samba-client-libs-4.17.12+git.462.df636292e62-150500.3.23.7<>, @f p9|Asw?oOp`+zup탇snbN,_R8_[s$`Soe@]Rd \ާ̸Rc$1êCܷ}ÁF Wdؠҽsw1UFkFՔIf m|B&!/3Lfd ,yL/E>u:A##{\GN=wX2){t&QqZ8".Xz4, BO>C ?d0 > U =TZdu8u "u  u u u !u#u%u((Pu*$_c(89`:7>t@BFGuHuIuXYZ!8[!\#u]%u^/b0*c0d1Se1Xf1[l1]u1puv3Dcwquxruyt zCsamba-client-libs4.17.12+git.462.df636292e62150500.3.23.7Samba client librariesThe samba-libs package contains the libraries needed by samba client programs.f ibs-power9-110SUSE Linux Enterprise 15SUSE LLC GPL-3.0-or-laterhttps://www.suse.com/Development/Libraries/C and C++https://www.samba.org/linuxppc64le Hp y X 0(  8(   xx  /h8 8!x` @$ `Af f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f !f "f "f "f "f "f "f "f "f "f "f "f "f "f "f "f "f "f "f "f "f "f "f "f "f "f "f "f "f "f "f "f "f "f "f "f "f "f "f "f "f "f "f #f #f "f "f "f #f #f #f #f #f #f #f #f #f #f #f #f #f #f #f $f #f #f #f #f #f #f #f #f #f #f #f #f #f #f #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-binding.so.0.0.1libdcerpc-server-core.so.0.0.1libdcerpc.so.0.0.1libndr-krb5pac.so.0.0.1libndr-nbt.so.0.0.1libndr-standard.so.0.0.1libndr.so.3.0.0libnetapi.so.1.0.0libsamba-credentials.so.1.0.0libsamba-errors.so.1.0.0libsamba-hostconfig.so.0.0.1libsamba-passdb.so.0.28.0libsamba-util.so.0.0.1libsamdb.so.0.0.1libsmbclient.so.0.7.0libsmbconf.so.0.0.1libsmbldap.so.2.1.0libtevent-util.so.0.0.1libwbclient.so.0.15rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootsamba-4.17.12+git.462.df636292e62-150500.3.23.7.src.rpmlibCHARSET3-samba4.so()(64bit)libCHARSET3-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libMESSAGING-SEND-samba4.so()(64bit)libMESSAGING-SEND-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libMESSAGING-samba4.so()(64bit)libMESSAGING-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libaddns-samba4.so()(64bit)libaddns-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libads-samba4.so()(64bit)libads-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libasn1util-samba4.so()(64bit)libasn1util-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libauth-samba4.so()(64bit)libauth-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libauthkrb5-samba4.so()(64bit)libauthkrb5-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libcli-cldap-samba4.so()(64bit)libcli-cldap-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libcli-ldap-common-samba4.so()(64bit)libcli-ldap-common-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libcli-ldap-samba4.so()(64bit)libcli-ldap-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libcli-nbt-samba4.so()(64bit)libcli-nbt-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libcli-smb-common-samba4.so()(64bit)libcli-smb-common-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libcli-spoolss-samba4.so()(64bit)libcli-spoolss-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libcliauth-samba4.so()(64bit)libcliauth-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libclidns-samba4.so()(64bit)libclidns-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libcluster-samba4.so()(64bit)libcluster-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libcmdline-contexts-samba4.so()(64bit)libcmdline-contexts-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libcmdline-samba4.so()(64bit)libcmdline-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libcommon-auth-samba4.so()(64bit)libcommon-auth-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libdbwrap-samba4.so()(64bit)libdbwrap-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libdcerpc-binding.so.0()(64bit)libdcerpc-binding.so.0(DCERPC_BINDING_0.0.1)(64bit)libdcerpc-binding0libdcerpc-pkt-auth-samba4.so()(64bit)libdcerpc-pkt-auth-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libdcerpc-samba-samba4.so()(64bit)libdcerpc-samba-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libdcerpc-samba4.so()(64bit)libdcerpc-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libdcerpc-server-core.so.0()(64bit)libdcerpc-server-core.so.0(DCERPC_SERVER_CORE_0.0.1)(64bit)libdcerpc.so.0()(64bit)libdcerpc.so.0(DCERPC_0.0.1)(64bit)libdcerpc0libevents-samba4.so()(64bit)libevents-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libflag-mapping-samba4.so()(64bit)libflag-mapping-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libgenrand-samba4.so()(64bit)libgenrand-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libgensec-samba4.so()(64bit)libgensec-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libgpo-samba4.so()(64bit)libgpo-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libgse-samba4.so()(64bit)libgse-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libhttp-samba4.so()(64bit)libhttp-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libinterfaces-samba4.so()(64bit)libinterfaces-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libiov-buf-samba4.so()(64bit)libiov-buf-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libkrb5samba-samba4.so()(64bit)libkrb5samba-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libldbsamba-samba4.so()(64bit)libldbsamba-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)liblibcli-lsa3-samba4.so()(64bit)liblibcli-lsa3-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)liblibcli-netlogon3-samba4.so()(64bit)liblibcli-netlogon3-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)liblibsmb-samba4.so()(64bit)liblibsmb-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libmessages-dgm-samba4.so()(64bit)libmessages-dgm-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libmessages-util-samba4.so()(64bit)libmessages-util-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libmscat-samba4.so()(64bit)libmscat-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libmsghdr-samba4.so()(64bit)libmsghdr-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libmsrpc3-samba4.so()(64bit)libmsrpc3-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libndr-krb5pac.so.0()(64bit)libndr-krb5pac.so.0(NDR_KRB5PAC_0.0.1)(64bit)libndr-krb5pac0libndr-nbt.so.0()(64bit)libndr-nbt.so.0(NDR_NBT_0.0.1)(64bit)libndr-nbt0libndr-samba-samba4.so()(64bit)libndr-samba-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libndr-samba4.so()(64bit)libndr-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libndr-standard.so.0()(64bit)libndr-standard.so.0(NDR_STANDARD_0.0.1)(64bit)libndr-standard0libndr.so.3()(64bit)libndr.so.3(NDR_0.0.1)(64bit)libndr.so.3(NDR_0.0.2)(64bit)libndr.so.3(NDR_0.0.3)(64bit)libndr.so.3(NDR_0.0.4)(64bit)libndr.so.3(NDR_0.0.5)(64bit)libndr.so.3(NDR_0.0.6)(64bit)libndr.so.3(NDR_0.0.7)(64bit)libndr.so.3(NDR_0.0.8)(64bit)libndr.so.3(NDR_0.0.9)(64bit)libndr.so.3(NDR_0.1.0)(64bit)libndr.so.3(NDR_0.1.1)(64bit)libndr.so.3(NDR_0.1.2)(64bit)libndr.so.3(NDR_0.2.0)(64bit)libndr.so.3(NDR_0.2.1)(64bit)libndr.so.3(NDR_1.0.0)(64bit)libndr.so.3(NDR_1.0.1)(64bit)libndr.so.3(NDR_1.0.2)(64bit)libndr.so.3(NDR_2.0.0)(64bit)libndr.so.3(NDR_3.0.0)(64bit)libndr2libnet-keytab-samba4.so()(64bit)libnet-keytab-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libnetapi.so.1()(64bit)libnetapi.so.1(NETAPI_1.0.0)(64bit)libnetapi0libnetif-samba4.so()(64bit)libnetif-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libnpa-tstream-samba4.so()(64bit)libnpa-tstream-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libprinting-migrate-samba4.so()(64bit)libprinting-migrate-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libregistry-samba4.so()(64bit)libregistry-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libreplace-samba4.so()(64bit)libreplace-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsamba-cluster-support-samba4.so()(64bit)libsamba-cluster-support-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsamba-credentials.so.1()(64bit)libsamba-credentials.so.1(SAMBA_CREDENTIALS_1.0.0)(64bit)libsamba-credentials1libsamba-debug-samba4.so()(64bit)libsamba-debug-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsamba-errors.so.1()(64bit)libsamba-errors.so.1(SAMBA_ERRORS_1.0.0)(64bit)libsamba-errors0libsamba-hostconfig.so.0()(64bit)libsamba-hostconfig.so.0(SAMBA_HOSTCONFIG_0.0.1)(64bit)libsamba-hostconfig0libsamba-modules-samba4.so()(64bit)libsamba-modules-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsamba-passdb.so.0()(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.2.0)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.24.1)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.24.2)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.25.0)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.26.0)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.27.0)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.27.1)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.27.2)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.28.0)(64bit)libsamba-passdb0libsamba-security-samba4.so()(64bit)libsamba-security-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsamba-sockets-samba4.so()(64bit)libsamba-sockets-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsamba-util.so.0()(64bit)libsamba-util.so.0(SAMBA_UTIL_0.0.1)(64bit)libsamba-util0libsamba3-util-samba4.so()(64bit)libsamba3-util-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsamdb-common-samba4.so()(64bit)libsamdb-common-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsamdb.so.0()(64bit)libsamdb.so.0(SAMDB_0.0.1)(64bit)libsamdb0libsecrets3-samba4.so()(64bit)libsecrets3-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libserver-id-db-samba4.so()(64bit)libserver-id-db-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libserver-role-samba4.so()(64bit)libserver-role-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsmb-transport-samba4.so()(64bit)libsmb-transport-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsmbclient-raw-samba4.so()(64bit)libsmbclient-raw-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsmbclient.so.0()(64bit)libsmbclient.so.0(SMBCLIENT_0.1.0)(64bit)libsmbclient.so.0(SMBCLIENT_0.2.0)(64bit)libsmbclient.so.0(SMBCLIENT_0.2.1)(64bit)libsmbclient.so.0(SMBCLIENT_0.2.2)(64bit)libsmbclient.so.0(SMBCLIENT_0.2.3)(64bit)libsmbclient.so.0(SMBCLIENT_0.3.0)(64bit)libsmbclient.so.0(SMBCLIENT_0.3.1)(64bit)libsmbclient.so.0(SMBCLIENT_0.3.2)(64bit)libsmbclient.so.0(SMBCLIENT_0.3.3)(64bit)libsmbclient.so.0(SMBCLIENT_0.4.0)(64bit)libsmbclient.so.0(SMBCLIENT_0.5.0)(64bit)libsmbclient.so.0(SMBCLIENT_0.6.0)(64bit)libsmbclient.so.0(SMBCLIENT_0.7.0)(64bit)libsmbclient0libsmbconf.so.0()(64bit)libsmbconf.so.0(SMBCONF_0.0.1)(64bit)libsmbconf0libsmbd-base-samba4.so()(64bit)libsmbd-base-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsmbd-shim-samba4.so()(64bit)libsmbd-shim-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsmbldap.so.2()(64bit)libsmbldap.so.2(SMBLDAP_0)(64bit)libsmbldap.so.2(SMBLDAP_1)(64bit)libsmbldap.so.2(SMBLDAP_2)(64bit)libsmbldap.so.2(SMBLDAP_2.1.0)(64bit)libsmbldap2libsmbldaphelper-samba4.so()(64bit)libsmbldaphelper-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsocket-blocking-samba4.so()(64bit)libsocket-blocking-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsys-rw-samba4.so()(64bit)libsys-rw-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libtalloc-report-printf-samba4.so()(64bit)libtalloc-report-printf-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libtdb-wrap-samba4.so()(64bit)libtdb-wrap-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libtevent-util.so.0()(64bit)libtevent-util.so.0(TEVENT_UTIL_0.0.1)(64bit)libtevent-util0libtime-basic-samba4.so()(64bit)libtime-basic-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libtrusts-util-samba4.so()(64bit)libtrusts-util-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libutil-reg-samba4.so()(64bit)libutil-reg-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libutil-setid-samba4.so()(64bit)libutil-setid-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libutil-tdb-samba4.so()(64bit)libutil-tdb-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libwbclient.so.0()(64bit)libwbclient.so.0(WBCLIENT_0.10)(64bit)libwbclient.so.0(WBCLIENT_0.11)(64bit)libwbclient.so.0(WBCLIENT_0.12)(64bit)libwbclient.so.0(WBCLIENT_0.13)(64bit)libwbclient.so.0(WBCLIENT_0.14)(64bit)libwbclient.so.0(WBCLIENT_0.15)(64bit)libwbclient.so.0(WBCLIENT_0.9)(64bit)libwbclient0samba-client-libssamba-client-libs(ppc-64)@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    /sbin/ldconfig/sbin/ldconfigld64.so.2()(64bit)ld64.so.2(GLIBC_2.22)(64bit)libCHARSET3-samba4.so()(64bit)libCHARSET3-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libMESSAGING-SEND-samba4.so()(64bit)libMESSAGING-SEND-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libMESSAGING-samba4.so()(64bit)libMESSAGING-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libacl.so.1()(64bit)libacl.so.1(ACL_1.0)(64bit)libaddns-samba4.so()(64bit)libaddns-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libads-samba4.so()(64bit)libads-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libasn1util-samba4.so()(64bit)libasn1util-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libauth-samba4.so()(64bit)libauth-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libauthkrb5-samba4.so()(64bit)libauthkrb5-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libavahi-client.so.3()(64bit)libavahi-common.so.3()(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libc.so.6(GLIBC_2.27)(64bit)libcli-cldap-samba4.so()(64bit)libcli-cldap-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libcli-ldap-common-samba4.so()(64bit)libcli-ldap-common-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libcli-ldap-samba4.so()(64bit)libcli-ldap-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libcli-nbt-samba4.so()(64bit)libcli-nbt-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libcli-smb-common-samba4.so()(64bit)libcli-smb-common-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libcli-spoolss-samba4.so()(64bit)libcli-spoolss-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libcliauth-samba4.so()(64bit)libcliauth-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libclidns-samba4.so()(64bit)libclidns-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libcluster-samba4.so()(64bit)libcluster-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libcom_err.so.2()(64bit)libcommon-auth-samba4.so()(64bit)libcommon-auth-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libdbwrap-samba4.so()(64bit)libdbwrap-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libdcerpc-binding.so.0()(64bit)libdcerpc-binding.so.0(DCERPC_BINDING_0.0.1)(64bit)libdcerpc-pkt-auth-samba4.so()(64bit)libdcerpc-pkt-auth-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libdcerpc-samba-samba4.so()(64bit)libdcerpc-samba-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libdcerpc.so.0()(64bit)libdcerpc.so.0(DCERPC_0.0.1)(64bit)libdl.so.2()(64bit)libdl.so.2(GLIBC_2.17)(64bit)libflag-mapping-samba4.so()(64bit)libflag-mapping-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libgenrand-samba4.so()(64bit)libgenrand-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libgensec-samba4.so()(64bit)libgensec-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libgnutls.so.30()(64bit)libgnutls.so.30(GNUTLS_3_4)(64bit)libgnutls.so.30(GNUTLS_3_6_10)(64bit)libgnutls.so.30(GNUTLS_3_6_13)(64bit)libgnutls.so.30(GNUTLS_3_6_3)(64bit)libgse-samba4.so()(64bit)libgse-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libgssapi_krb5.so.2()(64bit)libgssapi_krb5.so.2(gssapi_krb5_2_MIT)(64bit)libhttp-samba4.so()(64bit)libhttp-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libinterfaces-samba4.so()(64bit)libinterfaces-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libiov-buf-samba4.so()(64bit)libiov-buf-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libk5crypto.so.3()(64bit)libk5crypto.so.3(k5crypto_3_MIT)(64bit)libkrb5.so.3()(64bit)libkrb5.so.3(krb5_3_MIT)(64bit)libkrb5samba-samba4.so()(64bit)libkrb5samba-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)liblber-2.4.so.2()(64bit)libldap_r-2.4.so.2()(64bit)libldb.so.2()(64bit)libldb.so.2(LDB_0.9.10)(64bit)libldb.so.2(LDB_0.9.15)(64bit)libldb.so.2(LDB_0.9.16)(64bit)libldb.so.2(LDB_0.9.23)(64bit)libldb.so.2(LDB_1.1.1)(64bit)libldb.so.2(LDB_1.1.19)(64bit)libldb.so.2(LDB_1.1.30)(64bit)libldb.so.2(LDB_1.3.0)(64bit)libldb.so.2(LDB_2.6.1)(64bit)libldb.so.2(LDB_2.6.2)(64bit)libldbsamba-samba4.so()(64bit)libldbsamba-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)liblibcli-lsa3-samba4.so()(64bit)liblibcli-lsa3-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)liblibcli-netlogon3-samba4.so()(64bit)liblibcli-netlogon3-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)liblibsmb-samba4.so()(64bit)liblibsmb-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libmessages-dgm-samba4.so()(64bit)libmessages-dgm-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libmessages-util-samba4.so()(64bit)libmessages-util-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libmsghdr-samba4.so()(64bit)libmsghdr-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libmsrpc3-samba4.so()(64bit)libmsrpc3-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libndr-krb5pac.so.0()(64bit)libndr-krb5pac.so.0(NDR_KRB5PAC_0.0.1)(64bit)libndr-nbt.so.0()(64bit)libndr-nbt.so.0(NDR_NBT_0.0.1)(64bit)libndr-samba-samba4.so()(64bit)libndr-samba-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libndr-samba4.so()(64bit)libndr-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libndr-standard.so.0()(64bit)libndr-standard.so.0(NDR_STANDARD_0.0.1)(64bit)libndr.so.3()(64bit)libndr.so.3(NDR_0.0.1)(64bit)libndr.so.3(NDR_0.0.3)(64bit)libndr.so.3(NDR_0.0.4)(64bit)libndr.so.3(NDR_0.0.5)(64bit)libndr.so.3(NDR_0.0.6)(64bit)libndr.so.3(NDR_0.0.7)(64bit)libndr.so.3(NDR_0.0.8)(64bit)libndr.so.3(NDR_0.0.9)(64bit)libndr.so.3(NDR_0.1.1)(64bit)libndr.so.3(NDR_0.1.2)(64bit)libndr.so.3(NDR_0.2.0)(64bit)libndr.so.3(NDR_0.2.1)(64bit)libndr.so.3(NDR_1.0.0)(64bit)libndr.so.3(NDR_1.0.1)(64bit)libndr.so.3(NDR_1.0.2)(64bit)libndr.so.3(NDR_2.0.0)(64bit)libnetif-samba4.so()(64bit)libnetif-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libnpa-tstream-samba4.so()(64bit)libnpa-tstream-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libnscd.so.1()(64bit)libnscd.so.1(LIBNSCD_1.0)(64bit)libpam.so.0()(64bit)libpam.so.0(LIBPAM_1.0)(64bit)libpopt.so.0()(64bit)libpopt.so.0(LIBPOPT_0)(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.17)(64bit)libreplace-samba4.so()(64bit)libreplace-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libresolv.so.2()(64bit)libresolv.so.2(GLIBC_2.17)(64bit)libsamba-cluster-support-samba4.so()(64bit)libsamba-cluster-support-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsamba-credentials.so.1()(64bit)libsamba-credentials.so.1(SAMBA_CREDENTIALS_1.0.0)(64bit)libsamba-debug-samba4.so()(64bit)libsamba-debug-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsamba-errors.so.1()(64bit)libsamba-errors.so.1(SAMBA_ERRORS_1.0.0)(64bit)libsamba-hostconfig.so.0()(64bit)libsamba-hostconfig.so.0(SAMBA_HOSTCONFIG_0.0.1)(64bit)libsamba-modules-samba4.so()(64bit)libsamba-modules-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsamba-passdb.so.0()(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.2.0)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.27.1)(64bit)libsamba-security-samba4.so()(64bit)libsamba-security-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsamba-sockets-samba4.so()(64bit)libsamba-sockets-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsamba-util.so.0()(64bit)libsamba-util.so.0(SAMBA_UTIL_0.0.1)(64bit)libsamba3-util-samba4.so()(64bit)libsamba3-util-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsamdb-common-samba4.so()(64bit)libsamdb-common-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsamdb.so.0()(64bit)libsamdb.so.0(SAMDB_0.0.1)(64bit)libsecrets3-samba4.so()(64bit)libsecrets3-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libserver-id-db-samba4.so()(64bit)libserver-id-db-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libserver-role-samba4.so()(64bit)libserver-role-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsmb-transport-samba4.so()(64bit)libsmb-transport-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsmbclient-raw-samba4.so()(64bit)libsmbclient-raw-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsmbconf.so.0()(64bit)libsmbconf.so.0(SMBCONF_0.0.1)(64bit)libsmbd-shim-samba4.so()(64bit)libsmbd-shim-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsmbldap.so.2()(64bit)libsmbldap.so.2(SMBLDAP_0)(64bit)libsmbldap.so.2(SMBLDAP_1)(64bit)libsmbldaphelper-samba4.so()(64bit)libsmbldaphelper-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsocket-blocking-samba4.so()(64bit)libsocket-blocking-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsys-rw-samba4.so()(64bit)libsys-rw-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsystemd.so.0()(64bit)libsystemd.so.0(LIBSYSTEMD_209)(64bit)libtalloc-report-printf-samba4.so()(64bit)libtalloc-report-printf-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libtalloc.so.2()(64bit)libtalloc.so.2(TALLOC_2.0.2)(64bit)libtalloc.so.2(TALLOC_2.1.0)(64bit)libtasn1.so.6()(64bit)libtasn1.so.6(LIBTASN1_0_3)(64bit)libtdb-wrap-samba4.so()(64bit)libtdb-wrap-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libtdb.so.1()(64bit)libtdb.so.1(TDB_1.2.1)(64bit)libtdb.so.1(TDB_1.2.2)(64bit)libtdb.so.1(TDB_1.2.5)(64bit)libtdb.so.1(TDB_1.3.0)(64bit)libtdb.so.1(TDB_1.3.11)(64bit)libtdb.so.1(TDB_1.3.17)(64bit)libtevent-util.so.0()(64bit)libtevent-util.so.0(TEVENT_UTIL_0.0.1)(64bit)libtevent.so.0()(64bit)libtevent.so.0(TEVENT_0.11.0)(64bit)libtevent.so.0(TEVENT_0.12.0)(64bit)libtevent.so.0(TEVENT_0.13.0)(64bit)libtevent.so.0(TEVENT_0.9.12)(64bit)libtevent.so.0(TEVENT_0.9.13)(64bit)libtevent.so.0(TEVENT_0.9.14)(64bit)libtevent.so.0(TEVENT_0.9.16)(64bit)libtevent.so.0(TEVENT_0.9.20)(64bit)libtevent.so.0(TEVENT_0.9.21)(64bit)libtevent.so.0(TEVENT_0.9.30)(64bit)libtevent.so.0(TEVENT_0.9.31)(64bit)libtevent.so.0(TEVENT_0.9.37)(64bit)libtevent.so.0(TEVENT_0.9.9)(64bit)libtime-basic-samba4.so()(64bit)libtime-basic-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libtrusts-util-samba4.so()(64bit)libtrusts-util-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libutil-reg-samba4.so()(64bit)libutil-reg-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libutil-setid-samba4.so()(64bit)libutil-setid-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libutil-tdb-samba4.so()(64bit)libutil-tdb-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libwbclient.so.0()(64bit)libwbclient.so.0(WBCLIENT_0.13)(64bit)libwbclient.so.0(WBCLIENT_0.9)(64bit)libz.so.1()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.3ee@ez@e[J@e6`@eSd@d.@dd-@d@dd@d6@d@d @cvcvc@c@c @c@cctc5cM@b@b@b@ba@banopower@suse.comnopower@suse.comscabrero@suse.descabrero@suse.descabrero@suse.denopower@suse.comscabrero@suse.descabrero@suse.descabrero@suse.denopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comscabrero@suse.dedmulder@suse.comscabrero@suse.denopower@suse.comnopower@suse.comscabrero@suse.denopower@suse.comnopower@suse.comscabrero@suse.denopower@suse.comscabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comddiss@suse.comnopower@suse.comdmulder@suse.comdmulder@suse.comnopower@suse.comscabrero@suse.descabrero@suse.dedimstar@opensuse.orgscabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comnopower@suse.comnopower@suse.comscabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comnopower@suse.comscabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.denopower@suse.comscabrero@suse.deddiss@suse.comddiss@suse.comddiss@suse.comscabrero@suse.descabrero@suse.dedmulder@suse.comnopower@suse.comscabrero@suse.descabrero@suse.dedmulder@suse.comscabrero@suse.descabrero@suse.denopower@suse.comnopower@suse.comnopower@suse.comdmulder@suse.comscabrero@suse.denopower@suse.comddiss@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comscabrero@suse.denopower@suse.comnopower@suse.comjmcdonough@suse.comnopower@suse.comscabrero@suse.denopower@suse.comnopower@suse.comddiss@suse.comddiss@suse.comnopower@suse.comnopower@suse.comddiss@suse.comnopower@suse.comdmulder@suse.comdmulder@suse.comddiss@suse.comscabrero@suse.dedmulder@suse.comddiss@suse.comnopower@suse.comjengelh@inai.dedmulder@suse.comscabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comdmulder@suse.comdmulder@suse.comjmcdonough@suse.comdmulder@suse.comscabrero@suse.dedmulder@suse.comscabrero@suse.dedmulder@suse.comdmulder@suse.comvcizek@suse.comdmulder@suse.comdmulder@suse.comnopower@suse.comscabrero@suse.dejmcdonough@suse.comscabrero@suse.deaaptel@suse.comjengelh@inai.dedimstar@opensuse.orgdmulder@suse.comjmcdonough@suse.comdavid.mulder@suse.comjmcdonough@suse.comaaptel@suse.comdmulder@suse.comscabrero@suse.comscabrero@suse.comkukuk@suse.dedavid.mulder@suse.comscabrero@suse.comrbrown@suse.comdmulder@suse.comscabrero@suse.comdimstar@opensuse.orgscabrero@suse.comaaptel@suse.comnopower@suse.comnopower@suse.comaaptel@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comddiss@suse.comnopower@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comdmulder@suse.comnopower@suse.comjmcdonough@suse.comaaptel@suse.comkukuk@suse.comkukuk@suse.denopower@suse.comaaptel@suse.comdmulder@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comddiss@suse.comjmcdonough@suse.comddiss@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comjmcdonough@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comtchvatal@suse.comlmuelle@suse.comnopower@suse.comcrrodriguez@opensuse.orglmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comnoel.power@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comnopower@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.commpluskal@suse.comlmuelle@suse.comnopower@suse.deddiss@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.denopower@suse.delmuelle@suse.comnopower@suse.deddiss@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.com- fd_handle_destructor() panics within an smbd_smb2_close() if vfs_stat_fsp() fails in fd_close(); (bso#15527); (bsc#1219937).- Remove -x from bash shebang update-apparmor-samba-profile; (bsc#1218431).- Add new idmap_nss option 'use_upn' for those NSS modules able to handle UPNs or DOMAIN/user name format; (bsc#1215369); - Avoid unnecessary locking in idmap parent setup; (bsc#1215369);- Add "net offlinejoin composeodj" command; (bsc#1214076);- Update to samba 4.17.12 * Weird filename can cause assert to fail in openat_pathref_fsp_nosymlink(); (bso#15419); * reply_sesssetup_and_X() can dereference uninitialized tmp pointer; (bso#15420); * Missing return in reply_exit_done(); (bso#15430); * TREE_CONNECT without SETUP causes smbd to use uninitialized pointer; (bso#15432); * Improve GetNChanges to address some (but not all "Azure AD Connect") syncronisation tool looping during the initial user sync phase; (bso#15401); * Samba replication logs show (null) DN; (bso#15407); * Spotlight sometimes returns no results on latest macOS; (bso#15342); * Renaming results in NT_STATUS_SHARING_VIOLATION if previously attempted to remove the destination; (bso#15417); * Spotlight results return wrong date in result list; (bso#15427); * macOS mdfind returns only 50 results; (bso#15463); * 2-3min delays at reconnect with smb2_validate_sequence_number: bad message_id 2; (bso#15346); * samba-tool ntacl get segfault if aio_pthread appended; (bso#15441); * DCERPC_PKT_CO_CANCEL and DCERPC_PKT_ORPHANED can't be parsed; (bso#15446); * File doesn't show when user doesn't have permission if aio_pthread is loaded; (bso#15453); * net ads lookup (with unspecified realm) fails; (bso#15384); (bsc#1213826); * Regression DFS not working with widelinks = true; (bso#15435); (bsc#1213607); * ctdb_killtcp fails to work with --enable-pcap and libpcap 1.9.1; (bso#15451); * mdssvc: Do an early talloc_free() in _mdssvc_open(); (bso#15449); * Windows client join fails if a second container CN=System exists somewhere; (bso#9959); - Fix crossing automounter mount points; (bsc#1215212);- CVE-2023-4091: samba: Client can truncate file with read-only permissions; (bsc#1215904); (bso#15439). - CVE-2023-42669: samba: rpcecho, enabled and running in AD DC, allows blocking sleep on request; (bso#1215905); (bso#15474). - CVE-2023-42670: samba: The procedure number is out of range when starting Active Directory Users and Computers; (bsc#1215906); (bso#15473). - CVE-2023-3961: samba: Unsanitized client pipe name passed to local_np_connect(); (bsc#1215907); (bso#15422). - CVE-2023-4154: samba: dirsync allows SYSTEM access with only "GUID_DRS_GET_CHANGES" right, not "GUID_DRS_GET_ALL_CHANGES; (bsc#1215908); (bso#15424).- Fix DFS not working with widelinks enabled; (bsc#1213607); (bso#15435);- Move libcluster-samba4.so from samba-libs to samba-client-libs; (bsc#1213940);- net ads lookup with unspecified realm fails; (bso#15384); (bsc#1213826);- secure channel faulty since Windows 10/11 update 07/2023; (bso#15418); (bsc#1213384).- CVE-2022-2127: lm_resp_len not checked properly in winbindd_pam_auth_crap_send; (bso#15072); (bsc#1213174). - CVE-2023-34966: Samba Spotlight mdssvc RPC Request Infinite Loop Denial-of-Service Vulnerability; (bso#15340); (bsc#1213173). - CVE-2023-34967: Samba Spotlight mdssvc RPC Request Type Confusion Denial-of-Service Vulnerability; (bso#15341); (bsc#1213172). - CVE-2023-34968: Spotlight server-side Share Path Disclosure; (bso#15388); (bsc#1213171). - CVE-2023-3347: Samba doesn't require SMB2+ signing if `server signing = mandatory` is set; (bso#15397); (bsc#1213170).- Update to 4.17.9 * Backport --pidl-developer fixes; (bso#15404). * smbd_scavenger crashes when service smbd is stopped; (bso#15275). * vfs_fruit might cause a failing open for delete; (bso#15378). * named crashes on DLZ zone update; (bso#14030). * winbind recurses into itself via rpcd_lsad; (bso#15361). * cli_list loops 100% CPU against pre-lanman2 servers; (bso#15382). * smbclient leaks fds with showacls; (bso#15391). * aes256 smb3 encryption algorithms are not allowed in smb3_sid_parse(); (bso#15374). * winbindd gets stuck on NT_STATUS_RPC_SEC_PKG_ERROR; (bso#15413). * smbget memory leak if failed to download files recursively; (bso#15403).- Update to 4.17.8 * log flood: smbd_calculate_access_mask_fsp: Access denied: message level should be lower; (bso#15302). * Floating point exception (FPE) via cli_pull_send at source3/libsmb/clireadwrite.c; (bso#15306). * test_tstream_more_tcp_user_timeout_spin fails intermittently on Rackspace GitLab runners; (bso#15328). * Reduce flapping of ridalloc test; (bso#15329). * large_ldap test is unreliable; (bso#15351). * New filename parser doesn't check veto files smb.conf parameter; (bso#15143). * mdssvc may crash when initializing; (bso#15354). * Large directory optimization broken for non-lcomp path elements; (bso#15313). * streams_depot fails to create streams; (bso#15357). * shadow_copy2 and streams_depot don't play well together; (bso#15358). * wbinfo -u fails on ad dc with >1000 users; (bso#15366). * winbindd idmap child contacts the domain controller without a need; (bso#15317). * idmap_autorid may fail to map sids of trusted domains for the first time; (bso#15318). * idmap_hash doesn't use ID_TYPE_BOTH for reverse mappings; (bso#15319). * net ads search -P doesn't work against servers in other domains; (bso#15323). * DS ACEs might be inherited to unrelated object classes; (bso#15338). * Temporary smbXsrv_tcon_global.tdb can't be parsed; (bso#15353). * Setting veto files = /.*/ break listing directories; (bso#15360); (bsc#1212375). * CVE-2020-25720 [SECURITY] Create Child permission should not allow full write to all attributes (additional changes); (bso#14810). * dsgetdcname: assumes local system uses IPv4; (bso#15325).- Update to 4.17.7 * CVE-2023-0922: Samba AD DC admin tool samba-tool sends passwords in cleartext; (bso#15315); (bsc#1209481). * CVE-2023-0225: Samba AD DC "dnsHostname" attribute can be deleted by unprivileged authenticated users; (bso#15276); (bsc#1209483). * CVE-2023-0614: samba: Access controlled AD LDAP attributes can be discovered; (bso#15270); (bsc#1209485). * large_ldap test is inefficient; (bso#15332). * CVE-2020-25720 [SECURITY] Create Child permission should not allow full write to all attributes (additional changes); (bso#14810). - Update to 4.17.6 * streams_xattr is creating unexpected locks on folders; (bso#15314). * Use of the Azure AD Connect cloud sync tool is now supported for password hash synchronisation, allowing Samba AD Domains to synchronise passwords with this popular cloud environment; (bso#10635). * Spotlight doesn't work with latest macOS Ventura; (bso#15299). * New samba-dcerpc architecture does not scale gracefully; (bso#15310). * vfs_ceph incorrectly uses fsp_get_io_fd() instead of fsp_get_pathref_fd() in close and fstat; (bso#15307). * With clustering enabled samba-bgqd can core dump due to use after free; (bso#15293). * fd_load() function implicitly closes the fd where it should not; (bso#15311). - Update to 4.17.5 * smbc_getxattr() return value is incorrect; (bso#14808). * Compound SMB2 FLUSH+CLOSE requests from MacOSX are not handled correctly; (bso#15172). * synthetic_pathref AFP_AfpInfo failed errors; (bso#15210). * samba-tool gpo listall fails IPv6 only - finddcs() fails to find DC when there is only an AAAA record for the DC in DNS; (bso#15226). * smbd crashes if an FSCTL request is done on a stream handle; (bso#15236). * DFS links don't work anymore on Mac clients since 4.17; (bso#15277). * vfs_virusfilter segfault on access, directory edgecase (accessing NULL value); (bso#15283). * CVE-2022-38023 [SECURITY] Samba should refuse RC4 (aka md5) based SChannel on NETLOGON (additional changes); (bso#15240). * %U for include directive doesn't work for share listing (netshareenum); (bso#15243). * Shares missing from netshareenum response in samba 4.17.4; (bso#15266). * ctdb: use-after-free in run_proc; (bso#15269). * irpc_destructor may crash during shutdown; (bso#15280). * auth3_generate_session_info_pac leaks wbcAuthUserInfo; (bso#15286). * smbclient segfaults with use after free on an optimized build; (bso#15268). * smbstatus leaking files in msg.sock and msg.lock; (bso#15282). * Leak in wbcCtxPingDc2; (bso#15164). * Access based share enum does not work in Samba 4.16+; (bso#15265). * Crash during share enumeration; (bso#15267). * rep_listxattr on FreeBSD does not properly check for reads off end of returned buffer; (bso#15271). * Avoid relying on C89 features in a few places; (bso#15281).- Make (32bit) samba-libs conflict with old samba-ad-dc-libs package to satisfy installcheck.- Make samba-libs conflict with old samba-ad-dc-libs package to satisfy installcheck.- Remove non functioning ifup/ifdown samba-winbindd scripts; (bsc#1207414).- libdsdb-module-samba4 should be packaged as part of samba-libs and not samba-ad-dc-libs. Additionally no need for it to be removed conditionally.- Clean up logic for PAM migration settings in spec file.- Change with_dc default to 0 (for non TW builds), ADDC feature is deprecated and will no longer be included in >= SLE15-SP5; (jsc#PED-1122).- Update to 4.17.4 * CVE-2022-44640 Upstream Heimdal free of user-controlled pointer in FAST; (bsc#14929); * CVE-2021-20251 Bad password count not incremented atomically; (bsc#14611); * CVE-2022-42898 krb5_pac_parse() buffer parsing vulnerability; (bsc#15203); * CVE-2022-37966 rc4-hmac Kerberos session keys issued to modern servers; (bso#15237); * CVE-2022-37967 Kerberos constrained delegation ticket forgery possible against Samba AD DC; (bso#15231); * CVE-2022-38023 RC4/HMAC-MD5 NetLogon Secure Channel is weak and should be avoided; (bso#15240); * pam_winbind uses time_t and pointers assuming they are of the same size; (bso#15224); * Heimdal session key selection in AS-REQ examines wrong entry; (bso#15219); * filter-subunit is inefficient with large numbers of knownfails; (bso#15258); * smbd allows setting FILE_ATTRIBUTE_TEMPORARY on directories; (bso#15252); * The KDC logic arround msDs-supportedEncryptionTypes differs from Windows; (bso#13135); * libnet: change_password() doesn't work with dcerpc_samr_ChangePasswordUser4(); (bso#15206); * Heimdal session key selection in AS-REQ examines wrong entry; (bso#15219); * Memory leak in snprintf replacement functions; (bso#15230); * RODC doesn't reset badPwdCount reliable via an RWDC (CVE-2021-20251 regression); (bso#15253); * Prevent EBADF errors with vfs_glusterfs; (bso#15198); * %U for include directive doesn't work for share listing (netshareenum); (bso#15243); * Stack smashing in net offlinejoin requestodj; (bso#15257); * Windows 11 22H2 and Samba-AD 4.15 Kerberos login issue; (bso#15197); * Heimdal session key selection in AS-REQ examines wrong entry; (bso#15219); - Remove deprecated if-{down,up} scripts; (bsc#1206444); - Adjust the systemd drop-in file for named service; (bsc#1201689); * Paths are additive so do not repeat paths from named.service * Prefix the samba DLZ directory with "-" to ignore this path if it does not exists- Introduce without-smb1-server spec flag; (bsc#1205104); - Update to 4.17.3 * CVE-2022-42898: Samba buffer overflow vulnerabilities on 32-bit systems; (bsc#1205126); (bso#15203); - Replace obsolete python-gpgme with python-gpg * Upstream replaced it in v4.9.5 -- bso#13728 - Update to 4.17.2 * CVE-2022-3592 [SECURITY] samba: Wide links protection broken; (bso#15207); (bsc#1204499). * CVE-2022-3437 [SECURITY] samba: Buffer overflow in Heimdal unwrap_des3();(bso#15134); (bsc#1204254). - Update to 4.17.1 * CVE-2021-20251 [SECURITY] Bad password count not incremented atomically; (bso#14611). * smbXsrv_connection_shutdown_send result leaked; (bso#15174). * Flush on a named stream never completes; (bso#15182). * Permission denied calling SMBC_getatr when file not exists; (bso#15195). * Samba 4.5 sometimes cannot be upgraded to Samba 4.6 or later over DRS: WERROR_DS_DRA_MISSING_PARENT due to faulty GET_ANC; (bso#15189). * pytest: add file removal helpers for TestCaseInTempDir; (bso#15191). * CVE-2021-20251 [SECURITY] Bad password count not incremented atomically; (bso#14611). * Samba 4.5 sometimes cannot be upgraded to Samba 4.6 or later over DRS: WERROR_DS_DRA_MISSING_PARENT due to faulty GET_ANC; (bso#15189). * Flush on a named stream never completes; (bso#15182). * vfs_gpfs silently garbles timestamps > year 2106; (bso#15151). * CVE-2021-20251 [SECURITY] Bad password count not incremented atomically; (bso#14611). * multi-channel socket passing may hit a race if one of the involved processes already existed; (bso#15200). * memory leak on temporary of struct imessaging_post_state and struct tevent_immediate on struct imessaging_context (in rpcd_spoolss and maybe others); (bso#15201). * Since popt1.19 various use after free errors using result of poptGetArg are now exposed; (bso#15205); (boo#1204279). * Remove special case for O_CREAT in SMB_VFS_OPENAT from vfs_glusterfs; (bso#15192). * GETPWSID in memory cache grows indefinetly with each NTLM auth; (bso#15169). * CVE-2021-20251 [SECURITY] Bad password count not incremented atomically; (bso#14611). - Install a systemd drop-in file for named service to allow read/write access to the DLZ directory; (bsc#1201689); - Fix use after free errors resulting from using return of poptGetArg exposed since popt-1.19; (boo#1204279); (bso#15205). - s3: smbd: Fix memory leak in smbd_server_connection_terminate_done(); (bso#15174). - Disable SMB1 for tumbleweed builds. - Update to 4.17.0 * acl_xattr VFS module may unintentionally use filesystem permissions instead of ACL from xattr; (bso#15126). * Missing SMB2-GETINFO access checks from MS-SMB2 3.3.5.20.1; (bso#15153). * assert failed: !is_named_stream(smb_fname)") at ../../lib/util/fault.c:197; (bso#15161). * acl_xattr VFS module may unintentionally use filesystem permissions instead of ACL from xattr; (bso#15126). * assert failed: !is_named_stream(smb_fname)") at ../../lib/util/fault.c:197; (bso#15161). * Cross-node multi-channel reconnects result in SMB2 Negotiate returning NT_STATUS_NOT_SUPPORTED; (bso#15159). * winbind at info level debug can coredump when processing wb_lookupusergroups; (bso#15160). * Make use of glfs_*at() API calls in vfs_glusterfs; (bso#15157). * Possible use after free of connection_struct when iterating smbd_server_connection->connections; (bso#15128). * `net usershare add` fails with flag works with --long but fails with -l; (bso#15145). * acl_xattr VFS module may unintentionally use filesystem permissions instead of ACL from xattr; (bso#15126). * Performance regression on contended path based operations; (bso#15125). * Missing READ_LEASE break could cause data corruption; (bso#15148). * libsamba-errors uses a wrong version number; (bso#15141). * SMB1 negotiation can fail to handle connection errors; (bso#15152). * New filename parser doesn't check veto files smb.conf parameter; (bso#15143). * 4.17.rc1 still uses symlink-race prone unix_convert(); (bso#15144). * Backport fileserver related changed to 4.17.0rc2; (bso#15146). * Manpage for smbstatus json is missing; (bso#15147). * Backport fileserver related changed to 4.17.0rc2; (bso#15146). * Performance regression on contended path based operations; (bso#15125). * Backport fileserver related changed to 4.17.0rc2; (bso#15146). * Fix issues found by coverity in smbstatus json code; (bso#15140). * Backport fileserver related changed to 4.17.0rc2; (bso#15146). - Migration to /usr/etc: Saving user changed configuration files in /etc and restoring them while an RPM update. - Update to 4.16.4 * CVE-2022-2031: Samba AD users can bypass certain restrictions associated with changing passwords; (bsc#1201495); (bso#15047); * CVE-2022-32744: Samba AD users can forge password change requests for any user; (bsc#1201493); (bso#15074); * CVE-2022-32745: Samba AD users can crash the server process with an LDAP add or modify request; (bsc#1201492); (bso#15008); * CVE-2022-32746: Samba AD users can induce a use-after-free in the server process with an LDAP add or modify request; (bsc#1201490); (bso#15009); * CVE-2022-32742: Server memory information leak via SMB1; (bsc#1201496); (bso#15085); - Update to 4.16.3 * Using vfs_streams_xattr and deleting a file causes a panic; (bso#15099); * Add support for bind 9.18; (bso#14986); * logging dsdb audit to specific files does not work; (bso#15076); * Problem when winbind renews Kerberos; (bso#14979); (bsc#1196224); * Samba with new lorikeet-heimdal fails to build on gcc 12.1 in developer mode; (bso#15095); * Crash in streams_xattr because fsp->base_fsp->fsp_name is NULL; (bso#15105); * Crash in rpcd_classic - NULL pointer deference in mangle_is_mangled(); (bso#15118); * smbclient commands del & deltree fail with NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100); (bsc#1200556); * Fix check for chown when processing NFSv4 ACL; (bso#15120); * The pcap background queue process should not be stopped; (bso#15082); * testparm: Fix typo in idmap rangesize check; (bso#15097); * net ads info returns LDAP server and LDAP server name as null; (bso#15106); * ldconfig: /lib64/libsmbconf.so.0 is not a symbolic link; (bso#15108); * CTDB child process logging does not work as expected; (bso#15090); - Update spec file to fix the optional Heimdal DC build - Fix external trusts with MIT Kerberos 1.20 - Add missing samba-client requirement to samba-winbind package; (bsc#1198255); - Move pdb backends from package samba-libs to package samba-client-libs and remove samba-libs requirement from samba-winbind; (bsc#1200964); (bsc#1198255); - Add sysuser-shadow requirement for packages using systemd-sysusers - Use the canonical realm name to refresh the Kerberos tickets; (bsc#1196224); (bso#14979); - Moved logrotate files from user specific directory /etc/logrotate.d to vendor specific directory /usr/etc/logrotate.d. - Update to 4.16.2 * Use pathref fd instead of io fd in vfs_default_durable_cookie; (bso#15042); * vfs_gpfs with vfs_shadowcopy2 fail to restore file if original file had been deleted; (bso#15069); * Reintroduce netgroups support; (bso#15087); * net ads info shows LDAP Server: 0.0.0.0 depending on contacted server; (bso#14674); * Update from 4.15 to 4.16 breaks discovery of [homes] on standalone server from Win and IOS; (bso#15062); * waf produces incorrect names for python extensions with Python 3.11; (bso#15071); * smbclient -E doesn't work as advertised; (bso#15075); * The samba background daemon doesn't refresh the printcap cache on startup; (bso#15081); * Out-by-4 error in smbd read reply max_send clamp; (bso#14443); - Fix samba4.blackbox.net_ads_dns_async test with bind9 >= 9.17.7 - Support building with MIT Kerberos 1.20 - Bronze bit and S4U support with MIT Kerberos 1.20 for Samba AD DC; (CVE-2020-17049); - Resource Based Constrained Delegation (RBCD) for Samba AD DC - Support building with gcc 12.1 - Use requires_eq macro to require the libldb2 version available at samba-dsdb-modules build time; (bsc#1199362); - Update to 4.16.1 * Share and server swapped in smbget password prompt; (bso#14831); * Durable handles won't reconnect if the leased file is written to; (bso#15022); * rmdir silently fails if directory contains unreadable files and hide unreadable is yes; (bso#15023); * SMB2_CLOSE_FLAGS_FULL_INFORMATION fails to return information on renamed file handle; (bso#15038); * Need to describe --builtin-libraries= better (compare with - -bundled-libraries); (bso#8731); * vfs_shadow_copy2 breaks "smbd async dosmode" sync fallback; (bso#14957); * shadow_copy2 fails listing snapshotted dirs with shadow:fixinodes; (bso#15035); * PAM Kerberos authentication incorrectly fails with a clock skew error; (bso#15046); * Username map - samba erroneously applies unix group memberships to user account entries; (bso#15041); * KVNO off by 100000; (bso#14951); * Uninitialized litemask in variable in vfs_gpfs module; (bso#15027); * vfs_gpfs recalls=no option prevents listing files; (bso#15055); * smbd doesn't handle UPNs for looking up names; (bso#15054); - Update update-apparmor-samba-profile script, replace non-printable delimiter with more human readable separator as sed can accept separators that can appear in the input data. - Fix update-apparmor-samba-profile script, sed doesn't like multibyte separators; (bsc#1198309). - Update to 4.16.0 * New samba-dcerpcd binary to provide DCERPC in the member server setup * Certificate Auto Enrollment * Ability to add ports to dns forwarder addresses in internal DNS backend * No longer using Linux mandatory locks for sharemodes * SMB1 protocol has been deprecated, particularly older dialects * SMB1 protocol SMBCopy command removed * SMB1 server-side wildcard expansion removed - Add python3-dnspython to samba-ad-dc recommens; (bsc#1187101); - Use systemd-sysusers to create system users; (bsc#1182847);- Install a systemd drop-in file for named service to allow read/write access to the DLZ directory; (bsc#1201689);- Update to 4.15.12 * CVE-2022-42898: samba: heimdal: Samba buffer overflow vulnerabilities on 32-bit systems; (bso#15203); (bsc#1205126). - Update to 4.15.11 * Allow rebuild of Centos 8 images after move to vault for Samba 4.15; (bso#15193). * CVE-2022-3437: samba: Buffer overflow in Heimdal unwrap_des3(); (bso#15134); (bsc#1204254)- Update to 4.15.10 * Possible use after free of connection_struct when iterating smbd_server_connection->connections; (bso#15128); (bsc#1200102). * smbXsrv_connection_shutdown_send result leaked; (bso#15174). * Spotlight RPC service returns wrong response when Spotlight is disabled on a share; (bso#15086). * acl_xattr VFS module may unintentionally use filesystem permissions instead of ACL from xattr; (bso#15126). * Missing SMB2-GETINFO access checks from MS-SMB2 3.3.5.20.1; (bso#15153). * assert failed: !is_named_stream(smb_fname)") at ../../lib/util/fault.c:197; (bso#15161). * Missing READ_LEASE break could cause data corruption; (bso#15148). * rpcclient can crash using setuserinfo(2); (bso#15124). * Samba fails to build with glibc 2.36 caused by including in libreplace; (bso#15132). * SMB1 negotiation can fail to handle connection errors; (bso#15152). * samba-tool domain join segfault when joining a samba ad domain; (bso#15078). - Update to 4.15.9 * CVE-2022-32742:SMB1 code does not correct verify SMB1write, SMB1write_and_close, SMB1write_and_unlock lengths; (bso#15085); (bsc#1201496). * CVE-2022-32746: samba: Use-after-free occurring in database audit logging; (bso#15009); (bso#15096); (bsc#1201490). * CVE-2022-2031: samba, ldb: AD users can bypass certain restrictions associated with changing passwords; (bso#15047); (bsc#1201495); * CVE-2022-32745: samba: ldb: AD users can crash the server process with an LDAP add or modify request; (bso#15008); (bso#15096); (bsc#1201492). * CVE-2022-2031: samba, ldb: AD users can bypass certain restrictions associated with changing passwords; (bso#15047); (bsc#1201495); * CVE-2022-32744: samba, ldb: AD users can forge password change requests for any user; (bso#15074); (bso#15047); (bsc#1201493).- CVE-2022-1615: Do not ignore errors in random number generation; (bso#15103); (bsc#1202976); - CVE-2022-32743: Implement validated dnsHostName write rights; (bso#14833); (bsc#1202803);- Fix Use after free when iterating smbd_server_connection->connections after tree disconnect failure; (bso#15128); (bsc#1200102).- CVE-2022-32746: samba: Use-after-free occurring in database audit logging; (bso#15009); (bso#15096); (bsc#1201490). - CVE-2022-32745: samba: ldb: AD users can crash the server process with an LDAP add or modify request; (bso#15008); (bso#15096); (bsc#1201492). - CVE-2022-2031: samba, ldb: AD users can bypass certain restrictions associated with changing passwords; (bso#15047); (bsc#1201495); - CVE-2022-32742:SMB1 code does not correct verify SMB1write, SMB1write_and_close, SMB1write_and_unlock lengths; (bso#15085); (bsc#1201496). - CVE-2022-32744: samba, ldb: AD users can forge password change requests for any user; (bso#15074); (bso#15047); (bsc#1201493).- Update to 4.15.8 * Use pathref fd instead of io fd in vfs_default_durable_cookie; (bso#15042); * Setting fruit:resource = stream in vfs_fruit causes a panic; (bso#15099); * Add support for bind 9.18; (bso#14986); * logging dsdb audit to specific files does not work; (bso#15076); * vfs_gpfs with vfs_shadowcopy2 fail to restore file if original file had been deleted; (bso#15069); * netgroups support removed; (bso#15087); (bsc#1199247); * net ads info shows LDAP Server: 0.0.0.0 depending on contacted server; (bso#14674); (bsc#1199734); * waf produces incorrect names for python extensions with Python 3.11; (bso#15071); * smbclient commands del & deltree fail with NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100); (bsc#1200556); * vfs_gpfs recalls=no option prevents listing files; (bso#15055); * waf produces incorrect names for python extensions with Python 3.11; (bso#15071); * Compile error in source3/utils/regedit_hexedit.c; (bso#15091); * ldconfig: /lib64/libsmbconf.so.0 is not a symbolic link; (bso#15108); * smbd doesn't handle UPNs for looking up names; (bso#15054); * Out-by-4 error in smbd read reply max_send clamp; (bso#14443); - Move pdb backends from package samba-libs to package samba-client-libs and remove samba-libs requirement from samba-winbind; (bsc#1200964); (bsc#1198255); - Use the canonical realm name to refresh the Kerberos tickets; (bsc#1196224); (bso#14979);- Fix smbclient commands del & deltree failing with NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100); (bsc#1200556).- Revert NIS support removal; (bsc#1199247);- Use requires_eq macro to require the libldb2 version available at samba-dsdb-modules build time; (bsc#1199362);- Add missing samba-client requirement to samba-winbind package; (bsc#1198255);- Update to 4.15.7 * Share and server swapped in smbget password prompt; (bso#14831); * Durable handles won't reconnect if the leased file is written to; (bso#15022); * rmdir silently fails if directory contains unreadable files and hide unreadable is yes; (bso#15023); * SMB2_CLOSE_FLAGS_FULL_INFORMATION fails to return information on renamed file handle; (bso#15038); * vfs_shadow_copy2 breaks "smbd async dosmode" sync fallback; (bso#14957); * shadow_copy2 fails listing snapshotted dirs with shadow:fixinodes; (bso#15035); * PAM Kerberos authentication incorrectly fails with a clock skew error; (bso#15046); * username map - samba erroneously applies unix group memberships to user account entries; (bso#15041); * NT_STATUS_ACCESS_DENIED translates into EPERM instead of EACCES in SMBC_server_internal; (bso#14983); * Simple bind doesn't work against an RODC (with non-preloaded users); (bso#13879); * Crash of winbind on RODC; (bso#14641); * uncached logon on RODC always fails once; (bso#14865); * KVNO off by 100000; (bso#14951); * LDAP simple binds should honour "old password allowed period"; (bso#15001); * wbinfo -a doesn't work reliable with upn names; (bso#15003); * Simple bind doesn't work against an RODC (with non-preloaded users); (bso#13879); * Uninitialized litemask in variable in vfs_gpfs module; (bso#15027); * Regression: create krb5 conf = yes doesn't work with a single KDC; (bso#15016);- Add provides to samba-client-libs package to fix upgrades from previous versions; (bsc#1197995);- Add missing samba-libs requirement to samba-winbind package; (bsc#1198255);- Update to 4.15.6 * Renaming file on DFS root fails with NT_STATUS_OBJECT_PATH_NOT_FOUND; (bso#14169); * Samba does not response STATUS_INVALID_PARAMETER when opening 2 objects with same lease key; (bso#14737); * NT error code is not set when overwriting a file during rename in libsmbclient; (bso#14938); * Fix ldap simple bind with TLS auditing; (bso#14996); * net ads info shows LDAP Server: 0.0.0.0 depending on contacted server; (bso#14674); * Problem when winbind renews Kerberos; (bso#14979); (bsc#1196224); * pam_winbind will not allow gdm login if password about to expire; (bso#8691); * virusfilter_vfs_openat: Not scanned: Directory or special file; (bso#14971); * DFS fix for AIX broken; (bso#13631); * Solaris and AIX acl modules: wrong function arguments; (bso#14974); * Function aixacl_sys_acl_get_file not declared / coredump; (bso#7239); * Regression: Samba 4.15.2 on macOS segfaults intermittently during strcpy in tdbsam_getsampwnam; (bso#14900); * Fix a use-after-free in SMB1 server; (bso#14989); * smb2_signing_decrypt_pdu() may not decrypt with gnutls_aead_cipher_decrypt() from gnutls before 3.5.2; (bso#14968); * Changing the machine password against an RODC likely destroys the domain join; (bso#14984); * authsam_make_user_info_dc() steals memory from its struct ldb_message *msg argument; (bso#14993); * Use Heimdal 8.0 (pre) rather than an earlier snapshot; (bso#14995); * Samba autorid fails to map AD users if id rangesize fits in the id range only once; (bso#14967);- Fix mismatched version of libldb2; (bsc#1196788). - Drop obsolete SuSEfirewall2 service files.- Drop obsolete Samba fsrvp v0->v1 state upgrade functionality; (bsc#1080338).- Fix ntlm authentications with "winbind use default domain = yes"; (bso#13126); (bsc#1173429); (bsc#1196308).- Fix samba-ad-dc status warning notification message by disabling systemd notifications in bgqd; (bsc#1195896); (bso#14947).- libldb version mismatch in Samba dsdb component; (bsc#1118508);- Update to 4.15.5 * CVE-2021-44141: UNIX extensions in SMB1 disclose whether the outside target of a symlink exists; (bso#14911); (bsc#1193690). * CVE-2021-44142: Out-of-Bound Read/Write on Samba vfs_fruit module; (bso#14914); (bsc#1194859). * CVE-2022-0336: Re-adding an SPN skips subsequent SPN conflict checks; bso#14950); (bsc#1195048).- CVE-2021-44141: Information leak via symlinks of existance of files or directories outside of the exported share; (bso#14911); (bsc#1193690); - CVE-2021-44142: Out-of-bounds heap read/write vulnerability in VFS module vfs_fruit allows code execution; (bso#14914); (bsc#1194859); - CVE-2022-0336: Samba AD users with permission to write to an account can impersonate arbitrary services; (bso#14950); (bsc#1195048);- Update to 4.15.4 * Duplicate SMB file_ids leading to Windows client cache poisoning; (bso#14928); * Failed to parse NTLMv2_RESPONSE length 95 - Buffer Size Error - NT_STATUS_BUFFER_TOO_SMALL; (bso#14932); * kill_tcp_connections does not work; (bso#14934); * Can't connect to Windows shares not requiring authentication using KDE/Gnome; (bso#14935); * smbclient -L doesn't set "client max protocol" to NT1 before calling the "Reconnecting with SMB1 for workgroup listing" path; (bso#14939); * Cross device copy of the crossrename module always fails; (bso#14940); * symlinkat function from VFS cap module always fails with an error; (bso#14941); * Fix possible fsp pointer deference; (bso#14942); * Missing pop_sec_ctx() in error path inside close_directory(); (bso#14944); * "smbd --build-options" no longer works without an smb.conf file; (bso#14945);- Use pkgconfig(krb5) as dependency for the -devel package: allow OBS to pick the right flavor of krb5-devel (full vs mini). - Do not require the 'krb5' symbol by samba-client-libs: this package has an automatic dependency due to linkage on libgssapi_krb5.so.2. Automatic deps are always better. - Do not require the 'krb5' symbol from samba-libs: samba-libs requires samba-client-libs, which in turn requires krb5 libraries. Samba-libs itself has no need for krb5 (but get it indirectly anyway).- Reorganize libs packages. Split samba-libs into samba-client-libs, samba-libs, samba-winbind-libs and samba-ad-dc-libs, merging samba public libraries depending on internal samba libraries into these packages as there were dependency problems everytime one of these public libraries changed its version (bsc#1192684). The devel packages are merged into samba-devel. - Rename package samba-core-devel to samba-devel - Add python-rpm-macros to build requirements - Update the symlink create by samba-dsdb-modules to private samba ldb modules following libldb2 changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba- Update to 4.15.3 * Recursive directory delete with veto files is broken in 4.15.0; (bso#14878); * A directory containing dangling symlinks cannot be deleted by SMB2 alone when they are the only entry in the directory; (bso#14879); * SIGSEGV in rmdir_internals/synthetic_pathref - dirfsp is used uninitialized in rmdir_internals(); (bso#14892); * MaxQueryDuration not honoured in Samba AD DC LDAP; (bso#14694); * The CVE-2020-25717 username map [script] advice has undesired side effects for the local nt token; (bso#14901); (bsc#1192849); * User with multiple spaces (eg FredNurk) become un-deletable; (bso#14902); * Avoid storing NTTIME_THAW (-2) as value on disk; (bso#14127); * smbXsrv_client_global record validation leads to crash if existing record points at non-existing process; (bso#14882); * Crash in vfs_fruit asking for fsp_get_io_fd() for an XATTR call; (bso#14890); * Samba process doesn't log to logfile; (bso#14897); * set_ea_dos_attribute() fallback calling get_file_handle_for_metadata() triggers locking.tdb assert; (bso#14907); * Kerberos authentication on standalone server in MIT realm broken; (bso#14922); * Segmentation fault when joining the domain; (bso#14923); * Support for ROLE_IPA_DC is incomplete; (bso#14903); * rpcclient cannot connect to ncacn_ip_tcp services anymore; (bso#14767); * winexe crashes since 4.15.0 after popt parsing; (bso#14893); * net ads status -P broken in a clustered environment; (bso#14908); * Memory leak if ioctl(FSCTL_VALIDATE_NEGOTIATE_INFO) fails before smbd_smb2_ioctl_send; (bso#14788); * winbindd doesn't start when "allow trusted domains" is off; (bso#14899); * smbclient login without password using '-N' fails with NT_STATUS_INVALID_PARAMETER on Samba AD DC; (bso#14883); * A schannel client incorrectly detects a downgrade connecting to an AES only server; (bso#14912); * Possible null pointer dereference in winbind; (bso#14921); * Fix -k legacy option for client tools like smbclient, rpcclient, net, etc.; (bso#14846); * Add Debian 11 CI bootstrap support; (bso#14872); * Crash in recycle_unlink_internal(); (bso#14888);- Fix dependency problem upgrading from libndr0 to libndr2 and from libsamba-credentials0 to libsamba-credentials1; (bsc#1192684);- Fix regression introduced by CVE-2020-25717 patches, winbindd does not start when 'allow trusted domains' is off; (bso#14899); - Update to 4.15.2 * CVE-2016-2124: SMB1 client connections can be downgraded to plaintext authentication; (bso#12444); (bsc#1014440); * CVE-2020-25717: A user on the domain can become root on domain members; (bso#14556); (bsc#1192284); * CVE-2020-25718: Samba AD DC did not correctly sandbox Kerberos tickets issued by an RODC; (bso#14558); (bsc#1192246); * CVE-2020-25719: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets; (bso#14561); (bsc#1192247); * CVE-2020-25721: Kerberos acceptors need easy access to stable AD identifiers (eg objectSid); (bso#14557); (bsc#1192505); * CVE-2020-25722: Samba AD DC did not do suffienct access and conformance checking of data stored; (bso#14564); (bsc#1192283); * CVE-2021-3738: Use after free in Samba AD DC RPC server; (bso#14468); (bsc#1192215); * CVE-2021-23192: Subsequent DCE/RPC fragment injection vulnerability; (bso#14875); (bsc#1192214); - Update to 4.15.1 * vfs_shadow_copy2: core dump in make_relative_path; (bso#14682); * Log clutter from filename_convert_internal; (bso#14685); * MacOSX compilation fixes; (bso#14862); * rodc_rwdc test flaps; (bso#14868); * Provide a fix for MS CVE-2020-17049 in Samba [SECURITY] 'Bronze bit' S4U2Proxy Constrained Delegation bypass in Samba with embedded Heimdal; (bso#14642); * Python ldb.msg_diff() memory handling failure; (bso#14836); * "in" operator on ldb.Message is case sensitive; (bso#14845); * Release LDB 2.4.1 for Samba 4.15.1; (bso#14848); * samldb_krbtgtnumber_available() looks for incorrect string; (bso#14854); * Fix Samba support for UF_NO_AUTH_DATA_REQUIRED; (bso#14871); * Allow special chars like "@" in samAccountName when generating the salt; (bso#14874); * Correctly ignore comments in CTDB public addresses file; (bso#14826); * Fix transit path validation; (bso#12998); * Fix that child winbindd logs to log.winbindd instead of log.wb-; (bso#14852); * SMB3 cancel requests should only include the MID together with AsyncID when AES-128-GMAC is used; (bso#14855); * Prepare to operate with MIT krb5 >= 1.20; (bso#14870); * Heimdal prefers RC4 over AES for machine accounts; (bso#14864);- Enable samba-tool without ad dc.- Adjust spec to use pam macros; (bsc#1191046).- Adjust spec for size * allow some Recommends instead Requires to be configured for cifs-utils, samba-libs-python3 & samba-gpupdate; (bsc#1182847). * remove fam, undocumented and unneeded.- Add missing build dependency on bison when building with the embedded Heimdal Kerberos- Update to 4.15.0 * Removed SMB development dialects SMB2_22, SMB2_24 and SMB3_10 * VFS layer modernized. * Add the ability to set allow/deny lists for zone transfer clients in Bind DLZ plugin * Server multi-channel support no longer experimental * Improved command line user experience, unifying the options in different commands * Winbindd no longer scans trusted domains on startup and will use enterprise principals by default. * The net utility is now able to support the offline domain join feature * New options for 'samba-tool dns zoneoptions' for aging control and to mark old records as static or dynamic * DNS tombstones are now deleted as appropriate and use a consistent timestamp format * The 'samba-tool dns update' command validates and rejects now malformed IPv4 and IPv6 addresses * The 'samba-tool domain backup' command correctly takes out locks against concurrent modification during backup when using the LMDB backend * TruACL support has been removed * NIS support has been removed- Fix 'net rpc' authentication when using the machine account; (bsc#1189017); (bso#14796);- Fix dependency problem upgrading from libndr0 to libndr1; (bsc#1189875); - Fix dependency problem upgrading from libsmbldap0 to libsmbldap2; (bsc#1189875); - Fix wrong kvno exported to keytab after net ads changetrustpw due to replication delay; (bsc#1188727); - Add Certificate Auto Enrollment Policy; (jsc#SLE-18456). - Update to 4.13.10 * s3: smbd: Ensure POSIX default ACL is mapped into returned Windows ACL for directory handles; (bso#14708); * Take a copy to make sure we don't reference free'd memory; (bso#14721); * s3: lib: Fix talloc heirarcy error in parent_smb_fname(); (bso#14722); * s3: smbd: Remove erroneous TALLOC_FREE(smb_fname_parent) in change_file_owner_to_parent() error path; (bso#14736); * samba-tool: Give better error information when the 'domain backup restore' fails with a duplicate SID; (bso#14575); * smbd: Correctly initialize close timestamp fields; (bso#14714); * Spotlight RPC service doesn't work with vfs_glusterfs; (bso#14740); * ctdb: Fix a crash in run_proc_signal_handler(); (bso#14475); * gensec_krb5: Restore ipv6 support for kpasswd; (bso#14750); * smbXsrv_{open,session,tcon}: Protect smbXsrv_{open,session,tcon}_global_traverse_fn against invalid records; (bso#14752); * samba-tool domain backup offline doesn't work against bind DLZ backend; (bso#14027); * netcmd: Use next_free_rid() function to calculate a SID for restoring a backup; (bso#14669); - Update to 4.13.9 * s3: smbd: SMB1 SMBsplwr doesn't send a reply packet on success; (bso#14696); * Add documentation for dsdb_group_audit and dsdb_group_json_audit to "log level", synchronise "log level" in smb.conf with the code; (bso#14689); * Fix smbd panic when two clients open same file; (bso#14672); * Fix memory leak in the RPC server; (bso#14675); * s3: smbd: Fix deferred renames; (bso#14679); * s3-iremotewinspool: Set the per-request memory context; (bso#14675); * rpc_server3: Fix a memleak for internal pipes; (bso#14675); * third_party: Update socket_wrapper to version 1.3.2; (bso#11899); * third_party: Update socket_wrapper to version 1.3.3; (bso#14639); * idmap_rfc2307 and idmap_nss return wrong mapping for uid/gid conflict; (bso#14663); * Fix the build on OmniOS; (bso#14288); - Update to 4.13.8 * CVE-2021-20254: Fix buffer overrun in sids_to_unixids(); (bso#14571 - Update to 4.13.7 * Release with dependency on ldb version 2.2.1.- CVE-2021-20254 Buffer overrun in sids_to_unixids(); (bnc#14571); (bsc#1184677).- Fix offline domain backup not possible using lmdb version >= 0.9.26; (bso#14676); - Require libldb >= 2.2.1; (bsc#1183572); (bsc#1183574); - Update to 4.13.6 * CVE-2020-27840: samba: Unauthenticated remote heap corruption via bad DNs; (bso#14595); (bsc#1183572). * CVE-2021-20277: samba: out of bounds read in ldb_handler_fold; (bso#14655); (bsc#1183574). - Update to 4.13.5 * s3:modules:vfs_virusfilter: Recent talloc changes cause infinite start-up failure; (bso#14634); * s3: libsmb: Add missing cli_tdis() in error path if encryption setup failed on temp proxy connection; (bso#13992); * smbd: In conn_force_tdis_done() when forcing a connection closed force a full reload of services; (bso#14604); * dbcheck: Check Deleted Objects and reduce noise in reports about expired tombstones (bso#14593); * s3: Fix fcntl waf configure check; (bso#14503); * s3/auth: Implement "winbind:ignore domains"; (bso#14602); * smbd: Use fsp->conn->session_info for the initial delete-on-close token; (bso#14617); * s3: VFS: nfs4_acls. Add missing TALLOC_FREE(frame) in error path; (bso#14648); * classicupgrade: Treat old never expires value right; (bso#14624); * g_lock: Fix uninitalized variable reads; (bso#14636); * s3:pysmbd: Fix fd leak in py_smbd_create_file(); (bso#13898); * lib:util: Avoid free'ing our own pointer; (bso#14625); * HEIMDAL: krb5_storage_free(NULL) should work; (bso#12505);- Spec file fixes around systemd and requires; (bsc#1182830); - Align systemd service unit files with upstream provided ones.- Update to 4.13.4 * Work around special SMB2 IOCTL response behavior of NetApp Ontap 7.3.7; (bso#14607); * Temporary DFS share setup doesn't set case parameters in the same way as a regular share definition does; (bso#14612); * lib: Avoid declaring zero-length VLAs in various messaging functions; (bso#14605); * Do not create an empty DB when accessing a sam.ldb; (bso#14579); * vfs_fruit may close wrong backend fd; (bso#14596); * Temporary DFS share setup doesn't set case parameters in the same way as a regular share definition does; (bso#14612); * vfs_virusfilter: Allocate separate memory for config char*; (bso#14606); * vfs_fruit may close wrong backend fd; (bso#14596); * Work around special SMB2 IOCTL response behavior of NetApp Ontap 7.3.7; (bso#14607); * The cache directory for the user gencache should be created recursively; (bso#14601); * Be more flexible with repository names in CentOS 8 test environments; (bso#14594);- Uninstalling samba-client: Failed to disable unit, cifs.service does not exists; (bsc#1180388);- Update to 4.13.3 + libcli: smb2: Never print length if smb2_signing_key_valid() fails for crypto blob; (bso#14210); + s3: modules: gluster. Fix the error I made in preventing talloc leaks from a function; (bso#14486); + s3: smbd: Don't overwrite contents of fsp->aio_requests[0] with NULL via TALLOC_FREE(); (bso#14515); + s3: spoolss: Make parameters in call to user_ok_token() match all other uses; (bso#14568); + s3: smbd: Quiet log messages from usershares for an unknown share; (bso#14590); + samba process does not honor max log size; (bso#14248); + vfs_zfsacl: Add missing inherited flag on hidden "magic" everyone@ ACE; (bso#14587); + s3-libads: Pass timeout to open_socket_out in ms; (bso#13124); + s3-vfs_glusterfs: Always disable write-behind translator; (bso#14486); + smbclient: Fix recursive mget; (bso#14517); + clitar: Use do_list()'s recursion in clitar.c; (bso#14581); + manpages/vfs_glusterfs: Mention silent skipping of write-behind translator; (bso#14486); + vfs_shadow_copy2: Preserve all open flags assuming ROFS; (bso#14573); + interface: Fix if_index is not parsed correctly; (bso#14514);- Update to 4.13.2 + s3: modules: vfs_glusterfs: Fix leak of char **lines onto mem_ctx on return; (bso#14486); + RN: vfs_zfsacl: Only grant DELETE_CHILD if ACL tag is special; (bso#14471); + smb.conf.5: Add clarification how configuration changes reflected by Samba; (bso#14538); + daemons: Report status to systemd even when running in foreground; (bso#14552); + DNS Resolver: Support both dnspython before and after 2.0.0; (bso#14553); + s3-vfs_glusterfs: Refuse connection when write-behind xlator is present; (bso#14486); + provision: Add support for BIND 9.16.x; (bso#14487); + ctdb-common: Avoid aliasing errors during code optimization; (bso#14537); + libndr: Avoid assigning duplicate versions to symbols; (bso#14541); + docs: Fix default value of spoolss:architecture; (bso#14522); + winbind: Fix a memleak; (bso#14388); + s4:dsdb:acl_read: Implement "List Object" mode feature; (bso#14531); + docs-xml/manpages: Add warning about write-behind translator for vfs_glusterfs; (bso#14486); + nsswitch/nsstest.c: Avoid nss function conflicts with glibc nss.h. + vfs_shadow_copy2: Avoid closing snapsdir twice; (bso#14530); + third_party: Update resolv_wrapper to version 1.1.7; (bso#14547); + examples:auth: Do not install example plugin; (bso#14550); + ctdb-recoverd: Drop unnecessary and broken code; (bso#14513); + RN: vfs_zfsacl: Only grant DELETE_CHILD if ACL tag is special; (bso#14471);- Adjust smbcacls '--propagate-inheritance' feature to align with upstream; (bsc#1178469).- Update to samba 4.13.1 + CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with easily crafted records; (bsc#1177613); (bso#14472); + CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994); (bso#14436); + CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify; (bsc#1173902); (bso#14434); - Adjust systemd tmpfiles.d configuration, use /run/samba instead of /var/run/samba; (bsc#1177355);- Fix vfs_ceph query_directory regression; (bso#14519) - Drop liburing-devel for SLE15-SP2; (bsc#1177245)- Register CTDB recovery lock holder with ceph-mgr - Add liburing-devel dependency- Update to samba 4.13.0 + Require Python 3.6 + Move wide links functionality into VFS module + Deprecate NT4-like 'classic' Samba domain controllers + Deprecate SMBv1 only protocol options + Remove deprecated "ldap ssl ads" option + Unify asynchronous DCE-RPC server; (jsc#SES-645) + Replay multichannel lease break requests; (bso#11897); (jsc#SES-655) + Drop internal byteorder.h header from util-devel package + Remove final code for the AD DC LDAP backend + Add AD DC Group Policy Scripts + Only use gnutls_aead_cipher_encryptv2() for GnuTLS > 3.6.14; (bso#14399) + Fix %U substitutions if it contains a domain name; (bso#14467) + Fix krb5.conf creation for 'net ads join'; (bso#14479) + Fix build problem if libbsd-dev is not installed; (bso#14482) + Toggle vfs_snapper using "--with-shared-modules"; (bso#14437) + Fix idmap_ad RFC4511 response handling; (bso#14465) + Fix panic in get_lease_type(); (bso#14428)- Update to samba 4.11.13 + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2 against unencrypted passwords; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Support "server require schannel:WORKSTATION$ = no" about unsecure configurations; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): s4 torture rpc: repeated bytes in client challenge; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): libcli/auth: Reject weak client challenges in netlogon_creds_server_init() "server require schannel:WORKSTATION$ = no"; (bsc#1176579); (bso#14497); - Update to samba 4.11.12 + s3: libsmb: Fix SMB2 client rename bug to a Windows server; (bso#14403); + dsdb: Allow "password hash userPassword schemes = CryptSHA256" to work on RHEL7; (bso#14424); + dbcheck: Allow a dangling forward link outside our known NCs; (bso#14450); + lib/debug: Set the correct default backend loglevel to MAX_DEBUG_LEVEL; (bso#14426); + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428); + lib/util: do not install "test_util_paths"; (bso#14370); + lib:util: Fix smbclient -l basename dir; (bso#14345); + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428); + util: Allow symlinks in directory_create_or_exist; (bso#14166); + docs: Fix documentation for require_membership_of of pam_winbind; (bso#14358); + s3:winbind:idmap_ad: Make failure to get attrnames for schema mode fatal; (bso#14425);- Add obsoletes to libsmbldap2 package to fix upgrades from previous versions; (bsc#1172810);- Fix net command unable to negotiate SMB2; (bsc#1174120);- Update to samba 4.11.11 + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ and VLV combined; (bso#14364); (bsc#1173159] + CVE-2020-10745: invalid DNS or NBT queries containing dots use several seconds of CPU each; (bso#14378); (bsc#1173160). + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP server with paged_result or VLV; (bso#14402); (bsc#1173161) + CVE-2020-14303: Endless loop from empty UDP packet sent to AD DC nbt_server; (bso#14417); (bsc#1173359). - Update to samba 4.11.10 + Fix segfault when using SMBC_opendir_ctx() routine for share folder that contains incorrect symbols in any file name; (bso#14374). + vfs_shadow_copy2 doesn't fail case looking in snapdirseverywhere mode; (bso#14350) + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr; (bso#14413). + Malicous SMB1 server can crash libsmbclient; (bso#14366) + winbindd: Fix a use-after-free when winbind clients exit; (bso#14382) + ldb: Bump version to 2.0.11, LMDB databases can grow without bounds. (bso#14330) - Update to samba 4.11.9 + nmblib: Avoid undefined behaviour in handle_name_ptrs(); (bso#14242). + 'samba-tool group' commands do not handle group names with special chars correctly; (bso#14296). + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo is not valid; (bso#14237). + Missing check for DMAPI offline status in async DOS attributes; (bso#14293). + smbd: Ignore set NTACL requests which contain S-1-5-88 NFS ACEs; (bso#14307). + vfs_recycle: Prevent flooding the log if we're called on non-existant paths; (bso#14316) + smbd mistakenly updates a file's write-time on close; (bso#14320). + RPC handles cannot be differentiated in source3 RPC server; (bso#14359). + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313). + nsswitch: Fix use-after-free causing segfault in _pam_delete_cred; (bso#14327). + Fix fruit:time machine max size on arm; (bso#13622) + CTDB recovery corner cases can cause record resurrection and node banning; (bso#14294). + ctdb: Fix a memleak; (bso#14348). + libsmb: Don't try to find posix stat info in SMBC_getatr(). + ctdb-tcp: Move free of inbound queue to TCP restart; (bso#14295); (bsc#1162680). + s3/librpc/crypto: Fix double free with unresolved credential cache; (bso#14344); (bsc#1169095) + s3:libads: Fix ads_get_upn(); (bso#14336). + CTDB recovery corner cases can cause record resurrection and node banning; (bso#14294) + Starting ctdb node that was powered off hard before results in recovery loop; (bso#14295); (bsc#1162680). + ctdb-recoverd: Avoid dereferencing NULL rec->nodemap; (bso#14324) - Update to samba 4.11.8 + CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with ASQ; (bso#14331); (bsc#1169850); + CVE-2020-10704: LDAP Denial of Service (stack overflow) in Samba AD DC; (bso#14334); (bsc#1169851); - Update to samba 4.11.7 + s3: lib: nmblib. Clean up and harden nmb packet processing; (bso#14239). + s3: VFS: full_audit. Use system session_info if called from a temporary share definition; (bso#14283) + dsdb: Correctly handle memory in objectclass_attrs; (bso#14258). + ldb: version 2.0.9, Samba 4.11 and later give incorrect results for SCOPE_ONE searches; (bso#14270) + auth: Fix CIDs 1458418 and 1458420 Null pointer dereferences; (bso#14247). + smbd: Handle EINTR from open(2) properly; (bso#14285) + winbind member (source3) fails local SAM auth with empty domain name; (bso#14247) + winbindd: Handling missing idmap in getgrgid(); (bso#14265). + lib:util: Log mkdir error on correct debug levels; (bso#14253). + wafsamba: Do not use 'rU' as the 'U' is deprecated in Python 3.9; (bso#14266). + ctdb-tcp: Make error handling for outbound connection consistent; (bso#14274). - Update to samba 4.11.6 + pygpo: Use correct method flags; (bso#14209). + vfs_ceph_snapshots: Fix root relative path handling; (bso#14216); (bsc#1141320). + Avoiding bad call flags with python 3.8, using METH_NOARGS instead of zero; (bso#14209). + source4/utils/oLschema2ldif: Include stdint.h before cmocka.h; (bso#14218). + docs-xml/winbindnssinfo: Clarify interaction with idmap_ad etc; (bso#14122). + smbd: Fix the build with clang; (bso#14251). + upgradedns: Ensure lmdb lock files linked; (bso#14199). + s3: VFS: glusterfs: Reset nlinks for symlink entries during readdir; (bso#14182). + smbc_stat() doesn't return the correct st_mode and also the uid/gid is not filled (SMBv1) file; (bso#14101). + librpc: Fix string length checking in ndr_pull_charset_to_null(); (bso#14219). + ctdb-scripts: Strip square brackets when gathering connection info; (bso#14227).- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);- Installing: samba - samba-ad-dc.service does not exist and unit not found; (bsc#1171437);- Fix samba_winbind package is installing python3-base without python3 package; (bsc#1169521);- Require libldb2 >= 2.0.10 after security release.- CVE-2020-10704: LDAP Denial of Service (stack overflow) in Samba AD DC; (bso#14334); (bsc#1169851); - CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with ASQ; (bso#14331); (bsc#1169850);- Fix smbclient crash with double free (with unresolved krb5 credential cache); (bso#14344); (bsc#1169095).- Starting ctdb node that was powered off hard before results in recovery loop; (bso#14295); (bsc#1162680).- CTDB doesn't retry outgoing connections on bind (and some other) failures; (bso#14274); (bsc#1162680).- Revert: Allow idmap_rid to have primary group other than "Domain Users"; (bsc#1087931).- Fix nmbstatus not reporting detailed information about workgroups; (bsc#1159464); - Fix querying all names registered within broadcast area; (bso#8927);- Update to samab 4.11.5 + CVE-2019-14902: Replication of ACLs down subtree on AD Directory is not automatic; (bso#12497); (bsc#1160850). + CVE-2019-19344: Fix server crash with dns zone scavenging = yes; (bso#14050); (bsc#1160852). + CVE-2019-14907: server-side crash after charset conversion failure (eg during NTLMSSP processing); (bso#14208); (bsc#1160888). - Update to samba 4.11.4 + Ensure SMB1 cli_qpathinfo2() doesn't return an inode number; (bso#14161). + Ensure we don't call cli_RNetShareEnum() on an SMB1 connection; (bso#14174). + NT_STATUS_ACCESS_DENIED becomes EINVAL when using SMB2 in SMBC_opendir_ctx; (bso#14176). + SMB2 - Ensure we use the correct session_id if encrypting an interim response; (bso#14189). + Prevent smbd crash after invalid SMB1 negprot; (bso#14205). + printing: Fix %J substition; (bso#13745). + Remove now unneeded call to cmdline_messaging_context(); (bso#13925). + Fix incomplete conversion of former parametric options; (bso#14069). + Fix sync dosmode fallback in async dosmode codepath; (bso#14070). + vfs_fruit returns capped resource fork length; (bso#14171). + libnet_join: Add SPNs for additional-dns-hostnames entries; (bso#14116). + smbd: Increase a debug level; (bso#14211). + Prevent azure ad connect from reporting discovery errors reference-value-not-ldap-conformant; (bso#14153). + krb5_plugin: Fix developer build with newer heimdal system library; (bso#14179). + replace: Only link libnsl and libsocket if required; (bso#14168); + ctdb: Incoming queue can be orphaned causing communication; breakdown; (bso#14175). + ldb: Release ldb 2.0.8. Cross-compile will not take cross-answers or cross-execute; (bso#13846). + heimdal-build: Avoid hard-coded /usr/include/heimdal in asn1_compile-generated code; (bso#13856).- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).- Update to samba 4.11.3 + CVE-2019-14861: DNSServer RPC server crash, an authenticated user can crash the DCE/RPC DNS management server by creating records with matching the zone name; (bso#14138); (bsc#1158108). + CVE-2019-14870: DelegationNotAllowed not being enforced, the DelegationNotAllowed Kerberos feature restriction was not being applied when processing protocol transition requests (S4U2Self), in the AD DC KDC; (bso#14187); (bsc#1158109).- CVE-2019-14861: DNSServer RPC server crash, an authenticated user can crash the DCE/RPC DNS management server by creating records with matching the zone name; (bso#14138); (bsc#1158108). - CVE-2019-14870: DelegationNotAllowed not being enforced, the DelegationNotAllowed Kerberos feature restriction was not being applied when processing protocol transition requests (S4U2Self), in the AD DC KDC; (bso#14187); (bsc#1158109).- Update to samba 4.11.2 + CVE-2019-10218: Client code can return filenames containing path separators; (bsc#1144902); (bso#14071). + CVE-2019-14833: Samba AD DC check password script does not receive the full password; (bso#12438). + CVE-2019-14847: User with "get changes" permission can crash AD DC LDAP server via dirsync; (bso#14040). - Fixes from 4.11.1 + Overlinking libreplace against librt and pthread against every binary or library causes issues; (bso#14140); + kpasswd fails when built with MIT Kerberos; (bso#14155); + Fix spnego fallback from kerberos to ntlmssp in smbd server; (bso#14106); + Stale file handle error when using mkstemp on a share; (bso#14137); + non-AES schannel broken; (bso#14134); + Joining Active Directory should not use SAMR to set the password; (bso#13884); + smbclient can blunder into the SMB1 specific cli_RNetShareEnum() call on an SMB2 connection; (bso#14152); + Deleted records can be resurrected during recovery; (bso#14147); + getpwnam and getpwuid need to return data for ID_TYPE_BOTH group; (bso#14141); + winbind does not list forest trusts with additional trust attributes; (bso#14130); + fault report points to outdated documentation; (bso#14139); + pam_winbind with krb5_auth or wbinfo -K doesn't work for users of trusted domains/forests; (bso#14124); + classicupgrade results in uncaught exception - a bytes-like object is required, not 'str'; (bso#14136); + pod2man is not longer required, stop checking at build time; (bso#14131); + Exit code of ctdb nodestatus should not be influenced by deleted nodes; (bso#14129); + username/password authentication doesn't work with CUPS and smbspool; (bso#14128); + smbc_readdirplus() is incompatible with smbc_telldir() and smbc_lseekdir(); (bso#14094);- CVE-2019-14847: User with "get changes" permission can crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598); - CVE-2019-10218: Client code can return filenames containing path separators; (bso#14071); (bsc#1144902);- CVE-2019-14833: samba: Accent with "check script password" Samba AD DC check password script does not receive the full password; (bso#12438); (bsc#1154289).- Update to samba 4.11.0 + For details on all items see WHATSNEW.txt in samba-doc package + Python2 runtime support removed; python 3.4 or later required + Security improvements: - SMB1 disabled by default - lanman and plaintext authentication deprecated - winbind: PAM_AUTH and NTLM_AUTH events logged - GnuTLS 3.2 required; system FIPS mode setting honored + CephFS Snapshot integration, exposed as previous file versions + ctdb changes: - onnode -o option removed - ctdbd logs when using more than 90% of a CPU thread - CTDB_MONITOR_SWAP_USAGE variable removed + AD Domain controller improvements: - Upgrade AD databse format - BIND9_FLATFILE deprecated - default process model chagned to prefork - bind9 dns operation duration logging - Default schema updated to 2012_R2; function level is unchanged - many performance improvements + Configuration webserver support removed- Fix broken username/password authentication with CUPS and smbspool; (bsc#1152143); (bso#14128).- Fix auth problems when printing via smbspool backend with kerberos; (bnc#1148539); (bso#13832).- Update to samba 4.10.8 + CVE-2019-10197: user escape from share path definition; (bso#14035); (bsc#1141267);- Fix build on newer systems by modifying samba.spec to use consistent non-relative paths for pammodules in configure line and specification of pam_winbind.so library to package.- Update to samba 4.10.7 + Unable to create or rename file/directory inside shares configured with vfs_glusterfs_fuse module; (bso#14010). + build: Allow build when '--disable-gnutls' is set; (bso#13844) + samba-tool: Add 'import samba.drs_utils' to fsmo.py; (bso#13973). + Fix 'Error 32 determining PSOs in system' message on old DB with FL upgrade; (bso#14008). + s4/libnet: Fix joining a Windows pre-2008R2 DC; (bso#14021) + join: Use a specific attribute order for the DsAddEntry nTDSDSA object; (bso#14046). + vfs_catia: Pass stat info to synthetic_smb_fname(); (bso#14015). + lookup_name: Allow own domain lookup when flags == 0; (bso#14091). + s4 librpc rpc pyrpc: Ensure tevent_context deleted last; (bso#13932). + DEBUGC and DEBUGADDC doesn't print into a class specific log file; (bso#13915). + Request to keep deprecated option "server schannel", VMWare Quickprep requires "auto"; (bso#13949). + dbcheck: Fallback to the default tombstoneLifetime of 180 days; (bso#13967). + dnsProperty fails to decode values from older Windows versions; (bso#13969). + samba-tool: Use only one LDAP modify for dns partition fsmo role transfer; (bso#13973). + third_party: Update waf to version 2.0.17; (bso#13960). + netcmd: Allow 'drs replicate --local' to create partitions; (bso#14051). + ctdb-config: Depend on /etc/ctdb/nodes file; (bso#14017).- CVE-2019-10197: user escape from share path definition; (bso#14035); (bsc#1141267).- Prepare for use future use of kernel keyrings, modify /etc/pam.d/samba to include pam_keyinit.so; (bsc#1144059).- Update samba-winbind script to work with systemd; (bsc#1132739); - Drop samba dhcpcd hook scripts - Update to samba 4.10.6 + s3: winbind: Fix crash when invoking winbind idmap scripts; (bso#13956). + smbd does not correctly parse arguments passed to dfree and quota scripts; (bso#13964). + samba-tool dns: use bytes for inet_ntop; (bso#13965). + samba-tool domain provision: Fix --interactive module in python3; (bso#13828). + ldb_kv: Skip @ records early in a search full scan; (bso#13893). + docs: Improve documentation of "lanman auth" and "ntlm auth" connection; (bso#13981). + python/ntacls: Use correct "state directory" smb.conf option instead of "state dir"; (bso#14002). + registry: Add a missing include; (bso#13840). + Fix SMB guest authentication; (bso#13944). + AppleDouble conversion breaks Resourceforks; (bso#13958). + vfs_fruit makes direct use of syscalls like mmap() and pread(); (bso#13968). + s3:mdssvc: Fix flex compilation error; (bso#13987). + s3/vfs_glusterfs[_fuse]: Avoid using NAME_MAX directly; (bso#13872). + dsdb:samdb: schemainfo update with relax control; (bso#13799). + s3:util: Move static file_pload() function to lib/util; (bso#13964). + smbd: Fix a panic; (bso#13957). + ldap server: Generate correct referral schemes; (bso#12478). + s4 dsdb/repl_meta_data: fix use after free in dsdb_audit_add_ldb_value; (bso#13941). + s4 dsdb: Fix use after free in samldb_rename_search_base_callback; (bso#13942). + dsdb/repl: we need to replicate the whole schema before we can apply it; (bso#12204). + ldb: Release ldb 1.5.5; (bso#12478). + Schema replication fails if link crosses chunk boundary backwards; (bso#13713). + 'samba-tool domain schemaupgrade' uses relax control and skips the schemaInfo update provision; (bso#13799). + dsdb_audit: avoid printing "... remote host [Unknown] SID [(NULL SID)] ..."; (bso#13916). + python/ntacls: We only need security.SEC_STD_READ_CONTROL in order to get the ACL; (bso#13917). + s3:loadparm: Ensure to truncate FS Volume Label at multibyte boundary; (bso#13947). + Using Kerberos credentials to print using spoolss doesn't work; (bso#13939). + wafsamba: Use native waf timer; (bso#13998). + ctdb-scripts: Fix tcp_tw_recycle existence check; (bso#13984).- Update to samba-4.10.5 (including updates for 4.10.4, 4.10.3) + CVE-2019-12435 rpc/dns: Avoid NULL deference if zone not found in DnssrvOperation2; (bso#13922); (bsc#1137815). + CVE-2019-12436 dsdb/paged_results: Ignore successful results without messages; (bso#13951); (bsc#1137816). - Update to samba-4.10.4 + s3: SMB1: Don't allow recvfile on stream fsp's; (bso#13938). + py/provision: Fix for Python 2.6; (bso#13882). + netcmd: Fix 'passwordsettings --max-pwd-age' command; (bso#13873). + s3-libnet_join: 'net ads join' to child domain fails when using "-U admin@forestroot"; (bso#13861). + vfs_ceph: Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245). + vfs_ceph: Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697). + ctdb-common: Avoid race between fd and signal events; (bso#13895). + ctdb-common: Fix memory leak in run_proc; (bso#13943). + lib: Initialize getline() arguments; (bso#13892). + winbind: Fix overlapping id ranges; (bco#13903). + lib util debug: Increase format buffer to 4KiB; (bso#13902). + nsswitch pam_winbind: Fix Asan use after free; (bso#13927). + s4 lib socket: Ensure address string owned by parent struct; (bso#13929). + s3 rpc_client: Fix Asan stack use after scope; (bso#13936). + s3:smbd: Handle IO_REPARSE_TAG_DFS in SMB_FIND_FILE_FULL_DIRECTORY_INFO; (bso#10097). + smb2_tcon: Avoid STATUS_PENDING completely on tdis; (bso#10344). + smb2_sesssetup: avoid STATUS_PENDING responses for session setup; (bso#12845). + smb2_tcon: Avoid STATUS_PENDING completely on tdis; (bso#13698). + smb2_sesssetup: avoid STATUS_PENDING responses for session setup; (bso#13796). + dbcheck: Fix the err_empty_attribute() check; (bso#13843). + vfs_snapper: Drop unneeded fstat handler; (bso#13858). + vfs_default: Fix vfswrap_offload_write_send() NT_STATUS_INVALID_VIEW_SIZE check; (bso#13862). + smb2_server: Grant all 8192 credits to clients; (bso#13863). + smbd: Implement SMB_FILE_NORMALIZED_NAME_INFORMATION handling; (bso#13919). + s3/vfs_glusterfs: Dynamically determine NAME_MAX; (bso#13872). + s3: modules: ceph: Use current working directory instead of share path; (bso#13918); (bsc#1134452). + winbind: Use domain name from lsa query for sid_to_name cache entry; (bso#13831). + memcache: Increase size of default memcache to 512k; (bso#13865). + docs: Update smbclient manpage for "--max-protocol"; (bso#13857). + s3:utils: If share is NULL in smbcacls, don't print it; (bso#13937). + s3:smbspool: Fix regression printing with Kerberos credentials; (bso#13939). + ctdb-scripts: CTDB restarts failed NFS RPC services by hand, which is incompatible with systemd; (bso#13860). + ctdb-daemon: Revert "We can not assume that just because we could complete a TCP handshake"; (bso#13888). + ctdb-daemon: Never use 0 as a client ID; (bso#13930). + ctdb-common: Fix memory leak; (bso#13943). + s3:debug: Enable logging for early startup failures; (bso#13904) - Update to samba-4.10.3 + CVE-2018-16860: Heimdal KDC: Reject PA-S4U2Self with unkeyed checksum; (bso#13685); (bsc#1134024).- CVE-2019-12435: zone operations can crash rpc server; (bso#13922); (bsc#1137815).- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697). - Add ceph_snapshots VFS module; (jsc#SES-183).- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).- Update to samba-4.10.2: + CVE-2019-3870 (World writable files in Samba AD DC private/ dir); (bso#13834). + CVE-2019-3880 (Save registry file outside share as unprivileged user); (bso#13851). + py/kcc_utils: py2.6 compatibility; (bso#13837). + libcli: permit larger values of DataLength in SMB2_ENCRYPTION_CAPABILITIES of negotiate response; (bso#13869). + regfio: Improve handling of malformed registry hive files; (bso#13840). + ctdb-version: Simplify version string usage; (bso#13789). + lib: Make fd_load work for non-regular files; (bso#13859). + dbcheck: in the middle of the tombstone garbage collection causes replication failures, dbcheck: add --selftest-check-expired-tombstones cmdline option; (bso#13816). + ndr_spoolss_buf: Fix out of scope use of stack variable in NDR_SPOOLSS_PUSH_ENUM_OUT(); (bso#13818). + s4/messaging: Fix undefined reference in linking libMESSAGING-samba4.so; (bso#13854). + acl_read: Fix regression for empty lists; (bso#13836). + s4:dlz make b9_has_soa check dc=@ node; (bso#13841). + s3:client: Fix printing via smbspool backend with kerberos auth; (bso#13832). + s4:librpc: Fix installation of Samba; (bso#13847). + s3:lib: Fix the debug message for adding cache entries; (bso#13848). + s3:utils: Add 'smbstatus -L --resolve-uids' to show username; (bso#13793). + s3:lib: Fix the debug message for adding cache entries; (bso#13848). + s3:waf: Fix the detection of makdev() macro on Linux; (bso#13853). * ctdb-build: Drop creation of .distversion in tarball; (bso#13789). * ctdb-packaging: Test package requires tcpdump, ctdb package should not own system library directory; (bso#13838). - Update to samba-4.10.1: + py/kcc_utils: py2.6 compatibility; (bso#13837); + libcli: permit larger values of DataLength in SMB2_ENCRYPTION_CAPABILITIES of negotiate response; (bso#13869); + regfio: Improve handling of malformed registry hive files; (bso#13840); + ctdb-version: Simplify version string usage; (bso#13789); + lib: Make fd_load work for non-regular files; (bso#13859); + dbcheck in the middle of the tombstone garbage collection causes replication failures, dbcheck: add --selftest-check-expired-tombstones cmdline option; (bso#13816); + ndr_spoolss_buf: Fix out of scope use of stack variable in NDR_SPOOLSS_PUSH_ENUM_OUT(); (bso#13818); + s4/messaging: Fix undefined reference in linking libMESSAGING-samba4.so; (bso#13854); + acl_read: Fix regression for empty lists; (bso#13836); + s4:dlz make b9_has_soa check dc=@ node; (bso#13841); + s3:client: Fix printing via smbspool backend with kerberos auth; (bso#13832); + s4:librpc: Fix installation of Samba; (bso#13847); + s3:lib: Fix the debug message for adding cache entries; (bso#13848); + s3:utils: Add 'smbstatus -L --resolve-uids' to show username; (bso#13793); + s3:lib: Fix the debug message for adding cache entries; (bso#13848); + s3:waf: Fix the detection of makdev() macro on Linux; (bso#13853); + ctdb-build: Drop creation of .distversion in tarball; (bso#13789); + ctdb-packaging: Test package requires tcpdump, ctdb package should not own system library directory; (bso#13838); - Update to samba-4.10.0: + s4-server: Open and close a transaction on sam.ldb at startup; (bso#13760); + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812); + s4/scripting/bin: Open unicode files with utf8 encoding and write + unicode string. + sambaundoguididx: Use the right escaped oder unescaped sam ldb files; (bso#13759); + Fix idmap cache pollution with S-1-22- IDs on winbind hickup; (bso#13813); + passdb: Update ABI to 0.27.2. + lib/winbind_util: Add winbind_xid_to_sid for --without-winbind; (bso#13813); + lib:util: Move debug message for mkdir failing to log level 1; (bso#13823);- MacOS credit accounting breaks with async SESSION SETUP; (bsc#1125601); (bso#13796). - Mac OS X SMB2 implmenetation sees Input/output error or Resource temporarily unavailable and drops connection; (bso#13698)- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).- CVE-2019-3880: Save registry file outside share as unprivileged user; (bso#13851); (bsc#1131060 ).- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0); (bso#13834); (bsc#1130703);- Update to samba-4.9.5 + audit_logging: Remove debug log header and JSON Authentication: prefix; (bso#13714); + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760); + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso# CID: 1433607; (bso#11495); + smbd: uid: Don't crash if 'force group' is added to an existing share connection; (bso#13690); + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility code; (bso#13770); + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803); + s3:utils/smbget fix recursive download with empty source directories; (bso#13199); + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716); + s3:libsmb: cli_smb2_list() can sometimes fail initially on a connection; (bso#13736); + join: Throw CommandError instead of Exception for simple errors; (bso#13747); + ldb: Avoid inefficient one-level searches; (bso#13762); + s3: libsmb: use smb2cli_conn_max_trans_size() in cli_smb2_list(); (bso#13736); + tldap: Avoid use after free errors; (bso#13776); + Fix idmap xid2sid cache churn; (bso#13802); + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812); + s3-smbd: Avoid assuming fsp is always intact after close_file call; (bso#13720); + s3-vfs-fruit: Add close call; (bso#13725); + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746); + s3-vfs: add glusterfs_fuse vfs module; (bso#13774); + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766); + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS) ftruncate and fallocate; (bso#13807); + lib/audit_logging: Actually create talloc; (bso#13737); + netcmd/user: python[3]-gpgme unsupported and replaced by python[3]-gpg; (bso#13728); + dns: Changing onelevel search for wildcard to subtree; (bso#13738); + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721); + sambaundoguididx: Use the right escaped oder unescaped sam ldb files; (bso#13759); + ctdb: Print locks latency in machinereadable stats; (bso#13742); + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786); + audit_logging: auth_json_audit required auth_json; (bso#13715); + man pages: Document prefork process model; (bso#13765); + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773); + s3:auth: ignore create_builtin_guests() failing without a valid idmap configuration; (bso#13697); + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC without trusts; (bso#13722); + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd is not available; (bso#13723); + s4:server: Add support for 'smbcontrol samba shutdown' and 'smbcontrol debug/debuglevel'; (bso#13752); + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616); + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330); + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774); + notifyd: Fix SIGBUS on sparc; (bso#13704); + waf: Check for libnscd; (bso#13787); + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770); + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717); + Recovery lock bug fixes; (bso#13800); + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726); + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727); + vfs_fileid: Fix get_connectpath_ino; (bso#13741); + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).- Fix update-apparmor-samba-profile script after apparmor switched to using named profiles. The change is backwards compatible; (bsc#1126377);- LoadParm().load_default() fails with "Unable to load default file"; (bsc#1089758);- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);- Update to samba-4.9.4 + libcli/smb: Don't overwrite status code; (bso#9175). + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164). + Session setup reauth fails to sign response; (bso#13661). + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677). + vfs_shadow_copy2: Nicely deal with attempts to open previous version for writing; (bso#13688). + Restoring previous version of stream with vfs_shadow_copy2 fails with NT_STATUS_OBJECT_NAME_INVALID fsp->base_fsp->fsp_name; (bso#13455). + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571). + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708) + PEP8: fix E231: missing whitespace after ','. + winbindd: Fix crash when taking profiles;(bso#13629) + CVE-2018-14629 dns: Fix CNAME loop prevention using counter regression; (bso#13600) + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686). + CVE-2018-16853: Do not segfault if client is not set; (bso#13571). + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679) + ctdb-daemon: Exit with error if a database directory does not exist; (bso#13696). + s3:libads: Add net ads leave keep-account option; (bso#13498).- Drop more %if..%endif guards which are idempotent. - Drop requires on ldconfig which are already auto-discovered. - Do not ignore errors from useradd/groupadd.- Remove python2 build dependency from samba-libs; (bsc#1116900);- Update update-apparmor-samba-profile script to ignore the shares's paths containing substitution variables in any place, not only at the beginning of the path.- Update to samba-4.9.3 + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD Internal DNS server; (bso#13600); (bsc#1116319); + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628); (bsc#1116320); + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server; (bso#13674); (bsc#1116322); + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers; (bso#13669); (bsc#1116321); + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos configuration (unsupported); (bso#13678); (bsc#1116324); + CVE-2018-16857: Bad password count in AD DC not always effective; window; (bso#13683); (bsc#1116323);- Update to samba-4.9.2 + dsdb: Add comments explaining the limitations of our current backlink behaviour; (bso#13418); + Fix problems running domain backups (handling SMBv2, sites); (bso#13621); + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3; (bso#13465); + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642); + File saving issues with vfs_fruit on samba >= 4.8.5; (bso#13646); + Enabling vfs_fruit looses FinderInfo; (bso#13649); + Cancelling of SMB2 aio reads and writes returns wrong error NT_STATUS_INTERNAL_ERROR; (bso#13667); + Fix CTDB recovery record resurrection from inactive nodes and simplify vacuuming; (bso#13641); + examples: Fix the smb2mount build; (bso#13465); + libtevent: Fix build due to missing open_memstream on Illiumos; (bso#13629); + winbindd_cache: Fix timeout calculation for sid<->name cache; (bso#13662); + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path; (bso#13653); + Extended DN SID component missing for member after switching group membership; (bso#13418); + Return STATUS_SESSION_EXPIRED error encrypted, if the request was encrypted; (bso#13624); + python: Allow forced signing via smb.SMB(); (bso#13621); + lib:socket: If returning early, set ifaces; (bso#13665); + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8 encoded unicode; (bso#13616); + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute; (bso#13673); + waf: Add -fstack-clash-protection; (bso#13601); + winbind: Fix segfault if an invalid passdb backend is configured; (bso#13668); + Fix bugs in CTDB event handling; (bso#13659); + Misbehaving nodes are sometimes not banned; (bso#13670);- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);- winbind requires latest version of libtevent-util0 to start- Backport latest gpo code from master + Read policy from local gpt cache + Offline policy application + Make group policy extensible via register/unregister gpext + gpext's run via a process_group_policy method- Enable profiling data collection- Change samba-kdc package name to samba-ad-dc - Move samba-ad-dc.service to the samba-ad-dc package- Update to samba-4.9.1 + s3: nmbd: Stop nmbd network announce storm; (bso#13620); + s3-rpcclient: Use spoolss_init_spoolss_UserLevel1 in winspool cmds; (bso#13597); + CTDB recovery lock has some race conditions; (bso#13617); + s3-rpc_client: Advertise Windows 7 client info; (bso#13597); + ctdb-doc: Remove PIDFILE option from ctdbd_wrapper man page; (bso#13610);- Tumbleweed doesn't define the sle_version macro, so we must include a check for suse_version also. Otherwise python3 is disabled on Tumbleweed.- Update to samba-4.9.0 + samba_dnsupdate: Honor 'dns zone scavenging' option, only update if needed; (bso#13605); + wafsamba: Fix 'make -j'; (bso#13606);- Update to samba-4.9.0rc5 + s3: VFS: vfs_full_audit: Ensure smb_fname_str_do_log() only returns absolute pathnames; (bso#13565); + s3: util: Do not take over stderr when there is no log file; (bso#13578); + Durable Reconnect fails because cookie.allow_reconnect is not set; (bso#13549); + krb5-samba: Interdomain trust uses different salt principal; (bso#13539); + vfs_fruit: Don't unlink the main file; (bso#13441); + smbd: Fix a memleak in async search ask sharemode; (bso#13602); + Fix Samba GPO issue when Trust is enabled; (bso#11517); + samba-tool: Add "virtualKerberosSalt" attribute to 'user getpassword/syncpasswords'; (bso#13539); + Fix CTDB configuration issues; (bso#13589); + ctdbd logs an error until it can successfully connect to eventd; (bso#13592);- Update to samba-4.9.0rc4 + s3: smbd: Ensure get_real_filename() copes with empty pathnames; (bso#13585); + samba domain backup online/rename commands force user to specify password on CLI; (bso#13566); + wafsamba/samba_abi: Always hide ABI symbols which must be local; (bso#13579); + Fix a panic if fruit_access_check detects a locking conflict; (bso#13584); + Fix memory and resource leaks; (bso#13567); + python: Fix print in dns_invalid.py; (bso#13580); + Aliasing issue causes incorrect IPv6 checksum; (bso#13588); + Fix CTDB configuration issues; (bso#13589); + s3: vfs: time_audit: fix handling of token_blob in smb_time_audit_offload_read_recv(); (bso#13568);- Add missing zlib-devel dependency which was previously pulled in by libopenssl-devel- Update to samba-4.9.0rc3+git.22.3fff23ae36e + CVE-2018-10858: libsmb: Harden smbc_readdir_internal() against returns from malicious servers; (bso#13453); + CVE-2018-1140: ldbsearch '(distinguishedName=abc)' and DNS query with escapes crashes, ldb: Release LDB 1.3.5 for CVE-2018-1140; (bso#13374); + CVE-2018-10918: cracknames: Fix DoS (NULL pointer de-ref) when not servicePrincipalName is set on a user; (bso#13552); + CVE-2018-10919: acl_read: Fix unauthorized attribute access via searches; (bso#13434); + ctdb_mutex_ceph_rados_helper: Set SIGINT signal handler; (bso#13540); + CVE-2018-1139 libcli/auth: Do not allow ntlmv1 over SMB1 when it is disabled via "ntlm auth"; (bso#13360); + s3-tldap: do not install test_tldap; (bso#13529); + ctdb_mutex_ceph_rados_helper: Fix deadlock via lock renewals; (bso#13540); + CVE-2018-1140 Add NULL check for ldb_dn_get_casefold() in ltdb_index_dn_attr(); (bso#13374); + ctdb-eventd: Fix CID 1438155; (bso#13554); + Fix CIDs 1438243, (Unchecked return value) 1438244 (Unsigned compared against 0), 1438245 (Dereference before null check) and 1438246 (Unchecked return value); (bso#13553); + ctdb: Fix a cut&paste error; (bso#13554); + systemd: Only start smb when network interfaces are up; (bso#13559); + Fix quotas don't work with SMB2; (bso#13553); + s3/smbd: Ensure quota code is only called when quota support detected; (bso#13563); + s3/libsmb: Explicitly set delete_on_close token for rmdir; (bso#13204); + s3:waf: Install eventlogadm to /usr/sbin; (bso#13561); + Shorten description in vfs_linux_xfs_sgid manual; (bso#13562);- Update to samba-4.9.0rc2+git.21.a1069afb007 + s3: smbd: Using "sendfile = yes" with SMB2 can cause CPU spin; (bso#13537); + s3: smbd: Fix path check in smbd_smb2_create_durable_lease_check(); (bso#13535); + samba-tool trust: Support discovery via netr_GetDcName; (bso#13538); + s4-dsdb: Only build dsdb Python modules for AD DC; (bso#13542); + Fix portability issues on freebsd; (bso#13520); + DNS wildcard search does not handle multiple labels correctly; (bso#13536); + samba-tool domain trust: Fix trust compatibility to Windows Server 1709 and FreeIPA; (bso#13308); + Fix portability issues on freebsd; (bso#13520); + ctdb-protocol: Fix CTDB compilation issues; (bso#13545); + ctdb-docs: Replace obsolete reference to CTDB_DEBUG_HUNG_SCRIPT option; (bso#13546); + ctdb-doc: Provide an example script for migrating old configuration; (bso#13550); + ctdb-event: Implement event tool "script list" command; (bso#13551);- Update to samba-4.8.4+git.37.a7a861d7982; + CVE-2018-1139: Weak authentication protocol allowed; (bsc#1095048); (bsc#13360); + CVE-2018-1140: Denial of Service Attack on DNS and LDAP server; (bsc#1095056); (bso#13466); (bso#13374); + CVE-2018-10858: Insufficient input validation on client directory listing in libsmbclient; (bsc#1103411); (bso#13453); + CVE-2018-10918: Denial of Service Attack on AD DC DRSUAPI server; (bsc#1103414); (bso#13552); + CVE-2018-10919: Confidential attribute disclosure from the AD LDAP server; (bsc#1095057); (bso#13434); + s3:winbind: winbind normalize names' doesn't work for users; (bso#12851); + winbind: Fix UPN handling in canonicalize_username(); (bso#13369); + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428); + samdb: Fix building Samba with gcc 8.1; (bso#13437); + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440); + smbd: Flush dfree memcache on service reload; (bso#13446); + ldb: Save a copy of the index result before calling the + lib/util: No Backtrace given by Samba's AD DC by default; (bso#13454). + s3: smbd: printing: Re-implement delete-on-close semantics for print files missing since 3.5.x; (bso#13457). + python: Fix talloc frame use in make_simple_acl(); (bso#13474). + krb5_wrap: Fix keep_old_entries logic for older Kerberos libraries;(bso#13478). + krb5_plugin: Add winbind localauth plugin for MIT Kerberos; (bso#13480).- Add missing package descriptions; (bsc#1093864); - Fix dependency issue between samba-python and samba-kdc; (bsc#1062876); - Call update-apparmor-samba-profile when running samba-ad-dc; (bsc#1092099);- Update to 4.8.2 + After update to 4.8.0 DC failed with "Failed to find our own NTDS Settings objectGUID" (bso#13335). + fix incorrect reporting of stream dos attributes on a directory (bso#13380). + vfs_ceph: add asynchronous fsync; fake synchronous call (bso#13412). + vfs_ceph: add fake async pwrite/pread send/recv hooks; (bso#13425) + vfs_ceph: Fix memory leak; (bso#13424). + libsmbclient: Fix hard-coded connection error return of ETIMEDOUT; (bso#13419). + s4-lsa: Fix use-after-free in LSA server; (bso#13420). + winbindd: Do re-connect if the RPC call fails in the passdb case; (bso#13430). + cleanupd: Sends MSG_SMB_UNLOCK twice to interested peers; (bso#13416). + cleanupd: Use MSG_SMB_BRL_VALIDATE to signal cleanupd unclean process shutdown; (bso#13414). + ctdb-client: Remove ununsed functions from old client code; (bso#13411). + printing: Return the same error code as windows does on upload failures; (bso#13395). + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged pipe is not accessable; (bso#13400). + s4:lsa_lookup: remove TALLOC_FREE(state) after all dcesrv_lsa_Lookup{Names,Sids}_base_map() calls; (bso#13420). + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407). + s3:smbspool: Fix cmdline argument handling; (bso#13417).- Move libdfs-server-ad-samba4.so library from kdc to libs package, as it is required by some client libs; (bsc#1074135); - Update to 4.8.1; (bsc#1091179); + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error, we don't own it here; (bso#13244); + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't support fdopendir(); (bso#13270); + Round-tripping ACL get/set through vfs_fruit will increase the number of ACE entries without limit; (bso#13319); + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit issues; (bso#13347); + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without delete access; (bso#13358); + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372); + s3: smbd: Unix extensions attempts to change wrong field in fchown call; (bso#13375); + ms_schema/samba-tool visualize: Fix python2.6 incompatibility; (bso#13337); + Fix invocation of gnutls_aead_cipher_encrypt(); (bso#13352); + Windows 10 cannot logon on Samba NT4 domain; (bso#13328); + winbindd: Recover loss of netlogon secure channel in case the peer DC is rebooted; (bso#13332); + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363); + ctdb-client: Fix bugs in client code; (bso#13356); + ctdb-scripts: Drop "net serverid wipe" from 50.samba event script; (bso#13359); + s3: lib: messages: Don't use the result of sec_init() before calling sec_init(); (bso#13368); + libads: Fix the build '--without-ads'; (bso#13273); + winbind: Keep "force_reauth" in invalidate_cm_connection, add 'smbcontrol disconnect-dc'; (bso#13332); + vfs_virusfilter: Fix CIDs 1428738-1428740; (bso#13343); + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367); + rpc_server: Fix core dump in dfsgetinfo; (bso#13370); + smbclient: Fix notify; (bso#13382); + Fix smbd panic if the client-supplied channel sequence number wraps; (bso#13215); + Windows 10 cannot logon on Samba NT4 domain; (bso#13328); + lib/util: Remove unused '#include ' from tests/tfork.c; (bso#13342); + Fix build errors with cc from developerstudio 12.5 on Solaris; (bso#13343); + Fix the picky-developer build on FreeBSD 11; (bso#13344); + s3:modules: Fix the build of vfs_aixacl2.c; (bso#13345); + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338); + lib:replace: Fix linking when libtirpc-devel overwrites system headers; (bso#13341); + winbindd: 'wbinfo --name-to-sid' returns misleading result on invalid query; (bso#13312); + s3:passdb: Do not return OK if we don't have pinfo set up; (bso#13376); + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);- Use new foreground execution flags for systemd samba daemons; (bsc#1088574); (bsc#1071090); (bsc#1065551); + Add %post scriptlet to clear old sysconfig flags - Update vendor-files to commit 880b3e7. + Set samba sysconfig template variables to "" + Add required daemon flags directly to systemd unit- Specfile cleanup + Remove %if..%endif guards which don't affect the build + Remove redundant %clean section + Replace old $RPM_* shell vars with macros- BuildRequire pkgconfig(systemd) and pkgconfig(libsystemd) in place of systemd and systemd-devel: Allow OBS to optimize the workload by allowing the usage of the 'build-optimized' systemd packages.- Enable building samba with python3, and create a samba-python3 package.- Update to 4.8 + New GUID Index mode in sam.ldb for the AD DC + GPO support for samba KDC + Time machine support with vfs_fruit + Encrypted secrets + AD Replication visualization + Improved trust support - ability to not scan global trust list - AD external trusts have limited support - verbose trusted domain listing + VirusFilter VFS module + NT4-style replication removed + vfs_aio_linux removed- Disable samba-pidl package, due to the removal of dependency perl-Parse-Yapp; (bsc#1085150);- Update to 4.7.6; + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally; (bso#11343); (bsc#1081741); + CVE-2018-1057: Authenticated users can change other users' password; (bso#13272); (bsc#1081024).- Disable python until full python3 port is done; (bsc#1082139); + Remove contents of package samba-python + Remove contents of package libsamba-policy0 + Remove contents of package libsamba-policy-devel + Remove library libsamba-python-samba4.so from samba-libs package + Remove library libsamba-net-samba4.so from samba-libs package + Remove smbtorture binary and manpage from samba-test- samba fails to build with glibc2.27; (bsc#1081042);- Update to 4.7.5; (bsc#1080545); + smbd tries to release not leased oplock during oplock II downgrade; (bso#13193); + Fix copying file with empty FinderInfo from Windows client to Samba share with fruit; (bso#13181); + build: Deal with recent glibc sunrpc header removal; (bso#10976); + Make Samba work with tirpc and libnsl2; (bso#13238); + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208); (bsc#1075206); + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue; (bso#12986); + ctdb-recovery-helper: Deregister message handler in error paths; (bso#13188); + samba: Only use async signal-safe functions in signal handler; (bso#13240); + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue; (bso#12986); + repl_meta_data: Fix linked attribute corruption on databases with unsorted links on expunge. dbcheck: Add functionality to fix the corrupt database; (bso#13228); + Fix smbd panic when chdir returns error during exit; (bso#13189); + Make Samba work with tirpc and libnsl2; (bso#13238); + Fix POSIX ACL support on HPUX and possibly other big-endian OSs; (bso#13176);- Update to 4.7.4; (bsc#1080545); + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140); + s3: libsmb: Fix valgrind read-after-free error in cli_smb2_close_fnum_recv(); (bso#13171); + s3: libsmb: Fix reversing of oldname/newname paths when creating a reparse point symlink on Windows from smbclient; (bso#13172); + Build man page for vfs_zfsacl.8 with Samba; (bso#12934); + repl_meta_data: Allow delete of an object with dangling backlinks; (bso#13095); + s4:samba: Fix default to be running samba as a deamon; (bso#13129); + Performance regression in DNS server with introduction of DNS wildcard, ldb: Release 1.2.3; (bso#13191); + vfs_zfsacl: Fix compilation error; (bso#6133); + "smb encrypt" setting changes are not fully applied until full smbd restart; (bso#13051); + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052); + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155); + winbindd: Dependency on trusted-domain list in winbindd in critical auth codepath; (bso#13173); + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120); + ctdb: sock_daemon leaks memory; (bso#13153); + TCP tickles not getting synchronised on CTDB restart; (bso#13154); + winbindd: winbind parent and child share a ctdb connection; (bso#13150); + pthreadpool: Fix deadlock; (bso#13170); + pthreadpool: Fix starvation after fork; (bso#13179); + messaging: Always register the unique id; (bso#13180); + s4/smbd: set the process group; (bso#13129); + Fix broken linked attribute handling; (bso#13095); + The KDC on an RWDC doesn't send error replies in some situations; (bso#13132); + libnet_join: Fix 'net rpc oldjoin'; (bso#13149); + g_lock conflict detection broken when processing stale entries; (bso#13195); + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired sessions; (bso#13197); + s3:libads: net ads keytab list fails with "Key table name malformed"; (bso#13166); (bsc#1067700); + Fix crash in pthreadpool thread after failure from pthread_create; (bso#13170); + s4:samba: Allow samba daemon to run in foreground; (bso#13129); (bsc#1065551); + third_party: Link the aesni-intel library with "-z noexecstack"; (bso#13174); + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I" options; (bso#13125);- Re-enable usage of libnsl (did got lost with glibc change) - Use TI-RPC (sunrpc is deprecated and will be removed soon from glibc)- smbc_opendir should not return EEXIST with invalid login credentials; (bnc#1065868).- Update to 4.7.3; (bsc#1069666); + Non-smbd processes using kernel oplocks can hang smbd; (bso#13121); + python: use communicate to fix Popen deadlock; (bso#13127); + smbd on disk file corruption bug under heavy threaded load; (bso#13130); + tevent: version 0.9.34; (bso#13130); + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118); + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug; (bsc#1060427);(bso#13041); + CVE-2017-15275: s3: smbd: Chain code can return uninitialized memory when talloc buffer is grown; (bsc#1063008); (bso#13077); - Build with AD DC support only in openSUSE.- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- samba-tool requires samba-python; (bnc#1067771).- Run all daemons in the foreground and let systemd handle it; (bsc#1065551). - Update to 4.7.1; + Fix exporting subdirs with shadow_copy2; (bso#13091); + Currently if getwd() fails after a chdir(), we panic; (bso#13027); + Ensure default SMB_VFS_GETWD() call can't return a partially completed struct smb_filename; (bso#13068); + sys_getwd() can leak memory or possibly return the wrong errno on older systems; (bso#13069); + smbclient doesn't correctly canonicalize all local names before use; (bso#13093); + Fix broken linked attribute handling; (bso#13095); + Missing LDAP query escapes in DNS rpc server; (bso#12994); + Link to -lbsd when building replace.c by hand; (bso#13087); + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem; (bso#6133); + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module; (bso#7909); + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module; (bso#7933); + Missing assignment in sl_pack_float; (bso#12991); + Wrong Samba access checks when changing DOS attributes; (bso#12995); + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062); + groupmap cleanup should not delete BUILTIN mappings; (bso#13065); + Enabling vfs_fruit results in loss of Finder tags and other xattrs; (bso#13076); + man pages: Properly ident lists; (bso#9613); + smb.conf.5: Sort parameters alphabetically; (bso#13081); + Fix GUID string format on GetPrinter info; (bso#12993); + Remote serverid check doesn't check for the unique id; (bso#13042); + CTDB starts consuming memory if there are dead nodes in the cluster; (bso#13056); + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070); + libgpo doesn't sort the GPOs in the correct order; (bso#13046); + Remote serverid check doesn't check for the unique id; (bso#13042); + vfs_catia: Fix a potential memleak; (bso#13090); + Fix file change notification for renames; (bso#12903); + Samba DNS server does not honour wildcards; (bso#12952); + Can't change password in samba from a Windows client if Samba runs on IPv6 only interface; (bso#13079); + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086); + Apple client can't cope with SMB2 async replies when creating symlinks; (bso#13047); + s4:rpc_server:backupkey: Move variable into scope; (bso#12959); + Fix ntstatus_gen.h generation on 32bit; (bso#13099); + Fix a double free in vfs_gluster_getwd(); (bso#13100); + Fix resouce leaks and pointer issues; (bso#13101); + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);- Add samba-kdc to baselibs.conf. - Do not wrap samba-kdc's package definition into if/endif: the package won't be generated simply based on the fact that there is no files section for the package. Allows the source validator to ensure samba-kdc is a built package.- Update to 4.7.0; + Whole DB read locks: Improved LDAP and replication consistency; (bso#12858). + Samba AD with MIT Kerberos + Dynamic RPC port range: Default range changed from "1024-1300" to "49152-65535". + Authentication and Authorization audit support: New auth_audit debug class. + Multi-process LDAP Server: The LDAP server in the AD DC now honours the process model used for the rest of the 'samba' process. + Improved Read-Only Domain Controller (RODC) Support; (bso#12977). + Additional password hashes stored in supplementalCredentials. + Improvements to DNS during Active Directory domain join. + Significant AD performance and replication improvements. + Query record for open file or directory. + Removal of lpcfg_register_defaults_hook(). + Change of loadable module interface. + SHA256 LDAPS Certificates: The self-signed certificate generated for use on LDAPS will now be generated with a SHA256 self-signature, not a SHA1 self-signature. + CTDB no longer allows mixed minor versions in a cluster. + CTDB now ignores hints from Samba about TDB flags when attaching to databases. + New configuration variable CTDB_NFS_CHECKS_DIR. + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed. + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed. + The example NFS Ganesha call-out has been improved. + A new "replicated" database type is available.- CVE-2017-12163: Prevent client short SMB1 write from writing server memory to file; (bso#13020); (bsc#1058624).- CVE-2017-12150: Some code path don't enforce smb signing, when they should; (bso#12997); (bsc#1058622).- CVE-2017-12151: Keep required encryption across SMB3 dfs redirects; (bso#12996); (bsc#1058565).- Clean specfile assuming SUSE-only system and product >=SLE11 + %{ul_version}, %{rhel_version}, %{mandriva_version}, %{centos_version} are always undefined + %{_vendor} is "suse" and %{suse_version} is at least 1100- Update to 4.6.7; (bsc#1054017) + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392). + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937). + vfs_ceph provides inconsistent directory listings; (bso#12911). + Misused talloc context can cause a user to crash their smbd by chaining SMB1 commands.; (bso#12836). + Use-after free can crash libsmbclient code.; (bso#12927). + Server exit with active AIO can crash.; (bso#12925). + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910). + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs; (bso#12898). + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897). + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for authentication; (bso#12886). + finder sidebar showing question mark instead of icon when using ip to connect with vfs_fruit; (bso#12840). + Winbind stops obtaining the 'unixHomeDirectory' & 'loginShell' attributes from AD.; (bso#12720). + KCC run at selftest startup can fail spuriously due to a race; (bso#12869). + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for the remote change; (bso#12782). + rpc_pipe_client memory leaks due to long term memory context passed to rpc_pipe_open_interface(); (bso#12890). + CVE-2017-2619 breaks accessing previous versions of directories with snapshots in subdirectories of the share; (bso#12885). + dns_name_equal doing OOB read; (bso#12813). + replica_sync tests flap; (bso#12753). + Selftest should not call 'net cache flush' and wipe important winbind entries; (bso#12868). + Old Samba versions don't support using recent ldb versions (>=1.1.30); (bso#12859). + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490). + race starting winbindd against posixacl test; (bso#12843). + Crash in the reentrant smbd_smb2_create_send() if the something fails in the subsequent try; (bso#12832). + spnego.c passes the wrong argument order to gensec_update_ev() for the FALLBACK case; (bso#12788). + Clients with SMB3 support can't connect with "server max protocol = SMB2_02"; (bso#12772). + A log message of samb-tool user syncpasswords reverses string arguments in a debug message "Call Popen[...".; (bso#12768). + The smb tarmode tests kills the share dir contents; (bso#12867). + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862). + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860). + manpage/index.html lists links not in alphabetical order; (bso#12854). + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831). + If a record is locked in a database, then recovery does not complete; (bso#12857). + debug_locks.sh script does not log any information; (bso#12856). + SIGSEGV in cm_connect_lsa_tcp dereferencing conn->lsa_tcp_pipe->transport after error; (bso#12852). + smbclient can't parse DOMAIN+username if a different winbind separator is used; (bso#12849). + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845). + Related requests with TreeConnect fail with NETWORK_NAME_DELETED; (bso#12844). + cli->server_os not filled correctly; (bso#12779). + REGRESSION: smbclient doesn't print the session setup anymore; (bso#12824). + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808). + CTDB NFS call-out failures do not cause event failures; (bso#12837). + net command fails due to incorrectly return code; (bso#12828). + Fix building Samba with GCC 7.1; (bso#12827).- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again; (bsc#1048339).- fix cephwrap_chdir(); (bsc#1048790). - Update to 4.6.6 + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation; (bsc#1048278).- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).- Fix inconsistent ctdb socket path; (bsc#1048352). - Fix non-admin cephx authentication; (bsc#1048387).- Update to 4.6.5; (bsc#1040157) + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at startup; (bso#12814). + vfs_expand_msdfs tries to open the remote address as a file path; (bso#12687). + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type); (bso#12798). + With clustering get update_num_read_oplocks failed and PANIC: num_share_modes == 1 assertion failure; (bso#11844). + contend_level2_oplocks_begin_default oplock optimisation doesn't carry over to leases; (bso#12766). + `ctdb nodestatus` incorrectly displays status for all nodes with wrong exit code; (bso#12802). + CTDB can spin hard on revoking readonly delegations if a node becomes disconnected; (bso#12697). + Printing a share mode entry with leases can crash in the ndr code; (bso#12793). + Fix flakey unit tests for eventd; (bso#12792). + CTDB daemon crashes if built with clang; (bso#12770). + smbcacls fails if no password is specified; (bso#12765). + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757). + samba-tool user syncpasswords doesn't trigger the script when a user gets removed; (bso#12767). + systemd: fix detection of libsystemd; (bso#12764). + Notify subsystem only maps first inotify mask to Windows notify filter; (bso#12760). + Allow passing trusted domain password as plain-text to PASSDB layer; (bso#12751). + Can't case-rename files with vfs_fruit; (bso#12749). + wrong sid->uid mapping for SIDs residing in sIDHistory; (bso#12702). + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562). + Ordering of notify responses broken; (bso#12756).- s3: libsmb: Fix error where short name length was read as 2 bytes, should be 1; (bso#11822); (bsc#1042419).- Revert explicit winbind %{version}-%{release} dependency. + The ABI has stabilized since (bsc#936909), so remove to fix cross-media dependencies; (bsc#1037899).- Fix CVE-2017-7494 remote code execution from a writable share; (bso#12780); (bsc#1038231).- Update to 4.6.3; (bsc#1036011) + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots from shares with GlusterFS backend; (bso#12743). + Fix for Solaris C compiler; (bso#12559). + s3: locking: Update oplock optimization for the leases era; (bso#12628). + Make the Solaris C compiler happy; (bso#12693). + s3: libgpo: Allow skipping GPO objects that don't have the expected LDAP attributes; (bso#12695). + Fix buffer overflow caused by wrong use of getgroups; (bso#12747). + lib: debug: Avoid negative array access; (bso#12746). + cleanupdb: Fix a memory read error; (bso#12748). + streams_xattr and kernel oplocks results in NT_STATUS_NETWORK_BUSY; (bso#7537). + winbindd: idmap_autorid allocates ids for unknown SIDs from other backends; (bso#11961). + vfs_fruit: Resource fork open request with flags=O_CREAT|O_RDONLY; (bso#12565). + manpages/vfs_fruit: Document global options; (bso#12615). + lib/pthreadpool: Fix a memory leak; (bso#12624). + Lookup-domain for well-known SIDs on a DC; (bso#12727). + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728). + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729). + credentials_krb5: use gss_acquire_cred for client-side GSSAPI use case; (bso#12611). + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690). + ctdb-readonly: Avoid a tight loop waiting for revoke to complete; (bso#12697). + ctdb_event monitor command crashes if event is not specified; (bso#12723). + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733). + smbd: Fix smb1 findfirst with DFS; (bso#12558). + smbd: Do an early exit on negprot failure; (bso#12610). + winbindd: Fix substitution for 'template homedir'; (bso#12699). + s4:kdc: Disable principal based autodetected referral detection; (bso#12554). + idmap_autorid: Allocate new domain range if the callers knows the sid is valid; (bso#12613). + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724). + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for trusted domain; (bso#12725). + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731). + winbindd: Fix password policy for pam authentication; (bso#12725). + s3:gse: Correctly handle external trusts with MIT; (bso#12554). + auth/credentials: Always set the realm if we set the principal from the ccache; (bso#12611). + replace: Include sysmacros.h; (bso#12686). + s3:vfs_expand_msdfs: Do not open the remote address as a file; (bso#12687). + s3:libsmb: Only print error message if kerberos use is forced; (bso#12704). + winbindd: Child process crashes when kerberos-authenticating a user with wrong password; (bso#12708). + vfs_fruit: Office document opens as read-only on macOS due to CNID semantics; (bso#12715). + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is fragmented; (bso#12737).- Generate and update vendor-files tarball from Git + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).- Generate source tarball directly from Git using OBS tar_scm + use version string derived from parent Git tag and commit hash - remove obsolete vendor-files/tools/package-data version ID + explicitly generate ctdb manpages, needed without "make dist"- Update to 4.6.2 + remove bso#12721 patches now upstream- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622). + x86-64 and aarch64- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).- Build and install the html man pages (bsc#1021907).- Fix CVE-2017-2619 regression with "follow symlinks = no"; (bso#12721).- Update to 4.6.1 + symlink race permits opening files outside share directory; CVE-2017-2619; (bso#12496); (bsc#1027147) + testparm checks for valid idmap parameters + add new krb client encryption types + support for printer driver upload from windows 10 + inherit owner = 'unix only' for improved quota support + improved CTDB event support + new primary group support for idmap_ad + idmap_hash deprecated + mvxattr added to recursively rename extended attributes- Remove chkconfig requirements for systemd systems- Don't call insserv if systemd is used- Fix check if we need to require insserv- async_req: make async_connect_send() "reentrant"; (bso#12105); (bsc#1024416).- Force usage of ncurses6-config thru NCURSES_CONFIG env var; (bsc#1023847).- add missing patch for libnss_wins segfault; (bsc#995730).- Fix vfs_ceph builds against recent Ceph versions; (bsc#1021933).- Document "winbind: ignore domains" parameter; (bsc#1019416).- Add base Samba dependency to samba-ceph package.- Update to 4.5.3 + Heap-based Buffer Overflow Remote Code Execution Vulnerability; CVE-2016-2123; (bso#12409); (bsc#1014437). + Don't send delegated credentials to all servers; CVE-2016-2125; (bso#12445); (bsc#1014441). + denial of service due to a client triggered crash in the winbindd parent process; CVE-2016-2126; (bso#12446); (bsc#1014442). - 4.5.1 and 4.5.2 updates + various streams vfs fixes + various printing fixes + ntlm_auth: do not map explicitly empty domain + various stability fixes in smbd + match file compression ReFS behavior- Add missing ldb module directory; (bnc#1012092).- s3/client: obey 'disable netbios' smb.conf param, don't connect via NBT port; (bsc#1009085); (bso#12418).- Include vfstest in samba-test; (bsc#1001203).- s3/winbindd: using default domain with user@domain.com format fails; (bsc#997833).- Fix segfault in libnss_wins; (bso#12277); (bso#12269); (bsc#995730).- Update to 4.5.0 + NTLM1 Authentication disabled by default + SMB2.1 leases enabled by default + Support for OFD locks + ctdb tool rewritten + Added shadow copy snapshot prefix parameter- Fix illegal memory access after memory has been deleted; (bso#11836); (bsc#975299).- Prevent core, make sure response->extra_data.data is always cleared out; (bsc#993692).- Don't package man pages for VFS modules that aren't built; (boo#993707).- Fix population of ctdb sysconfig after source merge; (bsc#981566).- Enable vfs_ceph builds for Factory (x86-64) + Package as samba-ceph to avoid Ceph dependency in base package.- Update to 4.4.5 + Prevent client-side SMB2 signing downgrade; CVE-2016-2119; (bso#11860); (bsc#986869).- Remove obsolete syslog.target; (bsc#983938).- Honor smb.conf socket options in winbind; (bsc#975131).- Don't use htons() with IP_PROTO_RAW; (bso#11705); (bsc#969522).- Update to 4.4.4 + SMB3 multichannel: Add implementation of missing channel sequence number verification; (bso#11809). + smbd:close: Only remove kernel share modes if they had been taken at open; (bso#11919). + notifyd: Prevent NULL deref segfault in notifyd_peer_destructor; (bso#11930). + s3:rpcclient: Make '--pw-nt-hash' option work; (bso#10796). + Fix case sensitivity issues over SMB2 or above; (bso#11438). + s3:smbd: Fix anonymous authentication if signing is mandatory. (bso#11910) + Fix NTLM Authentication issue with squid; (bso#11914). + pdb: Fix segfault in pdb_ldap for missing gecos; (bso#11530). + Fix memory leak in share mode locking; (bso#11934).- Update to 4.4.3 + Various post-badlock regressions; (bso#11841); (bso#11850); (bso#11858); (bso#11870); (bso#11872). + Only allow idmap_hash for default idmap config (bso#11786). + smbd: Avoid large reads beyond EOF; (bso#11878). + vfs_acl_common: Avoid setting POSIX ACLs if "ignore system acls" is set; (bso#11806). + libads: Record session expiry for spnego sasl binds; (bso#11852).- Fix NTLMSSP regressions caused by previous CVE fixes; (bso#11849); (bsc#975962); (bsc#979268), (bsc#977669).- Revert shared library packaging to comply with SLPP- Update to 4.4.2 + A man-in-the-middle can downgrade NTLMSSP authentication; CVE-2016-2110; (bso#11688); (bsc#973031). + Domain controller netlogon member computer can be spoofed; CVE-2016-2111; (bso#11749); (bsc#973032). + LDAP conenctions vulnerable to downgrade and MITM attack; CVE-2016-2112; (bso#11644); (bsc#973033). + TLS certificate validation missing; CVE-2016-2113; (bso#11752); (bsc#973034). + Named pipe IPC vulnerable to MITM attacks; CVE-2016-2115; (bso#11756); (bsc#973036). + "Badlock" DCERPC impersonation of authenticated account possible; CVE-2016-2118; (bso#11804); (bsc#971965). + DCERPC server and client vulnerable to DOS and MITM attacks; CVE-2015-5370; (bso#11344); (bsc#936862).- Fix samba.tests.messaging test and prevent potential tdb corruption by removing obsolete now invalid tdb_close call; (bsc#974629).- Obsolete libsmbclient from libsmbclient0 while not providing it; (bsc#972197).- Update to 4.4.0. + Read of uninitialized memory DNS TXT handling; (bso#11128); (bso#11686); CVE-2016-0771. + Getting and setting Windows ACLs on symlinks can change permissions on link target; (bso#11648); CVE-2015-7560. + Sockets with htons(IPPROTO_RAW); (bso#11705); CVE-2015-8543. + s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystem with no ACL support; (bso#10489). + docs: Add example for domain logins to smbspool man page; (bso#11643). + smbd: Show correct disk size for different quota and dfree block sizes; (bso#11681). + docs: Add smbspool_krb5_wrapper manpage; (bso#11690). + winbindd: Return trust parameters when listing trusts; (bso#11691). + ctdb: Do not provide a useless pkgconfig file for ctdb; (bso#11696). + Crypto.Cipher.ARC4 is not available on some platforms, fallback to M2Crypto.RC4.RC4 then; (bso#11699). + s3:utils/smbget: Set default blocksize; (bso#11700). + Streamline 'smbget' options with the rest of the Samba utils; (bso#11700). + s3:clispnego: Fix confusing warning in spnego_gen_krb5_wrap(); (bso#11702). + s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703). + loadparm: Fix memory leak issue; (bso#11708). + lib/tsocket: Work around sockets not supporting FIONREAD; (bso#11714). + s3:vfs:glusterfs: Fix build after quota changes; (bso#11715). + ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ..."; (bso#11719). + lib:socket: Fix CID 1350010: Integer OVERFLOW_BEFORE_WIDEN; (bso#11723). + smbd: Fix CID 1351215 Improper use of negative value; (bso#11724). + smbd: Fix CID 1351216 Dereference null return value; (bso#11725). + s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new file; (bso#11727). + docs: Add manpage for cifsdd; (bso#11730). + param: Fix str_list_v3 to accept ; again; (bso#11732). + lib/socket: Fix improper use of default interface speed; (bso#11734). + lib:socket: Fix CID 1350009: Fix illegal memory accesses (BUFFER_SIZE_WARNING); (bso#11735). + libcli: Fix debug message, print sid string for new_ace trustee; (bso#11738). + Fix installation path of Samba helper binaries; (bso#11739). + Fix memory leak in loadparm; (bso#11740). + tevent: version 0.9.28: Fix memory leak when old signal action restored; (bso#11742). + smbd: Ignore SVHDX create context; (bso#11753). + Fix net join; (bso#11755). + s3:libads: setup the msDS-SupportedEncryptionTypes attribute on ldap_add; (bso#11755). + passdb: Add linefeed to debug message; (bso#11763). + s3:utils/smbget: Fix option parsing; (bso#11767). + libnet: Make Kerberos domain join site-aware; (bso#11769). + Reset TCP Connections during IP failover; (bso#11770). + ldb: Version 1.1.26; (bso#11772). + s3:smbd: Add negprot remote arch detection for OSX; (bso#11773). + vfs_glusterfs: Fix use after free in AIO callback; (bso#11774). + mkdir can return ACCESS_DENIED incorrectly on create race; (bso#11780). + "trustdom_list_done: Got invalid trustdom response" message should be avoided; (bso#11782). + Mismatch between local and remote attribute ids lets replication fail with custom schema; (bso#11783). + Quota is not supported on Solaris 10; (bso#11788). + Talloc: Version 2.1.6; (bso#11789). + smbd: Enable multi-channel if 'server multi channel support = yes' in the config; (bso#11796). + build: Fix build when '--without-quota' specified; (bso#11798). + lib/socket/interfaces: Fix some uninitialied bytes; (bso#11802). + Access based share enum: handle permission set in configuration files; (bso#8093). + See also WHATSNEW.txt from the samba-doc package.- Update to 4.3.6. + Getting and setting Windows ACLs on symlinks can change permissions on link target; CVE-2015-7560; (bso#11648); (bsc#968222). + Fix Out-of-bounds read in internal DNS server; CVE-2016-0771; (bso#11128); (bso#11686); (bsc#968223).- Upgrade on-disk FSRVP server state to new version; (bsc#924519).- Only obsolete but do not provide gplv2/3 package names; (bsc#968973).- Relocate existing lock files to /var/lib/samba/lock; (bsc#968963).- Obsolete no longer existing samba-32bit package; (bsc#967625).- Update to 4.3.5. + s3:utils/smbget: Fix recursive download; (bso#6482). + s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystemi with no ACL support; (bso#10489). + s3:smbd/oplock: Obey kernel oplock setting when releasing oplocks; (bso#11400). + vfs_shadow_copy2: Fix case where snapshots are outside the share; (bso#11580). + smbclient: Query disk usage relative to current directory; (bso#11662). + winbindd: Handle expired sessions correctly; (bso#11670). + smbd: Show correct disk size for different quota and dfree block sizes; (bso#11681). + smbcacls: Fix uninitialized variable; (bso#11682). + s3:smbd: Ignore initial allocation size for directory creation; (bso#11684). + s3-client: Add a KRB5 wrapper for smbspool; (bso#11690). + s3-parm: Clean up defaults when removing global parameters; (bso#11693). + Use M2Crypto.RC4.RC4 on platforms without Crypto.Cipher.ARC4; (bso#11699). + s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703). + ctdb: Remove error messages after kernel security update; CVE-2015-8543; (bso#11705). + loadparm: Fix memory leak issue; (bso#11708). + lib/tsocket: Work around sockets not supporting FIONREAD; (bso#11714). + ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ..."; (bso#11719). + s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new file; (bso#11727). + param: Fix str_list_v3 to accept ";" again; (bso#11732).- Shift samba-client sysconfig data into samba and samba-winbind; (bsc#947361).- Simplify shared library packaging; (bsc#966956).- Enable clustering (CTDB) support; (bsc#966271).- s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703); (bsc#964023).- Add quotes around path of update-apparmor-samba-profile; (bnc#962177).- Remove autoconf build-time requirement.- Update to 4.3.4. + vfs_fruit: Enable POSIX directory rename semantics; (bso#11065). + Crash: Bad talloc magic value - access after free; (bso#11394). + Copying files with vfs_fruit fails when using vfs_streams_xattr without stream prefix and type suffix; (bso#11466). + samba-tool: Fix uncaught exception if no fSMORoleOwner attribute is given; (bso#11613). + Fix a typo in the smb.conf manpage, explanation of idmap config; (bso#11619). + Correctly initialize the list head when keeping a list of primary followed by DFS connections; (bso#11624). + Reduce the memory footprint of empty string options; (bso#11625). + lib/async_req: Do not install async_connect_send_test; (bso#11639). + Fix typos in man vfs_gpfs; (bso#11641). + Make "hide dot files" option work with "store dos attributes = yes"; (bso#11645). + Fix a corner case of the symlink verification; (bso#11647); (bnc#960249). + Do not disable "store dos attributes" on-the-fly; (bso#11649). + Update lastLogon and lastLogonTimestamp; (bso#11659).- Prevent access denied if the share path is "/"; (bso#11647); (bnc#960249).- Update to 4.3.3. + Malicious request can cause Samba LDAP server to hang, spinning using CPU; CVE-2015-3223; (bso#11325); (bnc#958581). + Remote read memory exploit in LDB; CVE-2015-5330; (bso#11599); (bnc#958586). + Insufficient symlink verification (file access outside the share); CVE-2015-5252; (bso#11395); (bnc#958582). + No man in the middle protection when forcing smb encryption on the client side; CVE-2015-5296; (bso#11536); (bnc#958584). + Currently the snapshot browsing is not secure thru windows previous version (shadow_copy2); CVE-2015-5299; (bso#11529); (bnc#958583). + Fix Microsoft MS15-096 to prevent machine accounts from being changed into user accounts; CVE-2015-8467; (bso#11552); (bnc#958585).- Update to 4.3.2. + vfs_gpfs: Re-enable share modes; (bso#11243). + dcerpc.idl: Accept invalid dcerpc_bind_nak pdus; (bso#11327). + s3-smbd: Fix old DOS client doing wildcard delete - gives an attribute type of zero; (bso#11452). + Add libreplace dependency to texpect, fixes a linking error on Solaris; (bso#11511). + s4: Fix linking of 'smbtorture' on Solaris; (bso#11512). + s4:lib/messaging: Use correct path for names.tdb; (bso#11562). + Fix segfault of 'net ads (join|leave) -S INVALID' with nss_wins; (bso#11563). + async_req: Fix non-blocking connect(); (bso#11564). + auth: gensec: Fix a memory leak; (bso#11565). + lib: util: Make non-critical message a warning; (bso#11566). + Fix winbindd crashes with samlogon for trusted domain user; (bso#11569); (bnc#949022). + smbd: Send SMB2 oplock breaks unencrypted; (bso#11570). + ctdb: Open the RO tracking db with perms 0600 instead of 0000; (bso#11577). + s3:smb2_server: Make the logic of SMB2_CANCEL DLIST_REMOVE() clearer; (bso#11581). + s3-smbd: Fix use after issue in smbd_smb2_request_dispatch(); (bso#11581). + manpage: Correct small typo error; (bso#11584). + s3: smbd: If EAs are turned off on a share don't allow an SMB2 create containing them; (bso#11589). + Backport some valgrind fixes from upstream master; (bso#11597). + auth: Consistent handling of well-known alias as primary gid; (bso#11608). + winbind: Fix crash on invalid idmap configs; (bso#11612). + s3: smbd: have_file_open_below() fails to enumerate open files below an open directory handle; (bso#11615). + Changing log level of two entries to DBG_NOTICE; (bso#9912).- Ensure samlogon fallback requests are rerouted after kerberos failure; (bnc#953382); (bnc#953972).- Ensure to link with --as-needed flag by removing SUSE_ASNEEDED=0. - Always use the default optimization even on pre-9.2 systems.- Remove redundant configure options while adding with-relro.- Relocate the lockdir to the /var/lib/samba/lock directory.- Cleanup and enhance the pidl sub package.- Require renamed python-ldb-devel and python-talloc-devel at build-time. - Requires python-ldb and python-talloc from the python subpackage.- Update to 4.3.1. + s3: smbd: Fix our access-based enumeration on "hide unreadable" to match Windows; (bso#10252). + nss_winbind: Fix hang on Solaris on big groups; (bso#10365). + smbd: Fix file name buflen and padding in notify repsonse; (bso#10634). + kerberos: Make sure we only use prompter type when available; winbind: Fix 100% loop; (bso#11038). + source3/lib/msghdr.c: Fix compiling error on Solaris; (bso#11053). + s3:ctdbd_conn: make sure we destroy tevent_fd before closing the socket; (bso#11316). + s3: smbd: Fix mkdir race condition; (bso#11486). + pam_winbind: Fix a segfault if initialization fails; (bso#11502). + s3: dfs: Fix a crash when the dfs targets are disabled; (bso#11509). + s4:lib/messaging: Use 'msg.lock' and 'msg.sock' for messaging related subdirs; (bso#11515). + s3: smbd: Fix opening/creating :stream files on the root share directory; (bso#11522). + lib/param: Fix hiding of FLAG_SYNONYM values; (bso#11526). + net: Fix a crash with 'net ads keytab create'; (bso#11528). + s3: smbd: Fix a crash in unix_convert(); (bso#11535). + s3: smbd: Fix NULL pointer bug introduced by previous 'raw' stream fix (bso#11522); (bso#11535). + vfs_fruit: Return value of ad_pack in vfs_fruit.c; (bso#11543). + vfs_commit: set the fd on open before calling SMB_VFS_FSTAT; (bso#11547). + s3:locking: Initialize lease pointer in share_mode_traverse_fn(); (bso#11549). + s3:smbstatus: Add stream name to share_entry_forall(); (bso#11550). + s3:lib: Validate domain name in lookup_wellknown_name(); (bso#11555). + s3: lsa: lookup_name() logic for unqualified (no DOMAIN component) names is incorrect; (bso#11555).- Fix 100% CPU in winbindd when logging in with "user must change password on next logon"; (bso#11038).- Relocate the tmpfiles.d directory to the client package; (bnc#947552).- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf instead; (bnc#942716).- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).- Package /var/lib/samba/msg with 0755 permissions; (bso#11515); (bnc#945502).- Require to install libfam0-gamin from samba-libs on post-12.1 and pre-13.15 systems; (bnc#945013).- Update to 4.3.0. + Samba "map to guest = Bad uid" doesn't work; (bso#9862). + revert LDAP extended rule 1.2.840.113556.1.4.1941 LDAP_MATCHING_RULE_IN_CHAIN changes; (bso#10493). + No objectClass found in replPropertyMetaData on ordinary objects (non-deleted); (bso#10973). + Stream names with colon don't work with fruit:encoding = native; (bso#11278). + NetApp joined to a Samba/ADDC cannot resolve SIDs; (bso#11291). + tevent_fd needs to be destroyed before closing the fd; (bso#11316). + "force group" with local group not working; (bso#11320). + strsep is not available on Solaris; (bso#11359). + smbtorture does not build when configured --with-system-mitkrb5; (bso#11411). + Build with GPFS support is broken; (bso#11421). + Build broken with --disable-python; (bso#11424). + net share allowedusers crashes; (bso#11426). + nmbd incorrectly matches netbios names as own name; (bso#11427). + Python bindings don't check integer types; (bso#11429). + Python bindings don't check array sizes; (bso#11430). + CTDB's eventscript error handling is broken; (bso#11431). + Fix crash in nested ctdb banning; (bso#11432). + Cannot build ctdbpmda; (bso#11434). + samba-tool uncaught exception error; (bso#11436). + Crash in notify_remove caused by change notify = no; (bso#11444). + Poor SMB3 encryption performance with AES-GCM; (bso#11451). + Poor SMB3 encryption performance with AES-GCM (part1); (bso#11451). + fix recursion problem in rep_strtoll in lib/replace/replace.c; (bso#11455). + --bundled-libraries=!ldb,!pyldb,!pyldb-util doesn't disable ldb build and install; (bso#11458). + xid2sid gives inconsistent results; (bso#11464). + ctdb: Fix the build on FreeBSD 10.1; (bso#11465). + Handling of 0 byte resource fork stream; (bso#11467). + AD samr GetGroupsForUser fails for users with "()" in their name; (bso#11488).- Configure with --bundled-libraries=NONE; (bso#11458).- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).- Remove libiniparser-devel build-time requirement.- Update to 4.2.3. + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780). + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924). + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991). + Logon via MS Remote Desktop hangs; (bso#11061). + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068). + tevent: Add a note to tevent_add_fd(); (bso#11141). + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170). + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217). + smbd: Fix a use-after-free; (bso#11218); (bnc#919309). + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces; (bso#11245). + s3:smb2: Add padding to last command in compound requests; (bso#11277). + Add IPv6 support to ADS client side LDAP connects; (bso#11281). + Add IPv6 support for determining FQDN during ADS join; (bso#11282). + s3: IPv6 enabled DNS connections for ADS client; (bso#11283). + Fix invalid write in ctdb_lock_context_destructor; (bso#11293). + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295). + vfs_fruit: Add option "veto_appledouble"; (bso#11305). + tstream: Make socketpair nonblocking; (bso#11312). + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313). + Group creation: Add msSFU30Name only when --nis-domain was given; (bso#11315). + tevent_fd needs to be destroyed before closing the fd; (bso#11316). + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared"; (bso#11319). + smbd/trans2: Add a useful diagnostic for files with bad encoding; (bso#11323). + Change sharesec output back to previous format; (bso#11324). + Robust mutex support broken in 1.3.5; (bso#11326). + Kerberos auth info3 should contain resource group ids available from pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info exists in PAC; (bso#11328); (bnc#912457). + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329). + tevent: Fix CID 1035381 Unchecked return value; (bso#11330). + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331). + s3: smbd: Use separate flag to track become_root()/unbecome_root() state; (bso#11339). + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342). + pidl: Make the compilation of PIDL producing the same results if the content hasn't change; (bso#11356). + winbindd: Disconnect child process if request is cancelled at main process; (bso#11358). + vfs_fruit: Check offset and length for AFP_AfpInfo read requests; (bso#11363). + docs: Overhaul the description of "smb encrypt" to include SMB3 encryption; (bso#11366). + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server(); (bso#11367). + ncacn_http: Fix GNUism; (bso#11371).- Disable rpath usage; (bnc#902421).- Make the winbind package depend on the matching libwbclient version and vice versa; (bnc#936909).- Backport changes to use resource group sids obtained from pac logon_info; (bso#11328); (bnc#912457).- Order winbind.service Before and Want nss-user-lookup target.- Remove fam-devel build-time dependency for post-6 RHEL systems.- Update to 4.2.2. + s3:smbXsrv: refactor duplicate code into smbXsrv_session_clear_and_logoff(); (bso#11182). + gencache: don't fail gencache_stabilize if there were records to delete; (bso#11260). + s3: libsmbclient: After getting attribute server, ensure main srv pointer is still valid; (bso#11186). + s4: rpc: Refactor dcesrv_alter() function into setup and send steps; (bso#11236). + s3: smbd: Incorrect file size returned in the response of "FILE_SUPERSEDE Create"; (bso#11240). + Mangled names do not work with acl_xattr; (bso#11249). + nmbd rewrites browse.dat when not required; (bso#11254). + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff; (bso#11213). + s3:smbd: Add missing tevent_req_nterror; (bso#11224). + vfs: kernel_flock and named streams; (bso#11243). + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244). + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses are used; (bso#11284). + ctdb: check for talloc_asprintf() failure; (bso#11201). + spoolss: purge the printer name cache on name change; (bso#11210); (bnc#901813). + CTDB statd-callout does not scale; (bso#11204). + vfs_fruit: also map characters below 0x20; (bso#11221). + ctdb: Coverity fix for CID 1291643; (bso#11201). + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225). + Fix terminate connection behavior for asynchronous endpoint with PUSH notification flavors; (bso#11226). + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007). + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201). + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the directory is deleted; (bso#11257). + s3:winbindd: make sure we remove pending io requests before closing client sockets; (bso#11141); (bnc#931854). + Fix panic triggered by smbd_smb2_request_notify_done() -> smbXsrv_session_find_channel() in smbd; (bso#11182). + 'sharesec' output no longer matches input format; (bso#11237). + waf: Fix systemd detection; (bso#11200). + CTDB: Fix portability issues; (bso#11202). + CTDB: Fix some IPv6-related issues; (bso#11203). + CTDB statd-callout does not scale; (bso#11204). + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you enter invalid values; (bso#11234). + libads: record service ticket endtime for sealed ldap connections; (bso#11267). + lib/util: Include DEBUG macro in internal header files before samba_util.h; (bso#11033).- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).- Remove the independently built libraries ldb, talloc, tdn, and tevent and the post-10.3 renamed libsmbclient from baselibs.conf.- Drop redundant doc attribute from man pages.- Update to 4.2.1. + s3:winbind:grent: Don't stop group enumeration when a group has no gid; (bso#8905). + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791). + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with servers that don't send the 2 unused fields; (bso#10016). + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476). + waf: Fix the build on openbsd; (bso#10476). + s3: client: "client use spnego principal = yes" code checks wrong name; (bso#10888). + spoolss: Retrieve published printer GUID if not in registry; (bso#11018). + s3: lib: libsmbclient: If reusing a server struct, check every cli->timout miliseconds if it's still valid before use; (bso#11079). + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125). + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135). + replace: Remove superfluous check for gcrypt header; (bso#11135). + Backport subunit changes; (bso#11137). + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with implementation; (bso#11140). + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143). + talloc: Version 2.1.2; (bso#11144). + Update libwbclient version to 0.12; (bso#11149). + brlock: Use 0 instead of empty initializer list; (bso#11153). + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164). + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169); (bnc#913304). + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev fails in the SMB1 case; (bso#11173). + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174). + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175). + s3: libsmbclient: Add missing talloc stackframe; (bso#11177). + s4-process_model: Do not close random fds while forking; (bso#11180). + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).- Prevent samba package updates from disabling samba kerberos printing.- Add sparse file support for samba; (fate#318424).- Purge printer name cache on spoolss SetPrinter change; (bso#11210); (bnc#901813).- Correctly retain errno from Btrfs snapshot ioctls; (bnc#923374).- Simplify libxslt build requirement and README.SUSE install. - Remove no longer required cleanup steps while populating the build root.- Remove deprecated base_rid example from idmap_rid manpage; (bso#11169); (bnc#913304).- Update to 4.2.0. + smbd: Stop using vfs_Chdir after SMB_VFS_DISCONNECT; (bso#1115). + pam_winbind: fix warn_pwd_expire implementation; (bso#9056). + nsswitch: Fix soname of linux nss_*.so.2 modules; (bso#9299). + Make 'profiles' work again; (bso#9629). + s3:smb2_server: protect against integer wrap with "smb2 max credits = 65535"; (bso#9702). + Make validate_ldb of String(Generalized-Time) accept millisecond format ".000Z"; (bso#9810). + Use -R linker flag on Solaris, not -rpath; (bso#10112). + vfs: Add glusterfs manpage; (bso#10240). + Make 'smbclient' use cached creds; (bso#10279). + pdb: Fix build issues with shared modules; (bso#10355). + s4-dns: Add support for BIND 9.10; (bso#10620). + idmap: Return the correct id type to *id_to_sid methods; (bso#10720). + printing/cups: Pack requested-attributes with IPP_TAG_KEYWORD; (bso#10808). + Don't build vfs_snapper on FreeBSD; (bso#10834). + nss_winbind: Add getgroupmembership for FreeBSD; (bso#10835). + idmap_rfc2307: Fix a crash after connection problem to DC; (bso#10837). + s3: smb2cli: query info return length check was reversed; (bso#10848). + s3: lib, s3: modules: Fix compilation on Solaris; (bso#10849). + lib: uid_wrapper: Fix setgroups and syscall detection on a system without native uid_wrapper library; (bso#10851). + winbind3: Fix pwent variable substitution; (bso#10852). + Improve samba-regedit; (bso#10859). + registry: Don't leave dangling transactions; (bso#10860). + Fix build of socket_wrapper on systems without SO_PROTOCOL; (bso#10861). + build: Do not install 'texpect' binary anymore; (bso#10862). + Fix testparm to show hidden share defaults; (bso#10864). + libcli/smb: Fix smb2cli_validate_negotiate_info with min=PROTOCOL_NT1 max=PROTOCOL_SMB2_02; (bso#10866). + Integrate CTDB into top-level Samba build; (bso#10892). + samba-tool group add: Add option '--nis-domain' and '--gid'; (bso#10895). + s3-nmbd: Fix netbios name truncation; (bso#10896). + spoolss: Fix handling of bad EnumJobs levels; (bso#10898). + Fix smbclient loops doing a directory listing against Mac OS X 10 server with a non-wildcard path; (bso#10904). + Fix print job enumeration; (bso#10905); (bnc#898031). + samba-tool: Create NIS enabled users and unixHomeDirectory attribute; (bso#10909). + Add support for SMB2 leases; (bso#10911). + btrfs: Don't leak opened directory handle; (bso#10918). + s3: nmbd: Ensure NetBIOS names are only 15 characters stored; (bso#10920). + s3:smbd: Fix file corruption using "write cache size != 0"; (bso#10921). + pdb_tdb: Fix a TALLOC/SAFE_FREE mixup; (bso#10932). + s3-keytab: fix keytab array NULL termination; (bso#10933). + s3:passdb: fix logic in pdb_set_pw_history(); (bso#10940). + Cleanup add_string_to_array and usage; (bso#10942). + dbwrap_ctdb: Pass on mutex flags to tdb_open; (bso#10942). + Fix RootDSE search with extended dn control; (bso#10949). + Fix 'samba-tool dns serverinfo ' for IPv6; (bso#10952). + libcli/smb: only force signing of smb2 session setups when binding a new session; (bso#10958). + s3-smbclient: Return success if we listed the shares; (bso#10960). + s3-smbstatus: Fix exit code of profile output; (bso#10961). + socket_wrapper: Add missing prototype check for eventfd; (bso#10965). + libcli: SMB2: Pure SMB2-only negprot fix to make us behave as a Windows client does; (bso#10966). + vfs_streams_xattr: Check stream type; (bso#10971). + s3: smbd: Fix *allocate* calls to follow POSIX error return convention; (bso#10982). + vfs_fruit: Add support for AAPL; (bso#10983). + Fix spoolss IDL response marshalling when returning error without clearing info; (bso#10984). + dsdb-samldb: Check for extended access rights before we allow changes to userAccountControl; (bso#10993); CVE-2014-8143; (boo#914279). + Fix IPv6 support in CTDB; (bso#10996). + ctdb-daemon: Use correct tdb flags when enabling robust mutex support; (bso#11000). + vfs_streams_xattr: Add missing call to SMB_VFS_NEXT_CONNECT; (bso#11005). + s3-util: Fix authentication with long hostnames; (bso#11008). + ctdb-build: Fix build without xsltproc; (bso#11014). + packaging: Include CTDB man pages in the tarball; (bso#11014). + pdb_get_trusteddom_pw() fails with non valid UTF16 random passwords; (bso#11016). + Make Sharepoint search show user documents; (bso#11022). + nss_wrapper: check for nss.h; (bso#11026). + Enable mutexes in gencache_notrans.tdb; (bso#11032). + tdb_wrap: Make mutexes easier to use; (bso#11032). + lib/util: Avoid collision which alread defined consumer DEBUG macro; (bso#11033). + winbind: Retry after SESSION_EXPIRED error in ping-dc; (bso#11034). + s3-libads: Fix a possible segfault in kerberos_fetch_pac(); (bso#11037). + vfs_fruit: Fix base_fsp name conversion; (bso#11039). + vfs_fruit: mmap under FreeBSD needs PROT_READ; (bso#11040). + Fix authentication using Kerberos (not AD); (bso#11044). + net: Fix sam addgroupmem; (bso#11051). + vfs_snapper: Correctly handles multi-byte DBus strings; (bso#11055); (bnc#913238). + cli_connect_nb_send: Don't segfault on host == NULL; (bso#11058). + utils: Fix 'net time' segfault; (bso#11058). + libsmb: Provide authinfo domain for encrypted session referrals; (bso#11059). + s3-pam_smbpass: Fix memory leak in pam_sm_authenticate(); (bso#11066). + vfs_glusterfs: Add comments to the pipe(2) code; (bso#11069). + vfs/glusterfs: Change xattr key to match gluster key; (bso#11069). + vfs_glusterfs: Implement AIO support; (bso#11069). + s3-vfs: Fix developer build of vfs_ceph module; (bso#11070). + s3: netlogon: Ensure we don't call talloc_free on an uninitialized pointer; (bso#11077); CVE-2015-0240; (bnc#917376). + vfs: Add a brief vfs_ceph manpage; (bso#11088). + s3: smbclient: Allinfo leaves the file handle open; (bso#11094). + Fix Win8.1 Credentials Manager issue after KB2992611 on Samba domain; (bso#11097). + debug: Set close-on-exec for the main log file FD; (bso#11100). + s3: smbd: leases - losen paranoia check. Stat opens can grant leases; (bso#11102). + s3: smbd: SMB2 close. If a file has delete on close, store the return info before deleting; (bso#11104). + doc:man:vfs_glusterfs: improve the configuration section; (bso#11117). + snprintf: Try to support %j; (bso#11119). + ctdb-io: Do not use sys_write to write to client sockets; (bso#11124). + doc-xml: Add 'sharesec' reference to 'access based share enum'; (bso#11127).- Update to 4.2.0rc5. + Ensure we don't call talloc_free on an uninitialized pointer; CVE-2015-0240; (bso#11077); (bnc#917376).- Fix usage of freed memory on server exit; (bso#11218); (bnc#919309).- Fix tdb_store_flag_to_ntdb() gcc5 build failure.- Fix vfs_snapper DBus string handling; (bso#11055); (bnc#913238).- Update to 4.1.16. + dsdb-samldb: Check for extended access rights before we allow changes to userAccountControl; (bso#10993); CVE-2014-8143; (boo#914279).- Adjust baselibs.conf due to libpdb0 package rename to libsamba-passdb0.- Fix libsmbclient DFS referral handling. + Reuse connections derived from DFS referrals; (bso#10123); (fate#316512). + Set domain/workgroup based on authentication callback value; (bso#11059).- Update to 4.2.0rc4. - Add libsamba-debug, libsocket-blocking, libsamba-cluster-support, and libhttp to the libs package; (boo#913547). - Rename libpdb packages to libsamba-passdb. - Drop libsmbsharemodes packages.- Enable avahi support on post-12.2 systems.- Update to 4.1.15. + pam_winbind: Fix warn_pwd_expire implementation; (bso#9056). + nsswitch: Fix soname of linux nss_*.so.2 modules; (bso#9299). + Fix profiles tool; (bso#9629). + s3-lib: Do not require a password with --use-ccache; (bso#10279). + s4:dsdb/rootdse: Expand extended dn values with the AS_SYSTEM control; (bso#10949). + s4-rpc: dnsserver: Fix enumeration of IPv4 and IPv6 addresses; (bso#10952). + s3:smb2_server: Allow reauthentication without signing; (bso#10958). + s3-smbclient: Return success if we listed the shares; (bso#10960). + s3-smbstatus: Fix exit code of profile output; (bso#10961). + libcli: SMB2: Pure SMB2-only negprot fix to make us behave as a Windows client does; (bso#10966). + s3: smbd/modules: Fix *allocate* calls to follow POSIX error return convention; (bso#10982). + Fix 'domain join' by adding 'drsuapi.DsBindInfoFallBack' attribute 'supported_extensions'; (bso#11006). + idl:drsuapi: Manage all possible lengths of drsuapi_DsBindInfo; (bso#11006). + winbind: Retry LogonControl RPC in ping-dc after session expiration; (bso#11034).- yast2-samba-client should be able to specify osName and osVer on AD domain join; (bnc#873922).- Lookup FSRVP share snums at runtime rather than storing them persistently; (bnc#908627).- Specify soft dependency for network-online.target in Winbind systemd service file; (bnc#889175).- Fix spoolss error response marshalling; (bso#10984).- Update to 4.1.14. + pidl/wscript: Remove --with-perl-* options; revert buildtools/wafadmin/ Tools/perl.py back to upstream state; (bso#10472). + s4-dns: Add support for BIND 9.10; (bso#10620). + nmbd fails to accept "--piddir" option; (bso#10711). + nss_winbind: Add getgroupmembership for FreeBSD; (bso#10835). + S3: source3/smbd/process.c::srv_send_smb() returns true on the error path; (bso#10880). + vfs_glusterfs: Remove "integer fd" code and store the glfs pointers; (bso#10889). + s3-nmbd: Fix netbios name truncation; (bso#10896). + spoolss: Fix handling of bad EnumJobs levels; (bso#10898). + s3: libsmbclient-smb2. MacOSX 10 SMB2 server doesn't set STATUS_NO_MORE_FILES when handed a non-wildcard path; (bso#10904). + spoolss: Fix jobid in level 3 EnumJobs response; (bso#10905). + s3: nmbd: Ensure NetBIOS names are only 15 characters stored; (bso#10920). + s3:smbd: Fix file corruption using "write cache size != 0"; (bso#10921). + pdb_tdb: Fix a TALLOC/SAFE_FREE mixup; (bso#10932). + s3-keytab: Fix keytab array NULL termination; (bso#10933). + Cleanup add_string_to_array and usage; (bso#10942).- Remove and cleanup shares and registry state associated with externally deleted snaphots exposed as shadow copies; (bnc#876312).- Use the upstream tar ball, as signature verification is now able to handle compressed archives.- Fix leak when closing file descriptor returned from dirfd; (bso#10918).- Fix spoolss EnumJobs and GetJob responses; (bso#10905); (bnc#898031). + Fix handling of bad EnumJobs levels; (bso#10898).- Remove dependency on gpg-offline as signature checking is implemented in the source validator.- Update to 4.1.13. + s3-libnet: Add libnet_join_get_machine_spns(); (bso#9984). + s3-libnet: Make sure we do not overwrite precreated SPNs; (bso#9984). + s3-libads: Add all machine account principals to the keytab; (bso#9985). + s3: winbindd: Old NT Domain code sets struct winbind_domain->alt_name to be NULL. Ensure this is safe with modern AD-DCs; (bso#10717). + Fix unstrcpy; (bso#10735). + pthreadpool: Slightly serialize jobs; (bso#10779). + s3: smbd: streams - Ensure share mode validation ignores internal opens (op_mid == 0); (bso#10797). + s3: smbd:open_file: Open logic fix; Use a more natural check; (bso#10809). + vfs_media_harmony: Fix a crash bug; (bso#10813). + docs: Mention incompatibility between kernel oplocks and streams_xattr; (bso#10814). + nmbd: Send waiting status to systemd; (bso#10816). + libcli: Fix a segfault calling smbXcli_req_set_pending() on NULL; (bso#10817). + nsswitch: Skip groups we were not able to map; (bso#10824). + s3-winbindd: Use correct realm for trusted domains in idmap child; (bso#10826). + s3: nmbd: Ensure the main nmbd process doesn't create zombies; (bso#10830). + s3: lib: Signal handling - ensure smbrun and change password code save and restore existing SIGCHLD handlers; (bso#10831). + idmap_rfc2307: Fix a crash after connection problem to DC; (bso#10837). + s3-winbindd: Do not use domain SID from LookupSids for Sids2UnixIDs call; (bso#10838). + s3: smb2cli: Query info return length check was reversed; (bso#10848). + registry: Don't leave dangling transactions; (bso#10860).- Update to 4.2.0rc2./sbin/ldconfig/sbin/ldconfiglibdcerpc-binding0libdcerpc0libndr-krb5pac0libndr-nbt0libndr-standard0libndr0libndr1libndr2libnetapi0libsamba-credentials0libsamba-credentials1libsamba-errors0libsamba-hostconfig0libsamba-passdb0libsamba-util0libsamdb0libsmbclient0libsmbconf0libsmbldap0libsmbldap2libtevent-util0libwbclient0ibs-power9-11 1712055937  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstu4.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e62-150500.3.23.74.17.12+git.462.df636292e62-150500.3.23.74.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e62libdcerpc-binding.so.0libdcerpc-binding.so.0.0.1libdcerpc-server-core.so.0libdcerpc-server-core.so.0.0.1libdcerpc.so.0libdcerpc.so.0.0.1libndr-krb5pac.so.0libndr-krb5pac.so.0.0.1libndr-nbt.so.0libndr-nbt.so.0.0.1libndr-standard.so.0libndr-standard.so.0.0.1libndr.so.3libndr.so.3.0.0libnetapi.so.1libnetapi.so.1.0.0libsamba-credentials.so.1libsamba-credentials.so.1.0.0libsamba-errors.so.1libsamba-errors.so.1.0.0libsamba-hostconfig.so.0libsamba-hostconfig.so.0.0.1libsamba-passdb.so.0libsamba-passdb.so.0.28.0libsamba-util.so.0libsamba-util.so.0.0.1libsamdb.so.0libsamdb.so.0.0.1libsmbclient.so.0libsmbclient.so.0.7.0libsmbconf.so.0libsmbconf.so.0.0.1libsmbldap.so.2libsmbldap.so.2.1.0libtevent-util.so.0libtevent-util.so.0.0.1libwbclient.so.0libwbclient.so.0.15libCHARSET3-samba4.solibMESSAGING-SEND-samba4.solibMESSAGING-samba4.solibaddns-samba4.solibads-samba4.solibasn1util-samba4.solibauth-samba4.solibauthkrb5-samba4.solibcli-cldap-samba4.solibcli-ldap-common-samba4.solibcli-ldap-samba4.solibcli-nbt-samba4.solibcli-smb-common-samba4.solibcli-spoolss-samba4.solibcliauth-samba4.solibclidns-samba4.solibcluster-samba4.solibcmdline-contexts-samba4.solibcmdline-samba4.solibcommon-auth-samba4.solibdbwrap-samba4.solibdcerpc-pkt-auth-samba4.solibdcerpc-samba-samba4.solibdcerpc-samba4.solibevents-samba4.solibflag-mapping-samba4.solibgenrand-samba4.solibgensec-samba4.solibgpo-samba4.solibgse-samba4.solibhttp-samba4.solibinterfaces-samba4.solibiov-buf-samba4.solibkrb5samba-samba4.solibldbsamba-samba4.soliblibcli-lsa3-samba4.soliblibcli-netlogon3-samba4.soliblibsmb-samba4.solibmessages-dgm-samba4.solibmessages-util-samba4.solibmscat-samba4.solibmsghdr-samba4.solibmsrpc3-samba4.solibndr-samba-samba4.solibndr-samba4.solibnet-keytab-samba4.solibnetif-samba4.solibnpa-tstream-samba4.solibprinting-migrate-samba4.solibregistry-samba4.solibreplace-samba4.solibsamba-cluster-support-samba4.solibsamba-debug-samba4.solibsamba-modules-samba4.solibsamba-security-samba4.solibsamba-sockets-samba4.solibsamba3-util-samba4.solibsamdb-common-samba4.solibsecrets3-samba4.solibserver-id-db-samba4.solibserver-role-samba4.solibsmb-transport-samba4.solibsmbclient-raw-samba4.solibsmbd-base-samba4.solibsmbd-shim-samba4.solibsmbldaphelper-samba4.solibsocket-blocking-samba4.solibsys-rw-samba4.solibtalloc-report-printf-samba4.solibtdb-wrap-samba4.solibtime-basic-samba4.solibtrusts-util-samba4.solibutil-reg-samba4.solibutil-setid-samba4.solibutil-tdb-samba4.sopdbldapsam.sosmbpasswd.sotdbsam.so/usr/lib64//usr/lib64/samba//usr/lib64/samba/pdb/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:33120/SUSE_SLE-15-SP5_Update/9fb38d651a0568fadf222f60409c3f15-samba.SUSE_SLE-15-SP5_Updatedrpmxz5ppc64le-suse-linux  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=536c1040747aead92ef4e935b51d60a24378f389, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=a0dae680a6f11dbc245cddb17096877e1811f663, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=908e01cc513b1cf916b09f34cd53cdd536e2162a, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=5d64798e3134b62a3b61631ca55c2f37f7a1d3b0, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=ed28c5ff8b939a48d243052eedf14bc459d6fcbd, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=6e335a1ade714687cd4c7075b23dcb57b0049622, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=74ef72d3f598ae7c8e7f36e5c5bed7421c890892, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=d64da837c13afb13d83efb12caebb74444f95885, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=bf158a5d74df05d29e2da630701f0cdb9723e5ea, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=b6811f5eaeb3508038a55b86cb22f0870043f2c9, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=359e49c30a18a63bd47414f4c93e8ad1e9d8ff97, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=cfb83d7b323f457305a0f5755bf9b91b6f923fbc, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=1b3913b7164295ffaaa1f5123717b524d1e1004d, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=391f62a2e4a7a4c393408c042244f2ab5fccfaa7, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=64dac58e65e2ad3456cbbc8f5fa4ad118922f42b, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=2e57eab02a2e7918fa35dfa2bee7d2dab14340e2, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=8301af2b5a8c35b5b4cd0e6020c595bf3d92ae2b, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=3ae09dfa73aa69a03ae6c491b4fe5821e0a0a677, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=e3de5ce45e126f70de7e5761c61497dd68fa3e15, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=e5daf8bd00c789759e3723581cc4891968369738, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=d59efed97b492867b0300a42ca8872eb831dba37, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=eeeea071b49bc1088c2a0ad76ed2426b750423d2, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=4b27968a5635aa60c9405dadb4ed0c3fad4ed207, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=4acd44c68ba346a83aa040d759e8d86f152c2f71, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=c596cf5e6e1e972c33580a7ff1731f29961857d1, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=62a3c4e064debd02239f8b04685a6bae2ca7ce4d, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=a6e229ab8256cdff2fbae5348b0619e9cd7713c0, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=ccca6832d40690f3c435ccf25147f7c333037d85, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=ba69b95e90fc6cf4dccc2c48ea55a33ee56eabb3, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=ce3c53151bda38059a26326cccbdf6e5bccef7ac, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=e07681ed55b5726f488483c95f74cb8252708234, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=eda8225c7d239508ef7da28c41b2afc921cbbc4b, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=e2bf49ccf72c473090b0f01d8ca9984ffa461188, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=2732e7c4c41bf53c40f02293c545d418f467529a, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=d3334b1e7895b6639c4d1b08e037f7e1a22b9a82, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=920df62e4e4cfe359c5f89cdd8bb5c404ca7717b, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=c3a362dfcac2530b615276b9576bc57375fdf217, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=1b002363b4ae7bade58a67a19d7d616664c20ad9, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=9f43d297a99784781dc9176f6493daf710d0bbb6, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=2375ac42496471c60552024f74deaba4e769d754, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=c05233c638911eb077530ddbffd9508eb3985ef1, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=5baf106ea271670a0573f12968c4b5f7ee91e130, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=7817e9f311388d6dff8fc94d81ec5974c1cca179, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=2e33b1c04839eb2321d35119050e5fecffc0f33b, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=0ad1b52fc9c7d23f730d6f326ce69fcef3e8ed1b, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=ed41d10661a2896197a5296c165390b89646f800, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=fc48a0e60ab1c4102065e4dfdff67dc2f2bf0565, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=98a717aa44ac2f540a4abeff64c3358d5101e8cf, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=7f1fbf5d91944fdb06509068b026c826e6d41472, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=18d135ea59a9bab18bcb6cc5ff0c5baa510acb5b, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=e80619a4861d8bb22d4c7329a194cfbfa5434842, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=b90bc66f4d738ef7b1b52c37daf1c2d54a52c35a, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=3d4863a751ad0801c1aa198ad0f851554122ce80, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=35aa28e476f5c7ca730b4644b990694c3ee9834c, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=0ee41f54b84b60d9f20ef24260674790e4b2058e, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=90e877750e49d34d9daaa2f04689825dbb0e55df, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=d360b0e8314a99af9ffc45305fa7557e048a9990, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=26f32c61b2717aa7b076aba9eebeac3f770e987a, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=8cc0655b842c1b3b8f2f35c9eefef16379a8fcbc, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=30b0bb6e721e67e4156a8c76fe23f029dbb1f774, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=16ee1a1a66b44316b293f06c0708890542d3b5a3, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=60a72f662dfec408eb3defda6378d43fb46e5ed6, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=875e9d74b00c7f2b1ddaeba12cbed9927dbb4d85, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=73e06ef562c7df994a346db53325c3c6675fae98, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=56b9ca6a2ae17433c590d5a42abee13cef82e784, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=21f646a463ddab1d7e9ac7c694deb6e29a104cb8, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=cdf73b0f91fd133abba9f5ca887bc6dd0b75f3fd, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=a777bd04be10bbf87543c4a6b69930180d623e9f, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=fa5c9f954f32a56e6973ae7f2023492c3d04693e, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=2ec82e26c90d203cb2b55f9183744d3a4f3a2bb4, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=544811b5ce9cd4509d396926daa9d12f6f5c71c0, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=a3f7fc35d30d0e49277c7f41342cbd7dc881b243, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=b75eb04ee08a5d056f7f6371f854ad2930f02f0a, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=87aaccd3ae26607effa3b9dc57747d1584a796f6, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=eaa035c8c6e93f20afe2b49cd1186df4d83a649e, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=fceb44a2592c3c9444124e7447ccebe45e109cfa, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=092499785cfdcceafccf4d748ca996c44dc49aff, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=374621f72b85d5496562c2103d0ed32924709d0f, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=ebd02d70f17307cc2f4bdf812878c685c0dd8361, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=e6da561e42fd9a2a2f27571fa6070d50728b5678, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=9024d3172976421ac2443c4ab90ec61ef09f6e09, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=e26e7d4d03a405ab4c0a53f044fbba7b3535af62, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=8c6f763e42fcc2ba1ae92e3ef7ca3ebf7feeba2e, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=27f45323d9b7fba699bf9cdd73bd79e5e4b18c53, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=616ea698703b54b29c419bd8aa629091d9bb66f5, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=eab7c29137a39fa70a29a33f1beb4655698709d2, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=ade6cfd95a08380adb3935a6e8f028bc5aaf5b48, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=0a47bbdd526d2730e25e6f8a28cc9adb4816113b, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=55e5ea08ffa2c993d433470cdd35d11c86391944, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=6216a616246b0a4e3e98b84c20ab48de40a3969d, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=5832dd6420cea376d3ac18a9dee84840d0ad11ef, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=156f0cbda5f5846a3f94eea1655167f531bbbcf1, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=90c597c2fe7bf5c677f0518393765a86241cdcb0, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=82efdd2ea14a2124444d3b94c823dcd0c7fefb4f, strippeddirectoryELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=7e87c7f303967aa1480d9454fcdcadd7b977114d, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=e766da3d5f6edc0d4fdfd11127d0f5ee9ad7b014, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=3a04d40b4756f6c4689689d2da804f42bf0b881b, strippedF1`h\:X3J|%-E_}'a~=[aqw <^ 2 ` n t / 3 K O U [ g k '@3C/D0J\  )9G)$2+$  ;&: , :F "&2..| # P+P*RR?RRRRRRRRRRRRRRRR~RRRRRRR>RRRRP4P3R;RRR?RRRRRAR5RRRRyR3RRRRRR~R4R2RRRR@RRR>RRxRRR:RRP6P5RRRRRyR R}RRR(R5RRRRR$RRRARRLR?RRRRRRwRR7RRR3R~R4R2RRRxRR#RRRR'RRvRRKR@R6RRRR|RR>RRRRRP_P^RRR}RRRRRRR~RR|RRRPbPaRRRRRRRRR~RRRRRPiPhRRRRRRRRRRRRR~RRRRRPlPmPmPnPnPoPoPpPpPqPqPrPrPsPsPtPtPuPuPvPvPwPwPxPxPyPyPzPzP{P{P|P|P}P}P~PkRR?RRRRRRRRRR>RRPPRR$R=RRRiRHRRRCRERRgR{RRR}RRRR(R?RkRRsRRRRRRRRR7R~RhRRRRRRrRR6RRRR'RfRRRR#RRRBRPPR?RRCRRRRRR1RRRReRJRZRVRRRR(RRTR~RRdR0RRRRURRRRR'RR>RRSR-RRIRBRYRPPRRRRRRPPRRR?RRRRRRRCRRRRRRRR>RRRRBRPPPPPPPPPPPPPPPPPRRRRRRR?RRyRRRRRRRRRRRR(RR1RRRRRRRRR'RRR~R0RRRRRRxR>RRRRRRRRPPR;RRR?RRRRRRRRCRRR>RRRRRRRRR:RBRRPPR?RRJRRRRR,RRR(RVRRRZRRR1RTReRRRR~RRdRRRURRRRRRR'R0RR>R+RSRRIRYRRPPPPPPPPPPPPPPPPPPPPPPPPPRR}RRHRRRRRRRRR$RRR7R?RsRgRRRRkRRR~RjRfRRrRRRRRGR#R6RRRR|RRR>RRRRRPPRRRR;RoRmRRRRRRRNRRR?RRRRRRRRRRRRPRRRRRRRRRRRRRRRRR1RRRRRRRR~RRnRRR0RRRRRRRORRlRMRRRRRRRRRRR>RRRXRRRRRWR:RRPPPPPPPRRR?RRRRRRRRRR>RRRRRXRWRRRPPRRRRRRRRRRRPPPPPPPPPPPPPR;RR:RPPRRR?RRRRR>RRPPRRR?RRoRRRmRlRnRR>RRRRPPRoRmRRRRR?R3RRRRRRRRRR{RRR~RnRRzRRRRR2RRR>RRRlRRRRPPRRRRR?RRRRRRRR*RJRR~RR)RRR>RRRRRRIRP PRRRRRR}R RR?RRRTRwRRRkRRARRRRRRVRHRR~RRjRvRRRRRUR RRRRRGR@RR|RRR>RRXRRSR-RRWRP P R?RRRRRRRR>RRRP P RRRRRR RgRRRHR?RiRRRRRRRR/RARuRRRRR(RRRRRRRRR~RhRR.R'RfRRRRRRRRRRR@RRRRRRGRR>RRRtRRRRRRPPRRRRRR?R/RuRRRRRVRRRJRRTRRCR~R.RRURRRRtRRR>RRSRQR-RRRIRBRPPRZRRRRRRRRRRRRwRRRRRRRvRRRRR~RRRRRRRYRRPPRRZRRRRRRRRRR~RRRRRRRRYRPPRZRwRRRRRRR RRRARRRRRRRRR"RRRRRR RR!RR@RRRRRRRvRRRRRRRRYRRPPRRRRRRRRRwRRR~RRvRRRRRRRRPPRARRRR?RRRRRDRCRRPRRRRRRRRRRR~RRRR@RRORRRR>RRRRRRBRPPRARRRRR}RRRRR7RRRRR@R6RR~RRRRRRR|RRPPRRRR?RRRCRyRRRRRRRRR1R~RRR0RRxRRRRRR>RRRRBRPPRRRR?RRRRRRRwRRRvRR~RR>RRRRP!P R1RRRRRRR0RRP#P"RRRRRRP%P$RRR?RRRRRRRRRRRRRRR>RRRRP'P&RRRRRRRyRRRRRRRRRRxRRR~RRRRP)P(RRR?RRRRRRRRRRRRRRRRRRR>RRRRRRP.P-RRRRAR3RR@R2RR~RRP0P/RyRRRRR}R3RRR~R2R|RxRRRRP2P1R{RRRRRR3RzR~R2RRRRP9P8RRRRRRP;P:RRRRP=PRRRRVRRRR?RRRRRCRRR/RRRJR(RRRRRRyRRRRRRRRRRxRRRRRRR'R~R.RURRR>RR-RRRIRBRRPAP@RRRHRRRRRRkRRRRRRRRRRRRRRR~RRRRjRRRGRRRRRPCPBRwRRARR?RRRR RRRRRRJRVRRRR"RRRRRRRTR~RvRRRUR RRRR@RRRRRRRRRR>R!RXRRSR-RRRIRPEPDRR*RRRRRRRRRARRRR@R)RRRRRRRRRRRPGPFRRRRRRRRRRPIPHRRRRPKPJRRRRRRRRRTRJRRRRRSRQR-RRIRPMPLRRwR?RRRRRRRRRR_RcR^RaR[R`RZRyRRRRRR~RRRRxRRRR>RRRvRRRRYRPOPNRRRRRR7RRRR6RRRRRRPQPPR?RR(R}R$RRRRsRRRRRRRRRrRR'RRRRR|RR>R#RRPSPRRVRRRRCR?RRRR(RRHRARRRRRR$RRRRRRRRRRRR~RRRGRUR#RRR@RR'RRRRRRR>RRRR-RRRBRPUPTRRRRRR?RqRRRRRRRPRRR>RpRRRRRORRRRRPWPVRRRRPYPXRRRRRCRRRRRRRRBRP[PZRPRRORP]P\RHRR/RRRR}R?R1RRRRRRRR$RRRRRR(RRRRARkRyRR7R3RRRRR~R2RjR0RRRGRxRRRR'RRRR|R@R6RRR#RRR>RRR.RRRRRPePdRRRR}RRRRwRRRRRRRR~RR|RvRRRRRRRPgPfRuRRRRRRyRR}RwRRRRRRRRRR~R|RvRtRRxRRRRRPPR?RVRRRHRRRRRTRURRRGRR>RRRSR-RPPRRRRNRRRRMRRRRRRPPRRRRR?RRRRRRRyRRRxRRRRR~RR>RRRRPPRRRRRRR&RRRR7R}RRRyRR%RR6RxRR~RRRRRRR|RRRPPR9RRRRReR?RRR}R7RRRRRZRRRRdRR8R6RR~RRRR>RRR|RRRYRPPRRPPRRRRRRRRRRRRRRRRRPPRRRRRR;RRRRR:RRRPPRRR;RRRRRRR:RRPPR?RRRRRRRRRRR~RRRR>RRPPRNRRPRR?RwRRRRRRRRRRRMRvRRRORR>RRRRPPRRR?R;RRRRRRRRRR>RRRR:RRPPRRRRRR?RRR=RRRyRRR\R]RbR[RZRRRRRRRRRRRRRRRYRRPPRRR1RRR?RRVRRTRRRRRR(R}RRRRRRR~R0RRRURRRR'RRRRR>RR|RRRSR-RPPRRRRRRRRRRRRPPRRRRPPRPRRRRRRRRRRRORRRPPRRRRRR?RCR(RRRRRRARRwRRRRRRR$R~RRvRRRRR#RRR@RRR'RR>RRRBRRPPRR(RVR{RPR?R/RRgRRRR&RRRsRRRRRARRRFRCR1RRRRRR}RmRRyRRRRRRRRRHR7RRRRR RR$RkRRRoRRRRRRRRRRRR~RnR%RjRR0RRRxRURRlRRRRRRRRRORrRRRRR@R6RRGR#R'RRR|R>RRRRRzRRR.RfRR-RRRR RRBRRPPRRPPRRRRRRRRRRRRRRRRRRRRRXRPPRRPPRPRRORPPRRRRPPRRRRRRRRRRPPRRPPRRRR?RRRRsRRRR3RRRRrRRRRR2RRRR>RRRPPRRRR~RRPPRRPPRRRRRRRRRR?R(RRRRRRRRRRRRRRRR'RRRRRRR>RRRRRXRWRRR?RRRRRRRRRRRRRRR>RRRRRRRRRRRRRR?RRRRRRRRR1RR0RRRRRRRR>RRRRRR|#aI8&uutf-8ae5ff2208c75398c18c7038729ff4ac89777d43468e50eb02a1f7e5e85bc7340?7zXZ !t/ ]"k%~2_e#ȄjkElnCӕdueY5SdC"J97_%5y?UW {+ ږ~\_7/sQ'aM(ˌzwKǏR^i|G.1Еsnꉨ#kR9Dũ_41ttMO[HJ}S --+E5$g5D,p^h=.&畊gUAi`"Jf?QrK7g  micTgETBDر&ZW8Ia9c%Lf:H\Q^EoX?Su'Hn)x |;p+O*>8=} )0 vL.dOJ\ₗ-Dq i݈{$3-b J=AGLBxu5oPp9cTM%$fB'!ZPk^זjyG!pSl^BTU٣+]j2;3ĨW̐ ,iz$< }e=`TXoJ!5_-=D 0+a_,ηiRkiW%oXS=S)vm5*Q!k-4}2 a"( WfI@{ݣd]T9bdxuI}Lj&Ɔl,ڧg?l$6ts8t79ꮣLmB=[AmiP.˹^iNq1=u=+2S4K8Uba tΑ/mG:~ Y ޵Q(o[/Q;@"ӽ3[Zʖ/ %>wCYRoqO=?,r:=qҺ \䉚j*WT\n9e7`h|70} _m8u$; }tqّhl-9&4ou7Sz|~ Im'm^P:4"t^bN`>9- M6|7)K:zШhzd>љs<ʽ\h!%3?*;?-$\U+@/"l hpuٿu 'N`+9-V$AdgXtݦ(;H :l3AM{tGc )Y^  P*0(A S9TM( V7p6blsr|Ґ5KGpS5IQ;Fuby`{F4V=jf'JcnW{Sj`X mQ}ޢz8n8 . ׌q=22ȅ`;=Ef1aע n]vitA11FD {%]s#}[{;=V}j!0Zi|.mem̟9XYf~=,.6k3m;;9/ԤI:U"=*%$G&ݚ;BJ5YeҹjNBNL ?ѫyfgHץ&77rqD3ٌsI5nϸE5f@qYf&rzbi]m#CZ52p4RR@k?Nŵ2`kE_pL wDF_7޿_13r}hwUց-h AB F!}x!dݿepn:2aL2t'HE}2hcob}nV4JɈ \2Lo3Sxߵ7?Z*?W[H+hlĀzGihm;ƊS  0z*:S_8@J "`;E!X/Ra+yr]ҁs& KQ.k9rK؇!"q8t«gbHuԉ3 {cHWNSԩֳH (d+ e' e!t` Ǟ,Jy}d{30ۋw >%WP`AO0a3̲bE^ʅX!*2i:ʤNZ[`խ z!~_!t!;gSRthnȞQØ"USw_'BDps5*zdג,B ԓ5w_)]B2ЌRZl4l ܫm!0} uC84 [[WL?*grɩ^f_qfȆE?ʝ$Օj<qj Tx VJnSt_[AKE5,!:%x#juM/(/|Nb 0{DL#(h3Ȉee"[Zd7cD9bn K+Z]n\GȂd׃b^`lrQqM) *s.6krRі:c{J Co \h!BiuACȝz-8-gËOl̙$ckyS;aso\}`HY713)$xmw^pH:O KLQҽ(qh n3Y[D]#ggZ9 Ѹh<\'6qɩ%<;ûpE=7nvy^v4=G1Pxn <$UW- l ojL2Xܣ+EkDݪi#gx Tj8{D+1ޒ;w5Z#3}f3qT߽E?j#ztm'YMM2=)$4\~>s\Iˎf5߅'L.qV yF j/j LZI}) -;Bׄ|4BM7"]\I*C,K0JZc ."|P١7KX pag½޸ jdĨrjYZ 0 M]Z1_> L-8S猢%!d/}:@d DۦiGqM ʉ43șN3.-$4= `an͈= I4J::Ś_P+ N;aWU44u'w9},Esڒ{e6.G<A1]HI]+aiE:DJyW-0ܬ^AU4oʂuGǃQ4: `Tn \"!ʈ2,;,T*~ֆ7is6^2)4 &.#w(9<Ja w 8.#^u)CMW&?u#."@z#pzJ|<1䙞>({ t6A(lMfe0[!G%gv;Q[$X-ܫ=MWp}_-쥝C nG͹6$|hl8Vq¿1blQ[BILkGgk| @:0~KC!_xjen[JrAK}f1ƣ>[vTeJxN}!dV,/e'&s8KK#bѢb.EfnuEƐ ~#>H5-ƃf Z,=x5],.uՀ`mYq7t K1wv'pH;:i+5Y {C^Xe| Esgx'QEřJ:Fci&Áp >J;plmu'fkPۿGhoGEFS uܫOmV&2dm&>XΫt#9mdQX8N>7ԑ7"> %B81%K r!c]X'\lqj,Ot3a}zS1[:`6&CF}$q. _LYx2kMuy[ddG}=GI;#jP[֯aٲ(#9S,L(j DPJb"dsve˹jH3.pѺ\rnqkO;5Zme/|cN>2 \Ǐ?y|%>7{*j< Obd q ~ BIgrI O~ʬF23C8|Q]$ 5UowLb.1qm8A 5q—𖦑TџWԶL(Z}𠦻̣Yֈ>_"/RYڏPAWs9[;z*ȱ E`~\~yIs)*zfJO0AbfЫU] *Bͨ-ˀIɰ3rÙd "ӿ#ncB#L/Q5g`$ZLUUnMU7ⴚi;@lB6r ,XЋ<TّW[j|3ş=Cr4f^V'YDɈìwSHIw}cN1\m_(C>SVm!ng1.$sx~:%YJIIdpR|m|tFAU?8($WX*"ⓕCjb6UXOENS8k~``9ܿXYvu1&C CPKsp#7@1=w"3 )RTl`M|fq>=掦eoƚ૽V+@[)}'@qrB xq ֵ)ԅ㇇3D.֤APR$Z|ɏ^ v׊?"Nʽ?&3 q6O^V( 4]B*nfc}(*x'KY\T`'bх.7o]%91=8xnֳ zl}jg(n'1w{4_.5no(t"300/)?4;#?'P3cC%I> dӫ8i+!LR n|+QwUo* ŀ|9<";ZS#r wy|3G-$rn:rFrbΫKܐJh (d=y]P4/UPS$-hV1q sUv8嶝CMb)N k[ir72erTW rA:A8zh_?݅SPAlG,YQ@ÎeS']mU͎ H)=ɍG(;Õx[ڟKn3-mfbt5#{a_w;GhAS[ӯMޝ̅3 19+>ؕ$OL3M ;s>`K7Amބ`#$Ā ]# kw2{ԘKbXi\ H.4ی4BL@ʌg_`eҐ:uo`L@BrIҩ d?v!Kfo 6Yy1|Iؙ=terqt]fD}g2ϑ;؝HH713әqX0gF˟Uj.= Ib~&ޢEME.}TQ(L N7Y}H\Hi2IEҝTܛ-LC4\x[dtMt#sŀDdRa\g>zA]~*T3zdk(^ f?u's(St֯oۀ5 ^S<:o!@kԂoD[!:Ӵm({4a!5Vq4DNrJvZÌ.h+?XTA+HԴ2Dފ$S1_9V8œ)-LG@D K6{m~l_3[a܋P1oq۳l܆kC?nŕ : U:ԇ%Xr?- Ty'lm4k`1Α@d-&ܧT I)ML§ F. BrӺuYSKX AFubV TQg]Q,mbYni-͛IwV9< m(G9YTOhg8-R)ӻSW~30D>=BD<%gB"P| 'I)#S賡ΙaҒ;=7+-kux\U,9VT$!Ex悰+ʓH |FIQ\2?TݙEARvfo 3XO>9{;K=,L3WFuj/ %l@a[6QNnyfYF1>7uӳz9=G}_| " JOh2Z8_xGH#v/ fs nu<_0)ѣ fI A]*GK+u!Qy/r"ֶ]ۑRpZFF4E6JVʥ;%sCަ#(+Ya9cB#}[ V,ք -EsG<6,)? n{Aߵ*}u9GsYGMp[vt+yXEǃyؙÐL:z>VVK^~ /ܺ9cd2G^KwРIubp@Z] Ui;%@B15ϡX58LWɘqG5à0,S? ai\'z /mTv) %v\N 1*`qi-Xģs (`R(YUSFpC}.IX UcϚ+(hȈuTong:קx*' -_1RBbzqipbƧL $ҋNrYǀ9Ӱz!k OաME2jɥ*K&IKH@(aǩفk uK{2ԨOYS^ 0rHV]uOV%&]P5Dĩ[E-ܿbKm~R3MtI䡮HoS)սYM5 M 1Rc!sۦ⍸J1WqDǐoX ydA>ۈ)E]iRJ?xP7ݲ\\kx>'@EMaTiyIʉ+"I)󰟵PSx=49:e-ڛ7WT6@@tN.5RyA*݃7RKw:[6ָ z2 %1؎`;F[ccH(R Ge1 RŢ*\OsxD"~4V# FС?z[gm|v4Kl8{V`,cWsWaCnvAŷy,m /=DN乳~mGn3ijg3)ċ]Ӳ c[+"6]WFhi0ӗ`B֐:dBu L+\CN˝ Wa`C͏XwP88d5kGNy5Ah0R!Czs:\t#-4iG*Mt' o7/5*eV@qa C _NPw;sDNaq&v)TvC $jN6;R&Ø_KgF M ߒ4=̞}| Y(9"7(=SFޔ̠vh8{yPAGn3N 0q(bP2;H3Y{ vӔ}I N.(=A!ԝ[}Vq`KzڢũsCY\l&UNwIWDB\O`3bT s10y~[`YbZmiܞvǓ\Q#[Cb:Iq" zmiuS",p$gR+ ^E/)؛U~.x۬ F [- JM>ӶJRi췯脽H nMʆA/ۧF̢^+FC^% 7.fHpڼr #I) c^$k4l Hnq'5-@>Y6~%MRkvyZ(*-=~M}'?0gݢpiXo>zqq5gݝ4]>\$NXYYvXcjzaLiDp21NR.oVJthUb31^]vmV>vd5Uqƕtj&9E0+pTB'# B$P#΁wσ1G<]e$׉Io  ?۔ؖ-K48%YrZū(+^yEelF-*a.>Z {@L?r h b6piJ&t8` x "Ǵ tٽ".R"Z_[LGUd؀Pl9т7pE5fa[QdxA2ʋ4zRKgqgM F6اClQio CBi>X)f#^|[ [μ-8_*㵄ŋۚI@؞YK 9ˆ؈%X.lDQx$<{c.Gi_וLmjA׭ {$}GsPz| 趃 g9 hۯ { k)POkܼ3/:!2A@mv PAYGVȬ.uU^uNp{x (L|Zw8s0ьpT+*8kXvݲFrJ緸2n$ ^å~iag&tk{׀ S{ꏬp)?RF%N+o³d<0@/#4D'q|6cTݑ|!I]7׌yd\҉`S' @{/!:\7_^Fc|h}I! SV h8y݁f[#1[m/o`˪!$Nr۬7a CJ <%ZN/q3m$~>;TbK5Pjb2o2eoǠ!* 8u=TR/dK&$Um+9l_l"`f"O_#t;DsIv6\1 $XV8iXt7`Sw 9`W(*?-vIi_E| E%_ٌ_yy>qy&Ƙ&lC?`=M"z@Oҝ@tl(ՠ7-8ȯo~S_IUWo0Rf >ccᦢHM{D@]=wcS D^V0I餬:^KUqe-ڥk,r$幯Ph%W[ 9hI$VE Au5zPO vG"Vab̌ՎO'gk=ѠvI廀=su1yc?Q lh J+RRj.4r@ɠ k6h?>;cDM9RE{:ɧL9h_j!ZKI6|uƖc/Mu|x̓cr[9*@&+&x^֕A¬ $Τ, ܾZZ:(0g8%ݺk`B"omItPWҖv]v/@,.gϕ꒩k ,7Z 7tMEDF#3q"otؾUd~{En!HWshݨj*>ӻEuY]A\A>nK @CV.4-"ǘC ˦u"AdgYG?5VpSbҀ̵enKK`З䃭6ù#:Jԣ̶!0thEts5V<41S-2F! 4)w\rcdNA9:L& ĘNj;HU*hFfzm)5bTDe#8T,w<=y T}|m4s1eh !kXT E!ćskG)rPCLD1`|}nXK0$9С]p'bD.NhIYOz(@6|VzoL(p8iwIq7cZ& pZZih{ Ya$4CIk?vK<&6|=%B (=>Y7Ti>Vw(|"rQHC'/qYu+4T CkKk ԎR5h0^KNg,=ñ$2_;zK;KVCFTDdE&gb">DL-*\nJQxv5  ؛^$h [Ϭ`P( Gh, uG\.~iFkJ럶.G6h!,L|cicx?[S;$ ReZ&]Pw +%¹t aK?Rd2AJflߚx޻{?*^{FH2K$9MB{?H0 U%. ܟb>2(mRu9z_oEMi_-GxxȲR3V„g}IZ|qU_EeIfvj[ws{(P) !*TwhnL4 ֤ƃ P>wc-ϯ:\(nTISF@~!)G..7p:ǃ.,5hnC"B느S㌡L\xc(5E Ty ?6 +t:I5%Sk=7zNe z:zC  ^8ա1.ޭ m έD=da.{jS G`м',K[J+^ +bTcur%vEڈ%)іWR!(J _`lE5|'لؙ[?E !mWn$<8.]EQEwj8W9.t yl GǻB觃M5}^o>TK WZĪfo@O׺92+fw `@Yþߚ=$ qv,xpwbB7 *fD%@_44,YZލu);Mj0 Kg}Td0)mL{N7r/ghv֌`х#ӐhRTˮw4@_ZNT6b-|bɹW?ͷGa{ E=$Mh0ް& Y4+Ψ`G8!+sÑ1WD2zY"iъf3j#X͵GNu xHFOX.Kpƿ z)@铏ͅj$IЧ9yc o&VfNYJx DI=tcaJ_ eE`Y#ƍ#J\ƪG[P'QR:c*tai>J鉟(ë뽸#hwQbtPbSrkԖԿF҉c!S2J0mp˲(Dq^ s)XGMP-RnQZ^N ;p2 -h"r]kNDŽ;h"#KE_PAk0Q`)PosLlŮЇ"TC_{nx Ë[zV,$7fjT[V#K7Ḕ#kX>hOX[3!IҶHvՊU%M`Ôn2x#$ZZ}r<5 K!,0ImKrLR%f-.(XDL!(|d;78H1J0M.yFH:'|CEⅼI&P:h-;,x\B:hQu. (RzO#;tbw39î0T&QJ̐U/=<(meP`4EATt Z;DDE滕pX]x/ &)a@^UDAu+b"x,qˋj|;zN.>bD]7荴1y9WAV= ]$aktt}ܒw !8G'J2ἰOqlISz:&g,!r')2Xٜ? /xEV-Rh1MNS[M@0Dd߻WjO~&ӝ9ܠ/b.^T-J _g=jJ|Q`c,M?uϹƚPJ1c]u:8|cwyN/1mݓz-ӟ,bMG_@/> 2:9 *ܱ.١#VdSio!M2Gs`?ڋϊ)2d S[&Y 8cG[K6)ydV9 ^ݬExs{<6|%PY*ca||^VDqswe4/71XՂ@&(VO7$zJ40oC8KXgE&^NrVA Ѻz'qkɟ T']v W()egs؋N =^CE-=;!~~5kҢ aU8ؼG1OHs/顠.k˵…)oaUyEٮ~5S9 U>ДTo k ɲ C&-J6zOG ;LM@53IW3|^)]t>)9MT3  fOEGE"V ^FtI*7B 1`g|2dUaߌa ung$/Ou@/(.cڨC}̚br.݇雦.{#,A=xt{Z1#?4&p@w(ԌG6K><;On0 9WqrV3}ڿ3(KϏ*)O"J*.uVE7%ëV(*KWKm79RK=/qa (~e-Ş<☓GWF.3la^>6Z4\3/Mޥ$wbE 2R* Y}<ߵCj|T(!8r") 2"؇sn1#Ϣ˓kztbs&,\q1 ^]IxMj5U *a!Qf jq)cNԈ6g!tN!2wo- S8; cޏ6f&$0iq"R)L!N[!ߜ5[[gK:8! ]-(S"Y u fi~EWEʑ cs~2 &7*h##LEsy el,4%0~RbYd1=;)u BӞ.uq P?_}][I߉(a=E:l=fAv@fr HyHV] ] Kn'{8 RmtN}IG`.TMwsptK`kHh@ ̲͋4fxcxHrR\ȭAD-O7QMk?\kT "kJFLܸ`M|M;@m Au*B&zj۝Qލ}*))ŲI͊|+зqH1|`i<܍ V)e$ .8E@D.:SSIw^ !)0="{Hܐރ^H ,w敢)xU1>5 aU!7{aV<Zj %pxISgy"nϧCT }B4ׯ:  lD~-5;3ۥ`D&o?V|edA0#nP8qZ`-Jh/ޯU{6g0:5-<*K/SK~ORQ8pA."2zN MЉw7_X ~6OT(똠Ϝ(|# s#cu R `@ϔQu]x9)/ V4q)oHw٣wR敨cJd]9,X(re~JbuXCO>ǓS& -(C/,QRT[_g06<27 #٥=┼^?Q.KSr|lK4t,8Oݦ b[6c9t`#p>?1D?c-T !mC\{HǛ> zqg?᭘̝(*E4?-˧]2L'+4J}ȍ?9I 5O# (>k[dn m5 cH5^}E'/tu? U]dՙ(K.WЫ b~?'nQyS.7,0j5?ߙ^hD-9w:JvlŖ͹#~@\&xp0%+Hq :ыюso<ئQִxZ!s2jzPREgKp]eW(X]{X+s]E:I16P;Fkl2ُt-naIQcS05bqt. YF6o[&,,uVL#b#MǃVC:=73DjƑ 18(`q5'1v㍳7ul\p}pk7bbQ , rq.aPCz.}f- /fua-t%A|6;4Eٕ8jpjw\Du[0cHm|J=(t9E yW1]GźJZsTن"RZ#u_Q}*&"6%=UrZO; W4|Ǽ*X ,% ':B8?y[-cvF1LIq ѫ`' YX}a#dϳ޲"`b]PdgHy9p6 7+.lSfa+C.ANb6!5FJo֮ B]pÍWw nZR&K@*Z2leTm.[gg.+@v)u W"uh%,nOB}fTFӯ׹YAAڼP&`3dgjcdHoX|?[;skN`OJ~} Y9Zpp ZSw 8>mF*u/wxg#~YG2{Ԛ BD'f9S Y {*-% aSf2B{(-?#}LK=e4*`6F"EU1dY헛/z̟z+KidA ՇEM,jqSlUl8OJNOOrf~@ω@2UD4^#>qx@)[<9RE{c> pΉ?;K e]FwOGF<ʲ(؎oY%w(ߧn%| j:a4~$yVBhqeMο=Vx QӱtCh6Bd{})ʦ(<'oY>jҦj=#\rl>1ƻ̡x$RN̆qz67ޗJ\\bc~TⲤ-bObα[4& qՁQ[L+cT~9[olBQUԩk \c#DA9hfH"_P{Z^͕vűX8 zRDS*\jc'7(׸q!}!ս]1R9BH .S@x@LP$~BjRMqIU4$ ur_D!6i0Mil6}:M?ȥengBHrgyİ{UC@12my‡ў vr/%cf|j'Ak!.e)$M; e.fMה]yA24U[N 9u֡DǙlϥZ%%mc>׃2l@fs43dm]Yr8SIE53' f$Qcg9XH/qinItJk_rMTTs]CbVՆ*,P̥8] &apQleya-@)E9B1  ?WpJϼg%P_-cDFhz.pMZQQ{LQ+=K:} ));БMFaK syij7τD5$*aP'RL^+zޯFmT(-۴rډMdD|]Ҽhl)Z[0ŋOGC>iY"贷8`*^t|)Θ*OQegcIϘ/e\a;{ H,Z/Ȍ" 󁈌:ۣ@(z!P 4EY/Уqv>mAz΂K'&oɲ}m%,"Q l (>pÛ棍2Es YϔĸrNjWU|Y*Є@I7·%{3Q 3+DQk ^!#%$yX[ ';G㙕<2hOp-[d8ޝ4`kTE\$_ Ah9FZ0:BjQ|da4F$T !ډo(-csv~ e4Omh:›W@/[H+F&io8+z4ߦ|')sh[. P|ww5*v<Hz7V;.[*~i)ܷ^Pj<AX VEogok{ݻWʗTKp=!w0,."<+]=5]yTQ3DV{RzE8JD>mM*ȱM*3a|5J(lE/XWTW6Uf k+>4 [*<kI\&֑_5"Cjȷ2P-NQ?JZԳG(GVkQ"O-v³{UF—;:|Ĭ&04Fp36fƛ$9CLUfr#R?HEJ>.FOd钵f)^?ْ-)dgӠ9[;" n:5!Ц/(^q{Ѕ5bیfBe1%MH^#(=Mqmk35fc +L |0W&]wf6$K>MfAR Q_tYl[}'oRI5AKjᜢGn!#k]nF)Hn&\ _K ET%qSt@7$㝚Y5}td񪺊+1ijQm' DQٻ;5]rR\Я@a-|=R̥擣A̟JZUˏ]̚h3D}ǐtpgoxcðkjg3K0Mצ1ƫg_)p{g{0=4qۺɠ`HV,%xȀ=q+8[2}>^ A8Ɯ ꦎɁ1rDw$JnN7;2p0?+ OOY+DVfۢN0fp"i8K (?@DhҵoK(43q?b5iI0󚹓 4;}puPoҡYwkM+]__%qRGs+|!ݒ:Ґ7½'rch sIKm],_oW69gP#[.Njh;eSqVwu| ӟ/V%;{hQǰͫ]xv5:t>t %Ԑ%Ŀ~'(➘ \ΓpL.z]aPA4rTkR.gHEBz`FC)U8ԴEpP*aILW.;iA&;3+[_<5nB UGGvJɲ!y79Ӡ}WYhO+!NkڟIBb0vwұ9Df8PVe2F,jLk+Oy•,5}5dp~|EEJ 8kLef}Q-AM\|32FD!=LV'bnf8ok'DRl]&5n"niB,"fK.D}] /M?ȆTg4UXBMlh47683Uηlʦa2}}twA0K ~egʁm`Ү6DaYaF Hp7]xɾQX$24ffL8{ b(\^N=`P.(+N0V툹dsҥ-l4P6;i<`r@Z$A`|[G>ib&guLE1ic|̝a,eQ$k3[*gW:_!a|MjɆYt؆ %?/$um& uuy_%@RsMsjpAx nLH[9)"dF"@Sb&lxtmvCΛ0%= d0Ĩ7CzR&.82Oa& xDHdbө9ɱY^~ղ>qobsۮod4Ţ+LhŲf|U\!#&w* 6<Ҧ+_#4@)HoZ9WυܑZ. Ex, 3boY$BqT!b$" sBP"do lv>Sw~0)<2@{g eܼwczOMlω'<#Mb`Y,Sl:A~BKVhNQe S=Ӵ^CJ+`VlL&-^'_j6>YJӘ?,n^ttpbpd:[ԬmEfɃp +?T쟌ƪ Z'YM,]Ǧ>L_`ո/0$P/: $SmdA'|Oe2~U)т^3lg6ayY}R " ChO{c|MZ~;fX0VVLZjfJ[XA҂[,2vpl5 ySfci =< nx1zU(7оBL͈#=΋Z>ѩikqL'eƥ;j/T6\hFn@cbUSXɒ+O6$zK~l\E%;kD3tqrV2Z܄u !:!4%|eP@1-鎟e x]Pҋ$ۆ퐖wX U"ı?1PϢ LnqrnD"8UKȄ"d]%8x'2[W:gvh<6]b]f`xSWA_$ d׬Ɔ[{x(u?la x%ri?)\Id垇V.ɗO0Xpl/AJnjѤ^%}8ItSҮg&tyKQEܑ'NC^o%{xX0W}ϲ[QH@ŵhz>ROOmĈ 垈4QqRX˛3(RѐbZ#'/}9C `!.[-h1 r+0PT8e4Vu#d٧V >[V.45 _M;c[hs53zk@6ʜfp?ˍWͪ)AŊT!lS2[kD = x}v_ܦ3ik~ )i(?b탦9NJQ"II>Lpnoĭ|YABL6[{Ol[]Wl>t+7ܵ"ʾH@QYQ'I$ d;B l%žqJWeJg:oEQ ָ.n{ϋ?,R@lx5~;7I؉A UX}o9 agٷw@ICb#93.OWK nn"=d^N >OHu'}l25?aG|@Q% H~+\YͲe"ZZ.(B,ػεR@VY~}yyA 2lR(5ƎԜMԆ Qh3Jt$ (^#dy4LTHq!MY *3 ʲ/fe. l(|a(2H.u|Iȣ6<^1?)<5+HF(*fS2vǮ*сF ͦtIl/`_kA>m1)š?kU,22k(?(r }hKЧѓf Y9Ƒ(o d]\$fZe<%[%%(q6~g\\\{I潂 XP57Vh_]t !C$ccUc\f(A\tmq%u#̺H p)&xbۦDnyG*3|R\%22:#,Wd60[(OyuRByy}0E3 xN0ߛONY A^82'D7td2n%m{Lq&h U[#G&?vߣuE#qzp%/fZ+Κjp} #)LXy2& I7o)xν#/hkcw3+ 2Ӈ)(Ǖ9\l" ߿RؤÃ=lQ吤bMlH;vj ~z5̾z@z}Znɮ}Kˮֶ ΄lvQH_ !\B̙ gFUQ;}( ˻Ȑ>O]I %~7'<"i=GM%kbe*]IŐ$2mY3u\@=9޲?^J0pt2F <ϿM߅anUt$&ՖL"_>kyDzi04݇X{'ezii3P=6ܥ'AJ1Qnd{>)7{0BYԌ+b*ʯ^`OU$n{<.^x% t. wk"eQx~@ء,#mѼ>kP;O^xB 2^rT ͯ=A(^0HiU@Y~N[ˎӝ Q;OT$/BH߳BM&vu$9QD=wdN H"OXc:). fө1`TjmytO.FҨgNW<[2!=S9KZc񘦧lI \$J!`+#*SN*i>kZz6U+8pZ ;j/J:%η5=Ūװ3ÁXmfrNQEidoK0;'fOR,#{¿F4ԎVp #֎%G*6 Lo܆+{koul P7pvesbTIM~8i%M\i3H6@2'zN[jNGZ;@b:s_uzG zhGliȈ]9ҍԬ!MaN_eR40jVĹI?N0P]5[t_$4Mv]vT3۝&◥.,B=;K#^X!f\tN3YsnPáf!_ $j^#_D;8uyr0 mJ3)8uKstCa7w52d(i9Ggyϕ,lODxGbu\orZU1GhL B#.C.@xj7N IBC:ڕdx'lm~ɶ76^--p`@sa!dWab;]kR?ӏ {k>㜵"RX:ZGP5('X(@c{R$,z8V^t`(>D0 #hD~E-N)8mrK2@1 @TURᦋ9(eǛVG!, 1n &N'Kzs3jO#/xR ^V"A2W1@r(ABdI[tXkf0/+)Էٿ6&6ӭJ94<ZW}2gfz8B*ڌxls)<Э\ύvދK{/]جQq缨xae ^v 1at4~ЊO: QBkt# i#Ou ԽqsM\z_JS: ,OaOG-!@$:w+/\MbQfYվN p|#\]:[t2 #B|i <ZZAԨH6P Nb~/m+m{ WO#C\۟Rщ ELÕ.Uns蟲xXȐ+EIr׾_nZ1R] v=,K{X(pF*m4㵯m@bnd>%We%{sj>MqSMȃ(PwhP>frDdu5 [or\F%n: =+B`ȔBdeaH`* 奜ʢ?Դ[[L3lxC{ӂqTa͗Y2ntA4AS@Gg+2O 8U_PR"*lٺ (:r 1 ?u'i6(U1\,17ц7c[O`XVf{g0/&x9e~KjH(&?_k%c7%DBS!o) ` an&L"6"/M#GkUHrw\tx&:yFٶ?-9DOr:|I}n$[AvMl5%۽։ATd ԛ~  }?kIE;U>\|ݹU4?B?W( }vaNE 6NhO w$$⏫qN̽ǬHpXlE,b$pY0a!?a|:٢JEՙb;Ng=H%H%ty[g'y/@1%\PJS/kWԴˁ#+p37[]yk;xMT?"Ѣyb}4=bM6 #FbDj[6G.ǩEJKfAƉO]2iC>/Kǀ%9-pG /ڛ9}so`sw#M~CX mqۗ3\|kM :0A>6D #& &R ~z<rSV2y06treNb5ܾIyL)nR>_>2H;}0.__$U2/3+h( MR6v:?|4qOzM2Stp[MD{E~_3kH;x-1*5|~:KƈfG$#i\RXp@,<|,'%KP20|0&a/tט"7:j :/躕>vh{ E48ut@\KpoέSV%y> qq-Av띌~z6 'q1 f%uw)! ?@,sZ=TqC=V8jl}cV!P7BEԵg7PM &Ixթ"-fiu%Z5]-mWVC̲U eT[PZI*;)$ LɿdTMXC e0Yzkx0'ZJ3~/KbE X⓬Qa!E/  pL+})[ 솼}_+4ɯI.n_åS?ӥ*m8W}ɑ-ZAe0NM(UK?DG:y2.&ȒiOA0|$²dґ[g', JYlAaC/6Tl6L!Kj3Fnj1qŵ.`io_fM*aQٺ +[˽=.Pߒfq9QsTwU_?Τ;$hߊySDvAӶdz \qŪ3}@CO.񰺐!`^ \ Јe~1NLfaOdѺ)] 1vm[%R\35ֈ܀SF ܞgRu`jaՂ8ydҐ~qIGFD~1/N'A@'Sw8y,H0ڽs۸|KRrs(&p& Zn?k 6k ^&S5׀r,o-y;ɿ#XТvQRW_ qh'SR\4okҏM>Vc VVJـb 5sŰ^X7a"!]fyQؔg #>-xl .]+\J,yEv_h"^ d;şo)[H4<vkeok8a]  (m 6ЅG|1$wTThhVy| <^@?o*AG!}T~X#ph( OyZ'KhF&~h*~PN5Tx T/= FM))D`(U7!7YREY>S- "9~[y.@BUhAe➩ÅI#C"pz$6Lr/OoU+#"lܺKqk0-?X 7'jE[4+VP8TXUL~7Q/'|E%?e)8bL%jߺtY<4!V% ӊ\_ċB\Y `7G+5+tz֟u9|H:gx4X1 Y [tQcX%b9O`%IՇ bX5EыwjD_#NԎUzx[)8&\9`}Xsٝ}޻k߭ +*=8ϙg~r=1090t&94pt1B/9܉'!ќ2A [j8z:joX / C2 ߉?QtB9 =?i;m볩yɀqG,O w뼵I]z ~QX2VaO"T,25?6^*40R*uJVO;$VG|+,2ypgotHwg7Ύ4A ?4|j Gp"s҄`7oFVi?Q01B40o"/+ߴ0"M5-@﭅mСBx`3(A'Av <O0G5csyegK&F04B#sz;I @_ c\5/ܧi8bC?m{jAm8`Xc Xw>5v.إu: &hP^JZO[q<ujÖ텾2:xj?p-̍K'1zba >&bwW&ZP

(XSs0tYk<0D[Bw}i@pC$ۙǮ2< zK3Bmfp, 8^!gcbhޠdJTlRvcZ!l s~ >c7>A*t}`kͤޡ)$U!bPش0ߙ2uX"IגqD]N &DAuF^i[0jM;5 $Is:#(e0*]x r t.MiCUk/pHʦ]_]ZX>_k"i/:3<蓃 9+VwMWyk+}jR㣚’iw78\&;81X:^ `ֹDNJz0t 1yK_]Z.Հ)t\}[EImI] 3$YwDf"..6'ƪݓU9im-8{b %"=3̦h8e8f;*IJb́hj[Ε :@??zA9A}9;GF#z3pxح4A> \g_¿X/m,x{qiלMmsBr]Ifmʅ_O;2j30bFc@X& JGcU2y 5P* j%#gx 4o %$nkN8ӓQjE>S;eO;}$,a8wLoN_Eb ׷v[fu]ivqhHj'u+ Ww7v{mRjFdpMz}HXaWi., +9t_)9ԏSC]|c:,X$n/ +.R)ҹ I}pM̪a=\ EnvthTc;69ގCx<=Pu` uEU2ehI:^NqP'H^cK66N2K"ct6%]ɡ3oRX0 fW2P MBAVm4k\H4jmP0GVE2ʖZr*LU9$/\"?z+p%,bhK2(& ^P)h~qn𯘾,5=W2^digs;gTfzPMvܱ(It\lS\?h1<rERM> ygQ'Tw+$ wW\ϱ|wHgvu@AKtoS uVR{_Jf p*H#bq?MR>J=lp@:*JS}:\u"'C_%HØ@Ԁ]|C{]0#XnUpsZ@M;soz)UەBB֛W͹@[ˮ"}V#7QdrG'ЯC{m3-9< yM,4x>gksKF6HCI#(=ٮ䋺'ET`ZW~@ e'hJFpYkMrrћb!tIYGB%b#ffYǹb,Btտ+/1XGM)'Cy@CP $6sFǍ#h1Dݍ[V2/?ѳ0 #ԝn$b!pa*v7ﳠ?"?2w6 n=;xsn:7>}$='}2,C;ˉxgB+2sӣq9 "' n#FK\FZ"jėj (#KB0|QΤyadC \I#jU^嗗1 K/?~V0LXi%3Fk5wY`o@^K"+^9U?܍Itaݞ[DxΨk)#\4Og$ ݏy)xсDKΑVٱ@'>΃-BM!x{kIErǩ᥺$fvDe9ij ZJuet|Zj1j|hleJu8f @*,o9-o}@脶S} EeuaoZ$`D?aУa4gI}OQLWX/~>pٴ;φFIy=g7G,=zLɜ/.vUC-@C\/ ?pf׃tzU Cm%Vn Sv >nD"zB7{gz`֔3! Se¬/hƍޫB)z%d͈0Wy22uvxsF5-HR]Y1V1 ū39 iQs5m8??W/3/l%HCOE.'w\=#07(۞Ӝx~=#`%Ph:Eu2 =Wwk7>}h;H4dgg]s RBb3UR0^I%G6ZhY*|h7~I ̎͊}7K_ɚ)GgH-Z`>791 %{Q?eN02fqwʑ4 6D+ b20 5_rn#"’dVI׶fA Ij "RRIS(o8k^ &mήT761]eO0l,cYpsѷ\d7o͑,P50s\;$=01芅lAϛoNp+vτ6\@ݦ2]P@-za36VN={{B|hā CߏNd~4yq~wA`uB{Z1JH#'S{{=Wt0߷hex+n9n{mC,4d3x8ߙ-K:}w\ %k+EJԇWqCqvM}j[O_,@]В(.ɵm-k $|,%:xI_'tdjaܹeXMLJjqځ)o ya\.2U+j,z[;5G}F6`D}UIu{|X%^&T0 }!v!sˁ5zS}8ϣj|{nEUzěktQ4¨ĢƘG q J*%78M[ܶy19w<|t``rY<%Yk6 p ry#aI`H/(^y׊]>ȇ.~y[#Cs"FbPF}lf/,r_jvXlNfŮ|[5FpGPb^jIc(( Zo3b\Ƴ#5g# ֕8Xt`bo#m_DrvF)B9 $]־MYlu)D|]- ux!bMѤ26`xEГ=Cji~5C -[Ϯ-mȥvea )\ i a ;_Rg uruc=UHĈtz"~%.RGؘwrB~*]ך""JG K$3 Uq7@Xl.?>~5 eG1x9T%7b/CKUH51W{=30:7H|!ŇCiw57{2S6iČ "2Hd&Z ݉zt1X, W"к, 6q1&B1[r] ngsѕ؄VG?l6ꆗnZBAEgNE1i-HV~0圈_k{׎Y4e.b\X*0pەz }_HBWn~BOVS)vݖ{ikÆ1FFQ[<ܟac3bq` C&Sq!@ vEeĠI"Ln൦3-~)òڠYWXxYTOg s>s7VUd߾U1`94p}G>S P;; <lT3y$%Tl8s~},7։ :D&B+p$ZH8`Ux"찶-4=?{ zpKI%'pw5iZ"zgvOR 5kO0iS()T -2Q:%e/+EnM_8pzkw#RvQ~JYp{eqR7s Ykmh=vMkAD|4&`5Q~Xd;I˕׍LIRow<[q`F$:LKCU. L4Tn&{ &G~9QB,@LJC߅y}O7.ǥcN4\6,G uxEQB ߋx0 #nՉVlPpRcq2SUB8`# g1B^}n&3+?M2{daom{E;1 nU^`҄w\xY=Ш6Gb̿K=(,Y;T6-*M>о\ZC][43dPJPɂTWcd;^i߿w) 1A^|]V|ވIj{`z-e2H+k܇/ /xRd# @qqBKsyNCI5h(bTϪӠ&(*vcJlg~#@tUw8kC5Ko8<>f%{0h`w:+/4r3b|Bͺit9mff4X"5^/WWMeŠIbz 5#k>9Mşhqkjyq7z(:f-#u>ڷi3Г-0G q4ZfyKzd}- T>:n!s\3U k`羒W<ʽ\nJUj?pGxqi49OqtmPkP@ Aޣq+o^T{o3RZ3" &R 2Ko8נIn:uYq#NJKgkT][Xh0z`/)hrV@:2CAɣ9(yt=rk0 }eR!˔7qwUl,J"2M)Sxo5:бYd#pQ!e&⟦ljܶhŇvۿ__SIa<) +mp;jT]oш6_ڏQfUr 6֫!-<)k- K6A޻U~ Ey$,Wm!"imY0XZqѝ\VO_1\VN'|Da0D=)l,P#/nrԹ^/ ̟l( YL:u<KNYizxi D0Z"}) @VjpM {;}yy ,$^rEx+םK)amL.b՟:d eCJd!c5}Pxc-u&nx!rErֲ)P2 O /?zcSFjE*CY xwPnZo0{ر?b]=>iLA{.d7.ud䷼ۊp:8qj~@opzӑ"-m4*hy}ay85V sSY&:W 㶂,5+lL*՟0F&}$YMe7}dF |R 6ƧQ KEV:C)fs_{M`˺,gTtUD\/ϳD2#ӥxB=3 uG6kqzJ,tI4љ"hWt%ym"ƦBϊe׿$H-*T$[%gyj&AWSs.D:, ǁV?} 'Ѥ;Y+g Oa~ x!䐍IIϽN0Z%Re؄ֈV1$kHo9fQAфӃÚsK8Z"Q Ѩ{9Ĕ-J*qpڢfrІزɰE6t(fVOږ=5R-%TmQoOUXg0 fh?: yHJiE<یѥ\{tf,e~NjE*vNeP lԁYNU9㞱&~Ց.nTޙ*L%BRF[G%K.:PY9XCDxkac-d,_JfMzs&<S_I_w_?&CmHo˴AqaC~W-h@O3BK@5ߎ%b\f.Vi%kiܩޣHwd&J-g(]tv8K GŹL@Y\$₾ Q΀z'  9aloKR1xmz*L[_7s^[.L^B  }vۈdSA/ºheá4.㺌 Z~@ĕz1+:!2Xyb2%7ZR&%: B[Զ%XȫHנ.+'Ar9H;Bg~c9?05mZܺGŢz(3Bm\ *!(Ә*kd=gZe0"Jf9Qw.$7p=(.ZssCc8RZ1ʆ,W C?3_bac$c3yJ{[wdNVbrX.։%J!o-TSrx5uv*JS Xo_h3";Ρѩ#\!dНl\7zӠ@e*hHg?7a9 C*ť"qQ| wo$ 8K>&iy;ϲIQgi2g )QAD/ʄ^,Ͽ8=H4'V|H;OS9Ϧg9. Z[cty+CۿYٮp> CQ"Ԯ!/Z98F12dK3M)iwOJ)3vϒ_[=j fȋɄMc)nJS%&-KTS&ēMN\If4eGZBҺ7 #Fxh)"'<蛪|FxzLF6v=0{қf4>u=$AwV goҝɫByّƼfՠ3|S&mf^߼_|ځ:aCrMZ FЎ=H߸M[*iim!a::U=6Hvtߍ@֧70Qqo%XMˡ'$ip9=3WPT VN^IQ*~x 8 W,OwTNx1[W@g^@GU8e(/t6t@b0fd?<&\X-=C.<w^anGˌP Yb|nd!dߏEE X£V2s&[>z˾#0e5~t'+=Rle9Yyy ֤Y)ќ!#} 3%pΘj7IJf|{mҴsv"Ј)?DHw&YbYC5ޮԮ ?b<*+".7L;ڿ[փ,aTAb9~PtGR>:I FhpnH=`:eKQdr+q}F"ָ)IQT%wDkjQduF*"XwzX# k霔ĔgrhL8ScJP9Q;uR0QıL֖=5w ;u-n{b+ eObeE{['ӽЕXYkKB&RūV1H%cJ@ q- =Z[Cc:W%XmSUwwީQ] ݋f ;LR?, 1Virڪy&T1V{?}Ece3R2VJ0LOJeUGXlJj߁ K[AyPwqfeOa:xo"}w7 Fy$6SI^?4T*^tRvloswavt71䉝_4 K9[BU9LDln.c&"DPd@Mu:FѺlV[x5?Aˌ`##u静䗸g+):(lPh0wu#ABu7s>|k 쇓!dcxP/~V6SPe-dt8i[hS)fݻލsdNj:3uLfV}Rz>۾x7hkK:3X莰K.8_8T7m0Qq*AP^S$:wHJ# %yKE7ݲ1ֆG>LMD|Ê)SpM&ɔzgI牘\V ؝;I Yqcoxو4Й檶 ȺTrM*myTQ%bW_g8[A۩Jqg( ,d2@estiԘY`-g\76j?ޗ-&O`NTdmF8mp%"fI깚J<_ل?v5E(4Ң;4pqe|W6&K>qPJJ:hv-=__PMCj XMI}N6b+EIq㗥6CZl<-+J3BPU} vLbu$+N ^yJT(mZƑ=pi~=s¤/J풺NFB@Pg}6/uq:7S}g5~Aط[K5X;)%J3{d}̟ce*Um!zzo8g%DЌF(qVͿ-,S{H[6+u NWݘB.8 ϙlxb|,IO?|It/9O۴ZVb3:P9FĭyUMBI6Yᱫ)lοȩ8{}T:3+WvIy'3-1N< (`NE6lvR5A^IdފK]rA*mۭDDpu.YGsߌ^˜;H>B\l=|}k k@J%¹II@oX=- :-%+Gy#=Vmc^ 띎g+L+ E}Nl7ntL+z7[1ɒGܔ#{>ܤ$})b], ;HfᅲDe=a:K& (sEMʸD bG~KDSc?Gm~ hxsVA>wCm|#yX֗$dI!W˽Ӷ<8 z.'c{u4I1rVN`_(5>u|ɢlr޶$m*1{?&ey:<ĤdޭZ”4D Xvjw˻$kU{a:k'uCx]rByz^l} h<@TZWZ{Q>-BNNI,Ͼfº!rس.RY?W?1V'ױM5:k r@VHij= f8PPUBp5cy^V6fggnź|:koQupiE֜W Y|)v#Y]D+wYn 2lG!uNLʕ1*`+,99DV'Z?0xl/X>:p@5d];߿DTXA|8 滨Le$ Z<:5=GlHWLpg]z;vUYx;{n s1Aed>  ڑNн%?QyL˥B2#B &[gǏ }D&BVMh3nJPTtC ABCK&𴎾 )*;]U'$6ߢy)=CˠѲ2׻%cWMoρ[V D07tM+a'wrMA##%f'ޠ̛:3\, '.ű1aX\}?C8hA1Fԏ)7 a!(dbYrdUH׺JlFҮT_G{ky;gF\daȫ\d#}b~ME%mJZu!4O7I5L/ ^bVw׊ ]ޭn%dƝ!^sa!4yGpk$!N-OK鲈bu_Ulƒ>&fUL&'*Frڂ|tQlCD=`Pvas.߆o u nÅ$;ž_ORZLKbɨoRtpLnR?*{UP%t:|y9ki.@LR+Pr]1mw VV 9ҍ?y9;z >APGi@[+ywx $cL^ЎDD,J9yQ}+v R^p,;sD{P{$S(f061h\iI042FU RH9c!ptxfPl5=vGv((r餄uE% ])%4SwItb?v [[Jڷ>17K!q$Wmy6cZ]qKjº$}5 uLbcv巷xJZ-+0i‘%;b:IosPdCϲXW$^g$ǐ fsCތ_O/l$'[Ȕ#*QCQo tsot r XsCwAa!OjFx1G:LAA<"6 /`ۚ̃@ Y\!Str*\.D˸;VMt.p<6+о{7c9FAosMQzE' =GZ%k 0IM=nn-v›G~?MX neyk(PIئ4Ŵ'K?/Mlm٠fn\Tƹ02eXyw*D2N4 C{'n qۘզBvi,<$'c,"¯C{f6uI?x3$a#7G4z H\U b'?`jd15QYhDmƋNuB\Z$`V1@``ږUb< vYX6ńi `[sm_@Vo t4띁 ?"LG |W\> #`CO4}[/suyD^+Z0ބzd\o̜ >p)a%!|L ǛA7;k$,:5dn-7c%Pêr\ӳᏱ-VDyQHڍbRg]%oo6Wxc^/ܛ\ 6;'\JFxD0ni!ǁldFAG/#!gWH֡H1H?^ۼ ay R`ik@]#K]`ϋ{i2fJ ɶ=ݾu0g$1ExT[~1fK B3$Tb=0^(UO*W'k逓n Fx%JB~NRP17i;%' jd q)([e2t^5v}afӪƴRkj))E˓@Z5t/L?VYџZ1BWfP:֫X:箾[cutT`#~nzXEo6 h@+1i(>KĈ`qB93VI&;}N*YUӆ!Pu?SKQ %v׋v?o*F+xxg ƻ7Sh-dJ*aլ``,՝n80j ظӺ/¦>viy/oJb>%ryè n|ӖgI63Fm/Q`6 ˰{dއX"v܌;t>^AIܞ3F$f:r4cil#d %dZoD^](ZH9pXq|9cD’#\O2P*@_*i8FG߬NfƂqm#u*%~ȌbGmFy f*T NE$\SsYG{6lUmUQ cJMJ`ODd"y\^FiQ;yw~]۶jypwEߏzx[E.4ZcUU8Qp>nrй="8v9ң\G,!ф`@8ayTźDdR$9t ɼϐ.t#jǐf!y qk3C}]p`RйQ!"Z&0;ȷɛ)>:BK]wf"~Oh (&JAd{] }kZ؍Psoc,F1帵z/*uz #0՗㩎&wSC:lݵJl c_ q(eU캆d7+^ MDS[6H@A#=U?#Rd菧Oѻ]&O:oBVKoğ85g8S%/,} ;<"Y̘ѾV@s;&^4$GY#ksj (m;5]G͖ΣgmH?,.ZiLlxQeA:J:+νqͷ,~/ƽD`RV[SîN83*9b¥MbȈ zN0CJT='k9sA݁AhɄ7#6l ϞZ+,^%O '$OGCpS adxF-KbwC_W&HVOtއo(|ͯ.SE##o X0y>63;t-06z1r2qHꑂAssCRB<`|W`\Mm<Q%`t&Vhd!Ϧs'L䱜ҕZnK{tnlᄰ Iy !d9>XÍh.]ye1V0}UFJ_ # byM M3HP 9FLE1*䒻}FO&.{XtKCn 7tw_sl$Abā L%SVAs/nC\7B.除 0ZJ$ի(ۄ([ěrC'L+9:c9&Z d;p,R&Il ܲDÆf*ʞQ,eeұ%+w"Lb4Zu3CQ\; 8TY;)K!}*wynts&n ,0rԼ':MSw[{i#9& a "Pvvy06` S+suƺf41ތgNr2D]Q5#Zhyⱈ#8s>?YE+E5?/˽+9\8FIDOtc/y<3..~'yη2tsmMu;:5]s[W:g>ءx i|>vXG~V7boޣN s{<΃MBS_=/ȷ&s'=>f1$Y@4~1е [vLq i%7L7R F{tݡ9zdRwlq1_~}_<⼝g~$'<ίDsozWgSe~~tnYx˔JP?zs'_S܅5zڏ\_&XK[ozٖٝqvw}Ifr|^ .{y~p/]{0k[[ds%L4nr s>_?ԡ9!CInKW8 ϼ`r.W}ʫy[wu_ƻ[;I{<ޯͦyxSssz:ޯ_AB?.%s1koq_?FrH0j(BPٖpr NLq AlxM$8TER`iR:̀m$M~]G4ĩ9"s?I] GF0Fap~{^WMg1v7kfw/Yjgq\qa>NwKmw}/u3?ޮft¨ULlI٤THeL vKOO^a?>iP>J+n?|gl꿒T#o7tdMtR9Nkϧ<]SV" kyPɺ)ߘRL1\M7ƨg{Uzyok|Tß땖O[Ud~SQOcǒӓxYVCLסv?j*dLH"B QGiZ~f"L$z4q&0!YNZ\`}~u}?ٜ-#Tnmn?|B޲?wĥR59|'JyYDY;zoo]=qo'}[k/ m k4X(^i9&093 (o,Oi; X*1`#TPUes)dKo-8 6fJ ?T4<ݢBt*~ǻk/+C:Q"Ƞb02X)k(`%EN1H }Fs0<_~+ @LۛdLR( QEńY"$~dEۮ;h<=PA@Q6CAQZ j>2 کg:6LN A<џ[Gg ޔޫ%LO+ߪME1Θ[uNZ^"k[&\ˈ~uMrheб Q- 5o?l }sTcd<\Xn`r:C[ hc F L^Y3Fne&^l+zLLY낊*`W7.4$h7(%+X 4 %BKXԣ_f_l/JMWjwkGf0$l$=dlQKL]SƁb[v ڼl0LFYYfXӷ8f Z3ϙn}hQʫ5cORx¬7왵.4#GqZ-S]$(F;юL0-F$NAD1HW+n~"x'ɛ6ADXYm7Zz1:XY9K0Rҡ"Fz-ݗv*!~+^G+s>~vg6iV4 mJ6Bi! x,/$Xc6>}U@(SSsf i1LT#Aӄ1Z(e4v9aFDr{U{Y +i2'jlW+tłF[Ë V+UI840D. *T'ek+'\4}7u2x$ё.AC3+m푵H Y"@S>}}_ O8_8(Ԏ7{}O[8HrybUA ͔&EPA`m""o}X+fG,TzDxV$B^UGNgkI˜XSU5rPOHъkrMHG(8$߾}!;ljH6۷Th"KܙBw(GU0jɦcRD2* = H.sR!^Մ.Tّ5Sffj(k3jpW!WE?ym(Ho8sܰFyBh5fj2B;Ocy%s7% 5nи\H7|i) (J;flRD_Tys7ӃE$<'93ynv"*OO $gJ7F 06 I6 i7mlMkuaFG2*@FO*+|wc=PkAANi YFD}O}t6#(#6I |luyJ (ߙ qE0ٶ {s. b; $0"QmЙ|*00LFFmL53@`B0 Ky2Y p1b)+,JL &eIAy Hi<^RITѷt I.2= {{ALygO ͓ P޹&H4ڜ"-Ы"ePq2SnW t?ӷ捍#,{[K-L)VyN$ ZSaR1&N_j4'V򂷳C񾟱^^fn\I gr<> a ~3Wxfx͌m1'w6=Qh>dO,sOy"E|ZRɳz/}T:lc'rv?G[uVdєiJT=?S/\MV}׋J}x8첾} בv}iYc;1yYݕsu|7=m?ϟro:"k~>:xKRr&(h'tL@DTVT k(pY V%nS阿JcR41ǣ&!Ξ| =liǪ@cxP{h(ty3fBT|v?=g돖3cmujhQ0M둇24%8|(O,7Y}{74z ٌhCb8*N 2-]Ka5Δ{JAVsߞ Bq ۝M5~߹bQFX2|XC)L9K9Ȇ;J =?/::( ݡ~PTyf*KE$dWC/9*A"U[Y~Y-eWzcAVy=jIz"=ץ-ܬS)t>0 vN_wxt\o7~_߾w쾯S)_ -~LBd΃FsZy~s5Ӷ#<[XBХȤ~Kѓ979ۗ0/O~,HZLD;:V[ʛ]ցng9#?r$|vwϽ=| vau=o_vQ*`ay_;{+8B-u6l C٧= 1oSY|j1_򸮻{zk= i8zRR@cRdQ", ȰPXh6鲪 (?XXGZT9(>y(SGs5wO<1O↑i|Fm}U?pMVʌm$P5q|ڧ3Wq *?쌣!~*l柠`8KCkmmbVp閼LLl w9+k+M{X:o䦊*Ma\e>:qKL7ADX⊶R3݊[W M:׆j#;Ai^4cUƕT(AQk< ;̱c9<‹qtGR VNNZCctIQ.VLX#bo5̶ҨӛPEYFe;8Al 368Yy4Dj:L S/M;mUTQSSEWM4C;Myk?lDcS<1ECKyy8q\.pt qq1y,X/_GO=aDp&VGrʧtܵ Fq{rge({fNő!,;e4ua\"8!*Z3j\aGY;ђ(cV23Ty'쐘_,JXWfYtAn8ܱܼk$8G uPFȱ(7' ޹?kGc0`D=F`?=FBrRT8:dH5AȂh?0nx]+y~ˬjTA  Wn5ch#^s{Wu;uosY~Vns=%׋~/纜i'}~N'Dd_2bh"]Ig69$n8Sٴ'ª-/|Ѻ|]vLϣd `F¥mW @@ss+.|L[00}x S,Ǎ|osک/4gꧽc#Co[;/{NSqt`jzֿͼTu>^߫y?yGo3?wl~t>i:L_~/.6}yge=;q1ݝ,Ǩ;aál~n5=ܞ&;!#> 1C4V*J jAd*#>7sGǜ$]jȤjٓ '8=Dv͈fjGI hȿBbmtΛeDY6kkIraGLDW *ZavNS$8)"YI_p-yumuKYɏS4@(Ř,&KDE6<4rde: Y#l/ F@,~wUI 솊1sZ1ޔ0>i1Ӓƙ2x0.U+' بT*m+ %aFNHO w=AG$Cjf:}֚:)vŻ);E=%g1MSRc6qEֹv}=F|WBe>;`ceVT=CڙCW֭8lّ0p@nB)Koogpg}x(}~Uv3}2S,}$T~Ჲ[|GO7u(4쀜t6( !Ĩ;EG"dCi2( sK؋FD-ЉR EQ`|  xh1>zvbŴ׵QR[M<@zU^|&0͓@&CwUj}! .n,/ L$KOr7_Sӿ7..zn?V_m}p{ڻ< OW5ڿӳ/8q<,}i}O_^wߺ+<ߑu?kϑ/Ԙ|8 w~ y{ifh/q`~yG5yӽ.3m#=+7[wvݭyp77u.)aOG9r]^<Uqxc}^-E/{+_{8 :1""E^xyݮ'qOIާԢa\fOŮ ,umYG[yS _]ܭ+RO] ~5xm(%`<߾'g:JǗe½\s>H;rUiCin%wE~Akdf8cj"Tnnȟﺩ,IIbm3&&`f{Dq&'ǰvB:;ps&Sl fu|?˲~-9YkOg+1^g5Woip "  (z$߭]QjKA0E}]qK ?Wd`/;uCyM728ݼ.|JxBqE@()G7T(WWe̥ }~?'gS_U~qe? l.6|9q7|5~'L.b=Ϥs_Ow?/dKG\s%>^Bޟ!>Sr: K(8?{L|ջ3Ş9&_ݮA_ggwВ O?n6$@-Fm[)L&vܧ*8WpVsRT~f[ĿȲp~jS:G%)YmerE mxMQ̙tކ"AaS3ZpBk`ԳYYev+1Wnc\Q-xFkjKJq;\[Rݪպ@53Jærr_3f"iiεÔ:׿S\Y}'~¾mGe a,@Y{?sUB8pd&q/sܝ﴾?D/x'j oVCY(ӗ7X a~ג|O^ǽo˞5|J>7Pt(k~y+@<]:F@ gi‡MP6(D- 5ڟI5޷ad>|ƧwﲞwJ5Yyvĵ_3>oơs+~nr<_$g/)s=/'~QO3uH9Vy[:CZpr$1o-F'L}|= X-M/%-t%ԞRDZˉj'0)!C<]z\)yEo]$S`Iu-2_ vLDHXO5 L?#sK0AlH|/%/j 8#2[d}m* GZC_nYNGLw @16D [S!% 1uu:`[y !"Sp"袉DUoH*mUGj#2ˤ<<*sX__|ӌ4Wd3ގmo6ٗu0:ZFm# #[<߼ku|NO_UbnŎ{qW_+x9蟔,kyfO]J8،K韘kmq2FiqJQGx|O1*(UF[ V}#GilΨ&t> )V)n;J\,N_s\اt+SKI=QR1c}%?Y)Ayߝmm3Lw~S.[~m cn_;80_B H(H)"d*@~4EKAz0P*vaQ6^~* )ڭTC'i =OPʧ$])tyxSo{ٲ~—{qcV'! \ͭ߅[Q6?-Ph9ڹh+w“l!WB*Hi#4Rj*#Qz/!Gp*p|%/$l}恬NYp' 0&8|8'Տ/#㣵 I\[۞IUhc2 ̩ilEM!%eJsJe.>'oh3U c|}[HI;;f`\$Z#CN&0 7R cO9dar!R}t-yÔ)৮+܀<! |IG_tBZ |l&6S03XTlAH*i%B;ƨ_mC~NL{]&]O I oyO' zh2 btB(T>͚A3l~爠J Ėן?2?z|s2?׺̅YcqvA#d!lQ٤mƁu_;nu#NgO_g:OլȀߕ_ _v6o&(1ά_-t!o:&++Ic7{7֍"O?;3)@ȇ>GXb!"m8ڌ3MV zʩ74r00X!IZ,;0Aj'xZGwnm(hrպc1P*F"2sG|1DYEE& %FC4O.hZxá "#$ M{G~CmuH^L{~ViW?%y{ҽb{e `@`F m-UMSo/Wow/x<4\= 8YRJd v %ږ^ɣ`s F@A"@|דgMG(*' DZ!.ɐ'~F[d{*,uܕdK^sfab ́;!ӂٌ_L @݁h +`E;hvq(1˾"#@̸SqwLz})~¢|{?0D0^+=I r]IcUo ._F2= L~c9;HnuUߨ ƪ&ݓ,9ps/]1I@M* 4tVޒ?-$(@=蚒AiQ{Ԉ:nPL}}rZϓ=mk9s4h#J@̫KE5Τj2_s5\+{xl[[ͿcW24dJ`W_PrEVYCď@Zq?~\uz$^ W9daz H#8(qV0N?ow]` \] '%N:d#@[tzk[uZ_:6>]V6 f  WViﮓҙITVQFbD/!xռ&3>iBq~sE30E|*d}=sCsq˟~;թk+̭fAy=Pޯb]W6c(h1HIR,j?&t-Dx9r(rQ@Pɀ90\AEO*鉭Pj ~2wRUp3& iOlQB,S*p G/sm8o_~B"вHqxDFU/,Éc%}ƴ` 3 2,ZSZ5oޜ؄@gjP#1!ky* }ZN>/G2ݛ+Pd1Ֆy{|0rX .  HZlcE*Z{(T8QBGP8tB$2`h pLJ"TM_~wiL/QGm:2}mV;cD hnph+T,,ZU ^#;dx}#?e{ ~] q?{Ni hQVc* 6Y3^'^y.]d!L4~lk y>NugM9J{KE- W] 3{&qVVBy)HKa1 @~+voD;87DJ&Ԓ$c2X8YYf~G{D o?Tj?>S= {C{'4Na[=L 9LtET4 mp ٴ ,ZlF""pNWioYC!áq[ ][+-N"f~βc ~iӘ/?׿G}D9u~wKd99lg ѩ?^?{gK)/RRY؇$i1&xZXR[eZfZz5jB"ne ƸmHCT6"B"2(B">DP "H ,]_'A"wUD>Pm]T ȏuZeSyUj x -`P[_$#QB{fqrKf4vz[w}^<[3)r(Ak*W#kTM\#B*,H]MT ً/7> |*Ww>DSkv&i_.A "H"'+dU9x?PdJOQT)h"CIeTY A|VH$ !}tvaF;2 ,?)o%(zg 8hdaj|D_oG_U]ըLRspo*axrd)x^^W07#FD@suI"(fge!!s?#"L~uNfES7*BDH2LDaO&gcﯪB!˿̱@lUx­f6#<[,P 3a $$-NN$2}ht6G֭=.@CMDDG`2.=\q~CYUDڏGgV a,DmF@+Lg*i+B .55} ^nrŰ}@C<l̃N$ jp2:O?4ݓ+6f_t-GuF[$AT{TUq ޠ;ӂprl>y4CDBF4"gNv4&JXi&,9j& M(#-rp3Bm^ܞnw@uqs1-9Y<ť$<9ؙNv`z}, _0L"${@hK$$e94K )T9eڠ 2))QvbId~`㕕M@XO[ eIqл~*>l-j;TTS?v/ $iC /BH'$#,?VDHljNc!4N|m{4ruזwQ?N1ss8r ?y2DlUAX&6?PjV_ {ֈjlZK'b?5i;S*\#%^RU1mڻ t褀@#t(ǨM/'C8qGl9.UֹiN)+9 1@] :9d5& gh1D\5ԍMJL?'ǣowE5wҼ<|b^a- p$ƵO<9U4%mb'Yj6%0jG'=ve6u6ĜTwlOJe̕p?Tt( fO1h [RV6'" M{S1[^]dVă8C8sѐ]:Eb(#qI3%J,Oj ^vLfY5rJ{NeW&R HAtbc +z iъRFx"# ᛷ ?pqGNӆݙT T x=b]sԺ#D>QE$2>F uB@?GDFq-Z~usG̱o:TOE&GrJFD~3WpA UKy!BzAö)}}W4@<W2P 8(}54X  P~#Vmֺ{ߺݎUGX1t BIr{$CIlaH`h DI)уmC2.KӔ<BvKu#N\Fi|=И hYu(" H`9!ĭ}-$?~4JRER *y?[!H>㿷Jm$% JS7%'6~_px^M$ 6bHf,o7Β y@aB(\Af8 ,J;>4hUzٸ`YjibB ѽ qn/amXߏ(t1RrcThVJHSYPRw016mvv ڊ6cC[4J8Xr6>04׭ST)("X&wd:!$j~(%4RD,Js100b\{ҢVQ&rPR.[yaȧ7nbrͬu)*+3IĢt`ÔQP"fSZ('v,VFٛS-V2[, $$7;ʰ:.g90{Z̆beZtZ;{5\NUFꘕ&G3ނnPaf.nNs3  B D#Y݇6ZD'"Ixv`囫QşؙJq`"i){l6(CJ v&_DȀ4@0/^*{$;Aڐ*ebW]fmzP!-3XhqJQ%)V&U`a9R^%+O=ec5: zaG?=3o"b$`c"Gi3^ǽNoeY j,1Q҂#$Fּ4IvZ"r&rd4=p=ABˍ4=ƱHDחtMf@n<'C]&83X&F# I(a $cHZ̠#_^DQ IK: b4kI%)޴p/T-$@!rCbo%HIwz7_Ql"%blݮ ŏXB"$@gygݩɀQ/tl޻P]yb=6Aw:[:V8Cꡈ(um4=G眩sYbupB$)ښ]0AWC3M yUG b"mgտe ofcwIxwWHx ZNU]>B:|L+*)#7Gܐ !*Q*pZeV&Z?wv%0&qmsEیi=BD}>X,ZSbunLRջ5TtST$U 6BbPemȇ511Ism13 6Ӳ7 ȧ'R%r3ܿ))v~MuOў3x0 x0V$* JB34Ov!V/+LJEZd ?f=Nt_RlzĦcMKB״Յ4q;EjGj{uƔ;Ii)4wR%=I0bH&e9!f"eo$7SbʩEp\x*{ןcht+v'|?G6=h ឞm?ӧke!ɦ|ػ9, D7F{\䌐nGby{zb8d-_JKuY{.Wt! 3C~gD0HC @ofbg^łin|,|̥JN[4u2Cԏ" Sa ܤ 2YwE[r-Րrya&HhqAr&AC2fE&" &%I3`9"V&;J_7}v$9Z-gfNE-W2n$PÛldmI Y7j|^yfN)-%O˷u9~dJc߃s+nxɪ,8OcCYM]ȔokաZIX"vvAJDyJX[=vчi6W7(xW)[x2{#*/SD!SbQՓ I?*Fؔ^,2K~@deHR&ʼn &`o䗶xz>I3OsL$l(^.;X!sUnW4 lN۪8JKWNAɞ9Jڿ!b+`p `r#-*]qQ*IGERAQvzpQg2L 8Oe ̳2tᘶ@BB~#6k;/W$Et.-TR-Bpe I]|͜[LfN윥)Mq+R~Ж<~>Z.!c2"x}޼~,5xVI!c^H:;uE;$˾tQXݤ9G͖k:(ۢsA!?,U (:[RsuIpk|Z\<E[~`n kYugǔ}٨ˤRy4m)rЅ].GNqpKcS)ޞW9R|2P17;u1,7|V=qV]-#İ4ݱ0` JvrBV5vŶ]KOlS}f,9wv_[m*w>*UȒ{yyf^=*jcq쯿!uwέ#ϿR91yJ8ƸXUFtnu]lo:Qڔn)OةxhCޞ7wMwL6pl ZBk+t//.kIULhЯr(_ @ O&SwT WH&!c XjŚTT^9G^%_ׇ'&*$Z3'~o ±Dߴ1oUoEm[M&Fj$}-?Mk_63Fpn}{򟭇o΋Bw?4P􍡽i#q_r:Jۧ<0FL"Lw[ G8RD^ RB/~pLA쫒r -&IBd 9;RVMsR-n'H# %,,y]2" U hۖ?WpHo 6>O!|M56LxoԐ.#NPHׇicΔ} =64.I "҈*z |&YjR#E0NDF5zFc<(Keh03y9Yiӝb"VQ*r Rx9MM=tx'<}~NjX d%fBoeNcLґ>A)##dC,.#䐃&ţW AT ϛn{vpx_KߴQa֮]bpw]z`.?zmTAv}.4V$ "Yk",.op;(%0f8ŸY~g/~׻tz"x׼_&8ϧú軛& 2@y8?ݮGwևkw7љH,sc^ߔk9aOx]EOYSH\M:+}DhұW}-A' 2pRm0 Wggcob;IC/gϰzxX_/zq/%v*lڜ'W7 N,/e1S$ 0 b_wRE- Iz*OWt_Eەv`ݲLC4"y+1ρH20J,is2\[Wsxo#q2Җ7;ڟ佬Oǫ6hqiP*,G;08W[SdTmK'r[v W{2 e?Jۺ6E$C[De9|ZIJRs׆Gߴ5 ػƻGz BPyM%d Sa/J:<ڱ) J9b˼\?vԆ9(~-B%QmHQ^wclK|9sũKRxSB9I[iQ$ix C"A9Uk|"pP=cL D+Z䲄&u"x HjBf&n]74~r'!&ݎy7!NR䝾L],S^㬠CIpC4ձcZ=lniWM/#=j&4/U)\!-q䞽p39 26|L FJ:h7uN)"޺}is9!ϛ4xwq><^zr`M=-dw3:s&;,7?%=?ԏػcO{0ʫgx3.wv&yXxuЕVWuT4AM[q5NbOݭo.ߛE}8|; ;O>|&bgsz)i$RVB6C1y1Hqz7u?Q2o\UHq2n)ģ9$ٵp<'%vI'z}j_}c)ipEt[RIKF\*uYRsYrkxT7^Dٿ\Quml=`z}?KPVԍgPi%$rW_SVLq󝧣;J>VKתfG"liI $ Uz;tVW&I:^>~͹ a*ItA {>Ţ4{3yRZ>N-\䉩]aNQ  "6[uU;`uzcO °H?U͊]Pq} W^oWF$):;*`*;=>wm@8 Z&~r- :M /pR;}G. !/kKugx5VQT ~vՀa(/φ149U`1;\i,5.R gs05$SJI{.hA 38xcܞm5L1Q'O.Ch,ty=?=N9@m:ѵI[z-DZ $b-EUT$UQ{X;]\3a0D(L`@1xo+}ffK$| DigFc<'?v3R@@љM" &&N+y0EuKp~m?81=xOΣ^>8ٺ :k(~zP$3:rLwx/Oѱ'6HJ$N>9ƍThT$  CB*) 9țuuo]7_x]7O#)/y2 aaU3B[>x` r>: &z쇢}iTO;D*!|Q$TeLsx;8ʐp!F*C~/wL3g_C?50:is4Ʉ&$gǽHm&P[A{d `amf+M H-a ΦNL`ET.4;zsj}:{BILBݻ D}IBvPZGɂ"Dl[3} oj2Gٱ׹\iA@Y7EJ*OAPU_TG~nΕAN!0a 1Br0ͤ+l7۷nip_*>A@n+gC-ʣ F&A1=^_oP$ְ"^'*I$ 0:ŝ/s V/UmJ.7BtUh Q-@@-B|Zd[rۃ/о?]L<t=NmQ&5h~΅{X^v@Ĉ.uyB8zҮvʵqt[,Ow ֝ DOɢ8ʇ}g8m TFMqc'i6M ԛI/0@-406=I{YO*z D9QlWFQ<+g~+*B(cgA "{?uBks0+m|] wޠR{an"$@9cBB"쀢% /j뛌U+ ƸMN#xx*n>iDo87ƻfBHַ]hPO2I[ߚQv͓ Pԓ<.18& %q"~G%Rzm-[\~}Φbo=yΝ n|IFltA3tRXnQ?ٹ0Z5IZ핚|nӷ)i men1̩Tjҥ9yg(kNo?8roiJ8t~+e?Nd %҃;t u<2 R҈d(T"2 *@'\Q* TA""*Œ֟xw^SϘp/ӻ1<'eU > > aQX, ]0:J"'ȳ%gG.N_7BO%ho:|['>/7rj+؂Q^zM?kI>K'T>! bf" EZT#p3=vGaTPZW[ tBq4x _@xGHg3d"x݂`ﳿ ~u%p=,EH%Q q -3d0>) {r&Qe{@L#:dNeou&K"5A/NgLa3HLR)bSbYZ$*`1vn,Nr-ԑ>E% /{ (ge7)u8.D"i^$$8$wv" /N+և/x-CF=s `(3y@`Wt?A㝸E08 "}d #"ԍY4rESx'u&-'W}dZ ݗʹPg>HRd9Fd0z,rGS^_O7e RǯԇS_J[6WZ(ׯU}J/Jb;!1IfK 㪷 @dp;LiOls&CԘ0+A%nir/"NAs8X=A 'ܖzO(ER5ӟCfh1$jqGn CC1B3F#As7խiM고9[F86 l 34w|ypťZF| 〥$@}HwU7UNѮ1xt㔹`Hs)iw1҆ !wy RVJ/JnaC@> c}*D$A0S7WoX[<#}lƥ97`O!Wtm,NE(u2a3wig˩;;k$FEŎ`NɘP1,+ABe4+bQ2yPPdֲH[0gk*H6 d(e0_gT bRڱ4T=6>$PR,C Q} CکIFy^2͖G3{|,B$_y,F`\M$D4 `<ā Iw[(%2h ?@~_ZcpkCh|mV9<>_9SQoE^&eI!,RG2 D1H 4e[>; ,I"9 t IC?d$dcD )_\ָ$ؕSKUy=WύӨWNnԣbO/fV6؟dPnN.MGvJpHiſb덗+_{owl!f4&-=s|ĦI L!6.&0R}'ԶozE{ܕ K2Sɉ\$ g7XAx rI#vA ": ɪcA`­svŪ'BE×/YX0W u23%fc*#0, 1\Z7Vbe@, *U"2PRxIɶm&t- *kVS]-gyHR;89T G@Bd`{Yه9=/{~`CftP)UqR~[ޚ1cLR8RC-ᱺ:!8;#l" L4[H^Z>F 6Qa2~:rw^OøiXfP<.SiyLyHh]1VsK(v=1UNo+n{F<}|OI_e+o/{w9@Dh@&'aFu-d֋;N {w}'bQǏy;dAōR0!@z0LA7_^dmW;++f=Tȡ޽@fqn8rD z6A|;{:V_ۅ^?ςuS4@2r/Hq/syzu#ȻZ;RS?zmc;=|JFLX#_xpb`h}~;Y軥4QQLLCwjYp ` ;Xa}g4/It? ,&)v(HZ>Ci{Eg}؍ZÁDzi4})iѭBkBBE$!", INMThh_eD˳1>wf~dm\ZyS ~4\g\Ts25d Jߓ{ uM,vq a0،f #wP&r@e=k|ݜ.C%co)E{FPsQ]$|,$Zl&i^#sT tmKL>]?T{rIBfha+MJ>_j*6 %xQ??^^Ɖ~oĥFRFH p/1`V\uDt۵ɜ'IJ ]/hҁ ʯ~Q뿉Q q7Q(C[ ܣgE{cv11kIs,PIB@$\jŧm4:\0䀱92{qB||r!ڍ'Յ* A `0 5bI)_>@` kO1H! F1*tWͼ:W۩[Xn"KȩOa^ޕ痖C 'h0L$eZZ|InԒeA/СK,`ԗ-GWY=1ηci/~{ԫ|e+nl&X#jԳ_0|Z~'ߗ}dI0-RX 4zg(]IYsd+Y{\ FBȑjr$-Tpɾf |=#:IR}]0=׾P2 @rVRU5Ebx}3+q1t9qM@GƈYgH KfD9 6dXpxrz+4@܂u L\ `XשjKAIJqjcIrr$ad%2C85Kڵig@L+* =b>Ӊ)*AQNfCfzZY,7ţp{GZ26juvHP]E{Kw&W4$Rժe4[ Ly6fZ>S0g*nVRN<+ w3շr=$0wX̘6YVگlU֊k'$:s n``3?3^)awƌ8/wѾk`xoaAr'aWJ.<x6%@0`0wt3M1|^t4v J%.p;)i7fhwQ7evaUI\y53y XqM9|]U}$fȣ+z'toq_W#Dzci|( -NUoJa#ԼIWᛑ =Fx-|BU+eUF@ܲ<:oP~=y<$(s#"P`ҍ䒮r* BX M CƺG8z['>AoRrB(G_ s0+#̞gѺ-h>T_uBrxkfInr<;5_^11CK!k^;DAG/z1}$9ruަDI?ˋF]:=W*ZMPl8zKfP749սBvPG3 T2;y2, Kg5Njh#tz[ը"w' vcJ1[+Ӑ4 feycnǬgZk(2JCVbՓv[ٱ gwrKCG[m`s@DhyHp,6S7U7*BA%6lHZ^`,EWHFj7hě070$Do MGCERez2 OuFp89tKq*Aަ\F!^LC7a>Է{&l=I|-wUmCͣ$:#Ĝ##)X%Ip1Vb(ġar 6[#GSY4XU2|'ǫCȜ|]nHD%k)2&`@+p&99Y}DiCZ7]˳_w6q"Q IC 1Dvf$|OC?)v9;9Y~t4/y21``8 # PȂ<%%$Dda-1n/(g' " :~g( V<}8d^cՉLL쒬ZAT|:ZT'WE@CE>+覇/d3Zp Of7iN2vA Ngʫݞ$HAX}]z?JC炅$D4Qk[i|eb?jz(ydggEM |k$#dYȴ T Fsot)YzD[$Oi8KzBJ;7"bE&E]kSK = Ty)034]';߷hzDs}m݁K&c<:6$zF_Az-dHz8=P|4 F#̶c3( j5*.\#(EaKV֢EakŠj 12e RJTZhRԲҩ[|fyRs$C|Ƅ߿nnh*\D#B롎THK?}­*%0v9F*}P*fbDal43'[}-\7_8*}ϯ?r~+NhDE? 9G\]=ROP3 +/[:"6C# !Փ+B -fU^z+ nNÂ1kHۏX ux[P(, +\[h(x ca$#zƠ?|NxVH{-H4#M&C^dI{·! 3DEK'.7ɥ)cc.(Ŧ@"aA8S%`@AgDs#֞$>CӅNc,+ZX%&N݊1-de0Mb6% IhN.,#]lM 71WH4?bnAHAU]6Na*~yA5]jVpP,@8ܒ2)` \@II$5 `V oig?+j`=u1ɋql,|Sx_V ?@ Z>o?1w`Lccuh5G'J:1ؘhV^@)فq#d47{\D%RDiL_;Y,!@! )$#hB%@`{y[;B7̬Dd4w5m8/A@#Rq@5v 6j D@FgJm{Frg9f[ϭ= =| 3s=ͳ$HDH"AtG>^rl;Xn ұk'6`nOܯWimđ*u Y0q`nF_%@Xֹd\WRJГd!Rt$\ވ "EdB&^D`=?yiy$ӯi‘v H7K Lci/}gԡRm>QON{Y.ڿZq;,HO?('zFBȨYLi*zvǥM9Z(w29qIV$d!y/oIʖ4@ @"PGRiS6ZZ~YtIbݭjz5$2G쩛n;qqO)HYkJ]o-y2dvDlm/w{^Vm|H}W5&$ܕ%~+v [U,*Xyϳ{ykm_ _Ai.[AoƵӖ:xBC%ߺGmċs<$xs&KWU2~YFJ8ԴK[0G:y>/K{K<AxDk>' WȖA{~8ݯk̕/YjF]]My}ݓءݼG:qc/smꦼpT鰭)I$r/A'-\(|SU4 ;KQ÷D#<#"/ \9lԴ{ZP'́%rɤWEdzB@YlK\yD%Gw"rA @_g.HMbtd">ئŀ#e]kU'=n 9}+g&nN]g(<lYl?meͰZ5-‡UDWZLD٭?I:lJZǺ2b1E%Dy Y?ƥ0i ]c5Γʅa,=^827 Q3] OK3@J5uP"Q@w&͢l̋,D )b= "&o#^bp@.^ '6 $|4}R))\:^Tڭܫi O>݊DI$ EB@6\/6X^lޑ+/ UR11Ւټz[6soR0eaM9 I(S6SJ@ R9WP=(n(õ\©l)(ŰٸRPUHsPJMN)aT5DzK]X3+ϣ3tC3  ~O;G?jqO׈H&Ɛs aN3LoB-4{Z..yZ+Pr,vr3c%|7۷߃~'wO{:,tx}Np@g-U#QƐPu>$)f qztㅏ?f}=OEOc=޵{d&kms@jG 9fd@&<-&c8| zQTTa!Fdi h B?0BBR Zme1F9QĨ됂>yǭuXۍ*GWǑ/ncIB7@$3R碑[Ƨȋ0x%onzÃb |Ӭj-,P'LVՆr0$OM:F@ KzK:r/"b۱L4]'Q gOFAnDQM2*g:¿YwyK .[h'c(V31$HdjbW腾KP %qh"Zd _605A{8 ->l,/tDc8 d>s=&x =Z*]]Ϗ>Mψ ܓ6_\U `IBͺ9 LDD*OChA e#HhhXT9ǷphRDD(tPoz4N#*fAb(Zwr<;XzUԲg"t*L7Y]eI~"V^D)p [)$R^Vv-ЦH A=}AjA6;󨈒ƶ 8e$f& !,MZ6p$d֤d%0ѩn/9CkZ4|"N dCC:W 8udJ̐K~_q^| і/aD}+Us2}{b¤A >3#Q6 HY2,Zz"RA l@;Ϧ5MQ\kJ pygQTwS:3H0Laoɹُ@R x*Ķ_=("{Ѯ ORЄ{&kKf0V4FJ/շ#avIҙ%X4ʱ>M!wEx/;v 7]1izpIqlAM|a㑖=M j{ldX$tL~Ox31cv>N:ݯ3G$d$)B{#;wh^xۗf,gM}(ZME &MeeJވ" QtYR;+7 |&(MØa$; >R-Ov5X A90H|VTn@o.R$ya =PV Sb:ޛV` ?e}W~r{~׏u5H SV9F3М2էnr lv dpc~%M[[ˈ!5օ A,o(8dN]-sH@pCsgy^ϡKAAh U"#p{N69 RUQ$ΎMwHM,b$0']xB-"Aȿ0oThaE;l>s桢xI9k9{Y7 atPfd*BDm, l?fƯr=0ML&\({k)Op:x]<(ɮʰm8rX)5>?\p"1Mi(aP1+Yaud^L2ϭs!Y*JͤR{ԕd휍o ټ$AL2;э󲨱p4/C9J. ӆ/uy>Q9!B*"$@' CÔ-~7/o!LCMT(ȅ"9^ 'OE`NJdH>ʆjѽ|OiRw6~Ujg+;WŠO}D7^vjmm)2gAHfr,j8LӖ&0zӑ0ֽ2,,t[GM\+TG+Bz=a'1<'-b!Q ZgK"VTFe!6ŭ/VTsb>7ھor9qӰw9f ?p9G v5t3eOi6n1Tezc @+f;יP@cR6ޒQ´Ċ}cBN6]H? Uh.ϥƎI$ I R= ?[%"O=Z-9YSFcwڝ6aGu>>oQ1cQc>_C2TRQdb@NHa! @!?NfACM1iBV1SEW qEY3E.v\Yek+뺃AXݷ??~(ӱV{`4Ӣyj6װIf'n oev;cK:1_N@ $X,$U@dEY$FAdDDc2vLD/r{SOZ,iXQxO'2LsÇnBBTQ*T J)yuYT8@W3쐢( >Ӱ//<2z}Kd}Ć&+{EWӧ| 4vtMQEtxxm2oļ0p'] $`$CU# xSJ0CabՂǘ> 9>/9- \HC*%Ι ~?ԇa*/Yťt$ڷ7[oznPjGv;ʙL u =bG;/8{N]IccPwd4,$%RpLj*?U(߶G\ھj*]@R!Bv^glp&D`HIb()@d`*+UD3=\Mf{շί3Wֆ$HERF@XAH9Z^vl Φc~H"o7*S,$$ks6iGxuF0DXL\H(;^<(mQ9fod Xq[: 맳$tվ5w@G}ҠPj@j,o9l1=Ɍ﵆lBc$Gk -`1ѣ( \r P0'?5uO}s~-lEzhJ"@@@z" DC%0Ƿ=E3NbM9_I%{:( ͉Fv߽=nXNLK%c"`"1K& V/j`1 MIVSANFq!Dov+ڙeWc' tt8@w)%:z+A y:5mgb+cDE+!%r;޳LTTER|$d;o=/|&ս̫uaN_,%#+>XŇv$ddZiVJ ]+ipqV>T՛3zEQt.HO]ek04.Lh;CۗĩW;%w9NN5.[6KG1s*r]/XLTm]\,[F.+3D):>2I S!%WER=gm&C20S?bBvK[idoϟ)_ m렳8"Z$GLh;-"!-(HNZ`!Ds\08{1J"8 F5 z*bKIz{Am.RFb==,Ș~3ܕ ¸'ps8G@#,qv .BHBHH/P&ɚ/M|s h&j=Oot@& Rdg$FԢ,=.+_= TXD2[X GGyܧ}/?lY`X1T"QV"QQ@Ws|)BN]ьa/$}džr ̓aYLʹp+JƜWlEH} oot&ݎw)!hwMR6=cdw>jac&!oQ'2x/ψ/:xYs̏P{ 3ah0;K$^LGkS^@ G\HD@AUpdNcRG@lX*M, xRer@񵰴13sv_L{Pѥ_bToC(l'WͩU k ЮOr)?6 S j[,c+LJ'@5a3bRo[E @nHR $&\ѯ :p{g.# L8\ [+^ ,`&D ,4qI 8!( (L<i@?$fn/t'1)b,l]+jwn:M[ÓR⧡ D|[!T4Db`f~_;r!n}1!>Ml>ז?Cl{|>au,H#.#1$D* BĀ;t\;}mMyEDP [ceMUs_Ӑss.On1c'ѫ'(zh>ߵO3[ [P՚H,a|cn_Buk0?PK2~D-:[â\&)rUq DV ݿ*cI Qs}1\ѬZmSŧ2 9ޛZμu˩dbdNy8mO zK ?bc/R };/,$TX@>AŜ_,4 i+t 5e6D2pUI u[6V'lrg ]<EjI+ىy܏ۈksrB;mJ3 !v\KFct;pK}_qr-?BѰ: c2HhRY@Dū$Cُz5Zqtw[vu6KW;8 "jYXxl?2Ztц^>;V !$!:ZYFtd5J" c%*uERձ/(I\ې ʚL1>V XZ&k'K'6/6ioiS`F KSl+*tkrK7u'.ݥV46% UncuMG 7IZٛE 9(z IW,A8%*d:;0"gqSqd+^Ųz;UkII"L7Ֆm,pJѧ0 Xw%\^%ƭFlu::Ý(ESӀv >;ګܓJr,cuϰ,}}O;e8Q_xX4tY:77ڃ-j[\puU0 ";ݶ>ϭ< ёM*5z={|Br*0x5ߥje3c֙:Ʋ8mmfX1NGcȿ7r !㔁tB4o٠Y!ػ?Lԟ57ag:Cg+ZE%7Жf*禅@w-U8V(N-WDrC"%\G3|8"xĂMu(ɉ훰Fф[oGcd [4"m(SZ׻# E;4Þ!^z__ ը̹ADiQ`"=~p*o$Fa>n8d]32ϩ!PҧBjoM56樚w̌Rq>y_A(exj[0 &C{1PۋR[mQ҃.oXb#P^l.Kf%,wəb`Œ1Y>Yfñ[WLR~ DDep,8zNI*PԫtÊHWϠf9qGG"=P!q{2d5pPҖtHP'&:p$bzd_h` Ef,yB1~<7z twq:7Rݒz%7GZUAޘU_;QIZ4 L{')Dᥭn[@:IVv+X /J$ "LKO4chz14'̮t5^&oZ$nPk#2d= $U|{[6y[teĜ̀ôTmAC ]ކtل?o ~DT9z<=aХY+TО+ɗ'FYMEkzTaSJ%$i 6v׿^P[ CDʯ7/V>?+Bqɞ82om} 9iP1D! XE)HM6x:ՊZ8=}_7+goa}^fyYN?^XwB>L aP ǟ gf%l{"sWZsF8H$`h1F>Env$x7ݡz9,AHD`VfD Ȁ"DfS3?,,-9݋!f3L et*d{mc%%83ڙ=ݣ DPv%;S{ٵ>6m9]ggϽ*:Ea"DDb c3LV&o:Z.x $" X1m}mn+~ .u&A Y^t,VI.=0#(V!9:j$tާpF0X*XREEa`nG]78!" ȫ""ׅ ZHj&R8dY<:zNiYsFg'=QO?}Mӄ]Y`&V,` F]= QOw\/Dc}Ub:ч]x)2 c4N%5hB&:0 7ΐg @*L jdtck|)V0MQ DHXF)%?,fKMf6iV%`m͆1)iNDiR 0NbrzfݡS 6ţէl"֫l@=5]^w =l< ц&9O)@I#{_->Pg[kHfLԯk*,MS6#B7xu!52#a$IGwXIzZ?75eEuvRWy<~-0:#7T  a@$@y+ UG.`Lj$N0*bStY:"|HR v$|PeM>LtH(_ ߾ީH٤F _z>߹((*~}+D#b#V(1PȌHȃX"AP lQ aB@ j6"l03B0vLCj締 Ԇ"XD EZ3k{l?DeCYz^g>]8={d P'=zX"ƙQ) Oj٦Ά=-jcv Q @נX_Xˑ<}>?-A"zi̭pY8g{bF *N7XT`XXŪ`, %r`A = kM91OOȗZ(!8op1b;ˌNI@DHt10qM@qUHRcMTC%Q1:G>7m) TCGH |2+/QH~5rBz)oc/GL)[r 3,"RCO^pSN} 0.\KεFpưW{3.n4OͰ%PU}.ʞǤ/ܧWOK$  lA Ѥ"zc(@Ta_NR6Hp5UKG df`M_ Vki!j$ы?CZW_{$ҍq7b++y _ɡ܉`e?OhY8"!<{PpܻUt/dH"xC? "osWm j\_EzP׶O pff!qH u>?Ũxu:vyϷ9 Nq3wH@ * Ƕ`Cԏz~WpO/k4lK~, DDIٟm!y|v>j_U5laI>]Z}qGv7Zw9n"sb۶ge_Vzza6X6 dSZ"EV(Z {-gzc+FzLf ǹ#JѨ0y$d2[-IE(rOp~V!oZ9<(P>SQ$_om+H(c9Z0])@6;~<&1 dAl voMEvN3Sb DK%JQHJ8RTI6/3z-`+Jq6O䔝gq//"sRh6_l/A2,IDl@&x廲G[cƟ9 ^R+\~6ǧK&U3pO4]13sXvyc$a8Mg8>=%}[?*dJ/PUŋzerFIJ!=` }U (<^&[/ dߣO:Vߏ[?Gi|F>]nHZU˽毦;bX<'/' wZ{BHӌ$DHZmWO&٫XbvW>.F f-G㾄|@|CuZoSo0m(GA)P/sd/CfҔnIT9iB] L"WI)/U7)YK&-o@2VFX`58ʣN"&v)UԣN0E:sD6p@j] yV2_-wEEV%x`a=t*uR;ݩJJlt+mwf1t) c^eSN* fM%^Ȳjj[`qV'kB3ފ"-o,|wz2`dk@ ,J@NHuyLi_Ȁ9W#Pl-@PظXH/P|zN`r9wX,d^,u>m lv9N|7O*} $|~(- (}ǴCZ3 q*4xz|w6"^-Գ淶Te2rw8UE~-˚DIĸS7r9A`wU6j)k|Yl~"4ZԞ> ʼn#| ekʫ R BrBڶ2!0ogf!1l!E"ۛbG1B=7k=9^>7yc R@FbHgw1ž|?rK B1F.aYIhEp!s*j)KУ0LrETO("p (AF0r"PyC"Ty k Y@ k R] 7Z%$VG͆Y+`ՠC=e,Ad^~bŌے!Irzr. RA?<Ni_hB\!#"R0>/諿F=e (\tcwt(TDiN1dz{bx;tC7aRa1eT!( !>˽d]X^F7x~^A""IGdA-y=tյq=g?fcn{cwN}0J.ɑwz#aS`E] @+ps2$ց[uE!+xi?NI TEw< 'JJ2(B?fX61H!#b|UPHaDF+"[fpҊˌX"R*MP& K豋_N:$[BBV? 9 Iˆ0a8"Z)#l~ɇkzK[.X0H#kWPʮt(F4q̘&bc1°p֚8^G#/Wܬ$CUELU$)#`Tܹw`J9p>㊀ # \st AYڛjVIIA^Ԗ0l-NS{@Pp]9cEYoT!L5"IQj?xJpUN !x^l%ÃجzcHɴ޹F*h6 JeRʤDƉY9}UJCSk **Ô@C +p.hV$zp,Bgú5RPOuQBJg-un-#S@xV PIԊ1Ua\"!Χ{ȦXC2tsm$ހ'-X:(bM7cFFyႨ6#gRUWW٪EbCMi{>Kn-˥Å~(޲6 Ofs#e~r덼?(|vjj^lUl(}hD )Cd@lk lmU) i5 QVOdwI**70mB@'l=lCվ9@[7;MZ$Yu^ó.V!D6Q KM_Bl[1Ug|N[A. KaHNƏ!ۻ' qDVq6PR>{R=,jbv$ S|vaxrԁ@JҘa$MdɈuwN|!nO> Y]ne!sKfM?Xgr,d$0` $q0iXD1%ˍQ_#Z6ѿ XIdɆ=q>MQt? HAR1#EB`Dߔpx S}-BHR?dy>1xh8=ߎNI۴:~8mn8OWǟN%ZWKu41Aj/ؑ vhW"m~/mF%( H:<:9dn#:y%T!#5èjUt|FωH lݢ~)@7TԞ̻&%_ewK$[BëF{("rȰQP)wE i9Խ_6%ݴCQT?瀰vTcʙ3[-7AW3s>RuѲN ALaL@*E*k#G}n'r"Вkt1$Djq-CI&"o5 bO2O0CQ)}/x?4Wj^QXCdI uĪ49CuXvG6MJ♃5#ZP *Hz=_9"ELDZ5Eu~O _X㞖K=EOR(8`ht$}oO'R(CCurfa7Q-!~z$d/"gPo}u"7Sje:rɄ>5ob! :0?"05L -︱3IydE?Wοț6Qd}%`$81_8sdVHTjJd2 IX,Pwg?/O`T{sy'5PLDv=r#}^wW,FOc_sR i#ܵCL&y9tÖA-w8+OA/4N'}3oA;BT?9djiʹlY_"s3ׁ~⊋5eor4eU2'[mr_yMڿ3e1BzXؗ'&ۄcfWft {hT9Kb;L~u mAMIy6$z(X+XҕmiYPT[eTcPbbZAVZ¶Ո5X,%jЭjT °+b UUFUkr}?2 `M;NѸ {-%O2ńB3'ҋxy'%aAg%jsiWlwJ3~ S{4Zx=ӣuz{[0?}X<А)I:!$C]*=61maR@5S/D@]ֹiM9بjD@7I-`*?id7=T"1!vQ0\ 1u s#,@l-)Q#/2&fꡤ_#d _={뱪sRQ$ҲLcZH0lW6uBҝ.mg9G((X.Ϩ*&b U??eNs&dH16%UСab腍6bHO\" @őq[!$Rأ8 ,`v@ 2 Nv_6tآ9ְ0>*xbWr1:rlxBu:H>3?͚G,ůbB0\j)H?{M\,#NCm23ƐO;dEt.g]&?d$F" .)R4jA2V0v&uz@ '{ Q%4% "70I}A2 = rk wHdH='58'T ,XQ?<&pxtK}^34 Hb;.H˦UcCofHI# }(˼b_Dzjm,d;]?.'BnHz B.$EL=cC-B(lo M)\aj<Ş>V>_RZE;ZQrc(:I'Կl#O_bx-ៃ%"$!W~eINKP>7YLAc1"x hIo؉[d ֯ffO4QK0cSZRt2pndXN.Y8vG?ܠ5i D?1ERPzjU 9sIQWj 5l.9` /Ł}'bjgl5Tp3ltATpg\IT-Sr9 r0ѐ*ofV/!:Fk~ǠI<4"fF\ě2HGo1sւ_vv"#*_,him5yVwxWfHեoK4HGm**x .7܅>} &=)"!!0# kz,XPoXm]>QK˥p m݊2[ޟOP6F90٩Ȩu?׋IjRL(FB""A6O-Uteɻ.֎<`znU4_c#.O'Of5|@><'ϥLNwWZ 5˅{3Qn Wl$ VF'PrPSY2a$*tEALP4+`,/# *lRLB h%_ 5 0{'Ohy-]/ uyF;c5I!~sH(L<UC/ [^6ΟiS{> _'|bPHA}s[H[>oEIy l"+pS"<^QGڞG2}/:W4RCtylFZD&hD"/W>]YP'E77׽ފ.=>$ B#bljߢQT6A}I1VԤP]Eட0siKCWcݚ}}=^O8Ke>9tzEi6w}/hdFrz$ዓ綪h#_*2Suc"A@8 a\ÊoppZgli>ѳ%9S;UЅS2R}^k  gN=e-i= e]c7 XkqOj IDUJVUVyM31u׆xtu~6ЯҦ+?!M9sJ?ׇ$ `wRIpmG]߼F_yX`+[i !ȃ/ՈGC=C]bojs`ۚ#6 D tn,jQL2CL2"#DdyS+4W($) EK#Y.y6QV>O>ZsO\J$Vv'|R9U@hnFZ|l˛DY%umgp&S7WpPJsVI3MU3Ō}8Vvjmֶ%?ξcHL!`=@ŀdhY3j@@ja#YjlIe\F/.ylt4 i/CI?"i:(N[oW4M-٨G PU]5CMy qT_Tn>hk9L!eRf` };IY @ # dzc7F} ˄TBE9y7 6pl<I'`ʝ&ᓪ%?K|j;2:^U]ԡI;1Qa~ǞKaҧڦBmyv4^^%Ax/{՚3S_L">IF&Mɭ@!ve/L63(/׎۔Bh<3-%>S A"FE{bΆΩe5A(+Qda&H-)Z'ۤKu{x,tÝ=U~Y˯zi "k1*iyfV+.1 LJhb>xsh1;ZK*: |=i*'{V>m):Ʈ 6$B5'7bzzПKayw q=Õ2TJ y)+-(:ǐͩeDmdA<;o؈0xRQ#xivѧNfTL6˗LhvVdZ3LVC H}S]T$+̴LpyCtz20p,8aA$vmu޸ގ5s3*7jEIJ `MG/9.6εƜ,Zwm 9NqK 7q+;'XPTCn0zyGpU2`:e_m;j*7&~ oas3,XqEk KCU[KF"Q%YOX`0 =ҐBo%YW5,/1u JMB H29ЍPiHG>t !&$YdOxk%ˉl:k.P:JfYY*.6 cJc6VS<¸٣λ+cΕl),! ƣ$$΂V^9#e?4dn(a( e WLKݭnq60mWxq_.IeȺZ>vzz#דZH.qbݎ$&8ɽF]v:(]~\6}KDq~G åwtP{Q^ Dۥ>*s4 ueDtl\fn>-U%$6!Q=QoM̱xM-Q~qjzȔMB\! DwMx詣7]b_  7LRjJ1$__=nNt5%t`יa*T.Qr0y"mF7Km21'pĘ&bęXWJ'6mRXS3pJIкR)97I R\b-s{Rw_7C;p`b^ė.=yx%o'YQy4zRuH ŀJê1[۷rywi~ݢRǞ1::P&aXYmE+hs!rn[1>'֝Cɏfk]+v/w$d_vU p4f Akȑ酪̻ D2l4dY3X{ )2=n=900ͳ6>.%!$`ORTd9Lӷ"9dd[ $;,ҵ;*>>6Dq@бc >QLHU4,4H&LK6mD՜n#uנ/^z!7'}xljGZL--2ego < i .wC-iJnDA OE4c !1Z(9"v3fփM^*- ܭ3Q@/)bC}@GjR^߄y=jKͲ0!L<m`/.W%˻Ӄ|I'K/<>=ءKnu#׉]ueVzxM&4Ie>);|U.%F'2hrDb#BHBգd&^>bSN||9/摁Go9v~c$]Ué$zV\+D0g>ul]^t'u_ YHQ>=a̅~,(jO6fu(2n5^Q*=9zx(tĈKuM=iv}%c[{pGG*/K¨/)g4E5lQ$4m1g7gON9+a fpS KQ1?= ׀+GK3~BcY&!%'%;vuǂWiRLpǡl ESE?TC}E>[^}G57쮶\.33h8R~{zYxi~ D0= LTm  ~+ ~P)B6 ``OLH1]UV[H>O-+dIPYdY4@Q>lՏtPg45q}hR,Lz fUɹ-r6D.2TF!S?ce{f-#ΞAc()VzUq]$i_C? 7O<|6à'K4NAzӗ9PZ BZUl[@=A ϼ7KH.$C 4A?s994gIܰ1| I;ŀz ?AKyqT?u> ǃܒ !4dz_02T4?BDCKe @$Ϟ, 1ǟ4. W1GE}Ը>D4(:ZR\ 6A!#D*"]Sgԇ8o*0|B?'eר%f1*Y~f}&0 m@Ez,+GKdP":yQDC^JbhB`mk ؟p%Dϳ@Tߊ\sn'/M\`E})'^ :iEi-;ASn@jȉ"FO](Hr6)ql"!exwykÕI +GMAw0gߝ̡<&fa|9Scz99eE1S'|_?' !#T=jq>U)AM@D ^/$q"f;"~QW0k7o`un "@I@6p~jd5_4Xuۋf tV>?bM٘<96a5 ^s#}c)B#/V}#$ $"Dd<.S>w;{?g ,F+")FK-d / l[<\:H0&K+Hvy-oqW|}:~ՅTD=a) ttMK4m3ZJEU yF7YOczM 3SnP0H!}1d;> _(v X)-}b{`?OGmNH ==,DR0 Yv1 =?!{{@Q$D /^Q"@J;]nc<r) ((Mi?q]ĈH,/"?xTB9^PWPY\V)V`i% 5`b'E_Z^]}drqѕNlZD|_nN} [0L/c짣W u&(&P{KOÝLjh#-|˥0[;C_y(Eb0@M#h}y~6\T[o뙆жgȸvbLc wJٷWHʵ?)fs2YӺ/\{ m4N8qscN! 'E]]~aur_ MfIG &^)ؑaJL_\c?@'x2]K)Pv:2B M@1E&¯nX|H4@ S`! @A&m=ZpO8[tq6x]6n* 56dD W5=ӛ[w7(T뒿jm XF 6wb譹 2ʤ3Rs?#(1}h 22J[HH A2Hzfl.:G4j%8[&*3~s!L#͐UCAb쑌ͱ@F phgdk9u>kt"'3Ϩbn0IFnLLw`Nq-!!U("/%N~ɔM`,9jA]kkHIWVG ÷CT,X7Ǔ6h ܐFN BĪnx+W=Q>"63-u0P̛r̽?;N~ew[|Lޞoa3˻MՑQmS:g[] t<& ܧRy, t&=G4?,ic2-Mݔ 'A'kpӝSE_?ݾٹnj%w1=- nP@#"D{47\ g ಎUc򎏭>?#fDUW v U\._f>5&DQ yEi9HIjs`1u?+ =^["KhT|ʉRVH#oVhF ϠQ=`Wz>Ty)diy՞4G_S_y mQgWB/Z+żKPᷗ9ϗ߲i7ͼz>_ϭ.lW{={~tEܷ_KaRR\nԾPJHhA{  Dw=h/$*K8<[-b;8y:% DDDc7 2|uAy-)\^3f1U\ԶJ"5$86* ?tՋYG`u/GmE,½^EA[h。9DWG3+wеK%P I-^kJ @~ S}>KaP IWZN/Ɂ ?Јی6s7dI$oR'q|]( jJGbz.~s{ *B͑+$w9jSfY#KQbd#Ar%,%Mbuc`ٖTgk / H{شITЮ?=hfN/8HnuA:2_U( _&AC!FVbbP[FUQp5LZxi!~58U>obd5ɢ 0$ъefaő۳?چQs'&&6@o1S9(N9vL,<%[?ɄkX!؄byih/򿶵^^_$qz"驌tc0im2ȱ~&)MI1;+qW˜ iy;M%VHɦ}O doѾI)gN4;/vѳGsA-4jTz #;4w~oCg$w\G#FO=6*!z A{g%% LWq~&)QNwwu8eiIk7u'`l{5|ٺ7GeyAŷmf6 A-SVb  )~phYe#ȅ':g:L`qtˊl(k՟c#NāBr΄ŅD@d$H^ғn;d!=Sr0jcG:i!TJM$^ - KkD5@BX4v~wf]݄KDe'Oi |͹wy|Wp3HIZb{{LxZd@DEI!xycڱY|㵣cχOqSVZ>SFY\5XB#ZhmL賃DU݉Ĥv΃d2#ㆹ֫Q C4au=b-7g΢Y$+S"pznze%<" ӕ{]cvt@`ܛ׬wڄF>3h>u K5ZzPA9ߍ*d:F-s_h."Cs\~0!1-lUިDk0Zx &T^ZJSx4@mzy:vr>P~CrY؆a^7_;e xƟ@(2AqC/_$#>\r^T: Ǎ^^D'NC޷y̘NI.HB>?L+B:nlD~ kժ"d!_ Hn~dRѢ+42On8_3%νa ʽLT/v[BY]&1$<~'-PʙJf s` -CzpYfXv"it&~V9y'#>m++I**v! I~ L@p7oWˀ!dGcƗ6Zv: E0o݋ϽdX >rTXGˆm!vPu@%e:LQ鳃Xn<)Dd(; bHͭxRP_[^YeSL;Dz-aݏ=㏜ CFؒU'v( 'lXM/{hL(H9?Fkcy$nYX/˵u^TYg ?xW`ge=\LOBÐ$Ccl,0 G jb ,EO`Π .AVUTioD @{  bM80bUC$}wȇ5NZFZx7z؂1V8$g?o_i'JaXkmJ!4 TL.(??0 sEh IrB?U?px=u 2)ߓD\|}fIi+&b~$jtӨX>%+ $ʫBVew^>|ϲC$ti$\H&@$M p6ttؗUoq~y{Η1?`@I&wx4̃Ǽc~ R0dC ,M%:+3u?.3n"J&>~F ,^_k?Ґ Ɛ~NNKD]m瓩b_|]lW k* 6< 2`-dI-؞ 8zH 䃂 #R# G8RR!ljЋ_輯Q/?qbP=Ox>0(OF$0Zb4^_a tԬ k4mӗ8pԜo:`D>bϳ7psyh;< &~`}Bi9 C$>Vb,?͢!sZAVdp{c FV<{..or`qKG ĎpS&@UծB:YY5޻Og;蟛<)Fͧ0ˁ,| F%??;OQӻp#DkvȻ 6grdB ] VMa˱2^D_ؿoe}uUFH9ڛJ;l35ql b1 ڒٓ$_p_ My4K\/f^?,2u^ߟLMyZ;M`Td Em4fh :'kT%@v7"w 8@&uh3klwi(lɌs< 1JH39;8@ SjKqHNUo!uytCcXQtt>^aQl}';rG/!,!5I2 [5_hۏosW(K maSr❒xpʅ8y6{漝%婟aw_MMGc &ocmEzKJq =ĺT ])țSq}vK#Tn1PFlQ(<3 ";FfzJSU)!}ߤ7r4UkF'>|3j m0RTLI \q1Ԑ`2@($ 51p+C N+!9tTv;x;|T XR Z @—C/QNf@"|y8cte<mf%S¦g-^/r#{_9#DvTzx~fəOJ <]qؽBY~#~(眭>Jj{8N.3VU >HѶp9 OtwQqt(CHcLV'z;G$Y"G@ ƠD^Z(ȼ%t݈{1;J<9|^ E7_'DI#$8pFܞf{"u:$l/6ʺ+b6b  V%RgNpFkx"RE|||^oj$;sj#7H`Y~0~!󴒑!I/'g3A7xo5ZIS9xc, P4Z#5O.:Ϡ^zޢ"7͝fȁv뷤dx5 ldR]6h}'l{ws= fczd<6d*RԹ7~?whOV+7ˇ d(Nvlc{ EEQ$&mt!1˘"WtzOc=[^M[Dv>i,P,1jdݽڝFsWw勀>ћjT\S.{q^_?\BH2.x*S~d+oyg{شI+wV5To%o(Dc$_^@POpdJCnjc,} ۽hUI!+lӡaZsɕU Yue1+[I8L0]{SmϘ@󘰢*Fvy Ia%vpsK`f9Vw[K|&XIJC)@.⧑J-cZBn^V^~#+7,ӹ=(J1NI7qA>}fbX154K1PWCoB 4$%J=w1Kk aY4U~.GS:|P@ש4f+$!^і{F"y:t>fV6 u7> z$襳P֟N9x,$2 ?ퟹC{^Vo4Zjl܁Ԫ-&gJt6=Fjܳ5ِGΤnoY++`Mdt$z#V P= XeK<=W/$ q"F}AP<̖/ >$@.s9T i_d΅ d)6J(%TM5p|iSZv X6^熪IX|to5="0"1+QM3xF֔4E_@cN2#QT:= HA^j\IV_w6}9>&IVAH/x[o3"u{5u/|ïK">R~FKETu+w5/23 t_!94+#Ű 1F1 `2ąFaq. c7R m/#&L0mhAtqĠ2+ڟ^!Id^%<&2Bf{^NC1 N}8ld#C pX%rq_Kwߪ.;6 O~BXXFR0+_Xزv^vMf%kSrӝ;(6JteZJ3 @S搋К5lٱөGNݪ,kPE*DčAFۧ7g/2̋ZuVlX{>wiz ɛOX)@Mib5?sYJ[ C*V}T]!*畺;1(N[R*U_͒sEJ-($9H@Fd/9H&x#4Llodl,ra .#> F7_S#+vcFA(̈~<4 %vʂ|\\8=:{5g帬AdE4dE XM8c! 2<8,A;EO(fl]r*"*Xآe1,CM~+b\`ԕI3nL3 m]O/;nb<5Uq6%bBG".+I(U 8LR*NvwB][ZYy6 T=%ʎz~ygV+Q 1NR ً̔:t#i]r {V~"\Ӊdzbab},[$E :tm ChhW}ܖޣ]zQ6zܥ٪DG7u 3.nUW(Dy!**L]< `eWrRkDdn[[bN͘%]SC $ 9Znû],@~ E6YfsSXK^nJngw|^q = Mn{3gǔXvHxS84R~GB:xQ=ywm[Sޭ^O8{ s2#0=V,) nVO9zy#ڨQb -ƎN.ЕD4[_0v}ΆX'@n&[՛8?Y%+ٲxg.zL4 eddv]A )uEN.~`M>9ViBJHŕU.&b( DWL\ݔ&.e7ք3&ք5@{V\()Ë53f/恁99z4/%B@hVCT|fb0eT%+! Do*HћҹDWR597Ke/mFx|*332x@'[sQS|J dE {3F'%Ýd)[xFh[T`MJ"r68$a`Ƞ2kF6fQ+͒R!%G Ym@@6}35ERfc!B]~#xfҒӿ.X4s%) pf94{d(dzJiѧI#"D{E8z_$1LGr'oBѾ2 B-OpR):mOZH C:Ab i`87Vc0Cw51v.󐢜,FO:>U/7ZdžckKt a&9G8@ HsZHWS\`(kuLhpyiGjizi׻tUX4LOe,L,%C'iN3OXP1*&Q'k.iT}[7^;1}=e& Hp3Uq1[损׏(qpLxr!xfO#ҒSǚH)̮"r$P#W1:R@gawv">-l78Ѧi㲸C!ʖg~ IWǩjx`|uA D*E4 <~dZ"7BAs_5_Yyp# 'b*3(u$,4dB)Oh<N`2v.O7d,9FPLk)PV#Z\*ij!HI! $$" =6 ء2BS.4KC^Aj&)D*&-Ӊ#Ah8;d!9qʯsƝ3> $k..{ss OA@DY]d/hW-vؤ.$!M.s Lɡ$JU?bnrboh4k3e%k+ ,Pl D2r*}{L>\:LOd!;STV}Hk<2yUuk$^/X\(Vũlc 1󡽈d^Z{yX a/k٥!m@&+3&}RԠEɷRB*),omN9Ӟ`ÀrA dwұQ]d\[۳Z f2na❡WL $ؼ"0`"A_]sDB^Ic?wqOh""{gL_~gkw_8Ùw^g৓^d~4l^/&(|N3]A< Ssl/LWl1xKl$kTw,2;[Cr!r!%qF8mP/“ظ!/mJJ@HY̑Rps͆Yq|;Kbl8dN%$j%{pR E^9  j ALĮ%8NNȞMI)P̟[C{كDw*ZO~[ͱ)ƄE0wӥ]@l7.JwD7XTSAbHh#6h2"r%5lpH5^ _"ꄋ 9BGOq{/s|;TZr9-.~ 6GzL=^CJA=6K/Q9F{vnubϞ$jj˟|Whs UX+>+RxŃcaQS`80k]^ƖEM60D1OVVU1SJ7ȗPȡåzZކvx0(u3躥\F3ȏHĴ%$N"l4+8-T$XsnVс{ ($lm͑șUz6I"ޓV05fcɆ*oKlύφ-BB,[ k%SV{|EE50=0k{=ڿ,SVqTGSK+]1gfu`wto1}sgWtM.k *q#&lԾJ{:/ژ9VOK}K,Gx rtϨO9n4KH"ͮ0lB?;.pP?@Dص&KK;tG*W,,}fLA1-壮ݞ*VHlkkɱˢvΟWcųэY,lc+[HrfhO]LMC4R4R)MXyϣ{0eP+ >3^UxK<ziv˧1u/;WsMyE_; sk;œg>a??_WS>[t$7[XZJj:1BivjcLuzLKA4# ֽnJ Dexr@ͱ W}1 KR{ .5e8V7oydL;pA2 9 MJpK#~sioݪPZ%Qw]]~dhw?c 0$q///χʫ8C|a4? e+snBy_Pֽ)VK{ utWǮG̼Z}(qq )SDG`j={'ӷ)mٕ̹gѝډ__'fҰpHrrCct ffZ \B :GrRI?&mXy<:/cv?!e^r%hS2|~X%7&3|K 2lJP M?J_.t2)<ܐc_X:<oÙj(_F^-~=G;bPޡpyw_˺ ; -5B Tڊ[%ӯ/M-1]Bw+aVeAn˸q8!$ j@W7zAΦD@0Q7Yַ7 ! t&ȳ ]LG4cM|=߅(9@fW .8aY<\rRoc}+$/.}\M^-xʨ=Hv+ׁ2f2[5{|ZDI‰?)>t5xSFlF  şa N! ^}u|bމHy` 7OEFY8WśinWܮՃ`Xku\"r,oU%39y-W[!^2 ]BgD. ovx6g:W!V̔ >U#K#L[ʼnBV |? S KaMw&%s{ȃV&gkgA#1omf,ѳ5)ɐVũdκ翇7 [0勈KP@59[OH~&vG}ׄw^}3{C{^'gesg9[n[2ji^uQ'zJCtuD44iiծj<2Y=F% ؏AۿG>~kݡX bם!GZL~9Ӎ8N64]𡟵/U=#i`E~=ɣkRܜ-rb3*h "nkwۨ_ϯBŐ L29i-cGwǬCⷛzjOy%Gǀu2 $4;R"f/&#)2~e.tEnb>k^*}cV ,WɯױC"W^2C|$M!Ūb_w Pҿ&l3}۟H ~ mMHp&5{lZN˧ Խ|J0p)oK͓n;Yw@I!U|paW/-rۃ"=*x#݅^\ξ-7jUJ~ݒ0Nk 6F]:YZֱLOhNV&wnYA4Ó36愫IgJM4ʡok$}xx|7MMt{ʮ GwLJZRk{;^rBK{oŏ3~֚jx3SbIhõcpOҍ@HV>ޠ"ci=T^H3Kg'uq0[u\;\>c8 q(|O-:ǁ{L{sc~hӥ~&zWGbflPNN&yc* 7KM{«ퟟaqi};׿f{/UHS. av{7!y G~T'Nml}-1#$Z{)Io}[%qHAd ytf9 j FN哭-X]\9 7$/HpD`qS8c= ؖ}pOͷŖ ^>~$T H 7)'K|!Z+z-%N 0f5?O?I#ֺ8 ~N],:-d/񍤌\aH .$4o4QzI)*e굦b:S=%򾞦_GN_$Ϻb#(:4ץ]U fk{?c=rF7xHOf*ՎͶv4Śq`h?EAX*7|%ýRb3%J%h%6Z7wfשXQd].vڷB:dB'=aZvں4O #(uDO_wN|dI|dVmIuW$VX6qҸYBVG:FJ9ߧ ["io˪xЮc@q':fHԣwMPcgprKC._XAsp^}*}IOήj7, iɐ,,OJ^"0H1HRrdPF/6sSU*io^mH6 +"T?+ai7Lȿȼkk'pʿ>&B5a吾t UlzL*$u\`Z zh ̰b J3I$vԔ)6p)QBRcU|鼴`e 8 ;1@Lw~phQj{)ed }5 _3geR`qQ|狄y6$(>wj:b0 4J 7̅N*?`$j *.^YxE%g6DۑCTb<V71(+s`CsEg$)2s2+_hqƣDED;7gPܗvOg%ݟ* wJhK q%[roVCUM bj: \ۗJђ8?ut]h0UW82W(I{7.@ZʲcpqB鮥%GdUm&G qxHz׆Rf,R9֋Y?'}NI'jXe$﷉_#߄£xo=M<~84i`73`ë-rRl?O-l?˟~ ׈r^-@Q>RPM Zsc{䮍d4!dfFK';Ʊ >܏L2 @oѩNdSv0-9 |_wUՐKb@A%G]Ɩ/To @CBrencA fWI =kRY0эJB$XȂ5#ԥ1nl7s1C#$ 'NidRKo˂~(im/'_5w|+܂IƢ%xdL+ͫ:WY^egq )XQ#%kDډS>SFҠw6''I+~w{, zUyX ic\ή\5K vXd*h09^f-bBA۹>#okgZ!gKGQӞbXD [y)qzr öD\b̞9C824&ڗ]dB<=q&Uwq{>^L hI-Ԍ9[e (c$?S`eB :F Y?Mjͩz5g8{7[&^D+\%;}KݷyD z؞9b rvB- @QkNYCKMDmt=='vj#Sɽ5xpZb>MU89y 4k)p q5N()"{&="k\$r4ţU~M>#ծĶjRUNNmFS}\ KkތG_o}+~e`?=đD6X<@R_]u%"i5~w.n 9T?n~XR<s'+d0Zfy,x Ot ^}iNrwfdp Hb9} nBu;([֍LVcK&_;;uVGAM 9:-ON{3fRmV #ȌI0d2"XQ{wWTQV?5V F1[T;ce b`x#Ș0BDI!KO35Bls湢$` i5πuX *@SmhDŸ4qKI^KX5^1uV'5[e' tm&DX5C5BW(Ao>w6n%dcĖi{fus=%rΪ+v[rc^G3KDZ>]'1HFf^`Lʎ!Qϟ|oO?Hw ђv(G;Ң$#|X_/p+^NL 6-7ԙw ]c3(Z3Ls.ɈhD:*silv+g;4SUSș^Kb4P @{N&c~@6tcЏYm_LI an 9ϺYCs_6ʿN<^)[I}xhbo!-|@7PpBiey~@7!Oâ51IIJ@m7w4x1`@2g [ N ^os$b .ׅ.8D;uBZ P]m ^~ Lkv?W˧{2)b9s: fa,0ۄXtQЦ ͌ƶOW3{G5(4 5$DfshA%Txt~k8P?niwor>hS L FI$w6Ʌ53I{}gF/s KI- X$"q||pc |_GЧ!V,Jǟ᪋Q?iËI&#+еj99 Uh,=#\. _H{J2-j§ľ4f{b 4鐗oPwUk∗~Ie=20v^5suߝ峪D䩃>NmB~WLp.d6>S9 v^.d,#7a2y [#|4Uzjb$]$Aw驱)L '䑖Gp<Qcȧ 5Dٟ'fa-+[wnkjս-4B$@Q@]l*HPjS0Sf߳8t^_V4l U-.C͗/zŦOD6ӳs`wmp̙敵 JPUM8O3Q-QEG-'ZjdׇCUxLKi+$dD@=&+,RUЄ~D.6+_[Lۂ{L:9\ŧ#RI!аu҄ԓ2h`&G1>@{SSZT ʧ`  qPdagS[ZGeP`TzƷ&Dcp~Y_.H/k7?uw,ZD7v &MB ,naL}aZvI$\I'*I $ X}yRcK@` bРPEH=oAD903y%%S~*ךgK0XiU'۶Gl6k-mT#Owv֟-2M{10p&@~C oԘ^m~L~7境$cȇZCfMe.$U#&&_S|kJ k>ÝykR^W61F]Zw6ާ>=*I G~`` j b11DI]OjoqM+,f&yb\f fY$(CmU_^\<К`m k{Zrnpb>B @q)͑Fwe")|h`d'M%S5&J&Bs&ptЄ "#OyEfxd:v}dI;܄-rvHNB?oOt94CާX׃UQzvJ-x%AًeJ jRY(#@?ߛW2y:3zCp˼ -脕@"D! =O=uzzd{kc9DnBfm{^k}*> U /{Ƀ,[)3km haj9t1⡖?{y``$>P%4b~qD WS}f.[oHI(MIII=f *W~Wo=?#~gWWixqZ ]i& .H\ hnO? Ql<㡈dXJK~S Rms/46q:fp%٦͌ݽZFX%&}.tPtٞw snjIaoN Qwi-#?F~ߝ=mMo]Կ }>E)0E## Q2 cNʅnDH]-!v)he|*?Xqd"S#ᆴ~Ez@tdoŵ^K2O_&$1,)?/!Emt(/BR@-zUH45-pG!;AxX/YYF~L,k#lAlǯ%"\^Ve~y =̛߉SHK,jEtz2ic-y'c=W8~맻^zNnU5@⇲rKڟ. kNO,ɢ'ИiZ^}}Mo~'jny`)c=ᨆz#h\]B/eFqwȖ1+cV`@ۡ@zCcT j~qO{3qg3{B١ еN,b>{ԝUUPGP @WS~σ}| C~?FxG:~r~_{}c~\C[ߒcyߘr?'' vת5NmoR|yU=u5o}k//M:RǶ׏qԴ)L-Eއ=m_6)}Tur>G~;e/B**U}@! Y/ ʾza;>Q=4NZsY` 0ڐ T1;y$n3Ygo]2Qłڶ8K f$, 3ScE6 kPGE1Y2~~_C]]z+WՊFJesĝ9UvbǢyr&(bmMsUjdSp.p=xY2ޖ?JqYc6 "$<_FLJGNbs7ç9r*| ͉Db[sۗ`!jBqmw_6nd3F|-w"33fs0꽝lO9Dk1!ZԹ ЈŮ-Vшhll7Y*L֚`ZNF4Wpz!`Ibc7DTe>U-EdT۪QmT#8)SRwP*|E. (@iUQQ8 z.^#;oϙˌL|G{"C~ίc4~&.Z7c 0J^BBz{L yxp/k!r8I8[H<֛tSY6ʦ Fs>H`xvͶ vT3m(ҍ;wS^0S1vӟ(8iڶv_WE}ua8[kwvrq8_;c׮nZLCmR39./g8̜xd/^앆mgrvM(mO_9}hc0ӉwlLӮLM_'\;IM-O촹OiOܞi O-{~g"Q%)ٻwߍuw]?ܹeؿA=djF#!$;YYT1QyZ(}4_/OW.<_/ǪkSfj'[H_hM%w-ՆiaSe'<:>乴*Şp-V(;o%<[M5V< &Ps1 -}NtbM6fX"6aNRRqVOF*/'*_T薙WLp;kSq1 ؘh;-:~)2݂E_3BiMU&%IW÷5޽i{S },_+ ^PpUk(I WtNj2JQ]&R=+ʗCͯtG|cڻOQȯAQ3$qG|qa(2M DX$7h=Rܒ~'%5P?AwYY:?}V@G?E $hG0]9?o9?KsÖO,z3~yێ?/:>{l=ՎgZLH 1h`aD?PFl*7d[PfaQ`<~Mm({9;]q('h9Ō7)!{񣿎QZiXDr3$RfL&|wt}ԌXy¢D9^xj!\· 0U衿T&@%T9%ȁ&(KBHZ3EiXaP1'3_;Xȟw;OƩ?_H@ 0. 46iK @c"rB79q8^\}7Z_Zhc?Jsu[b3>Vo2ۥ6%޼ R/cҶ=_׵o1'$y={~]>U>co/4NK q$#2 DHJ Ssm~_C76ս6\ g͢Lx3}9Ώ{4_o3?Ҫ(X* ""?1+]/[!V2)¾i &<>Uc*ʽOcXʫABNZ/  /"}Nl^_z$r^#r]I_G?1MY0 Ꮤ|/O=5Ot;HoR2cd"3TKYOI[븡U.ŋ2/W@,|7W6ISLFaAUɒgeFɊrvŋ 2@/ٯ-Y]mKӺd#|BAeL'90-t;qShUq:e@C!+0TdPcr߰]ث]uS2!1Á%*l`[pKI #9k&FLD6) g_?tK,%W.@Nd RQDEUC IJ429$0K穥 6IH%䵚xۀ2X8aLFyl+jG/c3qsais߈x%UW_ZhNOp]ҰW`beچ!eR\^{~7oz3IՆ-Z"1k0nzW;%qim/eEH#4RQaCY8u1`">"uyfsRsln8z}u7;+s!#WLOaJK,~\i5ИQ\!k K@7Qj$$9`&Htܱsx{DySY=A~@=|s.CH'# ܳnwvѿ6l^omkدaQӟΩ^qWxְM\ϓWx8D Nˋ \]pKǏgTV]n/ܫ,f7XQo|{_?;3KckUc^0rQ14_ljք8'z}Z?NwίECK+g3וlVWCj%Є$^S*c<5i^LʖutBʒ=Q5'e9 ;(D,~yI(aa;FWHQrI3M!$~*b*GG%a19H"rYn߹tO劂 rieBGב{0^\ ~~9#1s?@`DLhdž~/ '=i&bRa#ߊ>ЋX{CQ4*ԄIP,YZV۷+Rm$ :{`%ؑBLʀ4;y ND<0![l8 *"ëN*:+޿x=9ɷ0iQT+$en c,A"q=Q,>^{1Oe~E ZIHc[IʉwTD?[޷)QY{\O+#xLWh㐷tۺ-y;6\W?GbF `SL$m4!@}(9cShm{y Y's|Nvh?SΝݤ/k/qt؟әndo KebvvJqC$d$% b[h.kj>U\o|,L'o`+7sr1Lf?ojVznFY9#]׈\>t}7dr+9PpA1Bz^ofk),$_NOJ`T\{vOu[[7v-#`<{8R?73f_'e$iϡ DRIRLLe+ĸL+ a Qk `"Ң @cU .!^&c$76l^X\Qg$ܟ*l=zhh E'Mź_GqgsWgn>(ϋQYmJ'A t!`DF"H+C6)pD !W~w>}7rJG+_oC y3{?(.gi\^-l>gEﰞ7{kbs>;o[ʺ]P=UY4"`!e${-=Dkh4ߕVG3YFriMx>yGw>Z?mMtvz-ɞyy_ ђY\A21&P#Fʓ^̀ܙ5RD4sr&"A )}\/tu{~7<\vF2򷕺DW6;nos$^9Vwgo{4ǀ%M~'{t}Nl%OQtub($̡1D)AD`~1RՊ/3_ҥYϩ'bV7{ԟLPH1("Lpdk _YCt~}?k~wW!O+_o1gҀNKA^._umi >הah_r|&g _[{.&}XrT** ,r՘:&ܳI=hTP6^ysCTRʣied7 R6K'BtR`k*0҉3QMN묦U+tW̺qR(Isjm J " D h@C`%TPY:bQ a=0Ihz-4>V6GKt0ۥmeIz-4GZ 3I$t2*C,S8mq}͔;xeoZ 3BV$ 5D#h*\W^ aV9 EXȬSۖkMJik0BpVaII]8(|':g#_7o z };EɎW%v< IDd6-8b\s\Y II n F:bӧkaM޸bL-N2ڏ SLZ3 #?y,DJDDfn `_ɟuo_BM4j%TոS|[zd bի* 8`ENEBm^Pؑ`d5zj*Xh3j M*Ua{{JuTu[vx+n]+P4A)57Jܪ1d5t:&AUaJCV"5 na%+7`̨,yy~BmМQRͱT&>V͚вAMp0'H _PPF,o3 fGvsOMz:o` 0 6ʁ"?sgpB*s)Nnfj &< 8fhhBW:yxi8M rM / cONr]iE=_7id #fBd-H,H5RKE8nlhV,#l*( -|ώ|_7[} ܬ}juKoQqj:\š޸WFjm@ācS-Fbsͦzpװ6(Ap"yQIV,H"B *dBAa@%bYQyyn|__{;C5 JDG2TvX 3X&\E`܊j2#X@dوYpl  AjPBdQDA*,PdYY$c'B~'™h0ffXjP4R@SoM? ѩ&(偈Uz @`L6W9I0 Q"\IX (8Б*H11AM71iHDot+('ڽD K3^,2NX-U<[ 2Xx,E1 RTJR (1PAZ2i K=ʽmuGU]c`WZHvִXh%6"T*Tb.kzIk^wq0HMÂ**+4i Z%-f04~~/c;^}%I Q/~ſϧָ%VPT9bD&\qX+ZҾo{o̴ )1tdmmL ڶ:\\d{;^wc;ok1ʈ~#ӊw-Thٲ0a#^m+,l2$Q93ZR"31OvO88 1s^>NpP8X`7 W- S"@*P?_ gO= KFේXۜr89њlX=㪣q9b$n_^;tRt\oL2 L*3>O=qNQ# LT>tWö&B$">_sFɖc>KݕVYm0D8~ ĸwmÙTԄ`Đ28 i255\ em:rJ:1EQIAR?s.LcXȝ2MЉer_Cp!oY '-ק-I Ҍ&+6Ȣ0H1qh/k?1v^99U/hf8Nj&g#,q| 6M0%1dOqE_.77+j25w^ov_Rt&vӂå,bՠR[p?{Y#+|4Ȱբ1F* ~o_gq];qtxրUPRd*]zRD#4 P\0;;vѻ &Nn:zj,V;NvQvtJKJf$JvbT%dJvكeowvZWifSm_ZQ 1ݭ-+TTOz @u@}m3Q{p) Nfp`#l`s; ]f" 7ԕѽ]-e*miMT֪U]IյJrWВ$={6ZJJ(JP娪$UUˊ$4AW{z{Ǝ} 5/fDBҦu{%ٓ< $5IႠ3x6xM7p'gYg';sf{׽n}qth6Z^o]TU"+kݧyϮӽ-[7:J%*WI '@%=+.cZXfݟky}4BfEmQDCanўVӺ_m{1lΰs:>`ul/f%XI}t!W{yh}wV}{ h(Q-}h_[@E{`wcJiZ=;`@ J>h εIE.`|-_shAN$T::`[Qnwhk>&WxY ڍRW`Eݺ^owݢPT"QFeƇ@=뽇ݷ7=n 4PoGto׳S`Yր Q!JT b%<ɾ qn.{v϶6w>nNέӁֺ>{z}yAǷp^}xorT>{xMx8{G0C+^-tqt pnd)l>ug6从:-$(UD*7cDS实T Je[d( }# @hF 4i0Mh4d42hf(52& hѠ ##Fb50ɦ`56MhLi4zDD #L@&@h< )Q?Fj'))jaO(LLdjbTSM{FOS1Œj OI42LL2 44O hژL4L6ihM=LF§lS$y,g\l͗/pI{mEeyln14)~N?KzM,,)%g?^3UFh- p=q\~N[>/>]ߓ8A4tik%*^771 KV;Uq(JIJ?̥gYs#bFۑFҡQI$<_3,RP"#8Qkܟ= I iz{?,cjP/~!ld>TT[ۃ۩ZUZ-GP=9=%khw$vԆ\x_x[OƃL?-i ۝xqcgȩݮGV0Zly҄P+Sb6)Bݩv+g݇ |z9e'뺅A&CoRȖ H<6"г"0kC20dI1E|J8qJwIru4vK6%R\ͩ&|@W_)1J|NOAwV/b6B#W!۳o]Շ[j,t/nvPx%5jloF-xB" >hǾz-enЦ9~8\{Ϝ@.=O})`Ӯ(oa)>Of3(?GL/nG.,-ngy'i9i@ŽQo_Sٹce,=]y"q $X318jF?qzTe'keh'cebn؟%[ UcCl&:Z'ڨ']720iH}n[*O0e?zR zr[Ժ%Y/k;~?"ںGv2ǝ)<ОvF;ΔM,2:Ɩ9QJv QGZQ ԛA7_n/^ta#Q|dEM`z0y5roK*d`VH D6c.:B]eU;n9rS{fk [7=#˿쳿j{tTjgN*H+*[2qf-6*Zb[(jaة/_R\t+oᎯr LTU rJI0A‚ACa۵?9/ * l )(Ύ6೴>eh]v`񰠧w-`ՏSOۥdCZLNǭ-].R˞\8buZXn)4x_ETcr_ } ]lH0?UGwiRɿ|WϺ7O~Q8.)kimdi!a< ?ӌjOeK]2O״hGH# Uɯ[ev'vNpg{oK[m7ܐru9ʗx*&߳Jt蜛2GE O#(I!3QDM,sTB#[:cw,bwL1.CG n=68oWx9~Ο1>WgRȊLEU^b5AȈM # =vvJ+WƤ]2k#\xȣ)?CG\iv?K= dߴO?uf\fSwIOtuO͕ kj8u_N_._sH*}~q\,+:HpCHF XI*```+$հ^2&1F!ynVəw0͝^mVnvZZz hE\=;DYSs1Z:mLlatN˙q>;F D'*Qk .[h1e<,Yo>6zaɌ: dY%sWnmӁY(t䆁h d$l8l b7%֕\ٓ؁A,JT JQٍTJQmtN #A SRLr=h"BuU(0YTi*.33^4  ګ{}׃cgOh}GL!xDZ[aw a#Ga1#^+pcGea04u؝V"r!=:MENe"jzBPAPB+dCBu`0Yd188  d Wqjh|gv!`0W_|4נ &zjB]_ȭ,PB[ 6JnC73* 2ȵLmxI E@_7ҞI=Ե*͑ܚL` +NkUnr{O$k28`NFFVİaz8 џQӷ{hlo[GBej(azїT߀恷\7D1 4(EHTُ{9`Ь\R< \q'2V(T.[R7?b1;ԫFE O~{wpq-b("D#[[mDѨjNi=jh)k ,6Y1QbW2c7FULn2IZҿDg2)$e*ժ R1F _z A-CnCpzy}e R|x-I5}yXH$I -4 (4&Bo~E9ʼnhi $FCgB $E<9J$*"B*v x+BorY"m}|5x}ި9*(ZQEihiSEDZ8ݤx!\-zɳ`u'Q#BZ-45|WK$e3v ҂, ^1jS4d^Ԫ9$Th٪EUVYJ\t&2*x>S{;6YY>D㐑,Z3]6`xMS3oCN2|0_]'Rlj'W WvZu o^&h&DAxE=PT< U()GmUUy$iDVDVTdgoǗcG'Zp!2 xKMI,^~hf^=ܲ]\bq"üQȘ+k֤ӯ{$+m ͓|S>;jr8kt: ӟƁ1I6H @$h h9p:rJآp 4!%"b@* ìi;Oʼn=W6C`kd{YLk2iM, 2FB%Ɵ/tagD7U?w"2."6òv26N6p(nH0?'aW8w= +؈H>\<',JH$,@|X;$DXuM4=K_opr Ptq7)ZUhy)R)QLDkĂx9H|3`ϧkV%u;ƍʩi^k:;Y!OI|_ݲ4t'lߖIڜ;|-d/CGP2tTc#34tka& BѲزb: LABBN]*ZC "Tj6BL04 [46B#BKK2X1FRVKp$Uht.}\o&P] $rB C,cXC1ҭz=^OM'nT^* d E .+SuԕJ֩‘5ZH=M/u~6𺟣:#Q*A.s @0b[f6Ѧ6֦c.4ITe508-6ԑUB}g3~v+ϭ c[`14$Xi+ X@,#CZQb«uw9v}'=}Ez8p'/-\䅈U . " T*hA[ʼn4J]٨4::ÃiIѲI[83qH 'X .1͈֏<~غ8H41S/7N.0Deʍp²FƘ@tjP2ӡ`hda0A 5Jkn)IR4B8td$q_?\N if_=b$JХ\R,0j\UI\}jqadW6lJՉ oN7]r}l]SY:=]C 4"p vR#Ɵxp44,H4F"FY H!Sʬ5H1M!I-ݥmmUM~}O24!uNWghhkn +ی:r1 ldB<4ifgziC%`( uzYV_ h䩉{[?տR{K5 "|[%Jd^~q~,{?[xr·Yt2Ry4 ,)13 ("u]|%$%8}vt|ϊL7pX>ŭD%;XĠ^6<e*$}gmYFM26z)*[9/*:U5+/u= rln2"P#Γ..lZz2)ݭثUGإ|_xyеOߐSl=zH0յvItvv|sZр[LJіR Eh")# rC`mm$x0 1H D OB{Y4yT\S& aiZwcWSOLw0Z"X 2̷O ku'G*0P@J|=v2IL~vkLyDSŸx:Ig'd 7{WܚV`$&87ㅪⲞiBPpUU׹ڿ/[r: 3j}[' @J=~mP$-Ux9,lDu_-R܅ĩ/+iJ]ϫvEK+^׉ QL28)?j 锨ZmYtncܭ1q ,HF9@8::_.me.ZjUfrp~F-"*%Z|pFep޾tu0_IS_)dM&5=BdUEȨ t) \$I k~Zl'|_7g6#W)1ųǵfyˀUjA;Ћh V/+mw^S`nǑ?>/>óMjĮ?"cBҗcl*#$"A A B }/w}_xT3 6kޑB g`lzTAсbs۷'*Wh4Jňݘ )Y-gX4/>pkۆhI$3PI4 f+͕HNorj5#t_R pAiBXҔ|b0"tn&^rT|?ri':4WsNH B2w HU&qrRj[6QtjV1'xÍ5O~b*_i6.F۞%/35u |[lŮAA1Z0AOյTY^^`4w0&*!jIG Z~1ۖoW_l@8},A7lv#Ab9/13LvzD&!RUSϫJ6vq7nh>/o#C~2^E|B +v_KkR-ZCUqQ;2MYU Mk_]K3 Qy ,B~TjN&W[ 0MͲI?mA ^MJQMkJl c6pM!Liޕ7-kT&IDE.fMqs-¾ӥ՞"-xԩ W_/szE?fJ td,mpؘ܍mATɘ~7MVRT>'Ӱ4򆐯ƞ?)48G]?ũM| e+c gCdƛLl!饵t"4@" R"WB Ff,A$_ Av# "" VAi3t]-Oi!qFTP#@ i$"(T3D@ UH҂"S`qEQg4Ba(0:`05Q_K'⧵;6$ x҉Y+@ \0EGZ3aeD1I. ցJcXo|j>=M9yv3y+R)Zsvb?wutљ@Gvw|ĨV 7>曢~rBcTu,q~`^Ӡ!fe6hedIa9 $b?fW6Ab8/Ͷ" ) %~ 2fCUi1&E!HQF{iw`C ȡi>յcۑrwwtQIj L( gx*TS*mx"?^6u=P19``!X3Oqq>Ƙ#G׳W Q*S0TYv3S *s~V^)tt#Lr;1-4'GWqvE[#HX[lM?KbD h6&F>XB0s;vTip>-W K{y|)J;[K9>Q{~WS=W'<w.wdڔмEW\CD %:ɶUJz}WPNaKī3^&Dت<8}tQ['_2q76xtykJIޑ!ԓLYҏ:آWe!sq g8<9вIIT^, D}io9CQP.E3L^?:Ϸ^e)?C7{[ &(7j`TPX!;Zv׮.[qRc '\ b}XtDdE ҄fe1Bv&t%Bb P)ӻ3E \bbn2qW>z?J|I^d?iaHC~m_9bwjѥ.4p~8&BC"S d)_? *c .%|7[pjK~K41UTs< T$[/G2,ڨ.y_cw2AT$휩_סk͞dY U$%?ۄ:݊cqQP_ qU/|ߎT!^dQ-lz[!Z6ك 6P"o7$VU;Cӈ CIA9;1k 餍$v{`)tm kv.*[oӷE Q?@z\ i ?[i5Ecj:Q S"W֭_3ÈpvJh{i\:C-KSPVJ>8D~5_cVIL*W,kY6P^ix82S,7kw8qxb$|G2+L:^:St4QYY^"VHL-^|+h+ݒ B%)#eJ_8n1nДsߧO|jBs6?{^" '^tpNEX&f5~~[^~ds_q&&@f 7#~-A3p;^=x!XT3m.+&W(vb1LŸ}G(G[t'+hn-{mzW3xHg;J˻" "I/X?Y ߿\ǃ'iBI$(A.)sF;2$;y x34̑E!R ѤћԼ($m`-|kR \`V2" Q g U܀AS$$Q? PYA$I 9@D*\> SWb_ѯV Ʉ؟|y=j?pE:n ?Ͽ:^Y7]jaycplj@Oi*ICؔa3F0'GI>e+(h}T6cO\Q/؁\.E K4R/hu9x ɚullOBLc]=%8)48)H%9FZ)ImHȗ1"8v^أMU1,JPjIJxً"JOXep~5і PD|dRx^_95A)-PQ^-kler-??ѯ.\|If< }O>.op`㧡pB x=~CoΊ0 G_MvvIXgJFiiAH׷]w͒Dʘ%1u. g| sez΁xz5$ 6O?Y &_Z⇛v'g2 i70kF*# ]ʽ dxx%Ѝ(*qaV`Ȱ?9~{I/\vz;i ' >B&vI?cX͛C>vqy\Iy6'Kcꢒ@o }d9 gǍr_d8XԍG' ?É찧Z#O#UE" Oi^V ʘN74paj>>iv4q{)]0Cr}9qϸ,criJ"c?Z?A=bV9?GjgG.FgƸ>ڠl|O\MNucs,yJU_|?vJcMjYw LC2k258D ]?9Hl&%WPmG`dy󏔝zJ_a#:iHE7U%-JofΟZ ZA-TGYJM2'PQ܀@Np?գC..1;i̽@Zk/&dv6O/eXŝUyߧ|0΅=8JoiӇC%TeI]5,USa+\V5lOǯ%!Y:)2HsuJ[񼭗^C:`@Kc00.}nLcu&qB4QDBeaRV!iQCp0l$L&*wwU-0Xö.ˢE(ڠ(զMElM]PFlKaE)ҠL$.s"8ŝXfG!!i04@--BȡVLu VjE#a+zg$&Sm F1i TzdGEzݍ*wm!ʓJ-b{B։wj7s]; Y,!ߥcގ .[8~.x 2"s͌Pj/KT:^ͧ>i YA*'*XnaI`xK8jNҶLj-[|_w~\T/Ӻݫo?kfG@ֽ/I#D4"C&Hi$:jSH`{, \n :[$ f7E3 B6[ 0ˋ*у .뀙0B2P*{eYeX۽%jm?Qd6V}Xq4eNy7>Mev4q/PCp(es?OI\;[הT飌4c]ȹv7A/ՉP90~)FLK 3&SlRy0h'z^+I|c[c><Z[@c&.TD~}$hR:T" )@,!dȉ47w,l٧4(V :` 57^{ G"X"bŠ0jUTsCMF1kw7[ٜ?ƤC}(>yb[srʩ:\)i13$zR~dm|7Ny: !4m7KvWGdc3{q4x!EE"].*SI?k|^eMyТC#eӛN97ի=b=j!n1S?0n34&<ɀ!h@fJfm(*( TѢZ~LL{60͒PI(Հ (l.<%LQ&EIcj 9*XirX v;1M2kE"5`CALR,bvPCN^ZEM] 4N!X s$&$Id'nUbwH)Y%(U̶Ibfa ib 6|ΧCc,wOP[MԤ`go^_[ r_vMGIp7[41v3,s\ҙ A_O~>KWh{]_OLˆ׭zw\!G8xò~RIѹ>NN/\ʳz3&S{_T?1Xa>5?Cg-eW#lit q;H[ 83(#$݌Y-@ȘYRV.CX4J/D3dn$%lVX. &tT A#Ԫ_I?q(S)p_w/W/dJ7𽃰.i>bvjW cu`Њb=VݎYɃ\{V?G2I+/Eg_ITq{Flm?Y'm #{?+vʴ$+c?IK_O>6[*V֒A#KxܕLcRH [LdW+Lb eXx[UPL0ZIBiKVc[C$)̬4E)3heZ@*b"P" ,E&UY*UF*]U;)T!"U#13w@3dAAPb% r`$e҂GfV܅6G ,7ai!OޛѨ%@zjmVջ1Pc&4,$jPfبh-H@)K(;6YQ$ .ʢD1akY̘X͙j vnt%%O}{o{~O? o9>_mC"|\*[/!oյ}i +?'ty>Ea~fiǂ:H9Z;W+NW^TOBEo\^9vttlӶm{KMčlKՊП]O->.h* +^sk,>Cԇ{-swjۉMO@E0@bACJ % H)C Q╄e@ dg(UI*"")nEHh%6qSRSr-QmQp!#ɜҀ"[VKZ-*Ƴ[ar~La継CABfwmw?~Codu6XYc[4W؟~yu,nm0:O898_A~E{x&1$@BA$ b E ?N_# udE$ED1#iPڠ/F7MYD !3W$~P$Xsd++=vuk5eoBF$DQUtsZ_XϏ& :J" ҷ94Â@P8Ld @v=wkd@,oOS%ͺ aL$B\46A rI*gL 5ҥɡW4 1?Fxr~n72sSQV7=C=ML}8ɶw>Bw>0؂m"% (5fڨYǃ^d=76 ri q5wRsBS(͙$A$R2~;Uzfy~T57ǥk\ j=gP#Tr"VR 'ƀ;foY! AJ5$urW|;0g`^sk;:Mx.i^82 KT))j#ZD"4$DVqUa.Щ:pvs!Uף DOJ/̔ڋr %)BuB" ق/V:S,#G|IA8idxTI$b%6 ˈv>I,Bxz t Xd:d%JXrWEŹ.rHpD-mWC6jE 6DR=\r4(F$SkJ]84RT- D "'VZ;t-PH"H"HU!UK$"2Ht8GTKFݰ kDBZC̀IDT2|3w Wj6z/ʪcM%wtzuaeM`!܎=gV"wrE H-D$%EކTP "jAl!tŮ%S4P)Uӕ(D_@e__v;!EqԦpzK{L,R/BINFJSs;:ia&6bBN\G`(ܪlwC+U9z=Phզ;L#VŊpQTX/y:};Z+p]tȟtK2‚4,@1HB9R;զQz`s@ӯ"D]rpM-/YgϙDU{/B֢5kJfLE3a ݡia Bd]Ef4%,&E(AۙuU@РM:NBi8!1Cn$ihLH!m#1k2 аlZZґ( aR۴tݨ솱Ѕ^o>/x6nV1 f.!+C"m8$k.a2۫#4lejjKF PǗq$i%L+wlܰd'5ɂtI)0KliMM;,Eت%㹀Q<]*mP0ƎY6A̴of&jh@@.Hr,F&˘S¯ aUUuD.؛eh@d2Q5Ka-S,H RQPM B.A̸3aqT"eŒYWF*NeaDaT0&X1&qaFLgcW ĈJi@in %HюrEaaHT ÕJҙt X"z@H`)zbȷ7^ ģ)NKLn>֍6--ʕZ@0e$0fF@4ʒ4UQh FX1FS4̣(±iq4뙋H1240T)E$2j Q)#cPzj3C52aL 7UGYkYrda!wӹzQL'ۇ_EĶIh(jhL%0KLIR#rҳ$3t/騉I4%tMPЭvgJ!{rOS=FHSB14]V EgL`(]O;}ݗ{ c Dw&,f㸛XtQ6G8$Lt<$V@Hss*döo)st\IO5itǓ>]KĚAɖ.eZ'ziyݪn =&ܦ\`%ï%JqN7YF樏I\5&8a.]fb BO^ʝKdL6OPI/jA HL ,uUT05MZu8 Ғl tA0s ޺ي_Vդ݉mrϧ:S޾K=wXyŢioǩ);uIj靫STekbAl̊8>^V"vHḞ~GyΎOڪV5:8eTl[0ZR\8kívKi4ٟ;-쇷g;b f:k4v1kߚkõ +ѺL"tMrfL mf5AJٸ%UΉ+q$#dZW|^gz(䖺Ȟj^wSC''C8̞qNrRl, f(9vg;xȌzЏWknք@& gdM`Dkx h\*I! ')VW%07$ukF kdRv˹ҺƭYvqhB4ȦY& m"-eAP'-l=) Jl$V( 0S*6بBTd| =zM#di)9{}:zq )KnjbJRp0+Lr۳$.ij3fdlۮa⹕B{rHQ[Α|R4S4eaJ]6đsyM0p])Mḫ^Z;J1yS~;-۵G #+͆6ÀS[a,JfH5E4Lbd*xeԇElMJ( I-xp6grSn;klZ,YoM iԹz-r9jxҖ͖Ck{QӥfO[e0}%*5 @eYdWqZ`i jӻuVdQ! eBm}~iIoLXtʬ;f&zJCN_ğ1 ?]v#};#FET~\(zG0Vˍd $@O&,u.we̒;]K>bL+ޒuaDVg&CzlSgxV[G#DToӑFI h$$N\,.uq;Su2׋hꌆxaobuNZ9I~yD ̵r=z/j;|-4IxCKP[, 0d:"Z+ ],'Zqޝš6$":řZi"/g@ИgKR]sAr܉9nI$""=L]!A06NiqfiPh.QF = a4B0ȪW~]4®iZ, 5IJƄ Qw4`S~8]éҷ.;U[KNҕsKv_aQ6 +Fςz3^5"#'´eU$LKky+ Ky&Hkp|5&ܯZǓvE+In.MH[fͿڙEc=YhkÈ9d* i,&»jLj.1>[XkRKԜťFFPZj1(\1d-_mpLskѳѽLYOq]kk%ǧxr>afa яi*µ);}9e{#9YJ8v o==|+JTťv^P.uōU57O3?.Ş4#>gM,ҋiF_Fl8_ *%.):jZ!KRF#A%yK VRu H -4pZ=JڅWo,kI:; bEƾ&%Mf]UFKlLp2/YHc+Lz4?r5qVCEDi/Yv*rnLH($((`2i5؆M%ǁf澈7)=i$4.XMru1,y)E3sm֗V&Y^li8pgծkZ\5ңZ.9OxT较ކ4NWA7 Yo%l}x 1uFV2Xqi06q3Zl4R.LTz{.N뷋E\˝U!bw!=7):GL3dZvFsu>Z:ګJlNJCAO!mk޵D3Nf|VvE .%!Ƥ)Zȓadu%Itr#݆ݜJ &5ҽ&֓~4XfDZ5'\IIы6O88N_vFW-m*j]u2L `P6_&y3OBA+[^8.AJ o bRL&*)q-G?_y铴I8,o< D篶۽^f>HlCWcD}cҮ95o2jk1TZ[z4wd 7m-СZIÐL0ujHNsŅ Bd"jqC^l\X\p&3|ASL[a4^l&m\dMmw|̷t"ɖ8ʻ|Z(DZ%ЏH,Z.2u%Z&TnTșLU RSyIҘ,@B?^S`wM}gɕiF }5&m_ޖ'2\XVž SgfWKTfx1"q䂚aMHQItvZdXչpTxN@Rgfsޏ&L%RhUZO&(5Fg؝r#$俄^S55T?;>n~r ژYwyuvw彫k&Z1tm}N-4YaI¹+c4I8~e\O%_=8;XcWEƾko>wq ۑu͍p X&p8VYˑԾ4-7J8soMB~f:wT=^%VU MάzA.bM&CφŇ-z $y ki;׭'S:v"חOb;Yû&wg͵)ų}+K&L6M.O|CBBK9D㈣QgJ$;qL##SWx ޶'hBJ3aT)<.**܍j$nTSm=uo֒)#ǯBUffh[54wj&}K?6}[|{4pzmbV%*RD/Vv9kP27geTiBRֽĩJ Lr%O.x"iGߧxwuK·N}Kgp4V1%v"RAy0ЄB(=Sٲ!jcЯQf[ZE 6ƕE>pp1x鍒Ig n1SbWӁ0x2H:U&fvM&fI""I5(@})#+kr~MQ5ӟ:x\RJen:onO ׿דdsvx<#ӊBtbN_y!kjj_WW^ɑ̼{eϮrC;a(cؒ0#f0DNI v EJDj.Kny5Z"%u]l%r9nbO% z6_D/fmٝ\WI< `D+Kn-lpY1HX"[ f۴Ă= A֦yk!Q![r! !v֝@ʵPٺX߇n:F:7\ !t()C@@(eg\^"C#7)¤vM~FK%JP3eL\s07/Wj;ʌ;Xu-ILf YIӲNdfur䈝Ӏ hrpYpX Fx!,IvaFEݰy|8z;ݩ6Ϗ I7m` ]Q3U#CF6yzqՎ!Ov-@T.佥\ȅX;VA}I@_R0$xNl0 حZroKu3 :zլAa9Θ*mg\,g}.]^Y2DUrT졙%NWdo7,2h 308ׇ,;ujUV i%#.f\5)8j*X9 ̰<\l(8F::{i7mƸȗK(f sz{wQR!Y0akmZ&(.v8-n (X/wՓ \y-$ꊦ%_&$x*f̹"R) D ZX%1mѨ5lȡtbѻkij jJ*t&1(ݸoK4Mv TmHyQBGZ84g tj! q2-}̍ok(h" uCX@lS$Tt$n$Ay=_mP;GuKKjxZ٦%ux#KFHz@J):1ר2̌jB&`(UwTygGo]*w+a- &F3uD L~#y}np[p\%X#U |9wu;M4Ab^*4 Ǝ(PMwvA\LJ\o!Koǭ,P3I.RUe$Ao;u1 Ucu4C,&tx(,4WM٠LlLc XJ#H| %z$M.r"cު$z₫̅3=R\^gp eR0%U.`';NYak=8޳9q畘DM)G*M0[25JV-Pq)xTTX4[% 94K3^$D iiiGtZ>nPec5Iċ`cNe"h) XG^4Ie)ksVN4XVDk)􏃝W7A<]\>V_W|}9 :TеʡmŜ\YQ ț 풮e2uvޮ7i5'dꓽwH]MV J*Iw*;l`t@>YKU;^~,XN$7]t}^j4'mj5_%Q&u;/O׉\@K@s̚*R\= -ek#!zk\M~e!BI"%xC;')tp!1T@h)`qq`M F~seEqu=Z蝋#USYI@*/0@RFUGQg+]ǹ͸'o+QHp̘j+d2v&E}{ g|/ԣ ݩ8RdF+;}9Og/utjCA'A¤R80KHI|;$1( F7+Z rV*ڨH.fiW\)*ac,"bFU5]ee3hfD0EΘH! 9nj-(065X`! ѳwE 4j hfo(Fu`O{ VP4--ǒEfk#3sJ*8]l)mҹ[[H*j$P Cb;!;ݐeCu.RgGa(d' 9c#aPP3X)U6Lƃ cId!W.љH2DѢ((3ʱ0Y6вSkkHJ[,nIz@KLpX2, uA @ 6E !C GTjҩXɱ$k sDfwo6lH9,icP"K3m܉Vk,M)Eg2 V4Q3*L3 0:"]K`FP bA@hDa A ƵB  Thʠ*uEe RܦXMO&MJ*Lj`ibIE %)m-R"f4&lQM8$**R5ZH!dLY n^#FT0aUfBdZa#) K Tw',_ ?;~U==HWyzNy:)[m)ETU:8qVl]L0BIp2VՐe'M92ZpB ""#`,Q#Rp竴nyUET燵@ 4P!<~kڛY# DG1R,`H-Zsl۳qͦk0e鱾.^Fb$i^SDza>aѧa´a1 IAD[-fӼ&|yAgOxíWkcdVI8=g$wRӄKL1ԼޓLb̚HQb  eĘF.dΚfqw&)JUΖ a"ѫJ"4`jY2-ik0h(JḲEC.m ,aDa$l&e:j @kCN' ]#RCRːS"f@2P.ۡmaWX@B: ykb9 ^QѹXqBWPsAETHЦ[ ];j!2h ZK Yh q hcm LIp#zXq*fl@cds1Km̷c)`uBh " 4,ՃF vUZ!R UW@sa5 k5S 0c)1 %ӊrUD.FN0I#D*H$4nƘ&Kh ᨏg؄2$XYӮߧ{Xt}i^ H={Sz {٨@^aFȔFbJ ZRGέiҊ-vd;mcgU,kЏWdDRF-0Tm %ڋٍ2apv}3'ޮ{''*@P0P6R9O9*Ḕ"& ¤$ZUTkl]lH{rEI!H5UV>J3:J4|N1QZpzIB@Puk3Y+ߐ{;ud\ml!=>!bNͺ, /=( ZXR"'R @2.o.YDEN׹ʮaWqNϓم|nIg'jTtbu/ԞCv. )/Hk N}/ :A D*)(Cmg4>c$_ 8a)C‘P›~ja]tƧZExT%X=yXb޾:5yρv~Q }+"Rɷv!<6 \hT@"@lUYDO0 .)0N=V}v?̮ `!3vQʅ3$%KaߧlۮU fiWrP(R"hkKV,{/[mM|e.Vo޺`&[IYݡFQU '&Z6YdUZ P@X2PU"f^BҢHt d@:u/RHaj0hW{ K1 (dAF_`li qcjI:knj 7z 4n YacK|tf4&tВnK.*\% !BRUg,]jzB.]\" 7.S,}OxH6< Rca0*8+m:ȍM4AZ0,eUa+4%ckӖ}-ϼV$Oη.E x|(oP?q5zOž 6]΢C6/AQZXIKߺkSY D(>%Cݤ?ue_=_V=\ubM'߯EDZZ3Ν SgC/0oޱ'kkK|f;%[t>{߽Y]] "rPTiMC\*$a>}!La3'[Nbs[Jᕨ@=*Z#"2H>*.X*aJ|?uZ\iϫ&4=TҕI^\h!Ty)gR]kA$~q&sCrl=̚=#irt?Gʡ'ʞY!d! [YJ''ma7Mڇ?d䨒9j{;ZiT^)޲>8o|Ud2HF@鮼ɮN>Gx zJޕՉ鳉}(OZ6t\ELֵcIZ-BԴhY "@Bn4dT^+K-!IH TkШT(jǷ՗$nO)N"# Nw@@B1 h25BShD IlXBtBhS.% cM qI ͺ:&ʊZH48j@ U+4FGBnج֞hަ" =*7&ۢmAt`i ʹw*nݐ8@ j8 ƶUXiEj]q LʬFdL3 ,G)tfCپB~/64ۃBKd('jf!`jV%ua(Fir]Wm&I<O(>ww;-m >b}͚7N*ě~k3H1I=w/SZֆ\{,F,F@R ֫LkY0 {"5$pLb'g 7uͥuАw"#Ջ; s$@GgX(d5HtY^Sb 1 $]3hKQ\ąa'#h4қ^]աbϪo͝^K<&|GTIהF.NuJw}1.75yW{O!@4X!1nY6,io1$YWd2 [4,Q8S``CTA+xXD/Z6-8e J)ikB Ff;E#,!<61fVyE+)D2J! ^-ZZΒ-lЛe֎BJꃈS hB6 %(j eLTe0- ״m8ƍjc.C0YqV׋(*&Bj4a&YyIr26Le*""߯Cdh-VHͥFUԆ8Ty`S Jݒ||.CAi H0Dnimͼ=hQGce؂fAɧ;q(u,E0 e hV HAq~OR)C<}\ kK^62~?+\Z|=9&?ͺ*?ٿUVĪ(5M()8ವad%z+^: UqÉ~,5W t%~-˻f3גIƏ{QGJdRE\K@[MEss[q ֵaxjb*ITB(JZ+o\$j9;Rg8[v˶zJXrԃ6̈́+WhϫwlCTUFGbY!Z!1xr~܎93kna$EuǕ@ZZT5X; =H@ϕ ־<'pk#)C Tw)GZ,Gg{cP -=Mn:\#GE"stL]i$ϴ=8Q/Z lQ!ƾ%ű\&bu)1S" @ pZ JᾭWbg;1}JvKFNׇMy#ֽ $~ܳ޴H}Q2ȝ_Be_6UT| ['_B*<푓WքVgv/Ohsf4u1£@-PMWQ!T(9vl%GIrY}TZP"ҋ)UfvQJGv-ޥM4(LG'?e^d hhb#Cydj'1ynY+1VijT' `RVAɎM=e+ЕNQ)D!5"v4Z$& BʰIye/ cq+Y 8Ũ1Z "n-&-)`ܤ<(wwh! !᫖X6#v@C+NJȅ `ѪDRR3ͤ&@D큜niiti#؛+L֛BXB($| m@zL'$񢹎\"^A~ rΨ :wWZ E$kv"?NiK+1oG૶;㤐&>tLP)h8~َoy:g[~]>L .<9b^k)-MT D4xCǏ\w U2&ͫP%hԃ2L^T Y4^dyxnG7L Bܔ !0HJaAјTVB%0`$a%QeoFD **2# 164uwnƲ {=DMP#!hbd 1_z,F Iw㿜 @sfѶpVk;`r!ُE2,xvgl.{K5"x5ϟT\};|P6=V%4ZfQwG!5qpq3rx՛2ղ%p1kɘ>_q!<8pj2>JN7`l Pb;"e-I3ɵAEh6`% T VF`:#Pj6$:<#2!f9lVJnz:s!Uȭϙln®Fqy/ :|ix<,ߜEuI;Zidn^wtwhTk /GW _ -QJr^A}fZ۪~ Թ̪H]QǔI" dDa8 rǚh-+R=\ o1sOyNJz/8?9AIذ(&5/nz^Qa׳ exHi!J'_E~Wio`૦7elt3 `a%y11af5X* 'wJgM%zcjT% o$tu ,SqCFKKhT,`D E;W-Rx6h:c_P5:;Q(Ut|~{]1TUX"]e0#jVZj 10߫lF7$L:m-E/5_zJQ1̀78kDGxXi:{羻n*,wن4U:u 7xcXT"jJR6Тm7fb;df]B3 "*A& H2olgwH!njõmu"Pw&N&,0fdJ"d8234z=G*]^{pu.>)?! *L8YLʘipN$Lz!*8ĸ ܻ +*ɎR LD^*Ha3aQRHa`T1\$C! ˗j@UC拔9p0yk 7qgxA~~NEֆ\$IQ.lp6ٍYX)9;~4WAy&\`FMcy$%NUzUf4л{}{-x<"w!1<+QU jTMPV wF<ULM[b]6t J#M4!/(i!/AݓT{El?޵\ <`tFѲoS^7;l\.܌ BʏOįnU|ޜ=d%^ViGtO\վ[FF~v\Т$%GwM@yu^R*K=8#"5A@"s@68thBF:nݜdh$<ޒU͍iUb/_w?VqmCkq9q; 1v_SdЁfK.hpCD'{PpC$l/uj{ѯ7<|`cF|i\WbjHhP 3IEY3&on0vVSFp`浴3ft#P+'UA׌4ґZzYf(ڽf-dRî߈;ݾs(JiEh"œ~5ΞsF&!XD^Pt;-3[X]vqXAADZMf$l&HZ g-=daJ(+%̵LH8QlSޚ 40<\fqU4@5w ;-w6@Znv;=v{۞-hADua5P,ZXQYh( j.H &SIA!.32'-@<EzDeOB^y1uXAչH<[b˺zyw1F153 ba@XC%tJ&`.G(EPu3å-iZ\1о!Ĵݥ$DtZ8'j*H@KSTC0QH{ #ď'@wu?=J}YS{̎Br1R(~pR jqNi$ڎ$ DQ R_ek{R[(I8!d1:)Pd#6#"E#hL9d0cWR@#.rh"DM$Grzn4}|^v+^W,35.&QQUF BnƐ%tac U-3[I8#lf7-A fH]̗È;+3|yqm!:7EZ渶۠n[ҽkW0"׭+=У7٣l{Yjڥf ^^vmyU$E@CAERv4dA/A,o"D#? 7a^4Q= =VCBPG_Gs6|~>uw+w{BB#/F^#h= 4A *Y@%!BK&Su$KI86w#ٳM6܇G7'ؒ0Ɇs Cuk}pyhٹdX!Q$U [kM] 3QTƊ$*A$q_%.^MÝ~aN{]몙0P+%AKնv!ilD"7r}]v6tSd빚 գYlRI"nv nŻ"(H/!@o_4+}OtBuLvx,;MZN~IE ڪF=P ~ŪZJT^^h!{nౣ@Y"sb\zI};O_dihz0Skw{9:GCgO7BuQn6v˲D"HэB[MaQQnzNt3.eD葷.}5W_Z7uZս (qIM\pҬʸl3:%/ꦧۉU*įyww^Q;vպt`-ZН\Ed'Аn*+UQ=GX퓰gTVBӑRc&lnwH\w Oir%]IiՆw-@5J'Yx{O!Dz>0 Ϩ=>e4m 5l gw"h,xwj. GW߇"BV.u1˵68>H] .9)xčva*G 5vq iLqd7sZ6EJH W=lDd&B,H 6gJ&ԥ4Z-*8ȦZ/p_<;q "k4 COG>NND/fK#9HJHĄd#DQI$0ir<|%֮mACWbWj`w,B]KO?]$`.:D$v2flQz TvQFR:Hp\y>]9# YmR׆Ƹ!($ sm88oa4Lʴ(߼_bXqN x]ioyq_->asO#9"Lulv)%FfƷIܩ֚a@h3]Hۯ,IZW5SJgnt2t߭li;q MW\:Fr㮃|֟GL9K<(s& 4 w>zJ(߃+j@/z[ *q p&uŃ̨1)E9h@7(u]{ Scœ {e>C4^xHdG5c-jvgV][fN l~zQ>2sWɅnLҳ+w4bl ]p-[!*qsAL8?zFi [A\ke}=/n"T̠Cu`L@%IBqJ&`"UQ-YP?󮉿gc$ i) H4ILu |8'̙BU9ឆyXz#xg<3\U1#v+}mA`[:"<68p-P"1BE*Ìe؇nI8Hag' \G=jkݖpn<8NS 1p_g.A09aB(j%$l$X cr&h5 )ý|x85PCs ol`a%zKm}. ^;ARB|\ Yoo`ޞTa6;x'Lbo+p+znPDpkٙ鵵EΞ/ApHAh_œeVuD罐-d$1Z xJKQ06C..z]#iT?ST* @p5HlTL%"XLf@ H}ȗ!b*6&0S;!N _Z<2Z;4^$2"9J4=HA Usp/  Thf aΉ"@glKXI fJ$B/6h}-ڦrHC\,IsMJRf"?/N+nu>ͰCeAf &M-+UNb )s!0?ha.U{w"-;4A:jV~i+EfQmI*wd4Go9ol?;D<޹S[+SVPrrM2r{@@`tC 0rVMNQK(/ 2X/@U_BE'r-"j0lڤ F]}dFG :hI}D$˜jj^L) !匕h |@*ˍQZNjUѳ I1 NJ =uU}ƿD`fi@JIQE=Ud.|Lʤ!0f1oy8u toK{l޺0z@FOؼ+PI0A:Y'1O'5~X;jQcu}lG|r^ɥ.yǪc$[OZ{6:?7 J 뽦`) ھ[I'9>#ȍަNooKFFCлL7夽 GoYdoc0qi58BDyX3p~SPE0C{ p/id|.*b `55]ѮttźC%X~_Gq<; (n{pڶK"lTU("'\><7:yo ,A050tvj\j8:ͭ>gWzS`"*`"yW^sG}y7l[^u*9/# c@TEU z3m(W0I 5KK```4|:i74"(*:WP7'xJRQ2͑^^ rBD=Wxޓ'S> :q5{lc,0=_y@'ƀ𹻜cXڧPXRF11b^Ms\OGQ""1Fvf ɪp3 ` 26 5#)ξu4*W%%W!S;a">(컜4LJu~gK7ǽmUǫi([I7ŨiR|%|NgT0U=T^uO+z?W }ȊpQU5z #l!yNqCOyyX 0f/jwUB63ܽĚ߉?x>2"'Uр978X  w^#D6Kq3x{o'՝rpὗ{p1<[Gkw ^I"t@NWW@>&!l z7k]mWCdAU[q7:0O3Ϧ~$`'6_Nrz|i^cv?LD9oP`&yN|O1q; "t~@WvO.-kzzZDO5yRW%M=*_^U?.] K} e\-ue`#Cg=[8竷v1 ef`5 /WI.=7bleAS?A3>)3 \cwːW1`m̊{Gtp`??n^*ʀ`喝 o"d`cbQ^,c?qJ?kݴ%nr^Tm˫[ùVV_5|˧ߣ(>hiƲ**DE'mq'D|SVx=$u`4UђE?͛IlbJ7: ik Wx%zOx~yFT0nmx.r)ZUvWsB#XF(6h YiPݯ (r4ZF+Sᘤ6dcfV0sg=Nز01/(` 8j@0/`1: =.o?Mj1**]Rr01o wrnq[4~~H6gƦ`p@ =ڵS}? =FO`>vp /_ç7`T- yT0SY% wh`cxYh?{.3Z֕X6kX_;.%zLyŊZHzcBy\s ~:ztw|*܇p`n&^.3cV+k&0j#؏c1<`+H |Vه>As 1ѫ01lCeNN30F0H 7+վYdu3B?x5#lņU_xe0ԛ̯F15ieu[]2=:oW&L\]peh7<4.0?ѯt0qAUpZ_65ekө\A,cV00>D\yhK'ՙo%# bĠrZⰫmjݱҐ^ks.0uZoM~_A _gL/]Ҭ'~#F~!W |jNq#4FrfU2>#6Ko~N 5֚"H *QFs[#/SQݻp۾3^SC_+MЅw3ogX&{~&NsQ[roͤI]Z.;}pՅumvo``;Q՗Nҩ1 I=Sǖ7J_eQq=Kv@ʡ4`PYEE4pwvxxŃWkRC[ `&[N&_ρz̎Ȅ壒3e{]zA?D٥((E˒_B?G}^٘zЌw3Uz뙥ZچP+o[21/RIOn>o63Ο'1yvNEVzݻ?V9JRDbj6h[/ IRҕapj^(o9;oV\Gdb%e,-NhA>-s_yr1^%DIyƹ,)բIjR 919AQg0}E=;+ħ~S"2B XpAergC3Ï:Dw:>4^U )Y4%1MA^yl,"1%',m ع 3ý.dA\0c?fiP3"p "}t=MB$G ѓB Yoj\plưWOl^H&x]'M8,1/,yR8;"Zt0U?K_3 J(Z'Hz ?zz<*!rP5~j KrgYzm~O~oXS\ +Q9c,CƐ*~(ϓ3L *7 H# 9l}N͓H̯Oݹᛉ\{;/_WDm=+.[d7?}}o=:RCz?̂ns)@OR/j*7J)PG ,AdA,#} 6Ɓ̀&61Tߠ\x*TAdAy5*KQ /A "O@S( Q/+U$Q\]ArP*%EOwp$K&艮{dG#ul8@*+xx\P-^(* T@@,J&CdP'ɾɾ!ɦy1ߪᕭr`2^5P^M̟:ZK~1m93b+KKC ^gՊ  (=XhT"bhU {.;@>u~Zv:hK']U!ٽ;"q߰u& 흈SԞQנë6:m@DUd8" EׯU`DC *PW 7EoCVͰo]DkC3v*&1PC8P "ȉv+dTvM+:050 p^^( `"4PxAAA5@*oء2 A8{".5aAvlii&Gd7G* &]qAM耎6҅BӖmÏn~'$LuqDq(@0I q&AGnzgtmX:A$[-6ju9V{'6˨ zuId 9# "3BE-ՕNח \6r}z XjA9 ITTCE@r*u0PXpĊ aνr gEP"9#ؚDMQG Wզ2!Y訉8p*bZW.R2"Q*fqpJftowg,,H &dQ@L(^5D cD9"r@0!lK*3݅iVn/LA2! ٥CÖ-2ͼ4 +ëXl*&R ^L6ǚڸ\deQbj?wTyct&wMJBU7GIQ3TU9c)Z۠%FƩן=Q og??NX(Dm&\M"a*8и߳<3@ۆ Q\sBk9G%ԦiefTGt?gakWO=3<~mXYr7d UKd>MˡF1:xY HjL[DQJAA-S6BIEEO984ݥ!]oCۅׯ}z?l'tފGrob;=k]v&˖||Sw(9S8E:8E 宒Z;S"׿Wݿ56}.!/S12Fdo'(^HNsL=+RiZeթ*k^<>a^̭u]P&XS.JCH}~+qcddRr= ȻLs5F#d j\Qք͒$IޠLT(7wFDNJ.ZUc7UIˍƹE]ĥp$JrT%VR @@"t҅Zڬ#6 ۼ0H{_jI55&u4:u\a3(x"zNK IM~gJ(%L1bK{CKOcȗ^6G஋!^ (,6۱t!C sA4h$C\C̀cc^5)T&;&J|P8Pj\(gsR˥낸wKՍװ_iY]TjRcR+%λSbR)@hش4O *& !Tl 8 D/nCdfѮ}i6-rqIlNGj41QAC `u9e&"qFÍ֤47$9&*rEß.P-UĵPζc!줚At\^aVԾ2![J32c^ sصoU]:E2%g90rwJp*:#06etZ~ͬr) ݢr&0_+"m "Z H/iF6 yO$O-ˊ+Ʋ렁Bq 0$s1T띊TK0]]r6StG?5q]i8qhRAb`I<5DlBKBp[;w6,ZꘪZg!hbTWX 9MXq: IжЙ.oB /[%MV68,$;ƥ^X(}Yф= !@~eґ)/ ϗ"@G?YAu#]eޏJX #3%a.^dx&E9`'oW>z@Q;N=Nm'۰nJP;ez2|Nܽ u@2`) "+v,b1@mA6(EPuEPSʊ \` Gw@TAU5E^ A\EPGu P?S5ED RS{e(zECT2s@RxbE" Ǟ"vzk|3V:<+bt}Ƶހ)y/׈DGL6nקw6WWJ@:"uvtu{Xy(L~";+×[/+go(b@jXKk2BB($fµE3Nmv`#-Nޭ8]}\Uyb;\jJ&uV^4Ė:7PQV*r[Ғ[`htx.LV(T Eu(^F 4]$̦9fB%*شQBXTaRž܉ocDĺhS컩E :3ED>x$L##Ed$N@p; pښ^u5 NTP"` cКkgOEKc !$EQ8ߤbK=ZS!^13évOsn^MïvE\UydA@q!L,)YIP 1N~<ړmx@`:]BN{i?I䁟bӯ~IưQRmڂat5P JjT%[ EQ> Uy*RB%۬1Ё-"à`̼3[kl/.tmdu`8 W@ox1u kF)qi@l)r#Qv୰ %5 Q5"mIcؚ7[T汕1f!Smqݤc Ip5l/kfuqȽx!Zn aKZs=gmYe `[2bZCK אke)X'|ki:Ddn[o 0WVT|kpϴK2e"42v9˽qR-J\\)(B#iHP^T9&\M$5DKDxz ;P1+|QV6Fo_fd_#RX(nM9N8 I !TJ[rU&󦬵k{1@\'.ʨw85oL2i(V+L*A5啣hZ]S+z+TpÙ-lfc L(\-~JQճM\;7eM*񊩤=3^ oڻWÙrV[D 9QhSQv2<S/5m1ξɾx?É}OAik|%gzaN{*fۘY美B V9HavGF?: b{@R$+ݏ[A~e+#Hnw5=U0k;sC}"@$M)&1u_ƺ 4a%DUE-IMs:&\$kOk'G]BБ4U{%y]]5"=1@!Mp( i"JCcV@n'lP@f%} ,)ڥG3}g"%͕Z~Ϗ)3VF8(9 :w{<֓%%_x(:t >ᰪO?ι3pÓ)a_'j]~omԜ{tyyE뗐7Ŷ`Ȕ_ EްS1d I~p¡TRZ'Ŗ){mKCbAYKk5|N5!QSՐ[PQZn1HJ0R.lB3+۝ma`YH4AECP5Q"*D T"uaBHb.)w#~ ,fFgTlmN[J˽SQ)Pk[Y[DWH6[nn5d؂5Hcoj>[Ef;Е㵢> ȒDCgzޫ}G'ճDuHMz01A(}'5R"p5$FߗgZz_{F-v~;o> yTqsMzb׽ןscYs]Wùizwq1nNj\[Nq0@ps!hP@V=u$ˍOAezZџݕ~< !'o_᝻ !3rASYzcP_ck$wruFŐlus/۟=>q=zr^nr=_miiKD-\nޕ 0Ic?oa%GU 3__I7yJux.ڨ~3pkl/3!/*5̲˗7=׵?:YYeR9dﱜ{67 w*:gf͵kJۤ)KD_ކ~y1 ebrAi5KkmF7Aڶ]c/Yy^WrO=/wm^-Os!@А Hb |* 6URRС]~#}Q2c7к[<Ϋ^l݊eS҃qn/U}W^oE%}{w?ehJ?uN?.(;S'9*ܒM2t*p(cI.sP߷^6_I}F(A [z9IY~S`<ҿG`so={?{Ԡy Gz/Y]'eāۻX]dm[DjR(/ĸ~cn>OK,CKBe|K ȵ<[s{.yYv# whs_qNŽz1ܮo=ET*$nn3>wBAz)D%N o__4X_/ѿeh 09έor*8/ڹYt_4|¯Q%RW?N پa~1M?l.~{&?Sb]q&1"wD0l܂ R%J9ᐼw1ȥjͅ jfg޿4˛m< 5SDk煴¡eOlO'BE{9DIϊ.؇)vԐ֕JUWxFF% -!դ3dPYɦ,~ov[{o,Q*+YeH˄ & )jPlݪEl^7*%n.C z$ D@0 [Cv`_䩛`z>N;^ـ]^AۗJtPp\'W.BʬL23FxS(+DfF '#  'Z5vk]̳cpgs賉`aY ܆L`Z\]^w]m\:ˤO,oul jMl`N*E7E-uOr7N(#sh0 vQFo3ݙbX,sTjn[b!|:ԉeV vRɥvPt*ү@@E-C Y烅Z=)Xy>%')P+b|Jp۽%ņ+gҊu8 %1qYKztۢˎҿPa<*5 fkF# T8ҳ 0٥j-oB.>Lo0b+JY~A'k^ {{a%, #N;9 RAts[vOSc|&BݭEi5`/n6lErcNDH)-c+x$# ŭ0ꆍ3Ug:qhLC#Dm$p|l.*Ki(~ค'dB(mnDs]/Wٷq\8Y`okƹ|T2E~vRP@$:+Jnx;u(7;lBS^ !o{|]S0 &$_.֞ e$!l9k;b@E=TmXNLjÿ6ɟ}H2TD'12QN\蚜9 0` C~7vV U{^qh>xXYH*o| ܄ϫV @뽺``F#0|-' ]#ÅlJ1Gן8]<ihK])9N CXv/]e:;ljL 1(lF;Q[`|N=Lx?d]iG]qY&8) hI,ٴV4\+4%]anUlz?iO00L}9 umat|)b#{k =L<) PxQ.w{0I<m߽jP:YZAI^J4ĥ DxQ(E8Ff~k^X<)4+uheLГ~rFB}NkV<(mr[lėshnL,4=du~ ݶ0ZS1:Lk;gJܥl+]}|#wh&Y ."&Beh.YβH[-!+<O o4΅L=g,c J׽萹4H"_ 5Hs ,)yb e0Ͽ̬7;m/i" C++.Xٽlr6o\l_n;WpOUּ y'(3q$m{4.]Ӕz^t(B ]ڇ Q;;بJ4Am#{ExJyZa#)pj K1\ƃwH_ ]K3z u-,hI?7^ 0X.rIAy^;1L@ "Q CSދV^ 2I~kH^IYUHlilcT/ۀ_t_vw|OB\f.Y 19CDX:L$"}&}s?_sޥz\Ņe Oo+ZI{ݔV+/.ib)$ $tlTnC>C_*~J|2ꙄaY*4- #߃tDOִ̹]܇\z}&os@tONoTǢfw"$#(fRD!2G@FA0)QC 4;'/k3Zbs? ň=`L"S~xG >-^$/W{F]+&kj"rQbp𳔒f_m,%JϽQW?;0аǦ;ew9zw\IS\RS(Ji`c~hHD Q-$m"QR>4h?<`kh P}Vxv<UjGޚ8퇋z޴JEAE ı*- TH '38SYLQ)icTĒR$rVLY*R Dij-E؅ĤH5>U6J ]6R) 0';ZBh'#r;2 Hf$}¥M4ĥGbhCk4TGT[ YAoiw?wg:$$kHU/ޫ&KU 4jW-WmO"Q;][Bc.xH!HJ}5槺Anl}CFd1K.r Ut@Skuk|}lfO੾̮u/o{TL7qȲ=oeo}-QG7џVkWsbWw\Voy;m 7xLuՕ7ϚVmo«bm=nng]:߾[i\7zg|kf2}ὤmn7^>z;Iw_{JO8}Ȼ7z~]!+wsq\_B{_'kfΞoy[Mc[˟NŌqbXo ]d'>~f}77׸<^hc%e=G'^u~cuoiVIf{7=;ηzm/yuߎCzIʨ,mo@⪆x쒢=GżSĨrw{IYS6(c$$JR%<߲r{}+CGX߻6l*Bܯʐ=1#]$\@i$,ALK3\u>'stow_l~I ¸Q|lLS(L" Y4',ӄG A ۱bkP{1h{ Vppٟ+jTQ]Rˡ!Q{+QΠHy XX#6|pfg0=&c>vOV9 ZJ_@dHl ]#J @%^?Зmr@X"UQ${ﭾ⩢5WϖːG>1^YVA{̟Y;pt@$aaOͤЉ1 =fڼ)|켎,4>R{?vO~W/+K/dUwSU};\6_M/v:?g}RP_cw k i4c߲<;ߦe-?KGl9w[oVec)wxSWp~ټ{_V}Q^. v} "&vߦ:]Ev Y||X!Es䠩X D’!ҁ[C2ȥUuC"^v_;_}SNfA˳{H3LS4#?)y1i7j`*^d$~feKF~ߣrnV֮UM ~$X v'_oک5Ka9y{/;:eZ#dHMg:4,)^K8xWmHXy%!]3c^8lINwa>gyς[u1aYHzfZvywVkNiQ B,G8m[}6O2ۏiq?+)HWt m&6ם\w{5ߗ~ĒHFѐ8#riUt ""gw}Vv^fr?7~=?e:Sgt)/ƛYnG:^%SSy_+sY9{LJ?}[Kqj?X~?IuyUM>U|_Ehm{3AY4^g%ݶϷBQ\םj r |тs`$"E[@AOe/7-A g7jecy:~NIäL9,-?|/m9?GkNV&- NNX(hW}A%LުSMs -ާH{sFνTkK_F Dlh" 2-ҫU[}]UR}Ϧ{h&=lwﳨs2R) ~P/Eo6hH$y& X kS@@ZW)ESQ}gۏzߍ\߉fD4#h1^J%Ukp?W2F,v nv'5La:s}ʔ{oSY_uM]VSU9rwU׵u7%&@2;gSVi'7u秆{),F֐;}~#{Rz-$HBI$`ZFj {:zd'۬s7n s}nzT@קr^I}ۘ]]%%Y]f\uNr:6ʒ颂L_RDT+b8Ճ ;_0Or4 ivM 9?؉BH/rN>XӠ¡A`E);+VިȈp@@~z{>qp{QyZ;3c}Cujq:gBF~´_* }?o8'O}<=A[ge;ae7P?Ixs ;#@1.fU1f/Z~<29NͨEL,4xfxK 黝LV8n&L~3/d&?W[9RYO>t*p~~Gωu_H@ܮϭawQկ>¨ w,Y ɇ}7|}n?ku'R L^v}xg+W 4φ,U]'U]+%ߴWoWirMxʛޯ# ":LWZ5pʸZl)pZo7ShQ P .s="AJBpc0̷ AH!OP+d' аǴ7>[]|mybƝeV f}^!u[_flx^8,nA;z8?Q{ r׵?T|Ez1O!OƒMADpw:ج7ҵ@Kd7(E^H Q X6rpo97.MJAEĤb@(|W\t㈿SbWC|zq-QX8eyt1X_g+q5ЫD5QHL6M}v zmE3pq+j]yw}L(ig.ۦ?]0bMf_m=8-.(XV(s Oj7}N/3 r@ "Z$4jRa/zrQaH=FuWXBrI!z}6ӫzC_O>p}OQWGo<7.M_ wxs4/D` ,t9(Ӗ=1%?E khړE_C}O}F  SVd\z2⊙.I3 ioz+&F#QË_K\OR\5DZTz *49oH%}#J~Kѣ e 8c|'&E>\/{yD`D C#Hy, :ۭRWXdH_6)\]Zݣ]?җv>d"Jq'O.,%7k~b&w?o/yh~#dz00͑ ^ " FX&8dRKxՈ_SuoI?/p! Y O5PFhFR-R'7`̎&8"HBn\;ʄ{nIU9*9}9zYQ0h)brJ\4};q4FLΜmLc=b>j?'}~ϳֆNٷ\4E-܎N-f *ץ)zK;u6+%$!$;ɂ,Ć5 ekWotQ@quGm'~NϽ~J}zoSθ=ܦsyzT>@؟S>'/_y9mNKft:5|l޼ME$C? %# =-(%~3F1+Sio5s$(ކ_nFJ$Jʻ6{k] XL>G{Ӝ^a~裳6ÍnUǘy :o>m^v:K?L(iNWDL)wȑ}-cA I#집u]NUyb] %(DeET]Ƞ6A_N"1A"H9iH&xmnr'p\^n՗~xZ_#ǑfxJwFy!"8cݨb`}u%C xJUpv'uK+S(Λt}Z9].aD)* D*|]V/L> AzIkZ+'I͊*xPAtP25 )yTA j5^;kI jKz+8A?m;8F FʥOyz=?B##r c ۓl|˅lu{">ʺ8Me^nnڍ%\W{@G>XZD˹Y#VCV*Bi,U%2QtL&X6g~].kd"扞-j_K@&K4fPƩ Q<)[f/ ^mz>k .8"TxYAb W+<D~3gl@k YAbK(@SxOcz%ճts5 "QDC-<ĊYFIG=]"z6AP+D\P*EW@VIZN rѕ~ÐJ 0H<}ӃP(4lNxR~zygRH6Z=* /yB!B QD )P5j}_u7 u~{% Fod}w|3ߙo $bwi(#PRϻQzj;h(wS\G5# @<J"* ANGqPSHt2~Uj* '#%RD:;eHmow߲^mFjT9 ېQa?OGMެӌKm 3i*T^ۧqki1LsBM\49M.mWh^En}Ç$:v3m_J0H?W64Ve$ afR @<=ѥյ\/8"F!UkjxaHk@xD7@ (n(T;XPJT`DA#M Kg% x# W>&.L46# AVoN~_3BGi8JƢry)!kAQFA{|h"ZJ3*S/ ︄*!ǰD 0ʱƥ8A1WpC!ŐkջH0J1XR^AƝ򼺺Y4a )'g6b܆w=Ńq_6z&—-( 1KVwa-oOσ:ϗ.0kO(L@3N@ C{uK#ޛQX+@D+ag^zz=ᡫ4:JI6KvvjG.;jA7QBY ԷPTz9'4zk$o~zP[H4Ӓ]FK)Ma%xHd\*{ 79W*2u9z CQ?sjF C8ɶugZ2P KwoY=;*!2@Hb K1``#|;M&(4~=5#0X_8lxh NxlµxH..U#fU1H}=Jc -R_,enG,T Y$#{[bpk"~]D ם[FeCT۩7C rHkW(t`?N +.yhCBQ5> Cv!uݽB<(@DD"#=yY`,d"Qq8_yFr+O׎0`Ȑcرc_y4D_a碊-D0Eǂ#NYXr.便߱c,I$dd$"C.RPDA'VҨ{@ł$FKɓsw{!GǏc]=7={E4;hi_{iZ+q^A&QMFUbvHf #e9)yյ29Dck X0 F \!S(wRyOm:/נo8 -v ׎hrsid+_5ÓG{Gtm 'j 6k'/Y :on;^yտμN>,\wN'~PDb٭ m~əj/s!HHGS yfdfH1h{yzK.ܩ~9j;Z4/m5l)Hl _*`Ȧ n׳iHby^n^zw= VL`H$M*4҈fzUppOiDEjUZ"2Tpe?XjnOC"[[t )55i\:WHP@DH8f' RC:C$jc<Պie `yJ6yUT J_ f5}{./Y-[yIoK4|f孱_A<]?/|00^KI6-K~;ZZ<1 [>% [ΌB@JJ(3$C)n#t%Wo~%|$ʫagL>?FDSVi&dIPQ2-؃Td p"n[/! }OiqJe z? ]=ʤ=:IS.93{}#" a!6 뮝EZzQr뚯Gzlk\* RQm2_scDi𻷙N[Ye֚o$2XH9$HpNATviㅰl6N.m\dPeuHtd&{ U5Kڿi7L>+-+}!,ܜhk* MpݭFfBN vlr ZE +Ł $j%`{bRLApw=eCfM׈ bRWa,Q{ۿ:BΖG\FRVW.y;w:>ke>w[I6 u> y@mRфD |RȎ$pl#OE]Jhʂ93U1p5Ms<gJO8b_ܟsz;\g,`d3d2$ 2Mf I#HJ] g&˗&9ĹeG D=QE[#PHVkv?qy*}XF2 w| iq]3OR]=~u>tB3m'M9 WoXF+{_/:TrnmZ Lm,]k^5;7-zf/[<|\݌,]IVW56/ XҾC,}D:fe#E4_:fq~.&*~Y'xG9U»-mZK@>#܇E[nUۈk_l'IZ f ? 2獼\UؖFjH)EH~f&Z`gV+ΛV>Xє$~{T[6[ ^&ϯ1궩W2oY/'TJd,uWP8[>fbfA!N*:@/*F/sL몏y7KW |֊t\!r+U[Th߶9O?p2$o6CyjՔ(tc)jr#L?3J Wusrvk'꘻ww Zx? \k`,EvûW$4.nI}<-P/]{q%N|Y1rȋĿ:) o0 V|Ov#d8p 3nfH‰c*״@Ցye3 ө]F^L _E6rv%֒,_gq}Yh襱zmW0jSQ IwQj6 _n#i?(2n`i"/h40f>bV ƤVLy9$Jz'F t=+?Uz = oSLZ/޺ĥg`췕lcdM;'|˥+>)H3Qwm#^Fīl`CVn"HɌ \=MXƵO%X@8;WmQGĉ)%JA..6WIX2wzX~cQ1n^ftҘ ͬ7Q,QH w#Dʪas5'ΏWO?kn>&oՃuLvLcdg!ls5rUdgxAQc^T.Եk؉,R~<*d\_.#rxvkӰYZJG/djIx3PZТQ=l %9jZnS]MԚL6`nkv[ ^96غ?Fd LjyQ{n} pPjFJw`vUonedi5n]{#y(cA^_eqtX}h*S5uOCK8,v7yCCwL_| k%dO &I߰y8.=48l(ZC9*&bYsT+xiR8IPPXJ^Osw5'Rwع)ƵώsLALB6b0bsk+нTo5%1K ws;/,$ +% H5@uBdHH+O PL"aߖ4T*\^7T@$v rV790@4?#Vd20to}zv2H1mBlG~Z(N=lI-no}AՈ]v͉Do?4!@8rba'SਥslrF:*Y%쨺." 6AQq9'RKV,; 6}=LCT#z]Dm$Z ȓ+X$Hx!qd!W^g*XbO\,8*(ĉåVgS](&)80|%m$Uy's0=i#[ȭ6!=iH׋T^phԼ΃i܏<]g/KPd1Ho@eZ.&w:: 7su3,Q%,A  =7/4ց*ۦz;)(tDeĠI'6܅i+]C7}4j<&utF:cZBҵJ#`T.5ȭ&4o>kh5QFTݖ'jK%+a>~|\6#\Iحo r{X.݌G v?KW!!kH=NXJQ|R@mц|ehp;>EL\],m5q:݅0$|RoMZ ^J벊qʂECa4Pţs;i3) .ܪLEʔ2A[0sB^/;Q󀓿`(^f:[2!|1&hm7-gvBsA_}|?jVBKN*h7r_F݋f BCMÀBVe?ޛ7;sE1-)߸6^- \k$PNv̗-z6'-fh)ROȦ2s̥\‹đ}F\LK`?sh?gVnZܵDdҳP&fZYdLŒ>l k7 SeGf«)M6|L/SwjQ b,~+W$*(nV•cni+/gG;r={ZRn%"4Rg~ekVY)Vl"LuE:QQ[3;4fM9x Gf(md]B?9=$jHltCQ5ƮN<@DDFS&'j^Bٜ9\K&vYzքdXY`ck?& /7E#>FR! \NaG!HM@$"D L`# ! KMϦkU3%@$)KBM% sۄ1ðI )4'$o"$4ls=&8v(*tI|זQ)Lѻe5GG:!;1X޻5Mʂ)(>Jl:ߪOvV|?V"fU 'E6vn닒wy=˵<%)DD@V iWB;g**Sď0q,o |^E*m˿_ǚ[@^M.{m}̻^sBgv;׮(A0i$. Q*iD/_wjiY%χz")ϥLz"83j "!Tf@VHcb sE d`+Or׆"Cb$^:kN[|9B݆yOZxScc.;r("aFgwK: kA/Q0)%A4"D4jK"9D3 xk @6i$L?F Yk%s]xuLˆ@(-0U UDb;#Z7\-jH7}"K h @Fgz]E}Py0HAb!lҀDSs7iqi 1wI@DIxAZ `+G򪼍pD7b1CQE8ȝNM"¦ro[1Z"%ZzXӁre(&sxz:I n=f4k""5m&n%ȅ9[ɄSriuGD^WFƁ s5_JZKXRȄs#!;А f gy:U}Vҵ餮Onuv.dWY!:|Ho\h |pb(R$e +3m*[ӆofvӢ-BI4C%duCEP*B=иp k[ykx-:,OLrՆ5d;ʡ}4Uؙi.nePE]%NA88.(Qyz&Xw!ח36! ާAteJ5,K+-HYXAjw3coRT'P$E,[>:Z;msX7 kwNx%m}ZƋJԽҩpnM_EXb* V2BB3Kӯ~^UQ`PR )Jp̕ߨ&$B@&^rݚRRxy;PH;ض"B(FZ>&hʉ4']ϲ® ooJ݆ٖc ޘ]xC}8Oj4YDv2.s-pB JIn]CpAgHÓk(mLA"3g:tQϛ0wRP8I(f $gVh1j@7ʿ(jIV$n5W)\&Rؔ<]Ys)x,| "Og%Y4WbɈi۷ .XTnSޥ2A-fF[haCzQ iom68#BeH,64Fӧ +ԵuIQlk1\yX;wﺆuԁrԓ؟h:bѹ[v4j+OU%dEe)af'\Ag7 N f%E(v=-3^FLo׬}'u9hGL%:r["MO\ž^ 93YjSc[>_h }uSxWC =⺽V >$)P{Hui4u^t3dq}٪8it^cßHs̓иzDGn/ +Hwwzwz=67A1'bJ> P!#0UK |\>o(TgD}m6F#&P<{5D#@9&>O.||j#yIJ*xpWri`*ب)Vʪ}Le?4!I3 w}CwPHzYZa?AOϰF޷6 ξ~׀_FsPjahsOK5}4 ^Ru߇t[˝8ڬτ ''b$mqQ^>ԪPW/8*+3̄!bZx&nS·DyA3lSXh "*@F(-E@D "BE7VYI=Q=~ AhiIYy-@Dr3(c8 a\_ Q'AhDږډ7YE6Ԫ- TYI,\ɡ~ssr哔lmρ &ˉ8^DP?SO~ 2Tُw}>냫;""h3v-'oy(J=x CU(DE1&qA5XH@<_Ot?զ #_ "T- TF \T@aG>6 ) 9!p D lQfU𵾓<63W|^e-ϧ8ec1㭦 ŜL0>𴺯Na8:xXiϩ?Ci^̙2W؅ }>;Yؽ&Ed7͎A?#0N,"/D9ޭE;EEv*'?ZnQ{Xآ}hru6c.}7VҀ"rh}'4OR6Ȕ} /=@QP(PV@& vs[`*_+KM**'柞R6U(-JZP6g[Tʸ߂٨Hbddm][TovWG4Aj0Mek/&2IX.1(!^˝<<"~5:?Q_+D/U/]R4|ow_oN/Κ_:0BBPň 7{*Ca,e}= f;unxSd}d+Zo13`(-T(?ټЂ.<*̂÷mhjXגE*H4{?cr1aDDHFaT $;ܣߦJ?ղP5%@ taJؠ ;׾$LD&?l`- 5P{]>W!s9^O1z׹$'/-b(0QAřtY"v>_s[&kZqxC@" "vzePQLS'(꽦lLQ3plΙfő_'wKC}QM AE)CJy=\+x8پ}H$UZ&ܚWrج9klB1/dl])hZRwhR+HyMW5/w%mhTÉ--kuU$$KJhd$ew~\gJRDNu%.~j /i;-yISc◺~f>~o_]zӶ ~6o,c! S/qWl!5!m"G$Fjk61!x=E}$|_JE*#!̞߾+i^qquE u5ZG҅LA|ΎLѥuR+߬5bڜ mj6i/9Js]nfE ͜%K`[Qy ԉ@NJS TEKU?d2i0uz+Cx ly_>B໽ݿrW9I+x8 $HcKVAGjR"" e#IǷVj֏?YsˋP5LY/֜a0m[ YT*\WƆ%C1](ї}aI0d.Iܽߞy6z휚(r`%jk*n?fE"/e89Nl~7t&p7rM*{Ch;C+!hej;X)a0:Vǫ57Oc7D49مd'o~$KDq jdk^[p*ו藕w,qߖ0GI{9Bf{EX:/Jt{@Tڪ{2ȁо{苹5`;]{~c:3ڌ@ C =d[@()q2h׀d/gؙyy9^jUvuϧ][C{8[olDLd'̈́S7mKe=;!N{Ldl^B  F(CcQ'_1ӂ^ % ӺJP26 5S @(bIӾ*6b K|sߕB؏6T*a\{Q{vZoř rSsQd('{JFXB.}i8+aaQC.qlqA m_U @/'ܢ6Aݔtz474#0Ԑ *R5A+g:;!2;MN*Y>xf} GEcf, ya߳hXZ(ͶL]lKT"/#\>)œqW_mI0`kg nn]hlM G2oy88\oy/=`G J$agre3O)hmڴ,ӌ5qaeKVp#-fAXwDs<ݩ0ϝ,{6"g^DYѯ\I}5`~=>dus'$|Ӄx9zX:gtDiMo`Z>z%[`s);o56yo"J* XYF'[jgsMAg5`x1|ɾ$bUJxar9;GK{gq8 $o}mxsz&KƵ6lZ Iӿ^3V |)U'7z?-snSWс h٥_OS{7TCu,TT^ AXNlZa5OՐKIkhx{ lfǶjEx#MbփO}_/w;k{U>a b~~:<+o s:[z0( =rQtzsx%e]a.)C[̅&p\Q\åьW.m+jR[\|ƻ,Nr&M/B]#q&<2>N!rcvZv;-Y?"c"˼h{+:?"m]MqkSrK/P %ʔ /v5/vǎx!I&g vK<޷^Qk?caS˾4ѫ=7է%sD@A~މqDZ*}Sݪyl>{'mNE|{ن+˗#óy0Ic[2; %rɉ;.VxUEnM>3>F_B_ #c o|2_SJ^~ca|}7pҸw^;gܻ+ [x"o$kc*G <r@t3]Z96sؖ&6DZBElFj͞]b=~5j^ d(Yƍ^ v ,;>zYz" 딦?{c:(;&dJqaoK:jxӪ,i@I#s`i!5D:"1b0y5`=vs̄wcIQadZ,N}]z|ˮ\dC$)d Ύ[W^~k5j/tf\{{ @]!n!z 57  †BHZfVAAi/< t]Tp&nJz /3[ \}AHJ 4+Hk`?$$jJ&F{¿b{8`WkҢnAe%TC0ڵXRU]Ziʻjig5IaPi$(eBZFe|8T͡2 I2gNi$2^lk`9hQqrV cn\Ymvt`m^qwIwG9$^t346nmt@(Njvyf}Щwc]"zOһWz պ#Ʊf9'],|A Hy'ʧ=szbk->dlw/<tn8i@c`wd6#G M uIc} Ki|czvp#E3uδS5i zXDs}J |(ӧo[7nm2NE^h@o7m(ȯd#ӚG'Jm $ $M~#&^ߦ 3o}͞N5apxNJw)vv{LL o {pS_@ ,@$,(43>0SsX$4W?}ֻ}qi3DO v@aa`-DT$>Z8dNa ER#Q~o[O-ZDzI|d{R&wl`|3e,F&BH.C>]4.F/g@@L ~[ Z k͊mK"s]oY9eIMn՜k`D Vkk,Ds?9IRA| >yyRMΪ^ʻym7/>i',BjE U@CP&%dC'RWMPz#`Dtjz ^I:!w {Sjg~͙ L @\i\] fůq7U QtgpV^Br(X<=!]읬X/{ /k 9΍ ;=;s4F>w)R0hdiI4ZP΋0{XQls-?_f蠑~*I`D@ qy8. \ؼ{=|ޒ[X ;hB'H6q"y/)~AtF.оң@-;K!96U趎L6QB.2;D#U4EUO^dž N2@AS'͆-ꈆjk5d{\0_Wd,TܑPTlTT̮8L-"bcsf:}`JSt|+rHwa[h-)ۄrFcc5,)$cEx1j79ϝ| vDJU)ZFg{gGO_컝Mzo ty8#,𔘩꺐L6 LdӓL5io>! @!JC^ a+dHЃ!ZU 'D'8H&QErD&4W@`9iQĢ,6?tMM5iq`1Z'2tJ-Ʋ#`QLFa zV2la:6;Vq^  ϢLqN@Ԃ 1$M\""l%&@`ԘԆBr3 &y-N{I;RZiqbT\T#3Dg[^qMRBet)3!(ݩѢiyN,bf'>ܨ\ױfDzya!w@02ԇT2S\},*xFS! g6>\}W rA@W, [}Eɳ%O͈#iSa6BIe{_C'|vX]G7W. gⱇaKZIB(^G@v68)h3QSv& /;!<,tfZH* b FQ! J?0?q% !Q^**(gESep*|6ʘ-sP_buU-"hTSAPJ)YnW_z҅kG#[2cqwIpQ,-ER31ZI+ҽ6@Qt&m`wW9ӜD"rN_!ŴkŊoǯEYfJ?M(taWI$"_UC?1HZ YB. ZK lEC_Gk:33~PM=kI^ʞas:':Cr?!{:?܇JwRRl`FSAVg8#}ݣf,?D9~CΞ%kXr/|5͟)-Z-ϪU@ >  -*ӕls>tCVKZjq aIim=O;B!c-P5ъ/_g 5 -PUUSNN><ٶWx!H*a` +0 p9VhDZ)A LWy(؅CN}_{}>~g.bzRZh%sΦ hN KZ%Fpy P驲{+X^يu"id)M?2&vcq}F'@ U($2#mc,tC~? _ݿq%K@gxFPp.qܦ8&>E] 2MHHggTī`h}Aҫ3LtPctASbJ*xNZ~ڦ'NǙ_Ԯ|lG`ۛCkxO!f9.fgM[.(=LJ݈ZCjH[eT] l= 2o[ֳb~ h"Hdvy{R4|I/yj7%  7ge(˵E[hD4m-d {$qOBqza(ѕړm"t|LFA3ESA-5~D!e6]+>Flka"-J $:V/oO\ soTΆXlL^K31D!UHnGʀ'|DzhY1,hfDdN~0UdF 0k xJ3Ķ_^Yg8ZZI"R*S}M5,,)Vu7Hs*yyQP?zXtQxi#mÌ\Γ2ߗ^⌮cdþ^Tah;fv.9asfkH!8J "z#$ r‪[tdU(JB $JVT.BEICҁ h"X Jj,E5K7vTSիdZ$Qw9*[M{?rVMq7׵vi*+\*Uz qv^]jtPcuDAA#Ky-cˉV% )Es& CQ0vpv $'wAvI;ݘ(DC Ajϩwz&u6I_81mmլ|4';2 1.|71c 'ծJNjǻo427pFEE'm[yykudV9 ! TJE"z700[gbZ‘w<>ӿS:dLx26 >#I!?f+=s%!$dD4]@5^bԲ@f&(Tlfi|KWŧ%FGaEѿ$|e^lҏ _x *90mJP YT26KBRPfQl(]iBi1KJbEĖ 7TfFy|+¾3 b(BBP hYxMhRiM!@UMx}؆^[t䊵'-ۢmOmXH NI˒F!2AqG"F;\. ."*&"#FQX e@ca),uKGyfHlRFi<dn۞5v=ׯCݿO" sKN18^lV>Qhq&g>n>*H2ɨh8oRGZwǤj)r""َl@TWǭh{m~nT#Q#T4UyPT|IUU(ʔ!MT5@UVMWpנ=iJ{o*2]63eĢS2Ҟ)(ӫJiZB\kmTUGأp`k5WLs;ЩG̕Ө=ކe~WMU?܀^OBq/$|;hmRq֡=3; |M%iWF]M7ey ;@ &RhpٝG'5.5lnb|nC+b6ٚ;T~ZBOsmocįs; :toi#<\nTb-!^Pϑj6'^Ԏ/5ka׉AmA ffPRQFJVh*,u:-t_쩵 Go..~9vz׻ڋb*R1q3mfZ`P_/Wc8kr{*{̄=,~GߦN{9Ѡ$iĭֺK%!W߃#cH-Md\DPIPE_'y$#fwR*AUڗ@:B{@q⌻zgri'>*,/iTi$pz_L|uy홇U|,/bvB%y W871 -X U!z忻uH ~HBH"@Be- KR; +=DՆ ޝh]V;4Z\/V$>mu}im05 zLjI`,򔎤e TJ ۵"KVs=k9jyf!4ن!xȾPiH6#. jNdޝ\3R2:3 64Nt\z'ZN̜2xG֓U/-~|6( MŁFk}MO/RQ;7MBZ AdZ+7=,{!9aY]Ԝi7K  _A[ k(nZ/!Cc8ރae11zWRx*teFC_oa:G [㟳 Zj L#kDr,W-"9($~r@EYP6vٓtmOINaQL M%`B݄l~_f-,r/].`QG&adFytk>;2S=(2*SIӷNrGcTW<QholKMq]Y膉y,Ʋexb1i(En4Go:ŏFMR2?d}zȚx/!җ+*2 @]CS 5\hVg5j"_J贱g=cqjE7v}Ҡ7r; :k'Ӷǿd 5`x*l4%F| "@PIv~6v)NQy2@슻uPbN6K6m(J!\Xv e.5r.HڥMεKW ? o$=.b9F8H86Lځ+CX),Q"U!1cBOfcj9+|lzP\FH=rC :3)C_'s ŀj>e}UI%U"AXI_ T+ʑl]:;)[LC5Ѧ>^.eg9ow_$?*#-\Lkid4JQIBt l<-Oq!1S/s`JAj{ooxRچPdot}7;}+2͢~t $.NJKT[Č&FQ@NJ=]VA?0ߑ .X4m'5)Hs@ю':@ Dfj] ϖ:|C 9>@^9hӧ.dULbB{@dHA9@#1ae'w;[Puouz/MOBzаbVS΃{ |$F,wQoZO}LR\cv^ .L@؏ݐ2ֱCgS-\ݼenwyA ^ίƆpHe2f>.]\@bZ@b. V#T 5m˖ZȱdI h"t=kE2JV7M]DZ2<ڛ>MX v.ާ-`.bGR͸+zpܧ 0!, H$r%IA# B>İk{PU&K&FԩXK]EYGvu}^5cxp>eBDrseFA $$͔l¦uA9 6w^-%O>i1k!J*-wx!*{xpJ t0o{õK{%w9IWۂ&kՒD;iСsk#?/M8 "/&2kY8MN2r{i)eFɓf"ws\J i|k3_]M:V`m~Cӳ*{miڱbB$v-`D ޠM7Ts3pj{ߛwÙŵfPة`G&ER)y$~խxuḍ(Oy=ƒ?Õe#ȷ42|҇ A4b0}c%5=+MvGCڤQWŪ xS;Z?ʟrG;w$R4PaC2>vU_PPW¤- #%~.Ccڒ0"~fSJG {L`r<&Kq1pjKqPOO㺑mH2g<":שsLzPd XpJF%jg|Ld$+vu/k`@xh{6h+4c$+,Y8+z{{ vn }(l@?~ ~ͨ,w@vxN)Z]cHs#؆5= |3'^q{N Q)+[c$WtQ4"aL3JaƎ-;oaD`( cs>ƅl8xx%}DrcVR7#$/(AE 6&BГ$opݵBALuG$6jRS6U!!?^d3{ߗ}gXЯ3y7#VRnV2ݝ81ddH^Wυ({$s"=?h ^d\( *cC(pؤ q,aa! "CYD6xh'T5V%$?ڳU&w;r{]X̐(oL1Z@dGCMګ6*F`y_ B;bxg>uGVg*q&fnJ4Q 8+M ghH~Oug/E8,]9vbtw8" gzsހon cke>%" C/;nm Fb4'"swv| "Ҫ)ݿ2OUnn.-`U~*_޾,GMᡱtE*%J/Xa̖K$PdD؉۰)V+r\%j 蟃2xZyhOQ׉5&Wc+.յKACiR8ܞl礳̶Q{۵,2,  U|݄~Hd{yX#F)tizA취 Oʝ=? (dGNG(TGt&$ƀt(ikkؔ 3D68묩 8' _P@!6B'ߟ[ЈA,U Ф3; 0I_B &u|rSGͲWX̱_vgnϝU;ݛkj~i7G+b.UhOElilV,_- {~PAFmxD۟ѓr2 4w17ⴂ|gń^w, ,RV ঝSCaJ޿0 B‘{rAdg% 64߃\֋x _'bkEp  0Tbu&LdB$]$n\~>wB)Ȝ8 eYuu\xdrCf»t*qj}6S1Q4I]4Y4Z_EUZgٍ[A Dh]:T` jcLY:b8 6$+~ekL<"u|\tu#K#XϤ^e &ޥL-q j%9Dh2 NyoƢ yDU ՛067קв!eULJb3I'I+BT'zn| d!1'G"2$p$%KQlD)x AYll9'6aФ\<鮬hw0_/jaВ>lhҔ-aT7B)g|=?W \$/6 ^5Pi6Ob-,ڱ\' p"JġSok x}AB\1iHkDH\ [ R C B@.AU6HtYw6Pfˀ2c,r0Brk3Jk  cSTAI]@' YKR" #0ƘD`dfa 3AJxiTޕG| }_%ٷvIJ@  .yjvcHMvN!&!f?-鶑U8C"/꣚h'~سr`Dz'7o^^ozP*\S}CׁA@.}{^Nx:yOWԬ^䍪y<Z x@ ~QU#x>h/ϯ a=J9dXZfQh|đ1ΔtIp w^o=cQɩ@LL`7JX Sk&nso1DDD_O9q#Pa&E6j7WY0*]A(gQ#Q'\V;uu}b/s"H$hH=ʹ*`NtunYL{<8O9@5%C{'0~\s@D gRxEFmbM3jZI_L9z+dӱ-DГH H7ovhzeiK [0EȀ%\@4FoMDP *=u &/{o0"\0˄3Rk5Me".jN[iٿmZ޸{Qwt@‡Z GS(ډfV"1obL34P>! Viҳ EkLΒa  ƿ\[Nox t&PL@ޭy}TY]u`O46!:4h ނw'n;Pntl5x(HGJH dDF 5\Y$Ūjldj4eݛ,ޱq(v!% $,`[$Y+o4ZθvWsu-ic=;>Ba$Y3;LvV>҇ LUiE/g AD}gpyA닀3Ɯ$qqy=mG_3>/Ƣ4Ӕ 1 vv8sВ^"DRC^59YWK^\n3+prj\cS-+0wX4;cǘF]x73!$T9ĭ 0hA`o7iԔCq͔ByLZ@;"2ۿo}ӄNzRk4]S܆WHF$dq#yv_=^ݷѺ1X{$}nNE8tQPDz@DL m-@Tî=рaތ+cٱ=<>^)Gx٧ _ikD 6?o E`<ă_{zL9Nri$i'feS@ b_߷܋:<}+. A3K\R# Z%>y _gRh]=ދTG^z̝cW"Ar3QWf^8߿z=l|a0T%yDO@;G'D,:n/D#~EH"ꐙ+qrn-#kYdI=B@}?k6*rn!5igHz\4jzx&[VF+%3{'Yiҩ'&Ue1'^z2E]d'R75{O]Wb Z3X;C (`G T^QÊ8s[L`hCF'9+#&[tVa}Y.b,pI=/W*mPْHjJI Lzf*_I[D_6o *KONʕsV:d=NY_ZY.q4viZӢm6{: 1ֳ=\O4&ᅘ |:,TaU%9B6\}Jȭ馫Ӛ GGYLyW?EAf hhfITH9jhѽ-|VųlZG/ܠQ7c]Y54'?hrʼ$vҒw-D8jm9m߸<{78oʞ8: >G:;]؜)K$C|ׅegS^Mp2#],w"J$B9F3,sL(p9R3[qz'rn [TZ;i\J{ y]׹Y\7V \e| LQ[ZTђ7RŠqԸx_X_BHYLUJ[O0b0h$*YA0`S: i2bS [mRbj`t骖iԓ咍.A=FPi@d+Hc:CR4_rG\"` ί!JG{=-%^9uxyte/;/gnn]hЫLڵj !4S}?sKs;goIq_{e ZڴۙtmC8Q4 ,km(T2y*IH޻Ş.qkmG-rnno5ySvccgwTͰ b*%kt} $IhNB{e{D.Iu_֢KAZA_gkNZ^D@2(a~k, ­)b"24 vvo%/Na:): "B.$Sji̙Njq${Vy GЃ(CP"c=fG}Tqp(Q8Kᔾ!$eŸFyKcQ5aID$"dWa.xHg{pH 89>zSM,pɏiO[4K(qx{p}| LIEӎZ(4'D)dnRm( S@,mF0a D=) rF2D@GÕoqYy<v̤4f*sA6 INS&;&nFtՎ|4mBk%`'C({{Z+c/KObUԧN]RDirgzצեO G((~ncyNV$0/UC=*x@D:,H<'TqvjPIjW! 9Ғ D #ߩ-Ȗ%n M$EZw&].n2sl\P %^8Z~vVO/Ti'fnӓNɔ̳v9)/-JK1"ȗn6oܧ߿%fW_6NjymjY |*}K#V0)y@cIݺ RYլvi&.Iu>3qoG^J-6yelT&uR,qq̹8;O0b#/6v6khdz+pϥ_[NUWWCS!=qb nnԩ|WYKlaӖf2>hAS-sa3U.?4" Z6&O4yYZ$`(0Lc-ԱHam[+869c,CV,SkhysytJ܌C8(C(spÜzԲv<2 iC" }S]ANDv3Nɻ &Eh^tcH.(E%H{`QdyZ՛M"DBsI%4Rc΁1?-_V,9gj lY_XOkޫ^ʧ9^V1FOWxR:r}>u Zd RQ^:~x 0Za~ZJl#1IѶB r}" @UZ/S,т 8 kAyxbp -.nՓ; 7}sJfT8ۛYX|wR))_CE>g2@?^CX]! ɇ1έt "1ەTTm$Ku3xKK{w31=C<_{}=>?Aqƍ=>>Ӗ<]:NYvrrcEZmӁ⮋}V7⸷ނŔ+ G)u3[r1%5ܾj~عQd. WAD5W&{dp'#~o?`9Su3NEoId^?uiiNh C ~@C# rm9X8I[l4ݪvakCcN' wF@b3d X3<5O} @(5W[Q)vIl!1ݟ̠4@U1> .:i]eyn:tVb}0A`G+xvwĘEXX'$#l\v;(M3aBx ꦭl"N3DDD-4GJ #ٛ[f"%×xtMd.~LW2O2ەBEĐzd!񕬠hf_zn#}({$. ,(M9\d":wK7m1^fXɨ*͉jZ"HvDBKݏḞPla;Ҍ Á[x$![ʾҍ""0go ){G#h4ĝȸϊXtO{p1VM-Cy?TWG⨞"IXhT*anZJ!] Nԇ"#PqBͤǪj|#WE_ԖA_ʘԸ׹v/l'?e)MͳI~ zlȻ|ؔ`/)_2ѹ>YT|mWoRJԽ4aKU5 A! jyrQ{-wRG(BRjns&J !by1TNUF c]TҐnt[6 8:pJ50+aᝠ''L"-1ܴ0Jǡ/<ԥҞ>iGH C:9=}WQ&C'2 bQ8#yph4IC 8Zs/xY^#jzmiPdvUEi5-%ðz,>02*0fP5 rs+)9;spyL&yga:U\K h%W9cI2VAa!5}ꇝiq 8@BXu0! @[ ""!Ts鸻w'W{4<$Z%c[& QLb}*;|!h@@~o>:[%eU5l1#[fƗc1bCJOϠqB2au%zvHRvd̈D.rZؕ-q")'M UtREjA9 _ ""!X46s;ɝ]>gu]4a?GsㄠlDn*Ȉ6,dkF8ZDO ˌ,jHFAdƋIai, sr񜄀Ư6&<W DDJQi3蒅'0 P ۋ =@lvZЄFaG6i4Td=7gT3L'%`CS٢F}ˎ3FyU҅ Q%#@AJfjF9̋;m"0҈6>ۃZOzYLүz([ңkv~ ߶3vCNO)څ؅Ȩ.֔^S*Y_X?M|EB:p$EQ !n\Oy'Q0%V!FPdyb3 0x E$DU]!)j |!WEiv@x@DzMĘR/D!^8[xt S`aL0@8HDH5}G9g r3)D4*]< :uv-{2`䥘J+P@7>l"EܩҒFΏ- T %ی'J @,O Gͯ Bz疛uвC83l)ʍնK%DtL箙sp.1@K=X:IEy&V36^8L#  n#8V#A) 4y8i:!pqp:Ȕhh>i]  i^*ÌsD9Vnio9p5Px!LkFm~̣kOE+Q+:""zI@M @Ȇ 2:S ~7KMT1 ">HX$оv{B4o ,eǡ+AQffI-S<?S:- ,Ʉn!̓ukcv; @dбlʭ%Z1M&LFEQ+ ֟˸y_kҳ Nux/ d7jgN1Z#I/v?؍M?$T_,>r  =@f0hSȣe&3s2Kj5qI~ v*EJ9E X6[d{!Q&yFO\9CLOiv*-' Y=zdg':BQeVm=QJyqW:d^ e`Nŵ2S ^0$e+)jXc,O5K C= FT].̀P}<0r i[1@fuD A$"[40o`l~p@p s"SreV_K)\0ˀ`}W7i7r\0SRzloZB$yb7|R=L֝ XIjmZ8ahD-17I>^}!.zs)w2^&rT9=JY%S ^q ܮ9"-x4 }l3E<}b=&43RyMDA\=vhoodxػTb NILt/YI(YKѭû`@PIГZ(j ;Β n殷qqsOtS3s4ri{,qn{Ԇw -7F{\ur{YqI\=6Y|]ϽbJLE--C#Y}fZ7B8Ɛ$( BBT{L8M#eikGiwT~^;BU4į*vrCd@@ Z.(~^A* 4hr2'*a"IFjV Q8HIΑ1\r I)wxzzy$x&iؾ=$`F^mZ^[lI6ViLFFc9C-I M3'#G=Mˇh=˅L2ff"[da^>Hq/3>Ǖ)VlL. +:pd͜Km{sCN]гL4#7|+ &E}>*pĞE/Ow8|8U0"8 )^+ #F&D)FDStn'aJ=пld-&8$3f#ĞdY<$#GK K#ka]h֋-po\8L{MdП9i#woԾ0!LJxXwl#G>$/ `2,s7>FƦDWtxZdE#DT<\IϜv`G_2iV:GoxaRc;J?G`/_t]1 a2彼x{Oe/ڒABdWo1# ڑ>*D/F7`FRBM4XULYV[O$iÆ.uFh2@ɉ cuSrޣ.\RB9ab(,}{./!1qkPja/\GÜ_s$0O#0S_B)]Z0*84O֨a= wRFu7;-#*.nރ]9 a3ҮL f$4[RR1 )Qt6뢗 v+Cȡe6%pSXl:=H6\Ŧdŕ=ĤmS 8J(t`]45i3Z)pʚ-dAHr☇η`+ĒUjqi߇{1Y~ojznӏ|vRQogkS.z8L/O0< $;ժX0/~ Z )ɡ9o٥Wc5nxgǭ:;knBJޮv =豠Rc fBB=m~fnI,i"l݆fb:(+OwP(&@YO]ݑ qi~JϖbD 5un^b 1DW43]ƒTdڟ:dfyrH!ؚ\`|]I(ߍ r) 3şk[6QFּlÀrNHdXȥ/4q";}v顧cec-A:"@l+R김+qeVd a^&6=4-_ꍱ? ^UT@q,䯜9`g)Ft#RMZYP=B&WEuo)oke`EC9<&k|ּ>lu] fq}JD@S%?B'sC1؅p~<25οj#r~$984cXᲺn;{2&*WP zDQ[qESM8<^.CuS*T1 m_*. ۈ"E:9!ZKz;#ޓjl6% Wj Ykzv+)@ʥ*'"[ߏOS9/4RߥK*&(dB֤*AHoCDQF83`6 ǹײ6w,gY<Ӛ|[ m@>Q;BJDLοc<1+)]ٰ(>O*:P(ni:}-ufn^n[7?|_{8:9Jۋ7x{'yBZ& R & ,XP` -ZB,|s U/J Mi r 2{M~r4}Ș)BH +jtK#Z+[_c=H{O!"#d9t߼8>ævmiATR&IETE5hp:fq O4y&D40ae #ՕPZ|^ю4WPIo 꾿4c>kτ5/[\wnQ0jbC$Yz*USp%p[kDw^%b-h*};*?"PMeWMkڧMO5h;ʽsZox2rHqgpi'NoC'{?y_36C/fRP &/\(?F)EHk}=;/Ȉ:3|LZr51$4)vDBW`xThl5}_9yV`Z bAy{>G^#*_5Il\c?C4FHH@h *@@PR|r^JdF)i$YHAT0%+VҭidZƪITE$#*R d%v,'{nE&z'.+ND6>Grd8Ģ|WCrDa$B]GZxUf:R;&Q\F*eO8_3SN **ʞ>?ٮ "" DDS(p1x̧3PM|Yg*j5E組\ DpG yCѴuݧg"ܙ_j=STQIγ@"֒$WOW Fm^ aSH@sQi'۬2B 7{$aJuIdf@" /BPTup&vyZzOqi@DUAF't廜 \]s@&C< #%pi6NfZ2P$AL3 Kse ]k0B}pG$$""1Ln~ԎK4בPS31j^nxoI 93{j/ozZxS޻ w)$ QS"b`?<~~@BcTEtr<|NTL*x:ך]?Chg bW;RZr9`"LS7oʑxJn |,wHN"}ؽn4H>nIZ}_6tsj/R` i2/e[{moe\|r]@i"$%u4vVQUft/L}0RSjԺX bKrx0ݽ6ʄic" ep A*IY puAj)yͮ9?މCAf`CLB 89+8+5ۘG#z9M% +^5L3Є),5E0HO:Mce\]Csae̛C.ibZ{^PstUe`Drⶤg;̶{tHQG>+ #3fP &Og,e-|T92cGHF94۔ sp_ױ\5,;)k72N^ RO,(gIȆY!aQ`B.-t*" IjYC*AċI& W^z_z$i= vv.lWFDv13cf5 UA"&wwX_ܤ_k|swH?(hj,*|x5W/PA PߛmyHE*cͧI@pLݿnZU3Fqa86'z)B DRU4SΚgO+Xxǝ~"G}#u҇sʒ-Β7 7y0nY06<(3hl#!au:}tVjMZґlJ\SޯhE [TQ,|ģ,C׮+1dmmjsmrTPHQM!G~apJ 2BWK_ )B{%G:3R5Rv5(cm2#Y8"-M~l0[fƦHc|wE/Eyξ 9H:JrYm{Lߥ0n7Jl:l% 3eI+n:8@"l%Ĵ}_=;z9,Ntf$eAIG>sO9*;J_}G?2(؄ޓM7Ml 0'bT dg HDYϽ[ȵ/h;4lqd5DDDlMk4j!4IR*>-kǕ Mn+<rl's兿׳/Kvzwkdw: XZH*(%e&yJjGin8#ÒD`w _Z1%fAhawje7 bOBLj(GYee^RO yU`^om'ٱԦ_ϹFeC0 (JĮ-TMݡ!F#16j`RV2$u~uȫsGDQFFsxuՌAzoУ) AFˋXy'v',S.g$s~:zvl%a-u Jl/*WZ|^WBڲEc;'b_-65f2n}/ZU!ڼbwlz{xֳJvMrT4FjebIKh `6BJ钾k[:y/Jش%z^_~_$84|ClggOqL%VmN"$q,DQ!P(R=xϹM_/1*WBkc}0TŤ_`'Ą :&80o`V}?_l, \HN>Gy>wkRqu;w*;ݏԕ ^:bV=4%tyʷ805/aDcLYeT Hv`FΚO}A\tkX!{V UKT{-ACq-R[LYH,gw%Y|(p  oM~irew:.X {;O mD@#T# (vt-+lkfѻ`=_wO8խLLa)fM5tԕ_[)(ע{5C캌Ip\o=;"܎U@@+ 8,rmfjwd!L 0jD~X4M'Ĭ$:jB0 Κ#$Y$.5Y0L/83#A*!j%Kxꯢy>"42&T B搪1IkKCԹQzI-hreS|,ZP!h2AgXOF_fͦ䲻{刑PfK$1ALZHa%N g߱Wƃx4#Dlx4 { )yVrhH,LK'j0UMM r'gtwjrLY spd"*E'BIb /r}5{îGMsz"hJ/;6k:x TW6Y©3$Lоpwr'DA ' zJ溤=`/꟭QvnUP4ۦr:໡ţ73 pD㵋]9F N˝PBmw=жĨ G627SiDlEu~Zލ-cU(F:Rd$X0p8U9LY7wHR fjmdXwJ}}W%NY;򏇤h'ޑH>== }X:Crb*"35 *ݲ%⠌2|R`BЧ^ϩe#x?5(#m:(}ϴ_La43V(|o>;$L"DH@RT;O[0-ӛ<_mhs7~ͺ5}Kә$$_!TwuhjvK(<:jI@@ϤA!Ex̤A#^fZ ?6 pM$D 5j̝!O~qiɛa%>CIڍR Qan! 00NI޸<˧xHTݱGX *n H"slirasTFxZ)ti_R9fNA%҄D`Iגz0wܢ^lej^_+6Xi7qoo7iPڨvڋ|Ċ 32=Bm\-Q=@M zMQaxf~Rz I!M;,IoΤ]ԃBH愐@Yjt~=|F[P3 aPNUmKsZ~WɉZ,Xq ?:)x4PP.v˫؜|c U2VԊf.*HT&zԤ7*մ *l7-u-*7L) Q'I%XVݵYSIVʑ˔krwUl@_i;~~N (xGLF6i)7cԙL5Cp~_Sn݌R(oV,RGjTwZGhځ /ȧi*vxW}fZ֔HK5̰=ȏP2C7_#\?nw\*#H|YhУH|ޛ,>K[ڀ xe^oR3EA-Ju,+M .ETA.Ɓ"'T6H0888r@4&3"M𧏗~Yk< Cay`rlsçH(@& $ NeI$CZvE_k0U1 MH(FT2I*G\3z|~ǧֶS|(wgf&U4%JuiZSߺ1̣Z|i?y??Ռ0v8 AiT|̵γcԻokw?MA^>9MC}?K_4:7sy|],D%n͙Bp͈^aEX# Y ]{|RX&w:e"¥G @ox?Z ,Nf0뿔WƗpc|zZs:ƻ͏RZc3TPM}TDmaP OCFuD>j{ݧ̰TZT]: lTZD+mU7e7(h9?رʔhZL rɄl%Y tVM'N}(?\`g~L4 &@JAEa[T 5C_Rn4 R@sҙ!1(Zxn=`=kK$8o~7n/Tk%ZD9*б.xXСUϥۺ=cd߆$EmY6;%$bdt?l#]_GJOȉssY^i_t"Y+V=ky'A '^f ե_*TfO$0Q gf~C}Mv,#5$Q(;Wr}OؿyRV)O۹fFaa9٥\ƥK^|1s#3t)zU]/t &# gneK彛z uCJ8h@,C6 ( n{ktǕV]jȥmO(NZIʄUjyt'R;y679t/g({:YJL!8d,d՟`(rMGljUۤc WU*U8@nB~ád6kqoD@,#ʵowR댅#`]!yuN)kjnH~R=A /( @~ɷk<+_Ԛ5khB Sv"*"rmfݞ`"A4Mi;L Y߿y$)7BF%R{,TC)Oez =#98sR[pޯ25V W|)1u` ^.Kpj4u.6H pibL~1ŷa|x>ߣPDPiAZVhiUDDDU(@fAQ)UQEAAREA(hY߸vVFF "۞פ!&vxs^~4Q4*5+'r% >(O^Ǜ4U@7}Gog6NOՄo=ùs4F- **KFgxzhh%"suBS782vbo?7N<ŁhDAhDUmZ&_Yؼs `|HI{ߎ#j`$!dHa"vX[| ·qeJnD`${.!%덀n'L0!qMxg% 4*ЫBVĢEAHqB@oٌxiRB'|kU?sz>f1{oE/ُ;ۻžؽ(D*J8@݉NsUk9{Җv7_;ڕBf8oE&HWJGaTu~ZX XUHViB;895@a,>ΏW3tnau0.E?9;g`lCORYr!G@軟..]8CLCt'ICM'SM-'^n֤xtPP2"[khyMv}MƍKh-9a[N0Q 4Enoe@~~Z%)>Ts_k0"9T:&,v(JN>'AٕMeρs/Nps.͹tEp&{۷.avB Ǭs2 $Yֵ!Ӹ;E<0 O7ӥC~.1ڝmv韇YzR!ңJ Nf!S(홨fezAzUW£!r^KVu9Y%_mD&HyUiEJESΌsVs5LZ- e`f._Uac|ϑ T֚)I@G]%ޤt!Qn(o@83^P_!q$㥉Œme~\_21ڽ+S Dd~pR0: Hm|-@4A3u<+Ҥ랝߭2Ǜ\7 0aoy| e4WGa%M<-!}agaB `,0?u*><>PDFWMV0y(I"2,FAB{ !ɥZ;mO;ЄB@e1Ѕ}@PD@*4$5 =rs2I '}EK,P 3\dro]xg:iXhdž@f^hQJRicP2%H""A5QAlP{ T^x,OK:g00@>'tmI$^FHb w4 m zGHߵҷՌνw5tP_+6m:8+E]V%,nKSMkJHʓlz溙,JuZX:9%ٛ69Hm A' 2)ز"!A{oH_#$$~4L[d42uESq6DZ6.4gA?^b(vOƎݎn[>yb/i4y Ɓ䶁Wm=alF}ԇ(>زaqEcW-'W=kU(ח.] C.IY-PA >^sS%ge +.{|Bח $Y_;V'+L >QPYt@MI/xb*aAeDNE Q3>ID)Dd}(P" x%0h&Vn\MՓU QD~KwN7??>ljK2tmayջ(bW5Ȥx'kZ 16K©P|=]cgbi HqywU'mcm}^l甮OEϑڏc   ]7'__)L''ia=;e/6}@h @ o/-]b*$ <.$2qAW'K=OjsguзF I͝ž>؀}J7areHe,*$9(Bwt?~'ėt'A<=}Jc%ڒ&"fij,⒔ruիҥk&F%HEu5ibg.d'\:g {6ԩHiƋsӏG(#!_ocN|FTf- s~m yciyzGCBҏy""Hx5t6zqsي}|/V'V[RUеoWS}CYlOґ\Ei] )'3! Y5mz'R,(Q5lbc:2gR6Hmsתۗeݜ.Yn1{-,NȞ{X^֮HnO\f];*l?pi稙ZtKUR f_:Cg,e漨;GZIӒg]v}ta{Tgrv>A<LO/OEs6}cTP7!!?eq14u~9xF++k]Ns)䧞+OL42[86DiE䳉`PtD(CL?ݬ&&ZG.&x%_͹Pٜ6qgY]9x"[wF ^w \6j׿HQHf8T%S `rBʖVRkVbni~hZcUt[dH*&Z+d.N͖-Pʯel&hNf)v$D%K+/E#o1P 6>ߠn_Hi,JcEl "'= >sa빷8}.f}=UUPs~ {f:g¼99$)f z_ w/8Lյmצ=NGf?}[-Zϱ3[bnz4v5kk @sVPcU'vB ~j|R_RXt]g>b/ r 5VHC%I]"yEdm r{z+ b% $3wIx$l !c:=0q~}HD\P*߻~C{}"T5y ԎL jjR {7]MhmdFwMi4n-LV+ Aee)n[\&0k$0ܿ?mP=Ҵ$FE営kŦBI{mGҖ]GĠ w3Z@`\`x_اw55V"kcx`74w#aR\PGf3`]X$ D`ֲbF5k) XU))r(d_ٜiSy^}i"dăbbݼ7gNR%>qL,JWNUiԁ!$XfO="Bs1!S:! POYy^SJgP^<*my\V{$1 :}r d9]t: h0SLd]u7c`*3Uu*|Ku*ɂ̢!w"øݪI8 2@퓎4S髣$Z~Oɳ . gXŴ IrI@n+zwO-]57{;?뢲Vϗ~j珮VnD}|%coQ^΅gb= 'ŝ0#ry><0˹c<֦ޕ~;lR[Lݵ4kizA9*O cQ^/pG-yFъ_0+s~[oEUjb^yjT &:ʾ+$1ixEW-' EM؈;  >Oǽf}F޼_@}Mޛ{Aܟs5BjAOg{z,ÏDmZ&i=ڼ`1IoYoRhAi~D@_\^fVTU 3S?hwv2κ-6q.\<@~+x+LNx;<軣|ېjK$ReQMUIٻ'c;rbK/ֺM^7:a 4ڒŀ0 NXx*3cI&A =M?[#n` DK$r1=A}B@dƎC_t4Txx >>4cmғab_QU}ܬ ۧ\ᕙ_į;S(I@˱iJEZ'Z[@j ApЬ$IOd4.q7@6wn\]xx׷ݤ~f}ZŪL/N{/m 'S>Hyo~?Žh !S'=7M(u5_X+C;f9 E6殯Cm̠ gg~W.%%N[,GO;CÕ7vm@&:>ʝzG>ni7>.kgJhT bi5ֿ7z ?  SL!]ЂǗY#o~ne(Pb1Oׂ]KM&]{k~Κ>0zZPZ T~ )#o0*T|D$o d^ [gǻP3 y1/h[F4)2AE:3aZl:XĪRl,ZhQ>A?#wLfA!p yٲ{HUa=n={ڪ3ئ6z3\}ku7v)oEasz$, bX* FMdZ|pg}Ĥ'-V\2~ GÚc's~5kl;лj_ !ǥur$5#Dbt {j i`@A`c pCX"r$S)w=.HI5h*!r>VD2_ sr̜<~ϹW??8M~lujs4p)[PJC>y|u߯x!@դf}2(+vUEEEPi|/]}NƛہUZҫ; lH(Rȇ1:޳pd(p1w3 5S2fZ;OOX^Ѡl7 Ѱ9%~M% >B\^zKcIafslu~"4LDaSX,'-P*{k-Z v- (atyj?G Q6c9Ϲr%?lyy }UNn ]ȂHBD~#>f k~ₜFڸ>c)""M%%8/NS]쟍r=ݛb5;2<5'Nq-5zT! EǛ￳OŇJlkv{2yڰY>NO/'JKI&}QtfÆ8}=ρGYhB4(~{&KB02;A ȂI 01o>7IV|7ƭϨGLղ9c Qmu9d>A#L[-IۛA GXQdUc&w׭,#n$v.^=Vpx;TTAy' fO(P;kֽjp*o7bY]X9~wr̶eḍKvͬf֞ |%}X1 b-Ga"w^'`o܆lzEVL$ ڝ7q$\ (ύ?k<4S gKCб.ޣ*3˟Id)DAuHno~cN q쇊HDHj"HA@t iVGoWz9ZP> L}q;1Y,~ח [7z(R8 F]bP BR}?"ђ.hg)8_YBܻo 7+3]wU͟,9p[4N t՝B(nrT17r!04E!BAAJ5 GxJ}T.=)A"1KQ_Aa $O՛)/1-VGYac8 @Fr틑z<݊=p`a~v(kҴd-Q p"D%u=/ޡcR2hYH0`KGu6} d$ 2<*Uw~2h]_?$I8ٿ1)۩. C B^H% +GB{˂ud7I0r)蜔Yf_ݎ|>g<ډfφvaX';gɷg*bv|~/r+TLܑؓxY: $kblU|(0tu*ߤ20pb~.ޏs^t~9YH{noCĞqb # sWZZ}f3-C4s+Mi@tit~-r˓gsVJhu%( $ғ a 2@!2ѰdI*C,>p ŃmBl[%tix2JSJ!}$GT/y}3}Mw@v\g:η/z01ve៤}F}gãq(ED1UrE-*:֘Zw#Fwc^m֤Qj1\!|_!' UENSܔ0uBwvO6:8}0A. &\ӺK8\DF,J"eiYGgl/I%cլq^.!CۓO># ׮T=mdj5&xJ$$""- 'tnZ܇11bcBj͘hWz־_Wv84̐5i|Ыhn(Q.:H =(5x^=F"5(QZ1BQp}͜ymݧ_I.>iқ'=)ۻÓZ{BDSve&%QzU^JTFx/(-S9&/[3g3O‰'6b䚶}qdz.˘邤f Gof׳Zٮ!%nMf9"oZw_2ړH3ca3r'^6 ܛk~D~)|mrCc2Wަ%3@=O|~it[>' %o^ooq ZFgDWf^δ[ql;/'N+t}\W hN.Kv("jO=h2Dd:+ϖDT_M4ɭ1[ZB fnmjaԑ&\168zn ;eAcL^GRbZ?XC,r5MƮ+iV})WWWzKب֩x٠0KN;b~tx7ڪ#0vQBa-s嗑D\@CJH:ohz5梐0U'yUVWHғ#Y!Y8tȯ[S ɋ^~ p3b~^,o=@+~""A 1ZiΫx&44ZPyu~C+5" JH2Oy3SH珚yz:W~OW+I@t>[LDaC<]1 L?Ť`ljt6,GP=MhUL,f\0_p$̘` F }-Ã`~d27ojoi蟃J's 4?-yymCɽ )zKcx;\ڂ5ME[.O~a63cT|_qZ:a'>|L!+5}nbM ^<:\ϯU$xd̍iFl ]\38SsҤUHn<"ϹZ}"!kg;)J%)8vG^WhE6R6[Ѐ`LeΘ|Y{tx\]!5_o[썫8{Gk={-%9B/{% X:.^';;v/lr\h',R³~Ie]F:N6ZXr>(3WIBer&jJYiWrhj!Dֹ3HyikFq(] 7쯛5ش3>vde;^oL=9UN-_ ^d +Eǒ[+"["B hԣx[z˹bgeYʣBA0VO@`#{W/<0Mǯm{1sMO'땦Ν$";Nr3q19o̟Oe xFF5p%]FQ][d槩+(BIqsͮ%qD 4,'?዁zB/X /"0)12-J,sJ

òz'oTVʙ- 2ȏL*R3652ܯmݶy!NA=k$iG=[)mSVNi9*LL >ˍǟXd$4z$Q+ SF֠f2NR^akONO -kw#M7h.XK D=X|PZ+MLJ J?@gIb7PV*QfN.ݚQ-!=_O`źO00.'3nR]=QBQ֍n2UFaǯPMY>/@sJ|M*tj)yuV.ԩi7Vp.vkV\%K(OF9 W2a D5(xl+KͶmWT-:Syoq .KTBÐn-r׳kW#￲N R7ڿ\l?)o-=ٸk'V-٠c*U'_nKOw$<W8BqυdeCn<^SjQU9nie踮SS>BtP@9sQCVӣJ(lw4\,-)zSVk']RJFffNGorawD`D 1x@uz7kЧ[zD*XX3\Fv%zWeO[R!{ 4 \mjzR zo`kPDP6w`A\t Cy g6w˾ٓ6-&ƷZ-sHvNxg.6嵭b/4h iشp( g(V7;;qohq6HHm8m&f/&.:p=oLQx BaJԅLW㑭3c 5`b鏈:n!Hkn4.hia0+ۼ4B]q/n OukЁyз5eS8+V/yK>Id(՜JOߺouh<]>w dٍ2ְx03-y_, We03<)BHj$l#=z;Pk{EvG_Qחt@o6T)S%pJvpW$CHd{v? \$Y9&fsNJ%EJX`B6\$ǹ8ۚ~ bif[T˼[&\S>LPp+ߞG{ڬ֎q Zdt#\)'9w~65ZytϬa_7h0D2uPX4$"y5zrN ߷1S|N/ S?JHx*OsK!@tN"|FT8Y!7`؎;ϱcsF#vr K 3h=yBQMD H1A*'JpU( v-! "R5Tmk`ta\ y/͘䇵O_3-Jj'`"O^p_Z VJZ Pb-Sw˩yI iTAު nhzH* J^eWxئZ;V)lB=M*hD.m$gf֓su墨{nWqh`H(ZJv"mS׏0ԌiN)'{/w\Ҟۀ4LΡ h:o@q}b_[U |f8$v&yk/oFQKubt]_a4 }"5sd^S(o[l{x[{\+֢fADȟ58 i=GmvOǫ=4k ?cO7!2#P>Uv$?Z&[ޫ}~41AYQtWʁ82|>jэfHVg4,ZGE쀊P@jH(H苋mZnXUmxqOJ|8?U}́ſu8sҮ}#L}m_q&-fq%=-aE`s^G{n P|ChTi5MAI&a@LNv';_giV8LgY'~_# >BDiQhZFZ>銩.Y?<#îu'_N뾸j+&(,I:*KhKjb|)dW/M-bgS~QvEWʹ֜7gÄ xz l?_P9FJJjP G'%x0ąI`g+ H <=ੌ/߮O2"rO؝ڣC:ۄi1I /o=?^#IIF;FnA$DP9J{T3O㖲{C:$m)"^@SݫF- \k^ v?tus!1@=-?&,~nrG83s 筜z. |'nf2t2@_K[W˺]zkP NkBO?_&ƞj5bv3z5|W)U @` F"}yLpDxA?'$gS|wCF-Z-9Xfnp8_4R 8=?`bs#tAi7`oO:ݸsMkN."go$nѻ'/+"G מ T "Fzꏢ=~{df#kjzmL\|Aя_S ۲M# Q7n\I4˴8}$!>&G],5X>ymuC}8Q' CѫhZcƯ>78pՕz>vϚ\G=7/(G`=Bލ,-c#h"j `3"k-@#{# <_ FESi"OKQi"b}pp@箭$$8ЭaGlC¸uʞa0~+,,RL61%2.,gX5p0Q:#E_;x afC E3TG nk]>Sډ$]9l$iZ'}_#;Wj BjDCacXD 92炀s&9$ ׃\= ޱG68@;6w1kPy =8A^4ؖ"-S=\75|p{sZ3nٛ-MMSAGHӧk<?4f R $aM%B9Xr;hYC! seQ,X³t40eّ­(.~>F{Pɮצ\@,%U *M0K?ً.*8 K$)̬Z6|({~WU8ع 풛ƫM ;-2!0$*K"$-tt Um `RR1 ~ɑā IR%L9yJdKS:EE; H"LL>2脌99͝}Mt1OuNY|أC\~2+QǫۀӚ}F혮Bl ^%22wtkUH"""%'zn˸EY!Ctx'w&0ޫyˤHZN0cxuׯ4QR9lmc-;D)Wx'l#^IW+HsxjnssbϹ^;Nk^Dc:٩WդXC}S":1 CXȆajLD]a_Yz沨5V2rRBJ("",iHJzG2Sr0J?σX^>ait6kqR$  ["|TG~,qj>t>`װTaz^xq ;xXDN ge;~kd9#hX!wbüd f.5@L[% @O_*dұLHE 4[RQ$.H0ed˕0$G66kIe#%!/˳,H+Mj6qƙ QQSX+%f=9#IZW︎6O?EG[o .㳤$c.gL=-z6_|ދ_mI}Y7} ^KЍxK$B!wNG줜DHy qZl?ԀrڃMv\ugݗIDžZó{t=V5?r#;~V_R@%H[PXy&P&9e wˆIK<:BKHHϑ'w| pg1]p~rgVk!mr'uØW_]+)FL:o)ƥy9M?MK\GF ap@6cM'N 䝄N`Z"iN4r&{+]>zf#EdoL`a0e#p_k+.0`b!vFɎUb7= UvWG1sc6Gjk̲\{5^\| ܚ&;MTNݒ UM`6 8DbQDO~} tx+3Ɋ;?I0>7U5VZ% c8Yʐ ]5 cj*9q!Ee,T.%a#i+V tx QDs,phg9@ Z<S+֪ #/#)!r>׭}xpTg{aMTyݭm)x‹#gb~Gxri)vߨfm&mM9#$lCCl,r"KjC"<;m @d{{gڝ_.}e>ŠE޹@'?"  _2IW4;Ʌ`?GG c5bo<.}K`OJ*y>'Y=ȗ.HٵH 5h &&d %Wvf+`dZIJ Xֲ\\t=5ѥ ^U__y; 4`X D@A,AM~?5>rKӮKFPo䣿l󾧲_ٝYe`\ݪ+_~[}y͓jD=>FݾmLps/Z:*\C0_zd m;]ד`+&J~[ئ;NST9۷muMi)5{CF: 88j7&JۃqZLuۚJba̻OĄP  l}VXy BBwVcAjǷ۲wi/ƎrI{t@w?/e}Mā۞nx:$BZDx]wlu!/ܷ+7Vp<$tͩvH+ @)& lMI? "jAĒ"$M"OjxY{\ǵf؋eNsHyNz塔2 #^bYz9 (/ @9pץSpw{+|K%iZ;j*_C*.Uv]Te=n_M_MĆ?o4N/ɦ)(kN/Y?p;nphڿ_>Ëoڣ I"E>=? ~\bfA)wKZm9slWK}2Yh&"K\;.ݩ's↗Jh]9_JեM6Q7{dͣQZ~"[-YLILcl-|Rɗwy 0-(X c|1PhVj(q1| sͨt4l|l͚ 7&Sy~=smTs__ն9<'Oml*/Y?˵^gm|ڣswl /_SYgўyh.[850a%>Fw5\㴴X(M?7By>*3 Fja E&#+2uR|,KׯF}c0LCUz bYO0X :"1"ˇG9J3zM[v`f`w@ `f_Sa/ƒiݵsU4x>ólwlǓaK1⽖?n[i)vyZ _Ƌ?y -<yɇ~ǹJg՚:#az9ܔE>>eBS H(1\WQ$ᶷ+z!loa ?Y.Jk6Ƿj<r]7fJåUM=pu4e#+1c_.)'E t}(u{rݧNE:oW9^!VzW2lG^2clH0bjgv`oÐD&RI")dS@N"l%y12Oy|aX k$m%{Z-Z/q "\pP T!TT@4YdD ԵB)C P@ ` D@{*c^0f0kѮbj|O%>~7KWQҵ;Ef- ҫϚl/\lB>dͿDZ{7_Kl]4" QZ]CC?U鰐^- 1/BaakH:4̊yZPExA,^x.~vXoVw"ʒwi[TcX#h~e {MeRs&/qrK ZM*ur.Qj ],Tm ' q)dչHl}s9,n * *C s U}f0mDz'N+hHzo-c$co:ڿУKRUqQY̎o(~tfTZ^_%JNgcݱ></}Z@I&]əf;.}cJd$F:\I;>WA9Wi}\ssħwGMoE{wGW1ZrӜN^y<_"B; '?l=17@wwDuv`!/ ?m>_w<4@2[k!rp)Oxofl^,epvz:<~'ghNn} y/scKK#g?< |mM/ѫYRΐ"Z堖UA 8CL}\\[B2=~V8Yy|SYwӾ)b<s7iug*a4S^AIl7ai}g7Co֮)G)5<:=K{T|S0{{ ]` n},{u-,pYO y~ۼ6S7߰˻mO}._ cf<}߈  - +_+{D{uV}oϡq%/QHU߶ R$!?Ӳ̳ףW_;KȀ @9#=uA`S;萴^Eynho6 ֑_fkUckLւնoM|7o6ßzm}_~]6+͸~!+ x8|ad17ήqƪ49̟{_;VL'܂}8g(v.NPS{PTq@#ck/'.Z xOo]ޛ'Z0=}u;kc{_ᔗ~qzy|šF|"DoV90LV'H 8nݗNЛԒLDGCRQγ.DZ:~,4я̖A(pHZLX!Ζ~zn<״ Q]yޗ]ބ_|w&%%L\cR7S_[޿}Fӗ1NGBo:VәK̻h:}|}N_w+Y;5\Ͷ?.!?dj8qxKT_oۣw>m dxw)'ʲ{/[~fVÑOyk} D!*A;ֽ_tL/>7Ҟgr|sz:;/o;rns;^'A'Ѣi/qe\h[*_{<1&|pirys=Gm:ۼ<^Oc~[˞$#뺮wP=NoMTlX~hy_ò=lTVZOURն~CJҨ")M+T"Ң?DhZZAQUiDTQ $ scx{=lI+{XL窖#U}kw^-ok`䐹%JR8Ueߧ-Q2~.7NoVR]ZיRXmJ W$@Ov%}(s [Q乒ZSi!`IMiU{%ˎ{ay.5`|ZUtdWz㦋up:9/E&%P_y)XlG1Л0 RPۉ̆Sxbrjn-[u;dD1XY ,j8*f*Qy[5q]L1*M!W}_BO2>!k}v)hd6j*+h[ymu!V tF#2o:a$&T(`րʷ[Xq/ i`}}]f\߱]$)N%N]t JƲO쐧d7~ep"nE`դ>= $$DYA@ȤO %>* C>M9-^Bc{X&WƄc ՙoγzԶ޼Uu[r\ @p8DU(9sbno?vX>f-_2'5F82/\KO.4?Qb}kz/o#ep+I{VPiW='o?(-z,sx;u{Y|OAB?;On/ߧ]ZGSj;t]kkM} O0Ud'OI?vzַ><3akp aG9ޤԄVCI +dv_wKWmaRχIeGG/Sx]_{!1\lʛҝY~tڮˍ|՟ /˗I|nwY[5@˳~.%+f"Hco=dd'^-KŽlFլȧ]6"ꈓ {6Bc.]4%)iV#Z0"UƮ*TDDhRINIR>qEH`-a(1VZ &$M!DQ)j4JO0,AAk,@d6DmpJϓaADE|Ŷ":TԤ)TbBRwV%AiEb SsQ"EU0" {8^Ni]#DٝHpn&O%~|ߍs}*몝KWrWcq37G|égp4,LՖkipYXE^3Y??՚vݵ$:8@,^SA3-Fo3b FIb/{GI'0ux^6=q!_q5zhƠCTH"#*DB4% T2Q>LئIDv$$A;4 +F(%2)F!mF$t0ѕp"! 0Yt-oiۧ:or_oW%?Y/wiэ.<ÛfhM(D=U .Ƹk31sE?s@hĝyx AaDDYDse?^/$zFX'&wb}a[qC DtJBnl{yGm=cز'^zkI$\Y4$A FQZZZZ5 Ki2(m @Wq 6l*ʣB Pӌ&Z>.8ڌ$P+SYVpT(Qz/ \V1UVB%Ͷɹ膨UDi[Vp69@Dw[ g7uYSfly^vqNᎂH>:FghC]P3 NZ?bx,R%x =Xͦ5_uN}6 A쮼ۃ>KWw==~fz-_38kGޟdcA9ܫjoU~Io& ; ;{K,gwqW۟qwb3Le,*Ѥ$]B8 4.j$9rBn1/kշl7mm}F5o;u译kR\hg#AGP{ݷb-=z<$v߾}: ֖I=W.+?*cWEfVSz8M Fr'A C3sDW@rFG90AD$-*`g@x#(t$stm_R^=GG{?Vxӭl} .1y_ =Ɂ];m߅|lpsTU!#Ax&V$%.Gv9.¶VCR5!Į;".!n< ȑAU (J /};?mpQ#Q"F| tl.b&i;FK #h*:G$H$IDSC {Qm_k9Y/1+ͽ/g}[Rq?婰'9z$Bpvok9?:bH[Q*L|u&IVt69f)oSHg7%ޏGWK;8_aƳj?OHu4E?$|n.ܢhLQ"K 8C*#AT + 1`aL(vl$bD'e7UA %+UB*A$fh28?Q6ղEBh@UO-P5 H6c.$`&1Rֳ̿~?u~|'.8KL9_?k͝ZY{yWl E .4y 2UZ=,V\(Cq\AuVQڑ D-FQa gHU !B42pXa6iaYjё9:I SۑNp{]-}oydhfO?ɅH V9/ D=쬬ֹwP:{mGM]A1_Ν/JZRJKJ2*$*JRBHР[UQ E--Q$B%-("X2ADcJf?kEk-F$hƁEU#Zh ՎX;ftB,VIU2VaРONQ蟃6&CI(*; ?ѕt{1Q}&Մv=-yF$[^okg iAA]S RmPdDV'F έ\!ܴVRKPYJ3a+f8k 8JD"5t>@,p٪ PBo `lСLP_ӱ@0h1bhJ!{ m,ԚkE%--w 5.0ADtjX/񿎆U+Z"!5d `%Ř\Y+iTA+0.Eڄՙ(# S h* F`Bp4h#B  DMCf(Eq$$QM;*b݄$-`T7%܈@..̉e'ݺ/wk?J$!"-(#Ti*"CmsU,q. mB DF#bIyLۆQmB@iP@=@3f;:T26wк== '%7[ˑгp52M&ܛ@Z/}y^WBAW^ 96F 6w#HBYS)Y#sHjcA $ 9q<7mm !LRyU pPBA9*QNtDLeA6iF MhC ଡ଼,w&=L߫,p+.F60 PQ Y``@U vt 6hS U4DAec\*L,ca,"^}l˨ !R.~cy|~~M50H,VoAuy:ib*rD%o1)tdHA HB,0k阿 bsiŕN6].psn u]9D+\6Ϋl3 Q35o6W^5`mV6'I@I]pCV*A1-Wn 5RmزÆöĖ\RWB#p,V^^ξ{>.-;m[]ץlQ䜉xILPYں,S]l"1$;WA]P]҅.%uvjɿwK+C:1 !#cV }(d4TN^+/ DwmA_L~W6ǻ TKu1*i2K쁲 ߜ [\1B8ѐ ׶Z\jƢ\DP%DIB)C* DZRU vq4(P)2Ƒ~ x|+x$B{TV` "B 4.)Hh88=%m^pb(Lt]q, N'kdN ތ t:u] һqf/@$OX>7'qPRX1 :nSŰ-cjfYC#OOK\WJz(eٜP:&z6CA6I^ bٛ T)R3LhE(Yor)U(,F6t)KP19VQ L.AE3De݋dCw4T`%#1Tg$ё6ܶQF3(.*SiF iʪɁ6%x[ )1WsM.걊m,]DDK͖D $2/9@ `gk&*Ia (Qē {&{cz@^׾g>ng>ZuꙘ Vfd= 덞u)*\ęEtDMA5λuT UZ VˁcUhEBB""RТBҨ(--Rƻ{rP) !U!A4R Y/ 0M&7I1,ZIJn)f*fKFTj(U( &)s*#ix 6?jttiEAq)03t3Cjf" Wyd 3dTIB`Pf\!TG>=FMC&EÓPUPTFŦM ƗX, \ .1A*E,(ECLk4BJ 5Fe41E̗0%Sr -2VjI( aPKBڲR0$ kO+k'B@ U^"%UW4 J0f mUtĥ&bW,]{TBY&IV%+#v~t3յ 0J.k߹݋2$hkSId%E!eE(Ƀ8(UMLAB`%M C APU,iu!0a(4q Ek4ժ"4KM0!I񕦺Bj˖B\d_{bPl7 4+"#@(`Q)ED#kI."QvBb*_?Up_sjZyD50 0nՉÖ ЃUiBV Ķ#/ZCK!@e)kJsK$u=/Yf6694JJ䥠xLiD㦆9!/zN 4]\%J@Rh*S[ED2Q)(hJTQJZRPPRI&..cWUa^KEQV\ ZR!Y)&XL.rPi&E"T@5SA-1QJ3TCEfbETnhN 7e5LIU "<7lL Bm2^JET1+phs8()3 dѽ!Qeֿ|}6ݰܖPIXVW}o9(J))̂R Mjêd(m<5y0U٥iMP)KFVilC6oD &,XYf0e;mP@)GVFTV9DeB0 IVJYdhZ]i1ay,ɖK$C [nD8"̩ɜB \060a( " Y Ģ{Gut+t+`Z- `|$),3ۉBeٻPRU2m! *[ - *ݶ)VŽ `Av4]fD-╗M `$zL5DifLdA±V!HcJVQqr JBCAn$DŽYr(a$Xfd~iDM9!uxf3>wnSƯ3KB(!I*-m*bCW UmThQ,1U,`2'3UQYX.Q$]Y>`aF& ! G #XjH[_25BsD.%E$ѣMڄ5 1T:kt+[`O tJ[ 0DԄa)B[_=im̦6 5T@@V{g!?׹67[^!.0RD dY &KyB0D1*c@4BZ,#wJ]{:EVQGPh5 H)$E*Լ#Y2,틧bL"H ttu{mˑo"E"K$1uZRZZQQ*tʦaqCA"Zw ZRi!Q)Z\R錁s1E  B *%Tk2[v"6[%ԐX&ڷxy3fiprP & Vj\ R1f+6͈"4Hr.EQ4["A Cip5>>{N>qp@#Ani AG#3vt5s'4ik:͚H(Z,iH# [ 15mp&!x*LI=7a.o8&-2s g PsrGK,UT!\+1' Pya,ٖ^j,M"@4HPUxaJBn͗%!@4 dPԪ8iTUnQ"*8NK,y Y$%!/$bqah*5C1Pr.ȑ3B Kn]_]9jfD3BDuRoݞ: S4X(gaDUD,HL@f՜II-LD21xHe>6ͻDqPYU Xݝ/9bD%c)Da>;V͡)KTw(RlnL7(-gHl,)x#bbk2OȯAC 4Mij>& Ib m`2 "{vNhSJ Mӱ^BtZC 0hvb@n N^Ջ$!f&  l t#5UBsUX`J$)%sXdX:Hmeo0e7KfHPB t&J斪 0b-`\˥D4/xL~7S\xI5 !U$ЖX iKI:Kh4%jTeD dH5*bV(,Pa$`A kj\f%0H+uU.FeC/Cd T/dTY#X-\YJ@֫R+-Hw F7Z7ȈpPXR1aaHОE&90JӾ5Գ@ѱ"wV4e ̘6ٜ;Ըą2ImiTUwKl-@7I2ϛ KM$>ͷE$|M=4lq79Gy;z@379.޷XG_I?;L6q\/}5Y Q`HЗoߤٍ-j<1{O4Й3.EOlV5j8B42 )L[ن)g[2*T]%F)ITkD5H< ˕*0M @$ڄI,rXH- )_ϒ"lr E#M\TiJFBTL1Vv0?Ab]!I-1+0ń̍2a7!JDJT1"ax EwKnI z-{w ";aŋƐ3' 9aŢ F4(2WaAVD4F:iX.(mXQiRBhiiRD@ZP[Di)JD#1*&$Q2"-EUERA}mR4qeVnvb i^RԂiJ-RnTIBաv"Fi~:cVHAZZcEB(b DU[E)B+lij!ZP\ثQfQC b(B4(x~T n aZJPTD@QY Q*ʉO ҍ(%(ᔴ*Т 4F"?e"RKTJmE A% T6hImOQ~|UϭWEOO!ՖN+9վ{]F/I-$h-^݅O/.<9g_sܧ.g}U/Y_}E,19ZMwާWf8y~clvXΧ:پfחX;lJtu5~K{YEpxMpK7_0[^εMشX|+1zl{saQ~Vz :ߣo |^{s?/Zz_fËzw-~F*_>Juޢ/ŋqp\ԝF;;{{owSq*纔)-ol=ܟ}{J^N#X,{Yݏ;p%Ao7[zϘgelބoWݖLo ox0XD/j[*cݬO-̠q[9bg'DȂ$'ϧnt\7D 7Ǭ^t&Cn*7 y[d"e5ۢ.ƽjo{o>otf{@@J,6T@ـ7sf݃\Hx/[emwwU*BH@l{ 07BPس'uAZ78[m(+LZ H `ȏAFu$AAJ=J)J::t6Y&.mPԭit7 {\ D(PD̩Њ`>^v%9hpW}vF`>‹;fiIPnôBӠH.OlrZt;ʏvwL((T_y%>[:wz{EP$P]t+|go/ow^JА+@i)oןy{FIJT @*Z'AO{@4;q@ RsJSϻ׻k*>m}*RO >t 1,! ;fBs1%@ tim/2+x'ʴq&ɧZIW $>jH ̐dɣ1+ ڔ~u r"!I?`ΫXSiҕ c0uyX2`$R/Lq3]bg]wG!jHH" [W<8#Zf 4~_I[*' .\xr&^(`a 2\]Uq':E]wuޢulÉ}ٲܨB\xrqCA2]3 ABt)-[7i189PO;ƓۣC德qPAQƙ>v =%-;62_(@JKJseRH-0؁b`CIb<~m[.iJhâ2j(%~'y ^R}.J!C &j#V׮QÕm4W0 Є\c8O4\z{~@wPZ Kot $?wDYE 00Ir5oYmw&Ѡ y)a>"Q Zk"TǾXCPFN.3f5ZS/v|v酫}eA 5jZZlTA %8nLS,?ӟ=otk, }<'wo rOw;ҳ?$u¾cW'G?]-@8, gCۖV႘D@͜(w {t>coY?;fo_{=Л}+f8h1xá;LT54;q| . uNc+ @7󔝯Kq>Wn_gX5^$67ZaUUI;@0ł" ĴQ=gvy_{ jEs# y9heGl]şJP-_C;f#'M X;Y;v9SKJm?66u@|&'@A@ -6}r8JDQ$p`a(HIaPGG +8_wbXdN:REEQ*(?Wf0d~sy%HdF(ZARK>Tc ~}4'pCٮf(C'ʦP$bl͇ho#,‚M#S2'Ot=$ :6_;c$@s'C42/B9+nUrѷ"Z?OJ3g6__<;.T`I&qi YZ=!ۮ˩t6,EɉQ'@tY 2eX~'W6] =;&OG~adnRfK- cQ*Tj6Go3ڼ/M=_ksW떄=jZAIG!:.PU,@$:{_;cixȀS 9^wtM1*z41-3jabl\Vsv)m34! 3,3Qm?n&~h?l|q"&BqJ&C "{˃AMSSR%hqRf SpLD"Fm\ ^T/x .|G9;6P.mMpԷyT|YJ@[z1Gx6I*b|hЛtiAR9 zF! ?c[N,iJ,`Ab $9 ` R)1"uzɻBIv^ÒdX#YI(Ǡh)QćS"3*N7MoC&Sxv[P٧6*}e '}υ'>^,q)<=|(fV[F?Ux|.s ޶JE{btp#m)x4̵Wl;S7qPU2͊eG -#Ϯ'ذ!ͧ#Xo9WC^/\AߜcB`yclk,`e$0g &fdJ1]h.> lqmsi7 t4 -T ZUhOIwS<ŭqܣ9%jLZclbiՠ}(=;ڶ"7U;0N@Cw[FWGXc*?1/LJYUQEEՌQb""0Ĉ2|ven8Kk8ʳ&$a)MGwS-{ DТy=l[Zm+YYb[k[bUYD+ňeE #lU 3hW QLb J(lj6)* E .{6G^\#^Z+@@53t1V F[V"2iӹŪ%=Z'T[[oF 1:6HTBCtpLXf3,PB@+Os1}[}O_\@>}k}sfP* QlO:~c5k*l[4 Iǧt|{.j+5"@TD I  it-)%ˇ x )UE o# <Ệd (TQQ[AMtζ]*k.B VY< (@U<^ l05M0Svyxs"s4$J6LbBڏ4!m(&Zf3"q!ɒؓsfMȷi+A.C L hy_wU:" =ue;$U@KgWS*6`6U8,Zitt8\EA@J0S,a+Ra 7N0N b̨⚡6ɳ4e )CVRłsF=gw\4ŭ^JH%,s!]H`UM$P"TUi[.Q"A L8xٚCmd%0==鯳~Li<М5K MJZ5,u؝ ]S~)`,`1bb"*"* ,QTX"0(QQFA"bQE,b U)*" "D`(("PUdAUŀ"`0*ET$bȂF" ,TUTPUX,Qb+A9xb)gEVJ+|~/}D~9;"km\t26xp8sw/F#3|N>&SzoɫC~ėAfO3H,e0/\G"۹2읖'JɶmR.M"* qm῱6F7cj9H?L_OU3,4RlJSٵ2!E).[Ѷ3[xTs!\A<)- ^W"DHī(\@1g$DE iHkf$u9F&ctj֖?/Ks FrqQ٣m{zUl, ganJbʕAaǶYHsq gpXs8t&$g`$ JL9ˎSCfQs6d~y#Q d6'PIPA e#LzgC]BN+b\&lbX#&3XL2:гdDW8cLD"@P `_3(JRADS7p@R(o,VoA$ZF,Q1ܙUTT׆ g,2}J$]R*)Zd8h"t4ҍp?8JhH?Tvu)*%^F%uRs?{ҔBes \3DvsW"Y'UUH$in(D.Z)*fDU+ Y@.;(PQiZ 3p$Y[-FLc.q0QƙjR帷"š8jkLki)m",j*Ӊy#o3!4Q"R"Ȥb"PTbj!wwr:W[vwq1+B\p`T$ aDzguu\E1sx3`|8x$I&ꎡ:tNKFG{>C`Qftn. S^DkmhOkOKү} )͢x::cZ\ĩSV9)d̠a0Aˌ5ճal*.&l” RiA) I0aԷ0G{Rcn䜴7A$4*LFT$I "(Xd|;\Gfo0xvB-2Ksl] n '"̆+-b $&!`i4Q(R7*%m*nѓ,=>ci_yx7pIC1BK@%>4Le !3"E!.j !EebQq8 *fL"L;zk2 cDHL:V%p5~1@" CuXQeTEߍB7{-(6l:D}9H6il`iT/W2äDd`" m])J4Sda2=R-MD $feLS3&vh q _tOm)r?אkxM܄4#BV.lȒ? !~'ROR"XgE`D1XYAbX0HXU@QTURE) 1TQ@"2)APB `(*Ƞ,! DdcX((,E (( E DDNKӮɹ' b )/vXEكs5^'|{ta*څl;gmadf_͐25pȰJ%?Ḭ5.Uc,WI4+{`0T;uYnQ3AIt{_CP9Fz&+_)EF62]^WlL5V w}K|'(ou%(RR)4%ِ7z|yKoyRBx(4~^X0~_;h[̬z-g@dӪM(>T2S|d2\4QX^I~OOSbd`PADD{e_nNwZ?kC휻^OM.+ǘ~)Sc#'\ A# $- ual PobDfUUeB9[mvmsca&w;έNx6a`e*ܨy[ZJB֩DEs; F}o"ED4*fKhy]~5H9%̆H4U1 ?W"bY7Oam^Nz QEg15>RZanXd.Y2JzKi 2aoI&1TeoUY3NRn^g)Mט 섎|oב^G;IIv^D7Й7yǮ*2۪`yfoMI 8M+.\\>cӮg9MD*1c VHof>iqzG/r%v`gtb_GL餫>CPPvy'S?NVp{N)"I g Pu$O/z?Gpw?*"(aZK,%ySāZ;Z&_y7Y>|IU;O÷eofDyrӵFvqi*y%[E76VE;|bA;MJO?_׃xKƼm&V:pglFLN^{ͼ6amtbJ /H ί~'ٳ7W?><0`u$GSl׷X4rRqAd$a~g=rJ;M| 4VXG7۸X 쿯Z›5LdHbt%xחi*;'k65YjnE^7oߨ n :f>@J O=qZ؞)nsڏdR>'ކY;gn(fԍ_{<ٲƪ~S'u~3bۡդߏc[U9 yBxvC' DvO8oG5@,V[; {lf!/bd}7Vh{{Nx]jT54(2fb:?O {?-Z4!$4H<o+nݜiз?ěu-~ذy#N>WI1 ʧvI08c6]IdPh8o}[M mK=>k5y4<œ9yTL5tYC%C-7&?t]+ˮt|sXXfZy5^ï.`J%"'j5'^c_뽧V/Ung Sۤ* (@^qIcΠRy<\k_r}j߱PФ/n?k'OJCqt͆u-(R5lYĵ#Bhv?>(@&ݸhz=44XWb/ wpPah7-b/?v >6DQpx(M|ǶPQI.PD?\E{u_iʍli|[ܬ?J[y2ƟyWn7"eC:Ȭ&YJ׻qP/' &&T ,߾/d E.Pn̥@DDZKc_X#Ӯ\v}ɫVNfܒh@I#Ч`3ː)o(N*h65kql*Y\dSJ_CWu6ͶIU.igsOxs.(" sUV81Y0QEF32#1jE"RX1FqT`\P/2Y\l`P4^>JUsu*#m\ڌZQTqmO6nKUfY1n PfqMb\ f̡P\.a*ŋ `(Jт$Q\3 qIvF ZۄƪB/g;6d>`TP3 &$LF f)DF%8LIb I^9^݅Рn7=%ϛIY aDRSݺa1; !y[Ӭ޺詨 5'mup"QcWrʹv2w-3zra3[wZi8+%\򗞈g|ä/9K)t+mƍ3Awy\tJEmG8+ $Yr}Z,7@(N%EK^ۧ4&L\yKRG,jRIfn1v}ҷ袝0`01u Sϊ;_rHdEI"o%~\4CcY9LQ!ny@S:1rݗF fIBG12UK*(֨Fr[G@백#&Ea3滭wOPdwS+rc7McF7v{M)ӣ%ڟNw06&>3 _c&L/ܦ$!p6!,L) fd3? 0Yqjof#ڜ;Xfi  o(oQt,ޤ'oZaGˮ)!fi $0Xi&KBS1L,Ttp"$b~_oT$02|?d}cSr75 ?xsxk/gǮq}EL%%)Q#N-Ț 7S8pԂC 0(Lb,/ ,)?pd&Uc+E# ]ImGGw̜"孿Cuf/TȚ6} 1Ù@Jgd)$©fm+CPp6$x,<2rCg!+𸘒ŁYd;PX0fyR3m 1tX󔋢12  8t]bK &(Df9ilgoۻ\n!l̐Jt M|ɜ_a0,O-3kbjkOugͪ3}mC0%K-OzC^9V<>xž6W7a}&:> o4PHpKlυזD!]]d(~6+xG =)dxط$F؃§Pxe6;"i4SuԎ_xX;~i;~NX Xb"b!PPc*( AdPPQDQ"""$bDY`AQ"R @Y Hł"" C }rd1~$`5OCC,W7g5Qigq@Q@ 7]$eμ_x3L 91;( 썄[XD|,Ӱd` L@OBas&*:9A>_bEnQGc(POg<\}^}/9Ubب LnY6aL̂ (_ZPd[i,NL3&&G{*vme0#$lH>n Fv9a"/zGh:p͸TW[%;21fu*+>Y=<m鬏OR^EBB[sޔ29X1`󛦛0NOVl'[R&#!-&2#<3lX zc%{$ S#R1jFu ,Ѵ$FdVy);xCJ1fځ1+$o!HQASR^8ٟd " 8JQE^Ḉgyq?TE2,O2dbTɓw[zݱeУ S˺ d }*Hf0Ffy%Tj HNb\}5ACLXҕkKEKwqh "9\`ي R!wG ,J R߉LZTnL`J7g* 1&SJwC}Qt&,̷*#trI]Ci[$qKsy,i J`0srt` qtC\%-1"RhUKD" 4ZCUU `Q !03B%nM1w:2t M%% N;&f]LMXtd6 a܉7rI$+ M@9Y 5i-wE4 !ɪ@[Rb҆. t\>wXpL24,4DQ@I0]04$" #[FZP 2D\U0`0" !Y4w°BVmh&E%-C,Kapl2.sj R鉆 2VaDS͡fe$ pMs,DBhH9f~48C!K] y$R1X( EcPHF0EbAXDF(EQPQQ* `VH RDp6%ց1|{ޓCOD°q_Mԩ`7=(o}']İn~v> 1?xG9nxRi(EVNzSJڳI}nNO3dm0(˖\uu¤b{Ji,+4cEq+Ih\X?ź:oQ[qdib2Qu2Ok"ADM3o/.p186sǧ̘~p%ͭ_'( %vNr $LLo3 Im'AýFF5mkQߖf # Yrv KT9+>]Zܣ*#X`S *Kf N{al܄wOF>]ms4[ii-C: ^e)|B6E:Nb_S1+lݳf{=fہo:ϧź"RƥJ2Qo^S3V+YQ%Ww0?AFTm[s?A9LeARZ;pWTG` c@4Wtz<N[t7>s7J{oHҞj׻wa˭6 $XB˸@]DMn#&."Qȇ-,8G\,dY_^BVQu^y.osofy96>}jFҸZd7T*0/]BeMh,Ej eaMahc޿oڰ*/29ç1vWyI0W?2LE+hR2ҷ0Pe2%0y8 >銇c䏫C,6v.3ƻ8aoM`)Wa:#J(bzښ 'YVH0AMȥY ZAJ ] It폜WnֵY .2ť<*#!-G?8Zb9jGq,.F+oԲk;s$8γ+Yҗd]dY-0,Jj9<]UӫKwTT/6 hkt_1w~>gk؛ceSHQOnt]s)p`3 {;%]"@ IZPu B/K8L-%,pQkc]\Zr }T+T;?۷=(Qɐ|-i6?vt,بrնtTΓ!1F nR rVұ|FۿuUxe|N[Rq2=Υ<ѱnU 9uO1{%e6y.ڵvwO#x[e#vi| ޥS<)/D[+s5r5LЫ}fיw!:-4ooiJg?7VUgro}4)|>kLC'WNKz/yjq1Y-% k08ҕHC:7+@iZ/{3 @"PΩ|ʵu|+X9Y7}^~g|;8%OL0_bR$so[^u\j#=ϼfO%q{^ivCDPW)|83oF9hcJP ̳|/^.cQzqNs/I>bO$Cbed7|;FjњI*ϛ{~q\QP m'{7_ K1g0 k?`Q?XWh>Z6qNѯeHh !I%2' ?r%2Zmq[CªS aԷlb(/(`GA?ws^T JI! CJZRLM2 TEnR%Bn)b"]R Yśb-n֘A#8"&mh&t-y(UUDDSD*3`m 3VDpfY[V(*Uٗ6(.iAC1e[+SAbEA5d1ɺ`v)aTEE h*dLr'ةv/xջ`ΆhYeq^չZ~LʱN#kx| jȹ)H$-i#7r]V)@ 5 p@}M•-ƍKR#|0$%\ XUƨ*:9lVgB74X&TrV^1a\PL.=.=U+Eۓ)j)X1> uB_!n Wկa }"0qßo*RiY쮊[-P*%mLf /hه]ꋩT= =~N usܓپE_"P!]Rs$ `'܉5BÿƸV 0 ܔhBWyS((gɠ}}Z@+v,4P\fhtJq0^cWNz%#< 2\0n҅4ޘ`mErͦ-#lPkی2g(Y 7IB=Dڢ)ͭliTfBT: Sc=8YרB> ku,:!Lmޜ8fFr]948#p1[OO#C$aHFB P,FΧ.Ywvu[qSC&褄&uɀz\juW>Fs{>u)7]̖IH0Y(zƈtU6c+睆Z X8rSe*l;Ps2$mJidLE"9.5C4\6ФpɄ%ƪhWI'fsCKJcPbsWzkt9w=7O';״.N}λ&LQl" Y$¤7'^Lk]S&)RE=@ɮ@>/} Dʘn,$V1XAU`QDTb1`ȰR ,c"#"VQ2k4D15ܩ Bi.p0a!ӏQmwI)Jr $}"->g󂃬:"cS9} t'Bhؠ7}iҔM/s_ h~ 𒎴L-V4AVS;_G5zd!|fMM׾6۸4 +02=HH`A?bHu ?y;.>JIGc^9Uxr9xsuD=)%E {7-9?~e>5g+*k.Igo~@#~xܸx9z2QL_UL |gOݠD:l܊Ĺl)_8P̌2LZJ+Uտqx`%xP$IƯs"$/*CŒdB)$ΙYE-!F*p\K GJbaQ=lB VBxFEog\; @@[@'I }SG=-yƘDaZq"_ϔ}r|Ɣ~BL-(MDSla m32 j"N_EP&ٓ&0( q66]c8w-S'JU`3V VU:iBMnM*b\E$IR' '$^'4A73:1ab%tmG jTܫ5RSAFdئBRZJfi80 ;39̊c,PѼ13z6")V$beTњVMNɺ{ڶ/RW}>A*!ݡi( rXQb2 ŋQE$P" AQCi !b)/A:TTE'53nQ"5,?IzUUxpWNRi~KFR)\]Wi}##Ў@I 'ґ0DTEWGa/Ԭ BǸAd@8쿮4qUJ 0LN-u3&10)2T 4w:G.֗Os#@&I]ضwgJ`9ԡLG*ĩ˘}ᾮ)9`_ն"8v wP$(N"u*(xU\Av X & *i$\;7 8)`1ѦkuL{Т-z<䇨ϥ"D0PDŰT/YG_*IMf5=/N׌`ۊl$BhDIM?Q*hɵ4&X/OEMZy*AI.[2dJ39k-< jTu3:@qF)BQX{9LbS$N) 8JIڪ2Ll1 וH&G̤ Y 5RjOԪj,;@jE VٳڧrHI$7#-]#x> pO^tFs1:xl!, t@* ((/AJй C۔tG %F5,<QtPMb6O4zUkw:R/fۑd7QOpH!^W?Ӂ0MT|:P&,G1.w`rB}f57nTTƝ\;bcO7o?gɜЍNӟCY:E+PK8H&9I~f dӷPLäD!SDsJC%ɒtiCI;v'ʺ( G] 곷s[DXx5\O|y~V;,E0+!&wEsT`&1$#GUb H)ЊR7'L8$.k{rMyl4,PѢ0pMɘ][^Y PT2i !aFL) fie`Q+(L"4IFB@>m靆qQ$D!GNꏟ?e̬ji4@t9oJ6i"Lģey i>gGIxzl QDATV ͯ"\DZiO!?@  DOFGHQJ:v!3<(w7@ˆVV#J(!?rBtJL$IHyee Z[-'<_Y'ըAU<ȄnJ@$"kP\It1STJ*lULn榫>/#9P).ALI%d  iA&eY$r3ģ HXJ[583s" """tT! bWu >o8$:]Ir~rVۂi.b5~R(HyH-}_(IÄO!  ad#/_6{Gu a|F4.ϠB8ǔF< $Jg H^Q- z{N1dϝqA+D_Qzy2 eL0Äo>]CCh6蹖d*>ٗ^gCW!Z C5nc .a T eEU"PLY4R(un6ԦsEM4Swisndv_:, (,{NLJL1sdȦçx`!Ĕ¡о5(,s TŢvލ ֪QWlt?:4K:dSp[d aqtu-z hzHO*hwV>~D s bV;E>"A@Le1ԅ#qGg.I(Hf=\E8b-(+l0A*ભA vϩ=IhhzR )WT[BI- Vc qF蠍ܕ,`&ϳ/P`dK + Z9Ry(c_;l㶂66nYK9E~YS0!DE峋fapg43%C>Zix#{[mDS#% )L#ϙo9вȒFHDZūl8Z4?{__C'ǰU;|ix, kX>ilDEOl2Ey,Lt/OЫp4Xxeawi-:%*w.[H5&r:"S0IT$VXu;ܙ? Ѫy.%A?vz<.:7GdܾzG5[JX] A/I cO==cTeԩt_R_^:gDg_CPJAE{ӟMn8R`ۆ3&?[&ξDc^A'APb8@";"nCTZ94$#L8T3qX;:dxqtfo kܹIw B=jӼt:ǸL(xȔ3 lbp^rAF9Aꫥ4yӹKRE#{Zf߱cqdl Ǵ#5ӱЀLQ;>f\eR@Ep"1m϶a @`GtǸ]jx&l>>}_6j:17uA-z^4r˜UZSHAT q`4\fTmsK(vʕ+YzvSF 1'=_l u^c-ńֿh,?kggt!C!o 2+ZFߛ6so1tepePhj_ knqsL*IMCh/3uFFAO$e A0QS*a#_{):g1΂ȸI V0'&ͅB"x@a Nfb> 'b 3GHĬ{O—=%UDoh=dh/Z hIq:IRGkS"hH",y| -6!KmKy A&F(UH4BeYU$9*057d m *HaDx8g/#[ ;p2/ @F?0 JwOli[EH]-o2zJ=}߶[IYIDIT XT B[l\ jbWL Z_ٰxGoLb7 $96 2#'GvG氇aJe` @N+}`3LIRt18<I3^r}2|<8όqP$MbYҒ+L&K4%6d[.C'qMwEN-X+ Ar팊d#Ɵ: }q:Ԧ~@ ,kJP$0铢nGu :64zqt #&5hײ+OsgfѯБdܮtaOs]xG 9D"ev.r _#JV0A n;ץ]|GSqt|e6(PȽL($Ib2+oq&?T|nh{TI@>;ҨIYIgǥ3I Buo: V DT?ƺ] "YB Z<\_4k>X'.bmlܬuQZ}/H`G $=-wj쟭h`uhH"ě"_fW#`c`$ >4dm JIn۠@y:FZJD^$crsmۯ _z G9;#$YR UOhL%p1*u>®N[,w^)䠳Q^c0m̼X+eRX5ch8"8LG ғ PUFFHlQFH:Lkwo.yl׳(u^BeCUT–OaR 7Z o3$`x\=['J5+EWi'-t&y7B! stHի=&*1ҮH C$r 4b($w`}lޫEhI? ܆~e@ tqt/i O f&[a) 9'8+xȊYEB/Z:wnCOɦJ`(;'xuS u\ԸZdA05*R3I⪂]ݫ̏"'[{rvwx¡z|PS=0|cCv':%=%UE1 W`39+Cy_SI%s4C# t&<1>sDE#NcXU.:򄃕A$̶ )qfUE$=ӕ`! 6_|&HP&s*CtE'MS0!t鋏<|@&fQOJMYdй % ߯B|䧨>[C6}} ZaduŅe6(Jg~Y@HsH$YpM8HoO//$rĸ$yOʨIH)qs7~K;=M#Or^kIHҤGPI5d~-K[n1zKQKfz\lj\E'mW䧚Czrr'9eZɀT1ЍvMl"26+iFgkGoF|)U;qY= Yf'hj,K:z\g38Ι= ~PR32QG;Ա͍HЎGǠ[St=m XhQcxH.P% d"e3֘c-huEcS2,HID4^b' u98hjrazs4뙭;iRTN)sGtc\L!IXXy?gN={nss7 +p* ,vJ /,1Ť/oXT(t%3V-bNs`rci0-b, eIMN(}  >z=LH/0xb;zP@XCw]8]_T_hDY9(i p0 A&"0@ X>=u*]jK"l%R䗑#y!5 .Da=_ÛɯUD^8ۏO_QݿWkz;.۽wp [=5}{UY{UtW_dz G@]9U@<)~LUTv8( |; 'xQt(bAt(NCa$$ o~" *ʅP g(@ "|H!5IC~ |L$dBIܒX("(Iػ́fA(?@ 6 +{N}?_l]v\q/t=$8lisw߯}S]d`1v};BE/[Q|QwzCW{9EΑ h@A@7=ȭ͵*/6*'u=P6C@*Pyjr"Q*?TDܥ%qmE/l|q0:0Ǚnm' /t°a"XhE !#NiD`du䁗Ac w3EjgsпMi[[1٬cBOo4P "zv[+1Be(_}m8w@7C }d•E6q&SGg zbN﷦^\KCO*+ˑ軡\{~ .1$P|-xmQ>jd( T&,C &vSNk$P*AG(膂"B m *I ZŇpd\HsD[Z"6:"_+e 5@7I7P4UKAC< PuDg jorE "9wq1‘(ZEQ 6LCr"5ݙ⢩qQ1XC4@9DPEvAn샻^@UYU4\0A6ڕ"f(*0**@R2,P*1EdX@Q"F*H+1AHŊ,PR PX Y%dPX(TP;&%E"!'SQE)YP @\ރ渡H)n n큖T9{U"nF. pi*]Lf\&to2IM !(HaNvށ%ŀE܀m@&CDERTTD"TKUIV(PEK,"H,V@Y`EX)"ȤYB,EH AE D)""XUPXQ(()a"TVET$UXEHȰÑ*# HUTFA!r:뉢#0b:%.se@()ʴr` QMK͕*P\C.f*!tACz"j-Aw"4/݂k]뜠-ک@L\۔`B6 s @R*o#" PYU)EdQr8XYDR(s]&T T :ZʨM5ݮȁw&(r!72V56CF "N&#Q5LЈ]Rl ȢGV*CD 9DdX,`XEX ",Aa8R,dY((i"a%b³{ "&XT2ItvErklԠmznXuY:0ِd]*fHrqmIwY C,e$SvI݈C5HM$PX,$"Y BED)E"? (Ad@c$Y"bDQdX,X#"@ VI PXEREE!" X (  $Y ( E"( IH,@Y!"( "d"FHTHE@ H ETP"PXREANfjHg%Ɓ 88 -B .i~ib&.kest!2F "ER A@ Y-Cu=K+ā0l]$`ί[=4N$ـ1bR) TAH F*QbbȢAV, H`QE ")AX"Ƞ,R E,dXň!"(2,E E,X AEU(,XE"`EFQHAb#R, HUQ`(TXbE(PPPYAH,,H,ER)X`D` dPPXEdE"H""$YXIH #*R)X("))BA@RHłP) UEVEPXEXH,(E$*P@1d$0"$R) ,EH," Aa" ,"ŀ,R, EB(H,RIȌEȢH ",H B!1ʲf8@E47Cl7kN4!uUsU UA<].45\극Ώd jxlyxh i C,YDE")dDD$PY" AdE`,X( XȠ @X"!"FE d( @Qaȱ0,"ȠX@*$P!A**ŀT`Ad0b)X ,YX,"$Y"XX P) XőE(,$XU1dR(E,(,,", QE"P)$F#Xd!I X*H`DUA`$F*$Tb X,$CB(,REP HETP`( IYa,PPVEFE )") (Aa( RH #b HURR T"#EPE DUQV, , ",Q$PF 1AIdPHQ`,*(,QQY"0Œ,D "C!ËfR,dU#)X$a,Ad(X`$DXd,REHA, UHEŒl4f D@[~(PQKeA2AppGdHoOgF41WCd 9y,4yQ5>c1B224xE =pIP fh-Tb恢* zÌɽivBJFzhwo_9{ 6ܶu> $ d]vZG?e.ل7⛊)Te4Ib@D}GGk-PЩʋgϺf=AN;sނqQEvjp{}f/¥Q d"ie.yWK }DT1PKDZݰsx zȊv U4QF({*1U "8ǀF='9;kSY\Tx*x\DQ* t_zQ*?$TzD^ *(j LDqG (vD\(pPT ? N(TGDT(L"AT! (^ i|I6 oQ{9wX f⣫ /"D%H(QU!ڊ4Ci &qWSD\ލ )$!^dԠYk뒻E-(`[ZJ!@B4!^.߱rb;F$ HЈIhF\))pAMVd|2`@-$ &Z[ԙ$Xs-t 4m4쪆SӠ zs̫kr@2 "dM)*er:cinT !EyW@?ש~Is#IݓUd@xb@ pR*QOeKdfor\P *y=!>@"ꪀҝ DO0Df2-z K urƄNH<@c! O.͘#DuT#"Ȩ!2u.0)o>y$ J5"][}01AKkB!?o ?l?Dz_l3N`Wskaɶ3;IS_%2T$cFco233 =:6 : ?z ښ❮}''oSv_(rꩈE,ҁuOJ8"@D d nM?7 xV!lXJ9 ɏ|@ޛx!27+銠p*JTb",(g;\X~f|Aڠ"~&ׇkv|{&^pP`*%7"$IfZ3b(vFdCP\*.)+޹5%kG]5kS)T(Sbb?#ԏ}'kn ˷СX.Sr`8aInUԻ~8>c>~"T8 )€iLbgO76@w9G qسX251 A 15mA>k2Hү&Fp8Lb5#^C"2HQA̧*0"06u^7wb8GXO,ﰄG*X<س2s\Sݦ4E"AX0 M&)j ,0Ɇ,@$ym 4zd+T4mԊЛn~nz ^snYRa{1ASF)KJhs{b[S=j"yXH`BAdeIUX"R ;戋ѓE 31o,0' *͔_٥OMY-.;q1)XkkhT"X[#`d\0 f~M \,dI26-!>Vo[K41f $1Qk0;s(T5ifI0KOOq`DL$D nC(sLP13VO$  r?31';2[F2TJ!Y~J(cځXXgIx9@@41''GLyYQE5ʗ$U>ơOZRo& (e3-yZ;U4r/tI"1M A-*\PAk&  Iy+n)@2 ص^gFnJgxUYMK"! Bn!R9,+L(/aF.Oj~oqbY+ g_h*l`(V  :faS~ d;OaŬ=^4lv=G~ w7W4o'Pۖsba<сhI`S(_?~G}-vnGꠊ NB&!(N`#[m}W2n<:͹7 ~i|t9*0gu{eV~fr59[7![4)$0'H HD@JCM) bMbapqylsƾKGwafL>IW_iBH]V $44,:́y2D:z?m\radY19@1UyU)v?OecM?ʬY>qh9I'2#"D>mܹYj>Db0Dhb V""C_` 1#AF"  #"1QE!PQDPV"B$`J72`vC#>'on 3f4b*[Bۢil1]4}ɾQ6/FAHHӧs@V" #pD|0«pFyA U `LGX20aÀWI|҄ 5 v6E3Ȭ%7p׊d̐8JbpG;f[S2l?εZNXӫvXY%,JS#0`0a]߻ 1y٥ZZd`ч2&Q̴ذD"HZW"/p^2H26_o/Wn2>W1ٌiXšR[,=_..Qŋ"*ON{aD,yJm1L*.)\&508"a Xڌmn)\C}/>xxXlwԲ*bV=Cf"+$Ni)f)BcPh42IeO/OǷfh4Q(%"DQ TD=mc`պR6)e^s5[V*T*TeFס}__fjjD,I!- ydEI4 H  srz(b%{RG3iM4Dt!T+o_jr\_n0QL4)yZ6 %&& !=t>NmHXZz4fǙyagxQP.5ȣY3! 奔F^Q*4N5EB(gS{?]:#ۂ)쑶EY=1 HZ {>Ѩ{C3@SI$nbX5пyR `0b:M3/:xk;X7|`kR#_uuwEF*,+JbGgN14X$ҧFJY^C~}<}o~~׉,,#jky Zis;=/Rqa`6\ғ?AHJ`&lAK}WVt' yx9&1~2~v!/oa <^z{S "Gsr.~dyB)+i:>b.6vʣg> |{9)`lcaG~xG>@HJ}ԠJZ ]OSEa8=pĄ;ݾ?Owu' ,}E=~_8IRDB6IG~^Cݭ!ʋ<]5M2y6%ƭ8>jQ8mOfClQ(ILHuD)%+I0zx.>7ϕٖWxߓߓ?e7{3z~31E_qݾ{^qqzi}bjlF$0GO[2Fhl]xVq.@OZyZB`ƌ4AHQk\h_"2 D.$% $$+=LEۢ&Kd+ WS4^v1V)hd @*6bf|܍i+4RT$q*:?7ֽnfu6Tu?=z3,n6 \m @x̵ČM}]I׽U5 T,0F%>Au3[ 9##6u6 tLwX5,Φ~q |\rH#~1{Z)lY#drKTA$OuF&ĩ!)av<~qdQJC!0Z݅NS﨟9Bl8 *}?>ymrN ΤTk_Y@:yIjiO&P\H::r=+1 mދ+0 (QëD^>0H=T фh|+|~ 9mٺ?,ij]&W7ZDHʓtoMM@ 3ᔈ9jP$NsYb~U5B=`Gy$qܱAȞ\a[O޿_ۮ173Hw}]qsQpAw`YqAq(XG]m5L4.a͹w]{cwf˻' VK筭]o{}vnCN^RI)fj~(SUٺb~V{lE dLrCWfDv3d8xA쏹ﶄc5M6XMKrBL*Lc. }1$42#Na,^WEqsF2f ra ` X,K$7N*QQ$;NtW x?[>7]iPo֛pqtg{UXBq@ugm{ڝuE0uݖ#g~ws0FB@h 汻5s0A\Yx{7 yjjUNr6 C E\ εm{k\lEџ AD*x #6LO\1_#ը CĹRO{}:v>VL4#iGdDs %-~쭹 Q?֮m( )DvQ$L*CP.\3Z(DS@WܹBx.nDHΪ TM }Ѽ &3"_k?h5Ƌ¤nv~W.t5 J1:u H=zک D>@B^!4V105n|QFl?̤O&K:oS2{t*M'w'veȀUm}5׍-n#DDn;D)36z7#RD`Qm'2oŊsጎd+&}z6]BJ6h9{+rZKp0x`PLR{ĸ]H L) +E_tRt(;/XGY2VR}I^ {';QMxv`\TXui/]dq0hZlBC:xwQ^(wA>j1Ȩ&2 D2|^˃^NZ&prmq^N1i]r^E͞Z\ި|Q77M;T5';O/2]Gn[6[l .x˕E6kz.6*4?O{3~o]Ur3=gm;#es89O7y_?q~osgqۈ@(AED֨|[>~TW@/!Rk)Wa+Wjm?S߷z ߷P`>ĉգASa*M$@!lr}N Mԏ^o*^gi/Mi9n_@4JbdB]')S@Q(%"+bemAU|`P2>?B h B{(FF  pt}d7Hy=?%dLrx}D\w*[|?m7vߋy>uzwU- >엶똲v(|uydf5z'">?b? [QR1<mѹ~}>! \Nwg3)n%LT@ه( 9Ҭ^E.D΁I°n4 rVU7j}΋r, j؆|`SJw+<[nw#g:nfqK}iL*_&C[rFL\F $FQuA. *lͻz<q3a Os G6(g0TCU(b׬ֱnVS;m{X8x ǠiVSHXHɡ`X}Bw&2 4cV5(+'N9 U2( C/\)hi)\& ʶ.-+(Q- 5gmGA-rTv$G =%BCp?3w2,<GSxB9":1u)x6U`D[?7+ )DPiCNg) Nfi.Ejj47:@`FX$6.࿛z$,*MuUk g? 1չ!񷻭/o_F$ #+D*gpՕ $v(hwbNYۦkFyq[YB&;薛GspuIqq/pn戃|3lZc4C"F%DV@&1 eMC> n 뫹H^bqK:5nF '`g3&fQCN(]C&n8]W3Sӌ~6$ xcK_ŷ,P:i,esd!8?,aY}U]4J }x;:{opv@<,>q8ޖq*R6^% 4:O^ptW1"6m~$.-$Kg t.{ 3"JsBE#ePIG/h5aEisNDK19VZvK!e81*}E"zߩfzzdD- j-UxW;pks;2]s $-LJ 9-`#*ipo Mj\PM4/!&30a}s Y) ֡0X($a ^zVG؝Iv#YIIpiQy7B*8MEHi.M_LJZsڨf#!=z~p+rlW; ag(BjXO+u/xhpjw~\S^V+c}. u *ů'M>kC{b1z="ܓb&U, O+3 yY?A!f<ݞ;ğO5FIE, j sU3/Ae_|K9OҰJRKnD\aЊZ5FeųZ@ޥ!?T sf4s->SUuӡ+;E#&^g#TYJm4/k~#\0au@T7r HnidTW[aSӥ!ڿ Ţ}gx6#RPj%K+X6v ,= ZB3jBE<>A~8 a&`YmX?AڋSI+M%S\p _eUdα.ܒ.o. N&lwY E[%`t=jOEUeםA`{쮑0L۞ \Uӯ(gK6XWպMڱS0uT6579FZMu=xz,9 Nm8 -vةM`>\+2C#mm*5 o:LBO{6ۺvMakX"[ c84/6XQ uB$RՂES/ *B<+QM9!$ܮ*j }i$yAS?lRxٖǙW}Pqc\!fg(­qɴ/>4$["ؗ0% ZTHYtB+ڋ#UHMuyu5)' be-uUfR/L8b.(ōC#G:SHbJNqX6b0=D2AH'/t[+WyTh-XZYcj_Nn@  v[ዹX,d@OLD~جo%@U%db&F-o:q^7dՕyvkIuޙψ#>bYc" I唼s_ QyHpW+kj~/dK`EsB^{$]W _n6Р+5VL pl2@ OA¸o\ _F l̓!׍怓taEQ <į4V-~z=<4 ?[K f[IdBّ%>Tw"Y,]Aduk`SG\"CQ9>/oZj5nkXu:T{0{[YovD5 ņO)}3ud"?)=H-$iu`D.}y4gFNۥ+ٲo LK48zYF{CQ6NݍI) ضa^aL{qUJ ;j}}!i/TOGz4%6 \h96* OүkTp0*[vN ]y!Fo0۸_4;'Az?0Zͧ$C7>cc[\tY!#@FyB 47F& 8/\~c~2mVjYkD?ǩq'zCǍQQ{vB: jXLI*wI`bP*Q ל|kf4g[eґV:q: JP ~m^^C !n S 5qFZ+(T:=N-ttWeM*jcґP=Ǹ@PF= +cڸcxSBy?R3֧G-5:TjUqގ4~wh&zVPCop@>yޒw8W(re>fCaӴ w~Ne)׿vY1" ;}X._ SV)6 y y14B$f:6rռN˿z el86o0&Et9]V]ɩ14]c*HЬ^V:ƼP-Z:=hH2eGqE@;cT͆$d&X!PAjrPG:qs銇 wԐD$E#V,cpn{7گ អkZᔈ->wQeъu|}<_)gr0VU`Dι4(ڢv10K}ы9mmb0/\J\}wgMnHnIksHˬ2w,knπjܱśײZ&NJGxTr\(nO&w;+*Y5єƠJP5KH~lrfUUb;l'9eo-5iTx SegL*6^/~2&tJ %4 ^-a;\+<s.y4@␡)ypp4~(釡ýUcݻ/kR:k6H=]=fx34`z8z:??`)mQT^ra/ޣ&LG׫XXhLl $Ǯ(=xxH&w͉y"2`EsIsX"VrmO fM_}X])fR"2a| hfwUl߫7n03KfãU9x/vRrԗQܜcczG şoAdPPHNABh ş:@IK *҃;LT5d/ ;eaS`|Hji j,T\?5Uo8n\` 긑33=PhF1mU?Q/48AQCz;%R>oany/͐ MhPyL%wzIK(aP՞[Q7Ƴ-6Pi"?rQQkQbµ%85#-q!Wޏe@*=l{ i`~``V`=gx]V}oKa\a`I7|8Ttd0Zv8"yijԖʸX"zVh@gIZxWf)} 7 132]Z|yҴnqEn/ '/l&7?[ `]sHd|@*%x% {HނTĩvDP]J~j .G(ss:M\=O`MODn(u%S(s]"LI<)Ӛh4`n0ȉ)vlo9-m;ϚhI}:{}K q:!PpfeEwe[u=fv-ӎ{|b zͲ̀yr :þݵk[=Kw؏tP^~\~3u<.恧겱I a!yx$o| HWw*&B\tgur{nyAMH GH^soFŚ+ҏzdGn4\^~GM79Wck/"9/1xV>19&f!瓁d}*3 Wz'Ṳ4}P4>&kzhA5")h\܌햑_ mP(jF>Dw7b Yu!!V;'N;N#`X|999df|+!њ E݅ڛQն%M0IҢ_PLch[ N5G=dr"zhruZae*ѓ7njrUO'c)Cd)ox/5֛;PgnIN,OWeS8!]B5טHԞ2V¯ mѻwĤPs1}d{ji LI{ u9fNTb݂S(H _%`;#-QݤQ2t5kUM΃`S!_]wmuy7 ؽ5 #{ߎR_zܝw'NXb:8c]e՟ " QeVZ8\9M?[Gp Ccz&q\&D}Hj ,o~Qҝ҃D(~`OLgj#.#6mlRu滋G+hq33R(yԛIsq&HiG"? ~ и ai+["\懇xhu_MˋənIUtPڕޥp/7!x9vqMfCRkf GnK}"*(Y;~߭ f,, $Ek )U1.Uy|ۮJ|{jC6,q/l9 3ilBe%8Ԏ 0頋1r ewT'Ts\]?|ɖ&yKײ'ϻ 1m>h. ]A;LѮ>*,&T_訑9~<NʼBaa4*0-weip8UKlr1tyyҭϵF*p,\Wb|+0g QK}z?Ge< '+δYw CCd鱄ԙwيxJ˚Z juN$rĠ0@ޯMcBC:Tmф@0r{,.R4}lkQu!Yn/sZƒ}Nf #M^j8gY\9Cf\-H**p7VGUe \nZ(PQ2lk)!JTvdr1BlUr(vfe 蘎JkSm;qA,W\l#>~/R@; st%]$d]z~*$% 3s>iI\Xi8<;M+fuWqabfthJEncqKSYy,8x%5.4_ڝC;hٟ}5T:7&Ge-XQWC )iYG_c7$OpD2>"pw'3U Cx(Y%U ص o~EZ%~y+mߏ.:' Y$[۬J>39b_?lgLlfT|G ܕ XȖ\*8v9K"f{^hG5|?)ߋį9 h͘K?D{ܚ#c!EaRR癚ix ;]7+wP;bpaPhd8n0z\[聁_LK}0ovȡYCX<ϣ}U0LF[XV8 GΫl0I9@(%anq/)g܅U3[]j Qf4Vr,eFG:J:A#B]8RjY,򢚭O-Z9;L` LW4mgfG o/AFs񾊂1/ܵfFQ2+y CLfkOy}`;genw=-- W[Oӎ5 AWq5rS5wqWV0 gG㻼AN JTty<`ijVR-ޭ%ʹa63˨ˑ:Cր,v" ^)!}{OJJ>8}unŦ\o "x$}TY7t}Ap8d͉13T h*չ2E:Rf?IZ'.cs?eWDJjlBiLQol?h3A1Q;`z Yplv:p!ɯSPxtn`̲%N ^#i y[׍Jj2;f'yޗu]COmOk0y,="ͷ1D g (޺h[-0׆xyzaſSW?= l>oEVGs u w.m?[|ihfCH凣g\7L4yE$'G<J ,Nf`V(̻X&go8\E=QTkL>Hp$* K'7p2ƌ|.mG"SPOC-^6KCǓ=rMnٯ)kVy6߻^;B\ex&@ls)6 4aGzA(0a N!&E^Npuw&ȣK {cPcx6Zs$m3^Vlk'_?XTeDx:3󅊩m4޸ǢMˎW^3}@{\sa:NfTL7. (F͵z? %bpb9 ׈w&էU5mer-C$y(6 GҴ ruwȫ.PY뀯P_NG.'IL$^ Qzz?a >k|>_*ng8lі%9K.=T :h6„y1WWo'谂H?UNVcB+'60Ru5?׮󤴢=چbQ?|dLJ )ᶂ7Ț*߅6k@e[F.=;#{K'cŠUZm-E{V-B|wc?+՚se Q1u۞iZؙR yzbKA:,o`\WKBU$'t֖41|a'[l6W2)2=[-Lq$a᪕d{S"Ddv: #0tU ҩ]u9G -J:GO 0@TTCR $CnV죿bJ4r'5; L-1h>Rr7`Ή<=F!&ET;+RX3^gȲ⮸ !ź%uIT4%Q 1ai 1 c^t *=r)xdN_WF7G- FHIc(F?$yPX<ǜ64O]J߰߻*zK3!'Xd 쫄\.(KZhvn&?MYO__$|o¨\عygޅvBgkZ, {pc)C:p_lQ-z8 3V9B M5֮ Q&y^~nSkvΜw#8l,D֘l >=ek,3k::]j[TsC|^7;ofȜ`Y/IȐSaly˃QKhb{R`"3 5v@ GHzW yB$0/ z@J%✷6nG`Uז`3m,g]GTH.P`[(3RXi&@ttJ+KLwAN,X~}EרjNEY|sU|'j$l~#0=s cvz?$^_>q4"{kh9HW{OX/`:r*yW=~BdviA\ݓeJ\s íF=҄*ު<߻6 [mF0f@˒(mI:o742#8iK a0jѩS}\U?hrL-_14̻0&jWV{S*9I(Tn=7T q3#WC(|*DGK>Kb?>r7zZXj6_$X "|5kMR|Q*7p6o6& 2M2 46ۄޏ8EYij?)B+.й<u,/ F)Ilڊx+;>qt.L肙VgϺn:˻+NLBzZQ ̍2XԎw8Hs3 "х/pO;()q`z>B3%jf}$'NJyܴ[͜vbqbN 2PZ X,=v#94L>Ń̰P)7te! ;R`l?B.syo rY6Ǧ ן[F% E 7*I(;.|<14t2=X'ٻ>SJ.W6b`wShx(} ;-; WdO$'x-i-1!r?R4y+G}o}ytujݮCIX+$g''`p(6'(*Tz /XDǢߺBzbs;  `X2^CޫZq|F5[QI4kl񣾶.QYj1 JU$-}E0r=#:րiHۜ#D"!6o]goZ$}=B(P$Mk}v*XܵI=j(">/.3G dXU~CcW=. iGZ 5AFK>GZo`gz*RomNxcdJ9`JZͺ 5^$軶\*-gcJYTL2>8k: LCZk ZL,ҕ'[#m OѷB'%ANQy8B%hCJoz+F9>GѵWϽt^㔉<3]w@4[!z#oy՞Ud%K]sa0 ]YF<_ bK1vRC""IE70dMA伟L._)agHZ(C&c` _[I%bzpb y&ч9YJG?GA wvqn`V''Z4`h ͌2kqJ"rB)nrTk44+…XZt0JKGxFzg8 ϣ0gTa,*a6tt_)xEPEۿ䮝 g9:ţ8ULGiSfi< AX@oFc$Ǭ3 1d?ȑA\ㄳN8IageP̺Y1rm\NX !#m*c|i+TLKqP~U`mϹ؂w ,DX|>f1z85}G|WHz~# ׂhuƒ6Ю@4y9Z*PR5%`.D k\ RveA/MC\셙7zF_K7,\7zy]6p1,{#HT_+lhQ*tŋhnEeb<ٴ%gb^(gWAħSp*bDP$SAKî9M BZS {o31Wo~ ۠ p̀FsǻCyCE笎.5!e!P@;EX\zbEqrZ%ˮVW'L2!%ҹU [,uWrRcl$eSV9P^>*8sA47>[O0@b).aᅟ-{o6dm%]Y, , L0PV/2ΐa۳/*[mT+t Eϰ{=vhLzN| w@K-)bnAk1'ҹvJ8㡠Ԛ^c iuu7 os'Խ$NPOMy)y.`дڈ:c;W;NsvجȩjiWOvUpRFVMxO{M N2ַ(Do{lH?̴Ⱥ @ϓ !+r:ޚp?_lkx# VėO+9nwsBϫFOᢃS\ G|~^on+0ҽtTZI+`G rգߛ2N{"ES9#w>Z,ċ~-scp\f%5w_Ε:>#@Ü қFr_oEc[8Qb3[Et}s+U[)V2%-pC [<)Wp-= ,ܧt%,ehMFƕva Z G`~N:x0!!r@GqU9EP8 ݥŲ67A}?i K:H_‹6'A Iu503CE=蕉[D(4vs#,$Kw0E }9?tal&;O8lh0ruεP6@t&)M:(SD(ph(AL⨁yT{Ҵxu@-#T`~n|\C*:a1M 9V--dp֜O{K,Bn$.:g+#I;%/c}Rh# .Gؠ;P|wOӂgJ|D\}a7Ȣinls- NkYYP}(rUZ/spR $7 r܂FgD8 oDY5Ǐ_ƏZw,kU21 zQ:OXN3h_?jpgf5&MŃP'$p(*fvgnit?/8?s%"ʌ>-Ʉx![RhҷD_ u#ǖ|'^ncAO b4bÌ}Υ0&Up:`mDjlS]wL߭aH0ͳ0@6Kօm{Z& PWgp-!,TʇYi廒[$H/SUegpFШPT,꒕8qgh)5#A3{z⢃nъOxT#Su{`k˺s1Bf(W[ݥ Xju{&6oN;њXhM* EY9őmˍy%@czFp=oZ-{tÈzMp 6y%[.Oi @5gڿ͍1TMs=s־|uVp)?GbUBUT^"@I˃.۲Xo~֢VsEa]h5L/ɥ5LLQ KI'9p 8޺&r =r 2a Dlҳ fWrԘfN݄|S5:%?&mho,/l韢ZF)!!:ɃqYC?FPLD-f>&iƖ|&86fgPɘF6W(V7N'aR^7vF̐6y%=MeY4L.'&$ ";Q7̩HZs >凞q!!x=^QU4ёk8ɶDU3U:AALtzfmJLNS>w7ceʟa (@(Ȅ7g1-sK-\\:,q-BY\Pb4[%F- %B[HWr Iq3lǴgz"A*jsJ~!׋f{˫Sj RdwCyD&{it46IPMP yq2{Лg] 5. }2q S9[*ВnqA* מ6޴}pmoi #'^FP(DSJHjhes%r7;ދil`WQčVRQ~8*t.å֜J{L2j,bě?#=r =x0%WLIjw%G l:g#sȺDhxKb*XeuZ7ǯ×H߷fm2v\W+nCPlvEtpOP??U~ub#qoP?)|0X@⇑4,)ǡNQ ][-P?=v>?rgZ~]-_wad褹dYN3N~1ӂ}8έ7}Ps K8y BM[l !(ljî("jQ쎠!eH+KVBHX7- S,]['qyrX=FXr\f\Og¾Ev+LЭR5`O9e9 5ƾSn/@~ujȐquzn{& 'ڧ.7>OhӢMrsYN=_E7_y["&iG٭$iRl\je&"-׫f׬oW:a"=1.d0T3<yI/*.Hj/}dZCF 5 l]pY#CI]`qer{l2B #Ak_PїkϞ3Wi*{<*~ \@v;v sG{`K ]%>PI"abMYcX߻;`sj& nBSgY1g1.>#br ƼS %C[F^.Sϝ/PdvQ$poF5_tw}4!BEc2fi\imuh0vMVO|W n/eFEz!݊V 4l1Q*@}@?^sL$*iߧ3 KNU-S33Ы4dET#ݡJ 4u'U1ljǿQ#l}G:pK^y!?4=%ѭYhĂ+!h͛ʤZ 5zGSvumު3{`Um{m}8v4-k]ܧW,MAqʲ_ 6H*謿pWB\7ʱ wJP:++ 7~Yم,Y՚&_}`&ӗYJXG`p:sOl0hm|d"9$VGeɏ @һߵB2kmaN J|ms! 6aPT(Y7]BY^Y,g' UuspWV AHolw@Oa7y_`Q)ͧhڱ z-,b_cY/iܷRҫ3ə -煵aK,F~.<=> 0ԥ`eK²bb#gUi ZmJQN1!*cN i7`;[KY/۹NCYcݯK ~Q׿jpcq4`._?e57l/lY,4d;`X= فR+됚?\iL8e,]a!,=䔬aټEH'h {FGգN\K MH*{B;zQ{ZV-9pqǓ.:hT `#5vj*AfڹC =(]<[j/u.<m^4:4 +q ؙ`L ;`.AuϜN*΋@[Z SKr(*vS琫WO$PCҹ+5Yv n4f #f7!R7,n zrnܞPsmݛRT- ph9}DyI&M΁_->̄œVω]|iym5VBϚrv3m ϕ"Pcm-JTgD| sS D TT?Ur}y  5m"Yf< )UJWo,a27>-DsBFSsi1f݀ 09N{8fgd"+g2_}IugWcehVb A-H xd2OA؆k^^iJn;c@(I]܌H%r03([g\!ϣ~ÓMԨqv4U!H?1Œ}e*$_~iE1:#_&|#+y#JL$("W$ڌl8@]>dr,Mrͥi43-!ʜ "DX2 !Px=4dH>l~ng 7^@PW'˩Y{035<`P̄yˎ`L_өiNq]/Da@6bH\Hi- e'1;9T z:O1>%z&Hj;Lܹå9X6';ؕK3Yl)U4ё/Ub^MJSʆAt+>UfQygK:{f-DHR _%0s2,*e]78s{#J2{tQF?2n_`sԳ1'NcZL@}KIx:[NL5FnKޞx vp?$R *?Óη(* ]yl:F YPN}H } O4wC^o<ВjܫNX:2SP SSӒ <ʫt9 16QB [C2 8†M`čO8X:)Yo<U8~nyb43kiԨ=|Io0!et]lW*<} !)|97[Iɤ!>`ҦRɍ(6?O =ɷ&dA\dBN>b9nգ<[:Gjjk:1R[CXZZӈZ,`< e@?=BZ-dDHLAչ9wa[|ၝj$R ,ZWaQR[0v، FDk3Ŀ ސEuSIiVOˆ S̍N:YDFkCfkO NgaVI^ Ccbx:=cN% c&ĢI'wj͞ r!NSߗk5;ΘaG #fS2 >pu'Gy2ކʨG"w"B6UQwgsK<5թֲWeh e- Pפ!_9TA0\q%،2\ohK-rI/;hC5³nI Br}VKډbB_1sid&2gETZN\r4軬-f_ftxד_}͋F$ce *߉2RDH† (7C>MQQ/DCEX7ƮbAGZVS|7# y6ap'i@ ^ֳ\c@PV@@i/DA+).JƉUyJƜ Ҟ'=zwlzg{? N I_*Bz6/dӡ?Nk!hD=`i1b4 ^=Hbk Vp),~tYA;~|:-<)HstMgOʨ2ܢE%Q k/޳B nr1:.=Tε}q-CN٥FMN ^wM6VAL8x8QhƝyxY ZxXCd2wM?:ҿ? *Aw֩jϺy9ɲnΤ**!aJm1.^ƚ%3(0@,-Up;Tp1`kcj`1އ[6XIB1^qRB'1[V[HťƝK+L'z.FikQ\"!?i8<&1}oe&C>u9+b8iSPDyۓYxL gijC(#ep T c4)kq'ϫxsz/ Z!?kwYfm;l"GdȪD>(x0h•7,1kgrƛҨlSF.#^ kJލ| EeEDjS4H/2!qK}XW-r2E]6Zp) oeZ7a?a=#!ؒ5NeQj'Ƴ$ł8 = Րv)+< J~1J{>ި02?A:2?&HIф_A`,(~(M~kjb*{" _(:&l z:ãd >g| ܵg%K 4_~a]j9`Hd# dW6_bd"vg<SH>Q)ڻG,%ÿ5_YxW8W62QctD ݱJZ}ΦBD-#'{bȁgJg3RoY\v>[OjC2=us4L-@:H&mkѶ|)*Onr6Uu{t f& =UרW6[0sDm=|WA> Ӡ1^i]gyE̾)y<E"ZRƂM ל-غN> AꭌHi]7gN4N!&h =.ѤlvH۸-7m|.`KZBڡT3O;)5 oOQm+;3u $}Y(҃K[8U˔蚉TOiNUh[>+bL|#!~) 6k *gN+ E&N/?_ɬ%1bH|Y_glqRu16|" 2j/Y26["-N4"mSd;ЦP[?#cCe< 4Y׭ o%v3QAL{=]#6y~D0$j~`\[5oxB7sܸMiά@Tc1$rREVS|> ],+Ѕ5»Ĝda9y8 T} b95$Wx]iP6c9/2\n7Lz |qx`JEH2&o?ȣ7K];z~[VSчeO&g֡S`R`KE/V9#TѱҹUl3{'p&.vD &Y-,,u 7ѝ7s=caO(Fhj+F"Elpi^6=V?ȳ'כC.ȣRH+xܹY_"'Yr֙YVZ;lߤ1moۄI!6qAgI < p/X;lC$_9l&rcʚĶ̹ULU*;0 7pv=A D #(âU&^U@ߺ%X=8 ȑ(KM־uFU@@8az 1u̢;WDKĥvۦ>En2^62`.hM W *09CSJV&'IQ4*̇4d0whB+VN,듋+/ xWM!)1Aν_;]-h 88ɢ;~CPSD")Z*ǡ2=HԳ_ք w3wYY.OR?%tnCΡ:M)@:p7E_ wsMY7B?&;(Ơ=YfWwy= vwZjs|jxWm'N"E{SqZIrD[P't Qod`u. #J@sNmT9Q B|vMF1c]O<Z`gB<9کODSsX Ы8Zhщɟb6ʗ!FhCII~Jέ(w2>^Osyv&oPoPCzm҈!sM~:I~gܦjzbQLA-6^ R 88hV皰t,﬙뉵Q  dC'Ua@SÎVTZ3bsb j=2v0ֹޢ5oT ĔxƱ3!}ɺA/?'uz3˅~\&N]'kWuJezN}f>hQ ץ`^jz޺ e:3^ÅMiv }5oIF|kCwqv%/-ԇZ_GZi1M=PfZH T,wx^ Gѽ8wg l/mp&F2:KҚd +A4X]e8]מ뺉i~btb8&ub?\pVgolz5s%*}ǯ2!q~Bv,ξ~s߾.vSwꁾzҴI5FF~Os02AkO?m;._:Mݯ@Ubҩ[}(&We -t-r<8Kx:tol4\Y˸[p;W (N/汦 `+LXj DHF $3.9a([.>lv_! 0k}fK~:[[MYrf̝z^n:!mيOsi4N*,aVVocXGH?˓a3C:XLYlbII:%b_bV3q/ +WXR1]Ť ??j՟ 歴5Q$\ʠ7[6*.hP߬-1hݸ,2'B>|t!ݹBK2O1*X+svd+gNCLT˂z*R$:YF^Fj-J&7͝R*FME+KD/\긭/T4jxIA8H_P ^zڱbvETRttD8y$XuRsA|gFgSJ2C 1FپV 2ޘ7Ia! OZISu>9V_ &KzrJ,3lBKN$?w}㳋 nsDS)׿W16$W;ÁdX#(9F!ll/bhWuiTVΕR]R ;U- wFyam#ӵOr/ sRr42;|a |tf筙h54=#_eû R>wF2r%ِ?[D '37l`D7&je޶X >[|KZ9'7RZZhoDۮ31@ț X1%of=.5‡0. n cE6SKt؍[EQ`qba!!!闇Sϋ6@wjt!n2TعVk ˆK@f ٗlH2LܨC/Pwkn(B ;Fab˖}ЧdHO]"Pi~ n pS+6/e {:a X$ 0WְP07&KiH ?V2..tt)fp3+Be4?lܵgJ Gpci2 Ɣ,Hw) O0r@QO4X*gOfU lA\Tyc%:=6QmǕ eоU e^>?K>ьi)^^_< u}o}j$F:Jܟ^nE馂XR>;Ⱥka ,^}{aaP-xKj iҹ}.H^:˩&}y5`Mj1iLn)qP/4K+낢ߌ[4^UlbT2~X@ "'"ݖqbAUo/Ш|\lVĐEoC4dz!v& C>ҁ(]Kq(SOFtf:U45M`%`U@N;5o=a/%Z~ݎVpAq{gSSILgcO%0B*3Ϸ-alAul_o ʕ)?꼯  \Us 5Hј5:#`Wu G,0h4'%R6n8~ Vl0?h'h1Ej>c'ڃ\M%JXf;ǜ?N/*fa/@ F6oVVݚ+T:h͌'Ly mPF߳ VwN< I׋.míR{xk9CDk/<߲36#Kým3.0Z#&3A?)s >+W }(jVzUT.;!ܝZ83`+$l:1cy^"6ؓ?Q/q4]~ D7i^#6^JclwHIΜ.|=-@%v$v[@Ig%A݋j;r$OYsSդSӆ {_vYBf*-P 4 #v{N@[ޒ9iߎ, <ykRJlmAC>>u Su%+pLLɛ9/x5<[sAwkַVK^ S$:Ihdh81.'\ЕC3H;ֲCSz^r>ջzT: m@qq]pR Pަ߁'I9V<*t{\zgsqTi3S)DiPt|aAɈuj~8bA[Z \KSO.;Wwj̍ՕQV~-,f,󖘂yrduHjt];>J*EU]*6D8s\KFҘ_R5cqKv7X<ǘubӏpr y2ǂ( :x:=̥ ľ`aD\>).Şv/Ѐj79G":h)oJ-,OT( ,ARjzؘ CT%UG1$'$F3b(7'";J7AwxZ77 %]{BD?^ )rxla@DwPzi`YI[HV |@kFz" ڕnʐOX$dE(KS!:XU`G-rįSwvQo|Ԕ2ۀ]f:ɖuh7cv? {r*t+6(+)qKRN4+7 OH^p܈CW|_:_8(( TBǾӇ?> olpϳ%ϱrňwf.wl\B[ ygZ3oFr?Ppq}a0);6/hTMH 1Dj㲧?ׄxLs|&d=NumC=0dn7goXV ? _ǀ.{Ol{npޞ L&Zq> ,*TKG6P jΩ>Qv4wK~mC-L9pca㕗T]WI8vkݪlhEjU.j.$v~qP PUF5#KlA1 sIźP))Y9jWn>;VCզ)7< ő n Ԙl0-1K(u}NU+<^^3VОda@#괢z1)+ LM1krŘ]ȕ6&~{Hl5 dݿd/_؂+$;ů>O^$xH5XפּOkNEл+zJǀ6`OZm(4G ^-md8xǀ%7FwFbE/IE; r>l(cVIo6=2ܪZ4@Szː&*wdYKo[ ouP܅]ӱ stZ:B)J'B[C A(*~8 qB~oZ F!"gىh Dm86K&"L)DDHbYik#bC~6EntXéI.5%ү#*%"ZwQPE`/3 l˝4.[ckb`r ޼V*e/އqdktUx6lO Ҩn9 a>{OIc$n1~ͦa@8&?u:~L̉Ee%'&XNL&Aݯ FRo?43bڢDHYYI:q3FV^4gkIAټKeս*'5%<-im輲ja?5y;m8< @oh?=#b`e'pP2'GrL9а1i vUNjfC)_k 1_9)Xkf6:by \yb}Q 1#B+ySvRgJ f(N[xlRLsEIuXz 9ۤe#L ;r\Z`TfܯK$y93m9,p4rR!Ul d@h79@3KK`9Є7qyAXs:>C*Q(*smȒ`!vv΃X8;֧⋰w{Z!3(>&ժhŵNڝFR - ^6kTV%Y,6!+1ּ3UbXK{؈d!JBWVD{d!ol7FB:Wbay_j.B-<;᱿R [S5]3Lx ŒIXD]^J! UDjdg;^~uX_>iN˃xlOe}5*WB;jYҶ$*d z]p3`~9l*kKrc^WcCOuaTg`MdwsR$L NoW~ʞw*M{`΀h}wI4b"( Nx!m&*R vr2q{ R<z-$'f1HO(EMw4[ٹ7(OԎ.(;9h~F-=y r=e&*,zDAN G>hm-] \7 fgE$E+g95]d(|B{qĹ٥60< k[5S#De =:~J%Ptx"k[eLP̂[uwG1J {0bؓ8eI5vi@:?L-a1c`֓Ps]fHIXi{pk4';!Mi:gb(a,6=ۋyU]. 5d*w N$;\ RWDQ F(5!`btX~IkMhwPL|40 'ތ $X1&gdИs%04=0]nukϊy@4+T6tQMq\D.NFX“NT ?Sҹ}0;~p% )3/_h95!{PŒ$8_^g4~Q/e2H`1Φ|dAJ s&}khl ؅uE˺+JW)oJ zse{.l7=CKPlcddlh В5 ZTfn?G@ ?h.]6JQ aoRq~"4yP!Ϛ\,BQ $;vU)Bj]>y,|= vaz}/}mV%@NX{1`ooi;pyNyGB<_>=0ki9foP&lfoŘY!)wNǬZV[{X:k ; _1bTUpJ $?ڗ)sE+4$8N2u {iq{/,R{ ο&6SyQ=1o}B_}lV><mZ3sVJjעB).mol|B 㐇9- o7QT.F @\?D6sXa$8A+{ 3DŽ}u@8B.k@]tavJ)fU8 /J,s [ŁV,L.u L qKuPD^N&\1*4/Фhϒc}B86&{R /m-yy w0A>ߖ_R$#o/ξ=/8`!MnGH"+&6L<ÿSeL4)HpSk%ikSv8hKN}U^/]ݻd.>ܵ"AeD`7 ƪyl1tUR}PYT=N!e̎/au-ph[ -BL73_W1l/=hMıYsd(恡k] {foW_lr Vq9~tjJ {VBd("9ޓјb#xa04J- +ȣsDeh2X[jpIr }"x-R9;40"zo `'tb뿯~¯ Dpe'nYV_A %uD۷>2lg4Kg1R{yJ`xD+y#!Fi$w#Lta@n |*eLoC]?-7q dL\W03 *«QG756;u4הKVZqw!PӾNCPXƩwWm̌όX<'jBpi9Zppxog1dD'o5ncF \|n3܈MߩdouQ)`soTR<ʤ\Q"&L{9;s+16{*=0rT[^r,ҤG+9m[ ւ̪v-:6+DXGF7WKBK 5d +v/gn7%0:fю1_7~MN.{V:GoNG6I'iY)֔h5jz@ dm?5BlU F❜noQ59r +|~vv3j|Lu'r{=z&֔?M|Z5 n@(qْrn"CxA$ Jp$*c2 n.(!`Tډ+%:Ppl࿵ep7@r23ٟS`[>2ne+K@E[|U.6nj 3\IhjKC`z{#NDD Ҵ~@ȱLH]w߄AҾ;BFbTƝY!BMX~1z.8Q0kΐ1S`Nr`cn _xOZKhP}d:Q7q3B@]d{ b7sP\$ S^P+@-FLsRx=/ 0ل^SޭȕEVbKc}?KgOσyBZaVA75Cjxre%MJ^TRkzQ 8\ < ö 4GQaRRL#Og!b J˥us7MXf}n* v)`e76?M=f25Mn-&囘&c%XCj6U{ \Ү^ϚiFr 85<2^㮘|?{m%a S꓀b;ڗ Sۉ?H󖛫(E̖`S*ISMM_·p`=(yU[po|囈s>3x ;\48*5eٺpxCS!BYE/tq7nDu-0ڲPP/Lm +/mCIHQo o)p:&Rq8w91(\% tiz2ϣފy# 9,grv\;{l L\\ hV.Pyd$1S<(5kMY@MD.ȢBA.7kn^Ĵp/u=K➰^nE6d7r.VB$EB 0M>NjWÏʒ`CZn92@RD6Wzf7>IvC=y@-':8.;cXo6'+{և9CHm'J֥Bʯ}+7dXBĭ~! o*GPNs'Obx C N"R!=?vdN7 V5CRbkk2A_`2Suf@`T~@m%hV>s!-C!(`1lQdХPФTÝ=3͟W!4+y%l6^ <r" J#:C(9R/vM\So,OKYUyߔi!ߡ=CY _{cC3s(F9ۛkXz .sPYʹL 6G3K+Ȭ5aIG_"C~C؞YRٙ{6)7BCZ˄=˴=˒j|,r$ jVrɈr6yPzNl& Fa E8 aN<*'_61S}7XI0oU#.1قvx׸N101mIǼ'gzM  A퀏 .n X薣46|$ wfVKlHs2c/MR*T_Zᅤa.ꙝ^kY=G ƪ?vMNu4/ 6R%{(#7'9h}npt)8.%"mom{Cv5 yR>5ZCq\QN<=2GE (wRrq0cΪբF.q69u6=+r۷=\fz{Yc6.rN&G~FGQ 0Sd}_jZ:G\>qݩ8z`C쩄4嶺8tMNi4JX +-~1kJxշ=(Q` [B^t<8(Fڥ5 OsoM;LjNDv9GL8ͨLdf=+'|F\.bk YV2u_J X2ߗ6-Q"殛ֺVMz Ys`=+UNJƿ_M=c!ҤWPҮZIlΨ"H)Hf;ܔH3-;eMң3i8 ^ɂFtD{^ZD|uzUe ž]9 g!]nB7͖4_l u x M$_ȚrKn0ά@e7ɴ^?NGsHݮ ;PQIz`ݛ|Zt*FofHݐV'X=qjv[i'v&}|ߗTЭҤ|˜4Bb zȋS̗*WW@p^)[8Dዽ@F^`7>Ηټz.x?2<0{s }%rQ^W_aIi^5MoweV|&?ݥ`y.LH\eimz1)?z(W#UǤQLLaR-B; i"SQ"Cqrp/eS3Lw'bārcs^iKdUJNѓSza=<"CR§E&ђН@#c.J;˖5^58" U}d@y$ا-_#/RJ*MMI@x: ޠՃYbDhǮ>G\H{(l*b?=N \dL@_IOvo tς1 aVӏqtZUg@s"O@6 _i*) yI~+pȤ&ߐ_n%*sC_QIvF~I3]<#O*]PiQ]5߹Pd{+qFjzjoTl|jʉ<̎ƣx!hRxO"\!qM`7 /_;19j ftӘhwm~ Ob\T4CJ5᩟hC(^@ $2d]y{/_x|=eXl]I͌ΚUL f#ȽϹy:oDEvp1CC\Jvd8gnQWz̟a;Q@KyVu,S'*B%EfoZD.>uWO@wE5m1 K+K|k^\#fKxheVqJT~b{0v˘ݹ6&{V yQrtyebΈtܠg/Sx퉞^=?G<Ԕq,`jwNR^4 $Ѵm&w&Nd1~[eGpWAĜcS]jFuKFu-e@*gUF~^}xsYi+BWtg).}0qF9pT t\۫* O%ɊMcPuBҭ /1n̋,ْ smu/%ӁA+19J[QpvK̘ H_ cTF@%71Qc@K2#3z&?@t5=gi";K܉#r+Ǚ}`GANAZb;_]!Ki'K:e]jʯ]ׁaBPqR89a݀HR"Lgi6YV1 iyPW5Xv}.ϒ$6Ag / giT^H>5!W.g h2 ;H{@ X,t}2G*aA% d  vf/?oz`VP;*l( Km4Opͼl.@LCs*N~> 2D E:/YK ؽN c_xQx#9;Ƕ4Q {軲ֲM^K~5m ?j38*)P[.Ε犫+3['-2:x;CK zPbZT2DsOw83`Ț=%0q7-,7]8( 1[(&]Jcb̀dnU(Wx[Kp'#tO|fxQUKJ.;m~+H;(Wҩ|-]*F~ m+V}iִFWǍꁘp#,xAq;CQՏRݮ&~ьg4e5_Wj/t_2X ޥ&"\;gbRyE#0FwS4g9 15gYyp:|&OcOE5_4F+"]-Vieg1CS\YXz*v\"h:|ulRn_(mr\W-oۖ Ur/e>@J E\/: ,Zu'/h| jnC3τԁM&'~LAp)f+hA#*RHl mʟLZEC%/xS8춇`*'PYۖaPT6콽)\lzA)̚Ufx]nRQG]򭗼ʇ4b t=a6o8DM2`PhbQ \,/H {'|0`].aPzfN՗B_[yEJƼ4\AGVsRuhvg# pG l%k?I$&hfLHwi?q#DL;9~'[/X!W WB,fJN tdaߤ[L5\5&^_s>NQ{!(\Y$+Ar0R'& )ltI#&8 ?@(iC!Wdc8i s lb 7#(Az&c@3YGqo c|4#܎B|3ȘS,K;^϶: V`;u\uWuJ7hlPteɵ1c]S Y˓ .BF|i]@ Giᨑqn-Gy89ID!tVDD, \a2WBS 5NQ lr!gyنf't(HN2vhWyؗ9Hqb:wBc0RϒbUBA *  ep1nkQIuC!䭽ήcnAezUUxVAK073g/RmW{'e2!ΤZ4qZ!Ùj jOjA7HwJaC/0FBM0D#"=l4_ ^9T,9ЃBè%Y..:F8~/a=,LޢЈcNрqD"!(BGyޅ7A'l߱G`ª/SNr|r^@ }Tvz->OߍJ[u&mS9GE j$eES `쉚Z@g (ѬiX6vS!,qGz^??otl8&{Pj"[\Sfj뗈 +.WY/.w85)QxUF`_5 &3GMBfՀ ,~q9makvDžZ%|;:T'-ҳ"K` p hϤ^/"0 F­33!] c_;A#[!*)% =WS(VMg6ܬ˧(xu&{M+kD|f*gc6Kiهd)u}Ji1V0C9c3$R5B.} g2Ɇ0wזg;Q9eniZKb՗hLZ1稩ҝhcS xC?jcq`tO.M+UHE2G` G1q`-߉SẼktMvn c37(Zm G]`Mԙ3cIE,٩}w*Ѹ,l:V4&q3DTZ#7P@$Q*Ms/0bg B%[FLOsͻϛqѶ YZ