samba-winbind-4.15.13+git.710.7032820fcd-150400.3.34.2 >  A ep9|GyP`VrI?l/r`q;p-Ms=ȴhG|hv:;>۷ĩl_6Ox_8Γhhk901LShլ!p GiK;_i&2_GetZuK,Ǫ.#}TY~oWG/}>CoQ\J{xshs 7}V,HxFUyc)mLY7"v÷,a054af7f49034b045de5d4f73b7dbf3e66d42c825a3566f6b521bedf6898d4325aad7d0eac9bd4fea908af334c424163623e33c64ep9|GY"4Sߨp佀SXL ;$-j Q%%ᬀ䓋WR<`hr ;#냟hw_m~ M%*6"0d-3VYQ'O`.1-Vi*#~-%ޚW9k<$ P(t d`#$?1@uP-u źqܳˈ5ӊ\cN:ᩆT9" 7ڴHh:/Δo~ XQb杊ٟ.eyػ>pLw@?w0d+ 9 Q .4;-0`     X<H9(:8:9>X:Pc=i>i?i@iBiFiGjHjTIjXjYjZk8[k<\kX]k^lbmcnednenfnlnuovoH wrxrys zvtvvvvvvw,Csamba-winbind4.15.13+git.710.7032820fcd150400.3.34.2Winbind Daemon and ToolThis is the winbind-daemon and the wbinfo-tool.eh04-ch1dSUSE Linux Enterprise 15SUSE LLC GPL-3.0-or-laterhttps://www.suse.com/Productivity/Networking/Sambahttps://www.samba.org/linuxx86_64# we need this group for squid (ntlmauth) # read access to /var/lib/samba/winbindd_privileged getent group winbind >/dev/null || groupadd -r winbind if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : for service in winbind.service ; do sysv_service=${service%.*} if [ ! -e /usr/lib/systemd/system/$service ] && [ ! -e /etc/init.d/$sysv_service ]; then mkdir -p /run/systemd/rpm/needs-preset touch /run/systemd/rpm/needs-preset/$service elif [ -e /etc/init.d/$sysv_service ] && [ ! -e /var/lib/systemd/migrated/$sysv_service ]; then /usr/sbin/systemd-sysv-convert --save $sysv_service || : mkdir -p /run/systemd/rpm/needs-sysv-convert touch /run/systemd/rpm/needs-sysv-convert/$service fi done fi/sbin/ldconfig if test ${1:-0} -eq 1; then ln -fs /etc/sysconfig/network/scripts/samba-winbindd /etc/sysconfig/network/if-down.d/55-samba-winbindd ln -fs /etc/sysconfig/network/scripts/samba-winbindd /etc/sysconfig/network/if-up.d/55-samba-winbindd else for if_case in if-down.d if-up.d; do test -h /etc/sysconfig/network/${if_case}/samba-winbindd || \ continue rm -f /etc/sysconfig/network/${if_case}/samba-winbindd ln -fs /etc/sysconfig/network/scripts/samba-winbindd /etc/sysconfig/network/${if_case}/55-samba-winbindd done fi if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$YAST_IS_RUNNING" != "instsys" ]; then /usr/bin/systemctl daemon-reload || : fi for service in winbind.service ; do sysv_service=${service%.*} if [ -e /run/systemd/rpm/needs-preset/$service ]; then /usr/bin/systemctl preset $service || : rm "/run/systemd/rpm/needs-preset/$service" || : elif [ -e /run/systemd/rpm/needs-sysv-convert/$service ]; then /usr/sbin/systemd-sysv-convert --apply $sysv_service || : rm "/run/systemd/rpm/needs-sysv-convert/$service" || : touch /var/lib/systemd/migrated/$sysv_service || : fi done fi [ -z "${TRANSACTIONAL_UPDATE}" -a -x /usr/bin/systemd-tmpfiles ] && /usr/bin/systemd-tmpfiles --create samba.conf || : PNAME=samba SUBPNAME=-winbind SYSC_TEMPLATE=/usr/share/fillup-templates/sysconfig.$PNAME$SUBPNAME # If template not in new /usr/share/fillup-templates, fallback to old TEMPLATE_DIR if [ ! -f $SYSC_TEMPLATE ] ; then TEMPLATE_DIR=/var/adm/fillup-templates SYSC_TEMPLATE=$TEMPLATE_DIR/sysconfig.$PNAME$SUBPNAME fi SD_NAME="" if [ -x /bin/fillup ] ; then if [ -f $SYSC_TEMPLATE ] ; then echo "Updating /etc/sysconfig/$SD_NAME$PNAME ..." mkdir -p /etc/sysconfig/$SD_NAME touch /etc/sysconfig/$SD_NAME$PNAME /bin/fillup -q /etc/sysconfig/$SD_NAME$PNAME $SYSC_TEMPLATE fi else echo "ERROR: fillup not found. This should not happen. Please compare" echo "/etc/sysconfig/$PNAME and $TEMPLATE_DIR/sysconfig.$PNAME and" echo "update by hand." fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable winbind.service || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services test "$DISABLE_STOP_ON_REMOVAL" = yes -o \ "$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0 /usr/bin/systemctl stop winbind.service ) || : fi/sbin/ldconfig if [ $1 -eq 0 ]; then /usr/sbin/pam-config --delete --winbind if [ -x /usr/sbin/nscd ]; then /usr/sbin/nscd -i passwd /usr/sbin/nscd -i group fi fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ $1 -eq 0 ]; then # Package removal for service in winbind.service ; do sysv_service="${service%.*}" rm -f "/var/lib/systemd/migrated/$sysv_service" || : done fi if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -ge 1 ]; then # Package upgrade, not uninstall if [ -x /usr/bin/systemctl ]; then ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services test "$DISABLE_RESTART_ON_UPDATE" = yes -o \ "$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0 /usr/bin/systemctl try-restart winbind.service ) || : fi fi<r9ȸ%8H^큤큤AAeeeeeeee6eeeeAeCeCeeeeedbd95eb7e0d1e8c973d39fb53be9be46276b21bcacd8b0ae1adeeb63651f6fbea676af835bac5e037fd6f6d9950ea49ff3f39bc693d479069190927c1c53083993a1caa0988f1da58a965d7a954f36d791af7b63f8f4d458a49b7b48dedc79095e2df9be6229bd25fcdcd832d411fb5f20dc7e8b1563e1e751b476207fb5ba7310cd059fa48d9eb5e50c1ea04e9d806b8e40da7243c6b6b6e79af3086653def948c787a47c3127f9c5fdde2848eeac71a06e22cbf997c132d74ada549c086e0d0a091980cad0b33004feceae1693d6f5b1425afa362228a979af81a7e0c7ed5a9a16eb3e6b8e2bf0b1ee56f8a98e8ed307633badc5f3c02d8a82a4293ea47439333fe8103a9e82e6a5b50d0dde5dedee33ab40c3e92cc6de3cbb752ae7b2848635f6e9b70c0be2f10c385a4ee56a55d3ea972218c2bd74bac711a6dd8963b4f87bc998070cf5455c12d11b4f83795bdcb3c682c8b56494d1598f77b8dec81f1bc6b4b0325dd3211474ac785379683cc4e7f17e211327fb9d536c1ff9138de03eservice@@rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootwinbindsamba-4.15.13+git.710.7032820fcd-150400.3.34.2.src.rpmconfig(samba-winbind)samba-client:/usr/sbin/winbinddsamba-winbindsamba-winbind(x86-64)@ @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    /bin/bash/bin/sh/bin/sh/bin/sh/bin/sh/sbin/ldconfig/sbin/ldconfig/usr/sbin/groupaddconfig(samba-winbind)coreutilslibMESSAGING-samba4.so()(64bit)libMESSAGING-samba4.so(SAMBA_4.15.13_GIT.710.7032820FCD150400.3.34.2_SUSE_OS15.0_X86_64)(64bit)libads-samba4.so()(64bit)libads-samba4.so(SAMBA_4.15.13_GIT.710.7032820FCD150400.3.34.2_SUSE_OS15.0_X86_64)(64bit)libauth-samba4.so()(64bit)libauth-samba4.so(SAMBA_4.15.13_GIT.710.7032820FCD150400.3.34.2_SUSE_OS15.0_X86_64)(64bit)libauthkrb5-samba4.so()(64bit)libauthkrb5-samba4.so(SAMBA_4.15.13_GIT.710.7032820FCD150400.3.34.2_SUSE_OS15.0_X86_64)(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libc.so.6(GLIBC_2.7)(64bit)libc.so.6(GLIBC_2.8)(64bit)libcli-ldap-common-samba4.so()(64bit)libcli-ldap-common-samba4.so(SAMBA_4.15.13_GIT.710.7032820FCD150400.3.34.2_SUSE_OS15.0_X86_64)(64bit)libcli-smb-common-samba4.so()(64bit)libcli-smb-common-samba4.so(SAMBA_4.15.13_GIT.710.7032820FCD150400.3.34.2_SUSE_OS15.0_X86_64)(64bit)libcliauth-samba4.so()(64bit)libcliauth-samba4.so(SAMBA_4.15.13_GIT.710.7032820FCD150400.3.34.2_SUSE_OS15.0_X86_64)(64bit)libcmdline-samba4.so()(64bit)libcmdline-samba4.so(SAMBA_4.15.13_GIT.710.7032820FCD150400.3.34.2_SUSE_OS15.0_X86_64)(64bit)libcom_err.so.2()(64bit)libcommon-auth-samba4.so()(64bit)libcommon-auth-samba4.so(SAMBA_4.15.13_GIT.710.7032820FCD150400.3.34.2_SUSE_OS15.0_X86_64)(64bit)libdbwrap-samba4.so()(64bit)libdbwrap-samba4.so(SAMBA_4.15.13_GIT.710.7032820FCD150400.3.34.2_SUSE_OS15.0_X86_64)(64bit)libdcerpc-binding.so.0()(64bit)libdcerpc-binding.so.0(DCERPC_BINDING_0.0.1)(64bit)libdcerpc-samba-samba4.so()(64bit)libdcerpc-samba-samba4.so(SAMBA_4.15.13_GIT.710.7032820FCD150400.3.34.2_SUSE_OS15.0_X86_64)(64bit)libdcerpc-samba4.so()(64bit)libdcerpc-samba4.so(SAMBA_4.15.13_GIT.710.7032820FCD150400.3.34.2_SUSE_OS15.0_X86_64)(64bit)libdcerpc-server-core.so.0()(64bit)libdcerpc-server-core.so.0(DCERPC_SERVER_CORE_0.0.1)(64bit)libflag-mapping-samba4.so()(64bit)libflag-mapping-samba4.so(SAMBA_4.15.13_GIT.710.7032820FCD150400.3.34.2_SUSE_OS15.0_X86_64)(64bit)libgenrand-samba4.so()(64bit)libgenrand-samba4.so(SAMBA_4.15.13_GIT.710.7032820FCD150400.3.34.2_SUSE_OS15.0_X86_64)(64bit)libgensec-samba4.so()(64bit)libgensec-samba4.so(SAMBA_4.15.13_GIT.710.7032820FCD150400.3.34.2_SUSE_OS15.0_X86_64)(64bit)libgnutls.so.30()(64bit)libgnutls.so.30(GNUTLS_3_4)(64bit)libgnutls.so.30(GNUTLS_3_6_3)(64bit)libgse-samba4.so()(64bit)libgse-samba4.so(SAMBA_4.15.13_GIT.710.7032820FCD150400.3.34.2_SUSE_OS15.0_X86_64)(64bit)libidmap-samba4.so()(64bit)libidmap-samba4.so(SAMBA_4.15.13_GIT.710.7032820FCD150400.3.34.2_SUSE_OS15.0_X86_64)(64bit)libkrb5.so.3()(64bit)libkrb5.so.3(krb5_3_MIT)(64bit)libkrb5samba-samba4.so()(64bit)libkrb5samba-samba4.so(SAMBA_4.15.13_GIT.710.7032820FCD150400.3.34.2_SUSE_OS15.0_X86_64)(64bit)liblibcli-lsa3-samba4.so()(64bit)liblibcli-lsa3-samba4.so(SAMBA_4.15.13_GIT.710.7032820FCD150400.3.34.2_SUSE_OS15.0_X86_64)(64bit)liblibcli-netlogon3-samba4.so()(64bit)liblibcli-netlogon3-samba4.so(SAMBA_4.15.13_GIT.710.7032820FCD150400.3.34.2_SUSE_OS15.0_X86_64)(64bit)liblibsmb-samba4.so()(64bit)liblibsmb-samba4.so(SAMBA_4.15.13_GIT.710.7032820FCD150400.3.34.2_SUSE_OS15.0_X86_64)(64bit)libmsrpc3-samba4.so()(64bit)libmsrpc3-samba4.so(SAMBA_4.15.13_GIT.710.7032820FCD150400.3.34.2_SUSE_OS15.0_X86_64)(64bit)libndr-samba-samba4.so()(64bit)libndr-samba-samba4.so(SAMBA_4.15.13_GIT.710.7032820FCD150400.3.34.2_SUSE_OS15.0_X86_64)(64bit)libndr-samba4.so()(64bit)libndr-samba4.so(SAMBA_4.15.13_GIT.710.7032820FCD150400.3.34.2_SUSE_OS15.0_X86_64)(64bit)libndr-standard.so.0()(64bit)libndr-standard.so.0(NDR_STANDARD_0.0.1)(64bit)libndr.so.2()(64bit)libndr.so.2(NDR_0.0.1)(64bit)libndr.so.2(NDR_0.0.4)(64bit)libndr.so.2(NDR_0.2.0)(64bit)libnpa-tstream-samba4.so()(64bit)libnpa-tstream-samba4.so(SAMBA_4.15.13_GIT.710.7032820FCD150400.3.34.2_SUSE_OS15.0_X86_64)(64bit)libnss-info-samba4.so()(64bit)libnss-info-samba4.so(SAMBA_4.15.13_GIT.710.7032820FCD150400.3.34.2_SUSE_OS15.0_X86_64)(64bit)libpopt.so.0()(64bit)libpopt.so.0(LIBPOPT_0)(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.2.5)(64bit)libreplace-samba4.so()(64bit)libreplace-samba4.so(SAMBA_4.15.13_GIT.710.7032820FCD150400.3.34.2_SUSE_OS15.0_X86_64)(64bit)libsamba-credentials.so.1()(64bit)libsamba-credentials.so.1(SAMBA_CREDENTIALS_1.0.0)(64bit)libsamba-debug-samba4.so()(64bit)libsamba-debug-samba4.so(SAMBA_4.15.13_GIT.710.7032820FCD150400.3.34.2_SUSE_OS15.0_X86_64)(64bit)libsamba-errors.so.1()(64bit)libsamba-errors.so.1(SAMBA_ERRORS_1)(64bit)libsamba-hostconfig.so.0()(64bit)libsamba-hostconfig.so.0(SAMBA_HOSTCONFIG_0.0.1)(64bit)libsamba-modules-samba4.so()(64bit)libsamba-modules-samba4.so(SAMBA_4.15.13_GIT.710.7032820FCD150400.3.34.2_SUSE_OS15.0_X86_64)(64bit)libsamba-passdb.so.0()(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.2.0)(64bit)libsamba-security-samba4.so()(64bit)libsamba-security-samba4.so(SAMBA_4.15.13_GIT.710.7032820FCD150400.3.34.2_SUSE_OS15.0_X86_64)(64bit)libsamba-sockets-samba4.so()(64bit)libsamba-sockets-samba4.so(SAMBA_4.15.13_GIT.710.7032820FCD150400.3.34.2_SUSE_OS15.0_X86_64)(64bit)libsamba-util.so.0()(64bit)libsamba-util.so.0(SAMBA_UTIL_0.0.1)(64bit)libsamba3-util-samba4.so()(64bit)libsamba3-util-samba4.so(SAMBA_4.15.13_GIT.710.7032820FCD150400.3.34.2_SUSE_OS15.0_X86_64)(64bit)libsamdb-common-samba4.so()(64bit)libsamdb-common-samba4.so(SAMBA_4.15.13_GIT.710.7032820FCD150400.3.34.2_SUSE_OS15.0_X86_64)(64bit)libsecrets3-samba4.so()(64bit)libsecrets3-samba4.so(SAMBA_4.15.13_GIT.710.7032820FCD150400.3.34.2_SUSE_OS15.0_X86_64)(64bit)libsmbconf.so.0()(64bit)libsmbconf.so.0(SMBCONF_0.0.1)(64bit)libsmbd-shim-samba4.so()(64bit)libsmbd-shim-samba4.so(SAMBA_4.15.13_GIT.710.7032820FCD150400.3.34.2_SUSE_OS15.0_X86_64)(64bit)libsocket-blocking-samba4.so()(64bit)libsocket-blocking-samba4.so(SAMBA_4.15.13_GIT.710.7032820FCD150400.3.34.2_SUSE_OS15.0_X86_64)(64bit)libsys-rw-samba4.so()(64bit)libsys-rw-samba4.so(SAMBA_4.15.13_GIT.710.7032820FCD150400.3.34.2_SUSE_OS15.0_X86_64)(64bit)libtalloc.so.2()(64bit)libtalloc.so.2(TALLOC_2.0.2)(64bit)libtdb.so.1()(64bit)libtdb.so.1(TDB_1.2.1)(64bit)libtevent-util.so.0()(64bit)libtevent-util.so.0(TEVENT_UTIL_0.0.1)(64bit)libtevent.so.0()(64bit)libtevent.so.0(TEVENT_0.9.12)(64bit)libtevent.so.0(TEVENT_0.9.14)(64bit)libtevent.so.0(TEVENT_0.9.20)(64bit)libtevent.so.0(TEVENT_0.9.21)(64bit)libtevent.so.0(TEVENT_0.9.36)(64bit)libtevent.so.0(TEVENT_0.9.37)(64bit)libtevent.so.0(TEVENT_0.9.9)(64bit)libtrusts-util-samba4.so()(64bit)libtrusts-util-samba4.so(SAMBA_4.15.13_GIT.710.7032820FCD150400.3.34.2_SUSE_OS15.0_X86_64)(64bit)libutil-tdb-samba4.so()(64bit)libutil-tdb-samba4.so(SAMBA_4.15.13_GIT.710.7032820FCD150400.3.34.2_SUSE_OS15.0_X86_64)(64bit)libwbclient.so.0()(64bit)libwbclient.so.0(WBCLIENT_0.10)(64bit)libwbclient.so.0(WBCLIENT_0.13)(64bit)libwbclient.so.0(WBCLIENT_0.9)(64bit)libwinbind-client-samba4.so()(64bit)libwinbind-client-samba4.so(SAMBA_4.15.13_GIT.710.7032820FCD150400.3.34.2_SUSE_OS15.0_X86_64)(64bit)pam-configrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)samba-clientsamba-winbind-libs4.15.13+git.710.7032820fcd-150400.3.34.23.0.4-14.6.0-14.0-15.2-14.15.13+git.710.7032820fcd4.15.13+git.710.7032820fcd4.14.3e[J@e@d.@d-@d@dJc@cS@ccR@cctc5cM@b@b@b@ba@bascabrero@suse.descabrero@suse.descabrero@suse.denopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comscabrero@suse.denopower@suse.comscabrero@suse.descabrero@suse.denopower@suse.comnopower@suse.comscabrero@suse.denopower@suse.comnopower@suse.comscabrero@suse.denopower@suse.comscabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comddiss@suse.comnopower@suse.comdmulder@suse.comdmulder@suse.comnopower@suse.comscabrero@suse.descabrero@suse.dedimstar@opensuse.orgscabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comnopower@suse.comnopower@suse.comscabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comnopower@suse.comscabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.denopower@suse.comscabrero@suse.deddiss@suse.comddiss@suse.comddiss@suse.comscabrero@suse.descabrero@suse.dedmulder@suse.comnopower@suse.comscabrero@suse.descabrero@suse.dedmulder@suse.comscabrero@suse.descabrero@suse.denopower@suse.comnopower@suse.comnopower@suse.comdmulder@suse.comscabrero@suse.denopower@suse.comddiss@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comscabrero@suse.denopower@suse.comnopower@suse.comjmcdonough@suse.comnopower@suse.comscabrero@suse.denopower@suse.comnopower@suse.comddiss@suse.comddiss@suse.comnopower@suse.comnopower@suse.comddiss@suse.comnopower@suse.comdmulder@suse.comdmulder@suse.comddiss@suse.comscabrero@suse.dedmulder@suse.comddiss@suse.comnopower@suse.comjengelh@inai.dedmulder@suse.comscabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comdmulder@suse.comdmulder@suse.comjmcdonough@suse.comdmulder@suse.comscabrero@suse.dedmulder@suse.comscabrero@suse.dedmulder@suse.comdmulder@suse.comvcizek@suse.comdmulder@suse.comdmulder@suse.comnopower@suse.comscabrero@suse.dejmcdonough@suse.comscabrero@suse.deaaptel@suse.comjengelh@inai.dedimstar@opensuse.orgdmulder@suse.comjmcdonough@suse.comdavid.mulder@suse.comjmcdonough@suse.comaaptel@suse.comdmulder@suse.comscabrero@suse.comscabrero@suse.comkukuk@suse.dedavid.mulder@suse.comscabrero@suse.comrbrown@suse.comdmulder@suse.comscabrero@suse.comdimstar@opensuse.orgscabrero@suse.comaaptel@suse.comnopower@suse.comnopower@suse.comaaptel@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comddiss@suse.comnopower@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comdmulder@suse.comnopower@suse.comjmcdonough@suse.comaaptel@suse.comkukuk@suse.comkukuk@suse.denopower@suse.comaaptel@suse.comdmulder@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comddiss@suse.comjmcdonough@suse.comddiss@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comjmcdonough@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comtchvatal@suse.comlmuelle@suse.comnopower@suse.comcrrodriguez@opensuse.orglmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comnoel.power@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comnopower@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.commpluskal@suse.comlmuelle@suse.comnopower@suse.deddiss@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.denopower@suse.delmuelle@suse.comnopower@suse.deddiss@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.com- Add "net offlinejoin composeodj" command; (bsc#1214076);- CVE-2023-4091: samba: Client can truncate file with read-only permissions; (bsc#1215904); (bso#15439). - CVE-2023-42669: samba: rpcecho, enabled and running in AD DC, allows blocking sleep on request; (bso#1215905); (bso#15474). - CVE-2023-4154: samba: dirsync allows SYSTEM access with only "GUID_DRS_GET_CHANGES" right, not "GUID_DRS_GET_ALL_CHANGES; (bsc#1215908); (bso#15424).- Move libcluster-samba4.so from samba-libs to samba-client-libs; (bsc#1213940);- secure channel faulty since Windows 10/11 update 07/2023; (bso#15418); (bsc#1213384).- CVE-2022-2127: lm_resp_len not checked properly in winbindd_pam_auth_crap_send; (bso#15072); (bsc#1213174). - CVE-2023-34966: Samba Spotlight mdssvc RPC Request Infinite Loop Denial-of-Service Vulnerability; (bso#15340); (bsc#1213173). - CVE-2023-34967: Samba Spotlight mdssvc RPC Request Type Confusion Denial-of-Service Vulnerability; (bso#15341); (bsc#1213172). - CVE-2023-34968: Spotlight server-side Share Path Disclosure; (bso#15388); (bsc#1213171).- CVE-2023-0922: Samba AD DC admin tool samba-tool sends passwords in cleartext; (bso#15315); (bsc#1209481). - CVE-2023-0225: Samba AD DC "dnsHostname" attribute can be deleted by unprivileged authenticated users; (bso#15276); (bsc#1209483). - CVE-2023-0614: samba: Access controlled AD LDAP attributes can be discovered; (bso#15270); (bsc#1209485).- Prevent use after free of messaging_ctdb_fde_ev structs; (bso#15293); (bsc#1207416).- CVE-2022-38023 Additional patches for the PDC role's netlogon server; (bso#15240); (bsc#1206504);- CVE-2021-20251: samba: Bad password count not incremented atomically; (bso#14611); (bsc#1206546).- Update to 4.15.13 * CVE-2022-37966 rc4-hmac Kerberos session keys issued to modern servers; (bso#15237); (bsc#1205385); * CVE-2022-37967 Kerberos constrained delegation ticket forgery possible against Samba AD DC; (bso#15231); (bsc#1205386); * CVE-2022-38023 RC4/HMAC-MD5 NetLogon Secure Channel is weak and should be avoided; (bso#15240); (bsc#1206504); * filter-subunit is inefficient with large numbers of knownfails; (bso#15258); * The KDC logic arround msDs-supportedEncryptionTypes differs from Windows; (bso#13135); * Windows 11 22H2 and Samba-AD 4.15 Kerberos login issue; (bso#15197); - Adjust the systemd drop-in file for named service; (bsc#1201689); * Paths are additive so do not repeat paths from named.service * Prefix the samba DLZ directory with "-" to ignore this path if it does not exists- Install a systemd drop-in file for named service to allow read/write access to the DLZ directory; (bsc#1201689);- Update to 4.15.12 * CVE-2022-42898: samba: heimdal: Samba buffer overflow vulnerabilities on 32-bit systems; (bso#15203); (bsc#1205126). - Update to 4.15.11 * Allow rebuild of Centos 8 images after move to vault for Samba 4.15; (bso#15193). * CVE-2022-3437: samba: Buffer overflow in Heimdal unwrap_des3(); (bso#15134); (bsc#1204254)- Update to 4.15.10 * Possible use after free of connection_struct when iterating smbd_server_connection->connections; (bso#15128); (bsc#1200102). * smbXsrv_connection_shutdown_send result leaked; (bso#15174). * Spotlight RPC service returns wrong response when Spotlight is disabled on a share; (bso#15086). * acl_xattr VFS module may unintentionally use filesystem permissions instead of ACL from xattr; (bso#15126). * Missing SMB2-GETINFO access checks from MS-SMB2 3.3.5.20.1; (bso#15153). * assert failed: !is_named_stream(smb_fname)") at ../../lib/util/fault.c:197; (bso#15161). * Missing READ_LEASE break could cause data corruption; (bso#15148). * rpcclient can crash using setuserinfo(2); (bso#15124). * Samba fails to build with glibc 2.36 caused by including in libreplace; (bso#15132). * SMB1 negotiation can fail to handle connection errors; (bso#15152). * samba-tool domain join segfault when joining a samba ad domain; (bso#15078). - Update to 4.15.9 * CVE-2022-32742:SMB1 code does not correct verify SMB1write, SMB1write_and_close, SMB1write_and_unlock lengths; (bso#15085); (bsc#1201496). * CVE-2022-32746: samba: Use-after-free occurring in database audit logging; (bso#15009); (bso#15096); (bsc#1201490). * CVE-2022-2031: samba, ldb: AD users can bypass certain restrictions associated with changing passwords; (bso#15047); (bsc#1201495); * CVE-2022-32745: samba: ldb: AD users can crash the server process with an LDAP add or modify request; (bso#15008); (bso#15096); (bsc#1201492). * CVE-2022-2031: samba, ldb: AD users can bypass certain restrictions associated with changing passwords; (bso#15047); (bsc#1201495); * CVE-2022-32744: samba, ldb: AD users can forge password change requests for any user; (bso#15074); (bso#15047); (bsc#1201493).- CVE-2022-1615: Do not ignore errors in random number generation; (bso#15103); (bsc#1202976); - CVE-2022-32743: Implement validated dnsHostName write rights; (bso#14833); (bsc#1202803);- Fix Use after free when iterating smbd_server_connection->connections after tree disconnect failure; (bso#15128); (bsc#1200102).- CVE-2022-32746: samba: Use-after-free occurring in database audit logging; (bso#15009); (bso#15096); (bsc#1201490). - CVE-2022-32745: samba: ldb: AD users can crash the server process with an LDAP add or modify request; (bso#15008); (bso#15096); (bsc#1201492). - CVE-2022-2031: samba, ldb: AD users can bypass certain restrictions associated with changing passwords; (bso#15047); (bsc#1201495); - CVE-2022-32742:SMB1 code does not correct verify SMB1write, SMB1write_and_close, SMB1write_and_unlock lengths; (bso#15085); (bsc#1201496). - CVE-2022-32744: samba, ldb: AD users can forge password change requests for any user; (bso#15074); (bso#15047); (bsc#1201493).- Update to 4.15.8 * Use pathref fd instead of io fd in vfs_default_durable_cookie; (bso#15042); * Setting fruit:resource = stream in vfs_fruit causes a panic; (bso#15099); * Add support for bind 9.18; (bso#14986); * logging dsdb audit to specific files does not work; (bso#15076); * vfs_gpfs with vfs_shadowcopy2 fail to restore file if original file had been deleted; (bso#15069); * netgroups support removed; (bso#15087); (bsc#1199247); * net ads info shows LDAP Server: 0.0.0.0 depending on contacted server; (bso#14674); (bsc#1199734); * waf produces incorrect names for python extensions with Python 3.11; (bso#15071); * smbclient commands del & deltree fail with NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100); (bsc#1200556); * vfs_gpfs recalls=no option prevents listing files; (bso#15055); * waf produces incorrect names for python extensions with Python 3.11; (bso#15071); * Compile error in source3/utils/regedit_hexedit.c; (bso#15091); * ldconfig: /lib64/libsmbconf.so.0 is not a symbolic link; (bso#15108); * smbd doesn't handle UPNs for looking up names; (bso#15054); * Out-by-4 error in smbd read reply max_send clamp; (bso#14443); - Move pdb backends from package samba-libs to package samba-client-libs and remove samba-libs requirement from samba-winbind; (bsc#1200964); (bsc#1198255); - Use the canonical realm name to refresh the Kerberos tickets; (bsc#1196224); (bso#14979);- Fix smbclient commands del & deltree failing with NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100); (bsc#1200556).- Revert NIS support removal; (bsc#1199247);- Use requires_eq macro to require the libldb2 version available at samba-dsdb-modules build time; (bsc#1199362);- Add missing samba-client requirement to samba-winbind package; (bsc#1198255);- Update to 4.15.7 * Share and server swapped in smbget password prompt; (bso#14831); * Durable handles won't reconnect if the leased file is written to; (bso#15022); * rmdir silently fails if directory contains unreadable files and hide unreadable is yes; (bso#15023); * SMB2_CLOSE_FLAGS_FULL_INFORMATION fails to return information on renamed file handle; (bso#15038); * vfs_shadow_copy2 breaks "smbd async dosmode" sync fallback; (bso#14957); * shadow_copy2 fails listing snapshotted dirs with shadow:fixinodes; (bso#15035); * PAM Kerberos authentication incorrectly fails with a clock skew error; (bso#15046); * username map - samba erroneously applies unix group memberships to user account entries; (bso#15041); * NT_STATUS_ACCESS_DENIED translates into EPERM instead of EACCES in SMBC_server_internal; (bso#14983); * Simple bind doesn't work against an RODC (with non-preloaded users); (bso#13879); * Crash of winbind on RODC; (bso#14641); * uncached logon on RODC always fails once; (bso#14865); * KVNO off by 100000; (bso#14951); * LDAP simple binds should honour "old password allowed period"; (bso#15001); * wbinfo -a doesn't work reliable with upn names; (bso#15003); * Simple bind doesn't work against an RODC (with non-preloaded users); (bso#13879); * Uninitialized litemask in variable in vfs_gpfs module; (bso#15027); * Regression: create krb5 conf = yes doesn't work with a single KDC; (bso#15016);- Add provides to samba-client-libs package to fix upgrades from previous versions; (bsc#1197995);- Add missing samba-libs requirement to samba-winbind package; (bsc#1198255);- Update to 4.15.6 * Renaming file on DFS root fails with NT_STATUS_OBJECT_PATH_NOT_FOUND; (bso#14169); * Samba does not response STATUS_INVALID_PARAMETER when opening 2 objects with same lease key; (bso#14737); * NT error code is not set when overwriting a file during rename in libsmbclient; (bso#14938); * Fix ldap simple bind with TLS auditing; (bso#14996); * net ads info shows LDAP Server: 0.0.0.0 depending on contacted server; (bso#14674); * Problem when winbind renews Kerberos; (bso#14979); (bsc#1196224); * pam_winbind will not allow gdm login if password about to expire; (bso#8691); * virusfilter_vfs_openat: Not scanned: Directory or special file; (bso#14971); * DFS fix for AIX broken; (bso#13631); * Solaris and AIX acl modules: wrong function arguments; (bso#14974); * Function aixacl_sys_acl_get_file not declared / coredump; (bso#7239); * Regression: Samba 4.15.2 on macOS segfaults intermittently during strcpy in tdbsam_getsampwnam; (bso#14900); * Fix a use-after-free in SMB1 server; (bso#14989); * smb2_signing_decrypt_pdu() may not decrypt with gnutls_aead_cipher_decrypt() from gnutls before 3.5.2; (bso#14968); * Changing the machine password against an RODC likely destroys the domain join; (bso#14984); * authsam_make_user_info_dc() steals memory from its struct ldb_message *msg argument; (bso#14993); * Use Heimdal 8.0 (pre) rather than an earlier snapshot; (bso#14995); * Samba autorid fails to map AD users if id rangesize fits in the id range only once; (bso#14967);- Fix mismatched version of libldb2; (bsc#1196788). - Drop obsolete SuSEfirewall2 service files.- Drop obsolete Samba fsrvp v0->v1 state upgrade functionality; (bsc#1080338).- Fix ntlm authentications with "winbind use default domain = yes"; (bso#13126); (bsc#1173429); (bsc#1196308).- Fix samba-ad-dc status warning notification message by disabling systemd notifications in bgqd; (bsc#1195896); (bso#14947).- libldb version mismatch in Samba dsdb component; (bsc#1118508);- Update to 4.15.5 * CVE-2021-44141: UNIX extensions in SMB1 disclose whether the outside target of a symlink exists; (bso#14911); (bsc#1193690). * CVE-2021-44142: Out-of-Bound Read/Write on Samba vfs_fruit module; (bso#14914); (bsc#1194859). * CVE-2022-0336: Re-adding an SPN skips subsequent SPN conflict checks; bso#14950); (bsc#1195048).- CVE-2021-44141: Information leak via symlinks of existance of files or directories outside of the exported share; (bso#14911); (bsc#1193690); - CVE-2021-44142: Out-of-bounds heap read/write vulnerability in VFS module vfs_fruit allows code execution; (bso#14914); (bsc#1194859); - CVE-2022-0336: Samba AD users with permission to write to an account can impersonate arbitrary services; (bso#14950); (bsc#1195048);- Update to 4.15.4 * Duplicate SMB file_ids leading to Windows client cache poisoning; (bso#14928); * Failed to parse NTLMv2_RESPONSE length 95 - Buffer Size Error - NT_STATUS_BUFFER_TOO_SMALL; (bso#14932); * kill_tcp_connections does not work; (bso#14934); * Can't connect to Windows shares not requiring authentication using KDE/Gnome; (bso#14935); * smbclient -L doesn't set "client max protocol" to NT1 before calling the "Reconnecting with SMB1 for workgroup listing" path; (bso#14939); * Cross device copy of the crossrename module always fails; (bso#14940); * symlinkat function from VFS cap module always fails with an error; (bso#14941); * Fix possible fsp pointer deference; (bso#14942); * Missing pop_sec_ctx() in error path inside close_directory(); (bso#14944); * "smbd --build-options" no longer works without an smb.conf file; (bso#14945);- Use pkgconfig(krb5) as dependency for the -devel package: allow OBS to pick the right flavor of krb5-devel (full vs mini). - Do not require the 'krb5' symbol by samba-client-libs: this package has an automatic dependency due to linkage on libgssapi_krb5.so.2. Automatic deps are always better. - Do not require the 'krb5' symbol from samba-libs: samba-libs requires samba-client-libs, which in turn requires krb5 libraries. Samba-libs itself has no need for krb5 (but get it indirectly anyway).- Reorganize libs packages. Split samba-libs into samba-client-libs, samba-libs, samba-winbind-libs and samba-ad-dc-libs, merging samba public libraries depending on internal samba libraries into these packages as there were dependency problems everytime one of these public libraries changed its version (bsc#1192684). The devel packages are merged into samba-devel. - Rename package samba-core-devel to samba-devel - Add python-rpm-macros to build requirements - Update the symlink create by samba-dsdb-modules to private samba ldb modules following libldb2 changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba- Update to 4.15.3 * Recursive directory delete with veto files is broken in 4.15.0; (bso#14878); * A directory containing dangling symlinks cannot be deleted by SMB2 alone when they are the only entry in the directory; (bso#14879); * SIGSEGV in rmdir_internals/synthetic_pathref - dirfsp is used uninitialized in rmdir_internals(); (bso#14892); * MaxQueryDuration not honoured in Samba AD DC LDAP; (bso#14694); * The CVE-2020-25717 username map [script] advice has undesired side effects for the local nt token; (bso#14901); (bsc#1192849); * User with multiple spaces (eg FredNurk) become un-deletable; (bso#14902); * Avoid storing NTTIME_THAW (-2) as value on disk; (bso#14127); * smbXsrv_client_global record validation leads to crash if existing record points at non-existing process; (bso#14882); * Crash in vfs_fruit asking for fsp_get_io_fd() for an XATTR call; (bso#14890); * Samba process doesn't log to logfile; (bso#14897); * set_ea_dos_attribute() fallback calling get_file_handle_for_metadata() triggers locking.tdb assert; (bso#14907); * Kerberos authentication on standalone server in MIT realm broken; (bso#14922); * Segmentation fault when joining the domain; (bso#14923); * Support for ROLE_IPA_DC is incomplete; (bso#14903); * rpcclient cannot connect to ncacn_ip_tcp services anymore; (bso#14767); * winexe crashes since 4.15.0 after popt parsing; (bso#14893); * net ads status -P broken in a clustered environment; (bso#14908); * Memory leak if ioctl(FSCTL_VALIDATE_NEGOTIATE_INFO) fails before smbd_smb2_ioctl_send; (bso#14788); * winbindd doesn't start when "allow trusted domains" is off; (bso#14899); * smbclient login without password using '-N' fails with NT_STATUS_INVALID_PARAMETER on Samba AD DC; (bso#14883); * A schannel client incorrectly detects a downgrade connecting to an AES only server; (bso#14912); * Possible null pointer dereference in winbind; (bso#14921); * Fix -k legacy option for client tools like smbclient, rpcclient, net, etc.; (bso#14846); * Add Debian 11 CI bootstrap support; (bso#14872); * Crash in recycle_unlink_internal(); (bso#14888);- Fix dependency problem upgrading from libndr0 to libndr2 and from libsamba-credentials0 to libsamba-credentials1; (bsc#1192684);- Fix regression introduced by CVE-2020-25717 patches, winbindd does not start when 'allow trusted domains' is off; (bso#14899); - Update to 4.15.2 * CVE-2016-2124: SMB1 client connections can be downgraded to plaintext authentication; (bso#12444); (bsc#1014440); * CVE-2020-25717: A user on the domain can become root on domain members; (bso#14556); (bsc#1192284); * CVE-2020-25718: Samba AD DC did not correctly sandbox Kerberos tickets issued by an RODC; (bso#14558); (bsc#1192246); * CVE-2020-25719: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets; (bso#14561); (bsc#1192247); * CVE-2020-25721: Kerberos acceptors need easy access to stable AD identifiers (eg objectSid); (bso#14557); (bsc#1192505); * CVE-2020-25722: Samba AD DC did not do suffienct access and conformance checking of data stored; (bso#14564); (bsc#1192283); * CVE-2021-3738: Use after free in Samba AD DC RPC server; (bso#14468); (bsc#1192215); * CVE-2021-23192: Subsequent DCE/RPC fragment injection vulnerability; (bso#14875); (bsc#1192214); - Update to 4.15.1 * vfs_shadow_copy2: core dump in make_relative_path; (bso#14682); * Log clutter from filename_convert_internal; (bso#14685); * MacOSX compilation fixes; (bso#14862); * rodc_rwdc test flaps; (bso#14868); * Provide a fix for MS CVE-2020-17049 in Samba [SECURITY] 'Bronze bit' S4U2Proxy Constrained Delegation bypass in Samba with embedded Heimdal; (bso#14642); * Python ldb.msg_diff() memory handling failure; (bso#14836); * "in" operator on ldb.Message is case sensitive; (bso#14845); * Release LDB 2.4.1 for Samba 4.15.1; (bso#14848); * samldb_krbtgtnumber_available() looks for incorrect string; (bso#14854); * Fix Samba support for UF_NO_AUTH_DATA_REQUIRED; (bso#14871); * Allow special chars like "@" in samAccountName when generating the salt; (bso#14874); * Correctly ignore comments in CTDB public addresses file; (bso#14826); * Fix transit path validation; (bso#12998); * Fix that child winbindd logs to log.winbindd instead of log.wb-; (bso#14852); * SMB3 cancel requests should only include the MID together with AsyncID when AES-128-GMAC is used; (bso#14855); * Prepare to operate with MIT krb5 >= 1.20; (bso#14870); * Heimdal prefers RC4 over AES for machine accounts; (bso#14864);- Enable samba-tool without ad dc.- Adjust spec to use pam macros; (bsc#1191046).- Adjust spec for size * allow some Recommends instead Requires to be configured for cifs-utils, samba-libs-python3 & samba-gpupdate; (bsc#1182847). * remove fam, undocumented and unneeded.- Add missing build dependency on bison when building with the embedded Heimdal Kerberos- Update to 4.15.0 * Removed SMB development dialects SMB2_22, SMB2_24 and SMB3_10 * VFS layer modernized. * Add the ability to set allow/deny lists for zone transfer clients in Bind DLZ plugin * Server multi-channel support no longer experimental * Improved command line user experience, unifying the options in different commands * Winbindd no longer scans trusted domains on startup and will use enterprise principals by default. * The net utility is now able to support the offline domain join feature * New options for 'samba-tool dns zoneoptions' for aging control and to mark old records as static or dynamic * DNS tombstones are now deleted as appropriate and use a consistent timestamp format * The 'samba-tool dns update' command validates and rejects now malformed IPv4 and IPv6 addresses * The 'samba-tool domain backup' command correctly takes out locks against concurrent modification during backup when using the LMDB backend * TruACL support has been removed * NIS support has been removed- Fix 'net rpc' authentication when using the machine account; (bsc#1189017); (bso#14796);- Fix dependency problem upgrading from libndr0 to libndr1; (bsc#1189875); - Fix dependency problem upgrading from libsmbldap0 to libsmbldap2; (bsc#1189875); - Fix wrong kvno exported to keytab after net ads changetrustpw due to replication delay; (bsc#1188727); - Add Certificate Auto Enrollment Policy; (jsc#SLE-18456). - Update to 4.13.10 * s3: smbd: Ensure POSIX default ACL is mapped into returned Windows ACL for directory handles; (bso#14708); * Take a copy to make sure we don't reference free'd memory; (bso#14721); * s3: lib: Fix talloc heirarcy error in parent_smb_fname(); (bso#14722); * s3: smbd: Remove erroneous TALLOC_FREE(smb_fname_parent) in change_file_owner_to_parent() error path; (bso#14736); * samba-tool: Give better error information when the 'domain backup restore' fails with a duplicate SID; (bso#14575); * smbd: Correctly initialize close timestamp fields; (bso#14714); * Spotlight RPC service doesn't work with vfs_glusterfs; (bso#14740); * ctdb: Fix a crash in run_proc_signal_handler(); (bso#14475); * gensec_krb5: Restore ipv6 support for kpasswd; (bso#14750); * smbXsrv_{open,session,tcon}: Protect smbXsrv_{open,session,tcon}_global_traverse_fn against invalid records; (bso#14752); * samba-tool domain backup offline doesn't work against bind DLZ backend; (bso#14027); * netcmd: Use next_free_rid() function to calculate a SID for restoring a backup; (bso#14669); - Update to 4.13.9 * s3: smbd: SMB1 SMBsplwr doesn't send a reply packet on success; (bso#14696); * Add documentation for dsdb_group_audit and dsdb_group_json_audit to "log level", synchronise "log level" in smb.conf with the code; (bso#14689); * Fix smbd panic when two clients open same file; (bso#14672); * Fix memory leak in the RPC server; (bso#14675); * s3: smbd: Fix deferred renames; (bso#14679); * s3-iremotewinspool: Set the per-request memory context; (bso#14675); * rpc_server3: Fix a memleak for internal pipes; (bso#14675); * third_party: Update socket_wrapper to version 1.3.2; (bso#11899); * third_party: Update socket_wrapper to version 1.3.3; (bso#14639); * idmap_rfc2307 and idmap_nss return wrong mapping for uid/gid conflict; (bso#14663); * Fix the build on OmniOS; (bso#14288); - Update to 4.13.8 * CVE-2021-20254: Fix buffer overrun in sids_to_unixids(); (bso#14571 - Update to 4.13.7 * Release with dependency on ldb version 2.2.1.- CVE-2021-20254 Buffer overrun in sids_to_unixids(); (bnc#14571); (bsc#1184677).- Fix offline domain backup not possible using lmdb version >= 0.9.26; (bso#14676); - Require libldb >= 2.2.1; (bsc#1183572); (bsc#1183574); - Update to 4.13.6 * CVE-2020-27840: samba: Unauthenticated remote heap corruption via bad DNs; (bso#14595); (bsc#1183572). * CVE-2021-20277: samba: out of bounds read in ldb_handler_fold; (bso#14655); (bsc#1183574). - Update to 4.13.5 * s3:modules:vfs_virusfilter: Recent talloc changes cause infinite start-up failure; (bso#14634); * s3: libsmb: Add missing cli_tdis() in error path if encryption setup failed on temp proxy connection; (bso#13992); * smbd: In conn_force_tdis_done() when forcing a connection closed force a full reload of services; (bso#14604); * dbcheck: Check Deleted Objects and reduce noise in reports about expired tombstones (bso#14593); * s3: Fix fcntl waf configure check; (bso#14503); * s3/auth: Implement "winbind:ignore domains"; (bso#14602); * smbd: Use fsp->conn->session_info for the initial delete-on-close token; (bso#14617); * s3: VFS: nfs4_acls. Add missing TALLOC_FREE(frame) in error path; (bso#14648); * classicupgrade: Treat old never expires value right; (bso#14624); * g_lock: Fix uninitalized variable reads; (bso#14636); * s3:pysmbd: Fix fd leak in py_smbd_create_file(); (bso#13898); * lib:util: Avoid free'ing our own pointer; (bso#14625); * HEIMDAL: krb5_storage_free(NULL) should work; (bso#12505);- Spec file fixes around systemd and requires; (bsc#1182830); - Align systemd service unit files with upstream provided ones.- Update to 4.13.4 * Work around special SMB2 IOCTL response behavior of NetApp Ontap 7.3.7; (bso#14607); * Temporary DFS share setup doesn't set case parameters in the same way as a regular share definition does; (bso#14612); * lib: Avoid declaring zero-length VLAs in various messaging functions; (bso#14605); * Do not create an empty DB when accessing a sam.ldb; (bso#14579); * vfs_fruit may close wrong backend fd; (bso#14596); * Temporary DFS share setup doesn't set case parameters in the same way as a regular share definition does; (bso#14612); * vfs_virusfilter: Allocate separate memory for config char*; (bso#14606); * vfs_fruit may close wrong backend fd; (bso#14596); * Work around special SMB2 IOCTL response behavior of NetApp Ontap 7.3.7; (bso#14607); * The cache directory for the user gencache should be created recursively; (bso#14601); * Be more flexible with repository names in CentOS 8 test environments; (bso#14594);- Uninstalling samba-client: Failed to disable unit, cifs.service does not exists; (bsc#1180388);- Update to 4.13.3 + libcli: smb2: Never print length if smb2_signing_key_valid() fails for crypto blob; (bso#14210); + s3: modules: gluster. Fix the error I made in preventing talloc leaks from a function; (bso#14486); + s3: smbd: Don't overwrite contents of fsp->aio_requests[0] with NULL via TALLOC_FREE(); (bso#14515); + s3: spoolss: Make parameters in call to user_ok_token() match all other uses; (bso#14568); + s3: smbd: Quiet log messages from usershares for an unknown share; (bso#14590); + samba process does not honor max log size; (bso#14248); + vfs_zfsacl: Add missing inherited flag on hidden "magic" everyone@ ACE; (bso#14587); + s3-libads: Pass timeout to open_socket_out in ms; (bso#13124); + s3-vfs_glusterfs: Always disable write-behind translator; (bso#14486); + smbclient: Fix recursive mget; (bso#14517); + clitar: Use do_list()'s recursion in clitar.c; (bso#14581); + manpages/vfs_glusterfs: Mention silent skipping of write-behind translator; (bso#14486); + vfs_shadow_copy2: Preserve all open flags assuming ROFS; (bso#14573); + interface: Fix if_index is not parsed correctly; (bso#14514);- Update to 4.13.2 + s3: modules: vfs_glusterfs: Fix leak of char **lines onto mem_ctx on return; (bso#14486); + RN: vfs_zfsacl: Only grant DELETE_CHILD if ACL tag is special; (bso#14471); + smb.conf.5: Add clarification how configuration changes reflected by Samba; (bso#14538); + daemons: Report status to systemd even when running in foreground; (bso#14552); + DNS Resolver: Support both dnspython before and after 2.0.0; (bso#14553); + s3-vfs_glusterfs: Refuse connection when write-behind xlator is present; (bso#14486); + provision: Add support for BIND 9.16.x; (bso#14487); + ctdb-common: Avoid aliasing errors during code optimization; (bso#14537); + libndr: Avoid assigning duplicate versions to symbols; (bso#14541); + docs: Fix default value of spoolss:architecture; (bso#14522); + winbind: Fix a memleak; (bso#14388); + s4:dsdb:acl_read: Implement "List Object" mode feature; (bso#14531); + docs-xml/manpages: Add warning about write-behind translator for vfs_glusterfs; (bso#14486); + nsswitch/nsstest.c: Avoid nss function conflicts with glibc nss.h. + vfs_shadow_copy2: Avoid closing snapsdir twice; (bso#14530); + third_party: Update resolv_wrapper to version 1.1.7; (bso#14547); + examples:auth: Do not install example plugin; (bso#14550); + ctdb-recoverd: Drop unnecessary and broken code; (bso#14513); + RN: vfs_zfsacl: Only grant DELETE_CHILD if ACL tag is special; (bso#14471);- Adjust smbcacls '--propagate-inheritance' feature to align with upstream; (bsc#1178469).- Update to samba 4.13.1 + CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with easily crafted records; (bsc#1177613); (bso#14472); + CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994); (bso#14436); + CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify; (bsc#1173902); (bso#14434); - Adjust systemd tmpfiles.d configuration, use /run/samba instead of /var/run/samba; (bsc#1177355);- Fix vfs_ceph query_directory regression; (bso#14519) - Drop liburing-devel for SLE15-SP2; (bsc#1177245)- Register CTDB recovery lock holder with ceph-mgr - Add liburing-devel dependency- Update to samba 4.13.0 + Require Python 3.6 + Move wide links functionality into VFS module + Deprecate NT4-like 'classic' Samba domain controllers + Deprecate SMBv1 only protocol options + Remove deprecated "ldap ssl ads" option + Unify asynchronous DCE-RPC server; (jsc#SES-645) + Replay multichannel lease break requests; (bso#11897); (jsc#SES-655) + Drop internal byteorder.h header from util-devel package + Remove final code for the AD DC LDAP backend + Add AD DC Group Policy Scripts + Only use gnutls_aead_cipher_encryptv2() for GnuTLS > 3.6.14; (bso#14399) + Fix %U substitutions if it contains a domain name; (bso#14467) + Fix krb5.conf creation for 'net ads join'; (bso#14479) + Fix build problem if libbsd-dev is not installed; (bso#14482) + Toggle vfs_snapper using "--with-shared-modules"; (bso#14437) + Fix idmap_ad RFC4511 response handling; (bso#14465) + Fix panic in get_lease_type(); (bso#14428)- Update to samba 4.11.13 + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2 against unencrypted passwords; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Support "server require schannel:WORKSTATION$ = no" about unsecure configurations; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): s4 torture rpc: repeated bytes in client challenge; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): libcli/auth: Reject weak client challenges in netlogon_creds_server_init() "server require schannel:WORKSTATION$ = no"; (bsc#1176579); (bso#14497); - Update to samba 4.11.12 + s3: libsmb: Fix SMB2 client rename bug to a Windows server; (bso#14403); + dsdb: Allow "password hash userPassword schemes = CryptSHA256" to work on RHEL7; (bso#14424); + dbcheck: Allow a dangling forward link outside our known NCs; (bso#14450); + lib/debug: Set the correct default backend loglevel to MAX_DEBUG_LEVEL; (bso#14426); + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428); + lib/util: do not install "test_util_paths"; (bso#14370); + lib:util: Fix smbclient -l basename dir; (bso#14345); + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428); + util: Allow symlinks in directory_create_or_exist; (bso#14166); + docs: Fix documentation for require_membership_of of pam_winbind; (bso#14358); + s3:winbind:idmap_ad: Make failure to get attrnames for schema mode fatal; (bso#14425);- Add obsoletes to libsmbldap2 package to fix upgrades from previous versions; (bsc#1172810);- Fix net command unable to negotiate SMB2; (bsc#1174120);- Update to samba 4.11.11 + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ and VLV combined; (bso#14364); (bsc#1173159] + CVE-2020-10745: invalid DNS or NBT queries containing dots use several seconds of CPU each; (bso#14378); (bsc#1173160). + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP server with paged_result or VLV; (bso#14402); (bsc#1173161) + CVE-2020-14303: Endless loop from empty UDP packet sent to AD DC nbt_server; (bso#14417); (bsc#1173359). - Update to samba 4.11.10 + Fix segfault when using SMBC_opendir_ctx() routine for share folder that contains incorrect symbols in any file name; (bso#14374). + vfs_shadow_copy2 doesn't fail case looking in snapdirseverywhere mode; (bso#14350) + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr; (bso#14413). + Malicous SMB1 server can crash libsmbclient; (bso#14366) + winbindd: Fix a use-after-free when winbind clients exit; (bso#14382) + ldb: Bump version to 2.0.11, LMDB databases can grow without bounds. (bso#14330) - Update to samba 4.11.9 + nmblib: Avoid undefined behaviour in handle_name_ptrs(); (bso#14242). + 'samba-tool group' commands do not handle group names with special chars correctly; (bso#14296). + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo is not valid; (bso#14237). + Missing check for DMAPI offline status in async DOS attributes; (bso#14293). + smbd: Ignore set NTACL requests which contain S-1-5-88 NFS ACEs; (bso#14307). + vfs_recycle: Prevent flooding the log if we're called on non-existant paths; (bso#14316) + smbd mistakenly updates a file's write-time on close; (bso#14320). + RPC handles cannot be differentiated in source3 RPC server; (bso#14359). + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313). + nsswitch: Fix use-after-free causing segfault in _pam_delete_cred; (bso#14327). + Fix fruit:time machine max size on arm; (bso#13622) + CTDB recovery corner cases can cause record resurrection and node banning; (bso#14294). + ctdb: Fix a memleak; (bso#14348). + libsmb: Don't try to find posix stat info in SMBC_getatr(). + ctdb-tcp: Move free of inbound queue to TCP restart; (bso#14295); (bsc#1162680). + s3/librpc/crypto: Fix double free with unresolved credential cache; (bso#14344); (bsc#1169095) + s3:libads: Fix ads_get_upn(); (bso#14336). + CTDB recovery corner cases can cause record resurrection and node banning; (bso#14294) + Starting ctdb node that was powered off hard before results in recovery loop; (bso#14295); (bsc#1162680). + ctdb-recoverd: Avoid dereferencing NULL rec->nodemap; (bso#14324) - Update to samba 4.11.8 + CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with ASQ; (bso#14331); (bsc#1169850); + CVE-2020-10704: LDAP Denial of Service (stack overflow) in Samba AD DC; (bso#14334); (bsc#1169851); - Update to samba 4.11.7 + s3: lib: nmblib. Clean up and harden nmb packet processing; (bso#14239). + s3: VFS: full_audit. Use system session_info if called from a temporary share definition; (bso#14283) + dsdb: Correctly handle memory in objectclass_attrs; (bso#14258). + ldb: version 2.0.9, Samba 4.11 and later give incorrect results for SCOPE_ONE searches; (bso#14270) + auth: Fix CIDs 1458418 and 1458420 Null pointer dereferences; (bso#14247). + smbd: Handle EINTR from open(2) properly; (bso#14285) + winbind member (source3) fails local SAM auth with empty domain name; (bso#14247) + winbindd: Handling missing idmap in getgrgid(); (bso#14265). + lib:util: Log mkdir error on correct debug levels; (bso#14253). + wafsamba: Do not use 'rU' as the 'U' is deprecated in Python 3.9; (bso#14266). + ctdb-tcp: Make error handling for outbound connection consistent; (bso#14274). - Update to samba 4.11.6 + pygpo: Use correct method flags; (bso#14209). + vfs_ceph_snapshots: Fix root relative path handling; (bso#14216); (bsc#1141320). + Avoiding bad call flags with python 3.8, using METH_NOARGS instead of zero; (bso#14209). + source4/utils/oLschema2ldif: Include stdint.h before cmocka.h; (bso#14218). + docs-xml/winbindnssinfo: Clarify interaction with idmap_ad etc; (bso#14122). + smbd: Fix the build with clang; (bso#14251). + upgradedns: Ensure lmdb lock files linked; (bso#14199). + s3: VFS: glusterfs: Reset nlinks for symlink entries during readdir; (bso#14182). + smbc_stat() doesn't return the correct st_mode and also the uid/gid is not filled (SMBv1) file; (bso#14101). + librpc: Fix string length checking in ndr_pull_charset_to_null(); (bso#14219). + ctdb-scripts: Strip square brackets when gathering connection info; (bso#14227).- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);- Installing: samba - samba-ad-dc.service does not exist and unit not found; (bsc#1171437);- Fix samba_winbind package is installing python3-base without python3 package; (bsc#1169521);- Require libldb2 >= 2.0.10 after security release.- CVE-2020-10704: LDAP Denial of Service (stack overflow) in Samba AD DC; (bso#14334); (bsc#1169851); - CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with ASQ; (bso#14331); (bsc#1169850);- Fix smbclient crash with double free (with unresolved krb5 credential cache); (bso#14344); (bsc#1169095).- Starting ctdb node that was powered off hard before results in recovery loop; (bso#14295); (bsc#1162680).- CTDB doesn't retry outgoing connections on bind (and some other) failures; (bso#14274); (bsc#1162680).- Revert: Allow idmap_rid to have primary group other than "Domain Users"; (bsc#1087931).- Fix nmbstatus not reporting detailed information about workgroups; (bsc#1159464); - Fix querying all names registered within broadcast area; (bso#8927);- Update to samab 4.11.5 + CVE-2019-14902: Replication of ACLs down subtree on AD Directory is not automatic; (bso#12497); (bsc#1160850). + CVE-2019-19344: Fix server crash with dns zone scavenging = yes; (bso#14050); (bsc#1160852). + CVE-2019-14907: server-side crash after charset conversion failure (eg during NTLMSSP processing); (bso#14208); (bsc#1160888). - Update to samba 4.11.4 + Ensure SMB1 cli_qpathinfo2() doesn't return an inode number; (bso#14161). + Ensure we don't call cli_RNetShareEnum() on an SMB1 connection; (bso#14174). + NT_STATUS_ACCESS_DENIED becomes EINVAL when using SMB2 in SMBC_opendir_ctx; (bso#14176). + SMB2 - Ensure we use the correct session_id if encrypting an interim response; (bso#14189). + Prevent smbd crash after invalid SMB1 negprot; (bso#14205). + printing: Fix %J substition; (bso#13745). + Remove now unneeded call to cmdline_messaging_context(); (bso#13925). + Fix incomplete conversion of former parametric options; (bso#14069). + Fix sync dosmode fallback in async dosmode codepath; (bso#14070). + vfs_fruit returns capped resource fork length; (bso#14171). + libnet_join: Add SPNs for additional-dns-hostnames entries; (bso#14116). + smbd: Increase a debug level; (bso#14211). + Prevent azure ad connect from reporting discovery errors reference-value-not-ldap-conformant; (bso#14153). + krb5_plugin: Fix developer build with newer heimdal system library; (bso#14179). + replace: Only link libnsl and libsocket if required; (bso#14168); + ctdb: Incoming queue can be orphaned causing communication; breakdown; (bso#14175). + ldb: Release ldb 2.0.8. Cross-compile will not take cross-answers or cross-execute; (bso#13846). + heimdal-build: Avoid hard-coded /usr/include/heimdal in asn1_compile-generated code; (bso#13856).- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).- Update to samba 4.11.3 + CVE-2019-14861: DNSServer RPC server crash, an authenticated user can crash the DCE/RPC DNS management server by creating records with matching the zone name; (bso#14138); (bsc#1158108). + CVE-2019-14870: DelegationNotAllowed not being enforced, the DelegationNotAllowed Kerberos feature restriction was not being applied when processing protocol transition requests (S4U2Self), in the AD DC KDC; (bso#14187); (bsc#1158109).- CVE-2019-14861: DNSServer RPC server crash, an authenticated user can crash the DCE/RPC DNS management server by creating records with matching the zone name; (bso#14138); (bsc#1158108). - CVE-2019-14870: DelegationNotAllowed not being enforced, the DelegationNotAllowed Kerberos feature restriction was not being applied when processing protocol transition requests (S4U2Self), in the AD DC KDC; (bso#14187); (bsc#1158109).- Update to samba 4.11.2 + CVE-2019-10218: Client code can return filenames containing path separators; (bsc#1144902); (bso#14071). + CVE-2019-14833: Samba AD DC check password script does not receive the full password; (bso#12438). + CVE-2019-14847: User with "get changes" permission can crash AD DC LDAP server via dirsync; (bso#14040). - Fixes from 4.11.1 + Overlinking libreplace against librt and pthread against every binary or library causes issues; (bso#14140); + kpasswd fails when built with MIT Kerberos; (bso#14155); + Fix spnego fallback from kerberos to ntlmssp in smbd server; (bso#14106); + Stale file handle error when using mkstemp on a share; (bso#14137); + non-AES schannel broken; (bso#14134); + Joining Active Directory should not use SAMR to set the password; (bso#13884); + smbclient can blunder into the SMB1 specific cli_RNetShareEnum() call on an SMB2 connection; (bso#14152); + Deleted records can be resurrected during recovery; (bso#14147); + getpwnam and getpwuid need to return data for ID_TYPE_BOTH group; (bso#14141); + winbind does not list forest trusts with additional trust attributes; (bso#14130); + fault report points to outdated documentation; (bso#14139); + pam_winbind with krb5_auth or wbinfo -K doesn't work for users of trusted domains/forests; (bso#14124); + classicupgrade results in uncaught exception - a bytes-like object is required, not 'str'; (bso#14136); + pod2man is not longer required, stop checking at build time; (bso#14131); + Exit code of ctdb nodestatus should not be influenced by deleted nodes; (bso#14129); + username/password authentication doesn't work with CUPS and smbspool; (bso#14128); + smbc_readdirplus() is incompatible with smbc_telldir() and smbc_lseekdir(); (bso#14094);- CVE-2019-14847: User with "get changes" permission can crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598); - CVE-2019-10218: Client code can return filenames containing path separators; (bso#14071); (bsc#1144902);- CVE-2019-14833: samba: Accent with "check script password" Samba AD DC check password script does not receive the full password; (bso#12438); (bsc#1154289).- Update to samba 4.11.0 + For details on all items see WHATSNEW.txt in samba-doc package + Python2 runtime support removed; python 3.4 or later required + Security improvements: - SMB1 disabled by default - lanman and plaintext authentication deprecated - winbind: PAM_AUTH and NTLM_AUTH events logged - GnuTLS 3.2 required; system FIPS mode setting honored + CephFS Snapshot integration, exposed as previous file versions + ctdb changes: - onnode -o option removed - ctdbd logs when using more than 90% of a CPU thread - CTDB_MONITOR_SWAP_USAGE variable removed + AD Domain controller improvements: - Upgrade AD databse format - BIND9_FLATFILE deprecated - default process model chagned to prefork - bind9 dns operation duration logging - Default schema updated to 2012_R2; function level is unchanged - many performance improvements + Configuration webserver support removed- Fix broken username/password authentication with CUPS and smbspool; (bsc#1152143); (bso#14128).- Fix auth problems when printing via smbspool backend with kerberos; (bnc#1148539); (bso#13832).- Update to samba 4.10.8 + CVE-2019-10197: user escape from share path definition; (bso#14035); (bsc#1141267);- Fix build on newer systems by modifying samba.spec to use consistent non-relative paths for pammodules in configure line and specification of pam_winbind.so library to package.- Update to samba 4.10.7 + Unable to create or rename file/directory inside shares configured with vfs_glusterfs_fuse module; (bso#14010). + build: Allow build when '--disable-gnutls' is set; (bso#13844) + samba-tool: Add 'import samba.drs_utils' to fsmo.py; (bso#13973). + Fix 'Error 32 determining PSOs in system' message on old DB with FL upgrade; (bso#14008). + s4/libnet: Fix joining a Windows pre-2008R2 DC; (bso#14021) + join: Use a specific attribute order for the DsAddEntry nTDSDSA object; (bso#14046). + vfs_catia: Pass stat info to synthetic_smb_fname(); (bso#14015). + lookup_name: Allow own domain lookup when flags == 0; (bso#14091). + s4 librpc rpc pyrpc: Ensure tevent_context deleted last; (bso#13932). + DEBUGC and DEBUGADDC doesn't print into a class specific log file; (bso#13915). + Request to keep deprecated option "server schannel", VMWare Quickprep requires "auto"; (bso#13949). + dbcheck: Fallback to the default tombstoneLifetime of 180 days; (bso#13967). + dnsProperty fails to decode values from older Windows versions; (bso#13969). + samba-tool: Use only one LDAP modify for dns partition fsmo role transfer; (bso#13973). + third_party: Update waf to version 2.0.17; (bso#13960). + netcmd: Allow 'drs replicate --local' to create partitions; (bso#14051). + ctdb-config: Depend on /etc/ctdb/nodes file; (bso#14017).- CVE-2019-10197: user escape from share path definition; (bso#14035); (bsc#1141267).- Prepare for use future use of kernel keyrings, modify /etc/pam.d/samba to include pam_keyinit.so; (bsc#1144059).- Update samba-winbind script to work with systemd; (bsc#1132739); - Drop samba dhcpcd hook scripts - Update to samba 4.10.6 + s3: winbind: Fix crash when invoking winbind idmap scripts; (bso#13956). + smbd does not correctly parse arguments passed to dfree and quota scripts; (bso#13964). + samba-tool dns: use bytes for inet_ntop; (bso#13965). + samba-tool domain provision: Fix --interactive module in python3; (bso#13828). + ldb_kv: Skip @ records early in a search full scan; (bso#13893). + docs: Improve documentation of "lanman auth" and "ntlm auth" connection; (bso#13981). + python/ntacls: Use correct "state directory" smb.conf option instead of "state dir"; (bso#14002). + registry: Add a missing include; (bso#13840). + Fix SMB guest authentication; (bso#13944). + AppleDouble conversion breaks Resourceforks; (bso#13958). + vfs_fruit makes direct use of syscalls like mmap() and pread(); (bso#13968). + s3:mdssvc: Fix flex compilation error; (bso#13987). + s3/vfs_glusterfs[_fuse]: Avoid using NAME_MAX directly; (bso#13872). + dsdb:samdb: schemainfo update with relax control; (bso#13799). + s3:util: Move static file_pload() function to lib/util; (bso#13964). + smbd: Fix a panic; (bso#13957). + ldap server: Generate correct referral schemes; (bso#12478). + s4 dsdb/repl_meta_data: fix use after free in dsdb_audit_add_ldb_value; (bso#13941). + s4 dsdb: Fix use after free in samldb_rename_search_base_callback; (bso#13942). + dsdb/repl: we need to replicate the whole schema before we can apply it; (bso#12204). + ldb: Release ldb 1.5.5; (bso#12478). + Schema replication fails if link crosses chunk boundary backwards; (bso#13713). + 'samba-tool domain schemaupgrade' uses relax control and skips the schemaInfo update provision; (bso#13799). + dsdb_audit: avoid printing "... remote host [Unknown] SID [(NULL SID)] ..."; (bso#13916). + python/ntacls: We only need security.SEC_STD_READ_CONTROL in order to get the ACL; (bso#13917). + s3:loadparm: Ensure to truncate FS Volume Label at multibyte boundary; (bso#13947). + Using Kerberos credentials to print using spoolss doesn't work; (bso#13939). + wafsamba: Use native waf timer; (bso#13998). + ctdb-scripts: Fix tcp_tw_recycle existence check; (bso#13984).- Update to samba-4.10.5 (including updates for 4.10.4, 4.10.3) + CVE-2019-12435 rpc/dns: Avoid NULL deference if zone not found in DnssrvOperation2; (bso#13922); (bsc#1137815). + CVE-2019-12436 dsdb/paged_results: Ignore successful results without messages; (bso#13951); (bsc#1137816). - Update to samba-4.10.4 + s3: SMB1: Don't allow recvfile on stream fsp's; (bso#13938). + py/provision: Fix for Python 2.6; (bso#13882). + netcmd: Fix 'passwordsettings --max-pwd-age' command; (bso#13873). + s3-libnet_join: 'net ads join' to child domain fails when using "-U admin@forestroot"; (bso#13861). + vfs_ceph: Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245). + vfs_ceph: Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697). + ctdb-common: Avoid race between fd and signal events; (bso#13895). + ctdb-common: Fix memory leak in run_proc; (bso#13943). + lib: Initialize getline() arguments; (bso#13892). + winbind: Fix overlapping id ranges; (bco#13903). + lib util debug: Increase format buffer to 4KiB; (bso#13902). + nsswitch pam_winbind: Fix Asan use after free; (bso#13927). + s4 lib socket: Ensure address string owned by parent struct; (bso#13929). + s3 rpc_client: Fix Asan stack use after scope; (bso#13936). + s3:smbd: Handle IO_REPARSE_TAG_DFS in SMB_FIND_FILE_FULL_DIRECTORY_INFO; (bso#10097). + smb2_tcon: Avoid STATUS_PENDING completely on tdis; (bso#10344). + smb2_sesssetup: avoid STATUS_PENDING responses for session setup; (bso#12845). + smb2_tcon: Avoid STATUS_PENDING completely on tdis; (bso#13698). + smb2_sesssetup: avoid STATUS_PENDING responses for session setup; (bso#13796). + dbcheck: Fix the err_empty_attribute() check; (bso#13843). + vfs_snapper: Drop unneeded fstat handler; (bso#13858). + vfs_default: Fix vfswrap_offload_write_send() NT_STATUS_INVALID_VIEW_SIZE check; (bso#13862). + smb2_server: Grant all 8192 credits to clients; (bso#13863). + smbd: Implement SMB_FILE_NORMALIZED_NAME_INFORMATION handling; (bso#13919). + s3/vfs_glusterfs: Dynamically determine NAME_MAX; (bso#13872). + s3: modules: ceph: Use current working directory instead of share path; (bso#13918); (bsc#1134452). + winbind: Use domain name from lsa query for sid_to_name cache entry; (bso#13831). + memcache: Increase size of default memcache to 512k; (bso#13865). + docs: Update smbclient manpage for "--max-protocol"; (bso#13857). + s3:utils: If share is NULL in smbcacls, don't print it; (bso#13937). + s3:smbspool: Fix regression printing with Kerberos credentials; (bso#13939). + ctdb-scripts: CTDB restarts failed NFS RPC services by hand, which is incompatible with systemd; (bso#13860). + ctdb-daemon: Revert "We can not assume that just because we could complete a TCP handshake"; (bso#13888). + ctdb-daemon: Never use 0 as a client ID; (bso#13930). + ctdb-common: Fix memory leak; (bso#13943). + s3:debug: Enable logging for early startup failures; (bso#13904) - Update to samba-4.10.3 + CVE-2018-16860: Heimdal KDC: Reject PA-S4U2Self with unkeyed checksum; (bso#13685); (bsc#1134024).- CVE-2019-12435: zone operations can crash rpc server; (bso#13922); (bsc#1137815).- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697). - Add ceph_snapshots VFS module; (jsc#SES-183).- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).- Update to samba-4.10.2: + CVE-2019-3870 (World writable files in Samba AD DC private/ dir); (bso#13834). + CVE-2019-3880 (Save registry file outside share as unprivileged user); (bso#13851). + py/kcc_utils: py2.6 compatibility; (bso#13837). + libcli: permit larger values of DataLength in SMB2_ENCRYPTION_CAPABILITIES of negotiate response; (bso#13869). + regfio: Improve handling of malformed registry hive files; (bso#13840). + ctdb-version: Simplify version string usage; (bso#13789). + lib: Make fd_load work for non-regular files; (bso#13859). + dbcheck: in the middle of the tombstone garbage collection causes replication failures, dbcheck: add --selftest-check-expired-tombstones cmdline option; (bso#13816). + ndr_spoolss_buf: Fix out of scope use of stack variable in NDR_SPOOLSS_PUSH_ENUM_OUT(); (bso#13818). + s4/messaging: Fix undefined reference in linking libMESSAGING-samba4.so; (bso#13854). + acl_read: Fix regression for empty lists; (bso#13836). + s4:dlz make b9_has_soa check dc=@ node; (bso#13841). + s3:client: Fix printing via smbspool backend with kerberos auth; (bso#13832). + s4:librpc: Fix installation of Samba; (bso#13847). + s3:lib: Fix the debug message for adding cache entries; (bso#13848). + s3:utils: Add 'smbstatus -L --resolve-uids' to show username; (bso#13793). + s3:lib: Fix the debug message for adding cache entries; (bso#13848). + s3:waf: Fix the detection of makdev() macro on Linux; (bso#13853). * ctdb-build: Drop creation of .distversion in tarball; (bso#13789). * ctdb-packaging: Test package requires tcpdump, ctdb package should not own system library directory; (bso#13838). - Update to samba-4.10.1: + py/kcc_utils: py2.6 compatibility; (bso#13837); + libcli: permit larger values of DataLength in SMB2_ENCRYPTION_CAPABILITIES of negotiate response; (bso#13869); + regfio: Improve handling of malformed registry hive files; (bso#13840); + ctdb-version: Simplify version string usage; (bso#13789); + lib: Make fd_load work for non-regular files; (bso#13859); + dbcheck in the middle of the tombstone garbage collection causes replication failures, dbcheck: add --selftest-check-expired-tombstones cmdline option; (bso#13816); + ndr_spoolss_buf: Fix out of scope use of stack variable in NDR_SPOOLSS_PUSH_ENUM_OUT(); (bso#13818); + s4/messaging: Fix undefined reference in linking libMESSAGING-samba4.so; (bso#13854); + acl_read: Fix regression for empty lists; (bso#13836); + s4:dlz make b9_has_soa check dc=@ node; (bso#13841); + s3:client: Fix printing via smbspool backend with kerberos auth; (bso#13832); + s4:librpc: Fix installation of Samba; (bso#13847); + s3:lib: Fix the debug message for adding cache entries; (bso#13848); + s3:utils: Add 'smbstatus -L --resolve-uids' to show username; (bso#13793); + s3:lib: Fix the debug message for adding cache entries; (bso#13848); + s3:waf: Fix the detection of makdev() macro on Linux; (bso#13853); + ctdb-build: Drop creation of .distversion in tarball; (bso#13789); + ctdb-packaging: Test package requires tcpdump, ctdb package should not own system library directory; (bso#13838); - Update to samba-4.10.0: + s4-server: Open and close a transaction on sam.ldb at startup; (bso#13760); + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812); + s4/scripting/bin: Open unicode files with utf8 encoding and write + unicode string. + sambaundoguididx: Use the right escaped oder unescaped sam ldb files; (bso#13759); + Fix idmap cache pollution with S-1-22- IDs on winbind hickup; (bso#13813); + passdb: Update ABI to 0.27.2. + lib/winbind_util: Add winbind_xid_to_sid for --without-winbind; (bso#13813); + lib:util: Move debug message for mkdir failing to log level 1; (bso#13823);- MacOS credit accounting breaks with async SESSION SETUP; (bsc#1125601); (bso#13796). - Mac OS X SMB2 implmenetation sees Input/output error or Resource temporarily unavailable and drops connection; (bso#13698)- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).- CVE-2019-3880: Save registry file outside share as unprivileged user; (bso#13851); (bsc#1131060 ).- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0); (bso#13834); (bsc#1130703);- Update to samba-4.9.5 + audit_logging: Remove debug log header and JSON Authentication: prefix; (bso#13714); + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760); + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso# CID: 1433607; (bso#11495); + smbd: uid: Don't crash if 'force group' is added to an existing share connection; (bso#13690); + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility code; (bso#13770); + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803); + s3:utils/smbget fix recursive download with empty source directories; (bso#13199); + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716); + s3:libsmb: cli_smb2_list() can sometimes fail initially on a connection; (bso#13736); + join: Throw CommandError instead of Exception for simple errors; (bso#13747); + ldb: Avoid inefficient one-level searches; (bso#13762); + s3: libsmb: use smb2cli_conn_max_trans_size() in cli_smb2_list(); (bso#13736); + tldap: Avoid use after free errors; (bso#13776); + Fix idmap xid2sid cache churn; (bso#13802); + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812); + s3-smbd: Avoid assuming fsp is always intact after close_file call; (bso#13720); + s3-vfs-fruit: Add close call; (bso#13725); + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746); + s3-vfs: add glusterfs_fuse vfs module; (bso#13774); + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766); + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS) ftruncate and fallocate; (bso#13807); + lib/audit_logging: Actually create talloc; (bso#13737); + netcmd/user: python[3]-gpgme unsupported and replaced by python[3]-gpg; (bso#13728); + dns: Changing onelevel search for wildcard to subtree; (bso#13738); + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721); + sambaundoguididx: Use the right escaped oder unescaped sam ldb files; (bso#13759); + ctdb: Print locks latency in machinereadable stats; (bso#13742); + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786); + audit_logging: auth_json_audit required auth_json; (bso#13715); + man pages: Document prefork process model; (bso#13765); + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773); + s3:auth: ignore create_builtin_guests() failing without a valid idmap configuration; (bso#13697); + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC without trusts; (bso#13722); + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd is not available; (bso#13723); + s4:server: Add support for 'smbcontrol samba shutdown' and 'smbcontrol debug/debuglevel'; (bso#13752); + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616); + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330); + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774); + notifyd: Fix SIGBUS on sparc; (bso#13704); + waf: Check for libnscd; (bso#13787); + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770); + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717); + Recovery lock bug fixes; (bso#13800); + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726); + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727); + vfs_fileid: Fix get_connectpath_ino; (bso#13741); + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).- Fix update-apparmor-samba-profile script after apparmor switched to using named profiles. The change is backwards compatible; (bsc#1126377);- LoadParm().load_default() fails with "Unable to load default file"; (bsc#1089758);- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);- Update to samba-4.9.4 + libcli/smb: Don't overwrite status code; (bso#9175). + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164). + Session setup reauth fails to sign response; (bso#13661). + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677). + vfs_shadow_copy2: Nicely deal with attempts to open previous version for writing; (bso#13688). + Restoring previous version of stream with vfs_shadow_copy2 fails with NT_STATUS_OBJECT_NAME_INVALID fsp->base_fsp->fsp_name; (bso#13455). + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571). + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708) + PEP8: fix E231: missing whitespace after ','. + winbindd: Fix crash when taking profiles;(bso#13629) + CVE-2018-14629 dns: Fix CNAME loop prevention using counter regression; (bso#13600) + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686). + CVE-2018-16853: Do not segfault if client is not set; (bso#13571). + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679) + ctdb-daemon: Exit with error if a database directory does not exist; (bso#13696). + s3:libads: Add net ads leave keep-account option; (bso#13498).- Drop more %if..%endif guards which are idempotent. - Drop requires on ldconfig which are already auto-discovered. - Do not ignore errors from useradd/groupadd.- Remove python2 build dependency from samba-libs; (bsc#1116900);- Update update-apparmor-samba-profile script to ignore the shares's paths containing substitution variables in any place, not only at the beginning of the path.- Update to samba-4.9.3 + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD Internal DNS server; (bso#13600); (bsc#1116319); + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628); (bsc#1116320); + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server; (bso#13674); (bsc#1116322); + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers; (bso#13669); (bsc#1116321); + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos configuration (unsupported); (bso#13678); (bsc#1116324); + CVE-2018-16857: Bad password count in AD DC not always effective; window; (bso#13683); (bsc#1116323);- Update to samba-4.9.2 + dsdb: Add comments explaining the limitations of our current backlink behaviour; (bso#13418); + Fix problems running domain backups (handling SMBv2, sites); (bso#13621); + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3; (bso#13465); + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642); + File saving issues with vfs_fruit on samba >= 4.8.5; (bso#13646); + Enabling vfs_fruit looses FinderInfo; (bso#13649); + Cancelling of SMB2 aio reads and writes returns wrong error NT_STATUS_INTERNAL_ERROR; (bso#13667); + Fix CTDB recovery record resurrection from inactive nodes and simplify vacuuming; (bso#13641); + examples: Fix the smb2mount build; (bso#13465); + libtevent: Fix build due to missing open_memstream on Illiumos; (bso#13629); + winbindd_cache: Fix timeout calculation for sid<->name cache; (bso#13662); + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path; (bso#13653); + Extended DN SID component missing for member after switching group membership; (bso#13418); + Return STATUS_SESSION_EXPIRED error encrypted, if the request was encrypted; (bso#13624); + python: Allow forced signing via smb.SMB(); (bso#13621); + lib:socket: If returning early, set ifaces; (bso#13665); + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8 encoded unicode; (bso#13616); + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute; (bso#13673); + waf: Add -fstack-clash-protection; (bso#13601); + winbind: Fix segfault if an invalid passdb backend is configured; (bso#13668); + Fix bugs in CTDB event handling; (bso#13659); + Misbehaving nodes are sometimes not banned; (bso#13670);- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);- winbind requires latest version of libtevent-util0 to start- Backport latest gpo code from master + Read policy from local gpt cache + Offline policy application + Make group policy extensible via register/unregister gpext + gpext's run via a process_group_policy method- Enable profiling data collection- Change samba-kdc package name to samba-ad-dc - Move samba-ad-dc.service to the samba-ad-dc package- Update to samba-4.9.1 + s3: nmbd: Stop nmbd network announce storm; (bso#13620); + s3-rpcclient: Use spoolss_init_spoolss_UserLevel1 in winspool cmds; (bso#13597); + CTDB recovery lock has some race conditions; (bso#13617); + s3-rpc_client: Advertise Windows 7 client info; (bso#13597); + ctdb-doc: Remove PIDFILE option from ctdbd_wrapper man page; (bso#13610);- Tumbleweed doesn't define the sle_version macro, so we must include a check for suse_version also. Otherwise python3 is disabled on Tumbleweed.- Update to samba-4.9.0 + samba_dnsupdate: Honor 'dns zone scavenging' option, only update if needed; (bso#13605); + wafsamba: Fix 'make -j'; (bso#13606);- Update to samba-4.9.0rc5 + s3: VFS: vfs_full_audit: Ensure smb_fname_str_do_log() only returns absolute pathnames; (bso#13565); + s3: util: Do not take over stderr when there is no log file; (bso#13578); + Durable Reconnect fails because cookie.allow_reconnect is not set; (bso#13549); + krb5-samba: Interdomain trust uses different salt principal; (bso#13539); + vfs_fruit: Don't unlink the main file; (bso#13441); + smbd: Fix a memleak in async search ask sharemode; (bso#13602); + Fix Samba GPO issue when Trust is enabled; (bso#11517); + samba-tool: Add "virtualKerberosSalt" attribute to 'user getpassword/syncpasswords'; (bso#13539); + Fix CTDB configuration issues; (bso#13589); + ctdbd logs an error until it can successfully connect to eventd; (bso#13592);- Update to samba-4.9.0rc4 + s3: smbd: Ensure get_real_filename() copes with empty pathnames; (bso#13585); + samba domain backup online/rename commands force user to specify password on CLI; (bso#13566); + wafsamba/samba_abi: Always hide ABI symbols which must be local; (bso#13579); + Fix a panic if fruit_access_check detects a locking conflict; (bso#13584); + Fix memory and resource leaks; (bso#13567); + python: Fix print in dns_invalid.py; (bso#13580); + Aliasing issue causes incorrect IPv6 checksum; (bso#13588); + Fix CTDB configuration issues; (bso#13589); + s3: vfs: time_audit: fix handling of token_blob in smb_time_audit_offload_read_recv(); (bso#13568);- Add missing zlib-devel dependency which was previously pulled in by libopenssl-devel- Update to samba-4.9.0rc3+git.22.3fff23ae36e + CVE-2018-10858: libsmb: Harden smbc_readdir_internal() against returns from malicious servers; (bso#13453); + CVE-2018-1140: ldbsearch '(distinguishedName=abc)' and DNS query with escapes crashes, ldb: Release LDB 1.3.5 for CVE-2018-1140; (bso#13374); + CVE-2018-10918: cracknames: Fix DoS (NULL pointer de-ref) when not servicePrincipalName is set on a user; (bso#13552); + CVE-2018-10919: acl_read: Fix unauthorized attribute access via searches; (bso#13434); + ctdb_mutex_ceph_rados_helper: Set SIGINT signal handler; (bso#13540); + CVE-2018-1139 libcli/auth: Do not allow ntlmv1 over SMB1 when it is disabled via "ntlm auth"; (bso#13360); + s3-tldap: do not install test_tldap; (bso#13529); + ctdb_mutex_ceph_rados_helper: Fix deadlock via lock renewals; (bso#13540); + CVE-2018-1140 Add NULL check for ldb_dn_get_casefold() in ltdb_index_dn_attr(); (bso#13374); + ctdb-eventd: Fix CID 1438155; (bso#13554); + Fix CIDs 1438243, (Unchecked return value) 1438244 (Unsigned compared against 0), 1438245 (Dereference before null check) and 1438246 (Unchecked return value); (bso#13553); + ctdb: Fix a cut&paste error; (bso#13554); + systemd: Only start smb when network interfaces are up; (bso#13559); + Fix quotas don't work with SMB2; (bso#13553); + s3/smbd: Ensure quota code is only called when quota support detected; (bso#13563); + s3/libsmb: Explicitly set delete_on_close token for rmdir; (bso#13204); + s3:waf: Install eventlogadm to /usr/sbin; (bso#13561); + Shorten description in vfs_linux_xfs_sgid manual; (bso#13562);- Update to samba-4.9.0rc2+git.21.a1069afb007 + s3: smbd: Using "sendfile = yes" with SMB2 can cause CPU spin; (bso#13537); + s3: smbd: Fix path check in smbd_smb2_create_durable_lease_check(); (bso#13535); + samba-tool trust: Support discovery via netr_GetDcName; (bso#13538); + s4-dsdb: Only build dsdb Python modules for AD DC; (bso#13542); + Fix portability issues on freebsd; (bso#13520); + DNS wildcard search does not handle multiple labels correctly; (bso#13536); + samba-tool domain trust: Fix trust compatibility to Windows Server 1709 and FreeIPA; (bso#13308); + Fix portability issues on freebsd; (bso#13520); + ctdb-protocol: Fix CTDB compilation issues; (bso#13545); + ctdb-docs: Replace obsolete reference to CTDB_DEBUG_HUNG_SCRIPT option; (bso#13546); + ctdb-doc: Provide an example script for migrating old configuration; (bso#13550); + ctdb-event: Implement event tool "script list" command; (bso#13551);- Update to samba-4.8.4+git.37.a7a861d7982; + CVE-2018-1139: Weak authentication protocol allowed; (bsc#1095048); (bsc#13360); + CVE-2018-1140: Denial of Service Attack on DNS and LDAP server; (bsc#1095056); (bso#13466); (bso#13374); + CVE-2018-10858: Insufficient input validation on client directory listing in libsmbclient; (bsc#1103411); (bso#13453); + CVE-2018-10918: Denial of Service Attack on AD DC DRSUAPI server; (bsc#1103414); (bso#13552); + CVE-2018-10919: Confidential attribute disclosure from the AD LDAP server; (bsc#1095057); (bso#13434); + s3:winbind: winbind normalize names' doesn't work for users; (bso#12851); + winbind: Fix UPN handling in canonicalize_username(); (bso#13369); + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428); + samdb: Fix building Samba with gcc 8.1; (bso#13437); + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440); + smbd: Flush dfree memcache on service reload; (bso#13446); + ldb: Save a copy of the index result before calling the + lib/util: No Backtrace given by Samba's AD DC by default; (bso#13454). + s3: smbd: printing: Re-implement delete-on-close semantics for print files missing since 3.5.x; (bso#13457). + python: Fix talloc frame use in make_simple_acl(); (bso#13474). + krb5_wrap: Fix keep_old_entries logic for older Kerberos libraries;(bso#13478). + krb5_plugin: Add winbind localauth plugin for MIT Kerberos; (bso#13480).- Add missing package descriptions; (bsc#1093864); - Fix dependency issue between samba-python and samba-kdc; (bsc#1062876); - Call update-apparmor-samba-profile when running samba-ad-dc; (bsc#1092099);- Update to 4.8.2 + After update to 4.8.0 DC failed with "Failed to find our own NTDS Settings objectGUID" (bso#13335). + fix incorrect reporting of stream dos attributes on a directory (bso#13380). + vfs_ceph: add asynchronous fsync; fake synchronous call (bso#13412). + vfs_ceph: add fake async pwrite/pread send/recv hooks; (bso#13425) + vfs_ceph: Fix memory leak; (bso#13424). + libsmbclient: Fix hard-coded connection error return of ETIMEDOUT; (bso#13419). + s4-lsa: Fix use-after-free in LSA server; (bso#13420). + winbindd: Do re-connect if the RPC call fails in the passdb case; (bso#13430). + cleanupd: Sends MSG_SMB_UNLOCK twice to interested peers; (bso#13416). + cleanupd: Use MSG_SMB_BRL_VALIDATE to signal cleanupd unclean process shutdown; (bso#13414). + ctdb-client: Remove ununsed functions from old client code; (bso#13411). + printing: Return the same error code as windows does on upload failures; (bso#13395). + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged pipe is not accessable; (bso#13400). + s4:lsa_lookup: remove TALLOC_FREE(state) after all dcesrv_lsa_Lookup{Names,Sids}_base_map() calls; (bso#13420). + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407). + s3:smbspool: Fix cmdline argument handling; (bso#13417).- Move libdfs-server-ad-samba4.so library from kdc to libs package, as it is required by some client libs; (bsc#1074135); - Update to 4.8.1; (bsc#1091179); + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error, we don't own it here; (bso#13244); + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't support fdopendir(); (bso#13270); + Round-tripping ACL get/set through vfs_fruit will increase the number of ACE entries without limit; (bso#13319); + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit issues; (bso#13347); + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without delete access; (bso#13358); + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372); + s3: smbd: Unix extensions attempts to change wrong field in fchown call; (bso#13375); + ms_schema/samba-tool visualize: Fix python2.6 incompatibility; (bso#13337); + Fix invocation of gnutls_aead_cipher_encrypt(); (bso#13352); + Windows 10 cannot logon on Samba NT4 domain; (bso#13328); + winbindd: Recover loss of netlogon secure channel in case the peer DC is rebooted; (bso#13332); + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363); + ctdb-client: Fix bugs in client code; (bso#13356); + ctdb-scripts: Drop "net serverid wipe" from 50.samba event script; (bso#13359); + s3: lib: messages: Don't use the result of sec_init() before calling sec_init(); (bso#13368); + libads: Fix the build '--without-ads'; (bso#13273); + winbind: Keep "force_reauth" in invalidate_cm_connection, add 'smbcontrol disconnect-dc'; (bso#13332); + vfs_virusfilter: Fix CIDs 1428738-1428740; (bso#13343); + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367); + rpc_server: Fix core dump in dfsgetinfo; (bso#13370); + smbclient: Fix notify; (bso#13382); + Fix smbd panic if the client-supplied channel sequence number wraps; (bso#13215); + Windows 10 cannot logon on Samba NT4 domain; (bso#13328); + lib/util: Remove unused '#include ' from tests/tfork.c; (bso#13342); + Fix build errors with cc from developerstudio 12.5 on Solaris; (bso#13343); + Fix the picky-developer build on FreeBSD 11; (bso#13344); + s3:modules: Fix the build of vfs_aixacl2.c; (bso#13345); + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338); + lib:replace: Fix linking when libtirpc-devel overwrites system headers; (bso#13341); + winbindd: 'wbinfo --name-to-sid' returns misleading result on invalid query; (bso#13312); + s3:passdb: Do not return OK if we don't have pinfo set up; (bso#13376); + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);- Use new foreground execution flags for systemd samba daemons; (bsc#1088574); (bsc#1071090); (bsc#1065551); + Add %post scriptlet to clear old sysconfig flags - Update vendor-files to commit 880b3e7. + Set samba sysconfig template variables to "" + Add required daemon flags directly to systemd unit- Specfile cleanup + Remove %if..%endif guards which don't affect the build + Remove redundant %clean section + Replace old $RPM_* shell vars with macros- BuildRequire pkgconfig(systemd) and pkgconfig(libsystemd) in place of systemd and systemd-devel: Allow OBS to optimize the workload by allowing the usage of the 'build-optimized' systemd packages.- Enable building samba with python3, and create a samba-python3 package.- Update to 4.8 + New GUID Index mode in sam.ldb for the AD DC + GPO support for samba KDC + Time machine support with vfs_fruit + Encrypted secrets + AD Replication visualization + Improved trust support - ability to not scan global trust list - AD external trusts have limited support - verbose trusted domain listing + VirusFilter VFS module + NT4-style replication removed + vfs_aio_linux removed- Disable samba-pidl package, due to the removal of dependency perl-Parse-Yapp; (bsc#1085150);- Update to 4.7.6; + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally; (bso#11343); (bsc#1081741); + CVE-2018-1057: Authenticated users can change other users' password; (bso#13272); (bsc#1081024).- Disable python until full python3 port is done; (bsc#1082139); + Remove contents of package samba-python + Remove contents of package libsamba-policy0 + Remove contents of package libsamba-policy-devel + Remove library libsamba-python-samba4.so from samba-libs package + Remove library libsamba-net-samba4.so from samba-libs package + Remove smbtorture binary and manpage from samba-test- samba fails to build with glibc2.27; (bsc#1081042);- Update to 4.7.5; (bsc#1080545); + smbd tries to release not leased oplock during oplock II downgrade; (bso#13193); + Fix copying file with empty FinderInfo from Windows client to Samba share with fruit; (bso#13181); + build: Deal with recent glibc sunrpc header removal; (bso#10976); + Make Samba work with tirpc and libnsl2; (bso#13238); + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208); (bsc#1075206); + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue; (bso#12986); + ctdb-recovery-helper: Deregister message handler in error paths; (bso#13188); + samba: Only use async signal-safe functions in signal handler; (bso#13240); + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue; (bso#12986); + repl_meta_data: Fix linked attribute corruption on databases with unsorted links on expunge. dbcheck: Add functionality to fix the corrupt database; (bso#13228); + Fix smbd panic when chdir returns error during exit; (bso#13189); + Make Samba work with tirpc and libnsl2; (bso#13238); + Fix POSIX ACL support on HPUX and possibly other big-endian OSs; (bso#13176);- Update to 4.7.4; (bsc#1080545); + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140); + s3: libsmb: Fix valgrind read-after-free error in cli_smb2_close_fnum_recv(); (bso#13171); + s3: libsmb: Fix reversing of oldname/newname paths when creating a reparse point symlink on Windows from smbclient; (bso#13172); + Build man page for vfs_zfsacl.8 with Samba; (bso#12934); + repl_meta_data: Allow delete of an object with dangling backlinks; (bso#13095); + s4:samba: Fix default to be running samba as a deamon; (bso#13129); + Performance regression in DNS server with introduction of DNS wildcard, ldb: Release 1.2.3; (bso#13191); + vfs_zfsacl: Fix compilation error; (bso#6133); + "smb encrypt" setting changes are not fully applied until full smbd restart; (bso#13051); + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052); + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155); + winbindd: Dependency on trusted-domain list in winbindd in critical auth codepath; (bso#13173); + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120); + ctdb: sock_daemon leaks memory; (bso#13153); + TCP tickles not getting synchronised on CTDB restart; (bso#13154); + winbindd: winbind parent and child share a ctdb connection; (bso#13150); + pthreadpool: Fix deadlock; (bso#13170); + pthreadpool: Fix starvation after fork; (bso#13179); + messaging: Always register the unique id; (bso#13180); + s4/smbd: set the process group; (bso#13129); + Fix broken linked attribute handling; (bso#13095); + The KDC on an RWDC doesn't send error replies in some situations; (bso#13132); + libnet_join: Fix 'net rpc oldjoin'; (bso#13149); + g_lock conflict detection broken when processing stale entries; (bso#13195); + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired sessions; (bso#13197); + s3:libads: net ads keytab list fails with "Key table name malformed"; (bso#13166); (bsc#1067700); + Fix crash in pthreadpool thread after failure from pthread_create; (bso#13170); + s4:samba: Allow samba daemon to run in foreground; (bso#13129); (bsc#1065551); + third_party: Link the aesni-intel library with "-z noexecstack"; (bso#13174); + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I" options; (bso#13125);- Re-enable usage of libnsl (did got lost with glibc change) - Use TI-RPC (sunrpc is deprecated and will be removed soon from glibc)- smbc_opendir should not return EEXIST with invalid login credentials; (bnc#1065868).- Update to 4.7.3; (bsc#1069666); + Non-smbd processes using kernel oplocks can hang smbd; (bso#13121); + python: use communicate to fix Popen deadlock; (bso#13127); + smbd on disk file corruption bug under heavy threaded load; (bso#13130); + tevent: version 0.9.34; (bso#13130); + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118); + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug; (bsc#1060427);(bso#13041); + CVE-2017-15275: s3: smbd: Chain code can return uninitialized memory when talloc buffer is grown; (bsc#1063008); (bso#13077); - Build with AD DC support only in openSUSE.- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- samba-tool requires samba-python; (bnc#1067771).- Run all daemons in the foreground and let systemd handle it; (bsc#1065551). - Update to 4.7.1; + Fix exporting subdirs with shadow_copy2; (bso#13091); + Currently if getwd() fails after a chdir(), we panic; (bso#13027); + Ensure default SMB_VFS_GETWD() call can't return a partially completed struct smb_filename; (bso#13068); + sys_getwd() can leak memory or possibly return the wrong errno on older systems; (bso#13069); + smbclient doesn't correctly canonicalize all local names before use; (bso#13093); + Fix broken linked attribute handling; (bso#13095); + Missing LDAP query escapes in DNS rpc server; (bso#12994); + Link to -lbsd when building replace.c by hand; (bso#13087); + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem; (bso#6133); + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module; (bso#7909); + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module; (bso#7933); + Missing assignment in sl_pack_float; (bso#12991); + Wrong Samba access checks when changing DOS attributes; (bso#12995); + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062); + groupmap cleanup should not delete BUILTIN mappings; (bso#13065); + Enabling vfs_fruit results in loss of Finder tags and other xattrs; (bso#13076); + man pages: Properly ident lists; (bso#9613); + smb.conf.5: Sort parameters alphabetically; (bso#13081); + Fix GUID string format on GetPrinter info; (bso#12993); + Remote serverid check doesn't check for the unique id; (bso#13042); + CTDB starts consuming memory if there are dead nodes in the cluster; (bso#13056); + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070); + libgpo doesn't sort the GPOs in the correct order; (bso#13046); + Remote serverid check doesn't check for the unique id; (bso#13042); + vfs_catia: Fix a potential memleak; (bso#13090); + Fix file change notification for renames; (bso#12903); + Samba DNS server does not honour wildcards; (bso#12952); + Can't change password in samba from a Windows client if Samba runs on IPv6 only interface; (bso#13079); + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086); + Apple client can't cope with SMB2 async replies when creating symlinks; (bso#13047); + s4:rpc_server:backupkey: Move variable into scope; (bso#12959); + Fix ntstatus_gen.h generation on 32bit; (bso#13099); + Fix a double free in vfs_gluster_getwd(); (bso#13100); + Fix resouce leaks and pointer issues; (bso#13101); + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);- Add samba-kdc to baselibs.conf. - Do not wrap samba-kdc's package definition into if/endif: the package won't be generated simply based on the fact that there is no files section for the package. Allows the source validator to ensure samba-kdc is a built package.- Update to 4.7.0; + Whole DB read locks: Improved LDAP and replication consistency; (bso#12858). + Samba AD with MIT Kerberos + Dynamic RPC port range: Default range changed from "1024-1300" to "49152-65535". + Authentication and Authorization audit support: New auth_audit debug class. + Multi-process LDAP Server: The LDAP server in the AD DC now honours the process model used for the rest of the 'samba' process. + Improved Read-Only Domain Controller (RODC) Support; (bso#12977). + Additional password hashes stored in supplementalCredentials. + Improvements to DNS during Active Directory domain join. + Significant AD performance and replication improvements. + Query record for open file or directory. + Removal of lpcfg_register_defaults_hook(). + Change of loadable module interface. + SHA256 LDAPS Certificates: The self-signed certificate generated for use on LDAPS will now be generated with a SHA256 self-signature, not a SHA1 self-signature. + CTDB no longer allows mixed minor versions in a cluster. + CTDB now ignores hints from Samba about TDB flags when attaching to databases. + New configuration variable CTDB_NFS_CHECKS_DIR. + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed. + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed. + The example NFS Ganesha call-out has been improved. + A new "replicated" database type is available.- CVE-2017-12163: Prevent client short SMB1 write from writing server memory to file; (bso#13020); (bsc#1058624).- CVE-2017-12150: Some code path don't enforce smb signing, when they should; (bso#12997); (bsc#1058622).- CVE-2017-12151: Keep required encryption across SMB3 dfs redirects; (bso#12996); (bsc#1058565).- Clean specfile assuming SUSE-only system and product >=SLE11 + %{ul_version}, %{rhel_version}, %{mandriva_version}, %{centos_version} are always undefined + %{_vendor} is "suse" and %{suse_version} is at least 1100- Update to 4.6.7; (bsc#1054017) + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392). + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937). + vfs_ceph provides inconsistent directory listings; (bso#12911). + Misused talloc context can cause a user to crash their smbd by chaining SMB1 commands.; (bso#12836). + Use-after free can crash libsmbclient code.; (bso#12927). + Server exit with active AIO can crash.; (bso#12925). + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910). + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs; (bso#12898). + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897). + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for authentication; (bso#12886). + finder sidebar showing question mark instead of icon when using ip to connect with vfs_fruit; (bso#12840). + Winbind stops obtaining the 'unixHomeDirectory' & 'loginShell' attributes from AD.; (bso#12720). + KCC run at selftest startup can fail spuriously due to a race; (bso#12869). + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for the remote change; (bso#12782). + rpc_pipe_client memory leaks due to long term memory context passed to rpc_pipe_open_interface(); (bso#12890). + CVE-2017-2619 breaks accessing previous versions of directories with snapshots in subdirectories of the share; (bso#12885). + dns_name_equal doing OOB read; (bso#12813). + replica_sync tests flap; (bso#12753). + Selftest should not call 'net cache flush' and wipe important winbind entries; (bso#12868). + Old Samba versions don't support using recent ldb versions (>=1.1.30); (bso#12859). + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490). + race starting winbindd against posixacl test; (bso#12843). + Crash in the reentrant smbd_smb2_create_send() if the something fails in the subsequent try; (bso#12832). + spnego.c passes the wrong argument order to gensec_update_ev() for the FALLBACK case; (bso#12788). + Clients with SMB3 support can't connect with "server max protocol = SMB2_02"; (bso#12772). + A log message of samb-tool user syncpasswords reverses string arguments in a debug message "Call Popen[...".; (bso#12768). + The smb tarmode tests kills the share dir contents; (bso#12867). + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862). + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860). + manpage/index.html lists links not in alphabetical order; (bso#12854). + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831). + If a record is locked in a database, then recovery does not complete; (bso#12857). + debug_locks.sh script does not log any information; (bso#12856). + SIGSEGV in cm_connect_lsa_tcp dereferencing conn->lsa_tcp_pipe->transport after error; (bso#12852). + smbclient can't parse DOMAIN+username if a different winbind separator is used; (bso#12849). + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845). + Related requests with TreeConnect fail with NETWORK_NAME_DELETED; (bso#12844). + cli->server_os not filled correctly; (bso#12779). + REGRESSION: smbclient doesn't print the session setup anymore; (bso#12824). + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808). + CTDB NFS call-out failures do not cause event failures; (bso#12837). + net command fails due to incorrectly return code; (bso#12828). + Fix building Samba with GCC 7.1; (bso#12827).- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again; (bsc#1048339).- fix cephwrap_chdir(); (bsc#1048790). - Update to 4.6.6 + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation; (bsc#1048278).- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).- Fix inconsistent ctdb socket path; (bsc#1048352). - Fix non-admin cephx authentication; (bsc#1048387).- Update to 4.6.5; (bsc#1040157) + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at startup; (bso#12814). + vfs_expand_msdfs tries to open the remote address as a file path; (bso#12687). + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type); (bso#12798). + With clustering get update_num_read_oplocks failed and PANIC: num_share_modes == 1 assertion failure; (bso#11844). + contend_level2_oplocks_begin_default oplock optimisation doesn't carry over to leases; (bso#12766). + `ctdb nodestatus` incorrectly displays status for all nodes with wrong exit code; (bso#12802). + CTDB can spin hard on revoking readonly delegations if a node becomes disconnected; (bso#12697). + Printing a share mode entry with leases can crash in the ndr code; (bso#12793). + Fix flakey unit tests for eventd; (bso#12792). + CTDB daemon crashes if built with clang; (bso#12770). + smbcacls fails if no password is specified; (bso#12765). + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757). + samba-tool user syncpasswords doesn't trigger the script when a user gets removed; (bso#12767). + systemd: fix detection of libsystemd; (bso#12764). + Notify subsystem only maps first inotify mask to Windows notify filter; (bso#12760). + Allow passing trusted domain password as plain-text to PASSDB layer; (bso#12751). + Can't case-rename files with vfs_fruit; (bso#12749). + wrong sid->uid mapping for SIDs residing in sIDHistory; (bso#12702). + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562). + Ordering of notify responses broken; (bso#12756).- s3: libsmb: Fix error where short name length was read as 2 bytes, should be 1; (bso#11822); (bsc#1042419).- Revert explicit winbind %{version}-%{release} dependency. + The ABI has stabilized since (bsc#936909), so remove to fix cross-media dependencies; (bsc#1037899).- Fix CVE-2017-7494 remote code execution from a writable share; (bso#12780); (bsc#1038231).- Update to 4.6.3; (bsc#1036011) + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots from shares with GlusterFS backend; (bso#12743). + Fix for Solaris C compiler; (bso#12559). + s3: locking: Update oplock optimization for the leases era; (bso#12628). + Make the Solaris C compiler happy; (bso#12693). + s3: libgpo: Allow skipping GPO objects that don't have the expected LDAP attributes; (bso#12695). + Fix buffer overflow caused by wrong use of getgroups; (bso#12747). + lib: debug: Avoid negative array access; (bso#12746). + cleanupdb: Fix a memory read error; (bso#12748). + streams_xattr and kernel oplocks results in NT_STATUS_NETWORK_BUSY; (bso#7537). + winbindd: idmap_autorid allocates ids for unknown SIDs from other backends; (bso#11961). + vfs_fruit: Resource fork open request with flags=O_CREAT|O_RDONLY; (bso#12565). + manpages/vfs_fruit: Document global options; (bso#12615). + lib/pthreadpool: Fix a memory leak; (bso#12624). + Lookup-domain for well-known SIDs on a DC; (bso#12727). + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728). + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729). + credentials_krb5: use gss_acquire_cred for client-side GSSAPI use case; (bso#12611). + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690). + ctdb-readonly: Avoid a tight loop waiting for revoke to complete; (bso#12697). + ctdb_event monitor command crashes if event is not specified; (bso#12723). + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733). + smbd: Fix smb1 findfirst with DFS; (bso#12558). + smbd: Do an early exit on negprot failure; (bso#12610). + winbindd: Fix substitution for 'template homedir'; (bso#12699). + s4:kdc: Disable principal based autodetected referral detection; (bso#12554). + idmap_autorid: Allocate new domain range if the callers knows the sid is valid; (bso#12613). + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724). + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for trusted domain; (bso#12725). + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731). + winbindd: Fix password policy for pam authentication; (bso#12725). + s3:gse: Correctly handle external trusts with MIT; (bso#12554). + auth/credentials: Always set the realm if we set the principal from the ccache; (bso#12611). + replace: Include sysmacros.h; (bso#12686). + s3:vfs_expand_msdfs: Do not open the remote address as a file; (bso#12687). + s3:libsmb: Only print error message if kerberos use is forced; (bso#12704). + winbindd: Child process crashes when kerberos-authenticating a user with wrong password; (bso#12708). + vfs_fruit: Office document opens as read-only on macOS due to CNID semantics; (bso#12715). + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is fragmented; (bso#12737).- Generate and update vendor-files tarball from Git + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).- Generate source tarball directly from Git using OBS tar_scm + use version string derived from parent Git tag and commit hash - remove obsolete vendor-files/tools/package-data version ID + explicitly generate ctdb manpages, needed without "make dist"- Update to 4.6.2 + remove bso#12721 patches now upstream- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622). + x86-64 and aarch64- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).- Build and install the html man pages (bsc#1021907).- Fix CVE-2017-2619 regression with "follow symlinks = no"; (bso#12721).- Update to 4.6.1 + symlink race permits opening files outside share directory; CVE-2017-2619; (bso#12496); (bsc#1027147) + testparm checks for valid idmap parameters + add new krb client encryption types + support for printer driver upload from windows 10 + inherit owner = 'unix only' for improved quota support + improved CTDB event support + new primary group support for idmap_ad + idmap_hash deprecated + mvxattr added to recursively rename extended attributes- Remove chkconfig requirements for systemd systems- Don't call insserv if systemd is used- Fix check if we need to require insserv- async_req: make async_connect_send() "reentrant"; (bso#12105); (bsc#1024416).- Force usage of ncurses6-config thru NCURSES_CONFIG env var; (bsc#1023847).- add missing patch for libnss_wins segfault; (bsc#995730).- Fix vfs_ceph builds against recent Ceph versions; (bsc#1021933).- Document "winbind: ignore domains" parameter; (bsc#1019416).- Add base Samba dependency to samba-ceph package.- Update to 4.5.3 + Heap-based Buffer Overflow Remote Code Execution Vulnerability; CVE-2016-2123; (bso#12409); (bsc#1014437). + Don't send delegated credentials to all servers; CVE-2016-2125; (bso#12445); (bsc#1014441). + denial of service due to a client triggered crash in the winbindd parent process; CVE-2016-2126; (bso#12446); (bsc#1014442). - 4.5.1 and 4.5.2 updates + various streams vfs fixes + various printing fixes + ntlm_auth: do not map explicitly empty domain + various stability fixes in smbd + match file compression ReFS behavior- Add missing ldb module directory; (bnc#1012092).- s3/client: obey 'disable netbios' smb.conf param, don't connect via NBT port; (bsc#1009085); (bso#12418).- Include vfstest in samba-test; (bsc#1001203).- s3/winbindd: using default domain with user@domain.com format fails; (bsc#997833).- Fix segfault in libnss_wins; (bso#12277); (bso#12269); (bsc#995730).- Update to 4.5.0 + NTLM1 Authentication disabled by default + SMB2.1 leases enabled by default + Support for OFD locks + ctdb tool rewritten + Added shadow copy snapshot prefix parameter- Fix illegal memory access after memory has been deleted; (bso#11836); (bsc#975299).- Prevent core, make sure response->extra_data.data is always cleared out; (bsc#993692).- Don't package man pages for VFS modules that aren't built; (boo#993707).- Fix population of ctdb sysconfig after source merge; (bsc#981566).- Enable vfs_ceph builds for Factory (x86-64) + Package as samba-ceph to avoid Ceph dependency in base package.- Update to 4.4.5 + Prevent client-side SMB2 signing downgrade; CVE-2016-2119; (bso#11860); (bsc#986869).- Remove obsolete syslog.target; (bsc#983938).- Honor smb.conf socket options in winbind; (bsc#975131).- Don't use htons() with IP_PROTO_RAW; (bso#11705); (bsc#969522).- Update to 4.4.4 + SMB3 multichannel: Add implementation of missing channel sequence number verification; (bso#11809). + smbd:close: Only remove kernel share modes if they had been taken at open; (bso#11919). + notifyd: Prevent NULL deref segfault in notifyd_peer_destructor; (bso#11930). + s3:rpcclient: Make '--pw-nt-hash' option work; (bso#10796). + Fix case sensitivity issues over SMB2 or above; (bso#11438). + s3:smbd: Fix anonymous authentication if signing is mandatory. (bso#11910) + Fix NTLM Authentication issue with squid; (bso#11914). + pdb: Fix segfault in pdb_ldap for missing gecos; (bso#11530). + Fix memory leak in share mode locking; (bso#11934).- Update to 4.4.3 + Various post-badlock regressions; (bso#11841); (bso#11850); (bso#11858); (bso#11870); (bso#11872). + Only allow idmap_hash for default idmap config (bso#11786). + smbd: Avoid large reads beyond EOF; (bso#11878). + vfs_acl_common: Avoid setting POSIX ACLs if "ignore system acls" is set; (bso#11806). + libads: Record session expiry for spnego sasl binds; (bso#11852).- Fix NTLMSSP regressions caused by previous CVE fixes; (bso#11849); (bsc#975962); (bsc#979268), (bsc#977669).- Revert shared library packaging to comply with SLPP- Update to 4.4.2 + A man-in-the-middle can downgrade NTLMSSP authentication; CVE-2016-2110; (bso#11688); (bsc#973031). + Domain controller netlogon member computer can be spoofed; CVE-2016-2111; (bso#11749); (bsc#973032). + LDAP conenctions vulnerable to downgrade and MITM attack; CVE-2016-2112; (bso#11644); (bsc#973033). + TLS certificate validation missing; CVE-2016-2113; (bso#11752); (bsc#973034). + Named pipe IPC vulnerable to MITM attacks; CVE-2016-2115; (bso#11756); (bsc#973036). + "Badlock" DCERPC impersonation of authenticated account possible; CVE-2016-2118; (bso#11804); (bsc#971965). + DCERPC server and client vulnerable to DOS and MITM attacks; CVE-2015-5370; (bso#11344); (bsc#936862).- Fix samba.tests.messaging test and prevent potential tdb corruption by removing obsolete now invalid tdb_close call; (bsc#974629).- Obsolete libsmbclient from libsmbclient0 while not providing it; (bsc#972197).- Update to 4.4.0. + Read of uninitialized memory DNS TXT handling; (bso#11128); (bso#11686); CVE-2016-0771. + Getting and setting Windows ACLs on symlinks can change permissions on link target; (bso#11648); CVE-2015-7560. + Sockets with htons(IPPROTO_RAW); (bso#11705); CVE-2015-8543. + s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystem with no ACL support; (bso#10489). + docs: Add example for domain logins to smbspool man page; (bso#11643). + smbd: Show correct disk size for different quota and dfree block sizes; (bso#11681). + docs: Add smbspool_krb5_wrapper manpage; (bso#11690). + winbindd: Return trust parameters when listing trusts; (bso#11691). + ctdb: Do not provide a useless pkgconfig file for ctdb; (bso#11696). + Crypto.Cipher.ARC4 is not available on some platforms, fallback to M2Crypto.RC4.RC4 then; (bso#11699). + s3:utils/smbget: Set default blocksize; (bso#11700). + Streamline 'smbget' options with the rest of the Samba utils; (bso#11700). + s3:clispnego: Fix confusing warning in spnego_gen_krb5_wrap(); (bso#11702). + s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703). + loadparm: Fix memory leak issue; (bso#11708). + lib/tsocket: Work around sockets not supporting FIONREAD; (bso#11714). + s3:vfs:glusterfs: Fix build after quota changes; (bso#11715). + ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ..."; (bso#11719). + lib:socket: Fix CID 1350010: Integer OVERFLOW_BEFORE_WIDEN; (bso#11723). + smbd: Fix CID 1351215 Improper use of negative value; (bso#11724). + smbd: Fix CID 1351216 Dereference null return value; (bso#11725). + s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new file; (bso#11727). + docs: Add manpage for cifsdd; (bso#11730). + param: Fix str_list_v3 to accept ; again; (bso#11732). + lib/socket: Fix improper use of default interface speed; (bso#11734). + lib:socket: Fix CID 1350009: Fix illegal memory accesses (BUFFER_SIZE_WARNING); (bso#11735). + libcli: Fix debug message, print sid string for new_ace trustee; (bso#11738). + Fix installation path of Samba helper binaries; (bso#11739). + Fix memory leak in loadparm; (bso#11740). + tevent: version 0.9.28: Fix memory leak when old signal action restored; (bso#11742). + smbd: Ignore SVHDX create context; (bso#11753). + Fix net join; (bso#11755). + s3:libads: setup the msDS-SupportedEncryptionTypes attribute on ldap_add; (bso#11755). + passdb: Add linefeed to debug message; (bso#11763). + s3:utils/smbget: Fix option parsing; (bso#11767). + libnet: Make Kerberos domain join site-aware; (bso#11769). + Reset TCP Connections during IP failover; (bso#11770). + ldb: Version 1.1.26; (bso#11772). + s3:smbd: Add negprot remote arch detection for OSX; (bso#11773). + vfs_glusterfs: Fix use after free in AIO callback; (bso#11774). + mkdir can return ACCESS_DENIED incorrectly on create race; (bso#11780). + "trustdom_list_done: Got invalid trustdom response" message should be avoided; (bso#11782). + Mismatch between local and remote attribute ids lets replication fail with custom schema; (bso#11783). + Quota is not supported on Solaris 10; (bso#11788). + Talloc: Version 2.1.6; (bso#11789). + smbd: Enable multi-channel if 'server multi channel support = yes' in the config; (bso#11796). + build: Fix build when '--without-quota' specified; (bso#11798). + lib/socket/interfaces: Fix some uninitialied bytes; (bso#11802). + Access based share enum: handle permission set in configuration files; (bso#8093). + See also WHATSNEW.txt from the samba-doc package.- Update to 4.3.6. + Getting and setting Windows ACLs on symlinks can change permissions on link target; CVE-2015-7560; (bso#11648); (bsc#968222). + Fix Out-of-bounds read in internal DNS server; CVE-2016-0771; (bso#11128); (bso#11686); (bsc#968223).- Upgrade on-disk FSRVP server state to new version; (bsc#924519).- Only obsolete but do not provide gplv2/3 package names; (bsc#968973).- Relocate existing lock files to /var/lib/samba/lock; (bsc#968963).- Obsolete no longer existing samba-32bit package; (bsc#967625).- Update to 4.3.5. + s3:utils/smbget: Fix recursive download; (bso#6482). + s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystemi with no ACL support; (bso#10489). + s3:smbd/oplock: Obey kernel oplock setting when releasing oplocks; (bso#11400). + vfs_shadow_copy2: Fix case where snapshots are outside the share; (bso#11580). + smbclient: Query disk usage relative to current directory; (bso#11662). + winbindd: Handle expired sessions correctly; (bso#11670). + smbd: Show correct disk size for different quota and dfree block sizes; (bso#11681). + smbcacls: Fix uninitialized variable; (bso#11682). + s3:smbd: Ignore initial allocation size for directory creation; (bso#11684). + s3-client: Add a KRB5 wrapper for smbspool; (bso#11690). + s3-parm: Clean up defaults when removing global parameters; (bso#11693). + Use M2Crypto.RC4.RC4 on platforms without Crypto.Cipher.ARC4; (bso#11699). + s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703). + ctdb: Remove error messages after kernel security update; CVE-2015-8543; (bso#11705). + loadparm: Fix memory leak issue; (bso#11708). + lib/tsocket: Work around sockets not supporting FIONREAD; (bso#11714). + ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ..."; (bso#11719). + s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new file; (bso#11727). + param: Fix str_list_v3 to accept ";" again; (bso#11732).- Shift samba-client sysconfig data into samba and samba-winbind; (bsc#947361).- Simplify shared library packaging; (bsc#966956).- Enable clustering (CTDB) support; (bsc#966271).- s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703); (bsc#964023).- Add quotes around path of update-apparmor-samba-profile; (bnc#962177).- Remove autoconf build-time requirement.- Update to 4.3.4. + vfs_fruit: Enable POSIX directory rename semantics; (bso#11065). + Crash: Bad talloc magic value - access after free; (bso#11394). + Copying files with vfs_fruit fails when using vfs_streams_xattr without stream prefix and type suffix; (bso#11466). + samba-tool: Fix uncaught exception if no fSMORoleOwner attribute is given; (bso#11613). + Fix a typo in the smb.conf manpage, explanation of idmap config; (bso#11619). + Correctly initialize the list head when keeping a list of primary followed by DFS connections; (bso#11624). + Reduce the memory footprint of empty string options; (bso#11625). + lib/async_req: Do not install async_connect_send_test; (bso#11639). + Fix typos in man vfs_gpfs; (bso#11641). + Make "hide dot files" option work with "store dos attributes = yes"; (bso#11645). + Fix a corner case of the symlink verification; (bso#11647); (bnc#960249). + Do not disable "store dos attributes" on-the-fly; (bso#11649). + Update lastLogon and lastLogonTimestamp; (bso#11659).- Prevent access denied if the share path is "/"; (bso#11647); (bnc#960249).- Update to 4.3.3. + Malicious request can cause Samba LDAP server to hang, spinning using CPU; CVE-2015-3223; (bso#11325); (bnc#958581). + Remote read memory exploit in LDB; CVE-2015-5330; (bso#11599); (bnc#958586). + Insufficient symlink verification (file access outside the share); CVE-2015-5252; (bso#11395); (bnc#958582). + No man in the middle protection when forcing smb encryption on the client side; CVE-2015-5296; (bso#11536); (bnc#958584). + Currently the snapshot browsing is not secure thru windows previous version (shadow_copy2); CVE-2015-5299; (bso#11529); (bnc#958583). + Fix Microsoft MS15-096 to prevent machine accounts from being changed into user accounts; CVE-2015-8467; (bso#11552); (bnc#958585).- Update to 4.3.2. + vfs_gpfs: Re-enable share modes; (bso#11243). + dcerpc.idl: Accept invalid dcerpc_bind_nak pdus; (bso#11327). + s3-smbd: Fix old DOS client doing wildcard delete - gives an attribute type of zero; (bso#11452). + Add libreplace dependency to texpect, fixes a linking error on Solaris; (bso#11511). + s4: Fix linking of 'smbtorture' on Solaris; (bso#11512). + s4:lib/messaging: Use correct path for names.tdb; (bso#11562). + Fix segfault of 'net ads (join|leave) -S INVALID' with nss_wins; (bso#11563). + async_req: Fix non-blocking connect(); (bso#11564). + auth: gensec: Fix a memory leak; (bso#11565). + lib: util: Make non-critical message a warning; (bso#11566). + Fix winbindd crashes with samlogon for trusted domain user; (bso#11569); (bnc#949022). + smbd: Send SMB2 oplock breaks unencrypted; (bso#11570). + ctdb: Open the RO tracking db with perms 0600 instead of 0000; (bso#11577). + s3:smb2_server: Make the logic of SMB2_CANCEL DLIST_REMOVE() clearer; (bso#11581). + s3-smbd: Fix use after issue in smbd_smb2_request_dispatch(); (bso#11581). + manpage: Correct small typo error; (bso#11584). + s3: smbd: If EAs are turned off on a share don't allow an SMB2 create containing them; (bso#11589). + Backport some valgrind fixes from upstream master; (bso#11597). + auth: Consistent handling of well-known alias as primary gid; (bso#11608). + winbind: Fix crash on invalid idmap configs; (bso#11612). + s3: smbd: have_file_open_below() fails to enumerate open files below an open directory handle; (bso#11615). + Changing log level of two entries to DBG_NOTICE; (bso#9912).- Ensure samlogon fallback requests are rerouted after kerberos failure; (bnc#953382); (bnc#953972).- Ensure to link with --as-needed flag by removing SUSE_ASNEEDED=0. - Always use the default optimization even on pre-9.2 systems.- Remove redundant configure options while adding with-relro.- Relocate the lockdir to the /var/lib/samba/lock directory.- Cleanup and enhance the pidl sub package.- Require renamed python-ldb-devel and python-talloc-devel at build-time. - Requires python-ldb and python-talloc from the python subpackage.- Update to 4.3.1. + s3: smbd: Fix our access-based enumeration on "hide unreadable" to match Windows; (bso#10252). + nss_winbind: Fix hang on Solaris on big groups; (bso#10365). + smbd: Fix file name buflen and padding in notify repsonse; (bso#10634). + kerberos: Make sure we only use prompter type when available; winbind: Fix 100% loop; (bso#11038). + source3/lib/msghdr.c: Fix compiling error on Solaris; (bso#11053). + s3:ctdbd_conn: make sure we destroy tevent_fd before closing the socket; (bso#11316). + s3: smbd: Fix mkdir race condition; (bso#11486). + pam_winbind: Fix a segfault if initialization fails; (bso#11502). + s3: dfs: Fix a crash when the dfs targets are disabled; (bso#11509). + s4:lib/messaging: Use 'msg.lock' and 'msg.sock' for messaging related subdirs; (bso#11515). + s3: smbd: Fix opening/creating :stream files on the root share directory; (bso#11522). + lib/param: Fix hiding of FLAG_SYNONYM values; (bso#11526). + net: Fix a crash with 'net ads keytab create'; (bso#11528). + s3: smbd: Fix a crash in unix_convert(); (bso#11535). + s3: smbd: Fix NULL pointer bug introduced by previous 'raw' stream fix (bso#11522); (bso#11535). + vfs_fruit: Return value of ad_pack in vfs_fruit.c; (bso#11543). + vfs_commit: set the fd on open before calling SMB_VFS_FSTAT; (bso#11547). + s3:locking: Initialize lease pointer in share_mode_traverse_fn(); (bso#11549). + s3:smbstatus: Add stream name to share_entry_forall(); (bso#11550). + s3:lib: Validate domain name in lookup_wellknown_name(); (bso#11555). + s3: lsa: lookup_name() logic for unqualified (no DOMAIN component) names is incorrect; (bso#11555).- Fix 100% CPU in winbindd when logging in with "user must change password on next logon"; (bso#11038).- Relocate the tmpfiles.d directory to the client package; (bnc#947552).- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf instead; (bnc#942716).- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).- Package /var/lib/samba/msg with 0755 permissions; (bso#11515); (bnc#945502).- Require to install libfam0-gamin from samba-libs on post-12.1 and pre-13.15 systems; (bnc#945013).- Update to 4.3.0. + Samba "map to guest = Bad uid" doesn't work; (bso#9862). + revert LDAP extended rule 1.2.840.113556.1.4.1941 LDAP_MATCHING_RULE_IN_CHAIN changes; (bso#10493). + No objectClass found in replPropertyMetaData on ordinary objects (non-deleted); (bso#10973). + Stream names with colon don't work with fruit:encoding = native; (bso#11278). + NetApp joined to a Samba/ADDC cannot resolve SIDs; (bso#11291). + tevent_fd needs to be destroyed before closing the fd; (bso#11316). + "force group" with local group not working; (bso#11320). + strsep is not available on Solaris; (bso#11359). + smbtorture does not build when configured --with-system-mitkrb5; (bso#11411). + Build with GPFS support is broken; (bso#11421). + Build broken with --disable-python; (bso#11424). + net share allowedusers crashes; (bso#11426). + nmbd incorrectly matches netbios names as own name; (bso#11427). + Python bindings don't check integer types; (bso#11429). + Python bindings don't check array sizes; (bso#11430). + CTDB's eventscript error handling is broken; (bso#11431). + Fix crash in nested ctdb banning; (bso#11432). + Cannot build ctdbpmda; (bso#11434). + samba-tool uncaught exception error; (bso#11436). + Crash in notify_remove caused by change notify = no; (bso#11444). + Poor SMB3 encryption performance with AES-GCM; (bso#11451). + Poor SMB3 encryption performance with AES-GCM (part1); (bso#11451). + fix recursion problem in rep_strtoll in lib/replace/replace.c; (bso#11455). + --bundled-libraries=!ldb,!pyldb,!pyldb-util doesn't disable ldb build and install; (bso#11458). + xid2sid gives inconsistent results; (bso#11464). + ctdb: Fix the build on FreeBSD 10.1; (bso#11465). + Handling of 0 byte resource fork stream; (bso#11467). + AD samr GetGroupsForUser fails for users with "()" in their name; (bso#11488).- Configure with --bundled-libraries=NONE; (bso#11458).- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).- Remove libiniparser-devel build-time requirement.- Update to 4.2.3. + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780). + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924). + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991). + Logon via MS Remote Desktop hangs; (bso#11061). + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068). + tevent: Add a note to tevent_add_fd(); (bso#11141). + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170). + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217). + smbd: Fix a use-after-free; (bso#11218); (bnc#919309). + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces; (bso#11245). + s3:smb2: Add padding to last command in compound requests; (bso#11277). + Add IPv6 support to ADS client side LDAP connects; (bso#11281). + Add IPv6 support for determining FQDN during ADS join; (bso#11282). + s3: IPv6 enabled DNS connections for ADS client; (bso#11283). + Fix invalid write in ctdb_lock_context_destructor; (bso#11293). + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295). + vfs_fruit: Add option "veto_appledouble"; (bso#11305). + tstream: Make socketpair nonblocking; (bso#11312). + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313). + Group creation: Add msSFU30Name only when --nis-domain was given; (bso#11315). + tevent_fd needs to be destroyed before closing the fd; (bso#11316). + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared"; (bso#11319). + smbd/trans2: Add a useful diagnostic for files with bad encoding; (bso#11323). + Change sharesec output back to previous format; (bso#11324). + Robust mutex support broken in 1.3.5; (bso#11326). + Kerberos auth info3 should contain resource group ids available from pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info exists in PAC; (bso#11328); (bnc#912457). + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329). + tevent: Fix CID 1035381 Unchecked return value; (bso#11330). + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331). + s3: smbd: Use separate flag to track become_root()/unbecome_root() state; (bso#11339). + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342). + pidl: Make the compilation of PIDL producing the same results if the content hasn't change; (bso#11356). + winbindd: Disconnect child process if request is cancelled at main process; (bso#11358). + vfs_fruit: Check offset and length for AFP_AfpInfo read requests; (bso#11363). + docs: Overhaul the description of "smb encrypt" to include SMB3 encryption; (bso#11366). + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server(); (bso#11367). + ncacn_http: Fix GNUism; (bso#11371).- Disable rpath usage; (bnc#902421).- Make the winbind package depend on the matching libwbclient version and vice versa; (bnc#936909).- Backport changes to use resource group sids obtained from pac logon_info; (bso#11328); (bnc#912457).- Order winbind.service Before and Want nss-user-lookup target.- Remove fam-devel build-time dependency for post-6 RHEL systems.- Update to 4.2.2. + s3:smbXsrv: refactor duplicate code into smbXsrv_session_clear_and_logoff(); (bso#11182). + gencache: don't fail gencache_stabilize if there were records to delete; (bso#11260). + s3: libsmbclient: After getting attribute server, ensure main srv pointer is still valid; (bso#11186). + s4: rpc: Refactor dcesrv_alter() function into setup and send steps; (bso#11236). + s3: smbd: Incorrect file size returned in the response of "FILE_SUPERSEDE Create"; (bso#11240). + Mangled names do not work with acl_xattr; (bso#11249). + nmbd rewrites browse.dat when not required; (bso#11254). + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff; (bso#11213). + s3:smbd: Add missing tevent_req_nterror; (bso#11224). + vfs: kernel_flock and named streams; (bso#11243). + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244). + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses are used; (bso#11284). + ctdb: check for talloc_asprintf() failure; (bso#11201). + spoolss: purge the printer name cache on name change; (bso#11210); (bnc#901813). + CTDB statd-callout does not scale; (bso#11204). + vfs_fruit: also map characters below 0x20; (bso#11221). + ctdb: Coverity fix for CID 1291643; (bso#11201). + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225). + Fix terminate connection behavior for asynchronous endpoint with PUSH notification flavors; (bso#11226). + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007). + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201). + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the directory is deleted; (bso#11257). + s3:winbindd: make sure we remove pending io requests before closing client sockets; (bso#11141); (bnc#931854). + Fix panic triggered by smbd_smb2_request_notify_done() -> smbXsrv_session_find_channel() in smbd; (bso#11182). + 'sharesec' output no longer matches input format; (bso#11237). + waf: Fix systemd detection; (bso#11200). + CTDB: Fix portability issues; (bso#11202). + CTDB: Fix some IPv6-related issues; (bso#11203). + CTDB statd-callout does not scale; (bso#11204). + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you enter invalid values; (bso#11234). + libads: record service ticket endtime for sealed ldap connections; (bso#11267). + lib/util: Include DEBUG macro in internal header files before samba_util.h; (bso#11033).- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).- Remove the independently built libraries ldb, talloc, tdn, and tevent and the post-10.3 renamed libsmbclient from baselibs.conf.- Drop redundant doc attribute from man pages.- Update to 4.2.1. + s3:winbind:grent: Don't stop group enumeration when a group has no gid; (bso#8905). + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791). + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with servers that don't send the 2 unused fields; (bso#10016). + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476). + waf: Fix the build on openbsd; (bso#10476). + s3: client: "client use spnego principal = yes" code checks wrong name; (bso#10888). + spoolss: Retrieve published printer GUID if not in registry; (bso#11018). + s3: lib: libsmbclient: If reusing a server struct, check every cli->timout miliseconds if it's still valid before use; (bso#11079). + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125). + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135). + replace: Remove superfluous check for gcrypt header; (bso#11135). + Backport subunit changes; (bso#11137). + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with implementation; (bso#11140). + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143). + talloc: Version 2.1.2; (bso#11144). + Update libwbclient version to 0.12; (bso#11149). + brlock: Use 0 instead of empty initializer list; (bso#11153). + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164). + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169); (bnc#913304). + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev fails in the SMB1 case; (bso#11173). + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174). + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175). + s3: libsmbclient: Add missing talloc stackframe; (bso#11177). + s4-process_model: Do not close random fds while forking; (bso#11180). + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).- Prevent samba package updates from disabling samba kerberos printing.- Add sparse file support for samba; (fate#318424).- Purge printer name cache on spoolss SetPrinter change; (bso#11210); (bnc#901813).- Correctly retain errno from Btrfs snapshot ioctls; (bnc#923374).- Simplify libxslt build requirement and README.SUSE install. - Remove no longer required cleanup steps while populating the build root.- Remove deprecated base_rid example from idmap_rid manpage; (bso#11169); (bnc#913304).- Update to 4.2.0. + smbd: Stop using vfs_Chdir after SMB_VFS_DISCONNECT; (bso#1115). + pam_winbind: fix warn_pwd_expire implementation; (bso#9056). + nsswitch: Fix soname of linux nss_*.so.2 modules; (bso#9299). + Make 'profiles' work again; (bso#9629). + s3:smb2_server: protect against integer wrap with "smb2 max credits = 65535"; (bso#9702). + Make validate_ldb of String(Generalized-Time) accept millisecond format ".000Z"; (bso#9810). + Use -R linker flag on Solaris, not -rpath; (bso#10112). + vfs: Add glusterfs manpage; (bso#10240). + Make 'smbclient' use cached creds; (bso#10279). + pdb: Fix build issues with shared modules; (bso#10355). + s4-dns: Add support for BIND 9.10; (bso#10620). + idmap: Return the correct id type to *id_to_sid methods; (bso#10720). + printing/cups: Pack requested-attributes with IPP_TAG_KEYWORD; (bso#10808). + Don't build vfs_snapper on FreeBSD; (bso#10834). + nss_winbind: Add getgroupmembership for FreeBSD; (bso#10835). + idmap_rfc2307: Fix a crash after connection problem to DC; (bso#10837). + s3: smb2cli: query info return length check was reversed; (bso#10848). + s3: lib, s3: modules: Fix compilation on Solaris; (bso#10849). + lib: uid_wrapper: Fix setgroups and syscall detection on a system without native uid_wrapper library; (bso#10851). + winbind3: Fix pwent variable substitution; (bso#10852). + Improve samba-regedit; (bso#10859). + registry: Don't leave dangling transactions; (bso#10860). + Fix build of socket_wrapper on systems without SO_PROTOCOL; (bso#10861). + build: Do not install 'texpect' binary anymore; (bso#10862). + Fix testparm to show hidden share defaults; (bso#10864). + libcli/smb: Fix smb2cli_validate_negotiate_info with min=PROTOCOL_NT1 max=PROTOCOL_SMB2_02; (bso#10866). + Integrate CTDB into top-level Samba build; (bso#10892). + samba-tool group add: Add option '--nis-domain' and '--gid'; (bso#10895). + s3-nmbd: Fix netbios name truncation; (bso#10896). + spoolss: Fix handling of bad EnumJobs levels; (bso#10898). + Fix smbclient loops doing a directory listing against Mac OS X 10 server with a non-wildcard path; (bso#10904). + Fix print job enumeration; (bso#10905); (bnc#898031). + samba-tool: Create NIS enabled users and unixHomeDirectory attribute; (bso#10909). + Add support for SMB2 leases; (bso#10911). + btrfs: Don't leak opened directory handle; (bso#10918). + s3: nmbd: Ensure NetBIOS names are only 15 characters stored; (bso#10920). + s3:smbd: Fix file corruption using "write cache size != 0"; (bso#10921). + pdb_tdb: Fix a TALLOC/SAFE_FREE mixup; (bso#10932). + s3-keytab: fix keytab array NULL termination; (bso#10933). + s3:passdb: fix logic in pdb_set_pw_history(); (bso#10940). + Cleanup add_string_to_array and usage; (bso#10942). + dbwrap_ctdb: Pass on mutex flags to tdb_open; (bso#10942). + Fix RootDSE search with extended dn control; (bso#10949). + Fix 'samba-tool dns serverinfo ' for IPv6; (bso#10952). + libcli/smb: only force signing of smb2 session setups when binding a new session; (bso#10958). + s3-smbclient: Return success if we listed the shares; (bso#10960). + s3-smbstatus: Fix exit code of profile output; (bso#10961). + socket_wrapper: Add missing prototype check for eventfd; (bso#10965). + libcli: SMB2: Pure SMB2-only negprot fix to make us behave as a Windows client does; (bso#10966). + vfs_streams_xattr: Check stream type; (bso#10971). + s3: smbd: Fix *allocate* calls to follow POSIX error return convention; (bso#10982). + vfs_fruit: Add support for AAPL; (bso#10983). + Fix spoolss IDL response marshalling when returning error without clearing info; (bso#10984). + dsdb-samldb: Check for extended access rights before we allow changes to userAccountControl; (bso#10993); CVE-2014-8143; (boo#914279). + Fix IPv6 support in CTDB; (bso#10996). + ctdb-daemon: Use correct tdb flags when enabling robust mutex support; (bso#11000). + vfs_streams_xattr: Add missing call to SMB_VFS_NEXT_CONNECT; (bso#11005). + s3-util: Fix authentication with long hostnames; (bso#11008). + ctdb-build: Fix build without xsltproc; (bso#11014). + packaging: Include CTDB man pages in the tarball; (bso#11014). + pdb_get_trusteddom_pw() fails with non valid UTF16 random passwords; (bso#11016). + Make Sharepoint search show user documents; (bso#11022). + nss_wrapper: check for nss.h; (bso#11026). + Enable mutexes in gencache_notrans.tdb; (bso#11032). + tdb_wrap: Make mutexes easier to use; (bso#11032). + lib/util: Avoid collision which alread defined consumer DEBUG macro; (bso#11033). + winbind: Retry after SESSION_EXPIRED error in ping-dc; (bso#11034). + s3-libads: Fix a possible segfault in kerberos_fetch_pac(); (bso#11037). + vfs_fruit: Fix base_fsp name conversion; (bso#11039). + vfs_fruit: mmap under FreeBSD needs PROT_READ; (bso#11040). + Fix authentication using Kerberos (not AD); (bso#11044). + net: Fix sam addgroupmem; (bso#11051). + vfs_snapper: Correctly handles multi-byte DBus strings; (bso#11055); (bnc#913238). + cli_connect_nb_send: Don't segfault on host == NULL; (bso#11058). + utils: Fix 'net time' segfault; (bso#11058). + libsmb: Provide authinfo domain for encrypted session referrals; (bso#11059). + s3-pam_smbpass: Fix memory leak in pam_sm_authenticate(); (bso#11066). + vfs_glusterfs: Add comments to the pipe(2) code; (bso#11069). + vfs/glusterfs: Change xattr key to match gluster key; (bso#11069). + vfs_glusterfs: Implement AIO support; (bso#11069). + s3-vfs: Fix developer build of vfs_ceph module; (bso#11070). + s3: netlogon: Ensure we don't call talloc_free on an uninitialized pointer; (bso#11077); CVE-2015-0240; (bnc#917376). + vfs: Add a brief vfs_ceph manpage; (bso#11088). + s3: smbclient: Allinfo leaves the file handle open; (bso#11094). + Fix Win8.1 Credentials Manager issue after KB2992611 on Samba domain; (bso#11097). + debug: Set close-on-exec for the main log file FD; (bso#11100). + s3: smbd: leases - losen paranoia check. Stat opens can grant leases; (bso#11102). + s3: smbd: SMB2 close. If a file has delete on close, store the return info before deleting; (bso#11104). + doc:man:vfs_glusterfs: improve the configuration section; (bso#11117). + snprintf: Try to support %j; (bso#11119). + ctdb-io: Do not use sys_write to write to client sockets; (bso#11124). + doc-xml: Add 'sharesec' reference to 'access based share enum'; (bso#11127).- Update to 4.2.0rc5. + Ensure we don't call talloc_free on an uninitialized pointer; CVE-2015-0240; (bso#11077); (bnc#917376).- Fix usage of freed memory on server exit; (bso#11218); (bnc#919309).- Fix tdb_store_flag_to_ntdb() gcc5 build failure.- Fix vfs_snapper DBus string handling; (bso#11055); (bnc#913238).- Update to 4.1.16. + dsdb-samldb: Check for extended access rights before we allow changes to userAccountControl; (bso#10993); CVE-2014-8143; (boo#914279).- Adjust baselibs.conf due to libpdb0 package rename to libsamba-passdb0.- Fix libsmbclient DFS referral handling. + Reuse connections derived from DFS referrals; (bso#10123); (fate#316512). + Set domain/workgroup based on authentication callback value; (bso#11059).- Update to 4.2.0rc4. - Add libsamba-debug, libsocket-blocking, libsamba-cluster-support, and libhttp to the libs package; (boo#913547). - Rename libpdb packages to libsamba-passdb. - Drop libsmbsharemodes packages.- Enable avahi support on post-12.2 systems.- Update to 4.1.15. + pam_winbind: Fix warn_pwd_expire implementation; (bso#9056). + nsswitch: Fix soname of linux nss_*.so.2 modules; (bso#9299). + Fix profiles tool; (bso#9629). + s3-lib: Do not require a password with --use-ccache; (bso#10279). + s4:dsdb/rootdse: Expand extended dn values with the AS_SYSTEM control; (bso#10949). + s4-rpc: dnsserver: Fix enumeration of IPv4 and IPv6 addresses; (bso#10952). + s3:smb2_server: Allow reauthentication without signing; (bso#10958). + s3-smbclient: Return success if we listed the shares; (bso#10960). + s3-smbstatus: Fix exit code of profile output; (bso#10961). + libcli: SMB2: Pure SMB2-only negprot fix to make us behave as a Windows client does; (bso#10966). + s3: smbd/modules: Fix *allocate* calls to follow POSIX error return convention; (bso#10982). + Fix 'domain join' by adding 'drsuapi.DsBindInfoFallBack' attribute 'supported_extensions'; (bso#11006). + idl:drsuapi: Manage all possible lengths of drsuapi_DsBindInfo; (bso#11006). + winbind: Retry LogonControl RPC in ping-dc after session expiration; (bso#11034).- yast2-samba-client should be able to specify osName and osVer on AD domain join; (bnc#873922).- Lookup FSRVP share snums at runtime rather than storing them persistently; (bnc#908627).- Specify soft dependency for network-online.target in Winbind systemd service file; (bnc#889175).- Fix spoolss error response marshalling; (bso#10984).- Update to 4.1.14. + pidl/wscript: Remove --with-perl-* options; revert buildtools/wafadmin/ Tools/perl.py back to upstream state; (bso#10472). + s4-dns: Add support for BIND 9.10; (bso#10620). + nmbd fails to accept "--piddir" option; (bso#10711). + nss_winbind: Add getgroupmembership for FreeBSD; (bso#10835). + S3: source3/smbd/process.c::srv_send_smb() returns true on the error path; (bso#10880). + vfs_glusterfs: Remove "integer fd" code and store the glfs pointers; (bso#10889). + s3-nmbd: Fix netbios name truncation; (bso#10896). + spoolss: Fix handling of bad EnumJobs levels; (bso#10898). + s3: libsmbclient-smb2. MacOSX 10 SMB2 server doesn't set STATUS_NO_MORE_FILES when handed a non-wildcard path; (bso#10904). + spoolss: Fix jobid in level 3 EnumJobs response; (bso#10905). + s3: nmbd: Ensure NetBIOS names are only 15 characters stored; (bso#10920). + s3:smbd: Fix file corruption using "write cache size != 0"; (bso#10921). + pdb_tdb: Fix a TALLOC/SAFE_FREE mixup; (bso#10932). + s3-keytab: Fix keytab array NULL termination; (bso#10933). + Cleanup add_string_to_array and usage; (bso#10942).- Remove and cleanup shares and registry state associated with externally deleted snaphots exposed as shadow copies; (bnc#876312).- Use the upstream tar ball, as signature verification is now able to handle compressed archives.- Fix leak when closing file descriptor returned from dirfd; (bso#10918).- Fix spoolss EnumJobs and GetJob responses; (bso#10905); (bnc#898031). + Fix handling of bad EnumJobs levels; (bso#10898).- Remove dependency on gpg-offline as signature checking is implemented in the source validator.- Update to 4.1.13. + s3-libnet: Add libnet_join_get_machine_spns(); (bso#9984). + s3-libnet: Make sure we do not overwrite precreated SPNs; (bso#9984). + s3-libads: Add all machine account principals to the keytab; (bso#9985). + s3: winbindd: Old NT Domain code sets struct winbind_domain->alt_name to be NULL. Ensure this is safe with modern AD-DCs; (bso#10717). + Fix unstrcpy; (bso#10735). + pthreadpool: Slightly serialize jobs; (bso#10779). + s3: smbd: streams - Ensure share mode validation ignores internal opens (op_mid == 0); (bso#10797). + s3: smbd:open_file: Open logic fix; Use a more natural check; (bso#10809). + vfs_media_harmony: Fix a crash bug; (bso#10813). + docs: Mention incompatibility between kernel oplocks and streams_xattr; (bso#10814). + nmbd: Send waiting status to systemd; (bso#10816). + libcli: Fix a segfault calling smbXcli_req_set_pending() on NULL; (bso#10817). + nsswitch: Skip groups we were not able to map; (bso#10824). + s3-winbindd: Use correct realm for trusted domains in idmap child; (bso#10826). + s3: nmbd: Ensure the main nmbd process doesn't create zombies; (bso#10830). + s3: lib: Signal handling - ensure smbrun and change password code save and restore existing SIGCHLD handlers; (bso#10831). + idmap_rfc2307: Fix a crash after connection problem to DC; (bso#10837). + s3-winbindd: Do not use domain SID from LookupSids for Sids2UnixIDs call; (bso#10838). + s3: smb2cli: Query info return length check was reversed; (bso#10848). + registry: Don't leave dangling transactions; (bso#10860).- Update to 4.2.0rc2./bin/sh/bin/sh/bin/sh/bin/shsamba-gplv3-winbindh04-ch1d 1703082713 4.15.13+git.710.7032820fcd-150400.3.34.24.15.13+git.710.7032820fcd-150400.3.34.24.15.13+git.710.7032820fcd-150400.3.34.24.15.13+git.710.7032820fcd samba-winbindpam_winbind.conf55-samba-winbindd55-samba-winbinddsamba-winbinddntlm_authwbinfowinbind.servicercwinbindwinbinddsysconfig.samba-winbindntlm_auth.1.gzwbinfo.1.gzwinbindd.8.gzwinbind.xmlkrb5rcachewinbindd_privileged/etc/logrotate.d//etc/security//etc/sysconfig/network/if-down.d//etc/sysconfig/network/if-up.d//etc/sysconfig/network/scripts//usr/bin//usr/lib/systemd/system//usr/sbin//usr/share/fillup-templates//usr/share/man/man1//usr/share/man/man8//usr/share/omc/svcinfo.d//var/cache//var/lib/samba/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:31907/SUSE_SLE-15-SP4_Update/625f171e9af34d04e78337ab8ddad37d-samba.SUSE_SLE-15-SP4_Updatecpioxz5x86_64-suse-linux ASCII textemptyBourne-Again shell script, ASCII text executableELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=71b1d0b0760b570283915908371e220b7488cacc, for GNU/Linux 3.2.0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=954041a6980de75101fe70aadadff0cc3cf81f93, for GNU/Linux 3.2.0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=b808c665d0ffefe772af85d1f2cdfd49bb780992, for GNU/Linux 3.2.0, strippedUTF-8 Unicode texttroff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix)XML 1.0 document, ASCII textdirectory5Q4RR9R6RRWRoRsRRRR4R!RRiRR_RuRaRcR]R[R2R}RRRRRRmRrR R3R8RZRnRhR`RtRRlRR\RbRR^RR1RR|R5RRVRRYRWRRRmR!R}RRRR_R[R2RRRRR RlRRRZR1R^R|RVRXRReR0RRRWR&RCR$RyRURIRsR4R!R{RYRoRR]RR7R6RARqRRRcRERR.RkRRKR_R[RGRaRwR RRRRRRRR;R}R2RSR(R=R9RR,RQRPRORiR?RuRMR RRRRRRRR*RgRmRNR RR#R'RRfRTRZRhRHR RrR R>R`RxRFR+R-RR:R)RlRbRRRJRBR@RzRjRRR^R%RdR/R\RtRLRRDRR8R3R1RnRRpRvR|RLʜ:x~'/v(P,\X`7dWD 6N.E0}H|~n7^ tW 1"bXRu8TۭxN,՜^+eL-.Kwd3*f}j|7*3k0εa-M}k9.bMm: Tvxh3Żo߃TOY2`s2/MI¾F.l ^u vo ]O.=WET.|vڷFQJ%+9lĪYf p:QcE@ T1&&z^ ,핃\]avS1 ҪlT$Ճ@Eϴt`5}MECWJz0ZGʧc0"bV{0F]YĮG'B0T97GvCׅRxi4K`gu!W mC23 ^3?342= S0~;=H 7SgpVۃmqM/}-Ċ|>W\eϳͿmv`9wi"9T;3JGݫ}^ ,$%4y{my񼺆!#n>2陆omto#[$k/ !xo^atN?1G&cA߫vG=$GN9능ݍB!#9C\|:~Tb$9!Y-q>Vi{En~tjAvpceSF^`zQz-hJ0 OxpU]YR#X%|D18[2>:$E廗7S2WLoFAOeaMԹ輗%LY/*Π!V*x$Txw(am)Ϡfb𖄻 3oA#Tj3{s?:Cpv= ܤ@S=*'/]Y ,*V0pV\&&g+{.~~C"Jgn!hhp"o]8`$ņz0pa{ H`gbZ 螝4w>4͡4<7!l-u)G\ nJaP3`)sǾ@SxVJwXh~O/LRI *ێ5|kѤН7vDpۀhW(q92nRd0ڒi2l~X-;~͕hD#J5 3e :E9};3 C)e<,V*ˆ?F@u7X 9Yn%2$&I(+%~?Pqʨr4* U~>2!I"ve[S;/BzѨac. FM5ytr&}\6A+oz|=;(by=&` dl*PwuSЪ&U2DK$}d׊TGs`7 YW 3I2Ā׻~3u(V%[8#9Dۂ Kr_uA8%/T#\eI CYݡ*}s.h׌0_upTFYY-s뺬+2 DQ^JbKFBV 8nv Doѣ!j9amil^q>'>jq]bjEk+BB5 P&A OķpYd,)Ƚp\:9 Y,e8;_MCJH$DuAXI)yfTԬpAR}d5@},.\[oSo\o} AՂyrtMuf"jn0ۗJtD`ǖ'@bco*~ ުwH*HIu`ѕhz< :6'kk!a-1o~y3y>7 t?ɥD11C>h*!LVŦYQPYϵŨUSpOF@Yf4OeHNQOS1BRgѹ%=e.,le2<]pY"v#,_T-@:*%4ۦsSs]Q`?UD̓. fdNQԹs1Ii&*4%}wZAR3ND[x)cH):[%&7kl|M,,ԥ MV'8AP=:Ebu%Lɼ`%wDK #K 922mnNTccw&"3gq0Xn-^ #D'a {4 rw5q ނkŻ 9TeucE$9o !9V婾mmkN @хLw>0Ւe7`^'o>WUojDPWXκ@'UvJ2șXg MYcJŻ ?N{Dִ- bmS)8[=YB)joݔx"Dڋ:_ |+ + ̇M!Շ'&1n 3 Ot$%:Zb}ƒ+hzm']6RG}+˔GzfS'E1~э7ׂdA)qhkW{_YWE3RRpɋ?S;dJϚPY v1,kZ8}>u}Լ%<k n@=SVz Ć^wj^q g\kZ‚Y$cHfNȤ$'5n9il?x9Ie8D]FL@HJ鉇~[A#畆vmM;cStV4&֒~GxCeć\yQV3,l)e>Fؠow pсżO\ R.qB 2ZA<[r˝pWo[73JM4LKmKm~ijG)Q uWupW6u> m;7OFS2v Tr OB.e[CK5Mo'^h-}͗i'-;)E+%C2i7(/.uh9tds/#t ^^9aHӰ0Ć / q YKw؀%u3ꂆ 0( iJ1oozn"Gh`{bq KvBt?$ RJdwݿzاyI4/CW2oQ7Ѝk\*\tiDXL>j$CuGQn= xm=oDb[ctǯԺFB!.wvn .)~B Xv1:‹$gDZ=-n/Z qÜԄTwr6sxnU$X=X)= 0*1w5RIzVҬzn=}Eui) |O%nxq/g2Fs7BV!U7j巼t{ @dMbG*W\vBƣ0HR(j`4^X%8$oM^#6*9TkJEx AG껄 GtLYCfߍ":!Hf%"G(D7T$@K3AzBiUT;~ѺsAt[n9GbȰoz>h&wUR_1=pرHn2_V |\7iLj %: jRl>ۨt T˲}'={ѥo~FV.\}i'k.l%?2T7wF k&s%o靈>3MC(-OQR4tRk]h臗?1: !ʬ@GއYz K{ }-&E@f$HZb}W2S3]B!g2OSy"l-T4f@#Fـ rk⎒FQ3~0<M݈p3IR%v-- ^d- 8Lj q73&=4Uu#wSzl׺mp?>E}K"Tltmj2kɠp嶾QuQ>SM$ͬiO@$r5lt] -&"\$8r -?~? Q2-pn6#=0\#rc,J[oւ ;ꮪ';;¿7g?oOxdqXHiJٹ cmߜq_ZF^5/&rfk\עE@lnejyVd?W/U+\j+_{ BQPK;+V>gxq[Zlf4tOpiCzQ*Z?_Vrko`*m[Udj3KUyc1I SHǣH.`̀ 7Vr-[]f]),ujPj]=vR`&Mcj QƑ=Z=:Tҷ&3hM%I#\2[CHNaFk~N]\L*>yi}? zDY $b!6] EvF3o8seXD:8PL42#LWnɿ.dQUW.9VO%9"YT1|o6=9rXޡ YF33ҳ0+A UM%mR u/Oʓ=&íϾ<v_ r3+-eN|]q [S f }[RZ~t2D72fvmyl5^&SB zѦ݄>PD$[qƚ26>cljg]'psP6PA(J{u|eG0(4f6.. Kg0 "h׵Z$*-*}_`7oֈfry淜+vvG7U|;| `. 5UPhrަ8ao]lI(u!h^wXFq`ES.Xy1ߚ=ŧʡa]]%j/xˆ6b#Jp# ){06X@йE.?tj29ZdEZpµ"; xkT?G4>1{JCyn#*mh#gc: Չ*!Pt<േ_~^߂gg9z +Vsz^FXcYt |C༰jxI̖S4ri_Rs,Bp#j/.&ieeAol=8 -:QW j#B$W{軛3 mI+.rCvfT3(R$6l3*H spj>kq.Ya (ѝvnsW7L!nޛᯩ`VT~/_ù5nReA2S9'"kr=%MܫMg݇Fy'1 XLRa 5) ` on/yILT  8((Fm5+ȳ0z ݓ VJzM,m (0fJ+$)'#דS &gp%7EN5j8iӯY PZW(:B[!Oo|3":<.8rIf9h#lDK^Y߹Իj:ޟ]l0.  6Ί*)">֐e ~xޱD56 )yX~g_!鐛!U= ,ifd<5N᜼l6e?ma 5rl- !@>?Z6^b͌@>NJ_4{|/Hfy>'j2MY@n; tJLbf4!+uyOѠODio1~JԚQ`胊1VVx"Ċ'^\7.uVH"|iц2՜13ZvH>9ߤ3'{8TtЧ|{ae2 ΞxmVM =`fi4 pŢDCȎMT#ݫ 酆fg+؝.UǏ͈.-9lUG%٩9sw$)SU_J acV%607x3to6WNo /oUL\ȭߞ%eO]|_.H 䣦V=ќo|tdQ3brlukiti!uw&; #!IVY "M$sKm mqԠ#EDėt_{C9(AaG[lp7Z1ĠzK!U8}GJ2YH [A+ \dGJQXs*96ģz%w ijhiy IWONѡ r)[./~_}:Ҫ} %^L׭s?QWRkyK-eШ ?'sZSlKw"4*@Fp& ^37`$|,kM$90dIAu}RU| b£o1F2YDu~:0UsGcx@:S-*S<փ`=TՂM=wXc݆Ho6*iޘ J"ǟņOWI(d~h4~O2t6G:O5~:U)Q%&EJ#h_6,ׂ~6+8;WzM%M/ B5ԫ,U.#Wr%l?ϧ2]\a`-q2 yN!,ȐgK0W)*޶+[E xJRP\:}|쾿sjYXPP#&,m|X>h ۑT<^xuzz>tĽ!<1?ֈ ._((!Ad{Ă@:kWh˿i UhPSSs4,a.T\kzy^ɚtO?-_I§u8h\%"AZ7x 1(xRSh)6,{DGl%aƢ,ⰹα@&0R+_$^>o7gm9BCJg? SV?3Rf3HZ1l4,D^勈/;I?Ac %"G,S^ __k!ՉO/j'EK?Ռ݋#fǑm-M-F=dR8|،L?;,o,r*>5Y4e,ƒI+QYeT_@*3s2NWOx20{ϕ̴P2{ s^"`%L;pt 9iK!sGOuNsBBLf/P u:_G8@b7qAm}7W>$ڢ8q7Y}WM"V۞`BPXދز5CfQv2@%b-l΄Ȋ]51!-Rb |:|)ڠ%8 .jgG= Cuc>bPgY1͊|u^:&q0]ф1vK&,՞)]lGV|]:"H[^i9] _Ab(]Zw8/2ґ3Xo;w-ozHA$?-I9dz* M3T ZZ>rE;65%~OR8}T?$h96 XHP 0}CY3J|+-dgVt#~(lC"waX2H}4SYK'H2[״q lTcmRd'v^j;dVWuoQ $G}+2;P9G)!5eh[Os_Ft8D[hxꫯbP4?+_M8%~P1D{my=A9ݘjɰUIܕR \'*xT-'DW&b6!cij k.d[3@> -fttd"TXV?)rwWuTlP+pz]qy&|snWg iwvyk\cčMtcP*AhL?u Koet]~0(*j#|{·~|镏~]ၾbPM665k8&$ŒpH)ZL~KfԦ{|'S!Lʏ|~$1܉>B"JT7JHap3fR)+;i,#ǟpdBmP}VP]LX~uoufcf''0jþD6/D gš CyyΡRyT!D"mr?2̓*O4fƛ{c֪B%]l[aU%ӇZE)f=|6`H1AX6 . ۸=&ZuBGͧ6Wfmst *:*jXC Ř7@~w#G2)3; P26++q*k)jnV!wto"^]1Ub NsPɺKٚ,ٺ;࢚ClGjzT( dVc{닒E="s8av4C]\10AXmI 00sǃ2h%Šr+YFmReT{ 8¨in3kH$٠OcEz_-шh1S*$똹g 1H@eք*!>; _]v"pK+Vґ4E:ה Dq7b<ĔB\(6c X#Rrh\.Y 0yJ 򩆚]7Ԇ@0G^˾58Y-HC5M*L5IϞLd}"7ZP yB FO[S`f-o=56:Q2K$ƚۀ# Bզ &0!ʞ.PϜ"꽈yZGփz{BU6."9x|[cMSs|Lp0e^٢}Z<0-pZWHԦAp۪2䃹?qr_ޤGlS>&&N%o`$E"I b,>h_a% +Rá yƪ'(+w81*2ދ£ $x&\8-]Ug?j ɩTgthǬU)#BWrC|tv5ԺYIӏʽ|Y.sdiܲ}mG\r+j݌"6)2Q݂j3 o3!;hO g1j+rJ[ 1F뙳V4G_ nhSFu#,qH3?{QƼ1XyN:mhF|_:l3>[)ԁh [^R9TE;쓁̍7˻$!" Tw6<\ŧf 8@@I(asd8XMK6lڝ T 7ik!oOKpW|VkhDXX'/h^LW?V#t^]Ꭼ /s݂KFS8{7~nݷuj+ꥺ,-jCÙA:DM?GH]hhC:i/U%O8q,=3<1|J}aUR{[Z/wu!RPat&t+#d3>HTH\ɉ枍rJx0'tJ!SOR(j!NKO3cd?"& "$%Ŧ1n&a7KOnкk[**>m[)ۢ$ć="rmHJIo[[$tRh Hz' @}`v3u-b,H?H84z#!CQLQ*:ul=P uV?f7]ǥ[U4K; ="zމ]Fv!7VV0Rd) q8i$$" t,:"$!^w仱" '<9dÎ{BgقrSګo-tz\^j /v 0yJ8G5^R^B{;>.'P" S)1Qsa*E%[^0Ʈtny{hКNxZ1;oo-Si3r-䊨 Ўr_s? -X?+M["VdDXo67FyTf8[Q0S8>rG>-Vbw6j5V5/]au9ѡ߽Ӈ>ڤmqcg{Ťp S~џ5cDA!f;cU% w=00Sڿ˟;Ċm<$>]KZ :U?!A(R+UpDМ@xNQ* *h~ 0.ܽJe.0 rYD{)HmRe%<鰬L>ǑWϴ P<ڿ>k܋D ϯs `<={aM"s9j~|$DZh,cOg87xW2^YZ4ZF-(u:_Mޟq(R  *` V%fEfS^=ݫ @0'_K'sҵVڄ-/ y,NeջHDZ"PGh Yu']Go>fBsca44g'e"L/uKj2@`]0gK;Hkcbz֠IEzNov4nby-jw曣zߧY1憽4;jG[Cj0' \e95N3W$;_or }stմ/eBDaUQ^\Ȝj~Qay#T+%zvŧ\|e5[Ai9-z7ɫ\#L'nqnh#ֲ,lHx%ح~x%%.{RX|6 s/:׻ V/o kKzBC0!BQAܓ^<&W/$o9lJ#tvW Ttނuh+$F'PU*r)h!=t7QoyVkjej?v\}!3F0oiԿ"\&d+>C޹`%fu+ >&f5.oYT_^QudFXeWNk*z\T+J)n`&6r߻csUZ/1_eҴԚիaFeGvpxNj>ֈ%] `5wy]ټVGn۠bV Itٴ*b9$[ e2;^F>s67Ft\"9w©c_K_>CN5zg˲ 1ahruUzA.e!Nq%s2u| ɖ\,^.^~֣zAd}rBj}1pխ^"هBMF8,"#81'V٢Ks.ERS(l'_lW`!WS鎃56c\r󪂪u\(e (ی,e 1Ǟ#il碐0~9. b cToWN:lG=Li+.c(d!bMrUZgrI ZD1E"=*ʕ77i7kE E܃240g*;?Gڻr@@#TQģpڮlO_}L'W ȰNQKa 2XnO0¢gb'O:TwjWI#Rpay#K/F,^mEXwITɜӻ]Ix} i|;WHrښ,̼.LZ~Q2sB1ϙq0qL`>WC >YS9.<a3gG8;TێjD>?#?Q"7KcT8X3㊲KSSM6K+y(JL SsYc3^(Jȷq]xNԗ~6&{ܗahGm ޣ=\eJB'][FJ$<,38TXy^U>G쳇v  ^|yȜY*)Oq.G銨ʏ*;?ȿ٧~nɫ#(}-a%Q=G1zyW\6v ~J`3ݐ]{lc&Y0~!MR`>> z0,U}3WFP#<Ԓ4) $b'y%nZ!ח@lnTY ԭκD )aPWݰۙ&LJȀȌRF zMG6*2M9,oj7D Gs廠H]Y;8\iވ0;?]v9puS䜘8nHcU,JӠN ĉGx)]h3_&5EIMVj\mWxkB ב6wڰSKL+6aR ? O0M4ɝdniYZv!rXM{ɘu;%Ԇx)ϧKygVCίчg z?1ZRӥ3)݁)$q~d!,  jr36F;^ h/ 'xɞ788OQ )x|>eVeKGcMDLnO2uɆ@9;!)|sjNT5th AfVywLOL1h~L@s趤7%XJ0k nr w-mT%{5VU[ Rp*()B)=% 2{zyS>iWz ϞrܕTluz%ͅckrEty~:YZS r;7iPJz_-CCkv64J.#[ZZGI5">4ﷄ~v;ԨP-P6SHYLH ׅ۱ C$6D~墕^kU~~kR=RBəx C yhހ&?#P}MVJ00Jn:TˡEq6vVjZo. z2GARI 53|$wvߐ*(fCEƧQ6)lU^Pp MQ1Ynj|.^V1 y>K,؈ jb#"2amwm"KJ N|S2 #I PEk;<\ݙ5 $it8/#b&&iDa|u<B\fa逿n__ 7qIţ%5oѣA3Sfh"k(]U&jyR-4zj;QJ"T7 ۊ9sB-[4C:j> T9?JI "Y.8yQwPʕUNtDHWF!7#ElaaFtH&JZ~A=!SwQm>kV/&;x=Dt\Q :yKV((J_qO IN+7JmP6m&qszUsE3pZ` @P4 -A(ml̤2L״9uj#mTb*v$oӅĐ}M tiy=-Ê WwqP{J"n`IZcZjubqmg%|6XJPhOGTnщ$gGĚ>_#~LaPT[U~eFFMB.NvoćBq}*jhw@p<) @%]jT/GV߅&| Ki홛Ϯ6%[D@:o>j3iq\qmB>mЧ8DžpY:]ݮD+;O G_c &[JGm P+r`?I8m~bVNM#p ~| R HTyªj3/eCcˢt:`^{\ }Bb/{y_(LɓL&I1#_|16Y5b] P(?̬_@R @.2WV8q5[) F6-I'n{;&@H) V E\EdY1&Qr)@u}mR%|LRTP57Pud&*aCVp\zV|09l)4 (2fڼrz\GEqB$5UZ7ɪƀdqVUlqݗyYpNH[O+{ux 44ZBDuH!H}Xu7r>sUb I6oa_ZQLPR̖e %9lGp|/.q "qAnbTwUZ(]]qu>Wn FXwdzx$pKZӎk(ƣBEƒwZdB%m zdf֘b1Qߏ#Z<^d:[l R@UCyp]z>${Dž2'',dcJ|ͶYm (AmjhXhgo"=[X)oWnnUK\J{CI ֕!s7p-*0g&+Y-9ډgT+1)| 헧'څ㨸q> *M8 BF+! ަޣSc~5 U33˝RɾUI=HY%bZC$uCj8CN-v 2V!-¸imh 9}b ;4@W@~fi\难՜ #cfO?hw)yV{^p;&jD&U;Y+*g< W ML"nQc_Ns>)m\slp6h}@Axآ7oG@LI?]* ΪqO:2TV%X4Qy6* 7C2?$lU%[^bdHԮa툢'y' #IÏȪ#:=T7F#{ױ+dKG>{K0Gdf|k84jCy8k)PSC7+'LIh.FGbPJ/|W95 `7kTr<__ C-"}DY`-jvkPޠB>_֏?nDQJ+%1GYR*g7ܨ #wڄ<^p WVے΅f#킨y vuJxI0Z"u((Fڳ"QKm㍑!dk k;5Đ^F:Q\W ӥm[ݞJE0w)$TQ:SfH0/|Q.g}FnB`Rz^1)^zKᑋ]7~e?xEsy=(Z+'a:f}UFUW>h| d53eT3!a ۀ&ENQ.p,/)DQ"|pq.Y@pU8̢Y:9sqp8͐jԃ}@`Ēy7FLMy&S]HO}˰k+A?h@@h~&L>E\| 7O&Vfj~)_=}Al`cr{d N-;KJ RJFGY'2j?y6rtf:'mDNEw50R~C ZDp3TY4M e*)8D֟&YDAntJ*-hERȫlPE1 v?,?q)ϝiDe#_-SB"WRZ' = /6K/) fkɠ5k>r1I#O=/ #PZVN,ZWQ`)gf,؍ӣ勴azZ=m:G&KN/..Phv<2I¼tP{Wn(5x B̭^MN.~!/O] #a^@$J= 8ENaF6zruxAh[Q>xQNA[p4,PJ\GUq$"rp􋷒qٻ=RQ [KHq%حi:MQm4uC[8!;MWhK0+1\X j$34DZҞtڳQ6vdqs ;Cd\* pI( ))B)2`i:7 )ݸp]OܐP{ wO@Q0}7kI # ,o>о47szkA Q@[jx[O>Fcp̈́ˑfҌ_cӢ%w zqgA =iݶj5NWcש#g6Y u791m/okgiV-Ӎ)eDໆ!31`o ӝ ^DڼuFDu0 zn`ב ^{70E`K[fo|qB ) D\*6QbDC-kf ߀5OӰ[6jBOwzKdHb!x݋U}E;JoYgSV_3kwӌ[i g*wyPy("NmgkLEaYGTg&}'.80mo Ej9X6zÄ.9ɾTMsͧ4dl Z"w @E t9ltT:wEHҽA{ԉBX(Ӏp OI~%go^tM^+@JNvzF72yVAGØn=5'}wҎ9uM xzb/HJSXT-T- ]io4\@cUB u$,͎./Oy^5 <9ghJb޳x@nA x r2rap#.9Vow}aT4ag_&hU.bCT+M3hb$e_bh,,J#"mCEm=8 zs`ʋ}=w/C=b,4ww\ [ink~XT`@Mκ"GB+B,|";Һ|O٭S$ ni+r)x d5# Xm7T jA៚>v6yMt,*̡:+f-`[eD!ld?.bæEwo23NAA;P]WbLCӱ q}C ofn݃S 6R "I"UKҗ<`KQQ;^pѭ{\;-Bw r;gQJIib QyV@<PrYI}*KZj*0ʂh5܏D< &N`]C~dq.) !Å PCMrmw95VXȥ6Dc!\v.vYHH>831Ȋ: _~C3^3JEmk}?wlKCM#>zpѼkC\b6f72 pIMO3[;;Ir֬Tښ?9ddqTˮJrjlAĜ|Ӱ!_]^ })雼dWs ߪ%؇|EYiĻ8"PɃX1sN-y#GKlS?'ĠgJF\02;tyX+/v%Jd=~bŹ`z@ ,?X PB@T လs/o!3U,1}qEDGDg3<%+~ddW`Qٰ-bk q#p-tYdY0cbAc ̐ RP/3=[ԛNd <B jtz)J| 4{@Z$>n`vzP<4^#`/A~bvJuo]vW]Z&KŴvAt2= hPh\M#kVxAܚU*lSS.Fg# s!lŽ<wKKܷÍ"oAt3}|*rTԨ}@4Egn4l>]cdKOnޭi@Tm{a l4G^|U^'ClUM.jd?c~(O+eP,{vU~Zj-GSAZOvہKc-d_LAen7%Feڤ(#VWj\!8;MH"AFOZ"6a+j쌀 xkVC7bPG] VQe/#ٓEADd64ǜtl Ĕ3~X+qiuCKP[(j4%CbNm] QQ{K( 9oGt o6MyƒGvE2 O!4(9e?wOumO"S㇕ x^K&YH1GPЀiK\y/` Mcg7>ޣi6'}tUq}%S3=]Z8tULhlȾ E y1N`XwAEALVWsq7 rpSaF' v/1NMrMl}*5Ul_"2>RjI3  |"˜>Xu2RlCd! CA/Ҧ!#k#f񻖦 #1O4Wǡ?nl$K`)4͚>>`C)V3MM? N &gεc;!/cr#ߧ#b[WA(Ǜ<) \eر.@ɇ k8@-W@)QI0_tzИoQ9xKw?M_NCvs>5|lz`r<.,sX"E pYC"bH7q\{!QPCӮ{}E F_P󰛌 2Ǣ>R0eqM>{{tu"TkPnOۨi&úۑR:10͐X[W~Aq)7v|DhW_7h8iC/gMѥCy)#JB.I0ob'Q<#XbER[~2T2s{l3*\lGFgj$YodpHLz:DYL7-Gw$E?$ =6 ]%'@|%ut3GzӨcLaDؠsx=\^֔ej'pq-vV6Z$}H]3+df/T~ol5>QGRqg5r-]Qvz`ਥ[0)x,6EcMr"WH@0rb2T"f.|q@׷ ,s$EcM DG(RVQv(t#{АN[1xAd?4!aqj1CPoLU3lۇco{_FsÃ$V拡'%t&wc(vS9S;&~a&XY#m Ap[KKCGJcײ4o hD Papurd/0Œ;UK2*r >7%IB].DYE|GuG?f)CvqwPyh(nϛ֚YRŗ#~2qeǭ1^!Nm\yzcO49H ty1vZ2fO,7CZӷٸx7*Õ/#_T; W'gc7Z`8$5Owcdm'My5%Zc!?GzDApHkژ#,^Q$0&/ E[Lﳳ7{0@˾`)q X3bnS$Džqʦ3 8 Toqn]rDWn_f-Mn-,d'^b qc[aʔ5KZ?!/H. 6 NSi;D@*j̿3 hG?LlCENB+/WYя ձQz̉d SՆԜd;; 䳑Y(+n;m@^E=#/A H~k^SN7D5,NAa?|:m&*Ao ['rz[.1+ϛ0:?t.^ SơZu2fQxY)wqjW.6y ށވ 5-'aGկ_(s驠^h+m#E1p=fbjv9n=*֣5|)tbiL*1OXZ̯Џ88U%`~%3P KF}-'_nJYV \r Hz֡v%>En!@EeLbIh] =sG)X>{6r@J%LGt~hP4C{\t7(.+kj;$ (VFnBsTy/Mi:Zl+&rYqSԾ)u|`,\c{$es0V/jeQG,]|V|p,&#'!Vv:0x>_/&u\_ jͧr#aGC0 {ScNnB0a\B!EV0 ]"i002˟XLy؁5 !Mh!م!Uӧ"cWM6QN@𬦝G+1츇nMwվcjh-r/*#I* n WF o}C`l"U#%0܄@Mh޼uT+XS \ {]kq|Nr0w&oz0AHwO)z~]owہpUk4՛)g9VS V5aI7ܓ TT|X`8Y y·N7J=Uv"Hyr2pe~n{!<%|Yp*>Y$?:q%65Q31tѯnD} 4qY.#&I(MLC~"\-,+R+_h/Wl" so3UYɖ)U $b ʷvgVm@Ї2X-:7%qS<+zcn :?kE6aE$D h^RbPX{ PSΈ& WX.Bʗ$!{*Pkg[Oq~6x%OÄR<1[m5Ip*}7 !ꌤccŷej'6}]56WUt٣R8&z(_>6 yH8Z׼HWQ F*fc}A% eAx]CnzwMvWxSz#>8KRpEkNiZ`'R2.RT](&ďjv6ކY}':φ}'!hB. u"BBd4di^QңZ|A\=0k:&K;$.rANJew<*L3+#]ow$hG fs:5oG38LJ)Qrߏe8GDV|&!E_+ҩ`a␙TO g N%:Y}hU ׿*ܻXUBUFHAo6Pjuckݯ'um;J1f&9 +a^BD`Xc*J7ӘoEhOְ r'^ۀQPu nlƯu9#WZ{ ";q$VԆw$AI'l#D`k8 pE̤'V6K땼\j@~ZtnD/ঃBCMN"0U! ٗ[ Lf^p1zv< T1v _p_9'0#NcXI7!ިç)ŗQe\IOٯ@@o"j,x|#ٞ!c]<S%@|o{s<> .<1aF SocwLɐ b4aƑ*Nx/! >Ul-N1.0, Zs*٣ vJϩs0u5PfwfQjqZڪZ|!a#yieՒU\όªA]}-s{ZPaC3ޅĉ ^XTݾYLQ1!fʺY {ˣ p,<;LO ƻ+7\ZsV]!D7s*JZN½ +k7j;ZՐ|Sa^aH![\)r6d$gɛG+ەhiံFw jpNh)]=jhϴ]~TqQ*߄} ٴƻ3XT7NFBi,V, p:`7z*'WVl\7nZI9ٌFs!!ڀaxׯܿ#*\E1]irGD,Te&Q?f@zC!MjUd`v/=73~oŧ?x@H<(IN3eDGzv] I;iǢy>]ثFE0KFK}:[W;mto {K5&7XNNj,_Td6\ :%!;5+$:8a#fo T֚:V4 o8zO Qnwa%%V\V"!O%?1sWFr pCg@/ :K2~c+>RyKQE_?Y.<V^eE)_i#i^\5_iS:=#rTyXC$D/#@N)7 @B9s[xٷ}͊O#X= cbwwhfBD6&/e`c<3(04/ TЇ۠c#gq]SdHQ{zΪc!~JAF|8EDRѢ Z|Rp\Q!W\99WaU{yMG?F%"Pž%hUjLx59&ϼ4 T.EOqEx tšsJITݪ-ЏzjB__Ƥ1i|g1lw}z* 6 KN rkd޺P1m)nR֬sLe\SoA:[ R,ge͂(@yoa%6<< gdžI[lsoW9!C׻Ĭ?nP^,O -\ծ}GzFf H (Zw`NNr+-ܰ(oMj`l#]qSzLCJf;ô& 0VF0fEtn$ 0Iw`9!CGzo6g@S>D&]Ee)hu /qI}8Ks E'j:AR]E|aX';\/'t_>SOfp3NZFĊ` 0nd$ߧem maD.qiޓ+Ӊ1_ #% (ߖ/)ݧQ`oWldt28v Cz0@*h(#༅Me4(I{oӚ*)):j*~bh)!me2EDOTn-N r Y`pƥy꼋UXz/_;PsIэsxU*o:~Յ]€MeMҢM߭ZܠQpYz/D?wөu7%J m¨w&ͫb9ԝ\VAƚ|-7"]k[apk<45S<XN.Nw_!̙BErơXɠ[\q#yzKR"|\dM<ƍ>\ OU°"m @fef meA CSo921ta-;Jq#Cͭ&ٱA߃vM2jȂ\.[JA2 з}qϜ{{uΒ)j%5HK_k<`ϚIGX SHc4| [S9 h*a 㙓Av7mUvpOmRD2 Ô@ݾKV!o Z~zaqY ޑ\U4 A S`y*W7(a>NȬ!+nhՅ;>%UtyP|M"(qwE xXٿe "P2K[_ tjpEGmPSgx8..7Vq}w(Bu8r/biFE<14áԬNKq˫7E+iJ^E\cY9n#u aWk42;(-5Ȏ;RTf[7 W(C5ґӆ(WCۅ&%%FT6c24닺 iL6/Sg6`Nw sIDά7K^ V+0qMjҴ{aG$=J}熷~G{:u\^;V J,?ɢp;Z3I&ٰSY!\o´ "EL0]yk>JUU$&pMfO,ckE E|0ٴy-4nKLf~In>޸ 85%Èq(V @_KUKYL=8ʑq@Oh^Icwu5e+ ^Vyn l^K%mڥԐXQ}gl"VV1s+q2ܷ45P-s<Ȍ'Q<4?DVfw3N"Zmapw/'k{}H^ZTDŽh9Fe@W/yo`׼|ч Kا(c$aHl䪛!ܓyr2V+das '!^ѭT;Ya~&ႦQf\s凊 2%`?rGi0BbO,4HEֲt:Ɗr]"c$]-G9W8ŁF6u)"]vjNC#/?R<%:dPY-HP!( Hv7 &3Q9Yfu0;\q_uJNiɈY`gQ&4]oý_7=7)M@B )I. /}^^q$DK) &!jɖj-3bH|>%lxD'SY)s&]$5w3/O}S -Ґ Kx=G}D * BWBiMF5I~"Oͮ| ʼneݠGJ0؄N2{a)DžZe]wX4@2Wߐ7ë3 \Yf':o><`"s6a:gtTH$x ;P:I7D5vGqRƭc\1r% `%=jY& &5- xGf3dHJΈ .SQ AkN#r5תT-QCds"6BP4 _Xe.2LF m!M&԰KyO ލ ^'~Dƹ4o+;GFW,q#}rorךɇ-m Reèmى3'Enч@ߞU 7EOjB@@?ӄqwyq*fvB YփTި3i'h|bGowUvGsc0c]6D"xVvBi-oES 䩠^7j]`1v ֻLhlC[v!' f!:PHL_.eKt5 a7;wGxGؖڠ6^$'>7l #c5bamKPBUq,DەMgblqXO:0^E ė=$q,Q2go }B;es%E5nY9e~k:,;"+%=~(jي*l4W~I.#(:uDz-fi/F[B騂q2rhWlU[dV{:R `΀-e﬒&]4q6k! '5c)t>,,QyYefr P? `YӴdsdp!aZZ`}|hliٮ|\w"HL ^2剤~R_)#$)UO״{LKCvr``jepcC7(i]ũ" Zd4OuʼD`kqUqdz2h]m؂t#hc9 sˌh`(RT=2;}?%Ӳ͗W_qMl/d[- dK؉~]%Fݣwkf׿DΞ}$E&IK@IѸxbQʥV9 ?OMX*RȎ8my?D#6:Ša$Ubywt WPmVOJ23fc4noվ,<\yU]W|w$ xvv φVhQ dH.!摛yi+1^f=ag=MOu0RSyhڮRWJx)}Ӗ@ O H%ˤ?4RXmg?}:]lu26^P5$} ~7zTSrˏ2V=-Y} Wq}_o.wH ́7X>84"/B*tm|xGK񀤮^f A!a3nj7 \o[N5q56PZ&TJ56>V_WflƏb[+: Lfm7͚QRho6o. zm duߘcZHj2jE5];_9i~wNIdccJ榝!NG83'`{+NVXxEqdd OAf{v f4dVFś>JW$|]i֜[(nSAV 4qŭ J,f@%, ga@5f[?Ŋq)*D^4-Kj\Ƈbrl/@UÉؚEL78|T߄,=2Y}!)~ٍiwOp:ur"E=x2adf”nvE/Z@ٯT"\{i6s_rD(5Y9g'Ni&!& ЩMDϘݠĮNIZʲ'ϭ{.b*R6}A&"?Hkw>O_7H=p;]?{ukwOZMMoIB:RtͷED[11rAPB26Ghfx"Gz1Swqkٻ2~l RF{bH٪~ |f'~G=`_SBI jδ?UmB,Mm~#6Oe^"7}qim5Z7 4"qVkXET sǑ=Dp} @N@ ~S!}FQ|lAx^PyCeS?8j9n5J'$wsj[}'͑ȴkc9 [AvF*0FNg3e2 s]o5pОB6UOFp~]L_@֒GBCO 7o3Ή}#odS<N8WplIJĵsKa N g_EY2i?7z#P_Xm <$h"JX`9=nA-4m;?Ì]|˘˻iBr} /[ZKme'~J)TGX( b!tBٴB {Iȸ=Ϛ9|zO~rM9\9Co٠z\ wOx e(H cXQP&,B-:*:}{0pآ )}; ]IpH2LZڶEJvqSLݭ=mR|dER-U߰EjbAY((i+eJweBO*X(ShÁTy rpmYX_Cc}$j!vW_PPTx]2 lYyhA=÷dD%vh*<5fh*>8&\=x Am57΂CT׽JeH8n|: ϯTucl^>XKld #QvԅADl]5>`|9-p!`lťt+zX_v] gTk6!߸4~hkCnrC7I_s>>=7<,Gh碣GG6r]|vEj7k؃$>5' tZpm:rP8?hoMh/dKݠQ5$xY J-^)"X'=ۥcys QR?$33ǢE_@iĀ)"É* DUO[S3@WAPX%BlR|L*6H u< r1'Cy^6w{l%7sӋgMYl!޶~xPu"dCXwb1O옐/ G@ |ޤ͛8̹,fݫTÍmye=SxLV9 t:W2طO%%ЖN|L' WeAObBymXBМlW}f%ы|J5m]AcR[Q3F{h.;i}vsx~VxmlKi:SfPpsk K@{~k˕Pw0NFȷx{H<-HmyAjFӔӷV8ly*9+s_´V]ƹf|W*m$k6/,Pʴx@YR)&oV߆? *JbtCAhU_g$>k@ R\0X'xZ$(+]pN7(k>l>2 f qB}_iQG)Y/q_VޗF,כvٌ_ѨR&:nC_c;r_}PGMʗ*L'`KK[-hy藰@zTRO8D4t[Yjw8Yٟ2ucZo#{Y /I Bwxt|}Ŏhaw/F@aC#_"#؊O۽v?%Wn>AH%9i>oͻ칣Wm y=Qp٘fM%D1M4Ng2s` QDs1+ul?䇩i~.#>EtEoCUZE}H P+gXl3+}DzN+x`%4"5d6Wq6/YCqk^QȊ187ÙNgMJ w+ hSĿT¦K6]˽Sͤ}tX)z )a!9v+ VI+,MT;[~ V8XnFɚ9b3`_<:fQTlo}#:F [+6CZ >T1DRvTuGlk<%/`7On%勧ˈ/KDԕѭ{;!d<1B o~Ј C RШP*lm,Cl!oPTDalyI.;pUKRm=UAm}cft kt)5Tr_D HP zZ$*4f6h:HHjkJi9Gjgݒ fiGR L4ٸ@V {D ZFTʵ'b_iWdױ;ٷ' 1yu02 1L^b~Hk֚ :_6MW96 ҃}i4 wkxSm'"LBZiW:欨 Ie.Sr723Ock:קO2؅ґ;BEgYck){ gs^t]vt,;9>{|eB /nD"βt ͧP!k n{M'R{M4)ty}*72?+b<\N? xiuTfz}MPj$ut%S1CIngzzÙMaaKОN{$ "jE}|9>{?g D? qHC$pj_ <"P 8󽞥!zK,Hg~5s]JWP-(cr7X\[N1QDӶ '!f2h~YX(`T(\tbpb1-&5f45Iowv ǣR[auHp1ODY[bI7DVfȱY9Yv2MN쎕x)7hnZ]a(o$X2=\̡+S9Hދ͋Ѡ(ki):h}dtdCW]+4^$VjӍP+vw:09ezP\,Д Ezŭ O9xdoo4:{G>=#%- }]bZ@ˍGhD 8'i1ѦX+B8"0j#ǎ꼐@ySDiGW6>~=MtKs,{oܥ˕u!o5VU%l9ם݅[\"gp\j lw]%P.+{rp0W:&%}L0|ؾ+Ԍg |Zx+YGJ큢''yF?[ 𑺫d \-#q+ 05" О( w֣/."2VBPS֧ր>v@Gi=K  [R—(CVW6*!3ޜM< -slwqt_b.==j!uBϞu\ ~`=iCaV4Y|vɑJ 1=)f I?O?F"4讒12!7.y>ɨE@K1iQޫ/R$A?㱵dɐv 9L}=ɮYf8mӑucy3:R1Oh_< JF60فyG:́BR˕f& M Nk I鱣yr!GfL5[bv AP=oWw۶fE"x;ҴbЄ+bׇ5uՆnL`$O1ҞJof"L 5X$JCg,49\_T\Kv6_uY 4"}$>4R53X_mO\+"@>ypԄނ/{FQ*Q`^_KD?*gة;J;q*r\STo0$nޙ7>H;ϛ5$圢MqUECY_侑*qxdG?%MЂ7a:C9p.OS!b,7xzp/5'%{g뢎Ѯ)J7)33ݕrSD[a&#{ڞƵky߳|BUc+6Nk΅CVf`}BV}e=k-&VEN;|,&^obZk" aCD۴W4sQ+̥?!Q2E|`S;;Y̶_nOП '{AWH5!ҢwWnFMy#|^ Mo0?haa/=-krPO#%)4HʰLBKpS~򭲕vѽT9-8 X4,?lTFcc uЧt0Qƍv%/vte(/tS ;`YoYnls[0̓j~J WMC/9J#.< )@,fNN"xd2 ;7FANLpt6_^ڰBH{@gS> yK?+?5 @&r6f!Ѐ炩81զ|#$tOC}GlC Rɞ{/+;lڹy?fLT}k a:.6) o$$ hr8jwjٳsEP5I ! "Ms(,L"Njo5$gŹxM~(1/)\{$٘,jXq7N{L1Hfhz<]ܲA^ȏ,\6kZ^Fe֨䈆1̉74v19! ZE#K!Kd)! Nk : l>YŤJ@yNƳWW&2&(*?څ&,g6#M|t!p9#hGڪLggP.} Wd+ ϳqlJHa"HW݅رꓮr"=݋3OFst+ ϥ>rgxgpXR/<5>fdmqV|aDX'tWrxuw}cmpR8\Glĩk ]g'9RfcݩSN4+頺G), {Xݠ6"dѐl*2;R^b~)^OfI.O0C@dB6K.>^a#+%ciBjr^y.h@ebd9B)ncR1vr"sa 88z*&P<7eU\ÎbQue"%1626ZҜFc=NQl2ӹ] _VьfAt;$I 9A PYo5!BLw*LCLкJҝ8Ĭxy* VE_s8 +I˃cK"J1ח!ѓt.ntW" OG#'Q/3\o~- 0Lz{%eOv }+JG1>uq:l~4p*-="]ߦ~FQɫ@!3“0!%(+ pbgh +IAN ɖ{g>]?#v\r’b?1VVOd;zY^[vJO_-Z )F#RQ%C֪ҷD]s!.1g8}Kn:'Pg~5J;ٿGAs\sΚJ70tIW/[}$ ߓW}ߨ 7$rgՊn#.յritJE^O^|ߞEE>餞_@5/t q]'cw%ŇDnPtxZcJ)D[ֳEdx>s^(IHKXӺ)6B0ĕ T͘lkuXg̀/UO.8ETxk‡)0fv\}YImB.ϲgD+AE23?~<~F!sÑ}"6_4ÖI Zʟ-wRņ%,I=6Vv7@L_f<u1~rcb!zXP+kp ii.1!+0dq\D}"*:R+f'0 x(cUDE"l0K;jBJ99\k7Ipf{&2lrn7ķ:b)e_搬S3D#*⿱i9 [:h49?3VU k>be <SM[GI jYj7ET&=sTi.{ \O<әծ|BVs_ٲlAeXn1Y9vMN@?CqK}dAP͵ hoQwCAFZ1S[?)suT R6%;H,҆&M%@@(w"l6Lc7<&BM(6@3$]ܽ 5Fh]X= ١8= >9A޶`5IPXn[:Vx<|Mc K,ZF*=1l1--rՕ@^wZ):nۭMRVYD*-rںlu2.ioMWA1:Y3v˽A+ۋ4:XipHGw~GKZ @:tb$#yUvY ג%*dB]Cٶ|gv~n,T.KS<'KT ++x Dm;h )e멛 JE~e7,鉞e+7^|!cw-|JウM_-|M/j?e b_iU, &Gh'^$up$Ucx-f4=.4`FY r'' ts{Ԋ >«cl{svn<*T|=4zm{$q_YxŬ@%uYi֟@l_՛ݫs(aPN"u2_w0ֻo(9r* \F=-:+0DhFaLKdI! =Hf5Qr@1nәlc.$`gVPR}%lEwV8o:ѧm[|6ȥlj1o}{iV@CĞgY?oG77k>t"uGÚCYmΗ#qEQ]ŌF`lC^ODL F8iosYaW𧌭bRw_9qx 5>cيNFp̈: ٴ1(del z ľ;DqŲV1|oz[ч:S!$!^=D޷ o7J c_U,ȫ\NPߺHe4YSfEz⃠rebC("}X'ŲAj:RU,]Fv1( aa_ ̉%K$=o,e07Eesk%{8;mwp7C6V]Ut {k bPu-Rig؇52L%QCuF 3EiJ))656d`j8>~Ore=#|xB}\[8 e3v4{E'9'Ͷ{sLh QQ;tb0¶I󔐥CTrXxO?X]3*̚SlN"$9.FB$b;wB~ptE@Dž7*:N($C\t4e\ zejoWVJ٠g0HD ր8d|1eĩEx ;.@#rAU1yF^,@B3x3O |pnqvbM8t}5 *O?M_>)<1a D@E^j̄씻\02NkT1wsz|ʉ.À9 !a+JE?J sRgv4`c@ @^wh\ጻ*{fԡIKAN.皆ZWP)2.Nj&`_c[Hi:RhӢ4q`GHFri caPfpi))H3կa7W3~#Om/ʶGW/H+2ƽr[p5(Yw%A38+fr`~ mzZJSAxNc300vh]O(f`(w~6הf08 #;#4?7 bzuJ> %&Q59A=CQ}l^a4@%n:~6cSՓ3(ĝFQyDԇq_ ӗ]S.LlVQɰ%@'M_*%Y [#gXcԅYs1O~ _#uKGisJHkztIL簻q' " tCzYŹsyP֗DOTUnT+m9]mx0 7RE,QʌFE @JтByJv=}۔-wXcoֿb+bk8џJW4k'/7. ?޷tCfw]Iс~Z?nG'ƟafWn($wLܠz8]4br1Pkab *(89/BPG++aW84r˨qmz^Ej3ZI8vs<.koYf1Zi6Dzhq#Oinr^99x !yHvy*]U:x0UhmH1"HmJLݠcRX2D~D3vMV,Uqz{Kc׶T. ac 4WaNCl.{ mӘm H*1YUۚOΐݣGX6ZKM(3u5)l%?UpfMu vtm|1Kf7*/ ڳڢSeѫˎJ=3ʞ.M-)1WPZUy3M8S5m$r~nJ'_%`9gM3tEa#:ֺ!?P_n,,`u[*e6|+.3 qr71fVi{_U/1_g̓YݚI3C"RG`4:}7oF4A1@NHrfsDX G)f[]{z{\Tط0VxtD"žu_ƴ`OX*Yp͋o2ۜQC Ьf_gRH:2T)I&`$2 / FAZ`xG`wAM4tx{zJ+UDQsl҂貿,8+[qlu7뭂#rzu rϿf*WPe`Hmn!C0ʆ$G=GxJ o}CueYla4%cfZ@,lJ6 40f.먉/ܕg++=y(ƠܵɉH~:T^J4_c'fip ۸'MFP 7iZ613i$eЊH'h(>F Gn$/{̲mTu6sXL4YuoZp+l]rBYij¦~+<`h$ZCzKk݌"iDB#XiMf a4vJg3NNPQT(/cYDAZj|Pp~;b8b]-$FnI]6)a"G}XD$D?sp4\آwr֢z;"Ϫ_(NidoC3AFCʭ{Y!e %T>Xv.iD#mQڍ(̽}>p:VibSֺzԇ{xKr,,=oyvу=ar%ƪl'h6 3?KӢ[+OpiI7Ϭ?1_TJ[s%{D-sANPJy tp.:MQB_99oॼWޒ$i0HOs, Hw*Wm9&izyhYNLwB9X%UNgIT#WHmcM;x^ƷWk u$S Kk(|>Ky/T8EMH_8!P;j퐿;>ncx_%xݝ~,S8t&h\Y)r Z~x)(޲uzsA~Y쮃 CbRSeGf=_}Uv#gv//qZ d6:߀aRdn[_ BNEOs-9YQ! -I.xtF9aKshڭH @q Vmg-AڀV$T20rPVx Z'hg`L1(dQlBp6̙ r+r,ͷBp/`_ VRBom߳KVm_L\dB۠}@](nqk᪌ <1y ~7@)͝{?dH-<" t- % [B+[(L5k/VwHg nϘ}EPbmPq"|jR {RIDyq!MT  oXc-đr 1/5 wXAvcFs`l7O`Βz&p,44AݸSEqSSr{C?ik ǨV{v[Wc;4b+|۴MP `ak} ja[=ag/ ;OҜ?BA*@%Q;hSqBzNTe! 8k~CV'd hrPߑ0Κ"z7L u\kJZTl,US5);x8rdWÃ/VgI)2AE0\qm4zcR& b8)R]x'esc/Kr _3噸399A|5,/lW<$}IcnPKH1mD Ka\grܴiZ{N4r'Mڊ5*noa'p\hfFdYH^ Fu0oej|TN*̲$|ZŸo͙ 5q94y'f5Î۩,=xj5E*Q<^C?%ԆI#OqBu_u@kX\2Ul+b.#V~H _stPZ8'N9ig]C@Lu<ؘ.8myYHѻ@볁=T1]R1 g G~pلz_з_iݲ p G {{VH} r{[Ȫ!lrs'jD+hQr~-K"M\2H/ƘhkՀι!dĜ!u3S:ntZiTX]H2{!)-Yu6TI 5j.Y @֛4g[6uHN޼FEy|g^dncEZ:hUڶP8X_yސ|w5mk"\@,#ӝj3õe6uqSP;6ْ2Ąq E *#Y~@tNzh9-(X--*WqBM̹nnI})yl+@Gkcd3'nCXl(ysn/ #\Λr%NZ~,"fag>[|V | YKĬUږM$)Ähg?ԫrr{u.鷇79}x+zSdѲ:^ˏ]#-s\8I{s!s7qB``J": 8r")~˨m=n%}4^H@F܌Q =}*b'0HWw܃^1-p)*>cvġJ6)>Ϸ>dI"F~ރ+-iRWaK{[?StrС[՛.߽B`E*y⊩ɯX23+(G<#-7q5U߯` ݃Ŧ*AG-.:#4؟]Pcrjsխn9]&JP]3/;_ dmn\xQ,cLF|Ja6 4?+F«uF!ՐֵVHї4?n>bJdbzp-F^cx]/+p 7'3*w*~@k{? ˻|[Y, NTK ltI-G`HG^Nt&JHgS~3_$vI*gߟyId(/0,zCkQj ΃c8dE_(s!}{/spgF3%ә"*/DU !CCY :^i`~HXݎ bsU8+8˨3 fYmwvT.j0LU4sK00.C5 58me|Hyy S׿o}3Mpl~(ؐcTismT"[W"΋)`yG(v ~T }' \m0 FÑ&| 4}.t,w{-0PSF1Dӝ?pLEQRy&c{Jk W@>f&?uxw.@.| 򷻂"* ﷬xRD77ajUvFt+˳%)\0 =%Ts '~Ϊw l&߯bsM@7yR<$[nu&KtHD(4-tJX΋ %Dsez]UF ~ uɳ? !W߳~iD2WÐu7ސ%_;^~} !o[b`&4L[O͑k.,ZcotF>owA28t7q! @ƒ)g |̍$fim.-"Εx=@$gz0'\\4!@~κa)h( -ULTn%E?8f} 2y&d"ڝ[+}[i]ɌrKP4YE<ʥ q0U^v3G8.yi=3s;"HΘ,V+Oo T=]Ɋ9eN(x 1 گ?h(s8hv`&BFHGX/KO`f>Ȣ1zDjMõvŭ6CyKi2~Ԙ|ؒp~1P:乭U xU^[|(\Zo8‘"jn\mmACkv APltpzZ]yM^4 N:*bi\n0WATc'P)zrխ]S($@-sg<9] +U,BG~)1 l,T@f%M@nAV*$ϔ EI^˨q:P]$FEL?Aڍkc!^ఄBR@UI̝Ap_bG6 $܏j<=Z=K!F@m*|)b:3 15qZK+ Dù| xo띍Nٯ5Hsb]6sj*V6S d̘ݷfqcykg_^qP'#0S҈aVR}bɃvUUtw8)pē>CU|Z!уh(6DslKduϜS3-o29u9lHGuΆ[y *Af ʻr 7B7bX^IW謉TQc—a0nʕYcG@6r k鲖@mBUF!F+3J;':ţ~^u_3b-u.eƗu4:CQ*8t%xsqlԍ͵ sܻ)}2?|ۇh٘=zQpGH*t ɷSjtςFGoş_PYZjrxEtFq޴u6OĂRM"&iUխ/JO;Ȏ8jG"_J {]5y"\*xz:B($iiGsƳ  h&/-) Te濓X3) Y/WJV _w`2^B;qXJhMw2 6QbzJ[HH#<1pShj3DԶ&O.Ayʰn%~42JקwOF#q%"o]].gC!Ǵw*hV}f![87_چDaE /]3cqbs91Dෆ#h{B ѺNA'XK١HBMd;(g.u~7N-򔵣BjX+*(DK~Ol X+8܌@gUA$DM(A'}tTO(0u3XG9篼KxFNA$J3,e|5:>2!g2Za D힝f^dj#ɦ2zjB>N *klVhHOp*w"2K2͎a(-PiH~!zhu6!oo$Ҥ`ˮd~a6{vott}5EqyJOϊG2\7 T}K]ɇˀC9{ э'[:.!E+zZEtOCជC~yY1)Z. U"wzO!?w1J鍻1z( w20];"Zd6ILohߑ9o%Cl\)l*GIBO?~cդ?֥ߣ7R"^e.` XIݝ|?IJ4YE=_6ɯ[xbea~*t'x+p%Tt{SAsw- '^Zb$!]fjE$ Ri7$7eݸq>K {Vv6p3:4SN 7cY6頻xMRxWU]Gӛ]>#1ŝP{cnنr*R\բ}z%a[`PswZq6ЯWMQս2Fd zR/ǞDӍkpyNI /nAN_2æ߯8XNIQʛAdՔ;8% a DG\5F(Ja,}_ R34J0tvh \=4jt8:z&␀۟z|6TLp>0¼.n׋ zy-1~ZIϕyc }dqT~P%.$N jT g4DUL> =o0#}]9#BsKX_ S"BmQe0}mB~).F Y0uir9P# .^2fAa1|jxG~ %Aj ygn-*k 7K,qIDINw8"Dz-6AigIJΈJm{ ;ߔ㒿t:oE/EhP ;]h$:\g%r>&r\O$B?y˔ ɿqb܋E8:^ UE <;n0eFKe1k]MtғK%78QqnOnd.>zS+̓:(kZZIC˝ IsБ&:<XëҹlwvcK=k%>E8E3ϿS6^fV3B=j40HrğgarD[ER-W^=P ;x3PzQƃW :~B 00dYE(FyN#\l_p鿋Ho0x;uI2ZIL"sT0mpƝѠ :b?f3g?6n_ BٻiXr笀_JӹӚVM<QAf,/)%pR pviN֪2RjB+TΟHMn;!Jn}Ofyb"QRAD@{xSymE6 &1<"E4J;?[xkOoOR ikc&rdcGJh#2֘j5NÈj{ps V.LYW3ϊ6f yݥ'0)\rq-75P:y^՗m:'@oW{/#Kn=v"t'T@[Do乀 .04 ew,xRrv0%b5Ðt32BWW V=#zλpǖ[è6Ylsuأ":j293l74Em%x.OfC5هDqqvÿ'=AV~RTDdCsSn?\xGZ y O4\=AZZ''+,/VlJ9 2k{$.sK75oc0HطkޜPrG(O>SāVZ)v] @BvYK6 oA&'I<іCq͠j^y3')ѯ"j%mMGYq"~{\?b9y ڸ &͔3N1pF4 T{rWHU9tvj;ZUqJ %>c^D;EƄA3ɻZ"\ ;{u&镥I_Þ;&7 ] k{"9^12wͅJ{ K n08Kd?Ƽ~2XuAn~E,΂ؓ\65xkweI.2{(X͐!"B5v#xm#(u'RslH]K+2_3v\vsgaw(zfw=Alw*9h&pBh*3' gbV(<;\}duxpD A(A5|_{d+֓L"4c zz۰#}yƂaq ݿ]ф~65MYkl(x@ m}N*ٷͬf%'ͨi8E#Oz~.6oVeԡ Ae{9xV~Gnw(-`CĹ.2zQ>Ъ5bTi'M0唸S̨:Bb'$XuIq 'cKͭ B6䒞`Z E>yJ?yD((g f'[,tr9<#&gw Q9A-?q& ?dm(I&aK"mxW_]j=s\Us#dbǏeYԘVxBrb'EԠp .:cժ ,7a h( @ߩ_|$:I'lTwUX0Ə;Oe-9M*5齋 R6˸apn|īHL=b\Fg5?fpzOT7X"P֡h,̙95N/c46#r./pi]S_lq5 ļOn|T0sZ PTpmok&*x_f3y@\ q9܍tqBu(\ijd]m$Y#PoX\JiuT0>|:'{0-#a8^*oRBϫ_K0ki-3)-<kE7\u׉[TD4kvvt۸ͱ@cC]1,.!vk,c2軟O=q[p@h;():dAmE1 ZzyZ}F4`=ڌ j}+ZQu(PJX[M--y,)?z 4K@M+&Xi@B++I4$Ez#;5z`fɼY"8,GYA^5K;< 3 y=7>-7o/^mJ%ʚ &| wkkwBu|B/,L Dǚ[#`7r@S>ǵ!RnkD]f2pOq.v`y$VUt\I}o&N 5wξ'DN<=Ye^L̓}$NQ ݚ>P܂zYx* 'l -ѓӠv忰|KLGch~dqo56^%R0Wπ-*Zul%@1"0j.5RYmj 'ߛsJ9J]-#^qDuvzN%:?F/W=z˞"vF>%i,)Rٖw:1uB:-Yȷ2A`Ѫ/ # t&ܵJT6󖐗&:5Ȩ(φY<[HG[9z E!Zj^fV8"C\#.P y!qb)6aE[<R"YL`,r.Nݺ]8Dƺ S -!,XJ:ˉI;dk8y#>]YaWm@ĕ_A] }Wob.(|G9.n$mMf3+c iw:)}4nʘ˪PWD.nOξck^ oi\Z \P@?WAxBV^P@PH$zte uӂ03a@( {TGw;oϷ͌AW#MlDx6cF7^N98qp7D"oMyCJGA.҂J[pg85[m̘Bg'#ـ<Sbu$Osq@4`0I+Y"xz$@ _\R,a v_7`tSIUlL"Pz9]5LPG׉u2HCTIN-/`66ܫJEIjzYt3Op&"hTtJL_9<8(bЈ&TdF>]&5K#uKdSV2nMngď_+:9vG`TmM rqePhzKLvSǫwW++b]*! ΋H3Z {xťܺk2g{qV3KWyr,go@z*KI얨09:+7F=!a;!WQC{j-HUwxʭ+*>Ӷ;K1XJr)eF\~S3*ռǬⵠꛡdT=ܨn3#JyE5S6kR<=4LPHAv%!6ryVGHB@hqh R3| #&$G>}&Ra x!1gcjt4ww,\oʅ7> ݞRWnsSbՒb']4u*Ԯ`@Szgu(ZûDIe&d(јq ..h'C0Bi{}b9b8N0ȦQ#ҹN\\7ZLn5bM`*T*Ӧch z8/;èw֢}9\kg^(:9h/Y^v9#cywO,Z⍡rӼ_bG^YJ?cTΪUZ7v1hb6a0sP}D>Gx` WĎ|#e*W:@k&/H-s s#<+T]uuIuWYSږNWGÑE(ŶJ1zK- ~b/*]̓Ы ~z*~z۽䞉|蚬O@~J/4#=| 5*̹Je4 E۬|\ٱN2IVyēr~BZ}8VU8 TqEϰ`+iʰ4S/-a jma u=AyF=WнDf5CIƺ"LhPȝF A=~zv--w#5%vZKh{"5ޣcOXpSVbydXavoq ?kCw'yE+exAn>2ѕSy$,v1iNC O-38# ]ň^ޞF/DL[MeX1; f_vMQ*Ikыd $؉P$lFs3LUI9uOtn]@ױ аi; MK wXu]EPES):+Z[*UTn C4DcPN%',Pm w%o.lM^]iAOܕMq gg?0-N;B (5 Thc|!CiGW'R^[\VU&>G8VX՛`4+Pl0w/Uf XxF#(W Ƕ7iֱJxu*ux^^'0nr$[2q,ҜfJ)h Aۃ0AiJhd|/S@\29i@X-䀗/5!s d<4HIǫ$ԠqNK87\mDڝfzv|A;{}@ AqbtG_sߔOd~Z8`(E;ZB*đx52OYMFUh=ȃ;`YG% @.&̓4s:@6X(D}1]oe Rva=E{#fZōgњ?܆Mg8~f9-ۘ`hqL:8c'nlz5G+;Irt,W$,d% fk+w`殐U8;bMz"΍!MJ cdضўIXS碵DNLzRy)݃dÇK,`E\w-֟4zUked$]FO 45?PGEQKEuKhj AL^,d!?KkwgC:la~&KEWkc5)`G5: Q9L̹j?i?OG: (ez鹀%@p^F _ _xّCe񛣉+Y{Ŵ7ýl޶史UG$2xim͈;wgDj8wLT{UYx9Ba? ^?R|܎e5 ;cr3馨0#V&mFL[s;8QGvi$FtZ| Xr jO{W'\'Foa֞mm=,'t1GF2 ދ (OJOY#_8e #>>? 8Qȝ*Bo%]3f͘QxrViH6ܡ1uUx4|rFפ}tnz,C/I& b)q~'>͇ JaD$)8h*3"~57L3)\dު Ne9/(.ۑWu G1Z rzUnvޜ:e9 ?=~!4(%>/=SW,Sj μH. Y +݋)i<xZsҐ-10?4p:դ })/D oA] J3Oap"Shb'_6T֢:ugm}ko a\Q]9NRx;9?/K#nYVU!$jG*y}~fgKOLAa<<.hǮ®*ݻY >52onp¾ª|_Tw\ώuFs~GG09TϦ]_9JK KOiIVl%#B:*V3/Hz?5NP${3:+bc+v= g)_b噅 ]dLvjBFz# ]k2UԻ@њl&IҢ^GHQ ɹ"mA`83'&%{/&*Jw!5JNbA@TɶV]8ޣy:,5W-}[ V[>8,G$ ޾ ue(_UJi !YY=r>DNHNA%ϐ0i gңyxHE;?%R1׊Q,NRחڶh4Ƞ)X_'=Mc#$QnKLܹ7iY jF@>q,:R۝CYy`@'Gc_xx:OVUm@nh3n ڭXDsd5;BG@t)O2K_?Wląn$(`N.:!ArJpIoVYĨ[AV [ѮP ilH\:EْoyNآMP̗z s/:Q7b*f 3v$>*q,ƽeF`fݸt w8>1+L 2<9eH2(q9`ޯHK YS[UN\e(ltiNH׆_&Y% }x a&l[D>]ZH,FV J†]oCVLkbq,έw(7q"'@tj_6/QZY)̗Ñ@ڔ~ISPf}1'NbpT$>Yz^E HƩf۟Tg;rOW&&Q1@4 B`IQ58*YJbu% FvI|Nu]:ݎrVTx߫wsN1\ ɜ٥8ؠk]cF`̬WqJ.4-_VtaRCHaTZ9v$YFOX¿ƃ~=\3}ܴO -(I#0rl_'Ӛ/V 7HXBR8=ezQ`KOB=1<9Wj IUi&'Y뵶fXYZ$ 4"@zxF+ZāG8;NB+,\=-֨oWS5[17=N ʄ>jq@ow6k@bSz%r* "$-jO?VZ@訅LH:pջDLK-a_A";up ~/,/4p G-<~fn4i"yELN scE?3y3]=MMoӕ4ݞ"o"hO j=hYJr~ypiCcԶmA ΋4J:ҽh|Az {Ac^&ÏLbDU8_z[;-ҡeZ򡆬Q)ޝhN[bTBWCllRZau(pƽ/:|li/s,2^\.V5 ]?uFf1:fK>MgsEicOh-#c?ʽKa&3}p au ˓b[CK1o.<}|\w%T|Ԇ~LL:׈$R{]xÓWxhv˶DPXz4!{ Dk+V|ek/|Cq%uvՖO3z_nӰd 3/+AJ7(hT좫y!xn6tw T}>g'6.T}}d؉7_6la*(|<%h9#D紜"VG ^4JGM?NdVZhT|"KHz|8UfGkSAmYThpx(?&N nfn*)-8^DbNMoHWZ9]a~nyѩ5_VYs٧ PBr ,+9W:fyrbN0tEqWgn%')V OaKDzgH6J):6kEtkNW#Y~m7mdE\/e2$:ǻ6 urL63JedLY 2݅fRB0}*bܶ: Vԭ`6־'.4&Pq@Dxa[do'D4hW5(Lk/][fP S*}LGCZAŠ68EȰ=N_sRD,.n&G>!hKɜ'9)ϥZ{S rP)w{-Zn/]q э oe3 P`Es vFo;ATGCy 3]s9eqYe5]ء0DP2t <߂J|ԟU#;րk 1-ƅPN6QO,g^sM'&񲧛?LJڲ^7C~{NJm0p4 J}8slYx??A_o+ 8V76D8UvOf$/Y [ 2[e=2.uȺo =ߍYj07 r,%J4[RY#wM,I㲸\ｪ y6L#\qN8+UMA|Fið'hk*4ӼV__ء@\0t2 n|TvQ8ŶԲ Ao[>oYu>np8C֝}+o(~߅Wp4[m̤24COT:Wb18J杚;ZI>DPhuj6%GQD'j 32)CQn~ ʥWyx@by(ٝT9|~+bkf+Gk|'`*UNSY^}fsRF鍋0/U?-fp@Z$<+To)XFtTt˒q6$זJ1u/ rϪZ0=5pCC-qK W1Z\ 8#&a^JԤ֙ڠ#;x~\W"|ɓ> J$CB }oGk7c6yuXk_ӽ XmBC*7On#Q\ǀPYvt5 iz/:Q(#r} i`/^a?vI) j!ʔ%gм9 ^ W6Fg$.gY GH'" J*NcӤhؓ,+YZfw'm:iT(ey8IeO#=-Ѣ K◧A<]:GDYBq@h< u`WAnbsfCH_-:c|>pW(|4<7\M| %Y:l;YF^p"$UYHh6)5 ;IPlYDZtX0N9 V.l:{%B; 붿2akO/Njm7T8DĢO]ň򬚛[HY\nk|PJX>i] RV.)d!ΘQ4apzݚz!6['a'6e 0oX)a6c &y(t/l,)}H7i@ujGu#)G$AU4R(Ђi9)JQJJP7ce"xXN(N%a2ˬ5fewptǬ/ C,hK~y M6+nkYPND40 *={_'s~ #KC9 d5/ ;mtiS8oAB7wq,Zҏ eK}ί`+>fKY[̋?m҂ǒ rR$S^&Fj1ǘg[|Cz|DR9w"5-@9)PCg5 'k\r&9DDBУ69EuM/= VB|WgPx&QըdXpL-@K!'T~:[sS/_Ԃ9m퀄0ƤOL~f@_Z]zm -8 tf$΅p12Ubbe=C'yGvQgꮹ4qE۸uim A4s^B^|vcq\x{m tHݗ;<%|,j(|~Y!vepgLc5לh rWwQ,{Jd1ytsVN{aZ.jVzM:kU8荙Z>2|۬!羙Tpytt1 ELŐV A2M7EO{yÐo;)@wo7bA0 ,1|Mc隐HTfު;Uvܲh9MuY`# k,7! 7f˱9P:*T5ދtF{t\g$p_Bl_P'w̾PEP%UO}{˔1*7IW/,*(m=kS݊ᱦS,.5 v B D@Kl=YyL蘘-Md噬֦anF-_1Y[\9$v+(2TNO`%ґ3w/Ť#^)T0\h]he>LB!GJp w74d{TBP.gwJI}$SEk'rƤxF1 , 5UH:G&δ(p:_Mў_A$C588'%m/QXmAW 1f=7\c)-+de/rFa`u^A6&-zI6=Q3 ߹,5~y|4De6dEτ`iB]AxDZ#R)ύX65YǂZb嶖,1mFBhjrԎ㤄n*P h;OKbK2as[ [UIߝi(<ȳ#_yVfwHX5gAfxm\myvۭhI}an-4ξiRm[5xE%X;A{'M0?-Gyk!Rĵǵao4ztu-$o:D1Vkwl;[T_vy7oti%yaXۛvqq51KL7ٸ^Z\8ؔ:Ny]ˁ0v :A֜IEh#Ț*{]%ޚi֪ea%_)s yvGP{r,WD6h78}۔L܈5N2:`¥mxwFCaEOhdHU. A[+I@ޯ6l$ja8*P#·Er3B1>̤`7?辷m$6lZ7 fp!}ffOܺF]@h1j,3~9Sl+9+*x>&p]nAdqRW&r_ꂗ1kWIetP+:HڢA%+0$}?\:CԱ`w<q-}}/|a:o7S95W#5viGܼњ~)e@oJ)[ 35rd?{,%~ PS l:0ѼhvM3aP'_ ..hKCBΚ7keD蹷GUfJ^.Y(a &NOX[pGt>MbHE'>*NI M2 ğzPx(w꾰n3꽩4CEX CD<[9{Em7.dȲBiv cUWJͦɭdx(iK52sY@+C2´I8mLA`12 N Ԋ׾{sih>Oy {|6)tC7ӔJRP94::a{qɇco)bmv5o7% S8a4$v L u lG$vqhS0Gّiѣ hPa,sЛ1Kp ɚ1 xBzjAUɷ>yNZ9=(θͻM–=X2=:ћEe{M}Mjf n)mp`uͬ-Ҿ?[NA( .pzPإ`H2"Yo8EԙAx!vֶ}%1 k팢-UKaS3Dԫ+oi=_ ,O>XTRC<)69s| ,扱_f=ުk}4hYդY7"*4:]pO|e60,[=4Y"7qR6ssgbrw!h'*D>3 8isw;dLu0m1s;}43K):K-7tW߻!L`7;[a9u{iSn,!.1[͍J1(jR 5][§6׋~?vShlxwgy B6}Y] i-eUxLuF8!c[,VY%)M`/t{)G11-RYeʱ=) G;Dh f؛ZmX2ľ٥Sg;.&r8,D3?DNX~`T١ H"MU"cƏ?1( ;*ec:l71n!5rkn?jJ~`~ j߲Ue0WFWgG,QMU$VNGrL:fX&>CouN>Sb{[{z+DY<9юܓdXD܅]QwtkA`.T=pnt(5m'MP h(q٣Uܻ)DȖ4rGb.sbj3Cqmko c\6eM,Pg¬@}}9oW{9)΀ i$lipQBj.DuH,x ?#1"<vvSM 'W/1i9T˗5?/olT{X9V3Z3oT/pAHș)/nX0Ŀq7=I+J^߸Ry*a} WаTo쇘< ձP[>q6 JATZ|ak_|MXfON<~_!G QRrYSnQ˧]{3U,='xW R%4xn΃lt0ҽ aa{2~}c88+JŊ/q.Z#oc36Wfj#L آ J"C Cђׂ|Ն3x:+U28ToOq1JU@9_Ha B.4ՑNZx#.k@P12^fu Gnf /h>Z LP[_][֏mTyai?BŜ=1Si^e9>>LtD6YhFr9! IyEIXF!]1g)l^q f4}bIMɟ( [zųNsր]E),gXdZEy_/,{2g~'ۭS`9@rS1.K,?b-NjHDO%w_LvQVϱWOϪ/k޲Xk(y~Iէ ,'{[՝9\~8-p}\"bv.M_{JC?½ G<mF6Y#mv{(IUEw{*#wX[PܭxiHc7CznEX Ȝ9qAZ`i5٠k=M"ForV]c (K\r^,;WZmP2:#'<|\١촶`Fը.^ҁVq}4сRB{}i{ 0l[JYn7 6Xڋ94WAPGA~Nt-y: 5P$;jm?1f@g>f$֭l;yzHF^bNcVv,ߘLez5*\{TӢ`RDX[l I608C:&9wlJ-02WJD1!3T7.)46n3P@iK=M@ ( ÊBpjmQeWFҋ[[F?W pJ_LaD(? cw<(xY䬳mYvk~pVw%|^-&0Oe]V'ҲӛQ |A:ldz镔{l~괎T7D%DKӹ Q]g} \_MJq|b&9Т*;FRRo39?qs3=:֡QYI~\/[V7A:- ]Nm`~SkC._5{ԔcGv`72Qre4Y#й~"2xfd9 ӛßh?C%虉}S%8]l{5R &͚6Ov@۩w_cF"Usj=0x1*1Sf?{Rc$մ7)t:MY555hxX0') Ҕ,&a%&4= ߹}j¨o;\B7eߓX@ Xյ1bmm^MK`>-o>ކW=u!$ ' S,S <2fs%'z\~_|,'OSoL_("oTͲa'<_bZ݄I5͠#g@,:T3,GLrzedP4! D·N^-YP>ZL%dW|9Q]W7*$PF3L4p,Ɩ(`< .+]x G8ޡە}k{nmyNP$0 '+#§nai[VO𧦤-ǣe}%H%h8PGTU/NSg0suym˼W諏ήN!i9V0uʂd3+?R~.p 8j70sC'e\9"C=` Qs T&':.l5isI&T蓣P OsD8\4BӂV3wVkFJeͿW6zC$=[-1?Qw/v1X>8v6X@;D}* TJh@ x?lh0醼'޸+c?3vioOrnƊl%S6d7LT-t%MIxP: ='ۛ^^Wp-I&iQ_gTKeG~aZ8_~B׻h}bKwX:#_d\Z(g9"Ef>"TU/^8m1:_bDzJV~ej'ʌը0NUgFljY:} Nq]B10VQ;<<+c!T:k w*ؙ$֣cRB""Ь04rX?l7q]UYiX㓞q,dڏCr"zmq⭃i,_u1Y {Fg1_bqR @W}`ZYrgqPtYXGWO,FT2D%ÚBL:>&SpςSka 5>~OED42~y_JMd6rk=o`eNlE6@)M`<|ÕW>o 2e= 烝o!r6d9Vj|B0yVp{ q b"Tv:mrٶ\oʭBiU=`ar|"ZxP )- cyʂ(2n㉕"CyU?DYɜ}&vCIp[buRq?Ot~x3cR{*f:Er;(uOIO l &MiW!cL~_d<0RuƹqY.%1yмM+oG"c&ʇ4jI8_wwK|xeni=ѩFr]2ݢJ <o|c>So' "cA`0ke|88XP;j۔U/\u(@+fY)zj, I;D4GmPp) rQt]XRT[v|P"KOH+$P_jmИTHHmD][G&A"Ś V .5881WmLa88e`T.{8|O̔bh2D<`}71 ƫwo}1Z^.7aaeVr{/2Xu:G 7 q>!JT#ev6 A2փT6)v1$\4!`$϶Pm3$򎻷P|ȱ*l)5@K"Dgk\ úS6_u17ױix9J{,!mvR *m:\3Ck='A@:aU$ȵqn1%"MxQM:bڙzv- !h5{ؙX}u罺b40so#=??ZEE<+.59/FA|&+H$XMiNcn̆L#u|#$XKS""%Raq^+8Hq1sG<6 $2:TG0 l>n`Ccz,r0 ze>V#^bSb`9gIA"=v ;K.E}U֑DaŽu)u@[lޕx'B]g4B0L{|UWWMH2uGј.e(>7PiG jz!3qpemAR6k]4w[>gasK™WMIMmgECB"Y8[.ZURj`SJᖍ!1M#WKc^.?*iղn4abҕקsA> ) jz6$[~ic>Qܸ,L)1t&:/-fL$k$v==CZaMm]dz"hK ,@u=2ܜ("6W0(pZl$qQLcUd$H?m UuF*jDŃA"eoG< w/f 뙫4u~jP_@N X q֑C th_ԣIuSۭ(JL(@`#I  g4{g =*/HXAOUrJW)Gk2b]d\pU—;,֣8s\Qڢg43|L/F\|:*O1ZJ1|Y%~#SᨮK)ٻ{]c{5KN)/8٠~5f6.9,vAŀ蓘Ar$E kpLS:عu6 q<*c4\нg(O#-B `:͋_'W6nxt8檙VB%b2T$ZWR=Ts"xH-M7‹;op4,Fm@p@O8%+71֡)"dDO#-Ӈ-{5{`-f~Rҳֶ@VƳjf`F0ECpaōs8 1J# p "h{o吏یٕ5T' chf Cv٣ƛ[z< 2I%]<(+wo[''Ht OZl{Yi8 ɸBx0ƔuM#.g$/oQ_V~Zμ$'X8r!ae7a{èGrp\9fZ&JAx3}-7'ET-'$A"TИ/BNE?=ST=)3rpe %U!T:¡JRhe^rح$Hҫ}kex ҡv#,ĵDxLl*nLeVl㭹5AoteX)sP1B#h]M)V8#VɱASSN>Dv~r.9M)޳~ߕ"D8JmI9ׯbТ!] "5sz|wjk8f!gt\xu/ \g%Gn`_X})NĥQw%GVIکSd(m֍L`jLt %ȳU`͔-wڌ:ڒ@DylF4)۰Qs Y~1-37+B]#'ە1=zɾ@ø-8Buya{7"#G/' QO7X"6za5ڨ_X0}7ȜcLE7G,1`:eԂb 2 Ћ4St_ӱz|r\^y;L@^e&A}2;#;P%X%l; -ֈܕ٘יXe$хG!c@C ߸P=&>:C%r5k` jNY."1t V6\ΝaJSL({"^;Tb .\VО۷5α Pb#+4yEwςSoaDLp6׺}M_'NES6(y*,96pڹ/(a~#wuH0kvۊiqYɧ[l'B/QҢGJ8,po|׍ ]~ ~8n&p ;zz_Z$4gRPYlѴCSG~ Hm#;. "lܠ4!lQo؆}UA@zv1 0EV~*`)Zmd/7dBf ?(iRJVk6V6 `$`rpToV*r \F3Utcqzyy'B x3ޝ}сLPq`0܏Do`Q A`"6JADV]6I0wa#}&3"uDLճM[`bJΔ"UT0[\:yaP\9Ըw쟝%*}llLmupa>FQxq-Fљ7/&C[RCX#TDAo[窳lOP'KzH ߷s26n67UM)>-i@,蘌[v ]EӘBBF" ԥgPR # E_=*GfFPm u?k+‡*V?=+VHSb4pLjr"B=" !uӯ KEׂZH4Zp@'7Ͳjed 㦿I4~'>ŎjqĤrQȽ6ޗ^\nIL._4V|Y'To:n6QAk 3+C#dblb2)A]ɞT2f!%c_zNh>w e]j(vSՑuFzY-q c(\ԋ W#nj#7R8c,67Boavf;ծ>:;MLelYb=PJ;zw] zU1dy\#j _qÔ0 GF&&UK@?a ;JJGd7Je;LHOfh5&%nԌR :gf=]pRxc_@F#Gj:/?![Brzg{' \4aX$;f7maLGJY̚e@S>C7tNm '/|nfHU+p_RlTR0yGԖhp3wick{xϑ`< /q**j}#HvnQV—x:R~*ٌi)HYc@` ꬓ)Q(!}n0 nAJЭ[QaƇdu zFtw.S(,PƊ1b%d Ԕ{3)7 㔛vr|$$ZOZrݓv0\u9 Vie"#'}& VҖ{r՟q ˶QLQ9ɲ:2Cz#)yGJEm#ʮ}P#c":$)xv?DmA沱էz"*0zџdT5z UPOy':;'vYp5kK7#&_҆m;}=/sw9]2u.f̺N8×c Jr(/\6܇qvKRQ,,h5dU/`/אɚ-Cm瘌=En0\ronQ%"`rJE|j\nnv@q>6wtgb8Cb]`` gFDɳ=.$t~="NzvnB^# ٨=xݨdYGYV 3y@&sQHS(- 0Bȧ @ G 7Gh)9+]SQC69Kd )m;̇_Umu`z夻g4gSX"=v.N(A5&CfqR.tn1q/`]lVl޳o҇HmWΤ0lZmƮᝂ< \{#\y'Cp"@=|RZ\jÏ\ib#2cR\T5 g?b Yp i0EZ&D6ݛD1t'ɤ[^V62qn,FZYqR/Ww5,y}\qҕ5I_Y>IM+2Oy¸-^2C|NX+'wX~yE<B}!W=ju2+eA܏u4&ԗr2L{ OiK0^6Z/vFojTpf:2m!ƙOX1 #'J+ R3>1,W4Cdý=DW4D~sߺQ܎{nexG MkDiVŔOmԬ[_+\΁`j|ɇ:ي=@@o8} ʦ%=I"cEH&"60 [5KktF. +0$vt#-gWO&m<ߋ=:>M3J(SmGJz̆M%y~G'",߳@);۱vZILK4H>"p,Qq@F BkHj8$Н: !aQQeB(4?kg|ØIn֮75ّ;P=FNh~3] `"թLwTa#qlj)bK+j3ɓV+A>>|?QJֈuP0ʢbBkoǺ+vџ| Gqg$-n.``mu̚B z۴ǘ,ԉ%# E6yKֻ,Lf/ 3϶3)tY’۹mʿk1 $RJAɢ.(퐄A2rI'=/D yE ,޻qjJ a2+ꂪq/:dp'Y:2 p #)k+o^jS]=JPCCIL om>b)x$fC-Wr)66Ÿ4(?%6Q'/bV}ûl0҆)\7Pe}j<@QU7̠,OX)py)j\kǂȧ6c`'8}űVۍ⿈ZA鵷VEyuCuTvɥ+.S6*)!q'KvBL9&H9<<_pw怲Yk>WztRE16AT} g ҌYFbɄDaK?{fvu&]S}[A@q;A^G.2܇e:_DT綡0BҨc:d[ 4S𐓶Ɯ_ f.Vt,- zpkvO,m/CoeXRm* eG +@4E;MIm2 s]/X..lmS!2qJ"ȅSQka6m7k#)⽩`A,ˤewE( |ӷrUM}sO.@ HpAnsXq'h~|^f!`TjmX$F?tՄAUߧ t/Wߡ$|qi«/NDvgŭTl/ՏȕFܿ:Nm)*>Ns)[0> lէ^-"8c̝24& @QwQ#br%`ib- /h2Kp)ۅn& A`^,(9_39њ8cL8 \<҃Ѡa,H*RX{%bɾ$4wV2e/9A]qE\ݱH:Xc %\Q3lYH1Tk|8I0&Cj)[țg`SHA"Gs(,3ryB7NӸqqgDh m$n A7wIoY%GqlkP2*FjـVG;B. -m["^Ӱzd@-(m<Ւx .1jƅ{ Y?j?gǬEuClօ4ZemA$ 9 _cz>ɮ4mϫq!r7-b=DCjiyp}BlK͛VR;߱8|2 |lmK2%\9=]vMPJ[U|&v۬S$'ZՄZQ&=!}fCt Ƙ̢ܵyۭ4gG `*cQCU7bpʬPi)u)GլOR;]xAvrYcH^,7b.ZQ9NG=p a1zM׾G/q]i~gViUT 9mXţ1}usϥ /d`SE\\ ݨ K  ٍz"ivU[mQ,)IkzrBIԅT \r>!9֨R֢:"{4?n\5|8 x\EUz5[g$֜I)u#;Jln~8ܶu gA+10D~S5%_vHuyq;x'sQH:"|sh9޷1QQ|>XK*؀dR M3).\z;ÏT1N.E6t[WG,֎A}\_M=?({3ْ 38ZMH9oLTݹXg)$XGwt\2 *shy7i*>̹MWiFiL*W mF$d2Ş*Ӧk#&Fgټ,0\ ΟJ-]nIfzY$sz;߷cvw;qi>V<WeyP( L5 x|d U@ z5;!2㥬=Y'ܟ-xT=oi$9P=P'4EN#,<\E K,2j8=A>{P$#粑TaHOw_ƥ"&/ۣ1 j9c Mp5]>YU%zJ7ӷ}vQk0PO{}'9g֟WٹN/pjp'x!/=7/ P9}Ŷ,m OSx6yfh ')8/:TB>rM}yb5YHNmL.6l*+3VQ/Ķϫ6c:H>yZ2ZG]¬z^ 4[ru ]~nu~ޜt0UG3C$3b%z#R]ŜlUl_QCS ";`5vyD1U4BSy{ZA`6r\%W守ǟp*.<bijyN;n>WM;B,猓W׌e5A\T/Pķq3LlX11(_ЩeN7G1V^R:Aro%&3Mtc%aN# 7la;0,ʔa[<S c|0%'b?R)߅@55Rt[_&RT;Vߵ`m.1(&>)doxiDULnȉĊ<4U/]Yٛ'?񃯆=n+iy-ktkT{@R@S νyjh&hgYchEnîp8|`gJIS6gRqr?=zlēr;UWI;6J2SM @r7-CζVH2qöhƆ(dw`2ʄU#8~g~MzrB\ %t[:Xjx XDF^YSA讎/GN)s m:J EFL(MF Lq'Gj/&񛀊 ,Ry*K} җ^椰? b&s'dI l[*O)p*y3˙;e N8lYK{ZE %go(bl0OeT|ݸp@`Y:#v Rq$.~Gnu9zQ9Fs_bTh`ꎌd߂OAgkpƀ[u ųƇ!{PHF&_| c%&$VjvL~-pfg4cYz}]Wt%'\֧9y 'j#'*X+Cv16 LW}ZSiOc7"32{ UI6Rm=& \sf")CNWA !d%KI;Y:QMIX""+& vY ظV jasyBN7+ KjVuθ+̐iG韻i Ёϖ9ظ7ĄsDy;ࠩ _qR} 3M8m`Ov*% 4&N M#6@30@> ؈2]bXk ވ"#qsݎQ-wm2 oP2}ʾ |t;}C),!,SM {sg60fEdXQ<նć y>:.(ٲ+<M3KG9Jc80 #Ĝ_V_p=ꅘ"nX2l;o,7o MtzmJ!_4Q\I~N]f;;~zb^R|t (yM7(C8eȐxǦ| J|J<4$>.D^MlF_V5l@:Ԝyo`Y#m3/*u"WN^IS*'@12uܪ3M|9{qja ˯U;QUbP-FxcnR87ja4{&7`ϳӠL7{Zq<N",ski$Yi:vAf_qcuUSW$. oõ>N Ia[J$m0 l9l<^} o}K'_S #J1֍͠Bǝ۬5'˸Pܳf2#Oރ :^úH*L)y ɔS_X]#& x̹#w]!főw]u&2VbaԟnJ5f&Z&Y|pYlF o9Upn1 ʀ$;|,NʷJzp DQZrNN_0Q`U+:<Jl%\}$}K¡Cg2D3cV29XfPBi5-j>#„uZ(:ώyxOwdC2+1 ́2z-VIwޏ 9:nA>FÉ&dNN/>H/,KDt0\O U<"fu1$br 6_wh¶o\}+Xϴ5b=SܔOTCkuu;C埸a!(TUG}OFPlЭjЕݴ|:'H&'{Dߛ')02|F+$g_ƧFpjܐA5?.шj|\1Xr3P.rMY&F*$́LPӅX|o.ӞE;lהMzMwSůf Z,7a@%#e)kfGRPx@Ҥ4ZpL@Bbd>!jj!_pz#Y`)0YLkPӤa7:t7i$1ܞ0ESZpV̌B'B|7N@I'fU X&Y{6spd3^0J/~ÑˀXraf.7$ŀdMkBFL.E6F 0FU%nE<LJvN@W/u'IgUQ͘o'_I>/jBsHF@NVcSqȔON֞~Z]o#mgu$q2qFy{%#?gCa1nd.4ZAMJ:g˨M&5/5o ;y8 Z=kXYE,BU*{0Q2I)厑MR˥)H^v1ː{7m`(&( h.l&r$ QDbRזqY=]zכg7}TZ;~tb|&#Y}_8C*WwƗ |i|$3vo3{LfȢ\g3 G3' 4z+o۝#5k1t:Evm*19 ճ:Alb7zHO ;」 &3ȕ2F+YNœjqxnS6vL`H4Uϩ2o; [5JqVZӞ&qo2_G(H܂6Q*̴3m7nt1LY;wnp8E ѱ lemmBrD3«9ryaR"ɗO'[M!pwkw̅v@TR: K(eAx Mm}HT |GԔōqf4Y<r9Ǣ&ưF}6bk&?8Ә~fǔ1bA}?F C" 1w;Z:XwpOӢ@UԳU_h#^vYh iJZxA9[eD9E!@s,F.0}!OaٽS왿&|sݡp" LI:Mf Ԙuvm"A=Я:L\a::3=y%|umćHB# @H% D:^ŭ"=E:͞ej>o0\.),*v PFoz|Q:Xt~PyNX+/˥Ef3!*C*U=ڣ/G5y-t*Y'8@h5x.G.}t}H/WNrj}D(n/Z_ VO"j;qH/ zq o:e ;/ ]#$afhg'f@o~cMEnk4 lF ٽB;3Ps<Ϲfi' -d7>[%'XNȀ 'I)<l!P蛵o'0wUB,v nTM8B懋EDlyTPluIS-4ɪaG3d?&%׳8n%1X1kD,+8 gu)yg~kMk@|(ngg,Q?tsV_^eS$ 8#uM-1,ֻ SnBFL-©o[Ձ֐X,97Q%]vd֩/.@szqpe/y Gn506娝ki#."\j1< V_2\'ЧK0 o(LxL :oAňRXah]R߄w@)6\ +d'D;f'7NjKvPPWu_ -z-YXٶ K,t=ai~?g@33V˃ n; wޘji@`F 1:!> z/`7,*Wfe>F5uObL!2€KLhY^ZkvEfmESx l԰3jk/s#],=KT+Inbږ*7n`f\VI696pKDW' ^n%st84{yi@L# ob; ȹ=Y*# `jҵEklknňhQ8ǃUW_6Ns:JVr.]W 3ByPOX0ŷ~. La0zQA@71HW ݜ.3qr庂DwsDL+HvLz/n^pę{ yxc/ , {$!jq5ڰϥTJЊvh^p<:L(Ž8g}fHk0LŋsMT\ R Ƕ^TWkׂC?Iy8rc+B%zCuG`M!/`Ep $8 F)_5HIptM|jf q?19369D0N ))5!_TtZm?2SHk}0:ם(>` Y8#۹X*+F7E u BVڵRDR(\>zP}LX ѭXABnXW?fod!ںϷ/|*!hoIs5l U؅WipS-N^9R`@lk=ԡZPK_z̤Pa,Y"1/0hK{m_VT7uS^}V;fA 7t 0QkM hd f%ւ2Yn)^Q`E @BE& U˅ (hi7)]nfH_T$4l2.%o!?70q U)}l ,܁s+L`"sL^`4IU"P@VB=CX0$ãpHP&t0 L5B2O]|8*Sy˓Dhx^ܒ>us&G4sq2^)UVY/?Vj*5&Q@/s2-# \W͈6W؈ٵ}w950,D <ي C;٦5?ВLZ UiQR(Ԝy@|KJۇ.0#wV'a͊=R$>{GG N5O1u!D'BQi0D2-;el_1,7,)d)x C:g|Dt?5dt-{J(%VK$ tOb8@l4q7r@X5Pڛ)xHF,!:u>0G,S`ĉ۰Fwȯ5Eɜc#s2oQEE7,brP2 }<ˇs1st= l/0D4} H#{2Ӄᴤ9=$w+#oơW7b/yNKy+EJUұ hr(?۩yɷQu†ztR# ]jρ*L8ձO5nYfȾYGs=| /frƹ857+9ȳM&"iY/ N:0jF|`gh1*Xj1a Ŕ$ LZ4Ū9d)!X0i۰F\lx}gxgDR߂|O>|@Q<tX]t,w"67p|Ql/㌤2`r}EZ 5*GCb5;%#&dL3LʐzC M ^$m5ۜu/6FگIKHF#vU؞n}Ղ+mz0zDU kP^Y47Wmdȏ$bPɠl6Ԑ6̲%9)hbJ9>T߿s7{dV4JUa!JaTA)"\f|Di߸'b-;:փ}G|oG1rml-"d kV=_й|պG4b ΄lDqS"(9ķ3Q=L DYdQ TpU (pXa ؑtyLNe&;e^4ɪ5&PL0JМgwZ C*Z$F!Nݼղ@[!QlAbqDO׸iUqEL6H`VL W͟sI$pwQ_Zp3N`-<=dnov>ڵj]VJS_jy=瑭#s4?[vgEBm|e1_:SH|v{JFl±I贊Zpc .0w.ɧv5fj=ەr:ͧkG 42];K:j:#KUyI}Q%gVMlT7 $>L4wU=m8YD#5[sѹ~UQߵ 9E41Cݚ NJd.p0$Y })ݾ6v}LRcʅq Sgý(Axծ5L>yNJ|ZYDkVX Kƈs*ynY"$f҆UFJA{uT/+ LK~e% < " s|M Z=*VH' >8svɭFB2t!q= #4W ;þ:${6$vAǙ 쥻cG/办$TQ'j( bStmfz#FZ6+z;`ONSsmOIIPpfBt}-_t8ɓ2g xgr&T꯻ʇ`)A߽7BJ-wpdpIܣaĔ/ѯW4P)ɓwM#=3ue8%sb;%9akÓus$VJ}gAyUV>۔cwj]hpbuhK(f }Izfd˳R XsaүrLG1˃ 8I3?eL`\+U۫')a3k("O?MI5㦞Ƽ$<*.C>Wʐ'sX@+Z؊&=BܮĞ 2F#֞cM_̸0V3KܸPVadEs$;ʸs͔QPCv?՜QP'#bM#':*|U7EwKZx8'>Q.ҙ ր#BkP'oĢRf=5_q&TfHm̒˙\&JDHhB(d-V zn*7 R?28 D5|57H,(ǯQ7ix9Hѐ{k(U8͞l[dF1;%r~Ƚ[_TIOP%},Nhh*W.p~4Vsه6&mJCRc"ߑaM+Q)n:;j U821VI,],JGpǯt B؍GC兆h t!mykȔ<_ o[+91@eڢ-*b:LQRMM G\_iw"XҠjruhDq; !%TfM$urH5DpKsV:Acsm Sjp fJ_a SgA7ܷ }U|OR#NG-(@j?8&NqŴŋd~Rɝݙ< :Vè3X lE|DSo6ޫ=+/`2|h]Ԝ}!2!C;>W֗w8nk<*&z#_:ݠl%+^M!)]xu6N=siIv}ssMÅ[_IPϺ[xezsխI<[SYOi UzrV{.+ m5MpF_^  Xs/SN)͇׽\ Śq=8ov'+~v(1y%B4FxR#'Q?`g).wSm6(;45!/_$6Pg{;O 930Nn5cgbRMtgQGz&kʢv6` wDi(ҬFQ3{2xL0[$@Jnks9 0\aWE3jW,@Nv=qGq]NFS˷8^m؂~q2 gUҐ@#@p^+%e~BDZwYp( ) ޝeEtgmp)u;hS5f8hCOrLBϋ yNƔr z37C]fv 2R z`k*۶ ,NMM^#ÏWVfϺ'kw.Kn +>vH(y8xFlJ4,mJ ҆U )9I:+ФkWpǀ mFgE^&1wO(9F%m1ݤ?n.6œ?L S}U] efގ|%(?zhqmܻݻuˆ(qDe LiH/ &b2r^d!1Y~~hYÜ5tic  =ҖЪbnt?9n6m n ]'~[حcݷ)lZVnJT]_AfV8'Wʛ!z@X5;6Qpc%Xwq[0]W%BM:56M[D)¼ M_QaDO#3U%qxi8iYG]@g4}2GBt(>yHFR8Nu2j@sV(KSPQ`$h0Y 3y5dž h*F9p%kmm5ѷ;^q>:kAQvS*Ƈx;J%-}f$vSs 9a\p1(ߪ1U>P6씶 8>-/-i%vn.C"p$ ]OfF0[0x~h~[bDIނ53fG8Xb%'@&529D$HlI{Dnׯ3n;#LYdl=Ȋe,4S$:ޟMY?G&OO?*;9PM~x.1@ 4!Z2\eܗgNjm ^>-]  DG06ӭ0 U1-pxAct_ _=oS5iV,\q.ơU( 'g^۞& ~!?2=) QVQİ8PwXWpdD#t^ >oȯ?&^8e󁷄d 3Jߢ i "n m)}gIF^i{n6(9i*5#tf*nXWG1s`@𻿬xa UC` ab9SFށOE^XZi!,YU,]>&k X܃YL| p(y\#:CwmH_yGgM յbmyKA7_X iKU<'Eo@'n@-yyGqSuqy;M5kl^~GH yv/V/BM3+ L#N( mʳ/4'CF-ع&M=݂%6XWN#]'nU?&% :㩯~пXSLu +SYsmE&lVhqB$yݽ,=Or O}KH+%d>z&Iv.#nh~!T9;W sծfZTVMu"Tl^30*͞| ${}پWuɿ3Sů_TSZb]QC;nb;a;(Ljh_oD=;0I'RE8kub+H4F-Gb|)+a0!b& ?!){eD{yoԩ}׍:vվ- %\S%%$gnZȝW?/ׄh\O'6WDFи_ȆW:̆9T^XA.J hy  ݧj5 c<_&Bx%+}wMdɔ|V>гY905s_ |ɿ(&}zwD?l[UnIʍam*$[2,Ɍb$6E?fÙ/U?FS4ZFхpaT,npMe. QlX[y' S6"$5le!׸OP: )c"x2vmD%2o639K6e Wu ݓhoڑ[u`T62YlUYwZßԶ 賿g-Q{=&E.^oa93Ǻbk Q&CqK =6EZiUY6_gaVn+4h0rڷS.ٝ`gUfSPӾRO9Yc @D ACslLSRF:9LZMVYH먗jH6R n\kN֛j/ZߝۅM_?S V(XJdFۦM:R׾gݽMrhNI%MIlM;mdwpR,|| ,`潜i!0btofICTu(xţ):fsǨfDd\2U)ZeF[Z1/ȮjفzS[7{FVVahv]U 5Z͍Rm3<,.;azy֦e=3I f(}u\^БX`+98l54T'<&GYD`W?%k7$kJ?V "<6d! qh@V`= Ch{O:CTvlyƉ #^V{u1X=-0_dhD2g ٪4";r1~lR۾(:׉F}F q!YAx J%-779f"J&؉"seP떷e N""ݏSRFJQ$˪Ut˜90Z2zpaYqG!֎"!a)MVj,&<ԧJ{#N7} ٭˷%{aL&ğMWn$Yv w>c4KdTf);g JNYYKaOhT>=pZ!M /`-O8%P5~Ϩn8zy+[n/6!Y h@Yߙ͸8z."#|Wh@mK_CX\DEd9$qBG#"q\M{ ݜgӴrN>Uڂ|dA%tO208fֳSt &h60'MFFbS;""bY┲zܺYUGaܲ>k vO9O@Uu5/εb>R+·zxf&JC` ]=Ћ8rS`1/!+c8z +qQxi}B8Yٽ˳Z@7t5`ۿp"#}T)"S a4# n݅ bcyO!7]O_GƓOIST4['Waք1nf 4O?Wϫ.g5D}j)4$h-N6pɔVn^t,L'SQtuD@y8ZLKC)";Ty{UHk@)$`ޥE€ -އ+JTžbZcx#&tK߲قc -52B}.蟔GpT.a, ,RkzTy6*ű7UE#5srzStLMK)A^cYoϋ޴Dx6}D8vfFѭ*$'S@KE0 & m=dq(ցDS#p隔)Iww)PR1zR)+yTĩ=;EpŌ}[vZ;@[{oMpSx>T'fZbCB7D٘$1ZP/B4HSGS^E҆YO^Lm F>Gb']5甁|+LG>ԑcܮy缑Pli!,1p!+#pL|K6K[vZ#1kbn;RC@CB19F9Am[Qf~u8%|"ɰbz-t8_Aj30̙l(I=f*;X w Dg+8V֠fh˜Y6&4C63pX?ܰ'kh+ZjS7A/e1QFD,"9վۥq#۟@P<-Ezw[IC_sdi42Ơ{z7~ʰ8˩GLʵSܤaT Hc&/JjkXG_D91+użj3T1Œ4륜#zNW߳4 34RRy'9Քs5U/}s]~|ԡ._[سUNwTTR%D+cQ\zFkb"e+hnEF2$M6- 4XXZ\!:]pd] U .ɌϊR0HJ@IfCA_b7m-(.X436Ju luB-ƥ0lr|D.yp(OE Ŷ؊ ͨ uQ\x{ۆZC/70|Gۚ4L@6=ZI$u9f.bg@[ɞ4S*ZK;/E1*R?amyg\q঩_# &12'Fs䫞C]*ܝ$&IS[ L[=;=*>#@Ḧ r dR mCqshp&@{J4n}Ay3}ǝ>.Գ!l>F VkZbu LE-MumqNR43 8WB r ^\rUo{ oF } Y/,•3(mӠ"Pe%mbl'{ '(a+8=xTl+,k{ 1,ےa`.@Z[[ϲ>u7=ɵpPJGbT@T,?W7hT Y.l Ni9irXk)&4603zdqQ|ergm 7rQPLj2- zϋf4Zx'e`6.Jiz[0%jAߘ.S3$ڜE66xꛮ? !GZP* L0TV06ZIAک[Ъb<걬ϼAmO$♿O0v<2NYEWl"-U]Z\Jy_!7n/)jThf:c#04sofG)aVz]\Z^rx(rb$x?6#s8SS 1:%Y ^#2_ qTIbq;706U9hviRNCmXEB)\X"ONjyr=tҼ-xB[F`fϕ/`2[{~W彴^n%+6 |BV\d(Qpe.Pw o/?a;yڐ0V#iNRYq^ڜm&U[rpm'ޡ}eٍZ&w+A?%eDSW`{Lj4"xqkbƽ~yLC_)Pb,mT tGNkUp!&&X9 0hϸKJJYӡxBNJtl̻@ˬy7 DJ¥=wa IUЦL4 #d(jz2+PpadBm8)=M%8"1} ,Mm7g9K$E^FI%H+ 5cy $3oj! '^+UN%&Rxo5rP+pQŏO͔GMD}k̪$Ak">My/w9:du{&{s}ڵ[ C"H h"Vi}LV$Sd3euŎM-^#=A!w#QGרz!g,N@$q4n8 !G5y(a֏4r~DW18$mVVi1plY97J|@c1.7E& ϕ*E$%k[K5fઌi5P>ڡFEKIDޕQ?~qu cؽ_*1 4&KBTvabZP\PeNj',R]KAԉYb0&˹O%[)NU$Iʲ>$rAR^>:qzK"|Q >2di-1 S`jy5 [.7Uq !AT8=ʞ2Xt0P$|[yNbn%-'N^ uo/K6FSTlr[֎D> -,-QIc!:<莓 ~Z[ZfSy wcZ>$> g;)qwsy 8`c;co%ZYp*sx{ʰQ r\[YoWi†eN)˙~FQ N E`? {j|/,dBغ, |'M1fexʱF @48Kds)a(++yt,gXACh MdGf8/dVY\n (|M2:5[ b?-B9vr rNo* p鼧dKi%CA9?}<3`i\J>*q)^Kav/qP~Njmи`oo 1u*xr7.GHh*7#!OdCQWZ^/ V~h'hWp*1cURV;'/K Kudj!밢QP"%EWݝ|ڥd=L~~ ΄ㅔg 3z#z{Npj8^WTՍ6K%{q+n|eP_o v167na!W($IΎSq挗' UNy :*\A/\ƗE4tۧ9O\9C9xF:dKR$+A,ITsLɫMVd*(1Շ SAVR)ſﵔ'!Q2 *=rOp8H ~++[~Nޒ*Wu+$~go;)=+Ҥa]A-=3+<6)lW*Iiޢ.0g5yGDCbfWk6Ry2W4̯qqHD{bB6zW+nE .3Qf6WTUD=Nv`)lkǴwM:گ 2@žbgG'uӢ:#O<FGKm)3Q|$PQhu\,Fd9f)f}εS @W-7&V\^%>jŠH?;{[Bwkm=l%:JwE J#~ 1kZ .^ZTިv`ꡬ CD]iƪ#m˭m c!0'a&fDYrMrƋJW?1*prBϤ> Dbڨ0ois~Hth0>Eؙa/R[i%PѠ9_Rx3'c]nd @OgϰQsƈFvF!sCgr֑T4Kݽ+nw 6}`k >e$V:*'<1$"PN]/z26jB&&P%Ǎ`$+@2i|q⁩Li ;U葲gP[ Tʂ9gе+Y;l}SL&L,7Xx2'&*\fZՓ&h0ǀmԽf?&5ÙdgitJQ-AN)- i=t_7L)pa`oUy)^S=kNj2[ZdW-1La"0+~T\ST&vb4^r8Efulܔ s^V@ /^2 -%YLg[rD8Y@ӘJ$T޾Gr a;#*]!s{afYjȦj/ ~S@,Ox^{#hfDta#4reYJ3[4B |E4aO0#8re6L&:jAD!Z*zI]ﻮ3'fv֔^0|j~T[\O\rI:)(,oEfdWƀҗõ4[d~X+BsGuRW[ДnNǿ[g -B޴VC3[5-lYp$(RI|kka=W|ݎ0!d_o6ǖv!=5C4Q=K\*Ђ!W)De% c~Q'؍JcWWn ;bgWHlt|"scfkzjimOK 2Z2KCWfT`wf/t,/db24_1|ȃs4 ;gW66mse>o6ymdbkPgrD3+{*eW`)'ud<!mT9"0.)nDy$Ԧ^he^r[Z8L5-?`How| |TPc3t֛<]r)"V }cPY: r%4&MJ?|}/~o'F#>؊5 F1OA/i9ْ6%RTK Sr֌{CIGqxGS 2Ii<2\6o2?%fǚ?]Y1Hڭmt^o7B&qBV?6בnȀn>djf 73r$"Plhf|eM,7NJxRW ew_og`qdZS_ϊ nUd`Qva`81oB'(`t7@kT>Q+-R~J ~!׉AO3)}7fpbc8;IvF~l!-نݻ985W 8m@|_D< C&}o"%n /Ts9y6gT%>D@YfTq` ȩ4,gSMU6n3gx7| ޱwCyK$KXVQH]ܣ }"|2 bp_Ty$?}Ol}˄#UoX-u˛cO|)L:Թ =L)^*vBl7R^"`Y5 j{>fBvjop+2jwG~3&^}v'W#E!ϷN|W%k$d8|{JWA '~L3<NH85* OmL]gj[b3&LV !'w PX$5 \zwS4cҩF+P~?pé\Ζo(opߔ,'eK)+Zc;} 0'tɕq[((bI )>k +ag+fMtO 35xx˅ڬ/w]֗Y-4@,JH,x3GTBI% ,3SeX# 425TlxwLmh}th GU2^~tn:Kobo-4YFH%¿Mj\A62?EO!p׷X.q Xʲ]Aw 腲uk42__7ӣuIEI# ON;RǂUh,%y5*? Xp&yڕMf ۇ8rdo%@+BoK~a_TkB`$#kÂưveʼL~刳E:dREl`L5?W_p9:4Ao(]9 }FǝFxJ%> ./y(֘Szl2D?' kܨG`NЏv RKtRɪ1!Ptf"PVt{blV;yر㼨9wx,'ujNo P&It3 F@9l(J6j1{鋇Ypu76y5].㬜>Pȯ$ m–K &:gW//J`X\wN4,%圲'駓g $nڄ&%Rƚn?\k;Ů=l+wIP@%A׺,~sfD=ʀ ]'x.z5>3CPxj vY{/m[Et3P;agy8$?#̋*)LJN[H1fCXhUQaxydP|n˦6'䪻-ݸ7-1ktMۂ6,~`7L'eK D NS%{4xx,y9=>|M2o- ۶%T- |ڞ:zPUx vwtn8HmxC觜 l̘#rS^hs_/C;hjTgZ[S9T35TbX.#ϙqTGEtkP0';ҽfkE";/LSB/Tyr@NQ:DԜq=7V<BAz(0/j+RLe7giH_1yL,)֍gaqa2C?%ohVzGZ3aS.vsS1sU*/XPT:FpWZ)Kz5h\P/MM28K$ D7rpe 2éPQٮNtPYC-yR,0 i?ͅu]JJbjEI5ƞrZ˶=Gay qK_3e%NfawnxJ<R{XX5"|k릥Ip6ǜpuyҌҧ}{8-19.0)QLQyuy6:eMQ21? q5 $.4.|IO|!&<51;|m}>@]gH /]͍jč[W3j"koa6]G ؙ{>WdP#L&5%]rǬiXrm7\vA$h~BMeXԁIm%υPG9n3:jZ]3saZI%Ŝ]yn(QU8:ؒ}=C1MtqO6].Kˑ)/.:5\YZ؄W4>߹um&4}6[pQb~8Ӥ_ %b"_a'/I ?}b59Є yDžcrDߤ`qMg14.G 8 o{ }OZMm'=#;-D+pɃnaK tJ6fMݚ9T`m L[&%ݧ0(>:Hu/$ $H>[xbcƑ_^q|'eJ+U `w 8H{5*L+`,U_$Lt79 ])= RR3]iKcb|VEgnexü n@Go9 kj(Yz SuEi3X)o.R _X( n1糆o_wp? yewSmWEK_@mPө %>#Qc8W1ʾͽI Z$Ǵan7)XYnYSFLr\( ;j}ivjT-CڜFIԛ2mSG]@ܲzܠ yK$ؗ*WNH@`@LL| PqH x5].&{nxhy Nm$vUK[ē/RŠiƨ~ ?d %x.;sarxX/8K!PDĕݷjSłp..'W#_^JP vqӵ9Lj9ZH2"+! ̷ؖK`\Kuƺ\F70PMB 'JKI24v݅*ev(zٚ;fcd{9t._pM8TsŊ#2l0[@6RdPUHؑeeV@VE"F}pfhѣ]1z#J1GLE9 o+=l a {aipG;Xxɦ{eҹZt|ZN2^`?\bg0dc?oC ~5 }XQjψruN)!GQw');p-H$惯ӂ7)uFs$Q"@P5 _N0ߎ=|,wlwknbEPx)=ߨq ĒvDug{aORg}˜A 7IJC$誾 jP$D ښgK''15GT&-J 7 *7 T3pgVk_a(5[ ]O~<`_,fVW-5ǷL Ƭ6*z"3AGK:͸ql/7)L~֤2yHe&M*tsC]ޮF@ w~OD\NA&Ä81A$4pRM47>Y[Lj[ _Vkg>6͠;iv ?H鬩 U{j{fOLëFWL=_TϤ%=l iGS.-/ٽ@:B5^Y]+w!2C͸V0`d{{Umtkk؄ž$9|0q3$ {B'T6az jz%͠>7~K 8caxC"` '#`ZPG Z.?]xXEYX= ༱`@>1ˎR8kmIX̽N,%\Q_[Ӝn~fc>x~HS$#.nDӼyQRX/c 'MC {'(j=Ј{\><t0r]yR5 7H`~|]%9?]jE u#rŨ?,Sʂq.{G.(2qpTkH,5OB%bO;y˥֫lݒ{ TGeRQ[)z,cI-ѐ6/™[18om Yg&lUAv?a_-ą靛x`56[i'g;W|u[FTuN Wo+rluFRe:PdG0JӕQկ;[{sӗxupsVQ9wVZU/O[$^ ICPk7v&cMRe1Np\vchƼbjC2c5Z{"Zi ?Eۀq&M3q.岢R1;S#EYl'm aӹjJy3+߆AU Ļ'+M֧]UiH :+Z&SYLڠjqb6}l-R}hŠs58hνm{AYy܍1bGbHKVoKbD:& fRgSH5Xm?4=أVcÉTj`Eŷ ꊉ'yRdTI-#rd4- u ӽI$%%wǸ|6g3 T Xû|iT=V盘Wu/L4 d-c\w[HrV rP .h_z){Kj~sQ삶m˺9KY#vO]2];N9˘:^'tqhn%x 9O!>t@w2L5~2Rr9:S!Q?FVg(7!.fQ~n,]|g4:Pnj]/LezRS?V.ZI'Pz>> JU'Jkh͝SD ^-"lZ%Oz 0dv EX-@`=GFZzp-Ц:R\ r4>_.%BBlD ^7:AD\"bH9!hȴDbHU=gK х F!>waʖ牸 jhd&X(Jtk3SP"u{ ù 3Żv'@{rZ(V}&oh^-Zxۼr?.M:eUAJ3'$L-0 oI>x$Ny$*3>Q=Km,K/L5GyӺ B}RGxVx؄*ns b0Ph`'P/`,{T8| ksw(?em\c h Vr sy-6Kra|MۂSR۽l=)6@Uud!>K_W6V"&Ύ1cQܟ(1n$FO:|7m7$g58kP+^ nu}lc.u|9PSBf# 1KMYCT8z5:H}%-B% 6ӏ^Zs@rmHSu `Ω;E"1 SXaLlTA70ġ~CY &U)}M}'вzVLy8H1H~x6*%.#tlY J.)8}Р+d|w0t *CjZPU›e$78yq7ǻo’)Ou]#ϸߪ+ۦB ~Q6%ot͙V%PJ="h.B1 w}N]@c\stLt-L"$lm/ '(Z'cUI&p_ɕu:K-3T>0P B ~x_rzf$s xOڦ"H^Wg5s.oݫ?)0SdERm INդc{xi %+wKyXct&ar{p=t ;5N]o:DpkHXG½`.Aj/Jp# ؏#U] bom/g{ %Vv :n5ES5&"H#_Gȡ a*碚i'I3P`B%`Ms;kd76 Hm2 hNJ2*.$z%w[i u؟YݏZAԃ**ߺp:ߠwnRe1xoY`ET4lU2ZJ-WZiH٘. sւz;2ʹ&w!F Gd?LpKrQT;:=:*&m*K |;mXӥ2EI13$[vP ܳN5g5*nLۀ]`Y6xFA-SOVr)[,@est^z6q4Ɛk4j[ ?;Bo04;U/[y$/h. ԕ+Yǡ[~#sBnגN~rSBC P uqy?vkoz~oYmMDPT3b`ݪq'43ݹ٪C*{|~&K\#T[[wiTG;P( >H^cPus;!‹D8LaQ>y*vu9p bBI:j8'ɺWg,Tf6(R,/}s.8)ץwéni/E3/gH6~[ Z,.rM2\$2Vmq7Qf aElkiž~Az(Lԇ#!DTM*uveLG4M|ydP֣ MLc\_3AA9T]ÛG" @6@h K{||X'HT,k9wA$^WL$sp|Ԩ77)svq5 n'˓ 6"p-=f2r^bR`K8ܐpD|:u?\wSM١}j'8p5Flf)D߀!pg2bW@Kx1o{>RcECJf6ܚB - IW źC<i,oO:yv\I+1H?ձ >irF$̠ԿBmO>uOP,@k"R} ,ULq/!<&x n)(S϶tCH3Wx?9؅B$%~X +1[٭m6Kf=* mASBsHm g٤ 1)1 CB$|Ң=IO[HdsF͸mI6=}IJcd2AI6Id6϶(Z3W#uUv%<&nHĹem&Rg}RZd\¿qzIߧibFl1֨"Oh =l㹞-vzp}lv韣]`~3=MI~u2LvY̾> i&7^IzC J;Ćt; m[mJ[]x%p2@K؝G`ΗJNXiI\žznUL׎ ?z衼͎C!N~qUwVU3"uЧՁ&?%Ł>ef]@y˷-uc'o\in&VZ*@,(sӷD+$ԈS)l\7\-50nYSNHUoLf(=M:tʗTHuʠ)9hP~T)ȑ>8n]K`+鑮*2J{gsP%IqXKB}FP>CDhhHooGʳ^Eafƀ0B]SUPs:6Θ͟Mv5r jƜ%t"+w㯗ӌ=Z0 pOM#:֥(øؒ{?7Ji+½De|;nG̷'3 (wk pb[d󿝯W#է*vTsV .Lu3Lf85lj"bXS:(Ox~\AEnk D)OB1!̕nPL.ݩm$'BI @[\d !8S4vռ_@-t jvH e3x@l@69u( f-~Z>[=/6PӦV6殹z7"T&Y2[%5 ,ѽ8-[ͬ\8ˍ\:@eL!ϙ3*ZvyϿqdz;O~lws] ┄-U/x[Jż$KhO,gbN(~#dI]י~zԪwJ̨>r@\67X^61H)(2/7\fؕ^0t:;qUMZgnk11W;)@5My=rk}ae>[\ 1y[6ݮI]aBeЮ :mg.՗KZ  ?63kz_YA4_p;X0ׁ~u(dUx?Pu3fPm})p^Cj\h |3-$3)ӎiAҤDz=1%N X&BߑbF;H (:GIZbi0 Ɇ$sP?M(bm8^mm&n>VH|^J41$1:Dy^-&iH/eoGhnD]:[Jö@%$utwrAk"!l6&@ }ʲ}|D@>t)"^`vint~C g7>Ⱦa ? @81QO9~m#arLu  J1 v-d!% N̒GU;ѯC 7杉9ߵ~sP2{Iŗ0{ Ӭd]_qE0!3L0Նh$QӘUUx[ ̖= j1D|(FohG;X/@ 78OV'o|z?ŋJlg/$.NrȼVp0Vu?Ԓv˂ڵ czc, A;Km@*B`\eקՃTx9R# 6NL e ^gq'xϰqFT.L ohs'DE,Z۳#(aTj@2Ƨ|tRsW`¸8ID-,׎0+ҸvQ] AD Gq܊BM*6 {ir.u޶ ^]X'1f2ə4&O_)$' Њ=֌rp>|7a'*˿E$`۶ )a>')"B$w2x|*[SSN= hЛ"L qp끔輫19VR|ۇǍ 2zk eJ!ڍ[ebu"ULxezCD'Q?e,, U*r1y92ߙE)EXK>c~*H0R͍xi 5Yk ǚbao3@0߅(UpR_'a[`+|.nwÚ"%GDoZ)Rؗ6nNhA'o0Ma@%>&:u+<<"iPNۣ8b+yk޹J7a{s/W RGy%"hi7F3ڂϕ{m>+O2n(OD~0{;0%U|]7 \y)e'֐ Dσ`2^D,(,0F<%\>pJё3"('xNhV- v`"xdJ< 1O=Dļ"U<8]F.k-mXwaR)~מ2ie]J:\kQ`fҒvˤ׊U%*TdȸR0?c$<>@VOvkP 'WdWkR yY(?mQ2SVsETwmdF^s)aMX I P˯DoN.y% vizتR8oG-Wd_93?c[^8H,"R{@BtagvA3b2Iu6t઄j r-}T G&ZY6x oqTV]TyIlVEOvlO=ދTD1T '%}v127#i![o\_N=P,t'a]S:'a!(GT *rb{)0J Fr_BJxgw~qlf \A'Ȋі4Bzb(:xiaGys4ᧁ/<."I߽-h~j[N|&53L*0&ڶ75.. ḳV~!G_X^ U"SW:`)E1AЍ0CQrr7#x$<{F&-8DdhoE \<¶r)@#E/,'i )m  %s:0򈃈,53$J^4cZQh|TQ]]3="wcuavҬ _$$KXWMJ{œoayI}}GJQɓgEK0Ḕϴ]@+@1?[q j*'/ٕPDp㘉,#69[L>ɢ *h+4B$!haʐZN("'^8]F4L@aUSGdӈyC!bh-@xm?fSy@ xc &1.| gH~pDP+&ˆz͘a%.2kԱ۲5Z6{OWlц8C$~$0zb{+ Q@zcd蟀Z@L&KFVt۹,LC1AUl5RkLntvԩ/,Q+N3K-Gi <{6KRt Y62xgH`?|wC"^0Ԯ\V/jPC4nxp0 COH*n݀$DϠ&`M䷮v՚f*$c1dU ɂ7!6Evv5$\m.6Z嗀 o&`YDž<+s=[L{ 6F UbٟR?O>1z\qZ@4薥:{)_0O8>K)Ɏ֥'Ѵx`񉺖ֳoſ28l7bn5\ C%GAl]H`?ֲXUzթw+9V .;M1-'\?`z< Nh~ ONb iZ<ߎ9Ud : baXVCЉj Մ^ 2Or|{# ǘwD4͢T5fahR:E4V52,~tvP30BY7OY5'nw;XH :E'&ϔW s$?5lA NU|/&=H~E|> ALqdKM 'C|"rm|QÝ"#τ@SR"gkE}Jx|%%]-W|TLu|9CsKw8R 2ul[W9\~bid-ne9&uTʄ{bҌv2vۑ6հ6sǷ5B7N(t"jtKpAe0!3 񉠃b̻O&rq$\6/N.%! /Xܵj"}e[?ЃI=bjdje.j QZ%&[ȸpFjg kcBcA9%q";)<%nD4! G,pZfo0G^wh3^^llqQ_閇XTS`rDevjȌPe0/y''JfEPh{+kS<&~S"tmXb8!ڳ$uv}ТYAaL Tf<Y>0dYߪ+!`g@ }@־n*)^Uv֗ګk.M T VXKȸs ;P~O> !BKGX+ 瑫GJx%a-g=HkD`? X7` x-;}+HZ/s6i{^X32L$'7Ƥ}e٨!9xf>,~x1K㬞P*sWV2bBC6p۪B)û(^n 6onʹ^-jP( $<=6ggS\՗IYtjDt$Ua=qt/r*7̭o]B؇ :qԀ( $\oع_>ȟitǍ@@4kX2j] 1宅aۘ*u'Rk *BAa4D !]%j[ݐ蠀P=a@]n ]Z"Lck]B$Ru @[d6Q hR i} [bS[]7J_0yl0Y o/ Ŵa5fQlߧV(0_;^?/-1&==+r_b=׌н7Gӥ?+;$ \z+Ug8Q=RRlT$6Yvz^=VsNѾ,AߏTyqVR'h?2"d헤H &f0f|=tﻤXgTAp?@i\Vz-jذҲ_g„"||:Q2wߋ( m J'?WQ+zL%d MP1ec2Bu[g٭X',2e9,Jc\= XGg*>֧]RnƔQʟ;EIw!qFscbE?MW!?sXa$j9 {24S5J70^)h-7 _dcox"Z GJWcO>o.^؅"N!uz29>ʹ9*bqٰXc*>q.!ɠS핧]3zś|E=C A\- ՎŮ(Z`qJs.1ʅPc֡pI0PaP˼;?GVc.̑[GFwS,<"4UWznj>sjQRތW(e=98֩S_GUTugZ#[ yjʴoPT`+uz98r)%$irۛ$SF?C-}j֛(/:P7:DgxS/7%]+B xY1 5RںTeFٳ)_Z ?}iՆK_J~C(_BQޖW_n,|0fJ) X$N)m砵 ?cEsy٥eJe՛\U;Z*Kz:I%w'(=ӓy:5PiwP#: #&3atǵpNm.ꛁg\ \*c"S 4ALٺ[*梏/g|) W$M RNSqG >c RVXS1dn`LvG@w򷨍k#d׍"K™< \3(U{Y=6$""]?&'h[ rR-2=dPͽ4L&U}e~;A5?;/3SՀo`g3D7$p(:[=Tk\Hm#wUPp8gR,Ӝ5` $lSƏ ȨNAVF= 8 uboqr1&uhty"lEًcY?ϸ7-P^=~\uXE{*sān$sLWM]^2tS_x$a;H.dCsڐ@g#.5/wily T`wqzyh-&􁟻ԐTySTuqi 5"]tX^O}xpg5odhI@[$xcX338n4qzI#Ν?b!&*_gFBu T̠Pd2O!~wbgI1|w;o=zd"դגqI9;|ؒo?R6gX=Hc +ruj"O !6^x@kXb sP&:6;}/pxꔄEp*15Og̉'ص/> #T:i%sݑz7śiZQ4C'ݱ K'>`Z ђ-w]|-4{\'zl8.ox D:>ڲO/As+T2UN<#]h%ACAcOI# ݓyPv6Y){ǤL3Xy׾UKCX4[B< ~c`6j9ex S;m3yr[Ƙ gLy7&j>,F_}J'ihZ8G!Jϸ{{,+<7[At_݅fO>m咄m#3tV[ *IM.CMtO>[;0g{gD= Y>_X*}3޽&VZuNIf58vӃYkU-|V 3*E/.YԪ)NNIѪț:oJ7(zXD̙ؔ}=/IJ@5xjHJm^/Fy+DF}'(cT8։(aIQ˦ʒ !i*$9Ώw9IOn(  Ha!itR։w4kU n1}7q-6NS_S<>`\ qW<4!{(El X`dT{A}p,mR3)ا]d_ 9H iL<'S8WQ̝(o)hᡨQ:%HZ l|ō(ғϸ^O|TZ~ ?fepZ#D<g=Nkƥ(QY=?wue/$3[J.h/VLԃ{RE03;ٝ9!LFR'@.%#״@jA#T/V:yU5c+qB{i#xʆ v\|:>s>6E)UQ^W 7ŋM1 ^>p5]dƷO#{pHW`=Un2Z{((`ut%;2aK ip&[p"J5C1o-Ϩ}t'[;t5_ND bq18G$EzC~\P3<\-DuGDpLn]S)+Pưoy%3=}nYIˠ Z$虽\B H.AMVfDL.Je zu VAJ't_ͩ<YQeEu<[o:@ ,4-:%LmvtzYtC3XT(Vk&V6;LgPMHЈ8|Τ!?Dyex@]vP#3mVp鰦nA+Нjc.5=TG'rQ|xi"}>j ;׭@F$}e㜝RL}ڔDx0h्tjB>dI7_B_t{q/Cr`f>{/C,kmgMJhF/}C!Pcy"78 b@: 2Te8/Хw'+OOs8}IX\1[9u ?a)OD~".5PMݪt/%Jf:]8\ͧ U0pCFyoV} #Mz8s\e]: ]'`B'hgi/6Gy:)PKJOior4Me2"? ^{wmf1(`?7K'i+4{"łST90o8wn]~eIkW0;:sycCsekby![ch6Es ^ܓ-db1LG|K@f2G}cr 3 ,s6i/*%8nɼގydMs{O*cZ(@S"\ l~1N/Ab-&MudFm(VL?Mԃx Z*>)=+39]XvɼMmJӖs ~ "U_gQvOJ Hha\B-nm/\T.e+w|.n#-l=b_ mGwx^Wu,e $vn #рvaA~W: 3k!P9eBkw+'׃kQ.jHض͡8: dyגmE?5h=.ZʐsAAVЎX6 Ò uЀІG%qǎbڳC[C;[c ݣ?^sEH$Uɼk8fβV==Sɭ&P6ZRz JUt Ak' aR 5-Z[Gh=]%{϶Xw. h_'[Qt^r6i5#|JPLISW X8Nw^4/Fvj䶾Eq)G1 )]e}xYXjvYp4@WܗbACi;j,_({B>*W}KwBÀкB1ɂ1's9?:'P~P!n-D.X!(]ݍpS_CڗVX1;Yu IdNqdopXdI >CFɐa4:1g{JL>RaLM13.K@ԋ F ,#^zXZz9HP ıHU J7ÅmGê}!VË剭wZTedc-ZewyCIXm<2E?UO+JFzڋVvR8'!֘Ŭ>an a~S@fVACb 7|ׇ 1¤ bWX$٭GM(Q+_ cԟ=x\0d=^15rܿ+g4e =[3}gDqۋZ^qm{T/\O7KV=̧ZL3xfBd(h%UeDP(wgk;o۬|J&l4 =+jjunSP=(Φ9~}@펮HY?LM $/L]нw 4hzoÐYZIdC4Rϋnl[gDa2m[eN×NFvZ>gKy.$W@P!s?~qd\JXk^@t ôeY~0+w0IOje2r 8/ɚJ|CPD@tUPjç/Lq5F :OWNTMX)C(d1yP1q&E BX~dQ[ aoG7;8J91ѱVk!T9 $>ךJi| ͍9! $ &s"w9-l$s6|ct!g]*»F;(znrDnTla"8,>&*:kQ^7s,a&wt6)ҠVՈyK<@gpʷ͟f2c`#{Œ-:(y#jө OK7;JDJcXbE‰_8Nǵ&#ն Ա; ZYj)Jʨ֊-;+b)|>a6ZBo~SI Ǵc`4~nCr#]qo%XꝄ  baraݟ' 6ELnl:OLŵbSS]I񭙧^!][rl79?W)9#rC@$ǁZQޟ2MPz|O~Rҝoa,5)eJ证V_g ͙S0Y`SqfU&J êƮ~ya~resB~Zz9.`r`Q xFqCc4yqhQj]3Eno]'Z9V*5M{-Z],RRƢZK~Ct"$xI@w*s&Hf#Nq8̂*B +eݻxԫxf жl]:_tZˠ_jY#9x G" Hy*sKJ8q|W fM,Ϩ²B|NO[geW]=A섓Y_K 3#e6LTO b%~7wE+J-Vn|%(x=}K*jaנtZ;r[G6W$ueTs2X'9q59A3PH"uE;5IUى%@*tؙ$*CWV^Ԙ]Fd:,Xzl @bSs G~I&HTQ쌪dʫ K F |K݃B:PͪqAV!(WcP_(fru8X@3Ϯ2%:&p [D%ub^BLڌ\{f9#q_PG׺]WiA5#V(I|ǨEG$M= 6IRJ(^Ih<Ѥ;}(j9-F^o<kU)"yי;^*gX{G2 GW}A.3?>x/dA%rNA擥05t`O)΍ݏ/{JFQiv ] 9I ,4R&.dA6IE(?enA-/FPۻbŪ,_cRϥ[ث:r+lqcM.Wјgp1 ^,73֞N `30^PFtp6޶]TՍAl +<()ixt0<*6<=@ݯiHW=T"_'mFҍ%KTB*$bv4 >/@_WaFHZ A `t͓1D-B'{czl5NGFc/`D@I$B$ų .n|g̫ >x$Ʃ݂:&p8F @mח¡+24~ Ӓ4@=+<\_< @(qg4=pb3k ZI7E/ş:%Tp(TtY>}J>D{AʧHk ߫c *6s>=&Ȑ zXG䣈KhSyۚWzIaluj)So> 'e4rM?Ek?,lKbs?Ep!˕_^ڴ?\1EoiZA *zLg ΢2`n̫;1갺aleC֣s='GUm/TKp'S?>~Zg6B,FտcÞBIx k.@&^$PـqZt?Z EaM $:atdA E/^YuJ8EI/]&\>r|dN}C_#߅R>h:؅_*N |,(;.HL9WQ>Dk]:Q:8^Kc/ j =_/ V@U*r~l^v&y<Hy..Yヵ_d`!n`KP ,V X?PB(|׸ d:^Y7jBBqJ] ѭ!G2C"7e@*iÐ]Md[g lp~[j*ۚnÎs"8Ź_U@5XGXNPwA|DP:@u TNW?nPJoZUՃ\ ̜(r) n,g\B L]d 6!̼Q^UcPem &n?s׮<yO`dye:qd^Eݫm9❍[ 0iw+0wvSll>[ )%;;ՀrE; <t&!ou=RH_z)-2ͽT%85 ^ vx֕- u] HKUkdu~m$DjiʱY+o@.'DΏnOc@5e&лǝ2Ӌ-)/Kz#:^+kۄ;"LR5<GE xQ1yS ҥ47&γZ9Uр[V9/ת@yٽU.)d:Uc?r~7ưI[pxӂ{ƺTT}nK̂1ٿ(B~b!o޽ l~5*tڜ]|'mP,%=f T}ctk]qqbnVf'% ~FL40j#E_W]s#reom-Ai].Khy~y&ӆ'RDr~;$5sljL{u12PdfX6t{N.G2`H|mM&:=+TDE;B- 9 Y}ɇvV2U}Vi=[sE`aZ32 x~ST? :7cBHtzhYCVFp9NbM_9aĸQI>)~vyǬo4hR>r T<9G}M:!qnl'Y*G'/;61S^x%&2|ϰ6Af E/vUU6_9fb)+ JE%)\P齺P:ReK\/yQh#@ uDe&YQK+vfŦBe j7Xھ`Lݎ9'DEqQ!A< Jh)I n~5Ғjv xܣu4MFfRXo0 83k􈣼ɿr{<$0-%YaQAy,1i@(TqGfseNI>?;B[4d%[-o%=R$ΪT{ngK*0LbPi bNCRjRq Q3  Yh@ťЪ52 ZTC޺"-cM#%ɤm!{I^."g>QvlPddG Oڍ*o ,I YbMȺTLPc:H0 MO5cT&/jk!rA/wPU?ݛfkAl&{ು,ꔋ@- @{-07ִ9^| My+5Jmݿp: 6'O sW.3Ҩ4iY>|/Lg~(}afS+?=SW4n5l7Sy0  9RbYyI U{3+S~@wmxu+$;'uPfk#i>wE/0S!vDGcg s%wsi$OM~4{.}v&*T{D\X~WM݋L-)n%k頴ͣbJ$uOfP2⧃/P\a)Qw38B 22(wQeR+RYF>5D/\3+:Q߈/ȓ$Z,[jbK!J * /O+Ⱦa'J.aЂ?1@Rd?!,FIeƃr;pᘻ~56rP1&6>Og H/MS=p8kuS`JЏ\ʟGf% &ZkըuBZJ|-$`˿reM\ XPFI`fIخ|YꟖd݆pT18,3.gAB̭i;Ik2Eoݫuق- $|4DcHe-::e >F7&7-= EJ#4$ϰOv{eT3K6A3+y+B|z00n>ι>^v&mXb6$t0c!r#]J!p¤2#on4(&GOìQ$4!SRX O D]P꽱Pˋ`"|63P0">E@ґVo[W(5kMV-XShD͘X[U|b_[gĉ.50u՟x%<i^?ČX++%A9;#uBt-#_th$F':+4Jx^rg3@%jrh!ޖ&ϼvɵxnE$xC Y{O,ޣZIJmd y8tbP@@Hc4VЦjxFzI憦e'ͽVL xY!Lch'Lixwj3鮚ld{x; a0rtaFi~eQ@{f\-Y^etyE:~ǡXw9IZp2=߱8~: a}-*t%Mڝ`BeXNj(,{G_?1IeNÄ깒[8ŮtcD#sߔ͛<=3]9j8,_ߕS#Wv YP7~tqi$l;1qkW\1{NϔQ(&wU,E*R(EHDAҮQ'}| ";kpz# ~THJ^CȘn l_9'\O=s(6Ȅ43V,Z(]qJf2}Fg]X|qoRhygGIqrL]Ykm2zzDnNiPώpj8ҝ%Ӯb󎟙hBgc 5{60dfZ/1m|qo(QmvsF?Z 'ɥѡ&}U 1[+&Q%ӽSZ7V466'Ci~Bo2R#d+>uumV )'XܞLcۏBt󂇯3#z~Y!]ïh6b%]4jkZ{l^'*OOvZ},x/Z!4-6A9*SOAptLOniDL | ڡp fS~T=:aݨ{N>}h <dž&̥)[0\_= msʏ_ae#_IYuXrդՂ" ]rap#*r8+DĀ9glXI>+jY}Yb):˂ķnH%Rv4?>l2v:L^ Ǚ`2")+OlCD5/pqwY@xa@k0V&>}]5^12X.G-\:v}חemZ&H_@&AflPYoԡBثl * R08 8aL1"'!q˚遻%ЍƐ^Ljԏr'>}eDɅ,@B^n1eK̜N} m"&lr~!_ǥk Q|ZЗ-lI GfD@)}ާ&Y(8O#DT 2at ]PoH(޼v8(q^Ps_4(9aőƣ)UMe*6P 2y_5 ;T{]}##3mP9-2eVUkh)~igUi"lЩ @haKTn9m4f9*so.j /%6"<T*LH?8L+=a[a э/Po䕆3#^MBnK ߋk^6:LwԶo7|(IK#7X@A^rK htQ0TSX`e8QzC-)EE3B{^(>[`jZ=_( Y G0lۚ>6N,nVEBFiYKzm,Ka_fiv>٠B30'.?$Q,(s,SW߳. :}FHo o4V:fܗic|ZRH֞ \j胂ye(1̯ 5x笔2LIl5iV෭*F0 VI:L?oYtl2l,F$T9*խx핗.:bH`}p$i<dq6_* %X*GNVz& 8NoŴ( Γc<8hgL_Nym K[4RqZ!p$S'TIkxxG}X=h`:ݜ&KAFֿ*55VL&oNJ\C>QAHn wSQ%ҳeF)2|r/y-B *;qEmrc,Wl^JԣJeX_i(=лM؏-JO){''{f$Z{8Y<7[Eۭ[{Ypfщk1qZcG1RP>R,iVڅ|7RNJx6kpgB_$&jS1}Ae]߀oJ\2ж+%, D $h*|tb0 ?RN4+K=䥹dtGjCWcLsz|tڹZ<&HGt:CBbUL،(Z:Z/lwnme=w4s^guU邷!4f™tsPKn_ij CN:g,ߔhQm3FǓږ5BE Vf|z]6J߷cˮ?-ûH/3N^qHzW}2[ |ؠYDJT 0몧28Xe/' rEcA:K{AE4iiwg^Μ[YBSeh7'KML+^۱wlkaTڭ;#K  qlp2,5mZkZ"^fAPwkխIu)إhϣ`EDQQ|&mtxhOG"( aGӥ/rUfLuמ.fzo+gȓKDOҷ: qcF?-ؖh#N`AůՐ?@%ם֋x ^XBg&e_1c +q)RbeK2SKMm\ޙوg\D2Gp2u p}';TWRkZ@#CN9̏iJA5wJ3zpr?*xOӰ`T̅T ]f+F|/{e&"l p &!0vX}̀?]}H3Y\CDM>A|Qh<4Y?mPi@SQw]uK@r'@;!FIxq'ܟ](LHxo)_68ͿgR  V l鼦/'%ѰEom$o'O3¿N >f-#Lː{#vPk;.d䶃+!QHj-(}T<80PP? #lA]s~rF$ 8zo>K7jU>2ûVVGLD1ݻ`j,TQ djVJ6fAcZ,g^ 7.Ĉ%u[?T^^ҁ*9i.= _V_H'dpĸ f3ķ-+9MS[tZv=I,םŊuv)uW,Sr1zNOoxVF=q`wwa{a?WDcZU[u0@Ԡ'Ћ.QYH~DC.;wJ,xf#_MS찺^|"%|i~]A(D:pZ23m9-6L؛ݞ 1%y%&]jկn,WOmdEc^t+nlL2R.!b*˞ZF ޒA`ȠCfiDt2; jk1V3sqqf 2zt5ꚲ̤4%v)J ßHqWƃ^9'M}KU- No,o0L}gVĉWw5X[6,d|ByPE$FKjr0ѓ_pTGtQvb(箇j9a0۪$xB[৘Wd \G ;"hU}Aj|w>-\#33g!K=m5Ԛ9eNn5y=/m_5Br2 W? /2e`FY4q&w*r>mId[~~a,- ӞajU6D3%7"JL} x2*h_*-Q 3S~WjlL-d!}-9|"Bqo<4VHNh_ {xu1SUPaۊl44_0[` {J_makgO*֟1ssܝAV..0-.\Uɋ%jrV^8@҂}c($؞t5*wgu(;Uqv>1Cpۉu?xi4YM4/8&٥itT~NCvI&[ͨpE4RN&7i H4dI~''MWqH&Yӷx8zBŠ+,1HńLNfC  YFƄ&8fTuئ`7ת;6 XLpL8kw\45,j[Q]w:X{911E'|YuX=cdΥH 5JO5B3#vHp~!qޖ>~ZF]hUNEL\ՒֿWћFdۓl! -}nv- g?kHpDsr)$vTClT=D2Eb eJ!X ^9>Î3 kuNAxd I7H3kMV!q[I2~Dبb/D$]3r$?D|*54< Rl5R/vl2]u(~& &^mj93,HOًC.+vUZS~/}o&}YHΫ,NLޜrcv6% 8 tNd_76qYMP~|]!-=0g#EsݓjYǓGww3'OS?]%AyD^v > +t &.CZ~(B ~gۈ2ixFd6o Y#M!V1s{VX%k6i3}X[~ ᛧ7ClV) l+mI hnT%Wgy! )P^*h[&pk=i8y;CߜENꢊ*%!B{}7n^]*Ɗ^Ȝv^YmK\[/;0HĿJV I\>HU="b@YNj[?!%yΧ+>Y)231 0 `sV4Jk}/gkx}y$b&BtUXBe æ+ֶB4-a`c?]z޻2UP%Kq!ncwoON `&u5f/Ph=oROHnڧRhPʀ_t\*Cԧx=a3 "XUA*hϞuu%^@mt>xB q$]Q}bZ<*Oqo`RZ.Ԩ/&)z{˦M?̜t3*8iMm^:NsK;ȟ',&R%+okb AM?Sby(7E.PӢL[Bm#>9 (91]Q  ?G^X¨jE^>s 9e"0_7W4)8K.B~k82wH8E y{pg߱T$> בĚ$[CW]a~Y=̥Nk:TvB*S8AOMf=;1~L 3B&pjuIS\Rպ i1FR9ךx $Q!g$xN7E8 q~X1yZOYl[_rۚA!AJ,H#ꄔLؤeuC}HlQsGwMMcz{P ,W̉rgz XYlICOKńasbj<<}"z 0nSڴidO#CƊ 7:Y|/sRb3OөĵF<-% W#J IR!(]Zn(vc^ '@xm PPI&/ߵR݂ SXn#ס:|;@:=8/UY +a@Zl^uUtky&iQE`wu7=fCEM%epO`]+ F-`]0k5,y}چDL84¤x,1Pu >/ЈZ&>sx;OT)!.YB+u/w)m FD^n =@9dWY\Z(p]6C\w'2/od~04>S`c[8s-TEDWH[[݋h-Q/l]wy7{أwyr.s-4`/'4e@FBL1 0Ne~=ߐ;95r'GVwJH=; '?VTr!+9ʷo[a;.4r 3̝ Q(KXC{Lx׊o烱VM7Po&}} fFge=_R(XNMz͏_6ti*qQWd4=Lwe?.6 l 7$ 7fmij*/_5;Uw5B$"{erIiY%SG-&b ŸXFbPw̮CNsǩpylqŜT& f^Դ@z))j0g`Գ[/QI}İԤD\{ҭ$0+ k~d?yZF2ܴ&8* m[ˎ gᭃ].SF"J՝ՕWϒx}{]Bx}6b$l<"V {`&v J@TL8>'Tw[vL 1fy+_գ"]-:(oĶWh￞MM*o_\?+Au~U%\4cL<IezgvdONG tl//uڃvPd6=mgLib*C5y$LO^kl6EM+6lRnkm\0o60?tDQWHM:HE꘣TeyE;&5ɎtYì>ɳ597^[fd63D=8]za>!2yif/TJ$=M4{m.A(ŖKu$*>kF>;MZσ]tlزTuѩlz7A;u.1>6q poyg|O`ђ~e@OK(bC=Lc(M.b@㍛ Ζ"6$k6˫]6Z5!) RU@3Hv:Й)߈2; 8 Nj8LUH\exTOْ#DThX/LNI;9B,>6;Y;. _|T;21= k9mlU5y,!>9RwN_+ qƄsf,'aJuZ6Ӡ6J @ϣϕY?-y=H@\ZQ0d#ue/~cӓ3|D Z4O[ H7=h _DO& 5 vhnoO3]zk-霪77P;ki*v0 ,=;$K.\h7肁VU^Za!j%+ p+]fZXcpu_BO}Zӌ(0 ?u'~.6|_0*Nsʒ8A"א,½JhR@=G|ǿmWm lt/P 704gQq z۸8Jo0B)Tl!q\zn P;؊s(Ha~Ō·!vvxȹqX}xhX6@AGÖ8DTiWɆ9za@Wh{p{l ۳ܸ.ui3l6 WRJ$'ю3J TQaN?WV0HYtY8s=.IFxrM#ë˴l)vUTj|>Lr(@{R"Ben_+u+5:lQ(r| 5mnŐUTծpkTlVFL5@bbYNK5fۡ _0ڧ3:NX?hLx\g ʎvAc4 si^BBin\{'6wj3>[P>?b%AZVI/oc>㇟9oB0_4aG@˂{7XEAQ@7sҐkI~t{YAO=]'OL9%ՅL)6:;yF7ZI*g[xBKw2$F+73ۃlk @wae :mI!׹aHOI,itnFta6 m02X ̛0~P.Cg0rǖ ~}cPG(N-QG)("L0p0w6'Tnyг/2,KJ*Q BٌM >TkZ'w~T"uI3 WQ6UCyKig7%fH9XHk3}r-[_Nӥ/bH{ 7j^*'hW!TMM{DU V #D\,sM* 1>sM3ݶ/e)sk}Nh(SC$Mqrc3mKrH噤fi⠀P B%5Tt# %Qtg0#aSH#S\Ij e~He;gGe׺@ϙX|n۸*m /%kr"HM]]Lǖ&FngM!#GIH mmƟzϏxmGJ4m'_ σVD+ @3(llJSRn#4Ev">z $wwD%Lщlú9-uav@5"5\٦o4ҫLϧPm0@#JK~JaDS!YuzpI(뿺Q1gpJ=y67EQS7E9WT;~N<O;X =>%UMA#,b\s4U[#4ˌ;ac^t̢W3-w|!T FCGߵm'dTL+l<ՒP>T@?9׊ F}eWH o<|' TpS1 . -9Bd}JJ(Et?Xkpi5檬#n2"dH 'a%)ܚgNLK'=,1ka23rUao=(8,Ė/HhNtκqbG06b;/F‘݅pfL. t1ܓAk~;^ʜgu#hhpeJB*$(U)=KR'@wҧB)szbo'\@Mwb~xHcn)BLYSGӼx#%E'Gj7Ly'?@vEz!+W@1>cjGV$r"P]2N؛iU,{EMV.Ku> ޫ3~):ƌ/maTʴћk[rqvyA~e\ƴ$Qi\0ݟᜌ.#6dqpTtl U7W|jyw*T3xSGA3.^`{Oȴ[h;4UIm Nڽ( 2! ɠuu1lsFY?&<{ 04x,_j*Aך^Oi>FT0(>Kw_ՠ\PXY4d@r%^љfϯ=R:ًo|B3ɰY*l"5R-C DD9̀9š5>veˆhwWdƴ/3Ya=! ^'E9ꎫ蟫$0 8Fk5,G?O43Cl !ur͋4rʴ*)Ut*~瘿G"䚸D0\~k0r'm¬MpD'܋@.4r0as$`= eKSOgRˁ{/ZrYJy΄]fk]6'.|),oȆHRЗ)\|n<ՐJP ZW4Oﳭ@|t}*b<@fsQл~{ɝq,I+b* Y+>Ye1/B]osp] ^JؐvAPht%YN0RJebFL&1" îB+B-ţOj]p,Eo&w[tsie =n0k'Cf+t_'he_о*)P2"\8p:HGv$VQ_5vqAק^(e;|! [73PvLJ9v]zCE,;2`Q]/&UPɼcZJ(7Vw(xGc_r#6h>?U%rGc&q΋ $eXFxދTn}XakIQ[Qj궚Nj^9XZksZHqTޕUfl}AOґ۫ۻ֖i,KK@7rg OQ{۪O?J,6Ks /}=T3y}l]hwqaJ̤41xGґhntn/29, 鹎Rfquʾ= |&ޜ4:u(Y;c0=v~.kS\(I="/1goFCn}g]`W}-{x}ԑRSE ӞK8oOm蕰 mLQ\߻d !޻D耮aK|-[/jMXӈkE}`dc'myOP-dP.#0WMa&G?_&zM?,HFôvḁ"酢Gw=*4*Z\ Y+t =yq"菋'_ #AR`ss Zp;c߿M);Py> }159&gnvS;ͿY(և# k;#{_D\rfaQ?ջD5c'`W8Z#]YH0f%ΎyBC{X 7L(L"IR3X#V\! 2i%(qѝ^``cTG"߱n.9%@ўIUڵ[j)uOKu8'R5#ކK1[K6!6L}tsp7d(rO,̗3o%+POx5~<7z?Ggҡ7^uiXS)6+tf501dz,y=D4#2w,qKX?G3+~aلEa 5-rx8(G7TkAҷ̎[;\V^m aR0os}!eЀ~-)#i(p"*g 7ЪD>K *~޽cB!}o@-f;f2Ԗ;kZbgqO֟MuC-2;e#Um@6l| $ \Hzd$;Nl?Dp VLr7M󠸷\ o$*%Y8E-!V.;e3Wئ)ԜSxzνQ7:rRչPJ)-5IL)_ O%?hGJHG+?] e$|!HW9K3Uj=(ڨղN~y:!bnŇq>xe̷ M:姅Qat*ܛzqo {^[qz{HEmY\S=74Õ?m(Jyb_ãK(Q1÷NRQQ(#bˏ$u;I~FrO&lIzp=݄VYov9>mЈy^dlULM+uУ4W{.FU9NuK,b"O{Erٮ>/qj "~9hו\|f6was)d'mT}KLj$Kn|" a% 﫦̭đq+]b!Mr'"Ԟl_l`Vհn 6RB ?U:Df^SNϿz}AVedЂ$ ?4j 3iIuW'knf7k1O_M=f>EI^%?WYd*K(Ŧ>mċV j9esI& &c '*e~yFNˢ."i3Qh;<=@qE?2o*Z,/o`z6%whʖGb CM\E.'{ObzfZ/W Gb_#w8 C?W2WDT3bQF]k2 f%Hd?9&"lcMCEPwE胍KDrp::k^H%2|tLeE{njYYCMX,3A;SS]5 ȳF|kP0]&K;?G0+Y䣱k;LeRچm5خ&T-AR 0`"fEF`m~",Rn߼a%f·eIX$9냏qp55g*˿y>)@vlk'V8D2_ zVjŠ[9`ԨW!5RfN! r -dzlCfq酘`2$復jvNv ]kQ_cGʐPˋ'}_gn*vÿ};! \Bfy+mUVL:7:P xiy?ܪ9: *tWm-9eáXF kޞ*_&~+Av'r5("]\2CjY,UlQ^T=+fpÇ4 ؟$(I#7wМcB`jzl$)02vXo25aۣF7ǣ,f1'Vr Υu~vv[t#<-᠉.>"q ҤAQNX"DVc,RJbTrKfmvqzkȹPcn͙}'yzIeua22r1<66O)l n%5%9 3O! HT:X1Ÿ鳁xA^H!4z>ԁ*5FPJ;۝H=w} uhȼ}g8Rn5XjnCdz`~A7i}iA g*Y ̊ՠ&oNdCoԷE!)TKDLzMSh7qOuɽjt;Fm̢޲L07ccDkYeHa00 u--%Q_>IſIId=YQ= uVLYern96v`^;nE&Y41p~QZ m?L<};.+ߋlCWKߏ$65Ϭ P~[H;T-3ϞZZ5ėwtb).a z yq'] 'd_NwGYG vaɌfU|0)[')6Bs8]a2份xe_ލpMw/һV=ޘ !6>_GdM΃! 7X MC*-Vͱ :-PȒʊ?<Al h26-v?\L;ަb`-M?ER 5NҎuYƲisNlIehCYT=?VfϊZ޺y8TR 6=z0ȄUlH}Y 7sFs,`;(%J,<{MbE+Izu:9(THik{cԼ5\uDPjZ*}$ѧV(>͉p S9P f~1{,A PCekH|ښrTv#59{bUIΗFkLsE4H`>PmBJ1jU[K::̀{)Qta+o8~98PcH~1ѳUbcCe.6:qܤy*5t0y`WɕQc{ejs\)JW ն4|t0%h L(A U -J"'njBc0vسF~}wbgZr@1!^*pCG uI5f.:ԭlY1.X|j[&0*ۥ :,>4zn,4宩nNW[4nLCGc>-&8\rzJR"QzH=Ӊ8)\ _^ƀ  c7eoBa. PP*ZZi.+M hc9|B Zj@a;P\]1wfE3)Yl0.A[.%0 5e*5g߉M;ΓN}yO굻qxD{QmgiNn:=WNt^2ui 4I佸+SvƱA,y+O?wUi>G?VDh2y'#eT($iS;#3.qyk=js2lb ԲQW3ϡ~ǓSP ^߹?dT@풿QD 苈d2x&=[f,#_Uթ9͔0jDjr`p 7cmocB_jA+Sk9;G4ش?HK"d3#I<HFȴɓDz SȄeYY,]%DXun%vSncn.2jUXX?aY_~hq_g84vmעm(2PMh \R'%&&yj;<{"84k~Xn a[޶d#+Wݩ0Pcm\.y ?\4 ޷ yA6jD5[Gb%:϶OzL[P <;3^gn4)"4xFK#/n+`t0ÆP/IEA|Εu~9]u.creYGzZpW g4N~b4.@]t)EUEl Oxa؄ۗMWҔ]Njoҩ,S 0G" 84X ȥ4wWK/,rٖG:Ff"1AOd[RE݊Õ1]1Nbl u&1A*I-]՛=ĥ-"%~'{ݜx;™]+L1;ؚ6<8Q,I⦄2 M~T{s=l10IT%M7H.Ai2mX88;$q3u_TQ[@&⦀.⿤kjDvrAf0Ҏc .8W7-NCS/@\n6_3^_B񐁃J|gG>CK0<^ʑ`ضɐٳ# ^ɇyDI;ӶoOJt ^:]UNd.ZͪK:hƄMoʘGZ:UJ}qzٽ™O[ q*QtT^J: |j(9E`gXK#AR;kD6fک,X&y2!hWE+&°5Poe>v_B>*yFbqg\H~FY f<92Zv>Ulx䑑 d ~]Gr]RymclF&K`;4A;mhuUuI^oȓBO'bwp%o{_vP%GVw) E/I*KW2wv L/.~ߞ2-M7ʀy&,PJ! -SC^( !BDSM.|j)M\Ekk̼ʖćH4~Ȏ'sY܅/CJY#sVFS_N08f׼0/mJ/i=7Kt MB:Ũ]-VT-wPf(fHEv'[P ĺ Lac9 "gi5tI0=b~>hU]¹k]z rv5#6? [(ގlp %r~mR Ns]G9GZV"#֌͐f W3K,!iYxu,ʕ` ͹u3sPsZ!,deHӠ }5.:RűIXL6q+CM1Lq[Nt(8DNEk aݝCK*v4P=)6}%7ŝ w'Sg x?/1!vzvw5v8r >Ezǃf't8Pj.:(d+h`fG9>u" Z6`ZC7Wn*ْE^Xz(Zj,Rw>GGa8Q(Qgˀhfr&3HJiWdˍM5@&Z4F Honօ xB=sNUn3ş<ţZ;j2NŤy0T |qD k-Y FE0WS{bmucL@ԋDY!%$]hR;7f41Fylج2hu=r-2[Q -[AUCmJXJ i# mH6d~K ێm C=t&?|N}|OJ?w,՛jz)oL + }fD`e~yv mW"5$ Z B $Dalii ]Gľɉ쿥Y5.D[i1h xjʿNMb9';zQl<-kM\j~Ox3S8)7\']V/q324KH7]](!2 fˣ3H~4ncdG+J5OҎȲlB QJ3 *3\yM*1c`ɇb]e$/Ч8r%]zE1;@AsTҫ4;ZR|?ߪ#I#?MUA& {h sAlۋSZPqL?|RR'x3X(-r6L/:y+^q:,W gdbDJ5a6yYb{<0lvt=잃dmeX=2l}nOnW~Zb}F"R6_7ڣM:}0("tzfdl? swif7"? ZT@}嵣*#'EBP±:;~=m],Ľ^eR^YAx4BlM`9f i<:yxf. BY3tޑcuC2mf` ?%yRU9TOl|X٢ h %'ܖle=dV+dk*%k{,Af<`[LJ_U`bd^hh6`-w;G{5t|!vk pEƎW"M/!f˃w  趄M>x5N$ Fs}d+ڬOIz ˜ා|Kn^9*r"BV9IkXAMjLI~,tIXF%$N~4L%f}H0#ʻhWy(c98;7Y˙,R򴷸Y ˉ+]dCOFx%V1gؐ\?h%)ZڧфwR)XC/FgJI'Z< !|@6]Ȓ*Ty%PAD}r(>@%T977g4JxbKt,8Ns̎g(Жwuw䩔HXrSv6ET`toiX:R܍hXZ/$^ueX)A^#IҫcfN6wDZ=X]3[RLxGbn[Vxѣ[.kpW0S~TöYz2sOuNUQU\"+_63AY[t].#1Ӡd~pTGnmz\Տb|6a֐`r 1 wZkg|b¦Uaߗ&颬n7bXV$./9J:O`ͺܪ{Hd:ci ( f#AAҌpwK/od1N;)7IE#(#|H.k SqR nSkvR,S,AT5-pScн!UKzJLf~C9, V*.3V83 F?yM)=İ~[qgQ EF(Jȳ@X!/4E:g95~ ̞Jkh!ROk;@1mWfߚ2 ܮ.zSa(A{#7fn^F=qT]z9sX)]!Ao e}dy2vCzciI V[XO! ZU\+ . 52D_JsBTr[ƛ7v?4/䲅s`fV=1]U)Vz‚BUߍ) }tUt>tdl|!Nj|I&',l$Ly22_n!O' S$VXQizoMR"7;-%[y6(hn;=)\s_$ $D7NdRk.:Wn/TA|k n[ve{KWZĄOʉKJIp}G Z~Ȧ.v2.vC}ECQ~C}{62ٰ+6)ƹ*RrŘPB8S gd ۢagYt/&,!̛]4=_l^h,=Hz [<>{!>8`^jK`p>1<\yCUN>!WBr_$ Ng[w4=adDR֠V%4Sk\X*S54#5Tbd=lb#$ m9,CL6a)Qy ):P+ݘ -K7}ྂ"浙+4 qutݼ_6`ŕu>vâĵrǷW2'aS+2 hq4Cz:wn)Hq&59%Nl]l%-ϸ Uuγו唞,R Ko [k)tBmC24><]d>B>&FRĐ>WS$Ԝ!Nx!CMÏ3r˂2ȦCeu&V]c$Jy2n̥"@UU2t2+FBl u*QLr*" z ,{'!CꐊT??cuY+fAeWC ' JA:^c/E,lחD2f9,.~xڦ,X/<"j"XGE L@j#9L"Eۢj$1 Q?ȪOLČJߣ0tfIB/MYc#EdOV|BX;;KmQxs(ׯ3q+u@،h?S\?e Hn9< ż/Sd * Z9e\:}ðVuVCL!*2bCvtl%A%Q:y;1 ;̆*F9q|b9|n*48e #RaKQ:9t e`] 4N۾_Y;xF=x>"X!U:Tseo, 1uL"7qZ<`L'sc&8*%8k]!c5~#IE5d Q=3 2d+qN$P3z?!3ڰН[NcO1&7*uj< [3=Q.G6Usn DG c#h,}T"%/T/ ~oBeUhG8/ѕN| Y>̲H"n ]u)qCCВ1D^]_ҵ\1Mo+S's tIY@8G_2χN>*{@^ECoX?Λ$9cךGޗV|K ҋAF3? nUYS, LqP?Bgxv:Fp 6!R-xӊ58M:˾F:q|4רzId9qxUhegĄ'g?0̝]7 QO Gn-k$ERF_aٲl;X.5AnjD\b)O'$b=-԰Fd(ZotD|wLPgUw&kI88_MALg'𱿺Ks~;}Adщfx  +_Xڳr7K|/0!{qWwAXw5w6{zs}'J2Q3-`7m'کʹJ"GqyΩ=3.,]Ym2V*&ZacpWsbm̹k_e4G+׾ y5c&,S~ޱ@G~Me6rӔfW2L=fƥo.~M<+PpoT7Q4Q(SRױh Pxe7HN[.)s k@Ev MS6\߯o% ^ïbu]JF%w0~0it|c5S@>CǼ!)ZQt`95)lד(3s -|f_<# /,q {g&I$]U`~=I)_lY+6 jMGS9+1Mo@ƃ^vLC ,J$on</`䌹㽚`r< dE%>2+ȝDو 큯o7CiQmtvzQypP9,Pd<-ήjS,II}\2~(`%L2d13i̶\3%7O e!X G ԡ40{=JE3~fք*V=Cr0FԂ=Fl]qg9&tM aO&\jFMEŬBxξss `ï@E*ۀ!HޡseUtA ǡ<7UEp( hASns ր| Z JX8>AoGq3K_:@["xȯ7Qh:I*n Bb*N[T̶Rp> dS o{BaoaCm9w*暕V>׹t:/ ľYtg(Lhsa7aiN." :5}y Jkk_#U"8}Ҷz]" {ҿaGuLogNq+N1"*F[fD8#Y "${ݳFU&k QN$dg>fLE$o#7&,U #K_L DLjG2vȆIj@hf ,8UxW:+D>\uiοSϚmݎe3 $7 *)2Y{l JB=cO ~a2N 0ٛfX}U\ Ja? VYr!T/,h't( H2k\\ py`'NVSIҭz 5Fu*WiVƒty `e p@Hd@cNT -'yR ~19{KUR;dO.mr )M_09!oͦS =26Ce[Yտa*-Ԇ.urTx2|sO5D$'"A5@PsFf^RF7C*\9~5=yUj\$K; -2ZJUqR54h5$Ãuq5:umQuLe~/tmxj5GYC_g9C߯2 s?d18C/ɵ)xt؃3 l/Z4CΪli'~3}CHHܙIs(e)%Enn k4勅 Cx{8ԲK K*'"]Ŋu*tzQ:I>7eX@[–U"Dӫ 'E'(pn41cf6 T /8;\ƺ \xݗ )'=w0("vfzmY;#<2Tpmi(@T._\1s2߷y\ϝ Rܓ/7;ݫB /͗T PT,Ed9ĭ6ʄ:unPպF.#&Pg08f-R?y,=pSw@H(Dѽ5V>1IhbVt|4w CUi/4g n}=$U~l?K`6ݴȢ7DS,P? ڻeWt;B;n$aȰF w$9 .fݙz*p"a5 (bJnaWmj|~0 7@zƐSAVH /\mB1 YD\X8oTp46?8Gjt\dd1mS wt*,L^49!L(g09uԼ~HE@XBh5q Gc@Tu+DNfT+ڬɢmf)Iג0 6kJ2gtD_B4~f ]@/CߔTd!bOfk\:Yb}_{M]!<ˆaCg A`Z8N[۔K2#ay` Y6%'Td*QƊ,*:b+Wr&΀߱C>K!2rg-+qMaucZ^, C¢HyQ|;IM X/1@Ï(__p'C` 'b pA[+J \[j<Ъ*` Kq0X8ՠqD:KEEZ`cǺp>b>"KA+@d)>5zkñѥ{bz!Bt1=<ӊJG*UB-DxH$Ж\Aۉ;0;MVմC5?s}!c a2RU>LᅏIO?󱤀#^PMN|S "2j*Sz|3fgJDŠ ÑN bm;k f4zac9 --YS%v =290ROJÝb1_]8 X[FjG@FiV3.OxtpIGNRY@C+"*Dapu^1l FiHlkd)poH-a^_njT YAiϘ2{wZԌ՛C e8Q=kx*s$ޥ;ryq`& ؟HrB Td`|=t@)&?jŶy wML!h~&Hv>mݽ|ńN|`wcwhDhur"͐fOm^ILEt [HщpyJ 7:g\4GFp!wERWfM~n֌PXtANl>ņpVlLx.@n툕MInhxA}n*)4 0]%2E{!+{y؋ވ07@MgA{?`Gy]=N@ySKó, = I}źw%yx/D'F^OjNkM{GĢ%VRkBL#B g NKq>B1гLbgtQpR\5O RI^44Lo>+qˆ7> 7]UighŀF{>  8+(y. ,:$ʞ =bZ}v>8p$@ { 9#t#Ft%g7gTN,C^2J:n2 p]o]Q+}0Si8[w8su:3^Ls=B.K*m~E &S\kb͕GȣȰ7byq92@;{An_-qzwz"-,s|V ѯfG;}pM1Bz!6-zaښc<QX-mU0>{ZٔC\SjH!.?dG#:#s8.'I+r-*| [?xy+b͋[KmrьDB5R1g(1Y\A6)o26WS W+&>կéE/ d&>l o24v7X1;K/j[Al.pn n} $G*^[ WWU FSQAӱs_bɶ{$XQp+\8"EKDbn0cwx)R8SS?tE;w%zI>R^IQ Ḧ<{yT-M }VHq7Aƨd M4kVE|3[;#^?PDLq@"aX4=s[BV dytM$fwSVwF}fb4Iq%<- Н۪H<V{>lz{( u:at\ԴKƒ \}±F A@$$e(: <+3sײkR1)F(MR%_X+AlPN v6YלN֖~^U)z}gy[t2F_tBW~wWLf }^/d"e݇BV†#9C~zzBշ8L*A^T;TGs^yz7#&bC喁5K V8 qvI<5]hk p{E 8 =c0.pְ`M`BxB4j`] 7 U4mQö1Ġ_L_fh[PxAǝ]ϮlbP`$+9]OM3Ɍ"pPPEy2"1dܺΘe:]5{ R$_z@g:Wθf bŴ1/:p-ۺ]RMIVC@qh  z鷈 J>*EjI6 DTtK@[>/߉ r\#l] S.0~*" x@CvBz][_@41 k*QC'e9_Q#d#EW=<%qH:QWҖ+Ӹ8l*%7FpדKܹA7yH@6&@ȢZ2нUǎÃW#̝yೃnM\'A4"x0@[R3C=F̯ԑຍGQ؆jPǧ!ɏvh-<宨nX85MեtJZ&ZJ&(g017i$5`qk{8xF7H|?|Dʾ[2w >ҫ^x(nc'ؓ dkTOV9c"nɷl i#Ո7-p(+/Zg=Z(E/9o[=ܧ'7T~gW,2r*S:gG_̠/~@x=tc2mڑ`iLn9܅>:Gj3(􈮼 * jX>f9\ + vQNVF}.; Ӻ9DѧK+_' R &FrR|r&GH麳5kgg^aޞMU̶Lf_h36*TH_k\k,w6GX;Dj2m1VgI;A e @?li.v7ֲBIr=/ouaf]fib8uӾ,"YnAjRVb$c< Cíg:X}z\?p~%7_Xr uQ!7`b_&9ʪL+b2%%kd}ۙ62l3^hVZ*$_}]ZpϮɢwKz KN5\>[3JeY4lNvzۯ _Tȡfd VK<%;\6j&{DU9` $#E&\7I4+c)nm(,}[._(1Df«C.L5ClKp[~'ܼO71H!,c;cwʋCm !|Lr گaGS̔P~p6w ]o{B˚~K'@0Rei^u^U…y\hOk sx/SV~1~: p-a̴e_`[YoPOYPh}[ =~HU{L}7C[ ?ϴZ6kNG~ԡ_Bm U]u Pgjf #|&3Fs+˰O$YMD\>U6]dwV&EN99!c!vׄʑ29ߛd0;D<޹vŐ$KA3[k~ A,@wځ퍓nET7rc o94єB a$@Tf7ͶH1K+:W"g ;a(}KԮe8ʳ2-ÔʼRPMOn3M̅ wv/:!``[Ȑj9C[-,gE6L9sGH 3Na0Ma;Q庚7D [ QL+d8JU7r.oا@IۖRP}ڗӥ"P ݵ1mgR#Yp![S ;?+} RM2?ʛ-6OjeW%CI ц*&|ߛI aEY|}+8E&[|c,H҄ :tu(p}<ɼa^8Z^%b [bKViKXt9YV+01["Y'OukD`[ u@t'rOp_Bi Z#㦜?^-]@IlW.DUPdUA(f@E@K#T| 3|Q9 (h$O\Q;%}> t|"P&I)¡&-14@N(~{M491<r-R@j}u&SCa ד8=jEݥGE@,fDRj7ѷܞ Fο Kns!: ,4JݶUG(YV|(0׀mGhBw;+^ sT24K͡A(}R/+1SjWߤoZ^ܐ ͆Umj! >pƛc$~M-RvD"uٍ2J+xvu~CGf^L,x 0ṷt߼eIo N:w(Cta7/^!䆏@U+qEPZ$7Ꮍ%+)'Uɸ 5&(Rnµ`&?DޣMHFYGjM2]k&@ %Oٝ ;tH/6jZV<0V?S#H׬[-HMi|)kE*H-@~lɉɅ'h+s I/. a]2iAj`d/<?-IPTӚQ,_yi[rљ}%֙Xab{S,nƣ׎e!<$O w>r,ܪhD =XP"[b͸LW{I[SUֹlDMXn6&:Crajue H9̻TCNw+c:#f|WEiLM(#Oz"nڒ.Dz)o\<# !PN e\ՆM#f(%y W(glZ+76Bt\PJT}Xh Pù8 }$[G:\)'Viui4>4atuHՆr4;2u ;=ur s^AYB &|\woÕOꩌu|'GrUL}w*bs3Ҟ1!ٴ))*e,/`(ֻ4DudjSӬ{q6΄䪆jvgNԬZu<@4=J/ಷY'w"Zɢ^,aQ>i c3$q9DcxhMc7-8UlN4H#I WtO{jhl,i4Ә%)E["&/JZ Po|AG;b@ /.93XD~y=g%xw8iIY_ 1[Z̡;ȳ np[@6ȁ 3k\3G<CCa^P$/\(=7tƏҤJ́X@;+.a-5c`Yd֭mpg:&k2% թcL. T{Dޢ2v(ll$;'Q B7-TSrsՔbQɆרxkl*JUyJ@m=AeW6I\h70 kWַtH:hA s$;I5%Pe K>c)J&;iaQ3&,RHFaCkwW-{L@Xg(puDGϥ~w'Q\#s~RuJ!y`X,G:ݬAH@3(ܢ6"SH{4İa@_0t3*HIny&;Ct0n ЩO֕T<# fQ +K(Mό׈vǑ[^zgzOC 93f\uTy !Hj> #lJ~˱ha7iV͒,WF}wXO~vbUnک߶5~OBoOk5Io\վIْgS@)3TXMW_SokI nJ;|p*YpI>S6PFOZ ;"D4f^L1 1 đqL HC sTj*9A]q>x~?НiǪ/WCtb dAصW;6, ĕ`.Pk4r2gͤd݀y ?pZPa\d5TC0 qi0,4w*YٖmF0&م>RMVaN]7P1}M%EjyǏ!R5b ("TI$s&t3)8VA(7"a ͂_m#o7 *i Uׇ Vs$%؉zt6SIhrz^HGԵY*` W&X N#/ sS/zx$BN V^W%?rdeVLMh_%cttgPR:dB-/t#77dnmCm!Z VD^F̼T^9y8aQ/(JFC x!PgӠ:ՍBZs<]syq}ۏtT@vJ0A4 d_!W[8e͇{e;qװ4\?Rt2ۗ <ɀp%no΍&O2{,W?ؓ}8kK#/UGmGe Ȏ _-y}mQ2^qrvn$Bg2 0RPununoƾK{9•i,Ng5%{lN(eׅȿՄ"}k#Umm^o.8B*Ud2mTXS/^4`>MUSg,sp}a;|iֲurͱ#pho1 9`@Ҽrd6ܜ)Cl")Rb ~(q4] <O+X p@/֘c}Dy&: (AEԈA3-Sz2S"a]? eb=s f#DkMQ68=5s_}O'#+"\W'kyW v@/{tw-'FfO  ? :lFF7*q{D2v6;s$zOz!k^? E7M{nI+N2N\5;O9 ̺f v !}J}(j_7lE:~W~'8Rh} Ys8Ϯ hUiKq`*I]I3+tX:7zGz?LIY>{[e8T4#/`ZFF34uv$2V{II3tm ]wt'xO)R}J}&-+-f--`J %MѬ6zJf_;wحcIQ1\2Y"YA^l%HBpfd1̪T-*r ;$AyRۇ&f}*_5:j§Aj,ՙE/e+ËCFna)V6 _&O[}jVPJ:Ż2! }j 0)\^U4̠FI Rq 5"N^~.Iu)X 0<@Q!dn8a#r0(ڦ4Te.%V +: <-m1BO*Bߤb@b=jRbM9^gF=S^>~6}$'/`TqsRRjܘ_ ֈr[൶L fE*# (Ăl2 &*`E+M&5{${ʶ&ZF `> >H?a^#?v4D!GnO B9ו) |DK9k=B̡qM-K#5ħ "fA[KQq#auZHD}J$$3=hDDpq- i64(>PGeI:z nPӓf$0Pe>g}„_}~tZK6Q]j,j)Re4b$4GwQkBF|9H }X=V5.cND}"b# ΃#F/x{Ê i$!zJ&T~7xG~drs\b?c @|- ˲G '+#CPU%zޞ8_{We7gh^43q,,cO, 7Q%F{Q@K,G:_5Xc_-mh rޯ'+q|,G0n jF"XD:w{]UAn^\D3K9;,A$98,OyYK ?b,]u I4*x<~|d]I~=B:E'2azwD!Q<Β"1׎DԘF.3A"I(4]g^Lb倻K$osyOm(!=A{ e&o-CH_bcq>I]EEf`U#\UD^ϤU] f.  .ǭƌ !ur3!|}I›=rg8{{@0z%.=~hj L% ^wf|Ng(_- ]5@7lhذ+Wìl|;ŀR݆ߗY`X"rK9UlDC$¼{lO?F`Hn9 39"7Wr]k;UhH7%xr/Yk?8Ga~(1?X|ҁPrڇ2(gv@)"׭gӲWY`k ӭbQ PSJ¦Rkw7\󔙺|#t5)p.}E$,O j贈NF7oYG3'wa +N"b7K]Od br k˔aKZY^!%: ٕ|(~&ƭ~}5+GsqPtR ghCabB9a/ϒwv55J؏Fms37r ">"y]Jx fŹ[҆!yҫ&`0Qz8^-u|)ı 0OkJ#\}'ݒy6|08U>^ \<@ !|P#$a0ޘ ԭY#F,}=Vpr/%`ڂijmRZwˉoBbtV)ޏwnn^Vgۦr{LWuvB׊Μi +`q'HLN<(i 7؆w"9G%pa輦'<;/)LЫ1Eb"ՙqd w`k ڙOlD۶ϷWx8`V}tAtԟ Xln[T f*$e=mYhNu&,ٟ38 lc` 9Cot7 Ay mbR\s"j/ $ [RVgM{[^pu?AWG+\( \5|FȂnK Sb{9Hkޡ'8p0HWW'Nra~[EPUKɓI%Φ@8ffG Kq3I-1Q뿾mwZjNvŕV1ݒ*}UVsTvFQt@B\^u5k& x}&*fƹ{F\ULcPl{PʝM(2R?5ϩye+.S`wǎ'۳ <HY#N =/ F}S Nkwi! ALN=m:-SϢ('ʡI#->84_V#z1h6Fe[.0$b,Y˒Jތ~.u`oo!CQIo1>W8=/8@ՎG0x`9O'7%@ F4n!ѠdZ{& ie%5KBc֑S4Bض%F@cSA/:(1bэ|Lgڗius}K#pǠ4>YK'Tޝ55pNpFG !B@T @<Հ>ߠ CX9!k6a l ]]"آ+lq>H?-0r^7䦈F!Fuar u= tֹ7t3mK0߱#즁i^Ǎ!߀%N%#3B+f&Z4eQT?Sd| WO*&~"o/5f@KE2B-l4t2gu&}yUSƕ?[4gwj 3y^B3}F- \=n]dڢ9D *qWT E0Mr3v~i69K[Egt#մ+75Ξu>ZMD%vk釓Y=,Uނ]7<źh-LX풷JaƬa OZwU*6X/14KaV f> plMjd=lnF!-z,j7'ʽ3E~=e;I{w[f"xUUXGH[@@_fV\RsVNPō`Y hM5>-׳#>%/h2Aʂ S9MeҙȈ3vZj2J&$2V'pˊ0W QZ&yv+}uZ\EVs,]y<-T Gϐl(LLw]iOH&oCp%q3.|J D5o&d[d+ݤrc##ǂc򮭁I3S{&`5£ d?-2gzPL{(ӮנW];d[I+j/*[8:[4 =3) b^ְD(*,HZbRܶ݅pZrG6W]5 `wzQ`FOgz*z kQVl\} v CZU&CDq0¶) ƯKD=]Z?/{g:}ᠧ8M-24L`(#2Qia};3~axvV@{t^y!?XU˖XaXqgQ.]d3bpgK2Q͍_ >|"qh `{'3"~#W\J)LRB(#7?F;xT~- zJv\%缒ixJcB, 9 c[mH286>}x rK<B@rRXUTs kOʹU+vw=6 Z]so ZxǨaVߤ4oD_,%jWy1+37Wڜ[a׉aBLOpoc1ݖ icg)Xtd%*I lT!iLVk~Zf?]O˂ 44zO *S䎆 uzg=;p WY*V0X;mj ]۷z< H"߫P^[\҈k#eԽICڝs,{R<0ܷ%UH)%tU8 6;G ù>gq77"QCh1feDThq{7U&ɘ9rr&'&"O<tJ}2M`X5h>(bw|fĀ忎&2wҡц^ցDaX:%-EVA>S |Uvk嚝lg3o&rc:"I[&/ w V5/oEt`2/}Ω?6X> /% ƺzQ+Ii].LT\#Ā9T xZ`FL[(ŀABG5OQmFks/n{r*R0vڳ/yӽȎV,wF?͘7ߔzv ȨZYxɥ!Sb]-e0HX6;.{oSu]9H;[Qx%gZtF-e LQap^;C 5{2&]+PqQkzq/vO~V_HA]f.GMN]muCsT>WQŁ 6SیF,asKXz k ԍz>OB҆^>P؈ᠿQSPq{WVЮ^HH?I_;(hh䥻nbzu-i;tM3ޜ-y@%slB ʁæ#nwK=P|iD/ɎL )NŸ/jA'e36B`NGQrH5;臰!ד_ e0"Fxc0 kE?J΅#HXkR,eKM Kb}&7NJb"4T1P"ɭ))KyG+'Y0hx,@ۋiդ"DZˠ~PTcyJ0Ǘ"? JC#wEr65_E脋|,kZiVLML~߆c8ݚ%{G؟&b!Ld?1&Ϟ\r;6hgi˻c8#'e:|F#` #9P!*?2 L/5wE~)q2|Pq%`e(N$eq׎u?>qz0\8dH0+zzW.GL߿1?Iv7iU0 xtcŨ Fwuʊ +ZS٢Mj_L0LFP2G]Zx_ŀ}2PTBz43Rlm@K+^@5l ^"'q/EY-&-^&dk Fu-6j17F.14 (Z &A}RJVv$ a)Q] y꜐r 9twv Qt0|Ytn]v' F38\D$̃p Z@mݪ:2DκNZ V˗.;=u͒!JQ+5WH;6*c_#h3<$Zԅ*S5*00c\$ә9 4a`;zCi@ٰ1S)?wBDD+ M>hp՝<|^373N|#hIJv7)"@E@O7^DEB٢p{t lH/,=b+_$>vTx )`hf$Iy1ٿ8!HbSxK!絕:oXʉw݄G S"BCkd{pMyƠ c/ѹI R s1q]WfU|[m-]n)FdSq"ﭴfgn_]sƁv0oǴLO-V4(Mʻ34u/S))X0\)?dILOU_Z=k#JDDZh8T݉&l^Wt#K$n:YA_( m$k9Շ㺉zHQpn6ꃄu*dtz$,Xo"P m;-A'rT ]W w ǜ1r8I1V{Վ|P(Vƒ<?kq츂6 jmfI+_s to 8sKݕ/_#-qc)cXSaoZ0tF& v:` بdm<^M㽹Q=$V3\'|R3љ+fGCdHaǰXw)QHWG BGfE&g$UkM=$ډ{-[]G&S>>/!99ko`Ɖs>DUi9 G33,$ʚVwYtY[b}>*ě{KrЩ) ջm6} \t9Vd+,IQo驀U>w2`FLdx)w+4nr1?+S{jmABs\79&j\\]uuyzrykd{? BxT Mtsu)iX:ja3ڹ6%tT(4~_$Z{Gπ$So5U LaPfp̌IIԡ؎TǞgYv`ܾ ~ǓP`j=\/QkȄFro|?ͽsT;{Cnx zO[%}yrphMJZ [˾.:D`>bPŜx7Әn'm6V(6ۍ͖G? i\,o0s5pޝT?mDkWn1I0J`=85m_ic[,dYiEN5 ⰲ*Y%NX);hHgSd乿lU^mKi E 棡 3.OZK1XnQybH*3$؍ =ܱ/ڡuee.h \?&pH4dl  bcFO '3OA&I|~w]]/4Ao(!N )B*FntRQZ V!@F9O"< DYԶKc[t#Y߮x"ɲX=ND䝈=i/AZ%.;}H-]ms ))i(?Bf]5-ʩ /vslF;CQǗ{]Ya\p\ͽr E{oԷg ib7F[wr76~uV2^mfη9awKX)vM"BTiMNt,K:Z8C<&7$  ZVghr < 0Do$QJ~EJY|2'f'O% R08ֽ֘K뛆yYqӪ 0#G?Ќ3yI:s^senNrh7Hă#0 eb DY@ՋבY-IkHz.9益~~ur \ KjQʑ3ּ\^eT;sPRL LA!W seڙ^K<昁2AIhPh r7afjOӸkJ-nK+Α*\>/o Y~OdDH5YΙzU8LUOdd-w'}Fm@Cq{ tj/bA%'6:e >"mBX&jA%&tm oio#'ˀ7KJ]Vca"@-2E MĩetZ{zy4~^\_}  QW'ij30G^!-'3ehrb=+:dz* OwBf*v1m(^7e3~968Џeeb7ЌG$]`J B7B'ԖZ9cj"ӜXw(>Bp[i&G x&U0F3LxH`}k>>T "lڻ܆ eew ^ƖR=z#ŨP]p 坾j8J߀u쮞e_(}1&d:8GfNlQ0v\}6L&o^;bi5mKdQREsJ4ofl!PuAB&Բ#)SQS{RF_%V;pV=.nL h6tZB}B}e)Q1oFfmTM3 Lڌch389F%_ "J8Ɖڡ!'<`" SegtZG0gSٹ @nkRFGg/?<2-JxC2~EVI2 u"F_^_?~)wPtc->)c-?,Y@`YLx] y/5*OׂYPZQ^B(წ6VOff{E7q/fF~w\VgPً ktjzm+M^ۯ3ݘvrLkՍU2EEܑCZˣϢϥ…cϯ|2Y-JBk{ވU AcjsE@wz =9ܫ)':{^M"nzh9}bfQFdž ؉ N~ m߬%?0<_; [5JPlhVb )1l];F*̀=xkt $WX5V-Vy.x3/j;q{݌^X%̓t\*8/UͶŊ'XfhId*˹:〈\+*V{HI Pd[ {$,2ZbGB$"_mMO1:qQ~ӆp.HKe3}=uQG-gnQ9_E*TanČҩX' 6rRٮ`cA6JV\O54kzJB /H>BK6#W &q$zGy`>u9!$cfezx`F[W^.Wsj*MNi[\PCHc!@Z: ZWK?'&EH<KcɽkɃWFre8xENuFOz(?dyq.vd~ mfWi-A1&UN/Xwlca| ,/4[8TɎgT);`2 aўX$*x:Ú =MI*>,;c%tA y&]_JtOHZxbLSvý]f:d]"d{23l{űaQIIL"ذN`Dns\t ncc >Ig+o:$ RO-MK~7 ?ENDJAYVmXYYz"7cQ[DW@Q1i, 'wp4P=-g!Bw7㆐oi p'Y x\u5s 僧XZeAˤ0 v {ߌ:2hdWmY8^1By|dA)Y{*ދ.-"MS4a% sX!d7+41O?{ͭhBs?%up(jXJ)! `{n3|h¯47OA N0erPr3n7:G!~@jV,1  Z{~ YЉaBBX v UeM6nS:cE靼k"4$i_J7?y8wdi櫐vA$1FΎa6s @cBeŻ/8]a=ZcVzS'?`![ts=4,FBn)x|zAhx7!z@ѐa)r%؋o#9QKm2ڱ˦ +h~ z#LtgbijæW.Bw)4uh-8ON`v$-.կ^NApα$IxfƗViד V%m]sA1/v9ysY"&.j[X_auD+hdW͊R9sO kLhpdĄZ3&WN~<"1X#z&3>MgWILȉ%,_pzqYY? !\V3"%2hCR$/}#@&Դ^usn P'7uދggErA,a4|Wc!-X1)I.S#`"LB{'J@YIňGLa8't}_LdT_N.<8_]1W"MXvuE -N]u`-SMʭ1WSky wrTztFOIDVM|1'pF8Umٿd WObNF(i p Sh_[\!:'.{C jh-ڱxVk^L@YҔ`R8j@HHj"Y`5mz#l"Jc+b B)tף-EkomfWU,y2 (|VXrW|֛iRҶfC.oa@')bdw)PGJT;Odӹ ` 95ǸR&o5"?Ox3jW^WHٛz@;15 YO/PNyAWr`w,:#b |'0Jj,3W֧*9 Xg!%0 'Xx]SG#3,wir T&kf H| {4ۢcISU70^sְ)aH证C.v=s3"" mI)>)HJw{,?sew֬?4(qź(OF_ G3ο%qgQ3y~B_1$3K5^rmF(ʩ&䞜jp h-!GX#0:<Ġ9kq} P{cy48BW@ƎcW&ZLlbƠ M;\,M!62n>u|2#S}\M'}U`Dˣ77ms sw *MTer ] m }1nvۏ_wij[V>+nk=Ewia>B.4uok2t]0^Uj$I&+^î@_c4 'grNen gHw涭rucJ4O -yɍ?A( c-/vϾ~*a?")Dڵ!SLNU _y1/]7Ͽ3KAyBBу)6Z!떈cw%r1jLF{ǽNFYMcϮÿm9zYq4wS6qUMxCS߶> ;Ƴ{%U8 19 *3ez(!嶏k ̷:٢zF/N?aĚ=i65*v69:4qx,6K9hZ HoG`nr8U!}Mn>ݘ$nDGBmCNċ 3Y{vkr|ճR%NcNo{ؼz~tPj%2Q}(W[Arjm͢3hHPy jVrbwEPVtf(z۔S/p%Jb ''AL5c!8+]@ Svh-k)Ƞ*Q^bBS[#wݳRC& ^O _]4 )9ZףtU*ix]IdP~IE`gBxGv1]د(~r2rGd"pn Xܜt^-'Sn{6-fmjxP2V% Zu`&VΚ!R?r<.:Fj>VM]ڝ)Lt0wDuޝSo=ug?(N`?M`Tl \}n8ޠNR{)]"d[/zALBNU Bk%h:kI%C bMRųEv<-z\ucBâ|.U` ٠W% 글R !¼ޢ|mRpѰ`Vd1!r -L]SMai{I{?ئ֪|d*& ^j ōrĚY@֍r5#==LZ_R؛R<&6}ܡ5B\EFJ'Y_Կafl'unhZOJy] oNi@5X'dݿ7#~'߂On%ֳ,-/ Gb5^1?9;<5.|k Mk)8:LKoiVM.Rz5| {Rʓ{-b"$v> ӂyǮs}$ΠM*O1uWRoߐ@Zz*_@4q,@٭ޖr/ƒH%}Y gAnSorbwv1v87`>ES7 Ρb@]h,U-,~rslb(+M(UnPU[,H ՂRjMkz̲(ƝFuK¸/́k7:޳5 EvA% Mip=披^3㊵1.yqs1{ߐ=谾6O6=K 'lCV`jq:pU#j;o2JwhETu%i9ݬ7 2wDIfcZ /iXR&&&΅¾X d=ᩫEIo +TtLрVCfOaOPυ(!ScQm tnSŽݻ(N< Eћ෸;7'P@3Sl=^}?{^\ȥhNveGx4,r-e.o{sayoЂ؊o ѱ ln@Z$-[9 wf-[%n쟒y-N*QѕZVop+{r}}y 遲Ζf "Xu4ϥn}Ds=:D%8G3~|_RN眲YZ ϗP 6+;,s(j26uI B18hK&I0"cGM"(k=ɥ6ktr`zm5MRaXw6ŎzemQ0c_']!H)P& v}[R %wCVIl r/ٙQ1̙@W#o `M-я#V tG8U N٢Q81M݄2CVXc""sìk#,ƀ%H3#5_& SRf!w'[s{JxѢ\%5{,ԵWT1 辰'##c1R#:[AP9'jkmЭZ *5ҳ\MX;ݐϫwZ+(# AOݭ>j( '&+s'@pԁr'tZz/*YVi=#'t24mQ$vm*K7HdKe˗.kgl>_Y } $EiiCY1Ob\hxub Uvgt>9$!@gmǀI gL(%S/~dsսm7w?7`9hs; p g B.1tI="xR5a!K6c rT nsr׾#l = Usݗz85hI1|+a !imy]"';a9`,y9q)63Z\pRԔ veCVn| uŽ^R<ejX(yڪ嘅S8 $èk@HlB\TD#R~, =|ɖ}x؁nX$#RQ a1ޮE:ɍKPU??5in8;@f *l؞T\؁Յ̅YWr4b'M aR"8΅5]έԪV]0A!)|py(Cm-RMrG)J=e/KIC(J{ =he (nf;̀yND߉^~Ln*,ZQ{Rk,$uof󬫌k x^m! 20SLL5~1JEsc2ތݡ#J4˪PX"h.Rx* @%2VanDPyYB@/t] CIfa\ϻ(α0+X8Zqv }ӜT*@)(W0Oj.%CZ?_7wɊ4Ô7,7 K }WIa>b\>?v7_268N8$͸hf0&}jyiXbɂ,*jtCOi\qOc; i&cBŶepLAF{kw!8E)/ vWf bA^?}O83?Dfr~n;{~?{1_ yÎw[q領 )*A.ɽU" V{SXjN_*p"[C΋ E3QuE{ 2˓iB  =05CJd!auBդCw2(38nR6w15F}uG 30homRQ "gR~!`\CA9 LFo#FZ1x3j,fsg_X v l3xGG% mO%[7^I23j~rS{mbb"0#z HK]l'q7oRMήNͨ+W$YU>TY &vTh͒)2 Yen !T]TӠx`$j'G];^5xmuk}>4FChyk {G`<%pGQMr+'\Ty1BSf`@d6ӑ@GB^WkPXJER-:8CU}N'30%u^Z-ժRLE& ,DOoP7E mkWdzG䙬̎n"V-og*rSK!dk"eT^@pΪ4ܽ #B l<V7w1%_2ܱ%e5WWa*А<3ZN=*?=5rmSNQ㆔Zs* k2Q)@0V;OBnl2]R֣/% %eAC74]A K^~Rffylme 0-Bd@(Ơ9F8.¤ = *Kc7™>^n_tl-u+$ TdJARa"V sߋ1rNt'b[Ù[eiKFpJtZ:6sYIp+;:MLKCøY6FTΐJ {h~Q@SG5/ʜcl.}REkgj|X$CjZ!齊bիG@n1%vE4JE˼7$fZU ϐb6;L=XV0tӼ$97MX1i3܃+HrK8zyӧh}Jxrۍ[[FyRԜx181FO}hz*Tk~)SNMpQW!KĪ `=d(hQIP5} t`q"*wϧ/!a(\U8- n?JmJUCX/ABI[Kq n^ףtYGMNy'%Y9WK&'l'\2m&MypmwKJ^v-c NQEKCZ& US`௓JEkP5G;^uLvQ5遖ql,?E@s3/?f#O!s uV{# 1,P̾aIJ’Cot}^+jO [933}7C̝] )@Mی[XXD=Vd % u_6}! $#fԩv u v3r4MU/4l$O-`mq<$W'+Nn|wؤa`5?No&n`ucJm Ɲ5wZ =0MТY+lOGGZLn3ux]LkH ~Ҽ?+%쐏[Ѽ}4`o"VWiYaF0t#L^ ]qħEuU\)z w}2͜`HLtdBpxܬue( [jw6?Fo$O$u$r3g TWN k P}pd9\=YޖhYYǍ,ll%fl{Zaր*Kl.$|=\$w=ϫ"$&ʙLjA_)tͬ  * ?qt:G}W9?,؄ut%Ǵo5vq2_PN;>;!}Vޘ0A-1;TIWUVJLKo@WHIgb22?%_י#Rcg00-VȳHΟ72+m^McI"YwM'icxl(d:vhrHGG&4HlWy@4(=OQDahmP)"IES\ҙeO0|qΨ>?+@A. 5}{r.ջYIP Ubvf(Ab#TPx6·k*޻ꈽ ^a\kD9bj[qU4AlUώ4^8`KiRi|~ %0uAz!csKZ ҡc)ЦH~f C%UCf]} }x64%MvQLI/d4X6@.mǣ4tYS Ϙ pP(3F K T[uUz&s)2 2uxLs\G:X<̡XJ) x*S(ТM%"Lz3 #ûaxZ}.EzU.̲? si-~Dnat6V=\bs5k4ᵍuٗϗ,bNZgU_&١_L .w501BM z\ldL? v1v[ +.hc̗NŹA/ nRPv 32T]xMna@cd|Rf״\c^9.}_ȰH]z}-{Yx,pRi&clsoFM#@?MM[ԡ[ Y2kƁi!v1jlSd<{?sLi&*~V<$qI//bD81x,ߙU6*Ę1s7SHܞHr)E Y@&ی]td!{5Btaϱ'#z [m1R\"6Ա7Iw;li`H@X}dk r'Vmhbn'Oƈrff(6E#)Trp3otph9@d7=0zU&f-DoђG)e}C 5@9?YYFL__?h&afx3dͶMł%DЏ}J?.2P !MS@Qq9-6/{uaL_$0ӗP5ɺ"Uc-\9=~j \ 6u2jdRdOphnѿFnsq6|,$XY1'at/G pӮߙ3dF.S~壕sAE bH.<;uqh%yܧr&Qf{J8D/p GRB7PմRKQzn`[-Eu){rc -ILenY15"D~7[nOZ%.>HtʺqunI#v} QhLH [kⲖFCoBG2KYrvZES8iIį*0`ka0u L΃StrH'Oz n5ypvooOB_,zv4za \u!G*!gŪӊ!^")<>Oit)&S⨴0`gm =|?Hˀ]@x0<;L|#.f:{2S1O4 C7sq] Px-L|aP-(űnkKj#n ![e9zL_Gs*wF6n2vD[JSX'MEdʒ>A+k#\ͼh +Y}>?ѩVBrϝFFVg85!$PఠKh:kSȣS2(dLA^(e^:t`)VnއH5BG~=3MvlyL!ٹ-+|=v[Xs#)sW>>I8y; KGn.YV  STł ~ߤr@V$- @aW|MB~̈uԂ Dek~iQʐh%,2"c5ewǶ "rۥWܟ+Y8âo-f?mhWuD9:Yaj8ˈY3G<풃sJ6n>ey)Ir[i{BC)X}sDa ]/*chXʤ.&z{A[s@c=g%vMdX,|މk'+Ê?m qNI 8tvny,G1i$+WɕJ>J{I.Q `m :f^ZչLG(r Ckn$rJ~!FYx%QaXB)^$Mi TՐs'<' Õڀi(n*qmxu8]mo$ 6bBe*5^cEzG?NT/,P8|QkPdd;} 9nP[d 6 ,̖[ۏeؘz7צl~Ӎza(' l+BkԎ5(FxK ۟[6^&Lέ#hK3Zyc寴G9~R#t,@:[tOPYWySҏ>vn>׳?#_;/b7cMoM7{G_J P3jQI|kXJ]3vY?< <^ R az?M錡d=$f{>EAܭ(4[_͍ƊQ_VwA0gl7݃dQ =U^ݟM|eU{k_j4ltе/%GX3TC}EbO1 Ҥ}J2c)^F8&F\_v/"#E\=+bU;ENIزu' |z@{pC?&N$*2\42bHCA3+ӎ= Xod 4;mSZCtD{jI~fW_f#O|LKD[ruk0]b&k4^ޗY,'!AS,Bhbc>'bõ؟\yY>T ̲(ɸIEy dpϠvsr6[xQoLY6N֥_y_DV>^ fΝ#V@ 1r2}/1HSpVBuYGD(/#0#STXS-S2vɊU\Cco87@2~`zJs߬VBuq2 {=<}Ѓo}%׽1M8K(h@8>tm5/L&u76 露]nf́ p߄u}\/ڹXRʉ/_ ~zL5ub7ef#qb~4e#K>" 5I]/o3ٔRUD}罹8VBm34[>7j̃4[U}kRW oԸk7 Ba3SŬ1.xX}i1dEnq +eX83D,g,_!nqD>ч"ʁ_X|=X ^aC@\JiW2^NNz=HQഡU_mx0s' qw-<̅& ORT߮Gqb&ƷTX%suM {w \l[S .xr3eVz:BO:LUxN>t+3&(o^fH#BK q Pyԑ5k ^)@4"W/Mbj)0TN;HOC<"w6zs6!ƌgcG&LlOW;JJ G^4ޑkVX}xvӋ\ĵ#-@"g~nt\-162Ο fԐW#ɇq(dMU1b\,W>qSa!F4xE)@a4~gAL^X]O0DaZ[N%+I#Fd1؂WnewS\en:FL\S9=OYpsq;3=`ŊA$rhhXq+`K!lt~sOЋ鶔'.+0Uu-k XRKzƘIXW?uVHJOu]Zȣ `&.7, h0P*(ufv-BXL09}PqIB0R8:4{!+<1~)_?áXY튔2]wvxO ]oRD,3#qVٗ_f QĦ6^\ayA3upSE7Y`鏲Vv#,=]9+$wswz5EpUF-U[k@H"6L` EQ.(`8#p$N8hB\kJ-e>W 剧 I1}%h ,;Xa9)֩զamPƖð^DŽBe l*Cw.avK;q O*R]3"qxX C`ԏ8>[#~hk֕u盃c ;qu><xBnۙNv7:ކ[/MnjÑ 2ނЋNӨ? O*l WR_N?r1~NS{e1N Ɉ~&]&IbTpLԱNwu"|E*,@lk&!5 U m~=\/,_BY͛BfQ)kḆ`h#.̽eWyñb8۪yʹRTTSR? vߍ.]5ᘝnDFXAe-S]leva8t\KZ z@X 8 [=~i(2qRsiؓ WlZ!u3@\ON<+fs2 i6{ DZ@˦\\b5&%~9@q')\ ]ܫzP>nΎ];~~U+Mς=8|G83k&{ \czSCv߱b%]x)EF;!![촆\N_pDM\j]~/xl@~+T W2"Imž\kMzimI+LTWgE`Uk{xV蒼7Y)A1MI iŻC/ ?@ 71D83lH!c4CX(Ez Z|q wQWNxyE \u}}X= `)YSi=*Ygw J`^93qܘ$Rm|4!) Nn;u삗jZ؆^sQ;?]MaKy41g4sΫJh׵T ' ooEix_e6C!aWJB7 -zw0P۹{׈H8դ"5pE,eQCʸmˆ$7\krevfy]C2~[YS,`PmݎLřDV?~c1Y1N܋0923[u!@ !\-yJS/2̓TAލ?XSX)3#;gr@mu X9窽ӷ[AL_V8˄\[t4wK~7p TSybDO!s#3.`t"`j<0#Q]<хR I*fW(qGQW,U6Yo߰y7]u IcV,'Oyž{-CT*CAW"z PK$B}4Ӎs?xa+NVx;_c{S=R8TEb^AwhllR- Gy̓ .OdHxI:9̴3P&OmK_@bI!DYF%7S7T^#Nwio`ɒLi^W ?Ci# v2-E-1OJYN-UiI/Ҝo)-prt_Pj :IL}ywh偾O2V(i%6Re=&۞Zjsxlӝ>F6Yqz<,1OAЅ`l!/0TJ&NF$A)J<vJ-ZO)T;Np¸GlՉ^9>#LԽpFm;yꔉ3fpfd}~sK7Ϭ& M6.cyQ`: l;6x^syf:ms$5T}U' Ko7= S=4 ǙA"9-3h?wL[ٸFmni,Q kY khXDV:}c֦}u"iKhkN(DZ rB ZATF8 0,7C+9k·`?T!nԩC>/P%G5p㘓Rd H|7k +m6aS~yL^΢ 92ETDZѭ{R|J{8 J?ɾm90M"MzdBZM~吿BNH.UZ]lLb9RЄHZ #gn}ef/.|!"pW@)'{7z lwBDJx W_gG{y-YJ;YX@>Q d1SE($[AA!1aPkt{?/?crɸUrXĚY*QJ@ !Oᵽm{S+8c +C쭖RL}Piٓ65VM;v#Q.|,{k)7`⍀bn Lc|}RܹIBH d%6f7|M[<ڲ% *|gsBO p^@QJv47apIE7+7lUחȏ@k噏8,un@iqOJ% US&J:IFл }-1%\3DHwu(0'Z kkp2[Ǣ"t `;Ir/ G]r št6Y&"BDŽbQLf%4ѦkKCрz-UTC'yG,Ke‚ j>'PΏ%!A^XM ?Fʔ90_Гz@cGL{Q8d[Sy(ImZ+,TP?ѮdޣJh*BeJ&Lyn.i `HI {Hmb+_jR=0?;{S}}mEߟr=: afβ`Ϸ+/HSV# #,.!W4qݫ&5|٤Yy[O{F~040irM۱"ӚhF AspcHѭIVN؈%W(B [Y못a(щi}QHJJ)Q,-萂TR).NJgz9XPv^ xpTYwB۔ƉZ@$xɄ_-X"т%`js@/QW %"YE?4@y)4{o (uSGDE#~exfRǵ93W0Y.Ppm?Z1[KJ>}G '9=<b'9e'˩30̝ޑ FǦa$p xJ%'xu1vP0)-KLxznd\QCq>bd r\%|2%{7#K[[Z NIN.3tewv:Q_ Aglݸ+u;Cq?E^WaJT-%ӸG~+QU暹D '~# C*@1gOqq))Kn3=nF'I%ӞR 6qIx-+Nn _P6f'"; s:޸J`|[)Pqx1L,KNE9w88 P/헋gj`i}D}Š`V|{`$Z˂I8 Fyx8`?$iPRl9Zw_DoO 9 B%MpKsrȣ\b heC! ]s p~ 3#]-Fxr4##4}B'6L6!/VCr!# D70 kH$@{L_ Ut$OsĠF-NÅ  Təlўja- G/7URekv/ޑlAEωf?|{\"7o߬8$:^;UAgպⰵhqFfDQO@E4~c5l9s,G?+נyoa1bɠMb8+P< ґ'뵭h rYd7zpR>GRssz b onGQ# "w6tWV3zlDBea>aEYgfsTs6٦=?@-M evo98@W{ucaۉۉ/hzlF}9oP 7_<늼 WHgSxȥ '`U@qwch(jքqT=&W^Wjq|e`x%Ϛ1i< ΏoFH\KCSEudnz Wcmrw5SyԱ@~* @Ou :vge rNtm`/^v.x ~1azҊMz_ރ6eXRWPBÃY+[%0׻HuxŘ;fED\K6k͘/݉` ce+FJMϔy$Yb0}kdʡXbN螞'^YS{b]2&nׯ4 gA(~ )Ȼ}8C춤:gJE{3޴đZ:C,IމNϢ\`i$nKMea/Q $ H}`&::hcg5 ڇ $dԙٶ`S #li@r+? 7g+*AYr1K+`SkTXcDoXd<ȯdz[/Z(<ފIӗq+leX2">JB=K-4yu~!5|udz)̜/rp'n_gh>X@Ji/,{t3p'kOnb_A7)&MVM^`#kMf)\G,sKgn1zf3qM[``ǎ&)(dԎ@2[P>ȲO'a 6\CMnxF!E90v!YM:I%}_G#I7Z>L7*TE^Q ֕Ҥ"M!KUKDIdpYg4B3VT}3⥉. 5 DKZ87ƣ:5d lPHfuf>gt)ǯ`Ꝅ?12M^젴D+5h 'k_uO(MeI6 :A7vJu.-lB,2C W瞠e'˿&RQB;%fCE4Gj30B` βQL)^eJ*6p ^#4Q/QNJd-#iCt$@fy S%|#xDIeXSAI ulB}:nQy)V!hpV=.H^Pqq'^ oddB2>_bV?eyy/(X-2$"_#Uy|4d ڌ0T%xS.ڲ>ȧPo曝+9Czu0MnݫGt*Lo >VF28oN7|J -U$[k= @~O6t_~gڒ<47b>$޲0 1omM3Ru9:!V|/d 1DO{g K M_Osit_Hޭ}l2 J/UX/U<:a3r#Rrgzh{YL$0L]`?Ac{D?P?lmb52)l)@Y@c_s>($$ݙz@?U4R>[5@qQgcbY9AhwlU0]9X&^+{F5TTv?f'04xW⫏֒-l~#I N(A%//dtdnf|9h6?Z!mcr#3paDT\k>!s7zSB_ WW ?2VRG&ECYSreEz$Vdf{zD%ͭ]D[?`'ܔY|X2,Vc۸'šKxm A2!Y8[Gos:lw]ZG.45DlpQ"VFdW^БVבffMra@cn|IW-18xlC0/<`,\C`*GTw{Kmu_|Z:36wYzb[80RO(S/> UQV"W;c 7-͹Snշ8C,ݠϫ8<*RG;=<`j1QX46&;y :;-vԏo󴳅ziD#ЋLQ2|*0+ p@t-Q%g> sK+:`/t0]B>l,t(fOnv lOX[kKR{yRWՠ=4@5$1l5{@#xNR{~L7}RQ{GhJ,e:̱̐(Yx |X*1ᚄWa#kbQJ\?h:t\TVG0fvEw{cV >XFGR|mI\TLDʰP:G0Lx)X{ʹ"K|zf_w1&MJo)2޿:8?JQ=_t4G^Cmb/czƻEȤc:33哬JnX~Zicw1sc>!6ȻUHbW%ٕ|&Ƃ3x1!wduZØ\]\ܷ B(Gfs` M?>A]78J{5L#X\ڄTo{)eEE9M;u~Tv.r!@>| (p UII{2nOEt!F1{7z^]kZ`Ekg2 GMYv&0πoY5/lxk#2gWUy9q:;Qxep"TgZ$iX >!+pz6tM"|GIBO2#7iuGldyepNѽS "R؇L 3Ab7XgXדZjlm$Cz#tߗ_ZBx;T ڏlr:2\ R2Տfɴ@XM ]1QTɪo*XQ{GWk>em]/ "Zyj򿙟s̼\AN=͒auD]$YD (mW&NίsrBj -QbT^xQr].aN7D+)U*pƻ S^%OPř Cކ8ƗVWi@ gWF"[E Ḧ́:kO\Ӹcu O/ a7 V8`M?\>\Pint/I];$ol}~@Y kYUɕ5-Z8Zʚ ԬBҋ!lPoݤĭU.0$\h:Vg'!HzJ2pnz:2bH_ B? 9e.ԟt8,C菤l1r:[ ۋݎj$:r [#+@QU'A]?M<览*& -6|W2[w%>/~ĕFx.&~olSWyb#Pߨ}M&l068F!ei*$n ,Gρ@ȗrU]W{ٿ|&)+oU0UnQǽ֠M67>sgU_j#؎OίݙH-ݛ;8s0,Ӟ fw"($ ,'⢑1B޸G%Z:3fKuV"//r,(46D)w7BLx2zNҁ{4}WF;(ZJ'~wsǣlN$iI4pݳ8y~kԌyxV}߫;.Ti&^KC 8Bn ".*a ŢIlLn٬ 3N\_N>LկulJKH2 N}TONj`x0F}6Rlɥ/m&NEWg\R'Eƙ Cհ~vA$jWQ85jZk%ftoݩ>6w3"%7졂#(Ic>SYDetaD>X'Ug9'"+B= r">bq{tٳB$r|FӛnM'׵Sl)ܱbZϲUO>T׬}:Uί$-;Oi i8Tprp+\~x9>ѫ9Gy*8~ \i2go#-63*Ŵ.9i7CS)dK)k6S(\f x5l _#'w;T EfEZ.=#']՚qSg[%yޏOLNwSMC%#z!MĬEO\WC*ז^3l^^B.מ&:MzX E}mR6=X͝XMN^6"\g~α,ŷڵrx/u^ڰf#@Y&vYC@kARAC]l 8 0B oJHBƭ{HLΘ\I'KwM_̼2C'z'nxnA^ebDGb%mPx&|vF t銑I#_4ZNf~K=G 9kJ]U:$!؛h \h{}tjcAc1p8F~%\|i~lmO m@&:5,Bt燸 =[:J{;=ژ5ɫ[x(X'B8 =egLlΎWMVUaBA LPM~MčQS9a԰o6M󠣑УξiXa>_7$"=INIol7q*.-=,*hXoٴMжegJKk 6mU>[u-d]'ٲI{*c\1Ȏ d>ǖjxJ̓vV,ŵJ=QKϬw,=ש026=nXbVu1@r2CRޢŲ7 {2 f~,@e!/&@SRXjyx:V..u֡b?4`R[,_ZHzc/XW5`7y 5!)`)0?g?Cq8J7IN0Em2Ly%A3h ]ʽ;.5,94$sWb|\%cm6'Og2 ZүJ{^6,|tl7#*忍Q[ N)d'|meq9]JuIasrP|h}/=y_Э&)B[tL>[ ٳ?Y6Pa[9[?\;\Qa%d'8nZN Q`Qar'i:I}RC+#5{U16̻+!>@=XiQx՜VqXes;6E 6ҪM췏 #OsH[A|)ɋYRouUN=~}6)I{T;l .f`A=/lqD'y+a4il y+1nm= 4گ 2)Yj 2$99 0_џR.F(.7! 3.e2܍X889[v]/* 5;y-ZUX9&b>?retsA54 kK b&-TlM6.֪7HadiQ6Ѐfa2JQͮcbb[PU0,.?.)(:NPG*ףzycql'ٞ'6hɶ;"j_L 3( @|W{W}rSJQasxq|tKd*}lX_ ( [:\Y9i|Kr>M-jh7~9(@g Na)DF78'6;Ad\طb C_;S,%Ǿ/>QԝLp)\rgܑ#i%Jw faGL^d=[n{{?1AFsam^*Ӎ)cob.LB<̕gpf^n=_x!؀V0׀dVKu%8Kr-!`/eSH&aNq{DXJ̷poR='|D_#4Aہ<ЗQ2`NCP <2WUEo2B/}?)2+ )A%3U,dDt,Tݣހ!5c5`Po<}Dۦz]4pmyGϱX8g5'}۬9"wt9aPdx"P R/L= q,U +E+G0?i3SNO~Z6Zm YuEZQ]Ųs.'a"D OhwO`+Z=OEn? yM_UOӏCE/|?vT /r!ts#NkxKEEWA`U98v+ l![DU_8b񛰆UYgt5BY*$.", ‘Dx̲qκe@$֟\؍#9'3C^~؎wt3_Tj ޕ7ټI`퀢#3XU:<-7W=zX #+~pj5[M7Ζv"\\xM8! Xkim8F -G:*|0У4}5@;pН2MvY,d3Nb"~uw筟XAA4\Ԏ=Qd>}w׍j1Wϵjş9L9кR{vj:`hQst62!dgqNsfTizJ&[11M ZvDzW(~D^.-6ăZXTU(/"'123hVryBJwMc=@X;>˳gTZa">wsluH `/5Gy") Zz^pI +g?Z @Whj<,Ǹv;eVc*2^ ٴx #Mn L>Ry aAv>'1+_WLx29uS3JH,mPV(lU1timpe"7k9ƣI6Cj1G(.D3٤=xٜBm:k*oHBYQ%$HVˉm΋B@~[Y4U kW9yc_RޔѻbF_i*Jn Z"8s]Tl㯵$JP-~c UlgB̰M(IwMO2X {`d̺AȠ~#jn#Lj Ga^iKB^D'Tδ\<ۡ>!?WSdڇkdcǠ/Tq9kuwK) ЯKN[AF!r_옪=k؄cJ9cdsaT_;l|^T ݺ.`kU&L/lI*ߤ9@eYdb[8UL2xt^՝[$ㆵ|b WLgP 1s !mC@+5Q? 5E1%W 7XU:O!LcXC >6:wے2L|!`m^Dߌz [it:U2UzLi0QG)`|Sa"eؐyeDщUkkRC@t^"J=պ";5{˒ÝAؖ#d~:D0ǒ  u{ Go}#jhZ`U!B`EJE.b9R 0tΊ~9s+XrHFץ!/h)c!.זjg~Ů xʱy[D1CfTfJrs{X.oCڐ)"LHW$wueK8 A*94L7 wO+YVJy. f(Rl[ ʡv"s8?V&e ty"`r ]۔Bz 026zس{j*Ԕ5QJ.DsdÎu)!e՚$ GmYp0%+`i*d8Iޣ2@{(ߩ2XFc,3|F~D'ozJ+3#TA-zSSGmx/!f ]֐'jwNw9cYFH$ 990a4/̥ј~UX =2d~Y]Z=y +O} Wǜ#Ɯ@L%->,_ޅ;m^4CG:.-cM.%_صq.ip=S;` Ӽ쯃&'.X/`Eb!X0y{C!7BUj1R9kX?; 5kO~m=96'8k^=n+ c|O(ru'։GkXK;dF(2TC ztnV+䂿Y2dq>o.=ϫgT8s"-cQosʣ?1Ap| ϲ7.;ӅZTJn=w@(&=GHZ{2d@5&PG %˿̋f'F߮zA4v0pxyVZ ~sb6/S+bBXyROly'B&  ba*Gt\%)R81vG0\3E~NE 6_a>r.騿ϥOVџW8|[`%b1aԘ߻=['pMG5ם۴?_n/#qOq\&ssm}E]ܼI$/!2I⠒F狝u,>f[*mK -5Kr!0<˩+71z骴q1 >a6NI%Vlicik?[RSׇ|td}zx L_$X}zN/e ]p*\uҍ\Zuzѿ]p4bā%j 0mkhmP,P0.w:)_!9@u8r{`AxǡGAwt[C<_2z3˾s_y C̵0Q(YϤƠ_~w S,J#F&7vwN>#`O`ҁa D>baw.Ɖs/EɲG֘BfCh?Ǐ KL)Ja*'LA>΁]ڭ7}=<"9yBĎB{NCPuU7vxd`0kp~ġ~u[zJ$3īBx3OqCOzmi=fmXl֡``O2'\c 4FG+upeaYV7V *{Vu*~ yנT' =iF;K[@dF<5  mDC?]νeU=Uj%On3L@քɶEʽn-(BWw?:JL%'%:Q[@RQ*^!hbxFa,3wtOODE%ȣPR(l\hO !>՞պGs5mZ*,';8Β"ni{\3En! 3vjnwQ~ lf ɝͻڝHX}RG"@vXY?JjsXQcg0L9ï-Ai=lgF'SiI(p $*$GzV3 %%`((~qtT+ߐjyJӫ3y [[ Ϥx\&MR^**WPh 6.98G;}_M@wDY l\=2adtSa\5{!gO f&?a_ ШTݵiHFo0COHꋚ`o!Xg_YH :3?EU@kcfcRE/=TɆyp3{i}GE-w9̵^;̺!%Z;X٪ o*m yp.i%Mʫe,nk'v]}VM̝3 ,ʳE 0x@5 6:.܅QYr/ Noa=֑B,Q,ci~fC NE޾+LjM}r I[{0XأV+fЮHg(cQ*(ƭ]ТZ;2j[hђ Sկ=|?x"eWRYky1Uv^L^eVuu>ѫM@y}3b??lNèNfG.>E4ŚZ2]~}igmXfq}b ;IcBd:\tQb-9[K3ĭt}]<'U^S94yDmWX2Ň 誃4D[r ]psۂMC2Z1yb"u (E;=IEb !"J€c\ ^q[oWPkCשZclQ%F*tw*y wɬ'yw8@ %a plhOJfοSk2SHy,a:F[eA/&q` H]5zZN\@۹Ʒ?aE{ eF )SNq ^ЍG/S[D 3F}sJW..f^#@iF Vs#.3`1Ŗy ;@L|RM[#bU^rj[Ą(Ls%a{>9+xLe$=Ӓ\"e@z/`]Cb[2ҲkAQwYnȊ<ꊚt_LyuM@8NE,>&-9ZnH^6k ?nr7k1~I˪%&jZ OE;,[[ 創8γ5c}'T)n h-$cĎ\vړgMAgGpb^ݸ$DHHW2o.!6lWLZ#)Gxy ?f8:,C$ӕ45Yddnס[0&\堶H:;h!hrދN&5c՜t <0aUx :K戏ToN>㕃=02:cpm]2)yd=dk1hzY+[fł]G$;JV {eL->v{Ycxq-0/1q`0):j|PMk< b҃b>U8'@㉆K*3.$+-d!Pt*lO%׭_fal`>i4wlZVtdZ 692回w&~qm3W`\N`I2Qh}o\2>1Z$t&Üw>do 0.@<;)@xn"6F:1b@@D[_ʶǕLL{/s*V!)򁋜B t.^i-toIq .xBc; D6:o$Wީ9cG| 3t:KV4GjUaށ>sgݱi y^RG`9- Ӯ"OEַ9\ ?¼ac܉rӀAhϫSlcfV̳mSѦ 9FX;xoa6~\Jkf`]X.FW2Cr"õJr-qgZd,[Շ^G//d? +1Ks Q~ҥ3vurN3Qhol@tȒOVڿH32l=z9ן9g`N g SR[T;9 t ?3 M^+d .@;cj.`9ҞҺ FnԻkM?\7%Nd\QFaֿѢ Qq$8ed? U0R6)?Q>ԗ} Tְ"@,gV*h,RWuDU<۴8 q K^$"|&jwo*q\}\6E ]}:$13g*>u\ObkjGh0&lM:L`h?΃(A. KٶN~~X)˺gfBNzl)߉} ^6 _L>W,e"=4G [QȨՃu+4w  r_&gcMSv;+Vv$h$uZy!`XIZq?9zO8!9<=v@A&#t7؞p[C5<-;nzFU'MH+ i%]AfI#H`3S?IPL! 9 R:ep/x˴49_rεa/I~! օ-Y;JwzX[eTjދoJOMIr/XV'M'B9߅Җ[O[9d`ShuDUKypb ex+9`{76Ԛi1ގQ<> z0mDm~uP?;+؂p'R.׎3|-bsJ[:n{!ĕ96-F׸@m.*E]kh䖃ggd%0yM]IrL)2OFvޚWF4jCP c61TF zYr\_ /KAR>]x&y}s/Xnh#D׌Gn>zy I7Rׂm_V(SUk #6E|ҺNXU?XJP{;c?X5N 0Zq118T$:v.b~JX@XArfײp0cv\X4=gC[M2Ғ, ˄GSiGS5KJyJ蠛VpxV.S["ooB+ߣbyYJ(mڊo-?cs_3`M >DbOHT6?$h ʊLqMPkY>̦ +%۵gKbz6hyR7bʞs ȸ g^u,yl;lòG#a]&t]-`ĆR!5 #/[Հ򇕧kMpZj5 ﾑ2Wuǧ?zg|M)%}idlWR= fcθ4FD2-!E{5$eLg"c${箒_8{B /a8D؊lFkk 1:6Hb#HaU\+!w[ՑH{"zǞ_P7p7@o"2 c/*K62]mvHVX$Ba=/'+m:8K+$g9jKW)K@_1}7VKd5^HH.+u>ӖP]K\įYRڽ% KZ'3g{7lqƑԬ^E԰v[q^!6V#l_]?Q1 `t WSZ sИNke5/QHYg.zH[[ܭԐ)KM `ɲ8`aؖ nr %"7$asڋ;>o7_[E߯E^N;Qpkuئ Xg)>T.$P ܂зu6/DB ʠeNV -~")R8ʤ”))zq'cIֿ7?ǖkjy}YZ~B 5}PcfS+uEo@o|p9ny|rJή,HmGm4{Ls6ƨ3t'K21h[wƙ&E#sWSЪm_ \P Ԣ1ւJTX6pB2jعA9lo18m$}1ae\ /'E}΅ kn#.A^垰}‰\`L$ܽMhaqmV8 5z~WjLX,,5#Apg%d*5f*ewfF/TBu_1x_x`\ώ$Rl4BY;I%qEu䬄@u^"a M)A)3MGl6˔qUaQnWL-valƟ2) ̽c2 0. hJ? AP (_6fOOajWu[6EL ]t6>%sZSrL[+T+_I+2q+hޕ"3%N1y7(4 E`콢K}G41_D|Eyn['J?<t*,GʻC!:7>ܿ#^Ym1tIwB1KvW[垸_֏堆i?3_s*lj+PkсL}Պ|'cvWńV:j!~{J6h}[3~PkY欃{?;|;?n\Cq DT͈F^p ۦ mI%\Y =e&Ԕ>PE2sY=(hJ ^'0W@8h #`ED~ Vn~ZYOkiEbrJφ qH\fkgׅݛ~r}n}?%<,xjܥY0m\tYQ0I=H>P񥱩xQ3/#eӔ|c Zo/kؖ%_N~qhR=slV c18b-y4mh :-Hh֭#:<4[h[fej06r~^yW.3 PJ-yT~LMf[$vtU9Ҩ Lsc\QDA/%ϴs{w*έQ"FO梬}0jAr94/J ]{k fLRM W&u\9⚪EA`8MfbM7bB"ƕ`f"ܓ#WG+Pmphxm^uS!}s(yrƜ& (*[gW<&sg9 ,$Jh%VF< ޲jN'O$.HXd mw/Wu%iP?Ե+,eMX]}{_ۍ`oLC $zfmU|SK &6tKz?.3~մ" vXvn]- 9ʢ׋FrуUr`~W5ƥcOVKڭ[`C:UBoPӰ! wp 6Sڢ+ַ V !PBafǍFz}>fN7J2pa.W!ԊC"Dnic#66o{d=2.hM4yNrNLczm4\YؔF)#),[%NCcR9f Zb ͗QDsd:&lgbD笴Y'D8{ }ŽOulP>2^*Pjm6v e,D6lb^w SFnNLAd/:ϣ|51 `^OͅMɫWk;\C4?'A{ ?K78|-I&$jXE[+ /hsO!{=ǡfZs$ο /ΔI[.cP@H82f  2H:,Z xsKdBQ)MTMTF>)PN/ yǒЦCV6W)+s񒩛mƍ;lI5xDE+$EfK;(/]/blx( h|`8\^FW4x8/4 U v|#EĮ T4 *1P<o$Lji%&1"y^mE#4M (eZ<ew\L89){vMEvo3}/ |mC*"\eZOlޏ3be0@Aԣ<aKQ[_Sa's1D8auX%@c6rlo XSb̰C%iWFs;7t G cb ) RMH GVX! ɄI&(HP r>xnS#;|bU+.0-$e>&MI|-/ba wM{+ϽiH6$7!warMH\ٛRN@+ؖZw!om*XkrwE24%fvͨ"t82;aq.åѳ]{5"ROޤkq!.b νn`0.[2AP< N*2~"x؅@iзC +A!A`ЬJZGreQgR>D#+gtpmϜ%{; S @rA4e#&;f:sZIʱw5|UpВktt6F=eCM͸p=wسVF&qd81L5dޢNAS+ȅA:.mAf_eE5ۮ4З04FC>Rbϛ(] w5kJ ?wecmƺG2gJP-0:ǹڥC6l?Y8iy %eq"$oy*J3fIְ=/J<~^CEB]#1A+ 6iU37+Mhvn5V^G?8.`u&6K= ȥhx ű3mG5:-|l!|/k`]*ڝʒUMpv6kl[h#!ԗ*6N+n֥O#cÔ~A &ٚla|>ވJcz6O(Lz_Ϊ|`IN+MO݈'m^(C]npB]Oʼ+óǔ.$t"/:xA55WrqƻNf>w>\\\[fZ_B6Dr/ZzO'b}ao*԰ٻarϟ+c=矙WH#rA 槤ߠ{A螩Wip_'ۂ&z6f FW|z|AMgBgVi<*>dM؂U)O8_ AWJՊ8KuaQU8w_?nY0d1mi`Kw0i8w"k1A>1a7U;FF6 lg׍&-& #M8=,%/˓q7Z]xbxL#0dԞʓj2 JGb6 q@Ȳ`)QӗS;=qaAg˘J|Aua6fxW+P9g9L"㙼-@ ȑmfsQvWihd-`3hJ wEzO0LAH52fT-Պ鴃N>Z3؍NF=($ se.b6]%(@kl6bvק`cHwNiA]չQ|҂ض(LXnG*9xJrU}x|2f, ۨ4$AIe?ԅY3B矞{5ރ/ueN Y+E;&7gbq Oٺm2C e҃c; F[0%w}h2ռw%s8蘄|8,&㖒QMe@YoP VAic>-sЅB5NgEczqqf8IYvWsjD-Ih@ۛ~5`V<;Ge) HYD`tR +f'i4#4_Uڕe*piecCz0kaEX33mj&Rc\VFำZSz؋[9>rR/+9J @Y R0xΏIdAha9XH VTCMߍMW^}GC_O#,mF_QѾM=;' irZsZ]ży_YK.ܔXxRP;#صs>cw.Mk6(H6= sAg (fX·=Sl cS4Q-d? lw uH4fid= r9# 1.BhC)P҄$wLCtYڠh6Hdٚt^紊& %A--.&zQo"5TQHDO "T ԮU#(ynG`b9'vkH/>på٭'i؆!1~C`׎\'ruNK-?HZXR4z[Zu|r"fvS;sZ[C{qsų; p@Ubſ#%-~̂|=!:[G&xݹF-@IIv'ȔYwa- ^oiY.ʛ>lj] $QؚGK~Ԥ gO:A쐖?{CX#pAx> >0P68*'.e΢Dpq?߇1qa#֮g!S%vHlJIޝ#;c-5*v&8tiDIC@/QWr`,<i6s5X5D\=?%-x,IE3)G(s' errPKhbo3νp;TL2fqŏmD$?%GuR"e=kqٯK\$)EzHi{y& |NfAmwW [M/lg~*ev ⴶ.sl1A5٠mmxө*myg0@Z!99%##EܑwZ|!FY3a3 2䉊qi1O 5b3.}qIq &99FxƿaR${wkA0yOⷜaN|GtUiC@&>W׿'hOF{Y&.Ӎ}CWǵT:O}At_ |(:^:$ck&2JܐG>*,ғّj' ]H"ZhfBٚwA8!Y`|aKJ,=خB,o95]`S!N\+A"'`M{iaCSbfm"P4O,?F1?^'v n9nBqjsB"i Q-0#vr#H%F.Ě۟8V~7'y?-}W8k blN{EʆGT7yc `2=%%,hvOM7exI t:%s" #46{]@nk"Z+S|fWv]72íw Ծw: kDX\[P *P 1q,;c3 693a(s3s]ս9iul?ﯗUyy,tƆm|U-L7ީ39 1<Oǚ ?G2%>{Ow 햦 {9ߑ58XI$GzKUh?~Y[<5w"*eWj2ES0۾LiևVx C~Ǥa3Px<=_Oa،dcjnҀW ɢXJw<$,V1}8 +!.=vމO|Fm{3,FgPLSO sL6^5j;7grdZ"3+|-„ ;H݈1ʹyY8;t0SB;Nȭ7EfPP;gv*%dF4rJ#'1` 2͆k_gJE->}X5y@+t!W\,f\|gZ}0=. F)5 W}"Ɇ8#)" jpI 99\ ' 9sJNv(G|Z,٩<@mO2 TbTmԐGYE( D 4?* Ǹ{Jz#SsDpT\Fn(%q7r6hk5U0̿9pϸZ:z jBy4pj73rmBY#xځOC. #y9]B%)TZ{ x4|U6KlדG +@)2>PWm* y9 A']Y"L!8)|kIaMs,2ƮP青3:KD>4u;-YD`PT{GOBzwQ ©&*1UM_2vB]#r(pbD򕢟6Ww/[Jd{z?FeXXn6`:ݎ\˧EkXƙ 9W)sP=x _$W /hp\kՀjxA+kF2=Xb "tCdy6<1>RC"*|GŮ$ {K)tsPn꤃La<0;?sS=IxVsW4Nϓ Goye4zm_b Y_XB # lEe5,WiJ<▂ *wZZfU Hi3~v`vݻEPo{%|RLZɻu[<1ep_1ԼX(()yu@WM.R0sNzh.!gkZn?!e6UZ-e+ jR|9j@U$욽="!hxPS]!(M \o2_1+`q̔c4_|}tQ TU9Dxbс5#E{/W z˼\l?s f25~F7p_(q8 ,{qCaBzi$ZYUk <86 0M ؿ@LR{[PjBڶQ2$:L03pAdTVz2G!0%T5kSMZj1¶Z1cZLȿVD=*z5zDoxӈǔw~BQTD W)|Q_SþrEغg ('7\@+#!uG FW:PiOhr+X{5k8c";#eyիc ~T.=40 Չlny^I7F` N,37Iy),f;jA5@׀ۻ):{erCjlx>ã7x5Ȣ7&=M5T[I}ͅH:ƪ#Wk]}?l! *o(C2/8M_?O[#Eڣ7bJN-*zXpWM̵ ZEtnm}2V٣zF6svKcu-7$ j6>~_9kۇJL$+BzQ7ưLĜYBo,J$Id'iz4Rcìq}KMwBĔsʱYzk8nYuXlɮOf@$b@k@%o~lʻFH*+5[Y+8Npf==ۈ4 m+b6%׵UjAJG H*7NE6^L,7?Sz13|̭챇$VCbęhS- &n*2A|}WA8x$UH䅉 Fc֗C`T@ #ܢ ؈T:$RZHd!o}/DxVʡ'-gҺ9E=&Ck,Yl*$^Wz!_߈O2'`IP|-K וEXlVwqAg%g c0Fuy&w?0dU٘)c{Ru {K% %l]>\6^/ +Z7?Yy B8%"vL/Y])ru >QG(+c6Oq?>` x  [qЂj{CjAmaGw3(01}7/ce:f#G0 EUCJ@4gɚw.<`w&1 uqE-K7M%3͚V?'`98 TgtyU#{+YAJimw)!%Ћ`[6@ş$,QbnpDћ&7c}8B~܂y^8{:8K_jrҜY_RQwR̈́(ej#P>юD Wrn,>OdHy2rwBJPi_+I;\5#MWpر[%(=GN5*0Y5t]XnЄ٨ָ\ u\N>Hcy|kRQBjai}iè^P2zucN7,9p5jA~[,  9!-b$2nMZRF,ș[%>:9[rdM:k-c-?]MMh>11cj-&`<a5؝àcP#eƄ"c$>ӑSٮrrT̔!5g4ɼ"ϩ"Ƚ8ٌAPԝ_lC̈-]qkt3 9Vl>|?:XHJ6-~ |XN)ۭ%k=Zz]F[iR 7$o^uʿ+"m2U)w,N'N`rr&(kB,.!" bl&lg@W'_?L1pר5DQ% YLF "7C!z$6krhfN^C~lggsSY: ;]j^"KmgȽ 4@I{xB J]**{KJY\< %M>fm3v$AS@  )jNnhy_dOcwj@R5ih]I=R*})\_*}`rJ}=l&:#):GLu!(3mX I%H=♑2FBaQTei}6j:@&Aԓj]4sRˍ vP m6l}퓝)}/ qIJpxɌ(otEDHNb1ߧca~7&**,5NڋäsVEWˆj\cO6З%fP]:-%IROp4 r*Iw\ھbG|)Ϊ-ar'GvеG)YZwyZw}m1nv 'ΜZsQ5Yhe[ WM\*5`[؍S5ɓ=evk j@<5|3kNR+\T\?oL r0fgLCnsb!˜0ܖL3R- hg*MghR\X5,zk&-h$Hӭq)#pOM)k}3o͝n+M9z^'IY0 n%kļ+>/kIڨ%w2ICl8ӓ/^{r֯nFx/d@u6iʰ̳SaW> ~dB'8*͘@_ݜ UH9m4b*~o8&@"}O=a<酱jtvu]W2%?` 2E"|佉 RZ<'=`Wz{[hj=L0T ]tt #Z J&z\nײ+ ^ȑڳ$~V[}hKUwLqdԣeɜXy ]$6;|,)dwtO9Y@KߕESy`N@Z~ďaƿh*lRm1_|OEѦZŞp: KH@z;A-}O7e>yOʎdLPh@A(9RG97vtZ0(k.w5T )=/_+({9=[[X2?y_ekn>)|% ܃mHC%2?_q3 f`[j7[/~$ym6w}E,+ida\omv=*IlEVp\~n~P.ǒ`/)Awʺ&,CGVoSkxRv@ ͜%W꠳עuSEJ )I/!kr(*cH]Bx1BVkK}xL6;C<: QP̺Z_ܒ/Ŵ ?\~T -ߓĔ&R\! ,(%Jx0sew/^K~D-V9j ̏c Vb ,wڬ=S9d#07E2=|(f|VFhG{fB|o0 ԜiXx*A5A}"Q?GPgr=B#-vm VFmƱLK(zvLuA vza%ulPfU3,ˊJ'50m]DέgL3$k|NH [Q rߔnJ~tAǐK4|_(0F}UeqNMk2++F%tΊՃ!j um#j y\|oU/] -u.s" @#.+qܤbLGg,ѵ^jvT4.ur^}L/u'qHMY?*_><HΔp9$NZbߛP]vʌ^[_Aj#naB垆$'lP#,;C\_̲Z&]hVw%BN bw71{>+Wd7- Ǫ($eFpZ0A4z/y~@ W>< <]ހX f)b܅?ؚJ8=:iԃd^4}KI 2R6(Ɵ82w7kLsjS+ₔh`;jsU?H\ui43SYySG9\{Iho2-WT֧&l;k{da6D5DAk H)X,['1U':0 "&`b!M>sY˧AmIY(Uz |C3^D$X1dN_A{; 9 sM8etӆ;6b@ th..$KkuU5-x(Z<<ՂYƪ5Ș{Uh|`{Kv諻!MO5??@;C:d?̽-W=zN?R1nEdȶOO uTf7VDE*o,N1JHaj@r* 6㞃^QGv : [-90gKehiB Цr|IB[ӳtb6vQfkD1X g-=ktu:+` lJA]T}D-\ԗɵJ|;,ǗA"e类C0My:ISTo+X\ރPďDSjD*NKi(?C7~p!pjr@4$-SQY1 Mr8Hbp!k^b(נ3X:\xȼi;fi_D`qwkF.)sl} #qK"Ѡ,6'jPE{<I{ oVYK;K =] Ǧ8FBFl|[0`W;)p׿M;;̆(H)5bC vrVj1x"|SݑztWv!r z,^%w %FW1=t@e@r4*w)WbGxV fq(#aݞMC|)3,xW90O j%n2*ORAW"?I單vNjX\jOjtn'Y32@ c%._ge8n8|kc;irs ;©"?8.* loLgF~4[3 R*36YNiȚR]|ͮãǃ>fcZ&I GҦI 0850\_2^ uTOw"AhB/ ʇlaW*wZ4:eEl3/G iwf*nJ 'w9k/q釴iI']GeSV CMFQt3f-ē۫r5JñiUnv*Yj)D:2"@pӹc 띒HlʙIdd׮Sưߵ+c('W5QW E%6^+%̱(ɈlKQL Xt_prk8VwN>g2(6b 6mtH,#8mᨏV%)6?G5)e^-> S.|(uTUYYzHs9Q~%Xʦ}95Kmm]S+S< |nY-BUEg@&R. ?!l$Mb!(a7< LWg(nI܂FJBд䠗ǎ=#9a1?͕P=;nִ1g1Nq{J/v(spoBX# #nCukGf:UR]UbeGTic56 ]Qxe|-nNJ~ WSخC`Bj?r.h#RA1Jnhs E5rWCPI(0Ľ;"v E7] U-y%cSja/@J=bA4UuWj#7QFFH3R<e'}tm7 \`*[CO.R]| T/WuROB陙Q\r,a[x n뿵T}A2k{eB5|dz}FK*AA%_4PfC[w·#a9#zVWVWƀyVrπغH^oY.:Ҙ*.@ kRo6Z&/.@ٝ >Ew`aKo|! 6tx b~8CeN}|պxʥY$&ms5_wTz64a}N~ COw}}_S|2ɺY@GkwBtf~gt[56U1_r~F]U$bO :_[Zh;L9\2/dc; 'q{o#сGH.#4L&'H-4:o"Ώ Ϯ[ܓ&|0o}S%N)%&:_3o_*g^PyW{XJE^Pwsf `ihՅ]X"ݙ-dzTA&‘Tд> ScO ]( G~Υژ 9]8/.va/o eH!\1Y<6jgTT,K*{N:pyl:"_{+~Sۀc؆A}-,P5:]qƓmݷn-T,4Pԍ8j .H$KH5Yb{l-tږug v p2Zuڇ@N OUq+'_C!7(?F E,:M\?Nj"aDY u_[RkY'bH1 Tح(وEm 0K*XCˑ5>vw sC#$ىCmr A|+~2ZIS'ޟa=#.Uf-9dB|OM^[4N"M`O8|6[ｃ\Qb!p<$ Ѻ/).0{7_5t$KOH04n7T8^7TY_akŸr!3tȚ!Jw_^RR%Y1f&=i{{^d[N-o B1]lyIhdY=اktзXVbɅ}^a& ;| eѓ}Ǹ I%_|VT1TRM$agX,a7}Dv~cɎ Bº);t6}rcr_3 [9Hba&>v2`7 V-&DZaгǥN+ԡXb _Jv9xrgp99P J B_fmcoAa v!j48g4Pi v]"Eߠ%D?V$p7Ox\nkDxSђ5b&ft+Ji1S OLQ{QFD [đ~},.};wj3c^6(_̱y[EJ„:-߯rvca5 a't:NE줭llHrhfV1Y0#Q $E_cZY92R"NgGx%t_5q I4%MœM/&؟Xa} V6#mj*")/G0`` us)SG![`BwjRS1/ͫ ̜uc.}VSP!6Id{ /'Tt7 (`CЪ{gb]P3s4)h1wmZ.ቆ+ 냼)fXگ>0@ah {ebF)#E߉d(S{+b:\/x o(DJ\N JT0 5 ~爛N۷{$WlmD3A@?[l7@`UStw XƜC{_Tw kxLG)`t)Hy|ڽk6'N.iY\izeV>S>u}q!\\ܱ mv w]~yDV0➄((2ͳ'+ {3\ksS= BpRt`bWGaPہ6t#JN~/_|A AuEHwDgҦ3T)\H>j!BY+⟾o7>[=5t3{rh@YcW o"(U Pev|jձ!WB=aU3Tק >v~EiGSK][nŜVe'6 ^3:T8n诠5*":0gDZUm-m3p܏K(+'Pq%?fo8AAE. {KN(Fv,fwܔ_hr<}YG/3ό*3-4\H9=!x|uYħXLFLK@$XUgr}^m 2N QB&7].}jeCWOmS kG^ze&UN~UWlwzN"t}'ȉ&3#^&Y!ӊjAh -5M{)-zHCsچ`zO@JuF6S1&ov TCUr&Nh ѣG+q)-1 ( ~݊a+pJ\SYe}@33V+02Oނ) GO:\%j@HO+(Z8Q`i&D*. Dr∁d5M/*0 ^x3ڳGM$}laJI֘:ߙ+6~vXZА B:&:#I{WֽGDJ|Y#vl_z>7[̊Ɋ):mٍ  nJ(8\Q!4M;&:-hƊT]lw pW:Z?8=aw>46ΠM:n707o\.}.e?sAIp&+*Y|=X'W*=0(EL704p*>=q_:&lrB݁[+:k'ˎty}f}۠lŸMr 裀&+-4X'LyN}tSv"$ED$ȕD.*ȦiU@O}<FKd3ДO "DJ듭k [f6Tp5] >K/(Yz [b$4_Ua4[#[ bfiP/>+ D;KtB?r;p'FcY hd1)o]q'm> ny+ @w?)WEj+3Dnݺ1l$rPdATML N0^0Q>j)Is? Y08ۣs%u3w ;TݲKER3EH~({ٝ" H~ѓ:2 rx<d4\Qd}y֯ tkE8FUWX :Qfe)bc?8};Pd\n7sRY `Fٰ+ @H |<}4ڍCX>i= , Z]*z~V4 cvPNE<.vIPb{AC.q؄V3ɧM|8O{gp(jx(P}iFIrQ;B?4("2Jaq w[,:nj7^/=[f' Z7 ݃J=44Ҿ=eϽ(*uv# qRbX8Vs쪋DZn*S>h}"S=o[KQRK.WGu 7qhQCOݹ(v-emz2"Fgң+WLj&^X{ߖYKiPO8Td^'w|yl6i! 8rM@ЅGR&dWZB$n@$~C[r xΉ@>;JZ-l" ?/D̛h&Y1:,Bהce2x++UOvcgsLOAzbCʤH5džߖ*׫WU)>*&:U2y!xy?LhiTr sa06 # G{;B.VtNH!Msn$s[IuZfZUЕ3B`^q6ߨF 2iPpzjUg]^[gtvmc};֝GҚE4`Eap\)ZQ-NmBb \Qloofdb}gMQS9-Vq(q9t\uAiQ .}CTшwJTօuFN\ܳ $B@ u\io}\5bbOv>k8C=S4NpƷrEt3qOJpih_Sf6^p *TG’*PgxK]Hf&ȝ6aTT3.q_ Y)n hjm/˿<ua0tohfD_SHjk"G6xm䡗'êlGEK{J8YܤI ܍n_u+gqP>?Ѵ8~oVXZH1}Q_Gˡ9h TvȘ${݊xD[( i۠{4@s(* | iqZO%dHyjL&_3;^|9-eBKRw"`ٜvf7ywQeA.*,;b[:ސ\|K/[x՘߷5'BvRzD]*qOb63Q3!_g63s'V,n[B+ƚaJa4]yTtJ/5,0kն:';*~z4Uy]XȆ+n;X2uΨj vtYΓD# PVͫ H+&2Y#^۱/#h hⱧZ4csynl 6/j|8 b2Ԟ+29idž{`%wr ܥ|/FK>,f($"_&up%w}j?F6A8gMA0́EW ZGXE`҄J$ޱU a3ˀu5>.\)1sOe4 TҀ̨6@SB$Zh`' f=Tj={5‹fR6wjM)y{œOH~N4wtO.LIK4RʙOK!rZX@0d0K^gAu`ĢQl֏1Aݸ*W8ٍ GJ`+G,r\qs6DžƋ +ljVV]{:3 S//t tn珢2xIe:[ #"[u8 -KZ5z*B M!k@gU[+h;AԻft-[ŠI}LQkH&S_cuudKHαϭi2eY7B}rsJupE;E|F"լ)lHX%X<_a;?  :";0_gk;X٤"tXqLOWʾ: C+A|lk1 Cb3εEd#Jڵ,ݫ}f&tG B?dv,^Woda9(y" h@ۼzW3թz:l<]GCV{0}B|N @0C=aI+7ɵꘔdm~ݢPDF}<Ϻ*@水J2Կ6_ igzCD Z&Jq-)4w) mbmVw"| K^iX\Û|[*ĕu$Q3ڜ?kuK5cOC̟>܊=f% 4ߖ7[VwC f`J2Td͓rHAi2zn{R-t9]xD ^лvI{6t_*kMdpLW^3)?}(q̆sC"jp)EUE_N:-"g,)=`v9'y*0w2zII177 'ͮoǩvH8J 2岈60MgXWR+E:{RJqSQw{/=7{)@bWToD)CH` (GH]ikfFn)0cPNlA4_ba. 9.";{ndT+H^8 .5-A1ULD+vĤYH>K6L~zOjEǰ}>:dHbE6W'RLܼa\{uQ${`v~tc?k~[*7ދTRȪP-שI.ܟTe]{%mHJ@j~:~ZpA_`k4|ݜc:IQϏkLWyOXO٧!k⛛Jͥʱ7XOq_8Mo*4 DžwQ?XTn+xb 5"6NA?YߊL|ztjI٥-*LwsI4Og"$NuΡ4㓽f k]h[첤t]hf8ŕhȄìObL#) mx[Ã6>}GC%f> aވIb39,/rlCxU~["_+D"pE/ muǮ"tp<~}RL,Sp1L䭒u$M=qǣ!sj{ljKVcocr_ؤ.BMWl2{x=Ԝo6nyĤfD7%I,N$?wh.v|шI90ǀ?ڵѹD/k< *૰jaR'Ƌǂ́u$Vhe -ri\~ĉY舞ɀOb_yԈޡo&ȁ=.jh3ܰݨuBq=U[ -<,z\Bz?`L2U>/VY+}R8?OrDͳCWp6fQH<8r5*IOi a]´.BRwהNgԧ3[3S\44dy6[(ci'F=Q*&v٤-yLT<܉ICz[SmVMnf,ԥshm&WyS3AD LRI|#rueA{3ʼneL&.˚tIÃixz2JWLv1f~cY}"N jɬyJiX^s'Bʊ4QbE P]*Z}"Hx %oׅHHӬbP'd-AجY~mޜZ8YBxt=E.1VIiy>qdYM?ֻǏ^u'wo"4gbCVxʽsnl.~~ ܲA'JTŚzbߗl73_I0DM/DF%5 zd1ߢ nm8n6%o!Ekr +.ni _ 4}ˢ eAZ`³ةߦ6R2t_TSWKdd-CW?f  pCwgq0•Ԉї`oC ZV 9Ժ~)l(qxy#KҪIdz+V9Eu2A2)ju1Ԥj+vk]oNJw:9nу8Μʅ45Rc!Qp9H.c@:3 F0$f+V> yַ:bFOJ^լZY7Lgô̕PΨK61wF}?eonfZPq/ G *!*ʾ\ +ֺ8%KPʳ#sO5.wU߬⼫=bAXwcp0<> 5 ,@,uQ_lr99qM:NzB ?! &Gy&?o|1qUT7܈\%Ak1,RU[LmLM} ͺlX2v m->wC'`sIOU0q)ȣ"5< K"BuxV&? i`QL& eB+ ^6" b=t}cC02[ =w\G?%Ί|( фzvaG McV;QkbLa'%(}!>/-SM]Y ˠkdk'/|lC8Xg JPYToٰq('~SxBd9q#ah"JkHZX/3%7`論gNvsmHn~vU9WژBZгX+"mxmXI`\h&l%0YwQ}@z1] _24tȡ8v5t"RG=&taB^ן}¢oSu> S6[E"N]BP7 n}z E^i0rw@2iȌ `U}!sXGB#л_aɵNU[|IFy<#^^E5 \Q&Mլ _6Nŧ`ќ1~*A9* 4գZS^_0]=8n&G PH;%#ꎑfi'ɾ};G5Y; ,IV! Q7G;\1 Wg&``.d yqcjMbWZDdPR4mRx\־ÐtwK%g￿Bl#R#0^0+`7Dv"UtőǔЕ/}Wr\G qSgx.A]Vl@44A`.N<,!:wМ`~QwQWo 99,CBJB~B*:BFB3\u7dڢѢՕ}qf | 9~ I39Ti3D1Fu0 :<[&y⺋ ,i<Wڌf$7^l@MqU_)=f@iԿ'x4iPPt"#-(-s:-1pֻE@L`[d)Ft|Uf*+Ecdq \7,ЅXe&ac!Q%ߣ6YH!zRL9w][BD|;W E6g?mnQ w3}ر@2/2IVRʅ/Y D"TEѽZsJԌV'VuCO,aL8|e7\a aPqA9DL7}Ob\a$}b2mb|X+Te^V`z8W#HxbziXFi=C07+yIH-لAFzPiyO\gE8yqGշu]+N?/œ)\ Sߥ/z I;>|ܟr 9`"G!#ʔHqEmؿ2R ÒżPdei=. wt NkBih)Ho8Me_gAk]y&"Ә/&WipkE)M(xFe^#迬Sup3>N]+6M,Cu*R F l#pPًe|$H¼hPc %4-b= D*LIUy) oHbuc E^|sQ(f$&V}LjC~_ŬYF5ros OKXU҃bV1dLW=O>J5l4 y_(w Xܝc7sL h4e Aݽ`25' ]+<3=i0n0J-r!qP]]y: izve5tht+Wc{gy&Lrb×mJyJKEs`U-2KFKWb߬"G&%˷(Q`J)턋|@PJ젘2zo .-bz  WSc >PyO0bGHWTuD8kOCqw[/(ܔ2lC2?% (1ܾ/wH6̈́ B *[jeq< Eth>dSe_f"uْ7/1Ҧ4SQ*HAa5lL\Y̸x`"GvԙrbL/h-`N#HZU'ؚ+K 3#{ۯ ~]$XQ0T,͍2 N NOLqg(m^J?_X',:P+Ku~\Jvr*?a^k );&'^p ԣ y>r!~9OI}*ʔVp/yhxbGtY$ ^7\{w™h?*J9>_fW6,Qm jH*A}vIN.jH(HmM3ŠzKyjpJ <2 q,&v/{_W}HYnJhg*Na nv|xق*ʌJ,EA2vCD`"a!E"*5~Ą4ɸ5B[VA*HCς)ANB{4!8 d~xKI12S|߫Qwz0bsw[rkGբ K)C(݋R|RJҽ~V /bֵz&NtB۶}ⲑN4k%^ ;]9P(FO!ޮKpAJ!`͋JmjmHgQbG=cӐpl p,j#{?;Cbi3=p*ʘ ܺYڬ$2"I!gK)W͓g˙&״_{WՋL-\)V%>\hẓ/ԛ04N ~15ʦcaO h7&1: ..{7;V jE bqDSW %r7G&Z|렖u)6sBC,xOLq&0~$ SH31![vY^y"jsE0x⡚mOCҚ::\WkGۈV |n kY p0 )zgXD7&Sgʯw325,n&Yk5aqhƟ r"\BӾ[t'vs0 gqW.HˑʖIn1V|sPRto|^<16=x h.s > R)+&:!pʼn&E6xwm`B]N1]Nf|d=9$`,w(Gnu4fpP+[~6jWe:P":Ǫ%7 Qk,I0ۭFD 4I4rAhF$u)*jd P*M [O@9#4 ˢLRBh. H3~2{Jw+^ѭAhX&?n1;"|절?2R +5=+-Ki&Z6|obxLhV5%ʼ*xXV77{'_pڳKd$5>DK7Ljz@ ;侧$8 V+oc?$ՅCNd<&th1Y;:_JIDc\B)W 14L@wkм Z|fmu)xDTݤ/D٪"uXN-Qha}mep syt_>|8#۸%8Q.J^LT9/ߣS 9z 'oa3x2%z**`m{2h܁.KJSA`P0< _w5JP{ر#yN!SѵoԲ7dw_#(_Rr,^M$XKT֨>^@lYZj2o f{yS]Ͻ;l֤ZOT|[SPݏNRACbWT'<η?`Wt/[Կ dѕq|iJæ2ҕY=r_=3ѾȮ5#6BR1ˈ^DqL6f(VשB?A!GL7d P@5ђoLPQ4+nDqPcA r k`@v嵐rUO[cվA) i,CЮƯ-# * ]0F*qQP6OАLïnod2$DƝԋ&L/D)a'}LDQ`.%^ B-= #oc6ca[A@̹Tw #⯥>Ioz$$ʰQ`_^m57M/&XIPL73?Yc 8{;:lY!C}`p~GG! ۉЭ>\GAy~:+"UwQaIN" q"dy9﹙m K *ip=jqF':5 K%e&h_.9t۬X7 /k7,. F6; byӒX972[y( z4J+*\G \럈g4_eD4h.B~3S' }Ꮁo u#BRin)R&sEZ2f:.;N Nw̱,\i" wPgșVYD7ggv {} s/agOlR$fwʭ8k+W+ /Jì$7H 'cPiLi Hs~gfΡVs jg'TT|SYm%VQz5>1$B$|`{a]UVlsK HtN\lS'9`<s^ZH N2>Su<[lu俤OZ.JVF4kdFyr`iI80GcԂ"ÁMYU8@+ rOwc]vgęxG'5BOVUqwy,;^#wcXK,)ԗxֿ!M/YD.toG$:g<t\/豊`{ Y3ـ k7)rM1!5sน%HiiVW )/j>`M|v0چy$) 蓜KNlb$ۅLeb, ^ 0Rbݍ;2Ƙ`|p%SE1=Xl#H(7Ǎh2r736c3ǃyI+Üa>Ӏ O<HZɌaZ-DI Ay *^O?ਉ,mڈ;Wleq.3 JeOd)+7b/9;B/2XYIJ%c O AJ#Ixoé"`` 463mD|=`=B6K…yzFgu DZjf#b[/ЀHM-ܛS_= é2z>1gT,jF}503@62!$(Ń2t*l5)Dk'NJrˀȸfdpobJ\šE6;(ېc-2-gj>Qu^%_|ux-Jb \~aP¯cwD*f 2Uꔙߵ%_O-EӓK pG'x K|+p~:{#7,Ё+g?@!L(fjC ‹V 9 7s0DkݼE,Ɏ *~`)^zA_݉:12|zKpKFQΖQ1U7BqTr٪}D?UxL$ o_%cr?2!e ;[W=[L:E-Gk^knA'K*Ǭ87ռY q)OVl}綡D=c'ØdpQ*Yfis6O)% ͞Fr %:77Ĕؓ* =Y5mP5K ÁQv N_vRRR*E#FfŊ pQN#:ߺ3.3㼄YHa!Gw^o}-bt aG?7'uoFnwAۢ1'bt5Y?IZܵZG_+@-8gu0ilK_Pq V+!|'p*#3!oѢ}C"]*ȵh5+G7wV]3hWZnxӢ 8nSg'qŮ>lc&tL )Nn@A<ⱈZ>ۥg s`Vg.@ƒgP39[.4gqc!U]>(ڪ|OU"}=j7ʳ#[ۮ 6wqyԩG>YB0zL5k* }D״'@J #+ݖ#RbZj7HUF5$1 l*o Tvj5jbdCFQ$MXݳ~ ]K|ܘ}ŁMxZIo( vey+^brL<;²Xt鶡;Kl⑶F,k1&E6D!0Zμ*u5[,yn ڤY͋$9=. Y!c\tP$t4B^AWO(xk^pXWPFwM"` n{%6Ì&]4.4 Lwd@%)h*0dy~Vs\TghSrK? lOd)Cb\w`_eoZM:mR_g.](a"bЦ@~/F^ tX9p0 's ,B\@1B*f*3U5vCCۄЋ= vĹP%quЙDݶ@ӯ Uj2_&_yi7l?~Ҝ7X/v)MWrZW֨Xuȵ+ULț{7Zsp'ŋ:GHXؘih)2N#EfkQ1撊mm\T.챕aS ~C'TЯjhT{LӧAHM::vCw@M/N{` %0.O|qvw?;n䢯qqԎK˸gAgkUʊlDO0TA;TNJ#ʂBmZgqZ%Q?2);[#')֛cE+dв;LD Ñr.ݴ1v1^y \;#1ߖjLHl: híi7d[Gg3.@$GVh{P^eRkb7(` #_+.7[X9RJl`-ViYHQk͚1ɨڣ+>֍aغC74X>R:8o؟ q{-?M=FUHvQ0!12~#w3'Ek8zQ0l*ģ0:S缙("y;eAI6ZN20wK#3;P9+jK$m62J?s/$1!#\׮uůJ*bp~wOZ]׹O_\#kRYY0z> Q*,W)"RU1 534uk >qƸo((M dsNvD 36PGgwqLs̑ASQ__`| Oqds[PazPm|,aCD &]n. +ٯZt‘6yn@Ƒҙn`k.i^8:g8ZBk$l2͜ &l-:R B=U nu̓&5Xd<7L=cF, 3j1GA vi x!t7Q05nh`71KEͺЕ4wbŸaUzS,7I!kgG^{W"2D9٩[ndCl>%^%љ"S!Ss5C:$h[}kg~jVH^UVȻ+G!FcSћ->.w囹z|>zǁ;ݟusU@{7nvQN+qtc:Q]ү9fUAcmCܚuy,'^wdj΃b?L!lx}?3Q@:]H=SGw50E{U{khq6kU tu $7s̕z~@<-S%o#U{ #V̕*SOYݩ!h£KPe\68Z<ݝihRx6y;Gg-_^LmΉ% `-i~݆Q};y;5NLac9 jMN[JGMaoŷr=%~j+mCXb^ʕ#\gO>O9BcK eU 9i8Q"]{zy?iYa(~,W 'BڷZJ4er&w+rcj< vt$FAFkBY ޯpFdq06adoWo%"9*oJ bdhѦuN[`["I6ğ5h&ҾUKj)O8D zsuEcHqzR!.t*:l !ْ*|I6d8L(>HtU:JUO3mGPJeݓ=8Y9Jw *k)`B?:8;' q+Kj,J l 2~"ս.[.$YtyApj+gWӯ$zެfW%>Q%$- SnɇXv?$% \HuL`\>,{[ ! $D[_a;^Ӓ(ɧ/rqͬWyL}W^0m㰝 M%d$ʪbձq E<݆>GC ]P&K8_d׫C¦ Z3vM,>}jyvWAA-3*cwu= B!QN23P%7Obt:@N`oN96q~^ZZ㯄i1շ 80K7(1RroKįtR"QOFRnj}f@aU@Sq0/o:ۻ:!V \Tz 78<J}bAטwH(l|u+K~G?F?3*xIC#ЀN6`yZ,DZ~nY>J=h:]4M6gGۋ }Sr  ub0ct\i5}EuwsP\iкDc,nc]T*i24mƷ8'giܫ4"\-l4+dxT9 /z)uergarv-PgyQuVxw.x{Ub/o%?mtm~ >lroP`d'F·d9 BLchsL Yo13FRz!uC[lTXNC4\Q*W6ŦL:@p1fEmȘء&U:茹cً(ֶT,]cm&dEdcz<]pH?5 \x깺o mJ 5p{;"f -Q2bUZ;kwzbmvA1\Jsj6PfC{FԖH˭c#^Mb|/,x1IW*G)'Ky%zY5ci;Z.nKʼN/!EԡJzfjWIbwn7Qa;(ΞZǑ暣Hl1SЎ_b2Z9QtOqnTiG'^хa l5̉~:8#wzxo>l?`vVO 4oabi( \nlXB]# c_K-9Y/&r* ?۴J`Lxgq /ȵwVcR#eL^.\209Ľv&V) v?s| c9H$g>C,urI(,B-|l񬤟찈YVx~\GGZm `b7Z_.,Maj'Gٰf_$(ɹZ\8KtNzG-.e 7D'$y!к5l3r@]g2!`7xmO"$ssN}{;݂/V_`_I JԹ<4ӯ)+neT? + L2{@ )!(@huCtlrDtH-t5[R-R׬-5*ʼn rݼU_^a`;aĻZl l)DUW9+e!r[Ο'LU|'ѧ9z^j+3GA& UUtG. IZIfw}ؙzge&dy-љ?,]el YL2pxHuNƋ՝s`+LjAabnL;w3?aXqLS\~pv~lvU]`΁r d1,),P%x8P0JVH`X\f8' [\WȌR3\uyk9h >X"0aXl²C\u\`ُpen/ 2M3Kl!`?PCwʥALk]Ftx[^WW`1%F}K ?PgjEƲ(xעN?n7>~F<>KA%gxʲM'UyVU-g0Zxvt>f XH+(v-ܴ'ۮEWև]F:OoC3JE./uQ跂27IV m*o9xp-W,I;ruʡ%RJ~B)%-h:cuE_ S]۶KJՂI3j 'IcJibX.4~HF FD Ј8OImW|%w ~86f^"pFE3PX.M t؜P"g*j"j dFZUGܞm,kV<őE̵LpZnX{6q%a̸W2oZ2?|Rz&>5T ċH+.a~oNEu֯p \~cBVزnRÊpqdkYTJнX֭X-mx-D ;]Wz F/$NQa+@Xl<:9X[ e비2k"4"L;DhE p"R >#U&C=3"Ё ,kke7W9skf@ =_.*nE*vپBB]HcG;2c#_q]Li"Jd4I]mӰ]Mlaiv 2'l#DZKAs >pau]By%Xwi yY""\0A&{Dy=cwIbNN_we'`'0ט{A 1 =ţ`n*hȐl obnP0Adݿo\R,`Z7AwYDcn -X&{\0H<ڏi*VՃycʙSB @M 04ǪW* Fqw@|LDW+z4ЦfJ|` /%9 Cp]eD|YUq2ARvD[\ %ڶ[G9&ROA {/IVܦ!Kcp_̫ւ6wHzjµ*RRr˶3?0|4Yre-S,t9Wd@V; r]3 8 (P-=;e>"Aad^r-;DӠ4+uk5{}ƃhVq SS2b̉س&_Vxo:G7/|'@PP0Kn^)X]Wވџ#6q3Opc[Lϯ,TnQo6WR+$4 %Di? &nU_dh=iG(K.L?RhO9TH,wvA<%?2'yz۽)a Ӄtpy1(ZO_eglF3x'OC'9U9#՗9  Sy"[;ׁ Iw"B [XSlJzf@HSAP⤱-0iVf&E 39G(m "~b"#{A聹u. C!t%}9E1٪*/5+w4r=xlrSժ|$ 8wQ0\t7f8!k윪5d/Ep2O6_^u10R^$덣On{ֆVGr0t㡎-W`,d_UC\`߳åb.א̬A|WVCO~eBf@ "<3ǒӊ2 `"u@F@|`Z_o ~ctYI:6Llq'Trk׈Vt-Vo 뉺w4BOmʛX#_$̫ o^:ֱ [m3Gy"]ZkIzKq#= hAcnkAg@]vˣ ɪv£)D9d~]XQ rrMqmr Ij8/2"kRا/]}p\I ]AJOIJ db#,-d6CӶǃXM;a &Lt3CK:4,G3=pJAoFaɳ<)f3r>[0 ']<8' (mhLjrn5`rP7pFx 畏"8;S|>[1)nDr)O1+@Dza|SXm f$ *Ew^%`sce?Vk1b^pL~kCţwWJ ϛB)GIhxp^ɫ.L}$Gua~uhZwZTH ї(Nbꔿ:% n }fȪ7d ٠hlZ+u<ͥㆷc\sriR%^E&6xa0{yK7M㻇M^~(n3lz:5X~#?I)xj2v|l݊"{&Ҭ:d AO?w@PϡqUD{7xMZvI=,¬B'Յ7/dS\lnp]%aX۰|gB$.7li7'I8롹ȓ* BkuˠB#s(bFO ۄ ꄓ4S+"ك7v5'҄2JYXo iS xqI'[F菾I sAw50pmGϓ&Mz.jzC|D0UJ!PϤKR+HrV,-sZDDsWe:ZT,<+IZKf0jX`QSjru3N4qfjG G1h!ƙ8O}b 'Q ca52sw=⻚dO Wv"ɘ=,H[PB/LWĜպCn]A=LNĂY\# @|RګJxl" 6E217~#^Cpc) j,y?Nj.<`%bm ˰ɥvZi.>0[fms@-*dTȘ ,JJL*7˓u)^+[|h ;쾍  /e Xʻ +<vt"ҍIri+ z\MwM9EX_"wǟ:1FJۯrk<bG9/jnΜ9nTlfMľ@|d^ E\ĕ^'& K{\yNoE\H(hH@^y'M0.X{8.% ri?PG]m;lVoݒc#h6݌:}=_\?iBk vb 5a a ʛDڧy^$ @qW< jeR{7; (vrM#W#ihIe(x7 Cquu*8 n}S,@歃".n8$Pɠ`aUZsJ[vᛍHUE0/ShY܂=t ;7f?k=C~l&Hf{"ވkc8َ NҊD2 mӀzƱf}װU* >jcC#AtƶAYc*BC cQk ]Ku")I_σ LO`] C> (X4΁G۟ & N!c-YЖfKA#MWݞ%Lx鄴/b`C+˃\ڨ)G*SdM]z X'df-z?e#:s>hZvcJ[3R a|a'^r32Yh/M7T|ef4Erk;EY܁>ɣyU0'nxԱ' )y W|% HD4;'6+AqK-2J ,#2o3H/A.um2@4^5՛L8>PdMy_%_RKPOL~PzQ_裮e~+`c}R1t^ J)WCͧrAG TxuLFUA?ӣ$0DURZ5mWUjhWSߥC圮F^;ԡGN1pchoF[ʱ)伀fU҉yp):B^)S2wt>GpNLX^>eĠT"rzHI|\w"~hmMBMܚb"#q##~RJѝpdƊJg` oxw!)+}</Z( f0L'5݌).fQ%92'6ԛܲ+Ș&q** 6J݊H KY0?l+$jKCL@,_D$Z)CDyW┕Vme;i=KB9Y_Xa2Jr̂uPս:n{źBc-4LR:ʹ<÷l~:_fmC+%=XLGa”x,XRDeBw%d@E&b5R)/=G%( Yg(tp>n݊$hLq#`2$TF2/5hv7n-9d+Z]ѡ# hEjt@Έ8Bڔu,;]C09HÜEo{\]9ܧɁ ^!91S&{ZUV )+&mAipAWœTa sb @JѫăgoR{zCտ^W"ѭҥξ,)4)EqۡZ.#-ob-+iO.Wj1@-!u=_>lwt,Y_ cadZr;afO@ %4X=WNsK 6^ ;7KwVUٕ"~ z4vZmrGVcr-޹9WC:G\7@.hx4֜y,C-"#l~-0qa4-b kGuyRs~$￁1ɗ;`n_;IV(8RtCpJ  =`*t-|[ߑVG~->d\=h :60nd1t{@7@LJvpc?,5*h2*(7>Wu4FdBj,bɖǷ K960,$*:LK$84+Ps8/.Z %E:=e3Ybyr'qSS9HA2+;1`'M1ה!{+Wm rWnYz V!n<~q@P(Q_ mV.ٵX k5q``/c9DkԸnlr$=ZÇ,(Cst LOevγbwhsZ:ލf0 W(:}3t?G 1>]l5ϮٻJC+*!l0,$i&xBIT{A>Hi|z+MvFֹm65t$K' i-h}6H_}iP%ql(I[(c]q bnz9B^ס L_^F9"8`h"67X{eK@vr?pgT";zvqR7l?PQMEk,-XƼG]6ݰ7hPS1Tx$j\s[n@T #=GK-E9VC9a䘁2uPVD(+l4%0A ̞i@}F"~@KzB' ҅B G W=2vB@S`t!ݕ=hhl߷+Ds⸁?es&QDYKXU&7l (vrܾ!AI%m}H[px$e8TBM;|U.̔:LcWuۗW}>'N Ü,K}0%d^|SyB9j!:e^!xQ,PK *ZD Qrhö"#+Tl:1J6~/p},Um&JC˸ڜS3 QDV4Q'JȬOg \5bn^ĕY;/y㴛_X+ ӂ)i/ub0D|qn[WƵ|o|>dAP75dQ:_ sաu61cHn\˜L %KbT*X-4G[9pjbiiG0V卯?9ڵ >pĉJGLR`CuQ=_2]B֟@;0GdqTŌZi0% vJi:tjC䰍Hyi/V>Eu98c\J8~Vﰒ4 &۸hP-C~hҪ\$3.01*;&}_a@' N3m}c, ,ߞHnṁ%+5BJs? zls櫟wA!14wʘzc5ͧLںIHF1?-^#o ; ى9:Y!MDL4}a26̞JSUDݚ'`ARE*ZX[s>Ŗ(u2ݩhNml7梜Ek}OO.CFԜm:ܩnG n JHA x3N!+8;V\ovoor6Zʬ[9c }oJ.@6:yXlGx[}wj+O5ٲc :181^J6p;;==B}SS'Sl-Ms6C5*Nq[}ESlIڹAGU2>Լ!'VaXw'r+U!&@}U+5tρEKL34ܦ 蘴&61^&?.P;QAdƸ3zRHIuQ6+DBxZ%cǯtCDv%\53s$#۸C:=w=妤asĂg V6 QLw D15 e2EM8A~ܪ\r>϶2S @{uKѣ!:ͩOu12lqsPY˖t'cn-eE{Q) yDQ`] 1tzmZ _kUSM HL(Vb7Tx{VAQpQqىHyOڴv _)/'2C [\8mmn K]xbKz~y~;R:A#Q֤JMG?h6|+Ӎn=>[_|# y#ZZ8zxyݺCV\1#7e (&ik;ʫ3)r09p1 b A(tM|#(9u^C e%E:gK~WB˔+sғ3G+k^$JF!YNNvP`d]+dʭȲ6}MWPWC+9eA͹̒NQe%5TX\ P6bPE}ēȹ;微.8RCl?>eoil27;a&i2=rLV؞܁^,G|½H 5jj 9f_u; Z2sÊ<'VbPv/H'JeeChAoTwR2U̱y,#l};]%BciOdt.z?lj0ryI^9PG 2QgWp 7_Qٶ՞ 1g^QkItscN5kvrTX~ z2VO0N/e #lЗcȓt^GG%n>( ]1`LA.HAXAFLPAIZ{Cj&[ZxU=]BMHUB=DmMrcڄ8+ѱF F1gbEl~ߨ }|lz5M|WFĝ[%lr(w_37ɩVM>+nbfq/~}%>h 1ni4v"' 9Y0j2T^5=\> cˌ"WNtwDkVtN/2HwE0*Xk 3? +Z[)nzOg6JxgxSnH(Ut<̥³.f51f o"ܑQZ,o.[<))\@w#X"[nvÅʥo'+D/3deu%߇ TqL7$_(J-@yrC(YfvPko]C 6PŦ*gWgr49| Zzq1woR|q9%E 4Q ̷tX-[ bȧ/aLy2de=Χw?vm~0EEdȐFߴ 3SNG,cPORpOzeJ3x n}`'IJ|0z@lәZxϬߝ06W :9Xk0D4K=3vgʁ٦bޟ !狎ڐc*, SVns-^Ef7 h͋Qeݬ5PN dHU:9"*ƒzEAlhn&ip4E+TUoE.}حdlVbH JG/zrUC ·o%* ʇM>ɧJ|H#8ߏ3YrTҾ7`@T4˅oM&7,Jt.NԲs/B Ps`|BevF/*5bAeayx9+ea3I`n=Ͽc.^LFJ _}T5T̓L^N8O 9~%{=gr8]~@ˀݘfo9/ [f3 ȵ0Xo=I/ L;w+(4*{Y-;2C(LZ?5?n TP쓜y_@=΂99;-^hvABۊK@TMm6gT@ujܷR`;ފ5^<鈱'7 M*)YFdJ1$ 9H̽wTB M0_Av*LScmód 8Z *ĊL&2E-<3RE v)QqMJQa/"]iUc]ksf,3^ Z3wO81 z ~ۯG 4,[v 3OEǝIoߖt1K n9бoӀqQTµKX>V06*g93c6{w7]&v`IV`EP5I hBإ %#U`l:SNK7:.Qz.X-UMIn]ߗx֝ƛ Dgyq(U{"sCs  IR70jRr Hz嶅8ToxK[C/ewh kixw  ?tri3넨̒:1`zpDl{N@ѩZ Рߕ`baHZ)^H# ? LJ ~Ԥ=A_\? o-KBrBE"k2#p<0@a!!q~XrQSg+" / vې≭+,#6潢t{ W"PFL8['06_*A"<9/L>Hgb9OݳD͆U(6X;07ۿG@ ܀)I#Lzid<1#N6LI~g8;ka2 &,,p,:DȺh{`*ѧ7aȘZbQ96d0P`CZ^qⴘ; R*)ȕ>c;EL@Yd0HPs׀e= ("k2sjIn7b}J:VuEZhYk:U\\ Y 9\_eIIĖfB]}6PWuDhV]SoԖ.h؋Å|tп֦76n]^}@&l?̞NՇ 7 MY68)+o(G$Ck17zc]7Eyq)*~{kWD_IEeAaR[B 3e, F׻~q0W k),8pR +Z$BVc4' ~+l3z~OWAd?Sb,Ju{Gprҍ1M$v+~m#H(>+ܟhwUE۱gJ>)oep2J"=2>sҙN8$uX6[WsϽWn;Npȫ(-TP2d0%͢PJ։^^Se&FI6J!? ˱?AAE-`q%C8k6 Aծk}:U;r|MS![;o ,;"4vDpҞΛpNK4ml>f`RM$['lRWHӠY:`te*uah:k0a"N|wmPOo >#utZje2?H.bpمoH%~^iȌD>"-50G'*ʎ[GmC]O#շ,WʾAk _bẂODXFT^7,p%. JeO ZҼi i}eī^ &d!",7xfxyDF"fN谥K2+4Qo"E5:\j.G J'.&QZ⨏o,p]p r vҽ ୀcDeX-WL@GW:xP+۞p)F N *{ģ۾1zvdrZtf{GOOq睶}xtZ2}FυnР7ǘ1r~ yġؼx؍ A:M(GL`]0G{9 =ѻua% MI{k*iȼѫ]qVLHu31 u<}!WE[% .]7ڬx5W#('>#.VNs\d -'.{NT yqk̢hGp+p^V3hw]z[TMG9]1AE[CqJBpMH\{I29kphѹ4\ J k4|ņ8`tq!E嫻:iAEV}X1DJDvxàxΧv'1ҔB&;jʗ\:wb-"J>3S4..{{cL]21,|41,n)UE1Ne-ыWbM!9M -=gFnL{2Ve7um\[0IU/6`ߧS|t<LʲTQN(GޖoJ="ah_'0tn.% S֠Ms[,͊Q@ZC>4e`k+ %]:??az $cÒ"S gX* /M&'ŝKH|v0mX9]wz;w+.;bE})L;'`r; lē|C Im\=QQ/>W"[Q+97AEuDȸqŌZޢC9ꗮdb .h8+eQvR!mD45.5FMH9/p|zD&f/keϘk_~q+hV'׾}ٷAg^Wsnb`p7Y ] `EĎ/M)>1O.نԒ?@}'R ZalygzT fib`v#z'^*u%1Y!3VPdz"ikڒk8O4̚d(GWtk͌$8^z@syj}2ZفY XI '\öQ'Ĕ zR<Wk Y^i؍y&^ @RcjO Y*K Х5زLZi  t_Z惹_V܎a|!'XT ')!c,r6]tQ6{ZwFG `jE9mmkυA^PÒI } AFPDŌ{Y}o(6`\_hSEsh0/<Ŏl 6twrM&Á?Y`ʵ8jS{,+}Rx*a_lsMOǧ@ڸN4+V4s֗s\=Yȁ A7oڢ< ᛽l$8Iݭ% K.'%tP:E{.!j6%sg,͟/FT\g\8V2\2 v>d OI%>+w5t34K\ <QLIZn=SR# }1R3S yœeJDv``}"a\3(K:h JY  qX6S%/Jp_)I\bqZ?Lo!煹w~Nn&%3ڌ9Mv_b?+(?&"l釺Z牠FNgJK0w4e+^Xm#▁I#EZ?޾M Fw'^4/FOBˡ*k#m`m~Y 4b r8Xs8מ+'d}k(?f( $1M]W ȸvO/>R߬lw.'dDT;ZaxhcxËOGhaKN!t)C9$uiEGrփgaJݭt$`=c&,Zҍ3F!N=Kv.-h/I:> ʥ'4Zx@k?7z4|>LCPjg}סPtI(Keml(15"zVL!!v5#vDKon'.BZ)XkXO_R5=!+bƌy<@X&j^^w]6"{OJ2fPycOM+3Ezi3(kK&=OI[:kYC]md !Bѵ@[85ZZ~g 0\@wQ{"p y~⣳vm$f╃>|`^=J}t瀝f .-oXBudT+hsYJd؂V}ŤX{FWa)7e<`2Bi~SJ0b3^,P(}:|eBQר֦V(sn % p\)au;-J ӛ,t0g=kWTxtH .$Yzge[TG$E?_N E,6ka."BN.` p]Sހ׃2_R8yTͤ03(lejbшEZݪB65f:\U{b`[u6_oӆJ^ڠb6kΛow'=F9'e/#o'IG: )FvYJMOz^YϢG*a"rc\9R;V Uġ<#=:qHeVkhI-oZ^72^\!->A$TއN+|(!f c$ѭJCŊ_ŧsFGr&}1%bRwMJzlm-Dj8H&BXp/gg|TQNJs޾¥(m^2E6,:ڣ.I&z.]?8\굱H$&1t :g a߅FX ?ȥ 6/)L\ *b?p26pJdUrٛ}9@P8cK|JrM;:v5Y=򫜈H\rVtڈҷ"g+$&)Hev |{i`=j ?CCRl((^ ,oz~d4WYfrt~<=@5_)K9dR }!ȯ \EQsaӻEQ  l lɈurX[ Kk@OC|d]Sߴ@E9u;dG]eAa_Jyh8/f iBt+Lo(eѹJO8L,"}`LWN-&*t?j'7UZ1/Kg5+Wqd12Jq;7D(]NEM2p?0 bLk~QsK ȗdN}^5`#y̎hOö؈VeÁY Y ɦ3n .pǺG8;XiM_WuOv4!XTY~|މn0Hyv~^ސ%'O*ҿf[͵_mzLlגp3({%bc+蔣ux/.Fޤ$x4"Vy6UT".,6rHK6t%:;?mGCn[ڵ:4Mg˗}Xh2BfP x*kqBzUXt Zc,d!,sZ~کlQ7p4 |tA3鋀kB./#X),ܦ2P[Ҝ/B`h/ۥ+Sb~m 8! W!d+T] :GQiצPgqGl` jeZH| ul, 5fqQR|edy] dS8fo:zF!CQv5mɳIÓj'8H~m@5\)w^qK =@A{Э 8cH%UӚN4r/"d{wsقHl}T5t"n1ٞJ_%+bv'䍶 gId& 9kqGQT|cN7WDIvIP9QиjClqO/;ƁCGb Lũ/5\od/۶x+ 6j" S!DEpV^Ώ4@P n+Ԩ;Y9񾞉 f j`s?*>nyV0E(alMŞ S],M)wAkCWScrն{3.j pL),/0Q t:9:ha]s?)4tc{9i$|#‚jveJغАBL2 7;3H ƹ!>)Uǽ#[ :kfB?pouSٶ{ʫ0V;6t/VPQmh{ E(oZ0.U)p!]:  `N NNѤ6;Dּ4;6ti ~X.;v<@"y ;-8M83<߶A$kf~~]aq@% Xknk>ʋW Pav(LMm(CybRbƃq8> D odM[GǏd>i,ߌ֨5Ⱦ0/HݎBQy4\%gOGζf]'l(.Qxhw- 4ë GQYsk :Sy Y6%X|Ua8IZV8bE5bX8_Bخje@'kimJ9#_WRemR|.1y}ȶ71)Ndhx^WpYjH{EKf|k'x61_MvIzAax:~Vr2Er&Ptw{)t9#?h„m)u ]UN;ȲO:VezGOfB7^A` +ihle9k|@Sv{&iOAa9ct'cG9TxJRg`~Z-ТcaS@SA=KFq@ xj1:;.uS).bMJ(1`yP Qc 3>ga֪zЕN(B_cҕ^pɲ(QN0g ,l3t Θұ f'Ą9kޱc=,A@a;֏ջ \;Fڪeָ_ZNdVۿ.e I@oRQ݊s+?c@h EB(MUQvdXxv_+485&pM:0 -)eߪhb'|t7gy$*AoQټH%yNt^]NK '¶*>x?\.9Eٍ 6ҙH&eIrU[DJ]\)E 2ХgԿ4Oe.WsYq(@Cr[4RU4v' JO2 lVxrU5kA#<,F c|aej˟rǃ&[[YZGözBM=rH>jK(&򀮭XѺICHY[8aDWU,.ld҃2 B[^pwh#d>%ZwT 2C?w ^\Hv*(LMA;>Ónev5,^Jԩv*cbƟaT!,ZYsqKjS8gt$.0BXFE~2QvZKiߍy*9"`bM@{&z!!簚h.:/#}PGlz |8P7yZI'& w=n\Tn mHA l?ҞXXM}rXJ."Ye{ ӧ7~3(^͂Zl _2̤hP# ?֊=_h2iI(aW/F؜-?r;Bw; -0W]lj0w5Ph9͋ނ<±JC^T∣6д4Yk8&|J@-,σskߚBq&wR !TT@/,/80jo_E4y[$uهXߏyΔ|?t`hƝI;(wӕn|qR9teAd(byLjyqVFIf:z%1oޟkɶS! ڕ6esbqJn+iXGt^*0)T~eST+p J*7i#q ̮ژ^|9OweSA")軺.[d5Ma;@^U%cI٪FN 'v*sb\KZf\+Іk,^jCEttJ&9~Nap⯍߂3|FɌga޾HaDRcW,<+7YPV .-?[@>p;9Xz?TXЃm,"sD4ƉgPxkM 7j{+h 7!lJCBA%A'>AҎo 8@zUt{ڕT{]w.g[6-M ~POo I'IMTRiypɟvJQIg$v`Y[IgXm" j~M[d'ېRCwQh[0bFazl{.yarSrTM)8Yk#͛&C>67 70o˩vg, =N6l#3Ad˽68k6M]8-tPUl#F:'1Qx:QlFELs;N>l0]"bzt=Vi]gaswW#8)HZ&a s+/ E=e':XjBDr趀{e]5 :!<]xpYF~95{IemʵBf{3a z1Go5 +SgݦT|X~idWZh!R.|Lb\+0YqI) @zg?Gy:yn ¡\&d'Cf$`ݜ yh{S<-?Xy^%+0WWV&H⽌d,0}Y}JE^~jrD^[t(sD^Ơe.v2K4%з __]0Nˌa T0UyکP#|۵9-!',u󡧺BwC3BoNQ0߲uy<;[l~kSi}ݫ Bȉ FAf e ,`j|T0>kfG>$n8> a Xn$֫}i\ &YD$WvI2:*@TT[Ɨ⼪ H =qb˓6Ƥ"2e.C-~jāJNճ}n7H`.b59&%j&aBtv9J8G0'kWͲ1DffF51l^+8.z@fD@-B KZLaߴVnG&fBRzSF{VgRdY~$t |qoazQA'S a=QLۦ7Ga@GE]J*¬OVR2OPgڤȻtd2\-XV뎤'9埸 `"ڊP>ʞjPm`ALsbw"`J̮̀ۊ+=SƎ״UޒUլ/7_1IAy9C@׸=4ȳd "U,W3L_gb?#'sۺ'b bώ ݑ 22vM!%:!W r ]c[{˜bبQj$> 9#K6j^y./XRAIJ $q%mҬ0邟N*r.) bg4k|bhq<_vUD 5ݫOeb?Nڍ12Lrv5pUk16 azI"J,kWt,U)o7ɭ}RC&FC*#:D~=$>+/I=H˦𦁆ȧgR$'Ugz@Ҽ5HY콆e`'/aȫ@e,3#MWPĥU7/ Yb+1]p-WJyz%v#3!˱15OJē8`ؤɕQBv9QM'',^˃Fgβ@~XAEp r`< Nd^7UzDRED7kR'D&bH]+v/m~#('(OqRi8uyۓr,#ɞ_~pNP!wM*R`9zl֟ܨc( D4r{9[V^Q"̱OS|]F8Oз=ρ5 .Dfv tPTb×Bw,E`Ѻ>TD]V 5arqQC`Ww8ͳD Wjzs}{tvIuea'.:Pjۅ Uf +P- CM8i gkqZ"`WnYH].HLJerf^V]J aVƔ’w,w&vKL_ ψfu W4ji\!D5L"{ՠ{0?7Fkdǝ0zWsC_<>3Yy ɲœcSU:7:~)KTX47wQ6N+pk=Mu8dSRx~Yo6&!a$8] |DuZB/%v w:̹֠vRJ/y!l ~-~K\:v3N1&Egq֙G @~58)?VԺ< Fr|$E#e pfn̏ WX 9./GFoAƩbefNY.VR3CUl13,D&|9YMCY% =sw%Gaǁ}/6xleo}j(HPr|R)0.s䐻e^h̳ޛ6b#Mt, I&r4{/l-`;9n -?D@eNfmمCvj}mQw_UZ[eg)~(N5i>péobWΞӘXPT ȍ+[l"S[ҷx|zoYI3`[P_KŇ|>,[9tQJ(@7+[C w~YmvEydQv˧ њz3ˤi\++6pIT%lA."j˄: z6{Wau%Yr|cHQ'OjrcǜBXq\E 㿁YblDYVA_ts5U.C/%MvAI t%e,< & ~uw~:kFM{%W*<~*@H/,xu2baJڏNk,<;v#RΎH;J!ND( Tؚ8dA+PU]QMN p0},V.fj ;t}F#r3ۧ\{'ܩ({ZQ41ߥU-=dHD,8!NSSaH+gVw e pg\?9m2X$CROL!n dCU4|:y7|pc3?ynTtXT@ppEyS@9\Jec}ӣ؄\?A 3@:*V{eucک_3Noob^p 'Y +ӗAM̃=Tl\.pWRY8hWy!uLLPMCPm'Pq[ ˯YDygt%W">~}<{NVɨٝCU1oJa<"j মVE|V(2;nF6HM _Pm{R (/jѽ={uAB{rF]y⨨N -<:#8 .oj]P66r?+ҕmd Rh>Fb~JHs9^-_s>up)(H5h_XE v!oL"(3(dX"BrP3q[qRhϦ9>9$³$̰YS2IXюЫS˘@^nLP+sз^*6R4 $p#sBBe"zc{q[aLp*Zh#nBPDvX< y&;4!rZOna+!`k)Ӯ ps} C(ui+ ,<( ;S C_*3k%\%Tǣ}$m8RRBDk;X0~yPKg:k-KspYzW3w07joAG#JZ۽nDZB~IJ;ehy랤/#^( jX/l8A0̧T<2"?rN.a}