samba-ad-dc-libs-4.15.8+git.500.d5910280cc7-150400.3.11.1 >  A bpp9|&%ڗr##*T>w2gERl.HtS T yTx<a,4=lQK14v{Q}t@玹Ud'%X) ԟqHx>E%¬nqZro& $`;e./⸰k^%],RgsY {m≧k<u9C@{O^Z5ΫwnNUw_K;B6eP #h+e2801a8dda5595fe19089de99c16bc7eaa200c214adced5beaff9586886a081da3c3c59ec2f96e7ab95be5584bc2e4d76e610efe Hbpp9|xΡ7)-fsA6)\r]~~:o{ԎB^\~>ir ~F%johyt͙v$Ty3S^pAnrAoƎTo~M/WP N)>WP".dą˥ =?uGs'fOf\˳r+Z!~+f0*M#5xPdά@+vsh$It~ל_{Bh9 ‿ᵏ'T>p@D?4d. < o# 9Ypv|&& `& & D&  &  & & B&8&H74(8,8849<4:M@>Q@R FRGR0&HR&IS`&XSYS\T<&]T&^WbWcX|dXeYfYlYuY&vY#wlL&xl&ym|z0Csamba-ad-dc-libs4.15.8+git.500.d5910280cc7150400.3.11.1Samba Active Directory Domain Controller librariesThis package contains the Active Directory-compatible Domain Controller libraries.bos390zp34'SUSE Linux Enterprise 15SUSE LLC GPL-3.0-or-laterhttps://www.suse.com/Development/Libraries/C and C++https://www.samba.org/linuxs390x h( wH`w8xgWG'W(WwW''ЁAAAAbnbnbnbnbnbnbnbnbnbnbnbnbnbnbnbnbnbnbnbnbnbnbnbnbnbnbnbnbnbnbnbnbnbnbnbnbnbnc399ae7f4e9c09f8996a0a06dc5d2b527b12a9782f9d8e27b4058819e1879143ec4a019ba85554607b851acb1d1b015d9db19b1168ef16302ea1d1df72e6a14b212fa42ca2a075d8cfd5fa5b17ea05786fff34f86ad64ad7c0541678010509c23f44801934c9d274e2f0095ed45d362cdf2d779ff2fb68d50d16cd0b3762050496c12b4dfd5f848a9c8a8b02974d354b725e1f5f78174c563b70d72de55c84563ba75d25c230c7f776672245c3f9d54f1f9c89a8b8218c701ee33dfcfe71a7b895c33fe83e5cd20f698f6770191a1213db93dca10b5bc796b4ff77a2537a4e283ebc87689202fb3d4a1b889f521d8c2fa4714ee9a4294bc04576c63a2951ffd619cb0bbf96d8e9603e335deef2d8c59058f040e10ea055142a7d30d5a0ee304502c63344a2477f926f64a8fdb0321e1405e06f5828b03899774c0def0e53575a1a42a9ca9255e7d6224329e1e6a6e33358ff6a203fd494f174408ba73eccab8bd3b2c92befda2a93b92a6c337bab8818d46c10a687559afa1eb3d65f807894a1f4d422d7bc688fdca352f0ecf1be855065e4e57796bb6d47970def677713817f21497a27f4500d8a13eb9e0bd475c9c74bb13f50703aa84d57c27e70d86416207acc9c1c0a5ce53a13b7c9775e65a076c87a07c12be8583bf15c2f4b84990d86f03778c3b2f225d1cd69a00058418402bd535271c04994837c23d3068a963f512bf00808345a1938e6a94c7500e77ae0cfb53b0303cc7f830afacf2875eb1b6d8efa2de99f9456ed7b81eb9f0376c4b8ba5a9175deb54eee76a9d5cc00cc2a6d727288e8551202fac9263eb1477519deda314582a79dbb1c94932a05ecc76a485e5c50627410baf60b758b95cdc7aa8c15841b9cf18346c7b690837e60e73dd2fdf8fd76a943c5b1bd10adf1a92c53e85a4beee46b59bd242e5161d0ed03bf835de8751abca3d3ffff93c6d9d26a5cf5c65ea3e5750ce61128c1ad8cd4708d166890087f528ca2f0cfb013ac55ac16dda4cffd62b140d407a7c3949a58a35a59d0a80643df489044ad50e5be800395be7ed958f9ecbef81bece3fa35f74e4619fc6406ad4cfe257a5735887d70ed707ba369bec44aaeffe94496fc11610fd55d93ab2f08fbbd9a07fb9f03a8a662067ea94ce222bc1c89f91f8a2957f7b85dae3e308dc956d889a76d11cd7b08ebb159ca3879bd136e9bda48277940afd2eae75c3d1dfe2890d99186ddfc02832997a1e2e069b1dfa8eb150a836adbe7a39907c350669b55a53ef562315965c1bedc619c6343564e146709445b335ef07499142d1012ac829f6df8bf0ee6b325e50aaba0bef89bab851800b766aad2c16f2345e7488da4c9772ad8c226407ce1c3c9e692a6e2b18a3a1a307126afbf350c4badf2e635a722641494b55ed654f05164d3117a52c27b1ce036f23b8b1b027dcf92c7703edc194aedf67975deb7b4effb98f3be5672e2263017a7e1ad629d910d54libdcerpc-server.so.0.0.1rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootsamba-4.15.8+git.500.d5910280cc7-150400.3.11.1.src.rpmlibdb-glue-samba4.so()(64bit)libdb-glue-samba4.so(SAMBA_4.15.8_GIT.500.D5910280CC7150400.3.11.1_SUSE_OS15.0_S390X)(64bit)libdcerpc-server.so.0()(64bit)libdcerpc-server.so.0(DCERPC_SERVER_0.0.1)(64bit)libdlz-bind9-for-torture-samba4.so()(64bit)libdlz-bind9-for-torture-samba4.so(SAMBA_4.15.8_GIT.500.D5910280CC7150400.3.11.1_SUSE_OS15.0_S390X)(64bit)libdsdb-garbage-collect-tombstones-samba4.so()(64bit)libdsdb-garbage-collect-tombstones-samba4.so(SAMBA_4.15.8_GIT.500.D5910280CC7150400.3.11.1_SUSE_OS15.0_S390X)(64bit)libdsdb-module-samba4.so()(64bit)libdsdb-module-samba4.so(SAMBA_4.15.8_GIT.500.D5910280CC7150400.3.11.1_SUSE_OS15.0_S390X)(64bit)libpac-samba4.so()(64bit)libpac-samba4.so(SAMBA_4.15.8_GIT.500.D5910280CC7150400.3.11.1_SUSE_OS15.0_S390X)(64bit)libprocess-model-samba4.so()(64bit)libprocess-model-samba4.so(SAMBA_4.15.8_GIT.500.D5910280CC7150400.3.11.1_SUSE_OS15.0_S390X)(64bit)libscavenge-dns-records-samba4.so()(64bit)libscavenge-dns-records-samba4.so(SAMBA_4.15.8_GIT.500.D5910280CC7150400.3.11.1_SUSE_OS15.0_S390X)(64bit)libservice-samba4.so()(64bit)libservice-samba4.so(SAMBA_4.15.8_GIT.500.D5910280CC7150400.3.11.1_SUSE_OS15.0_S390X)(64bit)samba-ad-dc-libssamba-ad-dc-libs(s390-64)@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    /sbin/ldconfig/sbin/ldconfiglibLIBWBCLIENT-OLD-samba4.so()(64bit)libLIBWBCLIENT-OLD-samba4.so(SAMBA_4.15.8_GIT.500.D5910280CC7150400.3.11.1_SUSE_OS15.0_S390X)(64bit)libMESSAGING-SEND-samba4.so()(64bit)libMESSAGING-SEND-samba4.so(SAMBA_4.15.8_GIT.500.D5910280CC7150400.3.11.1_SUSE_OS15.0_S390X)(64bit)libMESSAGING-samba4.so()(64bit)libMESSAGING-samba4.so(SAMBA_4.15.8_GIT.500.D5910280CC7150400.3.11.1_SUSE_OS15.0_S390X)(64bit)libasn1util-samba4.so()(64bit)libasn1util-samba4.so(SAMBA_4.15.8_GIT.500.D5910280CC7150400.3.11.1_SUSE_OS15.0_S390X)(64bit)libauth4-samba4.so()(64bit)libauth4-samba4.so(SAMBA_4.15.8_GIT.500.D5910280CC7150400.3.11.1_SUSE_OS15.0_S390X)(64bit)libauthkrb5-samba4.so()(64bit)libauthkrb5-samba4.so(SAMBA_4.15.8_GIT.500.D5910280CC7150400.3.11.1_SUSE_OS15.0_S390X)(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.2)(64bit)libc.so.6(GLIBC_2.4)(64bit)libc.so.6(GLIBC_2.7)(64bit)libc.so.6(GLIBC_2.8)(64bit)libcli-cldap-samba4.so()(64bit)libcli-cldap-samba4.so(SAMBA_4.15.8_GIT.500.D5910280CC7150400.3.11.1_SUSE_OS15.0_S390X)(64bit)libcli-ldap-common-samba4.so()(64bit)libcli-ldap-common-samba4.so(SAMBA_4.15.8_GIT.500.D5910280CC7150400.3.11.1_SUSE_OS15.0_S390X)(64bit)libcli-ldap-samba4.so()(64bit)libcli-ldap-samba4.so(SAMBA_4.15.8_GIT.500.D5910280CC7150400.3.11.1_SUSE_OS15.0_S390X)(64bit)libcli-nbt-samba4.so()(64bit)libcli-nbt-samba4.so(SAMBA_4.15.8_GIT.500.D5910280CC7150400.3.11.1_SUSE_OS15.0_S390X)(64bit)libcliauth-samba4.so()(64bit)libcliauth-samba4.so(SAMBA_4.15.8_GIT.500.D5910280CC7150400.3.11.1_SUSE_OS15.0_S390X)(64bit)libclidns-samba4.so()(64bit)libclidns-samba4.so(SAMBA_4.15.8_GIT.500.D5910280CC7150400.3.11.1_SUSE_OS15.0_S390X)(64bit)libcluster-samba4.so()(64bit)libcluster-samba4.so(SAMBA_4.15.8_GIT.500.D5910280CC7150400.3.11.1_SUSE_OS15.0_S390X)(64bit)libcom_err.so.2()(64bit)libcommon-auth-samba4.so()(64bit)libcommon-auth-samba4.so(SAMBA_4.15.8_GIT.500.D5910280CC7150400.3.11.1_SUSE_OS15.0_S390X)(64bit)libdb-glue-samba4.so()(64bit)libdb-glue-samba4.so(SAMBA_4.15.8_GIT.500.D5910280CC7150400.3.11.1_SUSE_OS15.0_S390X)(64bit)libdbwrap-samba4.so()(64bit)libdbwrap-samba4.so(SAMBA_4.15.8_GIT.500.D5910280CC7150400.3.11.1_SUSE_OS15.0_S390X)(64bit)libdcerpc-binding.so.0()(64bit)libdcerpc-binding.so.0(DCERPC_BINDING_0.0.1)(64bit)libdcerpc-samba-samba4.so()(64bit)libdcerpc-samba-samba4.so(SAMBA_4.15.8_GIT.500.D5910280CC7150400.3.11.1_SUSE_OS15.0_S390X)(64bit)libdcerpc-samba4.so()(64bit)libdcerpc-samba4.so(SAMBA_4.15.8_GIT.500.D5910280CC7150400.3.11.1_SUSE_OS15.0_S390X)(64bit)libdcerpc-server-core.so.0()(64bit)libdcerpc-server-core.so.0(DCERPC_SERVER_CORE_0.0.1)(64bit)libdcerpc-server.so.0()(64bit)libdcerpc-server.so.0(DCERPC_SERVER_0.0.1)(64bit)libdcerpc.so.0()(64bit)libdcerpc.so.0(DCERPC_0.0.1)(64bit)libdnsserver-common-samba4.so()(64bit)libdnsserver-common-samba4.so(SAMBA_4.15.8_GIT.500.D5910280CC7150400.3.11.1_SUSE_OS15.0_S390X)(64bit)libdsdb-garbage-collect-tombstones-samba4.so()(64bit)libdsdb-garbage-collect-tombstones-samba4.so(SAMBA_4.15.8_GIT.500.D5910280CC7150400.3.11.1_SUSE_OS15.0_S390X)(64bit)libdsdb-module-samba4.so()(64bit)libdsdb-module-samba4.so(SAMBA_4.15.8_GIT.500.D5910280CC7150400.3.11.1_SUSE_OS15.0_S390X)(64bit)libevents-samba4.so()(64bit)libevents-samba4.so(SAMBA_4.15.8_GIT.500.D5910280CC7150400.3.11.1_SUSE_OS15.0_S390X)(64bit)libflag-mapping-samba4.so()(64bit)libflag-mapping-samba4.so(SAMBA_4.15.8_GIT.500.D5910280CC7150400.3.11.1_SUSE_OS15.0_S390X)(64bit)libgenrand-samba4.so()(64bit)libgenrand-samba4.so(SAMBA_4.15.8_GIT.500.D5910280CC7150400.3.11.1_SUSE_OS15.0_S390X)(64bit)libgensec-samba4.so()(64bit)libgensec-samba4.so(SAMBA_4.15.8_GIT.500.D5910280CC7150400.3.11.1_SUSE_OS15.0_S390X)(64bit)libgnutls.so.30()(64bit)libgnutls.so.30(GNUTLS_3_4)(64bit)libgnutls.so.30(GNUTLS_3_6_3)(64bit)libk5crypto.so.3()(64bit)libk5crypto.so.3(k5crypto_3_MIT)(64bit)libkadm5srv_mit.so.12()(64bit)libkadm5srv_mit.so.12(kadm5srv_mit_12_MIT)(64bit)libkdb5.so.10()(64bit)libkdb5.so.10(kdb5_10_MIT)(64bit)libkrb5.so.3()(64bit)libkrb5.so.3(krb5_3_MIT)(64bit)libkrb5samba-samba4.so()(64bit)libkrb5samba-samba4.so(SAMBA_4.15.8_GIT.500.D5910280CC7150400.3.11.1_SUSE_OS15.0_S390X)(64bit)libldb.so.2()(64bit)libldb.so.2(LDB_0.9.10)(64bit)libldb.so.2(LDB_0.9.12)(64bit)libldb.so.2(LDB_0.9.15)(64bit)libldb.so.2(LDB_0.9.16)(64bit)libldb.so.2(LDB_0.9.19)(64bit)libldb.so.2(LDB_0.9.24)(64bit)libldb.so.2(LDB_1.5.1)(64bit)libldb.so.2(LDB_2.4.4)(64bit)libldbsamba-samba4.so()(64bit)libldbsamba-samba4.so(SAMBA_4.15.8_GIT.500.D5910280CC7150400.3.11.1_SUSE_OS15.0_S390X)(64bit)libmessages-dgm-samba4.so()(64bit)libmessages-dgm-samba4.so(SAMBA_4.15.8_GIT.500.D5910280CC7150400.3.11.1_SUSE_OS15.0_S390X)(64bit)libndr-krb5pac.so.0()(64bit)libndr-krb5pac.so.0(NDR_KRB5PAC_0.0.1)(64bit)libndr-nbt.so.0()(64bit)libndr-nbt.so.0(NDR_NBT_0.0.1)(64bit)libndr-samba-samba4.so()(64bit)libndr-samba-samba4.so(SAMBA_4.15.8_GIT.500.D5910280CC7150400.3.11.1_SUSE_OS15.0_S390X)(64bit)libndr-samba4.so()(64bit)libndr-samba4.so(SAMBA_4.15.8_GIT.500.D5910280CC7150400.3.11.1_SUSE_OS15.0_S390X)(64bit)libndr-standard.so.0()(64bit)libndr-standard.so.0(NDR_STANDARD_0.0.1)(64bit)libndr.so.2()(64bit)libndr.so.2(NDR_0.0.1)(64bit)libndr.so.2(NDR_0.0.2)(64bit)libndr.so.2(NDR_0.0.4)(64bit)libndr.so.2(NDR_0.0.7)(64bit)libndr.so.2(NDR_0.0.8)(64bit)libndr.so.2(NDR_0.2.0)(64bit)libnetif-samba4.so()(64bit)libnetif-samba4.so(SAMBA_4.15.8_GIT.500.D5910280CC7150400.3.11.1_SUSE_OS15.0_S390X)(64bit)libnpa-tstream-samba4.so()(64bit)libnpa-tstream-samba4.so(SAMBA_4.15.8_GIT.500.D5910280CC7150400.3.11.1_SUSE_OS15.0_S390X)(64bit)libpac-samba4.so()(64bit)libpac-samba4.so(SAMBA_4.15.8_GIT.500.D5910280CC7150400.3.11.1_SUSE_OS15.0_S390X)(64bit)libpopt.so.0()(64bit)libpopt.so.0(LIBPOPT_0)(64bit)libprocess-model-samba4.so()(64bit)libprocess-model-samba4.so(SAMBA_4.15.8_GIT.500.D5910280CC7150400.3.11.1_SUSE_OS15.0_S390X)(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.2)(64bit)libreplace-samba4.so()(64bit)libreplace-samba4.so(SAMBA_4.15.8_GIT.500.D5910280CC7150400.3.11.1_SUSE_OS15.0_S390X)(64bit)libsamba-credentials.so.1()(64bit)libsamba-credentials.so.1(SAMBA_CREDENTIALS_1.0.0)(64bit)libsamba-debug-samba4.so()(64bit)libsamba-debug-samba4.so(SAMBA_4.15.8_GIT.500.D5910280CC7150400.3.11.1_SUSE_OS15.0_S390X)(64bit)libsamba-errors.so.1()(64bit)libsamba-errors.so.1(SAMBA_ERRORS_1)(64bit)libsamba-hostconfig.so.0()(64bit)libsamba-hostconfig.so.0(SAMBA_HOSTCONFIG_0.0.1)(64bit)libsamba-modules-samba4.so()(64bit)libsamba-modules-samba4.so(SAMBA_4.15.8_GIT.500.D5910280CC7150400.3.11.1_SUSE_OS15.0_S390X)(64bit)libsamba-passdb.so.0()(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.2.0)(64bit)libsamba-security-samba4.so()(64bit)libsamba-security-samba4.so(SAMBA_4.15.8_GIT.500.D5910280CC7150400.3.11.1_SUSE_OS15.0_S390X)(64bit)libsamba-sockets-samba4.so()(64bit)libsamba-sockets-samba4.so(SAMBA_4.15.8_GIT.500.D5910280CC7150400.3.11.1_SUSE_OS15.0_S390X)(64bit)libsamba-util.so.0()(64bit)libsamba-util.so.0(SAMBA_UTIL_0.0.1)(64bit)libsamdb-common-samba4.so()(64bit)libsamdb-common-samba4.so(SAMBA_4.15.8_GIT.500.D5910280CC7150400.3.11.1_SUSE_OS15.0_S390X)(64bit)libsamdb.so.0()(64bit)libsamdb.so.0(SAMDB_0.0.1)(64bit)libscavenge-dns-records-samba4.so()(64bit)libscavenge-dns-records-samba4.so(SAMBA_4.15.8_GIT.500.D5910280CC7150400.3.11.1_SUSE_OS15.0_S390X)(64bit)libsecrets3-samba4.so()(64bit)libsecrets3-samba4.so(SAMBA_4.15.8_GIT.500.D5910280CC7150400.3.11.1_SUSE_OS15.0_S390X)(64bit)libservice-samba4.so()(64bit)libservice-samba4.so(SAMBA_4.15.8_GIT.500.D5910280CC7150400.3.11.1_SUSE_OS15.0_S390X)(64bit)libsmbconf.so.0()(64bit)libsmbconf.so.0(SMBCONF_0.0.1)(64bit)libsocket-blocking-samba4.so()(64bit)libsocket-blocking-samba4.so(SAMBA_4.15.8_GIT.500.D5910280CC7150400.3.11.1_SUSE_OS15.0_S390X)(64bit)libtalloc.so.2()(64bit)libtalloc.so.2(TALLOC_2.0.2)(64bit)libtevent-util.so.0()(64bit)libtevent-util.so.0(TEVENT_UTIL_0.0.1)(64bit)libtevent.so.0()(64bit)libtevent.so.0(TEVENT_0.9.12)(64bit)libtevent.so.0(TEVENT_0.9.13)(64bit)libtevent.so.0(TEVENT_0.9.16)(64bit)libtevent.so.0(TEVENT_0.9.9)(64bit)libtime-basic-samba4.so()(64bit)libtime-basic-samba4.so(SAMBA_4.15.8_GIT.500.D5910280CC7150400.3.11.1_SUSE_OS15.0_S390X)(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)samba-client-libssamba-libs3.0.4-14.6.0-14.0-15.2-14.15.8+git.500.d5910280cc74.15.8+git.500.d5910280cc74.14.3b@b@ba@banopower@suse.comscabrero@suse.denopower@suse.comscabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comddiss@suse.comnopower@suse.comdmulder@suse.comdmulder@suse.comnopower@suse.comscabrero@suse.descabrero@suse.dedimstar@opensuse.orgscabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comnopower@suse.comnopower@suse.comscabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comnopower@suse.comscabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.denopower@suse.comscabrero@suse.deddiss@suse.comddiss@suse.comddiss@suse.comscabrero@suse.descabrero@suse.dedmulder@suse.comnopower@suse.comscabrero@suse.descabrero@suse.dedmulder@suse.comscabrero@suse.descabrero@suse.denopower@suse.comnopower@suse.comnopower@suse.comdmulder@suse.comscabrero@suse.denopower@suse.comddiss@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comscabrero@suse.denopower@suse.comnopower@suse.comjmcdonough@suse.comnopower@suse.comscabrero@suse.denopower@suse.comnopower@suse.comddiss@suse.comddiss@suse.comnopower@suse.comnopower@suse.comddiss@suse.comnopower@suse.comdmulder@suse.comdmulder@suse.comddiss@suse.comscabrero@suse.dedmulder@suse.comddiss@suse.comnopower@suse.comjengelh@inai.dedmulder@suse.comscabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comdmulder@suse.comdmulder@suse.comjmcdonough@suse.comdmulder@suse.comscabrero@suse.dedmulder@suse.comscabrero@suse.dedmulder@suse.comdmulder@suse.comvcizek@suse.comdmulder@suse.comdmulder@suse.comnopower@suse.comscabrero@suse.dejmcdonough@suse.comscabrero@suse.deaaptel@suse.comjengelh@inai.dedimstar@opensuse.orgdmulder@suse.comjmcdonough@suse.comdavid.mulder@suse.comjmcdonough@suse.comaaptel@suse.comdmulder@suse.comscabrero@suse.comscabrero@suse.comkukuk@suse.dedavid.mulder@suse.comscabrero@suse.comrbrown@suse.comdmulder@suse.comscabrero@suse.comdimstar@opensuse.orgscabrero@suse.comaaptel@suse.comnopower@suse.comnopower@suse.comaaptel@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comddiss@suse.comnopower@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comdmulder@suse.comnopower@suse.comjmcdonough@suse.comaaptel@suse.comkukuk@suse.comkukuk@suse.denopower@suse.comaaptel@suse.comdmulder@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comddiss@suse.comjmcdonough@suse.comddiss@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comjmcdonough@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comtchvatal@suse.comlmuelle@suse.comnopower@suse.comcrrodriguez@opensuse.orglmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comnoel.power@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comnopower@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.commpluskal@suse.comlmuelle@suse.comnopower@suse.deddiss@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.denopower@suse.delmuelle@suse.comnopower@suse.deddiss@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.com- CVE-2022-32746: samba: Use-after-free occurring in database audit logging; (bso#15009); (bso#15096); (bsc#1201490). - CVE-2022-32745: samba: ldb: AD users can crash the server process with an LDAP add or modify request; (bso#15008); (bso#15096); (bsc#1201492). - CVE-2022-2031: samba, ldb: AD users can bypass certain restrictions associated with changing passwords; (bso#15047); (bsc#1201495); - CVE-2022-32742:SMB1 code does not correct verify SMB1write, SMB1write_and_close, SMB1write_and_unlock lengths; (bso#15085); (bsc#1201496). - CVE-2022-32744: samba, ldb: AD users can forge password change requests for any user; (bso#15074); (bso#15047); (bsc#1201493).- Update to 4.15.8 * Use pathref fd instead of io fd in vfs_default_durable_cookie; (bso#15042); * Setting fruit:resource = stream in vfs_fruit causes a panic; (bso#15099); * Add support for bind 9.18; (bso#14986); * logging dsdb audit to specific files does not work; (bso#15076); * vfs_gpfs with vfs_shadowcopy2 fail to restore file if original file had been deleted; (bso#15069); * netgroups support removed; (bso#15087); (bsc#1199247); * net ads info shows LDAP Server: 0.0.0.0 depending on contacted server; (bso#14674); (bsc#1199734); * waf produces incorrect names for python extensions with Python 3.11; (bso#15071); * smbclient commands del & deltree fail with NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100); (bsc#1200556); * vfs_gpfs recalls=no option prevents listing files; (bso#15055); * waf produces incorrect names for python extensions with Python 3.11; (bso#15071); * Compile error in source3/utils/regedit_hexedit.c; (bso#15091); * ldconfig: /lib64/libsmbconf.so.0 is not a symbolic link; (bso#15108); * smbd doesn't handle UPNs for looking up names; (bso#15054); * Out-by-4 error in smbd read reply max_send clamp; (bso#14443); - Move pdb backends from package samba-libs to package samba-client-libs and remove samba-libs requirement from samba-winbind; (bsc#1200964); (bsc#1198255); - Use the canonical realm name to refresh the Kerberos tickets; (bsc#1196224); (bso#14979);- Fix smbclient commands del & deltree failing with NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100); (bsc#1200556).- Revert NIS support removal; (bsc#1199247);- Use requires_eq macro to require the libldb2 version available at samba-dsdb-modules build time; (bsc#1199362);- Add missing samba-client requirement to samba-winbind package; (bsc#1198255);- Update to 4.15.7 * Share and server swapped in smbget password prompt; (bso#14831); * Durable handles won't reconnect if the leased file is written to; (bso#15022); * rmdir silently fails if directory contains unreadable files and hide unreadable is yes; (bso#15023); * SMB2_CLOSE_FLAGS_FULL_INFORMATION fails to return information on renamed file handle; (bso#15038); * vfs_shadow_copy2 breaks "smbd async dosmode" sync fallback; (bso#14957); * shadow_copy2 fails listing snapshotted dirs with shadow:fixinodes; (bso#15035); * PAM Kerberos authentication incorrectly fails with a clock skew error; (bso#15046); * username map - samba erroneously applies unix group memberships to user account entries; (bso#15041); * NT_STATUS_ACCESS_DENIED translates into EPERM instead of EACCES in SMBC_server_internal; (bso#14983); * Simple bind doesn't work against an RODC (with non-preloaded users); (bso#13879); * Crash of winbind on RODC; (bso#14641); * uncached logon on RODC always fails once; (bso#14865); * KVNO off by 100000; (bso#14951); * LDAP simple binds should honour "old password allowed period"; (bso#15001); * wbinfo -a doesn't work reliable with upn names; (bso#15003); * Simple bind doesn't work against an RODC (with non-preloaded users); (bso#13879); * Uninitialized litemask in variable in vfs_gpfs module; (bso#15027); * Regression: create krb5 conf = yes doesn't work with a single KDC; (bso#15016);- Add provides to samba-client-libs package to fix upgrades from previous versions; (bsc#1197995);- Add missing samba-libs requirement to samba-winbind package; (bsc#1198255);- Update to 4.15.6 * Renaming file on DFS root fails with NT_STATUS_OBJECT_PATH_NOT_FOUND; (bso#14169); * Samba does not response STATUS_INVALID_PARAMETER when opening 2 objects with same lease key; (bso#14737); * NT error code is not set when overwriting a file during rename in libsmbclient; (bso#14938); * Fix ldap simple bind with TLS auditing; (bso#14996); * net ads info shows LDAP Server: 0.0.0.0 depending on contacted server; (bso#14674); * Problem when winbind renews Kerberos; (bso#14979); (bsc#1196224); * pam_winbind will not allow gdm login if password about to expire; (bso#8691); * virusfilter_vfs_openat: Not scanned: Directory or special file; (bso#14971); * DFS fix for AIX broken; (bso#13631); * Solaris and AIX acl modules: wrong function arguments; (bso#14974); * Function aixacl_sys_acl_get_file not declared / coredump; (bso#7239); * Regression: Samba 4.15.2 on macOS segfaults intermittently during strcpy in tdbsam_getsampwnam; (bso#14900); * Fix a use-after-free in SMB1 server; (bso#14989); * smb2_signing_decrypt_pdu() may not decrypt with gnutls_aead_cipher_decrypt() from gnutls before 3.5.2; (bso#14968); * Changing the machine password against an RODC likely destroys the domain join; (bso#14984); * authsam_make_user_info_dc() steals memory from its struct ldb_message *msg argument; (bso#14993); * Use Heimdal 8.0 (pre) rather than an earlier snapshot; (bso#14995); * Samba autorid fails to map AD users if id rangesize fits in the id range only once; (bso#14967);- Fix mismatched version of libldb2; (bsc#1196788). - Drop obsolete SuSEfirewall2 service files.- Drop obsolete Samba fsrvp v0->v1 state upgrade functionality; (bsc#1080338).- Fix ntlm authentications with "winbind use default domain = yes"; (bso#13126); (bsc#1173429); (bsc#1196308).- Fix samba-ad-dc status warning notification message by disabling systemd notifications in bgqd; (bsc#1195896); (bso#14947).- libldb version mismatch in Samba dsdb component; (bsc#1118508);- Update to 4.15.5 * CVE-2021-44141: UNIX extensions in SMB1 disclose whether the outside target of a symlink exists; (bso#14911); (bsc#1193690). * CVE-2021-44142: Out-of-Bound Read/Write on Samba vfs_fruit module; (bso#14914); (bsc#1194859). * CVE-2022-0336: Re-adding an SPN skips subsequent SPN conflict checks; bso#14950); (bsc#1195048).- CVE-2021-44141: Information leak via symlinks of existance of files or directories outside of the exported share; (bso#14911); (bsc#1193690); - CVE-2021-44142: Out-of-bounds heap read/write vulnerability in VFS module vfs_fruit allows code execution; (bso#14914); (bsc#1194859); - CVE-2022-0336: Samba AD users with permission to write to an account can impersonate arbitrary services; (bso#14950); (bsc#1195048);- Update to 4.15.4 * Duplicate SMB file_ids leading to Windows client cache poisoning; (bso#14928); * Failed to parse NTLMv2_RESPONSE length 95 - Buffer Size Error - NT_STATUS_BUFFER_TOO_SMALL; (bso#14932); * kill_tcp_connections does not work; (bso#14934); * Can't connect to Windows shares not requiring authentication using KDE/Gnome; (bso#14935); * smbclient -L doesn't set "client max protocol" to NT1 before calling the "Reconnecting with SMB1 for workgroup listing" path; (bso#14939); * Cross device copy of the crossrename module always fails; (bso#14940); * symlinkat function from VFS cap module always fails with an error; (bso#14941); * Fix possible fsp pointer deference; (bso#14942); * Missing pop_sec_ctx() in error path inside close_directory(); (bso#14944); * "smbd --build-options" no longer works without an smb.conf file; (bso#14945);- Use pkgconfig(krb5) as dependency for the -devel package: allow OBS to pick the right flavor of krb5-devel (full vs mini). - Do not require the 'krb5' symbol by samba-client-libs: this package has an automatic dependency due to linkage on libgssapi_krb5.so.2. Automatic deps are always better. - Do not require the 'krb5' symbol from samba-libs: samba-libs requires samba-client-libs, which in turn requires krb5 libraries. Samba-libs itself has no need for krb5 (but get it indirectly anyway).- Reorganize libs packages. Split samba-libs into samba-client-libs, samba-libs, samba-winbind-libs and samba-ad-dc-libs, merging samba public libraries depending on internal samba libraries into these packages as there were dependency problems everytime one of these public libraries changed its version (bsc#1192684). The devel packages are merged into samba-devel. - Rename package samba-core-devel to samba-devel - Add python-rpm-macros to build requirements - Update the symlink create by samba-dsdb-modules to private samba ldb modules following libldb2 changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba- Update to 4.15.3 * Recursive directory delete with veto files is broken in 4.15.0; (bso#14878); * A directory containing dangling symlinks cannot be deleted by SMB2 alone when they are the only entry in the directory; (bso#14879); * SIGSEGV in rmdir_internals/synthetic_pathref - dirfsp is used uninitialized in rmdir_internals(); (bso#14892); * MaxQueryDuration not honoured in Samba AD DC LDAP; (bso#14694); * The CVE-2020-25717 username map [script] advice has undesired side effects for the local nt token; (bso#14901); (bsc#1192849); * User with multiple spaces (eg FredNurk) become un-deletable; (bso#14902); * Avoid storing NTTIME_THAW (-2) as value on disk; (bso#14127); * smbXsrv_client_global record validation leads to crash if existing record points at non-existing process; (bso#14882); * Crash in vfs_fruit asking for fsp_get_io_fd() for an XATTR call; (bso#14890); * Samba process doesn't log to logfile; (bso#14897); * set_ea_dos_attribute() fallback calling get_file_handle_for_metadata() triggers locking.tdb assert; (bso#14907); * Kerberos authentication on standalone server in MIT realm broken; (bso#14922); * Segmentation fault when joining the domain; (bso#14923); * Support for ROLE_IPA_DC is incomplete; (bso#14903); * rpcclient cannot connect to ncacn_ip_tcp services anymore; (bso#14767); * winexe crashes since 4.15.0 after popt parsing; (bso#14893); * net ads status -P broken in a clustered environment; (bso#14908); * Memory leak if ioctl(FSCTL_VALIDATE_NEGOTIATE_INFO) fails before smbd_smb2_ioctl_send; (bso#14788); * winbindd doesn't start when "allow trusted domains" is off; (bso#14899); * smbclient login without password using '-N' fails with NT_STATUS_INVALID_PARAMETER on Samba AD DC; (bso#14883); * A schannel client incorrectly detects a downgrade connecting to an AES only server; (bso#14912); * Possible null pointer dereference in winbind; (bso#14921); * Fix -k legacy option for client tools like smbclient, rpcclient, net, etc.; (bso#14846); * Add Debian 11 CI bootstrap support; (bso#14872); * Crash in recycle_unlink_internal(); (bso#14888);- Fix dependency problem upgrading from libndr0 to libndr2 and from libsamba-credentials0 to libsamba-credentials1; (bsc#1192684);- Fix regression introduced by CVE-2020-25717 patches, winbindd does not start when 'allow trusted domains' is off; (bso#14899); - Update to 4.15.2 * CVE-2016-2124: SMB1 client connections can be downgraded to plaintext authentication; (bso#12444); (bsc#1014440); * CVE-2020-25717: A user on the domain can become root on domain members; (bso#14556); (bsc#1192284); * CVE-2020-25718: Samba AD DC did not correctly sandbox Kerberos tickets issued by an RODC; (bso#14558); (bsc#1192246); * CVE-2020-25719: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets; (bso#14561); (bsc#1192247); * CVE-2020-25721: Kerberos acceptors need easy access to stable AD identifiers (eg objectSid); (bso#14557); (bsc#1192505); * CVE-2020-25722: Samba AD DC did not do suffienct access and conformance checking of data stored; (bso#14564); (bsc#1192283); * CVE-2021-3738: Use after free in Samba AD DC RPC server; (bso#14468); (bsc#1192215); * CVE-2021-23192: Subsequent DCE/RPC fragment injection vulnerability; (bso#14875); (bsc#1192214); - Update to 4.15.1 * vfs_shadow_copy2: core dump in make_relative_path; (bso#14682); * Log clutter from filename_convert_internal; (bso#14685); * MacOSX compilation fixes; (bso#14862); * rodc_rwdc test flaps; (bso#14868); * Provide a fix for MS CVE-2020-17049 in Samba [SECURITY] 'Bronze bit' S4U2Proxy Constrained Delegation bypass in Samba with embedded Heimdal; (bso#14642); * Python ldb.msg_diff() memory handling failure; (bso#14836); * "in" operator on ldb.Message is case sensitive; (bso#14845); * Release LDB 2.4.1 for Samba 4.15.1; (bso#14848); * samldb_krbtgtnumber_available() looks for incorrect string; (bso#14854); * Fix Samba support for UF_NO_AUTH_DATA_REQUIRED; (bso#14871); * Allow special chars like "@" in samAccountName when generating the salt; (bso#14874); * Correctly ignore comments in CTDB public addresses file; (bso#14826); * Fix transit path validation; (bso#12998); * Fix that child winbindd logs to log.winbindd instead of log.wb-; (bso#14852); * SMB3 cancel requests should only include the MID together with AsyncID when AES-128-GMAC is used; (bso#14855); * Prepare to operate with MIT krb5 >= 1.20; (bso#14870); * Heimdal prefers RC4 over AES for machine accounts; (bso#14864);- Enable samba-tool without ad dc.- Adjust spec to use pam macros; (bsc#1191046).- Adjust spec for size * allow some Recommends instead Requires to be configured for cifs-utils, samba-libs-python3 & samba-gpupdate; (bsc#1182847). * remove fam, undocumented and unneeded.- Add missing build dependency on bison when building with the embedded Heimdal Kerberos- Update to 4.15.0 * Removed SMB development dialects SMB2_22, SMB2_24 and SMB3_10 * VFS layer modernized. * Add the ability to set allow/deny lists for zone transfer clients in Bind DLZ plugin * Server multi-channel support no longer experimental * Improved command line user experience, unifying the options in different commands * Winbindd no longer scans trusted domains on startup and will use enterprise principals by default. * The net utility is now able to support the offline domain join feature * New options for 'samba-tool dns zoneoptions' for aging control and to mark old records as static or dynamic * DNS tombstones are now deleted as appropriate and use a consistent timestamp format * The 'samba-tool dns update' command validates and rejects now malformed IPv4 and IPv6 addresses * The 'samba-tool domain backup' command correctly takes out locks against concurrent modification during backup when using the LMDB backend * TruACL support has been removed * NIS support has been removed- Fix 'net rpc' authentication when using the machine account; (bsc#1189017); (bso#14796);- Fix dependency problem upgrading from libndr0 to libndr1; (bsc#1189875); - Fix dependency problem upgrading from libsmbldap0 to libsmbldap2; (bsc#1189875); - Fix wrong kvno exported to keytab after net ads changetrustpw due to replication delay; (bsc#1188727); - Add Certificate Auto Enrollment Policy; (jsc#SLE-18456). - Update to 4.13.10 * s3: smbd: Ensure POSIX default ACL is mapped into returned Windows ACL for directory handles; (bso#14708); * Take a copy to make sure we don't reference free'd memory; (bso#14721); * s3: lib: Fix talloc heirarcy error in parent_smb_fname(); (bso#14722); * s3: smbd: Remove erroneous TALLOC_FREE(smb_fname_parent) in change_file_owner_to_parent() error path; (bso#14736); * samba-tool: Give better error information when the 'domain backup restore' fails with a duplicate SID; (bso#14575); * smbd: Correctly initialize close timestamp fields; (bso#14714); * Spotlight RPC service doesn't work with vfs_glusterfs; (bso#14740); * ctdb: Fix a crash in run_proc_signal_handler(); (bso#14475); * gensec_krb5: Restore ipv6 support for kpasswd; (bso#14750); * smbXsrv_{open,session,tcon}: Protect smbXsrv_{open,session,tcon}_global_traverse_fn against invalid records; (bso#14752); * samba-tool domain backup offline doesn't work against bind DLZ backend; (bso#14027); * netcmd: Use next_free_rid() function to calculate a SID for restoring a backup; (bso#14669); - Update to 4.13.9 * s3: smbd: SMB1 SMBsplwr doesn't send a reply packet on success; (bso#14696); * Add documentation for dsdb_group_audit and dsdb_group_json_audit to "log level", synchronise "log level" in smb.conf with the code; (bso#14689); * Fix smbd panic when two clients open same file; (bso#14672); * Fix memory leak in the RPC server; (bso#14675); * s3: smbd: Fix deferred renames; (bso#14679); * s3-iremotewinspool: Set the per-request memory context; (bso#14675); * rpc_server3: Fix a memleak for internal pipes; (bso#14675); * third_party: Update socket_wrapper to version 1.3.2; (bso#11899); * third_party: Update socket_wrapper to version 1.3.3; (bso#14639); * idmap_rfc2307 and idmap_nss return wrong mapping for uid/gid conflict; (bso#14663); * Fix the build on OmniOS; (bso#14288); - Update to 4.13.8 * CVE-2021-20254: Fix buffer overrun in sids_to_unixids(); (bso#14571 - Update to 4.13.7 * Release with dependency on ldb version 2.2.1.- CVE-2021-20254 Buffer overrun in sids_to_unixids(); (bnc#14571); (bsc#1184677).- Fix offline domain backup not possible using lmdb version >= 0.9.26; (bso#14676); - Require libldb >= 2.2.1; (bsc#1183572); (bsc#1183574); - Update to 4.13.6 * CVE-2020-27840: samba: Unauthenticated remote heap corruption via bad DNs; (bso#14595); (bsc#1183572). * CVE-2021-20277: samba: out of bounds read in ldb_handler_fold; (bso#14655); (bsc#1183574). - Update to 4.13.5 * s3:modules:vfs_virusfilter: Recent talloc changes cause infinite start-up failure; (bso#14634); * s3: libsmb: Add missing cli_tdis() in error path if encryption setup failed on temp proxy connection; (bso#13992); * smbd: In conn_force_tdis_done() when forcing a connection closed force a full reload of services; (bso#14604); * dbcheck: Check Deleted Objects and reduce noise in reports about expired tombstones (bso#14593); * s3: Fix fcntl waf configure check; (bso#14503); * s3/auth: Implement "winbind:ignore domains"; (bso#14602); * smbd: Use fsp->conn->session_info for the initial delete-on-close token; (bso#14617); * s3: VFS: nfs4_acls. Add missing TALLOC_FREE(frame) in error path; (bso#14648); * classicupgrade: Treat old never expires value right; (bso#14624); * g_lock: Fix uninitalized variable reads; (bso#14636); * s3:pysmbd: Fix fd leak in py_smbd_create_file(); (bso#13898); * lib:util: Avoid free'ing our own pointer; (bso#14625); * HEIMDAL: krb5_storage_free(NULL) should work; (bso#12505);- Spec file fixes around systemd and requires; (bsc#1182830); - Align systemd service unit files with upstream provided ones.- Update to 4.13.4 * Work around special SMB2 IOCTL response behavior of NetApp Ontap 7.3.7; (bso#14607); * Temporary DFS share setup doesn't set case parameters in the same way as a regular share definition does; (bso#14612); * lib: Avoid declaring zero-length VLAs in various messaging functions; (bso#14605); * Do not create an empty DB when accessing a sam.ldb; (bso#14579); * vfs_fruit may close wrong backend fd; (bso#14596); * Temporary DFS share setup doesn't set case parameters in the same way as a regular share definition does; (bso#14612); * vfs_virusfilter: Allocate separate memory for config char*; (bso#14606); * vfs_fruit may close wrong backend fd; (bso#14596); * Work around special SMB2 IOCTL response behavior of NetApp Ontap 7.3.7; (bso#14607); * The cache directory for the user gencache should be created recursively; (bso#14601); * Be more flexible with repository names in CentOS 8 test environments; (bso#14594);- Uninstalling samba-client: Failed to disable unit, cifs.service does not exists; (bsc#1180388);- Update to 4.13.3 + libcli: smb2: Never print length if smb2_signing_key_valid() fails for crypto blob; (bso#14210); + s3: modules: gluster. Fix the error I made in preventing talloc leaks from a function; (bso#14486); + s3: smbd: Don't overwrite contents of fsp->aio_requests[0] with NULL via TALLOC_FREE(); (bso#14515); + s3: spoolss: Make parameters in call to user_ok_token() match all other uses; (bso#14568); + s3: smbd: Quiet log messages from usershares for an unknown share; (bso#14590); + samba process does not honor max log size; (bso#14248); + vfs_zfsacl: Add missing inherited flag on hidden "magic" everyone@ ACE; (bso#14587); + s3-libads: Pass timeout to open_socket_out in ms; (bso#13124); + s3-vfs_glusterfs: Always disable write-behind translator; (bso#14486); + smbclient: Fix recursive mget; (bso#14517); + clitar: Use do_list()'s recursion in clitar.c; (bso#14581); + manpages/vfs_glusterfs: Mention silent skipping of write-behind translator; (bso#14486); + vfs_shadow_copy2: Preserve all open flags assuming ROFS; (bso#14573); + interface: Fix if_index is not parsed correctly; (bso#14514);- Update to 4.13.2 + s3: modules: vfs_glusterfs: Fix leak of char **lines onto mem_ctx on return; (bso#14486); + RN: vfs_zfsacl: Only grant DELETE_CHILD if ACL tag is special; (bso#14471); + smb.conf.5: Add clarification how configuration changes reflected by Samba; (bso#14538); + daemons: Report status to systemd even when running in foreground; (bso#14552); + DNS Resolver: Support both dnspython before and after 2.0.0; (bso#14553); + s3-vfs_glusterfs: Refuse connection when write-behind xlator is present; (bso#14486); + provision: Add support for BIND 9.16.x; (bso#14487); + ctdb-common: Avoid aliasing errors during code optimization; (bso#14537); + libndr: Avoid assigning duplicate versions to symbols; (bso#14541); + docs: Fix default value of spoolss:architecture; (bso#14522); + winbind: Fix a memleak; (bso#14388); + s4:dsdb:acl_read: Implement "List Object" mode feature; (bso#14531); + docs-xml/manpages: Add warning about write-behind translator for vfs_glusterfs; (bso#14486); + nsswitch/nsstest.c: Avoid nss function conflicts with glibc nss.h. + vfs_shadow_copy2: Avoid closing snapsdir twice; (bso#14530); + third_party: Update resolv_wrapper to version 1.1.7; (bso#14547); + examples:auth: Do not install example plugin; (bso#14550); + ctdb-recoverd: Drop unnecessary and broken code; (bso#14513); + RN: vfs_zfsacl: Only grant DELETE_CHILD if ACL tag is special; (bso#14471);- Adjust smbcacls '--propagate-inheritance' feature to align with upstream; (bsc#1178469).- Update to samba 4.13.1 + CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with easily crafted records; (bsc#1177613); (bso#14472); + CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994); (bso#14436); + CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify; (bsc#1173902); (bso#14434); - Adjust systemd tmpfiles.d configuration, use /run/samba instead of /var/run/samba; (bsc#1177355);- Fix vfs_ceph query_directory regression; (bso#14519) - Drop liburing-devel for SLE15-SP2; (bsc#1177245)- Register CTDB recovery lock holder with ceph-mgr - Add liburing-devel dependency- Update to samba 4.13.0 + Require Python 3.6 + Move wide links functionality into VFS module + Deprecate NT4-like 'classic' Samba domain controllers + Deprecate SMBv1 only protocol options + Remove deprecated "ldap ssl ads" option + Unify asynchronous DCE-RPC server; (jsc#SES-645) + Replay multichannel lease break requests; (bso#11897); (jsc#SES-655) + Drop internal byteorder.h header from util-devel package + Remove final code for the AD DC LDAP backend + Add AD DC Group Policy Scripts + Only use gnutls_aead_cipher_encryptv2() for GnuTLS > 3.6.14; (bso#14399) + Fix %U substitutions if it contains a domain name; (bso#14467) + Fix krb5.conf creation for 'net ads join'; (bso#14479) + Fix build problem if libbsd-dev is not installed; (bso#14482) + Toggle vfs_snapper using "--with-shared-modules"; (bso#14437) + Fix idmap_ad RFC4511 response handling; (bso#14465) + Fix panic in get_lease_type(); (bso#14428)- Update to samba 4.11.13 + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2 against unencrypted passwords; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Support "server require schannel:WORKSTATION$ = no" about unsecure configurations; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): s4 torture rpc: repeated bytes in client challenge; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): libcli/auth: Reject weak client challenges in netlogon_creds_server_init() "server require schannel:WORKSTATION$ = no"; (bsc#1176579); (bso#14497); - Update to samba 4.11.12 + s3: libsmb: Fix SMB2 client rename bug to a Windows server; (bso#14403); + dsdb: Allow "password hash userPassword schemes = CryptSHA256" to work on RHEL7; (bso#14424); + dbcheck: Allow a dangling forward link outside our known NCs; (bso#14450); + lib/debug: Set the correct default backend loglevel to MAX_DEBUG_LEVEL; (bso#14426); + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428); + lib/util: do not install "test_util_paths"; (bso#14370); + lib:util: Fix smbclient -l basename dir; (bso#14345); + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428); + util: Allow symlinks in directory_create_or_exist; (bso#14166); + docs: Fix documentation for require_membership_of of pam_winbind; (bso#14358); + s3:winbind:idmap_ad: Make failure to get attrnames for schema mode fatal; (bso#14425);- Add obsoletes to libsmbldap2 package to fix upgrades from previous versions; (bsc#1172810);- Fix net command unable to negotiate SMB2; (bsc#1174120);- Update to samba 4.11.11 + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ and VLV combined; (bso#14364); (bsc#1173159] + CVE-2020-10745: invalid DNS or NBT queries containing dots use several seconds of CPU each; (bso#14378); (bsc#1173160). + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP server with paged_result or VLV; (bso#14402); (bsc#1173161) + CVE-2020-14303: Endless loop from empty UDP packet sent to AD DC nbt_server; (bso#14417); (bsc#1173359). - Update to samba 4.11.10 + Fix segfault when using SMBC_opendir_ctx() routine for share folder that contains incorrect symbols in any file name; (bso#14374). + vfs_shadow_copy2 doesn't fail case looking in snapdirseverywhere mode; (bso#14350) + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr; (bso#14413). + Malicous SMB1 server can crash libsmbclient; (bso#14366) + winbindd: Fix a use-after-free when winbind clients exit; (bso#14382) + ldb: Bump version to 2.0.11, LMDB databases can grow without bounds. (bso#14330) - Update to samba 4.11.9 + nmblib: Avoid undefined behaviour in handle_name_ptrs(); (bso#14242). + 'samba-tool group' commands do not handle group names with special chars correctly; (bso#14296). + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo is not valid; (bso#14237). + Missing check for DMAPI offline status in async DOS attributes; (bso#14293). + smbd: Ignore set NTACL requests which contain S-1-5-88 NFS ACEs; (bso#14307). + vfs_recycle: Prevent flooding the log if we're called on non-existant paths; (bso#14316) + smbd mistakenly updates a file's write-time on close; (bso#14320). + RPC handles cannot be differentiated in source3 RPC server; (bso#14359). + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313). + nsswitch: Fix use-after-free causing segfault in _pam_delete_cred; (bso#14327). + Fix fruit:time machine max size on arm; (bso#13622) + CTDB recovery corner cases can cause record resurrection and node banning; (bso#14294). + ctdb: Fix a memleak; (bso#14348). + libsmb: Don't try to find posix stat info in SMBC_getatr(). + ctdb-tcp: Move free of inbound queue to TCP restart; (bso#14295); (bsc#1162680). + s3/librpc/crypto: Fix double free with unresolved credential cache; (bso#14344); (bsc#1169095) + s3:libads: Fix ads_get_upn(); (bso#14336). + CTDB recovery corner cases can cause record resurrection and node banning; (bso#14294) + Starting ctdb node that was powered off hard before results in recovery loop; (bso#14295); (bsc#1162680). + ctdb-recoverd: Avoid dereferencing NULL rec->nodemap; (bso#14324) - Update to samba 4.11.8 + CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with ASQ; (bso#14331); (bsc#1169850); + CVE-2020-10704: LDAP Denial of Service (stack overflow) in Samba AD DC; (bso#14334); (bsc#1169851); - Update to samba 4.11.7 + s3: lib: nmblib. Clean up and harden nmb packet processing; (bso#14239). + s3: VFS: full_audit. Use system session_info if called from a temporary share definition; (bso#14283) + dsdb: Correctly handle memory in objectclass_attrs; (bso#14258). + ldb: version 2.0.9, Samba 4.11 and later give incorrect results for SCOPE_ONE searches; (bso#14270) + auth: Fix CIDs 1458418 and 1458420 Null pointer dereferences; (bso#14247). + smbd: Handle EINTR from open(2) properly; (bso#14285) + winbind member (source3) fails local SAM auth with empty domain name; (bso#14247) + winbindd: Handling missing idmap in getgrgid(); (bso#14265). + lib:util: Log mkdir error on correct debug levels; (bso#14253). + wafsamba: Do not use 'rU' as the 'U' is deprecated in Python 3.9; (bso#14266). + ctdb-tcp: Make error handling for outbound connection consistent; (bso#14274). - Update to samba 4.11.6 + pygpo: Use correct method flags; (bso#14209). + vfs_ceph_snapshots: Fix root relative path handling; (bso#14216); (bsc#1141320). + Avoiding bad call flags with python 3.8, using METH_NOARGS instead of zero; (bso#14209). + source4/utils/oLschema2ldif: Include stdint.h before cmocka.h; (bso#14218). + docs-xml/winbindnssinfo: Clarify interaction with idmap_ad etc; (bso#14122). + smbd: Fix the build with clang; (bso#14251). + upgradedns: Ensure lmdb lock files linked; (bso#14199). + s3: VFS: glusterfs: Reset nlinks for symlink entries during readdir; (bso#14182). + smbc_stat() doesn't return the correct st_mode and also the uid/gid is not filled (SMBv1) file; (bso#14101). + librpc: Fix string length checking in ndr_pull_charset_to_null(); (bso#14219). + ctdb-scripts: Strip square brackets when gathering connection info; (bso#14227).- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);- Installing: samba - samba-ad-dc.service does not exist and unit not found; (bsc#1171437);- Fix samba_winbind package is installing python3-base without python3 package; (bsc#1169521);- Require libldb2 >= 2.0.10 after security release.- CVE-2020-10704: LDAP Denial of Service (stack overflow) in Samba AD DC; (bso#14334); (bsc#1169851); - CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with ASQ; (bso#14331); (bsc#1169850);- Fix smbclient crash with double free (with unresolved krb5 credential cache); (bso#14344); (bsc#1169095).- Starting ctdb node that was powered off hard before results in recovery loop; (bso#14295); (bsc#1162680).- CTDB doesn't retry outgoing connections on bind (and some other) failures; (bso#14274); (bsc#1162680).- Revert: Allow idmap_rid to have primary group other than "Domain Users"; (bsc#1087931).- Fix nmbstatus not reporting detailed information about workgroups; (bsc#1159464); - Fix querying all names registered within broadcast area; (bso#8927);- Update to samab 4.11.5 + CVE-2019-14902: Replication of ACLs down subtree on AD Directory is not automatic; (bso#12497); (bsc#1160850). + CVE-2019-19344: Fix server crash with dns zone scavenging = yes; (bso#14050); (bsc#1160852). + CVE-2019-14907: server-side crash after charset conversion failure (eg during NTLMSSP processing); (bso#14208); (bsc#1160888). - Update to samba 4.11.4 + Ensure SMB1 cli_qpathinfo2() doesn't return an inode number; (bso#14161). + Ensure we don't call cli_RNetShareEnum() on an SMB1 connection; (bso#14174). + NT_STATUS_ACCESS_DENIED becomes EINVAL when using SMB2 in SMBC_opendir_ctx; (bso#14176). + SMB2 - Ensure we use the correct session_id if encrypting an interim response; (bso#14189). + Prevent smbd crash after invalid SMB1 negprot; (bso#14205). + printing: Fix %J substition; (bso#13745). + Remove now unneeded call to cmdline_messaging_context(); (bso#13925). + Fix incomplete conversion of former parametric options; (bso#14069). + Fix sync dosmode fallback in async dosmode codepath; (bso#14070). + vfs_fruit returns capped resource fork length; (bso#14171). + libnet_join: Add SPNs for additional-dns-hostnames entries; (bso#14116). + smbd: Increase a debug level; (bso#14211). + Prevent azure ad connect from reporting discovery errors reference-value-not-ldap-conformant; (bso#14153). + krb5_plugin: Fix developer build with newer heimdal system library; (bso#14179). + replace: Only link libnsl and libsocket if required; (bso#14168); + ctdb: Incoming queue can be orphaned causing communication; breakdown; (bso#14175). + ldb: Release ldb 2.0.8. Cross-compile will not take cross-answers or cross-execute; (bso#13846). + heimdal-build: Avoid hard-coded /usr/include/heimdal in asn1_compile-generated code; (bso#13856).- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).- Update to samba 4.11.3 + CVE-2019-14861: DNSServer RPC server crash, an authenticated user can crash the DCE/RPC DNS management server by creating records with matching the zone name; (bso#14138); (bsc#1158108). + CVE-2019-14870: DelegationNotAllowed not being enforced, the DelegationNotAllowed Kerberos feature restriction was not being applied when processing protocol transition requests (S4U2Self), in the AD DC KDC; (bso#14187); (bsc#1158109).- CVE-2019-14861: DNSServer RPC server crash, an authenticated user can crash the DCE/RPC DNS management server by creating records with matching the zone name; (bso#14138); (bsc#1158108). - CVE-2019-14870: DelegationNotAllowed not being enforced, the DelegationNotAllowed Kerberos feature restriction was not being applied when processing protocol transition requests (S4U2Self), in the AD DC KDC; (bso#14187); (bsc#1158109).- Update to samba 4.11.2 + CVE-2019-10218: Client code can return filenames containing path separators; (bsc#1144902); (bso#14071). + CVE-2019-14833: Samba AD DC check password script does not receive the full password; (bso#12438). + CVE-2019-14847: User with "get changes" permission can crash AD DC LDAP server via dirsync; (bso#14040). - Fixes from 4.11.1 + Overlinking libreplace against librt and pthread against every binary or library causes issues; (bso#14140); + kpasswd fails when built with MIT Kerberos; (bso#14155); + Fix spnego fallback from kerberos to ntlmssp in smbd server; (bso#14106); + Stale file handle error when using mkstemp on a share; (bso#14137); + non-AES schannel broken; (bso#14134); + Joining Active Directory should not use SAMR to set the password; (bso#13884); + smbclient can blunder into the SMB1 specific cli_RNetShareEnum() call on an SMB2 connection; (bso#14152); + Deleted records can be resurrected during recovery; (bso#14147); + getpwnam and getpwuid need to return data for ID_TYPE_BOTH group; (bso#14141); + winbind does not list forest trusts with additional trust attributes; (bso#14130); + fault report points to outdated documentation; (bso#14139); + pam_winbind with krb5_auth or wbinfo -K doesn't work for users of trusted domains/forests; (bso#14124); + classicupgrade results in uncaught exception - a bytes-like object is required, not 'str'; (bso#14136); + pod2man is not longer required, stop checking at build time; (bso#14131); + Exit code of ctdb nodestatus should not be influenced by deleted nodes; (bso#14129); + username/password authentication doesn't work with CUPS and smbspool; (bso#14128); + smbc_readdirplus() is incompatible with smbc_telldir() and smbc_lseekdir(); (bso#14094);- CVE-2019-14847: User with "get changes" permission can crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598); - CVE-2019-10218: Client code can return filenames containing path separators; (bso#14071); (bsc#1144902);- CVE-2019-14833: samba: Accent with "check script password" Samba AD DC check password script does not receive the full password; (bso#12438); (bsc#1154289).- Update to samba 4.11.0 + For details on all items see WHATSNEW.txt in samba-doc package + Python2 runtime support removed; python 3.4 or later required + Security improvements: - SMB1 disabled by default - lanman and plaintext authentication deprecated - winbind: PAM_AUTH and NTLM_AUTH events logged - GnuTLS 3.2 required; system FIPS mode setting honored + CephFS Snapshot integration, exposed as previous file versions + ctdb changes: - onnode -o option removed - ctdbd logs when using more than 90% of a CPU thread - CTDB_MONITOR_SWAP_USAGE variable removed + AD Domain controller improvements: - Upgrade AD databse format - BIND9_FLATFILE deprecated - default process model chagned to prefork - bind9 dns operation duration logging - Default schema updated to 2012_R2; function level is unchanged - many performance improvements + Configuration webserver support removed- Fix broken username/password authentication with CUPS and smbspool; (bsc#1152143); (bso#14128).- Fix auth problems when printing via smbspool backend with kerberos; (bnc#1148539); (bso#13832).- Update to samba 4.10.8 + CVE-2019-10197: user escape from share path definition; (bso#14035); (bsc#1141267);- Fix build on newer systems by modifying samba.spec to use consistent non-relative paths for pammodules in configure line and specification of pam_winbind.so library to package.- Update to samba 4.10.7 + Unable to create or rename file/directory inside shares configured with vfs_glusterfs_fuse module; (bso#14010). + build: Allow build when '--disable-gnutls' is set; (bso#13844) + samba-tool: Add 'import samba.drs_utils' to fsmo.py; (bso#13973). + Fix 'Error 32 determining PSOs in system' message on old DB with FL upgrade; (bso#14008). + s4/libnet: Fix joining a Windows pre-2008R2 DC; (bso#14021) + join: Use a specific attribute order for the DsAddEntry nTDSDSA object; (bso#14046). + vfs_catia: Pass stat info to synthetic_smb_fname(); (bso#14015). + lookup_name: Allow own domain lookup when flags == 0; (bso#14091). + s4 librpc rpc pyrpc: Ensure tevent_context deleted last; (bso#13932). + DEBUGC and DEBUGADDC doesn't print into a class specific log file; (bso#13915). + Request to keep deprecated option "server schannel", VMWare Quickprep requires "auto"; (bso#13949). + dbcheck: Fallback to the default tombstoneLifetime of 180 days; (bso#13967). + dnsProperty fails to decode values from older Windows versions; (bso#13969). + samba-tool: Use only one LDAP modify for dns partition fsmo role transfer; (bso#13973). + third_party: Update waf to version 2.0.17; (bso#13960). + netcmd: Allow 'drs replicate --local' to create partitions; (bso#14051). + ctdb-config: Depend on /etc/ctdb/nodes file; (bso#14017).- CVE-2019-10197: user escape from share path definition; (bso#14035); (bsc#1141267).- Prepare for use future use of kernel keyrings, modify /etc/pam.d/samba to include pam_keyinit.so; (bsc#1144059).- Update samba-winbind script to work with systemd; (bsc#1132739); - Drop samba dhcpcd hook scripts - Update to samba 4.10.6 + s3: winbind: Fix crash when invoking winbind idmap scripts; (bso#13956). + smbd does not correctly parse arguments passed to dfree and quota scripts; (bso#13964). + samba-tool dns: use bytes for inet_ntop; (bso#13965). + samba-tool domain provision: Fix --interactive module in python3; (bso#13828). + ldb_kv: Skip @ records early in a search full scan; (bso#13893). + docs: Improve documentation of "lanman auth" and "ntlm auth" connection; (bso#13981). + python/ntacls: Use correct "state directory" smb.conf option instead of "state dir"; (bso#14002). + registry: Add a missing include; (bso#13840). + Fix SMB guest authentication; (bso#13944). + AppleDouble conversion breaks Resourceforks; (bso#13958). + vfs_fruit makes direct use of syscalls like mmap() and pread(); (bso#13968). + s3:mdssvc: Fix flex compilation error; (bso#13987). + s3/vfs_glusterfs[_fuse]: Avoid using NAME_MAX directly; (bso#13872). + dsdb:samdb: schemainfo update with relax control; (bso#13799). + s3:util: Move static file_pload() function to lib/util; (bso#13964). + smbd: Fix a panic; (bso#13957). + ldap server: Generate correct referral schemes; (bso#12478). + s4 dsdb/repl_meta_data: fix use after free in dsdb_audit_add_ldb_value; (bso#13941). + s4 dsdb: Fix use after free in samldb_rename_search_base_callback; (bso#13942). + dsdb/repl: we need to replicate the whole schema before we can apply it; (bso#12204). + ldb: Release ldb 1.5.5; (bso#12478). + Schema replication fails if link crosses chunk boundary backwards; (bso#13713). + 'samba-tool domain schemaupgrade' uses relax control and skips the schemaInfo update provision; (bso#13799). + dsdb_audit: avoid printing "... remote host [Unknown] SID [(NULL SID)] ..."; (bso#13916). + python/ntacls: We only need security.SEC_STD_READ_CONTROL in order to get the ACL; (bso#13917). + s3:loadparm: Ensure to truncate FS Volume Label at multibyte boundary; (bso#13947). + Using Kerberos credentials to print using spoolss doesn't work; (bso#13939). + wafsamba: Use native waf timer; (bso#13998). + ctdb-scripts: Fix tcp_tw_recycle existence check; (bso#13984).- Update to samba-4.10.5 (including updates for 4.10.4, 4.10.3) + CVE-2019-12435 rpc/dns: Avoid NULL deference if zone not found in DnssrvOperation2; (bso#13922); (bsc#1137815). + CVE-2019-12436 dsdb/paged_results: Ignore successful results without messages; (bso#13951); (bsc#1137816). - Update to samba-4.10.4 + s3: SMB1: Don't allow recvfile on stream fsp's; (bso#13938). + py/provision: Fix for Python 2.6; (bso#13882). + netcmd: Fix 'passwordsettings --max-pwd-age' command; (bso#13873). + s3-libnet_join: 'net ads join' to child domain fails when using "-U admin@forestroot"; (bso#13861). + vfs_ceph: Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245). + vfs_ceph: Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697). + ctdb-common: Avoid race between fd and signal events; (bso#13895). + ctdb-common: Fix memory leak in run_proc; (bso#13943). + lib: Initialize getline() arguments; (bso#13892). + winbind: Fix overlapping id ranges; (bco#13903). + lib util debug: Increase format buffer to 4KiB; (bso#13902). + nsswitch pam_winbind: Fix Asan use after free; (bso#13927). + s4 lib socket: Ensure address string owned by parent struct; (bso#13929). + s3 rpc_client: Fix Asan stack use after scope; (bso#13936). + s3:smbd: Handle IO_REPARSE_TAG_DFS in SMB_FIND_FILE_FULL_DIRECTORY_INFO; (bso#10097). + smb2_tcon: Avoid STATUS_PENDING completely on tdis; (bso#10344). + smb2_sesssetup: avoid STATUS_PENDING responses for session setup; (bso#12845). + smb2_tcon: Avoid STATUS_PENDING completely on tdis; (bso#13698). + smb2_sesssetup: avoid STATUS_PENDING responses for session setup; (bso#13796). + dbcheck: Fix the err_empty_attribute() check; (bso#13843). + vfs_snapper: Drop unneeded fstat handler; (bso#13858). + vfs_default: Fix vfswrap_offload_write_send() NT_STATUS_INVALID_VIEW_SIZE check; (bso#13862). + smb2_server: Grant all 8192 credits to clients; (bso#13863). + smbd: Implement SMB_FILE_NORMALIZED_NAME_INFORMATION handling; (bso#13919). + s3/vfs_glusterfs: Dynamically determine NAME_MAX; (bso#13872). + s3: modules: ceph: Use current working directory instead of share path; (bso#13918); (bsc#1134452). + winbind: Use domain name from lsa query for sid_to_name cache entry; (bso#13831). + memcache: Increase size of default memcache to 512k; (bso#13865). + docs: Update smbclient manpage for "--max-protocol"; (bso#13857). + s3:utils: If share is NULL in smbcacls, don't print it; (bso#13937). + s3:smbspool: Fix regression printing with Kerberos credentials; (bso#13939). + ctdb-scripts: CTDB restarts failed NFS RPC services by hand, which is incompatible with systemd; (bso#13860). + ctdb-daemon: Revert "We can not assume that just because we could complete a TCP handshake"; (bso#13888). + ctdb-daemon: Never use 0 as a client ID; (bso#13930). + ctdb-common: Fix memory leak; (bso#13943). + s3:debug: Enable logging for early startup failures; (bso#13904) - Update to samba-4.10.3 + CVE-2018-16860: Heimdal KDC: Reject PA-S4U2Self with unkeyed checksum; (bso#13685); (bsc#1134024).- CVE-2019-12435: zone operations can crash rpc server; (bso#13922); (bsc#1137815).- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697). - Add ceph_snapshots VFS module; (jsc#SES-183).- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).- Update to samba-4.10.2: + CVE-2019-3870 (World writable files in Samba AD DC private/ dir); (bso#13834). + CVE-2019-3880 (Save registry file outside share as unprivileged user); (bso#13851). + py/kcc_utils: py2.6 compatibility; (bso#13837). + libcli: permit larger values of DataLength in SMB2_ENCRYPTION_CAPABILITIES of negotiate response; (bso#13869). + regfio: Improve handling of malformed registry hive files; (bso#13840). + ctdb-version: Simplify version string usage; (bso#13789). + lib: Make fd_load work for non-regular files; (bso#13859). + dbcheck: in the middle of the tombstone garbage collection causes replication failures, dbcheck: add --selftest-check-expired-tombstones cmdline option; (bso#13816). + ndr_spoolss_buf: Fix out of scope use of stack variable in NDR_SPOOLSS_PUSH_ENUM_OUT(); (bso#13818). + s4/messaging: Fix undefined reference in linking libMESSAGING-samba4.so; (bso#13854). + acl_read: Fix regression for empty lists; (bso#13836). + s4:dlz make b9_has_soa check dc=@ node; (bso#13841). + s3:client: Fix printing via smbspool backend with kerberos auth; (bso#13832). + s4:librpc: Fix installation of Samba; (bso#13847). + s3:lib: Fix the debug message for adding cache entries; (bso#13848). + s3:utils: Add 'smbstatus -L --resolve-uids' to show username; (bso#13793). + s3:lib: Fix the debug message for adding cache entries; (bso#13848). + s3:waf: Fix the detection of makdev() macro on Linux; (bso#13853). * ctdb-build: Drop creation of .distversion in tarball; (bso#13789). * ctdb-packaging: Test package requires tcpdump, ctdb package should not own system library directory; (bso#13838). - Update to samba-4.10.1: + py/kcc_utils: py2.6 compatibility; (bso#13837); + libcli: permit larger values of DataLength in SMB2_ENCRYPTION_CAPABILITIES of negotiate response; (bso#13869); + regfio: Improve handling of malformed registry hive files; (bso#13840); + ctdb-version: Simplify version string usage; (bso#13789); + lib: Make fd_load work for non-regular files; (bso#13859); + dbcheck in the middle of the tombstone garbage collection causes replication failures, dbcheck: add --selftest-check-expired-tombstones cmdline option; (bso#13816); + ndr_spoolss_buf: Fix out of scope use of stack variable in NDR_SPOOLSS_PUSH_ENUM_OUT(); (bso#13818); + s4/messaging: Fix undefined reference in linking libMESSAGING-samba4.so; (bso#13854); + acl_read: Fix regression for empty lists; (bso#13836); + s4:dlz make b9_has_soa check dc=@ node; (bso#13841); + s3:client: Fix printing via smbspool backend with kerberos auth; (bso#13832); + s4:librpc: Fix installation of Samba; (bso#13847); + s3:lib: Fix the debug message for adding cache entries; (bso#13848); + s3:utils: Add 'smbstatus -L --resolve-uids' to show username; (bso#13793); + s3:lib: Fix the debug message for adding cache entries; (bso#13848); + s3:waf: Fix the detection of makdev() macro on Linux; (bso#13853); + ctdb-build: Drop creation of .distversion in tarball; (bso#13789); + ctdb-packaging: Test package requires tcpdump, ctdb package should not own system library directory; (bso#13838); - Update to samba-4.10.0: + s4-server: Open and close a transaction on sam.ldb at startup; (bso#13760); + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812); + s4/scripting/bin: Open unicode files with utf8 encoding and write + unicode string. + sambaundoguididx: Use the right escaped oder unescaped sam ldb files; (bso#13759); + Fix idmap cache pollution with S-1-22- IDs on winbind hickup; (bso#13813); + passdb: Update ABI to 0.27.2. + lib/winbind_util: Add winbind_xid_to_sid for --without-winbind; (bso#13813); + lib:util: Move debug message for mkdir failing to log level 1; (bso#13823);- MacOS credit accounting breaks with async SESSION SETUP; (bsc#1125601); (bso#13796). - Mac OS X SMB2 implmenetation sees Input/output error or Resource temporarily unavailable and drops connection; (bso#13698)- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).- CVE-2019-3880: Save registry file outside share as unprivileged user; (bso#13851); (bsc#1131060 ).- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0); (bso#13834); (bsc#1130703);- Update to samba-4.9.5 + audit_logging: Remove debug log header and JSON Authentication: prefix; (bso#13714); + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760); + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso# CID: 1433607; (bso#11495); + smbd: uid: Don't crash if 'force group' is added to an existing share connection; (bso#13690); + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility code; (bso#13770); + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803); + s3:utils/smbget fix recursive download with empty source directories; (bso#13199); + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716); + s3:libsmb: cli_smb2_list() can sometimes fail initially on a connection; (bso#13736); + join: Throw CommandError instead of Exception for simple errors; (bso#13747); + ldb: Avoid inefficient one-level searches; (bso#13762); + s3: libsmb: use smb2cli_conn_max_trans_size() in cli_smb2_list(); (bso#13736); + tldap: Avoid use after free errors; (bso#13776); + Fix idmap xid2sid cache churn; (bso#13802); + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812); + s3-smbd: Avoid assuming fsp is always intact after close_file call; (bso#13720); + s3-vfs-fruit: Add close call; (bso#13725); + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746); + s3-vfs: add glusterfs_fuse vfs module; (bso#13774); + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766); + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS) ftruncate and fallocate; (bso#13807); + lib/audit_logging: Actually create talloc; (bso#13737); + netcmd/user: python[3]-gpgme unsupported and replaced by python[3]-gpg; (bso#13728); + dns: Changing onelevel search for wildcard to subtree; (bso#13738); + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721); + sambaundoguididx: Use the right escaped oder unescaped sam ldb files; (bso#13759); + ctdb: Print locks latency in machinereadable stats; (bso#13742); + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786); + audit_logging: auth_json_audit required auth_json; (bso#13715); + man pages: Document prefork process model; (bso#13765); + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773); + s3:auth: ignore create_builtin_guests() failing without a valid idmap configuration; (bso#13697); + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC without trusts; (bso#13722); + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd is not available; (bso#13723); + s4:server: Add support for 'smbcontrol samba shutdown' and 'smbcontrol debug/debuglevel'; (bso#13752); + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616); + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330); + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774); + notifyd: Fix SIGBUS on sparc; (bso#13704); + waf: Check for libnscd; (bso#13787); + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770); + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717); + Recovery lock bug fixes; (bso#13800); + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726); + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727); + vfs_fileid: Fix get_connectpath_ino; (bso#13741); + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).- Fix update-apparmor-samba-profile script after apparmor switched to using named profiles. The change is backwards compatible; (bsc#1126377);- LoadParm().load_default() fails with "Unable to load default file"; (bsc#1089758);- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);- Update to samba-4.9.4 + libcli/smb: Don't overwrite status code; (bso#9175). + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164). + Session setup reauth fails to sign response; (bso#13661). + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677). + vfs_shadow_copy2: Nicely deal with attempts to open previous version for writing; (bso#13688). + Restoring previous version of stream with vfs_shadow_copy2 fails with NT_STATUS_OBJECT_NAME_INVALID fsp->base_fsp->fsp_name; (bso#13455). + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571). + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708) + PEP8: fix E231: missing whitespace after ','. + winbindd: Fix crash when taking profiles;(bso#13629) + CVE-2018-14629 dns: Fix CNAME loop prevention using counter regression; (bso#13600) + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686). + CVE-2018-16853: Do not segfault if client is not set; (bso#13571). + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679) + ctdb-daemon: Exit with error if a database directory does not exist; (bso#13696). + s3:libads: Add net ads leave keep-account option; (bso#13498).- Drop more %if..%endif guards which are idempotent. - Drop requires on ldconfig which are already auto-discovered. - Do not ignore errors from useradd/groupadd.- Remove python2 build dependency from samba-libs; (bsc#1116900);- Update update-apparmor-samba-profile script to ignore the shares's paths containing substitution variables in any place, not only at the beginning of the path.- Update to samba-4.9.3 + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD Internal DNS server; (bso#13600); (bsc#1116319); + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628); (bsc#1116320); + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server; (bso#13674); (bsc#1116322); + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers; (bso#13669); (bsc#1116321); + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos configuration (unsupported); (bso#13678); (bsc#1116324); + CVE-2018-16857: Bad password count in AD DC not always effective; window; (bso#13683); (bsc#1116323);- Update to samba-4.9.2 + dsdb: Add comments explaining the limitations of our current backlink behaviour; (bso#13418); + Fix problems running domain backups (handling SMBv2, sites); (bso#13621); + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3; (bso#13465); + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642); + File saving issues with vfs_fruit on samba >= 4.8.5; (bso#13646); + Enabling vfs_fruit looses FinderInfo; (bso#13649); + Cancelling of SMB2 aio reads and writes returns wrong error NT_STATUS_INTERNAL_ERROR; (bso#13667); + Fix CTDB recovery record resurrection from inactive nodes and simplify vacuuming; (bso#13641); + examples: Fix the smb2mount build; (bso#13465); + libtevent: Fix build due to missing open_memstream on Illiumos; (bso#13629); + winbindd_cache: Fix timeout calculation for sid<->name cache; (bso#13662); + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path; (bso#13653); + Extended DN SID component missing for member after switching group membership; (bso#13418); + Return STATUS_SESSION_EXPIRED error encrypted, if the request was encrypted; (bso#13624); + python: Allow forced signing via smb.SMB(); (bso#13621); + lib:socket: If returning early, set ifaces; (bso#13665); + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8 encoded unicode; (bso#13616); + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute; (bso#13673); + waf: Add -fstack-clash-protection; (bso#13601); + winbind: Fix segfault if an invalid passdb backend is configured; (bso#13668); + Fix bugs in CTDB event handling; (bso#13659); + Misbehaving nodes are sometimes not banned; (bso#13670);- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);- winbind requires latest version of libtevent-util0 to start- Backport latest gpo code from master + Read policy from local gpt cache + Offline policy application + Make group policy extensible via register/unregister gpext + gpext's run via a process_group_policy method- Enable profiling data collection- Change samba-kdc package name to samba-ad-dc - Move samba-ad-dc.service to the samba-ad-dc package- Update to samba-4.9.1 + s3: nmbd: Stop nmbd network announce storm; (bso#13620); + s3-rpcclient: Use spoolss_init_spoolss_UserLevel1 in winspool cmds; (bso#13597); + CTDB recovery lock has some race conditions; (bso#13617); + s3-rpc_client: Advertise Windows 7 client info; (bso#13597); + ctdb-doc: Remove PIDFILE option from ctdbd_wrapper man page; (bso#13610);- Tumbleweed doesn't define the sle_version macro, so we must include a check for suse_version also. Otherwise python3 is disabled on Tumbleweed.- Update to samba-4.9.0 + samba_dnsupdate: Honor 'dns zone scavenging' option, only update if needed; (bso#13605); + wafsamba: Fix 'make -j'; (bso#13606);- Update to samba-4.9.0rc5 + s3: VFS: vfs_full_audit: Ensure smb_fname_str_do_log() only returns absolute pathnames; (bso#13565); + s3: util: Do not take over stderr when there is no log file; (bso#13578); + Durable Reconnect fails because cookie.allow_reconnect is not set; (bso#13549); + krb5-samba: Interdomain trust uses different salt principal; (bso#13539); + vfs_fruit: Don't unlink the main file; (bso#13441); + smbd: Fix a memleak in async search ask sharemode; (bso#13602); + Fix Samba GPO issue when Trust is enabled; (bso#11517); + samba-tool: Add "virtualKerberosSalt" attribute to 'user getpassword/syncpasswords'; (bso#13539); + Fix CTDB configuration issues; (bso#13589); + ctdbd logs an error until it can successfully connect to eventd; (bso#13592);- Update to samba-4.9.0rc4 + s3: smbd: Ensure get_real_filename() copes with empty pathnames; (bso#13585); + samba domain backup online/rename commands force user to specify password on CLI; (bso#13566); + wafsamba/samba_abi: Always hide ABI symbols which must be local; (bso#13579); + Fix a panic if fruit_access_check detects a locking conflict; (bso#13584); + Fix memory and resource leaks; (bso#13567); + python: Fix print in dns_invalid.py; (bso#13580); + Aliasing issue causes incorrect IPv6 checksum; (bso#13588); + Fix CTDB configuration issues; (bso#13589); + s3: vfs: time_audit: fix handling of token_blob in smb_time_audit_offload_read_recv(); (bso#13568);- Add missing zlib-devel dependency which was previously pulled in by libopenssl-devel- Update to samba-4.9.0rc3+git.22.3fff23ae36e + CVE-2018-10858: libsmb: Harden smbc_readdir_internal() against returns from malicious servers; (bso#13453); + CVE-2018-1140: ldbsearch '(distinguishedName=abc)' and DNS query with escapes crashes, ldb: Release LDB 1.3.5 for CVE-2018-1140; (bso#13374); + CVE-2018-10918: cracknames: Fix DoS (NULL pointer de-ref) when not servicePrincipalName is set on a user; (bso#13552); + CVE-2018-10919: acl_read: Fix unauthorized attribute access via searches; (bso#13434); + ctdb_mutex_ceph_rados_helper: Set SIGINT signal handler; (bso#13540); + CVE-2018-1139 libcli/auth: Do not allow ntlmv1 over SMB1 when it is disabled via "ntlm auth"; (bso#13360); + s3-tldap: do not install test_tldap; (bso#13529); + ctdb_mutex_ceph_rados_helper: Fix deadlock via lock renewals; (bso#13540); + CVE-2018-1140 Add NULL check for ldb_dn_get_casefold() in ltdb_index_dn_attr(); (bso#13374); + ctdb-eventd: Fix CID 1438155; (bso#13554); + Fix CIDs 1438243, (Unchecked return value) 1438244 (Unsigned compared against 0), 1438245 (Dereference before null check) and 1438246 (Unchecked return value); (bso#13553); + ctdb: Fix a cut&paste error; (bso#13554); + systemd: Only start smb when network interfaces are up; (bso#13559); + Fix quotas don't work with SMB2; (bso#13553); + s3/smbd: Ensure quota code is only called when quota support detected; (bso#13563); + s3/libsmb: Explicitly set delete_on_close token for rmdir; (bso#13204); + s3:waf: Install eventlogadm to /usr/sbin; (bso#13561); + Shorten description in vfs_linux_xfs_sgid manual; (bso#13562);- Update to samba-4.9.0rc2+git.21.a1069afb007 + s3: smbd: Using "sendfile = yes" with SMB2 can cause CPU spin; (bso#13537); + s3: smbd: Fix path check in smbd_smb2_create_durable_lease_check(); (bso#13535); + samba-tool trust: Support discovery via netr_GetDcName; (bso#13538); + s4-dsdb: Only build dsdb Python modules for AD DC; (bso#13542); + Fix portability issues on freebsd; (bso#13520); + DNS wildcard search does not handle multiple labels correctly; (bso#13536); + samba-tool domain trust: Fix trust compatibility to Windows Server 1709 and FreeIPA; (bso#13308); + Fix portability issues on freebsd; (bso#13520); + ctdb-protocol: Fix CTDB compilation issues; (bso#13545); + ctdb-docs: Replace obsolete reference to CTDB_DEBUG_HUNG_SCRIPT option; (bso#13546); + ctdb-doc: Provide an example script for migrating old configuration; (bso#13550); + ctdb-event: Implement event tool "script list" command; (bso#13551);- Update to samba-4.8.4+git.37.a7a861d7982; + CVE-2018-1139: Weak authentication protocol allowed; (bsc#1095048); (bsc#13360); + CVE-2018-1140: Denial of Service Attack on DNS and LDAP server; (bsc#1095056); (bso#13466); (bso#13374); + CVE-2018-10858: Insufficient input validation on client directory listing in libsmbclient; (bsc#1103411); (bso#13453); + CVE-2018-10918: Denial of Service Attack on AD DC DRSUAPI server; (bsc#1103414); (bso#13552); + CVE-2018-10919: Confidential attribute disclosure from the AD LDAP server; (bsc#1095057); (bso#13434); + s3:winbind: winbind normalize names' doesn't work for users; (bso#12851); + winbind: Fix UPN handling in canonicalize_username(); (bso#13369); + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428); + samdb: Fix building Samba with gcc 8.1; (bso#13437); + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440); + smbd: Flush dfree memcache on service reload; (bso#13446); + ldb: Save a copy of the index result before calling the + lib/util: No Backtrace given by Samba's AD DC by default; (bso#13454). + s3: smbd: printing: Re-implement delete-on-close semantics for print files missing since 3.5.x; (bso#13457). + python: Fix talloc frame use in make_simple_acl(); (bso#13474). + krb5_wrap: Fix keep_old_entries logic for older Kerberos libraries;(bso#13478). + krb5_plugin: Add winbind localauth plugin for MIT Kerberos; (bso#13480).- Add missing package descriptions; (bsc#1093864); - Fix dependency issue between samba-python and samba-kdc; (bsc#1062876); - Call update-apparmor-samba-profile when running samba-ad-dc; (bsc#1092099);- Update to 4.8.2 + After update to 4.8.0 DC failed with "Failed to find our own NTDS Settings objectGUID" (bso#13335). + fix incorrect reporting of stream dos attributes on a directory (bso#13380). + vfs_ceph: add asynchronous fsync; fake synchronous call (bso#13412). + vfs_ceph: add fake async pwrite/pread send/recv hooks; (bso#13425) + vfs_ceph: Fix memory leak; (bso#13424). + libsmbclient: Fix hard-coded connection error return of ETIMEDOUT; (bso#13419). + s4-lsa: Fix use-after-free in LSA server; (bso#13420). + winbindd: Do re-connect if the RPC call fails in the passdb case; (bso#13430). + cleanupd: Sends MSG_SMB_UNLOCK twice to interested peers; (bso#13416). + cleanupd: Use MSG_SMB_BRL_VALIDATE to signal cleanupd unclean process shutdown; (bso#13414). + ctdb-client: Remove ununsed functions from old client code; (bso#13411). + printing: Return the same error code as windows does on upload failures; (bso#13395). + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged pipe is not accessable; (bso#13400). + s4:lsa_lookup: remove TALLOC_FREE(state) after all dcesrv_lsa_Lookup{Names,Sids}_base_map() calls; (bso#13420). + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407). + s3:smbspool: Fix cmdline argument handling; (bso#13417).- Move libdfs-server-ad-samba4.so library from kdc to libs package, as it is required by some client libs; (bsc#1074135); - Update to 4.8.1; (bsc#1091179); + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error, we don't own it here; (bso#13244); + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't support fdopendir(); (bso#13270); + Round-tripping ACL get/set through vfs_fruit will increase the number of ACE entries without limit; (bso#13319); + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit issues; (bso#13347); + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without delete access; (bso#13358); + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372); + s3: smbd: Unix extensions attempts to change wrong field in fchown call; (bso#13375); + ms_schema/samba-tool visualize: Fix python2.6 incompatibility; (bso#13337); + Fix invocation of gnutls_aead_cipher_encrypt(); (bso#13352); + Windows 10 cannot logon on Samba NT4 domain; (bso#13328); + winbindd: Recover loss of netlogon secure channel in case the peer DC is rebooted; (bso#13332); + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363); + ctdb-client: Fix bugs in client code; (bso#13356); + ctdb-scripts: Drop "net serverid wipe" from 50.samba event script; (bso#13359); + s3: lib: messages: Don't use the result of sec_init() before calling sec_init(); (bso#13368); + libads: Fix the build '--without-ads'; (bso#13273); + winbind: Keep "force_reauth" in invalidate_cm_connection, add 'smbcontrol disconnect-dc'; (bso#13332); + vfs_virusfilter: Fix CIDs 1428738-1428740; (bso#13343); + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367); + rpc_server: Fix core dump in dfsgetinfo; (bso#13370); + smbclient: Fix notify; (bso#13382); + Fix smbd panic if the client-supplied channel sequence number wraps; (bso#13215); + Windows 10 cannot logon on Samba NT4 domain; (bso#13328); + lib/util: Remove unused '#include ' from tests/tfork.c; (bso#13342); + Fix build errors with cc from developerstudio 12.5 on Solaris; (bso#13343); + Fix the picky-developer build on FreeBSD 11; (bso#13344); + s3:modules: Fix the build of vfs_aixacl2.c; (bso#13345); + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338); + lib:replace: Fix linking when libtirpc-devel overwrites system headers; (bso#13341); + winbindd: 'wbinfo --name-to-sid' returns misleading result on invalid query; (bso#13312); + s3:passdb: Do not return OK if we don't have pinfo set up; (bso#13376); + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);- Use new foreground execution flags for systemd samba daemons; (bsc#1088574); (bsc#1071090); (bsc#1065551); + Add %post scriptlet to clear old sysconfig flags - Update vendor-files to commit 880b3e7. + Set samba sysconfig template variables to "" + Add required daemon flags directly to systemd unit- Specfile cleanup + Remove %if..%endif guards which don't affect the build + Remove redundant %clean section + Replace old $RPM_* shell vars with macros- BuildRequire pkgconfig(systemd) and pkgconfig(libsystemd) in place of systemd and systemd-devel: Allow OBS to optimize the workload by allowing the usage of the 'build-optimized' systemd packages.- Enable building samba with python3, and create a samba-python3 package.- Update to 4.8 + New GUID Index mode in sam.ldb for the AD DC + GPO support for samba KDC + Time machine support with vfs_fruit + Encrypted secrets + AD Replication visualization + Improved trust support - ability to not scan global trust list - AD external trusts have limited support - verbose trusted domain listing + VirusFilter VFS module + NT4-style replication removed + vfs_aio_linux removed- Disable samba-pidl package, due to the removal of dependency perl-Parse-Yapp; (bsc#1085150);- Update to 4.7.6; + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally; (bso#11343); (bsc#1081741); + CVE-2018-1057: Authenticated users can change other users' password; (bso#13272); (bsc#1081024).- Disable python until full python3 port is done; (bsc#1082139); + Remove contents of package samba-python + Remove contents of package libsamba-policy0 + Remove contents of package libsamba-policy-devel + Remove library libsamba-python-samba4.so from samba-libs package + Remove library libsamba-net-samba4.so from samba-libs package + Remove smbtorture binary and manpage from samba-test- samba fails to build with glibc2.27; (bsc#1081042);- Update to 4.7.5; (bsc#1080545); + smbd tries to release not leased oplock during oplock II downgrade; (bso#13193); + Fix copying file with empty FinderInfo from Windows client to Samba share with fruit; (bso#13181); + build: Deal with recent glibc sunrpc header removal; (bso#10976); + Make Samba work with tirpc and libnsl2; (bso#13238); + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208); (bsc#1075206); + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue; (bso#12986); + ctdb-recovery-helper: Deregister message handler in error paths; (bso#13188); + samba: Only use async signal-safe functions in signal handler; (bso#13240); + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue; (bso#12986); + repl_meta_data: Fix linked attribute corruption on databases with unsorted links on expunge. dbcheck: Add functionality to fix the corrupt database; (bso#13228); + Fix smbd panic when chdir returns error during exit; (bso#13189); + Make Samba work with tirpc and libnsl2; (bso#13238); + Fix POSIX ACL support on HPUX and possibly other big-endian OSs; (bso#13176);- Update to 4.7.4; (bsc#1080545); + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140); + s3: libsmb: Fix valgrind read-after-free error in cli_smb2_close_fnum_recv(); (bso#13171); + s3: libsmb: Fix reversing of oldname/newname paths when creating a reparse point symlink on Windows from smbclient; (bso#13172); + Build man page for vfs_zfsacl.8 with Samba; (bso#12934); + repl_meta_data: Allow delete of an object with dangling backlinks; (bso#13095); + s4:samba: Fix default to be running samba as a deamon; (bso#13129); + Performance regression in DNS server with introduction of DNS wildcard, ldb: Release 1.2.3; (bso#13191); + vfs_zfsacl: Fix compilation error; (bso#6133); + "smb encrypt" setting changes are not fully applied until full smbd restart; (bso#13051); + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052); + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155); + winbindd: Dependency on trusted-domain list in winbindd in critical auth codepath; (bso#13173); + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120); + ctdb: sock_daemon leaks memory; (bso#13153); + TCP tickles not getting synchronised on CTDB restart; (bso#13154); + winbindd: winbind parent and child share a ctdb connection; (bso#13150); + pthreadpool: Fix deadlock; (bso#13170); + pthreadpool: Fix starvation after fork; (bso#13179); + messaging: Always register the unique id; (bso#13180); + s4/smbd: set the process group; (bso#13129); + Fix broken linked attribute handling; (bso#13095); + The KDC on an RWDC doesn't send error replies in some situations; (bso#13132); + libnet_join: Fix 'net rpc oldjoin'; (bso#13149); + g_lock conflict detection broken when processing stale entries; (bso#13195); + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired sessions; (bso#13197); + s3:libads: net ads keytab list fails with "Key table name malformed"; (bso#13166); (bsc#1067700); + Fix crash in pthreadpool thread after failure from pthread_create; (bso#13170); + s4:samba: Allow samba daemon to run in foreground; (bso#13129); (bsc#1065551); + third_party: Link the aesni-intel library with "-z noexecstack"; (bso#13174); + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I" options; (bso#13125);- Re-enable usage of libnsl (did got lost with glibc change) - Use TI-RPC (sunrpc is deprecated and will be removed soon from glibc)- smbc_opendir should not return EEXIST with invalid login credentials; (bnc#1065868).- Update to 4.7.3; (bsc#1069666); + Non-smbd processes using kernel oplocks can hang smbd; (bso#13121); + python: use communicate to fix Popen deadlock; (bso#13127); + smbd on disk file corruption bug under heavy threaded load; (bso#13130); + tevent: version 0.9.34; (bso#13130); + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118); + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug; (bsc#1060427);(bso#13041); + CVE-2017-15275: s3: smbd: Chain code can return uninitialized memory when talloc buffer is grown; (bsc#1063008); (bso#13077); - Build with AD DC support only in openSUSE.- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- samba-tool requires samba-python; (bnc#1067771).- Run all daemons in the foreground and let systemd handle it; (bsc#1065551). - Update to 4.7.1; + Fix exporting subdirs with shadow_copy2; (bso#13091); + Currently if getwd() fails after a chdir(), we panic; (bso#13027); + Ensure default SMB_VFS_GETWD() call can't return a partially completed struct smb_filename; (bso#13068); + sys_getwd() can leak memory or possibly return the wrong errno on older systems; (bso#13069); + smbclient doesn't correctly canonicalize all local names before use; (bso#13093); + Fix broken linked attribute handling; (bso#13095); + Missing LDAP query escapes in DNS rpc server; (bso#12994); + Link to -lbsd when building replace.c by hand; (bso#13087); + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem; (bso#6133); + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module; (bso#7909); + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module; (bso#7933); + Missing assignment in sl_pack_float; (bso#12991); + Wrong Samba access checks when changing DOS attributes; (bso#12995); + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062); + groupmap cleanup should not delete BUILTIN mappings; (bso#13065); + Enabling vfs_fruit results in loss of Finder tags and other xattrs; (bso#13076); + man pages: Properly ident lists; (bso#9613); + smb.conf.5: Sort parameters alphabetically; (bso#13081); + Fix GUID string format on GetPrinter info; (bso#12993); + Remote serverid check doesn't check for the unique id; (bso#13042); + CTDB starts consuming memory if there are dead nodes in the cluster; (bso#13056); + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070); + libgpo doesn't sort the GPOs in the correct order; (bso#13046); + Remote serverid check doesn't check for the unique id; (bso#13042); + vfs_catia: Fix a potential memleak; (bso#13090); + Fix file change notification for renames; (bso#12903); + Samba DNS server does not honour wildcards; (bso#12952); + Can't change password in samba from a Windows client if Samba runs on IPv6 only interface; (bso#13079); + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086); + Apple client can't cope with SMB2 async replies when creating symlinks; (bso#13047); + s4:rpc_server:backupkey: Move variable into scope; (bso#12959); + Fix ntstatus_gen.h generation on 32bit; (bso#13099); + Fix a double free in vfs_gluster_getwd(); (bso#13100); + Fix resouce leaks and pointer issues; (bso#13101); + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);- Add samba-kdc to baselibs.conf. - Do not wrap samba-kdc's package definition into if/endif: the package won't be generated simply based on the fact that there is no files section for the package. Allows the source validator to ensure samba-kdc is a built package.- Update to 4.7.0; + Whole DB read locks: Improved LDAP and replication consistency; (bso#12858). + Samba AD with MIT Kerberos + Dynamic RPC port range: Default range changed from "1024-1300" to "49152-65535". + Authentication and Authorization audit support: New auth_audit debug class. + Multi-process LDAP Server: The LDAP server in the AD DC now honours the process model used for the rest of the 'samba' process. + Improved Read-Only Domain Controller (RODC) Support; (bso#12977). + Additional password hashes stored in supplementalCredentials. + Improvements to DNS during Active Directory domain join. + Significant AD performance and replication improvements. + Query record for open file or directory. + Removal of lpcfg_register_defaults_hook(). + Change of loadable module interface. + SHA256 LDAPS Certificates: The self-signed certificate generated for use on LDAPS will now be generated with a SHA256 self-signature, not a SHA1 self-signature. + CTDB no longer allows mixed minor versions in a cluster. + CTDB now ignores hints from Samba about TDB flags when attaching to databases. + New configuration variable CTDB_NFS_CHECKS_DIR. + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed. + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed. + The example NFS Ganesha call-out has been improved. + A new "replicated" database type is available.- CVE-2017-12163: Prevent client short SMB1 write from writing server memory to file; (bso#13020); (bsc#1058624).- CVE-2017-12150: Some code path don't enforce smb signing, when they should; (bso#12997); (bsc#1058622).- CVE-2017-12151: Keep required encryption across SMB3 dfs redirects; (bso#12996); (bsc#1058565).- Clean specfile assuming SUSE-only system and product >=SLE11 + %{ul_version}, %{rhel_version}, %{mandriva_version}, %{centos_version} are always undefined + %{_vendor} is "suse" and %{suse_version} is at least 1100- Update to 4.6.7; (bsc#1054017) + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392). + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937). + vfs_ceph provides inconsistent directory listings; (bso#12911). + Misused talloc context can cause a user to crash their smbd by chaining SMB1 commands.; (bso#12836). + Use-after free can crash libsmbclient code.; (bso#12927). + Server exit with active AIO can crash.; (bso#12925). + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910). + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs; (bso#12898). + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897). + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for authentication; (bso#12886). + finder sidebar showing question mark instead of icon when using ip to connect with vfs_fruit; (bso#12840). + Winbind stops obtaining the 'unixHomeDirectory' & 'loginShell' attributes from AD.; (bso#12720). + KCC run at selftest startup can fail spuriously due to a race; (bso#12869). + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for the remote change; (bso#12782). + rpc_pipe_client memory leaks due to long term memory context passed to rpc_pipe_open_interface(); (bso#12890). + CVE-2017-2619 breaks accessing previous versions of directories with snapshots in subdirectories of the share; (bso#12885). + dns_name_equal doing OOB read; (bso#12813). + replica_sync tests flap; (bso#12753). + Selftest should not call 'net cache flush' and wipe important winbind entries; (bso#12868). + Old Samba versions don't support using recent ldb versions (>=1.1.30); (bso#12859). + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490). + race starting winbindd against posixacl test; (bso#12843). + Crash in the reentrant smbd_smb2_create_send() if the something fails in the subsequent try; (bso#12832). + spnego.c passes the wrong argument order to gensec_update_ev() for the FALLBACK case; (bso#12788). + Clients with SMB3 support can't connect with "server max protocol = SMB2_02"; (bso#12772). + A log message of samb-tool user syncpasswords reverses string arguments in a debug message "Call Popen[...".; (bso#12768). + The smb tarmode tests kills the share dir contents; (bso#12867). + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862). + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860). + manpage/index.html lists links not in alphabetical order; (bso#12854). + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831). + If a record is locked in a database, then recovery does not complete; (bso#12857). + debug_locks.sh script does not log any information; (bso#12856). + SIGSEGV in cm_connect_lsa_tcp dereferencing conn->lsa_tcp_pipe->transport after error; (bso#12852). + smbclient can't parse DOMAIN+username if a different winbind separator is used; (bso#12849). + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845). + Related requests with TreeConnect fail with NETWORK_NAME_DELETED; (bso#12844). + cli->server_os not filled correctly; (bso#12779). + REGRESSION: smbclient doesn't print the session setup anymore; (bso#12824). + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808). + CTDB NFS call-out failures do not cause event failures; (bso#12837). + net command fails due to incorrectly return code; (bso#12828). + Fix building Samba with GCC 7.1; (bso#12827).- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again; (bsc#1048339).- fix cephwrap_chdir(); (bsc#1048790). - Update to 4.6.6 + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation; (bsc#1048278).- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).- Fix inconsistent ctdb socket path; (bsc#1048352). - Fix non-admin cephx authentication; (bsc#1048387).- Update to 4.6.5; (bsc#1040157) + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at startup; (bso#12814). + vfs_expand_msdfs tries to open the remote address as a file path; (bso#12687). + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type); (bso#12798). + With clustering get update_num_read_oplocks failed and PANIC: num_share_modes == 1 assertion failure; (bso#11844). + contend_level2_oplocks_begin_default oplock optimisation doesn't carry over to leases; (bso#12766). + `ctdb nodestatus` incorrectly displays status for all nodes with wrong exit code; (bso#12802). + CTDB can spin hard on revoking readonly delegations if a node becomes disconnected; (bso#12697). + Printing a share mode entry with leases can crash in the ndr code; (bso#12793). + Fix flakey unit tests for eventd; (bso#12792). + CTDB daemon crashes if built with clang; (bso#12770). + smbcacls fails if no password is specified; (bso#12765). + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757). + samba-tool user syncpasswords doesn't trigger the script when a user gets removed; (bso#12767). + systemd: fix detection of libsystemd; (bso#12764). + Notify subsystem only maps first inotify mask to Windows notify filter; (bso#12760). + Allow passing trusted domain password as plain-text to PASSDB layer; (bso#12751). + Can't case-rename files with vfs_fruit; (bso#12749). + wrong sid->uid mapping for SIDs residing in sIDHistory; (bso#12702). + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562). + Ordering of notify responses broken; (bso#12756).- s3: libsmb: Fix error where short name length was read as 2 bytes, should be 1; (bso#11822); (bsc#1042419).- Revert explicit winbind %{version}-%{release} dependency. + The ABI has stabilized since (bsc#936909), so remove to fix cross-media dependencies; (bsc#1037899).- Fix CVE-2017-7494 remote code execution from a writable share; (bso#12780); (bsc#1038231).- Update to 4.6.3; (bsc#1036011) + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots from shares with GlusterFS backend; (bso#12743). + Fix for Solaris C compiler; (bso#12559). + s3: locking: Update oplock optimization for the leases era; (bso#12628). + Make the Solaris C compiler happy; (bso#12693). + s3: libgpo: Allow skipping GPO objects that don't have the expected LDAP attributes; (bso#12695). + Fix buffer overflow caused by wrong use of getgroups; (bso#12747). + lib: debug: Avoid negative array access; (bso#12746). + cleanupdb: Fix a memory read error; (bso#12748). + streams_xattr and kernel oplocks results in NT_STATUS_NETWORK_BUSY; (bso#7537). + winbindd: idmap_autorid allocates ids for unknown SIDs from other backends; (bso#11961). + vfs_fruit: Resource fork open request with flags=O_CREAT|O_RDONLY; (bso#12565). + manpages/vfs_fruit: Document global options; (bso#12615). + lib/pthreadpool: Fix a memory leak; (bso#12624). + Lookup-domain for well-known SIDs on a DC; (bso#12727). + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728). + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729). + credentials_krb5: use gss_acquire_cred for client-side GSSAPI use case; (bso#12611). + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690). + ctdb-readonly: Avoid a tight loop waiting for revoke to complete; (bso#12697). + ctdb_event monitor command crashes if event is not specified; (bso#12723). + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733). + smbd: Fix smb1 findfirst with DFS; (bso#12558). + smbd: Do an early exit on negprot failure; (bso#12610). + winbindd: Fix substitution for 'template homedir'; (bso#12699). + s4:kdc: Disable principal based autodetected referral detection; (bso#12554). + idmap_autorid: Allocate new domain range if the callers knows the sid is valid; (bso#12613). + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724). + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for trusted domain; (bso#12725). + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731). + winbindd: Fix password policy for pam authentication; (bso#12725). + s3:gse: Correctly handle external trusts with MIT; (bso#12554). + auth/credentials: Always set the realm if we set the principal from the ccache; (bso#12611). + replace: Include sysmacros.h; (bso#12686). + s3:vfs_expand_msdfs: Do not open the remote address as a file; (bso#12687). + s3:libsmb: Only print error message if kerberos use is forced; (bso#12704). + winbindd: Child process crashes when kerberos-authenticating a user with wrong password; (bso#12708). + vfs_fruit: Office document opens as read-only on macOS due to CNID semantics; (bso#12715). + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is fragmented; (bso#12737).- Generate and update vendor-files tarball from Git + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).- Generate source tarball directly from Git using OBS tar_scm + use version string derived from parent Git tag and commit hash - remove obsolete vendor-files/tools/package-data version ID + explicitly generate ctdb manpages, needed without "make dist"- Update to 4.6.2 + remove bso#12721 patches now upstream- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622). + x86-64 and aarch64- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).- Build and install the html man pages (bsc#1021907).- Fix CVE-2017-2619 regression with "follow symlinks = no"; (bso#12721).- Update to 4.6.1 + symlink race permits opening files outside share directory; CVE-2017-2619; (bso#12496); (bsc#1027147) + testparm checks for valid idmap parameters + add new krb client encryption types + support for printer driver upload from windows 10 + inherit owner = 'unix only' for improved quota support + improved CTDB event support + new primary group support for idmap_ad + idmap_hash deprecated + mvxattr added to recursively rename extended attributes- Remove chkconfig requirements for systemd systems- Don't call insserv if systemd is used- Fix check if we need to require insserv- async_req: make async_connect_send() "reentrant"; (bso#12105); (bsc#1024416).- Force usage of ncurses6-config thru NCURSES_CONFIG env var; (bsc#1023847).- add missing patch for libnss_wins segfault; (bsc#995730).- Fix vfs_ceph builds against recent Ceph versions; (bsc#1021933).- Document "winbind: ignore domains" parameter; (bsc#1019416).- Add base Samba dependency to samba-ceph package.- Update to 4.5.3 + Heap-based Buffer Overflow Remote Code Execution Vulnerability; CVE-2016-2123; (bso#12409); (bsc#1014437). + Don't send delegated credentials to all servers; CVE-2016-2125; (bso#12445); (bsc#1014441). + denial of service due to a client triggered crash in the winbindd parent process; CVE-2016-2126; (bso#12446); (bsc#1014442). - 4.5.1 and 4.5.2 updates + various streams vfs fixes + various printing fixes + ntlm_auth: do not map explicitly empty domain + various stability fixes in smbd + match file compression ReFS behavior- Add missing ldb module directory; (bnc#1012092).- s3/client: obey 'disable netbios' smb.conf param, don't connect via NBT port; (bsc#1009085); (bso#12418).- Include vfstest in samba-test; (bsc#1001203).- s3/winbindd: using default domain with user@domain.com format fails; (bsc#997833).- Fix segfault in libnss_wins; (bso#12277); (bso#12269); (bsc#995730).- Update to 4.5.0 + NTLM1 Authentication disabled by default + SMB2.1 leases enabled by default + Support for OFD locks + ctdb tool rewritten + Added shadow copy snapshot prefix parameter- Fix illegal memory access after memory has been deleted; (bso#11836); (bsc#975299).- Prevent core, make sure response->extra_data.data is always cleared out; (bsc#993692).- Don't package man pages for VFS modules that aren't built; (boo#993707).- Fix population of ctdb sysconfig after source merge; (bsc#981566).- Enable vfs_ceph builds for Factory (x86-64) + Package as samba-ceph to avoid Ceph dependency in base package.- Update to 4.4.5 + Prevent client-side SMB2 signing downgrade; CVE-2016-2119; (bso#11860); (bsc#986869).- Remove obsolete syslog.target; (bsc#983938).- Honor smb.conf socket options in winbind; (bsc#975131).- Don't use htons() with IP_PROTO_RAW; (bso#11705); (bsc#969522).- Update to 4.4.4 + SMB3 multichannel: Add implementation of missing channel sequence number verification; (bso#11809). + smbd:close: Only remove kernel share modes if they had been taken at open; (bso#11919). + notifyd: Prevent NULL deref segfault in notifyd_peer_destructor; (bso#11930). + s3:rpcclient: Make '--pw-nt-hash' option work; (bso#10796). + Fix case sensitivity issues over SMB2 or above; (bso#11438). + s3:smbd: Fix anonymous authentication if signing is mandatory. (bso#11910) + Fix NTLM Authentication issue with squid; (bso#11914). + pdb: Fix segfault in pdb_ldap for missing gecos; (bso#11530). + Fix memory leak in share mode locking; (bso#11934).- Update to 4.4.3 + Various post-badlock regressions; (bso#11841); (bso#11850); (bso#11858); (bso#11870); (bso#11872). + Only allow idmap_hash for default idmap config (bso#11786). + smbd: Avoid large reads beyond EOF; (bso#11878). + vfs_acl_common: Avoid setting POSIX ACLs if "ignore system acls" is set; (bso#11806). + libads: Record session expiry for spnego sasl binds; (bso#11852).- Fix NTLMSSP regressions caused by previous CVE fixes; (bso#11849); (bsc#975962); (bsc#979268), (bsc#977669).- Revert shared library packaging to comply with SLPP- Update to 4.4.2 + A man-in-the-middle can downgrade NTLMSSP authentication; CVE-2016-2110; (bso#11688); (bsc#973031). + Domain controller netlogon member computer can be spoofed; CVE-2016-2111; (bso#11749); (bsc#973032). + LDAP conenctions vulnerable to downgrade and MITM attack; CVE-2016-2112; (bso#11644); (bsc#973033). + TLS certificate validation missing; CVE-2016-2113; (bso#11752); (bsc#973034). + Named pipe IPC vulnerable to MITM attacks; CVE-2016-2115; (bso#11756); (bsc#973036). + "Badlock" DCERPC impersonation of authenticated account possible; CVE-2016-2118; (bso#11804); (bsc#971965). + DCERPC server and client vulnerable to DOS and MITM attacks; CVE-2015-5370; (bso#11344); (bsc#936862).- Fix samba.tests.messaging test and prevent potential tdb corruption by removing obsolete now invalid tdb_close call; (bsc#974629).- Obsolete libsmbclient from libsmbclient0 while not providing it; (bsc#972197).- Update to 4.4.0. + Read of uninitialized memory DNS TXT handling; (bso#11128); (bso#11686); CVE-2016-0771. + Getting and setting Windows ACLs on symlinks can change permissions on link target; (bso#11648); CVE-2015-7560. + Sockets with htons(IPPROTO_RAW); (bso#11705); CVE-2015-8543. + s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystem with no ACL support; (bso#10489). + docs: Add example for domain logins to smbspool man page; (bso#11643). + smbd: Show correct disk size for different quota and dfree block sizes; (bso#11681). + docs: Add smbspool_krb5_wrapper manpage; (bso#11690). + winbindd: Return trust parameters when listing trusts; (bso#11691). + ctdb: Do not provide a useless pkgconfig file for ctdb; (bso#11696). + Crypto.Cipher.ARC4 is not available on some platforms, fallback to M2Crypto.RC4.RC4 then; (bso#11699). + s3:utils/smbget: Set default blocksize; (bso#11700). + Streamline 'smbget' options with the rest of the Samba utils; (bso#11700). + s3:clispnego: Fix confusing warning in spnego_gen_krb5_wrap(); (bso#11702). + s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703). + loadparm: Fix memory leak issue; (bso#11708). + lib/tsocket: Work around sockets not supporting FIONREAD; (bso#11714). + s3:vfs:glusterfs: Fix build after quota changes; (bso#11715). + ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ..."; (bso#11719). + lib:socket: Fix CID 1350010: Integer OVERFLOW_BEFORE_WIDEN; (bso#11723). + smbd: Fix CID 1351215 Improper use of negative value; (bso#11724). + smbd: Fix CID 1351216 Dereference null return value; (bso#11725). + s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new file; (bso#11727). + docs: Add manpage for cifsdd; (bso#11730). + param: Fix str_list_v3 to accept ; again; (bso#11732). + lib/socket: Fix improper use of default interface speed; (bso#11734). + lib:socket: Fix CID 1350009: Fix illegal memory accesses (BUFFER_SIZE_WARNING); (bso#11735). + libcli: Fix debug message, print sid string for new_ace trustee; (bso#11738). + Fix installation path of Samba helper binaries; (bso#11739). + Fix memory leak in loadparm; (bso#11740). + tevent: version 0.9.28: Fix memory leak when old signal action restored; (bso#11742). + smbd: Ignore SVHDX create context; (bso#11753). + Fix net join; (bso#11755). + s3:libads: setup the msDS-SupportedEncryptionTypes attribute on ldap_add; (bso#11755). + passdb: Add linefeed to debug message; (bso#11763). + s3:utils/smbget: Fix option parsing; (bso#11767). + libnet: Make Kerberos domain join site-aware; (bso#11769). + Reset TCP Connections during IP failover; (bso#11770). + ldb: Version 1.1.26; (bso#11772). + s3:smbd: Add negprot remote arch detection for OSX; (bso#11773). + vfs_glusterfs: Fix use after free in AIO callback; (bso#11774). + mkdir can return ACCESS_DENIED incorrectly on create race; (bso#11780). + "trustdom_list_done: Got invalid trustdom response" message should be avoided; (bso#11782). + Mismatch between local and remote attribute ids lets replication fail with custom schema; (bso#11783). + Quota is not supported on Solaris 10; (bso#11788). + Talloc: Version 2.1.6; (bso#11789). + smbd: Enable multi-channel if 'server multi channel support = yes' in the config; (bso#11796). + build: Fix build when '--without-quota' specified; (bso#11798). + lib/socket/interfaces: Fix some uninitialied bytes; (bso#11802). + Access based share enum: handle permission set in configuration files; (bso#8093). + See also WHATSNEW.txt from the samba-doc package.- Update to 4.3.6. + Getting and setting Windows ACLs on symlinks can change permissions on link target; CVE-2015-7560; (bso#11648); (bsc#968222). + Fix Out-of-bounds read in internal DNS server; CVE-2016-0771; (bso#11128); (bso#11686); (bsc#968223).- Upgrade on-disk FSRVP server state to new version; (bsc#924519).- Only obsolete but do not provide gplv2/3 package names; (bsc#968973).- Relocate existing lock files to /var/lib/samba/lock; (bsc#968963).- Obsolete no longer existing samba-32bit package; (bsc#967625).- Update to 4.3.5. + s3:utils/smbget: Fix recursive download; (bso#6482). + s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystemi with no ACL support; (bso#10489). + s3:smbd/oplock: Obey kernel oplock setting when releasing oplocks; (bso#11400). + vfs_shadow_copy2: Fix case where snapshots are outside the share; (bso#11580). + smbclient: Query disk usage relative to current directory; (bso#11662). + winbindd: Handle expired sessions correctly; (bso#11670). + smbd: Show correct disk size for different quota and dfree block sizes; (bso#11681). + smbcacls: Fix uninitialized variable; (bso#11682). + s3:smbd: Ignore initial allocation size for directory creation; (bso#11684). + s3-client: Add a KRB5 wrapper for smbspool; (bso#11690). + s3-parm: Clean up defaults when removing global parameters; (bso#11693). + Use M2Crypto.RC4.RC4 on platforms without Crypto.Cipher.ARC4; (bso#11699). + s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703). + ctdb: Remove error messages after kernel security update; CVE-2015-8543; (bso#11705). + loadparm: Fix memory leak issue; (bso#11708). + lib/tsocket: Work around sockets not supporting FIONREAD; (bso#11714). + ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ..."; (bso#11719). + s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new file; (bso#11727). + param: Fix str_list_v3 to accept ";" again; (bso#11732).- Shift samba-client sysconfig data into samba and samba-winbind; (bsc#947361).- Simplify shared library packaging; (bsc#966956).- Enable clustering (CTDB) support; (bsc#966271).- s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703); (bsc#964023).- Add quotes around path of update-apparmor-samba-profile; (bnc#962177).- Remove autoconf build-time requirement.- Update to 4.3.4. + vfs_fruit: Enable POSIX directory rename semantics; (bso#11065). + Crash: Bad talloc magic value - access after free; (bso#11394). + Copying files with vfs_fruit fails when using vfs_streams_xattr without stream prefix and type suffix; (bso#11466). + samba-tool: Fix uncaught exception if no fSMORoleOwner attribute is given; (bso#11613). + Fix a typo in the smb.conf manpage, explanation of idmap config; (bso#11619). + Correctly initialize the list head when keeping a list of primary followed by DFS connections; (bso#11624). + Reduce the memory footprint of empty string options; (bso#11625). + lib/async_req: Do not install async_connect_send_test; (bso#11639). + Fix typos in man vfs_gpfs; (bso#11641). + Make "hide dot files" option work with "store dos attributes = yes"; (bso#11645). + Fix a corner case of the symlink verification; (bso#11647); (bnc#960249). + Do not disable "store dos attributes" on-the-fly; (bso#11649). + Update lastLogon and lastLogonTimestamp; (bso#11659).- Prevent access denied if the share path is "/"; (bso#11647); (bnc#960249).- Update to 4.3.3. + Malicious request can cause Samba LDAP server to hang, spinning using CPU; CVE-2015-3223; (bso#11325); (bnc#958581). + Remote read memory exploit in LDB; CVE-2015-5330; (bso#11599); (bnc#958586). + Insufficient symlink verification (file access outside the share); CVE-2015-5252; (bso#11395); (bnc#958582). + No man in the middle protection when forcing smb encryption on the client side; CVE-2015-5296; (bso#11536); (bnc#958584). + Currently the snapshot browsing is not secure thru windows previous version (shadow_copy2); CVE-2015-5299; (bso#11529); (bnc#958583). + Fix Microsoft MS15-096 to prevent machine accounts from being changed into user accounts; CVE-2015-8467; (bso#11552); (bnc#958585).- Update to 4.3.2. + vfs_gpfs: Re-enable share modes; (bso#11243). + dcerpc.idl: Accept invalid dcerpc_bind_nak pdus; (bso#11327). + s3-smbd: Fix old DOS client doing wildcard delete - gives an attribute type of zero; (bso#11452). + Add libreplace dependency to texpect, fixes a linking error on Solaris; (bso#11511). + s4: Fix linking of 'smbtorture' on Solaris; (bso#11512). + s4:lib/messaging: Use correct path for names.tdb; (bso#11562). + Fix segfault of 'net ads (join|leave) -S INVALID' with nss_wins; (bso#11563). + async_req: Fix non-blocking connect(); (bso#11564). + auth: gensec: Fix a memory leak; (bso#11565). + lib: util: Make non-critical message a warning; (bso#11566). + Fix winbindd crashes with samlogon for trusted domain user; (bso#11569); (bnc#949022). + smbd: Send SMB2 oplock breaks unencrypted; (bso#11570). + ctdb: Open the RO tracking db with perms 0600 instead of 0000; (bso#11577). + s3:smb2_server: Make the logic of SMB2_CANCEL DLIST_REMOVE() clearer; (bso#11581). + s3-smbd: Fix use after issue in smbd_smb2_request_dispatch(); (bso#11581). + manpage: Correct small typo error; (bso#11584). + s3: smbd: If EAs are turned off on a share don't allow an SMB2 create containing them; (bso#11589). + Backport some valgrind fixes from upstream master; (bso#11597). + auth: Consistent handling of well-known alias as primary gid; (bso#11608). + winbind: Fix crash on invalid idmap configs; (bso#11612). + s3: smbd: have_file_open_below() fails to enumerate open files below an open directory handle; (bso#11615). + Changing log level of two entries to DBG_NOTICE; (bso#9912).- Ensure samlogon fallback requests are rerouted after kerberos failure; (bnc#953382); (bnc#953972).- Ensure to link with --as-needed flag by removing SUSE_ASNEEDED=0. - Always use the default optimization even on pre-9.2 systems.- Remove redundant configure options while adding with-relro.- Relocate the lockdir to the /var/lib/samba/lock directory.- Cleanup and enhance the pidl sub package.- Require renamed python-ldb-devel and python-talloc-devel at build-time. - Requires python-ldb and python-talloc from the python subpackage.- Update to 4.3.1. + s3: smbd: Fix our access-based enumeration on "hide unreadable" to match Windows; (bso#10252). + nss_winbind: Fix hang on Solaris on big groups; (bso#10365). + smbd: Fix file name buflen and padding in notify repsonse; (bso#10634). + kerberos: Make sure we only use prompter type when available; winbind: Fix 100% loop; (bso#11038). + source3/lib/msghdr.c: Fix compiling error on Solaris; (bso#11053). + s3:ctdbd_conn: make sure we destroy tevent_fd before closing the socket; (bso#11316). + s3: smbd: Fix mkdir race condition; (bso#11486). + pam_winbind: Fix a segfault if initialization fails; (bso#11502). + s3: dfs: Fix a crash when the dfs targets are disabled; (bso#11509). + s4:lib/messaging: Use 'msg.lock' and 'msg.sock' for messaging related subdirs; (bso#11515). + s3: smbd: Fix opening/creating :stream files on the root share directory; (bso#11522). + lib/param: Fix hiding of FLAG_SYNONYM values; (bso#11526). + net: Fix a crash with 'net ads keytab create'; (bso#11528). + s3: smbd: Fix a crash in unix_convert(); (bso#11535). + s3: smbd: Fix NULL pointer bug introduced by previous 'raw' stream fix (bso#11522); (bso#11535). + vfs_fruit: Return value of ad_pack in vfs_fruit.c; (bso#11543). + vfs_commit: set the fd on open before calling SMB_VFS_FSTAT; (bso#11547). + s3:locking: Initialize lease pointer in share_mode_traverse_fn(); (bso#11549). + s3:smbstatus: Add stream name to share_entry_forall(); (bso#11550). + s3:lib: Validate domain name in lookup_wellknown_name(); (bso#11555). + s3: lsa: lookup_name() logic for unqualified (no DOMAIN component) names is incorrect; (bso#11555).- Fix 100% CPU in winbindd when logging in with "user must change password on next logon"; (bso#11038).- Relocate the tmpfiles.d directory to the client package; (bnc#947552).- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf instead; (bnc#942716).- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).- Package /var/lib/samba/msg with 0755 permissions; (bso#11515); (bnc#945502).- Require to install libfam0-gamin from samba-libs on post-12.1 and pre-13.15 systems; (bnc#945013).- Update to 4.3.0. + Samba "map to guest = Bad uid" doesn't work; (bso#9862). + revert LDAP extended rule 1.2.840.113556.1.4.1941 LDAP_MATCHING_RULE_IN_CHAIN changes; (bso#10493). + No objectClass found in replPropertyMetaData on ordinary objects (non-deleted); (bso#10973). + Stream names with colon don't work with fruit:encoding = native; (bso#11278). + NetApp joined to a Samba/ADDC cannot resolve SIDs; (bso#11291). + tevent_fd needs to be destroyed before closing the fd; (bso#11316). + "force group" with local group not working; (bso#11320). + strsep is not available on Solaris; (bso#11359). + smbtorture does not build when configured --with-system-mitkrb5; (bso#11411). + Build with GPFS support is broken; (bso#11421). + Build broken with --disable-python; (bso#11424). + net share allowedusers crashes; (bso#11426). + nmbd incorrectly matches netbios names as own name; (bso#11427). + Python bindings don't check integer types; (bso#11429). + Python bindings don't check array sizes; (bso#11430). + CTDB's eventscript error handling is broken; (bso#11431). + Fix crash in nested ctdb banning; (bso#11432). + Cannot build ctdbpmda; (bso#11434). + samba-tool uncaught exception error; (bso#11436). + Crash in notify_remove caused by change notify = no; (bso#11444). + Poor SMB3 encryption performance with AES-GCM; (bso#11451). + Poor SMB3 encryption performance with AES-GCM (part1); (bso#11451). + fix recursion problem in rep_strtoll in lib/replace/replace.c; (bso#11455). + --bundled-libraries=!ldb,!pyldb,!pyldb-util doesn't disable ldb build and install; (bso#11458). + xid2sid gives inconsistent results; (bso#11464). + ctdb: Fix the build on FreeBSD 10.1; (bso#11465). + Handling of 0 byte resource fork stream; (bso#11467). + AD samr GetGroupsForUser fails for users with "()" in their name; (bso#11488).- Configure with --bundled-libraries=NONE; (bso#11458).- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).- Remove libiniparser-devel build-time requirement.- Update to 4.2.3. + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780). + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924). + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991). + Logon via MS Remote Desktop hangs; (bso#11061). + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068). + tevent: Add a note to tevent_add_fd(); (bso#11141). + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170). + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217). + smbd: Fix a use-after-free; (bso#11218); (bnc#919309). + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces; (bso#11245). + s3:smb2: Add padding to last command in compound requests; (bso#11277). + Add IPv6 support to ADS client side LDAP connects; (bso#11281). + Add IPv6 support for determining FQDN during ADS join; (bso#11282). + s3: IPv6 enabled DNS connections for ADS client; (bso#11283). + Fix invalid write in ctdb_lock_context_destructor; (bso#11293). + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295). + vfs_fruit: Add option "veto_appledouble"; (bso#11305). + tstream: Make socketpair nonblocking; (bso#11312). + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313). + Group creation: Add msSFU30Name only when --nis-domain was given; (bso#11315). + tevent_fd needs to be destroyed before closing the fd; (bso#11316). + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared"; (bso#11319). + smbd/trans2: Add a useful diagnostic for files with bad encoding; (bso#11323). + Change sharesec output back to previous format; (bso#11324). + Robust mutex support broken in 1.3.5; (bso#11326). + Kerberos auth info3 should contain resource group ids available from pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info exists in PAC; (bso#11328); (bnc#912457). + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329). + tevent: Fix CID 1035381 Unchecked return value; (bso#11330). + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331). + s3: smbd: Use separate flag to track become_root()/unbecome_root() state; (bso#11339). + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342). + pidl: Make the compilation of PIDL producing the same results if the content hasn't change; (bso#11356). + winbindd: Disconnect child process if request is cancelled at main process; (bso#11358). + vfs_fruit: Check offset and length for AFP_AfpInfo read requests; (bso#11363). + docs: Overhaul the description of "smb encrypt" to include SMB3 encryption; (bso#11366). + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server(); (bso#11367). + ncacn_http: Fix GNUism; (bso#11371).- Disable rpath usage; (bnc#902421).- Make the winbind package depend on the matching libwbclient version and vice versa; (bnc#936909).- Backport changes to use resource group sids obtained from pac logon_info; (bso#11328); (bnc#912457).- Order winbind.service Before and Want nss-user-lookup target.- Remove fam-devel build-time dependency for post-6 RHEL systems.- Update to 4.2.2. + s3:smbXsrv: refactor duplicate code into smbXsrv_session_clear_and_logoff(); (bso#11182). + gencache: don't fail gencache_stabilize if there were records to delete; (bso#11260). + s3: libsmbclient: After getting attribute server, ensure main srv pointer is still valid; (bso#11186). + s4: rpc: Refactor dcesrv_alter() function into setup and send steps; (bso#11236). + s3: smbd: Incorrect file size returned in the response of "FILE_SUPERSEDE Create"; (bso#11240). + Mangled names do not work with acl_xattr; (bso#11249). + nmbd rewrites browse.dat when not required; (bso#11254). + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff; (bso#11213). + s3:smbd: Add missing tevent_req_nterror; (bso#11224). + vfs: kernel_flock and named streams; (bso#11243). + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244). + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses are used; (bso#11284). + ctdb: check for talloc_asprintf() failure; (bso#11201). + spoolss: purge the printer name cache on name change; (bso#11210); (bnc#901813). + CTDB statd-callout does not scale; (bso#11204). + vfs_fruit: also map characters below 0x20; (bso#11221). + ctdb: Coverity fix for CID 1291643; (bso#11201). + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225). + Fix terminate connection behavior for asynchronous endpoint with PUSH notification flavors; (bso#11226). + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007). + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201). + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the directory is deleted; (bso#11257). + s3:winbindd: make sure we remove pending io requests before closing client sockets; (bso#11141); (bnc#931854). + Fix panic triggered by smbd_smb2_request_notify_done() -> smbXsrv_session_find_channel() in smbd; (bso#11182). + 'sharesec' output no longer matches input format; (bso#11237). + waf: Fix systemd detection; (bso#11200). + CTDB: Fix portability issues; (bso#11202). + CTDB: Fix some IPv6-related issues; (bso#11203). + CTDB statd-callout does not scale; (bso#11204). + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you enter invalid values; (bso#11234). + libads: record service ticket endtime for sealed ldap connections; (bso#11267). + lib/util: Include DEBUG macro in internal header files before samba_util.h; (bso#11033).- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).- Remove the independently built libraries ldb, talloc, tdn, and tevent and the post-10.3 renamed libsmbclient from baselibs.conf.- Drop redundant doc attribute from man pages.- Update to 4.2.1. + s3:winbind:grent: Don't stop group enumeration when a group has no gid; (bso#8905). + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791). + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with servers that don't send the 2 unused fields; (bso#10016). + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476). + waf: Fix the build on openbsd; (bso#10476). + s3: client: "client use spnego principal = yes" code checks wrong name; (bso#10888). + spoolss: Retrieve published printer GUID if not in registry; (bso#11018). + s3: lib: libsmbclient: If reusing a server struct, check every cli->timout miliseconds if it's still valid before use; (bso#11079). + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125). + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135). + replace: Remove superfluous check for gcrypt header; (bso#11135). + Backport subunit changes; (bso#11137). + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with implementation; (bso#11140). + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143). + talloc: Version 2.1.2; (bso#11144). + Update libwbclient version to 0.12; (bso#11149). + brlock: Use 0 instead of empty initializer list; (bso#11153). + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164). + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169); (bnc#913304). + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev fails in the SMB1 case; (bso#11173). + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174). + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175). + s3: libsmbclient: Add missing talloc stackframe; (bso#11177). + s4-process_model: Do not close random fds while forking; (bso#11180). + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).- Prevent samba package updates from disabling samba kerberos printing.- Add sparse file support for samba; (fate#318424).- Purge printer name cache on spoolss SetPrinter change; (bso#11210); (bnc#901813).- Correctly retain errno from Btrfs snapshot ioctls; (bnc#923374).- Simplify libxslt build requirement and README.SUSE install. - Remove no longer required cleanup steps while populating the build root.- Remove deprecated base_rid example from idmap_rid manpage; (bso#11169); (bnc#913304).- Update to 4.2.0. + smbd: Stop using vfs_Chdir after SMB_VFS_DISCONNECT; (bso#1115). + pam_winbind: fix warn_pwd_expire implementation; (bso#9056). + nsswitch: Fix soname of linux nss_*.so.2 modules; (bso#9299). + Make 'profiles' work again; (bso#9629). + s3:smb2_server: protect against integer wrap with "smb2 max credits = 65535"; (bso#9702). + Make validate_ldb of String(Generalized-Time) accept millisecond format ".000Z"; (bso#9810). + Use -R linker flag on Solaris, not -rpath; (bso#10112). + vfs: Add glusterfs manpage; (bso#10240). + Make 'smbclient' use cached creds; (bso#10279). + pdb: Fix build issues with shared modules; (bso#10355). + s4-dns: Add support for BIND 9.10; (bso#10620). + idmap: Return the correct id type to *id_to_sid methods; (bso#10720). + printing/cups: Pack requested-attributes with IPP_TAG_KEYWORD; (bso#10808). + Don't build vfs_snapper on FreeBSD; (bso#10834). + nss_winbind: Add getgroupmembership for FreeBSD; (bso#10835). + idmap_rfc2307: Fix a crash after connection problem to DC; (bso#10837). + s3: smb2cli: query info return length check was reversed; (bso#10848). + s3: lib, s3: modules: Fix compilation on Solaris; (bso#10849). + lib: uid_wrapper: Fix setgroups and syscall detection on a system without native uid_wrapper library; (bso#10851). + winbind3: Fix pwent variable substitution; (bso#10852). + Improve samba-regedit; (bso#10859). + registry: Don't leave dangling transactions; (bso#10860). + Fix build of socket_wrapper on systems without SO_PROTOCOL; (bso#10861). + build: Do not install 'texpect' binary anymore; (bso#10862). + Fix testparm to show hidden share defaults; (bso#10864). + libcli/smb: Fix smb2cli_validate_negotiate_info with min=PROTOCOL_NT1 max=PROTOCOL_SMB2_02; (bso#10866). + Integrate CTDB into top-level Samba build; (bso#10892). + samba-tool group add: Add option '--nis-domain' and '--gid'; (bso#10895). + s3-nmbd: Fix netbios name truncation; (bso#10896). + spoolss: Fix handling of bad EnumJobs levels; (bso#10898). + Fix smbclient loops doing a directory listing against Mac OS X 10 server with a non-wildcard path; (bso#10904). + Fix print job enumeration; (bso#10905); (bnc#898031). + samba-tool: Create NIS enabled users and unixHomeDirectory attribute; (bso#10909). + Add support for SMB2 leases; (bso#10911). + btrfs: Don't leak opened directory handle; (bso#10918). + s3: nmbd: Ensure NetBIOS names are only 15 characters stored; (bso#10920). + s3:smbd: Fix file corruption using "write cache size != 0"; (bso#10921). + pdb_tdb: Fix a TALLOC/SAFE_FREE mixup; (bso#10932). + s3-keytab: fix keytab array NULL termination; (bso#10933). + s3:passdb: fix logic in pdb_set_pw_history(); (bso#10940). + Cleanup add_string_to_array and usage; (bso#10942). + dbwrap_ctdb: Pass on mutex flags to tdb_open; (bso#10942). + Fix RootDSE search with extended dn control; (bso#10949). + Fix 'samba-tool dns serverinfo ' for IPv6; (bso#10952). + libcli/smb: only force signing of smb2 session setups when binding a new session; (bso#10958). + s3-smbclient: Return success if we listed the shares; (bso#10960). + s3-smbstatus: Fix exit code of profile output; (bso#10961). + socket_wrapper: Add missing prototype check for eventfd; (bso#10965). + libcli: SMB2: Pure SMB2-only negprot fix to make us behave as a Windows client does; (bso#10966). + vfs_streams_xattr: Check stream type; (bso#10971). + s3: smbd: Fix *allocate* calls to follow POSIX error return convention; (bso#10982). + vfs_fruit: Add support for AAPL; (bso#10983). + Fix spoolss IDL response marshalling when returning error without clearing info; (bso#10984). + dsdb-samldb: Check for extended access rights before we allow changes to userAccountControl; (bso#10993); CVE-2014-8143; (boo#914279). + Fix IPv6 support in CTDB; (bso#10996). + ctdb-daemon: Use correct tdb flags when enabling robust mutex support; (bso#11000). + vfs_streams_xattr: Add missing call to SMB_VFS_NEXT_CONNECT; (bso#11005). + s3-util: Fix authentication with long hostnames; (bso#11008). + ctdb-build: Fix build without xsltproc; (bso#11014). + packaging: Include CTDB man pages in the tarball; (bso#11014). + pdb_get_trusteddom_pw() fails with non valid UTF16 random passwords; (bso#11016). + Make Sharepoint search show user documents; (bso#11022). + nss_wrapper: check for nss.h; (bso#11026). + Enable mutexes in gencache_notrans.tdb; (bso#11032). + tdb_wrap: Make mutexes easier to use; (bso#11032). + lib/util: Avoid collision which alread defined consumer DEBUG macro; (bso#11033). + winbind: Retry after SESSION_EXPIRED error in ping-dc; (bso#11034). + s3-libads: Fix a possible segfault in kerberos_fetch_pac(); (bso#11037). + vfs_fruit: Fix base_fsp name conversion; (bso#11039). + vfs_fruit: mmap under FreeBSD needs PROT_READ; (bso#11040). + Fix authentication using Kerberos (not AD); (bso#11044). + net: Fix sam addgroupmem; (bso#11051). + vfs_snapper: Correctly handles multi-byte DBus strings; (bso#11055); (bnc#913238). + cli_connect_nb_send: Don't segfault on host == NULL; (bso#11058). + utils: Fix 'net time' segfault; (bso#11058). + libsmb: Provide authinfo domain for encrypted session referrals; (bso#11059). + s3-pam_smbpass: Fix memory leak in pam_sm_authenticate(); (bso#11066). + vfs_glusterfs: Add comments to the pipe(2) code; (bso#11069). + vfs/glusterfs: Change xattr key to match gluster key; (bso#11069). + vfs_glusterfs: Implement AIO support; (bso#11069). + s3-vfs: Fix developer build of vfs_ceph module; (bso#11070). + s3: netlogon: Ensure we don't call talloc_free on an uninitialized pointer; (bso#11077); CVE-2015-0240; (bnc#917376). + vfs: Add a brief vfs_ceph manpage; (bso#11088). + s3: smbclient: Allinfo leaves the file handle open; (bso#11094). + Fix Win8.1 Credentials Manager issue after KB2992611 on Samba domain; (bso#11097). + debug: Set close-on-exec for the main log file FD; (bso#11100). + s3: smbd: leases - losen paranoia check. Stat opens can grant leases; (bso#11102). + s3: smbd: SMB2 close. If a file has delete on close, store the return info before deleting; (bso#11104). + doc:man:vfs_glusterfs: improve the configuration section; (bso#11117). + snprintf: Try to support %j; (bso#11119). + ctdb-io: Do not use sys_write to write to client sockets; (bso#11124). + doc-xml: Add 'sharesec' reference to 'access based share enum'; (bso#11127).- Update to 4.2.0rc5. + Ensure we don't call talloc_free on an uninitialized pointer; CVE-2015-0240; (bso#11077); (bnc#917376).- Fix usage of freed memory on server exit; (bso#11218); (bnc#919309).- Fix tdb_store_flag_to_ntdb() gcc5 build failure.- Fix vfs_snapper DBus string handling; (bso#11055); (bnc#913238).- Update to 4.1.16. + dsdb-samldb: Check for extended access rights before we allow changes to userAccountControl; (bso#10993); CVE-2014-8143; (boo#914279).- Adjust baselibs.conf due to libpdb0 package rename to libsamba-passdb0.- Fix libsmbclient DFS referral handling. + Reuse connections derived from DFS referrals; (bso#10123); (fate#316512). + Set domain/workgroup based on authentication callback value; (bso#11059).- Update to 4.2.0rc4. - Add libsamba-debug, libsocket-blocking, libsamba-cluster-support, and libhttp to the libs package; (boo#913547). - Rename libpdb packages to libsamba-passdb. - Drop libsmbsharemodes packages.- Enable avahi support on post-12.2 systems.- Update to 4.1.15. + pam_winbind: Fix warn_pwd_expire implementation; (bso#9056). + nsswitch: Fix soname of linux nss_*.so.2 modules; (bso#9299). + Fix profiles tool; (bso#9629). + s3-lib: Do not require a password with --use-ccache; (bso#10279). + s4:dsdb/rootdse: Expand extended dn values with the AS_SYSTEM control; (bso#10949). + s4-rpc: dnsserver: Fix enumeration of IPv4 and IPv6 addresses; (bso#10952). + s3:smb2_server: Allow reauthentication without signing; (bso#10958). + s3-smbclient: Return success if we listed the shares; (bso#10960). + s3-smbstatus: Fix exit code of profile output; (bso#10961). + libcli: SMB2: Pure SMB2-only negprot fix to make us behave as a Windows client does; (bso#10966). + s3: smbd/modules: Fix *allocate* calls to follow POSIX error return convention; (bso#10982). + Fix 'domain join' by adding 'drsuapi.DsBindInfoFallBack' attribute 'supported_extensions'; (bso#11006). + idl:drsuapi: Manage all possible lengths of drsuapi_DsBindInfo; (bso#11006). + winbind: Retry LogonControl RPC in ping-dc after session expiration; (bso#11034).- yast2-samba-client should be able to specify osName and osVer on AD domain join; (bnc#873922).- Lookup FSRVP share snums at runtime rather than storing them persistently; (bnc#908627).- Specify soft dependency for network-online.target in Winbind systemd service file; (bnc#889175).- Fix spoolss error response marshalling; (bso#10984).- Update to 4.1.14. + pidl/wscript: Remove --with-perl-* options; revert buildtools/wafadmin/ Tools/perl.py back to upstream state; (bso#10472). + s4-dns: Add support for BIND 9.10; (bso#10620). + nmbd fails to accept "--piddir" option; (bso#10711). + nss_winbind: Add getgroupmembership for FreeBSD; (bso#10835). + S3: source3/smbd/process.c::srv_send_smb() returns true on the error path; (bso#10880). + vfs_glusterfs: Remove "integer fd" code and store the glfs pointers; (bso#10889). + s3-nmbd: Fix netbios name truncation; (bso#10896). + spoolss: Fix handling of bad EnumJobs levels; (bso#10898). + s3: libsmbclient-smb2. MacOSX 10 SMB2 server doesn't set STATUS_NO_MORE_FILES when handed a non-wildcard path; (bso#10904). + spoolss: Fix jobid in level 3 EnumJobs response; (bso#10905). + s3: nmbd: Ensure NetBIOS names are only 15 characters stored; (bso#10920). + s3:smbd: Fix file corruption using "write cache size != 0"; (bso#10921). + pdb_tdb: Fix a TALLOC/SAFE_FREE mixup; (bso#10932). + s3-keytab: Fix keytab array NULL termination; (bso#10933). + Cleanup add_string_to_array and usage; (bso#10942).- Remove and cleanup shares and registry state associated with externally deleted snaphots exposed as shadow copies; (bnc#876312).- Use the upstream tar ball, as signature verification is now able to handle compressed archives.- Fix leak when closing file descriptor returned from dirfd; (bso#10918).- Fix spoolss EnumJobs and GetJob responses; (bso#10905); (bnc#898031). + Fix handling of bad EnumJobs levels; (bso#10898).- Remove dependency on gpg-offline as signature checking is implemented in the source validator.- Update to 4.1.13. + s3-libnet: Add libnet_join_get_machine_spns(); (bso#9984). + s3-libnet: Make sure we do not overwrite precreated SPNs; (bso#9984). + s3-libads: Add all machine account principals to the keytab; (bso#9985). + s3: winbindd: Old NT Domain code sets struct winbind_domain->alt_name to be NULL. Ensure this is safe with modern AD-DCs; (bso#10717). + Fix unstrcpy; (bso#10735). + pthreadpool: Slightly serialize jobs; (bso#10779). + s3: smbd: streams - Ensure share mode validation ignores internal opens (op_mid == 0); (bso#10797). + s3: smbd:open_file: Open logic fix; Use a more natural check; (bso#10809). + vfs_media_harmony: Fix a crash bug; (bso#10813). + docs: Mention incompatibility between kernel oplocks and streams_xattr; (bso#10814). + nmbd: Send waiting status to systemd; (bso#10816). + libcli: Fix a segfault calling smbXcli_req_set_pending() on NULL; (bso#10817). + nsswitch: Skip groups we were not able to map; (bso#10824). + s3-winbindd: Use correct realm for trusted domains in idmap child; (bso#10826). + s3: nmbd: Ensure the main nmbd process doesn't create zombies; (bso#10830). + s3: lib: Signal handling - ensure smbrun and change password code save and restore existing SIGCHLD handlers; (bso#10831). + idmap_rfc2307: Fix a crash after connection problem to DC; (bso#10837). + s3-winbindd: Do not use domain SID from LookupSids for Sids2UnixIDs call; (bso#10838). + s3: smb2cli: Query info return length check was reversed; (bso#10848). + registry: Don't leave dangling transactions; (bso#10860).- Update to 4.2.0rc2./sbin/ldconfig/sbin/ldconfigs390zp34 1658744578  !"#$%&4.15.8+git.500.d5910280cc7-150400.3.11.14.15.8+git.500.d5910280cc7-150400.3.11.1samba.solibdcerpc-server.so.0libdcerpc-server.so.0.0.1bind9dlz_bind9_10.sodlz_bind9_11.sodlz_bind9_12.sodlz_bind9_14.sodlz_bind9_16.sodlz_bind9_18.sogenseckrb5.solibdb-glue-samba4.solibdlz-bind9-for-torture-samba4.solibdsdb-garbage-collect-tombstones-samba4.solibdsdb-module-samba4.solibpac-samba4.solibprocess-model-samba4.solibscavenge-dns-records-samba4.solibservice-samba4.sosamba_dsdb.soprocess_modelprefork.sostandard.soservicecldap.sodcerpc.sodns.sodns_update.sodrepl.sokcc.sokdc.soldap.sonbtd.sontp_signd.sos3fs.sowinbindd.sowrepl.so/usr/lib64/krb5/plugins/kdb//usr/lib64//usr/lib64/samba//usr/lib64/samba/bind9//usr/lib64/samba/gensec//usr/lib64/samba/pdb//usr/lib64/samba/process_model//usr/lib64/samba/service/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:25017/SUSE_SLE-15-SP4_Update/a5f316dea5f06e3771d2e9522c42f892-samba.SUSE_SLE-15-SP4_Updatecpioxz5s390x-suse-linux   !"ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=517a60ec27eb1c78baa4dab2d294990306a2e25f, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=8bbb560cfdd1d3285cee4e87d73738faf553500d, strippeddirectoryELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=cba92decf33a293fb0a603ff73a53ef155b6a5b5, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=6c274be23485ebb572d301eda6ff03ae95a1dcdf, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=9c867ec3acc76c1c77177c1db1569d55a71d7a92, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=1f7fa09a3cf5ea9a2b0979a16ce71809b6c7bbf1, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=70827697f2ec6a0abd93da9a51d8d3e7892b8045, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=ecc6fdd2a31b52ced802ca8916ace30c0a82b8c2, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=06641645159a6ff268041f259708b990d3d8b9d0, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=79a3391770ead4183ad1b066b952420754cf9c45, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=789a58a20b11b778ff3620826bd601a388076124, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=ac2fc6e85375f5ed93c0b2923ac01a6e0a4acdc8, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=cdca827e4c08e042400b8f049fadd36eccf2373c, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=eca29317df4a0804a6bfd02ef8417990ba2cc02a, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=0375ad9eab7a0bb26a800a92f01f10d7b576d4d7, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=9aa605491cea8924ad4ef70a0bd0151b3a40fb9c, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=932ac274e6f4731fa0868d24a8a69d5548c05c32, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=47fce4931fc06eff0ad756281eff253c89a8bac4, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=29dd34d649a1925b38eec680fe907ff4397149d3, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=04ba8733fd0a2cc2ef37ae175a98b52a13b85def, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=ab1188e6798fe4611741a437ad44696057bca9e1, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=23a6cef4ed96b314c7f60c077e7cdbcc2cd61289, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=4db46b631a36f80014eff5164fdf19e1c5e65223, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=e063b10d2eccccae7baf551b7ccf306c53bfce29, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=951b818d4e25b8ba439259d7e2fd562941e99d3d, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=fa9de3466537a588aa8cc489350e33c0bd4faf1f, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=e7a3b8f23c20e744b05daf96854d1fbc2dec892b, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=c27ab49d2739bee0b24386785c0144837ce74eef, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=3f9806410c965ac0ae12348a5520e2006a7a66b0, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=d5df168b1c7d9eb9e6ffe1132a29946b7ccfd54e, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=1e953a2af3026775a4059e746a11a4170fedfd20, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=9fc99e4361f332866b71480b71b3f2ce034fe9e9, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=669ca09e37f2b2a3302fc575b141270b19f98e65, stripped*:\|=Pq$;s3n*f"""""" 0$)'!'*$!8"2)C;2'1RzR?RRRPRRJR RRRNRRRR~R%RrRRRFRLRRRyRqR$RR}RR RRMRR>RKRER!RRRIRORPPR=RR9R RzRRR3R?RxR5R'R|RnR-RRR+R_RYRARRLRR/RRRR~RDRCR#RRaR)RRRcRjRkRlRiRgR RRReRRVRWRPRRRRfR8R(RR{R4R`RR R.RRR2RRRRR^RmRRdRbR@RRyRRR RXR&RR,R}R*R>R"RRRwRKRRRORPPRR RR;R|RARRtRR~RRR5RRRVRPRRR@R4RRR R}R{RRRR:RRsRORPPRRRRRlRgRiRYRRaR~RPRRR)R`R(RfRXRRRR}RRRORP PRRzRRnRR=RRRR~RRRRRRTRQRURRRPRYRgRfRRRyRRRR,$XJ`w #Y3-vO4%t!ANnlDr)%WKH:.>ԜtOc„Akf 2Ng͍LS9ze.j޻bb21rܞdLlޮ tSjbH}#QqծkG,As&$K%6JX嶦89^mXn*Kj6™"T"'CfB7˦u-f O@h5ur1/仢Ca /D $R(1gҎPN>WWƧq ts'ϋ3Ll{5}|ƚ[|*^_P]GSIZfG·c~C+N`<^ HthSrSip袓f[ZvI0t nrI=@Ag+%eoi|3Ξoq ggC`J i 2l6q!|>"Woմ<3=A'e(J g!{U.VG*4G=p&k5 .sb8w4I=L$ZiZE/ej۴DV9a {?jh HҶВY ByfXKz7+h:Z୞Z<ۀ\ٰsr9764L,W-4S^! |  &&O[8F\[LGX}bߓ&Te⋼@,ȉ^y9g0Pp $] 8ZZ[ o'Y_],$,"ǥ4?> ͢K%}Ik>\.97L,Z-bw!2w4C6 ב9_yTYG_5~+>߉W47γ6f-%KES-%Ml0,\T. UsE-p_F]N#XׄM ^{$q 8xI*mߍ M 'tTkm gԬ aF^a5{#H,. ?'ܡp4_ZٟO ?3|l} fnZ??IAY* a` $?"+Z}mvLnIw)a%?ܟ&5F$_(0wn:ZepU[H:t~F2L#Hq?0Ry[9w.v7*fRU6`aAB`!x.q>'ՉLӛU` W |}0W1LrD{~{aK;,|lR\NHW좇Ƈ% vS,v/9BO|3% f6=%'RJJiP p* ÒգB.fP; I&]%طT-\]eBTsA."&${"j3f/.^aTAFU:ӡ%&،J{9:d3GmUTIX=5 |mznWEO}ɑ$8Ŋ[s2+F{f,'L1Q=[+ү M>%e #Cbynğ #7UH`.SȐ= w1|w,O_7mU/ tfUWH3PrN1b1[eޤ7RL2I"hx\-嘌aˑ~EJ-wzA"ͳ`&8]%vCInq6qbW\|7XkTWUEZ">91!ec-αy@,~B<3rpGGPEb:QU6tXB›Oa"~:F=bX%fPͨ 1<0vnI=V1TsDUNX̼}ќOxOx hKr޴CÍi ք22*\ Qhʖyi:6ʥީ [8UAHR*`(7kkcՏ/!o,\I0?YXŽ6X\ڞ 0/o kNE@b(Ȯ: y[,=2 !pF.AnM}+s`u:GbeZ'j.1};Z317еŮi2䬪Q1hkOkpqfޔ,\`nUY.ۘv(FjI xy2$ Vq9VZZoo}Rh0w;}]X jΙT`uF7a˯`M52wm]cv"N2\1z<.dLeI>+>fM?/om@Jrp0{tbmj>L<58,~P~Kϓp i)VQ<߷o} f^x[OwiԂkh \\F;Q[[BcI$vCѡ # dTZ-no譩ߟh5'F-Nc/d,4u4: RU *o݂%J* Uba^;ŮKBR^D^+|ENv![%2X֕ +Jz)W k.3E@lPSy#MYDp:& $p0$nr>*>C kH&̈́bl-Sjo8\C<ʻh{1Lz|ũhfe$qˬØpEԝM xta./s6ȶ )qPH6tZCaCc:iaqQ2O0kIͣ1eX(Xrp.0-ŘC"'dWއAf?~zO2u"pa5q՟sTHf lE`WHv@ (<+K(\yg{9wro&UZ?Ynmm2lpÌۏ3g U4=c?Nmg6줦]!j@8T$bsg5,P7l$'iS>j%R]j9H4*RŕyRUe"O9H0+}\ޜ2c@TrO97@"t( ʏRi b]R%:h%V֛z]tbb$M6[~tY:NgRK/K0& }0q)CZ=w>Lrg }:lŷoٰٗl$܃Vȃsy+OR|}2FkSbQ< R̞#zCz#'{c^Y6i~f0D{ W(]6g0AL,T",ֽw2.+;B89T5|;gxFh%VtHNvUtIOsPyf2n'f1C'3qXg }lp\qנY8uqh9$*"3m,WNb"RN{b.M]" I_N QyYz10+c8fr>5Yעm+:k<$t9|T2Y-EE ps@'le%'zĨf bc`n.P(@Sn/ROAD^@}~ҪsS7zMQWM ԃstg`L㰶D}li}D &VtWK$t6G\Z\Wш)}()@DIF>G O8涒DFy6Q[*.ӱ+3F:GL q>#oI6;~'iN[KM[xJ ڄ6yg(7X—e=u{?gxzm8νva$w濾Z:DҔk,E-RShZ{wUy‘~BL&u;yGo{{oC|Z uZ~LH9L}yi9bjZFi3a3B:\o(9yad%;G:jأDUfm wΡaaHc"K-pFEeW=gՆXK|s%ý9Y ۇh d@2(L'|yE,bY^>AX6mj pv[L&HUD\#/=A=y|! $U(@v B.h+cDy=FSJa.  (f"5Y܉RwI*"xfN3v_@p\nL8U C_cT2Z"vM׶H"I019#!~VD.qbn0 .sj`x2*;/8RYwhtwE7 ;* Y̺]q@9sh1MZKxzO_hq<[ݱ7qDMz {g4T)X:6! 7_~\Oړ{6$GQ:*ČqHx$B3iFAG\cYC|*nPu-~_I"G1OwܝfD`wڏımW&\A9n_Vz qspe&۽5\HyӌlSB杰9w|"`RC]ȧ9_"^#'hey@9Ͳ5ucC|I*b6LޤU*kfS_HZ>"8rVvI5J]D<+tn|ݸx;xgW$q > !`KB?yv 3f (,+ /MJCc8Q6M !@JzU~U>eܖk(9hkS` [M X$\^,]Z?a^-iQ2֒v2IHWlger yChpA@=NDY mrUk,cLD\GaZ`[A,*>8% 5syO02y| X[yPIi l9q ;#9¾jSG=t:fRVŽ{tκ18FС ZgxrS5SQR.U^Wfh2Z6)|v^߼=z凴0,n"csЅX^R3]TYPI!k1vtءYxA7x)-*F@^l2@S0N`2 jR[|g z+Zu&L3a ݥ43Arh_8çk_#^8Ů2"nZ| {$6]D<@fo8C5f^] ذFE[i+BYݘvKv1M8tv ǿR@Eؖ+q"0ͅm >@:tTZ]һY(7 t̖bXM Q_s٫W?^MAnaH LFg5s" .G], nIPl?Ai mB! HyV.{4np jx?c}J32 8 6fjsK:ɗkcC:}۵WgN`u4\v3(=!h^ڃY[S>_~'cS;/Kr%tAt# 0Cb (AWܡ^ Qe-xt0$U袇@:vCȉi*>. *3D@ZCwUe:Y3p儫JdQI] 6s\ޚ8\Uᘈ*ƍi+RߐC4w @ "Z'avx%5ay-jq3sRlc^,rӕ#qUB7ACƄ֟etB"OB 60gGJ>:0nݤMKP sj1>@ 6A@=|=8S{ 50JrX\M!g;ͷ<':!#0y\+UXiCEğˑD=:ZN]rY5\_tBz':NV;˶X#աנ-vF;*l|^(<2v,:~f Qh&";uWl%cwr߰oS@[Oz LmpqzDX1SamMZ4v]-U\b и!!&3K[Zx0R)[ E\-Gc"/f*2C[&0Ͷ2 m/KjDP∤\SDalٵW君$?"c+_oڪ*17MO`rNG[>Zia2}k~2R/^^LsmwaBSMhȈ\n5ma HO(fd98#/x ~HۡUP3IKjSj4n-d9GREB/x]OdNͤ;CZ5iMVEX\g?+ 94׳l >IB|--̽F!ca;Bj46yJx"^oD,txB`ҷp&b5Owsa$"7-,B.x`ē/Lpo!}i_:vnea 62*i٤: ޅoI"L(v<4ȿ=XMo.iEt1z+ʅv}Bjqg7V4mlv3̑U886yE#IZkv$yaO9Z^JaXyШf;뼬4 sy*a\+CN}K'B (ƺ7*l}&U]9j[;H- < x, 1#pw#`~DyƏ&& avU ˖"Lڮ@+oveg+EucPHe5Sll~m1וIozmε&Ҥڠo5mSn"rҶ.U8G?"h`Ki>wM<tR<-d5Odp=~A dٿǡwTB8!J\lH$+)5/o'bO,lR+C>n 7]ݧ-ʄtt y(&dJx92!ul6\@S~D8HwiU#?P0 IF_7λwn]d6H7R *q/= +C% q: )^x-_#n??2]\8`tVh!˶"Pm\ƧBJ-P(Ch2J͚P>F2Oܱ$pSƋDBF%3e%2}ɨ^-ځ?l8c n4n95ދm|tf.& NeS] 'uN e-%YmI'M>{:h(Fx%tr_%ҡJ Oy>&Ѝ=8m+`V h"Έ˹6 υvJ^aD&ñ3_2bSgCA2'*jt<6G}j4miK'S,§i\e~!/"-Jk@P#Q1fP0xhڨهoL;I Ww Y.tO18 x`?7&9iW$5 /'>Rf?}Swiw};*yZӜgUV[d]O06(Qpe Z={=:-NS͸2u澒+MiTz<FM!6T44T W"AilO:eNf!ORz,t,$2[z' DͶe/cA ?} =OKn (d|x_JU qQd F`ajq>r>@~_ }%eǸ 杋,EPiL0%Up|]Alq0Bvf6 9(I؀:^C1c ^jvxC"X8ۄOC''\T:I$Ura J.Zt!ޘ7iKBj=ƛGH_8+:́,ͯ-OfyiG{1<{mȡq1M18y+L>,J깢9qwlC|&?LWxO>Cwlo,`KCJMwRtY)|-?*˗LhzzCCҧ=zWHHܢoAmVF[ Ga)6H`U6}jG]Q<Oa,9If&P#na߀/?ǻ 몣0h* Be ;%2OuӾ) yS}S3[7B(2ˉkNbvÐ >WDӓ/LoL-a 4fHv( єUkFQ .a_Y6!PbGvOIgs?I K2rZQ桎85& - *XVO+x4Pa*ky9Q ҥr(B':XȺ|jFv{u 7ǣ?Fz1(6.Jtr t)ґSl*Qj&-K9$Ex_ u[y@`3۬F EK "F ajR kib#mP5kn ~2gYs N$ r^7&.F=v7Ri)& [/G*2-h.qP$ײ_}&lAas1u.˖e;8sp$Vq 0y+cS{sfg6F $񷼀*bWWH>3շYa)|0i[>WRiuMnUÄ?cliEU`\Z0]MBŎJI9(Hߓ龠Y+` fa2 ?FJQ ~*%RJn8x ރlsr!I K-HIg%SEYA3l_0Nq')(+,o#]HlMM-ʋ3A-)mǟ@a/FXͼ?f3BdWID iA:}@d-(>%ZYᘆĴrK;|2fU =ՅSؗ;_0cpҀ[<SBve/aH$R&3x%%ՠ`Dt%OM*M2~dNEf *kAU %s4cѢ>䩜s(g!=k~jgWJH\*vgek5]F`Ɔafp;I&]vxc'{>S^}Z:T6]~{;g(kWV[9lSƿ$vgNwWKH"IJ1]kڥ *(XXZ KvfWpBQ ֯GgU+cIBH!"l ۸#Fc ʍ'k_О>h0d${g+UrI`7e<;Oz2ZDϋJWygqR~pKEs<6o0|݂s{ v}~0 ȓ߈褏\ ^W:wA^0P?^sþn|fw+t+x] 0B~BG/})Q>2WY-Y!~>6QqtKU#'D-j|b3Zٕ C=qf~j71Z[}4e c#?8%e]=YeӲ`SF(TvZ4UAg 7:s)BVQ3;կpLJl=)|?&e(gΟ-.?%;G5x t_2uZz~+} EnNTtŕ]:]Z9G8hAZ?Ofmwe '׍PXޔ)6Ԝ^d B/I'8E*#-f'z~,?3{kKO5*𷆑Cw'Ţk4n u1܃='rD/]+ps9,~U^]/]r.F"=4YrL6fJi/&-lpViPNi ]V?90IHtߟDEf@F bKZŰ_T<4`E^A00${94En1(J(FrCaqs",Qu?i@o@lO!LN^Qbpp6 Wqk~lfֵ.cBST((mz$4(t h3 M!g@]ԠU@/S?kJJ tJuq?Zݼh<%M>E:U]4׀A/U;dpcU>AHK<[W\\3{@Q0\"Cz쭖P LrvnAr +td!>RMI33!9L6FAK@Ç.dvMs/S/5k" F2/3ZY{HUiGdZx% %Bnq-96O J |]\ÇArp" [TNqXUG=fMWf!m\%էBaQ{cWۅ ~BjΤh$ΎfF+ZUՁ8d7`eK+xQKl vu^*'ӯ5>c{ .:Vu*a,etvOзUyTZEAJpj7\4E-L/8 w;?/a0T$] \Ж}V]iFq;lu >zt/ 6mT ?V^-1q ,ۢ~-e!a_Mxݎ~;7wz8R_UIR).ŧ.SQY)`׉oo\E}[6L0f`9vu"I['TU~#5;f9u~~9MU,@pMսM/;YvgAXai ;IT?ѐדl_=B rmSu:" oʾyMtɟXL|y-r.528za+OF}vȦON6Z~DnsV_7 '$JwUքݴL.(vNճ&p)D(bitWs^( f W$k 4g) FiXf8ϚߞUÿ޴\#ǬGֿ "?f;v1gaMSp*qa|V!͐p`f@>c72 qQ}~͛7>O#[Uwz 馰~ifFgܠ4 . zmseI/aiz=R!k{) 6\4> ӔI_K7i$[a\<6(ǜ7Rn7Xѹ)E$.ý?vJ|0xktۆiH";h1 ^oYy"5»2.֪D761jʟ$b$咚jV9Kޓ.3;cLdƺ#;m?dKyLwL#c7mKajDResIy!sIjw ]?#jl Gb?Ԏ){GQpcB44c{ !vWjcb2!QC=wƱoi,?7yDz0r:e=cF~2_D[m>gfyHcyu }fo_ٌ6~"¼PiM-EڑKuQFjn5ck@{!Gߎ4uD=T-EJH:D(}E 뷨z=7~_y/fe\Y.jxR0O~=,_}ef}/BiSۧթ'"ddZ iRYmi-O떪dR14 EU wOL4^T)D ]"Z)9PjDw BS1]"&y@S 5'Jokw^Af>^(,D\LmIߝw\Fdq[-'1[/ 7MqP`]Mǎ+Iفd.L_1!IVw8(\t-Y'zzZ {]g,83^ߺ׮ݖ#W@mN#ἱ)2%yH>ގaw{9 ZN%_uLlS+qD<6TɲuZI d `[^-j|8WOMWBXqkrlz]. &p dFPpW|)0R&H2XUGkK>S:|s }=.8 '~ dOlİ<uo F آR"cjk6&(zX+:'=n cm …0K=S5P$\gh;ZuX tGȁb#vSGfiyl+TRLTk< |e,SW3<'0Tj߯\d55#ʬE~p)wM~25vq,~!fC\[Ew,4}k;h m$QߑRJL$v_>x&+DMuu{!VUqy>K(93uK]h?}>deBMm'I'ꉻ̾k(J:n֓2S ?_ B"^PF=65 5Չ[r } >~^&MdQAV~N:x3PD<D؟a" Q"D0L|1u7ܙKR9iH!"w$ $9!;dXb9-GQW/-Qˠ'E(}ZR. ݤ ̀w2KB$&y(*$ u[حO!&^n2O֣1<ԙtj]됚EA} ye2vX7v^Au4x€ϖ۲ !crg}W3&7ʸ !`]|\W὏_هK/#JQ2s7g%1(uSCVE% ?:|IPҿıF(yP7ey?Bֵ"?ŭLUye,owRZ.*JEX3rX1 /d,صz;I84k3͠ }f7@ to.eLhEAAᇙ7mtC* ?*M{lScm%;<w4EkM<̒ɴw> 2[ c -V'8PGŭ \P޻%|$` Srlz6оa!BBnGWܔ[xe| K'TYn7!`M~H9zd06ފeBA`4Ekߏv2DϽ~7v%GyJY/"Iv~2}K~C^^V8:֏*.>L(v:d s YBHRXDbKLHdET( rvONlfaS[}$kɂ !}:>o;|l/@~mM&he8V/qG1,j}VOEYbAɬ" ޏ1YSNJɀKޯr3e s坆;o\;:8ÈX9WI6&S#o ,4 &zoCkaZ}\p \gmA=~dt{? eOp4(B:mqAfq`-q?cSi&}łj˳AW!)PU'ۤI=/;]>B5^p!I(cj'j*Ax6Bd`Kwn,^)uǮj!qX[HHa9BSPx`ex}Ř岑7Dy U8V} qU&UսY6{,so_ͧ><C)TO(WiܣdLo*1;Aq}>Hb V{X^}ᵎ08gՇucX8}|SU͖{b'[q D.Is:ʳ"-Kr+PnԃuSa= 8J)-қ_!CN(Yysu`}u"N!UxOLWu7EH%|ucD]sʜo4} YRcQ7OD/X({I]aIgZ_&GؒkC4``N*Qrq?>Uy=nN钩9/G u;XNQw^rCz,l{#T.G䳴I~5[d&|ޔ7O*a( $>4nAm Fa+svUo xYlM"qے۩$]"A 0PP #DbNn>H&oѨ=]%E($WPck'bYaqS-\ ~؋{(zM$ T4 dzkntE;xw"+ۚ SC,̰jfdu˃d .mG"oF?%l,0yIC}#E1?Xؼ-tyq>D% "ܼ ƒg}O^]$ٚO( aY+F3@EU* 86"KiR)X~g]v1gWl7ިA_A\Xk#xV{k^<r_~W" sM,/`5wo#JP5 Mq`v@Ѷ#MiXD̦/ ϩRV}Շz9d@,`D;'ru_ MbǴ:i"a17HSU"81 MRl(F{d ۱SoY\hz(-Q$6^f߹×jl7EG7ّӝ⩗37?ib:Iα]=Z BQBjhg x&gOǗH[8F2U=Ƥo6Ǣz˖ۘp~0M'5ۓ&CM\*/e4Cnɕ*OT8ėb+Gpo]+GPTR% I`6qp2ɠmᜠ^'[Ǩn Ή=6Dz2qt5f[u}Vfp&ƕaAsgdj>!.1:ӱ2lFZszs9~6clJFp?舰)|MV*-#rGz_͊al3&nw;'Kyrhρ Ʋ>8#6浵:|Ӽ$ sG0HQխӼGN ˏFwb ;D_1,zN7HNvY1kSփežoyONo b+[d=**N43X #]Ê˝U䦅fl OMyS|[i"*'>C @ 3NoS5dfXEXi,N6eHyRN%цw숊vT-SҏÉ,SB O--Jv+Of=FK5'E-JV~`p J_ç+XeW).0]xJr%QJLOw :wm#خT:өs״ʝ޿R, xF=qHc>OױKibz5ӑo&Or :=dڅ"=CqÅ.F+!ʙg͂[co0k5Tfߛ06ǷO#m=x1%e )#:NcƢݴ{ab|v\C;G;b$dO~= ]kj62{+Xu#)eY%9nLLɷ~hKpa3Gpt-q(0H2f`Ruj)Z}'U}bs@x$DʞVF,MAy(fȪ U?]v[X %"tɨXʥoZY@g)&FtGݖ1`4- 5d<,B,pF2I7&SN4&*SmAIa>;;b֛f E‰C:Bg6t#dkIl+dM>\&mX0.thO|q}Ptq 3AR8'.ٲApN,/xÈ(_#UDq>ܸUߪnHX0nufCaj@o/͢y8:A3Kn[˟,h'V|+PKF[/R*tnlDdv@RoW\ߺo &H(>T:ڀNpwX5Gr*Z @#JBsH‰ǦJ1?kYIp6Za]7¤=Lߡ&Z%G/&¬FU;8I\U9Ȉ~wPIoLVP엀}ܭIH.2Bub>d%>yP -uQb)@ 0 HN0KJN0I>fءxVy?;㒏}T[x[h(?K1!}l: ,=Ư٧:6K85+aCkMӄʼg_nRXF/R񄵩TZyHOlu2۷u1-yw};v8$ʲq},猉|Gyg0zn+[4fG))*0_sqC/HW*{*MľK~^Nb!];u`(ǂV_,j2ũ塔©2߶]ˍ#ua>ުm FgcGVlJ$UHr^[n WKh=AHezT xJu;qܨ|KPͩ Ÿrlߥ;4wx<&Qs& '!)tY\ShB͔+Z< F<9t1!-XJCW9ս&QZӛ"EA'U=C~!t36G4z&zXbU޹qн--]Y5OJE =-J1h*ͰV}`Ԥ^oեpl%/" w䟻׮>6`<-:3\{~`s~^^+$# xg2Z.yIS,\h[y :rv6\Wtb,ߢQ|** Z5- ' {'= ) mKK=u("Rk`|.76ӾINΣt/%gX$ rec|8nc oi!*^Xfc(eZefB[A_{wHBu7{6Y죙sBh|~jAq\;^y>4z[ܑHZ#⢩\?4IW;.˶ Kb5a{;`: =e {'zftJfa`2]l轨`lt]6ѤӱV?h#;C#|j =z7@?x*U~3Wп`/T#[^'-l;PA#)ULt'բ]bc6ݸgUiGcT[l>Q+haΦS/:Ba4 ϸ$~[yQӞެfbX/ QҕqϽ$Lkޱa3S]c o\Mq# u=0@ڑKUBdV{ <)9;?*?qB4"CĔŢzc>/anyB>(N`ZP@#2^ef-~!-o]>Y]Lt\E/gNzHpn Or:K7F1Tl Nң3x??ҟՑ֦⪫!*>6F x 0ԙKe!,MGtckk c*(eXpQcԺ4y-q~Fu0wXm?$EO1R:܋M*C>4uM;p?L G9~P*-I4M% Ɣa{ ϔQw^c uKь:Bkjߍ mv7-yM`1ا#œaFm(cZ>tWCiih'G4Vq3:b#T8ɳw|3 ekGqxژu*x(vdT ^G$,'YfB H]׿el*UN2E"]hZm1!M:Ly1 ク!Ϻzw(]k'Su{عM H[pͦ+ѩg Mao-W)YRwF5R 8sjjocj$hFh,aZ(<_;afW 6P1 9+LEI}7) 2-l]y-CQlbE0C@y &uSkO(ͭԓZ"re SRtb{ %Ԩ? |]` e$#aiN|ܙ79XϛnyӓMDtRF܉oX1 *S{$ G JR=&V/pȌF nqzcz( I7J6j""~ɂyC<܎t]h!S\u@I)2lI]~Q `t,`Nh{YL` DOI7LZmG=I{Rc!Y74:,cWJ"s h}+Vo;a(=TKf9Ht*zm+@Й28DF7yw_'RX$c)"FFz2Hjvk1 1)@OǮš\8-Ttu"jX.勣k Vzcۙ]pc{ܚRĀ>FQvqQ/_`=mIJok=jDk[0rfFΌ!*=ZI3?6=Iia Nf2s.'Rd)9瀷(˟ū"/cngw OɾJr 7h+ [8%&Ͳ<iߘHztWS&7,|@!م~v' _U>iHf$~0kو<}Ǩ҃G_1/Z#WJ瀦,[tt>upf.J/̋ wsoں(P s!tiVpF2oZWS .4;dlZ vM&PY;ua΅K[ =inA H0S"?|tmA+3@ sRd㩅={ m>N>M1-IFV'N)oږ<=/O?3@RrWMD|W2/MjI~῎tgrhqv=~.X to{<{W>^+TIt= 7ՈME/>A N;|4hw5_YrykW" JINkZsU,=ʍCe˫HYKݰCn?މc{<@X9©n?[ׇl_YKwA%g)Uh1)n 5RdSB|ZAhjoKJɮ}($տGTLxHˌB3WІ:$?s iՊ:|dIi䚀ee^OAv]&_*8 V}f%}v0^玵] {e,縝kA^H(v5O2O Mע "WIv%z(S\*3Zkf-xJJBCW0|Gkg!o/& /T"$Qm7yT@ht-q7To.{ļ@^dj0m~ʍYƻ3fccW;гרLtv)r =TG֘`Ooݯla&TR4)D"/o !Ysh^)u+`{ _ ]l.fJ"GmMR-xW~t δn2)ǪI.6xRm&dX<ȯ<ᚤi}~w^ؾ.Om W%X\U3'Yִ9Vfv2I}5 8O>`<fFȖ]Q?D"S+;bހwXBZ$]ҋd_O7}ELAzL;txz f:~>#-j;WeIaG53K-pDĻ^3}ˆi݇Ғn@5#:bjV=ެ c˷6E_ %M0xw>xY=őy[(/^0]iH+Uoڧv8|(1*Xs_= '&e^M&rYIʐ-f-)YYHh5lF!zOrRܵKk5ߊTL20ZJъhd3:3sٍ;g3ȼ4)<tEwj82[u]=Gub7% oxuiw*'ot傓 N{]Aaz1yam::YOF %c4A 6 dDBhX !nfwqBcJ3ξCK콅d]du}[n&»5OMr[hO{boVoC^\.jMY z~+:,7s(4m_Rɬ*vpXhDEy0j#$E"K'+ )ϘMcIʼ盢laPlX9 Ӭxmbhȶ"ufr%U .>@۽ACg~69`u`~tx03 ЖHjwhiHdWA;%^Hؑt#R~OE`%Dx׉ד* wgOPevW&P6 O̕edШד6&-Lβj?!HHyN2Qu)OAt& yթ<$B) Ӹ|j#Ѓuұ%i?vw+jS/ޥ7hPx7ajS L~,)9ʎPb yv.ܭȷ;0>4s11*h(E9%a2?h-ңW_d4Éˢ?>|7X."/7|`j,Eš/*SF%i.47̃ҲjyiVg|Wz;7ӈhWiH~E7 VU,zQȠ9BKZ5G`hW4kV+,{dͳ5oijIe%Υ6YV_]̴w1>h>J0,ӗo!W㢬%; ddqe[&QX?VLB=R˽wQ3 wX:h ۽H,gJ4اYJUzb%, `[|?oJ_|qqS| Nf|n鰜1'g):&k#EF~| GA搄`=D/8RQ,ߩWnuAn7Bj&#i}mlXED2ҕ[2TsUS|{@?ϒEpc&eqJ|D2Qeg=LoYWY.s \ôx$ѕ@Jmv]J^ϟ 3NUךなMAg"aވ攂s!y7`+ ˷8! zϱ,B0W+'$xf2x ZREѷ6L0 +!uk.1 {5f/,c(Z::#:ٚ=ZԢ(`6Qf T %N}Xʖ_XF-Z!PLIA([6{>aQGfLܶp\GܳC2DUw<N:9hJqWߧJjO"3 ֿ1ST>n{IXhވ%'_73TK0ȻiKuE\K J2SeF [I&!J.4FwBfh,F\biG&,ϊ}%&ֹ^Mn#߭"7h2[#ldCYޅ@GƂˤr!Z- JEWɴVμO㱚d# ԴB2o[4Z{]o+'VG7g~ Vd]Y5+Fy.Z"pYkmdz(Η 8fbY6ϳk;/pD[: ӈP\R_E5n;3  $h>x)/م7ZǴH*3<Ÿ/t~(P9,zAeP%nA$s=N9PleM|3颬4)Rх.-G.k&! E>#³6M)BX9I΄aHh`M}~ JCC-¬A[7'XCwDJ?mdLNƴ?KǷzvEM,G߯K#D`JCȄ] R25)&A{(YyQ,8#O:0MR*O>@?;.>򤫜ٚ>nN`1%f[qYۜj3bBEQoen a<Ԭ n #L3 =iy״IƣACcXož6"ئ/sP#31c\YL9ɐ%r_v9xM68!Z?x1ۼP= =KIhSϼ&UN̂wZm hftAm6~Y˱cK`i])]Z>EoKnUAiYSR* Bכ5Y T6~thh9PPPG@&k 36 nUr1O"' r8= ؆2DRlf÷:jӭj2z R>FgϜ[1Q6#e !;xzD~<Dq-AJ) 3GfđU`l(4۾\ߋcs4t*03"hec _, ڮi( (߽ /_ͮ8S +ҿNUw-1P]-"4>_#d'ZU߰ PqĻ;{h‡]$ .n!۲V|&Xqx{rHG,uӀ&ĢÕM"mժQVyJ0ݧL'F>$]'M/c*!;Qy8ԻZBC19}$ZMl@|F6)>31&'^u ]$>KZ HA>wl}R̯ h:aDzH0@:XðQ5Wa{,Z]/D)EO$Tl^ljHћ#!)A/[ǁ1~m~Ӝ?QQS7T L g$"Il,PL B+ GAjƜPpV?)bA\*̨rRTPrtD^J/Kw;Mhi|#`xMBɛڜTZӬZVW:f9O]y 9xٕ!U?Y|m $t-r(D+ ɶ{yD>F]YB~$0@3>fJ O˴(1/ vkp#љr|ad*0z;<.T+:xt-^--ݒGқ*4mNrRBj54RK0o'??SNnLL. bkm2 w0,aV2 L|9T[ynR*lD^Gmڒ )>ϖ_ŢT#d|AK͜g1TمY;'6hN%6zB j- qиMx(F+bujM߭o94]Q6*S?;l Gל fWjBN@\ص't&.B-WKoܘehJ'{|YHCS `͟+;1sNluriܛ+ }7HECi*2-|΀rSi(N;Gyg o)7#|"U6$edS6@E@cIBA 3G_w{Իu;$&"5w1ENxc`ӫ2J^ysgZrG[/KpqU2:4Wܯp:l({D{CfWEx֑v_*1A WCK'd@F !Z c7Лslp=Iys@7/ʺ 07KIw0s~n ۻVS 8|G_կb<c :ۣ'UfR dN֪*iEhWeֹwA2#"UBFmF nI%BPfl> FL&1:(Z5V CKɖqx+[8I-dk $EN%l7(j3i&)gz:VOco @@8FiӬ BS pkq[&M [b,h ZVfk3* 3/Qx1T&ar8+ qkoQҭGx!vfC[ *2H~APY_qP*(+?|fUR폳07t=e)_FS;!TwtG:-:$I)i9J":.)<||c.Uk&R WEiS!X<o=JHo:wH~TIE̚ySH`"iJfvppk)桀gtnMwM>QtIu8B)/gk]:}B81gTھyYub"F0z+ en2vb ?c{m#c#TO6\1zkZ& M̉ù1AeM%i)Xzv['U*e8JN,~"j'de ZIuv^7=vgG(%Aaonf/bq2^){'I@*z.239ʠagYkIE2l3Do4(S˝7Dio;^df߹u}g<|bDsͳW1޻6]U4(k-IW<,҇W75M>*Br bDn!Nrd ?ETe :Í$P2\~RCqkS`?Y`OjOwNc߂UZ5L~I=…ՂuLJ ũ48(} i}Thu dȄGY5w=(_NЂc;"d/ea|#=p0Cl\5CQL3mB$rZqJG>,ۀެJuIgựdTov&`R ^ft5}f3m/j7'1TKfGԆo@ NWn Pʄ` ܡ? u>nնJm] zDc ck2ǝc fJ.ܡE0)W]S&Ci.ħmՄ8=q#ȍ[hQC,mk"!o :chV%< \~t7,!͝e9T#\FR]D- EXcOF6)N={;"y'.n7 D= ؔixB 3 l#m4P~)r1/` "">5'vɼɄh+_+XG9چzJQv*nqkC(O*F|=ynЀLC.ǯ%W0[d=m*pJx$+ vVt#t9Oguzn lKRwG#G}aygO.˜y48p}XRw","TI @'Y]L7> ϫ²'{/vB;eB'hi}M$AZwΕDN®W ]x٣ܭ7-&NM4?SUۂw?̢:Dov#FlCK($K.] 5L8!]筠BBaҎ 3`^k1H=Sȼ\`7k~O+YVKF]*f3r/,1)g^j1@#q^ Z݅>w9(UPgNd4,ɧX3X^L؈3^ L6AAV 3RxMR.:LbL {T+0ZjLqtQiXh|אӓ=,XM Z}:]=YFf(~Ǚx+lPf@9= X^\,N씳*4~f^Pbi&cV=zKLjռwoKeF1(A}J@oX:!!vNZ.PMm&yǷE&\}9 LR  *P ʨ[/M5S:v3e FIFD[oHfU~ٖU?y K>USF^["-NI 1FLtؿȖ5( J@ Zӝ pl;$ /m-& akիݡzKq!vZUIL  7C"?.hְ55`<5Qϟ+܈ >HK ᤆ'P6?Ba(BT.!cyIĄĺpLsf=qS DT#<3(iB)gig &$̇P%©4Ӿ;H~ܰX/7f6m9? 'p*.cCf$&>[jQ+!fͼc"84tUi@1R4+z[ fKNە?tKn T[" ¶B3>@RY,>a WST8kMFyՈb*ܡ&EOmN媲&Ԩ"'tH79Kݝ5XCjǿ0Rt,5qmdjY:LqP4 kL8j@ `7utbdy@xmMȌ۪X>?3G4d-4 l >gAj /?ZNnYkO3/=Zb]\=ng"p.Pzrѩ%۷/R(c>R2*;{w$q㟭h3vp6siqr),0~rEW|?Ӑ]@5mm(Ybn=do⃎mLf [,k)f |?!uISN~-֥8>*|A=N.utz;=UWz=i '† ҹh\fI['!Ga"u09CΉM9 VB46 u~# 19DDD {!*>,B6n<Ct|oLa>t|W4O$f /4m <Ʋ/\E 97scz`FfNv\ϫrR?xLlDÈΧ&J; 3~pȈXK]-0 ɕ!VWX2⽭Pdn4Y JV'W QqEPGEv$M퀯`3 RYS%@n\6/oβ1 K3ds%|VDI5G„^S{ߣ}LuCY3@g_6?vNs E{h}7%#pmtQ`L쏓%ڴ0֝ ,eatOKPY&߂rX>~[h,Ww7*J2bx 7:83QI&KbЗcpƳHFRgCb<g&7sD| l9p*pko)p8\˂@(̖ͺŢm1b%7:n} A=uvר {V(ƣZmpZs/sܠ (-2g8{7j;*󿮜1֓$]Ș4UUJL8j ,Ζy%z#qmX{d e}HVA /B^vϛ(`.dvLĒNkJ^Ƨ$8o'ģۻcRH ^A:UؒzlYѵטo2p.f0sTWdEcTģꑷpq9?K7m?úɫ`t%b5lA@CE[DGA*}K}+Dc^u.DzRL;p`\h䦭?C0RƠf-h\뚕8V1f3 ͳ){4\XnPk5ʇ Ӵ`]γ#b|J=GuZ/shݸHhR:1] aY2,A "mopFPm").3DV=VX& lnLFn:V{2D L͹`¹PP&n C{qӈyK81rac4 zm3mi_FPۏUŬ=eGN~+\$Iھ0\+`шyyk+R:N۬Qi_>D1ubjt6šR/pn9, AhÝR1?dP>/p t]1IHA QNʻ0Ts~h"iSԟBk^Pjσ|/ĬD<֑DT֟_"6yE J%]|a+ ç7ݱ'Xçn-(e-!4HdK.HcAVtPz/Zj򚤗te yY;7`iIG9B1$ʚOAg)>ݬ@sDdemU^qTP89ĘqDgq ?z^H: wRZ/U8.]d7>h͇p z(.ՕYoQ0E*Z4n.}{V%E5#^zw:+хCoSAI^]M(]4HsvS??BK^vbHN1vǟ-d:}A}MOYyfrs}>AwW C{ۃv2j-5 A@-gc16I)FECX -VVLJ0Ji:&f:eH`)aF*;b =uy£nn' ZH`~xAwGmC4hk^PyI8mۊ ^WgG-ݘ~̵LㅑX(D}RS7A|=ݼ!@:=ݨ&q1'V5FXf)*}&-["K^Za4 lpKUv(k#-Ɯa6ކCMlwo]TX ׀LAɀ:5ģX$ +#uq"KV|wr󐠬Z̾4iAK(ݔ|efˢ1 /x!.MSJ;Q]sY<w2X5ܤЦ]]lOhI`زc(/HRnĢ5 &3ӤJO ROITh&?g.61<Mgԕnq<)yV GLR ApXGLSLUm[Wit=ZC?~J.U)@j*߬L6$s#C6MH9L]M TK٬\~~Qn 9f½yWϘDWSEH0i ]"rNSR iJE@83,~(ӝ o+0:0R'$kVD4W1r$e[3h F>|s0Ǽ3Z6O(OSHZӅ."CްBP0q(H嫨ȋU9Ɗ8c|%Z㏃+Kf3C|UZpU;y] !eJ;O@[zZAa0.,`|E*FI]Kc ]M ~aYL h^M>I{τŬwKkO^S٨d`-w뙿PjE#7 (ˀ%EEy ?Eă$w JV޳X5MUOmD[<)^$@XVS-U+̰l2L|bgWڝdJy'mw'G.D ٳIcF/y,&cgGL~Ҡ,>s&)]WjzfdUݗPN]o^GOOP˒_z6OD|ur=IR5-wTMKtFm4gKd4!ck &PT9<m|,`  m|tI,;6/סͱ3]Q'ǘP΅⭙w@cwlvAlCL*'ШJ84z}OK<ߋVB.q ظb@BG맽vg|s3.TCL}P*\ZUzBQYwl?fOi@6G\赬{&#p+\ w{;& D*Bgwܤo`-9YBpcYrZ/P8: 8 ZF3f)\sG\y6y]zn_rQ`~_\ܤR+~v0Z)S+&[ enܕaJ vkbqϹh8 O>*af脕+ĭtSET12J $އlбFIe;Pac %#+KWE7yTf>?}ғyYU{F4C>GMq:_ӘܣپH0d'Q5E⫰s1CEVv80= ^K֬cjuL^V+\ڧS5(Ux-a(6Qᚺ' #EHD1k;K9t&jYlC|=n̓H{bk  `\!׋,&XZH~l@&14lp̂8' i|f^T eV|H]𶣑n#vQǟ>S Xw3 R0s+>VA $`"ҽ;V?8v&79Q`|EpȓI:\uXJTφ/McY 5c 4Ay뭶̶&`; NMw @u/!8rl0hAY!u(pAX@)+`:uXr4BqMԱyP Y^ S:Tg*.YP6LTUOzVfRMޫBtqsVy'P#HJ`T]} IlGǙd$d `p92L|AkiZ^}xe0]i.u3sdR 7؛:Gk0M)q8lo#Un[%W*NZK<`{8%\9`\mӽS N |28sn;ؿ70%{h.#4Fm… cLY;:=&&zH,q= ˥F^rS|>AXysѼ5׃M4bms lTa[B H$<),|4i8=Xְ EϠF;իX;=ϑTrP'f]'ȟzW7Bd5 Zs# ȸ\l[X m?&Go5|\ 0fg{i~aYV߀RvY$eU PTc#ّCʴ쐀ſwYLP6cU;\DP+yw{=]Xo΋7Xe'2 o.l/z8dCj3;Ub<틫o('gifYGu3 t`u^@%(?.i4 Tv,v5Q<}ALX=kTۇ|5i|W.{OTTus߄,pii0FbU4剥P[^}/ML.C9Յz3v1٧Lq"l,jmx4.ˡ1a R1+b;H5"ON$z&&6&0R7:OНZu]~EI<ԇ:ˮˆL4{CMp lP+}ljy49 ܂q_4.)ݮ">󯺹GEݤso3?8Zeܰ[ *.k aKKAs H=c4o8 Nn؈K.IKѪ/ CŁ kB,wJq߇ZWy,,52E)~{ ʻ6#TM0qmD+޷hݔ\]'qlx7U*F MDYtk79z.ˤ8\L;޿'եi貨/?6@s=|4̓/M$R?vjq5wQƓBN@|J{Ytz\d4!a &(cM<{yݟ*\n?Ƿ No5Ѡ 0r@#_Y i;Vxdk6[4Oi ^4OJ3^K,&*Mvxer!gY;x"Җql]-dpM0V!T^\k:LW,˳ڊӟZHKEl礐CiBU)TD`WQ FgȺ 9L.} 5ĩuh'30 mA OKi"(QV$ {~a>%!O#vP%(pL'95u}lO"|3Ev~G˲P3@^Wjvte&=RAy.6h[/q[emTKֻlgF5ї7kv {^M5zId+ gk1]`2ocSFjߠN`H{'s9JS .VTa'ƀJjj#[C߮FL% GT Z_(NZqtߥQw k`ki3Ѧy;0~1+ ZCKSϊ[[bn!S~]-X];/ϐ,c0xt#&"RѶB_Ȗ}KLT "Y}>>摊bYdya|1s|WEu G%A^WȷK@pkz1G8.Ezf= ^j'.- 9kPFsf6P2ȋ!.򱅫lΖ7ݭqoq1wi/#U KnFd³t .ށt`;m;d3(xuTǎB2<Q :\VN{9 N=QImx} KQ J#sO"f{Òg^l;wD]yP(%Oa6^4AW\B܏ Y u )'-ћ#rp2jYԁgon jM¤-'DU2ЬosFkR{aLdLJtTbHu֧WxF0iNX8L󧅪:;rFUrt™.=zڕ^ՇÐ0R`6f5=vYH*)n?r t iO%u0%H߉f2(Y5;31f؀fg3"rou&tP4.]mPP/ ̠h%-hp, HvD W  &Aٟ=7A%fgKOPt0ƞ|lU"u=l H+>x:J{d [1vj/ŸH+x0ǤƊ1p=0t^ 4TZL7rGHvAԺx N9mKZE`4ӏrG8h<-Ax(6kLeNisX"u^9VA )X¶5!bwV2Z]T֒APq}pe{> Z΀Q| nf`K{U1} n6YёOq(Ar%8dԉ ~`NkAt<ԑ5 ܧ|9 s2v ڰgW.O ,# 9)gG xOe:4zIVM'ILy-_ҙf%~{YP9!b$NK )Uޗ- Z$׈co4Jri!X3@$5u%MfgƋX/ite/$ /r& -I[n*0F97OzG[p@&}"nsM[':l@~J\bWN0C>'}azzA*KI)YCͿ9XÍN (̯9$iĸ 'hf06GP3 Ww  +늁7<]쮟w-I^SeKjb6tzKJBjz*ٻgυc-wo>Y"-`8z~/N:BC7~p k ePň_cLD6IuG y^>_mqsq";LmZۙJ5K8 .bhFΟQ .]QP%J,tlȏ~y6KxN;,B%N!g$=im1 s J~p-c7%PTu6_hd$w`=aH)_>\& sbjukKeBl2H ]pdZm.y{ZzXm(7EFbE_?Tl[PT4ԅ\e fSh:n`X|8N g,Fjj'kְBN^ z$Aa墡[21j8r ^?qrO}9dh8AP U:$9X0 rl8\xdO*eNL9LݻRM<9]„ts 5:|,kȤ~9ᒝ֎D d tm,]vT Mv}Oߥ1?WP .:/XJ.9BU_e-zo}N8_6 ©][  4B5(ȷ˪y ZKXSjAg~6uвf!d9$T@^cb4i0e]!LְK|1[  J\,zj?-<W('˔5>"v`݋FZ xi,]p{[E[2\,`T}ͣ8;EDx~էh+?;F/t8,VL<}t+-t+h"a@m#'ߝaƥ?rHKvSf/4djz{(oS"ap<)/iI>`DxP٥B駑A3?SĤD-$3&X[v ,GCn >}ػ#?#q$(O;ڲNƒ:f @.Z/C3}rLrٙr=[uJBZAQh.0 U*Qog@g|?a{1L,S#v&jƅryW n4ޘۈ'Mx!#, #$Iuwrh|L5[ll>bvY0lF?c"[@od4agD)N ɏfu~ҡտ^<|Ay||u8Ch9Mm;7a06"$KE--LF3?Qy4xl;P6E~XQAޓ p sd4e)Fq-e#~G/6ZXY rݖ ](@+dkEa"''u%4V X_1Rʼn*~.oz.Ƙi`-vSe{8"j>rE73e< 2 [GDk] }E ܼ#=UϦbc 3 iW_6/ܴ O6^ta#J m0O'QJrA)Z /TPyTkc6eɹHQX'ZnVS!ׅ5xXS D=TFL8С8_"~咯֩TGqxuT&) w6J= S 9:t>X7?أV? ױh>RI*Maw#Z8k_RlhC'YZ F~9Շ;d7w ~qapIA|&Z/R} Zhj$k{[R]uiT? 6O[nQK!Ӵd\9y 1kňfQH $N/ ճC;4-[mVBF^mx*B?%vR懙֗D4R\҂$ZLASGLt_vN5_}2+Cb?ګ`s³t_NhA_8AF2@{!1 |M!Oz _`R6I?\ժ!}a$g#OIHaB^L{S2.45" 5ӏΉbH߱K|w' GI]Ԕ\Ɍt:"û ΅X[ufOFFhzaݸAjHݠڎ{XS/Tбcxi~ѹA]^7ܣQZ=诿 jA%ɥ`X]6Y!O1LGɑk8m.NG U5 Cb=A/0 x"0,k=$R[1hŤ KI+C*?E4N;[^7,%hV!^9ݤ&8ce NoSxn<V%<2Z2 X3P-aRxp %Ǻqk(z14h UÓf]s0PII{A(xo~s/7xU,%Ic2'fjO 13޹еu2ҁKq/8xȵ.]Q (H:ޅ%2> {%AD{|J{e=e0GcR' Eq4DXZDdx!qHO2 {޵v fE}Z`GDR;&}Df.O(O5= ңОȁ\X R[mN`SE-Dpк erS4J@[YJ48)!ᛵ{Vhj|]BΖ8-(ER..TD5}0SۊfP:1lZн8%u@Iiۺ^7Q[EWX*R#!Pm2c[ꞛ-E7rD{XYή3@{BVr3HI.>fM+k+_΀s4s҃lY]QA`ARi#q|OH[9S걭QL΅GZ6v$Y0q3^ǖ+a/ HmɗizR`FGnw)~IJcBoFk^2@zT! l$Ăࣵ) M̌hVFHPX6[bO_퓛Γm? CJ!eMR'*,f2fG~P\Rtxuh/Ď" e׃uJA9J=D~H U#d;ʒ.vH7y/Pn~{PQb#u|+E_dѓ PM΍moVԠs"bcSËYTT}d??!T M%Ngi .Y䛑p70npeyT埼, )_5;R't.H4Qp=^1aTzg*ה VXD4P=S>xGa t\Qklx};|I=:b@w9.؞U&2Lgr1HCzmIӪqO](07ġĝ?O6J3.PybsRBxS?)N_ r-*.B1 hh^duGFC*yK4k\tߏ|[d(4ZZZ81Vu9dO QO+cͤ: kPY wE`A$?'BН/ cBn\N$qΐą yG̾olšPK g4tTG':axъsBPWZygsC3t2|lhO0`8K Cͱ%7/4>$#zt|VTJ6 rIoԠɚccK@+ۖs/"睺$>PxWU%r:oB}Co[?h`st5oBv!n y#^^RƟ2![n(Ȏ!hq2[+h9W-IuoV׆[js;i_wM]F;rI+} g6Ug-*&A(mR kzL[ytPQ`~hڦPQ&8)vc^pwBgS[] (7_f/jǢ9XX$&*kig[om4{x1?HgfvF*yRBobj}bѰMsѦzעbi u^(j.X9. C?3ez4CFZ֘'ugNŁ* d(")MP8ky`'%v[!Ò,[sgkw 4JM۹uGf+^2׏e6=}X"gc>uǀ?PC5rHd4۪.rNed%5xa6ґ(Y"Zo_ tXne(5=30Z,qyR*Pw+{ao,Sqh4|?([G⹅_|M5Mt! mچZH~SWsn-&CrvnL: l&9eXvq֟ܗֺ\T@z +e@k׎w@h)/7(~!?DX|ŹoS%}VؙQcaŜ#8{11> 2|驝WVf 22n5/jZ?CYO}5ǽKyE<^Sxv I ck;f?uf=-L%ذw*@焞={(.6d=[ꀱ`3{l%Tt@ #-qPX߳ No~M`S->$N@)G OQZMcH .A(.Xu`B 9 `(&mЄS6TK?3EE97F/\,#$J0eUAxFL.?uP/a-UO1GTE+ œkZuz$< 5YV 1`J˳"m۾Cej~ ̠Nw<9TղZ 5w**>f竈=Nr!9}~#.(xr3N"T3`50$"ʳDuH"AX}^| N+d:{Z! J!py CWbk@BhPˠoC &C>B Sd`7\aRmN󡟝(ZZN7 )p"+Ƀ*  ndU{(%EiQB^}#uW(G}F]=GtXB2rab8M$fY/8j{[J_VS| `BnpCYwky(bm`5]n@Po5Z;O>o1D"En|i@&K9 MsP[y>|9 ? ؑi,=Bi4,ؔ-]JmuIOf髓}_Jno:r aw"&02< ө'1`KkE-Xj=[n_dX8nZR&7Utrt1$ː峔 f6#W{zljQ|H>4uv}2@zg_J6? [֖6&7p7ͨ8+oϹ 0W#:iɄf:+oEܼ-J E,t%)sx0E]s-m2lQԖ֬r/-r7&<+tT@J El(r3I$z3TPJO"?'@q/ZH Bov5Asuۘc[o.v̻&PFs <9nA0k[-pa$?ϛx|Q^1+81&R=`G} <u NWˬ|1ɝ L%-0$b:x2ĔaY[~mj;'3f#’mY'H0e3>E+ ᳁| &f<΢ awP616!"#o!k7DmQ[/Wf:/STKT>DceO1y\a:8s' o,jwbc&K5H>{sYcOQ?XKQBN.0%MrHC6Ek{\k W0,={PrD%6doJ%BAiLI\KV &Xء č!$};5?*H9!@G*HoF7 (D P9^PA{ Wo;DckIv9jOdDл"_Pet.z*iޯ\KH>%#EE3ȝAAbnlġXhc#.VsC猪D*_$a4OMX5 \T#_97 z" gFOfT3mQE> aP(I{Wȁn—vf'KY1XFV͡'vn?6|אVdKDG`xJ_j>BwWqCA5ˮZ} W.GBԡ"Z1RfCnFiEK% svQ@8"K\ѧ!k2c|ea4= 'dr/G5Yqd "U-<NBKNd7ųv*WFI0mm>}+8E2o-8FrOt\IHdW3F{ٺ3Z2\{H:pl dcu \PAh\?Qpt)Gdh r7sY s(S[Vy`1],$Βp¤=J: vs-.)>\1cF1tCDzb^C / y}rYrGcq&ªƸҁ[F3Oeyi%r=r}ZmlIRnF[ ܞ/}i)dMXDA SHӐ>h @ABS Y.BJʋs]eeo">;har6jC#"* ӴRۿ+Q=m̐*Ej[FJknw6(_x2a3CJ?ZJj#P铳-4qw䀥9܎L`Q{9éJS/o-SUp)L+e — ۥXļXk _ۭOE*'9V&4Aw&<;> E<׵pf`Xk^ SZhF?TEQ)Xrlcl©eX60o{rEKI,N@J&nÝ6;k:,ßt*Hr+Sqzc9Ju9(d o ùizyPqpMѢZ$ޫF*EsbY g%08yx YoI`#~kĵU"'mvϦYI'ijb4HD&v npVg 9:]4jIlM$GfY5 `s39b b2ep(6PO`> tYhg}Jau.HֵgL}ݦU$.)_jJ^/D1=Kve71U &?C?3',bhׄE~0t+%+ΠY~*;#Xeo͑ Y"Z4e@ԉ6!BV񸙼>p&2*_saZ޺a%|taPT; {!6grL< jr`sYtM5g o?-˥r_zXH٢:\vv~lnwĭAdW|qDJmKR"#T*BiJ!e~ߒ( ?} IHYql|B`?E5]c`Qq`'bl,uyDQC*~Z|t)gq;qS;zOg/]o@,lie|u;Lo{Ş# oxzQ]HTXLϟP_YYJ~^|*(t _EČ4)4{k>犔۶,OW|葉HtIyS=nB Ր1f͆oLuCce ~ݟ;Ņ]>9ѽl֨;~a! ſ Ò!)R6T^̸IU6@7 Sbv n IJrܼ~_$ԡhͳʴ܃nRyևc*ً^= OΖ %xZS:Q9ùp$VbLd !ǯ#˹TŘ833b1ҧMxeA ӪE}+X \pux D>C7a.+ƲKD.gZ_U!_x@^~u4N(ީSD_>hhl.Ϛë+Ԫ^0kWZ~7nc9]y >$@C&0t+FNw&)d%_..}Y(j3rR#Ζ:i8oKXjǧz(kO4#:ر-)|%R¥I^UtJ^τEUAhCq\.)H6O=ϝ%2삈8Hl19rg~ae{_zܸU›gDEu,Ҿ@ ܋;pmGq*1%=pѼDm+9S!H@H.a=LfAm1h(5EgΣe[Doqq vY5b)p5Ve74 BB=p%:O+h3[ɿ; `:FNg ါ)!ĂT~؛"ue|~JFYR8mL07`yEV}wKik;=*賾]&43'9*i |2jWyeeGg^[ bb>/auJ@Q;6Xa{3颶.+6jCH^SLll!n%\Ǧ1A-ϰm$,rȔ-j@_@ i{4FC҄~TƄ[8#wN cF.ڙ兦X 1kM>VQݪYML5!+g=q7e Z#&=t+VN`qJ[`ՄӜ(.(L ^ !?66OGxB4Y\$CE ~@z -eP71Okz3gxCbɯv1.=ܰSoYA#׸.gf2j,7pzkfEȲ 4C8R ެ͋m-LZP6O:F`t$b=" ݴzIs7mɄ <R 7 i  ͻ\I>YaSINd/sScaۛdՕxSOHLhh:~D0RÙ3}rlL:֬bըv2gBw|k^GFq'd*-4*3MFI1X!/RRY@(Q97и^?`GH$oQ7iu ][D`®wθ9w9D>/]U+Sޕ:T+q>6T[?eFaPz捃vzv6ПMlULD9p:̸Rv DŽ}/@:!MҠetn:1:Dm =r\:=OH.uD?Ʉ1 .#GPJtVtt\¸Iԃu||]\Px'VR-YtwaYP֐c[ŞeH26p\)E澽; >6i`W 7 8E5?a:Y) whD&x#yq7^t|,&]J%iZ%.6a;m\0>q|C(bu(zf bN39 ּx&"aZJ#>OC\:lʭԽK]/I;W9 :K6COY$ө~rEerߧoݏ*֌*W}bfGDxɫUXɻIx@ TǭI#3+#xѾ jLK_2 cw7zR!m0 #ɲifpN,mH`HTjh.u:>5n0ĀƸRCFWϠid{́>GO(J+8]y󔘩Ƿ[GL$SVu;yisDiiLHΓ>kԴm8怍$$]sjP/oL7Θ撜Y:dD.eb7F[;Uz'(vU^GD#Q,C=`%YXNOQ=Ѹzv}ږkl̫ AH ƒa~sI:(/1k#of.f lωʇm :5$`X{itf{J q5 癳CR1xgj8 JV΄KN&k9_y@< >~ H -z:5Z7Ԋ4ʾJ{'EjJLM cNfUӃL<:]Uqk%m=uy KqwxPR~̈́.hvL(#P(*ҁ \2 \ 瀨S _"cn'{KպFԽ/]V BuieŦF巗{2]XtKyK wb_\nCWw$G$"]% |4T9x V#NP_ڣk>c_9 s<4 4A˽0 (/.[3NWۍ[xcԣ/à6n.-eڰ~ͱx\&ںc n?2spR2Y LhEk,p2 a!L>'FG&5 &(E?`Z4yr {탂<bCK5ǭh^"8F&V<>)uЙ]O6[2]F%JqYaB]HXz;SWiNRs}8ޏU, n;lS>e"x?$\{Qlypؿv;߯ Tdg9qlR,9ڶԼN(XL6=h9ju5nQ rhZ'6}`_x4\#Wcsk+~`rI*q%H[KJ40U|~f/Q>tޑ$ISpU1 !i}i<8mz [YZ+‚;l|F@((SpV۾ JG|zwٞyN'ip' WK&2Xˡg3oِֆL9!:8bLqx4"Vf]r;H5'<Mo f^+U:oyJϝ Hșn + EB"ZNB'{&-k±YUn*Q>K8./U O7=7#V3\s m6;L.&ӵ @E"@Lv%Ŋ*5ɉ)RVL!B`C*.[/lc4R"K2yFk;Hgcw/۹rh _ +ÓJ, v+Zƨ iG!jzbbDz\Z?/5b|9_eFn6J4x@3x "9P\d~.B{3ZrpiVO P9uP䪌5>GKl !VMmES -(>{94m7}~ÄnAUI׭X) 7rD8)4J !Gʢ2ֲJeP>񼕮cu=AU cӴVd#|yBGT7^5rnOV+'E܂;%س24uBf3pXiD\ϒ&$͜MBҜαq9eIJ $; 39aAhAOj-fcDx96#U "y=aadb'َb戥7屏:P6((h~5}dA8DN蘏0D5: 6& Vsm6k$ mo&":݈f՛u HxJbI'ϵ$5 p4F(a#1`.$8QKmI_S[YyLz#Ÿ[IzϹ3)gl7E8Ge!-.<;oOb3|x*SU^x@IO%սU˫?~NtyLi=Ҧ@TQMB<5N]0eL5V(pn &'NI* ?S\P ǭIShbk0 /t9\8A~б,}$ыM>]77Y0=2MIiv-:\p m&}KɖS.ܻ&,hr&웂(}2޽[͉#>oJu=ci5_"+'{~0oS& +zQvTpM6 & DhAhek$`G<98R0biFKV7uR Iqͱ.lpr uOl\)8HIDFfʌQ9t=3CAjlA ̐Jo&-"tUP5 nh7X"JIg6[Nȯ h8l)ե#/qXA(J+YCaT ahCJ2|a0*9@{*~]tğZ.K\Hm]d/i\h0wHYJᣢ+}@'^LA N|7:l#KB^sB&|AȉWD Bg@0\5ۧ:8L+UO2|U5GWTW8MgQb/+x{(E]HjF<4sn\#sJ9 oҴ *w$NFeA7[TMKkØw|9H=H-:N@tčxFy8&/~RjD{ +ӑGtq^?WV"t_TD7)~n22 '(Am!`sPS-K90x8%6]:ޖ\>T^pvs hjIAMq\Q0o3˞7bq)mnUz~a̮{xc"!&h{,.jK#q a|%qO$7贮 hUK1Hn|Ndt.?!qMY8%5֬B78ڨümdr `.ʜ1bO, -ϔ />ms 09k#Zb.G iCQ7UB°JokdvpiVE@Ϥ*~|'d:cv~E' [FMI@gFm4OZ0.rs[l!|܀M2\*+)o*嗗2 , )$'n$txqԩYe5NWuɬgtCt ~ lPfDgMO+D6ெV5\ }+ٓ%sě5$bzsQp:%six:ŌO#X~NCV/87Q\/]%'҃_j>O1V@]DҗZ H?ˌ93*Bg8"M V7Fs WF"+"iP~9k:_p̰|8RƓ(6% xB~O a T5LQ6֋G"!:}f.x heJҵ9 @HNږ "AF,K[2U(-֠k4b"ͳno4.FW:d8bK,=G4O ´Wۛ/ݞGtOԣh!@4C,^7%S}*iEC]GΡb?nKKd1`aW0ͫE@~ŴǸ;/ŢZc:(jw~cO8u2i;.c`Gzt`}Wf#?n9Jad.3I=iuML5BT<' Q"zqE1\Щ>DS:_kYo-6=mJ.gQ^ۅ|KFvs:zX9f L#harXdZX j}u{o)O ey(fy® ¡Ha5o7d)i~։0ۤZy-tjd ݁ibmL~( H8VzT뿰F2 'rD5.B-r{M㖬l7&f:<$ϼ@-zrƅ<(Q,vz9ݧ‰>"=.}m֒ǃЀΚ~Yů-Ї ڂ)UK7+/ ڃcR?X#{m*|sMˁq"(·F}Ea80;0Fű}O~ZnqurN,P :W"Qs w֙Z.0VI2vYOxDuΫe,cQj_aQ(.eFkI]rjV-F7JOMS#gk~oNhZ\\\M*o$gHqR/}JMr!q ü{muH;%Ѣ,-DŽV<هyٲ;y|laYzVRIa5sMD+@UhG*p C칑|cO .Fv=Ϫ\Ug ` $C"M 9@M:mu.߳]Ϸzts*l.#hv˰?ܬ] K9zEW6I]mAOP ˈy n"w+iqc2e>+WidI'gAyz]AcQ\g1_ rpx4>>TP5Κ[Z, "_1_[#i} ŔJb?]OKSs%zNϕ:MwbHS8:#nLx ).&j->SpI& XP.Y;ď~3 @Y8]&n`& ѵAikncC^'e|Oп2bҼ0! 9`9ӜSaj ES qXcOpZ

w(Tp +֒EƖ\vgȮQ8͎{B/Y*}"Hc:3JX)`[à h]D5y9 EV[8%af$AcSw;-׾3޽Mµ>u3N PG( ]!i}&T:y3_]|B4a(/ S k+D-<ʼ=1,|߻:,w$\ ס>g : 6Š [8hUQg@7 95i,Ia z9bǝD-]aA\b`{0)LFrvE#*\<{,ѨF?F뙓 :!C^O""%Ĕaet~?2 % '"RbPקP\_s*}GxX}6-YQc7Ү.H@я/5!+1[(q*la#-(v=d'^J Y #4WMщQ9,sR6%CR Tj;X@:`J|Z#L.YaNƦ%mvMK q¿1n;" Zhu8}QՍ-2dؘt߰hђ(#jI1}'Gx}{F_eƛ=b\-htS8TZB%쬱 v[4 `pX>AQϕ@z5Kg |-ɣ:cB |pwTYQ Z| Lc9c*ePJ]/D|bb=,|/cqb8 ,_;C%<6$ݓhDK5 @28<5LX,OMHu"7lM>mYS-̓؆?'22. +Ibݭ1㴒*[2&xB&^8"xEZvlY TPߓA;m 0Lrw|=U:\X5W&խOwQxU{"YBD#G"cS L*'eGPALtAU/I%O2͍O*ʊ2oTfդs'{Oul/<1;r\l L:Կhݎ\ڰfhNs>68)ZqpH7%&t\{oX_U0h5 PȚ}!o ӠG_Dw;1ak CB%'U5h1Lĺ뾰Ev7ml / 'e~o"Rq.uJ=P+͖J7 2Cײcy|<#I&SS{XKۆ63DWۜOzzVN1!d;Km9 >-NjEǎt$(itj#Q}ڧgaBܼF^R$N%Էjz3oa= lw!f2[/\U ?%_?*qz{/Җ* %(hEb?5#=̐'^eFJ\X45M',S>q[<#3h^BMOhW:^-RzXSXދ:'m w(v-[3<޳4#MO@qm)N9P}tAcFJWO& 3)ւHs#kyn7 T= 8 o.{k}ѹQژ}.7# ^,8a=1ʹJddU25h&~4,:Q.&5W G AΕ^굿%u&} <:|<=^Xy6Q9pM8 xir٠KUg"QD%H %}ARsɏ%ĝ,zl uMV I \VK;!hbs4xԕ/%e8^TLmKCw GU rj RO*WAR4by ׍j,ޓìCO֜VwvUq "ק< Pαofϼ&.0xhgcS9iOoQnÀ{i :ߕQaHcbU6,8]p2nZyp\m:dG0E+ < 6=^δ9[ `p΀T$RW0 dTvcQ@b,LC{6#$ Sr:uZ&2D@,̠fwPp]Y#Otr*/G- Cۯ ӚfhE]+ Ed60+5ˬng&[\o臙{yS]7b [ݱZ;;X:dHIesIQFytOXs1vSm(ԲJ@-nޒ8p{.y#itDc;PdiΈ2c-rf5cʫj!c;?ҊHf./xijmZiR -$:Z;߽HQx{`8{ 2|,wvgYh T}gdg@uM=2/@2 |ʝbtaMJt .((o1TVϲFay^?C{I\ZޞۺQٱrczZ)3%joQczH{y{bi[ Cq[+l\F4kŀr1qwj# ^o'|<Vؖ >;i:Z_\tyU7JU \ɜ2'SUa9&ꙥ++h$Mׂs%OM視)~ )||ݻenuGIUKFv hrYvү[4efȱ vAhTwMko33͆"l{_PAUbmJETyfw{Ʌv$gViPUjd&Ӫ@}2I[ Nџx^uQ?"f8 si~ƹ"NV1]9  !rkJ en XD*q:N!ou!DKopWp00C#*=_@a%0}HΎFmjtʊ# ؤRANy|p-s蛺JyQk /o4(BKʻl~.DQt2 @AUm^\Jx F coa9 olzJVh4+wLB,gٟ|s 1J@)R{}0v=,-.3y*]c$?+f@5Oaq'(4Dmh4/v7Jb ضQ2+4,}04c_ީH_;]hnxwBcf{4Wo1Y@<,l?G E\ m8 .|'Fny kml~ {tK+Ʈ?Lj /;F(Qhr0Tn91<5ח1\1W_eȷU\;;\:QF0{ T9?տbPz4 1/Zj2gp>P6uyē=w;=7- w7Hπx^\cǼpoRLV#2t H͔D% L5=ՁiBg13")4o*&<""m0=6 ׷G "*ݢ>,G="D\eXIGbNG*?7W v Rw{}u&}y6B[AFcc{)_} VE_IHO+ۀQN[ ^HS=8DipL/<ʧVPTd$ou/0RXݿt] A[^;ʪ2!>IW`#䶳Ԁ%L\!IbGXݪu*;ѳǍ~ٸIaa.Go%dޫ p(:R@vad/.Um)j m;E% w xo X/ GǺl]QmmKvLgTir C6Vxxr5^@ 5r<~? }FR8X&ܺ RTL{}Z|5)+kM&^s?C?{.YYX WU Ɛ=hDUD?E%zM4`vmgwA5AjT q7,)ݔsa&X1F?5ڢ-6{s34w Yx>bj%aSlD uT{2P lTkTj75oc`+&'BSUoPd=*\HTmh qĨ8=Im>;Q%JYcrB3i@!g;-<,ɥ\ABr~ʀǛ (Ƽ J=.;up H*1OW~k SG{O`QJiRTs뱗ǺY\Z^Hr\tmR@."NJH/ȃT:W5=favߜb EGeUJr_umCz9N@a#\fʢBqf J/)5brz6TKi#$dw>[g &|&qgc0sZ*w"R鰐MyW X⎛/'IF$cշ]̲ 2cI,H Ĥ4#a!ȃ hJ fiEK+1vb <7MS܋&-yuq|"#>tcEs }`hlCI@gHܳs$ӨH.0o%#+;&DQPƵC^ެ?AY(0ol8);s$J oSW,5L k-^ZU,a;㠙 sUۃbH5m$;`^ipՎ`?g3@SkQ|/IdAIU&P) }Hr7h~I ?V +Lέ#wII:@Qw^bb&Յ0U3P"M_rR6 `4"9i^s]!|Y9Y3xiLݲq.֞EEo쭭KC-tmG4] וTuղ, #Zv UJJ'38 /heZ0“-OQ# qW M59OT1Ї~b0DpC~3s]SLQ,^nlMLg}G,Mg4+GN AAģ*:nc,11?  !;Azb'@߮ Q?-,p0WvRcβzAxG &EoGhVpmd+VhHp2 iW*HK aޜx3xݚo_'-1R4Z'Od}$Yω@e|pȁ-ktbϓ]9i~HD[˗6뮶gd<$ Y4&.B6~ċ #}T{;x%"1xVs1F?fGxg\ _zTT4b`=օh$+U2%Y\-s$N-X!hU,(/kꇏUS nN,1&>Uy\0ⶲYG 8ȠЮ: Kdje+ӥ0RL<~eZ^wz ;ՈQpZK$Ѭǝ͜P-QFEDÿJszy9nmwPSDKջ[(#o Cd$jm2jY:ߢ]$gnHXm_#y\}Al[-u#)\ 6 AeOvfk-cbzTQ09Y4&y~Xrc, 잠i=Jc(Ic!6u8suS ;y_*K1RT{^`(hEk/rZyJ`F b8D31{s(Q28ӦK2_~evnƥ0Y ۙ_ e 1xe]. sM@0\pऎ2ԄPmk0@~ڕCII| (DR0L$&&4=#@‡27/v [Pto3]$R+` Rsa[o2p1@J"WNix;CH.PȤea=/iZZ4j l폚{D+ $bBI9k)9,d좩Ja[d WBɮ\\;3Yx=ˋ`R3:thyKKZh 24> C܀ Z:TjqZ@J8 c\[eɄfnCph\ :WR{\ ʎ^~sU&bB7_mw'*FSsRYr)|9wLFls̮dҳX?H3~|/^ODqIJ|]uHTY)bC ڞ .@0ͬHĵyi'~ɨż\9j ñ?x] 9&fk?7)~O1M/K8~f7G`@Y (-t)7,hgbFؙ0[8R-ExWu^dA. 8ڔP p){5Ukʻa3jX]3ft>|E5d$9#\Xʏ'u๬ܔo7gN3tص#4vDC ($4#/탓a tR@YsA郘:GLJYpޤX/ےZˤhw,IsA;Ƽs|]L,>H ,h $(t`hpbh̴^;kuiYZW!~\DZ\dm ,|2M̚O'Bީt!!xwD>ӡoCmBFXٹVSSwbC`Vϻ?2"GYd4d "[aۋ1 ݎجP|)[i:PL̓MV΋"8ݬDO#If>EzM)Yß]}sJV^mM PR^ͨQ95:f!kҪz em4$%ȳ]U' "Usji6@A9TTS\g~6H Uｄ T&G+|;pP7ykC^rp.R6kyȖEh~ ?PB14n`̰ "a*&qcdX}lW.OXb=4ڂ=:8uWW^4n^mG #[riǃĸd-#aG^7v,'R}ʢ%x8S_W87K|i#XVmyf,rsvq ֙dN6']7ҘwJ.NH߰RN]̯xs3.#?OGPOiRՉtzHˋHG4)Ӽ{ĝ"TJgFEٰztr ~9#N#2cԗjՌIKo l5 ya sX?{IDJa' TOTO)ӢrQuu󗖵T#nsѷ$&xxC>!z;KH 5X7$ө`儔#_3ᇥFn5g(n䧱ֽ'~E׽*ߍ_6O-V $!a(`GF#XnLg=8#FIs w 9 DŰM認z ‚͛tV0WJ.g<,t@sP{l\]t;((k)aUj;^]^%MN!C/QmW+(IQzQ<$;NCѥф^1{FN qy2_3~&y{g̃~78>U.-0Fܒn+j  ٟ)k8QM 2j,˲^ܲ~fL`뾍.Z>M࣓\3\PmDK+~"bP JplZ^"t+.DQ"U_E35Z ЪWH ?0)CNY1uҷL"wkk3q.]EF\y ߋ^LL1Nge G;ы-/8dE_ںΠsz$ݒ9仵sgA ֕cQ Ӫ#)3`5Du{9\iXת-r&(s^sntFofE JɀW n 0*XlgH֯oU7taJn{pS/i/0}zۃFēMLr_xGG@N`]r8`tZ%ĤP,ĸAD)39vxёV`*ppfY;^` ĜE;W⥏펻'Rr /x\ 5oF^JyW?cA,͡gߖ|3ɴ#cГ譬Z"E%&>@Bi 4/RFzm;*Ġ jfSMxP;cr4 ~l솇t80:s׬ ,/YM81D6 \?Sx,ѾuZt6)ڍ 2VE|NBŏCa@)W?46Y]3d##yuCO G1kb{ %7 tэ]b a 2q iZ|r)Z"9=2'-z!BK.U[;ne&֒~"H3RVm$~3eJ@T9znu|Hg: k?8$~Sxۖ|׭REݝj,ŴcV戙ZkT$f7> n5[{MB|h=]Kwd&BpD퇅+K@۔)i!8w8+đfk\q/sؐN V~J(Jzm>`&qeid4}NknuEj گ2$<0*jU–[*Q䓤b[ɏk,iNjU^And' |,>pybKQ,kTN[A/E8aL\I[}\HM*@<]K? U s\;^$x=+.FfxO8_)~" ˖۠R))0i~6B:'AxҜ3)$Cjj}iXGj?k3".fIJWh^Gό y$_D,0vQaPYͬ5V,`U=l dCi&׵qk;!6gҍ0=ǀm%1SK+A]ǃp=ɫ$&΢t7y]gL>A V[stkj͓W4;Uc>o{M`TaANkGA:D7Y]i8'e.$ptHۧW0 G4o,wEHQ$= =:$؁27c-! ȣ CP= IG\Z@̎]4~SMZrHYzLLq'AL#of⠶\R7[2}qyz5/DݚWU\& ڔAp3#UӌBI UCxB=Xq(}рLP,"?/CZHšF`14bͰxl@רGZA~f):ß 1q-~思c1sPfB?1(Qq8w0"9~(UEr ԰SF&:݌Rӥ} ɎL 2+ì'Sg(q|ߒيWXU%][i3aǫokH>wN?#4$rV~6O .,d+<$^L\7CFvQs\Avv(*3$O2,0j-!b'󴸼в1n&қAt逯ҰURr0j xc}3ی( UFZ0ZͶ~K&GtK &0K]RPRu 2ݱUgD0.n` v"κ|'6J^~A#2c  .g ?mȖq ^Q=U8¹$_ؖG z28PEr28/E7΂!c }Mo9W{Ъf]< d4A]Y_6Fcl-D^'JyB~/7 M 5 Y>5Yj /[~C]Z=uԿ 9!0\kY1KfoO)nmwژ`ӎѩԿMҳ/N-lB`Ք= ug.ڱyҴ&ugeéՋ,hh|Z=uCp[ʖmi><{b\ѽ!!tT@ (4z^b8y QՍXcq烷خhUr+mQ߮TTF m^L 2e;?|ΐ~!*14Ej6e]= 2H5he9{ES;5:ǎ]>C9#zO hvJ\YQ_Xon |3frls. 0y5"q)l9)Μ^pxZ:œf)x\ZDj9i<7,e9-N=K=_E? {95d5djoM9PSDn?$ 0#4+5 j4&XB dhsGP7E8xUr›B*jƎdw%8{&b2Ṳnaj<.RPkHO7f C J"g,Lpu=q0sJ'WbԂNOH2*)?,y[LJG[+uv8 . a6w4oi%O|Ɠ-g<$3'%_7N)'xLyCxv)*CI,e7fN7ٟPNݨq ӭûouOߛ?~ ~7v/u"8-Vkyn Fg~D2jM E^~GShF34.mڒwLdv9T_)iqyǠJ?cSnz;'+Ӎj5M#PІa1p Թ͸u/kU vGJ +m@Gה]2ˣ|o [:LE0fV[U7,@2j+擄iZsnMV6Q쐀kAO.=~؉<[$y6Uzr1t;I%3DĺOv0u%kD} ,69rWq!JLvv^ɫ퉼qF#"f6g}@1nuVdo\xU\'b/M36cUiNb" 9ӝk|PzѾ1 <ۯWkQ(ixcVW:: %qaD$}':EY\H?^GœVɒcpM/mC}7U1jOzK@X9lj ۡϖ 11BH+ߩF3J2;]{HHl~hh$ a qa磫E5(4OGԃ^17xܞTPP}Gҙ Iڧ (wq2Vw;|i#3 6\kibG[(|B )Cchy (r>d 2yѠPHtƘd) D;Rψo%bx']Nߝ0[c9f̚wr̼]yg&7xQ4"k_Mfɘņb 6G$4U^[~2h4Z7E/l28h  p(<2Yf8{eWf&ZC&rRxj 8"L*>6*&傀+/?WXHoz/H&[ݧHh :0h])f*eGd5Y!GXA7^€HaR <`,'n=5fy7wFI35s#3FYg;%_-Ka+'ߑ"t86w Ez}Ks.?ԫ5 j~uQDv̙,~A'۔Ui ԝQ1㡝Q R7qر8}v )DZf[mYZ+];hdpCdUB_E/3a\aC1Fϲ ơ x*ITf~dj-nr4e+J9OIwZf9)gION{ %B_x5¦l#*կy a"&&k,S9gبZw*x3 |ɚ u Tw3O/M02 H¸0wKm36@Xlaz}

fB &T!'B8!nV`f Wfho:s6 Ag-n-68t q%e)[rsh9P|* ;d8Q3A';WH+Kg|0ͯ|+BisHБC(I7q6uOH ڣQ(VD` ;8Z&ܜyQ$ը8 zJWHT+~y C=K&.ѪJpwӂ0Vu3G}l p#пqq޵@ۓI`ʋsJS`#Uχ=(IVwڝUN^T<2Ű꼓1j:FIi 0#<MN1bE %Y ,DF9bTߍ/}: x?[x܉b*%d|R.tq'fY38"2jZB${/uuߐ/BOzD m=muvG+aJ˹d/fy)0ufUb词ЅBJX&FfDl:Y$|%a0wHXC,ME)Z|Px!ow2te@UrvD4c2` \ӏjջǕuQ5")$kY<;ROk;!עJp̬D4ɠȐ3&{H5_FZ{~QG]9LDjXeBٺBInSYL=hlE|)+j q9D!ʔ{/bOU(@RG\ ET_fcuD&kXm*ZG`"mkb2Bv))2vOپ!e?]dA{y)X]v?)3b6<@G~^](^_6<,qGvXa aT 5τBb^%B?؜sOZwa'0O8Zsuz9o^N+x5I7YI^ί/,^c 6l.g nb.]W+!_{CvUP9Gt !ZSx)ч3WWiw$ Yl Sfvќ=Q;|梲6W٭!&X&yoRYy>F 3!gLз&ȅ+ q]+h+'Lx{*!_s$*7:yPgڪUJLx5^șV.uE5 0AQ& 4߱`e<6Y|c\ .|ZO3Nmpc6Nwh:g{_ך ,9u"_dw.)u)Qɦ|Z $.,Qg w蘩6#=y3SgWH 竑 _۳LNYEh݇"@ǷB20%'#vo@/pЏ!'1Kr3cOl:n8E8 yB/SvcF:^~'[Rŕcr>@ ˩hfS1G~J22f8jyJRIzChŧp#}#kփ'I=@/R] ;OrGfO ϠJ@EMzJw7H1tRßkS|伷gl{0bCRrsQ.&C(B.j%*be\_ ~q}|;<ϡ,9Fp~zZmfm ` /Tպ;9Ō0ZL\&{½P3ڼg#PL*SL-怑Tir<Z:i% MSOCK!RkN:طU52)kWX)IZ'ep0O׽D:޺"te/3? [[͟MLHv)_m^-h iX390N.go_ hHU|ߊ⚾D@OwWOn/(Ivfq)$4Rp$$ PY[GoB^/ ppq'S `0$ODؿaNqt0=6L5NxEyH/[/^QB$%[ΙEai;9Hgt0% j,ЯTˠ 7ᎍwĽ~ 2r'Gg /4Vx%[))ŒkSPDXmO,wZk?pR Vl,e}>0Pj.GVrk(&YY"*"61J]ҭ f[ƶV~me@oY;a7* щ$Ȩ& HsHyfC]ÃCUڃ+gDw46D8we;S Au4tg?.fe0>4rgQ-iJת$ZQRU&w6:+M,_g*w))Ѻ4v 3q(F0nGPZ N__uYՎ#,;`:Qkbd I@_K@M SDϬ=SpS\>8y@$E@..Q\$g>̉,@ j-jE^O'^rzY=iiBꍺRIÛ}[}t"imK_{R}Db"5bXؽeH1xw,)uw=020n~ղ,͌%qE2>W FB y돉:} uᨤ@DM3.[3}{&1QS7z S>v}RVFcWςZ aMe u *Ɠ k°Zݠ0 P|TC RU?U1 {-13cдMzu,> C0SX0?3!e"mo12Y72OQѺ#׶bWܟ ;)\X$ia" /b§0HZP,D,9\dg2 =[g)pl[U$ن &jh[WeansNwBOY !yNs!)lt ] zeCnk|"IF{٭g6l:Hz5EU[2kij]tywj_yq$$ !/]ҙLw&^<;"c#Y.;!uwޢ&E6ԫXỽM4 ~؏ WJFS!Qyt)رʹWCK%]74m-KÇS6,j';y+[&[b%Ø{B^;b,=?i9c aH h@Ҋf %-bB Mܡ{f&cy1_V×'$5=NuoduTOfλs8s,6V,5ȕ\R4դ |)؟oVRg 4휽'CO[7Ĉ.u!a#J1]$$Q:P*h>6#yn%E\yEwen̮Ѕ|wpUAfPtf,wQO6'e']dLGӂIha)?B@l%`Z dDln&ѷ DtkE^}9ʻulZqq@f1˜)ѩaM5Ỏ#|#OS;NØJjȕQ{*I^iZ)8;Dږl~Ifgܓ/ٟq'.bgcV(I။ijBkm<;i>#1I.u*5&;n7/>P4"Bԋj <.w&_x }d2{1ޏU:NRk|$\ }ƟSha*i@>qzaYi3'cG ϒ SVa.~&Ua 밊Wup&*[q:!v4j0+a% KHITz1S&0T;By)d`g|H3+zae+\ɳC%M و9BZ H'btv|N 9']3P+g0]yE;.1} ȥģqx 50gRԔ"pR a,+t9i&&Weduoqzv桥nHGoPoNOz`i}c ~55ݳ ӔpQIFA>U_R apCG-8DeP;PC6@W_A *uŲ7btCp쑗GA7ǿm>`0q(6nR*1>0W+hP' \Ksd!#@X~Ib 0*5|'X͍<8; dXj6MfGPJ6bMsBH|{gc8ӈn=\*֧Yqb.(VuA0r7Ii"Q|Yp[PGQmC_RwYэ涱a޴T`WCzoO?? _o4Iv`?E M2X߅G#~pi;۰~th` q6OjZE$~ $~4$lbJܼcE#ӓud{lu&X| 9hKO*rO08;Bfh0zNxY+i)ns3>Uo6 7͈]Kd~  >4nVɬ, xJ7:D^8z;'s|A%6@ߗ*ώ -06p3OT,8\]Md8r7eu(p@O:GCPzrP'SJuj~<G 1?_OK1Ɯl;S昴;4Ɂi˥5!#,D rX𹷟71Çy􏄝`6@q[z=/KOmR}|"HK=ev>p ,4|Rc> ,+ 3*u;[}w]Ia׆dz52?dOBG0(laog5ʬxpzhCH,|!#6] jb $Rg Q^mNzYsh,sg[#M. %5ΖIc1=]_1?3*D~._+RN| ǽOg\nʙ $^zǺ )0WIش"3f7qԝYp$G:a2tIlcDpGg#a2/B«+x@@3[me%)[Z<*-Ooh`u*; \+uMhVjQTëUh~WK<݅pEBQ^G'mG򚼘n~a@6N=ݎ2Pi>D 1m%6br$qrZ_&_VTGpr77fziִIb, q&ҢL>s3h_pƾ`D9U'`׃/DP{|nj>,>ՔK&D >< GpάHіГX~h'1] OGNg>|U e16E` wE$eCY!/GG+]I~j X5ڎsSJGy3 3z?Lg?681?FV,p6җB`=V/ԦS5w|Ql.L[ܖ|B]UٟQ59*]4H* aZ0G/=ĬD9;=h$ 8Fݝ$&iYOK ؄#ǀ`^V34&8MǷuHPFm=\6d˪rwZzNE9gme}R .Sۼd`PӁI賲)T V yC϶ESЛ]Jh0_\[nBʷ17ꟍ?<45{V(a}}'j54\ϐȫ`+ԄQ{@K")"S_ZKƋkMcDV $^,Ȓӯd b8ӎt 5PfN]1$=D. \]ބ,B\<00|s| dg;S'r*1Y"R0Z#6#kyvȢ #)EΌaz~q`tTLfS[뺒s|V)L}sNM%u<>pṁ[.iݜzCT8TGy[1AȊ"LIǡXiK)~^}OY65ra0m3DD`B=BgzpOnT ZY*=c8Y(,;0A!zP[0Ǹl(D2vKY",q0v WҎ+)4ԙQwwOEYA6y*L'/쪃ZuEn8> =Ij>' (nw Lsq C 1 u$e&W*RT\=.ۯ,76PSBe}{`υҸkG:~\K(}N.[7ąoT.Un&8oB+i"T0GrǭWe^evJдdG|ŧnWj\Zl^zj:CewǝrH6&U-]C=C\?ϥ%=N]l}?<;ܓ/Q/,nu)3*k] nI\O.b-D6U%Zgc2,njYЖMC_}cRtp"R;F"|+ vtQS}%zQ,s}Ug? (^Ǣ 81& h<,C >3/H Le OT `BD4(1ƹ1νQKJ?4lZ^Z~b|С9DE_+~zE+~JW mO֯r~FI6hWĥACfG؄2.F:Z'3'Ăe("}-[^Oyh-ҐL65q ] >7<': c^{x=Ͱ_HU Je-mK~]_OF4#E^ԡB4cRdzI[ĮO׶Y͌}*#}_U^,vz6`AP.ҁ@5`UVϜ?OA~f +2)qR`I`m+t_:jq%歳)XH7_{';ðJ8񀇄[< ݯc@ҤxX+(N DB/~3wqdl l 27lFPNR"'ShaZf[w-8̂|Y=!*Sz+.֓'_MK!h>5G %c_m}PE|ej̹tט~h.xAU;^I-8kl;xO쮠DO[tb<-+\ʫÎf&i K4«M6.;E6THzKkRWILe)1kdѾB: $F Nc̲@"18;b~%Yv뀩tS {pI~)3W WWjZC:P\y6{ڇ-TtN =GG.d$nC\|cw7z-0N4V'pu/Po//mt&Un}hM$n^- %#y~s~Ჵ2tChzE9y$Q.j-IFK,כjlvzu{37ޙPum/`(З|"-s8B-ZbO3]CI’Ջlryʟ>(r5Lj:B|Z-lɡ >Pд"a%0ɍ2^Y-jBCb] 6]((4XĥT& b9)_!N(90>п<Z²8?n $CC5o'VWŲG"HSf+?24g%r []yA-؉A3 ʺv=EJh5zkty6I_).mP蟓!Uu!wH$7cXEnzjOӠ_눏9.7fVKwF&;!f>ϲhՠ14GT5Ś _ cbX w>ri'ݦQk6Mx©8Җǯ7=ɪ;َto4;O[MάwƳY1_VSyɟ(.Tn|&zS(1a ͌(-Z{n,#) ta<MUG#M%1%pڹ +PىUuՁJ)Jd}Rj[q7jBdOj}[|3`TQYQh{St s A#*<ʯ9͢m'KY!k0ܹpІ2tny*4I %SۂwP ;Lw#6=-䋛\jWD1Ub]tBHQ)ƏE٢@gif۠+LX-I+4ޖcH $|5%G'xskGi;-_/UOCw;MX^z-b;{IqԬmIe:ؐAC8{o>!+`%t |_$C4j-6#luKԐ_M @̯Ak|>#% σAv*6oKraBNq(><ܡ+ U֠ӞoJ)֞2=<݋M3J?햓 J=UN /q˃Φ*T&Zˉ@Gbo" ڱٔ<ө\dN \TɲMN-%c*S&qZҐx 6  )nDIп1Zvu-wii[<̈́7OͳªY V) W<ˆ;9I?Y=p5`G♝&}6DWfJH53<ω5*0JMǂ[ep x`z6zr!*0?nE,~9JD!5X8^h%kBnׂrF1 8SIB8i:&MVG^_$3!~ hFwamޖhY+ne|2ʄ!]!t,R(rf7|Ÿ9q/v$8嘔ceʘhqkCƶ2ceN9D$smx6#PNuҥ |+yRs|hkهMEy.,[x60IS @~SxZKq:@sؘMlvbzn3, <~HbC` H dkjكJ#&g/=yy 37.5![CVVe* {+{stu[/tą[l|uwzձM܅ʖ}.Osw\ɾnhZpFϬ#-d;pp4t3=c3spP~𦚑&:̀T{/1`D"U jwk*)ݦ ͏?␹DxXNа+ w516(AB§}?V>|8"׮.|7nS++a'V%X`>=0>mrq z{i2fb 3 Fasb!$DOvTf sc܅BSəjAJ  u"Cn[@~yЄ&Y!i2=|m!H{fkLKKN; ]\$ ֽldfK$ݷI?4J/d T>$]l0dY<6ɛB\9rb~xepf{nM*D s ,_=Lc+|EEfߏؤljJm# ʬO0 aZp|Pk{[X '"i)#4} Џ^q` hGb-/ n"D,<) 8V x"Z}KR}DX0yzfO$K ÄcPdDNi{(9/YgHM.n=28]PSS 0n}TԽo.gqKo~10!l2ojLE(I7CG "D]Qg%\\W_~PÜ=ŋ"rI?A%J2/M/fOGVDA%3P B0O>.&1d qP y[ du^407% qp X:q<*sஆ N#}[_5Leg2TMc`:nшGk˫86O"Q_qi0=#:Q5TP)תK?s˞?*1 ɽBI@wƴ{Ph0煽gh/gض5En+ǾpbBF21t~GT!h>( LWp>hoTxښS m3m^iJ3U=ˆ;vQ&"Bzb[,".Ft~#J_t \Dg2xr&sy=k qVpFҷKDS8 ;ChKXjHif4y+D#'K!)WӖ':j/.xµ uw`aRd(EH%D/N66k+047izBBb%O6oͅ# Rf}FvsA#?UIq^ P0$hEo@UvOP/>02п'M/醬eFZ,݈EM3 Mgum7g,͇Vzu4VOuycx=T:OLϸo)G?4 H&bwG=VK̻_𙇘|O^> ȋa=,Jҟ, F.uAS8jx!FdSi24u}VT/-j\u9(D.U;&.GwN B6Ұy1}xw{&gJԵBJ klMejZ`;v:ٰeez4nWy=޴g HM6.NڟAP`Ae ;>K~\aVfғw2'W}sv`:W$2UC(x-Jt>]>.+ʙF ir=фQ寕Z9lfpfxa_mv`5ld)2ٲr2fOjLpǝ? lp)N+`ehhQ= w,>נ/'qΕK xYX>r/(Ph7} 'n;˒r|qc# itIRQ-9㧨n]I6F](t`G @a+O=beCПs2QH@^Cf84G!7:%5KQdTI;0k#% e8&$esFjxʙ+.7/|^g&:u,%@.@Ri J*Q?qBsMhr> "s_~#7y]~vab XoW:Xsb^ԋAv;Z @X'@9|R| M>2v7-1U1!jcGt}uĖHHŨSA*qqiCk;7w$ִ[jyuEQ&P0iWv[35ZW.0WH!&$ak;CIlX⨔֯wuҷ9/p$^5 ,fC.sƏy(#%RKN۠C)⎧tM_ ~RA ) $VwHR@=ޥ6/L"nmF mKAƦjt1_1)֍Htc7[ADYd#s`m^ = Լ(p P+-迄:%WR1èڋ*rIGV¼x$3] QJʴcvG NPKO+S#>iD{-V{Cf ۈIO?( pqC'/crjsuǦW˖+`+%^dC/mx`#9 蔑[gTYv, M[ r=!7zDrr|kYhqai]琔 n0nR ]S9βc=yxov-p:mk<]hjDC>D|Lu@&Y2\ki )6!2pj ?X'S3j:ƱJ}:,$PwVUZAсkc}`޼y6PMYbDV' 8 &,~<ӝhoCD(L4Z*NvmxA$eY8U嬸ɀ J%6NŞ%XEǤ~~GJoJYd}~?"F%anӷQnr'̛g!J$y6Q1ALzgI!I$Z+=x]=G#7.[V莭]K—ChΎz\-9ʶ6C< > MB~>h4u.';h+ Y{g& ?l|:bK-]ߴw= 4p&bwT] ÕksDkHs=<\2''ziB~mBN(BS<j^aV3t[ͬ2_Y7kkϗ1x@9성ߴض 9N ƂITPjs%jm>lΏr4C 98?q_5)1U!o(0jvB\_kV_bfvBV3,l玃Úafw'x;b'ū(vcw*8@\HJ gY,SA.ꕫ@z<_P<l R9|΃$4R|TоIFZp&Q݌1$30bhmHL*M*їi McWFde⮐x)u˪SZI,S $#[(bJldwop ?@=A S`p6)w<Go9-|؊L8a̬tѦp)KQ'FTv_key)T\7X+jw z!T~/w"ҳ%;X;쏆M(*j-i3{73Hdl$yMI6ZKYsL6Λfd9[Tj*[M] %N(MGF-'jbT/hV~ dګ%%:{GEAήesﭑF.aLNްا"&PuĦ70(dUdá@ki aE}CgWAJ?XLL95W+9O~\^6^/`aQrWiyH1X0mmȆWop˸ *;Z:o6{Fu=CΩ~b`S g1Z4\~w[Կ͋QJ&,wa<%qX=T 8"|Ll|wi(C7[ik[22 =@7A9k[=4culba Q0Cl-\c0j)I6IN[}ޡ(.eFNE`pޙ܄+Sav`\s!tV15}z?['! NE4vН1 B%CJsjktk.ch3' Yu)~zK EԨs$:) - ۲zbh/]R啭?`P8 p霝ox:2j7\"}J-&x]$ݨb:=阽m+hly-{1UnIAoS=(%׆Bux;7x* a]4`kim6PPn$Ot{S|ѭ"L JH&5;qC\GS6oa9P+YPȁ#|+%':lk>K܂ OFZ{6PK-Ή!gܹ( 6APX51Y56"qX N{@z5OoUd#pZ%M:e1-?5->w7Jx5ֳ1^7Z$J *:\U%gELʖ-XvF|HoYݲSj]f@_B~{[8Ȓv:$"CgbEs)PZe \XDPw<\630ik*z b}zTvNԲP3YUKS@] fdH9)ځ8rT| |c!<$*u5 N)(4s~2 ?߫<[)_q됵~b"ԡG`sW%Odžy  w4c"C0@@nX@fe;&jL-k}nprIT_~*M`;ꊲXxdDoA_%EMӬ1̋\ujby'raJWΘJiLFɿ.ckp+|?2\5~Vl(^,—_v$DWh؄&//'Hm+#y cn2sua[h.hxk .;B4}f wѝʠ Z 1*T9)8F $TNPvYX\b'4KX g m;K{f>{@6oP?ρdU$k(by_=M;  O/I5ZjN _ uhݣbwPw;\N#ļ_|̻߽Ju<JS8am0[mIKdU.$I=$fƝ'>c!%I][-~`%)[qfr aX5"mk39sNn XECO/qY lz'>\2a;ʟ6P|gA:AukS?m&!Ȉ앇.W?hq}j9g)(pbVgl/FZZű#hzW,17YB#WpB]iw+UE˧ z Cj5qx,cf 6W,0I_> Q#$=!v1p!Őyώ+oi:D*KҢ c'9Խ'i\ !1[GmA >ę(katTY ͉_?p ^ EGT[N_O?Acͱ㟡ɔ5$$r%uŚċNJsr͆#.*eY*붋UUaa~ߌ!o-_od] )K%.zcm!1H>QKԐ ^*ŜGWnmAvv'x2QQ̏}C6 3K#H5\:O5q?~-nw@'R cۋ`evO0iIT";ugo_KQǬp=kIC.aU:YN26;xh  x* I|m⣷ht0uc}%.ehH]ѱ9T9X ܤL;A #<C5zФm3AxpV{uإçWP1i}S?v{ŋЫcvFI.;g<ܪ"oXʁG0&cc0hEp7(kAn7^LܤڹQxhǖ MR0DcP+.)|a UJ#*l:2^ZVˣKߩ:NS3a4:# 8][F9FF#CͿW40ܰ .`jkO˼Ck3RUZ37-`1Z1E%nb #Էn.3DكJ (KݧL|b<&rL *eH0{([MgBe㰈gWU{@\) e3|Fs9\]&cx5 #eM{Rz1j)9@=qhs.iJgn%ɕ)U7(e22wZiKTMZ R@@zLI!uY€$SNCj- G`} $Qy>FGE ~7NW7ʹAmX ~KdW8#0_3P*ѬMbOъF0C/Vdjؔ|(GM,#zu/|8e*,$y\"˃pȼM`37ёk x+uc|ǂvG{QPl^l Jۘ3ܸclZJSSx%f@tdPDv` H8.YyBB79M%#Eb5t01#ڜn\4?XƙD} IBvTU0}>1^C;,Ԧ}U$9?BjIogEjRFaCWnʲƻ_U\$!3cvYvf^]׉)Ps= @߫ږ@ߺ9Eh~YMT}b906 oF9}}de{y.do 9}ڸȈ,څ<NX5&70V3=VDp[5CNf}5uo4񟇿^7Z)?( Jp(fgj,#K׾SGF).yF\Ym>_K0[{haiNG &$ne V^9jCCN4UBQѫ\ /᱗`h;x-Yg$=̞&elXCPD'߭W.Z_> HD叜՜^TN[3̹e.%aioOY̻=U8YZ^֠M~xytâ3BuOMSCxy`U"r7SLBun Mf?+P܈( jo2.I0Ϸ3ED1?KNHkR"f;StX[\j"R&rӏl٪s˔H`J.n}w[ ^P, ?xx")5Κ4 /c'))*ɌxbYdy\%C%#Wojȇ -9)d(BZ$݈{3w]([Z5"-1aPP#G@YJcʳR":r;:.xi";ix(P? 9-ҕU= qIS*e12ETQY4_`wZLMK)؝.18Ǩ6DsAaœ!0ZiKCIpG'jC*yhIUaD"5;df!Ǖˁ$f 7{Y,D Rб4t '?ǂ4o1a('de{Ee/R2GSZjN`,{qflxeƀ2XܱPSxԤe꘥Q*F{Ԉ :syO(8–>E$VՄ:nrOAԐwqG`_E~3ts\ZcUh;6_i>#>=gO?F443H|R7֣ ((3Q0JZUO@dr6bgkG%"`,Sp:/k @Sܞ{JØ5Aa'H 0_%_?:@L^IF}:_l]砻;+]޺Ҧ8& 7XynBJ̆r0oO\Yf^Dec!w]q}K6BP40N02W5J;}PS8͞ްJ)`u_J t&Z?%e5 !þ\׉0@z^ury¬ Zf"K>{]8P}݃<Ppι{n_O''Ƴ sK<ʴc#wEuOCܧz7"ᖵ9i1EX*ƭQָy׬y2N);-;:&"=0`C~"*wsuoZm5fs$!ϬN[wgIYt"DDql%u> lRk9,L" MA};ɪLFSS&  \P8c <0ǻxVϱy!u=4`4Bhݼ,!&.WzxƩ~x-T$n!6a$3pJCRQ$ V䵿|*r-,ނrĤA$6P AQpwq pDDDӳ<>h&RI9L>9ԦDw骔MH n-RG CQU3iҚ%vָi sTS_5ylz![KQ Fjl̑]6Ԅ,O.}SB񤭐5kI)LRwUY(w 8Tl?.`@Xe=er!Ssfb(y0yKC46Bas(I{{~%L#& #:Sc3!K8N,܋Fb8i^nA#1IOޟ&Xn̔+eܚl([U]Ef%1gIJ-f~xؾ6YN{(P'tM}5`"Ɩ,qAyXS)RQ]"4S]~W7Ta'7mЧVo0T^J X(舭c1* _BOM^9`$6G!w\nXs,h\Kr=\\qy]@cS~"uNII8"wcPL/[qOM;Ea{C5x5T4qx9"z*m9R0SGVX~6XSң+c-NV(Im?))W͏@L&5&EsN\JS.GOձg7 fql !QdRZ/`[ͺ=εʜ;2]y}]3&n=(جʖ$0Up07b}?B"5:v%ې(Ťrhj'"T! c_{!&cv+aXǚW w4B5gc#ZSkt$7ͣ_fءZ"f laƻOmZ |PT;Y2HYfvD5!hgD"fKZx,* MIDVg-ru|DY gb̌@jܧDt17b=kr[:-W8⽌ Mg7',,cOdN2}7pjV+_aʴ3h4RchALu/8*f3Zr`BzEJZu+VRiRF(2&ȶ ɛe >r{+ǹ3wzši:;q)8MuwQ)Jh煺zI;/ul*ӂ| 8E@mݗHkUS.X97nJXGv<-ijލb #ƣP^ UG@M|,ip:4:ggm~I̠n5p::߆e9^3 X-;>STϧ*񏲙ؙ$T1Ur$PtѷP^exĹ5EJCE )%::C-Mc5F߬əG*fTd.%NLyYLz.X%ļF`ŘD1w*TZHa  ('8[Q ]GHڀ>tkR-)X&cϥ?HcE猩4w(<3"yXݳ2Xb.0ʂϱ83Ե3Stk~S+qܽ250IIwM4gY8(=R>MS~k*?bx3)|qSByy2q5Kr"0b1R ri{Iőp<o=}SަÂ-dz2Pս:9 A8m7A6E '_q  $Tkq>GrHsqmBE vIeZx|9F;#a:}9P=>rgG&\]LMcb8 cݚ,< F̩;hò>'#5{!MBvڬY0=h-Q9^DrFTozt-& C>"DH)ywXc8Զl!xrUb;k#( I@|K Z~:o`7ǂ4_׼|2Hy/-~Ԏoo-kmVi@uƨ־.c1e6&-]J%.;DpK?1u(˲(k; }PZUAURc"aNՅiFl^3 4.*ų{323>V_ZnK1h*25@E\d!|?[K<2ט'0CYanX&Y5)58 Ca2 :EY xZ[yfRB\]3HpQ7"򟰘1HF~˰RXV'YLL*8-+m}Jh./URן.ŜKER:*[D&eTDǸ[L_0(CmH伒qC;)\b9@`kj+g<ǕR۪?{nr%LÂ|gw8`X^"H6噻-kdH bTuԫLL:B<]LxNIByA'\^m|(bvr#Oq fnj+*Ϊax1%FE*p2^XBD|՞WQ++rQY Hh)Soe60 #h06 $ePXFf#=ളqU9L8]*Xf:EqEbKaV5;c)%ŃnHtH|l)-= !~7)OjڰY .- CtP)Ü~J$^A2+j&#@:kA})nCC6TXE{|̓Q|Rz@% (!ϓ\vI0dR"MCf%F D!įbFTsљB 9Y^)KCyX +쪜-3oTGUá2} ~ء'ypRuk8P0G߾f"ǟYg'| K_fFaiˑl@fv6pp8V7ybNctI'&pYVaoޠӃ-RޭSnd%6inrb]Njnݎ[䙍*-އF,~IEf(w;em|.NDޠYEnpr13 ?\sծ!|}=]px r`@D*;9#?M.n„ԟr0V-S-Ry:Dm0$rU\@xVtiA$e%ݚHd1 dTU&]K}_U395_C|pWlb-B (gbUzKC$/iuٸ1!uכּy輤{QtUvcfttv_$ﳄ/xm#U\Vb(6b6 $b2M!ڌ;ѵO{"nJn]3s<Ķ ՟tl"*~ܗu<-nmÃ&A'SfҔcFPx^o>|0h$&- M7xϾS}[zP4g, %OxǬ@?J:=AY^w4-CG6ρGf?g[H 9=3'%MRzQ(4wwg昶)F_>жqpmԉAm^xh" 5ÎߔI@W~/BO>Xhd+tZ #²Q{|\Sk qd땂t,^;tA1r̂>*j{xCsPᯧ]Cf2*63 5Bv;k lZu/"P{Ffd+)kW)~μw\D ]svu+⚤Ezr9d*A."ta;cdM` 7u ,bRUDz`Pqm&)T߱y !秇N_>VaMR|lS,s *Fnn_+)QU2վq.":~%E ƙ zjw=PVӱMusZL~Wk908~Dctgmt)9`k'kDRVCjof+w锭KsL.W i!߲JL<^Sf܂"<!eR4G_p#N5zn3vo/ybI5p2[DPtY Z$ %`bRt|3HĢ}n{TAJּq= ey}cѰL"e'0!m Dx9+ƣ<0JUoڸT,3[[AIu{FoAK&Dih8Wsބ@_5xt$Z]JDX^!ڑmsnZ $Dr7:4̲L\q3:Ac>bqS_V.}MOӐ{JΙSӐÎn8ʲrir6]]gF?HCHjTz.v}1ǐ!w2k_ޜv=</*=8C 7b;T J⟡؞tJSoD =@$*Zs5:GS@둈Eb:pM=ؗsYi$ aCNRw5uDrQW!6ZOLa?SuI[ovV;\Լ /RCҽ> G7FB/!m }|LHpM-Kξ.e2m)fdԧr1BQƨD[ҧ;uQi$R֍rjL~̿-$ V ,V&WwwM\_<'nA3< 3-wM^9]-J3$o%7m=RWG,2 l_ Z`ҽe :>ٱ{E-ĠodK'n?wcLƫjQSLj422֩hp4d*#w㙣:UCk(`3si?D|Y}-R!.8!aSdw HrtQDvW/˻:tK]6f!t-5p>bګv҂H.zaz(cj)Y;6/)< MFp#(pR t{[?@Ƽf>qT#ETކ_ג*t\\7J ʭ(1HH8?7mHqlb 6|İy`,@u_RmdcHž|o9>{. u9d<Ňp$\y{cfL,̻<kuE?.҃~l-{M@ډ2ϽU0쳜 'h7;VvMhoNr0~=NKr8Y$.W.6ݧ']UŬ`q g29n^Fj G79@}DfNHq6h$QMg( G5fK4{]4?_+ZחXk} Q_Y6{7&w-@鿵6$rz)y6HЬPݡ$v7ʥVގ&8q;= W:>b?~УU;qyO \sQ#F#&mժ.iiy}<f,x^֎O# Mo&ʃ098|UoWtBN9ʩd@'不 6LW F"2q 4=73E郂ҏ1&_VG,n0'7Z6f:w|Y=|)V|-Wz -x̣v}}INNOnw֦wZȬ@Xvی-BfO' 'ʊh >wNp( (OBuH ip?tс< J|k/%3MAWe r 7ɜ<|z&u.B3Le_~Bn60_$* +L1{a0hó~afL:`a75Xto4u>NyD4 CkkBSt[t@Kd*i<{?B|dE;2dѪZPBER/CA:d2YNj.8`#!n*q p1dS,.[- uudDk! qrMbDJˮ"BTq/A)0] N} `+f9fIG M=U.PJר>£<'=p჎Lj&q kȶَCxTsa4{ffx(W.3МN)Di^ x/{t;WQ&hB,Y*/j:ĥ>FGIAlm 5f33R\dž~k[qj sl5f:1압 QFXCAClVMK_>W_+'x2.M(/-β$ޥ=(X)hj/whc0 øA"Ǜ!MAoع` $v.LI?` fȐԶ$ ΫѬ EĈڴx+PvXrp(:5L#z-H^j1i3JgN _ǁKѕ_: ChH9$ ĊxL!i%#%<mžۉuGΊE ʊf%/X tM܁8iwh~{1<+W A50\bC}KUg龩~{IMsEߩ7,!WH>$+2Vp`C|IWÄޯ>[w IX/+?qd+LkΩ$;(K[LYj>1諿x\*H]K* !o,+ [|ns'B X):r-Y_o|r.6G|$o҃s,{H=%+<{g\ꗹQ`6FJ0rZ.U! 4sU8po]0K,7IBX3Oi87 SDlfJw{mN.ISwWk2x dS}>~PZϢ6BC@IDjzL ^ێ863isٿ<g,aAϋѶ}[,lb܅OFV:°y(?˾dscDwW/tjOjdVkBBhj|,_q30XʑHerV~Vo&ԅ`RgEubݸo>YڕVkwzNԶzccqOnڴGvdFk.ʙ{£e*}(KBÖ9*C|a$[>` ~mbۤIIbx]&<"Ɲ~(0tqhx339-gZZuj#pFbb/$t)Uwq L"&s.VSWFfQ 1ioWuիtB>">{plY 2OۡEĜ;n {iXdZ3#a P K9\BW;%/5n3So@|q|1<װz'vS/"`W*~MONV1ѽV0Kl8G/6,S_ahAwb֎ 4fyo3b\9R oxrD7?d'ЍҺT F#3!nk5F?<[[Hwie>Hٛ~|½FK ѰnnXfFPϏiq);k`w61'7UۂâJ@+W# UHP쀰C#k7r`2O,$jdQ/&E(DTum[;}{kG7@,"U}T2>GP317>V@ȮAFy RÈu< ֣PBeJka/0 3jBFJUqT݋A+#NߜL`Rtݹlo}s>7_U"㼵iOoa{qy Q755ayG{ZFFO<Y6!}J6YƧ5 1) 5opM /ZێCxpkMn5/G6?^z[Τh(59F+؎0U8ܰ*nY .,vgJ#M~;B2DY×Iv.]z_ T36sOG :a~zio+c@x^ήTZJE[c& BnO.n $6_Mn isY{U+NZ+I{OGmzzsлOƤaY*rvfc<u uWt>0Q*U-/v}v&ҹm {nҾšU湉{⬮fn5I(?Ⴓy{{GA&ՑI^ĻW{!0z_%2! {-<3&\X\.`;m'I?-B^슲~"WoW4jqo!Ø,li +\+$Y، HS㿐+ 'UZEYJTK xs-WM9酐AMëSK{gkPDj8b bk&`-(ziFj~lw I[jtloyIbd LkO(5fVw7˜sÀo窧Q򂣸ΪcPF[w!pokx?bݍ1>4-/alCa;`̤w`sM6.ZXCz[O rOiU?@ՠWLMFM|Ƣ4f9(A/_'[8x&K&!$Mtku2ɑ^+8+\oBykuDpJn<FЎKB|zG/7:Zɽ-'-ǒWK6D ^74n;3p76ղ8T v03{ 1߯ 9 wIe c7)Ajk6M;L!/}(Qld6o!'Biѓzǐ9odV i9o^#4~-2R5wuf~~Ca,{cKD SbhRxׅ/cCz!.#qOf!3:wBUP[V핲 |T^P?ƸrGXiӢ;G`BzJW[O &V ls B5,WN=Vt_t;۵ad-|@\MeM%O.L S8$_7Z"yr+H( ~Ѥˍ@ʞHW￉~͒~nsh.tSMm˹Xuo̱v%ww%TF08!dsld8\ Fn/F}$+!*jF%ml,x.YEV4;HDCw#{NTm0@ 3Qq7\5%6AްҋDif-CcʑdZ\ q2rrɴPxl!%K&~xTtv?ÉAsw_c? Nȼ\~?u%p?JLH Uij덕X1x0Y{ xgb#(WX9)}iHw~5Q[ɲ_ȵ^i[^G6 (RȦO>5r#5j3gf?Mk^cWW!6Lw'#eKUm.Y:`} uHZGtMYA;ầ葐({no =`d.^щ!OCbv^I 6F+^/'ImceπŇ[aE6--l&יyxz;!(&j"79 _]5=6\*9$%|/ K?&M@bc!yiYIHK~ga):sOI~~*󮔠W##;QDpO |s.iͲZ&]q?mGW:qq*hH>1B!Ίkd@S]1z80R(nzI8$&|76<`E=,e(.p&KMܤy`Tե_]Vsx 64]23qt4h<<^ʍ",X΋Mdk$(Tfn1Nq/r:`.JʐQA,Qkt .* f_|k/~`j.)Q]OhG W8׍S&$Ow.4~Oc%jdؗɶ"5Eggy$Rc KQ=Qbr~9̗V$ XyJJ&OJ5Mg﷡/ͩŕDdscKd$K"v ^1bgQBG.LYs|bHCQ./'Uhc\D]K׆+_NY\fGҹu*Oa߽Xn,iwF_k?+DpJ16hgtޖi`6)LvCu9j\RS1fMPR,UxGJb,SɐxYj! FrN n2G#RhhbK@T, *צ3gBMg.f a寃O>CCP ?n@,盵 $CgvWv4xAB\j<ż< 0IcH%/ESĞ 3Uh>J{׊vK9k[/4#L}@DmJ(48tp]m+S*Gw-L,ж5`?oEY?Qu>ikrWu2o$hbXM_bw1g F-.œB,F;6Ot YJ*/.߇*@<&뉔KE ^lNWxf4gk&͊9\"Mz/WU8yY!)Orb3l-/xEA2 콽* h$YŭTBn$ʼt1{aqeД\!]i=wc|Q4\ & &V`! wH HJ$W^A\L]WTb۞Jמ(:ЍF+%EqA0PS/(N7PȨd:ҿDyT'f۱))k'k^T GBx'UJ8. HgiW8"N=5e+Gz:b|;T r0ُ^X)̙{ sZcq֎Xvzg5GoN>N&Uf_ D}SXL2U;,YY䠮tevBĴ/KgOaC'PCt}L( 1;MBr;]_wl/_'Hןȕp(w{r3[]Pb.+eAهaO׺GX:኱ttm+}#>30zퟳBFJx`قV'[(3G ,kkeņ8k#zGq9O!dxP溂ΙEf䔾Xs H_f9ie1* Z=c_硩wÜ bk揯S]BcrSka^-id/҇eGp1M#uݕ3e*@fqsW %S;='Ǘc^t !;Sc-a%~hh|*e ".%R8cl5 tuBl%>N N@Z*ѕmUZ}]V9t5iU"܍jnu^FADs '#C(,$Jr5I꡷[iWyK a5A3^B'`'r@mUa7یOYQ{N]`8o R 8i2~ 绬>3Fi_,* 瓛<|a\Td @] +[%Qw汌^BIRaA*q6u- N:':FŹD \LlCYqs'nL]"NmTfnC 8m.kmZ,Tm<`wo}\|B YSVKP &hbt:)m_Ϊ=wݍ#9bM sIp~ M&  LV]uٵa,d} pvHYE[Ϥ8rM[a3갟G}Jz/0v8 v*=FFaӟ'U@)ʆB_AҁfR3t> i7dԾ&0^dS,-I곛F.NhS!{mܐwT;}v>04 *z.9fI@rY]Ibtϗ(sЖ.ms=mKVCO=}H}b{Yncf$D/|S}%%I_ [~pUN>+ u/DPXX\q1r϶ i()Cه E#2t/fx?O[QkJ.ŀ>tT6T%GUȫ Voŧ{9eiRvaL2$G uX48scդ!2JvI[1Q0ࢹFܛ9ꐱһ7R(wAۄ4bV'bhKTɠwv6--fX簠hR7kNG®*bD*_,V|)}?DfN'^ԜP<uĹmU`qT 0Y  `Sa`?{`Zfz|snO*yq蹳|m D ƒjܠR .tj@XBԖplڊI*)ebExq#5 3f9 A-+e+`@D[ᚭ "5H)\ yVl- -$3Bޙ)q(n+u$.1droET|Z}E>Ff7v~\a Pa7<. W/iͩ=>~NI+;ёoK-lm6|`ѧ tܑa5?^iLLE,y7D@K$ωVՌP*b¢*sY+ Zw޲T>– Rե[u+:@g ~oxƍK뱂b2|+_2|th-qVNuUV$Ɏ.du/ HDţ.!u_dJ>pV"vSMIYTMeLĘgەcOVu 0fwM5\3}n2NI'{'Y=oQߵqmKG%o>D5`?(ILxQ7{qDZ)29; J_S')]茮 ST³h) _= =l-w^lBݥߤ>Ye/#ع-Nߓ(9yR?Z4[O H^ kz)HS X,'n;3Huٔ[ުr}^ Q3[`FO&< ?uZp'W؀?yMdmRUoT/ c|gy"L'm kwyh6ɼB4ĶcIUk sb:ctn G=',8҅N$#1n{Nv-[2xU-t)yb]yQ2u;30[6iLAeѥ)~6d9VRfŒэ Bh]@7+_ktPw (}'/ -HrN &1rsi:5)^ gG*VLU H)j6DKŰ!mۧXjٿiO>|]T$O7%~zK1X.~&fzߍ&5e_Y1_fMFd]QFsBOhqԌA&P_c"TpzGUe.Ə8 2$^ZiRcW,Tc{5 EtwpZѫįZpl&#_!] O'MSK8 `ֲd*z:f9WkZGe”E%,{aq564'_*$F["` ܺߎ(/y:5Oipß$?J&#L#[7O-x:UzEU.Z8o6bCQ35u-oX⳰Sz' wZ9?a9S7{ 8sBeN?QoMfxu356Ip^3AʈbEV4)zK&⏃׸y[ vY4ЄWƀYIRx:7bL~!MR_eȉWqyWW;v~ttM̪0;PIRÔwc-0N^>f^2:NQ$<}!S=ܧv;$1~&6Z7"pUPPkIihjieM &zbq &f4@%c|feU̻_2j"6&x;܎&@z-%Ip)_|oLEDUpPv8=o V3:#9_(FQvĘ Sxp8|R+X#Z&=%RVƨ,xk)s`<ͻ0˨] ztX7ǂn KzpIoh^BxA`L1 _pB[֧.ܢ2so H[}5s29='tfmߘ%YhS :!QbCLM>>S^^~faS ${7Ns6R.i ~C75 ; v&; 6#SREVD]H41OIAu)maOCE H#Qutb: d*1KmQmBi_[ tyC7hS@Ouup=s c,>$*w9uP^VQ[Lđ|FJF`ŦX͝<\!'9.h9Y Fݻ2*0WY@Y,&YLSsu  |zM%U*"6׀ofDP62*lH _ְI7})!|23C08[~w[%s Yo7;l bR,H6Eڄps$)잀G m%l l҃0 OUdll'#GTUrJ2gP ^G6r+z8pBA\& 7I1ڍ]`22׵\3 E j< ^@.TX5\$*0Ej˪]\z$pvBPrjfÉ RLfgYUa<_*6 !JγOpGm¶{9/ (,C[R{MJ /Tn b;-eTIt2'R]Q&b"JdLR;r*Z!Z*;+ řDQr2-pJy4Rnqzm!"Yhp' ph]oJ%`z:}M G]= giJ':4uPݭfVr(C2c&֞WI`D%Mܹmsg@-T TL!nPIcu{ ciHGli ㇳƉf 9;'h6tZUܷCah|Xr|)k! j&U̠D207`=(y޿n71s @au&I?>NuTus;l`%^| bD'bǔS̸1L. ]gS#A.LKZ ރh.͚I! +J5`XYrDE?iL/3&fqNW:..m.fe(b,"˝?Ƨ׸T{ K@qLAoZwAk/9Ǫe>npN'QSWa^3rI](7šՏ|):cpg[o ለ[b7V5Nx:m|_O>Im_woR jk *E6ARҸ* d' 79ɯ~AHx&gH=ӬDtdiE|B#AKxb0: JqvbDf*JI@'E1*ʐjs?6&BmШ\_OXb;}܊tz< ]^Q0A dcV}5s2A*h‘V$uIP Q*өVV%St4X/hPb~,IbPR\V,ET}lUzO0QDžJip*i|mwn!.c%qUJzC#e8ޕۏ{/\ >_f_ɗ^*쁆llmZάWlXCkvU>ap4'j&M[O@<<Т܃z=}x Y+1IAx,mg)I&߱8@ =?}\igmcM,kڲ/3HGezLG`?"vTgkCMK1WR ڥ;6(BAxZT&LF\n3vXҹ+;5gQYtג1 6I&S !jq5НOsL 7X/g-;2u7r{Ͳ"Y?W:QcgD9kcB?={-޳RzP3oI@CF6^CAb2(q1\ Y]<)>bݶYlqrw#<tH͊P F wrd2s <*Jʉzmj5'vS8*|D,3nhN8*PyļE O(+#{Q#\2?W$N߽a9i7R竪Ӣf^%<4/BP0Rt;|R7>pуfzϫоww9ѕՆbkl~N8vͨkgWZA,ރewE4Rղ!90-3AqB_|sυ*>+rWV5jzw]~dU&]L84ǞꢴhͫǟV{.?4Zxu G@H[zyl'Q 2 <ׁ{bvDR1ֽWKt‚Mj%NFawk7˻.șsJF&?" #q  NJq/:8wn#%>çx A@b d$,N|xnX& hxo$a͈*Zb h\\f<?|6XyE&߈"4 M Jۘ%)*{']LOG*'¹+ ~ "T*l^m`?hE/?~P67wIVVCi*Eqx}-HW fMh$QOő;1SnDM4HkwWeyVKp“C(|eڒRNW<:[M7+tB d;M U֤< ]%ms w%T5va/!ݽZ ->09P ,X,pۻU5&ɞ|ⶫ*S>U)?TDؗ5]Z/a|<$>9x\΄7p` @]hia9?0%ARn{)LsJTjs"wM1(j1s"myN^A6~b>Ⱦ+& g%ߵ{Zz?x_YPֶFw MT53_~jH4Ң9ڼ;pARAob,P&$ą%((QA>,(!PA)'gC^cg)Etm%(B!fw~{'0zcgG\0M>qm.=9aÝr#Popb:6 DkbP-- r**2] &K6;h >4!Mʣoi S$= e lrRB(zŎa><\D#1xmF}dMy)T?4 Tq?ƑNrԍ+М3>!N +ZS0$C`+L'͂mTeΪ% ^k8-ƪvs+ (.)MrS E!V):O95bwtb_BN_fhҰ\2l_ +Hn w|},ar o9rBY\^ FS y&k`+_0YUP<\~ы-c/\Þ]7#/o8|{MH>Й 9d Ýu_H$e^wbNHm+M$TIM)|&AH>UsO7{SdjMsW0vO#kI:/Š2pc"Vf +▱Ĭ4Tf1tmL=b]qE_z' C`GYv2YOEIbHi F) +cnB5~0XA;{!]%~YG 5a$KJ #ol9Rj{-4|R`gž{m/b^anm| &`,GnǢ̮dGz/)]׆ۉsoLdD>eW4; J `4=э#AO{V1'yػnexPNFf,r2(cݎ9ApJ]3@@A} _KXo͚Jpo%ܾ+1ǣs? @ -P|0 {L)в“ qrNK@&OLSأssI[Ki뗇oݬ5jDah֖rp8 O nk4N~r ( &_zmd]}CrzfvH+@ו4Rk0l~v[00X !7i(zɉ L2l5GYeBr0hM(zUWTc/ 56 IG$?2߫[7,e݉[ò.Cok{eҼ*O_=xm>j!,'z p&v3/8Hگ-˼Yf78fob,"` ?( ҂d",(6'@)B2Qgx\|A} JceLgL˲#)fO&ZPg*?B_]q2d25@ bI|”H )4xBeB Uƞ>2F~*Ǣ&-r ]I瘈EA", ;2 2hW]=nzS"&y3gs;G1h :o2UT"4om{@/p nU aݻE=*\|RrbLM@l[z5Y>OL'O>iu( 2 F4hnؠoCFSN/еtLU3d(9cGF8L}W,!GAŮ¡p:.gD{`ۙ\شyl4 bӶ\) +Cv{U;IFWp k #h^@d@OrK"0uJOxQėj2^+a(qY Z豜w[Xar%w}BzNRgZ!Br@i>YϪj84GgGU5?׋,z*1~yE04ؖDz8J$,`yhf<%ڔQ2gy(ui0'[.xIc%zx=T~xdQn( { 䵶MaoRbQ`NcDԜxٮ.FK4KSwnE~Te'+|AFw:^ٮ9X:k#.fJ%5gw'4Y{ h6SFSВF `%ޭY"b):ihJC*<ܝsxwafd 11-ۓ,{oT& 7:.w|S| D(c3oLF{N*HpSK&Ïwsi$B߈SpOB*<cԁ2,m'|em..MduH mݼ21sfvd.:r@?= 8j# ɘǓKkAN{.cع9?SIkuR%c"D%n9+5e͚S}+Cт0u@psfpkdqz~Z+4ip)EFi"ɫUς+_}.Y~hkTCthߡU<$%F]1g2Zgy3f_ܡ6M=VRgh"r@hTu >ș^C̦6raF|YA6!W`v ķYƯaQ`ҧyK?&pfIK >A$f8+B{1u }y2WV{'V Dn&b[;i_ƍϑ \qʢ+g^%.ҏ(f({:) P3 \lw`h!T1xb5>L25H-7 L,:B/!s8k=*uZӛ u,\.k:qWCOD4h+cN#@yY2cV+>H$ʎ~{bzCjɞ187ora:2x ml{bWlŵm+v=ʬ;&s,GEјbG^lPJ|39޼ת7kr!'ai0DLuJC x?r S,,_'w%iwW8tH\# K$F|$Wg /#}iF[7跅1\ǬYj""V1JPYV#rCrlk.!v@#z~`Nڣr{|p,BBoJ^0-<7?h|^!Otٷ7 J+{__[ 7׏/8f.fz^'a4E]>{XS#Bl{jH [x\ ҽ[%yx<~sFFh JmP4 O&磭t./ Ӓ[zȼ|y$(APl=8?(/2[]@lDNnD2Ӊ\/i@%(zҜp.IFm. &I(EW8X H2['>fS6O=gpI2f! J PJB{NYh^bZUj#N ¬>?NZ%LeSmĘ,sn{Bhe<&)*؃\5SJ ujs1qp;@2'JҒ-8~)hy&jt]s'p#'uLy,kBlDF ,Ir˲B}H%+mnX_yr-͖ؕZJQ6 B13s*ib&~EbDjPo*[˔uIU˲ e ؟Wxkuજ'QM;tmn l=hdt}xc&=z (D-7,kyFp|Nr!!XȞU/SB߆w&_6eNi,%= rH&e/ͲxnuYߝ?ڏM" ɒa)irLfb+Yqؼb81"Ɯ܊Wn?, ErMڤԔ >\f>nV9ޖ|:}wҫk lARG,~XYNB/sڭV1Fϙ|9\R-Ȯʄjmrz ) 23nLb6M~l7ٓn[sأEwH7Up+~ʇ7s/_&ʺbN|~s4)ґ;Tx/9~WWĹY@9eZR_PHkQg# D y,9Q-c0Ц =$>%4ίPJ˳J!ɕ4Cq<>q $Yȫ{!0ʹ)WxL. ϖX H-weF@0-ЮB砕_KʿB5S7/ĴDr/PާR9]%$s_!ù*:s7wc`A+^yHwk 5 ih9̉Lܜb߭cGO.[40:RLz8 `Z|!|vuY5=h0~b @a[P3uWfk=Db|c7%BwˆǗl"ݛ>([հuM!BaJ#9Vn^"yR1<:1c&|zeŇ|OZ=Lnµǜݜ&)(<AI M"=DGoK2iYܿ3I M:x{]ˁOYmr\[ՑY8F6RSTs)yMVQ9vÊ*;{yYXʸS o%lPSLmf4v7ƕ -!}v#X2XOr8fRk9K yM*cO ~#Ϥ64 op$*W/?3Eζ&l"YNϞGO>seL`# Ґ :XA \I'?bd2hONѩB^/2}E\Q}J l絅MҼb[H,} '$ Q ל})oD?kk!8Q,TȸGQlDAFa.9Sl4YBW5(ȩWmCH=Myr sY xjO {=j5IdLdT Yf-b䖤"~SZEj;7 W(~^8@:hǒSrVa5礑fhNbL# >Ju+xe755&brA`TI[e:HDϹ YPuHnu]$TyiL@nse~*Q)4hzckD?+02:/w0%lċ@ýo_7Pb(ᩄFG|q~ Q@:0t7-;Ի/SSp %hNy*_Dt,+5}mrmak^K92+8|p(G=:AAq#3SXq힐ۻ>h2¨eti~ۆP \x Y._xc$0GQ7C=NU|E;o|!wt;z_+?ұQa<*HH =cLL8ͲG?gxP^\2ӢUSg}PwSLaB8QBXy(D޷|iV 294K,s'rjӬUZ1xlowdYUaۖ^i) 7 SC3S Ed~n}6|WDw#wMGSew{> c=*ڽYD9?N\]$Hl F5bV94w\dOg+d{skFR^!vj]6-3n4Y&oβl+wFFgl'?;` WqULh>_w8^+1|a,CO?|ђ!kP6]N)18?|Wsm;ޏ22HY&ߪC͑V(hz2Ѧmϭ8RTʝ^fip( / o:[[uC>!Ka kMihQ ON4$݃e}U{&Lsřˮ^RONJÂ90Sjf 8dMK)Hߍ'} (bUJ]}@&"ȘFuK5fQa+c&*ҟ^~2xf! p,9 ~ַ_.Vٜ1oAo|Qy5?O >wG~ٔ} B%⇳9i/:[I:W{S_11GU %c-wɀ-TCITF,}Az┆?۝v˳`# fKF('CcI9 ^zGma<}M']* {˳]Tr aɩzO6wL1%{L&"Uwj;cn snrn.g M]뇩pim*Y+*b3`/ʭ 2?= YgQ҈!7 @U_ Lhigwu6!6Ɋpia,Yg d?gDzNo%7f*81T =hH}j_^:%pjȪF^Iˀ'a3˚BKSt|e4kʇ 7ZhYyΐV3[$7:S)&ꡈe(CkPl&X6+6` @@=d7)."U,fIJ1U9AW~Q0sEWx+bNi8Z.'vt}Cܾ:z2#r >, ?P&[?J Ҥfi}1\xڝT>k>ɉ"?ǹ$K &G$H\%t`p8°hl<8jX> ,n#*E|쮋Ƙv{ߗ]eBaS5#U<~-l"5k?TZެv indhgQe54CѩpzfyN Smq&}-1qmgyϛ}6mVq;t:Rja\q5`H: }s"k@6 ͩ%4 > DcHIF,Cy.FiQ}#<PUX`_p__m;TT⯞RG"0HQҺ[upMCI|K^r] `j )?Bs>;J/|)?(|J^XOXfhIJt}]=0i>XXk}- [SXBթrW3&P;ie/&ӍU?D]sDͫoH&c]䏃 DxJ#(ݜ;v DNp "#e:D7ZA3||H;H 0oد0~T9wcc푐mЙTKsiyVL@ HE&Hm#C+<[ĸcDcYH.s_v.k_c ⑵LB\G-C[9Չ5l ׋qZk݈ON pzڠygl@R>΋s2M@~aʌ z%^kkzoL0C=-.KVgQeD` ˤi?;qg:N/hfݍ݊Y1k-`<W=0%Wf۝JYr uBյjc)nQ&)ɇN@26,ĝ9qY1n*A`CoEto n oo03N`[X@2anL*^M Rй Ik`GViS/fpL>;b(j#WeΡVݡto)Hi(oЄ,,HPM;H^ l h?HOc-YSnAͥ\z2rLоMZo!64J-Q`Fko0\G)A=Mv^! ~X Gڐ'?w&ԝ?Y-qlgqQJ?>BHZ AYd<=գKOui7G.З,ܸ3n39mu5A[ DI/Q<` ,`4]X= _18SONjTb0JfKzZQN]r7|u[ C״rŲtt4*}]pRBZZeKCM=J wζ3i]Sl,*n, gT/R;:iQ+Ccf p܆ qL̃W lKtYIeˠ\Xh cسM\(˦6%,v-dtnckA$SU+!^us)i)E13OExhi &u4/aU_" l: hn`\W9*~%XTNOڔu|{ P  #vGF X ⲓj=~NQi]1y0jO~drQёQY5<_mmoe:6zr! nJ<zrYPu#3sWFԵt- ~`̥9ꔅ oqmÃ_'kWA6 :F7 7u.<  RC`L_Dz87gGgE~+Lpo3<4/.7 4ĉYUv,`'P˧*|FJ?HLjx3zKۄf' ~x&BpvMK\n,IAQTvJ}A\h PȦ8Ū3|PiW*9tqO_T}`}095z1DP6b˨I3]0?%}úω:F8~F P2oR] 5q4Y,0;CB.vUvROlYgx wPM:$kQZ~[uWd1FXܴHNr y(Z Ƣ6ɵYf8~ĦiאYLELoNG}bEO~15fH}9Vl0s\Dyf*m'T3uV>43{]N/\DK"\{Zrx6 y)zTXr+f"ʁT/zAO&f7s&}W% awވ>!zS֌y㩍7>(6wT*zwQj)zq7k/FBlw;rWmLvikN/`@f ,G$[b'heZ}qd|:K~9*V 9Y[?z$iEi~&z+˖[mM?l~WߨQTAp$c+RVX"6(M$Ŕ^ EgrIܹaJ"I־'NqL: r0u %lYD(f+S'(4,KCP] W$aELiD\1!wGZ zꥑX ZձF̃4nkVxcKל7 cchU̶]PFW ls,)A$MZBm]>ЈaJNrv~/hQ7Ep$!lУRg5aˏ,, W_׷/śew6kC3I楙~$"܋&lI ۋ: #(V͚/i<"!iU6.Hz veۯ)^-@`9yip ([Z+(0}yb4Ɛj̧tTu$))bUdm~7GUcO%94яT/I{:>kR,Ư/، q E^Ro#1E10.Υ\5XqUK^$ \Wu[Bjqk#GM=@#U[qdQbuCzJ؀P (@" CZ>keZVznfD3(k;`\#hTU2X. l\t{` V̊>(aٳ4N/?zKp@mataR&=&)v߁,vLO{U\%ۈ.Kj{=r&>"m/$C}N^h|L7^5ag{ŏТ4e=c33 ΨJ^4@nkڬ=G 3hx1TGŁ., y3kDgztPO/ۘ!?a2y |d[CHㆶOrxQ6}͚=8n7VD51"etp[wCI Ve'gnY_f"ї1a.B#N3CTY8aQJRArod z𣻭ڨdvu#)n7RQt1ˀ"R' =~ʳdՏ?+){*cIܱ'(mLVA0-i~.2ŝBH^[D۫  ! f͡)K>#z޼B(5}_x U txR/{n SOPd]p)C\-q8_uXG/|?Tra49ų/ǪV)Zt>UlաR"crL)j6j-˟5%lrvX6/-"w5GR;߮c#:{vr^~;&HB/4ntE"e]%C*WF2K/yy‡0XxF٘Et]$61#; PNtag)Las!X@X+Ujӂ:.IL[CUL14wO= %?bQJ SaP{X"g so/ }.9%S 2)_h6ꖤ$U -yXL.# hWA$> IvgKf pAH. ~lLA+\'VXgRn3'pV[ uya :5Z)jZ2I"޵sSI)г cޟecId$ud4ĎIԼ:s\fXWVK^:u%PN9JYIu2BOӭt`hTjVՠ&b3D;uC-J{ :B!BJtPBֲyypzj@ |f8z xRP(84-='pf5:OMo$[ ,rܦԸw Ig`ec?ʚS9\'KL"JanĞ5(M0lxm=ڮjksK cx\Zr@Wol[߄c':JaI?jp~~?-:yU:hxlJiQ\BY9x2hzrGy9jta?,GPFK6+'}J$bzABO"D]).zzV&:wT>TwA{|C:oԓbV5W7_u${x<ifՕ5J{Gra(/ dq,T_*<*@[nUS*Gkg7)4B6GÅxRr_۴RϤ$.k6Y}K#sACV\]p`k1?ԭ:F!6v@a)^ Q:qD]ˬp#2&'|_Cr81XM7ɑ#Zp9 FyÄb_;W 2ӻz2#ZX/FB'e&8%z^ƨ_Ol*y<BĢIlu@sƛ'WZq 0x9pfKȝ<`! 7"/>J@Kj^Q콩MmxƷ_QoA c0.!D$#<6S.S#aL2ӕOi KI@ ؔ%(:mW/ҷ41oP鈴S[Vk-'5s LY~8Oaj,B "=_ [{kX241" 6BKԷl*"4 <; puctk'rZ;-?L4 lFR~pV+ѰX$Z PIZ;B/Z~'h FY`.:2}ݵKEV!VE!2]7QmDDψҿ&KwWң,GP-  e6?ynϮ1J hhQd/3Hxl6ɁH~~e2]Q7?JkH@K&L-cFml2B W7fK_^"./iNsp*x{D؋J ~E#'6t$Ql-N Lea.eq&">ԠU2 {B]s ~`U;Jo*ͰtNb@NlsAZ^In`!4vqřI~E!ENS%vu*:ܖHh:!8qzor_|4if$w 7axWcYhlyFw1-<9lQsqϖ}!3gh#% - x%mJnt D,wM"ZR7;<v˕XjSw1:7Y{N%F"]sQ`6vqJ;_ڟ,AN'#ʰ*@H,3ҩ\|ɫE]^|m&FLݶ 0 Q&sK!@LT јTQ_tj<*SOe5>^P FfUM5~#. DZ0  ح!J`ZP9f"Ki?_# Zaĉр/i:Oh8 v F{h]t|>o?> (AK\el\禹]]J2y)h0BvK=zIt"Wl9zfȅ?mIؐesYٙ8i:Am~[gLّu.AA.=4dtYj:P& %ܬܠ) 7-=% !׆j&Z,y/pFkr wnDT*0 ܜg'ԊV<F\$`^ SW1~P O삐f!i.286B&Ϲ?=ybX?J V%y|0#_xh?ĻnTy ez|I((*1Zrr9Qi41Z=S!¦TU8bX?vdc2Ff&i}u#Hq=Ku>n`â7҂Gc(PZfT#7Ȯd; ouM$w w*CƓxx:-P}1xƃ@5g |1L1 7yb?4m-ts!z#N8@Co>a[{.q5`y3r_;\Nl-l }|/d#y9ABxDQE;s vd)q]-c0+r?؏?$j{$'hs1E3v:jlBF1}:ۏ.΅Z^vGhd$.M1r؆c&M/am0I,_CJe`=WYGsFw OFB߶:OO92$rH,nt.@^\)=[>nJM}:ѿ1@BTu9r9D4me?;qucı4fλi VdӲtV衑j/RAuhA-9soh4de/&Z$m klacxRؕN5D\"UZku5`wrվeZs#(Qv牗&pԳ.,e c#JafǢPSĊkIUR9ݟ{O0T.Ԗ`[Fjc5HEA,U r̀{F4vihׁ$\&E@&/ i_cdEضsoє=ׄ š*O%茾IΑ<6/k-26{.;>WN2An=4)'yYIKtY3@ڂ2yҒ:C\QpKwGȃE[R) g+(O ';EH4PF Yae0F! =>~E{^诟FP^U#|k: X_~ c G䧌d W#= T`<0 \35tFXWVEZXʩ O&x}qg<4K0],D< `1t'*gtةRN[y .~Bed* I8=S|2e̵y5+Wj¼WYhncW>T gя39hK NC9Ď6LDIo3AA%<-7awz(#*VZt)0ʼͭ@6՘bMcgc+F̩9ҟő Է N"@a;T6cHX$tgG4 R)Ka0w!y(C@ lՕ ZvC&-$g۲>D%rǞ&_HѹXtM,jKje ^{oBٌ{1k):yM0u#SmvRm O;w*3yёH )gS˽HWr돦k bYD p[lE n@r\}Q)hkv~[icLM-%cHp]kYf_3&cW^m*i]Sc_$ mZ/Yygs U&.,"sը'vlj GK}&FR44t~<.q24#$_m5UX|dx~po53~@rߗÔC4罱/Lѳ$}:00rJd/sdHOOa lnC.©5PgBan);SZɘ@ Z:(kHbvyۓuH%MO^%Ky0YVgY'`-1PzF*%ZkNi&+eoz^톇{lȗRAm4EQY Ё9)K<:#dp ';U`-S*knGAG ŧHD oG޳M;#c_KC)SCI7i*S >TTmrI>Pfp8q߈!o(nô0E3t9/'-߱^z+< &]P7=5IĦo̩.]n@fE V;I+C :K8]N?=+=:D"N<j(t>3n צހ,  DfLf2*$$G`:'<m]*7(j8 pbT΋|ߖ63P>+ޑyXOS#-1;gyrN$u<`(LG;eיO:9XtSu9/ks6;qrX+n),Y~,.mV}t!xKd+3&_{%"*QHG'VZA}fIɣFhHz{VEG"@. _UƎ%a%X^Ǡ}ly3d^ePpXbg[t;f' q!u.@TO&0ÕF#eoT2m)S3AAål^*uO=1 % ˪k zV7&.ԓHUfv |cSH YE_LFCr@`]gMmmȷb Rʢq( u#7n25` Q0q_/0#0{}]9ϡ^[4V!&08 -Qw;_(Ӄ2 %+7TGd6] WKVn篢 7B[aƃ+xp e,L\;ԸCܻ 0GϪ1?f4D'id ne+kҶm*܉RAO\FA~[ߎZQP\1\@ľ [FulEbue["4ڛaf*f+8MX:Bj:K壬CI.2[J-ļA-KX|rg9Ic`2GI($DCeT96x̬2BV8vD%BdeMaMrSl!tjI(4r4yscT`TVI" CQYt(6tv?u4'r2|zt''067FaN٘ϟA;N ^1ejWaiWu=eɋs"_Nw`~$.i)+JDnYt%QUb<6X|a*l90j}j5q=Wȴ-_{ڐ2];$6dL-9Q49<`iZ- H({Lhգ܎ț{l爵e)ʁa\@ms^OR|ˊl(kxsM{3ZYCY ƉNDkٲ8%jwt_p4((u\W95ǿ;?>#>GvF^jΜF.lS,\2=!bi{\7x~r,ָȤP*FOrګP- %f ̺#1Z$K(<=7!lRGBOv6j܏7ei0MFa9Yw,O<*&~'~qLY'P&MɬmIC=KI;; J8^]<|Dw[o ږQLp"%$#):;Mڎ0x>LCM-⡿GW #X@}Ӥ@u#V }ʃV$OM-gZ'8nX4-]6 I6E<(LC=+e\ި=yJ# - !m'ՍU-^G0gv5$9˼7thTWX64ܩ u}~F7ɻK@ƒ]SI-G?aQ>oN7)گVz/ V|]lRP2.2rv!0d!O>^323=%}243,spIı/pufaO>u(PږDQ|2LϗA8APoO 8ʡv6K?w(vhSK]_HB chU2}-l; 0S3IҀq4xD,ϵdR,$AO~< E1 q0<{芿HAҚtđ  ,QVQ?jArU1#,Kx̋9#P]%U?",s@0R%CB>ě: +aJH9d;JZHxS-fu|J~,DfݻI|s*'{BZ߆K/\ngSꃢ/SLfHQ`;p}z>PҎߕS"ʜ.6*mʩ|RMJQgfA_ G3-Gu#AЫ{ 1qv2;e^5eBX6/s 6̹%)鸬:DM(T h#Rwgύxkɳ0k Jȗڋue"s^I,'`[\1r޲䒎)X5#.\S{VmLN<@ðy_3 Az9,yiMClS'.n2=.AlRjW{4+_}'SxC 8b,H\@WX 'we{ۜa5'`. L񪙺 P&7Ep&8)t u`T1D:^%w|b65`=V'`%<.;H']zČՉG͕ǁdCBC9#} ^c>~]_ZU[N4shA7iA[3ēRn-sfDɔ|HCbF:I^(9c|f6U蒙bVN8sjmzwqy/Ã@L8xv$4 -9Mx% &s7퍰yF޾D/udrΨ=˿ e=yJMTQÖ>[_9؝ pr#qIAxO8cIu|zWpCi& [@\+iOlk O 85{J͞Vɽ@dE@픒314$5OGH|f~n|,:>mUk9(1k^a| pwG֚K{nxɭM>N&tp4 شp)ŷ<*kpE_bqL[>{\;UIK#c?}yiT~"$jhkO SoW mpxTW^;L9M@=}"b9ZG=*K]QfeqG FۨG&;|.*<>(+@VXG|t9Oako iRSU; =c9G}yjyz_mB5f5/mU[V5©4LfC~*A1lk coWx?/L- ff/r eBƞ {H!'2vmvZnsjr) 5P+U9bnϜqZ*E̸ 2i%똢2/dу1ǁр]NgϸG@; 6'%^%,\\g:{X)`D36b<*tmFxyNl/zE[íJtM+롄Ӵ * b iet 31 d?vV{J Ap. \ld\v׿@jY b-X1 5{Y:.Sc-d(H]k aYALC%OJG5Mc5wO@N$Q~_ N%2|ذ]7TkPWS 뷚7WP(h#<3ϷeGQ8A =kvB ?RF"^Kli#ÈTމkWI 0{@kk_sl~)=f/:^@_M½rٕ"K KU)&䐘!=`(_.m˘VMxŋE5fQJŭ,NN~І`>bX6+DɄex i<9Ar*3{x+Gy]bwȽ h}&Rt\ T_zPVF#ꦕoe4jIj0nǵžԬd+xOИAmwwc[3]`Y Yg*.T9}-}j%%G~-rTYjloN%8 TsyGvMn(i/%̋4,䔶Q,"}^P!D*|hAZ+FH(AqtcL8Xy5(rYHzW_;,~ a[NE<` H<h,~"zϬ-$&;L(+Mq3:h\NbĻو;*q>(,>~Ln|,\:qO,B^x_h2N/ j!+ m0V f?U\0-+vNu^GtI^At|/AjlJ6VwkVȥ*d S/XB&mb5 NC"X8->~{syfZjny᠄-Am$a_@i QR}Jz]x$A0Vl7 fOҋhƫ'D3lH)m@ᒚ].|~'Z]PV {Qb2 n->`)C0?sCk,PWFAixh0LȨj?K"06C}:Qث{oetwSolFZ tP(}A5{2uPN~WFoNwDat8k$ IwKc|jg}̾ ް'^d# ߉+*Ժh`f@{NYI0y^ 5oD-a_1 𨏢j*KøХ%"XO09ǁIDaNZapjgQсtDﰖS^l53`LڔL caf~>/O)~`n[|,fTJ5pdͧJl϶kꂢNJ"3s3?h.Dضݍ$j}{K#!^Z6w]`- ^rKdN1ݘe>=aA> EgxWʖoƘr9ZK@Ml_гa!@Ԏ3/\~g\B?hq1' o%QO\ij fWJk_b4 W;D,93AГ_-+ 4Qqiz)yˈCLܲcڀ]d{ѩ@sƧNЛX2͘R4IFbi|nbtVj3z7өkd5j-&}][jYH<[F.`%*} =b&Je?eJ= U61odSe~i)BJՔTF?[ M5.{sz0n@б4԰ {T:@v~z| /ID1k/H wCPbN٪SJhB/* cTokʉ cg t=8I2M_B fȼzREtV:WPl%g R_Q "tFn2δo|!^ptL<xF؜8#?#YP(dO?Zm!{NxSiZP?h)p-*$M-i+-b_A;[/vWZg$t}j՝7wyΏ;S;J'Ŷz /@ZycGڷxn/%EM"0f.C%A8SFQW=(+hښ;~Zb! *yW\oe@`Q[YmRqa~Cy:0WT`D2e "b6x` kw|Lv T7_A^i.kep< LQu}mfDBQ>Uv]p49 GNm@(XpP$prdܲn- bO?5$ކTϽS /Z 4F)fɀU5v/*>+eM,E?M'ށAbDQҸZ9RVvl–B""QI@<B}"Xn3n#vS cEhd\G{X*R^=뛵ܠhM䪍9:1%te3%Q_mZ Tr4.Igx/ߐ Y]~ntCeB K@[0y 5 &`R_r m)C^̥_t8=PX&ٞۚTe!\X ;|3" ?UTG@NՄjEv5(onۭ#7njW~9`/(W CcvrQzI5O5i-?_cvKC:i̝FVî$+E3^BZZӂf~tu g?cqk,RlON|J1U"W}M qES_=}$hܟc.$PUßet9o? ?-y@ˑdWoXx`drh%z{c,rQ}\LTJ*BU  k{ \5$w:UA“R .% Z$'c @eUzmW@_-!^t44E˵=_. ER9%Ri()w+* #e߼.HJY墁A܁@HcVPܣ>[uU&J]>*,x'LY~ΥdZuAW7^ "B.'J ͕0sqR'lbJuxRnNS=FM:.i-/Ml{,Lw@8C*PZCE0,m(9P7uk1~V':g'ɳ.uC+ۿTr5`}\- ?)cҼ i.]?ϚזԼү)308'4QOxp!G1/D0 F''Z*8*N<\jWE{ŎB%A5hBi"+s0Kn7gUGr6oYfȫ/d"ik `ƈ jsTIЩ09ص,-pP?z{]U"66O>ui9iz@M漪bchO ř?LS*j,{8%,~oIJ,mMI:"o赘ÎJ2y@ Tlؖ;"`&}Iv¨Y". Iwv5cuP =lΎ[Τ|[މ@R rBACA}'-iur+'ifrAt"+|QlM'|;DL)&5Et{!,LQ(EP>RU7jZHK$.#;HAQq|>G Aڎ"Ovc/#T)80Qru`>9Ԓ[r[TFT1*1f5A:e# [w eqɚ!k? w[gDsJ4O♇8:Ʌ";4ŤulC?SKsK* UoԘԎ?iq>#s>?x\=.է}ms+GBa۞#!'vs)n1MM|:qaIfC1Ļq/˺'V>bķ[TwY ĊuM"*j&JDzm}/pa&Z!.S |oh9(1՛$7N&og,N ԜvLm m*o \+`y "*O(s}6O'P& pud99b26`xETPC$*2VlɏM % dM,_gJ\h ܮl:-~PgR{z@ W2ҁe'r\nvE.1)5Y3c j/M%}ݺ?d\svo/"j{[Z6А T-.9UWR{h@.V4q맥}=~eJ![T-Ckx5;"0:agn#$ & df9tȄG!$uhj5^W~2sMStT$\?Xc/5 U4#ZB=H?ٗDTD鄡y%!!.B~'+FC4+5c_"#1욃5dBX!PZ [ʭ&!j9 ^p"}^CBGF uttVdW v"qW\TKfUڽ@q#20êsX=@;;}YWD"X.`)wс7k-ˆ擆c|FXemuD}ySpĶ`bmk'Q^uFdQם6li3["YͧA6ADt~nY=#=(c0p6i^%qk.ذ]5r òFj,Y Ŵ@nze,xs[lh%44hzRuo^stu4FtnFˈ_)e:rg~DXk> '`A8| LxRZ~20 w̸% sJjD/fL3lj +N'8( >'cKiW"PTפ{H4wKÓc|*I >ߴKdx@MJeZ)Vqjo6ηfN*׮ݰ-x"FyhxD3M4x-fs9C[5qsIպ63Tܖ.4koCnH[Q"k ϧg7٫жFsG>+SU~gbZӏw 3܅@{D'rieb6sp P*2+*$KgR wK%,PG0Y@|#N}dc}7a`(j'yEUZfX+AQT&_=A<C׫a6# baT/:Gk1Bُq*uP[6H}!oDY?Y-agBGє#;jŽ4 FĽdLh똚![RSW_ hj#'>?j>m/ : ȕJrmXH-EA0>Q@g hf5މfBh1puR PI _ynH\ExƧc6o5x`4:wx4\!`b^:=*ˢ3dAWi&7.Y g9NbKlW`#P,&k#b0VkDaN 4q[ՅvW ({uHJΊ&RД:ws&+𮀌UEr]|[aꌼ$2[a\ [YL![jAB@EG:ξntS)x@*6 |lc`2j$ʓQ _]]nBOؚvxa{jMze !ok9$nRqMiX-YWD+LTjPYzVBsf qP~aA"ɌJfW/W::)<d0AYyWWx֗n/SΫS@Zd(B%x.q{.*ʜl[Ċ?ux/fc,Wr['sc\.2j,ҕi~,1Tۼ]M">HXEæ^hP2 Nl8!>20t BIeU&3clsWO_&&cfJ=!"-!h/qDL>9`IHBW2"/MU2:]$-IydlkѬW#c]g3[z]%<a1(@5~Uʔ{fHMvãB~ORxﯯ*G=6y"D2+Sehx@wtȤꕖ49Yyu^Ⴣ7 3ѺAF]ܱmϑn jUκf9ҨxRaNE ĄFJz3ėOǻSSm9"]qe7kXA8j6, ũ5 V]llHf,Lۘ,b3(!@).*-4Od3bn'=L#7QB~{DajGX=_8kmnʸAe )hlRxpHfBl+Dњ]Iԓk2rASv-z`L~4Gqu$;!]%d[kt9JtA^Ád;GT^xOrT4eF&P2n&2'Z'I?SpJ+|-1ᅕe's1HUdk? ¯Ej[bxZs}B&ĢMг外Rk ^{xo|r'ulJ&v}(++X_պSh=-u,1+&3̳17Hi(9}&U`o!wWq ƍnNP?۝޹܁MK1[UXFeT.-T-~@}B QdJO2J&U6sBԃ4[ "y mNG"7D*a&E٦wgUSతh"EV!g֍1|p uvߎ7z"Z (e݃2s 0M9Wyfj'=Y %Yrku-j));?BNlޒ80OhE~Q pѠU'tg\%W7p7(+ 8~|0NO!NGc=>4H$II],:-*hiУ 6X=?tuFN${,⁢/>5oQ1x_,Xx*ITuR :'4n@* G6mNn/҅vY,] ȯ~Yc'*莲;u^<$)WF$μB pѷ{^YDH9i'wqvJ`1 H?2L-}& B_AHj:_'DYKK 6'Dw^AP桃7HB\Rb̬vEɱ)z{#مڶ`.).TG?`2dC*fyw aiӣD:ϰ ߉]5e}Pe1KnfYىdi!'e7E VMѭWǠ+' [ńǾ4,naeVۺMKA26[{_}&uDTs;cf^0>qPysSޒ]զ?Z CI I{)9 ܐ:#_vJS%Z_]¹ú{pSF.Rgя1^%~ 5p{vz EdqbBf^b,NFI'g@Mҥ?mİR֬C]GkS2))!GnfHhfs`x JR㬅1]elHZ;r,hR~:+;E+_]>]FUP/uEU|Gl0[– F Y >3>VN,psA7a8-FQ*Uk9x;Ȯ9;NM &pM9׍}. L-t88E.SeYM"Lo8K:BP9Hxb7AFCa~T=c'YP X3%]$(&٨s_.Qwm=.d,% B /ycW9A]xsH~eH+cmL,}\#7hrFVTuR!R 9ǺUHLO8̴#I'*{~B3BI$ ~rѩ _QyzH$IL<)^vzY (gRvQ[[1̒WRam79l!ԃ\$-3aU!CZ$Z|*MQ'1-ORFa%~k尚 ^_fLyƝ65i&j$[H&˫ 9n$Bx?nǙJPFh~vt[iSNǞMG5ٖ- p8U tbݟiG,5b-78@% u)Z1jK(DF__(:f Ѳ|Mi&'bc';MUowv buDE'[|Itkrpy=ag Vq '0ӕLI**p:;"!QjRV~PeaF9KB0a>\A5D qb˱bxQ"i\\![>%ل$ٚ eyo!t?93B_:)6FG̈́t?V8XY.):*FHGο( {̟CEuUi\nɅ9{9QB<[ZcS ߚݵ;?x,TtHHxmas 9ݫCZHruSmweYZ(IOvē*oug/g5OʦT^w+qi>vicjn'91;Ɂ$F-үFH+!Ҡ܃-?#"" 3;mݡ9 x{Q 9渱y,ٺ.&sBW_)viS6y/NM KV)9O{XܺعQ1t.ṃs0E!/#>dJ#|2D5=9ϼXЃ~p.+4,gU#a)'E2^VϭC VCb-xa!V VB9fO]+N{qS7 ?PtE)Wz 5y4\;&Z]/;.|BFwνQY96N S!RG% nZUF{, w9TOeBuh5H(!bSC!襞H0x 3M@/p˗}-D%ۅlL sNYf3!ϑ7i%ԃ}6>Yu([ta_:,|$y`x)jW{Dx_8#C*;;B^Ubd=^pDɩl9M>{=W?1&}| D xMGAHlQyGt?=×A8\@chXbZD4}(j#ӛQ @>;7j7-]B :ux "|%">gyd/hڬyp 'u@Pߎ%oozf?ٌ\Tu|•sYI5.6V4JV&".I*Eig@pgJrUr/t$=*mfJj:c6 'fkԔh7 M4 `ȸQ1M.E[:RRI38[da;`@"4׏<䓹+B!5EKuf5MGfv&;M-%TL3`AޗV2Y!>$ԄtԨ,eezy}WmpKæ*&9{U6hC8Su,;YEL ZY>|R'lc^Ln!))Ϻ_ !>lT>CUdhBnqlcj>j9US\`}h]} uԽiUV2S4C ] bܽW+@`Hف8XfV+gge?=H>ǃ)T=S8+$_v<2Ƃ#U k|\=ʂ>[/@ƂWUM]#Fί\*K,:TĆ6P7ejq ->/-a+("9<_P?IԱl})E J8e$Fo|֒Fۯx8#i%@&R,kA*~ii9rǘ"ַ!1+4pb{M6 ~\| ~?dK^(xt#VA ;(ӎhIj4iL!e' f{s /qR7Iٰn&5\!GQ ^㽒&ڞuOnGdOqms,} AW.?sg0[ܓRWf3p .l 5< )ljǩn@ X,*}{fPq#|N-;a}]_Xt\ s+d:Se[#b^cÛ3BWRce =e39{LMk4>L+WoFJ+TemsBq HGӋFSI$M΁`V_}*+#L-Y( ^IOΉ%=,;<,D~Ϭ袝6X)(XR2 nN-L88{r[Z/&mDueJKq7$iG-%0Ar U#Z_V7b3^Cwj$E[%9??V=ӞqlcMXpX53^&n nZ kŨl ;ķHuTV7d-) &,ƍ ފ8\97=_l Od)uVMaк^ koQs "v0o/}?KآB:rO(3(RƳvg_ t0Wde YۆQÞ'Gg;Z6qrHa ҆}U󢞣MAwK ȏR3F*Op:"*Fc ٳiD_vf<(DG&jVN2SEϐi km=+Y. R^ љ Ւ^!OPTazY;3RrL&5W EGSy9ɋ18zJCWG]X$I:N*QJ pr ;sw$9<K`E6^!^xPES+&a}Z`/]B-L^fg]cC½⬴VUΛ.llٛbjB[ӿ`7]E%G{1ݪ2^l6V@`ƌ%} t%~j7粠7># 9m dh]TzG+XqՅ ɼvʢҬ'|Y/rվ ƗMKEM;w!6DMoJZ>0^ Y'UnrWEa~0rPup4O]+em,] ɏqhw7CBz .e{5ơ3fAabU7c'=W&)ĞEyb{tGu \j+Z94Q\@__#:i. c$W;7K]ܳf $>p/IT"kMDXqZiܵ!m y0ͭvM(Ϻ,`];ofl(&>RzOcHGu;nAТ(w6rFU4ŵ^@9(I{E5NkEXGc b9}'30^fuvwfM.R[Owf-u׎CN}c[ɪ%jId^+u?Yv2ݜ6l}9*8o7 #/x+8Q$ [;#T %i@/]IT8/3׫#z-׼٥TCHeuHĠʑN'rhєʛ-ϗɼElixɇMFİߛ:P&Xt=dzYƐw;ڗ.!~ W|BuQzB:Ko{Z'~%﫻?oBQWO̕|ҿWqpW)azaȁ\wN0gH:ϯ SRXm;{4_og@O9_ݼ4JذC@DqKUFTKk,rȝ+["t.pS*F2B!z,uf-D GLOҝȁ6|@;<(q]3vdWaώF^'%f8-~GW[`|w) FSn$R$OFQd0bnx|[h^QScфq[STO!/ ]k-ےܕw6 إJ*HڑO)3u%CR˕K憾Z 0m0}~1 [ulY}bԾ6C7orkFI!Ն:YQYB<ɕM+qVV8kQ5m 5Z`f͡Hw޻?VmYIKalb~bOE)9r ̷ۆ.sx) &Y!}UvWi ]My7CU]qZo%GǷ]"}%.BfyykeXülY4f\@F%=JamZ\PZ*2|M2AIHϊCM w s~w[>G@d5LWoҋ2S7px SyV>Ikxĕ??νsײ8Q(םlx@2}]3zL kD{T|"A N@ Z1_ܙ]t=E O,%#}W7_}i-Zr80{1pPisӨHⶺ{#] }Wegck͵ O؝cX%aqtBtD|IFR`,Ƭm`s:^n6³\Rjbzy]1,:zAWʿ#]LL6AvcKN %.N*)ŒWP+Yϰht B[2s@h۰0slz.?nGƝZU6VDÞ vHšb<;Ӟ-nMi0eLso0)R.^ =5A |dS@--׺h Oς5!7ۈ{Dꇠov<3ucy^4;O,!6 V::+>pUi2$ ^zPzJZ_{E~2Ն)~?7wx;+p6٥_/f 乳iZSuF^$}dTON T'x*x#׀$Fbp= ,޷vQ>N#}s^Tka7x8>R$:O=`mD,H I?^"n?Jaeׁ/ \yҎqTz]ˎ'xXp\KvjG\a`!c2 m!FM/j򮺸#3$)BqX)vGeyNtg *[RWLRcь=>5 CoC &#@m}`t.WGqA~;)erdC@oU@ V$ 8H0pbSI%WflWUF]a7i pwҾЮ1'Vk'l TNWX=*xR l [S'>E8D`Qo(ҟ)fI-6Qw~cv/Tk IdtBW'\oR@ᏺ+$PSw`I9aA-]G-Yms5,McJ@'.tm&a`fP[M"'^l;~Vuǯ71vf@nRr~FtPbh:ydؗs>N!Grdu$D;L+*5hyAJDk"x)Bl-e8O{l 5hkOPA)z tN/Do+>'p>쳑 բ6.<<$7eK"Z#PkL|cR\8,tG©?zcn/ _sOmlL!<cYC&J ) ΀tZ̃y flt\f|y<ā=FخUkA?:1堥&l5U^ֻmkґ#$ObkMTΛ: *ņ-,'FzPҳҭ/of,jAlD*VCrq /k`OP:)rBn螁 ;2#Y}}Rt7hR~8ƾؿbb=X OnقW8M5?^n"n35uP|5n٧WмOo[);ZW'!GF3` g/v\ W L=P4`鐬QI Tj>+Xwv!XpwFgԆ1:;B0:ѫ~t9/o0r6piۥD);9R@eIA=oܒʣgN9f ; OEt#? 0;=$/2et;;d(q/B#yyv'!Z=VæR ֒OJQOzEe粸h.k)Ill6p ї؂y}i;.39WGΗ`_ݮXr,[̎dɥQxuc ]? "2;=V%D Rbkg Ku+߉UNӷ~8_+ opgR~Cnh^}jvJf?ki\2[_+0$pe݇Ɖl@M/r& I7c m/G랽J!ՊթAWQ<5ю gN'%}l8_J G f$}.E $4BluZ:@e8Z5yh~I}mGC}?s}+W3_&'>7oY\NT 3砜ro%%s9"0Lc>kvLEhG໸7#@TV!Ӷ6Y3W>dXt|z "X#6=LbӼ|,#rt6 "W+'Ӿ*nۇ:>eb\̔?oQGEɽ114_A7]ؤN ( lG*YPWBYqȤRUz0D ń>q//!oI{;Uj)eV)9 Hiu'D*s] 8tT 5\xؠ|oBM7~7(c\'m˲dl ]<̴(vU X"sPc]mhlK)W?HxSYhkOwT+'Yw=˅*Zt]} EK]eVCwa*/ N}S$aXG5>M[ρ*r"z.Φq4`ˍuCڎBƟӵwL2ݷL d$ԘN"SPKG:}5VpYXOCcGyVAݾŘa<|I뱛0Yq/fnf-Mn+v@ $0%OK$J5B +G\bGwLз~G6 xsuku?sO9Oȕ&Gٚ_ 3:Bq#Y<m]پSl:OR|ryR)>Q>:e˞/aV/SZe!$\ ,s_ ЇIY?f\>tC浟o}@5&nlnI)`how1~b/ry9/yYdu-eeCNc~(H3iz,tmi!OP ZD~~$s ܷiϝyJš+JOQQ<,kfywR =ޏ)5Fhc;3aBXB/ʌ[*(Q;9NFY:#j"!\xaB֮fi4öj9xƧ&Uߟ1jX ]"رbmDZ(X} [WK '-*F~Gm U u^- ゆz ܈Akׁ⎉!Fxd XB:@~B\gjl\fHAXXO]iӠ`3ot*f,@ˤ\e:B[|`}}9c@kQW{&i Q j4{.uj9}2 m*Cɐ^ ߥᠤ.S-=Xb5E!Ibv*4bU6&Yň5-'ߗWѡ_@G{ɧZlJ7_IPᄗO7(M\M1]]H hdY Kx RF8UR"czUN릔p2ɪvk藍lz!tm Au[ʲm~WP`+Hb'øW˜G9TS{"-D_qWCRFˬ2-aLzx/p?{>D0\ {SWb*uk䛕i>%j0*4ŏA D __=qVbVBUaڈP}/WE\W5r A( ؆9T&7VU dp"ݛȖy1gkɺS)-Q)bwD:ZcDpHN7AD} 73M1h Tie y*'E_PիXya9 y,z.Ǘ_a ezX1*bpJ[e d";C\,{#A? rxphp()%+?ʂ)J hqgj;V:#͊#<`E.sdg}_Қ8 !߸`n,U%ipﴂ ED [ g Vz1:A3t+c?#WVcΣ8N~הKwRs9k0 nl9haN%z7>`gk rPEW6lӮ \~"s3]NYeMڧX&RF;%ȗuWfV2hF/ЌDe}HhhD9ϛ+,Ǖ92^z4JOB&Z><ǩTq?vMgw:t" lz-Ly<@jɝB\yI,jvD32Wm0r@8?In*φ`vg:7(R xXQE2an8ʣ݀ t /)(> ZE`'v劲e藽XXO?yl+"7qfP"2j6 =S%Ŋ kSmG(w*wuT6w霉9S`VQ5vPOR:" vs=:hA6IVGn3dm 4r6UM7s-tU׻'`y> ,VWI/w[!#ZJp*gj:s"_ͩf78~':.ˊvEbZOx}ݜ6ceʥ;˧F VlV\aV׏P\r3b D5Jo';6/ʵ8_җϐ&?3w!j@i'mSSNrU=Ҹ/[,OF3pHn41ٕE}ޘwޖxvI&"XGXlw9܏j~o¢RLؾ@~:8`u%{+8[_He2#_:RûD:<=3@;[tig6jvP*{}ޭZjėO·cԧ{9@l=j]$6 : O|iO!fFܓ&BԜ@*'50M9 '^jCtA5lS&UzD2d"Cb }Bvd,qi]%u²+C ͧwxHyS1"JD9##9U#LձN*βU(vlV'7R9l>BkQ6\:N؂pӞEZJL;&Ao?d[H*/xaT9onnrcøL8<* Lb}2X"[{ n9 :'U=@72 p 48WH3Ks2qғ\O8 @#a%'VV'fP[ωoޤH1A $RYV"xw~S=$ Y9?Q/gi"{# WV#]OioVD"eڏtp*R2w9sU,SoR y*X碱1sb nA\? <y}J93”WxW;2}HGILSrXqC h.UV}b3yAz{&QXnČ` \}>|bw>ZD],huajǥ<sՀ+Cil5$n n7Zg6:KQ#ZLo єD=qα8gDR8*Ubq+-cUDh6aiH!\Y5[p #.nJgLo]ax͗_tGQ6B1y 6({j"h0Ji (qTwk&:IxШ)sNȭa'3Iǹ{FOKbmiL?4v&]v5<󒈏#$5_(;S9 _ND]mNj [!BT2':"Fa0խ Cj9Y. :+c˩stАp2N=CB8YW#tl1lFqOLeOsj>;)yU )脹URs+*ݩW{kfPpsmFdK:P'|cNGI{51*j쉢U";ؖw{Hω\.[v8 ՉNfXeQÃ{Mn"߶~i lVgKM&6Tu4)WEvnsM)6 A^i F.:^ %~8J̯5IF1R4a-f"[Gu1e!zK\@<3 !E3 ,wNkaʵEF-RD'}ut iIQ@~P_.a{giuZԯ̾U:Q7N}Z|dR?T5Y,9JpA'6h;R؞M?D ˝c5TWB8tMSZkCM5$ Ho|UnIW矊-Ռ}e1>=jXz H\h5wB'es V-B'`iyioH8TTVlپi\lByzfũ<9DWm,ƪ%'\ABGXRFL[<0]bժ+/2HzITzWL6Ae+-G&AHsrm.Ujpp>ZFm: VRy@}O&pXJ,v@VI"orwqHWdvlUgƩyVgu;s1.ly~Ю|(vJI30ͳwV)nr6l}EXuC#1p,+v^:hIF^ۄ їg̊yuum]GoYiaP`u438T{h4o'r7lW3(_ڕ[\G>knT2n=.`I.:*Ёnee>9( ;SjJ ޿-s~VMv/Q.^[Ċ*n!PQ@>Wpڼh6Q#O7lZem\KW GЀ-Zt_"j}S}`~żQږ5֋@̉W5ҮR:K]r=[um&s*Ú$Qds[IVatWX}#e5kli2`l#vb-T娴ENU3ϓxCp(l; O3 [U]9i_I( :9AS]*]Q8d=XX5C $^<c6aviy@*p.4HQf!n^Ջ?YF<~H8B^\Wh4PaVoLTdn[Oڰl(LA;CNzYۅ{C&63uzl3ÿ-ob:'zО 6dTGt~ZHDɋG~k%{NJS91WGo+!IU m܂REo[Jq].IKWGN!1\@(!C|?we_9`;~}3֓3Gu [07[#,'$CN\a%]GF_33}K$F? &GG 20HK"fu!+3A M wThTf~Vpԏ%]nA'H3VJaʋgA_1*K[.$'H- =ŽJSTd1/"Wqoe#4Ӊěһλ([2VnUBQOweѶv6ϡ`o,@M h_p$KgGBdKų~k"#nA[7b>,\d.HTK1Z ye<U཭h "8DM9T$@)MI -yiaOl^Mc9|f;n~-Pʟ "B3:?"Fџo/\v5ZS {gMvevWmzjP`lTc/(ZOrJ[y1R{@4;+3?]yi'}U,T!ɍ}6_arsi/<Ź?K,dE !{h\I;8D;ӵoCID%/.#D/Xɼgv<6- Kd($d.b>dP&j$)XuU$Mlk- i٠sѨhudSgҴm 6.iGItֵCP v = eH&4ͮL@-U,&V5q:Kx5bE" u&5wwx5aihqs0Fd$B$ M+nP!D$1< ~lw?17(TT1*ɛc}[[O)3a~U 8$[Ttp1D`zC~mh]C!vF#',& d#)3n+w(իdOD,U`RcIwi LC)_bmPF)!z 3ط櫚e}p І}W[c,d!k0'iY{OW"_W8ӘDQ{EF뙜kペ旆K[_Z4oWMbۨFrL4%e$ -bDYI*ZiѮЙ#^f fF2T_(FR٩zf wzBtP8?& ѯ3f=?M=bV{t %'_Ch謰֡k7h[47s\ե+Ë9OƄE;N凳?*(0S#a'1_Gzj[ACbE Da4鈅)!ߢ.# ƽj:-bE]j1]&Rbn5" $Pxs+xq(`\}-B *2q dA$%8¿6LKyu:>E8ESOY d &-r>ִ$qv3 b7TFBɍXx{Mf/h BZ(CC$L)?:9ƀu4j"f [f*#n( w@ʺ.F&<FB^Fd:d3 qEH%~94vq.ǘkhi>UlB=X~VL&?v5yY|L*{m ~'bCUsN~K /E]P^4͒볁l ӳ_1'=H01u N[M.U&&*5Wm=#wtN}O]Pab泖X+O%<_/uS:CJ|L8Ԅ|j7w&C?BYl͠Xfʗ:Jڎd\Nei.@nq{k Oaѱp#g^#&#3cZp2cQqzDg4N }zGR 9[Q4Rr͇^O)Lةf J_5cݦ>Tf<`!߮%+E uj;* $k aaZm@nDeBq6exX,@{~C ٚ^!sws=uMDbD X暎>^іx'{=к~JG?5a[>g~'M+XN#^i1NPXݞ[$gZ(٘ YXl8x <3l${x;Ĭ/8tΩe66 ʅpY*Aٴ#M | V>DU׌Va?)ˊr]hZP*na5 4bBM1(Q좬rUo$lw=F'l7]lpQ ~عgbDb|d~PRSgpQ{A/Oh)lBk~xľr ~W\.F'M3Idj׈o',*=y@Ψ`j=tmB}o5$u3>qgTu80˳~הdNRYW"KQE6XxAD&<ðƎSyt̰Hj3{&jHA Pk XpX!Da^ԊJ ^`hpO[դRAVBӼF]:bj,ϲCF->^X&d*\ZJGĺ;+{|#bX T =5.ߌxW6h;22ϰ~tIitҤ |=3g@h|9 yLa@|z֤ޒ?nܱ7-fτ#x(6K\Ž(=h +"@Yro0+UzR=:ps˾amb+;zP.W|ͣG#ǺGқL|9~D`o0Jӿ30\؏}h"e&! Vs "/KAokZѠMDx'gAE\ݤBiJ\{ܥCmi&ܧ5Rr{v)''{[A qFO?ߠ7m,X*L̔TL4ҧj\ >hG+ȃy[%F}T1cς}zӨ3en9Lw$kJN# dYgЍHs *۝6tp[܌cDh&$Z'F ,+(cK-?^ԊOj ;^O'W&oɅt$'izf\m\nOuGhR_d+˚bH{?~?'rZ22)ޢ XC7'-qC[ԯHqWy˝TwQˡEoUƟ'lSjpȈ "3'u'asC9?%jQtk٧P<]f)QSAԟ icuW6Fzz;&mb^?6Sn\fāHd+v(S[|Pdre3E %ê'd.;w{4TFx\RCa8*~ZY`WJ(֣X5_G fm>yW JD~}˳x.U v//frmyW*$S `m@;p6%0xU'6g`  HKʁ4z5|ëۯK1s|xҔpVɱ Lϛ1ui%O {IO% h&Zh(.d(lw5>s,l3xR+ M$:TpWrAZI׆­x\ >!H F ; L&(% /+‡c \FqqԼ]KY`α+UnI6{APO5Bj چPlB0nɮ9F'&~BKMkΎ+5jiJAiٸ' QnF.; ]* ?.fcYoypz,2m_AqBN)iO8~櫞9vKg9#QӸtT2kv[C S23 nM]5UsLJ%({7e~/p`wӔռO= ]هf]S&G|gj8۪Bf  `5v(.0j>*ggUZ?PUU`DገQTU"xLûmv)ن@#n !hanܛq ( C\i]8 !h@WA=f{CsPVi⩔Cp{ (ga(v4*!>ˊw^=ML {"J$S$@:l{:,vf5 ?,PK#!H\:rߒ!}x2_Epxa軳lS9'92%Dfӛ a;ou̮ۂAa( A-d25ouw*q0m+9&H 4UIprv"-eERzb+%PqEv I|p'H cL0+"w,pkc is uK q-HNn) Iّ< `+VI&8cRX6(/)Ir_؎=u.պ\I2k~pƒ8p T8 nx´k3;@Įm<si ɝ_=2o ,AfK0v=S9ƛZ ^__+-bJr2+s}t]9]]0;5&}1{D? ]hGM Q>yw6nyB+Y0b@SP]EarսB'yq#hfRv(TY`+djQ,c4aE#SUVFYl{YʟɛL84y!]-نTuڔI';0\Aot?wRh{%#qKVqlE-U#=y ^[[EE)Pzh3Ax)IEኝ^7'O:zmϻw{%b8hC L8s },lXzR#.Z=5.#4vL{εtD{td}*_oNkॠs&}v/9A*tMtS"^,O!ΰ̞lNT u2mÕjϮT64\%"y$]oހPYt )zkM,~(ՍϾ}tU/iS/%BޥOe׌tW"]]R>oΊy+vmq-6z訲rqVq^:0`_RsRu:U~QLb=f0$ޱ5" #{ݞ;U =㾷dn9-`Bi 1hjhJ6Dɓd'=BiUmru/[Ce8|'P d4ح`!\XvEk7 I:^duFSX@Pg>Wb֮W}Jil %l#Ih!6~2@c~={*0VbYre.3RY~h*)}^-El!zL"l}81Ci.7OU0t0 zfoO{:$(ek] 95UC-{4Xٝo5DO=~o:}1"9K~??'8 xMJ`vnJ">E] *CjαZ7Ŭg*]AKFHɪђܷ4Q]7p5f` e!|,b_Bz"^А_c >v B;+1k&FRɦ-3J_:>aFGGM\ _'Qc_۲D WpQ: Gygj[ ;+ұQ PJYk}@w"#2WR2UuĀilcI~sbP0LQeRZʞ؂5 d6H`f׺dnF5%0N/ZJc:Tw95%}!\BO B&x0ӍZЊB9zM,D' H:l '}D:[v/Ix4Z_Pv0u%l*ZF._Uۭ[7| Ք ,[S&8dEkO/닷l"|N[T|&lyQ#ظ*]5"0%SP^SiMBb ~)*Vwv։˂MD^C;N2E: pXR _n1^/퍜%UVM^j:iM-4G)eCkľ G~ rqn.!d@X;CM* I$?%/3`b J/ WOb0ߛIK CZQќ$990:˕c?^IKcqnvykG+ؿ1 헤) C<7t ޓKt3Dr헡ˍ:4a\SxV=094I}+ Ca`ڼ!\)WWybB񤔜6aHRڑD 1D"s=Q_#WnrW[7ZM,^20U])_ꐒ n 5h pӭ@{qCt0K}iziW Xl؞*/޻8CUNfِ%%ȔN|%6;Cd&edlqtɘKS/rI7&j) ["dIq^m @Tن "-;T\ӏ6=_Ev.u$(>ܛ^$[N9&uZR¬A&0\|| {x&DĦRǍ'}Lt:mtYD9}VvVP&anUGQ60D@++nтA-(l+Km`o=qqg`9I h,J*9rL:CntDjS+S k#7qfLre g7"#yՅaéh}͂PJԜ[L>E; u pdh  %02$ۯ$0Əd-IZ\f ywC"L3/ 94[%YLyMjk% ^dg_h]q0h _iYt\o=\9λ"@u8 i(8JF8I #B5mWEݩى)-Ǵ,R Y}$VG{z12KrZ826Jd'>ŝ<ҼhfFߴi8>.N4Le2eRR#~9ϙO*} 7`]* k4q޶Y,QUZ7҅# 8dGT]3};xN;}zjO! 2d75B/\W$scH^PӔ6]ĹU7ඊtTZ-2VukSQ Y$QA``Gq\C!:lS A Lp<8AWYL߻ШٻE4I?OufY6뮰M?Z i?3)uPތ㔕]?XS'Vx9j<<<eE29G8}4tc^9/%c$ TC *M:ߛ÷3 hr rY_hMgc~MZ8A!c]= 5ྖ"C,Z 7Baw5m@`h.5QGb6|ENF_/͇PWS>Q4TS@6>&DEk:Bay@MވIQ?Ma̯cʭZ+{SDt/"?.ev;LbiX;k(#SzkGc@^_ "4'.)\b_vR?ɷfH7/6^W0UN>.܋Y7}{A%tU+OJ9v"i|hl]4=f%(к C<)HC0T!U[ZpXkƝ/잙,AE"=|eyr5LPɃRw3BXpROdǃ._ ڈ4?u)mӖ>eE2$٨HCZwqn9S]^s2cMpN>tcr(F_)jK}Ȟ1SL5+̘ Hq5eх!JYMjumk\v/;o=z#WZZ fr8R\8<oAalg>W 1bՎ1_?#- 'EazQwZ$]3oblp he+ hVzR0sbMYXhYLo;/#~Fy@>|eUN2a}{kmMYcrOXb.֥Ð2.gJ? Uu)~Z4LBZ}SՐE#k2;gCxg#[2ih@+ sj̼LB GbjDqT)l.^_ [Ђ C-9r7ֆc5]BT A B51c] 8{^aqOrX@ 3,$,T9Bwt,˧j2KUy͐uzM.f}Y Wf+'M>!'jz:! 2n4ťaẻ ւQ3B'4{X⌫85K5&~N»݅c~L@IwmO97YҀS&"`kg.iq Bn-:++-YTINw':Zu o >榬8.z^ #j |닝?[8SXM}r>01lk E; j (FU`3=؊tZl8tΡZjx'a$af^gl4QkLx|~z]4C 8&ihVM|}_#o/&(Ji$/Q#+\3jr5[92fYRPf~:}p'dsb.Y痸KE71`0춊I0h yRrM+j%o/Ä\Lq7Nˇ+!Wr~V ^15fMo֑ԉ`Utx̷'tw7~oܪɮĮy̜o}#m<}傲A2FNJn%ݮm'"nq(b`!AŢ% X\Q !8Mc5{GC@Ē!۹TG^Ew? <1/,2)HD}'YyGSl-w`ќU"A#㬺#ϚyAD^3-/K ZXHeKϾ#NtxwQo" vJyiPD}\]ol0VjW>9 A'$jYd-Y]BZ& p,o|K2)YJ^K陿kb@7V^ (mUPϣzk fHQV7C[ͪn~b23SlVL"%U8/费a :sZ\ g9&@$c`^Yy6 Qu!y6lɰ0Ӓ);B쾟u|f[,b+ɬ.3EPVN~aNg[٦ ȓN'HY^,-a3Yk9j0vybubTQ\uԶ^:C]yt0N^"vm =wR8EQ_*Pp>ٻ0f3l}Za % \"BEu~L{yvK0O(Z$u8v d8P͈|@NP{8)[mL|wKc<$g i^B=NB/ZN % _E~bmr~G26l$:lߑ!BdK牠/b$gc,^yY_b;UnAoggTg{׫DfWsCd2|st5k}Ϥ7NCp17q\mǕ!Q4eM}[h^iܳs`gƖD_F<谡w5y*S<1C"QZ^[.%^҅_6nG$ą̼-$U_]4>ѱH?B jAS(@e8߉t0 AC$f@N& hW 56OGiB@escH5ϖR1HwX$F);9jqKb' < V2`qf%rЌWu9exZYbb(fOflIFR g!V[B _[9:u-|ֱMGg2mX)(9ޜ(Jc ؘճ~j-zAlhIU Lu>9&][D>v}cX͎`߼&y̲T׾@l8T{[QZ2?E}[ H;݈s }:ŐL±s}}RۭO]/FEwBH)GCAfxCtZ/2;!Q`H6dᾨJDS(` 2dPCH14A! |a%J}&iy}}ƛ/NI8=ۆZm:})W"gزRdn#?ΰƼd zN8*._|5rG̘Uf?lr o4e-Ů .J٫d_ǘx 3pYq˙/R9I-k1eҨ1+Z{vlsSh3&h"DtiX .wEQC"űv71YfTˣ 4(RDHrfwoK*_J{Lő5QH/}F*{m4  d}vM`mSx!}K(]X!5^/blݚ =3M?vjAI]>em${N*ʫ+4XEWfn'q_- aT&aMsZlIrdkVkL?GG-˿3oQq9yڡGPo:E1gf+MԂ٨`-[<W=9)`ÝXwxFzP(!n߈NW9`C+6a |:sYc-IuPj<0W޹[V?oV,?m" \XX}:Gv _G5V!PE!l_~+YhnԍC [-)pT|hcLG$%Vv-]gjP3P&)/QCv;mIW{uEp{uupzqEN/J j!hM؅(|G cO1EN:Ʀ"ywKJŦŠ#\ifI!LPm- vWGcy?'`tW#"lLr 0 /ЬKۉRl3EצX+kмB1}Eatj ƞvאv{v SVQXK<)02W%.uƬe/c'P\كPj@nSm pzEkAV7D°9ūS "_ rsQA)ap#p@ vX^oN]Η/]| #ľ><;qOF{{eV(O[c J)>dX!1%$At+<t?deg dw% w7]-Y(A!ѤV+;"E1476>)/l/[3.Kpgp-\i`b1W N34 W~ۅ6 c9;p2NfK4ꖦK xJžucV>> 7\vRTqӭMq^ٰbLc%n 7%( ϿV5L~ZۓiI'#fF84"##KQ]aƢj)*9`z=:PYSgNh d/N"+o `;\V21(g"‘8bYO ѐɎ&[(p]N8#;xA+\ONu!5TM,^Q Z6Vsc -lZ%gI89ĕAR"iUym6|;|Ks},5VcJX`T6wpysxN ^` pbQ(8a8ΐfg o4 F:RPj`IҢhop&MƆVQ)_mњfW!`%u=MxĺEJ*<ػ9peNDFJw,{^|c^/x{VG'oeszN+[[uW4?c{QjFq6P'F90:FN'Xxj6(7)ieIj]Ud:aV&=ɂlcdO0ՎD݂Ť0 g NvLH)K'MQ%'S)MZsw=Xy:ˠ&_ /OrCJQV^vԿ)r&{N}cao/ͭvӂ~qq)o|UE$ٙlp&tXAh{P (:ɚvX h-`^=ד"/r&dudxWD۔M|DaP4ؘ/<8a#1Zש>q?uyHPhMsVvڱ3GGBlK\*g7<Cc`FR~YT}jKgu50}BsƟZf*EOET8d,"l-ԝ A碡btFc.L8f} ͊ZMPx;2d%= 5ddEgC4NF<$ď R6T 7Iʷ^-x?L0P7':.!<Ë!U`Pg:nC;Ԙ7T-ap1FUz㘵pc`LM?8MZ,dm04tWlIpN`X{ʅ{kGW,DjDM2UffT){3ObTum YdA)%BBondx;f‰: yFa#E/ cxDKG sr(gW誛3RC=wT⷟16෫Ժd"T3:=so*‰g=I]o<^Q?|` ": Gz׉,K׽4>0nJn#֛];oaW6nA+ p{3a$ύ$-n:hIa)9T8ԿpnB=z뛯Ul\ Â/IyBR):bsuz B* DXmNQ<&QHg~]lTc6!:r.E辣Hr2]JƮ K1~F+q2 \qA*-LSzԕ }օ4#[Ոxge(M\53ɲPT7)٢tYT F٫ ι^ w盟?t1Ga$po^rgZ )Pf`I(y2rz'6 Ōډ%!;hvN͊jO{2F~E}k ៽<:'?դ$k*Q׷ݢճnz:mG/d`pUZf)3FgE׿6Ĭtu`jFHDF9۽ H%u,fdx [S醈-Lԫe>&{ԯ0Z%~r pߖn(feh1MuV:.i1+ "4Ya]L7)B"_c %&-{"4>GJΗiwO21tǓe n#ۧ3:MFGsQ'~oG4bD?:Zݜ&t : ;o$]L {Hd*ugAԒ1A]wE|v5s(YGPGb{_9l`e\¿*e]rdQw,X{=ie@ÂDMUWg^O/^Ⱦ"Y_ yhM,13{--gC n:U]}#iV&9~NZ~w1j"A){f:m =bKG ݅i_(__ cD%UO8KCj?ʩ!(<'YMcO؁KZXo#ʗ'oBW'[KU1O6F36R,n6UZTohAğ==5d;/XşE|= W rX$ z2s/pq0NĐ%ub$Cw_"9fĴg WL6vq"/;[(9ED퇑NG(!޿ :дnbmLɊNR,B-DQcmG k8IolFoI 6)  ַ+N707TKq(SBb*EYo* <*)! (s6fmKҍ:) *:gQgwzN|EYVպ^'(hW+*HpQ8ѸDa>g)jPг< toGfE"(MQ!`k>9/61}7xOE7Ơf_v.A' z/zD8ЕgX"5<gOĬss,^?k؋Z8l5Fv:e5HZlKz27w)2NwioΏs-{bm]oz,[U:+6mܵE7TJ<a3%yyM1PGv;l y˙9؍F? F9NE! R+׶_,"-9V ~`a+M-( .t o tu']ג./_ȯ X-}IYfUIֆS*b'7X\U iN+=}5*Q8Nw IV?G,bRbݫO>HI)O28@f%|2 9Wuؘ=.>-? ,(^Iُ\j&&ʏCsP/u(&'S~ Ι xZsJ*G[pZgħ?ZʀOO#-킉< qo}YȀsِsfU.iﾐ T)Ν*Qj ,c@Xppo2Q\2`0N$dzʫňhu.kI%6! OPit-CO6"5I8LRm5Hw._Ll$uk81AH 'Je(Y{ngWurdˣw%7ssbQ* Notl1Ke"EP3ʶt[Óh:7_7Yu7*T&Q'xbME V*zxU'r}g^,%D WSdݳ~4\ld|`b$c@v U.mtp`! lʱ5Q[ CvhuF'ޚZ]6j?TQXƒPqw &퐥!إC' e66V{9), &j j#9xl{·v)xYS@yԹefvdi~!C6|(r"^ms(S[b(D-: Bu8 /rFӈk1nƻfG .S^#?j^>FB}Q=e[ ձ4vےyǓE4`:F)^+Hm?YJ[>J xY#8ʼn_Vhj" K{㶹 "|H+[Faωo%8om#s W妧͑FCCwTk.vF(gy=@@p|W3) uDQ6 a:+ج]fA%Ȍ#e_ ry5zb*:?JE܅M9rح^"7"M j/17$?jpr^] C%@VklTC^|ܜNKSo+3ʟ!3QEJҘ)qedHL'r?*92nRͺ`ŕ˕SDDpP,9y{.|MOKs ᯛٷ˯`!S 6|u/6+U焹L &<ah Z\BЫ3e G!چȚM r"Ds-"\>AXuL*KzL}=X=GjAN*'lL͑lb(P;J1ƣk1 [e.7)$ɘW [Nx؜;ls9PYB.Azc_Z_JG ,KTyY~E-:@kY3J1 C3;^KI~BGphm67^8<ǖJA&bQ=>`+iEJ۱8ä,X\$6#ݠ/] sNjoޝH+ ">#QG\0ӡw/i4#vDPud- <^˗ i4۪IFYAroрJZ`WB䊇לgfMSr=Л|d`x8y;GiO%Yΰ+_^0թVUt$|Y$@B U=# Zj;a-.2Dl V+Y'&zCE},Lr, fo6y8 wW9Aƈ~1H̪`\Py)yu`v[C}A]LLCU: ]h>.Cy 7M]< NSMZnx`+ml`{aS>J˭ RJȺAv;j˹|[R%Ts50J\-m;ͫlqm͖v ⠶ssnja0qMnZr,}HaO)*@rR4Ѩ'u"XF\3&`zzOÃ'Ej:QQ ^UԛCB+% S x4(wYƗ`YbC*Բ.*(?m+hljׁҊ1~v$ 1v~t3Gt32x}ge ںRɇBC`~6ޝť;;! c-Lj#{-ʆԸɂ׊A VMH?Se^.K=bK-%Roqٴox5>d2_u '箛+%{|9@~ 6S$ $b.p|rAGHuO,VlAx14F;j7$]yCcwPNRAt|  dDŕ(Qv;umu*gwrFJ84כ7{ekbOxEġ5g$6DXyG}I5-=U_9 Ĺs^K˴e[M+a}矟P-s%>+_0׏QoH־ڏ4ܚcT/PECRI}4pa_WL':-4-nu"tpOXT$vtp4ӅypDhԤ f {zSƭp4b}Պ掯Bi":6x=2E`*.i".b>!,@SYcƍ$+fQQ"M.iU"۪3gSٝ?;gP5W]Lo05ƒ(ikA;!f GI* \wL Ϣjhvƕ\ކ4(MwoǠ5qdo3UاFTuF=tEJmĎ}0(0N'r51Mň`-%ܵa,;uTG*쇏l'+_t~G%pqfQҌYYhS(Gq%.jM0h{hYNRyP"B9G>Sk8LʝZ1F_kҁ A|sItTѢJCUpHu;*p鰫Z8J\CE4s_2-95b2:{Ο@z֤q.ST1&EYVs9#Д-Elwx[lkډrҨx,4b/ybS/?=/0 hS{i+멆"6 ͻ ZKxTiӖ|l뵀g5{A(Ƥ&kg0o~xM\DpXMI\ uA5T苒Kpk|./M29  5ɱ7*ɋ|rthlI[q}HXjU b.BB@B:wⰄ< #{1l XcIDLNmuD*vS^ЎɪhF*-F(6wfl e]De|CBN;g%P8oD/m棠?,EIRSO ^@pkX$5Ŭ\Ux_c d맃'tcP$rY eҿm:rdoh~ßeE|v7F_`,%qDg2HGeQ á7IV4Zۃw, AכjfzxaT &AhVL'I CŁdk]Ks9\5l&${.>ۤA z^qS[uYô"쉨YYvzJSijvxzˤ9WE>Xگ)E< n_4E1ny@? _bԹL:^Qm0UvXC >\EoPlrI0=~j{s\\SlPFUeY%H]rΦi8a ='Pk=AׯGzV|{†(UØFt.+=(_10bx4Idq.{-_'{£^9/ƒ6yLѐ:Oj3VU[v2RLqו9 /EHj]ق Jꇻ#ߚv ,`Ëɮ`3ɭ/ގ.S܀@ 5"j:.ypZd ߹ACPW$@z<|E<e/-̟DR% ^a;|1c$ɨ1^SDaUW(p3](YP#@u?}AQ*6K_"@#oeIgVnj & NƲbWiۑc [;m;-mNگWf3OiF0!wI]5ߎ4 `BPmޒÑ˖6ɟ̅m=:xnwhyKSjJj bEZ{d>'qnӲȩW*܅pU`|4 ~tW7Gsv-D$i8x{8 8O0y$oa0uCUOuʰ=L}Xa:C8u{K m%-&Pv?EH7=o'_ (/<6vyJSwQ[vLnxWk(T(Cچor鷾V,n]*3P?"P>~".y^c+h!ur29ĭE0e(ƃC}l6r ]-ӠQ:nS",NQzݛ)K_k .i8;Ҍ,x=# }ZT>9}5➥iJP8i%hZ^TK W%!A1e+‹T &~dyŮxϗF:Qᣇ50]w3GÎپ?3NiqǠ5B6G>d\{Hן/ `xͰ]/ʎ4Z3T̷ie"b|Ll%ͽM;XZ܋ērZ@0_`t?BWɳ 1--RA!FWW\ RcÑ1#vs[qGgJPr~CVF 2wם^L\~Ct[O~^o՛г6眒GQAfIAߍ hQ="cg=&1,5ゞݸYÿнۂM*E6Iѥ\T8mi_];|{«9݋"4w,8\akJHV:$d|]:/VdS4y2s2nx;`;uxZB _קBO,^ZXU nO޼14T7)2W>D<]Źr7T!uUߎƏ"UX]z6|Ph$ k1BTʪ0b M0hrR׎A$?QQlٲsA hj@?7>j5/;r:eikꜸK{t go߲Ɩ9 iʣ nRظ*O`Xl ;!^$pA&+C!& L/f1ʡ&:VnaYZCzA k٦5g3ʈ> mqW48Y[L#4˘ڐP.fs4bfC~XxXiX-~ze_`lCKGכS!sTQ*7 {Nע|1"y(x?>1X>gm֕"|c_R`m#o )i1[cW/ēs|Û 38 .l+uy0x$n{wmkX(ES#GVSסYcD%F)w;ThIJ>*L I9,F7KKWғC_Z=BT8$?\?/]D-VhY#Sgh2u|_+cT1H+O^%0Dh[<GNE?9bj_ jUQWLՆ5. p\f]ϔgrQT 9%_ua>+BC#-G1.&,qeYPh. 7, kCxGN,Mf*/am3ȭ9`j-O9r]JgޣrEa,> ^fv0I/(RzvyeRD9`g˥F 篖 +:</4SKJ8EWWvs̉B= wjͪ{w[ZlgW-f_މw;%\5aPb&;+B֍6IC1'lJR>h]d5k][Ҭۊ9΢YjgHv"4K3VF)Di\y¨vHgU_;Scz ѭ\}XbEDeHSqywEWIB kg`TJ.FNa6A,ZQxlYޡsR#f Xx$bJ$ʊj[qti9[ċu)=Mktb fB= u;Ŕ6Ӽ^(4OYuLD4֧Y]Dju;ZmBUC&~^-&yz.M7-rneC8YYj0v?n27ky`kF }hmW'1qjR~ӶC_c>w?I}%E/ާsY5g-T@̸C#!'>lOH_={6ؾ5۸m?_MQkhp۞ Wm-}zkq7vȪL̾}ra$Ey> =GH+E{H8\Zf&H@+J-*IѤ8%= 31-owt wxzugǴwqd 5u c}AT .iAy` sq%X vu"c.E<]p:OW$R%ORaԞ~nUD{⟾JI@d6HS]ڙrrzd? =~:|h/1.R ԰>TltHο!(O4FH˞71ο]Ђ]RG*Oi9{T;IsC+QU*<w:WϚ|cn8TpiAT3 AMRmAŪAa ig֡ #N,T~@I$Seh́ #1j_`66l5L.#g&?4Xd$PaG\:%[2qʐHI (Xۓ5Q6DĬx;8o7M#h2+X~ 5z+3vCc3+vt Zوuođ CzO ]  Z)#!:d\{ڮafa-=Ri>U}'4_D+h)NgZ4ެ ixЁ)%A%̴ cAC)\ bu7|XY7*A\l/㡭Asu(HRtN[|#4r& ])? dwڸǝ!Ѫ)%cA4 *U0L|zMM>)aa t8X2I}3mK?']Ftٟ58P0'\lL]aIRmJo*U_'Q:pt25f ڼ0<71xjoSx朝.l! 2>@[']Hns`W.zZ3J@=t큫n-9s'~F L OH.:)!{C`B>.J1[oEkI?,ZlFi/([ɃY]_Ƙ}9ǂeU: A@5W?l0"=ѓSnG>mkza)8npTT;]o\4{;k*gL*:ϯ:}:^%:cu A@- ߖӊI`?6fz-ύWgF)UPF ~R B^AK'Q-r-{+ iЦ"mC$- 0U@m@-/5 9:R"Ev9ݔ\_a ȏQB2x/\o6X+"e3@I-L ^[)x%VX"ڙ =UWCA22'[ cD!n7I-<~#ZQ# 1`>]ؔw CWת7Dj˜2qL H|N a/5B,'~./tq7Q)Rrde{aٽj;,W @-*q+$t6,jRotwLIFr0;A;}kFcZIfNFr4{<4dž,5TB J[0a_t=@f<%zj/KDe|_{sǏ2%`q#K S_1 ~a3|aKhFgy9-/DuQ^;$! `ν,S,g f5 T˸0 yq._58Jc67 <8U}Rx^x&c#wj+MhXWS~s0W6W&(8f sJaYPW<2̍s^PSH{ޝtVE 8dS E԰2)+bVT$J$ ^t\Ȱ PD$5mC(pɨ6M3 !`:Q%iwQ[\ 'XY6%J6a4o7Lx)i~\S?kp·> $Iхp2:|:n`F`DŽ~ޞ?5GW|fy:0}/P x=SZ:N:TWk)xf!Я[FODFlPŧ32;HG[j:즊PTCJ(yR)R? ٷ;FCTGqn^( U޸ږ9̣%XCBpyU^,:M\s!&) li|9s^dm4I ñjׯX;fJ)B&ߎl^aВs괯@G8;O"słE"+޹ }"A˭8Ǧ}ZMP7넾#4FabxΖN=Aټ\a_^rˏm<+얩dxsCd&~PmD>0vxb|&誯<_ &"ϥ lE_F !] ^e.9c](Rte/{wf-KlR4~Ry?Zvǁ\W\1TJJ">d"wE:J?SJwBrrɹS~y Ȃb% F54ֻ-V2к6@Wn3=Tƿzb9ˈbR,kJ:5D(?6eCWZZ ꤟ( 9(@1,%yqXGiFdn0%;RjoB"3I/V[݊,%P;P*h)j*=wd l=8օz k(K~_Ca ](w&H[EQϷP ^!#%A ;HRtyývݙvYK mDgIؖ*>=٥eO1l%yq@42)#B9ID2^i"ZҞA=#ݏrPz,y+KߞPl|%vFUÉH^ie!OnR^.E}bUw}M[0N -WEs˫F ۶32=JĦ#YΈİĠ:[MYXdz$K@_,b )!-D9L2,&#QACAuPpP и吏KvN P2h!r{9TykySWL^$AE2iKMLNů dr@{ǔc<`I;7 F8\kD>^_W+?B5Y-^%,Jyi`b+jک( |Coy>C`.[RU#'^'ʃa(e_ȟ;,Y4FTz_oXzCJ͗z@DB$sE0=\"; 7sL轣;j"}kwROGS!2rEU7'P.k)"q?g 4YGDbۛ'[~<6YA)r535{.6q ܝ긞CJf^1! ?!;ksIYе<)zf\+疠>MUθ,gcV, NOEy4 1S'BXhEHNwo* =)_~(pSOk'ߜ?ϫ|Io/x%`K,p!6sb8Hء(wXqػ i ˦/b\ 0;mfM܆ BngyƧ0 ]n6ZqcXN8A M*z`$QdS5~6^#Ědm'at #5ՙ>?5Nk ?HrQwb&~TnTjԃ(SdF&BE^u#"r=FSIkQ۩u(=q;W4Kۛ?ж, _s[w.?uk|:%DŽF&-f= J/SHP|oL?ΔuΏB~(fʡiFDAaecrȭɜa)$awKZa$4aKzl]ڔ n("pvn1upf W:T1n_EP E|7bC>pnok=Qy=05}A1&j1lڎOڏwT*Ё0<{)c"4cEgߺ zl,CZ$ e szU7PvΜ}"U wTw2swn]1blӣ*)UqWlI(xff\?qZQ:Nw 5j~샥sz0LYR2#W;O-m}'y<|C)Ju!k, qFEq :?ΗWbyL DE,5Ɏ"Tb;PIVdX2]T/I\kNy~?=^a&,z-!'躩Rt LKY=Xpx L661J6Bm8"Jt.q='i&OqxhOׯuMtXJ1w_UD q֛h$|"iTa}R/RdOljy %63$PzboA[&nQC5>'? 1)nJw^ykDnOud} VL{wxʌK!$3.$¥xUg Pc@g{;rqwe=+p谗h{ v :u Gb[{i*viZ`=~ޚwf'.h1T?Sl)YGGsh܎٣aI{CNcDX#՞(S;=^9(`,p/$\fb<-k'1 6^L8ܺeV3ţn/Ĵq >e9ӌJKTqO*/R7oӸ:K(K{TM86<=+,4>C< EA=!Stxy~rm~59YVEKXu(DH0ƅ#U0.\uJ.gEI> {;$h EݚZT"w ѺVLփ^??&"))ڢL5Ѭ/ e!6i9lY+"Y>)6L_j׌.BׄnZ9Z\Ҙ>hc%#Xu<< o,)WX1U9K(=eNZǽo!'OsX>jҀ>TT%bzt7AQHMhLgy>ZX]gDvN@%W9ZydÌF7T}pݪ`P of62zwC h\CO ~uip ?muБ󢒺?bD`&Yۣ D[C?*t BɈu&6ue jU{t|?sl"i}XNйSBZq6pS y`j]Ґdm*)nDRNL0DkY9ET,IBGT81K;ϣC$Ln{LOBu̘m]aFlXtNRު#)| ;[]xRڍ{ ]}cPnwh'Ɣ.32e#>*<-Yhm} ֥\k)U'1Uʅd[)K%)Bg`5vNƒk2;SR&MM5x\G- "QTa\2#G|(ywQo7}aC>5 /uJd9"57KMhZXlԂ$=Y+}Ɲtܲi)La|<׳R&vc!+]44ZXY&q>PlyM4:I!9Bϋy@R2iўKv2 P E ޕtN6Ɋ!hH, Kɛ3::T5?ẠS:@bC ge$4qYP/ b ?D̖-դxy c;rk",qJGmAvDK1R~\)S~, >OYmo̞ *4=TMo+فj;䂱O_뵝Me⃞h.>pauĥXΎ#{[9G?cs{'XZ~UMC'3?-D(i&!rQlYb>3>鮋O Su_Ϡi!VpKtcӹFiܤ"Ȃ WR%fo` S_M'SxB" tezYC[Qcd{9~ӷ ITp2C:Ͱm NaZ:OwhTFxoFK65twN0ZWwhyۆESR'D(wsdê$C3xa0iiT.%iQ̳ QY({ f^`"@;Yś`{/m m-MC=u2F4jL}3%aK޴bQQg%{{@MG SgskqvMLx?Ӎ1`J!{6R+@=KApBg( Q{C'T /a4׵ZuKP[CK/V2u_{_v\ T܍Ž$uBLmL<$9jMlϭ'A-N[4PץiLώ1wpuwRBB+D2wfT˧;Zx~*N~L5H4eJ~!D{UD+覔{ ]!P<Ł?J'9{|o;pk`?X2鈬A.?ˉ* p85{Ήݚ)ndY ѕ|~~ψ,1-CMcyDӋPy [Bncr6փD[tZ}_~ R:@ڱJ{z1*ʜ7ȥr2Rz~Z%K_"6U"EljBۈB.Q,߃.'mZxp 0l܏ ė7@?D  u*E-:ɷ6AD'(jh/E5S/B'MB]fo\Lkg R8P@RaG5*_hhD)8^1ۭ}޷-fѴ~קJG(>l{&Y6^}/,{*,&Zc +fٖaPVuOXaƧyɡ4p!aYƷ#+gZĈyuZx]`V5hx fL|3Fڦ#ӛ,ǐ!0QW\[,찷[&_f/U/Ɂٖ}l={*;itAˑ-LՇldtR+j,G6Ǫ/vhr\A }p hi!:k6G΍4yRk ieIbN>Lsn\_JC\r W ϟA6(#. ~6PqWgNrÉ0Vs )=٫Ndzʄ8G5DmMkZ 'uapJ䣲 h"<2k Scdl0F k!Rf_LLXkw{t]jûl="r`VA*A㨕- bkW(),|-溠% oZܸaεVe݆3N/nx 6BA|֏h3n懊R2tXdQA~%PHv9Qɛ¹D_TҢI(s7[aGc!DQk޽EV׊:y3̺lzk:(㈁`C;UW bB|]Qh\Qu]yBӨ5~ #,39%JFޯ20EZʎ'kcI1sۂ^w\O+gy5$G<6Q#JyU&̮$>eUɀVP{#O" Z#@.t<ciP-傰lQ]-":4q|A"v4eR(Ƌ5CVJ^1  '`q1@0aG%:"yr yffaUAϋdHːPM"ēWU?RDί{WVO.w;<-]XqVaq2s,Ŀ {z^!-]O)]ߥSMiD"^D9[6ZJN3B\y?ws;aY+z)X ;{R2kNnCyz%$l} } a6~Pv ق'7Ԇ$?HT}"  ai.WR,_M|79 Fz* Z\*T\hZʵI Sږ+=mx@|i'Bs<.=mͧ8~;d=-H FBv`wr= ӨodX]€F0puIϖdJr3Jh+q/LS}7@pGuTanlJb<\֏o$larN}F6eKː//c:UvB>%@"QP+bVIbkٍ dtnZ;:^DfJ]fqF8x=ʵg Aa~6@ijq{RC֗mmͩ?ښ]2@ٛm =OR$H_0vƷI=!`^L@0SɃ@ID|KC%Fz wҹ$D_BP5Lrf ΀Fؕ9aҲ8E<{pҜL;j" ^ᄺ.6 mڭ+ IK7`_0XreT:@(]nkEOQ "}ï惿Wk HzrJk'_gl{P|OOu&؁CUdžxsm>rO$p~JpNޫ8L7ܟ$ ns;CAEN*,h벚׬_?~[rpiKȭFVT=f{D(PϼGnOҏ Jr"E8]xf D"C?I6u8&o c!j/\*:px;(vʛ(wsO6Y1[³ayQ@2Rj=gXC><:x_Urӫ@޿;DŽqZdKDMpmDo(r zQe؜pƠ*Ǣ1ƙU/QPg$HD A*khݶG-!-6f2 ؠ,-R/A* -5BY? 2ilfQ==P,@6=7獬#Fܝwmh,5QG : ifSj\Y1_6q]c,sH̚$8  n,` Xp)lV!WOl^,$P%83dQi¨ /yZ9A*W]QR(Oo=dm bSSNHczˈM2Mi=U,uwC } #,J\J%_hQ2ңx*d/UCFZ䧦Rf]*Ke Kw{)w? d0!֐[lDa#2tēn,P0oIa߭ i)߬dͰٓzA%s!aϷ%U|Y{8j^MέTP W30&/զ9<̰ * >r]vn+c} ?יD%Td%9'tXvv b5PXB,m`fp vRS~eiԉu+rZ5:쐆j&s͢?Sn:fHn{35 _LfFci(Fh ϷrH gIp 7D̒)yhmopa2XLj1`̷+kȷV'2KL}m KR_MxH'`7 1~[8tm-6eq1҉*'_'¡ʝ>BPߛ.pz\cVcd-4Ɖn-+ &| Y`kq'[fby!~O¡ ](Ay52z]| GenyvES+g oD :4Sٰ|I0 h a+cmt_ž2ӬH졋OLty4垧%αyfŸ{{&N"ԧL86 B.;Y8|%(O'Slar$# ;H`Sv=T=[dT]?%=罴m?_HmkFE[jT /;轢&/ 2_MGͲ%Ypq=/%sC*:+:g;BiS ]c0@Ӥxqև}OB8BGɗT4||߫+f302`v!JOCMQ`k^P{7KCl8R l{t jM qX rus9łB~d-6$@(chFD<)jL{J=֮%[ ' Εf/0uk0uǎ_~a:6va”##:R7.2VM)ZDf\=B2*c3L]hBo%A0 x4pdh:b ld\BUNۨc+pyz!C] w#a][Y+.v1ǫtI/x9ln JnOZ@yS O@kKuV[.|IBZ! OSŢY^c_TIqM8*RZ(|ְ͔;)!GhIgrɘ> x]+/Ü["~~k\R[-$xT>d(6LS)$I.iMRYX,<61غfG 3,Ν^e g_o%5M;rWgHwaXj_?d{a8gi>Rv5dw+r/cHoÂĄqq̝D4Z:A%OW` b$ qSo{<}S1} Ae*^8"ڠtg b߱WG3i7_y˥^ |0"I-]?\N})jɲ ԅ? }ywoK@4 QeVfdŵ{ h@_i҇|$z<+/#;uO|i.;`eZqa_@zNLu66gl~WIw ^.ڶ=`!`ȿMS4DUS+& fdx3Mi<I/.] =U+}M9%|tZBhku$[4uZ&,=2A.Sc^(kx_) >{~_Q#e!w< |mSR]cy7G@{,R3*Žy{)J %G!~)P!:6y 'sU,D)}xFoޝ[94YkBM_D鬸8!ftI4%bzR`j%s :% pQmdF7LҊRI]6"@ @4Ḭd 07H |Ƃts`Xk'$q/rEDS$=` < l WB}r6sS+>JcLAW\h $qm 9:tFIQUyl0B!͞ZxcQp)6pvYz*5:|q~>wxX^=5A=!!*§^WYM[ɾG~$q U.=E_=F/7[E09X^I܄ N2h @*i.I0Ji} '.|؃ :{"-<,a~it|/<񷳄wiZ.[ ? YIhэ,u ]vTCq֫q9uFk`A=֪ܻȾF>7=+q j5 Awu\^Q57:Vhy)uօعO|"؃=*.U9{ :t줍1 #QHO<0w8Ȓ2;TFb]gK |[Z$'k> # 8#SdI--DN(ns.Fa p i'Cͼ< "GɀDb?ܽ*q@swFNpd-҂'I Jןj|]_,)M`]im|/7?' Vy.0*gWpBi8GAm]l{Hq78'QwF箅4%laApP>_D|yLWһ އޣƚ̌Wݒdd,!YrVV֤ p'T.~ R%^'B&ڏhFN X~*E/BT BZ~eِ_ROR_ š7:ZíWX@Db$! JgftnwY:LKg幠Pi5=0@9xl*5jy?/پq0<5Ҽu!﴿V :ۃ^.ij[5zRz٭f[h+f؟zL4#ddYb0\ e]nNw.* uܨY:oGG=0"[+@;Y ς=:Su;i[ 饀 7{$ސu]]iqӍhA{rQDp㎁M3/`Ld^Wkr蜢hE"rG/A8㉕K3Vڕʂpx1m'%xd uK uh\Uq/͂Wy;$rVRA@ޓKN'(YPSFgܵ!ۉB|/zdNPhb]ӌ(1<{$VٛY㍛Q&aA Z. ge'A"эó>er1Uy=V Gs ~LQr$Jш78y3F٭$ubE84&bjՄyIȡ}z-S7hMxU#7D#kݷnu;# "DC&GVoM aRP5}98aps:4}Egh ̝e# ehx%Iӆ/a=Bomf>$ أg7(g`YT Ћ9J#A6Nsj-Lї0ڑ"LnoWʖV,AH! lWӃcuȚ YOUW̍l$Lk͚( ~EbdZpz ϪO汑عPŽ/:MhJ`=_n(?Xw_bb Eɒl6JR Px(ʵΫi -$ Hn5:mfPGTuש"If7(#jFm aRa؊j¥PBʼ o~z/ Cnt'+oòU:.ǂo0w4^'هqo놶Hc,)jA( a\aYi;U4P{3m;Ft;~gP=/Y&p#N'cԵ\ELTc &T}V~[L7m+ٱ4.9>4X|?ǯK0ZH#UkeT{i(}ͤGUՎo:k0q)#)Ȇj,Z6鵆2jNX/])u0س bL\`Kwt~x1EM*;Yp`6Lj8{һEND$*,S&C\%7k88"k.0 ^O+*|CI )Ԝpxh\|]"ctkZ+Ng"MeMΛ_Z <{b:)#_ۦc^}͈m[n?h"bK ?vr.Яy/0f @m9uT{v;d3Hd@ JTȣٙZ!9sIN(7(Cۭ?-Qg4DWɹ?|mп[dp mt"$_T+[\7wWrH|cClr .J`) 䀤:}J܎ߚr U5!¢@jfUy9P,Y@ޚt[{wy&˵e? ^8?s ϥC5ʫ1Ê+3`k,pP\]x?N.=Aǀ뗉cLWg%Y _`)dm9 &\ 9%w-Hb#*Ҟ\Z VN>⇯t\ 2 )YIɲGVv"Q z V#ڦHO48~QpI|$^z4YhN>II$X5ȝ~7F_I&U>pFKL7->B V'|ƾ/AZELljX ܄.XkU vaZ~<&Hs`95Ax4tN`x[`ݘ3d}4p C*Ĥj$!@EegG9j4f>@%v-QO $H/kTˇ~w[5cistr)9ho]#|_(c 0"ί~*qܧW_,7XvR|n!f׍bM e婀SB" }C 2 هyW$fr.)]sH! 8,D,8,b,ƒ;]rzCvkSܺ![ wٞL|\ p]g^;g֟/ թcꒂWJg<&|@BM8;rEV3@d]/(_=)YO(!d%:ɌX}Kw XWKvDŽo@3lv +@G)n6ಊfgt`Ǟɛmg=嬛I_|O[H))4Y1Ol>^t/s]x)XY'/6IQUQq X}V\lY{s wwC8?%4P9F ~TdaIPBXh854 YlD2x fXNhj ̸Z!x_Y_ξ2\_9ź5ViXA]pCzv9 gZ/DW }iUgDX=wq^-X囨M{nF5 ƙ~)єvU)x⬐FRJ4",7y um!)=[&آG_le*"E_K3R?{i,:1ᛒ_@|l~=GG*޹q_*FP"Ե{1L\y { gty|(bgf $: L3/TG!-||;!E?!›Txy=1l}W?ł5G|<=mulMm4v Y[Z.&$3'm_N*mlb"|Cb⍆vGiRtGKnoZ@aE X"=ٝ+=e{5s_:k{e^yD}RハMVJ|9PHdESS~Gy! \+5cQpJ r|ǯ~vvt&?Ol-?|#j䝐1%-vAiNvU_Xy/Ð%c 8LyןPZڛkkIPN .T*# +N͑ GE 1h{uva@C/"hvv.ZNi*FD' fOfퟷ VwOP0,6?iIMs6rL1MzmȠnWRaݸk D2C H6`oyRkB6KT}cg~LvzfWuQ\C|v^4k-dagOs_.NXu݊4+0}m`$8lV&;X$ @zH+7;3;%]‰`yzvFEz:_9h0 Kb}`NT>=#8$[GsBVbz9t =Հ'0dc1+mߒ<+e #,/hfz&MyaЉxzxdDYh@x(_cmq&iAhsS2mQd7gȼRyTcvk .ϐH T2n* ̹7v]N廣 ʼ7k8nX|#|j~+_ Y(Sj[m hS0I|bg!x4P;/9W j2>B ừQE^C,":5ӫU6~cBڨ}J߶J?I1 w]z(@]6MSY P"!ѭuƣ]$ V!=m+Lf3] 8Bo X`ɢ~@Pj 6S&Ex. j2 x/>Bn`Ol=_ zQ7Y\մ/M71u\Avwa~2UJ <ScjO z0?#턱O>$>0ymzZke՟|?k iϢBǼ~O$^K_r'%kj}\5o7U1إRڊtK[m A,XnKo§a"n$[>ls[: 'U2}Ic/2ܤGwqG/+'dSLq]*q9j|{sﶹ. 4CLɔ]/g?;64*&G^N, `}=ȗv2&6)0N%`"πi""uǚyjbB둹i98`ыNę,%/M,Jj5'JOzEyp:nNhR\P=XnP~ɇe Kx]3X쥶]@#YEOPF˹L.0n!}1A$ʳF ."NhL+F߽&Gցb:7[4NL=J1:R:O#eʑ?clXSتYyb԰Y4x1wixv@mfa>bKمQrGd{ѥDjX7k`K(ht{IkzWF#"B^Zi\JJ2QG؈EX\4 ʿ¢CkÄg}5R;/] *~  Yeo\t'"N^r&MQ$(XPGnyly?-s+&㰜w "KVGYL.0&`nfp ƭ*AM࿓r v]n` e IEwLbJQ[aɈ0+gˡ`| RT f{F.KdT(B_O\$[-Í(㈁˵ yU hqJ2&QQ;oCZAU0}ӗ7 {כ϶|ijD݅XwomB!g$2 !0!-'Y} rzv|/%٬N. h0^AH}|M~F'e֒g^k4$Ut [o܀ d7Cz4_֖ É8]ߕ~^}vvwaw3-z_3r/y4GJb^͐u/3Co(^%ww3#~X wŁsU{%;̹(.Qƨb:NVidV$(%1gX*,5[{[[-)ȶVBfrd?Mi˶;qVd1EYCK^Nťr #8J.%bľ=hz= Q}` ϵJKMU♏Ҩv'N~=Qz5V_g.仹._؏FtnVa^sË-;=/ˁ.gEr;T'cNǎicl7@P}@$n׸7RwD9leոW.QpcP׀eح;xn^+ֵf%rs)>rLFE4g{z]3e|Kaц&IjTMV™ .5D#kPv]ؕEZGgKF5 .agڭ݋3"l!rpM6[9 3 kbCհaaz oLFb>P|[/9-R>D]}YEJO7sMcJ@9n0nq0f68$L>02ٙ%:d2:T5Rw'bnz$mQJsH[(%]y>HmwTfte@ _S%B_y~|l#h$_LU<yMagK] ?HbJ d)ڊލ .h&bL\;b|u{M(As R-s$N_vg݄amTT6 AF@;#\OȆ6ey.:/,*-&46VgqO#&n3TJU8G)Wwmlx7C0_6WC*gP-HˉSYf 0tTgwD:421 5&G^o_Hx/U |em77(U|3GA!B..NURYx4p6`4loD9U,|*}+#7b$HK"7dRAȝTy}K︠vh XbF(ZL܁QEq8F9ɈSԚ?_f}/4Ģ,qQޖqߕe$W=}Jd *2}k>[B[ _P۰N%0roжWm3[y5lX)2.V&'W;bF"{$yFHp֡:B+7"OJ,W̦( Ƅ-SB6J0jYߩDUDzrp/ka sC~ȨGD&PۿK,|k0Ub_#S^bHU鏊{ko>nJP]*(-*8uńYcTn>_cU 8;s9m{Db%t@-_Qw>l{ ij#SA {?µZHaK뼻uHD`gm#h/A8"xp rv1ErE0,W9ɭ-KB*MՁ_,.i/"=nb%.s, 7 Aߜv \m7^t8jr zo+Qd)OT}[ Wŵ-DQX&\IT B2cҏtW)$`(OD8jM*^<]$ hd:#(^ aH/I%5e^ #gx 5!savL"^q{Ɔ;iY <ze"$gsl{Q` a4_ *`d&/F).?TfЗ_qx?}8[ewO\Rw3MU1C˷F4+;LM-Wim$ x@uf>#ْPWJ tȘ\?M gAf2xtq3us\3|}~Z S~]6_b?4N3"4ZnW |cWPՅ -,fp2Ri|8`Ig94$M5y *'Aũ*OOih/"6De@6k0b@$?S=Ͻ%wrYTzpg<&-ABFB9%e fSl!^`0y#mpeZjhOŦL3Wu:ցGwJ;x'dJƆ,;F*Wt:~4ڔ@X `b| YVEˈAl8@JcA ؘᜆq>eӛ[HCg-;R>gKDw3l`˯bƿba)ˣϽ1$>rl=xܐ+FFs mnJ! ABŦFRYSJ!@]`4`(ؠE۬3m)Q\|T+Ñ?D붆d?'W"00]!DOG(V^涅@eCm#be@4)Zm<Uݖ0.9y' ѷw>Χޯ>y5>O9㙃}kٟꈓsS' vue5NQ_O~Fa_)`P>p7ĻG^ Fxxݭg8 ԥ,@[oBn}#)j7 e<>`)yWHO)Is` wrULp@[b6[vdÊƲ>y%%s#aS7B% h F&⑝k]N@p6JU31M&omω;^Z x*V-h$89M&jm2 y8^}~l%`'cyցK_3@Z=Zݏ,rg?ӑ4dճO;u:B܉[i%XYs˺65ʞ=BuZtNIW2_ac9h$$ݕ|ijPsfm9S-zr}H'KcJ& qм(Y&uW_;"M5^gq!?Jؒo],Xĉ㷱ewKv]iWC†P^_\Ηy:کH`>,{IlfFfNhNÜ|5b+lѣF7縍κda\,Ui},RVJW zH3G`T62jlDYE/,|eoAn^PtGaijL3ep.7Ϻy6O1 K :8w?߹'VdOV#PQ+ pΠI";waض:!36Vo^(\Cv46]-cHʑbom"!đb,yڏ ?ٱ8$4Ʋ|KY%ՈYEJi~iMi:7 /sv&׽1 F TJ͂g-$V{[ |>F0~NY[āQx{gBM9r{Yδ \mʕ.j\ k߻tEI}7SL 83o4tWcx3lyt1H* rQYn[3ɻ..ʮڠƓs`So\B T+Rpi6j7>٬i&vI1<}+fQ7 W՛3,"/6?@#k_bNJ@ }tb!f#Tn9Y0#5BşO΍O (YCs,;.\xБ 8eD#U;l=Bspf)\B~sm!r 0wqA?H3{v4KhQ^:ok|௚584>JOཛྷRtdo;%&`ӮVx,ň9W>" ͓nfD|-4KDZQ$;1UM0L;C`$p?«q*˥ORQ5V?م5l&f:[W5uB]r8CU_[w!"R}q&SOcyN[ǃ\wހc`BɫY/mK0_7QƚW?5b!D0# Kz5 /ųfFI,2K(`hyQm&%>48*e$Ty,8o-"|E4KʵWDr,M۞  <+|`Du-ӯ&4̔}Q62TEZBGY|;91mB;mҗO?Js/ T5 [!yby[=5әEݠP*Q) '=C5zʟ dŠ]7tʵA,'37!ZctI 7P+yt<@e~$jf BԋOEYݳ]mKUG惕|KC`Rc#iSm"6-&|UXp7!7X|2nD8AJT0aQ-ryzNV(bpT+ģ'?Ӿހ|-WvuomlmuLȠ\tP 3ڏIΧsqE)1XLAM` O;~x<=Ks]^BiӆzXɦza6}vw/m6Fd|b. z *H>hqyT~kO)) /|IHq:GggvRJ:*ON^X!z`sC0biS&EfkkU5g0^uI3B QtpBu^Sj!hˢ:AoGr JC>1sŐ'=ջt#huuQlY00N+'rIO=ߚ6~pMĤ!<ó>Sx\58À;7Z}8;D0&sV m]yL'^j!<,"6;9k*t_d^M puIw|FLא{BgM ?;9S(0i>(X~DJ57Õf3-2m/<} vK0&벊\{){wm+ ϴgTUzaXH5&2 X/ xJ',I'-4䈫~ &=u?3$$i}ț+8ONV ? N~’րgɋ61jȮ8lˢ)夹yw~TgdZEƏy([o?,O_PONGm (9]D!g{)A|!c!׃sT9cB(d8Q=#(Y9$ bI q%gWhS{C]svm.RgᎢ\޹N{Х3{;W&__쮧ڈy/)C0J97@ʫ$ (=UҘfp|7I%SVqeގv#B"$̤̐T{`ڱp/dAp B?W m+B3_`)&  A{̤Oj!;ԯ7. {lku9A|b~% ee{L %PndWN'>"6ސw*8%T7cax,όB)¬Aگ8@?v֞\8^PZV{ٕn<}>nKby<*TBδAIv1fy+z8dpH4U$ (gcbIZd-IX"D[ e9Aз> uWMt}m(`=FBUޑ܁bFf:")/drbgyFMknjCϪ6yu]l19c@X8\e~60][CLA#͊?LυTG\laby6{ `rj3='puW_8JYy `p1\Kl !gv$(G^$:@_zrj5#;y@"*聣sAdNX 4za!0hd,@_oN$t@V]{$+E]II+#ͧrݸJI[x5rYi23.d'r)  %rYO'W+ck]2\ojT2")$čl צG+˥?j. 1M%n>sP{ueG&"CXQ;?A(uٓ[kF[NROxIfE& ` 7~ቢ[  0/LMuk"X kIZo 5O$sT҉,7!5ÔG6ڞ=C7AU< H7'Mg UB>G ez OxzΫ4 _>/Va+ RPzg]>(ç<W[9sttUoWT݃Xoبi%}C)xC%  yL٠I< J f9NɲEW۰ŪpҜg?! *j؂g]IpjpSri2.%`x9Χ;=;B ȩ#~aò4͌ vk\׏Xfv4s^nzV /c8-+X$c@1Xo|6B\:$5YY,v\b AdAi-XܝkpW43c9fIs^={nas`Sx:;6TxQY;{zB!^T {^OPyV`TQZFx|ĴC.u*zc^Bq2Px{ƙVH23.?bj+s . (L\5m;qt &o Ts {WoN82e馴M0Ud@OpҫʐZ8mQ+}ʖH]BM)l>+_Y 6< )~O2 6)f>3.|1pLâJҔVf, ??ȹ75Ƨg^\(u~Ij,5MD3LU O=x}KbHP-ީӯCD*d/ _'b$%oM۰Α=vj%a*$2 i1C-<]6(Ks/lII.*gE?d/\c}ut"_-#k=ٝ"9t6͚41x q;ծ z֫c+l˰iOl oaPi@ ;>Ȅ&U6&bP(߁ x5?p >oh~s fOiH?ЖFn'X2Zz)Igj"KCfk86onY 奉QN2OE,@n+Ǘi,"x ŝU\"&/w|*]!%vU` [ߟCɎuM!z=ּXwAܤw}qAjv#xpƛVGgyt'~՟a0W4D ߙ /5F)S!m̰>8hZ&3Ì);%qJ'ZѦ#!F7Cn͢if<{؂0[^0 :="&CqMD~"W8k_yz]UiDžsFdջKW&@|X&:vGSSX|:kRnHU*jx,>^סkcf4HCNeeqezG T_!SUЀ 8MV, yꇇi5=Y"./ #tG5(vHW G?\N$Y T`bD|umc4Jmhw20َxzAv3jR=&MMթLK#!"gn ܒjodј\W #1* f@T{pRg!fwd2!+֝8sASoE <,|efŐ,Rm(4Ȣ[6aGn!:W<}ܴ2x|0l7mJ*Gٳ 5 fO'-?3(q.DJ*$;[ %*3)RoKɪ%ڶKݱli?; -nR%@>' /k82淏!LMke}E=`wLf@{9'kP+Ŷe=:rMGz oח l(m^J+%ųk@Eȃ9͐&g +W"zu\wJx;8B"!c#u>hQ6`]HؖC UɚzO]:  t~,~ZGie7.3SbmO:؁ 7:>EWKe \R5% g?T!l7E^u7)C&Qf("T8Op a`pÍG;9<ފZdw"w^NtX*3XV׎oePc(b+wDnt5Rce#wMᢉ(x^}=eRm[FGs;!nmzӏH7~W/tQI'q:F=۪um.u-UXcMMp:+)DYNN`"4~x#5 0!1 !5PWp *mOʰ'+^lm-MLSK6&_DJ;cQqBWc BF"#pKX @, y>_>&ju[LDKT60(/rgN ϟkؕNS4+^^M:W&o*Vk^R`}}]AH1]煻W?ޮL0VG9)J!k@qG8AH%g7f1e :s屌,#%CC3$ u"Q!W?]TʐR> d ȒJ0Hfc:c ǿMz_yX& "Y:9Ciԛ[xIr⊦U:} .%籮 eu^G Pu#/s B^doǩ-mJ[M:A~l$ϲ0}{x}]Jc;GP] ʒ]ok[AIJXV:gxYh4x'F}oOe2}>l_՜z/+ڑęեQ^⓱8|:$sENzmf9.^~Շ7'On2IH>(@%{ѶrO7ic0=\s%=g[7yZ̭XM{Ju?22Y !Wb;!.>lj=otY"/bn0BskoB%)]ۍ_ eQ"oE.w$5G$54n/g*O1' t :@,@7'cR5 uWֽv1Tw3j֔Λ6n)<|RkCڇ>9tXKj$k E7{/ F` )ie3JvBqHHچ . E)hng[g|-:x~zD3`rII5s‡or]tƒw,ݼLbOwa6 H$nZ JnU:kHz,Ōh-ټ/SiEew80eL0ox-8N-lFb]7p͇)zgB';?tsQ$(+\q4=#v`d; `T)Jz|CB,sxc}n nx=.go~<ҭ6RkfHْv}eŮf5YuF.f59qt:2҅|{ΑNO]:lhқSWp<ҽhYxTP~AOJpϿ}XɅS,䂯) pbfg,i|)/qakb涯{lUFQ\#G,?j_Np ?naxҀ$oEeָˉ3)&5 $.',Nk<zȔ,z_-zdj1+&+?|#2JjSUHLyfPkпMcJҳU ߭|(]M<&.$&Eq(<Cv=W'8uefs8oȵ7OGoGBKc=_3e3H-[fWC !"$Gڭ O8.D,[07̞n,³#AR] uP|` Z~K7c0tr/cpx>)mٙ5lt,9JZޱ.nI:\} ׉!GMpJ9"ҰsPG|KCQ,!BisO,h׹1~b!krg _ 6B$wmklMy,-N(jVQyBUH\B z\w5@ im;Qz} XwhHDi K/"d܈ D Bo7dq"f{-PbNשdDQkl Awj7T AdY)K&1Z#5o0Q^łJr_{5=Kyڬ1Z9 7UB"s=RݖFswu'B+۟) lM[iПN6'V8PR.D|pMS!!'6!+ YyiJ`ET餩SVQA^&7Z#$Lo1\XƄco^0xe@ճ,95?]j&C|W?iYV_6X=8y].^ahq-sC1FYy o{)RFzȋ^1ejqxNu|!(J+am֨z}~DᎳ 1"B+72%Vd$<5? BP1HιR (~c- H$\%=$|,0MR + fR<6rΒr*,o_~Y~}L&-]b3Q}`00R# M(. 0; M@U)Z~w`[A]~\1 dbh.ys+&Sm${oL{VsNwQ@/ <C]wå@?KJG x^=חx Nq ߌ^51k;5&s.+z-7v{Ĉ[A$E\PG,Lb`&sjkf$D 0͉@j>[>ZF>Vz;/i | 2c ľW6T=LTRDI]=:18Q4O 9o=eڦ"m*Rk|ZT&i м`O_$$rUx?˅Rc:3"@q-RtqbL׉)GMPug D6"W+O,{}u#([EK9W+Ϯƾ#u-tm9Q-9efdƭygq؁+k_s3­c7'clrD۲J[nqgjb|G mUI5i==]o`05_tX>T<=Ti|~m*KfR"%bgS0gH&z+/SwCv V<'}H?QmB¼% G)=-:ƒ4(_0HX؆ 7'4gy-\j#ʹKHy=}'D;ߌEs@ev@_d`kbt- G Cr)ؐkG-HN7bҏ)eR"k\4w\Q,0w5Aa،\ǑTmTfҞF?Ɓng|4p@ 'M|1tqhe,Z˿8,%l o,i Hg(Vj+p"@}&>pXn'ҋ;M$!;3q/ tч;o,8ɜ Ec0PpQxM)T3Dk 4K@pXjWPmSdxRu|&G"%ŐVj$*M(ƛR:56SQnHj7"*rNsR?p,Z{$F"xOEYa.뵅1+ Μ.8%Aʞ> k k*)&`o{4a{ÁFx#k!|ܮhY" jhnsfx*<6e4% C>N8 ?3@O1MUDL< *JJXBC}ClNYu r Z]nb0AtSgd(:~d3 Dg9>V`n0yWfR!y)5QaF'!1ia+W%'XPSLq9C1TIm}cb(ռs?y9pnm7z;}&iQ8dS> a0<@.8<]*lÄSTEb>鞄qD GRaQb/~yYH2ocd(D?γj2=Vge a(iݨLz\Qr#6=u|<PZU ݽ.Lԉ`سnNgms^C/%ǵc8\7q%D-"ٹ15*36l.IqyRW9']g:&=7u +P(~EUO<$P:aLKJYgqd}adl;2(|ҿ#_fo z&lh8ow#*(3Q4P+ 7kEY\MD@niUzA=z(.ZR%TI?!{8OFP*PàvMU_=]3'xxFo|Yj&g6[iR8PI54x,@/Bs{ܪ$@݊+ݖy{ F%@ zzZi3 .?.֖55 ޤX6`eRtʵ0#6d~.Pĸ\{MnqDeUW*Q3N*Au{3Gʣt$^%R{ Td{P3HՔt 'HIA._X0zzE`u\j^_Z1$_t"4d_:#?K!)?ӛSqi vAXjU$ ؠ{3yNӃOIlv; kμyaM&^G<1Kkn/_?w0$f\)%٘uS)Ú" %%CY#f-tOG,o-hӑdM2r鈻%Ds0",E.3b]ۡ{ȟ2Q. ALjYSA'|4KvqhfAS%C/ICGhaoPkсC;rB22'XB]X[9U22gTҘjSx-ex9=1[9zdcBGʔCws#+Ӻ@WvȉXGO5ᛋC@F]6 #d3 `0mFmDﴩILϒ:r7r0Ѣ[߱:=;"f~{|:IQ&9uu^DJIl޲̮9Ivf~ќ{aI lm!m9g1ePqZp(.ٝߪhg}<Pk.nB~O[FRC 3.MA3q[Tu\g?k'XM GsCh_]mVœ"VlvMҚ &cFTH~w,ɾ8VCK%!@Qvkt87ҥA`~䠯g&{7u]cπ9KY%Q ?^@AZ>#a~d/1h )7†Y#gL_rӔV*hGcwZOq9I*:wqkTK:AB:M%ovjHܠ ^NiX|\*x٥i+3}(u NZW TT;Mv&d=Qj/$J.]}_X$bc'{j@ZnЄ"؜6VDLDƍwFOXp;Ǐu*jfmBp8qr! M.ԍ6YIOt"Z1] ,P[L<i:Sk/>3J"_'l<),x*wyBJJW5V\=U0Kv,4k rMBEv!FޖtF*?BN8Bw\i <L!2?*V=ΒB񮝹-cQC;CW_~HrAbQ,=RG7dZJ=G>/ e%cqV[:}c΢^IrPʀ~Z:YuQg< ouDA~xycwv&$]^o7Z_^bLT1uEBjbo&9n)oؾotL%5[ãKN?ѥW};k0>xz12E;O<  zLaOeO\](Ngyb.;pBF+1F7opUZ;4s‹tD 8'W%JG,|jH-\ĉF>'9nSJzXNBM>],KD`s􎠑A׌i. 04 n!Gr# a͔]gsJ2alQ}rf*0]6ql]zKO۩[Y~Ia;.`D<崪m` Qк}}:)YIאV~'B'f3"d`u@' \+ZpT} 6͛IAmg;HoOlᎣ_2(ѺZčaӹJAKwy6:zܰxtYфo/x0l$9tVo!FM['QҁƵFMm3d&" uEfA*hXӬT%g:hoG{\-}g)@bX󉡪;l>ߜ9&/cY;3Jݬ[FS06w`BpJlaV?ҧLIj'o E|[gn|,K1lHbccٔwvKo%uACV0 ~7΢~X%x} |;?k}T XxGC*#UIO^%&df#_О̵#dk aFS}P7}8#XƬJ;0)$~V'Rq^'і5mqV {EGC?ᑜO Ž! XFc_Erzc\ '>cEϷ=!t;GČ] ;2j` ?2W,ئ,{*4OtQhr>l綍\>`jH<}`Ly`!$ eVj)9,UJGr҅|};-id)f ^wH9ḱs\dNYnI=:5{bAE]y2Pc Z(9󈞰YS3v)Sdӎ-ObUmd9li('x+uH\e}8B+Bhb ,FIB)a50b;>:3eyCz1@s؉Du':6mH3y;Wٹs}vW ~cV1M~Fj7d`\32BhnxƐr Jr$.Y:P:35ҚU"|PD:MF\%P"qE}dCWsP][u6yJ*sA5w~$MsHC$8\CLвٲ(cТa3|,JV\6ml".*؛\=L[(:I_\Zdi X\({B-3$S7R[CDٚ{iHZ \_`|nY=MB'ly@. )A^DI!(BBG Dt7cΪq`Da;u3W4#Q Sښ}@^q -0hk[-PXYT5m>}\V}SY6O1`ؓp)nScHubfӗHLӒ+%tElVτ"v9m& m7_ Gu"zg)bOne"FዔPmǎk+[vp% %Ӂo2$Sy|ҁ5| ,x Fr}iF EՃvqB5@Y3p w6{ޣغ𠟭!+zh#[lv>WoXdb o|rޝޖ7ӄXݯ&.26,w7 $?E=1{*fR1Tc)f|u$Qle? k7)%ɷ}0D'⭺EF4뛣î&flxuN0ntu#{ ?2 CBT\ Q76ΟbV~7n+^L B:Y @O?E _M?;7@@z->ܯs mpfc[*?]8[meD;|: @ޏ!Mê%l"SIe:M5}n(E(޿Z&>8M9 8o@>^-P^'h5B[OԱ E孱;kaGg' axSI;$x SK-3E'GYm=h-}s㬫I3=61r9VZZ?-s00B)3= I-:4k0[4hKELZ%4Fe|;˷ C7+.8#O1 u,|~:0> WBwh&ݼ|Dط-u?(BiڠKMN [bWl˲̝ mA:t(G{0(n/OZlBrl֭s͂U ;RjBo]IJNo˻Q+1T.{qftlUY7PȔ{mBSkƥUF yާx!e~ӶV 4~DT;uK 89J}ʨU~9Y>1LZʩ X.6Wb`e 祐o,31DET.Vl>GœI=/!؋WU]ϗ.[ (ЍS֤0OIB,6_ w~U.zp]>)K_U;wvlu a N%孶Ky n 4b PxSZ`$g)N4XRނun5MGMQ)*vKД!> F0O)=lG3Do +0=V֞[8;f@b-̳Jˢq0Cvb:[PUVeWqped&lS8[ɩI7}2'`I`,)~{W׊]W]TR'LME P@( ~27 \KL()r7I/wurB=uflP)Sk a#Q6]]L@VDOu ZĄ$|NtG,q+Z*_ 6gJ"4`'0%BR4` Q;OjU^8v#[Br>Ґ>p #j_3×7u(29b j|:}}HwSPfh3kI_z34 *0@gk*,1̂պ2 M&[VvBԮܯ` ~jWgsw8L]2ptG }HH#˩ë?e6}~v]kX9Wo#&N+E'ҺI!$I6Q>Nm)Mb?e:yG8fq_2!JiL\ۯy vB7"|p?5IԧuM2 aN#BRݟJCzxԿFbf`;;]YR4{A_$|mٌۛߒB$_x|"dbWQ4ٵEފX jNr;%w dTW6P-I"w<#d\Au@:/)goB@&GgyWOw؄vC/ՐWݜӢ(n駝^ 8*ρ#CÏ6R-4b>ZN9DFdסb\vEOX8n ow 4w-3}˟"=x dL,ft9Lz >kނ^eP-JQx\l]ۖ(φrCt7q$!?O0=nFG#c3&6Rԛ,?(E9Ki%X]2śyRߠ#hj9P5*kODæ3j 1=zlU%bAq-^܏ց D.-ZaJY~dia;.c)M8(z`0 *Ys`Gn4kWPXR`0F`kWOrb G0J}}ϱ{PT00 8^56 ۣl\iMfç3$'OxGTkI<`GՈ2:\,.([7_f`ю'tK9L?(`Y) qtםusWbI+$xЬATYWz.w z>Ho;rjh/MT 9;=ޠo8HwK+_zUD(f^?)舂><0`S5B#V?oz$d)%(:G`FX;CbL~Sd>g?Q"?7̘Yo.gL{RB}>"0?84CFv@=Ow+D7ˉ}QQmt 3_qCƠlONnVhėhL]kx#zԈTM N0s5YGƑM̶bx)«x@U23^bY|̗q;Q[9t[Ǔ9-A9M4D1rnrОY*r>ts"Ys2<-*6a~7SRhMFJS—٣;\.a!ߏV0[;]\!rnl, k. ͶC6P{D(j^}IGYKvDum :ج,l7J7iiqwL.x8wB[aŊ M%H Pt?:+zd\uF5?69V3*Vs} R}US2PZj*NǪy_k_Ov sM&~!];[7Jk7ak ںyE;s;̼e!]@IgҴH|!wEe\T~[ߛem0xU"zWXݗ}Gw8"(SE*lCc 䫰η%s0dWJl>7i5ّ|fs&P-VĀ,Ϭ:O2$^<}3kAn>77!ݱ_y`: ֡Jja:S@^\RYkU+^Ͻ yutȽdャYNMS\1mIv{3bA!zeT]W&4 ԑ&q#v"pX?:4mU5>k=KVC^2*0Ub@0P?ZȞ < 6<j)>0 ԊAܚ̴&Pٽ+aҨ4˽ d5Ÿ:^alX'<”TdT/@ļ?QAdDi:_DEF:)E!;+)5\~/ub(`A+85H0>$'1iO~;;\dڒ2jB~^iIyލ͎PK$'ujbJ9Zy;d'|A n2=t p MU~62ɜ2 P 3t#HMvrdj콨 MF5^z58@,Dr⾵ȴ_{Cm1;==D& EYi탴 @}7"s kn1vaJʊo͵ N6}kP-?{}4G'%}Gb63H/S2H֚GHZ 8,Qz_PУV}xL؛cZu)~^4hr$t@X燱*F(:!C[>+!`vt%fyî򎾘U>Fѐ=&)rcA>̹du)\"uEKK,ː)S.ګ3Fs譳ȝϰ2Gɗ>\ oMϸ'bHkׂy5NjnJ璐`;y&(90/QmJ8k2셥iI:ai^wf * IERD4|a%DȹyլًeTw]!FTۥ&r"2\15cN#ڷ#2$?GL8zfvtYŒdmQ* '?-D+0Fun7o. nwUlJZG@h?oBƏ4/ f{6wE,r`VXAqV4`T?_'"}vzغ /ٛKõY&CbȀ3\|Í(.hׯP6mYۼ,H{p|=Pyr<4K!_T!`0RU 啝XM ɓ+T! DZfmΤZĘ[/{]Y{lpiRO?R_= wJeTSZ u"KW[l  _8\RzPgH {WLuc)~E3A̚T t5,x2BSIIWgLeА* \ؿYHaJL SMM@nvM(Cxk}ؤz峦-"%ůwe. =\dPdRVBx] "#!82L;֣'$f"C-9\ 郇>˼]Bi_۬*:Kqfn\tYGCϳWtB"<9,ڡvD>Z?1(,DDzrԑpp5P$N6\pfEYQ9FsuzpwL%PF›Zgjw>ynWYضbX`= KkooYh .]?3^"O0r\~8YRl'Gc;c#!hvmu0E-7z=*d$S7i;Nb3<[95jb[VA_EVV24) o#SHIZRbkkyP j(t mpY6ʋ?a@GQIkp+7y >&;m;zM4N'Y@+|xZ,PsqHOOǪyHFESRVoŭX:AB;c,>}TPH<j;{9R)&O[3ei^T{c>zF#r+R꠵X~pȓ樵L)3Y֧(8L\Wb&RХY?rie-^"?a {XPnͷFE?s\4.F*h+i;P]XŌ[Fk," VXҽxەsƴG<Vf? f4%,ώf ov8L21{^xR{Y)3rc[( 4Jg}<=R.d_0P#~-yn qP(OT)_$ߙm\ SO 9fd®V/R6:^BmQ]#ap1h^=_[v[B헝;&E% *-">^c@o F6zARCeV:Dh ;BJ:ޮ]⅌ڲR|!7Aoon.2 V雔WY;ΰQXQ-E{:_R|K,J=nynǂFWOMNxU_^ ȩi:3xEۘ\k{mh eElάA_w/{oDISlie_f36&HY,3J tW)$)LsT#(?%vl y|{CHt7J(hfƌ= BIyxN@=hMvaw4cUy-uvm ZKhR]~[ѧs\HV ,6)g^ż7cD冘Vsa(M^P+J([`fZ324f|5qȒ[qHIeD"Q iڲcL>6eԱEܸaK1  :/0_ULDTq97eqdsR3j%mԝ'͖XiU r6)bGep$EVf *isums!Rbzat*6Μfz\5.0WfÍ K{S/Bвh=zVRUbz9/1bDթ.)bϙ L"e18ܵ3sWe$ie]yO ڨ 2EÀ{P;a+Yg-BK˰5j<yf/; θT9-F2jT*) *GCC4s!็>.ZnrW2mxӼð_exZc2s`ޯ7 1qSj۱.dܤ61E"*Qw+޾7izwI_ŸǧW w>6(daO4jqB2UV׮0f ˵a7EpX~]LߺוVwڶ=ϵךdJ35cI\i%U<(:P0H !\%o[ #DٕH?UH@7] @w0ܚ0N).)&2; ݔn=F.#Gdj𛯌' ++{L0(D!a>/d鱀ai1 RFk.b]ug\'$4w3w_wd|NJ66> XF7n7+]nL:/ɦwc:~=Y?LQ{R_DDK>/Xk_f6Y􈗭Bzn%sU(@,:# C\W/[W E3C븵lȻb_Zh 4bA ok7x ;B'4y|t-ݡSԥ7cΦ25n(G]g($$-=-T-W4ϷX99BDZWo$Qg2-of6fzired)>>&%zYa_%"! (țfl|pG 6~Xyl_ɛ,d#6 6_I.r^.?6'?|7U7Z<7wYϦ4I W4  CM†ߜxV/c*CWq5t˱B7/Qƽ _BKR`zܻt;pȡ,Zƺ[UTi_5?"gAFp V1[~.wÔxw igchc$4ߓ:b;+ge9xrMUnZfV0BUk-$]R:-ƺq^Dr8+sK{,c*+c RzOfLP'jb; ?e#L!@ˤK/#_Ȗ>}Wly+7rwZ.shVKkj ݐ7|6&)M|]/6kxiEvGF}湕<+d~%^^ʀ+{b:~I?݈9B{ :s'6g-B+mZMՐ'.W&*duYod&S=ھKIr,[ős4 i &6LY%ֽ,x^62`Xo[u]=+V]i}$w̳117LTj u2CJȭ#l.}MR ΞS4H :DV x^T&^&i L e9 |@<>1DU)%  v ׻4z%jdAtU3kn?PKEyŮrZ,~ 6eI0 .֜@>Q ؠG(RS/<h&Fب+w\<= wf8Qz#"#2uWW1teH8i}A=6s']ezFx8.42fJ\yR$hŊ%.I­ؕsQ_fJCJgx[,κ[[f81\*i8B[^1!v N-,,xcrٻg|x D@xtsi-Agmf_Ä/K .HE^+isSOܒ>@zCU ЀbEy` V&i^$7֬ء/o$`//YQ|h7T='S}&(B#-X4JDUW „Vax٢ְnm X!%3IýOGd,aϺ-}ʏ \2Pd='f<] e(.Sú }~/xcx:ŀA&CLL3% Ճ+eTWj¦g$/T| 3'9{"oPs]J̋h'k.&\b6]xp6WAG^0ç E;«_\-dTJI+VGCF`b6|̎JqM1U)w)4uQ ,rȷlf)gbŭk;Ӽ02%M*cjocGmuzgV0za8:0eKs{Hё)si /;P6&VZO]΂S(\ ]@GGtJ2ny&oTz<6{f\YO R5w[B٬ǡ_:3["y_ZsV:֊YE?9ʜ ~NW9Z-fTFW^ }0F@ /pc-,&0=@p&g Tl fsڂ!UkQVk<& f|)\J_A-v|A^ Ww'fO7p"5(jq]Sq $ftDۚ=ib%C}z EDF$;U 򂙺%'  V-wT<Oo)ão,~Jb Dg ?z@Pg.6j;p I7pDo^K^P~NK? Ir^k^x'эʏGro5ۚ2M^׳R%}.t ǀ3)SdXZPTlPϛ\5tr`ƙZrc? fl=-NJrCTHKMzϺcx)AcX*YNyilFp;pcߢ)*]1Y"olƁUs}zfNjb4ؑ&0IϴCxTĭ){%POd~5PA}C3PC!9+J~I`[I9 ˼sa2j㇋ :齵al`n+hhuwKS;4تN dZoPsr.Fm0z#kH򶌌xPfZ1x~ҎJE'LiIנy,0 s!{m9g!ac:Aʅw.Pm 5+[Q=& 54ZD\41ОP~~.zmyx qm"7*g AfȈƉ|T9CnG1|0筞;l)վ.#(d1;LSS7]k . ;gGsR^Kۯֺ:| `|)rrC1I cDD.87./kuf2K[r ӟ 0qbⶇj@3 um׾;_$X;od99~i0V̡8Gl|LŎ(|LX-&JOͼWS==}?!驸X[e'4:K;`Aëؙ4 ?|{jR[ť3Q,<="@I$l+s~1Ӓ  .k E)!R)diLr~% |H+TYb<5:PxL%+S "eLm߯O<&z9ʟ5(0yVX}#2&֘"J=?\s ܊(tCOUP3ņ/VvلȶՍ54%lӍm$̓8ⷼ{jX[DwzH/,]x  A{ߡjCXm8؞RrU*2c#Une|Egj T o T3.߭E3w;wIk-v'2@g!RixՔ/wl/稬IH# &|s+msJirUo5ZY}=󀊷 - Fǖͻ淺i0]X2_A ]]owgx"ͣ2\-"VI* 'zI:,4T蟐6b ;Ҏr %3`WKBY D!Tb{BV$X\'Šu3XUlǃ $tPmnj]XY?vOu(Gㆤ{Gۢ/:ݙPBlct|J<,$uo:`ԇ>ihj5cRitu( oRKd^*˘sc}6vZ$;^rNp? ޭo/p%FaQTx)2*JRؗ^"gE23D]F3 c,H<^Zi%r1{{tcEq7!R!5F6%G ڌhy b$ Pp_~Q UCNblV32 Q`!){5IӅVFXkpJbKWLoޖ}IFksk^&.:Bo p+GRzmZ8xz0o6;ĽctOn!%Cc™7B(.[R7jlu%90qf (A J)ԡ٦anc Kfq8(ܻ.C)$5y4CށpZNC$޷vo >XU#T~xqlR%4zg< PR u p M{Z$v/:%PU-W_=Drt?a0Nxn[0/KڻD0F4r̎=|sATzX/A.XՄ! nX}.S*T2a1N7 ;'$#.bյSB`f0Uhø~_%{ iߑtJ!@]Ki8:GSrmMr1H?f|xYƥ'u5LUvw}c]ϿvֲZBZM`eplaÿF{b2' oz K2֏olBw ȉ;73hܯ4\gCZ3 _ɹ" qgӼW" tN9$\߹D2ɸ4]Uټ>&! +(ޚ:./7qPR|{ v;J\G;ErcɩmQkbEZ*x@%g'hyA n3 g.D YF,SN/4HNN}]Yt$T7?$?kQĕ=fxBվTcشqR%=JE,n0I6Ua Hv& "bOɉ㕕ǦZ&pm3<D1Ȣ}+'ҿuNȰ'{n ]ƥPLLGW/}y¾<)o{ٱ5e/I ׋=Pa ,ͦ"Fڇ9{̆dXDŽf M04*ɛ;s,zF$k)6o|GlF%V\򦿑Vҁ2&Mn^5[;\2>zAggJ2]y3FM~`*xZJkf71g֯z(ٽ(&FWZ8d?9h2y>ƽ_YèQzBx^CdU|o !-?W#x6;QrL ~ISa8 qPhPNpy#>'l~5=13}"W`S)6SV @! +%MΤ%zsML0{ӹW)yq" ؟XrϪJENuU9BӠZUDef-kaFI܋> iT݁h7/Ót<ކsu_єZ׫C =szSHhc @BG}.xi3qo[r'4cLVk¿!ZN}zE]"(]n>d}gêM^ LD T&)W}fF*Kp󯤝n p{3_boE9I\9l-gz+j r荗C˩ ':UϤ_Y/8b' 9沧juxP&(g$[aN#{%.(CzN# bx4CϮjmПF^Rlz%K_w Rrgp> ώj*~"Án" YSl9ŮG Ez#v D%Xkޫ '{ )j߰hۢWEs+K"`0vj@`)Ϭ߳@eQ^|@^ټVч778""jtamАN MbE; @_*v*.鯐'Ulq;+9/SGЬL_VֳwfqZky4jϩIJz5^=2-?7YdfQ:خh ?wP֠&?.70Š*gE*?}ddؗ]E#VhvcKŧLy3:0yV"6$v a d|_hiҍ7ȹZ|ExJFoLRVD >f}a2c&+rnaZb]@RnMIx=SBYFo ;zW)7\\悞IN}+mSyUD)]KFnP=%& Xqץ) d.Ύ! -{~X7CwX W+[$l`)c h̟]+Nw(ށ%M\B9Pl@ VG_U9')>u>xv<+2灔![aHM"΄ d{9;-W6iŋ,+smAe)P66a}!`-)lg|./^As6<$D{0!(~IVp:TUU$ti;kPb/(_vv|vR; d4o>!;U;my†yg@ς%̃q6 <(Xq9wfޙ_ 4ki4ŠuK*[[iڔq^Y֫rծ6̔S4n+o ϱ2MoW ɺ^|i26K݌}0")yR$sG"f^@y?s8" //(V(.&r/4ITBTq] .%ޯ|`YVhL6#gֺNyd?ሎrCt)UN{BO|9/ Qwsj+]TCjdH`3@=MHq"=X.-^{T/eȄ7LFtNHk^6f#KgAv؞U ɾX]:N.%)vewK? Z?^wD=iQ]Aw<\DJ+-RfӧSMʑQ:O'y-2Va~SNk6+ .WT$[ hIؙk6Tc:rQ h(\驵˭Pkx}T'dAQ1]dL{M}ԵN#Ş@R. N3UL=G@q@]/}ٰl˅CܛRE ʲp, ,H'>p*IT ]2C!\ 2 7B 5bn7#:w1xDRJ1Zq{lqc,S[O5r[N)\cd8/pVi4WKu^ޙ{,~3owD/.A2wܩHse&M2QƚiZJ\X0F:pJ_"yq:݈0Gm yC\I >f %/?n(2w n7uÎ*pem6X+׈  İvp8p]eΔuZyVB Bj =c!Abq(P=͛ց,T<ի~FsjKg;;}=F- \052?{ 9 4u뎪>`jB&f/|v*51۹aVݜt&1K)+A*V4I[8 QS<Ib^26GɗŬ87ǥk>!4.{A#$S?^!;i9wj6p+{NU']T}Zg3dG'1J1 8ݺRJ*EMNKQ#jǸ)9_misB.IT))Ɗ~炶Op(u}WlK䠽.2Nz9TB? P]!3`~AJQ"CT\ kͥc^zI~гR +4WAeO?4 7/%+V:@_ DF3ڣx"-&UDQ".l*{,f~ߏrzXI%H'EAS%d ڣk=\f2,SZaFK]m뫅8` BD7R%':Vc 8IsW'霄d@A[#JsNKNʾo9a]"r˽eD\D_u NwvGB86bp8 nOi4 ۹~+n&TI!(yZ$ admCJD宾>3T⚔͡,X܇-PٱHRwXRh;mXq̡IH T~YEZ R_F;sy-uSj^̒ц~35^b>za"z 6'E%;N,%VE:n=]!lT-DktZTo\Ǿ׵Ո\˶n'4[ kqsakbg'F2,v F@lڨC ^`0JbC3k16FaﯾkQ-mfrAt ϼR0b,X*,_UD2hiivߡ՟lOŨ7ơvUE_kS6ƴjWPK  ,jmݫZR"evx`i:Apo5qZmCP%X5& %ӷֺD xW$]~P^x PNQsu#l0Ǹu ?>*K5qqhF8a 7 EiCev Jx\5[9y/k}=5v.o&˽&˟UW2/8/j e<93*FOV gЮavO}B*b_QSkZdBZqN&i% y7 [EA, uWmFUV ڻu/+w!~۔lk\iVm"xVo2 DqݓlmH J=\Nr4Tcޫw+FdH· !N>P.?5g!O*jYh 2[ iXrP})M Rkk`sRaz5?لaBQ02`ctۛ\\ꡐK V?,hL=F-\y;~Lw =`X-`3X^B,H0?{M`+Q+e۟l'2Uُ '۽gL9W(K~#]J_qa`Zj8f &>Kz ZbOĻ߯JN O%:}+7$ѐunX Hlqc ˩xH>簱qG0UrU$sJc [`> 9#3ggpT!4@N8Qo.Կ)X=!|pq2q ~^!mœ9> sc wCw ~/yB ;>AP $dbGTZ%‡WEӠ4!#y0 YMVu;pV&ӎYY= Dۄ ܋E^ k~É#c8frLrrϨ+#0RoàVb!J!0`-T8vH۠r" WZzhc|'8h27xBGh(3{V{w6wX6&(: c7ƀ8a'/bG]%Ԟ+DiTVui*i.' ln娨~0ݫ Hlޏ2UÉn`wRJt͵s4x!s-0fKȴ=v:qHo#]N CxeDNq̄a>B~tqVh|3 /qf'io8g! NCcgs81 ׹R#7>ag'a\O݁2D29j|uqǢ_!F"+gVEaW!'͝bIj x"PҾ8u{qݔhr#ay}UۅqFiR ^Y-jhwH2f. Y8R/.ycl_Tp+!8se7#\ vrG>]LMKBc6g$]^)R>G#ɝ?dCY8fQU4]$ͺt6vәOyYъZ<~eNK:N.I$ޗnD g:Z-u[?F]EMኟWrr:&'`\ |Qcr}1x"yWS sȇLEJ2E >8Ó%=~v=m%+<ڋ_Q*N0аnΰoWhBI 3: Ӄoy{Aޯ>; [nwhzf ^b^.YԄo 'qP>N\lj˷ 12-$_aMr(Geva(?)qp;gY[ ߤ%\;d'"-+wY1JK>#wNxݻ7.G[{6Trz&lmQ eƶdωqǬ_U1_.> 1ؙ0ݱͫ+66qPi#ۭQɖC;-Fe]RDmo0 1fmOsIp}<{u\2{#HWG# y̑r<ɿAQ/!'))I/[7K"Q7L QfvW ĎsBV $3TZ^c<#62m4}dh>GI. 9C7hPU,ѹRrf,r=%f%*JlʳiaSZ~K~dNSٵX1O%S^eO"W%WON7w3%Pf/2&Ú)dDA6S3~#CPGjzkǢqmK@lZA"9^BѤo0<¨Mee&!k??q3->Zq\ tW"#\d۫y^cym4ۑԬϣדDTJ׊D'؍hELOgBw" r+f"Oe0x"UF +[k0f 4ޠtn,g,Ge< 6|fI5ܠ-n cN.R?[s}Sf;D-2˯oKW;(VtĘʇw w8Ad 4~3nB ߓnnTgᩇv.Uծ[ Z:4i۹yjO뚡Q~\DbuFJU@BVpEw) _V+`lݛJ l.%iضJ/ܤCcBH1qƕCH(7Jf-pa8ɢs^4}e049I8 exS4\܌D3 DINv}l;o\c{QC3% WLom0)=*H sM(U͈7̊`_qRx`a+5PzXUcu< fCHȼ8"녖gY| 8U &׼a6ӍUQ.< _m@?RLl()HDh| iq:7-2lTf:۝ .20G?EPv,bŠa!0FR~*S-KaYNҾAVï;q9>X\y;^Pl엤 ,ZOyp~q(aR{JN#֖d#d@ȩ|fbOw&P@l؊+*[jJ50u KpCѨ wᇬ${^+8F|K*4t `W%Q*$49bѽ< |dD;E9wپ -bOE)'اK^KhNxĮ=JIqQQ*CD #A+wmAIءQP7.TU;Z_VĢO&CjJ)VlS^CCb[,J$iVsSd n j]y%C #7, $x^*60߆`=7u^,sJp{9ge؞G &"L }'5qL!naoG$wI :6567.{mMPmB]Noav_},}.Ը1ϓ5-]m#4?`yɼ_ܭ[;V+^swUe3RGK.$ayMApG  Bhp3yIPbԤ rBQz>Q,b"u89}xlp"G>0Avd!@5"#sʜ& (j=.hgxFLƚլsq)1x͝pB&-Ju>CI/6HK >Lgj(xb|ujsTO[Br\/@ ˚1>slz]$6)R z JgyX9xD Βew44=Iw6kN;~6:@ ה NzFZgwK¼ Aim4'p)LY+)^:ª,nDiR\7jYcMߤU7LFEvep(WzcdClfgLwȶ _GA"6=49*PE aN[YR xD޲zޣZY6Q=3 tAKumYĸHTp Ƹ@!הlܗq.r߅]ǐq1ŜX}'!6&ۙKN(^l@>Jx! iHR] }NK,'x\0̕|KyP"hd*{ccN: ޛh;`=]hLJt$yWћ[/s3 uWwAAl##E+iH8o M:T.g-\"{AC :# oI@%g_Ek<,ˌqakO\`t!E&K C;MDH| ㏭lc)lxs&bpU!~jOjhii+I$}AlhJ\ lfW#6&H%:&5R+\aMNg-&, FϽ ?0QٍXت8Ũ<2T?g38nX@?80~kF/y6\:W'i$kV{y=;O b !WG($.瘃:w$Z2 `BYdCV` 6-fr~JZEw%hw̅($M;}A-5_1G zR֚y+ ]ea!LIHl3ɻ݁R"Ȝ3,قl]-O_'&d&(vU [ՕԆ擦q ǯMw¼GB]] #Ob0% TmS:r/ s8XRK4&Є^[ V 4]i~{L[B(?HWoř' ԘwLit=Fr RÊ D♗+vlQQWaPL.py @P-$wG-I"Sd-g[$hp6coZ\ߝGX͸7f@^ J(e>k'Q;"Qg!!GByQ̲_4w+&,, -n|V 5 aA%W6Z>^ .U`?Dm,+DߞlQ=`kRuosejuUv/7LpW5@Ta^Ɇ/cYDu%#Svgy_Q#c3:eAİ=fBNTԜͼa4WI0ژ Uq^Y1EHڥ8R3xt_ ή]zTU}74؛aw|hstނcC!%.ĸ=)P :rGNpE#$Szo{/`ކ&QUcE*%=OfF<\>*E.xZFzݩCs+n,.1 B5TuyhWkuOD,<(EO[6#uP03X {>M'<1 m1U1u5kpc=a4&}A=tmm0J3Jkm WN4L։|R!C.#/wӴj4oI"GB'kGAwʰE?'+J e%< W 23mhYHLjƱ8>x$pz,B{Q-FvId FV H2 AZH>iE<7kZ9@b}2 U czkzր/\Mo/@W(I_\҉u13sF}ӕ=nZ)T).&>k7X{]Of~֓/`?tO&Yc|5t!ƍTOZ[f8Ĺ>ݖriB M~i^l<]0!@^(u~deM5B#.Bi71aU_PRȼ8fx\E4S?~ԑ !Pt:?ĥr=騰TLur{;)n0.K*DC<؆F1,谗IC{J zI!"M(I(,?\P%ӳOq~c'tv'UydFXa>|kg// [1Y3uN7WE=lWBxjMgQGrYs?7 A\2B*S ]o`EC%U!b痐qb>DXoa r忿%ɭ}>z K8HE:2:*H$MyYHA3@gO ;y9RW`;s}| dA+׭ф9: AG!tZ.9ql\JoO!Kj)c9PEsp՘r{5uFIrվc9u 9r߄j \i!ϠMs-|:?5m7ݥ آ#e:d8qS[cY.F]?,{>E"zؑUzq[. [VGyj54LVia,W*JqivgߕyWz~Yq[Id skϜaHFmѺMM!LΜ$$ibA.6_bkζ?wXlyg8.(}pB$aLA6_ґV)չVj{G,l",;jbuXLQWE q.Լơz䕈?e;@’$rE3?G\|Jrϔk(]3"P@hbp,% YEv ` A_>zAfK]]`, _u[+cn;?c5:v@VOpp\̑rE ^Z/;FJ2{=0I2Ip[?@6(&9brPa_?ycMArT}(n)nДB( 3ۉaq#ȠO6 )-^;e%'1^(?Ùt:8 IkatƬ_Sobl>'1w$qrh`t1bH( mEL&[4{}Q *1lyY1YZsUz@!`{Ԯ*nI>_ƴ (rpw5yNb ]#SӍ䘭@2E C;|\,Nw»քA&:th1Q'*@SdWojN<3&Nϴt5"'~kTvMjAV:JrO1zc]Ni o؞OZScAIS`fPZ4d`4 U1 Murs39/-` 9/]?@,>"0wMyS Z(yna;S,+/=th ELK4T`(8ݸa. il-T!9#*Z% 3qfSA156B v1%E?1w|nY?i /#N*gTziC- -T(JJccb_ܮ3j-H`[ەp'R .&ge0 liؖҡTx"BlU)q!IQ?6UWa" Gj'b wZAfEiJ DVk4aJK'7|Pm^e]yWTsF2 5k5},!hK9/6ӵ E=JF,.|K7T7v[ƤEVW5vͱ J2h'd(XHa@Ŵ zVmg.#|H- 89Z .L1|2踱x|!f[ =D.#^/w9(='ܛZ^$>dG#x1 Z?Qf>־--mr U(ЕQp,[8r`eADM 7 IZoYs_DɐjuuBhsP:$T 1aN8(k74)ܖdwh\{@?(I&Z'τ)|ޭH3h@KJwRqR %]uPN1\j?2uHi?)`J'/@ NMp#@\;D 4aId5k].Ch}WD|> 'p1U5D@[+pwU(ƶ`@1aj*ލC >@t02/ΕD|%eG՛L1\,:{"ҐVe]?-_?D)9;谔p1ϱw[pnO4?FfǛY~/g 'm)ިJmV\-Kn ANHZf- ٕ <@EؘvT%j_t6*J1An*-igb!!:3ɻvrԑ2;~Fƺ5#ž3 aTbߧ;r3ϙϚ ;xsutF2Z{DB`g|-KgaFe8LF|FQе&-e=\+LKr~pda*.ٜ$[ׂq 9[p0+]{cV+fm~u5뫷vҥo |k|[˚`B;2JUUa~aV:zv@u_Cխ7 ֖W>7[iLk$ F 31H`dhЊWRUK޷)2Я)z`(đJ'Ŵ7pbLЫH1ژނH5m;1;eMh@JxnX~Q&>Ë('ޏ"G_ƒ ZMp; ʌQJTYI-ĀN %Io3H+JḑղҩhS^C`sx}UzH<nM1 JQO+6GJ ;7ʳ@?îz9B%D( 葳}R~2ae` tlhhK{%y@R)׶N7a6$)YAA:8D$RAxM\!\m9b.e D%֎!ѳk!>3DOUNӃVҚq,Lj+[<"r3Dzv%SX |cĻ(R"rnĕ-u$ga6Jn m7vH$5M_N 4N+Sxvg)O)ѕhr\ڦ tZ KhIe:tCk$LݚGK.ŮŌ3g Ғ7L'W`%V=cdfLN{ӗ辎]Ͱ1 Z*(Z-~V%\OV&Vߓ<iP3 h|'''"&Am|xqf棳7x) [$TgDǮw*P:jӾ9}A?;@8neFIE$t,⧼ZVٱ0gKT,PM`@¡$A܄c]l }ڕ[4N]GO4 Zyq%Cv识|!/?oq)Q0૨UfQ .DBN{ɯ;>3y+z:q߻Y?N 2I~hA6Uxڛ7dS!_-6 S]Z*i &Oָ}fԺ"; ݫpGL\ƭ4`D5hoCgrY7[8Ѧ4^:hA #$E֛oz(mOW6M v+}]N8 sLHd{]g\NWhC(}mUTO,%Jx-o 3AlcSܠ0t$*%99)1[QaBza& 8Q"%u.=X2u;DKM<(5UF,%}2(ΟMѹ֊%J{[S߷H0)BNVƱB M7k92L-:" bY&KAQ1.ȏg0i͏>i !:"vmt~WoGb&b)r%Yl??>ѮJ=M6.tpW M2 2X=|d ~W*<(ۻjl 0c{gUKH\<9f!un˄PQky>>Xr2fٞ;ptBe͆4If9GҘpn!MݴU4WSS$Jи@? 29jt=saq9- L*qcQ!.FGloP@DLjƷ|_fM$JD+!y9='́-h plq~3Uzު $z}~PFb˫io59{"qT2"?8N _8w5x* FFQ("jn6A22տ$q-{n+bĥ 9_$8Y\-.]{dz'b mdsN-6gFmpWmzhq2N < OEPԁ30r}&$A#9p: KSjB_AкTךn==& R(?)+ Z|Ϻ Viq?ڄ#yqQedSu̲v3wL$a϶;F]+16e>J寮v/. TYhs g)81{~KݲZ)(1X`_ &U.dI=_TBP RNhg'xl6S=/֮,X'ԅC'fY Dl/<*Pg[tʧr_/1I _ Y\La0J,] L ԟ$2St1͵op"vBB GxtQ{$[_ϥ}FTc7(0G$ ,Nh6O+]R)Rϐ}/0e"W2@Yy ]DIq]>"͋OzA,UqE7y"%vEPK}54Lf41%,ȸ8Os1\J?yfX]9.1#{]"$9Z|bdv YPOXzO~;*ΕU`,nӜ]ՌЁ TKEK}bo\%/ݖT:4!AEJ1kꐠ|.`:?P%J& }KBLőYk`9cq?̧7KW~F0dq9OG[,N:Wf&.xVehA,]7L\tRv'S4,@C/uK)c[sjxpA2W 9 n;DOW\il.ES!W4xƔVY][U9s^ޯ_4ި4_ .0G`t?_&Сϔ/_C:Gʝ7#[x%]EJ՟'Bfh4֝4ae.ǧ0F-B{޲fV<`ReJг9{mS/ S c6ʅ0i,Hӏ;G@v.6wC"ʹe,ʭn p~ADTqBű&w'5R3 m`!ҭB/^v"*3!_ǜلb9NQ̝3بww N.aSAamJԳjA2xbTC%}dP1Ѯ1O}k!-TT51 !%< jA"A!u- \/9E.uY[>+@_ ޽jt>$>҅섣%Ѽ ԙ=~mb'Ҵw*G)* $RmF냓Vw]tc6d%,~qS#;sjv?o| O98~.5̳]ObEyۘ%.>fqōW>7;GZX퐂XWi0搹MCrtJ abHu<6*ڟW\qe2 sUOmm >% B%3)%<"sgEaWkjw-V*EVʌeGvE,? İ;}-[v >L"!{wgpIBP p\~%Z 2D}"`2!ZQ 3BX.MlvEoe"]HhѨ3@HpֲzLBD |/mE:e nhgJ|K|bC]b$U}%5Gխ_bSVS(c[,cxxe+uC$1T6~xA@W^kN&tjB^Ő.&qcЖ#J1Iy'Qj\I:N]^L󲝘=OS(*Bٴq4*I~qMOгյvୄg zJE46$zIJ,%TZ$GO!R1kHiHFk= yJ|Dd.uoBr1L4ÃYMvS&(H1IK"I?LDᏦW8̄#!Ӱ/vتbR??OB-KR)QfKɓ{)kxȼ}k &੓j5^rtb"IP6xZx(s }ͧJ A+JbiXtݙQt_>Fh%=.8bgǾyM*&\m aH(D}v|٠dglpV%>ښRvĬ'2wU ^6w2]Clq8{`-~!pf׭|t)uo\x-i]B+)m*o| hUu#1# ,G#(`!gVK61êPgr+̌z iʶsQ[[w%̀Bd QamCduST)Ǧ|XM;J4_ɧI@D)?~+d.Hr\ɮg״5k'+{R“*cb39 +`v ZPlgHHwb}ɽlzhCI[=a^&+g=Z^LxE5V&} rv0?ÄqV4Q?Ϧ;js7YF/:&k >NDm ,55eIp#eWPPvxdžu8`d3?SGh$1 \Zn3R4ğs`UB B,Lg ?Or/Pe=G/NѓY\hB=yTxvOds6wRn x2SV18Lqg%J|zGRSUJϿ-]AxY)jUK7u'(FޒkwA]"숴]x E3*K28/!7@ ;QuoMLNlNP֏,C%D.S_%?K#%X hESdP$a;~fO}*cV:2mʮ(qhΰԵ174N*bA [O_3K1knQ.Dϵ-%ݶrKߤ~zقƌ=sۀѶ 9?/u7anoh 26*ߠ̓ $'3Y"pU y1m`"NI;*sB, i{Dbo}p?騅};Md2aӈ. /5`|s1q$#w%wddڤS{1Y7X>p&`'`_oeƭ< "ޚAԆKoebT np07&tXT3I zot"7VKB1cc^Z- #~:pmFC"VcxbIi0 3*[18ǕfOy̕xc(Phe(ǼdH{Snߎ6̲*Ř\мz@jQhe;3 v*!yWcLk}%D{5EK #0j`j O*` Ӹ Cgpx]w7M 8d}2Iz7cpr8"WstTOގQ +HH-Ii|gvERĎL/ & B*^|cXp i_lYԴucB[*͵`wBDbmkx~tYYmz3lZx eAwG^۱~jW=-?P߼9(0~53oD ɨ>c@,R^ Jd֣Tŋlv /D(3z#yhB^B]/pQF9Q;*4?A{6>ٗPL7ܛ}|" O=A"6nɲ(I2ȥfqhWTq:B٪rV>Hnj^V;_6ZR󞩔JAl8`Au-J$/mLӆmB3%e\f5E7#B#8žWDCʍթ<] .GD󩮘 cwmDN)g^i`LѺIb ~pFRv9~*(agR 45'ì%iRRߤ9ʲW\nTшl錘tFKwf`>%'{CJB1'x&XǼ³«4㊧PO\rQ`ׅ R+]5Õɕ^ؑLm&rW6hരsag$vPV- @=.6!f'ocAhg=#rQ*Ƴ$\:`-^G@nZqC"5~Qt[|p%҈\T?U3X A#gUH^/,񔡜g ';u]aC-j!"28B{G $,#^\`r-4Ǹe*]sm9o4AKxb{'{f_`7u{B쉚XB:n5**9r{Qޅϐ? x,lW|ck+7'Ig1kD@(PVdrE?Zzͅ1re{)L ! W/)8 %258D7Ha0o RaJz1!ТFa} b&q h V} [v#C[`jCU%YI<h\+!Acxݧ;rn= ɼkBN ``[fW% `s+(џQE;B't*PѪԁ9%E{=ȄFz @kYTH1޷⢇%U$O{}{pLl33|ߍ1$aM<. KI}f\]Q{zdܼDfuT!4&>й*lnSV&sUնZjS[ۃ)*p'Tr7HVo.>>2LsOFqċ׶*a}EopgE%mm"ߙo/ 5 %a]8da+x\[T@ bzk#%7~ukpS*~5uFY]0m>Zyf1J̬cgQPquʡfBW-2p\De (yHqt7CgWʳ|t"vUT[.bE~g+7fR|VSmpU3xFa0{4 3O!k44ZU/I.SĀ_ []-@ߝldz[=ug^m1!,"[4?[M)76`%OM $>?F/kTn}Q/]_*87ΌE@yS?ǧpt1yKꌌp; ͭu]ـax@<"(pFz&D-MW%ƃHћx%&1#Ƚ[(f\ O@"qKnO`x{{%r0+3g-HRX8v+^~;)uS}Q)*}^.Q `I>h`lQ{4 Q ě wtg8̨g[>x%[;_1Ib1}CA H? fyS {G#NuӧUƚdEHSXm6c2Q@>=9&F Xو^!wZ)B /[k k-jlT*2']8TM2r[B6LN\>'3" ;skE3< [J޳eJ+xGvMvzȰ}]#ŞR+@ݻćiU0a;:T"q!1.6 iQ:p(_cg2"{~DnhdƥzJc2_-aC0&&5V]4#Yxs M@` 3*(LSzjo L\V.*U+IF?ѕjf-VZKɲ+!aҋvK`Z"D Sa$ x:;ni6C_T Q04v1U}RYI׀*ryw C"N1?if_P~_3Cggf/{q6'Uazc'ϑq /r5p-O  ]'ܰW.|Cҡnwe0?Prl'Ycq -lhGEM=Sx(?s~Ԫ ! C4Q78RݞIE60XOD k<^bO ~ zj8F/r##|3@hF]( =tFcZ=%Kж"o¿"pTќ]Ț1R욀\eҗtԌSMqqaf伅.5cĂb/qjU(6FYU)YM 0 Dٞm/3_Ż6Lݟ3yk; ȓ$a) ~Ƃ!4ivzY#5{#vES+0 T*^ZЈvZuIfoY!?pZxLOZ[ 4Yf;TY@q5?Lqy0nF_A#PzkUNʷ⯷a#]-5(\Wk/@kE@q93THXߓԕxS(w`<] Sx> [Bl3z(P\ůч]CR ԊSN#%0/rp9]<""Wr]L$ăsTݙ;g H/P6;>l0bfcnAn }s<ڟ3ZS&]ZsC}hխW! ec[+o[cSB|楩Cl;KpX6?2]5X&Cdʰt@!glkܡ bN>:I&Y닃żVӰ3?rL'nмYv* EBN`;g:ij܈och(K*]-C1<(|{3b#wiRn|on..3sQo*fsu5qKAD8fpi=TWiA!#iF'$vِ5Xoq 03]x+ HG(X=꯶޺{KK'wv.ĝgu-^6 tq=g0!rRR!u-5AYI, ӌ k0韟{K$ 6.ݦ\&cGz5 L <]yVl&_G'y W7g6N~FŽ܇)evFi"\bGI_6t@k(fIE]z˳+ʯMQ[<CdF,_(X;=*瘫A_cOЅKId3OzUf,JkD!&a3dGeM5 u F^(K!X%#TNwq@b7:yX9f"pOU23/$Ի0y4ۘbj:-ؠDgI7bW /qUEqq:;;>Bnkn<7g{A#= BMk9jTZԚs IwT.8]&dO)"o6e &L.^p:y2D;Ƣu ~ӏje΁LQy$]xnlQ]E,aECYE ߜ6)iRF⩣$% BC1dC/q "i1ҿw⺂;DkBz!//90?6*l\zS2^ޫ=|oj;gT68RO =ijxJb]DXYLXXbsEtӡż9K`Kق.U @0uee7[J$]RXm=;IQ()YJ3-uiiC- 9W/JM8;LK$aJjcDU1ulPّ`Q[=mCRX$VmUY~i!VmGXxX}N,n]s=]*'2ZK)^m8k:r%B!T]J< }vZן"?*[OSo<]u{\Q I%q:yI1"k_d, ly ~`Ϥ'M/Px:9Rf%(Ң c3mHĤ 1q3 2 /S9F`h8ܸ^0᠄Lc\wI #u?i;ptQFn{mփ.J^$^} d[1? K"v8 0(~ +)dij.ia߫-RgI5Ɋ/~L=ܪsGmdehu3yũwH%XcJ-z{EwKдdO#"=MX`--?/ ^avi&/}bNe~RU_ZxӦ RSQa.g^;=SHf ְy,Į|-R˦w 2 5U;q f>Rf煫!d\}-/3}\+ Z VDU!?ZfNI5 r\D?j ꊔ4' _df$ } ܄ K)uO&^YH/R2ݪǔ>P:﷘mxYD$h.$k$;|c RDז3]=[<7+i"i.bW|5nPSRi"1tU' +svWrdb<\F}"Zj;&i6K\{9= 3;b"'44~l5mb'2=\06Y+eQksj/61Ƴi :;g<$.45C񙊊"1_+#r\ZE^c.PTTEIXЕwn%/Sb6g8&~HrC]G"Ό1q$>#n'Ş|{i Ԍ.Jᩃr#yy"^vem-;JcլMnx|As aOY *T䤋h.0S0L'\kdޯ|$1ǚWV6EnEm+h˽"n7!^:3?|8H\\MkfD9]-kտvǔs7(--3UҧBd߹zC~ *tu7UWZ{WBHq|X=(í_{ȣ+ɖB>CϨF2aTàt3SM:ꆳ k)% I:[!A0sM"6WrJ5J!؛PBv`i{SžOnznQ<̞IZs/\CǢ.֗62CX}xwjW"(t|׺4~뮾4Xl1P{9?k"R7X!(U1~sy I4}fFARkœ#-L?֏pKnf.[M1[IGhsPB(d ,&B|\j hPsES!WDDˮ/0#L^$KR(Eo):q*PrCﶤU2Imgo[3l^A1?Ȇ/6JA)n'uqk-ٹz5ۄ" ]y@Y%F1 q6_0xfCԿ͢lc&^izZDѯq*[ok; \Uq˔2wq턡. 'Wj~c"bJ`qvͮBZgi['qUqCpI $Lw `و FZ)7^rB1leC3F/}djjeROy"=xJ.QyAwķ0=ْɜHj^k;1rk&lDyY z cqImE?I  ΃)3,3W'lT,g~s'U"gU{gnBm+C@S@I׼7kϟhZt8vcSϴA{~|*ASu[ |R3{JH>0 d`R13Or[S/)8L =P;k\cĥvv.JI2c䱸|!G#Sn. hmejt ]O9~ &`T,Jٳ#H-Yඁ׶zO8~gQxPn\'J*b*v`>MgBrvSEPV,0A c#eOF~$Ғ4:AËx;dC//H!-ȠLT~r<:Q=TVKȍ%~CCo}0wL\~RuaGӥ2XX1fpq`{BT_vۛ9Z\eSumJ 8"͚-FK9&̨`1ͦ_bFGVL(^j2[aT,k([L}ͼDK35?^+-ĵS MCW/]+[ tl Bs!jzƶ7Hg~M1{ dYP5|ZZ B96bVrRw!Cd1‡{w:Vo7lOaL<`o0Z*J7Hw{DB0#QFP=eWTbþo raf<)R,P7P[3RޒJ(F=?kE1[%{>qxuu2XxKW&&n]#7n6p\峝q Taö} [$y!1n?-PhjEls|FX,tcв(jJδJB,ĀA ̥(un8Ai_uXXخF>eMOI/[nB1%(k%59O+5g i_F:W%*H|zT8 ۄFxS!C_NJB(pMji1T4FdP/|P {<YYv`)^ԝNӐ7'm;ǁW#}Kyni!a/+;N5dDjȘcl 1|}/ҬcSS; m ]Q$ ymlHhv%(u?:%f,;5c0ik"U׹]#e+7_R0Idme`_#F_fB$ yCh"!K 0eZHax1~+JPlhr?w o#p0k߂oBYњf?~BP)3KCt`Ŗ+18MXu_o` bЛ= Z@CT4LUJr| Ӷ[ !*mn d hѢ>v.^e\ 0d_b;Hl8ņdg<" sh609emTG:BN:z F>+pgUҜʦSOV(.+׈19o¸qRjzRMJ[` }7(sX ;/6#u>P\.IRh_AE@u@8&#l#›VBـ#qxTBAQ9wQ.LVjaD$=F!h%ͯ'Y>D9<F2ޥPs-P^<Ɠ-xm"wſ lHZ fd~$K'U G4TR*Nγ"bqRXQVӸ;zs#ˆ i'$[lZ3D'3nv)T3E"d{z@./m{V2mYȵ稗cLc(xeӹS)c,rN .KpvW,:ANһ*2 hů3MdBs6cV>G7̤gL,Bޜd 9k>MrSf!Mji4WVm tp({=lc2 4PR0>ŗ!y@ ѣG  )#ݙxBx_MLÔ&_X~g4I6օ-86QK>j#iHE(B][6 d'9&v@H+gQ/Auxy!~S}RɲQK:FQ.>Ҋ_#Ĕ.uocKj%ChGk AkxU:.gɡuPۗjlb exkE Ue#%Bw&M=Ȟ)O;Z1 <˕(gP٫Gq?sZ'-m0LmF K<* Lʨgg5YX ė® A8yzSl)Xev5~Z`r A"ѦZ1S(+8y-!HbSo`RYZ^G ~MZPk&-vhx(W"VAw#cɜJĕV5Pa'-zs QoRo_DCì '\m_zIK ΁k3uu- G>)bhd~j~ k'~s:OWrf!lViPyG a:)ϗL.Ĕ4s<͂݀oS/Ts:E9eEՅKѢ4>nFQk 憿 yS(rahs_iGذ}HO۷$g9G 0X\ y#n`&F( %?SUBfS[Lx_wݟ|0OBȟ\.]2*CƁyvJۆ\e0ݗ R\5ʨ{%*іg gsP736Mp{'9+KvpѨ>ܵLy—]tk55\Ƕdd]єEQb>p@ j0ŔPٛnL9kJc,mit-CoTРȻDiS_6Q?ۺKΪCj% |S DҸ F^EJxIZ>L#ږ1]):,A:nQwepM& SS@%Ȟz{Q|-|kws@^PypY)ި_‚+LQE%mi+L[/۞W*< ^LR(K1$푻'Қ("PTn<_s*"F bX[CH>BUwIpI}n- YX>B'&̃IM#{P,..dGɳoNHw?Qo:Jȅy*Hfϳ3y}+qm-q TV ڲ6V|'0d, Pqֺ볳7&]OEUCnnЬtZ@AyN&S+c "6_,?h۩vZB(|cPz\L^"w|џQuKm{"SȚ {O*@KLA mniۍg Ϛ\*uJHj4DDe;QB$(5@)kE|Wi {T%Ccꅈ˨+N%y32p:*u?+%"QIx oA#>?P!| 0jm}t OWNTҨmjŜ2X˅ؘ^QB_VM&07K̈́>'W Pm GiKFwryhx7 8 iSز,WSEMP00DBիb@ M{iN+l(P5s!bO?ŃBO y=I=vЩ<' _U?aK0XJO}A#-l}c`IL}S[*\_^gP_~<_g6^aݐx&M"6&yU>.!+j {/`y+BY+mQ2ӓCL`A*P ,k{P)P?fYQ߶?!9*fU,ݒ3ӞC͑"\Dw|эYh c5d DW6ZgR{i(XJ:##u-Jm&K="k_gvx)cS(OOӆ>"9)M)F9d[_;O:[svʤbS+^FO.{dҽbT 1wt yx) @WGb# z/! b |@6^ka#gz]X,6zl:447!a䴥]5i\la0wlQ!S|ܾ$z7̒j=5HXh+91|MXJ,xs&KFG-Ө/؂èzJ}y>HD!#-s֫Ń9 _n\wvwODeiP:@ʂgQp. *fs`mdn3 |p`\O_*|;qe[(`(F݄8WlC(gh3LK]; ,]|AlfsD!Og͓s$g^ ch$pd9yf>+A--dn"GĆ4%S$'! ;I#%x89m}gc"v0֠\1ZeW30]r}-,:U8gzwVV上AT`f㻴Z/NO̱{\@Ea10!i#`Md"hrBOi>=9еD'q!qPx;HU]{׸O^ W<V\+lrFP\!PDPm"Yh <( |0^s#fA9gN-}HL +GI5qa4~;cqJ,`t6M׉Z1b\:xxBq4-Mlə(RӳY0zCy$oZM.hhvo`ɴ@⥂#å 6e;F"v@>J8!϶rLBPWv zZ&F(f42x Z0]IN@P9bct s;;FrF0#p!{H }>Ia)(&g8{jkϢB9lEv.ҝ E}T ܐ3-,yy~a`ܢs%72+7 oq>6Jo#iO=J u_xa|QCi)ƪK5S}`i,j_ʻt9\(W!6j v&fz5פY+QA (VtK6>yl|:[}K HX4rI´bwZ‡฿`M㴌(0x7NAk!\IytN'~ Yc0 lϞkkl,;ɠcaE}9Ά QV WdxDGeO-Zs5.Sd􆠩CB{ Y:K'1S*g"+I2>-" ^Ȭؾs}Bj&~8RXJ(NM/Ðya MaepnR @q^X͜VOQ'n}`ԥ$;5_#kX Noæn1i5`_'QVc*^DCsΔ͢ 㷎 TO(+^KB|0+KHcv"qYlqtujdl;$%^M-TDC̔{=Pl1\A3I}.f ? l=kZz+@s<#<)AVDCIٓT3٥_Pn6>iR7h}WwVHKLk)ay;=D5Lay*,9 $kTJ5eSI H~LDKE/Jfro}P`aPSGa F1ՖJt̙h5g<`{a+Pؐ[l2kvD& Ks?ω?uw&Kx|DޠXhF=ZvdLo-ZeO5Y>EGZʵF*/} {m1/Z!S Mþd+ulZm,$"11q+9%y-?p]c %YU//y/վx'.n,(Ƅz`5ۼhD&0 ]MUh|}Wʖw, 4!XTFqIpFAA~I%8sV/m?y,g#*(2Mn$L&U/v+BR}3p\a#nuZP+q1qwj ߅>x]եS$NA)l$dF=5{2~ #6uu۰a%J%B\h4:_ҩZ~ epcq"#!;$ʪb .O#ch{*'wRIM χo(`_Sܴol$nk>f~8.5Vi+j?@h-ݧzx@©  dƾ9 '8"?zϰ& 魑hٲR9y Qw6\2Z>ƺRHgxi˴`>p/MF b\0$$Y@'l(ѾF%$c:%|jlqχ<]%vA`#0+m"4g?cgc#HhJo ;փ&B圚28l]ϽUKHuXg ZZ6zMs ]}+8-}wk:4CN)n5W)87ޢ`X[)2l W{Y2~ )ыKwkkG[qf[wb)Yc]P 4ܛmŒ${X0[ + wUTfXZ $ܛ/%'W ^\ZjE5ؾ}4]wKwx ]na6Wz8Џ 9X+޷#4m  ƶVhR#U5"+{Af]V{ /}P \U>rN2}EWSmLp`X-ڄF0)  *cOsX7bkbB,Ze~\ lW& Q$|]>d( LIQbdCEadM:$%X<]ۻijstNX*? ~}@Q^963_0 lGVY3&U7d+ރ*1 ,~gV].rr8 !U e}d$b =N\a@0 ـ k;` ՃqVD_[9{#+zZ-ӡSL>|h%}}B .Fpږ=*3X ; r)bwJ vMuۿcqcœ2rC8"=h9( ue!ʼ>{NGzCCC , SO}fY Bz}콤["ث$*+v~)%s}ǔ,d*!\rS;:}S6װ<覱.kv9º%=ċN|Aj:w$]/oWdLꋲRDn,AjN+up(Z[,6Y(dl{ LHWRq[A77jN\6V7xc  &w>)$BvؽQl+<9Z%vlI#[qljEC;Jm i+:}K5nHE?)`ig ' Owmy3gN*!e4Ѓ0)%( ^Ы9.^g%xSS6yms8so 7KF`=>v`^}Kև^T)~/H6|,$-_,6@-i VF{g$L &t#ٽ)9ɘR^qrEYIgvEE#QI211+ \V*0=gFrpT9_RbyO3t24?7ћM9)qsb{Řn*PǦabFQ MC$[ڲL1>;VA/<d%wKc# |BWZSr$ȍ$TxM"ffP}ZNY=qNb+^nmEW4n[ZŐX_ _0;aw-[mJCB'E/,^~DO݇qdHf""T7QtO,FFs-=Zjv~Gg֗ŤCvW b|omzn$&G Y]3ˣ/X#)'Lsq]u+Esb>J`HX6|v`>/wØЅ!|ֵ$5{83;13fsZ}$t*1SɀӾ`0ai=mu!RMX< EQQ=f NXh0I`"Շo|בx1jL>XI.^p|D5z^ҳQq#_[vNۼ/XZ8xڨ!E,vjݶ]Ƹ]-T q[~э06yF\xHv rMucW8!z ߅7cRPd=aA v\/ 0-4O`d!,rZoo6\dƑY#&mG< ҚCH5&5NyQ=YJi ;KW1 ⽬s)ч}}'OEu$܇mq> Bт֐tqKI;:=v{\oAYtzE( DKykMY.Sl U>wѲZVgaoCknr Ei~)$H>'vA# m:1gޞ+u|q)/?Cb$ds+}~}'6 N`kӢ#N_] d/-ZkP56 .­$QbXdsZl-}::&%;F'aէٟ׎~ qc2ܙ~PDS }w%ҧ@$M֋"w#!#EzEX ^'.b)0Dᛞ_:fqx{hVKT)_]{R8aP^ Q\9|..Fw8Z``CtYg01a=/.ENɐU-;\e* ~YQ5=P>{V?VE@jUNe7&}'f/D\`>Oub &PU&`oqH&i`-($J,Y&ܨO,qQGJu.dRm5j5y_zR*q{Q@smFkd Hqv^:yj@j'3rb>iɩT duv ew} *D")+wVT v|vᐮxT1G@S#!7@LGհ` ߊO, `9NS7Dt`QdaNlHx<ȑVXA&݂[!M%L&Fhc3c%ӲE?_= ^Йܤ،Y`ǕO|ވ]Caps>8`؜JƕCT- z}$@bX9 x&/C} zh~Ga0E6{(V%~4 `Lm K/WԺ0KHiQ zI 4POg'CT _Ujݩފ>#SXy`aIҊ8YTp}*X78;GDx=E W!AQ z]eɣa-eEʯ(Hq#GYkt^hxY#Gy"y1 :, *A(qb:!UMH GBP o%[1"*Q/]5>wjO)A>ګG/b4:'ТUGHQsV-"s|{<=UbLs\iOUA%~e|՝s,nвK 2} .%g UQ|ͺјHsa[ɐ # 1z-kз;ݳZh~r)1V5eh{du_2g g+ǐdxBº9G{g`}c&  {7$*a5UP;?ZiǥT9ɫSAJ-qW⨲f%V?ƃdT|5X>º qzV--|Xɨ<K KY j>uʒ#@GGީjuzW)qG &(>KҰRn+j;F/[aPr-NC~:1W>'F5e!#+fᯡk;9ԭ-efɥh$ !V<8ΰ5yEH6KTqśIΔ)ٽ;Zݫֵm#3-ҧm=ʩ.6r7;XtDj4zΊn#,oVwg6$qʥ@ΑsmqmΧ5uTa9cH# L{Ma?CY % iAت$)O1n=;znFz#v JC ǣgj-JyIn(( Q_iPN*.ªMה+G1_LkdJ CՒѲsUM4u{~V/ NmlLvX'E3ejoZ/!/y4ka@\ec`:+O܎Fj&A0ZN:jm9j#/2N_6;,:^KHCFڤ& X4`*›X=2P"3X@x8mB|.P`Zndy5KWs$xFۊ+`?Ŋ}+3\3hbd&Coh/ [=.8+I1[8]]IXaya%DWY!rjA`jvYo7$ |l(Q.A⇢<Jgrmz^0Z6JyQ~(nr\w 1<Oi$R'>{*<]/*5̎o<k8@MWe+BEZ?BD2|Ba;dݝWථL1 4{9DF4O9:/m7NY{6=K 1  Pabİu,:|^ Wm::;j-nK.9Hv,cI3Cϥ%GFwO&ey/@n -f &jrFo9u妯SbOC&AyDofR y,kG=Ń;>:xk~k>^2"e fm5tp&sMnD,ڙݢ Ι Wꌨ|) D]D؅# %k{:*= h,LKHNj` KjnJ cDs(<5?H5}/Vrt݅^jmއA1_wjnjnhu[-$JCʗE4 z 4A{zjnNz?fmʬK.돬SWsucִ|J/I?㑽ʑP$ivd줨 ?m5PjHhz@KxE~Hh<KUzMQ_X}:kGO!#TSt4a?gr{A7id yd6' ݕ( V6}i hhʭ%BXHn~+-S6EqF-,P@R3{M 1%)O7ݴ!#4x+Ow&|%U,k@be)߬hj}t : 0 ^ێR05nZzE3s t,rYg˽w.݇*(G_-Bdr$Ol]`5i-r@'Q%4G}=glQbE!֋9Xu-4'_DXSw*_9!4i9KCl=?iLZT~4%] Aߡ4Ǵ@Hux//c-Y{*0= ~88ur'C^a4,Kn̾%}'-z 0k5̶Z/sT%dj\mUaaLݕw}J&u;@ ]9B,8Z3uuv)/5p}ԙzMp4Ғ {dԚe9=І5&4ۯ7H1UnN7GK O'؀&4=ap˪^b:z~v9ش{nx@*)U7b~\V44M*IʭP@ M3lh&0aEʨPN|p[8Kh`{@߉%x(765_]}jb 7,&eOsgXшğ~ax;isϞNX sœL7D!`#:b%8qx Kl(зuClb( AT1ƄV,qM(pr *pZZԕ ӽƥLذ D"jC-2~p@Xj,h]M| ;83$/xe|ˏ!tya~O93B!#cN@nj P {  gjL8_b= zb;؏RhqϢ!_[59H7tv>#fҽ}k-¹q/oGy]öKa Y(9π @gj)Wq`_sJ'Kœ]R_|-ܖ z憥C E{~Xph.5nNR]<|ɏEDR/|5sNs<_/ksZi+V fٖ?Dot+_s4F'U⦙h??T圝h>"P#Q<2RV7wT"W?_>_3TvbÙ6X|qbv:XN -i:Hp6 ,RklUQ E$G@毿 š !w5~ "KE?{|n@$ T4E=٭T"n M~gRAi*%~nxl0X Ɖt 8b ][$fWx=.a_T،Y(e=/?q.' ]LzMZt>cH. KMd_ہ@CC-GP-ETHqJ\~O8!-lTAthL]K`ٱ#e$iA#sr SM{GaҿlJ=GrJs\N&Amb-oB"2ٔ~d$yys~bAE̎GFqż^YS&6(njKIXQl.S(u+e>:PvglM nh$NG;͂PlMؾZTp|Pax~pm;Ww?ͺbO}0N-)o̕zt>0eMg_G@E瑤0L\d2_һCtq{[8 3Kn!%qF؏s- #AP-ja@uQ k o:C(F j7R&V1VSj1;,񳺘,h~bM]SZ Ԯ=#0 la Sy-wXm| ]v-E˧do{Md谗qM==<QV*2ȋ]:FHx'3p"n0VBTzx4%DF+lL~7ung =LId]'@UwL2'ZPåB&n,@d fVۦņ-h6)M2~tT*5#~'ߖ432L W\byW_ yˁ?KEzbp$ Kj-b<2}A^T2ǎyӧ" /n lc 8j^Ni“2"R/bE{vv'&ƚ`Fxb: f,J5:`0Tp Utn2h.|8{gYçB{ KFwV90P]a.& +S}Aet Gv@W_ @ꪼxyzN~woHBly ԨY3pI5/^RAJH%^D v&O80Hgf0k[VStbP'ZAV{RROYM:֗l FoYAz9 ֞8~*9Z}>1͍QV|OkO QusAp돟LK<Ȁ yoG'zەW& -0Qۖ쉺7Fnj ч1`^rXK|%nLH;CBaɻ1|r; 5Rn$ ^.wM{C}r~{Th+~X% % DdXImEk3qd?hj[] ݝH@Pí4ݍE76|HmFlmxۥ1\bZ$UleI!CM=Mllyԕ@M2q!DA0-~Dz Rw5u옏=ꂨJ>hݢ_9 FmpGH0Ө\=ꐓM!~-Hpu&\xȻ̓,+naZ('ǵ#)9>`Q xMPVEdS*g{C\QeЕ3>N+ƣ-%H"yp9TR 1SEQ) Wp[v֬Mv%)aӫC _6u`&qXGJSr- 0X M& 7~5>nߨ!,MkLCP~j њ+9 tp+aј~8؆$QoXijpg8 '!&a3nƒzR%T*ArX`wŠ(j@0SJi;6h-~>wMU`8|?8ү7txE(5jVmbqɖx9գKϲ'T8T8^B4]ZÐYN@}*`0L~02o(267٨?/#(*vKq17& P&6$X'm 7`3Vo]($]{(P`YDS/:yUdl3x4ϻøCVGMږDT݁ۢ}R.""W/6$92Yll)Gh݋_-[50 B8<cR~f[!rs{I$(lnņӂ&pЉ=ABȧ@5Isx7_c*Q˺.Sr{_ɮ5"gGdԨ, /Z(e:(|,h&psRZ>OG[}4y=:as HYRz\E|Q (.?]ԕsl~݂ti8x8 3\^XUBGpk;DA!Ov<jjVFKu<ӲB[t>RP,mXw">v}N.ظt(+?- Eޘ_u݈aȹ$죺^5}^e2)XjΨǐU jJum$1&GC=}^:{!êb@kkP(\%[ [*݆+"c|^h)]pcx /гޑSͿ`%JܙoholxL|},y0}HV7AP2z5mkN>"&Wȸd&LV/\ucI!"J1#pTH2U%yf@ LgD݌8N?]%|tqb-876IY0fcvy+wp @<4G}Yvx [Pï /-D&\ެpQ?U[(4`u"K–_osKEv[q<8,yFdژ>=/b?5Cj˿XßSmvab1 UB`:SbP;}:*:f'Ǜ7AyU(j X@!aW:;I-)Ub=GV&8Hɭ-(6οVٔMN l"QUl ђKPl#ԣO %Љ/,H1&ޅ+u^/3hy)F#4Hj=Mum"&=);HeqRӈwn/?r}lbNsX5 <M{Vn`60wJpK'Z\r#G?">35=fj=engOk ByX6gf~lL.P5Z L#³'t';(iAb/^1>-/~K+KbpQuֻ+0B&ؗT*\wƺ[3sH6h t% $B `ox6kkV@ 45j;Ojqe(~&UNe)~ZO)h,F_f-hMO9H14ӆ{EX0D}@>`GIB5PK|b+odCb u-YO_P:zk/;k#@x 65]Kmy,j V'.?F,b%|W* 0̙[H,VKQ;#/Q '>~䁚MXEy '˅THdחpM&c'qh%V8lPТ@[wLĖ@oq}kJxP(.yP#(`#t!_H;ZӺZtŬ.AjrURE%uL QDQс!:X;NOir@BZPCߏ7owjpOrsbd7hN<7 5l`}hPtS8Ok }bՖ`$ B_0;1Oə13zB+/&{#4yh耪[\qTwaJh=q}δfqLq2$cqƦށF74@Gh%EڲU`^wtbxV)\}P)Ok8{Xл塇箒uf+񐙯+<F gtO;JГCa"37ˋAd3^Dcg&P2>V<8}DZI Dho>Ng܆pyj<$@lJA2 _UV|~ngP$m .]Q7ܞ %C/9z!g 7hJk9<|+"TTdSb8[?H\yIM[g|!R1@!7qj  l N[ ['˫?#_ސul ?~%?@ϚRW s|?vxҷ .a2l,ew?Sch. p?be)bE$q8Hzd fVulEz˲61FgJ 9< FHY[V{ "+ -QVI0tr)ˣ2T?^T(,.7vYK_T]:dh4G*낑T>()~߼d yH*؀Ǹn0BU!ל1c׌nu6pew2F`PshF 7jE?l˰)j~X=nx-$XVvvC>KUR,pD`RVCװuP_pATxaYj;94(%^> +#s-K:CDn&bM`%GXkI}HHL`$ ht|ޝtϿr80gޕ;éA[PYDPyn!bMަt[BCz{1SRva2rxqbG%V}PYXT #"P&}VeGWm§vymq1Jexa_yapktuH2E/ |D#hZp߶+&[v,Ik@EԧkIZFl_=3ѫcM],^oqQnPn;Zj2Gh}ȿ4h. Ƿus\#i:%Ǥ3dHUˌ1cba47f\?T<BGej *Tԍ)C)^s s k2ES`sQ0%vciƋ˼ava;1W7%^䵥?TPU3t)Wr5;_wF)>愋%f,RL@H4F}0r+CpqsvCF[yX})E8p`ae%aei}_! lLs8B݉@o_ױxiec{=n U^ۜ3"_h ?S&A4Y:щ#/jݽ+qǜGgf0NV:X{$0/A:J͝ Q6hrg d$ľFu$ڿ.캇!: =3|lj \iF8n:GgrKr|Dz1з(-'v(sfRgi`,FQ&:yg|Ҿ (㉩#~gX'B*X2WHN/+;BdP2ޟ"ϔ8j:v'Io(>1smH3j#)}r^IW9ttR37&~:B =̺ՐMSI/{%v "(;q.88m(_\ :b*o/ Ly؛ 5`\{E=B1 -LH|^cX*wH:'b q!~ma#>6η#.]t2xS;63 (j:گp<5oS0eF_Yho9x58^ikѴ-o re2jXg-X<1̡-W"h;E':oKFP5QeϪwRſr@(o(,$zOP𙶜1ѯ@b3OHpy0a4m p}Ȩ2 ?6> Six|k.A%7? oWJ~. Fn$L0fj5a>QL=:sJlٛ:iN wݓPkyfwñN!5{4e`Y]ϞaW.7)Brycu|h[PB;9mM>4Ӳۂ]򚷖yRradR&m8(Cyf2(ą'1|ɚ?j8 Ff$":Q@0._{j524#ft:Ǘp{W9`Tg67(~3QJw ̹C.Cb1|qvU: h~yMQ#? oףR4wBa'rV? #ǭ5utC!H[h69=NJ~pj򦥳E 0p_t?ʟmsE ͱ]Ba:"$'ZڳI}W2V͛|1>œt]0SGc2Qv,7kg<8{AT0reE}+Q`Òa|L-i!!znQW|;4ve\G~,\vB#W{=6z Zȝ2xX;<8shU'Jσw6{~!8g;ΚkSpt8^,i}>TP1R2nX}Z[]4k;k߰xk))iJfO,8D)OANËZW׊$y}naJa`uC?`ڂ z*!zB}<:ŵ@Ƭ"0zciHMء,gX9H)-K!{wY/hWtQtS6._yܬ js»Ш_vKXpr_eg4!|@t;_یL"7{M&o-jS} ?ԟqS&9'+fiFmo֣̜z]n(Pz^fgqfE+Cȯٳۘ;ɷ_𭪕%Kq}Ҧ3#h7a i+ 6QLM(],0n*#V6׹|}5Adg5>1M0y~54`SovbEd͆q9ڶr\4_wep/t;mu;FU 53^BHswﰐ @O׎e )6^nx'~aB$4k4p/?0:ڶe ?t3:c}o F*B6>M_SykحB $,:x?{Ѝd*FOtX(%WADĉTk7Öe֌n uQT39 rbM\׭ͅf4< e`Di@X𔜕,JטҫXؐ ' Xdִ3AX/4RkzSӧ8BOKd{b`bSzqE τrMײгs'aOҘ+gf.8([S1SIE'jP, _83Vhu\´opx%W}|m'&Ea[ t9]a6$tuFftnaaؒZ*}]}Hym}왌$[6#>җ~:&]fJW&VcZ(B’5c& ~l`2>@fDXAoUyȲ_'bb9c/=ŕ,[JCБtȀsƎK`XXH[I!@Y|j}:#8<1at0>/st1ަ p1ӕg45Gƒ ?u%'$GcMMrHp[Ϧ,;X/LA O;/Ah߱]#s҈eN'Sթ3.0@Z-ͨ+6a9PH I*"^d2=" g+?m!X۾wR2vP3Gk `a`/)G{x}́5ZᏮ@POaX]98g jr77j*ͺD3Kw~pwK2XL }'H>lT؊ wB;"Ot.t1Ku4Ek ȜBT\qQOsax'i*)t^\9hWo e'K43W[Ceh4\(s,(sB h0=0ZSIJat589k$gÂ. ?q&&9S)#&O/ؐ(yr\,ڼYhēfp%3YʔN98W3k njӓ1Nxh&vQ,g :H p&{<l}™)gS eWթ9 d";dc?⧭s,tpJ$2jD_n?n8fMP+QXG2v's[ӫN-L$^q㸗 =7Tk?U29hĵe52l̂eKn({o8W7u,m=gԬqWWsKAz$nXcL~o8D=>8L+Rbڧߴ2"oỤ}^0ռYWb^ď Fp2K;K7&yJF=w}W*é &$p(.>h^v]6O,هygF$qA2Fxx= }gC0cθpM)ۖ0"A#]C)$Z cp]/"chԾ>Xk#ǦU"ma,Ũ5pJqXj^Wcې|WR+vPw]dאy[~`ߓ5L5w\hA48dnv34SI!co1 7MgYPar,g:q/fK0.,y5{>\g 'lb2DQg38i5eIDǻ D6I~ɐ[w0ћjMη\MvZwiǬ|qk,w F`9PSyoh6.ZNO&YE_,l ;bٞ``P k\zݪs"?ФIS h!dždŐdm.UɆy^IKpCDꒇ<_XN VB>8~Rj֣q6/-]Qk(aR}.hLAHp<1 o+1K'q>d,N\ ˴UdhpS둖Bcd' ehprBxѫ"j{;r 4#ÖW ]O.B+ " }Xj '.Lzʹ;m<tkw~#Int7@G%7dmv&V>@3wCi@[?Q?<9 0Z䝓xb1j=g(%Ûn}9LS3GIQj)2XAq.Q(Lůmƴ* ѧWMCObFMfyk7Ly@zGwx!eEx 'Wf*7sk"lg I~lmV Vɭn/]p;iC~-jN$G>w 1Jf$D)7qGJ zgQN ~@SZR_X|mw|nIdρcu !crZ]wM=XqXF s>1h[ 40kn “MY$+z 'ԧs6j\;ԵaP-5k֬РP@ږɻ懻Hd*ϺN )!g+q>K=m0E|+QiW6tv !ZW `O)A?"[N zeL3NJCX3D=1̴T"LtǿU>j$;g ⽉[>}9Ցl%N2H (<%9ĸAzSrgX|Ok潰TIJ"v&:3忨0rO/+ "jYqbX;\#'$}A|Ꝺ^v%!l)ݕ$/}x%QJGƝieA۪1F_&kk+bHq E`4`܎ sf_A |!uwW^鋞;By+gF 8EX|I"g*W_a䮮|T.s7^p~Ռ4oU}>s->$n4:r-~XMV<$7S caT1>w JeD@ Y<58&@KMP"M/d[η%;BQr2*;ih Q> h*~هl O]@PJ4;j@=DŽOTZ*WU(WA mHa\ Adq2r-\^H7I7F-Uc+*YwڐYx̜Ys^o>KVD U-N!"}ε ÜeaUnAdVXY8Zua+.}j1.'T#c6̑!Qkq=!t9"B#Ӕ.'.UaV?aEz軵 |S;sxDV~p8Ǖ zx70XMwFuRGzЋ&gLs|;&oveus'5J3 B~+k-5G'=0E-0{0=T\Oq#}d_{+#?˗L ]+Uykz^K)t+GYGȸ$fu'LiLʞS8]9;l՜JuP_\ifC^EXIiSPJ [F3tty3b{K'4jHf73buqRo!F73dsu4OR @8θCjzJ ,VYXPu 6_3q!ʜ8c.*S&zq:¯ b]iDtqo*H~3Q6&= Rʌya[HҞ n308ȲDZd!w.d_;^+*,rdzˬȊ;߉1?;Y:Em]I鯚f U1]JyA2[VmIoqw9g3W?vSJ`C &)[ܥB?{Qz;."۶m8i6 G suuR> W}4lsJK$>+bٽIxFv, ZY2͚ƲkUQbeqG%ͅc>^ $"< v8.|{Y~GC),T0N~q(7R*QwNbܒցoi]bXPJY[%-3Nr]4FRߒ)}GG m/A1{ASLtCH#P(D>q(Pbn"Sܟh;1e6 QVVtT)ÿ?3++wNՓ품W7%!7 g:n=#7m G\ȹξ(ٗC^$w#7.:d̕>==?zːi,P).;rрMy v7 9:*y r*? xI!;'<#T-fE羔-4^ UpX:ؑ|n@>D'u uO9S&.yVN6l\S9l)VUkhZ=cY ØMzވb- d6Qg`{?+5\sIjSl9otK欓Z2fm.hleFvϔ :KFBs2C#&@=c?eBBЊZ+XKKH mz6t;qe6RXϐܽ- tSRzH|:;rFf%A:S1W؃#Ő ADiXWgBk?vNeՀ~ޙ児lǸnO&n,& O6"{e^ڧh(>u։,[awlWT—FTRo6djcgCsiBQ)NTՋ+ddHÚ/|$]X-ڦ2B0\ {OS W'2GnbmZ;v oCW.rQS$gl.ڨO} A:콆`nTf!s%f?笅t~E-}aJ ||Ėl?PD%pҾ \;c+}߯IJg_ELNۓme~kOAA6ԩo~cw\"]{9;)]l2˸.uc,$+A_.\m2IWWi7b&m);RL=hV?|g\̃ZŶ~([)iV''zT"CI;T*N ,GL 8a?7ߍoo](ߊ_w 1e$%yAgj"dT͠:1)u!w"<[HG務UMu4 ;s|qi?W=lq/JLՅ0v2!<f_/S$us.s+%:cEk 9LՄ M6tYyP^gJw"o3qM9q0]I цM*BK ѡ"iv Pa7`g;# #fA@sL-G$is|1{Eqp0v|0C)*%Ёi 5q3<\_-AL4CPHl.lSdY/E2SRQiVAκlu|3 Vc;UhSL{(H/tx3эТpaaИ}}QӚ9al֓f27^x^i~- g npԐ /WQ*i{]E~q_?C6ՠxH0W &%I"QGpr)Ghan!^5eM@#S(4X4M֍{ N7Z~Zx D]XT6%v w.m/ޤǃ r=],E?mӣJzC[kE1+;骸E]tzy# 1 "`hLN?>.vР 8)ziO0m41GO><;626Rt%eFO-eGA[%OTE/>E /E>`jIWJ]}mM`Nއr9@ZiҼy!Xƀ1-4Bm^^Uq`WU80o$.ɞbd]Ƥ'\a%`Ώg{uñN n7s_\E#g { U>C\|-5gu ͷb=G+9_ff,˙4,bL=]Y3Sz B;2(* zww[ E:+zբtI8ݚS˳g0IwlH#]rhvSmسh"G]_WCb=:7U uI(+W QQQOMWJm>{ا<'~ցj{W HdckQCD{t!N ^UFo5lA @7#(bMgiZr7r\ZZ)ѿ7$OֲUb^hb4R=1Y'JkV7P8U y1y$?@q1ÓU^ mԃ82x;Su/ɻfCv ]M;9KoEjd |K?&c zi%"I!ehI!ϟB-oܥE#:yHL:%>:X7L߰[d`q⦖^'%'rٍb-L{zA}/hRp)2c$_v"̛j^zf<+;I^#F5^'oͤ_Q?W|xʐ~=EaSxVªp_?%oIn8N$~c[ӥx_+Mrd ]$bOjC|.Syz F,Ͱ̼*?a&djB E!.F:FLV*x%]NDK쯞9r1{W<uҸ3Iü`l՟k]P˿AL9Za ) ڌ.}SeHL,&"H|ǡV,;g K4PQ%)ǩb6 En6Gk#i?ױygTEGoHpgːD MsuE/~ӓ]p 'bCXH7အ.s6Ұ¨"z FTt!gn 8]@uQY?aKe9pl!\gFtr<)4+h:A'Hkk hXi"7hqNYcw=DA1GEم4)AݯoqO٭D]G;RA?wV {C8ikìȐ:TH{%}XWMhUv5LwԠkbB6x&HJ\UKR++s Vt ;f: `"ūژ#oNS񚧘#fƹIs`|*R4&,15QQ[[wQ!=>9ĶU&ؖ-Jޝ;OyxZ%&7 j$jO ^~g2 3Qz@ͳ滋~yqDb[>̡L{`Ce'f=vt g`q>Cm!6*ƬCEtc\r Ç2MU\ ["Ssl(ccnGNpGtb|g4*ґŃ!p7sŘnҙ{\0yĄILe2:>HۚL 1A@\ib11Bߧ, (لr@u&O 95kq P. T:ƇB,7^R^t*4'R~ ԣpvVSE?a$ξI x+izJ7Dvf9E5Wc6ˬن'fƈO~JFu0,ۧZI9iNH cM ]0I7>&OR~Uva w=/%c_ ]k 7OHA岀 8_"巎?iaJܾӑ[O^&tqζ@p}f,um頊ZMb rRh'fy,_: J }rI gEnOM\'ݽ]5fˑΔj|jό_Egv=m}t <ED- ]UXߕ:KJ1gҭ#jsv#FCA ,7KQ d>X)( I쀖ncbBC}i{f^|+vwx@/z*_Ч~_h$iu-=M0CmW]JokN\aƄ/-u⩹0V|ReqJb.$<%)}R{ Q%MŢm~[-|hT^;t& +ذv%y Udž~"N|EjTAIߍR ^$jx=7}5hC!f}Js|{,P'y幁 4=Td!D -3;N9WhA/ǒұIqolpF,D0$R>~~,AǥsΡ!߫& '^賋Ĭg?f!ysZ<(Ql8I9n)+sH}skak0Aڙ5<׍.-Վ i-*JdNd6ScF_ 2t(o2FgZ;eU3!Z1m `d ?E/PLiwʤhpfOy?"`1\R `$pc.Ȃb}4єZL:>dhIj iB*27kK /P>sŸ,乤P"?w5`0'ViǸٴZA@0EDRzs'FzدC"ez@w =SIEgzV,`'jP_ rpg4!{Z]@Y^;|E$:Vp_40 dbVY7Ӊ?n\Rm%{hI+*Wiu|;O_L\(uQsDlYj ]6WjpxX+* wQ$kb@A7c BKhg֚7.(-W+K $ O1|U~:k>:jS1qץtZe U)hR#r|$Z\8K!\y| Ӥ=5K<ޒ5X0Vq\^/Q.ݱ'`R0䘓UgnFnG:;4.WE]Gɵ!1.L8?k 6/>c,F v|K#]Վg/r>L XMV%0@a9DTG3q([JQ 5~m$h]/L ZzYl<헺ym￾ VVŧ1C4]JpnW"E1 Ooedavx5y)1x ,.#LJ_ {0J@+:i)L?Q= v]%qEڠ1Ќ:CmGareXeE(mYѫӂ@CFv,&a6ʵ9Qn1)0VZ=lAy=$]?7v vJֈeS/5Wu'SH9悍G){3H\ sS>Z@J u&zw!#|͏08U[Ȧg^\WӴ ErF)`VaK NR "%Q#-⑊1NĦF F@(#wH4`lKZnBiQBy63 [#> A$ |d= *YwBߛ3qX-p^r ˲#oצa adn!)memJ?PD)eވ*ywíNe3BUڼG*XF ks +aE$*r|?[?Յ/V&7G߼ZeNp(>P}]ehBv!X(,^\]ם쭴 (TB VR}R[# \Wgz=|  lSj"TفG&r1CWt 6)qG/=+GY.=-'QR#KE쎱1Lar:|P,̞= ſnO?4jt|sUӆyh-XEkP.Kg@@sGΗ(v&^M(XM9&"j`6D^>& 2N| Mś 8͑,78 !mJ8Qx \BL~W'}_ bU}쇧 XCVs{V[o/ hN().i‘yΩ W!{?cF>+=(@ > e ;Vac~:yL5z{$wф¤)(5l |کH"S*vH.~לvLm9DX2uaRYG{.Y>ы x_hBєsF"T%BK&$s paGՔL$Ɲ(~&d֥>jVLgήUC*, :K]+P'[Sq3P|di ǀf@"FPRõq QvF7Q*"uN+~*#曙$UJK+yˁE>c Ʉ,ʭ V!i,*.=Jy&)-9#nQP`ٿQ3s7ЊSi/A[~?j-# },:jNP ( `Ow-F%Vr::E6QnKBD<6c6h%Öt`JGs@*OaLX'/2b%H0UIG]@f_7V+w.Vl4vjK4y0}QP(cĘg1Ku]1]{6 %VN#`fTs ԦCVtPya\/g{&BVo$y1HZZ;FlrR{/@n8Zc\dZ3Y SnUģ⁄o!*0=0M^P3Xqzߣ`5mi#&+*lޚ1vF7vu?kZWO RHH0[89j^*W%TRֻh1wz7?ʭѝˍ)Eq-X@_ls;Ran$TOe`4rM>HcZz<_Hϓs%H`MezMtDnǛ3ODBM).<; JܭNz@N>:eAWRڮH)n:_ ĦlsAwH;W;r`r?:&"aMdW(." f{mٱn6m+Ė_ksjQPOҧĪMWfv1ޒ^rOr9kN31]}(<>(`FK,-}Wi\.v>&ǡBb rկ VISWĒ!>U^u|ar20dEm)l ,FH)"w{ܜJR^fr|ݡeV9P7Q6 b%*-,4YkٌI+@"[}(=H2dr,t-_<ۄ;` %$Q)1q}q@9> m\Ps9|]t:#,\S7岦23U$N|,uQ1j^sY`#XQ}M<(3Z6w7^·k.ܾ,,]Ts{^~G=W3brtfi ̵i~-q߹hf$)47cs4 i8X;ty0 ?ޑr!7^ѵ;Az3I a'}}k꼓Ai9Hz[7 k“p=qlL%d5`bwiN_\sW+= PX~;NbG@;E koAw;G@ NI~K`r7O!/E|Wj>|"CVIZ4@s)B>;cEPÉ [wAH_Wjy9yj^+3m=MHW8ے\'C87#f^X32..9Vcl,0>`t/::65r锌=(WOGqp}MmhvYح]gߝ<=ZHX7\4Bt IA '~\ 9wګ8|C;C,%10xݢ?0(W($ +2H |Nq"mI*Ko`Bdvb;r݁ϥhfަ8@fPrY8[uP5iD?'(gī*,$X݆SFVxY'Z(Ln:G/mz&TjUo$V)ŽuZDW1sv%nxݍ©WaɘN־3CF!c5#X߸w.^W ?!(UP087[`ÿ}NQV&$ Ďa6AdqApFX`)C2Kwk?bЃ~R&Ha-2 :!K;XfX$.%k.RUN*9Ī8%N[q&8wd-ASo/|D|ރ۬*s2dyh6v҇i+VmDPqWT7Kَg,aH9:Xӈ7Dƭ&7h!D.-JܿuoW=$3ۛQZ/zndlTH'%ro3"ƣzWD{+Ƕ 'G@1JnSBɉ2dƹe:#x#LJ;@w5~ 0 mV`9;lNΐ"4k8xGNx-+=Ոו\epJyH2>쉔o?_2iq ; NH ظdPvd;hEqenCP\Q#__Ƭȵ|꬗2*_1ؒˮh0ˀmUиߟZ J$. PozSKqnBUE0}V4cnBETf u=hsg7S3^C8ڲ+ILrLE:ˤlfVuӝ+Z:lbPߐZurhǔ 8yZ9,̆f=bω)f7\^Ԅ{3I:[Q|AKRImV};4e$"YY`^C6hhty%ЖJUQIg؞[vݲO"bs|N5F$ݸYzK6F2`6g:aO`5#`E >Rߛ[/2E2%A#\ljnchTw8.=Jip rǃ25=(ớ)_bǏ,ƪe+A;^,L2b0~z K?rukf:@QJzgg9]'R? <`vYpuo1+Xׄ]kbƲԑ-.QPg_Y $|p$Vo/.}Uxcs8Z^g8E"Z/=lDwmy& е}RS :3{>Ulag23ykl)=35J{H #վޜh=+Iaz:h|T]8yss\,K*{kk# œRӤ?S>vI崲oՌ,Tv`q ?ȏ94Z0YAJ^14&DVF,_ /:%fG}w^%%dϡ ?9 !53|ँ:)*[L>vlo)ϚLܸ2~tsl<\I,Αُu PZr<A #$UW[RcμKvwM''{힢-;(ebnjO`9,NVB ,-[ H B #\R)E>iH`zȕa}7M4QzYia~hg~ ut WFI $\ 0CEON6vii2|89\Y,>b9L|-%䦽WJ=D;U!d1]$89qӜ5.ORӖ`t >ǝ(Zk Wqz*U 6U;>ODH5̨"KNߓҧzA ݼ/"@zs3Q;NLԍD#r;j~T(FpUHPlO,횧 /[TqU($,-!A$ і6} )kI%J=XG.`F?j15XBk`w!m&88MV}JH}%Z'LR$IWWRXnZƔLNэn+6w0hߣe |QTՂǎ{݂''B26Bs1pmjxm2yG|ս0oaf$nj63q1:'NnyюZM.,62FIz @~Hy)v^ j+δrh f+׫l{"aaC>lp.GQcW0²7IF u \*i%{{j{:Pׁ2*kX*QI:K .sGEy~Ͼ r:[k+;sEAd|.7sDtpCծ, ?S==rkp'Bf)9ϟ1ƹPEt88G˛S6uv9pW.(2Ua Krn%XCA~ǻF+ihІL;WvbȧZʼCPʉYe_[)[y|\:KqK\^Z@{Q'kpo GHJVp7v2Gk}ySm-:.Xt )VKf7k%~D{V`dD dAUi_ ~Jz# hq\.>&ET~֦0 <4adW9IKN(64UJ! Gmo&Lj's>f$j<%d K<(H LfqwS:Np8f*A#{1G#ucf>FK%dI^Mddʦ~xi1'֬H_.>7ɻt1oW._8oU9]Tf.;t쨀8qݧ4xF+B3{Nc;i5VPD@`Ka N|kie[XFjT9wBЩCAF0LFF\jEljjt%G9,8џv{~dFm˵6&B,ԊVġ)π@sQ :[2/#̢rvW Tx 컴NZ *=Ɓ[UYP`[ዓ t'-΃9ȀU0U\zHF;*@ĢT2>BlZF|o"ПE3c ODE\89 wh[CMXcۍ5㜥sL[҅q 5uSw EkB ΆmP lx_:O/͏zTՒҼŴg)C.gQfw`ۆx^/Γ5ͻʀl%I6# P#LIQEC3OD<Ee$-P[ N\r)1mjT>L[Euɋ %]YKp2>0hmU*40EK^}#Kcݻ|B-'5g>wʯJSjsj*&jҵ2$@o)U kSJJOZƁ\(e\ pӊTfE[F8,vc*Ӕl_%;4=ȉYn81M] {XCB6]mn& rxyJxMdر-+ჳVV?ʣ[BQc'LM j!8; Ώ"݌J$\C܃,&|[}w(ʊ_W9jg7EsO`pNB9B&*pv.: : Cϭ';8:)80Z`?ww&KA*$[vK\:Gm0#_ KKiJ㑈~I?T`l'MnǪ!'?!RƑ:/ƺUih-$R2kdf7rOD\^ uO[Dng<OnN_/MM4u_U h#toW4VJ2eC\vKLƢ@:T,%q+vnsoE(B4!]Y_~fyUwO}@S(y@k>J3\쒀iH{mE5aw]R%/{] "&I nD^h$c9 9g.F J*O˗EH1w%!,JO2=ğvo>:baܣV~Aá5_N5" 0KaAui?hvyB,RnW1T^nŸa^(bmʚíFNF XڷRhd&m'U0*BX$,Ec3B<ۘ$K=rHf vX_0D9R/)EY w8P=8(W&+zoWgI46Axk)]l򩗅BA4ƲPJ7[qy"ѹ#jBn##yF3|S"ى2d51CmKTsb\D3c(y!$ā͛b1(5x# {RV'YHhm]HȐ@xu;*TN72Q.MfBscF }ArbY[QTdd0gۧ:X{&A<'I:0^TQ_nSv_F$٭bsDei)K*)"PfWANZC4Ռ|'hocn)ĶGΒe@j#[?ɹ74)d_leA-b=Q PL-PaS yu8Do؍>ZR)owkeC@z/AN&f[!1UnpÁ1z瀾$G$@zԁS;M_yMn)A#l.ķLΛkAI|љSE)HÏ^[YζUp`B"Ϊ>%r@:wКɅ ;;\|v7̰Z>Ss跔 V*\gP#yXr,˂}e Dɜ0Q{, */LW+vC*RSFWVVJYUiFqĕ`Sx]{fv KT$Pe=: T:[:T愗iDZN6P5nDnA"Ai5hѩoCI1"ɲ^ 2F(EhF+DJ)gWGđlh +8β fӢ`62%\voT˺<θS$J8qvaQ7ET)赖Fh`6Qƻ+zRFau4ڿW嚹%l[xRl $6He(S 9u2 EџE5^ l)K/ꄆ?1u >hD,NluH Hd[ DE-=r&qgvbMb 7+vLȎ2J\/gA'Bs*S$\ZEunuyJ這]#k#0&/gkh+ #>58 —C]g<jmٷjY<+ïg bz5U"TL1"5UCᶋ|J]/@gE{e{"#CB5&҆ES b1&DL|tzwCD rY+B 'c}:hif~G:;BlHzCK%r3,aT̜ިvXi:Yj©M3>m#^KDuZHf$ŵ k>A5 2qv.=&AM5l=āĂҽDX5-AljZJw…yV.6 maUR%əo{ _$$\wHP^yVx__ ǖxjF/k(&WѠXPk"uD yZ ?POCK[V K}PjW2F~7m7-:M3_86CLe=<)4q#h+R R"0BbFVs- >NzWUU9efgpZiQ|ϏҾ:Pv _#3ls' `:v ?+PR_~p z3Y'8p ]&?% U+mlcCqsPkJ î&Lf' ~TcԲYz#D|]p5"$D O̒겐Fl-J݂ o0c-o% vV{Ppsåh)#8@;\f@+1uԟrVh,X;Pe CKQDrBB@av,a[ˠL\Ī")NʑLV7e">gp\E!;CsV){wF'/袵-YcJ5DF v`C-0#.KWjr|,[bZXc¾pP+<dM3H&,kB*9zPlXt?Vu{l3c'?ӞI,ozRae`#(+%tp HVW[P@ܨ۾$Õ'GYMTEN\i$j ]X3k_P6(Ix&ϸ\/f8E-@Js't(m3!NGr8; AqQ7[?hv<1Y#Edy#A׌o1(Ab"[3mnU@]V{czgDX>@13`pu{©Pz !VXGҕ8p QI(X=YW͵A%rDb v V4n{Փ\9W=FØ4FaUE01y}j3fOTi}Kfto%)~/2 tyܣ؟L|..^عP H)VĩK{m<m4stֺEߴ|0l1'p$eI]s Ѷsg_YUӋ7\EjQlWĪzlD|`.u( LLW)S.Y=Hwݥmv6ÍAZ+];N`O7%ܠ7(U%)цg!񷕃ʧRԟeԸU=ee.W: @⎟PgTAaDzs ]Fzbf!YRw$dwj*wijDHǴV{^;|Jq'ʂwb[i@XZ}6LxD1[0C| !]ؓɟS O?e #_|ܬm=J4ȵ.+B64V # OLU*ӼeT[@ޑVve[:9fW4`a `qfZag4qޠw(B O4|c9exymzeo81UY>iU}Hײ-(iMD5Խ+FB=P95/ TM^ͥ%Q)PRشCQ DEHr E֯:"!К-# OU2%l"Y4p/"PҤΐJo^n^?&QD3䥳ztzw&0"Usdkck=:pxU%t@w2U^ъ*8dQf CK$?c4R+ *;Yݻ\ aYT4M 6Z,X7ohU,u" Lq>Bd؜R|܃ءxD~V1szЈ+>HSz og tR)xIӃf߃{ >R=M𹜄pQ9>a䲿k4q6':)#VcB$LšK+$ syY ՓStJ*;tpНϨ^!jX|RD{iS?EboLdE]U>^B}EvѝQ03v+GvFP ֽ  J>h%torJ@3u_PbhߚRSJM+8㑍 \;IUw{%0aRWnhS7L*;)4v9~adBN;#\,l%ӳٜ Q`;\'fZ:0MG;zrk\ Op%(?pﻺHFI pa (vD Y W2?Iv Z "pz$#s2G q=UM ZjȘ즤e ٮ,;崦#ץ]/{C-8$GQ>vRk+g}f[<E׎E{E+㦀LH@keEg!erջz QQܴ5jXCPTpPbx-كC紛qW--YuM/o@A: &ڒP؄N'QiYw#X_O/x,ܜVT;sB!$2 wH8G.Gcu tTa\'P g)C"s^M7jS?q3YMx$6 (kg$7Vt֙'_SVmqlfDsۼIim$Zj k:u!xun[ɓ~I Odi"H?t׀GDVVӎR۽?)JQ5ȶ?۞)EvA.' 69\剛Oxپiv* 9 =šrM ]D^X7W fD˙!ga8ay੻A5K4!Dqdd8JrrΥg?6.@P|O$%Mu|Nv!4a4Q͹)X[/Xy?3Y! ,n3p_!>.cBGz?D+C@R+Ġ>!N]SՋ~?&*n9T\"ΖF]̦g&^CM1Y 0A4hȼ++XBJ3Zt ~Éh` :0-R#>Y5gؐv8l;ņw\/}$r lW"oY=Fb}o8Co/`ZnXBh&dқ@Ps[ ]$?-2-iaꗉrfj9?enOJ y.D'bl+z[P%U)m;H߄nğՉ`kS-$-]Y2UC;;u$gP2pٙnxFK1OO#%>;$ām>ބП ݳ4e. ;p}\@~#Wv4*/6+&oBs^䧠å-F rToʼn&CH4I żϚP%0u[\>εt|9zߞ~(mWk' >EOte^qH`|E2;*sMX(#),p[j.УV2TXBͱVnnD|uslW{p.?5 H !r~t^YM(@3:O@iLO9WQtتdXd0 uˑlYcGPei饇S[n1ָg4MI ~ɵ `/IIժ\5iU_ZYD7kvت]A}|yLF|̳ÀxՆH|T{޻A12GɿkJCgZ3ܯMw*Lf~`ȇ]}ɰuep@ZyNe8gþ5Gh̓#|*xfpT G@~&!.m(ce7&.@\9Tjk[@yA=(HpHδ(U䤬Hy,Z:29uwEVv-_]Fn[>_2BE 3m4( E#AgXԿDHapiF+67jлA ;xNro6l9n@!nv׸[vJO `GN/dEx7k=Xq[RhN)ڱ{۵gN*䉚@a 91^wIόRb)xթk#ODu}PI(F7νI;]|&3 cxAurd3XkfމP>.@7XfgqGTǜz"{%'_d=)>/0?铪ʼ- xSb&Q_J6- cQ7#tB}]lz/*RHx[4d4JE!G$}R|eYz^KHm-:+CL ^?&=Aژ,6^w sզ  r$r_p%W! PjBlh@BN]+ /දf7Ξո;&(.[#ۓ7$+(`\NsG& #+$Ewb3TʥMfC;w>匨>Lɶ`q0)Vt> -?.x;*WDw1G{7 wKUX'J%tm)Y:''I]#vvVَDucq\Ƀ"P)Cj,_kҴ0ШT`$'@)ϣ?LwKf`Srm&H<8(Gbvκl|]JCXܞgsA?'oQyJ#uncM~"L:(ɡ}`Vį/D:V-;XƄݮC <)jtuxЫ=\D/fmBO$<|Hkfx;U#y$ׅ}?/땖&8NvXT'&\>&D>CZ5pT whP<.Z@Fr#u87略4HMLh?rxGށ%F#9/ߺ=>^'7H1 4EAe(aQFE[,P2#{LogqHzjMaW:;B]ڪo2Eb|0bZƁ?\a0OA#i%¤،JcXBcGRZ2xj,?Ѡ{9ODܝ7  'A%P&rbVqeڝ[ծP\ ; c c"|~HVQ>qc'"i+ڜSroݞu~/0C_nG> rB 1igrnL鰆g7(ִ+0BRP;%Z[OF5'7wڔHdYNr>VIg/mjt6'zjt &2#ܜR <Ě ߰>lޚS:LF:H#.P"  ,H%Z4tw>Jc҆Ƙ%y7a19LnsI`r3(wCd9|bqGn ߫țP8yƕ 4FQ| "$Ox{Xh ]MA"c'7|ҦF A5ςrIz|j:7F!HPebYdԸRuɹ}{߁"uma-.Aykύ52A)WJ?`>WE3pQm}ԁ7‹U c lc@W{t)W=ׇ,2X [8ZOmvc*X(Wlg21V98.goЈ: F-(2 ^ @s Z_<\刟`Us?{,B1Kô2y{;'>BI2dK@|ԙ)unmHA*j2K|i^,7F}B'0C97BGڏh&G6tK?9DN}j#dЊS+[T+$%3XX+Hv C"ڃ=}T;wН$Oo=dǼQ52G9HF< u$^|I OᷫGhnx/Y }Li;J,M.0ju>n^Q2X>q`4xgrQL;ù2giA.usq;;9o+)̿0 k(!$Idw&3`֢H}i#4sGOx"8o]@8J~;c$4~.R'F=NT ebT3A[$&sR-8o  cv=S3պ#.U o)h#e@C[>=Hjb Y[qX|ێoE50;DIvgմ%7T{YZ Y$2 my'?̰=oJizw>Z/ 4B&=(ӓ*08ɧcFT2;ۣ2lmxDAd'SBhh?ly*1zm>k6on4nnuf)Ge~>P͕MC ?qЯkx/ţhih#ӈ -gkl4zYvB<Va<꧲JnRmt}_Nq czcMk x[+Ѯ$hLVmTd z<&wgFQlt c&3fep9Zu*yX 6 q4T_TÎƽ4QJTq  Ġa6pKK46%dnlTC53*ΕUYb cSUZ?!f&£Ie_35#6FC +[뻹Zͻ-L"~Ps[Tss7>ble$YVjFS7خ|A5DM9<*|u&YI<N:GԨdK$(3잨;馦bއxPYӃ2˘mi-(Cޅzx''t, 4*r F@Z:9k5C vkLOv^qrIq{RT+7dT?]Ku޵ c/VHF$@JZVZZ}z,UV`62"0#ЀTNA5?QRmodWݏr-Ms Kꅍ1rm)'XZbVqui_s؄abܾ`U8t˓2i?IDpexQ' Gb&"؛WlbӸCYs7ҙN=|~'r"̣e+ч]T `٩\!c4ԿPI%}PR#{M05G+k', E-W= UAj9Jtx dɀ>|LT(P/Ym鉚YנD_:#͂pDH^6 !qvzeҷHjŸBzʸ⣃zl:_윉!VaїJGcϾw+8l9(a֏:As3CP0pw b(YTln)A@yAӻN[!u,E͗02SjｼȻ)ݒy2K>gN O&OMUiJe-c7u誥>),+*p-dO]C4 䶭YPW8/(hUMzj|N?s_4)sʥ>żUnW?]r1{8M=ThJj:a7P= P¹["dL7<fA t!(Rd<]þ^daYC=F }\WUI'[p :u*_%=.< 6=J!oY%/|%s1;~O LYrdz<6ӆ\D"* `` R-j$F +gk;JJrTRG*/>N sȲ '; A% 5*\iF=.}ZlkI 3{m>6_0m(W~8PUk&UۂiH:&X5n<Cs{dX_@G}yaz6/07D4_i4ۃjoHUR[j2,9M dI& zeu,d19Z +L RwΉIp0tx-FGA݀ÃO){ (#wLJاnnjSݔn۸F[vxY2CY2F9P Ud~j{4Qky{ ݷAT1[q.cl vBNl r&awUqjmydKe-5'bhƺA_4B #`"`r7IY`B{K=f/ gwbchC8,3)ۉeGKFM->kxlj`ҙ.+ _fd(id 8ї@'4TlZ{j[!Eitrο]=.iվ{ 뼢h5_b޲5hz~Rz~V]{i6S5rƅ?YqUĐT} lŏsi.,BY}ϣ8yPRs}Flӈh6Ͳ♪}PP"L"9x)\2sA 7մ.+Ӹ,"A '׆)36Bl²{i[ሎ+@~u`=J*|'u||Q4wRGlZH(yҥ4 ͧ13CSe[a}~ht$5}CML9 }W=t]):.0|^ ,ڗSve3Ѧ:`{M]&O*>'3D_*HNCKF]W{ZTn1-E*(h|dZ;ю7YSζˉFl8Mk-;Ds2Ƙ}^Ϊu Z_A)A:2t1`} ;M"i];|ReX.;z4rjƠ$w/#IH'$h}:Qi>YUN,A-oL1ftˆ򸂽}s:GA6YӻDzWSils. ROY-lk>[>(=xe]q[% -cXLrSyoRl}#9P6 {愇F]ݰRj`~$1!oLH%h!u|kRЀl8AQhWkVjě>DƊH.Ҏ#^mk2W5-󺹘0cei>1sL6tzM>( g#s\gXP3`sXwAX r}Q#-RQg^C&c̖jhtH51 8g@ݕXA+0겴]'۫ CӆUN"ikY0yKts[*)X0FPʾ, l bmK=3Hbp&q"b+A=C YvscmGFn<7RN8Ɨ`?qEBK-֧3n;y Oh9Ƚ H&|RʇȊ?M)u[pQE - |'3bJ I5zR[ɣlRLEJAQؒ`ZA Oc4,rtP Ct۶Ք@x!;iwb{eJjw6Df{{ <LlOdL? KU+ꁨ/)z+n Ȱ1z@wJvJn4f߿=Hl\ vZYD49LsLnOʣ+S(A&\C4w`; ɑL,HKD!(vD4'oji떾1H8_wH748K`u߮-Qpg1cDt㬕'k_d f&/շMFl2w4,䭼,68o7YBmMZp"A|U(`(e!;0%q V#%a&fa bP+jZ0lSs.zDyuu0Oj7&c3(wH}Vli tWЭNj٭H@3?J7DX^ Gڑ2t\SHϷM4Q5e) hJ!^:\/6eS q }sp܋B(aWW%!d`tNK (Fya[O;S̜2? gU"^KZtځчӯ`U߯zT/+`GL !|/g<&39 Y]e+3eqpXb[*}q,` , +3c->(>h)ADiiEĬ~h,Ԣi2?K6=:X%!G3 ˢgQ`9GY}xڢjZ΍&)z%\ u3V?NT~DXH };VN czo&YG1 2uŠ'0f*EXL7iUȀ&b<*~*@`>>`R 'T'x4nX$7]4up : SOY#hXpw`mx|7@xf~*A=˦-Q`p:oj>ݷ!UAC FH/'(z)r)μHL1^67y#N^ml9q姮 ABI#(ύZ9p~*K\SSC1\p<oA v@7Eä7}!g A‚/UrzRۙ$9_ [7\!`JG"X:G f/o_dpʩ ;"YP~sP]i,`Bo&>z gɧgo8[JۨHļsȧ =6+@ Qz}?CQgԊ[GKDƜ8h \ 1礼yi(<*h ?~^G2kQBsCKWZL.-7UT5]"Ѓ\Sj PXEf ,MiU^E=|zn/Q&G\Ŀx[>fvDͯ]5/ )7g0KB"ELب{!th xMS- bmx}ߖR:ύevv@Op7,DbN:˺H֑]jriNqJ@%K^qTCYft^xMv²-)?=e;tZ#$TyCggx. *;-{ւT~E;6,2/nEj`Zm[ C#ӳ2ʬ杆3LlUq&8N z3X6^ il4KE5?ч?7qnj*y I0l7ړtq9<$gRcwugY:\R &Ľ%Il#V D~Rffݞb<;~rPqhI`םhYVd.8e:dUoRHw0}ʝvJARB*3$N;-gr,!dHvèQe8šJh7tkwy HG±) / C~ sIyB3{(p>T3e+ǟFBS&x$.`?qu6(nD~%S8DXDsdx3o>M{sn͛#Jq;/q#x2v.jGmWl1DUh/".OL-c%Nr˦P%+,קDQ^ժYecҶW`酂8\1s,Pfx8QB "z{(@YYSkC\ 3Sܛ?GaU@qJL#ֱR6*/E YP0ϔk)P<$)5_N<(܏n!4QM>AU^(Gϐq@LBkHQ-U)4[>ʵ'7%^HS#bot c #I1,]꤉$lثI!)j)pr`~`gqrzXYV7^4 ?P!x$%']n )C>5PÁRJ~t9@jj. y! U\8y8RG*ͦw8$R.:B8KAىeCl즧0M o 5,= n[1EuhOHc A჉f?RA4,e>MDOWZ 78qp?skt䔢I;1y* .jRʾbyy_{&zKZj,aBq0YP! [*7]댤C>z$o#A&K-opȺn=TRmwdu p2 Z~5ҍ56-{/{G?n[C (X,-$= F` U(e6h9q$uqaFkV=$*Jq=#EAvF7K=GDtOƽ2/ZX.`ŸB6@Tl \bu}y'*ƴH_lMEW؃W}yIn׿>"73zM|@ΗvA$<_1L:Fb"V)LvoC͑|2sR;tCTvm ӯ[+ܱpdo3AGf]xBʃhv%f9+jZE,}g^% d;^KFlݣuy;i=M$?J@tPSѾ[%3D :r5YWZW2eA|[Y.oI@L R0ыvHR <Ԉ(l[ր`KG^@X͚ y"9nlyA) DUJ I#j<Y,z=Վn7 15 UVY;1]{ zSqUڄe1qQt;e:F,':j:کpz [ #U^%uPS2s?QؐgӒ)5m7uQJɦ{K6l\*,^^JMf⌮B{KD ֞E_ьTfy9|q"X8Oh a+mkB|s?s˳W<⇗g~?TYo]U]XćWlXEAZ$83!E_icYD"AAX Ʈz1 kZSE0xf+5;n .=G7G٦՚3 vf+A 5X:FL6p# 8#x_V>.?%lmG%!5T+#!- 8qdo%]1d֨T9?VX8u а)weMNѥC~k*},q9T7W7X馹Y GI(S% r>.QLU+O+9rklNwl;P)( krɏyUO@3$O4UHm]&^lN=Q̑OF@pyž 0W7j=]\r)+FUHFkZ%(ZX9c1{hOےźV6svO%dܝq'fߟg;(kb^՝\QmcZAp(8,|F5 ͤ3?qy-?=\x dDI7z>}&\嶙bݰSxhIV$4Bai0htrwߟF c]_*}jG4_Mp~LbYMq~R1fVq[3Nr-#~ڌ?j[Mn `g$N;2'\l\sSFTW@xHXgIEh;+F;s3T7 mi\z1q_`@=NdD)=e"6Dl0 NHIYDG^ &1s3r*봯-WrGGQ̪ZCSR.d )oV>4|S${z?/[]Ng?jh >$"&9}@,j8bq'6U[ v9npTij GJcjڥ9;zblWb42EDQNF ^Z38j,S*u"0K0qzdtsj7vĀ)v^gL=%,Ak ; 0j9pHKZ{Cva&m໽sfcEݠlZ͡NGJ#u"äD5$Dƣk=D2JD{: $]&ֱvAܝas\v1Æ r_txdd 1o7 _J}FYO;=s[/G֏3%Yϐy2\L "6w=uS 01JVb|,1E=v-2XfN3la1H"L4Mr LMcs 'uh6t8QG6El.Ic6k5&jvNcxSIFtNGp}o%:̨O( ^ ΉYF.Ž-9Ljf/ޝ$V?%0h {ʰ:Qen3pԫ<Zܞ~j֦y$-?RB.^( anه} 0c~x |osƷbWG ̔-p"!t<5c3ejl-QWPUT Mw"_AO}ą)mDf32M`Fd JE 6QLQ:ރRf7Jҵ~lٖ]<GXe3{vvF.PS=(gg  L_ ?T ;u) Ev֭ɔ{JaRُsThUI`+fрLfBR٤ ?kѾC2~+kpbFA3m?'ilDar.Of @fh4Um}0đ<]/8PU@N{YNƲKqg+ ^N7P;BT>Y6n]b^Ga)4ڳ| ֱNT~F"TL臀6~""a$) t#Z]!4Y9/N$H;uQ I[;Ud>GdNL.֖G4/k[ z5IʾcRt#~Dg.cZ"WLbm;Ņ26Fks9hPaq_w+#Xz^5Zbi%go3gJ 7^lɳ{Kcj)(on oxj 1Le6}K԰pSnD~Jث Hk:P`ŝ:}ƺ{-󫂎Pe^ W?̩DT(Vi[n-YsWЅ1nGR?;DӅ[!f0(<( ~$i#" jH=[E^R=֟Dޥ\"젲ӑ7 Uw-!/!990  bLCKFMʞR9URD'j\}$s '^&2:;3ypYܑt]5\Yr+ ƴ”'1OE$X5^7iuJuJHTO?V$,J81 2,x~vSVǛUVid%.|ɎvjvӻD(D1F#G[i<=g2Mh*#'jchxlK @/;}Ҳ cE Ʉe☧[qhvyk >SCZM_4X冨7%2؛ x9 {SmLQ1䤹zfAfȘ{(O ь淥unzIC#~n7g/ao/-:(g1::cmVScdKdA2](vݰ>y =cBUe)w2 ~n)uD4N;HH\(>mrݸxhtUZ]JÝar7`m])mg3{ڨ)šTfĖY,ҝJZ#gm_> qkusӼ%}=.|k2Rp<AgQ 5&Tvm#CV ( ߓ絮Vr8 Sne"q.`ƩF U/Keݙp9p(DK AH9߬ѲżM3XmkdǁЁo2=d7<'o-pBn<;Ox=F@k VpI[4r>y\:wvFiuWO+vXoW"vqBd=IGȝau.=Au6*ݑW⫾N:jS<Ōі@B/P_ P[)u*AWm\WqY$2\c$ ٸ?3Fdhc˗u(@^͗O;;+9 ӵsuhYJ5[ 5u[ƟUɆƄg#qnbg]$gX"R0KuOj}zžG$P DHL4eme9zYtOa'SSUgDs,mlL2&b#3`}Rm7i8Jk5@){rLBК~21HSm=0i][Lb}֢bQ?m=ׅ^yiku,6eQ@ͮ2m[ dx8%acqb'~V~t4I6"b]PxOqWKI设̽ΞR: YZ