$RG}|`32[1S=@f(4.0{+€?nl+oiQ5~XE|[~먉@?DPg֥I<*9["?|hn ffmbjCM7hY PGb ]Q''wǽD߂ &v++v$QMhM\4 6xT^$4J̬ro9A,m/X.rQu?i1%-K%&ׁkM&L@ӚK#^C5;3Ď!^jx`r AWAf}Me>b& $Ekd+ 3I٠HQq{G٘Psᅴ5{el?l3P{E*#B( H q̒``Lܟ'=})9(RIUըvFUւVVFlDxy fj5ݿVb]ϧǪFٸ:ڛ%j˝](]@,긢`K.Hxfm!͍#M,YLjUԓ(d&E<G$AVd0?6! q Ŏ]0+.fbb_PrUߗ-s!Mɶi;V,Eʹ:=z5]a@{`7v+Dw87r$dZaDFI9ZJPAZV@5keU/Wg 8x1>p5*F%f h8 hT$Ժ+ O{Y5:Ajv=oeC!!&w _\ftٷ17UZיT3N<m#8ֱ1wϣz|AAݙs7ksn?khҖKi*݌z|`w1mAĄ HZ82e$I 6(b0ķ!Z)pXv[*'(V,.2}TL g0ڐTa=s|%#aDl4aP^`{8=}u dWWYTv4pBKݗ^yB[Q[[A; Kp-+ݴYJHrfxC߅ڙ6sa ~PVA) 韞Ѕ1iHL&ņ/U"{"K|s O:@1Z3*=R>mt9۳V3zd792E\S\!T΋v@7X aor[=;\,kv 7F5K+!^#̀+wO\NuH;]8oPQK9$k#L9;1_+!&U at#J!jl3+,J`Fc=m@yi"~cɄ ;4,ޡ)՚P^Ȑbs Gì[B':1_o?WM 6oI6ULEh 62PJ@Fw_rG~~$ |b=Dy@Ԩ|N :PNʈ6BZ]CM]y-svJ'ӅٞK笮+'!ci%QfC֤bsiLNϖR! N $x-Eo0N .7tCZtQ 'I*G N8rC)&tUTAmANtm йgYh%ۙ%ⲙ;{&wQz7wan*zLE/ MUȈvuu*T Ƣ[~AB39h~tEbu՘C&T'3{Εkd/g +<~ǻZ@c과/tp;Lu[9=}6|>e/䏭`:GbZjKD?p yT&o}sx -ǨaOwB†Y)9jXUVt1E aKDsc7222) ĉaF@C|i1V"|Dz}/#ij*̄]~6C$3uGM7̷+oO{@Y1B∾u&9º2@Pz*˞ZgGD'J蒂{,ܛ%`o*3e9Qoy͋L<5ڡV٦V4 o5lMꓗzTa [ǪV.Al  glXף7>I^Oo#Y &`\2Kp2TN1zJZ#4W݌zAl"}]PѬz%p&%' d !ӡ=1[o 3BgT_љ^LlH7aZGg1{tB䂖)u~3cj7!Ʃ81O -B;EJsgVǜt'EF)Y18/i'KcӚF:Pb2@dr_o*/ 0nXbd JU ),3Dv%Gu{DcdS'FO#9Y4}"JPV*Mkj2R2E1aB*Z#6WmleBC/FZio - hcJE Wry?/O"AuN-z@C”0P@W($7n\&+ " /^MKdr:W; kí|ed/.} A8v -{cB % |GbzsM 3.ZuC`_E/=>&׍$'y" Re( h.T{$n^~( [TyR F:Xfr)媜K,YPjU9*k#1O ͌BHK8"+zC"Cbhᔗ*P vP||HJ?v4i-l0IJbRL%D)}XVIb`q %pn'eFIKyq*֖w@pWxuϠqߠ% s/W>m8V͖e4Ir7s&\l}sfo].9y!'m/4:wLeA#4[3(b.)H#!JV lؐGUrm+ȉ<@"hiT`C;R94߂?X(1_U7.6ǃmnrY[88\?[:@aL<5 !/^ Q,#Ԟ@~xs{9ܠxMSn']@C>迧kz' cdy2EJN;ۅfMFoBTB>׉oD6{\[}쳈MX{dT]RE' 4}-@=j,u\2rߪ`CFRYQH.l&KӇws}ƑMDtT)`}[#AC*WyUSP]xHwƈ8n3#:xď >(]|+vfq/aWǔz%9AB-jV,5'ۮ!>sTv`}T,2XsDH{\|#/H\%%_S6gMk5vw3u 'F<6}Pl`_*D-~DXŠJZl&MOYO۫@A̜gL_݋`;\fħ,}4!(]O B?igZ'90J_ry0 R*{2jʬb,Ńbx ErܘJHI|]E\ffU2Wʜ>^N7C/ >%>Bb \Ye%d~yU[ Y CC3֑"YҢ)Y*|C$ԸBȶA%(7&Y %iDtWt|jxq U˭=jYY9S lNIPINBQ ;BDHQlRE hƙsiN1^"0k5uF,(>At~O~sj'crP{&] !8! Q]t ϸ:&=c,ppЮ4>;$u|P#}hony"zp5>^^Hd{=hOW5XxRy!yiᩌˁUF|U @܁\$;K|LdCS0Q,^g4C6RkgWZ3=H.}'nypF~!7lg/=Qٻc5xV7i|&0tP둵$5!vƋAnGRQ?$8MF-uj| V-&YHُEǪK/ ) Kܑ NJ/ƒ}g(!ޕ8Ryb̍יTX`Y8.Z8CpDll)}zSM{ {ΨekT\Vv[lV B+U""> ȄH)ɞ\t7fL . g0)@J/H! ubآ&e`5E!TmPB^A:/bz_F0@cșW9᫅b5֒I*DKfi Wseldd7' /&Ox`gY"F/%_?I+yYipJV7M5XxY{pLIQ#s6D Z brb)wp*% }igQ}j@D֔40# m.GDFE&.rR(Η] j{uC܌8Dz^\vTw#tOuf3'&K]~ɇ"pN?ßaCeFL.yO$ "NI, Hy-)ԭL /`7ItVFk43q}[oguc ?Ԉ6JFfy^ ȎPT69-u{ZF32kEv ?<1A\T! q}܈+TmM=##mp8MziZsX8w6dPDr)Q. 4'8\j-V5& (z&ݧ혉Lve5Ea`V77_G/%s  ?IިFe%\%VP7yzz4<\ *Զg؞(6IHd .Y()zx%=VD˲|k@q 8Y?{ha=m㦦5|U$&m7I% RnaOI/}ɬgW/my)b0RH7K"t1qcB޳[_{Kv&jN!z*p6[cK gxQцuU\$ZzҐ}4=U_ӷYh0G<[`明 (UiEYvn3Q]GߟSK[瞑EQQi)M(FߺfQ' hHir.-kI9k{V؞]Y㺨=LsHm~aj.~Z8X8y+֍pd2HlwIO"=ALM_rlga%cS'`^]x L YWXRK Ua''T]ȃոD3e96GR+#zG*j)0&+u_oٱ@siB']k- 6Y`r`K!>('s>5$ytT`I^aoa,"&/)ö2g::Wj䵫Bz/+pWqؼ EҕkLS<5e[Ówz%t׋W 9ԟC\)*)7V0m);<]/_)x`I[k/Y lAzΕ >(֮"6fMoG&ʪJZp 56& <량IJP4q]l]JQ0{$&ӍHQI2$yVT>b֑:ϕ~*J x2/eF$YG}~[`u6#V:OGS6XW,~Z7%%?Ъ7&dC{_:k[oxѐn?Y%0\Ŀ+4q:u]5(*O=\fA᡿Lo5^j| Dۡa;ro ݬd( &mR}qvtRj2GUNbJ첹)Y$h zZDc@\7S37N!KcXrQ(*@`Qc4^D݁o̹YL0&=[H|0UK9ya$/= ce4$Ɉ=T iLݍp,XT~?r(ૅ&͚wZoc^qGـ.'87"MG"0{ otVÖ^ PN kgWvcKd1yp zBqW{4/26 t5?U즴 :^8dE˳iT9_{mw*ܔԈ;C 'hA!hM[=1k<hηF35G$`L'Q5iH՟_ca@FW]e;!{K3#dCn]X/u%pœ 3n 38jINj.Яsy*)x~^>~ 97h2cߨr_׼!&G1JCi/[PRQPs4(Hq<0` 0&Wx1f3Y#O^8tw1=2SNJ~ L#gR -V1pWsv;dSk;iQeȴޙcq`৭yX5"yi2蔡o`ZZ-Mxs7So[5`X`K;Wt: Y{ߧx0jk,m`lU'(q «fYgU >Bq3eTG8.GEDjI &؛vIbaLU&Tl~臑\uQ~Kzqz`F&޿P¡. 4Rgؕby~B㛗Q[ Sr8 b4.uHx {, eeL {k&O8sɂW:=e'#Qۻw[˜R\C i]qy_>PѢB^L\  ާ9};>-t -* Çm$r0߽ P nTvá#9hraS{d|WZx["BBZbE8\wz|i]Pڃx74麗'BL|~S3O57Fݎiʅ=\\"d5OF[CBFL' RjtefFj<CТ9Pcu-A 0C9}HR/j3$r*|=ԝ}JTjsrFTk VaA\`VUވ7 Xs/:X,"BH ,\o彵^iMk&$oCE*eЯ`7HnM2q|fP۽³VW}igt+ KOj-\p~vO vs^voPHEjcgB^H`"Գ2Y%Zcy?({Bd ZaQkUK~m~1DFhJw@ѝ%]^mozN}xڊik",6vg55ƚZva#5_M{y KcO< 5WoB_-dE :T 8wNbz#q\YIJ]̹Qmm+li&<8=414-׸Md*Bk1ilm4Q)&q %_2rx!iu(jW:1Q!huB8SR,#_l4}.dp8bܨ{T6 @Ŧk$Ro (UU)w_a@W;d 鏩ɚ AD .zx@X-_O-쎓F˲{3Hـ{ѯag1 Gaɉ.lVw;q;nj 4 0Sg::s)}Iv3eC=:ߚ~v &(1ĈCdE:AVK߉kHF9s65FbV7u0CmΒs)쉘B^w_NO )ڤaUA;K*G# _1e:C/<-ѱF7(A& a'yCkqBh ;hYUs^\C6Ǵ4T"M]k*_r]uF(y+PSQ/Ew!37 *lXڡB]™<cIqP6џ]`;h##?f<* $'*5)*fz~5oXra0 (Ea 0g1t ;8ﲟG~qMAMR$$ SYzjxYm[-?*rWn&u4I˟վ3:RN[GMq'K!zj,?Y|yE?@=Uvևf ClCI *3MN|ء¤{mG3]SH3AL9 9\ 2 Yj5E(̀!^4:n9'" Z:MgZ#ksגNr<+͏ gp4Fn5ZZQ*cI eɃ}Z#I2\#,) -rP/f! lK_HHht.LIGt!l qCSo&7Fz,e~vO[h͏sM \X%J5Kj/I8j(^=3DS}8nJ9 JٱI\.0*e7 d8+UL0,yϬp($|ց@t8 C <~58Ia"Cɘ{%y鐄ujLNn3}XG}&5?Mj"i- sr#rn=[t$?1aik@@Pfth2;grip#Bc?^%rpЀoq|HGu7BM/ joKil9te1.~b{FBq~i:ǰte_#RIʳjqG02,"T+Yw[ܔlDWdqZ-9Q}PX% 踻AQoYT'ۛx^\Ƙ"sfK.'eʇQ6Ȼ[Mt;7-ܔBH@Mm17?kݼi`dͪY>B1kyͨnͅ\-l^,y@^\%5g$(`&)ATdrǍE-7f/r #ț|}yf_Z-JT%*bJ/lmP vjELLtӲ%K ¶H4m׻T\3*_ $ Q *j`cCJqhR#46﷟fJ-tQR"_M Q%XS[d[i+ |&9b_8- b{Ld-j "Q@dgL\ S\aH}GkS9;u PFs3]3 w*<@%v!L6ԃzIV^IXXNwN1= t>P#]B8.9qO|)Vp<\gs.>FM6uK s')Mݙ(K (G$r*jlx(Cqc{7EY9_lmGdղ _ܼOXUuM9|BFېGv`k20Ltd:eA`"p5gj o R,S-NS \\i/i(r 4h!}wQzE^qKYQV-4cLS7ݣCHǻɅ *iSrۊBvO7)m©¶N3mŷg,\9cTO|0 PK6Uwp^h5FA ͋0OV^rD({C q΅yoG*x킟0C6G >IҾxO*7`*ϕ,Ջxd'Iuʩa:sxēTY@$Ow.!U;8w!}/D6 c.>ES:o"6més˹!jV8IHo|&ٖt*Qq9~#<\~B_ Z~Kv䣰 lfqZ4eyC1y\XD>]12GA+ҳcUICAIn&2BЊ*;\>9pڝח(^ m yǐю{V{knH~|^sC㯭, C9Wc݊ջ` "Ek)45i;uwfs8{ڰۆޖخ˶Ĵg#.F5t`Fy()+(¼[A8+]TIxo.xFhg0gpN.%bl}LT;k_;g!RDV3|^@BKP`ܞ9-ȇu)j2Z6nss5Xޮ5վTvINzRBǁD!oz(<6Orl ǰ(q2QO!53kw.Դ5]ȩvc5jI3AuI6J'o/L6`[P7{W04(HL 5ࢫ 򶗌ze~$Kr:\cM49]CE^VieĹ  ^둰u#Ⱦϼ]PJr?ƀe;%vSly#@6 kRwG:K?F)Qn}4ATcJhJ?;kmی_vKO\>߿ę(7ՀL©~KHO6T|ZL|ֻ)u6/ݞQs3dg)ɹ'%SLQ̋9 .} I-z\pfE@v}YSp[OCՏXL0kW%Ge]cQ/pD'3w,i.LKg:Lb(gl Mtum_ M*$cL9бl( %Bo_%HA(< qb){9;]n `ok,uL{lݔE>C$G3jqD=7{U&opKŀ[j. lʜ :?4RZhq@&ML?Jq{?Ui[o:q7ϐAgڤ4d8.#g]LYK4bqT;#&ukR6;B,,H&SĶ ɡ~pj5U$E{nMh {EGLʺ 5)TzDuS;78jƖ7L;- W%|Kj,ʏIV@U1UPf"#vNVۂqAv8(­Y]!`<[mBm:'Dܿ[n+H=t"O]Rʍd8'eb.DRz|T{ %FW*$aRfj1ZkzQ.e Vn&2qLKY7kz=+M䓊~IQ#wmXdYgwkXMXCQl4BucōBFSWb^ENOΘa?}F<¹gq-#21E_rL[p;VbbX ub9o;^ߑ8T(JQU}NY4} ՒTx: ɕe7$n3=%\E tmd9%G|4Nh xͻ89֦Q ƕ{7WԪmEϫp:P)Xg"sd C`DK7JGS-EX͗9 S>%dpmՍ+lWӂiܞJ{]6))ˌ1Ğ8 1>X&8:Pr NQnӻ wC47 EmX@n /I")(ce0ɰ67i颮J7r8lTkjFn2 7 u#{m'/t T#H/up1fDc$HV#_!)tDQ?+jM^H~Wz@ Z Kc94Uc_ U4v-ØtCj9w=QM[cvb"I³Re6#W'+,UN>f\Sa8iO:ѬBjw83tXZFEy4.de^JjpI(oxM/L R%x|I3(8H:6B@yvyESSO;T}6н E1d .r4 ZO205-?[a+>rʄGwK C ]/<4ؗj?>q>x>q<_u6]F6tN1{ԍD,O=!"^[ߋ!89;݇|{ ,1$x Wpogzt!))76Ym<'0Su3N(Ktr-hRJh D 7# AX-rpHܼ W*T^>cBK#?_uhҨKfg7*d _M\Tdӣ2mW\6gD-/%C˼qH06Lؖo1(Av,*k̠D<)#.J[) F:nWUudJoNeX^ ˖sF:(APG"X}}Ҵܺ isjt" k̉E4ƅa ؛0gM` ٣(*kˊ7uR9 8w }c@wBI(qrR̲/>Ɩ2/('2F; :jTKV-0W- nle|-%Y_Uh?2j6r#v_txu_$5peCt^lawQR,&oB$"XAf J;Z˹f^J;@a'z} D:٘5.Kl[ɝ+<<^Mj۵ሤ^B),.ΚI,:d;&$$*f=VMM4lY= u,Zcb-֪]FOE*ҩL(~ݛKζ=sy @q Q13QETí c;Tj?L'[jϴC;i2K ߳%ّOGZHq +Oq Wl,Lgv6XIf`㙕2̳7si^?[~V)̜wO RASɶn1`!C{s?2>3!<΅=\ReрqYÏ_i"qQ~5LW^D9S#Kleza|8f^+dS`J{-Uէ:4Э>Ji;pot6f&ưXb׬Q]۲m lm:{0NQ5¬LD !R%Ʃ5((Ov4\[>v/pF[e9@%|mS\} ?3=ɰz |?lCSMW,Ye Be`̙"L8k\.uzU': I5Gj鎅>Rq`[GZMOܜ^ ȸb!aUxy ~NӋR*Fi̩Lk[F!T IWuiVe?~FoƬh_%/Z>UV4{]EfwZz;odorb` "C Q~k)@w/ ov9h$%ֿDt~g\ `\~ te&o(G,XwTbPJiňefWL6Ue . QvL%R@6V)m}E9Կy[1ԑ.'QB %:<{;8g^Xy S&gWh.D6 Ky_Klzh&8whVPR.\μpKV!c gM @7iDJmRT6ӻe]bcI2 kx g\DD37a:U )V?@̶]ΐ8P`erO,v́SԄf |HT(ϗXk>s_Wa/ 1 CC#  ,lʁ[zDܘ)D}sU~;<űgM0gdF(?R-Èa:>rJ :`Z ]OiF {M9lT`b&ѿG]~DߌQM(D ܴmϥmyIodjeO?ǯb(_OSL}^?])Q+X.\$$2$6?e#;q :ӳ%ֈ~n D[ >tʝQXݙqr)lg Nh.%8O|׍$Z:8$BSFPmx j#BzKȜsb%yt_y3:#qa9u *pfY<6n+4pƎ^F̠ףpEq~ VJ!R.J-p-|WxZ8ྗ"So7P&ߊ?)Dy@E6gR*C؞p 1:?Zazg9GPVOiMOL0M٬Q\Ϋݚv׭a|+ ϝ] l)k&kEI=^#{I5! :R؂Lw5чxnߧ_ϜQ6M붣؛ecx$i<<+B `ıg~tBCCEɇs^e2g(} u׉lBl{1 ` ,4B))l ,꭫Im}DC~#hCoKi yˤl`JII"K* jS`Z Vb麟Kp9##5ơBBnյ#\e$?DVdqBP-I~NÑL9~)X O u@POAŸcDrl.Pzs˚89QXdKݸ^3Ƒw^X+9iѶ6V725^xLjV.̀F'>DsSZw٬F[K={XJ<━U]T1'_ "'hQwUHuNR.oTH/[ 3{”Ը}6A=0'S,V*e`B!D84 oVv,i2m O] KL0(Ѽv(X i}ѵ⒦MY@ci_6!e2Rt hd(c(^6_.L3@5Vi|fSϱٝYmk+E8uMY_! sxݡG$PG^F2 |b^)א.ԣ"eD *})K^?6óDT /Aiט(x&ԟ/Y@و{x<1*ug$7oDDil gus544K?=K}qmQ6wFde|͈R$KcV_UZI'CϋF,Z/w}W #gqR{ht-4DVo-{yƤ G8DҬlu7v{ME"s۰xש9F}N!{Q';xaoAOoF&Fy^ [~\d)|sg"GwG> 9c/gu^jŇF勚tidS=ř"D(F#+qy cH@ 4ܧ.IR\R@7g^7dM ޔ&w=xc@hXAÁ':"td \A\EkVp@$Yn-5Cvz-@-$6Ւp4 \^ ^1l񴳴eVwu_ -zj~bDӢMUcݲ7p*j?ySj.+5'sBHM  Heߛ) :8v[ԣ$+HBہIZx*KqL͂Gc{z mI9~T 3Nq=Ie }?`3 zEte)+\K^ˆ1n 6_Η uHKXi '[^a(~[î clmBJxr뚃׉'l"=^RTG/ "*w|Y7:{MnWӽL;dP$P^[ͱmx3Rϑ|}38:0&Qvj?3 }Bܙ $FZw[jzvƹľL錅/j` ~+QA`^8g-!Miˑ`a4G|g7Bg$bqrG `g6^};;Lg 6_C)}Q}5y$Z@O%v  _x`/Y'Dye ,R+lZΝO$+5*|,=P.̤0gH7$M%15 2G9~\c[ǛG1쁧?1mV2}4)c&*?`@pe䐘=z/c՝sԽjUP;éQt~yUE`HWýIWb}]NZ5JN?\ ϲt(ѨU6CFsD{my. N bjiCsNTJa4Ds!,n"ԩɟN ﶒ,XŜ+_PCăXu.G{ڔu$fo&kzᨑ5,WFOj-{T|3m'+%bLIaeu,&m&LAy$FiC}.2 ӉQ\%6kp1Sh%d6]8 Ԑr1Zjؔj.$׽ P˳m~b ErpE"^n3meQQ-gB9d/ {^FBO,g5E&K';aˉ3Rq(YrdX6@B6@G=Aco)QOFq((VvrV Nl0MmK݊/t>Bcg'% 7%2;rN{:uM43j 9b]/FTA<$:Y*D߭5&I];/)p](YH=\Z˯F#]370owbwP@7 ^Cn'$?sZ ^W|?'0FwRJ{mNRKA@@ƵnTGBt}g>g2U-PNy1Vl [9vVvim̪h?dZ| ʨ[164?X b* յanVrJ5L"bP?h9w@Z'tGÁqvI]%s8l4 'ywseGch)*7"8n]d<IA'<`ܐwʺ=J[SWj6oB].Ɯx}_k-_ҬJu!A(PJ/)_Z   ] qM aDß<.Z"?lwO6M62(nh4K4q"ZI*3XdLhd(DFnjF&bWr)ps@7kg}-$۸T<#_Ja;*-",tlRV4ZNwcJi{92qrQ!cϷm|e׼t p&Z"&JFm4]U ~~W!U\q,N~ߔC@@ >Ktd?kr;17tpǫ%*fsTW?LҰTrbƵZF7FZq^Q"o>yo $GK ퟦ7wYv>*Uh67O̔NMQbC(![T;O+ᨘԴ93)̨}?XZqP# Fh)̥otG1wloC; O\I>M \ٳV/N6_5V&`O .;ihEA`ZoZѯI "54m#Z,'~+8ɒeI9e[!ǎǺ')-aoSp1\Dz➒T Dq4nog:]%X 2)yǫ v3z9_5J$-?qfZ|doѴJ٭Ϝ\?X|}w@HY٢jM o PcK{x3O%셲0=+?pϪpsXk=/t'!j9`s<kܣTemƁ# &z ўQ:aVz<_xF.E|8Wֿ㬯m!.z&]rN *piʳWEɨ 6W{}ddZGN;[m+'Ԥ~Ee#7%%AWjIVl[G$sK@HXZſ G oDVݓnOP C2ě1Jvp/U8 h4#?z[b= xNq|0-q3\2(4<>\r>%^ 7y< G?Fj᫹M5߰[usϋ9kJ3o\GJa8Iv"+`L5Nc$ʤ#"-!6#` %isg_)h& OH1mF;RŎ83OʣRFRT Ȱ6Ǚk{,?e+fAVDdT W6hET_$DmɃПZ"o\) ͊]eڇWV+!sƙ|>@R˲ IѪSH$6l5ݜ nΡU{[}>*Y쭟ۡV)yfsZ2-FV"j-Ğ֐ߙ6շKXbzQN>tu=-1$xj048T('DT{ȄNy_4$2d#RH4ONe`/&@op6՚ @W#^V05LfScA圚mA`TJa..C&  c|&ΦtOЙE] ;#6,L/ڤM3 •ew'B,pET.1jc6,A_7[F?PUW,Dh.ӉOz g (Șss=](-%ێs.{1#bG{YmWt4R9!9zC~u[KB>Y wPF?a# ~y]xz P4l[L'%t`E[獊Ҙmt֟ "L#70w}<>2pc>Y%dt4-(Ekl7?#!_+G˜^X6|WH^c<8Ivu>89#2r }=^R$ŀ( !X q,6,]J6JkJ=5Fh`2^swh\oT!MkkMn}QS:AF-q-%h>&ЄPPC|(N71Q砾M\b=FHhS]N8`C.zPfUzS֐S85a2R%9'܆iřk6R|RAkc.֎Xӌpj:q2o0O$-B#M};5Z;4ڗƌ}LcxT/!b._L<Ʉqjɝ1g+N 87 TgFO@8,+i k`nNDz\&QM`Ed}#;ԼEb!RK5eǘC"tXv'ÕP 2FN3x,kv KP^ M&cf Y)lzO|8ClUgL N!P^<1ƎEM1:-򦍟3" HiR :5܁ h+\5ɕ{?&o|*rq/'L[Fc}"b ?6e SL!zbI_0joi%ZTrYSz i3Gjs<#R06QpM"-k1h-0~ cYMPgX:g5>zT"Hg3V|q Ce`GUz9c@qrP$ lOM>:1&s@BEMCus%MYagLj.  1Uܟ953TSOj`'f.{EVoΓgM2$M 6U O,׭7^@i%G!4g4[v-_W`X"SjO\^1A.o:>0xwj*Dy] }R^2H% yv_Oe?:3݅:sU‚=e>c2J/W<1g rG/㱘*@!bhz/\Xoi_޳BЪ+eg +SoTLjeNn&F ͡+iAuVmZɴڜIa&ȏn3oB! 7W(@U._eK{cPFB;r*Xx%p;GEh qFxҧL〈X~ us5TnF/uKg\JT‰;a/ bϚ ANIp=Gq06{Kc*N_k=xͺSρ.#N ⯌ D _ $|ETP-]~rAyý\R x)҄KOTԾ^D4kF) lA}@" tu,ݨJMc4m,;֫DWX8Q i_ǝԠRP mIW{=0Pm ڡNjx1 L7Hnz}ZkCo τi|X$hU=R7slC,րRֻYVoJw@%Wpb]I?wm])yYKiGEԃh0lFb`8(7D7_uqdǗ5BEM#AG׿ |!>dٶdDK>S m8Ưl?M| GkF&q44R 8DFx58\F A/vȐ?v9Hn77a%~8I8yE_O?gB^ݿX:b/A15.@O# . D^-IcϘ򲫍  :]{4ў*ו 2vd(M՜q 6-6Rz#4-ңF酷6jYp|6f,NuT[QIOW"_q.1kpF2˖qX\ ׊ma5aIU-ekA"(Q,(4Dx y?&zkp!5")pN& l1,[y>h:@ջ&Aȁ,lKհ˔pTdV/gٷM;IC.tV:g3M6*crw@>*p4o{P:oK>ta̬qϟ@\L7#3J0gb ;#2?b #Oڭ!KH_>Ja)2 pЉ-oDL?.BHyg̀1m'#{%Fhcuh:2Ixe:' |[v>egPxuNYVysɩVl+_W>f LiPטWov{{iFGjDK?cp K;y-/㕖E[>cS`|[QNn }5XſM.9]ﳏόLx֓;J?l! _3V@`^>D3fՑ24w wЇ+eTsWe=ZKϊ;?.J$pw a~Nwy%\yUK`fmfBW%pq·JOFG~ $401a a@9uL@r̳,%\xA\6SĽc&V;JZV`Lt"!U?oM W7-~>mi&( /XkY! 6DdV5?_7ro8+X꥓2b]"ʔ8X;3ih~2Rd#Z }n-/Ir^(-]$ 1W |] >#ɍKMڦ0r&9sl΄kzuH H tcE9!mA=!CV ff9XcfyG=ېWf:} tϫ@߽8ر/L# 6zWZW#mo)!(9-H`KC_`=Dhlm^LnގB=4 #2 ܡhXAy'`GT:{՝18FI|o9r; EщSxGlA 4Veu]78 m-5U>6Z؟mi`I5lHG}͵l+J@i rYV&縋dx rh)HO9f!vjNAmӾ͛təAw}[8lM< Ro|P\ &! .qgZfD)8׭%7*a_xdUw飕lKN1 y5ĖH qPPC,8e1mT"rZn20UB:ʱ+BXmŁ]`m\ ?;g#|viIZRn'{4m] u@ƻEY|(1rT+2'RaKPQ guu^ɐ J 1xO @n⶜lk5}~4"ODdxpjƙkW1g{~ h#8?Ɯ$ek{D{8NUtNe\4_GdogzKa%FmU>c-/S[+# Q+?;gؚd(Ȅ#>6qf|`dvu慪BݪI)lN(U jF"d_㩽9r0?Ahx|f`\7%s4i0/UpvPnO^4Pنz=%Lg뚓EX`bVtv}%qԼyh0Z[=¸݊LhU$. b?b"fdbڽU69cn.u1wЯ)WI3Y TLj?Z`pE& L/ 6VK9єiQ`8<0EhiɈCI}wv}<^򫙾?4(nbYS,'v:j'Fx4q 1 1P#@ߚy8QQ*\ٽ!+T2ebFĮi9wKq+A$&BS=bt-d݌h]X'}:fo;r?F k4`2H,[тb'O+N5US9v>džji3U?{ xxjh10eW!~H]@lN"=m5N!@^vL(a9t\F~@e6UM'JSGw2 ` ^Ru$hI5[Dd_3{ZxY>cN/S)z; iDUX+N@S&,o2@(5] Ы}ֲ7:iRvy  +/ Sr+)PS??9c]6?ӂŷ' oA~\ skwm9@N &r1kgݟU-t2ak|;\>0 s@ !W}\ioy>,_UY`D Yhd.tF^嵸Guv<%`aNmLH7NLs1IAٕec'-+D*( (kD Р,ZZ a{P=nh@99-C][ v1fH7Imþ x ȰSpLS̏ kGn 8.PL}YԭV;j,`Gto: :SOc#}Q9,2>F,oP^WbJf2~T%H2Vz R4 HR r xz|TT? [Hw``Ɋ ''&T3ڇIVNUEע-)zhF-#չ/Pާ"5b-+BiA:W"y @_>$;[FmMnhe0V+BmrJFj}`Cڥ-t5;|nx@Q=hI8t$>:QSGPz<_ ixz~xaaS7=$|n5.qmx_T͢\}I3iCevхYXL]39b:#ucު2;PU{; 2ZŲ-` v9e2,dWx-#?8cL H{ Nm Vߺ/3t;rW{ bJ/#"=U)!贬W-HWAMClOE3{GtC#g7sSso_~&qՍ.)S$I0 ۶9 )ȗFtv}. lPOjй*(6@WJj<=EؐoBpjq=p݈~Z9r Dd]5e-!4hv~(nvkpD=e>FhGgnQ6|O<ԎMN=ս@yAQC n/-2'݌\r0l y78Sw0WEQfQ?0k(,`11Nc(XR!V5Aq? @gLX[Jtq t[%AHnBW?;۪ٮ~Hꇹa"~HD2sn!@M0qdfXc> /p[ ,j?{Mzb 0|kAf0MJACA@=ghA>܂޿X9K뼴pW ܃6Or.u[$ dpR$y2LdQ}`BS_\nI'[ F b pu׵'ׄp÷AM&'$WD9!؀{j¬h?$DhŤ}*W`$7t(+Ud!WUN\tik-<*k8Ei:[U<:C`Zuw uU5X. λsF}ϒm?iCRAc*;aR&vۑQ4VuQe1mUEb䨁[PW<6v=rKR3vV=a|͙`+G7 >=c6+%v.ȽD"L%$o<Ж5t&{&5*9C3 #ٴT[8y;럹?_~Ψf H%'c1% +]F)0?Dg;e9n N2BWnH4˱S/^T 4E^{|mMx3 c (TJ5A W2w͓E рT= 0 .0>i)B6/['ݹ*'~k"-ˊry:bLZH@+o3~ c0Ľ=h,"r&W MP_&/ҭZ|)fl8qmIM&ch}j~/aX%(GljS`Ht6{=iJַrq DlA1~T7E>e%lShh؛6C˞E%ioi16~~[} aQWu.pke0>Gn5Y:p~E(RiUj[ ӚYƬ5oFq0v_*SgV6~XT/}f1`㻙dw\űJ㦕|em!c++k&O1.5ާpi!;y_CG)]}3 d Hdw0Sb\q';-j$(M¡QMv;b+CE`Q!R51Cc˅7}hQsf8.|J(Jb󖃧^O \[E$;O0ώlb\nWhs Xd6C;aaww&.1b<_J@'0VAo P&gA9v漵C? mB4nhꇵkqq{wAlH lDʋ%t1E,^=?-Kv=K2n*Tк%5`Ì 8A~`,NB۩ ѶÚ #< h(jEbJUwJnC}5璥9O)RR""zK_Mlہr>4!#? ??E^J7ĞN `~?/;pC (B9VDoH]:V , X@f, ;z9 ̏O e?ں6SnVӬG>?ڃL@FR@$l[=&Y#%R5]ˉ;KPD~tyF %sqrn;;N|W1PhMNR 0ip@ ڑr!꣛e8hqψ{ C8d` ;HvURiUm.wO!*WתӼK,d'jnsͫ|j-T=jz* s 05)gƠX4mW؎ '4(7G$locwIe0I(7h<9PU7P*ZU/;XT\w,#pB'8Yjitҡn| ACS»0sUCY.鷜&k;a{gL!B[L8E ӳ(ܣ䰆nIoN}lkRO\/ 8{t g堤}gy9P Mog~\yjt=W~Fnٍb5cA v q΢ ~x8<4)9]7:M5ijNH<bR{/iXt8ri υ:a1c^ǬV9ojAg-;kSN e]^4r* ]eӵ[w^IxViOJogjA(ЧV?weީxK̝/!XJ12KŮ$X(z2&}O9fk8fGsbYQ> ,| Hk%~2 bjI[KhI"eOy߹A{Q_pw+]MpNDO;%9w D\DdV9MwL2d8ݸ>|&R`4EF?9Œ\H̺+ʇDz\KmQ /ՎO7Rr ,mIF?Zᄃr9K]J}J9"oua`'#nƢ >5C` )>Azp]^ M}6)w,e?y#_R1iٝ~d6+tJ seeW{[NZl| ڛsXH^>-6jeM?(y&H&#AfPI#CP$KT-O6޺L.dYh6Z8(Hg F1) dkIp!}Ȥs\udea9N􃩑<$8؉^{v0 Dbs&"EkP{JIb@zrh ׸V; ,N=P<"77qy}_>n*d$AcЃܮJHhϚumM-h{ zǜݴғ^b*PDT 1m< !7čH:])5SCSP|aPژA,=Qpv[k:3gBt4cKxHJ`Av rϔ4O{zdΧraWBn* `֐-@ߩIƔF qA1Mc:W8>љԝ''kV' M ?;A{XCWڕbIݢ|=Ń_D\ўτZ8_V+V 1zxXccC$*I2ZɅz #O9F[0Րv@:c.ܣD>!6W*׈> %*5 uogO-1$K&R%E/WYp(  a?u_PW񞃬pSi3|eQx4Y)}Ă Jn+?Wf%~qrI = ӵh5 ?S` Tc}@'hE]ZָWVizHqq"H>~3;@Q9t 41a2)-gb}Cҡ7,婃*a%59%9ZXs?3 _)+DBŤITߜ0#:?G%W2x#{/CyorB2X~&Bx})H._wm#뮞Fev'}{zQڣ?Qޅ1OK:JĦ FÆŬ z@c= k /W-KrI.=PԓjK.ɤg&>{|9բ:-WphNeޝR9ܯV\6>L)SYiPzgClgORRI)YJVO_/p rne~I>HOwwa b6.HQ4\kE5#s|Lw12L|72':> |NNo$8ѡ羒F" B=[Pjډ%.ERl3i[1*ph8,Y楾a$VۄQY3ȅvXĆ)ʹ9 58)MqjO>]ȗ,ȊE+kg%:éWQ#75>`,(N}kC1aŻR!Y}TCiO ֟0߻(a9`!dgL>L?ŷVKz~'R7Sz"e!"B 6jÈ9V7`_H-;F^uP;s;Z[T^6i}ZfquRn.Ă$R~98WZd,8PD,l~>`J[/J{/Rf:TlL(l#{0KgvFKUkXW\>pGE]1Ost|sAxD6ơt,HrZr!O%徹@ølZ~LBAy{֗[)B׵*@ / >-2*}Ru2'ѡޑtl]}XV_Т~p W|;A@ܺ>6eͤͯD*DVdeO[kݒ@X>rQ1kQ" r WײD}p:JE ݆ڴ;).ޔF9zJAv̑s}$2lV_xj{gsg&V/d-ۑNsvqߞ ?1K[opu60ꖓ}ӖwםazX!_;׃NR0u* A (y6axs< buWYޚ; X a{f$o\L ~9uY۞NXG TNŻ7]؄D+re%0giXiUNnVd3 =BoaqJ A`q1wh|s<3EK]?B΍e۪+aw)ᏒK&Lq[Rvg`ʵ@V\SBl8?'55<3K8;EM=ʭ+h}>lӑ}X-v7e-nڈvqrޜ6T4R> ˦WP;;If&TTur4mU@YqRuMoGH@̇pG^QDWO #:~qW.8=hlɆNH(.U0jd ʊ=0YeƟX=9z<G@t 6R.P g{X@`T)3-:]]ZS\MaQC-dH&*ͥojE`4)E8vP.U5M%.%pVK`kCDG/ǥ|DwMO_HAwoJ0*s.LPc"9@#zU¦R3ZfAvGFViϑj;\]*o;Et):bny7'2<2Aebq&`Or}5232|`T\g}R%/ KqyCA$\'6Ye+ڊ٨eY\ (Bw )IHK81g'RߕWEF*HOZr#iIL_;: .Z-}eN{+;5T!Mfzvf򔨜|PutyXOcM~tYȁܐ`XTx}Fc8kokjNPȦ"xdv-0]*-c`VeOEsf9FfhAP!TMv%G05G|BII(ޢqOuEړ/ "tODZO(ÇtXoBU]j=Ԑ4Logޫ\7ؚ9g2^rA:~#RjlF,*fx {q/導h2]Q>hY|/@|,ѽ&fϗ]WK;;_d븰>*/~BEV,prTݙ9+>uԻ높~lP>ziRP0v y!A0>t:EqN8xWY>Zx~' }PME1Ym~%{?EXK=dM^&[ kA{ک w9EB]gDU?yN<8XXb MݷL霄]$ưDH%!B8DM5[]Θ ѪRk#* Ba.C%+2biY5<孜 .YljqYW?Tsߔ!c3B_KXES}78€Bvpf}N#uRq|~1bV1Їmh*Zw,1|E\[9$>@KBNJlFeƞrXT"W'/{iq>֠`G:˗ Ln )@N}3b9*tHap/Ȃ]g+5S&(*QSn$җˬ8TBp5(^=ZbJaIMNn,)g]8ɛ E@M!G빲KY|~>Y>\!:xJ="R2@ MJ"Z!pT*hCðـ@u}ɑē,J3P 㟭 WF@6I`J"UCg%? ?ƶ|\~<^?N;7.#×U zat{_G}\F@Mz 4SVnL+{l7?;Whb-TǎY |<0L@5fpGg nɃ~5j:IL3}3sChA-0+7\],OCwjcI&\?MWwzt@}#En0OD3S%+>ՠMp8udˑG G:^C@8НO,n? 1OChz2>($r6$]W6R!HJ@ByEWԧ,{5' EΦ-y|4} ]$CiQQӹ.G$6+QOHMFz \ߞߵuX-Ң32g8BGi,NYH9*`8m&mZ/+ŭS@#Cl]^Rm#e_P)\~ViiNPpF6amS3 v{97gD-@to% An_$d#sHb`QOqw\ 7_8Kt]̺+DOHXx{aC|VݛS*ERδH]@3+&Vrx ~mX @!Uf'~,326KgS !2d%|3kwo~wt 45Q]Ԩ.")4r}UC\ ڽa%'v$.<6&)eiHCN`^R<'"IG-dAR4 ||+B߳\$Uou\Xo*H_n2EEDc5,Dsljx{|(&v^Cg'k.cQ }S\'Ib]^2.>OkJ ?8 Ǘ|\7M!YFǸ?'kyuX5υ`Xn;`]Z|i>1ni@)d3Tw>Vϐ%SO9~I$\ Bjs*X68$΅H$ ;wL@KⰣVui;y91ňA89$4hAk9M{ WCZ_ VAew6E m pg"\B6oHȗ<~i <=淘,+4P *O`l nndw *eËq%Н #d.*;%^BY{n}+e[]kˡ E.v\}=UjBo aVŏԤIt9=MQP->H[^Tib l:Xn+~z(IhKef3ۿxB< xhxύq_OLA|j+OS+7q p ְE4EW,whz3MxV]^?a܌$hNH3b_>(ƀkuVzJ8A8)rNn =K$|DXȠ)<GKfCy/cmWzj,DpҺAX_ַrãۗ( [S#{tە@""xkQkEƌr1d DLqаٖHEq:Gyh!x<D +e9ަNmQϷ.ͬ 4 ބM.`o+HĂͅT9)bʢh׌@Or ͓gYقqv6Fp εQxIs%Ό8a3°UP:6^7|鋥pXگTNU.449K~j&Nrnp$S iˏ$3{LA.g5%c"b_>*̖lOE].;}ʽVfG} w/~R~Td#S,SĺUUU\l+ȓmcMI]o>Hw͌cHV]⸎29(:.`=Y̑vgm(I#S1J:h%Qڛw;D9l b&#jRMnQS6]X)O1aqzυbRͱ:4o)Q{ӢC𑤙H0`0Us ^ fF86sZט8n]0&sSŁIt CԒ4%x(¼x.n;XX-3~)A>kE4ab^M-Q46vi)4sz}OeCaOHHj|;k2IdlpoKkY5tZ}w0a|ޒf ꁺ|]bhQ\wX0\ݥn<8YI3aº:S#A8Fq[>. ']J(l]kשXFV=0+0x: aCInDؑ@ՅkB`%h23݀y1|bXlrYTQ\Bn $>1n<BбOk1z(m"eu#kX$VJIǪybU>]{-BcY??bOC\?~/Q)_jӱ釺ӾV~ 3ŏړf%|n(/A<.h*9]SScJzި65Z8KF~Cp`{ ?u4gacqcO)\/3cqJv6ܿkt+1ۀj7rF+&\j^S 7܇z.X=l4Hq&l|]4:j qF@$0;~>5j+Xi _S`F]kyJ0'n"({!1'dA+e?w<V%!3On UR`7ڟ:O<&J;4bqU>g%9 3`lUۗ`dB2u|o6NS2LSC٩,Egzz J0f+"814(oFF%\hyFHH@K[ J< "rkLNGoNOҴЉS?qnDϚAcd2oOVdD,}[`KyEwBwwP;nP3LnHC#,E7pS~a* IvmTvVe638[@  UX[_ߠh=l^nx&\v `_:EmORѱ~jҠZYKڒx@~c!DĈ_t@z@0DE\9Y1zJܢrO'ϴwʞDMgO ۲ʢ/h+^ .A$䛡K{폹jZ$̎XZFԳYXߒ,V0aZO^UVgZ"ILz⑑z4?M1|Iȇx6K؊@SIrCj*y#')p@fCn؝)s9.6] Mb!7ʍ xرs^P+@V9i c+u-Z`d)^ސ_)EKdBʈ?9"dS= }<-?>Gf#rn+5TYxϽg~l( _Q̰ud -.l#l >R={74dk9r}tCd{BR7LjbQ$ܹ9y'oڙ˶Z BvT>^`Z  1>p?g%xqw~idpM2yo'M~z^(UGu$grmlс,οHa8Ƣdu˗'M= *~ sגi9<;$RkQOL>\5Va[:3ilž;I, +Q{S&o&}5<3,:@ L嫣<{}L}6<2# J_G ѯmi$zKxZJX5`ZwMh87%6mѮOZLiP!jRB+,Rgwa۞TVNZ’ 7eEf\4ϺAk:{Q4#齤"\5y`E4B[fn'cӻBANGrttC˾BJ,b^6&)OOn$r)9Bنo.*ÔLრ06zt7X%a 1{ :ڛ|>bZ2my>)t7S8Ol)*XJ pz#%pfmA25%.qj]Yjh҃,YJLC{To? z3!DK?`I`#`/BZ6l1I8L 7 kX SI"ﻄvDe2-Hg_bϯ=}XTa;[/puRhZ-cdZíOn"j'BP"k'#9>L!z6xo1,,i`ktVqQ+=sJTNu֣=y L 㾂~ݼ9arC`ͩˊf)$PV2eR;L /#1Z՗Zz l/īq9z%ƦJծߢo8K`t0aL[q  g V^Q6@\?u,9fEvB:5@5L>NmKòg{X㖪#~Yw 1: )G%T,0y#9X#V]I$t(U*dc!8菝%m]h:^ЏWgIw)-*rT޳4H FP^u+)v=c]9 pXn- ;f*5MAOl_F_D!s 3"㫫뇐h !R\[Nו?qZh@ÐrᗪD턓v<82p ;Dr*./e9giuL%+fAbw|{6J{ȑ.tp֍MˏR`qK%VZ`_+',]LaOLI*^Tr ~:,2ba/476 Np5Yg!0eoVΖ;!}ut]a8y֕(6, uTvn4s/+*Ns `HgA,˻>V|Ec a.]94gT[̫[tU۱iגTMdC5V~DQͰ"ſ{K@R>d7c@ZGsX"\OeK"\iB8yޗ&`ҚN`9gKQyhMrZ`ͶԫoYB~'˃\~ӻR?\nH+3RAdW%?SpoA^Tb' y1+8F֣QWPf^[rnZ;pА"i8NB /BDk,]*uö_"Q\mgf>|E7 \K[{{)F 4EvmM{**-WtpKVEN̍PUm9n$m88X1 WmP+l?0/ 0b8 jt(+]? US5-'Yf;`W= =~gRc0IFSkUvȃQ&) "01AL_c1amx ?9 ޖ ',K0ѻOcTjݟ p<γPޙ@Q\"dNp(;'p=ҿ䱆!GDV2*E 'u$؁΂#uN&K iWkvh9ؒ@B|OX*p@I7iҎlq ev.6x !rsY.b2p>(K6P8fGh1vAGcO+ 4!0۷Hʾv}Wۜq4oUBZ(Fa .КU3|5IkVeTK]UYZ${:tNn$J,rz~g-'n pv`&j?(JH$0@\S(C-ْDՀxzbaNwtDmkmRz:1\WTsĢұ &mt*T{Ѭy}hI.ups@OP&)VSV5=i\5B6a!]/ri}V>ĆaR̛{M? \K&Ϥ^̝ ,(k b'Z~ s'3q9q{*ZҢh?x@TPE(OPm3{|NH>sR%w6ɋꥅ]'D4Œ+3XZ/Ȱ?r+$ڞmL6ș`fnz˘x2Ht>?T7Y(b7=kpYtRPU0 mzܷP7B19&&zvǾŻ̪KrJEM5s׌q.J<2l,DZ4ذZGrVfK_;&"2@Zl2cܞq yݻ\cx(Y`Wl XuR=,궧A[C`ct4 -k6,jOl{Si} 5׫'MQ}&c茿0]3."ٿh#͞r5U!a{E21nS B͠;S r zP Qܒ)\%bp Y?3nC]_4}W]d~#C6]fx0<&fO!9L>4h苦\!nHe w GR6ΎG9Pqa|mbg>;yB3a.}_)5дF,מFuB>ôv9WUCWqZt.(Mxs <AUzFaQL=VyTl|*#H0(#p؆=wXCUn! 떲+īva?JV5t/KuV2!05`@%3nF7p+wl%ߦ0H1$ւ*0{ [z;`M{'qˍG{~vFăC(#AKB̸HW JS0`w CT;%M˵=<+[U(fM%ޔ׹Yw֘h3,&,9vUB4e㧗s!v=/EHnoRXg۷G,tn!4 xÎӅc5j+UhN$˻0|ޏ'BWB+ӤU=8]7ÄENa41ώ@aa0}(MI[ v^e<`$ E]_'Ͻ:Q` @ t%fz|afQ)Yy >9G؞fz[/t2EgYC,)zS.{/hzN=YMCy j}A5>\ *d9}$JXJ ItU VK*@ ()4c-NYG_榝+4,6I3ʦY@ָTjOCvLY7')zW_\.-]%j%[{. <.Ocu7g ơ]:x;}E <j.ѮN8hsK|J^TmͪuM/;[.bӽ ?FeSN+HiSV=R;L 5Rn,ݮpoNACH>Myo_{jyrB&uZsa XEyP3`e_r{5 [?af4||fV8X6$BbkR< had(fЀծ_U6!繯.eE۸?(8w+*j1h;M GCšw,ȹ`^<2.vlZP;εl!ТfF>4>d_MGJ&B6Jn*j˱HoEU gkT8crnLjԌ'ruXT=,j'7h^ro~_Y Х>W3I*Z/yr'\yS So蕦D޻!aw?ysyi·ڰ>~idYe 7JwRS| w$"{b{ rBfzzHf:CzՃs@!12~ӈ)@'(F&aR6)sV4џc9οg"!5hh 2 M5DbUA,&n BbgUe%3>F_ o6KAȝxWz|̝ǞbT:xtQe᧟ hp@ cg _6!2GU&ωs$ ܭ`؜ ڽ[LPpA]z%+>NNZ lc}T"N#^^5T1,m7WU皫򲨠yMd F=|.[lriB'š@2 9 Pe&a+bN(8ާPQ1('! G31mF/ <px~ox*& P;ߦ %4Hd!W00դ}p'2"Fmb_# N0ʍt㬕Tۇ~*80?y]r.TUzL";5{ˆxJ&[4I,x=Jr8~#l_}dFCÚS9>X6 jFߊ{'ܓI@|{3n8S 5gcfD>QY酳"+L`| er^HmwSz*yBpgE42tlqO~[G7S H"Sm;8"po:!֏5[|J+Mmx$ 'lM~|YsVEɚV~ސ(5%•N+bЬM^ÕEʊ.4;uy0,|Z lLl7]e:B4:R Qh%?,sXWek$es; FoQ[ۭ \A]J2qRǡ%ef\>js-WqL7p怺@Ovip?'J{F~:ڦv}~y^ r7;GT^*TYj2}yE|{r۫׉Af¯58ȘK- R~C(ݨؾUEw(yMrsj:;?) vax 1vUSo1@V :| HR<%$4ЌI¹ z2tA0UOpmYϊJk ,(FL‘רr$qΈ#FB׏'Z 3]ĹX[a,VМrFifx`wŁp+#̔O~O2oIl9imV(T! @7~xQLODB' 43cTS/O & aY+W/lZg+0 TPea ]qp 3|GJ5!LYhU8_XpXTFIK$iXм7Tere;djX@>:7N?!|m[)f'>:rðg bl>쫁}>S>*ӧ؝ZQl+y{)\)Xb>"" !uLNhů`q KZXF<'tS+ _<(ny[ (\.D#uo;Ӡ${u]gXVnhjƑsۃh"Wcؽaw$v`e"3d4gʾM4A "^v1ĤVTH6R‰e+zeQKqfU]bZ&"=Z\G2:/aqH/Q1bSxl~Z`WnHno=0 E=:>K #OUc0^d1;8 oeNri;PЅ7_C%=guq'=BFsZ'C'GVPs0Gok1LH 1*WF}UB*eNUMda_0Qٗr:/{^?gjqn?ي^dVzm>hG: nU!DŽҰEFհGsaJ y9HRHj»e%6Ưuǃg@d0Dhy>d)}e܍Glŧ!1-H lw#. !ݺ# !vzrA4ZvàyEÊtkxhi/|,stOo:Fq:*,n^Zb3؞rȜA a$ 5-YO)B^CVHNؒapaܳ1gvj +qTo>$Y>eX(Nm!ɖ\e/Oz4_=R)އ"(5K"0Tmت0z  |bm؎#⹩&֓:8`+JMRn-ylp9DMa@N)R2x;UuoSl/Db]@1[|c^'] B,|yf}SaArl !4zHow90_ʹ$v{fV9Z9#_؟QOPcjuw[.I ? \9EJΝ&Cq_߶x['M'˾:Y1g킵R86FʟUZIدN&Qm rpm ڲ0bQք>}R_Y1w~MX@0twO/124~z4i'^FXn33:A'$&2A-q-)wxgcVt ="8\T5' M_0(> Rg+kµd, xCy7 0V]Y!t@G8ڔD]1 HVK{1 IƤq8T& BhaH_6hwTþ*[_6%4ەnF]rt1kg3H&)fB)% Kf)=%"KOR-Ey9/V=4! .?@o n|9‹rׂ ǏcñJn󢘟0pxkG{ G2Іu"|s,Wb`XYvVbhri?ĵyZ2:BV8 rUs䛋Q ?~DbYVM)eFʞN;#Րt+j;QWH׫H^cAkMA<4vCk=XlJ>7*H4#7<>4xfYsekO`,N:GjWb"48[xXׯߊ0zo"Ωc9]f'/j1ᇘQH W:e%I Y]|n{97+::7j:D_~n Zyi jR>-XrdCcqX+#M[a0e-5r赪%L)ovjoz㍳ƅZC~ cU ƹBw<>x O]!*@.خ7V4h 29 G4J:IyR?RZeUx~tZ&6۱]\|df^st%yƐrBcV^!f{KO:e5ǴNAUhۨ9QY9._ S.zS-^+y'? -n{(Oү.+J6/>o(Opt`*'%vEePHgu=u,lA_'2@jeDcs\~46 a}` {m"6iM32/ӑL͐8l 9iHX^ʂ}],:WI߲lVQ1[q,=~}f^v^Hvɲ+a]4^*b ki@t$dp1b5{ ϴ"!3D?p6ڧIImi1\ Er[-[csaڞpԛ`NNKp6POJMYp Lii,{"[K:ɞwei577(To K271a;7Ue+ NDt# ![Dgަ MRNfi x;H AP2;{,Z Segɚ@ jЊIлK oG#o F ӟFk::\Y|,I*؏j4@ 4: % e wlW7$#M3 9a;D*jW+j|Q9$͎z@0o#z+Wkl(4spPͨa\5u|2Rti׋kd'EFw+1 %vHt6f/M\bi }&cA,HӸYzI /`F2}%x+MMl?v/S @!SaiSڎdS{hގ|׿(jL/j}s1T5~/ ?Bq-BBԔ+T,DYWa\ol(1 r=v@K4NM̧rf(EӾ7^5v {8u\f,(:>@:8vCG*t`T!Pro3Uh`Wzt@"/'dZI[ I`h3"p[ #Ew`eZc$ WR*_K5\9X`@.2:&-:l9L账 Y r:.1 *O9XHTEr-1J|%(!RT77Fx|m#B_> rg̪M5d\d9ZZQ_7_Xp~L3Ȉdt0: GhriYC\YLZ`X@Pf6Kk`|ɻB*Vћ)\l`_;ʸJ α9\?Tl  ڡ9/n* a 壡/}:IQDDlt :?y?@O4<]#kU[xA6~IcYMΡF)(N_jV2$0j#aL 7<]COԸEӆ;~crRh֊(QZŅS86i$W"ϻ)!ṿH4SCW/Z2tQuEM_w@,v]hN8EWN@J'NX~sPv"NDOpguǏ]LT6DjMsEpyUJ%hOk@Lv^є?(Ү3M}"qmHVsl WֳAu2hX{:~tV q=W0 ɕ:ruu qWGJ0Tʎm' _`U6Ͻ,&:j褎%d 9LZ51e.9~ݤTi c,ރ±'rzѫ,>r8ŻRR1P] fI7:Uj ]IIlר=Iz` 63Ʉ5YdO '"[vL’&$,1o BBqС/A^@p{ohfsF gF?DX#}AG*Q̓!'㤘ӼojkD$OQW+%Q_<|Ґ+Ky❓J o=,q'zbCŻL1q,?HGE:͍{! yiBgM-yT =\c+PC„T5~[H[(vd:SSUjxg6ulTexb0J^&B B?9b6,25e; t-9KnB.(PqdXZPs^)Ҏ09w}dXUDnv޹< KYcz)yc'?Qk9[r8W~ēYSZ./]U^+ո8`?d#;$ܭ+4s9@ւB(O\(5ˋUyrtC]nY\,7:;1PqJ󴧿1([BH3y hh{vG!eaBWX/uLxwvaj6WK"O |ڣy W:)^Lf3r ooTck48o`͗E[Ml&<[TfnF@DxSRpT|Ai(FX# 6eDDP}sC[q"d,r6e9sۃ‚fuO1Q}}Z&u@ػс#ka8T? LU՘zە6,ek&)BiDKbϑb7x &BpAO2'ʍ\l$d̬; nH\Sy3/@+&NV.=dBvO*pה7-+0ߝ{Ih K7M/! @wCfxsW6ϑts?~hO8.YUiښbe5Yyf|d&QAXGaw>?t0p $â< QԻ VV1?x7 ':S \^1^C#L8y9cvJM|lR:dXw9 5C G;]ŇHS ;V !Unqy.HŒp*' ʲ5kd~8096lj2q%l;nylEkZq8Hz ɘӢ^^{$MjОA!0p>߹& R^2Sl Z z. RM,Mk}X酨p]A]0JskH!D[j,ìȤ?=O+ʌOf {C,Д8zuPaxȏHN ;Ŭj  &n6O}?0)~.suff|M}[W֏b8VfdH@}s1?~/Z~Sh~mtBd<\SAG=+{1[Lhh/}3^sՒEUm%hNz"k?sǕzϊ%>$5hzz^$Y;-bNqGc<hRo+92бxeRmo28(5nYA:.+VBǶ3,ZO()LheI>2~Ԅޑ";f~M.=g-lNJay; #,Ţ]+m>V1$Qݟn}AԬW!Fm~ɷq'D=`)4~wL8Eֹ pWALoy4%۫Kߵ:>_T!UD4EG/Iz3 W7T- cH)%,Q0'#(~zŘݱҸu=@RNKɨp̈́„2;Ƈq3/w 05?հ)GMA0N hicD6L%UV{Fϔͨ_ !@P qH!vg!޷`Laۥƅkf}T:. tWPv%ɏn@!?كBb{͈bZ)&A&+K~, )B SO-([`8-;n(4㬵&L=yxPpln^ȵ,kRG^8q  zRK-'XFǑ#T?}_(#Wl6[0"evԬf=22YB-KX4?q_zF&n#o(!pTBC ?KVwv&Wj9Zps#EH*`;C}Gi>.~٣ZwӼf )']rq l Ip5uJ=cl!|v~`!+ xfyK^=?= 2'$ݪGZNgR)p잔7 k 7EVɻ\ݎ-54xF)D1kz G*=jag/ia2A71M\Z11]#{fh gQżL$Lz qϙdNFv9+̚E.)F^fII?0eYw"7%'s`) ƨ 琼V($87#`ƨgVw3: 9Ɔf,)r ΗKu"ɛ" <:YfƫWjvI˼EWx?dReV>!%^1([(ZZHA>hqznwQЫJ S0.Ojxf,4!:NrA8d['̕S? K7d4"1K(i?O@0"KMZl`p֛[ӇI<6slO#wHhI)RdYi)LohP]n{_j?1jk-mefiJ+PL"\)B^X ck!_gzlÊ@$EbJOg.y "1FFĿyTt('Cl Cc=֤ _U{M40+y\ ^ً͞+oF:弬s:ٍT\ѹg5‹LqkbT‰gRbirpM RW|8b  7`{_T~KM7,!2u>[R$F@h~@ (3/(6h.jIoodjq^͙1,?FgH\vK)d7(9[.a:R 7opI/qNMD dR&͘),U|xBRױ3: vנտ€5 l٣/'H'u~ߙ?b8ۨ" WT>ΆU'ӝ߅ wکxBje/|S}XW a57_~J0,eUfav &BUkԽqgJN&l%B}4wY qOQtŎR_:(䣲ܷ'3Q8Ժ!q %ѵg4٘acg3ρ""_[d[dZtB|9ZX6VސHIX!ALDGm󴝨=} M8(eYE4Ќ)0;Sr%˘1@N?m8@fѤ.Ő7uZ.Mh7cwxg .K2HpQJīxYyr(H~ɰ7.)4Gazs=]UrxKh5ko9*qvhqg l)/ZzRPbz3'BN~%8 9}²Y?VA4B=FJ|[5ZБ%Px%J=Yu!Jˉ9c7Fyx:QlcxZ$l"A/+ß97 "T:z)4[wvi qdve^brDѯT\D@ ]Fr]a@e1#1Rxr A҆0[ ];hE0D#k{0s||CjvF1Iڿɏi#[nuol:A9)ehjïhBJ7'6ܣx [:}(%i: tV{}qcfN|Lia%mBwM:ZLgH9_Bm79tm58sؔEHK+(MxS]6Zj_*L 3]Y$I}}%9Xw!51جO9sxP.40QL6m9YLA)S~LlhJGj@있J2HyHl[Oꡓ0%pHM6~^]LD"|RH s. q].#'.@e aX8;^Č8H1J 9 ulKM` ('.>̡ sFDn~8#,~H1oNW4"@ mĞzvSm7.Háx5yLvtrqẀ^DCNwLiV$'VϤLڿ,ytjZ0\&+1Wo! F% AfܟqF5_1n/ږ%o> Oڡ;Tw  ]K,3"#R`)u B\V9b j&֘|-Nq挾3g"1^IbM@_T_ˉv# aAn5*~|2!~}beUi@_X:rFe (Q)4)FX;^tW-%f;*O~ eAֶ5!E䂕pdXL~~#7ͧn&IRAL#`*>ߪt l7T|ʳӧsUNOEZ&&MS;K,q>L:yk=Y#OmyQ_,oʗ ?B#4Խ<B~|u&_\7=&/'(Kܸ&W#3=d)"/ۿц@:ѵ~Hg}%T8|w 7orv%׭*e&l|C ^Ft-Bñ&bqٖb hl]Kt3W"2(]%%p~NcLN.?F[g'y~P]NpnG%'!H8WXL Tk˗I:Yq_AIG \n,u2}osChH:-23IF$t]s^/T+bCu|s1iD!lNL7見`.u ,_{D[.ӽcx>m׳ATW&a9p0}Lj\ zdz*XS'vH/WOEh`z&+~Tm0O8 p?"$ j,=%I l:p"@uM@pWt#46|vM-aeBP=$F$:MU-"Rez9$ (bQw^f^b1 D/ҦYyX[W.%ƇxL(i[_sꫮ )c9d$,s: V^$ӏ9 ާ|-]\ك26ok2֠i*aNя"O|\r҅%Y@HU,?}ːDs}q?qօ?M2 U -G4<(2pC4rۮ?rC!(o$Ns]i֕yn⩉ O=QZ { KÈ4?-e q?'QNF3ݷA!FT!,sCT 3WQ% Ľe@K f&(ēWtpS}JmͶucxfn?r1~vg +&TEODLt@`$EbuG)IGw*9ܡ$5)4 s;Sû2x4zrBiQI! U씉0Q `VX`bnOsǬVTlвz7*؍[F!5MJ&|f2_x:X>TYp!1@ nv6E5ݖ:|]ztM0VW q3Mlt#&4':\_Po w4YYuq*YzCK2nb۸uցQSo*MOy겤fu+ ƮV( Ϊa0.Sq!'o'tΨJp~tƮurEX F8 ~ bELl_W'Vq>o==rĈvЋЄz[s<"~T+V&OTND'x tw8{SR%ښ2PVK8"Tץ,ю}ۚ)V=˳x)ym6 [ ʯkѵ;%82[I.G4wKM3`+tRüF+$B*9`!x[X=Fͽ|csvl|'ܨhT4yOcU| 8K̐YiyܸcRXyU>O$X)GP7̟m/8ևRx(guJN=+brAͱTiW>YС;ħ%tM @ *d{YJ<{/I |{~ s_5g]fOϪ.sN:f#+)Jږrlsk),m|i"Gr#ĆR| ەy0EIcrk <;Jq2&)"2 #FkH R3jA:{780 QF%#ؐ94j6rxwzDbP!ڑ\P|zj=qU*Tq_^ D![l砻姻:7ھ*,ZS-O KKLx +q'K8Cp bw4*N?z8#Zm:,v4 qoɯ$?7a: s2=F_%NW "_)+ܨ~l oϧ}ZS">9GY]_ aPɲqUmOc+{[VT5im ?"5GHs*~xK>?m^dER4T#zÿwB~E-- &IJl5^<\C [@tdîf` 6vw'<pL!؈[V:\N,d>pְ'_9DpBX;ũ68: Fg5\k8 e[#O19BPEҊ6U%_]11 o t9:%rh X#@Ow8-U8jm4oQī,DݐI-?~vkOelL K#p2|qd |#q0%&u5K5M.x5U CF~ K.>4VEv.iW5y59L%^ `Vv'ϱ"^,;˷Ю[~vD-Yuy5Bjh((#ŲG ns|qFLx-pЇQWfp['s b3PV7o7+R1HAx~vǤ|vM!1J4?9;>u?jD}/_o^)EX[[?y%=42q$0XBHTx|鎬rjQq +­紝S} ewﳂ]/q%:۬k!> (F~Gvwl5v]QVg&q=!Ea0ڧ:, ;:{zC(2Uf3v5.MP=T_ t?C*[&!1Jt f8`t8KH+ f=n9wXڣ9x/ĥY \-\*T7uk6:.uv<☒ԭh̻JJgB *xXxNI%tar<$O%#hkUB Q-fQ|@vs5|3qf|!+ :=jȳN T3mR[ןʳw Nuۦ;ޕ7& T]b O)(!bi|(uӆ,p ܚ+71+zOWp> +~@e«6P #w,kI߾r k 4G.#\ѢnJ݈t~;675̈t 5}-݊lQgMsfk-ƔDtk5lШq`sM네)ih}%'вP3|o--ieV 5qk 1dijAP.R<׎ڨtb(_Ǩ -UǷ1s5'y6Zr]0#v<_|O}1\I zV`\%LFg,02=&(-Ģj ^dI#V;K[p.d^e%Ncp$M\9`)6sklA;\ T$6ܐ7P5ueϨLU^R>z]kPvԫiƨ/%W^*Cu5Hѹm^9#WdI0眩N?zjnU|Ή$߫uZ;>ڝ7;ř\OJp#a1b,ZuF%d8§0c'03"R¾%}W[H(ꆅZӷd%UWh;1AʯϜb#6#/ӈO~jPTA أhzK&K .T$~^08 #10 U vFT *u%5i'M|>Svk -EJ/\5qw&q6ֺH+@>noG (yU; 3ZL(Ɍu-,hIH4M5E52}Tg!J1z+g+0Qڈ0<]^fD}xjK О"Cyխb ;‹)/2! zv\Tg'~Z_Fh(lPvnS2bH7 `O7ju^\̛o]?-e|FT7y:Q4ލR^8ꇸlZohy`kyo>}֑BK2$s̊:<0ZcP1 fqh2M؜yDfg+'+OZ~!گQ;i08;!Y^R$b: ͯ{Tmˊ˃#qSyƃk[nr .:( G} 7B|Qd~tn3,A)O>/aըÐKj538QeVQLg'xC %HBN{.}YܨttVrenU|S$V'ڿV +cYx/Ax%%ND1҆6 RIDl5V{Z&}wze4;]ӹRI&laZ* !/'Pk(GHݤ}$p |@{Nj4kǪk',iyZ97 TL_ +kL@W~\-]"&@H{噾l 8-<:uYgm1yWWي) ou~Z/ΨVh˾+O\i0f=Svݽ%K 4ƼpB詎C`1qE7ӝw&7QQPcLԫ9kw%ԧ—ՕԏN(, @ǏmL]٠XQC@u>Z6͌y~'zЙ>%ߔa[Gb r1Le6w̻%M{6ݯ Ln]I/&WgVo^[{pJd1W+L x P}uŜ米qN%TTJDj"@1PȐ:>vŸRJQT\\jìs ]4t.+.i{ aai|WeRR˻oN^Z_Üŷ aMv#p"[?G<՚_f5,|(-vHYO,GX/x}C3e:3L|:r,[<{lxz,T笞csFԷȷ=v\d: 6Zbޫ4 |RKB'ͼLM9m`Df+OZILFn7W_*U`o'wL)1b˞k6"36 ̥@|)2n϶ WQEkMA\"g#Z!#đ+a6Pu'XF)DlJ&Kv`~ZDvD\۳m##W$ЪIg RY~=Z\%ؕ~ xT^23Zόs߼>[,I"i7:?=qMkr=b|#lMdSZkC͵P.7@Gk;1eBϙ> J!j|_pIׯ}|Li akE52ﱔ0q)|\} _9kTлm`#[rЯW "DRD>ٸKfVFgP3{%l Ql#{*o#*N&J3Vq"eU NK<|+2Ojf7!Wl k埫DVEfC@l^A܆xc"fR[O u 5;(XK,ؖw磫ρ:p_=*-&',4y[((N i$@mGČ\/`웣`Tt.7aF֞ }̳l^.deK3Rn2 Mid!yS҉hHhG/"kX {2VȏM DY_щ Ot #\r<ȭg#-9]_ݍVv%QTiQ򞯀Vj Qix텗Dy#X,)0%fmICjO$iār/2 @- ENW=,be3NjW|y8iN\!>176nmai¬Aej~΄EUi.ޮYKSULC'>nkֱ\A 4bzr#/ p%/Nzle.i :shKl&k9qe**|5׏/6FY|?m'h+8ݡ\;!8\޼iPL|SsVc1-l_ ;?2̢m_+Bq?yo._8)M!dGah{֨UQPD#.aK!U;h~pWGpQi9Ƞ +|i$Ӟ,1*zb}F"1ݓ.IAijT\}HԼcA@439o;62xk`)پ~1SY"JH뵥ea, -6/15vޭh N*{8Oիc BgvFIm$?#C 2؉ O?La,8ezaA*pQ'ƱZi%smhQ!ZdrN$'jL"BaA;ԤSk0"5!SEAƝ\<M dIR FR7}'`ORiۄX>*U$T)l~%6%N.CL~$v;Կ)RDu2XXAۃW\UhmQӹ@/@fẖQ%AJ uNe=!}DU07Sfސ߾s".wsSx{G|[;Ō[\]R_r66owqO$G47  "e!V§wS/4!wL{]$4ۇx_ڵ-R]āX֗/DۼSԱ*1S>f2_V݋RCFЙΡ=h PɭbA'Q9 ܙGaܰ摛,+'D_%Tw7|^ `y n0&V `Y+-ȍՏ:c[hw~IҌyɣ`B6!]儅U)~T#i3$>T9RUڇ 1"#{۸Saxɫmi)cd?7I1#T52& <{$adir ]}Xfu>}?d{ (wbӁ%0, hug؉Is{a @?A4ScJ>T9 6ۼ"K 5Z&:E0F5ܖo&X LgICE Pk<&r$Vt(Ϲp^8ITܜ}1 {kU˴t=;kq3#k?h>~00J`UZdh+i2UjBw^ʘE1TMkębk@y3Aq7J(ч)'f./@e~^x1ARZ)ZE,ifwA[SrSbWmKpx,$y _Oӓ`_0Xq!As 3ۤk<\Hx-ONu82W.I% Tx!TkQf.s:3IZV<B] Seq9QL953!`S`+:,F"?`ZJ kga+GQA*ekq -=Xz*i6}$F8w͹7OkUvLs' JF ǯBZZ=rM1w]YPD=e8>D& )7ykyKq) #“]72>d{(1IZߴEM b3 ICnk!j_l?8_ x3m4?ticdxWkb(qʦx=Q?2<ݍFJu|1Z%8-`X3Gt5tJ~7G72ubi$_ h,;Y׷_{R! PZpLM,;}]Åh}jH;4OjQN sr4(X蒸"s hGC$rH1x%E7Cʞ$@dr_ CJxb^Bl*}_ Ѓ0ר Zfv&r^ͻ-S솂a||,;y9C7ISrY,8cL{Z#+Ƒs.&@΄7B=_l(/\K2g_F:UNe*K$-r9Y Fӯ-R&F1Z^&pk!\Q`Y}_aK)&:ໍcj*B}BYl>ڇdXoRzڞX6Gn;fԸЮQ&fq|܀.68(ݛ Pb%Pled$SaK$3 '~æO?4$YzuXn+wig"HE$/q:-C*Sud!sC 12 U0V?kТ0dfNz;\OM$w .)H&J=(PҕVm5WFC z梩|z0-|wQ?V[8b'5Q|wlB lɂ`yJ x. hh=45 Hzv&Y`HFDicMR_Ds:!Z3 ^b(/:~E;Oq^9;˷fEOń饟$wGӣDn)3R@nu Xʇ>pM>n_z|K1IyG_^_k$Nypf?taHB9W*!|-=R3}3=fRw-reM&+]@z-1(L)oIp#Z(visnu񶑼x_*MO.RڪX+2z>W48 ާ!p +}ʔr5PVHpg i7vUoK Vx7S4(';9uFinX۹8Sqf9.!ccDLkL"^RZ;ż~fA`z`Nz m1܂% wé19{IXAnnUo# lOE ]U$T>]ÑN9cX M_~nE1(kIKtO bίcs e0ܵVYJ5>!?h(bstFGwo=a.*n){OnF9i2i STJ1pox#{f0x0I cR=94Wh9U݉139w*\{}5)Ղ5=~CcbqVVUVwXiNi2QM6IhXiJm!bvE|\,v8lM8~C&R,7ɘ ܮ5MB6gF Փ*O: W<`4:MF* =2 4Ȼ")~(c֏QBT{#73#92c؟dm,*jPN׀ȴ̆t(~eO2UTkgmlv]kz. lrҷc v}DZȗ\s ~G!wbف{.ڨ A3rt;reb23⇄w:p [u2Ghx2+Nv5KY&Gs >!d:OM3 t`b@5Y^x*qgۣɣǽ|qxܜp06>plfzk*p/'gIZݾOeoQ?ýA 4HP,c<{kMo8SR0ʗ:aĭ&$-#նO2X%Jܑ1v{{4̈́nidʸ%?])]P/?Q[GF8jfJ+)/b7*CW.?I""SwTbk+%$|+!`zs=Rr3p%)8TW *C pEceX8 q^cHdljT0o\)'_Vc8X˘[%%&Ev2˵ZP\o0%@hC9p?fjbuFY7lL]n U>RK,RQu=R6I);ʤ tZӦ)=-LL7isќI ui=ײ ͣy/0۰G$ѕKjD{Ч`x9/gܲPo!n":g>Ls -peA8A޵ S¯l*UKPʠGt2e4#疟Iiî2@D˝NT]品 clq:ժW3S%SP45n"7n97m-_}Z 1HHHSJȏT{ tЎmb]醠 vqk0"EҤ?{SlnԝbB<5Zkr$zMlg:C+Ӆ?WI?H JSK-2_Dql4;J2Hğ:7\S%-x8E@_!h\ C9[1"=-WhP^HRM.d$1I99o+W6(m .u%M x_/vƥ%&v/.\@a0|e8xňE8J|C]Ղ7'jn✒\Aʴs6jn8}smmXʳNߒ͆1Gߔ~ɶ壒K'TH`^$B9(8R}.& Gn2GfuѠ_q2ij<Ɗ\l*2~p$@0_IPA,(CDm :Q] 9`&E S?[ `hTS s02w")Rc|з 00oK~Ƅlla XJ(dfql/UU{%Cp<4hጯ_Lް;w_Q[tIB뻠w@.oD#}_9, 0`P @=s۬ ͖kja4o'e \@a>9LlB 8L"I';c;~|-@߂; ,!݉k}`kHIO ivH93W ތD5#jvjJ^T/Y/pK5 r9v;-z[{Z?.XKPFYA!Ǝ>xd6F TРB#h INR=X-_ޤl9.ȐЃL<_ Gas_uwmcp~RkLXAg.>,M_e-E nN4Y-݋Q?{J̒(db;s$ z.je\+]ҲGm5:M%t*XoT!|#ѡ #_ x"Mľ-Jp hОS(séRZF*щc uߝ5Wm~O_*(|3ytV0rJz 3Ak (F倿&6??gel~+Ga1wo.th$wg,ɥέuT/ 4(Xx J/~IE}7X_ʂ`pVS3Y-ĕ&J6+0]h mp/eۻ W@H9] iߺpT4D@yڸ UQux>s{`Xd|ہ svIKH~۸Uwy!zBq0!BvGJiï Mf͡!P˜JPR/7, Dn%xHp:gX=6]̤Hto2fUFfZۜBh⌨(}NI%Jh9*߿mRCE=}bB;6-~O!ΰ=hX˽~YtX3`e% 헝Pu N&8REtrz터\\'I%&EIy [ ..5@ཏEĽ㯷3 RQ&/tQog{Al~\8jAGv??FOKфȜO DxI}9 XV.sHixgP2ti+o(m#5.ÀNNw#dG~"RW-&sM3SFIܔ6 9#GfA{PnJied]HAAeZ-4ݙlvz12Gv p<WPLR-DpH(|cYHMyu&/u B7"M²y= Am0=cNadQe ;p P 'z&=s Ji 1#<-n%oD܊(INa" Ǝ1`@i"x+=t(vH*=ӈ$aős_Ҡ}8T0xu\Qq[21 cot˝sl d {VsД5/heJk>A.ߘFr+Ot[4\z}k_ǮY ףW 3fm.Kh4O&@k+8nEo/ZiK&jiXqu׏A'OC5bd?~bՎ,AW{dnvat5A6t1g: AUn!lq`5sh)ʥCH+3@LШB$x]=x8oL^\*U>VY#}[z5Qi4RKDwH ^mٱeXe%yZMkI K,)yW@.e|y7l4L5P?eEcpWX;f ;v.V-)/Ht\v7Icxybkqsg`&N*븞 w3ɡeEG;s>AzGLϕH{04 7F)um" G{IaIgҏ8J[XC_~|}iR1?wbDQB vnܵ~(0O'\=×o(P`l0?{Sp4A/OA\N;!P6y<힚Ȳf%5߰P`,Pe<+cErbC$~ҏJG~ ;%[Ib'3VZ2afFK.pev>:@!Zl,O/>n&sڈ~db<\,`y( 4 H1 gRd*}j; =_%3a!,gV_4msw 2O_?yRiѡ>/!/q"w3iVLDK56^!W" B,yOlu9~0hf(uZo/\YiLS1ҚdV{WJ69L;G7ȥ iL'8=r:=dܔel:iz1Oz0K#G2~=*eæ(TP"|bP7t; #{ &)JɠR%ZKh g8O5%i%W1\}ca~ٌe|'Xâ-=2BwfϬz!hq SBt3Р&4*< dog4f'ea!q:(SŃ /FI`"{q|饻ɠgO @/6UFcb.(lTN{<=?tUЋzb}<"GgӍkCz\- gg*UE8`j{a>-PP=Ip)"jep4K<*TNw#3hb݋C,߹'4S䣿?| )v`X2?jRC׽;%b>u(nN#XVA(U7߉57#7].*hcIaՊ{,+p[ĈGy.sz,f+[jSRW(s n~,KY]*pU&,>YIAj>FGq!Q"!5¦V@(DU\%nܠTv>Fzٽ!vp= ]ie05Ԏ߬ץƤ>-jjS!Ge?,fs6Dcaȯ.edg7m!([1hӋlrċU|A#;_w;%Z Bfrr$D>S~)k.+G&]abNa?e(8ti_EZ{3OqN@87H"F޾xS~=-DžK/<~BBǦWX~ibTƗ4VyRf{[Lƿ`z-^s(_ dYxN! f.b<'PJv;r}lD:"90CBa77 9AtIo8]ͰaFb p^ HD9%:KxNѯaO'1.zx3 ‹ye*Jn/[xtA~QmI!'Sٵmmk҅ٹTyC}8/,8yj'Ť׆C$ndbln$`kCt}sQrJ/_뵱rS@D0F2nFehJ.D߻94aώ#-,2rBghr.I:?T_#\ɀ$'z@S+o<%ttrM}<'n1sHe9U[mtxbg Sn?϶3]`8F6+)pin4'zSXHE'*G7G1Rg>C.3zAJ'Z,{xT9PFem'rjľ}ܦQMLc%S?̌yޅS#D,\;*+tꅕM쀇vr` ^QGi;vpinU5Bl ОU-bXGykqi)}:4t/m;l[i'Lק̳ɥ4 Z=nKI(97lFܘo* =6}z?'Zrn+E"!M[g1+|0'R~$6YRT0:&և"QE`o#>D#n8X;Y [W7q aLa `:e|rH]vr 3_޳t`^$co%\οp#s՗k $]Jl xM1 2)ެY #{%{ͱ7:ul//wYhjH[8+(ykΑ~ޞ51G ߅g ME"/N0h@i4 /;yb&N#k_:4WϙJ ֆX-U`mE- -Dc)URG6^mxISg^5Gke;#GjTUmS?=zm0 IPD53j}Kئ-;#pDz?~S3n8gPuoKQV֥s5%椀JC&f*tP8I4 DlJ4bs͂$<;?I X]uM.Cci^ǚtW:SZ5{P2G>JIӣٴHk`26S-/TG&Ͻ};w>ޒ..-xz`@9|M:ءy ?cA/겣9%=$3`~=Glv;]ա]?A}yv!شC_70E'%?_#NBEq { "eQǾǀݯz^տ-6qk .=JҼvNQS0ԀoEZHR&jUzh'7.$+׳-nA5 ۈcb\=a0WF草b=/6BwBsh*YAen Dzv{Vn siOV8kj }ʄHqq/Ѭlz7)FsZ*SWċM PBI@k[̋>s6`v$ĥL}hzl,bhѾnH-%B"w~\=,SX:7gt`'8l韙EzD~W0WPc単ZIQD,56aI%ln S** OډǥTQx/z^D1M`nR;>Jõث溽d.--_nFU99+,i?m6Zp΍-{Y6ΰ2ztSMS @-3Ux%&HѐV9G"bXeo0O@!O6L~U2.XS{/^EZ/8#Z[̜$]n0h'% =%5s98}e9Dp`l\ienszPnQȊmPە7x U{im vh +K!sDbz 9:D>&vf[qF$l>>IoO+;Or+ލcxMӓVsޣq[bNtP ȶ&0o-'p;PDk]Bj_&[eYH´ lygïYfFv V=pMh}VؽS~qEZt \nFȷ^"@Y+`)"2niY;k}-fFJjɍ{DKe?~fԗB>ݳ%%uUb_Z#kKvhU{ 8 2/i;ce11[PLE4r?ߍ(C-6aWpY5ajL3dbfE!A%͆6'9 [&0, uC/4-$XnUYBP՚=V7(FV]Sea~~۰g w9L9~GܸyRgssA(EK;I=rQr!E7L!Cm{AL=ݣif0q0#_lX2`UmXCO^`@l|-^>RIץÑ` X;P:":qBX)ٻ14wkg6} S5VO %bS+lS ^fZ/e}!l+Kl$PpvO=A2682l[_E};Ϻ"~Z%_,W*%kl&~QU_;-2Y+cOz~l::Ԗ׬)a`cSrڀ~d rw=@X-n" vsAS>gwdfAb ,MbxIt<Ċ6H5J&鿛͇nh#*254ƩufN 1z,o X>|.PǺrQ@TM`>L`!'9W'*mvC<067Fq[Y\<"MO} >i'BK~@qh}W\/t gg[!h״c*lz95p~;p+Qr❞|iQƚnt8rD.4>>=%n=<H1+=6"jy'AN57j(6&WkY&U#µ }ý3x5 u8:1rs1ڻm% O+?amZD.wa#{d`9ZsDyDa[ߕoI7&}{Iذs}MK7P,mkVv VNݻ>tN@(A h`b&YHM* .9ݶ~=9 tl$nNyΆc~H)fqn?xxo[͓>[M NkCkM<? j\7ڄ"MqBˎd&p nm, (a*0MpABPקӨτKes-^b=.na{SCnV&zf*1 8OeVG7o Y3*Fh-Fرhi2 NmV-L.$~wI#sʊ~hEڞ]Sm&G0%벩_ pZ{bK-M_0)`6WPdN9;gŸ O:>B628vղ <⊃AߞDHWÔZ2 8_)VM[KRa& J`g6-MSjs:V2b3{Jk`)VcZuJa#`mCcI9Z6%pz浧`Цm+aXK w u'|5Gjup.4¡8^ڮ(zḰVMşvlƤ5:?99c*>U6c\G3)wA]M)S`/얳+wWi+rwQcyDoY1Wl_)nTG^T?p5CR|Vh>kI+c!A)ա2a?]0𕛍pQN26o?px">^m|gn Z54x좜L9E">MSX -E+ Hh<sAG vgk&&0F:dӨk{xu Hz]J7Ô&m(|GOƅLCq" \?߷#S: IikKJ܂{i %utiMd* 7\* }&Ӫm`[`3^wv2\,d|CA=Hm}gAr`ٳ"k=i=/S!<-L[Gd%#VDԁF!)L]18-!SS!>ڿœYfK*W LJ[aVѲnGb`s3S)þ7!V $F?s fY2ʕ?z+ ^A Kѱ*" ]g:Ru!>M{7eŕv;؁1{,2y8ZU-WFRA6`8tϊ yRXX Za0]v)zWՃ6,6t; PG|=]i}O\|ɞTHufw MpCn?CV%@ oSڒ J-ЃqYYF4 x ÖnNŜǻ%u࿎U5uX=BhЉxGNpR̵}0hv@Y}gp(#Uܮ.=7•xLYQ7UIR.d<(vAG6spEڬVu|]t i7v-w7?д~ -K#ځq`5_@zsL}Y}%|c+7H[/=\Q {x5/ڧķē:DSddTڳGm l~K\|3ڿB{k#ABPNQpͬ_=L *kEK:o5"sKGB˰e4R\)Vk,'$]ʛծE;͗&2;aS{8?L졡xs`7iP6UH]{@Q6f$-Fa셽.j=B#&HL7]m(3y ;Rf~XuC=G)ح_,,Mů0WB#gGa}g]Ow/*+ϡKvjCe8G tk^*ʱCŤ:p0S޵5sBlXc2}y폡()_)tsTOt9m^nBN{y) yJ9LR,cF9ىL'%ф4nIWjUDb5 Y.`kcs}%jzu7oJ9K5hjq\9d69`aV H:ځuVJ/fݞRM#™z&cW I0,6jR/mUS?#]@iu&ldjj`+iwz24| /}s X=1f"c2d>H1P3˥M]i|ena} Xl7%R 叓hCNX1qȝA^稜tp[F ;=Ęloh˰!B}\t"ż^H\EO@DtJi\0$M#=dm2 \4vF/!Cu{W3xVKdQ(+$=c'74RDlX/7?(]oc ,I-:<껔 tWYh!\JxJ gnMCrѿXd20-eu~,4܏|_zeO;ڃ^!GdyNپyd4( x{L`0Na ~98m&Zޖ6s}:θ0NZb5Q@AvB(/HUWMc T08MCěF+O@=bvXǨHpў": aaZw4'1&&ِa琒8y3(9C"7Es(8 ixXў*g/ngn* ڠf7l{(d)||>{`*@SֵXt?ga߆~ $B#F{SCVQp |BiLD` @Tkb1SrGn}Rn}ԠROFfSZkvË́vtl%1蒶pB"q՝3~,&+ڍ>I+zXniNX{;Y#|f ȪTLzY 22m^Z>W,S;Qŕ"tj:x"?q5qV 9OњUP0b2,AvL?fܵ@Ɍ(wɃ|0m6.lM$=ݽ=þB\9#<ԗ@$VhI{c ?ʜd;t4d$'kLׇ?޸*f3\s[Eā[(&>{p ?ѩeG";Niu`ڃ&DYvuvW5{t&8!vG.@ˏ5Fh#Rv?vTr^WҗfP{{I"ic(Wtk"9:oTO]U'Kܒ oI{Ɋ'|ƛmPD jq# mC5`O)%bm0gLwAg΄ u\$%fu8$Z&TI W+KfE-96;|7p$#<*ƃ[ #4<#`g*PJ:gd~!$D^pa%\DG,iۗpē=*acC m@ >sXH2BD3R{$2 ST#l*k b.6„eLȮ jwbrKJa~!dw]weJ2۸cQ'2 w]X_k1 e=кX@w0w#}N (z&^5,h+>sVU [h"I8xhmŨt BUhWSlXYP!ϧLvB!!DyqFhxd9pJA3v T ޳9kP-WW'ᨰ_cK{Yn *JHCu$zC0a@o93ͣ: :2۬QŌ`իL%$6hx=]?/MWB5~[N4*PLS`Ppqws-` M֧c a(S#. /F|= ҙvfǩCFvNnF(?Ivb73㭫j]K<l!B`[$X*0,ZcK K,@ZҪI[KdƂb!,i- _WpNn#>}A&,$c|YliP>*eA2l A.IНHI,lbJaeM򩯈}ƅ2iڜctoŤox3nVFM*h)IV:2rPТ}x )W';*jK\ ')w"rh3agÕCr(.#[m6=q7_Q[\tWQ!}+l+/:,iF? pP#y\~!7μ߷F|؈<^-65gJIP $H}:(Rf_8IHƞwfcrodz'| BirfK$}7yATh1Lwӗ ;SH_l)sV4q #bѡ'[YfŒQb>!+-KCy]xxG8^q-jds[3ҹTh_gR<(ȹF38!emmKZk2!g|1[T+ e=(M:5܇Oŝ"%ŧlp{fa)%8^ .<үhPw:h>PMG3efVJRy>rtBw8.] Eu+da#k(V=ʪԄPxp}+791 g_KPn9/LQ>$3<= (RSbo\ 5!$:}p 8~AArJeP` RSSk1^`Hce]#}oھ@u|ǃ8p)mlAž,@O+Y&YTQEȭ^Ql"gU-/=jG;GGev녷Ğu).7O P{CiBUtBldlWSĎ5pP?7!4l|┟y aϤ.p1S%,4-5YʾEM ,HLi*&ދqM!%iSDoJGDgn\pȁqY %䆂`Vs4Ѭ"Sle56Bm $0`#uR_Jt ! ɵ*0^W 18:UXYb."OlӰ%j`"wƧ8+XJR"y斦fy ,ԷFTh!k0t \ (Qr iA%dQu:_0=y]U Yĉbd'\Wݱe`3y'"ZQsٹ7;Y$?Q 8\6v: OÏew'4**fsGu\ q8#ps2T^yaW0ě8|B J[PY>d ~U6PG|y ?X G-3qC+u61#}eenC:G30@H{$e)UckitKܕ^auydcG޲dbb6X0J7K7gvfV_T̼!0ĶhR%D5ĞXۉLab l=:&njl'CzbT' E22oW8!ҟd6u3^_I.O7S h5߰`w[{oTea"}딁~kvjt͕l=\ ~  T 8 %Q+\f?Tn~Y$3+J~$;ꚲ szDJA^G , $3>&-R$ʵSHCxbi=COuRȼH2~R I!bfqE_<"qf( y;ʂʏāZaa\OFufm;<1}z~j9(ʲEP1\%#;_@VDwnw3xRMϲ ~rx#ii^%h8K%[]C{O)oңp1'Tu_Y`O9B!dtuh5)O$ rB}oJ[͏4Kx1j1l>!aS*U$.2_.żE @ rT,fKl2k." ڗ)(;NhO)HU?i9l#`/m380^uC<[8V\ƈ,7Cʎ|ܭhDq lÌܐu732g՘O8c-Y.!)[̲sQҝ}lm笹*Ҡ3t SQpO_D"*z{u^{]VjbssY5>k:B-;~}C҃3 Hj^r^4ŔfG>9!\[1@8oQѠ"aXGm?8 iP>q#qDp?: =zMĒ/*zH)mكV-wUT4F-P;b[ !=a`s2.d4κi hM0a?|0:'|gBt"ጬoD,0{FK今oB+ Wɧ㧶4'3w8O_:8_l~fyz9g 7[Ng֑r^>lj,ge _ At\oJ!P=~VD\_j16AZ6%͏@͉buh4GðW(`[gmOU,#%{h+[fABfD~脻'thf Yv|}'8-YG^;#<\Z On5W0 3)IqUegRv1{YU+C \Ug撝nC8cNB櫒dqM7KYTWߢ#-n'ݏ]\_*Np8fdf ĸ WCayl_(XYCyZ&6{B" W ["`.YS'L2!'p\^~.Dqu`$r!.wf+|Z\]n8 }z0͉^) Ƣ4Kf^΂%\]@qY2]C֠5U m䓝5푠_~y+ռHqs S 7)[^(jPNm>-J2PnHYR=?ma*2}ȯJDc&ds3fbw ?€"|G@nGO|YȒȶ!诙_ÿ'%߮)nQeգ$N.OTM;=Z@C`]J&SGQ"4tK)0̦!aM6lU+(lf B-J6aGr!>zLQn;^1 c/Dlgȿ6tw^B TkAǣ%m: u/7a%DW`Aݹ]Xft-M#^ =P_HM4X4E3B^ٯew:sI3, flbdAbF&<& V1ټؑ;f._9sͥzX:覮?wmX%6N I?Dv „ jRQm?׊B9e*:#;6~?We <}jyaoGHkQn+bp}4< M#`.ǹJH @]3I=s] q!ZJV֭hU$Fl7o6ҞXH,BQ=9 %iA )~JbJ3 O=Ϻۋ2Q[!yW2B!6%p%l[;suugo {Bryk,Mzr4xmp͉L-$𸬹|15ڜH,ae:RԷ& /RqKU$Wzh p}\DYsT"GcWٴ4[:dvK28 !.@ĵA %X1[z?{e@r=V0޺Ì>= 1 ?-Cѝ+Q0Hv~[ߨx&]CKff 4a}8f:i+׹lywry#(sszJ؍6PrTeKi5m҆67Zet z7nZ@FKOMKp3]%#^D@R&9 L>;%&'eZEp]ЄGfHj8nl! c>6rOfD*X$[g {-Zuxg$:ܲ(6s䨨vqvĞw` \uֿsJ[ږ? /eUX؃u?wrh&1V?1q47#xY7ߺ̀(\Wkc?i#`! !8JiR5+e@P 0?/hKebƢQ+VR^ZxUu@ hkǓԳߓ".PEWJSgw耉|fBNhn*λ':E@F&Oidy7QP:lxE[~9* ~b\B:7ik bVvѼ ݩ)F& K)"αF*brBGr!GRwM36xNEDDmq,tn] @ƪY$ 8NiGtqFjʉB*4@ij:.- |p&- Wzm(Msj8W wiĚͅӹyntϤ~y P銆-O.0dB /.WϨJBJPe{Z^XQp<3r&adUBr'.#[J_JYNIbz^2?\Gy&0Im#kE$ל=Bn>7R!_=Y pl zKd$LV] /X KV+ЫJاֽd 4yZ^z{~3ylQ#˭aɖuElox_D[oW"Djn_ެɿtDoFo<B# I^-;A-Ԇʝra]k'g7?J2up~K '9`"PG7D`MzE-D19`&W<L6nS8 rueEf5(1UvW@S,+ iG?of ;v³Pi) +J"K$%6kK wjmz}c 0* 60[PUޤR}^ܝʞ=ByE)`"ִ_K>ІAL%>,ʢIgK@Q#"mq--`q.=||bV}1Yn˖Ș͖b)AWOW,Fq_YOn?4xt{k#ҽcfC{݁4xo5ONP'`ɓ^mXM$g4T8yhQ6c14ױ*Ŧl") 4CNXϒ;9Q5AfRc^)oq5'aQB]P^ץV X9imvӨ[`E6)P5GhܰI *Qf"1bB |ɧ07TyrUQiezfgLZPy,Y94_p`aI Be#BhSI&  x-\r^XՑK 8~?s:,@E.obW(,Pm]u $0580rrB8H Bߤ\P[jo _X66byʘ:끝 :D6d02AS9O2և|Quu}Ăϑ-ȄR!Í^Dԍiu)W&tua@mXu3n+m~>fpBi7//}"O:.{P>#~%i)M]A+ ߵ nYR]Kn/U0 /|{U u2!V-y<+!V1zZ>:Ye@s2`BfhS yXtŠʼn!{ so,4H치O[%I`:hOdW $Om,s qR_z0(a5:CI '*A{_By(̹P4gս\D|#A1t||G|{ +{^V@kaٛ}WCc$F'y}R%'YCRţ")zmoo Oeە( >:gDMy_2|BK-<㋹oQ#T`r(; Ql>Z] ~~?3C#hN7͂ |LTa}Sr:;29gcFKٳd-ʝN…׉=G|.͛;F,Qsl}AL<}g$Q<.LM=KGJX ֝NhL-傢^bo x׺0I"a-VA_kR8}byoXh2gXx4K6X('DH"I[o:rU`m̛e@z2sxqh08ѩbY eмOS!@4N˚jK~IvL~0&L#yHd h,U*=;89XXn.3cXaAwxJ;эm!eQ juv,׸xKDo?Jsq< '/RڣF4&.tu5')ͭɻDLݳz Qp5e܋y ,|H-J6w] !K gEY؍K̿B2Df,'\ojGm5#1Jjvxu 2刯K!jIIǑR>ilNE0;9zZkqO}w-ng>`!Y?JcۜJϳI+#;NpW[(sz<_B$W"s3e /!=s?,;F]V1TT"*I*BsinF-YEjo atseޯ)\XZ δh&{-Efb0p XA9v^ơϫlrd;J@CyjuXnQ|7eOyFL~Á=O=CC#N]O S 6W>=ZZ?WqG]P!NW/6j#}@-qRMGԣ떱8޿\d~A-}ԟ#bDMpY s9.^ߵ5Cg!A @-pܑLmRXtބyOm7ە ֐oԒoE^w2\7.PV,ՅWkBŞ"WT0И pR6YX/,ovq]fI[Mk[WN5[F|>;hb[p|kǐ !ňƌ(.8[_g;g^a>{wj%o'X90c.tRg-MV c0WQR gJsFmo/}4p{"Q-3Bnu{!^;ucibNT>?j <١7 7/~N/{;=+6Ly $N W[ٌ+gLƞ&ti^Jzؤ$tU֫n m=:!-gKM?# hvZB-Y$5;ug=.0Ru<G7i';^.@z\*5<:rKuuSbm#W_Ao7FTUT4񈡶z^Y~˺1laa ;q.k>4Mk?h߷<$<6@%HԷ{]wn#v.?Z%.Q.G4| k2始#_60tb5Y(M&*rWq' cp4Dn 2b5@uaOk.4;l@iVz2}oJx"deɆT:AkavW>ށk29Zzq!r/'-[O,bmq{[OU8!f'6ݜ$7"Z `=9ՈqS>W+꣕Q͉3U\Xgaڽg@72<lj7˺x5kT;~uyy/ ڗqk-ʺ,X(e<Ƶdlgnڅ @l.\s*XA ≪R.|v/㸿Γʵ$W5}xRb9Gy9ZVMCx("ogc˹f#3X:m_\agKjg}LaEM1VZE|& 3}.{V/?m/k԰ؤy%{jF/",* *< 7MxGeύ$KN+kt Ӑ6Μw^@DUm@5a]|)Qt䙛(GHʍ0Ϸ)<6 T 6g>PϨZ:gpc5jHzҭc, |DO10}tw+OmrJkA)6^PHh[~T.38Eb03r0~O\TRk@Xv" -ogІJ;^_0X*՞;Ud,g; $?lcR̭Lt{R×r&S=Xqjqo?\sK+x9RI)TІzֻl5`ӏCM]{+O| XWؼMwb8h1?Xp9jVn-;]CYYZً96^ķs?#q}s8ܮj6zWT;˟й 58mJ!(R~9hG=ܜt!C-8\p+aFp8COϒoğ%J!c LsUxS?$ݎj@>Zs:Ն\.j(\jmfjR@ hjg =ĺ*L\LfAO{z Tyh\m%n.p᪬LHđCWYᇄsEU2V 7{3Xk7幨d 3)+Q\!ˎzAy#.PA]A~>e)<"K2BauJ#`QF=Kī~c/l92 @=kpSY½ظ5"Fyjw,* uXٖ~61Hbq\~"apVNBJ:?h\+Q+X 6J91ƀiujb׍_ R1{W&֛,Aꪅw?{cSN$_86Ʋ-NulV&7xSR{{O*Xb/Eumo kDXL-qJ/[r(/i0E:|ޤS <|n[# e)B8K_pZ"}LlP= ?צv'å d=rJLe0fݒ;^Yh TpzX2Zo1a\Ovk_[d~. reћ?-@h3,52zD.vUQd V-[cG ( P{iC e D aCue vJO=N+]gXpD5뷭!N<9{,ᅥ8ORê_:(ٽNhя8^ȵxk̐ 2pCoa/1?uvߓ0/raʥKJt<_BqEAu?oݔ>%.g@ڬd<"#}>^:0U5[}v9w}9G1:kd4QqoFR~>hAAb'ZV;a\ϿZrq} BE^`|ʝQI\4/Vk}Wlj\G.Kjs=Py/!YLv@lN5e *@b܋ < 5Fea_g\. MMv&B}/ ^w$Ղ@r0t7Rx)@pOQﲇ"q }X\&ͣ0[$}p_[FC WQ'}? :aۦ X*^ܦxܡۀNa/r؍$QZ~wF&dݏ͙'(E(0S@  N` :%UM^ڰc`U~ -gFnAjny`JsI- DC2l`/:z?i@0&X5CN^ T3s,}p5ذ_dͭQlaC40d'dN7 VgF)QY?a^l3t4 ++p쓶6byȸx[[EqI`ڃPA<Ԧ࿼lԣ9(<٦Ħa J> b|ho`)U~o2«g_a&[Jͨ2Ha۲D?8yYB v<AR&\㵇GM\_lFA;PS%ns]/fyd>U=ܹ" -N@ZZ%} |`g%E@h;d.Bՙ*azt~nPpcH46)Wԏt,"d[XHz1RMv,24Rb"9;Qz域ScY-U&í*ͨ|'Іv3 8%kL=01uRkEH0T;bEݯgcgP˜(A |XDsX;F+ / A/Z9-׆dy{k, &0U!Ss3er)C 0|dor),ffN_dS!нmΟܰՠr b>ļ^*=q/th ~&_WĻꫯ`cr_M,Ҋ`R<F~daY%PDy Vn㠮G>z!GP9pKH 6ہYqM ),o͌bsPEYh?Tb>vOhW]n%x Sy5 me5ٳ=VVBtۼcaDW$$D0_pGC<&j@M*=ƔTbxenCƴ;IqDv^aK>/%;$;5?.~I݁2Jjy՛2bU%N$cDT#wN޴ -ݒ3)}mh6\=/N/EP ,_=郚4V3KVApP0)q] u0$Ca-0ajDm\u [!^MkտEzN~lsf(B goc@U3JS\8Tg'jJ3+L%< &T&baw1HFsRC{kWLXL 6EVheΚs;T?Xvo ~y`"n_ԌC]X_+VnY{{Y7ngB8:\MFc:/gGs$Ïe) jcF f %vak,>Lheل~ύեgq]K_魪qi/D-=3-̺w x0ҺyXQW iIZ3&Mb~yV7w-kNCIrk(G{B4Ц$%qWcӓ\TB,j0798{iR!G_0rR )6ŶmOP%8j放axL`WNy{Q 6-KIiZ‡NG(Qbtw>Qn'ݴ{bˡSz(_-de& )*\+B ?슣s߇" Y<8@S'dۧQgF~`Wjϱ;{:n GCgrض/@(^@$ K,'c,%GL6Mv$5ll ;ț(^Ӝȷ!N檔"-Ģ;Aw%0ή%<|Ȧ'E2)Xd 6+o倷vw'@ayKF~tԫlݛ+U%;7T]jJkȹ EF]Q`ߞ EFySD\b+LVR&ǡJ{fYWGrL/t$4Me,nD ϡsǨgg(.x[|GRZ*"w5 pI@'RUhy&_E&F{ sjeXhQfl^ 4O ݶT[X`eD$$ Yn6OFb7K+?hf$% R!yy?0@"nv rȽ1P»1nU }pn{pQ'.zY~=Q׿ ׶>\1@ %[?9cфƀ2jA+uLe!u4|ݏEgkg/RZ_١ :_5[0Ƙ`{֋Q'T ]*~IXJO=V*b5hJz@ Vv6 ƤOMKfi{lg%%3͛|"h!9 (:," MK:@N CZ[@۟vԻ?)E(dIZ>~Qa EEF{kמF@c+ӐkM覎C#zIbmPv.w7ԾX~vaW;/<͑|rC|PKrqQX`oɚe^v#@C$1z<۷M8kIb#QSc$Q$Ex(b`s? 3|^# t Jd^|i8VYK gh_; c4 uq~ZYS-ZW}Z?`d+̯r6HXZN#Ӝ3 3;-#&aݔVy@̊qt&WZd~W#ȳ'Dws烘w|M=vc`X=g>XJv\tiDŽ-B琍s碊$jRqbjp/#֗IBVn"P>[V@w\2lNm&K+J!Vi~}8ov*HOs$SpdB6!]9fv,ebR_b*vz"_Y, BT<&qDJ'AS冗ݿ FПBջ Q"}`aa*$&~?얷שuJ^A`78fݢl}M|ݲxuizNVCDSJs 3x*guX́磨YD]1rnPF121NTŜy[xjBr#'\"޷ @L?Ͼl}UmBV.M|8lFjO0'~bJڲDM:sen |]Yx~('u9o p^1ubbCwH5Dt1rd&De'J`ǚEheݧ  u20qpeYk64O',=GGgMm9d~!:B9c w,?TyPޖW()iϡO )Wkwjϻ^bvk %>OxA͵*6hVJjb(gХSU͢Gc{UOJXUo2`/s|@LjwŖ](nXW"mnLl;zF}Rnrcܔq<]w /#},-I֮LH'4*RO\Ӎ2;HN3/js Sl\tZ3Zۜ؍Q+AGS*1*"vɨ?`HLʹ>AKsy s0hCUAe(Ӟvs?}RQQP@ZO#=>n*i[[%9NE_Kk5DFJklwߊ''5W~۳pt{\X/"FHR&cuAitUňZݬ::mì;􆂄<)x D u~sgS_W} vJ!VQitOvӊ=!~'aD,d,mv@KHUGm.&c6i.+z 90^|ȗĞ8ƙ P-iy.iC)16pX oCKiT=GmĻLpEWOxi]t>zf O+4aKۊc)` ްmPlg)}& 2e( %V߶mɃښD`Na{=b^$~~.e4̿o}/jjfig#(VX62E(yF-!`~wJʰ>T/B,UV ;i 2;tɖGu4@8:e5TS[- g>؍Yo}BЂ_peJl+:(3ۻ!v?2su5^m&S*Sz6K z Qi0v=kьjY~.Ɍ6;և1q;Gh2iMEꂖʽ:KwPe%g,8}_xG]?1,N~?K J_(DS,).ٱ ]_$Gvp1I9wcgR'o ԕ"N&`y,VvIx|\ʉ2,}1^}5O+|b++$,HԝbSʶuV*2p&et!r3yBK)V W–x/ NM,APtE}&VܭF»Cj{7kIcw-SX\ʸÛsSbCI*KTG_ yjeB|.ϼxˎ K;XYnGCQ]ċe Ft7rO@-/ ,p wRofh&Fz A9=zOyLHb\P_~p8HIbei#`Zoڛd .65# v dA~ Ro8, !gnb*FJpʖ:0CV@i4B t ЫSwm)/&hxm2 '.$J[;?;ϕeR2/Y?UMOts_ /}XC,ؓy+fs ;yկ+ʋU Ĺ0/sR #щog[|6|I=A .:!uaΡ&\X g݇/׃S-y-A} H0+îo:%K{{6yaepqe7(P e8WHEߜ?Bs{.[vS]Gb)Jێk|ﱌls_)_RjX!NƳf!dH>oG]q3#R2 . g\@&m^/GY,cF|~ߞkьTQ-+>;Dԗ` $݅`ЇH,Xn8>p6gHDMm^ͯ{X֔0MrBGMr\''FؽaI=B "PJb ^,#Z.nOuחk-,D=fǕIPV1BXQCl[^c!&d V * =4C|urJdEJT^Oj.\&Boݬai#&hS/gCZ&݁kEۗ ud@eTLho!U0 ДOv9ķoї\Aأ%)j[M\cTY Okkj&'|jD 6\tfOzw-ĵwF|ȻK7ɏn"1?`xY1pn!GDsLwg> kyǨId $7Hc:U /:2NԱӸ-^oDzϵ1UO:R=" P|(rkr%W̅8CSlɓ|P&Q@/К|}҄8J{B]vڑ=]%+OR?WƟLYǤ)B_?؁W@ l{mө.] x=y:Z4P+g霛.IMl K۶ȤSccf\jzCfov'?>٬mgW;r NLh@` `U{ꍽ,pJMӻUӒ N Ej)I=T"uY͕۫:[cFKĨ*/dPh/HN#g 025BNt`zb@c!T2\3 =w1@A[Rz[^8H\UFSXnp\LL?мR8[# R5c)ɳn _Bb)܎­4Me.29X]7B-V'7zʐOf|#m '$L^v] 0}ÌnBQ}\E҇#X `([UB\7T6e?~Xp葽%sYf{Glü`^|$][~aL&]W» >Oj=T*0>DIC 8#"AY6QJ";2u_3fXcv䆨~C\yB&C #5C(.z-9H:r`ԟGXZ71LZ_3f~#rʊ sGkJTJ9o ᓹxbo*!̷T899ZW`ҒsJuȦ& ܦdlج+poվpHݢUG3vVy<( )H\td/ THDob-7>ըJPme87RVa폈Q"EP2:3D2Omg%?6T +LƔB ʼg+O6Fi]:Jk}LxEPQK|ٚ85_O漇~3 .}-'Á} m5p#$f'iuȴQ+;pI6 *&\Nƨ4:W $?~ V3"R+S@hY7{G4zl7dg %bѭҴwKet$e<zb/QSn9_N+!QooQc:IJsl!GriK, VZkdnM;0蹠Zرw%pC]} FM޲F'hbfUJl,)C8Dy-=i]ŭDCBD03S '&Ua|YpmkT,wDFqHֵɮ~1]4u7[" 3w:U5 x}h@|?>7ǥV`_i UNsOq*5\83)r(R1I!fe^86rjnûzxNjj>V$1iW9^P`(i;9ifckShf*a+9W'X rxILMs;s"Իi6ĤPy'el1G3XPWS*^GgDȼ:Zvg,8?#pn[7e(}b%=#[T%2VX#TakH7i0 ?RAAf8'^||GN]? Ya>k({ꆖolI' ͹ɐ k ާ(p Izi*qEM`m*ȯAX> oRvšt`13\~a~eq%KFnZD0|!]F7'vĜ%ヒ_D4p8 ڈQ>ZT%a E8եҮ<7 $iD5)U3䞁h^ks@Ū,6(Q5W OFI lnRz*F>"~HE8l'Xa =#W#B-55^6H'<>wi..*;TsDV xP #oۓƏ(a{I*'{jۀak@` c(Le>|e+:}'g%ubikngZ͜:v{HMr4`yo*)DE˂d'wDv^hn^C IL;ZY f}=B8{4-e;kwJE /t6{umJHĽVOy9,* άv."1'ͫHCVǚZg\y)Ǝ7+:X)hcÊKKMf\gS7ڎNN!H66φu4Õ%)YjQ 8ePdM u2{D EE3^OB-(oY p;.wtKÜSt9䡿?,U\ʅ"P9'_HM:Ō`{Yl9Cb8= ~GQؠ%8f {T_YmDʆ.Q\ *Y잖Hn|/l1ɶy0T!uu@+& Q751"-7u}R|(`f7M~+kccܵb܅VÏ̒ G"~FSuU(qM9\~CTLiLU I7j XFKS-/)0$sf ´m7J8e.F*u ʍ7ޗ\m}f.yaYi/(W{]hWCSIlxgzDl@ a3ݎ}vhUMVQu% <Ywod_:!"q(~%aC0&CfK{EO@I V([/ 2v+ڂG$\F n;q t)ozH'n[VN3ժK5jMӧ{a3gH pyX创.Dq#@~DE)Gz6MF%t!vSMcvkàĄ/e269ILV.FMe &*٠∎TyNJZ<(LO\ Pfs5.K$9¡fߣj`cS-]wxRR'%%B/"3{:iжa.ͧiȣX )`3ΡӘu2hh'W_B8^Tb6n L(G4eg^2keQ:{d#u PEXn$;Hl$u<3B@: qmm22T6,z R!T]_WD/. Jv6C.I8HN-cۍaw/"s@d%Vr *mtZh3sQQOWՠ8.EfTkni5Uɣ+X{Z;E Aiosd!T ()Ph&=to0]߯#M3e6!8-&wʭB%?ԚCztKhO)7-PE]tS؁ o3d bf-gR C7͹nt%U| ]_JgsoɁk_Ki_+X%P^IkI9-QJdeŢhG|F}vX5Ju/n2uЇ "O{}G( z3iК+t@h<3-7<1X)_& cl%TKoE.K MwD/J h2@.)AJN i A Z` U|3daʴHu uWMg2I6u"T+v}^6PgG,RA5ideON$Cc33t;31KNȆI|BQֲ* C;7(7g,`L96vQi%nKq{O`bLc\ls;^Kq(j@#:])̱0Q=Vp4H,0"~:VD*hmuVk=y-wtGdŹ<$t;MV2B4siPS/,!AIr}h܇?<7%`,cGF %2`^r `pOF#*Gr _~۲yY,ᅛienl\{"z%,^*% \/*ˣEYlPShMp BG\ً"B8XVRD`V**:%YCo7Av=8ʩ ȷNڈ^o_LSt*^V6uSb'jb&FSy찪7:@w$1Ƈk&P<3&6ȹe'vR1y{c( mNV:ZgrȠ-Ey_ը$eYuJnq[ g?M]y,Q䣛:3Mn{}U~j~u~HZ|@+h}fYF0HwrR.O9P@V9rEh|Tڨbg?ZVS p'|ywwr* KĞ[Yftncw1)QE/Z:̠Jž+ ^g nn%FC 2:!V^\L`!A;2} -@U+ȬoQJcj,%DxЕ|<͙ 4MV\]]p&*inyOEǰ7X Ћ_a19vw_!5,Us ]$xi@PceWczС2|Bpr>s:sxӗ#Ĉ1Nt|!]r6ȸ&<,w ܉mCW&Jkw:Z*â ͷZvbY'h`'ɓ0nR$IeWa.ḣA՘s9#{G)sL hݧ6ɒ3ĬܸH:cqfDچ]<}nQK 4I"!'*~4Ћp<ޅiZfNIfS\믷gP?>ʪBQ Y2(4@w. 0CgsΤYC땜`F pT&77eU~1{sIk#.Ho]osv^3ғ @hlVHOXQox#1j4%- ϟ:ov6!LYAtrtLuu}7HEV6IT8P_<9k~xCpI Bb.Sr+~iTSk n9Q:x$Be}YɈ+34_fsuy>iգ{ऺuB`[ P b9a|z\ۧAD{%v@~SS$dG-2~<BT hݢԑxPpٶ'9%yUS˾ 3Gfɑ~NP%lJjUx{9(q:KA?/qQ7+ yOقt8!]vnOztQXw:Ƌ~}~zٳ =Ւd:S!h w@O"+UJ^ah'R|b#h0dɨ+_g6o9WđP:ci0a?Y>pRXH,\T :nm‡]YWqnA8;+I;=6 >[5DihVLb=FXW|2*h LɅAr|a"z<9D.`51Lsf-_Lpe7IL?YY Ƅw;+_/"#i&3 g'DA{B?r Et:B݅  Lr11䪀rdoR L`JvgN1GiSIpfuLɪ /nF,4QW◵{2ĉ^~>nن#5 =@WA8HT`6 ;ϹNkKSDDZ 3k`6 :aQûuU2QTR\S}{ ) q]-#bRVCgO}@)AwzY=u5G\t"(J*Vō{7k皕(^R8Q&:s=pf55%+`se+.RTA V ?mwzUU) /Is-C3RX B4lfI3=`ScT;*`?qϭOTRP^\1Vm (!X( \uܑ6"]jGc ~_ w.~O7Q+e3 .Ltc8L(^"aMqMLeC?qRbPBh 5Dj4 }=hRO@Dh vo_XW7Lt]e+,Zew"ZN@)]|I"9Ne2Mstep,1+D7ƴ{.#Կxh^#ЪW7U'/ I>EFzb"7vQN%mONrP"L4SeoxVH֬6*$R hGf%6s 8&Tr]qYg!0`qK3&U.PuiA/nfk4y`:[gDaSp4ž@4 _Aה};zAuluUQCj4컔KXd'88cߍ"2 Җ\4zz[] G7Kk,6lgDD1 ﹞+5bU7_"JН|~!pGY@mEu\FUda^т _G_@F)ez𥃆]pGg !f/0ap ɏ(l@fCOG>jvn_qtsO%0? ϱo3V|OӒvxlJ"X0aFCsh,;E?t;݆L_ FN "Af~58f~sc; Xg)h@0Ur9[%ey}Kr =&Mk^LH % T8Z/9d4Pa۰d-TGki.ѷp@yq d?M:]H N7WtVLW@zrt!(posdЖHxY0<\e{=,N”, tǭC1"J/Lr/EkoӦBߛ7³tCtz}Ũ_˂e 5mqR'qhdU =TB8t{zCtho@|>Qkϰ||"A!~B1;>зӇ2f8 ƅ>^GĪFjv~]yCŪ:9=v!N)po]g:b7MI{evTn/EN#z^V\<DžU gZ]l :Z1$C~?C;^ʬOok Ctf˜g簾+N >H&.#suHTc5q"IXӥr!=x(Tw r}~%Cd}U]:\n|x%O[<=u6 !g8Pc~v(]"fp:2& _ O>W/)Ǻ/ ̪5lnDNj"t׫˞v{  {( `  d~б3~ 8N\E`bsp̍)qov\(H "\_k*YbfrV@ȌG2E`>9*|3VÑqd dWKؔ|䷄08yG"5+a5ZjmO xXF^>L6ɟIW/2҄>%7gd#($NO~^55!_(Oc_[:/wshg)dhz*(]4,#9]5͔UvṼd %9ER}(d[t SF ?M '<'Aސb[ |PZ<^MK^W`h4ę+ .q@j| ~{V_g@1~X*oU$Q505"iثvN -&z$A5.uQ\ =%-(1H73/& k[o]7I_fŁ~V=IJF\Fd~}ύV! J'P7&kbr v ḾBa`|ˉ7k?ZӬKsA]@yߕ"Rx#aLK(`YA ON1s\Wh;լfQ>h{a>3j< İbǁ9qܻw7vX(1u0Z )urL9&|r)[`;,΄uqq39؂&*PXZAi=[orMKz hP-S314RCG}'~ *Y }[ ~&^CϜϲD8Run JCKNB s)[R$#T:F.먐nQ}*aY$fIOk/J&`-4AIT|-I#;Pe.!,'hO3c2(;cK1ӭt(}|mCa{G\/ō@>)9ȝKc?m!}@sh1R vohrnn\yZǡXsX=7W> J:@C^3?;E4A)Wu](LR<\os%rEB^O+ FD1$3R.a#:41qxfٻbRSGFEy]ci-ىQ/F:|l/FLPDz%VY{T7uSk[J4 d(_Z+xP!R "y[ZR7n yRii&(Ҳvtpݕi*#rX$VȄ?0iePτ#Yʂz 5g}{+ Hga0y< xu+w$|(%8,zJ e/ʑ[ Us{J,S\سI$KC0O>U͝4~y7ar)ұȼK竎UbwNpUH3-X#`g?s1 UօEeёC@7+봓|]#z0 +VA-" *FFU7vd'J $=9VyɌay]'d1Kb/ vR^'D rG lUAT\i6h?q" "Zj#c˃،ASR; eTCW\jUݍcQRi9cֽ/Z-.D?/xK͙AیgMKg/Ǫ^^n~ϗwx&b *p庯XG-CB,N|)ksB|7t2lBT?6v`Lm1h鶝}݆x:0IY9t)`ٛVFF[## zUf^#gys8lZqw}}GlcSV̟zܚ.r|$ֆCMݰ>XPYt:\QUxbF"/Zj']@@'̊6)]\4 1Od3eF>HXxZ -:3pɞ3٠lRd%J4RlI}գ~KxqPvW\ v88zA!/e1D30{]6$(V'eIRk6Ӑ h`HC۵E)/^1Az@]Rܢ=\1kNs^ 5=.-o^X ܌1$])O gaj 9Ps'XNvZ%iqXxxP!'RNtSy`A!RE[Xr0.Lk"Y5e%벵7mR4bU5a*8:CBZC0 @LV{Vo÷\hv7L/ݬFfڛqDH]bF{ )岖nglt_:{:Ԫat0CۯHsXBL@,_KAԧV, j/`zfSe:N'2ntHnwvxס#je &%-c{ ^-c!7|Qܱ0}@zu =)1GJ1̗چJ?ۼGiMؤ&([*|3_CϢU,5yA*aQS2'" 褛noJuJKm*'kbjeTWBbyĜ9rP!o0?AZË0 |z0lwr:oCN)?{PN$ 맿ljcAs:FP ւ zuq(68yB~2/f:1DUV_N BVm,:ԲoX^vqdU;K4=29G<54`R 00OBU\:7ڐOC'|ӏ>L Sxx8k%@-3!cRQGm}TU'|ubiǤ}{ ꇐ={֫QEgO=#nG|Ғ k,lD}NM"AcT}+,y2#]6uϋp=Xws?I') `JhOTΝ*0l*IT?tieD'-w=@߸3uhQ!۽%;v ~&ˡ[L/,u2>6^rғdz9ct,&lܒb?:&ɘ^r7  >xUXhu703^?&ʨOZW\H y}1YLt:V+8Hv0vۈr9Mپ$jR5gJ_]m)R&}D*k*/y>:ڏ5 65 [hZ=}~!*O-)Y(0֛;K^7~įs%+:$!Xm7Y q/ <3 S<.n0rJ49/:MGf_o' M8}AY0řTLݚҟ@m: n rX\#_M*_QV>:^LՃxe'ěm/ ßC;nnV/:P4K&;=Ys!h~Lw.LmgvJS"wp1mE"4,O3=Ll; ș}y0x=39lT5[ju|`Tq`Ig( K KH\Qi? j. m+!y[SDH Կ=Xw@Ҟ"\pGq|ȣB8z28AljpWPhzц)!w$v>#>> 㤏u1Ʉ1$R2JjM V7 J0!#lĦES?X`Jf,XפڄIGTqzn fXB2 VuA߿}ׇtyMÞwY]*0G>4vo#jS;3_14 k1>yd>kZo%jm Su p~܍,=e/ m 25GV8Od"RuWx o`Ǵ1y,#5lX>v<P(O=uԼgXH"a)xWTη~<&7w-9n\TOC༻X9/BPurJH r@7j`#rɴۖ>u׈0q$~:k&^mʬh/E00g'ӂOI 9'J6Ϲ$(IκHF~?3ww?񬒮mbJlRm8R f4KDdTY0 ANKgO. 68go,[|GƩpU"KC5 i({(TP &Bzu4TA)?J0 ܐ8 I~cL6bh0)Ϧ:?^3 嚐70\$`VZݲ:tfX:c[) M %I#ހ{I{&?eanM5Ą&9ql8vT1\+3l04Y mD[ #Q1@gz3pNi- _kMBH UOEvb8ٺn[(|*g+¯c,4bx{]d>+kGܼ'5W%E@Go# _,Yv9.ۅSݼ5s>˕Um*su^ GXRTt=)q*4GR-*@U!"Nt pe5W_ j~,2i >ryմu ]K)r&fdc FMdq?J5ߪB׫Ɣ҇o /kAL|q[m]rP.`d# heKF)F r]wd@8$K #$xD3L*3ZX`dDm/OD''G r=e]7hC`ǀsB^q}/ l5c_pk'ږ"'PzhT2SN I)wTY:uq U "-jLH{6dY)3>yz8xL$ꮅ{]ƺΎYi{0IG_e+X*CvM%_ Vw15:.C5.Až1@ѶIY΃}4Ϭ.N z[P}5c]4xmh2̎iSè,mjxY(IaȞR o XTtv@gPAsa z؟hO)ڽԚWZwzi]AwWT+W1DWȰ#YQmFc?7VL +%1hEbDל>BӐ!J]HE;g){4K ۝<Ac,˾!# V~Jm7o9|D8L~FY WAQQ`;}Zu*J ۅ7rc"j#πah\(7ؐ!d ȸ!RM<ՠx0{Q 9AV%hӖ/Oa߃5,Nϸ^&34$%*R=WWଂ4*[Hgiǂ9ZȹB8T  iYAxxk6Lu!88o]̊0 KsN](ċzHN 0NN޾UHkV8db/Qԋ0>j #`Jsr}̶A]裊tܥ"GZcKHT&8D7~M[8qBPmІ#ߵ!![>?[qYi9}@ a֨1?"jʫ ETa>RA$/bV⚓^ Dee o}b{p,ǡmmF `F{pL|s Y~!eEPZKOǴ&7L`> %c1E`Ս`ZScmTv Bio.(& iuaKeCN^"2cE @ٿ~ Ø냼h=v50䮩sI%1 x.Z9vKRq\I0*Gh_CW!~DYݏP =Gn8DӴ!6C5ā.5`&݌-[d84 jd':YG,Vd+z/h!0 l Gs}7cdqT9|Q(Y֢h?G"^>lcd, %UVp0S VegEcIu $~aVD:GcYW b/-_Ji+Rovo gAXs;(wy 6(-7n~z;Fw7ѲR CEWR*$a/=[uQt^C(b3TϼKŔ֔dO]ÿ0;F_ZB?b&^C!b: 'WY4׬3ZW!jCliqf0eLT'IXd4es{ҵ@ 4%~d(s K1-hͣ!9}k xwMR=dYA2Hvޚ5tɒnr8 ʧ Ɂzx`н(Uaea>Fخ@ݑJ-BKw6 D-Lo2[\hVaKX+ ֩Q ri#]l+Įy]'ABK,i3$1c/e;Q\mrw'3$|mHp +;ɫ1wjP[Ua$1m#G>mPT=hWTdž2Z_D=P2~N%,VEAMʟe}$H]~&6۔ x[4/~eFl%E!1nBmߟeImiSpM%FIzp`tW`8ɏ* b#OZN1Yj,)UF-qō0JHB,Öb#p dcy1nIJz /Hz7z̖l@ы>I(;h;Z5^t XBkHfm:ީl:J.Q5UJAhtYOum| I9hޯ%7!(u<ۢ-51IB2;٪qJf-fF![< ŚVӛPyjzrwwmj4nIGUU5a#Yw}ͧݪJJ/a{l|ϣiͼ7Xo jL -o\_E{վWj\S] xkgyF?k ̡#f&? B8:Y]~Q !֞ &{IUuiDHm 3-o}t#Z 琽?!\=G4*͙:mXBADK. ~?q&pHUė.#Q?|ۙts+hhM:]'w?Cwfvck"s)TJX2R5QVadffqe\N  ji=;SIm p~!XRSFy+*H\E5H?DTx7ݹ.׼Wr@zdm,u>OAa'ѸlW,%+$rfmqQG$|>@BZrgXi!YŠFD)*E@,q%5)1w%{2,AU)yK$?B~ 0S?f* KY~֕(ubOg @"G%n;`VM`wzQnIR8.45ܯl$j?_.ߛ,\mpIMALíʺJٴ7 UzxF\Nւ4s"g -!@١Zbk*յ]xˆw땲nJ-5LIX޾ztROYCɒOVDw1˶W1N+>vAx_%3e;"G3<*!IK=iV*!ɂQnjoW"y5'CJG\h46na=jvzQD~wq9@2N=`/j&̆/ iW  I= v8(mŁ uSFi ʗ2 AHJFc~%iFI&L+,GT2]8͝K`@/ լ~(ȧUn5E{ҡ_\Tb"淜5VÅFmLr/t97;_ywѻ0 ?15Y[td<EmŲiκ9e}su$ɖdjS_ᦄL!Twqa_'hЉ8Fqv)@Y I|k"N\t&ND4l=9$qYP٢|n'Asg/o!Â/նs8Z^Q_˕ 3hjLpa=)UvBnjɾF|a1 jcvdֺqVg<7Nc ߨeˀp∡ ${,*Ʉ2ir~iߺP {¡!(D\)9>&IQg '::6_ IvM3\aa3vNvT+` 7 ~XGϔx5p oQ҇޵;#j{͐vfT"*ӝ\>}M6R2&׶bxn1&Y?dj*Q. O̓(TY2(1tU*"s./V'>R\ExJ sVYߍ7o7϶7n0% 0>o 7Ԭ$sО -xw0i)mRsw"Ac#xEtX{+! WmˈeHR20Uili\:;c<QZRb&; dYpnY1k568Vr~rkx=a-9 PViv 뤸Q8ZTy ]Ás4b'y$06̌nn,ځ0ZYi$vˍ)uMT|&? H y&Jvn1,Dzaa BLa1 {flG?HP /};4YNG!uJ"JGOm#1Feƹ[5Or%dž[xH>󷶾rG~}5I[MK1Ӽ+2u2K%I|"|4%IӐܥ:4:Չګ6@6~(uNVɒ%͌Xsn;dq Y{8u>`$t+:\QthR,om@ /i IAO^ͩXGm!'yqhK9=D+~XUJ)ؾMtQf/ћER6$Jh}p[LUFM]*w)}4c &a'}q,H y|ۖvK\8}' ZGZVP)/FۊSxѰ[WrJ{!9>J[{댬A=a tX ܼqKOc_a_[U.vʀq88>:J;3θй?w[05FkU8hr Iaz?'Y4y-2/wB|1%<[BX)nUB$+>T^Q^.rl}=U5]AS cE~qYֳS` uѱsxWXwE$"İ`qG(ۏ<֝#'^wܷ.#JpԖ\Vl+ [,9 ҵ[+49ZZ+ڠ*r^L5KTP\LbБ \=e#bvRg"SHC_/_&֐.W}&XMyn<[mDLH!g87;>vFL:t}O*(LIԓ槄s/0Q  YZ