samba-client-libs-4.17.12+git.462.df636292e62-150500.3.23.7<>, 3؉f p9|]qXٽPb Ԧ=1#9SS0j~֟ƅKR'smg\ewdTt]o|7%ї flSKi7epLa]CX?Hd0 > U 9PV`u4u u u u u !u#u%u((Lu* _c(89t:K>@BFGuHuIuXYZ!L[!\$ u]%u^0 b0>c0d1ge1lf1ol1qu1uv3Xcwjuxluyn` zDCsamba-client-libs4.17.12+git.462.df636292e62150500.3.23.7Samba client librariesThe samba-libs package contains the libraries needed by samba client programs.f h01-armsrv3ypSUSE Linux Enterprise 15SUSE LLC GPL-3.0-or-laterhttps://www.suse.com/Development/Libraries/C and C++https://www.samba.org/linuxaarch64 :y 0  8(  xx &h8 !x` @ `Af f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f 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-binding.so.0.0.1libdcerpc-server-core.so.0.0.1libdcerpc.so.0.0.1libndr-krb5pac.so.0.0.1libndr-nbt.so.0.0.1libndr-standard.so.0.0.1libndr.so.3.0.0libnetapi.so.1.0.0libsamba-credentials.so.1.0.0libsamba-errors.so.1.0.0libsamba-hostconfig.so.0.0.1libsamba-passdb.so.0.28.0libsamba-util.so.0.0.1libsamdb.so.0.0.1libsmbclient.so.0.7.0libsmbconf.so.0.0.1libsmbldap.so.2.1.0libtevent-util.so.0.0.1libwbclient.so.0.15rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootsamba-4.17.12+git.462.df636292e62-150500.3.23.7.src.rpmlibCHARSET3-samba4.so()(64bit)libCHARSET3-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libMESSAGING-SEND-samba4.so()(64bit)libMESSAGING-SEND-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libMESSAGING-samba4.so()(64bit)libMESSAGING-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libaddns-samba4.so()(64bit)libaddns-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libads-samba4.so()(64bit)libads-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libasn1util-samba4.so()(64bit)libasn1util-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libauth-samba4.so()(64bit)libauth-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libauthkrb5-samba4.so()(64bit)libauthkrb5-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libcli-cldap-samba4.so()(64bit)libcli-cldap-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libcli-ldap-common-samba4.so()(64bit)libcli-ldap-common-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libcli-ldap-samba4.so()(64bit)libcli-ldap-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libcli-nbt-samba4.so()(64bit)libcli-nbt-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libcli-smb-common-samba4.so()(64bit)libcli-smb-common-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libcli-spoolss-samba4.so()(64bit)libcli-spoolss-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libcliauth-samba4.so()(64bit)libcliauth-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libclidns-samba4.so()(64bit)libclidns-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libcluster-samba4.so()(64bit)libcluster-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libcmdline-contexts-samba4.so()(64bit)libcmdline-contexts-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libcmdline-samba4.so()(64bit)libcmdline-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libcommon-auth-samba4.so()(64bit)libcommon-auth-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libdbwrap-samba4.so()(64bit)libdbwrap-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libdcerpc-binding.so.0()(64bit)libdcerpc-binding.so.0(DCERPC_BINDING_0.0.1)(64bit)libdcerpc-binding0libdcerpc-pkt-auth-samba4.so()(64bit)libdcerpc-pkt-auth-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libdcerpc-samba-samba4.so()(64bit)libdcerpc-samba-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libdcerpc-samba4.so()(64bit)libdcerpc-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libdcerpc-server-core.so.0()(64bit)libdcerpc-server-core.so.0(DCERPC_SERVER_CORE_0.0.1)(64bit)libdcerpc.so.0()(64bit)libdcerpc.so.0(DCERPC_0.0.1)(64bit)libdcerpc0libevents-samba4.so()(64bit)libevents-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libflag-mapping-samba4.so()(64bit)libflag-mapping-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libgenrand-samba4.so()(64bit)libgenrand-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libgensec-samba4.so()(64bit)libgensec-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libgpo-samba4.so()(64bit)libgpo-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libgse-samba4.so()(64bit)libgse-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libhttp-samba4.so()(64bit)libhttp-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libinterfaces-samba4.so()(64bit)libinterfaces-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libiov-buf-samba4.so()(64bit)libiov-buf-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libkrb5samba-samba4.so()(64bit)libkrb5samba-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libldbsamba-samba4.so()(64bit)libldbsamba-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)liblibcli-lsa3-samba4.so()(64bit)liblibcli-lsa3-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)liblibcli-netlogon3-samba4.so()(64bit)liblibcli-netlogon3-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)liblibsmb-samba4.so()(64bit)liblibsmb-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libmessages-dgm-samba4.so()(64bit)libmessages-dgm-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libmessages-util-samba4.so()(64bit)libmessages-util-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libmscat-samba4.so()(64bit)libmscat-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libmsghdr-samba4.so()(64bit)libmsghdr-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libmsrpc3-samba4.so()(64bit)libmsrpc3-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libndr-krb5pac.so.0()(64bit)libndr-krb5pac.so.0(NDR_KRB5PAC_0.0.1)(64bit)libndr-krb5pac0libndr-nbt.so.0()(64bit)libndr-nbt.so.0(NDR_NBT_0.0.1)(64bit)libndr-nbt0libndr-samba-samba4.so()(64bit)libndr-samba-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libndr-samba4.so()(64bit)libndr-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libndr-standard.so.0()(64bit)libndr-standard.so.0(NDR_STANDARD_0.0.1)(64bit)libndr-standard0libndr.so.3()(64bit)libndr.so.3(NDR_0.0.1)(64bit)libndr.so.3(NDR_0.0.2)(64bit)libndr.so.3(NDR_0.0.3)(64bit)libndr.so.3(NDR_0.0.4)(64bit)libndr.so.3(NDR_0.0.5)(64bit)libndr.so.3(NDR_0.0.6)(64bit)libndr.so.3(NDR_0.0.7)(64bit)libndr.so.3(NDR_0.0.8)(64bit)libndr.so.3(NDR_0.0.9)(64bit)libndr.so.3(NDR_0.1.0)(64bit)libndr.so.3(NDR_0.1.1)(64bit)libndr.so.3(NDR_0.1.2)(64bit)libndr.so.3(NDR_0.2.0)(64bit)libndr.so.3(NDR_0.2.1)(64bit)libndr.so.3(NDR_1.0.0)(64bit)libndr.so.3(NDR_1.0.1)(64bit)libndr.so.3(NDR_1.0.2)(64bit)libndr.so.3(NDR_2.0.0)(64bit)libndr.so.3(NDR_3.0.0)(64bit)libndr2libnet-keytab-samba4.so()(64bit)libnet-keytab-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libnetapi.so.1()(64bit)libnetapi.so.1(NETAPI_1.0.0)(64bit)libnetapi0libnetif-samba4.so()(64bit)libnetif-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libnpa-tstream-samba4.so()(64bit)libnpa-tstream-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libprinting-migrate-samba4.so()(64bit)libprinting-migrate-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libregistry-samba4.so()(64bit)libregistry-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libreplace-samba4.so()(64bit)libreplace-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsamba-cluster-support-samba4.so()(64bit)libsamba-cluster-support-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsamba-credentials.so.1()(64bit)libsamba-credentials.so.1(SAMBA_CREDENTIALS_1.0.0)(64bit)libsamba-credentials1libsamba-debug-samba4.so()(64bit)libsamba-debug-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsamba-errors.so.1()(64bit)libsamba-errors.so.1(SAMBA_ERRORS_1.0.0)(64bit)libsamba-errors0libsamba-hostconfig.so.0()(64bit)libsamba-hostconfig.so.0(SAMBA_HOSTCONFIG_0.0.1)(64bit)libsamba-hostconfig0libsamba-modules-samba4.so()(64bit)libsamba-modules-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsamba-passdb.so.0()(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.2.0)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.24.1)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.24.2)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.25.0)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.26.0)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.27.0)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.27.1)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.27.2)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.28.0)(64bit)libsamba-passdb0libsamba-security-samba4.so()(64bit)libsamba-security-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsamba-sockets-samba4.so()(64bit)libsamba-sockets-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsamba-util.so.0()(64bit)libsamba-util.so.0(SAMBA_UTIL_0.0.1)(64bit)libsamba-util0libsamba3-util-samba4.so()(64bit)libsamba3-util-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsamdb-common-samba4.so()(64bit)libsamdb-common-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsamdb.so.0()(64bit)libsamdb.so.0(SAMDB_0.0.1)(64bit)libsamdb0libsecrets3-samba4.so()(64bit)libsecrets3-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libserver-id-db-samba4.so()(64bit)libserver-id-db-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libserver-role-samba4.so()(64bit)libserver-role-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsmb-transport-samba4.so()(64bit)libsmb-transport-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsmbclient-raw-samba4.so()(64bit)libsmbclient-raw-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsmbclient.so.0()(64bit)libsmbclient.so.0(SMBCLIENT_0.1.0)(64bit)libsmbclient.so.0(SMBCLIENT_0.2.0)(64bit)libsmbclient.so.0(SMBCLIENT_0.2.1)(64bit)libsmbclient.so.0(SMBCLIENT_0.2.2)(64bit)libsmbclient.so.0(SMBCLIENT_0.2.3)(64bit)libsmbclient.so.0(SMBCLIENT_0.3.0)(64bit)libsmbclient.so.0(SMBCLIENT_0.3.1)(64bit)libsmbclient.so.0(SMBCLIENT_0.3.2)(64bit)libsmbclient.so.0(SMBCLIENT_0.3.3)(64bit)libsmbclient.so.0(SMBCLIENT_0.4.0)(64bit)libsmbclient.so.0(SMBCLIENT_0.5.0)(64bit)libsmbclient.so.0(SMBCLIENT_0.6.0)(64bit)libsmbclient.so.0(SMBCLIENT_0.7.0)(64bit)libsmbclient0libsmbconf.so.0()(64bit)libsmbconf.so.0(SMBCONF_0.0.1)(64bit)libsmbconf0libsmbd-base-samba4.so()(64bit)libsmbd-base-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsmbd-shim-samba4.so()(64bit)libsmbd-shim-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsmbldap.so.2()(64bit)libsmbldap.so.2(SMBLDAP_0)(64bit)libsmbldap.so.2(SMBLDAP_1)(64bit)libsmbldap.so.2(SMBLDAP_2)(64bit)libsmbldap.so.2(SMBLDAP_2.1.0)(64bit)libsmbldap2libsmbldaphelper-samba4.so()(64bit)libsmbldaphelper-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsocket-blocking-samba4.so()(64bit)libsocket-blocking-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsys-rw-samba4.so()(64bit)libsys-rw-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libtalloc-report-printf-samba4.so()(64bit)libtalloc-report-printf-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libtdb-wrap-samba4.so()(64bit)libtdb-wrap-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libtevent-util.so.0()(64bit)libtevent-util.so.0(TEVENT_UTIL_0.0.1)(64bit)libtevent-util0libtime-basic-samba4.so()(64bit)libtime-basic-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libtrusts-util-samba4.so()(64bit)libtrusts-util-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libutil-reg-samba4.so()(64bit)libutil-reg-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libutil-setid-samba4.so()(64bit)libutil-setid-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libutil-tdb-samba4.so()(64bit)libutil-tdb-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libwbclient.so.0()(64bit)libwbclient.so.0(WBCLIENT_0.10)(64bit)libwbclient.so.0(WBCLIENT_0.11)(64bit)libwbclient.so.0(WBCLIENT_0.12)(64bit)libwbclient.so.0(WBCLIENT_0.13)(64bit)libwbclient.so.0(WBCLIENT_0.14)(64bit)libwbclient.so.0(WBCLIENT_0.15)(64bit)libwbclient.so.0(WBCLIENT_0.9)(64bit)libwbclient0samba-client-libssamba-client-libs(aarch-64)@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    /sbin/ldconfig/sbin/ldconfigld-linux-aarch64.so.1()(64bit)ld-linux-aarch64.so.1(GLIBC_2.17)(64bit)libCHARSET3-samba4.so()(64bit)libCHARSET3-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libMESSAGING-SEND-samba4.so()(64bit)libMESSAGING-SEND-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libMESSAGING-samba4.so()(64bit)libMESSAGING-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libacl.so.1()(64bit)libacl.so.1(ACL_1.0)(64bit)libaddns-samba4.so()(64bit)libaddns-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libads-samba4.so()(64bit)libads-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libasn1util-samba4.so()(64bit)libasn1util-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libauth-samba4.so()(64bit)libauth-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libauthkrb5-samba4.so()(64bit)libauthkrb5-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libavahi-client.so.3()(64bit)libavahi-common.so.3()(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libc.so.6(GLIBC_2.27)(64bit)libcli-cldap-samba4.so()(64bit)libcli-cldap-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libcli-ldap-common-samba4.so()(64bit)libcli-ldap-common-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libcli-ldap-samba4.so()(64bit)libcli-ldap-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libcli-nbt-samba4.so()(64bit)libcli-nbt-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libcli-smb-common-samba4.so()(64bit)libcli-smb-common-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libcli-spoolss-samba4.so()(64bit)libcli-spoolss-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libcliauth-samba4.so()(64bit)libcliauth-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libclidns-samba4.so()(64bit)libclidns-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libcluster-samba4.so()(64bit)libcluster-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libcom_err.so.2()(64bit)libcommon-auth-samba4.so()(64bit)libcommon-auth-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libdbwrap-samba4.so()(64bit)libdbwrap-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libdcerpc-binding.so.0()(64bit)libdcerpc-binding.so.0(DCERPC_BINDING_0.0.1)(64bit)libdcerpc-pkt-auth-samba4.so()(64bit)libdcerpc-pkt-auth-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libdcerpc-samba-samba4.so()(64bit)libdcerpc-samba-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libdcerpc.so.0()(64bit)libdcerpc.so.0(DCERPC_0.0.1)(64bit)libdl.so.2()(64bit)libdl.so.2(GLIBC_2.17)(64bit)libflag-mapping-samba4.so()(64bit)libflag-mapping-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libgenrand-samba4.so()(64bit)libgenrand-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libgensec-samba4.so()(64bit)libgensec-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libgnutls.so.30()(64bit)libgnutls.so.30(GNUTLS_3_4)(64bit)libgnutls.so.30(GNUTLS_3_6_10)(64bit)libgnutls.so.30(GNUTLS_3_6_13)(64bit)libgnutls.so.30(GNUTLS_3_6_3)(64bit)libgse-samba4.so()(64bit)libgse-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libgssapi_krb5.so.2()(64bit)libgssapi_krb5.so.2(gssapi_krb5_2_MIT)(64bit)libhttp-samba4.so()(64bit)libhttp-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libinterfaces-samba4.so()(64bit)libinterfaces-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libiov-buf-samba4.so()(64bit)libiov-buf-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libk5crypto.so.3()(64bit)libk5crypto.so.3(k5crypto_3_MIT)(64bit)libkrb5.so.3()(64bit)libkrb5.so.3(krb5_3_MIT)(64bit)libkrb5samba-samba4.so()(64bit)libkrb5samba-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)liblber-2.4.so.2()(64bit)libldap_r-2.4.so.2()(64bit)libldb.so.2()(64bit)libldb.so.2(LDB_0.9.10)(64bit)libldb.so.2(LDB_0.9.15)(64bit)libldb.so.2(LDB_0.9.16)(64bit)libldb.so.2(LDB_0.9.23)(64bit)libldb.so.2(LDB_1.1.1)(64bit)libldb.so.2(LDB_1.1.19)(64bit)libldb.so.2(LDB_1.1.30)(64bit)libldb.so.2(LDB_1.3.0)(64bit)libldb.so.2(LDB_2.6.1)(64bit)libldb.so.2(LDB_2.6.2)(64bit)libldbsamba-samba4.so()(64bit)libldbsamba-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)liblibcli-lsa3-samba4.so()(64bit)liblibcli-lsa3-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)liblibcli-netlogon3-samba4.so()(64bit)liblibcli-netlogon3-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)liblibsmb-samba4.so()(64bit)liblibsmb-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libmessages-dgm-samba4.so()(64bit)libmessages-dgm-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libmessages-util-samba4.so()(64bit)libmessages-util-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libmsghdr-samba4.so()(64bit)libmsghdr-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libmsrpc3-samba4.so()(64bit)libmsrpc3-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libndr-krb5pac.so.0()(64bit)libndr-krb5pac.so.0(NDR_KRB5PAC_0.0.1)(64bit)libndr-nbt.so.0()(64bit)libndr-nbt.so.0(NDR_NBT_0.0.1)(64bit)libndr-samba-samba4.so()(64bit)libndr-samba-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libndr-samba4.so()(64bit)libndr-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libndr-standard.so.0()(64bit)libndr-standard.so.0(NDR_STANDARD_0.0.1)(64bit)libndr.so.3()(64bit)libndr.so.3(NDR_0.0.1)(64bit)libndr.so.3(NDR_0.0.3)(64bit)libndr.so.3(NDR_0.0.4)(64bit)libndr.so.3(NDR_0.0.5)(64bit)libndr.so.3(NDR_0.0.6)(64bit)libndr.so.3(NDR_0.0.7)(64bit)libndr.so.3(NDR_0.0.8)(64bit)libndr.so.3(NDR_0.0.9)(64bit)libndr.so.3(NDR_0.1.1)(64bit)libndr.so.3(NDR_0.1.2)(64bit)libndr.so.3(NDR_0.2.0)(64bit)libndr.so.3(NDR_0.2.1)(64bit)libndr.so.3(NDR_1.0.0)(64bit)libndr.so.3(NDR_1.0.1)(64bit)libndr.so.3(NDR_1.0.2)(64bit)libndr.so.3(NDR_2.0.0)(64bit)libnetif-samba4.so()(64bit)libnetif-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libnpa-tstream-samba4.so()(64bit)libnpa-tstream-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libnscd.so.1()(64bit)libnscd.so.1(LIBNSCD_1.0)(64bit)libpam.so.0()(64bit)libpam.so.0(LIBPAM_1.0)(64bit)libpopt.so.0()(64bit)libpopt.so.0(LIBPOPT_0)(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.17)(64bit)libreplace-samba4.so()(64bit)libreplace-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libresolv.so.2()(64bit)libresolv.so.2(GLIBC_2.17)(64bit)libsamba-cluster-support-samba4.so()(64bit)libsamba-cluster-support-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsamba-credentials.so.1()(64bit)libsamba-credentials.so.1(SAMBA_CREDENTIALS_1.0.0)(64bit)libsamba-debug-samba4.so()(64bit)libsamba-debug-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsamba-errors.so.1()(64bit)libsamba-errors.so.1(SAMBA_ERRORS_1.0.0)(64bit)libsamba-hostconfig.so.0()(64bit)libsamba-hostconfig.so.0(SAMBA_HOSTCONFIG_0.0.1)(64bit)libsamba-modules-samba4.so()(64bit)libsamba-modules-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsamba-passdb.so.0()(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.2.0)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.27.1)(64bit)libsamba-security-samba4.so()(64bit)libsamba-security-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsamba-sockets-samba4.so()(64bit)libsamba-sockets-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsamba-util.so.0()(64bit)libsamba-util.so.0(SAMBA_UTIL_0.0.1)(64bit)libsamba3-util-samba4.so()(64bit)libsamba3-util-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsamdb-common-samba4.so()(64bit)libsamdb-common-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsamdb.so.0()(64bit)libsamdb.so.0(SAMDB_0.0.1)(64bit)libsecrets3-samba4.so()(64bit)libsecrets3-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libserver-id-db-samba4.so()(64bit)libserver-id-db-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libserver-role-samba4.so()(64bit)libserver-role-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsmb-transport-samba4.so()(64bit)libsmb-transport-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsmbclient-raw-samba4.so()(64bit)libsmbclient-raw-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsmbconf.so.0()(64bit)libsmbconf.so.0(SMBCONF_0.0.1)(64bit)libsmbd-shim-samba4.so()(64bit)libsmbd-shim-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsmbldap.so.2()(64bit)libsmbldap.so.2(SMBLDAP_0)(64bit)libsmbldap.so.2(SMBLDAP_1)(64bit)libsmbldaphelper-samba4.so()(64bit)libsmbldaphelper-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsocket-blocking-samba4.so()(64bit)libsocket-blocking-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsys-rw-samba4.so()(64bit)libsys-rw-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsystemd.so.0()(64bit)libsystemd.so.0(LIBSYSTEMD_209)(64bit)libtalloc-report-printf-samba4.so()(64bit)libtalloc-report-printf-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libtalloc.so.2()(64bit)libtalloc.so.2(TALLOC_2.0.2)(64bit)libtalloc.so.2(TALLOC_2.1.0)(64bit)libtasn1.so.6()(64bit)libtasn1.so.6(LIBTASN1_0_3)(64bit)libtdb-wrap-samba4.so()(64bit)libtdb-wrap-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libtdb.so.1()(64bit)libtdb.so.1(TDB_1.2.1)(64bit)libtdb.so.1(TDB_1.2.2)(64bit)libtdb.so.1(TDB_1.2.5)(64bit)libtdb.so.1(TDB_1.3.0)(64bit)libtdb.so.1(TDB_1.3.11)(64bit)libtdb.so.1(TDB_1.3.17)(64bit)libtevent-util.so.0()(64bit)libtevent-util.so.0(TEVENT_UTIL_0.0.1)(64bit)libtevent.so.0()(64bit)libtevent.so.0(TEVENT_0.11.0)(64bit)libtevent.so.0(TEVENT_0.12.0)(64bit)libtevent.so.0(TEVENT_0.13.0)(64bit)libtevent.so.0(TEVENT_0.9.12)(64bit)libtevent.so.0(TEVENT_0.9.13)(64bit)libtevent.so.0(TEVENT_0.9.14)(64bit)libtevent.so.0(TEVENT_0.9.16)(64bit)libtevent.so.0(TEVENT_0.9.20)(64bit)libtevent.so.0(TEVENT_0.9.21)(64bit)libtevent.so.0(TEVENT_0.9.30)(64bit)libtevent.so.0(TEVENT_0.9.31)(64bit)libtevent.so.0(TEVENT_0.9.37)(64bit)libtevent.so.0(TEVENT_0.9.9)(64bit)libtime-basic-samba4.so()(64bit)libtime-basic-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libtrusts-util-samba4.so()(64bit)libtrusts-util-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libutil-reg-samba4.so()(64bit)libutil-reg-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libutil-setid-samba4.so()(64bit)libutil-setid-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libutil-tdb-samba4.so()(64bit)libutil-tdb-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libwbclient.so.0()(64bit)libwbclient.so.0(WBCLIENT_0.13)(64bit)libwbclient.so.0(WBCLIENT_0.9)(64bit)libz.so.1()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.3ee@ez@e[J@e6`@eSd@d.@dd-@d@dd@d6@d@d @cvcvc@c@c @c@cctc5cM@b@b@b@ba@banopower@suse.comnopower@suse.comscabrero@suse.descabrero@suse.descabrero@suse.denopower@suse.comscabrero@suse.descabrero@suse.descabrero@suse.denopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comscabrero@suse.dedmulder@suse.comscabrero@suse.denopower@suse.comnopower@suse.comscabrero@suse.denopower@suse.comnopower@suse.comscabrero@suse.denopower@suse.comscabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comddiss@suse.comnopower@suse.comdmulder@suse.comdmulder@suse.comnopower@suse.comscabrero@suse.descabrero@suse.dedimstar@opensuse.orgscabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comnopower@suse.comnopower@suse.comscabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comnopower@suse.comscabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.denopower@suse.comscabrero@suse.deddiss@suse.comddiss@suse.comddiss@suse.comscabrero@suse.descabrero@suse.dedmulder@suse.comnopower@suse.comscabrero@suse.descabrero@suse.dedmulder@suse.comscabrero@suse.descabrero@suse.denopower@suse.comnopower@suse.comnopower@suse.comdmulder@suse.comscabrero@suse.denopower@suse.comddiss@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comscabrero@suse.denopower@suse.comnopower@suse.comjmcdonough@suse.comnopower@suse.comscabrero@suse.denopower@suse.comnopower@suse.comddiss@suse.comddiss@suse.comnopower@suse.comnopower@suse.comddiss@suse.comnopower@suse.comdmulder@suse.comdmulder@suse.comddiss@suse.comscabrero@suse.dedmulder@suse.comddiss@suse.comnopower@suse.comjengelh@inai.dedmulder@suse.comscabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comdmulder@suse.comdmulder@suse.comjmcdonough@suse.comdmulder@suse.comscabrero@suse.dedmulder@suse.comscabrero@suse.dedmulder@suse.comdmulder@suse.comvcizek@suse.comdmulder@suse.comdmulder@suse.comnopower@suse.comscabrero@suse.dejmcdonough@suse.comscabrero@suse.deaaptel@suse.comjengelh@inai.dedimstar@opensuse.orgdmulder@suse.comjmcdonough@suse.comdavid.mulder@suse.comjmcdonough@suse.comaaptel@suse.comdmulder@suse.comscabrero@suse.comscabrero@suse.comkukuk@suse.dedavid.mulder@suse.comscabrero@suse.comrbrown@suse.comdmulder@suse.comscabrero@suse.comdimstar@opensuse.orgscabrero@suse.comaaptel@suse.comnopower@suse.comnopower@suse.comaaptel@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comddiss@suse.comnopower@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comdmulder@suse.comnopower@suse.comjmcdonough@suse.comaaptel@suse.comkukuk@suse.comkukuk@suse.denopower@suse.comaaptel@suse.comdmulder@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comddiss@suse.comjmcdonough@suse.comddiss@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comjmcdonough@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comtchvatal@suse.comlmuelle@suse.comnopower@suse.comcrrodriguez@opensuse.orglmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comnoel.power@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comnopower@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.commpluskal@suse.comlmuelle@suse.comnopower@suse.deddiss@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.denopower@suse.delmuelle@suse.comnopower@suse.deddiss@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.com- fd_handle_destructor() panics within an smbd_smb2_close() if vfs_stat_fsp() fails in fd_close(); (bso#15527); (bsc#1219937).- Remove -x from bash shebang update-apparmor-samba-profile; (bsc#1218431).- Add new idmap_nss option 'use_upn' for those NSS modules able to handle UPNs or DOMAIN/user name format; (bsc#1215369); - Avoid unnecessary locking in idmap parent setup; (bsc#1215369);- Add "net offlinejoin composeodj" command; (bsc#1214076);- Update to samba 4.17.12 * Weird filename can cause assert to fail in openat_pathref_fsp_nosymlink(); (bso#15419); * reply_sesssetup_and_X() can dereference uninitialized tmp pointer; (bso#15420); * Missing return in reply_exit_done(); (bso#15430); * TREE_CONNECT without SETUP causes smbd to use uninitialized pointer; (bso#15432); * Improve GetNChanges to address some (but not all "Azure AD Connect") syncronisation tool looping during the initial user sync phase; (bso#15401); * Samba replication logs show (null) DN; (bso#15407); * Spotlight sometimes returns no results on latest macOS; (bso#15342); * Renaming results in NT_STATUS_SHARING_VIOLATION if previously attempted to remove the destination; (bso#15417); * Spotlight results return wrong date in result list; (bso#15427); * macOS mdfind returns only 50 results; (bso#15463); * 2-3min delays at reconnect with smb2_validate_sequence_number: bad message_id 2; (bso#15346); * samba-tool ntacl get segfault if aio_pthread appended; (bso#15441); * DCERPC_PKT_CO_CANCEL and DCERPC_PKT_ORPHANED can't be parsed; (bso#15446); * File doesn't show when user doesn't have permission if aio_pthread is loaded; (bso#15453); * net ads lookup (with unspecified realm) fails; (bso#15384); (bsc#1213826); * Regression DFS not working with widelinks = true; (bso#15435); (bsc#1213607); * ctdb_killtcp fails to work with --enable-pcap and libpcap 1.9.1; (bso#15451); * mdssvc: Do an early talloc_free() in _mdssvc_open(); (bso#15449); * Windows client join fails if a second container CN=System exists somewhere; (bso#9959); - Fix crossing automounter mount points; (bsc#1215212);- CVE-2023-4091: samba: Client can truncate file with read-only permissions; (bsc#1215904); (bso#15439). - CVE-2023-42669: samba: rpcecho, enabled and running in AD DC, allows blocking sleep on request; (bso#1215905); (bso#15474). - CVE-2023-42670: samba: The procedure number is out of range when starting Active Directory Users and Computers; (bsc#1215906); (bso#15473). - CVE-2023-3961: samba: Unsanitized client pipe name passed to local_np_connect(); (bsc#1215907); (bso#15422). - CVE-2023-4154: samba: dirsync allows SYSTEM access with only "GUID_DRS_GET_CHANGES" right, not "GUID_DRS_GET_ALL_CHANGES; (bsc#1215908); (bso#15424).- Fix DFS not working with widelinks enabled; (bsc#1213607); (bso#15435);- Move libcluster-samba4.so from samba-libs to samba-client-libs; (bsc#1213940);- net ads lookup with unspecified realm fails; (bso#15384); (bsc#1213826);- secure channel faulty since Windows 10/11 update 07/2023; (bso#15418); (bsc#1213384).- CVE-2022-2127: lm_resp_len not checked properly in winbindd_pam_auth_crap_send; (bso#15072); (bsc#1213174). - CVE-2023-34966: Samba Spotlight mdssvc RPC Request Infinite Loop Denial-of-Service Vulnerability; (bso#15340); (bsc#1213173). - CVE-2023-34967: Samba Spotlight mdssvc RPC Request Type Confusion Denial-of-Service Vulnerability; (bso#15341); (bsc#1213172). - CVE-2023-34968: Spotlight server-side Share Path Disclosure; (bso#15388); (bsc#1213171). - CVE-2023-3347: Samba doesn't require SMB2+ signing if `server signing = mandatory` is set; (bso#15397); (bsc#1213170).- Update to 4.17.9 * Backport --pidl-developer fixes; (bso#15404). * smbd_scavenger crashes when service smbd is stopped; (bso#15275). * vfs_fruit might cause a failing open for delete; (bso#15378). * named crashes on DLZ zone update; (bso#14030). * winbind recurses into itself via rpcd_lsad; (bso#15361). * cli_list loops 100% CPU against pre-lanman2 servers; (bso#15382). * smbclient leaks fds with showacls; (bso#15391). * aes256 smb3 encryption algorithms are not allowed in smb3_sid_parse(); (bso#15374). * winbindd gets stuck on NT_STATUS_RPC_SEC_PKG_ERROR; (bso#15413). * smbget memory leak if failed to download files recursively; (bso#15403).- Update to 4.17.8 * log flood: smbd_calculate_access_mask_fsp: Access denied: message level should be lower; (bso#15302). * Floating point exception (FPE) via cli_pull_send at source3/libsmb/clireadwrite.c; (bso#15306). * test_tstream_more_tcp_user_timeout_spin fails intermittently on Rackspace GitLab runners; (bso#15328). * Reduce flapping of ridalloc test; (bso#15329). * large_ldap test is unreliable; (bso#15351). * New filename parser doesn't check veto files smb.conf parameter; (bso#15143). * mdssvc may crash when initializing; (bso#15354). * Large directory optimization broken for non-lcomp path elements; (bso#15313). * streams_depot fails to create streams; (bso#15357). * shadow_copy2 and streams_depot don't play well together; (bso#15358). * wbinfo -u fails on ad dc with >1000 users; (bso#15366). * winbindd idmap child contacts the domain controller without a need; (bso#15317). * idmap_autorid may fail to map sids of trusted domains for the first time; (bso#15318). * idmap_hash doesn't use ID_TYPE_BOTH for reverse mappings; (bso#15319). * net ads search -P doesn't work against servers in other domains; (bso#15323). * DS ACEs might be inherited to unrelated object classes; (bso#15338). * Temporary smbXsrv_tcon_global.tdb can't be parsed; (bso#15353). * Setting veto files = /.*/ break listing directories; (bso#15360); (bsc#1212375). * CVE-2020-25720 [SECURITY] Create Child permission should not allow full write to all attributes (additional changes); (bso#14810). * dsgetdcname: assumes local system uses IPv4; (bso#15325).- Update to 4.17.7 * CVE-2023-0922: Samba AD DC admin tool samba-tool sends passwords in cleartext; (bso#15315); (bsc#1209481). * CVE-2023-0225: Samba AD DC "dnsHostname" attribute can be deleted by unprivileged authenticated users; (bso#15276); (bsc#1209483). * CVE-2023-0614: samba: Access controlled AD LDAP attributes can be discovered; (bso#15270); (bsc#1209485). * large_ldap test is inefficient; (bso#15332). * CVE-2020-25720 [SECURITY] Create Child permission should not allow full write to all attributes (additional changes); (bso#14810). - Update to 4.17.6 * streams_xattr is creating unexpected locks on folders; (bso#15314). * Use of the Azure AD Connect cloud sync tool is now supported for password hash synchronisation, allowing Samba AD Domains to synchronise passwords with this popular cloud environment; (bso#10635). * Spotlight doesn't work with latest macOS Ventura; (bso#15299). * New samba-dcerpc architecture does not scale gracefully; (bso#15310). * vfs_ceph incorrectly uses fsp_get_io_fd() instead of fsp_get_pathref_fd() in close and fstat; (bso#15307). * With clustering enabled samba-bgqd can core dump due to use after free; (bso#15293). * fd_load() function implicitly closes the fd where it should not; (bso#15311). - Update to 4.17.5 * smbc_getxattr() return value is incorrect; (bso#14808). * Compound SMB2 FLUSH+CLOSE requests from MacOSX are not handled correctly; (bso#15172). * synthetic_pathref AFP_AfpInfo failed errors; (bso#15210). * samba-tool gpo listall fails IPv6 only - finddcs() fails to find DC when there is only an AAAA record for the DC in DNS; (bso#15226). * smbd crashes if an FSCTL request is done on a stream handle; (bso#15236). * DFS links don't work anymore on Mac clients since 4.17; (bso#15277). * vfs_virusfilter segfault on access, directory edgecase (accessing NULL value); (bso#15283). * CVE-2022-38023 [SECURITY] Samba should refuse RC4 (aka md5) based SChannel on NETLOGON (additional changes); (bso#15240). * %U for include directive doesn't work for share listing (netshareenum); (bso#15243). * Shares missing from netshareenum response in samba 4.17.4; (bso#15266). * ctdb: use-after-free in run_proc; (bso#15269). * irpc_destructor may crash during shutdown; (bso#15280). * auth3_generate_session_info_pac leaks wbcAuthUserInfo; (bso#15286). * smbclient segfaults with use after free on an optimized build; (bso#15268). * smbstatus leaking files in msg.sock and msg.lock; (bso#15282). * Leak in wbcCtxPingDc2; (bso#15164). * Access based share enum does not work in Samba 4.16+; (bso#15265). * Crash during share enumeration; (bso#15267). * rep_listxattr on FreeBSD does not properly check for reads off end of returned buffer; (bso#15271). * Avoid relying on C89 features in a few places; (bso#15281).- Make (32bit) samba-libs conflict with old samba-ad-dc-libs package to satisfy installcheck.- Make samba-libs conflict with old samba-ad-dc-libs package to satisfy installcheck.- Remove non functioning ifup/ifdown samba-winbindd scripts; (bsc#1207414).- libdsdb-module-samba4 should be packaged as part of samba-libs and not samba-ad-dc-libs. Additionally no need for it to be removed conditionally.- Clean up logic for PAM migration settings in spec file.- Change with_dc default to 0 (for non TW builds), ADDC feature is deprecated and will no longer be included in >= SLE15-SP5; (jsc#PED-1122).- Update to 4.17.4 * CVE-2022-44640 Upstream Heimdal free of user-controlled pointer in FAST; (bsc#14929); * CVE-2021-20251 Bad password count not incremented atomically; (bsc#14611); * CVE-2022-42898 krb5_pac_parse() buffer parsing vulnerability; (bsc#15203); * CVE-2022-37966 rc4-hmac Kerberos session keys issued to modern servers; (bso#15237); * CVE-2022-37967 Kerberos constrained delegation ticket forgery possible against Samba AD DC; (bso#15231); * CVE-2022-38023 RC4/HMAC-MD5 NetLogon Secure Channel is weak and should be avoided; (bso#15240); * pam_winbind uses time_t and pointers assuming they are of the same size; (bso#15224); * Heimdal session key selection in AS-REQ examines wrong entry; (bso#15219); * filter-subunit is inefficient with large numbers of knownfails; (bso#15258); * smbd allows setting FILE_ATTRIBUTE_TEMPORARY on directories; (bso#15252); * The KDC logic arround msDs-supportedEncryptionTypes differs from Windows; (bso#13135); * libnet: change_password() doesn't work with dcerpc_samr_ChangePasswordUser4(); (bso#15206); * Heimdal session key selection in AS-REQ examines wrong entry; (bso#15219); * Memory leak in snprintf replacement functions; (bso#15230); * RODC doesn't reset badPwdCount reliable via an RWDC (CVE-2021-20251 regression); (bso#15253); * Prevent EBADF errors with vfs_glusterfs; (bso#15198); * %U for include directive doesn't work for share listing (netshareenum); (bso#15243); * Stack smashing in net offlinejoin requestodj; (bso#15257); * Windows 11 22H2 and Samba-AD 4.15 Kerberos login issue; (bso#15197); * Heimdal session key selection in AS-REQ examines wrong entry; (bso#15219); - Remove deprecated if-{down,up} scripts; (bsc#1206444); - Adjust the systemd drop-in file for named service; (bsc#1201689); * Paths are additive so do not repeat paths from named.service * Prefix the samba DLZ directory with "-" to ignore this path if it does not exists- Introduce without-smb1-server spec flag; (bsc#1205104); - Update to 4.17.3 * CVE-2022-42898: Samba buffer overflow vulnerabilities on 32-bit systems; (bsc#1205126); (bso#15203); - Replace obsolete python-gpgme with python-gpg * Upstream replaced it in v4.9.5 -- bso#13728 - Update to 4.17.2 * CVE-2022-3592 [SECURITY] samba: Wide links protection broken; (bso#15207); (bsc#1204499). * CVE-2022-3437 [SECURITY] samba: Buffer overflow in Heimdal unwrap_des3();(bso#15134); (bsc#1204254). - Update to 4.17.1 * CVE-2021-20251 [SECURITY] Bad password count not incremented atomically; (bso#14611). * smbXsrv_connection_shutdown_send result leaked; (bso#15174). * Flush on a named stream never completes; (bso#15182). * Permission denied calling SMBC_getatr when file not exists; (bso#15195). * Samba 4.5 sometimes cannot be upgraded to Samba 4.6 or later over DRS: WERROR_DS_DRA_MISSING_PARENT due to faulty GET_ANC; (bso#15189). * pytest: add file removal helpers for TestCaseInTempDir; (bso#15191). * CVE-2021-20251 [SECURITY] Bad password count not incremented atomically; (bso#14611). * Samba 4.5 sometimes cannot be upgraded to Samba 4.6 or later over DRS: WERROR_DS_DRA_MISSING_PARENT due to faulty GET_ANC; (bso#15189). * Flush on a named stream never completes; (bso#15182). * vfs_gpfs silently garbles timestamps > year 2106; (bso#15151). * CVE-2021-20251 [SECURITY] Bad password count not incremented atomically; (bso#14611). * multi-channel socket passing may hit a race if one of the involved processes already existed; (bso#15200). * memory leak on temporary of struct imessaging_post_state and struct tevent_immediate on struct imessaging_context (in rpcd_spoolss and maybe others); (bso#15201). * Since popt1.19 various use after free errors using result of poptGetArg are now exposed; (bso#15205); (boo#1204279). * Remove special case for O_CREAT in SMB_VFS_OPENAT from vfs_glusterfs; (bso#15192). * GETPWSID in memory cache grows indefinetly with each NTLM auth; (bso#15169). * CVE-2021-20251 [SECURITY] Bad password count not incremented atomically; (bso#14611). - Install a systemd drop-in file for named service to allow read/write access to the DLZ directory; (bsc#1201689); - Fix use after free errors resulting from using return of poptGetArg exposed since popt-1.19; (boo#1204279); (bso#15205). - s3: smbd: Fix memory leak in smbd_server_connection_terminate_done(); (bso#15174). - Disable SMB1 for tumbleweed builds. - Update to 4.17.0 * acl_xattr VFS module may unintentionally use filesystem permissions instead of ACL from xattr; (bso#15126). * Missing SMB2-GETINFO access checks from MS-SMB2 3.3.5.20.1; (bso#15153). * assert failed: !is_named_stream(smb_fname)") at ../../lib/util/fault.c:197; (bso#15161). * acl_xattr VFS module may unintentionally use filesystem permissions instead of ACL from xattr; (bso#15126). * assert failed: !is_named_stream(smb_fname)") at ../../lib/util/fault.c:197; (bso#15161). * Cross-node multi-channel reconnects result in SMB2 Negotiate returning NT_STATUS_NOT_SUPPORTED; (bso#15159). * winbind at info level debug can coredump when processing wb_lookupusergroups; (bso#15160). * Make use of glfs_*at() API calls in vfs_glusterfs; (bso#15157). * Possible use after free of connection_struct when iterating smbd_server_connection->connections; (bso#15128). * `net usershare add` fails with flag works with --long but fails with -l; (bso#15145). * acl_xattr VFS module may unintentionally use filesystem permissions instead of ACL from xattr; (bso#15126). * Performance regression on contended path based operations; (bso#15125). * Missing READ_LEASE break could cause data corruption; (bso#15148). * libsamba-errors uses a wrong version number; (bso#15141). * SMB1 negotiation can fail to handle connection errors; (bso#15152). * New filename parser doesn't check veto files smb.conf parameter; (bso#15143). * 4.17.rc1 still uses symlink-race prone unix_convert(); (bso#15144). * Backport fileserver related changed to 4.17.0rc2; (bso#15146). * Manpage for smbstatus json is missing; (bso#15147). * Backport fileserver related changed to 4.17.0rc2; (bso#15146). * Performance regression on contended path based operations; (bso#15125). * Backport fileserver related changed to 4.17.0rc2; (bso#15146). * Fix issues found by coverity in smbstatus json code; (bso#15140). * Backport fileserver related changed to 4.17.0rc2; (bso#15146). - Migration to /usr/etc: Saving user changed configuration files in /etc and restoring them while an RPM update. - Update to 4.16.4 * CVE-2022-2031: Samba AD users can bypass certain restrictions associated with changing passwords; (bsc#1201495); (bso#15047); * CVE-2022-32744: Samba AD users can forge password change requests for any user; (bsc#1201493); (bso#15074); * CVE-2022-32745: Samba AD users can crash the server process with an LDAP add or modify request; (bsc#1201492); (bso#15008); * CVE-2022-32746: Samba AD users can induce a use-after-free in the server process with an LDAP add or modify request; (bsc#1201490); (bso#15009); * CVE-2022-32742: Server memory information leak via SMB1; (bsc#1201496); (bso#15085); - Update to 4.16.3 * Using vfs_streams_xattr and deleting a file causes a panic; (bso#15099); * Add support for bind 9.18; (bso#14986); * logging dsdb audit to specific files does not work; (bso#15076); * Problem when winbind renews Kerberos; (bso#14979); (bsc#1196224); * Samba with new lorikeet-heimdal fails to build on gcc 12.1 in developer mode; (bso#15095); * Crash in streams_xattr because fsp->base_fsp->fsp_name is NULL; (bso#15105); * Crash in rpcd_classic - NULL pointer deference in mangle_is_mangled(); (bso#15118); * smbclient commands del & deltree fail with NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100); (bsc#1200556); * Fix check for chown when processing NFSv4 ACL; (bso#15120); * The pcap background queue process should not be stopped; (bso#15082); * testparm: Fix typo in idmap rangesize check; (bso#15097); * net ads info returns LDAP server and LDAP server name as null; (bso#15106); * ldconfig: /lib64/libsmbconf.so.0 is not a symbolic link; (bso#15108); * CTDB child process logging does not work as expected; (bso#15090); - Update spec file to fix the optional Heimdal DC build - Fix external trusts with MIT Kerberos 1.20 - Add missing samba-client requirement to samba-winbind package; (bsc#1198255); - Move pdb backends from package samba-libs to package samba-client-libs and remove samba-libs requirement from samba-winbind; (bsc#1200964); (bsc#1198255); - Add sysuser-shadow requirement for packages using systemd-sysusers - Use the canonical realm name to refresh the Kerberos tickets; (bsc#1196224); (bso#14979); - Moved logrotate files from user specific directory /etc/logrotate.d to vendor specific directory /usr/etc/logrotate.d. - Update to 4.16.2 * Use pathref fd instead of io fd in vfs_default_durable_cookie; (bso#15042); * vfs_gpfs with vfs_shadowcopy2 fail to restore file if original file had been deleted; (bso#15069); * Reintroduce netgroups support; (bso#15087); * net ads info shows LDAP Server: 0.0.0.0 depending on contacted server; (bso#14674); * Update from 4.15 to 4.16 breaks discovery of [homes] on standalone server from Win and IOS; (bso#15062); * waf produces incorrect names for python extensions with Python 3.11; (bso#15071); * smbclient -E doesn't work as advertised; (bso#15075); * The samba background daemon doesn't refresh the printcap cache on startup; (bso#15081); * Out-by-4 error in smbd read reply max_send clamp; (bso#14443); - Fix samba4.blackbox.net_ads_dns_async test with bind9 >= 9.17.7 - Support building with MIT Kerberos 1.20 - Bronze bit and S4U support with MIT Kerberos 1.20 for Samba AD DC; (CVE-2020-17049); - Resource Based Constrained Delegation (RBCD) for Samba AD DC - Support building with gcc 12.1 - Use requires_eq macro to require the libldb2 version available at samba-dsdb-modules build time; (bsc#1199362); - Update to 4.16.1 * Share and server swapped in smbget password prompt; (bso#14831); * Durable handles won't reconnect if the leased file is written to; (bso#15022); * rmdir silently fails if directory contains unreadable files and hide unreadable is yes; (bso#15023); * SMB2_CLOSE_FLAGS_FULL_INFORMATION fails to return information on renamed file handle; (bso#15038); * Need to describe --builtin-libraries= better (compare with - -bundled-libraries); (bso#8731); * vfs_shadow_copy2 breaks "smbd async dosmode" sync fallback; (bso#14957); * shadow_copy2 fails listing snapshotted dirs with shadow:fixinodes; (bso#15035); * PAM Kerberos authentication incorrectly fails with a clock skew error; (bso#15046); * Username map - samba erroneously applies unix group memberships to user account entries; (bso#15041); * KVNO off by 100000; (bso#14951); * Uninitialized litemask in variable in vfs_gpfs module; (bso#15027); * vfs_gpfs recalls=no option prevents listing files; (bso#15055); * smbd doesn't handle UPNs for looking up names; (bso#15054); - Update update-apparmor-samba-profile script, replace non-printable delimiter with more human readable separator as sed can accept separators that can appear in the input data. - Fix update-apparmor-samba-profile script, sed doesn't like multibyte separators; (bsc#1198309). - Update to 4.16.0 * New samba-dcerpcd binary to provide DCERPC in the member server setup * Certificate Auto Enrollment * Ability to add ports to dns forwarder addresses in internal DNS backend * No longer using Linux mandatory locks for sharemodes * SMB1 protocol has been deprecated, particularly older dialects * SMB1 protocol SMBCopy command removed * SMB1 server-side wildcard expansion removed - Add python3-dnspython to samba-ad-dc recommens; (bsc#1187101); - Use systemd-sysusers to create system users; (bsc#1182847);- Install a systemd drop-in file for named service to allow read/write access to the DLZ directory; (bsc#1201689);- Update to 4.15.12 * CVE-2022-42898: samba: heimdal: Samba buffer overflow vulnerabilities on 32-bit systems; (bso#15203); (bsc#1205126). - Update to 4.15.11 * Allow rebuild of Centos 8 images after move to vault for Samba 4.15; (bso#15193). * CVE-2022-3437: samba: Buffer overflow in Heimdal unwrap_des3(); (bso#15134); (bsc#1204254)- Update to 4.15.10 * Possible use after free of connection_struct when iterating smbd_server_connection->connections; (bso#15128); (bsc#1200102). * smbXsrv_connection_shutdown_send result leaked; (bso#15174). * Spotlight RPC service returns wrong response when Spotlight is disabled on a share; (bso#15086). * acl_xattr VFS module may unintentionally use filesystem permissions instead of ACL from xattr; (bso#15126). * Missing SMB2-GETINFO access checks from MS-SMB2 3.3.5.20.1; (bso#15153). * assert failed: !is_named_stream(smb_fname)") at ../../lib/util/fault.c:197; (bso#15161). * Missing READ_LEASE break could cause data corruption; (bso#15148). * rpcclient can crash using setuserinfo(2); (bso#15124). * Samba fails to build with glibc 2.36 caused by including in libreplace; (bso#15132). * SMB1 negotiation can fail to handle connection errors; (bso#15152). * samba-tool domain join segfault when joining a samba ad domain; (bso#15078). - Update to 4.15.9 * CVE-2022-32742:SMB1 code does not correct verify SMB1write, SMB1write_and_close, SMB1write_and_unlock lengths; (bso#15085); (bsc#1201496). * CVE-2022-32746: samba: Use-after-free occurring in database audit logging; (bso#15009); (bso#15096); (bsc#1201490). * CVE-2022-2031: samba, ldb: AD users can bypass certain restrictions associated with changing passwords; (bso#15047); (bsc#1201495); * CVE-2022-32745: samba: ldb: AD users can crash the server process with an LDAP add or modify request; (bso#15008); (bso#15096); (bsc#1201492). * CVE-2022-2031: samba, ldb: AD users can bypass certain restrictions associated with changing passwords; (bso#15047); (bsc#1201495); * CVE-2022-32744: samba, ldb: AD users can forge password change requests for any user; (bso#15074); (bso#15047); (bsc#1201493).- CVE-2022-1615: Do not ignore errors in random number generation; (bso#15103); (bsc#1202976); - CVE-2022-32743: Implement validated dnsHostName write rights; (bso#14833); (bsc#1202803);- Fix Use after free when iterating smbd_server_connection->connections after tree disconnect failure; (bso#15128); (bsc#1200102).- CVE-2022-32746: samba: Use-after-free occurring in database audit logging; (bso#15009); (bso#15096); (bsc#1201490). - CVE-2022-32745: samba: ldb: AD users can crash the server process with an LDAP add or modify request; (bso#15008); (bso#15096); (bsc#1201492). - CVE-2022-2031: samba, ldb: AD users can bypass certain restrictions associated with changing passwords; (bso#15047); (bsc#1201495); - CVE-2022-32742:SMB1 code does not correct verify SMB1write, SMB1write_and_close, SMB1write_and_unlock lengths; (bso#15085); (bsc#1201496). - CVE-2022-32744: samba, ldb: AD users can forge password change requests for any user; (bso#15074); (bso#15047); (bsc#1201493).- Update to 4.15.8 * Use pathref fd instead of io fd in vfs_default_durable_cookie; (bso#15042); * Setting fruit:resource = stream in vfs_fruit causes a panic; (bso#15099); * Add support for bind 9.18; (bso#14986); * logging dsdb audit to specific files does not work; (bso#15076); * vfs_gpfs with vfs_shadowcopy2 fail to restore file if original file had been deleted; (bso#15069); * netgroups support removed; (bso#15087); (bsc#1199247); * net ads info shows LDAP Server: 0.0.0.0 depending on contacted server; (bso#14674); (bsc#1199734); * waf produces incorrect names for python extensions with Python 3.11; (bso#15071); * smbclient commands del & deltree fail with NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100); (bsc#1200556); * vfs_gpfs recalls=no option prevents listing files; (bso#15055); * waf produces incorrect names for python extensions with Python 3.11; (bso#15071); * Compile error in source3/utils/regedit_hexedit.c; (bso#15091); * ldconfig: /lib64/libsmbconf.so.0 is not a symbolic link; (bso#15108); * smbd doesn't handle UPNs for looking up names; (bso#15054); * Out-by-4 error in smbd read reply max_send clamp; (bso#14443); - Move pdb backends from package samba-libs to package samba-client-libs and remove samba-libs requirement from samba-winbind; (bsc#1200964); (bsc#1198255); - Use the canonical realm name to refresh the Kerberos tickets; (bsc#1196224); (bso#14979);- Fix smbclient commands del & deltree failing with NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100); (bsc#1200556).- Revert NIS support removal; (bsc#1199247);- Use requires_eq macro to require the libldb2 version available at samba-dsdb-modules build time; (bsc#1199362);- Add missing samba-client requirement to samba-winbind package; (bsc#1198255);- Update to 4.15.7 * Share and server swapped in smbget password prompt; (bso#14831); * Durable handles won't reconnect if the leased file is written to; (bso#15022); * rmdir silently fails if directory contains unreadable files and hide unreadable is yes; (bso#15023); * SMB2_CLOSE_FLAGS_FULL_INFORMATION fails to return information on renamed file handle; (bso#15038); * vfs_shadow_copy2 breaks "smbd async dosmode" sync fallback; (bso#14957); * shadow_copy2 fails listing snapshotted dirs with shadow:fixinodes; (bso#15035); * PAM Kerberos authentication incorrectly fails with a clock skew error; (bso#15046); * username map - samba erroneously applies unix group memberships to user account entries; (bso#15041); * NT_STATUS_ACCESS_DENIED translates into EPERM instead of EACCES in SMBC_server_internal; (bso#14983); * Simple bind doesn't work against an RODC (with non-preloaded users); (bso#13879); * Crash of winbind on RODC; (bso#14641); * uncached logon on RODC always fails once; (bso#14865); * KVNO off by 100000; (bso#14951); * LDAP simple binds should honour "old password allowed period"; (bso#15001); * wbinfo -a doesn't work reliable with upn names; (bso#15003); * Simple bind doesn't work against an RODC (with non-preloaded users); (bso#13879); * Uninitialized litemask in variable in vfs_gpfs module; (bso#15027); * Regression: create krb5 conf = yes doesn't work with a single KDC; (bso#15016);- Add provides to samba-client-libs package to fix upgrades from previous versions; (bsc#1197995);- Add missing samba-libs requirement to samba-winbind package; (bsc#1198255);- Update to 4.15.6 * Renaming file on DFS root fails with NT_STATUS_OBJECT_PATH_NOT_FOUND; (bso#14169); * Samba does not response STATUS_INVALID_PARAMETER when opening 2 objects with same lease key; (bso#14737); * NT error code is not set when overwriting a file during rename in libsmbclient; (bso#14938); * Fix ldap simple bind with TLS auditing; (bso#14996); * net ads info shows LDAP Server: 0.0.0.0 depending on contacted server; (bso#14674); * Problem when winbind renews Kerberos; (bso#14979); (bsc#1196224); * pam_winbind will not allow gdm login if password about to expire; (bso#8691); * virusfilter_vfs_openat: Not scanned: Directory or special file; (bso#14971); * DFS fix for AIX broken; (bso#13631); * Solaris and AIX acl modules: wrong function arguments; (bso#14974); * Function aixacl_sys_acl_get_file not declared / coredump; (bso#7239); * Regression: Samba 4.15.2 on macOS segfaults intermittently during strcpy in tdbsam_getsampwnam; (bso#14900); * Fix a use-after-free in SMB1 server; (bso#14989); * smb2_signing_decrypt_pdu() may not decrypt with gnutls_aead_cipher_decrypt() from gnutls before 3.5.2; (bso#14968); * Changing the machine password against an RODC likely destroys the domain join; (bso#14984); * authsam_make_user_info_dc() steals memory from its struct ldb_message *msg argument; (bso#14993); * Use Heimdal 8.0 (pre) rather than an earlier snapshot; (bso#14995); * Samba autorid fails to map AD users if id rangesize fits in the id range only once; (bso#14967);- Fix mismatched version of libldb2; (bsc#1196788). - Drop obsolete SuSEfirewall2 service files.- Drop obsolete Samba fsrvp v0->v1 state upgrade functionality; (bsc#1080338).- Fix ntlm authentications with "winbind use default domain = yes"; (bso#13126); (bsc#1173429); (bsc#1196308).- Fix samba-ad-dc status warning notification message by disabling systemd notifications in bgqd; (bsc#1195896); (bso#14947).- libldb version mismatch in Samba dsdb component; (bsc#1118508);- Update to 4.15.5 * CVE-2021-44141: UNIX extensions in SMB1 disclose whether the outside target of a symlink exists; (bso#14911); (bsc#1193690). * CVE-2021-44142: Out-of-Bound Read/Write on Samba vfs_fruit module; (bso#14914); (bsc#1194859). * CVE-2022-0336: Re-adding an SPN skips subsequent SPN conflict checks; bso#14950); (bsc#1195048).- CVE-2021-44141: Information leak via symlinks of existance of files or directories outside of the exported share; (bso#14911); (bsc#1193690); - CVE-2021-44142: Out-of-bounds heap read/write vulnerability in VFS module vfs_fruit allows code execution; (bso#14914); (bsc#1194859); - CVE-2022-0336: Samba AD users with permission to write to an account can impersonate arbitrary services; (bso#14950); (bsc#1195048);- Update to 4.15.4 * Duplicate SMB file_ids leading to Windows client cache poisoning; (bso#14928); * Failed to parse NTLMv2_RESPONSE length 95 - Buffer Size Error - NT_STATUS_BUFFER_TOO_SMALL; (bso#14932); * kill_tcp_connections does not work; (bso#14934); * Can't connect to Windows shares not requiring authentication using KDE/Gnome; (bso#14935); * smbclient -L doesn't set "client max protocol" to NT1 before calling the "Reconnecting with SMB1 for workgroup listing" path; (bso#14939); * Cross device copy of the crossrename module always fails; (bso#14940); * symlinkat function from VFS cap module always fails with an error; (bso#14941); * Fix possible fsp pointer deference; (bso#14942); * Missing pop_sec_ctx() in error path inside close_directory(); (bso#14944); * "smbd --build-options" no longer works without an smb.conf file; (bso#14945);- Use pkgconfig(krb5) as dependency for the -devel package: allow OBS to pick the right flavor of krb5-devel (full vs mini). - Do not require the 'krb5' symbol by samba-client-libs: this package has an automatic dependency due to linkage on libgssapi_krb5.so.2. Automatic deps are always better. - Do not require the 'krb5' symbol from samba-libs: samba-libs requires samba-client-libs, which in turn requires krb5 libraries. Samba-libs itself has no need for krb5 (but get it indirectly anyway).- Reorganize libs packages. Split samba-libs into samba-client-libs, samba-libs, samba-winbind-libs and samba-ad-dc-libs, merging samba public libraries depending on internal samba libraries into these packages as there were dependency problems everytime one of these public libraries changed its version (bsc#1192684). The devel packages are merged into samba-devel. - Rename package samba-core-devel to samba-devel - Add python-rpm-macros to build requirements - Update the symlink create by samba-dsdb-modules to private samba ldb modules following libldb2 changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba- Update to 4.15.3 * Recursive directory delete with veto files is broken in 4.15.0; (bso#14878); * A directory containing dangling symlinks cannot be deleted by SMB2 alone when they are the only entry in the directory; (bso#14879); * SIGSEGV in rmdir_internals/synthetic_pathref - dirfsp is used uninitialized in rmdir_internals(); (bso#14892); * MaxQueryDuration not honoured in Samba AD DC LDAP; (bso#14694); * The CVE-2020-25717 username map [script] advice has undesired side effects for the local nt token; (bso#14901); (bsc#1192849); * User with multiple spaces (eg FredNurk) become un-deletable; (bso#14902); * Avoid storing NTTIME_THAW (-2) as value on disk; (bso#14127); * smbXsrv_client_global record validation leads to crash if existing record points at non-existing process; (bso#14882); * Crash in vfs_fruit asking for fsp_get_io_fd() for an XATTR call; (bso#14890); * Samba process doesn't log to logfile; (bso#14897); * set_ea_dos_attribute() fallback calling get_file_handle_for_metadata() triggers locking.tdb assert; (bso#14907); * Kerberos authentication on standalone server in MIT realm broken; (bso#14922); * Segmentation fault when joining the domain; (bso#14923); * Support for ROLE_IPA_DC is incomplete; (bso#14903); * rpcclient cannot connect to ncacn_ip_tcp services anymore; (bso#14767); * winexe crashes since 4.15.0 after popt parsing; (bso#14893); * net ads status -P broken in a clustered environment; (bso#14908); * Memory leak if ioctl(FSCTL_VALIDATE_NEGOTIATE_INFO) fails before smbd_smb2_ioctl_send; (bso#14788); * winbindd doesn't start when "allow trusted domains" is off; (bso#14899); * smbclient login without password using '-N' fails with NT_STATUS_INVALID_PARAMETER on Samba AD DC; (bso#14883); * A schannel client incorrectly detects a downgrade connecting to an AES only server; (bso#14912); * Possible null pointer dereference in winbind; (bso#14921); * Fix -k legacy option for client tools like smbclient, rpcclient, net, etc.; (bso#14846); * Add Debian 11 CI bootstrap support; (bso#14872); * Crash in recycle_unlink_internal(); (bso#14888);- Fix dependency problem upgrading from libndr0 to libndr2 and from libsamba-credentials0 to libsamba-credentials1; (bsc#1192684);- Fix regression introduced by CVE-2020-25717 patches, winbindd does not start when 'allow trusted domains' is off; (bso#14899); - Update to 4.15.2 * CVE-2016-2124: SMB1 client connections can be downgraded to plaintext authentication; (bso#12444); (bsc#1014440); * CVE-2020-25717: A user on the domain can become root on domain members; (bso#14556); (bsc#1192284); * CVE-2020-25718: Samba AD DC did not correctly sandbox Kerberos tickets issued by an RODC; (bso#14558); (bsc#1192246); * CVE-2020-25719: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets; (bso#14561); (bsc#1192247); * CVE-2020-25721: Kerberos acceptors need easy access to stable AD identifiers (eg objectSid); (bso#14557); (bsc#1192505); * CVE-2020-25722: Samba AD DC did not do suffienct access and conformance checking of data stored; (bso#14564); (bsc#1192283); * CVE-2021-3738: Use after free in Samba AD DC RPC server; (bso#14468); (bsc#1192215); * CVE-2021-23192: Subsequent DCE/RPC fragment injection vulnerability; (bso#14875); (bsc#1192214); - Update to 4.15.1 * vfs_shadow_copy2: core dump in make_relative_path; (bso#14682); * Log clutter from filename_convert_internal; (bso#14685); * MacOSX compilation fixes; (bso#14862); * rodc_rwdc test flaps; (bso#14868); * Provide a fix for MS CVE-2020-17049 in Samba [SECURITY] 'Bronze bit' S4U2Proxy Constrained Delegation bypass in Samba with embedded Heimdal; (bso#14642); * Python ldb.msg_diff() memory handling failure; (bso#14836); * "in" operator on ldb.Message is case sensitive; (bso#14845); * Release LDB 2.4.1 for Samba 4.15.1; (bso#14848); * samldb_krbtgtnumber_available() looks for incorrect string; (bso#14854); * Fix Samba support for UF_NO_AUTH_DATA_REQUIRED; (bso#14871); * Allow special chars like "@" in samAccountName when generating the salt; (bso#14874); * Correctly ignore comments in CTDB public addresses file; (bso#14826); * Fix transit path validation; (bso#12998); * Fix that child winbindd logs to log.winbindd instead of log.wb-; (bso#14852); * SMB3 cancel requests should only include the MID together with AsyncID when AES-128-GMAC is used; (bso#14855); * Prepare to operate with MIT krb5 >= 1.20; (bso#14870); * Heimdal prefers RC4 over AES for machine accounts; (bso#14864);- Enable samba-tool without ad dc.- Adjust spec to use pam macros; (bsc#1191046).- Adjust spec for size * allow some Recommends instead Requires to be configured for cifs-utils, samba-libs-python3 & samba-gpupdate; (bsc#1182847). * remove fam, undocumented and unneeded.- Add missing build dependency on bison when building with the embedded Heimdal Kerberos- Update to 4.15.0 * Removed SMB development dialects SMB2_22, SMB2_24 and SMB3_10 * VFS layer modernized. * Add the ability to set allow/deny lists for zone transfer clients in Bind DLZ plugin * Server multi-channel support no longer experimental * Improved command line user experience, unifying the options in different commands * Winbindd no longer scans trusted domains on startup and will use enterprise principals by default. * The net utility is now able to support the offline domain join feature * New options for 'samba-tool dns zoneoptions' for aging control and to mark old records as static or dynamic * DNS tombstones are now deleted as appropriate and use a consistent timestamp format * The 'samba-tool dns update' command validates and rejects now malformed IPv4 and IPv6 addresses * The 'samba-tool domain backup' command correctly takes out locks against concurrent modification during backup when using the LMDB backend * TruACL support has been removed * NIS support has been removed- Fix 'net rpc' authentication when using the machine account; (bsc#1189017); (bso#14796);- Fix dependency problem upgrading from libndr0 to libndr1; (bsc#1189875); - Fix dependency problem upgrading from libsmbldap0 to libsmbldap2; (bsc#1189875); - Fix wrong kvno exported to keytab after net ads changetrustpw due to replication delay; (bsc#1188727); - Add Certificate Auto Enrollment Policy; (jsc#SLE-18456). - Update to 4.13.10 * s3: smbd: Ensure POSIX default ACL is mapped into returned Windows ACL for directory handles; (bso#14708); * Take a copy to make sure we don't reference free'd memory; (bso#14721); * s3: lib: Fix talloc heirarcy error in parent_smb_fname(); (bso#14722); * s3: smbd: Remove erroneous TALLOC_FREE(smb_fname_parent) in change_file_owner_to_parent() error path; (bso#14736); * samba-tool: Give better error information when the 'domain backup restore' fails with a duplicate SID; (bso#14575); * smbd: Correctly initialize close timestamp fields; (bso#14714); * Spotlight RPC service doesn't work with vfs_glusterfs; (bso#14740); * ctdb: Fix a crash in run_proc_signal_handler(); (bso#14475); * gensec_krb5: Restore ipv6 support for kpasswd; (bso#14750); * smbXsrv_{open,session,tcon}: Protect smbXsrv_{open,session,tcon}_global_traverse_fn against invalid records; (bso#14752); * samba-tool domain backup offline doesn't work against bind DLZ backend; (bso#14027); * netcmd: Use next_free_rid() function to calculate a SID for restoring a backup; (bso#14669); - Update to 4.13.9 * s3: smbd: SMB1 SMBsplwr doesn't send a reply packet on success; (bso#14696); * Add documentation for dsdb_group_audit and dsdb_group_json_audit to "log level", synchronise "log level" in smb.conf with the code; (bso#14689); * Fix smbd panic when two clients open same file; (bso#14672); * Fix memory leak in the RPC server; (bso#14675); * s3: smbd: Fix deferred renames; (bso#14679); * s3-iremotewinspool: Set the per-request memory context; (bso#14675); * rpc_server3: Fix a memleak for internal pipes; (bso#14675); * third_party: Update socket_wrapper to version 1.3.2; (bso#11899); * third_party: Update socket_wrapper to version 1.3.3; (bso#14639); * idmap_rfc2307 and idmap_nss return wrong mapping for uid/gid conflict; (bso#14663); * Fix the build on OmniOS; (bso#14288); - Update to 4.13.8 * CVE-2021-20254: Fix buffer overrun in sids_to_unixids(); (bso#14571 - Update to 4.13.7 * Release with dependency on ldb version 2.2.1.- CVE-2021-20254 Buffer overrun in sids_to_unixids(); (bnc#14571); (bsc#1184677).- Fix offline domain backup not possible using lmdb version >= 0.9.26; (bso#14676); - Require libldb >= 2.2.1; (bsc#1183572); (bsc#1183574); - Update to 4.13.6 * CVE-2020-27840: samba: Unauthenticated remote heap corruption via bad DNs; (bso#14595); (bsc#1183572). * CVE-2021-20277: samba: out of bounds read in ldb_handler_fold; (bso#14655); (bsc#1183574). - Update to 4.13.5 * s3:modules:vfs_virusfilter: Recent talloc changes cause infinite start-up failure; (bso#14634); * s3: libsmb: Add missing cli_tdis() in error path if encryption setup failed on temp proxy connection; (bso#13992); * smbd: In conn_force_tdis_done() when forcing a connection closed force a full reload of services; (bso#14604); * dbcheck: Check Deleted Objects and reduce noise in reports about expired tombstones (bso#14593); * s3: Fix fcntl waf configure check; (bso#14503); * s3/auth: Implement "winbind:ignore domains"; (bso#14602); * smbd: Use fsp->conn->session_info for the initial delete-on-close token; (bso#14617); * s3: VFS: nfs4_acls. Add missing TALLOC_FREE(frame) in error path; (bso#14648); * classicupgrade: Treat old never expires value right; (bso#14624); * g_lock: Fix uninitalized variable reads; (bso#14636); * s3:pysmbd: Fix fd leak in py_smbd_create_file(); (bso#13898); * lib:util: Avoid free'ing our own pointer; (bso#14625); * HEIMDAL: krb5_storage_free(NULL) should work; (bso#12505);- Spec file fixes around systemd and requires; (bsc#1182830); - Align systemd service unit files with upstream provided ones.- Update to 4.13.4 * Work around special SMB2 IOCTL response behavior of NetApp Ontap 7.3.7; (bso#14607); * Temporary DFS share setup doesn't set case parameters in the same way as a regular share definition does; (bso#14612); * lib: Avoid declaring zero-length VLAs in various messaging functions; (bso#14605); * Do not create an empty DB when accessing a sam.ldb; (bso#14579); * vfs_fruit may close wrong backend fd; (bso#14596); * Temporary DFS share setup doesn't set case parameters in the same way as a regular share definition does; (bso#14612); * vfs_virusfilter: Allocate separate memory for config char*; (bso#14606); * vfs_fruit may close wrong backend fd; (bso#14596); * Work around special SMB2 IOCTL response behavior of NetApp Ontap 7.3.7; (bso#14607); * The cache directory for the user gencache should be created recursively; (bso#14601); * Be more flexible with repository names in CentOS 8 test environments; (bso#14594);- Uninstalling samba-client: Failed to disable unit, cifs.service does not exists; (bsc#1180388);- Update to 4.13.3 + libcli: smb2: Never print length if smb2_signing_key_valid() fails for crypto blob; (bso#14210); + s3: modules: gluster. Fix the error I made in preventing talloc leaks from a function; (bso#14486); + s3: smbd: Don't overwrite contents of fsp->aio_requests[0] with NULL via TALLOC_FREE(); (bso#14515); + s3: spoolss: Make parameters in call to user_ok_token() match all other uses; (bso#14568); + s3: smbd: Quiet log messages from usershares for an unknown share; (bso#14590); + samba process does not honor max log size; (bso#14248); + vfs_zfsacl: Add missing inherited flag on hidden "magic" everyone@ ACE; (bso#14587); + s3-libads: Pass timeout to open_socket_out in ms; (bso#13124); + s3-vfs_glusterfs: Always disable write-behind translator; (bso#14486); + smbclient: Fix recursive mget; (bso#14517); + clitar: Use do_list()'s recursion in clitar.c; (bso#14581); + manpages/vfs_glusterfs: Mention silent skipping of write-behind translator; (bso#14486); + vfs_shadow_copy2: Preserve all open flags assuming ROFS; (bso#14573); + interface: Fix if_index is not parsed correctly; (bso#14514);- Update to 4.13.2 + s3: modules: vfs_glusterfs: Fix leak of char **lines onto mem_ctx on return; (bso#14486); + RN: vfs_zfsacl: Only grant DELETE_CHILD if ACL tag is special; (bso#14471); + smb.conf.5: Add clarification how configuration changes reflected by Samba; (bso#14538); + daemons: Report status to systemd even when running in foreground; (bso#14552); + DNS Resolver: Support both dnspython before and after 2.0.0; (bso#14553); + s3-vfs_glusterfs: Refuse connection when write-behind xlator is present; (bso#14486); + provision: Add support for BIND 9.16.x; (bso#14487); + ctdb-common: Avoid aliasing errors during code optimization; (bso#14537); + libndr: Avoid assigning duplicate versions to symbols; (bso#14541); + docs: Fix default value of spoolss:architecture; (bso#14522); + winbind: Fix a memleak; (bso#14388); + s4:dsdb:acl_read: Implement "List Object" mode feature; (bso#14531); + docs-xml/manpages: Add warning about write-behind translator for vfs_glusterfs; (bso#14486); + nsswitch/nsstest.c: Avoid nss function conflicts with glibc nss.h. + vfs_shadow_copy2: Avoid closing snapsdir twice; (bso#14530); + third_party: Update resolv_wrapper to version 1.1.7; (bso#14547); + examples:auth: Do not install example plugin; (bso#14550); + ctdb-recoverd: Drop unnecessary and broken code; (bso#14513); + RN: vfs_zfsacl: Only grant DELETE_CHILD if ACL tag is special; (bso#14471);- Adjust smbcacls '--propagate-inheritance' feature to align with upstream; (bsc#1178469).- Update to samba 4.13.1 + CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with easily crafted records; (bsc#1177613); (bso#14472); + CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994); (bso#14436); + CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify; (bsc#1173902); (bso#14434); - Adjust systemd tmpfiles.d configuration, use /run/samba instead of /var/run/samba; (bsc#1177355);- Fix vfs_ceph query_directory regression; (bso#14519) - Drop liburing-devel for SLE15-SP2; (bsc#1177245)- Register CTDB recovery lock holder with ceph-mgr - Add liburing-devel dependency- Update to samba 4.13.0 + Require Python 3.6 + Move wide links functionality into VFS module + Deprecate NT4-like 'classic' Samba domain controllers + Deprecate SMBv1 only protocol options + Remove deprecated "ldap ssl ads" option + Unify asynchronous DCE-RPC server; (jsc#SES-645) + Replay multichannel lease break requests; (bso#11897); (jsc#SES-655) + Drop internal byteorder.h header from util-devel package + Remove final code for the AD DC LDAP backend + Add AD DC Group Policy Scripts + Only use gnutls_aead_cipher_encryptv2() for GnuTLS > 3.6.14; (bso#14399) + Fix %U substitutions if it contains a domain name; (bso#14467) + Fix krb5.conf creation for 'net ads join'; (bso#14479) + Fix build problem if libbsd-dev is not installed; (bso#14482) + Toggle vfs_snapper using "--with-shared-modules"; (bso#14437) + Fix idmap_ad RFC4511 response handling; (bso#14465) + Fix panic in get_lease_type(); (bso#14428)- Update to samba 4.11.13 + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2 against unencrypted passwords; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Support "server require schannel:WORKSTATION$ = no" about unsecure configurations; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): s4 torture rpc: repeated bytes in client challenge; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): libcli/auth: Reject weak client challenges in netlogon_creds_server_init() "server require schannel:WORKSTATION$ = no"; (bsc#1176579); (bso#14497); - Update to samba 4.11.12 + s3: libsmb: Fix SMB2 client rename bug to a Windows server; (bso#14403); + dsdb: Allow "password hash userPassword schemes = CryptSHA256" to work on RHEL7; (bso#14424); + dbcheck: Allow a dangling forward link outside our known NCs; (bso#14450); + lib/debug: Set the correct default backend loglevel to MAX_DEBUG_LEVEL; (bso#14426); + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428); + lib/util: do not install "test_util_paths"; (bso#14370); + lib:util: Fix smbclient -l basename dir; (bso#14345); + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428); + util: Allow symlinks in directory_create_or_exist; (bso#14166); + docs: Fix documentation for require_membership_of of pam_winbind; (bso#14358); + s3:winbind:idmap_ad: Make failure to get attrnames for schema mode fatal; (bso#14425);- Add obsoletes to libsmbldap2 package to fix upgrades from previous versions; (bsc#1172810);- Fix net command unable to negotiate SMB2; (bsc#1174120);- Update to samba 4.11.11 + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ and VLV combined; (bso#14364); (bsc#1173159] + CVE-2020-10745: invalid DNS or NBT queries containing dots use several seconds of CPU each; (bso#14378); (bsc#1173160). + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP server with paged_result or VLV; (bso#14402); (bsc#1173161) + CVE-2020-14303: Endless loop from empty UDP packet sent to AD DC nbt_server; (bso#14417); (bsc#1173359). - Update to samba 4.11.10 + Fix segfault when using SMBC_opendir_ctx() routine for share folder that contains incorrect symbols in any file name; (bso#14374). + vfs_shadow_copy2 doesn't fail case looking in snapdirseverywhere mode; (bso#14350) + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr; (bso#14413). + Malicous SMB1 server can crash libsmbclient; (bso#14366) + winbindd: Fix a use-after-free when winbind clients exit; (bso#14382) + ldb: Bump version to 2.0.11, LMDB databases can grow without bounds. (bso#14330) - Update to samba 4.11.9 + nmblib: Avoid undefined behaviour in handle_name_ptrs(); (bso#14242). + 'samba-tool group' commands do not handle group names with special chars correctly; (bso#14296). + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo is not valid; (bso#14237). + Missing check for DMAPI offline status in async DOS attributes; (bso#14293). + smbd: Ignore set NTACL requests which contain S-1-5-88 NFS ACEs; (bso#14307). + vfs_recycle: Prevent flooding the log if we're called on non-existant paths; (bso#14316) + smbd mistakenly updates a file's write-time on close; (bso#14320). + RPC handles cannot be differentiated in source3 RPC server; (bso#14359). + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313). + nsswitch: Fix use-after-free causing segfault in _pam_delete_cred; (bso#14327). + Fix fruit:time machine max size on arm; (bso#13622) + CTDB recovery corner cases can cause record resurrection and node banning; (bso#14294). + ctdb: Fix a memleak; (bso#14348). + libsmb: Don't try to find posix stat info in SMBC_getatr(). + ctdb-tcp: Move free of inbound queue to TCP restart; (bso#14295); (bsc#1162680). + s3/librpc/crypto: Fix double free with unresolved credential cache; (bso#14344); (bsc#1169095) + s3:libads: Fix ads_get_upn(); (bso#14336). + CTDB recovery corner cases can cause record resurrection and node banning; (bso#14294) + Starting ctdb node that was powered off hard before results in recovery loop; (bso#14295); (bsc#1162680). + ctdb-recoverd: Avoid dereferencing NULL rec->nodemap; (bso#14324) - Update to samba 4.11.8 + CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with ASQ; (bso#14331); (bsc#1169850); + CVE-2020-10704: LDAP Denial of Service (stack overflow) in Samba AD DC; (bso#14334); (bsc#1169851); - Update to samba 4.11.7 + s3: lib: nmblib. Clean up and harden nmb packet processing; (bso#14239). + s3: VFS: full_audit. Use system session_info if called from a temporary share definition; (bso#14283) + dsdb: Correctly handle memory in objectclass_attrs; (bso#14258). + ldb: version 2.0.9, Samba 4.11 and later give incorrect results for SCOPE_ONE searches; (bso#14270) + auth: Fix CIDs 1458418 and 1458420 Null pointer dereferences; (bso#14247). + smbd: Handle EINTR from open(2) properly; (bso#14285) + winbind member (source3) fails local SAM auth with empty domain name; (bso#14247) + winbindd: Handling missing idmap in getgrgid(); (bso#14265). + lib:util: Log mkdir error on correct debug levels; (bso#14253). + wafsamba: Do not use 'rU' as the 'U' is deprecated in Python 3.9; (bso#14266). + ctdb-tcp: Make error handling for outbound connection consistent; (bso#14274). - Update to samba 4.11.6 + pygpo: Use correct method flags; (bso#14209). + vfs_ceph_snapshots: Fix root relative path handling; (bso#14216); (bsc#1141320). + Avoiding bad call flags with python 3.8, using METH_NOARGS instead of zero; (bso#14209). + source4/utils/oLschema2ldif: Include stdint.h before cmocka.h; (bso#14218). + docs-xml/winbindnssinfo: Clarify interaction with idmap_ad etc; (bso#14122). + smbd: Fix the build with clang; (bso#14251). + upgradedns: Ensure lmdb lock files linked; (bso#14199). + s3: VFS: glusterfs: Reset nlinks for symlink entries during readdir; (bso#14182). + smbc_stat() doesn't return the correct st_mode and also the uid/gid is not filled (SMBv1) file; (bso#14101). + librpc: Fix string length checking in ndr_pull_charset_to_null(); (bso#14219). + ctdb-scripts: Strip square brackets when gathering connection info; (bso#14227).- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);- Installing: samba - samba-ad-dc.service does not exist and unit not found; (bsc#1171437);- Fix samba_winbind package is installing python3-base without python3 package; (bsc#1169521);- Require libldb2 >= 2.0.10 after security release.- CVE-2020-10704: LDAP Denial of Service (stack overflow) in Samba AD DC; (bso#14334); (bsc#1169851); - CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with ASQ; (bso#14331); (bsc#1169850);- Fix smbclient crash with double free (with unresolved krb5 credential cache); (bso#14344); (bsc#1169095).- Starting ctdb node that was powered off hard before results in recovery loop; (bso#14295); (bsc#1162680).- CTDB doesn't retry outgoing connections on bind (and some other) failures; (bso#14274); (bsc#1162680).- Revert: Allow idmap_rid to have primary group other than "Domain Users"; (bsc#1087931).- Fix nmbstatus not reporting detailed information about workgroups; (bsc#1159464); - Fix querying all names registered within broadcast area; (bso#8927);- Update to samab 4.11.5 + CVE-2019-14902: Replication of ACLs down subtree on AD Directory is not automatic; (bso#12497); (bsc#1160850). + CVE-2019-19344: Fix server crash with dns zone scavenging = yes; (bso#14050); (bsc#1160852). + CVE-2019-14907: server-side crash after charset conversion failure (eg during NTLMSSP processing); (bso#14208); (bsc#1160888). - Update to samba 4.11.4 + Ensure SMB1 cli_qpathinfo2() doesn't return an inode number; (bso#14161). + Ensure we don't call cli_RNetShareEnum() on an SMB1 connection; (bso#14174). + NT_STATUS_ACCESS_DENIED becomes EINVAL when using SMB2 in SMBC_opendir_ctx; (bso#14176). + SMB2 - Ensure we use the correct session_id if encrypting an interim response; (bso#14189). + Prevent smbd crash after invalid SMB1 negprot; (bso#14205). + printing: Fix %J substition; (bso#13745). + Remove now unneeded call to cmdline_messaging_context(); (bso#13925). + Fix incomplete conversion of former parametric options; (bso#14069). + Fix sync dosmode fallback in async dosmode codepath; (bso#14070). + vfs_fruit returns capped resource fork length; (bso#14171). + libnet_join: Add SPNs for additional-dns-hostnames entries; (bso#14116). + smbd: Increase a debug level; (bso#14211). + Prevent azure ad connect from reporting discovery errors reference-value-not-ldap-conformant; (bso#14153). + krb5_plugin: Fix developer build with newer heimdal system library; (bso#14179). + replace: Only link libnsl and libsocket if required; (bso#14168); + ctdb: Incoming queue can be orphaned causing communication; breakdown; (bso#14175). + ldb: Release ldb 2.0.8. Cross-compile will not take cross-answers or cross-execute; (bso#13846). + heimdal-build: Avoid hard-coded /usr/include/heimdal in asn1_compile-generated code; (bso#13856).- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).- Update to samba 4.11.3 + CVE-2019-14861: DNSServer RPC server crash, an authenticated user can crash the DCE/RPC DNS management server by creating records with matching the zone name; (bso#14138); (bsc#1158108). + CVE-2019-14870: DelegationNotAllowed not being enforced, the DelegationNotAllowed Kerberos feature restriction was not being applied when processing protocol transition requests (S4U2Self), in the AD DC KDC; (bso#14187); (bsc#1158109).- CVE-2019-14861: DNSServer RPC server crash, an authenticated user can crash the DCE/RPC DNS management server by creating records with matching the zone name; (bso#14138); (bsc#1158108). - CVE-2019-14870: DelegationNotAllowed not being enforced, the DelegationNotAllowed Kerberos feature restriction was not being applied when processing protocol transition requests (S4U2Self), in the AD DC KDC; (bso#14187); (bsc#1158109).- Update to samba 4.11.2 + CVE-2019-10218: Client code can return filenames containing path separators; (bsc#1144902); (bso#14071). + CVE-2019-14833: Samba AD DC check password script does not receive the full password; (bso#12438). + CVE-2019-14847: User with "get changes" permission can crash AD DC LDAP server via dirsync; (bso#14040). - Fixes from 4.11.1 + Overlinking libreplace against librt and pthread against every binary or library causes issues; (bso#14140); + kpasswd fails when built with MIT Kerberos; (bso#14155); + Fix spnego fallback from kerberos to ntlmssp in smbd server; (bso#14106); + Stale file handle error when using mkstemp on a share; (bso#14137); + non-AES schannel broken; (bso#14134); + Joining Active Directory should not use SAMR to set the password; (bso#13884); + smbclient can blunder into the SMB1 specific cli_RNetShareEnum() call on an SMB2 connection; (bso#14152); + Deleted records can be resurrected during recovery; (bso#14147); + getpwnam and getpwuid need to return data for ID_TYPE_BOTH group; (bso#14141); + winbind does not list forest trusts with additional trust attributes; (bso#14130); + fault report points to outdated documentation; (bso#14139); + pam_winbind with krb5_auth or wbinfo -K doesn't work for users of trusted domains/forests; (bso#14124); + classicupgrade results in uncaught exception - a bytes-like object is required, not 'str'; (bso#14136); + pod2man is not longer required, stop checking at build time; (bso#14131); + Exit code of ctdb nodestatus should not be influenced by deleted nodes; (bso#14129); + username/password authentication doesn't work with CUPS and smbspool; (bso#14128); + smbc_readdirplus() is incompatible with smbc_telldir() and smbc_lseekdir(); (bso#14094);- CVE-2019-14847: User with "get changes" permission can crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598); - CVE-2019-10218: Client code can return filenames containing path separators; (bso#14071); (bsc#1144902);- CVE-2019-14833: samba: Accent with "check script password" Samba AD DC check password script does not receive the full password; (bso#12438); (bsc#1154289).- Update to samba 4.11.0 + For details on all items see WHATSNEW.txt in samba-doc package + Python2 runtime support removed; python 3.4 or later required + Security improvements: - SMB1 disabled by default - lanman and plaintext authentication deprecated - winbind: PAM_AUTH and NTLM_AUTH events logged - GnuTLS 3.2 required; system FIPS mode setting honored + CephFS Snapshot integration, exposed as previous file versions + ctdb changes: - onnode -o option removed - ctdbd logs when using more than 90% of a CPU thread - CTDB_MONITOR_SWAP_USAGE variable removed + AD Domain controller improvements: - Upgrade AD databse format - BIND9_FLATFILE deprecated - default process model chagned to prefork - bind9 dns operation duration logging - Default schema updated to 2012_R2; function level is unchanged - many performance improvements + Configuration webserver support removed- Fix broken username/password authentication with CUPS and smbspool; (bsc#1152143); (bso#14128).- Fix auth problems when printing via smbspool backend with kerberos; (bnc#1148539); (bso#13832).- Update to samba 4.10.8 + CVE-2019-10197: user escape from share path definition; (bso#14035); (bsc#1141267);- Fix build on newer systems by modifying samba.spec to use consistent non-relative paths for pammodules in configure line and specification of pam_winbind.so library to package.- Update to samba 4.10.7 + Unable to create or rename file/directory inside shares configured with vfs_glusterfs_fuse module; (bso#14010). + build: Allow build when '--disable-gnutls' is set; (bso#13844) + samba-tool: Add 'import samba.drs_utils' to fsmo.py; (bso#13973). + Fix 'Error 32 determining PSOs in system' message on old DB with FL upgrade; (bso#14008). + s4/libnet: Fix joining a Windows pre-2008R2 DC; (bso#14021) + join: Use a specific attribute order for the DsAddEntry nTDSDSA object; (bso#14046). + vfs_catia: Pass stat info to synthetic_smb_fname(); (bso#14015). + lookup_name: Allow own domain lookup when flags == 0; (bso#14091). + s4 librpc rpc pyrpc: Ensure tevent_context deleted last; (bso#13932). + DEBUGC and DEBUGADDC doesn't print into a class specific log file; (bso#13915). + Request to keep deprecated option "server schannel", VMWare Quickprep requires "auto"; (bso#13949). + dbcheck: Fallback to the default tombstoneLifetime of 180 days; (bso#13967). + dnsProperty fails to decode values from older Windows versions; (bso#13969). + samba-tool: Use only one LDAP modify for dns partition fsmo role transfer; (bso#13973). + third_party: Update waf to version 2.0.17; (bso#13960). + netcmd: Allow 'drs replicate --local' to create partitions; (bso#14051). + ctdb-config: Depend on /etc/ctdb/nodes file; (bso#14017).- CVE-2019-10197: user escape from share path definition; (bso#14035); (bsc#1141267).- Prepare for use future use of kernel keyrings, modify /etc/pam.d/samba to include pam_keyinit.so; (bsc#1144059).- Update samba-winbind script to work with systemd; (bsc#1132739); - Drop samba dhcpcd hook scripts - Update to samba 4.10.6 + s3: winbind: Fix crash when invoking winbind idmap scripts; (bso#13956). + smbd does not correctly parse arguments passed to dfree and quota scripts; (bso#13964). + samba-tool dns: use bytes for inet_ntop; (bso#13965). + samba-tool domain provision: Fix --interactive module in python3; (bso#13828). + ldb_kv: Skip @ records early in a search full scan; (bso#13893). + docs: Improve documentation of "lanman auth" and "ntlm auth" connection; (bso#13981). + python/ntacls: Use correct "state directory" smb.conf option instead of "state dir"; (bso#14002). + registry: Add a missing include; (bso#13840). + Fix SMB guest authentication; (bso#13944). + AppleDouble conversion breaks Resourceforks; (bso#13958). + vfs_fruit makes direct use of syscalls like mmap() and pread(); (bso#13968). + s3:mdssvc: Fix flex compilation error; (bso#13987). + s3/vfs_glusterfs[_fuse]: Avoid using NAME_MAX directly; (bso#13872). + dsdb:samdb: schemainfo update with relax control; (bso#13799). + s3:util: Move static file_pload() function to lib/util; (bso#13964). + smbd: Fix a panic; (bso#13957). + ldap server: Generate correct referral schemes; (bso#12478). + s4 dsdb/repl_meta_data: fix use after free in dsdb_audit_add_ldb_value; (bso#13941). + s4 dsdb: Fix use after free in samldb_rename_search_base_callback; (bso#13942). + dsdb/repl: we need to replicate the whole schema before we can apply it; (bso#12204). + ldb: Release ldb 1.5.5; (bso#12478). + Schema replication fails if link crosses chunk boundary backwards; (bso#13713). + 'samba-tool domain schemaupgrade' uses relax control and skips the schemaInfo update provision; (bso#13799). + dsdb_audit: avoid printing "... remote host [Unknown] SID [(NULL SID)] ..."; (bso#13916). + python/ntacls: We only need security.SEC_STD_READ_CONTROL in order to get the ACL; (bso#13917). + s3:loadparm: Ensure to truncate FS Volume Label at multibyte boundary; (bso#13947). + Using Kerberos credentials to print using spoolss doesn't work; (bso#13939). + wafsamba: Use native waf timer; (bso#13998). + ctdb-scripts: Fix tcp_tw_recycle existence check; (bso#13984).- Update to samba-4.10.5 (including updates for 4.10.4, 4.10.3) + CVE-2019-12435 rpc/dns: Avoid NULL deference if zone not found in DnssrvOperation2; (bso#13922); (bsc#1137815). + CVE-2019-12436 dsdb/paged_results: Ignore successful results without messages; (bso#13951); (bsc#1137816). - Update to samba-4.10.4 + s3: SMB1: Don't allow recvfile on stream fsp's; (bso#13938). + py/provision: Fix for Python 2.6; (bso#13882). + netcmd: Fix 'passwordsettings --max-pwd-age' command; (bso#13873). + s3-libnet_join: 'net ads join' to child domain fails when using "-U admin@forestroot"; (bso#13861). + vfs_ceph: Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245). + vfs_ceph: Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697). + ctdb-common: Avoid race between fd and signal events; (bso#13895). + ctdb-common: Fix memory leak in run_proc; (bso#13943). + lib: Initialize getline() arguments; (bso#13892). + winbind: Fix overlapping id ranges; (bco#13903). + lib util debug: Increase format buffer to 4KiB; (bso#13902). + nsswitch pam_winbind: Fix Asan use after free; (bso#13927). + s4 lib socket: Ensure address string owned by parent struct; (bso#13929). + s3 rpc_client: Fix Asan stack use after scope; (bso#13936). + s3:smbd: Handle IO_REPARSE_TAG_DFS in SMB_FIND_FILE_FULL_DIRECTORY_INFO; (bso#10097). + smb2_tcon: Avoid STATUS_PENDING completely on tdis; (bso#10344). + smb2_sesssetup: avoid STATUS_PENDING responses for session setup; (bso#12845). + smb2_tcon: Avoid STATUS_PENDING completely on tdis; (bso#13698). + smb2_sesssetup: avoid STATUS_PENDING responses for session setup; (bso#13796). + dbcheck: Fix the err_empty_attribute() check; (bso#13843). + vfs_snapper: Drop unneeded fstat handler; (bso#13858). + vfs_default: Fix vfswrap_offload_write_send() NT_STATUS_INVALID_VIEW_SIZE check; (bso#13862). + smb2_server: Grant all 8192 credits to clients; (bso#13863). + smbd: Implement SMB_FILE_NORMALIZED_NAME_INFORMATION handling; (bso#13919). + s3/vfs_glusterfs: Dynamically determine NAME_MAX; (bso#13872). + s3: modules: ceph: Use current working directory instead of share path; (bso#13918); (bsc#1134452). + winbind: Use domain name from lsa query for sid_to_name cache entry; (bso#13831). + memcache: Increase size of default memcache to 512k; (bso#13865). + docs: Update smbclient manpage for "--max-protocol"; (bso#13857). + s3:utils: If share is NULL in smbcacls, don't print it; (bso#13937). + s3:smbspool: Fix regression printing with Kerberos credentials; (bso#13939). + ctdb-scripts: CTDB restarts failed NFS RPC services by hand, which is incompatible with systemd; (bso#13860). + ctdb-daemon: Revert "We can not assume that just because we could complete a TCP handshake"; (bso#13888). + ctdb-daemon: Never use 0 as a client ID; (bso#13930). + ctdb-common: Fix memory leak; (bso#13943). + s3:debug: Enable logging for early startup failures; (bso#13904) - Update to samba-4.10.3 + CVE-2018-16860: Heimdal KDC: Reject PA-S4U2Self with unkeyed checksum; (bso#13685); (bsc#1134024).- CVE-2019-12435: zone operations can crash rpc server; (bso#13922); (bsc#1137815).- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697). - Add ceph_snapshots VFS module; (jsc#SES-183).- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).- Update to samba-4.10.2: + CVE-2019-3870 (World writable files in Samba AD DC private/ dir); (bso#13834). + CVE-2019-3880 (Save registry file outside share as unprivileged user); (bso#13851). + py/kcc_utils: py2.6 compatibility; (bso#13837). + libcli: permit larger values of DataLength in SMB2_ENCRYPTION_CAPABILITIES of negotiate response; (bso#13869). + regfio: Improve handling of malformed registry hive files; (bso#13840). + ctdb-version: Simplify version string usage; (bso#13789). + lib: Make fd_load work for non-regular files; (bso#13859). + dbcheck: in the middle of the tombstone garbage collection causes replication failures, dbcheck: add --selftest-check-expired-tombstones cmdline option; (bso#13816). + ndr_spoolss_buf: Fix out of scope use of stack variable in NDR_SPOOLSS_PUSH_ENUM_OUT(); (bso#13818). + s4/messaging: Fix undefined reference in linking libMESSAGING-samba4.so; (bso#13854). + acl_read: Fix regression for empty lists; (bso#13836). + s4:dlz make b9_has_soa check dc=@ node; (bso#13841). + s3:client: Fix printing via smbspool backend with kerberos auth; (bso#13832). + s4:librpc: Fix installation of Samba; (bso#13847). + s3:lib: Fix the debug message for adding cache entries; (bso#13848). + s3:utils: Add 'smbstatus -L --resolve-uids' to show username; (bso#13793). + s3:lib: Fix the debug message for adding cache entries; (bso#13848). + s3:waf: Fix the detection of makdev() macro on Linux; (bso#13853). * ctdb-build: Drop creation of .distversion in tarball; (bso#13789). * ctdb-packaging: Test package requires tcpdump, ctdb package should not own system library directory; (bso#13838). - Update to samba-4.10.1: + py/kcc_utils: py2.6 compatibility; (bso#13837); + libcli: permit larger values of DataLength in SMB2_ENCRYPTION_CAPABILITIES of negotiate response; (bso#13869); + regfio: Improve handling of malformed registry hive files; (bso#13840); + ctdb-version: Simplify version string usage; (bso#13789); + lib: Make fd_load work for non-regular files; (bso#13859); + dbcheck in the middle of the tombstone garbage collection causes replication failures, dbcheck: add --selftest-check-expired-tombstones cmdline option; (bso#13816); + ndr_spoolss_buf: Fix out of scope use of stack variable in NDR_SPOOLSS_PUSH_ENUM_OUT(); (bso#13818); + s4/messaging: Fix undefined reference in linking libMESSAGING-samba4.so; (bso#13854); + acl_read: Fix regression for empty lists; (bso#13836); + s4:dlz make b9_has_soa check dc=@ node; (bso#13841); + s3:client: Fix printing via smbspool backend with kerberos auth; (bso#13832); + s4:librpc: Fix installation of Samba; (bso#13847); + s3:lib: Fix the debug message for adding cache entries; (bso#13848); + s3:utils: Add 'smbstatus -L --resolve-uids' to show username; (bso#13793); + s3:lib: Fix the debug message for adding cache entries; (bso#13848); + s3:waf: Fix the detection of makdev() macro on Linux; (bso#13853); + ctdb-build: Drop creation of .distversion in tarball; (bso#13789); + ctdb-packaging: Test package requires tcpdump, ctdb package should not own system library directory; (bso#13838); - Update to samba-4.10.0: + s4-server: Open and close a transaction on sam.ldb at startup; (bso#13760); + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812); + s4/scripting/bin: Open unicode files with utf8 encoding and write + unicode string. + sambaundoguididx: Use the right escaped oder unescaped sam ldb files; (bso#13759); + Fix idmap cache pollution with S-1-22- IDs on winbind hickup; (bso#13813); + passdb: Update ABI to 0.27.2. + lib/winbind_util: Add winbind_xid_to_sid for --without-winbind; (bso#13813); + lib:util: Move debug message for mkdir failing to log level 1; (bso#13823);- MacOS credit accounting breaks with async SESSION SETUP; (bsc#1125601); (bso#13796). - Mac OS X SMB2 implmenetation sees Input/output error or Resource temporarily unavailable and drops connection; (bso#13698)- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).- CVE-2019-3880: Save registry file outside share as unprivileged user; (bso#13851); (bsc#1131060 ).- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0); (bso#13834); (bsc#1130703);- Update to samba-4.9.5 + audit_logging: Remove debug log header and JSON Authentication: prefix; (bso#13714); + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760); + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso# CID: 1433607; (bso#11495); + smbd: uid: Don't crash if 'force group' is added to an existing share connection; (bso#13690); + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility code; (bso#13770); + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803); + s3:utils/smbget fix recursive download with empty source directories; (bso#13199); + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716); + s3:libsmb: cli_smb2_list() can sometimes fail initially on a connection; (bso#13736); + join: Throw CommandError instead of Exception for simple errors; (bso#13747); + ldb: Avoid inefficient one-level searches; (bso#13762); + s3: libsmb: use smb2cli_conn_max_trans_size() in cli_smb2_list(); (bso#13736); + tldap: Avoid use after free errors; (bso#13776); + Fix idmap xid2sid cache churn; (bso#13802); + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812); + s3-smbd: Avoid assuming fsp is always intact after close_file call; (bso#13720); + s3-vfs-fruit: Add close call; (bso#13725); + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746); + s3-vfs: add glusterfs_fuse vfs module; (bso#13774); + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766); + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS) ftruncate and fallocate; (bso#13807); + lib/audit_logging: Actually create talloc; (bso#13737); + netcmd/user: python[3]-gpgme unsupported and replaced by python[3]-gpg; (bso#13728); + dns: Changing onelevel search for wildcard to subtree; (bso#13738); + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721); + sambaundoguididx: Use the right escaped oder unescaped sam ldb files; (bso#13759); + ctdb: Print locks latency in machinereadable stats; (bso#13742); + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786); + audit_logging: auth_json_audit required auth_json; (bso#13715); + man pages: Document prefork process model; (bso#13765); + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773); + s3:auth: ignore create_builtin_guests() failing without a valid idmap configuration; (bso#13697); + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC without trusts; (bso#13722); + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd is not available; (bso#13723); + s4:server: Add support for 'smbcontrol samba shutdown' and 'smbcontrol debug/debuglevel'; (bso#13752); + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616); + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330); + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774); + notifyd: Fix SIGBUS on sparc; (bso#13704); + waf: Check for libnscd; (bso#13787); + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770); + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717); + Recovery lock bug fixes; (bso#13800); + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726); + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727); + vfs_fileid: Fix get_connectpath_ino; (bso#13741); + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).- Fix update-apparmor-samba-profile script after apparmor switched to using named profiles. The change is backwards compatible; (bsc#1126377);- LoadParm().load_default() fails with "Unable to load default file"; (bsc#1089758);- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);- Update to samba-4.9.4 + libcli/smb: Don't overwrite status code; (bso#9175). + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164). + Session setup reauth fails to sign response; (bso#13661). + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677). + vfs_shadow_copy2: Nicely deal with attempts to open previous version for writing; (bso#13688). + Restoring previous version of stream with vfs_shadow_copy2 fails with NT_STATUS_OBJECT_NAME_INVALID fsp->base_fsp->fsp_name; (bso#13455). + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571). + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708) + PEP8: fix E231: missing whitespace after ','. + winbindd: Fix crash when taking profiles;(bso#13629) + CVE-2018-14629 dns: Fix CNAME loop prevention using counter regression; (bso#13600) + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686). + CVE-2018-16853: Do not segfault if client is not set; (bso#13571). + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679) + ctdb-daemon: Exit with error if a database directory does not exist; (bso#13696). + s3:libads: Add net ads leave keep-account option; (bso#13498).- Drop more %if..%endif guards which are idempotent. - Drop requires on ldconfig which are already auto-discovered. - Do not ignore errors from useradd/groupadd.- Remove python2 build dependency from samba-libs; (bsc#1116900);- Update update-apparmor-samba-profile script to ignore the shares's paths containing substitution variables in any place, not only at the beginning of the path.- Update to samba-4.9.3 + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD Internal DNS server; (bso#13600); (bsc#1116319); + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628); (bsc#1116320); + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server; (bso#13674); (bsc#1116322); + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers; (bso#13669); (bsc#1116321); + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos configuration (unsupported); (bso#13678); (bsc#1116324); + CVE-2018-16857: Bad password count in AD DC not always effective; window; (bso#13683); (bsc#1116323);- Update to samba-4.9.2 + dsdb: Add comments explaining the limitations of our current backlink behaviour; (bso#13418); + Fix problems running domain backups (handling SMBv2, sites); (bso#13621); + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3; (bso#13465); + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642); + File saving issues with vfs_fruit on samba >= 4.8.5; (bso#13646); + Enabling vfs_fruit looses FinderInfo; (bso#13649); + Cancelling of SMB2 aio reads and writes returns wrong error NT_STATUS_INTERNAL_ERROR; (bso#13667); + Fix CTDB recovery record resurrection from inactive nodes and simplify vacuuming; (bso#13641); + examples: Fix the smb2mount build; (bso#13465); + libtevent: Fix build due to missing open_memstream on Illiumos; (bso#13629); + winbindd_cache: Fix timeout calculation for sid<->name cache; (bso#13662); + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path; (bso#13653); + Extended DN SID component missing for member after switching group membership; (bso#13418); + Return STATUS_SESSION_EXPIRED error encrypted, if the request was encrypted; (bso#13624); + python: Allow forced signing via smb.SMB(); (bso#13621); + lib:socket: If returning early, set ifaces; (bso#13665); + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8 encoded unicode; (bso#13616); + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute; (bso#13673); + waf: Add -fstack-clash-protection; (bso#13601); + winbind: Fix segfault if an invalid passdb backend is configured; (bso#13668); + Fix bugs in CTDB event handling; (bso#13659); + Misbehaving nodes are sometimes not banned; (bso#13670);- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);- winbind requires latest version of libtevent-util0 to start- Backport latest gpo code from master + Read policy from local gpt cache + Offline policy application + Make group policy extensible via register/unregister gpext + gpext's run via a process_group_policy method- Enable profiling data collection- Change samba-kdc package name to samba-ad-dc - Move samba-ad-dc.service to the samba-ad-dc package- Update to samba-4.9.1 + s3: nmbd: Stop nmbd network announce storm; (bso#13620); + s3-rpcclient: Use spoolss_init_spoolss_UserLevel1 in winspool cmds; (bso#13597); + CTDB recovery lock has some race conditions; (bso#13617); + s3-rpc_client: Advertise Windows 7 client info; (bso#13597); + ctdb-doc: Remove PIDFILE option from ctdbd_wrapper man page; (bso#13610);- Tumbleweed doesn't define the sle_version macro, so we must include a check for suse_version also. Otherwise python3 is disabled on Tumbleweed.- Update to samba-4.9.0 + samba_dnsupdate: Honor 'dns zone scavenging' option, only update if needed; (bso#13605); + wafsamba: Fix 'make -j'; (bso#13606);- Update to samba-4.9.0rc5 + s3: VFS: vfs_full_audit: Ensure smb_fname_str_do_log() only returns absolute pathnames; (bso#13565); + s3: util: Do not take over stderr when there is no log file; (bso#13578); + Durable Reconnect fails because cookie.allow_reconnect is not set; (bso#13549); + krb5-samba: Interdomain trust uses different salt principal; (bso#13539); + vfs_fruit: Don't unlink the main file; (bso#13441); + smbd: Fix a memleak in async search ask sharemode; (bso#13602); + Fix Samba GPO issue when Trust is enabled; (bso#11517); + samba-tool: Add "virtualKerberosSalt" attribute to 'user getpassword/syncpasswords'; (bso#13539); + Fix CTDB configuration issues; (bso#13589); + ctdbd logs an error until it can successfully connect to eventd; (bso#13592);- Update to samba-4.9.0rc4 + s3: smbd: Ensure get_real_filename() copes with empty pathnames; (bso#13585); + samba domain backup online/rename commands force user to specify password on CLI; (bso#13566); + wafsamba/samba_abi: Always hide ABI symbols which must be local; (bso#13579); + Fix a panic if fruit_access_check detects a locking conflict; (bso#13584); + Fix memory and resource leaks; (bso#13567); + python: Fix print in dns_invalid.py; (bso#13580); + Aliasing issue causes incorrect IPv6 checksum; (bso#13588); + Fix CTDB configuration issues; (bso#13589); + s3: vfs: time_audit: fix handling of token_blob in smb_time_audit_offload_read_recv(); (bso#13568);- Add missing zlib-devel dependency which was previously pulled in by libopenssl-devel- Update to samba-4.9.0rc3+git.22.3fff23ae36e + CVE-2018-10858: libsmb: Harden smbc_readdir_internal() against returns from malicious servers; (bso#13453); + CVE-2018-1140: ldbsearch '(distinguishedName=abc)' and DNS query with escapes crashes, ldb: Release LDB 1.3.5 for CVE-2018-1140; (bso#13374); + CVE-2018-10918: cracknames: Fix DoS (NULL pointer de-ref) when not servicePrincipalName is set on a user; (bso#13552); + CVE-2018-10919: acl_read: Fix unauthorized attribute access via searches; (bso#13434); + ctdb_mutex_ceph_rados_helper: Set SIGINT signal handler; (bso#13540); + CVE-2018-1139 libcli/auth: Do not allow ntlmv1 over SMB1 when it is disabled via "ntlm auth"; (bso#13360); + s3-tldap: do not install test_tldap; (bso#13529); + ctdb_mutex_ceph_rados_helper: Fix deadlock via lock renewals; (bso#13540); + CVE-2018-1140 Add NULL check for ldb_dn_get_casefold() in ltdb_index_dn_attr(); (bso#13374); + ctdb-eventd: Fix CID 1438155; (bso#13554); + Fix CIDs 1438243, (Unchecked return value) 1438244 (Unsigned compared against 0), 1438245 (Dereference before null check) and 1438246 (Unchecked return value); (bso#13553); + ctdb: Fix a cut&paste error; (bso#13554); + systemd: Only start smb when network interfaces are up; (bso#13559); + Fix quotas don't work with SMB2; (bso#13553); + s3/smbd: Ensure quota code is only called when quota support detected; (bso#13563); + s3/libsmb: Explicitly set delete_on_close token for rmdir; (bso#13204); + s3:waf: Install eventlogadm to /usr/sbin; (bso#13561); + Shorten description in vfs_linux_xfs_sgid manual; (bso#13562);- Update to samba-4.9.0rc2+git.21.a1069afb007 + s3: smbd: Using "sendfile = yes" with SMB2 can cause CPU spin; (bso#13537); + s3: smbd: Fix path check in smbd_smb2_create_durable_lease_check(); (bso#13535); + samba-tool trust: Support discovery via netr_GetDcName; (bso#13538); + s4-dsdb: Only build dsdb Python modules for AD DC; (bso#13542); + Fix portability issues on freebsd; (bso#13520); + DNS wildcard search does not handle multiple labels correctly; (bso#13536); + samba-tool domain trust: Fix trust compatibility to Windows Server 1709 and FreeIPA; (bso#13308); + Fix portability issues on freebsd; (bso#13520); + ctdb-protocol: Fix CTDB compilation issues; (bso#13545); + ctdb-docs: Replace obsolete reference to CTDB_DEBUG_HUNG_SCRIPT option; (bso#13546); + ctdb-doc: Provide an example script for migrating old configuration; (bso#13550); + ctdb-event: Implement event tool "script list" command; (bso#13551);- Update to samba-4.8.4+git.37.a7a861d7982; + CVE-2018-1139: Weak authentication protocol allowed; (bsc#1095048); (bsc#13360); + CVE-2018-1140: Denial of Service Attack on DNS and LDAP server; (bsc#1095056); (bso#13466); (bso#13374); + CVE-2018-10858: Insufficient input validation on client directory listing in libsmbclient; (bsc#1103411); (bso#13453); + CVE-2018-10918: Denial of Service Attack on AD DC DRSUAPI server; (bsc#1103414); (bso#13552); + CVE-2018-10919: Confidential attribute disclosure from the AD LDAP server; (bsc#1095057); (bso#13434); + s3:winbind: winbind normalize names' doesn't work for users; (bso#12851); + winbind: Fix UPN handling in canonicalize_username(); (bso#13369); + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428); + samdb: Fix building Samba with gcc 8.1; (bso#13437); + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440); + smbd: Flush dfree memcache on service reload; (bso#13446); + ldb: Save a copy of the index result before calling the + lib/util: No Backtrace given by Samba's AD DC by default; (bso#13454). + s3: smbd: printing: Re-implement delete-on-close semantics for print files missing since 3.5.x; (bso#13457). + python: Fix talloc frame use in make_simple_acl(); (bso#13474). + krb5_wrap: Fix keep_old_entries logic for older Kerberos libraries;(bso#13478). + krb5_plugin: Add winbind localauth plugin for MIT Kerberos; (bso#13480).- Add missing package descriptions; (bsc#1093864); - Fix dependency issue between samba-python and samba-kdc; (bsc#1062876); - Call update-apparmor-samba-profile when running samba-ad-dc; (bsc#1092099);- Update to 4.8.2 + After update to 4.8.0 DC failed with "Failed to find our own NTDS Settings objectGUID" (bso#13335). + fix incorrect reporting of stream dos attributes on a directory (bso#13380). + vfs_ceph: add asynchronous fsync; fake synchronous call (bso#13412). + vfs_ceph: add fake async pwrite/pread send/recv hooks; (bso#13425) + vfs_ceph: Fix memory leak; (bso#13424). + libsmbclient: Fix hard-coded connection error return of ETIMEDOUT; (bso#13419). + s4-lsa: Fix use-after-free in LSA server; (bso#13420). + winbindd: Do re-connect if the RPC call fails in the passdb case; (bso#13430). + cleanupd: Sends MSG_SMB_UNLOCK twice to interested peers; (bso#13416). + cleanupd: Use MSG_SMB_BRL_VALIDATE to signal cleanupd unclean process shutdown; (bso#13414). + ctdb-client: Remove ununsed functions from old client code; (bso#13411). + printing: Return the same error code as windows does on upload failures; (bso#13395). + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged pipe is not accessable; (bso#13400). + s4:lsa_lookup: remove TALLOC_FREE(state) after all dcesrv_lsa_Lookup{Names,Sids}_base_map() calls; (bso#13420). + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407). + s3:smbspool: Fix cmdline argument handling; (bso#13417).- Move libdfs-server-ad-samba4.so library from kdc to libs package, as it is required by some client libs; (bsc#1074135); - Update to 4.8.1; (bsc#1091179); + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error, we don't own it here; (bso#13244); + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't support fdopendir(); (bso#13270); + Round-tripping ACL get/set through vfs_fruit will increase the number of ACE entries without limit; (bso#13319); + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit issues; (bso#13347); + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without delete access; (bso#13358); + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372); + s3: smbd: Unix extensions attempts to change wrong field in fchown call; (bso#13375); + ms_schema/samba-tool visualize: Fix python2.6 incompatibility; (bso#13337); + Fix invocation of gnutls_aead_cipher_encrypt(); (bso#13352); + Windows 10 cannot logon on Samba NT4 domain; (bso#13328); + winbindd: Recover loss of netlogon secure channel in case the peer DC is rebooted; (bso#13332); + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363); + ctdb-client: Fix bugs in client code; (bso#13356); + ctdb-scripts: Drop "net serverid wipe" from 50.samba event script; (bso#13359); + s3: lib: messages: Don't use the result of sec_init() before calling sec_init(); (bso#13368); + libads: Fix the build '--without-ads'; (bso#13273); + winbind: Keep "force_reauth" in invalidate_cm_connection, add 'smbcontrol disconnect-dc'; (bso#13332); + vfs_virusfilter: Fix CIDs 1428738-1428740; (bso#13343); + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367); + rpc_server: Fix core dump in dfsgetinfo; (bso#13370); + smbclient: Fix notify; (bso#13382); + Fix smbd panic if the client-supplied channel sequence number wraps; (bso#13215); + Windows 10 cannot logon on Samba NT4 domain; (bso#13328); + lib/util: Remove unused '#include ' from tests/tfork.c; (bso#13342); + Fix build errors with cc from developerstudio 12.5 on Solaris; (bso#13343); + Fix the picky-developer build on FreeBSD 11; (bso#13344); + s3:modules: Fix the build of vfs_aixacl2.c; (bso#13345); + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338); + lib:replace: Fix linking when libtirpc-devel overwrites system headers; (bso#13341); + winbindd: 'wbinfo --name-to-sid' returns misleading result on invalid query; (bso#13312); + s3:passdb: Do not return OK if we don't have pinfo set up; (bso#13376); + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);- Use new foreground execution flags for systemd samba daemons; (bsc#1088574); (bsc#1071090); (bsc#1065551); + Add %post scriptlet to clear old sysconfig flags - Update vendor-files to commit 880b3e7. + Set samba sysconfig template variables to "" + Add required daemon flags directly to systemd unit- Specfile cleanup + Remove %if..%endif guards which don't affect the build + Remove redundant %clean section + Replace old $RPM_* shell vars with macros- BuildRequire pkgconfig(systemd) and pkgconfig(libsystemd) in place of systemd and systemd-devel: Allow OBS to optimize the workload by allowing the usage of the 'build-optimized' systemd packages.- Enable building samba with python3, and create a samba-python3 package.- Update to 4.8 + New GUID Index mode in sam.ldb for the AD DC + GPO support for samba KDC + Time machine support with vfs_fruit + Encrypted secrets + AD Replication visualization + Improved trust support - ability to not scan global trust list - AD external trusts have limited support - verbose trusted domain listing + VirusFilter VFS module + NT4-style replication removed + vfs_aio_linux removed- Disable samba-pidl package, due to the removal of dependency perl-Parse-Yapp; (bsc#1085150);- Update to 4.7.6; + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally; (bso#11343); (bsc#1081741); + CVE-2018-1057: Authenticated users can change other users' password; (bso#13272); (bsc#1081024).- Disable python until full python3 port is done; (bsc#1082139); + Remove contents of package samba-python + Remove contents of package libsamba-policy0 + Remove contents of package libsamba-policy-devel + Remove library libsamba-python-samba4.so from samba-libs package + Remove library libsamba-net-samba4.so from samba-libs package + Remove smbtorture binary and manpage from samba-test- samba fails to build with glibc2.27; (bsc#1081042);- Update to 4.7.5; (bsc#1080545); + smbd tries to release not leased oplock during oplock II downgrade; (bso#13193); + Fix copying file with empty FinderInfo from Windows client to Samba share with fruit; (bso#13181); + build: Deal with recent glibc sunrpc header removal; (bso#10976); + Make Samba work with tirpc and libnsl2; (bso#13238); + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208); (bsc#1075206); + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue; (bso#12986); + ctdb-recovery-helper: Deregister message handler in error paths; (bso#13188); + samba: Only use async signal-safe functions in signal handler; (bso#13240); + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue; (bso#12986); + repl_meta_data: Fix linked attribute corruption on databases with unsorted links on expunge. dbcheck: Add functionality to fix the corrupt database; (bso#13228); + Fix smbd panic when chdir returns error during exit; (bso#13189); + Make Samba work with tirpc and libnsl2; (bso#13238); + Fix POSIX ACL support on HPUX and possibly other big-endian OSs; (bso#13176);- Update to 4.7.4; (bsc#1080545); + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140); + s3: libsmb: Fix valgrind read-after-free error in cli_smb2_close_fnum_recv(); (bso#13171); + s3: libsmb: Fix reversing of oldname/newname paths when creating a reparse point symlink on Windows from smbclient; (bso#13172); + Build man page for vfs_zfsacl.8 with Samba; (bso#12934); + repl_meta_data: Allow delete of an object with dangling backlinks; (bso#13095); + s4:samba: Fix default to be running samba as a deamon; (bso#13129); + Performance regression in DNS server with introduction of DNS wildcard, ldb: Release 1.2.3; (bso#13191); + vfs_zfsacl: Fix compilation error; (bso#6133); + "smb encrypt" setting changes are not fully applied until full smbd restart; (bso#13051); + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052); + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155); + winbindd: Dependency on trusted-domain list in winbindd in critical auth codepath; (bso#13173); + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120); + ctdb: sock_daemon leaks memory; (bso#13153); + TCP tickles not getting synchronised on CTDB restart; (bso#13154); + winbindd: winbind parent and child share a ctdb connection; (bso#13150); + pthreadpool: Fix deadlock; (bso#13170); + pthreadpool: Fix starvation after fork; (bso#13179); + messaging: Always register the unique id; (bso#13180); + s4/smbd: set the process group; (bso#13129); + Fix broken linked attribute handling; (bso#13095); + The KDC on an RWDC doesn't send error replies in some situations; (bso#13132); + libnet_join: Fix 'net rpc oldjoin'; (bso#13149); + g_lock conflict detection broken when processing stale entries; (bso#13195); + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired sessions; (bso#13197); + s3:libads: net ads keytab list fails with "Key table name malformed"; (bso#13166); (bsc#1067700); + Fix crash in pthreadpool thread after failure from pthread_create; (bso#13170); + s4:samba: Allow samba daemon to run in foreground; (bso#13129); (bsc#1065551); + third_party: Link the aesni-intel library with "-z noexecstack"; (bso#13174); + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I" options; (bso#13125);- Re-enable usage of libnsl (did got lost with glibc change) - Use TI-RPC (sunrpc is deprecated and will be removed soon from glibc)- smbc_opendir should not return EEXIST with invalid login credentials; (bnc#1065868).- Update to 4.7.3; (bsc#1069666); + Non-smbd processes using kernel oplocks can hang smbd; (bso#13121); + python: use communicate to fix Popen deadlock; (bso#13127); + smbd on disk file corruption bug under heavy threaded load; (bso#13130); + tevent: version 0.9.34; (bso#13130); + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118); + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug; (bsc#1060427);(bso#13041); + CVE-2017-15275: s3: smbd: Chain code can return uninitialized memory when talloc buffer is grown; (bsc#1063008); (bso#13077); - Build with AD DC support only in openSUSE.- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- samba-tool requires samba-python; (bnc#1067771).- Run all daemons in the foreground and let systemd handle it; (bsc#1065551). - Update to 4.7.1; + Fix exporting subdirs with shadow_copy2; (bso#13091); + Currently if getwd() fails after a chdir(), we panic; (bso#13027); + Ensure default SMB_VFS_GETWD() call can't return a partially completed struct smb_filename; (bso#13068); + sys_getwd() can leak memory or possibly return the wrong errno on older systems; (bso#13069); + smbclient doesn't correctly canonicalize all local names before use; (bso#13093); + Fix broken linked attribute handling; (bso#13095); + Missing LDAP query escapes in DNS rpc server; (bso#12994); + Link to -lbsd when building replace.c by hand; (bso#13087); + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem; (bso#6133); + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module; (bso#7909); + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module; (bso#7933); + Missing assignment in sl_pack_float; (bso#12991); + Wrong Samba access checks when changing DOS attributes; (bso#12995); + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062); + groupmap cleanup should not delete BUILTIN mappings; (bso#13065); + Enabling vfs_fruit results in loss of Finder tags and other xattrs; (bso#13076); + man pages: Properly ident lists; (bso#9613); + smb.conf.5: Sort parameters alphabetically; (bso#13081); + Fix GUID string format on GetPrinter info; (bso#12993); + Remote serverid check doesn't check for the unique id; (bso#13042); + CTDB starts consuming memory if there are dead nodes in the cluster; (bso#13056); + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070); + libgpo doesn't sort the GPOs in the correct order; (bso#13046); + Remote serverid check doesn't check for the unique id; (bso#13042); + vfs_catia: Fix a potential memleak; (bso#13090); + Fix file change notification for renames; (bso#12903); + Samba DNS server does not honour wildcards; (bso#12952); + Can't change password in samba from a Windows client if Samba runs on IPv6 only interface; (bso#13079); + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086); + Apple client can't cope with SMB2 async replies when creating symlinks; (bso#13047); + s4:rpc_server:backupkey: Move variable into scope; (bso#12959); + Fix ntstatus_gen.h generation on 32bit; (bso#13099); + Fix a double free in vfs_gluster_getwd(); (bso#13100); + Fix resouce leaks and pointer issues; (bso#13101); + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);- Add samba-kdc to baselibs.conf. - Do not wrap samba-kdc's package definition into if/endif: the package won't be generated simply based on the fact that there is no files section for the package. Allows the source validator to ensure samba-kdc is a built package.- Update to 4.7.0; + Whole DB read locks: Improved LDAP and replication consistency; (bso#12858). + Samba AD with MIT Kerberos + Dynamic RPC port range: Default range changed from "1024-1300" to "49152-65535". + Authentication and Authorization audit support: New auth_audit debug class. + Multi-process LDAP Server: The LDAP server in the AD DC now honours the process model used for the rest of the 'samba' process. + Improved Read-Only Domain Controller (RODC) Support; (bso#12977). + Additional password hashes stored in supplementalCredentials. + Improvements to DNS during Active Directory domain join. + Significant AD performance and replication improvements. + Query record for open file or directory. + Removal of lpcfg_register_defaults_hook(). + Change of loadable module interface. + SHA256 LDAPS Certificates: The self-signed certificate generated for use on LDAPS will now be generated with a SHA256 self-signature, not a SHA1 self-signature. + CTDB no longer allows mixed minor versions in a cluster. + CTDB now ignores hints from Samba about TDB flags when attaching to databases. + New configuration variable CTDB_NFS_CHECKS_DIR. + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed. + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed. + The example NFS Ganesha call-out has been improved. + A new "replicated" database type is available.- CVE-2017-12163: Prevent client short SMB1 write from writing server memory to file; (bso#13020); (bsc#1058624).- CVE-2017-12150: Some code path don't enforce smb signing, when they should; (bso#12997); (bsc#1058622).- CVE-2017-12151: Keep required encryption across SMB3 dfs redirects; (bso#12996); (bsc#1058565).- Clean specfile assuming SUSE-only system and product >=SLE11 + %{ul_version}, %{rhel_version}, %{mandriva_version}, %{centos_version} are always undefined + %{_vendor} is "suse" and %{suse_version} is at least 1100- Update to 4.6.7; (bsc#1054017) + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392). + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937). + vfs_ceph provides inconsistent directory listings; (bso#12911). + Misused talloc context can cause a user to crash their smbd by chaining SMB1 commands.; (bso#12836). + Use-after free can crash libsmbclient code.; (bso#12927). + Server exit with active AIO can crash.; (bso#12925). + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910). + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs; (bso#12898). + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897). + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for authentication; (bso#12886). + finder sidebar showing question mark instead of icon when using ip to connect with vfs_fruit; (bso#12840). + Winbind stops obtaining the 'unixHomeDirectory' & 'loginShell' attributes from AD.; (bso#12720). + KCC run at selftest startup can fail spuriously due to a race; (bso#12869). + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for the remote change; (bso#12782). + rpc_pipe_client memory leaks due to long term memory context passed to rpc_pipe_open_interface(); (bso#12890). + CVE-2017-2619 breaks accessing previous versions of directories with snapshots in subdirectories of the share; (bso#12885). + dns_name_equal doing OOB read; (bso#12813). + replica_sync tests flap; (bso#12753). + Selftest should not call 'net cache flush' and wipe important winbind entries; (bso#12868). + Old Samba versions don't support using recent ldb versions (>=1.1.30); (bso#12859). + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490). + race starting winbindd against posixacl test; (bso#12843). + Crash in the reentrant smbd_smb2_create_send() if the something fails in the subsequent try; (bso#12832). + spnego.c passes the wrong argument order to gensec_update_ev() for the FALLBACK case; (bso#12788). + Clients with SMB3 support can't connect with "server max protocol = SMB2_02"; (bso#12772). + A log message of samb-tool user syncpasswords reverses string arguments in a debug message "Call Popen[...".; (bso#12768). + The smb tarmode tests kills the share dir contents; (bso#12867). + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862). + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860). + manpage/index.html lists links not in alphabetical order; (bso#12854). + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831). + If a record is locked in a database, then recovery does not complete; (bso#12857). + debug_locks.sh script does not log any information; (bso#12856). + SIGSEGV in cm_connect_lsa_tcp dereferencing conn->lsa_tcp_pipe->transport after error; (bso#12852). + smbclient can't parse DOMAIN+username if a different winbind separator is used; (bso#12849). + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845). + Related requests with TreeConnect fail with NETWORK_NAME_DELETED; (bso#12844). + cli->server_os not filled correctly; (bso#12779). + REGRESSION: smbclient doesn't print the session setup anymore; (bso#12824). + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808). + CTDB NFS call-out failures do not cause event failures; (bso#12837). + net command fails due to incorrectly return code; (bso#12828). + Fix building Samba with GCC 7.1; (bso#12827).- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again; (bsc#1048339).- fix cephwrap_chdir(); (bsc#1048790). - Update to 4.6.6 + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation; (bsc#1048278).- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).- Fix inconsistent ctdb socket path; (bsc#1048352). - Fix non-admin cephx authentication; (bsc#1048387).- Update to 4.6.5; (bsc#1040157) + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at startup; (bso#12814). + vfs_expand_msdfs tries to open the remote address as a file path; (bso#12687). + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type); (bso#12798). + With clustering get update_num_read_oplocks failed and PANIC: num_share_modes == 1 assertion failure; (bso#11844). + contend_level2_oplocks_begin_default oplock optimisation doesn't carry over to leases; (bso#12766). + `ctdb nodestatus` incorrectly displays status for all nodes with wrong exit code; (bso#12802). + CTDB can spin hard on revoking readonly delegations if a node becomes disconnected; (bso#12697). + Printing a share mode entry with leases can crash in the ndr code; (bso#12793). + Fix flakey unit tests for eventd; (bso#12792). + CTDB daemon crashes if built with clang; (bso#12770). + smbcacls fails if no password is specified; (bso#12765). + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757). + samba-tool user syncpasswords doesn't trigger the script when a user gets removed; (bso#12767). + systemd: fix detection of libsystemd; (bso#12764). + Notify subsystem only maps first inotify mask to Windows notify filter; (bso#12760). + Allow passing trusted domain password as plain-text to PASSDB layer; (bso#12751). + Can't case-rename files with vfs_fruit; (bso#12749). + wrong sid->uid mapping for SIDs residing in sIDHistory; (bso#12702). + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562). + Ordering of notify responses broken; (bso#12756).- s3: libsmb: Fix error where short name length was read as 2 bytes, should be 1; (bso#11822); (bsc#1042419).- Revert explicit winbind %{version}-%{release} dependency. + The ABI has stabilized since (bsc#936909), so remove to fix cross-media dependencies; (bsc#1037899).- Fix CVE-2017-7494 remote code execution from a writable share; (bso#12780); (bsc#1038231).- Update to 4.6.3; (bsc#1036011) + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots from shares with GlusterFS backend; (bso#12743). + Fix for Solaris C compiler; (bso#12559). + s3: locking: Update oplock optimization for the leases era; (bso#12628). + Make the Solaris C compiler happy; (bso#12693). + s3: libgpo: Allow skipping GPO objects that don't have the expected LDAP attributes; (bso#12695). + Fix buffer overflow caused by wrong use of getgroups; (bso#12747). + lib: debug: Avoid negative array access; (bso#12746). + cleanupdb: Fix a memory read error; (bso#12748). + streams_xattr and kernel oplocks results in NT_STATUS_NETWORK_BUSY; (bso#7537). + winbindd: idmap_autorid allocates ids for unknown SIDs from other backends; (bso#11961). + vfs_fruit: Resource fork open request with flags=O_CREAT|O_RDONLY; (bso#12565). + manpages/vfs_fruit: Document global options; (bso#12615). + lib/pthreadpool: Fix a memory leak; (bso#12624). + Lookup-domain for well-known SIDs on a DC; (bso#12727). + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728). + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729). + credentials_krb5: use gss_acquire_cred for client-side GSSAPI use case; (bso#12611). + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690). + ctdb-readonly: Avoid a tight loop waiting for revoke to complete; (bso#12697). + ctdb_event monitor command crashes if event is not specified; (bso#12723). + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733). + smbd: Fix smb1 findfirst with DFS; (bso#12558). + smbd: Do an early exit on negprot failure; (bso#12610). + winbindd: Fix substitution for 'template homedir'; (bso#12699). + s4:kdc: Disable principal based autodetected referral detection; (bso#12554). + idmap_autorid: Allocate new domain range if the callers knows the sid is valid; (bso#12613). + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724). + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for trusted domain; (bso#12725). + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731). + winbindd: Fix password policy for pam authentication; (bso#12725). + s3:gse: Correctly handle external trusts with MIT; (bso#12554). + auth/credentials: Always set the realm if we set the principal from the ccache; (bso#12611). + replace: Include sysmacros.h; (bso#12686). + s3:vfs_expand_msdfs: Do not open the remote address as a file; (bso#12687). + s3:libsmb: Only print error message if kerberos use is forced; (bso#12704). + winbindd: Child process crashes when kerberos-authenticating a user with wrong password; (bso#12708). + vfs_fruit: Office document opens as read-only on macOS due to CNID semantics; (bso#12715). + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is fragmented; (bso#12737).- Generate and update vendor-files tarball from Git + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).- Generate source tarball directly from Git using OBS tar_scm + use version string derived from parent Git tag and commit hash - remove obsolete vendor-files/tools/package-data version ID + explicitly generate ctdb manpages, needed without "make dist"- Update to 4.6.2 + remove bso#12721 patches now upstream- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622). + x86-64 and aarch64- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).- Build and install the html man pages (bsc#1021907).- Fix CVE-2017-2619 regression with "follow symlinks = no"; (bso#12721).- Update to 4.6.1 + symlink race permits opening files outside share directory; CVE-2017-2619; (bso#12496); (bsc#1027147) + testparm checks for valid idmap parameters + add new krb client encryption types + support for printer driver upload from windows 10 + inherit owner = 'unix only' for improved quota support + improved CTDB event support + new primary group support for idmap_ad + idmap_hash deprecated + mvxattr added to recursively rename extended attributes- Remove chkconfig requirements for systemd systems- Don't call insserv if systemd is used- Fix check if we need to require insserv- async_req: make async_connect_send() "reentrant"; (bso#12105); (bsc#1024416).- Force usage of ncurses6-config thru NCURSES_CONFIG env var; (bsc#1023847).- add missing patch for libnss_wins segfault; (bsc#995730).- Fix vfs_ceph builds against recent Ceph versions; (bsc#1021933).- Document "winbind: ignore domains" parameter; (bsc#1019416).- Add base Samba dependency to samba-ceph package.- Update to 4.5.3 + Heap-based Buffer Overflow Remote Code Execution Vulnerability; CVE-2016-2123; (bso#12409); (bsc#1014437). + Don't send delegated credentials to all servers; CVE-2016-2125; (bso#12445); (bsc#1014441). + denial of service due to a client triggered crash in the winbindd parent process; CVE-2016-2126; (bso#12446); (bsc#1014442). - 4.5.1 and 4.5.2 updates + various streams vfs fixes + various printing fixes + ntlm_auth: do not map explicitly empty domain + various stability fixes in smbd + match file compression ReFS behavior- Add missing ldb module directory; (bnc#1012092).- s3/client: obey 'disable netbios' smb.conf param, don't connect via NBT port; (bsc#1009085); (bso#12418).- Include vfstest in samba-test; (bsc#1001203).- s3/winbindd: using default domain with user@domain.com format fails; (bsc#997833).- Fix segfault in libnss_wins; (bso#12277); (bso#12269); (bsc#995730).- Update to 4.5.0 + NTLM1 Authentication disabled by default + SMB2.1 leases enabled by default + Support for OFD locks + ctdb tool rewritten + Added shadow copy snapshot prefix parameter- Fix illegal memory access after memory has been deleted; (bso#11836); (bsc#975299).- Prevent core, make sure response->extra_data.data is always cleared out; (bsc#993692).- Don't package man pages for VFS modules that aren't built; (boo#993707).- Fix population of ctdb sysconfig after source merge; (bsc#981566).- Enable vfs_ceph builds for Factory (x86-64) + Package as samba-ceph to avoid Ceph dependency in base package.- Update to 4.4.5 + Prevent client-side SMB2 signing downgrade; CVE-2016-2119; (bso#11860); (bsc#986869).- Remove obsolete syslog.target; (bsc#983938).- Honor smb.conf socket options in winbind; (bsc#975131).- Don't use htons() with IP_PROTO_RAW; (bso#11705); (bsc#969522).- Update to 4.4.4 + SMB3 multichannel: Add implementation of missing channel sequence number verification; (bso#11809). + smbd:close: Only remove kernel share modes if they had been taken at open; (bso#11919). + notifyd: Prevent NULL deref segfault in notifyd_peer_destructor; (bso#11930). + s3:rpcclient: Make '--pw-nt-hash' option work; (bso#10796). + Fix case sensitivity issues over SMB2 or above; (bso#11438). + s3:smbd: Fix anonymous authentication if signing is mandatory. (bso#11910) + Fix NTLM Authentication issue with squid; (bso#11914). + pdb: Fix segfault in pdb_ldap for missing gecos; (bso#11530). + Fix memory leak in share mode locking; (bso#11934).- Update to 4.4.3 + Various post-badlock regressions; (bso#11841); (bso#11850); (bso#11858); (bso#11870); (bso#11872). + Only allow idmap_hash for default idmap config (bso#11786). + smbd: Avoid large reads beyond EOF; (bso#11878). + vfs_acl_common: Avoid setting POSIX ACLs if "ignore system acls" is set; (bso#11806). + libads: Record session expiry for spnego sasl binds; (bso#11852).- Fix NTLMSSP regressions caused by previous CVE fixes; (bso#11849); (bsc#975962); (bsc#979268), (bsc#977669).- Revert shared library packaging to comply with SLPP- Update to 4.4.2 + A man-in-the-middle can downgrade NTLMSSP authentication; CVE-2016-2110; (bso#11688); (bsc#973031). + Domain controller netlogon member computer can be spoofed; CVE-2016-2111; (bso#11749); (bsc#973032). + LDAP conenctions vulnerable to downgrade and MITM attack; CVE-2016-2112; (bso#11644); (bsc#973033). + TLS certificate validation missing; CVE-2016-2113; (bso#11752); (bsc#973034). + Named pipe IPC vulnerable to MITM attacks; CVE-2016-2115; (bso#11756); (bsc#973036). + "Badlock" DCERPC impersonation of authenticated account possible; CVE-2016-2118; (bso#11804); (bsc#971965). + DCERPC server and client vulnerable to DOS and MITM attacks; CVE-2015-5370; (bso#11344); (bsc#936862).- Fix samba.tests.messaging test and prevent potential tdb corruption by removing obsolete now invalid tdb_close call; (bsc#974629).- Obsolete libsmbclient from libsmbclient0 while not providing it; (bsc#972197).- Update to 4.4.0. + Read of uninitialized memory DNS TXT handling; (bso#11128); (bso#11686); CVE-2016-0771. + Getting and setting Windows ACLs on symlinks can change permissions on link target; (bso#11648); CVE-2015-7560. + Sockets with htons(IPPROTO_RAW); (bso#11705); CVE-2015-8543. + s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystem with no ACL support; (bso#10489). + docs: Add example for domain logins to smbspool man page; (bso#11643). + smbd: Show correct disk size for different quota and dfree block sizes; (bso#11681). + docs: Add smbspool_krb5_wrapper manpage; (bso#11690). + winbindd: Return trust parameters when listing trusts; (bso#11691). + ctdb: Do not provide a useless pkgconfig file for ctdb; (bso#11696). + Crypto.Cipher.ARC4 is not available on some platforms, fallback to M2Crypto.RC4.RC4 then; (bso#11699). + s3:utils/smbget: Set default blocksize; (bso#11700). + Streamline 'smbget' options with the rest of the Samba utils; (bso#11700). + s3:clispnego: Fix confusing warning in spnego_gen_krb5_wrap(); (bso#11702). + s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703). + loadparm: Fix memory leak issue; (bso#11708). + lib/tsocket: Work around sockets not supporting FIONREAD; (bso#11714). + s3:vfs:glusterfs: Fix build after quota changes; (bso#11715). + ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ..."; (bso#11719). + lib:socket: Fix CID 1350010: Integer OVERFLOW_BEFORE_WIDEN; (bso#11723). + smbd: Fix CID 1351215 Improper use of negative value; (bso#11724). + smbd: Fix CID 1351216 Dereference null return value; (bso#11725). + s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new file; (bso#11727). + docs: Add manpage for cifsdd; (bso#11730). + param: Fix str_list_v3 to accept ; again; (bso#11732). + lib/socket: Fix improper use of default interface speed; (bso#11734). + lib:socket: Fix CID 1350009: Fix illegal memory accesses (BUFFER_SIZE_WARNING); (bso#11735). + libcli: Fix debug message, print sid string for new_ace trustee; (bso#11738). + Fix installation path of Samba helper binaries; (bso#11739). + Fix memory leak in loadparm; (bso#11740). + tevent: version 0.9.28: Fix memory leak when old signal action restored; (bso#11742). + smbd: Ignore SVHDX create context; (bso#11753). + Fix net join; (bso#11755). + s3:libads: setup the msDS-SupportedEncryptionTypes attribute on ldap_add; (bso#11755). + passdb: Add linefeed to debug message; (bso#11763). + s3:utils/smbget: Fix option parsing; (bso#11767). + libnet: Make Kerberos domain join site-aware; (bso#11769). + Reset TCP Connections during IP failover; (bso#11770). + ldb: Version 1.1.26; (bso#11772). + s3:smbd: Add negprot remote arch detection for OSX; (bso#11773). + vfs_glusterfs: Fix use after free in AIO callback; (bso#11774). + mkdir can return ACCESS_DENIED incorrectly on create race; (bso#11780). + "trustdom_list_done: Got invalid trustdom response" message should be avoided; (bso#11782). + Mismatch between local and remote attribute ids lets replication fail with custom schema; (bso#11783). + Quota is not supported on Solaris 10; (bso#11788). + Talloc: Version 2.1.6; (bso#11789). + smbd: Enable multi-channel if 'server multi channel support = yes' in the config; (bso#11796). + build: Fix build when '--without-quota' specified; (bso#11798). + lib/socket/interfaces: Fix some uninitialied bytes; (bso#11802). + Access based share enum: handle permission set in configuration files; (bso#8093). + See also WHATSNEW.txt from the samba-doc package.- Update to 4.3.6. + Getting and setting Windows ACLs on symlinks can change permissions on link target; CVE-2015-7560; (bso#11648); (bsc#968222). + Fix Out-of-bounds read in internal DNS server; CVE-2016-0771; (bso#11128); (bso#11686); (bsc#968223).- Upgrade on-disk FSRVP server state to new version; (bsc#924519).- Only obsolete but do not provide gplv2/3 package names; (bsc#968973).- Relocate existing lock files to /var/lib/samba/lock; (bsc#968963).- Obsolete no longer existing samba-32bit package; (bsc#967625).- Update to 4.3.5. + s3:utils/smbget: Fix recursive download; (bso#6482). + s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystemi with no ACL support; (bso#10489). + s3:smbd/oplock: Obey kernel oplock setting when releasing oplocks; (bso#11400). + vfs_shadow_copy2: Fix case where snapshots are outside the share; (bso#11580). + smbclient: Query disk usage relative to current directory; (bso#11662). + winbindd: Handle expired sessions correctly; (bso#11670). + smbd: Show correct disk size for different quota and dfree block sizes; (bso#11681). + smbcacls: Fix uninitialized variable; (bso#11682). + s3:smbd: Ignore initial allocation size for directory creation; (bso#11684). + s3-client: Add a KRB5 wrapper for smbspool; (bso#11690). + s3-parm: Clean up defaults when removing global parameters; (bso#11693). + Use M2Crypto.RC4.RC4 on platforms without Crypto.Cipher.ARC4; (bso#11699). + s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703). + ctdb: Remove error messages after kernel security update; CVE-2015-8543; (bso#11705). + loadparm: Fix memory leak issue; (bso#11708). + lib/tsocket: Work around sockets not supporting FIONREAD; (bso#11714). + ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ..."; (bso#11719). + s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new file; (bso#11727). + param: Fix str_list_v3 to accept ";" again; (bso#11732).- Shift samba-client sysconfig data into samba and samba-winbind; (bsc#947361).- Simplify shared library packaging; (bsc#966956).- Enable clustering (CTDB) support; (bsc#966271).- s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703); (bsc#964023).- Add quotes around path of update-apparmor-samba-profile; (bnc#962177).- Remove autoconf build-time requirement.- Update to 4.3.4. + vfs_fruit: Enable POSIX directory rename semantics; (bso#11065). + Crash: Bad talloc magic value - access after free; (bso#11394). + Copying files with vfs_fruit fails when using vfs_streams_xattr without stream prefix and type suffix; (bso#11466). + samba-tool: Fix uncaught exception if no fSMORoleOwner attribute is given; (bso#11613). + Fix a typo in the smb.conf manpage, explanation of idmap config; (bso#11619). + Correctly initialize the list head when keeping a list of primary followed by DFS connections; (bso#11624). + Reduce the memory footprint of empty string options; (bso#11625). + lib/async_req: Do not install async_connect_send_test; (bso#11639). + Fix typos in man vfs_gpfs; (bso#11641). + Make "hide dot files" option work with "store dos attributes = yes"; (bso#11645). + Fix a corner case of the symlink verification; (bso#11647); (bnc#960249). + Do not disable "store dos attributes" on-the-fly; (bso#11649). + Update lastLogon and lastLogonTimestamp; (bso#11659).- Prevent access denied if the share path is "/"; (bso#11647); (bnc#960249).- Update to 4.3.3. + Malicious request can cause Samba LDAP server to hang, spinning using CPU; CVE-2015-3223; (bso#11325); (bnc#958581). + Remote read memory exploit in LDB; CVE-2015-5330; (bso#11599); (bnc#958586). + Insufficient symlink verification (file access outside the share); CVE-2015-5252; (bso#11395); (bnc#958582). + No man in the middle protection when forcing smb encryption on the client side; CVE-2015-5296; (bso#11536); (bnc#958584). + Currently the snapshot browsing is not secure thru windows previous version (shadow_copy2); CVE-2015-5299; (bso#11529); (bnc#958583). + Fix Microsoft MS15-096 to prevent machine accounts from being changed into user accounts; CVE-2015-8467; (bso#11552); (bnc#958585).- Update to 4.3.2. + vfs_gpfs: Re-enable share modes; (bso#11243). + dcerpc.idl: Accept invalid dcerpc_bind_nak pdus; (bso#11327). + s3-smbd: Fix old DOS client doing wildcard delete - gives an attribute type of zero; (bso#11452). + Add libreplace dependency to texpect, fixes a linking error on Solaris; (bso#11511). + s4: Fix linking of 'smbtorture' on Solaris; (bso#11512). + s4:lib/messaging: Use correct path for names.tdb; (bso#11562). + Fix segfault of 'net ads (join|leave) -S INVALID' with nss_wins; (bso#11563). + async_req: Fix non-blocking connect(); (bso#11564). + auth: gensec: Fix a memory leak; (bso#11565). + lib: util: Make non-critical message a warning; (bso#11566). + Fix winbindd crashes with samlogon for trusted domain user; (bso#11569); (bnc#949022). + smbd: Send SMB2 oplock breaks unencrypted; (bso#11570). + ctdb: Open the RO tracking db with perms 0600 instead of 0000; (bso#11577). + s3:smb2_server: Make the logic of SMB2_CANCEL DLIST_REMOVE() clearer; (bso#11581). + s3-smbd: Fix use after issue in smbd_smb2_request_dispatch(); (bso#11581). + manpage: Correct small typo error; (bso#11584). + s3: smbd: If EAs are turned off on a share don't allow an SMB2 create containing them; (bso#11589). + Backport some valgrind fixes from upstream master; (bso#11597). + auth: Consistent handling of well-known alias as primary gid; (bso#11608). + winbind: Fix crash on invalid idmap configs; (bso#11612). + s3: smbd: have_file_open_below() fails to enumerate open files below an open directory handle; (bso#11615). + Changing log level of two entries to DBG_NOTICE; (bso#9912).- Ensure samlogon fallback requests are rerouted after kerberos failure; (bnc#953382); (bnc#953972).- Ensure to link with --as-needed flag by removing SUSE_ASNEEDED=0. - Always use the default optimization even on pre-9.2 systems.- Remove redundant configure options while adding with-relro.- Relocate the lockdir to the /var/lib/samba/lock directory.- Cleanup and enhance the pidl sub package.- Require renamed python-ldb-devel and python-talloc-devel at build-time. - Requires python-ldb and python-talloc from the python subpackage.- Update to 4.3.1. + s3: smbd: Fix our access-based enumeration on "hide unreadable" to match Windows; (bso#10252). + nss_winbind: Fix hang on Solaris on big groups; (bso#10365). + smbd: Fix file name buflen and padding in notify repsonse; (bso#10634). + kerberos: Make sure we only use prompter type when available; winbind: Fix 100% loop; (bso#11038). + source3/lib/msghdr.c: Fix compiling error on Solaris; (bso#11053). + s3:ctdbd_conn: make sure we destroy tevent_fd before closing the socket; (bso#11316). + s3: smbd: Fix mkdir race condition; (bso#11486). + pam_winbind: Fix a segfault if initialization fails; (bso#11502). + s3: dfs: Fix a crash when the dfs targets are disabled; (bso#11509). + s4:lib/messaging: Use 'msg.lock' and 'msg.sock' for messaging related subdirs; (bso#11515). + s3: smbd: Fix opening/creating :stream files on the root share directory; (bso#11522). + lib/param: Fix hiding of FLAG_SYNONYM values; (bso#11526). + net: Fix a crash with 'net ads keytab create'; (bso#11528). + s3: smbd: Fix a crash in unix_convert(); (bso#11535). + s3: smbd: Fix NULL pointer bug introduced by previous 'raw' stream fix (bso#11522); (bso#11535). + vfs_fruit: Return value of ad_pack in vfs_fruit.c; (bso#11543). + vfs_commit: set the fd on open before calling SMB_VFS_FSTAT; (bso#11547). + s3:locking: Initialize lease pointer in share_mode_traverse_fn(); (bso#11549). + s3:smbstatus: Add stream name to share_entry_forall(); (bso#11550). + s3:lib: Validate domain name in lookup_wellknown_name(); (bso#11555). + s3: lsa: lookup_name() logic for unqualified (no DOMAIN component) names is incorrect; (bso#11555).- Fix 100% CPU in winbindd when logging in with "user must change password on next logon"; (bso#11038).- Relocate the tmpfiles.d directory to the client package; (bnc#947552).- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf instead; (bnc#942716).- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).- Package /var/lib/samba/msg with 0755 permissions; (bso#11515); (bnc#945502).- Require to install libfam0-gamin from samba-libs on post-12.1 and pre-13.15 systems; (bnc#945013).- Update to 4.3.0. + Samba "map to guest = Bad uid" doesn't work; (bso#9862). + revert LDAP extended rule 1.2.840.113556.1.4.1941 LDAP_MATCHING_RULE_IN_CHAIN changes; (bso#10493). + No objectClass found in replPropertyMetaData on ordinary objects (non-deleted); (bso#10973). + Stream names with colon don't work with fruit:encoding = native; (bso#11278). + NetApp joined to a Samba/ADDC cannot resolve SIDs; (bso#11291). + tevent_fd needs to be destroyed before closing the fd; (bso#11316). + "force group" with local group not working; (bso#11320). + strsep is not available on Solaris; (bso#11359). + smbtorture does not build when configured --with-system-mitkrb5; (bso#11411). + Build with GPFS support is broken; (bso#11421). + Build broken with --disable-python; (bso#11424). + net share allowedusers crashes; (bso#11426). + nmbd incorrectly matches netbios names as own name; (bso#11427). + Python bindings don't check integer types; (bso#11429). + Python bindings don't check array sizes; (bso#11430). + CTDB's eventscript error handling is broken; (bso#11431). + Fix crash in nested ctdb banning; (bso#11432). + Cannot build ctdbpmda; (bso#11434). + samba-tool uncaught exception error; (bso#11436). + Crash in notify_remove caused by change notify = no; (bso#11444). + Poor SMB3 encryption performance with AES-GCM; (bso#11451). + Poor SMB3 encryption performance with AES-GCM (part1); (bso#11451). + fix recursion problem in rep_strtoll in lib/replace/replace.c; (bso#11455). + --bundled-libraries=!ldb,!pyldb,!pyldb-util doesn't disable ldb build and install; (bso#11458). + xid2sid gives inconsistent results; (bso#11464). + ctdb: Fix the build on FreeBSD 10.1; (bso#11465). + Handling of 0 byte resource fork stream; (bso#11467). + AD samr GetGroupsForUser fails for users with "()" in their name; (bso#11488).- Configure with --bundled-libraries=NONE; (bso#11458).- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).- Remove libiniparser-devel build-time requirement.- Update to 4.2.3. + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780). + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924). + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991). + Logon via MS Remote Desktop hangs; (bso#11061). + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068). + tevent: Add a note to tevent_add_fd(); (bso#11141). + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170). + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217). + smbd: Fix a use-after-free; (bso#11218); (bnc#919309). + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces; (bso#11245). + s3:smb2: Add padding to last command in compound requests; (bso#11277). + Add IPv6 support to ADS client side LDAP connects; (bso#11281). + Add IPv6 support for determining FQDN during ADS join; (bso#11282). + s3: IPv6 enabled DNS connections for ADS client; (bso#11283). + Fix invalid write in ctdb_lock_context_destructor; (bso#11293). + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295). + vfs_fruit: Add option "veto_appledouble"; (bso#11305). + tstream: Make socketpair nonblocking; (bso#11312). + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313). + Group creation: Add msSFU30Name only when --nis-domain was given; (bso#11315). + tevent_fd needs to be destroyed before closing the fd; (bso#11316). + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared"; (bso#11319). + smbd/trans2: Add a useful diagnostic for files with bad encoding; (bso#11323). + Change sharesec output back to previous format; (bso#11324). + Robust mutex support broken in 1.3.5; (bso#11326). + Kerberos auth info3 should contain resource group ids available from pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info exists in PAC; (bso#11328); (bnc#912457). + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329). + tevent: Fix CID 1035381 Unchecked return value; (bso#11330). + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331). + s3: smbd: Use separate flag to track become_root()/unbecome_root() state; (bso#11339). + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342). + pidl: Make the compilation of PIDL producing the same results if the content hasn't change; (bso#11356). + winbindd: Disconnect child process if request is cancelled at main process; (bso#11358). + vfs_fruit: Check offset and length for AFP_AfpInfo read requests; (bso#11363). + docs: Overhaul the description of "smb encrypt" to include SMB3 encryption; (bso#11366). + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server(); (bso#11367). + ncacn_http: Fix GNUism; (bso#11371).- Disable rpath usage; (bnc#902421).- Make the winbind package depend on the matching libwbclient version and vice versa; (bnc#936909).- Backport changes to use resource group sids obtained from pac logon_info; (bso#11328); (bnc#912457).- Order winbind.service Before and Want nss-user-lookup target.- Remove fam-devel build-time dependency for post-6 RHEL systems.- Update to 4.2.2. + s3:smbXsrv: refactor duplicate code into smbXsrv_session_clear_and_logoff(); (bso#11182). + gencache: don't fail gencache_stabilize if there were records to delete; (bso#11260). + s3: libsmbclient: After getting attribute server, ensure main srv pointer is still valid; (bso#11186). + s4: rpc: Refactor dcesrv_alter() function into setup and send steps; (bso#11236). + s3: smbd: Incorrect file size returned in the response of "FILE_SUPERSEDE Create"; (bso#11240). + Mangled names do not work with acl_xattr; (bso#11249). + nmbd rewrites browse.dat when not required; (bso#11254). + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff; (bso#11213). + s3:smbd: Add missing tevent_req_nterror; (bso#11224). + vfs: kernel_flock and named streams; (bso#11243). + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244). + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses are used; (bso#11284). + ctdb: check for talloc_asprintf() failure; (bso#11201). + spoolss: purge the printer name cache on name change; (bso#11210); (bnc#901813). + CTDB statd-callout does not scale; (bso#11204). + vfs_fruit: also map characters below 0x20; (bso#11221). + ctdb: Coverity fix for CID 1291643; (bso#11201). + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225). + Fix terminate connection behavior for asynchronous endpoint with PUSH notification flavors; (bso#11226). + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007). + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201). + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the directory is deleted; (bso#11257). + s3:winbindd: make sure we remove pending io requests before closing client sockets; (bso#11141); (bnc#931854). + Fix panic triggered by smbd_smb2_request_notify_done() -> smbXsrv_session_find_channel() in smbd; (bso#11182). + 'sharesec' output no longer matches input format; (bso#11237). + waf: Fix systemd detection; (bso#11200). + CTDB: Fix portability issues; (bso#11202). + CTDB: Fix some IPv6-related issues; (bso#11203). + CTDB statd-callout does not scale; (bso#11204). + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you enter invalid values; (bso#11234). + libads: record service ticket endtime for sealed ldap connections; (bso#11267). + lib/util: Include DEBUG macro in internal header files before samba_util.h; (bso#11033).- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).- Remove the independently built libraries ldb, talloc, tdn, and tevent and the post-10.3 renamed libsmbclient from baselibs.conf.- Drop redundant doc attribute from man pages.- Update to 4.2.1. + s3:winbind:grent: Don't stop group enumeration when a group has no gid; (bso#8905). + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791). + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with servers that don't send the 2 unused fields; (bso#10016). + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476). + waf: Fix the build on openbsd; (bso#10476). + s3: client: "client use spnego principal = yes" code checks wrong name; (bso#10888). + spoolss: Retrieve published printer GUID if not in registry; (bso#11018). + s3: lib: libsmbclient: If reusing a server struct, check every cli->timout miliseconds if it's still valid before use; (bso#11079). + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125). + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135). + replace: Remove superfluous check for gcrypt header; (bso#11135). + Backport subunit changes; (bso#11137). + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with implementation; (bso#11140). + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143). + talloc: Version 2.1.2; (bso#11144). + Update libwbclient version to 0.12; (bso#11149). + brlock: Use 0 instead of empty initializer list; (bso#11153). + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164). + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169); (bnc#913304). + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev fails in the SMB1 case; (bso#11173). + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174). + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175). + s3: libsmbclient: Add missing talloc stackframe; (bso#11177). + s4-process_model: Do not close random fds while forking; (bso#11180). + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).- Prevent samba package updates from disabling samba kerberos printing.- Add sparse file support for samba; (fate#318424).- Purge printer name cache on spoolss SetPrinter change; (bso#11210); (bnc#901813).- Correctly retain errno from Btrfs snapshot ioctls; (bnc#923374).- Simplify libxslt build requirement and README.SUSE install. - Remove no longer required cleanup steps while populating the build root.- Remove deprecated base_rid example from idmap_rid manpage; (bso#11169); (bnc#913304).- Update to 4.2.0. + smbd: Stop using vfs_Chdir after SMB_VFS_DISCONNECT; (bso#1115). + pam_winbind: fix warn_pwd_expire implementation; (bso#9056). + nsswitch: Fix soname of linux nss_*.so.2 modules; (bso#9299). + Make 'profiles' work again; (bso#9629). + s3:smb2_server: protect against integer wrap with "smb2 max credits = 65535"; (bso#9702). + Make validate_ldb of String(Generalized-Time) accept millisecond format ".000Z"; (bso#9810). + Use -R linker flag on Solaris, not -rpath; (bso#10112). + vfs: Add glusterfs manpage; (bso#10240). + Make 'smbclient' use cached creds; (bso#10279). + pdb: Fix build issues with shared modules; (bso#10355). + s4-dns: Add support for BIND 9.10; (bso#10620). + idmap: Return the correct id type to *id_to_sid methods; (bso#10720). + printing/cups: Pack requested-attributes with IPP_TAG_KEYWORD; (bso#10808). + Don't build vfs_snapper on FreeBSD; (bso#10834). + nss_winbind: Add getgroupmembership for FreeBSD; (bso#10835). + idmap_rfc2307: Fix a crash after connection problem to DC; (bso#10837). + s3: smb2cli: query info return length check was reversed; (bso#10848). + s3: lib, s3: modules: Fix compilation on Solaris; (bso#10849). + lib: uid_wrapper: Fix setgroups and syscall detection on a system without native uid_wrapper library; (bso#10851). + winbind3: Fix pwent variable substitution; (bso#10852). + Improve samba-regedit; (bso#10859). + registry: Don't leave dangling transactions; (bso#10860). + Fix build of socket_wrapper on systems without SO_PROTOCOL; (bso#10861). + build: Do not install 'texpect' binary anymore; (bso#10862). + Fix testparm to show hidden share defaults; (bso#10864). + libcli/smb: Fix smb2cli_validate_negotiate_info with min=PROTOCOL_NT1 max=PROTOCOL_SMB2_02; (bso#10866). + Integrate CTDB into top-level Samba build; (bso#10892). + samba-tool group add: Add option '--nis-domain' and '--gid'; (bso#10895). + s3-nmbd: Fix netbios name truncation; (bso#10896). + spoolss: Fix handling of bad EnumJobs levels; (bso#10898). + Fix smbclient loops doing a directory listing against Mac OS X 10 server with a non-wildcard path; (bso#10904). + Fix print job enumeration; (bso#10905); (bnc#898031). + samba-tool: Create NIS enabled users and unixHomeDirectory attribute; (bso#10909). + Add support for SMB2 leases; (bso#10911). + btrfs: Don't leak opened directory handle; (bso#10918). + s3: nmbd: Ensure NetBIOS names are only 15 characters stored; (bso#10920). + s3:smbd: Fix file corruption using "write cache size != 0"; (bso#10921). + pdb_tdb: Fix a TALLOC/SAFE_FREE mixup; (bso#10932). + s3-keytab: fix keytab array NULL termination; (bso#10933). + s3:passdb: fix logic in pdb_set_pw_history(); (bso#10940). + Cleanup add_string_to_array and usage; (bso#10942). + dbwrap_ctdb: Pass on mutex flags to tdb_open; (bso#10942). + Fix RootDSE search with extended dn control; (bso#10949). + Fix 'samba-tool dns serverinfo ' for IPv6; (bso#10952). + libcli/smb: only force signing of smb2 session setups when binding a new session; (bso#10958). + s3-smbclient: Return success if we listed the shares; (bso#10960). + s3-smbstatus: Fix exit code of profile output; (bso#10961). + socket_wrapper: Add missing prototype check for eventfd; (bso#10965). + libcli: SMB2: Pure SMB2-only negprot fix to make us behave as a Windows client does; (bso#10966). + vfs_streams_xattr: Check stream type; (bso#10971). + s3: smbd: Fix *allocate* calls to follow POSIX error return convention; (bso#10982). + vfs_fruit: Add support for AAPL; (bso#10983). + Fix spoolss IDL response marshalling when returning error without clearing info; (bso#10984). + dsdb-samldb: Check for extended access rights before we allow changes to userAccountControl; (bso#10993); CVE-2014-8143; (boo#914279). + Fix IPv6 support in CTDB; (bso#10996). + ctdb-daemon: Use correct tdb flags when enabling robust mutex support; (bso#11000). + vfs_streams_xattr: Add missing call to SMB_VFS_NEXT_CONNECT; (bso#11005). + s3-util: Fix authentication with long hostnames; (bso#11008). + ctdb-build: Fix build without xsltproc; (bso#11014). + packaging: Include CTDB man pages in the tarball; (bso#11014). + pdb_get_trusteddom_pw() fails with non valid UTF16 random passwords; (bso#11016). + Make Sharepoint search show user documents; (bso#11022). + nss_wrapper: check for nss.h; (bso#11026). + Enable mutexes in gencache_notrans.tdb; (bso#11032). + tdb_wrap: Make mutexes easier to use; (bso#11032). + lib/util: Avoid collision which alread defined consumer DEBUG macro; (bso#11033). + winbind: Retry after SESSION_EXPIRED error in ping-dc; (bso#11034). + s3-libads: Fix a possible segfault in kerberos_fetch_pac(); (bso#11037). + vfs_fruit: Fix base_fsp name conversion; (bso#11039). + vfs_fruit: mmap under FreeBSD needs PROT_READ; (bso#11040). + Fix authentication using Kerberos (not AD); (bso#11044). + net: Fix sam addgroupmem; (bso#11051). + vfs_snapper: Correctly handles multi-byte DBus strings; (bso#11055); (bnc#913238). + cli_connect_nb_send: Don't segfault on host == NULL; (bso#11058). + utils: Fix 'net time' segfault; (bso#11058). + libsmb: Provide authinfo domain for encrypted session referrals; (bso#11059). + s3-pam_smbpass: Fix memory leak in pam_sm_authenticate(); (bso#11066). + vfs_glusterfs: Add comments to the pipe(2) code; (bso#11069). + vfs/glusterfs: Change xattr key to match gluster key; (bso#11069). + vfs_glusterfs: Implement AIO support; (bso#11069). + s3-vfs: Fix developer build of vfs_ceph module; (bso#11070). + s3: netlogon: Ensure we don't call talloc_free on an uninitialized pointer; (bso#11077); CVE-2015-0240; (bnc#917376). + vfs: Add a brief vfs_ceph manpage; (bso#11088). + s3: smbclient: Allinfo leaves the file handle open; (bso#11094). + Fix Win8.1 Credentials Manager issue after KB2992611 on Samba domain; (bso#11097). + debug: Set close-on-exec for the main log file FD; (bso#11100). + s3: smbd: leases - losen paranoia check. Stat opens can grant leases; (bso#11102). + s3: smbd: SMB2 close. If a file has delete on close, store the return info before deleting; (bso#11104). + doc:man:vfs_glusterfs: improve the configuration section; (bso#11117). + snprintf: Try to support %j; (bso#11119). + ctdb-io: Do not use sys_write to write to client sockets; (bso#11124). + doc-xml: Add 'sharesec' reference to 'access based share enum'; (bso#11127).- Update to 4.2.0rc5. + Ensure we don't call talloc_free on an uninitialized pointer; CVE-2015-0240; (bso#11077); (bnc#917376).- Fix usage of freed memory on server exit; (bso#11218); (bnc#919309).- Fix tdb_store_flag_to_ntdb() gcc5 build failure.- Fix vfs_snapper DBus string handling; (bso#11055); (bnc#913238).- Update to 4.1.16. + dsdb-samldb: Check for extended access rights before we allow changes to userAccountControl; (bso#10993); CVE-2014-8143; (boo#914279).- Adjust baselibs.conf due to libpdb0 package rename to libsamba-passdb0.- Fix libsmbclient DFS referral handling. + Reuse connections derived from DFS referrals; (bso#10123); (fate#316512). + Set domain/workgroup based on authentication callback value; (bso#11059).- Update to 4.2.0rc4. - Add libsamba-debug, libsocket-blocking, libsamba-cluster-support, and libhttp to the libs package; (boo#913547). - Rename libpdb packages to libsamba-passdb. - Drop libsmbsharemodes packages.- Enable avahi support on post-12.2 systems.- Update to 4.1.15. + pam_winbind: Fix warn_pwd_expire implementation; (bso#9056). + nsswitch: Fix soname of linux nss_*.so.2 modules; (bso#9299). + Fix profiles tool; (bso#9629). + s3-lib: Do not require a password with --use-ccache; (bso#10279). + s4:dsdb/rootdse: Expand extended dn values with the AS_SYSTEM control; (bso#10949). + s4-rpc: dnsserver: Fix enumeration of IPv4 and IPv6 addresses; (bso#10952). + s3:smb2_server: Allow reauthentication without signing; (bso#10958). + s3-smbclient: Return success if we listed the shares; (bso#10960). + s3-smbstatus: Fix exit code of profile output; (bso#10961). + libcli: SMB2: Pure SMB2-only negprot fix to make us behave as a Windows client does; (bso#10966). + s3: smbd/modules: Fix *allocate* calls to follow POSIX error return convention; (bso#10982). + Fix 'domain join' by adding 'drsuapi.DsBindInfoFallBack' attribute 'supported_extensions'; (bso#11006). + idl:drsuapi: Manage all possible lengths of drsuapi_DsBindInfo; (bso#11006). + winbind: Retry LogonControl RPC in ping-dc after session expiration; (bso#11034).- yast2-samba-client should be able to specify osName and osVer on AD domain join; (bnc#873922).- Lookup FSRVP share snums at runtime rather than storing them persistently; (bnc#908627).- Specify soft dependency for network-online.target in Winbind systemd service file; (bnc#889175).- Fix spoolss error response marshalling; (bso#10984).- Update to 4.1.14. + pidl/wscript: Remove --with-perl-* options; revert buildtools/wafadmin/ Tools/perl.py back to upstream state; (bso#10472). + s4-dns: Add support for BIND 9.10; (bso#10620). + nmbd fails to accept "--piddir" option; (bso#10711). + nss_winbind: Add getgroupmembership for FreeBSD; (bso#10835). + S3: source3/smbd/process.c::srv_send_smb() returns true on the error path; (bso#10880). + vfs_glusterfs: Remove "integer fd" code and store the glfs pointers; (bso#10889). + s3-nmbd: Fix netbios name truncation; (bso#10896). + spoolss: Fix handling of bad EnumJobs levels; (bso#10898). + s3: libsmbclient-smb2. MacOSX 10 SMB2 server doesn't set STATUS_NO_MORE_FILES when handed a non-wildcard path; (bso#10904). + spoolss: Fix jobid in level 3 EnumJobs response; (bso#10905). + s3: nmbd: Ensure NetBIOS names are only 15 characters stored; (bso#10920). + s3:smbd: Fix file corruption using "write cache size != 0"; (bso#10921). + pdb_tdb: Fix a TALLOC/SAFE_FREE mixup; (bso#10932). + s3-keytab: Fix keytab array NULL termination; (bso#10933). + Cleanup add_string_to_array and usage; (bso#10942).- Remove and cleanup shares and registry state associated with externally deleted snaphots exposed as shadow copies; (bnc#876312).- Use the upstream tar ball, as signature verification is now able to handle compressed archives.- Fix leak when closing file descriptor returned from dirfd; (bso#10918).- Fix spoolss EnumJobs and GetJob responses; (bso#10905); (bnc#898031). + Fix handling of bad EnumJobs levels; (bso#10898).- Remove dependency on gpg-offline as signature checking is implemented in the source validator.- Update to 4.1.13. + s3-libnet: Add libnet_join_get_machine_spns(); (bso#9984). + s3-libnet: Make sure we do not overwrite precreated SPNs; (bso#9984). + s3-libads: Add all machine account principals to the keytab; (bso#9985). + s3: winbindd: Old NT Domain code sets struct winbind_domain->alt_name to be NULL. Ensure this is safe with modern AD-DCs; (bso#10717). + Fix unstrcpy; (bso#10735). + pthreadpool: Slightly serialize jobs; (bso#10779). + s3: smbd: streams - Ensure share mode validation ignores internal opens (op_mid == 0); (bso#10797). + s3: smbd:open_file: Open logic fix; Use a more natural check; (bso#10809). + vfs_media_harmony: Fix a crash bug; (bso#10813). + docs: Mention incompatibility between kernel oplocks and streams_xattr; (bso#10814). + nmbd: Send waiting status to systemd; (bso#10816). + libcli: Fix a segfault calling smbXcli_req_set_pending() on NULL; (bso#10817). + nsswitch: Skip groups we were not able to map; (bso#10824). + s3-winbindd: Use correct realm for trusted domains in idmap child; (bso#10826). + s3: nmbd: Ensure the main nmbd process doesn't create zombies; (bso#10830). + s3: lib: Signal handling - ensure smbrun and change password code save and restore existing SIGCHLD handlers; (bso#10831). + idmap_rfc2307: Fix a crash after connection problem to DC; (bso#10837). + s3-winbindd: Do not use domain SID from LookupSids for Sids2UnixIDs call; (bso#10838). + s3: smb2cli: Query info return length check was reversed; (bso#10848). + registry: Don't leave dangling transactions; (bso#10860).- Update to 4.2.0rc2./sbin/ldconfig/sbin/ldconfiglibdcerpc-binding0libdcerpc0libndr-krb5pac0libndr-nbt0libndr-standard0libndr0libndr1libndr2libnetapi0libsamba-credentials0libsamba-credentials1libsamba-errors0libsamba-hostconfig0libsamba-passdb0libsamba-util0libsamdb0libsmbclient0libsmbconf0libsmbldap0libsmbldap2libtevent-util0libwbclient0h01-armsrv3 1712056045  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstu4.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e62-150500.3.23.74.17.12+git.462.df636292e62-150500.3.23.74.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e62libdcerpc-binding.so.0libdcerpc-binding.so.0.0.1libdcerpc-server-core.so.0libdcerpc-server-core.so.0.0.1libdcerpc.so.0libdcerpc.so.0.0.1libndr-krb5pac.so.0libndr-krb5pac.so.0.0.1libndr-nbt.so.0libndr-nbt.so.0.0.1libndr-standard.so.0libndr-standard.so.0.0.1libndr.so.3libndr.so.3.0.0libnetapi.so.1libnetapi.so.1.0.0libsamba-credentials.so.1libsamba-credentials.so.1.0.0libsamba-errors.so.1libsamba-errors.so.1.0.0libsamba-hostconfig.so.0libsamba-hostconfig.so.0.0.1libsamba-passdb.so.0libsamba-passdb.so.0.28.0libsamba-util.so.0libsamba-util.so.0.0.1libsamdb.so.0libsamdb.so.0.0.1libsmbclient.so.0libsmbclient.so.0.7.0libsmbconf.so.0libsmbconf.so.0.0.1libsmbldap.so.2libsmbldap.so.2.1.0libtevent-util.so.0libtevent-util.so.0.0.1libwbclient.so.0libwbclient.so.0.15libCHARSET3-samba4.solibMESSAGING-SEND-samba4.solibMESSAGING-samba4.solibaddns-samba4.solibads-samba4.solibasn1util-samba4.solibauth-samba4.solibauthkrb5-samba4.solibcli-cldap-samba4.solibcli-ldap-common-samba4.solibcli-ldap-samba4.solibcli-nbt-samba4.solibcli-smb-common-samba4.solibcli-spoolss-samba4.solibcliauth-samba4.solibclidns-samba4.solibcluster-samba4.solibcmdline-contexts-samba4.solibcmdline-samba4.solibcommon-auth-samba4.solibdbwrap-samba4.solibdcerpc-pkt-auth-samba4.solibdcerpc-samba-samba4.solibdcerpc-samba4.solibevents-samba4.solibflag-mapping-samba4.solibgenrand-samba4.solibgensec-samba4.solibgpo-samba4.solibgse-samba4.solibhttp-samba4.solibinterfaces-samba4.solibiov-buf-samba4.solibkrb5samba-samba4.solibldbsamba-samba4.soliblibcli-lsa3-samba4.soliblibcli-netlogon3-samba4.soliblibsmb-samba4.solibmessages-dgm-samba4.solibmessages-util-samba4.solibmscat-samba4.solibmsghdr-samba4.solibmsrpc3-samba4.solibndr-samba-samba4.solibndr-samba4.solibnet-keytab-samba4.solibnetif-samba4.solibnpa-tstream-samba4.solibprinting-migrate-samba4.solibregistry-samba4.solibreplace-samba4.solibsamba-cluster-support-samba4.solibsamba-debug-samba4.solibsamba-modules-samba4.solibsamba-security-samba4.solibsamba-sockets-samba4.solibsamba3-util-samba4.solibsamdb-common-samba4.solibsecrets3-samba4.solibserver-id-db-samba4.solibserver-role-samba4.solibsmb-transport-samba4.solibsmbclient-raw-samba4.solibsmbd-base-samba4.solibsmbd-shim-samba4.solibsmbldaphelper-samba4.solibsocket-blocking-samba4.solibsys-rw-samba4.solibtalloc-report-printf-samba4.solibtdb-wrap-samba4.solibtime-basic-samba4.solibtrusts-util-samba4.solibutil-reg-samba4.solibutil-setid-samba4.solibutil-tdb-samba4.sopdbldapsam.sosmbpasswd.sotdbsam.so/usr/lib64//usr/lib64/samba//usr/lib64/samba/pdb/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:33120/SUSE_SLE-15-SP5_Update/9fb38d651a0568fadf222f60409c3f15-samba.SUSE_SLE-15-SP5_Updatedrpmxz5aarch64-suse-linux  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=b925b3ebabe4f721ba60fffeeae4200732fee38b, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=218626100c89437b1158716695b20e895a2a905d, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=cbfb960fc592f5ed3757257f47b80f817f2049b2, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=4e83b2995e329dc32bde102d34df8e3092544442, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=272f70d1bfca1839989353df54e3b7c1ae2bc00e, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=0f65a07a84f9bf18d910cc14447c944d5534bc62, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=ae3debb746b9673eafc21e00b0c1fa3b5d11d2da, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=fb4bdbe80c6805c3a04de8892095f2cbe8522720, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=8a1886ed353d3792a88192238089e61c171b9f9c, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=479b8238621a1f1bf6d22b098ffd8b8e8bfea0e8, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=865072ba1a034ed746cc1be671198ec1f12af21c, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=cc059125fba2a5e44997fa0e87102bcedf72658b, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=0d2b5fe080766483002831acf626dd0eefd37fd8, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=ffce02f18c141e777b7f5140b750664557ed1aa5, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=5bc920a75be68b94cd2b0926dba6ba81526de6a8, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=e3211c50b556d6fbe372c340d845735d31c14974, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=aeb796a3dfa03366016ff9d02a9e16aa02fe8daf, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=ee54766e38d64e83f007f9053118bbbe8f98cacb, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=f34396b1c503c79963e1d07b275ef50fa96f3371, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=18ebc459bf78d3705308dedc83be68d7ea1d960e, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=fc39b7877e183144c0505b009a24ab48ee4ba777, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=21322209b8c0d2fc23d41b1da13f9ee1e2b757d6, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=55ad34edfbd02cb971654a5868bf5c470d51c84b, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=5bf3b6127eb1b5c500ddec01167fbd784362cd4c, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=9f1cb2fed6c052ac369db624e2206996f20e5c37, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=e863a135eb209c2cfff84ea7d2b38056e357138f, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=a9197335b3c6fdef3403e9dfb2e7b86c8e27fd17, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=a200cf2b018b7021c4afb4ff265d04b0b2ebe9c4, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=fefbdf436bb71e322ff7f10adea2267b2fa416ef, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=3712ce2012ed4eacfe7b696444bd4ca2696b16ab, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=dab3ba1c78d34954c42c90dbb046f3ea07b47d87, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=9e3e0b3e480d8aebe33e8261399fc9addd24f06e, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=c557dbfeafbfa3752d47b0723908995d51ac87fd, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=5055599cdb6fa7ed5758f280cad80d9508af99f9, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=da06c7ff9d42ff0fa10ea9d5eaecf350690acddc, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=956753495fbfe1298c322f2b9d15bfa455fe6a61, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=9914e6b0229c257f6a7935cb9d5c0ee09acedfae, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=ff4737809dbf3292e5e38864b5e94d59c0bfeb4f, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=97c10f01d110e67d0210b21ce0e1171181697eca, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=09705c2e74092b980a2c7504d32d667cd6bda823, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=c3cd55a0230eaf5d8823ca76730dd26794beb478, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=96ace246d1864769147f3c218dd1d29b58f53a5a, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=1e95d28cd9a41311f33127aaad8a9424ef9643ba, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=50abecaf926a1a9bc50c2566587a738e26bc48a0, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=e273c8e9fbc094e0c6ce56cf81ca149046fa2e1e, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=d4974a3f85eee9bf6b478f7d9503dac9d31646a2, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=2d8b8a43922eff155ab5a654769482ee1c219b87, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=edcf262931b6c5ccf29ab4f8872fa536450d12e7, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=73ab715192bd22e13eea731b35d676741545ea89, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=7d58670ba98cbf33ff46f68917bffb3af2188651, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=4ee3e4ce118fb6ebacf230aef8ed0e08888b74eb, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=4fddc114bc0467e9a3b0a8e5501454ebba71e323, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=9829523016d5eb54f4ea625b8ea5ae7b106acf7e, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=4134bf49c9aefdd0b1aa8454889f327f088447be, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=dab5c509fd65dfe8a156ec3e4e2f42cbe927c0d7, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=f85aa02128430912d64c6799f5db68fa433aa644, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=be48f4929889fbc080131b37a529d3051b73475d, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=bd08a31454150521c3d4e0675bd96d7041d0ee4b, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=650d96b1af2de9063ec5227186aa8907d26ec659, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=8eca179545f02f6090a87920156f1f2a7156489e, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=6d5e50c6d217b2993cd5b7b9a3d1ba2667aaa2b5, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=f192e86ebfb6e9f1f30b456d136c2ac5b75c8d31, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=583bf0caef003798405fc65dcad5a9baff61c20e, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=ebb54de72ab8f2fa35ba16ce7809b3990a2b3e55, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=703ec46ad1e8069e49937d53ff128a7c9874981d, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=a186ec8db79c786fe21fd270d59eb812d7078c66, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=37ca4a9fc4fc292dba0d6da00d03a1d76955b8a5, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=0ce82d4e954306647c7cdb3f72be35e77e508d79, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=06039bec2b4bce95f936cfc3e82dd9ca9de4e1aa, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=57aa36918e5efd1ca81b251384314afbfe3d1ee2, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=d7d8d6203d798fd0f39af7ddf111cd42d96c715b, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=4ce47212932531753cbafd197f8ad3300b0894cd, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=25cb741b17eefdd0e5a5744ef1a56cc2b5722933, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=bd0384494647d90974b5b9ca6973b9a3055fc17b, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=536db31949be4c217b13422bc5571f93047e272c, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=87fc4c6f6187a9b011cbafd4ae04455b956fb412, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=23874de63e338d5b8b392144bac92642dfc39990, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=58aeb4199cf519a4d3fb21a968ede438e2f9e887, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=f89544bf9f541986538306d285dee2b3d2fc094d, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=0a8f559d55313523fb26d87268b1a3c258507a34, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=d0338c7990dce577dd8d24997e4af2e8fa1bbfa8, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=e1dd2f0553c44561a6383959d0f668e1fb39c0b1, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=4d126510e32952a64f0e653c60183d456d1bb162, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=88340e8975287a550eac7fd03f211344cf954e79, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=0fa86873797e39c5049e15e0d6da7f9fa4131b37, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=8903b4da202066c09d43b15428f9cdf2ab315469, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=394fd5a5be634ee1e3130785e8a24fa8b67ab4df, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=e83004fb34f55b170f2af35e977b5a2665190fbf, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=51cc43ecb93404ea84cda730e55115e1b1c5b5e4, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=d4563b3363b9be8d0efcfd7dfa2aad0ee07ed04a, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=22f1259648fb76f9c5b965d9b08c0bd7bfb016b0, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=10c5b1c710b417bd952b29746294261acc6e55c5, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=b1433308e232f1506c780da1d033f99c043dc6d5, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=f395eba84dac1fc54852d4546cb27eb659fd93ca, strippeddirectoryELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=0a2383190e21c034fda44c8983b62f6a15724f3a, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=140811a7db14ab37d82cdea081c47942fa89c188, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=09b8c0552c3f8f52be920f28bcab8ea127dc448c, stripped!JArz,x%9dCiC]ksW3Gi+Ik   - = S r   E  ) 3 7 A f !)B5E1F2L^+ ;I+&4- &  =(<."< H"$(400~  %"P+P*RRRRR?RRRRRRRRRRRRRR~RRRRRRR>RRRRRP4P3R5R;RRR?RRRRRRRRRR3RyRRRARRR~R4R2RRRR@RRR>RRxRRR:RRRP6P5RRRRR RR}R?RR5RRyRR7RRRR(R$RRRRRRRRwRARRLRRRR3R~R4R2RRRxRR#RRRR'RRvRRKR@R6RRRR|RR>RRRRRRP_P^RRR}RRRRRRRR~RR|RRRRPbPaRRRRRRRRRR~RRRRRRPiPhRRRRRRRRRRRRRR~RRRRRRPlPmPmPnPnPoPoPpPpPqPqPrPrPsPsPtPtPuPuPvPvPwPwPxPxPyPyPzPzP{P{P|P|P}P}P~PkR?RRRRRRRRRRRR>RRRPPRRRR{RR=RCRERgR?RRHRRiRRRR}RRRsRR(RRR$RRRRkRR7RRRR~RhRRRRRRrRR6RRRR'RfRRRR#RRRBRRPPR?RCRRRRRRRRReRR1RVRRRJRZR(RRRRTR~RRdR0RRRRURRRRR'RR>RRSR-RRIRBRYRRPPRRRRRRPPRRRR?RRRRRRRCRRRRRRRR>RRRRBRRPPPPPPPPPPPPPPPPPRRRRRRRR?RRRRRRRRyR(RRRRR1RRRRRRRRRRR'RRR~R0RRRRRRxR>RRRRRRRRRPPR;RRRRRR?RRRRRRRCRR>RRRRRRRRR:RBRRRPPR,R?RJRVRRRR(RRRRRRRR1RZRRRRRTRReR~RRdRRRURRRRRRR'R0RR>R+RSRRIRYRRRPPPPPPPPPPPPPPPPPPPPPPPPPRRRsRR7R}RgRRRRRR?RRRR$RHRRRRRRRRkR~RjRfRRrRRRRRGR#R6RRRR|RRR>RRRRRRPPRRR;RRRRPRRRRRoRRRNRRRRRRRRRRR1RRRRRRRRRRRRRmRR?RRRRRRRRRRRRR~RRnRRR0RRRRRRRORRlRMRRRRRRRRRRR>RRRXRRRRRWR:RRRPPPPPPPRRRR?RRRRRRRRRR>RRRRRXRWRRRRPPRRRRRRRRRRRRRPPPPPPPPPPPPPRR;RR:RRPPRRR?RRRRRR>RRRPPRRmRoRRRR?RRRlRnRR>RRRRRPPRmRoRRRR{RRR?R3RRRRRRRRRRRR~RnRRzRRRRR2RRR>RRRlRRRRRPPR?RRRRRRRRRRRRR*RJRR~RR)RRR>RRRRRRIRRP PRRRRR}R?RRRRRRTRwRRkRRVRARRHRRRRRR RR~RRjRvRRRRRUR RRRRRGR@RR|RRR>RRXRRSR-RRWRRP P RRR?RRRRRRR>RRRRP P RRRiRRRRR?RRRRgRRARRR(RRHRR RR/RRRuRRRRRRRRRRR~RhRR.R'RfRRRRRRRRRRR@RRRRRRGRR>RRRtRRRRRRRPPRRR/RRRRR?RVRRuRRRRRRJRRTRRCR~R.RRURRRRtRRR>RRSRQR-RRRIRBRRPPRZRRRRRRRRRRRRwRRRRRRRRvRRRRR~RRRRRRRYRRRPPRRRZRRRRRRRRRR~RRRRRRRRYRRPPRZRwRRRRRRRRR"RRRR RRRRRRARRRRRRR RR!RR@RRRRRRRvRRRRRRRRYRRRPPRRRRRRRRRRwRRR~RRvRRRRRRRRRPPRARPRRRR?RRRRRRDRCRRRRRRRRRRRR~RRRR@RRORRRR>RRRRRRBRRPPRRR}RRARRRRRRR7RRRRR@R6RR~RRRRRRR|RRRPPRRRRRRRR?RRCRRRRyR1RRRR~RRR0RRxRRRRRR>RRRRBRRPPR?RRRRRRRRRRwRRRRvRR~RR>RRRRRP!P RR1RRRRRRR0RRRP#P"RRRRRRP%P$RRRRR?RRRRRRRRRRRRRR>RRRRRP'P&RRRRRRRRRRRRyRRRRRRxRRR~RRRRRP)P(RRRRRR?RRRRRRRRRRRRRRRRR>RRRRRRRP.P-RRRRR3RRAR@R2RR~RRRP0P/RRyRRRRR}R3RRR~R2R|RxRRRRRP2P1R{RRRRRRR3RzR~R2RRRRRP9P8RRRRRRP;P:RRRRP=PRRVRRRRRRR?RR/RRRRCRRRRRJR(RRRRRRRyRRRRRRRRRxRRRRRRR'R~R.RURRR>RR-RRRIRBRRRPAP@RRRRRRkRRRRRRRRRRRRHRRRRRRR~RRRRjRRRGRRRRRRPCPBRRwRRRRRR?R RRRRRRRJRRR"RVRRRRRARRTRR~RvRRRUR RRRR@RRRRRRRRRR>R!RXRRSR-RRRIRRPEPDRRRRRRRRRRR*RARRRR@R)RRRRRRRRRRRRPGPFRRRRRRRRRRRRPIPHRRRRPKPJRRRRRRRRJRRTRRRRRRSRQR-RRIRRPMPLRRwRR?RRRRRRRRRRRR_RcR^RaR[R`RZRRRRyR~RRRRxRRRR>RRRvRRRRYRRPOPNRRRRRRRRR7RR6RRRRRRRPQPPR?R$RRRR}RRRRRsRRR(RRRRRrRR'RRRRR|RR>R#RRRPSPRRVRCRRR?RRRRRRRR(RARRRRRRRR$RRHRRRRRRRR~RRRGRUR#RRR@RR'RRRRRRR>RRRR-RRRBRRPUPTR?RRRqRRPRRRRRRRRRRRR>RpRRRRRORRRRRRPWPVRRRRPYPXRRRRRRCRRRRRRRRBRRP[PZRPRRORP]P\RRRRR}RRHR/R1RR?RRRRRRRR(RRRRRRRkRRRARR$R3RRRyR7RR~R2RjR0RRRGRxRRRR'RRRR|R@R6RRR#RRR>RRR.RRRRRRPePdRRRRR}RRRRwRRRRRRRR~RR|RvRRRRRRRRPgPfRRuRRRRRRRyR}RwRRRRRRRRRR~R|RvRtRRxRRRRRRPPRRHRR?RRRRRRVRTRURRRGRR>RRRSR-RRPPRRNRRRRRRRMRRRRRRRPPRRRRRR?RRRRRRRyRRRxRRRRR~RR>RRRRRPPRRRRyRRR&RRRRRR7R}RRRR%RR6RxRR~RRRRRRR|RRRRPPR9RRReRRRR?RRR}RRRRRZRRR7RRdRR8R6RR~RRRR>RRR|RRRYRRPPRRRRPPRRRRRRRRRRRRRRRRRRRPPRRRRRRR;RRRRR:RRRRPPRRRRR;RRRRRR:RRRPPRRR?RRRRRRRRRR~RRRR>RRRPPRRNRRPRRwR?RRRRRRRRRRRMRvRRRORR>RRRRRPPRRRR?RR;RRRRRRRR>RRRR:RRPPRRRRR?RRRRRRRRRRR\R]RbR[RZRRRRRRR=RyRRRRRRRYRRRPPRRRR?RRVRRRRRRTR1RR(RRRR}RRRRRR~R0RRRURRRR'RRRRR>RR|RRRSR-RRPPRRRRRRRRRRRRRRPPRRRRPPRPRRRRRRRRRRRRORRRRPPRRRRRR?RCRRRRRR(RRRRRwR$RRARRRR~RRvRRRRR#RRR@RRR'RR>RRRBRRRPPRR(R?RoRgR/RRRRRRRsRHRR&RRRRRVRRFRCRRRRRRRRPRR}RRRRRRRRRRRR RARRkRR7RRRRRRRmR$RRRRRRyR{R1RR~RnR%RjRR0RRRxRURRlRRRRRRRRRORrRRRRR@R6RRGR#R'RRR|R>RRRRRzRRR.RfRR-RRRR RRBRRRPPRRPPRRRRRRRRRRRRRRRRRRRRRRXRRPPRRPPRRPRRORRPPRRRRRRPPRRRRRRRRRRRRPPRRRRPPRRRRR?RRRRRRsRR3RRRRrRRRRR2RRRR>RRRRPPRRRRR~RRRPPRRPPRRRRRRRRR(RRRRRR?RRRRRRRRRRRRRRR'RRRRRRR>RRRRRXRWRRRR?RRRRRRRRRRRRRRRR>RRRRRRRRRRRRRRRR?RRRRRRRR1RRR0RRRRRRRR>RRRRRRR+0o".{rFD2 kAIOl{I_ R6 }} +Cyuz%5W=FOZF۝ <+Tj>>hcn91wMzkK]E5pǧ-=)/(bOe.*u\#ҋ5ҧo}Q"j~=TI&Pn'7t;ZF(B ;6U\L\Q캼#ڻ16 չL6‚2S@Zi//;Y*&[Xop-#`#sznniq:dY;$Fqa92!RWqfn,ͧ1KX?5 Ӓ6G:]vJKJ|;Bdzr٘ZaV13$ δUvo% 7:m+Q2otA!٥gs*Z[Yeru燗 rʲ1E[o<ܤĺِ̓H~YDrX1GWUw7X9= ԐԁǏYqk'^Ҭk bs=5Q}4Jg%6KDXY괓ټGj1oċo< 0 Fk*ktZV~g $?CiD@ޓ8YU\nAb!m@Id0](# !IEAX wTUL4IHތI= x|]gDi 8S"NQrfY1ܨDA|ԡNȧ(㞑TOa?R0W'PY\z6w{cb2Zxu,5q;]uFu""vl$Uw=МWS ?204U=l=#oh6 .7 ԫi92(2H׸9q@֧F<Ώ}#̩p'y+`Ibg\U8$'wɀ 49p_e0v,# Awidk3Sʍbv6Lq9kKQau-@;y =/WxWi`yP s|7i#nt儵c7NjVXh: ;eW_0hI3T'ضJ̔o|Ss]o ЋIB+y=Ө|;1Fd'݅O:iiVw(~~K,Aݷ< CR;H`'FvZ'3pdzaM44$I}D);3+CJU6jpgt Jy'<dBi3>jSjO :d/mB.o%Ù 2s>' c3*)ԁm~ }J-p~6:,.|YC1['!Nx!7 ^}Ķ+Oi:a=6؛:)^I5a bZaqe7H3茞hj\MTg{؆o !Q߳K}8fO5qe94IBϓt0uJ]Rk%tк3nuxf-"X?uGmP}"ʥ5*7/$!K^9^]1Hmm? sntV>>WAV|YGT+Y#J9c["}u/-]Ɛ<5>6P@./~pct1$Y8i^qIRM*a(^hT DIgN|dC4S-1x(-Z$>M~ pUAڐ|8Rug+HKkR-p^Qr=Ma9).c5`{}WVy ^TI~zmr,l(JtRFMWy h#C:$,0`š}GyiU:p/<;$6~ފS"2bWvm EY"W|8ѯ4J唷fܦVv8ԍE)QmLJDhq>\aO6C-OxCfrx3Ekk쑁aj4b>l1iMSSۅ'P?1iD *O{uOق|~d.b*N~ݴx;żdi'):]D Ӣ1wLϵqcW䔉>@JQN_`sLF;J5h3(& eSk@V^lU՞Y_lSM?F}h?lPD(m 4)Txyr2?^_2cqOgkJx{+ Ɲ M2~&P&[˴ NmMf̉mxY'jgDxBjO)qE7UL B!'ᡕrǀO}o ]0;E\Y+)(l 5t$x]"{Sqj ^GUvsJmC}׹M`w\ IL5 E^.`J.btAT$j'j>, ,seN_]ukt۪Xo|[Vy4aI/_'M9fvWJ~E'H z(^#v8P-ހ;^Yk>oŋt#uiz&QAqO.[2Ժ3;}K5Sn*jn;%3C vȹI0czt?#Ccv@MBkK$0;+#'MC>n2)Ndn? ԥ_*&;GnBbTe*3 Z#7Q"Øդ!|nPy±0+ mT͢iö4:挧i4O_;GC*iHB4s )ɓl槃JС-PMxI5XYLu~a ,gu3gVw) E=B<>h<"繐NƮiguKB CXqRf8&2'B}g̋LPeѠ@3jp?RT{_0܀27@S3&ZؔŊ;mi cW z_+/] 'pCI0;;Lc0y <6l,) a=B-*{IL+_>_h8X탗y5x- rѠYv'|U컆3 ^ʜ t)2"HX)4843mك+#DZ'yoU{:;au(K66!|[NdδD|m]Q:U Jr[n d2r/G(Ɋ;F;"Hs10 &Э UMSǤNөwl# ܜNӆ4}wbg4h kWqSM+[w_TE6%5TgT.6ju8RFXk:x$u1=T3JTodO= >^+ ݻ,=4T"X薡4K*_=z6h,!)a:ifm8;iυ"L(mb¸eH"J.`!\ƥdp8s2*vlgM0$ $da'~X׎eN *fZ׎rqw P o͗ݒQ$b|ͻ1_y3r7Pk1aCs7J[܋ASy@1?" Js`f>v,TV@l** 2V{̡'T`TVr. IS B2O6(VaCE% v'5e fnv:֑U|+++0yU@VxZ21nJ~nTGPYdGMQ/ 0==V^4c-&lzq37LrYʍN\0ꀼDqH`WbEb&"Jw/S[Lc>޹ vc¢{*{mcq2YC8pĐ.F6E-{&,Ӊ-aaרN BIULwI 9!ChI$D .z^|[= .9XPȦ)>kܲq@L] 1,.4n>|$Bs[QfZ4 i*^bV=L~ЭOeA 2]u+ʮnAٵv8iDwIi=С c] EM5u10AB4p]c73-FNs#qT_Bb)pElXևTڢ`Nɿ_y rp׏S4#,$ LJB8 Hg6Wο*_q܅Ic):b~_x+Y,7dTUMU&dcn_v_48~'G c?VFBe`r=0)Em'g6pn1@ D W*|EobMФR+0ҹ {l;pc֗XdZĉOHZD\h!֔8h|gȵ]Ї/Qr.D~okZX Tx¨6ֻqR#)x-܅ll= ۀ%purJyWWAƷS P YZ+n" %nvI NYШI8 őh~D2c _: Pc l}zȸ\fbEW|~=)p0ӴECV#C,ڦ#S{[}`]19ttcz\Zs8۵K{BPx8?719 c* ZX ]0iM@+UƝEl~?H5*kvKЎmX|b8!!Q{iX䫋 (&a+(μ>c±e\S 릣p d=ѼaLO 宱ixZXyL'r}J+yҋIE0[} Q r5nf5~nAq9* B>g+u,xC܊;ׅ6/VsؑVVj002ոEٺ s5+}j?,M S˴͈Cxty #PVqN/zd#j9Th mY;n 2vBwJqÃ.ݛ(F OgE=Z(6-&ni :w6*hK6]ycE"rP5FG,!E#N}[cm>!U9@-d? HǔbXg]}L#thrHQ0UׄhZojīSr!!C1ڗL6 j#Et- ޻Ikulni˷d! /Q#kQӪ,*2~Y "QMGR礗~+68 'Dcu9 2Yߠ@4+Dr)׺zmf9Px6iΝ"8&o>4r1,8X|^BBFci}W&R=5/Xg%y/- c:ig/#uț啍[[7q]ChRfU?WFJ+Bǟ`B3+QD:?MvyW& `(_U5%Hh]*av\a)'pQhHyON u66s~_tp$v† rd9'n r5qy#{BM$v֜ ډ_"nwT ?iKRf:hiZaMANʘW8;EE#,  e;qwfˎE;97Ҙ{K6ac#񅦓%`عe6]ۃ9ɬ<'\ai]b@mXĿϛ;?n7 U1׎ZBZB&Z7S6|wsȖ+QwzxBEM/JY@'ei(5#68ThV8_STIQ5qcHY>[v~wY;h}{csL:~Tޔ k~-$9p0PdhT n UE0%5;JPy};bX*0fNگ;+.%R66iCs3M^s,6Pm0CZİpBIbE|+%^et2<\kF}Ŋ񞣯P6ڝ 9<6 %WȚWΛ3bqpD* Ym֦+"ON?-) )]n83T*=aOj?)Kb6r x/wTXM~g{rR'MOЦ@hwY,dmzeA;=p}m/,E.c}ڱ6]X,a:Ŝ9S ,~,<.BMš1A ouWDl2.|6*}xX&sMSÇ(fݻJRTSice3<eVͧ=]Hw8s!V,RT;!/$(׹ib ;l KXC9h`+CX-(ռ_t%yִl9L&rii_fpd>dQ HdZ_HRt0$wwFP܆Dgg~&@vG;͍:cX m}_g ::98se?ㄝ_@^Hz̶}\V$smrG8c IcB"n%g8}SlnĠ|&PJ\ҏ`; 4Cr)aq8;2EC~Zo^ I=}mxNy|/zb6|$݆Q9cMbf! zk|Pq+-W ?s>)iF{h`&9f*v~5Ig?udL3 <:8 ޤ˝/o 8eNB&ziqEHZv=wR,Bl۔^c #\<+Wp,< TY^bChi51b{ZW#@brR>o> Iq*wh{TJ=[k jkֹ+2LWJYFrzNB+P/:6ɉZ%= /g'g5J8gT/aFSce ʉ-QTv~eAcۦfpǬ$^mdq営\+>`6I-}0' ld]rNVV{韷q[רto?k?M7̋B bFsz2ګ9V4X&92y S0/TQh@?@K6<ݾ!XrM}Ew 3->\Hf+oҖ@ ?~c3?ӰnaRr}1znt1.?}T*QۺXg}3. )X$@4 X@MbrqIU]ZMWqW+d\Z .Qtev{m'p{X>rre WXTz9}>+~-5s#2)ĪAYIu[vǚӘc^i R++j sʛ Ypޠ̍ҠjuG 4ĴI;͢1W:ΰ3\FРK +:V|^:dOs>n@敱Ȍ}ݺhE3W"j@oBUAd3,g[OwcUA^fEI^#>} {ji #[Q$sį^H '나b9h.L:s shT)T""ȗU6w|L*v ou뻉bv+;i%jܩpNfv+/{+ QO= Zbw4 2z0U< @S|\B`0vT_94r(b7+eW^ҲWnli}G+ors6"AAoTLɿu /#{iqJJltNGToRX$EXN}$PQ` E#UkIEPRԔ{^_75োYy@V=ͼ PpB[&N)FpU0MY$xV"+,%B ;Y FʥUVNn߬ -G~!\"myvIoFz^ wwR6]G+r:*P–'TDKs*ԑ2p/t'7G7` aZbzhoaeW$BY)ӃRy'i*Cj&՜#oEt4]7t_,)j~C2/WiZV&ePЖO9m x:P4 1m鹾})kg}!r:h3>~5x{ 0bB34`[@8`&θSo"uùx=C$K!ƟcW{TkLŖ˥Y~jX^W1V'bcfR#S7WrcU,+D)҈8\/[F:&%E* J ƍ+J.qrBT{-q*J䔕0>S<"wC"E!<2]DWgI 9lDyP1\*1NykO䜎rȿ p*?Q S{w޴(weJj 'eKWr4'/ݴZIX&9.$+Y('05YXIO Uzw6nZJZ{y|5f ȒDL\vd 3۲?0>6n(r?_6`Wxjtj -idn lܼxh67 A}a\[a/%-.v{dr_t mW}Ն_kS% ێLjJ€ Z,lɜ>kJ)!}^.\_!v*7\Be޾TY ]eW}U:38Cz#z $$.o p,?̸ΛJ=*CWqDÅDr$%xd2A+h[az әL!Tx\mD]T>#HPh,I=Gy-xBgkk\:{:q%DIcfQY$vTFRm Oc@wG7"X2dUB\P34XROձĔP1Wbˢ&Jʼ+> =ěyӎfL /ӗ; 㜒>R#(O4|AR?jj<ƑlEC<*')w+%* +W8C9ɇM:0Dgn 3S`ZGq W>sh69xBMg&\Lݍ{#gY9֑GS'r11s +f-'b ju96OaYGʍƵT  L1/m!4!R<$XRxQ%L'6 UqQ;U\K />)DעBNsV9I DlpOUf4S۷,snjvGU _qnܦl1Pl EGõŚ$%ߣ^nXPAwRYӴR+yS5A^ 0gA%@$|a U;bpP7a|ot&"gJP`R3s2ZKJg( S1Ѯ ^B2:;A)jr@#b[-ΟeV1K]b4u<<Ba}mFۂ~ ?^ְ҉p<;FvvhԘPu4kFߣ첉i;9+\˹U-6/rS. ;uÇDt s&6S<ٺFg@L9_F_7(򵘎o4t/| GfئLȻ<(b\HR2"Z@,79;1SV/cTm~P3`` bC[3&nqΗ~#=Hv}4?j(j<p7+՘P0Ŝ{XdԕG|N!ѽ\Y3;Neo81}R>OLE43q0~_^Ȓ5!L@|_}ۯ2&_ېnlo5Ptn022!K+zajcTkH&{OЋUh&O{I˴F6I..hܬkL*b6BotW/E7+AuZZ'w7hl 'X u `3"~*<8&ܢ1t3u7@Y%wE`NDZ6[<22;6gM5™ɜ.R&tEk47}(K\p( rjo4 # #O=ٿ4UoI `c/}fm $llgg$}[I cS1;Zm7ej:+- N`d:Ѩ}UҸ:IJL֮"{^D%KRbr"'NnrA*l$ ` +^‡v+bއ*w5m]+~Q86[e(7.ܽ_h \$3SL^r$u9uȾd̫]y%beEmLf3^5vЫC\Ax`{H':A1LW<Ώ5U--.&hieZ:&N!SYe8q|j?D T<(8W?[Ee|FlrW<~]0rDn *Urx:)l)g1i 69)TFB"[3U>p jcjaWхM`61@2"Kv-iK07?AG8ɤNZ#ġ_b5>\)aϸ QHOsFj J|"p҇pPz^! >&9@v3EyǬc+ u4(5T!+$ #]5*r;M{-ƜWZ"#6"K^}dRkMYgK-kJ&R;)ކv|zf3wMcrGZIYΆw$DLagk+] j0?Sς">{N؞ׯ"jbFNt"?&zB|m/>F $c![")+-1Y<@\RNlkL:tƉUɮ=ER;CF_pm2;j{ttъ&8X9ÞX=긭z{P k5yA+ڜ,^7+3! 2R,[mȹ~u$;SEB˖ 3M 3g /HZY~:78 _S K ֛_vQ%N%٣i/0\f.W+SSxͦ<|<< vbV4g8 )IdG% /+GbRC 7f/]8$'g uBmUPl\F=iB]Hţ˯vzV#e}L!,`J,\TPpaŜWK璢nfrQ" qQ3?k;/ZvpM }$1IQyPy(Dn?iI³~M)^i PO_Btqp IÚKƙxkNb2^놅$x.!*|jzY哮@TerA%rgEp õ :HķN=[7ҶY@hGsFVE븡|S䷇Kn['ףg_joMAkYR۪X##[ M _sȫUĞ$`i,"NA0g9кʘ<4;l%b`1[􎕅$QB:졌ȳ~hF`3.u\G>4iU"*f1w[R26lXznNJ-p$vЋK}Zc[n7 !3nE 5Tz8DAQdi}W;P4J jK,kD*}CbU~~d 1)ܾ\ףԌHE?'U;M;D 6 ru̕vG |JvWQluަ!p+R!6 Ū_tdQP\KQu%RRU43gk*Th`J`~7?` %%9_uHVlBm?VS"J\FduKWy G uzMxMgȺ_CWqLZ\=I\Βj༶c!m'(!?BUW|QQ5Lc?xiӃZO$+wҰ3cEۛ,'@qjZuրՋ >~4˂-SF)6}ZDw :sx Ԝ/uO2%JM$hyq>䵞q:#IeMVw.R2V].Iy;?#hzֲ|BJ!Jq Mhr†rTX|ʠuE4´ (L9xZqo(Ç, t[K-# U7$3-RGP:9Yc8Pz`y,+lUyj(:1}jWT?@l#’@ypCn/|>첷.f3&K}.P5`^XW\CؓI5^#8qP OXhWRJZol0s/ Y;) vZjZ )zp݊^A+o²j-D@ B@rCmtw#3񿯂g1MDBu2x9! 9c"1[kd$'iJ6]s>M ])q?-I+uH 6ßny|5eo&qE5f1}_))h1f xD<ѷPѵ> Q{uK 0ՕcDcd-O)n@^ QZuQVxd6Y:aU^[,}OZPA? 5٫[S )ϰizS<^R6l !CyO"S:@cPӾd㶤:e+|Hjqp4gZ_V?pd?ߛ¦c+&;#oG젧\kh cڽsT z"%Rzb#)!V^vgX.vX> g[ _Sd%Qo<$-z3mrwmʣڭ2Ц Uj?GzXFHyQ <9yd=L9" .4eb w(Im%;: %;wk+|I,7*S\fY S Z-;?V kn%sE4w1CobDU#qՕ%řZ[qJNv%7ʧo!R3&,K%O&ěHF[3| ץ?c}%NݦJ >j%Dc$7*آRAGF|SuUsHuCgIpsǼgaCc&x== lT)Mज़O*#z%Bk4| W7TFJVS󕈇n3T,81~uvPگĎk %B~C2nSMwsor)$n*Aai| ڊy9& `ORȗ IHު9 :~z.+>b>=xI]'d @Q!q ӌ!U5[*x'/8S=B;RGK:a6U 9DJo6⑖*WLY}33w/;PʩhmPf^=C䢑,ܗկIdzjn:^j6%od|$")ĩ- AxqA~pK `iaŘn>{wV}@v[]-I+yOp*GD_#c;nZ]xfP}ɸt$,NBDzP(Bf2{& Z1(Fl7!b(wn1+CA%eneAxnU |J~VyM:TG,P՚KY f{h'y#CpN1"sN;M9W_BpCgA?mMDU~ N `NsW $fV? m ǐI\mȟj 0̡H֭;L:[NwtOme:\S'!Sw@94o ( %Ua730Ky|!<dd5F@sԂʼ |Ԁ4T$ZeMT5},@bi &Zz A +c_=u XD%fGAsw ^R]r6?kl*vF6h-.Nvo͟B_H?nk%Ҹaz5i\;̏86h`mo4i",)Kz!8-&I'LvW2k|j ;hAD2䇈dUԤgyC+<҇iRBRBus-ݑ.*bANL-JQuZ@ 7&b` ٵ!bpp5 Š_ 0jƒO8HreX0VO.vbdbB`ep_"BTM [o3 1idܫ0܁FYEsNCI/r3XvoŁX6 lï,7_ԧ:3Nq@: ݕd2fT:Wp<;1`WE|@%q@xg,< >.4>xvxAZi^{q\v#@7|էE+~no̚i^nl$^}=k@pϕ !̧Uyw gt˨cy粹Mލ `ix?o}I]{8ܜDic瑂2(.}֦(OnN hŮy zNrB|rL@EaswæMzE$u:QNpØ!k֚Ҁ2(!'3$<ҳCU?~P6}%pK-N7q2eyPH{~>Rk>t)R/5x#]#o'wf$xxPسxLg7z)C3 :)ͲCEac]' Ž?DdZλl^P|[o޻C4fZR)gOTꢖlr3nT6Vy4ST׷gB@r;ͺgv]~ja0&JO.UwF6ځV`N w|ؾI] 0$7>oXt#rb|mbG F`YFK.UKzT/0$vd9RX7E ;'Dsr;.й߀d͘жl? ZM4_{qFkt:\]0wa} 9ՇdI r'MYmCMXmiMZSMΗTL{<9|!YRKwR雎vR<߉fũ+Ccx; / jAP70a}ј"~2ֳ;Nޏfܤb}1/S:>/k~K94lF+>ʶ7mEJkAe~Vԟ(\51st+A3HBE1D߹z`~p1r=CzwU%> %5Y,F9W*GB,&^ϡWqxKd/ /H7%$.0Ql; f:g_+_ upa8jLItzϑ ~w.hKǙyvH`MZ6} 4G_&y>PcQe&-pJN*(0vX K#wI |>Ѕ%'hŚO)a"L5-PrOI[Ţ7S&nZN*mS(;>@lsEoN5O>^jv< wN\YWMpY 芫wm&JUw6p piSCm}0҅ K73ptɮ/g3cNڑ.B0C)6W{ s|:>51i? ojH8e05QH'im:&CMrP,˴%CޛdFb0i+[inv&0!  ,o%T^rQV4[DdBoK|}MlS'0#r9]ؙ%ԒW͂< _N;'k2~bͩg͓flaSE^\>h\Ҏڏj ak#'Sls`9m}i)x=Ʋ>E&2?|vF~PBg+o5.hZ1৲kL/k##'˜,WkPVP T?o|M|wzf^^:THmY{4f<1y"*T<﹤GgwdelO %acJ*Iٵ%W%\ TR*6Im]di@أnmZ?v06>V-=)/+} ̅*0Io>xQ[Ʒ. "Z5[#!] L|:>@Rm56ɿv!2m׆BU| N7T ᢾD^ӽ>Q3D]^;lW@E&Ysˎϝ-I$<XD渤T` ;A 5!XJ+]'3310)u"'?xi:iwMSFѽnIFZKz'Zg~߽Ab$Wn ϾfPXVƘtg0I?430,?Q_LӤΗxfDafxeΉ3PNpdaBR>n̈Ԑ*ha!BYv9$JQ@`PPEi4kJ` yplpi&.["<J` Q,c,P:(8yDݢq0Ca4I|9ˆ}ғz32jh0IHY@#T09[.2@4wO="c7xZX`^6A:2`r1 J?ʶG SCP`6س{Q*J;=ԏ: fL6.^gs'TIN&Y/6 ܅k$v`jm?ˡ!E%=>.n!d: UWk3L.Hv*?T\4:w8kױ `| _2@^Nԥ\7)\{C$@S̗$nƣt =HG腍eIǑ&ܳ|_}mc"Q8FF6Y!])&-'ci N6F.d6Ol;G@ωn6r-XE#K,I_7h~=F@hw3QU >nL5tj _#4*: 3/νP4.[kW&[]i0IyH ^Z/ e씷j  No@]PM\RќXdu(WA/lSmsei}8;va(ǘ]-C7w)T^#==TdEC4F m=7F8"+B}|C).?1NfD?:^gZW\JFhv*Y1PbFd$:“x`K[?%`_g *\mҎ WP\޶/íyQ-XmT|z&exH4=0ݬ5Aa76qeO",Rp7Gik{Dń[Կ7VP4L֔4x׊=S_:U.Zijy ʃd%rbcYL͛{ΑOaq%B\kx4%]; 3[R#V8c_Z7I˛! _Itᦻr}#~kkv|4hUsfQ^HPےʀ~*ܲmw xx"S 1h㵳ΞiAu1#}CfL⃔&vt G!ָX^+@KNGrt|H<;>oՈ7E93 ҿg`Bx$gT^W23" F2AaSy ..|hPd(peC)Gce4GrO=-՜mwsS-R@޸%ZmLX\ w!ǎD?0:~\+6Ec˰\K=\V-(kGҔh;^p=/6kۺ}30?kU_A1w8XBZ CCj;YQM* !y.W_=␞y)H:5 Y<:x0 ӛ_7Ĝˡ%&c tT1Y x2#ڔ|яb> q'W Bwe7:c'v3\:+Ph@[rQ:M>|x#;hJ15/YNUF8CJw  .KƝ &|2 Q.ifpz&P9 Gϻ_rhꤒ*> ̝j 9̘3$?Ca1Q{%hevB?A _̽%a 6竐NN(z'7#?vt> AS7ISLzkƁI Qn-ښvAM  2xF)\&LL*z/5#?:uu'm7aXsܧ=b%^v~~ݙ>zbf(fEᐩ,}c6X@8.8FSXmۚV_f s8LpLpbdsJSh*1h3T;4\ F(%u ބ8#'mN_G{ReMHgc=Ew\XOzgEnĈtws`Fk{1AA94)s{Xzibͤ8T3 { D9@4$aU[*rSϢ,_4Tڈ\4&9{J<+lZGuhM]yi-JBM듺>::sDqxGL㕘N26 Fc"ItApFV ;Rn"/epJhK(]ձñoydIᩂegUZd !Z^嵻@UC/\A|}@NFA& Zb:].0eCw4{ }dNCgMϴ]d?:حWluM)cr#٢ !<[삒!A{uW) mDcI7E +;}֪޿nRȾU{yAC'k nqce@q y9{Ae=}A~£7" Ϛ˱Qu7o6q_Pl4Š!4鷣/nRh/캿lM Sbs*l_OF/kD,)}6bٯ`ȫ(gRA|d 7N)wP1?/UӽJk~eMڷ8ojU`=+ͮ-,-d;QW}z&,b5e)2ќM 7$v'qC#v踭8>ח:zUc%J*%AԺ,%80YѴi:p?\N9 ^Eky )U)&n9}uq T=qJ{ΟqtDEw sc3Qc# eQ JJ0ຠ|#UΡQtҶ(]L@aw턷-aMXbOS;3h A9 =ɔLWA'?I.'rPF PFX ;2Ii⌴1:suq+Yn-.I] u"Vے*_l2lr9+ ]FC@Aqo>eiDrm *cYarB _e'9!\k9ΝltN1:S5o2 rKpTZyRܲ%O%Dft٨h'E{AJ OM8G󘋑4^w6/x;iP8"c]Wu@-R(HDWٰf cmT(5!c݂oܕ8O/,S #nԾA10Jm11GhM9Z=QIW2+_rCk>ޛ4fwDzb([IK9"p4br;ϟ'ҡ˘>,8IC + ai1 'P%5\P}Z8.:n`4g_ q`Z-T"9?>I'IF.#eٮ)c0'G~2N; k -u{*F3:}E%=q8KP'mbEbq_- \h#y[?q`[ª Zζ('`;W25iE'q9;IFålmv9tIe_|i y$c(8YV)rcHF<FmA!]#:U l#VcBw6>i~v y&aG> sZcVE)qK)3;7„(I%s~0ϭgcNSLuך!Zgk,ϒ\~I1-0J=u䦨`) _էmŧy5=Y~8c3i3ƸfI&)Kf^-_0NTROI̷?g"['L*WJ%B!۟Cn?v@APӫ)1< flfo 4t]ȁʩxY>@xlO'Ddϡ)623c z3tY3M[Re*ǔ+}z0%z!]"HoHy3zBۡGd-b+[$tUe3ѿɺr+q^QB͈cޑ 'Fŝ7tY})߮~ |8w<`&,Rg۞h0C/@ʼYpm,\+]h4\_ 9/wtݐ2hL˪.!xI?W3lYGg㪋C0zysR( 02m9wjg_>2"UC3x/4=8oʒ!sGt)rC i*]Т;5z;A=@}ѫy{7^4M-yC<}tg7\XNwX40I l7@bdwr,CQ3 %o 1_"$Κ} L%RJyŒpskuM1L]I }kAo+$Ά/LB("yBs0yP %*iW3{m8:*S,\%oK7j ]+b~W &Q8;tm:c&i.v9u8_`pqꍎO}5$pw G/# lhSP)]^Q.ZL]\6'!:c?un`-NykRo'giu,6ݜea $[^h]>b+M* C*Pz*4n/e`(hJYPb9 kşVUtc!OVK]sFMpLm8; >?`. uuUV :])(+:L0;Z69Ϣ57=!f0&\*ћa60,دD\ yBW7,ãڞu/ U#> B%5iXT@/|0fk8IJVoṾ);1U F8ng_2-&*R]V硊F,iS.샍:'-_bAEiji:4b_->z;](. G1& +ٍNo[jHqF-b.x̔#D@Z8ՓdqCb@ M D/HL5\PkMI%b戮,= `t_el A:`"ϑ]KA^ET%]gf槶;ਡ9xA6Qy'SY +7 :mA|SUfÚ HFz2G'chJ*"(]l [N%urQ 2qdGbQqHB~)i`{{YCRx[J% `sǣnޛ!Em4 :c^]#d4=u!?A"GBbª&JzV<XXB!(W6w3a֓D!%CqEXt89ͭHݾ?XIJՠ#u.AF?a_v'}Oo}cUH,8Xc"LMHCuk)'&}KQs+"v;+M)MVa+qgaYx8U\uc!(c*?KK~ybuѩ^7ΥJ6"bC^o!F6HINeNKȬTQ,;3Ȅǽ {XmƧd*K*QVػ9Y#?!В$k)'aGy.(ќ糆ZHg,QJWeG_j~}+IQrA#kߨц7~}¸dU iR4f<} [[yz\ (#JAP$I&+1sV8ۿ1PmJ.GC;CyL a:t1.Ē 1"}eo¸+b3cJyQ 2~X_Kt%Hs^fVQυKni'JaEWg C oWhRLI v2~N㘥 U`Q1GtAZpEXž@vK/P47l&094Za C7eNֳ &..fCw(̓8=2ZE4`;ERxw &q' wgNӮ)޸! MVH(߃Ci"Uzu9ɊuASZ˄5@x)LpkqP83y:vNlTn?#pEy`x[7ޙ<9 aa•R+VA!˄Z"ְlk{bUӳSZb^m)Xm4U8;+ƍ!mF.au;1ŨctjrY83ET>z\UpM﬐E^^~Y,2*( NA1]cm#"ǣ`C3T 8 J0?,oaC]zqǻ݃>ד]ne4Y[ʐшq KRN`akw \Yf;s@ djC{Uؐ卛uI6먡G/*?,krdMb!jwU-S>#Xn-/޳Z w  n\N:W'QFu§J̠QP\Ȯh5um&'+(_|- ¦ P#F>xhJ?B#RXAxVpv/TF:Hx#/kx˽X4vmjO_3wyj@8Uq+A_gXCHyN䧻+T 5{>0so+UPEʠp)N5lrg$?sz?_~!P8J!\{ b[$jӗK[@7PWh tk׎Rq"2fSKM/a\? I%Bsm,)2mЙskmq5vmXGEGZ>^3>eʬ,'5Mڭk | p$I'CǏf>ljzIgvhC=MX+ T(:Xӟ ;9Q')=o+4> qSE  Uysh^%6?(<^Go1Kw^CX3jUtµ~x$V|EL(l*uBʐ 2z%I^!FOV8Ej} {(hu, U3>b]GrfڮhcJ&ESobn6Un?jƵ_?\KM(Ҍ'AUi_l_%(] HGΉHf&$SW1iQ+> NzqOcaNŃQik4al)A1cV;Xh’0h/ :!R̈́eunhQ9>>+94"{3!ɮNP %n-^qB KdgDo7JvPً٦`}(@2U`MjGRˆc/a5GUkA#-c{i`O1"#>!%ލ"j]!ށ]+(ۓLu$,ӣHB; 5|剺^Qw(n?xܱ]9*d+n ==|u5g%[px M~BޓijMJcYm0ƻvx6ؔp z9򌷚ӏ]5eyNl/%)m1V|=OSjs\Ek(}D_r1x[/X.Q! 96/ċn{tx&}%o= 7ZBd؆f䱦4ۄ d%Qݧr4{0F KNr |R`~38j`gC I &i*)T+*l{`M]Pa2I;tVc&-PYW"$A4J{4Y܅ T"el -Rium I/}F:!GQ St,KҵUpjSb)mkF8+ jج?A.R2*9~7@8:(P ׺,L]1fQʪz|V^/`'WaѡZUN:=>G&} w93 c3/@)&<svǽE qH߮N~;*Y5[1ڔŁ0@/qW*8#N_L^ fNb VOZ[`= bSn!#TIX&zmEvҮ͞1|1]OYcWsD4:d0/" Ҭ;784kl-IC(t2@7$K-WCZ@zb%4M30G<tަ딞rI%KϛNl䬓m|M$pM_Dc#YōqQn}Ə3Ag5.ȹaq⾁im",p؝;[A(Ap|7YӦ\_4E=v7M#Oe9?bl AʷMh+ s)4F+0DĽx->lu!?a:Pu Gr8Ҋ0i7өNe"h{ YBT ꧆2VA=)0ne qr(c5S0@&?Y/ ҁVLJs޷r}0فEH 5n_tp.xfB uxCz+z@)\La$f.Q>,lRO8D$Uԃ0 <\{tK_Re C݄-<b8)qU_ݎ33A0ʳdB-J;>rv|gH3{Bz"Rd}%>)N܄8†r8jxĥ lH>DzD13ӊB"zz{367NH'5ID )"krk+52M걜S>]ֱcH*mOfأ)Pk:el̬M|B =+&{k|ƶ3q2"%Ad RRC#nm)SXYfxcd=-$ˏpR>#QzhܕQffPRR2_ֻBdeFK>:?{ƚ|0zU8S% <0S+%RCc4\C(7W!mԘYA47 峩?RrQ'!l98Mڂzl,+{RJT`@rb;Z @,MXD8Z9`}}/'<}V}O'.LmġWlFde_%Qb&ܧ\*ieik!>ҭUpy۟hAzSMٔH1@Qe؝8F4{+ߜmֽ'uГ댞偾|M&mЕ+-d8+j&s h;mԭLz:BL~7-ܧ҇g5__.4v`*ܷe~/$/ W]t$@ O"ы BCغ-)UVcjT(r`0s‘[tQmjWˑ0 0&<CiȥԨ/aBDI{JBg(H~@9 7fYQ@[=O=o:`Wb!JZxPN䔤zɤ wGo$̶>H=U_Kќ{X&.T4M*j)&$ΧZ?쳛WR _QwW;dsH N~;%Isi+v\|T Jd^SA%39y9X>OB]XGwtaALy(GF"i<&lW˕9;)HKMH`[s(Li9y[9_謾IMNZk]Ai+HG)7 @՗ TҊx<`K슭n#)@7W` R_|6 :?uu]njkWnZTmQ|uu&ˀD䤁Gn)UDI^<0c÷Iʿ/1jE]#WA Xc; -M֮?(ؗI ڙrGpfSz5ftCTԊEЌgoj~K[ighn6ȝFcƄ;&"Y?M9lcv0qt"#ڣP^e*AUإ{}Hyǫgl?W +o%fCQHbj&HfδaWBx`4R'BWH[‘9[WkT3VȝpBX'ʢXҞ#yRk,{hTڕl^-dZ%Ș47 %@{oi'K<'Ĥ xH1$=U AeԹ]" qQ%rԣjd*s@p.#ڗXW 0W{t(&b9-A7ܬ\(Q^$#FaJ3#wI8' - |"IR2F5' vr.nXc*>]'"⃨󴨶񲹸ҕ7 xRMҰN('4km]1׸U>OeŻĄjKZny<˅m<$'1S,F;%#2Qd>` X[zؕJzs!0VuJ?5ˏmd‘A-L/*I#yܴy$ Ur^ET$FqwvϸF(زQrC8Tf;Y {qP-y^x9_fوZ+Iز_:>2 BGƯQ/'T=_`X)-U\4(Z2@XP4ԝStNe?$Gg3ے|dgYQYmXT{&23öR,ftPֶ}dC2@V (n ~A8B[FNgF ?85\lugإn'nШtK Ŷ9˜伣lpgHQ4-}B;Gr3<DzT^eEu@mȬpRi$Ad vIAi+Әˀ7>W۸ ;GBA-1:N4+RTBBq&0.u- ϣ* #mNS A"h{_n+{q*ܝ({7p7H CPϼx4<˛ t.0X"82Bd]s;u88$,iI@!G%_L'e3Be&8XR)17bX#R>X*nHH1yr:C=tqh9}3N= GCt{tֲ;'3x\csϪ,Q\ҭ{ګt+mEl3T=H4iФpӺAt:S - ]T:DUKnť-˃e`HOjIK,!nn(AûߜJrJC>1~FBFaAVt_[VGsY[ x`!QF(JI\mӘ,O&1"ni=WҺCNu+WR[t6>_^#iMgrH7~/ǗT ŴĔj$h{-}γdA|y'l>oY^. s/6Y;%{V\Fw"F<y%@УL!} H{=Qe]',Hbl m4&sJxEU ŸO7Q*Kw@b0U Zz2t̅'MclN;WY|v[|e(;m!mmK<tSn4 8 Ӊ3Bg+Xs1_3X笹hrf񊊰+x3 , 'dQ +ɘE2&`:851{ |7 f%^V;5TX}(2*MUok.OST+c`N Or(?FHZ`5ܱfJX3m޵^KWh wi>eϻQ듈dK q::Ƌ\'ru-"]FS a뽩{1ݎWIFRVZ kB85h)pO ڪ@lJtrc*#=եNd&XpQ/Sڣ۝?Ӛj#7XࡷκGBHl[3|Cs7.tp̩͋Kރ6U^6fkHe*s%X~gfPr*Czž*,p_'d!m_ZBMdв dэj1&eMFz mv_ćP\}V&4՝FE>?7!ٹDv=PXIoAO .Z}b0 |8B[R/L4={ V:"mu?jM[붚-j(a.j1?{(DD22'`XroT~ŁUuR7Wn jiҎ*$4TZtQ'&gy+Q'ת2a ;-b\Hׇyn_0SR u8쓑n 9u]@||c= 0j^VkR1pLbXi_8yTF7뤤iQ\Ԓoo @$o۲)<~$!m4J=-xJ{TZAg""{R?- L Oy#SeazokF,} {& gQ6z(G?׬!< #6cHRս_];S!gF5ˤ }sHx^bt+2 򯽻5F&I7I譗p C?j>0|+j9->:sz†Ph4ׅO!ﴑԃK&AV|zP)0>udw$gw u $Y9ŏMpOPDB¯ҋG<YWLes8EyadL) % 9k΀] 8xdV*Wȼ" yCE}2[AaaHCJil6kq0k& O 'o)c={1.j2첁L/JqsN ,|߮GoľwW ؇CZp;՚SnݟJf4 NY,f}t\~9VG5}Řf%@d'@dҤCO2_F+\"3Q;>VQ[ذϦU0&}}p^ey{l` 8Hq̲ 7aSD'KD_9lS^8umqVQ.jgQ<r%Z=-W ) cpcci]tKqTJ᪨0DFep*7}9<7Fz&htdp!Mn­Sv޶qLƄMgg<9")%R.toah1p9Z܆/NP {XOB0i-QCǝq)%<ܢ= fJ^44Ԏ#0k,k` 29Kc;/VpCV:(牿&t֡I"cG0ٓ HSuE?,偺j$gT72E4 C1}紷kp%kiDÁCT +ZUwA4yԓ  z9zaPvlXCpD)"mDT,:Ț40NF!;DON^D+<3OZ_^K)F*4cyXV?<N'SZnPAvpV.[CĽ`,e/ Z#≶7oN0RCY.4 ]~>> KnY,Ih0irK>Eu!D쩄Mm<.1}OjIc3vSș &DB`8X%/Qm<?.pQ/.cA]~p613 5D7A+S G%"FkI<4"yj]JҌJgX@Hm3ŀ,K5T؈!íʪkQ$<;*Woi\{iY8.Pf{w0`@Pp$e` 'vuAJocpx[$#[5eH_3nuRȆ&-}AF9韹(ﭪK.<=f"!ܯ[ju#E (,1_OJ_d™.rC 0^9'wk&_ D"D-M E*,nbfGK?$e.a߁,KA>e=: A`n>UhsS}fЎ_fe3D +*vṲ̂~*[JbIsŃiBJl =;ېEbݵppDk˥rs ,ԵGa}DњEݐ5<ӕ!=. /֭p8qZlp{RN+V>񦁊kKBS&~,C;1<e2hϏiB4>Z/~xڎ:Q (lX*U n,m,H1C;$yP$k ]F;6>LAw~g ~r<0"( wue..PU2>E<+SyFdˑ_ u=A:r<߹?9 r+**c zdx/'ܼHi5&- &'嶔^;;F2l[_kq-?7X* t9xQg A0Mvcٴ" ?,RПP:oRǴ׎f->BdCH;NJĘjw!1 ZSb^o'?ןMZK2:pR|r%mոԨEG5xX[`Ā'u e:(o(BxoU sͫ<4W3V?4{V"3PO=jH͊)rtOk{E9R%הVØB}_j',_:Q )cm';9 mxR~\H/eG@|Day/l;JVF4zQs@G!3|j y:lfeϰal^* !o ok޴L{i=>u BN^ 'SrCwK7.fA1bbр|Hz%0xg[DzNJe4_o2uvm'JPJ-FYFT7"dP{aB(X "wj?RĄSAGsnO4 hS6<(fm'60m>mr:OG9~Si I?^ذjA /wϬeVI`5S7C(+ f)2sk xBÂ_z1 /=uKfw.?\ܪ?N.QbcGorMne975ҚƀXLh>!,׫KXPBg9x1bٸoj D%6e՗cWK/y6:xIifբjNUlR4*ǮK0pj{1d \6XTMḖKpƹ]rXV-N&D@SqʧDxut_@~fЊyYY8AɡZFlji󿌶m2i 3ܩNF(ǭ*jVO8i{)Xޢb2~QF?*Ip~!23" 2ba5QX#@ Hp!(cYP^aŚPMH;)׎"߈É>_Թ#so4N6֠Sz 5;ጾ-4tLi?*NBkPiF}Q +7g2-m2k[vc&x\?ā *4K5xb{w-: HeM!eYZY'Yjv)i1խiL1 qvoM!.|.Mb vbI3]mbRhx$[fX̠4@ߙM(5+B9Qt$Hz7'g})lz3'??[ ɂ!}/c}?>zƘ&V2|EHSMq6wz1ާ9ةr0rˋZ͙*%AsK:5Sd&$ ^oF#z@QI :$4pr0~<װٓsGs7"[^v*GxxDĖK4 -3J@1~IR}Wl3?.{(kd>[( Y*9M-Nqu`#*`fjM̪O\сO0k\,١}J@flkRB[FZӂU8"1*Cy ddAXi2*f.ݺ#tB R,8puPs+<}`N3 Z_|TDSIH Y5ucK}7I ,~PgA]=RD*LB :kel&fwDhrg;sag&#d`,oɛΔnpz?[Rν9tTmR`q1Qփn `ѣNx$3g&S&y˭dȜS{ĮIʊ@;4bYchc$5蠝pi `8䀝GME4K5w: ,bsLE~u.ܠ }GRdB`c?Fe1@Kn&f*NEKdܣ%MaySkBU>5 O)SP"gwU Bfx[FGӝyO\,N R7JD8TSsDj2DjI?([0+ei@gn9S( k@i-(PgM'( `{4+Odlw[mGwDbǿ쥍! z, i\<͐ \9S=t/5] 83TaY:mf /KΆa~aaedP T`7z pU\hʷ?hѭ4\EnS>lGk2&*!H? 'u\aeh dZ6Q@gX y*iț"R{Z9nҀ_WR}ֶy]!YB fP۳9xFFyk^/%L]@fZk;dķԜCqb*v=Lg†pT9BOW8q\WF鉾a?#Qz9ϭ@\o~J}}LwiOh\؄ v|ecʠ"]|f1Vs~Կi$c9yf:p:0 pԌ uu 'g$bKg79IB I9 //dlh|8`ɀ'!=nGB*.[BҨVs+ HNWP4Y\S̠Q-UӁ<a!!TE)ZȸaکXw@_:a{,/-# BUg!r( p}2 jPC`dLD>ՌTjenVU:PN)OD0g.gd GhVJlP)"ո^%5l+ -Ζ~BU񱷣̑=)}2IMpZ,/$hkkfSd4vEFЯŰ;vZAD|7iո#5Oҧ' ,o`[s;a#LՀDcC7T`T]|bO@9 vxCI.Oy_kM/㚻AN%'C&ڴ3naWIi6C4+AЎ6F<4^6N;4j徰au}KQ&gJaJ.p"DG Lk$ +.{~>0N ʵVu Hrb,*O4c ^7S Kժ6}yr讫Gƿ8\+5ڠ%' {(B1y\\qY0>Z8 LfO9QUhKR7aeDkFiD 25<} #UnUfE-gfmńiHV[WE촇9۠*[m~h bܵa4D)m=L|ͥgrn0J5ۤ'?'9(! #shξ]QUY185M4x*v5|8xC( ?`P’eMM4 ,W`=^y@N29L vavB=Kh i4B݄\yƉd8}Üܑ|y[9#esY7>)1}0 OԙکB1p8+{X~L8K5DF>)7+'d^ȍɪ,4G{Q3Ri}bs^LvHEZ8I/K|gVpaQbCwzފcd'71r蘅)JC`CZw%;:P@?? f/^) z^@u.8Ĝf;g( ].pw)C~Yt IX(vr=$%zjT Z[ 07B~8zr\x2 tQdq ЁMO@-AC̞Ȓ0.4Ο][+,} ;mVPN}Z*μ[ 0*a@kȏJ{ɿ;WJJ{ cLǗy~1:3^0cGE |NdI'9E 2铭?`Q&[EPӎ \MS%.wdɳ(3F=Ka0t-|tx}Cw)]]x1iHDOk@OqW]noÜroBrS1 Lvq:BfL"\ A\ I}`cXWtbJ-UOuk{*7+Yb%IaD 5fzku +{3 Yot6,尒4VeȭaEot?i-OѦC^g0H%A4?%19{틛vaDW/k[%BrZJa7]#0VvzbjdGGXUޯ 5y)'b!D_fX˖zkr5!JR@TIqQ_k,gvg@_+QDUt HLQ@r˨)2ZZ$X!5%ҿ02$ #Z1[fbf̹ױ}Ry2E1+z FhᩪpX.ck:/TfdLlHOze>g: 5MB HOXBx9t72#SJ U5> n*jwZ,6jG7@]Y@ F-y4"٪hƚTl7q-#Ԩ<ܞ9 ML#lA6xKd+AFxv{:ޔ u 0wҧYj*͞ 5s f'ֆC6%gj:!Ȑ0dM+FM.=Ų+8`asQ̑T+P$H |$5`(c鏚lXqCl9Ț'.~)"vZq?E\F„d]q)O&sנS }גŶ߅?r1+lzgc, ,&(o {,&>ք-b~bN\b^BHp&>[QH[~Q:h})VzM[*%1$Lfz2tKJYuE͹G32Lm~]VCp! !KGZp8Tڈ4M*DAV;hJ?w6 |>&eTuNHe~`oGAj|]&O<^ϟ u)M~@G9L+UcwIs;ߠ> LE;N>i]RVXc?,]N֧_T}l0M1v[`&{B3g{-uT+JBO􆎛u5wUϧbzi3ӝ%O^oQS=yxy52XtV*c%zBQT {C { `~,L³oq^µg9v#vfcٯ?)(@sb&r+u5ycjt?ڽs9=nZl H\THv.a3xF_#C=W+% >7n5O&Z@Jnz9zE])=gߎB|u"^_qaW%tv:c*9[9+)S*?Я80Q!0-lɞ u7Qϟ|74):j`VB˼^P|• ?v>s9u y̬ Nzs Ow )QJ +9] xUܣ6B\Hac*>T<# W >ꛧri"X"@S~׋ Z2O?Qut4?DYEc%6bmǶfi;2-ٞ([*\+7*ښ{\Ccr+={?w@^ 5a [xJryOu~`3!,. iK1\E0n4sENcp5+Lr EVCř%"2@ lI8 CC1@:0ځvQ q Y L!4$h!^0k~= mI {у4΄ cyf:5b%L]@CB9NSZ@ר kYJBR&Hnj fɫNM 2hg{|}پOB@p8I``݁tmp7tVW,`pof2';푴PǨYlIW級JK[0hmTU]q,$ 3>e"L a( ɊF4عr`vHFLΡjN7ִ0=ݍ/$xXl#0fc#!U00p-@@Ej"-Pz,W&rhUS6&pnؓjhKda w'!B d {ӎu<ԟz w/|2u@" FBU+7MoDOctd7H^_xy\ǟX_wޤ\2s?PT< W: %tpMH53ws=gjB-D P2~1]o7q~?9CL_5|ed.(R|`Պ@ h"-%5y@zi_-䇊MbƝɇ< m#Ao#a!e@ݹ* I $  (6 HvqmdCn{-jXI m[6@! Q!u$jxWY%ES}+!{ﯵjOFF|H~?nɿZN3ldiGC&5$War 4 "=FSRy^hnߧ ٺ]}&a?B@ t **k@Kp@;ў7xA*8/)c; @/ T+&jCÿ ϻv>"ձqyfJZ W8KS7ߦ-f h;Cm+OIx9ピuiRDvVɬպp[49vy>c}tɽ,: k*Rm}X;c%W_ {_h"$q\/sIР1Bs0޽!ljiqW Ȼ 8 FKCbSFvpxɍ}n8+seKզY'uz&`T%.Tզ[VJ=bEn\rǣoO Y*&!ѭN.#snvV~Sns XP $'0@,@7@:BeUq*ON )5!t'c< 1罕vx-jf²E2poM#ӽTf&yKa& M,҆m^`_vE[nd#Q߃vu\H% H),$rbBHFI,D0ַ~^a7B.Mȱ؞^ֽf}*9oڵruۮOwJ%9~=ԧF2= j`AnU2>g/ܙB=e=+jcғ~'pDD Z8p ,֢zGyJI "6f[7^VNk96bV4Joz*M\y(-ZXCj#,V$ܙTzz[i'"I n0I6o:Gos v$'QA[eNLOoG.2ެԪYUB{A֘kl)粋thB;F)!YvW+>_|Z-2L,Ug waTbʥXK9TZu(L^d$ ,Cj F(,:R 9t+Bqh_-wp}hL"sܭz\{U>@@ y9^CYhmoK T]۷:<IxAR혾XS:GHӽרG ԛX-dնߑCBF""H 27u習mчrm:Zvpa2ז`@$a4, O=,F?Suv['6(fN_ y$ ; pquNW;j" <@u_׹>sC.V.@Bkbmj3\ѳ.~K.!C` =w׉rW1C2wlB> ǚs\eEW%FMzw0!IհI'XKΎݻyI! H`DcHuRJ /GSwP`k؟q'Btv|9HCqw ,?vv!$HrpWD JBqmh 7Z.>>.;H@ٗCi$0HI{ ¤$! ;D$,&簁 C2BN IHu$$ ԄB :LABBv I I$,BC@!!=JECdI$9f i@D=H8z a$ |H&1Qb` (F(E 1bxFH`ؓXIaI'x!5! I<4$ 2HC!Yw4B3P$x vm@=r!!L<{$< j@hd d%$s$:L( $Y$'H% !ⰀxI&IL` H$$q}2HC$a&I$RI, n2!$30$Du~I=cڝ[{qx*%ct yItG$@BDB v0au_ݖvP "$PViX:uEf䷔ 8p-]]vo/ zu$ДdnE,^x/6;'DO2l"@ī (LvڦN^';JK.P;)tmM 2i>DK G$()9Mѿ :a%Me/mw嚮 .߳ ~XNx6.9k4[>Ȣ<ᚎ"3ҼO;/,uc/ qa-(^OuUOrtC3j|/ԾǴ5V0w̹}sȀ0rĀHQ^ d\l|Tv⦷UE&mŧU13 w.Q5 ||++vYKO{\| ySXOex{\6y|xL+ビ4#;J5ULn}ԝ>~=X],2eV 1D^vvK[:JPFr-\`7yjxAHSImo͙[⥱Re+fLŷ"h~Cv1|6" 68 s;GHtX-[xy:״ 7Nz ՍolӆZ'1T=Εv-J(ڽ-4\&rC} ו$<[fhs6V2}WU,bJZk_lL}"esmj㙧@d~΍((^aCm[B[lTQT[֡Y(xծS5vviS|h6DGUVڂN5x|ki4UJQ&%B`0`+mRn&3ӷ{b"`⠭XزVQLVi64DQF0R1XTKTeJ ZU:{ߗ"5 T}DȣfG}9Y1E ӿXt.NE )Sp}[5PN6]cj.V|.%>M"9fԞD(37œbw7Qoz;UwTͤz&AP` 5Djd!(9R`Az8u>~z5nk8#aiibُ{[`.+&?Ƈ< p{/~L=X(%ʮfVxzr(,<[&!g3\z9jcyOlw 8MxpEy)%(I]"GO7|Uf6zrܸT;j'C+x'.h~vѩ|(K)Ϸ42h_;hۙIiiԝO8,d͊ysdq> 0X/XQmYTT[CVRʊjDdMQšLP+0f IM|w? tf@ez\5d$ qq1 I O|ٞoK&ػv?+KtGz-AZ 47{zS7ti]uvu?ul XbNnP6AF\ %4R-Sy'8s{f*E mb0atx2ʖ"iOhu0TD1ΎnD`,DW:'HJCYFҷ:zcÕv?VGZ&Z]DG@>`*ʟ@7=+9w=GoyNuR:ʛ a~YVww6yya !<xDir$x[34,6 ܠғwy H5>GŽ[Y ణT9uGXe: /뽟uҾ]&+{ܿGK 8HIB!:8dx+{K-s>䝐q4kv/ o[gۂAyepfK!;.e""YnmH1`H+ x,ZB āB'oHZ.Bl rm%wI(/~!1ȥN~ O?qDH$@ǭӜ0T4!#*Ř`}WGA"j?/X<}WU9Ɓ;k l6`0BD#^كc`4|J5K9 ju=Ü) ^DAђj4>#**]fm?o7tѿ~ךH)!Ƞr{X|{JMda;l7_{E3ܣه8'_nla7WS|{(zݽO:7x3w=w1ZTpZ…:Ţ5qy _g>s(D+q,xMP4Ṑ&!8ZtlpA:2c%xķj};_Zrfgag0o QCZ%fP%0c@8:tְߟZX#YT,qC bE?kwz&"mFW ,lZ֋`+N z 觔K<3>=*^\[ SlD2=D4(L&< EQ*# >{.X$!/so}I^{h]m`KϺe0<}3B<A #ay}O'ghcYGղ7u 7W\~3zql$ݷ9Ae޶T22l=lTaimzO=_?z UPvݶʞYʆGt?k2ip6+LWq)1 eʣ@L¦HfxrJCgަڲ=VLNvǛQEwّ~>.~;nXݤ]gM-,sOh{;ge|jzt|'])yُ}?3I5@1nX}/Iܽ*t3\W%z}B==C=y9mث]>>h:-{sul |]{7㟟Pq0Y<Ҿ {j8? bڼ,r=Wgz Aa T{>:5^#Jy"u7o󛆻^+)\=Y8meaqxojӥ{BdL_|]X\"L #Ę~E޶D7 \x-ǜkO"?7Xܝ?SP5 Ӿ - T=sm08/MhasƹoV3w ߎr:+ZUzu:Z&<^Pcȴ9@ EOkcyq놛!VHoY*{/:Lo*!VݵxMvרo.Ώ]']Qs9>?S뾯Y~op>&OletR:,͘3QF$}7i& {dHŕD5ib^??Qɚ L)nsp<abS m,/_G_bMi>2Q@c:`EֹC5"($EgGH"*´b"z4gH}n:wYcn[y>M7~S3ffO|Yg5 ]+?rkI Hs4)OWM4mٽ{0B8e(JkL22eS|M,>Q4,Vx$iyC8zBo*V-cUa:A%D!bph% 8g'p}qzH?ў4:.Xv1Ap,cߦe.ok__R:A0n>o~q0qY=H!ATbMnrF),ڼGJbHE5E@'Ǘ^/"2#ǃ_kE>uq`k](1$bIJ2sf}LAHBFqD"bi ] $)߳Iy}WOێѣȬ\{7?v@ sJKF1i4aS08x6%#1KUw2@yuXOm,pҊQ)PC~"?Ӎ<r Vú"tSZi93B֖-xA20<[cKZ8YWSSO=7aջ_c=LrcuR#Io5o0=XR^r n[þ5grtchcw~7F < Z$A~>Cm7HVkCs]vJ,r e3hiPE8bkb>eAj&>p̵Kܚ"x7ԕLN,5XL\ciU\J&EKFTlM& ]$+[pq&f$#$ b{bY\_앺P,E6[QVnOQҽZ̹s1iw!=gNPdG3y6rnV18qG"q>@Mf-Ly{`!1@YA 4}D( []9*T YJdwGZdl4`VֆZ:O@0K l%ڿseoPtbz 0[}Y j{ln.چWHE<D X-U"gaQJ*'FҐ͌jNo:;w'aw" 1>ӖZSʙR+JQl]K,J@,7OBΒ .~~z]gS0h-O<۫ 7 {nz*@T55yUt]]9m[-$e}PFa)SiB+nvkn%Ӗrh?pKqҝZ츆0k܉Zx4q/)2 f$ 3ﲜ'w|bMpL? Lnc56srvc;%NcWL-ZY :!JR~=]F8dۖ'&Wk=@쒀H<ަՆAHJ$|m4gTRM(+ZOd" R B—|ZWRzxU' i> {|=եVP=?cɅ7ֿi-R/]{~|Vv6lB6 ot`Vl#~'qڅd~ni1{JgM5yƕLu&vvZ%Ru>2h vM:i|A4(8f޴m `&Su.q-: J"Br`LtV)TEF[EA_0Ũf\p,um,8v"[]i 3%W\.TIm1b%eUF.Z6JKrVsӡv,Q(`&ZaYSb#"J4,^)ƭt5 pqtʹY Q("b 3EUZ5XkT*[WVDEY JeBTUkR)TĢ߸UEq*ȺxMҵc&yobF.bVB¾ }(;)+% UV"kAVLEjZTθi#ҁXeJ[FUbA;71eeEE\Tjl3j(eE""EV*+UdUM&8 F(4 bȨ¡[LF)YQ`"( ڢ5 cE橏]iZ[Y?a.L>Nj,ʾߤ08HD 4AY-vx}vAڌ52؁7r{XfV"Mٮ%z޵Klpهx_˓^ݧ鼀٩VyG ѠA0Y6YPkz~E7bLϕkMv 54~7UIەv2/h͞К%nRְ'֤ &OuzЀ|6 u0A=O8{;!wZn!/IS(Wc9ܽlyO=D @A++[;Mz0p[WE.]qsSq`Ok<"@w@ga[kW1Gzڇ*'37F%0"/*+ wkx' 4ȃH R{!he~گo+tfo $1 T&C7ǻw+$vkS(~O =ޛ~;cwJɜ}0@J|iحB'[Aqo56y \VL5Zt枊si0> Pi;?0[F"GK`dHUa0}|@ߌI|㟩ӲAgp?k_B ;mvL b_.gWnm mE{FlkXմr?KMqqx-[(K_vgXN癴klk9~ϚK+/M4exrvg'xys,o4Bv =˓^jPٛg9Y~b% |(wȂzӑmtr?-v21/w/}]J^͔d&./6BZ~=6I[`QTPcT3E?~+NU"EQTQEEbV"?2U}i B/9Oae $(Q0¯5#H@<$ODb﹕>sߪnb"r$㴻]*SN0GN/>_MUk}"hIsW$۬u@IQC5O/Gm/bZJrӼrT4ak~OwwWU%i8%u10ac"ZBN^J mͿZ;X[l`7 e +n?-W>ᄇ,FIJi f@.o 'ɧo(\oE0VaC1)aE|/mC#ő.ψIoR3 ԰ǰDǤ$OzCB$&= چQ/Nyyk`Mڳc+q|YIsBR]+MWd{k9K.cE)th|uø֘ºB= Es:~uZ|tŚ\o/vqNۿ26ũV's30Pc R.w\5`p8ʧ6#L _fӳXB8:RNRH)?H2$@ B RHO 3BI l ~@ϚJ zxM9t꿏wvwz.:"j0 GY'ꩴov}.\bT>s|`?c|蟿xNy~ofĞ_lIL`Ή@DoxeV}g\id8LHX/ gQl|oks{4OO) _4s9 eA /"? \K.<Qq$V_X}T>H APH@F7b܀R{^{Y~Ƭ%?i=֒fn2.$2YKQ뵣eoa.7zn@YcT ;w[ts\$Z9Lg:'_pBn핒u_}?uzںn?f٩i~TE>͆qnh| տ {e7ƻx{2Kžpp=)ok=En8]>%hsXa[t_ QN,feszz5䏍grХn<=Dw^b&'K'a꟢dȤ>*S"ȌAEQEUk~3?2#tآ"TQiYeY/A߳_ҷGVP?}pz/O4y(QUxu-Z4((id$ċ8'.V@%%Rq ʾC<!IКr?FhbͶG@sm|3`۵(Қx<\i{11W^Z5rW?@%ZZv9%(1[{&ƔgZzGbbmq;Oȵ='y+8vN Uܜa.Ȯc$8- knҘ&ɫ>k.jx:+hZ͇'iqcXcp_$Is<:R3=?Uۈ@&l@.@E$a=;!^=y k 価j= HCLI }M!d\I!T$!P={! d>e Y$'` !&L$@B':2 IБ$HA@,$i$7%7j)ß MkB˓u8YO_r]댨$Rݕo1T顫ÜdtP N1_^`RƖ3HFHA׹3@gi0g'R}~d#2V$3cRjJ~,JIߢK%(fD4:'3j =rTI΍gVEh DouRY-߲ , -&]a-!Аɱ7!mcK9dzG ;)oA5#Wov$֨O[n0w#B[P z< jF'O¥.yM"t34hj帛Et@COh/fja~FB,PUd@]o&R^%r5ܭA2 ' QyC{<xUGwцڝj)QpְzN b] [ {.PÊ2;<ȸ>V<42)}dLL v.c~Gq.3(QBa3ledm9KntU׳=/{äA0__أI;ZF^dd#eJɽw!ڭ3=_03NIݞ|jIjW0OC%;_+ ſVov]ɣ|-"3꫿ǽf i7&lg]إE RGZQ>k"(%oaRf>Ec}7+w?ۜbko A⵬2cVcTM>wPY7ԧB(AGc=m34z&JE2KvL3l?M^TI*bb`7snK*ҵQ;z1w˜MEw ƌDA ͚'r0 ޽Iɟ=~oIE%!fKNQVd|Qu54;[9nti KU5,  FZ\n Jl[&%5MS=Q,NAo\`6_{*=w8ni5t\w~,^\hjפy_?h6M^.GѴ5>O(\6q5͘J}~umZtZ^ɮfaorEmYytaWbb=kѳLdL]*fa4IKC ڦoͲ?\ L Ye(Dy1n=^ C4ٍzkSkOPpM3Ml"ڥ "I&#c?16cB5|d(Yk~\1k~/3wCOK ~S&z5b#Zs e0"CCJ^Zk{vԡN~xWR< }h*4c{#L5cAkΊQ!OqI|-;n ii7&˔yٻ݊h';WvzC̑>0Rm'XodmyUN@t:٫/MDH V^=|r/x yf+lW.P( d-;D}d_f5I͏I߅ܫn Snl PޖJ=%&$84 *YM5@ KaO6-IޗN '߇F*rfH]QpAv_ХW?wi9]wz/sd5RE!lݯ@&>iMدF-rA9 `~(B)ݹav#.ë^E}o'TP>9R/YVg]we[h}?$yˋeZq}&tx?ߪ&'>Ιޮi)O# U?t@DgC:ً{5sptaW+X~Uw\+e#Hߡ\0=35cK4> mu 3 Qc0zbo(m۵rˤ:r)ޒIݔ@$\) MZYL`@ϱYkmo-iz 3DB0\eA W{?KFVERc.4;4{,v.z{*֏*C8w8 {-TYh/"/hb|> ?*|v[ֽr9R$vjl>j==p2՗G=EJh[ۛvqpp!fh>.=펧Jp̀{Kn⩓yVzOm:V0c^+&q~Z\i!^GؕPͅu o5Z~#ltz:d"56g*U./[xggzŪnEiCׇ9jʱN88ePԺ;Ld:]%҉N~'gn "kPmlmkē+ww9w{&2ͣڨ[N;y*55nus3[4sٗo=C$P)̃@LkFW[_ec]ŔBG$Wemzz˂,QFv=DX rf\]3 :9El87{4Үc8j= +z;1x:[mQ@h$Tz޴M!ؕEY0Uu[hov pGm؛7t8+5W Uz$D1}l7LMpA u0FBbsl_hǯ>k-Zo-ƔǤY{?e#C?jWѿZ_s1~OJ8lؽWuD`_e}P[ӶqG7ڗW})vi6Ge(q稟8;6[xvĜcӴqT% eO"\rzjs5򋂐ezW#gcw[/8N'NFjjo=ǿ 2KjU2`%aҤ?oлǪqԸێK1YvZ3S'sM^O_CY%ݕPȡK[yu:Ybmw_fϒul՛j’2puC3cTٜl>2TԒC첨'MF/(vM[JfxTtJ_r a"k#c.攒 1֔zrgy&{y[ӣ*}7#݅UϮ\O'NQ97S%c֖c杲N.P=UR(A .Kܽe}ЗoъKf]y:mr-T~,tߎnss5vG_MUh7Z|pX޽?Ng Btzm|?KS|TmR=8ٓEqMSӧ\z`/*R#YgZSoGy챏 BThe.Jُq v 'IwקАө1JWeaAhlָJ e_&@oՌp"—)[j: ^TH2;U<"*dqr8/CEу>U6JrtPPWPM^5cJ<ٹ6uC9%t]ӽJ,ay1pиPDfx1L!Sa7řoĄq $Ovģh$DYÏҖYH:).S ?*F/~aY)6tr#PJ R@× WWx}q]'l]^rwX5".څ]jUw P@:c<piV#GлVb53CKnEQ dGЏl2V9;*i>@^=Eٞgϯ\8ܵY+ Q6 ksf%Rg am7C f\Jac\+he2zgry=wGɤ}u;ZMF/}AG}Wni)SYܒ}7;!zGe[q VqջhKoPkZI,lg;dmW|ն vr^;79܄n[/=o㝣rV=^aX.!q,u32<^&f5ǚ?]i߄G}M?uZ,r m6(Ԕ$x" w1䪿ahq6& FS)O)JR^߹ve/XW;gdzݶ}7;b>f'Svcט[0.>dWbqsSR>?bN90zj,v7E;,@q#  Cd'وI{9eIJ[6A`g= 3%?33%@%9 ""#/O廸6#߲|2CQ3H;Ώ{OW{j&yx!p 65)@N/g+P əS2y(x*NskaH"@ofpu7~ L< zb!vͰ7V靈vIyy:"?B\GӴۭ|g{wϽ,?t sSMr2Oc0PHӼcwU˅1a9oZ82.=kpS]vϥZ,NHPd~d}W&N嵌-\$Y`bZ+b*,Za=>a152f__~فÊOmN?50dJq;Dh ?TdM<ƴ5{~=b01AJ`z/Q=nv,q͖~'+!g8gw875l8=ܙZݮRX]Qd?>߅A;]@e-uΞ_ oc?FOa>1$<D,YqHF Ha%ePImO@,!62I&ѐ$1@I)$'AV@GG׾M.U1lCdܮRΚ 0E(Q HA(ڿ<RG%BسWwq:%7U~i$ILZBYa!<-Y *CЀRI CŲwc$,d$}"I!h!'z&2}RzdrazMS15_5W~kscm ` hG2xo >&E|.vZTRc枍jEZa CTTtHRPZz=)^Gutonh5ڹB[)Ǭ[^/Ps j9s',4XCѰILzjS|0Pr?[,jdF֜:vG#"qy9 |/0x>|X8G}VT.a"eA-0d{Җ}\r5H:82D'Ba; { Ǯ@g)hKHE=-V|bo8 L1(;zU5ϻ Yn e|:T/+0[.̣$Er5_j vې=z=u[n,z_ ~yqɄX5m"F_CԸxu*hcr†3Nc J&32RNc zO.y,w{n33k;DDq" DZ*S=Jy`RBlmwqzeʇڜ/…!)!TiUs\nt gK[R{X&<8"lCܛE}F|ڽ*]=;g-tWsH˫ɏN6% .Cn%k-DuB}4Ki:zV!KqqT$QytIxW,#ozD-#6Sfϣ-6v6Wg}yG1=l앥#Jg=4 utl|=zz1'yL& 4A~\n٭4bXs i}XS愪~OƍZp˹x?~pI{>r풜qSEƖ 2F(7~/_s0?>m>"YuxNOj5X,d=2֚sKgmV_n|؉׍Uq-CNKkԘ|R sr0_fNDX_\~|Sqx֣e}=#}oJ_ %qWZA`-?O[;?.p4Ykn_(eυdwkW1Á-IJ_uZMs){k4*1@@U00 4B$Sy>=yR}y V#W;8 E][&gƑ9 %0DeC׈<}5 $m}x j^p~4 Lv&#NuoQ}Z8yw0UT 8;=:wU~cΗͧWև@%! ,H , `(~IXd AQHYTdRE "`Q`EH( ȲAI%arS֫SU3v H8cCGߗ;@T(%3Wd墈:>_Ei'p{nt-ǵ_s-R0d m3l!ܻGG( ,kP/<]"*!>[[PV\L嫷cύp%O3Aa`*B=iHV›~+#v@iowbEP!'zC}T_Ti8Pess'ZyP!Y!.2I'X & I(d"IDڒ*DB]72@ moh%;kIiK|wޯ@22hByp(77ⰱ5jM0U@C[L$iIAx(<+E֯a5.ɷtWzMP=Dzx[v PÃX4= U ߻aW1r/Pf h+5mbzWǧx(oE<%2S9cH'm\jiS9ٿS5;lpڗZ5bzѹs=xu}m A.!I (2OQE9 L@N-i}ݕSf&a|L4]Ħ@f-;ɚ(L=0L׌8"0`c GP$s`!մNnZ+_1߀ mdZSsF+pjH; $۹sgv< 7"_H2a-Lr+- H5;1N{s]:rU:ID-y)g뢸+%ִGĪ+O oì-+5CҿMvF{W?w` POyŁ׃1ť0=sۥӟ}eP9zPv>+*l~|O%v?E&s$:އUCMW-Wx܊MȠ/Ŀѩ(I $!DuxcyvY?JKg4`=`[ܻNv0BXĻДA M 6JJ #`pһPX~@æ׮stC|. 8UaT[~K7\/+j\r`HehJdCo#\Y7)D ́7'~R:śyec{O A })55)z2PhDDC|A¢ZqcB:ߣMƂ{ޏe7;l'Ki]c2\ibQ;Tw4ju S>u YG LUϋ&q$RTFrD?w\x[?+ھ u? ls0@0 ( TP z5J/rwXL'x-eu[m,růC& ,<!mTHqɋ!?R?(2 R('IJ" m%Sh0\ypY[-5O)5xL~.+ՐND-% %[ ` =lY$/GnZoGDo'au=zoڨ>sm e.ۮ:k@F4 P $$,B҉"uP%  D` \r +E&w'zo>ۭUko{5fժx% <~~ Lx|zxOܤi SM*IHC@eB1$}r@~! ~+$!RIkl$@Ѥ'B XZ@@'g#wq|_ZӸﳴyq)mV0a NP/|}y Ujֶ2xy:y]+yvSx_b=rɷ[>@$y r9< =~]XI3"F]HRHB_>=w5G/2^"_H )z> ,!,# IXbBBc*@IPA`RIXHy ?ҁ>Ձ'}z $,HR#@I.P # k:"G&-ʅlQ$bQ_NyQqcDKMlR;)A֮YXH}k>䆃XI;G.E 1b XHNq3BݘxM͢L P?3#@N\ɬnpSj7tq٧Ƒ3,ӲRqW61T)6*)"v -;qC1{+֡$TP̑j~db ;NkC I#eű:-D\f>:7PҟM>2 VfqKg!_xkf)xÐ$|* %֪(ޱ>GbĒH_ǞGK6Ĥ<1.;fHhMܞ/\?u Ѕ B 0r\% thr.x=^׫'1@-Hh @5G̶k(%I/3F5%(䯌5kXw 8?S>PBy~J̢Rvkhؔ{M@`m32Aq|^:a\[#VTr ti4(?jB5&R%WihOӹnƼ o\U Tؒn0F.Q1{ÀW5y:O̮O=R-4F߀s$v|&46I  4a ^SE*oy];neST:ꠌSˡz>/XN";W~/RleKL| r#i0fcc> ]a75NRc1Q&vbIdF5BIBi@IzR6$'rm9ĤTU$mU!3UHjD)VI(9J͚@֚RL`ϩebI6`1 Lh,Y7hg'!h3JJLE4wp/ 6/zS p%˚N:'/睡ɮ'3l"-%ZGѼQׂGGgN8&Ӎ ˆM:"$Sҗ`(q3ێ*#^bli=q=-׃^־_hC,+VXvŞpz(kvh -'ªRzɭ[v: lm~~KNLŵlوpw:*, DrjNqhwӷcM{c@_̓4ciJ_ƗWIvH"B$ @ H<:6ړG1*=}!W1@T(djߘQe$-|mSafV$>jUu/ڕϖ9E>6tݵLfx[vq moI5J(LTm6\8cG '4j) Y700ݾj2rjI=Lahz~eЛYi~.PWQҀzPlĢG7 tzL1)ȏ7=zBd=GJUSOzn8{螌BRUQe~ OJɏ*0ƚ(BjmN<>>4Z^)8&$F# Qq1CS{0!P@!Lotqo7 {FfKD(Sr@&ф"64Kf#=~7^lRPDRAiF\$IH7BӅOs#0z'Qsռޛ# w2,ָ3(cIa4E3&!C֟iCT4 N#gq*dӎJ@Izλr!A%2@lǯsWk)^ݷ-7V =FfÙ韹A!*;,*H8j¥ob$|k)/O^BtGsw}/0]wDP $8ЉqiQ"S!HԔcdz[S>N|I_ &bgyiԈ+5oTA|dO媪=@9(EF WҡWje;x{HO93Q{K]yQ:Lb,PA&&1A}7eּx{*QVhY_ew ;]g8Ť@[aBzy4]mü6\UTjEvB2N=O^e( ׉0.ec* wvA'gʜM9x5w-^3SC(x3  l7 fOK7* ꞝwOϳf8I/[( %hAT$)y5QRr'?+T$_ jbzSҋ$SUXӊ} G͎{Hm sZ hKe cS璻V.W0,{}W}5@dvp.u5XpWWGo!BGHv+I ri8FYf_wo]ڼV#RCӚHzߋq!HR"{$M/ŏ_dS[Aj!.VN>5ow:nc~EDv͕SM'5H"xbJ 3-/ghRUj/cߏywsZ}SǺmCmOΗ={OZ+hǥh{MYTJӶe+}3Ep-ώzVcP^bC-\XS$ Kl׳ܘ0L@?dcPA!CGUNLi{=_o;G{v{Q.0I6!KdUcEB!p6=)z]&T) ,Ɲt DqRR/<bǤ2CB~ِ$'ӭE= 4@m%J3/!_ngn&h'WXyV^y?W@|/y7q+E,z#4O;d8#1eIzTVSL)ӓ%tEϵ5v ȥ "!Ut6@l.}M2K]ʈ[7G%O̬\wu|"T-O#΀0UXޅƉg`O~)RFp̢}*$HI"! Cz! >> @$IHI`@> ?B}HHH"BOdPQ(xFA47i<"DSD, X{JdćRQOI$ !%d E! !6$Y$;ԁ Y$L X!VA`H4$ T?B'3OI-oI~f{!$Bx[6_ ϪmeZSHyM7'ǯZ1{ t_kQ"Ky'Pnl}ֲg`,: L@/G̷}' wHaN½%mhTۭ{ tV&Ip_PBA 뜿_bU}m(MJoCi(b6׽ǐ lǜljzR\3$_ []t׵&Ӝ C {-єߤhIBNA޲f\ <>:lB2̍ $?PC\E@R$d%IE ##;DB[únqIDW}Qo,WAəP /XR]Ƥq6C4)@6l[;# TKLKzk`271B e̘[h bTDf.) $=2 eP`}3RZRY:Eja[&}K|ZmaI[ dŘq)J"l( v_G[ &,]2x(+wXgbl36 <qVzAl4\* Fݵ]n /m74؝xЙ=.;spgǵ\"%{Y=V1 KpԜI\{_6;Nm;z|=\Hn*#_6 X!fWṹTb>E#H}&H-74A#]dAӫ_:>m t0/@7KV&;켸t "QQS Z8'Au\,O}BqCD8p)\tPZCcb|ͲxWrψ ~indCdR)$@py bR-w ю5ɯ5gUa- {޿A@ e DqՑ@RZ~ FlB.x֬K?ϔ{g{Mv]tN nWOa0 %#AO֒PVH {S/ xĸ=5ˀ%BpJVTWr-=- E$8>B'hxN;OL ECׄPjK/JˋI\{1ub] hH̔-H} "׻)qhO\姕oy? q]7D:Z.yy J.vc9 4I'IMCɈoiL`q膎Wͪo ereب/GzsJ;t$⾽[ga4 - _2H u}*cN]s-BvVJۙX_|q%| cR(6;J8ה8+/sܘV/@I;цЏ]#] xuYfQ GB"_1k;ռ8#4AǢr+]۸4'F SQx\(aNp Adt/%wCy#W_l=C. Hi; =Bu.mu ^[2͔`üʡ<)ANxH {Ĕw1H]fgŷR>C'۾?ֺnimk~+ŅIZJ#)j10LQϢ޵xME[%en˜|nׯ>J*L")}+\O|,Pg g(^ebZt,l'{ax|Om us܇re)O~$>yn( $4D)0DWL " T[[Wԣ]!қVQJl<~glsA䔦9#$(|I~糼'Iڷm$c"@?I7HBC$ I6I$ad @,aI `I a!?dP"!$`? 3$'ҳOI!60!N,!>ax$jfٍ@/׆tXx_H _]w{p&[''#P_Xm$? AIc I8P $$'v@$ICѠCSٰ@)$B ?@JOqXD$ N_E]Wf}\TE eG#^aۛڧܨt}PbrJU źߪ[}}2}*GOdi?#,_JX*4|ɛUg~c̘m !Se@s"x)8uV|5$?1DHm@F)9:vϸzw[w;'"V7 &db]#  , F1Pؔuˇj4vN+ }NיTȠB܎P51.2f6ڟEWO|n۶^JU%|vc98zIi$z}4~`*Bj`vQƫ/Myp8PLޥ:WDJ9Kſ?0|}W%;MtnSULsLZؙ{`GIJ#u^}v_+EbN{tk VK)~Rj)K $މ/w>EuAP63zxzzO55p,9 6v97 &8$U3y"=;F$A&3=$'햠#M>YHQ{MI \BHɣ_rg.xQ1uyTԇ+#ވSmgc愴G2[?e3o^׃Hnɍy(`]*䭱__G 6F d+BITAy$eK=?]hرa[ϭGE}u^QۏzT{Y֋O!:g( 77_?9j_0>gmi&e=K`V+kHO6F]&?y`H37|ɇ#ĉ\`@Ķӆqed:{ t3"y>d7x:YX `F.L V-d3ѵlL E֙F\AǑl` |PCzc4|Vts%5/W"T$8hU@7kHA?Z"\\0l@W":f%Lp|ۇ*fCNcQɛܖ`O#v*[~zjD`I;wcَmf1žkEQ`l Đid@XBvO#V93>]b}?{ҨBJ 0.(j9MoD~&4A~y nPd=n@ YVnn:2os}WUQs /O tIܓAd@ѽp}kl,{~ɻ٠1^zK (h(>`ť)Ox魜Y'isrD6,a FAt0gsa6:;Pyoɻ^*g`g\J!2=}M I12OA1,/ɰŽ5 :j5+Ƽy^a}CyՌz),%rH":,T˄_S.!`6}ec$NU& f!ǐ(K1 B[:r8;XЇx%Ok-CQAɻ@R Q-P4 &sw*=ip`UhDRnje} !=:$9zk) o"n6 B`9NAR\{خƜ#ANIaj<0eǦ\L#qX-;Y1MiNUz}._nii >nv: ~P'ʜE!-,{ٛdbClSp\hM66:c u- c It´ܵ*dZjUe=(vN@Bc¨u.čеm{#gKB֛ &v}NЧuc>_C_⳿ds_o<"WǞ@1f *4Z]rD>qtlaBzN}@mƔ\*bYB}y=RM{yTKqG o|7^ өKrԜ`vaވ=H1RolQƖU6/~W PJOZjQ,`Na -i}\P0akR}k,(DP&a-FE{D!pȟ K"j=:Y[oƦM>g'F @|[؃<ʝ~B,O<z{= jA;mLk-f4P]KnܒbO-X!].o+KQxR7|bB*S?iՑ6ă+m;UQyr n{Bh>ٵqf tƒV.鎆 4O5ڨ]2l CeTCny/b5G6]\SАYL|=/MZqҲ2$JP.q͛ŕDəb@$q5ʬiSn\AP)=E@@wu)U`)T/UQ en\G(qmoE#m]} =Qx.Rm~gmkE`i|p=S&DHcۭ {Ց^}-cϣw}Zk][[UZaI_Pt>@T~'|5'uZ&P ðT}=gqlBVC `y$+%6rPHµoppR `` r EZu{?d_Æ\;ᢷh 4%cqlrrИcha}9>)1}_צCo.|gPGZY|0+  &0)`,Dp Xix=m$W]ՙ]@/h6L@R!jk0x%! %" >E$HOtaO$RM '$PL@d  DV S +bURa~* Ϗ+sf?=*ήD%6b0\$.iBRV(y R! BHII!Ƅ B!$2dY$P@HH @+PB-FPT4ww{u>CmOT6roH|e՟ƟvOt9POWjmt#8cP]/P=])YK;5'-Ö SxT,*Ab H;"Gt蒸ASV6KEcaYoR!RɶSqJh؉<=J'kf cteny*Ј#xXr\vSu \q{}{k'o_wԯgr?#=T^tw؋CJw?spHx(n~dE=I ÍK УXh+Pړ9%@R:= %9]ԓDfHP o%cg2nA"WE@y8c6]$=z~ҎZ孍kr$k(g+[汌1v])njŽhr1L^nman#|%QbiޝנT"#O|c3Io+C[ٚ?+#szq~NOkX}T]A^5֟~U:d/gcd|՛o W$ş8'?1)1.=客&srxWBL_=Q&?dH#ܹ+33@wp͔8YFA4>T30|6uy5KI)fPVLB`Hh}x{1C̞+KmI_4^T}$J"/$H O@(0 !gxޥK[kUgeה?ͱnOc?~>bX!?AET{:y,59i,Cut^EҀ<!H8(U @$m Y'dBd"1+ZBcT!$΄ŝ`~f@*U=7~0ygR4/ 4?'8BffMPF)$s HB $U Hf  o2CrLvi!!BI/@R$ndq}KTBe x>}G9}7U/ iPJ 5F`zqPP!ޯMG-Z?SWɭX#j%ac%+ ȰP(Pt2HJ,aۼw=+=qPa2lVUQb:<]K{nw88|?~{ȍ{iA(P u}L958>s-:+Td8]afhCa*f:kKorT&&^OR52rw{{LYʽNQ,152Rl~ sz°5D3`Y[*=jbG$I~/w<_ OoGօ@ D$ ,$Q>01?gxoi`DVNmb:Ww5F$ Y[3H|A!?Yp!(d>WonʱʛR\ ymH l쿀( :vD'SƦ(`-Fo ,>_!hMW9L@a#ɿ&Z264Q@$E! $Mk4}$8bDDF${*fӿ{ ܡOWq]n=d4q@dǞfG6Os_䖱! QЃG!ڪF8 ë[A){vd HmM7-DM"Sx(G'wӌ2"ŠPtCKܺx^g%۲<,b)˛X{O:hHzj@$ ^ Qz~?ySAREx {8&Hϟ{p1ɛKgh >Hf D=/l̑iAQd8F%AhSp0Qmut/t>d "/'Aʼ*BJI$)$ 0| }@Ҁ;C:&S!d ?VFLY 7l]w-9o?/_og%ujN4F$X  $nI ) Hj@I;PY L> HNr]$'2I)$:H@tI!$,O 0>!|&a}2‘ 4&;$? 'LK"]]::U&Ԯ$gIUwjo`, ֵZӸ/~A,DfiB |ą{[6WNBzMx&㼫朦>+jȃaQ!uBRQ0(9/#7eD*Lʰꛡa$FE6MOۖ8lKƒd9uH N]Ɯ $Xvsѓѓߦ+v9&"@R W}=gԃa!\)nobR|j3 QM _Ѵy]n=H-B:Z^@"Gs"X[*Spݼ @2+J&ݿmKv[UE4|Il iNm 4<$,*bZ n@uVsӟZ/>9Ւj9\#-8K=N!Y 4hsQZՒ'9!ނS!<*(PFs `It"7\ Z$`YUx/3  ">ГK.`BI> \٘iMe#MHq2KFL?kϊH,zisa48Hy{Z=}._gjЊ%o "OQ\(0/ܭAyf/(k>p X~-t882@I )'*]X] Hnk'=݆IUV1oqgn+k{T)7vP5FҔ5lӿZXek:Ey`s$&$ܒ&ת4a!Ș^̀cE>\<~ۯW;pibꆣwP E R,|8ps)8!7VA.W{ :Q%WW@7Eԉ3 `i'.c#R=&zbxȄSMG˒+kVr\v0D$|^} ~-x-``<#Qb?jw.!AڒoFG| xq,9LúszV o?S7MH!zfׅo]-|m@B_!-~Zk z(8h$xQBAwIOnaP %1QHo'cQc 41!d!%0[8TIdա.fм?&Zߵ賙u}<"p.1;5I,@򚋎/պφؿ[8M /ރ7"gV+Zsi{f'ۦ a&7K;M8ʬ80(0%"0lo>=L{ӱ1S?[4`A))P-H1 4 UKCM'OzkfMczɒ@bdH HXHw}6 '@Gz t<2, G >'95̟O?_~{ǬTx!)ߪ@BZаd;񤓧HJl!I$s @Bt,T_O@Y7|v_O3gD" KJw=U]NA|cN:KHU#z >_==>>>KvBW~)hj|R$LTȞ$'{Jz\~ O7uZEEuLjcGM7l:LV٩[Y[tK4 Кhcl`]w*bhbJ 0f}[= ]& hy,x*$cW9{,6Rw|{X_[-OKWu\{̳Um֫ ٜOҜ^- mZ}{Eju[+8N[_'e/B  Y۰kg9}9eqk!mסy:) S $.<_rݠpr_^ɏ"-d3^ `g\i9n~-y+\ j翄\lȯnZ }?F$G$Ip=a )@R_MdAì6pH6AFoP7?Yƥ$ͦb7OFhx"#gQh;P$9(P9~bP#yPl7& [)wYǔv\ׄxk ?gelKB~MM0 j F A! &:E}?g}6ܥ$Od,/츹ni9b`L!L }$ŻH"$Bc "bKe~ BXu/{zG]_;L )?wkDrT=vL>9 H@K`TaY!$Mr!'2I$ҙ'-$=IL$'{@QH'@!$]k@jwĬ~#WGw9!{s/ڭ@ʋOiE-l"_.%^/_-uE;4-?|eeI{ ٿ+6νY?y`&#7P _NH~ (^B~IocuٷWwd`\s&}XY bXeWG3͊l;fDcbi$D g\Q^{W(nTS/Fs]mMvO|+Tj\]o~nELG|^}cZq+5=9+]·U'5PzpMdWuV~Λx +Kӎs! [rLs7[J?u['JHW KؓD7Oohr[&9 qkqY(c,1VLRnZz+XLTh:e[UjEq>{}(-vs~Uo•wKN}X8f>6,Zo5}Zt]9ugtmqa 7=NKZhgcſ?>MgŝYɻ'֞|j9Y> Z~56hWy)|N+2mj j^e Ā:?d0Lܢ GTX$ob[j+耧6c+'q;[S68'Ԡwvšگ9 hܡQ.,mn;9'X6y zw4 V274_r(ث'@MVϧSOeqk'p@) !y8*do8@$;'OFzĝ!_loo)EOK$|E?%ykYl/?}} {/u8cMa0BA?,CY! @a$A$, ,5ϲnHɯ~9hΟ:! @4@ X`H! "P{!!yY4E A~Ҏ? $ y_I$)@AJc𺟇ІgIcy%H.AຑwBn%B$غ4po%LHF O+x=rM^ S`]=r8jA қI2 Nkk 3*i"^Q=&HKd\*D믃rA/FK>Mauv;. zغ:b7֍C]2 KGYfGYwwS ۖ5$Ȥ q3gvf O~qm^OOSa9ЭkOM#ސV5GDR#+% uK]~9>Qy$|[j-/=) Ъ8hkzGM܅;<|86Rs|Ȼ˥EO:y:U3bR{)_r.,2E4܅ٮ:$z]Qͅu -2^'Y6OJ}ϡwPɬ4Z]Wz{gJ_b 9dHj+7qN{Z晸υ5iI H_!;=HK3QܢQxi0 mj@S}Hn:2u`}}9h52u6 kE@8%P$ n~b@@*v!,!P Do7:xs9\`5NR?'벛N>XVB԰o/]|gޙDTb*frkZ0QMcw^V ,M EƁXx| ֵ.O35m8@dRAA`a҈;sʕ89CӗѶ>Bc@Y O|k]^9:H`pBrakl-*0 @i"%Xz6:w*W߃|_۾i^@f+[\` dW=TPaZHY_29[;& 7̑QEP^〷0Q YluBOk#Jʁ/fu'BJ-] ݷ,3)(~;L̆rLxM5-eܮ{ .`OF|kq]X8Gn$,:>3+>5FiEmk5.@ZHo$1F < \vYۇY8(W)(U?2qA?gzm:_n3O> "7a%$43`XN6H!<[]l=Vgz؜޿gU?Gfkʪ>swdcdw\;p5d${(H ҐDPT?B`M,,OQ$"IEDG/Y@lTq7.i1?, rSnd8 =N!y/=$'ETf%/2[]s}K}?*̼"[z ǿ{NTd vS[ڙOnJt9W?2-$0ع".crKZW|^ jp\ %B:F&7 b֠\Ύf52@K Ip E?xaDh|!0r_管Gh\¸CEMwϏ֌$p 簟 w\&V KH-Q3~F_ׁ_(`DB2ԉܧG6$HJ `&.BKX'z?J940 , 4IM4ג}ݪfM{VpSFW.|BHK4&ILAG'!v@Y@`OC(ڒT"$Iߡi! 2xNk _ߏ*(bQIŌr_̺ =Xɠ%&<+z -l*D؎#7/ŌfI LV BOL|iߙC\kQzk-߉{7iI!*.KO$fj^ZͱQC?Py8Mc_VfLK[JAQKGE?,yq*MJ2|m~!L?& \O3Ӗ93P{j6EMRx~GRW"L~䕥xNi/]iOxU&mK%YZHe?5d s|MX ̉lױdp^K04jaC0R47dJI`ջK5/x6* '0A#>:7 ;GzUg)%uvY6'As><и1>T;(m B'uWPh^viTPI)-}"q7_d#|c-\g@.l?h:=avB9`"e:_G_JbԢT@!0pۥ?/L|O]'Jzho߷'ZY dTQ..%B &M K=2@B) ˕V(]:;ۆ1}V|_}MNO -<6;vT!6 I (I" &iC46+"9 E~)x}措ѵ}0[ Ws)͵xJ?(@x?Yfӷ&p^^__; 8M )$5fĮ=J6gerR8fVex@kڷ[BMB5@Onֱ?w3*8"1_+`$^=QI$ߵX?E@C?yM)\:5U-2QX*d4pВTx`Gը֏en 0~+ǂـG1~[+_z@[@[gIzRYeJ" g?'g* l|x(KP~Ƙ?V^UJ>J?+W ^ЫQ^29R%)BqlŒXHev8,X?@^_̘}Ov ,ŁR,H$R HV'`~Ԑ1d$A$$,N ^Z+VƪaD;{9^'!5 䍞(KlzUMl̅~ܶN^ w2Of& mYit[rl1jLܔXp'i$d[r B<K4g^'+C#hY,=s|&OV(I5ŲʣNWnCt~be7fSIb 4֞y۾Ώ9 =NFxzz,{=.NFNQK,N2re5*|s[3dYkOnbz]qd5,H Q \H30 ݨsˏ@rr85Os?ݑoXC_3_jU$Hbʰx|=a9y@YHx5P>{<;<CH@LHE OS, =( @O4@T:B`(Hrрo_Ozߥbr L͝6l L{nqXpHͱB=%e&S';%= ɥ҆jw 4Vw' %Ӟ{m?.lLwAi R &PT>0^{|C'X~mPiI/dV_4)>A1g'nǶ1^A{Bq(>}uL?IV fZS!.\Y0ML͘h,Ȱ$YHIt)VE$Ѣe}郞oh4+lKXhb)lfJ!q E} T?:,*dX dP$H0DꚒdAEмe}\g{rH<ƒi6zO7iٕ۔l$u^ڛ;?&%lAai|](G=TQ$ttMoA?HPI#}&]ؿyx.(f,//ϭ-. ƣ-Б?S(-[~[acMI7c!P``VŜc'Kx=!~h= jBsqՎ1~FkaegTР?Z}4<b[FEMQAa_fSXT?''dPV2(QE'BִTDO9ϮzL T_I& E C*d$쐇DB`AIɂA@YP!OBKҁ Pˠ[?w/x{\z,k~gBȉ䭃TK4Dąa)L\N>r-% R_Rr{rXU$ %Y$?Gu=_-Cl딯N+ O 5^#ZH(IfY,AT βo`o>g .%o^?(,U[g*rcp,VHF]AO}# HuC !) ~5'-C]8VseB3(qW.ȇuR;k%l V'`(]H$? @iwZz<h( eEI!EAE$@$CJ~CƗvh)vYxԆ*BWRݵ8.{ܷrջ<7piK!!pb!NoP 2\>zPK_q˻׷A ~:VK&f/xzQt.ts6D"_k|+r!=,y1:\1^1#h,Tw&sϩbZ$7^ IO5IA2?-VNlQDgY'N"jn^y+#JU[xO</]-Zw8ʑNos+޴Ѣ&dјc|R'13I=2?wUp]Uf'xCİ̆MmQ{'(?Mo'/0/ݭ+QI?{!~6B'f|nXZO2KF $~ժЕ(":LnzGORtwe_:CM͐d}$+ $,1<B} $.OHh-vg3> j#9/.~ fGfPhTа$Uo'bMIsɄa%GUJ qQQ"Y]}VBRʢX>,D4Rg LaXT$-Yx i5O?b[8i:_$+ UpƝ@5;#؏iD`k8U|dă J l>+U',E FDK óez6u2AHjjnCHВ3 &/8"؝``kI (( DI=믄0JJOr{;t>-J8-w9nLdŀF>YZc #֫Ӧ^QZU1&Xt2H[*tBxOaNNS$y3Bv@1#xb~X CF\^F< @NZ(aDe|Mc.5uVy+TfjV= vױ?>xvq, Dl)Z'A]o;U)?XM0J p]v4oG'*.Y9-MeسɢI^a*@4$:RЃeﺦBAYVCW <#`0FO;TѴRuJL!,|$;뫎0nN;(g3z0GIF+-r~qy  c{j~Kq.&-Aw+C55=,(vErW_Q@e(DPBơY O:}À H`z^yZ,/[s?(}"x ݯ+ݥb;@?i$: v @"v:DH%I/d0$!,Ls]+j5qxJ%%yi], k".VjclomHZ=pw3Hߒ(]l:yv4>=P)=y]6-mg~jvǝKHCq]W_,cʖ3˓?VA$R I4Q$B#8{2נ?ڑ}]ۋ'8ZWT _I_胭}%5˿16قuzSvyVD\/[®/3`ܻm~Z<|߹ROC,GOq7`F9c!|%(?h,E~O{D%;.v_5f\Vmk((KRd6!I,>]K3ڳ0IBLYSA%S@ ؖ9FI|)_!h8&h;_r}YgB.FC~KoFHP(}zzIsKQZ(0W;:5*0DR M6Wo` Bt+#zsHg>Q=92aplWkCY?I.x<`3&h !Y)M\U _~ <\g}[o8>շR9w-\U;K)ϴ= l7h;{^wN.5qdz^٩ 00Ƥ=O҄Ū~{ggu'@>/.D hVF@d>vI1!V@a7$iT!) 4TYF{۷KkԞ@"oB,NP7 T>Z=EUկZ^su.ј V4#sRO^GY?cH^Cy[~:f/gя?7)ގ uF``c H晑)&se0I%1VoO_ߴXkO7‰![;v⤄Du RrF ! bf֝uvBdwmW{0c4p=|UcNTB6>n5LfqaUK<ÿ˰kb!_34xX! ;G5}?[!Yk3'2CQ>n D[Ӯ?04~siՑzW6#Չv@],c׽~>38a_،fߖ$?LHEi~ΐf (UhZ=lq|3oj #JYf\eȼ3 ;zugH0D"ʡdfl $KDoe7Շo{h䦠Nd-2a|Ck5+"|, t$!^QDG|[k&L3 jM%wH+ E?c7DJjIcB4ٛŎe<(CHgjezȎuz2 aBGߢYc$vh`*XU038GӄaYmt2h^҇!_Gr+RAVDbY5Dt+ϭ87z?y;f,닮 *Ţ!W ~1n8_laPk( (#LwZgR=AmP[f,&l=, >CoA SW0uos~}1& q3\ԷRX/}4$?pOx ) NgV wD8gƊۏջViWv+]-,GM{u^Qf]H=t6_կ[!#;L iɇ#\'.y a gIZ|KcIЩu<Ήtz08~iw !> 5)Cb'zj0db9[Vr~NhDN|;0x7'JwzraUϣ|<> 10AxN/_F"~Yȩ݀, u]|-S !Ϥ=.T y Q#4ͦN&xq.dcrb+ئ;i$8>;>"h|T\*)3ۀŸб$E6?UpWw\uUȔs:t]\!6}nf)wza,OR*D\L{{Sɧ"AحZ3^D/Q "Lv/L;m{j-DĚ5F$?OwY5J浪=,Cvv5hx9""r0S?H!_&,%Y '㨾IG"uI*Hk@ؽߕ.,Yd=O9V=POJhC* 'GF:iSr q^?/m%Aƺ gqr"&+%waۀ~q}Ճ=WA\&clD`i!&dgq(X~Ɩ 2A&_?.)^Ӭ0¼_WC}Ŋ,R{>?ç市sşmvS?k3~z LNZsӶE08k! bP+ֲ #WNGoA5!ív4 掳yK/g $m[}ӡ}}r|I| t'S0,smgØH7}[bD }O|ݒ#66[D$ӤW$dAaB(?'U'[OV ~'S ¼ΝfRG3}$ dD^:mߵgOF,a$156L~OX|⯛>9˕=;Ak 4VJaȾT̕"Ad0$l2l9X*xf~@=.O˧v/尳LOqk|vHv)Ј>q>"z쏸9s=nē:lɏ&i}pdOa´<)M.ÌIVrw[>*rօƧjBB=fHi)3m\--?h.><\pY %9#̨27fu?;Y;NjY]&oFOGc1 {*kF \gL ȈM>o+ - /ϼ/ ޼T.st@SiD+9 ֯0*٩s/N#ǮSD`*$JgZ$'ơv4~`BtlGqY|"y?y\Ork!4;AhE"rO<>oB>rxCˆx@TyI+I@;rFL̂g6j^;ѳJĭ&zo{2qr=?D.գ!$tvEd(@V6@%A!-ipRFP9%GS4F 32{Tдr}Nvp95fmM<R|ڟ81P MR^H3~dcW^SHh!>[-mVnDuum+"U:yxP1״΋dR ũYr,,D3=RLBCH?&ن~gJU x.5$lDR%(¿?a (גI~taBmfn63Z\(Y4 xF}^ k`OЇ{?-4)nHL` y 8N4D^,/ XXUy.awô싞S L|Y%U`6ܻ_* Yx5วPhol=?x~W'!]`0?aD$u>U#_HŢd [=%XC Mʼ ;^1yאJHM0+GCf/G?z' i |)b4X@ER\V 걋R̢{5ʽ!wʭ󞠁ylI!G?naMɟH엽.ϭ/WU:Wo_#IsXJwy[YKI\{E\\L_Su#r7]Јq}EcԄg?ƶ.1r0܌O>~5황~-YоفhEͯ^QЫ,c\/)h.Ù\^ӫV9 @bjğf]  5 4]h Z-+?p`T9P1+zK\$bOZvKy'7(c!( +rBu~S2[37MiXQe?}z9Y,+镮M#C$2)HB)(9nLe!ך\+.A]S+O[ڮrUIأCrHDQ/WV|P:e=$3 NNn8RXYyꎡ={&$(X1Ss&Gw6yOjo7nPWH.UZaX+u<]?G_;IHU~cع*Ժ%/sOi`V2f;瞷\6E_\sJyOH7-3OU{0a4?IRC~l\["0Iƣ\:l2UpH,uGL'*a ~KgdQ10;aȄA+8(m#9߉dYD1;Ha7h1hot1PD&Y``QxZV$z szu͠\kV^ѫ̷6}Xˣ$}d2հ;Mˆbh-xRboLo;3mz?bWmL8]j Wa7%a; X~ wr/rΗDh4^L>TU"(n&Zrw{'nuZjJ%C@hSWcЎ͚NJَLvկ+  ^ŐCw]ccf,kсBDFKaM_ h!)# BK>Ȑ&Bffbq!@?\Q\?-|*ROlvMfoocK &U*C)s/evo!ёNKg[ZN? ,;?`2 @ҹȌpR?a1@AWS}lGEnV};mwS۷x=簤nz.m:Ol$~>~N_/=r I. <)Cv!{\t<\/Wъ ~{h,:Gǰ>75]AP^w !v'I@O&lhgIoPW>/88IBJ0^G>{ax |F됉(!MOJK`;ߟye  !8A}/>Q0A1(DrP_7)QOÔA?~gtqv>FzY}O䁊(m+0?Ov~_appPS'F=eꔔ ɍ-;ipQkoi9C{Nmě ~F1A>2SƅF,HdJ4$(ϝx`E^pg) r茈hUKXi@$nںLra&1n/(  \4ȸ5Zd ؄4 P &s00ޙeVCwp.0Twv^8X~I t 7L_M{Iziq*agG}@^1OxҠ$TD 启neN念Z;fj>8Nݬt[c|O'g|RsǓ -mw0ZOT0E r>5y>t^֑V1b bFgo'F"C>ñIsWen<~Dyvxcd7`roOuL9܃ %|wh^Q6cq`UDp/_ _k+>_<,5{ujz8yx \,yBeX+=sG)vl #Z~̏m1poҰ5\-|U3!l!v@Qed8?=}ÆS\{- |d1`z_(N}\\~F6g %@rT\)A*I"jIh=_pduk )!^;Ek$W؇HE=łߎH__/EILPȯW RFGխZnPZ`"-Y!`d D>8>8Am`RyS2r)o+@jo(~bHJ6qaVlQ 󵃣ԯ}c+{%lˋ$Xâld0 !D'VaedLeĚՍ+oG=/hii9 zQ Q(9}}k :2RJ(zEXgOGf?Gt@D oD hO ۃv~oݜ_0_zM/jc쭠89jaycyV6lLQl| h(|.ҋhe^L;_79k%dQ -HRyW ?Y/S/b8[)xy4RB?;&/C|__=t`vPPt&jG5*TåJufx4$*DT+*ԗ鸹1G5sSs SҨHlcr꤫X&_\V/bw0S[]}?Xt|F7a",cى*/[;;^ZݒtvzxJDR4^|E+lkɿҏ[K;o2c>f QV!HA[۸ !(}ÿY@qoּv~qOK^\9t(19/sN?B-"PW|CyK}HXjk`> sW><jVt[P i^9yϢI[r#P6D9F( %A!ӕ#<= ߱h*PB%8'@9Ɯ<\dcNp^h?N( O }/~~$lAY CQs`N;3#%k[v``A~CG2np+D>~Cn©5{z$P yA@qTFHi:>VxhCHۆ3 T+O2hmi|i{OZDT߇5A(.(sd@,ajTu dR2bH TxZ|ҫ R|?0~*Sy!L 1>fzmYrmOVNҏ׽S͕Sd4ZUam^KgВLoaUdm{,&}S9%7?^bo+Ң.SS87W=?7o`x :i]UM'//y_F?=Ho 񥋤K:P"6_X~;nQbe>Jl;v ߼??dm8W=+m4؋(aFR3J'C ?֣X}wNKXAfb}O{rL}oLTh.<.~~uU>F c< >f (aPwI *&8!"u1 ԃI^gz>w"wN?yڃ+myWxz{b}9?&`-8qIңޙ_\+2~NCw:J:;T!XNل*'Ft(DEO]*KPP8}$ʓq+U6o#i5{x{_{6竖OzBt#c /pW `M>?^6r(ґO&|z/v}oϭԧж>%L~=BB RCLkvT #WyxEB,U+uyd0&d؈B>0TvtFSWJgҧ7orX/hK>öaœ%##PGQuLLh52_$Ͻ32V+w@ ~ wmZ 33~mƟB:Q[bܝO|~T!]?ydQ̶ۀ֐mly{?;:]@IEs7ť"}9ƋĄ`/KLIMG' .@]\qt>;;\#aVOT'͋e˴w?#{/b"3@"@##pX!#c uq -6fu$j)QGU|iAi6b>,s~?hlđk?L4(W0;:o VD{pI$<,xew/@1,<<ZsjPl5%nt|_;q PoP@VF6[6)R] Ne'Mk=+!EzP OqQϠ,!5ˤAj_ /**%N׈CHn?[?M P4C| J/m"\lر^KaHhL4)glU$(XKЏ~*V[\ k9deFD-=zhJHh4EUg#|)@@nH$.J<0NrDT]aϊQcwNX* ZNc|Y?졻5K"ZqQ.`yGpZDC~;^ k@LZqCa^_.e&_WA%,m8';_zC#Vw9ù3SHRGYJ߷c7 ߾G#"՛^+$|~;L |iG3lIRK}m>3HG!#ֵωwWߪcpDܫKxpHq'7xMgqVHJ^HIZaEˈ1Evyp=.u %v3-u T8B`%.fjNuv%Dh$B3sl $8sOoMZVPkDb)aH`@BRBԽb7 EĊ%c)C :i/VR|J{LD?mAH$ĎoH>@f "~}n{7#?\ Q#bI`y }_rWy>&j;83 ޠ{s;=);S WRqtp2M4?hg4?~oΫ}:4I`wSؘz +ZGnj ecr/g@/ƒQٖvdG`#CE@޿sP@m-~/_>߬cl/Cp1h!nP\0HQ(Z0>F;;:ZO{]U~-x`h%_٧ӟ:Yg&D賏g-~ f;dA^M~\b1/`52E%oc)t>9^E #k&CяOf?w/^}3V,*@2PCx:g%:6tSisyDuަVaHt;M̽]Z̊X], " dJ qz!v]6DgrTMCi|5=;#L) ^Vs 0GNC)4R  0 tuUɟ@}^Дx$kIo$p˶8K= COY,Q]*x-Yfl6IDf~M&pѠ D ą -![#iĸ쑯f( LE)TC|\CP2#Wk8 ;|DRp*#3i~*g>|q}LX8p;i%4qiw3kR$@8~St9G2 ߕbONDsu߯8#B;@MxTOzWyr<^m)V9/c[.Ω.#+MAAg`  dj{2P{WJ< -FMgp!fDMo~ [C>7 Bռ@QV"UAcp~q 7 ||roR($ 7#vA%a/od͝8 ՖwU8Q:D\0_3/7UMHd>uP$+T#Є?һ6_noMeow3R'QHe6q!EYƠ@Zt϶Jٓ|} cyطq8 z+29hy۸8mvI}2}*|ʟ ?Yj|,84?)vj/{̣_ۄ]X :2[84PQT}iд4{1JKJ;G8 JF* 19t7Jy~.[\D-lѼz[&Fvi ~lpg~'OkےB@VZ*293o'Ƿ8.>ϩ{N;'?Qim?Vlf{ >eCΊ XQ 63g=4 ''NB/3XըYP'8HiC)2|C |m4$|JP&p1j =Eڐ' bY߃[ 3"\ߕ/У%[?N൘Fi{3#MV\#wF'}jm?!םEIlr*HsSˡ}۫`z}f 3pl' _Cx}y]|[=&!92Ê @N20FĨy>Cz]%Bp!6Uy=QY/uD\UaL*_x!L9y.џ6}ËBWj&&oi㧿scZS-u52HB@~Y ?g?OCZ&uqW' I-*.ۓ4VX>'zy^B/LYOX'B:Z8^La"^a"πv/yڜLbr /F!҅NäɋeuK!L~mߐ?Oy#CHuDB}YKJB"d@ÊtuܜE^N*msMIҷHnK( Of:fioYfz %j` z!Wn\Xr_@Q*&A[%1[_@U1 w~W lgϰH"ɃV6@@<.sI $7< | d|[_<^tK/G41wQrhFa,] 8|QwAGv]}ꆪ[Bl*K3L|Eە:\kZ{*&rE`w3^F-@K:8L̊jgw[^" ghfw 23H(Oi :*(/F?: φ҇Sy>_C~q"mlH ~n" .e5JD0'<,B~YAM Pr_Om4CNb4Ј*LBw贸=\ßm?FB%,9];SԼ3;KΫUEbZxs 2m hE֟μY U7kE_A1}Nӟ\n//\cԞ;J('Wvp2D)YtH*$@y0ԋ+A!W]3;"[ $"q|l=Ww/>^d9ZH_0}Na1|t`x޽;Hdo-f"4zxwmI70_B;Bxy9ׇKՒGSxr/>b v֞" "c)&ccT/Z¹DHxuk_~ض1h,rJ1iB$)m"$Y !C%E 6uǮaZw¯k<ӨiyFLi5/ql(Ѐcd@]]qޡfyy#:@|jc~ ='}o~K|֋P2%AǏ4.@dވG57L_ofZzgz2 _<'piZ\QYS/LOAeۖQ~9,M./|ͬ4{ʇ^ܼ8([%z] '6E6}j bU)C #H oщPC8Ѫ~BD45\Za0^/zdB\ o^o T%(@ԂT m>'5KK=v!IJ3)&^L? k/⠐H"qK'ѿt^wtOw\s+g;wn')0J]%a $% @u/8lui؛&:7* 1PoҺ;=[v:lI@ L quf-w?|؉lG`!n0% ]޷ɩ'mmnw-Sm5av4x x6-By0 #5jkDO;zmgx? =ޔMŞΪxNE/I"U^.G7/&nUp뮏Oe>19;+DgxQ͖uKYeʶOʕzL__q]+rt^bgD/Dޜ{Rd3d3Sy[mȱ$㷖]->M&V_?KڤQիyyiG?r־ }>07tfb1N<7TN? r~>CdA"QP "1~aU8/ 4B|BGVZ74+̓LZs綘4;nZNd|_F^YUq_VWFP mƚ/TҞ\eż!|~XA v=u/UlMZ{q%?;D)"?L>ҹjx~K|dII $ŜO:/VhNjݳޫ:^/vPNꃅ!W -w=VTpowmJ[%!n@L+_ݐ1PWY#V0 )ԢV@J&xۢf$ m$ٟL$`[[-F+HBlSj%difY7n>O%~[l뵱,70o=9wѦy($[H(͚Ba]=E֫մЂ81O:0Z@ `Q7c׀[kWo^6Rc˫E=,ݧR7{=&}zgg:zKOgoEz̼`GJSil\vAe-bwg(_Ynцg[@@2g-'SG^է~? _lū4xRC&i;.uP OZFbMF&Yh:s$Sk[׺ ?vʛ{ݛ}1J<zm6 ׷Ey^^O3qyMiT%6(>Hx" H.(fhQ(!e:bR+)5+#ixkky5 ,g1ZvkZ~-xw.3X >Z.O:BO~g쬢$X߿n/}Z*cGyHeۿ-o@Ψ=ʷ|]AqyM8"fj%K`nˣ c{=䰱2mBziFPFC/Ay'12C%U pc%mK!gNN't3X | Yw*m=?|D,7y׉N ٝ792&<چ HA(/2H0YIkI}d|l͗cv0Qkep!^CĪ!g7 YE#MEIs+y~Z>*jb2V D#1oPݮzOC&i&5m"JH bu}ΔӸY 0\I?^E#w/HaZ&謞D$( I@>.6WW(Q$|[9#Fe02ÿ]-iW/{N3uP 6 3:b` 2S Y!tL vH="BbIgjR\dV(d~aD Ç8 j[IPDf/5ƭ D8h4$ #\49c|~ߍʕCzƚ"a"9Px!Z1 wɺLBD!H$* 8Ơ 5m&ު: yVF=eZA^ aܥy% Paڭkcz0/R,Sv 7|M "#Yh[ۺ̴6L9p Z1P VX9t u. e iF* !U\jE(%@HZzK*juJ1¤P}^= a^eWqw[Caclnsu%?8nw!CyK7Kƕ dPW8Q}X3jVI7'VD W=k!ebTVBl,`i2 :7 E7LP"$z P}NfgV0N-CI7<dO'j| 2hM"=G:4;v9…R0iۚ[HlzW2)B+3qB7LTeljÌ="m): Cٷ_o\ ,w71%k=v98[i uQHPH>o4[3v"R3~W8 :!T*LgbKl*ID_kjbJ** ZcI衵ӉX^N~/šW6s4,PwAMxm-9qp5%s8fm%8JM&0ꇠ4ssOjrRC!Aڛ:63=/d5 y swJ^?&b$_S݆#}D 9G=#?|c,mH $% vwZ4lD)鋜[DP).5k& aᘄp?U-kx9A1(Д*a(4(ɾ~(9]7̂F7,` ]~%+/L''Iʨyfp,tӥXEЍ<1'@o+J1Q ӁĢd8ٷk|)vLB@hB4`(cWݺưOa\Yk_*!Pc ҇[XZw(<{0b5`pb8ۋŽ[PAHx\IA]Y6``pwR-w!ή K rբ:$PNH ow7e#\Tdwv؍+5]ЪJj:#4-:^a$x.RJ(^FɁ,`3_,(Pa Sҍ`&aW+qw Ɛ՝e7nsjl6 y;0 8HKhX. lJ&ңB(ݖ!ZQ78jux4 /:S8+m\zUbU$iĕ)6Z!C[-EQ)sG}Q6PI L'+ol6>KKw:Jo`S2ޭv4 ϼH#0A9gr;-/+4`fS\hPEQO&®|1{'A HBb%MG*8@,-|p,;$؈R[,Is)l<ڂZ(!;ӥ&$ E;?)E$1z6!+H ?KȊ~3I1l `:U\ kN=9ם 7Wx:Nrx&6\ K73P DF8UP]q7 Gۂj`L\ F%O6hy  Zt̊D*ئ nE "8ڵV*7@e]ksB'~q|1Y?\L%^<÷ \lnr&x?N*$[Ԃ`뼔&̒@[ËfԾ24] Ǔ !jg [w+w]V'+F$X 5O __*Ug\ }F~7<2#MDfw"݆Z]>BO.FP Y"9p=͆2ScyӋk?z* $y$=+5{$e'u+imfvN{ Bo$I.\ NHR2 Yҍs֭dRX=|KB/ZةznMC0+jr@ab9TJelJx@[`=(.aL筅%B5jW ۝:BtȲ RRfљɘH-?C0<ҁx(CP,|hr@/ DrkE`l6Xc4 DHsi'M̑Xuu:4KKy@O֤@WixtDͱ< +dET509KRwݚynNu3e\ V ͳeiD'?HZ t@'Q"U"F3{܆V.R/o 8:saB@Tdt_߿NB{k2-6F+ am2Z[H`:al pC-# -ۿh#<8d3$$lwbV6VW<# [q;w[Зnӂ֦y6VL!uG="9R-5~5̅;]zP&H\>a8l;lN%+(qZpy{oz~BuKt>cLS#l%i!JRMFL"QVHh:œ6D^\M/8VTFV;`Bդ-W<: !rh(K^<ExȺ=.&cӔ\x4)Z˖m|u4h]6+^y+37EU,+ (nYhvǚ*J=bQc񞀔r, nx.(૜D!V*˃ v!O|(m;]LUz6 W;R0fj ūkES Yqd/ "E2vmϪSMv;,컸 #",FhA.=yѱktjucȥn-=302h Pzq [m:nZi˶z#rLJ+ױ?cG%8;#?Y?ACEz srȂ)!@N*a"uW'-WS~sJ^cե@[s{{ncpz L'*araZu' DyhhJ,@qCKڥ >=35m??c>c~JJ(cݛf}B[hG~Y8TdkY|þG|(^O%0%f+RX&O'Jb@kv [&hIBIk5lLxkl~FHEBK?M~6_Ql;̇nJͅXҗvxIpI6>+[]7Uۅ~O†)TJ\Ҹ.:]D?3`~c%W=h0$#!L) mAZcR\BdU1CdH*R8݄g,_mqf}Fv%kMޝyڻ^D?Ý5EJP+p Z1A{ _ -ƝĐ*8[yyVf ]zn0y-hֵ҅hPtfcbDݞH:`)8{ _@²'o^? 6ati)6ji "  m#A`!FVfyƦ a[:{ ډXVYږ~?/S}62Eeu4y#Ù^_S E_n9[Ǧf':΄%C+VY $ $}/y.4!-p}=+|F@X$_ (W$wk\$0B$֙#ct񃌝ȂKZs8Gy:|F룏8 ?x?io$'?2Ə7i*gQNR$ "h Ӆ 5k[&gZѧܠHY@m) Tr=7n'z&m`lW?!'۠s2C}I* <Bymqj"#+unwe> CC[A_^??L6zs8i~/{ϴd[>]:s~h-)ݗ+>YK@qf°Y?Y~)4Uw'O{rU<ں$s.tݤq3&|_?@$C G&$ H8Ի7z%-*O=QnD_A׫d&S>k,r.gU~G۝8mz\fʹ&_Wy-g|fz8k{ca6~,׫iyJ[$b^0 "<l@z} C}Ws!Đ2qdsrI~cL/S}gX-'ڰ'cdi$~$}!! Y$$@HDM0ŦQ_,NIV=QumKfxp>g監x*9+ ̗"O-?Lݱ&^a O#Kz97Une:Ý;>eKP(OlzDB]督}@XHJ:.=r=8/?~b}<=FT)%6{Lf5鏿'o<|k:آ]uN8/?ws׿m =jTcH?+&kn/?:Pxx\Y6|W_GQj4㩈$Ķwi_}$_)9<:Uu \-``ʅ$e$x? dGpCAOyu1A\2m?siz4x0aEEBSp9 {]1V1@uKN8# qĻܟt` W6cSyޤO>! :"xH]oXAY OF-Ad<ޛ0[)<kGnE+U,yJ,; }7V6x *)$,8Pb)D|PR@,vÓ])ZYDɬX<.R%ˌ_GqTR=-ś% -d7YyˡAQDR}(NL Ē7k,ë=c~ZhC NyWG 1(04"MCBz!ɦu}e&~r7c=А6eG~V~= +دIKC?6"vHWwZЀW٬A䵓r\桌R*@XE &%0FCCJO[DᒇkDqe =HT-Otwr,ӌe…$D idl}2y1JH̿yq^1b2!XCrlaSaٟ3VsLUPQI*vLY9;L1`d $^-X`AfĬX o Z2 "$H !rt2,֨y mPB*eQE'Ja@9")ʫ)!8 Ѕ5r[ۚ$I )Eo0Q/>G?&س`zDMf;?[ <-4Ё H^Zmn^|_sN%Yr 6 66^SU#^w1oDy !X@_}¸ jH ݗs,:s}ގ/80}_Ev65nŗǀYCVɧb J%GS\ vƛ-@Ǵ~s?3h``B*iC)@"F>\e@7(>Ȥl]q7xp}Ag2uERN]y38 YY4skG7" Aؖ?#igIdߴ)n7AJ}+J˻5n|{֝5's!T Iowr@'؀#X@Hk'HxobevlNr:T0t 1P!y#T%rW*9D K/FfHNv)jF|@O G)ffNCL)/k*Pf+vkݵMnoOM8DWo )6UݥxV5cz}mJ6jVꈚL^Yh'SohH#YIdܬ@⣑DJ:1K&7A9<=!rtz6. T21awsSrO:]~jyG1Z"KUaF>yáz+S"IjU^JUwNLL{Ջq:={wzD v<U'_j>N$ly mzav >umn1&9D\^k pH 0%ˎ=Vs^e 4RG3`NB.HVӎp&9̄"0m@s041^|@['s sΌ?s%u`Hj\Ea a707%= Bf Ow+daư%@7>A'v^׹_מ>z pd}!~jFM>i;jB@CXDҤ)9-,J&v4c +9>17(10)@DPEu|#Pr}Y[;?5נ0Ȓ8!6;B2rpu&tHQ{SNqN,w4r*.Lyk\SRtV"x=YD ŗ@Sdl s+琞#\xIAZǛc|]N^ݷSh0 Yr.;C[žs:L 'K W0s!W/ ySyleD&BY'BPƪӸE;i>M1x:zU2#{RmC䁚s4!%RjN-Sx2B-ɮ-:RdK,BiV-lu@JYj]g9]2s/2޴c%i!X:s;AYH HKȨgZ5# 4- fة~$^Μe2* t[&!MDFWBOZ>;^f=f @ ={ޏ6ͱ05ogdOpH1E2Qk螩݁P(ԄBk8Ke :j,y7ǒ ]vsX|2jp^pO ·c  MݢQP*PlpBScW]7&ݭ(Gڇl/ll|{Rw3rҎÿkW@j\BR8QiL4(+rTǦNG cW'f9f*esL豉LCIBI7]$oGN [fW1bCO?σ<-5X!đ1S@NJ15[|];y\ K ؞ϰJz,da}u}/.0HX&b6k0Uv5a|;g,Sй˷?NJοi +yy:ߵK\<6)5/kr>G8˂{YhKSa7>ЁBy2 H@.Y1NB+7 gݯC>rh:>D? hVp~4 QBiy(-ɚG'LJ7XBhIL}eoOs6 Cըu{1$פ6Kth8&LKz*.Q)RXx?T+{ƞ4Z'ܞdT> %ou5se޶#ީZ5<8tC)%nVjBkxP[j?Oyw;q;IK\gz;i?5 o|HyN`>]B7H(6 )q~=- qhFe`~LM\דy@D2*`]*  85cOaty9[^w-n402tn Yp謰Ј;|8ud[ik#qEX^\\Gt")ށ#42"=4 mvOvǺ؂g7Eįa7hQ H x\B0 &~`Ւ[:!*mOMc\=qç{q䂛so^dRL>Beq$Cw^20^-C l`VDJsVW ]#.yLvQ{d^$# % :>k7"$4B@ohy]}y̛. l ;1-EQiR>);+[LưX@@W>:?0Y R: S.rXMx܌ OLbn*J D uox C3w+ '9ҩ| zY|>Y Oolպڗ:_Ԭn93:\-MgďMsMm{N2[̭5']I$6ζ%7g.x)qrH'@@$ܤz/at~+ey~:@!1d= ,9I⑔BɵtAcAB#/wIN+OOm-N1>7D Y Jh?L@W'w<6lDG}UjXbJi_qٚpgxtƆ?|"I6*Lr>;֡Sg~ 7ׄ|BjV%즸e1O ^nT?! E}'vr7T[{4ݬ=;co_W`b=^nkh㝻Eg_ '!v_Z鱀{,F rD EQS*,P_F{~C=<{F :>/|[G_#}8G-sOb D圈@'ZUv$ A"4B2@6Mk PZmR;7|~+ &jI}7 vm߲“ ^4(7{y_ΒjiJULR ^G ̴9<5_g}_ydͽssk "/٥(vqޣ5Iק_0 Eۍ[ceeAcmcvoEPL{8|ӷEۛ}b\w1ݔo<}}buep1IyOܯgHGIvW;Wxm`rڛoF^sڸf_&9[Ƴ+xZ.b$$RaF{$@ | fMewvzi_DOFV |O؀뻎YѐD M{wfz4 8,pY'{%Uv8?S~ >É.h)7\Mp .}g5:P`0Q2*/2=m &aa/e!'0` @QPMțt$00HkR\p[23#o6&% ZhM\HRpWk!d^*:;4 `@´"bW2f ?:p\Gq7a9P #  vpisIқz'|3򥇾b מ D;TvX>u/[u|fJTgaS1fvNv1N( uz/vPG10PHa]>VWkFMck;< fẜzzLr}ߧgL.кW$-}+Ww=uGw4ki2y F* ~PJvVM/eCޘzU!<}mO:Usqq漎Z st^<~@ VR e}v9UuGswg/I=ƅ 7 DH "@>6$y W%՟[B\}gͼ-/~/UԾ^۴(/D^QkS7/OcD @Γϥ.-UW-q j" Oچhhhm:O˭|?MEEQȪu ;gsǴV[LG~䯺l!LO6]oH{"wn9Mε홵?fUM$NYV{?ߟ?;iED&B*k) 7hUE`c; >{ܝV]n3`$ۮҘe 2 $HR-bZH&w46l >jr_|k2J<_ȣ2^I.ҥ(;:[k?wCkyuӫӠ L4?]NX]NdvS.垿N]mRb4{L\Qakrd\8 iM(ASefM|iލg ^=mͯB5J-n|-^n=fQ-p{zuΊmV6C}",e÷ z_sLddv0}׌;\ *7i568my7c4KGp'YOm$}C !?a $$3$}y'uLwlq|_C(pWJF/%@: /OKA%8d[1 V{8j[)ƶ[eʰpI; S=WB2v\^#WAa1Xwi6KKH3Utݿ?1ũnpx8zoIoSsݯDV_˕^3Lv5ߖن_:.?{7xuUuUfkڷB,8VJk\ bp@GZlPk ;ϠK|l{Iܭb d[ F3(O+g/K՚wNJ%؅3iߔ:e׌K󍍰ކeN쿹",enHB8불g)4ނ$Ʀsaնo@u\]Q ̲WS?Cr䭧,&A*8Zd-j]FaiBz}"E*Vz\hSgM˵͞Udǜ {Wٹ& ̰^eNTƾ^Yu{әIo|n~ݗixd^)17jYBK*:zW]񛉕&lZU!'w9: eE0ջ `m̵HS5e F]ʅIJf\r@D%y2նg As2{] !vnw Gd@"Gd$WЀY൐B5 ]~-=а~|_E zꌉp%JLǷQc$o7uD2=qţ R~`W;[>9'_.HxBo3'}:vQ&J%L0 )FD@%Z4k8ȏM{ګCur[WsO0#c?/Lj/\/F#wl4s.[u҃ؤrߟa6t`9?~nzELug{O.z 7fo)Eˌ:|-GQz4m5`2R̢.mWufc.j̗j Ji#-xL:tkҎ-m~[gFfíD6O=dz91ؐcw^ZNOjc Alc}2R`ˣ{, F6Ux}6R/YөDp{A?goX}  v+~? *B͢t*@jP(=,zuϭdm*8zCAP[;ʛv[3.1qPBP=X|c^3h^*2 a :Oɶ*UYw wৗ;bF{m~c*qC}7~c?)~083_F E#ߪ#?\J0Yd__޹OTlя=ihij |Яo芬=t FW_wN~z} si9Ŭ&,h]/y>~~~SCy-c:81)$DcÃ~ 0m Gi>ܢQo tq]ю<^fAPo=Ѓ*- &v"$}+(rbvöFAinC d"RH_mCkky`M<):__'+6`3Nzv`| ש@BuQ J! >@KPkU ksϳi4W ʒ|%q9DzC)RUG7[|jlwstf7oCKN;8^EGP8ljGoM'e=^f Hҫ`LA E{ >&$m$]>!i S;11Q_tcu9ўG}?zxQ% O/p3cG22֙#R{Z1E_L/:6kk@d/).0ȿx,6܎"qdSύuշ (x#T@#%QU ų^kM(ypthoLWǻk EFnۏZL@7%0HQVk>\fD[)K.]J@PV_xK> '~O0.h $i"ѼBOq[Цw=B> AGV> /m}| }_3 ˆ>7rЗ_\# Ҩ7Tͣ#^ 2ρ1lRB#Az^C'cBz ɉ_0S,4u>K3g j D=Q Vo"sQgZR:ET@5[ǹ] s?}}4A`v? QfU])Xn9:ؓnۦp.1$]A.' S6Zfluzi⸨9/eo.%O,6*vp$*r2 ù_t8^XJ_DoO-+[o7<7:-zlφF7Sm]7jo oc./ߞnYGߖA_XMcމѩW\t>gzvvV) 㤡~O,$d>k;gܿxc9#op>)̣Q!u?o{}N&:ZEm} }<.{gv}({ݟtev{m;}\mYbE] y|S!h  h)5ۘi]ޏ˰gA@xY6My;=}pm9`)LΦvUٶw4 Z<ԝҁIN[»NJ6ss[6jÖ@и2 qѠ 8Fܳ).R;smmKv\G]ڡ֩FVXvۢR]Rpԟxvo]ځAPT@lo&z ];<P%IR]VMmc:1;餥Z4%m'L5`0cfm$.{n=o=;ִ}MR@}Dtk w n{|g͊àk@APυ0:J_w8Fhg5_u۶rj7;]hc4 AMHP ;$${f뺽\jmϬ՟wwo\=컝O^}u`(P4}-ZO} \ 94]ѹf ;ﶚYf[yrܟszҽkEm&]]=2e^ܺ:X9VtX׹[Þxq0AsknZrj\\tԩt#`pV܏ŬITn+|y]kBV6n3`H]G#]Z$[ :<(DE Μd|JPb KG}=Zw% A 'ߓuY\Ica$`oMt[wɷxq.e3  yV% %'\΃DIRFVGI Bx<6FJRNAiu$IEBDuF^vYcHD*kYK^wUyZCd&)\rb$I]GM^{8 6op9dK :+#\ez7 kbvg~$ ` XjdB6Լ7gLdLO1ZN)#m@5AuC|3̌a>U? 6@*^&bH c'ev>L"mj,8xBgPq 0d'{t|@NPCk ]kKCEdw8{I_ޱD^ik m%-܎#bZr &J&iK+ pH-v/4=h< 6,Ua-جF "XQRH3@8@@"KD@ zǏGyۨ/f?8$ В0gKi 5gNJ7gc([kK_ 3#lx~ 92hf dD_ kϑlUJƶ|[ p$`$$Ԅ !14Vm{+d3US1)>|{H_Q`3f&e "Zг=㱞j+͚UP'm<e`nbkk՗潲K6[&>"Jn"Kuo7Z)٘0}ht$r?06f}-'@,o3^h1"!F=0hoӻs3jm?G?U7М:TI!f@ EN'gʙ&uug^Pp4dmx1}DÌjJ ddfac,15e,Yת9>V6_wcSA=E @@3fffnQFF橬/{M{"ܚ/ǝ*EA D.X A$mm=ٳ4fϲKZ`AP3:RPvJ]Uu`><:.W_irv5QPdtht>Kfp5]/1AӪ^^3v $A(PLuql--f#˒̧ V!1y{$"鄑dG3mT>q]NϒՏ3wO=gbz^Scg uRƂD+MREԹ]?k~RQ8& Mz)郉 0-jؕlM)^5'ļ}t2w;Hۏ덇2wft ǿeUSC"%>‰kY[Z,9{k[;D8U1P"xnw*FnHq"!ݾYMt ٳ>@ DP^*zEFR{"ar(PĀgu_a^&vzEa\j(uP|m囫߀ EBX#^xNl ґ74C N ubHD`ip'5~ag"H{@$KX3`9mI \GKh ӘfζPF$2Hn) {e+ي\%1GPȔ1dY5,Ȅzf+տkL:]K^o'pFM)G8n͆UA@=H(bΖTe*VSgέwYDNuSƸ9X)\w*ǼT1=}<xlki_E[^L=d/[a  ;J=D_d`$mwqCԺqO"䈌"  +Dl䠁M@&s+Q6tk6> yɘv:;sɓ+u]y-tmko1\jt(xhGO3Zғ{ڷS$t@C&3mYΑ,`!C%G2Gkm7Hw>y4Fxθw$u{(-\}YekOz;sXIWinDqv^)y:?Eba|]hiW'ej#p"@f$@c5OdK}1iꇪˋħ4։'&t~Po|Yxjvf@]O\uT'9k]Z4)~5 !qU@{{3̂! E)B[8~= ĬzkU. U5ȅTvTKJ  Jܮ1Yۚ4 m [>U?%[^GɆ؀wШF߁ muWQؘkJQEWyk!aH(VTLK MH6e 0E({.▽7Y¸d(mz;Pe/{L(z .%ԹrAKuK\?||6mA[-kX/E5x}HHCnٻfh7B%JFMA78urKhs ` MPcѧ! `jqq@ġb WQ l &0^Q_)k%1ąH`ʒ}9g ZTcтA|;6D5~Oxf'Ũ1E{e2*30@4puqoT@/T7ǥ9ˀd00r˝pa =' "DO0p0cV+=e0=05!H:Ġ "(D& $6H o`D$=C"H.qj+01Th!PT Q B:N`TWF"*UU(U(QDA1A8E"("Xd"dE54#Ā1XŐE` DA DW{ 0`1QE$XYif175k{$X ; ,U "AcV""v" .*AXDH" kU$X 0AEF F3Z֍ QMM +!R0TEtMf#&QuQ]n"dPu fbAQ" DCLQ 5͓kѣNhf捴ٽdٹHwkSAOMeRI6j){Q '2r }:? X4ɮ,:fBua$Ok> **; =*+wG`Q?lK [-Ƭ_mȆqM{ޢ`^9/of4(sS4 gm,æz".zE_yF~,SWr:uQ@ RL1{uAŭ=Èm|Hs_CwRSB D 4|x3/<_?4nW~.ylzoY%A "؜A o2mJ _~Wdm@jd& 2I-A ge]r/J cV< 0qng+bX59,=֜AcX1m/B},g9їk3N_w,nyxC$IBq+p DV!M!9[zX>^UJKD Utv2x]\KdV6 dIfaYihT142#  ċÉU&WNHUUFyf1^JCWe!1Xꂙ{ ;9*?5o(ࡥC4_AKPqr5&q)8"b?F[Q]VxME ;&i18ut%P>}RտGJ"ݳβ&VM0W~|B`ixsB}oz{Ac)le{lzZwgddbKLa_];RDcXʴ%^ו~IJe$xp`jq=+Bܬdma ϟzx,J9~$}sU!\yX[n(Iu;_7}m#~: ؾĢ;{~J)ovZv'a 2n~UM#DS2d2>qz<=cп3&f_d6NVO@ AG~&\ږ+t(MDv#n(s{OϭNX#GY= wvՌI^ZlF r)+@<ۮ0/o̗?>1M=fIRMSAv٠l4 v}f; &/0 dI Z`'h|"5O5EAU" ,TֽR=)?_\hdxmYB* ᳎ݶkhbsoUuʺ$P@PFu +}:o" E D .jNCfQ} Ǥ^V9ֹR#maθg}7 ,!4Cn0PY\ߙC4M0uRļIPwLeys- I-, '|KƼxe$:iAh(6-! \~0ujil\ K[bA9eBgz?[m cD@FN.c?o"J:ҀÖ- (8%~`oW/ L0 Ý alTQ=<~_ߵXߞASk A5;=Fm4<|sVHnrLziR˚dʹaz # #9/[Rƭ+̻W6 jo`v}UC&奂ԍ[,{UO  c͛K~4S53X&hUMt&2t29rj!S|N+5tleqt4H`kn1i֓iw3ROf&Un&Y$5aT nTDM`ԥT%DL1)ja"w^C?zsԀT-*I?%CBTP&p{3fw?D㑡@ ??Z B'47dJ]C4yKLK8dlC\2.P?.J6V ,/zɪd4SSNӻ;!a539qf!dYyN99s4G 38^4_01k:\@n") 4 xjŝs[̒SD #n:Lm5C~:mgQfJeV@0LSIn$\L2d<۹6c{xCi!IX@$t-^p@q)&6y΂u~÷8-)xPޭz(Βz/D.Sޑq- ǻ ䷎m:ý@*A$vW =xxwrᕭ/xɈ,D eKYiF/nH,۶D  L/)vWZatJTm [Z4dlZޣe]YRT!e]qnjj 4x2ۡSLb7XcZ0bfɭ4'KP62Qh=\of/%VEK35L=g~k׻L٦NՅ!]E酞Q8; ABв|asO=gMjB oS^{Z,0e]($"5qo'6NSiyP3d4<:Iۯ@57:fh\̐lX. w6QOzy;۟i=\Dw ÷NGm^-yCAddӻ /ʷnNQ@XJ8a۲DW:LVs 3Ykf^_g[M;]knUBb2m6m+vh\"%ݓWy06V10e k"[ A݋ j]FQ5qr&-J 3Q=a㓻 RRk&~>xԅopBA3|ipX.lM3<)ҕ$ABѱhIU:DuIy8h{vRP{R ,uuՇ `$xr F@F!K6W ?2bF*E]pB(*oeU$5wΉYM&ϝ{d':`u_M ;XP f сkP}wDuv s$5b&狢ܺp2c14b)&;atFr6Jem7w%_'JOY8Dh-06xke4t;ޝ7PMB AX(BĜqq qw͚:YSd.^7°b9dbYFPT3M%a U0<T㡱CX8&W:S*oJ̒,5EֳoͮHJB, &E6DfmuаcRG e}1!SzTQkW{Z98.yĶ,q {4̹{ ޙC:OekMn Ǩ1 10Ȓ͘&7dFvlϝmy'uuI)b$̙fLv. Ց&7q!>uTVHf[㪊0f6n5FI:Nnk}?]O9ZGarpF[+$t㈴| RΖGY-$ͰB^BeTB)?R_XQ*Kd?\R0g`Y5,ܳ~oٕ >beߙTGCT\F@F \ܧK^r(mD(fTwr4L6j %ap~5BXdcK PZk ̋%2biZHbb-N`HzzPB|xs'QP=|h7$P /e%a%>sM3 O!+䵾mIc!/z[ϬX0H4TU'nݴ'swc~/ϕP#rJ[|O"rszA5NuXj=j3(ד[δճw?K$Zk]72ol_[Iْ'[.cօ﯒ͽЗgZxQ6onN@B|Edݳ |U(ljp[} hy=臕簣 j!sgvp߀µ MXc\)]zdM2RVVߗA&1\Pmw<(T:޷T`7Dd jCix T7kSn"Zfc%:cbZcWvTUvhsZ!ʨ;2،ldԳxʣy6A'%1| 24t*1mD"?PECs6P8VEh@oJUI9 //. GK57Wv IRXZъ}Y4wsM4Pcx߿~Ѐ4[waoa0Q(@jR-JwQU:k&fڵH8*Kǎ8̯F]2 l_ʢeH"T DP]}듣+1xq(PۅCd)鹶is(Blb0Vft;bsspgzNDdbYR~7 &I7$ow'38Es?>ަt{hg 8%Jsg':(?_z'5+;.0+O4- *1n{=?0k>Ρw={^VŸUahkmVc_[sDΊ?.׭LyTW 1sQt4 -$&^?*XaJ<j\6i-J{[5}1~^^? NW\3f ~$`{_ۧr0N7 oUU5Zd=AHU[taJ1׺#}g{ G|Џzt (=$B" beZ ! c \z\ _#%Y%>s߉Ʌ}[ <"1Hn_io=2 qx6rU,5Q)F{Y] '_a@^9WX){+D Iy|^'>ɒ*9rmr>,/ƅM~ y%W7|W_cèHHHFBB $B 2"[\g9޳v=70k?mْE-2b1GvLҖŎ*5SkLLXf15Pk3~C˞$28Y@VWozRA3aDDL{.;<5+vWr_ w~?:z/|tίwv>VZ=TGHf-6wM)qurva3_Of195w.MJqF\Ofr{R<\?J070I,H֫<jEmRLaWR-5-&dԬwhwzZ$qVDo(r+뿉pb_sc([Pa-aLրo9_IJ2vQvܺW`3Q7H\L<(VȾi{ Sd䇙Wvw"}#G;4Ԧ0 5Y*V?џ9B`%%5( sX,ݷF~nQSMm:C{8ն~2RTܩQȫWn# *tcV vtu~jg}W-\7r:i v7(!Q4;pFA;lAao3/~𽯯@'>t5u&]S +J5 =VV yzqՋ9v>&Yړ}~_{t[HGvc}*Vl56;$f3^ޭmyz:G-`bK2;ЄFGCҶ$$~_bN"!S4A%AF I@ {_/eI:Msŀ qঐ8m/,Ò^!Ր/t!& dU:&2eYY O԰޺kS hݜxLկJaEv.I)<95r0 :tm 5Vm:U !MnY!x"l8MJ,?qZua˂p lSZ0=ipë0z.вhIyY4k{h#郁 AnS=cP{ L4=,QY(IVmbE$c$*mEv%(M (4IC2UjA@4i`dՖ ml5ù/Qw^?NFh:~CZ@vFo]QL2ʊ 옘8" `Z'b4$FPn w;ӃLyoS*~6xpRn^ߓRɌ1^60Ypa # 8'srWף!Eo-dzh'X|T)dy~h!_2 E1t՚}TȚ5;9[s'8p@nM또1D,!H/5-]GÅ~$AIhקT)'}90`X,?V'ÄK? V*f*J)<F T G>u@5v TyQ4ܛz`ܜZ)PT}t64*GI܊^5^ѕ (`>L9fh1B3E2sOv̾5wEx[ hfv&"4&hV\B('ri_Owſ…e|t!!q`NZ]_~y dՐBV[Mb".nNm+ Hmݜ['07% aeJ!`jTu(ppRfnP\;6T}NbzKۆ<}kDuvpC j} >.]G\tmYys2raakqçsoF6%wI|/E}aȍCi=;Zَ/ ۡqZ>7-5y}@~0沑 (ebq^m= (565'InG"2'2e]֏0KKU"IEmyx'ArN-m}tkߣc}Q~$h)DՆwXd߫ !sSn6$jlwkO> φً{~U7o-xv)YL1ϖoj\(~LtlLT(H?Voa'couy8T6?sYG[{P(uQWb5߮KUK#wfNʎds,lwΫ@v+AhѮKfGʭU>KpYHO~jZhSג臽{wi|76ZƉoG\Iza%G!/! Zm5,n<UY8?#Bj#Ġ! je79دOC4/JoѾ>l}ڄ7K !o )[uccW_%#A)^HY#=(KWC{k!7叛'wjsON8__ ƺ9&=nCSA׫->[낆ͿŹ~#ČbvC}W+\]Sja Bc'mPN.<5Zك2Y[w|ᴰ |D T9X `ㄣ Tgv "? )qn$}ܔ)1\Z7+ݲЧ e 믛ނ" t- t2&B >;,%vmFzMWUQRR|d1t19WI7Gv6r'{5(^_;/O=Ą||E)4W/0ǭ뀶Sۑ5[O)0-: T)wZ}&Z ]^UMGߖ_,! @Xr iW 6b>{tuT %h 6őЂ+ CH C}(g3eb 0/)\2)j/Syel6BHyȈ"A/ jŨlE/q:D!@b6)?RkbTGM[~<@@cCT}>P(fKľ. @p EP@0QQ ё:P3s<ƻ3tfUa^ivƱSkO +]5-欋ZM$SVpiH`wΘonNpYc.H(wNWri 9%8aˑfeg9@ ƒKc@Jcdl]w$(MwsG[zo x&m3=MS68twI9IB[oGk]wT$Y!A@ R+vfN_N:^ׇ$<;vƫ9S2xh݇*"6l"g=;vw쭣J&O9ӗ,55ĤѡEC54T5 ;-'{LbiQY^@藩@}W;^u6 # )E) Y{{úPDdIm,2zY1طCV’pU'ûʇ/[a7[KX\2*:殳Yb8;. _tbHFKTmɾsk`k,ԯR`9` xMvxɇkcM`̯`l&6O2}s“< N,X |]77QJC(USgoyF^DW~Q0F^{*B1JG[&ELJ(C\$Lh&%fj2knbV]/Y'g' Y "ެ8yd '~;?$kpqj { hz:$m$` ƴhoA}6DBok85¢ ow 4 wI ĝȪoWՁUŌ1Bp8K ^+~w2`ȹ@. O2 d MoAӄ-ѩYr[ZG +3]k?z!ֆvBq{[Wd1lXOŭN/T̒h0GS羣MWiqӎ^{ݜٳVD䄑h|N>՟JE:3/'v7vp7UX 3LZ,׭sx Y's5˕,aqwE~Cn Qx@Swq8ը,teB, -C`l# $&܌2 ڄ,K '({=w^泲ț"~ⴛrll"{5xǘer҈"0oq0%t:Xם l;͆f" @clĈɳ&EfmBS/\{*3(m шFB>ʄ 7!]J|Xa h'9RE! qKԫ@L-6`L%˳)..[p$M&7wz@q<Ie!!r,]0t&5/Mp4QsZsѓtA1<3h*T%I&2Z8gs{Nwv&27"ߛHO fI-n 47M '>\CЊi^/ kV~GجK'SΑ`{Uȅ·U[cP2eI&ly e5CWI fS=m04n&J&FB!:5U %&~+T@UKQ$69JAJtULHI{5m5٢+b]ݝi,#(Ő+N'6l7'O2Y!3Y! 9FnI\vzGLUsJ L6I=.3ExP^1mR#/)e3h0 w0kM`iMJ6%z) 0 IUkd]2Uΐ{٨hLHpJS'"אe-bGڗHClpkQvp% <:y#EF(Bw8O'G4 --7 LՂ𶀬f{~i>R^<Zq~* |l0rƗEtJ@EjaXEyU& ѕxeu[3O7 '{7Ѩˑ'ֲ)MePkf`8{1Uu_设Ǒ`g4*"Դ㹜3ѿמO˜vW:XX{bqH/˯?K<<}tҭPzx{qYwPPn$6]C(cXvvars3<2z8Bpt]Jbm#K9C%!:'_g36OUUզT AX FEP$+!q9lS9ͺ,f #xD?~rC5yz5&sL2fTe5n2)1hx <:bb+TJh63Zq8ߒh@ MǍY4dHwՃ*LL -uݚtuʄINf>baJ[ćg0V XKFɉADjE !E T!EMK IdWHfWlۣ>Wifybl\^,S[N$:^Fv`M`SD 358nH^n'DhFu5k~!|\$2f>Z95Δw$5 1Np-,͒a EX*!E:rҏ$g4U@YH$" dR3MlUEUd{2UUQY,d`fX蹱2"1@P+?m U$z2 ȧ D#Ɖ c 1A[fBr^ _/745xKGlƌl̚7"&)\<🀚lIMlu[ј] CLFW rH`3ϼ&.4֘jt{ +$A:'N0{i3ǮSI1z53Iv()7=wC<z'ֺ(EVA-#ېeCI@a 4֬!i&ア t EKrC xV^"o4 B"eIxxH<O/9Y:uF}er'Y̜vN4rInLdVN-} y=q&LęM,j_vf` %7G0N~Nd*NjKJ=4泟G]kݎ4ӧD)h9LZ51kp Cc t)UIjBBfz$rG00e*/ 5 Y7N82Bnt@4g@sdoG>yqŧ;(^.3L٭]#[l*tcdr;u]]6s(;/6b 4Q6ّvL.}\qž׆*dq{[5zTpĻɤRp9jR2;1PH' 龈z5"8Qa鞩5UGlLD b?{.\:4Sۺ2 ZδDfozן:;5=ad"(dQ+mW?ꄇ5fP1 )WS( ؎L3>L0Sz[>\8Ĕi|h,JB [H̀΍t0N PRYLsbJ,zaG&'[s.2CKg1Ax6ŎY! mþv٣9kM߮u@AMS#6njܛy S^h@Si>B%W7 abJ9EѲMJBk*{A+J "\!}Q=Q`38#7.W 7v`P1eg{T^I@=G}ϻ|B`bQjToj9:R<6 a{峿FaaD)0;씋j$W<6d ]2x%d8馛j10pMzL8Or)v{]ħ̓l+^5ֲ!{}07"'?jb@E w=r2Aћ&便e"rd Bƾ^Cn޻QIsp  -p5c`aPΘ¹ɰNp2&Z(AaCdP"9`W+,D"UHe{bŠ Q\a+s|](oe ,B +$+Ј $iBÝoIK-n_mtJA;:1 gJ޼g5F9O78 >}5jN,BAyYzaΓkH^3I7z|;l(\h)!b*Rf(J{Ruz nM @y)e2s"Aq<&!0A&J [xj-QUDkXiQoE*UŘzjhᘴ,u42nkA>wcP̾V eܲsۜ:^}ם Ǧ udp!,wz=iaD}7rpztYt3aRmC}dǮM7F`flZ>ǺpS|y}C2--iL-½22ER7w&sjixɿbN,zura1- 榕 1b1 LK!Ec*wA *d)[s(lw3".q\8 W~}Կ}woau/}<l =mbD,6KYqf%U9N_bG +6q#̳ DEO]ChdoVɃ)|{v v _jdeMgX,* 3hcE J*P& im}HT{㠾3K@8y^ɥԑ+?>Z9(77J]DKO0B*H!j"p:.SQ I :|1m:)x&-'@1>\^KâpdTP!O?`iXPcn S eV[͚i|%ʫ"XH,!4^;Қw ;ju.@s 'vֵDU4 s VRw~7͆ pR7(vI1TEIׄTφ]dIr$2T=p3`r"7(!`H4 dAvyNs|h\Y60ֺԺ$t&@`E<:0ЭHisYFGV]RV$Q\`1$*T%IjVP\)d@X3 kS!mc(wAt̜kI@!ӎsl.n7 y`ݕ %9o_@>ҭQj:bIgKc:8>(4'Xζ;DdZ))a5HBp49m+V$E* t+e8K <6{W{j" 6kˤld9vI=f쇾,,䤎6 S% Xe; 9 ɩY*DT ov7׻q烘44RkD`ú{2!8/b,N;8jZV<`tŠk@kdjW(rnj oX:60n$PTOOv"EVTAI^w>$ۛC{1?7%%Y3EG7\USS#80M\_R o49֬/E"T19 @nMg *Ll,<0⚞~pÖl̈ h<%ni j<{G.Q /#ҙ @@t~;_H"$^ղp }83@2wBLadRųW+CÞ<-jZ/?c!ak,@ % 6yu5^ j - yM[xrݻO`2>ĞuUt%JT&)lt͇ K],B73KDP̂P-Ni5! 0V4j4Tn|_ϋo &Үt^}:N\P 5Hdd,:d˟Nǯ;3'Rm,HֆVG*Q4@6tz?3gI:#9sie4=eC80pr.5Zw40g*=2KdViYR ̠p)s2GÈCNuɢ$Zg S2-:%h`(T4I4/l3HUREh+*W&Rc|7M?7~w6iS)l@B f*Au9.gƿoύ rWܩpMzNۣ[r7l`f& &j^l\w+g?Qu{;tNPmK)d^bb(:jɆCUZϖ2MT^AyJH]Cgd` ڕ" e*5rElH <əz$P@*/?]0.^1Lz^mf3j~-V?6Y@DOy3W!8% #`ʖWP&q i ,fC f7;*]s9z1,?qkV(E<7ݶWP7,R!@1.mL.fS3eH(L-/fIZ `L j4$5Dѣ!(2YT|`#+X 1W~Hh9{%YMR̸̽M~)`\PYa_Q˨yWDXn+.{0Z$DV|Pi<C;22zݪ Y=5fTӵ&ei([%;7b'k ) -2ޮJh/=s4o敕wn0F1+eV@#B(- h;DN͞sΎLiQ-Y^M8;{tNS[vVh^jiv㻬Kͻ6`(o]$9ոkZ`3`hFaǧr-Aۄ\P6UkPT}Fu^䂘d;R R@]ݚ68@ :3K}0eOkq(9!$t$,;>Rȥ)Vy$wX2[wzfcGSES١Mv&sB{(@wp@w$2&LC+Pu^R 2YƎS5zaiԵ -Uj-qNs ~DNȂآ va0S2Z`+aM,fhzaM &H,B8+inC> kӚ HyZ5ï@LZ{_6nl΂oޡkӲb#5k494Ѿ9B3v"D a $\&*":\3(l(foi'Hg{ۮ]McMkm ̳w2fȓ@#.e[a _fbF[c-3spNYcˍNݘ3͓Ltѷy!:XZAf %hDG"|Rc\vqi*ȻVtr~Xt$cΡc^Y}^z7J2=>f=&, irdr{+Do{:A2 CJn̞[3L)ipbvjdO[kÇ-y7(Jv"M~HYkȆ3b#kY|LNJYC[eSr,3T!g5Yg倳kdyl8s.MMV32*Lhk_N 0"r@g"P)f4Aŀ DFcòk<-Ӵ|;Y Q|snNEHPXa (qLQRt) 6"Q@P߀s|u ߓ1gj15kN.mѰkCl'Tx(mJiIـjüFLX-LRK-@Lz4/0h_*´a 06Sb$E9!{bDy*BjXvn/kQ#?JK: 3fQN<ǍyKk5ny#R=5́,F$-"MDe;HR ?AN4|#\.y܃d糱X Luz'&՝3p_'kEױ|:pxAnc=W䁖c!,r<s2"!dDLB<DŽjK J#O- xv q-2EX DQ ^y۫ g"G'o.jX;6UEBPzQ$ A aB[}*p^V&{C frzrJ Gpj&)C0bA1ɯ{Gfz#$+ X7C3`k=i*ҔB4CC%E7uެ&s hO$:3J:-OQ(p;fii`F۷m4ÑKUh1 ZXYHBRLXHNe~[0w;`^}Æj^:6`D`9WGO2>qP%:&Vn88#j:qώ@YOO"8t}5aG=UP[P"{.x$8Qڲ[R6espRGrmCnib6y[[oS#վj`ixfhk [@j(Udtb;LZ XQ΄(c͖ۦ,*BC JeЪARG");IQ}rɽٴGn:;Fe%Lrp[&$RE. Kc*@(pj1#7t%&G*44(H&S䑮%s`*]C2pos_  !Z+@@)뢈xh!hAQ$TCQWU0UbQ@N"!X *k#xQW@Mq E qQL⊧u/"""4芥)Q]Ǡa5]mhq9IO1zL6(0|%*Wt=W;E`Ga jՃC¦OuK2$х!SXY U]-}9tnF+Õjj0ο(3kxk??#-:n~v2ݔt"HEYO+CR".x Xl8A>@Po~kfkw ]*}fT竵|{_Wb'@`B{(c:Lu-ĈeA' y>G+h *pj)wu./B#v#hj TS~N1C~ edDDCϱ"@" 2N]үW+}.18-oB s,FD@4[>zGFڀytY} DD<`@ u1CgiTmHFtld"%)B!Pt҉;tAY6&l33!<(9E~n,VZL3*UCyHQAG+w0-Gl:\M@`~pX@ґe!戢  r9K\DSVDLF/V X,vZ{lȨ~n.DN3l*/*|TCZㆰ"np?N`z([Ro]ȆYP1QQO ghz<v9H[/l?@9x\2|D ":{s"k Mk9`E8)DshG1} DO}Er&h8c~DMW}E?W(tJG4:n:TW=iA @TBLbP)Di $PH!"YIH REUX#QdI!$daH0XH*BH2BH+ "F A iTB"(P%DTj! 1!$lEu<ϪsOѷtʧs^ +^]rO9qj@W~Z<6Op<yٴtj !*-6h쨮 KqŲ '@//W}'`͊'۝Og?M`8s?S?3~(:^[w *JqqyO9]d^Nsl]; e !I9>¼qCGp>2/TTBcO(LqI}I4"Ѥ|DD7PyzT`.,`ì̚4 {=n' :>7U<12xn+2@sy5 ^]҃|kY =C=u~xaהTwCoԐJCHH V,__oJ'64@R CL. X/cǯCOMU"Ua$t0]%C퉱r̀^_"='1=MǨdwٚ %˪֗h#)9m`&l`爿!V2 !(@0 XJmQr XO`Xyn}Wv\:Gˊ~}bZnfe`D7#٘RQcS%2ňu>2gIWv/}8?%!w [lma^b {Vwv k7߮C}zS()3"sk\\*EkETiTVV\-]]jޠ*/i_ꊾڀ7Y%=]pf9dcx(0b[2"sd|ފOTI4hߜW`R$ RR&zֵx+3(z-[˾>:kڌ1J*QUF^ߡ7U4GGQP1$a &mdс02,R3;Wh';<-Ƨm6FuGy5|}p " /Ɯp!>) "jkn|G]v^>gdy$n6X,d(;ݵwݝ ƻ7rpN0w.LB~+\,R΄ޤ~I_\}mɖe)m'sNm-kcɣZ3UmRt0@Qɟ\iݜx]$ۙgDB^) ~k^(y&T4 qWpKj40b*1}tS~HqY.6@8(I~5=w˃a^ lW#~1yHK9{9*:Biw3Ȇm!b|99DQ- *GNG3;KDl`;2'ˤI۞.Sxcp׵y߹DAwMc+ݦ#W8k_ίEQą[>ܡTV2F@)iH4 _-(~/!e\P6I""TS }2 <\GLSx(*lJȨE $goqPڈ"E"EUR (# ,Ab+b ""P*Qb TQE0UA`bV D AU(z"(*\EYc$+̎RPY1'AV 9>> "*'"C $A<5D #"* UlX AbTUdU(TP UTX$ X)AB($X"EI`QDbbDTTPF dPdUUPU(*0Uڱb+FEȉ,X1UTXF"A1 TP ,`0EE0"E  PS?lDTV!cD` *1AUV""TEQEAEQdPPbX( YdRPYQP(@D!X,")Rj"(b@D*0PY*h\ (,iPRB P77@bH( QTqD3y6",TYT`() $*$!2D`HDH,DX"dQH-d"+X$DB  D"UXPPR*QB0Ҫ AbQPp؋Q$XbDU1P@Y*1 2r]HvlDYDg6AHI MEq hP67Orjt'Aְ6(9c(!rRE `@y*Tʈ@$"b "U>̈0Q?z={}/,ED (dX*bT OcF(OmgZPZ"Q@QR 2E@EM( 4-m(M9f XwNsA;ox\Kas7A23T 記Bl%^5E$ZH2vAg{,*35Bw :M$㋴k)ƫ  0Ҝ<<05KG-(dA+XyN\7 clB;1FK-(kSm;"8q.N:6; Mymtx3E ﭛh P1! Fg"*P6.V2;!Vwֹi!!6fLxzBgҚiHnZ`^HAnzC}I:N@a'8g{!ZQ싔=g^ Qhw,TCSffdZYPµs[d.'yV"]*׼$!!sY_1dz0Z`6SAX]=Z%lf7>pFN(2.233xЉFyu@-' MY=U:]$kKс:%(*',;L9b_&HpDTU#WPĀ)( / o\ÆڲP pLYovU=ȣX&v^WerE1 T A`_V~*˯lM7^]ʲ~ a;(y*^;{T_WQK3jx֣蔁`kRy?Mૈ %j*@@(o]NbKHcyyD R, :1m []j3j,D@@q !a*g"}p7MS5 .o])]P6LF,Mn,dNi~],@N tN3 ,r ͆GurK}rr)۶gz'W;o ,hhvyJPQ8AQ*`B|g1\*QM4B/ΪNQMx;ݴ̘ۘIW[xϏm5w8on=׭TA˦ o@$DM/Hmބs+^3+Ɋ>E7;%t*\[ &^{@U5~- ғNx:9_=Mʬbp7 'Eq%FAy"" Ib#4l.jnxJ̕ɱv[^u] sn ] @lszT a61&2sP OcusL#۪9[pVttx[Q&ֻW3i2usE@C#!1o@,Ȉ}Ѫ,saֻkj!wȺ!TQ Y׉rn޼5)5(KDd0$JND¼T/i}3]}8lsB ^xk:oK;c}j΍zD@{ۮ{.X<9*,9^6_-gsJ=Hy_JB .v #R""";Ok:8C "9X3fʎDG}U k/_A2 j,H?5>>]Ӗڲ"s@D@Ӆ|jT$ &2E+mmkT"Ta;>[r6~?VW1gJͯٸԊ":|VY/|Vm@V7wY@BRCӺyiPOd֊ "0D" QDPAdV 0Y(b1"0R TE,Q@HXF br)e a1HH#@H*#"PD$dDQUR$I  a  )A*H#< 0F"- w "A擿a@]MK* gESi EU>D]~*EE;c,,#` H2)$PPDH1dH AHR) ER@P^n Y5/!+!@gXB+!̐+LPY s 3E5bH-@A$g &+x" ޷AYb# AZPii1PCH1H, bT d@  H (La&Uㄉ# HU ‘*($d ¤pF*',D"1 Paƨ8bEH&Xb(*(,PbDTED 0 IFÅ c$&.M]6kqQDb!Jd!r2W ج""g3 BEL3drl`R`E1bE$VD$FA"BA" @XaX ,$ 뚮"9fHa 2@ȒEa0IGYed F@!ld"  DiFDB*!) PFY9$`b!Uf& 7'UxF F$*b CcVA" %e %opn%ۈ7ӣwKrBNDHb`*{VꊢHm`HhhpbveI uwXX" HPX* Ni #Ց/nb@," X$=a![٤P~КDSl-j;,"sp@֬$ @b@DHH,Q%b" *2*Qd>]XSږ` EȨ!`D@$"D`(VHU   $  TQDUdF@PXH,IED#*# 1 H ,b,$"A@ (H!x)JL΄6n*"Ec!$EA!# H<rD'9O,P5B!^yn6! }KfxA0Y&B~.H2,{l\iOb~(@ 3 Ȁ$2*$|# յmT]EJe20U_BAE3ƌ֒Q VW0Bv%Kq$W-kJ@ "%i &kNz={Ѧz]bKs,""QAr &ҽ~͵ϲP?W\5{~r &e<WsvWO6}qw-CǺl\{2ULӵsavV4`ׯ5/]n8+!FWs }l7- 3Goh|0T>{mko۹ћk=+,?\-? g.qW/jZyD`HݦY4l{Q E_M 2`nzo}߼`=x-unjkj^G7F;3s_ҦOUŝYdo_6ľ.>͋ ^f~rڤ:[ezqmh_:deLq߳^5Mg?"@2eۻŚ)Z?̪`~ȰVv!Y d[(hU% ]7|S;c##1_Xf5!hM*d&?|sB7 R } ߞ}NL𒀎\nj̐ x+v`KM7󄡦hڍ%tٰq`? 2X,5`9 $^H706mY߫nMhl~3pгPccS}HE2A 6UێcCBa O݃ w|F$5zE ( 9:ݎǿ&І7゚ W?%Mehջ56+'!1E{tOCɂ1(h7h}c: Æ(5 %\ bT<2oȽMjrF!_ْt E$g!3+s%Uy$d.y? x<xȶ:0T!fi:&D窡 #|>MavXݮPZ@n.V3rrAi4II,omQI#a(n2.ʀ`XRAW@bE`&]r 21,YP4&^L]N ~nY|;u칑+sӗt #760P)̓  a$krz(C,Ľq#Q2i`Po1] lYć2ɜvd͟l0N*?]%wҗH˭7$t  VP)hc.͝pMwίtwsꑟS&IeqnWo̶Z&/iy*)qPX쬝qԦz޸̪$#:05km/@[L,j@Yd 0H[]Lk* m -Yos/HΎ %A3mh(Ms-hlL|<·C$4l 3C3+{A7D# '{kL FPap/_'}EgOu~Hxx` BTz.F:1S`@'g;~.I}ٿ!H=11d?KSqUӀ)jmֿ?/ $c0CvNh+joe @4bd^76 X30̛|8TV؝eF;P^QE&.].)Q^M_〥<97Rfnj:'3>:>p77O/Xg#r,%΃?Lezlzr0V$/T7w U5h<#1;&0}`~NGy?~^bk[yu=kb^b _Oc;_ڑ>NQ"-y/0pUpWizg,{~Qy SewWƱiL?IٗX1i4\ U=?o Lc5M~bmׂ"h]+ q]?,]cml6D>ъ@ 3$3 ERE ²6RTEĒF,V 6X"VW)+I ?$6U ,RQ*GvBd (VTSr_XY%Ch`21rcLV,PHV (Q7M[ R`9qXbUg"¡Aadb fCb(R#*JR*"0`zPXCJp!o>O~~њ/&*"մ}Rl0ֿ;&#т ~\O0#<",bzNDSDSF䤾u= L:uW:v{ů06H4$ ? a 0`-IK7X"xS\Jk' W2OW=Pys7CwZ_f}u>@ɷL%S>0uutzׁ!ſUDD 6 Ϣ::&/S~՝wXVTU%)VWyt" AH`ZxV;u)v_: 2񎓋Qn'!"/ϖ/tD/+NJxz]vzsUIpPat3a`Y#&Y^&q1۱0@.uÙTT Uf4`Aj 8֠Z2[ JD[dP|]>u[ /+0b;m}Cu,׭D;yT+cedگgCE$d E[;2xY {ە T Ju0aEw&?aՀ"`D Xk3SXc+u?ƠLiϫ^ R42Slpln[=S}*] 1)bd1)XXQ$l `]Js7Wpl7JLꖿT=MT)hѼʚY"2'B/zl{Wz3>̣"@j {sx4 iOs}d /Nu̞tčhp,!% !&H%:=o_>t/݈ PQ\Uk!ie?m/9tWM{j~=zgyDH"0Z^Χ1L_gk+}f]H>>/Wn~]7.XOF[93|ݖ? w_ƺOͩwKf3[5KMrU6ԼLw\y\Sѩz/yvǹ. o򹋵 >뭄;4 3\r*0D@"0DBBzNggl D,5|DR,Jhb ´"C A pW^mwNa kC En[cO%eE~TEPiIꠁQyTCP * -AEmRs pT 5DZ)xi"{ΑC@ 0ʂ2D>>v{rg}.}cnB3>Sľ QE^6 eE[7eN[^KUjZ\nsEw@~έɱxԾMߟӦz5ˢ;9ѯ=MACTwZMϭސrh!$ `=;eDu*V<ӣB yz^Au]Nqۀs `0U^\C mH9|*+;Jc#0GM;^eGlSƨ):܏Kg @(Z8T(ڱ-ӓ߭k-{whk7gLY6_"X]yЪrhֿnc_{l]sh_}.{OUp;/.grOD!,1U+tyޕcr̞SPsi09\#/ 9з>_i|OfI\~~Nr&Á};Kˊb0__y~Wz)kx?©߲gyHճv_ŷWX8^m6_p5iS_|Veۿwհ(K=wW}.5kV;U ?n>s9%AiǏ_6y/rES<7N\tW9"Đ "A`*3F(Db EEV(*(V z1:k1[0`[6RBʙ drz-DQ (AvA?tM9d84?Z"Oڥr}~3 Gp&Տg׌MBy-K>3͂Hds?.dFoX0|c?\R D2Q^kUo[>!G46_/B]PpJtӿP$jA, JtzL:*7FG0IBKKG+UsW'U.]Ӽ Kxg9gCvVNM}Gͺԟkl] v.nw#:OޮyVf01r:Rce#^aV!<+ב0u&O!'-)n^kXEqb'u}KE@U2%@0d@^\X/Ty*DD9 G[n*5(P=/vzMffX}%2!EdB a~cᴹ~޿ZG7_cO׿_"kޜ~О;^fk8XY?boh=RoݰĞ)'1 ָaiuR+F~O.ذ6r"w %)BA'hRdsQt[^b] )7hyL>p<=w_e,0"`> \ &&h6-/iXiVwl9,5ɲR7ՑӴTx8F^r|L/7~c,q>Xv)cxt7ڴ61 VeIk7.޶ޙ*@X"_L"+Q V(X?O/frĂz^Ӻ^6;+0DGe/oo0S@0W0^de zCZA>v- |@[;/ 0iY%Z$Y huaƃF/YDLfkGtvGk+_wr#b?Chleqbk$ Аp6V??S޿y<OQP?ԇf (f+yzh CY?=OԲ PP5qQmՐjH@& SD,@5Q_@@ P_!BIF@gWvs9?϶$ #!#"C1ُ%k`mix{Noct5cvӱѾWڽ"#2KWz'"Ew>?~l?_i(!fS)g$}9y34 &H$7Ӎ_)dC @*rT˻-\ʄ Hfo$ _ o{6ڸ<`6gC\U`UR}`#1 @2wl( ȈRfCAO5ׯBo@+η.dT3o#IUE_@qnC=#r̃z &"6(ZE3d'D /by(׺Xf^$BY q_mB8;CʜM#0q ABB]|}T`)8sw gz}g(utFEՖJ7DMN^UЀ TaCj}R`2L"[K,m[蠽(q=<ͳ#Ġq!b)m%e p, Pfmd{?TsLUhWe2˟We*tnCO^ݓFru֎p8&ue Cvo!U*$((]Rh3_A\6,.^TGx-AAR ڻ_H /{ bO˃.GHOA꿵dݎSZh0$o- "i}Ki GM`pք+-76N$btq,y_K~[^? Y9ߡs9cd!a4$aENlZz8{~KYm c"@HsaD Ē x|᎕̂QW +2Q(d1x1_OvibtdzDją#iVc~Vׁ9r4### 0>Xs5pRv穬~ 9Z[xL&ENlR2ra4WFѐqb 0:t{+.OmIϵNM#~ӟq"5LƯu&7![VS%/\ =ߋAd?/bZSeȀ舘=-'Yʣb-ٲtu b,(D"TC". 愎 {s:4HL>I멿!-Ow1騴c~qPXnnܺ8O1-PW "ahܹSgդ5)@ aQJ2 o ߛiO˅2j<[hgVk1bvBgTP㉫ A2L@T-(s坡T>.7 !QϜC@<$`?br :~,by*t^W~^+qɲkD=ܮz{`X$F@$.mw79?XU%%s#aC1TEuu꼥^-u 7eܾQʙCD239H |>m\m~Y #L ut#.\Gm1 F)>ί'bQW1O;½ܯVPĮ; %dؚ?7pEgbCA@`jt!H& sskQF5P `4% '*89CƝ*cטtgQ\T}]T/RSJOtVtޏn 8?*4Сk{;' w+3ں樆-,%Ѽk: }qD&JaEߵ==츧獌Q^i6+I-@w !|@y헖jʛ#Ű^X=ڐ)"0 oHs̘W6~pC+<(R:Қ C20|U-?wn0 r)8YsJOl&7C3gRp'ytDc29ki(p[C`r/g*eo_e; asm =+ҕ^tӇ~pH"R[}'%2 {@;Y͢v|eK"|ҕtʼĤ0u|樤eM?.2 hȔ\88|qiRȃ@%"!˭+E#`V|1gD;t3@ȥ8Zw+P/ps= ٟ\ F96Kjy:}b]LT"ia2\ !֢lO$:esju}peD Vc:P @2+ zIw5Q'JcKⴏxݎ JVw:%?'TlNݡKH= >E2@8H@MmHX'lXsF; ƒ)eyѡ$=3)w)9*Fܤ$WLʼn%hw U,ڭ[. OGX ϑ翶K8`ijj0Q2C|w*Z(«֢h4,4{Po ,ZKk  nADj9j0ˁ:,޺CUHH%%˔̃ Q~w<,&A{^k'[:}NHg)/NY'[<[ :?F8WM#f] 7j@vm:|4\a1zQ8WhsyVJ,T~맻.j3>Q4cz!41^{{Xdq:TjC+I$ iwlByb3˰XV>}68Z#6GKz<2Е$"x,:=I;tЬApX]W8\Z1Anɜ1]+V8`G#NewI{iF1w>l'$bb4=8}͍$rYfG۷UhFpf`tgeB|]l}K?}>&־709ۮ6-<_K(8k^?k6 ~L.`t*1b~ޔs+@ P^^7u=WzTQo?赃BKErƦ|:T]m4fg-o5s&2HZp3Q!1 A׳7Wg*\|EF!Nfehʑu_Y_N܉0,s}UƊw͜|w V6buQ4\凰5Elkm2`m+|ņ%ХJseT0Ajmv7\UJ3Oanos!1Jq2s0ke~KǹHfh,7F֪*7 =(M-Z= \&lp| Vj{QR~qw3Sngߝ_Ԙ@Ṇ_xܦǟK`$ҹ\ xd/!|lQ f΢ԠO[q_Qʎij%wK\_~ߨHy[] SYAhϮj=NRQUeWXǁ<-za3-70I0HަdS'nHUXp1hE0x;݆xV(+r'g 7W2goӮR"ҁAZ֯OsuX5-Mգ5fvRZXçE55̎rS0azK1$;F Dسhm`9zw*$utةd /RFcJL0-Yve+2SzJBQu.y |3v=BZ;Ud:m$ LC],Ö ]3)O޴Ք){B6/ӎ;c/?yZHcw]ugOnӏ e-5^|?⩸k{C\ɺ5)J]&T0 N e /Q1bTxd:_/a/Y],ca'`f ssN'{EF`px҈|MzdgayYŬwvHqZv3M緛dS @0Ӻ;4pE߈yQC7' w[$Β +uwM"ٞ>7 [ON߲˳c܌Jr7SzqϬCƺjϴWowC< Y4:&k6 uCD2cʩ@3c>($I2r PL/˃8lw缐ܼ_INr~gx I%aLNNجO{à}yk͓Mz62_Y4(!DfMQKL[UaAbo._m<Ԕ ̷uqt4ib5-ebv 3n;ުdH4K]\zgwv>j.o+];Ul_{+KnJ~k_ṱu8]<G']hͿϥY8^ UBsZxnlTdV"*ɟzg,;$( v;° L!7 wevaPH23fiD*@C$I `Єy NQ);/G:O u.GAh:~oF7uկI1^Rj(EAe*U`޶ߺ>DCYVTN<+@߁ Q!sܼ-kJEX.#z.MmL2`:k&UHvaPLQk$MBѹ AU uÑC\p(60j{]BVc3ѹ6xI\m6RU=/2ͫ?g/+=l? ku5`bed40ffV#Bk.5~1XdǒH( yIa7һ,6VzCT)7|([N'[GFzj̿.ޱkCRRᥠgN8w3 EN"zTg^/"I$!Ҡ DT,jMDh\`'-%n$ˮVekKURպH:_yi[~&S_vq~һzrW*ª!.V,ASYՙ A=@QG!)@;ڴgo6-U^2lO|>;|@;󪓊7~*z؛XA\W~͔}I$c|ε6͖LI33`. Nibo=uj#ӷPR= $CU" 4<@ !IXF 0 `Ti -~җ9s2.l~EVO4 0f0XE ?w6[Wֵ9Fx+qcX#k158x4b"(' <9)cq2qI{ӌ:ALl "@b|m~::v87wrO"2 "$#*, 6j.E ײɝ$IYz?v9esp- %u#b2"2CpVI AEX,EX**/,& 0EVź7v:qȢc};ev@Y~* \cEY99 qy|=:ۢ=ߚ~W@!ਪ0ostou ơ$"הibn~rw"Şd=*r|08/7CNoYbO/2 o_v=r+bdDTљO8H__Ӽ$%tZ`G-N5k^ziS oߞW h@$A dOB rN|`Os? ֖`D )7t|ޏsoѯPk4܉,6rEu݈Lێ/*Zv,\%E(0PoTz2(H#?>n[=R?VUcQҸyrg{v+ 7k:'uߦDH>E((U $ 3< v34DZ |&|ď{O0'EYzy9X rgƈF`Z~T1i >0/X4յ/CA.¹v04aDKs~&ѢT&$D lN" SG=\^RIpg5<|1LC l2߾1ͽ|7,eFs+aR2 qr7soFXEU_RCh @+W8hx߮BHOD|gDae{2xowtӓATD&4 TH0$B3n\PFDHiSwgcaҟ_>=p#l̠|ć't.jmi18>ȩj7[c6t&WI5huuq, 51nyH %".YO[UnaF\pDDWwax! =XEEHTTJ+#a,J!*,b j>GKin [ǧO~,B(1Fwmӗ\s`ux=ٺN!"0ȡD鱴:7@虜7:.u-2  n<1]Rk=H"IE~<gUo)Z(e@BUJwvW{xzĎ]p R4`K`5H9=緛w[[Ƿy9)e^'ϠSֱsyq7V"e"m!$H,Jb0v/h)1G0䶌Ń rKT׹WC^m2=F-dx^lQb*Ezy9T,"> 8PAs-8vZs:yn͆ NaYG*&*vd?"_"՜\ op!Y#ˣNܗ3W6 (-DLF1<FLQ<9l `2V֟9Z^6L qtM7fvziil1߹7s8+ȧ2ы|5Ef+/ggi1i Eb**O'^g뚅H$tr*堖O 2'ma Nsݮ^ŰjWiъiiJ[NiPJPo-5tqL;nm>Φ&@7OG!0@*L=sm1QϒD'WW6<2ʨ}&Z2zhɂbꎵ?h{wj˳77#'uwړ0MM+oE.n>(ABPUF-/C*ՉdpOKtĿ1Uj`}KFџ HG]7lY}*ip;z5gPMϩ23#0F g60%Gac_TjT$ cݣX>QxOזb-ڗ b͍x!O*1NG+wM4\O"@Ƭ"ג#zjf'1d/M=UD.-ByM2Q(~$_zGNr ƔLtXmy 4uaJD r WCg]tO\S i. 'A0p3  kE GO1.(qyw@(C>f /T:i+TKldW{&+}Rm=תvVcRb1QtfYUGFj됌fGV7t-h wqsNQ͝WkeAM=L2g1 d-Jg5+õ4LZ y=A 4Ş[D0/xַ]zJA,b暦ף+-~D^SV\DC G%NLѼeNj $w|Ls{-iGzAXz_zg~Nn t^!_ cX*?s9Y[t# pGFS&}C_s'ޫMvy:^VǤi&M{6+W9 sdWPg3|`j o6)ıl6J~;׽~Bb) <NI=i^iF#Ӣix<Ճx݉kp i=<GLn ^?2u~OGo3{wx;NN ~}JV_7qq I-{_7R*g!E'+7²V'gns  A}eL˂s'yŢm _?mc<0_'u)]=RG9;V*7I"^J(/Jj}z??[zqܯwKs=Q{T80  n|4BJ:`쎯+ikfD;GXgz%>ET+df9`D`zdrU` ~E*A>G =%j!aU Te-uLj@O;*|$jZS~5._'lz+>t59!Ԫvj~LI.[dR f'`A!5qUr[)pk9]TA"tx\ 81N?Q4qcN#w2$XD _4HIДlliHn5Gn@~Ǹry[`ri bpD D%={"7)(J<}lrPAAi)~_aw~dC) ÚFqC )mצ\ӭCb}y$@$rʡ0S(=m` `@m\j1t;.g'x_s*9t$@8(TXb {t᧵y<4E!B@"| X "g'^:/0sip[$G@"&M@%N]Vzj͛ťRNh:G#$:,:9~{a1Fa 'q9g:|q:x:s5YdFBABA*!fWܫ Fہ"*;eN۫'ӵTslk Fdua~ 5{`%Wc ,AUR-К6ې!C./pOPSwjF=VLa/ !<}RVb")n!\Om4QB0vɻ$RXq^r5{@Sa H'UƏũƯDgcb ƯD=-e3=C@-ZW0hx3T7q׸ݕ.} }"r \ّC^n" τ0]9b٠F^>3V^-E SU{(gMOd alh*aɣ:>6麭>7lXYIuvh;y,ժ(c Nf97W5Dea>QP3&owK/xxd8A2{+_qǺ.<,s9!:Q t‰A; bowJ.Z$kj˸羚)5@:FL0 )z—=j^͒_Jn gV)a!]86VrYZToL?+_\krkc8=WGM^$o׈Բ m]{<7:瞫gp@$ D8ԉz4{;#\h/jō@*>C{¢*_Oغ<-7=;.6r5DǵIp9"HJ HS6&;=8bL)Ybs Kj[[F>疠k1Nݣ^s}U~9Txr:N54 [`3H79žyw>=a _>Ms>4xszw]AEШnA d8 H#PuRS\]f>AClnUsC')NS߼ DZΚk4lV ӏTDZfjXD7R<^$_^BTcڱpz|:ޮf.̀df@ŧaDhJe܌)I׋Vx ;1?qj.?=_?gQzԓ#ɮfg@]Pp0ʩWSYLM=n-aa6duӂٵcf9^$ wKm1hB6p n % ɧcFJR%y=o%=^_U{Kzڲ"H:U#pe@+S(2[1dVv_zԨsGe .^B'nbofm΅F2~*9* TȔӜj{AydrAFADn儠ttNe7;mQ/BxJ G43t+yMdAV*|ĩLXFdK0#`5M m4'E$5'u {Ӛ1]^;q7ƙq[++S2Q^ |h];b&9Zje%KipNax(ꯠR 1ġ{WzͫK/NaD4cVSeFbn 3F1&OA -T*ӛ5]oNey mp =amV'zέ3"" %hz+]X5 wy eL@c\X(ί]gc?37_0`{ ;귏/0Y!}E[,rJSF-D؆8vw)x܍R,\6tֹdح5'':ZƹΕQ~N ru8qXJƆFwḫ [roIAf]&àV50c6D2EW^ w8!COk&!\ }^;$܏jdks~Ϸssk4{~۩ >6^j0B)QQ|G(* Y$EC؄" B!#|WžØ2 BC&~oqA%(J ˘ 0j r*Z,]~8n@Ȁ \)yE c6+c `I@>(xKN;CثJ128e7oN=}-hBIØ! Lm?agVߑa / FIRԅ Nl4{2<Ό&sa"AU455K # NjAiFJ I.NIJ b@A!b!%(mL@ 9R(Āc+*4Ѣ'u e 6 TLy}9c,_m t]<',D x nޢ}ɋb5˱_4+91ǡN n lK Y~k 6̛e^c|Wu"/|`-FZU i@Ř!?%m.?@LN%~`H%Dm0 \e宼G'{Үq߫ݯnE`w$ $ 5j k8&LWD0Ts"5Vߎ@EU~vC\b`qe@?La"eL~K|ӥg7d}"X_` 6}t9yS *'I D-*"]8PQ ?*B "DFh2TA$@}/%c@3X۔bZ]׌{x8б{_;O\~l962Ze誊C4&(Ȓ" *# H !a"Q>Ntqs(@[/E3"ݲG474GjU$AAPULB6NZI bF k=^+bN;W[ٖW G+RZxLLRI4}kI"J[S|q<z+YtZʱ؉Y?~&kik*yPZX\¶WOfޛZq&ɨ:9d9ݼOV{ȿ |gu>H=ߟT>N<%ժ(QF$QEO}}y>~=ӠʩPp P& F FX%兙3 8mTfrx/Y)ǸofSص Ǿd,rYvξ5zwUm%"$B '"_p񋱐uѯGm.VAYot-([:ɼ+, Β,"!X ,m"1&0{4! h~@d:#cutϨv[[R(^ COlu˻ݹDD$2٧]n]Ȉ$b}Z(wAWݼ ̦ u['#QޤWT$Vh 9✋v]ݕfMc@b$"??:9uuT[fM"CLs j#Rk^e/m wlU덂]p ceuu#90.JfsM\Qd1+VWZ>[`uBE"V (ީ{PQFp 'um~7l\^m-Jl'Ǯ#"y LMH)߿]@g={[cx@ 1f(FePa2 DK2)Mi& 1WJY\Ao|.G{]s>?9`HE{6{/H(~GBCA P+sO=v;-dŲZ1~&}!{5BYH}җϑ>-E}*z?>\ qABzǶ (ЛVG Ϩ:DCڪ {_N?}|Lڡ2|#$Vn͔x'E3oXck>K-4Fl3|ea .9Ш`uNs!_2'o5huv`CwzQBU-"Hӷ{VįqV+e

uz3H̬.⑝q5SiHWhJ_,.Հe$%$7 ^=m<=XVEs!I NM6nt +Td|b&NJK JP P 5 $ p¦iD"Ue#-G)|,:Ii&VhBs 0O|$Č[Bf~P綡3ڂf><y7lB!DTEVS@P1**nNuHSԓqwIzzE&en@Y'gif[ 1Ds|ƶhPzyl!!fǁ.,<*i 䫕"sÚZ*{IyOLg[pE'/: &Ԭ]N9':,`Hnk_ដ.~jM0uI._Z>ǕnL%(%E0#-r,tvztCkg9ifEq~9֎ť܆ap便9}fcDr7;'MZfƵox8o>UQuss6ZRskrekjmI&PsMզ>{%hPM1@ I!Xku(5'n^k31x^-+q@UYˇ\sJ"W=ebc A f;ޖN~{:٪gLӒ MhkNm-'Y΃p+<-Э*Z57ř()%k @aϾda jѩE鰞 #} 0jf8kÁdWj=|YlINX;0<_\No6Z&> R**2 QQRCD*lQQn#hxȪ vAGmPъp]8ȫˀ2"ea:nL8iSm˧i ,ƐdBe97H=BP+5Wї{~ʠp`T2$b8MWS ?|O!~~ XtJ9Cf+}ÿXt38I_|ypÇ@ E+ [W7̞v@!-oXA %{b&iud Sw_uF3{M$E`dfl!l5azyf+zBHB>u-ww Z0P}zD]oEt";T/_ۯce_Z)$P$ $ Ae`wW[" *aД m;}X dc=^ҺfvwWnP;DI9HG{j6u-{eBCbȠfS|cĪ Wv._vRli E ;݇C8InC3<&ܑC5XΜvfXgY+٥3ؔ( 1^3o"v3փ," ?7z86ƕ3L(L-gWM \>+TJT]ͮ:g ;RId`uˑs/{@O|PEr^Us]iɠ0ik l BDi,Ȥ Yߩ[7a؍5~9e%ik-۠A6"|u\ߏoа3!{#s-q@! $ ɍϐS7M le hWU Zt~<^) LR'v6$חW^Z]{i-P}'J/imf͖_hg٬L_|z4|f H $F#~-D ; vXN RD)0 0W*A3sPfr1u 3_6G`e.;o,P%ڿc2$h2K|Lc&9Y"-x[@' S*5٦U tlRJ~҃xZ7$b6V  11JHJ8(o7ԣ5}r:54!,G4QU /O@- r}yvG.q^@T0bNQV*WԜJ{')g|oL , '̓ӟmݿ%2.6H?Ӫ7뿭an0WG0U/nTs0QȽL= @(>e(SXdՇGy)֙_[۾Wm4Dln9E%`8-7x\g8ՃWM9gjN&0$l-L7 >< @#A"Xy;(40ׄkʡx'Ra }]*jT~r29<%&NN,M>k \(XI~=eMoV ƚ!-6+F Bw0Ԕ"Q.U$+ \%螇l7E)fWokpIZZ\blna2|wR__-lT7, ы #XE5 0T8̀,y^g/|U,[Y{O6m^@41?avk7v%-vP:dK7 &! -f-8ъt Pa}CGlwdN_^hܳ]J{8k%&P;|z# N/9ځ-Yށ;j08Q $A5)LKl onTzkiVYm&Jfr%J(,oHQI&i@w-[nܰxq\_%q@[wMk+>x{R̕2* w I}6G$Uڮȣ-^7g;~aXP"L+)Fx/G{_ Y۔9_X" }RvB6,$\ U z?268+"ӣpP`07VR"1!ċ.å QvVVdT9/ہ"h \ʁ ᾯz{qpSݓRE!㋩՟9]x%!%u"'ũi[S^,,s7k0\ GEuZ-8⢪p@ ͡T~q`5߁2!s=ժcPfaSv2} MGMI-4`HIP8(ۊS$Eyx _ E , *T4%E:qsu6fR3 S>[L_O'_b}jێ#$⤩H0#Pآ ւX:*r0PgL żx96KmC]]~x gM/u!7?:w2$3RrV6e$ bp]`* D4[n%W)fWB 7!d4p!,9r ˙E<8e9. }F` ~_ɮ9l7͚ D"C ++M߱gn\E}:786yHzGᘚzt$$e6;z 6Uǯdzخӥwa0/lFaj }sg -02?%(!``@~15ϺtN^ICq'CjyŰm~˻`!Y]D`Ma =1ZJƶ!y׶(5ϳ70qUV=SiLԣ?(/[4z2I9F9}E6ͷMP 4;X@R^wV@C0JD&XzH<tXh1T6a+uHlʍpw**%HN4l B ZS.3@|-\ fWe^!0H5:a·$rD8o24]aXdN*Hux@Zi~RVWl`y\6e0Dgx^}dͱ3/ǭD1/maaٳT4f֬UJw42K{Ut~rM P Z\^"Xߔ3  Eؗ&T ̥Zh`x{U9\:];hT8z՚PԤk!xNmܻ!U[@vkՐ2x2%IRC@igԧ#">q͏Yj>ew! [, F4H$cT '&Z&S! ~Fx.~*)׃xR QOPv }l7ҪW21{&?sJLjCcZƛ  YKL6"X#ɇL=>;CwBY2uTfd;Լ(JVk7.!ٴ#pޙҝcs'dU)GɃ껔n=ko.gx2ݒ 8 En0jQ>6/B%x (-'u.PCcnDc ndJΛ9u!.S_+]гϗ-™OhQ(eo5W#!g0K^7w_ؚI[oZ*I)lyQ]룂6ˤA ɢ* vY-K2pW`gn&fϊ3Hc;,L@@ JQHQBR4q(!D_rcit<H@EQQ odM() "y7G;t2 &p ]@ N.=GWzu `@JGWvDhԯ1*Fb$/N {sL}ヲ}(S2Z%]av?"C@wyȰ+%F Z !7szwדOֲAKI#~WMp6_YM)Qc2䢴G|uD-sJ Y G뜷bڰ1vzSx}$f?/̯P23e `}V쫵R"A)Iͪfg3co8iӳ|T PTv)WUH" ")# KP)8`2@ @#!Ncsrp ׈H1˵A!QP$E @K"$ETQCuA3'_nL0BpKzܝ(8/=i H -uPL nKnFWj8~쁦m5Yu(kY(~׋~O N`):VwEg~\{{ I"y?'|S]%~Wl ]UFnk 5*bFV[=Z6P+Xil|l2VNx9~>KARa`ҋ*Pg =-X7BѴii6՚xLdHT( ,e@gw`6Gဆo9LON`HMտHؔT腣,o[y}^[Hs_qcϕcc~H @d!URAo t_f+ԘC4}bcI]jZeњiW!kfeT3 p~ۼmmÀߖߺ; 'GZ k @$2ZΙ 3/ڹ@=&g*O9 kʢ( iF`wLZVL0Gˊ0'(9I>{"B^%Q/,zf"Ho)I|k+;yƤQIձϺ9n,lbw͜PҢ(*",?/"E(CȫAA, XlUȬETAA"bd- b1HCXDP`( 1`AZDX@Q`1bAJb0)KA@XY'B >x,BJm` QP&9;)U?AȒH'axg>o̴;}?sȀ '(o |΂1ZkH4#!D9ǂ؆^d (wO.>!8Xo~G= ̲ju`'8cB@k={VBYl3Vq9}4oc%3t$W1 N |mN[+fRLqe*(%Q]Mpl8G[[SC)@QX$/>_\]ɭ:,"Y),,)jtI$ s Ɍ3AGFfC'wZ&^Wv*#P ֩lvDY~FBGuȢf*epA謢t GhTLR*\ciJ4f+Apb&Rx !͚)r0@i&y v[+S.C"Zovm[<&߀pރ3) "\E5{&|Dn>v[AAp^2_W_\@TT쀿ʈLPxTtbm9t  Qj"Qs`+0( fD]G6CxFZ 'ң*Xug~:0Szv H2򆠌$ߏq."ϣ;S@dBC kGNLqn猂HQu<̜K) H 0b;љbo{YQ}S=œ {tJ 7 ֧a 8ut=A*," %}xx%Z2VKrٟ 2\%5;k43З tj|r9):},G[('\72>ibvs [g׍ʰzorvlke ;ŗCŠ#&W-9>H+[GI d7GrqaQBP X+Ca^ݗdHjOVk,#y ֲ r>lf`T)l^wÑkc3P1=V=>6SP9-M p&Utlj/hlo]NMm5hZ%Jcs|}_dƋAe> hÿ)5\p35&\P]CW`}I:~_if3rmxn+/ !ۄ {n`"Y覜cIW36Zz Pupq˭ DD /({vb>vb=IۻIJ/.Ƶ;IAH"*S?RB"CZv) K/]Oi?"rP(=ȫx7h&Qm bfZVɇ'G̹ }9r/P#h*H*NjTS xRRHm K'x#=M"+2xsw?칭f]3uLyϨtӄ ʟb>.2D͛i(޽vL h`oEµ>~XJ6 "[ CA_gC`cZbIƶ9K<O >TK քr.^"$85ޭJ"ŲQ́enV18  e-m4Wa;}{B`NFs7FyFPhF(2q[c.͠AHrP^#D&/'I!Ɗ3ś3_FO|?vWy (/L`$ ω7 x (#a#L)Q׻M ܶ?ƮXͦcNVAto$ raܫ? lfb7N7xFydK}ڬJ߂+ӀI4RY?)#r~F /*c j\U>S5N#pNddVzm1R ~Lo?i~Vƶp(TP ~Х W   "*##tTˀDzؠ>CgE?&(ȧ+Tex.(*rfԮ *Y&zZҪ+F7.i:R]Ҡւ]]pVBϸ36b 13k02o®;]rP_XཉJ?}7IBljV~? 04iqaEꢮ%Y^v"Ckp6Lc 4a*2"/yu?Gܭ׉k]_~qHђU-\ uck-dgMcԥ(S_^$cūUrPe_'ia@K C&Qv=׾qb`L7N]>Y~m>쇔h7î$7CvL'K P2?R9\GDc!@ huk}=ld=wP{  lT0E1TWtd 4yTA&Jj`k/๮'/Է5X~'kV>1hl[\cN ۺamX&d>%~'a f~Վ-!M)/( N0 {^,z.V%(rTU&S0zo* Oll fJaI*Yq9d P6å-863+[Ut𵨟:#`wc(瞙}F.T6FdzUl7^  mµm&rG3 i&$9q^^WMn{u>d܂ ~I1ն޻1ӂj{ZP?u-fbuog%.&[90ߦ_'/jqls6'@­˞dT&)V-F4C΢Z)[73T6SC&ok0S'qL@uS(\UUe4J7mûR(ߙ\}ӎA2FDHS̵GEnWTѯ>%-pff`5cy ǴZ)@s[f7Y+4N(_ZbTbCmV]k շq$F΅Ox}M?3VfdYɴkŝH1Hs^kΟỳ0Zb<ـ8IOrhZDC@ *C` TgN)H́a2)v/էi<-ɸz Qrh{:`dT$N(TCQ A(TCR  UBz?ݭNDG{|oԎWe%8s)|4ȋLÜt.B"b|oJ|HrDI"Q")~UFzxL?!>\̌x`PKZ,ֈaJ&J= FB:|jxW@f" Y/A>oG[.E|(B)@l-#qLyM߻i4ݹS *z^eK2l7" $yt?I{6#V;݆"P@Ău@IHdWmHB8A`i Muzӛ8&fkHj+U㬈 #||<}}1LEOo b+~/fZ%M2 @C-b9m2yY3FA\0^Z IB׸Ý;zɗg"8Pib1"2 @|V p A AF Z"H LcHi( Dc,S@@8 ;h$ qCF@_{Ҥ3rux7B@ˆ1gj Q"1F0Z("ň剄VUb~ F ċ( ";-2mx9_L@!BHy #AS!Rw?ɩbeSgK!Kv88 q4Jwͻ;ysG:WucHATAD:bpMcIS&HBBdB"ഥ ")}t)MyF-V""-\  Fvƅ8ys"uoi'H?FR}ݓ'>)!`Ȁ}+$gB$yON=F@y!4M DdF0QE01 _2sA$1N7_s1I&Z!'bn~,0 -F;PXG/?q""Hξ替sQulEwA}W`1c!ĿZ`高ܪcP SniT}&I0]"IഄAb[ JM\Njlv!М A{:(FDƹ@Ź0|Ηs! ʎ[.7*ۘ6i5oW ovBF$ &c%hȥ (ɱdA\Ѡ2&g:!@p BPAģ*y!`ct_}OC`E"" *d(Q( )P!"`AAEl.*TD PH e(DNxP@ ` `T0B*0`Hj 0>@쎎t,$v8EiM.`ٹyg^Ι} =NYKxu>A<')q>wP)myp4{jzViog58 W|V2tg\K{|d)%OX4H !gܮfg??JH!܀Tb+a \ C 3 y3H\ꈔ'?<$HY ~NX[:h+$3 4}@'ACk ,5`cM1n[8h~ SS hxXS1|T}h$@HU 9PXH@$FF#! `b)bzRV(HE;T?L 5%s0b }Qz;9~h7{yne^Zh4Ymol9OOld X"RRRRRUPi95K r ˌZWEM)j\IPn?W~vAxM@,*D!!ʻb, DM?6H}T2i@";]\# 'ƲFb ǻ\Zw.I`Sp(s νGR A 35L'5Z,kʝ9?_3<_/vQXEC0D Wa&ƥVTQ;vwW5{:Rau YPWYU7z+|DW. "s HIiJD-jTBAS]UQ^[*Ȟ$R"V"p2}K'ӟrŃ3h?DTDUXX{mWrIm5jq ~/ߐrLBi-o|p'埖QD}ŅsS5bh'Q+UDcRH3 ~>7ckjC4ꭴE*ck{}:rq~i!cӳa `JoOVs~2VgBĆh b%) fWQ[}[Zæ@CFn]_}M\]WEBz\jD͌NeS88eY^6"7D $AHH]5d(WP"{;UW [y?T0Y5OCSCK0 |OruF/2(HP̈,+H&lٴn >b4fNv ⡶x؂a T1Py& *H$H Qi FVDY236'ԉhAf@%ڧafdCb/&>g7Dz޼z5Pf؞lVI MN9=6Dh3(TҜZxpKĵDX0IXz6檮٥k\Q8a=t2 ;L93(=h⓿iwփ],U2*ؿXnIs7a&^gy3#HF4^*k[8?1]N|xUV!l|,` bjޟkx˞oC2C=;RG1eڵI89ͅCgrve<w2b:%Y\%3/]_~*yhVU햵*&jmXj")K+$9ULKјB"p n Іƙ,LkdKW 4jϧLmJO*$z M(qbyBž_J)0Cs7~p0 }W0!I,LDBD  ԧe.TPe 9A8a$SIT@Ĵh֧OU*uV!MU)y^>B3}NZ/>(dda6"R>bٖyX mO SD""atb)eI^:S? /b`(ƨ {pD &ĐCfje^(l>2m7?\gޞoejD2RH ǖȒ#T4E Es{vk};k^@Gy ?3i 4{US*gv^1="P-k']{HQh?U jSL707 "ވ!u.$jsy߫c) UNzZk:OÃ^ Z[a͈,ʘǧ:C TSB`Ń SJ)O殛,IQH'?eO?/|ř[y;TSmAuaN GȡECocj>iZ@oP#4 1j]ނSf@Nm2H8?VZdQ2^ޗh:xZקs*T%D !i3 d]*!iM:)D>X,?;(a!fS#xCY_f+\] R~:Ysss<^>ЍX'EOmͰ HfG;]&۾s7-``+"0GAN˚xH5G?43w :PjD8)=L*]2CU)*A %&D@/,[G HQnzS|uCQ_Z x  l9i -a$chuUWp%5\)r\, n)󌋋J"LEE·+!T5h۴\mOc6}0cK*nP 9L [X#K>[܅$V' hW1Bn2#\%j7Do|h{pHoX%=8T*H`-g6TSٝ@A&5E-|{!SRH_AƖ ՠF@Eq,powS26,#R1B΀mB֒Btsa;Lhm2Y7ʍ9j96iw)6Pa `yìzBf9nywd@ = 8 Ɵl4,F)bqGc*,=-Mm5bO N`fbr}_wWnI ZQwH>(R*`C9]/yC?1 w?um!} Z2\8}6H.&\K4:[7_SesHÙ?f_s_*Ǭ(EF m?2J sŮJtSsvK [QfEJvp+}`KيLK2<&'~WM sߗPMW:zz7Sʮנ@:_A]篦E4Rd(D<3U^[ y&4ӿڜT2gC4@hwA]8x"?8SЏNp !dn-lWz_;ƭayŊ~+E~S〣 <+:*ф#y% tE#;nǥH<*۳jxK[cճ]̔]D$yfdO⺈q¬(☟ľ1"blH; -Z80DRWoTtFEm CcYwYir? \[[@2֖$n4L?s#3{^; ;e6Drr- 1Y3ۖ]?cjs7vTM-:NXޘ?\T(wR8B63sWnGcˍ]B#`MUX]yԥ"?:K1W4o&1_ݽraJe/2d}?X?Vz \sF`8ߋp_y)*JsNcƩjk- nL)1"j;"dXoWrU7j2 T1_CbPi&zr[Vt|YadVXg5QMF <75RטsXz?eaؗQ'>yCSn[.Id }+̕{Mu(^<$͂:|'+`;~lϝ퀰\L҂4=e<FCZaQܥăGI0}OH?BQ?7mGR:̶͟925EgL[X4z3[MhvYkNI g mJ=]cCO DKzDkJDk:D|;?t:CGm"=Ztyw_#}>gyljMidVkhzW9Z: $J%fYI(ХP̢9FS!_ PղŖ5#Sa ,u|71ZA"J7+t!H^-xw݆^ `98$ wj+=ExFDOk} $2*QLIiQNF]μ|2o+apgBdM¯ '*%F1&|UyAN}:f?&nSFJ#!r3%e5d{ޚ˱jߺ3b~Рc NFLu &!4>_@gSѭoy4  >U"Om6  ^=a)Z|-#Ox'␶Dr{i;-BE=-T̃FGpL#|V& \YwrNmw,JgI"BPzf6 `/9Wp&cٛ^#&C18kI,H4v[ ±bZԛh\{a|5%IaiE|cX $u9Kr𘟻4 UaCYaջ[P]flrdM,/Gd Lٙ )$.F讻 ͷ3~;8^E@ma 0(+K|v"SpMnޝ6ƻKFۻ"uwPS"3#2âf6VhG)RRsRO՝#⅓629g2 PP~̭͢4ho!Hmc&YEyP@58|1Gfіzig*ݓ 01 $>ҋ< 6ې2xtHP,Шw FB^rheΌ!Y5mH6ò&H.2ڎAɎ@OeQBL&[*bk_YT:uh3&`0d4#$P^:a Wz2Œ#ewqEݳ5el;ab'X6BO}E,^&۹sF2Vdm9~ i@D>&I 2ݡFz<\`vAyp9 fv33r dyf_Jl}0ch_T]vŜÇdF)Oρفn4,"9%8)%Sׇ&!̉S{M&+hz_]O0a~ۋܿI`S04!F#O W力d%l O?LbYDd̸wmMn 4 |N{P'?WژV("*=l=-zq5c,= V%@U  ud-F"gG As}N}G=( rVP5}v!xI-2yA~1sWY @@@ +h\̈#Ԟ\.-w»@o%iSgleO a~eԐƥ$tzհEM0L?A{?_'3L!HC~YiGzˆk3m= ՚%+2jt5QG2ap$N@1pS PIB!!8(z=]Ad t!XN$#l˾`J|K a $qE "wٟkف/r1^j`!MfG$!/%98JQ{$I e&8~'W~Pc/P}x[_FkIԣB;>~rD"?+ ZRH3Ua!# ~-s%;0sa9}8^WBo~P{~C"\cMP)QC:l7  P<>l &DmuT:AQ0Ȟm^ j_]E:tb1%}ݷ$E" .5x.()_ۍQ+5f vvQ!],3)'R4h#uAxE7)hNK%^ݓNqt$3fg_ yzF ޝ L3 ѸhT!"c_jBodܐe2cOzS5TMCW?DJg,zT*v29Wf+2k|mqo3{,TP1j;H1:@2̱ ǷJAVG%J`!«AEjB49^a<i)3.ʖ TqZ."QX{p\X+Ki2] s#8hﷻgTX, OWlQ!'#ߚb1uK;գ6gWv!jل4 QƠF<ϑ&a9pp@&8UiޯoR_DM+!zt˦jP2vuS$ڦڨ#ˈ (o%mu1a. VrgQnhYFEp0d"w,S>`?Q J ׄAQ }e.:V+e8wل=x7nO@ad Q@1D{rBʎH2 LkZ^!0i:a~>ꎥܩH#BDOHʯ9~!31.3Sh !!l89LʅC9d)2T21sadACPvPA0TTbY2) :XF$bA XB\BHRDX@f4GMIBBs`bȠ"XMd`~߄w\Drqh0q)%:,31(J:C,kE2M2GDl<YO{C{^Ns(\ ԨOTU_e%"|Buj^=Bo}OkP&ك /]S2Ϩ)4ٙ}vo!9 ;yx4Z uVp6,io[\A0-n+$ӠM& FX%C0>ަKZ*"2Lv$*kt47& 4!H3uQ" h:`\fnZ]$:7_HR>KfɄBƅY}J RC, $!M!aKeTgx 53A0;DPG=;ɪّFv溋i,b:\sV+_3 KzpI`-Szc 7 EPF5mj43HVKyHRD` ?[e(  (AF4MpO&=AuÏ)AoH!Cϯ(ATf ͥ`l=߹G°TU`U*W7|z~~k'ڊ*}DэQl;4=gD!)6 YY C>?w- PxKgʼn23|-q|6n{v=΂;2g2{ \˲[DQVb1 { 2GP& w #r8d !d'>h6DF]\9?ENYz]A\Wq$?1 ʾ HO; =%ZVxJ([ޝ_+:+VXQSЫ]pX?'fE/V2r%wSGS$OUt8KA 5qݑ%75vV]jw` >J 1ߟPD#wIx,ZfJB q p}7wbټaRAIH_v0Sb6JXMPzv!iV Y$lLYFz$QSS~M!}a{nMP "l mN VV huKde_/쁠CP{PJ(QQݴe*f#<^6o}rDd#0)C<~!qbE`ɠG ז?~^9^r ^z<] p0T*JHDf9r*u~3բ5iBj/ 2nyq i%sc4rn)YdDUp^!K`td8 JvY-DrA!~ p+v9*lBiRs-ignE_hrdj@G[6^ųwPtOcfH_Nc74*NpeʩO8%(5̈,5KM/k-We< dƲ;bWjfCct0ضRc'pD6.T%oOo+g|Y#Qt [XNuȕr:m1slBač*+FՖz{??[No]+ FDJJT.?QX:K>?Xȅ:eՆC|Bw=aӼ~G1,uѾ$u*H\iM8 Cw v]SdLc]narٱ1pVM#uf! ,l${'Eb| yu2WR@Lzٖ˶ѿ~bP,Knho%)ɿH9VBp<]Tz?9A. A0`.fg7;. )dh?399Yrǹ6P,5YJD&=c "-`+-RPW.)r .7,6/ygZ|Wٷç{;lHő!ԇ(*,HH( -?haO㊨_NLqZ UmZ]zb""X!9#"fZV`ܺ HC()ZiM`:-@@|R'W`Bv""0_}8l `/Ld!Yʖ0/1]D0|3܆T=g cU$AI(ӚNmGNB`"i@W Bb6hv'&`϶㱕CÔo]{Vj1m_yו"%5|YMVӻ<8X 0 E,>镊(1")Q:{(z2\nƎ5|8+,sN=$,A uH `,T"w^~hoٻRF DOȅ>H7RH@ CKmĕqm&ppjG%O$ӫËNzJȐI$M*%)O!(phl9ފrRA?+r"$QF ("H6dEjLvӵ;o 9N-B_Qu؃ũ@ȑ xRCLS>PQ-mx6Q*^pÒI!. 7૲tm^:B-CL8NJ;ٳp/(!M-݀z{JX!"hAlUN| +.!. W=;$]""TQX.`,?eBgbJD3&ˆSE ^w`^TNP(iQ (YA) *@- ¶D-)R.A*-O)$FoKQUTDA!c#"q`pk]^AyPS, (Y 3ꤽES*pkf3lbB%b,b `ʼnJqmW^>mVķޫhj{e,D%2oADȽ!͹ABE2O:|FZ܃{ibC"$VM`kWRFC5!VZ,.bɚDuЩŇi sY$@(߫՞󹵃zn2S{rH~AK24qCoi4Vv":da; 3AGx0^3A˙Lų h]2nadK09 ]&r$aԩp\x{]%;BH'rşK2D%WCXQ) Wzg)(5zAjl%miH]!MÜ;}?uWf_F aEi}!\\9QI7,_MQ٧qoj͂J}O2|6}|"H,i\P{PX6Gv܂?HD#= kC 7u0~f6h܈[w"Q9EFRXo1yュw^mSWn\|~t q3I**-ps4H^Ql"Ddq8̝`[j5Sxm!_マon;N2Nd(*ڔb p\L1IN$OXKd'dTl|.5:Nm>r?~Im1&_G.?[J-'Slji"Z"݂6ݗfYk7:eL剂8L$π1J9#4I74!dCpLrS*nmBS DӨҮ(oeBYr4@M+QNr6V)_eW e۳z`')h6gr|PPo*o?}NX˙?D4DVPS1>P`̂9Y L|2Vv"󅈄:;+SfCm*’0`Hܥr"8vVFDۧG*:f]?yby Ya6dYB+L> e up;xkwi3~556xY{&^+U+ t^Ll}L)`kvo2[-к\ei͍/>V̸gf^C$f@}<aruۅʘ{X~[0#JFe4aJoLkfi=t}j%*.8$Թq: XNم޹Kێu)RKS/є6۹c U*\,.4`V.kˊ7s}fz^= Xj:r\]2+?L<}zf$"̔`]5;V斫u:*DXV!'#=1= M:r]/!uhIO>}H;6C L~(H$M$5ipz|/"T;kkv> J0u&ט#WZYa@ԣjA/ rOm*U",mco+ ʀay+}&b& 0(nBŁUB_?;6 }F3TO~ %K/пwn·1DN႞2 +*Q'TJ `N8(eY .0Z yjD}:ִ0W[h?! }b bi`! SiMao_XKJ,X$ݼ9t/x!pd\:d.l2Ii翊oƌXS+9r @` h!|ET]^1ɖ,Z832D>)l Wnw}5";=Z" kB __}s*ŔDV3M'} c2wȘWwG=:zY.5 _uOVPӺ=}GWwzBK2qJ@ge$sZ;3f0Nt"GjaKJMw݈Zix޽0%L9)?r)Jm] 5g Q>O]@&)%+sΚ1Cvx3!{ Eoz:@$E@KǠGE\CrRIR@Ⱥ}"oo,֍\E:s:gLgCL̳5~L lъݣiѴ1x3^Fa8a;-cԑvn^qTQW?o,<-ZO۳s2|W0"7N\zF˹Wy9370n<y,y>V~`0:~v o쌒ꮘU<5wU%DZ}cƟtMT[7*^-et-ѢڪLLd?i:wϯs tXl|on{' /znƹ|!*7n,>/۪ٖ|pȇ+-b-H4dm7:CP{!-(oS;}zW]7ǪZd-}}~<,=sy8Uڐd/A$a U z D fE]Jh$?7M`ƥq~ٺ~Z{5A~:oS=iV[.[N1D4- RڹlwmVe|y^?ssE8:N44$i=5 Tw-#=:0,[l;WdX4J 3CPn`ЯO=?#|/~CAd;z8w &ҍ7h8,s:.ZO:O߱>䘰A_ܥsKSMtpU5A+.9LbIR5ӛp#He<҉B+ƬΨ|\%e h#f@ Jk &w׶>e#Zy?XY?Z eWGyd{)N3g2#0DfF` -_<7Lyg?z~ВN 8c-]>#1H>L%hL2"`pƎe.YT.;N&.:d; ;WKsn+&%˛zAԥ$L0ք88ldD3̬Eܜ{KG995&(l z}DWD*n`B^ZF=UQGe!hmȒ|^χw9~w|sb|H=oRǐI~b_lFbP袇aE c3a?ox3$7oIhFn̿m.+h'fw#cԿe~}w{O.:))HT+TZi[QmBeD9 r@̈uL.o۵u/Ag=nR $J0&Qgc`l{Xz=Q~MGk,5wz1RךBgូ^v vn6bx-(0VtT5˿dȌ^f%`dźl7p5C?5$ۗiYPwR ##hxu,g]y 5j C1jj͇uVj.k@އ4,H 2-`32BL 6l-!2Hʤ. C-GٵZffq :nd`f,8,svM d}|V(s6~ɚIIuzMx/#F=ڤL l`c0"{g|._J}~[x~Mϊ$(Jrm<[~<*)T_^ ط~f0>Z tACD|RAk7 x\:9$r{?Ҙ%53 ᙝ(cZTsDH@^WRl yTXyq(hn3, lڏ*oe:s6Eb?I{מ_ź$8z8EIڦ54oGl+!vl]ԉqIrѓ!C''a{3]J5Uz{o_-F?Uu1 C̊:4~}V]&WWS6~. Ͼ۽S~~)Thm⧦UB6o'lAoK (%a,@ a-|=nU˃ck9oboYDٿyVe4HOTu.v7{kB(Lt8&O}ZR+m֘H;1cWBMȯ[Ґ2 RA(*/y4SOk7'M};U d8zmD\r36$;2rHxz. 촣IݝS2;b;j-c^NWuU=Ǘ8Jϯ{h3:=B{u0_K6՚k{h+Ά#IMqˎa_| Gϖx)(";AREztqc'?Wwt;k`jEFR! \$ 򋺆0=/?~ұI;?>w-ۗN{n4CO'ՠ9 ] Džbxt3#ujQxXDZ0\ nЯI[x_&'|ԏP|~HYzו۳?xC$+{(t,unn`+?̸_ vӓNhL! xUTBd@-mhcrw-v;*}uKWt\ U% 2)UZ㺎u} 1,ݝ -~F BfGdas!cq}xBf >S`ǗiU-/O~w -kCl~mʫoڌ+BLR`UF`a;;9\o]լ;W, 륔({9h+lC+oj_D5 UHiJ6p2»RlqАjzۧCQrÔŠ{F!T$D[CA6ڔɥEm;7lBĖrOgXL.*V,+etK%ujnos[߷ `9_=KS9']8{ \[-U Z1i)&RDű H 懪mĿ7C 0߇vxjSv Ef(ZQ(^%{Ngm3.s@yeٴϓ}+lSzRDQs0? 輴$ n5%DTy{8@~o}h;!j0fDe F Š2]ʇb#ؚlVS t8}Y`m4-vwfKX衸[R1?h:OI}[1;!<=(̀8%`tIY,tC"+A^P6rc8p_Lntrl]G6!HR:r<+^'yKS3ywvg85yr K;o㣸\ˈf.ߢ;خs="]qд~Qo>~Ix{j᥶Ej6l?gj< _9tI*>o Fw0`3# FFD`E@dY#$?;'esmҕ`P(e F""Yq=K P/\cw#s4.醿5$7őҩ>HhOAP-@%7"!,MNjK֯ZiL,Ku3PFd@3C f`gy~G嫬I0 !Ȝzp#{Ϗw!M&g68K$+g̰o&1iЛ-#> d, >&"03A"@̄)f1fhԆ%%ރK )CGoI V !&t-¼^;}\9]xN5)H,s~L*jIRNXqW b]ԙ6urQBC㷀rP'@5{$~C=EQQDbO$&BHȶ f. cǎS WqEsyo90N_;=m!J"yߺŘ=EeVlzJթ̶w88lʈLh>YT>X!oL)܅x&5CQHT︿Sn5?sN/ca,d*uOrhe6Z/_C~CwWyH?Ҡ*}3jŎM6+j܀)=b.j=Pd$^L V6F`rLWq3&+qm`|"P@<\! L. ` !>FqwOX\Û7v kezNV" vLڳ_/ӊ{rZ8Haw&Vbf.Mjff vrbRXN? "s']{e\㨻&Az(\ & W_Ffd`6;素q$0׽YbM/# J\+emfQnϞY|m,8GˎDǪ p q*R _Ič]ouձ庼qPpm^c,Eb6!}=:~w("0PUQā}㶼\г&g2hnCV;hQOP|`]`P!4aBDnٷ#?w;`ӨrZZv|A2zX# j*E *\ u" O8^ ~}~t@nJJ{ ޡ7/}M΀U&˺0p/6{2%ω@oP٧vAQsui^dC3 7^BOjX-RK.v, .S| M49bAfLB ]+0‚HSPq#5hy?p|}gZH0P\~gܫ@,dGt+?J][7{^?uo}] {j 뷻y?#:Up/b-jw"׉Q'CVR5+HX.M'*gx8p-Tl1l5ڡp__{&z,K{ AO׉ X\lQOla,5|UPeVEi):LrgPr&#]Oe YxopK+us=l*6b%f25糧#Sb2p{v?@md? $s#0zkNov7XjgwҪw/L+LfXk^ _L.|7#jVwDVkzq󸾿+/Ox:UÀ?+m韘S]g~Y^pPSwpu l⸾|qks:ߗG)k/VyK5|o]^]͖E-߮%j+yjoSs{qر᪡ T$$ >Gy,Em1Wgp0 [lPhDs,K~OoYr@VMI7(>qK,B)me^qn$ E۳sk:߻6K冲} `u+ۼP,^ǣ 'agw7-RyWgU}uŢ%'?xnu /nvҐˮD눐@d3p"b3yfx@:svqϬ,/:@+F2I/f6 !OdkM?]?^L]wv5ݏz:՟s|:~a[?W2JT=qwqlo{Vh8e.Fr$8<oэn}Ju2gT@2 4IP$-#W`чTњ6H,[oǍeJ>]i&@ )(0 Op?u}{o[C=sd^5X,6"]C b jB! I _4L8U` Btg9uumժ<sFh;_y#WJ?Cxd;QlyE ^mzw Dofi,`'A`d7&Dor/v/ɴ|k5v>L7#XRV V4kyunО3E#7%^ry˱g=RJ5nZ/5mancius`|7B@֪!'WW>z&(>ptz0V5` L7|<@VRxѺ)e\a]Cfo9Pg-aN02d"] MCo`s$2_`I Lx9Qų Wt\n!rҪBBPA- g 6\C>YQj#jm^^2X3W ɡ;$ .s=AL)^̅*./=>}́q!x<Ƚk,?/ߏ:[y-^p؟_׶q3?#kwjy YYΆ3Ɇݵ+o`6T3?5Z$ؙ^㫻g^GsengAE'>,Vv #ͽ\}B'NF=)w w؛θ)9T `fNJ0!b`-|O{e!)NM+`kSm(>ϳkZr0k/%|9OׂSn~L}xzӛT9_󯑪F?)KGa%^ʏ)z{e۩s-~/?t}:-|8_rYSk]꾟^!=剖[43tK?[ߴ wңK?z{|2+[-˦t+l/L{ي޲qLT\rce;I3YӺ~ΗayOűxUQ{A`^omBG۪b%c\ uauRї|'y27UkS/۞ŇEѪ-lIFk* 46z.Q['<ioTx-X/֯\e.})KkTuZt+n[/fǪ/?lgtZ6 ,힆nӦf]5ZGJNa@~6訉^3`2ל2n\j?bM^Ih|KC278$rYR|b VGuA*<3x#*Eb3IuV N|,ᙍ|+aCEI&c%m*)*&4\4&Pd-}ؾII''S$o+j{;v۲^o\u|i>+O͵3müZcJ`+#5 N~onZx[9Ia{8$C?O^T|)n'5cUT{s.{ 0j>tGk@BF(|=FHd:Q&LJ[8b~98q}}pR35PQCfccwIO6;\v-*LZ&,#rI"$AU^ԙ1=wuc(\@g$e!RڿC|^X JtiQk\>vWk]v2s憐[?[V6ؙLv@vgO S]4fwUrD5|J'!F_Ŝj=[h$)A\23UX>57M'H LrmH$~ >[+{z9WϾRad?ʆJÅe%x{lʍ&~NlKS/`߿m!4{U+qImf>n]{Ck%&z^wQp+ce&Fo: 3-\7w޻^c6 [|e,B~z?o7:o~†:KܮX/ͪmOJe'y<|_Eb/>/./ξ"{AlT/񎉝h{8 VT`{_֖ÛMb}5F}@>»v% yX\KIX8ouZ l3z{ߚ'ru]W΋`, OϷ˸miK|~Sk]9~OӴc[v]ٯs^>'3XY' H`4[Ѧ袿x=fn|u+ͮLt.Xn2wqS6۝[hld|N"5O5cqWcd*-C1k~=G|ƋoeDLULcەm#<$,耬N4gQǧ5s}aGTP[cLpmfH0s fYXuH* l1RDd,rA~X!`>䯶g ΂:D@}ęF+#b̟:1#L " gB.>,~L| ;PbR?0ƮxZ ga I%51*/3!#Rp_ϛčm"!!tU0^a*a;|{}cM*:L0vњfdjA[?(i^Ukh,džc  |fH ha&kpaQ(^&T!]ӝ??XQP k uT2TÃcu'k+KfħN÷7gD^8R?RQTzg,ǡ`fVxmQo6JrȢí1TMoRgNiΉjgVوeqWXtr Jr6څSSk 7~.ym'o%c"VJJʒzYݛeQ"0wkǍXQ5eo6Qf$VD`1* *ͣJ`Y,B*#"~%AaߺbM$RS-!(j $BIёhը=6m.:Qm<a}xE#W{p"7>[[9Y&]5ԞcyΎDžMr3YrhZHi=]{gzM'EpWipFѧ'7畗~wjS]F g.4 91k` FNZ -'eeV 1oоL&OzLv@@!2 _K٣}]l3ߕ3lo)zL Skכ_ I/2hٔzC#Jz `rSҰh*m" iT$^>^zfRyXTU4Ƙ olzv/Ӧv{tLy犻ݯ(AV_M9YW>{Ͼ˛wqwtkh <3slfME7nfwχG<u[{}E=^W}7F ,>{ؾAw;g1ca" YJڌ7v}Ks %L*i݀ +ȥϧQٽ;{TW֞=QϷ}n=w=zݺ=nou}M<}^σ|WϞzJ٢gL^|zh1% P>|9k{{ovfDED R4Fzj>}}{}]|= 9R{k{@mђw۽;}zu}qdS6ժB_{UdjɃE}tX uk(mE xk[Fj""A%6; Ѫ*Q֟[gvty ZQcmU$J*R$@eӥ@7>fsUvn洛#F!@ɓFAM4@ 52@@&M ILAh &&&'a1j~!4aȦƦɕ=AB !0FiS idbSiOL@i2TOTҟM5=6$HB hhLCMLOc!hOM6'Q412ij7M4yM jOIhbh0M4$d0FL4bjicD24&jx!yzM1MƆbOM4cIIM ɓ "F@Ѡjz&6SO*5Oz=GyO~=?TSdGhTޣSOSfi駥4z5=OԆ~%~dB?x"!Q44p>CM:IYt7?룩blD8R5Q}NemYvi%)tqo;5ƪ1QS͹6Yij ҙjctnЬYZ)h򧻯dƋk͑aDB;<0.ם̭y."EݹcCySP{e!=֕!ִ٦ӹj= c>&sHȊۣyX,կ3n}<⡌Ak,ZF#(D$}{ocAfvM[;k_,cVq܀#I#Gzq4f0DwY[ˌ3ƁRV%A0 Z+<ur?^ܩ+j! wQDAƃۗqqA[g70.sZCFxykU",%u?sgv?78Kųlbаfr!jPF9WpfoR`k_X괛fbN4}r ֢**m`'$7S2 9,GI AœB\+f]zCUm8 wleªv3`^gY%T{Nw+;g te}mb$zLxvS*ZrG,83BQa$u*v`Ǒ|~!ȣ#Nb 4" 2i10~>WO5xC_nή|8GljY[rum̜ eY醪z)R֥؛fꉪQr1گU"@$h6@R@h.$R3[N[(>"^~QϺr D@!ټ0`N`[^yuBs!7 Ng"C+A iU8a8Ʊ `s왆稚܅A{-}ُ\I9Đ@N)<Ȫ/73+'a{<;?SOۜ(Ð>@GEJ"/0 0~)Jvtcn6gwvG^cB#AF.,j@s I0 W+0`y/UEʴ- (Q%<ɑZ<;ǪKTN08+XmI뾒Rn9ƺl##ʎaJDAw{5k,KbO28us,ؼcf3UjD}kN}F+MoT3l}c~<8`UP@VaN oƱgw &{j<8NM\c;=EoB{\l-PJn*PENWα1uw*$=&qQ)u &]%ýXŤEzhgSNIi|6 k1عM}_{X\ʎQEF"D'f~럋|}g$-!~_+K#iF:3 5U8rb""mjq^cC~7ty튏 F: ,5o ufa;Nz Zj4bzJ0j:d]pDqEDG ONtpyFFG3W!0uS3}߇4+N*`AI^M:njG4Cx,_cBNeU 0WKJO?uʧf}tpm~eAE9 4`wd9, 3\Bc􇋍a3l&u QY ++&lYw7bbM:e,-葪b@0`a*V@Xce4P-W %2B Da|b鍦=!Ds*|+/ݳ$c3LT$`89H9RBBP*YHD!㺫=sƞؚN &1XOٱ=c7HY аw#n\Mvӣ5E\kAr7ޅOB2lXJ@ RDϟqy2-`]LV rj:kP) Iւ}ׯu-[X\jbȺ-;!i+,o9Uޖ@`{Φ}Uge3%NkukǎWǩbqWaz Ǎ VbdMMf+:y;*]/Z:"s5jޣI#38\)Xo_ۙ9F2$b j5vI &J 9̦o%ӨsAVsn00JŪ #l!t1֣P"~*_ݎC xY="Q6L^z[k3W6psסh~VrT^m޾p]91r E\]BF(Cν~# .DFG٩LIr)M.#$aAEX V_élrϼ̒H`K8,|uŢz2Fes)o)FB31%Ef6SKv}M=GCIl)sW*I9^+ӳaܼ`o2.7~ Ux.4f\\ːf(*;.pDjօD%hdz*=V&ܜzl(0Ls(axkdc3ۺiJe6әS=WyNyCUTrլc*(SDYŗ}EYb`ъJ^;f:jZJCS]m'%" 1 flJΤDYP d@d4XAd!PHE @dl@۝*0c$AXPR,PE"R  #1PPTbV)H*($QAT"HF,DQ@YH!#_|O8+ $HxЀzw_&*,X H7p>;zö{Cz:1>3(2}.]6 -8b9mwENX2unٙlEgsz,=+,"䒝\oKcļVd6^k&$8e|f(*atJzl+ U6:i@xP \@ZSHq+ϟctF$~fl0YgEeoZV Kj@{ԟNA`dx2EGxLA;Xwy"']7͙waxŮdz2fqKf**+Smfx5Xs`cybqi!U'R"U WPtbE$<1$x0 mɐQ <9vwؽ8qvml9/vONRmM7frnW:.f*f.繯[{9+ĔT5X@R,j(㼞ĖĶ!Af5-,5\(ڌkfZm 1{-Q@;PB(;Hi&!caY C۷c+83Ij493MRاvU6Mk03"wrUXtdG+ &C8yp.PNA/l^*iMIOS+j N*1fJks^gB62k TSy ',J'n2ĨYf<[9J>PѽQ]dAݢ&©Cyz-zGg TI&6F.;wlp0ɐ9gRhioz7tT! O!n2-EbH y i{H_ݞj^ҔN_clW}+q@H Pȁt^mvU8N[LidAJ˺>`\\wKĊ. %[w$]0iaX[MW27IusTM=ѽ?07XG[Q9Յy|Nbk10"VkO=pEYuei*&Zb yXFH= 8HF~G]n#ntpy)N'=^9z'lY>>I<_!lZ<ҟ*t#:^qbUZ.g :==>G#mLE^ѧ69Ν^ߍH@/~qpsh USwJ mN?l9aWYU{Yu=xwQVla[4!!Ϛu~E7&Ը6\ Y/`̅( e6,Cnr|{v`L_Qt~ZL8yi-0.n5-3V@],l+7NOEK }{vv׺ wh5jӑc=32yt"/Af?ln5&t[~߱N;~dUqgeڬ⯺ڇC͸|Ý>@ԃeĹ ّ`t( j!+̍ÒE=Lqp۳M8lŲEZ>o~𤷸Lg&@ neAF>ffBi%Xjlnsgj9W)if@K~n׋_==#ΑdN^g˶$)A =:t0NV; s&X'z٧_;j e <7j<;wxLҫS/f k],3pIy=E.Hnʬ*+/RjGfQXHi| j[Ag|ns(X$!38>륵Vp'PbB8O;w`,yevU PBNL Gpd1պ7եD9TOS˵/2sA @R|VtW[mot.~]dAFDA K5R*/;~-:}7=Zy0Ck{7}~[ 4*t )YycsvT=4SJk(tZW;:Ёt!阺v;hZsݠ% ýy?em^EөOow6>4 ̊i䧕J̎)lV۳K5f/&9@ 1[gtnao3qeg$"`>q1 K g0IAM3e5U1RZfmQ[ZC1W6 EAn or?F>w,+}HLJO-<3*@8m=D97M<->CWVt5-֧c[^,̴O5i@ ͙D pFVq>6Axȓpɴek⎙asO=3kb1aTFkȨEaK%*] J*y)J2pζϻ89v^xY}}nq?7-m`4԰]uV*jzfw|IDkt۲ܑٵkFh@`ʖIa/lG|M{$=?kP`K[YLy"Osfzd(Z[ҘvmU.ܧ[Mc0#dWF>$9}u(!U LFiʕ!WjCA]Kž_, ;;1C>Ɓh"x!1׸hNX] yϿ!n5]۴ܵ4xLrm,mVDF͑1үO`3~ =P9Ug-0J\J[ %V Z2cJ DIT2e4F>M;Z ŻjZ*Ls0o!ϢH]~bKw,[[vgO;κ1cbA{IyJW_l&I&;t_8z{tS:|g(v;GPOK{1ퟐ%,h\dMLQAY+^od~WK`mǩ/F c6CiSlKvuZ֜R.:0F RQ a劥NP,;1y9dqB*"0iJFAAeaX# t?gg2kӟUý;^?P 9Xf˶\LQpl&c3[YFuv*;MEAEjjq=F:cvz(q.*zsGZ{v8 Q}Ȕ{MW|3UEA~eJ~-DI$"mՒ܂[ vJW^dx]O?OR#5n#1"ģ,I`HP#w1's'g\g@$5]ɋͻ**?^)Gl4bę=n j59t @$vvsXXAJn?H,к?7mL;Y:+n?n)Ot(dG^;u s۶3~?ۏ氁Ђ!T[>{ȯhoȐx#4!q=qN:Ĺ)d~; 5vB݃66 m_VhC Y"ڂ0VW1ak 1{6\}wAk"cqd+|&ucT]"@ipEqRsߜd˜lٶxJYm3(԰ 2"#8.̆v4dmle6tȜfRmb5AOs:dټgtCpFsP15Bh,bBY䙒sII19nnoUE8LA&mVzr-^#R쁹A2SX=\T9[sJq뉜ddUdĎכ E-mNef/&nKt2ˋ6Mko!vjƸuyV4Tu|^> 9'btf{@X9:3g_ :@@00fIӾݕ*̒@7`66$pFPs D&j=}#i ڭx0Z ^>0K.4)7xZ1,3Ll rA\vG`ϗVްi6f`[ki9"F̈́-ŅxD;'Ay6zo7z40Q"vwf)l6o8uXp$A1?`}7sX:]Yu3Zh;?g5^(WI{ISzc܌e^ad.v-TvPų1v91<+ìGgY%I!2llqjw ٓ%t胓& uWvyNK\pAQXԵ#muCt_;6HPd m䱞[~-'0{e@V9 {`@- 9(:סD|,oJ("]э]r5~4 F Lu "4\VŅGvHaFDH/!:4fm[9`PHI9-bZ粈UUbE ʵ*0`DS]Mi<ʳ\v) @YC |w)q,"t 2x 'Qs& 6Kkp4&D^'e(Qsy`3lЎѬzKAjѦ㟴yIa,\X h6NjI%m@:(it@]ؤ Gs,Nkb#VeXmC0"O5m`박0/( ք[Kwv)6mˣ= b ga<"ĕ';): H{5-p"q&`4  W7tob{gq#Qes0Yp(я0w'`=|b&}eC^,LDqX{alµ_cT. c2@ԗwux]՜5@Y8$[q!iΘD҇ۙ/Yg!g g$ # 'dP\)k~'{~Ʒ?v=GcEԒEh"rJRRr1$cEKT,_HMw:cly5~rִbQ-%i j2A2ET'tV1;N*"nrnn RFBmpQh&qrJ ( JU6;>k֠..4 \}Iջ_ p0ŻW-(PZ "mvbio ]< 0@\Ic Se)G2$tpYBOApQX2ZN eUl/%^KN {VNu"72W% WFsҊu_9NCfýtJ"s,g[A!R\,i3ċ)? } q~7dD˂ԣ/WL:qlF"A F#Պֱ-E;?-[9rbQ4&-jmkf3MvsmpI:oC9H,yQQ!?| $'BӌHtSAppE,ǻHG$h~t|>J5p7.^|BL)jHX뎯Hw1:>"-Dd>A޺]>B:~bҕa@Z L@f C[NJͅvѐrGhwV4⣠[G&Em>Hc|XK~]ڽ.NIazok>_rlmh~zjnzIadĒ/GZvd!NP L ~@[LRk~y{vլk[uqv` TF!}+Ov_ѩ%L:SCMR`K63Cܮ5?G^byq'NZS@뮡G;YWǶAT h'JMtdaSN/֞j# 3Fǚ|oþρ}w <'2cJQ.Tn&0_t* YeVGŞ.A-tU6sL1 9[ \=ޮDbXvD0rA̒DEgHNWIR8G+to֏cqw3S?B(`/.~",v̾*LBBf,J(k|i,Rvջ(Yٝ{/*joK.pSɒR(Pmb iҶHUTR&CuwA|sG?GJik@Z"&ϡǵpuì얐:{:iJ(qr)oWPRE{%ć-$(%CJ.|@aL8 )3"3>OYo;- 0,S=(P'aZJ/@]OCncPEB:Oe4"-YO<_ /N6bψ4Gߖ>qG;HG( P_1mwM!9{MZmUt&I~~"v gvJrAh3X^qEۧAu<[ $>HQ2홚ǡS,Z uGqZI~z9 eqVU1r^AWޱtϿo߱84v8ϧ @tV2CT 6~瑢j.vVۡs]S@p,{=MgWz<{Y//S]`_|J-ruu{a*Ցսf}6٬~)9p~m3eıIn5 (^AsSeú9 _*"\;gݽ5&%CA!Wr-jpJ+͝ʥkزwz*x[iR߻5rBzUY+ֶ%$1Uf1[ϟg~T wgnJ>Asxks5WTf0 ;*U*؎;U`vJ%C9Kif\A@ju:ħn6p`j{S*RRyǹ|T,)z,8#|6M'=$,0Ts*P}^,}9Bk^/W~'>u-Bd2Ę3vXMwYo\ΑT- >8~5ak^ȑ9a)=IQu}s.KK]_m!Dueu"Ê.}w}V4kݣِղ3iL?ח娲Vc%CmV} wϧ3uz9Sެ&B+1ym\v #R}?+W[|;>=fVyo8:)_hēRУǼ1%tJu|n᪾Y,B"0$8{w0ԧ-{ItK~{:^#OCF|>UPH`\lg,R<>𞞖{1Wg[Ս(*j‹9VLD Y4:~މ\]Ҧ"n;:gee:m6{m7Tɝ;9TF6Cr RF2&˨YTs[,9֫ ^dTmDs#MZm_/efhHcp}Os ;%)uOcq;nQA_CN \%M|^=;v;n_qoOYj\GU29rkE:9wՔh5s,Jiov+Ķj??Wd!RK$@0.=Yk㎦w.O <˅]X 8퀸_..Stےjwk@:8ʟo[${#$A2"?Y<Ξ.kVӝV?XA'RA& +y.>*j)'$#\T<?~Fi7hC O <VK(Z^BEFnsr h͋D NZdwV|_ã{߷] cr^3Q8Ap{Ě!QOi?Y_~ezh^T 9gA䂈DDt$>9OTB~o-ސaO_)W>5S?NE?MHS,K"$ HK}Vn'l 0:~5U-7t(4"8^zjL:2iD(L6es%ڬG|nt-JLT$ l,:*hSf/:tiz!=3ka~W*pp(3\n]saAJ^cY:Zlʛ~Q Nh+MWZ'&$؃7i#)Ԙ>țkK70 jkOLR90d_Mꂨ&5KoW^su ђu8\Vi >&5k(t/pGMMrﺦ4$H|שA2o}majyC6&hi5k$`%NyUu]Q)?|o8j&u8I!]u@ׂpnLwh^|0\:NG ])?~~_$I[iuG4wc@EPFzP$(O֏6A4Xfo@?~C{e [:!{kCk.ÿly2@fQk[3J1, Y%9nIzr"(m 'rͮHAAӛ5gG5F@w[7e) ͭXᢔ`; Q[ \hXbmZÇQD?NpcV.~W Afqg^MWh`Av`^ 2kKL&mxjrq|ss6'L32٤8Ͱ!Cl ,p]Nފ.kbӤ{Xgw}6ԭ{i&zx~[;-dH24A" @#;׷=x ׯ8T, 9cnqL Ƿ>HZDI,\P]CQ8xuLN:"e:.cBݒ}~VCM6{ Ԃ /TJwmP"ȁt~y^V`Y,,@ 9m@ {#, Y+)fۗ- v[jձrw7>E8XB+~zodZ"+x/?_tw {<ĝNHo;`#VX)(si%j:( ;$졉)L"$(I2>uB81$_6AT\--TճӇ<$Ř.\^32 DQIN}'^tpq݅y4&aϷ#i`ԙNX~</vqjylH-&P8 n j)ҽG?ƖLKy}ϪŅB<ǯu:*ڥG+٢s[ f*-=C"\b)kpRb_R=Io'i"L;G{KוȦꙉuGM,>$v8 VsڎU4W{ɬ]vb;q{[Yz]bꉈ<YI6_4sw&"PG! 9692&w:nԞ̽L4쓩9 d`t')pjU\1 5#7"zPE;@(l: ,/Ճ wD0b -y?n?.Q#n,)! 1z$Ȯry߾=A1s#Qé?J1"_-IÙ>-XCYobj 3xwZ|Ꜣdrsfg<yr5X= 򔜆׼vxs:2zB۾e1w#w(>s/ҥGCp|C'=B#G\=VMl!og##ƃ3ǯ}YEk ^oK|sLfs<3_F,[OzW,Ɠa+}[W|i<_:7[LxJ+9X_tWtBrLdzOi5q@~^b"F:~S qn0UB!H'NFKZ ^~aJ)Uh>gmp|K~+T./ 3eL(^~l;eBT;_ٳZ ?0~3 k ó AGo|H"|x}+6G cznUDtJ^f $iճz̫ZrW ALy~Yx@Uæ?r|_ AlL!%\Y;dS ħ>B̒B_ fB{wrzAKBAVN1VuˊA,0z{FN̲GcgO6j_' 6+TankTg1kT`\j/|/D cA!5(*KvoRdP" I#) >_|bl<4hl2{0w4ZoZ#_kel0vӻGܹaNA\u GU:o2+ [Ec߳9+ƍ[./K](ϪpI D,6 ^(D.pUx"FQ;k5u^#zSO1|VbWߕU=yϞFF{¦UCME̶ձ.L)NShme;8Λm(в,=%fWJe`@d4vnA6X2dC"& dHU)N 5UÁqR@BJ9kڥ7I5D~NJI`&Ȥ$yoj8.ߗ?]^*cw`X$A@#<iǮ3KʒCKa7>ly:v1`i`3>SOkV١>.ܖ)Q4!^˒'\V5cN{?li NƸ!E)l]8pwwf7 V302c[й0B  c'=KnhVj*K)`ʵJ()1H0J*Tz[ݿݝj5 >#Um޿eh9" ?=WjQٍ&)H.,: 4NǦquU)9ޮoFfΧq-oS~.$8(J(lV#ScZs4d1kЖ(w/ _Ǜvדw5BON2xG@<;]QgbWRIԜǜ1ܭgFRloI/v|e'0` & M0D$ 5VoՆ{D!Q,iɊXa}dڽ"cU*f|&h|z~gC^GW\CHE{B$3,,\}f0G/STOS2J |RXB+xk8:a^'4zcF_'0L0u\3OKW+y&7N^&Lv{.ԧ/4.n X寿].hqYDzVC8D3J9MF N3<Ď])SfD &pt ВlI"0LaEa^\1lZK&4D:TXP(uM ҞZ胆yoЬŇ7NVHsm٢=dkXdkʄQTRrw\}ӳ3HJL5wmjIHw ǒ,36܁ {| @w!J( {!6m9Px޻Zp> УU^ ?;4,4{> g 0nf!\[p$"PKs*Y_]ഐ463CP.׹ydM]5wsq9WM9 jK "ԭ]CvˇUѹ.BhBHIjCldP)D&0PI,!1@ ?+ExyStDu26݅NG6gھ!ѓ*p!)v] r>[p-3@ H Ȇ  txxv%<3wKpAPzoJs'\!xxoaĵv[BZbT0]R$ %%TU{X!|=XҺ"ػ]ڠ"P ԐDaF R|: -OtPs9W-$RGj)! 1#G:+ȑg_uP^;m>,]KV| yzu#Yb/LdeudcwQ Th֛*Gqplp6ap(h}:cJ {JPBgg,HF_{܏HftА8͟Prf>bGPo'f d6  $ $l%W4fO}~?/ˡ>k>|ۘX_+@'.J,N,$H'qes'l7H:T>R|װ{;'H)MCSQڨ*Q5twWC5Ta)-&&du#c֤7qmEKKA/&ZL2bi f h>M2?jAĀ-C-70XU5 Hȏwƙ%"-h,1{j<oESN-]HmJX>1x^z@4JбNfk. I&7& :z*h0zsǙ9!g>|˥d;\4Od| -7<~*a =Z`p$ Pj*a"ֳԊN۰jpA,*L4 X NB~DuK߷ø (, V 7cq,LRDX0?ϓv|mxHf8Qs `IxuC5+I H݋x0^3~۪<\~)$8㶧CN3exZ-$ 6x6NӸaPlbo;HI%ÄOwt|8mZ;z. Ҫ 2؁CE˦=׬=+Q**'C $y+<~?qGeit٪rx\?+\.z20Ϲ.Fqhԁӫ[,R B[9x l1Db"Ӧrfrp]&Wm#xD%I!KEwórUU$"tLڴiR\ʒL.(!ܳP pPWgujKQH9cwvBI^ `YH_*k]ItŒH@͟y8 M۸ fnX .$G{Y5GyHL+5EfĆ-CH@\4WgGht2cy2 Iуf5Lg`XUNB.hi IQ=&#ϮLӓ#6 7:S;r.|3Q- v?%#@fd"1"lXn,k_10Ւ!,Pb1eSGEfUɦJCʪu)s $цm* èrY !X I^vh2&&=ai#rRgA,W͛9dC$P:/>d1ϗ9hۍQ2 /|uzY6:t۳++cOI\ +tlļbo^D:nRZEG/vN92XXY5:QAL"ϸz&׸:<pG|5L4f\7$kmz(lZ"ܕIg;QYª`z~UۙhAsv:9333tA 41hg¤ }`{J͋=i=qm$N~VDwb|a<dzۘI4+j|堧tWIjꕋZ0bȽ*6Zެӿ2_d '0pT֨QɃ Cd519&]Fo}ַa"q`Fzu5ӦXأ9'Y;se^bcM؛|9hc{Aݑ:o|XIr`/03$1!QO7Ro@gF$W5k SJN= bUdt:y{a6{ ;6mH5`:yT\;g1*łȢ쓗.HtV9~RBp[F]H@ddJr&BׅnlB:_Q`Gg,6@̡ $ g+*8t.Rѓ I3jH_ !sLLvkPTy]յC tNBM% >A-hTTvv>oxO!@6MeEjUG.+)kA!L%C`i,x 6Qpn,M&x UHBRa Ц{T$۴nZϳ̠ln)' d#3է;7_7c Zmr a.ϚalP8r_߮Qko>/2F1T͗JMçxzHpҭ Jo&#.Z4wݯuR 0H]= d઺) c_έjN~(tWj)?‚' KY+mKI愬Y K6yJԋKٮiB1/v0N~yI12!h1E>8XaRC-iح4>ߕ4ȸ &|3&Hm}2k۷T'غ< w^xW]6xC'lոG!Րu@Ph ja9k0k,4WA>qYu_j⮆'`<& #]7rxjl&I-h3Ejt[&ҳs@vjQC9V'&P.۷v6k}U2ih.`M_& KneRLk2NHnB1:0۪XnqJ&N{θ$q  @4w9$mdś' fԔc))`H"EKU(`HRl2bKl*x56/C"۶}{pP#f` v-$osaܫ /vx#meW&Y)K<(5$ÚV{j#g3uSʾ}-" .G-mW/GZ(,zvHfft :HCz]w.XcFe:Lf(誣`f$BhH̲+T:{^RMLieZEnkm0Z-pt78)!qs~um;vyPP'NiiJ*Ņ(rUjӧUu_Np0`P^I$6xN9*t!3)l4Qa$%>Rx*A;Ip&G" aǫ:>-$hūv޼V/i9AoK:W|mI.%ISa W4Qt e$$z0j9cTTH'u^bcz{#G+3r:[% 5/Bbsxqk =$GA|^Cyec狅@󝥍R- ))<ܾD*HL Jm5|훕RQ)ܯ#I g+sq t!(avCX;>$oΈ7oImř|2{;Vq1, [;U׉apULƚ0-0P9Džf%@s7u0)hwS0-ڨZPAq&DTOKGڃ:(_vDW`i ّwWӹa|jCu 5sFk_Q4f8(h0CCWFY2kMꒈt5lwH[HUYMd~O_7p\h,9;>n[z"V@̵+$C;2zB@y WW#NDrO2Zit ju^@XS$Z)Uo6W4~@LjB_(nKҵ^7sû}Y3~ d\fܫ̒tϤd@#b8\r{ii\Cu [l\K`nIwT@%BRE.2.ax:tB)!9]nA/'Bq;˱FTI9b< ց]h; zKRP!hZU"ɒkbjH:$@݀8nQMRuJ@'hfHSbͧ{o-I+jpctQZ]:EVH7}r2혌}zs''-ܨذ:\7pf`I >.͛v`tcp{e7U"Ii|Q8,2`$Hj*"" IE bn,,`Uvg2I 4 ;bH/hч82Y2Aq֗=;ujr4,"ȶs8鷳k[d@ONE ,(װ ti?CېMZ2+xmj2gbw+x>O·f{7JR-nA,T$>= R\]4,qΤ=_Y$\ȤxcU G9e Myfû."sI8pY2Ē[asc6k:r&?w gY=vBƛrl☖ X4dĵzaLrBH$I|>JA,Ē 1aOl pދlQ σ-74ԻA"\ " 0`zFu-x!=a#.o)&}1"wK7Ÿ~xp=D)7qak˸q%WVs*Tچ(=ү9=Y"v/{Vt#^UZ\Z7f6ۣ:MERz\ $9F1|=K#*]Nt\4Z>'@0$1,"Ӟzg!={ANc<**y Qr+3]mf`mQ{dOT* wz$F;ϳ>y _&nR?oU6<+z"H0"|3d W}aoKE:Y@b coFȷBEb A(U}K/N{K gaOӯG[]H2ykJ 'W!_;ٚ;<,@@j p -V$bD@|&&‹-@bq#EAdK@*7Q-Vy gfΝ.( ryĕV6P>@;_[ivE .:t]hG].D‹SBQ hSS@rF1;30s̻<>صs.!FX @1I@Ų+8a7t;_zN H * _L  T a.%x%aT,$'ְQDyt=UGVAR!@U$F1wa#{I"b4^-ukݍ4WY20qsOIa?M=Ke468$dc=s~W#$KfySPj 9}EbN# !-q7͂ Z$h3 bn6ߡ(4DfO;{WfBi gVPk[ꖐ^I򙧨̵`74F$|$=l@A@&J*XHAGa}Ba¨gaFqܘXN1ӜąiАqvBeb,$[e5gwп;DaHqDGW|[)Y㘚ELUݞ@EGUC1*6gQj^ h]ϥ)W)AQԝ)UC{QvW>?BU6SLH9QtRg(IUQuy'% }%s|23+>歕B&鐽Aa o#+<^e*c)MHyą̦ՖS)H㲗SkYۓ$Af둣fk{'ȩ%ojo9ZҵEW\66T\r%H=5ʱL ~ԇx$\:Hf ӺА@scdw:5!"7[-CRu,2ו8ӫVf鿢.蜮;Uxǎv4]ֻQ hw=F8 V`5NZ̀|eKo%u "4O\w?BiX&Uj<L% ,7L)}2`瓟DLj|Z_XmZ*k/~yS ^2+5MwTU,r2Bu/AD#&$.@F̚tIxj8Eu1N-VŰGfGcd+?Y;Q nKf?/Zgk׻2R)\QϽ{m7˲oaB+ 0znָ*G&u]5z}vѠLJ*޷:ۏQllq\j+>7Ǟn>cD'>Zc2Xm[$Rf6yI68ncx087zw~6UϸB04ݤ*G%6zZ0wm\Pg Hmx1g8kr =.>"HvwlأmZ[ǃ.*+:$k[X=>ۿ-&ʜ(}m Ek ?3z#~7C=+v6S޸1Q{Ji8}e ,[BsMW |debͳ9| `wr2CƉF]'R48o:w7OT/EEeW6- CXR䗚ld$| 0EPVdهd|<_̘:E vC6T P]2.&DHa @bq%,UK@CeWB9#Š!"8 s@UTAbo.@dP@;`H%EDQ$@Sd/xH(QSF䢭wє ~-TPB"B:Su>qlDBHR d\ťLB[>| |9Bj%Hlm >0rF#@}cH 5d2<7bPai.OG) D|!ӂe_58C{Ý_;"*! b<:9~cQk:_zI9#Rmr"'!~'~f7tdr#4'O  c19{دQO"R&f( ?b !ym|~9]~v &|D]k)\-yO@T\^m>\gQLS1 MT'M+vB:(U ZqWu01ʖS˗S#kS&ufl`` c#ƹw6p,a0TW_2+QIn8Xo8 [v6LFvg}CKUE7q@=Ϧ'0N1`$P4{(nK? 8kYDy*to>M{ɩЊ9vx<0ݝyXv9Nu~{(*y_]'7^5DNtx9\gA~OU~|}7(=`myC>'owZ"2<Tӷoq?q[L6^%p ]")41p|(>(O(#U!P`X*R*`(m?)K ` #d "2 ")iʠFaQ]S Q G91Z.=e; /«f86'$ڪi%J &JR>w{}Eмl nl D>͏S պjs yG1@! UAQQ1R$EP+ (c,) HAEa ,QEdEP*#"$X PEPX,*,XK=ɂQV$pvPrĆa$@T^8O )v" v/ỳn xu7!ރu*Noi5z[z @ #J p|.ھ7ࠟv^݀<+\qUSWuYD` ]&|AB/%{ h@6ֲa|b /?ܪ)}*wz+0D#sl( KaD҆D:σ^s l z΀ `I^oT#6[yyYETCkA}=DSAB!mOq-{8 #('󮰏Sp*PߠA3O'DQi^/6(o^r) 9; +'}🹩Uvi~#\!Tp@k7PO=?3Gw*/O?е^Hmt370$dX;i$7āKClq$a-h0!C;_C+?)̏Z{IE~4&Dr]^l}c/uqz%@gPK]OT~^'qv]kCWn(P3{tNsCԇ'a?р 𽽔9&H?O|dW{z懆q!(g?\_ Z)wSɰ/+B޳.rgػ8(!gYlئ'6:p/Y>#=t>k@l }W̞݇Uր8'"XGωt~oS󽕁}LJ'3H'F4yiI`>-,#tϽPc5_r p; @yvi.'_ҡk @ÀQty*XMbq"@Rp⤉` }L;pIrZfäwG1xIwsLI6Qh$4rʻ%.Sw$xHD-T1ΰ+u$2^wSVy3{m10W3e{4C#n?,ڙ#ܨ =ͤBfͱpP{~zsBɚ4@n_qv/CX6-$ΐ4Rk` &;m (J*!٩ S r7ILZIjs1Y *e]t>\ۻn+|x6=pY3 Of@[1rDxj D*"q1i8KԱ1u}XDh (. q(9y DY@E"(~* .EE'#8heԑTbỦhQT"2 ! "Ec T0SDE (Y"(( ȱDQ(YE1DAIPt`*:1AxnYEDra! 8b d e%iXe!:# Ȫ 6IH2 6P%@F/LܠPa)YDB /QC& |xrt67\M2xR =PgR˘E%"HK.f?({ _Q_kp=g}QF@AT7bP P0z ΂w߀)T:/0W4΃37b6*2D ؂/D߀!<*aAM^ "m ;8 "Ȋ yCt$@!Y@W&2HނTP!6tTqQ- r9! @ x ꈂ6f##"HATz3]dPL$tAT+Խ1N(焁xlS-E݂k$"Pa$R("UC硦AgVH,Fw$6_KZ(Q->.\vwkZ >ӱqL1lѽ*%BID(Y@ ~TE*#̂9/] ڊsH=iUR@A$ApTC$;$CO ܘTV@ QY\Pr@Ҫ HiA55c!΀"%@R1`M&$5Sl72^9. Xڥ J\ UрąUTLX&[+8$]6˯IR(a11F3,BHyB֒IԛsؑI.,S0,W%&t CL(x0 ,Di LExPcMSL! +|sQPd 3'`CLH@( F)Y@(S$sDM؂[LMwU@A4$M]Am44DCD C15ż$QMȂ AߋP(1"HCfJ@m"& TA&X.tcFBgB+SdyE':y3ِ>?: $j[&x=No]!vsLBYu w07밨x֛DչeȎ?[7AH-݀`T7RpsvZuZ+)K7Gzfg-^C,P|tvB:/ YW:Eϗ\;4N$,P5S`=t!@ٚdR,1Eߦ? .QL_s-ak2s{y,;]fɤX Hz|t!@dE$YBAs!+si^lB$!|'nƫ浢,|֕FU(qFDdd%b XEL("X^a·={'Rt`ry:ҰOqb~%wvJ8`$yp{{%l(5Wn&ӾB\i?':G&}\X)'UC:>UɗmU+!1P|DFVK꫸y]/HXpa$TOjע[ +!͊)ŒsT IoIb;}^eLT'ztQdQ@XaaYs{'j K8LHYص:uВqLdbdrm},R9KJ(.%Bf.}'R73Jz{j& .v,N!v&'f4$L!^7I!;B'?-q\'Cp:Kp~Kdp]ܚ;uL1ӛI`TܥH4WEc1%fkň-|o'n8Z7eNm! $H ffa6t~_S6Cݹ+.jw93ݛu?sAr@$Ib1b b A`ҕEDA }TQAQUPXF,+QTEb""* 1EXEV,EQbbAD^:>oNmz|k_8Ϸ*V |)$u.b7;VB}ٶgrDAH#J׿߽ n9;!<ۣQTp*"@"E@AH($3ET+hHr:`VI$ϧܾ A!Eb(߇/}{k@9 IAoC~ LEX}c!b` ^sa`@EE?;aBa,(Hh T^e w]]SwH 00"EbET) T ($;Z" d@DXF@GЂP';tv݀>Հu`"$AM@I@d$!~s@Y@$D;8 /͟@Y1UDcMh6Is"THY+Ub@!%"O+ DTQUUEUX,QADQb(* h( #Ƞ ,D E`E X($@UPRAE EDTQVR,XH"EXE, P$)XE)d0H*E$@* ,$R@Ab!T@ ,,E QH@F(, AAAH $U#",PDREEDbőH,UX(@ I $H(@PY EH"EB,, V b,D)dV $B,b(A`(E"d@$1NԾ$~^""HQr 4n` b"o"xx(s*jkM/"$XR" ")Q(*XE`,$Py<%=€wz\i1Hm݁4oEOg#q;ȝm\{V-o饼=S Ε9=Bq[6nsv=V;N+' 64P9] =0v^'V8y;n ;3f5we^7>vaQ@PD"X1UcF Ec,V !nwbAH* U=o!o>"|{sؐ*+U?߬z=:ޙ|a QEUAb@b Dӝ Bt{69.JٜnqI*EY)Tgz?gp"}rÈz r%O1eC. cVM(.軩vAd/j@* F{yED@WѣGfN@Y" $#ݚ6iDevUؖ]lm ڞ엎[l9ofDMAOEZR+Ŷw*֭$/-k+%m D@ IeԐ \IY|/L9>1n]IC)<{#KB~5QT *) EwVwlR}zQ' ʼnjZE̬'NOXONuݩ0u%nT3b< hFwRHy@ ֕ܝh^j-Ux6<6{8(И.-b^JdL!1<@|KNZ_# I+N]kyk^ݽˡb_lm78̩6li˓i@Qgⰽ(1v8NFj;tHUִbbW1fCca=m}WΟ:z|bt`)E ( EJl¡1 -!<(A[ie^__=^FKsK5Tz.,x6-:SspiavhA JR֘ csJCW<q~U]~㰺n.NY2ZsK$nK r|BCdM/w6Euvy\*"C9d Bfavz8O۪KH@@;h nř3V>)]e lL1>)3#<>'~9+U^⡋~ |b 'G) 0E!4Pl@~ܭ9cag~gaIj(2 WҿbO> P9~.Yr1XlӚIVΝ:}| /6rQ0oh]Jlm Ub TY c| ضdv_*Vō ?h Eon dC {OqKsug/wNfKCN#Qs=%G7qUĴ(,\7R_ĬFW+:clנO+8K<5@v{fbprU_gMt!"Ⱦ_~oSt%g꾵֬'q(>"E^k~y0RwTNcO)RŮQD(}_kSR~%P$۾fGC'=]2:;0YF\ w N?[ݿ cgDD`mp2%ǥpӣUq*?w`yEsĬAnF;CئlOQbLSmHX# ExE*wQᅣ\cOH}/ƕ4cFVN! UXD `c R5Ff~7%_'x_NVW_@MWZcoy '`Ke@[x}K (Cqe:<,*_.B#us;m0 teVdw'ϯgx{0Q8 cAžϢ~ۯVݬ4" aD5p2@ 3 *3ZP$!2 )5n/ P Ö.?ut`;[,0. +hED$6Ev8Tb%HF rB"r鯆gm_[xH ϖ[Vԑ 99Hr!W <6~  =6 4矉Lcp`?–ݾ*:)*O ]ßzO|O^iH$q t|Ϸww+׿w}u^Ì\ht\~'cttog<=StZϛnG'/;ΆVgc\rcr?Wg+X#u9|+IpG5LGp  Uy{ݧЫBrT ,H4NpMߜ;@qk oV|: "t+@ H'Z6âMu$3q0ȁF?2bj?rߑ~DMRQd M1)aSBqǹƝZFS-Hϓ o5kߵ_IeʕL_H&tM?_xuQbwUq^DV9XJS Q7{JlgRhG3")e͞+=,ahE臊34)3."h%qs6YC.-HpՍܲaעMos_N'{'<4 B^Qqv,7lS~~/.c{"6]Iu7_.$+s#3-{(ȽxueG1\ wDCwKhpD<#UtR\d&A.6@|7D ]S'Rkؙٺ-H { k978f6QdC쭝:W7J". (ٷj>ҬI AAXu]XXy9x^H̑f+Ϡ)qyۃQ$IBҲN a-<몡MRcF?H9}u*3UEzm|*Zi(dn|;zF)'w  Y-ֹa(G⹑)me+>WKN]hL X2N!W&1lB yE_Ͽ|,ۜcZUkY9aks9^$*5sx[ H_͆;=VY2{˚l^RT،9NXYI7FSzހd5 !i!Seu_~6͓(5")6#F4W T"P(N?_dX-1'X͹_2m0:LtI?!ePW9?Ū-kR~\i# {mݍ;#ӭXZ1^(lOG_*ueX(l 5luKg-M5~$#=@t<M<-_9ё}qwzs@˜(qtSy7_?m.D2aGÿJJ5ީB0]2 pJA`z!Խ'_F3^B;B{.1p 44ӸotR@ZtHKq"ֳ' G EK U,!u6@tΜPo63}MDIR_e~ĊєUKrn\s#o[ʬTޞ) &>o;TQq*<5"CWXgG9Oו}">˹JNJ^S >KGmvָ&lO#q7X(0eSd0D"ؔ+Gҫ{黭Kg}}~2wS}Vcrӯ1}Sk:=1R(T7ހC"AWREU b*yh<)IG𫹌)c H 8B_X_j .߻@Mg 1YURPj?sIF~|d\LQ}Tz)'~w~0HN42Hw4}Kn6w1z} 7-s{ Eo7ģ=פusZ/>4J]o&3W yΗ9C{DBEr6,~e?N}>Yc,]a:;t,x Ł5aַU z(@pB;j:Rk^Z:~{jպ6R5Z;^,K/~彍78N-лkX{8>w`ǟ߲+w]Sއƾ=ayS\@xl}p;{fkz|wj>smmDsiztW2aUq}wu}>Ku!,s~Fa֐" @0`Go/5m j}/x_rzd0vfg*To~J~[#i m 磮 Y,A!pq\3QԸU8R%";4:$Ѹ 'R,r#ڐ80dQa)(]-w~oXt|'9Ot$ '7,{.}SN5yRA:D 0j>B>   h "8"݊(' gqC4IW T*"lQ*pm%ۈ*l9_~~Sg;xޛ8~,hy B0,SAۚ*܂?X`9]£y?ܟ]q}ƧZUE"#=Vg1u6 8T E`BV Gtܨ3KXݹ~_\lzm7 CJEdžRL2V< )zY8-yo`B8)3Aڝ 2$L~%=gmBlH$s4?LuE-#_P:z /#LAg!_3$P :-}xƜ_cs'"ck,mNBQƞPp$tx@u݁Y( (,BLɬ]rV]8XM2x-ػx5VPhv ŵ 9d|kiL.ɛfZ2͌S&Fуd\k{aߕ[tM$[%f fR^=<g^ p942oAy@ 'ջM䇼+9V_b?6ǻ?W`[C 6N,ϕ,|tx}KN\n=k@Bw8n)G{fBX>@Km74k qDZhW=9|;xkļ5GzkNG$x c~zqۭz]Ǭv E" H_]_f2yS淲S_-e EI6],,XxmDPʾrG!od_=[]dp7@!C&BB.hd.VX쉳V[t-^CAChxSZ9u!T+j;ꙧ#].@2jwk.`XYwӱbH܌Ra{^Ƨү>)=J*])9;0GsꟇo`KRcO޿8{c.Vlv3_R= lSOjWW/,ك&QRǘNcmoҸJE-r2XHp*뾏FKUlfg_.|R[(U2w^5ii k]?=͆R0.؝;N3KAo&` "H4Y;4Fww(kOȍ|&$uץDbԡ ̒9auίi^glldծȅi+3zal/? *:: I)N1\fYxlT87<4giPW7kֵA'QA($22\RM.4Ul齺|\NQW&xx,y/+V9;~B܌Q'r5nꑽ)i3lX)߳,\+FI~/qt|Hv>߆A!sZqѺ]E $D@NAxt?YSң1%RYr ˂:oX%;ShWÿ:FyM^-keVt_W ~DvY'$T%;+j{m<)dUO@>qXᇴ,y&εܗc%3o^?eWl*I{bbb6ɝcgg"d=z0u0 hYjٺ*"!檎~LuT::#G&B99$k"3ܠ“ u*we%ai(C週\t0_yǟ9~}3CAv=g0o0N1H cdNOAOL ^fjH' `&zՒNNQma`)?+j؊~iy* }I/ŅBߢ߯TؔHe)=NտSN= od.&g"dzw y}~䮦.7 h^W(#!WF|k,Bͳ̻OAMwZ?K~e}0?ǓŎڇypOg= x60@ Vt.lN Ȫ>0Lfn֊{Abbw2OŁݭ[_$ЀM*\p i4)M(~ۭ7*l2&:naA*HOA9sgYSS{dƋ_['v?#z?&# _vp5緯NѺcjes?B@_t?r+)lkm_ta,oi8i?Hr?KO*&óeL ^vp~ lzMKvoś:QNw?/>63;0㻳nv&bRrÆi^NSNɦ3g Ϋe;͉ϕpzOcrp/!e֮8ir)4a"*'XAo{ }=G~{`#!b2FiQQj>_]~G'|}˴2 !g7 N*Y"PY1`E4 'jlRĨQMSYEL eQFjZ"U% PH˓9'34$6YHDDAY,!*ʢK hRUR0 F"K`P"P <}~ A hI! Wp l@b0٣%QqlJuYj`jd?F 5԰qߜ" *r0*?yEmŠr]o}lG0;{cl9v;mggo(jV4 Q /OI7i"6c~~ONC_z V* 27(b32C("i:} vƙlU/>too͙0ed(3O}<4b9bj VQH 7"h72p&vޥTcAk%| FDowj~7\Cns6 3= ӂw^yO۔.Ή;uIg#~T  H1ʑl|K)}sv-L9D>QҊ]d`/aT/PPYAD$UP2֐(tUSJmӀ Z"';3T0#u׌mq9Q0*F4FI$]4PU0`KCXC<[pܑWb5fr8v=7(,Q0ZA\йV$FjJe(ŎP_ߋ{@tLܬDFQ`0d}# !Id*PBFy{ΣִN\N$Ī%, ŒW:?<qa!orI TSJ$ Y\|>>vݷжzzۏ܄DdF0b >)W$),m Ad,_2.,(SC aHL9-x7KՁT #0}lؼWS+4R]IDZed`EB>!m; lHpPn>9o.F?8)b6kkBuF45-oO>M!&-߁߷[,4 Ȁ 2ڧh##D2D_qpBS?lŌ$WHXa,sW?wUyy2߲,5AM/L>.u>73 $tA x/]pt xߝU : RX$NA9q<,~caYHN]H l]Tq~Xـ@bǏ JC,HJNt rzÙHdWEFz4AYUTav!Ff!V#?J;OOXq.PEI(Lbz/4|m|7SHjނF s ?]fzAnT%SdT9jڿ@1 rN` $sR)A-Q:iZV <-Դ:ity.S!ryL=Of\葥n?K58kN\Z >1%!hcH!uT7~n6:Ep$6zq$٢e1@$ʢP|nwMRUe>+1GO% 8)%y)|خCm?8r 3%.zw mQc,2=@H![ \o%@Ig4 99)nd&]jɡTj28 : ([^żR( "4`wuHԧ06WQϮ`oC0SX!< _ ɝ\o;g:> dVedbwQzV<衽+7{r CBo>lo= ڃ EcW 5yx7s'1 sUJs&Ԗbg/6#cEM։ 9񎝭(A,|?N]+Hmz|zuLfԟcʣ^=$Eښu/4mREgۧ6//֯,ϠjA4g^+Ti9J_R K(vM'\6ԫțn%(51MyLY79hPmq۫`H]aA; ""?4«vO&;{ TG1;SxWRg\8x2דvsxyz;NP p#b?۩GWN}͒L4 Q@WkJb;t'爖<7qRrOt3<&{d=`HD* 30{Ώ .J( =`GPXkf,n+b]`=(mխgd $;HP΁@st@QcYl:8bQ)D圑 &$<: R,CRnkh͏g'VSv6?|efͤ Wvv[F1lѼXA%֪":vvHLXlؐ(86*_GLCz)Pˍ.X3x{т//Zۉѯi |h? o'Pj&ubQbTV<. ⠍Q;JJ9%|RZp=,Ճ蜌S˜=1 u-] Xs\U(1o (Pq45JQ\KJc^ޑ I";|-XV,k<'3*(ڟ}RMD:98-;޶F9xeŜڮRҳ9Кc-:z+ov}Г_6ZV2"CNb nt}ȹn\Dh/xws[mX6xyvJegB0sŁ\TvsE>m'XC=f QPPw~ą?֍%[5^ʷ8zz4 `.UEj,lL_1]5Gʛ|*Bp'} G)Jƻn>,LVe}, wjxG=O=mfx׆"" C4P:zsæ.(1="\%*2@3u.C5rU##ߢpR m (X}(U@ "Ծ P}]C*U11Ba)|[/65M{Oux:6^QYRm T 0T>̣-#PJS$8Q^t>f'uO|RE"$e hI) X߷ $8=yWUXbƼޖ_^i*Ovj/惛jIvm6B@\ҡegs-hFot9L'~P?"uw:~O#>dW_G$t D&`($N9uVJ~tɸ%`>@6ڝ)Y2k_lgeHg+SB u~*ћ&CUQ^FWĞNMIwb\9ƅ ht*h<0F[jH~`}amW"b qh 9`}$D EPN?5mr0w.>ss kTYR]mAcU1 ȉ 134eqzƆ;A9 j$ڕf+6 ~r9`<.F-0ƐAm%S 0aC"s ] <1XZMf 5B3305 Q[+DM,\U!sgǏݮn=;~PBȖvB?ym tgk>=boytؠMS`B# 8PHhM[nOG7Ḁ)tӊԁ̊hpEP$W@B }8 TAI\PEIMy !2 D ^<?s81'8"#9e+3<&jcJ$YX@C5Lذ頿a<.,bǝH9HQ,qZ%9 95<% V,Rڣ y3Cu)%콦C  J@Š]*9- `h6KqetMĄDJZ SZڥ4]uK^-sի]_f&5ȲEbX!3Ӎ"0,4׌jzzFS72PL=BjZF!%Ev+Ө4q]w *]#~*ze Ⱝ_A1 Su묅o,`H:mk}Ѩ-2@.2DN<[WHchh㪹]aΫCG%S9rP'0#9D[nH:r6Cϸ^ڱ (y0kZ[˳썜eV>PWmߺ[#HCv6 *K {VfRU':$LՖW/1/ySZwHğ7:r0U]UMf* )fUѯo5g$XD8j`+zeLU4yP!jqtVkX\g,=b#w{ ώYn `*j5IT+Hf]CN^Y}>FY# r%>$]?E9Bָu=ŧ>+MCaJ>F P]{5t`!$݅2n%I:$mPcB(rgK+f v8Rᘨ,$ڕ/-Ez&0{w5_4K\ܭ}n . MG0$(0DOj13f;D#IC=xZ5~yۻ6+OY.^(wN^l0QyDGwЈMT{NB0nTƾm< O\Y4@v׷1٥R4sAtyxIvb{tj@.K ѭD[O_#iűX.&dO\.X-6AE0 mXg =x>.TYc>v/K%W&u9DA]sCN, c /ZoOt?J_R^{hiNBIY0D5;TN,{dEoAqlUD$il| @An6I~MH]h-]:^\]#6歷xHoW?/Nv6ճz F_ϪYu?ʰ!e.ꧾVqP8Wկ4_oy]y@Շ#,KH&~&JeL3M0Tϛzɍ`\dǂ[ ) 8~VɝI<{9*bmǧ+/3R[b/StӌZKoR`![X7IQMvOi?'#EZx.4iDBa>5"Ry2ނA'<! {vI rK?z^ǖOߗvY4!b$j.,+JZb4t3֍3aV%V:Dug=2[^k!taPuMnf&mG9؁U ]mGZVI! 2@-LC2j5IR;{9F$!8'궩Va2g<>߳A/d&ԃiSq+Rߧ\Mτg_Iq$5*XT >P(BI Wd""#GADf(I~ &7_E"nv,}?!qI:eѻ\{+z_R8zjvtRx;%|-ϤV޹UoeKѵ}HKC~1喼(e!_CҀ/- ġB0 "Aot_g)o<w>Av_Mis&ZEtif5PE05ywsO'/m'㳵qCas#["f]_)v.j['ZKdYӚ6\ega*[ha^u[_b/îKVu(P@x7ROO -:젃 (qG*u 3$nљ ]^FL'P s*F\.ݲL@hQ! Rۛ-{2+P!(o2E.6pcf~p/s{:+ak,7%e]Xb8qG oUY'ߓ'ANF B ǀɓ"AXs{5ڊkPAdXJ!,IC (9{X &*cu̙{a"9 >*dšA7}:O ]o7U(# H, dQIQzQ,1d+X&cab5')\NvRۡw4/.лo$fV=l3ø(#oL $~v;kYg/q)q_eL/0sjOЬs4/PF⅘qE"PӀ=lG]wd{5-V  +U-A(-4i1@"&UEN5=P&[hW"f 'cOR'3,8UE @.4P>/j{@}8q70E$YI#ZXIF༞tu@[g|߹"!ޞ7az/\M7Dn.3.[+ӜA7 ANʐ &rN"hRvalٚkҖLD+͙f7S % 7HC펀bnrF(B3:]W{ryǻF: DS)פd!$dd-+26sƛupKʨ.@PdZvĊX-lx)\Yc{0 gqF_zS%h8B~w|#LbBN[K::[>k KGI*@*iN0]ٗ6綡a4h-޴mCnT8ɧF*vvL6Db6t&ayGɹZ Q^}Bqr#2BVU pNmL}RWPF2EfK\(q%, : ,Ϛ;;ld#zt9]SFXD;_mjn[wFJm*[  k}ـPNhi[x( $2B4CM%K[S0\9-5ܲ &֨x*~ǫz$Hh*ڌrӪݙbQ/gO6g8ҙkՕL,ϸf, YH!\UXHWwC%moәj܎F%L:dov'ThK*ُQvhO~  2TFLj̘hi ݢ2X#YÅe!G0 GIKeb Ϗc#5HJ$P[OSb>@0vlTvLuJx7BR0͵&MdgbDpr8$b_uM#>!"84qucОWsBlxL\Y]#k9yZew1 aGo}͞*,^g盇!Jm؅ |YO%c?cw[n Xg;t7;]Bή;F]~(n}NùKz_ ;^{_3(Jx/EJ;zdPݏaڙmgK[ʜ=Rm dZLszߪTRs]![w @U*cp.Iu,JV *dd#5!礷y#]s|=u@*p/쩅}6]"zB d[w!dATխ{G-V/)RNNӭWlBi"Ҽ>3Jf3-dc4%{.Ѣ_OU'Jڲ!Tk!I~u@\3⨱r^X"NPjcifKDnM2qai0c|;oPש h"̧ؗAnRF/znMS6X] $@5MVոUj3x[W&d X:ۤ/85KxocJ=mLXUM q*V,o e$˓3Gi8˖ xU7TX(X߲J#doKbhsV3y/]M 'N!zԿS}뺳V]ZJ,˯5TgI{ܛX4ّjt=VCEHkwO4/v^sed !#pce//QdaR.0]Lil@Wģc5z> 2{e3&$Dq7!((1<'}BU\'b xL[) arq;vIU<68 ;U1NF:r]ByO+E(կOZaګZUբThӴ)Mf3m3>H*~WFxA&/,ON}bJP*e}jfbZGe_%*-h gE7cBAA! bE3#ʽr]>6-y=7aI} n̎{& }\Rܯ[d(2[  "úV ⾿D!qWG]y4~ۧcԇz_`h?mi%,Wgٚ}'I!USM:}ʼnE$8o~a:J̥1.5vxc#`y*ǎw6U2W41)LMڅEnخ+lL#3 \H M̸4L??>vU݇9y*ԑRQ~~Kҭ)}di2B?D=Cqm+wMW2^߫ӌu\>bok^ǹ9$Lu>ߧ+Yd4R,ӟD+4=] ze<tgKhJūVɤFiT-s"݂*=LECZ(| "!M*|H %"q _R?Lq=kW\T=i&'ŝRjg?";Qů)D&yZ Ϻjѻt8uCs@; pSSN:j jF#(Z->tږ,RF EEd%$(AJI)QU2,UiBH1JfȂ rزF0cdF V0#0P6 #%,#`DVF0bTPI%K#- `BVdE QDXiQbň%Qm *őXKJ"PUZ,OA6ikhak}o>Z>_L 92B`jQb%@1U4DX1Z -QX (jV -Tb(*XTbV"EQb1TŌX-b "mZխEq[Db,D`ĉiAA+Og/g!>r:Eɀb(I &cQUQTTREGP**6 PAGTЊ (!" "2 _T*"iB9f~^Z#hSSz޾O!pɇ<c^>^?]ۿhn_H?|?=Ko(#A7 򳯛2 >[+S)Bb篬mj4!$" SYij#ssdTM^I¤INBu~{Jk%c X ?B ( <:;q CyG3bHAr-w>+ɬʟڣaV29RWDle^;j"^sYøh,e!}_ax"z*r9 QXOF=Ce;YPaumww.}T$K,ۮ4*-aSzou|æ3"rwu2HP3LW;H7 fXBmouXǎm@#d\؝CAU^yT02, H"-2}?iSbB`ff a ޗ^-|j$L MhH*FU$vVpI̐J-zױCN>|):g h  1nvMKS)Ii\>QB`Qj0ha#1 nA9PH޶K"~;rY E %h-{Tfmbe Qh~u7mf#裢ir9<<\8NcG{{yff*U#ob.7u\(^/'Ҭ3b4ѱ)I 굪n :l_&ܴBb}nT}O]wPHAm'͜oIe_lqb[{P-hѷY-$ϐa^ OœT1o f}xfNˑDK#IINY/F'9] 3QPDEh|hp VCRY浏}f3m~71 װgv?xn6 k#R`q j<)S$ץ! xΎ˚2|-cEs{vw3]y\⪴ LAl 3Ꝿ8pڡj3ݳGz_2z+ӟ^Չx7[(D={ Q5J*DELWK+2}?(*{ UN2͙bJD G6g?W6kkN_L*Rg쒁[|uJ ?YCvIP:J" Ծk8C+% bJ)Huc=]V"OC!T5$Yt罟sUvA7-)@`Wf'(̪f7YZGyӓt Ii^bbyZ<u&tQЕIOJ&۟,as%&OU)$܁ eWQ5M䟗w;ظK>+E։r `BFLrq:4}4ҐYܭ}{.A17$ĩ ~~>Kh௛_(<6dCpRn܂ef I$iU?/hs)TY[q@؛cBH*|]^pR:mM{b D59'J 2zDr4 =̵KN"@^E PVlKOU=)˪! HퟗcN=YO{lM);'95%ąƳ) `b<&MN _IvR(VTLf%*s3Wxq@bGm"{b3׻쪊kvr1řyZ,^ޑجA/p@e]-"OsjY VMpN=ĞNX{ssD( ۑ n逥꽾I#TL}1sW(6ٸ9K==EYt q`".؛MjnvO`k %!|ۅѭ+p!Dj;fCIqk\/ Zq$#Þ 6ez[*HpJCD $'z4 n r Tre-VZMk|d:Ьђa׌7KۡЭ;jHqrJe{ʠ5֐ua_&v6\ ~i:[ lׄ}=Hsu0@@#܃A/ί s'w@Zp'Wy.ݱPxQMWg}D1"*||xna\pXJfb!V-{:k_i~ӹb/}}|muQE 0'!LZƟpg: 4>e`ߎh X(O} R,QI$M@NDu MLjU.>ԗl'a%3iNya#H1 Vs%A£XxO =7O#2oX*" h/*(j"t\pP@Dz&Zf͐2) *,qNs[zWKrw~ry'5=v\? ;StPʯҊVM߅K/'ڧ+Hҹ׶ɡV#: vhc׾o'e3n"%l(FB1}u$IyB꫄ǧQi15z NcS*A '{KyaIE;iw'P!𬮧W'Z3s!ҧ=ږ8yqjYZ>L">I-P Qb)*f:H;-y0=|Q@&6\AM5rr**gg8~YrrϷUmhҼQ^PF.Yu'9羽r^i ӓ,7K:N@N )-mK.+@"T<Qn.p嘖Gר&i=\2DsǖPI* RILGxıg[?թm>W&Vf\ǨeXQ}>>?Ts @\ߠBpyG'PC)v;i#W뗊S Yc6jCP% * Ȁ[ވTC*X o"@̈:9Glmdž$][zةp-Z092୛?VKsõEwqj9 #P@S@I@ P$1cs5†6s[5^)Vvq\\#iTCM<}]i.2abV^'cg_j._̙uh ldc|H*4A*DFb1kkIҨŮ"RlD,S:RЫI.R i4vΩՑE>U2lUn|{lXb N.>!:0(f-`r[uItCGg~dpr(R1l*ّ (ʼnJPEeN=vHҵ1S-&" XY,bOMH(`TbbEӵR **EQb9dA˓d޷Lm;b 52$jTkBoH[eHrBvY W$bHĕ4ZsuGąREA.*AEbŖ#"-I0H|d/崈UhUAbӦkpy5#Yz7XZ:Oz=ov12!xڥ:v4G>>ŶB|wئ>-g.3 D $"$V:_mֱ}׹"$Of '[+fa=+۩L{~~f146CFKYvN7DR㒭ftzCd޻g4pfűxrdWOl5{ R|pIX ţ?]t'"נHO Tg枴=dY7~"2 Ww%A6J%=HUQGZ.A-də[Or*x2lt)#<,ʌxa%&W426z㺕i6 :By lbJU̦g) 2#(dE d4,Q/3巗nGt%lJCg:`0JsAwgY6f E2gvĩ~uWw0vHjBze]9m7{EHP`L\=)/ouTjnG{Bqo[3!ST-k_W*Dc{zt$%|)MI&B v2k0 n{̊J!$I!Ða((BP0&O YR4Rqq%DEr3$]M Iu[Ӻu"6]I!&'d9Y!3Mc+'bP۪SX:5M7f>EKJAh-~Jߢ @7l6iQrާlF.`.;zkçDEc +ȥn8+R,Hdr9BlТ -K@BoxwHY:Ala۝CϤ;#=W!swiWUB48M@jNiNl\D}mIzs3aowoRkL&6ۆ< v\V4MbduA0JH&a\2l^v&rVD"{X(i+Q7cSS<"ى 2ȶŊw=MC`ݘb`]i[+RA2-ie"UU"*"$TPgZ$=m@0 !A"!N#P-X(1UcAEJ*BatK3YkdPPQEIXH |)6;~<שuq=Nz\xv-ÿ"*F!$%LV0D@h"$&cqPUuBQߺf1ٗe5V5_Sl3ߏEE@"Cd~6xsc^H"v.{ Ӝz<7LД,v '8d<%.S4z>(QSMIOў%0?SiM yaDu_:UznkB}?ƿ/7jd4Kӱ|7$6HG4bjTzf=AbJd̥kEUiߘڒar1\T.STDg'L;U|>u|Q QAu(L:~ۻø( {&*1bkT#j+QAtQ͌JҮj3IҮr9fxdL6ρ._tƌhe Mr$@}IAb뇝5OM'yG2W쾾@P5ar0}{/JP@.l̞GIv(WOWw ˹cHvHJ2."b{/ #>Jed2W^M۾56hxPh k;f]'Yy۝|y9kt; dy+diZRvFk]#%mpޕ}u{؞,im939{)y|﹕(_uV\VaQtz9ׯ>rۋ%,$㷼F?/}GM\1ݓE7\qC]mk6b`ҊHcJ <) _nZ(=+RTT,ܛ&B7$Idv9I˪e:xbۑJK#ļpI&1 is;^N3:Q9afP`jyK&q"^hmӿsTDPYJPazvp{Syh"U-&Ս&U%q8Hێ~iѦzz9sk-cq&ͫl[)R\8o&s'~)"W@٪~ds: .+7$'4R lE;0u 82b͕4qnk N,QGgpKN\:EE|ٍ[k.w sH,DUc,3F>4 T*K _,+'ږ؇H;Z,'PpsHݾ KiS7/{Uwe/ن2bNd*H;^&ɼ7/2o.ݭ$7v)H!D >U  sd==DNֿb]I*.v-c D]sJ CFXfj Itw[ 'H2ڑ?WS'͐be| RFNWC%0"@#2X9UL)4]ԠPܰ0#bD7uNw#xeҟV/= ҺLhHz~uKb⒡]Q2݃S%`4 /x Z%h"ڢ J@HlꗂSI&bL "tR·HB͒}i0:%2عQ_I8٫%~.HxM/^3%ǯУkչUڅ]B, iMb*ISQЖg&ﱭ^j8E^+s\:Sw &:pStfOP,PmN$syr{8^${}I Kfo֓x9TZEN0y⑙ LۀLƌ0RRnsl$/u̞+ )OGs_uᰢ,XEF `*0TQEFF "?O{=I (HH%Jf=Yds_jH$'kI@'()E`_vV6U24t`8m kfU%+W4 ə. Cz&HRT]ka{>yfσzۗ-v;Y*~X~XQq,)VLqAM%Xs՞x9'zTpF1RIqWkkuP/i֨کS _ŝjEku@U|'L ͪA04KRu5f釀PE {)|^g Pn9@$ 0itlYbPoJ]u,-]DrF Kb] T^HuЫ]f5(tCJWwH<@3T+r804 c<1}DDJܗL~VA㣖k \^k 5~37sĮ+ >k_gX>ۡWqBGc s*{mtC./j'2V_/P8+PLodj6;"E$Қ< }2P0ܥ3Ӧ>X>>W8`̢Cc8}6mpZ] \|O)J;aM [=h=* b]F*j^nZ>.k/QDxG朰 lV ]~BM Tê5w{4PJ ^(\&@Qؙ,NB :3Ot, ZxFzs6]j2ۡgՔWHL,~ӥǩ}}h:E#3E@}`ŧs˞o!@`,KJJ--8 ӓ^PUY qZG$ѓPN- 3cH݌=L^62`+'7D4[-,78+[qg&gh2| ͳp(ʨ^jJs;wuCYFDmL̑C9PS*rbxzNE",AXAEQ`#$X E_ (PQX$X*TUbAATEDb ,"{*"1?gKtl+U#I$~?RaE5,"3}8+[ߓaS_8dҖDL;<!W(Gz9+Hɮ9a  _ ƒ yd>1 U1)$Gk~ V lnc6#O`, kjw3Zr; TYxUҙgڸKg{̗Ŵl;Ud*WMQVqLepY8XLv$(n6Ux֡5I+6'O'u$RF=*E{(i|[QCh_q 6(hq M4BTɞD9HDA uD<ފ < $'$j ,;%[ V-4c JXF ikp&SJZU8?r,vH^Ό}i%GV(XI" s[ Tޖ9uaCG9*4 "x@Z؊7xM]sIt%p6%otyjHuWM]cO4}g}cKYh,oX-297 ੢w/@%B9Rr&kpVg~t;~e'cou93!*bעY0c|EpliШZ3֌ DB,!Dh"''̝S]S5ƺzG+CRbx^l1u/GrqIzԢ_1ddtRItnxлSf|5wf8AE4\+xi6)׭eq8sbڮԨT&40!QŪ)frm',.MzGr L+Wٽ,EڕK|U0U`TȎ}tacw=>G_F.Hxy|,6W U6QU jn)޻=(?f߷,D)IKxKAJRm=xjxK6Ӭ\~1O);%A<4^c َ5ű.x4%7~ @C~qf NnnK}5 v5T^KKvAE^-9E:M58)iSu(x3pw*2-*2r &F@^w k/ (;͘$z03b2<7 \̘}i!ιD|0i0H$U"i" L AGܺnK2=w[S႗^26_sHWMLm 3054{=N+}BC>}ywj+Nw9-j""IK`V1\ԇa!v튴r,Èю%V,`Qɞ ^ƕmfbUo٣n6gI3H_RNO&l(Jb VH!,_2 \$7:KԚlt 8BD xt{/mnX~u%H>S; ԜFȞ';A8I-N˭f`iZcp§ { !\wjWUXh4MQ#Sc֨+ncf N}1\vcs~ٟzyE!RLmH4EB^\{BMmڢpִH<Ƈ)Aػw> J uvru-Iz '.sT9'$$$IMksȎt#'cYV@ԀTU-zFTd`B(`>a 2tU'8IP7koV^L_[)1*'jx4}Zت!ɭey@O'wpV@%y3CZPyN22?yngz iN,42{ʾD%jB1ߤp*ksس[:$1ߦqBSҠMu ΅NxDGCWEpv{WWZxұ2+'C$yajH f+?+|Q{iz%$y1?'+] =|V2D Z8H/WqH+}9'(W-#А # 물X cnt'XՄr F\ɶ%dZ1QKA >'tEzQPd8|Job!h wpE3($jjM".jHobv;YA&Pe K|纭kD\!Z[fUfnNO!cEA3(j9TG_ѽ&dW!2&Šl6e"~ڹg )]+ q@}y =MQ}e$q=dW/[m%Q_Jk PY-I ۷ƙ]sPĞ 2r]\L.! Ϩ(@kv  2 s!3$iNQ¢UiN<s챻.o}'+"Ɣ?Gb8ꍲ,A1PXu/"foi|?=uNtn,r($o.:8 Zwӷ$L{ϘfLPUqm*e@N&Q?N–Rb:I9]XoA8%zFpW@\-OMqfZLL$L)?uoHjLm f{-z!d0߭GPB H2cEC4K;ʅ uJ%Дv|zڏhs;TEbHvh@t)Hq#t@<˚$IOqͶ5b-(f#xo|KG6 ZF3K6seqCu6טGW,rI 7 x!^)D D1aWE@墪o&:t:[_]~${r/{-%'&/coZ1o6 Xg${˫xs-(YA;L >=̦ TOQB*W+¦Gο#)@8JthZ%DXZWPqUR+ j+>*FD]j"$AҮ@†m^"zQPݠL羦Y&z{'&0 dC7=63 et7SS <ĉ3%,Z_F:9 AM9P˭?Nr|>XמM#A?wƸ/Zgf/M&;q[Aۮ塉 '^uem]|]r-!`€KHw=[.b'/<*Zj;g4H0aDꩥˊqۯpV=|˓{U=9HzNhQcruˋi"T8f 9k<_@d17^gū634SRY%^ЩL[ی͝ S@Q~͈:"'4pԵ˞=Č2.X 2R N3 "ӄ-9&|iroR~eVH" *!AHt XF>mP 'р܀GH(vr@OqjR eshV#":(c+UqT@@--9R5|`д{_)_=nne7O=爾QLї\xFG&ƠAGY.M@ ̱JuUBL),ԿiJzw3$JH@ J6{8>1WןŕLiM6A\ ǎUɊ!C}~aE r?W@ZOoBĪ ĽJTYTO8H '#tyϖܧrg~uMQ rDA @* <T h`xX E|ڡ7D*~mqw:ں^,ݟKʣ,]0yTn?cdyد?>s݇;v"0᝹S9i[^d3-FW}fT IH$C/+5YF# )&|u[Hsf^/le$1|>nJW+%ݯ j^4 # 7Bw-ѱ!<K+ވpP;z1} e-˳E!rP\tܺ3ۄdȀߦ=4ْOB(GC*Z!|Ku)\E v=KԯZpnp @Ċ rWqf%Ӛ1?5m=̯uA` ^\QI$Cڰ7%E@!<黇?_{^z"DЕkMCǙO#>$+>E S"s,QIgoꕂu[)O"F|cR^"֓& 1;ڈ-"S&)!{$". >|[@f'I4dJr{ѝZ ~z| ]7B V"'DAb$4(ώ ( d`_ZPSm)(DIV6W+ d^E+Sqr-EX,EEbdJMVJ,b[ UDtZʢ0E)D5U`jJ1@^BD dF U"bUATER,REbor*=EͱP:YE"",1P]-iHi%CX*EQ[GH)7*UTH,yr))2s-WY,f֮ܮEb7.:7Vʎ nYvMjw6hqũrɷ8~Gmg7!x+h (i$>!`X=с!Kϴa08H!(M3Hd=͖9k)ݷNdCDb #|\32UPGkL\Qii Q1tݕ!"AC4kDpoVFkݟUg|hmۍSeZa8$6pS-HR/dH0UEQXb"O@A'zOGrY]Wvo7)}#^:P[E}jTI|Q"*kQ-IT1U $!ט (j.wٺf}'A옄U!oP,joǧP]3jʡtPsB%Rr֊]|/'@*ۺ+ޗ}J6m Tj! VplVI٥tp.QKA,)vOpy-b0+`C}*`esYa @}v|W%&$QXtfO$V/w_Џ-E`V,TC)H"cg5cT<]@?{_v<[d|a.]9DVUC ݦ-ORu+Ty2 2UM}M i`)K(u@3t7PEiz컺`h_rdP Fe7*8#O 摡67Y_3\# `@n6X'ZF49"(SyUSV-*"T8,2,Lz9'Ue0uQ jr9 5eӳ:ri1{m:pwYЬ`ɒ9S3 j/zq@ʈqʑAKjh t|w@J@$}N -iĒ/zַ?Q|ցPzCsVdp_= ewzy1}7 z5׺TU=BgMCI*(4YT̩OF1^kiT3 LnYWHQx.0`(^0@pY%_}wvlLe-Lɼذ)eR)/;?5SThн}'SYc4m-{W틗OĒF, 9V0i78N>P X,kV+(> vDGcQU"1F(R(,&ޝdPvj)(XVT ^U5N1Qd"( ,",TUY(UBVJ%Qb+ Ub7=.,,@h0uj'+yu\1OqNyXQtI^4pFg@g)n&;ENǛ&BνCg B&y"\d禕d;ٿ͖_r$gj$9piU=Tm PT x3e/T’s>ߑr߳y| ҶKQ!  -d "^PLֵ8!>7>Өx^410?l^+^~>>H;P! Ҙ áWQ1UV?{$] ˅Jإ M3H H%$"pӚ WV3WƧ/vEׇؔͽ\,~F%i/gJd$E/mRaRQw1NSiS =TR uf3k(.W8c o=2z4j ^^<[bUZS޼_df%b5%Vq˚,8,-ŒVɁÝO y Z4]i<5WbZ3P)\pJ^1yw% N+ڴNTcKzݓ(A:6huYEWMFpsR Y%cde}ꍊ`~XX$BVQRLxxw lR:MI7dzgcI͑'.y"[ã:8" 'M^93pcȒJ: bgJ=ɛ,=^>mC薘 w!Ewc>vR iͲ:#7o_,x4«;5mF=8_NYpŘ\)VVCgRbM7fBMeX^շs2H[mMl>Yw{ 9<5ӸРP:Z:ā5*n]SJ_PM8:SGJ*w=ˣ`PaU$jz&O0h9TS>;}K\9)84䬊CbyX'm,ϥ"{r3%`7daOͨeILdS-Iԡ$1MΟM6wϲ{&@mM^d A) P_hj?%xU4^; l1i~VDd% nMo͍kDŽ#'S2N㸥 l}kMlԦ;[Yb&cnWJG}ҿ65WK@@$$mGA*>QjrG\wKi,ClV•1P^(.zte`EHue1REk3^{ǻo~ 0%{3a,V=to^%L~1fv#Kų~*J㡭@3.wl:No*3 +3UD}(k9cO0㝗ij@(tHW>-0gЕ<:^l=5!o.AOj},X){Șko;䨗ZMLꚧNI<պ ?FVdhXVt͡>W g'WQo2eEl*QM'As( R' #l'۫~3gEsdI"G'_DǥZf-qD}t{u`q;X?I.f-$dS'iPy .DPr NVx,> F 0"\_WSx|nDT|Q=P3I؄E6CwiRm2۱8w!_lu3 W%z ;< UE'^ to';S/`%PZs]d20-Hk a5;.lqi7$\FXUsQtXxL>e{P[ q!S7WuvI*_^b|N17٥RX=gԦsٚ${W\)uVJ%Yqjz 2fĢ q|W79vQ+an` $=&7WKQ4Fge7w/zHS _ٙ=$3X^L8t'̕MtcN{ڕX.GfJ&5zFK-YSpu{ph>ٻy\鿓ن-ZҜjK> eshxR2Ćpy&eK,mS LD+a9 2-}vv6zyF1>7MEx~mw=x92* cQW9Gdϴ,rzgÃ[ @qc?O+?V)t"!] #hh)P*~_C$ -RHo"r=m?+կyZzc팛8O 3qd `pg|SS9ȽHI 7̔|q!nӖ̽aD볳t}%?ۘomR?}~<߱]}.A%O>P`Dbc[1Q% ×:qŸ11HD$-5o7s< jj.+7eLPX,Wņ$kE/L5~cmCaN9$޽4>'T&Nes(?aqܪSM qcZuSSŵp0{^!`zp˕|`RC}LJ0$;,բ)'D$*Lե0rG 2w݉A km-jw'8\ DmunP^omfOfPrt{0њCIKh{T >w+:8ݎ֬f[#iht!UP!21>od1~M1, `ȱV)DH'ZPi(*#QUJR1 ƒהSF,Tkbk5ыID †VժTv-䛤 ȰX# PVY*XE,EPdUdő@Ufu2A`1"$dP$ ",", $ E$ATDI"+^nUTz2FU{6{)}շ΀$!k }4;ta:hlHv^坙J)ͤ v]Ѥ)}FzH$TO)DIۥ2q+<8 @o͙tP>'^ UPqy/_vM&CsױkW)܊߳yOwֽQ@B!m{9ւ90 ,\b_ "Ja$_nꇤiwHC(}y(d+3ȷBExd"AbA X沈@#ȍ~' נqr-Pc"sE ͈nDw0fgBCCp"NTEX*"b *(XdPPcBV"D:`s:ltN_C弘TraΗ;^%Q`V@DA1cX21dX",Qb,XTcTEb,CHUU# ,EUUP>u+# `bDPV1bwYX V #E`(E"MJ:]okũw$$B9!e} j$,񧉂֢,PF^~홶b"#UF #E(QX,*F `(*1QbyuC@~^lzxgxzsEOWBF aC`E+*wrcvlk^N!A1 ]BVCs𰓚ID;w|̊&9-" C R03N9iXf^LRlhmٖ)Nˬ5;Fb.LJs%IpS%漂`uvfSq/L̵ ~&9hɼ(w Nei3(JF[i&&29! w '=]l&=W[=GCj*2 m_.5֩tҥJ6 kblMX9Tʫ*LrF05k Q2,z`)1dRc T,[jkm-.peX+[irэ5U 0q(j݆iXڣ TUmB:˖Uh4W0+*RE"DEJk%d5p%X3YSk&&8R+EqY&XޕdQVjEĖ.c F[++V;ZSjآ**"UcZX-iR ˵&acd }TXCkMک»ZbAEձ}vB4F*Ef0(eh4ZAbk X.֌t6ب,(ȶD ++R """ IDfVVLBQ,EXVRnTfDZn8\-b*X HEDb:Yib)"QRҫF[V ##"&6, "B j0U(f@(H*\0̆V eTKjdPV!dTAQӵVbbbb[jUAV*c  :8 Ydr <D`ȆbljX9-ҧn"oNm5"kh8SjZẬ$ީ*DP=/8  nP=UO.;sk;!wW$UBZ*IXz]];2a>WARCYH pQ!,2(XVݢ1I"@.vrYt- X\ȗt$DL|Hn7 ݔ,F) 2uxz:G7UG:PF iٓN*tJ1ge.*S~}MoŎbeZy/r{NaRyvl4p9 G<0 OFdc$7q FA[;6lYĝN P@EEQEF +2(NPdETQX""#,HVUdt39׶PFԵ;Cnov=Dc_EUDDV T` 0F# ^(* +nG^ C2@X978~.fXc8ybT 5O P 2M\ ɴޘnyf 5>%ZlPd.eA_:cZ>exo M]iVZ̸`1M.ٯ%bϗ Z" kTT_0ɶ[Js*`*6Sc\Ņa[Q<$tp|S~!/[|&9?m$.IMԨyetV+йa[{Zq_K% *Vj+ːxQSh' '~Mxw~Dg ټ8"5 G%&0@G2+PR7VK)љ //=)2}S|(2GL(|Ct%s +"8,Yȿm. s?kJ xme~NhF9lz6z/TwޑI45*#]-,<$m,~[m|gz[qSLo%+9v8\TS* 6]TtH?XV 4Uu)*/3]p*>eVܹ7ϟD+ E_RZtݤPw5廊M;t z7c{9$S'H{SۘIWe;=28ߩW,}oZP 9B!*T$DvQ+%'=6#[ !JZ!!Pd!%6PJ /##?1>?\"0} dt!V-e|R `]K|s::QDF&W6V+N7 a'ثu+}>X?dpg0di22ZR՛ 6+ |s^_U#.SһN'ܱgnm'slMyBu!#~csD#q>\r tJa2kwHtp%:5D_Ei.O܈WU$@|:m>v9>]9EHH]@~ CL+~Qkܳ?#mO}$2_lFSmHڝ-jp:- 0>[V0L=Y 3Œ9Q" F /͜2|=6;'<_Z \N(Ht~7?e'\+EQ/yܓBz(JbOrh|VFnX1/5<|R?B[/Pq!Rqv )Tc f3٤hC`n[/8~\"iүTa"Hyxz|Sl+V$_X rjMaH)@B]CvQ^ν7+ Pue` !%XdwK3ioVT2-@/_ZF$ `1\v Q>R˿}yZh0>ζ ([}zk zK |=o`rK_kpHdYOJ#[$GTj-0b0edlJ<Ay 3.,T6Za._B5;UW=t3G4D$BP?:JQXC?/w?/l'm?RTU:k@ (~J; Ty6JrB_36ODOܴ+ :ǴeS__Sa/~اb 9/O*-;rc= O?o=W[=* t8I8ڦ)H#m":)'\wBsٚKh8:;,aՇjLov/2T~=0oh+[rsNЛؖʨtk\pR?0hA]3H^@=FMKN]ie /,kɬp~OU^bVHV5-ӯKF @ѣYt2 Ad/T=в :nF`(X7ސ?DVSsZz !d%g;sh%]FOwR~ET.gau <<.$`z߽u6 %xPڞM$A]g!k{Vg:H⎌sC{ݤ˱FAabd8p\#U` 96|c,|l oX_'*4_+5SX "KO;] jtZ|'y/GyN[liy mAk #J8Ig.6hGBjTqI ^wd]F:*Gܮ$~Džn+>/?nQ-pouvXnӌÔ(ArBQ%՞ .HZ(c%R Db@a2sNh28!Uu##IQI*` Ĥ ߥFS{ӯ$~:R pDA7T$$ĎPPY@>RVM0LC7dᄟ0p+RDBA6b @ 28T$1! 02 j45:mP h #xhEL"-Q#|Ņ 2 *5Dc *!\`J ON(oQ`EUI$BXpbbTDZbIBbĖ]]h&EPM$:"}%r=[=rmP9&#.p ˱]"~Z~dvR5} ?sMػUԪR'FЙ`S`^wX=,Q.n4w. Njo$HSf I2gEur]F/0fwpX Kjiz֍mь`v9%2G me}@(^a jS)Xҋ~g^ZsA{gۢl9,f_]C V31 udt$ T= 0XW.Na@\ʦuu}Z-X)KGo0u=<{OUzNANVӡwfn~^ G?_PO>A NGǨߞR[v;M9mHF;X(8-BQJX8K=\2 Ӟו"P* `Q{`|Ҕl*lPå< йx @0@ī!tK TZQq%7%2oqk-h-(֋|Y>ӶZLI#,#*N ,wx1 Fh wSc7IQ֞|aJ:a295ph3SG:s'psH1~;Asײg0s}!$hG2w!cJrD K@"})iZL4A 9,`X>qpNboو:I,c)*~Ր8 Wwx7DCVBGbWg+̜i+2'3:YPOu].ȿh|VGx^_<%KllԨ^o-i #$62)4j 92Bq]g#^B'QvĴXSw ֖:M S.v7o23ֆJPntS#4.$ h(fKΆZYGJ],BT ֐o7g^mοxgJw۽mQhN@F=Cу!hHc˕!C}뮋e9 [oc0qI 3CXMz B_4 qqk fttI<[=vmsВiƚBܣ -P7ȣw_VHZε eˉ >g>mD# c\d.|3y`rzys {t3Qlkpd\B1pMX|FcvvG!E%Rktos[cBhħNJּk}^\+5ժd{߸՜X?6T`D3ϣl ղo8#Ui  IYΦKSku0ABV)#w-8p/;Ck@?,Y$+C!e=%o"ȷ迫 aoKy ^N;4(8ÄACHQ 9UI C+&_ۮz8$Y7pQCAr5鐄%u[4M . @(hߔ8¬"#i>qkoQϞiJ˦ _q1ioc$O'd},Dӵ[ ,o 7~։gf`B?WwrE~9glfu}}._ܾ*g,O L_pKj:\~OhyG "mSG3oű>.ftFH,Gڟxlj>'/~'DA#' >!i$s{r vxR ߳p$2Ir2\}+AJT~O//$MΜm:t8G_، LT8Dڙà*Iaal!1}I<3Tmx^ djdx$"1.8UJyuI?\Cc OW{{pn>CcGqu; |3{EHϿ艮Kfz-14&?HNvBRSƼ=k|_ץq^]=%{kK_oՅY 4DWUYpIґj ygd4y~P98;j0]aU6(G+a$6gGߍ߱аPJ~JZbdS?Hr ܙ:С6' 3AF:}_U!FBhU; coJRɤ:$ǯ.*. e/_ Mg%{P Hr{<<kŞ(>Ә-Eȇyy>j0^οg g:JQw H G^8ڧE@ޓ9ϙC|)Nj7UjI"!XȏK.\PնMft[U㦈J[\CX.-pJ:!.*:[S˚`}O;~ Kd9Ŧ5CgfwBz(%Y$q?aBjVQ?t % 1mb2zf¶Wӣ|eDLNf)?Iӷ৞h]cV-Q9ăR>IA)-ܰ `8ޡV]LC%Gpa+ Tw%_CaFOQ;W4}LOp.:|.6a=qiw? ioϫNS: o|ː ot({K{k5Lp r$$sgz^zޙ#% q|4&o"ϸw.TB~9>>|"MuƢ3?ɠdhVQe'UYC; ~thYA?W9+~yf@)e H:0A25_XnrcjԚ D$ ޏCU"BwOZe </}띖98D5r3L1qVC\A^$"A窷U=aΓĎ9­:LWjg >nǁ"H$R>!T)B1w>=+Ҽ> Uu,?:c?PQZ'Is{ EF*i5M/9rK5< lV~4 ~[g)1ˊ_ |B9 pLNЇ3ybp(5sOe:G7|HWXt01~⭆H.6D|@u 'B}.E:?_CCn\\5xArRti' i&\J,J\(Z2gЈ.rE~x$:Aw 2p}?n'4oc= %Q8`'3|-UyO.tNF2 uT|| L2< e% ˕h]/ʮ$sV 9cFGFp.5^鱗C$Ò>J \0-Vg;SZڤ=2',[ ,.]%enH tGC_"j@+P1LާNm"t8\!.4xUZf*/  > hOҖ)x>>f^bE\^=Ba`#@!D۪%T%CoPs^..8>YD@P9=ڧDm ĂP̾:k JnMK|F'$mAb ds.\};;(=S0m<PN@?񏏽2쇸\‰,J*w+!phQ9;9N#CB au)E$Rdܯ&BL"$#L7Q^Lٻló!0wgs1a}02aB߰`l FKʙ! @\f֐두&UqtJV7Fl~Uu!Z)8@)= EbBA)89s@u8cϾ-Lv/dF~r̈2_;| q?l1\9˲.gf 46>{H tn "9F<Q^ȻQGXR}70 0Hᄐ|4FQ,r5\"{+gy*>ʬ̛NET !lj "V@_<e7񱙨 (r`OGߜNa!y³^:F6߄Z8SEͩMZcIM+Đ˜{@Z>Ͱ H ҟ \ KGj| 5Xl&w[x*1|ox]fRŞSY)c/jEM >PMNsH<6XR;ڑwު-VnGxT)@@@]l\Hvg-zQa~z>M⃟ga\җ?1ׄZVVȒAcx< 6 mx.RW_̀yn x&8A1L4RFŠʷrʿ!_˳U}gvX7AdwxߥkEo 弶Uya0'\H̾[>(8QwqC1UV Bŗ뺛)2>f^Zo7 @p^'?O;9@h-;{BEܛK O\1 @6˜ŃZn R^_a:hDo4.!)W1 X2ŁWq%EoͣZ'6uR~~v~8D%u+%$1H `c~C*2!Ow6!MCߡoo;I'7Ts!<&T*M_6nYX?"됩`^7{7oFM$AfnAV^IWH $Vz_ vU25R jT_741&*JS=>7e]M'5r oCDrکsթ~+cSA~TS>,UU_wE#v5ʺh;+5B̤OVdO.2f?ʡ˜vt('q*bP`׽:Z;zMŨgAˆ|ƫJͅ-!,-~= w d=WJ[vqL4>+JWj ?uaF1wJnX]hW00+gy7vO!hT+͖}֛.vnn1 M˟ΰ\00"a΃H׼w%q9 p^_tѢ)s BUPcԖlٳY3FmT=?"]%) /Ф{Ok] X#]WR4MnԤALGs>#Q!QLHkФEB5=Ix_8h >"+d[b4#Wɦ *>4 #Hq˞ܼ˞IS#s3&@A;BPWР,1{rNfMЄ|$ 8=u]Rv`[P4 VJ #ýyVt 60Y h7fF/S2"% 9q#=ӣnEBzfT[w V,l2Emh֣^ cMu9gMvk  PV/^nA+s%-.&P{.$lQ<[81#+y, JmVf5GCxN?DNQk^K;/٩9xù梪"|OYi_#16gFBgCy3ݼZwFcUE;n݇|@'lZpHg 唂t -Uw:Q[djzwmәFXm9TOsorgekm`ۄ7`u_5R/O 3 l0syCq>mldKۨ'chQ 7/ &^6]bťP :>*YkSz=螹2S0(+ +PDCAZihVF2E0zXq'ݑ\iKUR~suJH:!s)v v&6!4EVx4݃ԩ*-%nXlUdU;.Mcu*[*VYwzߡV %RR.cS38re[ʤTLKPia 3'IENF&6Vx[Ud^ *gfiInNE\ɖWFS猶ٚuGZhےO] OSSNX})ڷ$4 ,^zLk: JYci t(y!JGr9DzAByd&RD\>姠nIRMAr3ݟed 1X'|kҟyUyG!aA PeNcO癦WhGdva+_J i jERLtK~h3v»oTHV`zq=yD.oU $ Q(Xmzi&i09h2j@K]]x>U_f"^a+l3%{Q;lm~O=^OuJNDjrBvX_?gjs ݝOgNhm{=v+8|R =Q-X\͔(jÏiϘ,pOw3e0 d_-TOLd@#CĬtdE+6yhA$d1N!Jz;hp`r>qMbdvm o7p>f/z@w &To= r>ΧǹPy$ǩWf69rhrE5~+$'Q ФM;͖J)ZЈ]GK@O H~n?Nc's4$D?UI Bķ+Kz+PRRrd E-E_"㵒Ǣy…7y>+9^v`qϻ#8/?tO]+ɭĿow"ē~[xU%*P-xSeU˺/°a=Q{yef j 9e7T'l0'o3{'bL{$f6G^eym;M;)LZ~JmtgOŪW׵.o3V]NI֫v@DbsB6j7?`U?͈M냦Y%Qջ1B i4.PyAоF`Z-flm%-Fڒ !Ioۿu<81OH?eMbO8ȡ3x~= c$m:nFpCUZћeRM^U]?4F-L9}dŏ{MN1.mFp<֐vM /%},&%rZe1jz%%n!Iʡ- y >VTNԺw.Ғ~ Yޘc%c![JLΰl<%KDIUU d4{%p2BYC 9WPt_,5Wz|ǐ4w`R#CPU{x?+- t{>afwJtldP|Yemrkq8+̳7۱a6b->yE 9JgU#}QDγ+_D1Ka{Q/*e6":2Hse%gI)*Ri:FKd.J4&\Bʒ:x0c™1 ͻW۪9t%&TIbw`ڮo䋓߆BdrG*%U,=ɣ5.-"AD f<$*ϥ,->N4iK7bWvYzւc cv$*JԤ&Rfmj񷘶pߝ3H\15=.3 k橺v% B\¯5JW[NM"/02p>SV j:~=U<`HjUuV+ƞ:(fV4y@VdNm< c $[1UOӞ ? f1E~&cl_BB]1wi y-D&UyLWe&&9W9'=XaVNp{ghuw@RDi|IKnd B>G}Aє"H, rPpa߿n?=O6o}2<=VSo>z4* YBu8c Jey!NQ}+ĎWDT^`Rpz>&qNa7˯3&_xbu'X.G+fb-}" VxDLȐ$D52åBg3HKigFsS7瑻\X'z9zT+I!Dyy躜d'K M~~O A!|sX-hImO&:ݖb Pښ|+$;gD}{-Sh 8vdA3Y@9W);H#9-< ςBb$?!%]U5ihDŭcHwעtޗQ)hϯXz kyGμjD̵FC QnvOV5ȟVn@R z'cGS-tw7wxtB<82åׅ{sPrw RȧOs.PғƋ#m!΂IÞam2.SI$晞rjcr٭J'S]F-JwE/ӟ?dG!H=~mwa{<8p/,5^E.c]{ES;?,SP`9vUt#=5U/l.mlLںۇE|&,gWv0{EXyB2 P9d4#⢓I!Z mRwkq#PA  !G::3͓U"l@D%O-" L*I)Gv7m@mF;ɐ$62jΪE)0"s)YI,O=bZT+r4ۀ`hZH'pcS)EfqDB -U}KO%j,Nȵ] B(xJ~vI߹؊-iv+v*̐].< nMkT6DQ)Nh3W>+ TAy,{:s>i)?=05Zd[G~ɷ:Wm]0ƞ κomnN, خ|?qlۭUJ9oK ic}ɹskR^:XNG}-ɫsrR.R8S@${LbBARDd nvm\w96yo봛TYր b#/[?9#{[_ 5AsB#og^.Sݑʤ:^UΎ!%BO7h3^NmKPla}c>"#/켯wI.a{)l /c'j(W/N,1Q/2v^[t|n'\鯯 rWc ^H3cw;~o}|rMOw=;/0s"q88"H A^7~]ëWݳg `A~pp(T ,g|Vjwwۮ}Ea{zgo鼯+y|SwϘk`BIR{F֏^Sx9Շ]ڀ. >/Dg#>υ9/3wSB&l%OSa؟gc?_`|'e>q[[ 7i.`MbqVcqOX'DT*((~/~O`8*t{#=M4ڔ>W*4cis vwsys Tԭٱ~k;b_]mcQQ #g2isZtLI6'13kr>7YؿzR/_)f)mcI]V=/W[?Rq #YFST˿`F}N3~|lVQڅ}t.vC# (QSBrZ[F?Ġ4SWdVU1ŬO)"y: <'na|?R!S,}M\vigI\Wee>#y#}f>p<~S5;3qxxs]6`EĤqKdtװP!!sxoem\{O8:l>fuȽ|T9}k^ad?KW_F=Gu6zb_k?e+[-cv^]%r^:Uu3mNe~-D//,wh0_*j)Ν `$L7#`(M5Wݣ=¨qcLrfP5f+(kufI;I֐1 H2 !|Pq@p@D !F gs(H(s W/B goQDu םA{c]y jύ :vzXFb%|#{Bh_>X ,!aݷ:/:h.VW.1]G}wAo>rq?Vy?fI6 `ͥ0ՇkmSR&zC?+C3hHb[6rZ*q VRԵ >ώ|zeYƸ6FOf }ѴdVָ\Ő>6i <ӆ.fU1 jr1' x/^Gq! ht1f& ʎ)>Qr@kDMvdG- 1"VU#0+KGe :tÄ3X5*]4 W 1Q C#nEyqaN*sOȦlq -J-?uL!`5(a$!/* 2(A)1M/󈀮62ߵϤ+XJ%Dv;b! Ьt*nz߮n0¡^t8$t2% $N;׸Ӌ6ϊU(Y^)N*G i1Z(GBӛ@9I0s??DeXKecA#qZ Ņ#*My~B =>8!jt?^uOcstyi\,%q]2ǫ2~ݞ7v`` 79*g“ockFO B9w8o@6KiCòp(Fj\sBWL$:)澉B(hhs`ًf:'"l4ETa2}4e{he>YSi?֦MP^0-朻.\Ø*4@ JHQA$./?˜OkۚGgŦ["6HNK_e3)C"nr $ i1+ N^́BBJYx!%z @]W a۰yEFP>0nGZy%Nj3 ^mP0o'& 4 ڜEpjI)zV^; ވn T뤴7:8s[ZIy6*8|n5G8AET~쏃]6{u6 'S'P*-䞴iF0A&z,Jxy;Yp{:S2 *w@DFlmmQq;)aBQT򤁑8Tp_w23.PM_\r7e"꯾;^nn4*V29EmI$}/7f WѲ0g~ھ<)!%ήIa<"vL*VZe83 x> |EWjj4oIdY^30w۪B$\EVOz_v#T)#:dvh]/xYG=0Me&~{/-21A={EDZxHU%C ;cS7ӹ-S7[ n>vz^C ~E緻_9h9J[fW{T݄mW⻨ n3mqQ,HIГB됢C?̅A. ݩ!'R0WCDn]'w ps3cio;:E(WY_Kʜ:T}99D8pcwC\A##o 8"^pA/s=i@/Q)>ֵ'3}a@"=Vhmh|}m2ʩCXgvV&~+ᑴ5eѡ$;KTIja=TA}5D9+K;40z  Iբ&" >t* (짪vy4ryMme6x> H:|~F豮SK)ZG [<qX5|@Eei6Vo ##\ aABXQcɓay0JWHHBp?5ly}Fe~Ee >v}K%8oA\ZXᅬ:rS KEor~-)JI*bl16  %8GxN7;!3(sLz=]3g*Wz$Tޮ/:嘱檑D z=. &obyqVZbNq\.3dzu;e>YjB-#fe9 ex7XUM4j3ǚO~vfj$<\c>3=!Ƈ8 N.LT҃ eV}`EpگO^50og@rRElJ8rnӫ?PVC7m(RNv7%Y1U$3;ʵ.^#a&d,Hpy^BsdŮ¹} kvgME{GA,9젎!?#6P&L\[$|*|6) 0BY8Vky™;VjяOj x"Gؙcd*~[;$nx3ij%cL #]l^nÊGsy:1yjʮܸ$hpOn{kB$Mmwt%ٳC佳gi f(޺5M <}7}ˎ+KK^w +[ 1W!juA;_qv ֟[\t'TELk&2KfV7]yb2y^6Cݺ!fKV԰W")MT"? $MEttYԝ<ϣuljOEr++.e\sՏ~E 2f-,f+K'JV$FE o^@ҭ4E¯tq3S94r<hx)uQAkXM,?M%\命 /sXh`&P,2K;|ہ{"^;GE:6SJ8J74p.grfr"j [D9~.̒Q|JSDmw~rZXj,7~g}wOѩ UK$޳EBudg)ݨ,1ԭ܌Cb\?ϟ/ᤸ)GW V NnҠDSYEqMi]:J}ͥ/ufU7'ߗ¯9\4^=ͧ7o8ҟɷig~^xQ>nƑi]s9<-ͻπڷ_M姒Vmj782d^oei:&\Xm:Y@r2ۆڡ0$O6uM38;{1K?β TfZ+ \$d# 2RNkZ;>L Gj%3b뻴o]d֐G%1XjE9OlGt>w}hiOvl3x>`Ѷ-Z<@{/ Qs E4*uH1=NQVcSBbTa)Ǫ67C+n"FYjJ%/TBp1yPNiH{s3:1Хndu}"p,*^˲ZۤbEز3^rΖ!u==q3 +Sc=4 ߭|*Kӽ+=Թ.NJ}Weg̱k򵚇F:yPS<.u\v8musoOڦR\DF(1^qZ8hniQuH}@x-_ۯ{MnhG6w'xZu3U䙭cl0lWTF+1d]mtw~hXOaUw'bz⮒g` vs[>g.IUg*Ďթ{LSUPٸuc)?v駬Q`T=n>/^3)".od팍t]F.}JG6n=S˛ gQKÐk;S8P<.ynJ2^6՘oɐ8l)^{Yn!̤]'! G*` O3ebb@%7[ r|^Ksך.1YnӗdaLlQ )SHlo_]nL|'ibѧ7p d0Yt vJOf?+8^?'ׇA(bzUr"]JwDDfƖy)v w.heE/ju?!KT 2g%%P_vk#5 LM<+"ͦ>*/yu{ utD}Cc]Dv t O3:Rk}]* t"霆|I&աYG4 D.6Rبcer{.Ve|fQȤָg1$N#c/skW|#}u^&gؒg[V$QksXUx/\P1ݕ-t7ýafF`QO%t 5i7O[>ϒ֫vvK|ș\wgu'k'p{q`q'$cfNzKJn<~χ=['a9%4tʈuI`Bnaw@9~Mj&!$8fEٴ"W ՗nNً:?C0!=LZ gh<7+q3Hze._a?OcϙG.g'om_>M>Vy&`]f 7Os^;Gn8:k{]xf7.C簜f*A?~.)xsDʟ͝u:ڮ<^g1=칠6J'vrkX~7TQU1]#'QI"qo>7v~iBvlD8n1ȑ J[g`[ƪWfsEl{mUo7p`->QV*1۫iR0cQy Iֽ83xQ: !9%rć(iUP n<K++y6I^݅/4wxge_qeO amA=r_|/Ȼ]U 9%T2\01(Y b()hJovw:陷-zoyߟzg2t[Z(;*xKgxv}Dw׉~7 Bg>s957(V+(ǯʼbLYHm<8#ȹļv _'6ғ<rr}15ky?ͻJpG6;Q{̀qNzY(GEe Q*ֻWlfYq,2e76MI^_q^vRYY1&z^*zpn'Ye~^:,$pA ѩ#a%Ԯx`=A^@k>]e }['h~ÎFXH챚?ߗ~YL)y1w2jFWxh]&0w21,+<{㼺OzKgW%u]Գo3??~lFME_sriN7S }ORƇsWyDy\wQɵwyu$gEjJ ov״)#ϫf*lAH*7B1 B`0c (@E iwg.k& /@/ ? ?hP0 -&9i H0y<4 a=ڃ!Xn,vjayq&(Պ޽O>TNdؓ;Q)V%+Rמ?#TwXۥ>dcq__kb^FxF3$ c>=c*OC/j 3/"^Ixƈ 7F[C4]X #*m0+׌~<|osli0ߵf`楷H?L)Xǃ7gAZl"B"Λ ݡII9R/I !ؖ WC1sunT>/mmL?޼@j;20#JB9"p|_}Wn9owrZ0@b S\GB &)}Λ(;l갑mEyumn)YT[L0ү/. `[ao>oxJ 9PA(ra2ok0 +䐃wxc.._p[G_SPj'VTeMl:.g){"ʖ2ʊtdԄ$-ݼtyt:~veGw>&ʿ4뙾.(F5C$k|i/3QO #HR KlF~.u~]7֫a` ,jǹTԷo8'g>G-gxϢMq:u'2-t;d΅ R-+h@W!My-I$:@3U DF9rUF18ʗ!QK, 푿sI3Cwo3nY@Zo7lq"FB$F0e)DJ1UɈbhTD;}ſ#AbC Ib6TCd0v;U:8=kPFB,IU@WPr20$ ?1j/ j9sVbM.H@B)0xCq sS7=GPNuvN^(h H,K@ kj`mb*BoxٳlTKS^ʒM I (؈H`W<#EpXfH&V"2mڔ>]p|wZ?kF8 F؀e^&um=M z-dz=O Rv@k6뷗 zu:U"h࠰3#D +,zjDu 쩳t]& ;Q,2SqO)HÉ> !ZXd?`9IRH~c0 XfM7Q]CQB^[`P'0^Q|x 45P]k[ ӊCplvd[|GbIE.Uj.yYO7SV.Ōbړ0X,3F:>G{Xtb Y BY&jZ cd[Weq?+g?@'n!"&q,?-.Cb[:cLXۆiz.[USoT|KEbgd 돠LCVr<!НQnPLc f8LXS&=C;md8g!(ӵbm5Oԙ\@pڏ7d`\Dc~4c{/zK}{w̲du|dW}S+t^v,%vsҏV;Tӈ~LG-%x E=j8|+LQbM8|5*b\?%5 (prHe91VA_y'RXu.exZ&zDb]U!~rlM? Zf] Wvbaj*Lҫrj+q%G9KW- 4knRSh"\˛]cZLk.Pvr d_GL)6@ ?<9ƪs#/ Bm5 Ahmj{Dup05ZXXY#(q5Fx"Pf(Y;Q{$swD*-KG?;HEwOhSrCJ D31R0siH-]1_11+@]!ޥ#-s? @IDyJp:A Yjg&% ޏ2a \AP?Z 7PyԲs2|PyެJO~X % >QhWFЃ)*cל9yzp*Q 6]oaࠆ<:P%_VēmMG Fi㇉Ӛ#}u_f/RޛrcW$?dyE5+!M%b⫎cIqZ$5S 5A+@dr ~Ŏ>=jsw_ 3X AFz ʑ^PQ,:GF[`WN{ZH胭Ü.T}@-i/N9{j] X5/蕢Je:W9,K۝ͨ.^w_ JUbH^]l#)c'Jj؍anb<e?|R7f`V w=Z=K D#~1\Wr5M}?REsJme<ɺnt/1zSϗ/x -?v%~_xq/b(JKC1~ӛsoOpdD &A2^+g baFU6"aŅ0#53fqIg}\,ևvt3K,l2󇞒]nWŚ_ri6+  @)͂gfE21!8yjVN*WJRpoZT>|u"E6!Ο +S4ĬWwYwn=KB'e|r[ze)Y1*:F교_ &ZTڳꘁLw+^j@5Mv2% j39-Z.Fv̊]-4yME<6^׫bxC@'H  1` ]v<;J#7ֈ܆@F &~Q9 ^m.ХybΘ8ʟ</42$-c4 ,8%: ,ZG7cRADd`]tIHM ;ffBA-*1˒(aQ~ںWeC.K_ _o˴45 Z)p'p-i3JN$\pU+BunDc͹kNk)}4E%0,ͼG926#A5-E=#`y9+8[ ͵I'¤^ĘZW:ɝVO銹k @wxI?5{^S3nLP/h eJs1\]lh])4JPA!|ԾQ\/>;hٚÉtވи" R%AҎ:.Rn ԓ c-Ny>MKQfzp }P}!Am$B15(dNZ u }6 7[5ˠ YqR7HoĵXM 겘'O UTtW㝮q v<Μ ;!u#)\/^=t)?Ttb 簭A5a&kVQtiuHSm*cBk{c*Z"ѿV IDY8ki^UrLNM`-*^b!)70[-&~.V$B "h$uLJQ;=N{è7@ }SI9!=5ejI33ɬ'TWLG oAHƕ у YZ