samba-winbind-4.15.8+git.500.d5910280cc7-150400.3.11.1 >  A bpp9|^7OBŅ!~C<Τ}62 u1澓|UV%b*.wf%B nMHtɌ66tTfh:n 3 lHi#:dq!3;fT1W}? ɴ>DœEAw k6H"Fi*m Sv]m4rQ ~Y/@U\V˕]Ð|JLy]JK` feaa61bcce36978862d60bad30759b9939e2cc3aede369c1557664dfc26120e3691379c0d7e7f37f53f61bc43e951a2a18abda08bpp9|x6a]Bxh}4ܵXZ"aLY5>%"Zg(Y"p5^%W,9u!F.ǔ,-=FBI=vTtaZ] V˻2efGoud[Bn$cz F؆\zūgkY\7<‡%Dzu $m?<;L"Q\)Ӥ=Boi㰊Bܡn"0(sALEoxdLYL'hw\kp*uQpz5(4>pLaT?aDd+ 9 Q *07),X z     P4x@8(: 8:9>:O =S>S?S@SBSFTGT$HThITXTYTZUL[UP\Ul]U^VbWcXydXeXfYlYuYvY\ w\x\y]4z```````a@Csamba-winbind4.15.8+git.500.d5910280cc7150400.3.11.1Winbind Daemon and ToolThis is the winbind-daemon and the wbinfo-tool.bp goat02SUSE Linux Enterprise 15SUSE LLC GPL-3.0-or-laterhttps://www.suse.com/Productivity/Networking/Sambahttps://www.samba.org/linuxx86_64# we need this group for squid (ntlmauth) # read access to /var/lib/samba/winbindd_privileged getent group winbind >/dev/null || groupadd -r winbind if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : for service in winbind.service ; do sysv_service=${service%.*} if [ ! -e /usr/lib/systemd/system/$service ] && [ ! -e /etc/init.d/$sysv_service ]; then mkdir -p /run/systemd/rpm/needs-preset touch /run/systemd/rpm/needs-preset/$service elif [ -e /etc/init.d/$sysv_service ] && [ ! -e /var/lib/systemd/migrated/$sysv_service ]; then /usr/sbin/systemd-sysv-convert --save $sysv_service || : mkdir -p /run/systemd/rpm/needs-sysv-convert touch /run/systemd/rpm/needs-sysv-convert/$service fi done fi/sbin/ldconfig if test ${1:-0} -eq 1; then ln -fs /etc/sysconfig/network/scripts/samba-winbindd /etc/sysconfig/network/if-down.d/55-samba-winbindd ln -fs /etc/sysconfig/network/scripts/samba-winbindd /etc/sysconfig/network/if-up.d/55-samba-winbindd else for if_case in if-down.d if-up.d; do test -h /etc/sysconfig/network/${if_case}/samba-winbindd || \ continue rm -f /etc/sysconfig/network/${if_case}/samba-winbindd ln -fs /etc/sysconfig/network/scripts/samba-winbindd /etc/sysconfig/network/${if_case}/55-samba-winbindd done fi if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$YAST_IS_RUNNING" != "instsys" ]; then /usr/bin/systemctl daemon-reload || : fi for service in winbind.service ; do sysv_service=${service%.*} if [ -e /run/systemd/rpm/needs-preset/$service ]; then /usr/bin/systemctl preset $service || : rm "/run/systemd/rpm/needs-preset/$service" || : elif [ -e /run/systemd/rpm/needs-sysv-convert/$service ]; then /usr/sbin/systemd-sysv-convert --apply $sysv_service || : rm "/run/systemd/rpm/needs-sysv-convert/$service" || : touch /var/lib/systemd/migrated/$sysv_service || : fi done fi [ -z "${TRANSACTIONAL_UPDATE}" -a -x /usr/bin/systemd-tmpfiles ] && /usr/bin/systemd-tmpfiles --create samba.conf || : PNAME=samba SUBPNAME=-winbind SYSC_TEMPLATE=/usr/share/fillup-templates/sysconfig.$PNAME$SUBPNAME # If template not in new /usr/share/fillup-templates, fallback to old TEMPLATE_DIR if [ ! -f $SYSC_TEMPLATE ] ; then TEMPLATE_DIR=/var/adm/fillup-templates SYSC_TEMPLATE=$TEMPLATE_DIR/sysconfig.$PNAME$SUBPNAME fi SD_NAME="" if [ -x /bin/fillup ] ; then if [ -f $SYSC_TEMPLATE ] ; then echo "Updating /etc/sysconfig/$SD_NAME$PNAME ..." mkdir -p /etc/sysconfig/$SD_NAME touch /etc/sysconfig/$SD_NAME$PNAME /bin/fillup -q /etc/sysconfig/$SD_NAME$PNAME $SYSC_TEMPLATE fi else echo "ERROR: fillup not found. This should not happen. Please compare" echo "/etc/sysconfig/$PNAME and $TEMPLATE_DIR/sysconfig.$PNAME and" echo "update by hand." fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable winbind.service || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services test "$DISABLE_STOP_ON_REMOVAL" = yes -o \ "$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0 /usr/bin/systemctl stop winbind.service ) || : fi/sbin/ldconfig if [ $1 -eq 0 ]; then /usr/sbin/pam-config --delete --winbind if [ -x /usr/sbin/nscd ]; then /usr/sbin/nscd -i passwd /usr/sbin/nscd -i group fi fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ $1 -eq 0 ]; then # Package removal for service in winbind.service ; do sysv_service="${service%.*}" rm "/var/lib/systemd/migrated/$sysv_service" || : done fi if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -ge 1 ]; then # Package upgrade, not uninstall if [ -x /usr/bin/systemctl ]; then ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services test "$DISABLE_RESTART_ON_UPDATE" = yes -o \ "$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0 /usr/bin/systemctl try-restart winbind.service ) || : fi fi<r9ȸ%s8I^큤큤AAbobobobobobobobo4bobobobobobobobobodbd95eb7e0d1e8c973d39fb53be9be46276b21bcacd8b0ae1adeeb63651f6fbea676af835bac5e037fd6f6d9950ea49ff3f39bc693d479069190927c1c53083993a1caa0988f1da58a965d7a954f36d791af7b63f8f4d458a49b7b48dedc79091105a13ccbc39043289c73035e8ad5cb2a283a3c83442035d990afb0c12efc79a7ddb90817eba155ea3e02da10f14a17bb0551127573de9fde68325813e4c40448c787a47c3127f9c5fdde2848eeac71a06e22cbf997c132d74ada549c086e0d2bf4fe033c7d35e0d08b9fe78f1618e19745e03e17e4e3e01eddaefb82785d6f9a16eb3e6b8e2bf0b1ee56f8a98e8ed307633badc5f3c02d8a82a4293ea47439e5da51b9d0a69da32889634f1857fca94589bf4d1c9822012b4466610158403e8c17bd368a47622a7800843a6f6183767c34e4507fff21aa4f6d8c6d9b9328907c41ad3dfa8a4474e47c60e1e12374b0b055a03ebdba8e79ea2e10a015ad4aefc6b4b0325dd3211474ac785379683cc4e7f17e211327fb9d536c1ff9138de03eservice@@rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootwinbindsamba-4.15.8+git.500.d5910280cc7-150400.3.11.1.src.rpmconfig(samba-winbind)samba-client:/usr/sbin/winbinddsamba-winbindsamba-winbind(x86-64)@ @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    /bin/bash/bin/sh/bin/sh/bin/sh/bin/sh/sbin/ldconfig/sbin/ldconfig/usr/sbin/groupaddconfig(samba-winbind)coreutilslibMESSAGING-samba4.so()(64bit)libMESSAGING-samba4.so(SAMBA_4.15.8_GIT.500.D5910280CC7150400.3.11.1_SUSE_OS15.0_X86_64)(64bit)libads-samba4.so()(64bit)libads-samba4.so(SAMBA_4.15.8_GIT.500.D5910280CC7150400.3.11.1_SUSE_OS15.0_X86_64)(64bit)libauth-samba4.so()(64bit)libauth-samba4.so(SAMBA_4.15.8_GIT.500.D5910280CC7150400.3.11.1_SUSE_OS15.0_X86_64)(64bit)libauthkrb5-samba4.so()(64bit)libauthkrb5-samba4.so(SAMBA_4.15.8_GIT.500.D5910280CC7150400.3.11.1_SUSE_OS15.0_X86_64)(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libc.so.6(GLIBC_2.7)(64bit)libc.so.6(GLIBC_2.8)(64bit)libcli-ldap-common-samba4.so()(64bit)libcli-ldap-common-samba4.so(SAMBA_4.15.8_GIT.500.D5910280CC7150400.3.11.1_SUSE_OS15.0_X86_64)(64bit)libcli-smb-common-samba4.so()(64bit)libcli-smb-common-samba4.so(SAMBA_4.15.8_GIT.500.D5910280CC7150400.3.11.1_SUSE_OS15.0_X86_64)(64bit)libcliauth-samba4.so()(64bit)libcliauth-samba4.so(SAMBA_4.15.8_GIT.500.D5910280CC7150400.3.11.1_SUSE_OS15.0_X86_64)(64bit)libcmdline-samba4.so()(64bit)libcmdline-samba4.so(SAMBA_4.15.8_GIT.500.D5910280CC7150400.3.11.1_SUSE_OS15.0_X86_64)(64bit)libcom_err.so.2()(64bit)libcommon-auth-samba4.so()(64bit)libcommon-auth-samba4.so(SAMBA_4.15.8_GIT.500.D5910280CC7150400.3.11.1_SUSE_OS15.0_X86_64)(64bit)libdbwrap-samba4.so()(64bit)libdbwrap-samba4.so(SAMBA_4.15.8_GIT.500.D5910280CC7150400.3.11.1_SUSE_OS15.0_X86_64)(64bit)libdcerpc-binding.so.0()(64bit)libdcerpc-binding.so.0(DCERPC_BINDING_0.0.1)(64bit)libdcerpc-samba-samba4.so()(64bit)libdcerpc-samba-samba4.so(SAMBA_4.15.8_GIT.500.D5910280CC7150400.3.11.1_SUSE_OS15.0_X86_64)(64bit)libdcerpc-samba4.so()(64bit)libdcerpc-samba4.so(SAMBA_4.15.8_GIT.500.D5910280CC7150400.3.11.1_SUSE_OS15.0_X86_64)(64bit)libdcerpc-server-core.so.0()(64bit)libdcerpc-server-core.so.0(DCERPC_SERVER_CORE_0.0.1)(64bit)libflag-mapping-samba4.so()(64bit)libflag-mapping-samba4.so(SAMBA_4.15.8_GIT.500.D5910280CC7150400.3.11.1_SUSE_OS15.0_X86_64)(64bit)libgenrand-samba4.so()(64bit)libgenrand-samba4.so(SAMBA_4.15.8_GIT.500.D5910280CC7150400.3.11.1_SUSE_OS15.0_X86_64)(64bit)libgensec-samba4.so()(64bit)libgensec-samba4.so(SAMBA_4.15.8_GIT.500.D5910280CC7150400.3.11.1_SUSE_OS15.0_X86_64)(64bit)libgnutls.so.30()(64bit)libgnutls.so.30(GNUTLS_3_4)(64bit)libgnutls.so.30(GNUTLS_3_6_3)(64bit)libgse-samba4.so()(64bit)libgse-samba4.so(SAMBA_4.15.8_GIT.500.D5910280CC7150400.3.11.1_SUSE_OS15.0_X86_64)(64bit)libidmap-samba4.so()(64bit)libidmap-samba4.so(SAMBA_4.15.8_GIT.500.D5910280CC7150400.3.11.1_SUSE_OS15.0_X86_64)(64bit)libkrb5.so.3()(64bit)libkrb5.so.3(krb5_3_MIT)(64bit)libkrb5samba-samba4.so()(64bit)libkrb5samba-samba4.so(SAMBA_4.15.8_GIT.500.D5910280CC7150400.3.11.1_SUSE_OS15.0_X86_64)(64bit)liblibcli-lsa3-samba4.so()(64bit)liblibcli-lsa3-samba4.so(SAMBA_4.15.8_GIT.500.D5910280CC7150400.3.11.1_SUSE_OS15.0_X86_64)(64bit)liblibcli-netlogon3-samba4.so()(64bit)liblibcli-netlogon3-samba4.so(SAMBA_4.15.8_GIT.500.D5910280CC7150400.3.11.1_SUSE_OS15.0_X86_64)(64bit)liblibsmb-samba4.so()(64bit)liblibsmb-samba4.so(SAMBA_4.15.8_GIT.500.D5910280CC7150400.3.11.1_SUSE_OS15.0_X86_64)(64bit)libmsrpc3-samba4.so()(64bit)libmsrpc3-samba4.so(SAMBA_4.15.8_GIT.500.D5910280CC7150400.3.11.1_SUSE_OS15.0_X86_64)(64bit)libndr-samba-samba4.so()(64bit)libndr-samba-samba4.so(SAMBA_4.15.8_GIT.500.D5910280CC7150400.3.11.1_SUSE_OS15.0_X86_64)(64bit)libndr-samba4.so()(64bit)libndr-samba4.so(SAMBA_4.15.8_GIT.500.D5910280CC7150400.3.11.1_SUSE_OS15.0_X86_64)(64bit)libndr-standard.so.0()(64bit)libndr-standard.so.0(NDR_STANDARD_0.0.1)(64bit)libndr.so.2()(64bit)libndr.so.2(NDR_0.0.1)(64bit)libndr.so.2(NDR_0.0.4)(64bit)libndr.so.2(NDR_0.2.0)(64bit)libnpa-tstream-samba4.so()(64bit)libnpa-tstream-samba4.so(SAMBA_4.15.8_GIT.500.D5910280CC7150400.3.11.1_SUSE_OS15.0_X86_64)(64bit)libnss-info-samba4.so()(64bit)libnss-info-samba4.so(SAMBA_4.15.8_GIT.500.D5910280CC7150400.3.11.1_SUSE_OS15.0_X86_64)(64bit)libpopt.so.0()(64bit)libpopt.so.0(LIBPOPT_0)(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.2.5)(64bit)libreplace-samba4.so()(64bit)libreplace-samba4.so(SAMBA_4.15.8_GIT.500.D5910280CC7150400.3.11.1_SUSE_OS15.0_X86_64)(64bit)libsamba-credentials.so.1()(64bit)libsamba-credentials.so.1(SAMBA_CREDENTIALS_1.0.0)(64bit)libsamba-debug-samba4.so()(64bit)libsamba-debug-samba4.so(SAMBA_4.15.8_GIT.500.D5910280CC7150400.3.11.1_SUSE_OS15.0_X86_64)(64bit)libsamba-errors.so.1()(64bit)libsamba-errors.so.1(SAMBA_ERRORS_1)(64bit)libsamba-hostconfig.so.0()(64bit)libsamba-hostconfig.so.0(SAMBA_HOSTCONFIG_0.0.1)(64bit)libsamba-modules-samba4.so()(64bit)libsamba-modules-samba4.so(SAMBA_4.15.8_GIT.500.D5910280CC7150400.3.11.1_SUSE_OS15.0_X86_64)(64bit)libsamba-passdb.so.0()(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.2.0)(64bit)libsamba-security-samba4.so()(64bit)libsamba-security-samba4.so(SAMBA_4.15.8_GIT.500.D5910280CC7150400.3.11.1_SUSE_OS15.0_X86_64)(64bit)libsamba-sockets-samba4.so()(64bit)libsamba-sockets-samba4.so(SAMBA_4.15.8_GIT.500.D5910280CC7150400.3.11.1_SUSE_OS15.0_X86_64)(64bit)libsamba-util.so.0()(64bit)libsamba-util.so.0(SAMBA_UTIL_0.0.1)(64bit)libsamba3-util-samba4.so()(64bit)libsamba3-util-samba4.so(SAMBA_4.15.8_GIT.500.D5910280CC7150400.3.11.1_SUSE_OS15.0_X86_64)(64bit)libsamdb-common-samba4.so()(64bit)libsamdb-common-samba4.so(SAMBA_4.15.8_GIT.500.D5910280CC7150400.3.11.1_SUSE_OS15.0_X86_64)(64bit)libsecrets3-samba4.so()(64bit)libsecrets3-samba4.so(SAMBA_4.15.8_GIT.500.D5910280CC7150400.3.11.1_SUSE_OS15.0_X86_64)(64bit)libsmbconf.so.0()(64bit)libsmbconf.so.0(SMBCONF_0.0.1)(64bit)libsmbd-shim-samba4.so()(64bit)libsmbd-shim-samba4.so(SAMBA_4.15.8_GIT.500.D5910280CC7150400.3.11.1_SUSE_OS15.0_X86_64)(64bit)libsocket-blocking-samba4.so()(64bit)libsocket-blocking-samba4.so(SAMBA_4.15.8_GIT.500.D5910280CC7150400.3.11.1_SUSE_OS15.0_X86_64)(64bit)libsys-rw-samba4.so()(64bit)libsys-rw-samba4.so(SAMBA_4.15.8_GIT.500.D5910280CC7150400.3.11.1_SUSE_OS15.0_X86_64)(64bit)libtalloc.so.2()(64bit)libtalloc.so.2(TALLOC_2.0.2)(64bit)libtdb.so.1()(64bit)libtdb.so.1(TDB_1.2.1)(64bit)libtevent-util.so.0()(64bit)libtevent-util.so.0(TEVENT_UTIL_0.0.1)(64bit)libtevent.so.0()(64bit)libtevent.so.0(TEVENT_0.9.12)(64bit)libtevent.so.0(TEVENT_0.9.14)(64bit)libtevent.so.0(TEVENT_0.9.20)(64bit)libtevent.so.0(TEVENT_0.9.21)(64bit)libtevent.so.0(TEVENT_0.9.36)(64bit)libtevent.so.0(TEVENT_0.9.37)(64bit)libtevent.so.0(TEVENT_0.9.9)(64bit)libtrusts-util-samba4.so()(64bit)libtrusts-util-samba4.so(SAMBA_4.15.8_GIT.500.D5910280CC7150400.3.11.1_SUSE_OS15.0_X86_64)(64bit)libutil-tdb-samba4.so()(64bit)libutil-tdb-samba4.so(SAMBA_4.15.8_GIT.500.D5910280CC7150400.3.11.1_SUSE_OS15.0_X86_64)(64bit)libwbclient.so.0()(64bit)libwbclient.so.0(WBCLIENT_0.10)(64bit)libwbclient.so.0(WBCLIENT_0.13)(64bit)libwbclient.so.0(WBCLIENT_0.9)(64bit)libwinbind-client-samba4.so()(64bit)libwinbind-client-samba4.so(SAMBA_4.15.8_GIT.500.D5910280CC7150400.3.11.1_SUSE_OS15.0_X86_64)(64bit)pam-configrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)samba-clientsamba-winbind-libs4.15.8+git.500.d5910280cc7-150400.3.11.13.0.4-14.6.0-14.0-15.2-14.15.8+git.500.d5910280cc74.15.8+git.500.d5910280cc74.14.3b@b@ba@banopower@suse.comscabrero@suse.denopower@suse.comscabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comddiss@suse.comnopower@suse.comdmulder@suse.comdmulder@suse.comnopower@suse.comscabrero@suse.descabrero@suse.dedimstar@opensuse.orgscabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comnopower@suse.comnopower@suse.comscabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comnopower@suse.comscabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.denopower@suse.comscabrero@suse.deddiss@suse.comddiss@suse.comddiss@suse.comscabrero@suse.descabrero@suse.dedmulder@suse.comnopower@suse.comscabrero@suse.descabrero@suse.dedmulder@suse.comscabrero@suse.descabrero@suse.denopower@suse.comnopower@suse.comnopower@suse.comdmulder@suse.comscabrero@suse.denopower@suse.comddiss@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comscabrero@suse.denopower@suse.comnopower@suse.comjmcdonough@suse.comnopower@suse.comscabrero@suse.denopower@suse.comnopower@suse.comddiss@suse.comddiss@suse.comnopower@suse.comnopower@suse.comddiss@suse.comnopower@suse.comdmulder@suse.comdmulder@suse.comddiss@suse.comscabrero@suse.dedmulder@suse.comddiss@suse.comnopower@suse.comjengelh@inai.dedmulder@suse.comscabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comdmulder@suse.comdmulder@suse.comjmcdonough@suse.comdmulder@suse.comscabrero@suse.dedmulder@suse.comscabrero@suse.dedmulder@suse.comdmulder@suse.comvcizek@suse.comdmulder@suse.comdmulder@suse.comnopower@suse.comscabrero@suse.dejmcdonough@suse.comscabrero@suse.deaaptel@suse.comjengelh@inai.dedimstar@opensuse.orgdmulder@suse.comjmcdonough@suse.comdavid.mulder@suse.comjmcdonough@suse.comaaptel@suse.comdmulder@suse.comscabrero@suse.comscabrero@suse.comkukuk@suse.dedavid.mulder@suse.comscabrero@suse.comrbrown@suse.comdmulder@suse.comscabrero@suse.comdimstar@opensuse.orgscabrero@suse.comaaptel@suse.comnopower@suse.comnopower@suse.comaaptel@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comddiss@suse.comnopower@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comdmulder@suse.comnopower@suse.comjmcdonough@suse.comaaptel@suse.comkukuk@suse.comkukuk@suse.denopower@suse.comaaptel@suse.comdmulder@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comddiss@suse.comjmcdonough@suse.comddiss@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comjmcdonough@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comtchvatal@suse.comlmuelle@suse.comnopower@suse.comcrrodriguez@opensuse.orglmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comnoel.power@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comnopower@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.commpluskal@suse.comlmuelle@suse.comnopower@suse.deddiss@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.denopower@suse.delmuelle@suse.comnopower@suse.deddiss@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.com- CVE-2022-32746: samba: Use-after-free occurring in database audit logging; (bso#15009); (bso#15096); (bsc#1201490). - CVE-2022-32745: samba: ldb: AD users can crash the server process with an LDAP add or modify request; (bso#15008); (bso#15096); (bsc#1201492). - CVE-2022-2031: samba, ldb: AD users can bypass certain restrictions associated with changing passwords; (bso#15047); (bsc#1201495); - CVE-2022-32742:SMB1 code does not correct verify SMB1write, SMB1write_and_close, SMB1write_and_unlock lengths; (bso#15085); (bsc#1201496). - CVE-2022-32744: samba, ldb: AD users can forge password change requests for any user; (bso#15074); (bso#15047); (bsc#1201493).- Update to 4.15.8 * Use pathref fd instead of io fd in vfs_default_durable_cookie; (bso#15042); * Setting fruit:resource = stream in vfs_fruit causes a panic; (bso#15099); * Add support for bind 9.18; (bso#14986); * logging dsdb audit to specific files does not work; (bso#15076); * vfs_gpfs with vfs_shadowcopy2 fail to restore file if original file had been deleted; (bso#15069); * netgroups support removed; (bso#15087); (bsc#1199247); * net ads info shows LDAP Server: 0.0.0.0 depending on contacted server; (bso#14674); (bsc#1199734); * waf produces incorrect names for python extensions with Python 3.11; (bso#15071); * smbclient commands del & deltree fail with NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100); (bsc#1200556); * vfs_gpfs recalls=no option prevents listing files; (bso#15055); * waf produces incorrect names for python extensions with Python 3.11; (bso#15071); * Compile error in source3/utils/regedit_hexedit.c; (bso#15091); * ldconfig: /lib64/libsmbconf.so.0 is not a symbolic link; (bso#15108); * smbd doesn't handle UPNs for looking up names; (bso#15054); * Out-by-4 error in smbd read reply max_send clamp; (bso#14443); - Move pdb backends from package samba-libs to package samba-client-libs and remove samba-libs requirement from samba-winbind; (bsc#1200964); (bsc#1198255); - Use the canonical realm name to refresh the Kerberos tickets; (bsc#1196224); (bso#14979);- Fix smbclient commands del & deltree failing with NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100); (bsc#1200556).- Revert NIS support removal; (bsc#1199247);- Use requires_eq macro to require the libldb2 version available at samba-dsdb-modules build time; (bsc#1199362);- Add missing samba-client requirement to samba-winbind package; (bsc#1198255);- Update to 4.15.7 * Share and server swapped in smbget password prompt; (bso#14831); * Durable handles won't reconnect if the leased file is written to; (bso#15022); * rmdir silently fails if directory contains unreadable files and hide unreadable is yes; (bso#15023); * SMB2_CLOSE_FLAGS_FULL_INFORMATION fails to return information on renamed file handle; (bso#15038); * vfs_shadow_copy2 breaks "smbd async dosmode" sync fallback; (bso#14957); * shadow_copy2 fails listing snapshotted dirs with shadow:fixinodes; (bso#15035); * PAM Kerberos authentication incorrectly fails with a clock skew error; (bso#15046); * username map - samba erroneously applies unix group memberships to user account entries; (bso#15041); * NT_STATUS_ACCESS_DENIED translates into EPERM instead of EACCES in SMBC_server_internal; (bso#14983); * Simple bind doesn't work against an RODC (with non-preloaded users); (bso#13879); * Crash of winbind on RODC; (bso#14641); * uncached logon on RODC always fails once; (bso#14865); * KVNO off by 100000; (bso#14951); * LDAP simple binds should honour "old password allowed period"; (bso#15001); * wbinfo -a doesn't work reliable with upn names; (bso#15003); * Simple bind doesn't work against an RODC (with non-preloaded users); (bso#13879); * Uninitialized litemask in variable in vfs_gpfs module; (bso#15027); * Regression: create krb5 conf = yes doesn't work with a single KDC; (bso#15016);- Add provides to samba-client-libs package to fix upgrades from previous versions; (bsc#1197995);- Add missing samba-libs requirement to samba-winbind package; (bsc#1198255);- Update to 4.15.6 * Renaming file on DFS root fails with NT_STATUS_OBJECT_PATH_NOT_FOUND; (bso#14169); * Samba does not response STATUS_INVALID_PARAMETER when opening 2 objects with same lease key; (bso#14737); * NT error code is not set when overwriting a file during rename in libsmbclient; (bso#14938); * Fix ldap simple bind with TLS auditing; (bso#14996); * net ads info shows LDAP Server: 0.0.0.0 depending on contacted server; (bso#14674); * Problem when winbind renews Kerberos; (bso#14979); (bsc#1196224); * pam_winbind will not allow gdm login if password about to expire; (bso#8691); * virusfilter_vfs_openat: Not scanned: Directory or special file; (bso#14971); * DFS fix for AIX broken; (bso#13631); * Solaris and AIX acl modules: wrong function arguments; (bso#14974); * Function aixacl_sys_acl_get_file not declared / coredump; (bso#7239); * Regression: Samba 4.15.2 on macOS segfaults intermittently during strcpy in tdbsam_getsampwnam; (bso#14900); * Fix a use-after-free in SMB1 server; (bso#14989); * smb2_signing_decrypt_pdu() may not decrypt with gnutls_aead_cipher_decrypt() from gnutls before 3.5.2; (bso#14968); * Changing the machine password against an RODC likely destroys the domain join; (bso#14984); * authsam_make_user_info_dc() steals memory from its struct ldb_message *msg argument; (bso#14993); * Use Heimdal 8.0 (pre) rather than an earlier snapshot; (bso#14995); * Samba autorid fails to map AD users if id rangesize fits in the id range only once; (bso#14967);- Fix mismatched version of libldb2; (bsc#1196788). - Drop obsolete SuSEfirewall2 service files.- Drop obsolete Samba fsrvp v0->v1 state upgrade functionality; (bsc#1080338).- Fix ntlm authentications with "winbind use default domain = yes"; (bso#13126); (bsc#1173429); (bsc#1196308).- Fix samba-ad-dc status warning notification message by disabling systemd notifications in bgqd; (bsc#1195896); (bso#14947).- libldb version mismatch in Samba dsdb component; (bsc#1118508);- Update to 4.15.5 * CVE-2021-44141: UNIX extensions in SMB1 disclose whether the outside target of a symlink exists; (bso#14911); (bsc#1193690). * CVE-2021-44142: Out-of-Bound Read/Write on Samba vfs_fruit module; (bso#14914); (bsc#1194859). * CVE-2022-0336: Re-adding an SPN skips subsequent SPN conflict checks; bso#14950); (bsc#1195048).- CVE-2021-44141: Information leak via symlinks of existance of files or directories outside of the exported share; (bso#14911); (bsc#1193690); - CVE-2021-44142: Out-of-bounds heap read/write vulnerability in VFS module vfs_fruit allows code execution; (bso#14914); (bsc#1194859); - CVE-2022-0336: Samba AD users with permission to write to an account can impersonate arbitrary services; (bso#14950); (bsc#1195048);- Update to 4.15.4 * Duplicate SMB file_ids leading to Windows client cache poisoning; (bso#14928); * Failed to parse NTLMv2_RESPONSE length 95 - Buffer Size Error - NT_STATUS_BUFFER_TOO_SMALL; (bso#14932); * kill_tcp_connections does not work; (bso#14934); * Can't connect to Windows shares not requiring authentication using KDE/Gnome; (bso#14935); * smbclient -L doesn't set "client max protocol" to NT1 before calling the "Reconnecting with SMB1 for workgroup listing" path; (bso#14939); * Cross device copy of the crossrename module always fails; (bso#14940); * symlinkat function from VFS cap module always fails with an error; (bso#14941); * Fix possible fsp pointer deference; (bso#14942); * Missing pop_sec_ctx() in error path inside close_directory(); (bso#14944); * "smbd --build-options" no longer works without an smb.conf file; (bso#14945);- Use pkgconfig(krb5) as dependency for the -devel package: allow OBS to pick the right flavor of krb5-devel (full vs mini). - Do not require the 'krb5' symbol by samba-client-libs: this package has an automatic dependency due to linkage on libgssapi_krb5.so.2. Automatic deps are always better. - Do not require the 'krb5' symbol from samba-libs: samba-libs requires samba-client-libs, which in turn requires krb5 libraries. Samba-libs itself has no need for krb5 (but get it indirectly anyway).- Reorganize libs packages. Split samba-libs into samba-client-libs, samba-libs, samba-winbind-libs and samba-ad-dc-libs, merging samba public libraries depending on internal samba libraries into these packages as there were dependency problems everytime one of these public libraries changed its version (bsc#1192684). The devel packages are merged into samba-devel. - Rename package samba-core-devel to samba-devel - Add python-rpm-macros to build requirements - Update the symlink create by samba-dsdb-modules to private samba ldb modules following libldb2 changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba- Update to 4.15.3 * Recursive directory delete with veto files is broken in 4.15.0; (bso#14878); * A directory containing dangling symlinks cannot be deleted by SMB2 alone when they are the only entry in the directory; (bso#14879); * SIGSEGV in rmdir_internals/synthetic_pathref - dirfsp is used uninitialized in rmdir_internals(); (bso#14892); * MaxQueryDuration not honoured in Samba AD DC LDAP; (bso#14694); * The CVE-2020-25717 username map [script] advice has undesired side effects for the local nt token; (bso#14901); (bsc#1192849); * User with multiple spaces (eg FredNurk) become un-deletable; (bso#14902); * Avoid storing NTTIME_THAW (-2) as value on disk; (bso#14127); * smbXsrv_client_global record validation leads to crash if existing record points at non-existing process; (bso#14882); * Crash in vfs_fruit asking for fsp_get_io_fd() for an XATTR call; (bso#14890); * Samba process doesn't log to logfile; (bso#14897); * set_ea_dos_attribute() fallback calling get_file_handle_for_metadata() triggers locking.tdb assert; (bso#14907); * Kerberos authentication on standalone server in MIT realm broken; (bso#14922); * Segmentation fault when joining the domain; (bso#14923); * Support for ROLE_IPA_DC is incomplete; (bso#14903); * rpcclient cannot connect to ncacn_ip_tcp services anymore; (bso#14767); * winexe crashes since 4.15.0 after popt parsing; (bso#14893); * net ads status -P broken in a clustered environment; (bso#14908); * Memory leak if ioctl(FSCTL_VALIDATE_NEGOTIATE_INFO) fails before smbd_smb2_ioctl_send; (bso#14788); * winbindd doesn't start when "allow trusted domains" is off; (bso#14899); * smbclient login without password using '-N' fails with NT_STATUS_INVALID_PARAMETER on Samba AD DC; (bso#14883); * A schannel client incorrectly detects a downgrade connecting to an AES only server; (bso#14912); * Possible null pointer dereference in winbind; (bso#14921); * Fix -k legacy option for client tools like smbclient, rpcclient, net, etc.; (bso#14846); * Add Debian 11 CI bootstrap support; (bso#14872); * Crash in recycle_unlink_internal(); (bso#14888);- Fix dependency problem upgrading from libndr0 to libndr2 and from libsamba-credentials0 to libsamba-credentials1; (bsc#1192684);- Fix regression introduced by CVE-2020-25717 patches, winbindd does not start when 'allow trusted domains' is off; (bso#14899); - Update to 4.15.2 * CVE-2016-2124: SMB1 client connections can be downgraded to plaintext authentication; (bso#12444); (bsc#1014440); * CVE-2020-25717: A user on the domain can become root on domain members; (bso#14556); (bsc#1192284); * CVE-2020-25718: Samba AD DC did not correctly sandbox Kerberos tickets issued by an RODC; (bso#14558); (bsc#1192246); * CVE-2020-25719: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets; (bso#14561); (bsc#1192247); * CVE-2020-25721: Kerberos acceptors need easy access to stable AD identifiers (eg objectSid); (bso#14557); (bsc#1192505); * CVE-2020-25722: Samba AD DC did not do suffienct access and conformance checking of data stored; (bso#14564); (bsc#1192283); * CVE-2021-3738: Use after free in Samba AD DC RPC server; (bso#14468); (bsc#1192215); * CVE-2021-23192: Subsequent DCE/RPC fragment injection vulnerability; (bso#14875); (bsc#1192214); - Update to 4.15.1 * vfs_shadow_copy2: core dump in make_relative_path; (bso#14682); * Log clutter from filename_convert_internal; (bso#14685); * MacOSX compilation fixes; (bso#14862); * rodc_rwdc test flaps; (bso#14868); * Provide a fix for MS CVE-2020-17049 in Samba [SECURITY] 'Bronze bit' S4U2Proxy Constrained Delegation bypass in Samba with embedded Heimdal; (bso#14642); * Python ldb.msg_diff() memory handling failure; (bso#14836); * "in" operator on ldb.Message is case sensitive; (bso#14845); * Release LDB 2.4.1 for Samba 4.15.1; (bso#14848); * samldb_krbtgtnumber_available() looks for incorrect string; (bso#14854); * Fix Samba support for UF_NO_AUTH_DATA_REQUIRED; (bso#14871); * Allow special chars like "@" in samAccountName when generating the salt; (bso#14874); * Correctly ignore comments in CTDB public addresses file; (bso#14826); * Fix transit path validation; (bso#12998); * Fix that child winbindd logs to log.winbindd instead of log.wb-; (bso#14852); * SMB3 cancel requests should only include the MID together with AsyncID when AES-128-GMAC is used; (bso#14855); * Prepare to operate with MIT krb5 >= 1.20; (bso#14870); * Heimdal prefers RC4 over AES for machine accounts; (bso#14864);- Enable samba-tool without ad dc.- Adjust spec to use pam macros; (bsc#1191046).- Adjust spec for size * allow some Recommends instead Requires to be configured for cifs-utils, samba-libs-python3 & samba-gpupdate; (bsc#1182847). * remove fam, undocumented and unneeded.- Add missing build dependency on bison when building with the embedded Heimdal Kerberos- Update to 4.15.0 * Removed SMB development dialects SMB2_22, SMB2_24 and SMB3_10 * VFS layer modernized. * Add the ability to set allow/deny lists for zone transfer clients in Bind DLZ plugin * Server multi-channel support no longer experimental * Improved command line user experience, unifying the options in different commands * Winbindd no longer scans trusted domains on startup and will use enterprise principals by default. * The net utility is now able to support the offline domain join feature * New options for 'samba-tool dns zoneoptions' for aging control and to mark old records as static or dynamic * DNS tombstones are now deleted as appropriate and use a consistent timestamp format * The 'samba-tool dns update' command validates and rejects now malformed IPv4 and IPv6 addresses * The 'samba-tool domain backup' command correctly takes out locks against concurrent modification during backup when using the LMDB backend * TruACL support has been removed * NIS support has been removed- Fix 'net rpc' authentication when using the machine account; (bsc#1189017); (bso#14796);- Fix dependency problem upgrading from libndr0 to libndr1; (bsc#1189875); - Fix dependency problem upgrading from libsmbldap0 to libsmbldap2; (bsc#1189875); - Fix wrong kvno exported to keytab after net ads changetrustpw due to replication delay; (bsc#1188727); - Add Certificate Auto Enrollment Policy; (jsc#SLE-18456). - Update to 4.13.10 * s3: smbd: Ensure POSIX default ACL is mapped into returned Windows ACL for directory handles; (bso#14708); * Take a copy to make sure we don't reference free'd memory; (bso#14721); * s3: lib: Fix talloc heirarcy error in parent_smb_fname(); (bso#14722); * s3: smbd: Remove erroneous TALLOC_FREE(smb_fname_parent) in change_file_owner_to_parent() error path; (bso#14736); * samba-tool: Give better error information when the 'domain backup restore' fails with a duplicate SID; (bso#14575); * smbd: Correctly initialize close timestamp fields; (bso#14714); * Spotlight RPC service doesn't work with vfs_glusterfs; (bso#14740); * ctdb: Fix a crash in run_proc_signal_handler(); (bso#14475); * gensec_krb5: Restore ipv6 support for kpasswd; (bso#14750); * smbXsrv_{open,session,tcon}: Protect smbXsrv_{open,session,tcon}_global_traverse_fn against invalid records; (bso#14752); * samba-tool domain backup offline doesn't work against bind DLZ backend; (bso#14027); * netcmd: Use next_free_rid() function to calculate a SID for restoring a backup; (bso#14669); - Update to 4.13.9 * s3: smbd: SMB1 SMBsplwr doesn't send a reply packet on success; (bso#14696); * Add documentation for dsdb_group_audit and dsdb_group_json_audit to "log level", synchronise "log level" in smb.conf with the code; (bso#14689); * Fix smbd panic when two clients open same file; (bso#14672); * Fix memory leak in the RPC server; (bso#14675); * s3: smbd: Fix deferred renames; (bso#14679); * s3-iremotewinspool: Set the per-request memory context; (bso#14675); * rpc_server3: Fix a memleak for internal pipes; (bso#14675); * third_party: Update socket_wrapper to version 1.3.2; (bso#11899); * third_party: Update socket_wrapper to version 1.3.3; (bso#14639); * idmap_rfc2307 and idmap_nss return wrong mapping for uid/gid conflict; (bso#14663); * Fix the build on OmniOS; (bso#14288); - Update to 4.13.8 * CVE-2021-20254: Fix buffer overrun in sids_to_unixids(); (bso#14571 - Update to 4.13.7 * Release with dependency on ldb version 2.2.1.- CVE-2021-20254 Buffer overrun in sids_to_unixids(); (bnc#14571); (bsc#1184677).- Fix offline domain backup not possible using lmdb version >= 0.9.26; (bso#14676); - Require libldb >= 2.2.1; (bsc#1183572); (bsc#1183574); - Update to 4.13.6 * CVE-2020-27840: samba: Unauthenticated remote heap corruption via bad DNs; (bso#14595); (bsc#1183572). * CVE-2021-20277: samba: out of bounds read in ldb_handler_fold; (bso#14655); (bsc#1183574). - Update to 4.13.5 * s3:modules:vfs_virusfilter: Recent talloc changes cause infinite start-up failure; (bso#14634); * s3: libsmb: Add missing cli_tdis() in error path if encryption setup failed on temp proxy connection; (bso#13992); * smbd: In conn_force_tdis_done() when forcing a connection closed force a full reload of services; (bso#14604); * dbcheck: Check Deleted Objects and reduce noise in reports about expired tombstones (bso#14593); * s3: Fix fcntl waf configure check; (bso#14503); * s3/auth: Implement "winbind:ignore domains"; (bso#14602); * smbd: Use fsp->conn->session_info for the initial delete-on-close token; (bso#14617); * s3: VFS: nfs4_acls. Add missing TALLOC_FREE(frame) in error path; (bso#14648); * classicupgrade: Treat old never expires value right; (bso#14624); * g_lock: Fix uninitalized variable reads; (bso#14636); * s3:pysmbd: Fix fd leak in py_smbd_create_file(); (bso#13898); * lib:util: Avoid free'ing our own pointer; (bso#14625); * HEIMDAL: krb5_storage_free(NULL) should work; (bso#12505);- Spec file fixes around systemd and requires; (bsc#1182830); - Align systemd service unit files with upstream provided ones.- Update to 4.13.4 * Work around special SMB2 IOCTL response behavior of NetApp Ontap 7.3.7; (bso#14607); * Temporary DFS share setup doesn't set case parameters in the same way as a regular share definition does; (bso#14612); * lib: Avoid declaring zero-length VLAs in various messaging functions; (bso#14605); * Do not create an empty DB when accessing a sam.ldb; (bso#14579); * vfs_fruit may close wrong backend fd; (bso#14596); * Temporary DFS share setup doesn't set case parameters in the same way as a regular share definition does; (bso#14612); * vfs_virusfilter: Allocate separate memory for config char*; (bso#14606); * vfs_fruit may close wrong backend fd; (bso#14596); * Work around special SMB2 IOCTL response behavior of NetApp Ontap 7.3.7; (bso#14607); * The cache directory for the user gencache should be created recursively; (bso#14601); * Be more flexible with repository names in CentOS 8 test environments; (bso#14594);- Uninstalling samba-client: Failed to disable unit, cifs.service does not exists; (bsc#1180388);- Update to 4.13.3 + libcli: smb2: Never print length if smb2_signing_key_valid() fails for crypto blob; (bso#14210); + s3: modules: gluster. Fix the error I made in preventing talloc leaks from a function; (bso#14486); + s3: smbd: Don't overwrite contents of fsp->aio_requests[0] with NULL via TALLOC_FREE(); (bso#14515); + s3: spoolss: Make parameters in call to user_ok_token() match all other uses; (bso#14568); + s3: smbd: Quiet log messages from usershares for an unknown share; (bso#14590); + samba process does not honor max log size; (bso#14248); + vfs_zfsacl: Add missing inherited flag on hidden "magic" everyone@ ACE; (bso#14587); + s3-libads: Pass timeout to open_socket_out in ms; (bso#13124); + s3-vfs_glusterfs: Always disable write-behind translator; (bso#14486); + smbclient: Fix recursive mget; (bso#14517); + clitar: Use do_list()'s recursion in clitar.c; (bso#14581); + manpages/vfs_glusterfs: Mention silent skipping of write-behind translator; (bso#14486); + vfs_shadow_copy2: Preserve all open flags assuming ROFS; (bso#14573); + interface: Fix if_index is not parsed correctly; (bso#14514);- Update to 4.13.2 + s3: modules: vfs_glusterfs: Fix leak of char **lines onto mem_ctx on return; (bso#14486); + RN: vfs_zfsacl: Only grant DELETE_CHILD if ACL tag is special; (bso#14471); + smb.conf.5: Add clarification how configuration changes reflected by Samba; (bso#14538); + daemons: Report status to systemd even when running in foreground; (bso#14552); + DNS Resolver: Support both dnspython before and after 2.0.0; (bso#14553); + s3-vfs_glusterfs: Refuse connection when write-behind xlator is present; (bso#14486); + provision: Add support for BIND 9.16.x; (bso#14487); + ctdb-common: Avoid aliasing errors during code optimization; (bso#14537); + libndr: Avoid assigning duplicate versions to symbols; (bso#14541); + docs: Fix default value of spoolss:architecture; (bso#14522); + winbind: Fix a memleak; (bso#14388); + s4:dsdb:acl_read: Implement "List Object" mode feature; (bso#14531); + docs-xml/manpages: Add warning about write-behind translator for vfs_glusterfs; (bso#14486); + nsswitch/nsstest.c: Avoid nss function conflicts with glibc nss.h. + vfs_shadow_copy2: Avoid closing snapsdir twice; (bso#14530); + third_party: Update resolv_wrapper to version 1.1.7; (bso#14547); + examples:auth: Do not install example plugin; (bso#14550); + ctdb-recoverd: Drop unnecessary and broken code; (bso#14513); + RN: vfs_zfsacl: Only grant DELETE_CHILD if ACL tag is special; (bso#14471);- Adjust smbcacls '--propagate-inheritance' feature to align with upstream; (bsc#1178469).- Update to samba 4.13.1 + CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with easily crafted records; (bsc#1177613); (bso#14472); + CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994); (bso#14436); + CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify; (bsc#1173902); (bso#14434); - Adjust systemd tmpfiles.d configuration, use /run/samba instead of /var/run/samba; (bsc#1177355);- Fix vfs_ceph query_directory regression; (bso#14519) - Drop liburing-devel for SLE15-SP2; (bsc#1177245)- Register CTDB recovery lock holder with ceph-mgr - Add liburing-devel dependency- Update to samba 4.13.0 + Require Python 3.6 + Move wide links functionality into VFS module + Deprecate NT4-like 'classic' Samba domain controllers + Deprecate SMBv1 only protocol options + Remove deprecated "ldap ssl ads" option + Unify asynchronous DCE-RPC server; (jsc#SES-645) + Replay multichannel lease break requests; (bso#11897); (jsc#SES-655) + Drop internal byteorder.h header from util-devel package + Remove final code for the AD DC LDAP backend + Add AD DC Group Policy Scripts + Only use gnutls_aead_cipher_encryptv2() for GnuTLS > 3.6.14; (bso#14399) + Fix %U substitutions if it contains a domain name; (bso#14467) + Fix krb5.conf creation for 'net ads join'; (bso#14479) + Fix build problem if libbsd-dev is not installed; (bso#14482) + Toggle vfs_snapper using "--with-shared-modules"; (bso#14437) + Fix idmap_ad RFC4511 response handling; (bso#14465) + Fix panic in get_lease_type(); (bso#14428)- Update to samba 4.11.13 + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2 against unencrypted passwords; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Support "server require schannel:WORKSTATION$ = no" about unsecure configurations; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): s4 torture rpc: repeated bytes in client challenge; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): libcli/auth: Reject weak client challenges in netlogon_creds_server_init() "server require schannel:WORKSTATION$ = no"; (bsc#1176579); (bso#14497); - Update to samba 4.11.12 + s3: libsmb: Fix SMB2 client rename bug to a Windows server; (bso#14403); + dsdb: Allow "password hash userPassword schemes = CryptSHA256" to work on RHEL7; (bso#14424); + dbcheck: Allow a dangling forward link outside our known NCs; (bso#14450); + lib/debug: Set the correct default backend loglevel to MAX_DEBUG_LEVEL; (bso#14426); + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428); + lib/util: do not install "test_util_paths"; (bso#14370); + lib:util: Fix smbclient -l basename dir; (bso#14345); + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428); + util: Allow symlinks in directory_create_or_exist; (bso#14166); + docs: Fix documentation for require_membership_of of pam_winbind; (bso#14358); + s3:winbind:idmap_ad: Make failure to get attrnames for schema mode fatal; (bso#14425);- Add obsoletes to libsmbldap2 package to fix upgrades from previous versions; (bsc#1172810);- Fix net command unable to negotiate SMB2; (bsc#1174120);- Update to samba 4.11.11 + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ and VLV combined; (bso#14364); (bsc#1173159] + CVE-2020-10745: invalid DNS or NBT queries containing dots use several seconds of CPU each; (bso#14378); (bsc#1173160). + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP server with paged_result or VLV; (bso#14402); (bsc#1173161) + CVE-2020-14303: Endless loop from empty UDP packet sent to AD DC nbt_server; (bso#14417); (bsc#1173359). - Update to samba 4.11.10 + Fix segfault when using SMBC_opendir_ctx() routine for share folder that contains incorrect symbols in any file name; (bso#14374). + vfs_shadow_copy2 doesn't fail case looking in snapdirseverywhere mode; (bso#14350) + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr; (bso#14413). + Malicous SMB1 server can crash libsmbclient; (bso#14366) + winbindd: Fix a use-after-free when winbind clients exit; (bso#14382) + ldb: Bump version to 2.0.11, LMDB databases can grow without bounds. (bso#14330) - Update to samba 4.11.9 + nmblib: Avoid undefined behaviour in handle_name_ptrs(); (bso#14242). + 'samba-tool group' commands do not handle group names with special chars correctly; (bso#14296). + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo is not valid; (bso#14237). + Missing check for DMAPI offline status in async DOS attributes; (bso#14293). + smbd: Ignore set NTACL requests which contain S-1-5-88 NFS ACEs; (bso#14307). + vfs_recycle: Prevent flooding the log if we're called on non-existant paths; (bso#14316) + smbd mistakenly updates a file's write-time on close; (bso#14320). + RPC handles cannot be differentiated in source3 RPC server; (bso#14359). + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313). + nsswitch: Fix use-after-free causing segfault in _pam_delete_cred; (bso#14327). + Fix fruit:time machine max size on arm; (bso#13622) + CTDB recovery corner cases can cause record resurrection and node banning; (bso#14294). + ctdb: Fix a memleak; (bso#14348). + libsmb: Don't try to find posix stat info in SMBC_getatr(). + ctdb-tcp: Move free of inbound queue to TCP restart; (bso#14295); (bsc#1162680). + s3/librpc/crypto: Fix double free with unresolved credential cache; (bso#14344); (bsc#1169095) + s3:libads: Fix ads_get_upn(); (bso#14336). + CTDB recovery corner cases can cause record resurrection and node banning; (bso#14294) + Starting ctdb node that was powered off hard before results in recovery loop; (bso#14295); (bsc#1162680). + ctdb-recoverd: Avoid dereferencing NULL rec->nodemap; (bso#14324) - Update to samba 4.11.8 + CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with ASQ; (bso#14331); (bsc#1169850); + CVE-2020-10704: LDAP Denial of Service (stack overflow) in Samba AD DC; (bso#14334); (bsc#1169851); - Update to samba 4.11.7 + s3: lib: nmblib. Clean up and harden nmb packet processing; (bso#14239). + s3: VFS: full_audit. Use system session_info if called from a temporary share definition; (bso#14283) + dsdb: Correctly handle memory in objectclass_attrs; (bso#14258). + ldb: version 2.0.9, Samba 4.11 and later give incorrect results for SCOPE_ONE searches; (bso#14270) + auth: Fix CIDs 1458418 and 1458420 Null pointer dereferences; (bso#14247). + smbd: Handle EINTR from open(2) properly; (bso#14285) + winbind member (source3) fails local SAM auth with empty domain name; (bso#14247) + winbindd: Handling missing idmap in getgrgid(); (bso#14265). + lib:util: Log mkdir error on correct debug levels; (bso#14253). + wafsamba: Do not use 'rU' as the 'U' is deprecated in Python 3.9; (bso#14266). + ctdb-tcp: Make error handling for outbound connection consistent; (bso#14274). - Update to samba 4.11.6 + pygpo: Use correct method flags; (bso#14209). + vfs_ceph_snapshots: Fix root relative path handling; (bso#14216); (bsc#1141320). + Avoiding bad call flags with python 3.8, using METH_NOARGS instead of zero; (bso#14209). + source4/utils/oLschema2ldif: Include stdint.h before cmocka.h; (bso#14218). + docs-xml/winbindnssinfo: Clarify interaction with idmap_ad etc; (bso#14122). + smbd: Fix the build with clang; (bso#14251). + upgradedns: Ensure lmdb lock files linked; (bso#14199). + s3: VFS: glusterfs: Reset nlinks for symlink entries during readdir; (bso#14182). + smbc_stat() doesn't return the correct st_mode and also the uid/gid is not filled (SMBv1) file; (bso#14101). + librpc: Fix string length checking in ndr_pull_charset_to_null(); (bso#14219). + ctdb-scripts: Strip square brackets when gathering connection info; (bso#14227).- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);- Installing: samba - samba-ad-dc.service does not exist and unit not found; (bsc#1171437);- Fix samba_winbind package is installing python3-base without python3 package; (bsc#1169521);- Require libldb2 >= 2.0.10 after security release.- CVE-2020-10704: LDAP Denial of Service (stack overflow) in Samba AD DC; (bso#14334); (bsc#1169851); - CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with ASQ; (bso#14331); (bsc#1169850);- Fix smbclient crash with double free (with unresolved krb5 credential cache); (bso#14344); (bsc#1169095).- Starting ctdb node that was powered off hard before results in recovery loop; (bso#14295); (bsc#1162680).- CTDB doesn't retry outgoing connections on bind (and some other) failures; (bso#14274); (bsc#1162680).- Revert: Allow idmap_rid to have primary group other than "Domain Users"; (bsc#1087931).- Fix nmbstatus not reporting detailed information about workgroups; (bsc#1159464); - Fix querying all names registered within broadcast area; (bso#8927);- Update to samab 4.11.5 + CVE-2019-14902: Replication of ACLs down subtree on AD Directory is not automatic; (bso#12497); (bsc#1160850). + CVE-2019-19344: Fix server crash with dns zone scavenging = yes; (bso#14050); (bsc#1160852). + CVE-2019-14907: server-side crash after charset conversion failure (eg during NTLMSSP processing); (bso#14208); (bsc#1160888). - Update to samba 4.11.4 + Ensure SMB1 cli_qpathinfo2() doesn't return an inode number; (bso#14161). + Ensure we don't call cli_RNetShareEnum() on an SMB1 connection; (bso#14174). + NT_STATUS_ACCESS_DENIED becomes EINVAL when using SMB2 in SMBC_opendir_ctx; (bso#14176). + SMB2 - Ensure we use the correct session_id if encrypting an interim response; (bso#14189). + Prevent smbd crash after invalid SMB1 negprot; (bso#14205). + printing: Fix %J substition; (bso#13745). + Remove now unneeded call to cmdline_messaging_context(); (bso#13925). + Fix incomplete conversion of former parametric options; (bso#14069). + Fix sync dosmode fallback in async dosmode codepath; (bso#14070). + vfs_fruit returns capped resource fork length; (bso#14171). + libnet_join: Add SPNs for additional-dns-hostnames entries; (bso#14116). + smbd: Increase a debug level; (bso#14211). + Prevent azure ad connect from reporting discovery errors reference-value-not-ldap-conformant; (bso#14153). + krb5_plugin: Fix developer build with newer heimdal system library; (bso#14179). + replace: Only link libnsl and libsocket if required; (bso#14168); + ctdb: Incoming queue can be orphaned causing communication; breakdown; (bso#14175). + ldb: Release ldb 2.0.8. Cross-compile will not take cross-answers or cross-execute; (bso#13846). + heimdal-build: Avoid hard-coded /usr/include/heimdal in asn1_compile-generated code; (bso#13856).- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).- Update to samba 4.11.3 + CVE-2019-14861: DNSServer RPC server crash, an authenticated user can crash the DCE/RPC DNS management server by creating records with matching the zone name; (bso#14138); (bsc#1158108). + CVE-2019-14870: DelegationNotAllowed not being enforced, the DelegationNotAllowed Kerberos feature restriction was not being applied when processing protocol transition requests (S4U2Self), in the AD DC KDC; (bso#14187); (bsc#1158109).- CVE-2019-14861: DNSServer RPC server crash, an authenticated user can crash the DCE/RPC DNS management server by creating records with matching the zone name; (bso#14138); (bsc#1158108). - CVE-2019-14870: DelegationNotAllowed not being enforced, the DelegationNotAllowed Kerberos feature restriction was not being applied when processing protocol transition requests (S4U2Self), in the AD DC KDC; (bso#14187); (bsc#1158109).- Update to samba 4.11.2 + CVE-2019-10218: Client code can return filenames containing path separators; (bsc#1144902); (bso#14071). + CVE-2019-14833: Samba AD DC check password script does not receive the full password; (bso#12438). + CVE-2019-14847: User with "get changes" permission can crash AD DC LDAP server via dirsync; (bso#14040). - Fixes from 4.11.1 + Overlinking libreplace against librt and pthread against every binary or library causes issues; (bso#14140); + kpasswd fails when built with MIT Kerberos; (bso#14155); + Fix spnego fallback from kerberos to ntlmssp in smbd server; (bso#14106); + Stale file handle error when using mkstemp on a share; (bso#14137); + non-AES schannel broken; (bso#14134); + Joining Active Directory should not use SAMR to set the password; (bso#13884); + smbclient can blunder into the SMB1 specific cli_RNetShareEnum() call on an SMB2 connection; (bso#14152); + Deleted records can be resurrected during recovery; (bso#14147); + getpwnam and getpwuid need to return data for ID_TYPE_BOTH group; (bso#14141); + winbind does not list forest trusts with additional trust attributes; (bso#14130); + fault report points to outdated documentation; (bso#14139); + pam_winbind with krb5_auth or wbinfo -K doesn't work for users of trusted domains/forests; (bso#14124); + classicupgrade results in uncaught exception - a bytes-like object is required, not 'str'; (bso#14136); + pod2man is not longer required, stop checking at build time; (bso#14131); + Exit code of ctdb nodestatus should not be influenced by deleted nodes; (bso#14129); + username/password authentication doesn't work with CUPS and smbspool; (bso#14128); + smbc_readdirplus() is incompatible with smbc_telldir() and smbc_lseekdir(); (bso#14094);- CVE-2019-14847: User with "get changes" permission can crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598); - CVE-2019-10218: Client code can return filenames containing path separators; (bso#14071); (bsc#1144902);- CVE-2019-14833: samba: Accent with "check script password" Samba AD DC check password script does not receive the full password; (bso#12438); (bsc#1154289).- Update to samba 4.11.0 + For details on all items see WHATSNEW.txt in samba-doc package + Python2 runtime support removed; python 3.4 or later required + Security improvements: - SMB1 disabled by default - lanman and plaintext authentication deprecated - winbind: PAM_AUTH and NTLM_AUTH events logged - GnuTLS 3.2 required; system FIPS mode setting honored + CephFS Snapshot integration, exposed as previous file versions + ctdb changes: - onnode -o option removed - ctdbd logs when using more than 90% of a CPU thread - CTDB_MONITOR_SWAP_USAGE variable removed + AD Domain controller improvements: - Upgrade AD databse format - BIND9_FLATFILE deprecated - default process model chagned to prefork - bind9 dns operation duration logging - Default schema updated to 2012_R2; function level is unchanged - many performance improvements + Configuration webserver support removed- Fix broken username/password authentication with CUPS and smbspool; (bsc#1152143); (bso#14128).- Fix auth problems when printing via smbspool backend with kerberos; (bnc#1148539); (bso#13832).- Update to samba 4.10.8 + CVE-2019-10197: user escape from share path definition; (bso#14035); (bsc#1141267);- Fix build on newer systems by modifying samba.spec to use consistent non-relative paths for pammodules in configure line and specification of pam_winbind.so library to package.- Update to samba 4.10.7 + Unable to create or rename file/directory inside shares configured with vfs_glusterfs_fuse module; (bso#14010). + build: Allow build when '--disable-gnutls' is set; (bso#13844) + samba-tool: Add 'import samba.drs_utils' to fsmo.py; (bso#13973). + Fix 'Error 32 determining PSOs in system' message on old DB with FL upgrade; (bso#14008). + s4/libnet: Fix joining a Windows pre-2008R2 DC; (bso#14021) + join: Use a specific attribute order for the DsAddEntry nTDSDSA object; (bso#14046). + vfs_catia: Pass stat info to synthetic_smb_fname(); (bso#14015). + lookup_name: Allow own domain lookup when flags == 0; (bso#14091). + s4 librpc rpc pyrpc: Ensure tevent_context deleted last; (bso#13932). + DEBUGC and DEBUGADDC doesn't print into a class specific log file; (bso#13915). + Request to keep deprecated option "server schannel", VMWare Quickprep requires "auto"; (bso#13949). + dbcheck: Fallback to the default tombstoneLifetime of 180 days; (bso#13967). + dnsProperty fails to decode values from older Windows versions; (bso#13969). + samba-tool: Use only one LDAP modify for dns partition fsmo role transfer; (bso#13973). + third_party: Update waf to version 2.0.17; (bso#13960). + netcmd: Allow 'drs replicate --local' to create partitions; (bso#14051). + ctdb-config: Depend on /etc/ctdb/nodes file; (bso#14017).- CVE-2019-10197: user escape from share path definition; (bso#14035); (bsc#1141267).- Prepare for use future use of kernel keyrings, modify /etc/pam.d/samba to include pam_keyinit.so; (bsc#1144059).- Update samba-winbind script to work with systemd; (bsc#1132739); - Drop samba dhcpcd hook scripts - Update to samba 4.10.6 + s3: winbind: Fix crash when invoking winbind idmap scripts; (bso#13956). + smbd does not correctly parse arguments passed to dfree and quota scripts; (bso#13964). + samba-tool dns: use bytes for inet_ntop; (bso#13965). + samba-tool domain provision: Fix --interactive module in python3; (bso#13828). + ldb_kv: Skip @ records early in a search full scan; (bso#13893). + docs: Improve documentation of "lanman auth" and "ntlm auth" connection; (bso#13981). + python/ntacls: Use correct "state directory" smb.conf option instead of "state dir"; (bso#14002). + registry: Add a missing include; (bso#13840). + Fix SMB guest authentication; (bso#13944). + AppleDouble conversion breaks Resourceforks; (bso#13958). + vfs_fruit makes direct use of syscalls like mmap() and pread(); (bso#13968). + s3:mdssvc: Fix flex compilation error; (bso#13987). + s3/vfs_glusterfs[_fuse]: Avoid using NAME_MAX directly; (bso#13872). + dsdb:samdb: schemainfo update with relax control; (bso#13799). + s3:util: Move static file_pload() function to lib/util; (bso#13964). + smbd: Fix a panic; (bso#13957). + ldap server: Generate correct referral schemes; (bso#12478). + s4 dsdb/repl_meta_data: fix use after free in dsdb_audit_add_ldb_value; (bso#13941). + s4 dsdb: Fix use after free in samldb_rename_search_base_callback; (bso#13942). + dsdb/repl: we need to replicate the whole schema before we can apply it; (bso#12204). + ldb: Release ldb 1.5.5; (bso#12478). + Schema replication fails if link crosses chunk boundary backwards; (bso#13713). + 'samba-tool domain schemaupgrade' uses relax control and skips the schemaInfo update provision; (bso#13799). + dsdb_audit: avoid printing "... remote host [Unknown] SID [(NULL SID)] ..."; (bso#13916). + python/ntacls: We only need security.SEC_STD_READ_CONTROL in order to get the ACL; (bso#13917). + s3:loadparm: Ensure to truncate FS Volume Label at multibyte boundary; (bso#13947). + Using Kerberos credentials to print using spoolss doesn't work; (bso#13939). + wafsamba: Use native waf timer; (bso#13998). + ctdb-scripts: Fix tcp_tw_recycle existence check; (bso#13984).- Update to samba-4.10.5 (including updates for 4.10.4, 4.10.3) + CVE-2019-12435 rpc/dns: Avoid NULL deference if zone not found in DnssrvOperation2; (bso#13922); (bsc#1137815). + CVE-2019-12436 dsdb/paged_results: Ignore successful results without messages; (bso#13951); (bsc#1137816). - Update to samba-4.10.4 + s3: SMB1: Don't allow recvfile on stream fsp's; (bso#13938). + py/provision: Fix for Python 2.6; (bso#13882). + netcmd: Fix 'passwordsettings --max-pwd-age' command; (bso#13873). + s3-libnet_join: 'net ads join' to child domain fails when using "-U admin@forestroot"; (bso#13861). + vfs_ceph: Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245). + vfs_ceph: Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697). + ctdb-common: Avoid race between fd and signal events; (bso#13895). + ctdb-common: Fix memory leak in run_proc; (bso#13943). + lib: Initialize getline() arguments; (bso#13892). + winbind: Fix overlapping id ranges; (bco#13903). + lib util debug: Increase format buffer to 4KiB; (bso#13902). + nsswitch pam_winbind: Fix Asan use after free; (bso#13927). + s4 lib socket: Ensure address string owned by parent struct; (bso#13929). + s3 rpc_client: Fix Asan stack use after scope; (bso#13936). + s3:smbd: Handle IO_REPARSE_TAG_DFS in SMB_FIND_FILE_FULL_DIRECTORY_INFO; (bso#10097). + smb2_tcon: Avoid STATUS_PENDING completely on tdis; (bso#10344). + smb2_sesssetup: avoid STATUS_PENDING responses for session setup; (bso#12845). + smb2_tcon: Avoid STATUS_PENDING completely on tdis; (bso#13698). + smb2_sesssetup: avoid STATUS_PENDING responses for session setup; (bso#13796). + dbcheck: Fix the err_empty_attribute() check; (bso#13843). + vfs_snapper: Drop unneeded fstat handler; (bso#13858). + vfs_default: Fix vfswrap_offload_write_send() NT_STATUS_INVALID_VIEW_SIZE check; (bso#13862). + smb2_server: Grant all 8192 credits to clients; (bso#13863). + smbd: Implement SMB_FILE_NORMALIZED_NAME_INFORMATION handling; (bso#13919). + s3/vfs_glusterfs: Dynamically determine NAME_MAX; (bso#13872). + s3: modules: ceph: Use current working directory instead of share path; (bso#13918); (bsc#1134452). + winbind: Use domain name from lsa query for sid_to_name cache entry; (bso#13831). + memcache: Increase size of default memcache to 512k; (bso#13865). + docs: Update smbclient manpage for "--max-protocol"; (bso#13857). + s3:utils: If share is NULL in smbcacls, don't print it; (bso#13937). + s3:smbspool: Fix regression printing with Kerberos credentials; (bso#13939). + ctdb-scripts: CTDB restarts failed NFS RPC services by hand, which is incompatible with systemd; (bso#13860). + ctdb-daemon: Revert "We can not assume that just because we could complete a TCP handshake"; (bso#13888). + ctdb-daemon: Never use 0 as a client ID; (bso#13930). + ctdb-common: Fix memory leak; (bso#13943). + s3:debug: Enable logging for early startup failures; (bso#13904) - Update to samba-4.10.3 + CVE-2018-16860: Heimdal KDC: Reject PA-S4U2Self with unkeyed checksum; (bso#13685); (bsc#1134024).- CVE-2019-12435: zone operations can crash rpc server; (bso#13922); (bsc#1137815).- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697). - Add ceph_snapshots VFS module; (jsc#SES-183).- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).- Update to samba-4.10.2: + CVE-2019-3870 (World writable files in Samba AD DC private/ dir); (bso#13834). + CVE-2019-3880 (Save registry file outside share as unprivileged user); (bso#13851). + py/kcc_utils: py2.6 compatibility; (bso#13837). + libcli: permit larger values of DataLength in SMB2_ENCRYPTION_CAPABILITIES of negotiate response; (bso#13869). + regfio: Improve handling of malformed registry hive files; (bso#13840). + ctdb-version: Simplify version string usage; (bso#13789). + lib: Make fd_load work for non-regular files; (bso#13859). + dbcheck: in the middle of the tombstone garbage collection causes replication failures, dbcheck: add --selftest-check-expired-tombstones cmdline option; (bso#13816). + ndr_spoolss_buf: Fix out of scope use of stack variable in NDR_SPOOLSS_PUSH_ENUM_OUT(); (bso#13818). + s4/messaging: Fix undefined reference in linking libMESSAGING-samba4.so; (bso#13854). + acl_read: Fix regression for empty lists; (bso#13836). + s4:dlz make b9_has_soa check dc=@ node; (bso#13841). + s3:client: Fix printing via smbspool backend with kerberos auth; (bso#13832). + s4:librpc: Fix installation of Samba; (bso#13847). + s3:lib: Fix the debug message for adding cache entries; (bso#13848). + s3:utils: Add 'smbstatus -L --resolve-uids' to show username; (bso#13793). + s3:lib: Fix the debug message for adding cache entries; (bso#13848). + s3:waf: Fix the detection of makdev() macro on Linux; (bso#13853). * ctdb-build: Drop creation of .distversion in tarball; (bso#13789). * ctdb-packaging: Test package requires tcpdump, ctdb package should not own system library directory; (bso#13838). - Update to samba-4.10.1: + py/kcc_utils: py2.6 compatibility; (bso#13837); + libcli: permit larger values of DataLength in SMB2_ENCRYPTION_CAPABILITIES of negotiate response; (bso#13869); + regfio: Improve handling of malformed registry hive files; (bso#13840); + ctdb-version: Simplify version string usage; (bso#13789); + lib: Make fd_load work for non-regular files; (bso#13859); + dbcheck in the middle of the tombstone garbage collection causes replication failures, dbcheck: add --selftest-check-expired-tombstones cmdline option; (bso#13816); + ndr_spoolss_buf: Fix out of scope use of stack variable in NDR_SPOOLSS_PUSH_ENUM_OUT(); (bso#13818); + s4/messaging: Fix undefined reference in linking libMESSAGING-samba4.so; (bso#13854); + acl_read: Fix regression for empty lists; (bso#13836); + s4:dlz make b9_has_soa check dc=@ node; (bso#13841); + s3:client: Fix printing via smbspool backend with kerberos auth; (bso#13832); + s4:librpc: Fix installation of Samba; (bso#13847); + s3:lib: Fix the debug message for adding cache entries; (bso#13848); + s3:utils: Add 'smbstatus -L --resolve-uids' to show username; (bso#13793); + s3:lib: Fix the debug message for adding cache entries; (bso#13848); + s3:waf: Fix the detection of makdev() macro on Linux; (bso#13853); + ctdb-build: Drop creation of .distversion in tarball; (bso#13789); + ctdb-packaging: Test package requires tcpdump, ctdb package should not own system library directory; (bso#13838); - Update to samba-4.10.0: + s4-server: Open and close a transaction on sam.ldb at startup; (bso#13760); + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812); + s4/scripting/bin: Open unicode files with utf8 encoding and write + unicode string. + sambaundoguididx: Use the right escaped oder unescaped sam ldb files; (bso#13759); + Fix idmap cache pollution with S-1-22- IDs on winbind hickup; (bso#13813); + passdb: Update ABI to 0.27.2. + lib/winbind_util: Add winbind_xid_to_sid for --without-winbind; (bso#13813); + lib:util: Move debug message for mkdir failing to log level 1; (bso#13823);- MacOS credit accounting breaks with async SESSION SETUP; (bsc#1125601); (bso#13796). - Mac OS X SMB2 implmenetation sees Input/output error or Resource temporarily unavailable and drops connection; (bso#13698)- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).- CVE-2019-3880: Save registry file outside share as unprivileged user; (bso#13851); (bsc#1131060 ).- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0); (bso#13834); (bsc#1130703);- Update to samba-4.9.5 + audit_logging: Remove debug log header and JSON Authentication: prefix; (bso#13714); + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760); + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso# CID: 1433607; (bso#11495); + smbd: uid: Don't crash if 'force group' is added to an existing share connection; (bso#13690); + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility code; (bso#13770); + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803); + s3:utils/smbget fix recursive download with empty source directories; (bso#13199); + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716); + s3:libsmb: cli_smb2_list() can sometimes fail initially on a connection; (bso#13736); + join: Throw CommandError instead of Exception for simple errors; (bso#13747); + ldb: Avoid inefficient one-level searches; (bso#13762); + s3: libsmb: use smb2cli_conn_max_trans_size() in cli_smb2_list(); (bso#13736); + tldap: Avoid use after free errors; (bso#13776); + Fix idmap xid2sid cache churn; (bso#13802); + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812); + s3-smbd: Avoid assuming fsp is always intact after close_file call; (bso#13720); + s3-vfs-fruit: Add close call; (bso#13725); + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746); + s3-vfs: add glusterfs_fuse vfs module; (bso#13774); + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766); + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS) ftruncate and fallocate; (bso#13807); + lib/audit_logging: Actually create talloc; (bso#13737); + netcmd/user: python[3]-gpgme unsupported and replaced by python[3]-gpg; (bso#13728); + dns: Changing onelevel search for wildcard to subtree; (bso#13738); + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721); + sambaundoguididx: Use the right escaped oder unescaped sam ldb files; (bso#13759); + ctdb: Print locks latency in machinereadable stats; (bso#13742); + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786); + audit_logging: auth_json_audit required auth_json; (bso#13715); + man pages: Document prefork process model; (bso#13765); + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773); + s3:auth: ignore create_builtin_guests() failing without a valid idmap configuration; (bso#13697); + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC without trusts; (bso#13722); + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd is not available; (bso#13723); + s4:server: Add support for 'smbcontrol samba shutdown' and 'smbcontrol debug/debuglevel'; (bso#13752); + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616); + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330); + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774); + notifyd: Fix SIGBUS on sparc; (bso#13704); + waf: Check for libnscd; (bso#13787); + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770); + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717); + Recovery lock bug fixes; (bso#13800); + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726); + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727); + vfs_fileid: Fix get_connectpath_ino; (bso#13741); + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).- Fix update-apparmor-samba-profile script after apparmor switched to using named profiles. The change is backwards compatible; (bsc#1126377);- LoadParm().load_default() fails with "Unable to load default file"; (bsc#1089758);- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);- Update to samba-4.9.4 + libcli/smb: Don't overwrite status code; (bso#9175). + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164). + Session setup reauth fails to sign response; (bso#13661). + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677). + vfs_shadow_copy2: Nicely deal with attempts to open previous version for writing; (bso#13688). + Restoring previous version of stream with vfs_shadow_copy2 fails with NT_STATUS_OBJECT_NAME_INVALID fsp->base_fsp->fsp_name; (bso#13455). + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571). + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708) + PEP8: fix E231: missing whitespace after ','. + winbindd: Fix crash when taking profiles;(bso#13629) + CVE-2018-14629 dns: Fix CNAME loop prevention using counter regression; (bso#13600) + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686). + CVE-2018-16853: Do not segfault if client is not set; (bso#13571). + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679) + ctdb-daemon: Exit with error if a database directory does not exist; (bso#13696). + s3:libads: Add net ads leave keep-account option; (bso#13498).- Drop more %if..%endif guards which are idempotent. - Drop requires on ldconfig which are already auto-discovered. - Do not ignore errors from useradd/groupadd.- Remove python2 build dependency from samba-libs; (bsc#1116900);- Update update-apparmor-samba-profile script to ignore the shares's paths containing substitution variables in any place, not only at the beginning of the path.- Update to samba-4.9.3 + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD Internal DNS server; (bso#13600); (bsc#1116319); + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628); (bsc#1116320); + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server; (bso#13674); (bsc#1116322); + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers; (bso#13669); (bsc#1116321); + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos configuration (unsupported); (bso#13678); (bsc#1116324); + CVE-2018-16857: Bad password count in AD DC not always effective; window; (bso#13683); (bsc#1116323);- Update to samba-4.9.2 + dsdb: Add comments explaining the limitations of our current backlink behaviour; (bso#13418); + Fix problems running domain backups (handling SMBv2, sites); (bso#13621); + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3; (bso#13465); + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642); + File saving issues with vfs_fruit on samba >= 4.8.5; (bso#13646); + Enabling vfs_fruit looses FinderInfo; (bso#13649); + Cancelling of SMB2 aio reads and writes returns wrong error NT_STATUS_INTERNAL_ERROR; (bso#13667); + Fix CTDB recovery record resurrection from inactive nodes and simplify vacuuming; (bso#13641); + examples: Fix the smb2mount build; (bso#13465); + libtevent: Fix build due to missing open_memstream on Illiumos; (bso#13629); + winbindd_cache: Fix timeout calculation for sid<->name cache; (bso#13662); + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path; (bso#13653); + Extended DN SID component missing for member after switching group membership; (bso#13418); + Return STATUS_SESSION_EXPIRED error encrypted, if the request was encrypted; (bso#13624); + python: Allow forced signing via smb.SMB(); (bso#13621); + lib:socket: If returning early, set ifaces; (bso#13665); + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8 encoded unicode; (bso#13616); + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute; (bso#13673); + waf: Add -fstack-clash-protection; (bso#13601); + winbind: Fix segfault if an invalid passdb backend is configured; (bso#13668); + Fix bugs in CTDB event handling; (bso#13659); + Misbehaving nodes are sometimes not banned; (bso#13670);- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);- winbind requires latest version of libtevent-util0 to start- Backport latest gpo code from master + Read policy from local gpt cache + Offline policy application + Make group policy extensible via register/unregister gpext + gpext's run via a process_group_policy method- Enable profiling data collection- Change samba-kdc package name to samba-ad-dc - Move samba-ad-dc.service to the samba-ad-dc package- Update to samba-4.9.1 + s3: nmbd: Stop nmbd network announce storm; (bso#13620); + s3-rpcclient: Use spoolss_init_spoolss_UserLevel1 in winspool cmds; (bso#13597); + CTDB recovery lock has some race conditions; (bso#13617); + s3-rpc_client: Advertise Windows 7 client info; (bso#13597); + ctdb-doc: Remove PIDFILE option from ctdbd_wrapper man page; (bso#13610);- Tumbleweed doesn't define the sle_version macro, so we must include a check for suse_version also. Otherwise python3 is disabled on Tumbleweed.- Update to samba-4.9.0 + samba_dnsupdate: Honor 'dns zone scavenging' option, only update if needed; (bso#13605); + wafsamba: Fix 'make -j'; (bso#13606);- Update to samba-4.9.0rc5 + s3: VFS: vfs_full_audit: Ensure smb_fname_str_do_log() only returns absolute pathnames; (bso#13565); + s3: util: Do not take over stderr when there is no log file; (bso#13578); + Durable Reconnect fails because cookie.allow_reconnect is not set; (bso#13549); + krb5-samba: Interdomain trust uses different salt principal; (bso#13539); + vfs_fruit: Don't unlink the main file; (bso#13441); + smbd: Fix a memleak in async search ask sharemode; (bso#13602); + Fix Samba GPO issue when Trust is enabled; (bso#11517); + samba-tool: Add "virtualKerberosSalt" attribute to 'user getpassword/syncpasswords'; (bso#13539); + Fix CTDB configuration issues; (bso#13589); + ctdbd logs an error until it can successfully connect to eventd; (bso#13592);- Update to samba-4.9.0rc4 + s3: smbd: Ensure get_real_filename() copes with empty pathnames; (bso#13585); + samba domain backup online/rename commands force user to specify password on CLI; (bso#13566); + wafsamba/samba_abi: Always hide ABI symbols which must be local; (bso#13579); + Fix a panic if fruit_access_check detects a locking conflict; (bso#13584); + Fix memory and resource leaks; (bso#13567); + python: Fix print in dns_invalid.py; (bso#13580); + Aliasing issue causes incorrect IPv6 checksum; (bso#13588); + Fix CTDB configuration issues; (bso#13589); + s3: vfs: time_audit: fix handling of token_blob in smb_time_audit_offload_read_recv(); (bso#13568);- Add missing zlib-devel dependency which was previously pulled in by libopenssl-devel- Update to samba-4.9.0rc3+git.22.3fff23ae36e + CVE-2018-10858: libsmb: Harden smbc_readdir_internal() against returns from malicious servers; (bso#13453); + CVE-2018-1140: ldbsearch '(distinguishedName=abc)' and DNS query with escapes crashes, ldb: Release LDB 1.3.5 for CVE-2018-1140; (bso#13374); + CVE-2018-10918: cracknames: Fix DoS (NULL pointer de-ref) when not servicePrincipalName is set on a user; (bso#13552); + CVE-2018-10919: acl_read: Fix unauthorized attribute access via searches; (bso#13434); + ctdb_mutex_ceph_rados_helper: Set SIGINT signal handler; (bso#13540); + CVE-2018-1139 libcli/auth: Do not allow ntlmv1 over SMB1 when it is disabled via "ntlm auth"; (bso#13360); + s3-tldap: do not install test_tldap; (bso#13529); + ctdb_mutex_ceph_rados_helper: Fix deadlock via lock renewals; (bso#13540); + CVE-2018-1140 Add NULL check for ldb_dn_get_casefold() in ltdb_index_dn_attr(); (bso#13374); + ctdb-eventd: Fix CID 1438155; (bso#13554); + Fix CIDs 1438243, (Unchecked return value) 1438244 (Unsigned compared against 0), 1438245 (Dereference before null check) and 1438246 (Unchecked return value); (bso#13553); + ctdb: Fix a cut&paste error; (bso#13554); + systemd: Only start smb when network interfaces are up; (bso#13559); + Fix quotas don't work with SMB2; (bso#13553); + s3/smbd: Ensure quota code is only called when quota support detected; (bso#13563); + s3/libsmb: Explicitly set delete_on_close token for rmdir; (bso#13204); + s3:waf: Install eventlogadm to /usr/sbin; (bso#13561); + Shorten description in vfs_linux_xfs_sgid manual; (bso#13562);- Update to samba-4.9.0rc2+git.21.a1069afb007 + s3: smbd: Using "sendfile = yes" with SMB2 can cause CPU spin; (bso#13537); + s3: smbd: Fix path check in smbd_smb2_create_durable_lease_check(); (bso#13535); + samba-tool trust: Support discovery via netr_GetDcName; (bso#13538); + s4-dsdb: Only build dsdb Python modules for AD DC; (bso#13542); + Fix portability issues on freebsd; (bso#13520); + DNS wildcard search does not handle multiple labels correctly; (bso#13536); + samba-tool domain trust: Fix trust compatibility to Windows Server 1709 and FreeIPA; (bso#13308); + Fix portability issues on freebsd; (bso#13520); + ctdb-protocol: Fix CTDB compilation issues; (bso#13545); + ctdb-docs: Replace obsolete reference to CTDB_DEBUG_HUNG_SCRIPT option; (bso#13546); + ctdb-doc: Provide an example script for migrating old configuration; (bso#13550); + ctdb-event: Implement event tool "script list" command; (bso#13551);- Update to samba-4.8.4+git.37.a7a861d7982; + CVE-2018-1139: Weak authentication protocol allowed; (bsc#1095048); (bsc#13360); + CVE-2018-1140: Denial of Service Attack on DNS and LDAP server; (bsc#1095056); (bso#13466); (bso#13374); + CVE-2018-10858: Insufficient input validation on client directory listing in libsmbclient; (bsc#1103411); (bso#13453); + CVE-2018-10918: Denial of Service Attack on AD DC DRSUAPI server; (bsc#1103414); (bso#13552); + CVE-2018-10919: Confidential attribute disclosure from the AD LDAP server; (bsc#1095057); (bso#13434); + s3:winbind: winbind normalize names' doesn't work for users; (bso#12851); + winbind: Fix UPN handling in canonicalize_username(); (bso#13369); + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428); + samdb: Fix building Samba with gcc 8.1; (bso#13437); + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440); + smbd: Flush dfree memcache on service reload; (bso#13446); + ldb: Save a copy of the index result before calling the + lib/util: No Backtrace given by Samba's AD DC by default; (bso#13454). + s3: smbd: printing: Re-implement delete-on-close semantics for print files missing since 3.5.x; (bso#13457). + python: Fix talloc frame use in make_simple_acl(); (bso#13474). + krb5_wrap: Fix keep_old_entries logic for older Kerberos libraries;(bso#13478). + krb5_plugin: Add winbind localauth plugin for MIT Kerberos; (bso#13480).- Add missing package descriptions; (bsc#1093864); - Fix dependency issue between samba-python and samba-kdc; (bsc#1062876); - Call update-apparmor-samba-profile when running samba-ad-dc; (bsc#1092099);- Update to 4.8.2 + After update to 4.8.0 DC failed with "Failed to find our own NTDS Settings objectGUID" (bso#13335). + fix incorrect reporting of stream dos attributes on a directory (bso#13380). + vfs_ceph: add asynchronous fsync; fake synchronous call (bso#13412). + vfs_ceph: add fake async pwrite/pread send/recv hooks; (bso#13425) + vfs_ceph: Fix memory leak; (bso#13424). + libsmbclient: Fix hard-coded connection error return of ETIMEDOUT; (bso#13419). + s4-lsa: Fix use-after-free in LSA server; (bso#13420). + winbindd: Do re-connect if the RPC call fails in the passdb case; (bso#13430). + cleanupd: Sends MSG_SMB_UNLOCK twice to interested peers; (bso#13416). + cleanupd: Use MSG_SMB_BRL_VALIDATE to signal cleanupd unclean process shutdown; (bso#13414). + ctdb-client: Remove ununsed functions from old client code; (bso#13411). + printing: Return the same error code as windows does on upload failures; (bso#13395). + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged pipe is not accessable; (bso#13400). + s4:lsa_lookup: remove TALLOC_FREE(state) after all dcesrv_lsa_Lookup{Names,Sids}_base_map() calls; (bso#13420). + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407). + s3:smbspool: Fix cmdline argument handling; (bso#13417).- Move libdfs-server-ad-samba4.so library from kdc to libs package, as it is required by some client libs; (bsc#1074135); - Update to 4.8.1; (bsc#1091179); + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error, we don't own it here; (bso#13244); + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't support fdopendir(); (bso#13270); + Round-tripping ACL get/set through vfs_fruit will increase the number of ACE entries without limit; (bso#13319); + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit issues; (bso#13347); + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without delete access; (bso#13358); + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372); + s3: smbd: Unix extensions attempts to change wrong field in fchown call; (bso#13375); + ms_schema/samba-tool visualize: Fix python2.6 incompatibility; (bso#13337); + Fix invocation of gnutls_aead_cipher_encrypt(); (bso#13352); + Windows 10 cannot logon on Samba NT4 domain; (bso#13328); + winbindd: Recover loss of netlogon secure channel in case the peer DC is rebooted; (bso#13332); + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363); + ctdb-client: Fix bugs in client code; (bso#13356); + ctdb-scripts: Drop "net serverid wipe" from 50.samba event script; (bso#13359); + s3: lib: messages: Don't use the result of sec_init() before calling sec_init(); (bso#13368); + libads: Fix the build '--without-ads'; (bso#13273); + winbind: Keep "force_reauth" in invalidate_cm_connection, add 'smbcontrol disconnect-dc'; (bso#13332); + vfs_virusfilter: Fix CIDs 1428738-1428740; (bso#13343); + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367); + rpc_server: Fix core dump in dfsgetinfo; (bso#13370); + smbclient: Fix notify; (bso#13382); + Fix smbd panic if the client-supplied channel sequence number wraps; (bso#13215); + Windows 10 cannot logon on Samba NT4 domain; (bso#13328); + lib/util: Remove unused '#include ' from tests/tfork.c; (bso#13342); + Fix build errors with cc from developerstudio 12.5 on Solaris; (bso#13343); + Fix the picky-developer build on FreeBSD 11; (bso#13344); + s3:modules: Fix the build of vfs_aixacl2.c; (bso#13345); + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338); + lib:replace: Fix linking when libtirpc-devel overwrites system headers; (bso#13341); + winbindd: 'wbinfo --name-to-sid' returns misleading result on invalid query; (bso#13312); + s3:passdb: Do not return OK if we don't have pinfo set up; (bso#13376); + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);- Use new foreground execution flags for systemd samba daemons; (bsc#1088574); (bsc#1071090); (bsc#1065551); + Add %post scriptlet to clear old sysconfig flags - Update vendor-files to commit 880b3e7. + Set samba sysconfig template variables to "" + Add required daemon flags directly to systemd unit- Specfile cleanup + Remove %if..%endif guards which don't affect the build + Remove redundant %clean section + Replace old $RPM_* shell vars with macros- BuildRequire pkgconfig(systemd) and pkgconfig(libsystemd) in place of systemd and systemd-devel: Allow OBS to optimize the workload by allowing the usage of the 'build-optimized' systemd packages.- Enable building samba with python3, and create a samba-python3 package.- Update to 4.8 + New GUID Index mode in sam.ldb for the AD DC + GPO support for samba KDC + Time machine support with vfs_fruit + Encrypted secrets + AD Replication visualization + Improved trust support - ability to not scan global trust list - AD external trusts have limited support - verbose trusted domain listing + VirusFilter VFS module + NT4-style replication removed + vfs_aio_linux removed- Disable samba-pidl package, due to the removal of dependency perl-Parse-Yapp; (bsc#1085150);- Update to 4.7.6; + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally; (bso#11343); (bsc#1081741); + CVE-2018-1057: Authenticated users can change other users' password; (bso#13272); (bsc#1081024).- Disable python until full python3 port is done; (bsc#1082139); + Remove contents of package samba-python + Remove contents of package libsamba-policy0 + Remove contents of package libsamba-policy-devel + Remove library libsamba-python-samba4.so from samba-libs package + Remove library libsamba-net-samba4.so from samba-libs package + Remove smbtorture binary and manpage from samba-test- samba fails to build with glibc2.27; (bsc#1081042);- Update to 4.7.5; (bsc#1080545); + smbd tries to release not leased oplock during oplock II downgrade; (bso#13193); + Fix copying file with empty FinderInfo from Windows client to Samba share with fruit; (bso#13181); + build: Deal with recent glibc sunrpc header removal; (bso#10976); + Make Samba work with tirpc and libnsl2; (bso#13238); + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208); (bsc#1075206); + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue; (bso#12986); + ctdb-recovery-helper: Deregister message handler in error paths; (bso#13188); + samba: Only use async signal-safe functions in signal handler; (bso#13240); + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue; (bso#12986); + repl_meta_data: Fix linked attribute corruption on databases with unsorted links on expunge. dbcheck: Add functionality to fix the corrupt database; (bso#13228); + Fix smbd panic when chdir returns error during exit; (bso#13189); + Make Samba work with tirpc and libnsl2; (bso#13238); + Fix POSIX ACL support on HPUX and possibly other big-endian OSs; (bso#13176);- Update to 4.7.4; (bsc#1080545); + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140); + s3: libsmb: Fix valgrind read-after-free error in cli_smb2_close_fnum_recv(); (bso#13171); + s3: libsmb: Fix reversing of oldname/newname paths when creating a reparse point symlink on Windows from smbclient; (bso#13172); + Build man page for vfs_zfsacl.8 with Samba; (bso#12934); + repl_meta_data: Allow delete of an object with dangling backlinks; (bso#13095); + s4:samba: Fix default to be running samba as a deamon; (bso#13129); + Performance regression in DNS server with introduction of DNS wildcard, ldb: Release 1.2.3; (bso#13191); + vfs_zfsacl: Fix compilation error; (bso#6133); + "smb encrypt" setting changes are not fully applied until full smbd restart; (bso#13051); + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052); + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155); + winbindd: Dependency on trusted-domain list in winbindd in critical auth codepath; (bso#13173); + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120); + ctdb: sock_daemon leaks memory; (bso#13153); + TCP tickles not getting synchronised on CTDB restart; (bso#13154); + winbindd: winbind parent and child share a ctdb connection; (bso#13150); + pthreadpool: Fix deadlock; (bso#13170); + pthreadpool: Fix starvation after fork; (bso#13179); + messaging: Always register the unique id; (bso#13180); + s4/smbd: set the process group; (bso#13129); + Fix broken linked attribute handling; (bso#13095); + The KDC on an RWDC doesn't send error replies in some situations; (bso#13132); + libnet_join: Fix 'net rpc oldjoin'; (bso#13149); + g_lock conflict detection broken when processing stale entries; (bso#13195); + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired sessions; (bso#13197); + s3:libads: net ads keytab list fails with "Key table name malformed"; (bso#13166); (bsc#1067700); + Fix crash in pthreadpool thread after failure from pthread_create; (bso#13170); + s4:samba: Allow samba daemon to run in foreground; (bso#13129); (bsc#1065551); + third_party: Link the aesni-intel library with "-z noexecstack"; (bso#13174); + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I" options; (bso#13125);- Re-enable usage of libnsl (did got lost with glibc change) - Use TI-RPC (sunrpc is deprecated and will be removed soon from glibc)- smbc_opendir should not return EEXIST with invalid login credentials; (bnc#1065868).- Update to 4.7.3; (bsc#1069666); + Non-smbd processes using kernel oplocks can hang smbd; (bso#13121); + python: use communicate to fix Popen deadlock; (bso#13127); + smbd on disk file corruption bug under heavy threaded load; (bso#13130); + tevent: version 0.9.34; (bso#13130); + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118); + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug; (bsc#1060427);(bso#13041); + CVE-2017-15275: s3: smbd: Chain code can return uninitialized memory when talloc buffer is grown; (bsc#1063008); (bso#13077); - Build with AD DC support only in openSUSE.- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- samba-tool requires samba-python; (bnc#1067771).- Run all daemons in the foreground and let systemd handle it; (bsc#1065551). - Update to 4.7.1; + Fix exporting subdirs with shadow_copy2; (bso#13091); + Currently if getwd() fails after a chdir(), we panic; (bso#13027); + Ensure default SMB_VFS_GETWD() call can't return a partially completed struct smb_filename; (bso#13068); + sys_getwd() can leak memory or possibly return the wrong errno on older systems; (bso#13069); + smbclient doesn't correctly canonicalize all local names before use; (bso#13093); + Fix broken linked attribute handling; (bso#13095); + Missing LDAP query escapes in DNS rpc server; (bso#12994); + Link to -lbsd when building replace.c by hand; (bso#13087); + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem; (bso#6133); + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module; (bso#7909); + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module; (bso#7933); + Missing assignment in sl_pack_float; (bso#12991); + Wrong Samba access checks when changing DOS attributes; (bso#12995); + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062); + groupmap cleanup should not delete BUILTIN mappings; (bso#13065); + Enabling vfs_fruit results in loss of Finder tags and other xattrs; (bso#13076); + man pages: Properly ident lists; (bso#9613); + smb.conf.5: Sort parameters alphabetically; (bso#13081); + Fix GUID string format on GetPrinter info; (bso#12993); + Remote serverid check doesn't check for the unique id; (bso#13042); + CTDB starts consuming memory if there are dead nodes in the cluster; (bso#13056); + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070); + libgpo doesn't sort the GPOs in the correct order; (bso#13046); + Remote serverid check doesn't check for the unique id; (bso#13042); + vfs_catia: Fix a potential memleak; (bso#13090); + Fix file change notification for renames; (bso#12903); + Samba DNS server does not honour wildcards; (bso#12952); + Can't change password in samba from a Windows client if Samba runs on IPv6 only interface; (bso#13079); + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086); + Apple client can't cope with SMB2 async replies when creating symlinks; (bso#13047); + s4:rpc_server:backupkey: Move variable into scope; (bso#12959); + Fix ntstatus_gen.h generation on 32bit; (bso#13099); + Fix a double free in vfs_gluster_getwd(); (bso#13100); + Fix resouce leaks and pointer issues; (bso#13101); + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);- Add samba-kdc to baselibs.conf. - Do not wrap samba-kdc's package definition into if/endif: the package won't be generated simply based on the fact that there is no files section for the package. Allows the source validator to ensure samba-kdc is a built package.- Update to 4.7.0; + Whole DB read locks: Improved LDAP and replication consistency; (bso#12858). + Samba AD with MIT Kerberos + Dynamic RPC port range: Default range changed from "1024-1300" to "49152-65535". + Authentication and Authorization audit support: New auth_audit debug class. + Multi-process LDAP Server: The LDAP server in the AD DC now honours the process model used for the rest of the 'samba' process. + Improved Read-Only Domain Controller (RODC) Support; (bso#12977). + Additional password hashes stored in supplementalCredentials. + Improvements to DNS during Active Directory domain join. + Significant AD performance and replication improvements. + Query record for open file or directory. + Removal of lpcfg_register_defaults_hook(). + Change of loadable module interface. + SHA256 LDAPS Certificates: The self-signed certificate generated for use on LDAPS will now be generated with a SHA256 self-signature, not a SHA1 self-signature. + CTDB no longer allows mixed minor versions in a cluster. + CTDB now ignores hints from Samba about TDB flags when attaching to databases. + New configuration variable CTDB_NFS_CHECKS_DIR. + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed. + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed. + The example NFS Ganesha call-out has been improved. + A new "replicated" database type is available.- CVE-2017-12163: Prevent client short SMB1 write from writing server memory to file; (bso#13020); (bsc#1058624).- CVE-2017-12150: Some code path don't enforce smb signing, when they should; (bso#12997); (bsc#1058622).- CVE-2017-12151: Keep required encryption across SMB3 dfs redirects; (bso#12996); (bsc#1058565).- Clean specfile assuming SUSE-only system and product >=SLE11 + %{ul_version}, %{rhel_version}, %{mandriva_version}, %{centos_version} are always undefined + %{_vendor} is "suse" and %{suse_version} is at least 1100- Update to 4.6.7; (bsc#1054017) + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392). + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937). + vfs_ceph provides inconsistent directory listings; (bso#12911). + Misused talloc context can cause a user to crash their smbd by chaining SMB1 commands.; (bso#12836). + Use-after free can crash libsmbclient code.; (bso#12927). + Server exit with active AIO can crash.; (bso#12925). + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910). + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs; (bso#12898). + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897). + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for authentication; (bso#12886). + finder sidebar showing question mark instead of icon when using ip to connect with vfs_fruit; (bso#12840). + Winbind stops obtaining the 'unixHomeDirectory' & 'loginShell' attributes from AD.; (bso#12720). + KCC run at selftest startup can fail spuriously due to a race; (bso#12869). + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for the remote change; (bso#12782). + rpc_pipe_client memory leaks due to long term memory context passed to rpc_pipe_open_interface(); (bso#12890). + CVE-2017-2619 breaks accessing previous versions of directories with snapshots in subdirectories of the share; (bso#12885). + dns_name_equal doing OOB read; (bso#12813). + replica_sync tests flap; (bso#12753). + Selftest should not call 'net cache flush' and wipe important winbind entries; (bso#12868). + Old Samba versions don't support using recent ldb versions (>=1.1.30); (bso#12859). + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490). + race starting winbindd against posixacl test; (bso#12843). + Crash in the reentrant smbd_smb2_create_send() if the something fails in the subsequent try; (bso#12832). + spnego.c passes the wrong argument order to gensec_update_ev() for the FALLBACK case; (bso#12788). + Clients with SMB3 support can't connect with "server max protocol = SMB2_02"; (bso#12772). + A log message of samb-tool user syncpasswords reverses string arguments in a debug message "Call Popen[...".; (bso#12768). + The smb tarmode tests kills the share dir contents; (bso#12867). + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862). + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860). + manpage/index.html lists links not in alphabetical order; (bso#12854). + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831). + If a record is locked in a database, then recovery does not complete; (bso#12857). + debug_locks.sh script does not log any information; (bso#12856). + SIGSEGV in cm_connect_lsa_tcp dereferencing conn->lsa_tcp_pipe->transport after error; (bso#12852). + smbclient can't parse DOMAIN+username if a different winbind separator is used; (bso#12849). + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845). + Related requests with TreeConnect fail with NETWORK_NAME_DELETED; (bso#12844). + cli->server_os not filled correctly; (bso#12779). + REGRESSION: smbclient doesn't print the session setup anymore; (bso#12824). + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808). + CTDB NFS call-out failures do not cause event failures; (bso#12837). + net command fails due to incorrectly return code; (bso#12828). + Fix building Samba with GCC 7.1; (bso#12827).- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again; (bsc#1048339).- fix cephwrap_chdir(); (bsc#1048790). - Update to 4.6.6 + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation; (bsc#1048278).- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).- Fix inconsistent ctdb socket path; (bsc#1048352). - Fix non-admin cephx authentication; (bsc#1048387).- Update to 4.6.5; (bsc#1040157) + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at startup; (bso#12814). + vfs_expand_msdfs tries to open the remote address as a file path; (bso#12687). + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type); (bso#12798). + With clustering get update_num_read_oplocks failed and PANIC: num_share_modes == 1 assertion failure; (bso#11844). + contend_level2_oplocks_begin_default oplock optimisation doesn't carry over to leases; (bso#12766). + `ctdb nodestatus` incorrectly displays status for all nodes with wrong exit code; (bso#12802). + CTDB can spin hard on revoking readonly delegations if a node becomes disconnected; (bso#12697). + Printing a share mode entry with leases can crash in the ndr code; (bso#12793). + Fix flakey unit tests for eventd; (bso#12792). + CTDB daemon crashes if built with clang; (bso#12770). + smbcacls fails if no password is specified; (bso#12765). + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757). + samba-tool user syncpasswords doesn't trigger the script when a user gets removed; (bso#12767). + systemd: fix detection of libsystemd; (bso#12764). + Notify subsystem only maps first inotify mask to Windows notify filter; (bso#12760). + Allow passing trusted domain password as plain-text to PASSDB layer; (bso#12751). + Can't case-rename files with vfs_fruit; (bso#12749). + wrong sid->uid mapping for SIDs residing in sIDHistory; (bso#12702). + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562). + Ordering of notify responses broken; (bso#12756).- s3: libsmb: Fix error where short name length was read as 2 bytes, should be 1; (bso#11822); (bsc#1042419).- Revert explicit winbind %{version}-%{release} dependency. + The ABI has stabilized since (bsc#936909), so remove to fix cross-media dependencies; (bsc#1037899).- Fix CVE-2017-7494 remote code execution from a writable share; (bso#12780); (bsc#1038231).- Update to 4.6.3; (bsc#1036011) + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots from shares with GlusterFS backend; (bso#12743). + Fix for Solaris C compiler; (bso#12559). + s3: locking: Update oplock optimization for the leases era; (bso#12628). + Make the Solaris C compiler happy; (bso#12693). + s3: libgpo: Allow skipping GPO objects that don't have the expected LDAP attributes; (bso#12695). + Fix buffer overflow caused by wrong use of getgroups; (bso#12747). + lib: debug: Avoid negative array access; (bso#12746). + cleanupdb: Fix a memory read error; (bso#12748). + streams_xattr and kernel oplocks results in NT_STATUS_NETWORK_BUSY; (bso#7537). + winbindd: idmap_autorid allocates ids for unknown SIDs from other backends; (bso#11961). + vfs_fruit: Resource fork open request with flags=O_CREAT|O_RDONLY; (bso#12565). + manpages/vfs_fruit: Document global options; (bso#12615). + lib/pthreadpool: Fix a memory leak; (bso#12624). + Lookup-domain for well-known SIDs on a DC; (bso#12727). + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728). + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729). + credentials_krb5: use gss_acquire_cred for client-side GSSAPI use case; (bso#12611). + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690). + ctdb-readonly: Avoid a tight loop waiting for revoke to complete; (bso#12697). + ctdb_event monitor command crashes if event is not specified; (bso#12723). + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733). + smbd: Fix smb1 findfirst with DFS; (bso#12558). + smbd: Do an early exit on negprot failure; (bso#12610). + winbindd: Fix substitution for 'template homedir'; (bso#12699). + s4:kdc: Disable principal based autodetected referral detection; (bso#12554). + idmap_autorid: Allocate new domain range if the callers knows the sid is valid; (bso#12613). + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724). + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for trusted domain; (bso#12725). + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731). + winbindd: Fix password policy for pam authentication; (bso#12725). + s3:gse: Correctly handle external trusts with MIT; (bso#12554). + auth/credentials: Always set the realm if we set the principal from the ccache; (bso#12611). + replace: Include sysmacros.h; (bso#12686). + s3:vfs_expand_msdfs: Do not open the remote address as a file; (bso#12687). + s3:libsmb: Only print error message if kerberos use is forced; (bso#12704). + winbindd: Child process crashes when kerberos-authenticating a user with wrong password; (bso#12708). + vfs_fruit: Office document opens as read-only on macOS due to CNID semantics; (bso#12715). + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is fragmented; (bso#12737).- Generate and update vendor-files tarball from Git + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).- Generate source tarball directly from Git using OBS tar_scm + use version string derived from parent Git tag and commit hash - remove obsolete vendor-files/tools/package-data version ID + explicitly generate ctdb manpages, needed without "make dist"- Update to 4.6.2 + remove bso#12721 patches now upstream- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622). + x86-64 and aarch64- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).- Build and install the html man pages (bsc#1021907).- Fix CVE-2017-2619 regression with "follow symlinks = no"; (bso#12721).- Update to 4.6.1 + symlink race permits opening files outside share directory; CVE-2017-2619; (bso#12496); (bsc#1027147) + testparm checks for valid idmap parameters + add new krb client encryption types + support for printer driver upload from windows 10 + inherit owner = 'unix only' for improved quota support + improved CTDB event support + new primary group support for idmap_ad + idmap_hash deprecated + mvxattr added to recursively rename extended attributes- Remove chkconfig requirements for systemd systems- Don't call insserv if systemd is used- Fix check if we need to require insserv- async_req: make async_connect_send() "reentrant"; (bso#12105); (bsc#1024416).- Force usage of ncurses6-config thru NCURSES_CONFIG env var; (bsc#1023847).- add missing patch for libnss_wins segfault; (bsc#995730).- Fix vfs_ceph builds against recent Ceph versions; (bsc#1021933).- Document "winbind: ignore domains" parameter; (bsc#1019416).- Add base Samba dependency to samba-ceph package.- Update to 4.5.3 + Heap-based Buffer Overflow Remote Code Execution Vulnerability; CVE-2016-2123; (bso#12409); (bsc#1014437). + Don't send delegated credentials to all servers; CVE-2016-2125; (bso#12445); (bsc#1014441). + denial of service due to a client triggered crash in the winbindd parent process; CVE-2016-2126; (bso#12446); (bsc#1014442). - 4.5.1 and 4.5.2 updates + various streams vfs fixes + various printing fixes + ntlm_auth: do not map explicitly empty domain + various stability fixes in smbd + match file compression ReFS behavior- Add missing ldb module directory; (bnc#1012092).- s3/client: obey 'disable netbios' smb.conf param, don't connect via NBT port; (bsc#1009085); (bso#12418).- Include vfstest in samba-test; (bsc#1001203).- s3/winbindd: using default domain with user@domain.com format fails; (bsc#997833).- Fix segfault in libnss_wins; (bso#12277); (bso#12269); (bsc#995730).- Update to 4.5.0 + NTLM1 Authentication disabled by default + SMB2.1 leases enabled by default + Support for OFD locks + ctdb tool rewritten + Added shadow copy snapshot prefix parameter- Fix illegal memory access after memory has been deleted; (bso#11836); (bsc#975299).- Prevent core, make sure response->extra_data.data is always cleared out; (bsc#993692).- Don't package man pages for VFS modules that aren't built; (boo#993707).- Fix population of ctdb sysconfig after source merge; (bsc#981566).- Enable vfs_ceph builds for Factory (x86-64) + Package as samba-ceph to avoid Ceph dependency in base package.- Update to 4.4.5 + Prevent client-side SMB2 signing downgrade; CVE-2016-2119; (bso#11860); (bsc#986869).- Remove obsolete syslog.target; (bsc#983938).- Honor smb.conf socket options in winbind; (bsc#975131).- Don't use htons() with IP_PROTO_RAW; (bso#11705); (bsc#969522).- Update to 4.4.4 + SMB3 multichannel: Add implementation of missing channel sequence number verification; (bso#11809). + smbd:close: Only remove kernel share modes if they had been taken at open; (bso#11919). + notifyd: Prevent NULL deref segfault in notifyd_peer_destructor; (bso#11930). + s3:rpcclient: Make '--pw-nt-hash' option work; (bso#10796). + Fix case sensitivity issues over SMB2 or above; (bso#11438). + s3:smbd: Fix anonymous authentication if signing is mandatory. (bso#11910) + Fix NTLM Authentication issue with squid; (bso#11914). + pdb: Fix segfault in pdb_ldap for missing gecos; (bso#11530). + Fix memory leak in share mode locking; (bso#11934).- Update to 4.4.3 + Various post-badlock regressions; (bso#11841); (bso#11850); (bso#11858); (bso#11870); (bso#11872). + Only allow idmap_hash for default idmap config (bso#11786). + smbd: Avoid large reads beyond EOF; (bso#11878). + vfs_acl_common: Avoid setting POSIX ACLs if "ignore system acls" is set; (bso#11806). + libads: Record session expiry for spnego sasl binds; (bso#11852).- Fix NTLMSSP regressions caused by previous CVE fixes; (bso#11849); (bsc#975962); (bsc#979268), (bsc#977669).- Revert shared library packaging to comply with SLPP- Update to 4.4.2 + A man-in-the-middle can downgrade NTLMSSP authentication; CVE-2016-2110; (bso#11688); (bsc#973031). + Domain controller netlogon member computer can be spoofed; CVE-2016-2111; (bso#11749); (bsc#973032). + LDAP conenctions vulnerable to downgrade and MITM attack; CVE-2016-2112; (bso#11644); (bsc#973033). + TLS certificate validation missing; CVE-2016-2113; (bso#11752); (bsc#973034). + Named pipe IPC vulnerable to MITM attacks; CVE-2016-2115; (bso#11756); (bsc#973036). + "Badlock" DCERPC impersonation of authenticated account possible; CVE-2016-2118; (bso#11804); (bsc#971965). + DCERPC server and client vulnerable to DOS and MITM attacks; CVE-2015-5370; (bso#11344); (bsc#936862).- Fix samba.tests.messaging test and prevent potential tdb corruption by removing obsolete now invalid tdb_close call; (bsc#974629).- Obsolete libsmbclient from libsmbclient0 while not providing it; (bsc#972197).- Update to 4.4.0. + Read of uninitialized memory DNS TXT handling; (bso#11128); (bso#11686); CVE-2016-0771. + Getting and setting Windows ACLs on symlinks can change permissions on link target; (bso#11648); CVE-2015-7560. + Sockets with htons(IPPROTO_RAW); (bso#11705); CVE-2015-8543. + s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystem with no ACL support; (bso#10489). + docs: Add example for domain logins to smbspool man page; (bso#11643). + smbd: Show correct disk size for different quota and dfree block sizes; (bso#11681). + docs: Add smbspool_krb5_wrapper manpage; (bso#11690). + winbindd: Return trust parameters when listing trusts; (bso#11691). + ctdb: Do not provide a useless pkgconfig file for ctdb; (bso#11696). + Crypto.Cipher.ARC4 is not available on some platforms, fallback to M2Crypto.RC4.RC4 then; (bso#11699). + s3:utils/smbget: Set default blocksize; (bso#11700). + Streamline 'smbget' options with the rest of the Samba utils; (bso#11700). + s3:clispnego: Fix confusing warning in spnego_gen_krb5_wrap(); (bso#11702). + s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703). + loadparm: Fix memory leak issue; (bso#11708). + lib/tsocket: Work around sockets not supporting FIONREAD; (bso#11714). + s3:vfs:glusterfs: Fix build after quota changes; (bso#11715). + ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ..."; (bso#11719). + lib:socket: Fix CID 1350010: Integer OVERFLOW_BEFORE_WIDEN; (bso#11723). + smbd: Fix CID 1351215 Improper use of negative value; (bso#11724). + smbd: Fix CID 1351216 Dereference null return value; (bso#11725). + s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new file; (bso#11727). + docs: Add manpage for cifsdd; (bso#11730). + param: Fix str_list_v3 to accept ; again; (bso#11732). + lib/socket: Fix improper use of default interface speed; (bso#11734). + lib:socket: Fix CID 1350009: Fix illegal memory accesses (BUFFER_SIZE_WARNING); (bso#11735). + libcli: Fix debug message, print sid string for new_ace trustee; (bso#11738). + Fix installation path of Samba helper binaries; (bso#11739). + Fix memory leak in loadparm; (bso#11740). + tevent: version 0.9.28: Fix memory leak when old signal action restored; (bso#11742). + smbd: Ignore SVHDX create context; (bso#11753). + Fix net join; (bso#11755). + s3:libads: setup the msDS-SupportedEncryptionTypes attribute on ldap_add; (bso#11755). + passdb: Add linefeed to debug message; (bso#11763). + s3:utils/smbget: Fix option parsing; (bso#11767). + libnet: Make Kerberos domain join site-aware; (bso#11769). + Reset TCP Connections during IP failover; (bso#11770). + ldb: Version 1.1.26; (bso#11772). + s3:smbd: Add negprot remote arch detection for OSX; (bso#11773). + vfs_glusterfs: Fix use after free in AIO callback; (bso#11774). + mkdir can return ACCESS_DENIED incorrectly on create race; (bso#11780). + "trustdom_list_done: Got invalid trustdom response" message should be avoided; (bso#11782). + Mismatch between local and remote attribute ids lets replication fail with custom schema; (bso#11783). + Quota is not supported on Solaris 10; (bso#11788). + Talloc: Version 2.1.6; (bso#11789). + smbd: Enable multi-channel if 'server multi channel support = yes' in the config; (bso#11796). + build: Fix build when '--without-quota' specified; (bso#11798). + lib/socket/interfaces: Fix some uninitialied bytes; (bso#11802). + Access based share enum: handle permission set in configuration files; (bso#8093). + See also WHATSNEW.txt from the samba-doc package.- Update to 4.3.6. + Getting and setting Windows ACLs on symlinks can change permissions on link target; CVE-2015-7560; (bso#11648); (bsc#968222). + Fix Out-of-bounds read in internal DNS server; CVE-2016-0771; (bso#11128); (bso#11686); (bsc#968223).- Upgrade on-disk FSRVP server state to new version; (bsc#924519).- Only obsolete but do not provide gplv2/3 package names; (bsc#968973).- Relocate existing lock files to /var/lib/samba/lock; (bsc#968963).- Obsolete no longer existing samba-32bit package; (bsc#967625).- Update to 4.3.5. + s3:utils/smbget: Fix recursive download; (bso#6482). + s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystemi with no ACL support; (bso#10489). + s3:smbd/oplock: Obey kernel oplock setting when releasing oplocks; (bso#11400). + vfs_shadow_copy2: Fix case where snapshots are outside the share; (bso#11580). + smbclient: Query disk usage relative to current directory; (bso#11662). + winbindd: Handle expired sessions correctly; (bso#11670). + smbd: Show correct disk size for different quota and dfree block sizes; (bso#11681). + smbcacls: Fix uninitialized variable; (bso#11682). + s3:smbd: Ignore initial allocation size for directory creation; (bso#11684). + s3-client: Add a KRB5 wrapper for smbspool; (bso#11690). + s3-parm: Clean up defaults when removing global parameters; (bso#11693). + Use M2Crypto.RC4.RC4 on platforms without Crypto.Cipher.ARC4; (bso#11699). + s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703). + ctdb: Remove error messages after kernel security update; CVE-2015-8543; (bso#11705). + loadparm: Fix memory leak issue; (bso#11708). + lib/tsocket: Work around sockets not supporting FIONREAD; (bso#11714). + ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ..."; (bso#11719). + s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new file; (bso#11727). + param: Fix str_list_v3 to accept ";" again; (bso#11732).- Shift samba-client sysconfig data into samba and samba-winbind; (bsc#947361).- Simplify shared library packaging; (bsc#966956).- Enable clustering (CTDB) support; (bsc#966271).- s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703); (bsc#964023).- Add quotes around path of update-apparmor-samba-profile; (bnc#962177).- Remove autoconf build-time requirement.- Update to 4.3.4. + vfs_fruit: Enable POSIX directory rename semantics; (bso#11065). + Crash: Bad talloc magic value - access after free; (bso#11394). + Copying files with vfs_fruit fails when using vfs_streams_xattr without stream prefix and type suffix; (bso#11466). + samba-tool: Fix uncaught exception if no fSMORoleOwner attribute is given; (bso#11613). + Fix a typo in the smb.conf manpage, explanation of idmap config; (bso#11619). + Correctly initialize the list head when keeping a list of primary followed by DFS connections; (bso#11624). + Reduce the memory footprint of empty string options; (bso#11625). + lib/async_req: Do not install async_connect_send_test; (bso#11639). + Fix typos in man vfs_gpfs; (bso#11641). + Make "hide dot files" option work with "store dos attributes = yes"; (bso#11645). + Fix a corner case of the symlink verification; (bso#11647); (bnc#960249). + Do not disable "store dos attributes" on-the-fly; (bso#11649). + Update lastLogon and lastLogonTimestamp; (bso#11659).- Prevent access denied if the share path is "/"; (bso#11647); (bnc#960249).- Update to 4.3.3. + Malicious request can cause Samba LDAP server to hang, spinning using CPU; CVE-2015-3223; (bso#11325); (bnc#958581). + Remote read memory exploit in LDB; CVE-2015-5330; (bso#11599); (bnc#958586). + Insufficient symlink verification (file access outside the share); CVE-2015-5252; (bso#11395); (bnc#958582). + No man in the middle protection when forcing smb encryption on the client side; CVE-2015-5296; (bso#11536); (bnc#958584). + Currently the snapshot browsing is not secure thru windows previous version (shadow_copy2); CVE-2015-5299; (bso#11529); (bnc#958583). + Fix Microsoft MS15-096 to prevent machine accounts from being changed into user accounts; CVE-2015-8467; (bso#11552); (bnc#958585).- Update to 4.3.2. + vfs_gpfs: Re-enable share modes; (bso#11243). + dcerpc.idl: Accept invalid dcerpc_bind_nak pdus; (bso#11327). + s3-smbd: Fix old DOS client doing wildcard delete - gives an attribute type of zero; (bso#11452). + Add libreplace dependency to texpect, fixes a linking error on Solaris; (bso#11511). + s4: Fix linking of 'smbtorture' on Solaris; (bso#11512). + s4:lib/messaging: Use correct path for names.tdb; (bso#11562). + Fix segfault of 'net ads (join|leave) -S INVALID' with nss_wins; (bso#11563). + async_req: Fix non-blocking connect(); (bso#11564). + auth: gensec: Fix a memory leak; (bso#11565). + lib: util: Make non-critical message a warning; (bso#11566). + Fix winbindd crashes with samlogon for trusted domain user; (bso#11569); (bnc#949022). + smbd: Send SMB2 oplock breaks unencrypted; (bso#11570). + ctdb: Open the RO tracking db with perms 0600 instead of 0000; (bso#11577). + s3:smb2_server: Make the logic of SMB2_CANCEL DLIST_REMOVE() clearer; (bso#11581). + s3-smbd: Fix use after issue in smbd_smb2_request_dispatch(); (bso#11581). + manpage: Correct small typo error; (bso#11584). + s3: smbd: If EAs are turned off on a share don't allow an SMB2 create containing them; (bso#11589). + Backport some valgrind fixes from upstream master; (bso#11597). + auth: Consistent handling of well-known alias as primary gid; (bso#11608). + winbind: Fix crash on invalid idmap configs; (bso#11612). + s3: smbd: have_file_open_below() fails to enumerate open files below an open directory handle; (bso#11615). + Changing log level of two entries to DBG_NOTICE; (bso#9912).- Ensure samlogon fallback requests are rerouted after kerberos failure; (bnc#953382); (bnc#953972).- Ensure to link with --as-needed flag by removing SUSE_ASNEEDED=0. - Always use the default optimization even on pre-9.2 systems.- Remove redundant configure options while adding with-relro.- Relocate the lockdir to the /var/lib/samba/lock directory.- Cleanup and enhance the pidl sub package.- Require renamed python-ldb-devel and python-talloc-devel at build-time. - Requires python-ldb and python-talloc from the python subpackage.- Update to 4.3.1. + s3: smbd: Fix our access-based enumeration on "hide unreadable" to match Windows; (bso#10252). + nss_winbind: Fix hang on Solaris on big groups; (bso#10365). + smbd: Fix file name buflen and padding in notify repsonse; (bso#10634). + kerberos: Make sure we only use prompter type when available; winbind: Fix 100% loop; (bso#11038). + source3/lib/msghdr.c: Fix compiling error on Solaris; (bso#11053). + s3:ctdbd_conn: make sure we destroy tevent_fd before closing the socket; (bso#11316). + s3: smbd: Fix mkdir race condition; (bso#11486). + pam_winbind: Fix a segfault if initialization fails; (bso#11502). + s3: dfs: Fix a crash when the dfs targets are disabled; (bso#11509). + s4:lib/messaging: Use 'msg.lock' and 'msg.sock' for messaging related subdirs; (bso#11515). + s3: smbd: Fix opening/creating :stream files on the root share directory; (bso#11522). + lib/param: Fix hiding of FLAG_SYNONYM values; (bso#11526). + net: Fix a crash with 'net ads keytab create'; (bso#11528). + s3: smbd: Fix a crash in unix_convert(); (bso#11535). + s3: smbd: Fix NULL pointer bug introduced by previous 'raw' stream fix (bso#11522); (bso#11535). + vfs_fruit: Return value of ad_pack in vfs_fruit.c; (bso#11543). + vfs_commit: set the fd on open before calling SMB_VFS_FSTAT; (bso#11547). + s3:locking: Initialize lease pointer in share_mode_traverse_fn(); (bso#11549). + s3:smbstatus: Add stream name to share_entry_forall(); (bso#11550). + s3:lib: Validate domain name in lookup_wellknown_name(); (bso#11555). + s3: lsa: lookup_name() logic for unqualified (no DOMAIN component) names is incorrect; (bso#11555).- Fix 100% CPU in winbindd when logging in with "user must change password on next logon"; (bso#11038).- Relocate the tmpfiles.d directory to the client package; (bnc#947552).- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf instead; (bnc#942716).- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).- Package /var/lib/samba/msg with 0755 permissions; (bso#11515); (bnc#945502).- Require to install libfam0-gamin from samba-libs on post-12.1 and pre-13.15 systems; (bnc#945013).- Update to 4.3.0. + Samba "map to guest = Bad uid" doesn't work; (bso#9862). + revert LDAP extended rule 1.2.840.113556.1.4.1941 LDAP_MATCHING_RULE_IN_CHAIN changes; (bso#10493). + No objectClass found in replPropertyMetaData on ordinary objects (non-deleted); (bso#10973). + Stream names with colon don't work with fruit:encoding = native; (bso#11278). + NetApp joined to a Samba/ADDC cannot resolve SIDs; (bso#11291). + tevent_fd needs to be destroyed before closing the fd; (bso#11316). + "force group" with local group not working; (bso#11320). + strsep is not available on Solaris; (bso#11359). + smbtorture does not build when configured --with-system-mitkrb5; (bso#11411). + Build with GPFS support is broken; (bso#11421). + Build broken with --disable-python; (bso#11424). + net share allowedusers crashes; (bso#11426). + nmbd incorrectly matches netbios names as own name; (bso#11427). + Python bindings don't check integer types; (bso#11429). + Python bindings don't check array sizes; (bso#11430). + CTDB's eventscript error handling is broken; (bso#11431). + Fix crash in nested ctdb banning; (bso#11432). + Cannot build ctdbpmda; (bso#11434). + samba-tool uncaught exception error; (bso#11436). + Crash in notify_remove caused by change notify = no; (bso#11444). + Poor SMB3 encryption performance with AES-GCM; (bso#11451). + Poor SMB3 encryption performance with AES-GCM (part1); (bso#11451). + fix recursion problem in rep_strtoll in lib/replace/replace.c; (bso#11455). + --bundled-libraries=!ldb,!pyldb,!pyldb-util doesn't disable ldb build and install; (bso#11458). + xid2sid gives inconsistent results; (bso#11464). + ctdb: Fix the build on FreeBSD 10.1; (bso#11465). + Handling of 0 byte resource fork stream; (bso#11467). + AD samr GetGroupsForUser fails for users with "()" in their name; (bso#11488).- Configure with --bundled-libraries=NONE; (bso#11458).- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).- Remove libiniparser-devel build-time requirement.- Update to 4.2.3. + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780). + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924). + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991). + Logon via MS Remote Desktop hangs; (bso#11061). + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068). + tevent: Add a note to tevent_add_fd(); (bso#11141). + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170). + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217). + smbd: Fix a use-after-free; (bso#11218); (bnc#919309). + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces; (bso#11245). + s3:smb2: Add padding to last command in compound requests; (bso#11277). + Add IPv6 support to ADS client side LDAP connects; (bso#11281). + Add IPv6 support for determining FQDN during ADS join; (bso#11282). + s3: IPv6 enabled DNS connections for ADS client; (bso#11283). + Fix invalid write in ctdb_lock_context_destructor; (bso#11293). + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295). + vfs_fruit: Add option "veto_appledouble"; (bso#11305). + tstream: Make socketpair nonblocking; (bso#11312). + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313). + Group creation: Add msSFU30Name only when --nis-domain was given; (bso#11315). + tevent_fd needs to be destroyed before closing the fd; (bso#11316). + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared"; (bso#11319). + smbd/trans2: Add a useful diagnostic for files with bad encoding; (bso#11323). + Change sharesec output back to previous format; (bso#11324). + Robust mutex support broken in 1.3.5; (bso#11326). + Kerberos auth info3 should contain resource group ids available from pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info exists in PAC; (bso#11328); (bnc#912457). + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329). + tevent: Fix CID 1035381 Unchecked return value; (bso#11330). + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331). + s3: smbd: Use separate flag to track become_root()/unbecome_root() state; (bso#11339). + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342). + pidl: Make the compilation of PIDL producing the same results if the content hasn't change; (bso#11356). + winbindd: Disconnect child process if request is cancelled at main process; (bso#11358). + vfs_fruit: Check offset and length for AFP_AfpInfo read requests; (bso#11363). + docs: Overhaul the description of "smb encrypt" to include SMB3 encryption; (bso#11366). + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server(); (bso#11367). + ncacn_http: Fix GNUism; (bso#11371).- Disable rpath usage; (bnc#902421).- Make the winbind package depend on the matching libwbclient version and vice versa; (bnc#936909).- Backport changes to use resource group sids obtained from pac logon_info; (bso#11328); (bnc#912457).- Order winbind.service Before and Want nss-user-lookup target.- Remove fam-devel build-time dependency for post-6 RHEL systems.- Update to 4.2.2. + s3:smbXsrv: refactor duplicate code into smbXsrv_session_clear_and_logoff(); (bso#11182). + gencache: don't fail gencache_stabilize if there were records to delete; (bso#11260). + s3: libsmbclient: After getting attribute server, ensure main srv pointer is still valid; (bso#11186). + s4: rpc: Refactor dcesrv_alter() function into setup and send steps; (bso#11236). + s3: smbd: Incorrect file size returned in the response of "FILE_SUPERSEDE Create"; (bso#11240). + Mangled names do not work with acl_xattr; (bso#11249). + nmbd rewrites browse.dat when not required; (bso#11254). + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff; (bso#11213). + s3:smbd: Add missing tevent_req_nterror; (bso#11224). + vfs: kernel_flock and named streams; (bso#11243). + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244). + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses are used; (bso#11284). + ctdb: check for talloc_asprintf() failure; (bso#11201). + spoolss: purge the printer name cache on name change; (bso#11210); (bnc#901813). + CTDB statd-callout does not scale; (bso#11204). + vfs_fruit: also map characters below 0x20; (bso#11221). + ctdb: Coverity fix for CID 1291643; (bso#11201). + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225). + Fix terminate connection behavior for asynchronous endpoint with PUSH notification flavors; (bso#11226). + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007). + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201). + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the directory is deleted; (bso#11257). + s3:winbindd: make sure we remove pending io requests before closing client sockets; (bso#11141); (bnc#931854). + Fix panic triggered by smbd_smb2_request_notify_done() -> smbXsrv_session_find_channel() in smbd; (bso#11182). + 'sharesec' output no longer matches input format; (bso#11237). + waf: Fix systemd detection; (bso#11200). + CTDB: Fix portability issues; (bso#11202). + CTDB: Fix some IPv6-related issues; (bso#11203). + CTDB statd-callout does not scale; (bso#11204). + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you enter invalid values; (bso#11234). + libads: record service ticket endtime for sealed ldap connections; (bso#11267). + lib/util: Include DEBUG macro in internal header files before samba_util.h; (bso#11033).- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).- Remove the independently built libraries ldb, talloc, tdn, and tevent and the post-10.3 renamed libsmbclient from baselibs.conf.- Drop redundant doc attribute from man pages.- Update to 4.2.1. + s3:winbind:grent: Don't stop group enumeration when a group has no gid; (bso#8905). + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791). + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with servers that don't send the 2 unused fields; (bso#10016). + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476). + waf: Fix the build on openbsd; (bso#10476). + s3: client: "client use spnego principal = yes" code checks wrong name; (bso#10888). + spoolss: Retrieve published printer GUID if not in registry; (bso#11018). + s3: lib: libsmbclient: If reusing a server struct, check every cli->timout miliseconds if it's still valid before use; (bso#11079). + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125). + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135). + replace: Remove superfluous check for gcrypt header; (bso#11135). + Backport subunit changes; (bso#11137). + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with implementation; (bso#11140). + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143). + talloc: Version 2.1.2; (bso#11144). + Update libwbclient version to 0.12; (bso#11149). + brlock: Use 0 instead of empty initializer list; (bso#11153). + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164). + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169); (bnc#913304). + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev fails in the SMB1 case; (bso#11173). + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174). + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175). + s3: libsmbclient: Add missing talloc stackframe; (bso#11177). + s4-process_model: Do not close random fds while forking; (bso#11180). + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).- Prevent samba package updates from disabling samba kerberos printing.- Add sparse file support for samba; (fate#318424).- Purge printer name cache on spoolss SetPrinter change; (bso#11210); (bnc#901813).- Correctly retain errno from Btrfs snapshot ioctls; (bnc#923374).- Simplify libxslt build requirement and README.SUSE install. - Remove no longer required cleanup steps while populating the build root.- Remove deprecated base_rid example from idmap_rid manpage; (bso#11169); (bnc#913304).- Update to 4.2.0. + smbd: Stop using vfs_Chdir after SMB_VFS_DISCONNECT; (bso#1115). + pam_winbind: fix warn_pwd_expire implementation; (bso#9056). + nsswitch: Fix soname of linux nss_*.so.2 modules; (bso#9299). + Make 'profiles' work again; (bso#9629). + s3:smb2_server: protect against integer wrap with "smb2 max credits = 65535"; (bso#9702). + Make validate_ldb of String(Generalized-Time) accept millisecond format ".000Z"; (bso#9810). + Use -R linker flag on Solaris, not -rpath; (bso#10112). + vfs: Add glusterfs manpage; (bso#10240). + Make 'smbclient' use cached creds; (bso#10279). + pdb: Fix build issues with shared modules; (bso#10355). + s4-dns: Add support for BIND 9.10; (bso#10620). + idmap: Return the correct id type to *id_to_sid methods; (bso#10720). + printing/cups: Pack requested-attributes with IPP_TAG_KEYWORD; (bso#10808). + Don't build vfs_snapper on FreeBSD; (bso#10834). + nss_winbind: Add getgroupmembership for FreeBSD; (bso#10835). + idmap_rfc2307: Fix a crash after connection problem to DC; (bso#10837). + s3: smb2cli: query info return length check was reversed; (bso#10848). + s3: lib, s3: modules: Fix compilation on Solaris; (bso#10849). + lib: uid_wrapper: Fix setgroups and syscall detection on a system without native uid_wrapper library; (bso#10851). + winbind3: Fix pwent variable substitution; (bso#10852). + Improve samba-regedit; (bso#10859). + registry: Don't leave dangling transactions; (bso#10860). + Fix build of socket_wrapper on systems without SO_PROTOCOL; (bso#10861). + build: Do not install 'texpect' binary anymore; (bso#10862). + Fix testparm to show hidden share defaults; (bso#10864). + libcli/smb: Fix smb2cli_validate_negotiate_info with min=PROTOCOL_NT1 max=PROTOCOL_SMB2_02; (bso#10866). + Integrate CTDB into top-level Samba build; (bso#10892). + samba-tool group add: Add option '--nis-domain' and '--gid'; (bso#10895). + s3-nmbd: Fix netbios name truncation; (bso#10896). + spoolss: Fix handling of bad EnumJobs levels; (bso#10898). + Fix smbclient loops doing a directory listing against Mac OS X 10 server with a non-wildcard path; (bso#10904). + Fix print job enumeration; (bso#10905); (bnc#898031). + samba-tool: Create NIS enabled users and unixHomeDirectory attribute; (bso#10909). + Add support for SMB2 leases; (bso#10911). + btrfs: Don't leak opened directory handle; (bso#10918). + s3: nmbd: Ensure NetBIOS names are only 15 characters stored; (bso#10920). + s3:smbd: Fix file corruption using "write cache size != 0"; (bso#10921). + pdb_tdb: Fix a TALLOC/SAFE_FREE mixup; (bso#10932). + s3-keytab: fix keytab array NULL termination; (bso#10933). + s3:passdb: fix logic in pdb_set_pw_history(); (bso#10940). + Cleanup add_string_to_array and usage; (bso#10942). + dbwrap_ctdb: Pass on mutex flags to tdb_open; (bso#10942). + Fix RootDSE search with extended dn control; (bso#10949). + Fix 'samba-tool dns serverinfo ' for IPv6; (bso#10952). + libcli/smb: only force signing of smb2 session setups when binding a new session; (bso#10958). + s3-smbclient: Return success if we listed the shares; (bso#10960). + s3-smbstatus: Fix exit code of profile output; (bso#10961). + socket_wrapper: Add missing prototype check for eventfd; (bso#10965). + libcli: SMB2: Pure SMB2-only negprot fix to make us behave as a Windows client does; (bso#10966). + vfs_streams_xattr: Check stream type; (bso#10971). + s3: smbd: Fix *allocate* calls to follow POSIX error return convention; (bso#10982). + vfs_fruit: Add support for AAPL; (bso#10983). + Fix spoolss IDL response marshalling when returning error without clearing info; (bso#10984). + dsdb-samldb: Check for extended access rights before we allow changes to userAccountControl; (bso#10993); CVE-2014-8143; (boo#914279). + Fix IPv6 support in CTDB; (bso#10996). + ctdb-daemon: Use correct tdb flags when enabling robust mutex support; (bso#11000). + vfs_streams_xattr: Add missing call to SMB_VFS_NEXT_CONNECT; (bso#11005). + s3-util: Fix authentication with long hostnames; (bso#11008). + ctdb-build: Fix build without xsltproc; (bso#11014). + packaging: Include CTDB man pages in the tarball; (bso#11014). + pdb_get_trusteddom_pw() fails with non valid UTF16 random passwords; (bso#11016). + Make Sharepoint search show user documents; (bso#11022). + nss_wrapper: check for nss.h; (bso#11026). + Enable mutexes in gencache_notrans.tdb; (bso#11032). + tdb_wrap: Make mutexes easier to use; (bso#11032). + lib/util: Avoid collision which alread defined consumer DEBUG macro; (bso#11033). + winbind: Retry after SESSION_EXPIRED error in ping-dc; (bso#11034). + s3-libads: Fix a possible segfault in kerberos_fetch_pac(); (bso#11037). + vfs_fruit: Fix base_fsp name conversion; (bso#11039). + vfs_fruit: mmap under FreeBSD needs PROT_READ; (bso#11040). + Fix authentication using Kerberos (not AD); (bso#11044). + net: Fix sam addgroupmem; (bso#11051). + vfs_snapper: Correctly handles multi-byte DBus strings; (bso#11055); (bnc#913238). + cli_connect_nb_send: Don't segfault on host == NULL; (bso#11058). + utils: Fix 'net time' segfault; (bso#11058). + libsmb: Provide authinfo domain for encrypted session referrals; (bso#11059). + s3-pam_smbpass: Fix memory leak in pam_sm_authenticate(); (bso#11066). + vfs_glusterfs: Add comments to the pipe(2) code; (bso#11069). + vfs/glusterfs: Change xattr key to match gluster key; (bso#11069). + vfs_glusterfs: Implement AIO support; (bso#11069). + s3-vfs: Fix developer build of vfs_ceph module; (bso#11070). + s3: netlogon: Ensure we don't call talloc_free on an uninitialized pointer; (bso#11077); CVE-2015-0240; (bnc#917376). + vfs: Add a brief vfs_ceph manpage; (bso#11088). + s3: smbclient: Allinfo leaves the file handle open; (bso#11094). + Fix Win8.1 Credentials Manager issue after KB2992611 on Samba domain; (bso#11097). + debug: Set close-on-exec for the main log file FD; (bso#11100). + s3: smbd: leases - losen paranoia check. Stat opens can grant leases; (bso#11102). + s3: smbd: SMB2 close. If a file has delete on close, store the return info before deleting; (bso#11104). + doc:man:vfs_glusterfs: improve the configuration section; (bso#11117). + snprintf: Try to support %j; (bso#11119). + ctdb-io: Do not use sys_write to write to client sockets; (bso#11124). + doc-xml: Add 'sharesec' reference to 'access based share enum'; (bso#11127).- Update to 4.2.0rc5. + Ensure we don't call talloc_free on an uninitialized pointer; CVE-2015-0240; (bso#11077); (bnc#917376).- Fix usage of freed memory on server exit; (bso#11218); (bnc#919309).- Fix tdb_store_flag_to_ntdb() gcc5 build failure.- Fix vfs_snapper DBus string handling; (bso#11055); (bnc#913238).- Update to 4.1.16. + dsdb-samldb: Check for extended access rights before we allow changes to userAccountControl; (bso#10993); CVE-2014-8143; (boo#914279).- Adjust baselibs.conf due to libpdb0 package rename to libsamba-passdb0.- Fix libsmbclient DFS referral handling. + Reuse connections derived from DFS referrals; (bso#10123); (fate#316512). + Set domain/workgroup based on authentication callback value; (bso#11059).- Update to 4.2.0rc4. - Add libsamba-debug, libsocket-blocking, libsamba-cluster-support, and libhttp to the libs package; (boo#913547). - Rename libpdb packages to libsamba-passdb. - Drop libsmbsharemodes packages.- Enable avahi support on post-12.2 systems.- Update to 4.1.15. + pam_winbind: Fix warn_pwd_expire implementation; (bso#9056). + nsswitch: Fix soname of linux nss_*.so.2 modules; (bso#9299). + Fix profiles tool; (bso#9629). + s3-lib: Do not require a password with --use-ccache; (bso#10279). + s4:dsdb/rootdse: Expand extended dn values with the AS_SYSTEM control; (bso#10949). + s4-rpc: dnsserver: Fix enumeration of IPv4 and IPv6 addresses; (bso#10952). + s3:smb2_server: Allow reauthentication without signing; (bso#10958). + s3-smbclient: Return success if we listed the shares; (bso#10960). + s3-smbstatus: Fix exit code of profile output; (bso#10961). + libcli: SMB2: Pure SMB2-only negprot fix to make us behave as a Windows client does; (bso#10966). + s3: smbd/modules: Fix *allocate* calls to follow POSIX error return convention; (bso#10982). + Fix 'domain join' by adding 'drsuapi.DsBindInfoFallBack' attribute 'supported_extensions'; (bso#11006). + idl:drsuapi: Manage all possible lengths of drsuapi_DsBindInfo; (bso#11006). + winbind: Retry LogonControl RPC in ping-dc after session expiration; (bso#11034).- yast2-samba-client should be able to specify osName and osVer on AD domain join; (bnc#873922).- Lookup FSRVP share snums at runtime rather than storing them persistently; (bnc#908627).- Specify soft dependency for network-online.target in Winbind systemd service file; (bnc#889175).- Fix spoolss error response marshalling; (bso#10984).- Update to 4.1.14. + pidl/wscript: Remove --with-perl-* options; revert buildtools/wafadmin/ Tools/perl.py back to upstream state; (bso#10472). + s4-dns: Add support for BIND 9.10; (bso#10620). + nmbd fails to accept "--piddir" option; (bso#10711). + nss_winbind: Add getgroupmembership for FreeBSD; (bso#10835). + S3: source3/smbd/process.c::srv_send_smb() returns true on the error path; (bso#10880). + vfs_glusterfs: Remove "integer fd" code and store the glfs pointers; (bso#10889). + s3-nmbd: Fix netbios name truncation; (bso#10896). + spoolss: Fix handling of bad EnumJobs levels; (bso#10898). + s3: libsmbclient-smb2. MacOSX 10 SMB2 server doesn't set STATUS_NO_MORE_FILES when handed a non-wildcard path; (bso#10904). + spoolss: Fix jobid in level 3 EnumJobs response; (bso#10905). + s3: nmbd: Ensure NetBIOS names are only 15 characters stored; (bso#10920). + s3:smbd: Fix file corruption using "write cache size != 0"; (bso#10921). + pdb_tdb: Fix a TALLOC/SAFE_FREE mixup; (bso#10932). + s3-keytab: Fix keytab array NULL termination; (bso#10933). + Cleanup add_string_to_array and usage; (bso#10942).- Remove and cleanup shares and registry state associated with externally deleted snaphots exposed as shadow copies; (bnc#876312).- Use the upstream tar ball, as signature verification is now able to handle compressed archives.- Fix leak when closing file descriptor returned from dirfd; (bso#10918).- Fix spoolss EnumJobs and GetJob responses; (bso#10905); (bnc#898031). + Fix handling of bad EnumJobs levels; (bso#10898).- Remove dependency on gpg-offline as signature checking is implemented in the source validator.- Update to 4.1.13. + s3-libnet: Add libnet_join_get_machine_spns(); (bso#9984). + s3-libnet: Make sure we do not overwrite precreated SPNs; (bso#9984). + s3-libads: Add all machine account principals to the keytab; (bso#9985). + s3: winbindd: Old NT Domain code sets struct winbind_domain->alt_name to be NULL. Ensure this is safe with modern AD-DCs; (bso#10717). + Fix unstrcpy; (bso#10735). + pthreadpool: Slightly serialize jobs; (bso#10779). + s3: smbd: streams - Ensure share mode validation ignores internal opens (op_mid == 0); (bso#10797). + s3: smbd:open_file: Open logic fix; Use a more natural check; (bso#10809). + vfs_media_harmony: Fix a crash bug; (bso#10813). + docs: Mention incompatibility between kernel oplocks and streams_xattr; (bso#10814). + nmbd: Send waiting status to systemd; (bso#10816). + libcli: Fix a segfault calling smbXcli_req_set_pending() on NULL; (bso#10817). + nsswitch: Skip groups we were not able to map; (bso#10824). + s3-winbindd: Use correct realm for trusted domains in idmap child; (bso#10826). + s3: nmbd: Ensure the main nmbd process doesn't create zombies; (bso#10830). + s3: lib: Signal handling - ensure smbrun and change password code save and restore existing SIGCHLD handlers; (bso#10831). + idmap_rfc2307: Fix a crash after connection problem to DC; (bso#10837). + s3-winbindd: Do not use domain SID from LookupSids for Sids2UnixIDs call; (bso#10838). + s3: smb2cli: Query info return length check was reversed; (bso#10848). + registry: Don't leave dangling transactions; (bso#10860).- Update to 4.2.0rc2./bin/sh/bin/sh/bin/sh/bin/shsamba-gplv3-winbindgoat02 1658744842 4.15.8+git.500.d5910280cc7-150400.3.11.14.15.8+git.500.d5910280cc7-150400.3.11.14.15.8+git.500.d5910280cc7-150400.3.11.14.15.8+git.500.d5910280cc7 samba-winbindpam_winbind.conf55-samba-winbindd55-samba-winbinddsamba-winbinddntlm_authwbinfowinbind.servicercwinbindwinbinddsysconfig.samba-winbindntlm_auth.1.gzwbinfo.1.gzwinbindd.8.gzwinbind.xmlkrb5rcachewinbindd_privileged/etc/logrotate.d//etc/security//etc/sysconfig/network/if-down.d//etc/sysconfig/network/if-up.d//etc/sysconfig/network/scripts//usr/bin//usr/lib/systemd/system//usr/sbin//usr/share/fillup-templates//usr/share/man/man1//usr/share/man/man8//usr/share/omc/svcinfo.d//var/cache//var/lib/samba/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:25017/SUSE_SLE-15-SP4_Update/a5f316dea5f06e3771d2e9522c42f892-samba.SUSE_SLE-15-SP4_Updatecpioxz5x86_64-suse-linux ASCII textemptyBourne-Again shell script, ASCII text executableELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=c661455de84893db0de543aa3148114948d4c2d2, for GNU/Linux 3.2.0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=08306c288d3f9b2a58866f6d0e72dcef2e8d1142, for GNU/Linux 3.2.0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=cec40651a3ec2a88df5b972a200631642a188b9e, for GNU/Linux 3.2.0, strippedUTF-8 Unicode texttroff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix)XML 1.0 document, ASCII textdirectory5Q4RR9RsR6RRWR2RR[RRR_R4RoRRRuRaRcR]R}RiR!RRRRRRmRrR R3R8RZRnRhR`RtRRlRR\RbRR^RR1RR|R5RRVRRYRRWR2R[R!R_RmR}RRRRRRRRR RlRRRZR1R^R|RVRXRR0ReR{RURRWRyR2R RSRRR;R&R$R_RARYRRCR]R R7R6RRRwRGRRcRR?R.R[RoRIR4RaRkRqR,RRRRRRRR}RsRER(R9R!R=RRQRPRORKRuRMR*RRRRRRRRgRmRiRNR RR#R'RRfRTRZRhRHR RrR R>R`RxRFR+R-RR:R)RlRbRRRJRBR@RzRjRRR^R%RdR/R\RtRLRRDRR8R3R1RnRRpRvR|RkEP,(z${ި펙T ~ %-[ !gYl0j@:%ˍ< -h!BmM4k-z`ϦʮXy%/סދuV[n}^x 1 p#H{ Rqʙ6سA^$Ph)c|TA= `bln{r=eK;/>iYS+v#:A!-h"MhI É[KEs"Q ?9p{dKF:SyBs}@B"MAK_?/UɊ#ڦ7J`,/K2U LĖ -fk`"2ߜZ:2-a7>UK? F|ъqr9Y㻏&z,14&Zjڢ@й&_pZ;3Я+*aH\Kz|L:fM5nte 5/r [NeFE[Krzt~&ޥ렰s']h:'}p'e,Lm10j,QCZh9-^sQk -NXZi'C g&֋ ?04<6Io`vyTvkK\t6"3S+BڼgPT=l{>),%,v>c̨` e6Ҝq}4u4/)pJP5.w}E0 sg{BE BU4HdW~n_dHYMwx/0xY\EE}tuVrm-̒bF rVVFɼM寵?e4R7KZrddǃ}obeX J4u`I?^\aHhN6 n\EߙnsO35WwBV%E=Q{ ;rݥG5љa"ZLW„N8:pjcB˶ UvßLo:@ =tNs^͈ tmN1n8;o&!oש-!wnppZKEF PsٱN* _ 5cxmWZO >0YN¾aoᨚDX_"Ld1@2g4N,(ܙ4 VjqCLU^h eon5WG2z:qvpB6>$C&Z&HʄE}=uGY7w *W qκ5@KR .ʃ9K-sEY|-_n=1rxԭԐy ʉh'PfޙpvKL.U*DEVbdGΰBr&)Fvh蜬,Ǯ)?*<~.Ьu=ٖJ˞Bnfd~Nۅ}M0v˓| ~}~vL85tY9h-7ML&=Ml& @gV1NB{jn[O?3Qdٞ4UHI_fkg,){f\&q R(U ,@Kj]dp  .^<&`P]4 Yxk*&vp`޳*IGmbqz,7R),Ijy~1jvS"0T yuVZ{WOMU PBY %WrI'i2zF7վx$Sz94U*7A8+d~#+9H@ S 9 ¨[A`Do`UUlލ'/z3qGZn*l߼B z( `Dܹ,''ϒV m웋8ؐg-Q_%"xiBsGE:å}ηz*f>NtEƚGD+lUsdgnJgDJA~+\Ld>Ԛ)+oć|T oH}xχg3/[?׈jm& Hؒ(A^.b|1|jtkCSJ0G4-<)|W1)io ;/yJPAireƨ ZG5 W0Oݷ"@nqJJ'si 0#Ȼ=.l[ݣ\˗OJtVTΑ0ffUz5ĺ 2'NwaMw Yh5 GЯ`Z?Zک_d^X  )qVPpKaX{}aU tşM =>@ fl t5M^E=j3_{^_y] .^,-l\AASlZQ?Hκu|O6Fk{P[G'Z%fmt'hErUXE9*"Hh'@7?̩4Ę7-ÛCޕK&+g#/Bpx\Kqy ߲-~o;h{ Cn޴G]rPvss-`I7_~d8YrtĨaz6Iq"#x$0'+"pN~ 4> Ŗ֘?I=B\"=9Tj6PriG ToLT;5&Ub02SRw"DGBy3ߊx7uY*Ӻv,r3!k {)Z V>?܄haB!R\nÛDЁŕ;NǯwFՌżnzsW XHV 7<+xbgSH '\- v" 0`o҈Έ `l3[SXHf} :=B!Ţ59Bv˦RNI}WYLx],ß6'(͢I1! #Q 1D{  mX2ָ|XY(K +/~=1$H=T1$葏W l +~y[y[ r$C& 6츸d9]d /vSiS041O 6(R `azk=6IW0"÷ൗONyqm 1bDN!q$>_`ksb@&~xES-BHՖ RûV=^c&U6Iw p ?' aP-eBiȕ],?% -Y Lk)Eiv1LsYD p-ܾ_ڈT)/c v59PɴVpޚ|̶<K\+4R_e_@QIV7.AuW̚)MN1 qJwb,Q_Lra=ɡΉUܙs&Ĉ%"&2xB"fW5W E;\SNIG7b yK[ /b`!F#X8U@U_Ջ;:0FKzf MN|eTL64hP!n M?8IqeRM!)_ֻ{1ߞ$`۲*5=h;{ݰ 4O̵: 4h>=R0 shn0 u01zp$ֈS=Z%>':YQ#1KѬM^jML (Fx<< wD2 `1+6Y(@[!X5y5$kf"M> HFPekN$@RhߒV R.KlY>h)ڭ*%zg#:gv-$")&|j*BΙuw5btOt_v%j gc{P X$*дK\J#ZN ﯥkBl5ccEyzU\^\.BH fxi9\AC3D0)'/HI,K`DK!mumhb2`H GNYVt*TݎiVأI9˃C _@x8.JNuEz(&r{%F Y/嶉nih(gUicbꄱ A6\.wm\8?'e v9J;:~^[*̋Z]/{(7sol>B8]CKx#,vlmu+1>J#^I %g׌^J}|jN-P&D?F/m#}q&hF@̯Ǟ g%S ߓi,$ 5) (uLE. x ;y q`=0}Uc `+r@OD~ԼxL1mt (-|c;Jm>Vbr>5$XJ(DML6@H]>{.r3m\F>OwR3:aW۹ CtCH ;+7!@W5!ty8;/hejE ]C L J~}GRbМMijLn*DmzMcF.=~yhSj<h. Bg];~FE"D"ڌw]~ k"NXB@b/{!!"hLUx#*맟zhۊ;ByU+F6_ g 1+^o?FV[SHga} ƃn#]kB@Qmqr6 U? p^R?|q+s(A#07(fPv*֕d}t%@ila$|NRRցC$i$vW (T`1/Ȏ%SRq 2cQdE\IMu?Tq6_z k>s#o`%_~ԀԔe4 ɋz楕l%]5U9"N]> Ì@]Een{'L7Uz.`OU ># `FB)^>FuD5~WF gI7l_|+ee΃d?3 4Qi-VAbcE|e̹87l6+pXw,?V7z t(vdT+kS>5xbzU:<:3 ǨV͕dtNS 5F1)Zca\Ni} w4~)8u/4@^W9o "N(Uq'1U?R| )"%,pik:fӮr#5-82- d"oGz^tTANViDjCcuFM,3mKlPܴo\{ͶHؤ] JL+\lBC 9$r"XI(7x= Z/ldp\OM t@pUՕM k& ZoT[LpB&j<,.:s#ˑ>[>4Ԓw$}kuHFi*DI鄭`dJ3-YUlK^ϥq\C b6L"6bط n엂f6ilAh%|,ɤ?ݐ ݑ3C ݙWA kx} ;C$:]ʈ.ÕFHJoj>;+"6ugBHuu6CVOruЎroTBM4%ylVq/׆1db܍9&(6ed*M2G@h3I慄dw\Z4/7A"0NL%O eeTw1 mkEBLj cX Q=z1؏uQ cgw >[75<\ؐ-&d/iX@&;tDMat0kaL3{6``W0PUMBo.{-߶*>(vKZR,GVC'Oԑ9τ0kԝ:?58sbzUW2#8 y8|HynEحxme1-]?.Jfꛦ#u.sP= Kml|;,Th].uߐ2zfԶƪv"|REݮ"sa{"]%nV >3GW+BDhgnIk))"\QWuH ڃ2 :j'f }7tjV7FA h$9:_z(0{7xNLw8ԍKwt{<]o!PASD\#D`Ƃӹλ&k" f_(&M8?q<)SUE ld;U41bX0JjH*Z( iUvulܤ^} vMgM|_ͦ֌pƨ[[ ,X!Gā3w,n(FGMzoET]2ļivNmGBB>ؓ:@7Z=NPBe(z& :<+5:MSU N0: {R߅poxn#02:U) Ŋ:UssYӾ"U?+7W>G_swm);c*nw04XēF$L#)WLWf [` 'l6׈;-u}.Z#hOBR| gX U<ਛ t98ǹhWkl7a~kHd . Prgc8As?P떭2۰.\;A^3 څ9xg~얰~2nXӶq.Ξ <vC1@m&1W\Kf© 9S7.ĀdRw#n%jx,QgR(?*'VB@h=k`Zpa5#w,S]Eh.~(ߓo':=up%FvQ@o ȵ3RyjIYtyTwf65學>\K_Wft2XgN%^je MnO`;d:Hz;j:,.Y۾VN&Eګ&M81"OEt}%pR>4ܮi_H8gFqPBA [TV$&υ:#9?ո֗'n)LHϤPTPL_=4`ݙȟҠWެ8aRܒJ:=-+U?!Ub~R/U:Haet,tT#K%! K:3C_D7YBiL@x+mk} kh*thZ:2_v{$˖3_*ZY9JQL#r@K4/'H 0b4P7mu-;҈сŶ 5AIt{'Sq=cq&.WL@,DKaJ''7ʧ]H\%xyΊPcC,pJ5d/ 9CJIOxixO:|,H.Lo ;\53SO3cl!(V#loH* n`/=+4@Jb>/1xKإeŧ`Ig?eSAѾk,tH I9rc8yi[cvx1æ6Nd~S<ToM iO\ҒҸʲVTe"`KR }7Ʒ컴JDV wd%}5UE.uxh6L@|__3~= …gjhn'6I"W*uiQ+ؗ +K$ƪ J5*=37 e}6 No+ߑ_jzC>ǮY:bktQY/I tf`Jzf:gfDQWe8W*.e"%ahV ~B*$R$Buz1 4] ><b*$!Y`86-w lϪǐ3d~f.{7npa7 CsnN ^Z|Z2MTqYVP4*qsai&W^IbY)H"֞6D. yDnL$@ר~?@9%^+N:q'.7 ZA5 ( {!N*;8P^v1 fZK ɜA_}JHDPF;+!]Vi&g+rqk=~s6po}51uSW?{GXߡC'CVB8MP*A6hMc#=?/BX7:̊9@@7AFL~ l^p-gi4:#8 5cyܧLU{ #_@m94ns,Ώ/6'yTK*fEHE/SⰥ?" E9m[],l/#Du^z]E'pRc}Iخ.r w?1BVGXT̈́Ђ41+aARBaKϯR,J@Dnl |293G: t&1.dK{;O @TX`KՋH{JDԂϫYap##]->i:KXsŤkWel&+g2vЊ: >UVĒox.QQmϥ*L mXN{U6viq>lv`.]{;dE%ɏd04vXC `qȌ1{m1Z#J&6zKw(wØMzA*ÅJKr So-Ude&*]MK;z'R7pߝ*˴7 l0q=FϦ)<:k\lUqDŘjʼ$ܡZ U#gQ t9B@;lYuE(2뱰|RjbᢐUh#/zF)D<:ˆ[UO[["S?LLd ;jDt#oJp^=9!yLdƫg+iw#D̔U@vsL^2I *pءso9+ݗ}%1gƌvx5GS!5I4"(A {:YPr߇$1o4N<%nU@-ǧ 57O/ ~R3RaX}"{:{,^0-~:jex6fěrĬdRNa :)_R=_ TK`8Uf֤٧Clܘ,2)@~T[\kT0]x>P2gvPq "xI"`S.>řt?wgy$ucJErkU)~Z="RpKFRqѢ$lCd'xs2$aLf͜ԼXV91s+A\/\HfD>4޲^;i_%rJ.$!Y;joj=`' alQ<¯G)ڰѤ"\`0^c;ƍn9r|FFE_ bZVi|CW}m3?!q9A`ɋcSIK׎kkN߀486f^$mj5VLf\ءQ \na'=':Pn3?IJ pMVslpZ8TWKJ?0s֏i_x0S du..Q+̇ =XI7 _ݼa7PhoYK}10`Q@>3 ?pGo7h7`LP$5VN"۠r䘪Ӵ$̾,vX6Pq++&'>r%l9D u~ }x EbaNJRb H}Dh(;.;+xE`VjVW4oxDw@^bhB 6(Tt",`Zie>M11TT@ P"̹-=u0ϕH{䘒1dyO4~+tpRGp9ρVv] #^&߉gr)wy4.4¨ Y0Nfp;ʾ.sʶ InE}ڣÇ b,[=XCd| G`3$2'Kg#`<*-o`et\ypnTGA襜Q&6{&-.ᬷD3L$Aw{=Nbs"!%\k4"ET+"D Ɗi㰨v q,Gbt| ?_f S:[MpiC3-.'3c+H\JG)YkmSj"O$oC9yupgl<֊^y64 rBr\]vX] זy[Н\4~l#U^5Hĸyn@U <0"fM䃊ft :mC<+q{;W!n>e`yQlsXC;2BgU[a8o\$`oSůwC2Oe)P?@ɸ}4̬@Z.;xʬOo*!(B`K6Aտm9i2Ll"]i8RiTa` I_ .T,j3TOT6 s{`ahT r_2Wq *+ԂVnCQtx0ĹD% !q_O[ fR Ӯ\trH+;^n VYYTx]z sc]}ſMyN`hݞql:P%fGћ gwAS?a&H|9fL7mo@*[(@rupC5žtPofd )wU؈m Q!Q[Y=eV{rҹ~CߎE8Qߧٿ䚞~fn!-/D^><%u*s/,=? N`X`EIS8U-/%sSUNzT b^}N^w@pY͔)`s.s K +H yUΡ4Q;>j< [3RG>pİ%b\-/V(=pEJ2oP J?{_b"|w.8N! kkC&btQf5/Dj硒[qp{"a&=3IxA +naf0t9tznumz(+h k@!kmڌ: DOVĂؖ,cF/)a"i.#lA;ܾJ%~ZO܎F֬HwU lTv73XbDZ)k}Rc5e|Q w_PpaFZGKRIQ_Ck !(n ϺXUW;k7^(b*'Lw% h=rP 1fW;LHG+L`#o~"C=I?je)ͭaw]w2D6~fjdpjekX1:<=aJDYG\Twb x ~H)jV gMƶbk|J=ġJ:ÄF![&tE ԁ,jA Qc@:۾j?$W_v-=|t+{$; x0B=bd1r73bZ =R(\,`T o!0k)D' 04e[ 2-|X-\' , x8h5achR E zh4^EC2q%+C;-l :A:΅"Ey ljmHhQ9f}6eztl)>3rXN te kbAO{8jK_;/P/E"ëb:9 "1v*" N*fDf8{0 7 C !zvuʸHg-43 A7c/tfOu(v ArٲѸq^5cEG\fdIυYGT%iHlьV?Pқs\g p;CLHwХjQ.7E-88(\NHi1:EOɎU8s;fp|g1sh)+zMHh{e+:.X:z*,x_3*0̐ˠGUP%X^W~|x]L_lO41:\'_5;)玅AAe°t>a?Ub6GWAټ6|O_ǮAF6YS@7n0[i,a+#1qԊ#Nl }`M-̏4f,ʏK|#[{S@*c f-+%L_)>H!WHpPJ#CfwQAفĎIʀ"RG?5$Pu:;Cl_)H6rk8GRNJ֚]T}i(> y!T~.QÁɨ`:^uJ ܈![L"%\_4[O&LY*xNxf #3uR+]9ʛT%;Yb1?l?=拥$:AVhRS(C<5C3'^?]47~o!ɗE 7' M8A ZwcȜ^k_}&8M*QJf>]FeJ IG m.(sA|O ݿInxdU>1)Om2B4IfR|\+< dBݿ =`W3>l%~cIS5o(ـOQ+P7>"mp+Cqyf.Z,!ʯW@\59c-R-*baOwX⨖%iU܃6ʿuƧ:׿V 9OZ~ZUV\- B"J5uđyZT2( :!NeI3}l' F2Y{z0ԛcp(挒L<7KU4ۉdL2_fHfhޤ%8̜!UǤ`<1y"вceN\ X%bC;Rt~&=D|* ѸNkGS^m8ikx/ӮPb>fPPN:,b/E^O(= fс> -+h2'+A>bC!%R *Mj&˄AmUayR2Sl^/b{ڡ z G]ʁ aV'UBT!akl-?(T7ZF̌K8X郺,#J* N*9KSI2E=K@jO^k0߰|ʨ'b޻kw rL)DMt n_ϙ~uxmK n#E|Y@Tp<EVuS9*h' ]C}3o |<-ܰEo(vaZ3mo;v`{ 0d| LIߧ$s'Y:0.`.t+G GDg* fBe=7rOW~+EHIDյ:¹@(jGV%HXkXy4i aLeY'#<Ҏܡ?HbH9N,_x- \gyg39uȜ{Xo(6}OTǻp^+ j^ɝ"Grɽi!2T_˝!2Nϑ*aRsK@WJ/5q [ Dȏ& 33UtNJ@1c:1˽'Ȫ?XbMȑ9P`x|Fp}!q6\Lׇվ51VcIHxig12K*k`8p_I2H 'ɣ Sq-ll5fsTA[.,Wx?vvXz)RoVjR´?7܎+\%plυvUrгғջJ td5yΚꐨO|XQvIO&gV4,ͼZkɚ\1-zJlOXC ;C|;TGj~_p})&?f-CApKxi iѧ'33[Hg}׌϶_DlWV[Eq2ƫzQ&bئߝnh/2%+u6<r}58 h~ 3_x =h3KIݤ&ei\+1&(tlQ#I`04o{JVW(geTCܘAO VXFuQԂpr$"2$S#ngp.ziTYNZ")0>9uxI)X׫Jץ sܳcY3@BĨ_۹MS;X|sC}O ֮.g)y 0YZya -t?jyUmC7Ty_Hf!.oVB]]BPk>̦O v _ `!aVk1Q=5(pdB>!o+xbO  ‹lXaMfm"ƒsUaڤuCJNVՒcؖO:>4v]׿<\,^WDiINy93h Kzb(jD{!IWz,i˸skG;qJp-Bd۫ŧ+[X6?`ټrDI 5b~p*jV#^p"8Y*0PG'[+iF81{x봌q UHN6:Kyw Eܢ%rPx'CZ'0E &a\2sELQ\[ 5$ay EAw2e$ʼnsM7/N[t!NbVO~ D{n 3cn_ycv &5*sOZ<9?<~WhjA]w됊sO:}A}TeyYMܩ*) l[ء"Jz6 ^mCLX&[XwJ؜QZ?\Bg`܆܎) w!^t-1{a=g`KL`¾&Cɔ okᗗuźf>ҟqSJܟY&cDfh5ԴYMFGl<{܅x.[ˑӄI^tVVbYEp4p}*,PCYGV?&BEmx+ޢ.gxE{N\tܬ N[0OI[;9F4nac,8:ٜBlL2׽n%Hpbp`l]pLz ukj_IǶ$y7_^|\xdؕk,`tlzEaq~& h֗[("_M57jߐ9(iOl^5|z}MD]Hg@B(,ǖ;jD 9QKH ̅!W͍)^5y$?cΩN_xo~xXFtȾT,h0}G}V瓺tp ZɱpD|zLσM.:mdkip[Jc!YXcqD8Rx 8q$]P1U~DPy&c?~~s/FՓ?}EA(J־5JTΓ3,[D-f/>W#tde8hB8~ v6'L#"T[q,&BR]*x7M/Ut& goz桮O݌\, Dœ 'It"ϑzo k/YH;r'ogHmRӖ T{pySQf+$jGg& A1Y+$oYY$ /^-]8sAf$5;TV6_y#=?/obJQfq_vďO+.4a0XtS3[fZنv"1By˗Ϣ#e+0T=2F$qSp*p+9v4ʯRظ5n7ar>/լ<^*ӉXb'6/3F0bQ-S֗;cSi/1.⋕\l)B\A;>@g5aOWBɵTN\% q:縙9®OL kP2mWxIZDAћf=]xm׵%M!AASx5 mҔF43fݧ.Ih^쫿3pfR)&i_%_\^(1J$4&K:=sI`~B/Sr̓Ǿ@R7?YAW nSߖW]Q 1Frkb- ym n RFڨù(/ 1֑?mpqr74 "1yn. ͼΰ4OfZ K>*Q~$F)ZїػnSJ}b# .g4oe/{eI$'HzSٺ S׽˨~cz3{;|jO\cjs[;wͯ)VG)e0G6;&Ҽ%~ l"l颹_,g{ [hWK &m[ Xj4 CdWdU¥sc›E^Q"MCg0zVyWz6YDGVJO/ɲ~1;VU"v4q;btq/cno c YOK'<]>9'LgibжOۻ͏mgq$02Էĥ wxM~ܱFy/IG *Lsט=qrlm7FF`BC_`٨6+yXg# $Lݔ1 4bNvq(A,5m` |HѻAL>&){Ƽkjĺ#M*I,("subiN V4nOCj*DdʒK(#O5TsGQ1cQ(!4'WX&G;I.vL6uȇ+n[&$ɬΡFsE7ׁo#*&TTKZ̈t .EPF-,Vcxqi|`1,2xevnN y('@uF_"C!{UA?vVs?u>ęhj Ι>n=lh׾ cê8W$C!W+kwb'w ,Hk7C!ǨP#"G R>]vCe.yf$Aj .}ICh-¤f6@PTua =NniDnC!O&2QVOI!;j03VB;ʠn?k59+Ou[zLRng‘:.`!zD.QFL&5\WxYC+ˏ%z[c;)X ASNp<~Gj|3VeH|Z@[2QTJ-1iӀNCmǽ1]hWJ -#WT2Syw" Z^|Jzyr?;aLK37v;*9]9]NjzлA% :rqL"/N@]_.ϙm-[?t (u3gkgafCsLRL[$2*(%SE>fS. A<ӑ,eA3HsV/o wNdKt"Iseq|Ad ֫Yab@$|`ɖ9idR [h"ASͽgnњϮd_St~ЙsF_VKp5`aHa';[:G{R'V*@i?oShD57Gcr*'^Ŭz.{jB_-381ߖ0h6GZ5BP>Ί x%sX &oK^q$@ X [P㍐s~`'Sۄ2vر[& >3;3iƎ@ĪQ^CO=CPOJH0;+ rV9[G+CL۞=Y͔Fg~`Ӧ*a\[a;'uD'M;n|#W!5}N4SduE0t#r'f: PUoVhp̵Pŏ bRkf8룩kKC7QJ=uyBcLuKnw|i6 bIlhUH28J ~~ܐUvZ3ٗ'ElvU -Kr=>صv2&#xYWߑt1$Z22 ՟M̐~6Aś M1}h^M#Eν]~M9ɧQRg5 ۢӧR .1iwmɒ([X-igu$ګC%Zc`VVs"a<_hU9G08?Z}cLwxd.rvt 3* >mO׸ˌ?pr[ai1f-\$-;"&֌`@'B|8qw#:se#"O,A34B@zjT0~x7rA&%HtRٯЌȌ]ʸɰYM;HPaGʢά ՕdklR%F`cf<5:$+׈23hRzQ+;}puz80^S -P:Ũs)\ I/'NF DNcIA$a' A.]NȰ0Suk :BYEnPlU#K7ZyΆT (ECZ*RYuR+ݣ<-lR[l1$I#\bvbF7iϽ@iP}vb&1(9qZ.@Mc&|bKJ&qX&aJ 9n5' |/ &!oe V3G 5$vîчL|+~P?xO< %0=7].6gL`{vRU1O6S1Rr<|N;AcBOAGҾ(QO0t*fR$VPUcߝrY0TKtkޘ̉\lI yHծEO!Ѝ=*^մ83!̶߈),9g@ Dn_vtMrp6Vka5m}߀ȕ M#)~E+z;Ͷ˾{IpmXϋva_{=GSFoǼ>d;Q!=bݽh-|S;'>O{KL))nzѵŚ(ҼSa"[: SѾ"ZaƄ/'SQ8?@C:%> ).+'iM gMA<ωH!TJQ׺zt?M|=~3i_!ؐ$QASJR Ϊfԕe.$D=OE}=;ŕR~֤ﵱ5Sq{ct<6/{A !@6[ ]: SnOg%by` k}oEȜ $Kf0O[J.cx\^Y"=RF׿I#)m~ƌp`p/m ؓ m mZahȨlޤ<;zTln]4;We `,Pf#$C!Jyn SS6,}{-ZL7:uQ'w {TBWѲ^*[RBLV:i 3W ӟS?㯱op-YR17P= &j&<'E*4Y^xr0#?g)%;`S >YSĐvT{IDgx9kT.7BVdZ]x穃Ic+oWJ'vy2"YG!53zxnEF'#*Q' v~˕(%osf?Sqm4b0t֋L6r?WoND Y-;/iE0Xt^xZչ?+Ld^98<FT0p r(I +=+NJW s_Âu$糺U]{jͥ΁'߻Chz7n!Oj ú?C襴(^ T2xkdӌ bRU4Yt !=(4Yҵpc,K)]kqX%K=ߔx;0-dϨu(s?g πt*vrؤ e:@nC[׌ pҊJ(/wJ0wÛߚ|AJC8+Z_1R#ږ~wB;LWL}9x `f!$gd3:2gj#p͵ŐWNemh7fy|cqx$'UHh0Rs\3ݯFkhr&Sc+!C !s\ Am{ӢT@nDzV8;Fˡ868t5 *ĸ]>wn)OȜW^NZp3;o]zHVsҍrj2L$6/S["|=rWߴ~HiPrMv.tkT=xNQ|TW;;E,.Ag%f {j,e͠+܅C0 Pb; wjQnї2ۧG= a*:֓1A²t)ۘ#ԷJMQbVGeU?1MFWϼ)[#X@Su:E[퐮V.Cm+'h hEɁIZ}8=K2{aq*GIБΕmc%#;*0OhiuGk.İWuaOTbXNGoCN^zUa.~ m=h*DuxP7$wU_}e%]8zqƸzs ӋARxFV͉W^u[C& -tSkAK3qVW胠/X츂 -A]8z7!O=Vi^`IPl*y8^궔9#i{9bow)S*+Ɵ#3 J]M鄮ʡ&;2cw7׬WZ:QrЂt0ͤ_&*_''KxGkE[Ihb+GT09gQqe,kG3D5Iz4`EVvv8F"ٸ ao1pD1'hi%MR *EmH'^;=fr$A['9/ېaHMmF)Yİng'yɓu#;&ml-DCz\/q\r!%oJWA6 `/GPc?')| WB,?s"x,;?snj`ɊkF!/,;?BKmZ]+3ǐمzd X/smaya+] <3-m֝+6AK8-HpA[kBw{K,=#G uå[S'^C4. ^3ݽpu($GQY"pDp?`;)Ig@(03/& V)laH\s#ޭoMOT_"Pe B1Ezm H &RG 䖒uF}r6#["m%"o^Ŷb07A2> ͓:~Kvbpj(VU%}rRV}pqBPgV2߁/9B$^'s{^̓V* ˀ]G4R#`Z uCLIgM[Kz0\k47-x+2$%)f=dܠem3' FM?Պ %R!x;] iomN!*U\g '@Pd=' ֧1PGc~K)81-d͂7Y!ڮr1-aX.<2S^x&/+S5mOv=ۡԜzo[ny{%nEK؁b`r[ͩ๬Qrn 0CD;^ZN(fQm{ԻOBS iiˈOZt]aSdԬѮ 4A  kjC2 P|;r"+͞ƒQ?n2kǾzjJ4E6Pz\A ypؔs))iUINJ.=`Pf`BIZ+W ա{Lf(ŎY!@m8e M/WulGe}~N OWBTG.U}=Z?c|UYxI5d,~_xj٘fA ͳbB؛@_dn޾|hнg Ny'G鼽BK3`8xd63XRgQqoRķb&mj&n1fY6Z7$9~xt.4zgM'H A%f IO?VXI֙a@4Ё ilkJܦ_%; .)pYʞ*"0MDhnQ,/,*Wǡf1&xgcԠ6LְRKR\qfKEI~eEWymRM6Ɠp77,#gtY%7IS_P^?I:ioM6 ٝ~2{]#FiUWH$$y0ՋiP]bRsA>,H^7m4Doe3:J;bWN ܯ)Lİvb~`[/j"}qV]M.ԫ$R^]ϔ}؀AëRodpځe{HʶPC0%O^H)u(1b?MhZHj.(=%PN[z}9g@lyfM3fju,rG.y_.lUA!H L6C ZBUIP_pw ߥ=?.TUlt 3[UYdL4\(m_VMb8^D̔%:tl/ lǺO-HWj`DžcO|9]֩{oq ܧ$yFH8{{ _nN%P+<)[s=Zf<>^r:c6U=#^*Mԗ+fQ]=UoDf#|JbP( m 2.¬vFi&*5EZ>]F }% B^7zd XMcQeEiBig=!'4iZE;9MxK;i+[;8Dy} ĶE p$Dd]w{*%Z4]qx+; D) wtnLM]7IR;]?E梅1ﵔQh ' T<4G20H.g.L\:1$eB?j: :weʞڼH$psٷ-zHWءolݲ WRMb'Q`Z@`-, wXa7(vtIU$lfƔ}}μ!dc<%@Z}nN D6JXV"*U:CU!)5շ4PHflԮ@}MܚHu!91;xu6k2|H% .dx04& :3ۦxy{B M(_I~{C+߰ Z=hEXOA x9D@Ye.{9"Qvn /Px e s=wЕJ]C*,}T;S>xSI\f|چq3(S(i&2{vWH,k59eQhZTGY-RBa*]E8gk)#/ h]+p\a5c H  zKzK40~ZdL.74̗i68$/Ƴ`Hq'Jdkc:1E1'or\ABB&RݬU@ruXr:hI ܭ!Sg{H0@3KƁPUeHtAk@&f&sZ! \㝿Iߖ1}qµtva; ͨ9?#g۹p7@!T&EAS@l!#[V[ 8H+ͨ&];U; u£%XK1Ol*:E48cŪA7>֡St$]8k1It7NS6Ii6-0j0g%-ze]9j;w30fL8svN՞[rݲ/+Ŭ 7*p(MSjBa1yVL![PN)y-pof*\_vBPjcvtɫgw~:犭31N8^]gB-,wtV;E7ON \qݡ$aތXD1{aI=hU}09df-ԣ}~$ ~m^2* ]a dMZj7D%[ř~`qK'iF5sӥ)gU^}s4TMĥE((LioZe8N2ucR# 8௃C܌&.@J)±Gc߾- eJ̬Q+Ʋ-Yy-4T*|Cʵ/V:A0Ji, f< F.|ܫ #:o Y~mN_> -"6c&)mέyho drFmHp A)/[]# *@x\!=BWDûؾ@t( |`fWܫtTC1! 5rr"Iʫ^G(.A6%hғp{:? G @ PT eo Rb*i*ounFzB r|])ҕ9FR 5צtՊ'5uv9BvQgÔj+"[ΟHr3ovSg"]tRUtWl̀)?zHd -Cbݙ&v<[g/Bmh϶RTȅNa?vt-6{CakFr2ݱ{Z wO2ןP\ . Y%~D]nD!?-:~ o~"r|'٪VN+@Zj̫URUER6(-q2<nNܼ5p,25D^BF 굆a1OxEP:Iijn7 w0i)'7".ɌN4i64iȖ*G_ڐ(Cݾݠ6:x V>dy9 ɶ ;醀!?^O\)~,s;6p֭` ϲ/4@bdidY%(mT <<k!Kn8`t&On Ee ϤCՕYSQ/Nj4nYٶaՈDɢC0DvLd>Pw_SZ*@Sqs"H1ڒU+w&*HUbXl|86izBPRBm }E<aa;LǑtD)wЄVl6D&\&,4Cl I&w9IR=|j9Z2F&'5P/H lj!"vP>= W!V0DZT%Y>A޿Ro$EHn1 w'Y6$ҍr@eٝ1jˁ=4X&% gE)Sr2Ɛ(tH;T@c6lp@DOfؒ^Zccɲe"'"sx@Ə3PN$E%z6 V$eg ]Ҷ!)^tÏB歆a\G^1 Sٹ}+ :ץ+*VIo y i4W:׹cle-G8-9fc di!4}4a+>jc5E>!k=RxXd@i =0G'd/Z^z0AZ9Q !aHua1 )qdt`6КgvKZkU0cc OAmw]˸E$ i0j|n/U*֣&A(KdT&#zak̠6ܒew#DeCa," t&s/_Ɍ4'EN|uI1ٟ#OK ]}tG0*g.8S')AJ'<Z~3 L(Ji@.%w"BqEO04j O5n 懳\/Ol_1?Q̠m$ۃ}=AtXӧz2ƊF ;F]8f1AgRn05ZPxP[sa$UR| %r!#ODyfhʗF (._i#H؟Ih[b.Y2pIν76 ێLy2n-붐|9;l#a;Ш~1#y&]HcɱXrN \5]H(f{6}J{@LxE0˵}THm4?*y 4E3miα@5ppS^PʇrWdN+1q-RhP [MI &i6HyE0qvhr<[hUk359{wew Hr$5gi}^Jfn AÛL#ZbtZ_ibcnz%#h۞ch[X"dPX-HSRk'<ٌd*` 탔s8pb{+x WДIDYjD `MNbaۻl̛URgKUpX}>"a=lcE5Rs 9ϠqƣX$.yY^]tY\-5#oBAČK 20zm` 9 Kt좑(06u4ݸY- kn? sIɚ]n )q.s)bIGG"snD>MzU.賖lԾ{cVqֶ/PcG+] |w0DU"kAC)`ߤ Rc6?~ϏyFK~za%+ц/jPWzq$3WBxJ_kRX>E?8 !o![x 5 6u,2?q0!+J#h>TïMN2/1=h7SY6hb\8Ǖ& f8~H YvmR"0gΠjG@m&ʁs{ XQ6"%qN+"eˊPȢqpz&7es7+R't(ئ3<1}$&r=Q;7k}!\\G}k&]Co|+FiNi&2O] %V.oy9iUJK D3.{p;2`Q-'S*E&RZ1T;&7'Q;zYm9GWkNFoH8a͞vz6M+w@ ;e4Ulf湟)a&W^ >X)Mn%.ey*|/qjw;$Ydj"IFn709T.;X.X ˵ɝo7ͷQ6[I Yu=2F`et ibH<s$ٔnLώw>Kg_AQ[gNr8D~5m`_Fo~MJΟz/)h6lN7hWCg " 94>`s+2z,Z=zZa;D6#q#EzW]l zO^+_ 4>Z"| rw_|:8|-XڬIAP NILELs)+b--j-)%]]vcw6{-ZȳU1"Fe>T'%@CV֕G28p` ǕW_}Ye[$\`+SFk:l11S7p5{<Zp "3 W &8 &V@ULKPnNSʈIbKJ mpڒLaҋ +œ]BD+ ]lvb*RtE}JDgi/sMeX~+>EQ3yeDĽ"ȮJ_G(X/8љh6MV`^)vjO<{U]nv뎀D4q(v7)us嶳U]sxC};9t"2|EYwZh[."|U1.hߍ.ͮh$wgF%jqp=qpnnAQQ@;}E`bBTHc x?}Lms}yW^;78(U:d/+2_VMҬbD6nEuR2$({Z#UiKDD93Rʓ$1uuƼUЛ #mEJUֺ&VOi\{x|E zyD!}+hV?C4+bKx4Re- UoRI|޻H&Kq9 4oMnenqg8Y]D{,0vl+a#{u }NWzr]M^> G%|Qz7bj)ڒs#]\XƜ?1P\׭o5 G2!=ڰ{g3~m`!Mbw~cj~k2|ȀדB sķ xs`{>cQfQ=wL)>.| &`cdF%D{E=ÿ1b5 KoKm7}W0FfJ5; ;fQl3^Hz'oz'jWFMk1듻ӨּS:?zP:Ú9RFl;tO¶S?l'0k2~wo⨥Hnzr8@RjF@Ր Naq܁saCƌ=F ө;C匝nh.WQ m.BD S;Ib dTjBg`ǓND3'(֪M.."qe1.kiF)RG:8? bk3`P2h$ % tx: _]M|9m} v}id#+n/ 5p^@D>N3Q}ĭA-,>Y@4cx"_3}%G)iDDb8Yڳu8 AFd0Ϲ;^S!m]{vSyL[Nj7?*kvuZ›4 "}a,[mΤ8PIM뱁BtdV ("n*;|St XN 4A@u/FMCIxWhz2<7{y ]@vhP²=P\Z!4M%pUЇNL#_x 8!~ c INhFA >ߏYE׎~h̗@-8håՂ Vi@*%]=ЮKTy_zZˑXK,Di(kd`euutSa*; G0J˾J̊eBhb}ޅ:g$%+,5'׆1|FD 굨;2a}Ua H?;T8VL(6~Yݯ~I=G̿=r=gZU} PFfD PvhrJ%os|̅~;$8ݸN1 %PGR%o+tf j;Ӯ̠[+tx"`1b=k79(-v9 ڧY`/"VY^N?/~!5 os'Mgfxthֆ%#a#gy'khŗc3 gf)J.YAnV&dj|2,.#!i1ctr,2Z؅9j`hjDB%"E|([>1 ӷmRW|3{;2N3n&U2,DBIJ@_Rq>o}[T:+l^P>ǎJTvт'adX򳕾X2;:!8oQG~ZnIE6{'-loȏ6*c34Ded&Z͊wIRr f-3.QG*^B"CavE T `={G%l<L>p~k'[w'SU`cQ,"Eb$L]5zq͈(D, G8^ SWDǯxq(teいk띮XJW]jX3H/_|~m`~AֆiwJ$z78+NZ#磌ʋ@^#x.素W[T'B*e`q(uds6 '֞4W峪x}WyK}22'W$* a\$Z44<)uluTi)sN ހ=@.r5{M[FGELNto[h{3_x/.Y[[{†^n>B8U(zs b>\*I_rъѪOHgC`ƺu؝ro5#-qڍ/b]" JYLGtPr 32^o֬}au[NyR ʊ \PMv4r5:( IQ$ mC,l u.T@K#'-쵯A}r厁P%tn,^[v\\Q 5< B%+BX?9? 9S" UA,h"ԵhVX1N%فTܔ>|Xc4ﬨ0ZAdSd"vt+S[C E<M"DG;lPNffx݌02d4ae/v 9E0D](Fg?q9!kQ\)!@IP0{˰ߐ''`oA="uZF}~>-حU1~_H Tg)KA^xsljShtބyֿRv} EZڞ|m@ǶК"zM IlK $ gbUj/#Q[ہ*#pȓM7q -9y䞝2xbDJ l NfX) 7e@o!C)=R8#S beCG ww~BK~Ӑ yi­1?ֲ3i9$ĕ!uualN+TWg''_oc2r}fF'ధ=AeLVJj(p19yD8,/qо0Mk } ӕ-Z0c|RdχUX*YpbZSm,H\nԫ POUɞ̓YZ+ ,*pv~o^݅\ku羔<5аǤ-!NJfH]ӬY`(IlT.`$mj5d -cc3.1@Iͳ}SCdCexj.髖ޓ?i*`iDwA[x|cKIO x2J>wlAӌB.>.i2]:;i6۩;6ЋP2,tchd.:'#$^c(!cͿ̔rA kVZ:tOEՏηFHJbEд#<]lR`1?U_ ُ)'k̸^Ak6;->[Voy@iQ(1]be dA" c(ԞaHA0dG_"n]8yOz#@u0fA#Wg(S^ShOHV*9_r`H9P12,$d9 v~=t:vuUh2ص;E~_n߹ewDzts![PGcV}~CtUSPi^l(ړq- ُK4Z՛`}>2PӋj@ K虡/-{w) ^P{5;g0%+>;X;'%-N!!7]N{ 1E{VEPD Mjdh:-ir|ٰm8(/ӹ+>HWpp>H$Cә zDw[_ģドn nDpH9 ٿN X<[r_p<6NU1N 9Ji#Cw+':U^:7ܗ&IZnKş; p=E@ᆁMxW;VF_>u@prS?8x&`!3d詾!UPbMYPSwcVXLu2Ce|ϫ k=obe(E%i C @F 6x$̓WC'>{ETvV4g`ڃ¤ߎZ;H@H\mͿn#/dQ-juDH'\ˤ%.\k5NrI>|mx fK3lzñcHWrRWwwa;?aE r:+{cp W.oo&ys3<ŝW٤ Ik}Ůj)z,!RꂕP=*&[}r c]1^a)ttD)'?q^h˙~// He=:6x;Q{N3e-F1!䢓dsWI0ߜ)n?FOba]ܲ,9`2CHA]ɇxǿ8/BDք_!.9y3b: S5,ulܯ+$.Fy\#Fw!>A+r %}<!Lfݫ3_jaJh$4a1hد'%9:H飿fY!T_gk9 4*4b1@9!8\ADrA)w %*h"Zcvxw1aiT(u2, Q咫q`pb=For܍KMۊSS)8OjfU ǚ )>u)A JFӉУG?O0,! RĉuLܯ#G㮚EJy#YIv*Dƾk 7`CXQ.;X߿^}{ϒY!K= ҳ/U 4rx>|XGDO7Qy@2JV ~U+Z pIu4qZ[&|>%1c9XG5s'-mz744|w |.SB;?'_?rbN, <][׽Nڞ_g!-gO]߉bl[M0w9S6?#Mf=m#2F|*yf2(cHDxR(WeI0 !zt4ϱ@KOn G9E1vYaJ&TJ_S 3]$ FiUS"Xm'H+-G??ce"@%m_b `䄾Y 5ISK5tI !Oڹ=pEޏ[&N@'!ʥxI1 doN=?u4#Hv}.uGc?}&39xpxݣr \µ4V[G([\} OԚHSt:AyOi0 ?((㱂ł-D~ #ݛ s'D"7ǦqPUqۨDL]S? ;9I`_x@w^4B0* .e'I*6Om%k^@*($#n9F߸gFυo.|Sz39~}j{_ -#'}B& +2&uQ9ЛGƠGJ-pEw^3 TLEpvd=vWk^f1s}>Wd}oLrȔY.^xYQ'6j57uG[mBq?(vڹp8' ڏNa[Ndwĸs'x5,g, B#|e (>JۅTzA==FzԉkF.^ŀ{AYeuGtqb\ZDdx/Օ a Kl?NF^42853jk#vW-uH*?o!@6מ&D}>o_L26~5`}108#>(Rji0Ut5n*VXk4! h0މ֏25 ' T?zv=(aU&]:ߚ;dJ&+|u$-K.YǤ)3խl [KvW]|8r8og,Hx1?iz. RuAhX!K yPʒsAt%V?YSC:P$n@Y9?/5[|K"#UcF3W~4)NݬcjfKo2*!fuL*Q֊-#}qeNwMMpH.Q^Y RH;5x߷%4!r }6WSdWU*OLN_8 kDV5 3?64mDz5 :}@*k(e2Qr~Xwx]qICK9tHgAQ0E[eXwUC3N"7 Æ\y<DݜrTJTIZ Ka)ֆnZjT:}T:7Ie:YjkgUzj;f*"vЍ (dir6.;'0 YH\g\ns*GMoG/YmF}\ʥH:^6V#̾O=1)E:%j/Y+b03M4R6;(4S':qflX2ٺ" g'1"t2h --"5ʃ"fm4t=<(/+|iƘצ(̗ZTUb B== 7ֱ |&mfC!&>l=Ŭi70FFhB aY0jQNJM*Z=B0oY҈yKa+ަm E˚SQK2Mb̂+ :`ggh,oUM6G,S6G9=i|W TEJsU{ ]RF@W 2Yes@ܙ?9Y͚㷃Rxݤ:fJ$ $8:qg鳆z淌^Q.V@-=ȓrk0e< SE2 +Ғ@P7ppC)`5+xhOviHV3>:Ja &%8v+1k,62:3fjx-/N u@=܀Z@"΄:]qFpq[@Y^ZQxhK8h g`Kt|,ͳ'e;_nNx"4DhXdG\{a4/lblr2u[#[Н!IX)^XC(^5,A4(ո "# ]IJ(=øv7?бYV!]=a-FɟdMG(*-\;(0`DZ ķ<֞_@Q2xnoDijYYE%~HJ٨s蕸șA5Z d -p"L}7|H R3gBƃTj͚$pnݦ}/mAશkaA=?xvR!=w_W%ZϾN4W0W %_aOm1,C,C㒡 ~.Þdnق@mo5C[ ⺘6R؞{U8d{Mc63RȻde-ISy{RWW*Qg}& FH·`gU]1.1 MzQ`$ 'P\eAtFo M"CF=7Qbwt:R˯xGz*I+OkU\ ;جY^[ E}YC+V`<mUvRI"^ݸ`tD}})7x jm叫-g#0D癱O_<4~!n,enPBEI574`ڵվP/#!#v8]9@οă&+A.+/ݰ[X~eO4Ë}4+YuKpC}fC 20E]pX4Ĥ˦e].V O2'Q1Z`(^z|i2wvdF!'yXnPNtxQ~`Xesi},o(А6lߒo ;T9Zo!c5'8/ĢqO{$)q5)ih>/UMv]GO!Csd:aܕ=ۚb/6n$- aTB6=-X{Ka&Pb&ڼS&ܲR;Zx8jwB/v uZY\He~7# BInq~]i'q!4͚!cºx,=?jŽhB ՇoGBFa aE!9|VR!{맧bks!?} ԾKtj)su zv1,I'ٜW,+gDo\;t$~ٗ 5@ӏ {s3qCCA"t 'c X[T9j1=ԜMs&+d Trm%4u6XS0̨C2!GgMERy[ ? ƪ 63qhKP&5ńGW-gQFoefY8$i-dtxVˑNLTjRDSR^xKO_$"_$Kڥ[BHu] j= $.#'""[x/ӓ]dЁ+eqAA!ud4^\ <.ꇆ' '9uJ- M^f">Uy"q}_ f6 uJQp{RhxF.N%NwO#69+?}$u^&zh390I(4WuX:̶%`3ȒT]]MrͶ`ͩ,n>oU0|+4؝iXlD} 2qA){j?BPhh%p5i2[RP/voyL Ti%` s#>@XT2j?'- /Zx*\Wy}:!mj,+Ysz[۽rO-]l Q37ـ$nR%d37R KyS{)*aaVWO7}K=Tغ?ʔ &E \?wZ̻$3$1Z9a)*Kr<'nRu6yȓ^k/6wԿaF;'TaIE<ټ俫,Xc:*_{e1gdLd].sIfIz.Z!2O.ObI^˥#w`J%bʤCHH6)j81ȍQU?k6ϯ/y/:ToW'Lh fM`̇u)~:M5d-Ey2pkWŔ!D4C㵸hB))lwM9Cۦk]I5Di5` n*q f,e6=B'P;WZkShSkHzAy+&%i` wȍ˻mbFy>HSqFLD: 7tlwMCE%kJl )]pnd)rYa4ԻgeDI'f~u*"H1%66VD]{_$O˜y S27{LhqHq׻%hh,TOn9.ߏ7łasQ$|QHR8=S:#r6Ƭ7ޘYvo1("vJϟӡ8ctJڠS ORA!h[1-=vgVޜ/G!TvseO>^]P ԅO A+}]Q1 &u)`zc-ŔMx-&kƕӼ6PEs{Bjm_SOtޔdOzW~ȾU)MZ_DK unlzT 3q:ҵ/Tj*7jɾHh Z[НZk<˒g*NgTeu=֨E\+P_ W}@) xO! Z&5/Yob!0J0ֆ!LQxӉ\|GiL{ ] دK1D9f{y #}#N5;@Vb{|̔Su5h(PE4Enimn[\Q:\Wwr]5VZ!/6 %0o4q͓zNJt*R L'j<0XOz dʀ>UK H gy3Va8y+cI{ua)?")ҺKZG9l}o(ۺhK"⳷o.nWf٥ll.$ѤaNxGt3zAuog߰=SsBtWiB,)U;1__t}~%g1}=$~ 7u}@Zb -GX㡊5UmnR2cẐb3 2leFP#7cZE9ٵqzV<32^\1yjeK}/@!T(} N)e%5<י L6a_LghI1ZT!01o]}3RwQ٢Ydn(_Rg+t:PMQrt2fh(qnTF}(UZY-JHz9b$ Z[L[v?S׊\ތE9!T^<#1~v^ ?#aN.'*ʇF\,P{ y0*Dg/ 4TWjrPbߧ7AH΍;*V>L7c %'TA% '/7V SH8' w-|{gkhE t@{`c̪GGjꌬ~vDIa quP[1zG\V M$>5z"*mI(:=2 f"(_{s:te8@,~ӛXiqݵ|ēEgrrD_P}FYvv50L$0X8˗& J^o6@<]`i{hQ!Uݫ_k0,foŻ"ƪB;^L<Μe]dOک𖏰OAޥ1؝9A6UJgT3ݯl:o|e/Iie[}ߓA8e0;_XB6ށ6hI""IlaWmuw~s6UYc͘gR;B0-i"kc Ә߰ĠZ0K 2J.֚\QUmm4痵T )ח`cuP3W@KdAެ%+>pLQ䚃05;$_ü:N8/5]tjfH#F 3[S0tC_t"޶MZ~ZJ ٻq . ,⡫MiJ۴ Pլ O`L%j8zctaMt B[[C}#ySXo{ۗ9gQ!LfwkG2D4F_R/ٱ|@ }!SǦsg.3Uxj9f鳸ʹ^p(8UR8eRɄXfG;[ddcEϐ÷ǩz |FƲหY>xNan!9,W,D1?OQ'DM6\pp^F,%:_ˡ ̮֩TqT#؆Ɔ9{ŭH|~2gN˄Qt15ka¹/D 1jde%iuXbzMX4yf!-gBNjE^ZOZ Lv%nDOg {Yvs:'2LhCtL1F*̯y~zgD< pXմ qݎmaT#(2Pg8woCsgE(>z8J2$H BԴ~1'jKWl(~)&QHȦ⻮,*K:6Kj}'yO E^UPO9۴'.@ˈd,zoAn3H<1R@׻v9lQ [';J "k/k93nPZ{!*FX4>|?(f)"vy$^vx`?@?6 ^t9ٵJ2_'CC=bY~``r~|96D[(X􉪞RKe8Q43r7b\Buc\qdoܺC'/D GWGR8*}`MH8iv'͗?@!p [ D6rᦼDy7 (p~C3O%jwݻM]$Uc#CRgXyQv&;T}Hz/?[BԇB{hSýG0"YXI}޵NIJ@Un#Lc!ٔE$s"[9 hmK|Jm:\\nbm3a}`pA 捏+gqU<,5rf,KN>n\^W-ђ{3x<_|7JZƎhTa)zZ|A^3Fw nVPUxmF5[vNoBfĂܭ)J#S)@-Gd`2 r^Vpމ|CMU<$-; ;9H|9c!wv?=ʟ#nz"Yګ`a)B`|M 7PGmHÜl @jxwH ?s{-pp@vF_nz: n K,a'1#@ᯚ˧v-!]WML"(L{ͯKG@<5`Q~;3%e-s݅݁_eCh LʼnUgPx߃+38{!֊v9f,d׸5!.Գ@euN]캒oLQóq\j%Õٟio9w5)L3?g.W{|IqR Ȋ _WʹRH/[ nm?|/?3|:+5PfMG7K72XPIs""iZO?د/_~w#]c}=:zf"Q܌>1(wPZg2Iv~zS]AgM%Sd5nSｏ]8Vr$jM= 6GIds`TßZM:=,#r#i'VC0y 7"FnZV6'˘$5ږ[zS?W9yIq!ZؘZ`~M p O 皷̅jHIC0%@| KJ[VaZW NlވvLA/s޾\RmeiHgO$5hT!{r.ѕi 9;bbh~a`jѼNd/햿BԶ޵;fie/+%UM91p 0=i+"k=ep#!D\kPuXŪ{J ua3韏WdHE|)x|; M5;qSdSnCxy0w{ D*#9gM5:X;-,00XK qvt>#uDp#b~. ^0 C3V+7pϺl{wma0PXDq0Uҳ쌷A:G^o5;۟{ WtƘ6/*>iRÅQo0ܲ5?) )|uKwnRRJ90) ctlDJ~cQ׭'Z{*3RCJU5Ո[+EE5L;Bq>)q軨J`[?^(]?;}{3y#O3jl_ߙOưߌ@+ z.;6вi#P n%B^ v =X|kF2݅+5XOZTǪL:,} I6s ˟#!qLwUl]yR17l^q 쟏#|wMUƌ)3nES* `SWÍsT@~{}jNQfj8@eF2f rm)27!vwdyW]ˊ DCAbsU7R䁃N0Ev>O,)uG1dYqI`?Pg1k -s+ U^@+Uh `c^u;nK1ANZL%hl({_[yW|ۜecA88b Vv:;"r爮h!L TcM/*`޿ͣ\@rGwID(Pw"Gik)BtV'ł雲}w"e(Y),mj0UBH~ڲiiwN|ZCA]RH @OJ9' rA032,;g`:w! #Ã4PzTps(U1#qQN 7 %a"史Teb?m.<]%m!Vgw/q2=C^w Si%ާ82g>Y^ 2d >7uIJf?2ug!a|$2H^?y#)j.C0C?%o1^ [c%)~ yO0sv%nL. $̞"Ȓ`sПj`q;@%1rL_x63l t4 sH&n7݌;+1lֿYi(CGe\dGٵu&Z4 8tݥ@qv37 .QJ* Ƽ =蓏$cI {E_zQ actˎg,b=$K9d%ߝ7c8Bʠt[@(=dS-ܤ궟fS>KX{IkUp@(HsֽtpP5)U"T8)hsg?fWym2"3\afx-46r㜓 衡l$%jM_-[J)Q'FKGM|=q8 pv5 M4~B8l=uvĊcO RtJ fЅ"nPCPⳭsooɒDi%hr,Au/e+wڢ8mS 4'nHl]O"&1n{ͽ  3:zqVrǿx61ϲ>]_ޘ".~|M-U.;u[@ttiUz9 dL:}{% K}G3nRZzߚ08ꅷq31 WSħN_iVA%r;*˜܉k">l,qFƳ 7Yat sm6!nj qܜ boЇ3۶9t|>nUizXV7X)7aN:xd,X)9,>4PvW^Η ,`K)T:Zp;]"R'DzELX`m\RwReZdR^qJki P1 u0uΓfV\A>r/zݑh?Kx)C0D_&u^剽e Tː`wӿ=4|k)Ls_g0|Wv0~+!i4USrù˲l@ \W+;aSO T]"٫YoGV̎Z}4$<6%g˧(j#$? ƿ^oen1#ymNI])KM6Sۛ+^wX],X(,m{"Sۗ Vk>jk?'EpbbυͣҌn]O+W.bfs/@\Q&|zݗ`"yRXw&6gC ;;vJDO3jSgp:¼ (WT N;*e|4Z,`Q΀ 6jqPEµJ/n]ȷf|Pi1FmC1UgtzCbCCs},<aiڬc@q`<{ HUQ jT<(e qX rδjbbMW1HJw&5K H]m<̭'/Cj7T=dًyPc<-|T[}?95 j1Xԫjҋ}zO<2+<".`:Zr3.'\~HK=@.w]t9[kx b?T՜30a1*Íz,ً~Xzv0ui |[~4/-|vɌޫHI%ҫ'ZZF-u0sE PD*Ce&gYLx?8J݊dus5S$$w$y.Y*&͕Ve 6 GaEeg?XGgX0zS"ƅG]㮐XtQ䊽0O8¯쿁FV7:&M ^ŪTcH,fۋth‘3)OQfltwte=(y"2,:@E~ZMӡ0D}o}J1|*c"%N: 9MaI) pb($c8݊Ll2=9l>"8}nD&bF2GΤ, 3H =M>G=wU*'#mg3m/{/#k!D2 Iڞ#?G24W󋎻Bi8O؆ NRd+Pw?͠T v_.k2D}59rou߆c9cI=B? ZB='CULK}C|?RN#l_07th{!J:`ǞIm %9(0k^m"@v"-`S~:*Һ{pxIu|&S }-*|*5)l0Pa(Q$"<$xb^Phjt&SӦO!14PEjkhPo/. ?>Bq |$|24}ښu6)-[Vc 9Ɯ,/VJ)@qQES%m{d;iap"k֭Pn<CYoTL- gAa¹#R5wi=꣕Z¾FˠUtz?} xENn_e6|]{-g5Z@KŦdpqQݒ'1+ݐ5(H|/d_P$qnr }yD:7`iX()pi-цݺ#fxBq~beɆݽqD@Syg9}yWHСrC|f6dTىPxS |Jd`qEɅ3G^]"om?tGW 39ڮՃ)ݿ{K0<:=E/T(wqD=G`z浬(oNg_=}ͯ/R8:KQ2FŇ,j'8 zb< rU;/9 k3qxKƙp҆@e{ḒTI^)FLv!_Vja|ܭF9h!>zߒ?xi+V*xYgDz\O֐N%bUY K3ɭxP*/$Cb>@NvMKB=b7bI%leGWtRdY˺kX({~\Oqi 9$_;j?]:'vhgCVHh҃2jP#MrJijVt9ڨeiQ\[v pAa~S6IR%swT)RSޠTvRyvˋma/qЖXa mXJ~i.%2x$tc;0e`XhB^&}s3C5*.+ɚa'/3hHxQc7>P]d*#4bw"/J[ Y5'*y 2&_6&.JETM/*zpqR |&D̐H,a"ufzܼLmz=>RAOr* WndRYLn#ROY{i 5Xap˥ᝒA?=: `1q鼕?LUnUV`?J71kdT8/eR+~$Bw&ԻdGQ޺Nyo"Cb)\Eaű \V+-TtLwy dh%;/̹ GUgW_`>7ubf%@=zĖ$/oH:X5`XBwaU>w|"<8b 0B^rEfK%:ophQF3#I>f[<6=QM"A[CtuR[\%a71Ij^zPS5%y,b` /xNm:ٻfQL<$S-9 g/9~|vеGCNzOÇY+SQbh <Z0Rq3Q)nХ*)>s:01֤y%3 5+P(@ri# 0hOQӆe XI@h^9騒){l 0e?f Q1?1 i1ڗQzos Wo*u(ܰ=~BP`V_-*:j>3G2Mі[eg e I<vcPG&ӰL:U _g&­|;Z)!t~w'rBxh@GOq-MǷz2?mޅK0/}gkJP}5kj_ @oP7VUՙs'C C8 <xOD@njtWRlw2:Ú9i~u)H{+AڂZZpq+I Bb o}Z}e<91jn ;g2 (yl*+\{nVE lI~?+nܵX KN& tW\;8!ܽ0y/x86h#/#rC%0١ Sx]'7' +3` yܯW MH(|V׌;{?I6 bw\N9jy6.b Ƴ%Ч cJ|!q:gvF:E;nl ytH=B~So,(˱96뉦}02@M dm=#-[VwAf'VD?1EǡgđW\淜bM{@״gzmC7\'ƗUb᫒uot~Ĥ5tW8R$ࠬV7z&S͢\4%Yg1(4';[R;mdO N+˚1Lʐ'V*W1 |FVsxB5f,=em*\\LeD"{ <;f )}/\?ٙڣ9,M%xN g4AƢ^xIiݞ'`iQq>0otN,s)zkqoVCX#ʅ NA*Rr뜏6v !}HT.[jILeP'aj8_7ſ=ipt+(Q0-SAa/K%HQؙiuFϐ6=]v߭n6Bn.*11 R)& OxqY)1hqQG]ً BUoχ\X J~tBlKY3 taO ͬS3R<4>qȂX "XA5`Wow3 ͓WQyMܚVZo6!Y |'Y{n}XM/zʻu#<%b_ˣ'ifӍ)RRCuwjd3QMq⾘Oǁcqm<+K߃) ?&Dk"܍H7L"cp}mCX{IQ9M_?fꝈQlܗIeлШ!lvtqY9MSBMLQ=Uzb~ÐcvRruL}U%xPn% 4ل>ZSzcm M8l3N 4]!lH8SalMhEL(*~RV1w[] x_"(?})i'N~$1kc $QpY2oMO&/͝KR Y#7Muھ Y㫃_U A_Q6u^,x-jg2 AV*K:Ȑc/7K㰫y\13H嵷J-dG_Ă͙R>){|a9VemΥBպX<0Y-Hbİu6mPc " U@+>>|"uw'$噽lSŻtU8!E\Uɧ,ٹB9X~)B7m3ƀ HRJJf->*z'rטRH HnI ݆@Y#( u$Eeq?lW`lD>G6O)SzRKMyS ,\VvnkkVGHbaw2I??y׉_F+ Lu+(z6k6uU.Hp?]Fʹj/$yeD(]mN>&a]R7sJaMdcRvN#>Hy +p2?/}wvvyL+x˳Hxñ i=n+} *Zzrq h<0@XG.?VY'\K cS|f9Bk( >=ŠKU6AkAQ"M"+Gf{3. ^GL[&`nbn/O~=&O@ɂ2A{뼥kVޱd`{O~ -ZwB^ &ޡwryX&y V)^$YxE>t̀D.5׶23TvWVdWBl5ViNڄG}ZCٷ }dpnje*S1vAQlvƂ}Bh`#.1;u/wP_0[6?x7։ *:n-\r:[u획e@{9@ b1tLR\kS1@7{ga dҊszP>I~Ԓe 0c8? >kzڸs%u(S)3{f隨_.$s 4 I>|C3 z9IƉ\ 2WVRt99Ct5ݥvfӅN#dcg* :CCs[?0͇ci,D\ NB.Q4 (n3&,bb\㺔W=nXg",M$c i(o VT=(9G]p+0 GS.E͙%dVHo ?Cil#D*va@dziNʙV>1)oB+Z$4[nطZ-y),LT(/49ɍubub2sa Gt@>Z&Y[IQţ EtZ&fBdxIK =2ĺ3F @HhYL(umGE[4rSAr820ƴJ/@)xī{Ŀ))╯H}yc{C ^Ztzx88O~űSnHkd6Y@ɃޜÏ!1; < 5%}>}d`8[]Qj:(3X[O"Af!%м-Dg`Cxh{k.o/ٿl"yYJH9mVٳ{~f\Un5K3.훓Hv!O4lkͤ5tjWˬ%+;'ˊaDnHqKE79ryh6H+\kV.g9iU?0dxz2jPe4yy@?P1l>űÁq2b;.T'ټn=! Xغ+Ѳ#S.lW$lf'ĩi<(Ȋ8xLQ`s;UW{rvw?xəkI>lO+ H[$IYAV` ?Vomu#GB̥r1WJ@3?oa\=D1 OQ$D =.\ .|@8pZ3 i~06jݒoi,U|qHMhZ*ētk%*MD+3J aCi;XRzr*7(zp׀,k@ީT;fHM:ϜQVU[Pes(kg Y8yl&W~ܱ3h>88fs 7SQu9w+Ņ 6 }-MPpJPҲk+Yrm0M1r."/Ѥ4xaZ:~ve1])耯e!\i֥I--C؊hkg^CDJjcm_`>ZFsXcU{d#͙i }pN.϶i n~wϸj6\$˲X1œ3{U%p(szPR0 Tv.? p&IL(G>:gA5/٨`Dې@<͗c@E6nP竻#.ѓ4ە5h"zf#SeܺT7 M nS.E0.jy.؍?{VO0ϫ$3+ Sn︇0f/<'qOF=wDrx $H^O/h)~Wt8ђڇ {_9T5xQ]I]U cݤ-p_`N Pi)|f37Sْ:6`kCs]#K4 uv \(tӉmޣn®2?XNEH] Sϋ$71I U=jZ!:S#b[*3 C ] MI"e ;ЕThrO"-o5"۰;`v-(خ|(<)e_a>ֹkSak6X#~n㍟rmxוK -2d9RXkN⓬&%3`w'23ye@U ĽH<߆üßAIj4oi5<9e ~JWlu%L3.{oh )yq8$ӯuK%E 3>-v$ˬ)0FpnJDG>@"tAS#O9d/>㗢ؔ]@Y@ ?zi_LȋݼXA0'WB84GR9~)-(ϬѰUD* jȟImr)Ed,--%Lh8:u`L8P.x8U w h}wEb۽.߁%1~1"ݮZΞ"ri  3%УL(=I @yP6),)n`_lEUh4;nd\scnq%IO'w"^JijWpc⋌Cҵ^JpK AWw4E9#'_5(əuZ+MU䨒;wEݚ_* ( Vt?D9sm"n5+\?M0ŝ[  u]{ vT|ץV kN\dd3Zp={<`=VK1$[~|tgR EAm6@:T[gƿKT Ȋ,05(oߢ}[.GR|Զe F)cw<&~*]'2¨bp"Ώ,^h۷i1rkQ>/16?}ZPyOHRHW"3<8LP]-x8c0xOu#{|#r1dCmYp>|\cV |Zćk\7yp@*C?D9񟩩Q ਝ`b7%1d M &uƽa,`_D`hBN!ZIO x8߮l%f0gd4{HFZ{#ShD80nDz*Za' D&m\#[3! O0!/lTmȰm.vK@aMb2uR}|1w'N.<&L!u.(߆̒iڍMɜJǀ;L[(cGӎvjbkZ1UxӢ'r!e}CIZ7'<Jt:7E~~M1tՙ9{,$7` \& ?P}65xa6DgBJP O2sqI#sʴowr"Ngn2.6B]>ϖ+e l1 $: 8ap]m`n@v:d@\6uJ1zNn7rsHt :Tuw35O bZ):M\2<&y<ʁS3#a9y|tSH b˽@E'y710dޭ5GU'y1e67(C3x(B)wSjZ^U+K'v AX-z B^A M؁.pU|:5_S<@cP(XS7,tL=UZ~ڙ?Q5ϭv7[5*]UA%z$#'$Q`*fs&db';m.VQ^j g+ 7RQ}g~Жf(ۊBح_B)T6∖@Y2~ b+QֿxNr3-YlʣI S󗫄@}V}[p^"#J) u;sӻ PR<⇪:٢`U)KN#T;T~,}PS(<9Hϒg?ٿjeFϽn qj&QGpz$n挂A+44f8,!B^4Wz|XU dX dC|$7 U$p\K`C6eŻی߿`_闒b\*׻.CU &1m>u슓XeyFK#/;?z2 $;Yni?uj"4b}Zwd^AdklH+L"# S qqx}qz ]?ίIǛ6_Ckj3 ɕ:\ɇ *͎Hۋ|1JƕfOP*1i{x ̖NIг14z5d-GWrF2sXm-9o+d#7osN^$U:d"d1pd]J3( i搜yu9𤙈\> J"|dS;ӖM2I+ok#m<#d5 ]9jaS0YxA`Zl>`61)d"r@l xo;szH)l$BP.DFsb,#Q8U, ?~RIcC~ʞOs~ de03-t9Ք'cA{㪉]&acXԟ.7ʚs#~gg KyB{-E%͂ -ycsڟx7mi"]9o^Y0_Y7%)"pFM╱H6$9O6J$t~o^8YZ䈓჊l N[~nMTdOOu/" F.fq>"~y[uskQ\$ĞP_m7ohl-R {x`5Dnռ|D$urطJS^\^P/_f; 9kBJD&  ^ /{)̆Vd119A?YOeNJ8R#[Q*Fl7M\c#Y2 @ *&'tھ-dd2u{[(e ̸WmWa<#/[8ʯheBKo =P^FRd-N(PᥖkײK5Ȗ&T2SuëcfЛRȈKwHkuk +6f{i:2XfaAM>S&QzT0+{HNpɇ'v5 kƽ>8=\f u:{4C7/0:S8FaPcqe$5vRml̑z@XBYVl/4jJ (qLh,=& I>NNq|_ۍ]*2(<%v*_!AĜ&nl{lV4w#7%vN[Hଗ.%~J8WXKM见WHzh!sȳIHɫ{yF8/-+`G[h G-[lٕjSC{LSr;&lw`bJT[]JpB~ J B+mh>Tʉ8 )Az3lsBu)Xhd$rtئC;hs xeQ @P۠CX^Ff}s5Vz Qb—Z,ZEHi.9'y;A6 Oc4YZriDo-*)f{.)b9grcKaiyN scg{gn"ō&(LO`X.v 1VxL!+xPI&:Y.2^/JB#lSA רPr%m*iQEEѲ];b /lLkp EP"j,|dY7)+g:mfRq]}0F6 KxiZ_"kt%@ ^!DRaZaaDvUS08ݩN KQs4-Lkhn 1J'Ǐ \~sg]Qr0@Y" Ji) վL|Cw3"OUOdtt˫zj ɒC0 *vEy_}:v$ˌX`ӘK0OO?r yX*k~|+f{t׆c(w}" jM+LKPR6{6zWc=uhX0t`ed5/3\ T{@miZMZTs׫?b4ؤDU`O20ʐfaZމ2؍ױ81~RdXna՗ڛ|fsȢcgJǖ hTzB>*ZF!Y!P4:bX]ҜFKpi@$|TD.kbV9kA\Nl=CV!+wea D:;^;u1CEd™DRL$㫬":G#Mz3|$%g0ǎĴ0r2a9Igupi+@^NzX3q[;dB7ءqROT#D5\P0Yxs&6kP\cuDu;X/Wk8p%tL %Ap\%0**tP('bbc3-U-T)K2|dh`avq%L?cXTkTIB|%usmT/ϰ\h9$ZqQ McpRNi=<2 9.E%(4! eԊ̻tSΞB*ˡVcWVГ6>Vf5k W1Yj=3RA4&,?K-i)EASbϮTp.ދڻ0aUZ)QT"EeR\03?[ָc /An:ȣG*)@%lX3,.!"X2MslD=^H .[gׂ #%1<(ix[Va<3,{s<u&!׋,3D-&pcomhLmVԈNkuwP Ł!`jrP :p,kt|)en~#^h'ZXy]ILQӰPud 0e \*uhr|\kLp^L_0=jSJRN15%NGƠk/CS{o? @(f$'OW'u*^ovMq$aiZk}C): ^uq |bsVc(nac6%a,cR#PWZMe6W, c;nhzRUƫjsu \n&9-xBi7'6 KGq4/6H(iA?. _^X@a|* ޻RV;$u:f^A'+Yl#hWs/~}6Q W GދDsٙEH5LEbI5K#3[ř5ܻ7nV6u|#+R̮2M(: .듴"- ,!m2OW"PM}6"uog Z剏%@}>mT?K[?8W Ϣ ;(X-! $ #k?ݝ[Hr^t."՘Hd.ˈɟXNĢ[Ç !%s=F 2Q?~q!*ܯi=wtF^/}ضĝ5Nw2xӅ8\hQpFs_=ύ_JGI`[suԃݔO|hY]ԬxU fTЀ.ѫAaW;eG1 $ᇚӼ(%ޱ f7* Ai‹9u'j+<آ6 8\.tC+V\c:K'zTgqlV:ﳌki5ȡR{faWO%1܊.*aug {^g^qse [ U_UQ@VŽoLS/FW4j\+ >_ЯqgD.'x?ϼ{h_Ѿ-:*za|Rf@d:tm-J,\_A7h6 ݓ9 2TW==Ӆ[Ei[`(|0h<3Z\ (j+*Jz]7a߷L &mۍ$Zw&6{;lXa/_Vj6c5B YkHg3i6lZ6 QjpP[uSy Zgi0([e6O od9ъi٦v"#RaU}hE(`h.ߟm9ls+awtPX[ͤ|*kJ'_KCurvpҜ<-m긦h^+&G ![UWV%=aX =*~Eѱb2 1ݴ Zl2 2ӧ s72 :Ơ6>2P$Y _`7cMؔ6M+{+.7ب>FQCd*EV:JTA}A"T` lQRB!sH=+V,bCOZf#Nh7AM <0XVz kC<5R*.\H3ظ jq$*.㿗Ҏzŗמ8N+[1Nt.|9rLkóuw}Bhaʉ#J0aqS  .&Wu:xHrFԁ,E ȩ(: zP֎gNcj'2Y2O˻hsA݂<,"؈M< avחEIC`|24"M]"EbX^8uH;?*3[!qq3ɍd;rGCpp}K2p2e+U9MH\]L3'Ѹ3Q\`..\OA6OL2a~-!NvݳF or ,T/P3}E֥4oEMz5bD%a&&7 Ϝ<&bWp "tD⇁V 7\4/y>&ڠRq(M Ý&m!d5\ 5yбaV֚]jcNU-V(ޢFG(e@n >$|řUq)!U70bü&5FP+ ӄ[߹tӹw_KYӞZvisX3_Zܪ J8# w(؅5zA01S<|BMŒӻb"?8SȢWQ2՞coY{mPP6Zdr"@C2sG!%ԭBk^ *w/^*7,,$ fq/75Qu2l[(9Tr[}nE FcXuR&G bw,f9ZءKO\Ÿ/0w⨬ͅ;x.~Ey'-lZ)w:<*!Gf`ߨ`iZcaZIr|#Cc?xK FZ&If0dQScWyڗ-vE@Po/Alw/ؽ ƘΤG) 5"CGz<9v#=߇]]4"&䗵v¾p)|n ص|#|LlaZc5zQR-1c?kP 3EDoD;7T?"j۰?l:H-zKGJOAӁ 2nlDuuA4߅>k`Ekm)iq>Į:m>w†`[f^f)ВPjDj6G y/%ӉV}9@_S50k"πTM?h$N^"ftd[H4K֑m+ Vw}%/ir({L:YdH~6d'RюM:I^y]?|6oSKSUrW7RˆWFL3԰eWOwV#nan:GZ36PE|̬^ ȇVn`w$KfP6iK V7u)dM(dBƷ+&X<׳rjiF){S,'^rT~hJ+Z&b. EXj4h,D88ԣZ֛'PacVfzR-I8:6fWN}.!2. ʮgiprX MK%(tDmO-I uDX?^Jr&0켄lonRw>?C]%h4h|ЋO uE ]AMttO_K>1j,Sj>+ ]):̄(xb#]6<AqEќT!x9WV E]+?a~~C$}s&)j h"6}4ǖY7էKW^3uygHQg43<67sl}\3Ì{ *8m(!\[y΅%pУ6mLd^3/KSMg۩uM91l5wE-7+1P#EZާKm" / viü׷; * 5ʖAY(S:~ !퐐\65@9I/{7{kaFF`OJ(o#ثv#Ds2"޹#;[ U͔Hӽ].,ˎOoQhkҴ!i듟;VzMs̋xa! $KJ5f.&;s~X).{L&`|Uys?:VT:Vkmn NU9^F̌{~ɇ2I"6#fCD[Q,Wwh=K:}.AP.ۓc‹8GQJ~~Ԃ59TUϖ!S(ex Ó|3S 'u,YLq*j S-APW%a䢏 >jǯH8T>Z駖jNe~@1'*yk!O[TS#Ʋ+K)p ^O{C=,֕;SſP|OPb;m1hXXE)`k6f2ZǕ7wgBf9?I (rZ}Z]ep}oCI-$#FN *БϿKT:ưԳ: *߄oz D29b$hq{_a>/5*]jըnQ]aَZKS$kb!1fBB3Kd"`W!f p+Rhɸj+lw~fH8[Ek18f4zƼ[yt -Bia3J9{ G릡 ~?A-A.wle'<3{]¶RR8C_ztnu1|lLō$G$VA9{IGEa2@ـPt*mPh-JDQ?κ$ O ;)ome$~S%"7g]f(e>&FY@l'\(ű/mAKv \!a$u=^չ$:=WÍk.tfQ-zjd@ ':x.2!AzѮ.rgR3\tc3cBCɘ\^PRubd9h(=4K s]ԬXd2+u?Mc[upe>Y=}Hj0ɵg+& ,&(V束|#} TxMc" I0&OT #Et+xh% Wj {9<8VEHBצe9FaT2ˈY?{*[UZotQ%4'i9KG>?30zA%]xAf0Ǎ bB\&UuW9-:jmʱb3l?$*WjTO Z+]6 N98,cK9d@b9sgjBXd ' ŤDL䦼V#u߆ϕGT*+E\WzF4gXiq?=8o}$iAXҠ]RN## %(cw(Y0~x2 Lm3kjƷ!KJL)Nҵgh./x[A#[^Vum 4I0Ƿlt1\R 2H/rޒ:"N,pWQW})B $Fo̽mOXqk(.G0)a}';k_ z/h`Rl܍.N>b-ʎ3gM K۸VM-ʳ_1F3c\Ar\EuO痿P]]ȅ h,ko N<.m-Yll-ֶ>㥞ɟJZ '5PMIۜ쾬d2rs+yG}A| טּ®67GfBLɋ l!S+;X=o}W&M:Br5k.mj9@[jw+L>H%<^({첈D$)h36o@D x0 .}hdXʣͣe4kZ$)('1Ǡ.Q#י5Ϳ]dw+}&*b5Յ<{TgmglMY`ːuU$ityQ]P,A͈J0HDy׹- zÀEqccQ74t-#7@H{VŲĞuzS_,9[__Nұ C UV5t^ӪcO 88\Ѧ ,O|(4 mQ}o+W9!Z!sx d-.R1| FKF]<-[t* ͸i]ݫcG{AD_ Gh7pNؖofdYl\X?v}BkL}Xt;͚)-@6wsH?<ו S4ZRJz ?~mb^X))y?ꓥ?kSȃǗ#A.uʨqI]w`u9{~ 1ׇ.JA7f]ƖF. ~:&#9 gˋ@].NUOʅc8@hE_>b2|,W|!{ יvs?WH7|sOX=V"hs&zTJ.·dULsNS4B_TQJ&m묎taֶz sZ<*M3,ASq?sȵQJ*Vu͛O K|NHhzE㳞͂(NN6܈m3mt/8'Xnlg:I,3zO9^ë7fP|"`1b%0U- ׆ݿYR%lVGӯe`$2YY ɏC$D"F4"PhU*_VdQiɏ%u'N!ec:.QGFG1u4̯1D*VҮ(*BѲ[:^jMG ;Uyp(a5~ K\QGα7xtHsjQH.gT*<Ӭꀎ}&]=p%㩍QNw@b`4vbȋfd Rƛ 65ItZĝn4oKV? ude,>K RzKwv\r0].I겙jn|&?xC*al]6.Wgd;ៈWhOҡd*JV}&>? AUkJf%4XGe-}oʢ Ys9x봐d?)4N]Xb/+򇶂*ؾjxV\YFjM)ݯܟG>9iGZ?L(e`F5KG ]0Z%Pౚ},컹6(gcj&IZF?ZET#~$ej@"88QnGR |+ 0JU/>8Zt*m*}:#:"Hc~4CL\*ܯw$s(SD炐Kp"Oh3qQ]dҡWŀr6Z!%A/ BQH6`ذ+#MA Rד:?TlJXS7!pzw |%{̭AJ!S3C*gӸeGiGbl$$Ě ,7M'a!0y7Em+^ H<5O:JR-NbHj^$MdIK` X/ţ&#}%2gYz_+^nlj "#-cFR_Ȗ+wR$r7ETR3~Wu)gB<\\el/NGˠ^m w_! \<x|~θXλJ'Jc#'N#? HyC9UY<~ۊ~ sF`͘Gd,Y?ᖓ4&)7ܓѲxjpN\(P0鄤Sɜ Vm ĸoBރ;nx]Ao[1,V>V1yAUc7XP}gw ,I G|)S)ޣeWewp0NUi}UQE1e.f 71ܣ8IOKn& *yѸJR H*CnXUAЁ_9 53;$*6`yAB^g(zn\ d'ozrx64b~U} )}/0az;i"߿Y· L`)o-z\d=Β6"yգ918Ϙ Vh"j.ceXp)"9$"줼"0#l Emn""zϨl'5HҲ@Wԧ&\{ `=9{i]XQWpp>M6쐋k ZOT ?2|sZWda?Z2w02c`s_e-=fXrKF}2E$* A Tp'a!U$U'Dd!W,`[˺}5IDM/Y7qE7v1DZF'!BI)]#a\ FVs# {'7{^JOѽlaǧ&5I:m@d/<4$bӴ]-$rp"˕&̆]c;аΦ9Tj+|/!Jf#;~ɳNeVV8;gv ~p2³欄DW+ﲔIn" AC X%H_^[qGv8 ԁE Ԁrjs]$Q?"kzT=T1; ArD(&"O8dF!W,yrFMk|{e9갴2Z Ɓ.._0 GgG-'Wwoó6eIOV\E kSIf|GL^&9髋n7@Qi_SdhEqcu"<ٛ(bcpȊ93i7]L>?TUQ 9qpi!Þ5E])ܥlvDiK䇤M⠨IFL,Y&Zj /P*X/M*7K٠t P,tXPYjͲߺ4C;zTHs69pc m5] y\ 9d^-y*Hj K{K&ҏGZ6Xx9UPf;gbYOo!+,&/s_-$kA*ł`׈I(gUg)zDK)D` ]OlYVo5%(%yׅJ:p;0d^I/zv>@t!^{ըp˙ 4?ˤOsliٶrкӍy:+]!%b3bJ UE5ˈRԻȻqqvbivy&(Έ-qZ˧cm(&31s6ٗST9:HYq"7+ sUjU!:C\27"n4Ѷfnj'Amt-}/*KlOd0.xGqex1Ủy g*$ڀ*QR\|~b$qM8^mzDa SHv\%Ēx/dk{V?AVfΙ-*S{bꂑ/^ے avU\˖TY;JEPCDH&|Wإ/WF#sXhm`ʚiX1o=GbtVj[ 0z=wkb1ʨ`Ɇ&a"|hSxeK8*&gn6(waz&-t=`8" "Kp3/۲n6%14|;50T%AT67JgPQ˚آ$OUxs O5TRsRZWŮzZ Je0(-nVw?8V7Ɠy"AZ֚ >O^a7>ء)JA*4ZNKdLCh |\H2u!hsc^)Ͻ|Q&u=T;^Y-i_o6kȟ6&ʕ:rk\'|=%+CY?v>H=t>D?quN6U y}P|3o T>{D9(PPb_:aNXN!-`]S@ g vDDqL~JjiCdc^ Q| KűI]akY;)3̞+{P0}(/1J$3;eRϊmiiuOxN1χ = b*X] <^;a/(V梅딝KֳU3R-+,(+\ g~K0M] `2Vxˆ!ޛ-Zd/WyA1f'Vq_L{ R@?N䰂=Bk"Y=eŠmJb#8ƿbhv ':%# TDvv<ij0 f&6qŁxfALlN 4}:D W#CJrK'^Sp*j ݥSq'y\ba$6B\{ɏ^}`/g/JUi!=A:46+k>ּnE\G#)R8΋Y \Ni)A¯¯ vAiD.wC8yD&_%hm*> q1.蝾SU_I%2Y ς,BO:fiLUi.ߒµkHS=c'26zi챛zI4@reR>7w .d `rRBp Wxei J̔K%"F]Bb2z&pIuxK݊Rq.pfO-}re{bԬ'=&ϴТQř9_dné*TN> Lӷ9{}.Ēku33Nn?`d;ve ض]/!Rpk㎨{@f*sW.wș2Duu'& 3{QL;Rpqr[d≴~3̬atOSBj!ou~@o=?p/QfM). nQRu\h0T. Ľ_a ħ0+͆Y_7RL.C$S5,LLfD,pvi^YJmFrD=6XmzT˟9wqz1!Sc,1X>+@0)YHr%'=_ OZ3@fwƓ?VK Estǃ. /cV9n#F% `ștf?4 Xx$/,ԩ&Ѭ -a77s,"ywH;,hz=6pYW2]70`,=mlWzh 1%z6#0IR!Wq4`xL}H.6AFvlU>2l@|[BP8ڸ^yRb (N:YBye%j(n3VyF+0Օ@+fYe̴u1]tub^'ambxl)bwlK5]=ߐy/|J _rKt-/aȔ a墄w#=Tqoe<6XM Y׎*UsD׍V6%GQ8|2BguGi ԉ~uȲ1@/aGC_ju%p΢5ѐ4?[P -ı(ttӯ$ͪ7Oӳwc<#Y&`Ow#MJ0d8/1LN#d 4(V_.(R%o' .}|f+Lz>&Na7UplqΠ9Wqa0cfл6_և_Ta߀L N 8kIn,nw|}v%eCav &.FqL&LK$kcۣgY =w:|(ouVw~MضAkCzA wdz{nq,CϖOGxڒ]5db۸k, fI` ka{^5A8F4o*g$M 'SIyʺeՃn^@y^Pm^k(|% SP{E#&x9 p<@B`*-^=" EV:nǯj;!B7Q8()*7kܹF8>9ݸ񊧆htr;}S?lW"Wq!r 4Vr!nFYBfvL2lۙD ]*h1rTAh"~Ӗltۆ/'`Dp%%)V%j)cóƗp>iB\Oh@7Vbٌ)3 SQ:}rzb Z9x2QO!\Cn(VAOQrN:!K^QcjArߥX2xDOẁ_z# p.3k-@VUJ Y6ΙtR6X6or\ms}Ĥy6늷g܎ ,f俩2)܁ƴ(S 8$>Hg"HP+"p[JP{"|Q^lپi.5h}td&>qY\蚲*\yeYlnY" E|X9us>^..#4C:?KOҦr]Ô^AY /kuU arPf LFZ2C{,#VB2e39 0 coQk) D.\&^Zi7>^7aS0b `CSh_ h(&utو\`}k4#OM3o$oŕNo*O#xM`7HDdǠ&šW ЩcMd0-6 K$y2fzҩR@7I>XqQ>VȤ٠@ dݦ7m-o7pM؄zP%C?)}3| G9kܻ}$循.VFF-BfC? g mۢZpE|G.F[Җ['@mTnFd*WTpqpZNwg~n|RiF {5*g4=޽eI'0/)_ .&Ӛ̎Ґ{yn4DRI‚+7 s C+q̯``T QpSn/=BRToi`%H6̳i7A7=DU8aVXT+XfI˦|/![tt[ SYxEEDۜRP_wJi$VLO>x:c^19_&4(]AӋU6M+Hcz0aA+]n&QTgW9k<<ɊkK 4ɞԳ\xa벩j_Tdp$'S| %TCJxljl%3073(IAvɇzKK#&zB߃x̲g7Z&fPB :ӌ *a à߉oOjpo|z BK;'zt?tv#71ŞEwkB=(]hFg$d7XUHGe ̑#.^i*A_Fdg{H jY5o@| # lgz17Th ~0tYO4$/, k;hm=yϩܬ¼Ue6mយT>+ƨEoxW,2$]@C&HUIR<1a4 R"K$GL>؇#bO4F?٤K>s QB:#V}cWhJ7igR8D{H{s\/.vS]fN g'Ѵm}ta/ U&xQ <2#!K(0[ K]8*MXs^``-vM9]$lG(SaOԉ[Sڿ3sљ o\{k GjZ-P|O"rDq d~ZB߸7#V.JqAgWC!xNRsUn'h KɔZ\6=\V;҂Bű;.GZdU}2RgS?[W_Q<1B8RKPņ\g/8oe<['J!ǫ]7I]ɇvߊ1cT,ػP>&p-^o.qP9 2f~^atG`@*>5.iIVJ)۵J~50[- b11~E(bӽӹ]I5nBob&@Gu4;}ehaot, sBA=6Tjc ~4YBCY(.=G~%?QȾXJA2ڨ#v {RsO]oJ\ܼ-^:q]hc9kqS-'kXwɉw]JrS)k/N12dke}SAr?چ_4& :!`\vrm*B./%Qt>X`5ca&v A10 D!0ގBB劐I>[x0TʕKG^C!)*^Yh.yܢfNKpOr7fqQyӵ ^9L, IFՋR۠wW[3쎩J8]w +H~ytcj"Gw;{O1*ÏrT䠩ox1^Py rY0su8'DLg-M[jP)6ޅk]eZ*7joHۤmwkFY3.NQ3р=Ԡ2`Ԝy{F_]/+!#mmSW%[fb S/(jB߅]x[cT-IfJ `6˘aG|{-ID/u(w^H-a6(km`q!yfJ'jՙVPNL_*V19H: Y1EɴG󌎯]ӆ[Fq?_@J8[BvR#%wg̪2"{DIAZTXuꑬ,v$W9YZ BlzpJk!ַZ~s,j !7!H֮'c1x $j4](5^ѮM🶅sܫ+!I%%VU{ض=aE~$T'a&0%-"X~fNjcFۆVdH;>Mc{;kn:M/i$SZLcǵgO0 0+U'ŅlZS+΢{IfTgM'?X[$:"@Kςp3d=ځȪa.7(E|&02O%?`*َHreAB.J6"T[bNݜn8 q6heOW>Mɽ 'q l9O)vw}DZ[:&#خ|..=SqFg|bؐKKd:W6ug籰;1 ST0  ʀqwj-ϧ39dI)_ Wq7a[C"_Lń>wԒguo[ъЧݸ['ܲ;[sN38L]1VI&t;z[̈́ѷ"'U}P ON[-xŕp+%Ѓ%^NLe&WCă2PmG:_Zz5r{)KIrFKJB!ļqwR*h6b3Gt&C.q-*E⸂]xʅ5crƒN?~r!5 c IM4 4{[3=B0ke4 &׊^,1cˣ6+ȏa]>s969`277tl҃l/^NX}uQze,0`5 |mILnFr ~3GerߎQ,i9Z+琜mQ sk&XL_GSO0ͰNWۄG!6G ]7\s˶u ?N7΀_E1_Ui|zy)}zh@̓l]ȹ]Ea/LBŐlIGNoCuq"^bϥcOz#[UROn(n.Q$Pi$6tJtJ^w E<ȃ˷l.&6zPyrzWe[ӑw4*P6WV_-JO c80!4;Mԏ`8Ob7O%>V!?K@+@ QF*~Zж##g=zaE͍)DjJqfPZqvG#仙Ct)l5Zd۪"/KJ]Җ!)1 3Q%iלV u/\Zhp;Άf3u3]yd=e55e'BMv;_*I#w Vw]]>i(%BwW{.T‘g-M%60(!Od1n +d\ )܏Ա-=c%nO9j&!eT \aƐaB 0WrmuUBETHN,YGS,%>%,}d߄=[} >R. f:nEY,խCyȤĩ)䑸 eVrgf)8.X=ppw"vb&];&&[8J@ p&oyw&6],>d?$\6Vi}xD:OՍAPI|:7nW'F~m :&Bp_h-RQ*A"f%)¥Qp\k (F_ICeyC5?` Wh#uS`zv8Ƭ'd$O#)RSv{Ze@[FF@>O%3N0I/(26,\Yz .?QxKȉef=>ǠS:{ 2&ʄ2 |OT|yr uJ̔у!čb&oi&I%J(Zpku~U 33aTM@<NA>>%/3Z?ks|PS(:?!Jwe/x#>R \sdx :[~@T~uOӻ,Hh~q*Jȇk/1Kf4l&2^᭹l&Դ$SF;.@_.. ;wIn%/iN@y*a~C5gfU⁹lk! +:篠Xo %>9tWPQ\Ng504i~nS40rkʊƙԙ!{-y+B7(F3bTUgUt`{-)|ni"%n;ߝM.Zc;G6j-yL  Rpq`SRgŊR}==(*`˅n#z"Z+2-tPkk؞;w/or(1M _{lw^Fz6!?X ?B=#skw1mԷ)i7G谈V5/zf-xX7Lc6]F%etmbM[y蚿3(i8c1CK%{d044s;_{* *Nre/ p}ppMcq$8J #Rm̫M5pazߗnHe *%رx{ w" _כĝ\F=8Qjz 0 .ix;@:B8yT=Xc1t=dyc 7YИ\/rzrSkGd~Ȇl@2U0 |-t:kϞ<@itrY ]ԪX4ߣɕ'ŲHFHrwB(P-r ן*ZK{@'oР M?ۺM(Ɛf)}iq=[d.l(gydאMUQTfE}xv)5MSP9K2< ł'fNQ!3$cI+Ĕ/{`BZQ  !4~=RukuhKjVuL؛YaAx!9KvaSo"]!C?8ڽB#TR^:EAjѳw ՜qrlVˁ[aPL!{b 5\NG>TB"s!B[@v0E4GT\5ϸJQK# (u2rF=uH%k G]@+L@|B)X' Zm ħ49Qad_vhz2L%&'} j\Hpج*~&ڏKG J% m=R(P}҈95-NMX]k1LT}+z,-ܼ3Nf(g * \mY8ÀЕ뿡iÅ쪚`ХCÒ cOh靈ND8wQkp)'fDJH{ӘM? K{}FA 7`~Y c.|Muze8e$%5މs}&ۡ++0{]e鬕ܸNOv2g?uB+BQ ;`gJ)B1TxC; ioq n}DO9R@b`*Q U˙ ]пǑ//p+Tp> ȎQMK2ʗS&z1c s8NY;Q4N$HMX !?P`VgO)ּ=k b|Zx!P718(~ )K N\f|S1Ni+5 >piQؠ,=Am%W~nfo<#Y9aCr2y ׾k esEXxԢedT|7i=G,).W\z2 H3>lW̿źa"겖WA@>jbUoF?iZ 0KXԆ\guj[MNYJ;)ƜÄrEN1˲lߵ)vA[y߳.^԰.o'[6$)L{~Ďcw)e1%thse{MY4q.錧lrz:iw): O_a[-kaoNn1Q3ڛܤ wWQt,iI$Vhz,QKuՀٛFFiԷ˙x'JݑM<Y:ܞ>]'æb Q`Y,?j^+~NLjyW\$rٷ0фy%p^Ht'95Ch1LgdIm?駮#{ U [j|[~3uY3xo+4,ϮLhng&L檣yDBgxͰx:{ڥXKZKC4(U\I\[]fg3$45#V-(ܭ9``vOk :#0!o_^zm}e6e 8tGny: =pR "=])"`4nn}u}3[Πhxc Hsݦ1C}ƛvy#+6qA;7w"WAB*(A 4rf(Zhtˉ+ZQi&Z}gt:8hC9KQI-z77)-g]k7U\ 0-&^,HO R5*ZY̬\ ahDEz|[``qtOWHHAtH%&rz_ƨAe?mL Av-HAo(0`SF&bm sH*\mL=XѯʉS]\[WY:Yztsu{# G{*:5NKϙa̙;xi6f$ ςP3 |-{"f*(ws[]P `2`<ș=Ao9`m=jZ#77$b꾤e%X:H>#ā[||az G|*nr˘Lɴ׀+7Ď,e?%=I9mxo(fURP _ Hi{;|I[+ [!12I[F)1g Y k'1R%_ e"$$*[{QBETUEt9Y3 qE9Y܍xQ^v~aퟫ_|oAyp*:\ wޘ,,c}g?D3PXVkpG'n$ 7º+&ES^7v-hq ^w~>.:\ $:#*4 *r\'\X~542NͶQ JXz@`Qc讻KŔs(5{jcR.Pw~UG6^uϓ1zxeŧ$:,A_j^Msav N-RSn p4`2}jSJz)ƨh[~zH3)쬍zwPYn#j0n2)tv uuUHs1YUc?z4ūܓ} E\?soIBe^f#XSp?ޘA$|y5JJ:l %EQ́H1zmG9'&c0  q  TxUY3'B'Ypٺ2`=V͗(l}RxY1?(T^WEhqןRh鰆N#P;awߩƼ[qvx4>MM.j1eVS!_C^aYEq"|pa+fq|%bAJ3W bTo?wK@XJF̾ 3LpvP2H1:(aVc10oPGbu͙A@w&P"qpK ~܄Jz3!?~(,V*0넂ɝC8S<ZórBpd v+2ti\hX!?UTR?LJa-&ԋ,eJs IE_kLFV43]˗C0kɒj'‡2D d, Ы%:K>|ژdh'7Nfw97Sg96@ M)C%@&hI;eZ[e$} ޞ- kC y@]a,ޭ\UpR~ e?wJ:jgؓmCj>O9gb.%et*A ,.HO 눽f권p28W0HKNlnpg+{?U#:|i*n&nF4b?N9i23T=>.-Nb" Z.[嬹a[>E\xПXpE;XȏJmR.@{pmIXF|@aS(_>s>$n&D~]pҤF lr:t?D}Q_+`I1#P$ێg"y}V0 _#%I̙Clڶy6?hgC (0f E$ъ>j̧Bt|ßlp̱ !Ij5LYnͧ >NлPSTwZ;Fn7rh ;5 A]z@KtsQU֋i!- -&Ɨ  @+Ѫ>,26U 'e}L.y;ٸ_wҡ d ;!T!\\ynZ5tO:AG7Ք^=!  ı5Uu!q0C%U](ۧwvC`eV]}}PA 衃Yee^C_V =\bw6gȩ!)m![IomiBb00#TEMk{4Y0^2s{,j#%!9x`]4{wy/$,Ao1Md#QG~<ĹY cw4}7Fy-ݍb\[YgZfQkK_e2H @0-+x?~8>W'D̑O5C` 0\p>CcP0[xﾣ#X\ 5I4W52CO uh?aZ=n\>f 9Cs 2&EV^ FM+*|nrn2VDl‹mmM??^nN{P{-I^'y;_yߣ1G)8KRivC;b9d+bhFsV$.i7 ʪj*\=z/# ȌVkB{8z_)8 . \ z +]}=hI Z<<+LaКTC6fDiU%I*nlѡ@pKRdc3yfs6#59^kt%F"Q͎5pH0t M ę5H9=+9*^` e1ޕ ѦdQ$QmϬ% 0GC7aqvA$91ݘMc [ HSnc34"T.8ڤ'R) )~=kz$ m L=lGe$v^8̠rn@lkRGxNpAR,`64sH?2qYһYP_R r9ю<2?eXO7d"ONW@;'v_4͐oڬ#i5i,<$TASQ2+fr:'>=02{xu"vӦL>Ga\S "k`;qB7fo5l*Xl?E@!oJܵPp{h4ZBOxaS D| w}uM&5 i1 `ʶaV+|t7ʓ 1wjwkfp0Lqm;ome|v+9qUKU2m%e 7"l-t]§tqNO OFdp%  2]t˂ͿQ%pvvyt>_4ADY[i(C,-5vB#WK;Dw"qJU_+@r$TҴI2,dpAϠ "i@ %Gnc䄜z<|ItpC(2"Y{64J TY=%n ޣLQ' +- gcYquZM,# hUk.Jf=!ͩEʟAʖjIbȓnwS%{I[W'pN)sK6%87:&9%/!8 L ?Lt~ E :6NH@H]g=1`:Ѩ3%Kvpbc_ik3 8ʒ:ٍ*?^j& ?HY; kOO&W C 󛮛0/C );'M(u,+U;Y 6;Ɓ- _.9G1y)\ѰD_fx6SjrFYvd0Fsn-)&= l'Eu20_zcf.֫[^Zp .iPԜQ_6LѹܒHYNw0=SD~aRsm2 u0PtHu|h{bRDtbaLwւ" *-]u :hZiỳ @!}5hv2{U)bU1&iw-q\KZH9Y>\q&YUx{RmGZ(SFu<tQ D1~mqX ZD(q젃UfBrg9g#50o.y=%j3*0 ~\=V4 w9gTG:Q`wHR9Wi-{XbJ"$\%W{F9]Ⱥ>O7LT /^Wy܁QFџ  h^TyCo_tƍsnyT=eA866[`e }I⤕_;lBF_Q(v4ߜy>O1Xj)m]&x*aufJPu75ZRqJ-W nuö~En~y` 5A7!n= *W%ݧs>}/epVd^WT\q[fFɝdM(M.1xDDBdGZ#RV\?nDq=&N^AZay@PlNP`pw]Md2I?_v9v /xgWjH \~)<1Ѻ伤ʼn@j1l<64: >O+z d"$.1UJ= ?rhfJ(cbK}pB_GCy9%jG=5bd:QEVsU'U30PV(鵙HV4ע6RSu8+s:ILNֽʝϜ>Y\R[$쏿"sN:4/ٍMcMƮ$Yy#@qb>gyi'T4`H$XACh/ Ǩ@-^8cz)̊:͕iUG@zFHe&"E}!o,>GYI^x.}3$\nK&StI'/] fahjM7XK`^3o"MB@]#xpLPBDm\pc.Vz'e0 l pKH29P>LH"_jJ qI]]/)p:Z>`9juݖ>OM5<v0O4M<԰Bwٕi ˜V3 ۾i$C9:+*1v%!9b`|\='cqo²Ɩ>۳9񭈒!O ,eSjǶP/AEQ[C.n 6iV7tZgrR=՛CG;,ѬYߏ;H)~b-aFq% ߤJQ8eO xYՈ4#UQvRY:@Վ³0jtZ)!) -_f]D,S^ғ 2¥@׼X =,trc{QxtWޢvnpz]ּG+B A U$_P  QJv^(a)1I-!Gh%%=D͋33cRzm)>b Ѹ zo޽yadX8wտNQ4#kDAAnb!/(~!b7Q'm&ᩮlU.M;< |2 vٜ>\{u)NB3v&;&RBUP}a<&cg].هIm GڿӪx:zDVi)Q"UNJՏȎơi1+f=RBT ҌS?*)HFN0ϿH]Y]z(穏G{0L'AT$ّo; ŵh%+Nũf?DA9e mc?#imUīm1Fh!xCsV'Yiy};ҞNaIf`i :TzۛPA`-eƢT W'MwbL7ԥ> ᎳH?7z /-rȨN.Vx_n;RVV l޳:F4X.AS!U5>(hʺSjBmp<O|JOnъ(,q;-taD''ӚgBAƩ(P=7ry:[p9{0N'e.94\sSZyzlWqaZV0] h ;EF)۳\G L;b1f#Q(;D{w sW%orNOڷ;dH7',7bp|J//!BFXt?^n|}F27@xi-]1.n'4֝L["{V$7?: ĵ®-uU7V0^v@D:vjjUJhvF a]Tm9Tۄ`&1~_#G7L!b/{vbLѻH#թo)~g/, ]E1!]'bjNp$B/0ETW :N/JKI\O nVuY̢7tq~EUc7`'H>ѳb+c3F~'[c "?L rTy*0~glZ/~+7Tqڇ%˥ҀkgbD# 0L9dӺ\/bFxRnW xrXW+3nWMyRbhm>*yTKU, Or+2G`OԻavawȢNo e;Tg֛}JsN&Or SW_\^"u*s)^tȑ9BN`PDPuDAaQKxt۝C#0{cA24!Bsh9X[oPyَz h)rn;{nML=1A*Ge? 0+Qs6əD]M*5'8v$ߊZCy3& ow( 4loyylp\@R2 V؈]$BܛA^sA~w&a7ͨ2t8^^33]K[; 6*;O0dE6v$ 19A. kͤ"GaUGl"y_\FF'pk G}*>ڂUQ=ktd9"v¼ߍ*6- EU;XnF2WBLO>M7ɻT.^t#rOi%z|@R a@ b" +eNz:_-oM M#*^"lx^"22CAcPmc tJ-QӦjИ A36/ OrgPJ[ENX\ 07 0_ u8RILZIP7"$%~ՉHqM)cx\)KuV~JLf$AC-5ȥpƜ:acvLpKu:%!~SG!. ͯCyds _a\ɲ-ahHI]V%ڰ_0ބ>'̷S/+|%B(0S41=fPjmG><6k4kPjN_zL,{E2fB{򠦀/@! i0E"jB/Qs T#̯7Y/WD]HiR*iR#öz3ͥKR⳱A;u\~FWt.y9*P@Imɞ^ q)b_[u l,As,Y{`:0Q@n* w$Z[GÐ|-:*V s)䞆rl7poOU5z? JEA?114\S#Ī^*gC#.aٗZA *:KUohaFc| U5oJx԰ߺ~tWK/F`@hxE`L\32{]<+-%Q w"e)=-^ g:R >?LNb "4^C!޷)7J--$` o;YuV6c!F" 55l&jBH h;Vt GyB금j˿Q\+(&Wγ}"id 5=[y.շx[uH_[["K1XeFұ=k}듉{[P?̼C,8/MG.wd:gaF,}U5F"eØV~߮{mP3+f^t0jz#`Y]$!\fi QF]juIR|k32^g>U'^Ѯř޿Mh3cZ2%I>>OP_t># cm7Mx*p./vCI7UHs:{XgH8 T 3i`~(xMeop4 zZ-6{&b>&i,RQ*j4ep}L?]W5hxt{ $8,0 DP!qlI?@T@W|[4wGK,0 rYLJ74hG7zHtfL#^7T/E8tGc%;n_ž&zjZ RLEB֯h)b¸æ޹XW,r k:OLV3^Fz1{7pd<}..`pא Y h_:,0Qh:(N1gTG2\ >C=P#ziǙ*g֜jO@PZM% 9p˲15mJ ta;Dt7 ;gArjc=?,oJj *q fv\\0geAk&ƍ^_WG.~P!3j%]۲ߕ3ums6@U|"imhhg8S\HQ/^__pk!N}=j|7_<޽}J2Z"=X BJ: 0E0\u$/V|z.(CM+<:VwW [,AP4]D=ؼnj^n-R?Bk4}8phDhE1 c%#cs/@6>bQɈC;ݐMϫLK*]N8`)+%pTz.+X3'5,ȣkB_|jLCK[OyTC(x5#V4tTZpa?n]fy^ ٹgih(=F3)%Xp.!]w2~OKL2/ܣ )IhZFqƠȁ9y;! "?̄;TӭEY=E `ט |U R LQ9+crVjp񠁴b9.\֡P|FRd⚤;<I̐*OgfrL,?JP!h:4.ƪU~neFّ "ni$y "NTT,FӎE:ԁ:6oo$+*_?ݡ/" Ÿk\K]g/ }?CD<rkTG+ =I  5WPQBʣ]$+[7{Mחh<ֺ HGцÕe+HI>Qr*6Vg|/*f`#+Dgς_U)UȎ֡hI(ru~w0DoY:W>jS@ [Px~G)Jq*;őMP!p؎4\o՗Vbw{]|i$ýn$| [t' .-[WG]+R:Ć_U1 |+ŌH_My)4: Ի8tF8b?:*\R.B9`_l|ěTu󧵚 #L jc&bgX5$ULiWzo6هDҟ;{tj O4h1);Y⅍xq+(}2 (rx0yHOP5I.'T&uYg}Wϵd()&7r9vR^K; ?+?FB&b 5M)Gr7 ͉ p"_= UG݂S Lk(7 Ե|(ѣdL<}v!'r1y8ܖ,Ӽt\v-dKPTZ.W1-~'=b@H=مP@>L%T{ [>lZ/FQ!3"in\8RbiC(DZԨ]#yUR¹&qvĶ608麤0߫'`#V x%?$5#%4 zz RlF [eL@jLd.;w@y3Sb'1s67Z/ wuIR"ofԜMg&0q6Alèb&5RQ-MxSl2%ébA2a&a65Yw]":umC5w003GzKֳ*W˗>S֤^9\H]#.3+hP1=ʪWNQ52 u8 CΌg Y7e$42:_E>~l'Fe`W"+a@0F6lQ ]w&i΁0@ qkkW:JXLs?1P;chu`G3Z-^zt/aMoݟŌZlhHpW,_bni烢 2hVn$ Aj-h>|IZt<;d82؃}(_گǹKEuT1>軌 m$؇@h _L,(PS3Ok>)K||f{t#IixSVSl@SCIy{\Gc, Y 9EuNy |tPZ<\ AlJ0a樈{PS!]<ݿ52K(?K^n@,a/¡;jBU7Mʞ0Ktkƪw, }C?p#&P9ms=+gPD`>EaM .[p ^3 թV9xͤsЂUk#8;4kwULO5cҁEv!RBA`ZeRѴ|O CCKGrs;ּtҎA/ l[V])?\<^ݽx~}t_j=Cᓽv2q 0[i|gil^°0Njxu5GwfxG`=;mpZr>UȯmimmcޜIs y,-}ckRRga [_<;s򤥰xwn'fuqc<) \ЩRzw D;P2a_;\\gI~˿.k"v3IVv»_knc,L=bv4fǼϥ KkȾ;Y/b_;}7f)}MLg_BξZyh3]YpTUoa ahB/zs FG")%SN/C`#t߳grS)cMj]MSIkҏ98| خRE5iRcpAI}Zlj .a>@oUIֿ@*(~i9^&˙馡\qOZfTp{ $L=bHN'f˯N +$g:$~P :^g\+JJ,O:t\4PcV# &Bst$'t]lQdZ0Ywm+D,*1xφBAo8t:f2m,cx!4jr+0W#|#]% jgu7L2lԜTT6=]%3˴I-, ft=-r)q'ͯF{<:u(zNxi ^/'+v/Ɨ+:—#}ks6msB2!B[WjI?݄n8r7u'%Mi"N~-Ǽ%z+Ըf0[Ä#Uv:s & ;.˒olwYC0)^k)]kiqsjqGU)6F=-#b"}33dbnR#-+| taYK>vIډ<@&2̌aUMNA 5{ DA_t !?Bsm *\,(D/5|։:%E"4&W&Wj[qQ7;?EB|u]proB' oC:K(~ޜʂC޷<ں[>@WdnÁ]oG5J ű sC ~\XN):&>UT*^leo()iOK64[;}2 %{r4 _rzr1pz7\W,_oٸ<ȯf":aVQY[M\ J"@,x=%\p\ҹ7=?~߆i޽kΫNG0PG1%9 >? ~uԭU-~WNXRIYA0# x?hj=oƎy{9,.3kO-hqojw(1uƝG&0HsjZ3Mt݉N* `l["R[33ͷ PSw l" %B8wQtMn؈yOQIC<lABۘ<פ@8:.)D&sDZﭗgQF@WE^,Y2| ێ呥w=rLA{xFG4:WQL;$GJO'F~vX,$a:$|`?4Dax`G}U@˦3t5,hsw%)Ifؓ9Eh& bWFDKR"j8MA';?^Ҕ‚+EHm]\ĐTNE.Y,KíҴE:麯8+S Cy~D_O`99)?1S˧M[g['f_:z@d|y ibMrAԩ^t}j% 4j?ǴY7ū&Y=ߐGi+,^I4O laR(L@l_un: 1#' IE~ '-mlFjq$6]iH ,N73U[n衂t UY0, H:Ӡ0okE޸ nm甋盘Z;x}}&kk+Pz{D4qՠ ?LEǔ}x (;aCվ^q-xIV8@^ᢗ0<u{d7k #a>꧿6}7k YTAҿ[57klHw?}yTBswQFь LS5 JB ók@PLQ#cX5NV5ߌȔ7j26QQ("؇9_JN_f, CQmyJ nMgMUInŷtˇ.T}(y܇y }Xy2m+0rĹpljR|3m<0~sB B| 9'gH"BoSsXM<0X l29Xx$~m*ɔ Ab}dг!?A}g$/Bxl-.[o*<ڸ}nޢB=ILAIV nvަ ۑ$@G"6fwYT칤Yëw{I lF\aœȅ~&0bKrKOXߊT.5O.? -v/ݶEk$+ԲAQ>JS2xb5'vŠga(W5AY( ]=ʇ4/Hvܓw]15ttwq]jYg9뭩УeKWl"-118-R+PEXW)0pXJ z$UeZ:9%xf¥,i\ni\sNq ¥ ~R8 56^츏;ԥewtQ|a1P-g< /, 1${h$9mhB*@F$`z"H29i*l{՚_.q{ċ+((Â~ |x!s͍#5Wp6R̅!i/bւN-`E\ԋM 2d}P"IS8-WA/o`434$ MY0}}j9RR=> {خR)kkXNX-|gpC_:Nzgh"p0R}Z=3\^aXoRcR-v8P!AKm?ZW;󂧩;QċS/Y4*YzBڝ:u:ipCiȒܕ&)2Tl#\16=VsPƈe3gG| pUQpٷs"ur5QI${ ЂVux(hokOPJʗw\tJ#*:o[=z'h1ڼh;ہ`d:_e!džlc󽸤c&;;  rzzg8rZ^?04ps:OםSu2'D N“LiQ$Žǚ:yV =vإɄ L5&cG{N<S|r{KIHǛS)JhE89S J"\%ۻ_\*ƛ[Ed:Mŀy6cK5kYT{ Ua;[%_4 Hy226s]@Vx': 5Cw:$y[IDݸ?5ó0wyp5e h1:BQfo-N3J{j造^`~OO Sx6?9Lء MamL@Ҏ/}SdFBvj8T]k ws"W< P3(q5{ L)Xe>fprN*u70.sH%&[F}DldM.QO YwιL:YYĭɚ6; +fr2}f8,i(/QBElz^񒳧>d!,t$h&e?0Iy{8ĥO D!!olt?nYyYȹ:aBJ%}px^C(ZT(*^O6RL֫,SٌoOdnUFڗZ!ͳ.`vd痋 Ys7~M Kɚq](M4mk3!.[,;ܼG2By8s+4 X*0tV]|CfQ`gpqfvatJQMׁb[S.K(ޢ.熿D`^Fk$ q (0W-`WNWY#~}Iz(=7U($'0 2v{T;@d|Y1M!+P=ɡ[=|Lv*38gG-Qd􅷊a>g/!+9MEf6_rgTU!bJ3j4JƍSe(`?e~IFkCT-BoBaQ麷|Zn3Xs8%q]& 5]n6r$IfW1uBdT~_ g[} rMaɲ#wn%HO %72%[4G#0ۅH[ESy{i:[<5ᾂbRi'ʖ Zq\]hr et'XbQ-.9(c9 '+$W11ωܬ5}J/3*н;Q#5^N+nJe *bգ }Fb2ifLh7Z654l>̐x~8sLuCcpTV''}︨CKUؚ7[fy^٪%-VIX4?' ٛX?BlPO絲^ꏩ:H_+DJFRt2+Vvm.(3c߼JPS(yoǰ] βE8YIz^olLn#WP#@]-6! GvE7g͉({W*GsQlcM2;zH1ޯ7<= dm.fЃ֐XN|`WuJK`z( U=&uIW(1kd"Aw8v23ImZ<]M1|1lF_,Hm3a+-!`Nzけ|]AEQ|ҵ7_4 df"ތ:< O;I˘bL5|gfdm 8U#7yޏnÍ' $S['7d @?|o-Y3E5<<Wc>;71E9^'_wPcf.9UlWe;iXM\$[*/B~H+|K9foטs#)a 4'MV2*XNXA%yz Q=K;9-yƙ/x ɾ^nn%rF^Ҋǂa6xC';CnVG;I;CBOYմig8JѼ[\`s'"h\޹rᎬQe=Kri4 d}1jכ *RYw[Ñs U܈S,wfMKwm b¶PK,AnPM ZI(ˁv` ۮ0`%a)Ȭ YpL̠@85L^(EFbEڮ>#DT**&d]JkWcn.\*`jL͊)S{c#iH7JOdm4ʎO1j6b+3)kEUV`]%>EJ V-kJGHTC^nC?EPpP>H#.fRCƶP9)/5c q.rfˊb/m^A/sT:7c6YYƎsc^! Z͆dĈL>HRc\0Z1.EhR ꅟk'Wovb }̚d9Cb&JxJxo:TEM{'ٱ&>~(K(!,wT0f33@WFYݤs-tr\bZkIsL(#!3Q/* >ceCp^JU|z4q;Yp?FqWIx3Ŗk+2r8DW<4s;@ Z+zß:dv-0 DZhN9>-ty +ȊϭQ+[V \nbvUX3Sg\$J~'@0 !aک/͸,9Xљߤ_X|9&MJA"dq6`͸w*QZ^MŹ#+'a&+PCE]79m %یҵ߉/5Hgh%V.A{'IGOPأ1ofFS9fc84+DAp9%03}eg.a}B`3|bSq,ΚrkK/Kr}- v͗]'}Vf@fA;U? ɜP)|?#})CIѦr?+T՞x :~j&IVvS FAJ(rRL8_۟GݰN֮Ƙ(|xhS:91f[yvgJDA~; `asRv NQe:]͖2VRB=&+8JKϕC㊨@ouέuJK%"^vizv0t,,&Tv.vH&_M@a#?gjw6Lp(A[0敾 ڧV~ ScOe@MbD*D [&p1W> I[ r̀(慩݊4НES|=AiaK_޺W Tg˦ڷnu*߳L'($^mrc,/IQ:OW5~^J>'(Ƚv5z!cD V&dԅg; 4n!a1e4ȁ采=SکbAɢ~G8% v;<2 ]JȾ &w%H6r?rz*f,k@@ R0-NE w+ '἞O w \%7su:,%X]=ye#ù")A&4 1_b>GמyF6+/C+"\5;}-k |]UP17RrHtXclpaER _u`ub\71'F5_˩"+,k[jk|>#7r\F[_HL2FE27%NL\K:%aK.j/:Jefs#*v,Ƽ -tЭ]JF:7b:T6M'r-'jmYْaM DJVAN*y? =0&q߼</8P =EN\b%\`չ4 le8tդ6uodc՘dFIYaz?lQȺ #pBMKߑ};q^V% *~{+f2VuWbFoA>cR1s F|Jaөt_ns$QDÖf h݊m"Q[)Jݣ0qRyGv̜]z:[*t {9EGGYa1ŧ<36.[QHdKb]M@dBҮqV*{) R~0Isfv:BsFҖhBC}q6*~eoT$;((c>S$rr|x\`Ejf*eۜa%F'3,Xhf݁G`ݻbQz #s}/@@S>rXBXԝ^ eCWŸŌ^gR"MĕfY(K(~!1]e"mN% gPmS DXHXΑ].RNIXX:Ok"uB(\)WQ˜|h F]t- vs.ojiE xNs[NqYU@@/(E~!>xAv/&]<ވ*?Bޠ}CaTd炭JfW7dvƄ8zKC-'!7a L) 1r|`E9`W7iUSȅR\zJnȰ:6 bW :S$30],M7uuQU }gyWP;*qz =; [kCZ1V7NRkkx6G9epE;5h-hÚ)~{}%p"Q9|5k7WŬ#io !^;Iv:8‡1wrIHb.Wş"aWڸO35ToSٞPɛڞb*&ZCE 0m{WX-ƥ`v%Jhչv3IUB_[}ԄO^Ĺt)@ÌP6F= sJ&u*[؃8W@~r>M'ݧ_UWJݠuN {^-Ռ{Tr[N;F7q[gp4$e3Θo`홏+cN>ԭtv\-TKHjψe([F˄Rdo7Z1Zrf=kV8jhDyU65ܮ!'x]=arGƒ $Aj8w^|%U*v@2цke85ĢQO'!]toR>0Uyt^hDV'cyak{7~Y]'yB!5s}gV0$A5# |.D?ér LR5 5֣ĄGvM+\'?8GB"dߞ䢍So~Pc`'{p}&k%[bZi{zl(w5͑ZeC0d_0Nؙ2֘tb/ˍMZh0vU㲸TZStpfk[Bn|@ ww4,J3BX@N6Ẃo>PY`pzLܚ!>Z4d,]/貹d\C~>V{Aʻ5+|+}XSʞ&_]^B/z@#G d4g: 3[&I9"Q2x%[k,FϠ{LZR$5cWI]xjŞ`r4Jg.؍BsJxh B,7֓NfůF(QW6UGda]>3}R'5Y]&Cv o?#Pv'K@"F#hvK12* v%UHIM ޳0A\ ~Ʀh@Oe==x"S FȿJXfXDXI UcĞ|M Ȍ@ˆ3^y^.QQ׏xJyV9 .3{7\}d˴8pGH$"dtIk:E0Tl%EANcS@vkTl$8q?"A(r " 6I'SC}Pq0}O'+yRA6`Cv V(,[吨G!]k-lhF[?|.?(]sܮ |E}6 '( qʯ9G.҄0?##d曠leoa@*݃йj.q' :ϣE}`r8a&A>f".0/4H.W鷛Mǣ$}1BP귭CL=*8!|瑿q B,+Bm)Oj_Ȅ[ژ/kEf)ȅQUYO}dNmšsu(JyrnwF_k@4@ϿweXMbΙa^C5=](.u* S&%3Żg'6OjRĒ`_YE WQPߛe2XHL=Aj2Kve[_P#%&is8+\~Wwnu|=u%|{OTc}:^8G:6XBϪᣃl9&Gr,RfY6qg=%?g>ғ'W큳${R ;{BU D?0PV"^/L9`|C_#VMN?|}O5T!V15d0pg~Ͼ :(^0//۸ϬHAgE_z#=\s-!E3w?\M OƐWx*e6#}'2IucB2,! !sԔ -6؟Qf0@oK ,՟@(<յH͉Kpq)SAⶽz1}q#"ND%'@(IOEG0` = [KK RM/aϿ1 w)-FwKU ek~CVl^8!ܒ;D;~7J_9gGZ[+o![RC6]_f!XW {Z9 `cϩ6Ics1IUn̾wHξHt7=0cĞD (C;['U@E` wjе s7.a΀zhnlrŴg2=Ș_PPקK]](<<]i>ģFϏn)[%cƖ'يҗ_yA G*մG 쨊'*b3˗f=`Rۅ{rf"3Oaj胏BtX= mMh`0M7Rui!9#E%w'ϑ47!w_ԥ&wմqE|v#,V4GUKƂ{l_JPv1#܈n Sb p]8W$I/#s.Ȧت:A}^kgĢKQ|R\7 'HFXrv;fDߞTdd~PΠ9Ȑvă!ʾo2UQOap4Y#J*3 N"}VhM$hYB3ap~WߨEŌac E1%,e |T |_/%szTH8e(:x(YŢȼXpkJoN'X˓Y Zbu D'JKYԺ'5= o\K/xsMEۜ%T敐;74DotF Qԅ5/cWǺb˟Ky-f7ƗB= M2@/|f&~UH܉(< t^r:(*:h'֏0b#eHwc|)jA뀧tw(.͆]\A*;&R_5#*Qz8pvY,ZfBeߔOè۲ȕx^ 3Z-zb߲QߜުJ:4&*E{EL%1Fթ`?D[cߒ/%8C)7*B٥U''ְ$ o$}/Cxj<4.DVH;õz`  lя,0!_;x2e֨_M )q5zPt@ጠJ),'ֳU`/( 'Pưbר}=ќir+FPn֡=M &O6a8\ .w,z4?魹n'! qz8B_&=N5ķ;% :ߒp-)3+uq&%m)8Ud"]7|ߺL}K7+([Ip-WvG2iвi;pڊ +Jgᑑ`t-!F22rW1HvI\o(<~?܁׋#X}Zu [+0! 0TFS)p~uij5)Fku/={)nY2QDdƽMj lU88r.L68nb{1.'yr+[:S/}h:v͈)P ;gV qYopS&ݭ@Тõ q"O FXo9Gˀ0I>N(. N+n?{u5?lU슪>ѩTn텙Ӓ7`ElY1Pe8SkwqJoX9&E^ɢt<$*GڑTHLߟe3M(p^ף#mT|m@)y#+Eҡ1/qߖ"-5dlaZ]`)&l]h*\~U DA4 :6U ~Af񺧧M[d-ֶe *5Fl8^S/Aj%7_槏!I/PG2k9 *PY9cKt0DVAp`$i-`  0`X(Zz ː;y3cE ܱg뀠=>c >jXzo徠'` wG44ͺTw-ܵ8~߁[XqgW[t ]ibX'u5]-$ۢ֩VW񋲘Gay?ߴ̹m XsaCvUc̨Da\t0\/;wl+e5Xa\<Vlߠ+Ce@(ڽh0c"}`5cft;d,pP45ˬm>fJC&*Lk%}m')̑P߯' 6$,a;/J.A QfSI5?6 8xbx "E)*<`.epZ+HB%[*%6Ҭ$F$NohUٰɟZ5{7mlxm .CJZj}s4oU2vo}*[r̍OtJ!ԋe,{+.NxDQ.^^8tp8[G[zʍZX'f-gó';RKQxvm6! |k[;b_HJg|4 /y"ϸ L I#ƧT'h&fG &̊Z؉/ \m(v5d!3]B<<䥡40 ]|}mY RoL'B;x!p(e6|D;33,?Cx2- ,~3ue\:eL`9ӤReȤ#( #"MT>g0YճqK fyzH_ *:JgM6wF eYd)4\<]]k|)pO;{8*Ȱ4;},qٰ\6gf]ٗm"P*LX͖f8!v,lܢOeY]&HHB/dW3T3aD@5Y {*gy2OtR6he䆢7:vT5yU?ubdžO*yO[bLwwʓ&O {|v *R+ GYD,Rm{[!jJ+t:pElgb?+]_uAMv`x9e !"#n ҒWRf3\;S<~^% 5IUPZHʎ^dܻb>'YNB=EXrjMfi \#<YFG@Ѣ(q.+\gZ9Ҿ9K}>R}h%fZEoM(cd x%,f`ѻ\wqXpoΡPSR6}ư_)~0_oE)na# 3$Jg{'LPA9HFϋsn5CLUSՉ=,z'0p ]_ BHER,MLm;[6? 4ه/*d$; hG;d>2e⚟hPsg~k{#'j dR)eV'`;6(]IW_8t[. vԒ،9o 5CYUV?d>B<2$,LmW1\}s[9ۣHeԽ{4$36͈UZh7ỾnPq~ۥ'l{"ypqS#_n℻C_PԋkFԇMu@>ҖБis>X-׿fvfb@i~%Jތj5NxjͪCsvT-ELs2gc4|/ 2ww46'́> kE (#w1,06_ }G7_ ` RfA$7M9\Fie<)v<(ZTrl]o{Q1Qt5O7,$joz^ܧh2!Xb0̏Q 6M\x?g._okf _H5Y6QG^++t/AJff:ý6ZKnnQ R"<lϫl(k`fX`2ՖkV#ZA- h![CMcf]{gDNe2}Q82ڒZX\+hMZ*ؕ^2" e?ì 3aaELـ2#/|S#T[DSAx)%O8C =.P$V$tq+禌O1N1<I= }5xu h7h/_:]6&'n Nx DƿƵJM!@X35(..U{ +*V\/0-wϞ}0]|edcud Ց xy'f\{+Ni}Fطсٹ۲MkjիX1MN|ăy?H&#OT+Æ+G1JIևEi/Ƨ?2u""߂~XSk PB+V^4rtsq,ly}XR;e: JJ NTdas͏V%O󃪼roY-% Qdti=~f%ϵr?2i*:q"-L,®;ES VɴEb"55ݝh]꘵wO#L9rrHzZF7Vl:/1$ɪC2PNƏb7:'н./밨VduI,vі\=Kෲ{`g`fu}Ȫ-SZҤ[WB]i aSkR>XgZ&]W,NEJ<ZfĉVFy%9;M)38[y蜐ʝoS|m YKl/@ "Em0)1<}=kl[ˊgaAxsJaޕFpacdE>ƵL%BIzɵ8eφ|!^gJ>WMg[9x+˓^iVޏw^ 6uo= Tj0#Hm͙*t%P>[]E ~OI`7(%D,ІN8;vE!)䫜{q*i8+[gǀHA:"l$Ls:&cr4籑}d䥨ב ^DDͅݲL\d9KdPV$~- ܚ~7Ăhkd>nXLSCeP lL!P΀( ujv5k>l4?uuO%m22vD+ j&N1O 9|z`^Uh+}AwL7ٲl_4%AԶ *6(*P\ܱ?*‡*tUCٸt+w{\AG 6* EcCԪu^V;݂w,$::b,GğU~v]IRu+oNiT07}+Nb-u ]H^?͐=H6H:tTW,#>Hz6` :>sX L!֭tkאjZƊ7u=daD2iWa1" mB eÁҶ ]N<~|Z#LKu cx~w {n% i52!Hʇ0e*0\pp& Z4]Hօgb8hZ/|SU֖N(נ9OĂ@Id.׉VskMVqMQتPG15 >R /ՆKI7ԅpfP jE7\u5[ćBJkB#&~' _oe D#NgFDX&> ߺ뱷H ΍"8aSIԽoՋB13E;:e0,u`S 8L 2 ab"FH]+ث&gU~nՕP ]GqƉT&&>zhSQ3蔱XTLOv\\-1GXN6R$oO?8vRMBIPxDJbs^X"$izهs*8{)*ut'V:|9oTd6bFTxה jxZ/ 0379#k@[K[9Z ~| :VА%kAb{vc<tlcsP D}'$ "c7t+.k4'ʾ0t 7}ӌq:-w3SYcWk?"f1:ny8qن_MQpd B dblanKFYQ qC 'i?@/0䃁WA`"8(kg~E>md}0Hy@"\Io)ZʶA@RsXB㵠Mqx B| :P[h2#FՊKO.[L©Ym"&5f5]yE0=HkTP|CCAΏp@ẗ́U}ĴP:߬IV|_`$:P[GM#hQгQ?0m]RxE!Hal@JRMثS'd+q*9e–j@G|-(u}M%E4(618,tU`W\1˂u }4_>M-x-$&5X t!O"C{Oo5 AR΄m) IOf my*>L^e[9]C蔠[K}.TH,36\0UO>+&KE}`q!Wh0.[ ީ4k }#/r[awHE51(EOƦbDn^1~~t+"\m d U^ԍ=AwD/>#4"ѽ=D"ηWp]z푱IE v.q3.$T7iAi_o ߗ/wL oB (qAϖ=|,)yō_LwVFp`>M̃VK92 /;Иɍx1:ހԀ_>gh-^_^C_=GtQaRa#A'&ȾrπukW|>q9B)UCTc-LRض'6 wZMGsZWHز*b E>(LyQ=vQT-ǵ ;@KdnR7wY)Ήp/&\ cj&$8~[/P `5vHDp7(TZ_.c"^aHf{%CަDQ;qM~a^=LWꐘp ެ3/7Fnr4SQ;KPHcaxz#Ս10 PX3S߈!ʮ,]fvpLybI˧'aDԜ@ `GΥ|K0OLғvbsZ'"Xe"P@2擙: Wo'-6џN$%lcn#8FU9WY7V(2R^ ,lR?NzzsJD7S5lRا>-+%( hXnKWE$'`iAφtFübp/xG' 9}TA@1X[lռ!˖\F~7bm幤 V^3|EXo#c4c0 EX+"XR)R fiM_@EMui/bm\Ϋ'$y=bPu4^+9't4w7Z[NMpT5Ĺ˴!LfѢб4z :bCF^_A8˧bE˳ s + Dn̟G/GE*]-T(T("~K,@I\\ ˞J Dxe׹~f" I 1BձYz̒eFQnuABw*\]0Qq;:f.i"l!t|C$ H wf5 /<.3q:?"r,0VX' ZZIhb1ywAɭu޽ށO@n~A Zkޱ%Pj2U2·;=\SR1UP־x>k ٨9ێ@Yw0BeiՏ_6n&N1GV=A[~5zcrIòJf8;>ZcISn]T6"nmD зUx 3Gf?yLjO,IZɁt>G`?`1T:R^!4IP3ٟt[r~!RMՑ{$ KI\s7279k/W.Jb=wg+i)1'}Z'>FSMx$:49\I9ajɦ]K^\tI=븁#BAP>+3=]D;oK_Koj4hCTHWNv5<4%J.,c'Fusӣ([-1z҅TVMh"*{wW.Tb.N[Z-섷}\)Y #7VK&mlhF?RQ +$S vUwSHβHиP~) ŶjO`b~FxaDH6Ef19b֪|#8^sDs0zW*όiX. ֲL^Ǡ1 (z Aӳ/=jUmaG&9$%8["5gJ$(TʣRU>0JFW _g tV}-NJCܳ?$RtD&JM>COE51E5nj8qZD:oR;"sN^hIP ?ы22xЧ,4|G=YkHАl@iJq`dbD]p3: #{eP=Iٵ,[pZf Ws=ښlT-#Ž &>%4i# 2{j* ~د)|c[RL)ߍ.%KE[ۿݽaj)EsefpYHXƁLh2DiU{ kk{4Z t"ԁmQ׻PRT.bO5IT;@4CN \q߉Zk^gXR&h]1MH2߆a_Q'#:lwgN|.>_Eull-h8Ztw[6&J9d _(6z j q~+}Ўȅ'u~^R.BO@hGU(c+ %"|#qK,p)y$W! h৓~7ϻ\ {)g~=1Q|kꭦMEDZBm8᪰F~xč?!B>% >ʠ~z4l܇%:/_s[;R!'D ԟY^IBנx_"n++ dԉToJ^9ۼ2(lX"WsJ e?mov{n^U3UDG4_g<4ף6[/[>1+Z acH`'M $a6 z,%c2X/3Q-ػӎH1nrw&_mI HlK'_P*cqՃ/T}yƬ.ܐjMPHg:AX7l_(,jx9.?=0u`a%Ƒu;A/ %m^}JE֦_hMR`(3quY  \bgv;`KCk_dcߣzU7Pn/.:ʜ7r~g6P,$n`-Pjf #DUx̝T"Cskq. \#+g O|we88 pplX {uxA>$cw۴R|>4džH^Os5ռ@KV@hF7.xU}RC#evk82 n{o6{4uϻ$#9Mi--B/SXTHP\# [%,mla.cEʈ渭'Gw84GنDŽCߌоKή  @U(s@߹,9qA,Tidퟁ@ZT#;Dk )xrłr>P녳ɡ'3m &'l{Q=S:`jϘppxQc[0{;'GzݴxXOCW9Z nB3lVM#C#xŢrEwɦ^Rv̴V{&9C7?@q'B3yU$XVz\/ i\ kxhM{IsxB %VsQG15SՙsSzG>nE::У=`3 ՝^#6]лr2uc _.хC}WQi%]0 _f$^\X~߻W Z_^E0t|yZqU rkJ,O๿PᘴNb&eehױ>>{5S#g5 tkR5 $Bɞ_ZbHfjz`&|SU!zN.\#l]Ny[{z(@~,2Q6ͥnL[IEӿG(dAq><aݥX-(,-a U'+yM5#E?!~Rc$M~]P1m̪u*zAu!L͋V2pl܅1',?ngG&Vmɼ@D٭ 5@jUYYa~0_k1>S Kn$`>.j&3VRo5^Df:fnzUMCV=73SmoePdA ,Y,"sDij 9vE[[۾_]Q?L-Lq:Tm%깬29W6oib{["qP}waty+|Dlmd|$yb]8txSsW7{ʔnjVAVW=ۢ)(3MT5@~[cnZzX&;90*b|5el%׮/K.IM< Aoh:x[Ec\GPɰmV|RWPԭ{]+bOU?^ TN&B0z}{rQxv]eivnZ7)zT>T1*vKaw{b3z L_^N,-0"5l c>:^k?rq")b:2r6/-\Wbuw.e&=+8Nh= BygrU[DO =MwL.L$fҘE܏nX#;Hj(!;O14.lfYg%KsafW;Llg'HgWNF}wyJYT԰Hhe3_lQ$@yEfIk)9fm0zIk"Q[; bYD@ɬr @n~.b%#n=i'Ȓc!K_p8="G`tsݻX-Z4rw-/ +¶QTX JhOk.氜A,D9 vejvztgA\9['oIPUM{t 4#߽<ݔ .Ytk;~J FY\ɮ5ʜ\Q[X]laUeg mA|6~t?)09]F,dbس(ӻF/Y'XN>gQ8,AċƳ5Ϳ<;uGٕ`_ KTk_zԈS/W8y`Sf x+")GwП8K[};RK"hv͘). }~SKqҤfYGQmxA̝3O Q#_y_O'.8 n DzD}%h,x48kH)K$_\+ ږul;[[k nEjh}:/K7f :K[>7~o֗Π鏦jBO$6QJ&6vͼrfj~nª6o$B%8w\ݳ0>l+ MXS^B+Vb*' SRLu3Ruъ1T%RA'QaPUM*`ս) h~T>aCl{)GvٿORg''efz\wJ5 ri/d:_pubԧX [*:JvsC0ѓ~ ƝW:Q9Fyf$i@ Ѭ;-KA:~kaĔÍj[1)LJB I6!.tkQ6ȝ,T6 /$Pþ闖*D;yu@S/"e (XzMhv(<- d幉ԅS1)E=T ̧)raZz.O٫:ֳkpPQԊ0~s=se㘄<5 #[c,j1CG*w'}fK4oI[]R17-,#%{>̽݇ o ̮Ϫmj¢fBwfm*Dd6i дq|k{PcJ_(?Kt 2`sE¢Ϝ7%Yol-)\U;!{:t ȸUH;,Tb?>K%ڰ)Sr8| &^I+lW7M̜U 8K YؑXBJwB5YH)ܪ {?1(xT@XO=J OX4M@r /62ҴcE5ATF*m{gί2uTtšn9*9vzr#O]/5ӒEbWnxۀ7k7K8xKG?ƘUteJ%$l`lc+L Гx KFΞ'J`J>+5D32S$73:ѦXf(ؑs( -tvu>KƒXjes 8Ϫ %*csPc6=yn6>t{De9Ao5d18mmA¨".,n^J""S(pdR@R,5g.}Rw@lk$(D͞Nڭ#[VKb e~SxG?͏Ҷ iT\?P}5*1+ JzB'-ZUEW^]DAn[%W 3#  }U/5íՋ)I* ph4r5<)^y(-zRv{&zF$wUx#o䧒gwo}{hoBz 3zLdCTb*# ,Z֪_qf" 𲂿\{ǴS.;9h6*L4\W;} f;. G8ߨ)~R}KH#-H,=)g%ed[9=pcB":¸-}tv;5^@Cof@5T$PVU|g/ٍZb0,[}lu=ZrfSJ>PA}[sb,Vm. l8]`}9WDiwT'P7!4I7@G~>f]#g6/Ȅ]ih^)Uv2yő i,8]Z8Grϑ)/Wo*!݊Ds|%sbžra32 5uu*_ M$܄T@6{>\-qdtͥS/vRhh>Oˏv8 ²w&EBVpȢ__< xai5dUĽn슆9ٻ6|7 D،ҟU86h NIN7͑ZbY9iy 2OBw}05oH1`b U87=-Dl*gLRkRG@9LZO `zj-FM9 1P@:yiQ72I]lӵ$l " .6>|<<ݸrsgeq %d> )F 3ZkOi}>=(EO8I"U/I%-e51 pXbu_uZ :EAa9*1}nB:h> )vRWYz/ N'mލ=,ZKz_w/˚ޖmh{1TlOTuY>FgQmeB:kӀ7m %1a_ mDCakv[mDX~wܨ$zio*o7vnV)?iK- e ̫w#|I;_?g2DZL%;gA[!kǗi-zQL1i8^ҥ30lqĴ;Sn%r)QVwrg`2nڔ_s̝6YgBZ=Y%a/BQdb3/RE|~!J fzLl>5a Hho{慣ʴ?V/BD3F4R„C&knЛE[JG V2rvx`K%zĂίGpC`gy<[îP=#~"B9Q(hzj{9BkBíYU F$81XגGfw v|"-T:" 0n|vgL#ؗaHQ K" })~Ax[.+a ~-nbZJaKl9h'0u.X>Վ fc d*v{Iy.=?H l1n9llЮh?՜8j u7(< P<'>x6Cx-WO!YnOd֓\ $!j5~ {Uahh} BDad5|bB.H3'Bc46 _oMxS!$suXdFy﫠-J-g{7bݴ WzlG^b҇orOv)f< U|'2t@**f@9oa4G"oTphM >YQ zٸY+޳ y|P`}}Kh\󻭐> ! (ۊ b zFU -[E`gk=Ll\IK CȐ i7RzFs8^li .j=;Խ7͠F#[aט\OglrqcujcE"՗F < ɔVl~~C']I;e0p[*~\`9=3%UVfl4>t#s1Gdf"LyAu4V|J0v1qA]dg*-CaiLSgI&4:90fEQeoC3E.&<FI%e2dKj!2Dߵ(gV?ٯI^ fck->Hu{o B3W2GIsYY\V>EEGpU=|'q\THv=X_/,`ׄB536FL[M^,O!`lA|5nK鰝DRy G=!c$(lb_F@]AҰ•znxތB$| $(p\&EsGj,6E6dDClwyh)KOɖOǢN)r@>AM$ b[tEڬqc_+@¦`L m9A8idͅڛ^}R.rx^Cs?H.~pZ\'UHڹQ7P4Ȼl6C\pok;hO/|=:ۊ Z޿Aaim{Z o94 Mvr`(Wuk9r=.Ye/E@ߟ_RP];ǀ)mL҃H è/7o: & H&w8>І)?6U FkiƉH [ٚ(E8pHUU ʉy = {^xc"DQ]a聼ԣiM;}ڈ˔%jAx6Ϣ!Yr_ crC4|Ķ4& L=k lWoYYhƿP9SEmҶ/'xWZw Z *ҩFl ho^5u3nӲm?l!n$r\J*B%2nW鼄ߛ|kZc-~ʎ-0 H_(Nٷkj`=)-l}=5Չm3RR1Ae;ϢüECJlspӳ׎wQzqa3Pjzoxb KUFaP+M$%rG4ũbhFZqjj%<K` ? [Ȁ݁$m2cQoq/pW!rt]_#}?t}[H9tMe- >`)HXڃw$F\uoN-s)Լ4HqSQ_ٛeaVt|Rq,"uјġSH^!ٛ:: GTB1!4}w@  ^@V]%4n v%0ekDڡX^a8kT}]@[t:y,qJ)CX,R .46i#ͭ9gm6>iG%t+wBx*ARX\0uݡ1'&Y(kIs"P4~P5; o-99a%7Rk]8v 8RzVU?KH#}>0vU1$ba\ 8 Bb-*hfWx|o{L*91WhaNENp$u掷8 ys,LcxRe?D2Q~d 菮6[vA6iA_Tesdz"MS*D@ &DO+tjgN@kU~D5ʷ]u%#{[oWik ,(HN *.*Sk/h RUۏW)HFd+67 ( ZJ*ݚՐ~l?35Hy8S$QцQFއAz˾wyBkgLH׆<"8پ0Vܲ;90Eb$:tnn?kyߡTWn$ծ L.dިq3'Y*5QM-sG7h6($oXRSK4hr qFd!\~feQ~,?I)7X1LYK(>dIGqzʽfG=XX\PjMl^$`民ԍ [3[޷tmNe̸;"Dؼw !. mFwQC$ 4]+í<³ E;i&RScW* iLF Q4Ìz{{YɶoU VF:f]4!pO '>LeGngJQcs*r'7BROiqm`Ac}T{$!I-u՛dDo ϊJEhn!=0Bކpembx$ c,ZJ5 ]H%sm?^ g,vgJO'UjېVz7:jf'tNeԈ#~,TOc(xpҊRukx1ڵO5,U+4`mu*V'1F;z=ֆJlv7 GzBPޢ֦2LDufZ"T6G<ڻeZd2ۑYұ s Y:<5#Zif݈f Jz4HrnLQ4ׯ>C7\|{sppwc/8Opx z,.;H5;s~۶Xz = OLɔa=Eo"yg;}Pc_H,g~so1:DtL+:LӶ1Bu`%?YwG?F5'gi87Eh1IJ7+H84?)s&lK`<EBE3Hy{nF~-2Vruݯ`ce>D0ql8i1.(b{\gF)3 .]UUt-֕YO9{#2u?-,!'Ҹ܎{S:A7l_[X9uVs}=؃NV`Ce<ˉX1!M%xlZLmӪTm]2l˖C0g Kwpq~u !X꽄ugDzO7,)ȹ)?7~x$''@Up՜n&{SڣmYtAMI MɨܹkO.rlIc#(fNϤLb¸b$I97E~5p<F=/YR>NGHUF혏 N;46 Dj+yܩQ2^ѽ@Șmnゑ -gVPaI0k`N#@;Dޫ|jή/&{f$*W*w}\2X4˥Lr|W3[lZ`्7Ŷ:iRoLi+u2i-H\gg|kb 8>؄/ =0*`Qߺdeoei{vӜ[tZR^Z:DCG/*&׍`c8_|[UrIjs8%,Fo!U( sO@oe%:IG/:.#ŭt@)zA( ͸S+^t́߹)aP?ˑ+ =XzLRS݈⤀l#_@6̍<;kxXp0Kx{Y2 B(;WG~7˃r #"o" i0zg9j $S]tBl^DtnJhr"+iBFJ< UҢ2BOb o߲R fXlz> 0Vj>&CDK=7 ACbX70-kC!x9Ş#l{>/Q`G*MtGJb~8oq%R,i y ݂>pyR*u(" bnĺ_|4 FbCiv7>55xN԰ÕwW)9RV"+mS ?fϕnN伴k#҄|&B7'Wn?\&[BMtԾu)2-.ӄVqHm38>_~kuc:$rK㾡ٌk:!Tb)N<]&-FP·DNH#[@:@z($lS#1pב7Hnn{{[N@i*uI7QqjVC,ns࠽(`XƂF y_#Ն֍ N. IkI$^|/È$u6H#H,yLWB <1-AVrz a 羠O+tcfc/_djܲڇu`\nZFsy`({J--!wXYfgABaUyn@LbE'nQ(έ;zwӿ#Fxⷳ?C /wp$_cr'76&o^GYn9G?xvP5 ;}NS/Rf̳Ɵw+Ed7g|(IU+Q؆7/E@Wo 򮌭! x!-@ %d>[O!=s!3o m17ӶJfqBꁃjtnJw>]͘_̫8EVmLAK0K?_"Lc;]3} ?%.P'" r?L mr9l:f{N9Mqf4?V4+H`Cay* AhKr5W =)TDSFɟFd ;8~[s?ԭ#! 7A~';)ۡ -M:؁oke.L ҺKzfqd5ڮQ VA(G#eqqwpBŷ]Ϛ؀U~8MR ]wѰ4M+ud|VExIJ0W?'47i!|d` 6!(H]ȧQt;i\c2tk!H˚;DnQ r$aOuZqLßbmtM Ha>beX*xJg1sPjFZS"Er7HavzOKt/H_i&%%@W^v&UotB/(v|`/qB%HWL&XG nvyMn.pKo3eLG2Ňfxx[UZL&7$8 Qau."}[2 aY?˱i.)D+#qKR)(sC߾9ۡ"J2w>c7;{~hHڝiɇ0AO\Re?bN!Mt~Nm" 4~)G$i5*#_R hy ؊o:s~)гjl89J~^?c :Jj buvOf6"QLcgxzv؏:x=M:lǭM4l3mg_ٜv3+Gm ϏPY3Ukh?&BU'.=.D-)#6s[dX$;B>4nɓ$zembbŞRѴ|K=58Pz9I_C:ZyZBZFLrJPoLXE  aHikI= 9V)P ?>bM꯹Ό:$xcV+V2Uld 36=8[0Zŝ@#V֭$(骪[AhWl'Y Sof!U였ncr<Lbߍۚ/h҃mAe1j1uz 0P.U݃aA/tgB/^O9 &2ytjQ1DZ~{EkϻQ=C7^pt9?8@㕓NeϟkL%xN\ξyuyKN+v\j}\P,-y͇WKQA:3;X8a(]_GK b|PRAuonzE}ϷrT\Wn9>oZT>3~Q[ 9P\9# [!v#U~u- i+Ywې۶Է(`cdy:ͯݻ\K-9&+гO:ZMF v}'ݰI$^b.FQ2QMO\_KhuR/8M(VFH")8%$|pB;?Z"Mţʏ?'՚'6gaT0Dz\:Ci~TJ,l=aā |!Fe4Ihd9S0(`xC;:օ/4*Ddÿ=LQ+':|̘k&<tÆB⴨WsR!uΏj"6OVKѭQ ZKl ڡxBw*`l<g:b]䙔7;Lj P]XZN,63Z63VtEwUw{gJOվ|)>3#N ;=&qv^ !A/ø0|#y56 aU sjVNJmV()|2`)8PعVā<1G;. !Sw\WxԊE~5W\K#1U/=Z{46V~g *Dg8֒𢵇.3ghdfU >3w.$.b`3a̐!W~PH9@@O߉cFJ o4©B`gYE Yi.F;m9oYuzkBj<"DyҐTLJcAH%9Xp+EY_qp\ewSPR`>&;ؤ]$cD R/MIUI_y$U4]#uA}DnFe|oʖhݫ0vteZԪRD^L,8twRAAWҦ&Xwގ)`(tSܽVY {wz%%uFKү 0{&+E00;{PkwpvǠZ'#7u;FweM.Nio9Tޫ CsZKTGڴ,2yK,Cxr ΓGr87}p. Άf } GM>T o^/{ )#oӵ5Zڵ[љSp7;c9l0&~Bs8 TG c]R_n[9$hk~Mgj4cD%px_##DKTu#Ss8^Q{M#T˅Hs,s~9Lbh%7b+Gb?8E3ځa'ཐ10VEx?Q$܇Dzx8uwc()pKVi4Ԗa~ 漬R"Q~]Q`h%/2>w=k|Rf J{'FнLQI6T>Mdy\An=muE$r[{RNTWnw%6z2{kJ$}eprц[WO EP:^.4Hz:ĬƺBe*pܿV{2L}Cb )Azى]n^Zx ]$khk,W R?+TR6?8tqƜE/)YP?( ʏ`[H 3%՜ݍVH_6<(VW6s`vsmp5- W%+ۈck-,K|LX=c bEwc8:`4^{1ۥe?\05wk36"fYsEb}hf[i p$WES>T( pk-iN;1]IH :S Ǻ:m]fcY53Y}HIY I(Ss7*Nrfh$j6(?GT+|jNXV݊"&+'s9-^3,i[ JMBLP (D?:(6XѫpoԪ W=֔&׉ĂO׀ϖjeoHtTi&ޓ#|ΆħUY=G GX78!Қƴr,L[)T#f 7r 8ɗ@P55sJ(QPr2XF$ K]emm#,P/ts2&}(pAm񷥭3~ks`OKY$dhZ+HIءx떰Pu\a%Ÿ,MolÅC0|vWV>/3"#ҳqtW h7;%U9Tps[:o D碣~M,~1(AWC8'Ίk\{G͋{]Y}x\q3{$[ol򓥢8g-jf4X \ Be}͒E؅M)y!?3]"+)wl&朄bl4p2F&ynvouCmso!UO}# J pNY̍xH- 1hgLK@_4)ݏ!͔Kա V!3xA37ƾdqhybu(Bp0/ }~{i {MI7޻ڕW/9! mViv?taL|;:~_b^ѕ5Onm+EޝٮRUصdlKP.CX6T-\X,ZC/Ǿ%UbZE1uP~E7;ؕF') !͒d%]@Fr|_WPOq^WĜ (v#MJ2}<ז3&~ 2^/)ҟ4U '?ru9 oTX%_1wb-j$('(p 4SM kj2! ʈk`BEgUR៎Bay/O韋GKVLn7J6&rBmO/ x.qj7yc>R QCzvaRX^"JJߧ{^*ӧڭmKDhy8hҙTR1;SG¢da~x-o-m)*܃/|%DAPCT_E*W|ch+?lnTx?)${-Pt&`F= `X8Y'Šhk;Gzbݶ=7whP鶀l=Y]t.zTIYD鋞4a\ފKta|C 9Q^ҎPD^zgƠ.1NFva a;fz%f{GRRoEi!y VXӐP-R-#HonpDB vB  ]iS`~Lpu:@)EvuZjB#?6:Q@b3fR}TxO6:,gYI@7{A!VDi)ġ*"4ಚج4^Lvu vqE"\$roFH6!Mӵ;^Cw|HoI)FL_цc4HMo|]֨."zY",/48rV`,bQCP8_n}sfhZ 2/BynWx0NrTԎv+ja3Czp)7CW+du2;VfSڽSO<:ˉȎ]OBDû>r ]Zo,U-;y6EyE_B0"9}ù޸ C)7&ub o, zW5r+r devM4؃rYSiX]l<%0TD`..KCn~ eϚ>(La]=PoZU;$[)U cz!Il]DSAp9ؽ3 ~Ev7{VJgSjkڮ+1u %4=n.gĖY wfK,+N\jM㉖%wp&* wfMG~:}WMңq"R)9H;HEY}TԊ0RUUUozve8_c#3kGo/ձ>= Nz4y 5ۡdeBwM!8=Co{9Ψ]כ{ܖ`۪D̀zD8]j+z.sƊ!Kc!/,hjL驯,{!ޗ$" y~hgS82V!H^HOmݤͶ3ٟ;䥮t3<:[y<9{u_A 8od[k)򣞍{qؖczɨN%Eݞ89س\nG b6PX]R|"5 Ρ l|ӢDBLz9}+jj]8gKp:P;h}f;e2ܜ6W'~J%Ԋ\\ 7 %;Zҁ97v-ʉ(r.. F;ՋÔ|̋"}WJroCl;t5tn2 ΢FF%V7Ɏn\VŘ{bR bLu+o@d)jHnaBʿoi39 V) M#;aiqr Ng6b!"AKFOK> =>mf2 D9Y,Xk *C+<_puUCA]~a&T`Ci9ףAp]q ])ŰG"LAl#+n/OX2#YCr }N2k"&-ig2r$ Avl^-=k#˯%;=s۵hp_i$8m ZcVPC&"wP|qb䇝&y3tAn Zn@\&U[֙}c8~^ْ=h+<[6ˑ+gI*ǭzD]=_O">s؜g"Y&}3% rg~>$[yǥ$3`Jyk돳 <~AhDs`ToTHI;=@g`I0! _m cXXBI{Gpsh/,nj<-n4 jhs.V5;$"[p22,S^>\76ÐXK̬$*J/虰KG`XUɞÃ)iuWg}0AΟ{|UܾœRE#!^qa~tTzPs JTͱ@v2D^r"mb)ŠIڥڈkAq^XUoā= bItȼ;HY"f ͚ u_0ia4* Ar&E]XDu,TG۩ᕀa%[EXvRmwD$sM)T4d_+ ɷ򎷽H[\AzDP3Z/;PHNH4&0R>GO*+DܦjQbhU@~ZEFG7jRv"kj1ZaD #r"K2oo8*"E=7HzZL{&w+Pj4eew3iRYH z˶79>5 J8~A pCFыk:^˲"o`5I+aH>Yf@Wh[ja%=?$}A__IbV 08LRܞ962@Z&=2hǪ妊$X?DGA=ɱz--)rTtn4R@Er 4-X \ :3|/qMK}K[ oT3oe},΄V{A3Jczӵ .(òhk2ZC*oʳ~-O}xgi?'v<ճ!XmTMg:ܺRh|Q"qO֗rՅp]d-+U?9wn/4gd%G⊤( u nXͤu>r逰4.u 0򑌈q>/V?6|%'$k0NmrL?FષM“Io#I!i)r[30Mxw(:`\U`%q4cIR<Lԛ3Jd{4PBy {8wR72~=#{=QGrWKmEe0Ϟ8o}52Yt2BEr4@^5?* Sg7 %pPr0Y_8|>Ȭ )-0v͞V|;[|*2X'>¹(?3{1-6{[=%mVG_ PڎQqzjۢeͱG:cQ̃BZ-'CtGk@6;/&?-)ž>?UsEcW[J*Oy{Xjo>~ҍE/ԙ3u]!49֋8Û:+"6,B{kr ָx_^*NO@tz㒴hЎe!&/, o[iur -~l'~W*{ѫ;%:Ԩ# *;A4EL@::'ԎLǚtIQ=Qfv>D 7V~M9Wx9/,f7f+eiUCh#(PL5- Q̊ 'PjN˨|!IWa qLTiy]ƴUqfdSy21,D䟠Og޶41ZG\#j=cqwN:1VmgW* cpӷe;g GÛ,ܮe;7uzĄޗ&EP/i)h>#8Ѕz7ceK*ഒPgb~8h.p\\"Ų&tAP 5{2E y{wr0hk+X+cB%>LwMLz1UT7{){EVp7Dw۸a8~ ̳ `I{ ՍhO˜8跄 uZgwwG\It$Bx6;* ' r#fz@ af.>@d]nl5t`kBNџ@Ƌu}RKfP~of$< n32&  OU\sj͖۹ty㢏DmQ0 {npKnڹ8eaҮҢ<5[;߶K 4-I_, F$dmo1"(C)J,3ܯ뫊t>+/rT?(An+ƿ_BK%@)urd(2n'4ÌJQOO4^^T!iL"ݍ@4-n?E2 խwBO`c R 7N?z~8ܭ:Ɵ oy5tNDqvFńxDӇ63ebj_4NI#uc-Zùe03S]5|809bSlW-dnFe`ޞӱ9%)@܋+rc()s47qn~Έ*#FĐ 95[_ky9}RT#2CraB)4~ w2RTD`kr5{~CrP2?j8y 6IP 9,$ͦYN0J8I cӤvau49YB.~KD+$jי[N{? rψu2sp.Kga٦I=WGYC"L|S-mv"/0\-~M $zQ seNz-+pgjGأ4zI{{U/uZN`fRP lxS \UDFoy:=f=T!"Jn>gBSb|M.vpQިJU@Ulul)! EW=) 7r8<Lȷ"}k UBOK'# g1_Ϣ?!qdjEWݵU"KX.U?w3 ,4J((DEt`hQ+R %.oyFyp|nPU"=Lh:h!Ỳ; W*ESTջ`$RZ 2fa`Mƨ5)2/`vӫ߽Fxer#A=:XEfw 8<4^nt%fK$Ze%ž,FǪ#Z#0St)}䉇:&c7tHҹ ֔my7V{1?/Aq$]<&KX:ԭmDmzxDX-V0^/3'agJc* ;L*J{.jMo?R#2Ei{~b/Ju!TpOr7 :S{2iC=SKd0P.OwGkU<>k\3 `^s3FUɗwgx#/k~hy̨ٟ_KH^C6JTdg/e[OJ T{ NZd)!2v-?,*ŌƓ Pg"8W MS,;6[xY]gR, fSOz(=raA-DfGN|OW ʠ0"aZ0@ 9a m,m% ~z)<}Ni]lKVc/e=&g eN}gc׿wsRY_2-G^T!˔&l4 $Wt+r(~ԮHBXї .NؒURC!4m<9 .DqS2`.ܐl 4_ Jz߽=sgâɛcKtŰ}gUE`D/x1S\UATYa|KȚIu ǓeL峠v~\u?-Y9h.ҁI68KHJ;v8rRsk:,WyxNgߥGGtكbyE0zO9f܊EiKh,V D8$O={yZKA~vƫ3s"Qȟ$Do75|U|Ӹ5[ݼ죮*w("Ux`8s jK\M)~EluOOo]D|$W<)9ؽrJ ߧsWtf?;Iݤv722x$G%d*\d&l%G C4֮$!2.ynɜl)nn9_ɕܜ,3a+Il np4`+#o,P^+(}[.rƳgQA}+xBByO`B),Ap\eIAT[sg2hWH Mk!fQ>4[ 8aI^2"l=aH抁ڬ#I{ ujKRw4m-^jfXW$BƍԲ vA ,&7.. @1*j7Ogcd\8 l!c]ŽbL7pbMx)r9s kA)Ha22JpT̆>ڞ_iQeAEΔ Yuiduˎ*}sM[+4:n6fO0 L־N¸h%+ jبZznRqkēBm/?=6ْMV@``Ua8'KR>% ѪIPloK,rcV4+|srM09_-{u|-`ϻ  j]T֒ =}L"&#e6G;֒JV&w ΀vfH%ry_IOߘlѝu7`ndT{U [R m gX 1jsWRUM@b8vK% [&hqrk^k ?$9JƆisaHXN-3\U:K XGZk-[9d=YYi"XӺIvT8v9Ei+ܛjv*ĩoll;-Jt ǔmK۔7j.ʂpr{=Q^yQ3E|ٯҲxʬ&TҌI;1ҤO:Hcp&)?+8DsQ틂;6ICC(>DQ)Ǯ-a3h6b[+FDʈբ'.ȵ (21bKoKii 7@M P>U~Qx"QҜ.=Uo"F͘qxG# CoxVśCV,orI?Ѽ1%fƙ Z@"A'ASg|k !Dl1>%}&+됃ӡ'*&ƽY 3iUɃt:,<8}c@c;LLMƦ d~#R )Mou01j,lŢΟ!dQ9qW`7 Ռr7`Z7z/c13S6øx"7n%VOE S&:4dr~ar5ӹy5+K~ġ]%ssaݬDOkU"ј_&znߖ U1;vunBW.7Ug>؈\;Pk7JTB v_bk9DS|pa3տrEIɽΑ,uQ׆EJeIaϥBCCpz a֕°gk%Z \wf֜(CЎOv SwZp \qM}F@nz)3S?ѴKv?+Hycv3"~V;'_P)d3l]s[˚39\]%qNB6m'O%YNM͔$1ZܻҢmώȿ-0 E7āۊG%-:CbW`p^N5ؕu)$]アx6_q=]W=$DhUqfo^@i 3'AeP$#:k'b(G3TeЛ^PU '5xJ|Oz+t =j,2,O 2GR˪3>@t%K Ȼ)=:Y>ƌL[ IKL|rPjo*G [R7(A[>yKuJA׸3߄6:2f^ӊ,e^-nG|N}Z gFz=+$-չoiqbDcT '_[{\2-gtv3*KRYg^ӤoMq[4tFw~h[bJz}W\L7ʤ 2c}%\05>VX3Xv]vhy/TIț=f:b.0S2r|T장p"ـisƷ ZU/sc .̐-X~ˋƁ3%Do&XWrh.䃦>{( ѸD ߣ"$ OZ7A4sw g6hω.?}raY 84z En-DzjXWi/!3z 122!jG6rÊӝgϴש/k#SQ2b^/ _Ԃod&/RO\Hx ИuaRaR*w.ю8L2Z(d'ElR~7;d<{ sPun1Z߼)(ќuq)ZZ6 |3ZY\ٖEFxu`$[L#ٯ-3YpNv35hw{MmRݘ0Lu>I$Y^۟;im>yrgMwRF-[@$%1Qƈbс桀r >}/AbL"GOTM^*}ΛL͍a.(IKb-` $Fgk刌486MS ̝D٦eqI Ap;;wU5[7-^CO;IthOɿޒۺyƉw=F3#eI`EVeЏ,FLnNV4-`}eT?i~1)dTxn)l%Z:xtĚ+XҐwb$^ ߁p0:`NM rSaD\@%q$E6#fդ%/!Do8Ρ c5}QNY9Rf}CB1Pd`.4J%a(,#)mhbyeg3 =h涪. *l-YC'h%pS@OR[GҢ@ #mU .j/]^}1d ʂzC4\r695gj I=ei|Hs/8t5fREI/1ϙ?Q1!&6!Ǵ`²LdaHfdWQ@Sm7C[R. =F^HBE5̮Wd;ÜE [uW`j[NlChg=C>1an1A ofΛ7 eTl9{ hċAV)7d _2͐m]$EȐ2}*e,cb+ϔa3 YB& W:WyU+mC|9ؚ\NvԎr7FnYmn4PlqE<,r21*g`koDv0wP F5c0c^/SCCVF<+a-$2.D"_)HKXwSoUNDpÚ^ⓕt=E/Z-&^Woq;ta(TˤyN|J&QF$E4>]zٸI.*8D)|] =He2F 1Y9q. hQWVWMalh-p;Ыז8?;!7TsH᷹oѯrE#|ceD2)$v؎CɧK%?\a-QH9^1-h?1V]h_0|Rr{cJ>sSLs<+[[ 6~xMZ&%ʋǀ:_.y͖e8}H629"kΠ@Dž`4T I֬ZTϢpާ,9PM+|/>Xo.kmcgMdnO-kD#kY:아3ST*HWTi &/z1ť/pE/43#l:q\O֗toځʺ)OYi8/?ANPo4," PsH,rc,nv7mUH$ =k\=Qtw5I<Qo2q‘SJ^:K7i+^<+^e&C3*-C :Pb>q%u9]@`ڈNC&T:1;M2t^Fb@o0['JyݎmZ ЀBܕ[9¿X=>Z6-{ ]a$y-yMnΠ^H~22P5{;$%ye@n,ڹ.ryɆD'ᥬ5h5o,FFx0145[M> ܚk|.Ũ$h;r Uj:HlTᡥP?\cM e`b"ɍQ,r/7 LdNfR'2 lf߭p8a2tQdr'/A d‘9J{$M%뛝 *Y @!NJ3Fr~K C?166Ť(vCX}9/q?a5$;v6/NL_2$` V{ a3 _3M1Uf~rnhx8m'S)U@ 0;ug]Tt݃ x3*x_˂EډW=x*1;|=ܪ[Eҽ " w*h($_w29NTYRY1,)ֶZ[l?{QFaui1<Ɉ0SF 4@M֊f&ߦ ?ѱ_,$Ϟ|a`*2#t6L*pZ;% tNQE O[AnE5 F-13 'xCz]jfz~W#8miò>4rRp#84 8b,,?Cޜߡʮ YMՁ< 3*[teГ6n5^Ze+2u-MV0&~U׷:@j+47N#Q箣ËA]Y񪝠W,S:Zؕ^ڗyҒxvԼ{4YX78p5 9h-:\ <m1k"怌h%1-CB+6Sɝ9E"\>s;E2^U nLa|T iD~>>)|0cp!;ٻ^(nvMkL%b=fdywP-Mc@; 6]P)$/f pp#%reg" m)X-e< 4H^J(9qN`(J93Hs;N籎+]'.vSEkj)9q2>N:e˜{a&/-c7M~K%A\Xv]5gg@!+.+5՟{&$ЪEz/7r#Te`U7޲o#RRw>'fKƦ$'%ٺM#%{Ʉ?̸X LQ ?O\Xa8({"yl L K(W"] q#xG]{8.5ݬ.Wd!Os&' V,u{3= %6c8{9*k-v7+I̍ƐսS$fh2GgdgVI3FSo05گ ߽x0񟞗EBQ8+%3i]6VՁ$I*F ]mڳ#XA6?ԥɭccͫS|Ii0a3x-oc5 '48K )no p.LVf:okzԶj5QOVsKo'3 ?#]NE'"961\mӣڳdHI耰 ڊcG;NT3) CMPÄWM2JtL=ĕv!(d5zٯp7YYb-<,Ńj9 kD=5SHJB`89}Juq%H/z=6SmbtOV^?^OnhKP2#/$ s3&MLnجAtz{[Q9@v:ժ.;fXȸE&)Ҕ1W쇜 maeW-EҪ{K&. IS޲1PfH_(N#7s])7=~Us:*pQ!)Է )'ңϤO)R"I 1/؜2{I̔jU1RƼu.ߏ}JW͇{b_6qDk{XF wU7gH}(F*Lʺ-=kcoƗj?C3< AґAck]Qh<1T_J"՘N3/mE59V.wl8 e{w,CLT` Fd^@ {W 5DQ l܊e~qMm4$iPL'`7+O|Uͤ%Gg"ݮի:&f08.dsR ^W_bܘ6y dS2&mJ!}!!}L:~̉<$ٵCSbR{JE@A B埕kB2>)ˢhP,u ?yCtUҦw=j"tun;}Emen.:*}iļ:@؉o" vk`XISG ~]3Էf߱9C~UAnPt"kG;>)d5˛ȎJ I@ZwJ=bT_1ȇ,-x2l'pi}em 9*Iꞈ|z/SC4h=xW&BeZu=@tc>=&D Hbb  0vqc26JA6~>_,b_x؁/|9M0^yP,_C1^r {XXadD$W']74ښ7.Zyɠ}V53C(^R8&e!%0qCݩ!byfGpC>k0*Aǝ-v _}n o(# جNl0iQFw$p }~h'c<>9wg6ݯ?ɥ;8AHDЗOkk#̩bl 2mb5IZŶA%T-ڢ#{͂u-nn n9qQ,lITfٍ S=i_D_y4ۉZ!z f>"%es5ɂ%g>\|7BƔy,"s( :VjNa69glafN|ld2 oo/s)>qJW>bU΋|q9|, d:`{G[+`iF`~}eCH5H랞gj]?I}'hSש76~}V/ŁƑ-Zђ# .8d IY 4 ,9{#>2ӢoUaFkOeĕ.mi' WpƜ6O7e3hKq PTъ@\uP+hJ}X~;$Aetfj޻Qdדp>Y˔\Ȳlfr8WT}>)NFFzWVG9 VaviC>{o%81RP٬5Kv*V6ꀢjx25I]?5 cImV>tEe'c8dfA,Q $[_u㣿ui-;c/}: ck.e|XUg>:2:;ZDM9eyx1o =ђTߔ 1'l\-5*V#$3:-n3l-3QhϷu_= K|Bb)˚-o,U6{Y;H>Mڧf4%MRm7qЈ)Iҝg=W9*94FadSW:lz!=Kl)@q=RgO2ʆ9{3BnIBJ' 8wܨ>O?|0X) 5>Lif7,ȡL 7#3 {'N)Me}~=9Q@_Ă[Z#> s Xr+- ֱaŅc% tUիyx[' ȍ*>Aϕꠎ;\^#2$@zxm^WRO69;?ײ) pcA+^EBB`JǿbR{UՒozgQT 魑fVc+ .E?>% ߗ-1k^q|Um"֤ȎAf->"cD |d1'Gu%aűa.|q;l4Էz& :z4"6ZnE/Jߡѻ[Jtm"^"=jidP\/_{Ş`ǁ4d+6)Vz\[ًYLýCRRbw~u6'L Hqjd@dZT5pv(-T3DzIe{&#h"8Nq}/PkcSeM83W?cYϾNOe$W"IC58N&4mW~M%P@&E/69ZN^S*oO3Aj3Y[ |Av(&O3v@Yԇ2ᘐu ɝe8}+cs+!x&gw4As/qJ"=H#B6[xs|A*S".4D@$ ~F_JmCR\y~~ݩo9;fOYU\^:{쩿фrmyb䒯dJN:@c~9b"GVnfs?fM iZni'xG?xnj@ֻ=Hk%KI/psN[vȊxQp\I)bDaܳL;zZu;E7fNJ֬ÈI^C~T`:iqmxS[[,|@emDsU_(l Gq-o{c9ĩz10)Z!/oݲoyoɡrS{ $ ay)+pAKD02!x[bTX& 4V6Tfn{1r1tykg3S ħFCpt94fBpO~5KJ9̴,&YzSr, 6rp3*S6OՁorKxl]|fn362B@(읃@"_\eqUKᦀсstJg 0J9Q !jo{)TlkKv[3݉l^)ϽO,ӌutl䂇97ugl?s\;Pv x]M5#(>65Es}6k%f'O--h"_IMn݊ Du)Sg@^T}8J0jJhF]Cb`At9;)% oXD\Qə#ɡ̊a՛m 3Fֲ.;w7EK/W-^8qZqʹ`9|ˋ7kTy-) yI:b|@gusag@7’0zmeਙ~b6f{= $EmϢ'ٴ?4 CIv[i w'P!M2!t֎Fn ޹7bx!;+MLO mbw)qꚡs"Q|lj14Wx;ڳdG+kҁM?''v$4Uuhynf@Nk)%|/g.ցoAu^L.OַJG4[eq&ibjE^Ʌ,3=YIQbN\7wY4G#iCKYM Q(ϡM'VNDE=M m|㖷F7ST&#;2H06eu[l68r^Y")fh5#(Μ]ظ?"-ZPXdJp0~0O5F(VFRKvJz0EjdHnZ$X|HԦҳMA$?yWVRBo5Ԝ܎X<ޞeT J=-)- ͟)N5x D8xͻv(Bu G,qa^ڸV60c<{'lmT6_ue׳Mo3|ղ2mj%IMqcPGU2}5:KX)fg|"pN5>̶bA$(T˺[|5$hy=k'X̶ 7TPP. ѷYX|E[JBdSj j(ALphvDƴAg!\.N|qۣ W]5q|Z OBo=5%VMdHvb2(%%3WyU~:J*+W]gU/&ru4cBDWI1)%ջdr7ONk ) mLkb^cDٲTW&U]jM/+QӋfCҼIzxh7۶UI=;oK0γʿ@J%9;LEt"/_P߳VjPwO|F y3Ù~U'S'A+RD`'R&WX /(HSaF |:d}/Ib+hj_"gZaO20Vր>ckFLjbrRpt۬f//f鈦#8$7]B 14lGT G'3%LThY"rEյUJYЍ&uFAxΜOtdw5 z@@}J$۵TqAb2[Uf!{q;%4no^챫<&`/> jCؼ̹GI,ܾ@-:Nc{b"d(hV b (G (,-%& 9t#mh]5Z :\O-pIM0ZUz"8Dry j(@;uBE713w8՞6]PУU>c`b9#I…譈]Xq {~}&vwCT|/^N/$5Gv_non1 ^5Hʤ55A5O7^l8T+l>oV-G4P4)"IK D$}kg<;{JTErȻ5f\S B+JE o;+SVaz):c0{I:"`+seKZ/%wx&!ocH40x$+s0}*ߗcZ.B$ {w9 &{BhE 1v@GB|7'-xX_V8Z)7q_i[[űS#-˅ZHXtփ>•=/coЀ 漢zȄҭ=aS:mn~ЯőJ@(g1fŬk r1L$[ef7[q+X6īmNF:S3NsiK+vM( 8Ue(J%kCl/±1XbtY=RMn [~LďMnÅ -ͫ -KeKʒW F#d>g}D cn:c%$h,ܷ?gZ 2B-7%b|p'&n+t[(RN߉)Mx!mlՁbSMh)#si|2CQ _i+ϩK 6˧R Q/Z-9=O7(O=u*3ȿ4*Kpkh(䧩6%׳_Gw´juy1;jZA%9mbnHYoЖQSLQuzCٱSP.Up Řvfc jYja4/qf.ڞ@b [#P=+nq1rqвD{hc \d68?g/SB=[UEy"]!L"<+ڽ\Nq1C/yFREOQ3 hR*O` +;#-7!kkjn{mgj=WF|Y ִQ`'fkZ(lEkB1Ffs1GယsjVw򆭩m.TpLF9j5UɄ }4,j̛Y|8g{_$B`%Ix#@[*9(VpaY=Zʬ.5G8jay+VP\>yqo_oAH]6n$WȎ8gW_r1e(izڠ{ow`?⧽L]+'?4k4}?~~AA u:_E] 9f[+i5--yʐ&=Ta]o}B7in" 1z{ +6𖙬gW.sTaTpފQnS8: D-8{yVWFn=TVQ2fzXH}'75ZBj/NhUN'at5(#xHGӬ;H~ւI>O~98?x>۰P7Oe*ng+Ãj@}^Ftds t㭞]H^,+~guV׽61eMN7(1}qU'o[6&Ţc @iN/r<FyŃNcSM}P4Yde1 uL<)6f6g|Dv$U&ױ* ^w4EXsAU0t,Zʍ;-M_1&ʪ5l]R^GU=XGޯh׫|59JM.=el;OˏB#HDO6~q!48{TAs8ɶi8hn9)+UƉcS 3ܶs[Yp]aQcO'^UeR_ߓS'LroQ`vTi*㞘MZThgBUI9*+!!^gs))*GQYdPU1uBuj6_0>.)gJƔɣ+>DǞÝ$'n<|j4͒WUU|PS;ɬwxL{XEUu)O#JwָC.If?FI/}μhW- ?uRӕ߾2 bWfUO\!o=S T]qiB-gI>P6_rE2E§hb {v ] f!F=ӎwmyCqNWN0K#bh5+ڎ.質bڣ??`<E.gڑ8 A'w UVn|aǬ?p0Fkx О[ANY(l5ޘImʓc^WеoXw_ʗx`Tw}q*\Zف;3Sb/=*TQdY"Lҟ詤.C;\*^S`r#/p5O,Lu>?%fS=:\;We|B14E^1Clu%8fQ ܹ/ofU9v[͘ЊBX.ɷķx/Ϝh(ޛ^u^Cj][az͓Mo$`\Ũd9M p5En:o K-V)2Mm}ZB#3-N@F{^ho_&Jy}nUlNS>\ՙc2,y9*(xQ1ta&?[p4魻X@XGj7{n>ŭ*łÉPļƧid ]ۡl {ֺ䞠4~`e w'٣}(cBg| n@N`OՒ_hi[nn-:e`؋pWBld\:-"_LCJ`*ORYt 4 MXֽ^B7 .3RXi* PL+ )Gk7bf4l~@qS.Ҕݛ`[Y:'wc˥7{O$uu W8lW)q& [~_,TJI^p !noʩ8!IgL: S1nD[ סAIt%y_Q4+ѼKB[ٶy.|(FByZ'~p/f%7Qe9)?Uga~B#;XoBF1O:@EOtjN$5G4e DcMy(f6)d/!N;Ӽ(jPqdڀA~CǸvxJ{B)ߣqsJ&*n;-a<y0~IA\^u<q0IJx*gc#HID 06} ׵L@6C)rq;='v<2 SL\ahS)`t_Jw^0BξLC܃Sk$2͞[.&u_Qq bXcHn灶A~槡9;qZ:I묷9{P qj%F 0Y(M 7ewaCfxo9?j]?T%@ 9 A6q7`XZOT^9|;n}niڷd ^/[Dcpආ#M&]pw z웗"oy0h5j_[g#t a5ZJ //IL?ի;K)#7uC :#gVC 0Au96k{ LLmgp5ޛvW88 $3q Ir&5F.@N.HEwGRr#._\X}gFÐ &EMU l$R:[*e.?hkN[ݐ NT Z)FiM|SuPoZsX]}W^Wrhԗ{g މiE1Lt"ܣˑ҉j`AGN6ǏwcP {C` A*ST˭"Q Kiȝ ÆƼQsen#}&V|^H6C|ZU7M=8.9;N N9@~t_sŻ xefDx2H'{JY%9_-UØFQT*L ew06Y` jn|"Kg"9#lz65p$Gi Mڷb[4NjEW vj1-7_w!XIDQ_f3wH:}FThIhF߂=a^WƁ(]5LPqO앾৤=>[1X :_晈S^2_faQ%+>x@OYڊ<ә6@gcmC5T/s,th$kw\މBri 2-L˺Eib19m3u8ƬT^\?ΙhOgZHln`JC<"2#9t– 5ϽUI|Bֆ~#VVүGr[aK o`%d|}0HO/ =eF{Aؼ<6bb j8<'5`qNy0}Rn+}fL]ͣHsHZE`(Wh\9](Ci:pi0)4L㭾SuW(ݺ (A8&}b"6Ym6!$ RWߑځIJ̄t9bE%&z[#ɞq? m* }M$3IQjZA]0i aۓܯ~Eb1/MFVMEV"F8[pph~Na]%vY i!eYn1 TޔP4)n|ZS:Gn$~SVZ`#E>6Qg%r 7&^% .v_[+F㐡N`,Vco2kĎ*ijW-6f~\8nHhJZeYbm舕 L{i4y\!ϙ(-ӿ}ITb#TPx3E&%Қ '3)a&"DLu2DYp%U|bnϔW`])>\,lXqӶ~(^.)ݵV?T}ǀ'H"6%N\Ȕ|^#:Es #K8 v.}ɇhヽUN>kcjT}ZHƄp梸ju?E-iZ,"X/%(vTzl#g[UPOJ7ƸHMٖBosN8,eeɻ#V,\A.GִB/SQNXȩX))P7x1S>MҮT@N RE6ԫG &{P eKN0/E;}TG{z@>}a 5>r{V@SR!ۮ|0RO0!lT֞'#,A<#* &"Qۮbt$-y·Ɵ":3̎òi'_6+ =nQ~"q~gTD3{p;(z 3\lkƨRν!ˁ-c4z^@Akɀn:DO-3ӵ89a"€([/tZzj:"w鯊y4#ta9 {7pAɵlUDn3VOP#=F9BghvRWXZ8BaƇʖ<9,؛!Q~UV)sf`%u+0 QA`95㽤3I/y1sK=?zѹt+o3R75RyC E?oɇ|% vwH}To;e;\RB,qR2~"0}oyڬ3=m˜aFX_c+hE BCma"b&{wfHQ @f0I[#OEc:=4%瘖jYPm(QD `'di`hM!ݠ @.ZmhiM2> Q7QmlsJ$}2ٝ]XOwt| txbz% Wƣ!7Zb{`?ac>.>e+ӿ| UsEcvpDAsbc75sgs2o,SZ>M-PPLGL`O~솼soX!*G6;y$tr*TBk1<#70Ƙ34ו06I.2\kh^o<  yb|X[D>T+\Mph_2̌ߐ}?Y ڜS wBox) j[vL ̷צkOr(^$Q[;ѹ':lHR5|uUR#Roa#I ^*n?$MX ŇX5NUk p2!&g5^6y͇T~E. ([j"I:K`![9NӦ8e vN1e] OS-ʽv[jyi6QJvz'|=VFLZ%ER8nb: Μ쟠TE88|20є2%kex'TѱHk [@7WrvK6BKokɆJ֊25PCXv˔Ѩ9eZm8REػ*C`΍Lq5Y5txO?8zR}g;[A_3xQhK6gRAUoP7ͪb?{Z OGaxSS_lm,{h2k<5R^jPT*ؽspeJbya˂ }G_Ɔ̱˳e@Mϣ@MtbB Cņ2 -LȝZ0/o're(/urZl-QtZ볕z{j8S=lang,L݈^{R(=YEt̔gqW/H:`|¤x8 [Wr/C :":n$J2<m}4/o_W# z)XϺlA/^Ir*08_QH'z&#Bbl21#K^\|,s6$I$S;H ׽ѾZM4tK-^ t-cl>Ul[w~ ۴R45HT:,wnRG?kW-EX|ʽ{٤Rʜ e1E3˸1J9) n'#jO j \yr v3iՒ\Bù}eyW}vր.V>T&H֧DώspxlPϋ'I;2S'>XL_vCЕF/-h(C!T4 4hڡM;cN3T]{>`D{Fc`:>6v̦qf>{b^o5ZW Է^zr&(R5Ii17:}@0nH.܉3&/ncad(]6)‚ M#_}0Dr9;cˌ^<R7Ѷ_3F Ȯ,9Dtac M/g4.F+gA um]b{D烇B$T)P.:WOG*| .FMЇD,3ݢ)/Ki?ߡ b<^ھΦ+U/JR]pY>M:q;yf0~:SqΝ>3NDh$vWX!\Hvd**ڷB68E О*ǙZ(fFSPr ɊamyӀGl[tkG۫kQ M"ypN#t H`iOv\[(y2HbV_ 3*eG;J&]5mf0<}fl!Y}<,D9݈t P-H_0M~hxd*"~0BqܥuBYk>Ǖ NTŅŽOCXd[IXȶڶnfZ|Q5t]fzUcnyP$p;g5pu>ÖY8و~d!?qA#=h7|Q7ɱz%8Q.ɡkF }0_^nZp8B* k4}'`k/=Ҙ(௽S{L"r?a>uշMo < 4f (^ѱbV-I5~( J ¨i pdm(<EnZGW*.:U./9O3-&Z .zUP+|1f.q+H VzI(5 wr{.gF3 qQx[Jgmw˳"DpQL˯f'lV~dBijv-oorGj~V8<*f܎(p忖ЯRcȊ92ʹRB\9-nP.Cg 4 Rm >`Q\ ǹ(=8 svX͉2Hqv7(^IǢwZ4!wZãpD5< 5XhfɆ~۪kGM%-p{h8"T WiDK(bL=ŲaIrJ/;t_^dDnWUq9䊘n3JkP"W gfշ?d<淼 k{ȽfnE8;`b;L,4mbDLe"ghxCۥ^6Hu҅6˽ k-󀭡tn0Z$nSfQ#w=cu}2;z)ԍ"CO&e:E>ݔM8 \/Pą *˯abHgg $8^\ :#Gy qB $, A@6]1BQF:T!ÜY @odR [_UQQл]7 c#{j+֘+S.A]F ;ynOP TÞhX`5kXo)s0f_3KD;RdQO#$䄪  ڇ~ȵLi>Y]yEfѳ_?6Pvhd`Y}wPE9 (D#w6zd#}ܔQ=^۲Q=L l:XءY0CG_vFM^>p>lyiޔj؛Uw+v]aQߌBd6O080jVyt@IՌxI q`'kjVYrTE_igO~ɮ PBSh0nQTz&K'!nZ){\*@S(K7^WPNN8̝әS]O꣙zW!]LW}'5K7vW_ZO]JanHϨ|ͥs/"2Wɭ\e j?tFrx5]^ǔŏ:6F3AR!cesU |e9cC6{KO{ZX*W}"[@eK2:+E-mh'P'K W| :+Ԫ$ˤ83v'ĺv.Rb0`\I+5 юj%h:Hy[vpծ,]Dm,Ҝ 7#\`Q&c-Ti% ?x3 >Zb5(JiÐkɰ9s'p6X(̞ՅoP?p:U{z %yāska}۬d\f®ysv7wSrA5:^"E7bX=:@Av$}IF尥s?juOa l;!),wQ.pk4)`Q"] uAGxFyHZ 3NQjפfDϾ=+)`&9EhkGp0➿mélbAq,U\žsl mRwEOq/$ҝ!(w,ҀwX? "27;pxL 2qOEsJd^! ub ҽ. !o&/E_1ѱ k !&Ax'|Yy$T91VOtЯVcbvp$ 81z~$ HmerKDyp UųkYag#x^Q+Qk3A(${b'ൽƎ~%YJhk}-ѫUBq[dVƻ5<_/L`rgyN)~#?ƺ aq.qg;H[Lk4 s}B:,b)pw3uNڝ0ZEs)VwQ,@ᅔ3RKzNuaᡋR2x&Ѧ|zWZXJ(^6}O8?]0:RA 8wJs>U J?4:`ٴVO&&D)I; $j{bkA+љ#p&m~J0Xa0!\P S Eif5k~ƢBTdBt h,gP]k ۼR5QqIjx/Nb0j5 ͍GFk hLjpˤסP$ƠwDBm3̻v ڧa X(+0-7j+ <v+'c9?:v7d'ƚ5\ Й#<~P[py'ΆenßJ^yBeYGKL3j "曬Hg2s^&:c!Yp%V48+۶"M>? ы󗝣cgR(#:ŝ7\spcn̐pt~Tŵ}o-Z0o{u/tm$.C+YaOV$(M8ĝ*4bh))Xf3΁X! T0XIЃ$3r#S)Kkl^Ű0WA쩴~^hv`MV^̑J3hlXi*Vb`fY 嗒92fR![ wrI J1ΦCzzL**`f"fuP?ѣ c;a _5TK[ux<In8zmRśe2k1i@S'jdWG2ew)];5eZ(+7SDIYJ!9fu{x5S`+ N$f.=7lnwY %V2ts2\ӧN9'|+_.9kp陹]oGq.͝~hreCa0')D$"C@٩Sb 5NR6wPMO`@%(/Y*^t>o#2򄯔gg,v*>%~$1D!,Ǐf{\;YDEVr3{2AKcq6tU)Xq&&1K8xPjғ}3&c^.3v=8x Ti yLic:#kKx,zdʇyHDePٚrXBH=9eeZlL9'bFR5fp1tQ"+ROeI'2?Xx^ija˶aHkD|94tzdNk 5( =0:Z}M-xw/ c~M|`0|(rX榢@d0VHB6tG%7am2Mc٣%St0̒ IK,~[A A1*'ՇmE[>ǐT˚Uۧ&|]t6|Dzesvz2rH(db$W;9KY~> hC[2i8HUg)#|6hY*`t'=U*";v3R|5d'!A/7]qV/}(')+=c׮u 2µ7?rNr^PQSh]0ԝF\s Nr%(\(XNЪŨ?wN~ozG&O]ҊnK4\jn$Gm׸ h$dpt\F@}˓i_f;}|G}ҀSPg "HLݕ2kL`v yJ9 KR̮QS;tM0p оujpx=iopYԨ+IC%;xU +?eDL,j×]jR1YS} I1.<1bUj7 n!1#E7d[vygOC]AA 6QVu7Y2A3}fGiZcG͏vGOk@VOi`R]2͆okVc -3sG;N6y|`͘iYL9W0(" ~@)FpeߟS`%2TNGsz~.T׊?Cp;rS3Y<}^C5ɇk@IM ۓ߼w ޟW;?$,;` 94;@ `phrA #(JRN* Bolgc1JTp C/ td OԖ-2^ OvNwBS"EBgSe58_Vy6m!;vBA;t_%Z^Lo˃&_mDb`8ģ/Q rBv c]nu^- pX4gUƖhA߲ρxqݞ! ntZ8`JYΊj>Ph[n)ˇpotϤz W]bWZI6~xT؝U`8}Em?"h R%E~:BF Xamp-"@g~Œ8~)AN'0!1="ʮ.ꆯ?/Dn&d%SvNkybqvl^^h|`-DcB5c֝ČҪzKL"fw !mǫ a>tRA\9 lE o$պwU@{|8]CZ:NQ>qq F4r̨sޟ^k vwδIeҕW‘/B6'LMiԤN_E'CƉpYhEދlx{(t*OlP/]hSw,4ۀOg ,2.-=M78 s[|j "Q*)K%xFt"]6x(_5Ҧg+h&~=&Һ5ƕ6F D !?< oˇlxlCf?_;zHմ(CW EnUÏU/`56V0WqY nH{̗e OS\Zc%$J!±`Z# JQ!1L 6)p5ɀ he قXJ# bC(MS yX]&Vn8shs侙C6Ҕ\e D#MpoUyrOH" 6O6C/3k?E xB',wQV ɛX]Gv$<[pEUuySb8M=wr;|Q2kP3:;m7M2ݗV>YRCb r䵱zy`XAߠy &]F⍼n*XIP),:@ڀjCg&umkysK\jI?x?$.+/2,R.ޡؿ?MX̿:{!ٔ17€@+ǭЉv}Y>^@:1(wuщ|zuekE”s=J$֖ 8jr"j&2H,YUZh~a2S|!%jW&4? kp0  c I▲ݶZOnn㻟hka,9C{>4_DKoDV Vi[kUQq[؂i YFHX`pG>m\s#6+xPR C<>:h4G%4rElDpjQ'=.u齫kUG/Plm 1ӹUk+=$743jGvEp,-8j#1kԱ`/|ky/H>bhv6 jUnhJ=ei[Tm M9z J;h0z [ÐbyUM.vMXg[s`NgsȘFMEeB~ßUx|y chM8ff3x;U5,. HAec/FfGrr҂#k`ϊ.X ~Q#RK?XiA,wf.WOrIHPxw\Xnge~=&jiRzC{c_3 \}BuvuF8UpZ.^,S5b[OYszе^eo!ubtDY %/#YVzn}ɥ[$ /93/32 2tL'ْHwԗi؉s4v ̴a-wL_ЕW9&Fђ$[3n\ ^b5 A{+ǹ$!OkؖV2U:Xdv;::Op9ͻl Bs]/(3]m2ޑY-Be~o:{wj"!ê:/vLiCXabUd6QWTP#z$-̠$Zg4:hNK9c<^߅1Hҥ׹; ^)p-uP&ףnDEܓ+kF@Ju=Wfdmׇr"`N!,r]=7˖4FĔ]V{E\4]xtA(҃ۯM'}@.h]6dr"хrzsYPHxPzzh:D+ܼRTn8cl]: ôF**f[ `P*#G.[:˵ Õ0s4o%/'yBӇU}  1L9 v;:86jx$C2|$ƃ{zq<ޙR3Po8N$qSEAN'5mBi184OFJ"LMb'y@0=F#шA׼TͼZ r![tTL7OJaYc@8=eS 8:Xha*?dConp)k&ˀS&"x&[([R`lXdNT#(q(3$'NG>n{6AF q-^Ux. V BoUn_4>*=)-(x5kʀp13%.-I*╱g]r\!嬉WD99۾ }2#\ oNy$I%'[(!f~V}t;sY1y;!! R,fƾNvj F}%>*dkzMI|DЛE6 iu#O/Ue.5~#F`o|l6/ʛg6 P:/БW6^_%. V(b8͵IW8E*x T%7!(spKels~| pĴldT7,MwAM$ެ[x\vLTy79Ee=$}ɽ:uYטqW,5}:)# 𛭇%KYuvWuyRhu\rPJrM(s!H"߈?ᶄ\k)% rfh#,A=PX\ _Y>ꭖAwٌ9 ZB.8)}M9H#+q իeX~͒ L -v9^ڏ/ݛ 4(wG  h *ݣ'<109_ N4b;0ׁ39XAC. j~RaiWo(<ɇqCUW3BwoS5ɠGDhZLϕ+oYΖ] w/U+Έ-M:MgU_#z;s%!x۷s2V#5tzM_H1= Xͥy0:YEv~ YgtŞ, ?eP wz^XA;YM񣵋_=#9\F0{(hM1`,:7rBX0,tk1O;tT+'Ɍ\SYZn'xǸ1@ 5,L(|y%~"jzyI,4ɷD*N?d( 6 Jv*3qߨ7ݱO/(:?J&)u*u|䫢6#UJ!!QV$:>_1Fro!~@!s?ݜǴN^K]`1&CmLjmb_(bŁ-zK8X&ySpe`g[3zP/hDhL0_Nsă$uV=OiX f%5͜RP.X鑘F)ӦMGى,- EJ7*3M,wPQt$Ͼkt+8<1Ѓn֭=gY O]!k?˼ąɊޯ|g_-,HC\wkivIW گ|-8z Geİ.:-zg D/(= W՘ڈ-D#I^]c:*?f507`6gyQsO*ꉆˬDQym(eᆳb sb 6]`( OU=X.STjZo(PhuCVvv~]dc-Gd)` <'=ViTefA2Mmu8TkGR0¶~fbi'ƜI<]vP ٸ&_icp0C`XdrnDu{#SNWKixiYx+ۆ]">ՠi 6Η^s!,SF@f!3[(%\y╔Г"X%mx3\0vAE4k]u~۩ v' q]/6.Jƣgk >0[maN5AGUR;ȟ!aV4t({0~n`a_At)U!0kT'E*8o5R6{qiB|;4ej+Y^-vu)W 0mw̃Ǩx5~fmxJcVqÉH)qE4XafXe .`4 s|הL1t o6xhT o`O0+! ]=mu erhIڴ-X .]vr8sʼ(BpI^`5Hd?4G]ArpNE],jxX( ^[f";{[nmT!f9:ͨf50 y?=3qYZHs&.@ל,' N{b VcYŻ^,ּuX#9+dpk >klm;-]ڴHhxTACÖvO(J&JmR!JUaWvrRpc-UL((0)9R 'a˳-*UD ab~^Xm̌x\W|lk=k(|g7Mڤ7, v`0xO3$eQ v*X;XI v hE/%N_0?:1R PO|ǟM1+͟#/R\~iLmJЛ]> ,07U6|jHbE])܍]&Y'`D1X_eryr\mNDxgiKдgio+zV[ː”=KG٣p)|d1ʁYH*'jc fhi\k=3`)+sq;1pdj6[l({~D=,D:{ٶ[W[;>!E+=Xi#(ߑliVy1 xLXAh{l@}~pl^<[d#cKi:0jnYc{;Y6k量Dзѳp9HDrݷT=5j4F}0< Q@Ԝp+9HޗIqO5 ^BlW~$li4RxG(V)sS^Rm#cuFgV!I]4L3 t(Q#$muh@XfjC80h#\xFWVLQR4G UGE>ݘ 5ߟFdF!ٹ~*jֆ;G#YU3L,7h K]̜ۃ1<:,Y5 =ع}HG 2]ՐGi:ޱ6K:zcD3RZܠL\8(M뷼Z/6drڷ*djd}"p |Inb;6M:A]B#3~LBqʅiP &!T} \.z2k7]b]8#Uз~*9-l)ÓLWWR-unf,|,nk" t&%4a,sǜŨw,dًii+*3Q>S0kҎfAhzr, ~Y֒}(E  hTUȵ\?BVBVȔXu2 a5: O>ؚ>Ϗ1pF,U󝡤aNTcbt`>C?6ؓSKҜ i nr2#$hHKx0۰P!]#nU) ɰXf~q.fVx;nQ \Rc&h]s5MF] &kJ1 1f/̒U$A>J`?R<"Ok D*$Aiƒg 2<tyeQV{~$azXO"\F׌D3Sk]LJ.(:i9?h؞PeGнCVDs[.'!F5Ry[b.턡eT.u^N;xԯ(/eRo`CmC"~ x=4Sk8sHjPOoɺb(,OmxJ4U@vGSEC,[}.*P2+vLU+Dg(%$p_ SZS~75c86HGڨZ@d?DH[ܬHI:41}*͊&mZ-J}7XqI$B/{bܐ!Z;NQz{-^@H57"LjKK](ZF''THő]p߿SEc#"K}{.D=K#p*ԂY_71a fE(yU|H תiDR&zh*ohzzw jdUҢ86<0s̙8Ldb`ɥ471FмИeȶo﮼-/nMhIClRFlrhHI( LFGE]xMYEkݝOZYLC.g @@[Tgj0LFdțamz#ʢ`cǧଇ{ƄO.tt7Խ>w k >i5TZ=tiro.lvV>^RpZPbbK]{T;o$#lBu%%߄K ?IRj0m?%=;q,E49U$1H2CN@̚_zsՅ 1rժcOZEU|b3w+/IaVWVc[b* p,PM $0rmv_iBd !ꡕzFy $ZZY AG%zB:NܴUDÅmKH2,܏.^r^8]"(/z;/xx p~V߽y㫀FFt4z]- Y' Gyɫ";pE4 8w. R)H/'ʻӊ:?:j`NO9' `nilF>T!H*g"{)7%Z-1 0UO$׼:(Oѫ!E5捫L7T X@4xleSA圇~ӐH{V+eb{Z"7-Uj,< /3:uO/YɠL^7jG3'X1r#n@,OrQ@NJ[`SgBwH3e?b1 We4m^ "Bo26+FPpطd8i0qaM{;:b! Y&淪ko\gX䤓M._S6ʞpzœ*YZr|+EGŶ HšME#jYh o9{QvJ`V[;)@nG?\n6Δ%oy&:Y;6-)UC(>A\ӉRN㘲B"HT)2U/oa rG-7w#IBٌ1$8 ?0;+HQb**KǑXޗ`t99cbb0IrP[/dX"l@1)v<P*F7c|%c6p:6} Řm{3ܘ;)o}G@#pd~:KxG[ yPC?dy$bݝJv+oQm|zN¼bw|Ni(sϥq<:S]u̹l{rKU>%(X>Yc/{{GcY:ð;phuW"6*]g b>Fn}-wy6Ah(o9Z 7_J9h=/&B>C+w= ɲZj/J!񌞔38Zu?WrQsT5ofXs0q,`^E$kdTu#8vЕqq*8b>F]/ޯ4,',0oׇ2!hPӋQJ9#\C<`=Ԅ _>lCe<٧k03J"7cyH|yK= ח@z2 }8ފr5hP>z skۡѨd3@-_/Z)4Wl7 BĦ2"IpٔthTC3]hi7WݫSG&1G<7:ov*Dq'wڔA{5U{A\AHnIڭIUbo&p"wU?R6 źS쓔˻ 4~\n#%/T!8)=]otUQ)cpx\_6y?x婒4[}w-0Aw=}si_dY[ ypį+;_<]TBX[A҄=ZT3Hd6dN5$#enDGqMc4\8$?K@8[Mag#/7^qR?+((#6d|rcsHBܓt?#LN3LxݍEgDB@i;k8aNm;!pB.~Yi)w%wKmϳlgq]DOG^e'$:TlUiM[D5U?1kfՒIWdL"R%Dei<rɗ' xY%=L5.wBZkKM^]o2txX׷0en"CE N0UWcF[jgCkl쏞3&Ac/|zy[& |/' NhB*{vm`$`2):rA.sSXgfglSOQyG!߭-~۟D'F|)NJt/qꂗmiS.IvejT;5ҳdA1F{%hkkm?Rl`Efd{n?RAjk(>mnP㗝Fإ-AiNxė2tkJ*"5TXu bWu/EwEb 2Le *cʻj>cd4~̂p==9V_)9h5CPS K2׊HAxKIN "hOTVޔDa|+qA(iw72B'`50Dr;4س/KdvºŹh0֚# 'A:,x᭕<6o5t1%EInjyyY Su0JN@#:qP 9Cɽ=8uO`T- \! `V*+ռ'u e^>õ:/fQ@G >2;L=\LEf ArZ㪋͏#(DdBf/PA卣7\Q_I 'QHn5&5)3=PGbBb5$IXekh`UAL^x}eÚen ϑNt70BE:Es|d 2(=a'nb&OR[ ַ<ЙMͦW#uk6ak]?Ai;.W㩳~1I|;.hwL"˼rw~-(4>p1'..|`Ru ;N'@y`5EnSr|17ߟ%LUi `I:ׁ5;Qj! x;`b G03Af$*u;ūT*v^ f {pqsX! @1^*՚Uʕk-_[OR ݧ_XFeڅbbcAXwG8WE#0>L{TaE huHj)y/H 54r$uPP[E|½W{1)6f/w~ކ6ߑ2/I&Re<ˁ$ʦ4fdW;'?9 pr+ڴ|JHv5~雗ᮢDf W *bxڦ[$F=Jt/!0mAr?TRa %{?ʟ}3f2/7ND@+dpF45bDo>:g,3B8ա38La@` J3B8jL@Qh:/%,H|qyl,K9 }!N}i )jyTqf! c?Ԡ! 8WC7D}'x뾒?bu}Ҫ:6+ui$Dd~o _,6oXw;"ϩé`yͨ4ټ[.`ץT9PPqNҵvEǥۆK#=4?@)0i c4akӘ t_vhQv}Xa>3x5GO5Nd଎VXL֧so_Nqr6AI..UW' YF05 ލW"SEMuO:pn%aB=E˕Dzj`g4ݽW˳2h-i'q`) nƢv,`H?~6S>Ƨ`G]3/£Lk@Wί@K`qKR2!4K:VYt^JXTx.0K.cЧ̍bo2y2aV4Vx)q NBd` ?i}'Br-]~@7*Aζ#zs,2nuE[32"©9sb.:ZMUi-7*]큣OxÓޡ˦V2yL"]%!B;Z/%{naypPvt-M"BvQGyK497SO_tXpNJ5GT$T3,L?͂Y0`rU^1ZRg>b"+84 `+${.N7 ]T¤a G]$o~}*Y@xc"[&$5-  ׹6;0"w Jl l^,Jg\JwģH%y.$ {!/7\neSrP#ЪPi8M/ozNhvB?m|Wm^p@QٱϙiEFVc=@Wӈqgy^ړ:N}C2=84b?$.Pgbso8ã;2Xvu0t1B4xf6Ng_LL5&dpFy#=%1u1̓EPT_&WS_LW ^1>yy|GywUk5 "m$ ʀU,x*60Cٟ0:2O'-`_UCڹ<[YU=ˑK3s3/sC V؀.1d76w m2lo$bɐhwj?`J, |L{l~S~:UYB|$6 zknOX4ίTXia@ԋf[ԛO5M%V:L#HыM\f tz4SGK4Z0LZ%Mq䗉OsHN;n$iK_Hш5nA/dJwYLݝp*ǥC1Ŝ@%w~;o:[V-щۡRC#{ Ų#KWfYo)ī q@7[ܩʀmryT>]#@i@RteegT ]~ݬw jpcZRz\|}E$"DΆA .Nx;&Qw}}h\O^}#sF"z~LHR^ ў[Ձܶ RsɜU^RSq"'YU) A))B8W6gFd@U&$mA.jO# aUS㫀3HD@]^f#&w$,P}CԲnٴ4&qry bi<@cn!V {_XQ [Uz2}܁aSC]Be:Rt)3UX^G?:~1S\;dBoDXs4FCzT]6iўczxM H2߭#%tW$k~>ܞ8 \BBRn,L ]Ķg}ƙl*<t, F;v8?,SPA<]fP+.IYM'&Y#QQޣjĺeX X88IZZ*5"s@ ?Ȉ`!FW1hqSwO84_tpS=A#/1FǗm9m@I]pAWlt?"_=7"B΢'|2?-89[C\u cíJm[ˈKdfxC˖LSNkCu`[L> 4M>:-.'oO-WF!ɓJљVtI%=#8Ca ?ao$Л~/mYa[^cԽij9g3έ8CDR~I;ˎE${vp)ku(/p]J1&e'IYj#|S9Ž-64QpIIadyb !FW"j5LomWڤW1p_Nd@f훚bog[Z%Ip~|˟w n QG.ǐFa1K|gEɽT Zwg Ve^bEGh~.8i%v;yqJ> s,ߖS;s\]HjFK.U|d/f"H3OWt~ʄ#6K<[dK(+6 AFVC6:C=AВ5Eެ܎M:_b .AѯSM0_W@̣^ZTp84 ~Z4%'&6􊅦e  125+cj X7mCkF_Vx^%SYc(;`F4vf5X7.r|HgyDo!!K}$n` К0p tLtQ$TD}wOt!+^+twBAdli t*i'kSο3@/m-+hmdsFV*xէ"0=/I>i?m#UV}w\Vie?|k Hy* \c=+cCaFZdvJTQ>/jGa׆. PoPn 6)!$^l][)Ʈ "4? 4@0ݽ?"42> BTu)C> {ݓdLw#d#We b(o47 HHvi' g`.Q@}$Y,|T}X_$2Bl>Q.V8(254fu4iepZ81F(*' Lm"!zIvHi*@ .[AzJrɻWt[M6Z|u$\'{!np?:޹BҞaL |%0DU 1WEy5Lx7fnȔ%44ϻS{ǝ'9{NW cN -3=բckO.DNw*NBMs %3J~uD >/.Ѯl{pը,3DNH͸7 K圿 ˄ծI,B˅Ɠ :l=XWgW\?]{ʲ6 ܒSawy:q21^pJ}_"ƷnQ9 4edR`"`_9ov#u` Iٶ2;wcT96⑊Dd$*v5~CX4͑UwE창o rWBnP-@\8ɒ^< (Ճ| ;SЗ,)?tGW E{W-DAtK'pH-/V_܊S W $͒o܍ A9nDR!}R||;L/28WjXسn SOs&mr!0SХ0] 9賟y;?Y78LsZ͐L)2+C/,|%V!M2C^ڍ:4 uo+Kg;H%JN〰VuZ"S oܲF8ȩE EpI6jjW<"枟c8*g[_ BUˇ>8 kInU<:wF0_mᘞɦyW[GM)vLxO@ P:5xs+rt{MD2ĩ)3W#,]lS|9LUZ }WJ]NcjUnɆ=\M(dFԭ&PsS Y|E;W|^Lh )Wi k8lI[ *&rcxjhZ k`8d Pkgȡ~r0ۇY= f\XI2 XKr|hFl$纀ك23p㐇'MՄosZx%f(1RK9?2uMMme֟ تy^m5b\ aqUrP25&QxH@Wx!LW"PmtXI5eufAd/XW`bz͝Cq}F)TcFRѾTrFZǗI P-+UŶNeYUh 7<^嚖'Fb}.q;QbP?"ˁAs-ק4I |grZɥD| %U Fxͦ75>F)BW K558q|,cE!G P@Nc( lyTh'6y,C?Ȭȉ8T/=M(:d9hȠU-c=n"W<2fl1yK]ǘ`|9>= T†'_CjUk~-@MlCNV}:NCVoAK? AӸГ7(yWHI{sAXg.8 p%|"A k7AfImTɌjP%-~_8-!h/Z0ߞ @;RJV51@p8G"o 뱈/E -IW޵\i91&GX*Z *t QFHY2KX4;:G#8tt]ݒ}Cݳ}0|rP'w7mjr銣qk Өg@_!wt=:H ˅Mi ]W7td a@ZeQ*;V|4Gv)$U Qyt W@P:6.;+ijfThSǩgL*h}T*_*cFTΈcYm3ť%CZs4czZ@E:~/(Gm2r!BR>޵NQJ"0{@]`KZ@K}Q^Ʈ. ioN }9fDEsiPUV]YkuaZ <P셼11$cMR9+,{ZxlNazV|{wD>{"6=pp7XjYO@wHd"5N~KRpCџN"!y$ aF4N9Ka7ʄяNXˑG,M@d3 5wp=ʡr!]«lV?ahQ:j@t>cL ,ZGvZyGb(~{q{tN<=<@2Km"FgjWoq\jca8UL"=~.* jM(;5*KMG~&Qta2{S"?_$Agt"y zG cY`BtՍ-B`[ɥSI{2iѴ'SD-N{E8l8KU5 pVTO-?ծ&%s7+84\5Jʬkf{ 62Ӗlr?D'(m8z});ߚKQ j>঄R,_LuVy :,фeXڭ5l0IU~2>RYG ZTTyat7}#%VC.4߀0.a1W@Ԭ& JkIŤYf;\qXP2"?qmVI=m멘 K`N!t,t;MplW2̚:<  s4A^X %`0鶷2rЋ@T"~w2I޾1A5TiX8ͺ>ΠZy4AY[ԥB1]S|aI1gY8HF;LYC/n٣(iPE 7~†- 0QcU+E*p3hd -L'%]͠t]}0#2}O6k0b `h@)at܇:dcQڤk=23 QCd/~k6 =%зL(AaW%B0M 4ےzLpo[iwym̗Uik,LK2aZwBEfӘp`f*mkvExbqiZI C2|HG~,Yo~깉ʦ;BxrWLڛ"h~H?Ĭ(C!UT{©Mۃ F,&fT%}o#qs}sl9=,QyOZF۪FvG{+JbjQ"WD1ähh-V I;,6_3SSm$}q51׉ʩjFʔeQl%;.Y8Pv;XQ(x=:Y^^&3ze)2)`*1}U rKt3qfwf-NT[8vUiub켅'u/}@(;VHn9v.txª=ȸ"jXۼy] bXS%%5ho&'o8NܳI( (B'!F_]m_L#oi _=ŢЅZN)]mEX4V|An%5M6< J)m,%f@.> ίghj%"-#8h'2MR+ZZ KτRW9]ݟ`- XgA#2޿BkE]]&j,װk/5)p{0\5b9-sɰ;n ;0Y7{<([& cP=9V<ʟ9okh!g Gt 7y\i1 P QdbOxU +:Z|Vʓ&L 6)oP5ї6 rZ:ŅU<y%x"$ ~؜I>0@ }9G*UPh5]v!Rwy 7u}z А z4fjOy*JR j 1 5d1]G݌?l(PB^9-(dDAXcg 1ڶ2@C&Rrҷ,_0-喌7K9VC '& }׍cdK0d+$ /\|zfoONJ%@۱[KU#Ȓ( :TBX\kj:3*pÉ')a;PpMSB&tȤt"lkG– g^H#ϔ!+2cC[Ӕ4<]wIP OfkQLeo Zb~Qp}OW[@2CQ)8_7&|á@e"!JLL$_Gc2cLPwUxb23/Lsw2sQj3~0e+l <\1Q &`9QvPE i&^.MGs1~w5t%*as뒺QO6aSMGԀY&any2qtH =_C{wxCP16Q _W^^nZئy>oHB9EY2 yS2evMހRVwv%'0<=zh1GyXlD3ZTb\WaF pHU'vJ!MFM(ut!3c̝"GGgX>v%Xڎohv.?=[oRDh1bW*N#Y;F;"𽫜N  5WܨnРNEY ,AI3&rvC-w*HF*b'  ܗvtyVc\[60i18@+™Jr~ڴ9/u W}ʿ kPkEnzK⛑x+(]B9´)C _=+}C|)Q5mX|t|9``eG?^#j og"!_ '5<)I&1o=I *XW"Lߧ9~Iw}5}k}<֊v#8 l/GK^866Zx{ /ɦ yfgf}#"ruk hm{~+P3u/o²|sR}XgMʬ ?K.-yU%tL.C1 G/q6i0#_ 5)XXmϾu#f@ocy )vOf P :9u~ƙC}tfQdM. VJtuw4p18?鵿0֧n&<@ @mziw+*뇹K!l94V!4PÕ/){joK˜Wa>eb Nt~iiH-Bp'EՃ\""h3yB 957d14U M>EcM藶vw_> aGw|]MBpT 4AGk9b}MO $̬WWd /,Ѝ {֦(&o  p1a.Bzi/JhrT5QS7/ׂ"-VYy -Qpf!ڍi ܂̈́lgD/24-5pDhY܅_}H=|0d֎#NxpyZ"虷D L'^"v]oHjTa 6VS=HǍ֡ ۞}RX_#!4E!,BI.Nu&,#q' =Τ3{\WpHy5OPȓ JŤ7vE)|yVV2(>L]ڜNKH3I-T: Бdyt8K_ 4&gԢNoQv$=4b]!H5zC6%W6q?'8TlHBHg:V* <kȥI[q/&mюquFzɽ_!4F{8 cK~Dؤ6aGΞ)YHfٴ:FgEG#a`\E N#JکW9 5gK/:PHU."a8NW7k;U_{Uv_Hq,у*Ќt: '=ZzȾb;آZGb+[+@*X"vW9@QZ< xCA**r̒}I&a\5xb:IS>*AoHQVy grlXt윳f'd2&|W_'^XK<~%$J;lvF:F* ,&`] qϏ 4tĭ)=]͈WQmrr*j& wxnдS*p<ӘꞈȲ˜I+FozqWvwl g`?siqZēB9jF5˯6+IvpjEONED3`"b w㢔x}-E˙ېrdFNZ?ñ͇˝5aWktg]JhFi8$^f!#x<}vY^X]LZP \Rs֕ܮ[2J_u[ɝ&0KX-ټYYys- ,8e P_rah֝yH CMTlЙӮZL^BL"cHolED8؀G<FYRpll5LuqzHC<!k^m 5 M ¢)w^dn3 &kcA=ng=(be'̀\נ$sRz?tҐ6?Kq&߄1T'ngoReh%؍[Ge?u|65VPhb|0̧+N8=IKωX h)KKa"qL#t ?xRKͬy 1s^#_`'i"vD@ǰ[PQEB2)W!Cp`Qy͙K;.s/Gs!K3Й8[ z@!Q!2\KzL%'ñ_po",4rQñe7b]" BzXkNf*dnھx1)3onna0}܆˄T.kMq#ެxXvaMX&eκH$(BXǶr_dWCΓS׮e[q/SA%2IL6r{_g̎-~c>"+yo4;x%6~bf )KUf3`<ފnmi3VOpTrīsMT}tZb8ydٞ(CJE-~hIe΂e# &q/_Zq{1ׇҗIaG 'V&\!x,b _rU@ױtwǿ̜ꫢXQ~ ;G npg})2g;Kʒk|:{n:]grsDV|#5k i\C ypؗ)O(m]ҵ,K-^ȹyan w~H-y62Іn|'i-Y] tr7`ܻчQ $%5 ߘpM6_?`DV~N2ZHH6)QYJAs.W/Z|v";!qFHyUt$;P<-^fa$T}Ĩ#y6NI~$46ŘssEm! ht3{U1}UX8d>RIta[\A\UqVC:%382 3|˂xGEبo-859M/=4¤|q4K)!oΝ-$50pBf`B1ҥAҵA̞D q][{prMR[458? Aw*$ idUKcwSkuKgse;0POPy%nQ<&N8?ӓ;3 ]T4#c}`hvH>|InPC)tM(` B\DōmjN6f΢HyƠְH=O5ӛKar{rN4j *ԠsH-mGixEp25[OL@шG `*M_x&t AJwoi]u7鉣]'"tm%("ȽuYܓI!Z 0C0XVU!hUEƒCY,i /gg~jQ-L{1̓3exlnY|mRH^!;/_Kql R`q֘="&;tktHrc܌QU֔Cw6IOOFܢU`Ā] 6%rȶ:W~YOWɪBrL,??qetuV𾄬ZsszK&(5 B$e:UVQ8F ^m YYGS׺g Ĭ2)U+Y.6dk>g8?/u_7I`wv/EVlIC;HK"M{x“f#B,h.&><" &IXO1'"@gV;2o(MuM=&H$낊85&Uȫ@}4 h/Ȫxm,'w Lk骓,UܶPE?JRakNumS7$須w<`4}]Bz2h^-dJ*4Y<4m|aPfbؔKG}M]]z?|η)'JmWGanoyQKTv+B*R˯z7TSދ|Tz6s/|Ų.[K_/R +> r &bNǓW|LǬׁqˮ-Epd4|Y s)ψj|\?65ݶᬕ"5o1|(CHF;ԇa0LïۄҬm/w/I4; EVpgh%/꼐&Ke /uӮUY[ 4TkDVQ*O蠧.&Ƭ2AAEa˙>H̔޵߼g,}nrc@@y|⿀cT82kG>Q븡PmKJ7ͳ~X驔Ȓ$Ts 5FF}虠6Lzx<@ՒnT|$_rUσ@Pb?"ڎ!ہcfC06CNO}.iG&Mq/QN ˑj-]e%HPGcb{{x JJ!`]ō'lWk  =חEৼb6 }DS}'C?'Zg'vEY5ZuwJ:鍳5];q;}؝1NʓvaE- /dnF /$ E^yymr\fTT[ϳD8j#U=\_~QeS#揊ݖ2n~i`ު_#pfCnL]yx.1eTí p]'eiǕ65)ӤRKԫ׺M&ӍA-j%f 4h]]IH0S 峄7$^raޤm\\јKܙIC  q[\% /NX黉%^L˰$|یYVQ4&W£oMtX_e{Dx(׳#*M+9սmqkiH58t\.m8FC*nQb0ըɇ՜ef=jEeOT95CYvٰzZsd沣F{xۘ ~^&pmc2tZ=XiNk4gr`Uݐ)Rv@?p02ET?FӛYſ)\ Q1[?tYn,Mʞ5h,앤>L2v@4<(t _X}`w3sL:}D_8{X)'%\roػ#>3{{ny.Ҡv *EOj" ;y=\d:N9"~`zԷkg=q{z5"SZZAyi\]G_ۢ(W!Wf;wY`m_z$O?c1i;Ȯk7 k((;s­ B6N9Imc2V-JE~j+z'Cݸ@3ܧ0]p6bE@ VOq?` c<|n#~B}ٛ1c>xAbJr(d5۩y#xeΌҡe;pb_ך!X?o5NN =W't#twW9Q(KAH8.:~ .X˷*h.b P|K3'u'NBVUjӱ#|{6M丑ۂp}0U#<`7ӓB%y!P~rxL}me64eRC ۺ>FQ^̸([hbePV%1H8/ $g;rO}"%KU|z:15c!j tFZ4,]yإ"r<%UM12F̤ūw<=:> ?=>46X%r)¶V^p:m͌kz)(XƮ60$T{} ~0|{Dy`;՝+,(p;U +H" %?OTa&iY;"]<'(%1,JP:Zp&HZ Ny='gWWdtQ5Hk@iiήQ뼩Ey*·qNe~PǺYKˊ mĻ]GmPSkPD#5_my<'2isZ&%k$P ?a,tBb9Sԝpg>;+doc՛)H( f#[=Su7/ O<Ԅ"g QUeCJ[*g3 msE9e[+|{NtĶӧ &L MsLPm˶Vn@oZb20i(T4 dE5:3>uT+KX*@׵ܧrs2iN-ZS{ FVAr3fcֺ!"N #Q*Tۨzϭ@|L(16(\Xn,tR2~׃L#y2xg_ v#/$"s݌)E]9#ek&ָM>jʮb(Ae$<)W!MXm?1.n G[mJOxh468(GIvoY=F3zA%?񜫃@_ŨV 'otZ$R32_^hRGjo="Z.GŐ-F6C /Tpz+=\R߈R6]d3 ;se$p;A 3B5") 9znkv#wlm_r ʓSނ}P"'nUȕMihX!N`}l6^ 4 }(p Dn,9/: bt%qx8~ΥЗ92Y!K)t԰cЫ"V$Q6N29-k~= $xޏ/s-%2|ߘ)9Eu1ɢ pD1YX}F;=FRTͺ4tCŊʿς5wH51PՅG8X`Vuv j7g#f[Ա6 vZ)rs.VN}U|N.xwr=dl mYCώKvQK$+uFZpvAP ʹe (c-f16+_G>Y 10q37ةsÃ~K,nd_̍nr7ӟRSj0"|S?ϋߩ ռ7I)9qhJ-$Rm˒J$׋H?UVCzs|ee| ЄyYy gt:psKTt8WP߯YrA~xL /P zdžp\8TxD&:&2mZz 0DP62{X<]SSzwϷJ!Rx<*FxMYEwMqsr۴݃e78 #K24K e۟IT鈓9ژ{Y)N>ϢR0X@ק{bwiKbNs}h>Fe)eʾt: }}g3%PNHZ4t=iP7G {V+ /a7/nTQ ]R26a_MTmRtHyÄSx)㊬$brF;(reۘeI`^h*M&}!XMr|inMR`@š.`;35p.:I &Ԫ}4s-*NClfjxHQ: k@56Y v1E޸I%VvA%'TB5b0o'rHmWWUe -$.ƙ>c覸-YThH|CF,B_Ők+8;׌hMP' ":6/囸O3Ł547;s?bnwX "׹toⓣ*э+Pf'Lk\`) *BIvX4V^#U "Ă H稌S}=o>{y !wwV_|iMcs.ϣFv9RBejE C^@ 7î뛟h=NbZ &P{9F 6u-7 &i>V[C|@K 쪨GUWXv)1{Oh*+G R:%Չ\Ѽ  ( G=5Z8i&ӆkR_?KJ[ڔW&{@j6#a{nN!,0#@W33DF1KugjKy6|fQxف 1,J^P 3>=V(LO VKx]ߒ~$q&1mc}#N2o+=ĤZ&K IY ?BWZ߸!SaCYƟ5$6;,뗆s"sy_xR)N*J>z˘7EI"fm\){tw%gQcdTu ~OXѿگ׃`T H|'"_.i{ow9#pL55nH?Kܓƒon$hnWU[.d<4z\j SAH'WA"j0A DC%ɻJGd[f>1K÷:E%Hom]*Rm[5Q2@Ƽ;%鿥"-db"1dߍ!zOCA~Ż$EB#t-Lz?\Gs9Ƥa< ?= ˃oM[摺}0oG;:^:F.0:j1/`C lcdXP U5$QͥmA=-u=o6 W;,8$[PLc4xT,"Nx ۉ{;*mGS:WpUˆv''SO?x.__G"B5wu!M1c瘀5?|n̰Ӱl~ůUyƾH(C1Y8!OR&c3EU,cIk#O*Bhhx,;{ GT͆%04e 9>oS(!\r 3\9^H-ET LX$;Z(ko0g9*du;r3p¹~E9fЉ)mRcS+դFcٮa)DF Q;eMbj>e;P>q4@䂃1m|!>&x9!x///5Ѓ7@:J]۷R#IYin_w #[.`og(}m@*FP!4b_ʐbOE9E2NW>9PLF8;; Iz>T ["+9 kMev`lv| $H?4bDqp؋S?VRE$wߒr_" 9i/ޔzQ[orfJM{u[!6fn"o0C3`EчۋHkj_3Ԯ`t5 DGp7V[!TN~־Mkw^ VY9&#;GE*4b͝(/ C4t0 Ps:S8{)o x<#ڞUB1<0nZAƺ1`;.v{\! ܗ~LD= hDwЍUy vsvIBmNwDP|clygq i :ifk5~k>@Gm3L$[6śW HWT _^y<ȟQ !yY3&uz{ .Qr(Mݛ G)p~Y "*Y^G9g-'; JhTiֈ0'Fy)Z%`o<4vmġK9&-Ԍ4N^6Q( ,1h?fJ\.uwsY{Cb.ڻޫRXvu셙(8C:, 2򺔈9%#6\ #Gh;P7ۅ79s==qΚڲ4Gߊ ,+U}k#LUi=`(A"yq?ip<^As>EՔ9aDK%#-Yؑc"#^M Ozo  "}|P-?!Ns~͂R@Ԯ45v x_P 6FZkTJ߶dx sfgp#&^0uuWde%$Q4 D,$Mż#DP4S˳1B5>=`ʥg2UuQЙֲH~l,;`` C3O| dl 4@oЁ!)rNf.qyDZ;]bZtSЄY0 ~h/7hE-fSzD$r=ԿAN/$0*0OPv0{I@tĶN@&W9&!}MG"2u,E Є@ނV9Hm)JX5r31zwȤu`-gUO{K&&]Umj8{!:_wƜͲsLg#ŭ?fLešC 6J?cԽAĊhjcU.U@wĢ/䛄vt=g)U?[";j w^,5Kԓvadб 8Ucܠ-w )IFxmmAX[!a_Ԣ=/睩`K⨉gQ?WAE8RU3חt7P*Vr=VM7`q?Z~^V1:,uYUy;yz 1eq{?r]xTvnp]fDDt4 X6Fm=epu jF UpW&Da|at!( LT XP݉~*)^*3@NWdpo LUIj+ Lmi$"7Ue l-2~.BNLj̋- !J1;7c t!42y~uZ17Ѡ7af!L\oI afoa]%s~iCaw=>}7 t׮c[\.L_󇆓oLͪw-.VmEf 66c`1800pD)$%11.ww_WJ&ۼ9w(OVY9a)U纹 | ˞)p'HW[ WZ^ ōo҇,ޙB䖠 [XD R:>c_]:k? 6ڋgİ##J0ʷz_e=Waz0a3(:CA u8?!24?;R+ 0QwbVUƴ?Daaa!.6SdeOݿQNdE5Y`S^̣<ǭWl}Q`a@,8FGzMN#|^٨CX(j/kb48n‡CWHۆ9}y_gpʝN!$aH8e dԌz ]wKknY5..MQMv-}ߛuk]KH'0x[*f*KEN$OJn`RDn\%+Ha'Mfi KQ)ѡDtu 6W\1Qooҋ$kP1֪; ("X+[>=D~vخz%"ILnͳJY,#'~ iJ~m@6GqAY)uw .t r„wF6W:)0,#BX0) f;2밙x(2%4tS{1d3,>?݀mGYP:  2IUy@gjc'æHNh톪lOi~བYc2Ծ!|O@w>9 dUWQ)g1w!y6_vJ) l;dLq:qF tϳ@ѿeIhc`5\'*:Ai`"HjVI(1ϩ=l|Ą2Q;aa K3{olbEPM%sd :eL5nR?; >yGc8jj;GbsVIGog!ϽD*!/a9%45N9\QlweoE i*]Ipb4J5j!6rЈrK9vZ |t(\v)?Q07pa#: 'ëb/@m c W0YaT)Iw~0oDC bgE7@jcهC`Wg쬞n:A|_Cm[];ܺ(@TN›N r_iijDu%[Y[Vye/u,,n;7 WD=' $E%TXs֋(Ěfs*:A`?<`Gϵa26l sh:B2B7\Qeyx bcʼ8GXoe~"tD'- ,^UѬoC^FsW-u%ԫYѦK $ձQ%6J&١jr<,$ϳux50l8̆?MRGQˆC!?E|`V,(!N;/h7ӭ$OT.NyNz&ԫ^=Ñ۱6a ^yWR"{:EhV4Pe٘*FjD Fcj鱦{'#v(ܶzKk8ͫHɯ*Tׇ!?VFҦ~RR; cͥZ/\}}.e ( |'t,*ILDDKOiQY[!j79+[5TG|K )B&5Mgqk;=W6`;GG˃n {R6;d|J{lcI`+2HܜFÓjtM݃dR A32fRxf5i5|r1P0|yiv>jxc-_){V>OvzEKT(R=L7}Sjz%r&ApveXh!`v+ q4 Z;NRXH!x|& ܳF2jlÂ' ȥ1 -頰PfA͑`iEp@yB織ƾGyDž:2VCT0-6?#!Bꢎbqʿ¡o6&w8p 9 Ju4|rF*%<fbZ(ě1?9\$N&[`ʷ G{TTNҽhg;&REZ-0j_9.L(}YmyO-#1| \0jv:i#m=L %@bxzvmzʤhiA10qVQ:eW?0gwgiV\ɝ, 0ssQe e豼&dD^lŗ[a; zkc!u84 ԘBHl9[ h5ޜeS5^ʞ.},1p\ʢ9~׿wsdCR~hvswF)f/wyyCR:ߏk4-*t#tUo ǘtRDH)Z"S2gqI-{cՁGTz]c3%;rۭ/-ڍivDPKcC*fXO?dB(q.U~bIpb 9PA' K=w1"/:Z1PyK͐r dZ'F[^`he` /;\=n*V~rECì$d<׵l4ᒳ_-3ISÏ4VeOTmI(dPRC>g2HW9ʣ'4>`{DM!@a'jgKœ{. <\,S\2p '/xPSS@DLCA^O)[[47iQlSM9LQ[<&;p2S-E&bLb դ)?{W>%n%ɭ{ssgxc]֓WoؚD\3$?pTr 3 PEKН[( Q!TOĽK( d)mԷd>HaL/aPnh ,juۺP37s)ޓlVoT^A7uj<-{ ', }IIm}ħᲁGkVH7|=vkE[1@ۃFmj¾cnn=*9O8x(mWPZcS+mw?!&.0)&8nȄ=ABKz.8_iKSy f/{bc4^$|;[qȯKvRJJ ۣcVdY]!i'"hdm5OC)@ЮkfeXf5Fu*;НtOhͤxHZU VUQ`"$[R=:\_SHp>%?2F9B#-2EAʀJRxd]9?Mh, `n->dTjN0)T9|˿.$ZmU@ lg~_珉}!&<مĸ|‚5Q贒u/[5|.d[9;gqA E%6q`OmM E濾mfݮ1˜*U=ǦK#>) HT`n!UQ*8yg9pPIV)\z 2;Ӻ"PLDd@zt(o6~+lp´JVN|#Nl˅xf S4y8Gn6(=Xy= ^# O~shU,/Wv@HrbfWȥu~\`Qv[& J:.+ 96JS,D:Ɖ+hݦUĀZ,O8%X7OO [DXcÅ=i p†,j)70`s |MrOɢk,y+)jXQ C ,i)EAr =YJKZ8r)NN(䞱,?nv|%7([Fiׁf{jR|',M&Ca@Ծ3Furjh 2nvE`]hǏ[@C(p 1zUIGi]hNBX蠌_!,~.Mc^vTѡN+:I $rHl؎E/Ckѭ?ZAx]a|M)w/ =:D?ergH3kV"/}w9a_f9A %hDH H-! `ᴨ`jfCzsͅb c<6 Pgt˦f,4ُTNiѐJ͆8{' [,nj|iM5-)|tLA!5A D8r> crBgfW$‹0p MObNf>%ڙ{;;YOGO!-$dc43b<:G9Wxx wsUhz.r$ME6_O~OiwE[C (ʥ+A"//h_YYhYt`.zLgز;dλf~6soD&m@1YXy{!uF6a F+}-Zy~lblpvaai*;qN^Zr$)th.u)%F %p꟰T|5 il϶@[ ,Cfv;~d"Bvũ{#=q|G:^HﯲMvFJQeGa&#);}䂷>sRe\c/$DhENʗ@鲋cT'ng&E>):r`W&k+&ZޤVIQpU?S[GK!=>((Pf0q*O_Gs%#$K՟ƏXU'ދhg4kAIhtOZmڜ}LԟxuNͱKJ7+ycؤWv‹" /"u&əEOwWkp ' F!ϜX{eZ.c,5(|11-]%GNs9p >E?0f$QHJSLó+tzCt^ ~fuzgmB<>&yawU1hc%32ߦp?U"T~r0kO*VmsɈ\cu#d%)*}k;;zUïv83',r^HPE0Qγ43޹rNh))7wqآj'^xQSYz)K5; 2hSxbW0K+zKQkv|q3*O/sP*/:P G׾H[8KG(>O{ĩaxJCƬK1ދCImĉ#S8h>n*#W}Z(8FCApjm1'{3A!I& [T/7%t2~FbUڨ1t?QNR +v SvL*Ioo'(+WmiFzOzx J0eEISxܱr)$r=0%It3|۾vN]\x3^*zsLݖTB޾lr[Õo"w Qb*KƯVzQȉJs!$ Y.+ #a z,V2^|8œ13 2x]݊lvu +5}DL\0Zُ 3PH~"yBۥ2UB?mk'.UQ?$ct4v_p 9K<lxc琗KR' $(Fi͖qV癭㚈= fr(|30-H좸04T{^OگjP.{s &pEh;1__L>K$Ǽ4cѢHBLOZ6֢fuzF!~| [YK)r2[Q _D,0Sȃdy!h'ˀmO%P~#1 2z'#5p t ,pi\s"/N?IV,Ut-4:pnEV9/;7饷ρ;єI-b;z}@EH6Mݡښ[MY~)3ˮHUX\6vVh7lTc6;: #7P Ma"=m(J%@kcS b ju#3]y۶<xYzo7B^jz2qp yz~N&8/g ;0KP?dG&j\jeQlgR쬾d^Ĥ30lO8w8T:+ɘe:A!V&琒`b>,!/8fC:){h~F Z'w/йġZ0Ci_nnCKƎ'JL 7ᅍ"29Y m_BQ\Hd?{%j0HEiD=`6S҇D ~>%D2o1Eu ō^e,dioPJ:^kg Ok]8 )W)X5z;c|I|tɺWBiz܍eaU/~))s EB֯ՐwJGׅpr]7\iq'#]@GABpܶfn>:.D)?7'"ZttV&[ 4']-N,_d=a^^?J{wC3V%խf8s3LnI?9M|(x VpyA!>uE DWaU! C2ݩ!!`L1O3vj mgHs[>Gtyfu A]gFRK6?>1| `:=ZA]>hZ.U(ui03$ǷBP’դ$ SovW!ڡ7By| vțX;r{ >34 wb`aj^lCo][J#'cuAOil[W6d7?NQ*W.G}۔sFh* +~`|[df(hK|tQv#ă?GDeV^'=$G:һ-JmR(gҊy/ wNΓh=`0S/0ƋR旬 \%+": ̞YOlآCӃw2QP e%\gHZfY?{7"@ ^&sJlvz˕iuRM·` tJKH:FM0CD rcA u%xWk,^IIz쒃B|uآeʪkkZO N_\Oۆ_-AsgMts`HIdPp(耛u*\Ksj\i2n0r8f~9=cڸdN.f;:anVxj0dn3vdOm۾+*|fJ-d.wtITܜTjrO±MZlt`лM; Z,+NT[~ ̷)|' `+gy+0;묢R,n׉_no-I*._ ]`*~*mC# SG5Syd /mmU9} %TS+AhЇ1xLY9P.)0fj@0"iSwg\PD֙ T]CS_;=񎧈\(d'UZcc:"^:Rzl˜NU?UmHJ";ǓE5ǙrC)X}3Xa>=p}ԛ XUrɢH)C]2TReޮ&9 K9V~ob;}dӇ:דpՎHJJj*sʐKۿ[״HB+/c~8Iκ$V.DЖׯʵՙ@=ʪs<*ԗnӭ cB-oN>} o0ԦCi[?О.G233!b#.WivSu 5C0xsU4}}Mۋ*y4$Ra),8aRpRzF{ V uu+yFŭ'і(9t!$Amck5;h#eAupIL6]XոjB>&'b,.ROTYiJnIU !?zC@j}ى@iO,jf/ۚ3p8QS]ZP6m^ #:HuL0Sv\bJ Ͳ#5_)iV+|0aC2}H`:Ę|6#ʹB*s^Z\5{0 =]sTfG|O4% .}rS)n  &Ɔ쏶18/UAw@Q }Q(L,܂vxޒ鹂V ;/߅[, YQIC^7B62Q-X{%[$6 *(/ faqI(Qn#&UcIA 8pCuCEf*ťr8 Of;NVjKdW?O\1Owx}F"'q|&!BN>њ%KF-Z<-^mcI9g8d/%! "1#Axˆ`;#C] 5*6}DpD#qU.]ou{}O"6lEړӮS98DZK}dwkLo(DD5I6lfZA'HHu dlhe*hڣ1%}dil4/YC ;~/UkjZ)\+i>ϴ%}#( e-T ;CEBɒѶ=cig}ȒNfE>h(7s$ l?EPR8y=fќTtE^**{6Co *&tK&>rSF5e2)[ܰ0 p/ț^ I"9>L bkDX4w&1 ;3=}PфGcHXTuxJ`~5i+.mJv\̷osnjH Pa]Ѭ$e:Pq!(QHC!9jԴpuq31M; L7w.t;P {*bC 79iP2Kmv9mq7cu9b ؘtu~ceQeK,WT5?0b X/{:G{jq(گ5x6ٿ}uxouUj䉐xoɀ_HyʩsɠoEQiAܷ4 /atӍ`+SVCA2B_lm-ΔjN]Kykau)Q2Pz|h X5tH0DIhŋ䳲x}}UWaǾw)SIImGpd0+}ܘAm.uZiu#0,;',qxW1>_,% s%Ȩ#ל?4F^6Ur=̀(/S7ղ@bגÚ/ζ@ pw;&T hcsI3A?MAM' J6!c?KmW'jGR> Ћ]SCT.=A!H;]jQey!e6JgзXρsxᬃ2G>am#~7b+! ةM:HHg"RNFd6 f8B` 9K*($`VSk" P.;8_N *O4Q{!5KcG`tZZ9ݿXr>36gI 9y2mJgt{ځ;o0ŒZ MtxOڻ:uPGs (q|$D7 bLMD:& ~f$f ajzZ9,<-HXMv v>", K~߂Il'./ l"#S ^`-m}hNo~ew҈=Ƴ5Y0Nj!ca*x)GXK`Y,2Ӥ1P]- h@`/qjo_HDOD=NlE>@ 5UND3lϷ*(emGN=Ե P`v}RR[ˤl.i87{qpi5G&QFg&\>:q lcG eg!{!ryaL^bpb#>5 5-[Sc˟7)"&w MBOeH+0H_.}5Ox!( .v^ x-$rrcYr#z 'aլ`Ӷauަ=if-co) vN 8H ͝ ݩs{Zwgi߼ B,"ØhKz.eGI-k>uMW XHORt4"cI0QPO0gt)>j@7 hTG'V׾yCg~b?犳&X+ ?Y.?)g fdevdΝ@J5MQsM.Ƀbt??S𒰣IӶ(Y׷;+xM֞fSg)LJFJs4Q9Ъ}.b+Z{jË=-n\5\0D$W1fP`Q ΞI:DAFVM35 R3nDH\XqOY1>HH|^Oxi1u !0DU*t.ƃGǹ{R'Umd+{t3vJ-#nB^@D)<7,T$6\w¢[>"WFUZ/2e  ܵEH! 8pNCo]mGo/cr8o9RQ!^OQko97W[wIߪH8BSX@[t(;:"9NcYO=۳v͖LD<_Cg] =dXA^vf=#eB]\me+07(WgJ Qތ7Kg:^Wyj\!=ٽܦpdB c;9@E䎷u$}#IDRI/5\a@F"L|a.HaECb/¦'ǁ߬@o_ޛSV޶de2IGIENkj$O\1UtBa=V:U=6J"Z !sCFuȰ˳'!{!:V^x vϊ`ߛ}2Ǎ.g10V$Z0:{qR!ߧ/9_[ph!Jq>Mi WأUBDUs `Jz'|no3f0sXuSjiի؎0y>^DӡDS5`G%Ec odz >_6#Z )ËFf][z埱=NR/!e×ma3C伐OȔtiC_9m+@qhj9Ɍ"ׄ eN̸>;'1 oc8 CYH2hBvGK(!9ߍ!!orx6":[W÷t$_}-syn(>\jQobnK&9q55Oz|I+UÌw<;{)w-uO "'W8c.>3jjnfA0=,,J!dT'LJ1`9etG9)ǘC0c+Fm')U׮tI:69SmI@daEUVcEH򽆓[-d2u?[U\FQ\xP8 &^. 6U!¢g x<-f>  )Lӄ0 __ھv i3:,hsu=(Ƥ:*TbO$TMˊ2נ|{12P-,9@B|*0X5s^uy@+zߕ$W}?#L &qPY,tq)k:{I}ClSѦRS?U $t+(?96 |^VP٦wT?V)& O[KˀYiB[ [(Qe62l= AQMCc`cm×S'BD ?0cg?qMHE a f#,a3uL~A qA+g"P67`t7357=q<+ۓg~qaA`5R~{ [uE6/\/te%,d[&;5g{?å툑.Ѐ1Py% f ڄ4hM:gJM"7 8XAYv&3nf{d=VvomWiD T=؉+f>G\1>"T6kCBXu^H]+Qv"?`DS4s&Pfy[aTZ4i$#FW"7ˤ/^ߊ.L\]xfveڦYYW.6!$ך_~a[Y|wzX8秽VtD68cG[c~lH= )5-U/ %PCr 0NjGN\FAS6T6W3dVKdTQnP91/U*/a 'W R29HsA=uݾ[LXR䐶#W}ղ74i݀h:9vi/܎rCgɀb uW'ܲKWrVHKI#9)x)߱r#']V~ٟUk ԶI+IH',TkūFr>#zҁ$V6sN[GI(ۄyW<(0Q&W; @G>`S zc0כ׳D3ȊxZމuv W6&LXWb&w7Ew'D?Jb?k")BC8 ;vP0XAP[4S':/q ׺; ԳXTNd1v()DDD-5viV 3)@<=`-BK{EP zn*@[NM#r^klIb9&[:?xk2#=|RfYӁ6*dKwUO,f/״Y6rm#jv/dјHyoS.\ŝTQRmfqq`:wQ Dys=T"Q(cS6meP4M RdUI[?dzP^z>,a'JOur#g<$>[#FT"9ضj~jj勃bYBNQU]m~;0:}osỵ[IϚyguVtV"Q0_ڣxWwz\NvoM Y4>Z-m䜗Ti^*A7헝Clz= M 17ao%g..ھϑ@*hN8 Hy0`H.#lo7/nX;4Sٝ$,D$ђ JΤI7x9šc Ttl̡!ᦏ#uh#GՌ&J~C30a; 9M&֬lq{B=D;T/H@THn oMLaq{\̥X#z|tJsUQuuh$2| 2J=:qo~H+f/h]e2{#RBNI4 A^4X-{PE%x=ܸ:ĕt~eeqR`Fkꇩ8HS~ўKhצ [2^iVÇ$/. }wnNr1䣂Ih #cx,O {ئԂ>_/RsЍ(jF ąqb_|(XM(SHVwܜ]Y N>o+ύ}w.^ lY0ЩFt.B]E+Fޚ,_CȇӣN2foxqkj"9EgWuiJh_ȶm$‚@0b}ٻ75{1igwc!;n;>Ĭ>YZF-Fc >'+J#Pg~+Sf*Y;l!D Lab/*FU#&:9[DPIV/v*m5+>AF@hLHנA~^{DzD73 /ܼc  &@{rWx6|cʴAY:@X i!v*p;u7P z$  0][ oTR)M~|_-.G$@ԡ"ntZj6s%IPn$3ͤ[BkIY}ԛgܠ> ͍U3r[B_9j;V* #=Kygp8eA]]o\(6 63(@, äZY(e1ILܝd}|Ynx3aU#;*S8[c]ST^;<.p>`yvAQa# z[&G<*}$2FEM?k6{(4J$5tn88 ؇"#iL尊CHSp(6VHg7 /ԩkס{Q$bi?s,fwOUhqCdd1h˯]Q"-_CGy$-¹pK{cOs^òlB$k_ AHNWBp_m>ni{*b%K/XdFMXo&xG%P=m;=$IF٩a,#`ϕGRFs63aS's$ *Q6*3?ISUʈ*1h$)ʝ϶jW޶UhZtNi39YLD[BEw_B!XU}OR0ٗG{<o" eD8c7i^<jrYYCf`nMX6; y n y" ArADx;mՕ xiik5%]ܔN @ kw[u/ ϦFeJ2o/P9?ָArkZQvg@Ek3c!-S1'+RAbF+|ga,f;Aw9tZ8xŲ7MW϶x0=Pݹ^Elņ1NE+u[ϕn5}rluRSmY_:i?t@ ڭxoDBcCwFuc=M\Y)X%>Ibyv?{cB^AanXL^%,$~0. RLU1x%GMi)LNc ,@g&۝F@J {ϸ:}:YW"i}= [2TPU$Jsrt@=ֳdTƽsv >e+8Fl4f9!k!TulhWQCڭ-!#**r?dJۉdclJNY!C vm+8Wg4| 5'7ZA1R{!׬qDZ/|_|W{o;- z4g0ki+#w脧!fsam+8eAoVBG 3Y5Jdk~ 0 SzOM`ԮX\愇[ﲪт} m/d0 w:ΡkYcW?v!RUNDȾh#TW{K)=fl %N."ymxaz7g% 3@2 {]'GS $Qeے Zq{ wdjṋ!s`T57~rreտ/Z*WjyWJYܒHUs=c9Y`] {b$Z,0zИr J5XLG ⣋ԶUlJlv܁5{# ?yR/gb?fqBqFW.RnhԑKc8EL+2Z~w֑^1;mv6WG$Q ;ة(J◯^ E^Lo="|J ^/OXF: R/a~ALsKp5 1v26\a+ʾݥFeyS …<3BԸCHI\6f±X9G莍y U ZFt,w3@c߫X7{3gJ/Xa$hSIMpKʸ۲8:$qG/GLЫ3$;|ʂ$ Y:mkByM? nы́9"bbEϧIYK (Ya@V*St D{b[p .R~c$-2[!kXg Z;]1~nBLgn 㳍}e⣖8Te qB0_ q +.2ܥvQXfS-DV@,@Ԏzxdx9 Ɵc hP9s㯕ҰwcjY_Le$E*XBߺXgQU 2lfUM00y8]Ic@ɦY#G@ Xϛg>G80t >FB*7(=":aioBn/T_L}W?74'P@vWoYJ+ ',zN!.Y.fajLis0:mK"'dͱ" =t2Ɪ0'eTԕIT`eIN -Z7l jE AZ:^ d`N#㼔_n O]bWnn 39u[OQƣ6Sה+f+~8NJ%8q*Uq6|-`xcr :|Бc!DL8%䐟=:Y(.9C@Ko̢-bAm4#X"a()Q onV<}ސ2Qe 3lp}Ai;|^鑕]nWNZ膛&fX (24&px߻'1޴MD}C8z dTQr0;/i\ brBsb$o^NE8e 0Ϥ&NMfжe)rkJrԜw*UJ˃\~]>^8 ͼ{Z =ۃ~xE/"ifaKxrl;)zxhjYmx3#z%PtYz/ /6|;ʞ.5Ecfl7^ }+*{52+z}? (xݷ]>)LZ+R{eanJBO 3,؟\w*,޻l;'x2cޘê֒ jɸЅ)1z6*q:/z5$ Z#Z֘"{03(:DyjNqj>S;29܃aQͽK _;A-yksN״[+qݗ9m+yΓVle1{aNEIlO,\&#Iͮҽ 3C6cׇ_92W1`Zse34iso=);%lU:ji7￢3xl-Pݺ"<{c~qZx,1!xU]Φ`}W=`v^%mf_.A+u[7ժ-½ikPZJ<3+FTkuHJWqfݾ$ijpck06-QvY!t~]]Nͷ}2ԏj|P'Z[IvBFMNHN0> HIǙe3 oCB;maÜ5ƌ7$}RPdKFwNˎ<ַ gߔĖAGR{e8EYyÄk@HiׯC0) _+rY C/\vHL&qwвsqJ Mf&Ow)O}?M0WW?5yN}MPd$$6_HPͬy%Qx3/. {Bgz\sxU~1J3 BPi{4.&t}ahzU(z*m?' һPU~5 Kxuel6c<ő}ZE&`]mGhms E8f7jC"n픮$8;ʁeq X7&$%D~t m?Pr{#e*}Z ,VRR<h*ιAVmUt'ңJ28?L:l}%$FdT9RAF TseK)[ֈT.=jykK "ZW,{YѤ{M1+nB#nJb ͜kȴ |"s}\XIRm؎VTC[泈vhC 1;[A9Yr=q<` i\ qu̓wcL}/zJ]+1J @ILqTzY9Hԍ~ ~Z#yKGjtn5Fd(ƈf7CiY-q74*> 'pkW 4)E*Md+m;G۪υe^&'?ERi)2=B?(]16-_1ߵ@|C@#jYk?`H٥**/&¨`o6xG@E|n 6fgaTUXʗ*1Bg-m-B=%$O~SA_nٯaaݗѩaŖfZ}CZ_QRD]7 OLOul  ڼVG"7]Fy_<"s zB[%uQ?q\:0pa0^c:l7]l`bJWjW;/UN,"mH,Ъ1i9HI#S)E\W>z Ipd_H t ]v ףsWq~tH6vEbj W9WlsrX BObT͝NR 7)h8D_vvgW9t^W3㠙dH%+YRoo>5øx/UM [k{/ hQ%J HoWGxXi:~%nM,W**C%8KY *dnA-#x'QK+dh-Yw ⑙QoCsUete\pԽxg Q9& ʜJt"L^!ϿpcEHmy%ӝ؞$U03jPoo><5 cqbzX5#O'0q&=ngrx\"~Iy8NwUdaom2Ť5HRû{z ' 1.(–d@.7놎u\O⍒0Nz@ak/ ]IGqDo/%dǙrtle pAW~K n^&TŤAu8\B* (71*KqucyvՆ"Hv`'ѝHwiB4գr*65X$b8TTl(HWrZ ,8Bep"5A2*/rs{I}/RKPG̣aL^ Pz!it5PKR[Uع2{ob tn2[Тe<,ά-H ~y+!cUe2Frr1~Q @h[^X] m>R<+!&حkV N>حLIgl!C'd;\9#]5q%=#ӜqPFևzeqW%1="[De%SF*Jk{sukkU.$a^fx34R6;c$,͌5wZ)<_RB2KF=,l28B`F5)ڬ^YyBlcg^bf\%.%,P!& >@zF(?(i?籺M J6%1GUMXķ 6XWj i7o)N2MLrqlS<֠cFbz@vA3c&nW廚Z| Y?o սn4Sqz}0j7˘T;S 1wdV2-Ѝ$7FK 2PM>z+ɯ0 #ഘfsl0}»h<*;4W~UoÚQBV1ٳ(L9#Lx#vݲW/WP_ne8wM`hK4BЗ{ʉ7 DVNzěG5DS`|gE)JZfҮ`8VΟ){څ*r-%Je|e{J")lF{ xYn^ꛥfcQ0S9|[Y0IǗ _eSAWinغ>F+458MƁw9Fjkpaozaئъ =}2'\>Hr4fX$ >hEe/W"/w@'yf.)7U,ۻj 4O6PGlӲeRmvn8^[E15]H>Z7inH 1*a)[^Y\5 <"'o@(k`~\z3|^q=Z]]#LF0 3UnߚӝZD"Џ8sǬjBJ>ٓpo d^/kB35Dyw;=ǻEԬ,B.ϙ$kvVٻ:ڷ!j'7Y2-d_Xbj5 0i5g+Dqwt 3$7I & CHJ: R[4.n"~|ENEݜ n6k(,638)=`ydضؘҥiؑUDҝϐΠ1ߥ+I׶XȩHY`#@0#W_Ȋנ'<}S.q?DdQй:l@8~?{P'%z'W'|p 6b^\ڇ}i0;Z>8ͪބ[6L+\gF@ vaw]4 -qUӿu ^2Kt5m%1ضtD1ʲ#zWUE۱g_l(mХcvjO[m&&wV>#Xq<ǯl\3]|d^aƽ!1O#giV;]ڗ\.PEsX7 ڕv2}iNI4 X4ˊ a]"s: k >s.iƬPg4"ubȺp\l -hh'j\h{b3~įL:Zn6 ?`Qyt˥SyI`YZ8Dx2`TE'ן/; ' ] DDEs9=ӜV.wov`E#I.VA4p" &k~1#;0w<-Kdܠ>gJջ-М/K ߱0`RIjo3["X ]#=}Ll!̦O 9Kv+mJTĆZ-q9@I1#82?O.p7%~?Sn2g ܥESpAUB蒌S*Хd20x'Y&(E} Oc#?% Jh"6TMo 3 pA*li0z)Fq7<CÄ#w,L.7:eqijD=ΜBZsWU,= +^!x惚d .~0嘯ivκͿAqkX'E2ʼ臱ٚM+'!=c= *Nw_a9W_kנV-xҚ},'Q'+k_mVëCacUN,}!gDr~?|pH C#KLou3\:)اVहYЩk=SY8K/֞\ٓ P18CR_djkXTϳl9+ۋ˯29σJgA ^swa>XwHusJfֱ3a0|ԟ>^C TOwa2;^=A5h?(c\xoRɿlt oJ80ȵ9`Voy3_+h5V5.`QŽEF> 0#srIU.Ok~#b}QV4볯u7to@6 46}XeK/W们M0VjExTrJ} rV}vl[/f`B_Э[d$fƱtru"7k,uf:4v!KM6n˪-U`2Ѭޏgȋ1G4)U Y ᙟ.s~Յ`5`GT%XldHlL9M kI ¨kz2]o~'&yrGybԨ-݉7)1Pi7 0D*EJw:#43Ck- [QlB_q@݋G->RA gK $ENWYryA!6.g ( aݬڭ)j5B՗Whw9bOV *_E9u.`ʴTF*~AL^ .X @_kTd[ᓘ(kI@ Q -kYf 8{2$!,̱j2Vu`匁XT,) ]]h wuϰ %[*~dSȣyc 1]ITJAR?yDx85felX׆"|d+*{{!OF3SgF"bـjf-:? G?y?!^~I)DbT7%A,Ј9Rӻk_Pmj}0umE'e"]"TIi6ݳwK8xE%gL1a&㻩˒37yKֱ2~nO~a~%\udNlCIЎ"ʽu=:1ӋTmm [agr|lRD8bowp_ Jcp }Bs; w[[ H59p[Gڪ9~¸)*hB S!P9$`Lo[<0{hkz5|ch pPĠ3&;2[dYhC?R_&Š,9c*n4rb]e W&M.X5nO/%/{s^Ի)PYIą+a՘dE@}kW\;޵St:W[wՈTภRjskSZVt&xE~R+ˈܭQs71;6)J ;ZGf?eS S^m 3t.H)C~i|i<{10;BZ`Liϐ\2QѸ׹%f+w'W hwnn-f%e&'i%ΐIxv{'vVaP VS- Mյ7$9ȝ{o?Sd9l}fͦx:^Ꮫ._vBaRCY!=$Gee< 7NJl~24A&ug9;SV;ryAiM ֎֗̈́huZ0&O #[TLnxVI^?K(pg/#8{KLO[f'=̊6'~@U%`<а_.j= ihJs8iP}P)Xo&]9, <4+)$oŽ&] >WPK-QC'?F[q1޻!Z>sm`VdH@ 0Ҫ1⻥ScSӃ;|?{Bzk][6݃28jB8Ŭ4]?뿭wKkk.7רy7:;Uݡxo[+#]tkpJjeJck]I&,>~@S悁w%|KSUV]>pT * k&Ol\l[#y=/}B=J#ý/ƪW: 358`7(<~583-8\gW8 B|jQ'1p?SȼuzQ1:dA^ i-jǬMaG[;GRD6_"@ ] Dj"v<ѵB:G/8 ADJ6R7+`'lUA'[=+ k=2|o8^[貞5HmeLvr6Q#zi?Ind6:{6pR\Ԁ"5杹)$Ninkp+Bg6+0 r" ,w[K2us;꤂\$/Y1eikhն`HhD7]Z`2)Gʇ"w[Ŀkoimξ2A<J*x߄VGQ22j ycXh&$nVTR@ vh` %Y`g2T3 R8t>vi/Y|ΠJwo-ޘHxQ6d*#kGpUG֔q '^iu!Xv6{m40ZOp(ϭ &)]vd虣^޳ _NBwعG+RE?1-H&Yxr KtrgQL>,,GDhAqkH @@YUKSw<׼VD֬mr0aW}NA rBoǍ{8=Y'aIi#݁pcx%J%E  s Ƨ\:FџCY Ì''JxV)r7\d>y~­ej)2QH^#Is\$PE3 |ˤHAuVL0ȿ~HC[r+ZPԋ*5=ȉRB4KJ{Yl“7>>_lT#56}1nt?xk/E5&78KpiK8ߔ67m4$ނ/*зƫB|\֞u"I^ ŖQ !m dѴI9uksP*UXwv@fO ݿڲQc~,m49 8*bl[NCK  @za=e ܣ2ZUa!@0\v@b6zsph9BbBk!6,צ~;,#T`6 bhb*8bK9C~2<&}BuIw^.eTƻL gd&ńIS 9%|弱FFl͗_zwBzpW _Ui fAq3l& :h 92%B_Rb=G-)E6#|roUGIlwD҂,Ў>X@  ֳň?>B' fH9`ÿIaX#Ms."#,UDŽ &Jŕ`}I^x<=bHӝC=3+vuhO[ qoY`|wAT-4;8kRBOҏ`$ ٱ$:9ZbntHƣ{:ۯSS f!~hX0&zxC04vb]-"~Yu,&^(6dbk>0,W+}ŀr:1Jpy@ӭ-,b02Xn˔O B 2fԝkK 7ʶ"FCcDžn+?Z  Rhŗ.1\ihcxOKE?qۑF [X[i Yt^moЯwN74tQ[;1 k+S G"i%,|MsPy)BtQh?n( 5mRsSLtBڬ&_<8D._a=d*e)*r,JkAqh /uL0ح7mΔ Qnrpf"BGasm_t[70>%c3<<P5~|ȝ z '95Ss=܀Fk \ 2 y.X0O|7v%y#׉wH'a|S 'XVӸsקMWY5a嗾 D'h AljR9'4/\f?ч b؅%)h7S6a4 Hr3qbq|XX@!~nCf3JŁ/B'\Q QϺyZz3nGƗV1f򊛊#/ ԁ+~X26b+$6kWYB# t{ &c:{9'Gk:GN~psdW G3萝;fIJ "|Vy'L⸢ofp#? Hr^;OVʇf@o~UgP$]Vlvx_I-YzD%?xXq>b iH $˒>c t2kt O$0tQyoϣF)!=ʦI59=]=ħ16wRX9+N(Pf%mzt 2^Jr3dk,kJ=#E䍁3Sl4٢P@ u;q-)_yUcgusCe/Yw<\c:ך!x^vANDUdf=AD DP 83ߣ}+Ɵ<jNёF~.H:H$4$$s _ѳzؖ::`fYeCfG82iUf]}&ZGbzӭMvK48ec-~^А |luǂѾ Sm-W\6jYyۨ|jq֕vW(;i9b9lQ2,=ԯ:/{JuKM>,¶WI`1’9 FI5(ېUPݭ`.\`cbl{ELQUs1>Ŧe@hK4}~ 7n6(S X]pJmF55bS(F߸#-?vf2诨`E8yȈ{6=Rf3Pt;D cl՟=qBr2ETʑ'hGi{ i(h~Mp0iHU,m2!C@G6s)6aKV lM$v(y[HJy*,bBrC]z`s6i䆙^M# P d>o"q&4 ?=\mwiT7&%V~ pw W ΒLw&GݺʜHUN,y3 q}-BM㈶O`Vp`^b)I4JáK s *x'M48Mp-`GtHT6cPt6LkuņWD/îxM #CnSI׸H2-F<=tyKDFх@V \]G L'9*.2$We?d۬i7pP,c(1> %Ϸ?̀æ(߅N!z=Y'Sb8ɈWbJ9)#o><0c]/}:Ρs X,}|Prt+[^1;cZTG|W+1}jBQWmr`Ǎuv#^"/\w-\P)ۗV9MpuH+9|y7!#c9Sb|ɀ sFߐk ss #7|>oÛ~":1F:PdAhVK=:!~CԐJR928d.ǚWtK>[abZHbȿ16@4 6"I:-r辇RU5AŎU/>Vؑ$j6߉3ۅVNnXyME &6h %@ހlߪ3o2 %)1Y]p@trUSf2% `` QOsci}_AԙMs|գ4AC &^Xƒ(gp_m`y*E~u.tS{ u1>c@&iO./-=FV?+~*A=X1OӽnVae4`קz.^F.;sd@K;''_ #O?*\VU*1jG#$HsE@9ZnDqBRzcߜ\Ѽ4CN%,).8*&hkV"Ԉq&߫ޟv87`PtB{' !$N \ԏF(?jVMDh!5%9˙i g]%?↖HA1u ~r9­׬F06{>K^p)||BciD,E{4qs%n3֦i$/ kN ) PT"p ȋ Q"Pm;?֌RݎQEF>ķ A.@Ք0:щ l,agI>|LNܴMőia32bX\h,emWJ[=L!$tW_ᯕH a߿ߺ%%쌅8{ƫ^L\F#_41XL&qYŞ]eyZ 0Z) zOC#ye2r @4Ʀ3mN$.$DaC+`Nf;qB^AܕءвCq!鯣TgCz_jOA>9d\dl3vbKMY#OMGG}j⋩ZBc,!1)yɝqus'eҭ^8 &l2p⭻0Xg=7T'*^O`.7C׮߹s~϶1|l-þ(@i 0?JI^Ì{0 iRI:t&Mr2ET&, g5Uy/?5= c3Vk$uv->j;,*ށ=zjJRe̖JߢӾm ,߇ݼ~vKNC&GbeHO4tR}/9:-U\1P{nYأ@Eu~DLJyg1S9Ev ur^Lm;i9:^1Έ/% G4tÂDir4[.o^OΝzG(,DJf\UA \}mԮ#`荒 W7PNȰvF>r?13=Vp8 2RxK,r7Ɲ-!Ox.΂gMF:DRM6ynI:M/<$ E%k._&'sO #jo5b 4O&ܫj9AtԫHJ(l~NטRK\?<,ȓwE@ ;~ οXNY@bXL.[Y`};S|Bw-y(@t>cha?-!$EGc9lf@'H lP0T+ ႃ,='K'넙7J7%bq|h@.Mn M"r!ZfcJc&csv ](GޛE D.:'v?_y a E%/W43BKJ)D7YD,YzԴ{_ MŗD_##bZU"yׅ+AvEye1F+  GafPb^ ZqډE>'q'=J4@kN]%GxTuه;^~&TSATsɂLfR忴| 4$j2zy΢l >HZIJW(^0ٛIdz N9ub>=!mDU.M !exhiW[Z;OxP,9=\"K.dۻ!GZ H3mۡk_: o߃Փnq ?zB/me_-0=&Nˉ66DgLHy_78NVH!"Ufn nÌk~\6 0xE8QI?S{`R<lK[;́L;, MM%yG5Lf* @x#F>Ӈ:wF\imRT(<5h~_?CםEù/3;ݨ~K~/t,K`//XCHsx&rz5 tW+[.DPwܟl fAP\R8jrkJFŠ DK(eW,WA5uO=>:k~QBʻ߷=wIvn59&f\aLD3"qph%4Ô/?&l%>:AȒ&^AOkTӦ q3iIdD$~]%,2ΣZea+\Oq! ,NøeDLZ niN`kFjJ3օlBL",mzg!i-X}U]mz0UPʏ7zԳiLh0+HFAR >5twkefHe^أ+7޷^DJ uی2}1w.6̜gUSmh(F%مc\!"nM!"2p 8?)x|eʍޔ8Fh eBtŢ&^: 1xzIm, r*]=d/]Fe?h_D pJyL4(%bjw0|cx6*+֟Bgg0܊_?7,83/ilb}OJ}puM-5lfD<.ixwa}0X?ӛz7VSz;s4L6;hKIef^BfKu|ȳ&W=w^3Cp^+ŒZp2<ĴJU]zwsPsbpWB0XX姾(J6} R!" ^(=3;Y#9nwPh&7nI/Zmm↟à YD @JAj! YnΟ ҕCY:ǣ"'F#;0I:N쳐A=ɥ)) ֵ4n"*ǚ"oͣ7ި6w VBc/r3fqwnG*!kÏl mb2";_G􇞮֫Y`L4ݱVkJ;B1uEsJ#cy{%i^$Xj;޴/{l`nݏi<zE 8!#,ʌӨ @t:9w^ Ҟc2r_-G)‡"ffbݮ`O,,nMV G[z v 1!2NWiދfJyEuW ,rJ5кVـϨɽ1 o_6cPUm.R%dW:/(uǴ"?J|V„\fL(["2|X(iy_4aYa*@r{CI'Jyd T9-h$ራ{tÒ_℧o{שz^?nF._+@tm)[Wc.5l쭪RZ޿C(46XA6_$"]DT i,>Dm*|mHrWuy=Wfpũ%؄;Kf*X`唨fjǜH9_P^fCtv*=?T>6{J*gy,P~4m{&.lq<_beXP i<&~|-(h~Ěfr }ooO<CWҁ4{s0" 6|(csَ]*S3gϾt&2H[n)lF1BL 1H-b6ԽsPYv瞷K O ^9Sns"Gçĵ?5$\˼X=uī|G3uYٓTR An*dOuEbiQ#O6>~_H=aSOߺ^:w&RG[%nPT,U?$=MbS@PMx.ix\Y<3Yf^%])`hh./'7xz3?p@x%,.g_P]A,D@p9FgSK][E^8RKZ9 m|okPR̵8"gFc f2TI7[Va. |n^$|Qvշ ЩK> l= AMDaSDi߈{ӻzrҩ3S*/wQZםUЙbTj1FyfFy.e5b{aw緘91`ga;CnxDXoDac\ ,$"o(YTݬx=ح%4"Rs%F4'y3_ͣ[NO-U.b?h:I.h!K>VĮ<(DT2Utn!UPsWrlutc&Ă )Ӏ0IJRmVh!Ύg^M|HŬLӅ(q zDg8NVIgRhi -a4f*l\-! & jSK}(kgq~|oJ?`|Ye%"j*h۲m_CӮospJG!@ :GDr r=ʂ0N+fI[p^8H.Uy^T}d|.Ӆ? o[͔3@朆BFH]5^JVGY0~>t2犛|p-`/،׆Ī,X&Z9|ĸRp`xϵ)8%pɓubO OZ $d}uF) {6>ī2=*]Qܨ^ YSU͔)FZ [rkwdLf%Yrﵶ"#qtC:;ý'Z *KdnxO怗f5BZtSQAޢ|J [M9xʵyUwQZ3pCxvR렲>~G~lkiv,6r !M[zsB>#:7f' C4=Ӕ&Cd]4~hx{H|/H8 Z%9T:a=3 9Waq4yӔu]&L_4MY8f| <6 U&h4c_\dΦtM|W''pB !Ixcq( q>8-'y/?FQT^9fav#`pn~(8_PaSh~ItIagQhO[<%%&}BzLiqtkq)bڨYXU ᝄ|DDMc3τpMD)?3^9\AdecctJQFh%=V;F. - qZ' !TZwU*C8>_jӻRwH̒)<ͭ;[g VE>W.rԞhe@C[Q ?ݞj)ŽHgߒPnU}`iv9J g@.:|w^Kҥ9EPzlFHH T^.3+E OC<4,M(zc7dt4SW6!tJN-SA' &]Qv.Rn-;n C75Յ]%Ls7ezpdaR˵|{$I)~ȼPD$da/eчWćl9nQʳ.yg QNDc,J rk.+apD_.mvVOFH;x%Kn6#~g=BG%x+=z 9Z;N ߌrϖ\[XT*K5Ģ3Yả0. #tMvP(ucMRhgN~Ye3Y7 g 1+խh[1&Y,ԙj'!݈Z޼$z1xꊌ!i'O 'Ҡy'J\Ē;=QCP1xkz\w5pqAGĺ^f5W\L(6f7<"CJJj#ofp3BJS߮Ne=.x/u@q9fVo'_+S d!-sk`OO{|ȽJ@*D|-2"+_iȪSZϾ28hgi Q}>snλ`dM!{o4nb޾uj! ߦ~ MaQ>:8읺DM %K6'Q{n˿sL6o2~KٗSOQgwM^^ XqT,pq\q<ߊq~J)N>Fwۑ</P {[|}AH (DQ\ |Xo taC{"@J:N)٘FqGr6cҔ+Ut(J& )JbPAÐrPи Y8<:-澃8޴pm0gsNN9G~ng/sv{w }/z$lOE@q·Qt`3G>.fW8RFe8 .Jq7S۳ <kx ǾL|Y[ׅ\@Jox2%wO+y:ѕj42wj4ۍ4l_y,m >{@~E-"Lɽ"PZA;5nY'ZgN"}U%5a1б|$tSxD2jFU~a!4p_CYZr^8.oc洧s()+󈴼7/ 4ՇgBZw9r1PUײ(L\ "r(@ mD\c £h骮H+;B@.-r5ۆ\Ĺr`rR͇e8ب%Z$CV^JBU*/wIvR(W\1w>m$wC{ X7h7ͯwPG[zTJJ({ BG뷰[fcʯx6 Ejq)8V@}#<7Ywzj$ɶ)4m9݉GhOx*?<~Qy7z {J ]cbL9P)vp.< tivI<*sIZ$ /+x'pVhǢ;bʰid%-RH'SvGNnh;,p ݆" Z8L  jҴVP !fF_%yZ{TY k'׌FKjLfٔ^qЙ|Z:V ?[uCW7HSi*$c;X=N7D-R[K;n$ڐYh)1ކU&EYLJ+ؤeR5̛=cp]Qi1ÅDxUџ+5@*+LHrK$ eˣ*/CU?d n[uJ2-E^a: ,PQ_U;Y(_{5>O$ti6c$ii$y4``hbAIKVgwYS\{*C>"tRAV'D6Ġ}2a`:3}I6G,p/r[}3Ì8d8=PYy8EEIh7T=#Ey,HJ^oq·yTPT ݈/c=Ix=Ph{")PRRCIqݵΨOĩp>!zL,k:]p&-s>F2292i!笂y {g"حW]A4O@.)'ڱιpos%M1I Cye߉WऍEfsknGY74 ~6^;UOB*qE1}/,.P ͵϶ 7 V+(BbdBi;pZ/E!̖$w'8?6,ԇj u+"wD[Y5lb е9ɯ>JdJXb֚bWV#vuqe) ]1ms[3q"[5X"~' qkHϚ'S u[ ̐ۆ`Age"iv^R,97}̦u.cE"3>_?xd Uj롸D]@A)_I8/&.W\4?qЕW) t# 35{c15m靱(+?0dI qasmuj|KaŢ$SI幼 b3)[Iz*84ޫ&@.70nN ]$~$.%fnߙQ d/ل>Ta=5ߴyĘp!ݵmJSYQ8yQ1bWcm;olw fs,g($ʝa10IRK|N8E7LQ i_3j+?nNY 'չ&J@fՕ0Tn=*1KdxTN7QծoJgu] //Š֠jR$PT4jV[O_3nf\/Wjy 2k-Cm! Zsj*~G:-2c6Oя.ȴ5D^\)XpuB0 .fe+f߬2;-V%2Hgf5am^ފ`mZ/_x3ykHBB?wF.S-5@uߙ03;W@VW.确#;p99GIJ s |DJc }T4nx+mL : /lMJ=6e$7 SX\6퀯c @-ͧ&c?7W- 2JF7?[%;55 rۺOlRj.88u[A͞>-Zp]])||^/#k"]C B7@V*c8i^SCl޳(Di5)5sE2ϥȄn]5;ct#7Y\{r%W4zeYs7*H˔%lygx=q 75N"gQb<єشmD}5+w_`,,FeMr8^$sLP^k!l}?)'ʒY|DT[=)G9D+ d%=`}# FI5Q FU(2.$E)N]POs/;TxG] M[v敒_8@ấS>H JE5mHi6I;P^:;b/ɠg钭3#٤ז+곌@ڮ\ % j =I2i O4zV$"SJ!.N"oCK)\|֠Fy~Ă?nObn,WX\*lD|`"Voc_u\1{Iddqq[LkK@2``)=/iÏ M7a (˖B- 2\o1npי[ (.°?? MYAy%njX0w QH3A[Ydw wsj$OgkM&n-a˛Դ7(/v:y$(8_mE -Ji)9#)X"ϾE(ՈP5gv$)mrI H%Ga}<n궜X^A`D:un#-heTT*f:7 >,+)TQ#Ӱx$l鏥5#L,GNc0kߪi5u̯kޤfOrD߾=mUX2HtZFqp=} 3Lú>Lpp0X>|:0aڞNJ~:V xJ"mHw(W&( D&OP_hyɫM nm#PAua17Z0\ccBT%kR%IQ`ݜe PBqƁRa5u{M>aS.U70MmVqA-iNAogQ:= N 5J/VpWUP!+\Â%$qTj_5"=3I)03֩N(PDG}DlOHoB4ftEk\x$d`.Ajf9'\X[O2n Zƈdj ϐq/"9 ofǑ!QEUZ{LQwݦ)roK5CsR1j@WlwF tNvnȳ4Y'0 j/$`j~H;^h{,P=H֧0#3#YV+(0. [%6\ŵN hzM6h% o✗8k4$yDX.\bĭ.7Tʕk=~:fp>fAs1V4:$HoXzC"-M&ܛpO_Hы:g)Eg(>ZԦ*37a Cyz2|[7Ux \ Յ@iY:>$Cfu0iFpG*i4~@bÃtZ[tPU?YUڦ ROD1<[`ޚ]9~HT 4~`ke;  $ʊ2#\݁3Lĩ܁+C~Xz` uϋc+b_t.؋߶e:N cuٟkG{|-sK3U$U ꋯ1-iSL OJ+xTt 0 OG#~A0 'bd()̃N >^VE88L~e%m$f*(:Vx+ _% lg :C. NtNv :)X~fY,y 3x mlB浸Ԙ[c%W]bOUS}Ĺ,CFJ4s 3 ̚:j m<HL O'b;s[ Nz8m4Iq)/'.WF`69W){U(*U>Nb"@Js]!?jb )CkE;'FKo\ꐈ!Wr`zvz/ xz :UO1aƦ59.H4C:z4ѾOyt*wLS5™ 0O<ol-?Ƴ֋."Į_o%5Mw3-6i#q7B^o y\cr>+B,rg'}O7_74q(*gܪ>LGQ|X<|xJ$Mb-6W{|ߕɬܠ "ᱭq0~ ɣ5TFxb23;+Fuj^BߎO}hb fSm?9WXU_%lBU &$Tk;*[dthҁrtpXMkʭhMVnLWZBg22u],9swţ ӱ܎$Iӊ2=Ƚ$ǬugӘ5Qs䙎<8e06eE#F{K %)Ԑߥ-n׽-j+ ֠*E4*՘˹:QֲTeqN:p:# N;ϮiUn0DF[WK441vh́@!*bf&59[5^%Ɔ_c3^62s\ey00)~s{KmT^ovnyMXr w=ĺ38#bj`ytsHC.y2-״H JVU{:'[~54 ߮%z:78r|NQ5̬!)YH`cUеg"ƀIL YΎĔ5eARYBlxz(ᦱeBb59T5ݨ Qt-$\qk0mrȻrXnL%|iø`ZIs/(g :jrʮo_7L-{MVMI~Q}#{}q Hqa^8"lH#JX`T0m\U2AB T[3 &#xs{Dc>O V yatT4'ׂЦEƨe׌YhƪY+Z$K4[`@~gܬbrG*p? $%. CDdh^)xJمh R+CrU"]ESFdZ㯾I!-bkS 2,3l}.ILdH+S>H o7oԻNWǏٰVEx8Y47|߶Mi+hv7d` + $Ϲ.FSiWo-G zt'vQCp7=AM|h^:kH7rNގ]$Nk&qli$i>Rcd$BF^@|)ͦ-a+,_w:'&)wд'αBw3:9L @v л"aBٌjƉO霪c/ ?d .Rޱ} ăp.`^o sk#Y׫zQBKPm}¦cn^ΡcCٵUS7yk|VNCPk2!(6*'ˉp@NLVz"pdVY1iZc^TQճDd#*7 \oӇ]`BָӚP._xr> >ޡp‡(j`+X"^RAH,qZt5-{ΕKFo7jϢB wZge~p "@L?h[(f8=|EjrYunpr>",Cڸ_q#h∿SD,tO9@5F݇"yp#? QI6J#UpʪmA5'|tF& %YHǦ(e[y?zxdo;>ekgL&vGs> b))e8.R@+9i>xՐF̲J+=ǷF˩p雖@S1eߐW`bRuj,(?tedb( <{Ъ{db38MS6/.c`e ZJK (85.syA-oc F'2D *Z{PD4_cllgYՃ|(t&XJU遠.aMcs@LrלCYzj9,\Ȑgcp=S5XVsKL 7x]BnWbZ =9ºȗqXe;}=ۧOƧcPtmvz 38a=䭳”ȸ;Za.OkŞAX|A=>(ZvLع` Z}өd>G lq#)x.A3dEW!o #.\C YH$ڇ:{Qj ئ 7!,f3wT2Ԝd ϙ5ܪ"iߦF|Y4u-a;[ L4usF~*uKiVf#}SPS_Ecŀ u\Ip0{FsMa6/*@m*vvfk; r&kI pGzTia:CJT&©A@=[aL\, ɷ="A+h0ޫF6 w:-aV&ñ'=\1KuuIR1IbpvZv,G]MOBzI-O13ujFvngS!QEM],n}ᑠJAq[ݲH06XH,,E)orL_nLeFuq#cDXLrgjށeo s"+yeH) 8eo_SxXLC.8,I}ܵH,X/3;{hGQ)їCfXd#]A[C2K p>XRݾ~)nTr>v_3P_.U$zd=gW$@tr͊h b,i'R6tߒ-,Ddҭ9OM4r7f7wYr ԲS<ȵ^(0|={l"2h#R3CBԝW4(<'3?’AuVI܄@f-d8*o-CH 1uFۢi7vaejI2YʰÏW{vj12m Ar4_D`CpN0Pw&:&J8֛el );'c(V6^ )VMLF}j)kbtɬ@ D_BWvoU W;=Qc*XĶ0w>j $ dpa.2 <_8XC=8 @֟u:z롤",9E;Ǧ}>#Y3hR ވo2zC>> aS^6 UNهσ gI$6Ð3Gb5Yy;K3p!}rv_\EيG*|=)`^cw6Rie t _NI-=}섈K9{+wX߄Wl’3]tO1="5u$_ F-G8&?y2tHmt T#$Dh)6 T"-Re'*9(3L0B|髞,|E@N7ƋNR),pNTL:gibݹiAABIkef,iS^awٲ F, &߀QyHS¦׾m- ԊWn 늼iϡxXү|>)ev n*Q}(vـ1w)וm-N&~5jF$ɓ|fQ7r~] ]^WiЀqFVF͕3D3s$OߩD֬5rns3AYK1rI?tVn'KMvN7~ހ&Fs|\ Sv}AX?Zwt,iunw.ӻ1P=_:3.?IMh7(4R@*jblZJo,gxWssaSOwȖ Ib .Ed<` ~csSJ~ -0!fMoy=gDBoX~n+,4b&)0#Si4W@ZuK@qF-}]9dC 2ngJXCZ>.Q4]=iNw!z A P&_Puع5yykܗ]Ycoh|vo=14lhdd!92 ո$9U#Qu\fyTs-׏p|dsy%͝w>bSӆ7|k!nC-\7`RrVƭ]A:Cg.vof$R6~W'"FIi!VnMbMP~7WӦE(IT/[`&~ƪ@e.@S5?cb>]{ʪ܇"T]]|5f[P>Qg/S3Z581 5:!=MY3j(®o6 BM z \HcbmI!h*l)^@yBXb3{燆E5KM!x))–'_Qb7ZXÊr4>5n7LpX:"B)&U ) ; #9bqYKCzH=S9]pŧ&FY vM -ǘ #`*"z\<\o:h#f) R:t!8`(KIpwMf{?oڠcHn]cGt掏9M&&{,l3|Dbr)BPA|^Lb#~ɝ֣x:6lʈ!3ܬjJ.%?=<t(.AЈ:7i4:BQ(!m 88U4_!I3 Wb(L d'͹~MtIyGO3@y0iH0C\g)C'Ǻn=yP7K~'AL[Ӱ. _]-(d$:AԷpEv‡R[TIvk*gPJέ,a?@.Tu"ն_;sТTߪrk\79gk*"ouP{Tʭ#$GtԢYB8@[(!d\ !3]Duvw~LfoA q5CN Le&)mW1+᪹fUJ7hܓ~xNhW\Zw3=ŸZ g|8pBЛYe}MÍE42D28,˧63ItՖ%e] J6YZs}yę`럔|S16ku~;= ^:VΨ7(X8s&`Y,g8?C4ZצY U|mHo-Pmߤ_J\k|Kq CUMf2µjWvN`m;@ɟDr]3D{;wHpoD[NнJ$JF'h 5&aJإd7)Ԏ`>#A4՟k)hScR=7LNs^{E\LTSZxz@d:G+\ݥ!%Gp$> 2ЍNVPmX/e)}Aƹ4Z#,{ʝNpV0B p^X.Oef=UoXa0$<(5=;_'lm4zllNGv~ppB<',n)twzM?Z5 3(I sE)|k(v ͑@ۀ;J,Q <$Z>x4wC([kQZ_ezg7 1T^Jg>~MT{٫omm1yvD $L_{5<"m,W3Y SӀ/t;O} ZLJǂcn7-54$!q׈*}kЗ ,0nbv|(5~PNd*g?`BT]`t\xOw."нdOA?0?K(W)AB:[Kf>FEq-UNBw7%.tVQҜOÉ=}WHͨ]CFj;a;V(mtTg9t,a1 P ǪR+G5YO !~ZbP¦۩MA* )+lkPt\tH JrwU疇X(sdS(ܛmP)$?7‘ ȽʷoA\-GusIK{;cT{ʡ"Է3K^[UXÃ6c@թ[ћ~U3ǿ^fxa3 jNnp[ĥ?*4k E8KqI|/x;yYWΟR߰ѕsfGectUq!2q!;B ǹYƿLGsH/# xl򛚜[j>!j;IfZok ik] $h[tҎ {^p@ P" H0;-ڬ0::wWn%1aklj n}8UYǬ(,Lr[8>f&sj!4&&I$OO瀝 `n0ﰓ~-+*(ưR1N?,=M=O?vЋ쉖6 7j@fpSSg|z&krvP4G9د䅯ޡ+ԄLq!}'8{v I~mdWE%r?{TcM,Iݲ0;QΟY. 3^*l"Cu_!%wnH40Ѿ,#ig/TAu1i9+֩zGPj+[Sܔ.RҰbKKWUhZLǮ I2x;OÝNYﵴ/)@qʉf5ڌ6{tg"T +idX6N~o>4ۘH<3'B,NNvn td0B_>ĥW쇾wd+(gvFDuթLdh-= e*.ۑb6khq ͳ #09#1SG;)3T${ESe՗H"R&_"Tf8muNo'M1=@ڠKk2jڰsy wn&W y@ι K{9Քu OdG2حZb衼8|-wyyl.N`SU(!koY G 6۷WÜ6 *Oo#hf=Ȯc1? [a(v67^mjߙe/OzVAqWJpG4ar􈦘tQMX :b6SsyQ/mtjkV"`c>DBn HQxIz.!D]z{U1QDv2|ի$(iɭt;愣M+J^[^Q*k%OgeܼԸփw 6QCkJɂp@ɤ_qHV(y 됨S9([qB9B}K@$E"\;0<4"K[tH~:?*.a刊aC_;zT(ĒN|(-aCѩui n#H| x@뎱 ^^G0lC*Hi}72vo@``vK$Úsr:L1 XVl`!K\Nq&.U$izd;X|[g\y޳r87M PX_;IhӘmEQ+ Jusn =;ݚm}i?VY^ Bu^:ںP-rDi\h/H'Q(kp}p'?uQtR(nY*.: z~&%ݾRjr* ExXw̜W_]WEHVNKwL7x%uԉS֌R/S43m~l2ʹڋC檠X[`>'T܈vd9<"bWt7Nl}<7W3at%^O։8]|pt(6.VXq0raQ5*6?ނYX<Oɰ#/J/bમJpj.84ةf\@ =5cȉNpMtT#eFΊ QX~J.6=os'O&jp_!X>PT)S&Cw Xm.;5{/xUy›f( F.^D)J {>,G:%t v,qnT 9vIW nDckKi ƩAO 8 bzz<2)dzeCSь'-zF1SJee/';s;Cl*];#nw @sY>YJb<0E!+p~\v_<}"h}SB 04 S`fBbbgTY . xGtܑh@5%:en{>QsP6 Rr:7߰r}ၤ .MjT}4J]!Z8X--ۚL(7;%d3?:Tuj)XG@=Yo\3& 4Ff4(: OAjݼFSL`q_qҶV {k_b咁ȵCA_~[jL n˂T|sO);r<~_)2y(chdavѻr(?+눕"pϤ 1l^IӍ, '29x$U3d8 F]*Tӭg٫N c6mvz{G:R;v SG_%Nnf{Y[ogB߭]:eBGAvXfgnEM?gH_F@-!ߥL P'hܤ)f5NQ`U\;1Jc[>դ`P./[hc}Bof} /YU!!z!Ĩ2|`|.=vشwGܯԍ3wBB612̔xz$7OPYBdY7W"USx.&koIy0GoVl)U=ޥ5ÖFXK6K CdR(/gґZc U1cu? BZ̫;T8> |ba$܀XZ>ZDE:)G@PPJW0"Z7=\R~+h%@k\9H!ڀO^3JЅy(EYFK4l ܚz) QVY|&=Kax ٹsǏ%Г6+PU5vb,cEO: dKš_ -C贘ݨGp~DLHv%$P+)CB$jԴVZ$*p- 0Ǿޕp-sV)eDdl)^;DO}72gApO_3N~+1!*.z[~eqw9uݬ}5 )J{-gZV-D] U|] `{&+xj,־ġH!qsJr':p'Hޤ-WGx"^~375XfQZ҄I)VEU˙~aѾA7SkҸ`79$!撅g83< H T]S g 1nx෸xx-LRuH㟡}|7%eF:nUBbx0w\ /9µU^TY3˄Pb9´{"fkJdM1S Vq0Y>#v}_fR'Ң :~IcY>S#J΋|]*ɛAHUl"=bܯeltp mj{$~{ !ڝ{Y oW\W 'o(<,F"#\%t%w7#XI^B*Gu6q4FĆ]j)y 5DM5۷%28I^,P~@>pC,q۹!Vhڃ0'UƟ̈.ISV8AߩYVkDhêu<#6r%JfJ@ݗQ#'Q8wxG6Uxm倏\ČȚ̑fj+z_C+㙓mƠٶz gk :6?,H\]S{DoH$bs *ԱYö́F[O|RkF2"PRIQEM;PH]1UuTA_5MI` o x1/h^gJ?~ ӰFY0p E6t=;\=7Cd֩WkzRLeb HaKk}%_QN[ XNIʅV'0&m%1Ρnz~A&E/ g=ժx6 wrhvˈEդf_Vw9 Է"E vPBE^n!`.YP˽jQQ{d 4㠿<TGȉwUM[sQG> ܵ .>vlNpw.{>b9\Ă`$+vQRl(!bEty-)G1U mߤ6u薴R8}GQCԱf򲢑/hc29X2Qܝ/,W#nn`D#ld `hj6[ -hmt;RwOׯ~Ӆ@3?(q@N]9BicTz"@`â oz/ظ?Br"A͸ې *'ukggiah=iM mii)T-XIe+-<>fzE?ەȖ?pkCu=E,RL1Iվq>36Blq)^`g8kQ[Gao BC{69n'.II˦@yyA}E7aûߊ{(p#@OLl DQDXmQah=uB|F8hڕ^?Х1o>ׅBCndi?4s e`OWW0`# 1{w,萓h$wH-ǔڢP`2rds]n#1Ky YZ