samba-winbind-4.15.7+git.376.dd43aca9ab2-150400.3.5.3 >  A bp9|6іU0WxZ*=5h!ttl%àX!q(} ZY)C G EW[5}cO肜aCo!.QqZYcnlMCAXiC3fa6ϗs^{#]#!|8qMw ow*Qawcx'j!R'͒b~=1s:BkM40`0=3R®6dff6a2e4c975addfe4b10e392911747282c1f18feabdc0e2aa68489b7fc9435305f75b8b1d2cafa3a0b9a46d713137bebdfd4e8cLbp9|g=nPE=T l'-{}Up?Z04KWx"\HoLӍL[|ytM BQL6sd,=6(18VuTj-{cvIF1̜QM| GLyd:EM9$0ެhG]qQLI >bsL)Tݴq4~ƕE)ꀨø%dޱ *#R|>pLW?Wd+ 8 P *06(+X z     P4xD8(9899=:N=J>J?J@JBJFJGJHKIKTXKhYKxZK[K\L]LX^MJbNxcO!dOeOfOlOuOvP wS4xSxySzWWWWEWdWtWzWCsamba-winbind4.15.7+git.376.dd43aca9ab2150400.3.5.3Winbind Daemon and ToolThis is the winbind-daemon and the wbinfo-tool.bs390zl34|{SUSE Linux Enterprise 15SUSE LLC GPL-3.0-or-laterhttps://www.suse.com/Productivity/Networking/Sambahttps://www.samba.org/linuxs390x# we need this group for squid (ntlmauth) # read access to /var/lib/samba/winbindd_privileged getent group winbind >/dev/null || groupadd -r winbind if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : for service in winbind.service ; do sysv_service=${service%.*} if [ ! -e /usr/lib/systemd/system/$service ] && [ ! -e /etc/init.d/$sysv_service ]; then mkdir -p /run/systemd/rpm/needs-preset touch /run/systemd/rpm/needs-preset/$service elif [ -e /etc/init.d/$sysv_service ] && [ ! -e /var/lib/systemd/migrated/$sysv_service ]; then /usr/sbin/systemd-sysv-convert --save $sysv_service || : mkdir -p /run/systemd/rpm/needs-sysv-convert touch /run/systemd/rpm/needs-sysv-convert/$service fi done fi/sbin/ldconfig if test ${1:-0} -eq 1; then ln -fs /etc/sysconfig/network/scripts/samba-winbindd /etc/sysconfig/network/if-down.d/55-samba-winbindd ln -fs /etc/sysconfig/network/scripts/samba-winbindd /etc/sysconfig/network/if-up.d/55-samba-winbindd else for if_case in if-down.d if-up.d; do test -h /etc/sysconfig/network/${if_case}/samba-winbindd || \ continue rm -f /etc/sysconfig/network/${if_case}/samba-winbindd ln -fs /etc/sysconfig/network/scripts/samba-winbindd /etc/sysconfig/network/${if_case}/55-samba-winbindd done fi if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$YAST_IS_RUNNING" != "instsys" ]; then /usr/bin/systemctl daemon-reload || : fi for service in winbind.service ; do sysv_service=${service%.*} if [ -e /run/systemd/rpm/needs-preset/$service ]; then /usr/bin/systemctl preset $service || : rm "/run/systemd/rpm/needs-preset/$service" || : elif [ -e /run/systemd/rpm/needs-sysv-convert/$service ]; then /usr/sbin/systemd-sysv-convert --apply $sysv_service || : rm "/run/systemd/rpm/needs-sysv-convert/$service" || : touch /var/lib/systemd/migrated/$sysv_service || : fi done fi [ -z "${TRANSACTIONAL_UPDATE}" -a -x /usr/bin/systemd-tmpfiles ] && /usr/bin/systemd-tmpfiles --create samba.conf || : PNAME=samba SUBPNAME=-winbind SYSC_TEMPLATE=/usr/share/fillup-templates/sysconfig.$PNAME$SUBPNAME # If template not in new /usr/share/fillup-templates, fallback to old TEMPLATE_DIR if [ ! -f $SYSC_TEMPLATE ] ; then TEMPLATE_DIR=/var/adm/fillup-templates SYSC_TEMPLATE=$TEMPLATE_DIR/sysconfig.$PNAME$SUBPNAME fi SD_NAME="" if [ -x /bin/fillup ] ; then if [ -f $SYSC_TEMPLATE ] ; then echo "Updating /etc/sysconfig/$SD_NAME$PNAME ..." mkdir -p /etc/sysconfig/$SD_NAME touch /etc/sysconfig/$SD_NAME$PNAME /bin/fillup -q /etc/sysconfig/$SD_NAME$PNAME $SYSC_TEMPLATE fi else echo "ERROR: fillup not found. This should not happen. Please compare" echo "/etc/sysconfig/$PNAME and $TEMPLATE_DIR/sysconfig.$PNAME and" echo "update by hand." fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable winbind.service || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services test "$DISABLE_STOP_ON_REMOVAL" = yes -o \ "$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0 /usr/bin/systemctl stop winbind.service ) || : fi/sbin/ldconfig if [ $1 -eq 0 ]; then /usr/sbin/pam-config --delete --winbind if [ -x /usr/sbin/nscd ]; then /usr/sbin/nscd -i passwd /usr/sbin/nscd -i group fi fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ $1 -eq 0 ]; then # Package removal for service in winbind.service ; do sysv_service="${service%.*}" rm "/var/lib/systemd/migrated/$sysv_service" || : done fi if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -ge 1 ]; then # Package upgrade, not uninstall if [ -x /usr/bin/systemctl ]; then ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services test "$DISABLE_RESTART_ON_UPDATE" = yes -o \ "$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0 /usr/bin/systemctl try-restart winbind.service ) || : fi fi<rHX%"0B^큤큤AAbebebebebebpbpbbebsbebbbbebbdbd95eb7e0d1e8c973d39fb53be9be46276b21bcacd8b0ae1adeeb63651f6fbea676af835bac5e037fd6f6d9950ea49ff3f39bc693d479069190927c1c53083993a1caa0988f1da58a965d7a954f36d791af7b63f8f4d458a49b7b48dedc7909a3fa5243c12ea595a2373c21a24e0970810edcbb9d7c4bbdfa8ec51b04e05b5a13870c5a1415360bbfcb0df4c5cba5845f3c00c67e946c2f4016c0fbf4b112f148c787a47c3127f9c5fdde2848eeac71a06e22cbf997c132d74ada549c086e0d31b148e5edf3126d6633a9133fe3e2bd522830380b6da46d8373dd682adc350d9a16eb3e6b8e2bf0b1ee56f8a98e8ed307633badc5f3c02d8a82a4293ea47439b70ade6d689b22bfab8e13ff4ffbeea7db15f71bdebb42929ffa25d6dbecd38d847b850d1a4b81de90d09f0bcc2080ebfdfbb640ca845a19c7d3f9f2593f41ab8164f52f3def93c9049439d5b49f3d2ce3ad8a965af3af055071ecc65e79c236c6b4b0325dd3211474ac785379683cc4e7f17e211327fb9d536c1ff9138de03eservice@@rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootwinbindsamba-4.15.7+git.376.dd43aca9ab2-150400.3.5.3.src.rpmconfig(samba-winbind)samba-client:/usr/sbin/winbinddsamba-winbindsamba-winbind(s390-64)@ @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    /bin/bash/bin/sh/bin/sh/bin/sh/bin/sh/sbin/ldconfig/sbin/ldconfig/usr/sbin/groupaddconfig(samba-winbind)coreutilslibMESSAGING-samba4.so()(64bit)libMESSAGING-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150400.3.5.3_SUSE_OS15.0_S390X)(64bit)libads-samba4.so()(64bit)libads-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150400.3.5.3_SUSE_OS15.0_S390X)(64bit)libauth-samba4.so()(64bit)libauth-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150400.3.5.3_SUSE_OS15.0_S390X)(64bit)libauthkrb5-samba4.so()(64bit)libauthkrb5-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150400.3.5.3_SUSE_OS15.0_S390X)(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.2)(64bit)libc.so.6(GLIBC_2.2.1)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libc.so.6(GLIBC_2.7)(64bit)libc.so.6(GLIBC_2.8)(64bit)libcli-ldap-common-samba4.so()(64bit)libcli-ldap-common-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150400.3.5.3_SUSE_OS15.0_S390X)(64bit)libcli-smb-common-samba4.so()(64bit)libcli-smb-common-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150400.3.5.3_SUSE_OS15.0_S390X)(64bit)libcliauth-samba4.so()(64bit)libcliauth-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150400.3.5.3_SUSE_OS15.0_S390X)(64bit)libcmdline-samba4.so()(64bit)libcmdline-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150400.3.5.3_SUSE_OS15.0_S390X)(64bit)libcom_err.so.2()(64bit)libcommon-auth-samba4.so()(64bit)libcommon-auth-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150400.3.5.3_SUSE_OS15.0_S390X)(64bit)libdbwrap-samba4.so()(64bit)libdbwrap-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150400.3.5.3_SUSE_OS15.0_S390X)(64bit)libdcerpc-binding.so.0()(64bit)libdcerpc-binding.so.0(DCERPC_BINDING_0.0.1)(64bit)libdcerpc-samba-samba4.so()(64bit)libdcerpc-samba-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150400.3.5.3_SUSE_OS15.0_S390X)(64bit)libdcerpc-samba4.so()(64bit)libdcerpc-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150400.3.5.3_SUSE_OS15.0_S390X)(64bit)libdcerpc-server-core.so.0()(64bit)libdcerpc-server-core.so.0(DCERPC_SERVER_CORE_0.0.1)(64bit)libflag-mapping-samba4.so()(64bit)libflag-mapping-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150400.3.5.3_SUSE_OS15.0_S390X)(64bit)libgenrand-samba4.so()(64bit)libgenrand-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150400.3.5.3_SUSE_OS15.0_S390X)(64bit)libgensec-samba4.so()(64bit)libgensec-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150400.3.5.3_SUSE_OS15.0_S390X)(64bit)libgnutls.so.30()(64bit)libgnutls.so.30(GNUTLS_3_4)(64bit)libgnutls.so.30(GNUTLS_3_6_3)(64bit)libgse-samba4.so()(64bit)libgse-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150400.3.5.3_SUSE_OS15.0_S390X)(64bit)libidmap-samba4.so()(64bit)libidmap-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150400.3.5.3_SUSE_OS15.0_S390X)(64bit)libkrb5.so.3()(64bit)libkrb5.so.3(krb5_3_MIT)(64bit)libkrb5samba-samba4.so()(64bit)libkrb5samba-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150400.3.5.3_SUSE_OS15.0_S390X)(64bit)liblibcli-lsa3-samba4.so()(64bit)liblibcli-lsa3-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150400.3.5.3_SUSE_OS15.0_S390X)(64bit)liblibcli-netlogon3-samba4.so()(64bit)liblibcli-netlogon3-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150400.3.5.3_SUSE_OS15.0_S390X)(64bit)liblibsmb-samba4.so()(64bit)liblibsmb-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150400.3.5.3_SUSE_OS15.0_S390X)(64bit)libmsrpc3-samba4.so()(64bit)libmsrpc3-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150400.3.5.3_SUSE_OS15.0_S390X)(64bit)libndr-samba-samba4.so()(64bit)libndr-samba-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150400.3.5.3_SUSE_OS15.0_S390X)(64bit)libndr-samba4.so()(64bit)libndr-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150400.3.5.3_SUSE_OS15.0_S390X)(64bit)libndr-standard.so.0()(64bit)libndr-standard.so.0(NDR_STANDARD_0.0.1)(64bit)libndr.so.2()(64bit)libndr.so.2(NDR_0.0.1)(64bit)libndr.so.2(NDR_0.0.4)(64bit)libndr.so.2(NDR_0.2.0)(64bit)libnpa-tstream-samba4.so()(64bit)libnpa-tstream-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150400.3.5.3_SUSE_OS15.0_S390X)(64bit)libnss-info-samba4.so()(64bit)libnss-info-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150400.3.5.3_SUSE_OS15.0_S390X)(64bit)libpopt.so.0()(64bit)libpopt.so.0(LIBPOPT_0)(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.2)(64bit)libreplace-samba4.so()(64bit)libreplace-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150400.3.5.3_SUSE_OS15.0_S390X)(64bit)libsamba-credentials.so.1()(64bit)libsamba-credentials.so.1(SAMBA_CREDENTIALS_1.0.0)(64bit)libsamba-debug-samba4.so()(64bit)libsamba-debug-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150400.3.5.3_SUSE_OS15.0_S390X)(64bit)libsamba-errors.so.1()(64bit)libsamba-errors.so.1(SAMBA_ERRORS_1)(64bit)libsamba-hostconfig.so.0()(64bit)libsamba-hostconfig.so.0(SAMBA_HOSTCONFIG_0.0.1)(64bit)libsamba-modules-samba4.so()(64bit)libsamba-modules-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150400.3.5.3_SUSE_OS15.0_S390X)(64bit)libsamba-passdb.so.0()(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.2.0)(64bit)libsamba-security-samba4.so()(64bit)libsamba-security-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150400.3.5.3_SUSE_OS15.0_S390X)(64bit)libsamba-sockets-samba4.so()(64bit)libsamba-sockets-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150400.3.5.3_SUSE_OS15.0_S390X)(64bit)libsamba-util.so.0()(64bit)libsamba-util.so.0(SAMBA_UTIL_0.0.1)(64bit)libsamba3-util-samba4.so()(64bit)libsamba3-util-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150400.3.5.3_SUSE_OS15.0_S390X)(64bit)libsamdb-common-samba4.so()(64bit)libsamdb-common-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150400.3.5.3_SUSE_OS15.0_S390X)(64bit)libsecrets3-samba4.so()(64bit)libsecrets3-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150400.3.5.3_SUSE_OS15.0_S390X)(64bit)libsmbconf.so.0()(64bit)libsmbconf.so.0(SMBCONF_0)(64bit)libsmbd-shim-samba4.so()(64bit)libsmbd-shim-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150400.3.5.3_SUSE_OS15.0_S390X)(64bit)libsocket-blocking-samba4.so()(64bit)libsocket-blocking-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150400.3.5.3_SUSE_OS15.0_S390X)(64bit)libsys-rw-samba4.so()(64bit)libsys-rw-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150400.3.5.3_SUSE_OS15.0_S390X)(64bit)libtalloc.so.2()(64bit)libtalloc.so.2(TALLOC_2.0.2)(64bit)libtdb.so.1()(64bit)libtdb.so.1(TDB_1.2.1)(64bit)libtevent-util.so.0()(64bit)libtevent-util.so.0(TEVENT_UTIL_0.0.1)(64bit)libtevent.so.0()(64bit)libtevent.so.0(TEVENT_0.9.12)(64bit)libtevent.so.0(TEVENT_0.9.14)(64bit)libtevent.so.0(TEVENT_0.9.20)(64bit)libtevent.so.0(TEVENT_0.9.21)(64bit)libtevent.so.0(TEVENT_0.9.36)(64bit)libtevent.so.0(TEVENT_0.9.37)(64bit)libtevent.so.0(TEVENT_0.9.9)(64bit)libtrusts-util-samba4.so()(64bit)libtrusts-util-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150400.3.5.3_SUSE_OS15.0_S390X)(64bit)libutil-tdb-samba4.so()(64bit)libutil-tdb-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150400.3.5.3_SUSE_OS15.0_S390X)(64bit)libwbclient.so.0()(64bit)libwbclient.so.0(WBCLIENT_0.10)(64bit)libwbclient.so.0(WBCLIENT_0.13)(64bit)libwbclient.so.0(WBCLIENT_0.9)(64bit)libwinbind-client-samba4.so()(64bit)libwinbind-client-samba4.so(SAMBA_4.15.7_GIT.376.DD43ACA9AB2150400.3.5.3_SUSE_OS15.0_S390X)(64bit)pam-configrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)samba-clientsamba-libssamba-winbind-libs4.15.7+git.376.dd43aca9ab2-150400.3.5.33.0.4-14.6.0-14.0-15.2-14.15.7+git.376.dd43aca9ab24.15.7+git.376.dd43aca9ab24.15.7+git.376.dd43aca9ab24.14.3bascabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comddiss@suse.comnopower@suse.comdmulder@suse.comdmulder@suse.comnopower@suse.comscabrero@suse.descabrero@suse.dedimstar@opensuse.orgscabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comnopower@suse.comnopower@suse.comscabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comnopower@suse.comscabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.denopower@suse.comscabrero@suse.deddiss@suse.comddiss@suse.comddiss@suse.comscabrero@suse.descabrero@suse.dedmulder@suse.comnopower@suse.comscabrero@suse.descabrero@suse.dedmulder@suse.comscabrero@suse.descabrero@suse.denopower@suse.comnopower@suse.comnopower@suse.comdmulder@suse.comscabrero@suse.denopower@suse.comddiss@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comscabrero@suse.denopower@suse.comnopower@suse.comjmcdonough@suse.comnopower@suse.comscabrero@suse.denopower@suse.comnopower@suse.comddiss@suse.comddiss@suse.comnopower@suse.comnopower@suse.comddiss@suse.comnopower@suse.comdmulder@suse.comdmulder@suse.comddiss@suse.comscabrero@suse.dedmulder@suse.comddiss@suse.comnopower@suse.comjengelh@inai.dedmulder@suse.comscabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comdmulder@suse.comdmulder@suse.comjmcdonough@suse.comdmulder@suse.comscabrero@suse.dedmulder@suse.comscabrero@suse.dedmulder@suse.comdmulder@suse.comvcizek@suse.comdmulder@suse.comdmulder@suse.comnopower@suse.comscabrero@suse.dejmcdonough@suse.comscabrero@suse.deaaptel@suse.comjengelh@inai.dedimstar@opensuse.orgdmulder@suse.comjmcdonough@suse.comdavid.mulder@suse.comjmcdonough@suse.comaaptel@suse.comdmulder@suse.comscabrero@suse.comscabrero@suse.comkukuk@suse.dedavid.mulder@suse.comscabrero@suse.comrbrown@suse.comdmulder@suse.comscabrero@suse.comdimstar@opensuse.orgscabrero@suse.comaaptel@suse.comnopower@suse.comnopower@suse.comaaptel@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comddiss@suse.comnopower@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comdmulder@suse.comnopower@suse.comjmcdonough@suse.comaaptel@suse.comkukuk@suse.comkukuk@suse.denopower@suse.comaaptel@suse.comdmulder@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comddiss@suse.comjmcdonough@suse.comddiss@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comjmcdonough@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comtchvatal@suse.comlmuelle@suse.comnopower@suse.comcrrodriguez@opensuse.orglmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comnoel.power@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comnopower@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.commpluskal@suse.comlmuelle@suse.comnopower@suse.deddiss@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.denopower@suse.delmuelle@suse.comnopower@suse.deddiss@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.com- Revert NIS support removal; (bsc#1199247);- Use requires_eq macro to require the libldb2 version available at samba-dsdb-modules build time; (bsc#1199362);- Add missing samba-client requirement to samba-winbind package; (bsc#1198255);- Update to 4.15.7 * Share and server swapped in smbget password prompt; (bso#14831); * Durable handles won't reconnect if the leased file is written to; (bso#15022); * rmdir silently fails if directory contains unreadable files and hide unreadable is yes; (bso#15023); * SMB2_CLOSE_FLAGS_FULL_INFORMATION fails to return information on renamed file handle; (bso#15038); * vfs_shadow_copy2 breaks "smbd async dosmode" sync fallback; (bso#14957); * shadow_copy2 fails listing snapshotted dirs with shadow:fixinodes; (bso#15035); * PAM Kerberos authentication incorrectly fails with a clock skew error; (bso#15046); * username map - samba erroneously applies unix group memberships to user account entries; (bso#15041); * NT_STATUS_ACCESS_DENIED translates into EPERM instead of EACCES in SMBC_server_internal; (bso#14983); * Simple bind doesn't work against an RODC (with non-preloaded users); (bso#13879); * Crash of winbind on RODC; (bso#14641); * uncached logon on RODC always fails once; (bso#14865); * KVNO off by 100000; (bso#14951); * LDAP simple binds should honour "old password allowed period"; (bso#15001); * wbinfo -a doesn't work reliable with upn names; (bso#15003); * Simple bind doesn't work against an RODC (with non-preloaded users); (bso#13879); * Uninitialized litemask in variable in vfs_gpfs module; (bso#15027); * Regression: create krb5 conf = yes doesn't work with a single KDC; (bso#15016);- Add provides to samba-client-libs package to fix upgrades from previous versions; (bsc#1197995);- Add missing samba-libs requirement to samba-winbind package; (bsc#1198255);- Update to 4.15.6 * Renaming file on DFS root fails with NT_STATUS_OBJECT_PATH_NOT_FOUND; (bso#14169); * Samba does not response STATUS_INVALID_PARAMETER when opening 2 objects with same lease key; (bso#14737); * NT error code is not set when overwriting a file during rename in libsmbclient; (bso#14938); * Fix ldap simple bind with TLS auditing; (bso#14996); * net ads info shows LDAP Server: 0.0.0.0 depending on contacted server; (bso#14674); * Problem when winbind renews Kerberos; (bso#14979); (bsc#1196224); * pam_winbind will not allow gdm login if password about to expire; (bso#8691); * virusfilter_vfs_openat: Not scanned: Directory or special file; (bso#14971); * DFS fix for AIX broken; (bso#13631); * Solaris and AIX acl modules: wrong function arguments; (bso#14974); * Function aixacl_sys_acl_get_file not declared / coredump; (bso#7239); * Regression: Samba 4.15.2 on macOS segfaults intermittently during strcpy in tdbsam_getsampwnam; (bso#14900); * Fix a use-after-free in SMB1 server; (bso#14989); * smb2_signing_decrypt_pdu() may not decrypt with gnutls_aead_cipher_decrypt() from gnutls before 3.5.2; (bso#14968); * Changing the machine password against an RODC likely destroys the domain join; (bso#14984); * authsam_make_user_info_dc() steals memory from its struct ldb_message *msg argument; (bso#14993); * Use Heimdal 8.0 (pre) rather than an earlier snapshot; (bso#14995); * Samba autorid fails to map AD users if id rangesize fits in the id range only once; (bso#14967);- Fix mismatched version of libldb2; (bsc#1196788). - Drop obsolete SuSEfirewall2 service files.- Drop obsolete Samba fsrvp v0->v1 state upgrade functionality; (bsc#1080338).- Fix ntlm authentications with "winbind use default domain = yes"; (bso#13126); (bsc#1173429); (bsc#1196308).- Fix samba-ad-dc status warning notification message by disabling systemd notifications in bgqd; (bsc#1195896); (bso#14947).- libldb version mismatch in Samba dsdb component; (bsc#1118508);- Update to 4.15.5 * CVE-2021-44141: UNIX extensions in SMB1 disclose whether the outside target of a symlink exists; (bso#14911); (bsc#1193690). * CVE-2021-44142: Out-of-Bound Read/Write on Samba vfs_fruit module; (bso#14914); (bsc#1194859). * CVE-2022-0336: Re-adding an SPN skips subsequent SPN conflict checks; bso#14950); (bsc#1195048).- CVE-2021-44141: Information leak via symlinks of existance of files or directories outside of the exported share; (bso#14911); (bsc#1193690); - CVE-2021-44142: Out-of-bounds heap read/write vulnerability in VFS module vfs_fruit allows code execution; (bso#14914); (bsc#1194859); - CVE-2022-0336: Samba AD users with permission to write to an account can impersonate arbitrary services; (bso#14950); (bsc#1195048);- Update to 4.15.4 * Duplicate SMB file_ids leading to Windows client cache poisoning; (bso#14928); * Failed to parse NTLMv2_RESPONSE length 95 - Buffer Size Error - NT_STATUS_BUFFER_TOO_SMALL; (bso#14932); * kill_tcp_connections does not work; (bso#14934); * Can't connect to Windows shares not requiring authentication using KDE/Gnome; (bso#14935); * smbclient -L doesn't set "client max protocol" to NT1 before calling the "Reconnecting with SMB1 for workgroup listing" path; (bso#14939); * Cross device copy of the crossrename module always fails; (bso#14940); * symlinkat function from VFS cap module always fails with an error; (bso#14941); * Fix possible fsp pointer deference; (bso#14942); * Missing pop_sec_ctx() in error path inside close_directory(); (bso#14944); * "smbd --build-options" no longer works without an smb.conf file; (bso#14945);- Use pkgconfig(krb5) as dependency for the -devel package: allow OBS to pick the right flavor of krb5-devel (full vs mini). - Do not require the 'krb5' symbol by samba-client-libs: this package has an automatic dependency due to linkage on libgssapi_krb5.so.2. Automatic deps are always better. - Do not require the 'krb5' symbol from samba-libs: samba-libs requires samba-client-libs, which in turn requires krb5 libraries. Samba-libs itself has no need for krb5 (but get it indirectly anyway).- Reorganize libs packages. Split samba-libs into samba-client-libs, samba-libs, samba-winbind-libs and samba-ad-dc-libs, merging samba public libraries depending on internal samba libraries into these packages as there were dependency problems everytime one of these public libraries changed its version (bsc#1192684). The devel packages are merged into samba-devel. - Rename package samba-core-devel to samba-devel - Add python-rpm-macros to build requirements - Update the symlink create by samba-dsdb-modules to private samba ldb modules following libldb2 changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba- Update to 4.15.3 * Recursive directory delete with veto files is broken in 4.15.0; (bso#14878); * A directory containing dangling symlinks cannot be deleted by SMB2 alone when they are the only entry in the directory; (bso#14879); * SIGSEGV in rmdir_internals/synthetic_pathref - dirfsp is used uninitialized in rmdir_internals(); (bso#14892); * MaxQueryDuration not honoured in Samba AD DC LDAP; (bso#14694); * The CVE-2020-25717 username map [script] advice has undesired side effects for the local nt token; (bso#14901); (bsc#1192849); * User with multiple spaces (eg FredNurk) become un-deletable; (bso#14902); * Avoid storing NTTIME_THAW (-2) as value on disk; (bso#14127); * smbXsrv_client_global record validation leads to crash if existing record points at non-existing process; (bso#14882); * Crash in vfs_fruit asking for fsp_get_io_fd() for an XATTR call; (bso#14890); * Samba process doesn't log to logfile; (bso#14897); * set_ea_dos_attribute() fallback calling get_file_handle_for_metadata() triggers locking.tdb assert; (bso#14907); * Kerberos authentication on standalone server in MIT realm broken; (bso#14922); * Segmentation fault when joining the domain; (bso#14923); * Support for ROLE_IPA_DC is incomplete; (bso#14903); * rpcclient cannot connect to ncacn_ip_tcp services anymore; (bso#14767); * winexe crashes since 4.15.0 after popt parsing; (bso#14893); * net ads status -P broken in a clustered environment; (bso#14908); * Memory leak if ioctl(FSCTL_VALIDATE_NEGOTIATE_INFO) fails before smbd_smb2_ioctl_send; (bso#14788); * winbindd doesn't start when "allow trusted domains" is off; (bso#14899); * smbclient login without password using '-N' fails with NT_STATUS_INVALID_PARAMETER on Samba AD DC; (bso#14883); * A schannel client incorrectly detects a downgrade connecting to an AES only server; (bso#14912); * Possible null pointer dereference in winbind; (bso#14921); * Fix -k legacy option for client tools like smbclient, rpcclient, net, etc.; (bso#14846); * Add Debian 11 CI bootstrap support; (bso#14872); * Crash in recycle_unlink_internal(); (bso#14888);- Fix dependency problem upgrading from libndr0 to libndr2 and from libsamba-credentials0 to libsamba-credentials1; (bsc#1192684);- Fix regression introduced by CVE-2020-25717 patches, winbindd does not start when 'allow trusted domains' is off; (bso#14899); - Update to 4.15.2 * CVE-2016-2124: SMB1 client connections can be downgraded to plaintext authentication; (bso#12444); (bsc#1014440); * CVE-2020-25717: A user on the domain can become root on domain members; (bso#14556); (bsc#1192284); * CVE-2020-25718: Samba AD DC did not correctly sandbox Kerberos tickets issued by an RODC; (bso#14558); (bsc#1192246); * CVE-2020-25719: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets; (bso#14561); (bsc#1192247); * CVE-2020-25721: Kerberos acceptors need easy access to stable AD identifiers (eg objectSid); (bso#14557); (bsc#1192505); * CVE-2020-25722: Samba AD DC did not do suffienct access and conformance checking of data stored; (bso#14564); (bsc#1192283); * CVE-2021-3738: Use after free in Samba AD DC RPC server; (bso#14468); (bsc#1192215); * CVE-2021-23192: Subsequent DCE/RPC fragment injection vulnerability; (bso#14875); (bsc#1192214); - Update to 4.15.1 * vfs_shadow_copy2: core dump in make_relative_path; (bso#14682); * Log clutter from filename_convert_internal; (bso#14685); * MacOSX compilation fixes; (bso#14862); * rodc_rwdc test flaps; (bso#14868); * Provide a fix for MS CVE-2020-17049 in Samba [SECURITY] 'Bronze bit' S4U2Proxy Constrained Delegation bypass in Samba with embedded Heimdal; (bso#14642); * Python ldb.msg_diff() memory handling failure; (bso#14836); * "in" operator on ldb.Message is case sensitive; (bso#14845); * Release LDB 2.4.1 for Samba 4.15.1; (bso#14848); * samldb_krbtgtnumber_available() looks for incorrect string; (bso#14854); * Fix Samba support for UF_NO_AUTH_DATA_REQUIRED; (bso#14871); * Allow special chars like "@" in samAccountName when generating the salt; (bso#14874); * Correctly ignore comments in CTDB public addresses file; (bso#14826); * Fix transit path validation; (bso#12998); * Fix that child winbindd logs to log.winbindd instead of log.wb-; (bso#14852); * SMB3 cancel requests should only include the MID together with AsyncID when AES-128-GMAC is used; (bso#14855); * Prepare to operate with MIT krb5 >= 1.20; (bso#14870); * Heimdal prefers RC4 over AES for machine accounts; (bso#14864);- Enable samba-tool without ad dc.- Adjust spec to use pam macros; (bsc#1191046).- Adjust spec for size * allow some Recommends instead Requires to be configured for cifs-utils, samba-libs-python3 & samba-gpupdate; (bsc#1182847). * remove fam, undocumented and unneeded.- Add missing build dependency on bison when building with the embedded Heimdal Kerberos- Update to 4.15.0 * Removed SMB development dialects SMB2_22, SMB2_24 and SMB3_10 * VFS layer modernized. * Add the ability to set allow/deny lists for zone transfer clients in Bind DLZ plugin * Server multi-channel support no longer experimental * Improved command line user experience, unifying the options in different commands * Winbindd no longer scans trusted domains on startup and will use enterprise principals by default. * The net utility is now able to support the offline domain join feature * New options for 'samba-tool dns zoneoptions' for aging control and to mark old records as static or dynamic * DNS tombstones are now deleted as appropriate and use a consistent timestamp format * The 'samba-tool dns update' command validates and rejects now malformed IPv4 and IPv6 addresses * The 'samba-tool domain backup' command correctly takes out locks against concurrent modification during backup when using the LMDB backend * TruACL support has been removed * NIS support has been removed- Fix 'net rpc' authentication when using the machine account; (bsc#1189017); (bso#14796);- Fix dependency problem upgrading from libndr0 to libndr1; (bsc#1189875); - Fix dependency problem upgrading from libsmbldap0 to libsmbldap2; (bsc#1189875); - Fix wrong kvno exported to keytab after net ads changetrustpw due to replication delay; (bsc#1188727); - Add Certificate Auto Enrollment Policy; (jsc#SLE-18456). - Update to 4.13.10 * s3: smbd: Ensure POSIX default ACL is mapped into returned Windows ACL for directory handles; (bso#14708); * Take a copy to make sure we don't reference free'd memory; (bso#14721); * s3: lib: Fix talloc heirarcy error in parent_smb_fname(); (bso#14722); * s3: smbd: Remove erroneous TALLOC_FREE(smb_fname_parent) in change_file_owner_to_parent() error path; (bso#14736); * samba-tool: Give better error information when the 'domain backup restore' fails with a duplicate SID; (bso#14575); * smbd: Correctly initialize close timestamp fields; (bso#14714); * Spotlight RPC service doesn't work with vfs_glusterfs; (bso#14740); * ctdb: Fix a crash in run_proc_signal_handler(); (bso#14475); * gensec_krb5: Restore ipv6 support for kpasswd; (bso#14750); * smbXsrv_{open,session,tcon}: Protect smbXsrv_{open,session,tcon}_global_traverse_fn against invalid records; (bso#14752); * samba-tool domain backup offline doesn't work against bind DLZ backend; (bso#14027); * netcmd: Use next_free_rid() function to calculate a SID for restoring a backup; (bso#14669); - Update to 4.13.9 * s3: smbd: SMB1 SMBsplwr doesn't send a reply packet on success; (bso#14696); * Add documentation for dsdb_group_audit and dsdb_group_json_audit to "log level", synchronise "log level" in smb.conf with the code; (bso#14689); * Fix smbd panic when two clients open same file; (bso#14672); * Fix memory leak in the RPC server; (bso#14675); * s3: smbd: Fix deferred renames; (bso#14679); * s3-iremotewinspool: Set the per-request memory context; (bso#14675); * rpc_server3: Fix a memleak for internal pipes; (bso#14675); * third_party: Update socket_wrapper to version 1.3.2; (bso#11899); * third_party: Update socket_wrapper to version 1.3.3; (bso#14639); * idmap_rfc2307 and idmap_nss return wrong mapping for uid/gid conflict; (bso#14663); * Fix the build on OmniOS; (bso#14288); - Update to 4.13.8 * CVE-2021-20254: Fix buffer overrun in sids_to_unixids(); (bso#14571 - Update to 4.13.7 * Release with dependency on ldb version 2.2.1.- CVE-2021-20254 Buffer overrun in sids_to_unixids(); (bnc#14571); (bsc#1184677).- Fix offline domain backup not possible using lmdb version >= 0.9.26; (bso#14676); - Require libldb >= 2.2.1; (bsc#1183572); (bsc#1183574); - Update to 4.13.6 * CVE-2020-27840: samba: Unauthenticated remote heap corruption via bad DNs; (bso#14595); (bsc#1183572). * CVE-2021-20277: samba: out of bounds read in ldb_handler_fold; (bso#14655); (bsc#1183574). - Update to 4.13.5 * s3:modules:vfs_virusfilter: Recent talloc changes cause infinite start-up failure; (bso#14634); * s3: libsmb: Add missing cli_tdis() in error path if encryption setup failed on temp proxy connection; (bso#13992); * smbd: In conn_force_tdis_done() when forcing a connection closed force a full reload of services; (bso#14604); * dbcheck: Check Deleted Objects and reduce noise in reports about expired tombstones (bso#14593); * s3: Fix fcntl waf configure check; (bso#14503); * s3/auth: Implement "winbind:ignore domains"; (bso#14602); * smbd: Use fsp->conn->session_info for the initial delete-on-close token; (bso#14617); * s3: VFS: nfs4_acls. Add missing TALLOC_FREE(frame) in error path; (bso#14648); * classicupgrade: Treat old never expires value right; (bso#14624); * g_lock: Fix uninitalized variable reads; (bso#14636); * s3:pysmbd: Fix fd leak in py_smbd_create_file(); (bso#13898); * lib:util: Avoid free'ing our own pointer; (bso#14625); * HEIMDAL: krb5_storage_free(NULL) should work; (bso#12505);- Spec file fixes around systemd and requires; (bsc#1182830); - Align systemd service unit files with upstream provided ones.- Update to 4.13.4 * Work around special SMB2 IOCTL response behavior of NetApp Ontap 7.3.7; (bso#14607); * Temporary DFS share setup doesn't set case parameters in the same way as a regular share definition does; (bso#14612); * lib: Avoid declaring zero-length VLAs in various messaging functions; (bso#14605); * Do not create an empty DB when accessing a sam.ldb; (bso#14579); * vfs_fruit may close wrong backend fd; (bso#14596); * Temporary DFS share setup doesn't set case parameters in the same way as a regular share definition does; (bso#14612); * vfs_virusfilter: Allocate separate memory for config char*; (bso#14606); * vfs_fruit may close wrong backend fd; (bso#14596); * Work around special SMB2 IOCTL response behavior of NetApp Ontap 7.3.7; (bso#14607); * The cache directory for the user gencache should be created recursively; (bso#14601); * Be more flexible with repository names in CentOS 8 test environments; (bso#14594);- Uninstalling samba-client: Failed to disable unit, cifs.service does not exists; (bsc#1180388);- Update to 4.13.3 + libcli: smb2: Never print length if smb2_signing_key_valid() fails for crypto blob; (bso#14210); + s3: modules: gluster. Fix the error I made in preventing talloc leaks from a function; (bso#14486); + s3: smbd: Don't overwrite contents of fsp->aio_requests[0] with NULL via TALLOC_FREE(); (bso#14515); + s3: spoolss: Make parameters in call to user_ok_token() match all other uses; (bso#14568); + s3: smbd: Quiet log messages from usershares for an unknown share; (bso#14590); + samba process does not honor max log size; (bso#14248); + vfs_zfsacl: Add missing inherited flag on hidden "magic" everyone@ ACE; (bso#14587); + s3-libads: Pass timeout to open_socket_out in ms; (bso#13124); + s3-vfs_glusterfs: Always disable write-behind translator; (bso#14486); + smbclient: Fix recursive mget; (bso#14517); + clitar: Use do_list()'s recursion in clitar.c; (bso#14581); + manpages/vfs_glusterfs: Mention silent skipping of write-behind translator; (bso#14486); + vfs_shadow_copy2: Preserve all open flags assuming ROFS; (bso#14573); + interface: Fix if_index is not parsed correctly; (bso#14514);- Update to 4.13.2 + s3: modules: vfs_glusterfs: Fix leak of char **lines onto mem_ctx on return; (bso#14486); + RN: vfs_zfsacl: Only grant DELETE_CHILD if ACL tag is special; (bso#14471); + smb.conf.5: Add clarification how configuration changes reflected by Samba; (bso#14538); + daemons: Report status to systemd even when running in foreground; (bso#14552); + DNS Resolver: Support both dnspython before and after 2.0.0; (bso#14553); + s3-vfs_glusterfs: Refuse connection when write-behind xlator is present; (bso#14486); + provision: Add support for BIND 9.16.x; (bso#14487); + ctdb-common: Avoid aliasing errors during code optimization; (bso#14537); + libndr: Avoid assigning duplicate versions to symbols; (bso#14541); + docs: Fix default value of spoolss:architecture; (bso#14522); + winbind: Fix a memleak; (bso#14388); + s4:dsdb:acl_read: Implement "List Object" mode feature; (bso#14531); + docs-xml/manpages: Add warning about write-behind translator for vfs_glusterfs; (bso#14486); + nsswitch/nsstest.c: Avoid nss function conflicts with glibc nss.h. + vfs_shadow_copy2: Avoid closing snapsdir twice; (bso#14530); + third_party: Update resolv_wrapper to version 1.1.7; (bso#14547); + examples:auth: Do not install example plugin; (bso#14550); + ctdb-recoverd: Drop unnecessary and broken code; (bso#14513); + RN: vfs_zfsacl: Only grant DELETE_CHILD if ACL tag is special; (bso#14471);- Adjust smbcacls '--propagate-inheritance' feature to align with upstream; (bsc#1178469).- Update to samba 4.13.1 + CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with easily crafted records; (bsc#1177613); (bso#14472); + CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994); (bso#14436); + CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify; (bsc#1173902); (bso#14434); - Adjust systemd tmpfiles.d configuration, use /run/samba instead of /var/run/samba; (bsc#1177355);- Fix vfs_ceph query_directory regression; (bso#14519) - Drop liburing-devel for SLE15-SP2; (bsc#1177245)- Register CTDB recovery lock holder with ceph-mgr - Add liburing-devel dependency- Update to samba 4.13.0 + Require Python 3.6 + Move wide links functionality into VFS module + Deprecate NT4-like 'classic' Samba domain controllers + Deprecate SMBv1 only protocol options + Remove deprecated "ldap ssl ads" option + Unify asynchronous DCE-RPC server; (jsc#SES-645) + Replay multichannel lease break requests; (bso#11897); (jsc#SES-655) + Drop internal byteorder.h header from util-devel package + Remove final code for the AD DC LDAP backend + Add AD DC Group Policy Scripts + Only use gnutls_aead_cipher_encryptv2() for GnuTLS > 3.6.14; (bso#14399) + Fix %U substitutions if it contains a domain name; (bso#14467) + Fix krb5.conf creation for 'net ads join'; (bso#14479) + Fix build problem if libbsd-dev is not installed; (bso#14482) + Toggle vfs_snapper using "--with-shared-modules"; (bso#14437) + Fix idmap_ad RFC4511 response handling; (bso#14465) + Fix panic in get_lease_type(); (bso#14428)- Update to samba 4.11.13 + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2 against unencrypted passwords; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Support "server require schannel:WORKSTATION$ = no" about unsecure configurations; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): s4 torture rpc: repeated bytes in client challenge; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): libcli/auth: Reject weak client challenges in netlogon_creds_server_init() "server require schannel:WORKSTATION$ = no"; (bsc#1176579); (bso#14497); - Update to samba 4.11.12 + s3: libsmb: Fix SMB2 client rename bug to a Windows server; (bso#14403); + dsdb: Allow "password hash userPassword schemes = CryptSHA256" to work on RHEL7; (bso#14424); + dbcheck: Allow a dangling forward link outside our known NCs; (bso#14450); + lib/debug: Set the correct default backend loglevel to MAX_DEBUG_LEVEL; (bso#14426); + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428); + lib/util: do not install "test_util_paths"; (bso#14370); + lib:util: Fix smbclient -l basename dir; (bso#14345); + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428); + util: Allow symlinks in directory_create_or_exist; (bso#14166); + docs: Fix documentation for require_membership_of of pam_winbind; (bso#14358); + s3:winbind:idmap_ad: Make failure to get attrnames for schema mode fatal; (bso#14425);- Add obsoletes to libsmbldap2 package to fix upgrades from previous versions; (bsc#1172810);- Fix net command unable to negotiate SMB2; (bsc#1174120);- Update to samba 4.11.11 + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ and VLV combined; (bso#14364); (bsc#1173159] + CVE-2020-10745: invalid DNS or NBT queries containing dots use several seconds of CPU each; (bso#14378); (bsc#1173160). + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP server with paged_result or VLV; (bso#14402); (bsc#1173161) + CVE-2020-14303: Endless loop from empty UDP packet sent to AD DC nbt_server; (bso#14417); (bsc#1173359). - Update to samba 4.11.10 + Fix segfault when using SMBC_opendir_ctx() routine for share folder that contains incorrect symbols in any file name; (bso#14374). + vfs_shadow_copy2 doesn't fail case looking in snapdirseverywhere mode; (bso#14350) + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr; (bso#14413). + Malicous SMB1 server can crash libsmbclient; (bso#14366) + winbindd: Fix a use-after-free when winbind clients exit; (bso#14382) + ldb: Bump version to 2.0.11, LMDB databases can grow without bounds. (bso#14330) - Update to samba 4.11.9 + nmblib: Avoid undefined behaviour in handle_name_ptrs(); (bso#14242). + 'samba-tool group' commands do not handle group names with special chars correctly; (bso#14296). + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo is not valid; (bso#14237). + Missing check for DMAPI offline status in async DOS attributes; (bso#14293). + smbd: Ignore set NTACL requests which contain S-1-5-88 NFS ACEs; (bso#14307). + vfs_recycle: Prevent flooding the log if we're called on non-existant paths; (bso#14316) + smbd mistakenly updates a file's write-time on close; (bso#14320). + RPC handles cannot be differentiated in source3 RPC server; (bso#14359). + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313). + nsswitch: Fix use-after-free causing segfault in _pam_delete_cred; (bso#14327). + Fix fruit:time machine max size on arm; (bso#13622) + CTDB recovery corner cases can cause record resurrection and node banning; (bso#14294). + ctdb: Fix a memleak; (bso#14348). + libsmb: Don't try to find posix stat info in SMBC_getatr(). + ctdb-tcp: Move free of inbound queue to TCP restart; (bso#14295); (bsc#1162680). + s3/librpc/crypto: Fix double free with unresolved credential cache; (bso#14344); (bsc#1169095) + s3:libads: Fix ads_get_upn(); (bso#14336). + CTDB recovery corner cases can cause record resurrection and node banning; (bso#14294) + Starting ctdb node that was powered off hard before results in recovery loop; (bso#14295); (bsc#1162680). + ctdb-recoverd: Avoid dereferencing NULL rec->nodemap; (bso#14324) - Update to samba 4.11.8 + CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with ASQ; (bso#14331); (bsc#1169850); + CVE-2020-10704: LDAP Denial of Service (stack overflow) in Samba AD DC; (bso#14334); (bsc#1169851); - Update to samba 4.11.7 + s3: lib: nmblib. Clean up and harden nmb packet processing; (bso#14239). + s3: VFS: full_audit. Use system session_info if called from a temporary share definition; (bso#14283) + dsdb: Correctly handle memory in objectclass_attrs; (bso#14258). + ldb: version 2.0.9, Samba 4.11 and later give incorrect results for SCOPE_ONE searches; (bso#14270) + auth: Fix CIDs 1458418 and 1458420 Null pointer dereferences; (bso#14247). + smbd: Handle EINTR from open(2) properly; (bso#14285) + winbind member (source3) fails local SAM auth with empty domain name; (bso#14247) + winbindd: Handling missing idmap in getgrgid(); (bso#14265). + lib:util: Log mkdir error on correct debug levels; (bso#14253). + wafsamba: Do not use 'rU' as the 'U' is deprecated in Python 3.9; (bso#14266). + ctdb-tcp: Make error handling for outbound connection consistent; (bso#14274). - Update to samba 4.11.6 + pygpo: Use correct method flags; (bso#14209). + vfs_ceph_snapshots: Fix root relative path handling; (bso#14216); (bsc#1141320). + Avoiding bad call flags with python 3.8, using METH_NOARGS instead of zero; (bso#14209). + source4/utils/oLschema2ldif: Include stdint.h before cmocka.h; (bso#14218). + docs-xml/winbindnssinfo: Clarify interaction with idmap_ad etc; (bso#14122). + smbd: Fix the build with clang; (bso#14251). + upgradedns: Ensure lmdb lock files linked; (bso#14199). + s3: VFS: glusterfs: Reset nlinks for symlink entries during readdir; (bso#14182). + smbc_stat() doesn't return the correct st_mode and also the uid/gid is not filled (SMBv1) file; (bso#14101). + librpc: Fix string length checking in ndr_pull_charset_to_null(); (bso#14219). + ctdb-scripts: Strip square brackets when gathering connection info; (bso#14227).- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);- Installing: samba - samba-ad-dc.service does not exist and unit not found; (bsc#1171437);- Fix samba_winbind package is installing python3-base without python3 package; (bsc#1169521);- Require libldb2 >= 2.0.10 after security release.- CVE-2020-10704: LDAP Denial of Service (stack overflow) in Samba AD DC; (bso#14334); (bsc#1169851); - CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with ASQ; (bso#14331); (bsc#1169850);- Fix smbclient crash with double free (with unresolved krb5 credential cache); (bso#14344); (bsc#1169095).- Starting ctdb node that was powered off hard before results in recovery loop; (bso#14295); (bsc#1162680).- CTDB doesn't retry outgoing connections on bind (and some other) failures; (bso#14274); (bsc#1162680).- Revert: Allow idmap_rid to have primary group other than "Domain Users"; (bsc#1087931).- Fix nmbstatus not reporting detailed information about workgroups; (bsc#1159464); - Fix querying all names registered within broadcast area; (bso#8927);- Update to samab 4.11.5 + CVE-2019-14902: Replication of ACLs down subtree on AD Directory is not automatic; (bso#12497); (bsc#1160850). + CVE-2019-19344: Fix server crash with dns zone scavenging = yes; (bso#14050); (bsc#1160852). + CVE-2019-14907: server-side crash after charset conversion failure (eg during NTLMSSP processing); (bso#14208); (bsc#1160888). - Update to samba 4.11.4 + Ensure SMB1 cli_qpathinfo2() doesn't return an inode number; (bso#14161). + Ensure we don't call cli_RNetShareEnum() on an SMB1 connection; (bso#14174). + NT_STATUS_ACCESS_DENIED becomes EINVAL when using SMB2 in SMBC_opendir_ctx; (bso#14176). + SMB2 - Ensure we use the correct session_id if encrypting an interim response; (bso#14189). + Prevent smbd crash after invalid SMB1 negprot; (bso#14205). + printing: Fix %J substition; (bso#13745). + Remove now unneeded call to cmdline_messaging_context(); (bso#13925). + Fix incomplete conversion of former parametric options; (bso#14069). + Fix sync dosmode fallback in async dosmode codepath; (bso#14070). + vfs_fruit returns capped resource fork length; (bso#14171). + libnet_join: Add SPNs for additional-dns-hostnames entries; (bso#14116). + smbd: Increase a debug level; (bso#14211). + Prevent azure ad connect from reporting discovery errors reference-value-not-ldap-conformant; (bso#14153). + krb5_plugin: Fix developer build with newer heimdal system library; (bso#14179). + replace: Only link libnsl and libsocket if required; (bso#14168); + ctdb: Incoming queue can be orphaned causing communication; breakdown; (bso#14175). + ldb: Release ldb 2.0.8. Cross-compile will not take cross-answers or cross-execute; (bso#13846). + heimdal-build: Avoid hard-coded /usr/include/heimdal in asn1_compile-generated code; (bso#13856).- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).- Update to samba 4.11.3 + CVE-2019-14861: DNSServer RPC server crash, an authenticated user can crash the DCE/RPC DNS management server by creating records with matching the zone name; (bso#14138); (bsc#1158108). + CVE-2019-14870: DelegationNotAllowed not being enforced, the DelegationNotAllowed Kerberos feature restriction was not being applied when processing protocol transition requests (S4U2Self), in the AD DC KDC; (bso#14187); (bsc#1158109).- CVE-2019-14861: DNSServer RPC server crash, an authenticated user can crash the DCE/RPC DNS management server by creating records with matching the zone name; (bso#14138); (bsc#1158108). - CVE-2019-14870: DelegationNotAllowed not being enforced, the DelegationNotAllowed Kerberos feature restriction was not being applied when processing protocol transition requests (S4U2Self), in the AD DC KDC; (bso#14187); (bsc#1158109).- Update to samba 4.11.2 + CVE-2019-10218: Client code can return filenames containing path separators; (bsc#1144902); (bso#14071). + CVE-2019-14833: Samba AD DC check password script does not receive the full password; (bso#12438). + CVE-2019-14847: User with "get changes" permission can crash AD DC LDAP server via dirsync; (bso#14040). - Fixes from 4.11.1 + Overlinking libreplace against librt and pthread against every binary or library causes issues; (bso#14140); + kpasswd fails when built with MIT Kerberos; (bso#14155); + Fix spnego fallback from kerberos to ntlmssp in smbd server; (bso#14106); + Stale file handle error when using mkstemp on a share; (bso#14137); + non-AES schannel broken; (bso#14134); + Joining Active Directory should not use SAMR to set the password; (bso#13884); + smbclient can blunder into the SMB1 specific cli_RNetShareEnum() call on an SMB2 connection; (bso#14152); + Deleted records can be resurrected during recovery; (bso#14147); + getpwnam and getpwuid need to return data for ID_TYPE_BOTH group; (bso#14141); + winbind does not list forest trusts with additional trust attributes; (bso#14130); + fault report points to outdated documentation; (bso#14139); + pam_winbind with krb5_auth or wbinfo -K doesn't work for users of trusted domains/forests; (bso#14124); + classicupgrade results in uncaught exception - a bytes-like object is required, not 'str'; (bso#14136); + pod2man is not longer required, stop checking at build time; (bso#14131); + Exit code of ctdb nodestatus should not be influenced by deleted nodes; (bso#14129); + username/password authentication doesn't work with CUPS and smbspool; (bso#14128); + smbc_readdirplus() is incompatible with smbc_telldir() and smbc_lseekdir(); (bso#14094);- CVE-2019-14847: User with "get changes" permission can crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598); - CVE-2019-10218: Client code can return filenames containing path separators; (bso#14071); (bsc#1144902);- CVE-2019-14833: samba: Accent with "check script password" Samba AD DC check password script does not receive the full password; (bso#12438); (bsc#1154289).- Update to samba 4.11.0 + For details on all items see WHATSNEW.txt in samba-doc package + Python2 runtime support removed; python 3.4 or later required + Security improvements: - SMB1 disabled by default - lanman and plaintext authentication deprecated - winbind: PAM_AUTH and NTLM_AUTH events logged - GnuTLS 3.2 required; system FIPS mode setting honored + CephFS Snapshot integration, exposed as previous file versions + ctdb changes: - onnode -o option removed - ctdbd logs when using more than 90% of a CPU thread - CTDB_MONITOR_SWAP_USAGE variable removed + AD Domain controller improvements: - Upgrade AD databse format - BIND9_FLATFILE deprecated - default process model chagned to prefork - bind9 dns operation duration logging - Default schema updated to 2012_R2; function level is unchanged - many performance improvements + Configuration webserver support removed- Fix broken username/password authentication with CUPS and smbspool; (bsc#1152143); (bso#14128).- Fix auth problems when printing via smbspool backend with kerberos; (bnc#1148539); (bso#13832).- Update to samba 4.10.8 + CVE-2019-10197: user escape from share path definition; (bso#14035); (bsc#1141267);- Fix build on newer systems by modifying samba.spec to use consistent non-relative paths for pammodules in configure line and specification of pam_winbind.so library to package.- Update to samba 4.10.7 + Unable to create or rename file/directory inside shares configured with vfs_glusterfs_fuse module; (bso#14010). + build: Allow build when '--disable-gnutls' is set; (bso#13844) + samba-tool: Add 'import samba.drs_utils' to fsmo.py; (bso#13973). + Fix 'Error 32 determining PSOs in system' message on old DB with FL upgrade; (bso#14008). + s4/libnet: Fix joining a Windows pre-2008R2 DC; (bso#14021) + join: Use a specific attribute order for the DsAddEntry nTDSDSA object; (bso#14046). + vfs_catia: Pass stat info to synthetic_smb_fname(); (bso#14015). + lookup_name: Allow own domain lookup when flags == 0; (bso#14091). + s4 librpc rpc pyrpc: Ensure tevent_context deleted last; (bso#13932). + DEBUGC and DEBUGADDC doesn't print into a class specific log file; (bso#13915). + Request to keep deprecated option "server schannel", VMWare Quickprep requires "auto"; (bso#13949). + dbcheck: Fallback to the default tombstoneLifetime of 180 days; (bso#13967). + dnsProperty fails to decode values from older Windows versions; (bso#13969). + samba-tool: Use only one LDAP modify for dns partition fsmo role transfer; (bso#13973). + third_party: Update waf to version 2.0.17; (bso#13960). + netcmd: Allow 'drs replicate --local' to create partitions; (bso#14051). + ctdb-config: Depend on /etc/ctdb/nodes file; (bso#14017).- CVE-2019-10197: user escape from share path definition; (bso#14035); (bsc#1141267).- Prepare for use future use of kernel keyrings, modify /etc/pam.d/samba to include pam_keyinit.so; (bsc#1144059).- Update samba-winbind script to work with systemd; (bsc#1132739); - Drop samba dhcpcd hook scripts - Update to samba 4.10.6 + s3: winbind: Fix crash when invoking winbind idmap scripts; (bso#13956). + smbd does not correctly parse arguments passed to dfree and quota scripts; (bso#13964). + samba-tool dns: use bytes for inet_ntop; (bso#13965). + samba-tool domain provision: Fix --interactive module in python3; (bso#13828). + ldb_kv: Skip @ records early in a search full scan; (bso#13893). + docs: Improve documentation of "lanman auth" and "ntlm auth" connection; (bso#13981). + python/ntacls: Use correct "state directory" smb.conf option instead of "state dir"; (bso#14002). + registry: Add a missing include; (bso#13840). + Fix SMB guest authentication; (bso#13944). + AppleDouble conversion breaks Resourceforks; (bso#13958). + vfs_fruit makes direct use of syscalls like mmap() and pread(); (bso#13968). + s3:mdssvc: Fix flex compilation error; (bso#13987). + s3/vfs_glusterfs[_fuse]: Avoid using NAME_MAX directly; (bso#13872). + dsdb:samdb: schemainfo update with relax control; (bso#13799). + s3:util: Move static file_pload() function to lib/util; (bso#13964). + smbd: Fix a panic; (bso#13957). + ldap server: Generate correct referral schemes; (bso#12478). + s4 dsdb/repl_meta_data: fix use after free in dsdb_audit_add_ldb_value; (bso#13941). + s4 dsdb: Fix use after free in samldb_rename_search_base_callback; (bso#13942). + dsdb/repl: we need to replicate the whole schema before we can apply it; (bso#12204). + ldb: Release ldb 1.5.5; (bso#12478). + Schema replication fails if link crosses chunk boundary backwards; (bso#13713). + 'samba-tool domain schemaupgrade' uses relax control and skips the schemaInfo update provision; (bso#13799). + dsdb_audit: avoid printing "... remote host [Unknown] SID [(NULL SID)] ..."; (bso#13916). + python/ntacls: We only need security.SEC_STD_READ_CONTROL in order to get the ACL; (bso#13917). + s3:loadparm: Ensure to truncate FS Volume Label at multibyte boundary; (bso#13947). + Using Kerberos credentials to print using spoolss doesn't work; (bso#13939). + wafsamba: Use native waf timer; (bso#13998). + ctdb-scripts: Fix tcp_tw_recycle existence check; (bso#13984).- Update to samba-4.10.5 (including updates for 4.10.4, 4.10.3) + CVE-2019-12435 rpc/dns: Avoid NULL deference if zone not found in DnssrvOperation2; (bso#13922); (bsc#1137815). + CVE-2019-12436 dsdb/paged_results: Ignore successful results without messages; (bso#13951); (bsc#1137816). - Update to samba-4.10.4 + s3: SMB1: Don't allow recvfile on stream fsp's; (bso#13938). + py/provision: Fix for Python 2.6; (bso#13882). + netcmd: Fix 'passwordsettings --max-pwd-age' command; (bso#13873). + s3-libnet_join: 'net ads join' to child domain fails when using "-U admin@forestroot"; (bso#13861). + vfs_ceph: Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245). + vfs_ceph: Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697). + ctdb-common: Avoid race between fd and signal events; (bso#13895). + ctdb-common: Fix memory leak in run_proc; (bso#13943). + lib: Initialize getline() arguments; (bso#13892). + winbind: Fix overlapping id ranges; (bco#13903). + lib util debug: Increase format buffer to 4KiB; (bso#13902). + nsswitch pam_winbind: Fix Asan use after free; (bso#13927). + s4 lib socket: Ensure address string owned by parent struct; (bso#13929). + s3 rpc_client: Fix Asan stack use after scope; (bso#13936). + s3:smbd: Handle IO_REPARSE_TAG_DFS in SMB_FIND_FILE_FULL_DIRECTORY_INFO; (bso#10097). + smb2_tcon: Avoid STATUS_PENDING completely on tdis; (bso#10344). + smb2_sesssetup: avoid STATUS_PENDING responses for session setup; (bso#12845). + smb2_tcon: Avoid STATUS_PENDING completely on tdis; (bso#13698). + smb2_sesssetup: avoid STATUS_PENDING responses for session setup; (bso#13796). + dbcheck: Fix the err_empty_attribute() check; (bso#13843). + vfs_snapper: Drop unneeded fstat handler; (bso#13858). + vfs_default: Fix vfswrap_offload_write_send() NT_STATUS_INVALID_VIEW_SIZE check; (bso#13862). + smb2_server: Grant all 8192 credits to clients; (bso#13863). + smbd: Implement SMB_FILE_NORMALIZED_NAME_INFORMATION handling; (bso#13919). + s3/vfs_glusterfs: Dynamically determine NAME_MAX; (bso#13872). + s3: modules: ceph: Use current working directory instead of share path; (bso#13918); (bsc#1134452). + winbind: Use domain name from lsa query for sid_to_name cache entry; (bso#13831). + memcache: Increase size of default memcache to 512k; (bso#13865). + docs: Update smbclient manpage for "--max-protocol"; (bso#13857). + s3:utils: If share is NULL in smbcacls, don't print it; (bso#13937). + s3:smbspool: Fix regression printing with Kerberos credentials; (bso#13939). + ctdb-scripts: CTDB restarts failed NFS RPC services by hand, which is incompatible with systemd; (bso#13860). + ctdb-daemon: Revert "We can not assume that just because we could complete a TCP handshake"; (bso#13888). + ctdb-daemon: Never use 0 as a client ID; (bso#13930). + ctdb-common: Fix memory leak; (bso#13943). + s3:debug: Enable logging for early startup failures; (bso#13904) - Update to samba-4.10.3 + CVE-2018-16860: Heimdal KDC: Reject PA-S4U2Self with unkeyed checksum; (bso#13685); (bsc#1134024).- CVE-2019-12435: zone operations can crash rpc server; (bso#13922); (bsc#1137815).- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697). - Add ceph_snapshots VFS module; (jsc#SES-183).- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).- Update to samba-4.10.2: + CVE-2019-3870 (World writable files in Samba AD DC private/ dir); (bso#13834). + CVE-2019-3880 (Save registry file outside share as unprivileged user); (bso#13851). + py/kcc_utils: py2.6 compatibility; (bso#13837). + libcli: permit larger values of DataLength in SMB2_ENCRYPTION_CAPABILITIES of negotiate response; (bso#13869). + regfio: Improve handling of malformed registry hive files; (bso#13840). + ctdb-version: Simplify version string usage; (bso#13789). + lib: Make fd_load work for non-regular files; (bso#13859). + dbcheck: in the middle of the tombstone garbage collection causes replication failures, dbcheck: add --selftest-check-expired-tombstones cmdline option; (bso#13816). + ndr_spoolss_buf: Fix out of scope use of stack variable in NDR_SPOOLSS_PUSH_ENUM_OUT(); (bso#13818). + s4/messaging: Fix undefined reference in linking libMESSAGING-samba4.so; (bso#13854). + acl_read: Fix regression for empty lists; (bso#13836). + s4:dlz make b9_has_soa check dc=@ node; (bso#13841). + s3:client: Fix printing via smbspool backend with kerberos auth; (bso#13832). + s4:librpc: Fix installation of Samba; (bso#13847). + s3:lib: Fix the debug message for adding cache entries; (bso#13848). + s3:utils: Add 'smbstatus -L --resolve-uids' to show username; (bso#13793). + s3:lib: Fix the debug message for adding cache entries; (bso#13848). + s3:waf: Fix the detection of makdev() macro on Linux; (bso#13853). * ctdb-build: Drop creation of .distversion in tarball; (bso#13789). * ctdb-packaging: Test package requires tcpdump, ctdb package should not own system library directory; (bso#13838). - Update to samba-4.10.1: + py/kcc_utils: py2.6 compatibility; (bso#13837); + libcli: permit larger values of DataLength in SMB2_ENCRYPTION_CAPABILITIES of negotiate response; (bso#13869); + regfio: Improve handling of malformed registry hive files; (bso#13840); + ctdb-version: Simplify version string usage; (bso#13789); + lib: Make fd_load work for non-regular files; (bso#13859); + dbcheck in the middle of the tombstone garbage collection causes replication failures, dbcheck: add --selftest-check-expired-tombstones cmdline option; (bso#13816); + ndr_spoolss_buf: Fix out of scope use of stack variable in NDR_SPOOLSS_PUSH_ENUM_OUT(); (bso#13818); + s4/messaging: Fix undefined reference in linking libMESSAGING-samba4.so; (bso#13854); + acl_read: Fix regression for empty lists; (bso#13836); + s4:dlz make b9_has_soa check dc=@ node; (bso#13841); + s3:client: Fix printing via smbspool backend with kerberos auth; (bso#13832); + s4:librpc: Fix installation of Samba; (bso#13847); + s3:lib: Fix the debug message for adding cache entries; (bso#13848); + s3:utils: Add 'smbstatus -L --resolve-uids' to show username; (bso#13793); + s3:lib: Fix the debug message for adding cache entries; (bso#13848); + s3:waf: Fix the detection of makdev() macro on Linux; (bso#13853); + ctdb-build: Drop creation of .distversion in tarball; (bso#13789); + ctdb-packaging: Test package requires tcpdump, ctdb package should not own system library directory; (bso#13838); - Update to samba-4.10.0: + s4-server: Open and close a transaction on sam.ldb at startup; (bso#13760); + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812); + s4/scripting/bin: Open unicode files with utf8 encoding and write + unicode string. + sambaundoguididx: Use the right escaped oder unescaped sam ldb files; (bso#13759); + Fix idmap cache pollution with S-1-22- IDs on winbind hickup; (bso#13813); + passdb: Update ABI to 0.27.2. + lib/winbind_util: Add winbind_xid_to_sid for --without-winbind; (bso#13813); + lib:util: Move debug message for mkdir failing to log level 1; (bso#13823);- MacOS credit accounting breaks with async SESSION SETUP; (bsc#1125601); (bso#13796). - Mac OS X SMB2 implmenetation sees Input/output error or Resource temporarily unavailable and drops connection; (bso#13698)- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).- CVE-2019-3880: Save registry file outside share as unprivileged user; (bso#13851); (bsc#1131060 ).- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0); (bso#13834); (bsc#1130703);- Update to samba-4.9.5 + audit_logging: Remove debug log header and JSON Authentication: prefix; (bso#13714); + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760); + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso# CID: 1433607; (bso#11495); + smbd: uid: Don't crash if 'force group' is added to an existing share connection; (bso#13690); + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility code; (bso#13770); + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803); + s3:utils/smbget fix recursive download with empty source directories; (bso#13199); + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716); + s3:libsmb: cli_smb2_list() can sometimes fail initially on a connection; (bso#13736); + join: Throw CommandError instead of Exception for simple errors; (bso#13747); + ldb: Avoid inefficient one-level searches; (bso#13762); + s3: libsmb: use smb2cli_conn_max_trans_size() in cli_smb2_list(); (bso#13736); + tldap: Avoid use after free errors; (bso#13776); + Fix idmap xid2sid cache churn; (bso#13802); + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812); + s3-smbd: Avoid assuming fsp is always intact after close_file call; (bso#13720); + s3-vfs-fruit: Add close call; (bso#13725); + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746); + s3-vfs: add glusterfs_fuse vfs module; (bso#13774); + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766); + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS) ftruncate and fallocate; (bso#13807); + lib/audit_logging: Actually create talloc; (bso#13737); + netcmd/user: python[3]-gpgme unsupported and replaced by python[3]-gpg; (bso#13728); + dns: Changing onelevel search for wildcard to subtree; (bso#13738); + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721); + sambaundoguididx: Use the right escaped oder unescaped sam ldb files; (bso#13759); + ctdb: Print locks latency in machinereadable stats; (bso#13742); + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786); + audit_logging: auth_json_audit required auth_json; (bso#13715); + man pages: Document prefork process model; (bso#13765); + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773); + s3:auth: ignore create_builtin_guests() failing without a valid idmap configuration; (bso#13697); + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC without trusts; (bso#13722); + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd is not available; (bso#13723); + s4:server: Add support for 'smbcontrol samba shutdown' and 'smbcontrol debug/debuglevel'; (bso#13752); + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616); + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330); + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774); + notifyd: Fix SIGBUS on sparc; (bso#13704); + waf: Check for libnscd; (bso#13787); + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770); + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717); + Recovery lock bug fixes; (bso#13800); + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726); + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727); + vfs_fileid: Fix get_connectpath_ino; (bso#13741); + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).- Fix update-apparmor-samba-profile script after apparmor switched to using named profiles. The change is backwards compatible; (bsc#1126377);- LoadParm().load_default() fails with "Unable to load default file"; (bsc#1089758);- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);- Update to samba-4.9.4 + libcli/smb: Don't overwrite status code; (bso#9175). + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164). + Session setup reauth fails to sign response; (bso#13661). + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677). + vfs_shadow_copy2: Nicely deal with attempts to open previous version for writing; (bso#13688). + Restoring previous version of stream with vfs_shadow_copy2 fails with NT_STATUS_OBJECT_NAME_INVALID fsp->base_fsp->fsp_name; (bso#13455). + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571). + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708) + PEP8: fix E231: missing whitespace after ','. + winbindd: Fix crash when taking profiles;(bso#13629) + CVE-2018-14629 dns: Fix CNAME loop prevention using counter regression; (bso#13600) + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686). + CVE-2018-16853: Do not segfault if client is not set; (bso#13571). + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679) + ctdb-daemon: Exit with error if a database directory does not exist; (bso#13696). + s3:libads: Add net ads leave keep-account option; (bso#13498).- Drop more %if..%endif guards which are idempotent. - Drop requires on ldconfig which are already auto-discovered. - Do not ignore errors from useradd/groupadd.- Remove python2 build dependency from samba-libs; (bsc#1116900);- Update update-apparmor-samba-profile script to ignore the shares's paths containing substitution variables in any place, not only at the beginning of the path.- Update to samba-4.9.3 + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD Internal DNS server; (bso#13600); (bsc#1116319); + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628); (bsc#1116320); + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server; (bso#13674); (bsc#1116322); + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers; (bso#13669); (bsc#1116321); + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos configuration (unsupported); (bso#13678); (bsc#1116324); + CVE-2018-16857: Bad password count in AD DC not always effective; window; (bso#13683); (bsc#1116323);- Update to samba-4.9.2 + dsdb: Add comments explaining the limitations of our current backlink behaviour; (bso#13418); + Fix problems running domain backups (handling SMBv2, sites); (bso#13621); + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3; (bso#13465); + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642); + File saving issues with vfs_fruit on samba >= 4.8.5; (bso#13646); + Enabling vfs_fruit looses FinderInfo; (bso#13649); + Cancelling of SMB2 aio reads and writes returns wrong error NT_STATUS_INTERNAL_ERROR; (bso#13667); + Fix CTDB recovery record resurrection from inactive nodes and simplify vacuuming; (bso#13641); + examples: Fix the smb2mount build; (bso#13465); + libtevent: Fix build due to missing open_memstream on Illiumos; (bso#13629); + winbindd_cache: Fix timeout calculation for sid<->name cache; (bso#13662); + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path; (bso#13653); + Extended DN SID component missing for member after switching group membership; (bso#13418); + Return STATUS_SESSION_EXPIRED error encrypted, if the request was encrypted; (bso#13624); + python: Allow forced signing via smb.SMB(); (bso#13621); + lib:socket: If returning early, set ifaces; (bso#13665); + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8 encoded unicode; (bso#13616); + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute; (bso#13673); + waf: Add -fstack-clash-protection; (bso#13601); + winbind: Fix segfault if an invalid passdb backend is configured; (bso#13668); + Fix bugs in CTDB event handling; (bso#13659); + Misbehaving nodes are sometimes not banned; (bso#13670);- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);- winbind requires latest version of libtevent-util0 to start- Backport latest gpo code from master + Read policy from local gpt cache + Offline policy application + Make group policy extensible via register/unregister gpext + gpext's run via a process_group_policy method- Enable profiling data collection- Change samba-kdc package name to samba-ad-dc - Move samba-ad-dc.service to the samba-ad-dc package- Update to samba-4.9.1 + s3: nmbd: Stop nmbd network announce storm; (bso#13620); + s3-rpcclient: Use spoolss_init_spoolss_UserLevel1 in winspool cmds; (bso#13597); + CTDB recovery lock has some race conditions; (bso#13617); + s3-rpc_client: Advertise Windows 7 client info; (bso#13597); + ctdb-doc: Remove PIDFILE option from ctdbd_wrapper man page; (bso#13610);- Tumbleweed doesn't define the sle_version macro, so we must include a check for suse_version also. Otherwise python3 is disabled on Tumbleweed.- Update to samba-4.9.0 + samba_dnsupdate: Honor 'dns zone scavenging' option, only update if needed; (bso#13605); + wafsamba: Fix 'make -j'; (bso#13606);- Update to samba-4.9.0rc5 + s3: VFS: vfs_full_audit: Ensure smb_fname_str_do_log() only returns absolute pathnames; (bso#13565); + s3: util: Do not take over stderr when there is no log file; (bso#13578); + Durable Reconnect fails because cookie.allow_reconnect is not set; (bso#13549); + krb5-samba: Interdomain trust uses different salt principal; (bso#13539); + vfs_fruit: Don't unlink the main file; (bso#13441); + smbd: Fix a memleak in async search ask sharemode; (bso#13602); + Fix Samba GPO issue when Trust is enabled; (bso#11517); + samba-tool: Add "virtualKerberosSalt" attribute to 'user getpassword/syncpasswords'; (bso#13539); + Fix CTDB configuration issues; (bso#13589); + ctdbd logs an error until it can successfully connect to eventd; (bso#13592);- Update to samba-4.9.0rc4 + s3: smbd: Ensure get_real_filename() copes with empty pathnames; (bso#13585); + samba domain backup online/rename commands force user to specify password on CLI; (bso#13566); + wafsamba/samba_abi: Always hide ABI symbols which must be local; (bso#13579); + Fix a panic if fruit_access_check detects a locking conflict; (bso#13584); + Fix memory and resource leaks; (bso#13567); + python: Fix print in dns_invalid.py; (bso#13580); + Aliasing issue causes incorrect IPv6 checksum; (bso#13588); + Fix CTDB configuration issues; (bso#13589); + s3: vfs: time_audit: fix handling of token_blob in smb_time_audit_offload_read_recv(); (bso#13568);- Add missing zlib-devel dependency which was previously pulled in by libopenssl-devel- Update to samba-4.9.0rc3+git.22.3fff23ae36e + CVE-2018-10858: libsmb: Harden smbc_readdir_internal() against returns from malicious servers; (bso#13453); + CVE-2018-1140: ldbsearch '(distinguishedName=abc)' and DNS query with escapes crashes, ldb: Release LDB 1.3.5 for CVE-2018-1140; (bso#13374); + CVE-2018-10918: cracknames: Fix DoS (NULL pointer de-ref) when not servicePrincipalName is set on a user; (bso#13552); + CVE-2018-10919: acl_read: Fix unauthorized attribute access via searches; (bso#13434); + ctdb_mutex_ceph_rados_helper: Set SIGINT signal handler; (bso#13540); + CVE-2018-1139 libcli/auth: Do not allow ntlmv1 over SMB1 when it is disabled via "ntlm auth"; (bso#13360); + s3-tldap: do not install test_tldap; (bso#13529); + ctdb_mutex_ceph_rados_helper: Fix deadlock via lock renewals; (bso#13540); + CVE-2018-1140 Add NULL check for ldb_dn_get_casefold() in ltdb_index_dn_attr(); (bso#13374); + ctdb-eventd: Fix CID 1438155; (bso#13554); + Fix CIDs 1438243, (Unchecked return value) 1438244 (Unsigned compared against 0), 1438245 (Dereference before null check) and 1438246 (Unchecked return value); (bso#13553); + ctdb: Fix a cut&paste error; (bso#13554); + systemd: Only start smb when network interfaces are up; (bso#13559); + Fix quotas don't work with SMB2; (bso#13553); + s3/smbd: Ensure quota code is only called when quota support detected; (bso#13563); + s3/libsmb: Explicitly set delete_on_close token for rmdir; (bso#13204); + s3:waf: Install eventlogadm to /usr/sbin; (bso#13561); + Shorten description in vfs_linux_xfs_sgid manual; (bso#13562);- Update to samba-4.9.0rc2+git.21.a1069afb007 + s3: smbd: Using "sendfile = yes" with SMB2 can cause CPU spin; (bso#13537); + s3: smbd: Fix path check in smbd_smb2_create_durable_lease_check(); (bso#13535); + samba-tool trust: Support discovery via netr_GetDcName; (bso#13538); + s4-dsdb: Only build dsdb Python modules for AD DC; (bso#13542); + Fix portability issues on freebsd; (bso#13520); + DNS wildcard search does not handle multiple labels correctly; (bso#13536); + samba-tool domain trust: Fix trust compatibility to Windows Server 1709 and FreeIPA; (bso#13308); + Fix portability issues on freebsd; (bso#13520); + ctdb-protocol: Fix CTDB compilation issues; (bso#13545); + ctdb-docs: Replace obsolete reference to CTDB_DEBUG_HUNG_SCRIPT option; (bso#13546); + ctdb-doc: Provide an example script for migrating old configuration; (bso#13550); + ctdb-event: Implement event tool "script list" command; (bso#13551);- Update to samba-4.8.4+git.37.a7a861d7982; + CVE-2018-1139: Weak authentication protocol allowed; (bsc#1095048); (bsc#13360); + CVE-2018-1140: Denial of Service Attack on DNS and LDAP server; (bsc#1095056); (bso#13466); (bso#13374); + CVE-2018-10858: Insufficient input validation on client directory listing in libsmbclient; (bsc#1103411); (bso#13453); + CVE-2018-10918: Denial of Service Attack on AD DC DRSUAPI server; (bsc#1103414); (bso#13552); + CVE-2018-10919: Confidential attribute disclosure from the AD LDAP server; (bsc#1095057); (bso#13434); + s3:winbind: winbind normalize names' doesn't work for users; (bso#12851); + winbind: Fix UPN handling in canonicalize_username(); (bso#13369); + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428); + samdb: Fix building Samba with gcc 8.1; (bso#13437); + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440); + smbd: Flush dfree memcache on service reload; (bso#13446); + ldb: Save a copy of the index result before calling the + lib/util: No Backtrace given by Samba's AD DC by default; (bso#13454). + s3: smbd: printing: Re-implement delete-on-close semantics for print files missing since 3.5.x; (bso#13457). + python: Fix talloc frame use in make_simple_acl(); (bso#13474). + krb5_wrap: Fix keep_old_entries logic for older Kerberos libraries;(bso#13478). + krb5_plugin: Add winbind localauth plugin for MIT Kerberos; (bso#13480).- Add missing package descriptions; (bsc#1093864); - Fix dependency issue between samba-python and samba-kdc; (bsc#1062876); - Call update-apparmor-samba-profile when running samba-ad-dc; (bsc#1092099);- Update to 4.8.2 + After update to 4.8.0 DC failed with "Failed to find our own NTDS Settings objectGUID" (bso#13335). + fix incorrect reporting of stream dos attributes on a directory (bso#13380). + vfs_ceph: add asynchronous fsync; fake synchronous call (bso#13412). + vfs_ceph: add fake async pwrite/pread send/recv hooks; (bso#13425) + vfs_ceph: Fix memory leak; (bso#13424). + libsmbclient: Fix hard-coded connection error return of ETIMEDOUT; (bso#13419). + s4-lsa: Fix use-after-free in LSA server; (bso#13420). + winbindd: Do re-connect if the RPC call fails in the passdb case; (bso#13430). + cleanupd: Sends MSG_SMB_UNLOCK twice to interested peers; (bso#13416). + cleanupd: Use MSG_SMB_BRL_VALIDATE to signal cleanupd unclean process shutdown; (bso#13414). + ctdb-client: Remove ununsed functions from old client code; (bso#13411). + printing: Return the same error code as windows does on upload failures; (bso#13395). + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged pipe is not accessable; (bso#13400). + s4:lsa_lookup: remove TALLOC_FREE(state) after all dcesrv_lsa_Lookup{Names,Sids}_base_map() calls; (bso#13420). + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407). + s3:smbspool: Fix cmdline argument handling; (bso#13417).- Move libdfs-server-ad-samba4.so library from kdc to libs package, as it is required by some client libs; (bsc#1074135); - Update to 4.8.1; (bsc#1091179); + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error, we don't own it here; (bso#13244); + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't support fdopendir(); (bso#13270); + Round-tripping ACL get/set through vfs_fruit will increase the number of ACE entries without limit; (bso#13319); + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit issues; (bso#13347); + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without delete access; (bso#13358); + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372); + s3: smbd: Unix extensions attempts to change wrong field in fchown call; (bso#13375); + ms_schema/samba-tool visualize: Fix python2.6 incompatibility; (bso#13337); + Fix invocation of gnutls_aead_cipher_encrypt(); (bso#13352); + Windows 10 cannot logon on Samba NT4 domain; (bso#13328); + winbindd: Recover loss of netlogon secure channel in case the peer DC is rebooted; (bso#13332); + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363); + ctdb-client: Fix bugs in client code; (bso#13356); + ctdb-scripts: Drop "net serverid wipe" from 50.samba event script; (bso#13359); + s3: lib: messages: Don't use the result of sec_init() before calling sec_init(); (bso#13368); + libads: Fix the build '--without-ads'; (bso#13273); + winbind: Keep "force_reauth" in invalidate_cm_connection, add 'smbcontrol disconnect-dc'; (bso#13332); + vfs_virusfilter: Fix CIDs 1428738-1428740; (bso#13343); + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367); + rpc_server: Fix core dump in dfsgetinfo; (bso#13370); + smbclient: Fix notify; (bso#13382); + Fix smbd panic if the client-supplied channel sequence number wraps; (bso#13215); + Windows 10 cannot logon on Samba NT4 domain; (bso#13328); + lib/util: Remove unused '#include ' from tests/tfork.c; (bso#13342); + Fix build errors with cc from developerstudio 12.5 on Solaris; (bso#13343); + Fix the picky-developer build on FreeBSD 11; (bso#13344); + s3:modules: Fix the build of vfs_aixacl2.c; (bso#13345); + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338); + lib:replace: Fix linking when libtirpc-devel overwrites system headers; (bso#13341); + winbindd: 'wbinfo --name-to-sid' returns misleading result on invalid query; (bso#13312); + s3:passdb: Do not return OK if we don't have pinfo set up; (bso#13376); + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);- Use new foreground execution flags for systemd samba daemons; (bsc#1088574); (bsc#1071090); (bsc#1065551); + Add %post scriptlet to clear old sysconfig flags - Update vendor-files to commit 880b3e7. + Set samba sysconfig template variables to "" + Add required daemon flags directly to systemd unit- Specfile cleanup + Remove %if..%endif guards which don't affect the build + Remove redundant %clean section + Replace old $RPM_* shell vars with macros- BuildRequire pkgconfig(systemd) and pkgconfig(libsystemd) in place of systemd and systemd-devel: Allow OBS to optimize the workload by allowing the usage of the 'build-optimized' systemd packages.- Enable building samba with python3, and create a samba-python3 package.- Update to 4.8 + New GUID Index mode in sam.ldb for the AD DC + GPO support for samba KDC + Time machine support with vfs_fruit + Encrypted secrets + AD Replication visualization + Improved trust support - ability to not scan global trust list - AD external trusts have limited support - verbose trusted domain listing + VirusFilter VFS module + NT4-style replication removed + vfs_aio_linux removed- Disable samba-pidl package, due to the removal of dependency perl-Parse-Yapp; (bsc#1085150);- Update to 4.7.6; + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally; (bso#11343); (bsc#1081741); + CVE-2018-1057: Authenticated users can change other users' password; (bso#13272); (bsc#1081024).- Disable python until full python3 port is done; (bsc#1082139); + Remove contents of package samba-python + Remove contents of package libsamba-policy0 + Remove contents of package libsamba-policy-devel + Remove library libsamba-python-samba4.so from samba-libs package + Remove library libsamba-net-samba4.so from samba-libs package + Remove smbtorture binary and manpage from samba-test- samba fails to build with glibc2.27; (bsc#1081042);- Update to 4.7.5; (bsc#1080545); + smbd tries to release not leased oplock during oplock II downgrade; (bso#13193); + Fix copying file with empty FinderInfo from Windows client to Samba share with fruit; (bso#13181); + build: Deal with recent glibc sunrpc header removal; (bso#10976); + Make Samba work with tirpc and libnsl2; (bso#13238); + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208); (bsc#1075206); + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue; (bso#12986); + ctdb-recovery-helper: Deregister message handler in error paths; (bso#13188); + samba: Only use async signal-safe functions in signal handler; (bso#13240); + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue; (bso#12986); + repl_meta_data: Fix linked attribute corruption on databases with unsorted links on expunge. dbcheck: Add functionality to fix the corrupt database; (bso#13228); + Fix smbd panic when chdir returns error during exit; (bso#13189); + Make Samba work with tirpc and libnsl2; (bso#13238); + Fix POSIX ACL support on HPUX and possibly other big-endian OSs; (bso#13176);- Update to 4.7.4; (bsc#1080545); + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140); + s3: libsmb: Fix valgrind read-after-free error in cli_smb2_close_fnum_recv(); (bso#13171); + s3: libsmb: Fix reversing of oldname/newname paths when creating a reparse point symlink on Windows from smbclient; (bso#13172); + Build man page for vfs_zfsacl.8 with Samba; (bso#12934); + repl_meta_data: Allow delete of an object with dangling backlinks; (bso#13095); + s4:samba: Fix default to be running samba as a deamon; (bso#13129); + Performance regression in DNS server with introduction of DNS wildcard, ldb: Release 1.2.3; (bso#13191); + vfs_zfsacl: Fix compilation error; (bso#6133); + "smb encrypt" setting changes are not fully applied until full smbd restart; (bso#13051); + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052); + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155); + winbindd: Dependency on trusted-domain list in winbindd in critical auth codepath; (bso#13173); + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120); + ctdb: sock_daemon leaks memory; (bso#13153); + TCP tickles not getting synchronised on CTDB restart; (bso#13154); + winbindd: winbind parent and child share a ctdb connection; (bso#13150); + pthreadpool: Fix deadlock; (bso#13170); + pthreadpool: Fix starvation after fork; (bso#13179); + messaging: Always register the unique id; (bso#13180); + s4/smbd: set the process group; (bso#13129); + Fix broken linked attribute handling; (bso#13095); + The KDC on an RWDC doesn't send error replies in some situations; (bso#13132); + libnet_join: Fix 'net rpc oldjoin'; (bso#13149); + g_lock conflict detection broken when processing stale entries; (bso#13195); + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired sessions; (bso#13197); + s3:libads: net ads keytab list fails with "Key table name malformed"; (bso#13166); (bsc#1067700); + Fix crash in pthreadpool thread after failure from pthread_create; (bso#13170); + s4:samba: Allow samba daemon to run in foreground; (bso#13129); (bsc#1065551); + third_party: Link the aesni-intel library with "-z noexecstack"; (bso#13174); + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I" options; (bso#13125);- Re-enable usage of libnsl (did got lost with glibc change) - Use TI-RPC (sunrpc is deprecated and will be removed soon from glibc)- smbc_opendir should not return EEXIST with invalid login credentials; (bnc#1065868).- Update to 4.7.3; (bsc#1069666); + Non-smbd processes using kernel oplocks can hang smbd; (bso#13121); + python: use communicate to fix Popen deadlock; (bso#13127); + smbd on disk file corruption bug under heavy threaded load; (bso#13130); + tevent: version 0.9.34; (bso#13130); + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118); + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug; (bsc#1060427);(bso#13041); + CVE-2017-15275: s3: smbd: Chain code can return uninitialized memory when talloc buffer is grown; (bsc#1063008); (bso#13077); - Build with AD DC support only in openSUSE.- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- samba-tool requires samba-python; (bnc#1067771).- Run all daemons in the foreground and let systemd handle it; (bsc#1065551). - Update to 4.7.1; + Fix exporting subdirs with shadow_copy2; (bso#13091); + Currently if getwd() fails after a chdir(), we panic; (bso#13027); + Ensure default SMB_VFS_GETWD() call can't return a partially completed struct smb_filename; (bso#13068); + sys_getwd() can leak memory or possibly return the wrong errno on older systems; (bso#13069); + smbclient doesn't correctly canonicalize all local names before use; (bso#13093); + Fix broken linked attribute handling; (bso#13095); + Missing LDAP query escapes in DNS rpc server; (bso#12994); + Link to -lbsd when building replace.c by hand; (bso#13087); + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem; (bso#6133); + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module; (bso#7909); + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module; (bso#7933); + Missing assignment in sl_pack_float; (bso#12991); + Wrong Samba access checks when changing DOS attributes; (bso#12995); + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062); + groupmap cleanup should not delete BUILTIN mappings; (bso#13065); + Enabling vfs_fruit results in loss of Finder tags and other xattrs; (bso#13076); + man pages: Properly ident lists; (bso#9613); + smb.conf.5: Sort parameters alphabetically; (bso#13081); + Fix GUID string format on GetPrinter info; (bso#12993); + Remote serverid check doesn't check for the unique id; (bso#13042); + CTDB starts consuming memory if there are dead nodes in the cluster; (bso#13056); + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070); + libgpo doesn't sort the GPOs in the correct order; (bso#13046); + Remote serverid check doesn't check for the unique id; (bso#13042); + vfs_catia: Fix a potential memleak; (bso#13090); + Fix file change notification for renames; (bso#12903); + Samba DNS server does not honour wildcards; (bso#12952); + Can't change password in samba from a Windows client if Samba runs on IPv6 only interface; (bso#13079); + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086); + Apple client can't cope with SMB2 async replies when creating symlinks; (bso#13047); + s4:rpc_server:backupkey: Move variable into scope; (bso#12959); + Fix ntstatus_gen.h generation on 32bit; (bso#13099); + Fix a double free in vfs_gluster_getwd(); (bso#13100); + Fix resouce leaks and pointer issues; (bso#13101); + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);- Add samba-kdc to baselibs.conf. - Do not wrap samba-kdc's package definition into if/endif: the package won't be generated simply based on the fact that there is no files section for the package. Allows the source validator to ensure samba-kdc is a built package.- Update to 4.7.0; + Whole DB read locks: Improved LDAP and replication consistency; (bso#12858). + Samba AD with MIT Kerberos + Dynamic RPC port range: Default range changed from "1024-1300" to "49152-65535". + Authentication and Authorization audit support: New auth_audit debug class. + Multi-process LDAP Server: The LDAP server in the AD DC now honours the process model used for the rest of the 'samba' process. + Improved Read-Only Domain Controller (RODC) Support; (bso#12977). + Additional password hashes stored in supplementalCredentials. + Improvements to DNS during Active Directory domain join. + Significant AD performance and replication improvements. + Query record for open file or directory. + Removal of lpcfg_register_defaults_hook(). + Change of loadable module interface. + SHA256 LDAPS Certificates: The self-signed certificate generated for use on LDAPS will now be generated with a SHA256 self-signature, not a SHA1 self-signature. + CTDB no longer allows mixed minor versions in a cluster. + CTDB now ignores hints from Samba about TDB flags when attaching to databases. + New configuration variable CTDB_NFS_CHECKS_DIR. + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed. + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed. + The example NFS Ganesha call-out has been improved. + A new "replicated" database type is available.- CVE-2017-12163: Prevent client short SMB1 write from writing server memory to file; (bso#13020); (bsc#1058624).- CVE-2017-12150: Some code path don't enforce smb signing, when they should; (bso#12997); (bsc#1058622).- CVE-2017-12151: Keep required encryption across SMB3 dfs redirects; (bso#12996); (bsc#1058565).- Clean specfile assuming SUSE-only system and product >=SLE11 + %{ul_version}, %{rhel_version}, %{mandriva_version}, %{centos_version} are always undefined + %{_vendor} is "suse" and %{suse_version} is at least 1100- Update to 4.6.7; (bsc#1054017) + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392). + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937). + vfs_ceph provides inconsistent directory listings; (bso#12911). + Misused talloc context can cause a user to crash their smbd by chaining SMB1 commands.; (bso#12836). + Use-after free can crash libsmbclient code.; (bso#12927). + Server exit with active AIO can crash.; (bso#12925). + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910). + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs; (bso#12898). + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897). + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for authentication; (bso#12886). + finder sidebar showing question mark instead of icon when using ip to connect with vfs_fruit; (bso#12840). + Winbind stops obtaining the 'unixHomeDirectory' & 'loginShell' attributes from AD.; (bso#12720). + KCC run at selftest startup can fail spuriously due to a race; (bso#12869). + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for the remote change; (bso#12782). + rpc_pipe_client memory leaks due to long term memory context passed to rpc_pipe_open_interface(); (bso#12890). + CVE-2017-2619 breaks accessing previous versions of directories with snapshots in subdirectories of the share; (bso#12885). + dns_name_equal doing OOB read; (bso#12813). + replica_sync tests flap; (bso#12753). + Selftest should not call 'net cache flush' and wipe important winbind entries; (bso#12868). + Old Samba versions don't support using recent ldb versions (>=1.1.30); (bso#12859). + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490). + race starting winbindd against posixacl test; (bso#12843). + Crash in the reentrant smbd_smb2_create_send() if the something fails in the subsequent try; (bso#12832). + spnego.c passes the wrong argument order to gensec_update_ev() for the FALLBACK case; (bso#12788). + Clients with SMB3 support can't connect with "server max protocol = SMB2_02"; (bso#12772). + A log message of samb-tool user syncpasswords reverses string arguments in a debug message "Call Popen[...".; (bso#12768). + The smb tarmode tests kills the share dir contents; (bso#12867). + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862). + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860). + manpage/index.html lists links not in alphabetical order; (bso#12854). + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831). + If a record is locked in a database, then recovery does not complete; (bso#12857). + debug_locks.sh script does not log any information; (bso#12856). + SIGSEGV in cm_connect_lsa_tcp dereferencing conn->lsa_tcp_pipe->transport after error; (bso#12852). + smbclient can't parse DOMAIN+username if a different winbind separator is used; (bso#12849). + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845). + Related requests with TreeConnect fail with NETWORK_NAME_DELETED; (bso#12844). + cli->server_os not filled correctly; (bso#12779). + REGRESSION: smbclient doesn't print the session setup anymore; (bso#12824). + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808). + CTDB NFS call-out failures do not cause event failures; (bso#12837). + net command fails due to incorrectly return code; (bso#12828). + Fix building Samba with GCC 7.1; (bso#12827).- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again; (bsc#1048339).- fix cephwrap_chdir(); (bsc#1048790). - Update to 4.6.6 + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation; (bsc#1048278).- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).- Fix inconsistent ctdb socket path; (bsc#1048352). - Fix non-admin cephx authentication; (bsc#1048387).- Update to 4.6.5; (bsc#1040157) + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at startup; (bso#12814). + vfs_expand_msdfs tries to open the remote address as a file path; (bso#12687). + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type); (bso#12798). + With clustering get update_num_read_oplocks failed and PANIC: num_share_modes == 1 assertion failure; (bso#11844). + contend_level2_oplocks_begin_default oplock optimisation doesn't carry over to leases; (bso#12766). + `ctdb nodestatus` incorrectly displays status for all nodes with wrong exit code; (bso#12802). + CTDB can spin hard on revoking readonly delegations if a node becomes disconnected; (bso#12697). + Printing a share mode entry with leases can crash in the ndr code; (bso#12793). + Fix flakey unit tests for eventd; (bso#12792). + CTDB daemon crashes if built with clang; (bso#12770). + smbcacls fails if no password is specified; (bso#12765). + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757). + samba-tool user syncpasswords doesn't trigger the script when a user gets removed; (bso#12767). + systemd: fix detection of libsystemd; (bso#12764). + Notify subsystem only maps first inotify mask to Windows notify filter; (bso#12760). + Allow passing trusted domain password as plain-text to PASSDB layer; (bso#12751). + Can't case-rename files with vfs_fruit; (bso#12749). + wrong sid->uid mapping for SIDs residing in sIDHistory; (bso#12702). + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562). + Ordering of notify responses broken; (bso#12756).- s3: libsmb: Fix error where short name length was read as 2 bytes, should be 1; (bso#11822); (bsc#1042419).- Revert explicit winbind %{version}-%{release} dependency. + The ABI has stabilized since (bsc#936909), so remove to fix cross-media dependencies; (bsc#1037899).- Fix CVE-2017-7494 remote code execution from a writable share; (bso#12780); (bsc#1038231).- Update to 4.6.3; (bsc#1036011) + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots from shares with GlusterFS backend; (bso#12743). + Fix for Solaris C compiler; (bso#12559). + s3: locking: Update oplock optimization for the leases era; (bso#12628). + Make the Solaris C compiler happy; (bso#12693). + s3: libgpo: Allow skipping GPO objects that don't have the expected LDAP attributes; (bso#12695). + Fix buffer overflow caused by wrong use of getgroups; (bso#12747). + lib: debug: Avoid negative array access; (bso#12746). + cleanupdb: Fix a memory read error; (bso#12748). + streams_xattr and kernel oplocks results in NT_STATUS_NETWORK_BUSY; (bso#7537). + winbindd: idmap_autorid allocates ids for unknown SIDs from other backends; (bso#11961). + vfs_fruit: Resource fork open request with flags=O_CREAT|O_RDONLY; (bso#12565). + manpages/vfs_fruit: Document global options; (bso#12615). + lib/pthreadpool: Fix a memory leak; (bso#12624). + Lookup-domain for well-known SIDs on a DC; (bso#12727). + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728). + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729). + credentials_krb5: use gss_acquire_cred for client-side GSSAPI use case; (bso#12611). + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690). + ctdb-readonly: Avoid a tight loop waiting for revoke to complete; (bso#12697). + ctdb_event monitor command crashes if event is not specified; (bso#12723). + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733). + smbd: Fix smb1 findfirst with DFS; (bso#12558). + smbd: Do an early exit on negprot failure; (bso#12610). + winbindd: Fix substitution for 'template homedir'; (bso#12699). + s4:kdc: Disable principal based autodetected referral detection; (bso#12554). + idmap_autorid: Allocate new domain range if the callers knows the sid is valid; (bso#12613). + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724). + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for trusted domain; (bso#12725). + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731). + winbindd: Fix password policy for pam authentication; (bso#12725). + s3:gse: Correctly handle external trusts with MIT; (bso#12554). + auth/credentials: Always set the realm if we set the principal from the ccache; (bso#12611). + replace: Include sysmacros.h; (bso#12686). + s3:vfs_expand_msdfs: Do not open the remote address as a file; (bso#12687). + s3:libsmb: Only print error message if kerberos use is forced; (bso#12704). + winbindd: Child process crashes when kerberos-authenticating a user with wrong password; (bso#12708). + vfs_fruit: Office document opens as read-only on macOS due to CNID semantics; (bso#12715). + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is fragmented; (bso#12737).- Generate and update vendor-files tarball from Git + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).- Generate source tarball directly from Git using OBS tar_scm + use version string derived from parent Git tag and commit hash - remove obsolete vendor-files/tools/package-data version ID + explicitly generate ctdb manpages, needed without "make dist"- Update to 4.6.2 + remove bso#12721 patches now upstream- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622). + x86-64 and aarch64- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).- Build and install the html man pages (bsc#1021907).- Fix CVE-2017-2619 regression with "follow symlinks = no"; (bso#12721).- Update to 4.6.1 + symlink race permits opening files outside share directory; CVE-2017-2619; (bso#12496); (bsc#1027147) + testparm checks for valid idmap parameters + add new krb client encryption types + support for printer driver upload from windows 10 + inherit owner = 'unix only' for improved quota support + improved CTDB event support + new primary group support for idmap_ad + idmap_hash deprecated + mvxattr added to recursively rename extended attributes- Remove chkconfig requirements for systemd systems- Don't call insserv if systemd is used- Fix check if we need to require insserv- async_req: make async_connect_send() "reentrant"; (bso#12105); (bsc#1024416).- Force usage of ncurses6-config thru NCURSES_CONFIG env var; (bsc#1023847).- add missing patch for libnss_wins segfault; (bsc#995730).- Fix vfs_ceph builds against recent Ceph versions; (bsc#1021933).- Document "winbind: ignore domains" parameter; (bsc#1019416).- Add base Samba dependency to samba-ceph package.- Update to 4.5.3 + Heap-based Buffer Overflow Remote Code Execution Vulnerability; CVE-2016-2123; (bso#12409); (bsc#1014437). + Don't send delegated credentials to all servers; CVE-2016-2125; (bso#12445); (bsc#1014441). + denial of service due to a client triggered crash in the winbindd parent process; CVE-2016-2126; (bso#12446); (bsc#1014442). - 4.5.1 and 4.5.2 updates + various streams vfs fixes + various printing fixes + ntlm_auth: do not map explicitly empty domain + various stability fixes in smbd + match file compression ReFS behavior- Add missing ldb module directory; (bnc#1012092).- s3/client: obey 'disable netbios' smb.conf param, don't connect via NBT port; (bsc#1009085); (bso#12418).- Include vfstest in samba-test; (bsc#1001203).- s3/winbindd: using default domain with user@domain.com format fails; (bsc#997833).- Fix segfault in libnss_wins; (bso#12277); (bso#12269); (bsc#995730).- Update to 4.5.0 + NTLM1 Authentication disabled by default + SMB2.1 leases enabled by default + Support for OFD locks + ctdb tool rewritten + Added shadow copy snapshot prefix parameter- Fix illegal memory access after memory has been deleted; (bso#11836); (bsc#975299).- Prevent core, make sure response->extra_data.data is always cleared out; (bsc#993692).- Don't package man pages for VFS modules that aren't built; (boo#993707).- Fix population of ctdb sysconfig after source merge; (bsc#981566).- Enable vfs_ceph builds for Factory (x86-64) + Package as samba-ceph to avoid Ceph dependency in base package.- Update to 4.4.5 + Prevent client-side SMB2 signing downgrade; CVE-2016-2119; (bso#11860); (bsc#986869).- Remove obsolete syslog.target; (bsc#983938).- Honor smb.conf socket options in winbind; (bsc#975131).- Don't use htons() with IP_PROTO_RAW; (bso#11705); (bsc#969522).- Update to 4.4.4 + SMB3 multichannel: Add implementation of missing channel sequence number verification; (bso#11809). + smbd:close: Only remove kernel share modes if they had been taken at open; (bso#11919). + notifyd: Prevent NULL deref segfault in notifyd_peer_destructor; (bso#11930). + s3:rpcclient: Make '--pw-nt-hash' option work; (bso#10796). + Fix case sensitivity issues over SMB2 or above; (bso#11438). + s3:smbd: Fix anonymous authentication if signing is mandatory. (bso#11910) + Fix NTLM Authentication issue with squid; (bso#11914). + pdb: Fix segfault in pdb_ldap for missing gecos; (bso#11530). + Fix memory leak in share mode locking; (bso#11934).- Update to 4.4.3 + Various post-badlock regressions; (bso#11841); (bso#11850); (bso#11858); (bso#11870); (bso#11872). + Only allow idmap_hash for default idmap config (bso#11786). + smbd: Avoid large reads beyond EOF; (bso#11878). + vfs_acl_common: Avoid setting POSIX ACLs if "ignore system acls" is set; (bso#11806). + libads: Record session expiry for spnego sasl binds; (bso#11852).- Fix NTLMSSP regressions caused by previous CVE fixes; (bso#11849); (bsc#975962); (bsc#979268), (bsc#977669).- Revert shared library packaging to comply with SLPP- Update to 4.4.2 + A man-in-the-middle can downgrade NTLMSSP authentication; CVE-2016-2110; (bso#11688); (bsc#973031). + Domain controller netlogon member computer can be spoofed; CVE-2016-2111; (bso#11749); (bsc#973032). + LDAP conenctions vulnerable to downgrade and MITM attack; CVE-2016-2112; (bso#11644); (bsc#973033). + TLS certificate validation missing; CVE-2016-2113; (bso#11752); (bsc#973034). + Named pipe IPC vulnerable to MITM attacks; CVE-2016-2115; (bso#11756); (bsc#973036). + "Badlock" DCERPC impersonation of authenticated account possible; CVE-2016-2118; (bso#11804); (bsc#971965). + DCERPC server and client vulnerable to DOS and MITM attacks; CVE-2015-5370; (bso#11344); (bsc#936862).- Fix samba.tests.messaging test and prevent potential tdb corruption by removing obsolete now invalid tdb_close call; (bsc#974629).- Obsolete libsmbclient from libsmbclient0 while not providing it; (bsc#972197).- Update to 4.4.0. + Read of uninitialized memory DNS TXT handling; (bso#11128); (bso#11686); CVE-2016-0771. + Getting and setting Windows ACLs on symlinks can change permissions on link target; (bso#11648); CVE-2015-7560. + Sockets with htons(IPPROTO_RAW); (bso#11705); CVE-2015-8543. + s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystem with no ACL support; (bso#10489). + docs: Add example for domain logins to smbspool man page; (bso#11643). + smbd: Show correct disk size for different quota and dfree block sizes; (bso#11681). + docs: Add smbspool_krb5_wrapper manpage; (bso#11690). + winbindd: Return trust parameters when listing trusts; (bso#11691). + ctdb: Do not provide a useless pkgconfig file for ctdb; (bso#11696). + Crypto.Cipher.ARC4 is not available on some platforms, fallback to M2Crypto.RC4.RC4 then; (bso#11699). + s3:utils/smbget: Set default blocksize; (bso#11700). + Streamline 'smbget' options with the rest of the Samba utils; (bso#11700). + s3:clispnego: Fix confusing warning in spnego_gen_krb5_wrap(); (bso#11702). + s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703). + loadparm: Fix memory leak issue; (bso#11708). + lib/tsocket: Work around sockets not supporting FIONREAD; (bso#11714). + s3:vfs:glusterfs: Fix build after quota changes; (bso#11715). + ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ..."; (bso#11719). + lib:socket: Fix CID 1350010: Integer OVERFLOW_BEFORE_WIDEN; (bso#11723). + smbd: Fix CID 1351215 Improper use of negative value; (bso#11724). + smbd: Fix CID 1351216 Dereference null return value; (bso#11725). + s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new file; (bso#11727). + docs: Add manpage for cifsdd; (bso#11730). + param: Fix str_list_v3 to accept ; again; (bso#11732). + lib/socket: Fix improper use of default interface speed; (bso#11734). + lib:socket: Fix CID 1350009: Fix illegal memory accesses (BUFFER_SIZE_WARNING); (bso#11735). + libcli: Fix debug message, print sid string for new_ace trustee; (bso#11738). + Fix installation path of Samba helper binaries; (bso#11739). + Fix memory leak in loadparm; (bso#11740). + tevent: version 0.9.28: Fix memory leak when old signal action restored; (bso#11742). + smbd: Ignore SVHDX create context; (bso#11753). + Fix net join; (bso#11755). + s3:libads: setup the msDS-SupportedEncryptionTypes attribute on ldap_add; (bso#11755). + passdb: Add linefeed to debug message; (bso#11763). + s3:utils/smbget: Fix option parsing; (bso#11767). + libnet: Make Kerberos domain join site-aware; (bso#11769). + Reset TCP Connections during IP failover; (bso#11770). + ldb: Version 1.1.26; (bso#11772). + s3:smbd: Add negprot remote arch detection for OSX; (bso#11773). + vfs_glusterfs: Fix use after free in AIO callback; (bso#11774). + mkdir can return ACCESS_DENIED incorrectly on create race; (bso#11780). + "trustdom_list_done: Got invalid trustdom response" message should be avoided; (bso#11782). + Mismatch between local and remote attribute ids lets replication fail with custom schema; (bso#11783). + Quota is not supported on Solaris 10; (bso#11788). + Talloc: Version 2.1.6; (bso#11789). + smbd: Enable multi-channel if 'server multi channel support = yes' in the config; (bso#11796). + build: Fix build when '--without-quota' specified; (bso#11798). + lib/socket/interfaces: Fix some uninitialied bytes; (bso#11802). + Access based share enum: handle permission set in configuration files; (bso#8093). + See also WHATSNEW.txt from the samba-doc package.- Update to 4.3.6. + Getting and setting Windows ACLs on symlinks can change permissions on link target; CVE-2015-7560; (bso#11648); (bsc#968222). + Fix Out-of-bounds read in internal DNS server; CVE-2016-0771; (bso#11128); (bso#11686); (bsc#968223).- Upgrade on-disk FSRVP server state to new version; (bsc#924519).- Only obsolete but do not provide gplv2/3 package names; (bsc#968973).- Relocate existing lock files to /var/lib/samba/lock; (bsc#968963).- Obsolete no longer existing samba-32bit package; (bsc#967625).- Update to 4.3.5. + s3:utils/smbget: Fix recursive download; (bso#6482). + s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystemi with no ACL support; (bso#10489). + s3:smbd/oplock: Obey kernel oplock setting when releasing oplocks; (bso#11400). + vfs_shadow_copy2: Fix case where snapshots are outside the share; (bso#11580). + smbclient: Query disk usage relative to current directory; (bso#11662). + winbindd: Handle expired sessions correctly; (bso#11670). + smbd: Show correct disk size for different quota and dfree block sizes; (bso#11681). + smbcacls: Fix uninitialized variable; (bso#11682). + s3:smbd: Ignore initial allocation size for directory creation; (bso#11684). + s3-client: Add a KRB5 wrapper for smbspool; (bso#11690). + s3-parm: Clean up defaults when removing global parameters; (bso#11693). + Use M2Crypto.RC4.RC4 on platforms without Crypto.Cipher.ARC4; (bso#11699). + s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703). + ctdb: Remove error messages after kernel security update; CVE-2015-8543; (bso#11705). + loadparm: Fix memory leak issue; (bso#11708). + lib/tsocket: Work around sockets not supporting FIONREAD; (bso#11714). + ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ..."; (bso#11719). + s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new file; (bso#11727). + param: Fix str_list_v3 to accept ";" again; (bso#11732).- Shift samba-client sysconfig data into samba and samba-winbind; (bsc#947361).- Simplify shared library packaging; (bsc#966956).- Enable clustering (CTDB) support; (bsc#966271).- s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703); (bsc#964023).- Add quotes around path of update-apparmor-samba-profile; (bnc#962177).- Remove autoconf build-time requirement.- Update to 4.3.4. + vfs_fruit: Enable POSIX directory rename semantics; (bso#11065). + Crash: Bad talloc magic value - access after free; (bso#11394). + Copying files with vfs_fruit fails when using vfs_streams_xattr without stream prefix and type suffix; (bso#11466). + samba-tool: Fix uncaught exception if no fSMORoleOwner attribute is given; (bso#11613). + Fix a typo in the smb.conf manpage, explanation of idmap config; (bso#11619). + Correctly initialize the list head when keeping a list of primary followed by DFS connections; (bso#11624). + Reduce the memory footprint of empty string options; (bso#11625). + lib/async_req: Do not install async_connect_send_test; (bso#11639). + Fix typos in man vfs_gpfs; (bso#11641). + Make "hide dot files" option work with "store dos attributes = yes"; (bso#11645). + Fix a corner case of the symlink verification; (bso#11647); (bnc#960249). + Do not disable "store dos attributes" on-the-fly; (bso#11649). + Update lastLogon and lastLogonTimestamp; (bso#11659).- Prevent access denied if the share path is "/"; (bso#11647); (bnc#960249).- Update to 4.3.3. + Malicious request can cause Samba LDAP server to hang, spinning using CPU; CVE-2015-3223; (bso#11325); (bnc#958581). + Remote read memory exploit in LDB; CVE-2015-5330; (bso#11599); (bnc#958586). + Insufficient symlink verification (file access outside the share); CVE-2015-5252; (bso#11395); (bnc#958582). + No man in the middle protection when forcing smb encryption on the client side; CVE-2015-5296; (bso#11536); (bnc#958584). + Currently the snapshot browsing is not secure thru windows previous version (shadow_copy2); CVE-2015-5299; (bso#11529); (bnc#958583). + Fix Microsoft MS15-096 to prevent machine accounts from being changed into user accounts; CVE-2015-8467; (bso#11552); (bnc#958585).- Update to 4.3.2. + vfs_gpfs: Re-enable share modes; (bso#11243). + dcerpc.idl: Accept invalid dcerpc_bind_nak pdus; (bso#11327). + s3-smbd: Fix old DOS client doing wildcard delete - gives an attribute type of zero; (bso#11452). + Add libreplace dependency to texpect, fixes a linking error on Solaris; (bso#11511). + s4: Fix linking of 'smbtorture' on Solaris; (bso#11512). + s4:lib/messaging: Use correct path for names.tdb; (bso#11562). + Fix segfault of 'net ads (join|leave) -S INVALID' with nss_wins; (bso#11563). + async_req: Fix non-blocking connect(); (bso#11564). + auth: gensec: Fix a memory leak; (bso#11565). + lib: util: Make non-critical message a warning; (bso#11566). + Fix winbindd crashes with samlogon for trusted domain user; (bso#11569); (bnc#949022). + smbd: Send SMB2 oplock breaks unencrypted; (bso#11570). + ctdb: Open the RO tracking db with perms 0600 instead of 0000; (bso#11577). + s3:smb2_server: Make the logic of SMB2_CANCEL DLIST_REMOVE() clearer; (bso#11581). + s3-smbd: Fix use after issue in smbd_smb2_request_dispatch(); (bso#11581). + manpage: Correct small typo error; (bso#11584). + s3: smbd: If EAs are turned off on a share don't allow an SMB2 create containing them; (bso#11589). + Backport some valgrind fixes from upstream master; (bso#11597). + auth: Consistent handling of well-known alias as primary gid; (bso#11608). + winbind: Fix crash on invalid idmap configs; (bso#11612). + s3: smbd: have_file_open_below() fails to enumerate open files below an open directory handle; (bso#11615). + Changing log level of two entries to DBG_NOTICE; (bso#9912).- Ensure samlogon fallback requests are rerouted after kerberos failure; (bnc#953382); (bnc#953972).- Ensure to link with --as-needed flag by removing SUSE_ASNEEDED=0. - Always use the default optimization even on pre-9.2 systems.- Remove redundant configure options while adding with-relro.- Relocate the lockdir to the /var/lib/samba/lock directory.- Cleanup and enhance the pidl sub package.- Require renamed python-ldb-devel and python-talloc-devel at build-time. - Requires python-ldb and python-talloc from the python subpackage.- Update to 4.3.1. + s3: smbd: Fix our access-based enumeration on "hide unreadable" to match Windows; (bso#10252). + nss_winbind: Fix hang on Solaris on big groups; (bso#10365). + smbd: Fix file name buflen and padding in notify repsonse; (bso#10634). + kerberos: Make sure we only use prompter type when available; winbind: Fix 100% loop; (bso#11038). + source3/lib/msghdr.c: Fix compiling error on Solaris; (bso#11053). + s3:ctdbd_conn: make sure we destroy tevent_fd before closing the socket; (bso#11316). + s3: smbd: Fix mkdir race condition; (bso#11486). + pam_winbind: Fix a segfault if initialization fails; (bso#11502). + s3: dfs: Fix a crash when the dfs targets are disabled; (bso#11509). + s4:lib/messaging: Use 'msg.lock' and 'msg.sock' for messaging related subdirs; (bso#11515). + s3: smbd: Fix opening/creating :stream files on the root share directory; (bso#11522). + lib/param: Fix hiding of FLAG_SYNONYM values; (bso#11526). + net: Fix a crash with 'net ads keytab create'; (bso#11528). + s3: smbd: Fix a crash in unix_convert(); (bso#11535). + s3: smbd: Fix NULL pointer bug introduced by previous 'raw' stream fix (bso#11522); (bso#11535). + vfs_fruit: Return value of ad_pack in vfs_fruit.c; (bso#11543). + vfs_commit: set the fd on open before calling SMB_VFS_FSTAT; (bso#11547). + s3:locking: Initialize lease pointer in share_mode_traverse_fn(); (bso#11549). + s3:smbstatus: Add stream name to share_entry_forall(); (bso#11550). + s3:lib: Validate domain name in lookup_wellknown_name(); (bso#11555). + s3: lsa: lookup_name() logic for unqualified (no DOMAIN component) names is incorrect; (bso#11555).- Fix 100% CPU in winbindd when logging in with "user must change password on next logon"; (bso#11038).- Relocate the tmpfiles.d directory to the client package; (bnc#947552).- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf instead; (bnc#942716).- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).- Package /var/lib/samba/msg with 0755 permissions; (bso#11515); (bnc#945502).- Require to install libfam0-gamin from samba-libs on post-12.1 and pre-13.15 systems; (bnc#945013).- Update to 4.3.0. + Samba "map to guest = Bad uid" doesn't work; (bso#9862). + revert LDAP extended rule 1.2.840.113556.1.4.1941 LDAP_MATCHING_RULE_IN_CHAIN changes; (bso#10493). + No objectClass found in replPropertyMetaData on ordinary objects (non-deleted); (bso#10973). + Stream names with colon don't work with fruit:encoding = native; (bso#11278). + NetApp joined to a Samba/ADDC cannot resolve SIDs; (bso#11291). + tevent_fd needs to be destroyed before closing the fd; (bso#11316). + "force group" with local group not working; (bso#11320). + strsep is not available on Solaris; (bso#11359). + smbtorture does not build when configured --with-system-mitkrb5; (bso#11411). + Build with GPFS support is broken; (bso#11421). + Build broken with --disable-python; (bso#11424). + net share allowedusers crashes; (bso#11426). + nmbd incorrectly matches netbios names as own name; (bso#11427). + Python bindings don't check integer types; (bso#11429). + Python bindings don't check array sizes; (bso#11430). + CTDB's eventscript error handling is broken; (bso#11431). + Fix crash in nested ctdb banning; (bso#11432). + Cannot build ctdbpmda; (bso#11434). + samba-tool uncaught exception error; (bso#11436). + Crash in notify_remove caused by change notify = no; (bso#11444). + Poor SMB3 encryption performance with AES-GCM; (bso#11451). + Poor SMB3 encryption performance with AES-GCM (part1); (bso#11451). + fix recursion problem in rep_strtoll in lib/replace/replace.c; (bso#11455). + --bundled-libraries=!ldb,!pyldb,!pyldb-util doesn't disable ldb build and install; (bso#11458). + xid2sid gives inconsistent results; (bso#11464). + ctdb: Fix the build on FreeBSD 10.1; (bso#11465). + Handling of 0 byte resource fork stream; (bso#11467). + AD samr GetGroupsForUser fails for users with "()" in their name; (bso#11488).- Configure with --bundled-libraries=NONE; (bso#11458).- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).- Remove libiniparser-devel build-time requirement.- Update to 4.2.3. + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780). + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924). + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991). + Logon via MS Remote Desktop hangs; (bso#11061). + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068). + tevent: Add a note to tevent_add_fd(); (bso#11141). + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170). + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217). + smbd: Fix a use-after-free; (bso#11218); (bnc#919309). + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces; (bso#11245). + s3:smb2: Add padding to last command in compound requests; (bso#11277). + Add IPv6 support to ADS client side LDAP connects; (bso#11281). + Add IPv6 support for determining FQDN during ADS join; (bso#11282). + s3: IPv6 enabled DNS connections for ADS client; (bso#11283). + Fix invalid write in ctdb_lock_context_destructor; (bso#11293). + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295). + vfs_fruit: Add option "veto_appledouble"; (bso#11305). + tstream: Make socketpair nonblocking; (bso#11312). + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313). + Group creation: Add msSFU30Name only when --nis-domain was given; (bso#11315). + tevent_fd needs to be destroyed before closing the fd; (bso#11316). + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared"; (bso#11319). + smbd/trans2: Add a useful diagnostic for files with bad encoding; (bso#11323). + Change sharesec output back to previous format; (bso#11324). + Robust mutex support broken in 1.3.5; (bso#11326). + Kerberos auth info3 should contain resource group ids available from pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info exists in PAC; (bso#11328); (bnc#912457). + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329). + tevent: Fix CID 1035381 Unchecked return value; (bso#11330). + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331). + s3: smbd: Use separate flag to track become_root()/unbecome_root() state; (bso#11339). + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342). + pidl: Make the compilation of PIDL producing the same results if the content hasn't change; (bso#11356). + winbindd: Disconnect child process if request is cancelled at main process; (bso#11358). + vfs_fruit: Check offset and length for AFP_AfpInfo read requests; (bso#11363). + docs: Overhaul the description of "smb encrypt" to include SMB3 encryption; (bso#11366). + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server(); (bso#11367). + ncacn_http: Fix GNUism; (bso#11371).- Disable rpath usage; (bnc#902421).- Make the winbind package depend on the matching libwbclient version and vice versa; (bnc#936909).- Backport changes to use resource group sids obtained from pac logon_info; (bso#11328); (bnc#912457).- Order winbind.service Before and Want nss-user-lookup target.- Remove fam-devel build-time dependency for post-6 RHEL systems.- Update to 4.2.2. + s3:smbXsrv: refactor duplicate code into smbXsrv_session_clear_and_logoff(); (bso#11182). + gencache: don't fail gencache_stabilize if there were records to delete; (bso#11260). + s3: libsmbclient: After getting attribute server, ensure main srv pointer is still valid; (bso#11186). + s4: rpc: Refactor dcesrv_alter() function into setup and send steps; (bso#11236). + s3: smbd: Incorrect file size returned in the response of "FILE_SUPERSEDE Create"; (bso#11240). + Mangled names do not work with acl_xattr; (bso#11249). + nmbd rewrites browse.dat when not required; (bso#11254). + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff; (bso#11213). + s3:smbd: Add missing tevent_req_nterror; (bso#11224). + vfs: kernel_flock and named streams; (bso#11243). + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244). + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses are used; (bso#11284). + ctdb: check for talloc_asprintf() failure; (bso#11201). + spoolss: purge the printer name cache on name change; (bso#11210); (bnc#901813). + CTDB statd-callout does not scale; (bso#11204). + vfs_fruit: also map characters below 0x20; (bso#11221). + ctdb: Coverity fix for CID 1291643; (bso#11201). + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225). + Fix terminate connection behavior for asynchronous endpoint with PUSH notification flavors; (bso#11226). + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007). + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201). + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the directory is deleted; (bso#11257). + s3:winbindd: make sure we remove pending io requests before closing client sockets; (bso#11141); (bnc#931854). + Fix panic triggered by smbd_smb2_request_notify_done() -> smbXsrv_session_find_channel() in smbd; (bso#11182). + 'sharesec' output no longer matches input format; (bso#11237). + waf: Fix systemd detection; (bso#11200). + CTDB: Fix portability issues; (bso#11202). + CTDB: Fix some IPv6-related issues; (bso#11203). + CTDB statd-callout does not scale; (bso#11204). + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you enter invalid values; (bso#11234). + libads: record service ticket endtime for sealed ldap connections; (bso#11267). + lib/util: Include DEBUG macro in internal header files before samba_util.h; (bso#11033).- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).- Remove the independently built libraries ldb, talloc, tdn, and tevent and the post-10.3 renamed libsmbclient from baselibs.conf.- Drop redundant doc attribute from man pages.- Update to 4.2.1. + s3:winbind:grent: Don't stop group enumeration when a group has no gid; (bso#8905). + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791). + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with servers that don't send the 2 unused fields; (bso#10016). + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476). + waf: Fix the build on openbsd; (bso#10476). + s3: client: "client use spnego principal = yes" code checks wrong name; (bso#10888). + spoolss: Retrieve published printer GUID if not in registry; (bso#11018). + s3: lib: libsmbclient: If reusing a server struct, check every cli->timout miliseconds if it's still valid before use; (bso#11079). + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125). + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135). + replace: Remove superfluous check for gcrypt header; (bso#11135). + Backport subunit changes; (bso#11137). + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with implementation; (bso#11140). + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143). + talloc: Version 2.1.2; (bso#11144). + Update libwbclient version to 0.12; (bso#11149). + brlock: Use 0 instead of empty initializer list; (bso#11153). + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164). + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169); (bnc#913304). + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev fails in the SMB1 case; (bso#11173). + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174). + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175). + s3: libsmbclient: Add missing talloc stackframe; (bso#11177). + s4-process_model: Do not close random fds while forking; (bso#11180). + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).- Prevent samba package updates from disabling samba kerberos printing.- Add sparse file support for samba; (fate#318424).- Purge printer name cache on spoolss SetPrinter change; (bso#11210); (bnc#901813).- Correctly retain errno from Btrfs snapshot ioctls; (bnc#923374).- Simplify libxslt build requirement and README.SUSE install. - Remove no longer required cleanup steps while populating the build root.- Remove deprecated base_rid example from idmap_rid manpage; (bso#11169); (bnc#913304).- Update to 4.2.0. + smbd: Stop using vfs_Chdir after SMB_VFS_DISCONNECT; (bso#1115). + pam_winbind: fix warn_pwd_expire implementation; (bso#9056). + nsswitch: Fix soname of linux nss_*.so.2 modules; (bso#9299). + Make 'profiles' work again; (bso#9629). + s3:smb2_server: protect against integer wrap with "smb2 max credits = 65535"; (bso#9702). + Make validate_ldb of String(Generalized-Time) accept millisecond format ".000Z"; (bso#9810). + Use -R linker flag on Solaris, not -rpath; (bso#10112). + vfs: Add glusterfs manpage; (bso#10240). + Make 'smbclient' use cached creds; (bso#10279). + pdb: Fix build issues with shared modules; (bso#10355). + s4-dns: Add support for BIND 9.10; (bso#10620). + idmap: Return the correct id type to *id_to_sid methods; (bso#10720). + printing/cups: Pack requested-attributes with IPP_TAG_KEYWORD; (bso#10808). + Don't build vfs_snapper on FreeBSD; (bso#10834). + nss_winbind: Add getgroupmembership for FreeBSD; (bso#10835). + idmap_rfc2307: Fix a crash after connection problem to DC; (bso#10837). + s3: smb2cli: query info return length check was reversed; (bso#10848). + s3: lib, s3: modules: Fix compilation on Solaris; (bso#10849). + lib: uid_wrapper: Fix setgroups and syscall detection on a system without native uid_wrapper library; (bso#10851). + winbind3: Fix pwent variable substitution; (bso#10852). + Improve samba-regedit; (bso#10859). + registry: Don't leave dangling transactions; (bso#10860). + Fix build of socket_wrapper on systems without SO_PROTOCOL; (bso#10861). + build: Do not install 'texpect' binary anymore; (bso#10862). + Fix testparm to show hidden share defaults; (bso#10864). + libcli/smb: Fix smb2cli_validate_negotiate_info with min=PROTOCOL_NT1 max=PROTOCOL_SMB2_02; (bso#10866). + Integrate CTDB into top-level Samba build; (bso#10892). + samba-tool group add: Add option '--nis-domain' and '--gid'; (bso#10895). + s3-nmbd: Fix netbios name truncation; (bso#10896). + spoolss: Fix handling of bad EnumJobs levels; (bso#10898). + Fix smbclient loops doing a directory listing against Mac OS X 10 server with a non-wildcard path; (bso#10904). + Fix print job enumeration; (bso#10905); (bnc#898031). + samba-tool: Create NIS enabled users and unixHomeDirectory attribute; (bso#10909). + Add support for SMB2 leases; (bso#10911). + btrfs: Don't leak opened directory handle; (bso#10918). + s3: nmbd: Ensure NetBIOS names are only 15 characters stored; (bso#10920). + s3:smbd: Fix file corruption using "write cache size != 0"; (bso#10921). + pdb_tdb: Fix a TALLOC/SAFE_FREE mixup; (bso#10932). + s3-keytab: fix keytab array NULL termination; (bso#10933). + s3:passdb: fix logic in pdb_set_pw_history(); (bso#10940). + Cleanup add_string_to_array and usage; (bso#10942). + dbwrap_ctdb: Pass on mutex flags to tdb_open; (bso#10942). + Fix RootDSE search with extended dn control; (bso#10949). + Fix 'samba-tool dns serverinfo ' for IPv6; (bso#10952). + libcli/smb: only force signing of smb2 session setups when binding a new session; (bso#10958). + s3-smbclient: Return success if we listed the shares; (bso#10960). + s3-smbstatus: Fix exit code of profile output; (bso#10961). + socket_wrapper: Add missing prototype check for eventfd; (bso#10965). + libcli: SMB2: Pure SMB2-only negprot fix to make us behave as a Windows client does; (bso#10966). + vfs_streams_xattr: Check stream type; (bso#10971). + s3: smbd: Fix *allocate* calls to follow POSIX error return convention; (bso#10982). + vfs_fruit: Add support for AAPL; (bso#10983). + Fix spoolss IDL response marshalling when returning error without clearing info; (bso#10984). + dsdb-samldb: Check for extended access rights before we allow changes to userAccountControl; (bso#10993); CVE-2014-8143; (boo#914279). + Fix IPv6 support in CTDB; (bso#10996). + ctdb-daemon: Use correct tdb flags when enabling robust mutex support; (bso#11000). + vfs_streams_xattr: Add missing call to SMB_VFS_NEXT_CONNECT; (bso#11005). + s3-util: Fix authentication with long hostnames; (bso#11008). + ctdb-build: Fix build without xsltproc; (bso#11014). + packaging: Include CTDB man pages in the tarball; (bso#11014). + pdb_get_trusteddom_pw() fails with non valid UTF16 random passwords; (bso#11016). + Make Sharepoint search show user documents; (bso#11022). + nss_wrapper: check for nss.h; (bso#11026). + Enable mutexes in gencache_notrans.tdb; (bso#11032). + tdb_wrap: Make mutexes easier to use; (bso#11032). + lib/util: Avoid collision which alread defined consumer DEBUG macro; (bso#11033). + winbind: Retry after SESSION_EXPIRED error in ping-dc; (bso#11034). + s3-libads: Fix a possible segfault in kerberos_fetch_pac(); (bso#11037). + vfs_fruit: Fix base_fsp name conversion; (bso#11039). + vfs_fruit: mmap under FreeBSD needs PROT_READ; (bso#11040). + Fix authentication using Kerberos (not AD); (bso#11044). + net: Fix sam addgroupmem; (bso#11051). + vfs_snapper: Correctly handles multi-byte DBus strings; (bso#11055); (bnc#913238). + cli_connect_nb_send: Don't segfault on host == NULL; (bso#11058). + utils: Fix 'net time' segfault; (bso#11058). + libsmb: Provide authinfo domain for encrypted session referrals; (bso#11059). + s3-pam_smbpass: Fix memory leak in pam_sm_authenticate(); (bso#11066). + vfs_glusterfs: Add comments to the pipe(2) code; (bso#11069). + vfs/glusterfs: Change xattr key to match gluster key; (bso#11069). + vfs_glusterfs: Implement AIO support; (bso#11069). + s3-vfs: Fix developer build of vfs_ceph module; (bso#11070). + s3: netlogon: Ensure we don't call talloc_free on an uninitialized pointer; (bso#11077); CVE-2015-0240; (bnc#917376). + vfs: Add a brief vfs_ceph manpage; (bso#11088). + s3: smbclient: Allinfo leaves the file handle open; (bso#11094). + Fix Win8.1 Credentials Manager issue after KB2992611 on Samba domain; (bso#11097). + debug: Set close-on-exec for the main log file FD; (bso#11100). + s3: smbd: leases - losen paranoia check. Stat opens can grant leases; (bso#11102). + s3: smbd: SMB2 close. If a file has delete on close, store the return info before deleting; (bso#11104). + doc:man:vfs_glusterfs: improve the configuration section; (bso#11117). + snprintf: Try to support %j; (bso#11119). + ctdb-io: Do not use sys_write to write to client sockets; (bso#11124). + doc-xml: Add 'sharesec' reference to 'access based share enum'; (bso#11127).- Update to 4.2.0rc5. + Ensure we don't call talloc_free on an uninitialized pointer; CVE-2015-0240; (bso#11077); (bnc#917376).- Fix usage of freed memory on server exit; (bso#11218); (bnc#919309).- Fix tdb_store_flag_to_ntdb() gcc5 build failure.- Fix vfs_snapper DBus string handling; (bso#11055); (bnc#913238).- Update to 4.1.16. + dsdb-samldb: Check for extended access rights before we allow changes to userAccountControl; (bso#10993); CVE-2014-8143; (boo#914279).- Adjust baselibs.conf due to libpdb0 package rename to libsamba-passdb0.- Fix libsmbclient DFS referral handling. + Reuse connections derived from DFS referrals; (bso#10123); (fate#316512). + Set domain/workgroup based on authentication callback value; (bso#11059).- Update to 4.2.0rc4. - Add libsamba-debug, libsocket-blocking, libsamba-cluster-support, and libhttp to the libs package; (boo#913547). - Rename libpdb packages to libsamba-passdb. - Drop libsmbsharemodes packages.- Enable avahi support on post-12.2 systems.- Update to 4.1.15. + pam_winbind: Fix warn_pwd_expire implementation; (bso#9056). + nsswitch: Fix soname of linux nss_*.so.2 modules; (bso#9299). + Fix profiles tool; (bso#9629). + s3-lib: Do not require a password with --use-ccache; (bso#10279). + s4:dsdb/rootdse: Expand extended dn values with the AS_SYSTEM control; (bso#10949). + s4-rpc: dnsserver: Fix enumeration of IPv4 and IPv6 addresses; (bso#10952). + s3:smb2_server: Allow reauthentication without signing; (bso#10958). + s3-smbclient: Return success if we listed the shares; (bso#10960). + s3-smbstatus: Fix exit code of profile output; (bso#10961). + libcli: SMB2: Pure SMB2-only negprot fix to make us behave as a Windows client does; (bso#10966). + s3: smbd/modules: Fix *allocate* calls to follow POSIX error return convention; (bso#10982). + Fix 'domain join' by adding 'drsuapi.DsBindInfoFallBack' attribute 'supported_extensions'; (bso#11006). + idl:drsuapi: Manage all possible lengths of drsuapi_DsBindInfo; (bso#11006). + winbind: Retry LogonControl RPC in ping-dc after session expiration; (bso#11034).- yast2-samba-client should be able to specify osName and osVer on AD domain join; (bnc#873922).- Lookup FSRVP share snums at runtime rather than storing them persistently; (bnc#908627).- Specify soft dependency for network-online.target in Winbind systemd service file; (bnc#889175).- Fix spoolss error response marshalling; (bso#10984).- Update to 4.1.14. + pidl/wscript: Remove --with-perl-* options; revert buildtools/wafadmin/ Tools/perl.py back to upstream state; (bso#10472). + s4-dns: Add support for BIND 9.10; (bso#10620). + nmbd fails to accept "--piddir" option; (bso#10711). + nss_winbind: Add getgroupmembership for FreeBSD; (bso#10835). + S3: source3/smbd/process.c::srv_send_smb() returns true on the error path; (bso#10880). + vfs_glusterfs: Remove "integer fd" code and store the glfs pointers; (bso#10889). + s3-nmbd: Fix netbios name truncation; (bso#10896). + spoolss: Fix handling of bad EnumJobs levels; (bso#10898). + s3: libsmbclient-smb2. MacOSX 10 SMB2 server doesn't set STATUS_NO_MORE_FILES when handed a non-wildcard path; (bso#10904). + spoolss: Fix jobid in level 3 EnumJobs response; (bso#10905). + s3: nmbd: Ensure NetBIOS names are only 15 characters stored; (bso#10920). + s3:smbd: Fix file corruption using "write cache size != 0"; (bso#10921). + pdb_tdb: Fix a TALLOC/SAFE_FREE mixup; (bso#10932). + s3-keytab: Fix keytab array NULL termination; (bso#10933). + Cleanup add_string_to_array and usage; (bso#10942).- Remove and cleanup shares and registry state associated with externally deleted snaphots exposed as shadow copies; (bnc#876312).- Use the upstream tar ball, as signature verification is now able to handle compressed archives.- Fix leak when closing file descriptor returned from dirfd; (bso#10918).- Fix spoolss EnumJobs and GetJob responses; (bso#10905); (bnc#898031). + Fix handling of bad EnumJobs levels; (bso#10898).- Remove dependency on gpg-offline as signature checking is implemented in the source validator.- Update to 4.1.13. + s3-libnet: Add libnet_join_get_machine_spns(); (bso#9984). + s3-libnet: Make sure we do not overwrite precreated SPNs; (bso#9984). + s3-libads: Add all machine account principals to the keytab; (bso#9985). + s3: winbindd: Old NT Domain code sets struct winbind_domain->alt_name to be NULL. Ensure this is safe with modern AD-DCs; (bso#10717). + Fix unstrcpy; (bso#10735). + pthreadpool: Slightly serialize jobs; (bso#10779). + s3: smbd: streams - Ensure share mode validation ignores internal opens (op_mid == 0); (bso#10797). + s3: smbd:open_file: Open logic fix; Use a more natural check; (bso#10809). + vfs_media_harmony: Fix a crash bug; (bso#10813). + docs: Mention incompatibility between kernel oplocks and streams_xattr; (bso#10814). + nmbd: Send waiting status to systemd; (bso#10816). + libcli: Fix a segfault calling smbXcli_req_set_pending() on NULL; (bso#10817). + nsswitch: Skip groups we were not able to map; (bso#10824). + s3-winbindd: Use correct realm for trusted domains in idmap child; (bso#10826). + s3: nmbd: Ensure the main nmbd process doesn't create zombies; (bso#10830). + s3: lib: Signal handling - ensure smbrun and change password code save and restore existing SIGCHLD handlers; (bso#10831). + idmap_rfc2307: Fix a crash after connection problem to DC; (bso#10837). + s3-winbindd: Do not use domain SID from LookupSids for Sids2UnixIDs call; (bso#10838). + s3: smb2cli: Query info return length check was reversed; (bso#10848). + registry: Don't leave dangling transactions; (bso#10860).- Update to 4.2.0rc2./bin/sh/bin/sh/bin/sh/bin/shsamba-gplv3-winbinds390zl34 1655107735 4.15.7+git.376.dd43aca9ab2-150400.3.5.34.15.7+git.376.dd43aca9ab2-150400.3.5.34.15.7+git.376.dd43aca9ab2-150400.3.5.34.15.7+git.376.dd43aca9ab2 samba-winbindpam_winbind.conf55-samba-winbindd55-samba-winbinddsamba-winbinddntlm_authwbinfowinbind.servicercwinbindwinbinddsysconfig.samba-winbindntlm_auth.1.gzwbinfo.1.gzwinbindd.8.gzwinbind.xmlkrb5rcachewinbindd_privileged/etc/logrotate.d//etc/security//etc/sysconfig/network/if-down.d//etc/sysconfig/network/if-up.d//etc/sysconfig/network/scripts//usr/bin//usr/lib/systemd/system//usr/sbin//usr/share/fillup-templates//usr/share/man/man1//usr/share/man/man8//usr/share/omc/svcinfo.d//var/cache//var/lib/samba/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:23822/SUSE_SLE-15-SP4_Update/b64126b71a588c6018bc481f4b00e0f6-samba.SUSE_SLE-15-SP4_Updatecpioxz5s390x-suse-linux ASCII textemptyBourne-Again shell script, ASCII text executableELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=49fc6860336a7f14d8173cf11ad0f32103acaccd, for GNU/Linux 3.2.0, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=e7ef4e590a49e7e3551db55147a0fb3eece5b500, for GNU/Linux 3.2.0, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=5c64b0b9dae29ea0c730401ed517f5c3eae78d38, for GNU/Linux 3.2.0, strippedUTF-8 Unicode texttroff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix)XML 1.0 document, ASCII textdirectory4O3RRR9R2R_RRsR6RoRWR[RRR!RRiRaRcR]RRuR}R4RRRRRmRrR R3R8RZRnRhR`RtRRlRR\RbRR^RR1RR|R5RRVRRR_R2RWRYRR[RmR!R}RRRRRRR RlRRRZR1R^R|RVRXRRR2RUR0RWRR_RqR&R{ReR[RoRYRRRyR!R?RwRRsRR]R7R6RSR4R RRCR$RcRKRR.R,RkRaRRAR RRRRRRRRGR}R(RER=RRRRRRR;RQRPRORIRuRMRiR*R9RgRmRNR RR#R'RRfRTRZRhRHR RrR R>R`RxRFR+R-RR:R)RlRbRRRJRBR@RzRjRRR^R%RdR/RpR\RtRLRRDRR8R3R1RnRRvR|RѶJ,*‡h$q,Zu*?.IMP OodiwlQ!Nȇ mAﴃi~OcôX8TLf[R\.t\큃bQGK<'of(\9Vbr9 Kaio!컒|?ţqjm2Fmbf{x.:9wFyPe㡠YЙ[x-ä͒j4C$7GSch#%^Z  R}JtȥQy!_Ӓ[0]y9+U.R ~t5oEO[%7Oڤ̄Mj3R>y~|ۯFjS:ז%ƧAjUd`@,dRf$@zk(9(% OQ]1f"8J9MN*LT\ Z$Sչ)`P6Fڐbm^>NDNtqO. ?wKlpH#C 7| agK-a)|QʎçNW}IQ  \u*?3dV&_2E{,)^q>`{,v>'g~Ax>L6fwtl}lN6L ~t"x&qd8eŁ]S i3Lۻ#| / t.lQDI"cM.̊Tvz5u+ [ _v>ni/L%mhN*ǧ^OcwS9s'y̏& N2l. f-fuTq۸"xB#ܩԇ1mʖ.2=alc8Q W]{̳21ͲN8/QGy\ql bop@pQ§ XnlSyFnYTZc(dE0< m=XsdV9P; ٚ?{orc3-3EJٵ^}*=bQ*W *oB_^9_Cմdk [= P-?i>6nCwVsV&ޔG#\1M+-bg ~_2#k b xTl6 wi,`Mꁗ ;:a ߞ֏`[#IBЂμ7 )ʾu|^}{'Szt{Qm|Z hw?Wm-rb(J[3RD票cjʪ F9Y֫G`]d SiK- ՃN0lc5(?!H=M2*AW^OvY]Wu!R<`*!7lCD.Pw˭`J|@''ڒB C0H1H4`\p;ӂ~ՖX hqeIq,:-F)VRqDѴVP<|6+i˒%ݫYt/AX + w%:MY{R uoMjU؞ף>E$\|G* F0ll`wW+l>1W><!lgUWE *yrp#Qpmq\8刨RjOmlVFđ`z*=,7ߊLEq*+hd 6m;1&0=DJL)Z)D+ Д@ $.Phi Kv5Ʒo$]nÙHٴmYy1'-pBΠY(jInx>e!ײPr5oj(NrW) aưd뭋?SWS[_n:癐{9MaJ|1e/OJ|nmigB sre.F}^'R3$E/0S2ޭϱr.|| E* eAS,]8vY%i;S0r792!ԇމa?[@>T" Sc@GpBhA|2#(s#ur@">)a0a 8 'a%vPǭq1ch; S.~\ZMWO.ͰK^H@p5n QGT-nl p`O0ec!_/vJ;GzjQ|VƸ~=t@g[vz/ ߮XP- u(ug!bG&6^ȽSdDgGiX,ev,gSgZj3>ƅ~ ^T@aji/1A!]_=G+! ES,rH,S6"H~P1`7f^+]yaӛ1 bvDj*yw6D6W LYRi#/.~a_`+4IYa8ǐxh"V\|B@,[nxk?jԵ)tpquMxQqs`#Mr:qJi1 |tb2*c6:滏 9pbFotZV_e[Fͨ6J_ 1R_|um`7S&]*/K}mJ wΙ 'kJ y-*%cM*OMΤAu,y'W P~}O`mz?c6;zj@dm.Z'R:$Ty !`ޚ 3c*L`|kG] r}ĬخXJO(:O3l K%R9͡F.NI!O$ڴQ؀s:9nlM=߳ضαUH,c?eNH0)Lvp`\'*/m18`"r'/+ eѐH%}z=ފL3 vRzT6urphYP~)]$%MJu Xwh%{Mlh5"?ppѬN#FvY%)#vӱ `` Ⱥ "0 :8MY/bI/-´yB$+ v\pq),[ɔ:*&M(\3|zfCjY+z`@StMKs8!D)aG{㴌O$>/j$!~[9gX oG,F .lv^G9F9 y^-m),0#ƟT狕.&! 6i5|/]2^BOacUb}ʠ~D;UkwYȡXFHU?JgANN"װďzd>١6r{QWk'znKqU,K rukCAQJXPЦ],^$W}$Y=r/7J[6m9\o4fY: ѪJb=J.ﴪM Ҡ8P'/|<9Wacӄ%ʽ߉yt5 Kj΄k%M(3]Iذ dd* җ8|hq`V5L([9![_2zvii@2Ne 3s FeoZ+\Al]&Z2˗cBޔ#|YfbV:2kpK) b7EnW<"Y^mxl k0DS3lw|1.IIR >-L0ӽF >VoKᏁ )rCvMS[{EĶ8؄49m|] 2Hi{2MUF# ߀ۧ Xؑb"i(374;._X(:Xy UL}]A$N 0?݅>;%n HsvҴnjXWRN/{~e @$\*GhϔޒK Tt}h1wCYv0:21 ^i}=?ٶ, s47-JnPOJ+_ʼn3JKk9皒X>=!+94LF{4,(Y?pΦj^0W>9j@ q*d֨سv5ah4Σ; Hy%xBiM _;ZDozѨ*5n )uUGT,ӽN:(w6]|42;PDm[k^'D#MlBk<9ۉk·*?j[)*!nޖE[~@tTD-0 [$r \dojoTۦS Q^jJ:Jԭ?W"eӖR=2/Uox3a vG&Gz&RŇ |"OP/٥Rٙa#*kLܼbqLʘ:B[+=JsƞjS1YmKG8=iHjpZ\VmzKQQShL%T}zrsQ|NF؞c(oK/pt`Ei!aW&Luce}*ֳqgihWbaw@{LH 8yx5z5f@PXW~SXlzN#טFP "H}On#c켎TSmqu#B'oC GT# NρW|Z Nu}ǣRĚToUb TgJ(8ϧaйȿj \ @RPrY$o*{ ݥ6kM~gaQF;ׅ*ѧ6zyD _}ClSL1x{_ݷ(4-` eπEmyu&(YŽH?Vp0Ԧpd>avQalnXaw=/wQْk0f 6EIpR: V[aʀm>GoO`Ԫ2X^7R[Xl7Eߓ:L.jKVjl|"Mvҋ ,JkT[rL]J C;߀[h96Q+sAbEz f 𖒫k ڙm<Pq%9>ari( VL72WXEݑuQAQ-~`-Ql;)Dg$oŒNOX*/'HDƇ̏X$aE5_$(iƈ mY5k(bB,F)RQ9 9+B%qWsǡn%oѮi[.A% pw1~/"7AiHy+# I8!j."xZUB&j( y_ ®֍ԻbOB)UŊI P9o$0'K r6^)-LZn5X5Π &Ew!]9 Rz)f-ϝy=lN#.nBzke.K6m &ߤQ,XKtXJ./Zz/U{Ybfkxo!@KGj|մZ@u5Pl#szpõzVr@Q\.\f$-A$ƒ ?zB$5 fo8$7jqZ[N򏩆T,M(fgb@p ?1M{\\^{aNaԕu@ Í$a M vF|^3?, 1ĺ&T>Th`aα?d!nL.j $ܔ"6Jp8ʠOLJXqڂP}`/Ý2F$kmVl)4a:XJ'{LJA.S(ar} qPؽ*:' ].!9(&^nc1){Տ\lwaC/B-zTvu@mU~SqsJqpF51as5.zLͶG{XiZ`bt[}KIte<'_NDnp;. nԿtVj.™rD_$pʡr YxDQ2/Ϲ:sZZ;X,Z eteYF%c߇KJr*@n$mjZ!hqdQ/ g gG7'Al2Ƅ~7ǚzk[9SfE98&TI!"7H0OJKaW(%].k#ڄ^;@07bleIVcdnBEu=|dݓC+d#{@ 4GΆd- ~gegZo -o,Uq޶#2QUّJiTS }]pi4 M0;,DU=*~@ NVhtX`mNsCgDߥdC ы}(Pƽ/Q\6JM䃧Z`ϏpRco!EKBНׯCmPֶU)J%zspy^/3~M'TX+ } iY 8~%BD6.e7/6 .l}希 C=}Sxh&P>2дerl`K"ܨ]Zh*NV~WZu2='2ܟ<0CjxvHҁwU!ZNetv $Ζ hio$_I[wB H?\J%1 lm^Wϛ"c=+TJ{ %:Z9Ybr ׁe6Q}p ;wHoĀ+uR^PiVٰI8]$9鵻YݣmmL˙1T LJi&*ަ9&尕/nx[;LBA ;~+0(AS߽/ڗ;Zp |4p:yYth~|^ŸhٚCmP7,B#y'!hN<#>=<#]L@%A{kF8V,N Jcq@I;e8SU>Zﾲ4B94q ~=gJ0j<|oSZڋ] @dd4cߚp ]o-hk]Q ;ֽ ҟulUAWm7lK^3 BHOsP輓MsڴoDhfhGGjā%dQ?zd4Sq$;G~@+)UWwj~Yw֖G2&t|E/8&;gLPrvdvrgu}tiN6 Q6^&ttƔQtR4grY-oj@%.y/f;|  =.v`F. t|VX`ut_рod)eYy8/e}+8N ([\ 7d$|2>gu製fA1|:]e̽,R)8B#@"%4*muW1D6_jĦѧMdD /θ0aTG\{9:z-'Yx/w[IC;|s>M}Eavh Cq :A^"$OA}FKF9b^u=0#'^aA*B5w8ܞ\ dP_صJ5jlu G"ONmzbL vRL33XEZl\1'$Wa\9ƢL C$޹Eƀ ϛT̀m6::"&R$x+5Uc6E^|8G*^1Q{o A!0KPͳ[؜(=y zE>[wI[>}Ҹ9׬:"bC}ʹ' (ֿUߪ^'+QŴ "Ft;c Nc)-btU J ]@!w&*DM+dTOYςumtXCxFYAkaXZ4Nq0秼*TQ^`Ѷ~TZtTыZ"nIwEmOuT_6 !"z6iqpjՑw@Eeδ jS40|,09UYa63 T'2.U+^A70% DϨ?Ncƽ?h58YJ׿[7c|a[ؙe.bz pw{G vxl]y_~Tn#;xER[h)9LhXyxj!AZz3/|4^Ү2m\kQ KkLٜ~I˸'󤰓2EjvҖ#c8{>עT\AI"RD ևf*s+A\"Ķ:'\PRh: uфN]W}lZ3} R?6H1^\"ډ<0k&l~eANBU ~DVU/6/zV UJg$7,U>@ "Ǖiy&oJWL+5EN诎po#F Y rә@[jNuQGCC.&Y={j2ozֳ"1) Ta1Q< lWؿESskF*Zw<'\pk y9q`ҭ?kXC="(=IėT^m5]gg|]ԴBCS/B|aC,`K ~gfXꠄ3"CՕ~Qn(8u+M h9V"˖w挈 X _F= ZǪ@|cO'c;mhla'7&jd|A?JS "(eA!F0S%p V}dD`sOb\7o{j}ҪW}`PȩQcS&+v٘`fSډ_H{vL]칛/& vd+<(AJuѻWcޚ(W?ݻޠ-KXl4Pwx燀3o`)c5[Gl pXs9ZI_л x'fA o 5 9(cp"C|%I~&CR%. $$J6)A/*RuN?~& ;9׏rwI.ϸb&F-V\;u[xĔJ6~0HbnRtܸ،H<g#ād{ܮ/])Faq(m.fx՞XͲ>DьRf`W>q,$x쾂 @ GN7;ǒhB؇|&pOXGO!{ 7bпZA{PYtv 0).iO5ŵ! \:57}t'  :Q1g$O?Yƛ_"e˂\۲ǾDvgA:NG%l|_Jη+m]" r ]7%Z1:;X`6zd=YmJ xR6yY#]]yQpx%<%x텘'Hҕw! V/IOM&EK~zmԯ7it iCٯ-Qpi6ȌN&͋3bu@bK:as}ȃZOQ^c=GiG3.Gx~HM8j7VSg֪,. ^} FR ޒ & H#WQ:`l^-DGo/9zCDnC ei2uC=z;W=ŭ\M%bf@fƤx4fLkggل?TgDkVLƾЋ "'N_ m]bke!jzPSþ11gy|Mgh4@b}Og㢺 +H䢱ϽciXðk,wubL̎ +P BL#՝`wY y>jEϒ$贈lI$_q+pc*|u|MQ b7pؽ;dsC[d% ^;yHHRI <@꧱Yoq-TUnjm#0/8nNshsqdi͍y4< ;>t΍m|F+,D]%i/{-j )K<]pd.+1UtsTz92:^!Pf7gAtpÇ);A$ lVCz-s6=]gdϽTJۛ{Df-bDVRVb"ɩ, |,%+5R1Lu]y;y2PWA*c,^T:!Xr}R x+ysۜ k fڹWZR٪\xh La̔چslVW{ éAH(P=SԮߘsHI390If_J1[9(k'Qi,OAH6* ?&^UVzyvъ\ON~n14b 2~"Pk?D$M\E΁fNixmip^q YcZ1g|k:9;H rj#"lh>42X糛j9' r@f d@7d3&G\Q۾9_bQKO%xea=tclE' ;1뀘(jw 23<"!~c6^M[7~t 0lb0/ f^vteW:+aYf,@OFaH!zAiQ8}EA pFL1\?;b篑ױReldqlSL+D!c ۹ߌG Ng4:A1*W9Wϒ? []j[E#lc^2l<Qdߣ#onex<{p=]\y9<ŲӉH%һO4-Ɏaҳf _-$\cz<~@/BeYaMʵ63K]k\mt#p8{}4L}h9?rb~w"05vGY @p!0!ltɽX-wG)w}E lRX%"\[cloKH; ˰K0It8FB{]soTAj7X{%iRb@ӌ> -j둴 r.T(O^~-> b0g6) m;N,n`1+s59^le2DqZ1ht!8dnvq=-OH,LpԺ*xa{O5$횜$T,/3} # 0ٖw·ZqVשJ~CO!PГL2~ㅗ~<sA75\z;s-_l G\-2h4 c{,L 峣L9CbޕG؏wz֦.[մ zj;{ Yr !2 afO%W@f=j^v)N*Eh|VdͫIBQ.A~~+gr>ۈJO .?7D*cuREӨ=eGi+.m1: خh=,N *\xbu\ҡwm3% Z/,n*Z̟u!/]\+0}wDDDaeui$MK)v R0?\e>_ȍf;0nœGʸ|5 ́=)~LxV'|L>~] X@a"cGg0 }ptGԈ>p:]7;yRuEЊ> HŭL>U7I{zzRX< r"GD2b2~$k YAS'l:ٟC-X‹*g OQu#2@YRxgY܉|{`e}:5s X{ \`k)& ++av?{_(zFU9zJYz@}Ex5"%#jE GƂU*!0A{ ^i(LF,l{F'vjQ,vc*6E=z~=H$C6ͻD;Q{0x9jƿ8@eNbI?c"!Bg {{k0.2.|%^s|X0/S':  ۳5^T>Üη2olw 9E75nf9 cq-bO2ʶǖ88bPE2W/mL&2] k_[+m 5`^*Dh%HVKu~SVwY&V w8 P=vͥIN_XZ,$Vޭ7 {eQEh==W}GЉ6wcDnic, |S.HHބ|-0utac\( վN)+I-0RRHa<f΃"@ɲhÅgWj(w 9V>HUs-jD N9>+3_b"o5xuum0@jYS:A7(=^ֺDC9Zܹ< Oy\?DQt/;e+ $ogjEEFreu)Y]v*R):5 0K tghf C΀WxzےT]3 ,7]+^tPi[ 5j ؾpK#0eNbQ!܈ T/۰ʾk9pK!g>.b^oRkh'ydᅆD,>HgNyDu4Xk P,$̻X0wKE䏄i$  h:{gna#WNjWsuqu%vz n='/mi^F9:FSI'd'=k@^QTD,m'Jfg& C>SM0 zCPǬ/Rגk=&+b w[P_}k a /g@-jeJM6MS9ov⩺+GW2B!uNu "AC}+ H32Ld)c ۿ ,RtΪdDH ṁ</9¹#Gg*|]} t -4rhFJ=^F O)m֝d+۶4v[Z4]6L7d+\Dp~XGEDbCɊ}BmYۭx[]xXx\Ĕ_ԝ <8paW}.[}ʖƈU93l#1wGAՆdH= WXm 5#tMAF?,m,@#p fy:{bn 9f :Z2a[MApNmdw\ }_RE7r E?zl/{ ).< ;w ~K,ڥ͘Gs+U]%CIdˑ ;rлd2eVpA'L;FW-v#J:@Fb_1zXQ1p9P,GKm6l"wވùqtxɝ>/˻Jax9P7w06ף^!nqT/$ADfi2yH(t_I$Ogaj?X*ݸk#wjwAmZ`o0GBdU7agzewg_8{OSV%gCp4+J[[rK¯v<)A(׺1LtVٴ+YjUԟ'J|4,ưMmV"ʷ]_؞Sآ(6*> o}bQ&+Sʏprvӎtƒ\%NӢs9PV@)9#bP͗);!Mzv3ʐ ZVd (lt5Pm_7Bh3A0XC=]i2,>D YF9_f`TEcT..*`8cT o"Q_f=1o[ fAL8?V- & hZ/g|tF+Jg]=7"k%VXeƜ>: >U.ՋUv-r2X!51,HxnާIp7}w!q*feI0  Z+hvEGқ4EvZѤ85 3Qrnr#io[0 ycC<({vq<"?%"whdK(c/"8|CR^RUi(B?>>=l$/ $G#Vj6ΑsVj P[* a5QO!WcnWf@sDOc?(m z[N :&˧UXwMn`SU ʹm_Kt RMm'28;!("Y+BO-rlu81S1*q# CŎ)K)H»|ò^õj3aR/;Ԁn=،CSځ3-*AvPddY 'p@UMe~Xn"[ K st.Ns$_xϛr7{LR&ΨC "Ŭz59QbJ,<>V?E!iG*1uIe~Ԉ3:#UXfx*HZĩǣ :U9@OD(4h;w3kp0:Q\!嘑QLT׻D3jO%p?/Z{_6\.Ip0i 7t!?̖)C7"ypm<):Eet7K>ICy@h~Їk@~!WߦE!ʕPף7uzQ s(GrffyXzNLF;A- d s9T0XiS"s^JGY0@B0f8fGԗ&!p?x^>Жű>P6 O+dkfTqW܆{m~V[TFV =Nek^FY;V LQ걫^拭.Vًy%Y@.\V̘$:AM*Qc뺞k"X R؎+ u!Q0~g) JEZMVݸl xsIM[ b=!XK; \S\aDT)X͕<ދ) S\:aam(IQݜwmjlpI8*cOEd!Cp .-2̷d_&d,(rFs@lC{i1 oY[}3o-\?[s|\w I@ֽ,& Ѱ쟹O0C; FQt19ufpHmE}kE䅇[ۥxH=?1&)Klyun<2V 7$+T-.wUeZhۏjs<;&mߋm(?KV *ȯ^nX{y6LGܒ &3CMm ضf\Gp,.t %PfMqxc#ʺ_ĭN=lmy2B0$%ҎֻAҁxHnG\F[8cCCHNA}ܩK+~VWoN4xA2.(u"d?COʸ*s%n>e%S${&牤a1Q!Yw~4$)?DY`7k\JX2z@XbzRNtO"ٰgĊp36p3+j _QoJ7I[NXa[W.qgFЗّ$9ي^7ȸ5[SV`ܭowT<.`]@5&6F/`?v3]04 |)3/:!5:v'7 xLOߘ8kQ*c%TGrp*(r"rG l!_Wv^+(U8}Ya7Ļys>sG=FZ ;w QdEv: @dnvyّL`կwm1YoR 9f|P6* ;2?W<48,)StG:(ze*iqc94xЂzTq l%.zi "޶2&%`D%ڿvvs-n=@h" UD(\>8_^jD1|m~Nj%T[˲Qf qu] z i7Kڱв;rMN= ~'5vZtRP/,d{6A7,Dŏ")CM}3LVO+~MAS-kPa)W+rUUHN 3KEn=jSMe$P=sܤ/"GFe֍VρDooMzs'ڡ"~O.UCo=nc˫H™ 0nl܂..SNm&[T3qh.ijʒAzMs+vy96m 7Z_i ;8楔~cGHtHTO3+ p҃l񆔖K>$A_\}pWnj́SL(jp ^@ ?3dw%/eހ|g:ɭ`ZQM(ڈOCAԴNvuLf5XmxtHo* i}jԌS#t )L=OߞyvyR%)Ff8>بI5M`ppS[@|Mp%-bHI_VU ~ٖ|؉d[ iEP<ImB"񯁁s`mX`'9(w}y "*v?XN#jzzPRN+x"R&eNZK Sj~Jb 6FIy7[/Ӫ S*'\~,{+Mrq|s6h"ѝTg?8SPen19ul)"UB(gE_^։N@46߇6lo2wOEZg}X$Y? #+T5شln J{W{8:Gξ)X5$UVKήԉpd!A Xy&/da  E0V[l^ *;'}VHŋ"teze)ԕ+3YY4b\^AŽco{7AL 36-0qSFc>yV”jir ?S|O 1(0U 6uQFd{1̂Կ1' L pIGi(obJBE`cm&epLbPҾ $ մp]\zgGԧ[&H+~힜DHեLrTEMJ#6mdBfN|Uo UСANk |0/AB}7jr;F10\ͫRZѶo>@gc_w)Y{ OYbvos3W[Qs˿#wX&(^ T-Ia [`c/ǹM\Eʆjm5P5mbkZKfQf^G5xi2| 7L+"mٗ6k$#)KV0q=)!#]BW ܕ6 YZ~xȶ iSnңOysN0EoRa$9rY-]SL$Iۧ7STA;]jj}P}JWM~\)IԋrSOS;{=&wǪT{#}&`T%.XRMEx& u4Yta(sy6FUghsY%j,og&H9 O #^8 lss*LQ /SvAmU0Ygjoƀ_Wn#7w]e'JPZBR W~/ z9q (pYs[rIy]2`'fbv v`xF޽7\Hvl×rA-FW}%k8Gga G.هgb~EZG3܋ ì\V$_k`QbDGs*ֺ M; tW𕽯U)s[%q\cozAY|r UL#ئK*jwP/@(*)x$mAhTKǿ* pD۝A), ߬_+s U:p/EoqR_B.j8ρ bAMNqM)nf`x0!rnp+uOUT÷Q]?%;Up0r`'W@M.Ѹ/L\Cϡ*g 7cE4ݷ1W#L%oI}d0?m!jPT\W%vdh :(aJL\N䬸{'=0*'ID0j wM#ޫ,wsi_'~9Ucծx} Tj!G,Ulwtߤ@.AD#C?A90ZikFiHR{\p7oԎgAeT'J17kߩ }I(ltU6ޓ}Ps%*mo!b)m|lD @0֎:P[z{vcg%9g`Ï%?rw/?3(W7A#RZ #WWoΟӈ½&{AGeyBo Sk-Q\5t=088ӛ /s} 5mg(G&qFPVuԨ*e@Vt4&U TS;~= <{,L~ V|"7 ZBp.Eu My"qe3R_l｟ѕmO* #5V,*fHVÊM-_@]ot^ApV.*-I+$lymzge%YEdB+ ڌW9?;5 fCU惠4ϳKJ|Ls+1t9Pt+ykX@JFrd`OQ̄,syZ]; h͘Ga|?tZ,V4l1저Q݇D&^D4:}cYt yBg*0CjQL,g܏~f ]x$bZA y#(_IbR`ݝc}pe\-g.aNb(1A%LUTȹkBU'6 h UGev?3pI@$V9f픮;HN2/4kto03%Gnko)@`ȅ♟]3ġpCV"F ]i; g# \>hp0ufzjYh %PfxJDr%ju Wja) Ҁ=Ύk?vx]"5}'e*Q`? e&+|\GL>~8|:>;- n wxXpM$Eie1NЛ H :D?#r.'!YLoV&'&sD Ys  >WExCaQomc'i&,)qAz5N~f  A@Կ'< ^/ŘsT +d!*[.ʔtjMN$Fx[]enmq\ķYm_'lv_F/D`KhsYB( ` `?6cM%QQVހkЬH-.MTGcN"$۵WGrd{!߆e)zf^)ED=d *.t{ Y5ūQJar{["s{ zb(fax|Ο'E xBt=cd/8Է2wg"S81W&{DqYj,ŏ樃M}#7OjVջl,Aig3t/8/Uע)vnٮoKS헸QcD])5 qShB#p~ѠXCIm4?wj=q3Z4V"K K<&DUl@\p ˦`~_yBGV@q}]Eh3jvVM{8ĨCkRc> b<;ᇙ&:4`5]@oetQ-b a!TJsISɻRńG ^)qfe| q.Lypy ?5iYsqr_\hxkL6k־6{/{!xp@̿*#> q02}m[b_{ZӤHs>ĽbA|yhQ*9 ǭ(!vS @_.zq|qA5ws*L!]ybŊܮ1_<[__; ;6q'Old {.ok9ȗ8J%wnf?T>Z2McيBФ( ^/ʞи]28.Gߌ FKU _\RGC.&63X^n@NEYK*+(C "(r]QiE_җ򔲸mI~aPļ7I'7PӅkD&_* lwq>@pT!>~U $|`gjePT>Pbp^ϩT]h|L̵FvX &g,: :8ȨeHŵ GGlBX p.30v='WWb cŧ|8n9 JrR$z:ιuy/0G]u)np)`1$|U $e-p[aM6P&>:]&#-5 55fY$F_Cc ꘱/ʉ0h!٘t4B[FQ96E"#jIDn?cڃeB]bN~NEJle.'~ v:rٜ}APa8Q_.\ܧ>[x},dl&q+&LS*n~ 1 6vٜ^ a3̯x'"98bCe]}~.Z qj|l=5Fh!6267tݠHK(~t1x~DAhj ?fR,8Ӂ*sGDӦ<_Ջ*a>`ju2@Qbl/x9oϟASOb 6фTya_MkE-MWo(j;4aAlhge9'm2/IPOf^h ˗v/N]S7Iwx>>Piժ#E4iJh@Р@gЄV1נE oEO w}@b/fK#HUM8Ofۭt Һ^`oR`һ]v`όIql,x '_=|ʘ$I+,beg{*ZU%~er| 3&7p:1T=6 =mȬ;]!~D&wi;`0'(rb mQU %lUX >ϗ{[3Xч33z̠&ʅgEGc8۬PR)kQ_?Pt_5 q5*|W#t=1;1BDҹ]e"!1Uy%8Bx)<_^*L'_R.Ha <1wA:$!E wu?uM^LAyL9KE$3!,྄l53U/mPWίC0J!4MZ5p/mf@_%w~&6~D9 yC"BD~&¯,} 3cQwrQʯ%:꫉C]!3]{@aooYwNإQ4ї+60;EZcPZN >/oG?h2DFԡeD8 k}b,aqlYxu!:7)P!#+{۸qNg ߃ TXU+) h-'d”fe.wjMAgjnGu?% {99 S0Zx/+]ԿHSA8 &W@D8v.-5J!ڞ1g%1F8~j̋oH-Dži!'y)e=fVDJ8ՅϟGo/^[fcYR8<~:Sr`Al J:FKDz%m?oXC7V:}p@k7RcsHgK:gXoȼA0rN4Qom3NχI7CG }Lʿz4Ԗ[ Y7ʯzϮ3 rkE`P?K> ۼ‘ 7>cyi3 [Q&u5c$E9|#,}g/lm_!Ic1qё!$ -3P;Xy`87os/^2/^OR1 |6S" !c"(88;-T޸pb̕x"v=/kI6eĘy^Utcs,1[L_> bYBhcor ˏVTl],If|i֙ <^HĜRY6_>7XOG1Z{=%? UM7#}l}zWwZ "'n^_tX_"N-'G QSjKB?4(@Pa.]&a go] Y.e2e$,U$|~ {~>ub :X3X J=BqP%2BTZԞؼ6Ny=aX V:h.ӌH9>NU!P[$4I>6'b} s\ڑtr~ABnL(CZLSŸ;^ZD.MXst"$UۄZZCߑtR$׷ țz^CGeIyq-vlƜ\923TD *O_5POm@: P.CPynPk=]'W\3% >z&YBgFuwl;bV Im-HKs "CTXA[K`'8':0 i"Orٛ,qi=8m Pu!vEɷHDP :!UQ:21riY^fF\Ԋz3/q5 ȟoؼV]j>/Z qw9^-R"Raq?xXBGqٷұX_>#C)Ix]1cTdOBF $@Q~h/c,*vKݾ ɺXi6FL5=5i`V5:!aM[KpXnGfmniq-@XJ1TzE *>#FYrIB:rHK& Gt&BpGJ&圱*ԟX hO($> ~m4rV 3*鍺9FAZ &HE6{>n(yp]vf*M_ hF"l6A'2(أhź\1dVjJex˶kZtD[L,!qe4?]} X4 96d7ėO%ͺ;Z'^W:6eƧ/6l96+b=-5Lp+V<:jhK<5djwy1ٞOs/ A꿳+bc_1jimsG.|L-)Eha-ةM~( &Z۴)JIQR3]+:Z ?dڹy"p|fmBK/vL<ye٣y\c<@8lf8BCۀavd =x S-."C/dK n*j^ Mhͩ(Q s LڊlB74ǽf3 9$x")5u-t6Kf*⦏^'u@:ѓ-wO:G21N]=f>~< )4[y4.JQ=ɒRв"&,pq~CH_ JsAc!'D0hےUaʰ3։GpCS!Y4ҖVū_kR[aVq%2aDŽ ĐK r-` )[L[e$:d mk {Ig``Jk:62_ai߽rӌBMMȒc3ѧKZ- NklHJ"A-cQDvKrâ Ԓ@R9lwrІ޻oIS/EDI4~vnL8-RS}6Lt;jcm,ht2%T;2D>֞ =ρ'=!bc0)m19a9oX.AaZhcM8$ǐj[HđEiA@CY|kiD-^9+k ?S_YAjw+U>HWLO@0{#~2 5 W9T;I L8z\ uȥ@6= y1˵>rF9BEųk'D +8@~ Y{+3zL.8Qu }tEs@ƣvFCJ x 1k&[WRSf[]!ۈ/š5]TV y8mʓN]ԦXxfz`0_Ќ6B/@"rEi8j [[UxPя[ Kc~VU{( WEJ˖Hu].`4HcI3W@5/4[R/<<@؂ݻ-R"ЇAH=Oh(t&Rv臏}rndA\TZ AW)=KԡzQNa$LDQv[9got+xS3.񔟶5H6J~!!L&f̚Vs74,ii+Чo䮽DȔ9;{)9tӑ.\JnP`A}~:ZMJ"h:8C0mOR} e,i w!n=vem08xExdE R ܉f D]~" `N/1v.Mhe.F g Nr\h"kGN.X.eisMQXХBŒODi,*q}'6`kSKšO7;ukNUk^RnȓC){^@l5 LJjպfRGVCvU%b:¦qpҁ*8 ءcN5mOf?~~:,Q(F@WV0fPտaN4jokɳMR(7kylj#Id;| Z 1G'ث,R#2xLsOuSLxJ|0Q}ObO"lM³Tsh|Xq*SGzSZ/SĪg$:[KAy?&SbJJ"8BoW\Ah:ѕla+vӟ/~++&!xV0s>CMKwج ED1_@'㴝!d"M {ƕgiuwMz+v׾TgE d7!߷8|Šq2\l<b > "lkA:6mˤ$g ,]^DI`Lq]?B 0^y7A@O%+=JB^tuf, ׇCZ>`T yV6^W8zE/p1ЃS/b7܏O}:噇麩:[a/4>p{g!MH :¹cz(&EzP KDnzc"1ueQ "oPڭ:vX:=K0:bC{Y/Ю2C/% e˄ psQ&B[jizz_^ tVt fSjeOِhhN|"bJd4９PtW!њ=enmiIy鴤,H!@5kf \EBs;ǧ-q"Z?4|g%RԀ.źHN2/ #^HQe -[4(`6V/I^7|\\7G2؊9$ ~H&PJN-$CčI+gиDe tF\-Ù= 4\# ?^&XQptxԓX/1߉zc{XnpR348l>9oϏ=9"=ɦ5uf{M19*]gVw0XiHHQMp̧:ФteUށ63e:m H6vAn `3.2 80Yxn`6kMb}fԪ;(Ą41\kS@YEə ۽*h2:h/oyqj_5ewtUypTztВ{8f$yiH$`2ڬq93-*=o}?\LA`YYaL%1L=*"ߙ/~;e9lqcًKUqx>c=&6aƲI5y4 ZZ.z=zƻM^΂ Hy&=;Z'PgWѦSaoLJV#3@L3maS{D!e8.2@I3?#YQ7?)xl#9`X>24̮y_sJrt̒ESظ4Zm`,|61%*$m9xrCRD0_ԝj?+i[BF?`XtN))ײ1PĎJQ"vnգFLi2WPsKWjQ)9׭Y( GNC Ly{I7Y m9 j ڄXAilH)OQtL~Jȍq)4 D]d4 VYǪ ؆;V萭6N| _OcwLO9'LSK #c:t\'s\ڏjV\@`jh*aNGXF7bU{`\ K7.$..wV@\9q ʚyh;[5F+7{>dKZ-\wlOff<2_ZWVգ/D͹h>;ݕ]OToE![5 HX2{;u[ޒyte˪dHd[]MEģŽ'U!f3ԙv]{Jm6N(RF0<cm4b32u&g\iRKmyFmJX%;c99~z{l.H̓!fzd x/uuR8Flu H%jiqD R$;W\z6!:;.f?=|'qYr7>GCyEawLN@P czQqx)V).Q6dž/5(JqBBR#V]:+GP#D"! R0ޮYkO߁,\*kм"+mX{t[B-[W<$ҀX2|T=#JUȕy(ā ='"ACj8LqWʉxYs˭Q쒯M ~]}+-@7 r^bIgk}_4\To;$U rN!sVدn`H":j?*Nzϫ(Q}TFWJ̊dz"z;{DR l?tys zmФ$_;-\!-wqtGX&mPI?x@+Ü㟆$~/LE߀zacFWquN/:Hf DКn8 @Ww27L5 umCCe2qb< aV|<"/9C ;xD'=alT^+GzEʷуɚxCJ_Le+v j;iNI"j2hHOBTS\ɂ,C戀sDZp u᫨)$T)eD M nZoMor)UNW@=|46)mirZJ~~u0]U)S~TRMC^ p~tLLIwEݍ] eCT{UnҊ;;tܧ_KU7l͵ᢡ-P(`|+}?pP6i~IGj[k]BaP-ujKg+䠼ף;%ϔ)D  N`I }>B'd.̇+\{tgX#A19]g %Ydcwdhl֭/+ŴUe:R?*)w-nV`#0gHe߇0rqݼakr:JNt|ș ml%=v\D}Pm.9HqjEէinϔqKro qZ}9~삖 `Z+\=*al6ePޕ'^IR-uq`YNAU< ]eXqD^t KࣆIw\ Ry*B3]DEVs&9i|+ Nd2L2GI>(""'r`G;{JFfct" IуeOO+} 'hK1Y&=0!XH'A2T▼ኁ bv>u|J?J}{Xʹ<׋>  IE\b.Q Q \"` 8_ –"_Sw\H4zt6"J/SU>bftX5blk*fߑ{4H]=CcڊC_ 1 7m믉֛k?41ꍼEuzw|p6 t0B]L#ֶ;)k+K^/~YǓ:p vhb/0Z2w(!1Ja= lFʣ&:#s!Eh5J-;tnNbҢe:8N_4`bucr n7u Y!&o 0vc!3,:$`_~'3U4[?mL40W팤*sؖH tϜ㥍ҷg@B}uŗ4YE)1G*p FX&Q Iڊ&Y|,|Au } c`QxGW"? 3njVxt6(zMLt2k^Cb~ E,dUG 8.FǬ qm0O\6O5c"4tnGA[οMM^c-\dmص"'}p9e$tZl h| I+zKoƊcv./,1_PM1uBA*nXė;nx)hp`PE,/[~fT C=yW4C'e,X7#B< utwD~b+|B}8z,NRn$NeH"G24Y: ]mS5flyEy+993M2JwZ~Y'#l@-20*}{iP@O ޕ Lb >_v;LF6L%5K߿tܢe6Q :9"K4PJ0;Qhj=%rv1#t8Inu,v^$)Dum@z}V1Cog~O@5(xKYLpΗw?I6(+8}GaYI8NzD&%g ,SUBQ[,r9do`RGK甀k5kǜcm`IaV3ᤶˆ+0B>}C:^!ϊ4jt b~ߝ7. ~ "𜆀w]n]gB Orl|/! &Cs3:h8u>^ )ޑG*{OUzd0ma "Fp/n1%䘌4WSo*K (ǘ{tbyWjd}dL)Zx Cc%N% lL-@;u_ Q@w 9z5v;릒ԸC"g>T,6-4 M}hl ogql*N!8.JscrmAZM&?Q z}۽ pe?Yny @ i_[s  ENM>;?gQ=M߹&L`k; ]9&qR ;?v!j$wP{k3y `wV}P, tޒRSjRʑ#)|4Hkm n!cp*j+op?l׹ߴAK+cB>r!isF߽ݗ^E}"%ax"`[uHdiL17 r=  dv?{` :ߵ/vrRk[msz)i잺@_N Ql!E2ӏc0z?4e lwD"Vu2`"?> {4/ X:ЅH]Tysd: 1 kR͘ҼL/Q wEdG |ȗjH}$ o^^Yw"3ཬlnm(Pϰe=PPcKe9n?؉'mk !$ c:޸rf$m#^A9 A)OSVɑMp3K[BUdOOE{ ʓ $wk6b\ٹڮxi%#a [?˨ l%%]-΂ W} b7NĻm;,i] a9E4td a {DBd *cm8Y2X"S<(/͵pvpl"jz`&#^Q tnۢ4q 95K;Pa[Uro T(`Me B{JUw?l^sWV*M>|#W]`m˨L{w /$0ؐۗ{"1o:݅|ܞq2Nd,G %ѧ5DҴ4#8L; YҜgb dvFu8bNCgl:@;}oYKBNrU dmAgC̹;@]\ ~(Mqo ()48ɰη~51L?`Fr Y)yt}y>o}dEn>^4̋+?< e,#io>[R*1;f뽙lm8>>7`Vd󦠲4]%>PrR=P>TbQJ!YiΦ(MIrG2tUpXK5BKxXyJ%&'|C$+(f5j ! (܏b %d"˗8s]NХ)!BO]|f"@fQ!PGKU}<`3$l"Pye)SKoc~\2hbl5O2[Np?&XM^q sNt Oہ" e$MlEn<@P"$Q{03 n)F0! g(o;'4>(EPyQ:ƣf*Xh{)w^큭^!Ȓ>#Q-L6$S_S4#;7&t{[pfmQ$b2=Ҁp-jGT64:EIࡩiFn[iVPD'1bd w6Wb)V{٤ydB'MdްZY֘|$53L2= 'B>S+`8TA':Z8 1¾,9&Ni_D+Xh@505}/'Abe|qoĞ> 6[FϛJg\,gcSPZ)D8`낝b-_;T]Cs}r!@\47UVᤂd/}aFJ`BxSg@G|3`cDtUs$bk:@04Q|酲wڮ뷢dn]Mϕ?ƣYf'L!$w2$NKhnavyi(V. έg&)!a_Xu? J~l24R.z̲5a̛;lR a0 OuEnD)x`KwŚgKh}0F(_hyvq^䡷TN2MUI.t-a]Ҷ Anĩא'։he:Y_B.oOj=58vONIEp[YJ5<4jO m;($91`*Oo37qoaE,c,alI?C@OZ\=9҄~_)Ύ3 >rc S9 ?JM6#bT߇bmYP@IX[Kuǹ 1,=?QQroX e~V{ewZ8K7C %9n%1>[t*zOa5 t.jqlv'mpf6eӪI*\:w:TlZ͘<3ޭ+'ﳆvCqu{FmSx#w5wYFYu'VL!TIO(CwcFEgOp1L I 󎶴>&(6n!MTĦsdGvDQ<4ͯLvF<-6s:Xtf:6-A ,u|fBr P1&X%{Lvsm63^aL :I/ bӴ@sR.k/}!$.Ni+z8op)uOdr+WH@L󩳊݁~(3#̮p"_k*4f0/3`xF{FgѠ:tTפp3cMsj&9$:a7NZ^8hNn%y@O|Џ|Rӓ17^opdp@zWxfny֑<-d_(uh-0`yd.AO*S$ܕX*ygwWlSI؍/JQ)T Kp^W🀲(%#;_ 𾏟wp.cn~ٰ[ IDUj͂!cN? T}D>S9{_ԨVkcW~<CIArB+$T[e7T;׺2f=t^WE9]Q'k-ʱc>T]oD$Pqx|oGm[UI8՗}jXr/ rrW@*{*}2 D?]wR [f"ZHn;)AϖH9k|ṈzÒ^Y k1[%嫖0a3_YzuF"ig J=@CC<,(qVY/a r(ch#X2/ 7fwf =-KBRsCLgh |?$ ^{֓ N,WsC_|;n'd#B)ݻb &᥃GDS8$콸종%άPN:S7?V WĬ.[AE_EXP9/ɍ!?-/^R0_iŮz /!>fiq~RK-6lNv 1͵\bp0rȲQ epWq2m~q]N5:1nU߼lꆬ1%ςV_(8ȍd+ZSkZ_Ge2!EB1MjÓMq#}p?1N-̓&1r3bnaָ{I~AiL7Qdvi)? 1⽊.F2_W)Eli잟?E5{u*AF?K?eb,-:ytl$X5{݊xEF9ASO/۫>BI)#hkU$Ͼ&m S5gs!n f)@7+8Or 悪KQ@s{BozVX*c;*yz[ppVHl6N l<S/$%ha0Q]jX8%`]z_EAITA ,ΨTZwwOv\fH[H}_OGk?NJ+W4eVL+U1l'giO Ts;AM%O'!g!RУ\YW%SR^Έ{xylvH86Bg٣rt S "kE6s~t Z\ǠAKnm h%Xx=wު߀٬ܚb AG9Z'smspҝ{LH/7.8bX IU鸨b!0gΦ֧HCDKG]Z{`bAz# ]^؝]W>8gBs520-@W+T@Hisj6Y󜕠J>3PR"o~O|dAk{ U 0tZ͟[La5 A9Q}˵)-r]K\ -A86bJyQx,{Nd-mUm {߽iMTCB qUh`G!O,N5Dj߲E%kAŽ> 2zGu DD\^(hm*W{t+u翖3Cq{?x][AbynήT6?@NձW3eEn 5qV τ:qhY=Ȃi+ܞJxW#|u#+m@eU\+'5H=wF[q딡%v\-F@>yooj4"+N~[Cy B? #ֳ +Nl:|LB[NxBE;ag+NO7x4k^xu]kv2kؓ+ǞrzGݾ*|)>PizMxt>FI e9ϙ?+ lxsruv;{U_n6 8% X6=(*+j?2rLfV~?RiPݠY)]z<uAl`/ML^ `mՓgFt | dD-"[Sğ!W.>/,Zn۪ _J@2R(51M=9"%sozc=:iԒ$:| ȴ&]"-R_UOUI+GOxW ZF9}q%0 ?hY 0h82O2 A.0ǕpHyf>VۘTPـbp(x殭Ǣ;ՠgf)pKo}]^KԥtUK"HI;IdG'SnXM'U2OS|óqCEa t@JЗvU+'sa >*v`W誢 I$<ɸ MW _: {ԘYh4!MSGç+ojm8?t"4X#fYQNHo6IZ&ppoZ%St4tSc0ew/ր~6=Px ﬢ& 5żʐ|,;*&gMg?!8P4;5P\B5$eیIpZC4??毪6OcEhk{d9UGyEeQށĐIFZ?{`dyk!Su MVgnXXkqRm^ $g$ 4s輪 _r!](Yj\1zRO/;'WŅe t2z fޑ' ,GjFxuFh\4(83dUqWjbf/odyDvfTE(|IɋٝWzOf¸7 dzA\+=?N&znf0u,b0 y9^-oJ>R>[lcs,🂢z/(@+$+69Rڃ(H-Mv|gy4ljB!EE-Iƈ y'X϶'E@;-xx%(4H݈eO4g'=I=`GfR/8-v;soقP<+jχJdt%>yпs@_Zkm}ҷYE ca`U/N|1B֜NxfWҜPR Km4`Yw,0u3EV$ N՘ڿ%`%,cƲ㱎[u -M`_Fn\PѺ~E12Y0 pB#&-#Zk:QdHy HLدڈ ϘܿQ QlhjxW6XG91 ܎]uF=ɎErl_A":T/:O,i)$K75"3>#JW%^bߤu,T̸ϊ_s]!ob,z1D}v/#.)ބoF |K^L&PxW_ >iмHsn!i#xF83W(S^+v48vLod>M ؔeb'UvWV?Doa olPXWHJ^H8rm]%sNB}5`DN=:466`e6" Y9m5չXƧJl:K51KXQ~7telÏ>tf+)X]y^jE9$Dz-ᚆxJɣ,-N_`\nai2cd#&!\ |ݭtʩU\HSet.av1`zƅPױm?!ⱌA 1Zxmr$/TK;+gTRK۪L46j:==ADϱp~=?;ym7=2S$1o!2$>t `[;/F7 ӻ/E,7t>eyfR$ٿb{:jO,!WэIQ_E 2 /zq% 1^  -&K&P,z`3A p6aH-6*e$u^eDΗG^Ra@`ح٣y 89)P쑞tk7ALWObrؙP6L=~M [˼7S6tӤ:rO_! [DBCX[,Aǡ85@|:S !anua9a*)\h&.IkEJxNp{w1fJ2i4"QyLLR a/[j8<ˁn692 eO^j 8:AĿ`GH?B!nKqlWv F:[ WBN5م5 ZlejՆ 6N%\9=@E_˙M]U7˰]t_)K.:D={zߕI'w3 \5Ti-4Oӽ^ݏ%ؾ5&Xdl/ߵ)2LBw/qbr;QEEu.k/P< _- bqQP5G wK 9p$V')a>eNb2;*O(:pgH͗#G':ٳ׫ptkar=P斸]% ZD(M_(*GNxPF[$Xn:=ǛC}[??` 71_TX0!&Bg Op t{xO'.CK?l湮 heTώ>b?Cvų3 b cS$Ps4&:k]Bp@_;\* gA hn6 TzPHm3;_(q$:/IG5Ju!N zhM{@ʊCŪN'jGj%t! &Cǫchו'vGpAE(Y|mT6=: jQMTȌcbx% 4eqz/5:f)! B38Ma_{9ěj?z5G0E?t($_F7SCA8ń1ms00_Jr;W2X[< tҠ>=p j};1nwŪmiYa*&zOķuxUy${oxFǞ7>d ~)Z TeFʈo& Zi}M܋EϤ̧W䩉]>ݗ9D{BYrnG@M<`bqkCL,/lB`!8:JW p_9Ǐݑg֯fOߔ38]coJVDeM5wy뙤?e Oy ƉhE_=1Pi֝{HW ).wh>+aT]y#W\nv#%d7*]ʨ(/DzŦ@.~"gZWjU*I_kAyiD>\i"kuI̯ nZo)"2]Iy#KpӖ񍡠U^H ]]e!@xvKIE,x6 nY}uze2ϓU;uaj]{yFH s-gɚ0\ iQ<{Qa2!)Û@kfN<qyD\6g.DM}:Wk^Lt DBK ([ DgEf}=6%ڷ=m /\7.>qo'N JY&J:?s2-vd2+SO "20wj4V[~ wMƅB^2KR|'G7…n*_Mу{=Q*d;_a]ZHN(Ӡ3`v'D}FjweO)]JnNן|ࡂTAk7B͒'0H`hDB=v^2Tcǚ}:뗾nڈj79l(޻u]ӡqE25ƣ-qSLUF6@'ȿG@C~ӕ{ },JND-N BIM"2|~;c^Nd蕠ȶ91wL5΋G$ HOŽj8MJLJϽ<$̒=ZSYعwkܬ$}C0^n!}uztPk#V` iHJfGN|0+ѿܔKs&法DĒJ6vP}[`)?Ҍq-!p531H,֟ u.r[% !:dQG3^\B w_6:9$%1Ӟ\zްp*͖[*H"yO9[D#j(t4D$݄KbhHշ^)e<^7L&'WR#K?ԩP[t"17bQb-YGIF|67eՂaQ ޲ Q(T.<2uڐL7WD2lCclۜFw`c6m`܈|1R:_56Z/=ٶh6dx{m+6'[ɺ !4EͷEe Sk PI.Y(${mCRwtt =0bA1?ss&H uuz& vHo -{d @nj78VS /pɲӡ#Փ{m"m֣qoا)3RCdg !͍L"O6'knfKz4h#2Vs,NrW Raʓla1|,Z"Ly/a{1HIpBd+mdMb;nF?,e LÉ,ߞKg& jk]{ݤ4BL1ʛB+;˜ugؗ˦@V+S x/SװˈшS2#ѻKG0/O(;WT|?ʒ*!cҤp8 ٥ӭW,H܊a$U2Q>*ZHzSr?p yt  n4z*W_;\2J-N&*W43OK4šCZ$SXk@t;u _Չ[ x߂RtTE%giwZ5Z̻ 4p C\=a[?\L[=iwb&56_7=0z9~Ƕu:=P0U|x7 4pyz*!غ=Th}iH.R7M pې]&+ph^z.~cGdhKqjPvɥ hGAD#PRΓ>;T` %&){_B_Kgkg"![vx Tbc&!0Rc#Qf<9:~\',<SD*1l8 &vHz'd(J&@S(c9ڛ9QS1MP_0\ uxtjQdܳ HPSFcHSǓ򏀜4o{#|8pm/R{Yvi~Vmx^Pg $&ƄSIZY%'7%TVg/3)8#ZC$Fu>\6'kv(,䩾~)3>=w* U-|/驅BT>c=9a'-c]iKAW;9O= m12toyoX4m3w#_&{B뮆m({-̬32 윭mEzdG[@dIL؃ʳ~黧'8 xj=x;]w2aI>u飵+h߮í! HZrP A# aL8D gI# Bs?6Z2 `LíjMkM Q7OsD3<~MzuWd@xNd6rj,2 zUh\NyS!C%`LCxPmB5+{򁴖USrDjpC%׺b`& yX%uꈩCwqEh$s77%NLK$n"7!V $ DAꏭ˩ ۀ3YQWei4TYץ抨ܒljW<¾;o$F*`7HMԽX}xqIuf5IxM>b\$ X%̈Z%GW8V%L m?l ~ꋌUzO%"!6cs/^xE ?|+k=Ȱz_`Y}PJm?-:^h)($ÛUh!5(wb\2]:ӆeUv 3I>)=bVhOXo\ݩ`_WWc֭^ȴok+@keXPceު3aQIjJJ= aR 6v<U^7+PUFSല^)GU M^=TkҪ]߄j$ATlf?+OTm*i~ q^,lq+$r`zTgpj66WJrfP?yo-Z P.#1v ,IYi` fR_Yc%uQ3XX0Wx[:7_nlX-zz.ll>`KdC&^WX'ALWO4HdkB*=^K9u1kwe[x򞙒ڰ֏Z0D(jT¨YF4]5'bshެ7NMh[MW -y%tذb ivG&63ZLJ mZ)ĭS3ل`eY Nm-ϦIZopb[8l7.y ts5}@LLJ?"%ˀXȨMz RGd:4zQ(䌷PFtk"fE^^pz2OGrHWő֩py McmKJL[iLAHP{oIp=1崏&ǽǝ{cjЛY),~ׁQ9?1v`ʯIvaEֳ"3]f@19-$>R)z]ј rK^#X@jV2Rսm3tˢ >0X\Gr59$ݠDVpgΉ$=T3mPo9m8|;s PN 8f~MҮg l̿E`=0`ߙRTB[pa962ǺH6őcy9G/G7X6pnEn5^c ,^r嘞=3h:>ĔMOuyQW Vf4A\Ń䲿iI%z]$Up&j|?c%y@+ے2r͈xk'*m yы'<&k@oưb0i(i5<+ȾRR M˄F@-nLG}^LQf3M$h1Y{HӲ*-@V GރK+%F>FG*]m/A؃3eJ]~Kh.X<ᴹAd  nDr;nMtp,_y N䝰_}r̜<si)jW;q]ʟK(Db K;.XﶕY5bb@ٞx(xG@b{$.U;/ڌMN@x"Zv0E|ELdloҹ2r?Z&u@>#Ijzgki$F2R hEd5Ha'եr8HO%@ZM:7:OMgT"S8+xj Ø -CQȁ[8|h7 歫Ǻx6 3 cg[2e^gRZ4XiU0ӳvP67 lbfXҡR}Dp06XO Ugwr8V{#fs3MvҮoGX#51JlCIG LU`YLRf*D"]8y8eՋš L E!K3,cLb7b #ƲVPbkAU.LOLKK̓[4}u %8'YdX.U =,XNZgɖ`#=㴯;ǫ ; Y)[j{`ߊ̨sr"d'jF 5Nſ\^%'`t a!΂Љ%=kc\av2Þ'$1 /_xb4w)M%79D+ R@ ",y:ppQE\޷Q#_ShA>j-jp]02*cso t7mJb! 0$cJK CCt?NF'd܇Ye) ̫*f'_.LNOEDv'&ae@Ju~G#dB]繬 ^0Փ;0;9$cR7hd0/ۻrnY9]o51| 1? SrFHCEՉ#@Ç\iH942,nh }ntK@#H9Eg:+M˶Dhpzɶ{ҸЅ =TEp`4ؾ*i!Z 8{$ m2ܓJOݓ@?`wٹsbW.#U(("eR T]Ihtb0 TpeSl'F[iK[Ȱ慭z I¥1oS <QZ)X# v> TD/==2/Ş5:ˑnF<(70?X\j1y Oۺ<۲C(DfhZke,Q>=Qw])N&%hHh"tyC_?OhN?-q@^;#0l\8ӻ[i<)o;- gNឿUw{r~Yc4`*rQ!n]aoA]s^3%z M] 6mRG_:WrAl GC__{+11"h0'RzO kàSiB\,\$* Kaяۃ'1eVπ gS2:8e$|~6b~V/O$WXKOz*nm|0]w|  С4Icދ '1VӵXa-p-^,F8\}+ |ez]a|g VJY[7T# >򱴠tC97ǡe:,>fA@8o>W֖|4ՀOqDv|'Ñ6A]Za tسr;FPSnZڢHmqeR)M +Zfz}^:NȈi%f Pe+V9>0saA%V84?Ɗop;B _|ǣ Tx6 ۤoUFzTYPy'y}~7IoVsEA:rݧVJníڰ //WW$׈;z^U)XG"(IzO)MPkbr^_.FXв Lj~_EÊc/'mDG\NF<Ȓ`  Ѭk:ѻ΋/۝WOY\DW"e- 3&ດBiYѵOg[0ؔig⋼sA"+*5nhH^*ў@=V/U| /k.f.J_\wU^ ElEvS?*/u6 s{I\􉹻Bą ]#ev"@]n ܑrbS^.Q4z)%x<-0bj מ^ kQőրnL( v4!QJESRY10ٰFQ D1o{ZO\Жޅd[f-FxUބg2OvЍ'V[!ami]6$N-[햔m#8+iԈ6HYPG 5vG^>PR ['5E%qk 3F!99K{p,Zݥ[d+ga"Y_H^g_(EJS2LGf)2XDYp㥄hRIU$ic'}W[={U*CՃ,QtUY\z1+Q ԿCѪ"MZ:0둗:i:ky!W(eR:2Չ +}虢H@⇠ay*}K vbr2]{W.;Ż%X2ÍɮYqJ;Ǘ=y@qp,u.h9cE/GDlutnή1H",]yE1 3,f=E"լ\d&bkOI0(Υ+b,`CoAr8#Z}G<Ȱ?ǹH@(0vEu&\ȎAlľH <(I U-mc+Vpʏag}WAĐBBSUϐFnؒ*XOD_ x1P`-@L'YLc-hL}jO17fCvUEJ u@Y{*)mKltW jD1N&T==vfZMO۾V[cH r9-ZH>:D$,[/§KGrcOߙkFU7VAޙ>$<瓟>_VH h4 V/R郌ԉ'_* ]X>V2w@aQXk?Ӣ >B3Nivoƈ0&FS~J2ף9Rg~$?W@)pveinM>p5'#U%D;Ҭ|J}i˪@`c gY(U]`(ե<(#@223,Nw:l-;UL{KyI9_4r}K,7.aN 4$bScB-{(w!=v9i$BkU,DkTmY}:wg_8>5d HxDzn↤bg(\A"9mS ȞV5>lp.T$2 /RU"m gd,(\oy i)?~ ̨.˺x4SMݵxʬ'f$z?VNj60e3=toFsQ pl]@QpפW&6;QCpҾI,gwKsDGst8q/,x+VV\)Zn!uXE,Q(ƎDGDYUZ*2x kZr4sR~~ ֱ߄&[Bu|S,'|W! [?믯;*0@q.vewJkD5xcˍJ76 R1e`{mDSEDv[~bBJl1f-].heAs!_jC&DǺ|!Wz!9\&@=~)7Fa6scLp!6^7ܚ`XEC3)(l/]wؖCN@TO/@x+c}7zE&mOݧ>&JY} (`)_CVСA<2fF|$ aMgtIi3rA뜣~}4PFԖ랔|\'F@>|?(rֿQg \Mw' D^ck ҡΚ_htY̽*ף "[HJ6hZ+pg+qFS'ðzLSdTFFj8/p -Tܧ|FUYI3 'BIN?J0NcSP|}%`qDک'$i*fܙ*+\V܄z3)AFWJıy]DQ.# 0Ӆz0ڬ? RCuztq!d jȲ yԔzvqX_1fp=gxC$g=_$c8c Qb]>CHD^QbckV0,)wp]N(UT^Ks$u)Y*4'}5훷I4]F}HKn +b{F4L)㧩\FS$S$K/Qgk$t2EDl8wr5grT|{ oeVi#Nٸ&? e &)oIaRT5Z .KO%PL>=D|XH+]3wy8(Ƞfdg_R}˘̾7=FrDR}ʘ8QyZ Ytƀ70=qKU?EaEʣ wnrkXMe"'} dC/n,^#a,@OE*T-bFs~Esh+] Hm4g]Nȳ!a3sd( NRHt~2nA`ҵINlP#he&KYF(&JDI Uۉ˶ԇ7[M ;.~ſUyF"l',XJ - 1dUqO8(ux񶢛Pv$[Jz1HQsoU{߭ip|<%(_T\K~prLS*ǂ hUH mV|D]O5Q}TM4ӎŃr6-A3_A F`+Ưvctf sҴ t7]"xX Q 2X{ _>k59I'A.H&JW@?jpTOOp$:*A<+]5q{)#9<3v~-xeqdOa T_"f8 Э!QBfK<@ߓe_N+ڥ< %6-䉊_4Bh*AwY.<^n'=EhA E57@VLUR|Bu7[ip5q180yKJwlyW!3R` ,7Tb,e vQ."&4lYp9Ņ 1' >M.HR$'` ]"'nprAX`(aU0t>;Z/䬫9؂3H !QwHmt. z9 E˱j`PLF-]pMٲuaʜrݡO^%EF[r>+KA'1V3Ybz*`M0&H~f) R_G)=GQHu8-؀^B=SFGN Y78هKtsT'($gCq)#D_g,IdYe-k4əܳ'v̞.2pPr  ̽R$wj33v@@?#mM$gitج~o+ӦJ0:o%:KTb $Un-d7#gP $'S·tp;dMqI hB%g[D['d9ث ܨM5cF^[TwF 7`u5Tb~m7}F쬑4+ַ8[khI0lj j_Qr5kB9N^4Z>S:d1-," >@7i{fwO{Gn@ִuP[^<ª){?fbk &]?. 0N\1gy-d6NYE(JS\U8l?_:^þXh~"I<@gU3l\jpfmoo4镞U+'ubU坢&z"mf)$*3ǎsZrႚwsN,~B>rY߿N]M|{ 6˯\Ԕ?14uWY !BVV.h% 辷I-|x+XbWEJE\xsSnn?Ǥwͻ+71$QG;€@#( m;/_7u=vQmN{,@T\LNN['9; b%y|=; 3CȹT5'LldZ}BFȒ^whv9rk1H1fdD-U􁓻G7&^sI iSKNъD*2( Reһ&'wɣfIodIe;.mbs̚@-[T|%? A(PɎ pƈ-%ׯߴBE{"i$F n,RV]-m^h#S\*ɪbY@X2zU"hTh2M ϔȯDZ'RG4`H52=&*\e@d+NԣQ&!=ubeb[~f^#g|7ق+)@m(@dҕőrQil" T j~̩{UKH[}V/"@[5BqnGZ0G-zfZ=ta6`"F ϲWNp7kcFRP}( z9СlZA'~G)3&Ȯ qf)jPlլDzA=<'p{`MP}֡K[:[(0?v+͖5ń{cK}N7szkX`۽6h`-CtfԚꯆ뀘 ucaQQ.S. 'ܶU,+uhIU &} Bd@~[{墂<|H&pɱ2L"Pnvea_oT.sW?\5J#0lg`@<)9 q+-JݪD #15}wX'n5[AUvZSیrg۳W]w?@B]RީP#߶xWPjm hF_Oޛ|Os(a1 0 eE$0|ޡ5|45aFzWO[,Q$*ԉZF|"Lob/IS%᧤'o10`.O1C+."2+JX B:t#/*ߑ%`:1)ǁiz&uUیW7 bTېzŨYlbV^vo<zS" S >;Ո:w9aT?OgN~mR~)( k&T[u&eu;_Td)+؀ތUs@FJw{Hu` ҞѕjQ@;7ب͇<8%o= YXUnz$it&Mg$o6 Ƭn'3 E~xd1zŌ#B:_$Jݕ7TAʵ6fm RfYh,R@{W Æ8Y>z A`LKBÛt ] bQod3Jpmnw}âEhc):gob1L~` ɘ_}M)uY8t6e> ԧe,6Vz\ӧ.>:Ww(CA(սb5> eKa${VX9H9kezBdb'Pܰ%\3YxT Ge@?RPxXaϲcRϠ0>7dk!>Q"B\G3VfI?ws `L6jO/G6J4 Ku1۪.맭Sn @5yB1 E*DEKq*fYYUπe0hzQ/qԭR'MWߠ+7չs]#`ݙ )uV$0jƩrl2EЉ_"(X]?qD 8w<%7N2b^ &:{?bUͩ1aW)NԒ.h v0xK-y!of|s6ThJFJǢc /?;jj.kc}̲UvW}jX0/}zM NXb8Qv[.Q`6bJk 4gMkM!=/w:t[}IqP(2Ai\u\=:n9fd8tm,?݁ P12L[P/b+ q'(Iwzᰅ NX}VQ ju\Gk)KT6yz_a0XɨQ.5I ;:fuq`i»<00(.F`Yx<'IU:7bE"Fr<; 6a!Flo:*Ƴ5U';X8ch˨ l͙!lDS(tOèL~G4O7.v|'&YV{Vtai=^g."<+!FhY4꾎ޙs0 ;},Fޝ I#nģ` ik py&t D~hssR4-ս[ hU@?+|n-rEMthIu?dY mͤo~mA`{O]RosV5:n(J1rͩbD1~'-M)b6a}bb"C_Mqy<"y:XALcO 'ittIS8fv0Egc>~}0v @JuǾf[t[/yJS5"eUR=й ar]hyF(S(Y}?=Y&"y?qCva5̗?)!^ۂL^3e+E0 @!ӰJ3PA7+6уٔh{&am:Ƒehr@RLȮ%QtmELMa/+qX,Dࡐd*er?ޛ:\ F֓9FƢ+BAwfIwOt=yIwtӻaf qΔp^I%Mzl6xx|xWDk S bd ťؓ(=~`RNqN i:U|ե-<& ClOA{j9MNUehQ/ ,_yNdjjQvq: *aNb1wP~+^QpEM6NiXhXX:ڤ`wt>mӞiHOM tQVln6 gϠ&I C4FMy u9`g+ bMs\weq7O&!7 eSƮ{9Blۗ@O YJ2T-EñᢍFɄ)4vצrEq2txvkU%ٙ?Эa?0Mng'͇)ؓj0M^ y" 9 *XTXf'3IYP'TДCj`]n[Y!(]WhT,Gљ5}~^7˂@ZgݮJ ٳ۟|]4al##ǷxaȺVHLOUgO@)ߤPn "Nh-r]pB KXۿ%ZRT,xm$ 5& :pt/< ~"(`M7 v~V:!t:WAYZ/f^A k&܂x<ؘgP+vyGh){p*XbyKH\F*~}8x{}:H*ՙ\f*铛Pa7 \ԗ{}fT \Te, @N8N%:-OF& \$I"Q7̊nnm;k=n| O}"SzTvAǥg3قiIAqbm=gru!]A+:rns^zEۋ.G`<^`wF m׽jfqdtɖF/[L5+<'nK0v{e8I#ȭ1, lVXe9vĵB'>e8-8nR^;jCR8}?Jo;p!$80ssn/[gfԆ)B՟` &ZJͷv\D؜Qz#^W %snd=͑S2%M2I- $ q_pU:xܐ+Fdoo}ǎs[y279 Pb1θ'Φ@D\PbϨ!bٹbiYbb<&wA3bP~mmZ'p/zB{ ] ?o9]+iR~TZ.虔y]A!Ov!KYq+W8+6 %e̪8i^j[ݏ H'%݋"s;`IHԽiAM_l0>PZ6 K'r]@|fA7̚rP4I5T@9loѡE0WOH16 Gi&܊z[klIXd)fqGDB;s O ]jsyr&'Q\FL :2}iW.d"B"kwRF*h>_})g4]Z[;|-;2zo&u3d J" 63*ĀCšqc?~Qu] V @ٻ/g4q`Ig{!+y?/+@զvL~mmÐ~N$%/nl2C Mf8x4]2LqG+7BGmt]2Gz*w0Ls-oU|"o6\)<ӳ.=g[ܰg+]Rz.nH2 [eO`'`5^- yyx4k(WV!sUW<焺0[RcBHk*xY&JŪc]Ou5[ }z|XSJþ`JVhY#en-T%m־ /K+EIqQ[8m!@GV.mєm Ax 5뎨+fzX#2UjZgs䣻;nu5`FCĠ$Hգ0˒ϫcVE,Ψ{$fr$Bرko{!1띐X:>zPO;sئn+_EW m?l ^1ŚJCŒ1ѹ^7GF})brkhG }0EL of`w?ε*zo 4-EJV"Tֈ 9Ⱦ^P0cVܱn-[ѩC^ȉyI ^ɐa&ߏ.:۟> hβ8ʼi~-ÌhR7 >ZiV=^4}'֨NZN!Jo3np(ix!غcRJl<4ςďD75,25Ž#!G?wj+[&`02#[hp*^N⛚WNγ }z‚O5vo4G mimSKNUS>_ͳ;jϤ@9>OsD~H.2ƱEtCOc['̈3QE[c^k 08!K뛐"$:O;\VQ rM=Gg3~ s)Zwnw$Qd ɚ]7 C,o[k8II0_z~ %WY̥O0Q%I_=D󡱿qvW-)vEl0 "#&2dNbN!kVb 76+3>H{P/t0"'| n bw.LV'S#(g yph{Ns7Kʸ#`ӯ7\+L r@Zx|1L~D.ՂTd`$S~X'N.X̝*,hEȋ+Mym 44C- ͙2V'|cOE2.#,ćS>'9 u̓-b!<~yyelRARW@ xS 7NgEWbYZ۷d2Z>~n8&4x7!q4QeVjY/99!YXTgAkIScE[ YD#eXRh"u[AaB2lXnZ}c.£oTP \xԳԟFma-fHͩb\[Ub  fH&Ej ɼS1I", 6PlRH˱ŗ4G| + ;jOg[ 蛾)޽yt3Rqa('Y9r2J8\%ǦF1ry.=X xܤI T=@OGkmkЀuĐl! zg<7 *[io VGcxv& eh-iE{zY:*JSg N!LL(rTDyY5~3>W჆]kuCȌ͉ax{яAEU#GE7ų͜~G02lXXhN4Xr->ݕKz!fX.W2>'+jAfqxt1OI ^) :9M>OwkT+o;2A>}P@Tu-05|igRZ:#r/r+KgY "Ms(iCx嗰- q{ṵ3?熶ɢ 0 j4JtfB;LƦ>TH5{%T.ya{'cSunڑEM쪶xADB Yߣ9k)\yp D/F^P&i|)UxC~f&%Mvr-v+>6kV OP1gL $ 9rs_+@SOڰR;e[$N9`,9qՁkG OwvT1KGΔmhy-D xnɫX)NxeQf)(o;֌tГk@*Skgz4 Nv4]0Mct;pBnpD=ş OKEB:Ӑe3j{;aT/`w44l S$ҩ}mWzmy5aN]ǡ:*/@Z/[v>9ZBW3M!S4MbM5+B>= tH4d q--(pAFsG}BTyXѐ5i/sh0>f10[#:Gq v*u-RR-xEu+&I󏯟^)2 1t{ )Bd,5k*:yuךnmvzx4ħ-zjpNv?N{%} 8dn0;!5K?FdxA׿|e[yt24!\ԃMmvJ|F߅b}мBkrI8h | 5*g%X+t }R3o9 (xs>X"xɉ I["!ZdBT|_7" `ӭE]Fԏxa4Vq( {wk -lW2ruOV+H9 gT!E+?|B8ԓn3A}Ӂm&+;#OIz1(Okgb͑_8:MRCO1kΖb| žK\,=rd/ HPd^PC1R y (?^$2YFmj{+N&.}X yMv RsYݒɖa[B~PX3Z{S͌Yض&=ɣI&{EJaL[FI- ^cHKص)e) ܹJiaӤ  ECg z=[lk:iq/3.HIXTH&Z&l}~&Iztl^"-\ڌwUpbrxƼ{1=GnRMܭQQ ˸\2_6Qニ~ծ8K I|_+*)cG'6~C8;`^ bךOP!qwT#5X+j th D맕ந/JRRSSgV1vfv, L(Er2?1zRZ0.=>r7ڬV![Ai>{I/&h RQd XrX}`uw46AfO0W<'ׄ:v4N]v% 1jʫ x 8 Pxtv۠V]kڱQf_3|m\ ʫ:5*[\kz9$4(.">VԮWCzMol4Ǐ6f^?Gץ7a͉/N4d0)I˼l%m򫞞JI5څ'1'l*YlW|Ui)TNJG]܄\3 dRX<3rVBƸyڅ>"!MVw3̱~(lچ U{⼋Vv) u ތ;y 4pby) c.hNгrIT̲X n6Mȍ&kw0lˤnϚfG۩8i<9ǤNv7%Z{Sr'a1oMs{-frPX}|jfy#ܧ]%c:,J,0^#K*]`(t#`X .,UE|ygK4aҧ85C=<8Uv!R5({ gc*U.Z[@N<Y3vx)SpdNntt[Na7X3GVzβ;[jXJM՗.A 5& <0r|[B7L 8W3 ][ i{l(0bm[oޕ͎fcX7Yl"J5a*PH6L7#k] &v #ZxKܥD9i5մ t`hh/zUam:X*NGde]$<qU ^Wvǎ=Dj#r.9e J/7Ҟ H\] HJ4uɄA;|?>% ۣ%fZD9%i*Vxp5PtĎVo.QM^iy*ߋ^.*1zwpꑮجU f9`Hnn~!NwjX}HZGWJ5Dtڡ!]H:=Xf$e uи29yu*LF9O5fաywf'\r^{3)9?Z6Bir`X*(fZ-t‡z.Xe7O2p6Gaqo[ ( #Qpt&Tښ-5[׆.4ېkH bC+q˾;H I /̅PǍl_fz;>Johp60<ۧAX$qqka3]̴u\2~?wϋSTzg-;e\aBG&`0 @&e-@T4 B 6Xa63]AhS/$SnaISM*~E( ,YooRй&vզģoCg9!U#V^;׵qiDA/Yoz=^<%HLOYbTiaJ )dzg.`Km8T!`"W֓R9AqYtX؜MGl6}fc"9TBneގR x>f|2(/?$ԛƏ}ym"GQnaіy,"g(pDJ#ɺ.p >{~^؋M泻S=oh.3 LSLH F|{&Ĥ<7b +rO~bWBy-D]éALa69 Т}Zr !7Wv5N RRNM.SE-&V$}3;NXtplɹc˪&kZnyR\dWܒSpx;H6_hOr ko2l5WMGzNϿҡNM%=ۃ\"W҃״"CS?n`{1Ԙ0`i6]_h^R_ivP0w{ёsؓ˦~yCQ)KpR,Td^Wr Ⓕ8Wi s _Sޭ{ zv{{V1ދf]4EXd(SokxkX L/#jE;&4%q:GnT:J#~8ֱx52MH.rvcqjƠowle" ^\zW/-Oj*ME^n!(X6 U1o-@%n^]U1(Tǹݿ|fV\M(׵W=+ݑBTm%f J~rT=i-vM]nh4gMGMjc Md~Y焔l4e@W*3$8TMsO3{e(IԬuAdxUe[^Më#D3:<҈>uݨ5}邩Zc3n'%-n?eDǚt䖽-aɨ9V_/XbAThAt#jϵW;TjاH峦hh2m1y*~kX*~UCʦ!3Dў' !_?6|Rـ,ӧhZw 0bD̟ ji؝5ǽ 3f%Ҳ98~0&]vc^A{|=jEjǜɱZcಐ%g)YYF'|xNޒ08' >vw z8.Ģf'2~6*7* /oX 3`4h1ZLJgJwE\",1T8($B;|p:Z4r_ogUjlъZd&EkӠQGgD>0L^ͅUȖt*6uejjpq>\\i dShVPg]CR N^{t4 rYY *NsdvPAQo)ƧB.YjQ;)߂XOSUi: s*!zCg{2Hcj45f`Vu3)?(e 2Wp:puYN*j}lmaauyKhe4tO.9V\|,:?s/O4av!,I{ժY^S*ztfNCBs0D B)eekY?hNQH9\0I1% }5˷tb/RCv9Y*{,{X|nj$IC]#۾+]X+PqH2劭$iP]3F{w ?&5GK[kD ҵǕ˴U2'eKL>:ġ_n礐y,[2_?U'hS.I.˯z/'ѷV~O9ݚUQ(ΌC3OT]"`;SX;((_~#! rEZj1`sxbgcl5x9NRb)#_ -MIoD~SdL(HV䣻p"nhc;A~`xAqAiOuժK/P4mUv~FF 휍u٦%W}6|7hÖsfdViW}ՌBq0eFj C6QV Φo0=#d 5 aK58c!CKIsd݀;"m^y[_,ɈBxT*C ĈQ/u)]费Ps|Y0qZ3Ax0)q6fK2%8MZߌK#ɿe6gQ@ OΑ JhJޒT̝*dS}6IrxhQ\V7"y(JސUw}M[ q/ih(8 .G!1.p&; K ~>2@ð?Mbn Z5-B Jkuk6KIxL2ryl%[zˇkY8Y S Umg`~w;#EY= x+W8B 7A(Bߠ5 ڂb?^\I,2Xy+kueIAח-#/wJrOqAW)9Հt,ݢ&NĮ7)! }_IU'kgh+"̭VplaEu^iwoLUMX_\wd3/^f=9S@'XRfX?4RW 譔-J@%Ό W|򤶦HJ-.w1[QʐlKq|&Pu3o $aP%QRR>*M`rUʁV8w;˷7oq߮k k܂ŐA_kp YG뒡4h+R0Q,Uc+4NSD%:" VW䝦E~3\ڢөure3CsYtaD]hԠ.6n%w5I(J]bEP>V=U_Q(̲}%=}⵫7Fڃ>v(4{}{3w |s!#9̌uEMG |C3%clZMjN GM?x@ߕ>b 2}^<U@+R6i`Wf$lX3%f8wOB1cلEwJ Ӌ1"?BSMeuC=^Z$`|FnpŝA.B`69d &3H XQk`-ZJ-.)THz^t Xvq &?58_l}Qz]aBߴ9~W~o =NU-8%F,1c<>˾D.15uK.^xp?Tٱp+IZÖEqIcmϏNMѽhٽ he\Q,yVyKXQA0D-`7*KLMx$I(4wk#ZDcefHol`wv: jR]ŸcCG]+{g)b, Bi|.hD!֜f5󼩖AxF+ܢI:e 7HdKѐHI=^:8TѶ8e/rDy(vss_%mW|r^TzۢrNn˗U%&D_ 8Ђ,R;:4};':)o۞ j8կEeE0V*t$|">K&'q&n<2>)@L4\.iLYe:)3Y8*ƜO:p{V!QP_ ydLԁq vL #u]m֣GZC0ٺKx]' Lpyy$uʦ*WP#}d^[?T7+\}};iuCkX]<3y &HmeדX_&bF' 5ŗ1ҹⅪ< #Z #pZS4փ CyLA:!Y i_z4Ilu{A7~trs߸1=Y,J$-sy]4]aqң OJx`*ci[X2Ir{{+ޙGl7}f%9LKݏv-:4;x:De]7,1[InQmȤ^}y9pw0S`<'(Ly%F0I qr2\79Wӑ}k)2spyHخcJ(PNW'Ӡ.d[*Pj>ɂMLR[ Y\ #iHCRjL9%>!$-+^cZ*qݯ:sxu0Ơ"fسwFBIe~Ƀ+CV?l@[ed:Egt:t<#fPkABwn]OEG?rķD4rS\UTa4b6b;d~f䲙!:N u&c3ܱ.X @勍p M^~?Tf#SE뭗`a6DCOdN߲&`ʠ=# Sr_N:`1{$<&H?im`rBf2=TR*Lw2CФ0Hjzuxs5z֔v\~"͸~X#ݞ}/c$ Gr8uCC(Ox8'Ը(?wGa¸ٛG8#c%MR9:{{H#JұFʣ%T3:dΟv5kР]_dx3v{x7 VD }`_"4mXVhҭ5:LBp]^pƮ `Y|`{&ɒ7If eYRXU[u4X[rcwhsf1SM|)3φ*+ 6Rʩ!D qTzbΞ_I! ʣY*g22lq09> ЌMc"We3=f [2BZ51Z@|n-*@] 'iJ}6E9Hdn&)n -chrB^W$bL:a2X%a eGXOwDLWu)^ mn+ JiN`1ke.w0XRl\nM]ٵY`2>t̆{ja?A!a$OA1^-U)IQ9cP6NN_n#|$׵9ѱc}.9"`5j0.#?;\JZ*U&W^6x wk $K$tH:f?0nXQ=ID=NY>\ Of+tՔX|4 KIZ{~,ru d8u~XC{օ{mEjȺI'Jє0kYHZaxhÏc+((°1|ȵ@eіo~ *nx;|FLLrlft,(msХRH0f6jM, Zw.ps@=(2LC,2[;OO]R(ɇ,-LJ/ -JPGnm~(BiN4HeRSDdWb1„:h8`hJ©[ȾM1Pג /hŊ± SOE^ kٮ3T?Oza %b\&YZ@8:W77<h!K"o4A͘\4U|T OI.P=Ww 5Kd+s£*W˝$bBG 3{ oi0OI 8[v!V PxBq$k6ۄ&U /77GFw|0I$0مUo*}⏙ hPGҴ:QL8N$AD-1ΫfJRڥW}keB8PS\Ims6lBxef$ׂʝ 5,v|4٘;j[}|wny}R IuT6H D`lr=";}(9u/߾Zu-%fd8~ٌ|4|aߗ ;Oo+t="bA|KD^ora+<%]Vou) "B^¾7 J `b-:}ܮ%' wG֪!וHqFAwh8`Xvμ RC.s荱YBY$鍉Sk)iag⾋X6#'ʆT:%|- @a)Viu'Tj}׮s9,{( Wsm j7WoQ eQ[`{Ԇ?LEnp#e78>zBd=Uy)~6umOf9fljOտZ[y|$w=pI&t \T~e7'˩Gg .kś~FZq%+Y<~ 5Eij^6PKK+*{QttKF=7/<{6*:sg4*`$̄-5!R)p ?9&P$^H0WMS(g9Ľou2$s^Pd{'~ž|^*>ܤu8"Q=5J,A@ĴyԨ4d=ehy5<^)jD=`y!ʵ)v6G~نJ&0*d^9Gg1+W)9=N.=J2\c8oLj7:,=_M$MMnPv(8 ?Yl2l @ N;EYzizׄ T3#B&MD}O 5!-k[ʅ`OG% ]&3fc\cr<(*]ԥe`Ңt,%}=PqJ"Ὴ @lO_1 v (p&[^r{leOxtSL/a%a{:s3ݙeC9)nTѳ+@Dx%b t 9w]Kh@< ;\ɥ|jtf:$u} ~zX_d?nDC4(a- >'LeW _dIfIJ5n (>m\ck-SZ ~t랬x @vW*V30NJ+e#j)VyT!p_.ujihDKۅI>DQ7FsW ](ωOq78,m5Ж5߄g7U.po %sGC_-*2pڳ-1d#םQQD9]* ORrɌ;FmIݠKxl5YN*G:ْ%.VT?uxJ 3IPH pg mWʱՏNB|* W,pF-vM\=3$Ļ/F;o6 y\i)xʣdXtr Q_oŜ^J'Mżi piTta_~G k҉]6]J=P`p4iW㤞38zf m֠ __7@df7h*0My'JkLv oz)t爂"`p2]-Ʇ0"a:eǩͳh1ev|vU6Kh㦳:ٶ⍕z%4"=BnZx?a$QTVEM6˪wERѹROŐ 2So+<|nó"^7KJ)Kx8MGޞp5|cS2&>KmzG~I0;YI6;`H!"Buf˗&<*>B`9*.o<@ox!2\ap5/ҧd?[=#O~8~<)kwAqCOBYDDs]SإήQ\Uv-~q|WT3{ɚ~MJp]{u;cu&)pY<@&r%"7ϒ)[Xof fLfޔh O#A6.Gw>S^$w\u8/$*\'처JKQϽH1K#Z:ijTɬof^yEzL BSi;ஐXYiI3G2A8\Umk5-ZoAX7 jWLu5L:Ejր)[HVӯROTF$^h]tv4.7K5'4@μOhXd7q٤]S~rhPAr&5C #"Ftϕv=&\zdL!JT$I1x$W39I¯r gX@i &w ( 0!m0B}ěA7nopf( ع|dq̿#`TZb+(,aQ'ʳ{}>s{KTB}VqB5mwGY]7Y~޴%E&U Fv.MS6bHY#(BքP ^:w4:jzMeq;ݍ/'m*{u0tI̔,ջ8C`ݨyh?+ ԃ1b#IejR!65#ܰS( - QEq-ݝmWS5ڝ|u$E )ކ[fe`Ojŝ="HI 6'fI/[Ubl zMYW!&cYXFyn(#a${43U6,@ =OL.(NW{^D~Te/ViԚ |с^v\%a%̽=7W3$ʧ9^RYnٴm%)`2®drөg9ZyTe` gl;%ҥ6Nj"R6sпZ0ش؎?QB".;9LM{r:0ǫĨrh+eD~NNmgޱu^I'McI;1:ώI¸rDw\F#.WLT&[%G׭c9Ύ}s\l]lwȻ|ѯg~Cx]L &"5dL o7pMBN,[( {eh4dJ88l?W~)r ⷆ"S[T+j:'81 b7ܾkv߷Mnx>8 jQ2J,itsJUN(% ?9Qd˔H X>z~sQiW3+Ќ,4}4jAD7yHeE.bab,fn0Qa@vo@#PÄt6{-Z 9b ~QCk{ʐnrGK`1YQ~kbd$ъvAc YE {ME+ R]VhL|1P\_{[%Ak)O]iNz}<\I6[g/ 9 d]+f]fe ًT^Iv|^T`SxK &Ѻ1('VH0g59Λ=SD .轚U[!轥\cEA,ȇ QjMK'=~̈́=bGS?YP'7oh+{ H7P#ohT:!@K_{`bc=6@27HF\2 S )2^L_H b9ͽTCԄӝ/ rJ'/hStYۿBP+f1;Z7-4*u7@}Lԕrz8VIYJSӱ GbaB= L-/TJ΂*\vN/#ʫtTD5\[:CffV"Ď\u\RPp>bisgyV ~4dJ0֪cG4+!=/}n[Q^6v=*.5 ϮX7 1dzRZ=q:VrrB|erv,g2kLHݸb+MnzӠC#x-dh0IY$Bs-g] K.59CO΋-;L-L(7Rp9؎H5`01R5 Ve '7{aLqdvI/cz Őj$ fe&&7aW!s֩D5%.O eu!{_,k"i͑?ǷSQ2 Z'3$62D#/Q3ן)Y[X>cr{Siv8N`,ѶdqKm94Q |p yxnJkz!D#if2=2g?hXŅJ}Bt"f/g6t==ϣQ[b$>|ʼnOz*RsCc`EQ&f).#367@|;*v吷#-V }! 9aC1]fy_japt0_F,BҒwQ`)lK@,<j Ro=jdΞiг{Gn\YM} E+ıڋ:T#mF;Z >X[2P l4w*X/ȝ> 7/4+B6ve #5 Jg pFe(jhyIOpe仕wcm,zuk`ឣv#-4i zۈNsFFؠ-2C{߸^I!9Zu|W잨&lbpܽeHa] Kv.uNEOw# sӍSΝ$?gZ~76\"q8FgR#cZ݅˕"kH0@J]`9R6bGj:.`ОϘH}jmZv|8G{H;6wj4ֽ{L 'ļ/Q$䬗MDY#ZKK qzF[8;u#敎&I0ER(iGFArDfGf=E}#ϊu-ZEJv?2qd9Σ( -^>4[ce/嶖^a l{?MK{H83p*` ^"Gpa`sbo3dQ^O$[QoӢ+>Q,_0lIZ F, i_6vDlm 7@ȢmuԾ9bj-a,31_:2Aؤn@B-kE#>w]PzXIe j$󅅴#l5+ӽ'4.=`>\ԐQ2:vURj qTe#a<[Bb@H3|γЌR3ldmH~rP}bb%M zê/@Z 6>N)6m (x'*LL]ݘqD"`p̤_om5ۛ &;o͓?= p5iA1WpWj7͌=d+w:y5n\#qHeb)eH{_fCbe<"Vr-[zU]>tV)h]e)Q oc 3A1>E)h@"V'jr]-̨#7ȃD3*V4!LE2AӔPWŗPjImjX^߀9g]5g~ֽC7(VKm! msZ~R()7ߪ+ +1$a"+fhgE奩Ҋ1E8 bV4!;(M^BMl}VrHkoe~vHql~8q 6F@Vڠ:@v=P=K)a t\Pe1t:!cV {8?Kc#GTN}⸻2!;-—H Цяը|*߳Z2]Z5…zNiV0ЈhCm~饶,ܺ//G"c8!|(J준_~AISPRuؑ )iT!hwd*S( _@?<4]!U=mj>&]v!o6VJ>~}8<) @D~ʓ_KbS(@Y@;7 羙nЫu+,;ʃIޏ!֞LutMz[ͧa+LsJ+⭈\w{ bA~W3.P*VK{yXJثe =r 䙣Q~P0OkOH@Y9T4ccQ׷h91U/DDLo0$T[?wU>[?p1&IN ;c;u.&JՈx_vIH@\ZQ/`wT -kgΙ4)_}z)Kˆ4 m2r!uvx=}5u .码++b6NVlSy2.q D?;&&潕BK>8m!Kih.B2 *M͡Hqlqb(Iȫ*韸!ŕ.5gL1o\:8_G`XhIޗ+Q8BƐ8G2*K&k[Uz5 ?y?Y8%d5:Iu)٧4RFnҮq`&˖<$4u7b JӁ$x-x,p;/zQCVbTv|,Tc3V׬vlIF& c}fH 4PϳiugJ*|`KEτX|Ȇq:"8c^H:U] 8GF_ Dw3!7>s B l;(I8;ߜ{aYq؃SݾPa;.; kd[ ,f),AKPG߇ZqaNvQYjzݛ Drc<5sixÔD *߲R 1R$eZ:m<{HM5 ; b0n1@.3VN8q{ qb_[5WmI|G9 ^`߰ET%e%fV&|K>}q񈤷 g7v04lwJ~c vRiJ@ANwz(wt,݇#k/ݲ8/N@rDt0>,ؾwD&=!W:@E7Rj *|mvHȺJQx)o|Eژ,-CI^3@{gނG$eȂ|0'VI|)9ha8@% #pl.eч P# xG,tYLI!*聧%\,M5ꥭس]/ ߱2AcTƠ2F|{`Yڧx#gr)-1 8@rl؋HkSo^E;OqzJ6F~L7`\zR16MF 3NZ565I4e~ϑ'IصU}"&:47G~w=PN)ZM`3%gTfH @hb-q7]*`)mwo ƌ1@42)[&Vsz3 d /}/~|2̡15lqTGuꃣFOpǡ?kPd[vUXgXG’z tnU~`v_şevGʌ$:*h%zOP{cZJDfWJ>jh璃&YAnGnuʒ[.T3X3Ch V fB>wx= =_b )"|4dP/'{qvD['(ak߭8jC3 /M#m3Q:Py-HRN 6OPhTH1F^u8gxSo[fbжctc)J&y;xJվyȕHslB\2c,A kRRMrwc0&` ] ֏ٶ<SAU*0SAVC&O}Qs H'A[UMMK>/pDw%f> qt0Wtk ˍr dռrƂ6ABnvOJ~Nr薫AZh4X0-lre^YDe-Kf~2EZ [ LiLT;qf|\[BYE01_wgۭg] TcLp=XJߏ KfϚUR;lRV9{Љ?dBڇ&YlaiRC^Õ,z:oig}?OIm8(LơA}R77;9"r"ӖY!EJh:ps0XCh#}O#b8}bu.F<$d*,&ؗ?V-><  -;,I܏T]7ܿ)6|LH=]*Rq-?gq&e^?B+  |/:d^oQ]SK@=$MD d-Z~)=9̢%ehPNG0ҐRoqڝyѱGnE܆xt70I^yz0# HB4V C雷dǟFu#E2yY7G(AܓPǘyd>Z3NfB8d9E\Z4Tq/W@t23D󕡿w}IPSm2uYӀmRqžMՄ-urK=R81!2ͮ(2fHo0Jb];Xj/sN# 1Dy58OYv' J%jCueÜSl5N;(H-3yfW2⭙^b9u}f{X^uAaP%H]}-Bg!~7=d3!5 $ hkS8.rOhIHdXFĘSSqU< *Olk,Jw $$Q2x/LHa?:6p.׬,fCiISG32UԻEBmM9 }UZ)S hn'+)jF);K%ؾZKjÚ87EZng+ӌ-f]730)lw -BuC@ҔqBF.T|E}GP0AbsE> B0֫Cl?4tPpd "Ea7:J$$ USʯ)vxlY.m?sr71~D'}6%U%ޤm"i0!T4R1ľΒΟ#+꘣ViKZ0)0J]TrR6ԣ O,@@@ܕ;'o97Ix^9s#7D ,e_/Ƥ^**T*uRXG⍱9M!]  ό02vm'͈rҚM\Y2lJJvrݷU~WvTao6q%8k5jL×B1neӊB@q_/Z Lqr'NbV"V~PVUX[ L/2Y4m"B2)…O@-qHGTG*^h4ZC" ;gz;0G q|筑ؖOꊽ?s<'e,3ֶqMv}X׊|naƆT|˕V Pn #3; M-W|wI$\Q@|#0m2iOx.uEt Sz*FȬgr>m-馰ׅƛ) ~]3PVd=ܵctR'?xN#jt!qrRf*1^IPt)(HY_{rTIlܸO#7l mXr*hQccn8u#*SZл 'BU(;!1)/K9O{i33m l^V'r97&$Yv@X-Aْg i\9.:Gu UUf, .~JΐUNY0H㐟/VۤԂlh1^u+`l;(Pqc.Шd{2=",ynUoN\F WRb舖S>^+P,qzKW,4 Y9BDٝgD}^QհDfo%Om"eL,\~ߧ+^*fhhÔ'NLFHn}\}4{g0Uo WWM!Hh%@a0 o{y+F.6/Wrs{9 7BSKD * 8(G>(4(  Jlv6#[ 3(] >ZF( Ңߗ?tÉS1-u.Eq]?4/ rqK"_1cV+#"PMdʼnh4v [qQF 6P}|-Ikf`߁փ*vh֠V'0 mBV*Ì9aHw Bz F9&^:;pȎz~h iM}wb|~*(>ֹkCj:엕'$ <T XŔ1m^pa!35m :KM l EKӛf(QB#+2X&hPdЊ :l:^!Er1@|9Լ'Cr Sets}p 3s Su#|cI6pCJ0Y2dbLJ0Q4 ݅HeNrO*>5?~ HhP$ا, G@E-s_GdTeJ$ڙvT^vf5o $%$ stP!}92F"[c@9$^-wd~8W?,gHxY~6؆ 1!K{ VQsg9_[F9>ࣣnStdSaf2&܄j͘;WsO/r99 hښImSmnz_ޫlW'7㊙!?YDPʞC434UwZ5'@tlp絸;3xvwi`J٭%ϓz䗣,|(*Rk;Idwm OnxG>cS|> Q-Oؿ8gtp Ș6 ] 2je=(|lx}9toPT %uק th2Kى9xcIMS!YFָSQV$bn٨jի9m.Y'07 QN&n?s=&J_t|<ūBt,+k19=x۷pT WfSl(ӏ&ValəeL&t ~H@K W'd.QPwFUU1!–aMiroeD\ǖE݉km$è+f;}C?,6[m'&<{3NOS/2ybR|N<}(cFrAmRU\ Ys{F\ vUn47k;0vaс2[O\}q $)m SJSK GRu!~v2_9ο8=8ٿl$wS߶k4{0KgTD"wVtYw3b`*ܪm1L&nHQ !-2Пb=s(>H],0g(⟇B-n7akFS;ѽQ{ ZY˕MU60M /Xu|e9CDmOdN\Qʺ5! e23+ c4pBYTGכ:)Fmc6o%{odtLS_\ L&`5ٲךׁ$T@}%)#\R:;-ߏRzeO8G1˲뎆Vjm;&"oC 5 kefqhNB:ùa&vʖS{te~wo)8C]>1@ ?lmd7w\魢[67)E(xn^5_=;^G#םs9y.N,c譵kd1Zhuw>Zh58v#Lv+kP~C#!o4˖+щWѭ_e {_sPcE`柬?qp|P B||?q֡`G'_^$?BʦȾB)NɀY@a"[!RAM`o/kB̮]Wfh=|(/o: jDgS@0=~%K$mД- i`. QE"v |Y?x=&_yC OJYa%7 ^SV /`&abzzvѸšcCb<%73jos58H1Tg+~D=rw?VGسy˝9X j )lOרk9T Ya(ae*xN"HLS=fc }۳Y,f4س J|U;ΈsoMnޘ5&̔$߷h%T!@pA'y~勵[cɡJmtZA  N-V4DjⱿ.]kF&ru„FYDwњspHKk2S#1}oJSbv,Lr\nOuS۶:T)YL挋FH.~u6q7MzW >X{y?]V6!; ^e"%q%4-xO{rbk9.DX-X銳J;C|zMMYvaןsokh@M>]Đ"Z=-xS#9v Q-%`_4ei1錁FfbPIW}`2$SY|O39n̽ӦpV@ym4E?ޏ20^To. 2,u܂޹,5h ݳYE .5#5L= lU.$ߌP\:%fʌ,[,-;MkEb^ /ђ [|OS]0nwZcLJ]FNV^yn }&Jz^¿$Si2cpNS=0GfZC/Sd3@/[nG& r6|a|Gw'~yHF[(! -Ӎd,i,C2Q{ i'cdaw̧z q,`O2njogT]'թm<R/Ḵ_spg"yKhk Nn2Siq{7p'HA%>F 03,eYkTIXH٣,RJ]-ꦀZYv7@jʋF.Mj 5gN d7sl)侮P~rhό<(}=^Cp;|F_nfGOOrDûElqq߈c ˯Ɋ'tfET% %FV yLUWvƷmA؈hS-tԃ@([(=ϋ''Gjfr+Ŏ=ZIqIM-nbwQpEz=lܾ,51V'C˚S3gR_X|E>p 8 Gq} r鬅KKcNs0G4DP<aD`)+XEڅ(h&$| 8-~ $3(Ʊf]LXK<"&i[[ԩ{/!wFW킽h]Ζ&)nՆfqO#| DDbM=,R>^ ~OX3m CMydHPN&$G1`D) z6/B(9)jWɄw r1oj2׌YyeVtB}qVu1aI!vV[sx̷p흎 <t|C&u*%#ڈZ75,ˡ qNyJgo&h{JK 4B4~+!UF[ ;/$̃ cU)SS S:V~i<"rƊ*:k,8k}NoL0O좦-^xvw1˓PLni݄^ːE2-D&n-Ј) SZs+s$x+U|F34]RYB!%\`$t=,~%?Xph#j>nF4k֍v^JLl&u; &GwQ"{YFnpU2{+TZAvov15%/"3I$.E3C %֚c]*:aTSf"/@Y^i;%Vvt.{Fiuئxǡq*r-tװ=c"d3e:f!"3"Z&YK1fg8Žl x{H\B򒷮̬# FZ-\+?ugm[$W h{.g--"\ױܒGÂbR(?gdc[{Qo҂x9qfe5ҀהX}a6[Ye3`DU~cBxTb!__Yr;lMKN~U >i0}̼;D&0ERuN2 w[};9!"' }!F6駉d9#6BKEy S>)q1Cu8>&uJĘ4K! JvtƓP'+V~J7L_{uE||eyRw+w$uuZZZԏvTfZnz2fzf=r1o.'_-1է5?0%Ҕ!}Bk푕u2l3T,"96vIOlDc3J>\ҁ0s2*[EMf/@P3>n( Ƴ-yjP4o@^+?\dx;[dU*mG\7<[LhrB+jx8FAy϶gޗJ_yG8>u1QG}q%EW MPVfoJ usgton"W tnVBgj~$ip%¿[dRo[T!1ڎVXr !m=jǶ./LDTsLɸW@{)3"A ݻ̨Jثn ?|l׻Obtƅg`:*=y獪xY, 89ӭ_tąd=^Zj-Hh$I!(8aRo.meMY|B\Q^ތ.pLrWE*d0~]6'9 5:'Ci\K< ټ^5 'GŒj`'[e;,'vokKcIjXf4 2[$AvAX'@ֶ`!X> l=CtQģTI搀SJ8ZE` f55Tfh@!4T}c)Mp#WXƇ8"\Y kx}y$rvzE%Ƨl0w䠵(H { Kagj9 wBU'h!lBQSZeYZ.[:Bd\IFBZ/EMcЦ\fPSE `J4Y1$6?n+m`͇Q ʡQ7úceA2R*LJ1EeP9'/ e_'q'ɝ`n9pCb3Jcy ~t %i ,aEM[fkxG{-z;[sAE۵%G~$0(2m(5):97gfj l[@nTGJ`hɗkvwlbFJ&/`@?KX0>]D%[ nwq^[革>R\e yBr2oז'*"F+dnL5?*bnkD<y+I؀ȝ . إxaeşCWq(XiM=l߆HZ &'5T%ObAet+`7y®^l̢*k%^.$~XSVH@D&q] fnn%vctʸVC-bFa̅IHׄB@}+Vv?fTlb /pkG,x$6gu93cگcfChB4]^1_x˃$1JnWQfF/\ id%LsT/S`kԯz%ͩOৈAa~GJr2OC*פV~G5;wE "mJv2cc?19y1pS5X[\5hZ#_WRIV't2뎐~3 yϚ>Kf̈́Y.·]tΊU|#'R:d c:YDV(Dos<[hoXXcElى|F@=V']|ጫKaf6WɇkV95ɲ7eu{,b_r*цc<4DonCun5grd$"dq u7w<ԋ8*%e78p0G޽q z44NDEd`]]ÓP]#3%3 `E4a= :~P{q i vB `t FJ|UsBm<Ȑ# ‘4;;a{ pel_WhBn[ɇr+rr8X~^g #ڂqt>sc,ASEN:ƀкcG.J@F8̐k-y_܉~$ZƯ_%[Q5VeY_:ݧo]%VSԶ+C$tlGb f舏{|Lׄ b$O &9ƴhq؂(A咺hmʞ7#XqX@֡}6 &|S2U{zVBboD_)mפ·<,2DiW88|N^bU ۨBpܲ Pdm*Ĵ3Ih)(kx^su70-i8'Dob* $jNe)^K;7v„^C03J:O8ehѷ䃝liHa ;2syI.=DTB:z) Qf|yB ʼ8ñzw[X踎]:hq)S;-6VQqGtƚ$PZvʼo/K!l.VC> Ɗ]u *꼷Тmb$(dΏ#" i8wc6+$D sh.S͏.n=͚3{2_GKMa؀iCX`'rUz )߬ TÔ9=Gòݒxћ3aqɌZH.|2`B0V[UDpqk^[wݓHd-|_w˶7ΘO>jحa mY5 IŌgcww"FEVaGEȹdH?cX:rґSJAԹ\:0D?J\app*gߔ|Cj*Ws1eM*s~ÁTQE`niUlx٤$HC 3`L!ڀ}c,/ݢT&F[:=^%!>7)Sw 5j Ս2{t!ٵ)sB#sC)jv+#4?1eE04ddTP&@p@SL×MW5Z[O iRءc2.;,tX%Pn:-ַW F,#Y#x ඡv/3=;hF4㥺<􇲿Z .'"ԲD >q12PօyEjekLKel4ɧI3Ӌ0)(2eF)UpO8ްx<e<I=xu1^oMN݂:ku†ܖKLZVE-[ R"i+2#DʦS֣yp^XwkPi 8| ḩURjcOǽXxk&@aS>JNсTZ>.ljZ$%[}mk~ A^u6($ Ieҹ/_?W(Y$lg)x~TKvL~;mϑQ_.I[~RR-ͧ2Zk}tXGp8w0W$Jh3"F/ܮmK Q7<8&=q(kwh; jttE XԺPf'?qqt/N]u(U !FwoIДR09/B92T1`e23WR}%RDq]V/P o{7mϵNgpIUET GHO'|x^ɓ' zC#l]8О.YnDwiىIb%r_Istbt+im\'GVe*˒@wnnpJ?]7TPLv Cd'>o{y=#䖯%H`[Wdgrơ&{jf!ȇ ey>8a)c3gg)TJ)p͝>YȬ yjhtq%Ia&A"nƒ4h/VoNq77Ԧjݐ$P}/f#SwCp6aS(Htv PLR> N^Y1%',İ*?G)z<Esd5~k~x|RPELhv}twc ' jE\ - Խq@|( rr6P x$jdbG=.E+83"BBt֧\ďn_s9xLK J%34F*Ձ=`JH9^HaZɄ\*e//H"*<ӯ=nF@h9h8gHU{ijHm Kں ˶Lo<~ e[sPy+^^,FN;nbewS20 K ˦2/dLZ鈵#I:rĐߒi|Խ:@ɘ('Y*2aX8 3]wB5GH8bb栟 Rnʼnмc?ykc-n3''(}E.KL Z̕DUa5Ts 9:vR¾HԗV_<-uSͱȅ |Iڞ6#DQ3 C.ª(ks],1G3:~Qiǹ3ê s%_\{\hר5$3F+|>?4D Q(`d4[9kz~Q!yVıBT*0ĤmFDǶW-a?/3bkų1hTn[m[೚^JCLNVOX"aCIX& :./'p[7U7W_nz6t~Ģ,ɲ| (OX{x۪޴{gi:@( D&k3K^qL}ظR#[ BWPD~~/x%hg'N^̽\S8~L*iÓĻ)k'>rq'+DzB*k(Q0aZ 41hcZ\űpzO|HWd\B¤챠jNL9̳S"ѷSsxH+S7{JςoF=f׼Pd_s^i S~)j4Y|D.;d/1*ygʸv0ã7ܾ_kr'wykM hU;yZ}Rs{jpݻ1RBB@mob d[6 C[*&:a0%6f !Hfm ׸1pn#vIN;H sX͞Nj 67sϠyOZdTJS]kLBz wO''KjVPzK _A֊CH 6* hG&#>rj+a\S|~C4|#|!b[r]l9eOQA"Щ$÷?S|c>K (?B>]Y8DfWK ڼ Mac}F`|7AݴlM:Pð!H0j (*'Q*fJt߷1Xmgx>i q2&ƝCuZUA,|43,>u'flY H%(1F^.*ƈ1V%[lH~ ݉_FUmFy8pdX1xInpU3SǑL o S)qg<"\#!91k?u'JlfA [#˻ ?; D$rTz4jf禛wΎz.jl F}td6=Q1κƕ)b v~| Ǜ`(%C;pS{{9AYw:n: EqիF2$Bvq4]DpSp=hBwN(6ٛ,DKPYjXfmBM1!y¯2N+9;ac-ό.$2/juCn"\dug)y#G~e?ˈV]}'( gωoصЖέ\]&C@½m03c(2ˡy\v!Z!01X\&&ytXS0z|[aQ"͗mӈ_wDzNQf[m?Jg܏Gp ^@Ϟg'X+i c16?Ydԩɦΰʥ e:֨^t`];4?)n<0ѵq/DV#\Svx$L[JSbc` Vf»f@V??e4hʒۇت>G*reh7:(ȈR43)Tͅ#I(&!P cg/"z$3@VZA|+`k ,i`ea͛W=QلD폏ZJ%3Vo:c+Ev0QS\+%Eh 25[fuUj[ڠt}oIܛy `zS-KG5tIނwe^P p)2(Lv\fY%"XߤA8ƚDyyZ3ӖU`Y$򎋸p>zx+N_QnE[Qv=䇎m<٩9!SWt$Rz\=uT:G ߂~1cP_Jx46 y~lnT냶4#ZgR͍O3 #\Xz!QMy|ql@Dj a|d]JK74xD- _"[0h!:ѓ{TvdtOR5M\dg3(ΥO nb>;q[s]::_42FjgpP[^ ">VҌ_BٻG_5$}jtPAV+M=|l+vċ y~_:+54)Wbgr*Ug O]-gv1|g~le-0ހ祼 `~@xQ`2g>R*da GM<aYQg3P^Zv맷;א.ME)FZxnjqBwN,N% oX2PŞ(weGaԏX0ڔWn ! MV] [-opŗ}J0e#J,U'[ &XΛf3C:NO MF^Vhl`ޕW<ɕ, ?uB*o!s`/Pn&l? ϏD]#8|r$TkV>ll%-aR1(=~>[5AO~Fkė9Hݠ'<fЪr\xBH{Mc} [L'M?3&^c@Xfvz{oo:i$QQ~P?D,}sCi^晓/%Z$T|9$A\z׍]:rY?m- Xn6B[ Qл8MgX* ˝II =t%1fp8a8п27$[_ BxɂN"+]2ڌTF09pnҙw1U)􀨨 |'.ѡH'i i$Ռۘit5kcԹE]Sכcx%J=juRMmr0bɞ 17& !v53'k%uol|%դ%pDV̙F(vPD2H#ķ305M"fp]KĪI M4o̧Q fPJi2FN骺\MWoF̺pp+,!eX1[C*ViG90lג%`6W fó6J0!z**;p ύkWZ3?'KX՗VS64S^hXԾq)kt<uÑQiuQ6izlΒPvhg3}RI!@*UA3۠M /?M궇YˆR.@&q8>*KFZX=N/$,I(?Zr:}x 4[+;\hlGlXABg^-`irtR1Mㆄoqar(E%#qu"4TB޺1ruS-AzFZ}Xg 0jxE\@>GFѪy?,U=MӀ Ix| jQL08Љ0TH$Zlc/"F'hꔪ&)VlTrՑhoeočzK{1QȘ+'>*1rH쿵Tc䣗ќ'3[5Ϙ;_ K E\0CWj#GU|$23'9By0Oc7]B.u!Bb^ES\s+U;TcŠY;!;9LK}`;soc)Mjɏ zOaLR֎y\)FOޚ çmnadC휕*##~Σ r9k+M$$5Zu6&D^:]sSis0l(j:(wTi2070+Xc/q7Q`LXB62%ܰb)S/jP ډm"mK9SmO?_P_e~ZαƠZ{9- EcBmWpYV3+tu0ҧ}2 '7j5Bݓ  6Zk 3ocJ|vcf6]?#qFg5n^`y1ODɣri tc{nde]Ҍc!7o-ޒJГ^wB цv.:ߕx >.f.j VXJ0V7o|aS$ Fj.^?J!8/Yc)]S? d(gOO[7N 30v=ŅP*0Kz.9}%h&z%hBB$-D`"OX(BNȑ´HLQ"w :-3-*N S7!Zo0qK!j͚U\m^D@+0hrRqtMlagI -ùpd˘Aݾg,7܈l7g Zg*\\)0v4;aW5:f#JqsfS^7s0;_]'p-j('G-U[e{~ P\T"B!x3$(iO흩UwFxMSy?:|X vbW\dB ݡVh(DӺѸJuxpى<\rzW;n tnd6[8lZAz]%tZ\ gB94n&&h@suq>ǢwnoK3:ntj-"Ѡi\}% 31 }>+z2q. 0MZAeO7Km\Þ?wT Jrdħi4IѨԔظ;[;ҢZ *px%,vcb>B+N<], Χ8qH,!+[Yϴpi1U1%55 ᇼe&^N60DhrK;4ξ,7֕}Ex A֎o_@g_ SEf'G`>@*(!Qڐ%gg :jNBf0*q$*1A-BA4JK{` K k֓5|u]E4 IN&"6+ȃp?odٙK@M($Pxe0ޘ2}0H1(TryeTo*6! %e 'J)@lukn|#Z[E8JVr%xiJvf^xk?~^mYOM[I7"}eOruRftɼty~o -mȹ|?GX'$teh6 lCwkWfHdruifktdÇ`ԂӦXz"LL7dj-ʚ<(#]Nfy×cG;? E(!G'ȏ,̕cg)0#*pH' Xp7  nT8ġ!480*ڀc"u^آ`S,A'Wo5q. "fN+^創ymyRxKAl;¬7I(:$>J73E8^mbUO5032o(7  GAJՙO/(ES1 'm:Od*RJ?b|yf›M^cvL)ҾD( L".IR]9ncd^wri=cG%jD53en_%a޼7qdHP]̰a K'Kim+`r͝ &$v:֟t.g+˭;G#k y*,8mF:\6{D`/xW}3KLNSPBu>&6Xo2ZAM2xfHfyZT 5'X^}ք~]&*f]FC>c_9ЈOjؒ-ep 0tE Et)U W=zn!5KI<'*b8d8%CbuiIjvK[Ϫ$2&olJ_g]yZzɜU'h@u:" hqJFYY|~X1k\>QDl[=X\2ھ;^=$eȤg2tjG5wYZkcֿ2%zǭxAmEhB2ȴdk'.p@{&h~k[ԇ|3}8.q®s[}w2-uC-Qc[<|i%7SPRolDO lCBa~l}ʢq=$xM֗)\ ?í-gXJؔ2$i꜑q7b)aNKgéN*C;MA)Rr= #WIkV@Ҿ(Y#z2OUM{SEA@߁8ߍ1q:%k/vs `Xq _s < pk;k6KUiwCj)=f!k1 # \5 SaK!WJJ/x 7*/YmPyP~܃ ] zY0`Lhy*"LjaܻNm 0ƣLl W1i[PBNJHWuʇ ohcZR'/.ThlGV/k HT챵jNCU JUuglX @mw+x{mC3GԉU]8v{M9geR1*ӗ GCT`F-'u(I8 JNnY.*Mt2ǣ+}ݤ +xaݿq]*AV%KdՂ{_m)]Yů @[ix`S@ٺʌo183p'f) xԝʑQLѪ0DÒyԔq@uS-MEEY9L2հ.+2;.αն/g(x1ң۴嫱l=wno'4ȚigPq%NSvsb{3Pˋ;;evy%+Ų)o'=Hr5U]iRwp?"$;V 1sBL ;M'mHhs 푉U;s-tAE6.1j$vxrLACGp>m o٥h4>0@VUG!J4|tX#+A6ivɢQF8NVmŀ5AV8pG,!g,Kq+kE' 8 KU]Aʰ=,c*{ v;G#37(ǫPS SGKΧ ]g!~ӑڒ« F$ ,Nhi6z6Y ŪHsa]b h-R#fw˶6 Q"xU-hI(Z3gMt?) oZ˴շ,2UåKrC=kIe X.m:D^zr LȶЀ]tIz1 bLn2J$jGrs˯T"zvcE#|ARpXBQ@4:Lz=Sc4 NJ'ԢI:ز go_%@! 2[uteXVl1:ψ9gZhRGI1 DBhXgxnЄLUrgjñ$W5AYbx|T٣Ҭ ϗ .,K ~3.B:ky J?:Dtphp^-vq&iWBVE-WPj6*%NSqLٸM@`\5NӖ,KX:ӯ[g6C%enln<u nU| gVMUcu'__TIs7!YCLFJ/ O^3'w8 dֵES;}6v(@F[ׄZsODJnb}) .{ [`.]<>ȈܬP+LZ1Nd";U˴D0L9V:̘[L_E܅yL>@"wQxߗ.z]bS ߂-< Y$2 MKȔoZf8Cљ-\_D VKn0El>dO; "}Q1~aEAcZAig#I,+^T\%v$E H-dzvkq: 5jB.hӮ\%eaݱ|<Ɛɝ_`GֈL{DPODRIR)cmSn6sDJJ-cR 'V=͘s#: GftC޹`{q>}V=ʣlh g6yzܵCtL[c/*,+ 95 7]|P>hDܻR–gLGUPZB0HV2K͑S)h=ZS 14I/ { eY qL[>sl44B8'7/%?8Ibf4k1FGOmeUג0{ `^fM^|v#T\Q%nRZ;c88,m|Efp/gӝJ¿.a &JSj@P> R;4=83GR_q˔19g icN߂E+-N<-lYbG`Eu KVB,t<.'ܦB }hc/^CPӷFTCsG5 gh=ӉHUM7#b u[:z@?pkE,o(xsT!> c'Zn3Xֻۡ0\!!0&HʰzMb N)L1@}(ں8<֑ ጐEJX.%+XEǽƓteK5WQ cLlEmnے&XP#ُLu1a{ʖm6q{L/t| šKߣ(<0̺2=–|ʂ{{s`|KC*1?]> W.RX~5a=f3;zIS PQe+4P UmzMol(#[;;ÓD6:.{f\czY2R9=6%Xʩv*qDŽs0-k*Y4TнU1l$ !yV'PBĩa}m* ?[-w=1~@r0#/@q^ $]#,1e"t+(*]YF[Sɧi̊ͯQEsn͌a0= hzX3&Cd:w ?qXᡗB:DaL]TrZeVO/sIec#oۻ$^Ili\{-"ѪGح֒kMW$sPs3G6m}UeSͣQ8t8ϧEoYV;caÁ  +/^2j2#S'_VPK`U*(@ɹB9|s9M5DDQ[@'KaSږP.wgtJ.*yy3vAZyu\%p$rcQ8v,UYL<ӥStzJIrٴ;JsHq&2l+#{̪yMmlGJyj EkJQ+y&B5 0ƑEb ^5ff"#>M՜ܴ\=(Y}U|:wf &J&M0INzsRCc4FaF5T/Y xv3Ԫ,:HJxv]-liq!tూfZg{]>7v%PFhlO MTio5?EFGis-0:vWPsSC$ɢ)DžV WTmB«)i>-,)Aٙ]=':K5`bG 0 Q(0SOc Й[oڼޓ8_PQո6h XOsx]5f;ag nxq83/ foꫡ̊6U"T@gE!p8d`#߃[N7$cyV@áyHOCwAvㄦ;KXΪj]ę+ D"SΆ )8{$9hwSN?F[C"Kk4yi;q_MHUc0G-x3 yJ1#iNl|Cu9|Kmu3ڶ`}ZbY/_-fOǥaI|6LU|ab݄7 )O-aVy/}6 Aˑ!L/M\F[3DVi!1 l)ploq꙲eTCV̋,BL0?X(ʀ䵛2I]5B>ʕN2/a?ĺ(VWjTA3ˢ =DR#1Z6TaZ2a,SJұ.!> c\PQb_=N"هz|8 A#7_8ovHO>B:VT5ȳ 'g?RY"ȋU8]R3[$_1ojwrՊNr/ԛ*LPCQP98تk)n,I9'B15њo(B2YwcTwN+3)OM>LS!|rat+_īqB6ؑe{5P\M6:3HXTт~`7 Bp Gp,[G){֗F=M,G6xX,U5?-D͗Ntd-c頧;1}܉ƫTaN+~}חn }[n_R𓵈; ŊEjˎ1;{vT/hXeS*ۀ5yբ# IA6 2|}&âpR*s!sfP4kxԗ0~ܬ]'=F(A\x Or.N 1yY\OtV7H25#S挤d[q|P*sh/>J OXwZŽdM`7I< v.H?pEXfS{A\ueNRЫ: 7fa:v7KX 됬\( U7™ce'МfIS4P>I#~%1 MJ(`m?8ndy[4KQCRi[R]B}#X-/ޕ`eR\?P*t*ͮ]*XJsF*`Z.gxk?t@)/6]DJFV9sꯪ帉: &4L˅\FRw=ܡ517C.E/ xFI`H >|'oI:v6oOE.}/m]83C!i } 8hPQtP'&gA4WE6H}XOJ*Be i[0*.eR?ug%RtA*y,ˮ[_r#7BNylG:d*^cvT-5 <-Qk sPj7Ӹ4ҔnQ׫I~rdf 틇0JXSi'*⋬ċ뮷d $,ƏyhFPxj-`XH^#n4cp=>[ѓEtGۀ0ػ3$ώ4FE~֥_U$w -_E?ғNt}SĪZdέH'W'TE2. 4KCw1$$=bu죯tu]L[@ k[5'g4 ۤLA(ΩBE*0XZ|{;%݀bUٲbpv{N:RsONK<Θr_@dDk<Yd(L.>*Ͳ}.s>zb@бfL43ڍDpWsQ;IXS zcON \KUP#z[|ʝVl9>q]*0-D$ ~)_!JwCT@ g]EώZ1n"ZPx]hz+H_, vr tU\.!߻'xt,cYDǖz⻼U4OxH8ʱQ`҉Lǭr2 58 3΀qZBfR* [OnQY&wTY.Wkk <%5P!`Ϭ3K=}KVF{X&NJ<,BZvD9!/9㞌_uwݠȃN<[ k'A7B[۰<qiw*rօsȣ0Kt$ F­Jo,9&*H"+_@Qw{oզsC8:R- _`٘=sгBϊYǻܟoN%'Yq1t nšj)PdMLznHvrVWSH9;Ǻ Tlo׈ըyTAJU Qh&=BCPyvbg=x<Q\>LpzBYSX.q{-̓AD"R[ 5,vg <]fjm) >7MAX<,ڲB+#w A`[s$sWG^䔿ч8l783ebr '\GAw/p$!O+R+6-,3 ֣KSw:4뵁AN|ً/ĤZ\ ^7>OƃvpגVoi;]а(*Q=TDZm}7">Qn'Gmۯ>XJ]7+!Pf;119K:(Q҄7Mb?.:ҥ\ ;LMihެ0!1`WgbB+xv_tF.vk%]q>x甿lHȟ⻰u0{ :s S`"Q~fpGm)d:㈔A^e]LxBVǵU"+t-K^]AH-JAKdzndpngB@2_I0 -h ʙcVJ6-7jM >"xk?-Kba<Zr(dqeTnv؟V{ٚ r{u+a榈7 A/? ^& )U_ő{]$5m<{Dro+/u.OU0d$ǂEkф`*P'F4{9},>D0lf텋eX,pwվ/hc~A fLG}TPіʞ3W}vegtRrUFYp.W^l꼱m傓qH!x#j=D@+3F>.aia!)>$,;Gb\e(q9l_JYP/Ȍ ZEjo8* >%49=M擽/GEbD29Kh k-3e= +NӜ9 邫?gC\E!V UKZiwxXs\P28xsJ96bJ;jzQvc-@73Lθ}k DJeP2 no }:tyW8c6ϥ74_NeC[ZۣU6} x<vue-Erqy,0buv ?0جz!z@8<9[w/;Gai>,.6.im^՝/~hU!n|Ԙlqjw oqr6F0+N{l%f&Eo擥zͧGhuRfs:9\ADq_A^u|} ,:R"WFi,&,ki5QP? b\if!fۜ}<#+}ߞ~f|.6AYb;K;`!Vj?# ޺GxKar|4Dڜ!$,  z=0łz2Q0y*ng*[>u:a;@^ef,|F q@20kԳue>YL}]:0m@J73QmJ<*|>-"q')J~2!!X6:^Mh=[Ss+ўߢm5pCp=0Qȵg59Kyq>ؤpb?NA!hvKq JS"5[@`6mqR avnDi,Q$ú&P`\exIҺ9b^"D _|=124r̎:LdG4է|84a8]jg.}]Y'^a`8 1ΒM1 񎧜E/Yu=G^ەrZcR2 {lB[pzC Vù:4g~ƢcD]y$3ƮwșuU&21.EgL7lYxjCi7nQUSwgr1E}wFjxYq Ģl aь?*viکE)9)3J=nM?_13=FWl}ʔGv?[A\vW؍R P (9بfq{ fS#2}9ώk4~Ey"VKItzO~Ù} Fawb(;c˲hf>6}J<+nյ5"o=l~""]>dvګ6< 6+/{H5ѿ:j]0 /N]kZ{0WAV]g YK1vdա0j"Ź聴,f|#vv.Pe|/jW B\f䐟W6TBs!B%L>c¹K|e(-z,z~"< L~*}l)/-t1jv*,޳ ~$P\Ke!`P^W?' #^ '2.$b%=kKSLEЯ!}xesƐ8{b>]_7F#;^Te3NNeF%"Í#.{G@|UHҭno[)z}a&e(9zJYf)d$‹ yCnHI'G?ג'.8mZ"qܭ&M'SUIjZ0<+.xVi)j$ll@:b3ELWZT\b)jxMD,<ܬI;bqc3g89y/[=Gܜ5_{7G&2ǭ nڱܾXYiSkCx3gce$Q40:EhU8gth^i_&A4m#{~:]N$VR~.g C̀JgP~ܬ9g? D|xT;|0-ULRdu!ؔ7E{mw\7M[H\[[Dp$ꍦPHTM߿uzODYVn]$vtN򎻏EuPdQ1eBbo]JyY;{ O5g3 ^vlEݭ,4!T̕f?D~;y g/%G(Ws;nd 2huZVvbQqGgJWA9qEnSԞd=\ޮ{$:i^]Y"4ER7ao%Яl C-/Y]*aI(z l?q,B2ZD;A|ʻAcS{۟,h+"ԭLlR(pҖ+B2*#)WU_UK79^)i"#qGJ g~ЂMDχi1"˨dmuxy9M69&%&#^Gi{RQ)Nj,<VX 2J=X b;cQet\v$]x5`R z{ W= ZM@R[:TybQAX{ܾQ≩D di&*IzB}\<<[7@U*?y}膪E%-~yH] .Ttw}_B.YEI "ddfƸa+4b[T?ry GɆ. @x@toT*Ha[.A :ڄ&O$+^qݖp[^ֶ1Snf ӏG"áʩw,)nnp:l~^%s<< Oիh[ZCLRǮigɶl tFy2VsB87ƹAI#glF-*UDQhy&Fs/ Z vm ?6(\($5aM&s+eغdA!)mj* [MW*ga:`&5)jֵn/j\>x~`frr"u3v@G y&݄.@S(7yRQJ)8j(Nkj? Hb_?MhdB\#M'阒]SrNI7XPH8إ\c:_ .H Ubh`p8މƼ\Q!ē ]jʑf^4itl$fVA8_;E;'>wfDҫ! gYg䃃ADȔI0]6:]}`o\^ x`R!f(e~Ⱥ ^o;`Ÿp--2/*U|1"QQ/'.\D?(cwl{}dv(:+vL gG446Y{&YJ/*Cw 7Iu91} [ҴPʊ8b`Ddᓑ(gzi y+HK0bjPihie++e< b 9LX:,JF%-sJko:}u I*"Ƶ_-*^\N5aG- txt$Uӏ~5o+sE.so~MWlp:ҧgi޳0"bYv([Ki`-[/x›%%#jӲ[`&S5 9n-j'h@tCT}s1/pEJ.aH?ڶ7Q,8P!oڕwyO]1:\A\޾Ô}A͕a. 5?U4 D)Q{-ʳ d I1#vnhɘC&A5?y*HɖYfWOg. _ٌXj%<eNScpF L^~5KmO:ũXUv" O5o7#ij 1y&\[f8uB4ZH%:}%ա&?2$yss~8TtJڧ΋G v9 '>,mPUcd+aYVp3H?gєzjOw8k~ fl[-wUzZ2n %^(Gڭᰗ]6~=-|Shd-^G&dt#韈6; YmWW~iu:[w5+LƎl+ͼ5`{r8\JvS?7^&ƫkk^t-IK,g0,%.@_'Ln_pXSrȖ#zz1L1SDӑt9WHTbO jvaMpWihbeZ/bCI߻:G<ן:}mv]Ir2<ڀ#;% 4gu8 .yɧ |Udc䑲qkn_ CD -{*SO)%LbJgq)\=<֬ebVyبmͲ QcN- y4!0 ,뒣\변VxxlJhl܇ɪs y 2pvJ<GUBͮIg2 ;NĊQIـ)wL{9JCBPėH#tg&Cx*,E Fo`C~DLsX"C MS<5?cXk@O$qJ>lVOF%fm:4I:@j rKMbiJm"5 Q,40'4B 0):WTa(ۯW6==T&7}Cv2S#QҔT'g14cUoݯe̤ڴz eM$7}C1/[KPYm 9ysnB=CY%dʣt`#_K1Ҫo5MpuuՇ'}j) qf~4ne~Mi~w3SRM/1.3I8ȼ YR6 Ӆ= ]}r]MNzd'>*`GxǍi-m=2bq^*fD@dKm.fz| byI-'&r{jZdǚ}4/o'Vl X݉u丝NIh$%,Љ }^\b:(:DVh+yt?Oq%G2˰@abT{e -?Om{"$|[(Xba4zvʌp(%41g0^z2ABXQ*"]C=ɉƒ%!0O%řhF8@Y(C8<4dC]l>vm!Bh,$"H G?Q(d-ϵpTm JA{oaR.9kB&Ӧ&75k``)Tj 4yV" FNU:94B6ORZ#(-sm ;GMf =t6YCdRN.۬ѭ1%c p4ȩVl+y|j4};ZQ<=r|mݝ2b0;ϋg$_Ǔsi<{!]<هӱ;lQ5٢i=8g% [VpMCܰ*pY!TILKnBHL<:$Yuh9bRkf&>23|5}v^cR!iu9o?~sX2!s ;o &{:~)d0\ԈYk\{@D{ӡ}ąRa+Tꗋ m:.~OB >Ǵ\7c&,|>f_S|^g,c\}n>j%  ONʉ碂GmS5WI9/i 1YnXzF~=}rg њ~#ʒSGtg^E ~Y*)g~RɯS}66~Lis/-_C{: 1UeAg9yKcu _no wS`X^oLXqfs,k50݌ 0^D5G;7C M}\WP!XP0ٸ:^T!8Ḅ>2W3] ]U?F·'% JS+9#'3y\=PYeaU=UʐfT9;o[nccϲ%PGq XAg`3c ʥ-.m`L'AAGsZxܳh#Ꙛ{|C{?2փ.jE[{-u:0UPI^~S 8AJ.2ǃW?XUFDH|LpMQ4[#q1FWbm,vٿsKߚ14ɜ'|XqW frGiF}F_#Tf$z10fu$k|KШ0W9%'79Ɉ~M~mtK1z2h{Ɋ ,l:mʿHJuHh̞7΃AOxil%?x3D]wHɺob`) ;F:&/)P1dZ&h7& w.:_9]:,̶v[S\Fzyu„  R%&]^TrMjWL(2=oL`MHͥO{@NǻN[S6 ^2c*g|ҤiD~Բ]c3g$EʏGIR .D-n{S,C2raM1tx67n* n[ݳ,5''%:8ejW*xŖ%ܯ.{ьS t=  St+ 8%,.`,A? nYxILz wՔس^mI*r {ZgؠɅZ7\Z:kR3~ _u+hhQCWQ*h$J+\ u$!% bO.ݤ!HM]ALa +`oX Nt5P:Vd"1<$W;q}$/ ~ճS3be4Y=`9y KoK,x*r96.-00{p. yhKڣ <`ϪQ&&S`DR'/&x. ~ԙbIND(Y~㱛. +APYƥu0PiN|Ba@cR>s$ GSCY1 kR2\||{e.1\S <-cԭ iHMmBX]'2_4HL7H?Y+lس^ !dih:ނi;4(8Toz9$JE6-.KH ^ɼaH{~z yHh&1Q:m!tMaTy̮Tdp.\9KPn#4{d5S!'"n+Xzp],ӓzzW?e5'@4 p,E  +`YN;r=?%="z5-nsA3GӺѭh\rRwe<6(Ф z+vDl`+\Zjj,, };'OswK?q1-^{.o{d7C݋h}_[&%[Zڡ 'mF YzT tLׂ=B|R`6LgQ_Li!Fx$8ocX7o"2)ԏPqoFD5Eci"#9ڊ^oh[qp旍c^kn`5K"*y2nFgA#~YNM >Vzj:oL(l>sC7^Wnɲ,O"hZ!" ƫ_ȜFR]VXDjĆ钦u>27?jVS:M_ur5}3x$?ȡqV_X{HY?gdHfX҆}^G~ |2PB 85TVQhTXPg_,Mm.HY !?΁S $/uiC`kYmn}^ ^V!{2=V(vXng`w>ay #XgH){ZM*,mx|x(M L#[%;,M_>\{N@^`uVEw\_Bv03oZwaM5')"+o6' Pt5`Wed $#ou Ĝ@khd_rMD$½(/,vi@:罺F|myE#?!:ebҞ FgV2B59C sCE$ؑEDM2S -EPF|gZE7eDf#ĊLAp݃Fwxwʪ^ugM!|kDԙEa_lùsz{gT;Hm,?<@ K,0EN߹nz\&P;+g}+Œ|xe4@w^1 z> ԡ&;Pts]8 0CRnB׵x curD:/k uy1h8^, ,5Tm6 08U\-e A6]~S=btX8%a#]Y-xDUŢ u٥YbF{.gVN i`F'Ò2(ʩz(K !+1Ͼv~5⬑2K߰{Q[b/Ͳچz$=o7d- `AF7Az"߈}[Yʌ1 ˾S1p T<G'_u:ad^kpx qKնK,[Q?uV9@ymS7Ee#7n06(mTvotͺ8壶xͩHy"Z1-Mrr]|WU-h2Q|[n7Ƚ ,p9S1 LS5y1C;Wv J#\ܝI%ke %ixq6j0Jti72[gGլw] aqv(ov2ou[$~𸧼>p}m-E#NOo|L'Q`4Ou}4TnР=GX1|_BW"HX>“5LI-$1v`[I'{g-!Z&W>,\+s"Cqc;C52ed*0`t! e>5S*d\OkNCuF|8BK҆T k<9t ;)v]ØZn"eƓV?B3zd\/J-ofcewI*]S&B96zV]ѽJ'&F^Lx^c#t-[:GtGdWZԍf~u- bnδ&XiHq,"ҦnBlTYߝ5f|8]iItρBԤRaWGq ,OƝeQtX@m-]7pG_0YĴzA>xᓙpCq2RHRZĮ"pr?6馇)rQ(AfMEx㉾KV"헷L} f< rF6J,ILgZ +'elh(b.EreFv"ؗ=){sR$ `Y$lA\"e>W0k<$}SUZ SP1((mڝ$v \+dFzu@U`3itMWPм]L(iZPoeMB+EEypJ?xƽ5|ZU;7G"~OhC .ٜ 'I}xӊu)8` Tal@,|m]@_ -eqz/ӱI"Wsd鱴bӍhhM9w_ Z>-=Ӕ\[Vqa[^ e0,zFgg%6XlƠe .{!V* "])",\p=Ga4R:v踼w|V[|:|c}9ɿ{(E 1kܳ[у *Q/l)QG؄Qs芽dGrJ]Q#' 1etW`7,&a`P>Iʔq7,p-v4c\&h Ңc* @tdK%.JI״Y8ٯ>Tai+BMY*"W jSXm@":Vʔw43%5g/e*!@QCQy _ s!NT,a-dozlt E\|D'_c2–5M! +O=`Wo[p͉f 'I,Qc -K ByU3O x<ndhKҳ\up7O2Wnݛ+ &|7K1(6&ěӰ @3m.#:')?7eN5V+&Wnwn'r' rEVp:a\NƼvQ2t>,[;K5 榆/(Syм"@-MPp-#=k\fAwgTb>%$- {jo]a5A/$/TKY 9n;ș󑳗LD.3os5 @@[ b5u"V ,äf'ʹuiOy 2_.c{fӾKts 5_Gmty[]>p-ڊ0*6Y|9 T,TaŖc3c ϕ`@}2Zٯ9vt1AǹpHEf 0MJ53i5A$ľl\|Qld*uN?]g:Ί>E-ԵeR>|="8w-e"k|M qvceaf4dXB9;`˲IэVO$"_.by}-C{ی™6mQ$~k kÄ<LB',DZMI6kQ"F#vD{=uC?^+)|pk7x%K&#yA,꼩 8O'j1OϾ +w%+ YK?U8A&Q^P3)anɯl/:*Y.*ѫ, CMD7 EfVI?+F G E!\|!4*)BWK : _1y ۻ(u*ݦl) ZLwxT.\fe2UA(M{VM;.9^f'hD!:AqRu9iX=.8s1|"|?'OlYvvǙM%?mbR)׎l>Y)^{ {t1͖ w""iU@SByi\nO.\Ñ潰c j됸L -LW DrS|ȰJ^ } DzIdUNyz8+蚽!5'PAa3%zؗ2HJ AG$[|ԣ"lXOߝ%r e=!QU;솢`;XfC`D;wȰGWOΈN#?(Y$S=s'[ІTbr~Žk{J!:[ !yYi}BV8mAzJ`m>+VuKj ;Z!4bq:ό]\ASmd#}DA?g{.*jKZٵ%IϱG!?bPSYLIV"P탨+8&ſRع~@HLu?>jsۻyMF{ЦE)#y^4v!+VhDhA<P&+uyHNzKn%\"z Mr>I~1D(k8Rlh9`ؠWyvPF 55?) \29I^hLZ76 monY=@tV W-iz U;QQ1ʙ ͿfԺwbDJsK nF#n *J߼?р(Ac boPz“=u)X/YA{a ) Nz#)or&5. ݍ?MLI % S[5^͖jsdçMY^ roC_ϲ{=dO)JlhvDBk o-Y?HˤA6֛Xh҉ y9V,B')qU^$3 9)\*^UD^; އ]D[LܗKɯYO<}KpTzl/qB ڞ/z(`uXNJF Eʻ9>@7Ԕzu.ZS*,VYh4)BB9>cHnRR'S%z8y3{(29@3V}0 1sve=HgDX:$6Hy*@EG 8=E@lU _݉ !6,S[a[)%LwY>M*JӠP\$?Nj4DWTDNH-,岼Ƴr;tՄ. )}gxvDj^+:CET &rTsm/ iX^@iSXvh чG_8wD!U0:?{m^=\=a^q %(7FY,zAzR](-4*3fDza )ޓ#X%T_yR6.e ON!It mȽ uL HV,macD'ܦIi(]Z=CհRƓ`nN6IΆSp&_ | I/T=۰Mn_>$T'mP^w&|"=5@-Z6 )^f_C3Kpܑ/g\;f#SbU R 6"bpTXz5+{J!:_;I}q(LrWVx,u;s眖lc{'dVӘ0\aE { 36a_lWOkH0u/oN][l#{qj r`(YtA{<# N ZKò0@JDq;#KRy3t[W4Rw $މ)GXO>IBr_@Vv'P3 aZ"m/;@e!xM Hdzꔠ['sB>w5j{fB]ZƨL!9"{y a) w~eq $e@5{M7.ޔ4RLT]%y,*O@C#)J#=Jb}Ä9)S|t~n"\۩ZPRb9 R`]7=-JGN&)3ѿIo#%EcgktrE=@>zá$,Af_ˡ ktIu^?9,9|:@̽Y*[rj~!p>)KBu-V Cy`R'Uk:I5BR! 2ApUŐ>h 6) +/1՟ b8PtlڥSRw=6,vm$;Ў㊨rͺi-EΤL*Oj{jHf[*eͅޝ\B_ Ls3LFELҶ孴 4&3n1I7f[%f- B4(To:2.kYBGO^bR&⌋9E]Z#\Dٝm#nM8k +ΚW~ɂm*=8 gP=:\y:ߖn^"Siab#9/)CLB=˜iS-f5\PH+Rȣ'SӜfvy}"Z"m?VXSv[(.

o>U>CGU3D. Y# g)u _̖ed0X;5>wZM[3`?CUǦB 8zQ6x,Zsu:[QT`uvEKm!rY)CuKCt븍BpMNo̬ԍhx^̫k5LϤ9$==]-`kIuKݝĦ}ۜ]+ƞe,|[I_Ύth \*^T@M66*:ygw ʹHqNlp>ZrOTJuzMtv[Vm e<0 P0W>Tb tDAqGVV6pA ]5H*ub1aefW6V$O (1Ag=NޕYe@_)DY*{a1-fJ,Ў1,5!A(w)zZ3$1_YOUX?ԁ$thZ`_?6q艽!{;;'R75ukip%o;:wPx'g}~LoYԤâ?Bs]1SP&d &V,Rc@hN3krIGc&7yp;sߺO+COoh"ړ6 Ix]h\KqvYK]"-׋T^wgn-wrũX4CͥARx`aE[DnfAɠx%ܪ:SCMkUKyZ,,s󙰚*;]sdNwŴ0i,(74Fe땭@KNG@)K%F_tR#6{U2]$%Yޏ& 8WCg =e,900KH|2RBiJB'"?QaBâFr"o3 FF a1T7"Cos@T,hu:!>>cgd%mK-4"F_@J^BU"rEl&e. J<׳Lٗ#ml:×`i4F] e3NAYX-7FIs Ld,>kiņў|+=Ljϵ^%H!.wxF2iM|1N?>IOA ݲFb8$;ƚ~acDZƬN/ tS}n`Loȴϐg tdQ !d1r?3~p 4ZyNo`A斒 yIwtX|3ƮHGC-`{[{OA8%=L.%Uj/=fkX(`(7^YWKvw nv#F%ܥiiT`E-2ۇ|g6Z}X#]l28qU&u+O ȺWƣ>9deei%["߄} hlBZ=Ljt༌L]f+YA-M͘'j$^3F ʱHQDC.*4 5Q ny_d r Z6%sx[TIM d=q`Jzf z@k/Wt-,MN_d8ޢ;>Twٜ !< s)4PШU2#\%fV> +Z㣧m}93;^ 8:埂Ek_'fci[ G\]Vxp r^ Fۄۘ][ RE_ hrˆV{ {!3xq4@:Ds6+dX'f!o[G q <+xhyaFb_KZDo?I&Nü#+'zdUYŐʼn<;'`NRN8 p8mB6Tgu&|R&|x؁8.֌^q'dC@}/vG?e+TPc=ѯCqGfU=uR^&_*"n'ǠÙQw(89hחcf+S[zSY4r1lN41ngcycX6mdwb堍=/f**RlA @«:jO96BH+WypCiFX N E@7D9C^n#=\mnujq:/;su܈ap҉s!T{劼̯WxpRku( xxjdڈSwW=“VEߠ*:3O&+NHTW?p6}- Z\qLw#ɛ\Gt⯏hdQn}L/ StnUij%U3g>:5pd0^niBm? v.6^ ^Z,;fe"' bg Ƚz!,ay6Vz FڬB5t86}P/5 R9:pЁZ7JDZi79[^;ŝX. ;Cr;жL/|qc6[5f!QyYB{e7wȋ.e6w6L^A 3@'*ܧT;Y!YfO/rI0dYWnv K7ko/7ݠ%\`mTSt%@qo%ciɴ@WUJVFZfL)O%eU|Y0T" K16[YyRi?/,,AtI1QzeQ%eW=ؽ#?%N+_Udp?4fZ-{P[(^pk 6ĵ/DT)t%0-]Ο"{U5RFP_^Meb-)/@Jei ~e:4i &StH< BP g!D6KOj5o.o;>xOHꪊX_ OMȯ bW]WS~њ1qZ+wzS GTu~v~$Wx[~Ӑf)وx np'~)S?=tclWi\_>`L^Sx,{ ;[A\?k*JE~+PJRwpkߋ?g2qq2^1TE xyPѠԷȗ\F(UŽi 3-aIIDQ՜ kJ78GlK=NƈL>pmy%HG%`LN1rtZ<{H['Z “iL@rV=7GϦb zPOBhAeKD)j]ڜVDo [KKL=y1P/-f`[wŸyRf1$R4͜YIcjų?õ$\㧄jyLa=kT3nI{_"Y(1Pr]{TJ|vQlxʲmKwibPX$KVZ v~B> u2։ qUؖ}86ORAчf%oYDXumzPfS_Ems6֌h^M#pZB\MejIoLZjm"]jc, ZCB,ujd/Bn ,uO,gtn4}LŷhEj@<#\0 )(Z;7嶠*O rs:& F_]LUA;.rG~LӤ+oF+( 'd[K OX .~v ~u+#D "47&ษ)0RX&ԑq1B9C7oM#@IuNXc͂TCfqb|4B_+zATZ*Fx8A53^6J5njBk*v@:3>TO]ǞpNt6uUn)+w7A¿V ;^N?SЖ@0H B6ckDRR+E֌l,yD8B%nI͜Z`a5RmzwN(8Hf|n/"U1HSTCqkp4SvY=&3͖BUY*^mQ<~*ai+ )#$>2M> ZN/=Ŀ7EfG2NuZG _<Yi<&gsd :ْ~1[PDt6@ Oi5l~n̒"\tA:f캒'Nr:E!|ii|>F^ fc2}0~swP + bLm9%rwC)X@EdBj0]mͤ(^Č Vz1RM̆BL="gtm9|_O$o{>+tSgwYyfS~:B.XZz桹}zl"3~~ X: _zG A6@`>3UK>T'l*s;{3d@0+꟬W I`IdO8 =[}~a slU`g] 4KWT!lc#:Hs@4#fNnyW餬ǀSdș$3³Q4[n}iLvu9&F{~T>΃"̉/R}}c,|U|X7iVcy+ onc3nίTa\ueR<`KPu!B*.@_N.> G_7ΔLV h72X@ukYu.4Ao_fs)Tؚ_}-m.'k 4\/jhʗؑ)f`>?Ԏ(Z(cMhEϣ|.f^ G;^s BA rz.-a%rfp`?K1?k,KCI~5Zx n \?x (. ;C:cٲ. +X`a3< C6tN!% ]C5ns8^(v j~^:rzaɣSPޠ\s%ZB;#dTA/ J-OxHL(ߙg 21kh mޞ@2F˫^TP2>_K %uؖ@聒;h77eG>?3>?>PbVHqLXk'${Hշ^1`V`CV-P] ȩ+iNpJ˘JGk/|=(#̄|xܴxw@ɛAAJe-t-PɩKy]}@-4|jt1.Ok40jcicūGNz ?'YB?c :W\EF]Mjz!T`~5FH +6$ vKH9w!ί M~js4E_a$MIѫF}M2+ ծٚmf+J7$0t| z/p\ç$TֈԋLLMSX6 SN`Sv'>~82yrMiyɊp 'k&'Rk|HE]y5%mL utY#%&4'$-H;T7_@Yn(4RMO^Z}:eTQ &:1/ WW+y$7 {JSzSљ{`ӯA H)bE*|MlYf"dxC}dI2tT&@0f>GHB%򰄝kSX [Er.Z3a}R]g}# ~¨#ѺJ(7_Ud/kL>YŅ3ܓ?eԳ5a:OԙTr8" [F4IESqHX[CvX1 a\$aDip6X|R7Z|g _x^Ę=ل"wVNv5ٳ}FB\7ǿ~c>B4yae2@$WƁ!IDw.R9ʍ ^I /`jA6%dF֞ VpvݡYio;I'Ք 1c2LCެFGsYMgB"wٜ4GT!  f;c$[;~GW&^8H8M[m:U;t1Ww@(X32@IS:BwEHXZ.S PE|*>rR>r Q#Jވ#x^)&4"]jK@;p+9Eݕs\n IrK+`q<`JX͟#[ <$ٺ1L,) Ѵt\p2vz{6›udBǢ[ @B+g,Fvp̞+2' z2aXI ;)tB{z*Y VBɭ]KV^ Ƒm˥$˕>)Y4i3lo8yHS*QӾ9 -k=4#`Ĵ3\{4׌d:LȤ5fU4,+ e(N/LRWS<`=NB'J `LnX~VJ WLgwS'%|?{?"|9t Lf^1YQ~r :|ԟTKpRjdj' t<2Pޮ:R4 RKG*ฐvIqڱ=vi ri}8  UrIX4QX3U|=}yuBOB&%V䏲aX[$eX8=[ĔWڒ=o1 UIBj&*UH}}TlY<N@q ԓ,0O»W&C㪅^.ߞ^}#71G]oD@ o1]e.C Yܘ떷IHUFQK7f2>(tW4Yd˾hbX*K<ˎSJ61viMFBq~qZw[zmiS ?>v/eNfJfAͶ6 .)L^XXIi,1he 8UbS[~8coV<@,M 8囁* IƯìq MGޛBo~1*l.v ꄸ(p#,&OiM؀ZZn\ QjݲzuX]XK枦bƓģ(q#qnED7&ZL2g؇ l񛠑lEI.vԚdIVO!g 1(8lD[ga8y,f߮I n}[F׏}3ji~Q;/-[`}a!6N]زGy@9+EJI.EW|[…5Ȇun?RIzvk,;#AWMf;޾#wp AEvphoQo8L~4$(_8TvXX%&W?z J,H3%B}$?٦D  7 h"FH;By U9pNEJ^s;Pĸ?u#^RME]◀ZEG2WlmÜY؟,&fL$ voM Y[AwMQt-$ n%VF96j%wj^F12%#ۉ4]f?DF[,{H8?|0~&;ggz!PuGm nBZ^ H& >%wS h'+hal`PC%`|~Yr)pB^FPbHȿ%eIlPÀpt^l:z]΁0fmC`6۸C A< Éͬ6SZ|Q#w!8/ޙ\)KaQ+;M*ؕVIeW1 S/>ѽibHAPIwF3ĬI?8((6}®6B!,ڱ;>]0:Q>TÍETqo]F PU@M)v/`B i+3C2?GwtR&7" Wꌮ._bFgAT`T@7M;w}$FL/jמ|۵ )]БŭNzn||RqW@qy=j03z~Ǫ|YsBbm q 03F.N[&ẃ+٠Z¶:MOq-KP_\(x,ES*/,ԠW˨mQkHڴT=2 >oc K[w=,)AಀfE6XylyK|H(યpGYF j?)a. ]u6­t ùYP8gkkxxs:hwN9pOC: ,m6n2A6d -:e,Њ \Xj`H I0 3mcCrD [_2 FnږoVD>O- IPS)? earll(>J yI]xwYYZׅQw__ H؏@㊁l-XHI𞠜䀵l=rg&q΅وn{Jץ™ VRpש7TPܕZ|;SlY" 7=~Vdz}٫է@T"ǣ{'Byv٢OO${A.[n8WIU8 T<#ԭ?Jx_ʁH¨;(W}́5UhO$牵&RlsfyS2KHp}'Coҵ9H3EKZ;;hشsbRCoҦ8evC:㉿?L/8 8`5ժ d3Fcb˿8hX;'UY?X"l|k[fU讙sJ[HRS[/L}X41;z Kgqp|R97k7;LGk$Y@2jyeG;H΢+($>k_aN`_>1dbt)0Ekh9EDG-3Α&D-~o_J1{p49̢1픬g$骱oZ OZ9ȩ2rKIF(zH*cS5jGSm r %,Ԏh4f_ײy`xs ca HU NݛzuP;S:>B E /frsH`$Ze' .۝٠w착>/{#b-,sn X~s쵁Me0*Hر0A Nh .:*9+7< 10rt X^R /kfMiNULNv%-ܬg rKK9)*3{.؄Yp@&4=`<rBTg++sz N.>[ grT9b1jEX96"BBeJ[NL|4 /U]ZLM fiՠ39-&lKP0=O̎&9/0'),wӇJ-8mK[G 4gF6.Japk ΊQc*ܛҘ]eiޥ7-m#$:)mHրZgz7܄lDʿ qs!@Jz^{* NԺ`MD$㨝+ΓDAr^? ^vB/_{tˣ;FO@3{URTigNq׳7Y9#|t,tb-ޅθ=rA ~ θzL#X6؉/!; $`m3$߾+-+V1:2<]:6!ii'ΐVb13̑ v"MD%B'qÐ5gzmvNٿmq Wln2sk sGxUkYщ̹Z: Ga/X3lc#Koxa(mc~|3C -`)rPQ]?-tC !sq,&3ux8rs)LoGg5r(=QsMbfh?m'пdx]6OxZkxZyl夢J,jÿy4I =P)7ugtƼNۜGC#n_X ٲ5 GGxӬ8$!3~0Xe`ScҚITQ>1  i┛Y0=.LdـnE۝+n^EFBgpK5.ôCzŠjevk#H kPq0\\w81u5wNE +e[4?^#N&w-xA]-a?ᝁ1m ]YUnyk y ]nf/sJVb"%Ġ+邵@:ڧ~R];YJ@i'dBv@8:CJ{"Jo- 2LC(Z5DK+uu`\mt!Vrlog9eoeRwDH0@!u|5%mi¡:H) 9 ƯRYW?8?[悉aEPĊ&< bh"PgVH#:UK)L7x Rܱ%. t+L=U]A|)7쬁)n/<5o`[9?yl,C  oxsK)~?i ;q@of"փݐ%l ׉{ k `c4|{o$z/G~Kw9Yh_&\m2dWv/p4*vBƸa!I.;Ǯfp !N> qqvWlGIXJ *\3enO.Dxmu2h4Zxf@ɕaV1j* 8|[_@"8W(1F? ܗ9hs%)k›iUw-L4k+xGJGނ2AYQs7$UozVA -{愊Ĥ‰.ِ̡JDܘ|VN [%w!$رx%̼s-\Jg{ʗ D[s;*ԝh/DN;W]Yi_!;?wNv73[N Ȁ#uXn9(E,Qu)^֫ON էp=ZQ?卑бH ?엷-s-@F:lO~F_Lz- 9~bm-("񒶅#'Vy9wCn|'̼[%G 0V9SX:H<.'-E/90-/Ψ2Ե tjcxjJpfv^*N.w;srFjN[ttGn9EU`R\ V!sDџP HL1^ A'k5$fs*Icxw;1 #(K6>cHW<[xzO"hA/%QVI)J sk,63 D?M wA)!YE™j-ٟ?ӭ9)!Aб'1lc }$ 죪1u腢\G1V~Vd1R< ăU׹W+DRPgRK[ŕZ;$ BO2 1VYǷ tF^+;Ի{j. ag~.®:dCqp0zT-@ɭ/>~?O@ Xl Oź0x=yD$?-ӟlKT4iJwҀk JTLؗ -U1^<`[$/vĉ*Ð98\|=>s!r|ѐd⤒V>DO;1T' ?->Er`2>+mǃ-E$/oɋðшY>0܎^&cע;>,CY4IUݩ\MW~Д4'~aTf(-HZ[ۢ|s@*4v3lg<9ϣwhM*hUY )iɱx~b- ⳍ2Co fHY喖uog&N_N*ILKۇXxH&f _{J@CZ4h,Tr+!`yWtЪ7 ^.eE`X a\p_`=‡zNjTϾ$Rt|ѐḎ$\O:>hU uRR$g9IhUU? .W1nk/GӔ N8gk_aۨ=bǔePSh4Krb "?#v|=s#`V*A KMxV'{CB ʏ\GCoC%W)uaY h_n;26dyqܕlx ܮ`,VSE;l]FVTnΖ4뺿;hb_x)'غ1Ze5:;jk8O'NJRBF)V*%Ks $ K4* z]|bZgm㽅Su/)&w=%~n nPHt$qr ğvPRjcᥩg%XŪ~ܯh;gq<մklY#qs*AErX&[+ _=҆:6OA O r: )IZs9<>o{?<" ́lI%暎<2V.o8D9ʀ˦9~7F"%?AGQ?%+E9T2jz5g8DXbCNwMԉsg˨Kvwj^xz8@`{yDX@lAACLۮ=K]1]\_:iBc\DdyӨtց(QíZ?;P"dAc` +;םlvVFVAC5V~3/W#8XNUgƇfےŠ's?}ޘ] wO@<)3I6ƻEOOp^t4J,Pƅ}@.W+r;ܙ:utQR * d2f?Lb)Hۄ( 9;jJqǍ;5ē3#B"G= x`>q8=jM$UNASLt=wexjk?^lD@:hIhԭ)>GVɉept@ 7'!T;ȇO2Yͅ7pLx$ # =yd;W\x|J~VUԺNhS'#Kzs%_Y=rlhdEs9Zgsx$ļ&?A|6#5r?/78IViegücѢ]Ǡu@}w%gAWG'2=@ ~Өn!!NT9f>G'`p[ջ¦6L"W1 Gۯ yEDpsRlIqkqoTjd/;DbEBdxvV jD{1)d=+"I|cߖhL;C  LAW*c.J ;_+4%:8So!`VoUǜnn.'Z .#3.~ᇮh2h`7nJgnBr*v.{:]G ޖTռo3¤U-̼Ae9HjuʑXia*HPPnK$X{-y.I\Aǧv$8:x=V7HlY/j{:P5Mۯ"BvB}9(c,f'zQ~tpULB۔AHNtr'w(l%aKpd)#`,lT,i;~,n:&6eKΑ/뵼A5;_] P8E_bDRT*Gzt6Vo>P`0ËO]v{S^#Ͻ6G Dn G!5im;HpCP2G@DZzHͼ+ѮAP;zo*ԐsI-`@٢~ ڋkS6 /"ZKZNqPU>_D%(ýOʽfn!tp~*Y3JF!T؇'e%0 .Tj^GQ1p z?rPSm=.a+1N/2aNvd{X8|&j-_(BD%P؆HBPT߭*]=#E45UE=jny=Ɩʢv?W#p]ɁC\.ޣtjڵY8AٕS֮U\T &avȲD*o)hGu-ˁzJ8*R8%FЯP&)iF4mH:\D|lrjTZn'IkTͨ#,9Y4UiEkt-J!#Wi9>t@nK Cۨ Mc>6v8-vv͉.zdz@ḻ՞DxP yoN$;W&"l_{`&~T󷿗3 䡙4CMS4o}M\"g5 ];ܿŘ?QGN1qoROt# ĝo@x 6,ȗm_G~)t]9spyϯ~nG}@VaR|W3e³Oa1Tv\#]A2 ؐ#Pn|0 *nxfB$g1%ph%q>0ct(owp^Y@._ 'v }WRvҏŠ8ީ?JkyRyX^]݈ H,v bcI2SEV[GV1x#59Sqh B*h9^ &%;+7D.洖>Sx,Z$v<4#[{!~n-,5EFJy&M.>jxHMnR7&fe퀴{TgGdV)1 lR Y+0t ~e:ԨZ$8pK٥ mg973nl3-Xs=T+a9MiOP^Ԋ[ ĸT,逖ΐ$usԆlCNRQhR|~5H6>0jV+]''pڨjL%(CyOx0G,L옫^Hltbrfjܞl/߇, O&n?vZ.4.f_̜5v4d*1q+"-ǬBa+akNB|7io黨$66-Uɠϫ]X8X['-p-"F TY`QD|L&F I7٫yǛ+2BIIOd.ap߱Z߿M1>vtG0FgT Zaժɵpyf7w`ۿFxpUM.)CY5ZpPdJ. >'y~n䟚*K#f#ͼf|g]p$_wLVP#̱4](3"rvq>դ*aKpPIh#P:-^yO6E?EIDV[kĒy-+AlQ,_N=/ Wȩ`jtD%"%&Cg&95^!T>hv>,M.08Dz My4&QZ5!D5Sy\W_%8omH,8mgSkb!l9`&8m]2D*<ʾ,UӰCM[-cв*(j|n|-ܭߢMf.&S\+nҨfgVhXJuFs %q'R1ҽ>i;[jMVTD\y8Vsa!L( +$Hu- @gS`a=o%^Rj'\YB bǟyQjqrovQ) -FbV°@%.j%CN/f RfVxLB~ܗZL@fVfVz9p%rM +o&Chu t?;Md*~i!7wr9 .cӨbn m$QLQU~HM1h_>_Vvr`2#AɌ]s8N4LSl/1!Kf d ctMZ҃D%W .ހ홼SA$՚ MDH"2}D9 G1(3H􏧒>F~y j:3m֙=9:%^U?Zaj 1^H+d<8o1#zI;>mO.6InM5 iyA<.z%_g/N8  &:4>.-牽hP׍ J'fЕv>,6}j~؉vP)fE;cEHRY#&i ړ,̑P$F?@!4g9کPh (*wt( a 6 (r*pKWbPaW42L0n; m*c 򅚞nH F0@j |]elzGqyT ݞ=LWf|7sje; &|R`qe>ciH m]?Y"9aI%R !AB@K.=*[o/K:MEVvNiUP((k_Z_~sاkiNݨCl^P+fZt$؁xh$vQ@.90UtDKr34|vuU3oaLS\REo[y FAKe4B DNFJSjjȹXKT>9:^$8{ {gyl9v>XOחD|n=X- .;ҡH{xs^/ ?B¬N{2BUL;L9\䎊>t Z48uuׁZg.*HR%ٳ +D3Z%APr HO% >r!EƉT*ъB[хwK?CkwYpv,J\M@o"mkfE)֠ DA)ٜՁup.2Qs';{VoX\zLNM3l j2su)EBp@W>ˇ''[|nXL&:)H$ٜ|7 d{%8tXYFb}"(Nd; !qV}&0>AGeOh܄{] 1ׁ;HӫN>[Ad*;|?*\Xp'u2}()_w% RvnT@*W'MO%Aamh%{_N:=Gs*nP7z cm«!Rq+*cm/:Kj!-oe<c^56跋SxNVy/>K@C#Ci#j6T@|I:BlfZN mD1W(pOE{ |c."TmAh(kD_ܞ ճvŧKDV0\6ԉY:Z)P=xБv_9^zrpLPۖ*%;1DhTb`w\2 hy3AKW6SNF<ᴼA3jTg1Hp a-7{N06fЄ 6ũx%L)|~^E{XIRk(ÔXp; '8Vf^_iDgym י.܀| kÅ+xõ.<=I@/}*{N>O|_A136ozP#sQָY.=y<ͽNR2`WJd|Ƒ rJfDD@5TN!/fSAOsYfcjАT$g# ߏt@4O`)ai\F{j)I7zy,n=pZa}0@/H7B>Bʝ3&X;!"GMc2QF9kGث%|zR޹,)wǭ ;RGNXX0Ǖݪ6S c[: %u|y UD&{!\ule&W ? |_8]eX(It3 ( x2b AH,A _apࣕE+~.H>[q1@ dYjKYKtU\u"7_7 uiH+ͨ4+ToO~ N) ';!`BNe+M(6;{<vwzm<@v}Ņ0:wwW9ASYE5;)*J1iaNۮtm$&HzLټIRjO6k CEF;[7}` DdnXm}A E4{[#tW W /|:fX9M2@1I~ÍdL=Ҕ*8[wM.@s4تl᥶emaM Egc5]vp讒LB8S#iRzD<XMn= # %k${tPcPw?K֢0S͞G6*k}su `s<*5M\'%#KjlʢxF@_!A2G;BFrJqtImMYqs+a}۪8b "Rb1/5+@-r Ia l_q~=њrxb:_BP@0w*],Zx퍥8\b=.`30cpW!P@IT?(kN2lZh]:#Cg~jꕬY Td&t9յQ 0.A4K})&({$yNJ~XrI}`oŗ}+EEx_f (NP0e\*2a/]+S2#5Y$ÒNqlj󍔓@,Bě`뢂Iz*ĎU!MPFDd䏚LHy S.v\'@T|{q@ZLG^rpk?pK3HI3.MNہ'I᠘MVwnJɿDn ɜ%>1G D?衹c#و fZj)A}swD5Oҏs_uH~MI$b{$ȷj­aRMՄr1/`4TC3馟}q}qiq(C 92vGSR;aOLE]WFMdRKN3&H~p+˔J^uݓ}Œd{"^aE0RҎeͪX"0:IItÁ]i,Zi*9xĩXp,YUs-}_B>{v5e"3φ7 jIO<{].ڰ@dWia24 ~BY J_KN,Zc$<&$ Vg%z_+=ˊ `W1Ū[#|r@L_6`ʐ$$N#|~;ʶ6V!rehHqU|nM]|+I82:{ܻulZ0^ @}nVPO !ʙWQ={.XK*Э U<^ @P\ET+⻱ 9sS|sYx Z7 aYhB[ܡSǞĤuƑh+')ig|9Gєn?J z`k@keÆd@.F `d-7X//A?XrH9F&,k1/5X]܁`,I>q8Ju <=7 /Vq;/6oNh6N.3<TR ?׮ASE"qe01~uPJfqKc4#^Q$1$T)fN#:؀ѫ72/'-ل5w[q1'W5%==#_'ZդuvC}G Or^8NI]0%8IC[GU턻捗|x­li}T"HDN- -/@PdѣX 4C*!o4b)Qf\.%YDo.Z0٢!BL1%8W"Gⵘ#L:oE<IUтʫ"ʳYqAt"ĉ=fs2 n|[L!tVy؅5;0[WHAL +Gjf_< Z>#&],xiJB{m{11 5zYf!e/rDvlTt1`9k򋀙FmXSw0iNďD|_QsbM9ƴY8A*1/adqXָJ:3 Sr 绨)77{dLjԗjbfl{т@2W{aFową6,]=Z*kZ(= ByM n8By}sc a !Iʶ_14 _ٹ*flE6wߟO;{g;wNw䁢zE8^Gh-F}Sq؏zS#я(8+q xIDWqe|Jwb( Ic -O.]O1l_KlңnOI;7++՟dEA4.בYIuTES\\61 $ޘ: >_&apV:SPI9&e[5>FIXwrH.!S^3MjđfiED D𒙫 ZYh!~%dcYކRޜdtv8"} EΛ}͓+کCtD2+'Ap@YyqŠ=nB՛ jj7+0 ~c޹"W/|<-{}}嵯ϙiW;(aٝ1P6 OT_:KT79`uGC{Dtg٦m2/Ve3i'cஂ}>è43t7p9L%RMgkV!)7F3N*\%LgE.[[Ke8Cbpš_<]"7$ÏeklƤe&!Ʈ.nMB0iĊkNf,#i{v@YGסyyXܤ8bV+OrFmV%(1,Ngk 1=q9*;JVT1["}Pώ,t69]pw*k{u X]ny5 <7Bc'ʗJwy7 u&9wPZ18ȗ,QN5 4eڢXa`.41V 3S]('uoVV0A oNg(&\Gt3lAsJ`|xQ,PQ^b;5d619NގK5/+⽭ V-6bV5 LMSiJ W"PqY8K1Q)l+:vNd"D>TJy5%K%YZ$_DqI,7A >0FHC \[-|S ~ֲ?-f@HU!!辌dD0YιM( @5gp' gv.t2hwQ Q1rp|* PڟL> +r)S c^,S7RILǩ>tQvK ݷ3dHCJsP~djdwי0O6dk }uylo-(9g 1"-DIp[4j*B7" >Ld-fL̇9җeע!CJmHU 95%7yRJT&p|WМU#c¸ʺ"0O}W͙Sl|' L ݻё_y/-v lTGŎ liBg]ﱚҎ:,a|@9j$4!} jDSC߬}ۤS>Ϣh}lM?L8Dqܚr]H309RB'B7`{Wp$թGgձ(f]2lzAbm!QǍ<"ڰ~~Xd\>!e i[Tâ +֙1W[ pGO>;]}oF~*%l\;yS~S,`ޜT|`݄o5??#`jG W:P 3碓 RӺɭxjѶ6|v9E15uܝ9FE?{մKV+bCBŲAW:4n2/hz.8b?:v:\b\9=E^4*ҍV`O+9w7)C?KlQ4T;.z:4/磘&9^sx(Ժ9xO㻮rPC:ЉTP؟W`[)$ CpV B?6p " z.G râ{^A)#d z A@b^&u= ֡!$zQ-'>XDzOE(z#iR23˴m/Kޘ;(㩮9;e.)2ɳAO|P@.:FwzMH瘐|/^kĭ%`Щ>IWD58+-*>*EW?%eӗEnh>-K݉No4Mj !BFuEFOPc>kc e<J2\@Ci7ĹyB*ERdf07=R5-|Pf|w .fT<B՘lj WIZA<_#ZnUc)EP:i*C$ 5DzbQ[yV] 'R:`qj/NEx"Nb{I`F/jp]!1qFBju:3RޝF*8?"d;y v1O\ >UQ'(㥝Eu0r"D!=q{GH(MaQpĀV T ܍#{~2-8XX1s8Bp~*]a nv_?cKDI w56e9-_Zmdr۬ʿ(NŪ%ϡ3g*tZnA sUC ApAKja#_1!u^0Ouz\?/}hi [=`_Xu 7]? H q)zB Bn8V,3=͖s)]+(lSyA'Im٧=8BzP}nA3(]"c//puȴAo,c^:(|\brrXLSCxC+3OC pGC nie:C$ba_v|5p_xF>-Pn<]Ĵr9 wJV/y*r3(-HmTU..z+Gc?LXV!0Ar"O3ax<O0T#/T1!\*H9kB &/ {c[ iK#^Jb4~zNCnipS:BL}hft;oMz#Fy(X j}N1 ,%օV~!&YB_ƹ[{?k}B #CвW4 lg?nd~TE;]dG&R$cPئםA_UHY&fꘌ%w;-l|!2lci<Q$5D&$s쭽j: /WN@u5١=-(aNEp O}΀2!v-`[#]Bks_=p6 k7Ŀ\k<\DmfOD7d `@xlcBDi 97zA< Ar84͊48:Xcm{!Lb-n}N`B(q'QT61Lg: k9΅:x%:UKٝhEB0HA% "Qql~! $5W~:E>|,&Vd[e@gV32Xu$OoF"Q*5[ Qb1X8ExCl/r2g~߸?kI.4Jᓆ僁tl-M5db{@%lw3G# c޾;9|uE,V9R!N۪>_cq906 oހ/,98.9$v]K=o*''}1vnaS$PYAzP ~<q6"#?ε2+uJ-TL 2r("1QQ9 jQ3R˵]GCZYS{48>d; 3׀Sa Ee#Tkq | S?'> ߭;w7r "i챵_kXDXD4#}X&߼l o2BDgskPcr6FLĹhLP^~EDJ^C`9 0ys,R++!~׹5ə埬قMOJ7$C]OV{ퟳR:\ˡEsf (ɓ9.jY M&4 7ySa5%z- ]-kS#O-IPHK}`R6E3+2x`躽ڀf70wRA_b2R*"zmL+Ð NoA?=*_R("qԳHBD:ѺLgk c܎BI␨J^ ZsWRnLm -D4< _$οs ͘\GczaCUJ/Egx o Phߔk]TZ).8~S0YN&q q$ \oC4x8R$M@ݏ\Ʃon7cV7WHU j( Mq=g5~G| RDRӓ .Kw|,$d Q{K6L.wX"t,L\BLDY7}݀iz0pfqĶ9$Prz,nܗ Y?Scj8 @|ިڃrնS香,0 pCyԁ3 eI5;ɴ9%$̗M7 -3AhA)UCS=v!#'q2GoF_DV;DHƏM r|N[O?Uaݻ_)*"ִ3W2 Gi}9M 0Ȣ7 b)UtsU _{|c{!Gl R[.1wv"$tPg;|o)D23,b= qb<{ #U̝܊QܱNS+#?`݁J̨1lޙq}m6 _ 5 t?ru,?Ao*e-r50ecLNPBdr6[bJB˛ƻhB)0TXxğLldGQ5} ,qڅ2#"|Y%Ш^D=ѮLٸ%7V\Kl;t>|1`Kih@60>@ʰ|TyWL7ͅN?!20Ԙz ] 6Rvm5C O6>@rac壡b~X$ߊ&!fAjjpdV2" >-?H^PEJië'[tzs^ٷjܪY~(V5!:>,a{zpfd-rUd9X"^FklBVv7U|IXz<ވl1l VEyWI@Tl( |5N:dH#ɨ1(+ejdtynP[˙3{@( ?~/C%Rt:tp,y ,A>[*j6rN:~??-lK':4;5d{pSH@rxWΉ;_6 1y`+([({|]bb9M>A!1GdKTlєna{h KtVSD_l%h%}S4Iw ЭL}X[˷<)&^l `I+QB~$Q_,`V-dNޟOu H> ;\8C@v9u ^~Bg.PL.en:l+ Mk9/ȵs?s|}}(gYG/o.]QڹîږbEs\I4$K y/4f!CoCclrCܟS>|E͌ f/8vU΄_4{,7R [NB5pukQ2m~{GduDuWf_[f޼'il%0Kr 7ь[谊5=h. 5SEoN@Ƹi4>7ᲂȏ W DYD0wv1{蘾?]ێT[VuM)P#|C&eu"[(  Aa+_;Dn!XdaY`nby3ī&g46+ \wC6x#蒠m)Zٿ3Nإ4IZ =AU)g(5N/hsMc_ѲAK0㆓,GH,gMRqLxq>AYaS] un8:! ܠ١Tˆ Z0~ΣHaVo&zҲ] j`{{,>,Z hD&/EfA1E+26+fT,KQ/ )-1ghegK2Z3E| 7%]m jIZO<6oX>O=O&mXӸg23*#vUC9 ↝f'B k$tj3ՠD5Jsf~741$K+>vh IQ&}!gq҄x 46 ~>U.Ug-w/qf|'W4\.7Yi:,i,s!d9?~eӤE?6nG"/ ѱ/2@]/V6! CQ76t;ʶ%B4OjJxJѫkeۇ*~ҽitw%f/ q3GvHJ^dE!/q}QdTxVDFixI?/nELHp;Lqm2'ƃUNZsdpbM9Ah˝2~(9 t;ʭ[ڧ}g:}="C+m&KC%aˁiqFZֺ 5c(ea9KۇSt^7wۑ1SB%ڭ^t ,~bVȏS/W, ]nޥ' 0_ӍXp<`|@4 UL5z-U>f}S1ܢ;CC' uΒVY uhul&4!U.Y3صGjKOΗ"hFkF]%IJaTcĘ>^ sHPf.T*IW/_I{GL-Pj?DN-jϙ  ˩VxɷB?q×cWh _œݼΛ2h,wzMZ`<"N5ᙜ]]7l({i#b麦{yJS{h%u֔n+E~BN;ڨ䍱*GYqC`\kHI IǕIUMRq30J8Ҏ]#FH׍KS%׻,F7 wX'Qַ0??{ vY^fr f'LZi#J\'F҂;4:㰤*lN(k,u^q75; fahP`^/#`r'wZMsVBYe&"opeu|Dڧ/ w%Ju\[3E6⢴)̘a ?A o8=a-KȎ^02>#S5JzJ2g҆B!uC%v`x_%Դ"n>@؜|yU6mGx &p㞘@%o xWV\Lr!ټ*9*LɁ]PI?۝{uUkCtgLjT a`ɾ\9R/(>aD2KFRޥt#OFvo )wye:v`Pո=R_jFag`-#n_~I&@?nbrqIZKxq?\RԃzϏQRfQl=_ˑLd9'}!XǓ2kZLNT^gBҫ#XJgJvs M!I<0BnY隣悳ُ| kj9waFȃ0μ GKe2yc6+rٔEbkCow?t>= D?"$C7jIaQt`\K*bS"9+q#躙CfpXygGgi y)*-Xre0=ͪ4gun@l:ϺK![=U?A`XAT0m7W:w٫W~,<Lbب4l2# 32/˰3(SZ$=ЩɝICC>R^F؞hSq*)3Pfp=?ebBf1 M*D%NHfpO ZF,l|c |o\E:6hs)ze]<cZ;S?ʊ|1RKrH^A;bk\sɰeI두GS\"t4ɤT}CjJ E9.| 1: vwnrUMJJ[ԯ{NW zcK"[,6 QwĻ,MNN)5r?;Tڄ#.n3._Q:dm__0Qe:|&,Dw8znZ?!ȡ_3{eY \D-"!P#DPF_4(DXɗס\ܛW=|8\!=UEڊBB?/Fαrp֑ ukУcnKhLOo)0SHNMS#w=6WDiyٵUVXIWÕ|re;=} .;nd8oc`V)}D-.w70΃[ t"0B\[clB1(rK7$k|)Lő-lGU}ysO+f XZbB㰿8+Ư7Ly`zp&Wv[\ R?Xn N"^y:t!1JJML9/DWh>oKЧﱬ b('%!MLtݴQ먶_{;3S85ZWj98^&kQJ"451"'I{Xݑ=}ZHTAZAhO@Wߟ1sÏk돶#Wj+kIO6zoRc|Վnh(N >c"k49H$!dujzSs@\nx&zPp ;GQgoxj LReifa_ؿ;k3~ j'xD9rcl8d|sCGjb~R)ɸOL0]L%OˤӁ! xAȬ!Uo CyU;o3h+,O1y*a g RF@nySO 0%+v"`bvaaPV=PrLACHBvgV81KG4]qb[bϭՋ8 5H$`vv` p A-##%z'*Tΰ|#6h.j8rs򸋭o9lWqqHd(ן͆{uaG"X5fgu //y,jOxaK +%eFea{YN$w9J1&Fe^sJKϰtwn ˮ4l.2UJJ1d 42HjLjo|ڼ|RD\Y: dӫKîG$Kgr8%үI{&(vX.,hJ& a6)( :5oT 0R>VpW 㦘Yߡ)a%L=JZ|׊ͤBĴ\d›HK|MA5=Tҋx'4Dw⳱_j tO2pNP53y xѶɼ&7e.zY!D_1q̫JA$ v"ewޠ?@T'eML2M""{2x"jzNWaL OCy5)7c~C \Z9*,E-xC,is>zښҙ B<_alyh sG۩IMC U(/iu8Bۿƹu.BIL'˅{`I\Xy\Z #*bp*E&.8zIfeEjx>b x0ֱ m8$J/E- 4@R Vuc Fwlf5Y b!uźdGE@Q.J9c3OQ ~rHT;fU;쳩DsX5ǐ ܞ hhL,nΗ8eZ~c™Z=@RoRD* UU7U6E8iljŀr&v F: 솴IPk2^ (Hi)S/=a]E]\ӔHC5NWkh&np3.L%{af$s~ idQLOz ZgPim(p3 j.GhфwL| .oL*Z1ם~e >Z U癇u~W]fU^71{ Uy_<}&VAd2mGGd]VSm g(?qQzbz bh.7 bUC9"mF@R+ay"oux_'ͲLC_7dJryjXFkT!Իu.-%^JĤi[b>1]A|NvNbbW"g[\yn#Ֆ =RdžY[:ښUffVk $oA;Cr%[<Q9@!NnKm5EOڿb٠_˩(/E3@/+]+crJ#hme5sūw? Au^y!l-X$YK'p1 L6 Lplp4mbc+V#BK҂ο [SӶ#ɞVXJ#/tC6uIUP"ʘ;XX'zgq":KAf$Y$0$J'BÁ.덩`+oHxÏ'mmdh*BJOM?r._X>r}-+C9gd3BZ{ԙSƗUz$L=I qj\ǎ| 6~1x[3jEF 2 NYp+`'_[{ KRشsE/e0,֕ Nz$.k\%s~wZC2s@%cٿEN')QO>`x ft!-AVG a~>ώfnb8kکS`5]{ݼz/,bmYqKx兎90x-gko!-"3<y9<'H:XboJ'R }ioɓfW> u;.`_ŒD\L7EYX23Ry BDqCث.CPQROكWyeHkܵHn!4s:Cn9?-01c^ږ6oG )- BB0"̯2x3zܟF˃@P?y@ bG:iAJٵ fmV!^S*4~K {ei6̒+Tq&%t*kF^v>^Pt|nk|Jp|u?||CX e? .gR?ݼQvE lw5=|>TpGҳnZmJM"6pԎDSzN%J"'[6!fSI= u4!E?bF~ʮ|%?+|Ǻ>Tn|A1b]l^e4"Q?⭳ELi$ wazu^^ 68us!F]K{AvlR?34SeLSSN) 64KxӋIeW!ݰ`c\8CRu0[6.r2vl8T4v)$ 7cpi2b{{+p.Ġ5h{":+|eۖ//%DKW"z!5r Oap$! OnRwjyt`;-%Mb{~!N&tw^m^hjy^@<wêp5#Z0]+~CF'bh"]ixU`  hZ#b2Vܥ_*o^2vژťҾxDs,r1шz;qv]mփjF"NHv)S3Gþm3'vɴfnD8RN1 DMὍtR|;P:LשRD1Vu60cy9hDy䖒 /"KΓ~g $ngjW:ϥ̞ ,GApG`'t4!d c*$rv e"|RR k4$" Yp?37z:E㲜+$)t[S|q`K!xFi%Km|LnlP[ EDs69hK܂}JY~y`_z)-2RF7p) =/!M{zOvޏ0!IT)&Acؒl"ȠC׳%-~Gck iLJO UT$iVoHHv@"N[- :UW 箲 ipe >cAPe3[iA%.mIX`.WP]ibW3g{OWt5 JQ8,ME}W/h#\Yˆ [ZG{Q.Ǎo'n9׷.lϩg6i(Cvg+<& X%0Nr%I}8|8MФqEa(^jw U,R~~8tuf 1I݉xiRG>esmPIC鉉d̮ !W=P=j3:˫ _0Eh'M ynjd 3N0ĪCe:yV)%t"S0^Ϫl5 T0 -\-+oH'ޑ K՛" lޙSaƚcb ?#F x㾁[PFwdD`: !@yyö#cͽئY 2!+n0IYB5i$-'ZZ7Pͣچf +Jv|501uc 距9o2m]=8=NZn!a޴PM2 LFLnb,ܫ1j61[-~8D&Q>(},BNvmư ۖO:7[RR`(@;͜ 'q`Fq ]e*fP%6$( Ӡ(IS? >TGjzspoF$1K2󞷢;'U;U\d0ߌ1Mj1G6hg#ӳ]x@&؝Tn_j Rx8 nUdp bBz$u )wI=j%J=#ekaG>{ "7=Q؇]ȾnaY|ʓ$V-7AMckYI'1oW˹LƇ oaw];.0ʘֳCgtIw co~e߁ď7$M$Qz/]Ku b.` ]? WoUT3V*f,:R|>X3 zҢRoP&m k [V5YEOζ}z -F|%:!6I=DcAQRKS ?9E-Z~q9s.!jԇ"uǂ'8k!Zw;;~< T!H*rvQʢ͒(w( VR%l L@r\KD ^ 3 V'V AW;-fICL62I]\IMX3epc*x?E/lJwy #;P_`\" yO}wWڱljlLyˋ<%VoăBk'aQRrb֧ʮw,s29í@]x=A̢`r&Y7jb%>\~)U/5(㰄 ͤ*]"#mQJ6jF1lK)z `FYҀvN*[( =?e+(ߢ|+?cAݣVYf˶ Or+s$+H*a;Ԗ]A[Zp}L,0 /J..Y"Av rhJq*:PGk{Ƭ6ȐUǬ*] P١5T u%[N/|IzF1wSI`kÉaOdx˝iEҭh0 ؀YDzt`čWoexB}u){|V;fbq󋚕cBqbJO:ae xg룛>83<8SwOFckḢ[.?W|tEEE&3͍ږgnn^LՓlGR/lXϋ|gT๵LH'/r8P~ߺsCf[2Uȥy2jnWd3ҳfDA@eFgyPD,j+;D\ތ;MEkn@o\dah^y(gh(Jfa]ȊdTH7WIfs*1I o9\+aG)wZҽr)$*D%̲d̴ ar D[F/v\b!ٿTYRrD ,Szr)?4L\\4=DG$K7iO` 8-^{+{elf42~rGɌJhEřgM,Ŋ~1^w/ Zf JWIiLa6XiC. oVg0u?BTɥQ4(L<Yd8Ml&dnt?ӪL|5j5vU\BLR[2^.=[ s[`D0;'kIv.ǽ{4n6k~Op|j^s$ z!GH r#bJ ^;˧s }/`7Ƽ9j Ub#lk`SZz*nFcqnH&S*'J_Zҥ;}-2)AuvyeiJmu9AKIt_\WʰxW F<(~H`n%\ ieJ gY$[FVlG >;I} Ԅ+"FUFSԕ䙶a 5 Lb;YGR Wl YXB.)9iۗv+o2ڜhC~/|tf8&i`v $ Іgusbf/fˠǛk(;1}2~{,x#ȥ=^A+ P7*0`v.uOM'/^p4=fCկ.yvHpx ZB-0NEpA`qDLN?v"Jb2[骨!(#+0cByr:acZD 4Q dmqb*cEhG9&QK ]Uv!Le=Ώ-$E4<8ls$ɥ&AÝŞ9:EpvwU9X̶}A|WX@8-y6ӰYS?TyLx 5ư>+t^OdNl%f58)NNL]XtT)ˀ\bU;̓pѬk[֪MD]@0ZALJ=Ie=^I_"Z㤼-u&D\1Bo *6컣:I{]nLkTI߹4@w7NPԵ#Rgq0AaápFzewrq~|J6Jw[f͜}4v5X8(߁LOFה8,}ֻZMdgWUu PJx\"qw XK7+xO`]pmsw9FcηXF$u3(]gMW? 0(_Y*K6Tr܏3Y؏8݆A$e0@uZj Bu(̝*!4#m* vs (іYBU;0+Z! ײh4}&/OeI^*1FBd"]_.˝Ynɞ䬽EְIl4&m]&pbYь"cv.%Z[rAѯ%V=C2G5RvF4h4BǯCZ|60&A!_pqٰnf <ΚYA@߁;ЍMbaP\ImHh]1I$3nm9a|[*9) [Wotp" DSxn5,'&lF.;o(|)g$fbj[֪ӱ]%Z"sӚTk|̈́V*]i`t,]+l}_Nx~|~T|NΊBHWRPٺ[ wq2oCGc+sp.:tZ@6jc=t2QJJ̫y]tGpu"AwBOq8oLO+cZF+iwu xٚ(h9AE{LxTAQY@@jugROW$&9m/-Gg?;#PA^wZ-o9l UcJgo6xt?{E-v`=x>oR#/  f++٬sCzxA :#܃D^Q<1_,Kf =<ˡxD߮tYi៖J 8'_9JF1/vU*BO28ź;Dwd2݄d`%t(g@k`'IM=1 v?h'KLc[!l`n!xa ѳaE1]Pf=&,f`v\"K۳09Ms}w60 Tm 0@eT>A1KBѹ}&ӽ:n ߼6)&!EmL"U،Ķd߁x'D6 _ ; ,YE[Z&aPH\gcv(ȥ 6QԘ'Ҹpy¨tm}.Rx*ksƨy\I? @\Zi};Asd42'`UDP|:Y ˀ-v08x'wz\\QјYvOխL*Wt)\9,7pB@&(8J5DWM4dr\JHb@UBy_x` =qv2H)$jao0HqGh k1O3%K&[S$-zB)\C]F@NPwȇ&//IL5']&uJ,:V]c&}pCgThKQܛ2ysvXA4%Թj<}w)Y)6T ``=;&dKW=.hӜyfj?75U}1puqfˏYM̀T*{MFA6.eSl%lv_j me6FW#At2~ϐN?,0M~B6g>3`~ƄW@Juȉ$#oP (7cGo9+Q: r-hwxUWG7`B]gҬ!l 0GfgevDy߻Ld ?/ X H),dzZd# H,). ;^A*%HUm;~)r:Gl>Dɹ+cU-@zw"vFCeb'<`6)Cq_ה03S#h S s팫+9ѝt6*L팠\0;;HK~J%?Ge]~$JGA5}A'J,,u;h:$fb ~ h'Wg5ї !9U7C\^<-,,)s=-Cð4ً߾LA١?L"1,q$K3l_,` zY[FgdV*6 wEѭ.'pquvsFSR)O㊽ġǠ_hL_-N8I7LR*EsLu3:`:iwz-ٙSe]j<+:bƑ.'k| !0 3)jZD=,r@;)T+S>ywoI%]yDѽ2 @148լJd +&el? ua5r鸴2 +\_ i}_;Ͷ?€ KXہ 7]%bx8@~b4tiy(̈́ZQb0l/bYs~%;-,i=̋D۴⿰吾RUBQTԶf(HS)eEw`,hXXFKnwќDՠA {]\yO@-tX>2AόMnskzgirGNXc*1^jKvSpCnyv3k=Փ/o.$4)P;'$Iƺ; C8{f>q1i'V".''al7flޅGV` G$&jm E#I&'˙AȄl&WIg룆Hh[`VĄqؗ4Gex[0 8x%BǑ^RR}*wOY OiN$i϶҅7s {fMy>==UL2S~QJdU6-#7ϿJ7L}2N 8K-nk` I*٠*z=˧DM<;ʮ:[ ꑛwkN31^d`Quu ?v52X|Z憘cDjs(!*xUoHq{d8(1hjx3^]U}(=;in d,x{m9O>" 1&׶]=iuNO"t.Ko'{ZHk9iWǨ6ml]*+?w*hYv#46.N[ RO /7agϷ/HeifKQ<0~9kMktמ%<Pk*Ty~fim, W+;g+ V"GVһn׾̓n- ֍ B^]˾Á?;Wa|ÛV&br*Hɦ;Hl34A *"iîk,Gڑd3^Ko/!0;[Tq1*6*egQ؆2+Tvl w0KȖT&zE2=_Fed:]1dKX%v&& ̭8N'~M7\̬zJSs9~ IQE}ChKBw SҒ@8V?mwtS" nWQM{a FbE^ন?jTddomeկ8 K]R9o CW& }mKjEIŨggX8htaI ('Nlso%t2^a}B߹_c;i7,+5@\~=궛ʝ2Mk̿c>w/X #WZ^#ug/KP-Yl`Њ[d]:nBu*vp@^*çP3Y D$;@PCɭl`!av*b/ŷ0KFdX$?YOl(/?ntqO4^םypqդ @z+GI.7sO7Dn^z[ GVWM-@ צt}O172JM_5:8IL~BILr}@x/@SI@ uW;+9h>s3xѨȾZ*x4WIDm["w!m~/*Mu@+N"W57M!r6p&= !cKD_rYmĂOD@ѩ.2CT'9W+Ҋ C|N0Mm)i{sF'g({ťSR7K;}̖vG@h# t~R?*G2+maӣi w[SxQ(|}vmMw{T!OqyI/2maJ3UJxWE׈XX 532q"}[w#OLVX98̑)d%FC,Ñ0 夔?byF~,!ӂ@hٍ܎ w&P?OZJ**8HA]:h̓xO5H3&b+=̯D1C|rb9hWy*`TQau'Py$d{ B+^P@I.@T>8I'g-biZnz(7[iu;m^WpJƔ.jR0κc.WJ+ ??8оE-흸$'ޥnh3|޵l?1]V B񃫭UpIƱ][VznC4$wM $ qnUDZi u⦷D_<'6OXkۙ?%KМIAIahצע @šZGpY#߭(#Nf2aC[(ذmv6'߇!QnP=~cF)+\Q+ZϤ-AΣ!枾g!'և[6 w?4ueVnh&U'r/{4%t4ph[J'Vtg7ٚ=C3Zx Faa!{r4<\fSP"*26 l< gh(%ۏh}ό\YrJ5~ν,NE#8k;b'ƫ_j>C"Ie":wY<wZ8E! eY7/Rӯ)ܞo>u5<}Mh+r%64tD%{?򕱮h*+nHTI#pb.V% _=(m22 [ $G\D,j9t2LfB54T=FKtt(Fh}-]XqZ6.x\^T^Z{Nnêagĝ ŵ30)JĴt$1#tWu\?5#O4>d}BgKUkrILbh`Cu~L#gJSwueVY.ctЈ Lq`tsڨ*Mt6!qy<viGU | Q ̉MxeU(Oar˯x *~1Yޔg9Ԋ/yZI.q-Sޘ$ϓ:73H]%5WLx 0j@FWx A: .l"ǞKX\請ј6CsS)kiBvmŋR@h 8{&:=` v\O=KAv2tr@jY\$&F!)gPjr^ͨms*Ѹ:@x07ZS#aQiNOW@'Gm},vSod m mʌHwxlteJV'mdEia9q.?By? }!w9z}6U#IFO$tQ_TF|$`BR~w.b3.%b\i#`6y]ʌCJ)jwFR3 偤E\ {,7_њ6_sQl"@S%, *4+Z,B U`PZccH8(o4sK f1>,nڝ+<5wy3}lxĩћKP(z (ӓh hTk/qBׅ`ՍJ&s;$l3l\7!#[wہJS2=A}w[`]`=H v6bLigS7 2SNBc&Sj=WpH*>/pR5h)00Y4TwJ*&Aw)f ury nڵuKwTT/sLFy E.g*`JOYԭtlw2 lrwv#D $l֯]D`,p5BlYGhora+MH/"[x'ڎ;hs` ii9L 5'9O~|lҋ 15r@R z/A]YT aH92$}_2/D)A/3R}[S!RoMG3TBat]3p6MNWrOZеw Q_8jFΓ3fֆzC$Y 3’$S\/8c|kˈ [՘d]:h*YٶnŹ^$hϻA,~hoe/X`gth0%وeV_/R㊺uC{5 N)ݡS8f"V[wJG9Vx`k憎 p1qgXS0t9Udǁʳ?'/VNDo62v7JP`iF- mAC2q‘g`vՐ\Zlw^ x67e-Z3{oDuE0i 4~ga`VjjSDM R!W$9QFH Y_Jy΍Yk|SôWmÀ#S;]B9a:nLd/1Ųʹ7m؇ax31;=F yyHD>M -xgbDw M-[011ޘ/zٕ,0%#T)Wŗ7!]W4yVF$ܓlpZ~Hɔ@Vu  bQ)sE toTģ (r_{}J"A^:\K "UBҠQqλmە9ɭz!ådšߙ8f]BP$"?ܹ& I4~ԥlţG G[1*!Dnm'Y̔wXx둴.Q1cP,_wk1\Tn?(qު-V XUru~D 䨳`:+Ɋg#f扻n2n}&.VEo%/ԳO?!g xPǚ%RƸ|Sç2_?Arf{2lUR^-m#/~'yT;vێq 凲L~Y͇ץ.a)??fZ9 ghJӆ*SH*^HtStqI٥[K qIX<vϏh#^^XSihDx1}-F2-L4}_H@忺DiFMjT/hʊFPwH0,'zq$6b$$l 2Q:iWj?nR?AIQRGxY_wf(t7l'{nG{Y9N=@@@9%-Bj0뉤Pח2eE$sE?F_ZM4 s3i[%)%P$L8=Nf:0+>>yIdz¾$0 ,`[|;X9{ZDuaEZ^p\ G<5 W HozU QV:_?}jr0x+ :4SoK9I`?]rۄXi3R_mPj1qĨ.ߠ.oy^SlDgOH_&o՘Z nof=1cRi8{ߠTl qǥpk^"'R&SD w$<?Qkl,~b> e@ڢ >CΕmֽfjHI~~6tAVvmK+Ho:x QD_M(U'x^2HLB|#ĢG]%Xij]cѽx95$Vݻ 1 %@UfcU J/UI Eq@m|/rI_>qNZY _*ș|K\mlflZ՞/^$9,,![.R#m!6j+6\2̿@Ɋ"8Jo`52jዧ7$`k%s]GItxlj=IVb`"vր,u)lfey|j(uQo_?":DKVR: 6)lJ۪j3N9Ѣ6i(Rz+.v]а3VMZK.*nf4[K ]7qt%fApVJWuxWYTOzae fiP'QJc1M:9!޸aU۵x|Z+HsDyME%ꔌ*Ӭ ;fkT/ݸVmxw/=9EPjglXpw;ƭeMD 볍 r0ŰP\(9x-Ux/ Ёe{[l3!O)qD }oo] DN;/iCLT` nB'^kJ܆8[oYIUp\2l;?+]kHX96)N#o;(7 Y r{d*4}>*ƾ]9 {79ڻr1 H&/[ MX5_W+rn HPv}2O6{,̓;W댁~8g[s( M^ }^mH/D+تE0# 0VE`|bh1q)2i鵟|UNd8=㘥fɰ\ϗyVCqr}1(>c6{؊x @FS2*.8EXX7$ =b/bGKC "s(sR7ЅU+RɛYD-0~q!m2ju eρǣD`<@;lQc*&|\xzetܸթ˶bI;[]`L c焀e9@4.CqфD U[yf:p9#C-$ygn>d}7;ϸ8AzfX&VccO>^\$6ϮC)oؗ*9W03wʶvy,Mt/SFa^W!PV67-9BF_&x>9P}`Dg`. Joa-9ekJŹ@p),9b $Wa3L>Dpk炧uVi:Aϯ~8bKp;,7(elmeÅ,- ':ոּ/ zRE@w=ԩ3,M㓚n=J =vUT{,z%crtS 0T2cL<EBԞ֢乕)6iau*";:.JS2U\7,?(2oDm}*WYfʗ.irVT5IW#4=೶kD ™?2 CS},WJ,{} ; pg]wt(K)_ V*[ yb_xU=uM>]߃MlڷkLX]jeS0o"Rx&] d" ;}*Z29GNz[E,OօP JyY }TؔͿ,CJa"b,w.u|1iBt,9Gҁ|WDpqk d$*8;ЪlYqV#AX߮I_ac"DAs+Q˸X@6o͇}:JĝVPs ZwO3D:_g$FAK*Tn@m]~$2gړP{ C/z Py/jNͫc@aTӯ7}?Dxcܨh炯gJ"Ye:Ŀk>vԈY4P$3u4kGr~d 10 j%Tܗ䃖Ph]HR_bW>f~V2yak#_tf@56G: 8T4[-!b xLaOOB_%;;$sCF5GSC643M"Ye[ߌ<:vZcTħ;l4'j`ITIJJyYmj߀VPMgGfU.9 D?G8\SkpލU8&]ܕe!gм${Z7] =ԬҩA*Q脎L%e%4&#K, eGYlѶR`N:Yx1ZEh2⎵bjFad!:8{k|-fډ<Y"ę&FW}NAEm@Je Btplr1Ek[ @tF˷V% u$mh+þ`: N//3=o4ȆF&I=ShR4K)toG;enĞP[z~Z`(K^h=\ &NHQpgQAIV<,NUK8/ծ`~ڨ)G.k >fZlS/}_I$'"@鍏i{DuK縠fZxE;ysTVx:#v5-KF[+VX= ^/0)|Elvmu}⡼ ?tj𱦠>dΘh2lxFo ~6Zwϖgvz_HMukG_nY\ݻsfc9!s: Osc*@ӷoSjDS5^l#ֈ }엨1*Wm'B, ' }WKt-lmFrU6)7RUN4_n>0^eyCȂkcCp6 wa=pER`,@TMį}ͯOtAC>󊿒틓fj5nʼjbLD w43NĴ! qt>%+btmCC0;n"i|y1<4rFf^*h=r_|nFOn #?Ҝ,,UA|yI$eZ{ۣY@d:nkMZ`D6ID%}Qlf/ 4y0Kљ-^-ڃ`/l:h 1TrM||7$Aև 8ArSTXTi[j q09=8wj(pAȮ V;ڧ@ m*ĹzQ1JqFrkf21K| 0d J}G磫]1-`+>)\-<#I/ 跆cR*݂NFO\*BCȭ1U&=Hs}6F`ܹ=r®Eca/ d2=>< w65=uI^Gu^ܚ5]AƧtCImpV,hR0ū ֍MFi ;]> /KOn<>&ab3ۭMlXuKHVqʄjLU z]9A`{`7nӁO)-cUYW֗p{4Ox$=vD T8z %/\P9ƴ;L1%gZ#>FjBc=T`ߛlY>5L ޞSdz&@Bw[)3-9Eo{(Ԑja "$$-S?O4(~#.I6-)L1mz5;)oj05a2&5lA+羁Be%?+ZЭF`)K}J=m$w:1*M4Ig6@.9}cq^V1ɢ́? rSc[X$}K):58+GĢkߑFĢw8õI Tݰy0-=<#c\yǣgY2.Y1c5Ԡthjx;*')TrПe2C:XujR~2(MсxtV.Jt$;|XjHшj?^i1#DuTΝ$8ꖆSg'իݽ1k_'9 /,rc.q%tQ(d{$Q% o07{G{-1n~PKQ={ ~--!Bko 6vFծ 2<gH+ uyNrk*ZHa)榺˻ʫ:tܭg8MӳCwͮ $2[*`e|߬ 8ɿ_EWhr~'t g.f"~E٫9`̦7I iǸ\ޞoF"YeTJq3S;g}0?);xn|! w=9l :ʖՕ6,T#Ϟtpeq̴I}Ї*ԩ4<"3W8FZRW 0z2L榄V%>Z@sg%4&|f dsp|'I3czN߁=I r r☕ {z+1{z&R5GTB+]LWYG #tp ?  Gg >ai` *3 +CdfZa DaPB ~׭$L kk;˝~%_L? Xaq*dzl^LH-GH5{\(LNL%ՏG 5ܹld&nAOpKԯ / Qi^JgCRGv,'3v@4ozӮ5KaZsKBVE }za7%0n֓)LcH񙴘f'X ^LaI,ĝ$%*,5Λ90հH|Ch^ăiQ$y5sBe{AIy5,X!5+UN3:^ JUz۵7]!Ga/y &U\ʡFI1{o3=K:m5} M\[Yk \wXu_lcZr:B'7 R0aǮH`iX.wh{GAԉ(fsvDsc͍oaj$X Gi הzFx' FG| DC9$o%hr)}5LdB[7:E^mMC(4'J]~p_`c }r+(p*%@uB'U3|DșD${LD2wop?Asyt6J¢ OcQ<kO3/Vd-t?tl#U!^w|I2V8դ_A6Pp~[/C"ta_9Y:ƃ5W[["|LMʹǓh&'iӲ]36,r+[#]cY950 \m\^IsM6z[GQ$gl26f>Jn{z(E|N#x05]'AAy.鄋:uQ=6oƑB*$<4Qc b[W8\~?LɈG-"Onفm0Qk[495$V`v(pKE|Ab<-RN(u3Z}^# 2ڮyК _b)U-WjDpPq6Gj{K0%LۻkPEZw#( dyTύMC=#glO((sA)/JB~i{ψ*k7MזV;Kb0ݾ/̖cdq礧Xs">b0ipWCNB >6p* CU)儼Gkj`hB"~&08ơ g>NyZxf f/2Aj^hFn!!ݵmJ=TeR"a?!og {5#%Lz.+K[%N{KV?Ď$>fmv`02t1fWA\f'љ3/]MH<^t!' <е|?cvVꃿTF%ydtw%K׹ӀMZ(EbhTWL A!JnZ\3. hmw= uwrZB6[b]W0ބBT YG=a;[R:ñ3ðn$ZONz3.3<&HAWG, Rx/  1;Z$U ݥ"&Gf"`4%Vɚp( ~6 :'+):N206/*EwLm~~Z5&?/ptZx1}nD%Uzm ౰;K8a3&3@9b*݁E b>IzGzIBuj@=]\|V67H@ ,$ K7EJë <8êȀH2QNe[@ur`b d#C7{=R 2 ` <Ė8cO*ξ]%NxAm" xҿ m>-PEf)*iuq7 UO'մ6>xN/=Tq$zw9@YVviW!zklw.[6Ҿ $K8nHbgO=QCW*E= üt``]`ƍ%:hf< od%/އ@#G z=xoN#5$tAz-hu`OjPz=~Mc][߿ǃJ/p.AG]8͌q3@]:qZw#ե;nNT|SnO#Cc[;;^`nBu>nBoOeCZvf%/B6&0_9\H"}e&Pqv!1^PB+E$[|g6=~\ $cͽ#~t$$B3zΠ@~ىCv=[~E Ôqd bnIb0e=2QNcUi*Nɳ+q| CtN* ͸gEN'eW}ƞspD-ܢ_UB1ӠZ}.1FhFOϫ/LxABr8vEԶx0V9 H8Ixѯ&3؅a@9saCiruFEln r p;'vDJpyL"[)B}/P&^*?'&X5+ܖW y41ѣ Yr>G6,\C3RDZ_OˑHP[YN1^*=ӉsD=F8'QFܿiikU&.:8Wf_8%5*7DP(I pZfFo[mDwiׂ͖y ˘sְnP.Ǝzز%hEAƟqUX.*IRCRz_Af~A&BA4d!^{zCg/sI*JLM4GarzE7:C"X3IyX4s<-+yO;܈Ki* 8^Rek#*1G RAei_nIp+* < jЇz٢TJEsn6c-"MZձ䳾I^bUJ[GJ.f+u} dnS0$-VBVAmh w,{L4ƒM&2y0='׺ ;_e-@[.W(ˇ"0Q0!^,: #Jn).4Vf 4p!vtT/j^[K~PQ-jvXc%}v" fH>x* A {e2j-VdԘWrtyb*<6&]<1!Kavߦ<\MY087x0kc]-{'"<ѹvv#0׹ĸ%ZWӻ6&``(?\l`8`8gYxi&@AYkS鯚yXpi8@%PD Pu>~,RH$V5Mea dDsuJ{k|6E$;T :+v`D3+F 1hkgy3,4w]Wilcrߢ~ĥ`p0y欬{iQYiYP{ep/_S4|YI{{p 5nCS}>{vx?c696ȞG6JNв(̲Pi\Tj$ܶ=;+#=5t%z+L?`BQ%5aEV|m*^HN.ެۓ Fm-DZ2G2ʁԷSXĆH ֿo33 6*t])e7m4R?5,Ceh&S Z! 3 /rGFg_m =nWxj,iD.V;Yٰl_&IH[mTw OxXE V'ϓY?U'5_tMG d{hcFA6P/ŷ*|5`#$x |w|!"U4764JLffi#{4_}:2k&Š~U,6 5 g oAc+][GN3~\ H.[W(6KgWfDB}8Xfhq◭3h<)y>hײz+NY+$b, q};_cKfmm mHa[B7gv3n@McN1~h{RĆQ>Zf&XᱱO =`{xl| ke[ i拺a3Q z^#t5*AaV!s9Ҵî:ɣ^ w> U [AЦvu,ǷP{0{yYfl8px]Y=v* ,]o:ד!'I-9DBy WL[ZY;m7c4A|7 Օmpg6}sP^fjd#)TI?3c{dcN =,4냲zBF[Ι%n<e)J)EɈIgN1vYq`܌Џ{T1f(*1QDctXeؾbMWsmjqAKEB )٥*W2~m^uO``X-כWq\<ɴB[LGND)N)+I<.EK@74`=YpzW<&b^.CuV]8Ɔǧi+$dx(AɔoMƷ|$wG]yԊGO-HR;6'+ A%&Gu 덗3\REmַ)TSi/pX RO?Q O aNf\8>uGA4/>`t5/׏ 6A!-qݱVV|H#[QT) $±s)_X bc)<g2 V+7 L{5oj}z#S 1E͗pt3piYTl3<vO~ʟ89H5toṣn@\"OG4֩`|7yb: 4m 43+1e\#1y1wIC V]lL^OFJi$,|Ļ$? =Q9I`~$z|$TNaxrBفW_CcrwKҀ{k`D8]lRj[@*P`FV1 %l2&l%1 |+bw]cjex I ‰ 6T 35(®PQW&LԕFTG[lY:')zآ.&ht[_AEwa K1lT5W͡ Lڷ|Y3*6p;Ƴ?=7Zw ݕ>=]ES @nNW pKV|$ѳvGPZOv e)ZIPvR$%XTbTN sjrk&F0$]kK5"3z&".cL[+kq6 ęȗN^R0ՀÃ|ϫc>iiA>btiD9ON<Q1.r2'Jf9HStaf$PKTGdVyn3R>x<^ͱF 垐KE>]O3)=;^'El$(<қ\J+W׷ \yg Kq2Edjpͯgt++{RFv|yq  VZ(le/*#]y^8uDS?׭H=_ LAOknEFaW"zږ\5WpzK\/NfJwV]M#"fAi6R j:TZwKVi(/ 2V643fu&LWdkO<`YnjM3ey1%X(μQ r/(KcQy;lX+]v- =.m4cjV':=:췀?(xosЛ'U/MttT S*QUl5+rpҫN=v F [;ػ`yٻ^/G4 '!7I ~EEtKZouoOgNn cJN쮒>+"9Gڷkv[Jc^,ګU0ѨFDšy5'y0+Q8p| ECqKMYBv9ĶޟI<?fW_-3C2ea*U"iC\uUQhu4r(ƵgX.h؞%Cqha{7l<󛋒;QzEJW7,.m^NC'&;<%#p$o RoOGjn`Ey;A. aV6vz}}`r(!iyC*e`UXW7z ]qGRY#g\YS${tMS]xR~G4QwgOK%ŧ.hL+DЗzRWVcys4 żQ7`e!U:g7Y6ʞ_JX(uH0<MzbWIJO\TsD!W ~gǿ'#)k"ٜhmc~E^}pʹX"0d[XSEIBLRwf+ЙN1uHL"'Pܕ$;1J)OnrlF?ʈ|Gke2vV"=|L`n@Dm$nu@nTDUjq?z"@> wLտ0X(~>Crfp4|=!7rĿ|ny+Tu=CBRZ*#PLֺSąl e^BHpZº- mSlVvJKPov4\/5 0ilyڎV[ lK GçL@=)S / *0]>hqp*=yǥ7lϴ%ŦL5G2Ucjp-DXZ-nA\vldx7$fQ082dc(hXuW m!܌r2}CL3F{JXŠJʦ'ЕdƬ@~Y?j{gߒܗ47Lyw!S{TS#51D;:2H[YRG%ޫ6JpFܤ1AwmX#Sf$Ceؗx!17>"DvbYdRɛ9?*_9(H Nmݓ5'˦j[C%wgAג6F601pW=U`[_{۷%,_CD%~zF!*n:n΅I~ߕ5y_'IuQ-qQ. :%lmPJpcoZd%߷jj̋4s4͛bK|#&nHsfֹ#Vqh~h9e۟X~30)CjVޫ3hY \SHZ׍$p'tueHml!T2 r-D&bXfvprth{IZGA 01i<_$\p/ Nq4C4J=}a-;ա]ՙ'!R.뼥NᡙsKI;Ϡck0d膓4nA[,#W;凎'GQ =7F7c$:G*brv*d'Ky3XnD`=œkYI* 񢷵fqAA)0=i63襈kz?Tcm* m4cZI |ruR~#?|OK6æs2nSyˠPyJ#}$c,eY5i茊mL;$( ȈP=1; P5Ag;<'H/P=Kq_=FϿ/;-ġ-ALgna}Xѯ%UsTFIowח|&hɋ#kFjYF i^^ࣶT̔#PUm S łGL髟|ݾViURkօY*f4lu,!,Wy"ҦcW˟V$ s{hA dOk$P͟,,D_pN?B; eKjeHJVT >3^cCrfo9{5U(5_D3qӐbS^iN8 ;dnW/eZHWdAX 5EOHo%>PN.#rX4MNiBY}%A#E*G*?'Z%K~:Ż}Uש|u /%z^UK̿ {]{쾁Pɵ4U}zuB :9 'V$h%3=L?$Id'J2Sd?VUz(1: DS^\n۰H&ˉp 3C'Im$FN߼_\O1DWXimpTdv)! d !CKsvTЦ=VɒdPi"SC* J~W)1,٤ N2BM rP3s%hġf6߅I*H?sU%e-rߣzχ UXJ@(10Eo猫 /Lg1IQ³I GՎa3VoGVhPBG@8<i) :I_UP&;Olyl:n4rHCWQvZ$ grJXkk뼔Vr[b0HAkՉ>R*#~TAO´(UΘ/qe ^"P؍MpTOzjĊOr_,a>V rTB[ -Ҁ嘦XE*B^䩗?=s2%Dg2ze[964Ǔef3 j5lC `P|H;"?ja.e?}PV],"?Fum\ yo]dj("C"zP|:yJvEHgZAXn%|a epfm)G8+Fg1t3㷳t6?TocmUo_:ǒzq_ȷbh Z lyo*hCz3#B-7L2N`Í걓{@;+*$:]? qhnk[oGY(R()[-nTgˠ: fgȗ+d}kB0*^˚57X'NaXDv;}n=%xyU*V&&HeI\ &v bJ亭) ABDf.'"D?1@$:īvD9>.;䋔`D߷%ژӃ;CߗvOھ~ &p1!0C⋿T(2\.0<$PgrEiK`QM8G0loL(Uf#w>jP@٦z6^V0ݾYP5\5EW/ 2xpqCl^00^]VN e-$#}#ݼs 5w:,eDP2A.~%3GxЕ%ClIT=P# zT,8UPj$eYn\=6钟37/MBg$4CT$VA82Q㠼FHkAE- fѷ8$|uxg@?@׌Y *h RBl^jg&g`+_T9ߓE*vF&f-62W1˜+]diB-"*cHF,֜C*K0d[b- OuVqŔօjoLJoR@V>%#ɖX˙P},xbhu[N16/%R%7SS.-ߔR|޶{ >Nb{ z=.- }aGxU+2vT.fvr @ʼW껜K(qgc[Y !~GShI޷ 0@U|3 T\~R.K}=`挹9 %M׃-dLϚ!H9|w/r+?`^ )H}0zs+vrkl`,l]0*cM:#p,Nٔzj-V[ z9ꤨp58%ug=v*wL Z>x7МD?q"qWfWR8M Tm`At"*'Oij[:Ʊf5@βpJkۑ0 7 6Tj=9*!gU/Hn ƒt#lx|e?yõ=Xl{c #6d P#|~4ԑ$PߋB) 9Vl1\c4מJ6IfH\@|܊hU>iBT;ˋވ_evW]; :&!.p1?$Qm2`WĨ- JZf`m3Q_a>;&@[<4٣:㤑RT6G v^O#lC9#׵-.oO=9+O]$Czj)E,U7=/I%lWEJ&M#m(+?M_DOV$Pz J>mx[(ÙVobO}-nu|ē|}!Y. V':7ّt '\:1B`>-5H-Yq-G !M-]D@^bi5_F8{M"oFsW{qZy\ǐ.y#\32]1F?)%W(#l{hzr[pWcozҭ!ΐ6'@Z,JտY;=[W.;_Q},KԳ!:Y_N5 mb a!Uw2?l|#lVa="Q5ig^ n=N]F" nޤ H<:;5"G7b/&Y! e&Hr/i?$ʎ1&ik)8ٖQDO% CF2W:v{no:dp}mD*q =+Fk]_|P.t|ԗ$<:I׭NC|a\W7jVR"} yRH -kN!@`xwޞ#?xySqQ .j@™/y (1^ҕM>LrV+ԦI1tlj[Љb7s|ƐT]E D⏩n8M?";cbaЛG+п<Y LRQUe ZIA>]hި.@Y:5wE(D/b23uC KnZj*%1{ M3-PƟ@s5<ϭLo,)y0MYqwc{ s2 Ȣ&SW}5 zwys%-4=shWq*X %ӋAZ}k'I)^$].M츈D-YPk2G~?T3ǡh6s±0ny%0".ՍnޡM=&s28Q"Ǐ?b7hΛ:Dai50J1FxNm=̒U'ع?{8p_Lm^_%Us$Rig::w:b1u}r*0K]5U)&~>S5kB^ TJ DЃ0w]!Rݵk2J'εiR,vz uCV|(aOvk| 7Lc|(_ډ[E] uD UPm.A5RJ Jbȑ/~hVAtIPW%9 G`#Á}E9쪍c+&bi|rd؀}yghS6sG3-pGdz~bG-L*TbinX?(Thg&ż1FrEJ$gwP'w5dk]1GM1M?g #y_S8UgˋKX8R"PYEBT\0b'D8&1Cd22c QtbZo֧xF kgFAޓzy_q \㡽oTQFT?=~=^ȸMp"1.-*nѦr"&IrKqͻ^΅y ]]Qd?i$%*AM$ 9qcӡr-Y.L.1h>DC IHRC$r w|4 Sb/S;ٷ-ut}KoBЊߣ[հvRmV|Q~27ŋEԷ9_Jk HĻgiiW`9Qy[9xȼ=*N8p22#ApRһx+Xh/6KH܊.2覝^E:]͒U" 8 -ȱM \ge]BzV+q@3X_p>')mh5ʞZ#r)<#G4;j܅Y eKJ}{go{G-9)36* PxN@,km:KPev$#!~)faUh`rA#@zD.>2ZoO%9r6\e+(7DElfhR:D21Ϋ~)Ypms=Xja;|ÑY2{,Pؼ(4Z=A|CAz)NJBa# DR.j>oǝ hҸ%f EVnM<>4c |SlP@&#z Y?t |Up)fw W哊÷/{*r庫%Õ϶E.MV6g*{?idN RD)HB#j)*~5s?* Ӽ!H6r^Po#sBrYhLad't і!TӴ+VE;5'MP;}ą- Up g#5#_v'; /h#$*oW;GVvV]R57>]_srqVnc !ANd: Vh}NEM,.Q7pdDc SaJ/us<B)FyK NV EPW+G o ;_ w?5 W!i6o˗~+ 佌\/#KB?j|3HL <ۈm <BiBRY8Y'nDz5ꝍ5MhH|^t3-eBZjuY0,_MA< >L"Β#oK'qͩ {"9Dۘ-#G*ҽ*F-Uyn*(b)61fO4QQQA t1FqZ㽽(]P,$r8Dɼw䓂&gg|D>Gp24_FS߷9hǹ@'h`j=s-%-~kLӫ\ JmiaWc:k˱PB৉bF/&|łn䭬|4vbMSE.ID=^jyh+YjtR6X6 L:`dܒi˒7cpLvm£q{" r1~ζmS["F@j@adGvQ&&<$fGìaOy}\pI5E51`˨e_"9AVu9wSW1Ĥ-9k1 h9U{AD/6Y6k5]NʱR.c>(qUq?&X,'/{69 oB 1kđ}g.X[ Tnaɍa>1b|߂HaČ,@SQj)Gh!G ZgPLbHdI}TׅQNy>(J5'ȨǤt^m[+[kcųiXEkUtz)7DfOz8cmlњhPȩhIد }36,V)ycE%ԭʹR!JJecTX׸NzB%)󁪭{w[IB˛|gM[/}j7U !XD1y(l&op>aOZfX[O$V]g>92EM^Xk[7s4ZG\GX6K<:=rsD5e ST )qI;7*_Œ: }oa,Xa o4|Clr3ntg*}NXV^ޛ)qACk=?&[A=\ѫ:'SK$|Qi^ߞ4eSSgyaĦj Wy (XƆ䗏aGؖ[35%N߂_l c`$Kb Ma|yT Rf6"l VxǕ+Od;} F@(#,ٔhAWtu:&sF|a t.6ʾgߔ,}#H$o*FgSKVQZ50^}½NXѡsIgy(DZ;V>DUyYDSr ;,٦kxpX B(ۊPHRRNoz(:>B3@4 M.iQ p3pɩU@g4n7 N`YƻxW0uaEv755Ë@u`ʮ 8o-$"f瘵4L]i8~f%g>XYOlÃm 83 [ Om |'G#l:X=b0zh? A* Wuo xSm/CUYa8m2N^[u_4 yyÜlljfQʹ|?Gn} Mvw^fbSBszduBE<*yGgIc]ۡ0o|L>2$,IzgLCUld+뒬9=vM#:".#:}pteEH3Vŵ]w]&|oZXh. CXxh0I$BCe6JI4N^suR) BR n/Bd=f )Hw PpHi0Gۋ*tqh;{5+X%eDWJQEiX$$ƧT4)G G/¶5{bv+-P0Iv q{k)lŹElo[2ÀS8a_#.5 !o5 ۳I r]1ˌhs8<S'"˸hT`&NgB l "?d/V@|ƪXbé١VLE7 V%ŝ 9s L$`H ШDi l'zow }DŽ0`*}3ag<0{ Ի(9׹ @oS..bbPHc?e QC\!/}N|3sOd? %mJP̑Mf ܈X ٟ3H5G` )kѧ%1.y(UD= Q)` a'j.te=&!ihSҹ&>gۯo! {XLDpJ4ِcVG.& )hVQtV.FJ1)Zq[T81fqg/x1Fק>GnݣmBÀµӜ Zt7V30݂vTG_Kڮ҆3mU }Оz>!/਼|l$Dp{)o!1y|bh'(O0'1s&ta''鎻\y>zYq&-C7M[`C  ^ 9j%A4nXN YhYl^\ D<<G߅3S-2ҭ;1v}T3A`g5lڕP VʓDkjkIZ%5D9HI+wNz|V~٦-_۪H=q*sG߯Tt;'y+m 90[(5V̕PsOgte-exwKHf90(לXljBH&4-'l<@,U"piQw=})S#啕 $rmn󫡊jSf #D@`j\?ūq\7ntR]ޚ' ,_> RMY^F (=W~O؈*D›NG ~FuA=ov- pDț=trSuyx;M[Ov,flhlC'^/.MS6 *qi娶cW_{BX#ÙZF<CYmF<=0[ݚKjx‚&kDsc KBՌKKRE#]S;xU: WmZ*+ |f#N<`{ e9v?/pŴ"+?kYgo(F2P TqI)c%кI,9GsήK+Bz6M< Cy {Kx3,%1F SCځqO;$_&~$x"C/ss㈧B0 Hx7 bD"Ґq P|;ʛMj﷡NÄ@YhgzJSf %\SƧ|[[.:Ň/inƑ0LD>sJS <Н6"ũYU8?zFrZ[dC&CfVwTE ȃgMZX %a9-du6&ժ0HX q`HЏ+Ǭgh9 |wK xd xb ϸNz8]'\e"N= dd@$=c5|!t Q ͽwY? !_i!d[R'}Oڒ@ǕiDF<}AV0 >> :nX{\e &`t:6#ݑ\3Yb67/ &DS~[9海oR:=Duv,Nҵs{gFÿWBq-pӻ?i2&gW>x]ɲR<$Pwii@/] Ez&[K<"Nd³-mxaDT38ȑ»a@{}!&&XX*y0`+!aۻ JbmW-"vd*YzQ^T'Wc? 0>F`B ޖ7mxc Jއ5EWi@WBKU2nenf:+3Ua7Lܻ`t" ȿ$& ],B`g窙/;6/Bm &6D_P D~^ӑ#yaaѨ@#l,9?9.C/tLcLmpn(cfa be$  i ΨPО3J~Ux}u# *O*w}?^GTD?2eL}ڋz6hyq¯{Eϋfz EɏjPXO Nb<b 5[r!)^}7={<Tt6hue I4WN̰|$M~CW/\:5>[wY;6Fnu0Rs.V ZϭޮS`W^ҞG?Rۄ}M4WH.ٺÖ)'ȍ]YCkzGj,|2(it^~&-3D/ )?"Zq!@o3[}҆4+9k8*\+]@r)lXtz⏀p0R9#&y`lKl):D[ @7&˼/^ݥf^QD /Դz=o;vt r->wM  3KP|6\Ph^_taI3HN]vU~Z.jZ~,M!pb@2>I@ekɚyy2!Uf+`vT.N3:P!߷B%7 HT- ;hl͸"vČ&ƨ;oKSUls %E`,UH6xb?`Ƌ X z-j\ S ^t"9y7};ŒeڙjϲyEJ噍n[&~N1Y#΍|-;py^S ^uU)cepes5kG[  C^-Nͫi ˠd,T;Pto-96p,C*ypu #tn'BD'£2T+USסj"Vh!%xs($r: eoo@|J!_4FE hSU5wd$p6iv\XsRH{*->G%5vc&@'U`S+rrs2ߑY]k\~o+ָ2_WQ[l[olQ,N*jݍnKa-Xp)l2 U^a;$$!idNfʿ`K\(`{ CҞBJ拊c]:+ xaH2ݣ$=XBhD$:p qd0w>el y6 )wJFNyz:2W%3G[*g3$Z5LWr/ˬ +K 0K+zb"Ug PG14FL -lk"ף#j,脴4juJ!ѳǒr˶ -ȩLe܍2:C.) mjj1(ЄS&,Ώ^ $$! *t쥳 "ivzJ61P$3E5jS;K=ʙҤWjtvЂBc z:XLVǓc!T.j,|S=Vԙ[V{+cE@F:X ލK|}¦{Ő.(VTMW$&@=f3<0'0/šz:bO`xxoǓzj2,:i$ z~=c' fZhėx% *+0YgHn@(*82&abXQGr/8 ;g'5I71B"_=ėx4%[*hj5W 7-Z`>t,wa6wȰ)PQ*@Ǚ,t4̻Y")<* _TKl\ >.Z mA: 1%wqy47yCPneuʦ VYa~%=V|8# kTtr8Ԑb$"-K˕#椱Th&yn| Fh*#8_yi4o=5ufڋLL7-~x7.JH暄jqK#< .5E $9CkK3ձ/Ԓ<3c1B`PʂNIDž%9u*bs1,poRd,={rlwP=7-\$[J9P5Ck= +J3пT|8G"+=G"Bv΍d:$E-;"YWY@(>D!b4U$FNVѨڰĿ41aB_ͽqx>y$%#spŸ`8 ej/h_Qw([}囆u $HYCՄ?aK=UjD<OIfS$NguC.'aV115SB{gYz2F(ť:0LOKSzVǫz=jY0Hh3QtHakΞV6,(ldct˒P yaNn6?: TVbFVjszfBy3@*A!*ó?#>-=sIGy#y?׿۸e& )~J P(v#)OKq lK Rnr{x~ţ+Jp:j94sM 5E 8Th8$K,l.Aƥ⁥7HdV$RNklPWi[4` ^Gme ƾk %4~mɟCW@ aI{/P~o'h z^Bc'\_5cfbfpzlWKv#oI/kx%w n/N"tZWRT:Lk3\STVPQ_' 7MN.`}bL3w!FAťg }i&(HFzj>Uw4Dĩ y Xvp ׂT3l[$[J+0Tu؟(-6URl5W6O?B|Ɛ<,Ay>U7X*)V,U]:γ+auf@O\Ω9sz$pP^nBHB$PZ_DN4FI.㳾 *G@v{1[50o{-nJ\cJ?».r's]tQ}W2C 3-O~5vCL~ ƌvL \c>T yrF=_& ]IQFI9(]Vѵ曭({A[R+M 5ƾ.CrZ~'o`7=^~̌kI$yװCQLRxUq! J%qtϳ'`R^UņkSZN<( SQ'SE %g>]EvU%zb k\[DZ灶$_TmsonYI';ur>^sڅ:pabz^ ɼDmr=4w|9.U'{M$q!z-=LMP%LY@%@M,ºm#ͼez11䛶ϗbb"~Q`tfIjmH  E ϊDov/WckGîA&UW)?u!@MՉBn\[T';@q?b4%?8- ̷C CP*}ȗ w&SZP7kP2VV:L'+=5-!<ވ=C"g[w254Bڄewn")=RsH̊~LזZsLr"Ps>*  F7,@eEX+gZ(uq:_QWRlvm{Ŵh ]SAyl@)]*B^0^;p ZGsW L:+8QalLʳޘ:RPq/BX'eA_~Jz Ƈ=ǭL>cfeV ;Lw&(.!eSư ;ZTj5FGɅ *xjY 7/FpDhy&`Pzèz SgmWkgPT|1rAm#Xǒ~0[(wv9B)Vn[nTx{6ߦ^c zJQ(,7܊?TO~Ɔcʢ_* ªUkM$"sˁ$_eo .j%Ch+͏J%AQ_R|P#[ݑ+l_熙\o͟j2<|6Mŋ(6MҚpH&~^Fq,G? C4O2쟫 y%νAg5p:)PZ;hƭ8ۦxBĉpP\]ԟ˱Vо"~8?iJv?Cш,Wpcfl- J Z\PT>mо#Izxfa~)<jH. qU= /n_XAśk5h\# xOH!"B.7Ei1RhOiypQ-/Wh  P|aE;Ωu?q'SSʔ{}`NVcjwr"b,)jHzԘLa&z>7bƺٕ &i=++@j/1Ro] E6 Vjf+ # z;g+5U@[~0禐.Fzh.?eݐU۾iIp>.1r*!j*uk,K[W| /2۰jQ|v @9!G25ՐWw=V)-?ھůEvR1`d⿨_Gd]Y@"/ \6|% !`WP^R[|I\o>ˡbrll4ltKHÅ>ȩq=1Cv&'qJb xeM kp6-ш#ʧx-FGvj%{ afuXU.gQeӫw!̳a4"'uqHνt .4FpHb6Td0uBsfxגBL٢z+PLeu1!_; Rs%&WBս5-)&< YXYkj 3CQ^nzir-btj G }RVͤ\!=k1 fnlϔ ®tᤔN}*IzIN*>+mӆTם5uu48VVׅ0L#DstGEXtr _-M͏2){,P{A?󅛻%5}%cM8шq&!WOʝV-6Ζ33ɾEKtT5\ E8zcZi0qZH©w62Bh1c~B˦RU맪] =z ڽ sa;؈v}SB07&~<ɱ\eUhR_nf{rҭ 9547Wq+W(XOiy=ӴS`¯jcI ڮ@1+XB#W\% BH"VN(֦3r'[aEaid01 B룙v@[#VnV܋Iv~_< _:T{_uxevCJR*пpR!pcE.ߛΗ.Dw+hWmLؗ2m袷5K0eL37L09ϨZ()+df{WwCY\tq 痢:֛U -J᪖`!v T].K5vj^ǐQ.7*4dp7Dc̗-؂UXj/!F&'"w,3|@דd٪[q Db|)v &~W׎/~I[?b߁^B[]槜Ǵ^q3b?UrGs%ɟǪu k kibqe׬N7LxggsD G #"L^X c΂!͎ 4Tq'm }Fulb MjCGqpX]KjPy2,v=3)CSOL[7!5+s&4nKVmnep{%GEvYšb!L8f[LC4ٕ0%STi[^'?GC;4z1!kC }Ax{2-KH{m|E.Bܕ){pgn~P?X{=LI8RYקB LV^/|5Éw"5Y{M3oM{t_VdJg^I{1#nQ0e ~ >gK֘*LO'&NW Ӵwa Ҷ+U%:|/8pb|G2C܅ 7}o:D2L/ozvֳ0+aiI5 e{ T:h EZFULf!K g~ Rv<* ,j$u\擂 ƺfh6V=b-OǜOL1Jn amLRgM8_Kf|86-Hתzk';dܗR^iq\gk9Ƿ-.r@ Oi lOeK5~pBb*-"9)̺&g 9cfE0>` opi$TqUf[I=G 1~FLvݻ௖S#uAјbUV]|ZABVy }a YQi]چվ寣(< ~ xF_Stpw7Y0'uo}vJV-BQ~" ¼%GD3*{Tf_:yϱS(<\)zQpu8ĨHιO֍ w%kfޢ;B_U `m]SlȀll;Աl<F(Sڲ;]/z-=UAu.HrPMEHP'VIh'\"rI|:Ϭ\kk}{H?-qٗIl|hw)8J|Vr⺍[ KIr/|4ȔVTAxg<حlAi$/dh㊪:4K>=h<U8?Yj"X 5I9[ |ag9>FeNG%ɕ:x+n)g܀KÓ'^D Kuqq3^PsȊr2*i\ܧ#skx\J!_O[Ų5=iK_%Hnȵܜ5o Y14|w'C+[ `ڻ(@#*&@1;u;ߛcg}v@?Qu!xpĪ(_)>.,\9}ńy)^J4/m9HmIhk1d z8bw6[!p>[eXv:TrM${NtR!j8"M9E0H5Oџ m6N8X0Cq6wԈi'Rz"74z\JoQ-+y5>])w!p qUwڮ)FHJFk;v ;psrRAmsZk-y0{0J6դӁ$ۛ~|opX~m˂`z7Z8&X ‡[*0q5s'*'RdL<ǂ4x%ՊK;%ԳSju*C28 43Z{0:t`N$m r*ׄtsHxyѴ $4L(3g|%dfPHāKK&j#σȻB6;+2tݖLק3{lWQ[>ÿ(dG2H=̔>;[;w1X??){=*}6slXcJcE9]dPAUTqh,>۪4'NJd3[j-dł*oe+cu#{5a5 j$s4n!Dbp; ĉbB|X^uvNi+ICʦ]Q(vFӟ3x;rU78v {N?JeKF,=0OH4SUDLViKQq݅˜EfhDzy"BCDPY.'IY ۆBb๦i+0qnD,aQ ̞HMW@a9CFm]b~RA+]ǽ}ꨃv/ݦǥdEbJuYĚWr1QE|!юS7J~^QEAH5rd#6 N @tOQr G*cw}.Er;yUGN'u }Q߮!G1Z)%?̙yVb4:_eM;pzDw*~ ܨv Ku4rsg)s c2Qvz/Qk#=L1ZyKFCkMvJ{|?_g;-"\ )ͥ]d=#O-Jz/;R4im!oxA`kd̡S@JAE)glS^K cӪΎ]ѝM; k@d7,ąO̜dP^鐠Zyx!)_d<~Чh RUʼnJxͅ.[Ce>2n0rϜǨق9i0~{`]bN qs~?^aqEH)uy>Z)ͷDWĀ8a]ò){)Vg[ObH貶~׀6(cH+V\Hɩr4Qт>g nY;A~aS ?uC 84_DsvZWLIJu2Mf?$N^a7IF#:̙prU+,_>{:[w)۸(h‘kI8_nݶm:*8,䔊vڐ dEr2d!P nǶ3bZP ȭR$Dz۾{W\6 h4}Hf0r8τ=OF3=|o~YBX |fLW^<'*V~% $G0xhOa4Acou.):KrǦL5&dͭ"[%%UR\[;J6HJ̝)z}0qu<S$Ƽwl+`*>[J{CHp C`7bQY#Aj> :(_Єb2] *,OՓR׀ + Ný^3 /]7~M7͠]6lLr) & Z|g m3!*icx5 k@qJۨK|;<6 ;,iɢ TMԧUVH)F y_Z_C5vߙǍ"TL v%ůx+?46M [:e7=@^SZAP=i bJƶ/(wD/EA-5'Q$U#쾱5-RǞU3UG9o`f"aɜLGm[<2Pǖ_ &%z/"O60-\&$|O=ĝ860Q{G<`Xua~4}F,:5Tdt)DUQ.T(\jٔ.JYRt_uaAΧ_-fZUd\c!V!o6t(])Wrs72{FvA[<"67Mx'),4)d_0t@T'j/l;w87-מI.zWIkeDRdzsѣ^ǸT>ՈWXFĘ|z6Gr˽0?44=(y>qr(M7'Q/>u"V C&YAoLWVr@Q=h~Wi,_Gu7mG \B~E+TtEMڗpY:`9w 47k#6wzZ;B"4M, »!lW>z}L+);Qv {QM0b~Vlo3z{v' m6) \t28"^`eàBty4Ib&VYF#Fv@%J&ujU݁Z K[)+I0k0aAS`+Ӽ]a%1R7WV8=2TU8O%Ae ]$%F8p$@f]B:(5Os),B82̬rt%'!.aQ51u`WÑ{~;s(&YC{5LQCsr`[bt̘`T|Aӓ@aW4iҲ/iUDl_!Qz4'ؗQ}jRSU*4Ǧ u_ٞ&DP R~̔xK49!y+3X/UIRZԶ#(f, T@}[ TZڙAGYf)vvi7zd5x`$,fdUԑ*I :YHR>ί:h)Mz7qi~f{wqıh քWS >F{-&NA[ ஹvM{Q( ?D5ATf+n+[ǰyB8)rCNTmR~SW}> "@@Ja]׸ְUx cyPbְVȊ"|ljCY*~bO׿6z`&}81[?ؓ{7l2YTH?R[r^e@f F#g6|+Q.9{C3!v\p07\cE)KYT`R@[|K󸜲IRsS?,A\CY+:aus.Zr51mxآ afb5 Z;b reHF h>KDG;axr$zN zb7ܥ3oq8 E[ydVl̾p REqB";a=J;HD`8v݃f^%IźcpK~Ώ>W-+KY {8%D(8INvW,;ƽΥf1<_h^#kT+_2ڝqr^-&(_IbK^^3]`i)bDe3Yl(dL!KP]<\rd}h7NTNu+5d7D}8^Ԁ:Lı0{r4vuȮŜ2!@@hSc)SS(ZflTpW'ua^qHBq_r/|ŷw?Q zrA18|D{O7r*æF};^Zӹ_k A.|93S(ͤc@-QL׍X) ^InwtgD \_XPj%(цܱ}:G6ѩ5;F:Ɯf",lQTVk^AG[(Uv +τ8 hMlxUb%2#qLNm3&%r{w?$[:Y>l~l@ g=/CgbHkjs>`H jx&aDX l;W9}]†Pl kE3h{M{IS_D_j:e 1,vkPP*  Iiۿ["϶?x$+̳GgC`.|~bCpסci[4_2CRcz*[Ԝ@˴5 VfF.6v=gA=kx;X?7d߉1Bf#)NSh2;e5g0 I>O4Weƞ")rpހw ՠ+V_*ĀO!5+pénȩ\ux Ǚ&Yq_eC/.^mյx(`=|Ȭg?y<6=VdLvUP-^gxl ul cŒُXz'7 $3IFˆ#=K!2X2CAa43or !^bGR|0xʭ#+6Va^k2bP;}(㌩% xgз*XtE[o} IJo#qQvAL%tDɬ˽b>-ҥ:>hce3Įc٥ |W|wR 䳼X] ajuyQs'MۇiqunOpt1 UmyQ]+poOnZicCH_A(^CC0 nyWxcz6?־ɵ GѢ9tҪJѫ_W@q*v^-׭G[LY~ #*`!k> ۰L9^|i硐ѿ`eَ(վu>W:S)Jl5^Ehķwx[kX5$4F*8p **8}Ӓ4_[zQ>֓{cVTn$]qJ]N87N˪^ 1sTR%ɭ8j$aDC4Nh "v$le+4jcDJo'g-G;AÏ2#җsXn`~rD @I%nTYB HaLo/hArG]x-KXY~H_MU@W/b3>ceD[?UXd 3YvڨI;d8{(sċ2Ob;xׅ,Nsv?DB'[gJ?Vod>OK\iSoj?}/t?}7ɱyqKOܛ׳dݧw~>Ko3_2}e|3~*t8:|-3Z9f2DE^U) nXbfX^g%KpKϳ>\TģDoZX9WY;;/妌$4h_a%49}35jbrgliJ+$A"jK̕pOWQ)yi@ٿ 1Q@]lۏJ&Y[ OV[ov|85 M%hqn0dZrD * 'DqpEI6m/? 9gHj!c/RX7)ei6ij$$r153 &lm k3['GTQ AǏ.1!29pY\!skE$]bdQ{l<8/|і"#r{axhu|&_RŹUBs)=z;t5jc4S?S4 (I`}k@o{A@rq1Q,N|~ECq2nh~97͗P؊2/0g,_ZZrkmFKY=q˙\Oۺd@ ":q鄫PV}:rH@X%#\B Hh#ܓQըtNN'ex}gBN`Qαp+}Ɲ3Šl!龕m~H=XR$yg$EmR̻p+Xҹa vXdppՇ"ŗ䰅ԇi%< ȆhS1ظ [KL{ !/9_&0 :AD.螖Qo>-mFE"Ywe^8h3?ݏF_G[Ɨm@NW T6Ī?ڐM𨯍n+-lPƠ=K*Qq:x2[DIFh-RR{<:^@k׷_\UTߋEvc Rv1ݬR^37TK/E3.b9N@ZV3 As)qNſ~iK13 (n-oC],s?..= ph5XRv.ρMVx q{:c9Rs AJ+𙸌z^f$뛄Pw#=}>f/Sz}ŷqq}K Sp̿&mQE2ZÏѧU&]\)^A["oVUM٧c:e?+FgjP' |UH5`}+)YWW?TEE2X吒_ 3㵁`=xj<⒦v9U$(5) spuvе C'0!z02&ϊR:,Cc`F_9P/>Mn\tW#1M.CwچP 4/yළA~.&bO=C0#8h滗)k췪l)F$Yr@9!5nƨLX^U%o@1o+/V"cӦ nm( L>uغLs`kǡTAy>Kz[{Y@J7 WX. ۄ]< ΰDOWg1 Tl,<3iҀ Pp~T~ Le5 p/ />:2?yF44|V9K<;ʋ9\_bSaZo0O6"9]mAUNmg5#:{&<@V#R.4vmOZo*`gU*Vr*uJfw%&?(dJA@WY2f(CK( Wh"ݯ;V3HBըGLc/.l:m}~B_W[Ƃ-s(S iWfunFق!Vbp`efx}s3[D8:$Vz\ј HtClH6&qjq. `噩- !|8ͼVt ] 8[x}C)#0N4pb շW&?@q2 Uqf—p:#i *O;=aaN_$~DmF;Ձ GxQ?TvPBZU_:؆d8}ߐ36E\N}h1sk+)|". R$~/$* ﬢUQ9#`Gu:Am(A؛o:rYۛ Fzj:t/S/kce0[=M z-xԑN֡3$gA9\]]@0P Szw&qY*7g ?qN۫Yx|{@话;G|R["3wC6%y O 4zY8D?VRzc L^${[%5ԀϦ;8ekٟT3u!=}oYK@0*`6D^,NRgv_<ynm,T\vQ( (N.8 $Uxڵ׉jB-闺 S(!}b5JIw, >p.gg/p4dLgOl1X [ ya|<|E"l,JJJ}џfNΗUnB<8`E ^Sۍx`l+ѻe.MΌ9Dqq[5@=l'.zy8]ynEBiqnY#G"28DѺA2@()?lS }ɇ^~+ qG2횩T_3^щ2x |)A6]/Y;2`u? *'wܩ":(,ytME"wclM;^<mwkOZ`XvLXAEG=NYx.p80`//-pv1Kf= z;uZdTXsQG?jZsgtʳЧ pFN <:@9#]Fy3|JԍE5pYeJ/roHe}K5X21 ?[%z:F -d=жǣ1bc;uV}xQ$X='hI>jrqٿ{ZzO/m UrKɓ&ϣ ~DPs˷@{^juǬ0a^rꁟuӾ3;k@NZؼ}Å|78/׀hpxK`'_`hAIȂɣ?qlr4944+F{ Q͐ZAu}Xcg p"st7,ˊM=_ 3 8nG YdV wvu9)$" TP LsMGkl]E'5xc_V.}⮐b ?R9ܚ $- \dV lPzJʢ1 w\NHrc| D{aPԻ/'xMY hsqj2N h9) Xm*PA ymcIij}$@kˬO`['ҒI]))„EKE" qq9[8Nu|˸Syȝ+r-G;^Ccc]͒9IrVzSݜFq9Vt\'e5ܷ\XHX6|P!b'Z٥so,rsVP*)+K!1s:-R53[>TE,ezfgw0.7ܬ:ZR W@fKL"þ);=sMhLHZ`My7*QwO-n <͊nK-}r;n"}(ݶ vp >uyât\r!vJt pϔd/E"x4nW r5D_l}[0N09 Oq=]/)@qS:p7[ Ddi.١AkE5*`ߛΕdvxXLq(F^t-_Iݭ*ʥb|jJW.$Mmބ2RXn}0k5X[pk5 c64M~ bz4ŖqtC- 3-A4Ć54`tk%+܀ h\,&9Y1Fi(+Y 2Up?<XDGfXE[`:NSɰ6U[%%jEeE'bۊA{*Ϋ˗MVIh`=9JJw]:iihRJbts{EC㵆&V͙ap"1`aXX!\z4L@:p+–p<3+ E+K,_A?sxԫIqXR˃;d>_ }[?X M;\׀O]>/b0Br19S4(=oI.P{vD:ewL6RI4ր_Y1uIX1wʡW q5|Tm(NN),ZiY+\;zm4݌7C t?n!Hjz΁OBRg3=-i$gޭmyr+R[5FS:Iq/6_%4Wf{09%#TlSOv?sP@p:3[c(*ؤ@՚#;*e`\iEqcf3(Gյ+`ީX~g aR?5g фr,?Nd(RA €*,k'BMb~YFk0Ypv W|XٽoȠF9 p3f@L81K@{ {m 8ˍ/cx9+j3^ޞ>N q"uW!R9_c4Fމ}@֗.?(fmr\~*=9UutSCPr ^E$ sl(g+$|Ե 8e?_h孍=YTCUXͤQ ǚ#M(Gb2/̃A+PE#5s͍ځpqAng H.S<%89;K8tGun4Z<*1su3uqr?.XGTE<]t/sRA9!࿉,/AD1'u*\p%mfϥ:ޏhͱ8̃K_ `2!ž{c|׻ak UQAA]Dt+5Max`J_a]4~5+WjCfL 2Q0I\սkY,,[^n=Pɵ"՚y3of=]V'-|ɕli4ɿ3 ~C_ys yNAUF WTa|\4 `c_Z  p:E?)?b9Kh$TbW.-=~᾽$H,ԑR,El}el g-f(\ _w>Iv"^M!S,0NPa.)πv$LbℇԸNK57L(N8ֶ`MUZyv TQ@ǩʋ̍־t`7~8ϕȒ6 Zv\ihSɩIq|S eTyq27eRPt|]#_-|Y[k ,9@P{I"uF'iAFt IѰtv @0Eڑ' v%%+,xe!Qoa=@5'mzpQP\&49C ,V|vfv:Q~$Vg#9'H%@nwO?pٲL,KĤFn7kk K繮Q1 (ђ ^C2~nt?Αn`p׻swS?@F(Vb6FD<=+*c7|S_/縲ɮvT"Mؽ  z9H վ"OG*O nY+h jKzo]vB_:T͙]֢)MmcIƣۧcJD1*dˀ$V<-ZfkQz߀ çpl֫TvI ig5u09N<"5͵ex]E19Dh,@[p1 T}IY!(Vpi{U~h jխYO! |eB^cZuL@)&B2IENnEc|xyE">@]xQy/*IW}2*mNj zԈǗo"KW%hh~*yM^>[ܯ]dA.ԲDs ,{H= k]c$YʭMm LF]羐qaf![)hL,jb)8aI\C2,մ-jQ^L-سs#YW ?-hthF d"a-@G^:~rBRU9T!g&rFRBP 0Ƙd ^aIkCؿzw8`" hbo& 1#E]ߠ m'nR&#+<g;\~oɅ 0 3:*"半 oi<3Ãyw{ c]J$t,qO ZP۳1aK$ng)$HEܜ-H> ޷r_z6׮RrN)C3L7[(:j\Rެz =G8k~^PV~jF}G-2W |ǦE5R TuXb /7x{&Ҫ/,Rw sKz$Ar ?ƿ !S cg7 `˿5E$icABy+@[]kI[&hB%H/8qAW Ͷ 5 \7 ^3eSC&Ѣoe|,hWaWַZ-ozwNB6]ZoQbGN&`Jl|e;IWJu@B/ЅVҊAʰޭTXlIU!k@Fxz:#o: VOͥHF#2Kto2(oTB(btlENb0l;G敏< ,kd.JJ34zKކXסK@C0IԖ۠THI#3<>?f xhOJ`3IS HO=/)<O*3^ig9Fϖ剣Q5:XHUrrI-So+*qM{0k|iEJA4j^o3|"-*=-u.Y|x໯ؕI|pC$aRdN2g7{\Q_0ZLLZ8 iܚn1ӉxsU26T9C^( س_X>yhɇxF z.,uFDkHuԻ{ _!I"7_ݕ%yƿ2vT#N|_"Xt]`<+112,a[opCS:LAvljEB܍YvXKlcˌ*/6k壧I!Mm$ T{cPi$;Byka3 !մKW{^2gH%)׋Q% i ϞMISZ1muS.D8KyWl q0{L52Zj&JR_߫סe"=]v 9p@.d.`0sRF_T&y'k=N=[h, 60T}А2TjfOZ[-7)Y=ֲ{a[V뫑2dq@`XDp?:YCGQZBsovbX6 @2όrHo(pvt)df;ʌ,0x"YQgD+Fi); RW\P>]شYL ߜ.vr*7\iY,u*y*q>&W"œE-CklQHܑ`w6d1~ˍ8J7Af $XDhjbZƗQ`y IB!N` d0KAkt,Smu*NlR9Es)RV*jB3}2,r`Q M1tuY7 f0OkB& I xw(-<0F~1Г76II ǤoqaǕbeb4HcvruI嫴&UYN\rGH4~80g:żL¯xZ7*=Gq$\=JfU? .TC7֑Omr x@V~?kQC1y:US4 ~0|nY(`'~O$Glń(obrh 2wZe[rmo*}6Q?Ŵ$"`j66a6kbywG7n8e!(^]sR"\ڳ3oRRm.JO>]v樓J&^6"3ey߼(q/8d6R|쁨-u`RF R'QCR'Z6+;-W"{,<ֳ*{baH`;M!£8H\L^p᪏E|(/rc#wb@xW!<CZ8Wn㓘8}y( W,0|Ƣg]X+sluه /3tQOIϑPzc5s%Hq3=;"(zr>DG1e9)*7/P9mlb& {%]1ΡO:XqE?@RP._ѕCwʣĤKxqH 5DbjGTp~φw:m^JdiG!0^ZM8BgAJq_C:1\`$WPB4()HZnPFv WF1_#-A`gs{@LU16[&Ucp*?t}AwĪ1C5{qkopKNƮg+)DT)r$UciФ,@zgtW$<8$H~5"T9PyD}:q k +Lcn?Tnh#Ctǝkn5@}?f'W8y<_0kyr EGe]s7&5@)[Onj7,Ի?ي\>CWǏ8Rmҧ Xk4;6AպzY1ؚhțz mY{5ҩ|"Ǝ4xNjU(jØ`8VX6zw2k؅C]7 AD2@^ Λ?s\l}y3ZHLe^AC|w8r O zԍV-h}B-`7DєSΊ\$VEaGOQ 懥pT.+/ s7!IBpЪJ5XbwYRc$ $C;9z&%Nz͖{; ['^-E 9_ټv  ~hN6;C:_jj@,|c}%>(^]lo)}Sm۲k7ˬJ]8_1LFg@4x0 B1aFKjO!z`t_jc('J^{}:y!LU[lm 7nvt${)o銱Tوg]jC]yDcݕhgvfpc!amKōc؋LPLVSM|[4ܼj#qW~ %8DU@^-l^YLnQ~'J۠;|i^Y{N iXAk8xNVMP~w+][g/r{"(P}I%=PTfxh旉 1\҇0u O;x/F/P"ZI'ODI%pS*;L62ݢ`"fCZf;?e=cVNE76"?ka 'Ѧ"U&l]0ٴLEԮm7J7r6A7}1 @vē$玗ղ!KhZk3qP:A `w*aMg`ٹWLH3N%r OOvW{0B%AÔ}Cr*&s2 ׫}nnomV'2 C($nUoѹ#kҚLTGԝYo%zJp2&oMLdHEH&:6yƩd]aŗP SƴO9Y6Z7Ԇo*2.C~w4.|['@čfi ZE:mcsƻaŅVqƭ>˵qj?QǂGkRj*zHah$UR൷fuݓڡl]X VcZ交ct{_Tv[tj R}dSsm:!Lll8 S=*/Sјvw otxC6).yS %{*s6.nQOo9dՊ2]Y!o,Ugo,5j=@U^Ȯ,jl!9>qГ?%kv&*ߘiܶӤOڀu3@wNB΀H@}1,s})c-v>9M\e~&3+u9#71\Q? k5ػ\Q@ðrDR_k3.z] ;^q^"%n%_gcD uoK 3.{&-? `I:$l;-WxP!?G礒q'nٜmj#Cp/kRK km a󟦡y[7YC[CȈD~U1+DU JuU4\P}7H?M] hbnP w~t[(pDh1JWЂYR؅; j׮iA#j+jZԅڹ=wF+1$r`4mpVorC)~p-tp}ٚZ"ݶ>]- 猽B%Yco;̓4޷T9^.A™|LL1 SA>6F`򪢍 :+J=th-}"ܜW1sL̞G8@Q7l$/']+ؚs _E@<f}&&aqYlON\3x?PdO$nx^ Fz}Q\ҭg>VhsQ"|WS9 )/kJ['SeD$يl[N@blU+ qsbc"M-x1I^TstEwrAC4ծ )캽 c*Ȗ͌? W:+sn8K3j*$"+xbf.+9PpxA١={9OZ* n ,x8)" {$=zŰasgqp76ݾaڄ 'Jȡ~gq(zۊ-[v4?Ccy6{*Z{l^ 玔 {0\+J ےAt*ϟQS$BDds&Bkm)`X ν~iLU El˴\%D<u.0ԴnRIo3wHbd}( h?;@O<+LݬN 7~)qaPF!҇>\g3M"khס%W|.c` 瞌,ǘ= (iӘzfֳ$!=$|QUmk;$8ݜſ{xg ZrϮ;,ġ`*oZF!H**+mSh}bYrlGA\L@&oثϹ:%fkݜ7~w%O~!YQre/<)*̻DҤW^lMU6|Ⱥ ]''PM/li,S/V Į@Ey8pk` sW2]zLK<[bYW<&XPG_mc\vΠ0 hAF k™*G:{Ľy~I1;SÖ멠5c!E÷ߣ'ӱ < "93g?N  hb_D֖dGKf$Exj>+&gRIy)@7 IE~*<+41SD-ge/O/;D)k6J"YX[wtmx:_? B~-TVqrgˤ喕8HJ'nC\r{ы-dv 4hAl7Zd#=66C&ٕľ) Z _ \q'SR(U*Pb(*>ac{ޒ xYX'xc|VA # uw*'t'Clj6Y1Oľq5p*"Jgpq%e!`fq,뵋۬>|'LD>j4h~e6>~JpmJn(NyHis^frrJ_ݷߐ%v?h>}Hjz2j{:Rɳpa:x=&/ݚ@Idg`sq[U_v}02z%;8YI2<ޑHuر`5:cSa騞FLC-Yqn4Vq 4+k6!0bjVDdG@s[z8D*aT^ŤK\xvBv m 7c'rPBh3:5ec%>n8z*Nv oxOLS֏umL4"b^EBm>t=R0/4S/j:z(!B<`n#}9Cc@B&U$@,6!H38]+ LW=9Oy/`p 0D/}9VO$'nn>3c+mMrv9@U&LWL0I}Nc"QjJ ]vQ]"6A E)ilL+] g 49.Pesyo('HȾH ]J&f[X-h,'M}SG$?qG衫5=RbZt/Wl-Gr܃tR:aji*m/q`޵Шt;>iCTsRʢ-`JV80;Fr ׍kWu]G[ŦÑȃo3٨m+9rD)塨-3ͱFL[#Z}?;⦧N#<;ۓys^:'41([V'}& A0T F9P8(,a%`vGbAkϴci@^ꨖ鷪D]գe7C+wܼV|Դ"->jk>PbaU+ q oL[*2TɜcUC 6PҖxy'eczb=)~z[ֹv.o2*3SWmAPNI%JBuZzHjHiyjVa~xsݑ#ɜo r&u8;W`hHQ9֝ߓ*&Ѕ$1\\myy]ߑN8I/EÆ y9KD  ubm0VmVǸ\knaB G)#2K7m^3@Bt<0-GJfc2"ig[&pSrL̲8l2 tz;#J%bQ#ncZL}׽S{"a.٘'~.VdSX! t"fWi8f҃ ɥ~[mv͹=CZ׈9Ә`WMd6zj f.)@u,4Ip[7? Y||*.MVW0Y]ftc8SPrԻ-@ՍK> C[RܳEriմ?:ּgͮMX YO|6U8Tӈ((+2 ~G>iEԂ{+:E 3r0;vl&@LT` dcvA5mL( { ޏQe]\}zT"wclv>{tEu:L|EV=-/MjO?د5# X~fŋ?_sf^6968GصL)=ޘqyëJTPf*j:Y(WӂntP#^}WX .DZ֜SD'Ҡe <ȣjx`rKGq; S2Àtk&1.Rj$gPՖzӦ=: AkEt&(j[Jkw#`# kܔ+BNh&id6t03 yeq* xUFlrV}+P :e4K뜧4mL+F}#%e8 ebeńyN˧t{Ov.Pu kk1 Ih+kRDvM.5y{O T qܺ1>:J?f֩No"Wq(3{x=0 ~if\MMot|7Z_r95~„+\̗RBZ֧|<[&ɘ :Udm,*]8$ =r ot%+#})l_1]3vߴ 'DmWdtX-9B ckA*Bkٿ C W3Ҫe { ='[ycJL@7udPZJfDz "vcPgPMjW~pE'fAYR2U!1ͻ3&3I8@X]}{FGG:zJdAqXRF9J!KACʩ46oP&_Ww/ZۆAp,2RΆ[ _Ȅ[E(7[RU876'](_SVB)JZ1q8Y&MPw\zMY#BF.㇊T,lN3Zw^ X霩ټ@#Oܚ= M5ՌEF Ƌ͡I)M$̤xB*Ccgڠk<9Xߜ3eV7s˯D"F%"4\5DCQ;HIvMp"U̳g:35?㇈VVլń10έ%2tz};X4Yە,N|}NǴy`&KNL.֞i ]Bz"0cd۵{}!8g]|l{Fd,tc?@huv…GP+k Ml(&NE n7LG"O,=m|(ڟQ.,}4' 7~uO7}35--h7LCYX-hjܠ.lTF@PP2aNY;B[;gP !"k@m 9Lj|H6W['7* ij12<6B] XR]:D8<݌}iz q ճ ]QUHl:OMy' 8 S{+R\ /- w1ܟo$tg@"L낻nYsw`Ζϫ%OgQ(ц|N`# 6<~!Q`joBe!-૏1 s,a;O 콊ղ-h$POiрXat}MTJ}8 h}Ѩٱb㿀g7dSn&I1q8~6gbڒI4.WgeUKGz頻tg2UazX5TM[vF3)mO'D, ao [ v9i-Q>w5]*awޡ'68Ut['aۅ ZHsSz幍! iXe&߹ Bsu}:.:r&KXӛJ$Ytfd@v8en~10ZyC֮S %qg%I]'A+R@m6k %'G=u{FP:ӿCtKA4(\ qdoCz<%Fx 1 Fq8b *m1HO*$zbЌ 2FRG@lS.WHK*ӑ+ʍoU؆]Ay:3H`PWGWِ_R/#ڒ3@+K\^Z}W1LAh}"6=6MD$[oj]VD1]n薈'hm^ΦdRv3C]>ﮑ ]^ VHKF UtE/w4Kv?bxL#JU;{ zHPQy-Tu}HW,vQ((x'15JcĨ|+4^\lq '65~49aе7ti!~HX7{K :H8_Y|30ox/st"ĸ4ub~G!? xJ ytm>P&Y^kwa5.cr{e"fk5ӝ-02̸Ƙh`֒}&uUE"O'9 0He9]eg2CgXThRDggt;Gcn'7ʱN(4E_uyjeWI/5uzZۗB9ҥ*P^x3މHk8Q;X-c8l:=]c<7O]}UD.v2X\r^mYvO, WnkcNdaB0*11fd<ѴPڲpRIf%+~FP$o&ByV*=lDaИh<1ጥM_bq'mƜ5SӚgbT6 :VClwM" hdV {hp NڈgYq^!-\ &`^]?P#[[iVo6w :FSu+$k59?$j[ `5gQS2EΠj"j5ICIOA35C?B%S'8ePݩzKA΃sY~jC'WB ^?xOv^';x !")r@Pol5bSjqTq Yj,۸!E@hF. ز~1ΈScCKk4N1QХٕh=pb+} W'3k;p@0#Frtt3h/ e~Q=M|27P,=܀k͏ARz g΁w+>Xc߉A\ Z%8 #Ϲ_qds ;j#>|ZNӕ}PlJXm 贲o<祘OaJQ.PyY(Jas|lLԩ\wLŎbI6Fˣ'i呰~k>M^9W=0҈H]<5zX%p.m}GaO)pVv&{&sW vOHQ҇%a"XL23IʶN䭹A~Dq?Itnt{\@(ZDi~zD~9Ky+ɿ8cXR/=} pixc6 3[ Ζ1Gq. &OJE}HG>Ј54bƣG 9% `cWK@c;rHAfj n'\u`4 '0:6pͳJȨaG6b }㥔O]~F[uaV`c|,] npQr쩄ODj>$Џ]rL vkO N ! H~vnվW@u-<^pJaR9*C[mؤ :K]9.ܹS m@}j%oiAHa߹sƘHQ\))e-WFuSqi{K!+hĔ[86x o–O8#ǿΖHE8DT1 95\)}2 Mv.f~#? E)˄FZaٝ庍N>_vUQy#K6j av+ȖC @\ b% Bϋep4t[fVz2E49Wsy ~Nuױ39LޫJzL}蝮G$NDz1b~|w )Ikjqf,ffGu(rr@X+I`;OJ0u3xOJ 1* up4b|n)_dKp[L1G[ {ggS! ctJ,ky O{XNߍk~[:&5Fz_La`Qۯ#u?m/ƶ:F`6z'# CH=//̙G WfE|rKr,baiqm:7"SZh*Kgi1wD Z?>"I=1هZ=g9AA=T3LE]{TFdzWs?ҺIieu)_& Ԇb `}7Ђ+MDѻN.). :b=pUoU92̞}xFVi) ykPE G)*&_v㽍 + r zWφ$ 8r,[ rpCX|v@[bQפeqt+R3N; YZ