samba-client-libs-32bit-4.17.12+git.462.df636292e62-150500.3.23.7<>, Tf p9|=,-e|ظ8Ja>Bs,e^Qᙿ{m c/mב KObndL]4[*n.HQo;uN JJeJ+\j Ѕ쭅+m3&#_P(edyaWWC#hLJOWDu,ŕp탧\'xU f>+āTU?7Q HJB_ۅǶcBAr]^Y#ƣPVד`,&W#s0 FA2l:gZmcBufot>A ?d6 D [  !AX^etvLv 8v $v v v !v#v%v(@(xv*PX\\a(89 :> B(GvH vI vX Y ZD[\v]v^# b#:c#d$xe$}f$l$u$vv&lcw]vx_vya| LCsamba-client-libs-32bit4.17.12+git.462.df636292e62150500.3.23.7Samba client librariesThe samba-libs package contains the libraries needed by samba client programs.f h04-ch1a^SUSE Linux Enterprise 15SUSE LLC GPL-3.0-or-laterhttps://www.suse.com/Development/Libraries/C and C++https://www.samba.org/linuxx86_64/sbin/ldconfigEC %`v x 9 xE|55x%&Xext5xe|xUx%m(u|x%|5xx&x5xW<5t5|xxE|E|LHE)E|Etմ%xe%|&Űլ5|U|#ʸHHP%x%x|e|L5xlplAAf f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f 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-binding.so.0.0.1libdcerpc-server-core.so.0.0.1libdcerpc.so.0.0.1libndr-krb5pac.so.0.0.1libndr-nbt.so.0.0.1libndr-standard.so.0.0.1libndr.so.3.0.0libnetapi.so.1.0.0libsamba-credentials.so.1.0.0libsamba-errors.so.1.0.0libsamba-hostconfig.so.0.0.1libsamba-passdb.so.0.28.0libsamba-util.so.0.0.1libsamdb.so.0.0.1libsmbclient.so.0.7.0libsmbconf.so.0.0.1libsmbldap.so.2.1.0libtevent-util.so.0.0.1libwbclient.so.0.15rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootsamba-4.17.12+git.462.df636292e62-150500.3.23.7.src.rpmlibCHARSET3-samba4.solibCHARSET3-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libMESSAGING-SEND-samba4.solibMESSAGING-SEND-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libMESSAGING-samba4.solibMESSAGING-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libaddns-samba4.solibaddns-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libads-samba4.solibads-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libasn1util-samba4.solibasn1util-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libauth-samba4.solibauth-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libauthkrb5-samba4.solibauthkrb5-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libcli-cldap-samba4.solibcli-cldap-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libcli-ldap-common-samba4.solibcli-ldap-common-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libcli-ldap-samba4.solibcli-ldap-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libcli-nbt-samba4.solibcli-nbt-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libcli-smb-common-samba4.solibcli-smb-common-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libcli-spoolss-samba4.solibcli-spoolss-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libcliauth-samba4.solibcliauth-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libclidns-samba4.solibclidns-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libcluster-samba4.solibcluster-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libcmdline-contexts-samba4.solibcmdline-contexts-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libcmdline-samba4.solibcmdline-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libcommon-auth-samba4.solibcommon-auth-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libdbwrap-samba4.solibdbwrap-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libdcerpc-binding.so.0libdcerpc-binding.so.0(DCERPC_BINDING_0.0.1)libdcerpc-binding0-32bitlibdcerpc-pkt-auth-samba4.solibdcerpc-pkt-auth-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libdcerpc-samba-samba4.solibdcerpc-samba-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libdcerpc-samba4.solibdcerpc-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libdcerpc-server-core.so.0libdcerpc-server-core.so.0(DCERPC_SERVER_CORE_0.0.1)libdcerpc.so.0libdcerpc.so.0(DCERPC_0.0.1)libdcerpc0-32bitlibevents-samba4.solibevents-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libflag-mapping-samba4.solibflag-mapping-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libgenrand-samba4.solibgenrand-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libgensec-samba4.solibgensec-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libgpo-samba4.solibgpo-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libgse-samba4.solibgse-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libhttp-samba4.solibhttp-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libinterfaces-samba4.solibinterfaces-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libiov-buf-samba4.solibiov-buf-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libkrb5samba-samba4.solibkrb5samba-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libldbsamba-samba4.solibldbsamba-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)liblibcli-lsa3-samba4.soliblibcli-lsa3-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)liblibcli-netlogon3-samba4.soliblibcli-netlogon3-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)liblibsmb-samba4.soliblibsmb-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libmessages-dgm-samba4.solibmessages-dgm-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libmessages-util-samba4.solibmessages-util-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libmscat-samba4.solibmscat-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libmsghdr-samba4.solibmsghdr-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libmsrpc3-samba4.solibmsrpc3-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libndr-krb5pac.so.0libndr-krb5pac.so.0(NDR_KRB5PAC_0.0.1)libndr-krb5pac0-32bitlibndr-nbt.so.0libndr-nbt.so.0(NDR_NBT_0.0.1)libndr-nbt0-32bitlibndr-samba-samba4.solibndr-samba-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libndr-samba4.solibndr-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libndr-standard.so.0libndr-standard.so.0(NDR_STANDARD_0.0.1)libndr-standard0-32bitlibndr.so.3libndr.so.3(NDR_0.0.1)libndr.so.3(NDR_0.0.2)libndr.so.3(NDR_0.0.3)libndr.so.3(NDR_0.0.4)libndr.so.3(NDR_0.0.5)libndr.so.3(NDR_0.0.6)libndr.so.3(NDR_0.0.7)libndr.so.3(NDR_0.0.8)libndr.so.3(NDR_0.0.9)libndr.so.3(NDR_0.1.0)libndr.so.3(NDR_0.1.1)libndr.so.3(NDR_0.1.2)libndr.so.3(NDR_0.2.0)libndr.so.3(NDR_0.2.1)libndr.so.3(NDR_1.0.0)libndr.so.3(NDR_1.0.1)libndr.so.3(NDR_1.0.2)libndr.so.3(NDR_2.0.0)libndr.so.3(NDR_3.0.0)libndr2-32bitlibnet-keytab-samba4.solibnet-keytab-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libnetapi.so.1libnetapi.so.1(NETAPI_1.0.0)libnetapi0-32bitlibnetif-samba4.solibnetif-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libnpa-tstream-samba4.solibnpa-tstream-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libprinting-migrate-samba4.solibprinting-migrate-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libregistry-samba4.solibregistry-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libreplace-samba4.solibreplace-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libsamba-cluster-support-samba4.solibsamba-cluster-support-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libsamba-credentials.so.1libsamba-credentials.so.1(SAMBA_CREDENTIALS_1.0.0)libsamba-credentials1-32bitlibsamba-debug-samba4.solibsamba-debug-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libsamba-errors.so.1libsamba-errors.so.1(SAMBA_ERRORS_1.0.0)libsamba-errors0-32bitlibsamba-hostconfig.so.0libsamba-hostconfig.so.0(SAMBA_HOSTCONFIG_0.0.1)libsamba-hostconfig0-32bitlibsamba-modules-samba4.solibsamba-modules-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libsamba-passdb.so.0libsamba-passdb.so.0(SAMBA_PASSDB_0.2.0)libsamba-passdb.so.0(SAMBA_PASSDB_0.24.1)libsamba-passdb.so.0(SAMBA_PASSDB_0.24.2)libsamba-passdb.so.0(SAMBA_PASSDB_0.25.0)libsamba-passdb.so.0(SAMBA_PASSDB_0.26.0)libsamba-passdb.so.0(SAMBA_PASSDB_0.27.0)libsamba-passdb.so.0(SAMBA_PASSDB_0.27.1)libsamba-passdb.so.0(SAMBA_PASSDB_0.27.2)libsamba-passdb.so.0(SAMBA_PASSDB_0.28.0)libsamba-passdb0-32bitlibsamba-security-samba4.solibsamba-security-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libsamba-sockets-samba4.solibsamba-sockets-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libsamba-util.so.0libsamba-util.so.0(SAMBA_UTIL_0.0.1)libsamba-util0-32bitlibsamba3-util-samba4.solibsamba3-util-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libsamdb-common-samba4.solibsamdb-common-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libsamdb.so.0libsamdb.so.0(SAMDB_0.0.1)libsamdb0-32bitlibsecrets3-samba4.solibsecrets3-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libserver-id-db-samba4.solibserver-id-db-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libserver-role-samba4.solibserver-role-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libsmb-transport-samba4.solibsmb-transport-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libsmbclient-raw-samba4.solibsmbclient-raw-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libsmbclient.so.0libsmbclient.so.0(SMBCLIENT_0.1.0)libsmbclient.so.0(SMBCLIENT_0.2.0)libsmbclient.so.0(SMBCLIENT_0.2.1)libsmbclient.so.0(SMBCLIENT_0.2.2)libsmbclient.so.0(SMBCLIENT_0.2.3)libsmbclient.so.0(SMBCLIENT_0.3.0)libsmbclient.so.0(SMBCLIENT_0.3.1)libsmbclient.so.0(SMBCLIENT_0.3.2)libsmbclient.so.0(SMBCLIENT_0.3.3)libsmbclient.so.0(SMBCLIENT_0.4.0)libsmbclient.so.0(SMBCLIENT_0.5.0)libsmbclient.so.0(SMBCLIENT_0.6.0)libsmbclient.so.0(SMBCLIENT_0.7.0)libsmbclient0-32bitlibsmbconf.so.0libsmbconf.so.0(SMBCONF_0.0.1)libsmbconf0-32bitlibsmbd-base-samba4.solibsmbd-base-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libsmbd-shim-samba4.solibsmbd-shim-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libsmbldap.so.2libsmbldap.so.2(SMBLDAP_0)libsmbldap.so.2(SMBLDAP_1)libsmbldap.so.2(SMBLDAP_2)libsmbldap.so.2(SMBLDAP_2.1.0)libsmbldap2-32bitlibsmbldaphelper-samba4.solibsmbldaphelper-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libsocket-blocking-samba4.solibsocket-blocking-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libsys-rw-samba4.solibsys-rw-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libtalloc-report-printf-samba4.solibtalloc-report-printf-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libtdb-wrap-samba4.solibtdb-wrap-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libtevent-util.so.0libtevent-util.so.0(TEVENT_UTIL_0.0.1)libtevent-util0-32bitlibtime-basic-samba4.solibtime-basic-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libtrusts-util-samba4.solibtrusts-util-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libutil-reg-samba4.solibutil-reg-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libutil-setid-samba4.solibutil-setid-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libutil-tdb-samba4.solibutil-tdb-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libwbclient.so.0libwbclient.so.0(WBCLIENT_0.10)libwbclient.so.0(WBCLIENT_0.11)libwbclient.so.0(WBCLIENT_0.12)libwbclient.so.0(WBCLIENT_0.13)libwbclient.so.0(WBCLIENT_0.14)libwbclient.so.0(WBCLIENT_0.15)libwbclient.so.0(WBCLIENT_0.9)libwbclient0-32bitsamba-client-libs-32bitsamba-client-libs-32bit(x86-32)@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    /bin/shld-linux.so.2ld-linux.so.2(GLIBC_2.3)libCHARSET3-samba4.solibCHARSET3-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libMESSAGING-SEND-samba4.solibMESSAGING-SEND-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libMESSAGING-samba4.solibMESSAGING-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libacl.so.1libacl.so.1(ACL_1.0)libaddns-samba4.solibaddns-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libads-samba4.solibads-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libasn1util-samba4.solibasn1util-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libauth-samba4.solibauth-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libauthkrb5-samba4.solibauthkrb5-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libavahi-client.so.3libavahi-common.so.3libc.so.6libc.so.6(GLIBC_2.0)libc.so.6(GLIBC_2.1)libc.so.6(GLIBC_2.1.1)libc.so.6(GLIBC_2.1.2)libc.so.6(GLIBC_2.1.3)libc.so.6(GLIBC_2.11)libc.so.6(GLIBC_2.15)libc.so.6(GLIBC_2.17)libc.so.6(GLIBC_2.2)libc.so.6(GLIBC_2.2.3)libc.so.6(GLIBC_2.2.4)libc.so.6(GLIBC_2.27)libc.so.6(GLIBC_2.28)libc.so.6(GLIBC_2.3)libc.so.6(GLIBC_2.3.2)libc.so.6(GLIBC_2.3.3)libc.so.6(GLIBC_2.3.4)libc.so.6(GLIBC_2.4)libc.so.6(GLIBC_2.5)libc.so.6(GLIBC_2.6)libc.so.6(GLIBC_2.7)libc.so.6(GLIBC_2.8)libcli-cldap-samba4.solibcli-cldap-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libcli-ldap-common-samba4.solibcli-ldap-common-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libcli-ldap-samba4.solibcli-ldap-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libcli-nbt-samba4.solibcli-nbt-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libcli-smb-common-samba4.solibcli-smb-common-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libcli-spoolss-samba4.solibcli-spoolss-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libcliauth-samba4.solibcliauth-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libclidns-samba4.solibclidns-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libcluster-samba4.solibcluster-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libcom_err.so.2libcommon-auth-samba4.solibcommon-auth-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libdbwrap-samba4.solibdbwrap-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libdcerpc-binding.so.0libdcerpc-binding.so.0(DCERPC_BINDING_0.0.1)libdcerpc-pkt-auth-samba4.solibdcerpc-pkt-auth-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libdcerpc-samba-samba4.solibdcerpc-samba-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libdcerpc.so.0libdcerpc.so.0(DCERPC_0.0.1)libdl.so.2libdl.so.2(GLIBC_2.0)libdl.so.2(GLIBC_2.1)libflag-mapping-samba4.solibflag-mapping-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libgenrand-samba4.solibgenrand-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libgensec-samba4.solibgensec-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libgnutls.so.30libgnutls.so.30(GNUTLS_3_4)libgnutls.so.30(GNUTLS_3_6_10)libgnutls.so.30(GNUTLS_3_6_13)libgnutls.so.30(GNUTLS_3_6_3)libgse-samba4.solibgse-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libgssapi_krb5.so.2libgssapi_krb5.so.2(gssapi_krb5_2_MIT)libhttp-samba4.solibhttp-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libinterfaces-samba4.solibinterfaces-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libiov-buf-samba4.solibiov-buf-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libk5crypto.so.3libk5crypto.so.3(k5crypto_3_MIT)libkrb5.so.3libkrb5.so.3(krb5_3_MIT)libkrb5samba-samba4.solibkrb5samba-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)liblber-2.4.so.2libldap_r-2.4.so.2libldb.so.2libldb.so.2(LDB_0.9.10)libldb.so.2(LDB_0.9.15)libldb.so.2(LDB_0.9.16)libldb.so.2(LDB_0.9.23)libldb.so.2(LDB_1.1.1)libldb.so.2(LDB_1.1.19)libldb.so.2(LDB_1.1.30)libldb.so.2(LDB_1.3.0)libldb.so.2(LDB_2.6.1)libldb.so.2(LDB_2.6.2)libldbsamba-samba4.solibldbsamba-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)liblibcli-lsa3-samba4.soliblibcli-lsa3-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)liblibcli-netlogon3-samba4.soliblibcli-netlogon3-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)liblibsmb-samba4.soliblibsmb-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libmessages-dgm-samba4.solibmessages-dgm-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libmessages-util-samba4.solibmessages-util-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libmsghdr-samba4.solibmsghdr-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libmsrpc3-samba4.solibmsrpc3-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libndr-krb5pac.so.0libndr-krb5pac.so.0(NDR_KRB5PAC_0.0.1)libndr-nbt.so.0libndr-nbt.so.0(NDR_NBT_0.0.1)libndr-samba-samba4.solibndr-samba-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libndr-samba4.solibndr-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libndr-standard.so.0libndr-standard.so.0(NDR_STANDARD_0.0.1)libndr.so.3libndr.so.3(NDR_0.0.1)libndr.so.3(NDR_0.0.3)libndr.so.3(NDR_0.0.4)libndr.so.3(NDR_0.0.5)libndr.so.3(NDR_0.0.6)libndr.so.3(NDR_0.0.7)libndr.so.3(NDR_0.0.8)libndr.so.3(NDR_0.0.9)libndr.so.3(NDR_0.1.1)libndr.so.3(NDR_0.1.2)libndr.so.3(NDR_0.2.0)libndr.so.3(NDR_0.2.1)libndr.so.3(NDR_1.0.0)libndr.so.3(NDR_1.0.1)libndr.so.3(NDR_1.0.2)libndr.so.3(NDR_2.0.0)libnetif-samba4.solibnetif-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libnpa-tstream-samba4.solibnpa-tstream-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libnscd.so.1libnscd.so.1(LIBNSCD_1.0)libpam.so.0libpam.so.0(LIBPAM_1.0)libpopt.so.0libpopt.so.0(LIBPOPT_0)libpthread.so.0libpthread.so.0(GLIBC_2.0)libpthread.so.0(GLIBC_2.1)libpthread.so.0(GLIBC_2.12)libpthread.so.0(GLIBC_2.2)libpthread.so.0(GLIBC_2.3.2)libreplace-samba4.solibreplace-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libresolv.so.2libresolv.so.2(GLIBC_2.2)libsamba-cluster-support-samba4.solibsamba-cluster-support-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libsamba-credentials.so.1libsamba-credentials.so.1(SAMBA_CREDENTIALS_1.0.0)libsamba-debug-samba4.solibsamba-debug-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libsamba-errors.so.1libsamba-errors.so.1(SAMBA_ERRORS_1.0.0)libsamba-hostconfig.so.0libsamba-hostconfig.so.0(SAMBA_HOSTCONFIG_0.0.1)libsamba-modules-samba4.solibsamba-modules-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libsamba-passdb.so.0libsamba-passdb.so.0(SAMBA_PASSDB_0.2.0)libsamba-passdb.so.0(SAMBA_PASSDB_0.27.1)libsamba-security-samba4.solibsamba-security-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libsamba-sockets-samba4.solibsamba-sockets-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libsamba-util.so.0libsamba-util.so.0(SAMBA_UTIL_0.0.1)libsamba3-util-samba4.solibsamba3-util-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libsamdb-common-samba4.solibsamdb-common-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libsamdb.so.0libsamdb.so.0(SAMDB_0.0.1)libsecrets3-samba4.solibsecrets3-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libserver-id-db-samba4.solibserver-id-db-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libserver-role-samba4.solibserver-role-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libsmb-transport-samba4.solibsmb-transport-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libsmbclient-raw-samba4.solibsmbclient-raw-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libsmbconf.so.0libsmbconf.so.0(SMBCONF_0.0.1)libsmbd-shim-samba4.solibsmbd-shim-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libsmbldap.so.2libsmbldap.so.2(SMBLDAP_0)libsmbldap.so.2(SMBLDAP_1)libsmbldaphelper-samba4.solibsmbldaphelper-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libsocket-blocking-samba4.solibsocket-blocking-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libsys-rw-samba4.solibsys-rw-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libsystemd.so.0libsystemd.so.0(LIBSYSTEMD_209)libtalloc-report-printf-samba4.solibtalloc-report-printf-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libtalloc.so.2libtalloc.so.2(TALLOC_2.0.2)libtalloc.so.2(TALLOC_2.1.0)libtasn1.so.6libtasn1.so.6(LIBTASN1_0_3)libtdb-wrap-samba4.solibtdb-wrap-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libtdb.so.1libtdb.so.1(TDB_1.2.1)libtdb.so.1(TDB_1.2.2)libtdb.so.1(TDB_1.2.5)libtdb.so.1(TDB_1.3.0)libtdb.so.1(TDB_1.3.11)libtdb.so.1(TDB_1.3.17)libtevent-util.so.0libtevent-util.so.0(TEVENT_UTIL_0.0.1)libtevent.so.0libtevent.so.0(TEVENT_0.11.0)libtevent.so.0(TEVENT_0.12.0)libtevent.so.0(TEVENT_0.13.0)libtevent.so.0(TEVENT_0.9.12)libtevent.so.0(TEVENT_0.9.13)libtevent.so.0(TEVENT_0.9.14)libtevent.so.0(TEVENT_0.9.16)libtevent.so.0(TEVENT_0.9.20)libtevent.so.0(TEVENT_0.9.21)libtevent.so.0(TEVENT_0.9.30)libtevent.so.0(TEVENT_0.9.31)libtevent.so.0(TEVENT_0.9.37)libtevent.so.0(TEVENT_0.9.9)libtime-basic-samba4.solibtime-basic-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libtrusts-util-samba4.solibtrusts-util-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libutil-reg-samba4.solibutil-reg-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libutil-setid-samba4.solibutil-setid-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libutil-tdb-samba4.solibutil-tdb-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_I386_SAMBA4)libwbclient.so.0libwbclient.so.0(WBCLIENT_0.13)libwbclient.so.0(WBCLIENT_0.9)libz.so.1rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.3ee@ez@e[J@e6`@eSd@d.@dd-@d@dd@d6@d@d @cvcvc@c@c @c@cctc5cM@b@b@b@ba@banopower@suse.comnopower@suse.comscabrero@suse.descabrero@suse.descabrero@suse.denopower@suse.comscabrero@suse.descabrero@suse.descabrero@suse.denopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comscabrero@suse.dedmulder@suse.comscabrero@suse.denopower@suse.comnopower@suse.comscabrero@suse.denopower@suse.comnopower@suse.comscabrero@suse.denopower@suse.comscabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comddiss@suse.comnopower@suse.comdmulder@suse.comdmulder@suse.comnopower@suse.comscabrero@suse.descabrero@suse.dedimstar@opensuse.orgscabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comnopower@suse.comnopower@suse.comscabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comnopower@suse.comscabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.denopower@suse.comscabrero@suse.deddiss@suse.comddiss@suse.comddiss@suse.comscabrero@suse.descabrero@suse.dedmulder@suse.comnopower@suse.comscabrero@suse.descabrero@suse.dedmulder@suse.comscabrero@suse.descabrero@suse.denopower@suse.comnopower@suse.comnopower@suse.comdmulder@suse.comscabrero@suse.denopower@suse.comddiss@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comscabrero@suse.denopower@suse.comnopower@suse.comjmcdonough@suse.comnopower@suse.comscabrero@suse.denopower@suse.comnopower@suse.comddiss@suse.comddiss@suse.comnopower@suse.comnopower@suse.comddiss@suse.comnopower@suse.comdmulder@suse.comdmulder@suse.comddiss@suse.comscabrero@suse.dedmulder@suse.comddiss@suse.comnopower@suse.comjengelh@inai.dedmulder@suse.comscabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comdmulder@suse.comdmulder@suse.comjmcdonough@suse.comdmulder@suse.comscabrero@suse.dedmulder@suse.comscabrero@suse.dedmulder@suse.comdmulder@suse.comvcizek@suse.comdmulder@suse.comdmulder@suse.comnopower@suse.comscabrero@suse.dejmcdonough@suse.comscabrero@suse.deaaptel@suse.comjengelh@inai.dedimstar@opensuse.orgdmulder@suse.comjmcdonough@suse.comdavid.mulder@suse.comjmcdonough@suse.comaaptel@suse.comdmulder@suse.comscabrero@suse.comscabrero@suse.comkukuk@suse.dedavid.mulder@suse.comscabrero@suse.comrbrown@suse.comdmulder@suse.comscabrero@suse.comdimstar@opensuse.orgscabrero@suse.comaaptel@suse.comnopower@suse.comnopower@suse.comaaptel@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comddiss@suse.comnopower@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comdmulder@suse.comnopower@suse.comjmcdonough@suse.comaaptel@suse.comkukuk@suse.comkukuk@suse.denopower@suse.comaaptel@suse.comdmulder@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comddiss@suse.comjmcdonough@suse.comddiss@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comjmcdonough@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comtchvatal@suse.comlmuelle@suse.comnopower@suse.comcrrodriguez@opensuse.orglmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comnoel.power@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comnopower@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.commpluskal@suse.comlmuelle@suse.comnopower@suse.deddiss@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.denopower@suse.delmuelle@suse.comnopower@suse.deddiss@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.com- fd_handle_destructor() panics within an smbd_smb2_close() if vfs_stat_fsp() fails in fd_close(); (bso#15527); (bsc#1219937).- Remove -x from bash shebang update-apparmor-samba-profile; (bsc#1218431).- Add new idmap_nss option 'use_upn' for those NSS modules able to handle UPNs or DOMAIN/user name format; (bsc#1215369); - Avoid unnecessary locking in idmap parent setup; (bsc#1215369);- Add "net offlinejoin composeodj" command; (bsc#1214076);- Update to samba 4.17.12 * Weird filename can cause assert to fail in openat_pathref_fsp_nosymlink(); (bso#15419); * reply_sesssetup_and_X() can dereference uninitialized tmp pointer; (bso#15420); * Missing return in reply_exit_done(); (bso#15430); * TREE_CONNECT without SETUP causes smbd to use uninitialized pointer; (bso#15432); * Improve GetNChanges to address some (but not all "Azure AD Connect") syncronisation tool looping during the initial user sync phase; (bso#15401); * Samba replication logs show (null) DN; (bso#15407); * Spotlight sometimes returns no results on latest macOS; (bso#15342); * Renaming results in NT_STATUS_SHARING_VIOLATION if previously attempted to remove the destination; (bso#15417); * Spotlight results return wrong date in result list; (bso#15427); * macOS mdfind returns only 50 results; (bso#15463); * 2-3min delays at reconnect with smb2_validate_sequence_number: bad message_id 2; (bso#15346); * samba-tool ntacl get segfault if aio_pthread appended; (bso#15441); * DCERPC_PKT_CO_CANCEL and DCERPC_PKT_ORPHANED can't be parsed; (bso#15446); * File doesn't show when user doesn't have permission if aio_pthread is loaded; (bso#15453); * net ads lookup (with unspecified realm) fails; (bso#15384); (bsc#1213826); * Regression DFS not working with widelinks = true; (bso#15435); (bsc#1213607); * ctdb_killtcp fails to work with --enable-pcap and libpcap 1.9.1; (bso#15451); * mdssvc: Do an early talloc_free() in _mdssvc_open(); (bso#15449); * Windows client join fails if a second container CN=System exists somewhere; (bso#9959); - Fix crossing automounter mount points; (bsc#1215212);- CVE-2023-4091: samba: Client can truncate file with read-only permissions; (bsc#1215904); (bso#15439). - CVE-2023-42669: samba: rpcecho, enabled and running in AD DC, allows blocking sleep on request; (bso#1215905); (bso#15474). - CVE-2023-42670: samba: The procedure number is out of range when starting Active Directory Users and Computers; (bsc#1215906); (bso#15473). - CVE-2023-3961: samba: Unsanitized client pipe name passed to local_np_connect(); (bsc#1215907); (bso#15422). - CVE-2023-4154: samba: dirsync allows SYSTEM access with only "GUID_DRS_GET_CHANGES" right, not "GUID_DRS_GET_ALL_CHANGES; (bsc#1215908); (bso#15424).- Fix DFS not working with widelinks enabled; (bsc#1213607); (bso#15435);- Move libcluster-samba4.so from samba-libs to samba-client-libs; (bsc#1213940);- net ads lookup with unspecified realm fails; (bso#15384); (bsc#1213826);- secure channel faulty since Windows 10/11 update 07/2023; (bso#15418); (bsc#1213384).- CVE-2022-2127: lm_resp_len not checked properly in winbindd_pam_auth_crap_send; (bso#15072); (bsc#1213174). - CVE-2023-34966: Samba Spotlight mdssvc RPC Request Infinite Loop Denial-of-Service Vulnerability; (bso#15340); (bsc#1213173). - CVE-2023-34967: Samba Spotlight mdssvc RPC Request Type Confusion Denial-of-Service Vulnerability; (bso#15341); (bsc#1213172). - CVE-2023-34968: Spotlight server-side Share Path Disclosure; (bso#15388); (bsc#1213171). - CVE-2023-3347: Samba doesn't require SMB2+ signing if `server signing = mandatory` is set; (bso#15397); (bsc#1213170).- Update to 4.17.9 * Backport --pidl-developer fixes; (bso#15404). * smbd_scavenger crashes when service smbd is stopped; (bso#15275). * vfs_fruit might cause a failing open for delete; (bso#15378). * named crashes on DLZ zone update; (bso#14030). * winbind recurses into itself via rpcd_lsad; (bso#15361). * cli_list loops 100% CPU against pre-lanman2 servers; (bso#15382). * smbclient leaks fds with showacls; (bso#15391). * aes256 smb3 encryption algorithms are not allowed in smb3_sid_parse(); (bso#15374). * winbindd gets stuck on NT_STATUS_RPC_SEC_PKG_ERROR; (bso#15413). * smbget memory leak if failed to download files recursively; (bso#15403).- Update to 4.17.8 * log flood: smbd_calculate_access_mask_fsp: Access denied: message level should be lower; (bso#15302). * Floating point exception (FPE) via cli_pull_send at source3/libsmb/clireadwrite.c; (bso#15306). * test_tstream_more_tcp_user_timeout_spin fails intermittently on Rackspace GitLab runners; (bso#15328). * Reduce flapping of ridalloc test; (bso#15329). * large_ldap test is unreliable; (bso#15351). * New filename parser doesn't check veto files smb.conf parameter; (bso#15143). * mdssvc may crash when initializing; (bso#15354). * Large directory optimization broken for non-lcomp path elements; (bso#15313). * streams_depot fails to create streams; (bso#15357). * shadow_copy2 and streams_depot don't play well together; (bso#15358). * wbinfo -u fails on ad dc with >1000 users; (bso#15366). * winbindd idmap child contacts the domain controller without a need; (bso#15317). * idmap_autorid may fail to map sids of trusted domains for the first time; (bso#15318). * idmap_hash doesn't use ID_TYPE_BOTH for reverse mappings; (bso#15319). * net ads search -P doesn't work against servers in other domains; (bso#15323). * DS ACEs might be inherited to unrelated object classes; (bso#15338). * Temporary smbXsrv_tcon_global.tdb can't be parsed; (bso#15353). * Setting veto files = /.*/ break listing directories; (bso#15360); (bsc#1212375). * CVE-2020-25720 [SECURITY] Create Child permission should not allow full write to all attributes (additional changes); (bso#14810). * dsgetdcname: assumes local system uses IPv4; (bso#15325).- Update to 4.17.7 * CVE-2023-0922: Samba AD DC admin tool samba-tool sends passwords in cleartext; (bso#15315); (bsc#1209481). * CVE-2023-0225: Samba AD DC "dnsHostname" attribute can be deleted by unprivileged authenticated users; (bso#15276); (bsc#1209483). * CVE-2023-0614: samba: Access controlled AD LDAP attributes can be discovered; (bso#15270); (bsc#1209485). * large_ldap test is inefficient; (bso#15332). * CVE-2020-25720 [SECURITY] Create Child permission should not allow full write to all attributes (additional changes); (bso#14810). - Update to 4.17.6 * streams_xattr is creating unexpected locks on folders; (bso#15314). * Use of the Azure AD Connect cloud sync tool is now supported for password hash synchronisation, allowing Samba AD Domains to synchronise passwords with this popular cloud environment; (bso#10635). * Spotlight doesn't work with latest macOS Ventura; (bso#15299). * New samba-dcerpc architecture does not scale gracefully; (bso#15310). * vfs_ceph incorrectly uses fsp_get_io_fd() instead of fsp_get_pathref_fd() in close and fstat; (bso#15307). * With clustering enabled samba-bgqd can core dump due to use after free; (bso#15293). * fd_load() function implicitly closes the fd where it should not; (bso#15311). - Update to 4.17.5 * smbc_getxattr() return value is incorrect; (bso#14808). * Compound SMB2 FLUSH+CLOSE requests from MacOSX are not handled correctly; (bso#15172). * synthetic_pathref AFP_AfpInfo failed errors; (bso#15210). * samba-tool gpo listall fails IPv6 only - finddcs() fails to find DC when there is only an AAAA record for the DC in DNS; (bso#15226). * smbd crashes if an FSCTL request is done on a stream handle; (bso#15236). * DFS links don't work anymore on Mac clients since 4.17; (bso#15277). * vfs_virusfilter segfault on access, directory edgecase (accessing NULL value); (bso#15283). * CVE-2022-38023 [SECURITY] Samba should refuse RC4 (aka md5) based SChannel on NETLOGON (additional changes); (bso#15240). * %U for include directive doesn't work for share listing (netshareenum); (bso#15243). * Shares missing from netshareenum response in samba 4.17.4; (bso#15266). * ctdb: use-after-free in run_proc; (bso#15269). * irpc_destructor may crash during shutdown; (bso#15280). * auth3_generate_session_info_pac leaks wbcAuthUserInfo; (bso#15286). * smbclient segfaults with use after free on an optimized build; (bso#15268). * smbstatus leaking files in msg.sock and msg.lock; (bso#15282). * Leak in wbcCtxPingDc2; (bso#15164). * Access based share enum does not work in Samba 4.16+; (bso#15265). * Crash during share enumeration; (bso#15267). * rep_listxattr on FreeBSD does not properly check for reads off end of returned buffer; (bso#15271). * Avoid relying on C89 features in a few places; (bso#15281).- Make (32bit) samba-libs conflict with old samba-ad-dc-libs package to satisfy installcheck.- Make samba-libs conflict with old samba-ad-dc-libs package to satisfy installcheck.- Remove non functioning ifup/ifdown samba-winbindd scripts; (bsc#1207414).- libdsdb-module-samba4 should be packaged as part of samba-libs and not samba-ad-dc-libs. Additionally no need for it to be removed conditionally.- Clean up logic for PAM migration settings in spec file.- Change with_dc default to 0 (for non TW builds), ADDC feature is deprecated and will no longer be included in >= SLE15-SP5; (jsc#PED-1122).- Update to 4.17.4 * CVE-2022-44640 Upstream Heimdal free of user-controlled pointer in FAST; (bsc#14929); * CVE-2021-20251 Bad password count not incremented atomically; (bsc#14611); * CVE-2022-42898 krb5_pac_parse() buffer parsing vulnerability; (bsc#15203); * CVE-2022-37966 rc4-hmac Kerberos session keys issued to modern servers; (bso#15237); * CVE-2022-37967 Kerberos constrained delegation ticket forgery possible against Samba AD DC; (bso#15231); * CVE-2022-38023 RC4/HMAC-MD5 NetLogon Secure Channel is weak and should be avoided; (bso#15240); * pam_winbind uses time_t and pointers assuming they are of the same size; (bso#15224); * Heimdal session key selection in AS-REQ examines wrong entry; (bso#15219); * filter-subunit is inefficient with large numbers of knownfails; (bso#15258); * smbd allows setting FILE_ATTRIBUTE_TEMPORARY on directories; (bso#15252); * The KDC logic arround msDs-supportedEncryptionTypes differs from Windows; (bso#13135); * libnet: change_password() doesn't work with dcerpc_samr_ChangePasswordUser4(); (bso#15206); * Heimdal session key selection in AS-REQ examines wrong entry; (bso#15219); * Memory leak in snprintf replacement functions; (bso#15230); * RODC doesn't reset badPwdCount reliable via an RWDC (CVE-2021-20251 regression); (bso#15253); * Prevent EBADF errors with vfs_glusterfs; (bso#15198); * %U for include directive doesn't work for share listing (netshareenum); (bso#15243); * Stack smashing in net offlinejoin requestodj; (bso#15257); * Windows 11 22H2 and Samba-AD 4.15 Kerberos login issue; (bso#15197); * Heimdal session key selection in AS-REQ examines wrong entry; (bso#15219); - Remove deprecated if-{down,up} scripts; (bsc#1206444); - Adjust the systemd drop-in file for named service; (bsc#1201689); * Paths are additive so do not repeat paths from named.service * Prefix the samba DLZ directory with "-" to ignore this path if it does not exists- Introduce without-smb1-server spec flag; (bsc#1205104); - Update to 4.17.3 * CVE-2022-42898: Samba buffer overflow vulnerabilities on 32-bit systems; (bsc#1205126); (bso#15203); - Replace obsolete python-gpgme with python-gpg * Upstream replaced it in v4.9.5 -- bso#13728 - Update to 4.17.2 * CVE-2022-3592 [SECURITY] samba: Wide links protection broken; (bso#15207); (bsc#1204499). * CVE-2022-3437 [SECURITY] samba: Buffer overflow in Heimdal unwrap_des3();(bso#15134); (bsc#1204254). - Update to 4.17.1 * CVE-2021-20251 [SECURITY] Bad password count not incremented atomically; (bso#14611). * smbXsrv_connection_shutdown_send result leaked; (bso#15174). * Flush on a named stream never completes; (bso#15182). * Permission denied calling SMBC_getatr when file not exists; (bso#15195). * Samba 4.5 sometimes cannot be upgraded to Samba 4.6 or later over DRS: WERROR_DS_DRA_MISSING_PARENT due to faulty GET_ANC; (bso#15189). * pytest: add file removal helpers for TestCaseInTempDir; (bso#15191). * CVE-2021-20251 [SECURITY] Bad password count not incremented atomically; (bso#14611). * Samba 4.5 sometimes cannot be upgraded to Samba 4.6 or later over DRS: WERROR_DS_DRA_MISSING_PARENT due to faulty GET_ANC; (bso#15189). * Flush on a named stream never completes; (bso#15182). * vfs_gpfs silently garbles timestamps > year 2106; (bso#15151). * CVE-2021-20251 [SECURITY] Bad password count not incremented atomically; (bso#14611). * multi-channel socket passing may hit a race if one of the involved processes already existed; (bso#15200). * memory leak on temporary of struct imessaging_post_state and struct tevent_immediate on struct imessaging_context (in rpcd_spoolss and maybe others); (bso#15201). * Since popt1.19 various use after free errors using result of poptGetArg are now exposed; (bso#15205); (boo#1204279). * Remove special case for O_CREAT in SMB_VFS_OPENAT from vfs_glusterfs; (bso#15192). * GETPWSID in memory cache grows indefinetly with each NTLM auth; (bso#15169). * CVE-2021-20251 [SECURITY] Bad password count not incremented atomically; (bso#14611). - Install a systemd drop-in file for named service to allow read/write access to the DLZ directory; (bsc#1201689); - Fix use after free errors resulting from using return of poptGetArg exposed since popt-1.19; (boo#1204279); (bso#15205). - s3: smbd: Fix memory leak in smbd_server_connection_terminate_done(); (bso#15174). - Disable SMB1 for tumbleweed builds. - Update to 4.17.0 * acl_xattr VFS module may unintentionally use filesystem permissions instead of ACL from xattr; (bso#15126). * Missing SMB2-GETINFO access checks from MS-SMB2 3.3.5.20.1; (bso#15153). * assert failed: !is_named_stream(smb_fname)") at ../../lib/util/fault.c:197; (bso#15161). * acl_xattr VFS module may unintentionally use filesystem permissions instead of ACL from xattr; (bso#15126). * assert failed: !is_named_stream(smb_fname)") at ../../lib/util/fault.c:197; (bso#15161). * Cross-node multi-channel reconnects result in SMB2 Negotiate returning NT_STATUS_NOT_SUPPORTED; (bso#15159). * winbind at info level debug can coredump when processing wb_lookupusergroups; (bso#15160). * Make use of glfs_*at() API calls in vfs_glusterfs; (bso#15157). * Possible use after free of connection_struct when iterating smbd_server_connection->connections; (bso#15128). * `net usershare add` fails with flag works with --long but fails with -l; (bso#15145). * acl_xattr VFS module may unintentionally use filesystem permissions instead of ACL from xattr; (bso#15126). * Performance regression on contended path based operations; (bso#15125). * Missing READ_LEASE break could cause data corruption; (bso#15148). * libsamba-errors uses a wrong version number; (bso#15141). * SMB1 negotiation can fail to handle connection errors; (bso#15152). * New filename parser doesn't check veto files smb.conf parameter; (bso#15143). * 4.17.rc1 still uses symlink-race prone unix_convert(); (bso#15144). * Backport fileserver related changed to 4.17.0rc2; (bso#15146). * Manpage for smbstatus json is missing; (bso#15147). * Backport fileserver related changed to 4.17.0rc2; (bso#15146). * Performance regression on contended path based operations; (bso#15125). * Backport fileserver related changed to 4.17.0rc2; (bso#15146). * Fix issues found by coverity in smbstatus json code; (bso#15140). * Backport fileserver related changed to 4.17.0rc2; (bso#15146). - Migration to /usr/etc: Saving user changed configuration files in /etc and restoring them while an RPM update. - Update to 4.16.4 * CVE-2022-2031: Samba AD users can bypass certain restrictions associated with changing passwords; (bsc#1201495); (bso#15047); * CVE-2022-32744: Samba AD users can forge password change requests for any user; (bsc#1201493); (bso#15074); * CVE-2022-32745: Samba AD users can crash the server process with an LDAP add or modify request; (bsc#1201492); (bso#15008); * CVE-2022-32746: Samba AD users can induce a use-after-free in the server process with an LDAP add or modify request; (bsc#1201490); (bso#15009); * CVE-2022-32742: Server memory information leak via SMB1; (bsc#1201496); (bso#15085); - Update to 4.16.3 * Using vfs_streams_xattr and deleting a file causes a panic; (bso#15099); * Add support for bind 9.18; (bso#14986); * logging dsdb audit to specific files does not work; (bso#15076); * Problem when winbind renews Kerberos; (bso#14979); (bsc#1196224); * Samba with new lorikeet-heimdal fails to build on gcc 12.1 in developer mode; (bso#15095); * Crash in streams_xattr because fsp->base_fsp->fsp_name is NULL; (bso#15105); * Crash in rpcd_classic - NULL pointer deference in mangle_is_mangled(); (bso#15118); * smbclient commands del & deltree fail with NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100); (bsc#1200556); * Fix check for chown when processing NFSv4 ACL; (bso#15120); * The pcap background queue process should not be stopped; (bso#15082); * testparm: Fix typo in idmap rangesize check; (bso#15097); * net ads info returns LDAP server and LDAP server name as null; (bso#15106); * ldconfig: /lib64/libsmbconf.so.0 is not a symbolic link; (bso#15108); * CTDB child process logging does not work as expected; (bso#15090); - Update spec file to fix the optional Heimdal DC build - Fix external trusts with MIT Kerberos 1.20 - Add missing samba-client requirement to samba-winbind package; (bsc#1198255); - Move pdb backends from package samba-libs to package samba-client-libs and remove samba-libs requirement from samba-winbind; (bsc#1200964); (bsc#1198255); - Add sysuser-shadow requirement for packages using systemd-sysusers - Use the canonical realm name to refresh the Kerberos tickets; (bsc#1196224); (bso#14979); - Moved logrotate files from user specific directory /etc/logrotate.d to vendor specific directory /usr/etc/logrotate.d. - Update to 4.16.2 * Use pathref fd instead of io fd in vfs_default_durable_cookie; (bso#15042); * vfs_gpfs with vfs_shadowcopy2 fail to restore file if original file had been deleted; (bso#15069); * Reintroduce netgroups support; (bso#15087); * net ads info shows LDAP Server: 0.0.0.0 depending on contacted server; (bso#14674); * Update from 4.15 to 4.16 breaks discovery of [homes] on standalone server from Win and IOS; (bso#15062); * waf produces incorrect names for python extensions with Python 3.11; (bso#15071); * smbclient -E doesn't work as advertised; (bso#15075); * The samba background daemon doesn't refresh the printcap cache on startup; (bso#15081); * Out-by-4 error in smbd read reply max_send clamp; (bso#14443); - Fix samba4.blackbox.net_ads_dns_async test with bind9 >= 9.17.7 - Support building with MIT Kerberos 1.20 - Bronze bit and S4U support with MIT Kerberos 1.20 for Samba AD DC; (CVE-2020-17049); - Resource Based Constrained Delegation (RBCD) for Samba AD DC - Support building with gcc 12.1 - Use requires_eq macro to require the libldb2 version available at samba-dsdb-modules build time; (bsc#1199362); - Update to 4.16.1 * Share and server swapped in smbget password prompt; (bso#14831); * Durable handles won't reconnect if the leased file is written to; (bso#15022); * rmdir silently fails if directory contains unreadable files and hide unreadable is yes; (bso#15023); * SMB2_CLOSE_FLAGS_FULL_INFORMATION fails to return information on renamed file handle; (bso#15038); * Need to describe --builtin-libraries= better (compare with - -bundled-libraries); (bso#8731); * vfs_shadow_copy2 breaks "smbd async dosmode" sync fallback; (bso#14957); * shadow_copy2 fails listing snapshotted dirs with shadow:fixinodes; (bso#15035); * PAM Kerberos authentication incorrectly fails with a clock skew error; (bso#15046); * Username map - samba erroneously applies unix group memberships to user account entries; (bso#15041); * KVNO off by 100000; (bso#14951); * Uninitialized litemask in variable in vfs_gpfs module; (bso#15027); * vfs_gpfs recalls=no option prevents listing files; (bso#15055); * smbd doesn't handle UPNs for looking up names; (bso#15054); - Update update-apparmor-samba-profile script, replace non-printable delimiter with more human readable separator as sed can accept separators that can appear in the input data. - Fix update-apparmor-samba-profile script, sed doesn't like multibyte separators; (bsc#1198309). - Update to 4.16.0 * New samba-dcerpcd binary to provide DCERPC in the member server setup * Certificate Auto Enrollment * Ability to add ports to dns forwarder addresses in internal DNS backend * No longer using Linux mandatory locks for sharemodes * SMB1 protocol has been deprecated, particularly older dialects * SMB1 protocol SMBCopy command removed * SMB1 server-side wildcard expansion removed - Add python3-dnspython to samba-ad-dc recommens; (bsc#1187101); - Use systemd-sysusers to create system users; (bsc#1182847);- Install a systemd drop-in file for named service to allow read/write access to the DLZ directory; (bsc#1201689);- Update to 4.15.12 * CVE-2022-42898: samba: heimdal: Samba buffer overflow vulnerabilities on 32-bit systems; (bso#15203); (bsc#1205126). - Update to 4.15.11 * Allow rebuild of Centos 8 images after move to vault for Samba 4.15; (bso#15193). * CVE-2022-3437: samba: Buffer overflow in Heimdal unwrap_des3(); (bso#15134); (bsc#1204254)- Update to 4.15.10 * Possible use after free of connection_struct when iterating smbd_server_connection->connections; (bso#15128); (bsc#1200102). * smbXsrv_connection_shutdown_send result leaked; (bso#15174). * Spotlight RPC service returns wrong response when Spotlight is disabled on a share; (bso#15086). * acl_xattr VFS module may unintentionally use filesystem permissions instead of ACL from xattr; (bso#15126). * Missing SMB2-GETINFO access checks from MS-SMB2 3.3.5.20.1; (bso#15153). * assert failed: !is_named_stream(smb_fname)") at ../../lib/util/fault.c:197; (bso#15161). * Missing READ_LEASE break could cause data corruption; (bso#15148). * rpcclient can crash using setuserinfo(2); (bso#15124). * Samba fails to build with glibc 2.36 caused by including in libreplace; (bso#15132). * SMB1 negotiation can fail to handle connection errors; (bso#15152). * samba-tool domain join segfault when joining a samba ad domain; (bso#15078). - Update to 4.15.9 * CVE-2022-32742:SMB1 code does not correct verify SMB1write, SMB1write_and_close, SMB1write_and_unlock lengths; (bso#15085); (bsc#1201496). * CVE-2022-32746: samba: Use-after-free occurring in database audit logging; (bso#15009); (bso#15096); (bsc#1201490). * CVE-2022-2031: samba, ldb: AD users can bypass certain restrictions associated with changing passwords; (bso#15047); (bsc#1201495); * CVE-2022-32745: samba: ldb: AD users can crash the server process with an LDAP add or modify request; (bso#15008); (bso#15096); (bsc#1201492). * CVE-2022-2031: samba, ldb: AD users can bypass certain restrictions associated with changing passwords; (bso#15047); (bsc#1201495); * CVE-2022-32744: samba, ldb: AD users can forge password change requests for any user; (bso#15074); (bso#15047); (bsc#1201493).- CVE-2022-1615: Do not ignore errors in random number generation; (bso#15103); (bsc#1202976); - CVE-2022-32743: Implement validated dnsHostName write rights; (bso#14833); (bsc#1202803);- Fix Use after free when iterating smbd_server_connection->connections after tree disconnect failure; (bso#15128); (bsc#1200102).- CVE-2022-32746: samba: Use-after-free occurring in database audit logging; (bso#15009); (bso#15096); (bsc#1201490). - CVE-2022-32745: samba: ldb: AD users can crash the server process with an LDAP add or modify request; (bso#15008); (bso#15096); (bsc#1201492). - CVE-2022-2031: samba, ldb: AD users can bypass certain restrictions associated with changing passwords; (bso#15047); (bsc#1201495); - CVE-2022-32742:SMB1 code does not correct verify SMB1write, SMB1write_and_close, SMB1write_and_unlock lengths; (bso#15085); (bsc#1201496). - CVE-2022-32744: samba, ldb: AD users can forge password change requests for any user; (bso#15074); (bso#15047); (bsc#1201493).- Update to 4.15.8 * Use pathref fd instead of io fd in vfs_default_durable_cookie; (bso#15042); * Setting fruit:resource = stream in vfs_fruit causes a panic; (bso#15099); * Add support for bind 9.18; (bso#14986); * logging dsdb audit to specific files does not work; (bso#15076); * vfs_gpfs with vfs_shadowcopy2 fail to restore file if original file had been deleted; (bso#15069); * netgroups support removed; (bso#15087); (bsc#1199247); * net ads info shows LDAP Server: 0.0.0.0 depending on contacted server; (bso#14674); (bsc#1199734); * waf produces incorrect names for python extensions with Python 3.11; (bso#15071); * smbclient commands del & deltree fail with NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100); (bsc#1200556); * vfs_gpfs recalls=no option prevents listing files; (bso#15055); * waf produces incorrect names for python extensions with Python 3.11; (bso#15071); * Compile error in source3/utils/regedit_hexedit.c; (bso#15091); * ldconfig: /lib64/libsmbconf.so.0 is not a symbolic link; (bso#15108); * smbd doesn't handle UPNs for looking up names; (bso#15054); * Out-by-4 error in smbd read reply max_send clamp; (bso#14443); - Move pdb backends from package samba-libs to package samba-client-libs and remove samba-libs requirement from samba-winbind; (bsc#1200964); (bsc#1198255); - Use the canonical realm name to refresh the Kerberos tickets; (bsc#1196224); (bso#14979);- Fix smbclient commands del & deltree failing with NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100); (bsc#1200556).- Revert NIS support removal; (bsc#1199247);- Use requires_eq macro to require the libldb2 version available at samba-dsdb-modules build time; (bsc#1199362);- Add missing samba-client requirement to samba-winbind package; (bsc#1198255);- Update to 4.15.7 * Share and server swapped in smbget password prompt; (bso#14831); * Durable handles won't reconnect if the leased file is written to; (bso#15022); * rmdir silently fails if directory contains unreadable files and hide unreadable is yes; (bso#15023); * SMB2_CLOSE_FLAGS_FULL_INFORMATION fails to return information on renamed file handle; (bso#15038); * vfs_shadow_copy2 breaks "smbd async dosmode" sync fallback; (bso#14957); * shadow_copy2 fails listing snapshotted dirs with shadow:fixinodes; (bso#15035); * PAM Kerberos authentication incorrectly fails with a clock skew error; (bso#15046); * username map - samba erroneously applies unix group memberships to user account entries; (bso#15041); * NT_STATUS_ACCESS_DENIED translates into EPERM instead of EACCES in SMBC_server_internal; (bso#14983); * Simple bind doesn't work against an RODC (with non-preloaded users); (bso#13879); * Crash of winbind on RODC; (bso#14641); * uncached logon on RODC always fails once; (bso#14865); * KVNO off by 100000; (bso#14951); * LDAP simple binds should honour "old password allowed period"; (bso#15001); * wbinfo -a doesn't work reliable with upn names; (bso#15003); * Simple bind doesn't work against an RODC (with non-preloaded users); (bso#13879); * Uninitialized litemask in variable in vfs_gpfs module; (bso#15027); * Regression: create krb5 conf = yes doesn't work with a single KDC; (bso#15016);- Add provides to samba-client-libs package to fix upgrades from previous versions; (bsc#1197995);- Add missing samba-libs requirement to samba-winbind package; (bsc#1198255);- Update to 4.15.6 * Renaming file on DFS root fails with NT_STATUS_OBJECT_PATH_NOT_FOUND; (bso#14169); * Samba does not response STATUS_INVALID_PARAMETER when opening 2 objects with same lease key; (bso#14737); * NT error code is not set when overwriting a file during rename in libsmbclient; (bso#14938); * Fix ldap simple bind with TLS auditing; (bso#14996); * net ads info shows LDAP Server: 0.0.0.0 depending on contacted server; (bso#14674); * Problem when winbind renews Kerberos; (bso#14979); (bsc#1196224); * pam_winbind will not allow gdm login if password about to expire; (bso#8691); * virusfilter_vfs_openat: Not scanned: Directory or special file; (bso#14971); * DFS fix for AIX broken; (bso#13631); * Solaris and AIX acl modules: wrong function arguments; (bso#14974); * Function aixacl_sys_acl_get_file not declared / coredump; (bso#7239); * Regression: Samba 4.15.2 on macOS segfaults intermittently during strcpy in tdbsam_getsampwnam; (bso#14900); * Fix a use-after-free in SMB1 server; (bso#14989); * smb2_signing_decrypt_pdu() may not decrypt with gnutls_aead_cipher_decrypt() from gnutls before 3.5.2; (bso#14968); * Changing the machine password against an RODC likely destroys the domain join; (bso#14984); * authsam_make_user_info_dc() steals memory from its struct ldb_message *msg argument; (bso#14993); * Use Heimdal 8.0 (pre) rather than an earlier snapshot; (bso#14995); * Samba autorid fails to map AD users if id rangesize fits in the id range only once; (bso#14967);- Fix mismatched version of libldb2; (bsc#1196788). - Drop obsolete SuSEfirewall2 service files.- Drop obsolete Samba fsrvp v0->v1 state upgrade functionality; (bsc#1080338).- Fix ntlm authentications with "winbind use default domain = yes"; (bso#13126); (bsc#1173429); (bsc#1196308).- Fix samba-ad-dc status warning notification message by disabling systemd notifications in bgqd; (bsc#1195896); (bso#14947).- libldb version mismatch in Samba dsdb component; (bsc#1118508);- Update to 4.15.5 * CVE-2021-44141: UNIX extensions in SMB1 disclose whether the outside target of a symlink exists; (bso#14911); (bsc#1193690). * CVE-2021-44142: Out-of-Bound Read/Write on Samba vfs_fruit module; (bso#14914); (bsc#1194859). * CVE-2022-0336: Re-adding an SPN skips subsequent SPN conflict checks; bso#14950); (bsc#1195048).- CVE-2021-44141: Information leak via symlinks of existance of files or directories outside of the exported share; (bso#14911); (bsc#1193690); - CVE-2021-44142: Out-of-bounds heap read/write vulnerability in VFS module vfs_fruit allows code execution; (bso#14914); (bsc#1194859); - CVE-2022-0336: Samba AD users with permission to write to an account can impersonate arbitrary services; (bso#14950); (bsc#1195048);- Update to 4.15.4 * Duplicate SMB file_ids leading to Windows client cache poisoning; (bso#14928); * Failed to parse NTLMv2_RESPONSE length 95 - Buffer Size Error - NT_STATUS_BUFFER_TOO_SMALL; (bso#14932); * kill_tcp_connections does not work; (bso#14934); * Can't connect to Windows shares not requiring authentication using KDE/Gnome; (bso#14935); * smbclient -L doesn't set "client max protocol" to NT1 before calling the "Reconnecting with SMB1 for workgroup listing" path; (bso#14939); * Cross device copy of the crossrename module always fails; (bso#14940); * symlinkat function from VFS cap module always fails with an error; (bso#14941); * Fix possible fsp pointer deference; (bso#14942); * Missing pop_sec_ctx() in error path inside close_directory(); (bso#14944); * "smbd --build-options" no longer works without an smb.conf file; (bso#14945);- Use pkgconfig(krb5) as dependency for the -devel package: allow OBS to pick the right flavor of krb5-devel (full vs mini). - Do not require the 'krb5' symbol by samba-client-libs: this package has an automatic dependency due to linkage on libgssapi_krb5.so.2. Automatic deps are always better. - Do not require the 'krb5' symbol from samba-libs: samba-libs requires samba-client-libs, which in turn requires krb5 libraries. Samba-libs itself has no need for krb5 (but get it indirectly anyway).- Reorganize libs packages. Split samba-libs into samba-client-libs, samba-libs, samba-winbind-libs and samba-ad-dc-libs, merging samba public libraries depending on internal samba libraries into these packages as there were dependency problems everytime one of these public libraries changed its version (bsc#1192684). The devel packages are merged into samba-devel. - Rename package samba-core-devel to samba-devel - Add python-rpm-macros to build requirements - Update the symlink create by samba-dsdb-modules to private samba ldb modules following libldb2 changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba- Update to 4.15.3 * Recursive directory delete with veto files is broken in 4.15.0; (bso#14878); * A directory containing dangling symlinks cannot be deleted by SMB2 alone when they are the only entry in the directory; (bso#14879); * SIGSEGV in rmdir_internals/synthetic_pathref - dirfsp is used uninitialized in rmdir_internals(); (bso#14892); * MaxQueryDuration not honoured in Samba AD DC LDAP; (bso#14694); * The CVE-2020-25717 username map [script] advice has undesired side effects for the local nt token; (bso#14901); (bsc#1192849); * User with multiple spaces (eg FredNurk) become un-deletable; (bso#14902); * Avoid storing NTTIME_THAW (-2) as value on disk; (bso#14127); * smbXsrv_client_global record validation leads to crash if existing record points at non-existing process; (bso#14882); * Crash in vfs_fruit asking for fsp_get_io_fd() for an XATTR call; (bso#14890); * Samba process doesn't log to logfile; (bso#14897); * set_ea_dos_attribute() fallback calling get_file_handle_for_metadata() triggers locking.tdb assert; (bso#14907); * Kerberos authentication on standalone server in MIT realm broken; (bso#14922); * Segmentation fault when joining the domain; (bso#14923); * Support for ROLE_IPA_DC is incomplete; (bso#14903); * rpcclient cannot connect to ncacn_ip_tcp services anymore; (bso#14767); * winexe crashes since 4.15.0 after popt parsing; (bso#14893); * net ads status -P broken in a clustered environment; (bso#14908); * Memory leak if ioctl(FSCTL_VALIDATE_NEGOTIATE_INFO) fails before smbd_smb2_ioctl_send; (bso#14788); * winbindd doesn't start when "allow trusted domains" is off; (bso#14899); * smbclient login without password using '-N' fails with NT_STATUS_INVALID_PARAMETER on Samba AD DC; (bso#14883); * A schannel client incorrectly detects a downgrade connecting to an AES only server; (bso#14912); * Possible null pointer dereference in winbind; (bso#14921); * Fix -k legacy option for client tools like smbclient, rpcclient, net, etc.; (bso#14846); * Add Debian 11 CI bootstrap support; (bso#14872); * Crash in recycle_unlink_internal(); (bso#14888);- Fix dependency problem upgrading from libndr0 to libndr2 and from libsamba-credentials0 to libsamba-credentials1; (bsc#1192684);- Fix regression introduced by CVE-2020-25717 patches, winbindd does not start when 'allow trusted domains' is off; (bso#14899); - Update to 4.15.2 * CVE-2016-2124: SMB1 client connections can be downgraded to plaintext authentication; (bso#12444); (bsc#1014440); * CVE-2020-25717: A user on the domain can become root on domain members; (bso#14556); (bsc#1192284); * CVE-2020-25718: Samba AD DC did not correctly sandbox Kerberos tickets issued by an RODC; (bso#14558); (bsc#1192246); * CVE-2020-25719: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets; (bso#14561); (bsc#1192247); * CVE-2020-25721: Kerberos acceptors need easy access to stable AD identifiers (eg objectSid); (bso#14557); (bsc#1192505); * CVE-2020-25722: Samba AD DC did not do suffienct access and conformance checking of data stored; (bso#14564); (bsc#1192283); * CVE-2021-3738: Use after free in Samba AD DC RPC server; (bso#14468); (bsc#1192215); * CVE-2021-23192: Subsequent DCE/RPC fragment injection vulnerability; (bso#14875); (bsc#1192214); - Update to 4.15.1 * vfs_shadow_copy2: core dump in make_relative_path; (bso#14682); * Log clutter from filename_convert_internal; (bso#14685); * MacOSX compilation fixes; (bso#14862); * rodc_rwdc test flaps; (bso#14868); * Provide a fix for MS CVE-2020-17049 in Samba [SECURITY] 'Bronze bit' S4U2Proxy Constrained Delegation bypass in Samba with embedded Heimdal; (bso#14642); * Python ldb.msg_diff() memory handling failure; (bso#14836); * "in" operator on ldb.Message is case sensitive; (bso#14845); * Release LDB 2.4.1 for Samba 4.15.1; (bso#14848); * samldb_krbtgtnumber_available() looks for incorrect string; (bso#14854); * Fix Samba support for UF_NO_AUTH_DATA_REQUIRED; (bso#14871); * Allow special chars like "@" in samAccountName when generating the salt; (bso#14874); * Correctly ignore comments in CTDB public addresses file; (bso#14826); * Fix transit path validation; (bso#12998); * Fix that child winbindd logs to log.winbindd instead of log.wb-; (bso#14852); * SMB3 cancel requests should only include the MID together with AsyncID when AES-128-GMAC is used; (bso#14855); * Prepare to operate with MIT krb5 >= 1.20; (bso#14870); * Heimdal prefers RC4 over AES for machine accounts; (bso#14864);- Enable samba-tool without ad dc.- Adjust spec to use pam macros; (bsc#1191046).- Adjust spec for size * allow some Recommends instead Requires to be configured for cifs-utils, samba-libs-python3 & samba-gpupdate; (bsc#1182847). * remove fam, undocumented and unneeded.- Add missing build dependency on bison when building with the embedded Heimdal Kerberos- Update to 4.15.0 * Removed SMB development dialects SMB2_22, SMB2_24 and SMB3_10 * VFS layer modernized. * Add the ability to set allow/deny lists for zone transfer clients in Bind DLZ plugin * Server multi-channel support no longer experimental * Improved command line user experience, unifying the options in different commands * Winbindd no longer scans trusted domains on startup and will use enterprise principals by default. * The net utility is now able to support the offline domain join feature * New options for 'samba-tool dns zoneoptions' for aging control and to mark old records as static or dynamic * DNS tombstones are now deleted as appropriate and use a consistent timestamp format * The 'samba-tool dns update' command validates and rejects now malformed IPv4 and IPv6 addresses * The 'samba-tool domain backup' command correctly takes out locks against concurrent modification during backup when using the LMDB backend * TruACL support has been removed * NIS support has been removed- Fix 'net rpc' authentication when using the machine account; (bsc#1189017); (bso#14796);- Fix dependency problem upgrading from libndr0 to libndr1; (bsc#1189875); - Fix dependency problem upgrading from libsmbldap0 to libsmbldap2; (bsc#1189875); - Fix wrong kvno exported to keytab after net ads changetrustpw due to replication delay; (bsc#1188727); - Add Certificate Auto Enrollment Policy; (jsc#SLE-18456). - Update to 4.13.10 * s3: smbd: Ensure POSIX default ACL is mapped into returned Windows ACL for directory handles; (bso#14708); * Take a copy to make sure we don't reference free'd memory; (bso#14721); * s3: lib: Fix talloc heirarcy error in parent_smb_fname(); (bso#14722); * s3: smbd: Remove erroneous TALLOC_FREE(smb_fname_parent) in change_file_owner_to_parent() error path; (bso#14736); * samba-tool: Give better error information when the 'domain backup restore' fails with a duplicate SID; (bso#14575); * smbd: Correctly initialize close timestamp fields; (bso#14714); * Spotlight RPC service doesn't work with vfs_glusterfs; (bso#14740); * ctdb: Fix a crash in run_proc_signal_handler(); (bso#14475); * gensec_krb5: Restore ipv6 support for kpasswd; (bso#14750); * smbXsrv_{open,session,tcon}: Protect smbXsrv_{open,session,tcon}_global_traverse_fn against invalid records; (bso#14752); * samba-tool domain backup offline doesn't work against bind DLZ backend; (bso#14027); * netcmd: Use next_free_rid() function to calculate a SID for restoring a backup; (bso#14669); - Update to 4.13.9 * s3: smbd: SMB1 SMBsplwr doesn't send a reply packet on success; (bso#14696); * Add documentation for dsdb_group_audit and dsdb_group_json_audit to "log level", synchronise "log level" in smb.conf with the code; (bso#14689); * Fix smbd panic when two clients open same file; (bso#14672); * Fix memory leak in the RPC server; (bso#14675); * s3: smbd: Fix deferred renames; (bso#14679); * s3-iremotewinspool: Set the per-request memory context; (bso#14675); * rpc_server3: Fix a memleak for internal pipes; (bso#14675); * third_party: Update socket_wrapper to version 1.3.2; (bso#11899); * third_party: Update socket_wrapper to version 1.3.3; (bso#14639); * idmap_rfc2307 and idmap_nss return wrong mapping for uid/gid conflict; (bso#14663); * Fix the build on OmniOS; (bso#14288); - Update to 4.13.8 * CVE-2021-20254: Fix buffer overrun in sids_to_unixids(); (bso#14571 - Update to 4.13.7 * Release with dependency on ldb version 2.2.1.- CVE-2021-20254 Buffer overrun in sids_to_unixids(); (bnc#14571); (bsc#1184677).- Fix offline domain backup not possible using lmdb version >= 0.9.26; (bso#14676); - Require libldb >= 2.2.1; (bsc#1183572); (bsc#1183574); - Update to 4.13.6 * CVE-2020-27840: samba: Unauthenticated remote heap corruption via bad DNs; (bso#14595); (bsc#1183572). * CVE-2021-20277: samba: out of bounds read in ldb_handler_fold; (bso#14655); (bsc#1183574). - Update to 4.13.5 * s3:modules:vfs_virusfilter: Recent talloc changes cause infinite start-up failure; (bso#14634); * s3: libsmb: Add missing cli_tdis() in error path if encryption setup failed on temp proxy connection; (bso#13992); * smbd: In conn_force_tdis_done() when forcing a connection closed force a full reload of services; (bso#14604); * dbcheck: Check Deleted Objects and reduce noise in reports about expired tombstones (bso#14593); * s3: Fix fcntl waf configure check; (bso#14503); * s3/auth: Implement "winbind:ignore domains"; (bso#14602); * smbd: Use fsp->conn->session_info for the initial delete-on-close token; (bso#14617); * s3: VFS: nfs4_acls. Add missing TALLOC_FREE(frame) in error path; (bso#14648); * classicupgrade: Treat old never expires value right; (bso#14624); * g_lock: Fix uninitalized variable reads; (bso#14636); * s3:pysmbd: Fix fd leak in py_smbd_create_file(); (bso#13898); * lib:util: Avoid free'ing our own pointer; (bso#14625); * HEIMDAL: krb5_storage_free(NULL) should work; (bso#12505);- Spec file fixes around systemd and requires; (bsc#1182830); - Align systemd service unit files with upstream provided ones.- Update to 4.13.4 * Work around special SMB2 IOCTL response behavior of NetApp Ontap 7.3.7; (bso#14607); * Temporary DFS share setup doesn't set case parameters in the same way as a regular share definition does; (bso#14612); * lib: Avoid declaring zero-length VLAs in various messaging functions; (bso#14605); * Do not create an empty DB when accessing a sam.ldb; (bso#14579); * vfs_fruit may close wrong backend fd; (bso#14596); * Temporary DFS share setup doesn't set case parameters in the same way as a regular share definition does; (bso#14612); * vfs_virusfilter: Allocate separate memory for config char*; (bso#14606); * vfs_fruit may close wrong backend fd; (bso#14596); * Work around special SMB2 IOCTL response behavior of NetApp Ontap 7.3.7; (bso#14607); * The cache directory for the user gencache should be created recursively; (bso#14601); * Be more flexible with repository names in CentOS 8 test environments; (bso#14594);- Uninstalling samba-client: Failed to disable unit, cifs.service does not exists; (bsc#1180388);- Update to 4.13.3 + libcli: smb2: Never print length if smb2_signing_key_valid() fails for crypto blob; (bso#14210); + s3: modules: gluster. Fix the error I made in preventing talloc leaks from a function; (bso#14486); + s3: smbd: Don't overwrite contents of fsp->aio_requests[0] with NULL via TALLOC_FREE(); (bso#14515); + s3: spoolss: Make parameters in call to user_ok_token() match all other uses; (bso#14568); + s3: smbd: Quiet log messages from usershares for an unknown share; (bso#14590); + samba process does not honor max log size; (bso#14248); + vfs_zfsacl: Add missing inherited flag on hidden "magic" everyone@ ACE; (bso#14587); + s3-libads: Pass timeout to open_socket_out in ms; (bso#13124); + s3-vfs_glusterfs: Always disable write-behind translator; (bso#14486); + smbclient: Fix recursive mget; (bso#14517); + clitar: Use do_list()'s recursion in clitar.c; (bso#14581); + manpages/vfs_glusterfs: Mention silent skipping of write-behind translator; (bso#14486); + vfs_shadow_copy2: Preserve all open flags assuming ROFS; (bso#14573); + interface: Fix if_index is not parsed correctly; (bso#14514);- Update to 4.13.2 + s3: modules: vfs_glusterfs: Fix leak of char **lines onto mem_ctx on return; (bso#14486); + RN: vfs_zfsacl: Only grant DELETE_CHILD if ACL tag is special; (bso#14471); + smb.conf.5: Add clarification how configuration changes reflected by Samba; (bso#14538); + daemons: Report status to systemd even when running in foreground; (bso#14552); + DNS Resolver: Support both dnspython before and after 2.0.0; (bso#14553); + s3-vfs_glusterfs: Refuse connection when write-behind xlator is present; (bso#14486); + provision: Add support for BIND 9.16.x; (bso#14487); + ctdb-common: Avoid aliasing errors during code optimization; (bso#14537); + libndr: Avoid assigning duplicate versions to symbols; (bso#14541); + docs: Fix default value of spoolss:architecture; (bso#14522); + winbind: Fix a memleak; (bso#14388); + s4:dsdb:acl_read: Implement "List Object" mode feature; (bso#14531); + docs-xml/manpages: Add warning about write-behind translator for vfs_glusterfs; (bso#14486); + nsswitch/nsstest.c: Avoid nss function conflicts with glibc nss.h. + vfs_shadow_copy2: Avoid closing snapsdir twice; (bso#14530); + third_party: Update resolv_wrapper to version 1.1.7; (bso#14547); + examples:auth: Do not install example plugin; (bso#14550); + ctdb-recoverd: Drop unnecessary and broken code; (bso#14513); + RN: vfs_zfsacl: Only grant DELETE_CHILD if ACL tag is special; (bso#14471);- Adjust smbcacls '--propagate-inheritance' feature to align with upstream; (bsc#1178469).- Update to samba 4.13.1 + CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with easily crafted records; (bsc#1177613); (bso#14472); + CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994); (bso#14436); + CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify; (bsc#1173902); (bso#14434); - Adjust systemd tmpfiles.d configuration, use /run/samba instead of /var/run/samba; (bsc#1177355);- Fix vfs_ceph query_directory regression; (bso#14519) - Drop liburing-devel for SLE15-SP2; (bsc#1177245)- Register CTDB recovery lock holder with ceph-mgr - Add liburing-devel dependency- Update to samba 4.13.0 + Require Python 3.6 + Move wide links functionality into VFS module + Deprecate NT4-like 'classic' Samba domain controllers + Deprecate SMBv1 only protocol options + Remove deprecated "ldap ssl ads" option + Unify asynchronous DCE-RPC server; (jsc#SES-645) + Replay multichannel lease break requests; (bso#11897); (jsc#SES-655) + Drop internal byteorder.h header from util-devel package + Remove final code for the AD DC LDAP backend + Add AD DC Group Policy Scripts + Only use gnutls_aead_cipher_encryptv2() for GnuTLS > 3.6.14; (bso#14399) + Fix %U substitutions if it contains a domain name; (bso#14467) + Fix krb5.conf creation for 'net ads join'; (bso#14479) + Fix build problem if libbsd-dev is not installed; (bso#14482) + Toggle vfs_snapper using "--with-shared-modules"; (bso#14437) + Fix idmap_ad RFC4511 response handling; (bso#14465) + Fix panic in get_lease_type(); (bso#14428)- Update to samba 4.11.13 + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2 against unencrypted passwords; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Support "server require schannel:WORKSTATION$ = no" about unsecure configurations; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): s4 torture rpc: repeated bytes in client challenge; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): libcli/auth: Reject weak client challenges in netlogon_creds_server_init() "server require schannel:WORKSTATION$ = no"; (bsc#1176579); (bso#14497); - Update to samba 4.11.12 + s3: libsmb: Fix SMB2 client rename bug to a Windows server; (bso#14403); + dsdb: Allow "password hash userPassword schemes = CryptSHA256" to work on RHEL7; (bso#14424); + dbcheck: Allow a dangling forward link outside our known NCs; (bso#14450); + lib/debug: Set the correct default backend loglevel to MAX_DEBUG_LEVEL; (bso#14426); + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428); + lib/util: do not install "test_util_paths"; (bso#14370); + lib:util: Fix smbclient -l basename dir; (bso#14345); + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428); + util: Allow symlinks in directory_create_or_exist; (bso#14166); + docs: Fix documentation for require_membership_of of pam_winbind; (bso#14358); + s3:winbind:idmap_ad: Make failure to get attrnames for schema mode fatal; (bso#14425);- Add obsoletes to libsmbldap2 package to fix upgrades from previous versions; (bsc#1172810);- Fix net command unable to negotiate SMB2; (bsc#1174120);- Update to samba 4.11.11 + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ and VLV combined; (bso#14364); (bsc#1173159] + CVE-2020-10745: invalid DNS or NBT queries containing dots use several seconds of CPU each; (bso#14378); (bsc#1173160). + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP server with paged_result or VLV; (bso#14402); (bsc#1173161) + CVE-2020-14303: Endless loop from empty UDP packet sent to AD DC nbt_server; (bso#14417); (bsc#1173359). - Update to samba 4.11.10 + Fix segfault when using SMBC_opendir_ctx() routine for share folder that contains incorrect symbols in any file name; (bso#14374). + vfs_shadow_copy2 doesn't fail case looking in snapdirseverywhere mode; (bso#14350) + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr; (bso#14413). + Malicous SMB1 server can crash libsmbclient; (bso#14366) + winbindd: Fix a use-after-free when winbind clients exit; (bso#14382) + ldb: Bump version to 2.0.11, LMDB databases can grow without bounds. (bso#14330) - Update to samba 4.11.9 + nmblib: Avoid undefined behaviour in handle_name_ptrs(); (bso#14242). + 'samba-tool group' commands do not handle group names with special chars correctly; (bso#14296). + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo is not valid; (bso#14237). + Missing check for DMAPI offline status in async DOS attributes; (bso#14293). + smbd: Ignore set NTACL requests which contain S-1-5-88 NFS ACEs; (bso#14307). + vfs_recycle: Prevent flooding the log if we're called on non-existant paths; (bso#14316) + smbd mistakenly updates a file's write-time on close; (bso#14320). + RPC handles cannot be differentiated in source3 RPC server; (bso#14359). + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313). + nsswitch: Fix use-after-free causing segfault in _pam_delete_cred; (bso#14327). + Fix fruit:time machine max size on arm; (bso#13622) + CTDB recovery corner cases can cause record resurrection and node banning; (bso#14294). + ctdb: Fix a memleak; (bso#14348). + libsmb: Don't try to find posix stat info in SMBC_getatr(). + ctdb-tcp: Move free of inbound queue to TCP restart; (bso#14295); (bsc#1162680). + s3/librpc/crypto: Fix double free with unresolved credential cache; (bso#14344); (bsc#1169095) + s3:libads: Fix ads_get_upn(); (bso#14336). + CTDB recovery corner cases can cause record resurrection and node banning; (bso#14294) + Starting ctdb node that was powered off hard before results in recovery loop; (bso#14295); (bsc#1162680). + ctdb-recoverd: Avoid dereferencing NULL rec->nodemap; (bso#14324) - Update to samba 4.11.8 + CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with ASQ; (bso#14331); (bsc#1169850); + CVE-2020-10704: LDAP Denial of Service (stack overflow) in Samba AD DC; (bso#14334); (bsc#1169851); - Update to samba 4.11.7 + s3: lib: nmblib. Clean up and harden nmb packet processing; (bso#14239). + s3: VFS: full_audit. Use system session_info if called from a temporary share definition; (bso#14283) + dsdb: Correctly handle memory in objectclass_attrs; (bso#14258). + ldb: version 2.0.9, Samba 4.11 and later give incorrect results for SCOPE_ONE searches; (bso#14270) + auth: Fix CIDs 1458418 and 1458420 Null pointer dereferences; (bso#14247). + smbd: Handle EINTR from open(2) properly; (bso#14285) + winbind member (source3) fails local SAM auth with empty domain name; (bso#14247) + winbindd: Handling missing idmap in getgrgid(); (bso#14265). + lib:util: Log mkdir error on correct debug levels; (bso#14253). + wafsamba: Do not use 'rU' as the 'U' is deprecated in Python 3.9; (bso#14266). + ctdb-tcp: Make error handling for outbound connection consistent; (bso#14274). - Update to samba 4.11.6 + pygpo: Use correct method flags; (bso#14209). + vfs_ceph_snapshots: Fix root relative path handling; (bso#14216); (bsc#1141320). + Avoiding bad call flags with python 3.8, using METH_NOARGS instead of zero; (bso#14209). + source4/utils/oLschema2ldif: Include stdint.h before cmocka.h; (bso#14218). + docs-xml/winbindnssinfo: Clarify interaction with idmap_ad etc; (bso#14122). + smbd: Fix the build with clang; (bso#14251). + upgradedns: Ensure lmdb lock files linked; (bso#14199). + s3: VFS: glusterfs: Reset nlinks for symlink entries during readdir; (bso#14182). + smbc_stat() doesn't return the correct st_mode and also the uid/gid is not filled (SMBv1) file; (bso#14101). + librpc: Fix string length checking in ndr_pull_charset_to_null(); (bso#14219). + ctdb-scripts: Strip square brackets when gathering connection info; (bso#14227).- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);- Installing: samba - samba-ad-dc.service does not exist and unit not found; (bsc#1171437);- Fix samba_winbind package is installing python3-base without python3 package; (bsc#1169521);- Require libldb2 >= 2.0.10 after security release.- CVE-2020-10704: LDAP Denial of Service (stack overflow) in Samba AD DC; (bso#14334); (bsc#1169851); - CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with ASQ; (bso#14331); (bsc#1169850);- Fix smbclient crash with double free (with unresolved krb5 credential cache); (bso#14344); (bsc#1169095).- Starting ctdb node that was powered off hard before results in recovery loop; (bso#14295); (bsc#1162680).- CTDB doesn't retry outgoing connections on bind (and some other) failures; (bso#14274); (bsc#1162680).- Revert: Allow idmap_rid to have primary group other than "Domain Users"; (bsc#1087931).- Fix nmbstatus not reporting detailed information about workgroups; (bsc#1159464); - Fix querying all names registered within broadcast area; (bso#8927);- Update to samab 4.11.5 + CVE-2019-14902: Replication of ACLs down subtree on AD Directory is not automatic; (bso#12497); (bsc#1160850). + CVE-2019-19344: Fix server crash with dns zone scavenging = yes; (bso#14050); (bsc#1160852). + CVE-2019-14907: server-side crash after charset conversion failure (eg during NTLMSSP processing); (bso#14208); (bsc#1160888). - Update to samba 4.11.4 + Ensure SMB1 cli_qpathinfo2() doesn't return an inode number; (bso#14161). + Ensure we don't call cli_RNetShareEnum() on an SMB1 connection; (bso#14174). + NT_STATUS_ACCESS_DENIED becomes EINVAL when using SMB2 in SMBC_opendir_ctx; (bso#14176). + SMB2 - Ensure we use the correct session_id if encrypting an interim response; (bso#14189). + Prevent smbd crash after invalid SMB1 negprot; (bso#14205). + printing: Fix %J substition; (bso#13745). + Remove now unneeded call to cmdline_messaging_context(); (bso#13925). + Fix incomplete conversion of former parametric options; (bso#14069). + Fix sync dosmode fallback in async dosmode codepath; (bso#14070). + vfs_fruit returns capped resource fork length; (bso#14171). + libnet_join: Add SPNs for additional-dns-hostnames entries; (bso#14116). + smbd: Increase a debug level; (bso#14211). + Prevent azure ad connect from reporting discovery errors reference-value-not-ldap-conformant; (bso#14153). + krb5_plugin: Fix developer build with newer heimdal system library; (bso#14179). + replace: Only link libnsl and libsocket if required; (bso#14168); + ctdb: Incoming queue can be orphaned causing communication; breakdown; (bso#14175). + ldb: Release ldb 2.0.8. Cross-compile will not take cross-answers or cross-execute; (bso#13846). + heimdal-build: Avoid hard-coded /usr/include/heimdal in asn1_compile-generated code; (bso#13856).- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).- Update to samba 4.11.3 + CVE-2019-14861: DNSServer RPC server crash, an authenticated user can crash the DCE/RPC DNS management server by creating records with matching the zone name; (bso#14138); (bsc#1158108). + CVE-2019-14870: DelegationNotAllowed not being enforced, the DelegationNotAllowed Kerberos feature restriction was not being applied when processing protocol transition requests (S4U2Self), in the AD DC KDC; (bso#14187); (bsc#1158109).- CVE-2019-14861: DNSServer RPC server crash, an authenticated user can crash the DCE/RPC DNS management server by creating records with matching the zone name; (bso#14138); (bsc#1158108). - CVE-2019-14870: DelegationNotAllowed not being enforced, the DelegationNotAllowed Kerberos feature restriction was not being applied when processing protocol transition requests (S4U2Self), in the AD DC KDC; (bso#14187); (bsc#1158109).- Update to samba 4.11.2 + CVE-2019-10218: Client code can return filenames containing path separators; (bsc#1144902); (bso#14071). + CVE-2019-14833: Samba AD DC check password script does not receive the full password; (bso#12438). + CVE-2019-14847: User with "get changes" permission can crash AD DC LDAP server via dirsync; (bso#14040). - Fixes from 4.11.1 + Overlinking libreplace against librt and pthread against every binary or library causes issues; (bso#14140); + kpasswd fails when built with MIT Kerberos; (bso#14155); + Fix spnego fallback from kerberos to ntlmssp in smbd server; (bso#14106); + Stale file handle error when using mkstemp on a share; (bso#14137); + non-AES schannel broken; (bso#14134); + Joining Active Directory should not use SAMR to set the password; (bso#13884); + smbclient can blunder into the SMB1 specific cli_RNetShareEnum() call on an SMB2 connection; (bso#14152); + Deleted records can be resurrected during recovery; (bso#14147); + getpwnam and getpwuid need to return data for ID_TYPE_BOTH group; (bso#14141); + winbind does not list forest trusts with additional trust attributes; (bso#14130); + fault report points to outdated documentation; (bso#14139); + pam_winbind with krb5_auth or wbinfo -K doesn't work for users of trusted domains/forests; (bso#14124); + classicupgrade results in uncaught exception - a bytes-like object is required, not 'str'; (bso#14136); + pod2man is not longer required, stop checking at build time; (bso#14131); + Exit code of ctdb nodestatus should not be influenced by deleted nodes; (bso#14129); + username/password authentication doesn't work with CUPS and smbspool; (bso#14128); + smbc_readdirplus() is incompatible with smbc_telldir() and smbc_lseekdir(); (bso#14094);- CVE-2019-14847: User with "get changes" permission can crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598); - CVE-2019-10218: Client code can return filenames containing path separators; (bso#14071); (bsc#1144902);- CVE-2019-14833: samba: Accent with "check script password" Samba AD DC check password script does not receive the full password; (bso#12438); (bsc#1154289).- Update to samba 4.11.0 + For details on all items see WHATSNEW.txt in samba-doc package + Python2 runtime support removed; python 3.4 or later required + Security improvements: - SMB1 disabled by default - lanman and plaintext authentication deprecated - winbind: PAM_AUTH and NTLM_AUTH events logged - GnuTLS 3.2 required; system FIPS mode setting honored + CephFS Snapshot integration, exposed as previous file versions + ctdb changes: - onnode -o option removed - ctdbd logs when using more than 90% of a CPU thread - CTDB_MONITOR_SWAP_USAGE variable removed + AD Domain controller improvements: - Upgrade AD databse format - BIND9_FLATFILE deprecated - default process model chagned to prefork - bind9 dns operation duration logging - Default schema updated to 2012_R2; function level is unchanged - many performance improvements + Configuration webserver support removed- Fix broken username/password authentication with CUPS and smbspool; (bsc#1152143); (bso#14128).- Fix auth problems when printing via smbspool backend with kerberos; (bnc#1148539); (bso#13832).- Update to samba 4.10.8 + CVE-2019-10197: user escape from share path definition; (bso#14035); (bsc#1141267);- Fix build on newer systems by modifying samba.spec to use consistent non-relative paths for pammodules in configure line and specification of pam_winbind.so library to package.- Update to samba 4.10.7 + Unable to create or rename file/directory inside shares configured with vfs_glusterfs_fuse module; (bso#14010). + build: Allow build when '--disable-gnutls' is set; (bso#13844) + samba-tool: Add 'import samba.drs_utils' to fsmo.py; (bso#13973). + Fix 'Error 32 determining PSOs in system' message on old DB with FL upgrade; (bso#14008). + s4/libnet: Fix joining a Windows pre-2008R2 DC; (bso#14021) + join: Use a specific attribute order for the DsAddEntry nTDSDSA object; (bso#14046). + vfs_catia: Pass stat info to synthetic_smb_fname(); (bso#14015). + lookup_name: Allow own domain lookup when flags == 0; (bso#14091). + s4 librpc rpc pyrpc: Ensure tevent_context deleted last; (bso#13932). + DEBUGC and DEBUGADDC doesn't print into a class specific log file; (bso#13915). + Request to keep deprecated option "server schannel", VMWare Quickprep requires "auto"; (bso#13949). + dbcheck: Fallback to the default tombstoneLifetime of 180 days; (bso#13967). + dnsProperty fails to decode values from older Windows versions; (bso#13969). + samba-tool: Use only one LDAP modify for dns partition fsmo role transfer; (bso#13973). + third_party: Update waf to version 2.0.17; (bso#13960). + netcmd: Allow 'drs replicate --local' to create partitions; (bso#14051). + ctdb-config: Depend on /etc/ctdb/nodes file; (bso#14017).- CVE-2019-10197: user escape from share path definition; (bso#14035); (bsc#1141267).- Prepare for use future use of kernel keyrings, modify /etc/pam.d/samba to include pam_keyinit.so; (bsc#1144059).- Update samba-winbind script to work with systemd; (bsc#1132739); - Drop samba dhcpcd hook scripts - Update to samba 4.10.6 + s3: winbind: Fix crash when invoking winbind idmap scripts; (bso#13956). + smbd does not correctly parse arguments passed to dfree and quota scripts; (bso#13964). + samba-tool dns: use bytes for inet_ntop; (bso#13965). + samba-tool domain provision: Fix --interactive module in python3; (bso#13828). + ldb_kv: Skip @ records early in a search full scan; (bso#13893). + docs: Improve documentation of "lanman auth" and "ntlm auth" connection; (bso#13981). + python/ntacls: Use correct "state directory" smb.conf option instead of "state dir"; (bso#14002). + registry: Add a missing include; (bso#13840). + Fix SMB guest authentication; (bso#13944). + AppleDouble conversion breaks Resourceforks; (bso#13958). + vfs_fruit makes direct use of syscalls like mmap() and pread(); (bso#13968). + s3:mdssvc: Fix flex compilation error; (bso#13987). + s3/vfs_glusterfs[_fuse]: Avoid using NAME_MAX directly; (bso#13872). + dsdb:samdb: schemainfo update with relax control; (bso#13799). + s3:util: Move static file_pload() function to lib/util; (bso#13964). + smbd: Fix a panic; (bso#13957). + ldap server: Generate correct referral schemes; (bso#12478). + s4 dsdb/repl_meta_data: fix use after free in dsdb_audit_add_ldb_value; (bso#13941). + s4 dsdb: Fix use after free in samldb_rename_search_base_callback; (bso#13942). + dsdb/repl: we need to replicate the whole schema before we can apply it; (bso#12204). + ldb: Release ldb 1.5.5; (bso#12478). + Schema replication fails if link crosses chunk boundary backwards; (bso#13713). + 'samba-tool domain schemaupgrade' uses relax control and skips the schemaInfo update provision; (bso#13799). + dsdb_audit: avoid printing "... remote host [Unknown] SID [(NULL SID)] ..."; (bso#13916). + python/ntacls: We only need security.SEC_STD_READ_CONTROL in order to get the ACL; (bso#13917). + s3:loadparm: Ensure to truncate FS Volume Label at multibyte boundary; (bso#13947). + Using Kerberos credentials to print using spoolss doesn't work; (bso#13939). + wafsamba: Use native waf timer; (bso#13998). + ctdb-scripts: Fix tcp_tw_recycle existence check; (bso#13984).- Update to samba-4.10.5 (including updates for 4.10.4, 4.10.3) + CVE-2019-12435 rpc/dns: Avoid NULL deference if zone not found in DnssrvOperation2; (bso#13922); (bsc#1137815). + CVE-2019-12436 dsdb/paged_results: Ignore successful results without messages; (bso#13951); (bsc#1137816). - Update to samba-4.10.4 + s3: SMB1: Don't allow recvfile on stream fsp's; (bso#13938). + py/provision: Fix for Python 2.6; (bso#13882). + netcmd: Fix 'passwordsettings --max-pwd-age' command; (bso#13873). + s3-libnet_join: 'net ads join' to child domain fails when using "-U admin@forestroot"; (bso#13861). + vfs_ceph: Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245). + vfs_ceph: Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697). + ctdb-common: Avoid race between fd and signal events; (bso#13895). + ctdb-common: Fix memory leak in run_proc; (bso#13943). + lib: Initialize getline() arguments; (bso#13892). + winbind: Fix overlapping id ranges; (bco#13903). + lib util debug: Increase format buffer to 4KiB; (bso#13902). + nsswitch pam_winbind: Fix Asan use after free; (bso#13927). + s4 lib socket: Ensure address string owned by parent struct; (bso#13929). + s3 rpc_client: Fix Asan stack use after scope; (bso#13936). + s3:smbd: Handle IO_REPARSE_TAG_DFS in SMB_FIND_FILE_FULL_DIRECTORY_INFO; (bso#10097). + smb2_tcon: Avoid STATUS_PENDING completely on tdis; (bso#10344). + smb2_sesssetup: avoid STATUS_PENDING responses for session setup; (bso#12845). + smb2_tcon: Avoid STATUS_PENDING completely on tdis; (bso#13698). + smb2_sesssetup: avoid STATUS_PENDING responses for session setup; (bso#13796). + dbcheck: Fix the err_empty_attribute() check; (bso#13843). + vfs_snapper: Drop unneeded fstat handler; (bso#13858). + vfs_default: Fix vfswrap_offload_write_send() NT_STATUS_INVALID_VIEW_SIZE check; (bso#13862). + smb2_server: Grant all 8192 credits to clients; (bso#13863). + smbd: Implement SMB_FILE_NORMALIZED_NAME_INFORMATION handling; (bso#13919). + s3/vfs_glusterfs: Dynamically determine NAME_MAX; (bso#13872). + s3: modules: ceph: Use current working directory instead of share path; (bso#13918); (bsc#1134452). + winbind: Use domain name from lsa query for sid_to_name cache entry; (bso#13831). + memcache: Increase size of default memcache to 512k; (bso#13865). + docs: Update smbclient manpage for "--max-protocol"; (bso#13857). + s3:utils: If share is NULL in smbcacls, don't print it; (bso#13937). + s3:smbspool: Fix regression printing with Kerberos credentials; (bso#13939). + ctdb-scripts: CTDB restarts failed NFS RPC services by hand, which is incompatible with systemd; (bso#13860). + ctdb-daemon: Revert "We can not assume that just because we could complete a TCP handshake"; (bso#13888). + ctdb-daemon: Never use 0 as a client ID; (bso#13930). + ctdb-common: Fix memory leak; (bso#13943). + s3:debug: Enable logging for early startup failures; (bso#13904) - Update to samba-4.10.3 + CVE-2018-16860: Heimdal KDC: Reject PA-S4U2Self with unkeyed checksum; (bso#13685); (bsc#1134024).- CVE-2019-12435: zone operations can crash rpc server; (bso#13922); (bsc#1137815).- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697). - Add ceph_snapshots VFS module; (jsc#SES-183).- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).- Update to samba-4.10.2: + CVE-2019-3870 (World writable files in Samba AD DC private/ dir); (bso#13834). + CVE-2019-3880 (Save registry file outside share as unprivileged user); (bso#13851). + py/kcc_utils: py2.6 compatibility; (bso#13837). + libcli: permit larger values of DataLength in SMB2_ENCRYPTION_CAPABILITIES of negotiate response; (bso#13869). + regfio: Improve handling of malformed registry hive files; (bso#13840). + ctdb-version: Simplify version string usage; (bso#13789). + lib: Make fd_load work for non-regular files; (bso#13859). + dbcheck: in the middle of the tombstone garbage collection causes replication failures, dbcheck: add --selftest-check-expired-tombstones cmdline option; (bso#13816). + ndr_spoolss_buf: Fix out of scope use of stack variable in NDR_SPOOLSS_PUSH_ENUM_OUT(); (bso#13818). + s4/messaging: Fix undefined reference in linking libMESSAGING-samba4.so; (bso#13854). + acl_read: Fix regression for empty lists; (bso#13836). + s4:dlz make b9_has_soa check dc=@ node; (bso#13841). + s3:client: Fix printing via smbspool backend with kerberos auth; (bso#13832). + s4:librpc: Fix installation of Samba; (bso#13847). + s3:lib: Fix the debug message for adding cache entries; (bso#13848). + s3:utils: Add 'smbstatus -L --resolve-uids' to show username; (bso#13793). + s3:lib: Fix the debug message for adding cache entries; (bso#13848). + s3:waf: Fix the detection of makdev() macro on Linux; (bso#13853). * ctdb-build: Drop creation of .distversion in tarball; (bso#13789). * ctdb-packaging: Test package requires tcpdump, ctdb package should not own system library directory; (bso#13838). - Update to samba-4.10.1: + py/kcc_utils: py2.6 compatibility; (bso#13837); + libcli: permit larger values of DataLength in SMB2_ENCRYPTION_CAPABILITIES of negotiate response; (bso#13869); + regfio: Improve handling of malformed registry hive files; (bso#13840); + ctdb-version: Simplify version string usage; (bso#13789); + lib: Make fd_load work for non-regular files; (bso#13859); + dbcheck in the middle of the tombstone garbage collection causes replication failures, dbcheck: add --selftest-check-expired-tombstones cmdline option; (bso#13816); + ndr_spoolss_buf: Fix out of scope use of stack variable in NDR_SPOOLSS_PUSH_ENUM_OUT(); (bso#13818); + s4/messaging: Fix undefined reference in linking libMESSAGING-samba4.so; (bso#13854); + acl_read: Fix regression for empty lists; (bso#13836); + s4:dlz make b9_has_soa check dc=@ node; (bso#13841); + s3:client: Fix printing via smbspool backend with kerberos auth; (bso#13832); + s4:librpc: Fix installation of Samba; (bso#13847); + s3:lib: Fix the debug message for adding cache entries; (bso#13848); + s3:utils: Add 'smbstatus -L --resolve-uids' to show username; (bso#13793); + s3:lib: Fix the debug message for adding cache entries; (bso#13848); + s3:waf: Fix the detection of makdev() macro on Linux; (bso#13853); + ctdb-build: Drop creation of .distversion in tarball; (bso#13789); + ctdb-packaging: Test package requires tcpdump, ctdb package should not own system library directory; (bso#13838); - Update to samba-4.10.0: + s4-server: Open and close a transaction on sam.ldb at startup; (bso#13760); + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812); + s4/scripting/bin: Open unicode files with utf8 encoding and write + unicode string. + sambaundoguididx: Use the right escaped oder unescaped sam ldb files; (bso#13759); + Fix idmap cache pollution with S-1-22- IDs on winbind hickup; (bso#13813); + passdb: Update ABI to 0.27.2. + lib/winbind_util: Add winbind_xid_to_sid for --without-winbind; (bso#13813); + lib:util: Move debug message for mkdir failing to log level 1; (bso#13823);- MacOS credit accounting breaks with async SESSION SETUP; (bsc#1125601); (bso#13796). - Mac OS X SMB2 implmenetation sees Input/output error or Resource temporarily unavailable and drops connection; (bso#13698)- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).- CVE-2019-3880: Save registry file outside share as unprivileged user; (bso#13851); (bsc#1131060 ).- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0); (bso#13834); (bsc#1130703);- Update to samba-4.9.5 + audit_logging: Remove debug log header and JSON Authentication: prefix; (bso#13714); + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760); + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso# CID: 1433607; (bso#11495); + smbd: uid: Don't crash if 'force group' is added to an existing share connection; (bso#13690); + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility code; (bso#13770); + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803); + s3:utils/smbget fix recursive download with empty source directories; (bso#13199); + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716); + s3:libsmb: cli_smb2_list() can sometimes fail initially on a connection; (bso#13736); + join: Throw CommandError instead of Exception for simple errors; (bso#13747); + ldb: Avoid inefficient one-level searches; (bso#13762); + s3: libsmb: use smb2cli_conn_max_trans_size() in cli_smb2_list(); (bso#13736); + tldap: Avoid use after free errors; (bso#13776); + Fix idmap xid2sid cache churn; (bso#13802); + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812); + s3-smbd: Avoid assuming fsp is always intact after close_file call; (bso#13720); + s3-vfs-fruit: Add close call; (bso#13725); + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746); + s3-vfs: add glusterfs_fuse vfs module; (bso#13774); + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766); + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS) ftruncate and fallocate; (bso#13807); + lib/audit_logging: Actually create talloc; (bso#13737); + netcmd/user: python[3]-gpgme unsupported and replaced by python[3]-gpg; (bso#13728); + dns: Changing onelevel search for wildcard to subtree; (bso#13738); + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721); + sambaundoguididx: Use the right escaped oder unescaped sam ldb files; (bso#13759); + ctdb: Print locks latency in machinereadable stats; (bso#13742); + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786); + audit_logging: auth_json_audit required auth_json; (bso#13715); + man pages: Document prefork process model; (bso#13765); + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773); + s3:auth: ignore create_builtin_guests() failing without a valid idmap configuration; (bso#13697); + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC without trusts; (bso#13722); + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd is not available; (bso#13723); + s4:server: Add support for 'smbcontrol samba shutdown' and 'smbcontrol debug/debuglevel'; (bso#13752); + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616); + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330); + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774); + notifyd: Fix SIGBUS on sparc; (bso#13704); + waf: Check for libnscd; (bso#13787); + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770); + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717); + Recovery lock bug fixes; (bso#13800); + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726); + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727); + vfs_fileid: Fix get_connectpath_ino; (bso#13741); + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).- Fix update-apparmor-samba-profile script after apparmor switched to using named profiles. The change is backwards compatible; (bsc#1126377);- LoadParm().load_default() fails with "Unable to load default file"; (bsc#1089758);- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);- Update to samba-4.9.4 + libcli/smb: Don't overwrite status code; (bso#9175). + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164). + Session setup reauth fails to sign response; (bso#13661). + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677). + vfs_shadow_copy2: Nicely deal with attempts to open previous version for writing; (bso#13688). + Restoring previous version of stream with vfs_shadow_copy2 fails with NT_STATUS_OBJECT_NAME_INVALID fsp->base_fsp->fsp_name; (bso#13455). + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571). + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708) + PEP8: fix E231: missing whitespace after ','. + winbindd: Fix crash when taking profiles;(bso#13629) + CVE-2018-14629 dns: Fix CNAME loop prevention using counter regression; (bso#13600) + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686). + CVE-2018-16853: Do not segfault if client is not set; (bso#13571). + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679) + ctdb-daemon: Exit with error if a database directory does not exist; (bso#13696). + s3:libads: Add net ads leave keep-account option; (bso#13498).- Drop more %if..%endif guards which are idempotent. - Drop requires on ldconfig which are already auto-discovered. - Do not ignore errors from useradd/groupadd.- Remove python2 build dependency from samba-libs; (bsc#1116900);- Update update-apparmor-samba-profile script to ignore the shares's paths containing substitution variables in any place, not only at the beginning of the path.- Update to samba-4.9.3 + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD Internal DNS server; (bso#13600); (bsc#1116319); + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628); (bsc#1116320); + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server; (bso#13674); (bsc#1116322); + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers; (bso#13669); (bsc#1116321); + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos configuration (unsupported); (bso#13678); (bsc#1116324); + CVE-2018-16857: Bad password count in AD DC not always effective; window; (bso#13683); (bsc#1116323);- Update to samba-4.9.2 + dsdb: Add comments explaining the limitations of our current backlink behaviour; (bso#13418); + Fix problems running domain backups (handling SMBv2, sites); (bso#13621); + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3; (bso#13465); + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642); + File saving issues with vfs_fruit on samba >= 4.8.5; (bso#13646); + Enabling vfs_fruit looses FinderInfo; (bso#13649); + Cancelling of SMB2 aio reads and writes returns wrong error NT_STATUS_INTERNAL_ERROR; (bso#13667); + Fix CTDB recovery record resurrection from inactive nodes and simplify vacuuming; (bso#13641); + examples: Fix the smb2mount build; (bso#13465); + libtevent: Fix build due to missing open_memstream on Illiumos; (bso#13629); + winbindd_cache: Fix timeout calculation for sid<->name cache; (bso#13662); + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path; (bso#13653); + Extended DN SID component missing for member after switching group membership; (bso#13418); + Return STATUS_SESSION_EXPIRED error encrypted, if the request was encrypted; (bso#13624); + python: Allow forced signing via smb.SMB(); (bso#13621); + lib:socket: If returning early, set ifaces; (bso#13665); + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8 encoded unicode; (bso#13616); + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute; (bso#13673); + waf: Add -fstack-clash-protection; (bso#13601); + winbind: Fix segfault if an invalid passdb backend is configured; (bso#13668); + Fix bugs in CTDB event handling; (bso#13659); + Misbehaving nodes are sometimes not banned; (bso#13670);- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);- winbind requires latest version of libtevent-util0 to start- Backport latest gpo code from master + Read policy from local gpt cache + Offline policy application + Make group policy extensible via register/unregister gpext + gpext's run via a process_group_policy method- Enable profiling data collection- Change samba-kdc package name to samba-ad-dc - Move samba-ad-dc.service to the samba-ad-dc package- Update to samba-4.9.1 + s3: nmbd: Stop nmbd network announce storm; (bso#13620); + s3-rpcclient: Use spoolss_init_spoolss_UserLevel1 in winspool cmds; (bso#13597); + CTDB recovery lock has some race conditions; (bso#13617); + s3-rpc_client: Advertise Windows 7 client info; (bso#13597); + ctdb-doc: Remove PIDFILE option from ctdbd_wrapper man page; (bso#13610);- Tumbleweed doesn't define the sle_version macro, so we must include a check for suse_version also. Otherwise python3 is disabled on Tumbleweed.- Update to samba-4.9.0 + samba_dnsupdate: Honor 'dns zone scavenging' option, only update if needed; (bso#13605); + wafsamba: Fix 'make -j'; (bso#13606);- Update to samba-4.9.0rc5 + s3: VFS: vfs_full_audit: Ensure smb_fname_str_do_log() only returns absolute pathnames; (bso#13565); + s3: util: Do not take over stderr when there is no log file; (bso#13578); + Durable Reconnect fails because cookie.allow_reconnect is not set; (bso#13549); + krb5-samba: Interdomain trust uses different salt principal; (bso#13539); + vfs_fruit: Don't unlink the main file; (bso#13441); + smbd: Fix a memleak in async search ask sharemode; (bso#13602); + Fix Samba GPO issue when Trust is enabled; (bso#11517); + samba-tool: Add "virtualKerberosSalt" attribute to 'user getpassword/syncpasswords'; (bso#13539); + Fix CTDB configuration issues; (bso#13589); + ctdbd logs an error until it can successfully connect to eventd; (bso#13592);- Update to samba-4.9.0rc4 + s3: smbd: Ensure get_real_filename() copes with empty pathnames; (bso#13585); + samba domain backup online/rename commands force user to specify password on CLI; (bso#13566); + wafsamba/samba_abi: Always hide ABI symbols which must be local; (bso#13579); + Fix a panic if fruit_access_check detects a locking conflict; (bso#13584); + Fix memory and resource leaks; (bso#13567); + python: Fix print in dns_invalid.py; (bso#13580); + Aliasing issue causes incorrect IPv6 checksum; (bso#13588); + Fix CTDB configuration issues; (bso#13589); + s3: vfs: time_audit: fix handling of token_blob in smb_time_audit_offload_read_recv(); (bso#13568);- Add missing zlib-devel dependency which was previously pulled in by libopenssl-devel- Update to samba-4.9.0rc3+git.22.3fff23ae36e + CVE-2018-10858: libsmb: Harden smbc_readdir_internal() against returns from malicious servers; (bso#13453); + CVE-2018-1140: ldbsearch '(distinguishedName=abc)' and DNS query with escapes crashes, ldb: Release LDB 1.3.5 for CVE-2018-1140; (bso#13374); + CVE-2018-10918: cracknames: Fix DoS (NULL pointer de-ref) when not servicePrincipalName is set on a user; (bso#13552); + CVE-2018-10919: acl_read: Fix unauthorized attribute access via searches; (bso#13434); + ctdb_mutex_ceph_rados_helper: Set SIGINT signal handler; (bso#13540); + CVE-2018-1139 libcli/auth: Do not allow ntlmv1 over SMB1 when it is disabled via "ntlm auth"; (bso#13360); + s3-tldap: do not install test_tldap; (bso#13529); + ctdb_mutex_ceph_rados_helper: Fix deadlock via lock renewals; (bso#13540); + CVE-2018-1140 Add NULL check for ldb_dn_get_casefold() in ltdb_index_dn_attr(); (bso#13374); + ctdb-eventd: Fix CID 1438155; (bso#13554); + Fix CIDs 1438243, (Unchecked return value) 1438244 (Unsigned compared against 0), 1438245 (Dereference before null check) and 1438246 (Unchecked return value); (bso#13553); + ctdb: Fix a cut&paste error; (bso#13554); + systemd: Only start smb when network interfaces are up; (bso#13559); + Fix quotas don't work with SMB2; (bso#13553); + s3/smbd: Ensure quota code is only called when quota support detected; (bso#13563); + s3/libsmb: Explicitly set delete_on_close token for rmdir; (bso#13204); + s3:waf: Install eventlogadm to /usr/sbin; (bso#13561); + Shorten description in vfs_linux_xfs_sgid manual; (bso#13562);- Update to samba-4.9.0rc2+git.21.a1069afb007 + s3: smbd: Using "sendfile = yes" with SMB2 can cause CPU spin; (bso#13537); + s3: smbd: Fix path check in smbd_smb2_create_durable_lease_check(); (bso#13535); + samba-tool trust: Support discovery via netr_GetDcName; (bso#13538); + s4-dsdb: Only build dsdb Python modules for AD DC; (bso#13542); + Fix portability issues on freebsd; (bso#13520); + DNS wildcard search does not handle multiple labels correctly; (bso#13536); + samba-tool domain trust: Fix trust compatibility to Windows Server 1709 and FreeIPA; (bso#13308); + Fix portability issues on freebsd; (bso#13520); + ctdb-protocol: Fix CTDB compilation issues; (bso#13545); + ctdb-docs: Replace obsolete reference to CTDB_DEBUG_HUNG_SCRIPT option; (bso#13546); + ctdb-doc: Provide an example script for migrating old configuration; (bso#13550); + ctdb-event: Implement event tool "script list" command; (bso#13551);- Update to samba-4.8.4+git.37.a7a861d7982; + CVE-2018-1139: Weak authentication protocol allowed; (bsc#1095048); (bsc#13360); + CVE-2018-1140: Denial of Service Attack on DNS and LDAP server; (bsc#1095056); (bso#13466); (bso#13374); + CVE-2018-10858: Insufficient input validation on client directory listing in libsmbclient; (bsc#1103411); (bso#13453); + CVE-2018-10918: Denial of Service Attack on AD DC DRSUAPI server; (bsc#1103414); (bso#13552); + CVE-2018-10919: Confidential attribute disclosure from the AD LDAP server; (bsc#1095057); (bso#13434); + s3:winbind: winbind normalize names' doesn't work for users; (bso#12851); + winbind: Fix UPN handling in canonicalize_username(); (bso#13369); + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428); + samdb: Fix building Samba with gcc 8.1; (bso#13437); + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440); + smbd: Flush dfree memcache on service reload; (bso#13446); + ldb: Save a copy of the index result before calling the + lib/util: No Backtrace given by Samba's AD DC by default; (bso#13454). + s3: smbd: printing: Re-implement delete-on-close semantics for print files missing since 3.5.x; (bso#13457). + python: Fix talloc frame use in make_simple_acl(); (bso#13474). + krb5_wrap: Fix keep_old_entries logic for older Kerberos libraries;(bso#13478). + krb5_plugin: Add winbind localauth plugin for MIT Kerberos; (bso#13480).- Add missing package descriptions; (bsc#1093864); - Fix dependency issue between samba-python and samba-kdc; (bsc#1062876); - Call update-apparmor-samba-profile when running samba-ad-dc; (bsc#1092099);- Update to 4.8.2 + After update to 4.8.0 DC failed with "Failed to find our own NTDS Settings objectGUID" (bso#13335). + fix incorrect reporting of stream dos attributes on a directory (bso#13380). + vfs_ceph: add asynchronous fsync; fake synchronous call (bso#13412). + vfs_ceph: add fake async pwrite/pread send/recv hooks; (bso#13425) + vfs_ceph: Fix memory leak; (bso#13424). + libsmbclient: Fix hard-coded connection error return of ETIMEDOUT; (bso#13419). + s4-lsa: Fix use-after-free in LSA server; (bso#13420). + winbindd: Do re-connect if the RPC call fails in the passdb case; (bso#13430). + cleanupd: Sends MSG_SMB_UNLOCK twice to interested peers; (bso#13416). + cleanupd: Use MSG_SMB_BRL_VALIDATE to signal cleanupd unclean process shutdown; (bso#13414). + ctdb-client: Remove ununsed functions from old client code; (bso#13411). + printing: Return the same error code as windows does on upload failures; (bso#13395). + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged pipe is not accessable; (bso#13400). + s4:lsa_lookup: remove TALLOC_FREE(state) after all dcesrv_lsa_Lookup{Names,Sids}_base_map() calls; (bso#13420). + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407). + s3:smbspool: Fix cmdline argument handling; (bso#13417).- Move libdfs-server-ad-samba4.so library from kdc to libs package, as it is required by some client libs; (bsc#1074135); - Update to 4.8.1; (bsc#1091179); + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error, we don't own it here; (bso#13244); + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't support fdopendir(); (bso#13270); + Round-tripping ACL get/set through vfs_fruit will increase the number of ACE entries without limit; (bso#13319); + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit issues; (bso#13347); + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without delete access; (bso#13358); + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372); + s3: smbd: Unix extensions attempts to change wrong field in fchown call; (bso#13375); + ms_schema/samba-tool visualize: Fix python2.6 incompatibility; (bso#13337); + Fix invocation of gnutls_aead_cipher_encrypt(); (bso#13352); + Windows 10 cannot logon on Samba NT4 domain; (bso#13328); + winbindd: Recover loss of netlogon secure channel in case the peer DC is rebooted; (bso#13332); + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363); + ctdb-client: Fix bugs in client code; (bso#13356); + ctdb-scripts: Drop "net serverid wipe" from 50.samba event script; (bso#13359); + s3: lib: messages: Don't use the result of sec_init() before calling sec_init(); (bso#13368); + libads: Fix the build '--without-ads'; (bso#13273); + winbind: Keep "force_reauth" in invalidate_cm_connection, add 'smbcontrol disconnect-dc'; (bso#13332); + vfs_virusfilter: Fix CIDs 1428738-1428740; (bso#13343); + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367); + rpc_server: Fix core dump in dfsgetinfo; (bso#13370); + smbclient: Fix notify; (bso#13382); + Fix smbd panic if the client-supplied channel sequence number wraps; (bso#13215); + Windows 10 cannot logon on Samba NT4 domain; (bso#13328); + lib/util: Remove unused '#include ' from tests/tfork.c; (bso#13342); + Fix build errors with cc from developerstudio 12.5 on Solaris; (bso#13343); + Fix the picky-developer build on FreeBSD 11; (bso#13344); + s3:modules: Fix the build of vfs_aixacl2.c; (bso#13345); + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338); + lib:replace: Fix linking when libtirpc-devel overwrites system headers; (bso#13341); + winbindd: 'wbinfo --name-to-sid' returns misleading result on invalid query; (bso#13312); + s3:passdb: Do not return OK if we don't have pinfo set up; (bso#13376); + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);- Use new foreground execution flags for systemd samba daemons; (bsc#1088574); (bsc#1071090); (bsc#1065551); + Add %post scriptlet to clear old sysconfig flags - Update vendor-files to commit 880b3e7. + Set samba sysconfig template variables to "" + Add required daemon flags directly to systemd unit- Specfile cleanup + Remove %if..%endif guards which don't affect the build + Remove redundant %clean section + Replace old $RPM_* shell vars with macros- BuildRequire pkgconfig(systemd) and pkgconfig(libsystemd) in place of systemd and systemd-devel: Allow OBS to optimize the workload by allowing the usage of the 'build-optimized' systemd packages.- Enable building samba with python3, and create a samba-python3 package.- Update to 4.8 + New GUID Index mode in sam.ldb for the AD DC + GPO support for samba KDC + Time machine support with vfs_fruit + Encrypted secrets + AD Replication visualization + Improved trust support - ability to not scan global trust list - AD external trusts have limited support - verbose trusted domain listing + VirusFilter VFS module + NT4-style replication removed + vfs_aio_linux removed- Disable samba-pidl package, due to the removal of dependency perl-Parse-Yapp; (bsc#1085150);- Update to 4.7.6; + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally; (bso#11343); (bsc#1081741); + CVE-2018-1057: Authenticated users can change other users' password; (bso#13272); (bsc#1081024).- Disable python until full python3 port is done; (bsc#1082139); + Remove contents of package samba-python + Remove contents of package libsamba-policy0 + Remove contents of package libsamba-policy-devel + Remove library libsamba-python-samba4.so from samba-libs package + Remove library libsamba-net-samba4.so from samba-libs package + Remove smbtorture binary and manpage from samba-test- samba fails to build with glibc2.27; (bsc#1081042);- Update to 4.7.5; (bsc#1080545); + smbd tries to release not leased oplock during oplock II downgrade; (bso#13193); + Fix copying file with empty FinderInfo from Windows client to Samba share with fruit; (bso#13181); + build: Deal with recent glibc sunrpc header removal; (bso#10976); + Make Samba work with tirpc and libnsl2; (bso#13238); + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208); (bsc#1075206); + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue; (bso#12986); + ctdb-recovery-helper: Deregister message handler in error paths; (bso#13188); + samba: Only use async signal-safe functions in signal handler; (bso#13240); + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue; (bso#12986); + repl_meta_data: Fix linked attribute corruption on databases with unsorted links on expunge. dbcheck: Add functionality to fix the corrupt database; (bso#13228); + Fix smbd panic when chdir returns error during exit; (bso#13189); + Make Samba work with tirpc and libnsl2; (bso#13238); + Fix POSIX ACL support on HPUX and possibly other big-endian OSs; (bso#13176);- Update to 4.7.4; (bsc#1080545); + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140); + s3: libsmb: Fix valgrind read-after-free error in cli_smb2_close_fnum_recv(); (bso#13171); + s3: libsmb: Fix reversing of oldname/newname paths when creating a reparse point symlink on Windows from smbclient; (bso#13172); + Build man page for vfs_zfsacl.8 with Samba; (bso#12934); + repl_meta_data: Allow delete of an object with dangling backlinks; (bso#13095); + s4:samba: Fix default to be running samba as a deamon; (bso#13129); + Performance regression in DNS server with introduction of DNS wildcard, ldb: Release 1.2.3; (bso#13191); + vfs_zfsacl: Fix compilation error; (bso#6133); + "smb encrypt" setting changes are not fully applied until full smbd restart; (bso#13051); + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052); + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155); + winbindd: Dependency on trusted-domain list in winbindd in critical auth codepath; (bso#13173); + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120); + ctdb: sock_daemon leaks memory; (bso#13153); + TCP tickles not getting synchronised on CTDB restart; (bso#13154); + winbindd: winbind parent and child share a ctdb connection; (bso#13150); + pthreadpool: Fix deadlock; (bso#13170); + pthreadpool: Fix starvation after fork; (bso#13179); + messaging: Always register the unique id; (bso#13180); + s4/smbd: set the process group; (bso#13129); + Fix broken linked attribute handling; (bso#13095); + The KDC on an RWDC doesn't send error replies in some situations; (bso#13132); + libnet_join: Fix 'net rpc oldjoin'; (bso#13149); + g_lock conflict detection broken when processing stale entries; (bso#13195); + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired sessions; (bso#13197); + s3:libads: net ads keytab list fails with "Key table name malformed"; (bso#13166); (bsc#1067700); + Fix crash in pthreadpool thread after failure from pthread_create; (bso#13170); + s4:samba: Allow samba daemon to run in foreground; (bso#13129); (bsc#1065551); + third_party: Link the aesni-intel library with "-z noexecstack"; (bso#13174); + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I" options; (bso#13125);- Re-enable usage of libnsl (did got lost with glibc change) - Use TI-RPC (sunrpc is deprecated and will be removed soon from glibc)- smbc_opendir should not return EEXIST with invalid login credentials; (bnc#1065868).- Update to 4.7.3; (bsc#1069666); + Non-smbd processes using kernel oplocks can hang smbd; (bso#13121); + python: use communicate to fix Popen deadlock; (bso#13127); + smbd on disk file corruption bug under heavy threaded load; (bso#13130); + tevent: version 0.9.34; (bso#13130); + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118); + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug; (bsc#1060427);(bso#13041); + CVE-2017-15275: s3: smbd: Chain code can return uninitialized memory when talloc buffer is grown; (bsc#1063008); (bso#13077); - Build with AD DC support only in openSUSE.- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- samba-tool requires samba-python; (bnc#1067771).- Run all daemons in the foreground and let systemd handle it; (bsc#1065551). - Update to 4.7.1; + Fix exporting subdirs with shadow_copy2; (bso#13091); + Currently if getwd() fails after a chdir(), we panic; (bso#13027); + Ensure default SMB_VFS_GETWD() call can't return a partially completed struct smb_filename; (bso#13068); + sys_getwd() can leak memory or possibly return the wrong errno on older systems; (bso#13069); + smbclient doesn't correctly canonicalize all local names before use; (bso#13093); + Fix broken linked attribute handling; (bso#13095); + Missing LDAP query escapes in DNS rpc server; (bso#12994); + Link to -lbsd when building replace.c by hand; (bso#13087); + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem; (bso#6133); + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module; (bso#7909); + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module; (bso#7933); + Missing assignment in sl_pack_float; (bso#12991); + Wrong Samba access checks when changing DOS attributes; (bso#12995); + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062); + groupmap cleanup should not delete BUILTIN mappings; (bso#13065); + Enabling vfs_fruit results in loss of Finder tags and other xattrs; (bso#13076); + man pages: Properly ident lists; (bso#9613); + smb.conf.5: Sort parameters alphabetically; (bso#13081); + Fix GUID string format on GetPrinter info; (bso#12993); + Remote serverid check doesn't check for the unique id; (bso#13042); + CTDB starts consuming memory if there are dead nodes in the cluster; (bso#13056); + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070); + libgpo doesn't sort the GPOs in the correct order; (bso#13046); + Remote serverid check doesn't check for the unique id; (bso#13042); + vfs_catia: Fix a potential memleak; (bso#13090); + Fix file change notification for renames; (bso#12903); + Samba DNS server does not honour wildcards; (bso#12952); + Can't change password in samba from a Windows client if Samba runs on IPv6 only interface; (bso#13079); + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086); + Apple client can't cope with SMB2 async replies when creating symlinks; (bso#13047); + s4:rpc_server:backupkey: Move variable into scope; (bso#12959); + Fix ntstatus_gen.h generation on 32bit; (bso#13099); + Fix a double free in vfs_gluster_getwd(); (bso#13100); + Fix resouce leaks and pointer issues; (bso#13101); + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);- Add samba-kdc to baselibs.conf. - Do not wrap samba-kdc's package definition into if/endif: the package won't be generated simply based on the fact that there is no files section for the package. Allows the source validator to ensure samba-kdc is a built package.- Update to 4.7.0; + Whole DB read locks: Improved LDAP and replication consistency; (bso#12858). + Samba AD with MIT Kerberos + Dynamic RPC port range: Default range changed from "1024-1300" to "49152-65535". + Authentication and Authorization audit support: New auth_audit debug class. + Multi-process LDAP Server: The LDAP server in the AD DC now honours the process model used for the rest of the 'samba' process. + Improved Read-Only Domain Controller (RODC) Support; (bso#12977). + Additional password hashes stored in supplementalCredentials. + Improvements to DNS during Active Directory domain join. + Significant AD performance and replication improvements. + Query record for open file or directory. + Removal of lpcfg_register_defaults_hook(). + Change of loadable module interface. + SHA256 LDAPS Certificates: The self-signed certificate generated for use on LDAPS will now be generated with a SHA256 self-signature, not a SHA1 self-signature. + CTDB no longer allows mixed minor versions in a cluster. + CTDB now ignores hints from Samba about TDB flags when attaching to databases. + New configuration variable CTDB_NFS_CHECKS_DIR. + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed. + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed. + The example NFS Ganesha call-out has been improved. + A new "replicated" database type is available.- CVE-2017-12163: Prevent client short SMB1 write from writing server memory to file; (bso#13020); (bsc#1058624).- CVE-2017-12150: Some code path don't enforce smb signing, when they should; (bso#12997); (bsc#1058622).- CVE-2017-12151: Keep required encryption across SMB3 dfs redirects; (bso#12996); (bsc#1058565).- Clean specfile assuming SUSE-only system and product >=SLE11 + %{ul_version}, %{rhel_version}, %{mandriva_version}, %{centos_version} are always undefined + %{_vendor} is "suse" and %{suse_version} is at least 1100- Update to 4.6.7; (bsc#1054017) + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392). + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937). + vfs_ceph provides inconsistent directory listings; (bso#12911). + Misused talloc context can cause a user to crash their smbd by chaining SMB1 commands.; (bso#12836). + Use-after free can crash libsmbclient code.; (bso#12927). + Server exit with active AIO can crash.; (bso#12925). + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910). + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs; (bso#12898). + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897). + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for authentication; (bso#12886). + finder sidebar showing question mark instead of icon when using ip to connect with vfs_fruit; (bso#12840). + Winbind stops obtaining the 'unixHomeDirectory' & 'loginShell' attributes from AD.; (bso#12720). + KCC run at selftest startup can fail spuriously due to a race; (bso#12869). + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for the remote change; (bso#12782). + rpc_pipe_client memory leaks due to long term memory context passed to rpc_pipe_open_interface(); (bso#12890). + CVE-2017-2619 breaks accessing previous versions of directories with snapshots in subdirectories of the share; (bso#12885). + dns_name_equal doing OOB read; (bso#12813). + replica_sync tests flap; (bso#12753). + Selftest should not call 'net cache flush' and wipe important winbind entries; (bso#12868). + Old Samba versions don't support using recent ldb versions (>=1.1.30); (bso#12859). + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490). + race starting winbindd against posixacl test; (bso#12843). + Crash in the reentrant smbd_smb2_create_send() if the something fails in the subsequent try; (bso#12832). + spnego.c passes the wrong argument order to gensec_update_ev() for the FALLBACK case; (bso#12788). + Clients with SMB3 support can't connect with "server max protocol = SMB2_02"; (bso#12772). + A log message of samb-tool user syncpasswords reverses string arguments in a debug message "Call Popen[...".; (bso#12768). + The smb tarmode tests kills the share dir contents; (bso#12867). + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862). + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860). + manpage/index.html lists links not in alphabetical order; (bso#12854). + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831). + If a record is locked in a database, then recovery does not complete; (bso#12857). + debug_locks.sh script does not log any information; (bso#12856). + SIGSEGV in cm_connect_lsa_tcp dereferencing conn->lsa_tcp_pipe->transport after error; (bso#12852). + smbclient can't parse DOMAIN+username if a different winbind separator is used; (bso#12849). + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845). + Related requests with TreeConnect fail with NETWORK_NAME_DELETED; (bso#12844). + cli->server_os not filled correctly; (bso#12779). + REGRESSION: smbclient doesn't print the session setup anymore; (bso#12824). + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808). + CTDB NFS call-out failures do not cause event failures; (bso#12837). + net command fails due to incorrectly return code; (bso#12828). + Fix building Samba with GCC 7.1; (bso#12827).- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again; (bsc#1048339).- fix cephwrap_chdir(); (bsc#1048790). - Update to 4.6.6 + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation; (bsc#1048278).- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).- Fix inconsistent ctdb socket path; (bsc#1048352). - Fix non-admin cephx authentication; (bsc#1048387).- Update to 4.6.5; (bsc#1040157) + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at startup; (bso#12814). + vfs_expand_msdfs tries to open the remote address as a file path; (bso#12687). + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type); (bso#12798). + With clustering get update_num_read_oplocks failed and PANIC: num_share_modes == 1 assertion failure; (bso#11844). + contend_level2_oplocks_begin_default oplock optimisation doesn't carry over to leases; (bso#12766). + `ctdb nodestatus` incorrectly displays status for all nodes with wrong exit code; (bso#12802). + CTDB can spin hard on revoking readonly delegations if a node becomes disconnected; (bso#12697). + Printing a share mode entry with leases can crash in the ndr code; (bso#12793). + Fix flakey unit tests for eventd; (bso#12792). + CTDB daemon crashes if built with clang; (bso#12770). + smbcacls fails if no password is specified; (bso#12765). + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757). + samba-tool user syncpasswords doesn't trigger the script when a user gets removed; (bso#12767). + systemd: fix detection of libsystemd; (bso#12764). + Notify subsystem only maps first inotify mask to Windows notify filter; (bso#12760). + Allow passing trusted domain password as plain-text to PASSDB layer; (bso#12751). + Can't case-rename files with vfs_fruit; (bso#12749). + wrong sid->uid mapping for SIDs residing in sIDHistory; (bso#12702). + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562). + Ordering of notify responses broken; (bso#12756).- s3: libsmb: Fix error where short name length was read as 2 bytes, should be 1; (bso#11822); (bsc#1042419).- Revert explicit winbind %{version}-%{release} dependency. + The ABI has stabilized since (bsc#936909), so remove to fix cross-media dependencies; (bsc#1037899).- Fix CVE-2017-7494 remote code execution from a writable share; (bso#12780); (bsc#1038231).- Update to 4.6.3; (bsc#1036011) + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots from shares with GlusterFS backend; (bso#12743). + Fix for Solaris C compiler; (bso#12559). + s3: locking: Update oplock optimization for the leases era; (bso#12628). + Make the Solaris C compiler happy; (bso#12693). + s3: libgpo: Allow skipping GPO objects that don't have the expected LDAP attributes; (bso#12695). + Fix buffer overflow caused by wrong use of getgroups; (bso#12747). + lib: debug: Avoid negative array access; (bso#12746). + cleanupdb: Fix a memory read error; (bso#12748). + streams_xattr and kernel oplocks results in NT_STATUS_NETWORK_BUSY; (bso#7537). + winbindd: idmap_autorid allocates ids for unknown SIDs from other backends; (bso#11961). + vfs_fruit: Resource fork open request with flags=O_CREAT|O_RDONLY; (bso#12565). + manpages/vfs_fruit: Document global options; (bso#12615). + lib/pthreadpool: Fix a memory leak; (bso#12624). + Lookup-domain for well-known SIDs on a DC; (bso#12727). + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728). + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729). + credentials_krb5: use gss_acquire_cred for client-side GSSAPI use case; (bso#12611). + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690). + ctdb-readonly: Avoid a tight loop waiting for revoke to complete; (bso#12697). + ctdb_event monitor command crashes if event is not specified; (bso#12723). + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733). + smbd: Fix smb1 findfirst with DFS; (bso#12558). + smbd: Do an early exit on negprot failure; (bso#12610). + winbindd: Fix substitution for 'template homedir'; (bso#12699). + s4:kdc: Disable principal based autodetected referral detection; (bso#12554). + idmap_autorid: Allocate new domain range if the callers knows the sid is valid; (bso#12613). + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724). + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for trusted domain; (bso#12725). + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731). + winbindd: Fix password policy for pam authentication; (bso#12725). + s3:gse: Correctly handle external trusts with MIT; (bso#12554). + auth/credentials: Always set the realm if we set the principal from the ccache; (bso#12611). + replace: Include sysmacros.h; (bso#12686). + s3:vfs_expand_msdfs: Do not open the remote address as a file; (bso#12687). + s3:libsmb: Only print error message if kerberos use is forced; (bso#12704). + winbindd: Child process crashes when kerberos-authenticating a user with wrong password; (bso#12708). + vfs_fruit: Office document opens as read-only on macOS due to CNID semantics; (bso#12715). + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is fragmented; (bso#12737).- Generate and update vendor-files tarball from Git + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).- Generate source tarball directly from Git using OBS tar_scm + use version string derived from parent Git tag and commit hash - remove obsolete vendor-files/tools/package-data version ID + explicitly generate ctdb manpages, needed without "make dist"- Update to 4.6.2 + remove bso#12721 patches now upstream- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622). + x86-64 and aarch64- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).- Build and install the html man pages (bsc#1021907).- Fix CVE-2017-2619 regression with "follow symlinks = no"; (bso#12721).- Update to 4.6.1 + symlink race permits opening files outside share directory; CVE-2017-2619; (bso#12496); (bsc#1027147) + testparm checks for valid idmap parameters + add new krb client encryption types + support for printer driver upload from windows 10 + inherit owner = 'unix only' for improved quota support + improved CTDB event support + new primary group support for idmap_ad + idmap_hash deprecated + mvxattr added to recursively rename extended attributes- Remove chkconfig requirements for systemd systems- Don't call insserv if systemd is used- Fix check if we need to require insserv- async_req: make async_connect_send() "reentrant"; (bso#12105); (bsc#1024416).- Force usage of ncurses6-config thru NCURSES_CONFIG env var; (bsc#1023847).- add missing patch for libnss_wins segfault; (bsc#995730).- Fix vfs_ceph builds against recent Ceph versions; (bsc#1021933).- Document "winbind: ignore domains" parameter; (bsc#1019416).- Add base Samba dependency to samba-ceph package.- Update to 4.5.3 + Heap-based Buffer Overflow Remote Code Execution Vulnerability; CVE-2016-2123; (bso#12409); (bsc#1014437). + Don't send delegated credentials to all servers; CVE-2016-2125; (bso#12445); (bsc#1014441). + denial of service due to a client triggered crash in the winbindd parent process; CVE-2016-2126; (bso#12446); (bsc#1014442). - 4.5.1 and 4.5.2 updates + various streams vfs fixes + various printing fixes + ntlm_auth: do not map explicitly empty domain + various stability fixes in smbd + match file compression ReFS behavior- Add missing ldb module directory; (bnc#1012092).- s3/client: obey 'disable netbios' smb.conf param, don't connect via NBT port; (bsc#1009085); (bso#12418).- Include vfstest in samba-test; (bsc#1001203).- s3/winbindd: using default domain with user@domain.com format fails; (bsc#997833).- Fix segfault in libnss_wins; (bso#12277); (bso#12269); (bsc#995730).- Update to 4.5.0 + NTLM1 Authentication disabled by default + SMB2.1 leases enabled by default + Support for OFD locks + ctdb tool rewritten + Added shadow copy snapshot prefix parameter- Fix illegal memory access after memory has been deleted; (bso#11836); (bsc#975299).- Prevent core, make sure response->extra_data.data is always cleared out; (bsc#993692).- Don't package man pages for VFS modules that aren't built; (boo#993707).- Fix population of ctdb sysconfig after source merge; (bsc#981566).- Enable vfs_ceph builds for Factory (x86-64) + Package as samba-ceph to avoid Ceph dependency in base package.- Update to 4.4.5 + Prevent client-side SMB2 signing downgrade; CVE-2016-2119; (bso#11860); (bsc#986869).- Remove obsolete syslog.target; (bsc#983938).- Honor smb.conf socket options in winbind; (bsc#975131).- Don't use htons() with IP_PROTO_RAW; (bso#11705); (bsc#969522).- Update to 4.4.4 + SMB3 multichannel: Add implementation of missing channel sequence number verification; (bso#11809). + smbd:close: Only remove kernel share modes if they had been taken at open; (bso#11919). + notifyd: Prevent NULL deref segfault in notifyd_peer_destructor; (bso#11930). + s3:rpcclient: Make '--pw-nt-hash' option work; (bso#10796). + Fix case sensitivity issues over SMB2 or above; (bso#11438). + s3:smbd: Fix anonymous authentication if signing is mandatory. (bso#11910) + Fix NTLM Authentication issue with squid; (bso#11914). + pdb: Fix segfault in pdb_ldap for missing gecos; (bso#11530). + Fix memory leak in share mode locking; (bso#11934).- Update to 4.4.3 + Various post-badlock regressions; (bso#11841); (bso#11850); (bso#11858); (bso#11870); (bso#11872). + Only allow idmap_hash for default idmap config (bso#11786). + smbd: Avoid large reads beyond EOF; (bso#11878). + vfs_acl_common: Avoid setting POSIX ACLs if "ignore system acls" is set; (bso#11806). + libads: Record session expiry for spnego sasl binds; (bso#11852).- Fix NTLMSSP regressions caused by previous CVE fixes; (bso#11849); (bsc#975962); (bsc#979268), (bsc#977669).- Revert shared library packaging to comply with SLPP- Update to 4.4.2 + A man-in-the-middle can downgrade NTLMSSP authentication; CVE-2016-2110; (bso#11688); (bsc#973031). + Domain controller netlogon member computer can be spoofed; CVE-2016-2111; (bso#11749); (bsc#973032). + LDAP conenctions vulnerable to downgrade and MITM attack; CVE-2016-2112; (bso#11644); (bsc#973033). + TLS certificate validation missing; CVE-2016-2113; (bso#11752); (bsc#973034). + Named pipe IPC vulnerable to MITM attacks; CVE-2016-2115; (bso#11756); (bsc#973036). + "Badlock" DCERPC impersonation of authenticated account possible; CVE-2016-2118; (bso#11804); (bsc#971965). + DCERPC server and client vulnerable to DOS and MITM attacks; CVE-2015-5370; (bso#11344); (bsc#936862).- Fix samba.tests.messaging test and prevent potential tdb corruption by removing obsolete now invalid tdb_close call; (bsc#974629).- Obsolete libsmbclient from libsmbclient0 while not providing it; (bsc#972197).- Update to 4.4.0. + Read of uninitialized memory DNS TXT handling; (bso#11128); (bso#11686); CVE-2016-0771. + Getting and setting Windows ACLs on symlinks can change permissions on link target; (bso#11648); CVE-2015-7560. + Sockets with htons(IPPROTO_RAW); (bso#11705); CVE-2015-8543. + s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystem with no ACL support; (bso#10489). + docs: Add example for domain logins to smbspool man page; (bso#11643). + smbd: Show correct disk size for different quota and dfree block sizes; (bso#11681). + docs: Add smbspool_krb5_wrapper manpage; (bso#11690). + winbindd: Return trust parameters when listing trusts; (bso#11691). + ctdb: Do not provide a useless pkgconfig file for ctdb; (bso#11696). + Crypto.Cipher.ARC4 is not available on some platforms, fallback to M2Crypto.RC4.RC4 then; (bso#11699). + s3:utils/smbget: Set default blocksize; (bso#11700). + Streamline 'smbget' options with the rest of the Samba utils; (bso#11700). + s3:clispnego: Fix confusing warning in spnego_gen_krb5_wrap(); (bso#11702). + s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703). + loadparm: Fix memory leak issue; (bso#11708). + lib/tsocket: Work around sockets not supporting FIONREAD; (bso#11714). + s3:vfs:glusterfs: Fix build after quota changes; (bso#11715). + ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ..."; (bso#11719). + lib:socket: Fix CID 1350010: Integer OVERFLOW_BEFORE_WIDEN; (bso#11723). + smbd: Fix CID 1351215 Improper use of negative value; (bso#11724). + smbd: Fix CID 1351216 Dereference null return value; (bso#11725). + s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new file; (bso#11727). + docs: Add manpage for cifsdd; (bso#11730). + param: Fix str_list_v3 to accept ; again; (bso#11732). + lib/socket: Fix improper use of default interface speed; (bso#11734). + lib:socket: Fix CID 1350009: Fix illegal memory accesses (BUFFER_SIZE_WARNING); (bso#11735). + libcli: Fix debug message, print sid string for new_ace trustee; (bso#11738). + Fix installation path of Samba helper binaries; (bso#11739). + Fix memory leak in loadparm; (bso#11740). + tevent: version 0.9.28: Fix memory leak when old signal action restored; (bso#11742). + smbd: Ignore SVHDX create context; (bso#11753). + Fix net join; (bso#11755). + s3:libads: setup the msDS-SupportedEncryptionTypes attribute on ldap_add; (bso#11755). + passdb: Add linefeed to debug message; (bso#11763). + s3:utils/smbget: Fix option parsing; (bso#11767). + libnet: Make Kerberos domain join site-aware; (bso#11769). + Reset TCP Connections during IP failover; (bso#11770). + ldb: Version 1.1.26; (bso#11772). + s3:smbd: Add negprot remote arch detection for OSX; (bso#11773). + vfs_glusterfs: Fix use after free in AIO callback; (bso#11774). + mkdir can return ACCESS_DENIED incorrectly on create race; (bso#11780). + "trustdom_list_done: Got invalid trustdom response" message should be avoided; (bso#11782). + Mismatch between local and remote attribute ids lets replication fail with custom schema; (bso#11783). + Quota is not supported on Solaris 10; (bso#11788). + Talloc: Version 2.1.6; (bso#11789). + smbd: Enable multi-channel if 'server multi channel support = yes' in the config; (bso#11796). + build: Fix build when '--without-quota' specified; (bso#11798). + lib/socket/interfaces: Fix some uninitialied bytes; (bso#11802). + Access based share enum: handle permission set in configuration files; (bso#8093). + See also WHATSNEW.txt from the samba-doc package.- Update to 4.3.6. + Getting and setting Windows ACLs on symlinks can change permissions on link target; CVE-2015-7560; (bso#11648); (bsc#968222). + Fix Out-of-bounds read in internal DNS server; CVE-2016-0771; (bso#11128); (bso#11686); (bsc#968223).- Upgrade on-disk FSRVP server state to new version; (bsc#924519).- Only obsolete but do not provide gplv2/3 package names; (bsc#968973).- Relocate existing lock files to /var/lib/samba/lock; (bsc#968963).- Obsolete no longer existing samba-32bit package; (bsc#967625).- Update to 4.3.5. + s3:utils/smbget: Fix recursive download; (bso#6482). + s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystemi with no ACL support; (bso#10489). + s3:smbd/oplock: Obey kernel oplock setting when releasing oplocks; (bso#11400). + vfs_shadow_copy2: Fix case where snapshots are outside the share; (bso#11580). + smbclient: Query disk usage relative to current directory; (bso#11662). + winbindd: Handle expired sessions correctly; (bso#11670). + smbd: Show correct disk size for different quota and dfree block sizes; (bso#11681). + smbcacls: Fix uninitialized variable; (bso#11682). + s3:smbd: Ignore initial allocation size for directory creation; (bso#11684). + s3-client: Add a KRB5 wrapper for smbspool; (bso#11690). + s3-parm: Clean up defaults when removing global parameters; (bso#11693). + Use M2Crypto.RC4.RC4 on platforms without Crypto.Cipher.ARC4; (bso#11699). + s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703). + ctdb: Remove error messages after kernel security update; CVE-2015-8543; (bso#11705). + loadparm: Fix memory leak issue; (bso#11708). + lib/tsocket: Work around sockets not supporting FIONREAD; (bso#11714). + ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ..."; (bso#11719). + s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new file; (bso#11727). + param: Fix str_list_v3 to accept ";" again; (bso#11732).- Shift samba-client sysconfig data into samba and samba-winbind; (bsc#947361).- Simplify shared library packaging; (bsc#966956).- Enable clustering (CTDB) support; (bsc#966271).- s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703); (bsc#964023).- Add quotes around path of update-apparmor-samba-profile; (bnc#962177).- Remove autoconf build-time requirement.- Update to 4.3.4. + vfs_fruit: Enable POSIX directory rename semantics; (bso#11065). + Crash: Bad talloc magic value - access after free; (bso#11394). + Copying files with vfs_fruit fails when using vfs_streams_xattr without stream prefix and type suffix; (bso#11466). + samba-tool: Fix uncaught exception if no fSMORoleOwner attribute is given; (bso#11613). + Fix a typo in the smb.conf manpage, explanation of idmap config; (bso#11619). + Correctly initialize the list head when keeping a list of primary followed by DFS connections; (bso#11624). + Reduce the memory footprint of empty string options; (bso#11625). + lib/async_req: Do not install async_connect_send_test; (bso#11639). + Fix typos in man vfs_gpfs; (bso#11641). + Make "hide dot files" option work with "store dos attributes = yes"; (bso#11645). + Fix a corner case of the symlink verification; (bso#11647); (bnc#960249). + Do not disable "store dos attributes" on-the-fly; (bso#11649). + Update lastLogon and lastLogonTimestamp; (bso#11659).- Prevent access denied if the share path is "/"; (bso#11647); (bnc#960249).- Update to 4.3.3. + Malicious request can cause Samba LDAP server to hang, spinning using CPU; CVE-2015-3223; (bso#11325); (bnc#958581). + Remote read memory exploit in LDB; CVE-2015-5330; (bso#11599); (bnc#958586). + Insufficient symlink verification (file access outside the share); CVE-2015-5252; (bso#11395); (bnc#958582). + No man in the middle protection when forcing smb encryption on the client side; CVE-2015-5296; (bso#11536); (bnc#958584). + Currently the snapshot browsing is not secure thru windows previous version (shadow_copy2); CVE-2015-5299; (bso#11529); (bnc#958583). + Fix Microsoft MS15-096 to prevent machine accounts from being changed into user accounts; CVE-2015-8467; (bso#11552); (bnc#958585).- Update to 4.3.2. + vfs_gpfs: Re-enable share modes; (bso#11243). + dcerpc.idl: Accept invalid dcerpc_bind_nak pdus; (bso#11327). + s3-smbd: Fix old DOS client doing wildcard delete - gives an attribute type of zero; (bso#11452). + Add libreplace dependency to texpect, fixes a linking error on Solaris; (bso#11511). + s4: Fix linking of 'smbtorture' on Solaris; (bso#11512). + s4:lib/messaging: Use correct path for names.tdb; (bso#11562). + Fix segfault of 'net ads (join|leave) -S INVALID' with nss_wins; (bso#11563). + async_req: Fix non-blocking connect(); (bso#11564). + auth: gensec: Fix a memory leak; (bso#11565). + lib: util: Make non-critical message a warning; (bso#11566). + Fix winbindd crashes with samlogon for trusted domain user; (bso#11569); (bnc#949022). + smbd: Send SMB2 oplock breaks unencrypted; (bso#11570). + ctdb: Open the RO tracking db with perms 0600 instead of 0000; (bso#11577). + s3:smb2_server: Make the logic of SMB2_CANCEL DLIST_REMOVE() clearer; (bso#11581). + s3-smbd: Fix use after issue in smbd_smb2_request_dispatch(); (bso#11581). + manpage: Correct small typo error; (bso#11584). + s3: smbd: If EAs are turned off on a share don't allow an SMB2 create containing them; (bso#11589). + Backport some valgrind fixes from upstream master; (bso#11597). + auth: Consistent handling of well-known alias as primary gid; (bso#11608). + winbind: Fix crash on invalid idmap configs; (bso#11612). + s3: smbd: have_file_open_below() fails to enumerate open files below an open directory handle; (bso#11615). + Changing log level of two entries to DBG_NOTICE; (bso#9912).- Ensure samlogon fallback requests are rerouted after kerberos failure; (bnc#953382); (bnc#953972).- Ensure to link with --as-needed flag by removing SUSE_ASNEEDED=0. - Always use the default optimization even on pre-9.2 systems.- Remove redundant configure options while adding with-relro.- Relocate the lockdir to the /var/lib/samba/lock directory.- Cleanup and enhance the pidl sub package.- Require renamed python-ldb-devel and python-talloc-devel at build-time. - Requires python-ldb and python-talloc from the python subpackage.- Update to 4.3.1. + s3: smbd: Fix our access-based enumeration on "hide unreadable" to match Windows; (bso#10252). + nss_winbind: Fix hang on Solaris on big groups; (bso#10365). + smbd: Fix file name buflen and padding in notify repsonse; (bso#10634). + kerberos: Make sure we only use prompter type when available; winbind: Fix 100% loop; (bso#11038). + source3/lib/msghdr.c: Fix compiling error on Solaris; (bso#11053). + s3:ctdbd_conn: make sure we destroy tevent_fd before closing the socket; (bso#11316). + s3: smbd: Fix mkdir race condition; (bso#11486). + pam_winbind: Fix a segfault if initialization fails; (bso#11502). + s3: dfs: Fix a crash when the dfs targets are disabled; (bso#11509). + s4:lib/messaging: Use 'msg.lock' and 'msg.sock' for messaging related subdirs; (bso#11515). + s3: smbd: Fix opening/creating :stream files on the root share directory; (bso#11522). + lib/param: Fix hiding of FLAG_SYNONYM values; (bso#11526). + net: Fix a crash with 'net ads keytab create'; (bso#11528). + s3: smbd: Fix a crash in unix_convert(); (bso#11535). + s3: smbd: Fix NULL pointer bug introduced by previous 'raw' stream fix (bso#11522); (bso#11535). + vfs_fruit: Return value of ad_pack in vfs_fruit.c; (bso#11543). + vfs_commit: set the fd on open before calling SMB_VFS_FSTAT; (bso#11547). + s3:locking: Initialize lease pointer in share_mode_traverse_fn(); (bso#11549). + s3:smbstatus: Add stream name to share_entry_forall(); (bso#11550). + s3:lib: Validate domain name in lookup_wellknown_name(); (bso#11555). + s3: lsa: lookup_name() logic for unqualified (no DOMAIN component) names is incorrect; (bso#11555).- Fix 100% CPU in winbindd when logging in with "user must change password on next logon"; (bso#11038).- Relocate the tmpfiles.d directory to the client package; (bnc#947552).- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf instead; (bnc#942716).- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).- Package /var/lib/samba/msg with 0755 permissions; (bso#11515); (bnc#945502).- Require to install libfam0-gamin from samba-libs on post-12.1 and pre-13.15 systems; (bnc#945013).- Update to 4.3.0. + Samba "map to guest = Bad uid" doesn't work; (bso#9862). + revert LDAP extended rule 1.2.840.113556.1.4.1941 LDAP_MATCHING_RULE_IN_CHAIN changes; (bso#10493). + No objectClass found in replPropertyMetaData on ordinary objects (non-deleted); (bso#10973). + Stream names with colon don't work with fruit:encoding = native; (bso#11278). + NetApp joined to a Samba/ADDC cannot resolve SIDs; (bso#11291). + tevent_fd needs to be destroyed before closing the fd; (bso#11316). + "force group" with local group not working; (bso#11320). + strsep is not available on Solaris; (bso#11359). + smbtorture does not build when configured --with-system-mitkrb5; (bso#11411). + Build with GPFS support is broken; (bso#11421). + Build broken with --disable-python; (bso#11424). + net share allowedusers crashes; (bso#11426). + nmbd incorrectly matches netbios names as own name; (bso#11427). + Python bindings don't check integer types; (bso#11429). + Python bindings don't check array sizes; (bso#11430). + CTDB's eventscript error handling is broken; (bso#11431). + Fix crash in nested ctdb banning; (bso#11432). + Cannot build ctdbpmda; (bso#11434). + samba-tool uncaught exception error; (bso#11436). + Crash in notify_remove caused by change notify = no; (bso#11444). + Poor SMB3 encryption performance with AES-GCM; (bso#11451). + Poor SMB3 encryption performance with AES-GCM (part1); (bso#11451). + fix recursion problem in rep_strtoll in lib/replace/replace.c; (bso#11455). + --bundled-libraries=!ldb,!pyldb,!pyldb-util doesn't disable ldb build and install; (bso#11458). + xid2sid gives inconsistent results; (bso#11464). + ctdb: Fix the build on FreeBSD 10.1; (bso#11465). + Handling of 0 byte resource fork stream; (bso#11467). + AD samr GetGroupsForUser fails for users with "()" in their name; (bso#11488).- Configure with --bundled-libraries=NONE; (bso#11458).- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).- Remove libiniparser-devel build-time requirement.- Update to 4.2.3. + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780). + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924). + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991). + Logon via MS Remote Desktop hangs; (bso#11061). + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068). + tevent: Add a note to tevent_add_fd(); (bso#11141). + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170). + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217). + smbd: Fix a use-after-free; (bso#11218); (bnc#919309). + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces; (bso#11245). + s3:smb2: Add padding to last command in compound requests; (bso#11277). + Add IPv6 support to ADS client side LDAP connects; (bso#11281). + Add IPv6 support for determining FQDN during ADS join; (bso#11282). + s3: IPv6 enabled DNS connections for ADS client; (bso#11283). + Fix invalid write in ctdb_lock_context_destructor; (bso#11293). + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295). + vfs_fruit: Add option "veto_appledouble"; (bso#11305). + tstream: Make socketpair nonblocking; (bso#11312). + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313). + Group creation: Add msSFU30Name only when --nis-domain was given; (bso#11315). + tevent_fd needs to be destroyed before closing the fd; (bso#11316). + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared"; (bso#11319). + smbd/trans2: Add a useful diagnostic for files with bad encoding; (bso#11323). + Change sharesec output back to previous format; (bso#11324). + Robust mutex support broken in 1.3.5; (bso#11326). + Kerberos auth info3 should contain resource group ids available from pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info exists in PAC; (bso#11328); (bnc#912457). + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329). + tevent: Fix CID 1035381 Unchecked return value; (bso#11330). + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331). + s3: smbd: Use separate flag to track become_root()/unbecome_root() state; (bso#11339). + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342). + pidl: Make the compilation of PIDL producing the same results if the content hasn't change; (bso#11356). + winbindd: Disconnect child process if request is cancelled at main process; (bso#11358). + vfs_fruit: Check offset and length for AFP_AfpInfo read requests; (bso#11363). + docs: Overhaul the description of "smb encrypt" to include SMB3 encryption; (bso#11366). + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server(); (bso#11367). + ncacn_http: Fix GNUism; (bso#11371).- Disable rpath usage; (bnc#902421).- Make the winbind package depend on the matching libwbclient version and vice versa; (bnc#936909).- Backport changes to use resource group sids obtained from pac logon_info; (bso#11328); (bnc#912457).- Order winbind.service Before and Want nss-user-lookup target.- Remove fam-devel build-time dependency for post-6 RHEL systems.- Update to 4.2.2. + s3:smbXsrv: refactor duplicate code into smbXsrv_session_clear_and_logoff(); (bso#11182). + gencache: don't fail gencache_stabilize if there were records to delete; (bso#11260). + s3: libsmbclient: After getting attribute server, ensure main srv pointer is still valid; (bso#11186). + s4: rpc: Refactor dcesrv_alter() function into setup and send steps; (bso#11236). + s3: smbd: Incorrect file size returned in the response of "FILE_SUPERSEDE Create"; (bso#11240). + Mangled names do not work with acl_xattr; (bso#11249). + nmbd rewrites browse.dat when not required; (bso#11254). + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff; (bso#11213). + s3:smbd: Add missing tevent_req_nterror; (bso#11224). + vfs: kernel_flock and named streams; (bso#11243). + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244). + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses are used; (bso#11284). + ctdb: check for talloc_asprintf() failure; (bso#11201). + spoolss: purge the printer name cache on name change; (bso#11210); (bnc#901813). + CTDB statd-callout does not scale; (bso#11204). + vfs_fruit: also map characters below 0x20; (bso#11221). + ctdb: Coverity fix for CID 1291643; (bso#11201). + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225). + Fix terminate connection behavior for asynchronous endpoint with PUSH notification flavors; (bso#11226). + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007). + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201). + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the directory is deleted; (bso#11257). + s3:winbindd: make sure we remove pending io requests before closing client sockets; (bso#11141); (bnc#931854). + Fix panic triggered by smbd_smb2_request_notify_done() -> smbXsrv_session_find_channel() in smbd; (bso#11182). + 'sharesec' output no longer matches input format; (bso#11237). + waf: Fix systemd detection; (bso#11200). + CTDB: Fix portability issues; (bso#11202). + CTDB: Fix some IPv6-related issues; (bso#11203). + CTDB statd-callout does not scale; (bso#11204). + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you enter invalid values; (bso#11234). + libads: record service ticket endtime for sealed ldap connections; (bso#11267). + lib/util: Include DEBUG macro in internal header files before samba_util.h; (bso#11033).- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).- Remove the independently built libraries ldb, talloc, tdn, and tevent and the post-10.3 renamed libsmbclient from baselibs.conf.- Drop redundant doc attribute from man pages.- Update to 4.2.1. + s3:winbind:grent: Don't stop group enumeration when a group has no gid; (bso#8905). + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791). + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with servers that don't send the 2 unused fields; (bso#10016). + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476). + waf: Fix the build on openbsd; (bso#10476). + s3: client: "client use spnego principal = yes" code checks wrong name; (bso#10888). + spoolss: Retrieve published printer GUID if not in registry; (bso#11018). + s3: lib: libsmbclient: If reusing a server struct, check every cli->timout miliseconds if it's still valid before use; (bso#11079). + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125). + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135). + replace: Remove superfluous check for gcrypt header; (bso#11135). + Backport subunit changes; (bso#11137). + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with implementation; (bso#11140). + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143). + talloc: Version 2.1.2; (bso#11144). + Update libwbclient version to 0.12; (bso#11149). + brlock: Use 0 instead of empty initializer list; (bso#11153). + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164). + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169); (bnc#913304). + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev fails in the SMB1 case; (bso#11173). + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174). + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175). + s3: libsmbclient: Add missing talloc stackframe; (bso#11177). + s4-process_model: Do not close random fds while forking; (bso#11180). + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).- Prevent samba package updates from disabling samba kerberos printing.- Add sparse file support for samba; (fate#318424).- Purge printer name cache on spoolss SetPrinter change; (bso#11210); (bnc#901813).- Correctly retain errno from Btrfs snapshot ioctls; (bnc#923374).- Simplify libxslt build requirement and README.SUSE install. - Remove no longer required cleanup steps while populating the build root.- Remove deprecated base_rid example from idmap_rid manpage; (bso#11169); (bnc#913304).- Update to 4.2.0. + smbd: Stop using vfs_Chdir after SMB_VFS_DISCONNECT; (bso#1115). + pam_winbind: fix warn_pwd_expire implementation; (bso#9056). + nsswitch: Fix soname of linux nss_*.so.2 modules; (bso#9299). + Make 'profiles' work again; (bso#9629). + s3:smb2_server: protect against integer wrap with "smb2 max credits = 65535"; (bso#9702). + Make validate_ldb of String(Generalized-Time) accept millisecond format ".000Z"; (bso#9810). + Use -R linker flag on Solaris, not -rpath; (bso#10112). + vfs: Add glusterfs manpage; (bso#10240). + Make 'smbclient' use cached creds; (bso#10279). + pdb: Fix build issues with shared modules; (bso#10355). + s4-dns: Add support for BIND 9.10; (bso#10620). + idmap: Return the correct id type to *id_to_sid methods; (bso#10720). + printing/cups: Pack requested-attributes with IPP_TAG_KEYWORD; (bso#10808). + Don't build vfs_snapper on FreeBSD; (bso#10834). + nss_winbind: Add getgroupmembership for FreeBSD; (bso#10835). + idmap_rfc2307: Fix a crash after connection problem to DC; (bso#10837). + s3: smb2cli: query info return length check was reversed; (bso#10848). + s3: lib, s3: modules: Fix compilation on Solaris; (bso#10849). + lib: uid_wrapper: Fix setgroups and syscall detection on a system without native uid_wrapper library; (bso#10851). + winbind3: Fix pwent variable substitution; (bso#10852). + Improve samba-regedit; (bso#10859). + registry: Don't leave dangling transactions; (bso#10860). + Fix build of socket_wrapper on systems without SO_PROTOCOL; (bso#10861). + build: Do not install 'texpect' binary anymore; (bso#10862). + Fix testparm to show hidden share defaults; (bso#10864). + libcli/smb: Fix smb2cli_validate_negotiate_info with min=PROTOCOL_NT1 max=PROTOCOL_SMB2_02; (bso#10866). + Integrate CTDB into top-level Samba build; (bso#10892). + samba-tool group add: Add option '--nis-domain' and '--gid'; (bso#10895). + s3-nmbd: Fix netbios name truncation; (bso#10896). + spoolss: Fix handling of bad EnumJobs levels; (bso#10898). + Fix smbclient loops doing a directory listing against Mac OS X 10 server with a non-wildcard path; (bso#10904). + Fix print job enumeration; (bso#10905); (bnc#898031). + samba-tool: Create NIS enabled users and unixHomeDirectory attribute; (bso#10909). + Add support for SMB2 leases; (bso#10911). + btrfs: Don't leak opened directory handle; (bso#10918). + s3: nmbd: Ensure NetBIOS names are only 15 characters stored; (bso#10920). + s3:smbd: Fix file corruption using "write cache size != 0"; (bso#10921). + pdb_tdb: Fix a TALLOC/SAFE_FREE mixup; (bso#10932). + s3-keytab: fix keytab array NULL termination; (bso#10933). + s3:passdb: fix logic in pdb_set_pw_history(); (bso#10940). + Cleanup add_string_to_array and usage; (bso#10942). + dbwrap_ctdb: Pass on mutex flags to tdb_open; (bso#10942). + Fix RootDSE search with extended dn control; (bso#10949). + Fix 'samba-tool dns serverinfo ' for IPv6; (bso#10952). + libcli/smb: only force signing of smb2 session setups when binding a new session; (bso#10958). + s3-smbclient: Return success if we listed the shares; (bso#10960). + s3-smbstatus: Fix exit code of profile output; (bso#10961). + socket_wrapper: Add missing prototype check for eventfd; (bso#10965). + libcli: SMB2: Pure SMB2-only negprot fix to make us behave as a Windows client does; (bso#10966). + vfs_streams_xattr: Check stream type; (bso#10971). + s3: smbd: Fix *allocate* calls to follow POSIX error return convention; (bso#10982). + vfs_fruit: Add support for AAPL; (bso#10983). + Fix spoolss IDL response marshalling when returning error without clearing info; (bso#10984). + dsdb-samldb: Check for extended access rights before we allow changes to userAccountControl; (bso#10993); CVE-2014-8143; (boo#914279). + Fix IPv6 support in CTDB; (bso#10996). + ctdb-daemon: Use correct tdb flags when enabling robust mutex support; (bso#11000). + vfs_streams_xattr: Add missing call to SMB_VFS_NEXT_CONNECT; (bso#11005). + s3-util: Fix authentication with long hostnames; (bso#11008). + ctdb-build: Fix build without xsltproc; (bso#11014). + packaging: Include CTDB man pages in the tarball; (bso#11014). + pdb_get_trusteddom_pw() fails with non valid UTF16 random passwords; (bso#11016). + Make Sharepoint search show user documents; (bso#11022). + nss_wrapper: check for nss.h; (bso#11026). + Enable mutexes in gencache_notrans.tdb; (bso#11032). + tdb_wrap: Make mutexes easier to use; (bso#11032). + lib/util: Avoid collision which alread defined consumer DEBUG macro; (bso#11033). + winbind: Retry after SESSION_EXPIRED error in ping-dc; (bso#11034). + s3-libads: Fix a possible segfault in kerberos_fetch_pac(); (bso#11037). + vfs_fruit: Fix base_fsp name conversion; (bso#11039). + vfs_fruit: mmap under FreeBSD needs PROT_READ; (bso#11040). + Fix authentication using Kerberos (not AD); (bso#11044). + net: Fix sam addgroupmem; (bso#11051). + vfs_snapper: Correctly handles multi-byte DBus strings; (bso#11055); (bnc#913238). + cli_connect_nb_send: Don't segfault on host == NULL; (bso#11058). + utils: Fix 'net time' segfault; (bso#11058). + libsmb: Provide authinfo domain for encrypted session referrals; (bso#11059). + s3-pam_smbpass: Fix memory leak in pam_sm_authenticate(); (bso#11066). + vfs_glusterfs: Add comments to the pipe(2) code; (bso#11069). + vfs/glusterfs: Change xattr key to match gluster key; (bso#11069). + vfs_glusterfs: Implement AIO support; (bso#11069). + s3-vfs: Fix developer build of vfs_ceph module; (bso#11070). + s3: netlogon: Ensure we don't call talloc_free on an uninitialized pointer; (bso#11077); CVE-2015-0240; (bnc#917376). + vfs: Add a brief vfs_ceph manpage; (bso#11088). + s3: smbclient: Allinfo leaves the file handle open; (bso#11094). + Fix Win8.1 Credentials Manager issue after KB2992611 on Samba domain; (bso#11097). + debug: Set close-on-exec for the main log file FD; (bso#11100). + s3: smbd: leases - losen paranoia check. Stat opens can grant leases; (bso#11102). + s3: smbd: SMB2 close. If a file has delete on close, store the return info before deleting; (bso#11104). + doc:man:vfs_glusterfs: improve the configuration section; (bso#11117). + snprintf: Try to support %j; (bso#11119). + ctdb-io: Do not use sys_write to write to client sockets; (bso#11124). + doc-xml: Add 'sharesec' reference to 'access based share enum'; (bso#11127).- Update to 4.2.0rc5. + Ensure we don't call talloc_free on an uninitialized pointer; CVE-2015-0240; (bso#11077); (bnc#917376).- Fix usage of freed memory on server exit; (bso#11218); (bnc#919309).- Fix tdb_store_flag_to_ntdb() gcc5 build failure.- Fix vfs_snapper DBus string handling; (bso#11055); (bnc#913238).- Update to 4.1.16. + dsdb-samldb: Check for extended access rights before we allow changes to userAccountControl; (bso#10993); CVE-2014-8143; (boo#914279).- Adjust baselibs.conf due to libpdb0 package rename to libsamba-passdb0.- Fix libsmbclient DFS referral handling. + Reuse connections derived from DFS referrals; (bso#10123); (fate#316512). + Set domain/workgroup based on authentication callback value; (bso#11059).- Update to 4.2.0rc4. - Add libsamba-debug, libsocket-blocking, libsamba-cluster-support, and libhttp to the libs package; (boo#913547). - Rename libpdb packages to libsamba-passdb. - Drop libsmbsharemodes packages.- Enable avahi support on post-12.2 systems.- Update to 4.1.15. + pam_winbind: Fix warn_pwd_expire implementation; (bso#9056). + nsswitch: Fix soname of linux nss_*.so.2 modules; (bso#9299). + Fix profiles tool; (bso#9629). + s3-lib: Do not require a password with --use-ccache; (bso#10279). + s4:dsdb/rootdse: Expand extended dn values with the AS_SYSTEM control; (bso#10949). + s4-rpc: dnsserver: Fix enumeration of IPv4 and IPv6 addresses; (bso#10952). + s3:smb2_server: Allow reauthentication without signing; (bso#10958). + s3-smbclient: Return success if we listed the shares; (bso#10960). + s3-smbstatus: Fix exit code of profile output; (bso#10961). + libcli: SMB2: Pure SMB2-only negprot fix to make us behave as a Windows client does; (bso#10966). + s3: smbd/modules: Fix *allocate* calls to follow POSIX error return convention; (bso#10982). + Fix 'domain join' by adding 'drsuapi.DsBindInfoFallBack' attribute 'supported_extensions'; (bso#11006). + idl:drsuapi: Manage all possible lengths of drsuapi_DsBindInfo; (bso#11006). + winbind: Retry LogonControl RPC in ping-dc after session expiration; (bso#11034).- yast2-samba-client should be able to specify osName and osVer on AD domain join; (bnc#873922).- Lookup FSRVP share snums at runtime rather than storing them persistently; (bnc#908627).- Specify soft dependency for network-online.target in Winbind systemd service file; (bnc#889175).- Fix spoolss error response marshalling; (bso#10984).- Update to 4.1.14. + pidl/wscript: Remove --with-perl-* options; revert buildtools/wafadmin/ Tools/perl.py back to upstream state; (bso#10472). + s4-dns: Add support for BIND 9.10; (bso#10620). + nmbd fails to accept "--piddir" option; (bso#10711). + nss_winbind: Add getgroupmembership for FreeBSD; (bso#10835). + S3: source3/smbd/process.c::srv_send_smb() returns true on the error path; (bso#10880). + vfs_glusterfs: Remove "integer fd" code and store the glfs pointers; (bso#10889). + s3-nmbd: Fix netbios name truncation; (bso#10896). + spoolss: Fix handling of bad EnumJobs levels; (bso#10898). + s3: libsmbclient-smb2. MacOSX 10 SMB2 server doesn't set STATUS_NO_MORE_FILES when handed a non-wildcard path; (bso#10904). + spoolss: Fix jobid in level 3 EnumJobs response; (bso#10905). + s3: nmbd: Ensure NetBIOS names are only 15 characters stored; (bso#10920). + s3:smbd: Fix file corruption using "write cache size != 0"; (bso#10921). + pdb_tdb: Fix a TALLOC/SAFE_FREE mixup; (bso#10932). + s3-keytab: Fix keytab array NULL termination; (bso#10933). + Cleanup add_string_to_array and usage; (bso#10942).- Remove and cleanup shares and registry state associated with externally deleted snaphots exposed as shadow copies; (bnc#876312).- Use the upstream tar ball, as signature verification is now able to handle compressed archives.- Fix leak when closing file descriptor returned from dirfd; (bso#10918).- Fix spoolss EnumJobs and GetJob responses; (bso#10905); (bnc#898031). + Fix handling of bad EnumJobs levels; (bso#10898).- Remove dependency on gpg-offline as signature checking is implemented in the source validator.- Update to 4.1.13. + s3-libnet: Add libnet_join_get_machine_spns(); (bso#9984). + s3-libnet: Make sure we do not overwrite precreated SPNs; (bso#9984). + s3-libads: Add all machine account principals to the keytab; (bso#9985). + s3: winbindd: Old NT Domain code sets struct winbind_domain->alt_name to be NULL. Ensure this is safe with modern AD-DCs; (bso#10717). + Fix unstrcpy; (bso#10735). + pthreadpool: Slightly serialize jobs; (bso#10779). + s3: smbd: streams - Ensure share mode validation ignores internal opens (op_mid == 0); (bso#10797). + s3: smbd:open_file: Open logic fix; Use a more natural check; (bso#10809). + vfs_media_harmony: Fix a crash bug; (bso#10813). + docs: Mention incompatibility between kernel oplocks and streams_xattr; (bso#10814). + nmbd: Send waiting status to systemd; (bso#10816). + libcli: Fix a segfault calling smbXcli_req_set_pending() on NULL; (bso#10817). + nsswitch: Skip groups we were not able to map; (bso#10824). + s3-winbindd: Use correct realm for trusted domains in idmap child; (bso#10826). + s3: nmbd: Ensure the main nmbd process doesn't create zombies; (bso#10830). + s3: lib: Signal handling - ensure smbrun and change password code save and restore existing SIGCHLD handlers; (bso#10831). + idmap_rfc2307: Fix a crash after connection problem to DC; (bso#10837). + s3-winbindd: Do not use domain SID from LookupSids for Sids2UnixIDs call; (bso#10838). + s3: smb2cli: Query info return length check was reversed; (bso#10848). + registry: Don't leave dangling transactions; (bso#10860).- Update to 4.2.0rc2./bin/shlibdcerpc-binding0-32bitlibdcerpc0-32bitlibndr-krb5pac0-32bitlibndr-nbt0-32bitlibndr-standard0-32bitlibndr0-32bitlibndr1-32bitlibndr2-32bitlibnetapi0-32bitlibsamba-credentials0-32bitlibsamba-credentials1-32bitlibsamba-errors0-32bitlibsamba-hostconfig0-32bitlibsamba-passdb0-32bitlibsamba-util0-32bitlibsamdb0-32bitlibsmbclient0-32bitlibsmbconf0-32bitlibsmbldap0-32bitlibsmbldap2-32bitlibtevent-util0-32bitlibwbclient0-32bit  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuv4.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e62-150500.3.23.74.17.12+git.462.df636292e62-150500.3.23.74.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e62libdcerpc-binding.so.0libdcerpc-binding.so.0.0.1libdcerpc-server-core.so.0libdcerpc-server-core.so.0.0.1libdcerpc.so.0libdcerpc.so.0.0.1libndr-krb5pac.so.0libndr-krb5pac.so.0.0.1libndr-nbt.so.0libndr-nbt.so.0.0.1libndr-standard.so.0libndr-standard.so.0.0.1libndr.so.3libndr.so.3.0.0libnetapi.so.1libnetapi.so.1.0.0libsamba-credentials.so.1libsamba-credentials.so.1.0.0libsamba-errors.so.1libsamba-errors.so.1.0.0libsamba-hostconfig.so.0libsamba-hostconfig.so.0.0.1libsamba-passdb.so.0libsamba-passdb.so.0.28.0libsamba-util.so.0libsamba-util.so.0.0.1libsamdb.so.0libsamdb.so.0.0.1libsmbclient.so.0libsmbclient.so.0.7.0libsmbconf.so.0libsmbconf.so.0.0.1libsmbldap.so.2libsmbldap.so.2.1.0libtevent-util.so.0libtevent-util.so.0.0.1libwbclient.so.0libwbclient.so.0.15sambalibCHARSET3-samba4.solibMESSAGING-SEND-samba4.solibMESSAGING-samba4.solibaddns-samba4.solibads-samba4.solibasn1util-samba4.solibauth-samba4.solibauthkrb5-samba4.solibcli-cldap-samba4.solibcli-ldap-common-samba4.solibcli-ldap-samba4.solibcli-nbt-samba4.solibcli-smb-common-samba4.solibcli-spoolss-samba4.solibcliauth-samba4.solibclidns-samba4.solibcluster-samba4.solibcmdline-contexts-samba4.solibcmdline-samba4.solibcommon-auth-samba4.solibdbwrap-samba4.solibdcerpc-pkt-auth-samba4.solibdcerpc-samba-samba4.solibdcerpc-samba4.solibevents-samba4.solibflag-mapping-samba4.solibgenrand-samba4.solibgensec-samba4.solibgpo-samba4.solibgse-samba4.solibhttp-samba4.solibinterfaces-samba4.solibiov-buf-samba4.solibkrb5samba-samba4.solibldbsamba-samba4.soliblibcli-lsa3-samba4.soliblibcli-netlogon3-samba4.soliblibsmb-samba4.solibmessages-dgm-samba4.solibmessages-util-samba4.solibmscat-samba4.solibmsghdr-samba4.solibmsrpc3-samba4.solibndr-samba-samba4.solibndr-samba4.solibnet-keytab-samba4.solibnetif-samba4.solibnpa-tstream-samba4.solibprinting-migrate-samba4.solibregistry-samba4.solibreplace-samba4.solibsamba-cluster-support-samba4.solibsamba-debug-samba4.solibsamba-modules-samba4.solibsamba-security-samba4.solibsamba-sockets-samba4.solibsamba3-util-samba4.solibsamdb-common-samba4.solibsecrets3-samba4.solibserver-id-db-samba4.solibserver-role-samba4.solibsmb-transport-samba4.solibsmbclient-raw-samba4.solibsmbd-base-samba4.solibsmbd-shim-samba4.solibsmbldaphelper-samba4.solibsocket-blocking-samba4.solibsys-rw-samba4.solibtalloc-report-printf-samba4.solibtdb-wrap-samba4.solibtime-basic-samba4.solibtrusts-util-samba4.solibutil-reg-samba4.solibutil-setid-samba4.solibutil-tdb-samba4.sopdbldapsam.sosmbpasswd.sotdbsam.so/usr/lib//usr/lib/samba//usr/lib/samba/pdb/-fomit-frame-pointer -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:33120/SUSE_SLE-15-SP5_Update/9fb38d651a0568fadf222f60409c3f15-samba.SUSE_SLE-15-SP5_Updatedrpmxz5x86_64-suse-linux  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=2492df737eb239a2301fe5fc66750634cac9dbd3, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=cd021ed764dba490f64fdc39a8aa1a5c6000b8d4, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=eebf5920e1bdcf4273885f00600ac92768e4dfb1, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=bbd954660e36df104b57d76ddf570bf7ab5f067d, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=53375cdff9a365e8efb849091bd81a029750632a, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=bfd57145482a5e26b13c3d1c7167cb6b3067e245, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=ffa2430a3b5a54b6c84c0e24ff65827ab5420ec1, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=2e36f513b06c370672dd8ce43cae78a78f84c187, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=b08568db65593e65d595dd7f07f0c20fec9931af, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=97624083792f50e1ecaf926780bfdc5f7be30336, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=fd630449b6fd4600eadc6be2772821afb342e2ed, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=162ba5214efb42f6649a69f1c6f6a3301ae8f30e, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=43f2cf254ddb17deb3b92d15555fb90e7259a33f, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=48efb2b700f0481d561b356e06683df0bf715354, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=875b12427bbc76f881ab1791ddd947bdabb6e7d3, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=2ee2944cd299fa52b3ec480a5c5dd5ffb475748f, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=42d63caf3432c296317dccb9bb27ba31e65f8a0d, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=4562850386f0141407a28405643b3c4cd29f145c, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=87ed33f5bb86c882d83a31501d4a985bb7f70510, strippeddirectoryELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=30202758bbb9776a5a1832e5745c5fc424dd5757, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=a4cc89fb7dd9c66965741de93119ccbf5b6e3ac8, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=8d4fe4dfb7281dd4fe7a360467b595e80aba97c3, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=0bf42a42100d74990d18a17cf5a0a04172cc3343, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=fb0406516dfc146668942c657effb9adaf0b7c00, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=02fb163a3b460db1ac9004fc81a25a649ffd5103, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=ad21d1624e6d728ab212906f5c4762b88b22aef5, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=492afd65f97950b4e98baf3c05d7e328375c2401, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=c8eafa8bf30b2cd23143ce26507cc7813269fae1, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=e5a6ff849a4c6d7bc84d07c860668725e2d06f27, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=d7af99e7452647351ea5acdd3bb21f420cf38448, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=be1b55b996619e88d10f1d6110a3be5f0ff56d57, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=639da6b705984bce65efd8c11275184eef79d882, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=b3b695360556b9b878e37080542bc7cff19cac37, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=394c805b62937f93ae4b74e5dc1ee0714d31b378, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=44c8295d34b12180cf674c149ebe26c6b60f9fa5, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=04a9870cc79fb94a26d5179cfe39ca20125d723f, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=cf4e617cf37275d5800b20bc54dfd1fe31ed4f57, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=b826c523298ca3fa312ec88051813b55ca08eed9, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=0ed1a424f16825a16f9b2f386a21a8fe7895c5d6, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=4f542670c95b123cd7b51af8fda864e7fc04557e, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=c95b97fe51fc1c54aa1ab1eb487d2f0643771daa, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=9321d56cd0aa65adf28756dd4a7c11885d75dd4b, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=88d610f40f26fab310fc275d5ca91272c24c669b, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=db36a889bab88b4404866c5e0c8c570b1e3140bd, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=86d0602494d11a0758ba905cb793e2062d89f1c7, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=5b015da6d71895cb30a2c0e84955cc6fa8e3ba7c, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=c9754f0f4353b42f1291a1bc189fdc1d8b00a820, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=c98bd4ec3421b48baecec0d56c45cb7af61e2048, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=44fe9baa3c3ce694b15a1eaa52b09e84deded03c, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=6e3e5073dfcb9cfe49161c4cf753ea2ddaaeb049, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=95a66d3fa064759dbc9ca2437aeb010cb5bf49b7, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=dff04ae55ea5aaca3aa7326e3c2cd0480ed6be5b, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=b130f25d5ddf0c5804234393ba7446c6ef06e02e, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=396ff19088472969a181f6983041e4f43a7d7422, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=2752dcdbbaf1cf98ce98cfe72da0f7e86decda7e, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=ed5cd9fa0128a8d1f18f2d235027f8ce20ff6068, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=2521d050fa9c0ed012692f18cc3cbf3b13635d26, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=a1ae09ee5d8e09d8a58b8238e9e010947058d828, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=092a2eb02fdb619b62ada58418c8ae52a16d5ce4, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=ad33cc084077262db78ef22dd08d0e5bbab2ef5d, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=e56cc02a75afa130940510fb8edf8c86705cbf04, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=85fbdf24ccee08d9a13c64eb0b43ef58e3ee8db5, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=b90fcc37fc9735174287cb0d4e5005b8704d8a3d, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=8950508312d54f777af9b85ce4c7bade7ddfbbda, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=32324fe733e630564b436ee9b80434ecb87596c5, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=1331c13c67f479bdfd7e9a420ee593a584be3204, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=14fc46d97843bf45cd87ccb5435bc4d004e64517, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=741fc26c58eb10b780acc4e7df6406486ec10f7e, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=9f54a15fb0a3fb1a3148363f9980751e59f83331, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=fb082f6c5feacd23df73ac137b9ee2238f28c3f1, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=90bb8b7098e9dd39cf247e8ecbc5178999bb2c72, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=3f49c6de863e961060becc9cd06113897e94f44f, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=48df2162201273ed110a7f3f1ca461c938c4b803, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=8a022a26bfbd70c71904d6a4ff8af677772d199b, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=e84e83a8fb8b6e1521da2d44213f3df5074bb099, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=028e95c66dbdd68b029a666372fe95a6b5814ad1, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=a34fe17dff952447a84467d9f87c5b4913409995, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=299c448c738c8d9ffce5345f28730833342730fa, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=8708663d45bc1beb984aed8cace960c078bd63e1, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=5424d0552708bd542d7277756388ed121fc5bcc2, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=0112574782ba52b3a70f749b8229a0c15bdb1ed4, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=14ce4bd60412d59c2f56271fc8c0c404b1f0f569, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=4f7b28494b91691a701d90e6c0edca9cfa738090, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=aacd8e90ee7b667e771c42cdd470cc339debf685, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=9980ff7da73d19a9b5fbdd959a170035cf9b4640, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=015a7ce9b2fb21a2c85c0270b6bc2b7ea616879c, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=2d2df2680b6f699c49394d0cebb1c98e13b594bc, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=375c09dbd2049945061c86638691aed88d65fcc2, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=50f2b83bbfdf16609bc1e44ae6176b1248124d10, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=91a9461e529b7a1df8b3948c5709e0f02e98292e, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=bb8d334690fbd717da2035fd3325f9b305f0fdf6, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=0dfdad90a976885ddd4bc831ccba14a8deb27dd2, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=94b5e020749cc2ae85b3704a2fa5efe3b136e072, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=722209210d9a10fcd9a796e054979fa89304d61d, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=5ecc4fd6c0260facdcfec5257b59bebcc51828c9, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=e8387df626eafeaffa75a60b449eaaf81cf896c5, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=8b9a71b6fa02599c1620f91d4bef6b2dd78ec0da, stripped$NJ}L%5LZn W?`!6HPVd/?F^)/CJ  E s z  D v ] b ~ )$*C7F3 H+3Ok,#>K+&5.!' !>+A!2!<)J!"%."621   '#P+P*RRSRRRRRR RR,R-RR)RR(RRRRRRRRRRRRRRRRRRRRP4P3RRRSRRNRHRR RRRRURR(R)RRRFRRRRRRRGRERRRRTRRRRRRRRRMRRP6P5R3RRRSRRRR/RJRRURR;RRRRRRR7RRRRR RRRHRR`R-R)RRRFRRRGRERRRRR6RRRR:RRRR_RTRIRR.RRRRRR2RRRRP_P^RR)RRRRRRRRRRRRRRPbPaRRRR%RR)RR(RRRRRRRRRRPiPhRRRR)RRRRRRRRRRRRRRRRPlPmPmPnPnPoPoPpPpPqPqPrPrPsPsPtPtPuPuPvPvPwPwPxPxPyPyPzPzP{P{P|P|P}P}P~PkRRSRRR-RR)RR(RRRRRRRRRRPPR7RSRRRQRWRYRR}RRRRRRRR{RRRRRRJRR(R)RRRRRR;R\RRRRRR|RRRR RRRRIRRRR:RzRRPRR~R RR[RRRRRR6RRRVRPPRyRWRRSRRRRRRjRR;R^RnRDRRR)R(RRRRRRhRRRRxRCRRRRiRRRRR:RRRRRgR@RR]RVRmRPPRRRRR)R(RRRPPRSRRRRRRRRWRRRR)R%R,R(RRRRRRRRRRRRVRPPPPPPPPPPPPPPPPPRSRRRRRRR;RRRRRRRR(R)R-RRRRRRRDRRRRRRRRRRR:RRRRCRRRRRRRRRRRRRRRRPPRRR RNRRRSR RRRRWRRRRRR)R$R%R-R&R R,RR(RRRRRRR RRRRRRMRVRRPPRRjR?RSR^RR;RRDRRRR1RR(R)RRRRRnRRhRyRRRRRxRRRiRRRRRR0R:RCRRRR>RgRR]RmRRPPPPPPPPPPPPPPPPPPPPPPPPPRJRRSRRR{RRRRRR RRRR\RR7RR-R)R,R(RRRRRRRRR~RzRRRRRRR[R6RIRRRRRRRRRRRRRPPRRSR RNRdRRRRRRbRRRRRRRRRRRRRRRRRRRRRRRRRR RRRRDRRRRRRRRR!R'R$R-R%R)R"R(R*R R,RRRRRRRRRRRRRCRRRRRRRcRRRaRRRRRRRRR RRRRRRlRRRRRkRMRRPPPPPPPRRRSRRR RRRRR)RRRRRRRRRRlRkRRRPPRR R R RR)RR(RRR RRRPPPPPPPPPPPPPRNR R$R,RR)R(RRMRPPRRSRRR)RRRRRRRRPPRRRRSRRRRR)RRRRRRRRRRPPRRSRRRRRRFRRRRRRR RR)RRRRRRRRRRRRRRRERRRRRRRRRRRPPRRRRRSR=RRR RRRRR^RR)RRR(R%RRRRRRBRSRRjRRRRRR RWR R;RRRRR^RRR)R(RRRRRRRRRRRRRRRRRRRRRR:RRARiRR RRRR@RRR]RVRRPAP@RRRRRRRR\RRRRRRR)R(R RRRRRRRRRRR RRRRR~RRR[RRRRRPCPBRRRSRRRRUR RRRRRR^RRRRRR)R RR-R(R,RR5RRR R/RjRRhRRRRRiR RRRRTRR.RRRRRRRRRR4RlRRgR@RRR]RPEPDRRRRRR RR=RRRR)RR,RRRURRTRs.c'yG`O *y:<;=$帷Xh7 .&3;cLFLYe+y>V72zuϺc%CY$2,ܱ+mhd -Tm/_s"'lK}Me:ȎZ"iA`(W1ݶ_:d5ube>l8EUhWOƽ*\FRdG $ w5Cs~8kU&PQsݕȎ4׳?uyyE.lA \WV+bj^%(M a4Y9#on5e'*+/r[U6pX[m}xCTIÙfUH``pPhٿ ;}ɴa4yϒwh}k@;$YH y;}0' V i{N ,#>nGMPyOQFRn~qM[poRRkNь~묊c6ϐ͓m=,LZzk/a^J&1.lW ڒ!b<j RA?;zh)cɯ)k*9kdI9(q]*Œ @}'' A^k38wӑ(BSi6aX^C'ʷMDvp#89|/U\~XT\9& wéj;{NMmZv&G2f)}ή) ul\G8$i]E蹄Nj&5u>NJ @O* *ܺ#hBS+*T-kC8/}+i2% (#ń"L/A &K[(pLK  W^Wg׺sJB2_ұH, tJU>7LJocSIɗE)ݫBv]e%+ 羃L8&.OtUP!|6n/F/39*@D:U4cU:,÷jVm@=~s8s`>6c/,M Qa+rb .iU&4Tչyl(OS P+eL #dîY{u6>S4nlU_+cLAlݱ'ĀL? )Dc#ڑ 6!5尕2(I9|~z{a OH )7K2\ޥڢ$ d!7A QZ'i 49~P< uLI,'uƌ MܻύZ I!3"2 \S8ӚRXg2r_qMlC["L:NC(ӏSs+Dw}! ˜,gmǷ*OPU*sIlsDOlL(mIxHP} 5eX8]/VNT 5Ahc1RUHvchU'^\<[Ȩu}}:K"aOIvAUS$5в&%ښ aRVMAScyicdf!YqZ:zfh@rв"LratLUdx~1o¦ D̈X͢JP }}Fc[^ oo(s5gn/x`ʗi&K@ˆ}*IT0o#3p/)l|~u;kQɳf&:-PDz/QThBywk1>=Y&`yj?2t1]oyOh̅..=ߩft/BӰq[@3(?#{7wEHn٤<&oG"FУwSoBya%KLꮠ5k[ G>[9[CG߿ b,ju᰷/B@$Qw͠dzUM#y b=PՓ5Futeq84䊒¡߀;Bu4L M{5/X.QId[K,If5ד'}G[k ^#Nʎ7xϟ ' YY:#pzhTFҥ5t12,&ݔ`(vkSPv\mF՚I2ݩddj(ܛ:l%-0C[wW,pљo~`b~VnS̥1p)9_uOȻk&-i d0^,Z=%3lcOX#G< Is})Z&6ɸ0Z#X^KAaixҨs Uz'ج'Qbb:5v1t.^;R-Q: tC=HO=G%$6r wOvc([ ~7\k6NM5$(x`Kv\H'|Mwٗj/ !R# Ez,@_ȈcܫL.xOt/ {WW,P``z?oՂA@{B*gT3u"&߉w aa(=4v_gDPqևCÆY ѯh(Bb!P䙮HDʹjg޲Ru/cC_?_)A8\R3Zi:lƉnN*5XRӨuR*f&宫#"@X)+~(Kx'QZu Ղmt d¤cwWƆy&\kF[j/)0 Մ]$EhArsVwmrrd}O<;.Sj5. &$EzhgsIt_E1hx^6;==\[T`LMfD;E&x>ϼ^ۃ^cUw{Qsu;I'(Fݱo،:a VVtF9S,f" DX@0vc+ݗW_eVrl:{[Er9%W> 5wϐJybvfKeC,íx霰 ɯRJ%%kAqd]ܼРqPƱNMU6麋Ŭ]>P(ͬ@ZCߝwmjQ>ؖu5cq\u]eR?&ѐ-*Xu<ɿW+F̯zc3L#̪Gs@ܦlGV䚻?;A9+Ð M1PNÞD΂w j3q82_at1xOmÿ7FYu8H:_bZ,.];ϧqϤFVYhBoT"r[8j$ dp`- tN̈ PK7" e j04-8ml1pɈK&\st.!qD4SpԘ? W6H}[Ii4YsL/‰D)E`CZfkX}(ge yHNZR2/֠6;{}NA طCppԜar qbS/ז"j1܋e o[+65xJoN{ׅC궫,G2 bav@jR?[3'W c{<=GZʄ,A Ǯ16ř]nW}XK[<F`w4vOZFЉ.ƸL|8Kjf6,-GK'p^ua,2lDEw=S=8 FG bE]'#YF$ڛyyzσE΅if##7"a>b$(EaapGyOHqU`X/jHÃ~Ջ[`@ aj(x}NbOk#ehϢBTY]Щq+00B3*%Vo_&"_j/g 6)OdB Oseu6 ['mzp}턜)K ̵7M@F {u%eDf9ץi 5g]8ja{ DIK8-!i'Thk} Rh"{TzWV=Ywrnmv.$lKB[n(;osjt2cebp{]Ojݽ\y-Y11-_p;P4'G*ۈ6Wa X6B|[IjuWY=]?xyty"*5I@^/rNX{tAu`*RO|''_#1"yޥQ Ru,`{fx8TP"P|;$E2 FNLְR 34W@m;Bʿ섴=٫;;Bz-4T%/9/gV5'zwx23ӡJ*֥;aT,P2Bfuw7 LiNJثW ϙa2KTձZ)ϭ5#-BhlG˥#2t} E):}^MBpU_K}{G(va^Ir_8@.gf gÂg b)'} I1uLTzM61P21xI/XPJ-`n_v%ҟg}>\qb@YZ[ vb6o6 ܊X?Rps "z7)9n8 PLU~酗 /Qpi«,4`BAsylڀnzo31'z[AWIxlM9!z0 o> ŔAW0틓&,N螋t yoܟ iITUQo)۲o~H)JP$ntF8qLKf垳1?1WRr{ ~3.xǴ2 j *E>a.Gy1i +}~T^*DA]q٘0V1R< WCZLG߿9Cn}z:7MA@C*器l}m`]OG=zi؟4~a*^"ȓj`z!jMd x_|Zn-lZ u"@"zPDwG?=$1N|۩/pt7n[:QJ sWvvQNqUw{(ߘIu`Ϥ/+afƍyeyrfxH?[\]GTo%lګwl[e @eSJȞ!*XIi$ Ӡ{Kk- ꬤԚ>GHS[p %*vdqژ֯D½:!i *9LF1 ]~VA,J4)o}tpͻ&ŏUv߹ö3`|- Z?;9?gsVFS\2 q<G`||7 C&oq`GȂ¯Gww Йݠ TJ9HZSed(B )Hb@1EMG 4F;Th?|J1@ Y|`^Ѝni1+c,CEzLs{!{~יvarhz9| 0aW6 Q1t7*qY6K%fg >4+/el)P1l8&Э8')Zgrʿ$f"ⓒZ>'yґVm X ؖbKl_I_<1iEa"GMmیCdyW>v#Ɗ~Ra*ӕoĐeWEFhv] mt|Zd)w|<9|%Y職KqYUIgT FL fD|i}VR#J+3&@Eo$mJ~&]f0;8JazZO2S#YӃ`ˏ As!Djچ뱧 >u81GގK[8*|.1˵9t3G.~29+wk.i-[ u8bpRO0*qI#`:=o%reR{b‹J^}1xK(6FG (Q]x[ʨJ#VJ`Cv=< N{. (.C i.k({IF5&|1Þ¾"X}+5pIo–?v`So't&\䥉冮ȥ-:4U#!Gp'w=15琀xmI&Xo2 MV>}vD¶|w˴ IVmFSQxv)^+g!2v'#ꓐ&6Te1D +%IJnDxFݲau9ashq~,Fh'fAjN2~WO4ѿN/ʮ_*AkQcVn6?-;!+hr)Ŵ0.ˮ`D&V4 -%Mԛz*' Xenbz_/r"Q%6op1*xjBAy=bCL8NbhvBKs!6(dO[2l,FmCh2kQL m:9nت)Uo]l@8mNd0'ibƫ/zԳOG#!GHiPwF{""Fg0R'=d/"4A ]}E'X _ocV@J_ä/5՘8e1#i4sG"pu*]<E/:OO\ύ;SS36ɮӒДnP2sv'>`Ԗ0s,x-cwF`SA(b9č"&9C9Ĝ*F`o}=[z4EpOЌϠv% U/ٛ olJ`==pm8szT؈wir'ԓME⼝l0`gM{o_?PMQxY'I4dI,e1Zۮ^Ifj]b@fAP<vi!|D  ǹG߶l$y#,59rx{H9 %>u7C74 /3Wդ$,Bq$,t8*).`VRʻǘd×o$8Zћz O75!4|̒u`9~Q.QW9ثJX~Swڡ6+6qN ؼWT?<6oC}b@ v}aԙ)wx)\TBKl`Wd¶E [k!ZPx|GntR{N0DDwdOloO;R4@AVU+8:p zlȋ̮ E\omH:ȫ>DģVRa[4̖y^mzZ0Uܥ[RsDW˿zf [{}A?}p~*,v\Zw#`ȅF uOڏJ3hMݰۍ~q`wwπl̼i: v џ-4#DƵ(,SF-f߀ukwB쭍SڻK5ہ%}dȓX.WBCuaHZIѬZ,|ѥFB絠ʣxi];&3g48§%GL\4d5O .rf쯊FXAh3_Ʀ3,*,#$'C f%'c&P}6x 6q)HiE#/͟8~W\7Srqq(| BW X@(FcAkIIzx*N[Ǚ@@Pr#MZތt¸:0~tw/mP0Gj\ݥ|d歌9O i?&;pba@E/Bd6_}TXS#KgZ[Rw$D>?*0?9%. 4E芰oab V>aW$.՜>cW؎%n@43a+1ڒzAJڶd(̈"m!tj Lc̺a v-7ٟr%cX>;l@u=%c!~ |9ۺB;?FɪI=;>(  c: vd=]h\g"~$8D ;tbe;OU%дIRۛtFRxCPH㡆77T%іcu|V?2\BYf{^ w8>+-өz*Gh-,}IՆ8 5Snˈ(NU,+~4/$!D6M1GPAJb~dzbKSw>>:"{ ݯ. tUeN􌝴Wf(;>5Z|ē}Lp>SrJpb &`&OQ$BR㡞1\RCu;4麄s9CX9ɧP/t?5Q?QN]Hl^ʪ|h=,@y^ki}U)]ApKWǢ,(V?z03K쓧QWo۲jƏj^R7=N`ߴ0.* I6:3|ї"|rjF8V \+ǚ ɈG(r[a9qhLeG\bL"2~DI+k# S? UohmdDJ_-x1g@rO^TV2$CzbV-b4_ce`iUoח \.b֓5FUkf ) !2h$";^CPJc0r C%8;vJɐ<,/ꢺ퀹uф ·҇"A: tT2Ɩ.HOowv1L 0^:Ul NJ:l (9y “fF45F</2"'0s2eJ±VŁSմhJ|Ɋ=@мѠ -$$c$R @ G*ܨ g";k7vwQY+$<\kd0u) IXP05qj\Nm: zA0#M>x}˘ |ٲE/&ZNB pƤ9|gQ6:H7HN=TQhk˖f׈ se0w)l$pY`$\?41Rm? C \vW2韹dxѐPNy?(5J϶ ~zWceTTw ?=wW%aLrHDaP]'lVt&4 ?]œ9Vy NHw!G!5^`yeL ٰ3h#ԯ_OAүxZJT׵XH "6tv"|IV}q|=|XcslWu:ͷ2םW!4umUcy-ɰ3Dj,[ fi`TIG/gN 6D*/Mv54I[nڼ avblʳUq/X YP ¢ke/B"y%i9e6\V: Sw'CI kNFCQ y%+h-ӧ#G5'Azׅ|fFg*ರӊ:t>,NKS{Y}N&n{@ qzERi_IsivL,#?ia>Ԙ!vTd%*A%6s/.M˫M^J3tW⢴8?шDxD=pc{o{@L. y۔ .Sx~ahZ3Ln%^}KϦ>B6>=,W\=[Ip\R>/6)eUぬBYEJmhJkt@ :ڔGwgC78ԵSU-jPHj`Bv+û$u%FR7MWjzKznWhՔI;3 J AǶXimvzVBMy9{\ŷ=͛wJ׊i?j cBl0VȂP׿a޺4BR$2-cN)hˣq\ڝ$4[r52Pk)aL_0$h]O_ّʭgCuF<.oN9Hvxs:Gϝ":NǣҍYD=+#\_;௵nq{I3V5@hunIJUAA+)tg^f e|\#W6f:XZ0ԸYdXx aw|E*HBy ȱo.C$TnY`*c)5GȤ5%2?cfD֏mIUh~;Y7 ?wW8 e*;<p0*çy(e9υ@ȪͰ z,0[E!, 2Y0?*nS3[rߠ\ɾX[|RL0EOlzd:5O:/\~IR]AFًMk@'ڤhZSg3Lz,(| _9m]}cҕTzޝm7o8(7%ȓ[d|]OZi>2Ai@X@AzIjyAQ|EW*v~i̱Aw  tCSx-qy"S&&ynG)1viHllIou%Ck&{#+״9clzYg:wvgw}{#fP'\X|HKgD^X]p-X#+m\y&G~fמ<JT_# ={[*X״QrOeۛ G"s!Tփd8a'cGoX#kŘkqu\ K遊(bd=|6Az$F2 ?K^a^ ["_ܱ2& n[Q=f@t1{ngc4ЬkVSwۈAp7s\A"`IX-|! 6DB*^E|.=cFO.MfqXrzVk:^1Sy8_½"!8c8 "8}T42At7xۼ ͵IXo=')Ark2M]]{蟔]Hh[ P"?6\*p1o!+f»(ܤԬuKN5W=sëѽT!ղF#{Œy s oT6Y4JOA\q-K?nk {qk(KGIPȸЦ]vht#"(@:s=~^T 9 [yKy0Qz ΋燞6ac[1g$G9#3=r Z\ui =EH/:A/ǩ[`r*mL36-ϴ=;MdDʎqB=5^_2Ӕ2Nœ`w ]\4uӬ.THlD4`}Qn:H->W;bI+^E>%$%ڝO8-~;37J {/>~Qb&<*n/hktǧ4]_\GAH ~h<4(.Pnj. b#)t+p̲<' >3пrGi5Ɛ$1 AХXqiќQCW7sh;lND/wYUOd _t99elNx1r}0 UirhcpMZl'v%__^\)1 +Otһ&E+:ݜoŦ?D GOrŔn(oq޻i_n8n^^Lة@P.v"wjStSSf͔.BHKKsE}6DXEW]PMoS$y)lŶ.f qFDd Ø)XI[8aEƇٗ a rsP<bdtӻ<; }Zx>n>sp;SC_ '̐KvqcY5;e:ӵ#j`RD@({|J+@SxڭH8nf"'d{J `.cEL$,}/bۧ~??LX2_kC鈀"xAUqYD8 mԅR8%NA겇g@>_ēwnD*8/% e*4.:٢af>d f"ЭE*45Bz&##{Q~'!A%~!Orm@*jdn4e\?3a'YDrxI2y%B:ihV̖#%:OFY3tbxJȀ,Sˣ$?yH##@^vW;R,|Zvv\WX^0X='.nW;Ľw>#f*ё6r2r(nI' `EXwq [;9hOQTL+ShYJg o CC!sNj:3y2=ztE-f:0/iYf,X[tۍ+lo 7l@]..r\I٭+1Ёӱh9_[! ;Ez\=MC7`p#mA%Pp\0dj3ۄuL- (S)L8tCktaT9K cÑe<0C[o-uͧxi*66Dc~>WKhT  w :>`j(/|̃?C>|L%@vsO\ U#\2Ś:hح9>r r4G6#`?3J-Ydrա{PCNBRog. EU&t'[Bĉ4fQۆYP}O$=bϲ5SwGIZ>샡>Er l5$t0ߓ [(4(U"uկz}MpK-PŖ7E%&C# cB\?6CCS)@KaTZvtqP,HW i2yX_c;}w7W) cЎbT1ec@](3Bl~9F-fM_290z@bF-rzm6 hUHq`1!Xdzo}:xv_M!!Tt/IS;ջ:՘n1Z?ku!&@:$޻4Nڅzsjhu,MjT+ua `mg7G(k@ 71 FF|!^͗nX sNbo}f0 wSuv2X:C價UsxRo ĈfSW~^ O5JšNsEi%4@|HݩxR}hzozݕ_dl6, sKCCLR6I #Rk1GY pEMōXC":V<u8h&<;%m6&U=gޖw0"؈ uK+/xAE} ƿׅj36>A.QN9M}o @R͕ք&vS*!+^0ƧX_B3rlDu–7܉IX#k :T vRzs~{vkba*=fK!4-kMWWv-:%'1r[|*,c :Gּ8VWoL |@<20@R*Ս"4Ujui]vL Uhu"yd`w0zӓUt1gw}hHz(#F¼q3W3[h{$Ho֭jF':hg+ IʆAKW_軥2E:?𬙃ZX rZOYZqIhТ#;z2_eD0{PTp$IgzirMc2ƿ+(\= p̧mΞDռ4WFM@pS_tEpO֚*ѐM_vvٗ2^3geH}?۾eT#&6xAU8f.eh*arj@aH:5 䧾.OIdT &W=Mc=${xɚnw<4Zxj,W#&lN:0ok~ͣP .rØP^֔F<-[*u>!4϶!Rp0xnU= q9B*&ɮS_GBh5{ zf/S#˃]ם+J%\ńZwm2NYŨsuz? P0[/z<:=f%{LZDX'&,%c`Hڍ8?=Y7[d 3i y4'K|vWl s{jcbU HUorkҳZf{blMWlxfQ|DmSs9S=okJҏSq(o9Խ` Sbkʌ8 x;t @hG-?7*36+xM 67UusM(?.S|)ME"q<C݋-|l2\? )V W֠W/.3 NChH`cz{КҁɟEtn0r ש?Vr c2ЮcONtn V4^$cWp - )W9"\YDl l\QC+7LTQ^ʎ\c9=-uT6OHNLVsuSGiAWƘWjKtmoI7Ew3ړj02S0* =]a$8ۗ.ʱHRO#1[j_lna%So߬}ȄvخMa>\YB#"lF_.?TN]y'PӐBmonSo=s.ϻCb54`M#"vYޅl98j\[u$A:ʫk peOswvX{yҁ^ 5[Ge;iK_S@/C cZ ;G?JX ,,r0ADz g˫_2g$J(T3uZbx4_:ڲZlaIE2gDbS}, :[e[WiaC#̼Ua.@J<$_غJKs@;*iߛ[rhuy[˨&B 0F\ޚXbC%G8{RD:CrkD oۯBչ9̀<jfXKlLk "J;F_ew BN׀0#gX(5RJ"r qWJ\_fPD1 )_Nϵ,ָ>%H>a{QyS:Hn;9D6&],fv%8%U "ngDrZSBUʩȈdVs0<⯼LC+!dt>?vIrG G|~*To3ԼfCUpˣNJ_Y`>?m+V% y *@#{]4$n N67}Nb7׾jX>x5~dcǤqOxȵ{|:) "(#}_P![/eXxhVkZ_$-fxƐ鿝/e(u0^lmXVQyP$XFT66a35jq'O%Ȩ$lP%ߡ:ͭы,IRRMphX'l>]mRWlu`JHN P`'pl&᥹"{gL'3[_eG*JIv@痆=lU&0Wh*/(.n:/$O=6V0_&\wޡdU$GAC@o" Gu!A7BdpI,EXcgx& CU m~裼!QՕ^M0*m3*WHLF 5 o2ݞ&XU04ek-NŨDT30qBn/g*EB"#sLn}/Sp:*9,L02rv(zt ?x]4"#DpE 3*m0/Qdj@ĉJMF1 3)>0J;imNR,\|Q;o"We.m2j9Wr'u?߈юx)&plSR3hHځQ}:QIEM1{߀}/+wU=Lb #'ff1P95|-~WBxs4Jj%NSI =O>!M$SOaWPrF^ ХuۙHE]ALKGkmagub-4t)ܝ/7U N߰eQ]C7>.ڴLdgq($K2hsu*0g|$|͵d͑%!:7OMi"MdbZYo)@B-ٰL0|gߎpQǑ"(99DYG% nb :(Y]:!Ftcɑ/lb&RI{7 g@4ȲQboj83sx4VKv@EDr\F2 ;MSJ#dǗ B}zZyi/DWXH]%KzScȠ!)p B6?f`J!ތ_%|Zft\IZس{L'YdJڸ^'ԯC@uKap01񐑱s%u&Hʍ] Oy^HnB"딙:$+ iRdPc\nlf(\ӥaѢ16V$Mbq^ 8Sub* 9Ȁ݌-g@w[ǃRHo@>;h_ Fv˫bSb6vG fT8:?;~ӑն˂ou?rёac s3jͰ>Q4nҹ38iR/Qzj޻#h}R5q -Kτ~USLb[{Q2TȬ>Wdx8; ܫ%oYRHQKD d[Jok?=3e]o˙`7O-o,RWlgcObHLj$DFDIszv*ta{賲`r>  />*檁-+V͑/9ϣ-to|"EuXT2(mJхw&o+rY"R{O/4wYzs޷,Ѳ !̮<) 'h9cUGI N]٬ U8K݋o, %fl")E&ɣL j =G0 .R|dt⟯+'@.pBYw([Sʞ橸aq,@ \2q j=WČo@dfkfuH` awr/V,w8'Q2ֶ9RҨ&>V7]Н;ܶTw-˜7h"QG5b\v9\4mn4pOD|e XImEQ>9;!Y8aJ~px/l:e7揂4"#O~Ȏ".Ӓd9O7}{jc(q>"T:!3=YMuYYCW: .3޿RGzUZɼlB]4+bM HQ8=ezT^U1_Rݖ\b5)yepTDi8Ҹ9T9nxz1Ѝx]@OYҮ,&FD1%F@Dzmrin,[x03ߤ) A,F3OM19HWRs }"VUW)?i-b˫"ǫ֩LU }e,x'Xk )Mtn0ԵlK/SӚC̐1BP}P|}>e}qHN ՍF4p]I^g֫Q{ù7%r s4}qoPA”$xr90I2A MZwԿ*TX'6)M"%yƤ8l4(nəw#YT~'L}fTi!`%Robb6)-{\Qfjv&qֵuQdu5ٜ \ϚPqNi! iiPxb{l N„q)orss\M0޷rV,LOb,)MI+ ALz'꿢Dnq1Kn(}w'8λhmoncuA\ "o)9 ri[:d#'vn4=HP(и@f>x$}cHdFPi|!]f }{ec 3fL/Kn'[Q5nei Y>tk~BSUBmj'`X檽vv|iL&`eg%Lb۽,Ub,{j^)͘jVaɁL_|Mo#qG̤=PT/35X!"W'19[Ĝd[ kO%^D#$&(3F$p=L׈+q0B,yGß'7j&'wN^nOFĄvʏM-He~m O-C1,.fn K e>wpc{}_ ʙψ_q( LJSrs(zG{l1B{x;ؾzx3 NB-:EfƹKqHIa̗{;O_.tޮϱg1Ϧ&(~~b69hDb.c tKRxIx4ۻhmjD,wIT!RcŨfYP߾^!gKy5b3 gGJ*nѺ =8%֋+i|ITZE fe#BNVԒc,*Lȿ:q}N ;"kn ;M%E}KLUCP-\wQяB!# `Ǵ}O;YMGRF1x ʫݩHԝ-6@&|:+6qLXi]97N[ HO#~n{m>BHC -0IBLHpzj]n}he*m#Udr !p*,ݤ oJqC`G!5#A!9|d}zPhg#n(%-BR80TȽa 0,i.V(RZɣp~ue93K^ƤIVf}v!'.mLџݾM(:]W_7mTUgqbšiB_DG5`BƸ鴸Aק7IS$ĩ-Eqn} E=̒e{-Q?&(+`ɗCJ*A0l փw՗vu}2#WT32Lbਪ Ǽ(Zp[;$ yZ؋fMqt_vܐ^ˎKor.,JI-+\ls >II^W d$I XwQa%^Lb0 9I%4:2C#2elfݽ z@FQ  jB (m噻)OUZ|_fw`u8T}UO#+^11GF;v􏭎X@=ÇO4⯣;O G}mi|%̗/|t*KQ8?r.otԇ⟑X湰n~8.r\v-JE7`^4C/}P)u_,JlXh_LBށpVж5)j-5/yaR<}:ym1FIj(Mȍ# dKio&j$Q΀Jd(]h}q"7ס-+g 84# _M ` eQt!J(ۍMOMT$E=LBYd$2VFI닽]Ч?7|1Y}q$EB ܯ+mҮ5xpVt=Dl#>k nMr 5_KG`d _+HQ? L0@Ҩ>"EE[R mRv Pf卶`=X|/CQ6ſ~9 [Sj)VL 8ɁL~$։Bd_#!ͱбXR?ɝ\&PWՐHZ%Ԫ}(/ ڵ/dׂ <ydƻ߸Ba'M[r.@SGC.=d;>qП528'Ʈn$ WU^JW^)n:s W=)%9dmY'gئ# juTZ40\C1;U;stya`)@X"| ARJ*c':x'V{fQg.7ϭ[SM({cb_a {y$8E`=B0M^ΔXp&1An$/ m#t#u5 yEI2wk4H =FpB˯s$tW8vW L}o2%=ny&.g&zg'o9q[x .Įc)32.jYc) P响&Tbaٮ-Z.?`;cg '&|!Bxƿdg\g:<^d=N" ("1.kcR5vn)#7709]JȞ{ Qeϓ!b:ym}V9KkuS+oX Yś*4,Ӗq"A k + ~+ e|?tm&2Degg]wd7'd>]kَ1gKؤ&'MaK\(S#<ogU]p#\Y"b(աw-w`[6GޥW!(Q !IwYTf YHtvW=%l_~W{+A;\Kqm*Mu~!xsL,OJ&Ӯ1&%`szDT3$( Yj$wj[A>uڎ 5 h jZf-sl2w1- aiLz/$Cp ʺtŠ=eIW8X7~'~+u\~ްJoXL@[FSFÇ ruPGBuѢ0zy_R +f(wp{ "|)4hkp!2ao ½G\3Bf; ;C{Mziһ^.'/5^'3> g2t)(ъmakIZYz^%ܹUF[汿B6V^6#]{z#e>8Ֆ'=`eƚճd lk[q{`!Y(PUqZ\Mcf٨gß8}>ޝ4^Q’fB{ + ub,G8 ʈ& ѭ+xWOY(oPJztx.SmD=<Ӷa ;DaBD$z3gțVgbcO[7 ks uRTsoCwRg E42=l:}?oo"r:klZg3Gl߇nwcLt_ 0 2m:ZUca"7K>:N~1d$>%ƟPzDUh"7T`ϊeCeBƊq(5'~gS^A*_Z_D#T^2YiS,T"`;\bAlX&uYmHrD$o)L+Bc %ah+ݠw"Ž;y/FXbH'_;mG(#T<}OهȲ-|4)DO&&q]2TRK%*!)3FrnGX;2\G^piFpd Wr;ALYֶ"O15Aa`7{3r6J^Sy7$j3' ڨ ?襶Q9a0kO+ }66Ο ?+>~73h|1gr0~9$"u!WUϩyr8 l鰴#H \]DW3KK8ZQYa~5UCd˸tIO6G/#M&Uq1d{QR01H oH\({lT蛉,jrg> M#0$Iek]:r+'+*\֫HP=F)FD~2N[K@1u=;,=2A+>X_ZV; j>_xU2!@aV 4GC8 mjCsS!0I,I{KeF)4ד!3"u)q/;7eLMlln-fXf.LD}!ZK 5fX.TZ}4147;$5MJF3cHK@я"N\u`9Mw|;ی/}- 遳v'-r]#Bxѡh2Os)[Q]rm3y"Ffqr.'p-Z+>I%2iJ$V+n O,Ȅ<:P^{UZ J_*gK+eX aJ&!a{`h5ʏً\]/+\2X|+_Pfn߷[=2B@!'{TN(U.B?j(l4erWP86dAÉZ \XE4j^"lDB0n0܍/\//ާU>F+.vDD1ycɩ t|ЖDh ׻3VO/rmY+9 [MCgǮmaQ*KPUx dY;JI-(“;0:m5F4hΉ@ĊT}bNsG/s*W!B$A4ٹv_;ydwi9 Jƽda3Cw2MҤDk&zjδŧ9CUx0'0K ivJM xG/faH IKzpI fk+䂇ЀaϚ>taI99(E &GWs{RtaPOXk>~0IY8ǀfi1Rֲނdy,CpOk7͎ذ gV0Z}dZj".hYP2]~-2 蝕mv>o'?X%}8x9jg:E ]P36q2ͪGTL"NSH![3THfS,^U яl5lKY#O?clQ)w>U5mMo,oT>T8`Qx-x0w#PY 59WU3̺+{f+YO*aqN w@ *58bn >R|Q).l7!H;lT@x&i@i#C=O8) SPf "749ƙ-(@Ll0,dϓfp*7X R0ydZ**q 8ߦ_~ `N[P[Eikx(\,(=lV4DD`,-*_8b8GQӴt|պ!T&b/x!\Kack$Ig|ᓇ&֡w¤Wx CCS($VxWc 2ucx7=z#d+FijB oS^EGx'IJfR}d`6'q}R]̉M57z7by!N;55[<WRY˧=OԭZ+3vd3q;c;:_ҕ%^QUԚ+}[Lc|wǥ'գՔ'l^_ %~9w^l_yNR ȓX H)%̞|PھnwSѹi;^IE!a@h{R(g}Km\)CCA>mOZp׼l ʻGě~2}SXH_bV,NSܙf17S /ή:ӂǺAl!-\WMS=^yR2 X[Mo&v.IW@VRá̩(܁:2P`|{U^ap"FA1b8GҦ%?pb9P pİR3QOKo-B*|6wf@jcJ#}z効z5N,2evf[Ybds,җ ȟ  n72n"8&a"P@ >ǞYV/Jg;ײ/DB"^(4L> r?gN﬊1F\IzZHߒ'f.k ~!: 2 #W`W# tl컹|( w_ͮlo<\ GnD;*8J~D?}Rˠwf2^>`t y܈@spRMc-r^ԓ_ϹW+eΧ#=ؒ&`$E,bswPUX 9W_KCQI I4l7~dYkHF`P( A\ gl[0P!KvDwίAVo2n &$)ohmq<2APorw阪f)k`dxݷVnjill(HKw)E.xp./|ZJҔJ/C?D0RD:K,qRwvچ%Jj4&nP3xB"<%@%,̾t鞦{Gټ %b VCx1I{W90~۠0)PR}쏚.I vؾ$EN)@ОNqNk!|S9+#:e)7G83,KlvL[ڧگ8x_Pi\BSϙ8W)}8=\3Bš(C)0\?6]=o<븢t'&/X_^57o$܉Nc"?j-o ' ~+GASR,S&H9MҴۢlJnO*?פRTv&!b4İ?e O0B?[U9~8F&A=2\U`c;M:nh81由d#$d/;qz|u >>|f_UGtJa푁/w$_OAek2Qȴ>E/:)T8#E2l<,":s41Ssfb?yFe*JO(HmUzV^*cḻaէh/'~&ޛt<#R$BH,>Nx/f+Y>2q4y;SDJȳ)_0,3= qTltݐ`"=.A/?py9j0Rrg~N9ɽӻN䐰ܶdh8LGh?&lklŒ2m[+`{ۏkFX^Cr٭: zVQlr݉DZkvʂ_vGC[9*1o ^^1jRǨPX|Sp9vd|A+< pzHEɬ85y 0H%S=> V260SB0Ok%:#lPɶxaab{"-bR^X'DtkDC9c> w*%BڕӅ9槄/X>6*+([EItt_R)ܵA5,U<|."y].G ؞^v<7ʚCi8rwO˧s#&=zHEȳDP۝Qy e08 \jCNF:C?d r^q Gret<;-9I.3w\<-Z w5|lauh{KGF[I>FO DA\ i|M6SRENX[`hr*HQ:袟6UNuSў ˔KeRiNR=V gI?$vn* m3ШOkBdC͕<˛LWhoڷB*{,Swek pmpVL S_C|7"Ӳʝ-Mx;ȴpw\5>9zJY^MhC@Swy]+|vSi̎0a55 `5k*Kタ,[e4@̕c.SeT)E?Ȥ|'xpXӮ?tqe` ԜȰٱR(k(["S{L'Dy*G*OnŸ!S1cloּYfk):w&3b|\:p".'oP(YgD MV9ߕ:x*G4d&;a ]-i+w=~YKdt<uu^`_ zz+%z4s(x`5 @*jDS+7US*VCgA2$Myc;ϯ S,ĉ 않t<2\lNU"@Q eX8X:?d,Rf[3}]@0㗐|%T(N,*]6NYh)gv\)k߅^y5QShKHꇓ4K8#Z.ڎ6iOiwN/ۂ<aa*qDqN9FޗJf-s#/BBk&ġDW| 6`GO<Rd2գ/೑cxBK-g|s&N]X9[cğ%&Q]\|k!nzAHȇ$rZ8F!I " ӧrU{0pO)i\W\p}sjQ,ZnQvoH|J<^5 6jZ6UZ_Wi`3)yܶbEǴDoy<8~ R{] XMLO\eiDY/:Bz\guu6{ǩXA+ T H0vw(} fVQ|T4 ~%KW.W|ۿ[&)yBCU 0I`\4q3A<؅ )#t:ZtFŊM$ (V1QzJguZ=ăcKu'A$>M/B;՛ʼntLXpmdɊ)\G} `HKE77vR<_QZՊ7vԳJBx&€,Bt؀ZlC'޲'N.Eԍʝږ9\ F,C앢)/UhDW ]6ƴB,=,vm|v [<(ji34Jx`cf$AQ,W{hrT&Hn: L /RY נXBi˼Es>ZvT4Et MbhiN2;  am/v7+%O?JwWpT!b]kLM+Vn;vjr)y2+&Hr_9܊xpm ,|j=/%j>~֖!߄vmÑ'9V+^9N J<1,~/;o 2(iP68cŪuZ\=}ԵCMo'%]"jn@ê4x(FH T.oV K{^8ߥ; Դb?[XyU;̙QBr'Y!~>AuޟL#EiUx酛*7*x3" k*J zZ`j]VϜpgeCF @%[~)lʇB%b Sga(GqBsg So"k)x`mmcoOHN4m!tp8Y1MpwLc50J\y6ղRt) h CmowQ:s +2VR=TbaH<zlq2QEI 0&ޝ:XT!V~x]y9EUXc#गV:Z(6f滽}s\8r]m7`cM0n_ "X\¦*ck ,Hr: ûF~ю2)gf[zJL,dU'mmB"CuM e햎qܗ]8NX~Wj?o.KrJݩd!@ߛխxBdQ{u6LO,tEf1E @=;ƳROK>t䈷$oT,G ljM@-J;EcۣU7Iq6o4x5ק]no"J%xQ/lf`ulozXݴ4^T  D w ,PBU=7H~Qd{S(^ӈx )C?RVW5Xi6m;K@Ut";ٵ(V1H_15Gˌįb Wpz,G|U,'ZЖC9 Cu&;H"ϳt28INrԿW@ PPu~$2>x_~{ ٢t"0*V#]ULp$48޲/O.C\!u|:N>a`cU5%;~e[P|#A.?!O1fV+]N򦆼}snBܟ%<cח2%8 "YmLG"Qw)U+Yl*)xa#RTKR<t+6VƢMKKy>Yb]jgXɚةy1;|#~wC Lg˜8q="Լ.扑!%J 4_`cY9lw`7}+AҚ0kԏlm2 )$&<(D+jhzS(NUohVܙioBۡ'Fwr&:۱v`l$ϨSg 2ξtɂʉ>$9[驕0V[dQ/Hg" Fٗt| |/^X*SVqI󤗛:52ua1\_*?3dy~~ :)%`%;ς*B[9Ö˳~Μ?bxu7n(U~\9p`F[ Y{ NcR.P֏,Xf;~ICy`d>u P,-|O32"VX2LKUk)Y+7 E0AV:ȘҠfRə;ueO1Pd Áq'ÐJN_(E`{͊޿y0Њ4V@ v;uXQөV]q@N2[9~6Csd41z-Ls弦tXg>n1=*t9cuHuht/ ȲZIMԦՅD'V.tǙ HU_;?42Y-Ce Y)>1YնQL|LuŌV#c1hR7Ca.X O799R6Pi':tak{ 1/=_)r͡[҈G-iA):atzd[[[WP̓*w GӻyR/eu$dh%ej h#@53L{/X2{埥aUF#g+\h[R-پ` ma p*,0RA*gdT..-oޘLN] ](c E.L9p@F#T6 ;!@hvZ0AaLFg>,9⛔4YN7Mǽ8'y2wYfRAVO[(maJ` "SP"q"_f1c-&1qd|hE5ܳ,O51·v"a nz|o)2-ưTto&au*LasMĻhvzJx [B{y(=r1J;p~9_yC옮ꦞې c|YVy-cE>>};wgS"}7`PmM/yŁ6 ,ƀ.YQ4 WȒjOV݇sIv\y|a2lܮ._ >7|h֓ſRt 'p¥&GƚJ&2x.Z<:dƒ'ۢ@tR-S8s1^p;V[2TRDJ ~Ky"'6F{Gp+!h j;8O唭]qo_S53O ٽ 1L/Qj:o9 /V5;E0*IIJw4TI:% $k4ɺ{0߯09g6ʒχ?rl*7-J.!<.t ֟endF; zӵ3G")jlRE>Pr2)Zq=솆;?Mq-d aK]h樖T_0Z;'^ yo$pBƉk$fph%oFzE˯Лh8I7\ПN*us%Az(1|:I+j&U }HaJ96M:c䈯;)jm81{6DNɜBgI齲w؁NG,:S zYL%aZ2$'kTlclN!˜vBdȔx\&C`9WϾ^=4Dyrx*߽2ՕK~mt1ӺpcQ n{nz& `\: #K3U"G7 鿕-1!77ưa~kr10IvRy$sg_%Q:W-3'E_P!,עa. :neq#Jed˚k(~ <gP)m81]TSev\)%x24!Pjʡ;_Hqˮ͈vO P|SFKn]:yj`7~{Q>~&Fz!a'q ם.Mw$IotY~^Kje m RIh2ok*F .GCSe~BS֥#It:uu1vx}RP8zRATN/!% EGɻ,ã ="uܱgL=kjH߹mAr%Mgi(pQ }љdOd^yMK3N*% aN-BS/gmU9s5t U% ag01ck Ԝ6-#rl;~uޙm"Y0fz$XC f{Ӽc~Cb yn2uu4">* E0}d tLHTy|+e&ЩFEERׅVYI"o5]xc KFjte eV`6%Zue&.Ƌ>qw-@) "e)25|PI>mR-e),L֚[c<78_4*Lɠ @V9vdLlHsjQWDG^|,<,!YϢ;K8_N͍fW W>Ca^6a YJWv*fZ~(&+I;N5@FJ"H[N-h|SƆrN;'qFbS׃D` @ͦ$aŀϡ2rtF6O!NIrAqDeC7oZ E;ngI}myTjyLgbcp ~-R#@FTBq@JHFw!QwANiBɚܷjT'|Sǖba@Y3:āQG:Md)H6C*h~/:pK^\!4$+11?$I?)qjgL`CB)U3*ULYtm),s6afNYv7.t<}dY;0 zfvW]yTMt ٩@fX xw9oV>u!Q&6&|X12,@g-&$,Rۧ".v-Fn s!JSNλR~\ϫ'zSТ3~˷IXL5Ѕ'ef'YSAu32GGw 2+[~+^%W>& >6)}#+XZ ꥾N9Ѹّɑ^;- nI0K',A%`/i.NF mqRz|6nBptbх$a,3I-ʻA HXnzD%5swsgΙ1{TuIjҾp_J{[f˪x%oZlSS`1AEp+fWq;̜dXg\ڜ'J s!B}ꕤ6/-xk=v>ǣYZ6&O6iӴ8p Ij~#-&.BєBUÜп(o"I:S':Nb`Nh`4ZHAPgMۈ`wl9p:յ[a5 *A Б!7skZ"6L^] ݢ`T|Cg}K~Kx㨹ΦFe@j߬i|En@_~~ VwgQ>;nڴQ ;p pcFh^ ڽ;Ylp.X cQ'BYݡ%:b |a9@<=]~xtҍ'h"Lsy{u(}\/e2DX (3U2||%ɊȄ?6#Xn5 !tj ɛ͜%Hm]x1`=U"nYtg@)- uSқD<&2iAn>늣$~nͲ=j ,a,sa5m7d)Gd f p30Mc♯i?s3rxLڣvQr5>xIWsYĉ<@r Ь5O_+ݝܩٙngEJ"urC5+~xq{*Xq 여J1 8ۥ\Nb(!M,!FA E/BR#rfW%UCÖ-Yy01AR*וȩp|UU=9wh(KW6~Zö-Iw8yPЮ\r11xCr̍l)u^ۦӝz~q[RqgA>P4FfKH@^3yU}eª98J\8a e@ ߒ5/tP>kKK&W(BT 7㝪mIAfi :u*ۋ*ܬ %;O.C ]~`2ā)a7n9v9뺞Ɓ:aFm\ zZҸ'NF +:n-b$OkKLA{_GC\3ή(29cO }!E(-*Dݳ""\ܢq>n =x:\K [[oPXjtJs=Şt2Q9τD/?M#gdwfHt.Su.{"@9%*볖$ϣQeK=PR&n@:V2b͙L?R%]hd~rJ#uiq  9*z\dKe# .̀4_:%2R\i{L<>h(5*Kpdk6){L ,؀1W.72!z&C `-~. QU=5/E^J$QgSD7nnj7X"qTp_>;!`lQ*KD`zh`I+6&[μm{¥Ɋf 沷\2${2K:c웱b{7y l$^^VvȤoz:aqA̓'3a+D*+I`(QhCy.kd4.+\iadLdy)yer܌@k^p8qZ V(lD\"V kZ&6oqk'VR˱: ֗qp(sߊٹxƛMin0$RhAyQ3Ph4Bstz冁̫+"%gAˊ\i- 6Soi9ƒbVzjh#(Av.qBK^ 7( cQ쎷f%-XJrfuy),TY7|ed ơ;j@)kCvo\O>vvxl#ZpG>6'C{˨4e'̌*\A%"Mŗ"{m:m6)3w k,,3S MHL`PSN_Paܘ1WGE >L|7nBE!,KSeX[{m1 'QғˀM-L֏x qx'cx93:"Bp{9 +JȅLЯM ?u(MDoAӅ;V 2zŎgk!.p찓^bЊ ! x7cLܯ֣Au9{D%b`+L a&[I1^k͊ d}w~h %^Ǧd5_(wEdlRSTxjY|&E_W&Сhau\[%6i}S>,m&Df p;,1/{hwG[F9W:D B'dpxs _ykO+g]|U'A/Һ+L'f3@j]aնHR:Ո)ajH| V4C+N.vŔVyXӪ4y.V1chU%z|7sNe$]8Հɟtp$ɐ6ǿFhxIF#?~ӝ&=·o)158B!=rEi⌼䔗q$a$xf}mDe,.Uo / FB+ax~5Y(+Lbec 9GMrKRy:w\}#Ȯi-ZT?2xm8C"W/ qIfʘN͇q}oVcŋmʣ{NңXSR.].^Hذ.u_ :D{9rR` W|~.R\V-M9uP 1_}hupGeة;1~8QM<9!+{8׳eDmD2d)=K ^]q.q!EwDD(.dqd2;rՁ?*)H[K͆}ߢ{}d;QA2vZ.I·grPY|)(Q2lOgsw:rM2ߕ;x1p,*[3%$ԫ! vЇ's93gomAeNEy2( ج2t2+Ҍ%?PMP* U`:Nxpi7Wq.;V[b^S>견PV:ygbB| K%Cn_/my:d>'Hܽ Ywi^(lbXZEw/-'Ccvw .n j`bxLZB>wR+7wh3|+|}/QS`: #-NH#k ;{`MQMr ֳ+ mj9nbGL@rSN{Dv Xd2cTK:6fޗIa dXyP`yޡD⬲p oF66|NZІ wOKzg ^l4 n1L񡈸NDTaB\=ʀ8Kߠ61}i,Vv< mTUR!ė\`Ns_@IKdzuTyɫv7iے+4|1BG*+z`R@5${ KQD2"{ Gx]`2_SɘX D}gU?D`qѥ2baV [s ZM"~%Js2 8LEIdsFUy &,Sev̷v Ж/(:bOF&Un3L"QfM(jk)L euYIIg -V~syq\eXƕ? H *M ̩[a!(Ԙh1rXw}S)cхۓ^xA ȱ_o7c7cswoS͈R^wGZ58 /k2 _@ Tȶ*,*𢬌mMa|s;?MHOY 2c## 3̦BH[p!q>uj4f>uF~Pݛ 0jtš[/w9x%$P1dC֚>Vs8DuܲMq`G93q:Hr]6lvlTe씷 g%oW\mUEER>+rUlD? LDw;&^¼2?@3@vk.{J ^cuƉ&O-P\w<(Ck)cȻ3]9' S1?{u=wxy'N&!Br0^e'c4_q%FsټޘYJH}RoGPpy-!<.'vT|e Q/2t;Covɼ~M `G,o|k6Й=^ܕb^Wqfb>/*-/;aCN)|i}G ̀ڨ%`+$vBB @$(^Eb-`N:%@MtA[yϽ|C;? ( @*cmB la5,Z צ}UWvInԧ# sZ j4y ?+BHHܰ!φ_oo,+I@Ɂ (v lKB@=SƚYHNns ~UEƢZ$ C>i 'z T.$i62犣 r@fH1_~b<ݜe zA"aWŁs" %R(9#AG_<w}ѹ>.%$Z$HZ0 7JgxW%'g38d%:HOs`򋊁?E#LV-XB1 ILL )Rrr4XX87B2-kE|ďp11 @(+t}b Y;&tjq˂-\Q+#[;(N<^@כg:d|B@TsSМ fx湅 6y5 =NӯD.'%C~r`a$"#\C<9&CEYP:?OI昄`C;)q*f.XE?SV-p 1" }t9p3|Z8)rQ)}Waҵ8\q)@I$ _;= c %'`!6-]@HB AR~n[S[.GJd6A@AU61>|[a*E" h[L,Ifɐ 2_PE U 2Z_Tz t-}%CkD EÊA "QTT`If X%8`*I "@Q e**"@Yi$mStc`9Qxb HQj ˥@"J.ҵ"]OL$.Lp*8ڃ[M5jּ 0 !P΅@ d[xDL;]ErCFtM8"_j , B1B*1@ ?ElζhgRgI+-)I! @QT!!0˦jBaD*7$ _aQS> c%@MPFAo+̊&dG Uк4 Asc+QB( %iPFԊ@T!D%DCun-4fo%-R]Prо}"EK_TjJd7N3k4shEӰ)"aÏKBPTZUJ:KQCKveEs $W:F$ !>rlHB^HHk`c! 3҂c" D$ t@+JBZlaC/sD Z`ɜDBH јHL AtDojBgP D́U]9ti ]@ڛP!nYTP SC3̊ w1A2&dE 1ĺ9Tkv,.%B,$YH]B &IS72_ m $:Mi:* FjHr0A2D J#DQ -S B̒Ej$MCI HGeZBЀoN8@3Ǖ-$!d 6pT  t8qfB_3&.+Lm60kL)$F1EHbIB 0]&I@UTlCDT"]}T"kboה%L7dqELS#&m1l6m]K`3:kV8j06WM2\,$ڔ8Pi)'(5mC&H[UJҦItj9- (qR|BP$$U-3bmTSL͔CdM!8w R@Ϙ㹈1mBDRKD4CƬNSΠB52*ʻ2CXJQ CGLІLk$Vv@*X'&lj}܇8PXk+,m5awa`GU2C (ahfp49Lt`Zb27D IGeaf'B6VC-6˜d?cwmzqPYBkI&Qҋ|QŲd u(-}P_(M\5WF6ޖSL#M\ZdHUo&WPý[tb%=SGfma:I&l2N,&nC4!大Fq$a"4!lI$]W>&U>!kAI VAmT„9ChS!'Wra4`()`S?KI09 zנgv]"?.Nf 8P֙2L:!H,/D!/VHP52RgNUʺ$I\8 I4Z%a!-?u !BrͅR[ m>!>9!2BsPhG>ԙ&n*t%3}dM2gJh m}7"ȹͅ@F.l%8obgAm*28&!Y)(S M@I {LZ!j, E c@KJ2 KbN-;HV4"ͫʹQ3eG{ zFr )KI8'yur@}Ye:2ɘC 7T3DT]lYMD-r\p2HH0$UH~T8j$?}|!]э=#f_m\9w9UtW NzWul1YwS:Ѣt=& r3?^#tk׌:pU5Úv֍ᛊ|Qq¯|3r"tϢ`К04g J񉌔^QVe"[4+3n{vjC{jvb\~iv7 }>qeflD<>Sa< Zi]8Jyqveymt9 "t&" @ QՈ@(@OK&qHrY`RTW(ٷ'tes*S d`m%TVTA'6q/5;qwv*ybyVsC͍N8+UaLf_w o8 "t ȭLBZw+5r$=^xhḅF.P(c*)1&MVl"SK˧/ػ[OCui|F12mܚNq%$ (pM;(zQɋ?-M&Q ѢxI dJQ MKSv\<[<*AH:a1l3+NӣO:2KnD@lʈq`R*0Yw0—JqݫcKۆqQ\^B F0O0\fl6Dn̾K\CGK,BimuTiD{PA.ˡj 75`IҖa{ڿBN2*TrP>*͡njp R@| ~Ӎ!cO2J iy۫J,su#YJrEi=#?'wZyz{::v\kٟ&;5YDB(a{®&0Ob7j2ۢ:뿋2cn-,hEA_APpA/1P$V.,cǫlɵݾ cFLjW^˶c{ $PyNTSa]$uW b%8 Vkyߟ.9{9vD@#GwBf3?aPt` !<\|OM|pۘ˗O|5+'B3>& V@3x;~u \z= L&pt.UkQr3gtpx"snPF_wf휖(P]Gchn0iAS:")ge*2Cg SDAS]4V->^\ %8`=f7TPC?g-SB= <,Rzɬ* O/ h\ (.n,;*T@SM("q"⊣Ԁa*)"( *p" .lTP` & "**EPAEvp*dQ͈lDSEA0 Ӽx(uhEo(Wu( YBKAMnPV"( +q U8x(+@t"ATxi )8Ȩ*[|"QAa9x"k*;|㢁N*Èqfs":بqS B@2UAF@A3"_T/H oiDD GwvI\D" 1?-H+ tsi@6Q@qD8X $P@ESR.!Q]@F`H@5"#h $#PQ~GeP=|ELqN:4\0 RExx"Gt*""lbe{`WYzX"hiE\1`o 8J9y dB Û0Zps1Me G9s.] l`j)8nGS:#P@,ji[88M)0%;@Dz<ٻ8iT~@}r/%T7?zP̾w m J")QxO$ItjY.jE'y8};}e $DT i7֞]/Xީ+s۾֍L L1̥˱-RV?nū<AbZ;4ӌآXaUz]fθƼ %Bfdx![h/\yw Kw/_(h}z+lx8pMw×Sl 19M]}Dž2pJk~瓺ڷl9v9׺tAr:JO%KE[Tfp97)ˌổs vYmyY~vtr]c HNJ9c.)V,.}IE7]Gֵˣ)kхïO.ױbVR_=V]7pr9ӊ 5)nٖl+ZҲf U&Mg:QLJOH i}7 "ͷP]=WB;h2JZjMJw|vI\0t9qgφYsy6eN\7Ut;IUu*Zo-ƛC v:\3! `tf蚢}ʉNxhp k/ˬ|+M|>T~kƾ]X{zh1(/Y3ueZ t{Avumݖ.A@<DUҨ_A$7 &d BX2 A;?$~UÉz/8t,ڲhq+`,0;Ciɪ ~Vw4|uJ PJJgR]픫XnKǢEB,+?]5Y IShΊ;*rE1~j:J.`UZ[DjFv`s$j]b7܀Kz@N6=8YYbbK824jԘ[}HhϢJCIA@ >4ϡPn\P>\x̦a]F-sۍ]JҤn56u_Wܨm9C)Fζp"[3#zejEY 02ś NH4DʉbU~#ɦEL BHG&)E٭՜ZkpP,szdCIn憑wqzOD8GQǸLQ*"<E2;uhՂ3㬃X"Ce,p5.6G7s65\oZ_W}qtZշݦ%76%m(jt^T]ФՙN95itl&ntJ]Pd/ϡtPm:rw=ӗɧ1LL|۞ ЇX0,ҁB^MAR+=o_biW|t>UgzC#8{6ߔWa/Ѐ7 u}/)_`j9HIyĵQP@*8rVlo4trܯ#ߞJZҏp7u{_]wVl~͵7~yS ,E#X-+f=t75寂;/X;:&MVwG;cu>ybWs3s dU>oqqSͥ;W gݬ_k?w/ܸי|Ɠoyx>>jcxϧ|MQL].D—DC̮} 3XOK w cR꒫~~͡^0Uci^/Y,ۣ@GYyn>X.B:mymj!j-X/In~ _sc 7ly{z7 w>ՊC/QQvw{2J@b ۶˫,;ٯ^[v{qZ_əa5ο.uǧy:udԺL+L%Y XY~}+NGz:?4Vs~N'$ح&C==gB.y7-/kghؼ`r['u|~m37h59tzc:M%u4aj׭)ww0AͅMt.:f@ןo %Hh,>Z1=>m|orG. T=7!1 @Dtyn6* s_};?6Wq&0AX[}-/s8$Iy#E"YWq={V3}~Xo/˩ڴz_rZLʺTۆC2QP|xm_~{ Β?{(s B;hu|=W#w p0:+ sU]o1(r0Y[߯[s/S70*T5H)HP۔ .z, 27\iC\4pk8'& ԑ6婔BO[F/W0{#J{V1BoEX4MCze_F?Z!Mٿ ^6fB D9@XNXȂwH^6dZQ Nf%$ . 5֧$ {{vncR" ls _yz]xG@jP=ãnRwEK4S/3dׄͿC<4VMF/))pQwMa.01HbY%{qP~]__ӷwhoAi7_ Z?)'vY ti=㪂4_:4h7׹SVq7&pT`~w(VBMję۠c!x%bwS4&/uQgv;l{͊ Jj3;G_za f@A9JPamePGL̒)~B40Se\qqAHY~i:߭`©$EP*'JWëa!fq9tLK;)BL'} 0@ +6{k qW8AP`] gOQ:pC2A(7j1/c; $lcًEH$1$X 5 Pڵ] %Yv+JNU\^>1!AW*Jf @ґ8XknT5;d{"x.\$b9RB7S >ο/νjwa4Ԋc eYUv9~v;_olGxW!z;g"!3>ć'>_RQH%*vv CP8ﳽye4~|YI&9"TOD [Z)v!h9-{GEUUsS  @& _T8oI$+[!z Pc$b,i(mMq /BB}3$*|Ha% GLT0Enik o·P *iVk @7j( "D٫QEPdU0^XZ l[2#_]}\QDt dUTh.ZPX's+C)T#OSysLŭ4껯Jv !tHI@`@*~wmE>%^<B2ݡg} AbP<&KJf2``,$`  I!6.;K8pXt6> 2TaCT-(u WvDٟ}ELW:, *b睖 -{Z [GqwXm$da<#(nU kvkzE'.zbG/~oГ_{[fH#D)9TkSgd=tWF~5|feu({.#,Nߍ?]s9p`9'1$)>ɵGY#?]cEm+, |e #e| /iykL=}ʶ7\ 8h~B@(:<r?ʘU~r#&e>T3e@$ؕ@L@ke]wh7-uAsm˛iZv6;Yٓfe\\:=gԅ,9H禶\h]VOY<㢨;%CH#+x(NYT@.x" 2|)mqGJ"ou gi0oڻ[ƨAػ@Wq<ٕ:!2ySQpÑZGᣏN(I%3U(i炍P*~<+jum};isvƠ> -8zAb˖:t=P@ZX Ҕ"P'`!Nv Y:qEsD2 HDInXa[ԊqzMT6/F?-'ߠ= ytr3!V5Lg7,+𓨻_(}gߎO7(+BJm)I؁7/ 2Nܻɗ#xZN&?o^,/$YápGu]cv0l9'_}D {Gg|O4s |ݠLCgcVOy>Œe5gG=B&R}ɓ&(_=H DThL($MXo_1>M>_t l/kp)nNBCQQ%T(^ ")cF))>/v8hn,%m |3U# UQNѠ |CArU(9(\1ͺ¿"IffK,飯\4N -7Ո0*_unQā/7r|f4M0f)k_,%uh U9b/wyW݀eU.ԊDX7;4k Es?&E 7_}4l?pCLUk9`H2`RݕXn再Zji#u̫`'(fP+c)=F5 d Ḋ!Qn;hVltkmg xLٿha"hHOse< 8[ܫa(ҢD[X"B.Q5uT߈8ws?kÎ "M:qсFփkGYպN@VU@Y0## Ǭ%e |:0"oEs515¤=2r;i@R/hfqĬ $'86-11Twzߖ*Ҋ?ES<r>o')}~g@sR$#aPV󃽐{sW:BҭFD# V]&?/_#m7]]qҁ6.m".gQV39o9HS*N:IGş7:lg#.r{YKk3=Gz:2 (iƼkKPC=ZpC\xa2數E헓,R"@yؤjVl@ Fs*n̈́Qqb9[]sQ!uq&NN88dI2Ig7!RRUDe?k'>[c< Haijf- +c:ջg9I%<9I$uuqu2:^ֺS~oc^J#2jbn{RQյJZs6`_R̠bY )AOc}95#X9w!']Im'\X S@<҈2O 9kۢdb xXËqV|hÝ?m涮#fqNGvn`;<|NSqaqc}sbbݻ׶{Q)?g5J뿏 HLE&^O/EiI>W>'ڙ6g^3o|cV{-n]|cNOסa~7/Jn n{}u={VM^n)i?ZyjLA9Bh}KH4RJ)Af&;}y@8 v&n uIeowG纩ڑw^eߒUt'S5]i|4clS.(U}C{/0q"xL57}CW= m0BE%^@OSЂ0Kt~ 9욎[`F{sr9 㥂\AD Ag;ʙ#!fAi|7Gu W]TѦSo<Et;(z]+\fzC9p@c*I4?.xZxKsM' NZa\08$51GMS@U:o.pQX]Eߘxf 78f,luvN>LˆbW^ J@ur+zWc|->PK|W$*Rj&zR:4y&VU#&jީff4|Uy3/IWc&K]+sܹZ\}p3H?ϒsy$ƙx>vZpפ^LS!_f짃iKjc+_{;tQ=OpDx }8EV+s|xWC%e,Csz\~ro|K42DJRDDETa^͡8m))QUR #SlKo dW1X J LBQ1i^,#DAͳBW̟_/߬Sy,;w~[=OO|H}te{pqɵtI{/y_F[v#rojbu iM~}޼]W]AVנe hzHRWdE6DCzn .qq)GcOtAYp8T/_:) lQbdJ`IQTc)V>?2s(_6}zCk!v@OazB_zΗ܀j]`=LwJA1N7YTx͉<^)d;&, *Gh~ѹoQt?R0, ̑ w~}&H :PTs$EU DN_TP-DU .I  C"vQpW̿~j~:¨,o_N+npYBG.SQZոIwlw)1!{ڝcGC|ߪbvYʧ*˔KqDHIAFlpw//X # aΓM.^yZ0{vg}fc-m!my0])-KK|P7)BDs@ 8㢌+> dqΝO. :.΀1*Hts~;e٨7^sX*ːyn5|5vغpԡf\iVZW;/nߤp+ôa0`hT`ŇNhRQer[KEUU3T>|Fï!ǾC 5o\g{ gd B&~SvZ6-Ɨrx^YvhoAoj&XgW]5Q0P"^+ӣI-NP'"g|TW?k8I 4/ئRNmElG:+= PաZd&PL1yH1h2C4rk 9T}x1 r_y:s$ ӷ\5x[ޟ}7Y.,5BZ` Y3/*|`7F(#&]C<̫J`2-RҢSFL0D8e ]&&uri4Z]rSH*TѻN:Nѱh[r џе,6|s/3_-u1?/]*')/d@a|o%0WwnWN;vcܓg]6}'9ߧGGz_z- ?$A{hM5m,pX/c3-mђSYF2ȶy1+0%WRUR~vqb b^iD?c αh-/z팄˰@U(p%b 6%&Pc^ PNC;VW-a7t'3 yݤ\ 9/V*~@ $0THc5uۥur\O)T)3ouSEQU[ɲryij)*À&]tF5,ذA6|FV:{ RglCb0^N?"6|vҒ d7vn\͌+O#ޜ=C$r:@)b5܋1s]CrDݬ@eU)x?Kvwg䝁#@ؐn]'`H)r# *O;?> u'eY:b.B?UHl`햋Bw7:Fo2 V?԰k@Fcё 缆R{3۝6IjV%P`SQ"GdbࠀKP3WNSL&Nd-¯H]j@]RxxMWn&o–!I^&eNp{\gT6@<7λ~of[s?({J0M,[m.w\#vJ0 / H $ F|Ӵf;Y M&%oIzI` _'>"P9Vz-_Njuθe~a!-~7k~RjDN|a+X,41yq-ߓ_dDnR`s# LUdcG_X 9 k6U)1!t`-ޱPd:_i7h#.:j6>P"xNcW>SZnغyiIn̯;`m<*cᆅZ=V陣rOv|zPw*& 7ςcp.b+-.BO702U'^wo5Ǔ@a%uRDBT;[hჱPM@O}p1. +"5k Tx((WʡNj|+IH@Ll@ {$Cսur~{8= rv_g>u}Dw5Eb;(" "xh%D> | hBN:8ToEmqW4};@M|\wKAҽW!mH7Ŋ^ dG񗵭-p+4170_Dduyew ? zZSTѺk5㢪Wp }VDI. $"TU@Dg. ޙ_5 nӉH i4Iz|'{|I {^ӟd1ow#RX~a7IV!JQ03q/#=CϙRJS U,4iv޳K_0-F_,y HK)S,s\دLCO}h?Ӆgms7AWXPPRSJBH҄>g_0df # BR({^?k8 $A*1Y)g1먰ep\YW<YQ1X4h\P !T˜u@i8S!tT'raC釠pГwT܅>?Ub/]])J{xZc{ 5E"B1t.e0PBNnT0Y "(zh〨A!W>f:$ ؤ>v/JA4:0 Q9kL3qyv +R4fҝ4\H{~̢@JDn?_B}NS`n}=g{n%[%oYzKCٽy;7nWG 7a)s02(Jb7vdž-0Ei" "D|75c"dz^Fls81sv,ʾ#p,G`ThEL`n=OFOh2V""=zmsE(sc)Ȟ SIT6NG\&DiL68~BA(07i{xLd$qz(y6~ * ؕ^n>$;d=RB ?UĀ}P@kuWo`Ddة-.?{O'ȇ׬[kW |AJ@:;ɏ^#5?k'ow}s'muV|*Kw 2 nwMGke\pmay~(';{jU:K} -tҽ헽C, g QF!|gzrEhBF!FDRZסaXGal}A6׋y1Hr@k]І2ARIF*ZuQO )qG%DVO{B $Q$gNZhəw&WtS5$c'uFFIk?aurՔҽ>:6/?zWֲ_ `?1ESP|T?[d9ύ&@3*1 =3$1cbaQ'FR#@CXhʨ1?8`Wb(X*=]&[RH&>s8zAC4h|h E?"Z% D@Ui 2** @o "PC`QYTH d*!_BB^HbG)"DD5wL7$1}/&}%Ĩ״OBL>(Nr\#o翏!B@<Ck N .|6 &r}Si E7R;LQWE]FYφopt8X!;>7$suDC08 DI($' E}^22*8b; C[b`d RRHJ*Id@d#:O" cǂ&Cx?+y܅V;|G48=t6rqJӼߵhCF,Q< "{rξrпcGy9Q}>C?TA!7 EK#%@Ju)%f76.L8!87APEj @@IsV, mlT/GYSJHp oYmNCz./!)=ΌK}ecۼ@|T lL()tLM7!8~7*(4G-_O+ܾgN;cPJ _XlY!9TKE! rD`!-J2(6D,vH@ (N%* !@DFg?H?Tb;=7ՂNwoK[xצ7E|KQ67 5gā4^>Cfa!uд.b [!/u^ i{r2 b>uPx:ʃ{C{C6D$JrKlWm*,!|@tr i=Θ⊬ZJekZW{T_/C})ߕvspr(;]7+#}XNT3xt x/%O vO뵇h &#%P a $,H $ȞpUJ͊ @uR-! 3\AmxonwsiQq5~O?9( -I" @RE"㫾t O[ǥcND-n?xV/(H㬚~y'Wo ?IxKF*3f7笠%R,e+~쎚3 _2d#3_w:jU$7=I8+BU'Ĺ&邀M|f[.kMߍR*M[o `vQO,y# B&*i 툁~d7=V|{CX#E`Cc*s%lp"bThiY*$ș_- Gr)^K]e`WrbYGye{8pxYŦ[*qpV(*@aP`n5݈tactJ%0` ",3|~?ה<~ǤWKi+<Zl#nwy2`OuwprɗtUh Yt) YW)Ih1ew dXYWH.aH TbH ,`-(P"2NkJA'Xz׳?L'yJUVΏ]X!ʧag׫w򬣈m1K.USKP*PUT} "ON_qve!$: M~A?B"c"h~q:SbMLdV`jHdh%(׵wO-vUQ\ ( dzmVR-b!+|kx$B@=a);Ni1@dͯum(x~],@=A1=e9$N50Qʬ]T(l}"֮>bf]&yVDDd剈BE򔟛0KjO*#Ty$r{}G!)oO`aP<@1tfQO$l_Qz f/;%1|,TW6Q"*T(_z11_c x(agen~Ϧ:ioa$0eLc,!mFA!-eee i3@^+p8R !"?\5d c:W_:"q0V|t*BpZk*'>V0׸0 E(Vp S0`D90't׿ׄIPRƏ,Rvhcj.Pkx|rB$dc%'-:^ DWFu!^@7NL2vбn R@D8O8%D>cA]_oM$ 梇A0 N8+O1!LĭBZ箋3m| ;M I;?s_MGi_?˛p9 )St=T 5ד_A'/`g&y] E Z?}V 0PGKMƬǂB$V_+0* ֦y+^|@}m8][$r-K5L#Zѩ_=)}6P3S|>G?!,̈v-<-mh30UsٜRUZbw:[z0pMUü%JܥFCv;+iW{wAN}sn1R7pPj p*y {5r ј"/fd|vJŞT.\)d ,{i;-|TE~ԸxQ څX< =; յg5yh(a"(ta12*wF_P撍&$  idfY"62-Y~9>ܚđY##C0݄ЃV2e@s@ RIp <٩LCS*f^d&u.PӅ^|I#rڨHϡ>  :Y=!m_OA^0ቁ2:P.~FnN-ɿٻzZn9JS%XJ trJ^F![(UMoLd[o}]B>0S|Tn7K쾈ɰC>Q,7Evq; )=[3wZPR@D96J#KIAǝ4lYGΤڨ&ژˈ.iztu c7M]-n)@ (aS=JdJ3ov 5sއoV݇@YT | f)Z,MMHF=<M4ROtE=ݤ-,'TCzK+nQxFd*귧JCAur3+\EctkW+)h]YVEKfPrLW:,R]Vi}\@0tjle2, .rLzWOmV:+VKzTm|=+<ՋаcZ:XG,ޘp?=hf&b#PR*DE'(6SqioRhFaȻGާAsetj WHU+=|S8 %Hniۦu-|;O\Φ:S+NvYum3v ӫ|M"ax$0[ء1{k*EЏ9OH)b4屡g kf߭.~B]ͅ4NWeVy w}^o屳yIغ'9,24ØxFQ'OWPPO~%RD{,Z~rMIX:>62SkBJ[}/ԤU60>8&t94-ؽkս8;l~%>0[5;xZX Ҧ^|ȁRw(2SwPWJԮҽ,ME9Rb}[y-RR; s:0,g%z,z:':^[(Yz75Ҡ?\)U{WB.SzxGdݕĭTQ3xqܸ@7ژ|EO7-F$wuNt'ڒ]( T!7d'W:p8efq$-*W. :Cw>E[`],pGFٗ;0Ϋ~l {;8ۜ]`hOm |(^0fipT҈+ϥ ZD&YN>RcsfK7U{سL4OoY4?sxĭ.br K`j 3-},U%tf/G u"q>OOKfDNʛe"xxȩlEbC~uem͞t9xɷW`= * Hj,kԨ:麬fGizbYKU񂣑wxr(/Y'v*9ލYU>Lg]&T6w&"f `)n;=-,u/1ރt|>ywԗ_>:yvg(Gد=tLN~, uY~ē;/WS=ɍTmz̫AYJYV ;>=?=bdf|vkesYcRKe%*<ȸ&hrCJ+AA* ۲&)MUvbe~uvd`ziM;-'jƓ~9#՝.[a{s+ڹR+1G @&̱kid~Nd6ZH- J+hi^=;4Qxv/i#ƃQ {aq#`q4{3K<&+;k\N9{/ޭ$J8ӾJ nL镄vo[~hwd0:l և ^ =#MpgDZEkKҪGG ЀMe4w|] g$g1ӇpT,W桳p 6&&̈́!=_3rU4D P?M4HSa(US0FF7TWwteKo6Nx=UsMokYJ TYm _P@X!r3?s~յX"0Nߴޏa V&HYlwmL$_*uF/ "4ۀo'3m̄2D;.3{dr:hz\ƹ ך>R5μ#&t5ek+ ԯM,+~>;@_^ { i5mUj+}2Vf:'~B1$@udeR5':vRFfƹs)Mv<;Ջn۩1 {>y [Ǘ+sj}_D&w/Xg$^lP 5% >}M¹"8[w wj  7z<=RV89 ]l6xi!l)u/+!jgQ/.ʠl+eRL]4SNۧKE#wfHJ[|إ }lqM]󥨽k/&,BB>+ q(/uY(؝Pkm^J@ Gq)#O`?4 .jQ,QiOUNY\N}m0GW~{^ӧ4?vu x;"G؃X`W0tEvT|<[+:L ҬpԘ63<}7\˜%wQeaeک/nJL<)p2A@jT-YѓR]f[2BꚔduK%_t(,kjGu~r BS3ن}#^ECѩk* \lH r~<v.|np3~1Q nZ@D"(a*ݟy ! %rIָɁC5q+_V״[2z8@!nN;mB8PE&a*b;mJ8(}XY^d{99&1q9gsvƲ&M:#ʕ"i 2y|\᷋N1oRZD[gJ(_.+]-XعN/ӻ4X}_#UwP{?.1 pT>/QzivtJowCm[N Ys>(XX(vtm^6\[oUj7Ӥ5n9&I;ʩ\#N,8X>ua.i߅NΫ9NhxJJ$j[ dlЬy]RcqkB5T'WB֢1:aL*hm(2a\쁲kzf y(x0_2dX?:=3kk xB:RPMZ);^FNf\`f`S _b=1&e3Bemj/ .URFATD@>@Q }ZL1IkH*p0D7"WˌE@3 yzZN̏{UpvN`EH6f8$2/"M*8)UT0' I3hJ&S)( Dy9wjil/ ͧo`{&]hϼzkXy.0)T#"Q 0L%( 6v<]L6C7p[j@c誀AiD@ H1H#UnU}^\o#r>š|}N_Fy"kP!TcQo{E @G42_|U _H2)7"+ @%׍5<~p-C}IPG΃S)&!lP tD>,A[D wHERЦiۓ@dXs?s6%H/}}v!R٩h6QA1=)]v g/eOVMN>tTWFū(n AYD΂ (z*/m0AV2+UB/+jң"`_ Oqw}۫R J~H -@mckH@U DFz:*"'Հ}Ȣbc ˄ԆaL "`3ya<e\{>%\ F"c&}Lu]̈́)ުDն** *J", )GJWAXd%GP87/;w3\xNK=y0A  dd9OH!=B$F)-)_`@4)oCB&&U2 .Rwh)gvu#^ a$1&4@RA@dzz*d$< F !&P0’ft?O/U5^MB f#SK9KR $sGBNk' ,`)>P~ለP?=X[ ViiYߥG'Ǩ41/|]T"1b 2!Ja\Hl `@yBDA:~$A TQB)jJ4j @(*U_7sok˦4:N}C eN4?k+T?K;{C\XDfl%OɁ/7w`Mv*oh1 lkϑVy 8dN-hҧ#9:]U88f,;)D&V1ed`JroЛCmbe!|> V9:JV]."vD;D,ۇԇ}:7#|Oz}J[C W:HB݀?(#CO:ȼ9jNxit'sr;kj]rNϹ.KsֻzDZB|)@("!DRH}_r%σ+'?a=6:E-.#B!Y&nH{ d՟i5iěD" jZVZZg:J~u:G vU]/_a3r*.̟*t1 '~[1bfuGOZq/мl ,4`cupf3QP5mZB*lDHp@ WGf6$(1L$:*P|/Sgx|W6TUNkDH$N`뱓!$3Iƒj70AsfLxo۶Iܹsa/KzMy`{3p҉Uï#cv00AAN~{na= PMƨL+23ʢ@檜5R"e$kۡ _>3=: ӵ!ujvbcg'1!SثcwjtgEmN<:%IYHj~ŮgJdjCjRMԜd Y ՛ёQy" xښ'aVzrzN]St}H&pGKcjN6AZ[pu}Ur?~q 3ԝ\;v_Nj;loJs٩O3tƥR ǹի[)7gI͆l@+ӭatmۛZ"C{}(|3asR>w}dP@r5rr@ԕ.(Y&;`5%(}/fzoHl4c~qu9$CI‚xxR2 a+n^I`$b@H*N)&O@mY#84Lk}%`r[Y # gOh4$MӜXo ­>FD[U6V.hX!WtK(` 'MȐzgݿ*|I9?̙6: fS~cUR?2.P@ $1XE}ۇޒVN4aбܡ wcRg,UVK&hM#3T[)!@HED2\p{r j@a7&}⯗,LKNi1LR̼1WB{ n@jP-fS?qMn /;x:qV'4ٿCՑp@8h$s2SD%9Dë?-|nj>lWIòG_Nfuϣ:fL,"F~;o]mg;S.TLXsƆ|銭frLb ؉)cT<_h@DbGVo{s[D> xh<}}8_[Pg՗Ի}LapT@B>lD DD?O+k1~3]ٸ}^<njqD~)ȰK{$fOCdM>mME')E([ ^7Yw_ xY\VLg8i_]QOz ofXnsOo_Էk6y8b.C&\ȭ(QS%/ "o҃_cUmN}9!wݵofR_b %OPjJRD5Ѯ;T{#nÓB;NEu?_Y89훵8BҘF뒕^<&  hPR>qbO,8L_^_?+^Y {כ^bD  $`A>7@Aъ!"Ogs\Kŭ7μwڟ7R,0$=DQ3~!)? )h ( CD*H)Ga).9)vybBMHljEHSj"P)Da6h|@SU:Ux2x1&/QcQ)ߊ6?_C;'Gkn i9MR:}4X3I$oTUZ#A: H ^YpM /o=g=G6MdžGN-" OE@P-*6`6z`^63`c2_Uύ;׎8KQxWR.yD $Nf &s`'㄀ YW E_o^o'K-lfmi H Ѱŕ@bRBC` EP}|?v.WZs*3 !c_/1-eD)ɂn@ L6@_ұ_ -D<6 l*Ļ'?7yd^8dXb ,y4 T" xFӭAr[ynk ?L q){Zn}s֘˘s[-(|'4M}>3k{l)&Sdt(X.1EsQsFK5%;i$#('Q5yuuܵ+94{ aq3} H0sx$FܺB1*($2} ݫטu>#s 0Crå?y ?;}~@$ fmn=:4&A74q:2WCnMYx^-i)?TѥW?Û iA2 H'w(6ˋԱJu`_Nt_6SWkJ3Ty('LSCpLֿbQ2CA(0XЈрKhJSkujTvU+yD\[Ekʼ ,MMWc=|Wb3e_zTطjF7kuAŒgI߬*_m45.AB3de99>%V*7ua5qJ^ۼe\lRnoM eʵh]?_^C; UY~^#Bm\g̦8ܔJx/)f )]]sF-ؿW>=櫔҄DxCjYH;֪vw/م}&'Y_?Qf[Ezd3`oG3>>)1_)M/2g?39sA敩m,EuTNhj fSЪyg\=;Ƨݬ6&RRRgަ bɳ)o/F`nNnp6-#i  qd.~m ˏM ڟ0Ug&w=7na#챸 CO~oV K3msK.Gؓ4_,!$_ upIEo"@v᫁ t0SCPm1iQbOcVDg?Nǖ9\; G+_t{ojԫf_C [7XV\1QNVdԴ=hjڱ7cgĈ!q! gqAKtOP\ ro&.e'Jr8UejƅRuKWl>KO 'seU_e3`ZrgL*(&(rI_ŀg+&)/_V'd& %X)6*nIىcs<\z9wG ΐ@ *2$T7@&[ qeY}y3TF>'C!P Tf!жP;%"8l =&*P:+7>":*-^̈́ԨMPB$)3pHhYxۃ|v}yoE|\u3' 8=$6[ _Vc /tBdY)U6-'fn Z3-cO.J&Rl5$4)_Ph*C:Qc0S5J{ط`3T9yCp5 ?z;HuMw-?$z$8DRɻbJ!"%(,ȁ'P7Q uXбixI)Kawls2]'PLRjoiIUyYTP_CHHadއhZ7@ŷƅ[s! v떏 NUWֳ̺ *|HǦXPȨ OH0D_M뢄KXd+?iܗ'H;VՋQUsc^H !BN>^+0Ey_}Ljub0%rQN@IACWڅ^P?B_ qO*KSU%9sFgH|v*I`wAa_ڀ8:Jdj"߈h"$#<egU11ga y߭ARnpe]JBITBl-A " v*TT$јVw,K}]~O]Z! /kGHP_EBCPs!D.X B˫!p2Sn Wdp J1{ $4I$'BdSM(JpaWN_˞YqWSiEu]iA@~%ɢ6@uT{E1P"}4J\Jj|)ce(=NtB)eT7RIN!DJTkQ@%R;I2$8N>UDvY.nC(4v7X\l\oB_ilP);S> ~~LI[BŖ%j|oCUUMvk+aM 풱wH@S'r ,v@Q@YoؾRZۯgN^:5=T%⪨ k>4}iP_%*!MH@Wb~\uQQUɠi"kI yԗ͹ XtWre!+Ya./o lҗ(ZZ~칪~Vh46[%B#׹yqƛErl#G%Vʡ CI ɉ/0"E:dਔxCnDuӀBC  ̵]E7i)XÓzc*eBhȼ>\s խu}NQp.LAd,H3+qPğ ӯ׍KHhS8DU.10P63?[drIF۸k "*N|V+OV1C}?ҫë"*J19ۉ{AVA(G$tL Tm}ы0iRuY/;[ݬtu_Gx5syn@A<x gٖnU'X&Ir+LĚVf pͻVП\ÞW 6YK1ՑXjO}qr'K%9q'+6Fh8 AI>{ wt'%?"dtk^mv.LbӥYےdĞL^ӝ?o6TГ73 PNjfJ[̎!v[ӳڎ36&cK•î$N O~JmXn%7ٟ8AJk}| _ݴW.3ͫוQ-(PV_A6}Yk/SW=R[gm16Gk--)iM77m<\ 7E\rxSRn] :Mf0;Ãw=( a7六V `xjJ>D.x_5B =y\92UWЪhR݉g_06n7a!j^jHD^6Oo/q1d'Ocj0v4jTzH.igY޺jxdrN{*Na.]9syFn/bo)+BΞnyQ5Cv#̆,t1&^Vac?TGb)cT&m"?&2VA\U We~cW^kHPZ),pD@!.u]H 3&4PQk f^tz6"EQ8x&ЙKCFuj+g#A$rP" @/kpXEt^{GGgO٘ L93wfO 1XWKDssʘ>,ľaXzԒdwE%ܽM @+']Lʩ='jY d[K~Sft5{鄍P 'woK&%Ci-' ~8sy]=dv|ye|_)X*ě!+6hVYG.39[Opg񃠘]]~hvkl<# N"rsCwH&٭NB'Md⠼E;DҧrXK!(ϼ#]6wLL\˼XzST&Tj+*C3< PDBLE$t4WJ[Iڰ#}% Pr6$itDtOA(,:`Wt-,i*?; BЁD1z6yJ*Pjs5[vvºa?;aY&kSe\Տ!!%T y MVʨj#"gkn=+H\cvŪ6CP! (&f tP;xnnjL;`g/헊DnCdיT@?uذOC?\FJSYK!gI5?/y1wJ@CY _T` w҆"0!lUIR/"\Qk/tv|%( lo(@E,!}?ApE"R9!0Pǚ~$p2ȃb+  s"+> ը$ᴊQb?R͎:_XQK+:XIU*(KH]B0W}owV:m`_UIQ)I!'<<)wlk OA6+XNY`EUTA"IA@vpPCg ɀ A᧯kd`an bmuR"^)==E(x5 i7JÄť9!]}.jdOeuk?RQ?!1Q@90UNuhUe׫^VT3Zw$1I$E=@lE "0Hd %22_-lmk/jF YbP2fHЄ,!zꨥV 0;V`X\ ޤR7+~.27U~^ '@:HtQSͽT&B,ljt{o/lŸŎr(*qLHB!`OA!HFf:aC^=N:]~T̯,v*!& * 'yz H{" ^3*&75&MMª9aGۯ6Qܜ&s/)k ց >U\T:;|z*?9Rl'<˅<#02^[3UuVǩ6f֥e٤@C\n~3oH)33?[fݝnh@@(ٓ䟦ĀPd@~ihyHȯN_x|)}/ NzPөUEAbgJAL LP#$H(A(׫Cr#[n&Q|)N^rteˠ.~טv/\!xfg=%9'~jL>Kgf.6fTгsZjOWy zT*#)Zm76xV*~o2D4S{w×o:dL92qRsfDOkL<86&BoumHsr@`$=Wcywrm4"sH|KH2PaoĨ/6؄`2h S[kD5ˡ3!R`B8|JyQhQ;Q2J{Ĉ@ * /<?GQ/lT>?MRL9!/}sXADM F G|<נ"JT@J-VC>*@py #0K@\ 8JIDȵ6 RawǬ8ץpfL8,xʗ*+ޝf2ylr_njwl<ќUYvΥ<]4xQ_9GSI~vb'V 㟪pmr];.X 2#EQ)H~m9LQ Qg5vLoRܼN{}`zk{9ƺelZ4UE3\v:S '5k|t]O%lɖO;=|Դ l=\Q YX$_0xlKrqU,9͍v&jϾ0AѵqTTp1\f|)[Oض#g} ?Nm >lЋx9+H]&bZu4; uK~*dDضtdѱ3 ne!^Ft<TQ!VUXVVXErK'e3h-ϯN::jcbs)Xtȡ"HovP dP%NIJ|tp>/+,/uTw7[1;A.4}Yh F*8ف#T)wmv o{̱mW( NRP>2ee9*b} *((zX1Q5]" k1[K WOעFx"_枩:bC-B'[D${OC²=PCD2|E (x͹`Ê(CRWزD6<`Hɖ4Xֶ? /oof}gV\ ?2Hz$ &Iu^%ܴgXuoIlfJwcGa4:d~/BCƤ}_{|/Wb>}׏9a_VUliʨ$}_`@},]wӫuզ%Ri&2%c>FcfT\ǪP~փ:CƠM\x}oo ⛫aub=HfXPij?VN 4Qk:.[Dgiwb!#d;0 HEPRhUrAi+.໨B҂hXAxh'EV1˷G'WhK]َ!>9qbH)H$ LAa)D~b!mg.͇~s:e 湘QXWX#8Եy{/[MO{>*Ly7mv.7'׭ִ7]J`P5?{B)u@4[O3X@A4esh.jv8)VezzVtcؿqƓRurZ;:=h/|k|t/q.=VI٣L/wSR&Ռs=1l8c{Pq!0b!(aLb^U$[ٻ0CE%zE,g&",ZMt`USU:ozWIg۫3,iX?[4%rb߲)Kk777 \}vpNAihI`)N7dܣvsq0D T\|mm*VN|MU kiN:b<"waoȥc~ުxY_آ<eia_9ҷq7]M4L_c'aߋ#/}l6 Ui\՚F_i8Sc)M5 &ZumLEke.?si{ЇlApXawT(şcz4Q v~u Zs`ݡ |Y*_{Xt^xzPN6LB#BHE φ\g%t0UJL{|vN2J寻`EoF1DK7^E8S|3nU>ߙO} f얚O~P<ZP7; Ƒ%2sGT P;r'9^煡z5P( ",̧UMA@i_1w #:¨ qH(Y>a~؍sv}z}9*j 9|"|--{(&}C 8CK-9o7$_`[ퟬ)`S&Q̽, $G3.{2w_(:pHCvq@WutBd9 7cɧԭzP$߼''1J#Qq{3 Teb_1٘,CGP#߂iR-*Y#s$:MF|sY"26|q| B<vE}g~/E2w;Y~^ٜ P[}{@rtmN H|KV{ٖ_ Cme|̃O֐ Ƴ< >r۩Pt\)L b" Th A4R]>jd=ظ[:)Jf]9Ҥ*[Y牡[ N;u9Ʒѵ"Y `Ma̰3xjB|ApQv]04F &ygh,^$WUo_< r!QM5$esЭ̩\Q׶9-p<%}ߍI-m {jʮi;^tS(v㝔6.m#&n\};CU֪}Ti^:2+-}V-%ع OdѠ;d?rN6\sY>֎[G@eTU6C!^9A.ח7Qf0G-MqriA&c@mKaI3Iu= 4N>8Ţ&d(4IKz P "fRrD|A+1yoyOٰ245mykRI < y"ؾl1P@bOl]IE wGڻDӆ1BK {xXBih@k[Re8+u=s#2bF,!!JM Q%0Td^-$p5ɬmϢo5lWJ2Y@LN9H}k RxpuVDX5ʒ$9\y h){4b5k+Wp|S$8 ~بvCa|(Q*v#I({T4 $QU DEP@ͦ*,JvG}zd俁e_Uf€?nAB^FmjMm벪aڇF~t+/< ѪtOo5YOz[fLY쩵җv~iFXk5r뚖ZVn˦d~6q=͋c(vh[غ'(ҙ1|n uޢQԊ(G4CBa_!s4p~~^Wt巶AZ"Qռi'jS+1)èu{fLEw3PiMXזhGZǽ{Qn+>fiJ[>:kwGHJZ#(ɣS]J8 n]c(o 15u<{Z$. b; ~Lwڠ@TB0ܯÝrQn @Y_oΔcD e&uSHbM4+8@ؼWkZMPŸ_wq+IpYl+{epu/{+7̎8K꽝])XUeABԈ4%{,70uz!hP~R:vB0Xt&RIRlhyӋşyJmW3tncBߗCxXRN_6SnJ<('J,Cb4!ͅ3ɍ-n.6l0ӷ^B%Lv`aSdUD/ 1;/<yC.]L4ŸFu>Yvrlxnڭh&X/W3ӄ(PMT5ӀH NG B;Q;+&Zuûm|l[OאN5gN_ 4o { K5\yY#t͔ct"]\K?#Hf#(& PM%ӏߞ:Ϋi#k| }Y~م53ZU+#)U}L%`Z\U m0/gGڅ½ί Pލ< HQG3ndW??")'rPF Q5 }Cۤhx?^<\R0TEKG._GeXXNד}EH\mD|C|@Xb>RYP) ZAg]‚P al&M{j+,癮:1nbT@ջOwY"#,mEq^:p[Uz̯מ:Z"AB!WDYB>nA?w%[6AN~S!XGۧ*ÊkDMNt{L|U(E#L㰫;IrߛD[Ϙ`D?[l.|T:g2>+Tz{fPi/6d@?-G`l&W> +lh&r,3. 7?-~vtT ~%__S( U]g$z)ݲ|+i~,ETϯ|,%PyRO_N1[ћ"7uy~zu3-=tS5iYw.DB _֬}GWjc0 _^Iiyc<,Q W{ G;HFEyLJ7z#_mk})*lBgȽ]v|J䠬d,Niw%╘R ھ}IНGn% VQfbXLyT7k/ |%mNC)GW~)cs2ɲHu8<$GI;hN`&7LύBqd҃(}|D d$~yC,F|0?׬UZ}3OW%E$@;&{|K& _vv?VK>J4#WgS^{p\%zH5;*E0ju $]ӕU"0 8ʤ 4~wujR/_=p<[®; +U 9\jxbWkWzf92:Yo)0A7b`|re@܏rSo[o H.#7/O?7u{f݅VtpJGw5s :ߠR+Lr785 7 a+,6RY;.]it+ɁD7xf흏oo{}A+"Bpdrb}U3a\6Cu3 t4-Cg􋋈;pK#Oh^!y/+5=񫫘·O)P\\C/m>eh?S{Ȏm|͐\x(ntAk{\Zre56[nh2}]y6y zC;?޻ *uJ]K!+ oȹ?7rZE=U ٴDGPQ?B}IZ[gBZЍ F/,!tkɣu^ ErLEIB1_A($$+*u+ 41t (:-)>H1ZCHH _=#qkm@?F{   ֤?+D!,'(qR dr2w5xX-zw;>(K8{ݺ6M첪P*?'!XC@ p=[m>9i/w@ P ,IY1u5X ]̨>[| d$(Ec=UM⮁@߽\81ʣ|_UL )(t?JNN mbQX6_1F¢WǴѧv!yo3,esF_lg7.߄_SBҀk䥬e$Jń$>Q1 m"P$j4R&c!qf]u: Y9NO[(S90% Z&~ ˼yA}z^xoxYϩUرoztpR: DP%D=M_es&,I)B^<4fkCܻƮFM0_BSul2RriԫzV$9) wIеLHQ쁹n?7]A@x? CC,\uBԈp.о{nplX:i{XnVQN'~HJ?5U5N ^/}v0/y>Zԑ PJG@: {.54O#F7OHJk|gޚO- kfF+43*ˣʔAgL;f/$'(@:i gP B͒b=yq8G@H!:C2M5-gt9&ܧVM Ƭ%I+$ʰ n^]N} ˼C-NC5*@xRQL$S!)TjaT)Y0 P5F4 DL;Cw.*^@=9~ ;=̋?Pf=1ɗz:R;9Ճ(g FLҲ`^xeR+J0 <}5}w%` R + YxQ3H)dg/YxJ؞Rʤ9x6ʆt|;YWW2Fm3YMz2J5 -<rWZޕv,Ӥ1JZUȰG5a?+b .2nyc/J~Y5RUKbo]dDpa;OBndV8YLj_x0]-SpߏUE?6AtاD*fvNy& j ?-X=ahK<0\vLXD,%F I&v~Akidit=c'i:.K71 $.p\0#|0aY:5I Y%C}\ʰg_O48c)qwNf=r./?.,{՝޷<{ؓH> =^;GQ+nƓfvU9fw? "v{$Y`n~ʼn͋j* cbǾY<4OQ3AZ}C%ګ&$ b5,Yivѯ \B e>d+S^:GHR!S`}KYy}\^\jT1Q&{ܾM>qtLomZw7[gS}ʼn]gKRILiKEm2M-y]l1)Y$:Tq.jXPf,ކ7X45üU{;0^fL>Kz-յB+áM!vh4t:٭H "p9:TǓH-8AC?g@ P!U1+SCZu@)ֺoOy zϺS"A>$>B K$9W]h+!@AU"KImQ\ feآΰ=U<-?wf#L,tyˎa=߱|XgA]_O u$c&zPE*1 jGIԐj3[C C!kٕ;S,{*<1 ̓Xm&rY|b rǣSW͸DPQҜ(%7Yoq#66$P:ӡUIdNFY&S~X0iMh}Z4Iu*N/^f8h(JeHJj8Ğe ^.LhxIy &p Mj4cvjU ]W?EI*q2jؘ|~6."@Kn0p_ۋ]CBpi$+F剛4tHt!.#WnNصhAFv 2]DH~w3 3ߒ"!!&9˜ sxdizYސuq[B4%) <1woI1E!BQP)>Xn6D~ !xøf iRk8K&kMt&2wwcN[PVDOq4j2uΐd_rZjwĹ*mNq36F>[zݵu=;@X@zދ)REۄ a(%%|͞Zv9]r:n$.VMbeKc) qԃ{fxfΚQGxȟxJgв{p!Tst?7)4 9UU5EQ Gؓ+=Dш`Fְ&?u:G,$q,Fx~ZA?WťReUގڲQlSLQYUKea ypI Aj4z bo+M-}]זg V0Ho~@?&FANJnգS)st)VN3ٖuB$-IEbM"P=TybjD߆o =Mzy&>.Y3E[F%_? 5=Ha0 fTؐ!B3v4_wETvc<_m20@RP~숏 ~72!}JW I vOhi*vvMzIvd?y%!۲GG܁>6e)pҫV Hg`0!73p0R)Pp3*z?Ƹ (㻝*=f`c9yR)k8\ѿo~xgP_#1hR1`f]j2b~3)v^U*h9:LS鐝(A|{nOpePl=#mX,_z'u%p>sM>{_6Xl@ `p!e%>T@@ [i4:=_s6k+7%X?NvQϬ#?Jtpt#UQ.` UѥG[*  UJ ‚3$ymHI>J L8D``X#y<9,8MYɵWUL8H1J TJ(݉`Vv&HI/j21co?Uq_$-I[VÄDNy5cG ,,!NF^6)S$ڌcf3.%ȕm6f#b93|NWDbw+YXj~Pj٥b*~s{^.#,,r*u97+*:J Z (D@x$4fD:F" }g`nr֤J2pHtmCg ꘳S( osMK t6>uehVe>{tV=؀ HR VyCDy0R% I(\aSt2ev"V($kXF˚ BڥQH 1WF1J; f҈hZ Sf ͡$ɋe}͊ *`WlDWysX1By]I<>cr%900 D$^ڔLVP}υ_|USfƁnzh "i.;Vi@YkGzsRIoyRB32GW-Ű#F/ӛ PI-2@W's9s٩MܘH2J-7uy{F^@LU b2ưs:YKWn(@A6 La1Dweq}"v4>WK(\7ẻyz 69aP@`S#`"Cg܏j* pBJ@!Ҟ Y-s7iq!(O0LG)9^]дFg,NtC>A Ib0rBeY-R""rbQDt'/g$Oj#T#.ti ^pǾ-nlﲊTdM58rSodn0ѦQ uz$B)9=; I70 9"pˊ *,r#I׺*Az̭Iy&!{7]Ux3I֧j{-N[3fќ[aM>^a1\`K{яd` ^vZ*XaNUC ɀQ#$GV҅ES8UPkaGʮq{G Ga:D4@țv"!h`F2a)kmAV&&K'3ʺM:ݳ;JP/ꖂX@C7zh`ӂ8Vźŏsl,7>ȹg6 ^8V`J 1爈RVzx?b WT%(g%0eo eSW2^5wHXPŖ=8&¹rxOQk|XmD<]N7y?[]^g;.G%7I%p-{mH|oc{^q'$xyS;Jlf藁{~|w=d{&d6oٽ:Gqg{31&]k'^naưEZjϐ@s$5f[4#-kz q~$NI(J%xHLehBZReb[*|s~{U'/)!P{;^~温FP'kz==YsWAO놾1J|#C+"0s ECUI96Ʌ c_[O<^$Ӏ`0-$8 `'蠭 YtD1MWEc|xKU`or-k}್aLrTbPAYVQ7^I`4< &65^ߧtSxh>a^0{[i f乵j"r1[H=M'ϤlY]0De[?)b#R9L+eAʫ$UFޡ~^XE;=ƷȟE:4< "(EAP0U]zL.WQp, v1J_<0x ^](8Fqf` y0xXU EF68}p6"!PK&w5r/ JqNBv /:Cr ք$Av`mbAxey+=;k{3r I('c=V,~Wr޼xgTTIoz#I(88U0* TtxSwZ5Dfbԉb"eDG7*RL D} RXSJ!"+ϓ-V e#n<,3'ZAenF02^[o5x*mMb(PAT;/eTri[P fJq>)X7w~N&0EÒ@"x$]9$ z~ؽ*W1<Ƽ6LnG~m[yd HW װĝ[y lu#Nu5_hwb #RZ]56Jl:~R:0@",JV,r7p-֦U%6x\Vv-L_)a>4AHdG5thG>k&g-|L{+x[}-\>Hd @ @Չb5 Z(b*Gh7z)f+12@v<(pYW 3\MHeY|4׀Ϲ"@$jZWf[:k^J\eT&TSMoeO7—♙OOX e,Xgyw3v z& k !T }U3N T 0弙& &B O`q*sc%n/'MhOltHTbP4~Óל@DDC7.Wt3%`IjL\_?:r!TF D?zA5 Y>TdA0D()s tГ+dӆo <{:ht:ljʄ |L,1!\>['#9B4@YnlW}Kώd(e\f 2nsHa2r%>Hв}tTAWZ8"C,*_:oރ}+7q]m,WA6ޅk|9;$ ?_yzl':$*@ 4[z~O/kC/*Ȫ`|d-ذ==M!C#66WTE)$2? _fSHqBI[*U4a8{Zd.0eEZy ʂӪsu }b4ܰ;cՈGa৷@0eF$|vpOFm~#Ÿ .D_U?C\'>+Ho26;Yˬq\c 9G+>y(\tEJ)=TVy|At"Z3:QK9ʹ?,;t$cٽmXXܴoʼ\=CUk!vXGؿ _PKDG겓2km vo~ Ak`VA<rJgB:VXq._9L<:ʾT0a6[9_ə*q>{>5Gd^ӛOCSa>тyʡg {vG=/po_|FQa?v7Q&$3`}Qb=R=aZD.A^|Łl? ;hsq~#$XXЪ1_2] 2bK&ȣGyN/J`d&L)ٔ>{qAp,k+{zijPm bL5a)8l,iTF  (#0y[42{uhjia,O>ND|r,RΗFFP0WApRΛ34R1ԘGKVr3DMtlJgNuhQBgAY2v?`n2@ !GXwZ|AHPN~S?z:5 {,Vdc{գpMna?a4spC VBTO N/xa(Y,S~ZXh ScdzAx)< X! 1K9x}i9RYP#x.(|eVD~:\Io:AA"r-e ,Q@ǢUXd-d>Nngwyn3q3E7<ysB , 'qH[vQ);D!C>[lOUٹ%[- TE{6g;>XsKc#&Fg 7-Ll. (68TJABpg^;10{ Dž쫎WY[y?IVSnV|yŜ҂Gt Ȱ>W6{`JaKRaQ^^c A0gf$;H/7Imb+&)|#%=:WlnT]%`Q*tR,4t-)w9.vx~=K}0l=+Ma[q3bKD)4Hޘ$z5 |h;@< <5QDA<;= }ƥ1? #ʀuS6SvgfԃV7ɥM}nN? erP+ ۜ쾥z`f:OƂOB$I_EI}=?ߥīOW2@OmGa"zDQBҘfCc=0]s)'mH 'gjxQ޾hҫ$p<6~ug0B9ƑFX |+O31"lܦjZ4X2O!S:_Ƹ@`qPd$'t=n>ھm1_)ϯhA=3pXHCyQNKA-Vd^>v\^#0'߉W"rcpBu93YɓIק_'>DQ"jTE*0A#hD[yU EATQEH,RrzYLCڇo㷿 %̀R)T i(`c:i7uCѶqGL0uT?=^G?~X N3A8*Yä_Ps 37G7GkQ@2*_C֪38(=\O&Ps]Mr,W~<8 !bw!px L<h)o8+jJ;x$ PRw_㳍8,^R9@q }]K"Hי}鸴 A}CUO{>z['#7r޴QHQ^L.?.IyyO>aۖDC.g@EuV!/~byf=_,QOv\|2JcΦGU~gaKQC\t\jU/KfLI(Q@ 俪c: [ǁc1_D4j`GP=i: % "U3mM5lCX1O7;*"Df @aD]{|e;,Yj+6=zBɴ2<' kܟWp@Peܔ+ G?Ŀ 0o5ҏ΅m__'0 P?JLwNME)3$u<;YWkkJ() o֦'H>)_ա GtX@D2 W\K\I=x3Ľ.&(^4@N^QOcj}6nIw ~* Ѩ6um0Ob4}Ú@g^?: |O%.O}\ql30B3s9&rPgy?]) kB;W(xdS [>,kCJe~gxV][ޭr*dc?Ȏ uX z-I(uJ_\| $g wy)]zQ*7I#37a@BeT)Ai@L M!+3( ߎkդB+GFL&ڴY& R h}Z6=(+Q5|ba*b!D Vm%@Y &!%-:߹H&KlAe eBgLJ#^I})w!TVrx1ʳyL\J4t!9#)Udz PIyvѠ9DFg`>I8 %R (䀁-HY?>}T(A g M-KHˠ\Yy8a[kgbV}>өscHZ$AE0('yjN# ={q6"n^  ]Fty«l/bMKQk`Y:h)+f @4Fo)'Ƕ08 D,{v~ʮq(_cB!I}! E{F^㾣 ;2 .KaY( RS*/J:AN2 .!N(|W`c/sdW* ҠH]7@w R%@L*ݲ Eq$S*% ܊ N#4@N|e33At [ }'XHznSm X,!.2/KWpۄ;tzTG~X$"[1۟h*x֩D=T@0|LMƀ)m @=`u?$UzS @O41 BUX7,mojX rH@QD/"N {ZdKOJ?saYIZQÛ(C!rmy8JShH@<.P7 $E5@+e"1_W\V>+[FB@肂>׼8嶂y`.)"Sc>OU;4TDCX)R}}7c[+z𨿘eibrl UY{ۦslH,dcq29g h{L1x+n<GYb){) -IJ$vJN{__#֒B`K_tvN3Hʮe]kšMJ75)  0T9,zDe ʄuU;f_˘F@ ޯWVCo0_c>u0&mV dBTc&0?#pMo)OU2̊Wq1Qt.ĸ^q_?3Zsuv۫}m@ s7 "x'f4}WE'p-֮d7(eO](;KiZQ6WHy_U&`_Osyws6wQ?᪢w4cy* o8'39c0}  t!%Mawi^)q$4U#'ǻ7w QԪQv8<%\Uۍ]@P(BI!CQDl\;>vu ae&Xx\)9|WQ;|!d`;!ě(#S8.}i:=)"I)UUYZJH{_~ϕekV'@}w2MI]>V\рnAuI] @Ij>)MH/z`C9^>>+Q x{""xB ;S<čaZ+ӠFOx?T݊ [}¾pN1.{*KQRV$H1Y<#Xdfَ|$wQwkCЭ}R* ID* Z6hFdI) DntSߐ2 9|KkCj_͚ks=<Ѭ1.#%8$h xVN**Q/o]ix|yW rc2p`xiHQ0nV3F➀")<~ꯟSyA1+xD$DB`$pAmt%g M+Z< !Hg?X[|yV1VH"&-~f"HO3nvdI. aܓ͹K^/H|<4G^>a>BvJf-Gp) X&Cߔ'64`4=m2jtb]RS1}g˝Q_aI$DI]Eca7Pyx޿g'# `*y|aTDn "AJVӥwIGr@ Fv$Ka%&B hAޜ t&0ȥtĤ{IQQZD*8 Q~NÀ*I ߳4.z?cX4'qrxJ_tPXQQ@N;s0‰;tjw.6םvvn6B Bhv#:gPQgq-{nio֟_gc $I)wI1A}w%4>"_2s?邢 AaT9J"D* @LJG_E Vr!!.1 bUߝ;fGy !,ϲz*\B`-#LHrzT] QRn.(HD]>u 6W^~d. |T.PMd:eeIsxT-=s?gd|\ ')DL Mk4dfCZsdUSJ]_)Ը.3CWwNPJSDH N(ս5W* Écjh"cL}+ ]It=)JWdlNSmu1p/^7 IKt$ D( }j<]F͝ hU0l?yp-#A-Dc˩DcxdC{ϴL8EgQCLuleY⸝r^E8`̋dk(;j˹m`ɊNw0y*e&Ֆ1ymZ_Zfa&wʜ谠e {gZbr+xZKw4bvY8;7Yn/\n;JMlrq -}7B@ h8?cMIIdն澨~l z)5T΍pceoTr cQk2̡]w.&5JUsw?2O̖؏\;` sbŞXa iΚi4@ak(lC:s%ٞ"2 * Y z1w0xFLxp ZH++:tP/id)Ν)+]SFOdD_L~B@*^_ }v/%.C\kZ)cP(1zl#X=_n)N0uM>|O"%e+x)5ϵC+etmj kvs=C_^$$\!$ !x @yY 8lT`wX 8He1T 8?p_!3J2+24qBxP=kejKX"H@˵!bj_:L0V xlkv dYN'Xr +wa2z~eӝX;lC P<@- 3hހ%言1NQUw1bڵn 58Iit">dCYs!k1vЬ-`8Q)`d}w/-v 0r 8%҅C:~🪞іDSmI>v*=l TOQ_/ōnF&y[`A-s?-:k)6b SswX}7f"h(Y Y~vmR}%Qq9c`jNb=f/(om#!/Sg濙؄ܴ+Zb>'$2;W^f RE#{h[9M}ťZK7 h-oB&ު9J?Q$D@~FoU-la$fh5P(w낣u](HՏ:ŀ\/#쁡3UO#W?kv8+\y|zhh?OiVk+^/R:uUUP'fwOK=Iß~W=~s,C4 `40?[9AѡCRcku 7bb%gWE*x+!%.pq<넞 Y 9]j mB(jǥPc0>SRp+x6O.̷mr.)AZfEvER~kOy0R:/0>w4BNfi#F7)K9YƖZc1X{28'ZP1ڞ4(Hn"k.!э@&sn?K@}n[&E˭o,*2z/Z:+,~ OJ;-X+fr5gv1@A!(˚D`zrBLe ã`|B D@#PѢ=bwD@@H $jZCD_Q$bH.&Y*M@{[$hTG/P yh B^RvpO-r,2ao;e6eo )YZ1* Fblv!p!Z|7^ЋN$|d<_#"2DSJ6-'i|@!bjM~0@@;PyRP`AMA Y 9/dH l!\jCiN30NόJ" ϟ;t#`@9gVY_(2 * &[9_fDbzi6M͋_ ;&|':ޯy3=c8g9wܰu@HE @U1$h&^L.~;az*Rcj6:f&8.usnw^Y7 J ( ,!VV0AEUK:ipd],Eb dX2)XQ@ 75PШ¢ T(FY,QBIX` "1uVBc`As " GW%Ng\n^g5xVf>cޛ{`("nH;"Dd+/[bj@@˓  y)ĮfZuj_>0S`n4"b𐆱z JF-2C'|,BnJ_ t1x7~xfjBn !ʢ D't`nj; 0H8CCG?A$uV"_S=&lf*ufNZICΑ6s[Ϸ˜JL~u=;Y'qԊUUV* RPeRubXR psP'l"̠ ɈA@DH~uz @m"Bg.nW:@ `h1#8^Y0*Kcve$zޅt-A  X/'3]מ_ rU#bBެBk`[9$Ƚ# j$\LE@T3cF"ue ])̰yv02TV* DE IZE%4U"EP/K I NYd ;%)' CD@S1 ] v؉Uo2VԊH 8kpAtR9Q<0ҙ gCI@cʴ܃ Y_G!V zH⃬\V zHx:;?]vޏ 8ax|.J7#PqĆNmBbMLp x+RϧĄ/3z+y-͇$Oݤq!XKۻ!= @"m ~Nbsg K %yRf  e H9nrLxBD1)`,NY2F8oKVLQ8gA]3f)'4$1nk"Wzpswkq/6w%Y!ˋ" D d1pN<)ȄeyݗpѺo!/e%0 "v+PX{oy0]kou@IȨMi@HqRiE:|  ic@L~޾V4RI3' cow+x6]p7c+%̧&elS4H9o;Є3.X 24$(v(Fb/tGtwIeAcAdnj?A<%|*w$؄{!)PqΒY,25_xVo minp3O\3q8" KAsxmY U؅3$ e9>s`'r 4qcg*3 Uګ$PȧNWXbnLva`8Ec'7F,QW'C{wD~Ggq`p= !q @hqp05_ZT"- X{ΰ>|HU0<5v3'[i`JIQ'6qR6:mI"ױ288(3.ś5Ƭb""0hEU1X6,VIz7~0[;1.mI\("zy:|h3 /3'7yzL"T`n"hXfUL|۰Lt8}y+=_C$D3eʠ6˫ T!5L^YH =ZnZbjI~>~K⯛a`OUjJ|K/UM+<ٞz1'._jRM0vwOg6t SyoxHCAbαi5#҅P w[[+J2kXpNEԨT`1tw9lP"͗x/EFiVg'iy}2YJ tM|.-&yM73m i)fMҭS3qj͠P+w4?b)$uIY}5 j@RܪEfm-hP2ɿ;l7j^75Kfr):{>CQ 1\,fŕsi]Bv>N# bhI1f.oW":m  j*`,U) "1"8XZ[yU.84iُb5 əu+نSWFiP. ~kǘg8Sp5v]/ ]۬O`T_E{[L v!/0|N/c'c޵-~雫ѱѫuj!]q/Ui`26O?9I>/ncĜ3^uoi꾫W4|IG*$|Uyv͚ՙ|& Pw= ;mWAr2(=KيpXDjkOK'^=j]l 2ʃ @brCLIUR5 iljD=WSμ qaR5Fb솺^l0LRg*68Q8'r~J#Gz_)T|ٰyo#ך{ z 8`,o)Ei;̎Ji_EMќKˀq La컿;|Zm,#!+)y珵5:_br!)2Ͷs~>=J)" ahCߘ{߯@< ,IT2+&!8L;ڻ ] >-(釈]!!1k> АX-%x??\|[_h2ߢWW&`)U*>dd!QD~ibLsun#wFID*DH‹O=ķi@M_)>6s7+6ØB@ 'ZA[\t4,Sehؕ]:isJS*ELWy%\zEZ]B9$u:A:&:ogbvɇ64@ @S Mލ@4 >#yp ˘)Mc8JE'}~$g)~[OZgu5bi nwݞڜV"j*;\֯5btoEI<]NAHಿoteW0cpoN/K,7vuKzVviq,5xH'Ta Ŏ~?|Fc{h|+M]uZxiN膂Owwc7g/uS}TW㓤t mm-9$Sy9BڏpAhA"r,Rl Q>KTSaz[!͙%Ze ~Nt~uz 7A$A'$vQ0TrD@""wݘH`Rq KNeA8^,( QOڣǨ:fH)̋a%IR35˘YD"(AO J؃A)R 0:sk/3(%I&5M_Ch{F=r٘[:O2c 7[| zz# ?6G0>g*&O5VbwH=jvI UCġHOn|_~u߲^ʾl_M$S(r8io2ňcAQyDzAֆ> W5սMJ=gk<,9/~"b?~~o'rwF+]O<wh Tp)YY}8"Ͻ}"S0 mS&AoýWE[G*OC={Pi\-mg=Z?o߾ ț@i$nU,j_`Xy#]]>/'v(ET[1,I2˪#儆g(%Щ#Z[b*(-Fed`%k^]z~0}J#Uڢ0T?ikL#$uJ2`3~:1* `A˒3" 0SڧA?36IHDt @\Cfrp,%%~G߾&jm7~@&hY!@Њq TZH_%=$ǒhYPnΟ֡ΚWST @n\iPqE#@ۅ%. 8JAVp4.y< d/'pʧ-|]=ˈIL,'m\/C>{C\CeUخ aG^Rr?O17/U{ۺge>-TxTi"#j'}yW=9FbO]gױ zM| $'|"IaiI;a(sy9o\&FGp`V{OeVvo:f"-8!aֹ2nwxsqCqTU"s}aL YQ$fIj}fa (Mcyh9ʠx&{xֈ'0Q(qM "G l_~?l@ @Xc2Dgm[xJ(285btULJLBWaL1&'4!: фIԨD27D=iB@(XD蒒 6IaE` v2D/,F2 c*m2&ªK2"Kud AIP5I(iy {?kz}xnfWF[z]3Xy|mp< 28Yqq+Yڇu=c+8+/K_>ڸv5 '8@RM&9$DCc䃲3rlSF8(CpA#@ST5ȰB/2Nz`[XW gd0{@e v6Fj BMEO.Z}0ATJSGY\xesSY#TQ#E$THS"$QJB0렱SedR{쨘ϡ԰TGwg}u\:9L8@zu`LJCV1?>RJJ]="p`+5k7?1u,NU҇{Qx0bfIHgcƟ @-+% rq਱ %MZ C;{76}~apk&*R#zոihܣy d:ܺIiWzĥUk9X)*Pp8k FRSPF&NO6` ܥ.S;n ԔS%.GԽ:nWNK=oZ-*S.Ӻ5ŧjT1AR8|nG:խ]̲) <^%frP!34hYbWy`xՑ0j1D`iA~5Ԣm*,*ŪD`-SBR1'pH oR}IBJ$ rM?u({gWsnU('~E*,\Ne: lb_Ԃ; 7 @XC 9 ~5`!llC'ݔqܖPOάM)H)a[^6^ʐkoYLN#- 5:+ee<658AX hTQ&Q'hBy6+ O\!Z8Nc p!~jc}cu_SYwܧaxd`'?io6Vc;-!ހxYKN!3՗WͫqMmQ1a DȺ/e8B|wa^wCU|I! aM)k>7/9JE΂Z R%֧ !lwLI9 HB s?yGҮ=`olۮ7 ?]vͰ}ڎ.2(5>oU15m0T#nF`IrkP`Q̯8_j 0@.BJ6dn2v{9?3ow_o0ֈL `Ďom}C'H,9c_3ƪM #/P(i r)4_mqfb]<@% %-tPH[ؑ/*tt9NA`g_2_<+i*(JN'+%fYh)U aTU% UQ&i~Vv١.q(Iף~nP?7 TZ1r>~$ i,Tj]n {@@3vSaiS`ġ;JNy[:T{ͭ?{` ^&$c9&V(U˘@;6w5ڥO|BWǨYuD:]?;.NW6 uD X>  hp$x3(s76.{-rn#3ksBlڼR871Ji@@$dHU7KQa<Ϲ^q"ZaMֿDd|;ǒ!2 (tZ?YE fgN_Ja/#{:x/t< n>ҿyg3WKӸ'rZ|O%YqWJlZ'^II\'720J3Ϯy2 8r~V4Š8g;iЊX_Fnz-ǃ> nHxDR Du &@ ͆1Z u~ZNv7H2]1.O_Շسސmͼ:0\y@L\Yf h<@1uV]<*:x{-^!:I-=> y;x%`ã 0HϙɤEa%(jcީkL 4iPdVR :=b?n#muO+I}[T,t,|@y|([Bw7@_ǣwEr]..CZ}vz\d}/>7] 8D[7uFP2C'A/ uJ%W=m5DkԜ^%cTEj|Uq}AW8m)4Cݪ.Cy0͔af=e{im=GA=Q? ]^2WSeĐ$֦cUSƽbVKR^tp%&A?SGm!~x AM}j\`~OivkHmQlsV1s8횆@pcJ< &@m>꼃@;w? LS4 R),wٳ)4˝aX,x 7.>f6I>:A.#}T=\BÕA@h] WOP3,/D$|,?D@"K)mi!`@Dz|a\!P{uOrR lT5ZN/UP`drGNdH CDM?^PzO|smKpoNH=R'jgbe(Yfנ~#IR?'yݬhDNNc02LҨ. ^TX]02> g7F;sZoud(p0GUjMZGv~WGY S T%Ý;(V[; +C^l2`z=̬IpTVLq;P?@<9(CԢ}یp/Ӝxn{vCQv(¬zMU#Wj^d-|j!MòN Dnj. 8)gyt-Vy]~UPO5mK|$a U/;k+\LwհMj*s!5oR! 9aCGk>$M'c9==D88, 4%qctUnj 0vlssErN[+k*?4~r<0jX[HCtw 2 \$$gNŎ:ٔp ek*3K.-qb[q"s;krkaDu*/ߕ}mgZgJj y]ן3D5GF>=z6VxE/1 >wT#ɐ])/bz6^*U8h[<_s|n_Z;g[{ 3Gxt0"M.vک)h˚+w&ʺY~W/ns74Keaj@e j&*P) 0 Mc+G2:3мv!8cqVc^>-~Q&+k*#f}=t~M[{ OK=_}O٦ݙsh U戉a#Z};=?+ h-r츌e) UHD}]V~?DƞkI4yM?<54MM|>JkV/o"31gϯُGZ^}z^?NfR<]qV >w~7ov~鹾caI$^sI̜J' u=.lQ]hdd[v7]Juk*Æ5Rz8nbDPD [(2dNx;jYZG? ʏkn8!a.#^_Vn)N }Zͮ/r6Q%VoC笣Ϸ~7KԧJRuAh!iQ{9Mw.xT"A÷tH)`G"X C 4(  s UQ$]\raCcT5]Moz~a75zFwt;C%LE k؊` A_-~ NAi4rDIqXh8<SK2 kA w{'h.T`sEdDvo4G+0r ܯuAΨ M;L,G& a^''U҂!.9sdy2uAB| [MZ*h[n myo~Yd=CK|# {.BmKFgJtIYɂQS/ _ꒄW/oxB[4W-&+}ovj́pwK ?W᭩jsv{#:dqk@(ʻ` 3/ U;6/( 6y~6ʑ~ȱynAAuJTبV Zx)2yț%ݍuL~Skt*uRh2 *>` #h UZrMnUYdg=jϛhd>Uk6~@EHp U5GJ񜎏Yk{1M FZcZ_CTCxJ[8Mp'~ɕBpx F$@7WwƱ0P~*y Eonu{--}u(ʀNeG wid#VC]3’; B1U8}QcMܾ=lqS?qu-{9ؒ~uu\"jIXݽI*Tn&S:XK N b #$󁄊Va 4Hne⭔_\!32*"xrnmITZUf~Bh+hVWF Ǩk"BgѰ-Yvzey`dKX̺*%)$DRkTB[emOh&ʹ^㍖Y'F,(YGqƒO9.azhj: E8Hthxyѯg48SYJ䊡euULUnxp) +XژM`n`0P ىb> 땮gJU~Asx…\%Va BFE>Y?LSg/2yϣ8UkrV15ŭi˺=( jAzA\Ҙ&ԔwQSp.q6e 7n܂c܋K sm ]-A<=2gQP3|>DD)K7j'~\HU,HI`zjil$*_x{D3? <^soy/Ն#&<@""RH! ̢@x}1}Ifȅ$怼j_Ē-ZPS[`D #&EI9^c cbZ!4O\}:zjXy8?'G \"1ݼJ])xkjNk(O$6:9ece/."A'-1*/ %{Yw7dXRh'NqF7(E3_2h ܈ שx3,,'v h` gu~  H"({nt7(f"F[-+`rw^ˌzu5 Cr5ޤfJAؔzU @H{;3ioBsq-H~ƻv3Tʶ6UZRC-$#фB]%#Ht{)Hz=c=lj5Bő™)KpWETBXLj_ f<%A!>7"E+`W6$榳!ӧ|2U%9܈l@x]?ю_,@bp\3w(ݲRe$2E=QD՜^٭'b[bO7,KynX :"@O ىWśW";^%T9nD ~صCMu(j$8xY;@o1+M%􂭌;:MXw_*J+wc)Bİ_q |qpSѐn4+؏!֕vP=@qد-ɟ8lDF$%AT{Ml!%v]3<W#ڡマ Wx L_p]~k i[(ٸ¢HΣP!VGWSә6kTfX3T_cfoҙjMXAdyi[U<2p(28'1Z5Gⲓ'.+櫤 kfO𪁓2TS<} o|g~l?-z=~ 0{?wldGVGu6V Nw~w}|z}8MJpj b_˭9tHE0Q  (A1@H@Vk>&>ֲSpaTF_3 ̙yo*dT6/щjr$F) Rs0c0c^0RPOwȼ4mݵ2irL@H0OEiAn| Ah*d޼jRvO%յUyz(/vSebn-YwF*ln={rz45iD@ˎ/'}e҇J^T3zz&x8^]7 ~Owr9!?% ;K;~D56e "hyQ_ s9 c38S_WQSR .$trU~;ɜnPa!KLBw(>`bR]&wõ``d'TjHr2pġxU^Nq m=RFf;nM oߺ _RiZ [#|[ԗ9`Il_mآ\/yf`4 RB}dQgU:L#w )Ӭ\%`@c I QAzQJ!N,7 ԿM|ʍ#ѿLj>1V_}~*>0J5Q},@~ar^|-U_By4 F'Se1lE?{%gLFgR2ps_QH?DUv%%`-W~ᅲq뾳r#-W]+,?ݜo}p{aqWXK?ewI9FZq#nZ56λoqPE6L'[=C~] /@cfnx/M }_ sD#(_؆Dd~M|{#=xdJ)_t=UgzHbx-Eows]CC}hEYM +@jiJ "af} rpk O+< JEN [s'ӳ~yy.JsIKͫs=yCBX*@>ms ﹑n6JKȴx)Y_]A88O+ǷiZ ;+s{IL\i7A=(M8z~I*t&YA6h0JV 2V.vwBP=jP1`"'UN2h QdnJ3ɔ 0d4H$4i BӰ3"J !)P߳tqgBn7ȉLE f 0yWi$wq4 $IRUR 5X4$L1HnIl lcE~.D Ih1Γ聣HLp¤2e1t(2` `aUi ߽s4y\8Xc{|.bTo_F@Xh!Hlz a'KQhG 'su ų)B2ehmeg+_$ лiAjJWw|A([|&C0Sh3@ M4tF*^^CM.ˎ=|MM!NXDڮ_k΢[/f)9 J>;5|utyUc&c9$/\sc)EzFNar^C.y:ک2K,^hCe<%7'ʪv~iDp-p4Xu P?%j/ " t{J^3%3j' 4UW/݀mxD }01k#x]٘2n-LF]3԰r# a45H.^䶽VYh wȗ~Oei,q^Rc ]pyjy_NХ(Jt_Os8< %I'2Y`g6]n/ʣ akWV[Mdp'.dS)pj*DpD6 q4Z's/Lr,vRkdg.&Ywiqqw.A 3̖xq2RsD#IvfU1;2TD+W5wqMZQPۻmᨛg/UYek1at5ȥ&Q|0*;rچPax\ 0;&AXc!&_!b%yk7e} -+2jd# uN#&e͞6_NXT%}@񕉎j5U [miq׷l:؊+8(oED0D$w@/FmZi515,'F=VV;J&(?Һ y]F~>fj4ꊗ p#ҥgz] n Q&fh;@Ita("$!­/Ji}`''^?%N<Ҁj6Y`Ȓt{.44y p^'UHsu#'YP>^Y,<=fVƟsy<1c>'ig6(QEs(JCGNzcPC@XhVTﹼ7WeOA՝o[ϕw,"|e^&GUU8>Ȕ@K `y`V":U&2T*I}?GrQ|'}$r}|W&:+stJSPXKR}4suzssL"ZBi4ոF'8S6 AUO^. M@P\Wgp8XC(T8њ1A>7R@نNi*I,!, # y+'6yjIJM}*0]"87.mchte<PM3&?4d/8꥞"vMŤǰs}~s Ke'?qTe>jQŌ4a=qcr2Sdry8//KVAY(]ؖEL?J Q LC53oHWośu]H׿欋9̞kԿm{>6r k퐅j!Z&,߳Ul0CKo*zU+y9 -j[xh)s"r\f@|C}춖a22o~7>l#qr{;b\ɸnHI_b֑=,"W#a+u=:pY|mJl=_퇫xr0,j#]Qc+!N`@6DAu&?hw^b>n,m14C^X9䲧h[4@H {WWpZQ@sBMCEGEAf ѳ4^PX@/o5Cܜs vyϐ8E$@q/G;v' Qq9*z3Xyi e]-ʖe0u7^߸61eCkb&k֛Bo7lT 1!B2)X'Vm&_K~'ln%rwKݰ%)q$ٹׅ8 D[l#Z\>2C$ g@B$A`fvM@(9|ҙ0}vUx= 䁉 :; \7.wA=ű5~sաp9*4Y>ӿ3l2q nH~0eOԦ,R6T0rAXb18)sS /O'7WϘN Nl%BCږ ym8v2g{ŷSzxDڬ~y\PK!Cf0x{օTic%Vv1ި:rp94_N*ҊrJ_ / }SClpQ^Dca0/1ޗ_&jҎ$ٵ;~}tH D lsģm^'.k<%iG/"^ 287aٴO<}L29CaUa P<'=yOE?,!@ Jj5H\ZL$s'U8!ӝQ !-K1oy=ƱɼDK JN vadpXR¥3qf2M)RPul 8wL ,[;JW\T~-X<@e^V'x/ȝ3_=|L1#٪1R@@ K*Rc^gL]/;Om•A|]VۨT|$Sļ5"oF"Qˆ;V3B$DB2VP ?~p}qe9\&/+RmD+ATDWr+tc*W-5|'3 s`gdo%f*|v AHG|ߴ&/[3y1jL_ix*0L;E]9o53(7(Ԅ:˅lR v IoI_S 6c:I:G(2HP"U**uJGvn)|D9 ~$y/gkc@F -fOH|? vĤz 2d2G)Zo}[a*}{k,"P`21 BHQ z&)JR T[q2L  qB2X ) !Wc69o8,~Z5[ڭKG{5;E) )O3! U{UrfvetT[^DD蒚,1 w/mhDY8:9.7!wRd+/< xM1(:gXCWdv=W"na44\8UimnyvM=n ݤ7oM6kL9W714@89>ı%ly<$]y:쵩`gpD7VNQT𚒒DUQ*\n`"yKHǘjeHȿ%Dr(bjuJ)=˕x ?%"=%YO i.@(z SJC}䰺u6wym.~ڻ9wx[`<,XtG6 P-J1/%M&o" 0<ԘRՉo EB@c-W-Vr!sDsyGoXL}7d>E!ta[gd-%6~g6R>][IjGmO/+m6P_}"%'iTePuɊ`*%6T\bttoTY>D6GҐxnFQI>%>7`~Q&ʗ:D^RDŽz-\wVⲏHOl$O;u8+_%!%AuyIl~e.e캇jXiGFbfgQ?o{$ݝ']^Q )M=\9\$bu >_ԏ^[I< =fײi=ݶkrCC9b.n/̸LIA,Q2f}AW8;{ Ӝ+|~e,VYfFn GA-j^¿9<:+Y8 s0YP?m>O*d4p -.§~̼}w)WE9ڰypwU>҆ /WB=9?)5ZcY|FlA*+z5w&=h(lJhpl)-Ɉ"#){wuW="?:V}߃HVgm~nFϻC >h"XRCD[?N&1CRX5-v#hemY'3twlh6Bl`w 8SyY'-zW6j,}/s|@^g~O6¯*ZԧyS H>YM@ :.r7_%8`?ϻR{<HtVO~'m ve;~ِ0; &Y/y!ggP<5MAQiUX{=3ũpo+5@R-3ahlFJanGCd`yoBl~Jͷ{,t}z?~1zqOd)ñ@9kY͏>0(R1 0Ьb̥ dfA{O$ٗ-СH?:=6ӯcS~~)_eOSt\d$,TY@쁖ɲBQ6MC}4L3CyН{6:!4Nɡ-KaH[>mI'ODS ϙJo>,Q3oSO̡L GPͭpbW#q2+kd^1zrvk~ȆQh%e%jvs%O#{мiW-=&٩n}Q~l?^K2qxѻأPOV"B0`|-3L@Q`#;FyHLxU vVx0Yx}_;1 -6[5μ~r:nC2v_:F/ Wae|wpZ5TXSB΋7 /m_ |t?__!{ b!B(O:2O9t ?&r 2vBN N.fL8S  +gx p7* ^թ<֎d6J ]t9o H3:8? K0?Qt|}_5Cor^[~f7Czo/Լn c@+eĞ0 I  `Q>eB2$a3JE@FD`)fT*$c=#(.R.Xzc S}*]^/FSR[0ڢͫ_]PxFq:Z_P]6z oCl3C:Ufڻ7^x R#e*+ k[ kzc"7߾hEďnY/i0}oߺ>G ~|mˮFic^i.̵:s_P5јP4 1{ %0lD,IH,IP4 @`1U`lBPG KY'wtF~N0UܒFK^IgAݠdv҄D~m 5i4YqU9aZ}5To&6<,zi~M?uZgߡ5 /v~il񸮵g?]4'ÿNZۇ{ ! '>I,耀@KouR8o,5O-}cݢ:85ES:Gpx#g̦.l96f+9@_gћtOT(O6̗[a*tϡr*Mu!a}듻v;6/O0jc'?_o{zjطou6c H@H>KӸi Gzٔ>X})}:]Qb듰SZizZg7 mEl(oV_2!%$& uڇ~>TbQ@u8eiC X~HpTt(Fx;7_uUs )pf F=-r&  ,ZL2o??^9b1vkX=E|vZ:hK iK\IYX̪M.mQ(,?s|Yoc+\Ue _5DZiB/_s9+>=sD,#K=}L;utKZtWʭ9K$ SSش5gu]Ogq#Q1g`bvC%ǹmmSs !2$!&aVyF`z7=w>W\ /D%Kwo-}ܽ>*5I|];=kn&8 Mdoi\d?j&F5.c o>L )8|\NwgmI]PbBi@IXa( &qw}D4OB_*E@^?o!jcM(Ǵܩwv⨗[4jc7B"\2rD)]ufKvD R*\Y3z{(3+B f:IP*U9O>jk[P/9;B~Mo@€/s#en@1+(?g5ƟHG9y`hQ#q01ݾIp۴g{5 ] ?ӆrȚ"bBsP-02I#֯ouVYj}Y:O]hW@![7k@Jʁ0}b 5@ 9MGA֣"շ,CȢ$/Ͳh'<^/vֻc}*V=~ ={g(=QF=WBF1ps4:#nϭQx0p߯v/t=](h_b+B45Mn}*eu,OJЂ`v؟$9|LEC4A8$L\hfQ$ HI?*P( @͢(3xZD~EPP߲:}^Z"|.,eeS| s͖2̬oUmͮTK 3#9<FUv![,f!  eI5X!;V@ڋC`jʊR!")PG6*@Cn huPQp @L* J(t6-HZ%Q`ۛ0lLN0"(_yv?FCcu}oy/]mOP⤂z(άjB|K\ @Ƹ `ˎVzws9mԻqtrl0&rrΪJKc׿BC7]*(d,Q};FK9~w\r|Z/{ ⹕=+atvԩ0Γå1~O\'1I mLñJSES}{;ЉLLGtRmoI]g_ ,y>yuYwaKr8ߍ W'~L'!ʼ~W>Dp>QQ0l$rЙ:8`XrPb=AJ>#Yx3 \$IJ0/v? +,sg"Q=QQc]I?ء8M!rԉ w>M=MR4$9xzWl?]"̒4!So- {9_Řx0,F/toi)^>rZ:*?\gSKm}^7 WZ;6\6oYm ߗ}}ι'.|O%ĵo7 Z-2 ?.w"h E$J4[tјPUiE9 yzfSc`ҕH|B Tava 8xG}oFnC9آ _aH ۮXq%۳guW!ĉI}\3~Z+Gx0g}~w[ k?anw㴓|T%bn|v.6}n-Ϣt[g'Im"=I̦7Vb}-@r f8Tc3.WJYDv#['xӤu7٩D%3.6 Y8H0D1x@(}W#n4PUB@ZHdbJv\bxPK4S(@;!a(~,>WSq?H̎2k J LRpdͅeёƗ!/2JQ>9Y/޾FXpKܪjXQ٭NDR@BL}+u|[nO/Nm> __{{+8yLoW< i3B@ I~-wI(f/6{@H0?Y{ynJ~ֵ]ޠʱkY:3ڟ?{4]_c|3ճG^l6\~NCMl ruZ̤UL^~}}y"⺬{y~AwHϳmT{wXsGwu 4_kG_%=[Z~Or-_㈟R<*>wĿObB姾~򍎇PqrcX|ϧVwýdYWIR_Gy]asYzޏ?~|y.WT@t-bhO0.v*,QGѴ!@ЩXiUʤ1n]~{n,{QR" F"A`(R*,#O(N@+N!2CC&MޞBUܢ6 x^oe;?$ndu@/+Ȅ& :%$)0$SwTOZK߿ SA[\r[O7`RdzSLsػ,W_9٭>gKsr? ɱ~ {xMc^LIMW';R[=cĶGSBZ\tozm9r/]"ƚ/#c;WRf@:h,vq/MqId õp>[oYo#oЖǻKGqQ=Dy0H$JpASE: ?; g͢8GG,èb@QlCshb1gEY9vb|Ԙ|xs׳aqMVE6DTZĀ=lYW]? O%Ɣ(`fFB,6אTgy 7 -B`SRlBevAX]o'~)MLwQD.$/_$1LHM" %;gI)!wiz:5C]XW;tdRV 1d0<wEϭd+,+5/n,gtD-d3<ɺ8F[E=|u]_z I@U7z.~KPoELOak:<z|U_/wͿ0z)T=$)yVЛNc oo^!e/#}~Kii㉫m5xɭ7s ҾC"TE3=?ZlϬ }gYޔj}!:s%ZSюLM,'st.w! btuދEYGp1/\{g';˦bߵ_" Nfd Kx7Zȯͯ73C_xu_xLIVx)+u~,:OoUt&u_ψc=McwE] +1Y\\$~fO;C<^8؟\mR~3&y(y>~!"oѰ{ve͞f<]aOʪ 8eDT:#{ RBR! @*>7y%3f^Q$_r?߿OZOri?w,wP{T jt_˓@+|,ocV,9H{J(ĿrT.P% 3۱`.\zw{߲`G`*Cd'D-lwy<,yKHe)+i80`z.l9y(C*ӡzJ'nw _`AR-L_k|'y:yOkm u]𓷚 ($HqT %T'V̉yU+je5i\COG۩jX{G%Ef? ^&@L 5e >/@؛_H=Tʗ|AKl7  NXKC8ib0!6z:<~+o4k?)FZ})Jo칔Iãr.SWկ FOY Ӑ&$qUUDbEYD [K&ӗ ?.,ҞK$u3~^[30.RH;ȖH!/` 8G+M0ױ/r{r5 h6lJMm x8NjL%4sZhQsˆ~U b!M*nI_qC`@DH,`O.Kۊܣ*Լ8A/MV)@I(@D!!Jeym_)ʉQYyΝ I@,ȅ cz?H[Z=lh]"#gكą^P$Qz`\1܀̄Bf⠨ D^yf MD)^CBaMq;,bׂ:z+pz1,%c|Q0( gyࣃwVzQfVvwg|ϝS{gKFGeܯR#@R${BUE mU!.CBc)E RGoYcCwl|qFz <U"FKv}6sg{wH/ai֜f'2)b}&-};̃9`B*3x AAc6ՑÂ(of ƫ^ٰiZ ^ ̇wyX8셈ȱt0 w &@M'1~ɁRq&Y 2 xL0,דIQvLteCBc٥4_:m۫[2 R`\#ղe=Py~LvZd=*8h6%I" Gh+J([NN' $IL]&K$"R3`h&Ipq _/ ;J#?Ix8DUIRv,BD${=1hj'5M'jP)9Ō)mAq D" `<3" /!p9JN)J [28Ab22$gՋVՖ0($ ªDF@LOb7XnODD F/QFb  b5f|3kZ3da",A ͅ^ H YĶ ЪOoz쌌"0J(ʫǮpuѵQq(!a 6ײM &)<e U"?5jU6D?p_ ArH[çLZ*ܑDQx7q> )tx`1ua~[NiIDjU:nmI+!͙.t}Xxg0"["Z$~: ,ف`"j 7|O;ѧuk /@V"5",`DUhH"\&N5cSaEdi^TI.G֜4=U׽⟹4atMgE_ fR0J} 蠠`Q ?MP( O0xD/ĬF)%$HiQp@HQF!:/@QdGs*x&U3B,y L*ժk )!'rPcl #LbMtUu.`C0 N^g70ـ0`=9f "ҪH4C$ZA""!LͿ{О\lQJFC$#"8k&0EWcfB"y &VAɏ9&fIH-kuw5^ i]>O>&&0`D.5iLPB窜Ud!!1S"̔i$0g@(k 8"C($cVSۜ(:i^bgnK";q0D>W{yUwċ0Z ؉\ȓ5ՊS! 9٫Ca9j g.i3-?hx{Y7fXC/9 Z=\5EZsj&֗VGl)cG* ҟ/|f~k_.b";^W+|GR"B8#6BOh#J0C1^ ޙ?x"/`6SR<׌j@CfL~t"Ok1=$\kA00I u }|P`P0DF1B=8yxq}_3ݕ#z=&ib[FerJ>+hfT߂ɷicwz&$yMcwg;^džEI;+*2Փ\L5/Pos |[?cᤢP1?6F#b8m2Uv{|)ߏ%Sc씋)~?e{!/n"n e>;I~V>=V.ƏYU.dk|?>ugkzPTܣjg:'eSI%|מW~znz_A w?\;zoOo W}jowHtF]9tcE. =_/SɏCͦ\[Fq[CWӮ*yo4>֪O)ZM gF21 dMdpbqx 1 tw;`4179xW}CwS/^fHo>uDIi-noCyUm}q}`ǯW(2h;ݷ{('6zmhlU +R] UuiIp+m0 (]uԪ̀tfZjQJF-l44Pֶݻ{jەTuE4ңdvmdn/s{Ce5fRBJJ{:Um=ڦڔ͂lz\nFPѐ 6=ڮzmhkPlG]Nv)ݤil{ӪE*64A- PҔt;^AҀnq{zQdtt -Q@T m%UEPR@ $$wueJZ:(P誴yǢJA T H""> 2-u]ww{/{nݭ{ݺ@ݼ]{]>Ç%C^ ׸C>BFJxǷqAuZ,W۝ ݂A8FcMi5 r9 r1z -fwAs:{LͥY'Opsـgp{K񪗞{%ˊTI"cB IEnTP(rP;'}ί swp7{;wgp7fwy(EEa 5wnH{x)v` saoY{ڇ|*Z>PG}}kG4%%@m#6T 27cJoenYGp`i Чqs^݀;WʕJք`ʚttފ}dʔ6zҕwm{* ƀuqP,wj٥zH*;H؍mq;mv@4 } |h l_Wpn6֭VwwȅnjPwUmmkZ'-(("PSuZ-)fh %B=v0x5Z@ P'C(Uہ@ިDjlj^$Is=Q3%PP"rQI= P>}uzuvכչѯJO_z׮Q'zhxw y׭졪rRR==*x0UV]۔odPRC׮/!(檾JH oS}r^J{aC 8i-pi8H(=q͇;\p8GBh(ekٲٖmj^(TTr}a@ h`&#M@0 ɦLiM& 4hh4M4a4hhhM4Od4&&hQ꟦$4" OBhhi0 M'OiF xeOPyɦhM?T56hezCj=@z j=LeA bii64A'A=hM0L T3IO L<* 5 i &M4l 12i lوaLFLfE<=MzQy=L<4MO&z=LLj=PD @M0@44jf& d0L``)~xW01 ϧ{>h dwXPNu] fqrOoZ"PI?fi  PTJǒ I5%HHGi'Akx-!~wvڻ _Vf%ثŒ9fx?$F_/ǖ 3^~]6b m]ОcXe0?6*ɬGT%` Ej!&v]u+6A3jg+bX0߹(>^ⵣU&#s~렺tbw"H#_M_;3lѧGߎ<xi29sֺPw f9]wXA =tvsld:??AIej\=!Sc5޸jblU@m@9+"U,T,Accjɉp!œ@9 ܪW D~g>q$r:QymYk ‚RB+[{!_E5أ qepVKaƮgbZ+j !Ěi!9ЁˠY; ^ ӢdWcѨRwc~Ӹ& ֈSG.COLZ@D]:Nfa%V3Ȳ *˪ƽ_k~«, "li໻\B?P2aւ1[ C"j,hUԶeH(4%0L$))Xa 2`E$ѽ{^ZKWGpx*$nY݂L#^{K}'D2RUNGܶK[4BHDBqvYVѐ{#IvZ|LS U589'+MY[l7Z;S l"]J &]*hbE+B 1eXX$Ì /މڐ*K/ 3f+8IM[lR+i1*x!HꝦբ-j9Q'iZVFdֆ \Pmt,R8Pf֬D1\ed(KF lL)ZcjJ-6ۍkz]&(t{$%\Fd/KJjҳfqZ7'{IRAAq[)[THk_W·^CY^XMfcbvM2G{REq(EI⺙wi)/{+!y ũj|)2%D2cf,t!WM2B@P2) ROWX:]gjE)K©hmפnKҺ/z5-SA#Ҳ2\,sy-"<-7VXu͊Ne_'*Dk8^i%I*dɢ5ZhxY=[JwNR 8.!^8ֲc%DnEJ9M@PH)"CQ/4 Xx,Z05TE4bc︛d> 6agP$ך,6,Bho#e"`S-PeC>cW$ wpd$4L4nj4w浥USWdLX/xI蒞IpOg6|"X%-hPH͔Ga&!BS oR+Isѳ7ES4V7WHIgᘼMdVB<]܁4:f3v)aJA⨅mۣ&JԈvR ڨўcNwhtS<<%q, zF-j,y"ҒCU-H2ZIb嚥K$K(tQeDW)0$$u42)F)tN%[)Hbj܋HL"zFk8֭PV51(TSGRoxl0\>#yXYJށݪ2Z2J(HT_+&֬ij(\NMD$)IsDg+*|IH{AVxYJp.+Fb`vwl$Ī4I;FG"UXb%F_8rmP Jpez.ƌSC{"Ҋ8-wJEZ) 2d+4Aҵ֏YFy([If@b- H"^ڙ'5eY S$RJIG.~II=6ŭY'G J$<ڦ7I2djQQ]l9TaEIg]6x1CDOe*M̫LMWJ]4R^JiF|<֩C9·uGb*(HWVX-4{ Y0XU%:҂1*(VJaʷ%z-H%"9+c;Ҭ.W4ay^QQʰў-T,fKٲY)ͦWS+33EMka*t Q݄rY:d47gP&5GbZ,$U2q|T,DJ kxЊ$iC?+/qIb"̩\iJ!k-SEYFigw;$z%|DI;N7%tGZUaml1:..mZջa\YW"SEF3$j4q.ѫ.Jdfl \ N(ahJV1 VJ&4FE-+X4U)ZTֳfZKvh!1EU¡4Bȑb)$Kq)4R]$/Dr  M h6 {ϲ串gJ7V`x,xZy9ڏB:!#,eeB(ڎ NB(UhWuBNe:4ZD3aōDc0bUjE*1:Bo$S  rz:q rrlCiK/c Wx2EX,i3Lm)lif8bnnq\cW9q\N6J5*J2DHdo)EI8Umqu#9^q2PNBA,IY޲Fd$&b5.fiYAvHnXJjШt XI)E]%@Aҹd{>E/R_,ew{ /! rN pNsʠGuT`l7\tp]$&/V\_Π^Ǐŷ&Sl?r`ĬVB &b?'Љd>_ud0rCJ{O?8ؓ J?nwy]נw) : nL_o%A@w"#d;'?G#W#N,.ڮ֘ߑ?3|De.T""1 3c*}2]t$o$Cs(:@ds*C{X<}w#i7ƒf1?ꄖ]?gOH> #Yh3L~qv+Qxv0Ȓ2&rYSk'nʣ2š}.o2k/?W`aʛA$ )B̏"ԖF<`xV~( bzC@ $wK?TGB%P?H,Hx/{+E"0MZ@G y$ f4Ro~?{ĀTq+@|AJAD.,M\):C}$lbH/<%EX6p V^`VVU0bI>;oG??ҧ2#喡v?%U 7Zߍ׷m&k?> RU3"nSw/RgfBPkE5E\s7ĥex8LP$#F,ŠtFq6&5roʈ6OZ-+O_:~=?N[C=-5Gd0|ےWYВ@&qJNu3{S#?>>eA3 ='E?&ڋvqBjWPdRi|V7 8_9ȩAjIhF(3$n9U.$,!G=a}贏yQ /+pj>q?!4wc4FR(0REʩ$D(;[aUaU?c紩lU+2gN(Lo!\f"C, wk{4U6>etWϽ.r|o qxpsa h( 1Q촄'aǨ2/?Rky$aU/PQ6#p.yG~8:A\gdzb2jy׳=q%nއOei\ #_Ih˙LſgK3>4̭qbE%(j-[ ڋŒ)(%aD_`1gE!|GZY(/W;oMҿG$E zI% +cR.G9lUZVEr,חa&xGml.-sԞlbOӆ+1rz1I]DqRcMUmLC?Q5t-XU(Y{$, <"(" *^~~o?<s,DT,*FQIc$濣Ac2 8_fg#؞Eb?Ct{u, =چ]ul㛾tj +jV?)$ʕݴ.gDOI0I_$7chBGJ1 tHSYf/=p6ͭ{IK3++M~1 }%GdyKjQ@EX#Ce5ܨ#.0~osX`O/; eb7ETPR"9kg?foRC5HwIUG)D/Gcfv-DZ+Jek76ZE}6^= >!]%>7!$2IyͰjI 6P>,Č2Izɞe<W7 p8s4 F&r_V|<6rJpCwʤR[7J" gzK>JOGUkJ˿T+G?՗j3Ln2KH/9 l&ܩpޓpss2\bhQn mLD.{R>_ >RW $lB:N6=;V_!2L݃QDP&C Nꆬ[cg+i@J+z4QN$NЮWAs`?k!԰A (;,ρfPn?^$6A& 7:7)K=ޥh}4Ѭ:tgi@yZPnWNħ*9y@ɎH镟֩6#D}Y1s!1FNNyOn]kIS;6Lr9_$>?A>JrY?$~=6HxV^_='F%ti>M;8hwHPD[kW3>[qQ8/L ܇ 28iJv(x3dbMBf>i7(ӋCF9O=KII&sT\.qqbBc*rpD/ueec~t5twv"[ok͆l"-;8@m8>VQ׊e?1ͣpauq}枔C#?I1}\>|k;h!5yoD~O4S0Ρ&U" {GAX( [9c.Eg't8-6ZVBGgZGX-> "0EL@הUiT0D받pv։6O$ҒK+.85?%VPHFf)9?1z g"<ϯ~!~T]Z X KoNDLϪZ~5܉֣X$ 2EFϬOQHۧZܿg$KNDySvյ&}d)Eds:AoP}b BrF9ٟ^b ղTzHl+ziw5Zm.=nU6=HdK:iS]d|&V/Xu ?Q9Oi\4 !;ON|I|2$HI1:_Rؚ|/t{ ? o}?e 9bpJD?NGQh@g.1ˈ=M*ΩWAgu: o@Y?ؒDr@2H55aWǙ@M5~`VP, 뻚Br Zj,>FKStfG0 1dG]2X$5V1^wEI$XC@Zn؜nz)?(UȵAR R]8Q&KP4MD"𯸀A(N1 E۪\AA28w[9H$A/;|QO__g-xޒ@CD)$3:Ns^]۽Mݫ=> B(,P"!""$&ڜ=phpᵴuNH@Y$RRM5VZ/252a =ϬNsK O)ڶAQƤI]&jBpW]1}Yc[$5 vpz?6$"2koejQ MiCT]x'kS1ڠ( 2 *PR3ߘ z}Om81j, fe(5C=Y%HGp!}y`iUM"~^:$@!%QZHo`= y@jX&p諶 x\*j+t=sF c:XN2hfղ9koi';$&1ZQNL@ykr"T$",a Y5@(An*B!kuw^e-V"7TwTc0a2)oe\R'Z|Pq?\pBORJ>% 6ۼu}w{U}ξl  9GAfXYtsov>HA Ĕpe2,U/!Y~h]7zܯN |?R%;Z|LpVXUW}P=`/ٞ|L ,n;*uI I..`)RmΐRxYqUj<`kƮpI aWZ4L Tp'&Gv'2&@BpBbdLH +b\Od:3z̋$yI=8J@>Q ĕ/eSvDSvslبG_WVDZ# 6&rE:*bXP"a-)3m&XH> ^% &˨Tkɢo>]:y׼yFל_&{]T8;GP>s0ihoW| 1 Tη0Vzĝ6Q(t\zan_BN8௚s챀y8OjdGBA2^0; V誸 S+hz86đ،Ixc;3!~y.(H@n+$ E,Z.„ <ր4CdDB@y VYn E` dd voŊ,DQ@> j {Y-\$k.`eZÉYnL(zy 8ϖ dia)R,DTfS *""$øX PY&4{B{(~dc0aRePq59i^V`osw*cf~ͦ@#*O"3EO) af#L%1ԵѨɂ"u[4IIT+muj)P&q9HYhԆhĽP$T)>PcB$J81B}s 2H[U$1D?jrp[.@xKh1:71=|9J@t97=ѫI6 4[wHg!emL=}!ƦC[7cҿhw0~$~4œ#Z -nN@Z ϒ §ZndqyBDND~Pg߿8ê8^,KJj(̖`%kRԦqWFf-~<~dJGlUL L*QYR2Wf #*z1*Zqr>*%@hf#!pĨbu|8W ,ؽs&Jf`)\E6dϓzfl\䨊sGr]PPBQ 0Iy*sx#6WT ,YKQc=~-sI7A;P)$DDO Cܻ]} ک$n Ŗj`]D? Q#R(}ݔO <͖UKBzI^ +) ^.2☕FEth)d=}R1km4D*Pd`vMN@ !~Ž"a)[G,c)!ܳeəݰ0֨ !l=1UήR%A)mFp( M n$Pdws]u+bk330 6B@F D8[ @(|a5b@}BuT?gعZԓp;XG4S|ͱ~j.sVPX긿 axsW\6rU%p(Ir. _+q#Cd2Wga`(i6p_>7c3m8?@_qb֚*Y,ތ7ؙܴ4iZ>|vs'ki6 ]Cn?Ƕ@hDH.E@A ˜%8\B 9 tJ<.-ļ `a۞#JXĽq\ؙeҏiSJ ,m+1(}6u<޿3{ cJ0fqTDVc>]Ljk241[C5-@B]s|3zC/_T/Eខ8S ww>"RPhJ=JMJNKl_I|eoE4q 76`} NQԕy9Xm wj(y<%ϙ 0}ލ/J'g6ضX՞'  _M"⣪FyT#2,vq_L4a"H4ש3d=Je)q_}#*1pъܒ}R@@HIq/E|)AC@)yGu8M5Q禠g=fߖ5L4f:TP^p]M;=&˹S5j~ŗ86^q-gx3EY5ȡE'# bbęZ'Y23y6'%O3o +/ _Lj&=7Ny\M==qЋ(&Tzj=o:l­2,i;=>TNWʝh08r @Ab TBu[7`(]ap]$w~@q&盝h9}MGc mQF &w)QۏΟFJ`>[Yvy> =QP drkW׳`KVSfl앎lՃ noU8٢BgU~W}j'"ңw1.gUiV}ȓS{ckdlH.DLGJ^邍>k#B9HnPHQJ!i{.'?=ʼnru / $ߝW݉ܦkی2y_ΰ LF V_B{-m&Ѭ[˸RutgT)LZ)v%@Ȍpi<5='6>~Q.3Mbth|U|=*eh_3;N<Ӷ0ymxa`,fFc=r#F5`\ qO`!(Sb * qD@CM;RR^Y `OSQ]oVichW m[f=NcR|ߧ#VeI"^_L pdޓwnH/d{7jQLádkCg$E432tl{vl¦}_޳[?pyX;^ JOXsE߿ J$ع_u)l ΟQ&[< kF,@uܾ_ 16HÒ46-oH3dZ F(/m:.+X&{fnv[ȴ?t#T[ )W?ɎyWW;M;GQTJ>?w (Ρ6o\oe6N,nJz\ztz"ޱ&\Kp'"bY+=O\:V _ 9؜{g Qdn/xb$. G, F,skF&N$1|\Cz_DcfFͻbj 6x9L"v F) gt8.ogkPOd,~|_W#aGsr.0:t$'";(u\_EW>TIlb}rtj1e·V*xX^jX%ÜU4sܞfy"[%S~o;x^ o𖶋R:FB`hp%1H?y0VR>ALexx>{MM2"dQ+Y[Hy>&px)eXKSMو%uvÁ?j`PsKp+O}0 N0I>lD3Z?ϟ e  H7P[;.Gqr}>N`o Em|(/c7/ç$f<&Sy1{n?psmؤp}_ X <#>;"I6$4Y}nd؄\!=@筕b9.@-~O1[\#_&~8-| S W`˹_S'ktnI{mY 4YQÁP?5Q}H \E=rk` @$P@T$-s,;J7V~{q'g3NrP j2lP)$n ~^†xt4bqz16P)WwB  !aFI t m-X4߷aN4zI[vlldTcK̸0 T^O=/7}b3x"Kw1b-h43X Ut&pkK8UpG\ 2Srv3>YRkN_GXe$K9H9m'i5x*o>A"<] JmvJadVc68C’D #AȘQNF!@hb#&"IB]} X]EnӢLAr/UwXY(:U<4}$*w'L `ЋMs}&٣I6{uAe= Ң.)M}fj;PY.gEF0u\T;xTScAtJ$* ~o³Frԛ<L&8N6nw5»^CN/yKyt5;\vHgRo՗6^ |T9[HMte~LHܧkq?g(8Z_17|Wպ |#0cܙe^_͑Y6},5!uK yY+g__LnnE`ȪZCQA26x'3zd+IGN1T!a߆~O]o{ϖ8BSdqhh>יJPF L=:mT_ҟi/ꎘ+[TKԼ$/+=W&`'Ec[TR*ֻ{.ʯu8%Φ +|O%SE("Oa!|(=$%&/F5,VOO=^ԚkS2_ҒS)%W(qEa'h5c_mY콖n7byL_;x dfeuBr%}]r`|ִ 2HvM{kK?_YOUdܵ(IT: B|/-l@ΊԤIP&|e#YЏb)[095)95 $1n%C֭K%kT侫FAH^y!XQV@)0Ii)٦ο`KZrv4@"KbK%REED` %bI) G[ KQ"4wEF*vݴTAUaV5QBj$ןPPp:UI*ם b{_0n܀ fKKAnP.>>*$$@e:|$.ش9g]`s)c泲?5" "sqZӯҴ3 9|9yʣ ZfC@D,Dg%BpUP{\OS&J1@A@-Q"- {pWƳ; K]vGwѬz2 {z43C1 Th9O rF6BX09HFrB!eH (Z Mb=}@u]&\Dc% 4C*E2$Dq!-u!s4%vDұuTP5P,f?Q4Q*aݠ4[\هwτ4dop%|{ܮ2w54Q'!4e2h_fz>9%e3~oE|nu;OꤏL/lٽ%~*Aj;f-@V6$GBvVnn̒>Bq5ٸF*zqqD|Jo#4,&! e']KG~|}>~ewS_y{Y<_{;,xIFOH$V]E!/zR <5 ޫ/IP9YFOpuPP$ L]>n,<?`j< F7 (SJ)jve2ζZkM P[/ߜ:q~Ɖ&"D0:W!!d>8ɶm4]eV@CJ:3QTWc3I3lY5]7A ZMu+3 HfueB_F]y`̀N;Iz-GN9u3I宵^MС:dDNg~'^oIbX66k,+(L Ԕݳ69ߗNmI$ʑ]ޑ#nxۭereg(qr;,C~zi: [ KWx y٘g+ o܄'t [O_PJG $?WY@g_ǭ"0քT S=A>ů#ÎI,7(9!FFj@;&*FT:\Sq0 ֎UCqZ6F(T9(EPޔ= Shl;( :t)a=`.Za}րݺ2a\k'Yº;Q/B+H;W!Y4$xj;8NCB@LEbEb+!wq:XuTElp:O%v$ ƎWpN$pȰBv(rm=VhFeP14n^d`[mN;( LRB- UE *8Gh(bK!i^a\Q pRAz~02ϩ $"PjT x`Zswxu[왩 2t{ir?dVy@"r* p+Æ +HQB/٥X1#|\dQΜnr%Qw&!DS=˻QKuǟs){~4t0݀ BR1VQE{{Z-;16 r2F7y34ByJΪfbfqYzȡL6<οA^Ej}? \j A$a;d>oطGK'n?fPrqjsgdOu滃Snw.8,1zvE/0By4^2b{AjP ,@,*dɐߥ~nѪqLd3Б5p`d"pP.L5 !7:Uݜ82wY!HY)!jʌ3”so?R@-PZЁrL O $6ebf=QLܘ5[)Y% O䰉B}x 6r*7";!qlRع"6Wqf*Oewa䒯[X.n$m(,Uz,82 }n.N. 6ޔdh8'I" muGI((Q$41gRͨUGWr"%<>zըr[@fVi6^u)Ȳhr$Iu* >b*Ѵ{Y2זn7;b::rWo6lZrq\P%)3@N+!4g IDRg|( mUhhYCUV(nJ){2,?<2& h?e\>g9KcqK5bן u[[+?"i pF1hB (*b}6` IT} yX3Fj"\ezHK& ?+q9M, w[PD6pho~" n3K78\ 7*:]z{?6z͍!v# tG̏kaScU w{2EYG_8́O;\20WK%X+xcч}9ϤK$% Sh!ӯrے W,9UpHpٲR_3d<#`q>I!0\4)@nADZA 6rȃYYOOu ډ&]r:2[ͿX#W`.$Kk["w ({ q""nH{0@]mgL4fL- U|"R *R",9Eߗ8xZnܹ;-E ލP)갠0D`\tpV[QWǪyߡlLfyQqx`% dHy>PUژ G^P \rִ &Q!{n!pHINuCf+梿"7I9y5t&F{S${l&H 0]t )Q$2IX7h7֩r]DK>:`,ՊH+k89^Q@vyNln'e=`)CYBdAl3s) 1) fDq&՘x>sb,WRRY6XM6#P{0feL+r*.q ۝ղlKؘv ˉTN\ׅ>}ە[d*'#4X@nN3O,5Xfj1=0&EjStӂkSjB.ym5K2nb.JbU qpZ qx_d]SU]|O*S4UY8kL/C΅a[A @!Э]i1A'TGzŅ&쁬a0R4\ #* )7*EZĺޮ]UM5@(ac& aTc!XQŚomlU7 ͉0ӅHj"[zbQ<.śQ`&?ˌz]wf\ 4IxngF!4ڤR|MUk Eq"l4O;.+xx%,jh@9\Ď;d0` MP'ozǢDc4H%%ӧ>{TizzZ$jF2(rɭ` 8bhT wq7%sW9v_Au]뙔sмߵߐ z8qe&11y, X RCjU|'i?E`)k7d3p0}ˍc܂NU~xOgjc-oLӡmLù,% q$ ʅN=Y+ |HX)6T5GfFh#ٖP8HnPMP-iC-kr Hjzk4Xb$J dIEsp3|ϥyR.ZFwli1z C~l %k`r!dL 'BݜLqCL9hpdB|811gK(;r-J`h)+_"2ɈLI T"!8Y MG@V#:Ri]+!cm1%7 QNvYa 7zِyB,s^Kޠ[Z5 *{^m1%{8;m̋0p2̶MZٶmm2K'<i6^تo1I.5@*51>HVSsbGf-\6Ήr1HE'c⒨imAr2MwO ԎU1e!(؀!^s+|[KM@jC #moԣ^xL8 jtXCS#CH@56d{B@:S)'q˜ fx7FP+8܁E$Y΋ljcğ"Y$A!kMQ#?j9&)*<  -7',p>W,"E.h|3{$"!w@zwn}i:qdR׷a[F\ӝFJ٠iZs7<ʐftLZyb&o7]$A}b"5Lg5Ls]$vm5gnD kV5=qi^8ϓZOAف6iO%rE f[{7 c֪E~Z>vӏvGiըLtvY!,spI$BnU#8gElqfEJ@dB膇h%A]p. d쳓ߕYh0_q$b.cFr@dE*U8}53^1 }vBJ9q!ux9Lj$".RD@FmLТ2b 1ib By!:@8t`E*`z3x砠IH䲻|H$F`jd:S0I" Qfn[L̆`0c3Q@EXx`X/NJb1eB,2dH! F BS.BK2.}.vwfP":ń%,!$ʤͳR>YOB,ë_L_ՑVPSvY.77&d^k Za8O? ݰYhahܸq/Bǘ.w8%b%$UKQ-y BTBEXAXn iElQ7s%8A,ÏwV2Ud=xa|I߇.ުX/PA+飆F8 y jbuųi91ZV0f1QH2zL wbA(0sbL>N?gk%DTB>"A-Nd +,bS@ G3'BKZ v",g ^c <3Z:e!K;(B 8qG{4#J9l,42f3/@ 9kXpA5* WATpQDXJ8^d նua P = ;$ԅw$97!й=F6j/0ZpX*(I$8@B0$-$K&!BMUVenp\n:\6ǀVBĉhBGKsPHz؃oZ!]Za'vPpqF(?g-]?SXl^ %@W 9 ȓeWh~_|@ {GIP#ty8צW_{w XCT ,uo4f^+qMۛf\^QtZ Lk!Od}j{g!*FiqQC;b:tCV%zOF#8tUNΝ^dIGq&}qYSc(HB@BRF h>CqPdÉ2 I-/mc<~؝oM$@LiW3 0:B řh kujBfS<'NݗL=r1!~3ZR`j%D6KGnҚS2"R7vcܭط@lsGZt %"%v VwEҡW[J=A7g0S‚DޕUm&NFUz0K6(#ӢV)1Ya1·_-uXnnIpǝu~Y>Ey&eJ`q_89ɱ!\H--U 0iT*3:kZ@@ \mmRju٩M꦳IҲ<fcc KFM 3!I  /dB=rRd9& eib%ѨfT BbXIE4!GJv=xbEVP.~&gt>)!,)se=]OQ"e[NT`b@'KLڋ=5ˤⷔE+kdtw(Sf{NHG=V,JEǩ:MYt5];Y_Zhm ixô`Cmn(rA Ok]osLY;pʲ@5HC2[MohykX0h%Xk l2=7J^܅žs% VPw= ~ߙ}ßqMRkS/@9{mԳ*7m8kSCk=$pBTʉAgUǨ %ez ܹtTP0"7 U~ތQnrnK˖˞Ah H43XLlŨVuVWם7OeDR Eʔ ٿ-zY#(؈;^(>ۉ;>+1U^wzS'!ɹӬZhsI۱=zU9𻚙3ڪZd g+m(M/ZЬ\Nȑo~S=Ө HAV{.=zutsiEh@u'A:e֕H0j6- ha0d10,NK&zw D.7>gMlZ*+m c)֣U H4g6Vb2V7ŏ_J~m5/=j=H!Gf)/#f$;V&FC=,dUˌJsНj|ġ1f"]kJso5{'bך7룏8d{1 S;].r S9o!jDPTiJ%sWPi>)4ccw* u]:UK?^AVMV>(婐 ߽)q.t!UDKF C IS _eau0(j+Ej{ )C5hIx-tt2T4֯LsޮF2SjWՠf <5Y9P5y+ lۋ!rD0!6#@)MYr N|7v×V b-a;4zV^^-Wo!ѫuhbzPpv4*H86T'Hv iF;(+Rqj29X`a| *4R -J^)mZŊEpuYr25)lii&^*@g-&FU .B & O-F9dHmM =[{!V$”'wqw p y]"͈ۡ4_qOXx.xfLӲk,D; hJb\o+XH<3trД$#q$h*2hAv5;a>Iߟ.S5BC&Ncߔ5X>3H(,4}-Q3 UEg{3 = TXLV01`7QP"ccD-ʘ0ʮ<3zׯ W7d>vfՋ@Aԩ4PdՒlCl;Hv 4dQ@4֍1SӓJ4IzHVm :kBٌIQt.-j8#L 7f|@6Fd-4gITqD~ 4Q&0mU+|b@g ya0DdtZd )~sЋNuik]$m,*|ô0'_rP?PHii 9Ha"~we&%W!KЭn&pKf8T~@@/5lGR u L<+u/G*:F(hGcL6ͪ;tw5Xܶi ee dЀNN ۴S(QKvz8/Ce\AV)iiǢ]m7Ń.Ō@8iT)hCA& pQ 7Р &Z#xJՒD(PElTFVQ$]:N3m[B2̺9>jW TOˇ ir2T\;q9X;[q8!7rnݘ rD&eXoc׎f+q:X0B̆P8<g&`el dc0@PecnG֗k~υ> KY/f o-y&`+N2di~i IƠTO6[)dL(P`3(+s~ISpzO<[-0fk~ Y.˟Î2F@]un"B)pJA(Z DHa'v P +!X1ܫA`vI%)Yzh γ Om:d!aFTnѥRȲȬ.`x @(UH2AO(RH Dm"u8s,fB|?_vӲqP4Di^gl@tb6X;Kڶ>伦ѮMIoFsRb;MUIŀv )L8h2}}q~t*ѲBHK4?$B" ֚Cb$l#7@f HLvyB,2(+{8YnUu#Ͽ\5/?>K{L[1\T*wt Aa+#\jedfEEqLep+LuTZH/46Qmk4R1HdDv 8(2,bF|>~9,ϥ9|BW`LMkS>'as:30WQ :9qYNt-A2."rFoW͎wiӸⅲ$}~WS߭+mj?Fzz#9d7sޛҊЁ1F͝=Ra)""ƦZJ>Q4] qS hd%H;YBA] &pu7Iu)*xf7T3#!ʶi|#u66Lm$e'zmg-z"!& B+KpӪݻPdFX(.=CGHt|߷vr]~p1 @Gԝ 7_x9n D GQ!ƳiqWr6W:`“]°7wNڊuQ `0v&MXpdpu;:f_ 鮚!йJ,Tr|.-J:~k[ak]8s.0l,Ʌy'0sOMWq=oB b'/[Yh(\4V4@22h6?C<6D X(_EVBa8Ly^қ lA$Eو˜. jm&*F 2 G"g[+"ﰗ9 8$a֞UN ˎ֝TL K:m\B.}!W=r@USޡiD,G\7bsN^ OuWYf$Ҕ6ՋNqzTL^YG $z8á{= :2VmXx3$SxT-h\#:s!0X^`2u[rv?_5fz7sBTr=:obo𨆺wHʤ<6b-uqg@r5~ݻ0E7{6y楞D4xe2<}{뒡T\A ,5Z#2N?sL&TTUq[f]6~!iӞѪ(%>S^xmV;WѪ0 ,,F(Q:f(;gt맓g*z!n$*Yٚ1uuJ0RafJoIaHJxӇK uicy~ծkhÂ{'^4Fjyx.Ǹ6"eRcuUl_Wp+M̈X aKPU@cf--J Ym3.E+|~tVyT9U/UqVƒ"񫌀u7\JW'z%B6WgtXDoU fɄz]#82 MM/2*QTEި:jxJ [^M(9Y!SRbceu)GuexRbu ]F7bd,ٕ߹PHCNB^Ôyz2Q&TxO(M uΒDVk&I2f OaBf&jkUڝYkOZxFYg,e8C:!SD1#Ġ~"+YTlBT(o ?]kpwA/;BLX/}d01r}_ g'r8Cu'yYH_MM; )j"F13 Zk2DQrDt]6h*~ny.H0d} w:@~>d?YVCͽVW)y~ɒ6S.|t,-!jds@U> $T FN0X"?B{l̀+B Yrd֒e <pNϙ 7޾N\&  HaLťPFi-R0&X}\ s0H1n9N7Ox]o2dbu.G%uldHL UļRt38cS!l|)T)ќb y4@Έzß`:ĽYyWͮ}WC?_۾um]Xd_H^|E/J+2M?x>=Z܊C PA_?Ξ c~svM byM[|60;b=Ƞ 4WUꊱSE!Q+t2Ns<>%n4 ڊSNtX$O> pUT Dtq'Am2pITH:|םo d]Ӵs"iZ]E^* ʬjweYuVxI[Q~/j.h 7zp= I%tG 5=!`݌ZVD] r; jEr̴TX`HB,z0x=a$EWeYI]}gwEyMnӢy㒈ڔ)2}U$<) n_wし+&O @A7QI 4H,>')2UDN0[.4\^8Yy!IrpiQ ]Od%L^쨂ae08'v*@Jqv:yE(`hq g0GPuVyJ}OB."'p@uoa0M}3B/ӒF>J.E|!0a@`GmTfA;WC1o 987ynWe'eg/g'n鼺XuU  H.@ XhzLwF$KF*9@ ^Ԗ99A#=͉tF["!aHPAGS4aidBdvpAG\ojE;$;KØ(q%l\X!} KUD$ q+b2,& |H!FA7=r vռ, SFfEqlɌcx{䴙ErhEd 6?S36 m݅3Kt뗕i*f"'yD'l:)FL ۵#[Lc'B%Z2|ĺ"~'/ߵ+rGƕЍCۘ쓃Բg1oZWvMF'kv}WYӐ4.7fh1;4\`x : _K{B~U("D٣ PСfK«<%u|ǪVW `cXl>$+w $LK~EPhj-8Pf`SJ< '/H IO}zcJQ5Lf5hlD˧_čVWwQ&~NkóG+.^F Aז&`|;W5˃^{R98pUތsRz_F QWt@Ͷ= dz59Vtcn#&Ag#MܖY蛦i2ug殯qDnhP(}"=o %.UG?;Լxqh|ە$t\y eBk+՚3 iIqcAI$tZIjqˍ{BչR<@NK.6w6Հ~g5}[]@>FIUIhDf2-i42 hFhJ6KL](z,`RBNEEDv_FlrCm/Գ2Gw"$E,-R5 횬2f _8]嶭PagXRQ/顱вdA,C 0`l/0s2[|!+Թ؀ġW:C`S0 Hxvc[Mao7;ԝHHvmFاWtE$;dܢ&Jzz`,U/)gZy.Y/am L]a ʓ I ˢɥE,¢XXɛ3 ~K:{Ո?@@7ۧ'Պ)&l_A Y4A~q܎X. ӧƊ;o_-}fNF,ք3(@ړvT#0/,)1< ڳU U]ct>c>ȰP8hdW|j 8jk'Q3NĎIoN->~4I}qӬwDB7jOd<(9s3ۚE}m# {=e?-w`b 0Es:y50Q<VY g0&nJޓB^+JD!` a2,@&l1b:b 5Prx aE1O}Ӻm$̶8pg~Jh=t^^1 A ֒`MkC2LV5u һ"'^?tD GNMQ@׬ S1,H7H^ܺ[ZYGV6iϯ&NfrRqsxyoKu\;s__4F\qB &.ߧE=>f'z8b@$Os+08SZ nG]D|7W,}r(3%30ș@ !5ArI@@ ǀ_5kyIdb"SLg\Ȉ!7pvףn/58`F=^8>!(hsl|̓z24txPa'PNȕ"*[$T 7*_=Z.5מlcz!@'so0 ?? u589vFk$m g@+BR_=]ӟgKve霉9\Sy[95pB~VeAǜHՍ,Af`ؤXZkk|{эtJʞnheEI&pmP> }61!C& U 4x[??☮Цʼn17v<"`*Krq= q"fݕ_2o`f# BE Hfr OU?S2ҬMOc˔@qPF-!sU*1knN[}dt /a5{ZYٿ3 t@q!*(Nb2{ُ.qrd}n$УucgXN)m ѲTdIeɀQtraY,{s M Ya3Ws5|޹2 C2,3[^NN M>O~7nGAz )>W ,駚IJ",.0 mCR =k:҆(I9R]Qe,~R|ˍB;*2TB6 Y o&@0l*J`=h^_ްm;bq#H ޛ8 _F h|JA ׯTs={Z Ч= ^9";dR4臝'stX4~;*,mpܲ SiD:읚9۠@#?9!wmQOJuI ?}_W&U|IR/*OaԮx.R &e,bCon"!M8H6Ie)gQ<ߕxgt:r]+U@(lN//v~8s*qF0@ A{zGS5Ӯ:6r<ɳͱb j-TLbHu\O*ZJx|ovq s[ "d4$)sdTRgT|G57д%Gq?u}f4l׈j bq'H0ʋ/6Yu>26GuTkA>A$mOrMj;7Uj@d抲۰m(U~ZVu$؃,r)@o%aG_V'«HEyj5wRu^(%Q ʐcӔzN՝JsT"bH$] q@[^Gcr\-˻'-'V3x8zSC6vp1y΄fm+T`I,1'~OAhI5NXxYj0]S|(xT} F_7(80Ot1vm2Zw( Hr f@EzSmnNN3צXm0XN#dEo{E/ "-쇊W (}Q3V up=כF>bM0`'|ӓi/?v"0$ ^!-Tjx'X&aLF"i~D!.)Ϣ舮]T{r`0& HY,Cp0s.5JMo+N}n|© V̂QAOrd7sSv1x4z>k1CKÁ'*4m,{5 mw$Ӫ]}b<=d[VZ&sbW$j%6E-]zu" 3&17%Acozwo;^ĺGo }R }μi 2CIUb"FƖV!g{ۑ2(8[ S7>ȺFge%MLU* u7uV_hiXb1~2pPje =[6>§.-d,>Q0ǽqHkh,J(\KmJ&g|"R¤^hKϷ2q֞e诟*=rF^ݴ~_ H1p-hVIRa8c*tXh8^+e I!V\$~_Y| kZuĩ> B~ ߺ^BkeC3A6YdMeę2nV6zExaH!;#KIl`r"B]􌂿7[KHkP9ٱ|x2@ .Qh[ɟJ`爐OM 'R|Rx|ҽrLt*oNǜj9Yvg]!1玏-tҁ9%7#νݻ.9|ލp*D_P.&efX9hQL&;øD4T1x)1)QZ**dS1(<}xnIZ8ȫ(TyU!/mblV[ZuJ2X"J3I O$:63-O__KW0'1q@ A"TX/o>*WR~x>az /,n3>gr}0 I] zzC</d#u+Kע7^H +48.& &7R=;g94zA$jMQ$Ww]p\-]Z 2Q|(aCMѢ&S:Dyv֋o>՘A kXP[Ot2;7 ΥB{jb'W=.#!&Fm!WAw1VQPx_駺;g.0DӞ EA5<3 y5~m?+[Ɛ|ㄧfP;|*:eʩpC:">(ӷO&}%DN3wYb;.=+}66O5{^h[suiGj$6⧟ rd]0t2\<9mAi.&>L[LhAq'p$fib)ZMƒ*$¨+_dn9T[H_sveTlw3sQ2P*k5E$kd37`?+n^jsF`QƮd""UhGMk/l2o9\!n](Ү`; o"p4 Vʹ|!\uLDBu~ns讞%(d(F/E!huUZ+QJYjԖ Mr;ˣ6h7,0ݚ蚂/M?O-βFyiB2;WK~HNֻѬJ& ֎$pd9BU2-Jb5d\f5HLkX vdC*}D"e%VNˢ^/ߦ`+yeEPPsڰ˯`Ns9pH>7Ғ$%6 > yƼ5dd>j]U@?h]}xqMgx/L=E!F a* QzF YSXei'M e7}_ S[H)27 a%/ Ņe!DG"iI7Ar+eۊf(3\`LG,mLY}dOǹ/jd4h) R [+ݕO]yk]ҹ](2 i>nUII"I5`F"5SC`S$xɥ*s吹-9?|Po=`8wX%gpz}$'-O(y7T_HZdzfy0AlXfT:A߽a,U# IYKgBDz:J"dQ!`5у>7tqk|RH!2[(aDk!D_ÒXbسF^ժm&whQ'foZT҉ha`n8{"WS#w@'nz"jr׷oWء_g= NDtvTڄp#Z+Tki䋞#헗8"F$wpFhlbZ!%Ŭ{dkZL ;k;wB(bPSNqI98&h\k j-d)ܓ'P6'$OgQ5(*b;J1Nﺵ#E )RO&ISH(cY3P0XctjcF1̩ A4̠>HB ×XCZL -fEzsJ9-/*dLFދ7XDZ;6+o6R1DaU*7r[fF 0m VY|#6~؅'"xճOL@4xR5&eNK4׬lO߭2^Jl*2%u*'^uuZÅh$BKF9YmW,7SӵwK-˜LֈqP- 9'3Aҗ5gyX(aFOog^n:ڞ>떏kz9b㪫y?m2|j_) YӡR ȧgR[t#OE29hHqZRb+wVƂڹµ[%1HBz]v^w~%m_)fԈ&a6NgTp 8F[ ;)x̃^AN#U* -zp1F !V䮊pU'VcǻW5쟖ooD,a&nîPb&cm\r=MhK8[$QEMޅZA\ݵk0aK#hr߭~8sM(YD"ΆSe3ᡃL7tN۽ge*ˮL ZBhMJTфRjm^ >7a l/ɭtw@si(Iyq^fXh(hy+, (':hi^.+B6ENn!GHnt*=M'oh $(0R':&ta̾ߞPj_N^9Z5Ʃw*~{7i"2 J!AQg$aHl ?ir'o~6Dfnc XIㆽmHKU)z PBD7TA ?qrLC&*k!n\Q |@ t,N jg .A$l@W, ,'_Foيt\48k&`l GFf bE]FdL3Hc3"•J^k(If-FSqj@\"-r 2>!7ib1m !֥ۖx*0řa;}E3^_W8BJjtwa\q OIԍ* ׷ a\3Id&h&ۻ\ l{:6Lb4SLG_Aȅ 6 #$A\7Zj,[s"!HJ pxbXNJD >OU/WEdhi $W46  I9&Su5%ȨҎr{o)p_ak6ܫ?Y.3eP9P2>.{LBl)8E@C R:oa';:ѫ8`׋ RNSK$ /II.1VNܸ*V Щ P8v%JSo;%eB!Gj8M(dp86k:$Y pBܨq{Ÿ́8҇uk MKPnvO^Z༇P8sCIe!W@"eQ-se7y7Q=39Z`,h]k^h 6]Ln;VLz_zECmPZ ) AN QG{\pL_u/- Ib.MMdGuc7qDjڌbF(u]躱F/Jwde]t>7X[7^d#g}-HCל{{J&y!nX!rxG;ykS7q^3bC(Tv9O-,U;":ymM\Q8?6Eڂ OhA,zWMh.[IZx'^qF @ huD`\ݎW"6 wGhtBu dFf37I:`̺닇KͽZe(gȉn'AcaiidT-X&⎍aG~+\m*E͹p [m5U?ȁOgU<$dP&yӚӮֻX\iwErT .8@`"Vyyr;yc* Jz FM7Z&YagaLG_W:.N8/`nN=YγU/2XN Ks?8n~1NCGԈ"ƚ2^?4,үZr#\^1Vm^Kb$v ުȆ8^}}EcȪ߄F/7ỪIY?T'Jͧ??z|siV;H h+rIyJ/M^Epp򊷅5&CI8u Q9w}`’GunCf$(z ,D$_֪> z?pVa׻Vfzcdgt;x:PVI\IA-S^0GFB-mVHu vH$OB;aMjA#LH,ݨ V턠R %a)BΏ}c=Hd}xϑ:SN'n3VҢԨ$5UZ2Au?v,m0h4Q8lu6!7u8kڞ"DPsTxΚkhWС+^$0k턞'+IqJ {_)r1FjT~ :Bf $;56 {/(g=#ԎduFpPy$Tm|@HŸN #pb*w%DT]PJYK"98DizT5ӱ}'w,q{PdQw!3znHqdSVŚ҆U=]%[uQD+y>C@+M`fCq4YE‰5)U8j+U7lj,jeq 6b6DW]ŵ3KpZ3sMTCGA]#VŇPrA?y1Et~!b*[0Ba-S#bz+kRu|+ m#,U(ԖڌEaAԌzgo?QHL^TFq&x X";,,r*x"Ma'3\@)V\XT$ߩo<݁%&ޔTV]s,_ުI$BP6g] P6\]ʮxyf؋#Ly'BU}ÿ́dt"7f- HƑLN9>3hK6TWF2H"jئήQ=a'skk\]_ǎ{\Av䊁?4,OEJ @onOa2h+nd8A˳}Tƽ$ 1~O"/}B@dÀl >[%DR S HS57" 5SPNo4[N2Ʃ8Bg5JmP\D]m0՟2 ꒮9s/r+ɬ6ZMYf 5]ntʙaDݵR,$z$aPQQ=i\=OY*iQ(XZ*wPMJSU{a3uuF"g+7N/M/Ez06ѡ!D|~q_q@de.8}i;HUif]yLJ{~1~ GB)B`E%A6nӚSy.[ɖfZ6R/" rT 6f }GH߮Bޑ`/w}RJDrژw {^qba56ąǛ!`: _y|͐ 9)GQ݌ 8C׶ɸ!1|^, Ր2zjn:^_giqKVn 06J&vq{UysjQLuh'ݺUmc |qPrfqugOS^vTPcyQbEh}>_N6Ge?f/Kd- lbKD޸_y۪ܺ{I"* 9$Du!^*)$c.jiHΩUYl{ p8kJp :EDLN?_G/+rUT2jG"Ŗ DNwhZHky2\'َzEZڻΦR뒭Gz,`0B#Ak dD41#g^֋ٖE_#ldTI>`Yu f? |'6VXnN''5gY~Xe'd"xlc,4QX@` 1,I3#veYu 26;nkfòEݩ"/8K}t Gom$x}osJ&I֒FRlgĤ=bfB sA~pizYayQNȴ< il/99ޣa-OV:nP%I}9R S i6 rBC sz%[8}{(6 nɦP#.z!$J OJXnd)e0+NHaP,B5PFg$ߢy0ReK4SIᠳⲐ1.iל\Zn#ɒVGtS,sQ"L_reYf0hоkE`6bU+X*L{y4ByMVSxU& 7nOli Nb\,ء *9eo.>ldeƸ60#rҙb/PC[av0;VåG|VA`:R'xk=]aRUk;Bepn+ ulQgY7Nܥ!uх!-zތ}29V2E85Y3.)eP12P 0vMՋ_$[zh(y7Y2:*;ݬTő; e>䵐 V 8,!L97Q2|/kFs.](#o 3IDf~|fDP2ZJ(t1JP[nR300̈ŔL)-hpƔ-V- g,&[&Jfn˚>lٌE 3A0ƀ.gsRM `U!M{nO'tj" 5:gtzB&Ĝ*tFXLeax^y4X:pn2}rFV(0bZTXHm,OZO]|p;PKZ^7U8 D;KL$9a <"5t#xyWe 5Zݒ*Oi~ifba$x@f 3d–~Q,D@᜚ޙ tq\fVH:HLE "s]# ?<ӌy۶[{(pG٭IPN |%sDDf7 'MJ䝳yaʸXMilSDp~,xͽz<`J28J@x0RҖDרU.hn"זa*lՐSMZ\C|CM1؇b՛0'C[u Y 39㧊^[;Ih# Dxц&Be,&̈́\x2բC>J#TsRTn1$ESJu-1@5\mo+{9ĕl /8B b"xi])&H!bLKQR @&W `z( Z,ΌEAE jaP:%Ԭ2)F%W[7mX!!Uq"Lf f`6ghGQ}d)!įRuYN0/#m~W_?fCIH;7E-"!c_uᅨ}g{˽:a֑*-{: ݻJ31XtJ.HH/(4470ʫnj$[filjLVwjk0 PQ+ZN ?P Hv7G y=L1i!wd4>BeՙC SVSkҵ7л`%wg msPmDXpjś ɚ4GTpԪQuR@qüMSѺa'Ѳnomь+tnWZ4J:qLtQitܪaT7[WMXAr$7Z'#!(JAbX!Gơ ( &@K90 J{C0a4 ct,\[qDљTYjSI|*[$0= >e+pg3vd!Oנh뻤" 2t&u8tpLI;dFдh XJ)"([5jo1@ qʆ|U͊$}@5FP"&TD5pp]LP 0 dB(MIh i H @ѐa!LHR) RH 5Ce.P Qʊ27E**Q-KE 0E + !|Lp._d H %ED[*qqmW"+ Ȫ)QqTmR袩("P* +** /<*HqwA%r)W _l^+~lb@"8TqoՄ~ڍ?8 {< ˇiY''hj3lKB)`3-e*'wAIq03 B8*@9Pyt{*X+cF|qFRp.^nf.-dN.bppJSo}?yeN C[Wӗ\'wxOkqp3:;m%,>gI߳x2]y|^Ova/aREЂ Dcgզ.ۇA > :gcuT ㈪  b&y~s}S4vyl\1z_~]5USTʯ!/ݤzܸ*6R>г͗yj^C[3auolj>n (j"4ܧiZ]=/[CJA_U}$c 01:}kKĎ.K,0tzS gP@}gK_=Gaok|Uqko﫿%Z 0ஜ6s^5b۝k_y3W\Mʛ3^1  `51Ƶ!d92'} تb䊂pyr7y둷0 3l{QwY M $TQo"m/Vy:EN'>D_gMLs}e)C .PTWis\D=qtz|eQ qSEA+7Ap@T (eyO "wx'q_nsAC"k@A:ʃ`q[=hŦ;~H@@w =~Vm-V7U4!_xs>8 ~>X}G_ႊD>Q-5|n".")@';Oo-P(aGƳ^_na-\/))C{PD8Ȯӛ 8LPD51~v68@@ʂ(5*)Eg2QUJXH" VOA$ 0PL 2 `Y !I?ߺJh?W@$ a5 $ 7E.%_ Q=QD`{ލٽwo"P#>~19 򶺟i;XAҀH"9N۔:8" P_39-~ג6==9oO|ejP>4xD depA]+@Pz_/cd=VWQ?qz"!Y@tT@.R  'מ;K[BC9;|HoC_@P*/CytQ#ogt?P_wP|0m=̆wz2*!=ðWCW@u<~b<A?#wP_{7<&gÔ%a?沶yYlS[\ t: (~A? I~?yPQGNQ._E>:E_Vjy{EIkg|W ?'|O}=p(מ:;YEDE6z~pxEk}ʥ~lA{;zJ#:"qPPs">K: o|z^p+![ ӡPtyPw=&;ݾ'_C""H n 'XMU]҈Hesfۆ~+} Јo|з=<M׾/um@6:Q rc=π[sbdߡ> YTA1A4]d~v_=*u?u^0řݞ@KGϱ&TPa_zJ{Ex6TC&D 0E&W!!ޠ An ?/GyI'{9x8JEˀU߬=T tgYs"oG݂ TOb@d#C~Ut q_/ɨ`~{1?tᢢ.W?ӲtUu>{_ >_kVvbx޸{5Ew.3m ;#SEDxHCkl1>ߦL~ʜߥ7ffĺb\n]?j79H|5k8`:+='gJ*S}LWx =wxr#5|ECCGYxܴDOe](;}> ސupDLQO-8;7S`CŐO#~G5fĆ{P2AHDZ,$Z!f䜶QsvqiprO1y> u= ?>~P.oиG].ކ( \_G*t}#ქNr1s<oZ  Du0w75}[XCQ>6k_[}Ӏjl_П6(zMw_<]!lS`?#&CK|2l/vdvC}m/gԻ~2yOLbV{vY\29/' Iq]b mvD j>uX5Q1DC; 9y/ ~K@~칻`p_?ρ}/߂ ዿYW+oBτmnx^m!H˾FhGă(!p 0צP7E4 'dBNz~i$A l A/6zQ JsDDX7㠆9W{B*Y.Zۼ=Ϛ3+P"d/'e~/u|;*^ ," _@@v>pY촎7eNp"\ލ&I`B@Cx!n$4V^:݂VfP`>|t~h"2N0EZ">WTy b$$H@A4EYTGLF]37}O5--X~Gx솙őw+Z-햌B ɗ|d1ZFJ X!2+ @(QG"c>[x,0=.^[dt0•1Uf{(e) !D@u]@Y͉A˖\^o.-15(EU*lP@o&vcfH#LDPD ((t⺔X.+ 6|6|B*e dJ}٨"^8[}%w:tW[/  >.g( > R3IXAȯrV*MGĽ4.3Ι6; }</d(pEli ~0h )RLa0 Wx.,Ruޞǽy|9"u$?T5oa$yphB6/%Ǔ!L3Ek9  =#Xe=,[nD%/&orHR}$@`XT \fxϊglP#Ieڞ$bCfbE팄.( BFVr,Eޣr1?~^",ZU*3vkZF00]A92I<׊)!әaY4a\-$Pxjebd1,&с|TYq@B "C d҃,tҥh&wF" 5dd)5lu59U}@2fQsbР&H5"CFP!000`Q0* tSE b84b z HHHP3bG* g2*t@D4N9۾_@34kQыH"qPpE1D52D@ETMCJb$ CJ[.Y [ wŇGCfn.q "c=@7dw|[ !RB XP֔Lq2vUTP'L4 Iȣ,!@8&JJEY N 6J$$Y!֐N @q@2)ʊeD3 Q F") @E$2ɔҥ3 3v:8 WVMv9U@ިBI=)}V $4(rrHa! I 1XAҨd"6M~a@KB[#)rݫO:$CoJ'||v=}vP^c{# Q nOSBV*(( Hb \Hi@(&/5FH6K~9½{1='$$=Z?,7$-3C>Z JWB̝.*S6w*']ZOWEN{N t>v΁uU4=mf_8Cb=I fi^LyɒT PuO1@1T}`@ Z! ]k(m_US$ 筐hÝ$l玶5a$UѺO/ < nšB IxYҁI $a6g^̒@1:YTu_$ @amL3,?P9 ix^=6hP]W Uʚqd&‚m3iduXl]TfB@/M]8PI!x$٠F' ( d!!9B +}FC;-uyl85͛ @q|̤wAElT$ +"\as"!hlDm4I^fA| ]l-+\hEGF+f ]҂wKaGc&dQCnX&mC> X@.7Wn-$q HH3G|M$ѓebWWWtg[~@vU@6j)9\<јd!5Y lxԧCtt jD}T*&_̱P-_Ci YG/QQ<5 q^ 6$gtm**&9WQ!#mH3*`˯2w6ok,8q5N)L K[,iϮ0RP BVSBg5\*mрT9a9 գ<N_( z%D&-v ۞g_WBwlu@5{z@Z6g}R1D9O>h&! =',0a'Y$O j5}:C8J!Z5aHOQ0y: mu:qFP 4M~XI5JI$9.Il$41^[NX0CF >A3#mEuG T  pŃUn_z#a#V&Xh[$,021~/Ą0b̠!&Wd%i\N]:f93)9%8@d+Duџ6NnKExR/D9!ά4HFSKIoJ. >^[x,xjmANz\[~р%aè ٲ+= l-j':a2Is>8$$l5tsj4~\@ PjR\TPFczܡ8 W5Cњ0e"XJ$U80Y2p~6SHu0w<D ˏ":4j4^]p?Ϲ(1-FFi基#O!R\vfmW;fhsdb$ῡf˪nqo!r3F&$6d m2J4ע&j[n;QrLieÒpz;mG2>2^k(McP(Nze;3]1 pVzy)ц/q>v?G8w: ~o=v|Ccm mF_`̧>n!)MSm\!}.=9.dXj5jiBCyQ!l-fNkegCc$Jby!6yc8了gRuYPtscK$m@ǥˌ qDJoFP%:I7p/ocىhzZS;kI) < 8m%KMupR"a Sm6dц'.ƫXձCt&DJyjHҍL! d"_9|\'"J,` Bm"2&g[t*) JY`atB,(_4}%54#P=W}+Zgg#2~|ވcL @ TxP #"d0B;Q}:sUD@RB:g@[|MCXO2I _Dd9!& Ɗa9ذY-vݰ5L aH.\Cښ'>h%qGZCnn$Lنneδuw@`eӕcFCHI$dCfcJΖ/Rd[҃~/z0&H6 cb!]L2I|uۧ2pY eAs "H*3k*_'Vnr(QDPk-U#B&)F,[\W#=wM\A^˯3'Al^֡4Ҽz@7*BL)܈-|R'\["۱.RYSCC&Y5$ZqdE5M'Jmjx"-%y׮ժEOcԧ/_7{yṯwN\979&RuhQj3ɞv{YՀ`30Ef FJF3 i]8D#SW5X຋{6u3'41C{z~G6O{!;C)ɞ"yʄh/ȳ񌛒)2b&;3Vf,+AtE_o][F/l{v% 'a uAO'CEfOÛ>vkϿiɗEMQDN.Quo SBEY&ᬫfБ0001rG4ZǛK%F;r (puMdam6gV^o?!DM3"o!1vPUECl{Ub 96 7ZPv`TU"r DG:>:# O)"hAE Ȣpu8X"!u0 k y] (p y,ƈ=b%7({\"Kh@6|(tLq6 (Lfœ$CUrB"02e@ '";8l](!3"; `]tcf]*\aMTx\Qgjb63`QDM(,C*"g; hDdJ *N Bg l "<]Uˎ(*'1D2 U\a-hT5P5Fʅpu*c8n _Qj(P@ ME0I3"(gAOт" q3! i҂0:?:T%$A09) Yֺ '@FArQs64 @Oq<-7#aA:B'b`͹Teߞe[YRHs(loglvNGSJpyL,cb4`@4aOrc/[ ȇzytoV=?J~ltgs{6f=,?]a".xR@ao9oe-{x 0 yL \qmPzxӓy*Ǫ7_foH)#9T撁/Q3Ϩ:#]ܔi&n/cD= H @C=ezin \;M}jRъ"nm5B;%F2F@$0Ǭ<]k'}uj;JCe"ܽi+C !&a]+4# n fR59jg%*-lbN<6r4fѪLtmqf`GrB)~ξQc㖓՛*JzuZ[! 8L*g.[!Z꯽[gT$ˇNK Ji×I *ˣ ђ҃B5Y*Lz}&D<*9d=9mF}r2jq&VA:B(@_+g)-wo׌:ߖkJ¨Ȩ'@b#P#gD.*M)dcPEXxvt׆DB"! G0dyGuw3pg]q`5'04C^v?w'家Usq<#] D.\VS:%DwS>kK?}ޚscA}E3r)f> V ?bKFx\}$&7U,SO4=Goץ 3޴xdxq{|Er̖>l5OE3{76_ONu-K1pظJJ͏Y tc=E;2go7~?-.IyZ_~|ْ`uSI[{ߍ˼wi-W+|<uY/f"~:Wc5Xs~kɳvq}'7DK€;>J_S)pesg9^?IN/7_q)8Mwu}ƯVI#vi1ݞsP SsǹKїMm*2sǩ_OqQDNӅsuufT?;վs᯽)^oD(TJ5ŷ+4vKw7gl+zʡy5bゆ )`ho ٲHrH%p^ ؜r(RQCAD}CIc/e]ҳIQZeB+ƛJ"zU*BH6D^:j!JKZfwijhof@&*3BSmJ)PEIjfڋ4MޢƏ4{FI3\[wf>Ÿqwy[$H2b!A~- R,Ht~.M54KHRnω)%nY?cZC$UL?98Nnt2KӢD l瓞E WYl baatCցM T`NM.Rgj( 3)ϿKHAdk 1 #Y ZC>j-+utB-3 .r b"#4爚Unǹad Bj%Q+iVnYmu{ẍf,T`PTڵ̗_LdS(JDCmIӶϺ̊` [lˮ&aЅ{A^' dH!Hm!p9!@*(d$ R]h0 !ZNme`:qO% a"LS$`3X|njs6ī0BP#  BZQ=,MaJ[qџDϙ^](XCi+*-]F%J2 P2x w}$r@"'d)"Yn _= m<NRi7ק8+Vp//\Uy>XL Q/Og wf3){7~B br[q'!FoH0A$XAV01uC))ջJ(m(,<ϓx>8vT PBҩIGBЦa#ȤJ.آ{l^0FY~Z) i(Û{']&6v:|ZX_n֖-GM xJdOzTƈRSc>A RRZ,J$Nٷs6Yxn9 #P,c! \*2 %Oo|f Z[CiWךhDoCV'&@$zytunG 8fפA`3d֥uCPwY|2GI%OZך+ɵMepbI.ouMyau]=ɋ0CCx@@RPe H)*HmU 4C3HQ_ԢHSک`R&4"(LZo7ϹSu^z9VtՎܘ<T?>_+ZpĭB2C Bosy<>f-ZPOɭ^$[1nGM"aiwJ?[> .KY>ʚ2.=5B|͚]j%l>bn}IFo[ΈM(ʴ39C6$+( 9h0 ֭ H+m321\~:OeShz7Y\r~?R%Hnؘ[pkDXGwxyR< ]ۿh rA! q.5UUd@4DT!i"C:tEZ(sgɒZCvt-k*exCyuv-] "GrD 1ϒs|K*Ρml;S Hwm헠PA,D}f{жd[NI- _Uu˔hvy˲qLnjHv[o%Lt8) m DЈԊUA272D S=kxsN5얱HbkC6l%]-IraW^@hna ѧI^}(9S^g!j#jh{ %UkI{a[DH̊qW8^zT//`Ih;OgyH5xJmN:U}Obk(;U~?5Q?{?4񁱭#֥."z] y7ߌG9I=v/yqH('9m.9jqLߥUSڃh=&ve_?.S5 k,|M(~Uo6cA#qO/f|n>f/}wT,qKR_^2Z"CǷ*|(UXRIR(!)BLĒQ iSm lcΉ?Xw$ gVعDZ_MI%/V5E"2+AŒG[AOb™0~|B<æ0)%!XK+ޭE1['@[\0B&;2hlC"e`[5CR`\= !M#m{haO-N W:цGlp.2mO1GەG> #5S9dJ2M8<`Qj6k0#G*(A󥣁vY X$A LW]ssa忔mP) p\ҭQZXv!4;T.%w$(9s4ݣљ~!Q'XWlfܱw :m]pr7osd< {JCM}E&i|H*f$wM2ptbAq &9ѱZ8)KGvL*39OqCc7$Dk 4~ 49̢GĿ)[me2vaMK E6Q{J`U4 YI;ՠ3;zƜ}5us mg|~74mA$ݟE\(aMf 4 fñY&1Ét/ B{]Ѝg[8 $ALS x`; .s>-oޥ]T{'K,ڤHKXGM?dA,^t$cυkmb:0{Dqkc)D+VAf/<3.|kpxO-gfՃǯח =*--iLSXU;\uT])A S"*UR5ZKoMRjoIa1SUb]L1`@@@Ry]s~Rvև 2te;rs `1Nd6:N~ 36"j\J@G0hLmx8w1V:R$uݮKGGjnLDW)V jϓ/S<mYpӌ%(k:(bԣm)]'hYUn<#ow9dQgJ4 pn`(͌&DuAB;--e4´gxxDw6 !/nYɓ Jd"!A7!@0Wl*MΛ˿ Кzuw&\Bμ4LR|dJQ7$_?=UG6(UYq Kw>Nr  m+Z4_DJX809o}v*T.r汥u$'IJKOr^wh}૰`g3)Be1޲r@?T*&Ml5Uar.GbANV Lǁs >Ǖop{6g ""JH=&KΘ&Km:n{ȟ&TYˎƻ;"|aW6Gr!»rVRs(8dLA6}{o`D !q.+ %ird\`3<~͎@}7i7gBl:Kv|ͲK^4]ȥ#ȐMTvΙ4TJEeڲYS Ti^LM>iV(Wwn%7wvo##y^M0074^Z{dp]2GhW'1.>S\\C8s(:94 AG757(I;]0/E6^]FXuvӳWoXj ضhL(vC6[oͦƟײ)Չb4ѐ(i#X~5EMXA 0Ŧp(g(>/ (gYr סٹ,em"9c(h]}%P3Z:` tb"5\h>эt!(rm kmYEaRf "]q3yڍҹcHռ>վyO=-p 6T&7a_vcQ$W0^yEu;hW E4BrCBSsM6լXJ@H}?ZukVT ,7*~OuA)#V;'#,r̀"`yh=) oؑ`u 煃cure4Q~ߝxXi*Ѥ3By~RC"ZOێ\!x]ÛqI) SKwq4 *! JGXToO)KAiPK~$"$]ksQ!jT5Bv,r>ޔ;Lg-(J.F ܾ J~U__ʟ'm6Ky 2o|0~&=͟eI_ZаJik=(qLTZ|Kg@5v&꧿ӻtQKv[yz5'´3Jۦp`>M?l@f;ݖ9A;&0h?jaHtGYp naFIa 'R龜;We3rE!g@'C-m^T>#Shz.\SlT0 Ds O"9 3g9Sk M^l~R Q+X"\4?exQ<|d ̵]y]wS!gROy" kڸ_$ύ?;CT٠Erѓ@jdQsOb(h7ZݐGSv+lב}J׵uǹ+9s};ckZWA.2F^꫾x[D(tVd\}R`]4U;tsگyçY?1u|$Rqj|:QZzo$̔&7͙U9RhEy~LxWPOMG_(Ƅb.Fńq-GH_'zi6/mMG̛ 7@b5Oȧ?a\: H^qHvM^XW0GEy5znaf@\1YbaZz g{RQM%~qfq\O ^3 nJgȑGTd¦,c^٫"y+8zMM5JLH%o0iѥ1G7[v)! u=X9m5{k1`r\42IrrG81\O1JZZOwbNQ2kUH`qw~zjWIwq+]яL,c ҺFnsLX 76vS.3h-?H^D,I+x۫YEMoJ61?lkImDWiJ{b5ڒ8-\J)5mj ߪ8z .+}s8+F4vEd`z/>1wʂ+ǕOˍFmQᴚ&8zHߓGv-4C:`FNZ[tw 9E9ό0/`HD,A 7QLTj{(zꢊªqUI kJm,gh֨v|,цpf!TiAKADc@$vRZPpD'?\1!6!Kah$ݨIgؔס4&aNV# B%4(kYL ȥ45F7Fo7,)maJbcU*5E.i eF ou%Q  RV*XQE m`AE`+[""(.Xh$ e8%v7uʧZZ)YX^pc҅2[-MyP '.>>F|5#$VXL_`#fk/^MSq}j>mn,=X{6Wx0!~9?3Ae=?r<6o~]@ h)[ԛƙ}Lo0^[_ JWAҿ\\fK|t̮/x*?2G_w3o?gp __wtix~k+ٽ-?|;R+j ??In|h,ECk<67 m='C(h̿\;Ugf2ÿ+yuYߙ~aȾw^ER3X~e 0.,H ENH} yNrM}IvZ@uUqEJq]~n~=w}%i_zh{9w9W]/JX}@5EdUEN Ed-z:P AB"dBCv>?A9y_yb>NGgPP :&< . _@1Cn,,*9j={~ y G{kzϰ0KkSLO%qK=Wu3̖u>{xs:ArAO X Ņ(* bZyw-p_JJjJ%:R((ʪ5JKAr ǂe7OTCǜ?c?|]I;O&n?Ae{Ƹxo~~{bcHQ$r$ @zjCm>v3UAp68{7V/D[_se_i739'0j?{Rg6;]veƨrY. |Ok2vʜ&j1l.RB W+MA0 &GFqE_aP}CB! Æ|q8efl6fל}̷EXN!9LUcI;P? Fxzï_azkkIuS*P. h^H' (7ȵbAj1h rZ+x̳YMuGVzhh. ,?UauTоk,نgG @qQ,!ږimٽg~}fו&o/pN2ɛD=ƯHY Ԕ>aR r?k?rVU$ƑUk$X|UJoQQK~ /4['oͳ&G v{ɬhj jA Q‡Dt_ˎYh<~eo,] _6h<Wi?ɓlirUKB Z# -[0M\ZQާ>u ; hOckUy~tun?;;jff0ptwuϏcZ׿'cM1}zsz5zE/+2'K{_->vt/uߙyuT@ d>P뼿7m05Ty*@ϓ<<:h `Pi " T@@A 5A⨾*bD]m) "8 鬀ӊWc&%+2,A)N~x?Sῷ৿tӭsꕰm}ym^Kyp~fs]?.E{<شcj6(:gg57^7&{r?vE.k?|<;sl2{ v/3ӨEUE/? t{an7zLuj=nϟui9V48/_#'[!kWrݍ~?%罛>Zޏn>GS ̟lRӥ1ǸКxYCb2tXӶ;|~"~w5 ŵcoy~^&M>s|\" aB$b*wF=J>ꊪe VBU"7hUcT>V>侳x~m?}|ng+PHrB '#"IJP^t# \sWj.ΖǯHVz)?ڣ#]ϣ5і|Ad??#_ԛE+b=7}maOCɳ@ɀo(kZdmB=PaoA[xR4ڏE wvZ~Κ6q=}udPMK@2_{-gI)wY$@EJz,L=~OS_{Q!J'͈CTT"H( E(TBQ Vu k"@CZkdhDmEQLQQ@Q  DPeA<39/LpInk"Qj,b5hSIc,.[{&g`ty[c;5z`BA?yUs_EI|_Gy`Nst>] ]np1KSJсGvɣ_ke VRUT?}n2/=i]oʤ:9]pU̿xRA' "$ ۫Sr1YGḇCk"Ͳ lY$$ ^..ДHgҩɿ8Xˉ29@$ӧ|g? u-kA HU"#j 1k/Eq/1 Ftu_ _q_Wۊ<j!HI7ٙo3y# P$IRy+[}!k"?Oku/k H,(ARW&;7p:e!.<Ą̅A-XMQCggr_!dQa*={( d"Ac=d(; nxVx!0W{Q[O~02=mrڞocr&H?_: 8qKBdaV>'E?3!h!14kv $;R^q:C[L//pf@z˳_c D̍ 2;m*?A5vsh,/ .3UuzO#"3$U!'*Sx-tO_LM`ZD)X^U1!P :*Y~fH4YBO~Gs0̑,Sa@T\q(bd"|?@au FEv)0L;7hRiRIIb?#F " (m6WRq7&_sWgq3i3Is]xAqɷt!{(?7~cqVCA  S}+#yg ԝ"e蝎HQ7ߑ"N pfJ2w z%猁b<|:k BH"H["qt h0E]QI`O PP Fm-IU`Ӈͪo 1}ߧ~t[e?W@ܸe98f$2>*{GWazE^ck{dwKU_|Z>cz0?#gaxHlkqz8 7ݍ&86M?zcs-lwCxj$C%KByj/ @U D b-f{1g$Zdg~_B}{ q3gҗɯgюy6,fx?OM?kG|>/OǕrkϛ&-NoE2mv #Fgqh a9ysVe{9 G/?Gc2[Yd,;l8!) tz? )bqd(J O34fE 'Mt^HS $ 6]s#Ĩ*W|&S>}?Թ^Z.&5G?6)n}:Go/{J ?ة=^~S^)'!NW+WtO|/YBh%k`$EJL~S.9phFPyX!Ps Q@M*#lRqBP %Jʵ$M(z8? &W\Uj *p%'ZmSq5nLꪥ$pn>4Z|OtuK͇M]ke˚ΝA[+YUUEEE_7MAB*N:H[5O{.ߑ4!zNK?O|?^i/{ڔxݞ}t轺|n01Y3~ 8tNN< |~Aʍ>:zo'E$ωo%ЮC2۠Tnl5hvl9a^OmP -cg1d*khEhtݚ?AT6!nV99M*׎޶Mn7`OzpuCAqQFK/$N9&dG6uJ^jaQd&!=!LI!H**T(@:P{* h)1cUUB\`"PV2&E|aL/`Q=ENvh}C._b;?RƦ/cA @9 p^ 1Tne%"",QފTh!$;A?{T+7]`^HRDt?`͖:58_&[uT ;xWgY~2?ߧ_{~=%񁇜M&&|yB"@OWF93#q{kރg; 7XTX > e3}-9hLE.=WUI1IbѲ(#@h $@@ >}.-/pƑ|6e-=0 $b b/ۉ/{.>O]<}R+ITU=?@-kiE}MȊ(wHsXQCJbKWav{t{_tv[Jg=;;sS6TEBAtyۜNlTrELd 9hmEAA{[T(UdBࡎX,)b8U4s2 d.jKG*""D1"lv$/}*^h_Vħ{?Ӭ}ywmECpɎtex1$bԛDIG1-HZ_G9qI)|*C5yO~.nNjIAظ<́ 9} y߭Df<6D "!jDr >о*\ j*'A,EptrQNj ;=(k+`JbEON,|wHq` Pt7uOQYˬW'UMҾ"WJm=<5$oZcpL` $Ydg̡%$)jP)YTvU,\ݩm_YcqDz R(2|$$@$U "H(y؍]Os`];zKCZc*仯~p!wLflukj:Hocah.[3Yﰁx}ngʼn! BvSYՅSRD S% L@RB,pTPHUR}5IQ0>>n]=t ̢Y 贀T;+BK?9 \G(0E_I⩬w{[Կ̛"/>9ڨ\ &Co]h eOădGz2[28PfCۢo04,&0d1&AXjqߑ9Ny]^2C1r%KdUZB`+ggJ.+A|EZ|nsnC:Qv_LC4NMKnz"R8rt7.zQuw܄.4LȀLD^Q)و5?nJ'TEc`yls[ˬYw9V +X!/ Ή$˥I P6Pn/ /@pX  /XL;-Lv"5!ޅkkjBT"NCrRO:\&[;^vʨb!eKC!>Q-dǶHר}&GHsP56?3䳧xO)zϋ582}q[sjϓu1mE-y.dFzmLW#&'f iA$&S"˭ݚl'5h{ 5ww_K}<(WwV^*ؠlWf?Yrp\QK6 NHc+,Dd`nZ"EiN-Ñ x0dx@1ǁ iF>Eb8ϙOY(H4~p1mm P-]6u8/#!DF$UFh@dWkV 4L2@&gMtINp՚qP?~uz,Ч2Uh9 #.8 &|ʩ4<>$׵p5ɗ Dzu% h7GfdɥF%0s D`qז{ 39{-"'DZ$䫏JND+,8)ܴ2<>rX%mgKz{ژmzӛ[2,Yuc:fiFf#?MVbg*EIf. 6'9NB X'KÖaa!+ X}>2t5VPIqV JfwZ!P3Z[kbY.2fNiEP2'iCw X>dyBt}X#DNP~ebϨʿzmxGSnxs.i9 an/ױ(G ԺfQmwp޹4D_L+!|AB*ūv Qp?QU ̅ `,RDL2]˦:4}?/9g&waoCG,2˦jNlGMȡ+nr+ i M*?tÃ2Wj)吕Ș'.)̳JP@w$*- M5+;Q%-R<{Ԏ@7=G9ᧀ)=L,H8`4Ƥp7 ZX}Du!$InPӷ_z3 }{&֩cae~z%1t3SJK~=dpFKU"!^P pNJ,,E1ZȈУ88X GY-oĘPY8H*O 8FN?56$$T=-?SG vFkaD$ ;߂hұP@9\~)`bƪ~;+fdk-9I*7$ m~ڏvI _gg Z>nqw\iwxx\26[24_k5Z%qT0 8C ٍm<[?OWLI޼d!d~q|}m퉩f́6^8J-\S\=\CJͿ#]r??GGDb"" Seo^O`/tNWN%K}\ gH DDӽɚp63)'@ҤUF:by>>.fo#&vT"a2<{vg$ն1G|Z߮~7.+|=ԝ*uve>xoAw̦P)%THNlRW/V9V&R+տFi#yqr(Fi@˧S*(V]lsk0Zw.R9p]͢N)|/KDشt;\;Yϗ&lkJu(Śއҝ *aq8o HT@Qt/+1Z:a0$ۅD m_ǥ0?'V &|`(:lfߍ'/.ixz@_+;hS{% g>jH&hL);; -ɩmD#F#v>&Y!&FIi1; wj𯟛+AJT 柣_u ӹ:iYԄ>>oro1}(eT㱈P<FTR|IUέ?\Ve:Y_8w>Ӕ{:j@ؐb dnvE|w9$mbV~RGP Elj "@mNNfM,"kUt@^Kbzmй# ZȬ+Jb?aZW%U|]uhfS}7fմo8vrHU 4:N:Dvr g,Q J{i]KM@%&IE) "(0x!u~.")J/$DB}hȌ F! Hmu* 㩦 ?E&t962l T:*S@HM/1Z̋nڰ?΂7Ϭ>< uh'&m"2b3Z(8,l'z[Ԗdo31TYJO[SQ/_ޠXB]\c +:rAa3/r)ë ϳo1zYdo5$Ab-REkW$~)0Ɇ, TTbB؊X*Ҥ'?A{nL:BP_flYgkdf%@Lۿ1FL1{ Yc3NX˲Q0@")OnD#r5 )%uTŹؐZڶ:pvIfZF'yfD@!tLc P+& pWohi_!…/kP)VV7*5͗Er nK 0zJ"_%(jOpVa -]Aڤ%2d֍ӓTkOB{S+@[K2\93hHq'69(},*=/3KEPrIq&ϽdmangRke?gZ :QPM <xS7|(&$W<"'b QF8(jTKTIO>³EM'옎0h'ˠxaEd,4$"1D l ]ȊBjݦBg%ٕ gthx E>dDRt 5PIh]ȟZa; %b^*SX7 8U.xU2!&KD H3CPJa$hexWd_]ZhѰbKD 7BnhX BCC.R=N4uj:$݄ _l"v1P/"*H " @'ʞBD Pq|`(h ycHr={7FG2GAP$NzWUt>d̹lyvCDw,"R9II82⇶Cvʷ\E `Y H "c hsA Bj{"O) *z'ud]Zx a>\ vd$( GepyOHJ:*rW:8'j-M)ap AkJ}|q'+IPCj}Ez^I%dHЪ$! m r7pEB+7BkDY,Cc7S}BB4`I$(BP\|P#azO"?Cp8m7LMXғl"- 0~!a|PhKYoK]HAD$C_u^k~W+={Ю5԰j$Cr QG0l_$ =́fTS4#%DA88*9qQ @]t ~鐐!9TFSLѤhK$4/>t~c wKW7/C'1=TxF/}!Τ>%rº*TUu"(@EHIZ$QR9$/C=ǒZ",\7!UKzթ]\J,qb 3ﯙ+Uo$g^i"eajJX#}($! '=J*j&f w@" (bet;S'.!bT[ e,AVOWT 5CJ vp@~Eta뮠έmZUFzkiue8lU-\=/C[QBU HխeAa(AW@QC&+,ZwvX# cـS@cW20_l C^K/g?(Јp;~۵]0 8Ŷ{Դ* `|DKF-f#( WDˈPE $k>4r0 L"z2\FT L -,7EfHh̫ JY_ X̑zm7JҰ+V?蟄L]RC)|D’K9I~Z˪*EeHq W^`w\eN܆b7<=}T?8Zik"'x"QL|ݨۣ3Ox[Y Bv2lmk)fyO?1Yor‡Sye>'xG?Hގ;\mꎝlžFL|o䘺y$O^孒_ҥ&{5%\bO7fJy5R wceR1 ч-niB Og;?P~,]K+_Ja sz3ޖJTDk+N,zWlLz0g~5HEJ]b&H,1eͼYڝv*۵A>)?DݗJ+ejVUR Q` ӆː,ƋT }:J=* p,HHe`>lR?2<妴?ymõnsT\E7p,䣨*XUZ̧ +iW>T*k])j]"DQ?IkFKƜ+ S4DφCrBQEܞLqI lWǼKIH}YlW.Bd J&\uH[Mo4_GɋNveה$E?_5}qν)!%hdJmBk̘N3%RNUVArۢ'؞Q%Fu*Q\텽ezY Djýުrp-3VROE Ԇvշ޶#0s!Q% ˂nҁnޫ=,< WnoT\Zb}CϞ1qJU !7czFZNAE ;%&`"I,' T쬸iK(7*bI@|0)/﷥.gRwnAgr΢o5CME%qpU $x׏SA(7' IGXFi ʨbhNs9V<O#&im=\%NdG1g䎦EPQ M"$a]u4Լۮ r:kYl|}Ue'fXnN=JdK_Q>n/Ǹ+`eU:ʅ6W^,y^\-@d>9lR?N-Qg Qш‚EVMtbXN!J4TKO084vHWXZAH"!*ؽ n!C1U"c_~7[7dD&SH\Jfë 4{Fo*"a dqG4o+>?e?-z&?qp7r~7I3iq7#Mbʑ=uJQ`Q+5Rzn ж9ck>rjq&TnEY ҝnAaWT\DT~ӷl8HG_j{^GK7fIb_%~`FwjrPޝ3hAQtLEgf754B.dL7z &I^W8ęDNHP;Z- ަ Ƨ`ǩ;So Mg{ނ;7}7Unk]rc^\dYrUu/IJS9v#,zpqqYK-I'sC?v7Pߎ8M{<~z;HMbD#ؾZȎSHxԳW}5xlc3VJSYNHG/:R{sJhTtv8+NO/~> A@R,,dAAQ EXDEF,=FP>E$ (d B(<EHB" ,@X(I R01NyTqNc:4+餃L]iO_iս lsќ cEc!:IB""sޭ9:[ZZ孙V~Z8Iǰ&0JD<Ҳ3zN$ZYpn_o?kvY\фYr""굥MI) 9y~WK8,)P"AUX E$= HD@ ga`, CTd*Xc ,z>^'k;UϿcIWJYjPS)RB0O3,yay+NQa/*H(pړT}$ɝd҅rpV ֹޛ1b_5&84dH=gIzCi՚-qQ@F%R)TR:Ԕ3|viY*#:`҅JZduovP+4u\*.s 2-]iV,9NdWVJY2{ dg&yYgx;U65 q|,oaq",ۿZ;S\b͗[x{5O{ǘ>ݿy7| @ !&2jm{!hTD0kPc.Z gCp1Zja.>-6[{9OOwɸtYɆd=u9fsUNh݁6Rj0vdgEL8fA E$I(LSՁ]3iX}P:4ڠKWL]pNS3_=&C+ a\_iKEOGdz%=ik/IzyL?ԣW#n5M1y_r; zhQZhϏe}:~a:5ʫw;WΛ`5 q9z9"L1EbЅEaXc)A}!h]PFEdy"J=tN_'ihD&6lOھ:G~C"E%/?DC1^ 5%j:5צs?NIf/.s7( KϑP"AQ"AbX*) H-`aHxREŀ()^߿COdkvbxӗ(28ӑLS1e :1w=X㒄~ǂo͛AkG7U[-4Q:?~Z|vi]SbFND./9"OT{:dxw )*[ܶ F/K'l(tႺuI&+.oRqmƟvZm)҂EEsn[q)١F {֞ n_fw|΂J>9tgyҟV/D2/N3V'fsdTQlF]b1g:4eEl0,޼֭ RzKP#.FNVs{JYde9>*v^nvcR XS8rǁ0ˍB2 $HFA(()PU @YFEHS!H \@LrWqCɐ* 6F<95gW]UiҩkAT}Vv,3jw()" vJ--JwNcԓ:p^ks7>) TeRl=>mqzދgBXEA4V [ll$E"0PDOpN|Cuk0YPYw!m^U / .WJRZ};z. xBKD_3ݪ !4kuqn:h̾AN>&MbLF+3K )'~ BRShYX0Aw1^V0&lZ@9Y/1j{ $U"aY"Xa<.F"kYf: ^.c(VSSװ,-Qfq4dYI*L(E 5`t-Ux $-b4dY% `Db"lt&ƽBзd;;klfjzENݕWzs ftIʱNq*a`#𔏷 #yEDZW#ţ'BKi;Ne˗Ē @$-)8& #y_ӤD<2c ]H ,h7nT`ZهnZ?οom|Օs-fϿ>nt^z}o:3| ;zY ruzSN_wi-gUodhOCN־6Ka~"o#BS|x|OLb2Vse2YgV"! lUD>+)+J W(BԦ05QʡҷֲT $jv#U a4e6 BR9w[\›ѷt#6&Bh3W~= '$zm}X,z |Uڎ툴0=EL#+8 Jsr= _`3 s/VxJhsKICLi;+.AMF9ŏǮIDS 4s!S}c'b}MDriЩWITuDԎlɑBL0^W'x3p'/ʲ Rgp-CVxcVVޙSi>Dn(Ėn;:Dׯ\lL>l$ Ua# g9g$t/ ~;НMϨ=aS><Ɩ$̓Fr1XU#> S/ͳ#S4 %Ka%dM CC:A" 9 [,bΑЏ$-g=iF<ۄ\1nj+TBMY*2-<!{:?AN'5bv{Þ4&OfZ#OK5Dv˔] 8RkhfY')cX)ZZvfU*EuSgWP˒nL I E7,L&->u?)IҘPA*ǧ; n9]V KqDCY Q鋑ja|g` !3ŢWyca7 Rx3{͞$A`~/i|ek1nr=-)A?+ʝO* Y. p|ww,89WBԲ I7٬+]c92kz!-ζ<xɉjD UH1CmTVckisr0(gr&~LY.GhIQcqrWpπϫjLmyfGoR~&\Q@Drt #v.ozL9$ 0|_Ί[7G2ĠN)r1H%13DҀj@+z <䅙^Ѵ> 0MаUL7\hg[G-iFzѧVڑe]*zm=댻n9,ϥvp4G0h4lL5Q@ sL˾6ˡ-k_H" C<quyV ,10V/()G+L4s*O'B9,jʼn)oE {PŻTo: #N (rY 9_A턿UЀNjvhaH?|L C` 1Tʈ ˰r^26|s~-ΧYν T7$w n*lՉ6qRIE hjcԉD$dBȵ<\4%I$q71VSDL YV#RH6;Lm@IQ]8i3@\wiQOe]$Î!%!,@!732mX |n OC/ }4?Wq3L.On¹8q,?K0Ͳ"~b7X)r x~"Ԛ qveƸYωe@@ł ibLMȗiAip\Y!h/ŏ&,]pl-Πjخ46ZY7QR *`}] .O5`JF,O w< YqUNplڜi\x#"S=ᭅۑu8i@OqM~}BύfNDӗTbd&)Oۮ.68 i/CH#Igh# Of+%Rtýߜ@_NUmqw]989Z)$dхԠ +O(?^&>L$A2pդ̈؄+G2QU[6.fqǔc]ZET\m_ƭ2ݣB>mkF1r巤H"sNPңK}&lԱ!nq!s(⏯X=þ^owYJCYp^bwtm%"hq89R}bazDϲOq.Nԓu)=R[_Yu 2^PfUU&/̞2Q !`xӮMH~HWm?)KW=ѣuo}Gg6wG^SsIN3A6|+e@dau7ye^vSpk O_OCC v"{'0`jH3>N[J3Чjyr>_w\2?n;tAJgLG+}h6=^$6q0-&b<O&tG!92vd tg3Qu!bcqu1%2d]ƲS_ҷcqȳx2#-Վn9#uS:"9:I39q?jg U*8 nl T(>p^ts=_5uWKR?RS6쭓9N\1—{D&xG>=*$)Xft Ѻʬ <ږX)(mڜ_1\Ud֜-o05JF M'dMw˓YtHj\&9 9P rAd$(I u-wx&90 Ls-VR9dAqrtSU`>*Zz~EAUԠ׍F:,+;mY=nʲ\' K5+c5`pztzhmԸH:b 2Q3&jhyqOqE3.;1E򲮱al%rw=gEUVtrC#:zNoOd䦟F++b\XRi`W1Y [XY>䊅LiCd5 9ʓ0bg4ڕ-f*G]c;˶H/x ъ1n.d垅#jCڷ͸^Q/fmIm6fR&XФX8"ŚzjI^鷎ϏKM& >hqcu+Zv>WTṰD^+Ө]. 76݆``D u,|P0r|)EO 9}\{eJ!pV1F~NX:rzқO_3/"" qoJUw~6h'}@nKp_R\ʲBAu3\ONS<:RVZr+,>V8L2  K3,Х=zs&S%斑|" 4iTJ"x Iq~1ҁ9 q'<e޵/ۛ=]Or U y0]v0@{ysm۴;̥{_7 qqq|WU6Ic)]N s9jN=]Q= Qu-6ưP>,.oGm-{INcڀ͠'syYm[B b?.Y~b`Rm]x97Zٙƛa~XȚ2yϙɢ|זa(8DM[Ǩ`,B  zP2s@aE8LM6q=ɛT` ӫO4KLhTr#ANwB+k"ɔ 葮LI'YkdNu$ ]G@Tn>CV'Dٗvv+=ByFUjLqrH 骣N՟nZ]P1*c/3ԷbB.U#זT4(HtX x|=y9l{ΩSLTA3_T* b|[ /<$S M}veɆ\HM'ٱԿbiVҝˊ҅3Q`ҭ@4u bpNQ:jd/1ר\S%xs\%3]9OxGS %:M`N@}ڧ83ez ?c֛<|u{+[Ø4 v,uMe (,JГ#;*CsdnftæPm^1 dpr˙ 힨h,#Mx1X{lEM ωTL{DHTLU d9x(.9ITY}e ``6t ܟ)w>g]^W o}8DoG-h"TD%y?P$@[JP}<# Q1}%9x(lfH $TNWw*CTg]nZ?49/:fMKG(Y@*J濹Y`Z*,$@QW_&P6[ D DD?a PȤhT)cSM]V`@"\~}ޗQw8PO"pb&:ūG{TOY~y]AQWJ\7EPʅE& 5TR? Ts}4{(X}/OocmͫD7mqDG *ȢE'wLTRo8(]Xm i )r?_L ӀH2gӻݠ<ABJ!$,< EEo(PƄN #g\(lS?uG{|3x(/9x r樦lWP*B(@) +R*P  ] Giw#"&ԁ;"1DT>U$ -RFGGeEH]>t95~_O2|~M*S*) >ʨo~ {E0@V‰i#v@c0C-|1?^ms:56I19P TU.(iDO7g$ $u~L;5YMz^bxkB hg*6a!P QQQj ~z(A#PP&SEm)mYTF|?}ۨ=vQm]0Y<=2$5Z^h0 ~bk}]ŕBDȪ$@~#YzUBK_kL]t{jz΂ |4AB \x|ϒ|c ;Bt]t6rS@oAu@]V?SNtV'|{~wk|&9DMfd=PP*~;* N UIYgp;]|Xd 1?MGS`ك2P"Hȣ!PPH}0@Hh,# xm/'EPPB}EDo-)&ݢ7@B*TnyHyo?79Ձ)aR [Kq0q6‖*Mf̤,gxi|wGCOFt{@n_)1s.I$yRD2[r؊FT->’i)ȝ0j:v;#2Co*3nSxr% \dJjQ:B'X-#M٥'3r}u-sb/`uD|ҪIOŁD{_սB*E*͚Iܣ1c2/4 At<ہnвM{Dwm1|n"ί?ƿE{^5M"ߑZiHq{ O1Nd$FV;N픣G̈́d)a"ۅh4)C6.Xm4awڏˠSh#ni=,18杷-#e€3w3be_*b&ҁopo=jܻHV!H@.M܋="@:{Un 2cn2lYBZ#\: &f>}YO꾫+; :h:U9):Zp?ٹ\‡A*a< Q۫6rF^'NuQ|7 kN2 4&iyYNXH$I;ʹx'յӝmȋc%k˧Ez`h,)0:.އ4ۑM989b":v:&0D"ZSMHf`(sѫbʸjDbBM5oy~r8D@GV]LLcU#HwwrX vk65m(\Ǥnvm=xfoWaŵ6#(=vwXdڻ[Sv[ep43b"$5aQ?GJ${V#t472A† F¯]#3qXrLi(QE][w7_>$g]/ p2 7Р,E5/M/`tN Z30Qɯr2ϔV9ޒ2H¶iȲ(Y5. xhj)hu%j3IpwS^+u>Ʉt/^VlHw0m{x4p?JB&L|4(\0RW4GM]"2h3j=>,n؄CΞ[i*y&QD+G,&Pӑ)6}h+@3R!e yRRU <֬_+{L_M| ~Ov!P A jgR 4C[/2J0CSti6/-D=jw%֔R$o@;9uiNnor#QobN$yR*Q୯+xZcxVZX8D8Fڪ0o[ӟS3Zk^ U1 L0DH9YQ ;uYתѝB׳/Kqڸn9㪛 Nu2+ #7Di!Xxt= Yn^vnA$}mw͵-,-'9LAf\2C36薕PQ`Z}G0ϱF|a!Zeq2"W,SfC8Lst]\qIo)\r.ȳOT?UVUk_mAɓd#jUAE[|n9=9IC]ykAvۿYK.lx.RVdr9Oyx+-iͺwj11q2'ە[~ dsNe*p佃?ޒk71[Ov3Ng/Mp5 {ӱzTX"V_+t[Voi4w.gҍ仑5 fVD ގV(T_+.yFK\=FoK 1s;ieۨf(o8P=A. '},3StӬkXGoW?_L@Z"#JJAEiX~gob7h{@ "Ƞu)IS E@ި,")B*]UI# SV-73><N;%Pc0pđhY zY IįfpQ)e %BԫL(nKOn ,5uf&ТYYh MP)Y'XwK=>;<]=D/Qt"`BIpRA5PU,,LW3wwZ㲩备(' ofsM9#?Ú#qa|>( u0(PEeqko*h0XstԈd sԧ|lT;S6fBX+R AAqDn|F\,1H0Q@~7gQ;?!)RΘ/z-ES0 =(.d̫@D`DA-WNxBPAf) |pV/(Nn|B0AV x<"u AOfS$xj+y5hsr.ڟz) d1o>%%kwPn"܍BP?{mԳ3!٪(dIe&qT2 ̰^wʹVNy]e9 b&Lӳz4a^3k;GZƲ +4C xBPM3icՒ}eBfh5֗ @k@0Ҧښ%aZXs6+N'n{2M["zu5lL;<h!!$ӾN*cK'lJG|%1b&̷|] ֖T$Y&&)$@:d!*Am؟@@@ĚIOuE ݐd!rHL$ `! d Hqʼnv~ax~t}L}wxP<+(ȯq)j<+T Mh (DbA B1G"$`A !6X__h`lREߪhV"aT2AhREj!~ԒJQKI|lAzxDo  q]dGOЊƈ5:?g_/[s˲=JݲDEj#h AR3Xv351j-j|uAh /3f!ő= *P>DkPT5 vT{_/ M4@C(2Sv^4HdE"OP:`.U(asNt8BadWZߨ"Ȃ^P&l*$P"aHEqm*oϕ<93sk&Yw2R#Zd[Q;~[=odO{\A*"H 0_9u<EH8+ҍ@e zhaZ}>#{/^I*VOVU!AAE"mFmT]P6:/s9czLcw)EbwO1bq.tr{8xto0jds* 3-O۩Aܗ_]U﫯kM`;S L[/5Y0LDY-Զ&rju8?S>ǙzowSDdR"ֈ_w?˹^tg@vevZ''"3(>>-no=R1(.>x45!Bl-Btol"3#UD*|n滕_3 I!m϶`I'ppDgRś?c/OwvQҝiJc Leg2koy鉣kQ65A.~I }r"A˲E1W c`Akg:qe q5"z,C^Mf؟j`7MLbwR1hgÜa7KSdRTQY$x^HBu"i( 7q 0!mN%Ҧ3<$`~w&,Sqom7p>9pk?y+=)Xe_کg{8+iQ2n #`42#x4H+t~ W!QF@*VJҦ[Z:b G p}QYY#DpF IgNO޽N&jEd,Wo`D TP *t c#;F R4rx4\.2ndDUC|<2[_&ReW?*@v_qp_eB 3\T:;ev,LCuUgZ4i\S4&=w/0ѻ[ &nn! ~))W\F %hpF^xdA"аs-(jLƏm>* q.df1K l(cc /fMI\Ď ua(*"}#r϶"N%'qJT;aYהcqˁsZu{x=nדumnqeQW4zHjd 0>FRLݘ LϐQM%Ny[u9e)e켁{YQܬPEr} &%@sN5]հ)X}qm9={x魝>+h)qf b+ ceԚw~u< {4b3PR6m"˵au@H00"3⧼7 ;6!;HwsOMkuaL]+^maL+"0*'OH@TQ! טelإG3xd5.jHV ot/ms]1*XqUSZ x}fE$eMC\eefq&徫WiY*[av KT--VGLiK<*P7\Ww86m*aBD_kˉL)dUsƍlL,\hSL3$MK$]ºx[6aJ^52T%A!$<"JPDt .HC  ^E,EQ4L\ڒ ˆ\eQ"lpH|3\A5*݊i*cFeJAf"%F" ",Q \ [9c[uxJ岚1tXtpx33JmVbkiv%a"1z$ Jֵ*PØL(ELtMRUT,9"&Fes NhTu d^hD#5 V!3aRܜ(fI2B @f!Z EE$E &&2(0k&Lj]D(0owA*`r&^IyU1L$83qtAgp $! \#*M_#2V"b\UX!7 !i9;Aj&,5"^SX%МYB&eM%84eou\oA iU1tO)@wC>%qSGyλfMhXEY H@#;/<o jXrCXlL&qhe0oURg,PRE9=k_'i3W:FA>( *SއZ36jRhV]29͆BھQ;8S#9eT;PJ:L\ŋuot}խW>nҘ,AN|m)w;-ZF~ӗւ-T6΅ phC~=9^.E1?_pv#-K=,p40'H=-6rnZ+ {'A&;䪫 Oib3}|e%Zv)$D^ԃRNԪ*VU_v=cv>c]~Ƕ6=s?Wc6<:{eyXڐ3\PU<;h+ٴ |IQn;kOq~їcݧnbHœ+OGXrvlS[\(`> 쉑waǡJ*?m[<_GM;XexK1Z" [U2/_9c_\9^ba{4SFԲ"20e{:pRf2oy/~@ʄ*DDUF0@*# $0B1AQWu(A'% R#b0@`  E`abŊ(,`DVOj(ńTY@X "EX**A 1, Y 2(Y@XD#V$"(Q(`  U` GRF*2((",Q")" TY`("*QUU +eԤdX#b(PF1"*#bO:?d D*DP D`"1TDHbb,F*,U`0PE$HDE APT@DĊF* "cXD@A9U6QDV1RQI Z a$O`oC ߫zhBd0bĮ]F?zΈM]TbE ewows3$X0b |J(O*qC` c'1Ub,R Qb Q b*$PX+" EB QTX20F"dE#V0AXXUUb *Nm~:K`"$DE(0 F "*"   (1QQTdc=N6[^י$qRCe?P,ڈ*v ,HI!DG\O>SvwW130 HgPԄ H 㪑?K@IBq?K>|n9^Vvy@( g,o|7gh/=}h%PI͇'w!.EdPw}_Sk`]0lѸSPG~g~M-UEG`RhWYxjCK=`ȤZȰ"xI(V*W XHmݗTڹ碔ƐIC LB+T =BI!& ~>:زjvʩ귦"+pBe>' ȃ@q@ ~qT;2c ^/l_}9]_NN׃ƌ0w-$jE h96rAR%@wB"u ;,͓ Z-G溮?}<9?ls5d H}Iߔ>Gz_Nؖ#@>jԁpش8=@?`aXibXx. GQ] Fj|}MPc];(0 -$yIQXIu> ;~C5GY%ǩ7R*l֩VsOſ˱ I'U16#+33_PJ(K[5xFv UҾ=ļ,5?W?.#$<83h⻶gW0nqzY7Bn 6ֈ- heD3bS1͈H(Do{qx>`@; џ-c+pu"<eMo/׼@Đ$XBxhFDzy#jgW33 Kx dP]1"1Ȏ It Fky pʥ 5vygs+)"=֘Y+R&,(:&TNF!CTUȩ o۝A927㷑Ru7-5hޢ>xvzI$ݍ:9mG>46UHG'LQ@QҧruFӧq@I!ӥrf{Qa&Yi9a!}~f=B4wiJ)U1=HәLiߎN.3a,z[2>{zO^*ʊ>,IW+N(^fNv/sn6#wa/ 2YIK^dKHmBdjGS,o+!XW3FpL:<9}g뾪՟α#{CxjTN:KSwdtu4L*㐢?g-JZ-v%r1/1nPDbٯ?)8O:lAbn7-TN|;M8O25iܝVe tK-k@rRl@f= Pb# KhA!%*Zo-޹ziDvnq_B#? uMg|d<}5tGFZ⻏}\Ղ.˳vk[~͕ޙwNBtǙ zkcunvfruzP6qmi--dWu[:'b_{JBIԧnO U4Zr 9]\~f]8y5y%9!Ŏ!P7ݏ/s^V}UЬAaTg0:x>xBAXxIf@5Y,v_Đ09ӊ9yCJnP+jҎ`L'5X6!h{vq9:!U洮GM,NLs9YG7!Lh, mcY+/d\c۟.iqjgd1?V˭7Q#=ߔ)6Nco;hNcDzt878'QBF6_73R21K›m) +]).ؚVc\MɳN" X3"*p^;E驮Mmk/&"'5:OG`3fKzAw|+$dg1RBCvOt%+| bzEy jw ʘdI% ØݰG2zm/"&# C"- 䊌6鴊dFze!HyIIuq;| ~f-.୼"pP}Ly= wmIIy1Wia4vkrUK~RWSRrS%?asXʴ5o;WbEx/*KfW-թ3#^-hWR96+Dyʩc8xxg^ a(,}Ƅ Nv6/Sۛ_~ub."  #2jnU&ojo-4|"wYtF^څ?NZ٫w77aB__[[w[ kB92 B pQ?u WP AlBqa57}oeqX6~W\^ZK+ؒO|0UIdD1u`TO }}ׇj~WOHoY nplwZHt0y8'2ޭs+}&O?)U&mUQ`(}xڥ~+bTܗ]ϓHS ffs&aXK8:@'}ʐvQ )^N|Q};t9W/Żdus $62/RE`nxtuDh}ReUvwEgI$Ra$K_$1%0VQEܮ_v}>ˇ\/b&|VM) Ր3 @8"p92A-0=CB?hf}t"Fw1lԙĈHDq۞o:#`"82mN?_uU7M4p'X4%-?V(-p2ՔEOϙzJj#.0!qy۫rx,eJgjځ/@0~ciU/A6D`CH&ًaG6VmYǵđO??&9ZPoGy ."`L"qNKJwsXt%.?`5u1OeA̘ņ$ePZPs"4VT+d}JHŇj gDD=Jsp}m>gEcm."SJxqH[#- 6=}OM%Ob:9ɡ2C=b{ݝ瑎Ng.\5h/̲4 {W!9&D>ot,+` y m̚Ǧ{eSFr`AAyةaol%ֆhVL$XdMZfԘc XN\ݛ-@ܨ'yZEifj@ /ZNR>'쬓7ٚi\y@#' /m~Irvc>@2iҙ$..4 ~dzL$0B"@`LО`Dw"(FE" Ty#HJ}r <$)%QgkF$eic_g8/W{@bVTp'-Yi7긋(7ĒYܮWZ} 20Jd צKȘR̼FYu grReP2i]A#ɢR6b !MζO;F B/ZÏ?9V^k*rDSKYd1դw-f<} r9zj6\Hn ]&7Ać6W.Sf5 PMC 观h$O ^cB"A Rb \Jff3M y ))Rea/] !3QD$։ߒP 횱2zU]*YJXSM(0zSI.jS\ ̉W(NKxq)zgCzS^fuYUYCc}jCi0 eJ_4*͋vZBV ԆD5;D H' $$jЀj;&0r<*3C3zltS#ŨZF1Jp ]^|ѐRL/jV@AɐʶA"8%.hE*%A.^T]J֔3{^psPUj*eS, NC(IZ gJі$ݓC/{:5BH'D"| A/ ִI$J"UH 2HXfûóֆ(QPidf!5/DY( b,VUȡ~zcqwSyŵ)] $Rg뎛uH,PUBˢ.vod'ʡ2z|e5Έ,>ntkqp6" cZjPI XpS"%21C>kQ]ZlCC=nsAdc #D OØxk@.#)BgN!BO3N ] i|.\{f|O k%*U~B.:vHL& Ѱg:pe׍O|RcZ51" X ѫ}Z8kDK0wge:KEM ΰ x2Υ; 9}XRDi[1ɷ m6BkO|1zFg>CgPR/%ܪ 3dCΜ'L\S<䜞*+$3_a^YOe IAx9ٔ6|zJͽ :+* ֗:eWc^ISmYi;9<~fN)̇~#ufo7"g˓Iw:Tԇk= ۭ|?.g&~ϐ#B]BAbCg1Rw薃(9I<N:[gQs{UmUQ{mEKʨL P >SIÒAViVWg;0@9벂IW< 07Iu *!YB~/ׇX̐?XgÄ\{zH 5YYI!ڸBN62#쪔J_Xfc@ @9vuφ߹?ZhZRsג-z(ٟ2bm` ,Dz:2yiߡ:Nlmt"TU؝jڂF_OW"7*B έZ9RM2Pm=KylQ ҕ0E=foR@G`KW?`'Ͽ:i_Y,U>ҺPP%|:&&TCz(+Hy'zZIpwY:$^oY QDUH7qRQ@1c,@Ca3ocs_tRFmE(`j ZĢ"vPv' Q5c>!74EUZ \KcD2>] )hTR[ r`) /0"xby)H}+_k-0F(@=!8XXo٠"T|w9>ïO]~Q z 'viXdYv_Hʣ+[t2 5NMCQ>Sj ZMuXw8hQ?b*IjAY>F^9}x[ ]*6mY eD%R)ͥl>sՊnwr!r KC"柇" KQ,e8AMKxD JOSy6>q $>ӵjD;^:IҀ0,e7a  80><^N5[17CNu:޷l-I 3?:s˝AGP[jK(Uc+s5BftR(4(k~ e ,U̎k,x]gzcPޛʩ֚SH}?rxNNxq8" OEqP1 KVS@ ՜(>u?O&B V!Lkt.. ureJkF*8_s2BTR>/O!ݐa;sD5 u%ko=(J c~}q嵧\5j;z;[q h6UOoQBqa̜t&Kט˦re>\)2׋C~(W?XgVs_sW)ih!زs_ a<dx;B0SC%9mKboXy4U5[ (y(Brfq@b*RRR \|nRxr0h>׏YlVR\ô?+Ŧ]}H^Vdeq'{ݍq/z/;-\Zi ы̮ق(%י5V)0ŋ A'``j<S7ŢNkl&7p}9 8W/3Ydkv2.J-5s;ciM#sNV5!J}`#Yĵ#&۴>F!<5D7ڞO3z@T=SINNq@UYzۄۤWqimIS8pt2^nQq1ݏ~?EHiD`>9.)86P;~|6@[y|xt%*X,$O|wqO AO ,ṇ 4jVܓA.⑃VF5裼!]10yCL[!N5^;dS}&C-hy$, %t0s5l8q, *vܐfaM"x`\,hF-1%,gzbZ"/,"C_Ue/cuݮ[iB 5eSQQ`stR>kV49MX,LC<QYv f9:;ںC3Xq}`} 3ciUzCP@TRP h-OfKU,mO9@%zDS:܎Or,[ğpX:\|>fսAS޲k]q݊KUn;fY:6g r ߍLH.h!U57姣xDZ8)4^嚆Jj}"@mJeɔZʜic>Vnb[5j5ֺm<ƴq##}& tf84GM$Z(i%عXO4Wƣָ+vVknu(9dlk>6ɂl] ys6_3=*7R,|2U 13Á7?yX+V \2Nx<&Äo<,B~WtWL{AB`N0pIal&0h`D& GBP>zV㑢hl OVQY;"^3S,Reg9zգ/<#VOdZSSyO;Q~jC!' UeN[D 2#~EM,j&)5 mOGk]A9twR:Qh8#A ' e$3 WFcFva#s٥<-3ؘbMTK iX,4ܳqY,dR V@Gny3&Q񠻏PM*Awz ,-ڏB)Òt򺴉f6GCD">8@_8F#]S?e''fXT$ewu@Z[@;OoVM}݂]bqWgx[Dd ee1tJ4}[X$&^xXe-x?uxjy4.,`B|-jfCG)M Zb9nR=>/ ^a?f7Vw 1,PMDKUj?{G&Q&:$KDU+q <5 )#=Ja[ep&1\h2'o^'3m ZB `Afʨ4` >0YP'%w'9x~KU}ay%Y!9r|b7`CV^XSve.AGfIaS|NZ7 @a( qpC@ "sv망Q{tKxq|.WߔeI.C{}'0夤$SJ,CuJi B#.vт$PD$*u EI4@5I'W!V&O|?} [Rn@_n0t݈@I)B|DXjl]Re:? & !Ǎ(=BD3` T!HUQ6a)tFAB%r8J(:@e)"|FD-P+Q~yw]TvL[u;+yo Frt` T~ @BRa~IQJED߀0]Bt@Im!WJ #{ߴ{}'؟)s#Y .4_ hU-0ux-֚+d:ٜ!B`]tNjuJY }3ncIf"{aHeum _?k5$GߩrVQIGѸUE9,p\v.|sMno=dg 6}؋bDScF7os(*)6- B6x@)]E=rKV:L*T%gP+Qv8zJJUM=@T>SIݶG-OMRR=?"BBJ, yMf  41ZʐBEmj0=u&=޲Th3!txd޻"(kw Q8ħzqjf/E0ȕF&(eo P\\ MS(Ǖ- s1] `$!G89 (d洱'UtR*rOpR162?qS ć@ݣ^K}"@o1^["ݮ`:١@( JߨiHcuVQ4b)Pe (:2zt1r~ȌGia~f<%:xƷϔl) %&TT&B)i0}d]h:''9qVWnO^QPo\=?]UTAADNBN^sz] xXyMΜ<#f^fdQKg ;&*햻=bN<-ִ}+oO)6x؞rl:}'뢜nsͺPzhѨbR͏L9gD œSVe!`/aXƿw٨vdCT|"1".3|ia i38!;$ $ QhQ2U%aKDzkABLL8֖ Rն& OW eY X6P! /"4EyP%P;qv,4HnIDRx]g<;'_!4yz飱>5\ؚm"7Р@b b!ppy2BSd\6N񰅱 rL{J#cr̎ sG;n?f&"Ko}#Vku/fjSfW[wdũ*^3MD:8p 8mxy]%wZ`_}@đnнX@xPF-⟀Ɯ[PI? G﫛\cSb㌤sN$oO &|e_zSЃҙ:/la=̓4U _S;;1>S|\^"Pg:~.|S0~Q"9=S)iCL"%G'֖8LOs*ޥcE?B.7Gr)ƷL:ۖ6nu.Y%I@b ,2늻_\SpYu+nd|W(-h,n t, $0qw[&4# }nUY52},/{hsg[OFwO.*Y%6(t4`A(36Sz|I&}X ^t;`U`QVa1S)X| QƥV:U"i;6vr]č̢aE5/g'yƛb03[@EUA59Zj_JM' 2#I2{B04`@(D n@ n˅#-[Kx8͇XA2/lW${_]8ÜE*ύ57ZU7t$eG{99&]gf~hpoͺu=(w2Xgb*nI[|.y׉v0Cԁ!Ur"e%@9*)_ ASBA 0IA&*.|~xv˃#"3ًH"H}OYQ=)Ճ \3oӫ1,7~C AdP_T%0q!5Ή?~5=wSK&Is@}Ou|$E[k[huEOO߫ͬK,)f E..}J>j˂lPC@X2,dT`WqJ uw>q?Y ݦZ$(DњϩAD.{ВGVS=PA6rU|*2E/s}L},Ϧ򩘬]uBE%Ѩ2@B;TQiÿ?WC'{/x̸vwl2q`Xf0-"E~;zjF~Q^ˢOL7ѨH]_6ڲ Yd}_F|LŢ=N`^$`IL@7rw^IKr1`Qr@q8~J}G=3&atWtYRN? 8H~XZd%T%+u^ߺo^(Fl8`GW2 ¸aO(x:g)v 8Bi7Y 7}@v[+V !ENLڔj\Z?O@H >N%s0U[vgz9tgMeh~_?} _erNPcu{xLYHhٟSy` uaU!A }+HG t.U,$* ,PULCW QnD"_)"l1$&?hE=- ~84Aaqst&it}H'i )Ms2t OUL3y+/>p/l :-a1ZH}p8۩5 D7Njv&-1Mfܝ͟1>3!%'V5Kb}] 8Zd X<s~ihJ7}yۜ>{7Z ~FUjc4Bu$v"/E13?rK~Ù[}JH?!:bBà\vhw-yqG?%2<>jDJrCr{=\ Czh`EkRz] AѶ:>41zQ`zv EtdW[օ2i;諸wk gv" ++SOJ|~9$p[0Pq<5qw-6)ָͽ j\qU ۊZYfsuAOɫ嚄 m:j[-m*& O=| `DټYI~ICI ;?*"R(c.׏), R>GGKk86%4EgqyZzKM{Ofʭz-rɕ4~1XWGc_Ioa gR*O 0.kMfbOA YWJ s/qz3gCE]tTfY $ l ^8Kd?+7y%gn(h4b94I.lL{n]RP\D4mYߵ%< lҼD90s&[05*oϱSM<y7Ii!I"M@}b]z\rxIy?؊FTF9NNj:U1^#}t,4ٌl2Zs:?~O# ; 05pVI3fV`6CFå>¬ٓ!O/}i9=,DG)}fFNNW<l!`mx!X^whLC% [o/%RaPx WOS[w&-tb40C]@~*wmspwɣz$=E5mMgF˾*@%Ԝ a+B ͲCXYx=Z=sAвX 1x Rʪyg%n~yXKzGXǕ9۩'n{g ̪vC୊31}Ug`Ԁ;NZժ %\|oG,pAķf5$hI> 9Csc\Ŵ-yԹuehvY.r}zvNlg, m0U3o4Mhq@pNY RTB2r>>e;)^j97>;Mf҉ߴKݵؒ)H͌.A w8N/qe"f/hjKZ@eS,V®,V=>8zo߮  u TOzU[NjF~ӥ_2*7> $D"$D@3H":y.gi!\lpPb'@dguv yɜ@j<@X# B2]"C %'vv~hry<!6H"h:mh|&ܔ+AF_xpz&֟tht -(3t{̌(r3;rH)ƹ!F{}ޮZ3k*VN T|XV}2`o8ةnuqYoup #i;"7q8kg^=EҊ3Bb/ ]PרFF9 0`R#nVE>PA(z+K,MJ,(秞aGKW;9*i_ԗB$vx7YӰSh ވ(sSQ]f"KqG$sSUwZ8AtIqM:KD0s+Ut s&t)E7K8:; ts7qdؕ}q7~hd(Q 20}j?V.߂"LWK=)_~x1`L|2J OnLG. R0DJ|\<#?[TgLû4fAARE7$Yӿ7wP#%* u@(Ye}~CWD:C[~_2=+9H1^b&I;M_Ɋ$g*I](*)2Be,6 HJR5?uzoR4,l>M}KI-~F'%|82K`0G~O i?E_QT"J_JF;U&M^P2۰U$|PE|L?AdR}{2!WBHʾeO;~W粲<ϱstfZ$/)Qܨ`B)݇"SlsvvJH5m'7N>r.:.Ѫ'RR?LEHv{Dr9 >}gEǞC@e]=gɍGl}z X%t)uq?3K&3$HWXƸu?钷 929f D_k }2*PjV޸ad!dA찭 5%H@edC˚۪SEj1ggđ[UgG\ˋ?o?nL>X9ƮFdԻiWct{nlƓݛZ^a+cF3|bICXwhgolsFkJ}ld՟K % $Vԃ5nI YwɚFNP'pwㆺpZ֒ Du'98$EK˨B]\WR2IV\h(Q2esXvY _Ƽ|pfu7ef7E!Sw!\'֫a|Z9[NfJ '@ w;ynDŽWA6cb.mm[=G0҈,ڼL" b#i2D܉WNCÒ!kM'A㎐"lXVX_l&)Ee0OlLe#yc^ܹ]y[x}@+co/8\N{@B z0Ǻ)@"<\TeEB.^Kn KPq4rB51CY6Ke˞Cnj .]ЉӍZ>S{-)T=$Ecwđ`q57 t#hn+ny02[;DH>eg i{c-hiqD?-}&\#"9hϧ6^y Q}oqqGoGP]Kw֦Ț G¯H.$Z!m3Ƹ~>0u`6zEnT",z my~ LS`ڙװW3Yf8و)%m{!10i(e8U P92!%(WNEN7?aˬ&)VvY"ܘa0c\hkjg_>Q #E{:opv˥Ur~/+.IKT CC܆BߖPICv *^;O>V/j2 <|*[(*jbeK8#Ol~]ܧ@k\Q%=4A;R)~v zUvRDq} 쟯@eƎ]֒kW_o_]-er1eITIc?]#P$Ęs7n<|'5l|bsr?8DGJ=ޛ$D p^! 7{ݻo>}ߥuo}釷qNju;g?)? %-ݬ+'GU)?_={{ܷ7(gTC9N$W}9%E!دv%â}O7ʸ :̢Z>"iD0j}(n( y8v5XvsQK~it?8h-~v%=QgmdzG_ckN``Dd}JܚUX+C8y+f2@. M!:C(dTo_ݺvJ}{'Ѓe/oˆ5²AFn%Sh`:$& Zr .AA_MN&v,mvoXVD ?0<w>;J}pnD) hNR\_gpjOsV e.W$ id B߆[&`-a+!1aR M%; ɟ1iR?++/*_S գ@LӐj\'D?r667_̘DM۳3?ĽJYwp4;YAa\dlw'm~c p'14vGfV@a,l+ I9VD'_^0bYX~<'ytİ'*)H"/ӈ[Ug_z<`ɸlc 8 &HbSJ:Sg2+Kf[n[{k| 6fGݏ\<)Өdcba~Y+{z4yX`k6ª3>:E z> 1Q"g"y&c}^ƃ_:7QKs.%iYm|L>whx7BlsVe*Ȫ<|Cu|eͽlu< )o3S/A>z49fya@{e)qXC.XL*ayQ|6+PyL둵Mj{BlYb2+L[ G2RU:9U'!rHl{"TϩCi} kxۥVCa5C]{<-+c#-r=w<^|YeW>7 }5mB8`^m"LD?;/&,HsX.-xv+pd2W/KĚx]l%©0iܮ(mҰ?vU5""?纋~&>RŰd 8>vMQEVbiZmlp W+s> >@vpLL@IZ7Y[LNf *ru/N[qn c y+O*TO<ѡBC2xO ڼM&²uIuDT6"@W0)9СxAg|JzVdQsD`': (~ ܜf>C-&2yyssRq^ᾞrSSr4 IKyĞn5y,J`! t,/B˴0EiC*mtTΗď*7pqyKΜζI{Rɲ4'J.&i^ 'VX5"]+/ЁP@*v1=ZͯSf_#j\|?umS?bYrUucm gɽZ; ѩ$V02<}}$&fc ˭A!)*XHSNF"JՍocͯ#?RTf׷SMPf9!2F5,: -%X-91, Fz"Ox^mY}0R`IB\`Hsq[i4HšɄńfZ +FE{q 9K4$lhJfA˼N :r:3%>B=ɉHuXS p?MW5CVd~)c.)ul\X\.~-ӲT0f x<0X Cu*?\z'E|u0&[,@1'-ĐS+%3IhQz_㸐:ML"|Pa }W{nif**:88=->g[yM.SysGKwE} #Rj?u~|A`]Mmk`r!P$nR8 ٞ }gC{zXT[ᅨ}ϔedՃ>Oeto6ؚ'.VRH*8oߣ륭hz ^xvƳ?xӪ>s.HPnnM 9S-]D"OF =!ovpVNkNKAm(c:O[{xxxDURT{ Ow5?eRBGrؐY̏+ohscQ2zx~x8>2,CĮc'=ab bBmd! ;3$'.'݅qohN:4pg'I;GDG iX#TIGH #]Nqho;)ʽbg}IRW " .E =4JDb#]=yEd )TPzeU]DoRs[#RsBlӂU6ٿB}Y%Fi{RP6Iw+fh¸ *JϐD]"N-U2`G/m@yQ3OO (<$'#y d4LWO[8_n+S񹗽@G}G0@J$AEs) uhni%R7([rD]Uo';"20"\Fzz3&|f)w}iyc89if!\_F zk~3{GH`tzcqggw=h\zrɡ,Z%xhʹ Kwᣤ$6>zAmno( 4l_yA^q"32މyj䑋|;mlSv;ӹF^6''ia#v?3=qD9p_h6oܴō!W0C&zZySJ a*n`NL:qA熧P%JLBdo Y~nz I*v܆VJTdѭ[@=0 Ds֗ςӝ(Xr,.|)d.5?by~C8=T DEXcO) RGkYnVHrȠ%N0.!ZTaB*~D֫"D#V"_(OݙDG|;6v>s_NrT3na'a3iZycc泡3p@@,n  9M{DJcR`F))Ȫp-&Iy8J Ö?SIS@@)OJd`enjhxc+@h<&f@PyR>Q'?R4}Vy1D3Ncشv$'ڱ|:T ;JesZ 1䶰DC&|Kw`oSTW/;w.ӣ0_"*C  Ѡt!Z84p մxX(vu#h=]m{&RhljeU6%K*Ju #-H"N1Ŧo:M0  I+ӭ [+Ec) Y΍_8/_f[=Oe`úIBNC^P*OkU8I?zO_. L TtrlʌOaŞ5&$&^FD谂JFSmƒ2=-LʙD  넘N;.U}L1@ B #b?u]S!nٸ2`s hk }k+M"YE(oyCkBA+(ȉ9 V  G$i ˝Ÿg=NgqAh>nB C cDBw0 q}KW7otގtK?a6 FgJ?ggCkZ_3RM1(9V,C[sqyg8āqVj-m/#U2qKkֲf}1.lG꼽d2Sd R~O٣y0^J2.&[B{tJI?Z}VWEߕ|7⸝gṓWdMA<$ 9Ḛ/7K@.~ C;C>BAUEL:`Fo g! 0uՅV+^^{*88 XRJ\q*.x=ζpLwhZ_-}wylwVxn՛Z- K,h3իBڑaE~Ȁm.қ.fGИ 9=#k?aj4 jdhFH0P ceØV(|t("1@AcI +&`}H5xKyl'q>Om6n)}Z!cMcDH q^;;d ٠db"D, oc[U BnelYG P $2>`Te&gg 6P(V rưDanc:nyWڿb[E[A+1kzUGQS P:^nOWƂ=sv gxA fĕR(ہ\l+r/IŘc $+d)U8󢰺`\*P8߮Dm b~)y[eJeGŅ>ؓJiR~K%G?7ˇ(@RAiY9RZCAzېJzu}Sh c)(A})4 "Կpa 1\JY53u`7m<=#X |eFzh]w=[y^~3o M2TKN.xqVe@k<=)yCDH>ah \>q(78#5{E,JuTyRhP9A]6yϴ{LرãpJqGnѿ2E|PS^͕g^cGړvb}~jKc`^#mAsSߠsf'A33t; bt 'b6BODݖv9% Rp!P^._eBm2PE]WӨZ>a혿ly 5x̣$!q8gu[Wa2Y8́ǤD}2w碱^qXӹ3]zZ6γ634@*k?w}^,`3l% *Dp>fX͆Rf.~(MIyǣ&eIc Ezѧ wfT\)>B?_mx7>,"Y 1r3㪏E'7yNC`!8 l gS IVm *ygbJJ*d`d: $`ɣw NI y38!<dG+c\ ſ4vi=a9aZcbVRC>(tjMɸRK4,]|&'w)E:f;H`:]l}G:Q$A01'*UE9\ڭ"2#>J"lVoyq_DMI$|y7_YW 9 L@wOcRˈpzt(,;X:MA?#:B |-ewP IDi=^&9T:we6\/ s 10G,<3-Z Qٞ=ak>}(bTRZOJ%/YCd˓#ly\WG_}8s!9=IVveNG+%X #K~/[tOvaVz9eG3jUv)8hV~}xD-C0 !p$mYuzHC8No9|)kytށ}_LCHb F_=uT5'y3ϭ goY6(:}pBf#o8DrǚJ$_9G3q[z)oOpKVO;\ڈEv]=!*i<cR/W/y*:A5R!,~-!sCJ(Y%,`HwO>Y4L`~e޾}BZ RY6ȴaHyH H;9d@~Rfa;cY- r!GyJiL+_ο~*:Ii_:~k9TZjvvH,lej(;DtR鬀?s쾶_@9e I0\V%L4?TU5hJLDm$$SCL˞suahњ䧃@*>w~'M᠟_LSPyQ}v ro*w>[s4t6;C7o_|w}^Mrc0bWipBGF_0H {V„I ǿtT)yX?K7;GYdP_(M8!P0P"O~%ˑEn\YFÍԉ*2ݟJz42A mzk99k3=UG\mA:Di:P /h*Tf>QQ49yՠTiaan#ŦiBq ,fog?j$+ݲtB?e#$s‹&óO*ዬ zӻa}}A |Rs~ ~_WD8GÕ'[hkBIbkWFY,,Vl^# l&҆s ~HY0C. Hžp3>iY#|,*wNADa( ( L| is>ɹ}?qD`-8ϞK4#(*>>;-mswP(Qʹm󝕭 4_sV})o䎕?A@ ǑHg~LzgƱdt8`P앏9 aD[2U5gplgoӵ]Z %Nk %HCg^sU pq1B g}5`;U}8߳Jn[,B9:#.1.GOzE!T6C-[#=wv:mڵ",y#-=qI XgmʾWƋ  &&@.Um~̣^uJB㐪箽=hΓ$%ǁcKK\wP>OM2l+Ey[ѹm1|icǗ#udUp $D=tCCr&}&s$> fe30'=:HYc~("Xc!# nב=" )io!%N$ 8Gcr) FYGBH'jS-Dd„$h`LGYBް[[髁~Kh@\2jE ̘6ҷmi= M6cr''(gɎm ?6$'z:z;ې(6]w6a<;,z=gaƑ&(44`KИfOe&\-U"P{N ܿƪ`~d *Y5s Ӆ7_o\JJ˧ ,njUmWiXZXIrn?=,.`@Ͻ50H ^Qv e8j?i)Cxnc.qk)2!ań߽tsw3j)1mO/n>a<8՞0ĤNnexb6ؒ{\RʱƘF K7Lƻpy22p,!FQLbݷtKu8G+֪> rgiQpUop^|JPX+2W)z0Ss[!jJxO~"RBEgxQ "@tcκ$" w%2eۯ`d*Ͼ+ U(: swp?/=/o>ن "B -@#٬|$x0 ÿ" G wx IK^ߡ)r  =JLȢs}-cWQIv;=p·m[3f r۳ К"O.!?WZ/YulK w+rXaSy@8(OVޒq \\T/HsgB < $J/-RxKPI"ԓ>K$dʔI#\" vY J^ZWXV~^ D*@-['61k-ON@@:P DD $fo^UUga}z=h@~(PL}bt[DES(-黵~؏3PrD A,PXqDkt޼c" 7VL_pVF\zDAz2~0797ݿg\ NfC!8&w^ AUG-ѧ=D}i硴E5zCߩnxq,e!@}Cpp~B~S&yI9b[Ь_ N\XQ: yk1ݯsء тTF XP8*~*~ >ľ\z.3_UpҠP&^IH<\0i餻uyƿB*$*w|f" ֪z7g~boq-$`"C9H !|?է۽2S?>19Rm ܂ ɽXw}Mՙ „}Q}%kQPЮG:?}W %FI>{ߍ!H#͠L+{>ˈA$޿]9ҭ;҈  %AbD A(ЁƗn@$z> % @ X AB^)* Sܙ42Qįy~ǁek;JQz/׉Ztl Y+_`KV{R>~ϷRRqSfwC6t yk(@͵ 0QY)Ir0p"kqK?B_RL=\{&9# VA Kg[hI{c8LC!-D:fӓ-w898Ogc&g/k~TړDǾWVD,Fr## /&~=1#EG`YŇ_Q:mъcNvk##/X>&U7dsş|NWwt}֭,^&_o"mF8l1t*]h7{bFWӯXUtCfsRRmč$1hoba-ZQ3 pmTDuZՊ7: @/=&`.LM;a4 7;.[憿5ʤ<}KK_g%-LE36F2SF_w7bdĶB:uds4Hj#ׯ~_un>_\]|n!/P."3z7}E7Ȃgs)Ze ,n2h&0">P6\0s# wQ|~ayI% {57%10ɛML/epF&=+3fSAD+Uv{m8nnڶM&Ndu8ֻ,$@Y@1 i' <˦,d(BZ$:{?g+r;IvƚB,.ss?;W#VSv8 @Qc9Z+H0ϹB&5]3䶪.CY6PSbC[ljp7ٕ n1uW|KA8-\B\}{Y>,"OZ{D.(i`oGZaƹ;G'e5}z(L-" ap:YX_n=ipU!…CYP+/67h?-bJA#.835 Cf=(I zgqs4-#Z6^q(7ջgEQ=aqYM^!#@ӪD'x$o<*W$( R@$sHK"=Az9>tY\kߐt9`y,6[Yr UKWfb1.&xS۾΃97<1wwJJW[i[o[8Ίm`$+/Y pGR#9^7T9 +'I8D-8фC݉I?X2'KXBYOo{,"qXXAF dbۍ(O};QEӾOlH,?QQ4pEDVV $HÒBY9Qla\!*TH=jլ9|;ԍqyWɏ/*oaG:ۢt LvB忋pwYjCwŸS"o|G{d4c _/OHF A~qe?R^e+pޏ~prӡ|= pFt@7[j $/P$0s*w[?H<3\N?K"XxZ &o2yld-ʽG0!DSX ՊB}Qea[uX_`5^9<^Y ,L]l Fd64z Hs36 N ,F5(?á{6rii_F'ƈ)5V̑`)J JSZ@QNr8RJM*gPhA#Ч .$y-\\ݴ J鶊9ML裇v/mAnÌdŅaDeᦰ>V)׃%0[hLZzK2J>]LjZxPv |Uh9!?7eijJn.&}>_q7i=}_a Ϥ֩wj}(f nz~lBm{vjdr2=i?Ĵx,T0s"+O7wdL^LpeRk!PԽ$'HKy(eZ# r/[|#B !9M,2nwlx,ǻdxqyJ !m"GQC7fb [\ĤIdx(n3ͼU4KH#s/|m{f_7fx"ǛQ Ya`(PaNy8_4axbvgl &D0 0JukFf`PHTBnwD3:hR)LXl5^^׬ #Ç B v>I.Ⱥ1v@.~B+ʑ~mOtBs )ovLiPaϽy&Q2 Em#uh%#e7˼m;t55e) Vԭ3;7p>*K%A<8wAkHX%a)TuJ*?HuQ%'( (NZ$L]u;3BȂ> ue=Ghdʡ)P?މƐqFl|SY$CN`aGy$#!zqIs٢eE\bZE2~O3`a9w9 ڽm K8q'uZaء%TSwdYQ:il+;O)b`II4]2/q;9R̎ie68MESD4BHH̿cSW9d 0D#;[̛|n7Z\ݼӬr!F4z<ޥzIۏFw:JhUՓ^лkCotYi %wBC"_cS&g]Jz*n_@e^sնicť`;&!d3b20Oq8isHEo<$ -EOA·H`;)A$9M Ko]+ίKj%'M 3ˑh-QTl UE7$4% :|p.N\ ~'Ch1 fg?ut75ˆZ'55P7H= KCC'ؚer3Nykpsԙ [!(ɢbYi! ZtiPjvy%^1[tex@D(" b G /&]F{:&Õn6'f!%i"Yc !!*2;HG`\*-fMdpkz=ERV aPwRPlPBNѬr{9`QkȞg^'J퐗G?Vf-4tg6D"llO SFdN?h&;Ox_4Hek* P`餕"G>֤>LgZ^6{&,{񧍹fdMK(KҢůNpHG$dpP1=]Otkc'r.D3SOi$;Bc@yvtM'@!\P;H=LJg[7/4|4خ1 6YL,#ťO}CKy~Hp~Ƀ$Ή@!E^9 (#oi8=.?GΡF !7H9SgA[eGv qHC{jLCsk} .Ě"16˾u˝$>"y4k\̹T:+a)f@eB *Q %} dx<ݜ&Cۙ՛=oƻƬv_vjdI4Nvx<Lj$!$tkиy-zS;T a 2%>j6[2PӠ@H in 왼w'-LQCң({l[XOޢaj6A)τk SDq " BWP'q@EkuobJZ]6@m\vEe!{Nzҫٿ<_i8DPO\T}FA7K|տ{oO_h&.7!>RKԻ$ ^—}?xA=N2:wR'A1m7woeͥdR ?,z(r'.Cv ZG{oj=;,_GoUB2 m\ʉwawNޓ; 1[DC~~1wuZ㟇MfU]7 TRTgࠬ<%BFEdg*6S<_aT0+񼏨,g? $0ɀQFX9@Dh h@KD;__`/ #S(dF1>7j&1Eo;#[c"xܲ[jx8]<]>A X/|162D[8Ag3+G4V??;s ˸5ag1=Uߋ ET` O %ՏA ޟ pugb+ S^~{~/: e(?봁o-vCtr+."?c~SLab3'$˧coK}`M>Vԛ[էX 4A\u . AsWtD_1@ewcuT98BJ&AK:T'uΧ9vV7hbA>OͿi+;<ɜ}KH:0bKI% v_FY7w΅)0 |UoϹL9VO[f"J($ a0~܁Y^R$["Ycb'qӡRȤ=㿷вBs`&9r*|ɇ~OCq9?CPt:g_eŏ'mش m]œ@4jIXW1 QpAj+YwFwHl@W?3w|?'Y ?$$ fF%ҍ/[YOA`04sjec0',xI/DvN.\}b ط Z=Ab.A.t@l"Lw1jn1|f-.ؑ7"[9Sde=sۧ~.ZZa쩌)6V$..#b Y!2KYHa[B̝.n{,쭖 U iT!R*M-fiQ:΀u&HfTPZSdGGuywi߯fltܦH)J(1[ɽ޵PG"x .Ks0PGj|5u?7{c?rZ0N'6'MWmɡ)0Y.F VshyM8MZ# IPa5)Qy\7>=Z'vAzz-BuFYLe K MY$NPj&-$ e:ΐ*gч U9pڝWӇȆd&hYNS߲l9dC!/-lSoi Oz{Oֶ֢-.MuP (Sfjy31O ۫/O_+WQDy+9׻r^c&/^Ǟ#L-?Z) 7P+4,oWW-0?x:l]t"acNsY9Au# G4~4b@CŽhA_B _`vjJs~pFz A"ORp0@F]3uVǰؼxHa3^(gF{Tα81!.EEn^9{Q[l_ ZTбF¼E^" VԚNT0Z)U8^=۱KTSKŵ*v)x>?{?B(8B5Վ?n|K:"iϚ7; z &FJn=-u=~4 [q {y{~?x^&O_Q6EcX)B뷸q#3 $l#P+#xk$W{p$ b'3s U +]J&5N vT 00:6$,S܉z2 0MvnX&rY~WGv`]MqQb4Ѐ k*TD-]occݡ o)1߬1@Hh6 0jL 4}TB)Uw^WHOKBnQ/O=Gk<><@qCTI-Oz+- +>ZCb{ˣR%G&;Ӄf5*폗79Cr\ y4޲'VI~W!qĶ !N @2 0:JMřev{Ao\z Y{8!J!󑔙M2ltNX %cH U\0Tbo7CE>~y"8#ur G c9:n.i!6堟X<|4bUl57J CЫ\`jG+)r|#eT]Bp C؜XFIbO>Vjt b M Eg?}$km\ $@€&W&2pmv_ku_>0d|đ:^Erorh3o:xuNfXegAK/&U[Kbbam1bl텂)R%&K J>u9C'v466N\._,\ɰ0|>Pm04T 9Ds/1]C柗Px<smĔcOKbT),k_cytm,H8 0:_qzxq6-M.iu)BL2bbϞIB2>J iZ'pHd M;V7T$$$HEddo;ƣ75l}+oT$ 'fpІ{&R WT~ru jBBfގ d3&=zyŀlET!Ic _ VaZ8$;\80{a`0NǞ'_Iۋ[py*ËT ^4{_Uua+?(m5܈*rjI}pybs=8&a.(?NZu P9,_ӐoioiL=N CKNFCHBԢҒ2U&RenKVٶ4њWq@~H#Wws 9{'k,^Dk)ekKNL Ok)ܦ_s B!мY-T¼WDcde8!СK_цމljܧ,b*h$KJuA䏍anHT3!>HpYccOk6vqfɹh6L2'Z 3W^+&0[]w{kfv"6ޖ|[:[&IR +5Нk|Ec 's<[ߒRTI*X(+oF6Vib1Fn>K0AQ_rL5 P̻t !Rs$agҘV6EslЧaluDt{NL>"Z\ Fk @"oڜOyQȫ~&KgBkT }%ʢM ϭꪮ+Tt>oGGW zo=\zێbr.7ևs`" KH4㴘EObZ݃MlDZ^$Y7Ф?f"}:1VVQT3QmPDq5KC)-N.gQ9ݍ\F*w'e GBR;*niϽYղ:ZHFN|3< 4,x(|$JeM$B"_1L`gr,f PFJ!L`4XWwp l0lyiQtƢqKovWrsA\ ALߍ+G7't{g[,7Z-vҰ LMn_׷bՌpjn9Iw[KcH'e--<C t l@V@:&d22Li-M?rI2գ6njx\\Bfcŋ)fԐ*Za+swJA[Wt727aSc'2/euD$$qgQG~\y祼A嶣0yy(CkN_%h>~^oKM(]'k[/tѪee̘z<(HfPIǜ0J&yE N,1- /y V˙8:c/>-&$ F10@@6=q"y)h{?w-#5q+0!wo D-c.PD5Ay\|I.0 @Mč!Piqw W epS>#!rP~z`-roiKOB1,R  V~%V|㘠$b{ Q4d牟}~Iq#{rWՒ܂8N|+DO™/X%;bIx>ְ$`r4tYΡb2;_qEPm7{Yl0.Nݔ-L8#G^UCH@!Taq=۝fR2&Үi>iKiժ ɟlI] )%IXB٥sgcZݘFQAճڒDKA N[ZhC'}`i=k}ۧަ9yms+*"ԓɾdڒCQScfan0 4oC7p)7%E;,L0%ݐk<hǞ )[Oe۞N2ZB-Zp*y@@yEljU(;=1VybF %Ȃg*,#LSb{6x:%` eXTOvQ3c#&^c%[\ `k Kf0R8,y4*4AHPշ0e2ldؤRp>{>1{hnYM76xs=Ѡo9ج9Dc }<Ɵ0#bۯΗ|o}^SE(6V2YVG$<\;J=, i(xslӬ V= kj(EOaۯkJJ()L6I z6SJL-`cRt3A?n T&Dhq!8ʆ7Oaƪa:3VK37dA{EӵG.|gʕ8 4 #@)STP:e[J?=DH˸<ӋDh_F9<U#xJAOeO7_ѱ9s ѓLֹM P*\%``aG8p(bx@0cbu .rּhyJ/1A ck=fp!9F"gz9~ӡ+_sO*/dD>r#i. 9~VWW,:2/! ^x?Vq_25-ɂXu ;2)èp*r!b/w߬Amo{?Gl%}7ARdDٻfӂ?/0l9d);;z*Qqd@mn)Y$_i lnF=afȊ*[RxE+AgkK/0 mhՊ6 "8*&fqGgMt*'c:oQ{hD,'FcYk]` CH¢TY-3P&sU\~yj,V4G3,K W!] ~^>é6oѣ2S.sp))sYL|ȳqdMryD9Ldne"0]{zbHq g}G|^I_iwE>aj7_i} uao>C $R3Kt}տOWhtvY/İ!Cbg"2&E) r>⣈8{mCG-[xSM~ĵ?rK?>Gc[Ʊ.# qMS}Ϭ@c!gpm.}9;UDT}א]ϸ>|訡iib pJQF ZDZ_31?kޮߩ}=X_U8QϜU:oE·BRqQ-Pl(ZK_Ī#"1H4sR$ fU!"ZfdlO>׋+uf(lٻ*kijYj]E*}o `/%q]fp/o,\ϝ֗x?wuy˿+N:Sz~;$: 'v0>$хzYw/묾rb{ѓ e# 45 =`̩yKauHl( ʱlWwi!BčI%.T I6;&GPϨy7^7B'~d)";rq<]*䧈({}[+ Nbhs ̯wh>픃;:ŖI~=)qO_UudzW WXU{N }oC3_pA!Z]z ؓ6pjo@]yݙp2G^>őu' "@L1 DrwW_^dC ʰ ADurl$^W#x߅~߻o4@x8fi'Y~z;]NxDE1CW[2:/ vZ:7ВEKu߬Qܑ 0b|(|3͇_Ҽ 5=}[y ]!!`HhbΑK戒FyV>B43!vHa$|(2g!IغT&;?oKU\|3+1pw/0@ykr'̧WY!Ƥ䘪o %[GÒf:ؘ(.[%L6#d(K+zO{dH-C $Y/定¶iB x`<4ɲxWmF R f~j6m'S PBqD Y :N#Asr^Ӎ%<#l7*sSkw+\σb7/N+Weu0zCз9GwZ~-$Kg2,< 2t)@G 6_-ޯU;;l}=_;zm:l?=!cHu/Ww5LDLXx, h-HB22y-w 2F s  0Ců0彦osQmpNRڇ+gj#8I/?U~ݹ8#H$Awfh~;@S_ޒ겚О h TeұRP!dףn)Ϋ\暟[/տ'ac8ٹg Ƴ`sˤ/?/*3劭|2\lCƾSW3oB}mc]+'t zj;ÞCnr='ch|I$\I$֌dD>g˳}640Fk>߸k~Ώǫ-ޟJ?'[Ue>GD@qi% L^! &3? (8P²5EF-*}sRmh̆ap*7{8˥_HZ9Ȣ{+lxJo2#a J(gysOG /(d;5 >D_DÓu1u.'7u}<:/HK;NF?YuC`m&!lqwoƧ?Y 3p`_v_ WxJ_$O?7RFV})=ajWت=m>dW9o#oii|şx;P/⿖z/[/缗c/luq59?OvUo!oT[Yɷ)`g:)}A5P?̕9?7OSaRW~.]f)B`'Y5% "D1n4T$(]- <!=8:)@>vAH Y1wܯs뿖We2wVPs:Am+m{Q|̣֫~nUKˉe T.jxdfD $(@6~>6CaS|:K) OsBXYgHj0Mf-)<eȅ+1Z&DIPfZL_ "DF9,L!D2 O5M/*%lC , Zid@)نR+Q ``+"`, ]N dф0d lB HD!l$6H (An]JTqE 2"trӁN|]B\"\`gƒu1=򧚃n-ϱEkGz?<m쯂j3e-6^ R6Ln\D>w1 'i|:oqE/~xL3F!ArA| o ˝g5$z IWHBNJ6꾨2K=bIW㮾iGyW|JHBA?KzW9+uߓ%ݲ|GisȃZ?nE&%_O.VsasWi8|M]vƺ,.QMkg:ޝsiy~-N|~\Uk'~+`|/?k/ambIqRo[3uxCdhgJ$%g `I͠HHBT*y~y>d+S' r`"]@DG#G6SI1.NۮƯJ_ٝ,Ug9RȢt}v8d̬o \|- 65:cvn2~2cS͈j4H+ $kv(ux^[wҚsClpk)Wexhu8jG =WE.F}޳;=䞬I(-=߭$@Ј!d0/jhZНWMU">"-$NnŭR^n߲"-1pR^Keۺ;0`;dWm/ ~FG#..;'o>yzF:{/ofu]/om3-<>jU}]fk 7o?e >oN}%=EQ#?t`Zd&\qp6n(Rorېr??M350;TVzwܱ>_fѧ`VgNN!v|ZnLKk@~ z/MV_$EMuT3wA'ZuM,eDR ZN|pLCrpX.Du"LjꔵS)OM|Jjmڵt,5;ۙcޢ fZSug+W"WS@ܝuf'&Uru9"*N؅dA G8106wR)dx\T")sq;::/ht@g띦j[6Ks  jPJv-Y~!3==|iXL _\u}Gl~牗P|B<@Z؅mjѤ7W^I1i|1P< 3vY)Ux|XB=Mz23.ʮp |C8TF@æQ&=4lB ؗ7POɩӢ%1hfRI $:ea*k})yӒOsjŤ 3*-;[wupژ>1W'&/=[qKp8P9IEhB=6;Wb}1,ğ:d +NEsuzy$^T)HMt.l,R:sTz@ԩZD-ppIPhVR1+Øb.`R3.k%B@LBuWԞ5J&d)@mQ29&+,0;be>M}eAZiS*юiW:6OZ0>W8#OO^8yCTYNhAZ UC&>dH ӥvBJ(Ȟ0y\A58B;;#ml/R1T`Rv7wP?q=}:' چ r[G㓂Z#qwm=uߌ*6BRFen'(Q4VFqp= ٩ق\G߱Ԫug&QgW(tzA:lU16EL?+:Tbh-HLD`0$1'MOn[x~ڒQ~kR`QOE:D <(3;Y-Y{<-(K"|b3ͪp"mu&lwəR8a(e?wbx#` c:3Rjԙ R%Ϫ;4 z!ʍ7PcatL~[<< BfՈDZ]}&T6rhu+ #ΕPr9QA.CL ͰEYͿl* VpzKT޶wSggꂑIc2LRuX6~}#bjf J[ Z w&a@ZA7CҢ_Nv ۀHkV[D{Ys.%, ʱWU*]t^gynR'I"B<{~\ĩ.\uWπ]gӋXī*M9"p~QMxVRHtqlw*) hJL̥WK`*f{[c5rQv-aeԼfjN4aThA0WZJ(.`Ǜw2\m GSOPASt4Q!&2  dj8-?XAg؆fTGL]Wc8pеF;& :7Ov3_'4JzI|bݫ5K{ AW&9G!X0 sTZZ,xScUY"ӣrU|p:C! BR~&/t)0|cZ&LP; /aCTu??xCTrњFnp'ћe4zZ IX}*<iz w)pe){;o1C_{$ xWi@03%zl3Up$d5i_cE%1G#Gդq[ZfN%62A5׋ނMq CBSHD}RXq%53M<6v! 8uŅbh74c&$~o2zp77 c#]ʹ_-Hֶ?{` wh]Pjx$lP钐'?6]`nTK-; =oz,R˫&7|/gٔ6G)*#@<51*rXpjT+mATE|dwB+N1yr5VfB[qض?O6BrIf7Կݶh4D[(H^:~ ֲW%)u/g Pfx@2[Iq5(b,&Hqwvnrd\]C^GRӊrΗh/v_ 2c8KA_<[=YLoe|Q`3֦_~)[L(!&Q K6>+${8.ybOx]% &yc=+9ghNȣk!h0vO& {aVÜ.YtRc (N,}l@7W-yG7 rl>B&(%H< FXL&=Y)*Wx65nƷ6?}ܪ1 @;+8u%^wSAC!_ʾ$M-C}iWVf\XcD!k00UZ㎶B0jQKTɸ4;+j^2Y6ʱ*_c*w]M}TjmB,| *GfH_GV~\,;{smc-ڸ8a~7+̤fH1Uq~` MP3gǝފDskIHPy?aMN2>pwF]tO5;&|6A9Դh7Di{ͽ4t+F;T޸=;|8Rۤw/(!Ntx*ۛLHDMaZ&FLe gjGut9kK̆J j0pKJP-d(z`O>zi*>SH%P%sE4Ո=5@4WAfe0-R=~1-0 u*O,+ɱ#@>yyBU#gZ*=Xc&=Ѷm9r$̗Jxǵ [2ʆK,b_a$Pv5]܊:觬N]kI ^M7.r2llQDۺ9(}z*0J[F{1K5iI CׂnDň%F1=+r߁!1; xo$ +V Kye՞]~K S65\6FGl`|@Z8:žR].iTJ@cwP@FA'ɠCm.kBo&0)LMG%WFD}Oz&7l{!W:; C#Tnnh &j_뛈Fst^ȉUd(,JoSd#sÉˠF;Pv3gLI@A9=d{WsP>OmGڑ_z!څ{~ro+i4(OgI͏ޢί/a*-H458JÇj aOhhY{>E@d ʪ-ViYpO=.cixY8+FR;@_¹ؼ~֟9S'Dh2td%Rxr;rnMoOEW{Vj7/4_"u9,nT&Wov[Ud9 9F#xvjmMXagL<'\JUI3G=Dtc{؀!*Vz*zߍ|b4og;x32=[#8B{L ,c_:nzJjqgz iZ?u]}A ߾E-yf85e_t@R^kuxjϰMij&y0xS`(={O ޾ֱ+fR^Sǣ> Bhb]=mֽhep#{u޲S0/~I p'.?{`ts\h,˯HLŷ"栝O}Ig󜦡&>~ڨyk3gс;aԲ\{Cx ͱi @NBP L"RsB-u`s }Y% @cnFr_v9rcPE7 ޫ#f6 n(% IF"@b&^/_C4cYuLl*m tg߂npۆ욌^J!ϝp$z$XgWocBr4pkMU[g__L!FT)9VE "~<3v\-6(Zk=|ze?L|`h?2HQ텕Pf!vۥq%:j ?ha--dj`?(3锷 */.(.gl*SĮ!!5Ri_"T0R*{'QxEI70C=CWTIpK/&v3Z@&AsK>ðwXmojd;)q}n/"i߁ gp1TbECR)h+XFJ APrp,B&ۂ¯FabrX (䙗G0@Kly[5GT]:^ǜdo_U!| |e.gŶ`@z$;) ]ʾ&Ib@BRe?JӃ3%LٯOG9g'0tZS L΂(|R|RXuz}AR _Zڰ6Gu'ee{[Yv3a~t£Ɔ} |{~D/q&l *~)i4͗{kbqQ߿\ss$TYqY[Onɤ0WMe%y^s S4bf8Bmbv/y|R˯?el05p%CӚ]#'‘ x\_J  PP>"/]wT]( cHJeW`rb~Gs>Q#N +Ȋ:SĽ\In= 2nŗ78) d9hZ@0VcBgPAuA-(\AWL3&l?$ n}f TIjG怺 # 1V~%M@H:F~9<}ۯaE:<[X h{C1a<<)gۥ QRNF Flܽ@fңjVv J>2_Xm*CqG>`v[?(.34o΋ffǷ+-bhOy_Q(:D:_r1< t@K{S߲5B>)˅m@r4 gw#ڗ<[T%/„NREOJUt^_|<[zS~b  \_МeQ1QFU(CPBrĜL)EĝDw V+ U"!*6}+:5?l ϧRDAj>F/5)l iDb2 _mkJwk-*clوMGq=vl!ϖJa<0LMu4򮱛}_VsQIkpC&aޑ⟇dj A?PV#2PFoXrd:K -]!3;gN.Q" @j+yyT<'ᩭ`(} b׸sY74el{Bd˰P%WA $2g%+H`W Jl/5>mC{ [9䘻KIrYz&dHb}j;(}+e;B\|CPּ٥6X í-:~8FjD>y@ !'V)6'w"0Jeq.jُ&(\"5ڈ_=4 0rqS;UL&mMFw~>'WC띬Ӎȇc7}eEc;bed<'>$ wyh|e;{'kcDðV3"p\{9ۼ2n _sx VY1_6 }Pϼ|4C)h/PgʕH2[S0,YS?6(Yk%G2Lq} o+4;vJ}q=x0~_k:}y߽!-E/]n݃F Z,*5hm-uZ?]yjفC%aPt)xR^'*h9.BYGCĹbd%eDZi_艞BDJ7#6uDF4{(Ek6_!QMU?' OYde=Cg?pgrFr+} X/d(*Lj2R ΓAP'L*ѻD)`)<$¦`0]O./+g߮~H!6?RU/7vJE%l~ %WCE{=qNz2Ƈy)rw﷪;5͋. *캙Te kH6gjLe ]VWPhG4vFf)ҁ.me(}2*c6F!Q 4?-ۛHSZjSE.6ͻ-AP/6x1FWCQ{%0kPZX̎&76/<O7a)jݒczM5.rXXWzx\c_-u+b8 ʝ:vIF]D+sEQ$r[}GĻfh/5 f7˙mVd|]eVk w:ߘ,5LPlZrSKgĺk *w!n>ÀEα" X47|`^ aq?:I+{2z "׳cY%6z̗gCyQJ;Vm-) ΟON? ̿ ]|A?pjl7z45m#Dq%fS.w~^򿓪=@ƣf%cHqBfg[{mbCOPG.e0m۶DHs[GŬ+) eϏMH!FYc"L{sdodp$=A'*5uCMm o.)E-}2U ߚK(?Zy$v){0 ~de/X>iBǾw bqF6Th-Ni[7/EjLrDŊЌv ͹G{s$S]wj]NeNHi)4y}HM(lUw x)ve29y?L߰:xaˍђY<^`2,=vɽi<?BҾtTj$`㏕` m#H[ 9FB9qpҷ D)NV2}DQ];r ~5~mAY uвnf^ /:4-)!b꽢p6eFMK6^U1ec&;!K1pbX2mҺNK_C"Arq'^A 1JԽJNZ&UГ|motlk M|l}Hzl>#%b2*XQ i3ef.M δoSJ痮r( Aq ~߻%UhP15`[ 8\ewbWp|["ecO\޺7*^XŒ'ozd{'rﻷ5V&堇`ƍ\)^/[۰~@DuF! O!|#'#hFiK| N`VhI-Dž뫔Wk "1mho]ABvw#»@6jZ [LLi>=_R^͛k70~=ƁB_fW͆ yVk[?Q(]/_U2p27l*dMCb5ԮN*F@mry ๖>Z>>CTZ -rGcXFX>X:ӕVQU6D[i^/n$v&O>3wwu#CL*۠^l yJHhԟN v Cޜd6p'cu UC#5xļL3w_)=@2&^ᝡ! Ń1E+9xT` 8`6ao 4tG z2gGXa#W-ZNx \NӞD*2[FU,&\AY|rx}g*)MfGn8\4i 7TEPr#9BZy9*XMrE$iZE潋tQ"E) `dPޚq*-zi{a`]}hˋ/Ej˨j tE7=xӍe4}N1x]&{,oI9vQJem $F#zHA_hMU(b2BpܸLp Jklg_b\lEd=|AL]d9AEQt'@%t7_*?iLQTS[x|]/ď[D+RSqecS1dWqļf2_s<-ZkEQzHata.'Ns!HPڡD)WT%B#ԕkTEF" Uq{fzT-]h!`{m@Wz1ub3@բI~". w %r*jԌ<@h=!~}c8,hnY-2W ӹ -Y)ɍsw_9˄þ9`Ft֢].=8afVQ_8;+T"˿lf'ܣ[URϰ 3Փ Ԅ.k%D~-Ʀj#Ov qwHݹO3P:g&(47\7l6aUz GF*'ně!u '3f_19Ak5vls%q 5y~'.0t~Lq+yǎ<HR1N._H ]07-_nĴ2:/ 4a?W^ I5؆C4LhA_)}"B'zu36~Z{OI<>WޱɊ&vkdӭ{q&ZrtXK~97aȭ 4-4\:v2 ⪅hc-Zmtđ#zDTJ5xt,WG' xrܭP}Nщ}vt_{tGʩ]eܥ@@ֵG6wOO =[YwQHWuݕE$펺~+?&bT$>|ɩ/+л,YREx.e@ρ0πu 91$B7٢JdBGIZbO{[_=7!cdpjA΢;L:U`]jSm֦_F)YZC|#;u1* \,c/0:4V2 SeP7y23LEl8g:GXNZL;#u?2%ȸ@ބ٪2(f>g1o=(9hI-aAӛ^ uNMHʩ^B݅ ܣ. މ N@s|#@QHS9kmX1]i4: LZ);$wb.*s'4Il{PwW|a&wXGwE.!<=dA B}ƣr6TK* H.a9Ou .ꥭ +{ 5s2˟Ùv}nwIaScsģu֙0"/*8mr}<1q({C!p)^n24, ݉j#xe[>zm\gl0yvK|CΠd+:?[7n%R}2b۱%.+$178 !vCŊ-wQY0ǒ(@I7r$R<pN}lk^dS &*qmRG?Ug߮ʱ,z)ftD>WpIJGg?I@]}=u'YE@RـNKm)"d6aigu LPqb8pqpa„HiG )/R+h*!20f,ۗ躤XtEOe',+K 4Ųq=C*ozq爌g&Z8dh{]4J;kJw'I8of e]Br ~ }# N i:ӏ3m)r +2ZO KLV6R`I3r뷜w+2$%9&n䯦ŲAM[ '1`F9wSIxHJ@,PTN N}T[!4%L/ŐdΒ*'-+ɸ,. +TGe_^z8`1ҫmhXulpl`a +qJ囲0Tys[#4+qn"-ۣ5~>Dēy{,tcQuuXkU#]!C昖|%(*E3H/i<å9Y#z O'-7Uo3ݯukh$]?Y_x_NEFBAJ+axRC[&HRud:oyX5Y&O랯*U9p*v- c֧ѫSG@@0l(RvQ2+Б)X.7A+M.GADSu=j( ;66ufXƕd]L>,Zÿ=H@MfeI C9utgQ[A:1m`<+^=DAH7[-}:`=>T!:ՠe-h ^fD/[n,phzH$ vMܑ 7 [xHɉFIy]Fn8e?Ѫ~@iZP #>vl`Dhؔ{ǰ_DqhE-| 8 Z9\4ڨŶ+gH[9a[Y`%\;,ۜ ՞(hIϪWc~HsUCb#]!鑬B u9=2ĩB%Tn_SI|OࣆwPp4e\MTVLWNDM,p `EXQS29X;x؁Q 6RfARfXWiVv%Z4#]iQ<1n꧶Pr%:] i}(,w2D=0Sf$C"E4upsKmCwPRmcOV4Qx'4zj}VC:֎@lY Sb EF͉~ 8sQ׼V ZA@H"BF݄~)15κ%f ) ƌyX"t n-"TAJCuN"wG*A[ѬDp'!FNᔏh4Xڶ)΁|+p~䋭`h RJݢ/Atmn7^nmfqB)!D 氥"RIS{ʓtŚGM/9cS}T-eO]#ϟ}tmfYys? f=rqsvQ//4kgYGоa>Y !yJ4Q2c3;P3m9q3 9+UObU#!MVޒM( 4(zE{MXU癖8Q/]&, :tNhp l}Vn)fLd=se;f/VH\T5Ay iYsqMg,oMU&:1",o9c02Ԇ1`݋)XF.j#(hfWܼn`3{ԃvqùl2ǣw◻0]P0NquTvin{Ӵ61{f8įkxՎ_0!G̞١(_@ΦN?OJFK&zM` >n.;[H(J]_;>plK[V, T_kphFTkFɼ1Th/ HzECb%߽~|2oH.[HM9ct4Зwss9.fIMgoE,Ǯ} y^j1WWHنa+q"1ݗl!bMw j \N"fD,{FӂPcvW4Ɯ4„\ߦa\be]Vv!+QiJy4Ĩ 4HhY4'p{AwДxlSANJ59QQ l\ƜgGo nE"fz޿IceKqë0ԞF<έKt19|Pß&wy\4^93zboHbXu90`ȁۤ=陠'%W1c\w# L3\RWQ0x7އ%Ħݔ-g_F4 vJ0RKP^h`1l曂K\ΎS:*eFvѕ~.lJq0lbQ2ܢe Q$%ZdVqrE݊*~)Í8f(ef vjG L*J@(ߒK%28f0x!쪪|+P tSg#Xh/V'n\+,< ]t*`eKkVN@ LطVZ9斝5H$_QR|kN:@ZFKG࡚7*ݜH¼s~vSm.&S3uQ Dd)veK, ¨N 'R 1(UMX'n3s9fWP^JTiE`I'L*o:e~Xҧ}}SH#`_I5'0~jC}tL'S'+VC)V.ֿUA\WR`mwitj)/FzIXIHʗ;Cms+s<I%"9 Ji)k L֎f)bp{Ld,mn`gHJō );wНaFN׺YP߮S֍"͝}#X7.~+  Я|_"MrN!*Y7`=6N,>zmI՗n;$-)T.]H 'qgwqfڐ8vÍI8eĻӻ"e7a[CSY  0F\b'hD)K ѣ1.lj4_~3(}ZI>ڒ!\tŶ@ko eFlpoZ8VͥV;]Bjy=l`6Yy2-n3vEAv*n盢=JdWY& n||@mEw}Sjˬ]ʅYBZ'8kxix9nDdF5Y_ytb\t59 t癢W.o"u7dzպ[(1 ?, wAC|F]4Ə{X&vT*h:{'Y 3KD ¹ѵ.M2|}eg8ܠ!{p<؅V(Ԣĸr7LH{LR yVpl|0> D@sa`itDf_9Fs?_;h} 7zد- މɪgJ0J-|?97bmь<$ vU#JI8Zz֣&TDXNaU&hd%$r fY DF; y@)Cpij/:TC;E$$qOAcGOoMX_<'}WI & aLbh2vsQF>r;=D|_Y_hl^X&ci l\6O`֝n̼roܹV-F4b'fI:Miy&oHKj+c3 6*sL'3MN(HNRԦ/Ǫ|-o4bNHz4BbfQ.P2׃(V]8>x82(~(sc9fϭȎ>,}CJK!u{W!?U(8QC;&&`A6T?0m,d!tК@o1p+;CY!DFɳkԔ*bʠJ~+ܐWiI$rWJkx9N(H^4-;r}-39atݿzġ ༾c=mB@ժyi4X'ŵG^Tnj`6T,>*l=GrkӥHbI[L;f[?Awl6ԍzDʩ%*5] 봅P?ri+^`OfX-wy%-9,)rQ'LR"}t0ke rzP@gI F?ve'c͊ xu`|3ڱ=HV}Bham|KAA^\Mi ~-͌ 5qŮizä>I6燶T}o=;IÚ{F81EyS1#jaqcNtdifzQT^A܏۰tNw%+8A'KIf`h5 ɧk޼㫱^&KVqwJ\dbl3Wrlj(D mc 8y0(<%A]#rJj")r<&?ZnX,ti𝣺 $H$jZPj7zy*5h}ñA91xk;y{o. u*pA}n)DVTY%r#͖G'~$^I n$"JZ(a{$hh6펋/+z**K=-=]ѿ` y P{US17xw&z35kp 'zXB+*E]ߵ~uSHՄrw>69shN|&g r]0g[\64g[ Ě#izNa]%+^eZ:4\e$(/^ KؿǎNrR{EC |T;bJCӼ@@Qvjr8PH2?;ŏ3'5uɑz e ;vO4܀ŋZvAeo ,Ϊ+_l5oy4)v:53֙ iOEr'b#b%Oz Gw^Ԗ  sY:߁Ճ ǖ,7wJP-7_-Sտ#A%œ4p|=+;J„f>x¿D̒++y)c|͔d@TcqZF@ɹW)>woa@"'K0~5%w}(Ox(rI)m-6dA^AjO1ZP2G^42&/I+5oz~I''H+&yG}WOI##q1@)=Y"#kS1a}E&Idn;,`iG, "2E[s\i&7Yo0TD&k/V:gz x9v 3Uc]U=}kn݈+RX6rԥYgG)FF?À=9LJ xVΜ&p1lb} 6ľƟR ^qw_]V+N"՗ʹ,Z gP:hI8H[oŗM`=&:Rng_laH5Igry*93~7E@joh8O.]l4h#yޓ!GOB71a^aA~b o_KLH@Z* f9rTݳnGy)BhKJl "-}&s"~  Į;5W !P^LlI9Cc<|°QAhU]S6n)? ~;qv-j9>dG3MG麀mf#^g07?~sSkǖQ$ :H=,;Ьn37= `w]]RU~;(MYMp'ĤL`h°q#@5ٴ4ĹV4 Qi0J^?B찾5ʀ_.fs%2%_dYP7ʒX.1-îfp>w4XrG @!} ֭kނWdg0<\AB 3|xTA*5؇t/Ԉ?y}.nHy@KXjWgt}.bE!v~XZEoF>L{pu#UŲP$x,[obD2u[ڭd}y2kĩ֠[#a\mkrrpԱdfUran&?yFb7&6\M`1W1{8yGIwEtVL?4-6AW4oB<,*Wc~$W!\,VFa{Ω"xx߁)!Pe41P.&V3)Ŧc [$_R>u \|ٙC>,V9yH}Z8ޚ.0b@I_qgÀ잤ؕ+c^MۋobJb0:[o d d/'t*,R?ZI_mW;n"w@&E6/zL$ax4e`4KHc6ؘBBt|XxDCme6;yܢd,É̱GG i5]0 0:Z|jgH@=:GϕΞ>#24v}[Vz]lpi>m>V27{~ZKʊa̝ z#=_g hhnnYbԓ8ntUCSG} r'|e[rg{`oG%%2UN Fw%&=uAş+m,!}ΘL{_N(wDoThuêQq-l<8)+S1©ˠcEPd 9א*2Br!hr\]?lD.#U@.ڼ>myI'4(㳋+>ӆ$9* P(of=d/RM'xߣM#18TٴXi<[?fMRo; ({Y_Ce~dVb~IC:%vj 7)(6 \p~R\nlt޶`@q_ z32Cl=ɺBs?'ԻSdu>/rg\kz (gd`x쬆~4~VR4;!Ǧ-dB@>JUV]lNJ~'3x oYD]3oӸ-W ,GU@-/oKWm_E֋}~G'w?,67PV.< J+CEB8ɩW\ 2p)s&%8Fv r#'6suo\ݨG#X}{'ur<~8/)A70L UP,E$ᤵL29=7.X+.cj9`lͨ7+:tGK 0{khHfUᛛK@`puk o{ * QLVYL خ ]wL &֡<+jq7|Tn(a#fXb܍WyoY:ƨ%[JrnT.Ec& yp3M›5m҃ [P C#ߍ͜:r/#6S^CD~z@DjMi8i%D4Ë=GQmGų ,K_ȹ&aqx5YJ m.J/l%^A3bw\08[ }` 7̅}ӵV#Rď%`螘f]3ll,9j4ڝ]%j6Qm>P6h'q}$~(z[$i/`05oztS=gy?r¾XP_Z\eġYј~,ռ@b@dl햺Bex59Rk׮NT S1LP'ӡ3=_gH2D "mPほªt{Q}I;&DYnwSN)Tsp3H?@53k+Q~Z#BS NU|WQF})ǥCVZu*E{tA\3 mȠe;JTmҡJ(:xY/3v밼 էE^<Ӏoi!艟.{"_vBLo&:o!q2MIR{FDzn_ @ "A6+bJk ,oiZJɜwfm6VsGr s*r7NBDW Pv2~5 ̤(VnW6DY[g/P\A7qXl-T3S]HT۔6"(TB^E{aQ RtG%7o>tDx 6))J9pvw&e pHI[O Zc-) u┐o;@=  XK8RA* S?ue88@Gw[Fq)r]G^!\нsSTw"[%(*?/M*c7þ~e68St!|thEQ AӑD 7>h4$ c0gH){Lֳ* חb( v4W ĵ=kDo% >kf)tM:q3 Ok$n#ݹ#U.]›E?+@[ɵ)a|P5ѿsjΡ>߀=ްDުި_^h@A 46HV=7Cxs]U"$0?Kr~Aǐ4T Ku-ʝ{ ^ƛ忹F.R(*rE %E^hKVk$n4mA&zK_u$.:prT@0\92W7I/6 01_͐Sx@kJ*歒XnkF<8m۽_%Niu<ì3O'r몯OG{ⰴ|Cv;s m'}.jfFD{1a czCNj [hX4O* O רD'`߭"N j7QypMQi}?`:jZPIo5jϞ08@S"(=Xyk)@nU Cd=' lZBX>3ѯo)1(P#ohI5v)HC&·VL_Sò"g#,-jJ+Ԧ[Qg$ދz " ֺfxobDAlzJdޣ8S%ϤJcN%2S\FOSdJʮ~G?;;LR#jᒒxYN67?bɛ;yǦ ;Pu#@$SsTʹXbDBo:<Ɍh gWR2l@.e0U,^H=,eO9MLY(GgqGKѪlx>cbƙ<39TU<(:x˟`LnM=`56/$'VeuB%U%O݄/̴K,e0xC;ja`qF$c#9OerH}5e&[H!;]T&WPլYg\ɰׂ'% W'_M}w&DN5MB_%:5Ld#lٷ\XΊpIt}$RVٶ<J\= mf@qa$}7P|r8h㖕L.[\b1Q`0qbnC[$A p'x,@3,ȸcX®%(!<~˄bGwQbǽlS#&S8|"ؚ8% iՇz^vz?w-JO8}e"$7e^:M`YYK%μ. cZycu#eСm8 {r ~O gܛ$ΌK6BDICKZ9iQ7Q,(-1f.!k].y0's-[2_Ik&mߡ --0}Fg>(3#[Fa.|{T $c&|Fz'q7bTjKrk8 ˦7 w F3N\?=@8i|ks U04s\[ZhQN9|ffQ 5]*9bԯyͲ߶@)Ef֝J?5K VLXQu%ɓ#M ma? `ӳ΀L`yPTX Z̄L*βFE@$w@kOd`vA 9 HdA :?fz}EA3;V#OI@ ]heNgqY@0g%>фaYvFx8{@PRYWѝMlf2o3(Q+%H' p?C<.&{ lZapk} Ou__̘;Csl) 6McGZ$-p; h3=# 6lVs!諠 Ztb(?{pPS!0S)IT>#ﵡB[X1s`:.M,jU͐"UlI('öB";rCbu' ȶ%O%{hzf€wc_!Σ[ҁʖGzqnINy4[֛0B8aZ2!!OԌxagbm(^zl#3_Ͻ+0+1A)Ã*0P ޴hiK;OE(Ar4m2CToeINypv# L{nDhj] lFCmd9X?l"!:;8,oZOd8IBPd!* V:˟p^$3īޡ`̭T% [0T@bRe2өnV[ tMO#5RbOLO^ỳJTɮ2A`9o^7-4ߔ,pŜ& $_y fȓc7a%6,Me54JErGj&|>)mFx$׮SE,1&Gbܝ}QI@)kd9ƁPwʏ+_7:>"GwhU3B"`? YZ%i!1^w<7[DT"G[]$& |\_׌-!,5go~P?A\({8A9 ǒ05.sWk6# jjva; %+C/5$})tEעsK? BV:B?;z>ܞ\rʮ+He4/7 Lx1$ B~^DJS M]F^>&yLc.g %hԼ۔J6!IڧO݋t=1kGz\YNA)%0uQ=f,S}m 7 :e6Y A{L 3c=TveK=r }?Wם,"iBf66!gEWǂ\GgѝyBs0WdTr2q]msdCOU87 :~eI5C v`)6QDeDXoT#] %8)& ̯ۨQ66b^))>Ԛ}[qp6#}J"R]0)0uƑ^Z lziBBI8P9M-R'htwA|~pQq&aQIfQqR:Vvl=RQtF:6]0X j5](!PRmGO4xÔڈ1J™\_ŷG[:C ]&FWP]wzSaJ~^\?a] djgߵfnt:k`M@Y]xӨ(D9Xt' IF_BNX-Lwͅz\% (}%0e$pc2T))KI:zތ4)O`'Q޾:0?]Zcl{[}K:Uw\+ \ Jh%ͤáClÜVZ%a[nB25Txܾ\si͘-U\V*}JP&}zaȄT|<~DWx*x?2ЦöYd]-K4^aTsf'Gӓ9ZLyUޢ@[װo|J"rb#  %TR<}O^@lsGѥ,2(CRИK ' NOhubEc5':!A "m tl b(qZ>|[g2\z5_*8OM \x,Vuܔ>=@N*@y zRlq{>@j]e{ZҲV-Bv.)߭h.y'g|KU@TY^IVE^H7-G(% xzV@Eߏ,BWqE87F+6@j`zp%) V;#mFC[HR+alM7{ b!_Ũ_u#T~DM2:#Z%mLɔ#%q/.)q6X/ZXL}110X}ջAB̑h#5K0&v9n9'gW{T+gw*ACTF# ozf;MǢU=rW?LK`|' #:8O@vhhȝ>*8nVcI{r>A("Fa+,/2 {4ZGT %Tm2|%M}_76,}K ׺GyV[Ln0_~1HE < eLtĈ',k{sAl&ݗtӔ z*l;d3v V2:e_ĶG'|r0q%_,[`'Xz馶ݽWsT7OWcSWOG#. FSƗ7o _̊4<+rf55  IA~+±';gg.piڙ=ռ +a]Ae_R@[Q&/67|f}b>PkH"P _:7isriޟ˹(r)q3B x^@J-q,2m;>{"S")wyl_עłK$&1Ox30Ppۜ)W> ?4T<؁qj1!IsJro?F Jw̰P"kNY}_,46^0 V"z<|EQ_'F)p#QV]b.p{Ĉa( Z-Hns]4VN|ΒrL1tj#Zj:s#'>`M+*lGP P9nYrrg0M.~響4ɬ+|䫠g8cmRL4G3D]8Ulb5ZǏ1V?k07܋.\ֵDYkQ{t1S֦l=]rRRES0+qɭ 8.Mּ6, ƜOTԐ2Dlm} HK ʸ ([l. WB ;^6tmeȅ>%9PEYx-i~-@ 3NݨTJ'&1YeZh5y:t)" xu OMUeP&`$86"]WdoY~>e6o2AE0dͺ%q)ќ-{1'VݍDQc~fY0 Scg3Hou "1D;ҍq# " % d@mN֌Dlùo_fXz\bn]0ѧu,B)*Pj@緛~y.~՜AQDMC4$s-Y`?R nCfE ŅwZ?gIοqb7_CB&ܰ#S_[BDO#j(d6!DvPe\#F9@ce_{1 $FPaJF*_D aRɚeWX9*k0Fzz'pt޸|6ňHNµL@:rF LݼuAs{dtt$cBwğU!gʁl]Lk~-E|P|\j`] + U"xdॡ =x$ӟ`^LItKf߂d 6U͵&̍&-0X٧NŒU,]#}S(jP++o#4)埴l2Mc~ңYAǧU+*w촮ţ?;իwWr{0#y8D/lQilB;P^Ȁ6+h&(O\^=QUe4[Qc>8)qDhoI+skyT_u^,4lOk^.bf}MbPf<;_Ь}8'Z1K+ ZO;djF1XLHMa!SWfB&P n]qF~W a`UHN,J1jˬ vp=8tkȿM ~dlmDx`3mŕ"~vYh1JEˡywIr2~25P0kZ0/bJgP]tyD)3('>iFEI i]o]|:CjlHtTѡ!O#,Tk+U+?TE7;ZSl%B̞@J19 N[Bg\U^2{lI[g?OT|J7X3̥x#EY9b.qwy{I@}1z:k{^G*ʁK91}Mx6*J)1eӐތC`nx”#6 !Y<<tܕ{{cl2Q[nhbԵVׁՑ2["C ,WyZ}OhCBfϯXEa}MzΓR=ih~X ape֘mT/P'|]5nkBw{gsOmB#d@AˎD[9uhL-:`N9#c0Cr0g#V!Mm&b6>KsRnS@iܘ|)( Uh7!4"'R?Vj(Tx̍W7kSw `3p ~]7x}T$?(L;֨J9VKcf(yN Cp0Ԉ9-$F|9SWWB>}u0wwP yVC^-b׆Lt(OVnHb䂭d`c3zU( s=jᡥWK/6Xߩ}LWmjgq8@YYx!XEjUo)#.wwEXxX/Rɏ5$RS4 !la'-ɦv,n`e>iD nhHPxk-*ڜdf27ׄ8yp ]~H`8aUN܆Mۃɋ17` |;ڴ(Sy~Ɋg'sj"Njdyd84jgX CKnMnmw5<^fB7Ntu5%WOKNcr*MmP.[ U5S0M|o| 7n>~|>g )Ю+bڀtxJXd{/:!NHe_ukj6ؕ?y 9TXww|4Ʌwf FKַCz^5#aH QZAX Dam1^/yd?& 1 ;$^v5Ei{9K13-9NL#\#ŁM oJ&Wfqˌq>_(J+])3,.sONyRzפTg [Uܮzۅ9l  ԯ5"O::&-A xkMd Ǘ_TrfQraHpt#DA! <^av֨Hߜ7ꁄKDn,\ٴaࢽb+Y@7/)_Wۘon7=2(ws[ؖh u1[o-&0Đ+c4F{-4F,GzZ4S9b]c-`+|$Q"qVZ(N?\"K"3M㢇iቿ`KIJ Xt kyށl1XRG|mLteH-ڴ&Z@"."זk2dVS:^٤U/&Ch-+YA!V{fSJ.^cRQu;qp.9 jY8X 6msM1%lj+γ+spQsKvIt9^vJUxCDΖ<[5x翜pꢨVz`N_%躩N{eIrܙFjvE(MN4ٲ]woxZ`ZsA+m/F}P&i JoPq F20K/wM$ؕN0$TK!t2vٳˏ=+YǺ 1GP(ə F~YP7[eҩDZ9)t扒DvbS 䘍b߲({{;H)w20 sutc"=nB\{{FĄa(xbY06Ab$7. xuٔ ht}}q'~"n;k}1Rq"suffYb$]GWW:Pd`i ƹ&$W}w%/VYsp"u>}b :uzir%X]uETYj*6c^5!4xZ8*1/pr%^sj;B!$p95)5#0+i+evYMR/]5<N81cՈElK-zycys M;qv9hSlh)u^)Q8$.^:|)QgR"#ǣϣ_ jy ݴKSdc{AMvѿ.0 69>frw*efM=utP9_>9ƲO۞%:YYPZ*H-rQ!#-аTW d3yLOEn74wC7<Jz 3a~j'S|"xM^x|ř۲pF$521Ā&Q Ez!,iQW^szl9D/͇ѝnt޻"mVYKZMMb+6YN3[uߣƳ7'UN;Y&;Ur$F>ܵo Ϣ{?mW]7iR{ ü7S$X)]u^q.yNT< ('nÛ ; f(G,ٲbO[X/P(hco~V)z-C⛐s50uzRceܲΜBbn n씻%N{?iU'*}5&G#ѸۓJ2RE oquW^}jϯ~ KN. I˃3#Yu}Tz"~&=<c`gCXxTJp.:@DpO2gV&8nM_ SzXܲR8/CmJ`hc$npsO5S0eDЩx^"WA3"25MmFXHӷk4S2򬘹{|EtNpФVƇ̅qUr+JO ¨Ԉgt,s#Dӕi(ըG=x{veYD!t3_69i'4&HxgR4q ¡1sM8I1]ki\ EX7sv)5ǫTGE[0ۄ_>1[?|l~g mvy=տyPyO'AQjbKǁ9af#Wz,9b$tA6x4S(&`6t#@sypR0%zl9191I5'7-tpk9xb`96 pt G?ߠ#=hFɩ˧w w@p9=Q֮Qgm`` |K:єQoї8-` ,hH:Q aľɝ\\| ryoub]gmiP*l_͉^\ t(G'QiwS4Hx^]P}y/u AbfskC@qn5n?1!z`p9tXq\jFJx.xqF_^a1`B_ ژC\Ȉ6p 72K6s=14nGߟhY^.pC [!#i*)=H_u*dY}VSR̋:~\)| PNoSgTs!{GQFtpbD[?Ԍ@AZ\~$MK]p( Zfon!\ w.EersnLg,/vy/׵Spqx^[3MptgN8_7H}'M 8n $^L :S.:%# k}i3VdU dؑEIXK ciЭgy?68p!;O7CbJS<'6[3Cc:hq1%9&ϗ ZP.wxe_gȰ?,ܦ男S=EҜ]AYeׯ*Zj Wԫ%"ЧBDЀ WN#"#) ^SP g"g>U)'a i\\jcRʜӎP4[ҥ%΀DE ޝeE GEӇ݋kmx=]59 6q2YL Vlځ6Kwß3^T ) O)Wvy_fy,H ƘTp<:<[J[_/ U5gJwlI˨Ǘ1vf83G煲B@ODW![_˯ڱi>iep(E*CT)B:))I<#+BtrzHPԾΎDepyK> >Vz2ךj.D YZ