samba-client-libs-4.17.12+git.462.df636292e62-150500.3.23.7<>, 8f p9|<d]5[S IiE:U,xic,`z** XRFg޴_T_`) Sx;k!Rz8Q&a%| 3FS3Lp?/t|aEoo6';4G/оΥ~IL?vD߽\8bGC:(؇sϑ ƪ~?X/De@No,mϚwcn׉s*.i)X+"c%_6~ >C?d0 > U 9PV`u4u u u u u !u#u%u((Lu* _tc.(Y8`9:>@BF7GLuH uIuXlYhZ"["\%`u]'4u^1^b1c2;d2e2f2l2u2uv4cwj$uxkuym zCsamba-client-libs4.17.12+git.462.df636292e62150500.3.23.7Samba client librariesThe samba-libs package contains the libraries needed by samba client programs.f h01-ch4a6cSUSE Linux Enterprise 15SUSE LLC GPL-3.0-or-laterhttps://www.suse.com/Development/Libraries/C and C++https://www.samba.org/linuxx86_64X`(`(XXX7XXPhXXXx`9 -`H8(XXhhXx(px`hXX(P(h(h)8+X8@Hx(XxX'XX#XHHX`)(8(`P(X8XX0rM(((X(X88Af f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f 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-binding.so.0.0.1libdcerpc-server-core.so.0.0.1libdcerpc.so.0.0.1libndr-krb5pac.so.0.0.1libndr-nbt.so.0.0.1libndr-standard.so.0.0.1libndr.so.3.0.0libnetapi.so.1.0.0libsamba-credentials.so.1.0.0libsamba-errors.so.1.0.0libsamba-hostconfig.so.0.0.1libsamba-passdb.so.0.28.0libsamba-util.so.0.0.1libsamdb.so.0.0.1libsmbclient.so.0.7.0libsmbconf.so.0.0.1libsmbldap.so.2.1.0libtevent-util.so.0.0.1libwbclient.so.0.15rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootsamba-4.17.12+git.462.df636292e62-150500.3.23.7.src.rpmlibCHARSET3-samba4.so()(64bit)libCHARSET3-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libMESSAGING-SEND-samba4.so()(64bit)libMESSAGING-SEND-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libMESSAGING-samba4.so()(64bit)libMESSAGING-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libaddns-samba4.so()(64bit)libaddns-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libads-samba4.so()(64bit)libads-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libasn1util-samba4.so()(64bit)libasn1util-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libauth-samba4.so()(64bit)libauth-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libauthkrb5-samba4.so()(64bit)libauthkrb5-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libcli-cldap-samba4.so()(64bit)libcli-cldap-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libcli-ldap-common-samba4.so()(64bit)libcli-ldap-common-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libcli-ldap-samba4.so()(64bit)libcli-ldap-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libcli-nbt-samba4.so()(64bit)libcli-nbt-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libcli-smb-common-samba4.so()(64bit)libcli-smb-common-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libcli-spoolss-samba4.so()(64bit)libcli-spoolss-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libcliauth-samba4.so()(64bit)libcliauth-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libclidns-samba4.so()(64bit)libclidns-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libcluster-samba4.so()(64bit)libcluster-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libcmdline-contexts-samba4.so()(64bit)libcmdline-contexts-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libcmdline-samba4.so()(64bit)libcmdline-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libcommon-auth-samba4.so()(64bit)libcommon-auth-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libdbwrap-samba4.so()(64bit)libdbwrap-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libdcerpc-binding.so.0()(64bit)libdcerpc-binding.so.0(DCERPC_BINDING_0.0.1)(64bit)libdcerpc-binding0libdcerpc-pkt-auth-samba4.so()(64bit)libdcerpc-pkt-auth-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libdcerpc-samba-samba4.so()(64bit)libdcerpc-samba-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libdcerpc-samba4.so()(64bit)libdcerpc-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libdcerpc-server-core.so.0()(64bit)libdcerpc-server-core.so.0(DCERPC_SERVER_CORE_0.0.1)(64bit)libdcerpc.so.0()(64bit)libdcerpc.so.0(DCERPC_0.0.1)(64bit)libdcerpc0libevents-samba4.so()(64bit)libevents-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libflag-mapping-samba4.so()(64bit)libflag-mapping-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libgenrand-samba4.so()(64bit)libgenrand-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libgensec-samba4.so()(64bit)libgensec-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libgpo-samba4.so()(64bit)libgpo-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libgse-samba4.so()(64bit)libgse-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libhttp-samba4.so()(64bit)libhttp-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libinterfaces-samba4.so()(64bit)libinterfaces-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libiov-buf-samba4.so()(64bit)libiov-buf-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libkrb5samba-samba4.so()(64bit)libkrb5samba-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libldbsamba-samba4.so()(64bit)libldbsamba-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)liblibcli-lsa3-samba4.so()(64bit)liblibcli-lsa3-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)liblibcli-netlogon3-samba4.so()(64bit)liblibcli-netlogon3-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)liblibsmb-samba4.so()(64bit)liblibsmb-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libmessages-dgm-samba4.so()(64bit)libmessages-dgm-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libmessages-util-samba4.so()(64bit)libmessages-util-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libmscat-samba4.so()(64bit)libmscat-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libmsghdr-samba4.so()(64bit)libmsghdr-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libmsrpc3-samba4.so()(64bit)libmsrpc3-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libndr-krb5pac.so.0()(64bit)libndr-krb5pac.so.0(NDR_KRB5PAC_0.0.1)(64bit)libndr-krb5pac0libndr-nbt.so.0()(64bit)libndr-nbt.so.0(NDR_NBT_0.0.1)(64bit)libndr-nbt0libndr-samba-samba4.so()(64bit)libndr-samba-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libndr-samba4.so()(64bit)libndr-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libndr-standard.so.0()(64bit)libndr-standard.so.0(NDR_STANDARD_0.0.1)(64bit)libndr-standard0libndr.so.3()(64bit)libndr.so.3(NDR_0.0.1)(64bit)libndr.so.3(NDR_0.0.2)(64bit)libndr.so.3(NDR_0.0.3)(64bit)libndr.so.3(NDR_0.0.4)(64bit)libndr.so.3(NDR_0.0.5)(64bit)libndr.so.3(NDR_0.0.6)(64bit)libndr.so.3(NDR_0.0.7)(64bit)libndr.so.3(NDR_0.0.8)(64bit)libndr.so.3(NDR_0.0.9)(64bit)libndr.so.3(NDR_0.1.0)(64bit)libndr.so.3(NDR_0.1.1)(64bit)libndr.so.3(NDR_0.1.2)(64bit)libndr.so.3(NDR_0.2.0)(64bit)libndr.so.3(NDR_0.2.1)(64bit)libndr.so.3(NDR_1.0.0)(64bit)libndr.so.3(NDR_1.0.1)(64bit)libndr.so.3(NDR_1.0.2)(64bit)libndr.so.3(NDR_2.0.0)(64bit)libndr.so.3(NDR_3.0.0)(64bit)libndr2libnet-keytab-samba4.so()(64bit)libnet-keytab-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libnetapi.so.1()(64bit)libnetapi.so.1(NETAPI_1.0.0)(64bit)libnetapi0libnetif-samba4.so()(64bit)libnetif-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libnpa-tstream-samba4.so()(64bit)libnpa-tstream-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libprinting-migrate-samba4.so()(64bit)libprinting-migrate-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libregistry-samba4.so()(64bit)libregistry-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libreplace-samba4.so()(64bit)libreplace-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libsamba-cluster-support-samba4.so()(64bit)libsamba-cluster-support-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libsamba-credentials.so.1()(64bit)libsamba-credentials.so.1(SAMBA_CREDENTIALS_1.0.0)(64bit)libsamba-credentials1libsamba-debug-samba4.so()(64bit)libsamba-debug-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libsamba-errors.so.1()(64bit)libsamba-errors.so.1(SAMBA_ERRORS_1.0.0)(64bit)libsamba-errors0libsamba-hostconfig.so.0()(64bit)libsamba-hostconfig.so.0(SAMBA_HOSTCONFIG_0.0.1)(64bit)libsamba-hostconfig0libsamba-modules-samba4.so()(64bit)libsamba-modules-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libsamba-passdb.so.0()(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.2.0)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.24.1)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.24.2)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.25.0)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.26.0)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.27.0)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.27.1)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.27.2)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.28.0)(64bit)libsamba-passdb0libsamba-security-samba4.so()(64bit)libsamba-security-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libsamba-sockets-samba4.so()(64bit)libsamba-sockets-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libsamba-util.so.0()(64bit)libsamba-util.so.0(SAMBA_UTIL_0.0.1)(64bit)libsamba-util0libsamba3-util-samba4.so()(64bit)libsamba3-util-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libsamdb-common-samba4.so()(64bit)libsamdb-common-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libsamdb.so.0()(64bit)libsamdb.so.0(SAMDB_0.0.1)(64bit)libsamdb0libsecrets3-samba4.so()(64bit)libsecrets3-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libserver-id-db-samba4.so()(64bit)libserver-id-db-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libserver-role-samba4.so()(64bit)libserver-role-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libsmb-transport-samba4.so()(64bit)libsmb-transport-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libsmbclient-raw-samba4.so()(64bit)libsmbclient-raw-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libsmbclient.so.0()(64bit)libsmbclient.so.0(SMBCLIENT_0.1.0)(64bit)libsmbclient.so.0(SMBCLIENT_0.2.0)(64bit)libsmbclient.so.0(SMBCLIENT_0.2.1)(64bit)libsmbclient.so.0(SMBCLIENT_0.2.2)(64bit)libsmbclient.so.0(SMBCLIENT_0.2.3)(64bit)libsmbclient.so.0(SMBCLIENT_0.3.0)(64bit)libsmbclient.so.0(SMBCLIENT_0.3.1)(64bit)libsmbclient.so.0(SMBCLIENT_0.3.2)(64bit)libsmbclient.so.0(SMBCLIENT_0.3.3)(64bit)libsmbclient.so.0(SMBCLIENT_0.4.0)(64bit)libsmbclient.so.0(SMBCLIENT_0.5.0)(64bit)libsmbclient.so.0(SMBCLIENT_0.6.0)(64bit)libsmbclient.so.0(SMBCLIENT_0.7.0)(64bit)libsmbclient0libsmbconf.so.0()(64bit)libsmbconf.so.0(SMBCONF_0.0.1)(64bit)libsmbconf0libsmbd-base-samba4.so()(64bit)libsmbd-base-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libsmbd-shim-samba4.so()(64bit)libsmbd-shim-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libsmbldap.so.2()(64bit)libsmbldap.so.2(SMBLDAP_0)(64bit)libsmbldap.so.2(SMBLDAP_1)(64bit)libsmbldap.so.2(SMBLDAP_2)(64bit)libsmbldap.so.2(SMBLDAP_2.1.0)(64bit)libsmbldap2libsmbldaphelper-samba4.so()(64bit)libsmbldaphelper-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libsocket-blocking-samba4.so()(64bit)libsocket-blocking-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libsys-rw-samba4.so()(64bit)libsys-rw-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libtalloc-report-printf-samba4.so()(64bit)libtalloc-report-printf-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libtdb-wrap-samba4.so()(64bit)libtdb-wrap-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libtevent-util.so.0()(64bit)libtevent-util.so.0(TEVENT_UTIL_0.0.1)(64bit)libtevent-util0libtime-basic-samba4.so()(64bit)libtime-basic-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libtrusts-util-samba4.so()(64bit)libtrusts-util-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libutil-reg-samba4.so()(64bit)libutil-reg-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libutil-setid-samba4.so()(64bit)libutil-setid-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libutil-tdb-samba4.so()(64bit)libutil-tdb-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libwbclient.so.0()(64bit)libwbclient.so.0(WBCLIENT_0.10)(64bit)libwbclient.so.0(WBCLIENT_0.11)(64bit)libwbclient.so.0(WBCLIENT_0.12)(64bit)libwbclient.so.0(WBCLIENT_0.13)(64bit)libwbclient.so.0(WBCLIENT_0.14)(64bit)libwbclient.so.0(WBCLIENT_0.15)(64bit)libwbclient.so.0(WBCLIENT_0.9)(64bit)libwbclient0samba-client-libssamba-client-libs(x86-64)@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    /sbin/ldconfig/sbin/ldconfigld-linux-x86-64.so.2()(64bit)ld-linux-x86-64.so.2(GLIBC_2.3)(64bit)libCHARSET3-samba4.so()(64bit)libCHARSET3-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libMESSAGING-SEND-samba4.so()(64bit)libMESSAGING-SEND-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libMESSAGING-samba4.so()(64bit)libMESSAGING-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libacl.so.1()(64bit)libacl.so.1(ACL_1.0)(64bit)libaddns-samba4.so()(64bit)libaddns-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libads-samba4.so()(64bit)libads-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libasn1util-samba4.so()(64bit)libasn1util-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libauth-samba4.so()(64bit)libauth-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libauthkrb5-samba4.so()(64bit)libauthkrb5-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libavahi-client.so.3()(64bit)libavahi-common.so.3()(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.10)(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.15)(64bit)libc.so.6(GLIBC_2.17)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.27)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.2)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libc.so.6(GLIBC_2.5)(64bit)libc.so.6(GLIBC_2.6)(64bit)libc.so.6(GLIBC_2.7)(64bit)libc.so.6(GLIBC_2.8)(64bit)libcli-cldap-samba4.so()(64bit)libcli-cldap-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libcli-ldap-common-samba4.so()(64bit)libcli-ldap-common-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libcli-ldap-samba4.so()(64bit)libcli-ldap-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libcli-nbt-samba4.so()(64bit)libcli-nbt-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libcli-smb-common-samba4.so()(64bit)libcli-smb-common-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libcli-spoolss-samba4.so()(64bit)libcli-spoolss-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libcliauth-samba4.so()(64bit)libcliauth-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libclidns-samba4.so()(64bit)libclidns-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libcluster-samba4.so()(64bit)libcluster-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libcom_err.so.2()(64bit)libcommon-auth-samba4.so()(64bit)libcommon-auth-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libdbwrap-samba4.so()(64bit)libdbwrap-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libdcerpc-binding.so.0()(64bit)libdcerpc-binding.so.0(DCERPC_BINDING_0.0.1)(64bit)libdcerpc-pkt-auth-samba4.so()(64bit)libdcerpc-pkt-auth-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libdcerpc-samba-samba4.so()(64bit)libdcerpc-samba-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libdcerpc.so.0()(64bit)libdcerpc.so.0(DCERPC_0.0.1)(64bit)libdl.so.2()(64bit)libdl.so.2(GLIBC_2.2.5)(64bit)libflag-mapping-samba4.so()(64bit)libflag-mapping-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libgenrand-samba4.so()(64bit)libgenrand-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libgensec-samba4.so()(64bit)libgensec-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libgnutls.so.30()(64bit)libgnutls.so.30(GNUTLS_3_4)(64bit)libgnutls.so.30(GNUTLS_3_6_10)(64bit)libgnutls.so.30(GNUTLS_3_6_13)(64bit)libgnutls.so.30(GNUTLS_3_6_3)(64bit)libgse-samba4.so()(64bit)libgse-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libgssapi_krb5.so.2()(64bit)libgssapi_krb5.so.2(gssapi_krb5_2_MIT)(64bit)libhttp-samba4.so()(64bit)libhttp-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libinterfaces-samba4.so()(64bit)libinterfaces-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libiov-buf-samba4.so()(64bit)libiov-buf-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libk5crypto.so.3()(64bit)libk5crypto.so.3(k5crypto_3_MIT)(64bit)libkrb5.so.3()(64bit)libkrb5.so.3(krb5_3_MIT)(64bit)libkrb5samba-samba4.so()(64bit)libkrb5samba-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)liblber-2.4.so.2()(64bit)libldap_r-2.4.so.2()(64bit)libldb.so.2()(64bit)libldb.so.2(LDB_0.9.10)(64bit)libldb.so.2(LDB_0.9.15)(64bit)libldb.so.2(LDB_0.9.16)(64bit)libldb.so.2(LDB_0.9.23)(64bit)libldb.so.2(LDB_1.1.1)(64bit)libldb.so.2(LDB_1.1.19)(64bit)libldb.so.2(LDB_1.1.30)(64bit)libldb.so.2(LDB_1.3.0)(64bit)libldb.so.2(LDB_2.6.1)(64bit)libldb.so.2(LDB_2.6.2)(64bit)libldbsamba-samba4.so()(64bit)libldbsamba-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)liblibcli-lsa3-samba4.so()(64bit)liblibcli-lsa3-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)liblibcli-netlogon3-samba4.so()(64bit)liblibcli-netlogon3-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)liblibsmb-samba4.so()(64bit)liblibsmb-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libmessages-dgm-samba4.so()(64bit)libmessages-dgm-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libmessages-util-samba4.so()(64bit)libmessages-util-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libmsghdr-samba4.so()(64bit)libmsghdr-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libmsrpc3-samba4.so()(64bit)libmsrpc3-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libndr-krb5pac.so.0()(64bit)libndr-krb5pac.so.0(NDR_KRB5PAC_0.0.1)(64bit)libndr-nbt.so.0()(64bit)libndr-nbt.so.0(NDR_NBT_0.0.1)(64bit)libndr-samba-samba4.so()(64bit)libndr-samba-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libndr-samba4.so()(64bit)libndr-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libndr-standard.so.0()(64bit)libndr-standard.so.0(NDR_STANDARD_0.0.1)(64bit)libndr.so.3()(64bit)libndr.so.3(NDR_0.0.1)(64bit)libndr.so.3(NDR_0.0.3)(64bit)libndr.so.3(NDR_0.0.4)(64bit)libndr.so.3(NDR_0.0.5)(64bit)libndr.so.3(NDR_0.0.6)(64bit)libndr.so.3(NDR_0.0.7)(64bit)libndr.so.3(NDR_0.0.8)(64bit)libndr.so.3(NDR_0.0.9)(64bit)libndr.so.3(NDR_0.1.1)(64bit)libndr.so.3(NDR_0.1.2)(64bit)libndr.so.3(NDR_0.2.0)(64bit)libndr.so.3(NDR_0.2.1)(64bit)libndr.so.3(NDR_1.0.0)(64bit)libndr.so.3(NDR_1.0.1)(64bit)libndr.so.3(NDR_1.0.2)(64bit)libndr.so.3(NDR_2.0.0)(64bit)libnetif-samba4.so()(64bit)libnetif-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libnpa-tstream-samba4.so()(64bit)libnpa-tstream-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libnscd.so.1()(64bit)libnscd.so.1(LIBNSCD_1.0)(64bit)libpam.so.0()(64bit)libpam.so.0(LIBPAM_1.0)(64bit)libpopt.so.0()(64bit)libpopt.so.0(LIBPOPT_0)(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.12)(64bit)libpthread.so.0(GLIBC_2.2.5)(64bit)libpthread.so.0(GLIBC_2.3.2)(64bit)libreplace-samba4.so()(64bit)libreplace-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libresolv.so.2()(64bit)libresolv.so.2(GLIBC_2.2.5)(64bit)libsamba-cluster-support-samba4.so()(64bit)libsamba-cluster-support-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libsamba-credentials.so.1()(64bit)libsamba-credentials.so.1(SAMBA_CREDENTIALS_1.0.0)(64bit)libsamba-debug-samba4.so()(64bit)libsamba-debug-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libsamba-errors.so.1()(64bit)libsamba-errors.so.1(SAMBA_ERRORS_1.0.0)(64bit)libsamba-hostconfig.so.0()(64bit)libsamba-hostconfig.so.0(SAMBA_HOSTCONFIG_0.0.1)(64bit)libsamba-modules-samba4.so()(64bit)libsamba-modules-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libsamba-passdb.so.0()(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.2.0)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.27.1)(64bit)libsamba-security-samba4.so()(64bit)libsamba-security-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libsamba-sockets-samba4.so()(64bit)libsamba-sockets-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libsamba-util.so.0()(64bit)libsamba-util.so.0(SAMBA_UTIL_0.0.1)(64bit)libsamba3-util-samba4.so()(64bit)libsamba3-util-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libsamdb-common-samba4.so()(64bit)libsamdb-common-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libsamdb.so.0()(64bit)libsamdb.so.0(SAMDB_0.0.1)(64bit)libsecrets3-samba4.so()(64bit)libsecrets3-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libserver-id-db-samba4.so()(64bit)libserver-id-db-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libserver-role-samba4.so()(64bit)libserver-role-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libsmb-transport-samba4.so()(64bit)libsmb-transport-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libsmbclient-raw-samba4.so()(64bit)libsmbclient-raw-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libsmbconf.so.0()(64bit)libsmbconf.so.0(SMBCONF_0.0.1)(64bit)libsmbd-shim-samba4.so()(64bit)libsmbd-shim-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libsmbldap.so.2()(64bit)libsmbldap.so.2(SMBLDAP_0)(64bit)libsmbldap.so.2(SMBLDAP_1)(64bit)libsmbldaphelper-samba4.so()(64bit)libsmbldaphelper-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libsocket-blocking-samba4.so()(64bit)libsocket-blocking-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libsys-rw-samba4.so()(64bit)libsys-rw-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libsystemd.so.0()(64bit)libsystemd.so.0(LIBSYSTEMD_209)(64bit)libtalloc-report-printf-samba4.so()(64bit)libtalloc-report-printf-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libtalloc.so.2()(64bit)libtalloc.so.2(TALLOC_2.0.2)(64bit)libtalloc.so.2(TALLOC_2.1.0)(64bit)libtasn1.so.6()(64bit)libtasn1.so.6(LIBTASN1_0_3)(64bit)libtdb-wrap-samba4.so()(64bit)libtdb-wrap-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libtdb.so.1()(64bit)libtdb.so.1(TDB_1.2.1)(64bit)libtdb.so.1(TDB_1.2.2)(64bit)libtdb.so.1(TDB_1.2.5)(64bit)libtdb.so.1(TDB_1.3.0)(64bit)libtdb.so.1(TDB_1.3.11)(64bit)libtdb.so.1(TDB_1.3.17)(64bit)libtevent-util.so.0()(64bit)libtevent-util.so.0(TEVENT_UTIL_0.0.1)(64bit)libtevent.so.0()(64bit)libtevent.so.0(TEVENT_0.11.0)(64bit)libtevent.so.0(TEVENT_0.12.0)(64bit)libtevent.so.0(TEVENT_0.13.0)(64bit)libtevent.so.0(TEVENT_0.9.12)(64bit)libtevent.so.0(TEVENT_0.9.13)(64bit)libtevent.so.0(TEVENT_0.9.14)(64bit)libtevent.so.0(TEVENT_0.9.16)(64bit)libtevent.so.0(TEVENT_0.9.20)(64bit)libtevent.so.0(TEVENT_0.9.21)(64bit)libtevent.so.0(TEVENT_0.9.30)(64bit)libtevent.so.0(TEVENT_0.9.31)(64bit)libtevent.so.0(TEVENT_0.9.37)(64bit)libtevent.so.0(TEVENT_0.9.9)(64bit)libtime-basic-samba4.so()(64bit)libtime-basic-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libtrusts-util-samba4.so()(64bit)libtrusts-util-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libutil-reg-samba4.so()(64bit)libutil-reg-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libutil-setid-samba4.so()(64bit)libutil-setid-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libutil-tdb-samba4.so()(64bit)libutil-tdb-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_X86_64_SAMBA4)(64bit)libwbclient.so.0()(64bit)libwbclient.so.0(WBCLIENT_0.13)(64bit)libwbclient.so.0(WBCLIENT_0.9)(64bit)libz.so.1()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.3ee@ez@e[J@e6`@eSd@d.@dd-@d@dd@d6@d@d @cvcvc@c@c @c@cctc5cM@b@b@b@ba@banopower@suse.comnopower@suse.comscabrero@suse.descabrero@suse.descabrero@suse.denopower@suse.comscabrero@suse.descabrero@suse.descabrero@suse.denopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comscabrero@suse.dedmulder@suse.comscabrero@suse.denopower@suse.comnopower@suse.comscabrero@suse.denopower@suse.comnopower@suse.comscabrero@suse.denopower@suse.comscabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comddiss@suse.comnopower@suse.comdmulder@suse.comdmulder@suse.comnopower@suse.comscabrero@suse.descabrero@suse.dedimstar@opensuse.orgscabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comnopower@suse.comnopower@suse.comscabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comnopower@suse.comscabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.denopower@suse.comscabrero@suse.deddiss@suse.comddiss@suse.comddiss@suse.comscabrero@suse.descabrero@suse.dedmulder@suse.comnopower@suse.comscabrero@suse.descabrero@suse.dedmulder@suse.comscabrero@suse.descabrero@suse.denopower@suse.comnopower@suse.comnopower@suse.comdmulder@suse.comscabrero@suse.denopower@suse.comddiss@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comscabrero@suse.denopower@suse.comnopower@suse.comjmcdonough@suse.comnopower@suse.comscabrero@suse.denopower@suse.comnopower@suse.comddiss@suse.comddiss@suse.comnopower@suse.comnopower@suse.comddiss@suse.comnopower@suse.comdmulder@suse.comdmulder@suse.comddiss@suse.comscabrero@suse.dedmulder@suse.comddiss@suse.comnopower@suse.comjengelh@inai.dedmulder@suse.comscabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comdmulder@suse.comdmulder@suse.comjmcdonough@suse.comdmulder@suse.comscabrero@suse.dedmulder@suse.comscabrero@suse.dedmulder@suse.comdmulder@suse.comvcizek@suse.comdmulder@suse.comdmulder@suse.comnopower@suse.comscabrero@suse.dejmcdonough@suse.comscabrero@suse.deaaptel@suse.comjengelh@inai.dedimstar@opensuse.orgdmulder@suse.comjmcdonough@suse.comdavid.mulder@suse.comjmcdonough@suse.comaaptel@suse.comdmulder@suse.comscabrero@suse.comscabrero@suse.comkukuk@suse.dedavid.mulder@suse.comscabrero@suse.comrbrown@suse.comdmulder@suse.comscabrero@suse.comdimstar@opensuse.orgscabrero@suse.comaaptel@suse.comnopower@suse.comnopower@suse.comaaptel@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comddiss@suse.comnopower@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comdmulder@suse.comnopower@suse.comjmcdonough@suse.comaaptel@suse.comkukuk@suse.comkukuk@suse.denopower@suse.comaaptel@suse.comdmulder@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comddiss@suse.comjmcdonough@suse.comddiss@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comjmcdonough@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comtchvatal@suse.comlmuelle@suse.comnopower@suse.comcrrodriguez@opensuse.orglmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comnoel.power@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comnopower@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.commpluskal@suse.comlmuelle@suse.comnopower@suse.deddiss@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.denopower@suse.delmuelle@suse.comnopower@suse.deddiss@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.com- fd_handle_destructor() panics within an smbd_smb2_close() if vfs_stat_fsp() fails in fd_close(); (bso#15527); (bsc#1219937).- Remove -x from bash shebang update-apparmor-samba-profile; (bsc#1218431).- Add new idmap_nss option 'use_upn' for those NSS modules able to handle UPNs or DOMAIN/user name format; (bsc#1215369); - Avoid unnecessary locking in idmap parent setup; (bsc#1215369);- Add "net offlinejoin composeodj" command; (bsc#1214076);- Update to samba 4.17.12 * Weird filename can cause assert to fail in openat_pathref_fsp_nosymlink(); (bso#15419); * reply_sesssetup_and_X() can dereference uninitialized tmp pointer; (bso#15420); * Missing return in reply_exit_done(); (bso#15430); * TREE_CONNECT without SETUP causes smbd to use uninitialized pointer; (bso#15432); * Improve GetNChanges to address some (but not all "Azure AD Connect") syncronisation tool looping during the initial user sync phase; (bso#15401); * Samba replication logs show (null) DN; (bso#15407); * Spotlight sometimes returns no results on latest macOS; (bso#15342); * Renaming results in NT_STATUS_SHARING_VIOLATION if previously attempted to remove the destination; (bso#15417); * Spotlight results return wrong date in result list; (bso#15427); * macOS mdfind returns only 50 results; (bso#15463); * 2-3min delays at reconnect with smb2_validate_sequence_number: bad message_id 2; (bso#15346); * samba-tool ntacl get segfault if aio_pthread appended; (bso#15441); * DCERPC_PKT_CO_CANCEL and DCERPC_PKT_ORPHANED can't be parsed; (bso#15446); * File doesn't show when user doesn't have permission if aio_pthread is loaded; (bso#15453); * net ads lookup (with unspecified realm) fails; (bso#15384); (bsc#1213826); * Regression DFS not working with widelinks = true; (bso#15435); (bsc#1213607); * ctdb_killtcp fails to work with --enable-pcap and libpcap 1.9.1; (bso#15451); * mdssvc: Do an early talloc_free() in _mdssvc_open(); (bso#15449); * Windows client join fails if a second container CN=System exists somewhere; (bso#9959); - Fix crossing automounter mount points; (bsc#1215212);- CVE-2023-4091: samba: Client can truncate file with read-only permissions; (bsc#1215904); (bso#15439). - CVE-2023-42669: samba: rpcecho, enabled and running in AD DC, allows blocking sleep on request; (bso#1215905); (bso#15474). - CVE-2023-42670: samba: The procedure number is out of range when starting Active Directory Users and Computers; (bsc#1215906); (bso#15473). - CVE-2023-3961: samba: Unsanitized client pipe name passed to local_np_connect(); (bsc#1215907); (bso#15422). - CVE-2023-4154: samba: dirsync allows SYSTEM access with only "GUID_DRS_GET_CHANGES" right, not "GUID_DRS_GET_ALL_CHANGES; (bsc#1215908); (bso#15424).- Fix DFS not working with widelinks enabled; (bsc#1213607); (bso#15435);- Move libcluster-samba4.so from samba-libs to samba-client-libs; (bsc#1213940);- net ads lookup with unspecified realm fails; (bso#15384); (bsc#1213826);- secure channel faulty since Windows 10/11 update 07/2023; (bso#15418); (bsc#1213384).- CVE-2022-2127: lm_resp_len not checked properly in winbindd_pam_auth_crap_send; (bso#15072); (bsc#1213174). - CVE-2023-34966: Samba Spotlight mdssvc RPC Request Infinite Loop Denial-of-Service Vulnerability; (bso#15340); (bsc#1213173). - CVE-2023-34967: Samba Spotlight mdssvc RPC Request Type Confusion Denial-of-Service Vulnerability; (bso#15341); (bsc#1213172). - CVE-2023-34968: Spotlight server-side Share Path Disclosure; (bso#15388); (bsc#1213171). - CVE-2023-3347: Samba doesn't require SMB2+ signing if `server signing = mandatory` is set; (bso#15397); (bsc#1213170).- Update to 4.17.9 * Backport --pidl-developer fixes; (bso#15404). * smbd_scavenger crashes when service smbd is stopped; (bso#15275). * vfs_fruit might cause a failing open for delete; (bso#15378). * named crashes on DLZ zone update; (bso#14030). * winbind recurses into itself via rpcd_lsad; (bso#15361). * cli_list loops 100% CPU against pre-lanman2 servers; (bso#15382). * smbclient leaks fds with showacls; (bso#15391). * aes256 smb3 encryption algorithms are not allowed in smb3_sid_parse(); (bso#15374). * winbindd gets stuck on NT_STATUS_RPC_SEC_PKG_ERROR; (bso#15413). * smbget memory leak if failed to download files recursively; (bso#15403).- Update to 4.17.8 * log flood: smbd_calculate_access_mask_fsp: Access denied: message level should be lower; (bso#15302). * Floating point exception (FPE) via cli_pull_send at source3/libsmb/clireadwrite.c; (bso#15306). * test_tstream_more_tcp_user_timeout_spin fails intermittently on Rackspace GitLab runners; (bso#15328). * Reduce flapping of ridalloc test; (bso#15329). * large_ldap test is unreliable; (bso#15351). * New filename parser doesn't check veto files smb.conf parameter; (bso#15143). * mdssvc may crash when initializing; (bso#15354). * Large directory optimization broken for non-lcomp path elements; (bso#15313). * streams_depot fails to create streams; (bso#15357). * shadow_copy2 and streams_depot don't play well together; (bso#15358). * wbinfo -u fails on ad dc with >1000 users; (bso#15366). * winbindd idmap child contacts the domain controller without a need; (bso#15317). * idmap_autorid may fail to map sids of trusted domains for the first time; (bso#15318). * idmap_hash doesn't use ID_TYPE_BOTH for reverse mappings; (bso#15319). * net ads search -P doesn't work against servers in other domains; (bso#15323). * DS ACEs might be inherited to unrelated object classes; (bso#15338). * Temporary smbXsrv_tcon_global.tdb can't be parsed; (bso#15353). * Setting veto files = /.*/ break listing directories; (bso#15360); (bsc#1212375). * CVE-2020-25720 [SECURITY] Create Child permission should not allow full write to all attributes (additional changes); (bso#14810). * dsgetdcname: assumes local system uses IPv4; (bso#15325).- Update to 4.17.7 * CVE-2023-0922: Samba AD DC admin tool samba-tool sends passwords in cleartext; (bso#15315); (bsc#1209481). * CVE-2023-0225: Samba AD DC "dnsHostname" attribute can be deleted by unprivileged authenticated users; (bso#15276); (bsc#1209483). * CVE-2023-0614: samba: Access controlled AD LDAP attributes can be discovered; (bso#15270); (bsc#1209485). * large_ldap test is inefficient; (bso#15332). * CVE-2020-25720 [SECURITY] Create Child permission should not allow full write to all attributes (additional changes); (bso#14810). - Update to 4.17.6 * streams_xattr is creating unexpected locks on folders; (bso#15314). * Use of the Azure AD Connect cloud sync tool is now supported for password hash synchronisation, allowing Samba AD Domains to synchronise passwords with this popular cloud environment; (bso#10635). * Spotlight doesn't work with latest macOS Ventura; (bso#15299). * New samba-dcerpc architecture does not scale gracefully; (bso#15310). * vfs_ceph incorrectly uses fsp_get_io_fd() instead of fsp_get_pathref_fd() in close and fstat; (bso#15307). * With clustering enabled samba-bgqd can core dump due to use after free; (bso#15293). * fd_load() function implicitly closes the fd where it should not; (bso#15311). - Update to 4.17.5 * smbc_getxattr() return value is incorrect; (bso#14808). * Compound SMB2 FLUSH+CLOSE requests from MacOSX are not handled correctly; (bso#15172). * synthetic_pathref AFP_AfpInfo failed errors; (bso#15210). * samba-tool gpo listall fails IPv6 only - finddcs() fails to find DC when there is only an AAAA record for the DC in DNS; (bso#15226). * smbd crashes if an FSCTL request is done on a stream handle; (bso#15236). * DFS links don't work anymore on Mac clients since 4.17; (bso#15277). * vfs_virusfilter segfault on access, directory edgecase (accessing NULL value); (bso#15283). * CVE-2022-38023 [SECURITY] Samba should refuse RC4 (aka md5) based SChannel on NETLOGON (additional changes); (bso#15240). * %U for include directive doesn't work for share listing (netshareenum); (bso#15243). * Shares missing from netshareenum response in samba 4.17.4; (bso#15266). * ctdb: use-after-free in run_proc; (bso#15269). * irpc_destructor may crash during shutdown; (bso#15280). * auth3_generate_session_info_pac leaks wbcAuthUserInfo; (bso#15286). * smbclient segfaults with use after free on an optimized build; (bso#15268). * smbstatus leaking files in msg.sock and msg.lock; (bso#15282). * Leak in wbcCtxPingDc2; (bso#15164). * Access based share enum does not work in Samba 4.16+; (bso#15265). * Crash during share enumeration; (bso#15267). * rep_listxattr on FreeBSD does not properly check for reads off end of returned buffer; (bso#15271). * Avoid relying on C89 features in a few places; (bso#15281).- Make (32bit) samba-libs conflict with old samba-ad-dc-libs package to satisfy installcheck.- Make samba-libs conflict with old samba-ad-dc-libs package to satisfy installcheck.- Remove non functioning ifup/ifdown samba-winbindd scripts; (bsc#1207414).- libdsdb-module-samba4 should be packaged as part of samba-libs and not samba-ad-dc-libs. Additionally no need for it to be removed conditionally.- Clean up logic for PAM migration settings in spec file.- Change with_dc default to 0 (for non TW builds), ADDC feature is deprecated and will no longer be included in >= SLE15-SP5; (jsc#PED-1122).- Update to 4.17.4 * CVE-2022-44640 Upstream Heimdal free of user-controlled pointer in FAST; (bsc#14929); * CVE-2021-20251 Bad password count not incremented atomically; (bsc#14611); * CVE-2022-42898 krb5_pac_parse() buffer parsing vulnerability; (bsc#15203); * CVE-2022-37966 rc4-hmac Kerberos session keys issued to modern servers; (bso#15237); * CVE-2022-37967 Kerberos constrained delegation ticket forgery possible against Samba AD DC; (bso#15231); * CVE-2022-38023 RC4/HMAC-MD5 NetLogon Secure Channel is weak and should be avoided; (bso#15240); * pam_winbind uses time_t and pointers assuming they are of the same size; (bso#15224); * Heimdal session key selection in AS-REQ examines wrong entry; (bso#15219); * filter-subunit is inefficient with large numbers of knownfails; (bso#15258); * smbd allows setting FILE_ATTRIBUTE_TEMPORARY on directories; (bso#15252); * The KDC logic arround msDs-supportedEncryptionTypes differs from Windows; (bso#13135); * libnet: change_password() doesn't work with dcerpc_samr_ChangePasswordUser4(); (bso#15206); * Heimdal session key selection in AS-REQ examines wrong entry; (bso#15219); * Memory leak in snprintf replacement functions; (bso#15230); * RODC doesn't reset badPwdCount reliable via an RWDC (CVE-2021-20251 regression); (bso#15253); * Prevent EBADF errors with vfs_glusterfs; (bso#15198); * %U for include directive doesn't work for share listing (netshareenum); (bso#15243); * Stack smashing in net offlinejoin requestodj; (bso#15257); * Windows 11 22H2 and Samba-AD 4.15 Kerberos login issue; (bso#15197); * Heimdal session key selection in AS-REQ examines wrong entry; (bso#15219); - Remove deprecated if-{down,up} scripts; (bsc#1206444); - Adjust the systemd drop-in file for named service; (bsc#1201689); * Paths are additive so do not repeat paths from named.service * Prefix the samba DLZ directory with "-" to ignore this path if it does not exists- Introduce without-smb1-server spec flag; (bsc#1205104); - Update to 4.17.3 * CVE-2022-42898: Samba buffer overflow vulnerabilities on 32-bit systems; (bsc#1205126); (bso#15203); - Replace obsolete python-gpgme with python-gpg * Upstream replaced it in v4.9.5 -- bso#13728 - Update to 4.17.2 * CVE-2022-3592 [SECURITY] samba: Wide links protection broken; (bso#15207); (bsc#1204499). * CVE-2022-3437 [SECURITY] samba: Buffer overflow in Heimdal unwrap_des3();(bso#15134); (bsc#1204254). - Update to 4.17.1 * CVE-2021-20251 [SECURITY] Bad password count not incremented atomically; (bso#14611). * smbXsrv_connection_shutdown_send result leaked; (bso#15174). * Flush on a named stream never completes; (bso#15182). * Permission denied calling SMBC_getatr when file not exists; (bso#15195). * Samba 4.5 sometimes cannot be upgraded to Samba 4.6 or later over DRS: WERROR_DS_DRA_MISSING_PARENT due to faulty GET_ANC; (bso#15189). * pytest: add file removal helpers for TestCaseInTempDir; (bso#15191). * CVE-2021-20251 [SECURITY] Bad password count not incremented atomically; (bso#14611). * Samba 4.5 sometimes cannot be upgraded to Samba 4.6 or later over DRS: WERROR_DS_DRA_MISSING_PARENT due to faulty GET_ANC; (bso#15189). * Flush on a named stream never completes; (bso#15182). * vfs_gpfs silently garbles timestamps > year 2106; (bso#15151). * CVE-2021-20251 [SECURITY] Bad password count not incremented atomically; (bso#14611). * multi-channel socket passing may hit a race if one of the involved processes already existed; (bso#15200). * memory leak on temporary of struct imessaging_post_state and struct tevent_immediate on struct imessaging_context (in rpcd_spoolss and maybe others); (bso#15201). * Since popt1.19 various use after free errors using result of poptGetArg are now exposed; (bso#15205); (boo#1204279). * Remove special case for O_CREAT in SMB_VFS_OPENAT from vfs_glusterfs; (bso#15192). * GETPWSID in memory cache grows indefinetly with each NTLM auth; (bso#15169). * CVE-2021-20251 [SECURITY] Bad password count not incremented atomically; (bso#14611). - Install a systemd drop-in file for named service to allow read/write access to the DLZ directory; (bsc#1201689); - Fix use after free errors resulting from using return of poptGetArg exposed since popt-1.19; (boo#1204279); (bso#15205). - s3: smbd: Fix memory leak in smbd_server_connection_terminate_done(); (bso#15174). - Disable SMB1 for tumbleweed builds. - Update to 4.17.0 * acl_xattr VFS module may unintentionally use filesystem permissions instead of ACL from xattr; (bso#15126). * Missing SMB2-GETINFO access checks from MS-SMB2 3.3.5.20.1; (bso#15153). * assert failed: !is_named_stream(smb_fname)") at ../../lib/util/fault.c:197; (bso#15161). * acl_xattr VFS module may unintentionally use filesystem permissions instead of ACL from xattr; (bso#15126). * assert failed: !is_named_stream(smb_fname)") at ../../lib/util/fault.c:197; (bso#15161). * Cross-node multi-channel reconnects result in SMB2 Negotiate returning NT_STATUS_NOT_SUPPORTED; (bso#15159). * winbind at info level debug can coredump when processing wb_lookupusergroups; (bso#15160). * Make use of glfs_*at() API calls in vfs_glusterfs; (bso#15157). * Possible use after free of connection_struct when iterating smbd_server_connection->connections; (bso#15128). * `net usershare add` fails with flag works with --long but fails with -l; (bso#15145). * acl_xattr VFS module may unintentionally use filesystem permissions instead of ACL from xattr; (bso#15126). * Performance regression on contended path based operations; (bso#15125). * Missing READ_LEASE break could cause data corruption; (bso#15148). * libsamba-errors uses a wrong version number; (bso#15141). * SMB1 negotiation can fail to handle connection errors; (bso#15152). * New filename parser doesn't check veto files smb.conf parameter; (bso#15143). * 4.17.rc1 still uses symlink-race prone unix_convert(); (bso#15144). * Backport fileserver related changed to 4.17.0rc2; (bso#15146). * Manpage for smbstatus json is missing; (bso#15147). * Backport fileserver related changed to 4.17.0rc2; (bso#15146). * Performance regression on contended path based operations; (bso#15125). * Backport fileserver related changed to 4.17.0rc2; (bso#15146). * Fix issues found by coverity in smbstatus json code; (bso#15140). * Backport fileserver related changed to 4.17.0rc2; (bso#15146). - Migration to /usr/etc: Saving user changed configuration files in /etc and restoring them while an RPM update. - Update to 4.16.4 * CVE-2022-2031: Samba AD users can bypass certain restrictions associated with changing passwords; (bsc#1201495); (bso#15047); * CVE-2022-32744: Samba AD users can forge password change requests for any user; (bsc#1201493); (bso#15074); * CVE-2022-32745: Samba AD users can crash the server process with an LDAP add or modify request; (bsc#1201492); (bso#15008); * CVE-2022-32746: Samba AD users can induce a use-after-free in the server process with an LDAP add or modify request; (bsc#1201490); (bso#15009); * CVE-2022-32742: Server memory information leak via SMB1; (bsc#1201496); (bso#15085); - Update to 4.16.3 * Using vfs_streams_xattr and deleting a file causes a panic; (bso#15099); * Add support for bind 9.18; (bso#14986); * logging dsdb audit to specific files does not work; (bso#15076); * Problem when winbind renews Kerberos; (bso#14979); (bsc#1196224); * Samba with new lorikeet-heimdal fails to build on gcc 12.1 in developer mode; (bso#15095); * Crash in streams_xattr because fsp->base_fsp->fsp_name is NULL; (bso#15105); * Crash in rpcd_classic - NULL pointer deference in mangle_is_mangled(); (bso#15118); * smbclient commands del & deltree fail with NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100); (bsc#1200556); * Fix check for chown when processing NFSv4 ACL; (bso#15120); * The pcap background queue process should not be stopped; (bso#15082); * testparm: Fix typo in idmap rangesize check; (bso#15097); * net ads info returns LDAP server and LDAP server name as null; (bso#15106); * ldconfig: /lib64/libsmbconf.so.0 is not a symbolic link; (bso#15108); * CTDB child process logging does not work as expected; (bso#15090); - Update spec file to fix the optional Heimdal DC build - Fix external trusts with MIT Kerberos 1.20 - Add missing samba-client requirement to samba-winbind package; (bsc#1198255); - Move pdb backends from package samba-libs to package samba-client-libs and remove samba-libs requirement from samba-winbind; (bsc#1200964); (bsc#1198255); - Add sysuser-shadow requirement for packages using systemd-sysusers - Use the canonical realm name to refresh the Kerberos tickets; (bsc#1196224); (bso#14979); - Moved logrotate files from user specific directory /etc/logrotate.d to vendor specific directory /usr/etc/logrotate.d. - Update to 4.16.2 * Use pathref fd instead of io fd in vfs_default_durable_cookie; (bso#15042); * vfs_gpfs with vfs_shadowcopy2 fail to restore file if original file had been deleted; (bso#15069); * Reintroduce netgroups support; (bso#15087); * net ads info shows LDAP Server: 0.0.0.0 depending on contacted server; (bso#14674); * Update from 4.15 to 4.16 breaks discovery of [homes] on standalone server from Win and IOS; (bso#15062); * waf produces incorrect names for python extensions with Python 3.11; (bso#15071); * smbclient -E doesn't work as advertised; (bso#15075); * The samba background daemon doesn't refresh the printcap cache on startup; (bso#15081); * Out-by-4 error in smbd read reply max_send clamp; (bso#14443); - Fix samba4.blackbox.net_ads_dns_async test with bind9 >= 9.17.7 - Support building with MIT Kerberos 1.20 - Bronze bit and S4U support with MIT Kerberos 1.20 for Samba AD DC; (CVE-2020-17049); - Resource Based Constrained Delegation (RBCD) for Samba AD DC - Support building with gcc 12.1 - Use requires_eq macro to require the libldb2 version available at samba-dsdb-modules build time; (bsc#1199362); - Update to 4.16.1 * Share and server swapped in smbget password prompt; (bso#14831); * Durable handles won't reconnect if the leased file is written to; (bso#15022); * rmdir silently fails if directory contains unreadable files and hide unreadable is yes; (bso#15023); * SMB2_CLOSE_FLAGS_FULL_INFORMATION fails to return information on renamed file handle; (bso#15038); * Need to describe --builtin-libraries= better (compare with - -bundled-libraries); (bso#8731); * vfs_shadow_copy2 breaks "smbd async dosmode" sync fallback; (bso#14957); * shadow_copy2 fails listing snapshotted dirs with shadow:fixinodes; (bso#15035); * PAM Kerberos authentication incorrectly fails with a clock skew error; (bso#15046); * Username map - samba erroneously applies unix group memberships to user account entries; (bso#15041); * KVNO off by 100000; (bso#14951); * Uninitialized litemask in variable in vfs_gpfs module; (bso#15027); * vfs_gpfs recalls=no option prevents listing files; (bso#15055); * smbd doesn't handle UPNs for looking up names; (bso#15054); - Update update-apparmor-samba-profile script, replace non-printable delimiter with more human readable separator as sed can accept separators that can appear in the input data. - Fix update-apparmor-samba-profile script, sed doesn't like multibyte separators; (bsc#1198309). - Update to 4.16.0 * New samba-dcerpcd binary to provide DCERPC in the member server setup * Certificate Auto Enrollment * Ability to add ports to dns forwarder addresses in internal DNS backend * No longer using Linux mandatory locks for sharemodes * SMB1 protocol has been deprecated, particularly older dialects * SMB1 protocol SMBCopy command removed * SMB1 server-side wildcard expansion removed - Add python3-dnspython to samba-ad-dc recommens; (bsc#1187101); - Use systemd-sysusers to create system users; (bsc#1182847);- Install a systemd drop-in file for named service to allow read/write access to the DLZ directory; (bsc#1201689);- Update to 4.15.12 * CVE-2022-42898: samba: heimdal: Samba buffer overflow vulnerabilities on 32-bit systems; (bso#15203); (bsc#1205126). - Update to 4.15.11 * Allow rebuild of Centos 8 images after move to vault for Samba 4.15; (bso#15193). * CVE-2022-3437: samba: Buffer overflow in Heimdal unwrap_des3(); (bso#15134); (bsc#1204254)- Update to 4.15.10 * Possible use after free of connection_struct when iterating smbd_server_connection->connections; (bso#15128); (bsc#1200102). * smbXsrv_connection_shutdown_send result leaked; (bso#15174). * Spotlight RPC service returns wrong response when Spotlight is disabled on a share; (bso#15086). * acl_xattr VFS module may unintentionally use filesystem permissions instead of ACL from xattr; (bso#15126). * Missing SMB2-GETINFO access checks from MS-SMB2 3.3.5.20.1; (bso#15153). * assert failed: !is_named_stream(smb_fname)") at ../../lib/util/fault.c:197; (bso#15161). * Missing READ_LEASE break could cause data corruption; (bso#15148). * rpcclient can crash using setuserinfo(2); (bso#15124). * Samba fails to build with glibc 2.36 caused by including in libreplace; (bso#15132). * SMB1 negotiation can fail to handle connection errors; (bso#15152). * samba-tool domain join segfault when joining a samba ad domain; (bso#15078). - Update to 4.15.9 * CVE-2022-32742:SMB1 code does not correct verify SMB1write, SMB1write_and_close, SMB1write_and_unlock lengths; (bso#15085); (bsc#1201496). * CVE-2022-32746: samba: Use-after-free occurring in database audit logging; (bso#15009); (bso#15096); (bsc#1201490). * CVE-2022-2031: samba, ldb: AD users can bypass certain restrictions associated with changing passwords; (bso#15047); (bsc#1201495); * CVE-2022-32745: samba: ldb: AD users can crash the server process with an LDAP add or modify request; (bso#15008); (bso#15096); (bsc#1201492). * CVE-2022-2031: samba, ldb: AD users can bypass certain restrictions associated with changing passwords; (bso#15047); (bsc#1201495); * CVE-2022-32744: samba, ldb: AD users can forge password change requests for any user; (bso#15074); (bso#15047); (bsc#1201493).- CVE-2022-1615: Do not ignore errors in random number generation; (bso#15103); (bsc#1202976); - CVE-2022-32743: Implement validated dnsHostName write rights; (bso#14833); (bsc#1202803);- Fix Use after free when iterating smbd_server_connection->connections after tree disconnect failure; (bso#15128); (bsc#1200102).- CVE-2022-32746: samba: Use-after-free occurring in database audit logging; (bso#15009); (bso#15096); (bsc#1201490). - CVE-2022-32745: samba: ldb: AD users can crash the server process with an LDAP add or modify request; (bso#15008); (bso#15096); (bsc#1201492). - CVE-2022-2031: samba, ldb: AD users can bypass certain restrictions associated with changing passwords; (bso#15047); (bsc#1201495); - CVE-2022-32742:SMB1 code does not correct verify SMB1write, SMB1write_and_close, SMB1write_and_unlock lengths; (bso#15085); (bsc#1201496). - CVE-2022-32744: samba, ldb: AD users can forge password change requests for any user; (bso#15074); (bso#15047); (bsc#1201493).- Update to 4.15.8 * Use pathref fd instead of io fd in vfs_default_durable_cookie; (bso#15042); * Setting fruit:resource = stream in vfs_fruit causes a panic; (bso#15099); * Add support for bind 9.18; (bso#14986); * logging dsdb audit to specific files does not work; (bso#15076); * vfs_gpfs with vfs_shadowcopy2 fail to restore file if original file had been deleted; (bso#15069); * netgroups support removed; (bso#15087); (bsc#1199247); * net ads info shows LDAP Server: 0.0.0.0 depending on contacted server; (bso#14674); (bsc#1199734); * waf produces incorrect names for python extensions with Python 3.11; (bso#15071); * smbclient commands del & deltree fail with NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100); (bsc#1200556); * vfs_gpfs recalls=no option prevents listing files; (bso#15055); * waf produces incorrect names for python extensions with Python 3.11; (bso#15071); * Compile error in source3/utils/regedit_hexedit.c; (bso#15091); * ldconfig: /lib64/libsmbconf.so.0 is not a symbolic link; (bso#15108); * smbd doesn't handle UPNs for looking up names; (bso#15054); * Out-by-4 error in smbd read reply max_send clamp; (bso#14443); - Move pdb backends from package samba-libs to package samba-client-libs and remove samba-libs requirement from samba-winbind; (bsc#1200964); (bsc#1198255); - Use the canonical realm name to refresh the Kerberos tickets; (bsc#1196224); (bso#14979);- Fix smbclient commands del & deltree failing with NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100); (bsc#1200556).- Revert NIS support removal; (bsc#1199247);- Use requires_eq macro to require the libldb2 version available at samba-dsdb-modules build time; (bsc#1199362);- Add missing samba-client requirement to samba-winbind package; (bsc#1198255);- Update to 4.15.7 * Share and server swapped in smbget password prompt; (bso#14831); * Durable handles won't reconnect if the leased file is written to; (bso#15022); * rmdir silently fails if directory contains unreadable files and hide unreadable is yes; (bso#15023); * SMB2_CLOSE_FLAGS_FULL_INFORMATION fails to return information on renamed file handle; (bso#15038); * vfs_shadow_copy2 breaks "smbd async dosmode" sync fallback; (bso#14957); * shadow_copy2 fails listing snapshotted dirs with shadow:fixinodes; (bso#15035); * PAM Kerberos authentication incorrectly fails with a clock skew error; (bso#15046); * username map - samba erroneously applies unix group memberships to user account entries; (bso#15041); * NT_STATUS_ACCESS_DENIED translates into EPERM instead of EACCES in SMBC_server_internal; (bso#14983); * Simple bind doesn't work against an RODC (with non-preloaded users); (bso#13879); * Crash of winbind on RODC; (bso#14641); * uncached logon on RODC always fails once; (bso#14865); * KVNO off by 100000; (bso#14951); * LDAP simple binds should honour "old password allowed period"; (bso#15001); * wbinfo -a doesn't work reliable with upn names; (bso#15003); * Simple bind doesn't work against an RODC (with non-preloaded users); (bso#13879); * Uninitialized litemask in variable in vfs_gpfs module; (bso#15027); * Regression: create krb5 conf = yes doesn't work with a single KDC; (bso#15016);- Add provides to samba-client-libs package to fix upgrades from previous versions; (bsc#1197995);- Add missing samba-libs requirement to samba-winbind package; (bsc#1198255);- Update to 4.15.6 * Renaming file on DFS root fails with NT_STATUS_OBJECT_PATH_NOT_FOUND; (bso#14169); * Samba does not response STATUS_INVALID_PARAMETER when opening 2 objects with same lease key; (bso#14737); * NT error code is not set when overwriting a file during rename in libsmbclient; (bso#14938); * Fix ldap simple bind with TLS auditing; (bso#14996); * net ads info shows LDAP Server: 0.0.0.0 depending on contacted server; (bso#14674); * Problem when winbind renews Kerberos; (bso#14979); (bsc#1196224); * pam_winbind will not allow gdm login if password about to expire; (bso#8691); * virusfilter_vfs_openat: Not scanned: Directory or special file; (bso#14971); * DFS fix for AIX broken; (bso#13631); * Solaris and AIX acl modules: wrong function arguments; (bso#14974); * Function aixacl_sys_acl_get_file not declared / coredump; (bso#7239); * Regression: Samba 4.15.2 on macOS segfaults intermittently during strcpy in tdbsam_getsampwnam; (bso#14900); * Fix a use-after-free in SMB1 server; (bso#14989); * smb2_signing_decrypt_pdu() may not decrypt with gnutls_aead_cipher_decrypt() from gnutls before 3.5.2; (bso#14968); * Changing the machine password against an RODC likely destroys the domain join; (bso#14984); * authsam_make_user_info_dc() steals memory from its struct ldb_message *msg argument; (bso#14993); * Use Heimdal 8.0 (pre) rather than an earlier snapshot; (bso#14995); * Samba autorid fails to map AD users if id rangesize fits in the id range only once; (bso#14967);- Fix mismatched version of libldb2; (bsc#1196788). - Drop obsolete SuSEfirewall2 service files.- Drop obsolete Samba fsrvp v0->v1 state upgrade functionality; (bsc#1080338).- Fix ntlm authentications with "winbind use default domain = yes"; (bso#13126); (bsc#1173429); (bsc#1196308).- Fix samba-ad-dc status warning notification message by disabling systemd notifications in bgqd; (bsc#1195896); (bso#14947).- libldb version mismatch in Samba dsdb component; (bsc#1118508);- Update to 4.15.5 * CVE-2021-44141: UNIX extensions in SMB1 disclose whether the outside target of a symlink exists; (bso#14911); (bsc#1193690). * CVE-2021-44142: Out-of-Bound Read/Write on Samba vfs_fruit module; (bso#14914); (bsc#1194859). * CVE-2022-0336: Re-adding an SPN skips subsequent SPN conflict checks; bso#14950); (bsc#1195048).- CVE-2021-44141: Information leak via symlinks of existance of files or directories outside of the exported share; (bso#14911); (bsc#1193690); - CVE-2021-44142: Out-of-bounds heap read/write vulnerability in VFS module vfs_fruit allows code execution; (bso#14914); (bsc#1194859); - CVE-2022-0336: Samba AD users with permission to write to an account can impersonate arbitrary services; (bso#14950); (bsc#1195048);- Update to 4.15.4 * Duplicate SMB file_ids leading to Windows client cache poisoning; (bso#14928); * Failed to parse NTLMv2_RESPONSE length 95 - Buffer Size Error - NT_STATUS_BUFFER_TOO_SMALL; (bso#14932); * kill_tcp_connections does not work; (bso#14934); * Can't connect to Windows shares not requiring authentication using KDE/Gnome; (bso#14935); * smbclient -L doesn't set "client max protocol" to NT1 before calling the "Reconnecting with SMB1 for workgroup listing" path; (bso#14939); * Cross device copy of the crossrename module always fails; (bso#14940); * symlinkat function from VFS cap module always fails with an error; (bso#14941); * Fix possible fsp pointer deference; (bso#14942); * Missing pop_sec_ctx() in error path inside close_directory(); (bso#14944); * "smbd --build-options" no longer works without an smb.conf file; (bso#14945);- Use pkgconfig(krb5) as dependency for the -devel package: allow OBS to pick the right flavor of krb5-devel (full vs mini). - Do not require the 'krb5' symbol by samba-client-libs: this package has an automatic dependency due to linkage on libgssapi_krb5.so.2. Automatic deps are always better. - Do not require the 'krb5' symbol from samba-libs: samba-libs requires samba-client-libs, which in turn requires krb5 libraries. Samba-libs itself has no need for krb5 (but get it indirectly anyway).- Reorganize libs packages. Split samba-libs into samba-client-libs, samba-libs, samba-winbind-libs and samba-ad-dc-libs, merging samba public libraries depending on internal samba libraries into these packages as there were dependency problems everytime one of these public libraries changed its version (bsc#1192684). The devel packages are merged into samba-devel. - Rename package samba-core-devel to samba-devel - Add python-rpm-macros to build requirements - Update the symlink create by samba-dsdb-modules to private samba ldb modules following libldb2 changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba- Update to 4.15.3 * Recursive directory delete with veto files is broken in 4.15.0; (bso#14878); * A directory containing dangling symlinks cannot be deleted by SMB2 alone when they are the only entry in the directory; (bso#14879); * SIGSEGV in rmdir_internals/synthetic_pathref - dirfsp is used uninitialized in rmdir_internals(); (bso#14892); * MaxQueryDuration not honoured in Samba AD DC LDAP; (bso#14694); * The CVE-2020-25717 username map [script] advice has undesired side effects for the local nt token; (bso#14901); (bsc#1192849); * User with multiple spaces (eg FredNurk) become un-deletable; (bso#14902); * Avoid storing NTTIME_THAW (-2) as value on disk; (bso#14127); * smbXsrv_client_global record validation leads to crash if existing record points at non-existing process; (bso#14882); * Crash in vfs_fruit asking for fsp_get_io_fd() for an XATTR call; (bso#14890); * Samba process doesn't log to logfile; (bso#14897); * set_ea_dos_attribute() fallback calling get_file_handle_for_metadata() triggers locking.tdb assert; (bso#14907); * Kerberos authentication on standalone server in MIT realm broken; (bso#14922); * Segmentation fault when joining the domain; (bso#14923); * Support for ROLE_IPA_DC is incomplete; (bso#14903); * rpcclient cannot connect to ncacn_ip_tcp services anymore; (bso#14767); * winexe crashes since 4.15.0 after popt parsing; (bso#14893); * net ads status -P broken in a clustered environment; (bso#14908); * Memory leak if ioctl(FSCTL_VALIDATE_NEGOTIATE_INFO) fails before smbd_smb2_ioctl_send; (bso#14788); * winbindd doesn't start when "allow trusted domains" is off; (bso#14899); * smbclient login without password using '-N' fails with NT_STATUS_INVALID_PARAMETER on Samba AD DC; (bso#14883); * A schannel client incorrectly detects a downgrade connecting to an AES only server; (bso#14912); * Possible null pointer dereference in winbind; (bso#14921); * Fix -k legacy option for client tools like smbclient, rpcclient, net, etc.; (bso#14846); * Add Debian 11 CI bootstrap support; (bso#14872); * Crash in recycle_unlink_internal(); (bso#14888);- Fix dependency problem upgrading from libndr0 to libndr2 and from libsamba-credentials0 to libsamba-credentials1; (bsc#1192684);- Fix regression introduced by CVE-2020-25717 patches, winbindd does not start when 'allow trusted domains' is off; (bso#14899); - Update to 4.15.2 * CVE-2016-2124: SMB1 client connections can be downgraded to plaintext authentication; (bso#12444); (bsc#1014440); * CVE-2020-25717: A user on the domain can become root on domain members; (bso#14556); (bsc#1192284); * CVE-2020-25718: Samba AD DC did not correctly sandbox Kerberos tickets issued by an RODC; (bso#14558); (bsc#1192246); * CVE-2020-25719: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets; (bso#14561); (bsc#1192247); * CVE-2020-25721: Kerberos acceptors need easy access to stable AD identifiers (eg objectSid); (bso#14557); (bsc#1192505); * CVE-2020-25722: Samba AD DC did not do suffienct access and conformance checking of data stored; (bso#14564); (bsc#1192283); * CVE-2021-3738: Use after free in Samba AD DC RPC server; (bso#14468); (bsc#1192215); * CVE-2021-23192: Subsequent DCE/RPC fragment injection vulnerability; (bso#14875); (bsc#1192214); - Update to 4.15.1 * vfs_shadow_copy2: core dump in make_relative_path; (bso#14682); * Log clutter from filename_convert_internal; (bso#14685); * MacOSX compilation fixes; (bso#14862); * rodc_rwdc test flaps; (bso#14868); * Provide a fix for MS CVE-2020-17049 in Samba [SECURITY] 'Bronze bit' S4U2Proxy Constrained Delegation bypass in Samba with embedded Heimdal; (bso#14642); * Python ldb.msg_diff() memory handling failure; (bso#14836); * "in" operator on ldb.Message is case sensitive; (bso#14845); * Release LDB 2.4.1 for Samba 4.15.1; (bso#14848); * samldb_krbtgtnumber_available() looks for incorrect string; (bso#14854); * Fix Samba support for UF_NO_AUTH_DATA_REQUIRED; (bso#14871); * Allow special chars like "@" in samAccountName when generating the salt; (bso#14874); * Correctly ignore comments in CTDB public addresses file; (bso#14826); * Fix transit path validation; (bso#12998); * Fix that child winbindd logs to log.winbindd instead of log.wb-; (bso#14852); * SMB3 cancel requests should only include the MID together with AsyncID when AES-128-GMAC is used; (bso#14855); * Prepare to operate with MIT krb5 >= 1.20; (bso#14870); * Heimdal prefers RC4 over AES for machine accounts; (bso#14864);- Enable samba-tool without ad dc.- Adjust spec to use pam macros; (bsc#1191046).- Adjust spec for size * allow some Recommends instead Requires to be configured for cifs-utils, samba-libs-python3 & samba-gpupdate; (bsc#1182847). * remove fam, undocumented and unneeded.- Add missing build dependency on bison when building with the embedded Heimdal Kerberos- Update to 4.15.0 * Removed SMB development dialects SMB2_22, SMB2_24 and SMB3_10 * VFS layer modernized. * Add the ability to set allow/deny lists for zone transfer clients in Bind DLZ plugin * Server multi-channel support no longer experimental * Improved command line user experience, unifying the options in different commands * Winbindd no longer scans trusted domains on startup and will use enterprise principals by default. * The net utility is now able to support the offline domain join feature * New options for 'samba-tool dns zoneoptions' for aging control and to mark old records as static or dynamic * DNS tombstones are now deleted as appropriate and use a consistent timestamp format * The 'samba-tool dns update' command validates and rejects now malformed IPv4 and IPv6 addresses * The 'samba-tool domain backup' command correctly takes out locks against concurrent modification during backup when using the LMDB backend * TruACL support has been removed * NIS support has been removed- Fix 'net rpc' authentication when using the machine account; (bsc#1189017); (bso#14796);- Fix dependency problem upgrading from libndr0 to libndr1; (bsc#1189875); - Fix dependency problem upgrading from libsmbldap0 to libsmbldap2; (bsc#1189875); - Fix wrong kvno exported to keytab after net ads changetrustpw due to replication delay; (bsc#1188727); - Add Certificate Auto Enrollment Policy; (jsc#SLE-18456). - Update to 4.13.10 * s3: smbd: Ensure POSIX default ACL is mapped into returned Windows ACL for directory handles; (bso#14708); * Take a copy to make sure we don't reference free'd memory; (bso#14721); * s3: lib: Fix talloc heirarcy error in parent_smb_fname(); (bso#14722); * s3: smbd: Remove erroneous TALLOC_FREE(smb_fname_parent) in change_file_owner_to_parent() error path; (bso#14736); * samba-tool: Give better error information when the 'domain backup restore' fails with a duplicate SID; (bso#14575); * smbd: Correctly initialize close timestamp fields; (bso#14714); * Spotlight RPC service doesn't work with vfs_glusterfs; (bso#14740); * ctdb: Fix a crash in run_proc_signal_handler(); (bso#14475); * gensec_krb5: Restore ipv6 support for kpasswd; (bso#14750); * smbXsrv_{open,session,tcon}: Protect smbXsrv_{open,session,tcon}_global_traverse_fn against invalid records; (bso#14752); * samba-tool domain backup offline doesn't work against bind DLZ backend; (bso#14027); * netcmd: Use next_free_rid() function to calculate a SID for restoring a backup; (bso#14669); - Update to 4.13.9 * s3: smbd: SMB1 SMBsplwr doesn't send a reply packet on success; (bso#14696); * Add documentation for dsdb_group_audit and dsdb_group_json_audit to "log level", synchronise "log level" in smb.conf with the code; (bso#14689); * Fix smbd panic when two clients open same file; (bso#14672); * Fix memory leak in the RPC server; (bso#14675); * s3: smbd: Fix deferred renames; (bso#14679); * s3-iremotewinspool: Set the per-request memory context; (bso#14675); * rpc_server3: Fix a memleak for internal pipes; (bso#14675); * third_party: Update socket_wrapper to version 1.3.2; (bso#11899); * third_party: Update socket_wrapper to version 1.3.3; (bso#14639); * idmap_rfc2307 and idmap_nss return wrong mapping for uid/gid conflict; (bso#14663); * Fix the build on OmniOS; (bso#14288); - Update to 4.13.8 * CVE-2021-20254: Fix buffer overrun in sids_to_unixids(); (bso#14571 - Update to 4.13.7 * Release with dependency on ldb version 2.2.1.- CVE-2021-20254 Buffer overrun in sids_to_unixids(); (bnc#14571); (bsc#1184677).- Fix offline domain backup not possible using lmdb version >= 0.9.26; (bso#14676); - Require libldb >= 2.2.1; (bsc#1183572); (bsc#1183574); - Update to 4.13.6 * CVE-2020-27840: samba: Unauthenticated remote heap corruption via bad DNs; (bso#14595); (bsc#1183572). * CVE-2021-20277: samba: out of bounds read in ldb_handler_fold; (bso#14655); (bsc#1183574). - Update to 4.13.5 * s3:modules:vfs_virusfilter: Recent talloc changes cause infinite start-up failure; (bso#14634); * s3: libsmb: Add missing cli_tdis() in error path if encryption setup failed on temp proxy connection; (bso#13992); * smbd: In conn_force_tdis_done() when forcing a connection closed force a full reload of services; (bso#14604); * dbcheck: Check Deleted Objects and reduce noise in reports about expired tombstones (bso#14593); * s3: Fix fcntl waf configure check; (bso#14503); * s3/auth: Implement "winbind:ignore domains"; (bso#14602); * smbd: Use fsp->conn->session_info for the initial delete-on-close token; (bso#14617); * s3: VFS: nfs4_acls. Add missing TALLOC_FREE(frame) in error path; (bso#14648); * classicupgrade: Treat old never expires value right; (bso#14624); * g_lock: Fix uninitalized variable reads; (bso#14636); * s3:pysmbd: Fix fd leak in py_smbd_create_file(); (bso#13898); * lib:util: Avoid free'ing our own pointer; (bso#14625); * HEIMDAL: krb5_storage_free(NULL) should work; (bso#12505);- Spec file fixes around systemd and requires; (bsc#1182830); - Align systemd service unit files with upstream provided ones.- Update to 4.13.4 * Work around special SMB2 IOCTL response behavior of NetApp Ontap 7.3.7; (bso#14607); * Temporary DFS share setup doesn't set case parameters in the same way as a regular share definition does; (bso#14612); * lib: Avoid declaring zero-length VLAs in various messaging functions; (bso#14605); * Do not create an empty DB when accessing a sam.ldb; (bso#14579); * vfs_fruit may close wrong backend fd; (bso#14596); * Temporary DFS share setup doesn't set case parameters in the same way as a regular share definition does; (bso#14612); * vfs_virusfilter: Allocate separate memory for config char*; (bso#14606); * vfs_fruit may close wrong backend fd; (bso#14596); * Work around special SMB2 IOCTL response behavior of NetApp Ontap 7.3.7; (bso#14607); * The cache directory for the user gencache should be created recursively; (bso#14601); * Be more flexible with repository names in CentOS 8 test environments; (bso#14594);- Uninstalling samba-client: Failed to disable unit, cifs.service does not exists; (bsc#1180388);- Update to 4.13.3 + libcli: smb2: Never print length if smb2_signing_key_valid() fails for crypto blob; (bso#14210); + s3: modules: gluster. Fix the error I made in preventing talloc leaks from a function; (bso#14486); + s3: smbd: Don't overwrite contents of fsp->aio_requests[0] with NULL via TALLOC_FREE(); (bso#14515); + s3: spoolss: Make parameters in call to user_ok_token() match all other uses; (bso#14568); + s3: smbd: Quiet log messages from usershares for an unknown share; (bso#14590); + samba process does not honor max log size; (bso#14248); + vfs_zfsacl: Add missing inherited flag on hidden "magic" everyone@ ACE; (bso#14587); + s3-libads: Pass timeout to open_socket_out in ms; (bso#13124); + s3-vfs_glusterfs: Always disable write-behind translator; (bso#14486); + smbclient: Fix recursive mget; (bso#14517); + clitar: Use do_list()'s recursion in clitar.c; (bso#14581); + manpages/vfs_glusterfs: Mention silent skipping of write-behind translator; (bso#14486); + vfs_shadow_copy2: Preserve all open flags assuming ROFS; (bso#14573); + interface: Fix if_index is not parsed correctly; (bso#14514);- Update to 4.13.2 + s3: modules: vfs_glusterfs: Fix leak of char **lines onto mem_ctx on return; (bso#14486); + RN: vfs_zfsacl: Only grant DELETE_CHILD if ACL tag is special; (bso#14471); + smb.conf.5: Add clarification how configuration changes reflected by Samba; (bso#14538); + daemons: Report status to systemd even when running in foreground; (bso#14552); + DNS Resolver: Support both dnspython before and after 2.0.0; (bso#14553); + s3-vfs_glusterfs: Refuse connection when write-behind xlator is present; (bso#14486); + provision: Add support for BIND 9.16.x; (bso#14487); + ctdb-common: Avoid aliasing errors during code optimization; (bso#14537); + libndr: Avoid assigning duplicate versions to symbols; (bso#14541); + docs: Fix default value of spoolss:architecture; (bso#14522); + winbind: Fix a memleak; (bso#14388); + s4:dsdb:acl_read: Implement "List Object" mode feature; (bso#14531); + docs-xml/manpages: Add warning about write-behind translator for vfs_glusterfs; (bso#14486); + nsswitch/nsstest.c: Avoid nss function conflicts with glibc nss.h. + vfs_shadow_copy2: Avoid closing snapsdir twice; (bso#14530); + third_party: Update resolv_wrapper to version 1.1.7; (bso#14547); + examples:auth: Do not install example plugin; (bso#14550); + ctdb-recoverd: Drop unnecessary and broken code; (bso#14513); + RN: vfs_zfsacl: Only grant DELETE_CHILD if ACL tag is special; (bso#14471);- Adjust smbcacls '--propagate-inheritance' feature to align with upstream; (bsc#1178469).- Update to samba 4.13.1 + CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with easily crafted records; (bsc#1177613); (bso#14472); + CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994); (bso#14436); + CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify; (bsc#1173902); (bso#14434); - Adjust systemd tmpfiles.d configuration, use /run/samba instead of /var/run/samba; (bsc#1177355);- Fix vfs_ceph query_directory regression; (bso#14519) - Drop liburing-devel for SLE15-SP2; (bsc#1177245)- Register CTDB recovery lock holder with ceph-mgr - Add liburing-devel dependency- Update to samba 4.13.0 + Require Python 3.6 + Move wide links functionality into VFS module + Deprecate NT4-like 'classic' Samba domain controllers + Deprecate SMBv1 only protocol options + Remove deprecated "ldap ssl ads" option + Unify asynchronous DCE-RPC server; (jsc#SES-645) + Replay multichannel lease break requests; (bso#11897); (jsc#SES-655) + Drop internal byteorder.h header from util-devel package + Remove final code for the AD DC LDAP backend + Add AD DC Group Policy Scripts + Only use gnutls_aead_cipher_encryptv2() for GnuTLS > 3.6.14; (bso#14399) + Fix %U substitutions if it contains a domain name; (bso#14467) + Fix krb5.conf creation for 'net ads join'; (bso#14479) + Fix build problem if libbsd-dev is not installed; (bso#14482) + Toggle vfs_snapper using "--with-shared-modules"; (bso#14437) + Fix idmap_ad RFC4511 response handling; (bso#14465) + Fix panic in get_lease_type(); (bso#14428)- Update to samba 4.11.13 + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2 against unencrypted passwords; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Support "server require schannel:WORKSTATION$ = no" about unsecure configurations; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): s4 torture rpc: repeated bytes in client challenge; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): libcli/auth: Reject weak client challenges in netlogon_creds_server_init() "server require schannel:WORKSTATION$ = no"; (bsc#1176579); (bso#14497); - Update to samba 4.11.12 + s3: libsmb: Fix SMB2 client rename bug to a Windows server; (bso#14403); + dsdb: Allow "password hash userPassword schemes = CryptSHA256" to work on RHEL7; (bso#14424); + dbcheck: Allow a dangling forward link outside our known NCs; (bso#14450); + lib/debug: Set the correct default backend loglevel to MAX_DEBUG_LEVEL; (bso#14426); + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428); + lib/util: do not install "test_util_paths"; (bso#14370); + lib:util: Fix smbclient -l basename dir; (bso#14345); + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428); + util: Allow symlinks in directory_create_or_exist; (bso#14166); + docs: Fix documentation for require_membership_of of pam_winbind; (bso#14358); + s3:winbind:idmap_ad: Make failure to get attrnames for schema mode fatal; (bso#14425);- Add obsoletes to libsmbldap2 package to fix upgrades from previous versions; (bsc#1172810);- Fix net command unable to negotiate SMB2; (bsc#1174120);- Update to samba 4.11.11 + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ and VLV combined; (bso#14364); (bsc#1173159] + CVE-2020-10745: invalid DNS or NBT queries containing dots use several seconds of CPU each; (bso#14378); (bsc#1173160). + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP server with paged_result or VLV; (bso#14402); (bsc#1173161) + CVE-2020-14303: Endless loop from empty UDP packet sent to AD DC nbt_server; (bso#14417); (bsc#1173359). - Update to samba 4.11.10 + Fix segfault when using SMBC_opendir_ctx() routine for share folder that contains incorrect symbols in any file name; (bso#14374). + vfs_shadow_copy2 doesn't fail case looking in snapdirseverywhere mode; (bso#14350) + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr; (bso#14413). + Malicous SMB1 server can crash libsmbclient; (bso#14366) + winbindd: Fix a use-after-free when winbind clients exit; (bso#14382) + ldb: Bump version to 2.0.11, LMDB databases can grow without bounds. (bso#14330) - Update to samba 4.11.9 + nmblib: Avoid undefined behaviour in handle_name_ptrs(); (bso#14242). + 'samba-tool group' commands do not handle group names with special chars correctly; (bso#14296). + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo is not valid; (bso#14237). + Missing check for DMAPI offline status in async DOS attributes; (bso#14293). + smbd: Ignore set NTACL requests which contain S-1-5-88 NFS ACEs; (bso#14307). + vfs_recycle: Prevent flooding the log if we're called on non-existant paths; (bso#14316) + smbd mistakenly updates a file's write-time on close; (bso#14320). + RPC handles cannot be differentiated in source3 RPC server; (bso#14359). + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313). + nsswitch: Fix use-after-free causing segfault in _pam_delete_cred; (bso#14327). + Fix fruit:time machine max size on arm; (bso#13622) + CTDB recovery corner cases can cause record resurrection and node banning; (bso#14294). + ctdb: Fix a memleak; (bso#14348). + libsmb: Don't try to find posix stat info in SMBC_getatr(). + ctdb-tcp: Move free of inbound queue to TCP restart; (bso#14295); (bsc#1162680). + s3/librpc/crypto: Fix double free with unresolved credential cache; (bso#14344); (bsc#1169095) + s3:libads: Fix ads_get_upn(); (bso#14336). + CTDB recovery corner cases can cause record resurrection and node banning; (bso#14294) + Starting ctdb node that was powered off hard before results in recovery loop; (bso#14295); (bsc#1162680). + ctdb-recoverd: Avoid dereferencing NULL rec->nodemap; (bso#14324) - Update to samba 4.11.8 + CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with ASQ; (bso#14331); (bsc#1169850); + CVE-2020-10704: LDAP Denial of Service (stack overflow) in Samba AD DC; (bso#14334); (bsc#1169851); - Update to samba 4.11.7 + s3: lib: nmblib. Clean up and harden nmb packet processing; (bso#14239). + s3: VFS: full_audit. Use system session_info if called from a temporary share definition; (bso#14283) + dsdb: Correctly handle memory in objectclass_attrs; (bso#14258). + ldb: version 2.0.9, Samba 4.11 and later give incorrect results for SCOPE_ONE searches; (bso#14270) + auth: Fix CIDs 1458418 and 1458420 Null pointer dereferences; (bso#14247). + smbd: Handle EINTR from open(2) properly; (bso#14285) + winbind member (source3) fails local SAM auth with empty domain name; (bso#14247) + winbindd: Handling missing idmap in getgrgid(); (bso#14265). + lib:util: Log mkdir error on correct debug levels; (bso#14253). + wafsamba: Do not use 'rU' as the 'U' is deprecated in Python 3.9; (bso#14266). + ctdb-tcp: Make error handling for outbound connection consistent; (bso#14274). - Update to samba 4.11.6 + pygpo: Use correct method flags; (bso#14209). + vfs_ceph_snapshots: Fix root relative path handling; (bso#14216); (bsc#1141320). + Avoiding bad call flags with python 3.8, using METH_NOARGS instead of zero; (bso#14209). + source4/utils/oLschema2ldif: Include stdint.h before cmocka.h; (bso#14218). + docs-xml/winbindnssinfo: Clarify interaction with idmap_ad etc; (bso#14122). + smbd: Fix the build with clang; (bso#14251). + upgradedns: Ensure lmdb lock files linked; (bso#14199). + s3: VFS: glusterfs: Reset nlinks for symlink entries during readdir; (bso#14182). + smbc_stat() doesn't return the correct st_mode and also the uid/gid is not filled (SMBv1) file; (bso#14101). + librpc: Fix string length checking in ndr_pull_charset_to_null(); (bso#14219). + ctdb-scripts: Strip square brackets when gathering connection info; (bso#14227).- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);- Installing: samba - samba-ad-dc.service does not exist and unit not found; (bsc#1171437);- Fix samba_winbind package is installing python3-base without python3 package; (bsc#1169521);- Require libldb2 >= 2.0.10 after security release.- CVE-2020-10704: LDAP Denial of Service (stack overflow) in Samba AD DC; (bso#14334); (bsc#1169851); - CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with ASQ; (bso#14331); (bsc#1169850);- Fix smbclient crash with double free (with unresolved krb5 credential cache); (bso#14344); (bsc#1169095).- Starting ctdb node that was powered off hard before results in recovery loop; (bso#14295); (bsc#1162680).- CTDB doesn't retry outgoing connections on bind (and some other) failures; (bso#14274); (bsc#1162680).- Revert: Allow idmap_rid to have primary group other than "Domain Users"; (bsc#1087931).- Fix nmbstatus not reporting detailed information about workgroups; (bsc#1159464); - Fix querying all names registered within broadcast area; (bso#8927);- Update to samab 4.11.5 + CVE-2019-14902: Replication of ACLs down subtree on AD Directory is not automatic; (bso#12497); (bsc#1160850). + CVE-2019-19344: Fix server crash with dns zone scavenging = yes; (bso#14050); (bsc#1160852). + CVE-2019-14907: server-side crash after charset conversion failure (eg during NTLMSSP processing); (bso#14208); (bsc#1160888). - Update to samba 4.11.4 + Ensure SMB1 cli_qpathinfo2() doesn't return an inode number; (bso#14161). + Ensure we don't call cli_RNetShareEnum() on an SMB1 connection; (bso#14174). + NT_STATUS_ACCESS_DENIED becomes EINVAL when using SMB2 in SMBC_opendir_ctx; (bso#14176). + SMB2 - Ensure we use the correct session_id if encrypting an interim response; (bso#14189). + Prevent smbd crash after invalid SMB1 negprot; (bso#14205). + printing: Fix %J substition; (bso#13745). + Remove now unneeded call to cmdline_messaging_context(); (bso#13925). + Fix incomplete conversion of former parametric options; (bso#14069). + Fix sync dosmode fallback in async dosmode codepath; (bso#14070). + vfs_fruit returns capped resource fork length; (bso#14171). + libnet_join: Add SPNs for additional-dns-hostnames entries; (bso#14116). + smbd: Increase a debug level; (bso#14211). + Prevent azure ad connect from reporting discovery errors reference-value-not-ldap-conformant; (bso#14153). + krb5_plugin: Fix developer build with newer heimdal system library; (bso#14179). + replace: Only link libnsl and libsocket if required; (bso#14168); + ctdb: Incoming queue can be orphaned causing communication; breakdown; (bso#14175). + ldb: Release ldb 2.0.8. Cross-compile will not take cross-answers or cross-execute; (bso#13846). + heimdal-build: Avoid hard-coded /usr/include/heimdal in asn1_compile-generated code; (bso#13856).- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).- Update to samba 4.11.3 + CVE-2019-14861: DNSServer RPC server crash, an authenticated user can crash the DCE/RPC DNS management server by creating records with matching the zone name; (bso#14138); (bsc#1158108). + CVE-2019-14870: DelegationNotAllowed not being enforced, the DelegationNotAllowed Kerberos feature restriction was not being applied when processing protocol transition requests (S4U2Self), in the AD DC KDC; (bso#14187); (bsc#1158109).- CVE-2019-14861: DNSServer RPC server crash, an authenticated user can crash the DCE/RPC DNS management server by creating records with matching the zone name; (bso#14138); (bsc#1158108). - CVE-2019-14870: DelegationNotAllowed not being enforced, the DelegationNotAllowed Kerberos feature restriction was not being applied when processing protocol transition requests (S4U2Self), in the AD DC KDC; (bso#14187); (bsc#1158109).- Update to samba 4.11.2 + CVE-2019-10218: Client code can return filenames containing path separators; (bsc#1144902); (bso#14071). + CVE-2019-14833: Samba AD DC check password script does not receive the full password; (bso#12438). + CVE-2019-14847: User with "get changes" permission can crash AD DC LDAP server via dirsync; (bso#14040). - Fixes from 4.11.1 + Overlinking libreplace against librt and pthread against every binary or library causes issues; (bso#14140); + kpasswd fails when built with MIT Kerberos; (bso#14155); + Fix spnego fallback from kerberos to ntlmssp in smbd server; (bso#14106); + Stale file handle error when using mkstemp on a share; (bso#14137); + non-AES schannel broken; (bso#14134); + Joining Active Directory should not use SAMR to set the password; (bso#13884); + smbclient can blunder into the SMB1 specific cli_RNetShareEnum() call on an SMB2 connection; (bso#14152); + Deleted records can be resurrected during recovery; (bso#14147); + getpwnam and getpwuid need to return data for ID_TYPE_BOTH group; (bso#14141); + winbind does not list forest trusts with additional trust attributes; (bso#14130); + fault report points to outdated documentation; (bso#14139); + pam_winbind with krb5_auth or wbinfo -K doesn't work for users of trusted domains/forests; (bso#14124); + classicupgrade results in uncaught exception - a bytes-like object is required, not 'str'; (bso#14136); + pod2man is not longer required, stop checking at build time; (bso#14131); + Exit code of ctdb nodestatus should not be influenced by deleted nodes; (bso#14129); + username/password authentication doesn't work with CUPS and smbspool; (bso#14128); + smbc_readdirplus() is incompatible with smbc_telldir() and smbc_lseekdir(); (bso#14094);- CVE-2019-14847: User with "get changes" permission can crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598); - CVE-2019-10218: Client code can return filenames containing path separators; (bso#14071); (bsc#1144902);- CVE-2019-14833: samba: Accent with "check script password" Samba AD DC check password script does not receive the full password; (bso#12438); (bsc#1154289).- Update to samba 4.11.0 + For details on all items see WHATSNEW.txt in samba-doc package + Python2 runtime support removed; python 3.4 or later required + Security improvements: - SMB1 disabled by default - lanman and plaintext authentication deprecated - winbind: PAM_AUTH and NTLM_AUTH events logged - GnuTLS 3.2 required; system FIPS mode setting honored + CephFS Snapshot integration, exposed as previous file versions + ctdb changes: - onnode -o option removed - ctdbd logs when using more than 90% of a CPU thread - CTDB_MONITOR_SWAP_USAGE variable removed + AD Domain controller improvements: - Upgrade AD databse format - BIND9_FLATFILE deprecated - default process model chagned to prefork - bind9 dns operation duration logging - Default schema updated to 2012_R2; function level is unchanged - many performance improvements + Configuration webserver support removed- Fix broken username/password authentication with CUPS and smbspool; (bsc#1152143); (bso#14128).- Fix auth problems when printing via smbspool backend with kerberos; (bnc#1148539); (bso#13832).- Update to samba 4.10.8 + CVE-2019-10197: user escape from share path definition; (bso#14035); (bsc#1141267);- Fix build on newer systems by modifying samba.spec to use consistent non-relative paths for pammodules in configure line and specification of pam_winbind.so library to package.- Update to samba 4.10.7 + Unable to create or rename file/directory inside shares configured with vfs_glusterfs_fuse module; (bso#14010). + build: Allow build when '--disable-gnutls' is set; (bso#13844) + samba-tool: Add 'import samba.drs_utils' to fsmo.py; (bso#13973). + Fix 'Error 32 determining PSOs in system' message on old DB with FL upgrade; (bso#14008). + s4/libnet: Fix joining a Windows pre-2008R2 DC; (bso#14021) + join: Use a specific attribute order for the DsAddEntry nTDSDSA object; (bso#14046). + vfs_catia: Pass stat info to synthetic_smb_fname(); (bso#14015). + lookup_name: Allow own domain lookup when flags == 0; (bso#14091). + s4 librpc rpc pyrpc: Ensure tevent_context deleted last; (bso#13932). + DEBUGC and DEBUGADDC doesn't print into a class specific log file; (bso#13915). + Request to keep deprecated option "server schannel", VMWare Quickprep requires "auto"; (bso#13949). + dbcheck: Fallback to the default tombstoneLifetime of 180 days; (bso#13967). + dnsProperty fails to decode values from older Windows versions; (bso#13969). + samba-tool: Use only one LDAP modify for dns partition fsmo role transfer; (bso#13973). + third_party: Update waf to version 2.0.17; (bso#13960). + netcmd: Allow 'drs replicate --local' to create partitions; (bso#14051). + ctdb-config: Depend on /etc/ctdb/nodes file; (bso#14017).- CVE-2019-10197: user escape from share path definition; (bso#14035); (bsc#1141267).- Prepare for use future use of kernel keyrings, modify /etc/pam.d/samba to include pam_keyinit.so; (bsc#1144059).- Update samba-winbind script to work with systemd; (bsc#1132739); - Drop samba dhcpcd hook scripts - Update to samba 4.10.6 + s3: winbind: Fix crash when invoking winbind idmap scripts; (bso#13956). + smbd does not correctly parse arguments passed to dfree and quota scripts; (bso#13964). + samba-tool dns: use bytes for inet_ntop; (bso#13965). + samba-tool domain provision: Fix --interactive module in python3; (bso#13828). + ldb_kv: Skip @ records early in a search full scan; (bso#13893). + docs: Improve documentation of "lanman auth" and "ntlm auth" connection; (bso#13981). + python/ntacls: Use correct "state directory" smb.conf option instead of "state dir"; (bso#14002). + registry: Add a missing include; (bso#13840). + Fix SMB guest authentication; (bso#13944). + AppleDouble conversion breaks Resourceforks; (bso#13958). + vfs_fruit makes direct use of syscalls like mmap() and pread(); (bso#13968). + s3:mdssvc: Fix flex compilation error; (bso#13987). + s3/vfs_glusterfs[_fuse]: Avoid using NAME_MAX directly; (bso#13872). + dsdb:samdb: schemainfo update with relax control; (bso#13799). + s3:util: Move static file_pload() function to lib/util; (bso#13964). + smbd: Fix a panic; (bso#13957). + ldap server: Generate correct referral schemes; (bso#12478). + s4 dsdb/repl_meta_data: fix use after free in dsdb_audit_add_ldb_value; (bso#13941). + s4 dsdb: Fix use after free in samldb_rename_search_base_callback; (bso#13942). + dsdb/repl: we need to replicate the whole schema before we can apply it; (bso#12204). + ldb: Release ldb 1.5.5; (bso#12478). + Schema replication fails if link crosses chunk boundary backwards; (bso#13713). + 'samba-tool domain schemaupgrade' uses relax control and skips the schemaInfo update provision; (bso#13799). + dsdb_audit: avoid printing "... remote host [Unknown] SID [(NULL SID)] ..."; (bso#13916). + python/ntacls: We only need security.SEC_STD_READ_CONTROL in order to get the ACL; (bso#13917). + s3:loadparm: Ensure to truncate FS Volume Label at multibyte boundary; (bso#13947). + Using Kerberos credentials to print using spoolss doesn't work; (bso#13939). + wafsamba: Use native waf timer; (bso#13998). + ctdb-scripts: Fix tcp_tw_recycle existence check; (bso#13984).- Update to samba-4.10.5 (including updates for 4.10.4, 4.10.3) + CVE-2019-12435 rpc/dns: Avoid NULL deference if zone not found in DnssrvOperation2; (bso#13922); (bsc#1137815). + CVE-2019-12436 dsdb/paged_results: Ignore successful results without messages; (bso#13951); (bsc#1137816). - Update to samba-4.10.4 + s3: SMB1: Don't allow recvfile on stream fsp's; (bso#13938). + py/provision: Fix for Python 2.6; (bso#13882). + netcmd: Fix 'passwordsettings --max-pwd-age' command; (bso#13873). + s3-libnet_join: 'net ads join' to child domain fails when using "-U admin@forestroot"; (bso#13861). + vfs_ceph: Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245). + vfs_ceph: Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697). + ctdb-common: Avoid race between fd and signal events; (bso#13895). + ctdb-common: Fix memory leak in run_proc; (bso#13943). + lib: Initialize getline() arguments; (bso#13892). + winbind: Fix overlapping id ranges; (bco#13903). + lib util debug: Increase format buffer to 4KiB; (bso#13902). + nsswitch pam_winbind: Fix Asan use after free; (bso#13927). + s4 lib socket: Ensure address string owned by parent struct; (bso#13929). + s3 rpc_client: Fix Asan stack use after scope; (bso#13936). + s3:smbd: Handle IO_REPARSE_TAG_DFS in SMB_FIND_FILE_FULL_DIRECTORY_INFO; (bso#10097). + smb2_tcon: Avoid STATUS_PENDING completely on tdis; (bso#10344). + smb2_sesssetup: avoid STATUS_PENDING responses for session setup; (bso#12845). + smb2_tcon: Avoid STATUS_PENDING completely on tdis; (bso#13698). + smb2_sesssetup: avoid STATUS_PENDING responses for session setup; (bso#13796). + dbcheck: Fix the err_empty_attribute() check; (bso#13843). + vfs_snapper: Drop unneeded fstat handler; (bso#13858). + vfs_default: Fix vfswrap_offload_write_send() NT_STATUS_INVALID_VIEW_SIZE check; (bso#13862). + smb2_server: Grant all 8192 credits to clients; (bso#13863). + smbd: Implement SMB_FILE_NORMALIZED_NAME_INFORMATION handling; (bso#13919). + s3/vfs_glusterfs: Dynamically determine NAME_MAX; (bso#13872). + s3: modules: ceph: Use current working directory instead of share path; (bso#13918); (bsc#1134452). + winbind: Use domain name from lsa query for sid_to_name cache entry; (bso#13831). + memcache: Increase size of default memcache to 512k; (bso#13865). + docs: Update smbclient manpage for "--max-protocol"; (bso#13857). + s3:utils: If share is NULL in smbcacls, don't print it; (bso#13937). + s3:smbspool: Fix regression printing with Kerberos credentials; (bso#13939). + ctdb-scripts: CTDB restarts failed NFS RPC services by hand, which is incompatible with systemd; (bso#13860). + ctdb-daemon: Revert "We can not assume that just because we could complete a TCP handshake"; (bso#13888). + ctdb-daemon: Never use 0 as a client ID; (bso#13930). + ctdb-common: Fix memory leak; (bso#13943). + s3:debug: Enable logging for early startup failures; (bso#13904) - Update to samba-4.10.3 + CVE-2018-16860: Heimdal KDC: Reject PA-S4U2Self with unkeyed checksum; (bso#13685); (bsc#1134024).- CVE-2019-12435: zone operations can crash rpc server; (bso#13922); (bsc#1137815).- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697). - Add ceph_snapshots VFS module; (jsc#SES-183).- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).- Update to samba-4.10.2: + CVE-2019-3870 (World writable files in Samba AD DC private/ dir); (bso#13834). + CVE-2019-3880 (Save registry file outside share as unprivileged user); (bso#13851). + py/kcc_utils: py2.6 compatibility; (bso#13837). + libcli: permit larger values of DataLength in SMB2_ENCRYPTION_CAPABILITIES of negotiate response; (bso#13869). + regfio: Improve handling of malformed registry hive files; (bso#13840). + ctdb-version: Simplify version string usage; (bso#13789). + lib: Make fd_load work for non-regular files; (bso#13859). + dbcheck: in the middle of the tombstone garbage collection causes replication failures, dbcheck: add --selftest-check-expired-tombstones cmdline option; (bso#13816). + ndr_spoolss_buf: Fix out of scope use of stack variable in NDR_SPOOLSS_PUSH_ENUM_OUT(); (bso#13818). + s4/messaging: Fix undefined reference in linking libMESSAGING-samba4.so; (bso#13854). + acl_read: Fix regression for empty lists; (bso#13836). + s4:dlz make b9_has_soa check dc=@ node; (bso#13841). + s3:client: Fix printing via smbspool backend with kerberos auth; (bso#13832). + s4:librpc: Fix installation of Samba; (bso#13847). + s3:lib: Fix the debug message for adding cache entries; (bso#13848). + s3:utils: Add 'smbstatus -L --resolve-uids' to show username; (bso#13793). + s3:lib: Fix the debug message for adding cache entries; (bso#13848). + s3:waf: Fix the detection of makdev() macro on Linux; (bso#13853). * ctdb-build: Drop creation of .distversion in tarball; (bso#13789). * ctdb-packaging: Test package requires tcpdump, ctdb package should not own system library directory; (bso#13838). - Update to samba-4.10.1: + py/kcc_utils: py2.6 compatibility; (bso#13837); + libcli: permit larger values of DataLength in SMB2_ENCRYPTION_CAPABILITIES of negotiate response; (bso#13869); + regfio: Improve handling of malformed registry hive files; (bso#13840); + ctdb-version: Simplify version string usage; (bso#13789); + lib: Make fd_load work for non-regular files; (bso#13859); + dbcheck in the middle of the tombstone garbage collection causes replication failures, dbcheck: add --selftest-check-expired-tombstones cmdline option; (bso#13816); + ndr_spoolss_buf: Fix out of scope use of stack variable in NDR_SPOOLSS_PUSH_ENUM_OUT(); (bso#13818); + s4/messaging: Fix undefined reference in linking libMESSAGING-samba4.so; (bso#13854); + acl_read: Fix regression for empty lists; (bso#13836); + s4:dlz make b9_has_soa check dc=@ node; (bso#13841); + s3:client: Fix printing via smbspool backend with kerberos auth; (bso#13832); + s4:librpc: Fix installation of Samba; (bso#13847); + s3:lib: Fix the debug message for adding cache entries; (bso#13848); + s3:utils: Add 'smbstatus -L --resolve-uids' to show username; (bso#13793); + s3:lib: Fix the debug message for adding cache entries; (bso#13848); + s3:waf: Fix the detection of makdev() macro on Linux; (bso#13853); + ctdb-build: Drop creation of .distversion in tarball; (bso#13789); + ctdb-packaging: Test package requires tcpdump, ctdb package should not own system library directory; (bso#13838); - Update to samba-4.10.0: + s4-server: Open and close a transaction on sam.ldb at startup; (bso#13760); + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812); + s4/scripting/bin: Open unicode files with utf8 encoding and write + unicode string. + sambaundoguididx: Use the right escaped oder unescaped sam ldb files; (bso#13759); + Fix idmap cache pollution with S-1-22- IDs on winbind hickup; (bso#13813); + passdb: Update ABI to 0.27.2. + lib/winbind_util: Add winbind_xid_to_sid for --without-winbind; (bso#13813); + lib:util: Move debug message for mkdir failing to log level 1; (bso#13823);- MacOS credit accounting breaks with async SESSION SETUP; (bsc#1125601); (bso#13796). - Mac OS X SMB2 implmenetation sees Input/output error or Resource temporarily unavailable and drops connection; (bso#13698)- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).- CVE-2019-3880: Save registry file outside share as unprivileged user; (bso#13851); (bsc#1131060 ).- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0); (bso#13834); (bsc#1130703);- Update to samba-4.9.5 + audit_logging: Remove debug log header and JSON Authentication: prefix; (bso#13714); + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760); + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso# CID: 1433607; (bso#11495); + smbd: uid: Don't crash if 'force group' is added to an existing share connection; (bso#13690); + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility code; (bso#13770); + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803); + s3:utils/smbget fix recursive download with empty source directories; (bso#13199); + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716); + s3:libsmb: cli_smb2_list() can sometimes fail initially on a connection; (bso#13736); + join: Throw CommandError instead of Exception for simple errors; (bso#13747); + ldb: Avoid inefficient one-level searches; (bso#13762); + s3: libsmb: use smb2cli_conn_max_trans_size() in cli_smb2_list(); (bso#13736); + tldap: Avoid use after free errors; (bso#13776); + Fix idmap xid2sid cache churn; (bso#13802); + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812); + s3-smbd: Avoid assuming fsp is always intact after close_file call; (bso#13720); + s3-vfs-fruit: Add close call; (bso#13725); + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746); + s3-vfs: add glusterfs_fuse vfs module; (bso#13774); + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766); + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS) ftruncate and fallocate; (bso#13807); + lib/audit_logging: Actually create talloc; (bso#13737); + netcmd/user: python[3]-gpgme unsupported and replaced by python[3]-gpg; (bso#13728); + dns: Changing onelevel search for wildcard to subtree; (bso#13738); + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721); + sambaundoguididx: Use the right escaped oder unescaped sam ldb files; (bso#13759); + ctdb: Print locks latency in machinereadable stats; (bso#13742); + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786); + audit_logging: auth_json_audit required auth_json; (bso#13715); + man pages: Document prefork process model; (bso#13765); + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773); + s3:auth: ignore create_builtin_guests() failing without a valid idmap configuration; (bso#13697); + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC without trusts; (bso#13722); + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd is not available; (bso#13723); + s4:server: Add support for 'smbcontrol samba shutdown' and 'smbcontrol debug/debuglevel'; (bso#13752); + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616); + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330); + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774); + notifyd: Fix SIGBUS on sparc; (bso#13704); + waf: Check for libnscd; (bso#13787); + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770); + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717); + Recovery lock bug fixes; (bso#13800); + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726); + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727); + vfs_fileid: Fix get_connectpath_ino; (bso#13741); + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).- Fix update-apparmor-samba-profile script after apparmor switched to using named profiles. The change is backwards compatible; (bsc#1126377);- LoadParm().load_default() fails with "Unable to load default file"; (bsc#1089758);- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);- Update to samba-4.9.4 + libcli/smb: Don't overwrite status code; (bso#9175). + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164). + Session setup reauth fails to sign response; (bso#13661). + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677). + vfs_shadow_copy2: Nicely deal with attempts to open previous version for writing; (bso#13688). + Restoring previous version of stream with vfs_shadow_copy2 fails with NT_STATUS_OBJECT_NAME_INVALID fsp->base_fsp->fsp_name; (bso#13455). + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571). + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708) + PEP8: fix E231: missing whitespace after ','. + winbindd: Fix crash when taking profiles;(bso#13629) + CVE-2018-14629 dns: Fix CNAME loop prevention using counter regression; (bso#13600) + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686). + CVE-2018-16853: Do not segfault if client is not set; (bso#13571). + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679) + ctdb-daemon: Exit with error if a database directory does not exist; (bso#13696). + s3:libads: Add net ads leave keep-account option; (bso#13498).- Drop more %if..%endif guards which are idempotent. - Drop requires on ldconfig which are already auto-discovered. - Do not ignore errors from useradd/groupadd.- Remove python2 build dependency from samba-libs; (bsc#1116900);- Update update-apparmor-samba-profile script to ignore the shares's paths containing substitution variables in any place, not only at the beginning of the path.- Update to samba-4.9.3 + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD Internal DNS server; (bso#13600); (bsc#1116319); + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628); (bsc#1116320); + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server; (bso#13674); (bsc#1116322); + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers; (bso#13669); (bsc#1116321); + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos configuration (unsupported); (bso#13678); (bsc#1116324); + CVE-2018-16857: Bad password count in AD DC not always effective; window; (bso#13683); (bsc#1116323);- Update to samba-4.9.2 + dsdb: Add comments explaining the limitations of our current backlink behaviour; (bso#13418); + Fix problems running domain backups (handling SMBv2, sites); (bso#13621); + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3; (bso#13465); + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642); + File saving issues with vfs_fruit on samba >= 4.8.5; (bso#13646); + Enabling vfs_fruit looses FinderInfo; (bso#13649); + Cancelling of SMB2 aio reads and writes returns wrong error NT_STATUS_INTERNAL_ERROR; (bso#13667); + Fix CTDB recovery record resurrection from inactive nodes and simplify vacuuming; (bso#13641); + examples: Fix the smb2mount build; (bso#13465); + libtevent: Fix build due to missing open_memstream on Illiumos; (bso#13629); + winbindd_cache: Fix timeout calculation for sid<->name cache; (bso#13662); + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path; (bso#13653); + Extended DN SID component missing for member after switching group membership; (bso#13418); + Return STATUS_SESSION_EXPIRED error encrypted, if the request was encrypted; (bso#13624); + python: Allow forced signing via smb.SMB(); (bso#13621); + lib:socket: If returning early, set ifaces; (bso#13665); + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8 encoded unicode; (bso#13616); + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute; (bso#13673); + waf: Add -fstack-clash-protection; (bso#13601); + winbind: Fix segfault if an invalid passdb backend is configured; (bso#13668); + Fix bugs in CTDB event handling; (bso#13659); + Misbehaving nodes are sometimes not banned; (bso#13670);- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);- winbind requires latest version of libtevent-util0 to start- Backport latest gpo code from master + Read policy from local gpt cache + Offline policy application + Make group policy extensible via register/unregister gpext + gpext's run via a process_group_policy method- Enable profiling data collection- Change samba-kdc package name to samba-ad-dc - Move samba-ad-dc.service to the samba-ad-dc package- Update to samba-4.9.1 + s3: nmbd: Stop nmbd network announce storm; (bso#13620); + s3-rpcclient: Use spoolss_init_spoolss_UserLevel1 in winspool cmds; (bso#13597); + CTDB recovery lock has some race conditions; (bso#13617); + s3-rpc_client: Advertise Windows 7 client info; (bso#13597); + ctdb-doc: Remove PIDFILE option from ctdbd_wrapper man page; (bso#13610);- Tumbleweed doesn't define the sle_version macro, so we must include a check for suse_version also. Otherwise python3 is disabled on Tumbleweed.- Update to samba-4.9.0 + samba_dnsupdate: Honor 'dns zone scavenging' option, only update if needed; (bso#13605); + wafsamba: Fix 'make -j'; (bso#13606);- Update to samba-4.9.0rc5 + s3: VFS: vfs_full_audit: Ensure smb_fname_str_do_log() only returns absolute pathnames; (bso#13565); + s3: util: Do not take over stderr when there is no log file; (bso#13578); + Durable Reconnect fails because cookie.allow_reconnect is not set; (bso#13549); + krb5-samba: Interdomain trust uses different salt principal; (bso#13539); + vfs_fruit: Don't unlink the main file; (bso#13441); + smbd: Fix a memleak in async search ask sharemode; (bso#13602); + Fix Samba GPO issue when Trust is enabled; (bso#11517); + samba-tool: Add "virtualKerberosSalt" attribute to 'user getpassword/syncpasswords'; (bso#13539); + Fix CTDB configuration issues; (bso#13589); + ctdbd logs an error until it can successfully connect to eventd; (bso#13592);- Update to samba-4.9.0rc4 + s3: smbd: Ensure get_real_filename() copes with empty pathnames; (bso#13585); + samba domain backup online/rename commands force user to specify password on CLI; (bso#13566); + wafsamba/samba_abi: Always hide ABI symbols which must be local; (bso#13579); + Fix a panic if fruit_access_check detects a locking conflict; (bso#13584); + Fix memory and resource leaks; (bso#13567); + python: Fix print in dns_invalid.py; (bso#13580); + Aliasing issue causes incorrect IPv6 checksum; (bso#13588); + Fix CTDB configuration issues; (bso#13589); + s3: vfs: time_audit: fix handling of token_blob in smb_time_audit_offload_read_recv(); (bso#13568);- Add missing zlib-devel dependency which was previously pulled in by libopenssl-devel- Update to samba-4.9.0rc3+git.22.3fff23ae36e + CVE-2018-10858: libsmb: Harden smbc_readdir_internal() against returns from malicious servers; (bso#13453); + CVE-2018-1140: ldbsearch '(distinguishedName=abc)' and DNS query with escapes crashes, ldb: Release LDB 1.3.5 for CVE-2018-1140; (bso#13374); + CVE-2018-10918: cracknames: Fix DoS (NULL pointer de-ref) when not servicePrincipalName is set on a user; (bso#13552); + CVE-2018-10919: acl_read: Fix unauthorized attribute access via searches; (bso#13434); + ctdb_mutex_ceph_rados_helper: Set SIGINT signal handler; (bso#13540); + CVE-2018-1139 libcli/auth: Do not allow ntlmv1 over SMB1 when it is disabled via "ntlm auth"; (bso#13360); + s3-tldap: do not install test_tldap; (bso#13529); + ctdb_mutex_ceph_rados_helper: Fix deadlock via lock renewals; (bso#13540); + CVE-2018-1140 Add NULL check for ldb_dn_get_casefold() in ltdb_index_dn_attr(); (bso#13374); + ctdb-eventd: Fix CID 1438155; (bso#13554); + Fix CIDs 1438243, (Unchecked return value) 1438244 (Unsigned compared against 0), 1438245 (Dereference before null check) and 1438246 (Unchecked return value); (bso#13553); + ctdb: Fix a cut&paste error; (bso#13554); + systemd: Only start smb when network interfaces are up; (bso#13559); + Fix quotas don't work with SMB2; (bso#13553); + s3/smbd: Ensure quota code is only called when quota support detected; (bso#13563); + s3/libsmb: Explicitly set delete_on_close token for rmdir; (bso#13204); + s3:waf: Install eventlogadm to /usr/sbin; (bso#13561); + Shorten description in vfs_linux_xfs_sgid manual; (bso#13562);- Update to samba-4.9.0rc2+git.21.a1069afb007 + s3: smbd: Using "sendfile = yes" with SMB2 can cause CPU spin; (bso#13537); + s3: smbd: Fix path check in smbd_smb2_create_durable_lease_check(); (bso#13535); + samba-tool trust: Support discovery via netr_GetDcName; (bso#13538); + s4-dsdb: Only build dsdb Python modules for AD DC; (bso#13542); + Fix portability issues on freebsd; (bso#13520); + DNS wildcard search does not handle multiple labels correctly; (bso#13536); + samba-tool domain trust: Fix trust compatibility to Windows Server 1709 and FreeIPA; (bso#13308); + Fix portability issues on freebsd; (bso#13520); + ctdb-protocol: Fix CTDB compilation issues; (bso#13545); + ctdb-docs: Replace obsolete reference to CTDB_DEBUG_HUNG_SCRIPT option; (bso#13546); + ctdb-doc: Provide an example script for migrating old configuration; (bso#13550); + ctdb-event: Implement event tool "script list" command; (bso#13551);- Update to samba-4.8.4+git.37.a7a861d7982; + CVE-2018-1139: Weak authentication protocol allowed; (bsc#1095048); (bsc#13360); + CVE-2018-1140: Denial of Service Attack on DNS and LDAP server; (bsc#1095056); (bso#13466); (bso#13374); + CVE-2018-10858: Insufficient input validation on client directory listing in libsmbclient; (bsc#1103411); (bso#13453); + CVE-2018-10918: Denial of Service Attack on AD DC DRSUAPI server; (bsc#1103414); (bso#13552); + CVE-2018-10919: Confidential attribute disclosure from the AD LDAP server; (bsc#1095057); (bso#13434); + s3:winbind: winbind normalize names' doesn't work for users; (bso#12851); + winbind: Fix UPN handling in canonicalize_username(); (bso#13369); + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428); + samdb: Fix building Samba with gcc 8.1; (bso#13437); + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440); + smbd: Flush dfree memcache on service reload; (bso#13446); + ldb: Save a copy of the index result before calling the + lib/util: No Backtrace given by Samba's AD DC by default; (bso#13454). + s3: smbd: printing: Re-implement delete-on-close semantics for print files missing since 3.5.x; (bso#13457). + python: Fix talloc frame use in make_simple_acl(); (bso#13474). + krb5_wrap: Fix keep_old_entries logic for older Kerberos libraries;(bso#13478). + krb5_plugin: Add winbind localauth plugin for MIT Kerberos; (bso#13480).- Add missing package descriptions; (bsc#1093864); - Fix dependency issue between samba-python and samba-kdc; (bsc#1062876); - Call update-apparmor-samba-profile when running samba-ad-dc; (bsc#1092099);- Update to 4.8.2 + After update to 4.8.0 DC failed with "Failed to find our own NTDS Settings objectGUID" (bso#13335). + fix incorrect reporting of stream dos attributes on a directory (bso#13380). + vfs_ceph: add asynchronous fsync; fake synchronous call (bso#13412). + vfs_ceph: add fake async pwrite/pread send/recv hooks; (bso#13425) + vfs_ceph: Fix memory leak; (bso#13424). + libsmbclient: Fix hard-coded connection error return of ETIMEDOUT; (bso#13419). + s4-lsa: Fix use-after-free in LSA server; (bso#13420). + winbindd: Do re-connect if the RPC call fails in the passdb case; (bso#13430). + cleanupd: Sends MSG_SMB_UNLOCK twice to interested peers; (bso#13416). + cleanupd: Use MSG_SMB_BRL_VALIDATE to signal cleanupd unclean process shutdown; (bso#13414). + ctdb-client: Remove ununsed functions from old client code; (bso#13411). + printing: Return the same error code as windows does on upload failures; (bso#13395). + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged pipe is not accessable; (bso#13400). + s4:lsa_lookup: remove TALLOC_FREE(state) after all dcesrv_lsa_Lookup{Names,Sids}_base_map() calls; (bso#13420). + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407). + s3:smbspool: Fix cmdline argument handling; (bso#13417).- Move libdfs-server-ad-samba4.so library from kdc to libs package, as it is required by some client libs; (bsc#1074135); - Update to 4.8.1; (bsc#1091179); + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error, we don't own it here; (bso#13244); + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't support fdopendir(); (bso#13270); + Round-tripping ACL get/set through vfs_fruit will increase the number of ACE entries without limit; (bso#13319); + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit issues; (bso#13347); + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without delete access; (bso#13358); + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372); + s3: smbd: Unix extensions attempts to change wrong field in fchown call; (bso#13375); + ms_schema/samba-tool visualize: Fix python2.6 incompatibility; (bso#13337); + Fix invocation of gnutls_aead_cipher_encrypt(); (bso#13352); + Windows 10 cannot logon on Samba NT4 domain; (bso#13328); + winbindd: Recover loss of netlogon secure channel in case the peer DC is rebooted; (bso#13332); + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363); + ctdb-client: Fix bugs in client code; (bso#13356); + ctdb-scripts: Drop "net serverid wipe" from 50.samba event script; (bso#13359); + s3: lib: messages: Don't use the result of sec_init() before calling sec_init(); (bso#13368); + libads: Fix the build '--without-ads'; (bso#13273); + winbind: Keep "force_reauth" in invalidate_cm_connection, add 'smbcontrol disconnect-dc'; (bso#13332); + vfs_virusfilter: Fix CIDs 1428738-1428740; (bso#13343); + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367); + rpc_server: Fix core dump in dfsgetinfo; (bso#13370); + smbclient: Fix notify; (bso#13382); + Fix smbd panic if the client-supplied channel sequence number wraps; (bso#13215); + Windows 10 cannot logon on Samba NT4 domain; (bso#13328); + lib/util: Remove unused '#include ' from tests/tfork.c; (bso#13342); + Fix build errors with cc from developerstudio 12.5 on Solaris; (bso#13343); + Fix the picky-developer build on FreeBSD 11; (bso#13344); + s3:modules: Fix the build of vfs_aixacl2.c; (bso#13345); + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338); + lib:replace: Fix linking when libtirpc-devel overwrites system headers; (bso#13341); + winbindd: 'wbinfo --name-to-sid' returns misleading result on invalid query; (bso#13312); + s3:passdb: Do not return OK if we don't have pinfo set up; (bso#13376); + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);- Use new foreground execution flags for systemd samba daemons; (bsc#1088574); (bsc#1071090); (bsc#1065551); + Add %post scriptlet to clear old sysconfig flags - Update vendor-files to commit 880b3e7. + Set samba sysconfig template variables to "" + Add required daemon flags directly to systemd unit- Specfile cleanup + Remove %if..%endif guards which don't affect the build + Remove redundant %clean section + Replace old $RPM_* shell vars with macros- BuildRequire pkgconfig(systemd) and pkgconfig(libsystemd) in place of systemd and systemd-devel: Allow OBS to optimize the workload by allowing the usage of the 'build-optimized' systemd packages.- Enable building samba with python3, and create a samba-python3 package.- Update to 4.8 + New GUID Index mode in sam.ldb for the AD DC + GPO support for samba KDC + Time machine support with vfs_fruit + Encrypted secrets + AD Replication visualization + Improved trust support - ability to not scan global trust list - AD external trusts have limited support - verbose trusted domain listing + VirusFilter VFS module + NT4-style replication removed + vfs_aio_linux removed- Disable samba-pidl package, due to the removal of dependency perl-Parse-Yapp; (bsc#1085150);- Update to 4.7.6; + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally; (bso#11343); (bsc#1081741); + CVE-2018-1057: Authenticated users can change other users' password; (bso#13272); (bsc#1081024).- Disable python until full python3 port is done; (bsc#1082139); + Remove contents of package samba-python + Remove contents of package libsamba-policy0 + Remove contents of package libsamba-policy-devel + Remove library libsamba-python-samba4.so from samba-libs package + Remove library libsamba-net-samba4.so from samba-libs package + Remove smbtorture binary and manpage from samba-test- samba fails to build with glibc2.27; (bsc#1081042);- Update to 4.7.5; (bsc#1080545); + smbd tries to release not leased oplock during oplock II downgrade; (bso#13193); + Fix copying file with empty FinderInfo from Windows client to Samba share with fruit; (bso#13181); + build: Deal with recent glibc sunrpc header removal; (bso#10976); + Make Samba work with tirpc and libnsl2; (bso#13238); + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208); (bsc#1075206); + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue; (bso#12986); + ctdb-recovery-helper: Deregister message handler in error paths; (bso#13188); + samba: Only use async signal-safe functions in signal handler; (bso#13240); + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue; (bso#12986); + repl_meta_data: Fix linked attribute corruption on databases with unsorted links on expunge. dbcheck: Add functionality to fix the corrupt database; (bso#13228); + Fix smbd panic when chdir returns error during exit; (bso#13189); + Make Samba work with tirpc and libnsl2; (bso#13238); + Fix POSIX ACL support on HPUX and possibly other big-endian OSs; (bso#13176);- Update to 4.7.4; (bsc#1080545); + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140); + s3: libsmb: Fix valgrind read-after-free error in cli_smb2_close_fnum_recv(); (bso#13171); + s3: libsmb: Fix reversing of oldname/newname paths when creating a reparse point symlink on Windows from smbclient; (bso#13172); + Build man page for vfs_zfsacl.8 with Samba; (bso#12934); + repl_meta_data: Allow delete of an object with dangling backlinks; (bso#13095); + s4:samba: Fix default to be running samba as a deamon; (bso#13129); + Performance regression in DNS server with introduction of DNS wildcard, ldb: Release 1.2.3; (bso#13191); + vfs_zfsacl: Fix compilation error; (bso#6133); + "smb encrypt" setting changes are not fully applied until full smbd restart; (bso#13051); + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052); + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155); + winbindd: Dependency on trusted-domain list in winbindd in critical auth codepath; (bso#13173); + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120); + ctdb: sock_daemon leaks memory; (bso#13153); + TCP tickles not getting synchronised on CTDB restart; (bso#13154); + winbindd: winbind parent and child share a ctdb connection; (bso#13150); + pthreadpool: Fix deadlock; (bso#13170); + pthreadpool: Fix starvation after fork; (bso#13179); + messaging: Always register the unique id; (bso#13180); + s4/smbd: set the process group; (bso#13129); + Fix broken linked attribute handling; (bso#13095); + The KDC on an RWDC doesn't send error replies in some situations; (bso#13132); + libnet_join: Fix 'net rpc oldjoin'; (bso#13149); + g_lock conflict detection broken when processing stale entries; (bso#13195); + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired sessions; (bso#13197); + s3:libads: net ads keytab list fails with "Key table name malformed"; (bso#13166); (bsc#1067700); + Fix crash in pthreadpool thread after failure from pthread_create; (bso#13170); + s4:samba: Allow samba daemon to run in foreground; (bso#13129); (bsc#1065551); + third_party: Link the aesni-intel library with "-z noexecstack"; (bso#13174); + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I" options; (bso#13125);- Re-enable usage of libnsl (did got lost with glibc change) - Use TI-RPC (sunrpc is deprecated and will be removed soon from glibc)- smbc_opendir should not return EEXIST with invalid login credentials; (bnc#1065868).- Update to 4.7.3; (bsc#1069666); + Non-smbd processes using kernel oplocks can hang smbd; (bso#13121); + python: use communicate to fix Popen deadlock; (bso#13127); + smbd on disk file corruption bug under heavy threaded load; (bso#13130); + tevent: version 0.9.34; (bso#13130); + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118); + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug; (bsc#1060427);(bso#13041); + CVE-2017-15275: s3: smbd: Chain code can return uninitialized memory when talloc buffer is grown; (bsc#1063008); (bso#13077); - Build with AD DC support only in openSUSE.- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- samba-tool requires samba-python; (bnc#1067771).- Run all daemons in the foreground and let systemd handle it; (bsc#1065551). - Update to 4.7.1; + Fix exporting subdirs with shadow_copy2; (bso#13091); + Currently if getwd() fails after a chdir(), we panic; (bso#13027); + Ensure default SMB_VFS_GETWD() call can't return a partially completed struct smb_filename; (bso#13068); + sys_getwd() can leak memory or possibly return the wrong errno on older systems; (bso#13069); + smbclient doesn't correctly canonicalize all local names before use; (bso#13093); + Fix broken linked attribute handling; (bso#13095); + Missing LDAP query escapes in DNS rpc server; (bso#12994); + Link to -lbsd when building replace.c by hand; (bso#13087); + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem; (bso#6133); + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module; (bso#7909); + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module; (bso#7933); + Missing assignment in sl_pack_float; (bso#12991); + Wrong Samba access checks when changing DOS attributes; (bso#12995); + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062); + groupmap cleanup should not delete BUILTIN mappings; (bso#13065); + Enabling vfs_fruit results in loss of Finder tags and other xattrs; (bso#13076); + man pages: Properly ident lists; (bso#9613); + smb.conf.5: Sort parameters alphabetically; (bso#13081); + Fix GUID string format on GetPrinter info; (bso#12993); + Remote serverid check doesn't check for the unique id; (bso#13042); + CTDB starts consuming memory if there are dead nodes in the cluster; (bso#13056); + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070); + libgpo doesn't sort the GPOs in the correct order; (bso#13046); + Remote serverid check doesn't check for the unique id; (bso#13042); + vfs_catia: Fix a potential memleak; (bso#13090); + Fix file change notification for renames; (bso#12903); + Samba DNS server does not honour wildcards; (bso#12952); + Can't change password in samba from a Windows client if Samba runs on IPv6 only interface; (bso#13079); + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086); + Apple client can't cope with SMB2 async replies when creating symlinks; (bso#13047); + s4:rpc_server:backupkey: Move variable into scope; (bso#12959); + Fix ntstatus_gen.h generation on 32bit; (bso#13099); + Fix a double free in vfs_gluster_getwd(); (bso#13100); + Fix resouce leaks and pointer issues; (bso#13101); + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);- Add samba-kdc to baselibs.conf. - Do not wrap samba-kdc's package definition into if/endif: the package won't be generated simply based on the fact that there is no files section for the package. Allows the source validator to ensure samba-kdc is a built package.- Update to 4.7.0; + Whole DB read locks: Improved LDAP and replication consistency; (bso#12858). + Samba AD with MIT Kerberos + Dynamic RPC port range: Default range changed from "1024-1300" to "49152-65535". + Authentication and Authorization audit support: New auth_audit debug class. + Multi-process LDAP Server: The LDAP server in the AD DC now honours the process model used for the rest of the 'samba' process. + Improved Read-Only Domain Controller (RODC) Support; (bso#12977). + Additional password hashes stored in supplementalCredentials. + Improvements to DNS during Active Directory domain join. + Significant AD performance and replication improvements. + Query record for open file or directory. + Removal of lpcfg_register_defaults_hook(). + Change of loadable module interface. + SHA256 LDAPS Certificates: The self-signed certificate generated for use on LDAPS will now be generated with a SHA256 self-signature, not a SHA1 self-signature. + CTDB no longer allows mixed minor versions in a cluster. + CTDB now ignores hints from Samba about TDB flags when attaching to databases. + New configuration variable CTDB_NFS_CHECKS_DIR. + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed. + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed. + The example NFS Ganesha call-out has been improved. + A new "replicated" database type is available.- CVE-2017-12163: Prevent client short SMB1 write from writing server memory to file; (bso#13020); (bsc#1058624).- CVE-2017-12150: Some code path don't enforce smb signing, when they should; (bso#12997); (bsc#1058622).- CVE-2017-12151: Keep required encryption across SMB3 dfs redirects; (bso#12996); (bsc#1058565).- Clean specfile assuming SUSE-only system and product >=SLE11 + %{ul_version}, %{rhel_version}, %{mandriva_version}, %{centos_version} are always undefined + %{_vendor} is "suse" and %{suse_version} is at least 1100- Update to 4.6.7; (bsc#1054017) + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392). + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937). + vfs_ceph provides inconsistent directory listings; (bso#12911). + Misused talloc context can cause a user to crash their smbd by chaining SMB1 commands.; (bso#12836). + Use-after free can crash libsmbclient code.; (bso#12927). + Server exit with active AIO can crash.; (bso#12925). + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910). + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs; (bso#12898). + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897). + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for authentication; (bso#12886). + finder sidebar showing question mark instead of icon when using ip to connect with vfs_fruit; (bso#12840). + Winbind stops obtaining the 'unixHomeDirectory' & 'loginShell' attributes from AD.; (bso#12720). + KCC run at selftest startup can fail spuriously due to a race; (bso#12869). + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for the remote change; (bso#12782). + rpc_pipe_client memory leaks due to long term memory context passed to rpc_pipe_open_interface(); (bso#12890). + CVE-2017-2619 breaks accessing previous versions of directories with snapshots in subdirectories of the share; (bso#12885). + dns_name_equal doing OOB read; (bso#12813). + replica_sync tests flap; (bso#12753). + Selftest should not call 'net cache flush' and wipe important winbind entries; (bso#12868). + Old Samba versions don't support using recent ldb versions (>=1.1.30); (bso#12859). + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490). + race starting winbindd against posixacl test; (bso#12843). + Crash in the reentrant smbd_smb2_create_send() if the something fails in the subsequent try; (bso#12832). + spnego.c passes the wrong argument order to gensec_update_ev() for the FALLBACK case; (bso#12788). + Clients with SMB3 support can't connect with "server max protocol = SMB2_02"; (bso#12772). + A log message of samb-tool user syncpasswords reverses string arguments in a debug message "Call Popen[...".; (bso#12768). + The smb tarmode tests kills the share dir contents; (bso#12867). + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862). + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860). + manpage/index.html lists links not in alphabetical order; (bso#12854). + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831). + If a record is locked in a database, then recovery does not complete; (bso#12857). + debug_locks.sh script does not log any information; (bso#12856). + SIGSEGV in cm_connect_lsa_tcp dereferencing conn->lsa_tcp_pipe->transport after error; (bso#12852). + smbclient can't parse DOMAIN+username if a different winbind separator is used; (bso#12849). + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845). + Related requests with TreeConnect fail with NETWORK_NAME_DELETED; (bso#12844). + cli->server_os not filled correctly; (bso#12779). + REGRESSION: smbclient doesn't print the session setup anymore; (bso#12824). + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808). + CTDB NFS call-out failures do not cause event failures; (bso#12837). + net command fails due to incorrectly return code; (bso#12828). + Fix building Samba with GCC 7.1; (bso#12827).- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again; (bsc#1048339).- fix cephwrap_chdir(); (bsc#1048790). - Update to 4.6.6 + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation; (bsc#1048278).- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).- Fix inconsistent ctdb socket path; (bsc#1048352). - Fix non-admin cephx authentication; (bsc#1048387).- Update to 4.6.5; (bsc#1040157) + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at startup; (bso#12814). + vfs_expand_msdfs tries to open the remote address as a file path; (bso#12687). + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type); (bso#12798). + With clustering get update_num_read_oplocks failed and PANIC: num_share_modes == 1 assertion failure; (bso#11844). + contend_level2_oplocks_begin_default oplock optimisation doesn't carry over to leases; (bso#12766). + `ctdb nodestatus` incorrectly displays status for all nodes with wrong exit code; (bso#12802). + CTDB can spin hard on revoking readonly delegations if a node becomes disconnected; (bso#12697). + Printing a share mode entry with leases can crash in the ndr code; (bso#12793). + Fix flakey unit tests for eventd; (bso#12792). + CTDB daemon crashes if built with clang; (bso#12770). + smbcacls fails if no password is specified; (bso#12765). + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757). + samba-tool user syncpasswords doesn't trigger the script when a user gets removed; (bso#12767). + systemd: fix detection of libsystemd; (bso#12764). + Notify subsystem only maps first inotify mask to Windows notify filter; (bso#12760). + Allow passing trusted domain password as plain-text to PASSDB layer; (bso#12751). + Can't case-rename files with vfs_fruit; (bso#12749). + wrong sid->uid mapping for SIDs residing in sIDHistory; (bso#12702). + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562). + Ordering of notify responses broken; (bso#12756).- s3: libsmb: Fix error where short name length was read as 2 bytes, should be 1; (bso#11822); (bsc#1042419).- Revert explicit winbind %{version}-%{release} dependency. + The ABI has stabilized since (bsc#936909), so remove to fix cross-media dependencies; (bsc#1037899).- Fix CVE-2017-7494 remote code execution from a writable share; (bso#12780); (bsc#1038231).- Update to 4.6.3; (bsc#1036011) + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots from shares with GlusterFS backend; (bso#12743). + Fix for Solaris C compiler; (bso#12559). + s3: locking: Update oplock optimization for the leases era; (bso#12628). + Make the Solaris C compiler happy; (bso#12693). + s3: libgpo: Allow skipping GPO objects that don't have the expected LDAP attributes; (bso#12695). + Fix buffer overflow caused by wrong use of getgroups; (bso#12747). + lib: debug: Avoid negative array access; (bso#12746). + cleanupdb: Fix a memory read error; (bso#12748). + streams_xattr and kernel oplocks results in NT_STATUS_NETWORK_BUSY; (bso#7537). + winbindd: idmap_autorid allocates ids for unknown SIDs from other backends; (bso#11961). + vfs_fruit: Resource fork open request with flags=O_CREAT|O_RDONLY; (bso#12565). + manpages/vfs_fruit: Document global options; (bso#12615). + lib/pthreadpool: Fix a memory leak; (bso#12624). + Lookup-domain for well-known SIDs on a DC; (bso#12727). + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728). + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729). + credentials_krb5: use gss_acquire_cred for client-side GSSAPI use case; (bso#12611). + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690). + ctdb-readonly: Avoid a tight loop waiting for revoke to complete; (bso#12697). + ctdb_event monitor command crashes if event is not specified; (bso#12723). + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733). + smbd: Fix smb1 findfirst with DFS; (bso#12558). + smbd: Do an early exit on negprot failure; (bso#12610). + winbindd: Fix substitution for 'template homedir'; (bso#12699). + s4:kdc: Disable principal based autodetected referral detection; (bso#12554). + idmap_autorid: Allocate new domain range if the callers knows the sid is valid; (bso#12613). + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724). + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for trusted domain; (bso#12725). + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731). + winbindd: Fix password policy for pam authentication; (bso#12725). + s3:gse: Correctly handle external trusts with MIT; (bso#12554). + auth/credentials: Always set the realm if we set the principal from the ccache; (bso#12611). + replace: Include sysmacros.h; (bso#12686). + s3:vfs_expand_msdfs: Do not open the remote address as a file; (bso#12687). + s3:libsmb: Only print error message if kerberos use is forced; (bso#12704). + winbindd: Child process crashes when kerberos-authenticating a user with wrong password; (bso#12708). + vfs_fruit: Office document opens as read-only on macOS due to CNID semantics; (bso#12715). + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is fragmented; (bso#12737).- Generate and update vendor-files tarball from Git + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).- Generate source tarball directly from Git using OBS tar_scm + use version string derived from parent Git tag and commit hash - remove obsolete vendor-files/tools/package-data version ID + explicitly generate ctdb manpages, needed without "make dist"- Update to 4.6.2 + remove bso#12721 patches now upstream- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622). + x86-64 and aarch64- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).- Build and install the html man pages (bsc#1021907).- Fix CVE-2017-2619 regression with "follow symlinks = no"; (bso#12721).- Update to 4.6.1 + symlink race permits opening files outside share directory; CVE-2017-2619; (bso#12496); (bsc#1027147) + testparm checks for valid idmap parameters + add new krb client encryption types + support for printer driver upload from windows 10 + inherit owner = 'unix only' for improved quota support + improved CTDB event support + new primary group support for idmap_ad + idmap_hash deprecated + mvxattr added to recursively rename extended attributes- Remove chkconfig requirements for systemd systems- Don't call insserv if systemd is used- Fix check if we need to require insserv- async_req: make async_connect_send() "reentrant"; (bso#12105); (bsc#1024416).- Force usage of ncurses6-config thru NCURSES_CONFIG env var; (bsc#1023847).- add missing patch for libnss_wins segfault; (bsc#995730).- Fix vfs_ceph builds against recent Ceph versions; (bsc#1021933).- Document "winbind: ignore domains" parameter; (bsc#1019416).- Add base Samba dependency to samba-ceph package.- Update to 4.5.3 + Heap-based Buffer Overflow Remote Code Execution Vulnerability; CVE-2016-2123; (bso#12409); (bsc#1014437). + Don't send delegated credentials to all servers; CVE-2016-2125; (bso#12445); (bsc#1014441). + denial of service due to a client triggered crash in the winbindd parent process; CVE-2016-2126; (bso#12446); (bsc#1014442). - 4.5.1 and 4.5.2 updates + various streams vfs fixes + various printing fixes + ntlm_auth: do not map explicitly empty domain + various stability fixes in smbd + match file compression ReFS behavior- Add missing ldb module directory; (bnc#1012092).- s3/client: obey 'disable netbios' smb.conf param, don't connect via NBT port; (bsc#1009085); (bso#12418).- Include vfstest in samba-test; (bsc#1001203).- s3/winbindd: using default domain with user@domain.com format fails; (bsc#997833).- Fix segfault in libnss_wins; (bso#12277); (bso#12269); (bsc#995730).- Update to 4.5.0 + NTLM1 Authentication disabled by default + SMB2.1 leases enabled by default + Support for OFD locks + ctdb tool rewritten + Added shadow copy snapshot prefix parameter- Fix illegal memory access after memory has been deleted; (bso#11836); (bsc#975299).- Prevent core, make sure response->extra_data.data is always cleared out; (bsc#993692).- Don't package man pages for VFS modules that aren't built; (boo#993707).- Fix population of ctdb sysconfig after source merge; (bsc#981566).- Enable vfs_ceph builds for Factory (x86-64) + Package as samba-ceph to avoid Ceph dependency in base package.- Update to 4.4.5 + Prevent client-side SMB2 signing downgrade; CVE-2016-2119; (bso#11860); (bsc#986869).- Remove obsolete syslog.target; (bsc#983938).- Honor smb.conf socket options in winbind; (bsc#975131).- Don't use htons() with IP_PROTO_RAW; (bso#11705); (bsc#969522).- Update to 4.4.4 + SMB3 multichannel: Add implementation of missing channel sequence number verification; (bso#11809). + smbd:close: Only remove kernel share modes if they had been taken at open; (bso#11919). + notifyd: Prevent NULL deref segfault in notifyd_peer_destructor; (bso#11930). + s3:rpcclient: Make '--pw-nt-hash' option work; (bso#10796). + Fix case sensitivity issues over SMB2 or above; (bso#11438). + s3:smbd: Fix anonymous authentication if signing is mandatory. (bso#11910) + Fix NTLM Authentication issue with squid; (bso#11914). + pdb: Fix segfault in pdb_ldap for missing gecos; (bso#11530). + Fix memory leak in share mode locking; (bso#11934).- Update to 4.4.3 + Various post-badlock regressions; (bso#11841); (bso#11850); (bso#11858); (bso#11870); (bso#11872). + Only allow idmap_hash for default idmap config (bso#11786). + smbd: Avoid large reads beyond EOF; (bso#11878). + vfs_acl_common: Avoid setting POSIX ACLs if "ignore system acls" is set; (bso#11806). + libads: Record session expiry for spnego sasl binds; (bso#11852).- Fix NTLMSSP regressions caused by previous CVE fixes; (bso#11849); (bsc#975962); (bsc#979268), (bsc#977669).- Revert shared library packaging to comply with SLPP- Update to 4.4.2 + A man-in-the-middle can downgrade NTLMSSP authentication; CVE-2016-2110; (bso#11688); (bsc#973031). + Domain controller netlogon member computer can be spoofed; CVE-2016-2111; (bso#11749); (bsc#973032). + LDAP conenctions vulnerable to downgrade and MITM attack; CVE-2016-2112; (bso#11644); (bsc#973033). + TLS certificate validation missing; CVE-2016-2113; (bso#11752); (bsc#973034). + Named pipe IPC vulnerable to MITM attacks; CVE-2016-2115; (bso#11756); (bsc#973036). + "Badlock" DCERPC impersonation of authenticated account possible; CVE-2016-2118; (bso#11804); (bsc#971965). + DCERPC server and client vulnerable to DOS and MITM attacks; CVE-2015-5370; (bso#11344); (bsc#936862).- Fix samba.tests.messaging test and prevent potential tdb corruption by removing obsolete now invalid tdb_close call; (bsc#974629).- Obsolete libsmbclient from libsmbclient0 while not providing it; (bsc#972197).- Update to 4.4.0. + Read of uninitialized memory DNS TXT handling; (bso#11128); (bso#11686); CVE-2016-0771. + Getting and setting Windows ACLs on symlinks can change permissions on link target; (bso#11648); CVE-2015-7560. + Sockets with htons(IPPROTO_RAW); (bso#11705); CVE-2015-8543. + s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystem with no ACL support; (bso#10489). + docs: Add example for domain logins to smbspool man page; (bso#11643). + smbd: Show correct disk size for different quota and dfree block sizes; (bso#11681). + docs: Add smbspool_krb5_wrapper manpage; (bso#11690). + winbindd: Return trust parameters when listing trusts; (bso#11691). + ctdb: Do not provide a useless pkgconfig file for ctdb; (bso#11696). + Crypto.Cipher.ARC4 is not available on some platforms, fallback to M2Crypto.RC4.RC4 then; (bso#11699). + s3:utils/smbget: Set default blocksize; (bso#11700). + Streamline 'smbget' options with the rest of the Samba utils; (bso#11700). + s3:clispnego: Fix confusing warning in spnego_gen_krb5_wrap(); (bso#11702). + s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703). + loadparm: Fix memory leak issue; (bso#11708). + lib/tsocket: Work around sockets not supporting FIONREAD; (bso#11714). + s3:vfs:glusterfs: Fix build after quota changes; (bso#11715). + ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ..."; (bso#11719). + lib:socket: Fix CID 1350010: Integer OVERFLOW_BEFORE_WIDEN; (bso#11723). + smbd: Fix CID 1351215 Improper use of negative value; (bso#11724). + smbd: Fix CID 1351216 Dereference null return value; (bso#11725). + s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new file; (bso#11727). + docs: Add manpage for cifsdd; (bso#11730). + param: Fix str_list_v3 to accept ; again; (bso#11732). + lib/socket: Fix improper use of default interface speed; (bso#11734). + lib:socket: Fix CID 1350009: Fix illegal memory accesses (BUFFER_SIZE_WARNING); (bso#11735). + libcli: Fix debug message, print sid string for new_ace trustee; (bso#11738). + Fix installation path of Samba helper binaries; (bso#11739). + Fix memory leak in loadparm; (bso#11740). + tevent: version 0.9.28: Fix memory leak when old signal action restored; (bso#11742). + smbd: Ignore SVHDX create context; (bso#11753). + Fix net join; (bso#11755). + s3:libads: setup the msDS-SupportedEncryptionTypes attribute on ldap_add; (bso#11755). + passdb: Add linefeed to debug message; (bso#11763). + s3:utils/smbget: Fix option parsing; (bso#11767). + libnet: Make Kerberos domain join site-aware; (bso#11769). + Reset TCP Connections during IP failover; (bso#11770). + ldb: Version 1.1.26; (bso#11772). + s3:smbd: Add negprot remote arch detection for OSX; (bso#11773). + vfs_glusterfs: Fix use after free in AIO callback; (bso#11774). + mkdir can return ACCESS_DENIED incorrectly on create race; (bso#11780). + "trustdom_list_done: Got invalid trustdom response" message should be avoided; (bso#11782). + Mismatch between local and remote attribute ids lets replication fail with custom schema; (bso#11783). + Quota is not supported on Solaris 10; (bso#11788). + Talloc: Version 2.1.6; (bso#11789). + smbd: Enable multi-channel if 'server multi channel support = yes' in the config; (bso#11796). + build: Fix build when '--without-quota' specified; (bso#11798). + lib/socket/interfaces: Fix some uninitialied bytes; (bso#11802). + Access based share enum: handle permission set in configuration files; (bso#8093). + See also WHATSNEW.txt from the samba-doc package.- Update to 4.3.6. + Getting and setting Windows ACLs on symlinks can change permissions on link target; CVE-2015-7560; (bso#11648); (bsc#968222). + Fix Out-of-bounds read in internal DNS server; CVE-2016-0771; (bso#11128); (bso#11686); (bsc#968223).- Upgrade on-disk FSRVP server state to new version; (bsc#924519).- Only obsolete but do not provide gplv2/3 package names; (bsc#968973).- Relocate existing lock files to /var/lib/samba/lock; (bsc#968963).- Obsolete no longer existing samba-32bit package; (bsc#967625).- Update to 4.3.5. + s3:utils/smbget: Fix recursive download; (bso#6482). + s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystemi with no ACL support; (bso#10489). + s3:smbd/oplock: Obey kernel oplock setting when releasing oplocks; (bso#11400). + vfs_shadow_copy2: Fix case where snapshots are outside the share; (bso#11580). + smbclient: Query disk usage relative to current directory; (bso#11662). + winbindd: Handle expired sessions correctly; (bso#11670). + smbd: Show correct disk size for different quota and dfree block sizes; (bso#11681). + smbcacls: Fix uninitialized variable; (bso#11682). + s3:smbd: Ignore initial allocation size for directory creation; (bso#11684). + s3-client: Add a KRB5 wrapper for smbspool; (bso#11690). + s3-parm: Clean up defaults when removing global parameters; (bso#11693). + Use M2Crypto.RC4.RC4 on platforms without Crypto.Cipher.ARC4; (bso#11699). + s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703). + ctdb: Remove error messages after kernel security update; CVE-2015-8543; (bso#11705). + loadparm: Fix memory leak issue; (bso#11708). + lib/tsocket: Work around sockets not supporting FIONREAD; (bso#11714). + ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ..."; (bso#11719). + s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new file; (bso#11727). + param: Fix str_list_v3 to accept ";" again; (bso#11732).- Shift samba-client sysconfig data into samba and samba-winbind; (bsc#947361).- Simplify shared library packaging; (bsc#966956).- Enable clustering (CTDB) support; (bsc#966271).- s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703); (bsc#964023).- Add quotes around path of update-apparmor-samba-profile; (bnc#962177).- Remove autoconf build-time requirement.- Update to 4.3.4. + vfs_fruit: Enable POSIX directory rename semantics; (bso#11065). + Crash: Bad talloc magic value - access after free; (bso#11394). + Copying files with vfs_fruit fails when using vfs_streams_xattr without stream prefix and type suffix; (bso#11466). + samba-tool: Fix uncaught exception if no fSMORoleOwner attribute is given; (bso#11613). + Fix a typo in the smb.conf manpage, explanation of idmap config; (bso#11619). + Correctly initialize the list head when keeping a list of primary followed by DFS connections; (bso#11624). + Reduce the memory footprint of empty string options; (bso#11625). + lib/async_req: Do not install async_connect_send_test; (bso#11639). + Fix typos in man vfs_gpfs; (bso#11641). + Make "hide dot files" option work with "store dos attributes = yes"; (bso#11645). + Fix a corner case of the symlink verification; (bso#11647); (bnc#960249). + Do not disable "store dos attributes" on-the-fly; (bso#11649). + Update lastLogon and lastLogonTimestamp; (bso#11659).- Prevent access denied if the share path is "/"; (bso#11647); (bnc#960249).- Update to 4.3.3. + Malicious request can cause Samba LDAP server to hang, spinning using CPU; CVE-2015-3223; (bso#11325); (bnc#958581). + Remote read memory exploit in LDB; CVE-2015-5330; (bso#11599); (bnc#958586). + Insufficient symlink verification (file access outside the share); CVE-2015-5252; (bso#11395); (bnc#958582). + No man in the middle protection when forcing smb encryption on the client side; CVE-2015-5296; (bso#11536); (bnc#958584). + Currently the snapshot browsing is not secure thru windows previous version (shadow_copy2); CVE-2015-5299; (bso#11529); (bnc#958583). + Fix Microsoft MS15-096 to prevent machine accounts from being changed into user accounts; CVE-2015-8467; (bso#11552); (bnc#958585).- Update to 4.3.2. + vfs_gpfs: Re-enable share modes; (bso#11243). + dcerpc.idl: Accept invalid dcerpc_bind_nak pdus; (bso#11327). + s3-smbd: Fix old DOS client doing wildcard delete - gives an attribute type of zero; (bso#11452). + Add libreplace dependency to texpect, fixes a linking error on Solaris; (bso#11511). + s4: Fix linking of 'smbtorture' on Solaris; (bso#11512). + s4:lib/messaging: Use correct path for names.tdb; (bso#11562). + Fix segfault of 'net ads (join|leave) -S INVALID' with nss_wins; (bso#11563). + async_req: Fix non-blocking connect(); (bso#11564). + auth: gensec: Fix a memory leak; (bso#11565). + lib: util: Make non-critical message a warning; (bso#11566). + Fix winbindd crashes with samlogon for trusted domain user; (bso#11569); (bnc#949022). + smbd: Send SMB2 oplock breaks unencrypted; (bso#11570). + ctdb: Open the RO tracking db with perms 0600 instead of 0000; (bso#11577). + s3:smb2_server: Make the logic of SMB2_CANCEL DLIST_REMOVE() clearer; (bso#11581). + s3-smbd: Fix use after issue in smbd_smb2_request_dispatch(); (bso#11581). + manpage: Correct small typo error; (bso#11584). + s3: smbd: If EAs are turned off on a share don't allow an SMB2 create containing them; (bso#11589). + Backport some valgrind fixes from upstream master; (bso#11597). + auth: Consistent handling of well-known alias as primary gid; (bso#11608). + winbind: Fix crash on invalid idmap configs; (bso#11612). + s3: smbd: have_file_open_below() fails to enumerate open files below an open directory handle; (bso#11615). + Changing log level of two entries to DBG_NOTICE; (bso#9912).- Ensure samlogon fallback requests are rerouted after kerberos failure; (bnc#953382); (bnc#953972).- Ensure to link with --as-needed flag by removing SUSE_ASNEEDED=0. - Always use the default optimization even on pre-9.2 systems.- Remove redundant configure options while adding with-relro.- Relocate the lockdir to the /var/lib/samba/lock directory.- Cleanup and enhance the pidl sub package.- Require renamed python-ldb-devel and python-talloc-devel at build-time. - Requires python-ldb and python-talloc from the python subpackage.- Update to 4.3.1. + s3: smbd: Fix our access-based enumeration on "hide unreadable" to match Windows; (bso#10252). + nss_winbind: Fix hang on Solaris on big groups; (bso#10365). + smbd: Fix file name buflen and padding in notify repsonse; (bso#10634). + kerberos: Make sure we only use prompter type when available; winbind: Fix 100% loop; (bso#11038). + source3/lib/msghdr.c: Fix compiling error on Solaris; (bso#11053). + s3:ctdbd_conn: make sure we destroy tevent_fd before closing the socket; (bso#11316). + s3: smbd: Fix mkdir race condition; (bso#11486). + pam_winbind: Fix a segfault if initialization fails; (bso#11502). + s3: dfs: Fix a crash when the dfs targets are disabled; (bso#11509). + s4:lib/messaging: Use 'msg.lock' and 'msg.sock' for messaging related subdirs; (bso#11515). + s3: smbd: Fix opening/creating :stream files on the root share directory; (bso#11522). + lib/param: Fix hiding of FLAG_SYNONYM values; (bso#11526). + net: Fix a crash with 'net ads keytab create'; (bso#11528). + s3: smbd: Fix a crash in unix_convert(); (bso#11535). + s3: smbd: Fix NULL pointer bug introduced by previous 'raw' stream fix (bso#11522); (bso#11535). + vfs_fruit: Return value of ad_pack in vfs_fruit.c; (bso#11543). + vfs_commit: set the fd on open before calling SMB_VFS_FSTAT; (bso#11547). + s3:locking: Initialize lease pointer in share_mode_traverse_fn(); (bso#11549). + s3:smbstatus: Add stream name to share_entry_forall(); (bso#11550). + s3:lib: Validate domain name in lookup_wellknown_name(); (bso#11555). + s3: lsa: lookup_name() logic for unqualified (no DOMAIN component) names is incorrect; (bso#11555).- Fix 100% CPU in winbindd when logging in with "user must change password on next logon"; (bso#11038).- Relocate the tmpfiles.d directory to the client package; (bnc#947552).- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf instead; (bnc#942716).- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).- Package /var/lib/samba/msg with 0755 permissions; (bso#11515); (bnc#945502).- Require to install libfam0-gamin from samba-libs on post-12.1 and pre-13.15 systems; (bnc#945013).- Update to 4.3.0. + Samba "map to guest = Bad uid" doesn't work; (bso#9862). + revert LDAP extended rule 1.2.840.113556.1.4.1941 LDAP_MATCHING_RULE_IN_CHAIN changes; (bso#10493). + No objectClass found in replPropertyMetaData on ordinary objects (non-deleted); (bso#10973). + Stream names with colon don't work with fruit:encoding = native; (bso#11278). + NetApp joined to a Samba/ADDC cannot resolve SIDs; (bso#11291). + tevent_fd needs to be destroyed before closing the fd; (bso#11316). + "force group" with local group not working; (bso#11320). + strsep is not available on Solaris; (bso#11359). + smbtorture does not build when configured --with-system-mitkrb5; (bso#11411). + Build with GPFS support is broken; (bso#11421). + Build broken with --disable-python; (bso#11424). + net share allowedusers crashes; (bso#11426). + nmbd incorrectly matches netbios names as own name; (bso#11427). + Python bindings don't check integer types; (bso#11429). + Python bindings don't check array sizes; (bso#11430). + CTDB's eventscript error handling is broken; (bso#11431). + Fix crash in nested ctdb banning; (bso#11432). + Cannot build ctdbpmda; (bso#11434). + samba-tool uncaught exception error; (bso#11436). + Crash in notify_remove caused by change notify = no; (bso#11444). + Poor SMB3 encryption performance with AES-GCM; (bso#11451). + Poor SMB3 encryption performance with AES-GCM (part1); (bso#11451). + fix recursion problem in rep_strtoll in lib/replace/replace.c; (bso#11455). + --bundled-libraries=!ldb,!pyldb,!pyldb-util doesn't disable ldb build and install; (bso#11458). + xid2sid gives inconsistent results; (bso#11464). + ctdb: Fix the build on FreeBSD 10.1; (bso#11465). + Handling of 0 byte resource fork stream; (bso#11467). + AD samr GetGroupsForUser fails for users with "()" in their name; (bso#11488).- Configure with --bundled-libraries=NONE; (bso#11458).- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).- Remove libiniparser-devel build-time requirement.- Update to 4.2.3. + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780). + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924). + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991). + Logon via MS Remote Desktop hangs; (bso#11061). + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068). + tevent: Add a note to tevent_add_fd(); (bso#11141). + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170). + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217). + smbd: Fix a use-after-free; (bso#11218); (bnc#919309). + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces; (bso#11245). + s3:smb2: Add padding to last command in compound requests; (bso#11277). + Add IPv6 support to ADS client side LDAP connects; (bso#11281). + Add IPv6 support for determining FQDN during ADS join; (bso#11282). + s3: IPv6 enabled DNS connections for ADS client; (bso#11283). + Fix invalid write in ctdb_lock_context_destructor; (bso#11293). + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295). + vfs_fruit: Add option "veto_appledouble"; (bso#11305). + tstream: Make socketpair nonblocking; (bso#11312). + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313). + Group creation: Add msSFU30Name only when --nis-domain was given; (bso#11315). + tevent_fd needs to be destroyed before closing the fd; (bso#11316). + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared"; (bso#11319). + smbd/trans2: Add a useful diagnostic for files with bad encoding; (bso#11323). + Change sharesec output back to previous format; (bso#11324). + Robust mutex support broken in 1.3.5; (bso#11326). + Kerberos auth info3 should contain resource group ids available from pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info exists in PAC; (bso#11328); (bnc#912457). + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329). + tevent: Fix CID 1035381 Unchecked return value; (bso#11330). + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331). + s3: smbd: Use separate flag to track become_root()/unbecome_root() state; (bso#11339). + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342). + pidl: Make the compilation of PIDL producing the same results if the content hasn't change; (bso#11356). + winbindd: Disconnect child process if request is cancelled at main process; (bso#11358). + vfs_fruit: Check offset and length for AFP_AfpInfo read requests; (bso#11363). + docs: Overhaul the description of "smb encrypt" to include SMB3 encryption; (bso#11366). + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server(); (bso#11367). + ncacn_http: Fix GNUism; (bso#11371).- Disable rpath usage; (bnc#902421).- Make the winbind package depend on the matching libwbclient version and vice versa; (bnc#936909).- Backport changes to use resource group sids obtained from pac logon_info; (bso#11328); (bnc#912457).- Order winbind.service Before and Want nss-user-lookup target.- Remove fam-devel build-time dependency for post-6 RHEL systems.- Update to 4.2.2. + s3:smbXsrv: refactor duplicate code into smbXsrv_session_clear_and_logoff(); (bso#11182). + gencache: don't fail gencache_stabilize if there were records to delete; (bso#11260). + s3: libsmbclient: After getting attribute server, ensure main srv pointer is still valid; (bso#11186). + s4: rpc: Refactor dcesrv_alter() function into setup and send steps; (bso#11236). + s3: smbd: Incorrect file size returned in the response of "FILE_SUPERSEDE Create"; (bso#11240). + Mangled names do not work with acl_xattr; (bso#11249). + nmbd rewrites browse.dat when not required; (bso#11254). + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff; (bso#11213). + s3:smbd: Add missing tevent_req_nterror; (bso#11224). + vfs: kernel_flock and named streams; (bso#11243). + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244). + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses are used; (bso#11284). + ctdb: check for talloc_asprintf() failure; (bso#11201). + spoolss: purge the printer name cache on name change; (bso#11210); (bnc#901813). + CTDB statd-callout does not scale; (bso#11204). + vfs_fruit: also map characters below 0x20; (bso#11221). + ctdb: Coverity fix for CID 1291643; (bso#11201). + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225). + Fix terminate connection behavior for asynchronous endpoint with PUSH notification flavors; (bso#11226). + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007). + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201). + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the directory is deleted; (bso#11257). + s3:winbindd: make sure we remove pending io requests before closing client sockets; (bso#11141); (bnc#931854). + Fix panic triggered by smbd_smb2_request_notify_done() -> smbXsrv_session_find_channel() in smbd; (bso#11182). + 'sharesec' output no longer matches input format; (bso#11237). + waf: Fix systemd detection; (bso#11200). + CTDB: Fix portability issues; (bso#11202). + CTDB: Fix some IPv6-related issues; (bso#11203). + CTDB statd-callout does not scale; (bso#11204). + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you enter invalid values; (bso#11234). + libads: record service ticket endtime for sealed ldap connections; (bso#11267). + lib/util: Include DEBUG macro in internal header files before samba_util.h; (bso#11033).- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).- Remove the independently built libraries ldb, talloc, tdn, and tevent and the post-10.3 renamed libsmbclient from baselibs.conf.- Drop redundant doc attribute from man pages.- Update to 4.2.1. + s3:winbind:grent: Don't stop group enumeration when a group has no gid; (bso#8905). + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791). + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with servers that don't send the 2 unused fields; (bso#10016). + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476). + waf: Fix the build on openbsd; (bso#10476). + s3: client: "client use spnego principal = yes" code checks wrong name; (bso#10888). + spoolss: Retrieve published printer GUID if not in registry; (bso#11018). + s3: lib: libsmbclient: If reusing a server struct, check every cli->timout miliseconds if it's still valid before use; (bso#11079). + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125). + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135). + replace: Remove superfluous check for gcrypt header; (bso#11135). + Backport subunit changes; (bso#11137). + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with implementation; (bso#11140). + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143). + talloc: Version 2.1.2; (bso#11144). + Update libwbclient version to 0.12; (bso#11149). + brlock: Use 0 instead of empty initializer list; (bso#11153). + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164). + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169); (bnc#913304). + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev fails in the SMB1 case; (bso#11173). + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174). + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175). + s3: libsmbclient: Add missing talloc stackframe; (bso#11177). + s4-process_model: Do not close random fds while forking; (bso#11180). + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).- Prevent samba package updates from disabling samba kerberos printing.- Add sparse file support for samba; (fate#318424).- Purge printer name cache on spoolss SetPrinter change; (bso#11210); (bnc#901813).- Correctly retain errno from Btrfs snapshot ioctls; (bnc#923374).- Simplify libxslt build requirement and README.SUSE install. - Remove no longer required cleanup steps while populating the build root.- Remove deprecated base_rid example from idmap_rid manpage; (bso#11169); (bnc#913304).- Update to 4.2.0. + smbd: Stop using vfs_Chdir after SMB_VFS_DISCONNECT; (bso#1115). + pam_winbind: fix warn_pwd_expire implementation; (bso#9056). + nsswitch: Fix soname of linux nss_*.so.2 modules; (bso#9299). + Make 'profiles' work again; (bso#9629). + s3:smb2_server: protect against integer wrap with "smb2 max credits = 65535"; (bso#9702). + Make validate_ldb of String(Generalized-Time) accept millisecond format ".000Z"; (bso#9810). + Use -R linker flag on Solaris, not -rpath; (bso#10112). + vfs: Add glusterfs manpage; (bso#10240). + Make 'smbclient' use cached creds; (bso#10279). + pdb: Fix build issues with shared modules; (bso#10355). + s4-dns: Add support for BIND 9.10; (bso#10620). + idmap: Return the correct id type to *id_to_sid methods; (bso#10720). + printing/cups: Pack requested-attributes with IPP_TAG_KEYWORD; (bso#10808). + Don't build vfs_snapper on FreeBSD; (bso#10834). + nss_winbind: Add getgroupmembership for FreeBSD; (bso#10835). + idmap_rfc2307: Fix a crash after connection problem to DC; (bso#10837). + s3: smb2cli: query info return length check was reversed; (bso#10848). + s3: lib, s3: modules: Fix compilation on Solaris; (bso#10849). + lib: uid_wrapper: Fix setgroups and syscall detection on a system without native uid_wrapper library; (bso#10851). + winbind3: Fix pwent variable substitution; (bso#10852). + Improve samba-regedit; (bso#10859). + registry: Don't leave dangling transactions; (bso#10860). + Fix build of socket_wrapper on systems without SO_PROTOCOL; (bso#10861). + build: Do not install 'texpect' binary anymore; (bso#10862). + Fix testparm to show hidden share defaults; (bso#10864). + libcli/smb: Fix smb2cli_validate_negotiate_info with min=PROTOCOL_NT1 max=PROTOCOL_SMB2_02; (bso#10866). + Integrate CTDB into top-level Samba build; (bso#10892). + samba-tool group add: Add option '--nis-domain' and '--gid'; (bso#10895). + s3-nmbd: Fix netbios name truncation; (bso#10896). + spoolss: Fix handling of bad EnumJobs levels; (bso#10898). + Fix smbclient loops doing a directory listing against Mac OS X 10 server with a non-wildcard path; (bso#10904). + Fix print job enumeration; (bso#10905); (bnc#898031). + samba-tool: Create NIS enabled users and unixHomeDirectory attribute; (bso#10909). + Add support for SMB2 leases; (bso#10911). + btrfs: Don't leak opened directory handle; (bso#10918). + s3: nmbd: Ensure NetBIOS names are only 15 characters stored; (bso#10920). + s3:smbd: Fix file corruption using "write cache size != 0"; (bso#10921). + pdb_tdb: Fix a TALLOC/SAFE_FREE mixup; (bso#10932). + s3-keytab: fix keytab array NULL termination; (bso#10933). + s3:passdb: fix logic in pdb_set_pw_history(); (bso#10940). + Cleanup add_string_to_array and usage; (bso#10942). + dbwrap_ctdb: Pass on mutex flags to tdb_open; (bso#10942). + Fix RootDSE search with extended dn control; (bso#10949). + Fix 'samba-tool dns serverinfo ' for IPv6; (bso#10952). + libcli/smb: only force signing of smb2 session setups when binding a new session; (bso#10958). + s3-smbclient: Return success if we listed the shares; (bso#10960). + s3-smbstatus: Fix exit code of profile output; (bso#10961). + socket_wrapper: Add missing prototype check for eventfd; (bso#10965). + libcli: SMB2: Pure SMB2-only negprot fix to make us behave as a Windows client does; (bso#10966). + vfs_streams_xattr: Check stream type; (bso#10971). + s3: smbd: Fix *allocate* calls to follow POSIX error return convention; (bso#10982). + vfs_fruit: Add support for AAPL; (bso#10983). + Fix spoolss IDL response marshalling when returning error without clearing info; (bso#10984). + dsdb-samldb: Check for extended access rights before we allow changes to userAccountControl; (bso#10993); CVE-2014-8143; (boo#914279). + Fix IPv6 support in CTDB; (bso#10996). + ctdb-daemon: Use correct tdb flags when enabling robust mutex support; (bso#11000). + vfs_streams_xattr: Add missing call to SMB_VFS_NEXT_CONNECT; (bso#11005). + s3-util: Fix authentication with long hostnames; (bso#11008). + ctdb-build: Fix build without xsltproc; (bso#11014). + packaging: Include CTDB man pages in the tarball; (bso#11014). + pdb_get_trusteddom_pw() fails with non valid UTF16 random passwords; (bso#11016). + Make Sharepoint search show user documents; (bso#11022). + nss_wrapper: check for nss.h; (bso#11026). + Enable mutexes in gencache_notrans.tdb; (bso#11032). + tdb_wrap: Make mutexes easier to use; (bso#11032). + lib/util: Avoid collision which alread defined consumer DEBUG macro; (bso#11033). + winbind: Retry after SESSION_EXPIRED error in ping-dc; (bso#11034). + s3-libads: Fix a possible segfault in kerberos_fetch_pac(); (bso#11037). + vfs_fruit: Fix base_fsp name conversion; (bso#11039). + vfs_fruit: mmap under FreeBSD needs PROT_READ; (bso#11040). + Fix authentication using Kerberos (not AD); (bso#11044). + net: Fix sam addgroupmem; (bso#11051). + vfs_snapper: Correctly handles multi-byte DBus strings; (bso#11055); (bnc#913238). + cli_connect_nb_send: Don't segfault on host == NULL; (bso#11058). + utils: Fix 'net time' segfault; (bso#11058). + libsmb: Provide authinfo domain for encrypted session referrals; (bso#11059). + s3-pam_smbpass: Fix memory leak in pam_sm_authenticate(); (bso#11066). + vfs_glusterfs: Add comments to the pipe(2) code; (bso#11069). + vfs/glusterfs: Change xattr key to match gluster key; (bso#11069). + vfs_glusterfs: Implement AIO support; (bso#11069). + s3-vfs: Fix developer build of vfs_ceph module; (bso#11070). + s3: netlogon: Ensure we don't call talloc_free on an uninitialized pointer; (bso#11077); CVE-2015-0240; (bnc#917376). + vfs: Add a brief vfs_ceph manpage; (bso#11088). + s3: smbclient: Allinfo leaves the file handle open; (bso#11094). + Fix Win8.1 Credentials Manager issue after KB2992611 on Samba domain; (bso#11097). + debug: Set close-on-exec for the main log file FD; (bso#11100). + s3: smbd: leases - losen paranoia check. Stat opens can grant leases; (bso#11102). + s3: smbd: SMB2 close. If a file has delete on close, store the return info before deleting; (bso#11104). + doc:man:vfs_glusterfs: improve the configuration section; (bso#11117). + snprintf: Try to support %j; (bso#11119). + ctdb-io: Do not use sys_write to write to client sockets; (bso#11124). + doc-xml: Add 'sharesec' reference to 'access based share enum'; (bso#11127).- Update to 4.2.0rc5. + Ensure we don't call talloc_free on an uninitialized pointer; CVE-2015-0240; (bso#11077); (bnc#917376).- Fix usage of freed memory on server exit; (bso#11218); (bnc#919309).- Fix tdb_store_flag_to_ntdb() gcc5 build failure.- Fix vfs_snapper DBus string handling; (bso#11055); (bnc#913238).- Update to 4.1.16. + dsdb-samldb: Check for extended access rights before we allow changes to userAccountControl; (bso#10993); CVE-2014-8143; (boo#914279).- Adjust baselibs.conf due to libpdb0 package rename to libsamba-passdb0.- Fix libsmbclient DFS referral handling. + Reuse connections derived from DFS referrals; (bso#10123); (fate#316512). + Set domain/workgroup based on authentication callback value; (bso#11059).- Update to 4.2.0rc4. - Add libsamba-debug, libsocket-blocking, libsamba-cluster-support, and libhttp to the libs package; (boo#913547). - Rename libpdb packages to libsamba-passdb. - Drop libsmbsharemodes packages.- Enable avahi support on post-12.2 systems.- Update to 4.1.15. + pam_winbind: Fix warn_pwd_expire implementation; (bso#9056). + nsswitch: Fix soname of linux nss_*.so.2 modules; (bso#9299). + Fix profiles tool; (bso#9629). + s3-lib: Do not require a password with --use-ccache; (bso#10279). + s4:dsdb/rootdse: Expand extended dn values with the AS_SYSTEM control; (bso#10949). + s4-rpc: dnsserver: Fix enumeration of IPv4 and IPv6 addresses; (bso#10952). + s3:smb2_server: Allow reauthentication without signing; (bso#10958). + s3-smbclient: Return success if we listed the shares; (bso#10960). + s3-smbstatus: Fix exit code of profile output; (bso#10961). + libcli: SMB2: Pure SMB2-only negprot fix to make us behave as a Windows client does; (bso#10966). + s3: smbd/modules: Fix *allocate* calls to follow POSIX error return convention; (bso#10982). + Fix 'domain join' by adding 'drsuapi.DsBindInfoFallBack' attribute 'supported_extensions'; (bso#11006). + idl:drsuapi: Manage all possible lengths of drsuapi_DsBindInfo; (bso#11006). + winbind: Retry LogonControl RPC in ping-dc after session expiration; (bso#11034).- yast2-samba-client should be able to specify osName and osVer on AD domain join; (bnc#873922).- Lookup FSRVP share snums at runtime rather than storing them persistently; (bnc#908627).- Specify soft dependency for network-online.target in Winbind systemd service file; (bnc#889175).- Fix spoolss error response marshalling; (bso#10984).- Update to 4.1.14. + pidl/wscript: Remove --with-perl-* options; revert buildtools/wafadmin/ Tools/perl.py back to upstream state; (bso#10472). + s4-dns: Add support for BIND 9.10; (bso#10620). + nmbd fails to accept "--piddir" option; (bso#10711). + nss_winbind: Add getgroupmembership for FreeBSD; (bso#10835). + S3: source3/smbd/process.c::srv_send_smb() returns true on the error path; (bso#10880). + vfs_glusterfs: Remove "integer fd" code and store the glfs pointers; (bso#10889). + s3-nmbd: Fix netbios name truncation; (bso#10896). + spoolss: Fix handling of bad EnumJobs levels; (bso#10898). + s3: libsmbclient-smb2. MacOSX 10 SMB2 server doesn't set STATUS_NO_MORE_FILES when handed a non-wildcard path; (bso#10904). + spoolss: Fix jobid in level 3 EnumJobs response; (bso#10905). + s3: nmbd: Ensure NetBIOS names are only 15 characters stored; (bso#10920). + s3:smbd: Fix file corruption using "write cache size != 0"; (bso#10921). + pdb_tdb: Fix a TALLOC/SAFE_FREE mixup; (bso#10932). + s3-keytab: Fix keytab array NULL termination; (bso#10933). + Cleanup add_string_to_array and usage; (bso#10942).- Remove and cleanup shares and registry state associated with externally deleted snaphots exposed as shadow copies; (bnc#876312).- Use the upstream tar ball, as signature verification is now able to handle compressed archives.- Fix leak when closing file descriptor returned from dirfd; (bso#10918).- Fix spoolss EnumJobs and GetJob responses; (bso#10905); (bnc#898031). + Fix handling of bad EnumJobs levels; (bso#10898).- Remove dependency on gpg-offline as signature checking is implemented in the source validator.- Update to 4.1.13. + s3-libnet: Add libnet_join_get_machine_spns(); (bso#9984). + s3-libnet: Make sure we do not overwrite precreated SPNs; (bso#9984). + s3-libads: Add all machine account principals to the keytab; (bso#9985). + s3: winbindd: Old NT Domain code sets struct winbind_domain->alt_name to be NULL. Ensure this is safe with modern AD-DCs; (bso#10717). + Fix unstrcpy; (bso#10735). + pthreadpool: Slightly serialize jobs; (bso#10779). + s3: smbd: streams - Ensure share mode validation ignores internal opens (op_mid == 0); (bso#10797). + s3: smbd:open_file: Open logic fix; Use a more natural check; (bso#10809). + vfs_media_harmony: Fix a crash bug; (bso#10813). + docs: Mention incompatibility between kernel oplocks and streams_xattr; (bso#10814). + nmbd: Send waiting status to systemd; (bso#10816). + libcli: Fix a segfault calling smbXcli_req_set_pending() on NULL; (bso#10817). + nsswitch: Skip groups we were not able to map; (bso#10824). + s3-winbindd: Use correct realm for trusted domains in idmap child; (bso#10826). + s3: nmbd: Ensure the main nmbd process doesn't create zombies; (bso#10830). + s3: lib: Signal handling - ensure smbrun and change password code save and restore existing SIGCHLD handlers; (bso#10831). + idmap_rfc2307: Fix a crash after connection problem to DC; (bso#10837). + s3-winbindd: Do not use domain SID from LookupSids for Sids2UnixIDs call; (bso#10838). + s3: smb2cli: Query info return length check was reversed; (bso#10848). + registry: Don't leave dangling transactions; (bso#10860).- Update to 4.2.0rc2./sbin/ldconfig/sbin/ldconfiglibdcerpc-binding0libdcerpc0libndr-krb5pac0libndr-nbt0libndr-standard0libndr0libndr1libndr2libnetapi0libsamba-credentials0libsamba-credentials1libsamba-errors0libsamba-hostconfig0libsamba-passdb0libsamba-util0libsamdb0libsmbclient0libsmbconf0libsmbldap0libsmbldap2libtevent-util0libwbclient0h01-ch4a 1712056004  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstu4.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e62-150500.3.23.74.17.12+git.462.df636292e62-150500.3.23.74.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e62libdcerpc-binding.so.0libdcerpc-binding.so.0.0.1libdcerpc-server-core.so.0libdcerpc-server-core.so.0.0.1libdcerpc.so.0libdcerpc.so.0.0.1libndr-krb5pac.so.0libndr-krb5pac.so.0.0.1libndr-nbt.so.0libndr-nbt.so.0.0.1libndr-standard.so.0libndr-standard.so.0.0.1libndr.so.3libndr.so.3.0.0libnetapi.so.1libnetapi.so.1.0.0libsamba-credentials.so.1libsamba-credentials.so.1.0.0libsamba-errors.so.1libsamba-errors.so.1.0.0libsamba-hostconfig.so.0libsamba-hostconfig.so.0.0.1libsamba-passdb.so.0libsamba-passdb.so.0.28.0libsamba-util.so.0libsamba-util.so.0.0.1libsamdb.so.0libsamdb.so.0.0.1libsmbclient.so.0libsmbclient.so.0.7.0libsmbconf.so.0libsmbconf.so.0.0.1libsmbldap.so.2libsmbldap.so.2.1.0libtevent-util.so.0libtevent-util.so.0.0.1libwbclient.so.0libwbclient.so.0.15libCHARSET3-samba4.solibMESSAGING-SEND-samba4.solibMESSAGING-samba4.solibaddns-samba4.solibads-samba4.solibasn1util-samba4.solibauth-samba4.solibauthkrb5-samba4.solibcli-cldap-samba4.solibcli-ldap-common-samba4.solibcli-ldap-samba4.solibcli-nbt-samba4.solibcli-smb-common-samba4.solibcli-spoolss-samba4.solibcliauth-samba4.solibclidns-samba4.solibcluster-samba4.solibcmdline-contexts-samba4.solibcmdline-samba4.solibcommon-auth-samba4.solibdbwrap-samba4.solibdcerpc-pkt-auth-samba4.solibdcerpc-samba-samba4.solibdcerpc-samba4.solibevents-samba4.solibflag-mapping-samba4.solibgenrand-samba4.solibgensec-samba4.solibgpo-samba4.solibgse-samba4.solibhttp-samba4.solibinterfaces-samba4.solibiov-buf-samba4.solibkrb5samba-samba4.solibldbsamba-samba4.soliblibcli-lsa3-samba4.soliblibcli-netlogon3-samba4.soliblibsmb-samba4.solibmessages-dgm-samba4.solibmessages-util-samba4.solibmscat-samba4.solibmsghdr-samba4.solibmsrpc3-samba4.solibndr-samba-samba4.solibndr-samba4.solibnet-keytab-samba4.solibnetif-samba4.solibnpa-tstream-samba4.solibprinting-migrate-samba4.solibregistry-samba4.solibreplace-samba4.solibsamba-cluster-support-samba4.solibsamba-debug-samba4.solibsamba-modules-samba4.solibsamba-security-samba4.solibsamba-sockets-samba4.solibsamba3-util-samba4.solibsamdb-common-samba4.solibsecrets3-samba4.solibserver-id-db-samba4.solibserver-role-samba4.solibsmb-transport-samba4.solibsmbclient-raw-samba4.solibsmbd-base-samba4.solibsmbd-shim-samba4.solibsmbldaphelper-samba4.solibsocket-blocking-samba4.solibsys-rw-samba4.solibtalloc-report-printf-samba4.solibtdb-wrap-samba4.solibtime-basic-samba4.solibtrusts-util-samba4.solibutil-reg-samba4.solibutil-setid-samba4.solibutil-tdb-samba4.sopdbldapsam.sosmbpasswd.sotdbsam.so/usr/lib64//usr/lib64/samba//usr/lib64/samba/pdb/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:33120/SUSE_SLE-15-SP5_Update/9fb38d651a0568fadf222f60409c3f15-samba.SUSE_SLE-15-SP5_Updatedrpmxz5x86_64-suse-linux  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=1a1398290f45245c9c295ebfab58a29ce93a1108, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=22cf289049d376aeece56fb71d9a3adce01842f4, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=c71338bd5a2392d82fba623c2a7af73334294ed3, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=e8ab6a9e421b5c5d8fe58629ca7181dce128bbc1, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=c4afeeef3afac0ee86488274c3b1f0e24b927c47, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=7e1dfe6f68eca73eca4a9ab2deba12301661b9b9, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=de073a4dac0efe18663349d06e45d089abc40fb9, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=4e3cc1a95589b44de480c56426ebf1932f952d45, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=432b10b0096cab13823b762a2412b6b6a94626b6, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=33752f27258d08f9f7ab33c3fdf89a96229072cb, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=0ad6697735dc22c2130e8620bcb823baebf61400, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=9af0e354e2bf9ead68f841e749ddb740aa0ad47d, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=e093336e134426d1342d3d2df01145b21ae4c400, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=8e440733cb06971c359ff258f67f1193805306c8, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=7a9b1056fbd6781c9ddd76f96556132b167d7ee4, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=7a37bd55d508fe5253f3755940301d4507747930, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=11dcbdb4beb05ccedb92cd4d8fc67deff074b2c1, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=666da04a60473d2356405170b0609557f5a11e24, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=5593885fb356b23a3e6c13c916f2f9d49438bbc7, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=4a8b9d51a04084a95cece37bbfd4a7a9c6152f00, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=03ffd62b31bc6ec9810b8675a823d593c67388b4, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=dd7b36e6b688a8a49ce8de8bd9ba9e2cedb996ac, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=c0ea9d049ed8894ee6a275e4dd45c720572652b1, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=5feabdda0541cdbabfb895741f42649472460149, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=a600e5fde292cc4ecc33a03f16e17c49d61ccc2c, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=402688d9fd9da624a599f91d03889e9cd35f55a7, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=24611a3baaf770ae80cfc6712404d9b031b45613, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=3d2289959f3662ef43ebba7386356a86cd396024, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=7eddce9b5735651e3e47373883f67be952c94ea6, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=ab7ae9313144f9645b8191432b8a3a6c7a69908e, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=52125374a71bd5a3c491f49786b09442f1d85bb7, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=6c05b19cb286654c4c8926d83a78fe2b0ebb63fb, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=36a55a2316bbff1a3060f23f9e27278471e225bc, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=1221ed160b0ac9bc000a4ead1138ae05dde87042, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=a6c480773180bcd558c54425e8db1de26bf17c46, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=8fb69a7f3802b4c25aaecd0811a8c5ad73101734, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=91eddb4b5225007e30039ec7273ca4be79997279, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=afd936c1f359515c79786bf4c0ba203925ce49b1, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=bce2921725d0ca74afd7a9432f8ba3d1833d0f8a, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=d84ef0f55e4f8c6bbd99ac751f750c4c61861a80, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=c2b5b7a749f03804476cb1ed9ffaf2eafd6f60eb, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=a70d8b0bd0e17847cc7c2eecc22bfba85094494f, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=415df4c78f8f6fc95cbb83fc8813c978c89a85ea, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=62644b592525c467b53c62359c91d77294e76ed6, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=08c081f413b908ddcd0a75694e6e55cfee9aaf0b, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=25ffd1fff1a4af4d556a7bd5b78cbc5fc1f2744d, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=603624983f7ce367c02aa5c2af05a5489b9a05a8, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=e7eecdf66304d4d2851abae2527625412764cab4, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=87de571cac93f65ce9f9794cbd1a0a1bcfaddccb, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=53db509f15bb91e5a415e5fe7d22faa4a81f1446, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=fa35b307ec1cfb4b8d8b13dedacd32816ee300bf, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=f3e7748c0d9d7e77c3dd55d46d1dc756dcac108a, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=24025c5e9b2b3c82f80b5df0a13bec3dd4a65693, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=27a330e43b995a33703b6e20ddff4a64f55edbdd, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=b68c4e0d7467176ded52917c9dfe931afad56467, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=de98f5bca9fc76717e788883236cd484a093fe95, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=afbd81c3baedf0d568b03e2ffdeac52b90ccd7fd, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=f8a6768cc8166490a9d0ac5dd4e56048d5e702fa, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=0120cc3a1f7784087c8a088145f5aa981f10627a, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=81e7a3553ac82b97d2febf94b3ed1eaf9a88033a, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=e20ee09b38546135904ef34e34eda273e379f1a0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=022e4368bebd8a793742360c367e5ebe2d29e727, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=41224da1a7f6714935d1659b31f7f5b3c2692854, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=9e0a36bf9322752ecd749ef31e458cd9d4c7af33, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=017e51313cf5c9d4a83fc1bed3244865b9ad9c99, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=b7a154161fae73d80054b7c17211d101441ec527, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=5736f17b7b6fa4b6ca9350e67fe0bbdb0613a85f, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=773e500a6fc92af6e367337abf67e0a46ef528f6, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=2a9da04cb1e9dbdd341d2c1a8b5f44ac4b071cdc, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=b563506e0cd862f033a99953b2ce269ed7a76751, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=e9bf02c7f8011376068aa362910166639ec2254e, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=916dd09b12853db92b3cd7fd1087c4f5fd15374a, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=c04aec3c496438376699ebbfddfaf89c947d724a, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=c15bb254840288c0cadcc3528621992bec255935, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=f74bc2eb52c1a8a98dc31c7b5184cc7a2f74df1d, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=2328d435c31342275278adef1cf059f5a2d80602, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=5ae6159fff3f1ead310455450338ae82cd4dbe24, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=c0080dd6a12d408246af7fb48fbe4b78dad2ff50, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=3c43004d537de0425c866be8ba5b076528d38dac, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=67090110be8c594732d1636ad0c7388e52d1ac82, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=24c7db6a686c9d99c421de750107112873c8e639, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=685611d6e5b90836a6418362eba8899dcdd70471, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=3ee17de68dc56a7a396c4015a2ec854cc2084700, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=962bf0a75869b6f917123ee3e8ca8f2992d7bff8, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=deeb0c1b4e4f74701256c4765ea1fe64ccfddd14, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=d3df398ea32d05e9e2153b106227a5fb8812315c, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=864a7cbea96c0caac144311ba62601738533f400, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=b78d87d3b0613aff0e9d37a21967b04e19469680, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=87563a920e8d224c60b3426dddc83877ce47dc1f, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=c1b099c91c1fbd7f41ec83e2757c2d59dfa3c5b1, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=7e670065c4e0773d1bd307f27bfc58658574cea9, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=885596c859f217fc75224992c95927fc437d404d, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=6ceacf05a0fd1cd57411fd1e4401cb62ac6452d1, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=0bcb75dad83784a246e934e5c0f06fa01fe18838, strippeddirectoryELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=774541fb3aba82104d3b59b467df078857ed2024, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=58df787ce8a9b13c42d59b8b232153cd539a83d6, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=5e9cb583b785eea22b20654816bbfb0b7c24bf5f, stripped#MGx @!6CV;f @g"*0<z-_r \} 5 ; P e t / ? E W  , 0 8 @ N T s | #*C7F1 H&3Od +">I+&4. '   >(?2!<$J!!$,!611  '"P+P*RRRRKRRRRRRR%R&R"RR!RRRRRRRRRRRRRRJRRRRP4P3RGRARRRRKRRRRRR!R"RRRR?RRRRRRMRR@R>RRRRLRRRJRRRRRFRRP6P5RRRRRKR4RRRXRRAR(R,R&R"RRRRRRRRRRRRRRRRMRRRCR0R?RR@R>RRRRR/RRRR3RRRRWRLRBRR'RRRRJR+RRRRP_P^RR"RRRRRRRRRRRRRRPbPaRRRRR"RR!RRRRRRRRRRPiPhRRR"RRRRRRRRRRRRRRRRPlPmPmPnPnPoPoPpPpPqPqPrPrPsPsPtPtPuPuPvPvPwPwPxPxPyPyPzPzP{P{P|P|P}P}P~PkRRKRRRR&R"RR!RRRRRRRJRRPPRRRIRRuRRKRwRORQRR4RR!R"RRRRRRsRRRRTRRRRRCRRRRRRR0RRtRRRRRR~RRBRRRR3RrRRHRRvRRRSRRRJRR/RRRNRPPRR RRORRRKRR=RRRqRRbRVRRfR"R!RRRR4R`RRRpRRRRJRRRxRRRRPPRRRRRRKR6RRRRRRVRRR"RR!RRRR5RRRJRRRRRRURP PR*RRR(RRR RR`RwRRRKRRRMRRRRRRbRTRR&R"R%RRR!RRR'RvRRRRRRaR RRR)RRSRLRRRRRJRRdRR_R9RRcRP P RRRKRRR"RRRRRRJRRRP P RTRRRRuRRRRRKRRRR;RsRR4RR RRRRR RR"RRRR RRRMRRRRRRtRR:R3RrRRRRRR RRRRRLRRR RRRSRRJRRRRRRRRRPPR;RR^RRRRKRRRRRbRR"RRRVRRR`RORR:RRaRRRRRRRJRR_R]R9RRRURNRPPRfRRRRRRRRRRRRR"RRR*RRRRRRRRRRRRR)RRRReRRPPRRfRRRRR"RRRRRRRRRRRRRRReRPPRfRRRR*RRRRRRRRRRR"R%RRRMR.RRR RRRRR RR-RRLRR)RRRRRRRRRRRRReRRPPRRRRRRR"RRRRRRRRRRRRRRRRPPRMRRRKRRRRR\RPRORRRRR"R!RRRRRRRRRRRRRRLRR[RRRRJRRRRRRNRPPRRRRRRR"R%RRRRRMRRCRRRLRBRRRRRRRRRRRPPRRRRRRKRRORRR RRR!R"RRR=RRRR RRRRRRP0P/RRR"RRRRRR?RRRR>RRRRRRP2P1RRRRR"RRRR?RRR>RRRRP9P8RRRRRRP;P:RRRRP=PRRbRR;RRRRRKRRRRRRORRR"R!RRRRR4RVRR RRRRRRRRRRRRRRR RRRR3RR:RaRRRJRR9RRRURNRRPAP@RRRRRwRRRRR"RR!RRRRRRRTRRRRRRRRRRRvRRRSRRRRRPCPBRRRRRRRKR.RR RRRRRVRRRRMRR"R&R!R%RR(RRRRbR`RRRRRRaR RRRRLRR'RRRRRRRRJR-RdRR_R9RRRURPEPDRRRR6RRRRRRR"R%RRRRMRLR5RRRRRRRRRRRPGPFRRRR"RRRRRRRRPIPHRRRRRPKPJRRR^RRVRRRR"RR!R`RRRRR_R]R9RRURPMPLRRRRKRRRRRRR&RR"RR%RR!RRRRkRoRjRmRgRlRfRRRRRRRRRRRRRJRRRRRRReRPOPNRRRR"RRRRCRRRBRRRRRRPQPPRR4RKRR"RRRRRRRR0RRRRRR~RR3RRRRRRRJR/RRPSPRRRbROR4RRRKRRRRRRR"RRRRRRRRRTRRRRRMRRRR0RRRRSRaR/RRRLRR3RRRRRRRJRRRR9RRRNRPUPTRRRRKR}RRRRRRRRRRR\RR R"RRR!RJR|RRRRR[RRRRRPWPVRRRRPYPXRRRRRORRR"RRRRRRRNRP[PZRRR\R[RP]P\RRRTR RRKRR=RRwRRRRRRRRRRRR4R"RR!RRRRRRR;RCR?RMRRRR0RRR>RvRRRRRJRRRPPRRR"RRRRPPRRPPRRR"RRRRRRRR4RRRKRRRRRRRR!R"R&RRRRRRRRR3RRRRRRRJRRRRRdRcRRKRRRRRRRRRR"RR!RRRRRRRJRRRRRRRRRRRRRKR"R&RRRRRR RRR=RRRq%:{-A)V#2c8y$kz$yDޮGI@vv@:7thl$28Fw?k0-<<{B8iY4 3?kw^ƍ, .,?ږ%s/ȆU`ym:IEZ- ])0P{Wc;?Zl/?/&}xwAt{W%0Gfô-;&(sy >0K]{ iyA{FTZGD*kOxc"s iU akN(ͪ*V`mK)CKPCJU& mR i]@,i|BT30&?(OA7Y;bzмfL'+`*h\<ϘO<^{ir,ķh^F ~p1<0<9ZZ$7@N-SXJG-[cIHٛA0 YvݑQOV\,Ghn#QFJ@ߦ)bOL0/ɲh޵x[5}/{]fި#aы vXݞe>C8+%s GZa_ i,Fו̯+7Ka RMO%y_ d]]*wB"趠. R3uY^N<lsO?Hzhŵ%8UFiJSi-*9=1 Ec_P,`z5L jOO/tȗͳǶkZAnE\%2{ DK;[Q*u.CbdM>}}Ϧ|ẉ9]UInٌp^k#Cڋk5<-^#zk~l2@Z`bINJ;] ܪwMKYnŰUyboTo0ojk?9;?Q {Rʉt2⇟iJt>L2<(Zƥ=p=^7,[ W o&i ҆NlD+41">NqCyv^5h9W%8)3w ށߛĪ4ܑxLJ2˼ZzVXufg2R,IvM9n=298M(!d.|ƾrnC?;/.T`GhDpuVmbFG(G2M(+&-?$pk̅͞k,۵VO޻$R^Hݷ~t6d04 [?MimpJŜNҨ/g33&ؾs":pxģp3km‚@O DNDhb4gJ@< ?rUJS /9. e> o]RFc;*37D~ (›P.XNS8xڅzdHNMRT d2/R'5/b L3E+<`8 *NWP$ ՙI>MWqs-+~pM8*3xt=@GFo&1 wU@%ܑSH: $]1dƒ0!^m"'~tO˫||c Vcogk^e31PC(y&-:‚S(5q^@1Xfx {oɅA%dr&la8DW.^8y{pEX@(m$=<rpgJ"y7+ѺV\}emj-:ֵ}i+ajhճH +FHE`vbĞjG7MqأHX*GŇE CfIPqޡ%xYѰ6{ƵBUoiV1x "kS#J˻ǜV&lMDK&8{GAR.veFtIPw '"U<4 nR@Ey,<&uCsjW 8)1ĭr1|>/`%m/e;C>FUџܒ5nJ^5'. GGcZ 2$ Et1S ц \3[kO^Dd}*;a?Sh%Hq<]P~݋!QI0ߣ4l/*5]Yo߭ðGaA.&,:h9s}QVԓ r t&Z%HӤ~RDnѾUR ,fT!/吒L{4W݆گor{ 6.B/t #g;P5p1*oG3(B{=c^$v4ƌ}U 0)d,%1elOGr񐆰V>f}yea4ۦLƫDE_-LyZˆJK\zZZ\~%(G94Dʺ cZrX =p'覕$tPٲ*hj0x~_Gt)(T'l 6[82M Z]Ʋ6IĊGO:, wN"$_d"g~3Գ=F;S}ʿ\ yvpz̥˟ [6gpp-m$9 (xKDVJCz˫g]oF a[$݃ՓYbdJ]Zo m͘_h;V;¹}cMGQl]/*37817JzKϜcICLYd.٤dnn0?ꄪW+ܱ 3#r3an =&v~#ONF寐mHc4``RBC+tZL$]Z yz/@QJ ߥ1Q)=bg}5k b&JL߫gmc0cי77$]Oj*r } A1IRS8tW,/%h/b}کXy4IJ|؇`Z/$M I$Zg\!'$٨m+> " (ξQW)f0ɼR>ÀfrBG~jnJ>D;k2dr:I\:!YQJS|x>&c!iI\Ԯkdķ)lq=n63ax/Oqđ>,T3ɐeo.&77Rݝl`.. XNܓ/гvk,\v^g剾r}SH ?!M(W*K'1^ȦB4촷56TC}pYqkU9uMo{C /k~(͞U{̈I].Dh;o&}ZUz(kEx][ sG5-\oD`9HOF~_*2+[CL 2i๤JqBܔZ%a~l)9clx۠4 ZXҨ̙I X=U޵ k\1/Ua/]QE5$ɍCVq3@ G±3#E)p[gMX30Z.O)2* tk2CUjw qH{>S[#l9|xT`Z%T#~D W*Y p<4"" @dߡer63½pΤ>MTGXFC_@lC)bM+n G5Ǿ>nW /Hî= Ĩ\X`A:z?EJqW&2J([)>nΑbEo&wm0slDCdQeFljI#R[bAE(=F) -pc Yw!;xӹ +3+MUJۙatXq%Ryǝ^R!S;"{ѢGvioGNJM:>;)3U^?3 Om'BCjiqa!VNTRR 9l /=B~#z)W='| ebd y?ֵ yYfI1@6Nf͉_*̈.xecOcB{8Upܭ~,*pnـQ/ t޵K xf u)䕯ƗԟȚ攜 bw'8N5MiF:7$A4,GO0p>lHWhao?u?1@RB5re.BLJgmmW% 3N;fA9͸B4-l†S4ֆL61*XD)>B}Fh7=q0x`hoۼGj N[,G'CY }Ӊg{US[&CpKM}9G3 ]A7ɵ>oxN əeyl P\Hr]SGPC0#:ln8B[+WXAofLx>/O(1\T*~%i0q*Dgi5 |Qag$#ܒe$^ژ /C6:G#a`"PF&#g׫xFQۢӴ]UJA{4Loș6n vwprϼޅڏZM3py;(} 10Ji*/5xʦȽn6"fD3꫶FIXrZr@ f[T +#ī ͹UỶ!@M5ضt5Z_V9~Rǻm3 :lzP!en[a<ARf\v/=VG~# Jf+Z{PW{uI &m0AOQH-M1)5dd-/$]_x 5CÙ;8O:&oɘ JսCjsɄ,1<"ōp$s+o,o35{_ ?`5w4"jZO*Qx*V(O^Xمl QK`{O EtrbP֋Qň܌ T ]" 'p u9M[|A"\$U iA6f)9 -أ $Q:mQޯ{@^ٖ*h]#=-ͮ& )aWQmJ .9y_Oi}KOmv3k1-N{t1 Άi)=!K2o?GҚ Rxwz^ŒM0Ei b]e79>Y!dfGТgOUgD*G|έ`:l-9mIa v~!D&1ĮzJOdm 1_7S_FP;8t&qӺ1DѐvUCxIY$ME5"*YA*%^ ,DA0 %»';FU*|%P'GMjrDV. ш56ӆytV19kW:tr»mA~aDEOmI债GzF=a}4~2%Odx*w:P =E Uz,.R,[e 'Q{:W#G'p=9?L+ʙ%ϧ\cTV^0}x{lIZuWQ2]DYԿha8{v[F"FKx]fO,o}Sƚau!}/I`|wCM L%ՕȆ>)ؠ'JޤM) s: D#ă3!g;~ {?q_m\]|iE9q׌%B]cT#Aזmpiep1y$DCښST.L.O3! @ Tz]jva ^2X61PcT C3Mω]@{nBtuw4h/i G0f( <֘GgA%2hw†~Ы(WUo#aF%9oy7)d/zАtégIWqЅtTjw WAaю6bR8X*}ruΩBC|ɝ485bzNy߳QGG.KU7VA>a>:I/'G`@( V'~$05CRt ߎm҉w1:W2a*V0|=EV'p\WRCCk40X@"v>+x"}g+puXiKmWĝi 4V;Es7x\Z9 z#ENuN{4 Z?)ĺoɣN?Wk@m<|sgZ'_dhBlKLTz`XoXoh[X"yñ+[ۚQ㑋v :S#~S@&P/iR&dK㫤vc$˱H :vP!(EI>lxT:=&{рB+6{ع Pe#ƪ{AX g_sҧSOrZyݯQtajWBEp^6Ɣ;`Ls:n$p[r?C'FnlEic"SLt噹QdRa-^H\F2Vԡ%_c)I܅=>5Ps._Ea[' h,D-Hquϼb=>[Mٗ[ Nx)g}Ν$N{Bks"or,T[!bΚ"NMՆꑤ"_rL"g ^+x  ?G\.fl?z9NWl/4=s`C3+;b,d;  ~=:0Wex]ZGiz^&r> 5z=2E,|MGKwRh9la~fAsI**%nlj7Qa޾>!i[,U7; pjxVhw..?XVZn6Mr6D^0A6xMT^YWԹh~?YVފ]t05I2%? m R@Iu)Z%"EONEiU/ƝslFmXl܇T#_ƑW=L( z9 NX⠈/ Ui]m_򅼆ƣF]&Y I vneD&bP+*v KZM+<;ƆwZcxM0D8h2>g'eBX4S>ڂ.(tAxӷm ?)AR:Z&qs-x\ Јo =\Suyl/-T$+0vQk%Ē}64=Vz\OZDY9.2,vQ5s}F7KS&zq,@W(XGPU<{v(,غXy##32A3O$࢑.xKyԫ 3>stL[Ԃ)9kk^f#٦iw'c10cyk*I&5i =\ߟE!(KkJEiLPO! sv;hㆽDAOx )W|j"Y*~Y8 oñ̵غ9T!4a'~A,~ar<ڑ)PbyοNAF_)N{N;n-)*>VmIR!'b$bu l!NT͘@Ma)[wU;*ʴ9fVœmU?{u| z۞rCØSu0tEFOܩ*_΃~^_{Y@hEɪVem߈@3-"L9`o[a]<le7:y&H34^R/^m@ (WSWX6.kb3 tw>HK%p+\?`7eNC$"7Y:І;FM^ckiP^a߄0فw֒e|(3i#X`:T h1cBQ k7EUtCZ!0UUAR(26e`O:ݕSjee,GZ;-f*+,q\+ .UO 3b57&ڡI/K}orN7Y>gdjYY+j W`W!]TzkiUC U˫C4'viW,7b2xl~B犻׺ `Qahu DS9ai%M^Wx> K7:ULw)OD=)T5L4P0yi9%k2-OWC M,I'֋<{t"VABҝ@\Q:[l[FTf|Tk}[>ڌ&`ĶB3BҎr/OM:/@"] :-*m):?XkÀ7{]WTw[`WDO=(CjV̑]hi` <;o?u,]U6 0xS@!?=+lD2rHY[;q>Uҽ䦞PɾX(x.Q06*nu(&>o3ӗz.gfsL<̡@!f)]MFp2]-/}ř|tK:߹([JnJyvLOȧn$o4*F< on:cWnHK1O)=}Q:Y5ʀ?q &(?g k!N,31VPw?xV - m )!9Hv+?e38>ީt$qTs n82KC-Ȼ%F3 ~g8.5[Wt+nCw҉͔hileӓ#b@Kn\H'fz4X՞k~A(+3EӖpH:0߮U"e vS1V9eWysO!M(R8e+PI/h9 4܇9_C[[hYz̍Ci}~j|e`l3 ,mDpM pya]:V{I_<0uLH;DDG%ZNtK&o61؉I_0+y]5vV ζ7Zf⬦, )kof@6"4'*jrnVi_/dtϢ֎RgoMhxNʄ%J*bҝ snz+pEĂ5F1 1nY{-Pa۲yGus~{buV"%e XJdNg&eɎ]#EŖƃXC"zl>Z7~(z ^@M$C #[S|ABAmDVe$ǐ_bN*&dcV:'=M%+#cUl${|"rAfrXJ5z^[pvxt;dM{ghӔ~isCj7e%0q鱹H}x'|_siQʫ)/PNҒȷC(R70 567fPλk?帢#,2Smq̇r>HSSY!ӱ2ՎsG5zD|+S|x&yzWtdDb,3e6zo_I8Cfnt#l(mx[H|߷A'-T%08@iSgFQCP-qrzJ:G"7BN[ $j;= ,:9K &pl!5I'~;7*pmisxBGkg''xJoLC܋pƐl'w1 @IRZ0gW.Y!hu-03(n*dٴ(oatU$J0m-0n:I$[= 5 h8uQKx2oK{sMR;Q]KgˊT];jq韾dOkCsAg>%ܸ9\ M/FŞLǢ8$}aBEwAՏ܋t#j]LgX ֭^D©UXR"Aَj`- 9Elmf_t829bȗ" _9> 9}0Y& :^:jq2 > 'X[ vvdp۬$av is~pD>\8o %V5;}+FR)HϗvQv03D4Hm*hݾ46j U"稗=AQ3vi,WT*ʸ)X[ˇ2 f+YGismd6J~8?axF ~NLzL졵SYRMˊ%2*^X!Pg v%-H7NΉd M2B?dbNwyEaQ/s|\KD7RbɋԒuX2?Iq}# | 5*ɬ$YEY$m^S#M6" >mknDIY.#ޣr][Hm!|fph3mY/O 9mIuLa\dt;1Ͷ& T ~/4 6rg7=8*ht2 OmjpďRq1|{bGIdX} {c&$8;wh @t{* 8A1BMpg r5AF. p[ﳤ*BDPL>|_'jѢ{'oQ~2R'%H3[ܕB:̦!(聯  >Æv!Bz@*\ @\.}ڒV>'S x>Lс1<|$~׎=[g{Fp ,gi'O"_TFu!‹bKhK‹naT88d%@Ue4J CxNvIs 6>`{ wrҮ#Ywd;w,iSځia5郲O9Vjd11HD + y-@ttgQwtk )NIϐ̟P&)woW(׵RG|Fhx ALZWdB\[-#P%3E\!6ktR#L9jTvŋ62\؜F s'XV<4Eq\P3E», ʾ;v$(̀sEnu0U0rnU8_jWkoMj|J m KdԭYAUc(m[PqZyKR{ЪyQ6cW*]8]~(呅"/_IF\Q&J}"givlްKRK#WC|*5/Sb1*J}B'n/!8}LXG}/`ΗC]7Z @%\=s;'\-|hDD}lAH ּb{G OȔIF#8fldb WA&ذ1΄)xZ6ʘ> B4R 3d" mu==q>V,~ӌW %!a eqLԥ~5ZCG ~{1=`Tte$M-7F'g ]Tqd'D,mɯl3p v.R-ͥ|Ce$3F)ᠮWmq7rls[6B'jЖ5}% Opi)IN]] lݧ9{7%6a;."QzRaZƀ<U5=JK 9,y,Kk:뮘:/bjjo!>&"7H$fb^708ª\^QCɭ,%PwӼ)HYTBMn,@&XQZb0T9W $a?2mX#K ̃6ۡH^Qoj$#WG^JbG#r<m dKR/Фc`1vI ,7$Ӱ!_AZn2]!DTO@♬"$ L|Βy!,SPɵk;kM2Hf8>`nɱ;qhuDmQjf ƌOc.-h,K\/j+~kGJ#+R%9>! ۰|ikxaRƼHp^0nj)SI&ԽyLQN>+ln7;ߏ'aHc[ O;);7wF4Z)!)慞eeV61>(Y qI圯DWL3aRD _%@kֿiJqz[܊i#xoN5\_WMu;_d>f!4nYogBE1NZ_|CQaJҾ:Dև[3JAi4Oŏ#y, vyhTd(]QK$Fa)1#GMiB9s?fw3X*I F_I.+BeO$ݯ5MHtU@?`UP??La=p~C դ3ҭԙ6"(kxμ+tE_\f,@O ۛ"OиudKCXkcY٤[ld=T ׁEIN{+qpMgu?GwvdMTYr{VElm7T,O6-uf;_͇u* *#L E4a? TGB;V:K獃<&F ,Ivȗ슆^O VQSE|hs]t%j 4!nς\7(_SQ[$+.c¼|vP Cո^W^:K}B+ _^ ^[?+z@~i>؆H~-+Sf}&츉đ) J5ۑIs lr%8+sxu Qf=yh.B D9<'kaڕ_v>-{W ,橳}5OhHQ; !4Rx+#)`!p j(7YWup3t󰎁_O{K IgCu+O!~#w) ߖZM)Pqz{ =$DEX G4|`|r>&8@=L,GؔD[%0);ZyE_NʇO~:Q[_:{!\8#H73KPܲy0y\RQ0/}*B17 EH)SK?v =dy rÊHO?X#l7UOݰ'pppoVxi`uqiҧBH(=,:ܧ0!B?&mCs J* Bv H5b,^ӚTijMXN}eAʞNd=\jMMH/@'~g ^ĴsX^ʹz"9D@HD Hdl*̓ P@%h*&Or?Ki:6Txɦ*Ƽn ~2,P<hRzE#+Y(iJ^[AaܗWֺQ"΁YPI 9*HcKr*rK: 4m9*Ai< +!dC%z<@vZX&h(`A aּ.ͥUM]GU+fE]m׆:|]I?aUmS[p:""4QnSMպ*p8Ы_]ħ T͌_&CU Ө"`J$Rë)G5a_1zS\*Hlv^!o{;J=ܱdi1^ :W^eR_ޗqKfʪ9T +}Uk5# g󰧔z3-MHIͼ%`ll '+mtG< hePH" j:btnD,wzR'"'ՃzKd="uXl]66U5ڥ03;|j فgrD{6FF6{ 2h-uOjfݚҾbɗxtZY43'ɏWXtv b^[]DI1ACȉVXu|5nP."j_Q~R>Ljp> (뽫í9ג"JQl.cX}tEPzJQ wJdKK`qֶ=kY9B'(`2{-jAMuM6gHښ_gt i1#vhxLz^}Z}xx9~{=liUi *!Ds&m\HYF",̫nYK^Q\~"o`7!0&nX8c&`._ ױa>Jws)Tz\7mVnӢq,'F]k~PHލ{GRTc\Uf<%Q8cLaNratU0!"$O :[t?e+*<|~'f>r16-jiąLWjjkBfXq*c; #gh7Cjfš멗ksSq̖k3kJ8-j|GGaooL ~kW>l lK<`'`$:lW)w*,D4gd.yD+Ҭ! Po$?>pdRЯW Q;k˝%ut=؟4(NC'&@\P f`ږ/!gڴ8օS( Wreb:xsהCP-y E1޶) \@Z1-IQXEg1`lGqUT@y[~lJ'9#zSidg_ެtRr*D_Lq(:]/7fV#)ꗽ휇PЬI)|j(v5>ř4lUٽ:م_riʇccSajg莰8-͐W9+ w\(VƧ==&qَnT{_t3s%mK!ß#VLSuphph:5vr< ;)h}f5x.̀ޱV(X1,'e.7О z˛R!;7F_, sm"G5>7ܪLy5/ek+ZGE#Ñ_`Ұlսs_sv\K8OZ@s<\ؼ`YqIH'^v=4RO7ُUd[Tx H`Jp/J(g”r&?ӓi-"KpmCuL,hކh9 TPO=j0CG]NAx:WG*5H^cֻ*VL^~zȉ>>Oi/I}ڲm\ ѥPZ[. #  IBkv Z)sUS,ߋ-U511sA.yt] }l-SEU0гS_A9r]up,^)L=Fq}Wxץ Q~;E*BX\>!иnKoB? x QMp(;(;|E7Jy *ɓgvs~ƦX}Ѝ+IݠؽbHpS[Fc/G=G_3}bX5Vԕ2F7UA5hN#0WKw*4)>Voo-'f.7RMQ'V(Q[Z֊>jE0]劒~,?pXX=7T.jTA%X4 Oi @ğ*4'yq'!p;ly!5, whioQBe)#1W!%ZvJ|v+D84WI}QCZ8Q b H?ֳanѩ=G"raJx$]9/e A˴XФ.{R8ƅRzK_ORXJk" ]L|-èRYr9 ukB\aRY Oh!D7NaVyN Z(` [xgi?oi(RvMU6nh{E؊J%hZç]ݡ:wLb?OfٿȬ"uux4RhL!Ψ>}Q٦j[LR s4e+$?KK)NWo%jU ˩lZ֬  5oBڞU^3L :&0 `cXi++s-1!;ͪ;t8Qo-I4eQ#7Y)_UٮEcd#ퟍdX7w벮=E+d5aNyFr'sK%F=+K3Y_*PQ>R:ZxUKn @bZAYTnG)&w˽pFk?)Ha ش 2c7>􃊪Toܪ-a-cv VeX=0S~Mv>cP:qLNəN*fSG HL-?$9 mE :+UZ_1{Ň\Q0Rgk%I }( ,@S)gMsq[ů>7dI5F:O \ Gur'-w=4a^Q+ul 0@ޢ9T#w{xm"t%}t@l8bxx,^;H u9p⚩'+۲r:gUG?bp3М<@IOI;V%z[JEQ-]we"_cQ?tMc>)NYhFHTdҝP̀Z^eqP3Ϝ"^a[Tɘ_&sx- o~#U֥qP0 ڥTjP$vk?nA4Yfp}oދ+5; ٲ8Fk9+rc^u8f7X0Jꈂ(q [ 9R;~ DVb}N. V?@GG,ٜpGrWa}Zh拷AtWC7fAӂsjrDΎO8V_]ucYux/u'~VDJwg?IԖa6:;Nx|o"$ydR39z%p` bBo{EiRڸt}PE@c-I(O |jm #PCM ThCjo:IE$Ė31|F6N}GT,Gcc]w1;FmAnU[t{HL{.P).ΈNZ{+ѹ+!cҗպShU"ٳvD` MLAu@&rE\ dR88k`E@D,e !$0a.}>4bz"LzbLEUv #8;.pW2:UXwf2Vf>RU+dfwSOIU ';3='OׅiwYh,YH:s*$Wz="" K6FЮiDK)1{\g'pm4m+Dj-<'SEܶq}}BȞR W1.`J6i `{(.18™LћBݓyrUmA2K>E)`ؽ>̖ZFil k!Մnl%rhqdk:sU)&ס+)ݱg):jK;Tb|Z =F`4$]3Y'qqX$׫q/mJ`>H%|xlY= $S:8E[Vȕ2`CTvֹw@ć&-nR9T BFS=bW'H6с V &osv| OgEsߖ~mC 6^H`7BWҒ0Te0M4euxp\v9 NIc(@e%<~_~悃ݰe,6V8i|+q7u)е~̱ y֥fbW(}>P"2 NA-- !F]sVpCͅp3qG`v KX& Ņ Gzf᫡Lܖ÷X>& 5' @Thbݓ zA`ԛ 3/ PhytY| _G`HiUG(]qhżm v"Z`NsE?+}ǚexWQfGM=g}xx0?4r[1@>(Kڧ$r>K[`;\8; !p7xno-gҜHjM e:.Mk$,k|1p)eKE{>5RjC!#kRn-3M) >Z)Ucz 5y* OHpU#ʮo Ęk*لə` FU I "RS212wZLW04gPPdMj6/ziIjڜ b>fs K̊r7Q} 5yTBtx㿂b%LN%26Z@9#+AB-RYO*Nwu %=JN%6>KXKbb9^*J3 7Z%cF(ojլ-:7+>XKO^ TP^G]œץ-l~ Xgk(c)5~O԰]H'CBu{E޼*2Wm%sޠ۳h!'DEʔnf?|'9(t6DI뚛f5gbC ?vO5/-COU%O@cn4ϿP&[b _ɶDqS9ԧ4 Awž[zTe`lf;S@ ı.3`0 yJݙ~2Dd$\2:7~ LH3_RU,-1N"||& |cUrMY]uz]ӗg"t׭U{ȦH[ MY=(Eg+O,cb)5\R.#8fƘ }\M½kRl6[rS*qbAmEWf]Ћ x $~Be#юsEQPJ̛\Xh΁=_q8gk9_!ab=5-]E=O/ga&WLLVX&~C6[ѕy{f]j@MJKA!b>Ŗ{UiD_ Ҋ8>96'P5rs umidD4o3a*k=+Rѥ't7CuͺWM͢r؉)0dp4=3'.dOpD$LĄd-_:Î M֗+zq»yZY'^yvcҶs>X;W=GLzw+h70HĮ }' RsdHB} |\6PEeqo:juClszk!j&Խg'IhޞHkfb@@[}ix |@ (;Qό0 FBN쎀=֓8OyޕP aCDK9x5ak4$4t,,ƒ%hV)7C;kڵ:STqȖ@Q\!T{dēdjzQg4H(MJ{U͇x wpI[ǾyrkL0*XzUѫC$\{+gpŗ%ǠtBp>sҫ,DyԵh}XӎZ ;7A*fRh B ;+d/Wph8mkP.T,pIYf杲CAda)?|%5بPd~>mX8wըVv l@No=Jj]#r&N;^-᥼l Ku8a-B?jPLUXwY=$@Qa=NpLcȨ^AsuôVbeиyg\z SA ǾrX60tLO r0x_( 6U  Zv q",F8*-1 ,OjJq+6c .][^e,=E_/8 ĒT"\֌z=tO<봚a_B0_޽"լ:Sm|;P4jUYh?l]LG2I,Ჷ)i#Sk&T ov0*y/nr+ir>;":+MP&VVRucϔQ`IkTF >i:YTQ޸ӊW'1IFi803NM_==`YvBW@TB]IÃehXovdav : ^ Zy*iܑe9~t TgUI"U,M6 M"Pwv ;kZ#w6mpeߚG``rбI=2Yi(#JZK*sV-`j vvIIN;"= {Q^CBl礏n^Պ q`@&Y`#V/@k*ʒ8d GV S`}U9ifpMRqj(s Փ*|{UM!oK2E'$?#S'K(!.q?⼍9&{lM+TX/ج&r*s;F`[CEYMVrN(`k;}9{:Fof7 |4^C9Ǫy?ORWn a hA+`׶\k/vW 1~_\7+-:pű@ LCf8N?ֺ=C:zjϒ_*?"F"<#.w3j )mHc"1I=5"6㬥[ Fe%z fŢ&c X>u8t㧒Vc|Ly }˃UN:Oq~ank Fd2y o]Bm {h飺 @/KNM18KrFϏ>);1wQ쎴!g`'VЌw3*o1]7I`_Ӝݬ-GYIHB^kb!Z(L q]%z.zϽԒ;"Zq(?^䳣@k^n=X&0 ^QP.%d"ҡDf#UAQ6MYqh?wTq]&WEڹ$9IXSĘBJ%;?Ǭ>P,S2r4c2 W=?ئ=᎖eHkc .PKyRMW^ ]hGϞ?uK).34P<67{g1Дu`WkN_\U/\K-4ѴZuE&vyGreua߱Z V,쁜- aSE䌬Z}ex9P&Lj@YM6vgJ }a:mH"URXzEZ41t[Q\sfwUvjaZ> q>̊)>gr`KЈ+MV?km4N9\gP&ї95vk ifpq k"h8Vnoً7IDi@)?wyr)CEU_"ÃY%Z*h7Jo%奩$zGF.7 &z3a⯒oMr7uEIyc>7 S`xU<5x q/ߘN 3w-2u) LL\psxl'Du/ ܛ Ͼ;)1:] &AʗSq5Xf;ëz!:cCJw'ڎ!}ZM$2 1UeV(I} oOҥ f3rßKC~ ˋFd<QH~ejbg6kU6Bua '"B/G ]TLn-+^Nqd04(}HR\R\uANKH ̻+ntQfR.RZ{+~ tXތQjAw!hE|8) -NcqB~pBXOȘ_ϤǂÀOu Ÿr#"'qƎf1)3@J^~Jʕ2׏.9uՀ)50҉R;%^KgˠO@FAW&BLӠ|F\ ztJe\WҒuY]ܽtk-[GpS/EEI-%5xn C]{ 7 ,Еv)M#$;"#q5R@ރ:]F3)2>svw1df6h/~/CjE8LD/uSnAuBuxKԻ@ټv g@+51gH'Q) ۹d(^F E-7wLg4|C#4EO #*W`Xt$U$?wAcוJz 0xV[CeS]~TxC((w.kxp=xÀL=/Ff4AYΣ8{Uzs`gHqnpdi"^'L7~W5wWݩAQ'kW DMgÛٹ_4z8u[ VoajЅm}B_2&srq\l(^mY2+_nE(nE | G[ d>EeA1Kf&“t]A?D99pD̛QUGz is#QzhY?c:)zGzs=9LgB'6n?36Xx?nE+'MB:(Î^NQ-Ɩ6Zb>V d&}PN >-G[, 9 G 7Lt Vh.rBE=FwV6!B@#(D._Vj꘲_ksQG;#*2'R6ħM,8?w+x&W[l8N~#l_y+XP^ݯaeN`qKmRշC $gDT)ѩ#`}dzdc|]YM5dI/e)$\7LV KTS:;*d,XPPA{Wm0#\!14Et T:4&翵f%*^3,:,DZOPZȲe]^!>$w" ͓ݶb3\|tk;]tx{x0_5IBf{m}1^[X¢TSgS,;'_x2{p (5J6h#6Z5t`~R03A.v$(Lm:8@|G$}VpQb F́LJ'dׁ9ra1@$k>/-z PnT';)!r 3yS6eJETP*E/3A ~XC1AkD5NjZ{Rp>NЭ(W>DԢ:I`  u-"Zg,*OJ\XNIꍑ\ Uz&WRC.O @S&`Yr%O!2@\sτ9;VyAx# #"`cZOJPci69V[EYo-4@)qW"?/{?ulwX! J<$9W=CU?wFm2kj$qXt ȑF42mA^.Z)yHVq{.'BmbTzgErimգ#}Z27d 5 !)fGRϩ=6ǬdS 6(.̓=)z5`hEIW>:2!ZO=E(3bF {=p) 9}I z5)\bu'{"lq̲>r)ilYv}Ie7݋0"hŸ ?kL|Ճd\s\r|AXߝ{>;%h6^8ީ37$LG~R`3A+hlRbSJoJli wQV A: z0ّopJB"D^0~JPQuSSF|@bZQ2WȴU˜V,.>=J[ nRx[MkKz"gKBwHI4L S n W>;Rr:>Fh)hz1(x)Ywhf7t0'w~eeHf4K=2坨V:JT:ѠRA%7ǿ7{7:_(\Q/^d6hɣIKG096١* iq "6)ӝ/(_)⽯O Nk[Wb>^DMPTjhml*#lWXᬒ+޶)8JnQ#SZ*÷Z>n jH&Y*j!7(@ļq.T- OT/o2b*c;޼fɺf;eH:1Wn2iK@oRاIQoqK.}K 5,;4y()o"S1Y1I&zn %Yv k? 3<" 4HboT'iYA/#U :Epy.6ّ3 99R!ZcV?d4ڗuhUc._cF*]NxdCge0욊ZhYb{yʘ!Lo"Gb(.*u+l}A%!F [G|U2{QCyqDҢh sqO=L|0_c!{lI~bpӪG8j+$ \v"~#*  Qަ"4V$u.M͸f&+DAb!Y3mЖ/yCuVyhOIʃP @,\Ȩ]U 'йW SJ{HAf}LƑ 9veSAmꉂs$2}$XJkng}/j:rT~IJ5\I TRq3!Me>7Yrˑ?CJeg^39 YMY{@6/7-la%քŸphڲ. Hϳvjϐvؔ@<p#" ZsQbvܝ-h!|>roC(j/R*I'4a6 -$iCNk+BE;`ʙֽxh ȏ* n))_H c*o?v5jR8z3Nwz0`deuj-mG-9'N)".kޕʣ?r!&scf5GXv0$ N]ok{*219HΙWo+uЗ+uQiHd༽ct,AJ,j6N)V Av6!|#0ˮ$W|-OR~j%y3 |7F˝RG,ALŢ U\iTM(O аTm~+UFeEb#Kwv~EۛcI A+7N̝Oho^4lA4*zdLbjO>/9g PW"OPA{ ^[5$bŋ\N6Q H3}Um"$:p ;%8(G ӤE%+Km%>J=V@D{c䓴C ꁖ8Ѻ,KR1Fߴa^LVtw'#<_ @ѨP ^KaӱќIvg_'Tx׹$=sIsBMH6Y1䰭& 0aa]_;z~^s -tNyApv,x6u{8EEŔGxRo/2᾽Ϛ1 S hPke,;qZʜT@ ֆؒZ.]qhD S(jLUw5QT,s 8!Fw5|h O .q?Q2Atoo}M&Iώвs΍,o}\<&K |U\I) ־~[T &*H(7L6NMenլZoj=ܘ|::aqhkf/E_ʫOb,bYsDjԥݽIGb.7ċLԵ6-yKWN! |ďK!#6Oc haUyh uZ[sZk[K+G";& f= _'8r\]21G2p oh>Pц)[&H/Y2&:d}v޷r">]Yh{-e^Iir@[OQ$A'=JN,l!"Ag3=݋QP00%'?Hq7YL"4)J+) e_2RI9| 5 4q4 9R ݡKL½?\[I ?b17{D3%*EK`eW@if<ubSR0ezNXKڢliͤk"L #,BDg`ڦs!DlK P>;) 4o3R\{hی#}X>;-Q1a:}f}#<1sbm |ˤX.I2;?unHA{YxHbrؔx U|1db8 iR,?Q,'3X+ e\e!AUbb$x%E"+xrsɢeyj`VBJN-G*t*A-$o%'-U8䎩E4: Q_2r~#@w(  s`SRڰ66X0(,MQDè៬b(1.wN `6)KkП|GUk`u~H9e?18ohvڰU?pˑHQ k+ t`.Ѡo7w>Dܾ,FSy)0VpvSm)iU*\S?Pԁvf\:J9@*GǕD +(Tz}~ӉZehh6G塋 5$sh4g93G$kD]>f P `diqii"h꫰ H gh c2qĺQ` DkdkcIе;D_mNMy[G1%% gFF[LOo'oxo<~4IY:di)Ô rsJ0ZtnVIѦ5ln')ud& :R=&W.Hi 󮰀S1 4FBrciCvZ4kBzEǿXʓ@DA@E-8>ؚ6VFSL4]F o,uVa'XhD7ϨRA䊙'!=ϖ%y7\N>6n:Zmh6Si%DƏ$Hi5XHقtBQJgѫRk/LfE+$hd-@ioVT9kwI)@|=)d*i[ֵ~iu#:7}` g|T=x2,1VKүf̜BbY4|#:)47? q8wCEUL7 NAx0T,yx`Q7QS`i3D/?#!ݎ eMdu:W eq |[.lr>j^h2iJ?|B^8 ] "r !)]%M a&ʑ\6!0]3KqǖQ!C)@_$R)Ђb@K;ױòH&'fGήq:IX+.NK&o"%ljU_7\NJkvxcx]"j^-@V%lI QɿׯAtVr&.IOW6N5Bu ޠ^։@ʭE$7B[e7 `dM(0KO{ݧ-\H.>Ձ Gv\z|7nb?`i('C=F7rpkӢl1~UNmoөE/#G1هMH9#(s Q4)^oU-,bXqRI,Q3ᘝZ7;yQL4'ðsyn f;'A]K.vfJ6c߱ǭ!xO$2n1mt*TzuE` xʠ]7>"꒑u@{e.NbX9wiD8eG9ǀo`PՉRN 3ٟ-qaH0Lk Fk4_9okqfm,o0_T//QEݘ11"͞{d6.R)CъQ@,yd'cYå_asM:1l%$\"(h8n Hc.7 ~P"Y ? iµ\BdYh%ESBe1huK&n*k^f [wo aK,3r +j Hn^70跩6˒>SgE[6y\js7V}ZIy䇈Pdx?ڜ߶Mp)E{vL(AK. X^3ѵ`E'$" #S5pB!:`jM}ԬQ:n7S5xzg4 b00casC.(KlzߟǑ!v3&׉^ ϊo{J#ލ/9q  OXice1ns[륪S,ރlOѿgtbБV0{Ǜ7|ɁцmXk8%x&N.u~tRMʩ'V]s s9ҝJ^\.C!SgO,{Hd> HY("|bv{7iSm#1لe)t7Ir͈Un>bz3.uφ`QVu]NFB6EWIlt*#$ Lˊ]w&QyG[+7i%O,#Exڌp}M;PP6hχ+ ;MPg[f{CbT`\ (B꟫y9a^X9q;.{݇cbFu>zKCm":zilJN@+6ցB$x+K%^MfH ЏQO40[e8]_7 Fks^-Q&wE!3£a5d`ֶV+aM!XEQ[,rbdziąW,/ Q6 )&C 1*h6,6CӰ6׹a.bT"l,N%ޣ7kpE#,# fVH*~?ǁYҸZc2PuFU6n_cog}K_®;עgL%eȇdSDX;sx\RcY$!a I5%\ж:錑xNb{"L/i^.z*ggY꽶u{修wҮ@Q_0 PF]%xHM,Tn||2Ha@!\q!ĘS .82L|,;fH+j6~)f- ][^OyJ=?t 0u/T9 P!CؓFlz44eMw,6p?h؇G\ДHo*F_9QD1yMkWuv6B 6oAw旔]cޯT҅I1 I/ҤvG6czhm8_+Hҽok`i‚V!r,5eZ8t b_^V؉ _S"żߊG0;-r?#Ƈzſ\@L5ՃbTd`X_2>YH=rS:9!Ԭ#K3Oh_£JO@p+PBHpqgHg[JK=H?\U$AO)IUI6W ܛ**_R^i_ǠșN̛ٻHN)Å!,r0r0QL4Gl3oxuzc|\!YI -7<~!)|m[0CM@ p"YU{g_F sj  $fQsuWV@{1c$꯽2`i~_r*رoB1Š<.+Z2Ɉv~YΝ*?LdF%E:8 ,ېWMamT41[b@.65w&O؍l1def䪞>=UeY#EySKh Q!ۯKWsVP~2(༱&q~Q>=5콾fc6jm2\в_H83E AJt&ݠ R?-5ZKmt, 0c33h3WK6q/RiJ0$ίQďz=]P_ Y/op;0N+Af]l7Qb0շ7 b59+9QʻZel3?>Ċq;3bI\~aj"}0sECzoG:״(y;P|pn[r9jA̘L3>Y9pyGuhDmr`RX@)yXyŕ[tkm/ޤ:T.;h^ϦNO{P8;kP 0:@Isc˭ȹ"뵥4d&b\+J>Hԑ$:$*=l?9&Hi {M[,R8h4927OF;74*/?`0q#x: fo ܶ{K'S gu-(Ә۩M_ $;)eFz\pn{ f Qƀ N¡ Ъ&JZwԺ1nW_nFɯvӃbo3jF?SVc"ǡCP!R}x9(b;pr8fmՑe )`S_}yq -ʝɇ@S#36_aYfJaxB PQLLW#Uf* k* +~a8<ůeGP6Pܨu"NCrɄn`v^jʶN[;t֋*K&74^V5ILҒ| Hn.BŭGQ A۟},e:4}Zڕi-q̄ťj.oCU,浖B^Vԯ U 硉uJL%xn'Kx P7T64Zmh.6B-ka)b2? z4Ֆ@{hs@NE]<0/˻n˝̬o& onǟj)O_5lRhMAc={>_گaxCM{It*r~n ' ZUAS ڪ^픲bS DZBO}~ j*b ^8߯쪕 cF#^+VFҦHoE^#iֽplP|좔\+rӉχ`{'R!(Tj6D/XaGf&cqg$8-R]S04G  %~ )7R{1{uN mEtv"ۣ5 Ilim9rr:yLMN$< ɵt=Tr>&_I)I^=`le$vҢϴ@,'mNwDبL|f|;*u3tpp#O粷C[z+vKHds\gf$ ٯJ\]rD~-TZX"=c|wwbEqPPNfI!Qo5I]ɞ+Z&sW[0ۿ-ՂSX\ ܑ'q9)ϹQ]gPKMfy*#nƫ,5 o#D|z2Y&BD +@%y\q'7sqp^ƶEQނ=MݙMgFOCIԲK+o~*mSPrόG>>~lW<o&c77+sA L%GpP t^< @ t"!+ru _"4iiP{$4(,"jFTi2˔Jq߄5C]v`g3egk"[eߩM7Ҥd!Do:$cyLDoMOP?q5Fd/KGsxaUy >Y2] sN0)@KA&<≠GʎIUN*ÖJ,yGϡ_]U#:6q7r6M&;e5 vv\irҚ$PIp.ag Fkq WgsjPˠ止|+0E<ņR`׸ S$owoqygX֨Tט?:Thzx~1*][t10b^~M9&Qĥ_':jl3!Z9|H*a bjc_lRjIO"ݘte;I=OP^i`dF.UKE$IQe}ZVvSqo֡et&رn@F~JDzdT; bGєd-hWbl!F ˋ[g340Syfl'4)^rY @k1!PID%Zäb!icK"˂`yU 9lgKwg#e^;EEݺlbD 4!='){0SDɀzii<h}·o' _i&>8YCy#Yh샣ɢ\}& F&sۉz5 E@J9Nr(bú"f6QOhL7tl{LJh42>b4|3بƣo}>2b<.XXʹ3~NentMCIwKu]& ;Iik`"4Ǐ$)r)cxLyIMsքV"(2>Qɩj#=_v/h;C20"^ N'!▏\m //ݔwdmSwh%Ropk(PGFXٜ~ U"b僡4m`yH!q|}`}b>U좻G׊rAw~QKt-ecpgĿ -6,Q bTZ[5̽fm*6 k!m<7ޜzs Y+:Z}K^00;~}8+T'Rybq8?gEuY[q' cɊlhyi$)sO 5B-,`qڥ?_m`~Oe0=\p>`&Ny_[[%πHjqZju]|Qq 1hKll/laŌm dw5ji[H/+ `njeZj&XC^%؍C 28KA(? am>d#=u>̋x"qUQB៟ bsW/ kߵ_WȘ^k$)L8CJF/|'k"#q&{Hސ(HŚXIZq+7LFrtHC{}ke)f&6>̎=b3ĸPI(]V5L\b4rLgzb9^椙G_8D2Y ?regG}Ԑ[42Nu]k7fD޽|N? vuQ~|ev-a!{LYg k]pbឲm$Zp8"żQ]N@f|6.cȽ)0o٣ά1N4gBGy evjY`7cq8A[ŕi4i.7Ƥ>,_k{Of#= ! f#OIjk$-f5z(g4pn8 'k-t dyKFT.0$EL+9#gt)t0w@f~ġl=W wSݑ'-Qκ[2 /CQ'A(dB W#f0mޖ5hJ4^ ZU8$"79VqTc#-5Z|E)fZ]\)J6խ9ÎmgN]Ȱ7?:4m/ 0c|E箕BWI0F a[x/27LT$\$LwνH/PvW?, "X&ho{ i;GP=ϣ3ՠ; &"A9JAUo1̇Hm|'Ĭ:boBeiҲKϥ UwXfKOr~S\a, ;¶3Ͳh?L#>E!wlLʆ)ۖ9x¾P cgKޔkN^n@ 1o.KfK57E“DQg$|lĺ5ZN@@?sF.>[\IZqJ.8]vf1kSQ|M<C )6ڙn/$>f"nP}hht^.X g G<797 vc'!$6|3VQXDQ,@5]-Ȍc9?/1ye󅗸;; Ur50G5Q,&c&g~japD׃5[]qvM~/4J(phpk\Y9"wZ۲5Aa$UC3<,mhЉ#R8K,2@͌g uW\Xz}hPP(!s#S㝰/h"JD+jЃ$ TYOE`|' d=y. mF/v|pYw`V,֛t]#kO"bƌLߓ8ʈ-0Mv16g)NDSSEJ3K6Vqbn~ ~ KD"wqwwAĐN2#[հg]5NÈloc/D%34 #f%mXn7 ơ{z|!\7MbeͫKlB GOZ'qeiȮУ$ Ŀ03 RѬ?0[<%z+OĹ9i/4H> &MV&X^X0|E6e;[,8U S%mTZ1m]FP M$<{`7GUĦ7r>i mp4\t0.WD0 .] PA=PoJ8T1 &w8m3oďW`O'm%W3.dzdB+$\aCsqV0`m<8Xdm$rZ7{AUFyCRȲ=@@{E`8}ⳊOzXB-[TSK26L&\a{ԍt'>^MX,З"bHdqc!%TZ0ҙCo1P $JqͿEFEKHYCf,r8mxFJow fo7 j -.^wnꞷ0dAޖٛAC" rq5 \VfE%\ap2hQEiUJ7مT6r7Od_b.-٣FgN_ Xp1(8h_ =ł;M SO9 wfNI4i1NMFv3fF/&jсc= :Jp/Lc͌LV#ՈlV7_Q8Ì| lwGUgB) ϩy$iUL5;M?q0Р :tֈ棗4zi[Kܨʩ@Ztx|YwOƻW\#tywqz9y V+&zaJlT{{&é@&[\=Jkfs." d.ߝFk Bt/(G6Ng' SZ&suaBXkLM+U^ \6MQfp*@A(٘9l $"K[>n?1` ^14""ˏd=3h5hQ@tEA#7ee]U|AdPAs^A vds<.wa-T#s1xTJk%Lz[= u=7t=G]JV:"MŽ%T< C @BJUJU.ؖ< Ґ#7*NRc)@oSx>)R1Ac;OW@6nW&Ik=.%_W'@"k: m'_G -1i:oM` @JaN=?BY(m-U% {Z0o ~8r}դ( w2@̟ ^d1vsM^tCC-O?t+!r-P!#><: >*a8E08z1-@ V v-f'k.NPbRnWaCBdTyIOo h~ӅE{Ng 04-1B9DzG g(c Eͧ9^CT^[OB߹Gk~P]?gKRHK'`Qr9-f%lbA [T !h̞jgfhvrtP@$Q]y/4l*NMg <|]6gq=3tGѱe#Zޅ ZC!p5c{? bXFV E(C 4\j,$`cap=i)A\ `e++Q?hž> -aeICͰ/B 2v!5 nO@*2dlGaҰ9'Z ny *YJ7<޸o3ϴ Ӽ*Ä" ibRұlݢa\1Cy:sA^? a}s[v%E{ۉm\% v7g❱vhŤB~hE;Lz/c]]2|LрkU48C> jNt)5=D4Ai?3s3e82M1>}<]߳qQ7v0sRq&PQVr?`ws nGF#Og~J 9ǥi&rݑF0+p#z2c ہZyN}ؖd=&{5.=.$GۿYx谐 RuZ a!@tZqﯳjs9~KfZ!T^ !AD x ڭkfyEsabGծ61o%{[U|^Sc{nk̩݀-%7pfe"OR."CMt }dn^p9s wc z>"LtD)4` phK]-_-2qr͐\I GJ9U*ĸz?XLok_R<|6آ/_x401_@m̢v-/|\+qjHPJœt"uJ_'Gae(\ж s8bsoCVw\=q]D0r,dy1 3uP"4)I06D)`3Fkjg.(UhBE++,iO<ܭFM$2'hz&o@$^v$3glКWR8cBu2G3Uh$|PxB Arn֨.XeD&wsClj=ZDz h^T}FM1<`\,#,bS -ŢAJ%<-%DX<7絥N !>Q-<<Մs-jyt*@S,y*x+ `zr$hG&e֩u{1AH(n PA*[֩(j6k’ד`A+ьe*g$uPJ9.btsgl(7Ӿm j;ls[(8h}"Aw?'f4-iUb-DU‘ijP:=q~ Fd8*Oro*G!VzC[&DsQ>Džy.w3ܴX^[Ά{CME-6VzF$I=i ^IҜrl_,*`;5_+AF5T T*ghGMK5f\ /`[{oз[b*[X (G6B%ry jKeDO! A OjeVwޏ\FLU~lV9m-DQm+t9_^bJ7|DC0%x0jS۝!7QBR|L2Oc+oJ7W8poYh3sKy~=IS3wFߞxԁ QN[u\ aP=cK#\cn c!Q] Y@~ۙ 7lwkՁt"RX@ljLֳR{5`M|?Wk8r٠ dkvAU6Vc9v [c\(9\(@|d!tB(Wjߣ7G~޾K|Ŵ#f`e`Tjh~ wniM3m'ʽ'&7[!QhD@,P*U}H5Ip<9ZZsk"CHtOATAa`Xpt ON UiG澷ƞ޸GՐ wgY@Tn CJmdO4 ~.֕hW9>}3 W4\dn| *#_=+T& ɜ4ty "ELn1'~.O0䡊EÍߝBWv+7ζ+aLC$J"`448zgCL> [U}X`51t3|b=_̛Q?f-Cm`k$ުQֹXLDu*d ].Ov)]=𿞽02 ?Α gTxka͜^Rp /:g\xAJ6?{BZiPpUy4A YR䦮GlF1ٚVA}$w( "M4g;IGLE~{Z)+t}_/GDI;QLg73gnn6LNr(&iYKt5oŨ?GDqcBYi2T|xࡨ-'sŸb_,0a S}ؙad33FFǩ) ÏTpedZ;^Uv5)<$øFbIj*&()f) *ጐPTS$URAK2EUEՉ:fAEWQo?SDEF~eFf /`w~D 1$aO6uRk*> QqvW [%иLt[gJ +p,SnK@~_Zob8J؛,#*uCꭟMp(> $'OCiw4*!HA(Da)A5Y37lC JP:*"rC`WE&2B粇S5u'aD':JN_ 8Z/C]*eH QH @!i(bUǫWta寽jn)-:"'ҧB 0pÖuy,ux&*3 >k>.`}8_ S;ɱMD6U'JT$zu[8Ȥx[?Gޏpyu|X &?߿ar)~:KCPb~{粄{tDG\;2-?}uϜ;mIfJ#Ϸs}_!bBXo}0lOОp%*|)Jt]5 JG88*}: 7)xKt`Ƣ.84Q|nabl$=?2vw{]bLr_*T[& #F?iY 5@Րu15: 3b;>}6  i#E_7eߺHoBłǻA=?^ Ë Z,UBASs]86] F b|šZT2 O y& }o[ h+7D&ٹczX㫇r-P oU 6#o:{^P)(OeD#@`k@v! OUkw ^-a$xN꡶jui Humos-/0$Ff6 JS(,Jdg24ю *vlc_oMɯ^g4g0yN/ I 6Є&`y;@]{C~hΫ)JM/pAj1*``^Iğ+ʔ8vz@_7Η k-D.[@Pfv4&gw&-0ܓ"xX~jΊ@׌q#QS.{q`9 9qBT/V- G*&gI1qKQKat`Ѝ+:4PiEfN&0@mu߼,NT~d*ѥ79lV` W^D#??~xiM@B$#H]&{iksF*MzFqrIBҘCd $"aH`g00yZ!uz.1t(ҽmHcAW!e'eIepTᆎJzӗ̅lt*jHx\7kM#Zx/@!)Jw-slm&4|ci8z8oS8m1@t_A:4KScМ[WݒW֖8K$>SəڳMkZVw4,Lj Ffb*b^%74t۹0bG8n}t}O_j pVo#؄ 5 Ȏirغ%-JZ T'big%˸jwi 65lVLh<$ &*4K6fl݋hKW@7%/3ɜ(SnN/%es/e}N<gcn%4/K×\o WcE2Oq{ 6Z[}.*$]Qka^})Ay]4JPBR&%n*^ri`rRSZcgi1r;7,c-Së9U㥝gYbm&2̀_L!8tV/'XѰUPY/!) \[ &0T͔~iJ" AT~?AHBjՔFFǝ^"nѥF.MySt IܡD%1grXCϔ464zNo SC)}?/RܭT ]^;SQeTaA"p+raMhI9/dq$*k$Ӭ# KMv@@#$q(lެFC׬{>y*`RRm)bS("̆2F U@'OxE  BQBQ X(62.:jwYB~٧2h;RQaculiA_@>ǹ͔UW%ޟ#|!RŻI23] S !C2L/y>~ɳR==!Xo+ h3~GgЗB5P%%ETO 1|;n.>et=ň5yO@H1Eew|b,FV3ԙe,W{#"3N#6TfZN<<& m\_yВ,*b#)bJi)H(G[\K_S]Y;Oi #H0 :$5}x_&$DstژJ4avC0dɡCΨ}S!GCwPEXl)d>@,㌅e%U-_DdB%2X-%4jO;~׵H ]_Đ/ ""c5LBQHQE 9ՅnκkԶϽI$(3 ` X +^m*M y(,9h0z#]}òȱCѝw1##bWcHA %˓3IG# HK+aa0W֭07 }{E)%͠kԠ5lJZe]0GIgs&O+FGp&Nh/Y[=H~nXL105֑$(FRQ@haR0zԶN+][ AZxZ]aP2C Й**f#1}h}oa?t:;_ޯ+@F '=dBnF:rJ"B4Qs'Yr$] cJV\y@`ۿfX6Ɛk!rWx\}Q56'˶²ཬ2(\@0FG  TbDTbА]0Ң;$##gc~yC40x%!]c2d$V mܕn dwk$"p^Wzt^U!1%&8a*\(62vWŒr,/UC=Dx e}e{}t:up=A+Zp]K@d2Ҙ\6z/LsBey#l"!Ch*S4ѐSl'}L\n6LGX%c6cD*f.zhSAf/55hi땞.=U+!ۧ5@{Ֆz:Jw}( +0FwxdE@+ (PRP4-RЇJEO¥^;wO5 |apt[P5_oq .X=ZATS!\` F4D,GS?}?LY7>>kȰR I | @ICh`I^WodYh㜉 R700ԢEqݻ@9.?/Ns \!z3q+k{G8ae1pC){6'πn07!\S4?wAOSh!Sk%o,'8p*$+?0fQNJ,k50/ݿ)ai*XJoZO##(n/H,Hvݏuhݿl>/#^ROQWl"BBU ُ "2 wi6y {lmuD1xV" VTԌBO6qhu[d<` Zopl9{!l˒HPP-C]ʆf*a28~oCzߒm[g.z1&e߽9gc-AL(?3[=f+ $\)MQiZl+"^CT ZMQrnYb$[[LJ麙WT.XK2p`Wz׏u=J6j@HU \2Sh M]/ӉR(EQ`(#}Yi6o|4_OC 4Н fZ|KL[v3:$M-mZ`,4陑8fcc+fU5s¥*:cT0jPÌ7 L΢g^$}ҋ`!@%Rw-?^}fbȌa5e(HdW J(.aXZQg3P6jOvQ6gSobVy!mCӊ9 ֠$eQU{)&v 0%2*\* w‡M23ͪUPxr nugv4 RiO.eFiY )<jdX ("y*O՛:;x} _T7w[G5v t :ٿ X* s޷ۤc{ (8 5Ҁo5R8<\GGe? 2{7ɗؒ&~^ܐ2j! Ā a.E'ݕ ~ uSyRj?WJw9pkOᅲ@KiýkA8XLhB\fQH4LUtwjĘP^XF&ҝjc :7oj(ށg.6Y,;sp:5/hաj)͐'M>|vT1[ӔjuיF3 M +9x1P]v*-2 l?̵ذ*5Bx{RtjP-DkKBjecQdVd*'w˯meYsw 4n&%̄b(ʢqgz@nluᄌ^ؗ.’aס6t뻸6~kq˭5(DD%tz?L3R6ckɬS!jAJsY4Ap'omh6PAeRm`ZC f 4‹!|I@kb{5Kңr}νC{N+l3t$դݼqY$Xt{S8^):zs#{yQWs30.FV\DƔķse(v[a[uc.Fiv3-ԄCtDxO[VO`32nu]lsZ|h$pko՞̼)P3;!xLK2)w4FwvTXz/^.׸4~G͐ $QdeBhJU) "w'#5ԙij׬ȣS~AJ=}(7 Gn't~`PrHӡ;\`z}&ݚ|ݝ~CQ)ڑԁ,D23 0D#1r|n#|ݎ/2#:ȓ$ *a@K+U2`4,Z0XIāԀ (=+%:~v ]"`p!2>=hu{g!^~dMJ%wpfhӽCK2g,de8TM xsnHS1iI<0l֊]AT7OD;IhA@HPEJ #a_sfWgo$}O+v 5ԙW0gQSmv /g?(J0 ZL&FA}?P}KvR#ƏOwk$c{.] @Ȍ}:`%VL-_(If 1PṾNmNoU3:SVG\&k}ʾ`a=nKZb? 9Ƭu$Y;qv%l@E-3 $iQ-* \pa)puF.TMboٵ==0'#Z(asQ ЌީQM4Wlv@M!E=LI@:3ƜB3(k-7~7{w2h#UU؏mIߎ*Wtkw瑔0kY*ˊT#gsCL/kN)3_.la&>2Rj*nSHn[MQv>) $lt@"390fE3;{ ț@D<+X;< 4BC3_` ӤN8R <$y;~ eyk2>kx Žxm7L~ +#C4TW=|иW<ܻ2D@P ri> FW`v9u~fϟ,l5'0 eWǿ"#e hQe^IheDBX 5`^2I1O(P36c ݵS㕸-O=Sٶ\{cuWrvl5L_Ȼ.GkFM#QWn T7'50 C8:,20:Ʉ[1r *০ģFD.x?9zonx Xc/ėcc?EqW&/)fr*$vST}DDՈ̯bFXG?ѿm2at\CUb"w,SY$&[OI2;&P{;i["53L(TzB܊oŻ>*ڝ[-_v>c||nIrșr<\AT !9[3ƽ gs++bs}&R 4wCdZkR/j329:EQ`0D`IXϲ 7*s9mGb'suH[ "TEPR9.+P)<0w >F=%Ij40 @2ie@j lx zGU;GF#kL- qQ6R)SQL<&^#M'Qَ !l Iŗ:sbiJ(Cpz#X)aw[nk߷LJ>[EAAwȡ$:}$]]i%m[߆cOFNWABA $ di2A(U09+mQq~ܻy.x;8f̴ Ъu;j=&;m K"<>|u#%? jHd*($D"_#i#-Ci2UPdOX >~~55ըJyJ9J+!˾[{cT`ZΔ$ov!|ɑsK^(e`,Rsy0F7=^F;ĦZ i`lsyc!.ӱƃ)}lX`ß2K'@mIޅ˂/}akb[t28'.5&41"TS35#IL;_y+ _k&'% : ZuPܪOMg (Ef(_0d?{ϙ>0619,bSvC pD)92=Gq fAnfpO-]D-& SK4L4 K9~G]㨢ҋ\P {Y0&Cږ4ؐP 7l=Rs_a.䩝 %LH'apГ|ٝ=YM"':5GzEs$sP=s_]^^^=vn3  \!lVVϩ.ݚkҞ3)Hbac~g FWiT%]ˬP|EDaa3y]*b(Hq)4Yy_dH$AXWـqm$`oI.@`D !|jM4@Ie%ĢCtb\I՚(.R7RX,]j;|8۶)C$OHm&u c޴up3x\5rBYfų6o7{Xw*oLh`bޤ;F[3?B e>d4KVaI`]Я3n[:rzJcϺl)S2RRD2}lwZ*&TuTU~>oʢǴ6 7mxgֻ]")93T}Úfh٬Fe 񚊂n-w.NC·G6MqZ7M*PR&4q!J{ˈxfDJ| &956> {lAr`耔$MdwԞU5f Sj> 1(^VyB!]> \"ӿfV3vBvx.?7YȬ'{;]717F,P2eYT߻XwqȹW1JhbcG1 /SjnA٬HRр VIj B0: C8}(#~v)}NGG}7!؀neyR_ܡ{hBBq~O E TL!!EC$RI>~]5 >uڵ:4۟?`DaA :[(5Br噸 L(笾{~p0+VLʝiS"Â}m5`$R r#k-SdjLeL@zib~F_!cE%BFsiľnXe;[}O0B#pz-sC.-g7n]Wa>?Ca/~g zιGWVyɮƤ:&G ۥ7F (X\`Z ߸{tWK 0g(sF,PD0kB'Za#2 KpTM3Y\0LKH1>`rU`X*@5534DsՀa 0RD^@,.̓ y5 eAlQu%43޾g lOsqeXs~.⺼YL?J) ̏I4u0_E0G>`ȊC둞I \0sˆ)"2k۶wwBCGϡeTalp"rQqTE'*+0ahfN-6jl`a:}ĉޛԻ4TTķPP'%^ޞb_G rE&7óddHa0 %*1MԳ{#͟A&=f}9@&H'o.iM6z>ۍ!H92Ÿ3ǔazSRiPAeU8$ZXhHfТFëɐ:]zblcpKe=fZC+q( 4pg^=ML3bjh>{%Ṿ,/j40!(p@Q VTeq[6 %8sC3":mbi ЍsBKt v!˙tӀg[ MU/fb3 Kb%|Ѡ nk;:F|>|ZiۋK~N1?Lr4>^MYe)2QToU|9WQcyr0,ώկF諕7yߢ%p6@t3؁[KfVtw.L< &{5s歈|W&R2l,ɫk-H+~uBB'tuc[u٬a[Q熱NԆf<728 V|-D?2R &͹BPΟrwL{Og53<)g5JvJSB:<}*fw3Vqģe&&+w*0`UrKf˕ wqmC5w9a^/ƞCA9lEӈ:"žXxI|l(Kk: Xcu}mն7v_z,{dh l~n ulYd`3AX3h892qʥ ǵ,dkW.qO.N#"%@4-j wOˋ73exkR @®tSD#ޅ@YE=Ϛ_=rW^lH >qjj (Z! RPRRRR Dr"9V9߲?Ji|$PQ\; ؔ>b.kӑܳ|!NAP,&6uvT`9!4,/:gie,7\?W?i ft)bspƽM'1kuq㹢&{Z0N^:(5k[S-Xذ` #30 vNݴ,F@ %CzC$$z4<|hbzE<8^%oR){8I|l[%bM5AÒQ4kKHmcd1MBޯ[K*+͕-LU-'L*y:]ɢG!reH˽fЉ2h@go =|r3iЦOe)"R:tM!\2YU2CZ7M VCpDo-+iD?ùZw0tSmDj@z*o7V˹-/븭jUU9]i ZNCm;zz?+BloRbFz!BпŋwxF3jix5}%KbLDc2%Hkw*MIYWXF%[{w ɘ3ٮJ\#MmZҖ wRK}6J1ޯC~q5UU;BϿAvH⚐'0?GED`Ŷ h4 G|z*SI9^1>5JO{|LW% \(A%Z7mav?Y_RIص PE`i 4ir*}.m>۫|]jYioTΈ`I(@Fx}h,'^ D،UPDscm6kSwc~_Ј*;d$23] ICe]WӠ79\>q93!DbJ'ux:gݎ;568=1f3ʮN4iS SJJ GPxY/( J^r~!7}B(yi{eOJLf> T2Dhn9;U6n58'_>m6t¶ T)(H#HP{a":4ey=n=m7obUy_fQ&F0=ZA@){܁>>f{.THI=,D$ H/NNūl<D5yDJH[óB<y~UP JnJm>#HϺۼ:t!PW6铍V ܘk~tc,}i !c'3VRHZs`%J[h㗌zy9hXwVZb`\Gn3匬Wy=VcF"Ōc~>_+ A +'37'M;+ ,euκחZ`2-JhM: eukT&bj1zdXf7wY>㞗L9%R*9ڵ^e~mX̾hiخǺFwNc%,o' /SN oR۱OuY=x/eLk0Z\Fqܨac@߾:'КͺǾ7pocyٚ]yI"LGrg1v0hݲu&x9r̺ef ߆\h8O9^&z씤Ek:v6́~\'F+bXmh;) $S3)C|#8akŸteыLf{I,Gwg&V|R:<TGmfJOE(?uSQjw<,?pq̿՘J^܌sS|W9vC nLhifm+ޓ䬗A2gc6c"Ԅ ;ecSmT{g@ |Г2p4@!i89Tt>N]zǗǔu=g!mb=jE {AZ.!L]x`(#IH SJp󧷦1Es%sn N'j)ʁǦ4`(+!SUEjRh%J+`aI$&XZ¶,2"dCsL[EDN8A%Hzy:mDEek2$/fWU|<]#@/ 6ֆ݇,w#P <8׃#UJk xJgй2VJjW_;^nn{~-H >mG|;JdB HB!JC$"쿼3/ UfU݁^PAјvAU5ĪeNqi ¦ $$؏>DFvҤeɓ LbX(.w}s'.L%2,2d词=ݎ]'# XwdX" !@ {|l4lT(:, ˯Q0#7JD Y1jNUeNcʟOzaGm(i= Gq3' Tjy34 DC5Xe?lO%)<~d ).tw(х`k)Ucew4ZF=o(yXvD_< r؈&48/E?JLZ7+(&Xx{qF&1lT}kc1^ g;2Nd JPRЅ @'OY_7 _mܜy=HM c+@4%IUE-෹m,(}?i` !De?@,CBd-3_՝Ej4Ĵ b/~L4'aeɅt[dmL2 5jIndIn_;vp*'ha5r6v4˦3{yɼ].F"Զ7; x;˪aK:_,>P Q*,))bDՖ3h y[Y'y}܅wAם{ UЩJHTc E5^\9QЂCP̉;ZiRa-7՗M^!i%HCzF5羺}cZ‰pg6>7jm(dc9;sz}|`O4?`qP= "vy$N]%nQ4ߣU|9]?t{M}Gж{-tg-2-g[{XhZ8䰦63rBկA*B8Ȍ+߲_xq]O|Vr%I{ORF,f^:9pf3lɫ‡'yiၿb-/qk=OC9:nRqT{>OIv^E]1lywoNIf$ηm{YǦs=gGeF#Rr.[XvKk7 kqc#WE? ;kw5X:w\=WҸG p W^ vJ+}NޏÎ? dae˶FW| )kM+/yQ˸RrGK[{6ek9bV55/"pP- NdviƵM(4P:vdA@8Z Cֳ wlEz$j=eG?>ǍC}y 4t@*L`<"؟kZ9:{sM-qnlqD-6+CYP̲'н/I ϝCigu׸z}3W2Cr{7᱋ڮ#/iԱ*!&@}@~4Lk,7YgX8ÌnO ya20L|%-g&g2>}qH@c2ﹿ/|\@Ux=w*}dF }ƿؾ;cC) ho;W4:_ZD&fd` U/O7"WOw0&2QQ,H !9\.M5 P@4Te %xar KWW`csp(P7*?GzOcV2ʯW`0PAD ? 4 D*ߣ 6JC dsk阶}G< w7rybO4lWY Yb;59ky2o<݅ØWftz rb9+yB]V"1)j*6OF/۱%0|Y)kMTæ̌j]߳YɊb a&7rR;eKeT Qfbf@ G"Ʃnl(:e4K̈/س$9[jE.|ϧOTtAs#f^ pnȤ&T19.*?ߙ),]*QX,¾ R 2Ԫo+`n87ꗹ+i*ܛkNDwsnWP5ԯVIq~|;AQUU\;oB, Vt.)>BQ@)AT#TL!T-R !MR-4 E B(B#HU%(,JJ"R"LP4-IJ4 QE*D@QCEIST@PR*R BTPPҁ@KEPB% R P BPSH- E+J #T44-+@H-!OZP*)ZJ"B(hZiJ)J)(h (!JUihA)P  WƱ6yhW)SM% @ 4Pݗu.ڼbEFPU-91Hۍ8:$-dBzKjčny,DD3 +&"7 *zu3y‹FzыcB :=κj=;BY8]JtM TXewT *'HĩhN,"ST%fFf`#Mm߆vMW6a˔rSu@SQ'%(`VZVjCT!HsnAʄ@W$(LJ-h5 T:)t`-(r@q F`23@J=5+`bkIkM} eOSHk#d bX+6у52"͉'z|NMPՋ6 ap *R'$WWJ}IKa'ggĄ YaH;H媭{їpxΉ-",h/tNLd4ݙӛuߏ>F,Ipw6,ƨշT Fd Rs}W+xDu &ffE@(i( hFDB (*)SP>/x* #k8N4@R~Bw؀#301P(s (46] DR#J#J4R5KH#B% 4U@ H4)HDPM l&(m ҺCJ'9 {~;L"21aI 4nMpr2%Yldh/9w>K O-c< x:HC*#.0?HJ\`=3͗smiz&;fn+4ÒܔhdΈZu}-U; 5[ef\:|+/V/FQb+(Z 5P\4MRc6woCuѕ⇅ Y],p .J᭹KD2DU_.J4;4cQk2 $fjhEX2 &2|4!z{Og[3sP"P(1O&Tة~o.iS~ LU"PSDITUq}*dK{cLJc {qҟk~)"Fo]+4$ Дho/ - .9b:IDnr~<1皆`LO/ 5HT(SV.BOgx6ّtdpOft[;  @")cA,@A1S\6`fխQc8UPAT\QA4$TW$(h+TNHD41EETQZ)hy/1V44AT::E3DDT DQC :(vt=Dr :M LEKb0Y.Z+j0nYB׾D @8i~Xy hNˋJ!:)V!BJ yUa̫w`hYU#JU"|~:*Q#l~)Xk_N IѶq0) e$)(}_]ö;72v òxՋP Ⱦ;n<~)8Պ)AMDEf*=fi4kۛ=I93 ڃT B[g@RM--P)/a<_Ś %=[E70bC6 !3?]D}z%$!!3$ dUC>xK(X}o^>ȁRE?,Ӡ 2l]9-ewԤ)aRPzbWJ 1 HDtܼc7%_EX)fZ C X0MnMՊMz5Im(SG 1Q8;GX.!,~2p'Fp}/kkɻ`LIT`\)(kn-zi%.[ȹRu7rJhm#Nyr2 5h*VJ/+el5PSF@?0!9\)w\=>wXa GL_+essQ]4kS)1iLZ< 0mTycP 7b 3"({vM+Z8!C"VXBdKJP")"ԟQ9WA8L^Oi6M-FsRNЛVcSXu7ԑaCKy&*"YO/J7`" `~sfaȆdd۫T5l5"5=g?;{CIA`~U3Q]>X!wTc`3{}r'bs!u2HZSٌ`{B76_=nvk7&@} Z y|`~5\u|דlgu?T3CV+l3Kb_C!h#mt^E/,81QZz)#KL2)&QS5Ea!X~O{֔|ck\xdry9u*~PR!Ba®j#1e({h](.=?^:_G ̐I]5xR\N֩ ` P)d}~>.~K馔Q!sӥ}R Bߡ( ύ =ON;8wԣxKZ_z r$)J}*^f(PC²iE-YLd9@q0}"aʵlHJۮ`9̵5Ypy$yy$ƌ?Pi/#m2QgKm޴C8JYu)U-O*_(⢒̨LQq$Q i'iLi:C 32fK#WlqZ IجNW䠷 >{tnl{?wFdM.a@mt4+0%jGb\nH'E\mw3 Ԭ-X>uXzxsE$PG4$XlJ^r@@T_ CZ"u#GGNC*YUSx7<wϬ4D:9deV^SdQ@p:>_^pHOw<ι,Zxqc%WZZ驣̍dk)Qڌ^I}x^d/‡]~m=oRx{T'R/]Af3 }Cn\H)gDlmjL[fW00H|'Z 򐦙I7&7rL)XچÍ⻗qf\.{Sj9LбAOb׋K_ML-3ߚ;͙c'kғsϏlQ "[%(Z3ev@+t u*v_TV|]cmhʥ,7APSgZ`\P=߈-> FOT}$I$!d$-PA< ևޡɟV!I#+L j . b>vLtQ0D^Ec5/%]9!SwFl1mSI_?vJn߷'sљ-rgaIO}?B3_7 sӔd)2\Iž&)Zqs!9v2'RX,,H*MǢlKm'n:ZUUCQ) 2QE J::R!g2}N/~p*n8?$(dO8ELJgC{N'˿\Ss3$CΣo;̜}&P=ɺ> `~W>ȃeLDEІe-멼|-,)(-n lBoܓ)H6x?jKKăxoԜzL@#<`>U#SX5j6/kX2{Zr PQTNLlҳMDꯤb(qD*3I籖'tU[\t?vq5xfҧF=ZQk=;qSa኱^=yurnc;49g'F;i,5X4{,dPyo k je5TΛj0s"7y(ų!GSwk2z:?XO *COH76Cҋ !fc8˜O͎֚l/*ËcXtiliֵ]~֞׏,R>zNÑw e%ǓL ԕvhl_5+"k(M…0/[:ƫ:8&[lb^G3o-/sa9wsL0cu}?冼jۚQobgחQXMl8+NQx^QSƒ%N{X@>4 Cx.{\_Nsv.'¾0OUnviۜO]TgyB Giuݠ,wH, "F>g#~V +T ,P% hcv.Tdž6qmPlWl" _iݙ׭U'Z`Vk[ L@(z:ëlM)\rDb(0/[sA$`h¶xvѩъEFfk҈2wm<1 MےC.,vrEerQHc~Z|>s{KRi/G]/<4g5YY3\;Ѣ}ZX#=8Hqx$V9Q$p7 l@` C4Mdh%:Cģ#Ђu'~rd4㟗ׇzd<,="ϢzuO{஺FƳ'5 Qcv0x-::6uUh>̽G9dD Z#Uj ?ۤ߱.kL:!C5Dn ">syi^"t@V2AZ 7'Ҿ?Sz}eΏ$љ̆1X8BwM.Utq̭6X=@CAK6%T@1W=G>l|c@$(S 2b^đ~M7~/ܮU=&3Pb?i7 {Sd2d@?ߺ@Os޻bqݟ!MՕ* .m4ALr;0%2-oяɃ)$*6;#>IPotU~ǼoӤ\li|`Ccʌy>6#q~^+k|C/`f^Q@Q_u(~6qtTZLwv.~Z_4{>7:vIr9u/~[==[_?к }oy[3i:Qߩu7i2Oor LX cd xdsC#_~ޚSRdTO`dRG7ާOG~MI=ou<'izM_te>Od~OYyRoϔtm}v<ف E굺[ڄ RQ3 QA@ ]ѐ"\'@1Tv[ӵ`ƶ!o1S>!;7ӯkYr8?s~}z{=~ yW^É~Ċ~}Oz\?ov?'篺/?q'Mqu7ƳWW^뤁u$?/ݷN|?q:w}/0 Tjz6y<·]D,КDM;[[_bB]acv8+u~%;~+W4A$l iV}ߴ|]/^w>_ g|?^gj8wo?ZW/zW;{Q[U_ $o zݏl>VӚdc 5L_ /J_c`ݟK|:x)BQvw3r%gK3-WrOGu'8y3|FXzhCf6CG^k޳}n?4o2e9XW 6( wi?Ug5O? sjA_zNWAy4>]7qwW`+h|L'Qmwo|FO ^_k~?m]v4]:~_xS?Weu g|O[;_svEE[Lu9AbVy>W 0 %( h ab,̈0z~?i~gQ~v|o3izӼw3.?ߥ}8]<'mCo>&wzey~';#9SPd0z"CQD 0@~NJ>?g}|M"=EH`(m4Lf1~W|;Ѯ7q$ nŐcf3ciWsw/%J&/<'˲o_omnj!qDf0ç(k '#o5T%K?OZ<4iR0˴F(X),=FJ :Aq'$j#o$== eF0EZFXa-42n;.3nA>cB`3OI#26< ja*H#IrFo u1D lFؑI66T$s5qT"펈.ENH][cg#cјIFƛۻ!gvx/[qB0b([*KL}vEiq=+Cghy!tȻȔ. ሽ#CA`Z1i& :M\P2'r dLdv)"kX)TNA2aӻ*ӹǥ3ΚE44H4aLۜ"ZD]I4m3kSR-nuu9UA7R%4"v J4"MJx}a=f,lnOO޷ޮCnf{]ۇ}$*ֲ2FR> cD\hVВQ ýͽ&`KgP(t2={`mg FDXj AXj, z=477Lԁ:;i [xҍJ1ܐꝾd9VqXP R_` 餫JO9!896Hv MerU(25cu0;c2wUD30e3wZκNw&\ɬyY66]eHk(% ~Wu_{Nc=5pBm2Aq&nX A]5KyNxI傏b5inc%n8xcm'|`k ms)&Qԅȼ8- ڮMC9%UM,Y M)Y$[rf z>it$Z NraMuգ:[ \]29Dн)swgdB]Sfjȵ*!2Yb:FdEkpvK>*翼F^E?J~|P:hUr6HR|C!~P7- `!↘TX䈺!ieuN,2Կ;ߟ`[MgS;ό(j˴e֙z':y}:9zĹQO>Pd.`-Nhce\nL꟩C;=frǕǒ?)Ɍ&c}3-}Ec4V/n^ӷݠri%)EWmm|}J(g2}3c BPPr:/mu"Rs;]ΕF׶ 35*B]z4W;٣ӡЖwv٣RJ jx M)}Td{ hhui6z/R)w׽,o{sgoz͍6-w׼{@})Vk/gSVEJj4J[c2z$$/tK9{4zi]뺦SR(IRT׺** 5HA($Dt``"[;<==TEH{2K2Sck*%$ @RE t"mlR D* %JTPJB*I$U/-TUU@PA .Cw^t$JBUPR<>gnvܲ( 4 }|{=)vSE  Q@4H|ǪAJ1@xHk`-T}+sJnK{=wo}yx7ҬM;ֻYq cggp{Ds罂&l;s*YyĹ }8ꉑFNۡ>"14bd }fW| N $D$c@>}V}mx`j;j" EDZIJQz(>μ<{{vQI)6Un>1{|UƙtjJ[;`|F/" RT+֤<}=}s l(k7RBj2=W Rʼ97(0bU}ڮcP:jj}|}DKڨAx>UUY}y>oA{gw9Q@h;OWn@`|JOXSJBn}ǯ!%(qGѢ؀^ն籨|Ts=LKm {UtJ(4돮ܭ4^٥ZֶMlZ>]'suF M*BPU܀l .m͸X}}:D9a5fr,P3ͳn>) o}ma(: ֧905%A{55_G@U3B4 &LMh1B&L4 4hiMCD 1S`* L@d@C@M&#e2f4 5=O)OOʟzimML<#jh5\N"Y=S`ONoE+'Qj}$(s^%AxVtc7 y3i.Zjt8'*M[HLt9 K*UKO uV[Li4O{mjʼnEt\u|ܬN6t@10Lznq5m 6tpZw-C6['ݾS׀ck-j8Œ_7_CKdiLoUԷ?_ilإ"1R:B؀)m8^:/@K./pw,_{&M7~Vfl$ng\l^ *b*|f֭m5>Ldܓ0B3}ň?|5@r D_9Q4h;aQH2WfCAO2z6˛y&ނܞ3W J# [VKo G;>c5(VR&&uC#٣-pmP`ʀ=rDr<']x擝+:iA&en=%B\)p ep2[c|_N40A8MG8~=}!6gI('(L(PMjw_NuB@>3JIA>4MW3ry# #wURt'ϱ$*)2Y;ni e anl$l +n4&1fOT #1Һ]ir L569 Z 䱾"2Kxk7qZߒ :wm= ҕwoj!bcbIq~wgb͇/rlˌ4V`JƑN9 ]~qF?Ē|/x^Eq6F'q X$k0?XP<ѢiB%kyh謨2לkDufsxV:k(*]{+\u`.">jVk q|G̮DUNb72hkƗQ+to `+ar8_dHvyz5p^fo}w|]?0#7z[IP5(U 5v,s}F<8 %H"(-:bƻ7z7&HџǎkS;m.4؃ohIVvalo X,D$De鳣y?} b8kL2W.,ezaOt|z  uм֬=^cN Dx۷GL!Xh5İ4b/"QA_m\`@)DaȣL'W:aH/ !tp|C50iUPg&k2ov)=JV %`f.l&vz]^ZV-cu>֞Q^SՉ lvschg64mAܘҌfc-RQ wLhr`Pvl/ ~~ | ubbX1ɷۣzy-V%uŲ' >kr/oFKT aѰC-ΘF"X\ӧ6טF۷?<.6+߸Hb7Xn"rrq I#r1)"Ȇ؁~RʪK?H?UiD甞ь1X%IӽE <,֕FP+URNqꋖ1;Y,? nO $C ? Y򭵾~W8cUi,$CU;S_殹!vq꣘~vFGȢi} ١`+\KՍVn:n>xɺ~ط1=?'iYB'h,3,]HNc*rۘ=?W(rdf[_ y[H%h~!fj@4H6 A`_Dkn,P/L`XjYSˬc@ +v^Kk:0R}d-ʾ>8Zvllf?ZZ =" 3>nV&*F[DLUaeRR|zQ!PԀSg\zDAfGUA!C=99)=4jlN2ЈF=-1_ƈKnF+lXG9RrԄd`.܄()*)x`:0'*5md[:A|^h JCRH}%R I';lG#ml0>ji͋'G!2Q]K}CBũIJJT7氈嘑'N7GdqbXdÜ>ɠ.۱BWU4RqUXeQL(Ym= YPRÿ3)?&v-Or' %-tm`'B'}tϛ}у_ 8<@0()\7ݪF !$N8Sv"Zf`ɀ@j-I»zkĆjՌjQLѶ{<\7i[.NbtIA1~tyh!#UK@ӂ ؈J ?9k'ZjríO~>yYN:1-F N~V+E7~N#0Ör( f1#[)EoW9>Dq CvtËrWw L} <=mI,>ǀ%<[9$պ`@ J`ݞcR-G\r_J#]q}o1?qO![8W%V,<5lnV#z?VsXX%[Ra?0%&~ޢg{+?Q~_žW6=DyW> ݁k @}I\D c@d_m=J~VaQ6k(ܙNW϶fZ/;O1xΒBd=<^ n3*';_qz.ldr?S;\)-_Is:wav4٘<Ѥ]Œ+إ,~^@5v=#dCNl| )HBShy>O֦Bx*\c)Б(=_jfν+gs/S Db0tJI|3Ҫњwa-ayhPClDQKdS:JN/w<_2`q=zTDĢGi\꽠"I1KHdYЪ~ӌt1؝ZV7HfXf זdg稷MJ ̍meP#ٿ̙Y o%EfHaL<%G`)+LHwtY4ny7[dߦh80I֖kPg9X=E9{gaxnKGS11|=TȯҊp '5]g|=6|()D?\<+iE#=?O2F qAB-mR- ޣ{Ʒm8J!V:a83ٹAՔXl[uL|ڮU)VXDWUkĬ:`]rv"`1FG ɥ {MAgGF,y r3;.ĹSLZ(d&-O] UȽWr1k$ސϱF׆ȪtvrN9ٽvy}9ӆ-f,ZhPS+.8"*gP+ml5@%A)R LѝTUD"> ^+KC3VrRdDCKw3fTMF+z$It+굅6OwF1BaZ;2LM '<ߜK6U(=+oAxd 'C_ >z*o^t ѹw4XQ/DU42htpAM=Y,H 6'Ȍif ez~Z3/*" U F n#upaI r{,5iA<8KduH$J>>X^ņPnK'z#V 97mo!LlJ5Hp eZ@1!x֡ N5޻oַM<H=m.јr[ڟ ޜK#Y,X!!B|>Gd`dzB݃ =xW@`Ǒf g%+{(Yzp2;[#b⬈7kmʛ\ʫۼ?"Q{rVS׻:!ٻ_m"tSaaJSy`o0xq7o^/ulj.VPrE )56>1c}| aXYZ9Q&=<{mVJlo.jlD8q^ynOukS/X^,gm%kJkr!fK:shOhTVcŌXBN״q./"ǟlF96 @wIE9 eP:lT |lqz(AP!g!&YCn,- X؜|d>ptnzFz]xͼ9 #u,@]6 hX;ĵ{q݌x0 #ޝ"-K}D@`H:O,sjH\KUw-ZH/#fb׍gz <ñ 3Zys% ՞ ԮAXK#ѫA׃ zpvV.YLnC=oNx9хc+6fF\6{GA Gr+\V5w TՐ35k¾r|4avH= ,Gv?bZNy0pY",JQ7& ? ʬfj.X3sc~ 1hF9 9-DD$/yƆc̶a$SN{Bu%t,  EW>%}E~FOMܶJ`ZԥPqqtXdJqemz͵}X!%ni0@d7^Tߊ5N},VYA1m_uT?dG\9vBc&y{]&@B} aȤCq\@} @oh2.}~M4WiqNr#{ _ M9n;'(ӱ֪0_0hQb 5G例ZF*a,0 ]f*]|[sնPF- 'JU$XcHX2=1p4#fS "?xAjR>ĻO錪DNG0`=(wj&/+}7v&4O7T%13}_쉌 LFGц?Vg KZZYdChXT1QY8 tg}Gx:kV>f'+a?&ķADKOн?y"RL۠O)CBp[VIW)=^oz$*߳H,4m eJf+ k_ȡ8(zbw_>Fה^s00 4M.jH+e$`^ '8@L)waݺL5|'sOB9/O~R=9z!}kS0d?AW Ea-.w׭+Rmm_ UX*]q%xt+^k×F9p$ЊG̜.Ź9Khӯ },]$UߡpoWԫͻd)Rm=N>Y(XHA=.+~<}fY ۈvÀoVEWBp E_ &z9^OQoD]&f*XVE(jҜwyg3٘_UZǶh N.ójtb %;gKɹ}!B:P39ӬiqSKe!)8r[p>)NsgJV!I_TŎ"}FS0DDG]zui֬5.3E}zwq2q*k_>jƺ`<u : Dǣᾼ56;CwMwS2EdQ1D9fjN4k[˭Ѭbs}=k F4%0@VD8kTM1J,MO2wtu4`H(bHAm4gWR%kNʚbF318 ӄO6aQB\WLPkvI50E Nԭ( -^Oo8x_7tx:; H H"vq]R jPx‡' 6r1yiDpK.Z:y V@3W꥓eB&ZRg@Q|!mV$iC#"(nB+"Ma=IB,uX%0$B䗊ėF^^ >0H`:L#wVˢbU36<gpj ariaYbCDҎů.F,/]KvU L 1[q7 oи;chJnWB_sLվ(o[aEXp|@!;NCFG9x޳*2#1.zj wZՐN[ubdA׎4[ezTzVLsC7nh:͛xs5&6CjB0m4j3aw~--)DrhےGb' o*Y1L6Y3Mb=%1 Bskc4%Y-Drؙ-R!I@IJoFv,VbE H/Z ~|}&DZuZ-f^D0Ux e CC#3T@*bA47~_Yos&4eϷBeAB& !gC?}ӧC1)Ĺϯ ٞEɤd[w1t OՀ^;pA%+ytPBA&EwF _&i`1p~[*F0@E2b0&C+D{#S?u@s2s\p-(*ϊgdUlhDH3]TЄSPP] R|-SzXe3Y L-0JAigTPU"2mʂ |4PÃQ0NlQb6CCPmQ,FRi,))u1i?;l7#LJPdϭ^Rݥ#jD@1He PUC\βW&&ІgEk!_{.!s%(~wT'+O4н<9Lq~EĶlYt `@(F(n$F.yfտb,!u4ݶ{|T XǗ"c(TC,0k 4?.]۴tU "4;tZ܍ATܛ3?9L*K.~Vژ 8rQAFXlsQ^mM5wRx<u&sQԞBv%:)\z)E* rG!!XF9)&` L͖ XUa(1+!aA`Bk<I/7]zӝ,&0E?dDDJA o]O09tŊ RLcC0|xۄcZ·N=;BҀ6]($޼<}ԇqk:&\z n D薺1j^+|Y4wh6tg&;,dA l= FD9 0Fư H50E xa62Wn= ^?b| NiL2YcM^fHj m`!m I^w.D߆rS49Q i&o8,q »OmsO78[1 Prm*;.xf=.կUk f B7uC7sL2O]iv, 1h_#pwfъ#,:qj4qsT zOl6N$cN$bbtӔ؟H/҇U>={9x' ?Pž-Biy@&@fWߕ-| & 1Ej0?53*

;,4ZI@?^NZxo;z W-'FBI8@"2JdS>ql>aᦘ4\ f8) 0ҁX.KN&dzm@!+輈i9ooZfrk]W(jvrac&& hZ<+P$ PG=)\| H Ow39/]v6߈HuAz- PVaoWSUeΎC")@!2e/Qcht;<oGsڤԌ )~}!Aӂ OʥBVwBqJ<~_SkybJ,$0ĴR')Xz~B7YHUj,Xjiaj)|ղ[zG?u~~JRU~A[кbfowUWpu\C3^>6t1@*gBHi lI&d_WgLd/\DDL&US҆lT˴/tr2:v9M܇bh _o;׏@JZl|)c'zF* b`5DDƺߘV+@P!v(D;[-tMlaŽ{g^=eϖPCo\[!EnH%bi2d;b,]=F|I :ZtdBnzqQw hh<ݣsl#&i!I3\H{́0/7K^@۰˘uY iE!wrs%Je*[!4d,9ϥP̼59N!Ddvs'it,]hvLBVleYz|~Z&Sȃ.aBA48@EƂ|̆\]_f_1ok]l# ( NFn tp8pЀϽzP"Il5!+#s\~#AXcu /:V~nKT\'n2/8^cjY"k]`[J6"L=PU/`sV(wmF`];x }Dzc c'ΌҋМ (ey0ŗvҙ,Jٺ̐ h+$9͊L*.9Rt-6]n䬌i6;w<\J F.|˨ƉwF ND7qhDtav\́wU :w1=R^X~&UoGQB1X0UN=E(aΖnن:TX^2㚏" q]YLCWR\%ZCH(z@9hCfN3Qqy|f-Dg8(=ILϩg% 8%?v?l C¿IO{RA<_o> .|6zg0^'̑O`.QF ڣ-WkE坃n ˸傘6,~˒:(ݨftp%@ZI`5q@$IzK D$4[,&^< ,APǡWt7E!o (!25 D2œmt||n`%5q 1*^[B)4us#uS:\B)_}N-A/`w`FUN{.s2wvSgCKi%ZabX<7nVH筐sH 7 "@-GTҀv<caj# rG[P:-o{Cq sqeMEc*@)UQC9ư։oq16 KтT%O9Tl~w-}0-k ttHmp2ZƱT1ch+s҈$c&Ht (<8*@IA?Wc@?/ӵ8i ߥ˹XGo1Џ Z3]κP#nUVGw ;H$\<>@ `6h g`A{78txMo*G=Ͱ[s[#m~ߩv]pJExF=m wi),ǡ'b[W XrS #<iXbv)&pPЕd;kYER#u4rH`'Z`5J](d 2ʩr[hQR>W`^Z/ٔ^H ‚ƫ6wP nizvxyss,AxqcStհlQeh64:zmn L8T({ ƏYD`vyyG{Dٵokف }Jdmҷ.@{Cq *ΥSAG/'/w%3.^+v}嘖NVwP W XlYc/d {= 91eUL4)p ppubaJ$Ϯu*syBU!qJy,IFf2C{L:%ĆLe2Z["Yہl qe 598 dD$у.Ӑv$=2I,^ kg cLˇCܰ$g)!2Z*CArNkRr*TT%.h&& -B<04lxUrh9r-x0\>+X8.Պv. 2Rz :$ރ6|Ѱ59٬ x%{sw=qI^ ay&YJɘ _RN[NƗd 2wk =7.$*,}7Zr.T`  (;_*u=.1j;|1/vO0^%-UB,`>pviƧ`&Gic"ä0a-Cgpfē! w!;OieaLxQYTKp[WB. Ƈ=YZѱzb덎si$BSâ0Xؒ!+/$'-,(>@Xc$9ϬU2!CA+Wl$n&"m# aiw!Iaq@!**.hI%5E`+EǣqÒ6z~N]rK]C6!#wdJΩ6:*V+cs[NM7cnfz[@OM Bᒕv'BR۳ /Z({.T\ƔvmH8T5F+ )f+#0}JѺ"}zċ;{s<]u{"1@.^WA5/!w#K[8Ж\P(8r?+dqXe $"A5 cTūA VTŁ=_+ƺ'^ Q%޶||]6Fݑ7]^.j,XSRԱgа\ bN@ 0,Q:EAjdA AxK!:1@:6H%BŘ" baו4}w:Z _&Xd@ ;oDVM֤_3Gā[tӦ5hP^ ~Ӫ?Ne6\X0Zřw6MF$;ƒ괨RAh E\4N vRLyk g؆1Liwڮk;j0ZC]5~ā,GAp.ؒ<&PNIa$~w f$i|g ױARkX֋,)UkbL$*W}Yds?ľm7:PhIJu!Z륢K ax{T&k.F8GtM 2vy/{^{n#@QM;MfXoK+~6.A] Z?o}ݕ)[ER=d#sMbOpy\GWZ#G}Te PNc$~37Wip,"Tx 1bOI sf{|{Oo? :D$Q իy oS(((c^Yg:O ne->8Sʬ)>ؖaC=)環`( Vy)s)NoiσSOPR6l:gcKBٔP8()SX*ajS^qj\[g҇J&=lrIŅTnSpiHB$q¿LNpf.| Z<>Om\`Cu*9k;!H-4J>E4=W+k7n}`J8>jZ? & qQ)s _qƦ&GA* `SUo_cVkF:юtfWiE_ʕ/ j62ռf)k]֎vKq4?JsR-M,k8wFM@f{}hP@!.oqN3 Q溙\# ^PkI;1jaT^焿 ɓ"[ǑȭF'Jo C`_Jh[^eiQ'l,c. DIHy{_O!uհ⸕ji&5&۷6ͷuU4h"LSK2~i[ zLKV2ns#s#0>,a"%$&D Q&Q{! <&j2LCY3 m8{784Y>6h=O-S"Mջ07%ĕ 0TI &*9tsmJ3dvn,טWF9b!'9v:=H9՘xJq_ Tn-Y&e6b;?} ǩ}}t_3nH-)×MLE)im T>ZPjm,~횛l @ |Jg֏11~43kwXb>0c:9ݏ&˼1 QX4?w٭ }LX#"D_Ĩy`d3g.u1/~g o\v{Y ;/Ψ;뇤+@Si}>KqEWC P@2P^dP+M|TuQ^$!|SU$,g'+_͜i6LIZR>7BV[c:PQ *f9 C9>nMvH_ QݝoZr̘1$ʺLAy{&[󘦣S\)z(;;Mm1(mvnCg\"]ܵ|$PM"G=P☀0y2~M,[[kDH}o!7FA5;~Kq}Q;=*y8Bɵq#?_6z޹Iu)1 ":FҼ6mĖQ)SHJg7Uky3/һv0& bӄYՎ8֠hI2a.s0{??tV[N#X7 _;#|{O{*؉򭅷~-8x*λuLQ3FZ&yv.TӉ; .J+)Ypxrf.BJ! ,J$)ZopE R:?yˇ7>DG}hPGz#U: 8Y/g*y{7Ca*Zs74W;:u("I&tDtDzeUɺ8_౮? Gusd^!hF919% N h|'7̞l`\ULVr{iR.3iƅ6r2M>>oyn!DM *M>kiix5*n\h*5n_.!Y|x0: &?{'YFBjKΧ񸂺`44ve#& acC)1ӷ"ZK8}_pA)o'([rO?2~t.! %$Wr'hh˅^TpMaU~{SkLf@Fd ;y1(Qx+zpHn27k"l\RF}<ЖIWX͵[K &ڮ+锯^5E~W4v-ju)9&p\GJwN[Z`wP |޷_Kfde*ѐ0!9QQ_@@.]a2}]~R@v6546í\DuNdf>:16(wRJFsgl!-TG yU|&aT:B*vɒy*nְUvD6Wi?.'+.Vx9ySj<ѹ%cyَҲ~ǫ?zl B1)͈."XMvk](( 1;]1O9>]MJcT BRCT}VoywԢqGҿ*#x5E.JDIB-+\Q88p鰉ew9t-[ݠ«歩\/M~^λkB편qqT=la*Z/N/egݱוoZ4 8ɈAcѳJGj` ؿ__{~ eD#1 Y~VRft ;(Mr +>RטpgeY?뒲gsaK};l:Hbu%fԒ[R`q[q/,[I3J$e"sZCbj|AM:$! )-WWKrtSE9 h%aWl&bϹw+!GϜ`6~2fOSU2 2?I R!m%Jije } gjN/o~ F*YbCD-}5gqUZ֯O}~l&JU_d ^o5zK_\9=QHNIA$-ԙ "rڮ.(,ӝ8ԩ[$#6:g8"g{< `v3iVJ9ALinxe$hjXVO!\eQ!j`k]/~c`Lr%=b_3{̏8fF@wH llj\B''.Գ2}-``) RpPo+iٱv̤FAͦ" K>##H*`niai`ܲ +)YqPnd ݎc񐯄٪R I_}XX-BSL`)>?Oڶa^DI0ࡂ$*n9tW VB"EqTQ{Fc~-hYuҺHfV>:ڲjrt.XϘDaHi?K/ot8b)AԒ472oɓr+`H /9"Fy$L?!g,%}W;zbHc6~gq̓HUc@A5/eXgp_υ^'TR*0 ܃'[RIU'0ӧf-~֒ -X0H 0u>6?[F,.(& ,9 OodPh<+P,JEgΟߣb},ؠ`.V*X|ucF(H`0|KioSn,$"<4ғ&|g9|ލ[15/5%UYsM3kVlpBmYޘ(g4SWMSHYwd]7O& k)i}e*ݞ#,b . $- ̰ yPۉkdd(R:@ ΰ9"y;gNPwy}f W2ye)5#zIҴ SbzI$Lt,2b;~.n@"`i+9*hl{]*?%bJ7O4tN9p];1\6˧Ím)ǸW=rИ FUkٖe&~a`:Rutx^Azt~\H+WՐDI)>:rb:2`)sEJ/nvbjź>TtǏ!&T)*;ʝ1۶Qd`?,mik}تW9(a7D Q):+k9gr=|xEӭLSdE``))JM^I"r;xP)]| 2\Ohvc3dH"hj1\Y_+82Hrĩx*2!_ʷK:^ Q=L(̥kijfC9,D+o=z 3UE~w]Jvv~pĚl?My:O+fA\|bH sS&ab(rƋYS, Em4*ArhPE 9YJ}dza_/?{?l?`gFuD ~WyA%\ULHtM 蚚ʚ V챋kT-gW,U@Xm.e_˵ns#)`"v%\ ~RO@)=\!<?զ݊iB Z;_ZvqYi6~?ҡ؏?4AaB#hw)ɗrg ׯȃr&s\45d]w{փ%!nd4!xD{&vy+Qd.C$.aSU ) ϵx6'Y*?SPͤrE5RMdp#C.Y/٠@Dsvf`|¬wW|,- E#+YwS3Ru3 ɵ$ӯAc oSujhƗg}C HjszB漱5cVsIr 5TS!CMG^1w2Z# ҖH+mla</#.J5L0<0HԪqʦ:Ez~$ԺRGNkp~_PS^k^;?_o) *8|dyd 2g5K ,%Dߏ]LjFa߫5Y3[ V@K!{,͛788rji&gjS&`4oC%Э5 ˭;O0#\@-bD7CIIY<-i H>g/M~Ĩ9;$|Qf! +Q"!lA/9{( a缴 ) ,M\G"GsK.^u~5Zyuj8P*jXtOrt~DЪq<"紅bYgлa[-`] *~+N0Ţ?1f^Ed4g~Gô3ݎ!LnkI$>,pʷ+:/ Xܯe98ݓWJb , z?pTd jJΌeK`y}ֹ.#Q¯ 3M w'_ߠa晪oloM'E]XØ+5U 7Sm\Brp@(D<)8Vce40@nr?+ħ3; )BZߖܠJ)C<@(zSd-, btu*1$>̌–_g>F# >S3מLo[mgޱxSx3nR&ldHѯ %Z: UC2>ǕQ^) comġ2sTfM71!OpK`l]<~%ż5hu寲lV<Х;c)۟)*>Ci0|æRj!5EՕr1evH :‘&k FGhm.k瞌wV:^ؘ* 9e֝@syYS&\WHf~B@P=1{d2‡m<٣ Fr.gh"BQz}H+ 0UKXq4 6%se=0$g)=S~,楥nG=V<0V9K__Ugii~}*,%ߺ,U/rb55>I4n^92m L\SeUڭ"NaPqMyGc"_GX 92N^btԫ- FCk0s"CB EM~Fb%aAjAX7^i!"R&="ݍXN2D>\ݗ}V $/ꒌeWӖ7}LQGX"]=P"D3elF"8tȽ7BHfP};=/\h4DT5u mRB_t_Gʟjezl<,0DI@@IDWl+?Bthل5Qw1!wF-UוZ̟ܙ.MCx'pNy#$fki;L2ac9䊂q3_d4wpc6o{λ^A(fȟc*"/y9Ӻ])5Nȃ8Z)lJG D5mi"ybS4VahS`Kc]g&Nۮ=zj-cw';Z-"l{8(iyL8G 1 @@xHS璘 m->ގ {m9z(a t ?VԀ#UܭīFI35g>s-KyG.?u8_VмDŽQ@`<ýe$J=ګ@'$@'}J쳫4t3yG)T\9(6 E[/59A ,A 9Y\[g*X@du+;οT;3E%PГlԵZђtj05h0y8w;:he}3C0 pÙ Qz Sr`*R*X9B3ޛPl&qTJ ;}gծŷa{k(tJ|wWqK8:i"{+gQkeS*&(LOWy< |I1t&e'(Z?mfOGtqzf,ʗz^9-$`SC ဆ:޺(~/Z9P"+L *Aaޮ,W`iԫ .b~XALW5`"ݱf>{=0NH.!Xcq8iqU'Cٷz^y]BꚢyKLRԌG*uE[e@DS_ijt|97C V@TEPJ>˦o>ۍἅ/5,p @Vn3Jsɗy &'uj]-߃8 vu{:H9g-:/z⬭|K* ozEOI .(,. rz(?MnL0|m4|0+ŠD2t`,vrAV!q)a ?9f`B6MD"Ĥl{_j6oZr3`y9Gd)@:KQێNsE(M:D3|<TgrvI"`mR}ȰrnA2b?{HR@ĮFQJ1( +YїCJȹ4Pj0G.Px1jRSo[t04Ѝҩ͌d[BVmj0}%O/A:AMϊ5HӠPv1=#+8U'd%zЧ|97ɇ6ߑHrs2|Cv2Z'ԾOgק~}d=]uB0^T*nf~Sn[_+ٱ$D mL]4ry/b؏\<~: ٜVf-M6~J{SH3k0wfKp. Z%}kh,Y*B_xz sWOYߓK/Mv%5Awb@X8z; tw4OQjر|G%~2X}Y͛$;]xس̵2IyEi=>Tx|2yogԾ&4!#ƹWH=;v_a.ArpYJT <߭XӾg+,6ӪiQu M+_ve絛kjHa59)&eܾkf}ĝi^"/kAH ;rm0 8w@< /ٞ^l% 1:& ('XiIzY@x_r@`n88 9 dGfFP * @jIPVf/.,sJPEzđiCǔfK0Ѐmz1= pG^8P.P)܏ )ĺ~: ̛"0fA,@_ܛ֒~6?rWi,@zag);ާشL27DLA 7,̄%ğA(A*\c[R4++: 6lK^F8\8c,&d✄ YpEHޘ B:tX3X4,a2=sޥdjR* lCs#ihp%0R;%XS1!" Dd/FEDٻklT*aR" -M(o RLz 3á+ 5p{ <AQ1\{:π!$x>i6sn`s8Â0.HhFcIDH_LPxM eÖR$ɗed؋Ik9 vQk5Ue+>ִ'MaSni.$ #hm1j" qχ02{u{쉵EEroy0 p!~NBxP_DHA BYλP @CK:dnt^cCm3-8@D^|@zn\dq$f6m? WFj"D4nWi\b6AM7.",q{upoz!RgF$b]S$LRy 6ug4|E\kKȉbXaP{1Rʅ8?2G/r0G\|vURY *i# F4VEwqqTHa:@h "eŞAc tezҖMwP %CL GSPQ0`z庑_#AZlh࿛Q!Ptd5@y8)Ѭo͚fwFHP K @ǰi(R, R/R +z \!%`| 2A9t+C5dY!v#rdHJȆ佹b3.wlO\P KD*fn?bc1ЛG`[cg% f!Y{;_Ϡ"rQE%;s"*`V Tܐ5 +ޚV`o/7l1`1I,&Nr tGA+EgKYbĀ YͅRn{n[d(K"?`xݳ.L/τە̒[YAB = Q<*Jt û. ȣ̳*pЃ,0PxĹGC=+ys0mLD  E'V3ؽʎGCNQ8>vdYC_ Oh7y @^PNOR9rEG/\SpX|MôG=s-I0m}o$pf@u68i!Gc`J3H}"4kW_tKŗs|9vc`T*2C}9a 8: n}lj:P:4%ۭ u/H!)WS Q+'^N>NΏ2Rw-(WJa=c GCb^z m-$aaчvrc%կmaLjp؋5x%-n"jC0%QhK FcODHJІJ 2Ffb&NCL2H(@E'kHAqN`6 "p3iJ0`)B{0 ,yM `0v}NJy *@T %,Hh<3ܯeԐiտC.4LFL/L8ՄN :@%b0V腇Q:Q[ˮn2C_N4byN\FT:%ls"D- 4.kURy!4 YmUv~+[p"7 $ qƬ jB4@4\[BJMڵh!q m4ۧ &]ewM܉0fj_UU7GvJс:Gp-pf$8Tu?P|#-DqʮqA{hG1#djwrۄOm?{V'NafGs @vJ9XeibXf%@\w(@"kyE4"ǻ /JQS#+1O>\ ;Qw4=4&;/1ĶPDw[c~.=q'v+|'K*)Ϯ NK qCdDpY΢Hq!]ua.d (dlp(`vnhwA`o/|iUXǽє6i& Y`a B]ROzM -y]+x%\s#`-plj-Rڻ#t ;gT|>٣o|)'Va;k (h#51U1FRs UX=gK9ׁ1+]ۍ*jtj)ù!SC _QVsܡ8.kx埘nxh=ͬo b`t]lKpG%Z[~6+eSl0Qʛ0~-7V {YKdž~6h!́X*5(6Nk;r'(f[ X *V'~ TTܩz:Dr˄R<qjգƢC+x]{N @IA3AsL_ 0wU3w{eZE#(q^hTd9Wt uLl Q;Kx#Iy3.$L+h f ^>5}(f"|NĆ'Zkr`ТMq(te h$IyNv}geQ0 -N 7h ty Tq;FӬkIHӇ>љ&ܫ*/Z7oAup 4/.*0E"*"UJ)T*6Ћˎ^U+NK Wyh3c%Vl6"go/6;0|fղe` k($a0U;[&|bUj~y\z\s0g;˱bJv14]a*"/fqA]a-lwE [i@dwk>EkWkjP`AY-.<Z`9z }_,(Z\RoXxʞHP l GDO,N匑~ !ֶuzq )Cur0Ls/aa vøz3KwGV"mOXƄ.G% A=3VX- a)H_ ~Avl1Q2ƀsGO/PSޡg n@ŠH,#nna#{Oul%e.m0- ]i0?_Ri70Af;řb euvu:u5 {aEz-59lm@ӲtW-X7wÇk ǯB#j{ecu`)L\:Pz ,~9Ygw h32Շ#Yp"=i4=p6v4c\B \:GR$o¬g@郣QI,x. dQȁXk it0{Tz4+&3@I;YpgokՄIRS^]iVvGmNfPAq6EQ.uۯT"VXAhYձxha]&d9"= T((vx68*J^S8`w#8o!U%މڻsVRv=<6@?bf:,䜖0#GKƓ5-UR1?*e;$ED D\M/ h'~IPֆCTCf\ȮUThܯ!@€ (R,]׍0*8eBPP^KTJ\aڣfAȁUPq&VgYv7h8Ex\w}t]kY'CRJiЍHzVCLu69"`BYDHĸm_bA,״ N À<_~uVZ-m}gk@}EtZ|ύXEދoֶ0]S}.n@q hK[-_ug.Қ0]1|zzwoW=^Lwl z.#6flnpZVЏN eq9#҂Nvqf/AG YvҊfI6 RVo]iŽ\ {IW_B-pOIy:A"|GX#.%1M|ԓQQtWm(↰k̃gY &JTb~%%>aB-Sܐ;FOt5/b?;Brף $14g{h;Bc 4ҧ}YجnXB.&_I$ũ`= Z8< jRIdvļTRV1Jzê)3hz=ǪZDr^pHPE5doF/i?fw]ؕ- Dlp )KX"P_ u[s?mOH0 HwM *~Ѩ~g8,_vfaLoIژU11@l@,jl@O1R<ӥ}S!DimQW~hܷ” *rX5gǎ(B:]*3G [Sr>]G/ jеbf>x1J3ґyI]#cT Jvً jޤKqO5nxsOYgԄl5"R~٭o)s H4d.T? d7`Cj24ߏ#WLE(PPPn\rG?QɃ=zaYC*bdJ#ᗭ?nf^$rrGf>9K"D ;HfTEY6^Y|gFfE:YeZm<&[#vF4tZnJL46*RZ9 ES "IcF3!)>l%sEs3b'IBr) ~*Wp¤m*̀L{Dkf>q\0|yo </飄p?g^1n9K1 KRg>!Ƃs:./O ~:v-@!L䰡&S#>bXKU+RG½Pf-z_Ƅ(|UFP gpqn:s$0tR!"<<DZk]IY bǍ'^ο%t5εmϽ2û{ÂՔFŴg(о0vYKj =sF) /N m^UTY;SoB 1@!8of12eP7!)@KMy#g`@:/WIxad-VEvݿ|rR,D):GL[^65MZ.FFFe2niA͐kAAVAm BLczlTUY^aBD$eײN^ӭ=ꑮ8d$X"N&0b %]I g]k%HO|Lx*.Z P*DZ*sAVh  (`3 j'S0lC Kg*M4&䴫+- ]8$xFinvl:I &<^Pʹ+YojO `Ke,=xQ7#gMR,`U4nͧT"29zV&&E a4 bW(JD)iP[5:  BH:n˚!df)9lnHHBV6ȳ8cE{5#VmnOaH"ZNB (Dpnt|>U1a=difLC8H=pU<))vGGI>` jiCGd0^Q|} t+,n'J3XΔJ;mFWCU2.;A "^u;B[$nn7Xj]#Zx7Wovz\7ozSY/ϧEz(;<[=z z I(pxwSi8n ӿi-)&DYLCWܙ2y 6/2rqr ,] HÓ.<ܓ\ZOHBGjYm[%BAC;cI"%@d@mν?0x5oϰ0R_+Ǫ/8'X{X\֫tɸᷦmˮ2.u`Ȏ$bKy@)l{1L:J~$nK4Dž!Y t5/k#vjrr ާ . %䁑$])|$щ,"!5E`@-Z=D%m2W*5*5{+U7C--sUZ vY $׽̀KX=\Q ۢavz-ȼϤT";жozIe”\@85U9o̤·7Ug!tYՅ\D<7Xܛi="&gz[R惗ę>&U_V,㒯WI߰=L#mtFauZtǭ(j*ys'*o KPnz| BN[31lˍ;Yk4<q^SC/Dn]/}ͻ[Scȏ5*yPqMƓ6-=xCܓNtg/(B6E/12%%Mg^<3gr|ss\wQ5G l ѩn5 h4|$2 m Д*T\Cn7]:Nj IAUݶP^\b7@`(B1C2DGɲLQF0zZ}JxcF@¹Cnh(TIBґ&^M9»)-Y&ic9nX I 7:ȴ6xiRެл]6v9fZEEytv}wikѻw;C&C_c]?N'm.aBFr;(Ƙ[ÊY R|> 4,ɜ'͚s| vySڮO eNkk糿dZ8щCid~) Jؗ@:=D8{Tݓ#c X'R뚛[CscH,Gse:w 0aY[~C]FrY_{DRiŶqI11$E,k(y8߲{omm<{pIO6Z7v$]$?= BSQfb^S)#>:&$XK 0fͣk@ōZ{\%&dQO#!SMZ685d ,4ZRi vtp!x`^( S&_$»&F̃)7&4Ͳ4]= knSsx*귫(4C] >%in[F^<@p jqQ =J1#E| (հ[dHm{;;8d!Qx0C0vG<:Gzkf&9ӦE[Qog=iK-@\>\6W۾0@koxuMDdD4hJPӊbi="bΚnOM&P=TY%Uqt(}^aX|Ifb[s:e4ڂa@63M:fSMyɇH"Ъ)M#儥B9vnlykƞu.a\ޜS[=1_;Ri ^n b*s]8;q~{t3(H[Ġ [x|i6M80a, L:rۃ$'3$YMĮ-,Ĺzδ&aV+XvJN0V?Qvv0 g1P"PThwY ڮEJ TF}r!:Zd |{Vq.6w\ ]2wHD6E H!Z˛HÌ&UfTQ5$vAØYgٔqh#y OJ=,w#bQc>׎$Fq |`;eɿ@U+qZwYdžzvh\dg3{A0GGH9{dOdtyB'UR$Śnv|t~Nh[&s'/L[9n\:ʳXKPІ 2vҰ(| DNQ_]djUU鄣p %]ǁӳ,M q#kYmP(=(x.-wf9͝jNMW{9ڽ8gCQkExME Eřķ{Kf(%/:LSr H.{P(Fi.4ko$=$"``x Ą9쬹ѶHٔD8*AP~$[LNdbHt㐰O?7nկ GGITJe"R`f3Xn~^=* dRt{E=rv,Ϫ!wp@qoeh 9ikM<Ӛ9/Qܛ)ruaKR|#L64T k߫^2kLw6z{i SAt;, Y T0EJ4Z1{sSV1Ln{&Ōu OD@!ϝKn "@h֖fFϻjjʶ !J$/7;aʘ;e!DZW.5iZc`&ief)nFK.wuu93CIC,؉vp~sY+(:QcvWmM_Qpho,p(rS&KӼgi:T`"ߌ [s1Ժt):;WuY+[6>o)Yܥs쌂w&ͪX@/Hӗ,n~d]^>]D`+T$1 OJbiRaZ:؝^&67h6ơ h@3Y@Ǧx 09“)Q7+-\@I!xkP0v;,0`Cm6LZAb!2KHe\YwsuѣȒvHOyICA!92F]UË1S+U SO@]_Ƽ-\:%UW.,_Q,;#SCz\P$jtOJj`?XnQ)PKÏC] 9;38׌̂FBX9HDc|q+C#u.p݆;QI{[6GQcx$eUmkNҷ$}/='NG"nP\\a8(ԚLPM}{e߂>-˟Tº#$ӽ.M2r0D"QMC\; 0Cn4-$g61MQ/,.G[ӖzlE_f`b́*tK֧v6^VD'E DQyi*JB'i1g)&eZ<`5X(^hctPwN jYg!V򴚱׍ ux5 c\4,<F'Ld$_Y_ˎ9TcuAJ<}ן|o#mK5Eˇ|{W E: w/f}}J9Ǥfo>dKXT-GBF#@3$(wՅULH-|ed7a햗h] bc>fФա!ɗ6feb$xԆEE5JB(T.^Qa-)m*V>/:*nNAVx܍m8 $H$䌂 E !*,q:m1c6!'O&G$Y ; b 0 [K⛝%#PzJth8PU4dRK H0ř-Oץkt+ClAB>$p%& "i 5=GÏX^V{{0-J*mcw).9Fd<ӹ뽭Hy1ʕcekE0VjA]4j%#wY(aӦ"h-Uvk|l%HxQ~}6WȒ,!2m+'TP+ՌVȍOӮj,*}4$  )䮉ɄZ7~ٷHv(F<ABY&NApHEgE~Ù)_3 x ^NALtFDzQn?ϥjW԰\ϳڞ.,_ eSb/trpKIU %U9Ӌrpq'Vs2VO$(Hɡ,x^e5ȰJa4צZ;sO/Dpvň /[gɲmd8T  nxgPeZ qS^O TXF`^-UiSEm􎊪RLReoτ-zrHR4v\8vrGV`\֋:fUkdY`£G#,zÉM%@f7ѨN|*Eu Fe[t3,*' "uT ~<{[,۟+I DD@WS0Ų]HQ(sm+NIZ#v@Q;-d hBMQ(n~~xȬd_L4aR1V(aBx饹w=P%Rjק* y3E,m-o%l*ݫm:oq2. XgQ1؀E'L gw1s mu:;t 蔦 ەMcPt]> *30EI9̶DdC,GqI~ܕ-͹XjIԈ=7E :` fDP`8mv{礷5c*<5'F1fk`Ӵƪ,1p$ћXWeFfH]JP5$17BiNJ]@Λ-E6H]%KZDBpPA{XlL{DLHt9@'aXTx^+%!Y})+jNrtG纍muA!V{)~Q|FFS]ƛ9,e,yzg:f@&vgC D‘2d{pPgޅŸ7yɯA 5c*)TdLj*7V0b6]ڏ"[!#>ϢHH&c=%ɒ]YErj{w$|WT]дe#/ hvL:]ʽ9v12Ҡ;dnзо )-|.T$d GYLY~O M%f ٱ4,Z&N=ͅD Q9dIg}h 2 -46j]H&ʘЧ.ưqצ F d8ȃb@S\ƒMAKEǧ2 dCg^,m#Y.0.Y%fl'ap6#uo˝I[cZa]T^9;fRf΅{*ENsJ]=H׀,gB-+bBTfsw]h"Y6b}TN[3ZcD肻ǁ1XoT$8968!ڰ *)zȚD@N\L.(sO ΂AtZ`EW 1.EL$IEsV,*we;0 /)͕Aa^v'#2xk#9ȌKU,W*]oemGs\04 ]7tSHA!s&z+!E9z;4)R~f0^ahkG,g( V$KM޾-tŐ9ٗGp&u!t$ sbR>i&RyȪ4 weh/x-Y0C܂(E{V~(7#>e cwh̼>nT٭r fp%]} pxE%0iޞ D+T avmnxp[HVv #ydC0jj`@`!ؽ]p Pʯ*CW(MO4#S'zN@("E u2Ѕ@r38,H趼praxE4Br6=JQ,(T+ !zK"WmI'eW<3WE7ne{׆BpV^> "zчLAFE:y}}oNTW`TvwI$!.&s.D I3Ue""dPuV TAXbmtE||q g%h XOJz0T-/gԲ8Wpa^(.YaC~tywRXLMD=HL.*<c/e%\.k YUI#NJVOzڹHRki/rӺM䨈1)TQFʯJ{H`׸1pOsk-J Yr7KѶ{td8"EU HSɭ F}Sd0Mk%!seNWPCm I44cW$ƌUrqǐ~86iSN~̃ <@.j+ >`¿s֬ea+!ub$f6ھmy2id5%쳷S P)`&IZzn2Õu2H21DS=L̘5׸ EM! L-=M$֙T@t$Z &̓A l^ļ<(粜gw-pf3C:grW㟲"Dt/Tj=$ԱR5?*|V$Ռ4? J푲r=H*(D"#rrTM&Y,Lt`٥'q'T $uTnt3-kp:dg6`tx( 6mCTD':KrqB;f.>0a:V8OC34Ήb1$ E,YeJQvIlU`EkbYԶ9+5wSahըbmZgGcqG@ ;WL`jn}xmme"I6Fb`,"0tWVăzzt4m o'N9J_M>LiDެ JBZVHFnshuN٥H¸b- uUPڵ 8fd$JbX1 .ڸSpyBB=r2u&f:hўsÞߏb)]VGMW`DC6x6]ZgϸmPR1Jw"zo7O5kCЁ.SlH% 0Cז;B j.N"FIDS)b&',:`S-mw1#{f!s)[Љxb~,N6ն ǣ~Z1weeaг;*)ι3D D- 5^p΃tOC 6@(/TϠF',IZQmGI>-}]ϏoMDHЛ[Vہ6+eĨNvG9;k ^ gsMiIn|4tg2wDν|Pǀp`&. YL`]w)!o 켶PY쿁 ^b({ uRGǿF0e%1л^\T޻i7zZ,*U e0}*M d .KW|f6LJnkzD2{"A&ZDAN@Ѽsp^e/j0eEuվ2;ӷN~985 ۂ,{>qճ N9jC 4 /y0l̀t'6 2.쌍lD`e.fGb!tDo[eH٢ks'1+4}h)fkײGKKπ[f[n.޵Ӷλbg @ɍlOzC(@ttZBY] S c褚ZVum>8Ϗ~t<:E4,.6s"5қ\vݡ#ǴUyt˹vNK*L2`PpP @EI%93IL]j/ER"B5:AKĖjAͳE`.Y[NΌ5J[7Cy4ดA% ?ULV ̻RD;oc!1DnYkT@Bc8mi.K;HTV=tr77>3 k/2q]+" 2'h ٫:~T&}p^ı"LIl7yQ2/caIXr^ٶ*_QkPν<0XRdpȇ =cX(Gk ހ >sZtAؿ$`Hᯉ: !Ѥl(5oKkͳ]W#dbғ(Ɇw0zYF̱|AuB,hE " aKu`ȋQ5!k`%Ћӽ8 oW(Da1_yȉL,1VDlqP`=mKرvQNİ/e02{52{ dVPoq%c"H,茓WRbx7xNި:xj\Xic/FqhxgjH+8mUzLY$G<c}qS:a`^130Ns~'ݹiשYAp*- 0H.P'R϶X ,UODp垊Mb[ YGT>5̌ *À&S&u&N*m 1~Z(BS*Yڽ NՄ:ߤ;M -YFd\V:qp9df`npQ;`=4kaařc)>Z=5%0D0wBv&F}f[qnlˆ_K!lT@ ,jpJAX dB@f\I .Cpr7<*qH7Ʃ#n+XSLn/xȨZ_>]:KbM2`0,%]k%xID ,<$0æP= QrgK| vvs]} ׋okSKn ς tցㆪl% a8+ůէPfޱE(@}a,ml=5 D޷`IfI_`nIh^j @ȏ6hk-3-UOZSR K lJgf>B۪30@rurɅ|t,m*)_p&>lK;Ԡ0h90*Z$97. sMGRxL[KEhh!/QGOkmG>nMe ]@%?i )rH^<>uSA:wF5̆̚);ԫ٩T[ i^s HiK!Φt Nu6v>.*n֋>OΣz[$쯫_4G""d`_TuݙbMs\7BCb/BFn-B-Ccq(!@JeoFڝ;ܞF/$P5Vtԅ2}IuFZ!x}WT yӯWWIM b \~/'Ǔ#j귙#|'+["^U߄W[,`Sz6Mbabne&&ɂw/-9Ë86(,Ψ"fִhCM2m2.Xbi25o_ݛ롶oeM4y^ q3ӫMdP!v);\omҽ R!2$D{bP?[k!˖- Ņ32"iI9dbM[彈Táq_*)3uNx4tet/޷Z?K=S$~ KU3<:kd^ VzR+Ҧ}bikL0 kO}VqQv »m0u/ل8dz Z(-ozcפ6 2nw?[2}1n!3@m[[VJ!޾u;zl|#M@©͟`'V1׉d@If_vj.PyT 2,tRkhߛ#Y!,6=Ma=Z,1k,N[]mUTonYEe\akO0dmݏ[ںeeV@CbղF?K'jvd&kejkRsAarCqtU_.}ŶNCo߳VrfPOY( E"Gh[ Xq\cxLB45ҽ들 7- gڸ솞N ]E˚囦ث9ݸn{dsWß񐬲a:*+pGXNqяb$K~FZS՚;bQflh0W#HFbQ YA`5-(Hp(s/o2ٹ $ΜTv0%! CgŽ!.߲VvY胭%_oVP}NQOp[\#|d$D_vypeV ETߘ5s ꉉ|i6ű@]PRdj" s٦ 4,H#։ÀkMYǻtVvʌURVvz_t= l#&sTYt9ਕatˈ[氹,܆d ~|獔RKCFz^I]Jfr( 0Ntet)z8x 6jXU2YÕnPY P!{ ,vcq{.\$z-H=}P=O䊪@EI|׻VCY meٛ qian45,OR~]>=Sg/EN\۴@ #rt6Jw:;'YŃ }WmXi,!{ ݳ5͏^Rs& ǕbJ҂:3BJ~AWs\k^ 8d:ɯ9iy= w ?nS猦l{ eր:nRПbVXA%coxƳ \%,ϼMBo*= 1,bȏ ~HeRyCNj(׌zvtƙmԥ6jVpKB֣vZ$z$5"؋3ЖFz2d ɢ KUP&Ώ[GQa=Mt" Xcuce!M'!gkQ8-MZNllr'EuZItͫm}'rF й1msRDw ӇYUvO%T]ZOw{;LE'pcVRYN Ͳ <6v#"[ِ`(F8l$,. +'a0k{(y0RqYnHߵ>Mpk屛h奯: ]%J֬0$]ʹx7c1;ڡL}Y3 i+Y~ؖ[,hzR7ByFBk5Ոȣ`fڻ~t79&b &4Eΰa$M eޱ+-rEֲ )z-657M&Z|ײ .#GQl;N1UѨ8y4Dug ]R A5!2ci,1;LZ,c8 %i`"F Xt2mJ5S ,5]VK|_ESp*]>H沃 3h5+ Fe&D\j2.ٽRG2'sX'偬Sn Q"zpXba㾏lyYeCRjUR7"ґxVn&Yw684f8؛݄62aEF1m(]%EJ ҏh> faX&L`Lf5()]kOe~\gۯV ٗUH4B "RBJLf%}3Sf\1ՓKt@`ьX'<6 ےcA L"oR\K #ԑyݍGɎ!$1;XHxv:l~%hI/c^#K31,ʴeA仺$ahiNФ'XX}9cp.-~j,.lʎR> 3CXHtll#5c×QV(:@nwrAٲQǹ<+B4xrLB(z ]]%EfG"Zb/6G91J/͑HpxAѹMa9:SN|/2@Ng( O/馧?Ok'ӮplsLB'-0 i8hڨ8=6J rl<.v?G53Is6}1鞀m1*(R;fl<\&eˊݎKl yQuVaI615מkH P[ui=x xj!c$tگ9Bi=6n${";!IaH`ͯ&갑徺ˏJa?m7W_ ᅩΪxĖn1d=&E-%V+ܻ,,w;[D@J}̡,KU hղANGP=:_~WJq9+[W' >Ȉ@Z\gl&-qCt9_ -}6)LFvIs,pIF"'yTB~\Mt KeXsbb)Cؗ\:c\ B(AzފD*& z-w0F({M#)1{scz AiC:lҞP#aO|bNd8QQ0W_roXw: ڦ'_]a(E7fg晒"$3r= os5.yAšޓk3)HJ2Z[ ΞK6gΖt#GCenr圧ٸsfY}[" f¤5͈S0$taD `cBl ڋl5}OF:i7׋؟۴|ޯ;`Ͻ 5- ,̹"  V۝ &`|eel 3"P'a;x5t[(I`ܙs &S vVji9fnOޭH(aiI̾xn"Kh9㗗e@ƕptȏ 靤<-vXyMԀ႔_0N%ݳƜ} NK(Cգ&WR,Y2Jœ$и';~t |?CC-b"옵vEp˭EBp3hఐnB7:%ֆ X! t(@e$#Ԙ!47*g2VnCN Gi|*|Ebɱwܮ[%ъ1fМ4$ @Л+̡@G7,FB!%ZJ=k8酅|糂44pp|,F ab_*kv(05BLkJ ʉDHV!v2!50!PiYQ >A QHq!ș 6L`%:֙?*LC'&qPoJEєC$2fi|=C  !iֳ,Ϡ-I p n6su 6$ a%p-ClY !L)2Р$!X]I7L!Aa`Oe2IeQ›@RNh!0I<$6֧9jB 6Hz2Bima4ad;Wko*LP|dNddd -&fH 7)jIJd3xLH S!0!!<"db `dO2zl3RH6ZIsЙ 0Ru C2Lx@?s%߱0@,Wb 0B  %0P^Y5TDWT{D)MqH7?"uШ8! *RxyD>Z[vXJG)Oꝝ?!C X "Đ!VGz=׳GawcZX`H9]jCq-چ&H5ŀ@ ĀE*,ճ D"oՆE,S NNEЊWA2@ =95 >o/_D1#\Fʌ^o+Ū2f |f~v6[asUk鶸T]8h/66 r#F{9si̓Nܔ pr|_BI$ !}𿿌_);a@!W1ѿby˾?t! ^U.f긬nOse$/?'^q[-W޾ى{$$>+B[>F߿oYsB_В-@hU_z599~\ Iy.;w\ e@Ki4_ᤸOCϋa$11 Gրgi! VXW_JGBrlXx4 B:lI%t/m?; ֒HHS({=4R4?_Z;[|6 @iGG߿;8I#)b4 I -=/eY0BҵE[Um߫_C` ^! C4Y__KbZ]sGki76U IiZGh4\lؒA^{ ʹ$oNGuwଯ[uU B@_sj$w;i!:j1|ıga $`K~sJ}t$H=`>K}w{; X$mH`[?yO9z !kX63[w9?麟Sy}t*_Wh6u$ <>O/p{[$3b?Gh𐐖GEYGhK{vl*j:~^Ht||vs_si q5xvz 6_mAoc5 8* Q1rA`,t;AT?eSZّĶeP\6$-K<<߳wM4WArC@g͌mz/)5G܎vD$OÄt $o{3}G{/ۃSeyG{kŵnhB\AwL{hI@.f?8ZƴH> 3}7Wli?_{6`kW~TB!#ۻB0_gO}BA>;H@;~MB2 >#cV|@ e;k0 ̥.\pc8=G.7,D1{!ɻ8M^@+!Ӳx}G>'cHڟx;I@#$hvJ7׃wj6iX?I!yf}_: >D*0F_;w9~G)-4 #!WWFp! 4kD^M6GFą@W2Hɴ٥k$#` hKwm(~r!xv=}>bH~g-k=7~ _*I Luw>~Os=MĀ3XO.Y5N!weX;7D!h> sF^0@ hR}6F_\R$}_ҭ6!hOеI<7_w]@9 fgpzGt}\p'U?\>6_Մ WZEiFOc$uH]gv/]UGH=7s*"BXHϮpO.?}U$$Z5=#BH}"hB|gJ\x&_ʄ)L9į>mBbF# 8$rFG[HQ ϥnSSo`^#d("q^Sy?ԀVX#Pu uYmd` ]+@u; 7׻o6$bӄh'dIⰝEG@<9GlY 0۷{ǚ}\ 4|/{.}gY'][eMjur:n?7  h_Y4{?sA8.fç@ >6yYF #+"B ڴ6RWZkB_i0 rmv[sʑш@Ft$\fp!2x{΋ <ӝq0!a;1}_lMM gq09l?ҡ4_C;^66Kr͇Ip,B^cx_Ѡ 0{ctܵUi:/sՠ\hF[S?P@ OE>,jOc ?:)?wi4}XІ%oͭh|np75G7Mz}-oUFG0ՙ U_o GBoUc[rZ @/-g1bN}@ݧjK)W_tuQ?τ5Z0z=m8t ]ٽc שF\ jq6v,b pFL*M^Tf-[Cs$Ὕ?^^ڗߑ_&1sly5:nq/'[89{h@B!G\إ~- Ax@X,-5\ $sɑ)vy_*_jҘFDpnI̬T "u9}}Э>>?*+b34K؛8FG@dX2f*srZ>y*'ңtW> *&2Ks=s)uΫzJ?q^De=w" H@.a˗o-^Uf`vX袈9 r +!M Aj4(9V_f10Kc}+Y{65Ψn?DW F O>0j[' F:(os}Gy!`^W`TU jɅ$L3GM]h^vNTAue~A[]~~4 /;o_e[IjBx~f|w2z<ܪ #l$S/~?8i<11eىx Ja 93%zԣC|=0DqA{8YdzmZFЖ$"Z*!v %< j^iQLc}L߁QԄNT0<#b{ \c՚Ɉ_>5tA B%(|q2yڭ{fܱ<&k YP˜U eJ, dުQWe=IC-ta]@ڳɅ{OfUsoW[BZp=Ð>n=}?b*&0sXwYb ڌ*M?mӭ{'ʾ*7 p~e%`U =\҄p)I犇WIYZkqju$Zb4+FޙqCKm]R0Z@FzW@p@ e$; (5PB// _Os+GU5E%Eod"ͽ踥&&=B㪢"J;~6sE3lkL4W Ïi`΂RzWÇ٭EMA/n;YOK8󧇀 Ma - ^uQYHI @! Rl7oH!6Rhk}~pRD:/u\rEg7O+u$\6 70m$1B&im^$- i $'B@C4S&L%ҮRI! ! ! @0l$$$dc&[h0@4M-XAI570$+JHhɿflMhc a! )-!$ hS#ē$0ff CZff[ a!\RHBcf54I$ i0{@!UR e:T,~'d0I?S3jMs?:|o< ڢ?iGyE3!u 'ƫbt:9l62@7;ڋ'ɔfr(}ꢬ8@g &FtnzofnmybpX-/0 ,QN;6H)r},MM2HIIՕh @)HHHC&)HHܒ@ N@a ٺe!uAI*-Ƭ jAδBlU@lɑd#S&H$GRh%2$6$֔XnsdC ii$I@s&[n@I3d62k2BHH ,d˜, CF@ (4eߡ_ᝀRM T$"KVCLI@$ԅ$Ԇ-%8Kʤ.IǕ$$\ N65]fc I9I3҉KS!C*mfMRHMb*$IjaPÒHBR@A\ګFo@3I fI B-ܒHA@,4"lU0H7M)Fߥbz9:M'ioc<$\aLF[1!a<Hu͔H=5 B Y\$&@$H)),I yPaU4ҰI! 4IեjDI0uYuL ]IMD2P۶ ;I nε4p˜@`dԛIzBd[+ @5l5(vSJfhCfړ&kM!6d[@+mN0 6@֓ )"` ,U&4W`` M$ʙʬ!lIy [I R*o4 7Ց$#Jd\ YDl^@&72ne+!!8 BHoBJ8=)  L%u@h3]d,U!ÞKZ2fT*鋓c &XnϬ۠繓^$P)kmdRLDci[8ջ"f&VLaLS[!l$ u$-$ ) pV$ 6HLHH@I$nP4[5.<#5$`pfeȅ`+ -#)l I7QsHZ)"PBuPXp)m!2C}:hHR $ Y d0 d2l9Z)hۧ7bT/;p u }ݓ]"p\okMKAʁ. (L|D(_eKd?c5TN!kDWq0E 6Kf XüF+B4T H)ECH,!I"BXB,@'FU$>鶊HlhCɎ_gM\X 6- sqelmR]-7u0dh ] `^Ɖr۲LAmjXyά4\;[w];A:-`޷̵ /kF+ .Ll(Ŵht.SҐr>~ݱȚm~UFgu֏g=JR#5U;E{߲ZN#m4r(w$!%F9vPx&k׏8=$zkR4r36 3`BSS o4L8e]@C8ԩ8gN 0H ['RkߺzeI>2 m+v[RkQlmw)u샟FQ!}R+Z‚!Tan6[iK?ʂ6Q=oI\4ׂ=qlfy6C=y$nu_P/i鴒*! !Xʹ$ iò8 Cn@/Þ39]BOv5V0&hD1]c2ȏ^UY =rmO.m-am)^:dl6 ww/8nd) nT$iM5iN-zIDXok,նkiZ\{z6cx20y.SI,o_ BM>̬Ꝭ]L*1Wя63^@%zhEܫV 2y1VnQD6 qiH'ih9sX(jպ2 ݭ&|ܶ]xᦃ|'fbqlvVKjt6{M{GU ,10H`o#XlB-߫9'æwN!As! 9v᜻.xS:yfdYO+vűot9NLNO7:輝vt ߯,%a!(N\#&٣V".,gguwh`êɐRVٺwCSJmoFb1%)2C.W(fZh1YNnH-<,eMv$y}9_ԴUpI1[8Qn'vAAAAWϣ&h+ct3:N]N$X+^W@bBY, 01跬m!vrn]?OKdٰ)AJ*I\Ħ𗟙_㷦ӏ+Lymc gwL%:F)@)@4°JP[)L,p͌)+Vέ6FGI [ `̱ٝ:erZn-w>(D62v,.;)AA@)BJQZyh+C}}' ^thٝ;!7s9PPRV S%tqn1]lHHc+ wI'r$&$ǴǽTgK*(fgaӓdB@, $%J q*AgKuo;ފ1@d;6 ob'BC̒<!ڲIBx8dN6FBd$ d-$ wl DtXwI$ Z@+ cnv\f9nZ;YSNF+((J l%B5pчPKDmq%"ܽfT%f5\"&:P1h)kͽܟ-^+yCȨu^yo7C*02\nŘ\,GϣSl<JP%XT‡I^J Tuvm8[*BՋY2M+w7/'0ՂFB9 1&JC΄ ܛƾg7uCu?6[s_  /1|].g[垞7:/6[txmf;o2rmx2n u۝84۵l~XiD1! BbyNl𴅥eL(y`[ͪ.#a:譼ydL`Thq9opZŧu푖|T%F G7 cv\D>2P+![BCfF-jWoRЈdؑK`Uj/34D cjjfob8r嫚qϗxD:+-pa:jQR>h!Xzso۶gn?ۗ.e\ί?YlJ=7Prxk8:Ufv1%v\F +m`0g`\4[y*tZIC]Hh.ܯ 츃ȶazcuI]سs)vh'b ճ(]4m1do~6_/1sIi EwD~nqŠ]s͋%Wb unfKsJm۷_a O$.~X5p<L0YͨH@Y `'h Ԏ wvdank4EA&"HHyob,wE;ƹf=4lПiO-Y[m6/cs(,n\!>ط9ai|k]ɽs\fKr Ki FܹJPJ `P|[otm.^ݍlz+GO'jiBDau 쮖Ljiua!ζ11uAk Ě@kt'[(~0mypg)+=a^od|9q>k)jW.znԈ8Tr)hE?,P"^c蓠Y4ͧK=Q!|W7c:W>a}KzA{KKg|]`䉢MDn3zOg2/?j47_Ծsq|7? ?oцb%U#)T~:And!V _0?tybp[2*DVmkxZ-7ʊa~?@K(VbŰyq .{0~y̡xr-^Cur~ur<@22 UjTSNqFDJA]8tex1d! 񖇷1Qh/hx|Z!J5Ŋ_msn h 23GMiPDH/kJ9qcg6-\D\(5[+_)B0 *;S #^tղ|/GW'{paYDZ(ڪMDȹ$IBr0iz~@yDQd?AjV@A-]<ɿ[ S"K!˸]0ڭ8Cj˚3fmט:68!(oXȂ"Ȧ#S.CujوriY,5_ļV^\`47s /,H2$(`Y)H6P>$C`nq/avІbVA9 ; D{ׇDdӣsrp{[H|+p\a520ukƚ/8uH4Wq~?QRVsTOo%SizY.Q|f ]c]ņF& a>*1[6gvq+_>Ùƭ3\ wzk"p\V?W=Aϵ\r(KOeზL(("lÜГI )+sTacef0lk=Cl/G?KCdFr׭!RFK5Oߜ%@JS%2x5tkU" `B-Xaf` ӖݪJUtvL!l +qp0-k:eVI!3|@ Q'SYP @20fWFMH%qC+tKpTǙz.ݿVCY9=o[ʰʕ5~_uiCY~zm.˯[B}w\VO7N,2</*i1b \RYઁ?ʪҭm r^/?88gfPLvG' _)Z~fkE_ySuF~H`xH(r6i>ihñ}v k5G57d޳ !o(y"~M>j=̟Jvk{{ q&MϜѵŭI͓r+k=~7.kQblx v6^n~oȺL^n[m5gw~Kݵ{2܍3=/ڏ{d0o\>+A}NXqcfȘ!)05ppIglO9Hͻ]+vُFN#AD2>SځNZ15[5uOAF1}or_6D _)~/c~gbt0G'_ΫKS7'+ rȏ&> $g4pG_GC|cxe 1Tˋ[_|'μ{myi_^08&,3^Rv'fc}pBc?t[[~fx°g19b?_G7Зooعag{uoN/G=u<ןáBpԔ3^UlСMU߫tw޿#M1V wݎWoZ.2&9{@!BY]"zeњA{9uر|}Q7Pʌ2Ҟ z?Kx| mifnbq+-H׋m|>O|wUZw|]Vu|.[-Wfr~[Nv>sy>kTH;Nq9 RRiIe +tX:oshpzd.?>FLO:eS۾C|l2+@B(CdIIL"II; ?TO:alkwb*/*֕^z N4!#CgV10Hya+XySbLrI`" Q@2TҪ `ѧuƧ?+3c m+{KИL؁ wE]jw/fm\ cOбZH`[-YC'(";X^N?ӓ0#CR,ȡfQsДIwY^p9QХ@S ETZF<}ZY f.L󂬊_ߙiN7ced*UxH-[5l8VW%b>>S"viՖ8un ("Z͖68#(gCy.4۫Κ¬ P{imwuj{!#C00=)Ezȡ =$ A7*!52L̓$0 o@M/K<5AZa0V-O[ ZRslvmc?,c89ܿ#ZP 6xh`R 4`naS]U9R*UAMXuWDbiRQ[HiY.PڡM_ )bzw$0dO4Tt++yy7 VS;?{zm20P/ 7@ԄGPRvO%) rdh@H<ϴtYC_ pl85_6' Y$=32Q, 1-ZvJND a:ola]iG~HQ/K#کj-)680Q=u]T,cC #ޮ#XPI"S^j?>ҙv0KH(!@8Sr6nqhOdD= LS M&bǷG_O%w|$L \J9^сE|o Matkׇ zm;O?fgB`tRP5e|MN,L+( @ZM1쾂b7:Q<); ;03إdZU='>sPHȯ>I3'Z"9 y^|EAj(C: d.' L!5[ݟYG/zp[h\+"Dbؾ9I %cîZ4mlrd$YcbI$ ׽:]j:g4ztA8ߊwR1.X@[VӴ)41bդ*MA$3kVMO<ٺ5&բ?\}X5|!&iG%ᶮU"+)#8DQb@E D5.{"#TJt*\&]a B&:E" ט8=raۓ/8  ۝r67̉Z YRY3 ;dZ8!us.uo6P[XEs Has9 uޥj캳ў`f% ݫJtJ- :R xqH_`߼Z#O #R;no=wiX5O\(zHltZvr>;ګSQG gߙܟtJ ("7Wme;/K{ 1620%FPU0b{-V ?=VSPNFj>¤N, K`[A{:n!8_~:rZVE/AM(~luafBw޲x9"lp(krD;*]FbS:Crz;HF"PTKE@ *&$=P&Ԅb$P]ުZfHJS(ukgfx pljA%wٿjH>ɢЄ;ܑ V2w|?~bOtR[=OJ[O% -͈9mP@t0K5wӄ6'-k,|0n~cRSi8[ьbR.//D@C?jK%YdCLj TSVj_޻d6+.|g0wLV>#M"_<.PtV,ړ0@A:YJH*/,'H$1d8] eC˾CD3E@Dy\i"LEA՞KAn=IN>s`#[yuR_wiWlv_-\2$Ϻ>ZʜA7 98nx 8qߦPXJb?ӰЈZ7yOڵMez\} ~`#o@Z$ L7TB{ݓH-֢ErB Y/V{|?vVyK})X VTL:_ك1)G Gנݴg|RWZ0"vWx>eƣG" 9֞ROfm8UпaPb CxH ~BA$ OٮS+xp"pADzP(?"O͕D? ޓ5Ap&D憔Q 8ĝ0P 6gRGjZI粯Jj 9̄ōr5ԃ„)LRMQE OP8`8X*ĊZTibbš*H)UDRR((PHd?vaxOTjP#APHL([ PJ"#"VA2(*d\G?-.0C{J*w _- 't;Q^_?96A+l1}-ō S7b2Z2σd khrѷa5Q[!h-7CCDn~}/>0 B7]yH۴OT4x[=Tz d|]St{/Y5h^>nbT7k흿fyDٛIBlEr}B;N"U)E+ UeWCp1v](,#E{.Fa6^!W8OJ+ES+w7t_$lβx,ڈo5e+!l:wmfcH?ՐgoO1kEd,w:\r8/ŽダZMBdpMZkKs}Wv~fRjgIxQhka`nv=hqe`3ٖb9c*EVc7<} 9\q3u|'x6ԗo{]^Z*hMw_)[OO%'pv<ƛy!D>ƪ'I1AAV@XBxfwLC$REb6{o[%ǔG֫aVMRRA˴KB=ll/5Ya t"Ml|a^z I4^0H? @-Rxa |D7O`KUBZ"@CO @d=M%Wѷ-n2b:/یv9ܾ1h굞{Z|d&Fg(?.G߫jvz,/ԩ1iwO}]j!#O%@1]?!:;}6oV^P l6APeЁEUU5T/Uog;qAD[Ymf߭-M8 vxl>/yușüzu>@MW24!8xhq껖8SU y|fa]V)j~z d._դ%/ɃHtRB [{BBmطs@>iD,?Y(TRR0`IΠw %0/8^KȇUi#,ro +pp4Wvq?3/ځa:^Hhw?d\78MRo7y=,|W%b]nUV%W59#esn[Էq\7^OFmol\=ݛq e?l6#:'啕v3,2*F) Ӱosgg*YhW&o4 }ϭ8U.)%gW>{cݱo=tX.z}xKqY\\&KJ. &[19 +|eaY .W*[wZo{t +GC86U.GSk&)q]+TW 䀰Qk<"(6ZښSs"ttk ƉӈV6c #b_e[V }%^Mk n*z6 q7B7;eI~}>sc>[qy⚺_y*?g~c 鷗vغ\Vٿga9V'y \?%#ID T(RP D"Q)" {٫Q}V/Tg`cxXGUEhvUE}oԱUQuBUUWOWH䬱'qv| blNY>w9 V0{,<1ʰ@$% _Il)2TCA-z/[^~Uo}a:8IkKJ&ʦB`IJ^Sy=R)c{ĦE_1K 0E"O{(.̒dJ/}T^%AJ3٘ȩ]򤫴|*oа7.k^~ṲlFapB~f W#䭌0W-&%dw{98 M" (^CeE3(bQ~ML-HTПG9c6ˊj_XܗU-ÁY?Y}vtjbstYgb:iJ_.\,5G3uT1i&0,aNaE1g`k/]oAc 62_t_U9Hx53i7x+U/(3?H֭[[͹v߿m"antF:CUg>?wZ??w_esGoM3þr|[5lZd.'K;^]B9~5 ٭-om d>i!H!>#P=I?ZB^vaCx 0hH;@yDT7L~@Q $E L>;?5YuBD hHZB>S@`R<{ T 5!!4|Fbm`% \GA#<&֏ow]⯛S.rbj6'@>BY DykH?),E8pM|F ~OZS]x4~m6vϡ`T,Yi\6Tr1?TLL6-=Ղ(^˞'f>+'q%6ČN内4x@O^Yif /VA4!o^C >W0"d%@]_?1,:j9dXޣP` D~ԹV}9"ŤQ[o3B  f"E-NKDQ4"Z!eGGnTդ7j[X|+Q{Et ,`1zQC ,,Àat>zu #.XikYO¿f1E_Ɠ\^|jVYc0_^Akl8?Vs)nF.!;[fn>~,rA{ˣ}0A2(ib*-Ouyezwwſ;l3s]:]ʵ8i\/ bR*y*L3[tzZkJCU{Y>]iUtmbo^*ٵ$ _=2Vu7?™`|%I!r|X@ЃlyH;$UD{<Ju-#HI lL0@0ma%%!$D$:`d I$H(!# I%m$#"P.1[N`0 ,Q]2rVCWur7j{/vKvK6A/rw2vKzԸv괇r3l3Т#L.šK-?XÉr-Q2TV5cJ!XV|ǩ!+Dsp "X+!6 5ȯvg0R-"(Mj- B%A 3Y(G!K3q9`lɉ=wmo+̃3;jbt3<>6RvצnWLGd3j='|rv f?Z4CE>sNb>t8 מ2w/ UF[cv\)'["37sĸn@n끰8e>2}$s4s[Q5m7H q޽3 3LDs.T` IN^ `\>P$UV"Ǭ5Y*`ÊU@2 }РD-p8bBzgY1UVI`` H!c${X`ČPzV u!1~~V<_?yΩU Gv9 R&zLI3,M5`y8qRADw̙NU\&a.k;gGU`*]QYT}:*+b $R6 W *C0# Gd!ՂlG.g<8!))gIwa.~'Q#1Xxd>촹b <}OsC yv*5oMznw~owV2H4;뮿zw$1%k?| yq#WSd+7(=.8@,$UK n!4'$|m,$'7SH $c#8l: 1;ڱyLNLw4+QV&(C.? w9J-)y2E-!朦btJ.`_[Sj*50_sQc#W.K釆=,q<+P%șa:(ZYT.WcsL5TYWe2=Ҭ0IYF'y"|':aуHoHRiSEf݃^iRT!`=,U0U9M' ~L E(h2ҎAVk[K=OkC[uhI??Fz'ip{HnFg! -n3ೊ#glտߞό{f{b۩wEE\}\ت)˩;NOb]mde3:߫jYy?ө-$$4S6XZc*)О߽~~`ڒBlzo ;~_Uz)TJ_se>4(]W3UfRTKl H\ 2&e0?BB)  HE'H0hBp [ N:HDL'2I~SByP H$FN١$rNфc!PUJa d{rGA_H&t #e#fEC.3S9%ulĵ#\t-# Q'zES:zMaNJ} X;D6Sxg\Sx)كogQL׌>DKɍ޼t=J<rۿfs0su;85!$X_ZrQmd?wv=TJG{LaߞHzjcc3kz}vr f1Q/ӵV0>@|XӋbOOzrTFI le]켿r; AX K2 X#6bmV (,a/+TYrW pB&~ԁј<b\ GzxPxH:-S*FT&!V^ Ys4Iޮ".e0Ȝ{WM%CfE#0 k 0(cy+ Vwks\w'YǨ,\{;$a<o-<:NԲRLxDM4H d`,!)HE ?1Y$9 @4I$M0$25 d?q CLBaRͧhSɬqK]Ѻ*4Sl(c,]^vaP@tylr}#-}jZb?ec 6JN $z yi5fļdb-,K(]Vb1@s <"(% .NZd,LcL7Z:brjz~w |vOʒMJe߿I85Y竭|u2_3eKg$O{c^ ^-&EG!HHMވ+P>X4Iw{&@B$$\ĥ@؛?0y2n2+Z,;*g`C-t ,Sc W&沾^ob}g:q 9ƏxN 7ʖ۽[q1AD1^1!z'BGꐒI% .[~ %.AKI%a ~(x>&rWv9\e嵢s{p|N-LZ&.✍^ `O^0x>XxE|rANj=yؘQQU`C<.(q9 v RDM[Fs~'9襊j |ZNpdB!'Nuu~~+R{;W%=q]˵Z|oZEzS7}cMLdf+UV1N'??4S͕~i% .gd/v/'>2aZjUEUgaaM:$)v7ϙbMllV#^)P[UDJ05NK*@dX+ccPCDvoL}S]}v8R0~"`m++: FGqπsF ϛEʩXqWQGk',>D܎Ɂ6@ EHHfBH(`$eDSOO=t*R0YmeX}\EҊv4I- 2H900N(| v-.~S^G1m޻,>߭C!q;C;X-n {1'2ү=JP_-C8&R#]࡜7l\UJ3l@ba;h9>%FhloXĦxY0[_~1vGub47R,rtR  B@֪,AM!i=K;$! 3E?{׎Œ"*x5=W7bH׆`8Xޓ%'?ksI:Ze` #k%I~!蠇(q ܎`饎kx[]ɚ'L!x,[1Dі;;0;y ; > v &0}d*+M-@.a( AQxI]~f[$>J|bvVL;lV[9eLƄĂ4x "TR}VJYG Jh=I%%bП~D'Z|@t߃ыd[Ot댈`}Ŗy~;hHO`L! 0 Đv!8~@H B@ (DM<2FÁ% ĉ3{7u_;qT}+E)mÕf_ l9ק-|4K,+R -]z dBVkT4*,}f75ĵ3:C4+'d;Bld \\%%2d`E> a!!$ $'a! !  HbI$CRH,02!)D .ϻK*k[>=W.H-Di$P)Py=;ğ⏏ɸmШq?ackB>V ŀ,(moSʜcA)Oͯ!4Ly_ L-]Ay$v)/ ".h[iךKT͂r{<zdaUq Ulۊ%$wAyL ZoHUbGƿy /[0Ccߜ^6gZX*@H"Ab{\CZ!@?i ƕ6ÿ1,A TG{kf:M iJ.!˹~ A\>2+joVlj'w}SqcEKDb8v%~Q!HBF}(σҬK3O rѮ<YǸ.7 shudwxٺ ~ퟂ% G~f7Vl;gCp{[s}aF46^w2_1ҼF Pgs3T xOc;hAۏ1?첄`^2;nyFV&quclH#~yc |eNkvGO?m>F0@%,8 dzzx}礏~tT܌@H.6J')K %ǕDDD p&;NL|1c(Z9e%NIUw-dRŽ<NGGr񐚫&40mCI X#*Yƍ1?NT'ܩcp |֍rƿ^$. kOUo\8(]w nR>kkK"sO&MoNXGY\3C9Z@X7Tu:d- 拖9&]C +U:R-CoZv"GTAD h;#s~/eO^9Vc'AكvB`vU4p P@qBS kWC*|Nn>r:4`7r@rr@ L $h]r5Z[DЧ|*|`P(Kșˡ{M[Uh _ ;߼Ր5R0|o` 5[D-,>_1rvG!" qȬH2@OŦek.fQŚ2 }bTP0Q  mHjaрpPvNNZاt2Blrm/ R HḮn*rG-8ޯC}eNOmLbm1O}3 ZP yD.vr2Dw8xq6A1X ~@\&Ȯ|!JP{~8`⍾/Aݗiw/Y`z?ACLHD(0p;4Ć' a뼳Q3ASZ讛mN p 7Gu,EMKOԟ([)ŕB2>0|{|4B!K/Ȁό\۝0?yd}Yb@A#CEc:}KSoD#LJ7m~]ʸYUޓ$)ţL1t;dOew|ĘFmiؗiIlX<aSAývŴtP|vO:NQ8+dݨd1sciP틿rGPQ`CUS="0PwV[#x$oKܮ-:#_ֻϦwdkiZma窭!wW?uM'[q}Mr "$ 6@-(`bL;[G1[ 7P ԝ2ߓC-mF"}[ќ?NiI*ˏ$OVARoǫG_v T|$͂hUV~84E(JO87Ck4r1Ԁ0 >b7R6aBX;YxtÞC+sSBG"$z9meK$|# I ~6u/|RzbwkK23`AJPr*n{" f->ZґE !$sD2}hyᗘLyɓ\GG(&cC4{9{dϺzZƢx8{CX̌b(42.[SyK#CIMh4eR:gS.V8G}]FSK/*B*[ ͵!vj[}2';Bzr>_ʏA67 fнU" `b |Hw3;|x@V(Os3.|+v(=4@E J`JgNZ>_SsSY)lWD/*%8+(Q2Z$h]bpnw'sHQQwKcvt}db6&El8Rֶ1k 7\/N Κ/զ Cx+^լ0F 8ʋfTf8n?wa#}LJ9_-3󖕾5̽o+|PP$~*:1U?2ŏ.jjL !:)&.r[ԃkxc罻Q6g1(krVWڋ]O^G=V(K%xqJ2"a3~GWS"H"QWom. uhVQGG< 1ϲM$P>\W%n)kkhS-ڛD=V0ԣ}-JmΙuZmښ#= E4`GM8/bɚA. 4ACCnTPdOJ B[6A\rz2X^[R̨Af"DfN,BVS( ض7<;>c`Nޓs9\ϻ;4#oȿU}|flDٺT"r ?jfa w{zSJL~ދImv9L9\[hAĮP &2whW s_wË+Rܭ%%JœˊtWnAv{cm>o/ Yi"P$ H6&YV(I,zKUV>3o_6x6֏ Ckmq 2[Egi/Ǝ\D+gRߣR9yz:[TZgR<Kgtq1Z k$nG?H1 CG:]-\Ō1 Hc)%=;IoIFsmQjY|58\ &41ÚU=ዸB@UA"*9`W霺UWaǮO_u9Ga aOΖR2C`o%;t6FB-"˻r}qjF^ Iu;GH֚J3Xz̰f>>}ߏ`4fr:{yj.|\s۽ewfۚB"jH'AE&n*pŗ̋7VR`\\17Iʻ'F *g cRsb6z^@_:w):{db  *fZ>|wfNRۍT ='omz=eXv`0>0?(|;lf%nwῷxխG\/bvؚI 'a,MD4en7Y gSH \LY/B|rkUC5t̳e1\oS?A>6&XY.f0:{o9x^AݦO z%ZiSHRڨS˻nz]g=7|ʠ`!/.Rn@$$ޑÃ̮_f5nrIwtj@vB4[?a CK},4}S3pDmTc*Sf%P{ yAĝ|m)l  t~ V9GmQr@*|y)ةnԕ(Ļ*YZҋ!R,$[|,@@;UnT ѺK W> 9EJ\q7 yJؕ붷@CS3+s;%im[mN")7:kVFRnu9Z)+Ȃ0N >5 Di4i`]dĦQ锼|)9RV|S)6C/qCxoV3sWdRI# bR`B25a!DJ8Cm-$"_LG |NSY2ػlrMиoFFUmv؟?m xg5  GC{ge߹u])[yݧ.?a%2@n91H;vaX.գڐ!G rhu=kf>,ɜM^c6+0rt64:˳ r_Н89U͟ (5j+ qړ _myZa_ʵZʗ@KagFRJۑm \Wq?ݥd"շՉ@0[eKpb,59.ϱqd,Et8,^b@mqQf} ]!>@) 1>EOy_5Ywfɏ‡SeIU3*ZUe*]߫ fN㔶JJQ"@jkr`,HACP'I?i6xc$YDoU. Ww -C՛e5Yc[S8k_*fCeo>z zɨ9OnX{/&*2t=+qoyɮZrAuU v<`k^FX}Tђo^ ]ΤlB6sV|F 3ԏ]Ih8,Zz}Ñ;*_-p EESſm|G>aqzqܧY|ԛ"rIRhȯl+7qiQgnu}l^WhJ޶\/ zY{b 䡄`` /5ME~drf4qA7c/+" Kc*tB2p~[IOq;ތr,gYCgK+tג6>73!]=un#D843pe](]<{XXrPZ|k2xn h6¦E'Lu[j1)Lя۠4iK)9twVEA:gԶ5`%$TŭACGcHR<)J5E5І~fFFj!s!ͺ|W;J\&6Lg7P?zȳ+7/xAK*@)MXiVHʮU^˃WKU^)+g\c翩(5L8?ܗƙAt,R-ۆI, KPM#QhI_u &ܞ^"-IMPؚJ)zDPmy/Uc >ƾ1 @(Nsx!$b@Xݢr iQA;Ϯ<76f(m'R"8f:\ Oskw8 (Te֨mD0;2"6G;qnsU3qʉ^5˟z Ưϣ\NH{i(T뗛 9-@ ]z2d)&nӮ֒ea{Q|$Бaf 4҈",>@5Эk1`<8 XyO(\KӖ׆:P}5HW Ԕan\3ףCƅɣClt$p["7l2#&v[IX IM%bM~;@_כuC`k8ݪ3Ib|.^' !1%9~@#x͋F1X{h6gw?InAa`@-P`FdPH$IBl$!ݡ$B $!.8 @BB[ }LUH @`@F@;vY!eܥD! NE( HuJKS*I HBd" Be\kkZ4]~Y?ى <>1-% ju0đ BtR,P<(yD$a /W@o4ss V1cdAse 0?-b 1 P9e:Y; LQx #zCCr 1B8#P I Ca& i 'HxFlџz /e^ͳ\-7w2\,dfr+z"$!!!l$$NxHIʔB\@Λ(I MauzRSDa4ybG1|._o|ƻ9-vg}_ǁg4ci| %W؉;ñZ(u[[dRPaI0_dDb I%OH@W@)@% r\"f^IK&,"[ouyj~6`0Wv9氉 ); v{<? !/a@8Yʚ'dgptQ Y,̩yD(! ={Mr7d&z/Ⱚ1tr龆zXI!ײR "AIx,$)OHH{$@ Є?$PrPsFDV4 l8̒37Q ~ h /O.헕pei*_Tĸ8c $m0T;4{j$TAq6xրdM>^FW > {oj9-:g>;>QDa,iIH(\!B7!#+]o "@!IաHȤ]OoYoZ:z`@2ӜmNׯCUBW[ W2uFkPƹҤ-9FWsVdߘBC~! x $'Bk$'!! um`Bv?AaB5$T V0 -T(wcӧh|2)BRb+_ͮ.ʖ{*}ٳ\RAFؚƖ HlIp&#65H4k!'B[$)$%H  ?#/)dOaXq;^k$ hWgBg@l''"b@HO?$ Bqd!'He=$!ɻom)-(ϗ 76=e8qVwg '>yNMCZce _`HW%0>Rw _IXф'U00:CFҨ 1-[>h;ŻU^':UT*b=bw]PsS~YfGu*nS(iDGS~L HJK?4cTxjo(^{v -&<} Gܔcś3~)F>S#30mBi ʞO,ɋ3lAGȝH#Bo̖fՉ(MY^3D82kMwETH,rPŎYefǍƮ+49̫M{8#h;okɋa-tt!? Q::1 Zٞju>]ْ8:4[F"2Em#u!84vu]DͱumNj@5c-v?3/S2pCFޫR1j96'Y_hG.T`[ WPy )֚Ik.Xi1ྎτ9qXm|@@YZpA]?i̿Mb-sa bCab9RL+CץS1>͛0[#ՠl.YL'[&օKr:+!ᩲ8h(d#@Ӭ+|X+(<GZWמS-$HQ8.FIen·`g{ 2@-0 U0.f1^+K*~.G#3Qby!HwDhXQ+/rb3eĥyg̛ʐ K\|L~!a+$М_K|9 7 Քt2hC8b0VOxzaǁg ұx׌YqɹS/LG::(yIhݽ/zЬ#߅ZDy$ } nIPkq*oHJj$C\:+Tܪ6/ۻ#,q3 놑@Pkk9HX)I$tA$ҀȦTDaX^00']s3tU8s2<>ǃt6 S|cH/__I>.Xh)]1_})x/O}~h86|WaG\H%\ 9码c"tJcPB(l3ĶIITm *PQK0 H_ PTX}!$njY{Gkgown/1 6=A<->Z~"L_i uv$$'wfQxvjˏ>4/?PL/o'e%M oldnif,{NӁ댦:$h2CNi44fo%sFO%ryfՠu0"q hG92zf~fj aBeUMYXTeOE:y_4؆֯~w|?#lr4dvi`,;62gaQA8/W{q_8mX/:u8l>YaBj)2:jQX ߠjͷF+M+T-hiճ[o_-d1!*y~ogp wM;.lFm`ԦXWs2\w-j4@PT6& L*'a^/ #i_c%;, rld.JmW ד(eUhGЫu~7C̝ZB}w'E7.pog:\*F4Qp%dğyHD<(Pf$p]{/.=((~e,vBo{95m^M])Uc8ʲA0ʧHqWE Q4@~ӍX&rTcJՖ fy %*w9 q{pK#*tK|xT50UiqXܦK]m>FQ' Or+) D4zGklaqJ%l ??YzZPT)fPyiY<|cTCUhe JTP jx9r$#$\nM<dmV6A$\YEYu΋tNP *iq4-\hIK#&6g0?Rp^Aza#Y#)}َ[\6G]Q~y͹{G*Niǀ3AAU 9]T8c YswS.[NU`4& bh]爭L#kQ'w=XBB*[pkJ6ז-BcկV` )1vZzK9ķ+TI;_%S{z& zv78&w%m,hG7T~Nv<|u939vNiʟ>#Sfr,YiT]4+iLΣ^RO)m|^OGFP_P3S^-ki>ܐXyXdq f~dLܷ(F # 0*j{B .8 hrj*sӰOsˡHkS‡[G{uhW.X|O#ȣwwQ93#d4GCV+"yVC|-C'sƘԘ0KCBh? 7EѨxx.Ƹd$4}oA]$"y~ݣJ󽃜"[tI  U*+)M H4)H&* %piU.'\iVk+.5bù>"A;>AwޡʻZ-j, r#4"DeU؄Rw7\x$5DU[GaUaEUʻH(S2ڰ6n4 񨉝#-8l>+./?tI@LYA(J?V@X8$>'U/uӧ5kNI]9n]]yY ੬,lPŎ=&D=fLuu"LVM:Y֚+"byV -n47ԭȣTOPDO?4W%/ЏyRn((gEzTl,!67^!-JC6e8c6TJjsG= fnݬ 0!F1'BQ1Uc4S@<ݙc#J5|U©J ޿]_ ڽ=7VQH'~"Z-:7Gpx5k+D,$SmI .GKvgU1KT4-R_.v_j5_ Ro8\܀(!1){O\Cf'](ДfL8 ZR"9l|v{V.꥗`ɝ#eY/\u?}YrC=hrb4:]ۮtN>BC@؛HlMFZ]=eC Vv's5j$P }>GP"(<s|:7HP @IN%&2g )յ$Omp-x1FBKqEt-ꗾYa,PW|0T/U0fAoː!LnTīQ(iTQjll~+d`e*xAo\AskZ8  $~ J\xv'-J͐dw: }C˯Zβ)臦mu7 %`WZI- mXbPĆ\Ԉ+WBHA]Sh/̾`Psݸ$!!!~0/)d"vX(qok%t$U$)*H'ݧj/ϸn߅ggo܎HThOk29xxg0.IX8R),R&3HvQWWb>x3`.Kʈ0X}͵P5I%;hs^AL@^C94ڢUݷ_b7bB^0YSP_PE؆d7{ͨyW$Ğ>At]Q?YJ`LZ9j)Z}H|(r0HI;!%P`N$$0, E)p; &tYʧ?kR>'q#[ Sh/8{v`5T\:C Cb,@b}x ]@7ʺ?k)Ҫ#ji4g}b̌}+1QM6d*MڙYcEhԟMW90xS  X zc&L =B mD`$Ns9k{z·1{8<394H=mR++,yA;`DXa>fNr@,1д(Hy?l@HLHKY$BTxKN?S?os_w_OWFZŋDa5 y@`:7Imb9bΩ%mFUHHtϴ_G{]@%a'Ԑ}Yh@62II l_RJd Dvxͣȷ ;;'C7wY <)\D 7aaM1**!>=P2ܐ&l!& RHOI$}$ L,vJO`7w_DZl֌p 2I{5W# ULHbHmT@RAI  <9Ulݘ,0/@^ԖOU࿼-]P*V2L)ok@Γ2M%BImu$@I!?6B-Υ x?hK8+z[=1K~:܇zJ aoq$ $'ҔH (}S!\hI~I >H1o @BI5 H) w(`Ce ظKa"Ni,lB wn\]X,>|>ai~[m{>}ERשPC@<@uA6zMxTR֐ Hq2g+f/|^Owڜ&NIkTw- tCLjBMO!(&jL{*j&<~_S[fv++PDPӐ,$iܓۡ$6pT$&=|߳JHilKd3v4x掃)__y ]=j(ShBU]F[룃aH̘/t+դ82%3U[!i1!tZ mZ~MUǂ}]owXevJ\ ~S@vbnZ!r*f4 zszԳsȚ+RX)YBnz; {@B 61"TO;3Q) ?WN; X >D-Ǭý+Ra '*l6BInO1KџN>lMM>^6AHH9]UFJi?Xd*|ּ< 7f7|bR2lRMHTLmRaE-i[zdwԺEi5RSS[ Oj?ʠ$W2C%h,Q\UOq(?+μ^@Ξ4mP#H#: 4}'Z?.|n, (CZ.={ĜL PקU..,S`Ҫgsg0̃;j?#֐\)b ~nU&1c;>d[p9M=C`NSfr3WT_/tƞ6joō~ִgԁ!Id4VaE\UMZ3f);ZѨ^"hp傌Fu.֐{L =4t ,#&M /֋7(if>\e WskV"d&A$p?Nzw;i$*TQ& eYo@2"`umFAǍ~ bp,^So'"O~)V);Ri2S(<3Si3`$ < MD;+tC0G24ՠ4;k#/$BTFǸX9e- ٸL i$/k' kb]am/ȾTv<8OaL'bs۲f2t5&&c<!AAd-vS%kRfڗKC/2E2].fWuHbw}:&YP%iWۊ}1e |${.@C,c UD9ƛty`ͭQP18cf8_Wfkm1X![XS6zT_vE6ô<$zq5K 9{:shcjז; х(ҷcJ+ژE9g#3XYMLI^Blj~|E;E% <w/n)tN;CzZkx̎$xt4fd7 'V4.v?:/NhY--F; r 8V8rB̲Ae={ {]ƛ2՞+I4 7Gep=)R\1+%i*P-"W" 1^J#nRyN|Wթ.YPᱪhwPVb6wiN eU\f08Pϡj^YmXx#B ,S+.kY9"N\8*;VJVf_~^>D/nYH5k-Bfa5C^ 97ڮ\VĨHr@&`K!2-M 1xbS^X>3;izz;Ǩ7=2f?n F`T1! HOHB!?a &I+Ҁ.ŸynμϨ%b֖~l."}.>}7)B&ULPA` {Li UZ["0!E$Q&Ԥli~ה޿İh蹏 Ku"QmuEs*ٳA5ԤޓHi ZHzT a$eP$`$<^jXwt/BylaD}ϫDHlIBI&l j%QE>?-?ȞXCRе/#d${vg-󔱤PYD(O2{B!L}وֳCGC_'g{u^ p?if&lD6 ji9 9¢7i!?ʐ^g$Hh!\^S}>L.f9rv7P'Y[{w\ j _ +0 FBI'':L ZBk|HD+XLZw>_ei=-pİX"E?"JonfU~ԄY6$I w $&i#50 jTNVN䛑n_ oWnqw^DbgrדMIJI6 :pf_ƸbFL_(%J_?f^3N-v+@o\,"Cƶ7]n [^'84P(HKi@i wb}Hdp I'p{+$;XhE[|j{N,mp)?rJ$C$?!?% Y IdHH?S>~l۲9G{Zr(k{y\'"bBVBohe݀/6}8H`$"7Q`d!.d)OӜ1ڛ~3o-ĝӌW5{Zk ̸p$Z`6%rm+ECwb/fY<"W (-i62sw\U6QΫ<ʭQPYȇ_Q bB8)Rj h5#Ye=* /:F(y?400ɔnz޺U>2 9K qz(@zرZ R=sȆc/ %z%gc nB+ I̕&΄B1nH ds1([cG@-E4&6Lg?i@ p][/>%+i-Y{ßSEǸa a $' JA$q3M 2Ǵ}mvhd4 LJYQ 6Q.{#Bw` CyR'rkD׬ !+pw,B4oaK&x{9|lMF(_B;ZH?|8VtդPT%#-n Y*9s7'+, yX&vg2Zo_ 6h= vһEh 4 #Hh XÆՖ5LkД-,O_b9w*_/77J3hv%Mt*1Eoy?kW! (\'!g&̮,]̕ E ."_vпy1Nif]&YbQrr M+0/Q+_ g/LPGRv>+W@UKw~!zAٲy]MHݾ-;@ bƤ)zXeϧGlI:%h&u+R%)-;, w`oB&'4,]Z {]Z-⺁ qvL#7o9- [,l7Ν(8Jv4aHLP1vr@B@ZGkRvSwmSضOգ^ݢiͳ)iobv0zoXv+ZK5yX<_)F|6_vpnSwop~Ij`7YKG}YDln[,}GF \!2gvۯm&Rl\NdhVvgŽq2 bGb-st=@Qa!:e#TLY ڷn+24ѧ~Yf#yX-a('ƭ\*AJې }y,$\yIwHlLR)yIǘqIjm 4FA`14 c)HrϳL͵)\66)B+Dמ E8iTڤ h`x➎Ր H@ib7O*}0x̊5@@g9jg4nZn|w|l]ڌȺTD@DD;$%q!Db lk^-E9[#cxڡװ[R>uS[+ǬRvn6禲Z9?9417fi0rn9@9 d@FuT5j]כ(#O/:9 =%nrVZ휤ŵAzhIlA)aatF 6d  7Py)|~d:vKT-Җ., NPABǢ>a_ /]b!%,AR ҘH <`v;@yD*% {%qa![Fqt;DHbf{:7 b`bBҚR"o$)(`{Cfw cʛ5_'~Ma4~cGpBER d8  [dz̉5 --R&/2e LAԌ<*<"FhcՓcPM0JҐ6Vav&yHw=LVDa)I ~بaEŋΏ9H%qGZ]b $5+kǣ%)(m1sډsqAwpvEDB'1qE 2dyK.TI jh1;wx!Wp" Hi/ĖDj!*fEՕURG5g9iQ@bۮVi$x]y4L\ T0nf7wYSq)ذAz]p)KSUYu<m@K0]<]GʁU-#c[چR>Tg:0P%Ӌ[w7kx.bV=e:̥&VN8:L8+k w.)15Uޟ~N乫F>ܮ/Gk˖bg΃*C1_;j]2Bl"qEסѥjE$f7Ky(_8_мYS'[iSBR D3u|~a1M8Ē@^q]ܦN'c` &-Q z]Ʋzu5zN>xK,," $1$4T1ҕճ)U镁k{Be`l4(/y`Q6D" ({ۥ%;Ύ^l2 ^$ -kRɓ>uJY?IQTƭK(i*(ӒQhJ $ X!"g1\Q%=*bѿ"F "̕SŮAo5A@r߄_L.Op%Y^M6S_O'IoǛ{_E叼}K 9 t'Ys?ٮ =iU4C6t2ؽ%d'lòT= Nn1L er : W919_-?ϪkAK@R߻Ow J > (Ʀ 4ȓzoR LŚbM"ὶ2ŻO%PC3jAotDB6iXO*0*Fe(J 0aTE$/'FZ|?,j1;P&2Il5qE,Q2Hgն22H0#ڵ W3 Waʸ\|Y,_i{}=-P "U>+d-l hL> dEذZ 4YND}M_͋EpH?E<&fTϜgTx2^0fhi,IJBnP'd8zd_nZꑛLʫ =/}Ŧ.Gs ;4ͭuEq]YI))0ƈ`ţy/$ U=bPs*$Xv^I/Z e+eV *EAII'C!D 6M.m%4WBS6SQ~VfC#""HS }7j1$fǭ "X\jFŪ6+| ,O  gUd , R@$S;OUᑶLMU@"~ F$ XA'`nuoz*ۤ⿬?tkuy_v䴳]9c$a$1 }HėȁK@,I|ӁMt&?k3{LS cGgSPR_ʪ%m L$;BVHh1#)zJV{4{u@2" 0):nl;'`-Ȝ̨p_}"*+Z )(Z:Ii!0i?Yrj#b{bn;CZj̹s9c҃jows\OBR+ٳq^ݴn|~AHO",jo{5kO.MX!]Fe;7K->c_r6v7ЭqIeU>Mk?&qi,ެS[sќ /h!ٴ ,aH>6;crsk6_ |ֲGx4CD G#X&ں~aʃNC ildܞ^dmXș22YW]L*5#)..e 9RԘ)9oƩԦRU/Wd)D&8ݞɒŦv/'G6p=gzgkvLTSwaJƛ*jL^:ڂu]JgMc[iN 6J<!@ wc: Zf[_ZX&-cݘ>NB(Q21s^,QyRVDK-Ms)adڿɒlXf7/E]vbk=&r@ʢZR`RݯB3&p(DǡGs5[r"&LI, Q @Nn р$o؞ kI{_.F%'aMiި^ Nتs Htynq/ګ `!,P]8XMcXRp.i)M#9 L9fC&4t꾦 ƣ] L|mu[9/UkI j*ęzY\o"&G6ی,G['-(=ri+p(j fX4{[t5֯kgǗ:hD K oyydpnV. ԱBdҠܭF/iЫOÏ3Sbw.2r`{{Ak S.[bd]گIb֦FY K1CL;I[cfY8A{ I{uijȓ,rL̵-'39QRa|yr<E04kZT(IL_'aVQw"(ёS_Ʊ.5p]Hi~*tWoNM< >>y &바f$E8ؘ.yڴ՚+l2#0)ڸRp#d!JؤRO7kՂ<ªI 2)hMJ|W)'f B]%g=$zʨ!H8 0/k7eD;=X-C/eg -RҁeU-I33.Lj)B4{ -9c!WPgޛ\H*m$hֲֵ,Luo|@.~99>M <2T˜{7ӨĆts8+v1ВkFF}*7NalUb)v] }ЄOf7޺5QGҚoZgࢬʐgC8HUdk.wƉa R8wi,ΖYSʘlHm0A* ᾈᓊ7:_Y}! 5}p&"ru:uC>T‰ XmğFh|dV=Z1g޳^1C iXZ}#rM53[/["^4,{0d[ >:'Be.U_V3k|(@//$}wӍ&p$h_o@B.@E,󎦃xøk .0\v5 Kuʐ~"ϪGLL и! l~0B4t/un,]M!㌕2:4?:\3K {`]>CH^fUL )oPYSY3p,nsicMŹR\Z=L7T3$"?]歵-.)=ȱ=ffv&QSK%w9*ާզȠ+<#fH;cѱ(|٥D{FE+Ze[]0*gAI8X>kRޕEP !}0vxSrCO7& Tb!vѡHBeѐ7~ Ъp\Ы?Vj|M`tTg$H^-$XOPZ`d2d_M5_y&亰^W_2ԔEcg[䪮+ wt? ;)(hJicpHI^Yy1d"**RMoVu1s ꃁf@ROuBO##56=&Ad! ?!L88.흝˰|ar;լia\Tb|$~Ą}N.ZKAb\d4 e<lJYU0 BS=bz=al@vL~@'S[zZ,JNK2|?~w > ն]~Rni.ѣ2@$؆Zv 㵑U|Λ]v۠,:W5 <yddWbiuK1)-(D;pa ܵz0\ڭ`k7CbM,,Fr /'A%/Y%8fKOWs%"}5RW(_3x|,HZIH|I'$ђeѢ!hTXtPWn,qvn9S+v̟^$uSLS$oH=CDAw rޒhq^Wj'\8?>(s LBmJ s(9gar >$W\:jo0X9 >pC0˄% ~#>BP2"&h؋>YLH0d $!+[7 V^ISn$?7_̂vPLˍζsqx}x2OIF͏ga~%YW\MbQ(H |&}l4 n`Q`MQV((By4Sn5 56Ҭ bl5 J h*fբuTp/ߙ+RNa5$ѺD! Dr2v+~H`4qRmM󾋈y\X\Uz_JըBBtf6+G8u㨞*DvEzj CBt_a>6sW?37TdAÂ#!!\=)vqptvo{HS:Bj+?ȮYސqiOtEP4%$tV5,$D =3dmL(|JGZr-F>EΒ̲l`o!E5]4a$J`U@ҒSM7ŕzZSrȂFwo5gu[0( \ۃO2$C6Qn_g>'۳o6mU;ie M[p3Vү!O{75̩ KRs4Rg] 6w-sJ*E|yٍ\&ʉUڍ;k[Js*eotsGmz@miS ɹŔHcUYpS7q#4PqOX` !vȯb*GĵBx}S۫宬h`qRlE)cBqXn6d7 RC4%"zRVfZZ|$ĝ\oOjIy+ Ҙ#[?6hߚ`nKZ#^r.rp 5wioǂB(g1DOşÕBJ证*4z,FZObvb# ۏbGϙ^>EQپ}NsgZ0ȒBNJ$qW`~ݙ`d"KrrvK=hB Pj^\"1Khq4qtg\N c+< a(JQ9Iżbm몠qs3i.KJކQ=-]U\["?/rn6v%^V2v鍞AH p2/ݱ-H j>+㬙~m@ ؁{yӳ곽'%sx٫^xYvu> '[?K_GMUIQmPᘰ{MD B@ T9Mb#zضQ3 ܎˭ _\Āt7@rn , &%C'P-!QcV"xrOLdimF&pFi-x-rRCD!})w% & . G?g*В!1;< Y QN8^ѷf-$F.H2*m`m[zw9lmod;ìkkc2!!f/jLxc(ypٻ/GѽǶ36.˛k)=NJ3'5UlV qR0pHTF2xƉx'ݧ$:/΂qOGp6νFߔWO`uԾżb]4$m ?o1't*AEYW9 //0rNU8_aYUTL3`Nb(`gVapWh!S"i㣈2ݘ1+F$5oK#5`*z@%]@gKwۺuͯ*5zV 6pFR(A~gW#%~"$l#%nPCTʡ䳔Oet=m㑣j SVO| XD=r>ܟvv|<ϭXNȁ:Q!v+!ÎmR"7ӨcQI?FgРAڝ4GdRί2Ze~+hkC!~i1\HLH2" H~ TvPtdO"T%TFcPԏY 6D`DPsUb< hW6``HSfQ(2xl9yXg]vZ8j³(}i&I69$?ŠI?֒F*/sn6tti_31zB9'YL;H{.Vl ;JqYi!#\aEX6|f/iP3>Raaʿ!8ŀ ؊ {±/Bj`{UwK?gYSTC4(_tMJJŒ>c/ڹ9y!3ZjiQrcNlJpf+ D2%Q ?eR4aC O.L"JW;ՈGs.f̨}d^-T0LdXa.`UT5*j1^pW=;`Bl-_A@r#vCBޛu*vhڌX 9P"6 14_w/B^K4H%qfM bX:Fb-W4" {H,l[)v&T+ :֘ĢZy(Wg tjdܵB8.o3U{ARlc#5p !wBqOY-ԘBx1AY}c 5ǿD^QyGޮ[ 468 {vUP ؤO;RqZc^tr- f`_.Dߓ; 1Wy`s_;+?ȗb+9V1͊ThUX5cP}{y#GSW~]r[LZLmѼxɨӺ -lʜlϊ9l)*b9t_?ݝAPv?ҳy';V XMj*kjaB}ZiNJ>b\."W|,#Ҡ"$̺Zwb䱸cV`}HBWmq/agƌ<<3nKGo&;lANQxl@ |l_ VŞrڷcF*L튜(+)-8 -4pţ|,\_tgYըnw̐?v66Fi^#JNP*vLQsGn{H'1heV_YzxnCo˞ _bViq :&zU:c`E^իl@D8+|'B_᜚Ʉ 7mТ^>V«nm+>/|(HƐ͊jmvY kw/R;> zJ)7mUY[mmI26 >JT=l44Bnet8[/g$ٱq๵T! 7 y2}HW1m:mjRXf0'¨VݩR{VG Xq OeA8|^(M-sV7I7-N=qˑȕ7[rт*ClMy?S-\`_bֲJcos$ϓ NZ .UꈴwRUdoYܳKW/zĵ>{]bѴ~3y6bAfpτ7ae7p !ZݝT }4t̻KQC ̤gl^"s'SJ@L& /mj@zHVtv/Mf#* `Y83Mo^7bUѤVTY@@%ttmkJt>Ŷd$/_4rV ]9s{z\93(vmnX c- |D"KJljb!V$e*9g8akF) 䥚Z+V=:K{&#(YuVZ+N7~EɵE U &-?={8Ȝ±c=iГ (gVANeָ/yÃ<3Dexy~1탊G]^A%n/o8rhֱteJN$Z}ccEeGVAkmVOX:eB1 ljMUޮ4:K(+oPTRrVMz9O/nf c^xcfHOR;fU R þm"C%o/ž5kWFxTj*Tqf>. 7E[J1뎢(d`E"m†3e:q= L&^xY%iHJjbї'"Ma W̒gJWgw^}K,lm@tovKSI-)͎2Y%/Ëk?/'S'K4.M/;E8✍ !j`Gr**;9^K܌Wί!/> n̒T@TG F Da6:' Q$OX<~N FXl>µEN돤8 ]hkC2CT]_+&%?w:סxHLĆ Ul^AqMB#?'DmRo{gq3{29} .Ku%1&0󒃱fC]u00p Om=So# }8:U|N-mz _ cllyHle,HFël%aZc`W~g~{:cA<$woGGOHѰVWFF 0IF.|-UVIU0fc` GM$R/ w $#\4s,{(~K,oPEYۣQeAkr<#_!" Vؖ+|;hUy&5abջ/֨U00m #z%cńo_DܱBJg]rO;zMLPʹBALU~I'-h@obU{}M }®xioLBcrIY Nom(?A1\KKEeݏufe/}V)&1i/DXث[ULT")u'z iʥROܪaeNLx`"ZVB zC5_cE]5}umz:"#em)@A`EN*ۋ&:wS&1J}pMZ#$D7QO}TzJ-~w>EƫUa&OX7[xc f ijP]U jlPwą+m|X~ \>EiAR'$Ԡ`|h3*۷Dk˨oW@}ҁ΁ DX{2 m I7cLLx|krBH"JQ fƈ. 33m(iV{s/EX#?Y2N<ͥyQڵ'aBϔ^Tʪj._(+l6yI=iˣ)T>Gk%gFR{Vm Qes (OF_}(>&gR6oyN2+W](Y~lbyRЏ}}J`IJV>&8ۘW W? (K<}knCeK3_ BA y4SGI vvP7xS)[B~\SH3!\w߇]!JSn8nG'@|tb S&/ɩUͲ{s2qr]0bi71L[cMɐG;hjԻ@h>t!ʾYt ԭ{ɶ?5EfL“O(L)CYw#JMd12O*h">gFWQɎG0y jrԶiF^Êgk?I>G35mz"Ecd.@_c3τe9q*T kwhwYy;󔥣}OÃ/rܺ]@/3<~j ,ce ٧(WG3K_wk%, ٜ /=}XįAuڕk[DngIJwSMN`R PCE+N:eIbSrpJyGR- ٺiwluQzMyLtm0? *(9E5%.FR9Fo!Cڙpa'Hv),tIX_C&}>M l!1^,WF$? oa"ԵBך.w,[cmg1(;)xGyJ/ٲ]LgY`WyS`v}Ԇ/%~2p]Oo}'ܚ}9Ltmv%U kK}m|kk襵;x>̦&|CSv<[9 |ij9qx c[ =urQ95+ӎڏh_5ǠvK>ftwXUAa5ۗJTx5Ԅ  DF؇u>z`ae/_25 Ț.?NЮe}ud4pyzGScoPfoʍ; 4zy $qv T=W E531WUD2|ۚhfⅩ=9vSTkwI"[N$0k5&tq/VmxsC=Tg)wH ּ)L@0H$DU2E_U&k)@2ϑ+YC,wzaSiA[u>h_-@~S=j~I-Yݻi%O{zZU4l_KrF W9F :U%v$C_ YI;ztHN,jF;e>X""OgL: EE*6m>ynQCR'meCZO:U!Ѐ$_fbTd8upU;;L_~vjgR^*_dSlcxFUBQh_O/el͝WV+`L+I_O}~6|_oWqS= V4QK)w % Bep\9a@ҳȳf&7Rm*;r\T~er>KR`ұl09|LF7=ffʳMETC¡] +Fo\3G+2Un? vpuofןU•YhDf3ذؓD|xfTr?L]_ sS{ nTPQct} VС0i@`NT/>944=: lNOMfneJcUd IiP,!53W3v,2˦ps+L2O(\!$C 2ad ".*Lr~e̲C~_T3^bOB Nђ B&ƓJ0==Ktߪo|UؖWq~PZ >i'̧6i] o%"O~RŌI8i^z=`;Ȍ(J'ѡ|6\֩E:;oc[u+c;Xɾ 1G0tsx4q8bï'Ut?6.m{pRpO35)N,ixo6kڒEqXQvi6xRm 3iXoo/sWf<:ݖņ SLE)b|͵z0=O k++ǁb@1 `G%kGMtg<vӰjY5a97 cvr$r2N>@[- ؅xDTa0'թAJHĿV'9ꑞ TC:*uD/f1keS>P}zV+P.FlQa4>@ DЅL޸f%Fe bT,rxNj\#,C[ŇuD! ͝'Up'pO5~SkWǧ _w|>= ꨊ'w6_6QkjK#cmcm(íұ?)%᜙#MYs{ M1ЪRjH]Zc!oe[q]pU0^3 CJO$tz~!XM1|~ X3m%/a JOΦ%!@J`[mSE\EH)@6*Ca0G1X,ӗ9W\jĥh ܋ )-+_ː%PӺ`2όw\5dw_57xb5ӬuT`۬#{dBv/-?y{!RQIܫLSJVI]>b,EswUa-Z6[S]eZО`2T LLz3 V8gD곲Seq)oGoˍn),.,nN* 5sO5nyy^t6%!<3l橏G?,q` xO^LuI^vu8wx:{k;}d.+.2S$o/@$=P1u54go(eQ1+#OGcELQ%,:\rAaP9^)-ǕWf`J1%K2?T(Ih:&.ŭ V¾QW2E1NiC$]b.5 0'eNg Gm[(gDzYSΕ-=WeT)9mQW -a7{C{%l'ؔp}oD6~13X[Fa"@_ JzhKIf`RO!U| R H)_xuNO_F 3\rݙѐ"7v X6CaLjſ\(ofsmcj[)?0!])EkS#>mg3 w|Ά<aV E4-y8f/Kl݉줼*=D\h/^zWt@BHg&U>9J`2exԅK|~cjze˕3ƹη EeJguÛy7x+YcdטI1 FT1N (Y,vl[u`*۪˻pǤuJW(1+RO<%%!Rmea#}R4GopL9S1hG$HD"`,s/wRZX>!f$r^fIԫ8b* @Y#/6!l\du`,+hPPUe2XW0Б) !#8#O]93Es_(<9BHr[pbl'+{)vgAS˔SLip9gl[uG٢CU(vaúMwϩ4$8sG "bY&Ut{Z/"ٙ|8e{F4yL{"h5{Z/+ w9|n> IVԋ \7dm!`jm(x}8,!E?vX";^`YԻ3 ᣑS8t42eI0CxymKT<{M `GMӴ0q=3tzKc<,׾ND+M_=Hʞ]}r$nm?@tkdZڳAj)}؁7)1$XҐ ݑ @fMMȌy[E 'JB~`#Quk.Z!pm`XM#z vlEͳ48qZXEHa\SÑ%JqC2ëzy^c^)CK#^ q"U)7`L}.U4Y2hڷ(xvFlyTJR(69r{ ]i܊5s<];LP*tE]n.=}։vQҋ) E֘}Q VpQ$Tb8┤0(ּ>E:9\ҾAuU@Ht8鸓s?!SO2qFq.2.:8xfn5 w#y?0e|Pwuu',%Q%AYQϟ`6e zxeB/N%N/!y hOt>!Hg>̻ pjA@'˶6O$6_H>1LWxCYp P!I6bCܯINĕh8,~]7 n֋=i.N^ۉ!)m7d/lZfux>|C JI7z-. pS`?6:?An㚪<[WlIsz As݉ƌ34;:M3ZGNn  R?[GI.k! LΪ&UgvҞ8Ƚ:rB$7V-dU$QRƠL(A0F-'iR2~Մ&z:7ekq =Y.-fbG{8({1Mdz*Çjs |VXC؍?uew{6ӬTmv3}3s'm`nq}7UWuBÎ&_p#R)C٘2؀ԅ7#I:nepOWFK̦l4kae'*ptjy4#~#J1FN]t zVns>>b+KCe݊!$cZt-leM'1OUҵjsD^ױrǚwYjtCB@T\)XfW~3D:ےJj[Zg0BR]z*1jn|ďE8ӢBt'cBO yiph@ &"b*nFKAw+צ.e[9K)R@9L/HWK8sU jH$1 WPOk}lVeƊ 22byULKڳ؄ IΝʔrHkʥX8THS$-g<+G_?b,]K<Y!S ⰭoԪkDď3əUŞ9.o?a!<*d>FiXZtugJ~%Rl,3uϤvhP~^'$ȼQNU ?eO-K1-4prxqT}d wKUjOCyC?ۛ}[iaPA*HkG U n{W۝TSl>mDfY‘%7@??Ϭgpܧ)S zqas:6IfmP.6 !j0Y_bTX?' !(y x9Bo&㿟1a`DYU\ gIѽŔR㣰(7uwu[T Ffn3y׿A.G( S&t+t g˩$q?>nrZ"YPr PdF.ߴ~ՙ$X& =pL@ǃꂤJH~eb<8ϓjG8w?M'~ƴzW"{XJ J$l}J~jBiB2e z{gĵw9ByGddc#yq}}RfX??z臭&mu 3E?D|b=,([(A 7z \ E\O B|H!CHEdL Jn$`okUrVfC%0nhV%;yl)~[8ܽ@>H.PW]d{CǢ\DѾ)Yr0lZ.s9>dp^3^ Bqוz>͝\MA%`&xpgUq~_Y5c.y%ŹZ}ߒO2q ZWС[%p Tʞ>F1LP6ufNڄcB\)f Lj())^ 9{5:A~Bvòm˝Z-L}qO3`lE1BAJm)@ ke"HA6*I.|ʞxVRƊ́Iu]BTR(oQI_1K3+DQ={)PqI1G٧UPJ3BHp(k`34\mp^ECn##xTǃ${8 ӢlP2ABPFT91O&PL2~gӋ M6يk/P,栤EdJdk%!<ꘌ0MkMyw?q @m߀'c-XQ`ţV [/}O:I=  R/veH_05< OH%a3%eJC  pt6J{䙘y;+HG>Tа~н $;: ~Chf.E%* I,M%߹sS&Mj* la;,1;>*/#on WvVJ5 ]"bMux7=_/w"咊8H-;D#tTMy[ocW# ht&b у".NuT\vVU8@= vtP$ٱ L-C/9eP>TH)H gm`(\Q3ܟW1FcE@DZD4xbK? 6l+|v7+12y%\xMp>tt avܹiJZS i|B"e-+"Ao2+.5|[2BT+-뮢7gP;N c9(/[MԸ9NJ<\,ŮĮ0roS]#Ű`gv5X[..fHfIqdK(#u^)Bp̕TQHc6'fn!vg^NC;7#MRe-2r"P\P*Vhy b)8 pzd'47Iz |eeɡ^;Y0Ø y5/M4odݻ|s6XRWlZ{6XCcnwU9.3uY6jV#hTg=t|p} 틂cFI 8ih&ht0-1}n`_O} ;{ kPivQ07O[0$fǷQ˷Q62?2Gh+s;7)[Zqd;Z%v^t$ {8^ -'Wc[! C FUݒRF\U87,.PWs_ m DC8WHME=P&.aԋ׹>uR-*y,muƇUex%%zɏ=7Q<*$w5R9J G>hfVuuq֚zVUȘpA&rC={a2\7]=It(\LB)Ś$!J((A  C+7 m|TjG1Î)h6Oc<s^H NƏ~op0])/j#-}r'*OK嬛@FĜ{,BKg[WxVP=:{Xε.[kq0j*Tot0 Ā: 5=PW|hAkm%EH/7*7;"+9֧* rqm&2-#h09) Fp<pP^B3xܾ"ͼU~Us6;ә ^cմBZ֥ QێѣsH"ӥ!l-""ZV!4LgXv*b]Vp}e>bM( CNL$Z?)Hi$uE-QYi>Y(pj \Wbs TZ5Q-\IeuHT}GJNH,;ɴL([4{EzTn_v\9Oyېm'r4 gۭ(ltUbp,Tsz'.r1mD+ɶ^4X_{^,%ìYd.m7B_5Ixڎ0u[1jӘ=3hkmd@ q-&gxZ@7ȮfǮM^i˅^U=)rגz@f&O6&R#e5J岤{4ʡ,{X)*OAr?"݂cFBG7Q;._!U Yp'nvlM}q-jH IY0A@$I3D95$ vs#<2tS#v$+Klԗ1cŎ/)5n?elxj-ML* JeXrlU>`\\we*1e#lN9%Gz*Q-uYW ϢY[UxAN%KGA^D6[fx[iĝqA]ٵ߯uL̄Z3_(s&erN ]ur:x,$Y̎Eo5~jB:sU ENVoo#;>~'>OoMNbXCRXHHEڸ-7*+&p'TH?7w4qoܝ"jg NC":?QFdyӆIQ&?"E |B(^: l@[:"V6=4H"]xzGt,%BA7CJiu n~l|v"5좪(˟mҭ{JJѓ!1kKE6+nJT5Z& þ;vftܲYEPfA`&H@0gLUŨklmN4@eK!gb}/7 \h>e?uRAwF'S*BCh4#ee̞Ӆ/0u=![govΰt f_ pUy{<_n <6 Wx>>SZ@iln_d&97m' !# Ja7ٕ]&%iN5rΛ5rrUcӹ  C͟xif8vؚt)}/Fcq' 瀉Kly$^^M }yW.G@:3JSe b AB0[1!ͮa@﷧.SO/U8xY̬+ \ S`N3NspD#I[r\$NJlm2FtLcGWZws#UiJfBbw͹0Or;֡uvٲiܷ#LƭE+J w|}Y*mmӱ4<$@ emM"l;z;2Ҁ-[sO;7z`~Ii9.uǷC0gb|1J$Cru?ήa,bjWrN/y >@ s$ ߩz^Av(Ħj%V[&YΎ"_dD+ ]etNJkBbkPR?Թ_'fTl;k0 J{?Q^MPWfVMcIvnjrEYT9 pQ?r S3hFEǫdnH_͙'zꎣhv,@}7c~|VPIvoi_4΅.el:I ]EcuSoQo}8#/̾}Te T,`e. ױz,)Sq3y39_/YxL6uɻ:'[GRyx = {қV 1kr5I |F:*={Ɋ@75/O膵bstoǚpܿ.uL^s,L6TΣ~F TE!?!)8'\pQv>pSF#4g:Ქ`aU8ھϽ?vp.fV$[++R0ᮽN7(ߜQdcwo4QD43Ujr?(J]xeA=K,ŗǔ1a883tl*$n7J]ꁊɔqɐ@M41p`|K+_ .Q~|H4Q^*RPiCp] BS62fHTQeqkl22tl,*%QOAq3:yN׮.\{H/D5+0T,SdюWQ:xL٧s76]S3{~F\>|eeZW%V|$۞5~QBEj/RuɵGl5-V`"L-}Uv"[-涮ζAP/T3}lE5go%B\}ҨTTĠc+lSmUȬcBק8JR{U(@؅UYd%u)(}9ދ '2z78I0Bk7ѓCiAEuO͞Np'DHb`^"f0w,Ʒ K׍R0^Q5[ CdPͼ_r?Mzy,6'.>NTB5A#YF= FkI[Eukv(íͳ젫*ݽL?IШ&ʯ{/GSPY)w`l+F1ҪU#ffT2(1U 0t8w)xn Hg촷#I\Zv+<\:QI{!g+~s=6w©e$r ܗˍb@IA/<;s&f6aP9͢asoC[2UT-03jq9xDhZ߁_:`{z7#WB# Τh+"uy9JFY;_NxrRХ_K!@46I43 mzN.䣴QIBP1ޜ'$(/XsD)jkN97vuLYʽQȪ",  "* &d1MpdXznu% gی;=bL%Cqj:"(Wf5{ٙDJJj^[e{?7vceI4H=Y poۇqk7/1` @6]&%(Z5fZ~]sPV\lIl訹rFʮ^1!F8'g6_%B왕h^sH޺ =!OnSi)j&Bi1Db?ff[*qzdH׌e@C(cTqz|fs{8RԬfH+\tW̓NUSb~OLbJʆΠ!GW#a2ʌaX/C6n7tqa&2U%HwAz[[3ކŪh[ULr󚌑y]HMa!ai' n |S\Z4攤Nga[ wK61tPjPNHϪ&:Y ҩyn)&_6 4/nbj7=} Rђ?ИdJh'$ K#b!*Í NYS:BpM@r^_*CumRv3~K0 qFubҩz#oPCuX}J{ I1Ȧm?)kGք|"$Q.e *h۶(ǰ4wT"DE^;/~4C ˥n^N,#: s~:gEC'3i$A %_d\<.vGA< TVr-ٕP#b|iY)_c ӇFᓚ$ B@ @ *4u[N%>(h edlT0_ 8kXvJ$q &)kh4nK97KyJ.r[C~P jYa$FNeC%$$u0!rc}MPwb8p2JoatrtVzJb, *%ۆϥ1jBX#]B m6SCk7ASY!S *cc%¿ BX1i Hijr@ny\,[ƹƉR%{!IQpގǪ;=!z[~W7d{N ;Q8jxv<:ĀJ6J68@淤5T_ܨR07ϥ]VΥ5T(y׌JN>,)J>$?6hK:zc{_[\Lփ*wVDe6,#QB*2C˴):h\b_wi2,w~ CmGK$eL#GṈ̀ Rߠ`Ml\IRoL,-oݽ6l> ʲQx?&O\Dx?VOm浉{eh\՗vGr(QE)}z^>7фR[ԆBʔIZy^}'[k!m7{oCby;zwE{tۭ@v3 f*u9Rdu|?޲+p\ob*b0x}OzLM0D襲 Ȳ}ĺgyV\7:Zp'T|yCda? MґBG"-쟤j ,~EՓ 窛紃?Uhy 6p{?ݟ OxdR{#[K&a5T?Yl_EqĚ1i;Fb:ېVdݙ%>/6Çҷ?O~i}}ό~VmYOIxjgģ= ݮq )פ$AGv/_& Pt]ה/JRS~O?tiɩaw1NA/IcSnK&~Lܞ`Zg/h)젓ss6?n_]aIړ33S$tA&CYZFOKp[ki}0}!l),b{ &Dc"UHUlK[VZX,8O~ݶˍ8*CQ~VC)d0H(V哳b1!#,>?}Mַ{ƚa{%|V26+Z]2Ы2n-x[ !Aq4 KT3&"%ﳂWNyf,?gor4F!-# N*@̎Musߖ= a"3,~~XXO0F$9ю敂$:&ܡ(D!E ~Zݲ qW!,K )>}UܼU=Gf%81Mtʴ#pW1;;|jjMFH]UNjJb*ED H%}-{d6Pq"qpq$pߤel 'f[| BZ]E$`=|.|xodVD΂\ \WEwՓQ~;U 1Ǩ㹃q3d@^*ud2 L#hﳅvÈ۬cdGbBzJxű1zqMىqso"$qV^n&em&V2xN'HIuNR[(F|уP~ V}Q7=?g:8&~#UX@@(bިJEXEຐb( 0La.\ɋkIC׮`0[-%Ͷ?IUo bRY3iQCH AD{\~Z|jS:"({EowHkdA[P>7̻;h j D=<&#kgzվ}[ $:7NP*׻.8g8Jd@~/IV(lMEwz۔GC>P9; ֞p={OrFu]R_"AQ eΗ򱓾Q M`@Nមߍa"X26 <՟7 珻Y!ڛ\i)T=,L8:|F?Ckw1jʕ夵bLx] AїD?c$"NըÒAMԍe*A{G -?AL>'~ؒFS~kcVח  \@@D@/pqIgGͻƏqem%k!W9^%Paڕ/i1T? o&ka˵r\*@X8,4j t|(,@T}*0B}:~mI$e CtS)9~EF]J(s=Ng:t<c{Q0}݉\ 6m69zKv3 fц8E͚@h -җ:Qgkz`Df"`^ŠZ%MF$խFsĝ9J(D| GJ 0֙터Zb JҷLH_`^0q58i5#9iu3.!cФjSƖMzIICO cm3J- "MQq.hr1*(O}q9I8D6%oDsW91TkBUN =z\1Vkxip%26$|{ot9=[ܕǮiu+m޶MBVG4$mOi;XJc՚ #(Fֈ>̩C6bj|K]Di} ^*V Y9ɗLj*cc^TIi\8L.+6Oj=ċZvLƮPX$aܤkY%7]o&(p LuWI Q\84bX=*vdo_m}>!mƐC4|n@dEFZ漞'i@ف, cٴj^W߬aLE$KP"PW⛷~Ю,̫ Ŭ0b˦w|^~rpsY'ػAkRN[H'KP@@D#@s r^vm %aWx@e&.-mE/D ֔Ж=#w"l/hhnu7th3e 16 gec2>FC㥿wy ROgR]UsN\ei-7z~1;H#vmgR[P5$bokR]p~=NAǩ@`@?kؒ=ȨFԷX.`pJ< @_tUt yݦ=tFtF{QL&!=1`⼽BVZAj6YGoOvLi'nYCԽ %a"7t>N_Csx1B̹oBf0>vzMq N PkY=?w[VuB"0 32םxD@H "oum8ejYgwhjߣ,w뼌Z%`eʱMM1 oaDhƬu0jW4rzqP6A˻*6Q@@ 退HLZf4{7{ԵY9M3͗uC1k/<_o)9? "A\:C q&OR;`ZZÍz~ k_@.|5 9Ix1x nlhڍF{F Ԫ /o(z>nlΗFpIi7o@ wwo#{:fށԀ|\S|BT ge=Nn'$2cP&w* @ "  y+ePҧn/}%5)`&zPb灨gfgy$!p Jb5%Hkl˨pC< +m{VKf\%iHj Y$p(MkU9shqd,b砕~Zk[NZ~ 7/`Ŝf>8|+4Scd8y'1NsIS})b򬄻ATZN%/߼$92|KݺX >"*ݕovEú泷jJn Ke %]~̭ Ew5{iҏdL jw3V&~llx&R[CzqM:{|28ƕbZ 2!\-ۘ|#6G0r#@.f)>peU- n,@▁cyv;(#$&I~xD!۬H 3 Nh\ ʌ JƵ ͨ5ƓSllhGz17Z?TBns =ۑc94wk BKoZii.|n߾dX(mz}t(=P>h<+zr< r=4-HlPAcISiOrL>=E޸^EPܥ5u G#SŶF9m&a$=^d)[/䮒eWߎ< @UCKU0u/mpC3H`2V%0U,BƕB yh Y\-Nd*f*Ѱ"tUy)Z 9ةq xVѠkO4 ]yz/kOfP_[" uJUl)bd}-Ճ fn^M/jw*Au9W݌bVx <FA3y-MpZ~-]LM޸1hXz-$A> EӦ[+ď7:Ȼr w_jzCFkҷECPЉ7G0RkmShz"UzӯojMr[y}Q61Jtw'I Z-&WS S VHڗDsgI +sܩ*2?`Yv% ׍4{ho8e03Sh~К"sc"'..mGѯtG%{$ry~ PӲAl ΜO32*Ӂ,.p([f֛lԖ{CNڐn8OEc˾ ",PQ-$|fSuy222<8u0K K Se3NwWr #5}sp*"m =?h\h3#_k PL<8Z;Dz89tյv8eBtA(T?$U7'Mr`A~ iq#FE8Y:K&+.W\Kx\ۨN*@ 22ݚE*I+M V %3F/9%w%c$xfzPe`s|{F ;M7Q%A& zR$nèͺmTv{\\z i yng[[f֮yͺ$\$/񖑎+ >dz2 PR3|<&oezDMJEAT9w7y5E"]g:2diw-?"Ėp9Dܘy_[9:xxK)\#K*5D$hZdGTKV(41߫O|9F&e&eȪ,gw}0!E| >O滯8W]p( (9gsԑic5*Sk3HrZgL_+-#mNA  Q6n|ki^1c8L;O5vJT:fϳj--IjN{i$T0^QXɗRWa|w(Gm泷# u86m1{(!`c+n\o°$$SZaz{s4*WkykrRYj3%laLց6-*k_Z\B2Eɉ)7-3e?AzW;oJ{֩4<?]ko=NbU+O_fRQK)6jSNwKkBbHf|ykR*|<5` #~gh ,@]B\ه4DY~e~ ż0cdWV-$/ll]?!ڔlUfG6c`9_g,std~ɖn1ʺy2 ]Y),T'.lDY[KZVĀ#|A,I @e9ڲn'-rh>}H͛#mdO"0 ʪ~b,[Mo(6K 1j[ -a!J~eA4˳g۹M邠B*\J"]FCTC¯z`7|qa3sWS'PG(+ kl~&|ϵEk?J~o!~r8_oҾVT>%]p{cM0E8gEx?ʈ{'8G?\v䙫C3_2 ;k<\l]؅͠V5{XD8\4~Хgb F+ۉh /{u~!&d9 VBFqU׍ROd2o,d9uٹk.>)ez (!VN_(sSZU{hH\xj c 8XP&vH|KCƗbQs}{XѯG~|gt+&~k̮_N| cmp\LVy^3㜫*ːl>_9gU`P?_ʚT)&o3NuѮ[ ~mjDOCcUR\mow[V|ox^#C NZvSfR}f.MX7yU :rVMȫZSC F1kqwOiW}OڹP'ƿCW0 1<Yq~ZK5}~gryt-J<ɪ &K,j&q㗠Y{ V{S ͻww"`c/T]iQV_cxUwc"-e9u{NUt_âsx_Mhf#{qj[g"k,̄lYkݿ+g_,v^s<}PH&B3֡Bq%XTacr4xKw>WCȿWюU?rq ?e`;{_V…au6ѻK;^iB_w{f顪ʧkp&Z|L:ZoD#sno>+}*!=Gfy MK,sJb\z+YmZ1'J<,ҰJ-hiR|Z!K߳i*i\po%IE!†$[A;w<\pSϻlk<*B `14Y,3{~jueDO0UN'd(`ED8& ۥ_dG.lBX4WoZVh(|7]8Udƽ1ȸ̠9{_]B.A~f1Qow-m"anPؽcsP, B rmZR>u 5o::|sCU2 nq:ۤƄvQQ?OgLpO":iEX94O!v(<+Mo[A&*>EjL_6+-oA~ MzȄw4Ȑ6^7NsȈf-NڋM?'>}$1޾1_;[7xyv:EEj=,U꾻Y*iSZKYVs!t2Ļ˭kdO̹tBQԕ3c4RN.U]ێGԚk) Y{8ۖZ |4r|b3v ^/L(0eX_ř½'Gj@>̭%G39R[uV!^m盘PdU&JS2O+ݺ5$Q!n.K|Kaک|!2U6&)_E2b1rFc  sD ,fr'琌GV j秲V=qt1M-QQd:_WEEAjgO2sq9({ؘf6.W۞g4Yw;(ı M"(p,% gVyILs٧dmT¢$&zD2Ukg`H-k" 7mZv* !&V@DASPyD c^v-"1D;ҳFΈe<樲, {\ccP))~<ʘ]] aX$`ԖoYh(X@r#P3Rx/Az/_޹u?ڍBv(iC9˴#1e<ਯ[XVx4+ef7ePxC'&a'cY0 C5fntoǵɯj ;=*^5bC}m"( ٢C/I?r!|ą*SqRƷD$no:?!KE O{r,m8Bi&gsNݩp0fZZJ& L72fQ;:HI_\8$< !mced)u޷<]Vsb$ < #>qЎ+E&Ie^:ΆFڀcd1mAD*"bȪEAcCc9!?FwƆu{yyoޏJ_d,C$[^D'XpjiSrl%(ʟõ:q&y^_ ?vPq.-EV d4tOFޯ7W\>8' uwblIkֱ& 67\\hZmE^6L륣V0!1bY=#.3]h2xC=N$ 0[Мh {oeaz:ZǼr&MM-IWD2z>CA,czG?)Q-"2 &M2\ R[xsH)MSlws,Z|\6ieǎ)=|hdpD@(b7!C40͆=`5 Gֱ>"'I䱾Ɉ69}}AOKcϗӃsOEh9lE*`Eֶiյ(PC]|m6t#6538b\IC#l &rxk^rɏ2 }|v_O_i$ 2$ Զ.'J=?q1Zaҵ0넂/_ C$! 7l?g'[A)YQӔ3VBҲ߫)_DuKsNǛ{HbGEIBa1bKQ1hBB<"qD`_4d @N|A VXz^9zZ;\u ;\ gIDN&9K:o %)WpwjN%NJidN*${wKyhQPMC78 O3[ȱ8{fIcp(~o ÅZɭQ:]d" 8-|%'=L]tq:Ko" i)銍Ȯn:91/R-fyׯqXVdȍG]zǪqhs1R><BdR#4:N.6}iqsy5rM05*1g{o+:N8D᧛硉\*P!'/xh1B F(UOqʇn'_wޣviodcp*Xqmc/z"2u)VwIp4@A,URntwcZH9vlח\̶f!Ў=h`bKͧ/T[Z!@ ǛBԂeb ١Z^#ƬJ" ŠƖǐ&{*}G >lnVUk.eoPkL6՚4/B۠cg1" -'q6. =]=k\r RJowrJR 4.FL9]Y 88{)zǍl ݁])Z'PKw.}gN7˽qNlLN?CypwxPȓQROݪddqwp:8 G ]I}F>y ߩ4gX@߆mPSmϰRPCB ^6(zسEϨ @1q%]ׅZ=]^nZ_u(2-\ۛRz!\ 7I}*W RDXrJQ 6F.fEhާ'^Fe,`*MJ傌. ޕi+GO7i/,!E{l`ʇ2ljhݝ1 zliA8ʖo;<l_}hH*S0|ŁSjI E7.t`?EMD>զiV<6pJW,hޕ \dɥ/kwlkixg~eC"k `N8UOҹT4Uיtšǖ]SGNdoUX9R"knɁ|@\;-0gDSAtkqãR@?g2[IwvۣD-mQw& 2+^HPA@|Z4#75a?:Pq1B[*X L+8?lz).?QP pOQ"qz\j=DhKRB++46zU '1'ah"n,zEuE֦ZGVJjiF2јߖO +KdHcSYʏ7o?JHCT9P|orOI@ʢm4&!ۧ9&q S ́槠,N5 ,bR>ӇW%0sXU~. ^5sL)rO,ܶ{r ͳF#l%QBؽV,4 {e8Wa)ճV6*]8tH$(BAw;1a1XG#2e7 Q:A -j{퉘)ƣH_WU߈כ*V;WJLbO/%X AB,bźa&~>WvWcĿV[u!)s|+hL2D*4"̞'Ә8ڨ>rE?\s&ym86i θB!Ϲ,RTEZިKwt^u?,G5=`bZؔ-JjW},7wUg^t0<Fem~.J=À8-x{7<\ 4;Tℏ!ڐ۟[&9F5>ͳJC5iXC.Q+)8+^>bXWg Ε~O솃Kb={?>)3xÚk1Z6,,@ -yk_\_gڷ'DqBKkgbYh@]չ#?7fQڅ`Eocoo C፡"֛KY: P2g-4Ua9~mto=0`i6OX~G|Rָ(  @OHIg`5rS?|83/AO؋SH Y־5uiW8h@OFffG3bQ`VAxwdI |?0lIMK8UH f1p`EY3Q.#Syޗ7/dڈ @'B|tkrwUĽM @x4G͘ j>ŅT x0Hxl@m~EbD"naN]_⧓UWv_ܭ CPK29R$}b,͒򳡢6&|v'Ɏ|1d9*I ~n;|t1-\7W8+h'bS:E&(9ϥkRj]W!BvRyhL#oj6Ͻsh?ѥn#UZߧm\OԺ7UkV0i,mm?eǿP!%/'/by(ʩ% F4x99OzC]z-pX5Xe _IP#y>Ef$LxNGM,m S8]{0x7{{#o'i~F-o8:*+bx \C!5j/@cZ69dc-ߧ6/x^JT }\rK” N\ƖGUlSS9ML9"^r1,FOhO?n|^++~)ֈjl'8 cT>CrTzϜauw#/ |!$}Z?sSqD"/kzLh$ ȃ⎯"ꆤ8c/e6",q (D͢U3YqCn=7>efȃ7e6R{ьѰvcSX0×EKpC>?u ?z#-%_.x̙M#2rvsif}H^c;>]eDă55C~x (b\U&Xg ̀G+0. ?ynRxɢh'iZdXNKS c[׭g;O6r6YܱDojd0~.\8IrdJ#mO?aGQ҈G彩5Fj#R@⑤y8FsHCPN£z[=hp $APPOf6jtpbWϵRU2"0CM`cn ߦ][{)kz+MW:#0lMkX/Hd/WTGm 7NBC)Xd2&pcdS zSlwt0ySRX1FԚh:$ 97}E}a~mu̲Vn/=Z3؝oQ%J<\m;ne1d;_ +Jj^xg'Z`Cg#R$֛&~l{~"Dw2Gs2L{ dvv/ﲁtJ|][7msLx.{I9m7[*V4E'L LsUB! iQ]Xe6~V,g^DAKɦ+eX` ug{)~1 !x%e7~5Sd2]Lc=Xէc}ۛEWp3S afb <&H7#ow?͗q G}|vus*/ZE9VJN-BآޠE_beL( Qlc'ӡNĈN,ۣ܌\0tE``aXPʭElݢ l8G| "&"@./Uol6y#c2C։ q\(|*sܳ^PP1-]$7JIcv@i-̢ Z \ @_=? -s426#~MIz hS2\^h[{=T}ABOQ&jIqspέ%^DEL>O:#գB46Vb>yh\/kJxFwμZlu{FLG+#|fy(::ӟlp , An ay<^oPUHo@lZ:ʰ]ԉ4ū$JpK>V,YuM kKRoչǗK3KuhL-:yb4K/Bٯпt$F>cGΡ֧G:|ȏ*m/eOl%|ӿx <^B#HCr͕%zwqScod>#)gW;(,wW*i0.mN| w])$J gztW(k`;kmQ @ r j *\NoFЄNe'Iu#WM~LO'4֫r@"BC15 (+sJf x+D>j;M$c%м0+;/y`E 36ê$$apIr\Ôq".~+b)͗TZe娑Ng*T/ O-%HC6'Giͪ. )I8q˪Nyf0Zt1[Uf{kথѭ֯{cdsmOZR|t/fi9xp- !Pǂڝ(?. ޾dDr,ouyꄍ~m9G64p)?0DCooZ4Hi}'A}ɂF2w2MiVީᵋLK]O91գhusC隷95mۊ1WĽq7|u.,H6G N7y o''5BZy>O_{sߥ Ip,!& [R{lY/Y[{9{յ4K޲ .Q0l9kԦmpUwUC,s.ū>lmZUUvq6srt ]=~Ȁqnު܏o6hs='k Iձ5`BOD-xqb[AD< v "rgnHơת՝9 :r:ooe/NyLwk]!e@;7];' !1CgaJc4Vn1UijLmu,݆;p>n*V.X}ґGD`&͛=k1 LEn:u(q/~- `~,t=Xm-M$G} 3ģDq8{_YoP 2|qv? Nz2o  ΪO9Q讐3|Nyr4qcq[.ty$ًr׵E%CLjiIIm -^qvW߆٣,]͋e:LE{E~o}Q+`bw'J8\N DdP)wט::RgtyZN=ȼMdqrIȷ~(lrG1iݝs|`"AvBW5V\WHf-28;+^-GɹOD|Pk2Ch^S)W8@V9s;ngߝn<8x'0@DQV QF TQ` }j^<_Q/Lj<KՍ:b "" "@@lqc 6@ 7%Q&b;8:yb6롗8;sxq9&~ 9L Kmk\ԗt ׊捉Y;cVYRt05ޔ0QϱWk[v-̌ooO3BB0vk9ۛ9^fA@Ҁ Ǩc]h;;!Kp.QX:{X:?ޫo|}tm`OgFй{lR Z4V٨PAcl;z[XVknr|xLq2k()uVx/>B-?xlF-ƌEl.Ҁu7(z9B%ƣq~sE>mϗU=%.h 4$"tii,|o P3⏁ ?f  v'U85u0kUHOlB|yw"\F"%aeBp"%;&or*`$?/&}i FK܋xtn.vZ+bþ偐t:]1۩zO$C^,=L `4yW~-,`!Ȧ [Ӏ?QT[reɫإ3ku>O)?[19 R Z%Ԥ@Z<Ƭ-mO(\/dv/3$ʟc'vU>%^?E;5D"AHUDQrQ9nj,Iv2oVKc.h> qLƾ忦Hrz`fA;wq8vI^w j*Xķi5+Tw\EӓbR%5o꣢^;}=r,뜦TBVͦFL{񕔴/j+Hw%X|f%҈A; xd(P$,ʪweiZfKfi`M돂9nHzCh޼vM="Y|OP[9MWV,se|c4FGԺ$0*licC}f2*0=2QU)Ѭotesp7U'(j ,x95w`4evL 1! 0הlf /<8hM =39Daqr6-G3GS͉x!G}4P(;jXDCx=w~u.r@J׎*VoY<|Y|7|o}ƓU*2)'矃|Ά*[0lͭ{2Գ1P޽4 4p[m@(103((IHG j %'+20)})\ =kML@-|#c0(8f3E0LMK dܽĞ> mfoaOU 9#bB2" YD`D{#ùOffrq$ߩ 7sqso\_:tC JOhTf@*b[6poޝ{̰P '13#dlžtMj8J@qғ;A4wRڅ-gv~Wϯ(!ngMKrtqC52>r.%,I锧5&P5sp9s.R݂6Rpd@" ArwpY: alɉa.hp ! ʂҥI KxRB6!C=pTy ʒ 硺EP4tsE DaeakjFr>!01DQ-K/u啫̱Tm~=LO ]x:G?uxyx~ՀVR@ ;(\םl,Tpy DoE̯)UUՎND8!ɦyeoa_6?'1U!CXZ|_f|+9F.Or8} *[nupӯک\y9LG"xrJ,w>cm4H A6[[H0LdhPo|GSƜ\`!v^ T!ܺB|/ņT LJ`QAopX0tGϽ /Naя2~k}s  mw?5o~|M}Z~#W3?Ӻ*!9嘈vglJ?jʥ¨^kG .R9;4d ɯz/+G>p'3RZLPs %L; hHDnaMB8#C Q]&a:t ňOQmOJO^uO"ϫ}ȠMe>+{>_kr<89w^Fmgb+|~&ٝK]<Lo4)₀7GM1 @c!*4C/*L3s}O7Ԡm]o?,ٻx g?ٖeCѣ=Bk`1e!O-/9u76_σ ?8mm+C*Uf0O"͢?Bc|]έkMq_A5T>Ea)jnN}WZ*9:yf`J@. enHBXC|5g{ޣZ|_g*IY< C`3B>C [|g]I\ғk'4 C!ETPhwͿ!ߐ2?i_ v,=τ$Ld5cZ,?xt4w>t߇}B#JQe;1.3Ծ 3OJR-G4((H'JU>WٞFݭhmUC63(ChzE -e}}lpt)eYz 4),_l -]3ߵWf2j|{;L-2?#b n'wttV#4u(E cVZSOGt'I!P14s~.E ؋ XhSXd"Äi @Gx^Y`gfD̙ XbBFN Su?x)L4fJ$fF]Bg& S!r U8k.x@4EeHaք6Uv|iEhp iAN tY" s:0%G1;> (p@ bϓEj0\Ux>!^|xպ[д>-"Mʺ\ {sӿ}%d@&2I ,<$SyseСe)QD*x}ak( 5)y,üM36d;(8L?9m(^*cpDk˔N'( ҐddU6_3F ޑStȜĒK6ٺ\;M&;֊ Z٭X :풨eQ6(!YBceHF&D˶U`uteqUީ|͎'ǨTGY皽zs=rqK:Zt.Z7pmF#o<6xErAt?im/e8ʉoa :qV(85vx7`mec#ɽ묡zTi!)K^6CP3& ;Hve# /J+dެ` r`|VIZi*_[,C\+?[MlpzEqP9E ħE$N"AA,R,$@Eʏ5)6ϞRIKnA7 -`0{),ߍ6$Kr5bAYBQV$BH:K@2R% !rkZS:qF-xoKZTHl6SG#B531/v{7Mz|o50f\<!/7{&fwiLo-9bλ%)Y[7xWzRK-ߑ1Z:F%sP֡-Mv/t*Q Sr nBlA#,b {L 5Y|uW_]5¾~K>}3lCT/tʪ"(MEVfZj A GOCYK_0ԩdc|gh7M= 9 m6 عmu"x-TsV1J'`J{?3[wA.25X!Zx< ghhX)"m :Ԑ*wbYnՄCFg'cNmUڝrFw0J蜧4˥T^,WfCBd@!jP, iEk%۵f8Miu>bdV|lݼIg]#ulF^@mb6Xgv׻&|Icl*\u :WݢtNmONhȘ.NnU^w2GAe?#7UƏy*_f{O"'d2гZ3#Г'3\}]K_g>w?[FJ3ѽҏC20blD mgP~vU#OX3|wN{ 1  !3BoyS 2zWx?}]H款" lbXX#M$.C ,P9kЇZxCr(4Τv Ɂ I"a%IBHkI@>~>!>$ wЪN㾩LRGnlR9]NZ%&L]W M'q0 +m QhrlH*h`z?ǿe ŲGk8??uy+1Sk_7r}EY57w߯1(.+'m3ia%#ȴ$MBHG3x !?P$t`*>#Sg&67* C;>n/iǵ]ײ\w،d e,.}v,Mc=5~S8T1<(Q8q$))KE8;+i[]@?\Z䜭`a*D4VQyF%6Xju!FcLӣbu3H~j5z̃$ᑊ]q~n^}SO 娨J>6A)T ,DDZLÉeyb~_Me~==ܮmݜzӱ۔,,?!saE#/۸2Q'<ބ l|ZQ gdW&}YCb=[04:h,>Jme6ڡ ĻnhGv_lz-S{O 0{fb_7_ս{^%xϟ-Af=$|?hw&i#  (谞BBC0dN#(9rAv9h3mAcGP8H@P DhqmfmB5.ZR]23Q1N&dۮݥYߥ:1wٽju }j*d} aߤ+dqѝht<}gh EF o{ F %>f3pW ]6Q4֫? [b s?(i)JHAH N1`&m$o<}9+- ?:d՟xnW~z"?l3\=>=ŷ9?g3ߝYzܰTuȻKsLǜGk96ٍy|SI: Wz}+pu}lNt;X8̜ ~_/F^⽩7x^S7uiz^t 㐿mxqyna?ѩvQQxmBs[7a;s A#YZ@6n;{VۇvNE'Wspym"Fiwxi~DDTb?O/E(B2UR fאTT |qz?5FA!J1R(n%OC6NuXK<]0_ X+{s柖Pxg{ WR„a!Q~F3iY 6C4Ԁ\HiEh'? BRR2R=5! ;_‘Lr6`ϕ?{OCU8gMl5r<SGvSRTq]cCͿ7iL)})!!zi I@%ʹ淒 5^,2eP ;ssgA%o{_rdsE}Rv):i|u)՛ScPTR[l˾Sٟiv>Zk3n'-*5EGhY,/'0fs&ustMY,HI'k0 'ߧfseXe)J> `Ajm-~JI#w A")cs%8@L9 gc*6p|8P ~s=|n\ͫow8[<3[pt%zga%HH[q9agVDy>[zll;6fy7WkPE՘' l{I-`ϔ9Sa/#<|?\OG}dQ@UY~Kox~*xZ KivPc~ɵ N?6)<]`벲 {g^CiroZs 264dqt:vߩmT+6 Kp?kv: V';rmg&-K백6d'%tm/+wlQaU_mWqd lv[g0/͎G鷿h}6)cQ9aU&+{n5eOT7ޣ۽qSzX}=/cYd򻝮.+QqdmQ"2bQ8Ou;=5N:֯֞Z ǫ;__{_m^3?z!kf|}[aSa'ؼRh5;=[Z|,kWm }/To9Wa^Q:ǜגvWs b.#r:z )>>L}3NOQs5>+}n^:ϑ@@z7݁)?YGu #O5M*1廵?V،bH şxj0_,x2PZŊUDU!R[^~fTDɤX(X*BHR(bF {aF3*ZvKYЖ=Q2'x6,9~<+uzwŇ>fA.0~sfoL@,_X-eDZ܃o?wW<ǁ@y"m>Y`Fm"XeޔzKoT$)b !Dw9}N{ 6Wf_.\gUe_rB9Wr5Oҝ~ϧ|t0TQ8Jl(kbԚKq)7lZiWvqUHK&3NK#fHRj^7T[;Ugrcl^5ntEO0ɇYƳγw,ov#Ru=+GIq6V!qaX ~ db=7ä;o>⫐9.wl7Us|}7yd}:|G?=7Ѡ<]#D30]H$6*Ѝ @kZG|ݞGrݏ痕hAp m<]G<2d2zt36&SQ|.az=υLOΐ zc(L*PI:/-~# v0,u2%źc%L%x %e4Q `e>|[ :Cٌ_`ߩo;/id;Kʟom%@K?ZH{h'w߁@)egG?KP Ro@\Ģ6/w"Sa5?d8LøBO8'zE'ÜjwkKYY& B C JO"S[ݡ-Xh(f`胙(EZljYJ=ٮM_،TY0@C1<2CF3 N_v7ooӪ?EDZE` `m^ma#W0N@,iZOhÈ.eVPn#|_5+V{Hb5\9pp{r&J|T-C6$ڥv4Pv|+*.ƇrRR6MB @N%^<{ݬ $Ά ?WG>-}wgBql|lP`jz+n׺@i?ݿ5d`! Ҳ}q^<=5C oLx5lP%`a0p¹1}h`sVҦYͧmc",L;Z%?\(1L⳼+1U3홭-.X_m_~v" O$tͣTW F3zK>-p#҆/V ˍB$ p_C<)Kb+xwܴoqbv"ϝ5p(\ ]ࢶ88}w)啕?QBoEd|=7Fb9]ȥ%v= [0 VU?[3w{xYb#Jfv &"9·b/ W&$~0iozp9$lO3}Zҟ?^%̿ 96\X%Y5\z.?n%&:șlK! :jd<"aCF2<6edj;? ݳlZlx`(XKMCD M6BܜɖƧ|.6Qڑ6U.Qa?-xo˯vDr`hvSYdCUt*("HAM/^x-YAۈBPi#f}{u,k`mG\70E ``mx=oQD12ĖVU͖!h$EÖ }3hs̉4 .ъ$'8ƴf~%-жGLfCMȕHf̸ Zm(:52k,A/Yhm7HO.S hFPꃁqTA ,zD0Fl?+ĭq ;' H4pwAvLA"%4#M+pm`jPa)lTbL?S?h+Lkw R$Q~e5b|XЀ{ COȀ +pF"o Xc;䗕I&0XyJ-RT iS"ľ2  $ELJrmS,ZA E]z !m׈VCג}t5oll M_.ךU*rX`ATR-e>'{"F&u l/cb_i(rV?5yW^=w n ҐfčR&XTiElU(գ\P@IE)!:9ϝ}wuxTÉ bpK"2u@F,Z8> d8ZuQĶWʌ){d/))5or^yJP)00 )"0@44RaffTE>O?c2_WyFB}gW7c >!9x@q;}Ē֮΁} ]md9Sy56Ӷm6γO?S_VF%6|GU5CjV.NVXeh|]-wႰmv͖S?v:$8хͱδxNMFA B U.׺_Ie/uWNYxr[Xݼ(B] +zxrK:&?}ߎw()4{:bs Էߑj@x&Q oonj$yUso+7?v "98,};Bza(nX5Lct1ߪi=o49猧9u 1;UC20~"Z4 ;1 #HOdLO%²S,7r%[SKv}__۾™k,Vw[V>qp )}^ECVa*~<%dG(/|\:ϴ8ײ[f?bͮ}~ DMvvvJr1`/Nv" #,b{wul,?|F,+QQ=>Aj]Cj 1 ʽ=F$)9X$4胎> -?oٕљ߆M O*|;_:n{]?߫nm1 bs#NTIP:)WC><3l4OJ6<&ph]5Mi0,yC`yoEIKj{7׀QVWc1?3xkSufyn4_oξ .nv慫~?ሹR@G<NBAP~-oQq߮.{sfkM{voCώcZ_cj|v7-n!={'?;ѻ0;`[ "o #S oJzz9n=KXX6YM˞I_p5JU&z?C|Tk:oS1*UȻMu}^ƽEle~K,WYx̳Kg]1Rw5+e/Kpw_\C/?z:L1-\>.!LjA77OXM mycxjsn+dVPQ-^+ʭAu|ۊ+.Vlys4Urg`;6RLs\lcw @`x3A6糙 Hguj۲fqA50RNRdGGnVfdNvZ$A??j\& vgA O6¨]S: F}Eu(`Fws[癶򛕜|3rQW~|gOWV \DTbC@,se"R 4bv(R/M™&PEZEnR( YjR 6GЬ^vTV̪٩[2IlooX@G`#O(YZe/<-yx1ȶRVfl8 DU_HoFNGLk?-?[YСi $o/Y koL5t`##\\ T-] Ej^ q(0`Г5$)*Rd40hH8pʦeX,a؇ 8}?j0C)@J^]e RR}Bq%="RJLG bU6uQQ(YLԡZ-ԘV&M{ju|IZ*l4Bc60Pٲ]@ 9&  46PҸV٢`(NzJ:mz-?]_.ڠx!7pH,I6kŵq\S U&@kzl"Qg@ aT%cv2{u ))F5RsIjJ+5iz(e`(W [!y*>|w~$̞7n6ZK1B  <_#*$B3g̰ H0{T:+ uՙ\!??p\bӯFJ sc]_!t#bHhV45U sQXb8,Ul" 3 z5Twp=?b*m#3A.ke*+%HD 4ptD7Ia_9F\itol%X@J5rjz-٩8fΛ^FaDDEt~~0aU$Mm.  8k!3ͩ!H0?5k{Qmgl &*h@5)q:eӡ,++̝098V<pEeH|¿WPؖ4Ug0BFTHr56tm K*s*E'&Kbn;". a6_`0UGᲊ|tgaP*4X Vf*V0f.m% AnVfchDKV,c6HS.fC&S!jpA$8FS IԨ{NfX^V1"g|GlAMjY d##!"Aw F{N T#^nB)k * P,@.FmBh[Vh};s$JIk' K,.`LLRWOF:eJ-}d@pEM$J&}"stľɨf;~,??ҁ)e"U&Tkȃ I$b;bXv%S67(bZ;2Na2|ޢCB,)4K0fD㊻i- ^*cB.Hal5\,eaizZ@ϒT $ rLD(Q2"n 2—/3RЭv"0{ k `T5+*dRq!zZ=3rTΪTqR"  $S n&%<~kC4bSWv59,Ÿ۠ -;I*}Qze|^P!pHґ0X4( XĽG_X|/2:}qpJQ=ȞP8±yV#airGRvߨg 4C|ms/>[vmѸEg8Wˏw'fuK)"E >^E?˰}=0=_7WWFsn?vm{ܔ7E۶h#aWs5y}k ~զ3wI1p6,1K)P_}xm9_GN=߽gr^c]ya} ezۨKx;1қxÝׂKjI9Ti)L(qqJmfA/kXHm-]1j%6`<`_HyF0ȤT=BCJ5cuXcL- ݰm!/([^h^Ok@D^G8ޓh- _ Kjv{WyX d=,eK>i 2͕/ w/%jDBVAEPlfjc)RfmԢDpshjf@"H@vefaNZ(*J{hV5)εTS&vias 9(>>=7 uwmz=ʰ֍7otuRR% Q+c$+ U ARJ4h Q@J* vJoLT Ғ$E h( (P & P=(V@{e*:BHURVϝ) hQӥ JI)(g}D)ITtG|+} hwiPA  pxϣ@ X/=ݓ ((Li-pf Z<Ю*'=u {mrR9(ֆllgcޢ0y wlayKDE۵{…IUP%H>r| D@#M&& ibdihb12h@@)@` Pa&FiM 2 "`dɣъdyTDe4i4S L dhi cMOLM&MOL觲SJ~=&&=M4Ʃ{Dğ5?Td3Sai =A A4A<"`hi"zLhҞi?JoM4ѠQ=55<$=ҏҞa'S3S'MH2OF@ 4 iy0' &S i5T&yra4m<~,w4px\ (!"Rd _㱍U4Aa<.՛bw Sv>6I)I{fXZ,@_5&U0͗_swyDWEQ߹/x='OvU,@.H⣗|K(z1tإ3b-5 b#wݘa:.?*F(UEsQcgsc&/U~p}t3`x+p Ϡ t7T!m*RK(7&8b?4dt+uT%tk%UQB +wÆyx% /իn"u+-,lh9)U xϋTÕ_잍L96gNYJ.4MvX4 Iڜy@Nq,XP#uiBX! cQ`:4D(,lB^:Zu/hy,r^;=;j;I0W /ƀW-=]aѯcnZ{NNB>v DCYaFwM~<.>M.SLY69ƨ͂vK@>"3i[s,Fv2G~ [M3DscHCQhg&,dJK.%=6k^ԏƘdus-͞?KfS2t*fG>b#aMxKėė<@7 釷a+C "&<<|2u ״6nĸ_T2JKg[U2W5ggݥn,2B(#'d$ 2 {խ,TG j) 꽚(eQHUJFR/KLoET)n jT@aUJT+Y{{w{cEWӫa97nz WύH9wtr 4F(Lv3?.>S135ϓXvx:Bqa BYXNtÖGV <z鈧%ʥƚ8:p s-'NöLd̩J3./MDy0a&so"@3c^ s(0Dz<e.d5aȦ8tr#426zZ@>3t}C /N@?v7 9Z;5be3o$y& VfgxfozqZE v[Gˠ>V&lkIsrs$N"SA4X-iTDM-΋بhv77)˞Aŷ2/ Pď@C "@Fk7ssp41 uiFFZ텰LDlQ0!]LO=~yX֢qճ4ӨH=.<5:ns 'C_}.رj}hbvv gAtqGL'%88ȫڕ9I; yWCA5ۅ,勆q(^>~IRQAD;  rH" Cj?HL}?ӏՄ).Ν K !GZ@waˇa7܇' tr=u\ϮXfѝzL@:ESTÅ!k3vN]wyYPQn =x{OEw5m{CYn ::hޑu&O`dl05 ߄lw#G?ݖAɐ wCxZ,"cq.wiNb_jpsm4i{EXaB ulw^m"O9!{N #ePK0D&Jmae>o3hK"`1fD!y â 6DKiN`(12կYCHKrzjAAچ!\^áVq"Yry2[tV L T0FFH"sPخk;,>dܷ>6F̆L h߻;F."xur:k2ì ag<' DIZb2 /&mMNjlM ogePXhcLk܋9"~2evp"_5&1|; 5 ֐EO'ڃ[ & 7ߪ}X6ba.v#찯b50K-Uѽ7mMb9)31j'D[iUܽ%rs>5m2x۴ݝ۹`ɼ[IaTЏ劁4nQfYԲB7x~1 Zq;Xµ栵?rf:+J "ԴT\@iCn'j8ĩ 4ڨh|L^jg3YIM؊埲,\mD~Ћ WDǘdJDL\>zWl-6-ę)cpA=ȈLB>_!30 Fevcq lc<=`uS(P єn ݿ @;ujl6GDZpڊ}<ڭB/o7(/1Ŧ1$)3pC&f37~ c7^v/IWb[UJ?d;}'y՟I@ 6[}>\n"QZk^ǴbW6 Vanz20/:K71M;i&yuĐ|D"#1::O>5~]/i}\.oN}M3_JsfnP+#6 W^BUNDf&N`Z萛Zwjn0d=˞Bș)"Wq3C4IæT_Tʱ$Cl=|V\<đyOfyȾCAzS@LQ ISH.*,1߾uGp*Iv~/98.u2n*D]( 4*<oI s68>:3-W?'~MXٶ~Iq+?G ?WANd*MRqWEea$W S"RrEID_U@\wΉlӊ"ŸFbZΟ;' ˛{Ȃ~95^Dn.d/\~'  q+m~D/}?Q\9/>u{An_[ 2fv:PvTŝvfAˁk%3!@w/.`a=hDay}E:b{OU=Wkx>`&kѕ0d0w1B r V=oi59 S4'6O]|Q^3h`UbQ(?5ȵs_s_k^xJ+pXai>p6JQ*A;yLɗdyl~ʀa RSܯ^O~PRiW)!?hvX@E$paa+wp`bm-}9 2/۴a!3 LBy0|`_z4ޕd~pݾPm*p@LJ%yLn:(sظ=!eגf{dV a"%9#H<F͞J"<K1eCY@pU.NQ5 MUPw/ݸll~ |Żh=&flj j|pSp'iCErK>rFKT7yϵ2v'+uE/Lw C`~z*.O6DZҭҨb8s8va3 gaVl/z 1L o$6]@MieTз1zmZBwa{UJ 01 B:8lF 8o#&1&)fYJl} ]kmDи`? [b@!ז }x}ύ4G I.$8ϒ̞Gó6` $V2)0$PꘔY'–qX4,UM] "iR)KTZ آHT(b0mj*!jQK&8RXDQ ),I*\Zq2D&RV?OL F0{ x`8@ ':И}~w:'8B4,\m[YΨap9W8/9ΈcRBdGQixS֩ڜ;" <^(t}tHLʺ)|3'eqɿ/V{c TC3d$NB9*yʼ?YsI`vL aLݕ /~_Gr7xo4p1پ4(9Ȏ`Y(y9En"쁁o@,VbBEcGi#<- %&!J@p?<6x"/tW _#m$`]t%ÅcJDdN-o}&).jŰfvCۏhMtM2 8{=pW iT'"e;X3; pB'VV 0 zqGT1#tWrs U@Ξ4#EFVc7j"C I(,/rg #KLDN gՠW>xSMc tQ^n(KAteJTI )[G)fYLjk, ){aχ϶K4+q^To,?1;kI9TS[ï뒼;%Fݬr}BVvgѿ{g)jٳ\l 6 {j)'3C $]3aCVs&k8uI_<4A9ơ+FӀ*C#hR#W4 [&m豝1<r4Fi½0[KO#3G~C[mL[>f tր[{D3j<ȓ$t\ux:vj^lY aUO=9@9itˌ_,,DgxofiJA6S: eFMË A:Qo3 4Zۀ+I}[-\I_pRȫ3 5Wpйdh@HF}4q0۴KյC_GC45E۰aauN12\ GwrH^Z/)ňeƍZEΔ3y׶LjH'jLQFƑx(  F|ZW3Ò/ƽqWLfgWaӢQ*f~-tVFZ/hʹs7BlpI]!ѱ8ʏ<- CDjoBwwLUH-S  oǢ0#zB 5Z&w2A RzIHM.\ʤ BUEjaRf{Ɠ3tuJu*/5!Kʊ|%Jyu){xMH g4=Oo πY@M>U z,W6K X(Iؙ x EB]3` RZYA&F"aX#_g;HI%/f`FsMZ/ht>u⊈*bE"b**7HC$Knfmmz-yz?7U:}VTB3T[rkDClUs78 j&CChd`΂uZr%ə\ۢAҺwdxHnflv4d$O14skO3]"4v}mhLX:mTy5-ȪEx)Q@,$@6A S6r+bF$@@j\ky4OKuɚ3ʘ3V1#^x9AhBhU,Fd2]s†@UI|d`EG,hVyшaÞhu4 ӣU<ʻ5RxCK<%`trlMh_8>e <7?O\W.  :mr2A(K@i4s3 I[_84 vaaP%UeeA  & 1iM؝8];9#un;`[W6*ʋ~9K0O*\f5@<ȗG|KgS)&FQO2Lo^)͊#&0z P5ɗt#I?6F7k/0ۣ{ҩBZAtpDTJ ^~qSF"?j!$TM93d\7Cw| #E~mPM\E [#᭕g K pYhIN7x]KQ / S5::<6dĴy첆E1!ɳ l_!י!mg9R#{2a RY0iZy).Hus0#jᤸUPCohC:W.+M{հ&^}~e)<ɘ׳,a[{c߽()% nmAy H|ELTe=${KmǴG`]jv)43/|Pl[c(N*gx&jА'h2=f@a:!Hd7x0=:#KhϤPI JVJ)X)Aɲv#,!sژR$HU{{j$S#2"P*`2U緶)8)u1 U:c1鎉N-f) :p@t`R:љk;%LO3[hnPenR38 dG: y@g1 dF-= Wvlià:.'*Mcz`,6 A!*VPDkGX-36~sg3!axHf .8Tkxb]L(@[UbjsfΥAC^ LچR_D_y_mZVCV|>{ƂS2vώR~+c d9KOAu0,Y Z}FWy "!Wʵu*)cY̍-7F N>o(DNWj3~Ё By9`YdgBr,7$ZHb0oz$9qkf's.hS7šB B<㦚ӥ |wԼO? prS7;@%HD "9vAѡo-R#^}y@8f0;d;g0Γ 3F hA3AOB1ڟ?|UsWь7qb;Dd+&b?¦DR8zx FHG'sa/@H~sfCv7g[K SkGq?0lni̼˘؈ _QQq"0 20őV/a3۟X!;6A}cF]GzJHcdV(a:nS.'?Yn~Y 쵦8bI@)u!rZւdN9!2qԏ73Z/!OV5xW;Y0>$>ßUHgǐu!< E++DF@ݢt*6ȏ@0y~mT7.50é5NƉLfhu0_c9FP,QǕ:8,mm.]sKV c-zCY|/_8::>9 3r/omZUZ28_ T?FԀ JۢhmRŦ.F;rCie܍MO{8?'k 9Br~hbw㮐1"bq/O}VQ\T0ZW!4w]Ux9C5Sod E)!؇/,]>3hˤPR=eL=#>UU!RJK8--/d/ BE0 yH5a m_=LڱlDSTOZQG+sߧcدZ YQ}\9֥j ΦeF 4\,5ѻhit_*V1Q*RDIUۣCv~MZvkD줟&feWdhvY{D?pݣO[lMH<}{R8D2փݶ].<@|c/~Mg2U#,O0*=! LX! ~8=߃U&!e>gX/uKxڟ~._ij$J?r$WLy|!] ִ0q*U\Hz^_CUENgXH P{~9-ѥ,ܪ]о|OQ*2Ɗt8$"Wn5}೭ (!ytpY=j/=M0&7棽zk/|JZǽe 4N%$j:83*Xe͏XXO33h/e~q[ӒF:<*y,5캿։}C;3ȼȶTrZ-)Cr4cٷN" ~Onc>niТ 4tsdnsEBt̵GQ&3h'Vvgc^}2C`J?XyĀeF~_?|-tlOF" T:df tSP(;Io $9NRdxyn&e|RPOhZOŦ/?WXCdzi=^ڡDOʚ^Co1[fe݉Ud_9 aޱnظv 5YpMkBܳ8/]YllM JQ/gix ͭ{Td~tu3r2NG:WI "Х2$ 3W#3pYTwKqbH"15!~feU*-tV!^Ĵɓ;{\m3,^t1]l==J4_5+A:T}iHL$+8v,-5nvr Ex hThOhpT,1/V;a9?+Hɭah% QG إJzM(r) y~;k3($NgIy3Y"L Y=O:feK5o6.O?$ApGcKlJ`?"?Y6VM^ShPLL/Xzife$*"yx.Sff {_{WtQJP -tDODd.) 0AP' Dd+@bԸ)=v\c[۵sW`M>;圏t1I]"luFWd{k}F{x9:F/!$:ٙq~(Z-O(̑[UX+昺=dי)=l M+n@ly?WVyqU"YzG_ح %`s]bOiY'v28eT5L_'Za%fb-:4)OMP"ƨ-XLX1[X9%A-|8FycLwg@IiT͜"ԲEI S^"F0gbX~"\x**u/᪢hֈLFfU.!&Q"_vvŕFЌb]t.mTf!$Rϫ&y`U엠 cE\r3jQx_JRs;Y4+@WL灨!yO(#B>dڹ?Ÿ`# -%2(3M)4! 8շ^Pfgں'Ȧq(d5 hX>  >ءdla6 (0 RE@@Lz0e%@ 3z[jyrF2v:||aLhf?Ǝ+Yr63zז IOt| YRqu/gĂZFƮ@ jDR V$)03=H+:Yoq슷XAiu|Deei_ym9,s wFN~^>Cɖ^:3xy{VuD3d9Ё*.BL p %54cU\I ]ph~z^UD_۸kR׃qvwuEka0f/䵚jiږky`sWڧϕ? bA%+V6Cכv>B<Xp+į-QsS4^@nݨ-^T >K^ =Jzgy-;Hǜ%9}St+;\H:?V56Wi{Xk=_K cf?+`瞅r96Ӛm2U+fOZ'|d ZcݘFb@SZTciVy%;;7>ݴJwY<4}g6^,uI |ʉ6\!'P.I~44cXz>BDFKLas V6B,:ڂ(&d- 89s&FPZ&N Yãj3#d-$r RhLU,̯J" & RurZaB)_u[%X7h7{NQr|.Y?[Lɸ~r]ޫU6_t;pche>R_#-MռEw>_)aLը{ezуgYSCTs~…?68rn.[Nf¯%s!50oG!̺1кStLݼOٚ>dv6C%:I2Sr`KݛxsFcvX:x?>[}7z7Kh-1KO!ms]b/ {vp} ||Pq'tU!*Z)V~΅ /8l(C,HP=zӀ D*h3JyOI#r'@/I.Y/6k%lk—_cϱYMuZ}{z߶KgU"~{FrsةxAYuJQp Ï @EgnVRS){7+u6Vx !p[lN"}w92X,#1a 4^q,K k,.306b$iq-a?/I 0JS-rg#PR)9i~E˥"X` R'u&b[']gewY3XY_p6fc4kΗ3N1ՒdXun\7PƭZ <zW!qDZ61ۀFL +3dI@D${xKSM68hccXѢ~}s&!(ƍ/ >{;ȵӎҗj!.4Lě8'AJ-#X`L <⬄yY 1V59%[{z%odr`NE->C>j_v%! ׼W{+U=N_̫ۈq$zKmy0ҝC]|Tz}?WG-Q$P9!_L,~L6[ˬ6.u)B>muYH'6'e؊1WI!! li:rq9{G3 hNR4 Lx¶3c; aW[s d;\ۀB3<_A%A;T2\n;D4wu_Izk7d^|kH!r9I!yMsb'BC=X'TWlq5dE)LE[kCAwpL (7ܰ>bFN*R  -U $ҁdt2tK8NnūR_xc I˔%EXh򁧢:GgcwպFD 1""L$ 6[} ft ?ܞw }54`.`̈́ UfFx[a*STJ^Ϊ#{]5y0Am5fS `011wSu6#?O/s#e|ӮrNqmCk"&7& !Wϝ5JsA}-7Vg6V1Mge, 6.qs0;N$<Xdvq\D t5\Z=[‘ƺny6&PK+RDEe'!Rq^ hwfn~/7-j稰3hM?mSٿhV厞($[gǔRym- %)Ǯ&) d@P$|^Rt_Uh >kp3"sRe%:n\Q)FRۙ NdI~U$ǔF)wEuJm7#ns(C{՛y* 2Yw.A<հq<:&$!&kGFnp?u#0m&LшQS[$PBM) DRC n H,iF*,&ZPA B mK"EHv%҅ѰlM\/r?s(r"IanT^u/+dz8h!5gcF'uhۦVFDV2"P`h{4ǿS}~!%@F*”k"(a#cQgd9iШ-ei=4#sߧJfeAY 6Fb F^(c=AnϏPt1XWVɈ H Q0n)NbLԱU0I9Ұ˶'U%%\7aSW .~_ёiGy"!k;ng j128o|=T`f62vރJ'B)T`]GDSiڶ7rͭ *# n0Go}24+lῶ cndwrկbԂ2.&BD eh)ֽƚ#|]1DeCi!(;HȆ,HC%C[v0!2 TPA{SzPRЪUcinLk#Ȋ,BI5f%Zw- ܔZl*ňrWN>-ѾvI H4k0hiLi'w6{cwAw=eD'iP[ >OLtsp!&ʳBrll3s5֡챸MmLUgį-ЪSJ`}ev5`i 'gii Hw'9h 2N揵i8jem$(~jFH,K~|rcdH2 緒p v}YT/K0aֈG5B/83ٺ2 Q %b34bᝲDIia“rYiS-J6Grٕ֓`.&/1+𬣞%dK NE|Ʋ{պ\2A@Cƙdn\qӚ™h8dz QU6\Cf &%kxXO$gA s8&.ytaX N`}\u bn&9TɍFr| g* nE eGzP̌\+]4Ca7.yg92:Un#&,!C Q<1xẊ"̞ n )iCDTGTlw ɬSaØܯ@URFt2Hj سfsBycV2;{1l0gx\\O볓BVtU1?v ǐqMC(wʩ7{16d'v6D񜮖gՐp$a _7p zA OB#1B $m$tdXIKksl&)qIu٣L |mt""@z;q0YTcϾMenCFLHDK>]DhkE*.E5tuboG\PSY kml,e m(ABu>l%e+.|r4i[W]Ê,g>DW&R2L| yBrCT)P% a:aXDVE) r-7/Vc*Ie9I `CM2)r0#wˣ0  }m#lYkJm0Wgy HA`w-RjNAB\b@bu_dR&n$;^^ CrviͪƔR bNyQ']uy":)nFuss!H@)3rNi`tJ(O ' :<"xȐH ѿ7uN=̗bcNu(Ґ0QA'PK;щe,]vDo=ݽ͘ AnV8%XjYyU t\*`u NK807)YqN> D~!@0W}1dQTэoʕ%NYn\U؂c;WmO+Õd = @KJ !e%5(,];A`"P@f ` A,)rkLvR I Dv ݉i9ɜ 3)&' IԘt;0JS "'9'yEbNh''$MU(dC5o'd60niI83ªQX0F"Mf\Thq ,zWBS}Ь. 5wmH)z+mOv[j@=Fr+ُwncҺ#a kvPe@oJfaw` 5!$ $$TZhTDXP}N+b{׶j܈X 3AAw_OzhE"aǽŦ/U. 9$A)'缤rGY $UD[2h)#T 8pdLAg DmP@| t>lY߁FY~4ɦe:%`dŕ,DL1RImf8wR㫷o5~ML3ރ0˚&8rje;ohn/s:눩Q6F@A+{\Ȉ7 Hq2e8qѻ ^9#";CU"%mT,xh;^! f\W"Q$QˁfSx׃wZ¡z5U,xFH ۧF1 2o= 6ch@ Z\bO 9QX͌:ZTyXnb"x5ʊƚ 9g8:q PVyG \b?җJp,2B#8|xU W ۇxn[O>eZn"<~>~ kB]eV 03x1ܝ]g• .ɁZA 0C%1FEML yvJ0)ɒ L4"=|֞ѫ;mFm heَS3)u |T&$^R̄Ib<bap^ǰL+";"wsgryT& $R*,TE3NH1ݾ&o9*Tu x6]ʝ H$# N6$SAloP*PnŽs30E2Uɐ^O38 ٨cz:yl"wxSRD&~Զ5 DQǷDy cEKD~$8dnGۿܿQoP~HR=QbfH;D5N94.r)00#9yCFRD6܉K!-0"Y+ -NUZ"$E ;`JNd9OnRo89D턣+E􊅩 x (!#KgϸSl߭{gtK+l |`u2sK %O</,cţv quw]卵URQ1I: ;Uuj4ў4H:Tp*WFiTc 20 C Kq~ܝ]S MUIy0ko  (nՠe>W6NԦOER b';Zpm{"ЮXt֛SA ! *+jlLn7 a£ӛ۲|M:;nMI7O[9Eet!2g'PXquLK+=+ur= eBx gsku8| E.Nj{_6E ! -1Ɠ.=șҢӸПQkw!U:1yUyo=v:I}t97itnpxi6¡"l B) \=w38ywע)D3e a(۞uSØ੷^^q@n$Ŷk4CyŦ ̑']>]sx~T./EKiL%5~b#BqBL*~y/,ih&@ XAcoc8NBōL pZH1ⵠq QZL<V>/NK\_l)W[΂wrѹtxSUPq]n /0xhp:9UO~Xr&!*V!d>oZ %!VD EPW헎cǽl9=Lop0aK s;'8FpV!ݴffPt6< WYc5"=i̛ymCZV|#w nP3$E& ⚽(LHSv;Ue<ܨ4_Em +H[]T:E,^ArpjEN n0d5FQ 4V} h.Q >UQR@)5t. 1_v+~hvg;} pCl(>01UH$6+"u)+I`& 1ξl`g:-|`oQr>ܫKVh5P:Mb=BrɺoUonjjž L9ȋը`ۊ$Ժ)xuY`MM sTUdw3K0Ln,yfOLˆ3fܘɮ3Lbߎ`JA͢RiklЌjMosq^ ۷H2Fc‚l$B]UX l,`|嶐i*oFjUs,A@ɜ ms11B}ZB`ڙi4-;(NV!@)*xKynwݕ>$p"hy{Ҭ'BߚWw` ;Lf p $!Ao2I57KJJXb.CC#p~t[Uy|NxT; SqoP,BeQCQDlML\}tv✣ۑEn8gml+a 2E?4bk7(;Eŝm=>.72 L>F%m4gep 6>N0,X,:=A< g5Zz A_]'i" {Rp#%&8B9/`gT,&0Т9YZ}—v#̀4MW~^*T-KRB$ !EK]TQvLGpLJ?1dyO4C,ϧV-ZW*&J{KubE° WW3?uHm9~/̛Ⱦj;tj]> VVeacsIutXtXGIË{4YD%q.%!8|Ս7=%N 2_+qZ/-f%EIWvج3u$0+ahSm>!=h Ђ#X_?vnH"L0]QK!\|M/&gɥril:^)77ui~CsJS~~.G33S2s1@D6_KRVb_;_ÏD<ed_ ?s.hFۭeT?=8m|QDG'tKJ`7=z{f#MBk 9>xXwG0XM[LIM8ws8Յ*Q{+.LlT箶}3bجncnQ@bfK͛LQ뱙1丙ZoQtG].5ܓOL&Z} 4n~aђphjkuU\aofkw'*]E@?n:e%"nLtt]2(DVy{6IB|ק:\,l2}NN^>xw4FBGH_܍?t W8zI Y_˟t7PB*LȋHD}mOaZu`1|w X.G/ܣn,u=AM`Վ6[]TZIMGj]B jJ\f@S/Eigge-jL   :kKY25ECFք4@ ڔ=HS uec mfޗ۰ xt딆"TC9L2 r4NT;I5'Eԙ3&)0S jQx ѷv+ݵ*oF# w>EA ze8P*2u+ 2ne;zw `6iطmU:ZgSZ Kv$84f !.W:^&ؔx9kbp>ģNRZa0 ^T)yg{S B1C!2dtd(DO(?=d^ +»/BD]-?1oЏ}m-EsWI_ag<-O~cE`Sjs]!A)#Gըqݹ:t{ Dj"KV7?}JsZl8 A R&lJ]ZR;xJWw<jzs%ǁ֜ǎ0sfZHJpu$-(hf'VJo$rO~NW̝Ozi!6-:_bskԄy-#ʼ@5!8:>{*[OԔak ! LM0qea\.D4_>p)H&+: h}DKj܏>Wep\UA_ȦdrH!x5cI?`L(6M_b:aFDXŶW^Kp{2K[Cdw \FZ ]F[ ʸ!@̅X8A, J\@]'ty;^e5U 1I/']u]&Y4;c׹j`>k/dqmq!4eGB ;0 0fkRD!(8)n63Bn(阭tݾ YYmx9B;VPbor*MT~i4m@yC)'qIÙV8K;Z{Cw.>ypOy)'!õǻ O {l|֫MNdƒB νӱ#MhOeDt 4ҧCIt `(@* Rl0;'H9eb35d0\ %z֑Q#ڿPr,I@G=-Ll]:za>-"G%pD5M[k6BObbgOބY6vDb3(7U)Rb-7 4dd1$1@o/N.`5m7Cq#f/E A=m1-%؎ݚ}Zu[&;OPģvm [{6I$ݍn p H"t!4E+G+aj "*U2q4nEl q@?XHXmme)^9*g֭O&j*R \瓓VUfY۵Nudܰ &1ӜUI Av'~=hDm^'+x̬nR#bA>K']Ӝ;g%UQtvq) Cg1ztzf\$dN{9=\Qlhǚ x$J\^8~~N8 Z,p#8,tnݮى9.5wj#i PݶndEt>H맔,tu9|jЄg,*Sd4ʕjIo)AH!8K !bZe 08$M?W<.V[] P~P!DGtZWjU9|y_F"h{ȘvIAWJ5F?_ecmWP"*ڐ R&0dTb`~`ZGwûݭ!߿'ۜKoMUW5\6\IOJa$ͱēky v|h[JGP#Y<˲tM^D ?r_Fwq^*YHWd%WAt9c_$C2{OWa]&7Y.~p%L 0]zNpΩQ/Mkc5&&(#=ddxt4zn\Ν_sȫ<ӑJS@?s})`U7e hP8dq1|;jɵ(Dr6SKbH$icJI{~oA1~C Lu)a2CHZX"M Wz4[9WfʫcjX\n8V]-͎<琜[Ouވ7_w<+=F0)筪DyZeYO85"p#R}'6 {QH*kbimFތުVz#FdCp"~rm%~ũeLdf LT[m}tpWҔ5:e~p` ^ h$g&=+ƤΐTsޥov\6;6 "J%IuǐO4"kûnsWJErM(k '8roH\9 5dgE4jp!6\]f6fch>h^®ºG㥆‹yz̢ACA*Î, 6)0wY5̅t!wʏ^OQZR6mКKV[ZafXJx5[v@㯋QaCoM0PҐ75uG^}S{ŀ!ăjy  nbQ#o RħmvOVD$hsp zdF)A'yn5 Cj)́%$/!ivod3vf^"߆whWwD q Ld QQLvB #{Z~5uJVa>xΫ3 },k\=%m<Ų]"!]a0k&f nֳM9|8Gd'NĀLPD(G2:co׮()nBk/ΐ 0T0$=y^o9zG{D*^$!԰5}aFU3mSȯG/,m&2Ns΄ ҽCYe'rygw͡fh`&ΒGkCfηzpу8;NE7D_OŻ%,0 U#iqf=97`-ОI`SnH޼=$xJ:Ix(yY!N8Wu4e㑌}! Ƶ_Aݱ3szq C L0!?DI"Ӆ`SN$TBGOD_c2YZK  Dw\ɝqhcWm`Hnm@=4uz2ܾ'l|.67͍f65I]z6:==ӋA@rv0ٓO\^aI?0AyPvP:5Hړ}=usppw1\ö-u4VΤLSE͂SߟB6^iz*e|뎽:P%Lv 3 O"L6;j-`&PqÊ[[s. n>ʻ/bԼ /a(u9 '^`H⿌ʤ>f.Uޏy !L"eTK`fؔɥ!y-bnHJ n˦'G i4"{6pܸ6" 0 FgH¡Aߗ # RJFm9D"*Q ˟tuKgC)xdCy,\/ϟwg[LgQ$ (`[y?':R--ݷ7(c\Zm$V*viG"6 c-e,s)WbR tlf L đB5#+q} .jk5$uujL-z7΄Pv6cߏy-ƅ'Bmvr;tE%$ZO^1B=YY/9$Z6.m4Syδi ZMc !WU- 8(w!1t&]x:2yfdv*e}z"g"|Mf]QXMkndiS!bd%\zE nٔ.-a |WX`O7BG#\++HTDm(XM?p}Mup<-ߞ 08gg(3{G ]mG9Uy`&vMm,e'>.}ɢsס$[^ ,=ljDѻ\'-cQ.1M2C?PEz zrIЍoW=JTr{!調Fzv) cMZ3Ugۼf^JJJ=@Cv)tB r×;_jo^:EvM󜣟f*eM< =qWk^_j'{~v~;͜\+c'8tNn!o]sE2I Cy#9<Ƅ$?f*F( Ia\οa#ĝ\K}0B{g@dC;sn֫Bp4ӳV5 }H!34ڰ| T& $"_xZ̽O쳎 6%)o_ˋ;l2etUC7a铉p$3-h$.T(,+cMgY0VG0 D]n!2aU >lPA<@R@C~_\i:e˲#Q#>n6鐖TV̝&`2 a&Wk8E4`#"͂EDT " psL U*|Aw*!\q *(c@WhS ߶0||aY>z"m''C&zxe# <6R>zn0*r?N's#2{~[Q=_&ZPٍåBs}gq7scZ掣2!AU~XYxQ;ܚ, `ZvLm<'4{e e[4)@N4:(nzQNThNK*S=K*RBnQZU0:ݡdOM8%XF 5GP:,A٦%X㑗h\F001pƓt?)QptIVIy=,UmWSC4yoYh%ئ C)] <2R,;?#3.V*]wCqn{Wffp4v܃͚ƞ`9dD PEd]NQ +VحF^J "5L0aPumaP@% [ >}@ odo/pAM:b ׳=MP|hd^'fa:7oKrK:H U xK g 5| @:_AUpWwv@ ;@i+EKg>T0o8WP@ ~2D  ;~YsਹP]ӜUO:#oESkŭ݁E}#p*Ks=URs+yPGvA^E8~*fhapjD UK b 'C/T@Tv ( # .ˑS  o]p"<"+}_Y6*W92DF wׄk:>VEd(l':ta<")j7COY@v*:ɲuV_wGQfRu~ByY~6jn<͔C4xgwnWa_/( DR*'rRG}Iч?S}.2t{@s4oUu_v{QN@09;**q5Jۀ<M嬪E5k$z8"I?}+Ig P ud z>Sdj5NjD ϫm_Jg(:mA`yy~go'e(ݪ^EA;wYDD_.Wk/WEOewBh>k/PøU=ڝNw8t ˑs;MKA88p~÷ި(<W&'[roVDdwwY?n(c=~9CS5O8;aϵ Ȁ-#h pVG~W vS>깪Ȋ]x|mx?G ;|~l u|܎{?e8d^!Nj-eK߻ Ρ8(>&j7^sx%{o?vl>S=W⥑?އecw t?~[s wP^Wqݭ7gOJWkw:U>zScQmn"»:)uP>?|YO/ {O_%Z>_0l~^dS_ї~/8sO_ҝOpC̃+{ :*'!O X.C?B&z/kz`Sj+N@dNd.q4cinđ)ֈQJ֍ Ig[]H:g7"%د֢BF1mXI@yD4x&aē2+?[C!RDn:u)/7'0(|><.o>D^z1zgap&NnnM{kt>r /߷|+@\Iռ$HLPuSm|5믰J_ vc-ƻGYU/ G]@+~N_rA* HUttW*9&@2?r>WqPٳ_ҾF;Fe2C7IX'My,y>!t0!.7߹Hp"+dYW{~~o6l@Bv_#Nj2n>V\z~7F# v'QD7Pz3I^^HX )o3+1^Z;79?*^ҭ#w%̣ ;gdP >l;HMnv9>r,z!Q A"I2"l܁$jH9rC'.}/SNrZpp1QN0l&#hhA$`S"&551yF4ɒȪ6 }@`,Jt[ jZ 53E -sj @3``ZpEJ% haLVV&Vh T̩CSe DAd/ۍ:M ??Y N1Ml[%RB*2Έɿ `gƔj?[@d8G=Tм m2I'6.!$ғ ek{{Hc\.+OnMGss>e^?ea2~n<]6M`M ׅѲ8$Ͻ/o8fE+ R~̈́tԳZyI9%'PV C,p7K]dM)b qT)VTlT6EtX$\ 4 l5!' .K{oP00 9c*&d-JO(oχGعWV_ˌ:.gZoي} ;e]c3 c |< A%+ds_~Rrxln =+nP}LwJ+dc 145D +ӪXwurh`c9sbo]xAZ^퐳wD$Z#cȀd&tZs#ijʷOn´Bubm M03SIv ` c#(wDɜn@,@00\Cij :g]Nl3k^Q¢sss36{FFٹ(#m-E,:fPUT4٘Sv]jUTjҢ1REM ^v((,PEE@ßdTJހ Ӛ@&bS*q1A*&Pk2`SMJ(@. *F*eR* fAR#G @TiCF"J :@ b0DS:8@n;+Q4"x. c;P@ʀQDz0K|T3 &lD6EA5q%DD`&jtQQ |SQQ6E  (!Sb @L` 4  nPɈPA"DGMY f@:! X@P; lKDJ & *{(pi2`8n L8 D ȣDW&KDMd$[#N &(pCPL0xX4P/'9+p pTD)=:!@TX1ЙmNx<!} ɏU@pq̙Q|WF7]U &mG^P@mb[xpV44YToi&0.ƍQ/@0~9-J|myK7>uo :"=K&+ٓ&~ჩ?aDͥjwvOE 2c#4|zKEAΣ |A`@ Q^m>Kjks> &6e΂8׍ՓD X,up<i_9#5.Osǧ691LkeQ|DUP2"65/vH0H)x[SWa͋v;kU3zQ)2dGq %qDHwH <:|ŻgttyhOuuUm@ .R҈e,:pCW AAxӂ@_-Jfiu\s)5-A| +{vn+H(I`CBjӯጓN+,mМBKprKNfF+L:ᕶ"/Pږ70-jեid1I1EL҇4$/Q]`o%B@SKB|P AoHH">HgBcF|r0ҐCx:2?0 ݃]@Bg m)s)b'&8XDF*y 7W|#y[Wgu]$/tvZwaA)E*Vj[L]5e]ۚ|>'lsP[0WA'dqU)Bob7o ٰnvXGgfу22rRy xZ7-\ՐS,ٖZVv$;!u ^!>-ck`7T|ϩmsC MxB@j!ZC0G{#^6;ؑ2 Q D%o 4#pqyQPgfL yf .#6 aae`E噬D' *"b Waùs!aq^èi6X" L"Pr+t]jG>g 3Mޕfi(?OjA:z町 NK|RwW߇ ~g3Ѝ0ð)>OrO1W1Mד1 3IM^ /z}TPA0ɏ½!o?9h^of }60{ :L}3pcyq׻F8&7UZ#EoSݴnܿh s+yяLsŜVΚ3S&sQ+Eg:2dJr C2" @keĬkE{DJ0hhEMhS%Oiy,4b4!ZEF'I%e݁D8_~V:Foxwc/"1#ثۖ/sd{Oa6  ;#iC8NF!܏<יw8 Io42& -J=Ț(,sr2Ä88r¹ޟ-ߕ`#N[гtl+ QlM.\@ܥE TdB䫃|*q0.(#U՗l І 2Щcc Ot"σx?5p_h 1ݕK Dl0dOO12)9+ ꍽFc6[IVhe5Wo,ض07b9dܷd!t,F|6 쳟&?>uƍbRr9<'>6g3˯jQU2@Km$Xhx!\+a w1ֵ $&F|'K&`8-ENjN!xAd.d(mSRIy7aaP{&GM/ӧx6,qbPDAd_ X5`ѻ[$B#A.(fdKZ#sNƚ>p"ܫ>$\Iҍ(T: :ҳ]j/XWRi} ^1Hf<㶋48Fr# 5~] '¡dgF˞R"!{##Wޙ: {4#Jqi`M~# BW9ESAώ4_!~ g=)1Mo&biołzL$cv)yq{sH: IjL眄)!cH6>N$5¦OOra{@|hhsYHv 4piPt1Bj:4Daс`kfoB ' e0)  2MPbMT910e uY1პAI<{nHO!2EeC'$Y7]WFaJ@-ыm܇ľ-Ǡ)B3L合qNFYͰkI0ԧW`j+Q}3@"X=E\<(nSA Z-9J{+Uf4Кk-yZ[hKyM&DO04Sx !ATE`"`YǜS)%IbK;/<iv.BH ԟ6`Lc1Xd6P8N22ݕ[KƊ q0̼QyYuՅw )F#d~cz%hk+3SĒOW-WLdj[=:ضpn+R@C-I9J0FPeE)]qO&aɬ2 #3,V\4^kAP^3QG,Uz^+2`ş?U +0j&>Ujr358;hW$Dz*.'ha^MƷ)ޞ [Q]o3Ѡ Ѓ{#`܂1hH'kxŪX6k3{6<́*fuST^j5S)g^K>> KqiGhѤssPͻI+f,0-zb]H|mbRБ+Lcx4yNU ȸٞ1N녉)h~z"Ųxw)5NO'FIJoGeTdko g{q|/LY)->-phVFʶ8)?#Xm65}QH~<: "ξ6NAcxvZEhNx NV,iayq o3<^Q+1!E+1 ݖtu0g}3,uϭ% DloOn0wN'_2_FZz~9EQG6cQO2rec)Pҩ~~yL@<%~ h_INR&rŒXe\NP)~qr,vJTXiˇh: !^ )=~]W}7>C} z4PFo9 ;>+ c19V9ߪ}YsX7F<|x:k=kV;Ngu~:g ^ⓌOg2;u~z^L'[s{GNWo:-<_1;/H4>.w%_ŕP{vsl!?/a63ysg껬 sw0Jv1lOiN+w;q>rkiC8m!EIw8ew6Ls=ԅeS5Fq1c^9.aFHE@0C߇7YXv_p14<ԕO4vq@-2W{C>Ys}<fw 8#_ˉy}'Pg}@ ՜~GŵPN)8^59{;gnMej*No4út_ܺ<B;/e8243uS k?e" 0=#Cڝ^^S|pF~W+<Ҧv8}l\A_ߨp+^L-kXFdLDqB6g?1%{]_.|_UWq;>o6wK4t;n%DQ9c9s}u> ^n~=+nyy+_[R)^{|2!hze:ǣvA :=Ѵxx_2=z< !-8>@(Oj͛Vԇ0?K*1ZBp1X|Kooyx8 dm[z@2EU$}ݤ(" a19KEab Gh&;&dF_o%-"Ɏ^=duTaҊPmg5XF!%AMt?M~~$K\itn_~ǣ{?1r!L-Sj)sOSW*LYεXm=nS寳s ̟[Q;gR]kIh~i6/qk:Zl~GjGQUӉ[, R/̀wޮ!q-9 B @@^ DO<k-98ߩ Â"CCA@[ykn~~-vM}/82͎ PT$J\ЇPb k/嶙/>z`_>R3fb`xS.$EVPDӏvO[xzۏ]jƥ=ðK>=)0걔qw.gz?];iQ)/{9Yqëd>hG?g=t>gu/ϡa'Φ|")kx׬;O+>Єes];]uϿ[Z_%<#n| w Գ2ͣ-B>+H;\q;z)̡ӄPYl)f@`H% 1) $8*!d/9i}~⽿O)mnqDDTCz(x3 & @ܠ },A8X战 h@?, DC0$L/u\ _42 "mTx>"cV`sr l@c=`(0#&I{1{@X~oyO6a8#fΆ1@0%e9zxIQkNpߞ6KNUЀp N/ &nf&~^gr3e)0N[ A$͠23 2\ hlZzߣ֪l! Q!_FM;識 w]hK'r\M|E'o[V0ks<^KnQoj &ZjykX;^9B\ vڟ3^X~w|ymZbn[gnnuuYס P@0EW֑qich`β! Ij$1E$ IHPPL/cgⱈb,DC'Y^q`:ۊکb 4Aa1RG deBn!C:%Tʄ}{f"N(Bq$ۤlfXB/'$:̽ L`0i8-CG Γ m89nS[s^m{q`TS1]r0O&w'B&['+wy_{{^} {΅{] OO_}_cs! XI!U15[R|VJTJ5H*($#SjR~’5kT`Zy[D\mdUh#Tek"6.Պщ f~nɡY 0"P)nw9]Y}xYrR/v-?չ@1 u4m 7 B.] 1KZ=kCd@DQ{@E ] c:&H WMGQbi,St{83)1ref`sUYs}ź:mRAK4[vH "Z;d]1FÛu>.Ǖkoq}շ$5~+qCy G"U3կrᶙ=Vpg1=TA}mo>o+})/;g|?qwQ:XR4ZB8Ի{߹`uZҪZz o@ς)DnjhM"uxX]@Y1D<qQ^Gw~z_WnW-=߭O  w =6CrhmS5F^;yxF1RPI-{* lΔ * lb{X*D)NBZg@YtE@&zok~\)ǰC_ *ܶ˵6[RέU~+`qb(P&nZ"r梫PT$D?4!LU!T_^Zjh6}^O=))/ߏ_ųsMB'7֋VQ?W.&~ sV~:(+#=p #@pAj ѵMLN|^xoQ}O?G볳YEcz# Y 12.͉QDAU PDE` <P 0qH$Gϙ4~f_:6̾h`bb-AՁY| ؁cv@#x0X =e|VG=c>mgScilC9j:.̫deB`noq#iF/0mh'UYoE UbV:@/$$Sc*Nnl~šu`7tLHh |j:z e0y S\AyY\rpP㴉k՟OB(x ]ֹy_֬|92ҕA䐒o-A?ziR%TܰŠ;agK\QVL;\(}ҨWM04)p(LR' ;*J\5}~W49"biwDh3yk9$ N)/TԱ.5 x!3sEWݯF.OP%H0$;\ADwoBZ' r8͵@.nrd^n9 rھIѫOa{c(LJȚ$<vj!3aN1+:5ewa3a<ݬ+ * 5-߇|Aw=Jv>,:$;BT[4g>{^.NE\FG')WUN/_+ZZg }ؐ&/ڻ}m6f;͂t4e#O)AA@ J|<oVskÍʂi }ƔzyCٸ2 Mv鸼X5ԷkƬrƓ2E$bf!7QwQ ԓso#E?2g9 9׃}~ݾ_M|OmٜΓ{ԵzUqk)Se4% c%JVUŽ|jt [d?sXYb%5q,zWP_Xlୠf2]XO- ,@#_yT2q!ї_ռo/<9|>:S3|N5(ְƀ5eiw9?y .-nvn63SN7ywW3vVFyS+y(RKtz{J%-?Wu\O!N?bs2Um?9tjz hZVlخk{݃xSPlPǍ-q GpѤ8r0eIp7BȱYMv31>j Gƚ 4Օ3a75憓-|cMx)ݩvL鮲 "\TlGgt"9,A,y|x*gb3"@DKNV"ùmxw@Hr )qv);~'S [;j~i!zdm.ۍ|@רJt|YuV?Ѳ4PpfcMu.S/ .b# {]/70J~T`0 lZ,8e ڍ ݬZ ;_7'}p\OT_TRVޡ@-K]T[`Ek -?kn^Z1jg4+_A|9*@(48c. ^i&c{~ je7*oAVËymM)8kh#.=E ~"#ճL:plS4,@XV7$TygeI/c^ iwgR'gzƂ,7NtEZ I4]^I%=t^UũmWj܉~RLIN{yI6\Y͑z20QS+b&◒Y70[QC)VІ޹S*̾j aP%;ߑ{G6wqy2[3_|'lGP*G1Ki,c{wl_~,V Nf Cy&q0@ymÁQ_Νtҧi12H 5u(!>I Y# /%}T{S|%PNoæ@Gt-Di!y0GJj(9)U؛D8eA-:M Qnd7N*I:z8\aWm]ɿɹ~PgV6R/n'ͷ" )JWScgQ<1AQ:umxyd~Us9/5GХY@l`y1P<_qB Ƞ;IT5 K]G}ǺFi9~3}cUPP]J@ES|//D"qd(e3pOW}d RE( R,U` @F)bŀXFEB(E dXE,A`Db"+dF ,B" `,B)Ba"Q ,XH",'$ȷ=E38QLϕlx:_gvɋE *K9֞b:L?̞8S78ևƦ)c<~g~lxh5MmFr8%{,N{ojN'\fG)F~ҫBb}vϨoE2K dÛB@E#ỳin2;?:t/l{t)5ղ'i\жq{f6Eɽ$.{F{z1^7F= 7&\88;a7|y;qJg~}ےjvw&x n]W맳FPuϽF(w<ڋNUVEPR iSD)1hDYde\Ձ(p^oRBu[xY"Ě,=[bhI`E.8O*6 Ȋ7 Q@H"j`SZjBy$8tgn& q1>)j9E! QXULG3}Po\& -mt̟ӄYnzUf:aRAmJN7]v3^[ļ [&wU /DvUNM+1Y#[S=QTQȭ, •#?r+&hFמu҉W1J~z N޾劅&EchJp^jVκ${Nݭm=Gܟ BtQT!c1Uşz^cb )~QP._py $u݄m>>z\ӹ\Mq_m]&uַ{nE: > V@Ѕ@@$Dla[ XhE"PUVܣOzB{n[vnv0J!wQT @#6QV  s tNHb@>E<"BeAduJ*R ȢȪ2*UUDҭC&~~S?&n47 {^@ (`"z @x |D>b$$Y$~u-R] X3%wé$3tq=>Y0>fX l)FP;.ZS H!"EWtMs>tiMa@2EUvER<D[87T:?H b92^{_v?Ѳog3]WVzAST ~BB1&E Z^K48.x=5n5aFNnz.T@CDTJ :v4tTXafjɏtC퇢,k y{gEa q2j17ОүeXD]?Me_BE?N$ /vx0jZ׀Zof{VN[kwUknZ#?iCaT6\=D 0y hOߪhEnRM=>{h+9u:uS-Q/șe=R5 XPA #Kz6Ƚ: S!Ş .4bU mllеB_fւF *B3Zs;i{9 ;9&ApQb cy>u9Q#xLGnQ2Egper1SaxeU8tJZі6F\QzPlKW1*^&B= ,BivS#F")e+ŀ& 7yDR( s!a LJ3Ƒ,)J1/ PYS+qHpY~tgߩ7V$g@YE79բ>/WK!ٍ$#(E mt:5d 3 ]Qn^dq5?>LuU~C@! X`.>g mk3T}!qoLVˬyh垂VP ٕvEk! c澣eqI%[NM!mŭ#g/ǒѧ5u.:g3YGggNEW)5nNm(g_D;Aʜ`<':a|%1[ }( Ff`eҸ5ʡc(x`r Ρ[-CPad\^fR &&,X,ts}cUzT^h swPPEe>%n;J2+J ɹ>e$ʎ\U'$ꎥiTޗ^Z'%I^DwSIիݡzŕS+ytKʋ[ϡ=c 5r;Nkbec2'aE`&VeڣMpv淝 HyK\[7nʭOGz){S Ei_>C$B~!涌m1CoG z5>tYp^_F(t朡2g΃ǿd<~c8T; enאիgNs MaK- gI?κJ} (47["E"T7S@C@~ mI@ӂP P0~T8׈*Yzp9\&IfLȡae _$D5*?(]\[6n6gT??;~_st 볪U|Oj'нAvpKf\eR<~o.tž;XQ@U3xH`D> DGi_yXSL>jཝ.,s"vL$$C@`@:|TXt*,7 xY>цƬ'z L$nꁨ ONCߡ긊=ho1dk9/ҹoEUBEG` P᪔z_g.=޳Զ éD6v[)@@%Z:f;z:o#TT9B%́)ѫv2џcfzX53IGO|p}P'Hf w}ey"ԙNҷ\zzY(qDZ%<# p_fκSprwkV[ؘl?R5_s֪Bxu={PL` KT!8ojq~hm:GX8 &u`Vikb{C%n pT\]V_:DqPZ09+rmjF%n3lŕBir9Rq(+IkJu6a6 qݥ5 [ r2z>Nn0 t(4h턕W%(G}kȍ7% hR-~cR›p;-5 Yv~M frtCcvw|%DϩV囄_͋U8e{H4zn@%u[exPeooqv"#ME޳ϣ}Q \v;6A kzɺ.=]E5&J6'$BK!p)BmW ;rsD}#`ip ۮTS$*|-BkZ4_F. /FV$[x6~2a%pG~RH/ơ0M ?_&:ѫ3H-EiH} ҌkX"&0pfXg>}ss}X@ ~0(<03ZӡX=8;|VIN8ݗHB4ȜW;M$.=T=Dz$}fveH,J0B3S(!0if\BָWшZ%DJ+ШqwϷebـE :-3껓c:EƋ:o}}Kۖ'REҮ:-sFZQ#x(Y, Զ `w:|7\ 8ɕUx ;`7%fZVurGFjWyzB2q,=uUb/W/'_̬nru_IE2d:H1QKcFHRzVdi?N d\uk䕘 Ξw]!H";,3%m!yc|Pd f[}OP %%55sxl+҅ >Tov7h(+OmqK?7?)׻-Z'm } Kyj 1GuH 73!%L}P/=~g>:qv7[<;R(af@Tk8t&`M5K7΢CDnl^te㌶a}՗S-=s#0+[tcpW3ky֘pDղWU S#P彧#V>xZM2Y4@@ f:;ߐdfH9fҠ3hKWRC=Ņ2}kZq٨"j$)Qa \{#-*o0mX f8*BjEG2ؙ+El3G~rR`OAF0J!R*P#/k~ HP6 a$.AGHMw:QVnY]r; Jp8núAzEG#Ϥp?7*~ȼɦ׏u8D)i `BQgSŬ' ffV-ۮl˔vm\=$Yj7=+E[k>$Z< ڷXcz?Q b @#Ѳ5alC-33mN6>6PNYОQn }<Nݲ}%&@I:KAI̔3ަkE!-2ŪHb TC1DV уˎ r~.?m}i{ ,R ;@paPߥeoVY`{Uu˨ Ҿ{y A2U C2vV+q ]!̫ wH}9g]K{S6i1 EuvV(TI;p_yDE^T,P#&k#C[jlO=Zk׽>>tבrO,m]] Ҿ5&v:? i]"yȺJOBn8<- 2@t\[e^f-Lm QldmT^)N|.:+7h%+"f T,W_BtTw ;as9HEmm 'C+Kb1X.sG v8eᦄ)byyq\԰Z}/žAEDTȎYR Gn+%];#06 'L \@;Sg( <9ZaLiw:NFJXOz=>hWw ˙|2=u[ZZ|G`*p1Gh3t'T&Ch1&Ai*B gChD M(պs1 鮾ZʤTx Yj>xtD7뒘ЋC_Lzt|ki%_4Ɯ|ÿcp(lwk:ЁU{ț\+[u%4rˌHpVw˟K>.-: ʉ,ܲld4{*-eEʸKA>T0ԤYq/(Kd'$U٢9EDas]쀾YuRd{,N۠f)j{녿n.Y})#Q̩BaMS ,Sr}o=f.a0X~8X+Cs?DlT7.37ƗTB_x.3ef_>(Q ǒ 8 s!yn!ήEgЙ_n?{Z<ラLڜܹB8'v{δ"R)+k߄|铄n[Of0Q2Gdz1"*gM1#4G`#X 1{(0]`|&WO #f"= #0)n$슪KA'ie .81wy:QHj)'◙W_G^Ht x(=ZWʔ=>) .l,w9aZ낼ᕚe+cBBz(~CWh/+L}<&hH[ ygۅz=+hPƌqvzi|od-5lhl_x7 ɁheTGt#AKb8LG (- Y,AOQpGva,(at5Ͻ PxJt}3p$ ]XntQdw:x/^7vPp+@+ԷlL7WY[ :U?B^eDH/Sbr@:;t0*WuC})?4dpPH`0Qsb6eqeg'C+ΔR;w"-s9S&+izAQE魔MS"WnW77+KwAވlNBh,&rLzg `$ gZz/zR" 2u~sqϓX/-1lwBIU"u&] I،T ؕ烄W4kS{6-;kE1g>S+%7ANz%1@A&WТ6v47uŖs)!tg`YP]g L &E9ٮ]<½-'3SX!@6B.ΉF.8Z6{goNTZ쇗gqj:+|ژhK<䖟:J1FM1}e&{RwTz(8Ee*ȣ t-:9::i~@,)T`G+W0yd@4gɁfN1JKICY;N "RUB3ϵ,KR l`N ٵNh (;弁i ʸȅ:M5XONM\Jwø缊Aڥ7T\2ӄMB{VȹCB-0AϖEQVINYES=lixzif^i7aѻӴ|+VrV?QKgHt+]y c^ިڸ"FrKxل= 0NA[Djw]j!)2p QT̡Z!2CYXJe4q5ȶɂTxm*hQlJ9FIN@tHR >H(MكLX=F5# [Psaƥ%x$;QⴕrBD_w#&{~UnozKG6dĩ:g,qIA)ܼ1~MaK`\E\qLJh]la/qOXhJH(ZjK|c4Th3k9] |0`{y­x;V#\8Ǎԝu{*!Mұ.miqa)ՄKqt5cu.TJ@n=m2\"UR .o8sL 190QtjL.SD7Mk:L-!CykxQUL?dE ?[.=ﳑ -Bɿg++ʏRZ/x) ^!9ƛ IaWw ;UQ9 -&Wzh}2\Q~wb#DCe*n}%u bf~7{<",JC*:kwAbӇ V.4pB# [ibޣY2L*&tO➦Tc棠.7|rm\d̨:BF,DȂwyӬJf;l+.NR PZo!$}(4˪8bp>4'\ 3H-%HxAt15?LXE%hA1Fy",!."k@yCA0ki)فF%3Z$Lz5m)#  NV̇X1)w i&jH= jez=HxNHQyUy63"aI~Q?/#訯HmnBi_ jE$ͻz'Anv/eh%, L: 6`0aZ/Lq5[d4{ k>ߥs͏ietP=z:xJ+"j\Hˑor)bL'qE#'<ع8"*[&&*84Ni{hIU[g7oqW ,Nl:z~ i wώ*5TPHlmScvlЪP~#(C5?r^qACfHn]V[]:'n|"SbA*e˟LG!d KJeGE\xvhݗMrJ>wt#m#so\ (96џ J?pEVY mEIizeɕؒ sh/8iYrw-z_rK'ŀc[J<^+& xa`TF(KefQemX1}n+DUaZ6u>o+`eSgPp(0@G.e-A.4NkfrbNuZ}\pdQUU:̍J#4ڀglb( HBT)Km"q7,|5$P8%T٩}dbtL:bQWdWB{}GsLv}%n<(aWzF a MES-࿮33]޷#V6W͚Uy}&BOaS-̒sNV]̿Jy`Hi`P`-&'2܅f:;HZv^=0r8!“ѫ@ 0Á0vdc}BVI uo,qV+̜rgӂQg*رlgSw$,kHs`6b .leo(>,E]!͙%{NuT!~3cMu8-9KL4TVfl; ^ ?qm<;\e7>IBc9g Ftőjb./h4*z '-ybߧ) _ ! yʴȢ;U^Z=R 8_< 1Ƚ #40%#Dz&-}U\b]fUe5A#M+zo=`zVwcmp6 MW<z 3lϞO䍪GCvM²'+25ɕؼ&fJߢIJ6CQDӛ3S@/,C/_P9Xcߖh93^d\H-Ls1em0 \9WXcc\I`ÕCG㽵?^Bj)T'yV2|e;QN: C(^sDRBF0jRHyٕYW) ![ZՌuP@W ="V=zm,IՃQOY:/0O9qDI}Dԕez>csP+#@Yd=Lj&󢰋Oxhxk|#x-HcKȑ6%/5AK wߜ\~cAza-ARd4MO֘,ժC w fz÷d7˞aGuiaC &Hد~ ‰| ;,h KjH O5b@+!\^ TD ?,:% :ThY]9׉κ!#i!o/~Oub3+2˅HCVG AmroنB8CXEHJW[L╋'驜P5 PuY1ܝCGTo 7lMd_B^>+JqPN_v* joN- lR ŀJ g-#be)x&'8,KP+ImHیAldžSV>t5J4.U+8̣ s (6[)hKNZXF T"1#oC=`>*nu[üVNfs-b70мڃЀp X) U`w4"|*Is7EOet|JQ.ˍkLFn Oq/OߵMSN@'Y)˵뤦R,L=s?"5τ}c,˱]1 Iy -E&`YƩ`5kF#6sUoF?y8D<GZD܊iׄsZ= |F<*d}e{DU@9^^-XQB2m2|@=w<QyW༞Jεk5suCG2/hʔe;5&(aZCkrSzh&M~jھ,Wn30ޔmu@)ĺ63ǟ_; gNjiE! lQ*錦[F$^<ܾ]1( /4M#QT`?{9J !!gૄ$R}Y+F[ -"78-цBb=Lr榺ӝ6,G(9T[ SXi@T`-J-1^2{Fq`3u$:W(F[!;U5V Ju`."f$BL-iҞaw9nnu8ApS_DZF쉗(d_Hգ8dX"@3;L7n7|R\d]~}WEy'hqʂzbu?rOJ1AGց^3EJw"WAtABjԄN1mQlF6@tc]ğؽt uL>y_4]}I-p5t:R i<)!da` gk:M O`1STj3?qverJ얜j<m9`mY1{R@ȳ;(u|44ZL79"JBR8-l/rڜ3pdRpf7: uӁr{?/gS$EeԶE=8?Pyh`,Oԓ*WZywu#ͥ5kP]91?XߎsӴSqsQ֒1X^@/JېqƉ抖] 4AF4צ?dV?8 ֲDwjbsi95sg86JYd&&2,2Kx|_3oDTcߍo[;ޥ,j5I 3\s4 W y_khpiEO"AKY#?;6PϨDB?=q͉9_J2K0c 퉇J`*?[ycKK1U+@GlT$gbTHDAE%#Qcښga|6gŽc累ǂr'NjIҠ8aWGThqu+\N:ZjF|o^ {}A6H\<]?mŊT6<@8O]N+Qu[,5mAI; -el*&,5ͧ~wͱ[7Tt"32 3[ֻRAZFuXj2'AjcDRoBZZ[!3ׂ,Oecui?~u<:?d@T0R>h᧜įYLi…&,nIR`_U!v mlɠРub'E-Ԓic+xbp\n,Hk4}3I0g+SshO)@21k,>ڞ/ b{ޥ|<|P Fcb&e)(t)\3}`%lGVF1HkD[_{c ^DAE[])Y~W..8m O!Z\\*ѭ4ۑ_"(cl+e6;00e  0=D'j@I4 U^B1ЦD@60EzN{W$|{+qʓ|54*E=3H`=""7*Wq"=+FVP1N@VYJfv\aeʘJfvYo&'2Rƕ\< Mw9& ~Lb#sKc }|DkXCK"=RI˭;m攐D/HĂpG4bQ=!jDt9dFCV*(y^ED|0sRM=Sz| j3H{r t|xYDt7raPeCwt=llG)+_uK0s>ӧ\;l gi l`Ґu U]Px]4V vlFx*/CIj 8|Z ct'ON7G.VCЄYö`; H sPkHbum.%F g9Y9z L#*fsau^YVS;?Y NH# :e ^U| DY EŐǮ3p+z(O@g AA{*X@&fRItB [ T#\ 7vῧmL66g]^ǎT=ZpCVbNDy#XXFaad?|yCغ-L85f ^ЄQqm4Y>r0f+ƈմQ{K&HRyuA;ypmӾc"m8p4,$``>x}K3|״yMa P;ZLE f![-F$ ~؛EjO: mWN^|rMK?^%x32@@KaY ;-0x(#qo8CF@溩(*KcXda]R. qp5 vcC0\IUQT?u1$P8VvUbۊh!6Eho4w*GN0$pyA_.RB[W `*zSuC ; B3qO&O>䶧;[j*`BӞZA~p=XhIBc~?$qXC/] tܻ>@R'مUMa0*8gzvaW"I7 #?=t"xyFxkɿLڣoJF sbꚤ6dsږ0,c>CEUQwXy15 ~ZkR2)iyWltyp881iu6yLVm7cvkEQBtéϢypB)ISs/S"X/oqz'`@)?3Ao騯̯(̼`vZںVL,ѫܘ +\ǜOYSH;AF? ~j@f@ˋ4O5 `/Af-`\ysx?Q]K~||#8s| ]?v1uhOL|cZ]Br{AJ% 뺎FP%XMqݷ>͜@-CC=0/w(R9G+jbzro…~'? +W!ًk9|o5ǭ0Xc= GjL4dTSq_!9@RDcs𠌓gh:@> XczrKNc[msN56V03!&&+OXhvub|C^fi[\cRV}9&Pn ɑ [dWj@^nֈ˶i /=5^>u}/.{,};;/Q QhLb7D^7KV"Z`ǘ9. e力sxf[qzM! ^ *,Q`%Tn-ĕ`樻@ -Ήb bsP-}8/m<%V VX * 遄?Y2,gD dI؂3+}7Hyԇ ϊC%?ʥ<=/2Q9S@:Ԩ JA2"` :"X'Y펮u%p6LGn7>/fk\D~8 '@ Ezʦl?Qp,P$8JIG47 kY A%4SqBW!P" 6lX4VK,[/AW7{u 3`g 6JtNGX\1dhZE١ (ď›kayN īo]"PtlfBhZ0B6#/JlbMS$ɹ\lZ\[`qv*']@[mw/\^^д_槹T!TDwn-;_28;T=\Ȫ#5?qF2# c1㶛.7O:?^ D>Nݼz[( ½,Ibh6'6Q9+UG4I i)reH?t&%_EzpME&cnQ!R$Ovje1%oFSB9\6={6~}߻̧62 $Lpч+0GdXL+ RB$D`.?aVZlak]D IF}OIkjm'`c sWZUV`I]ETH'* HcSǘG"ϋvהZ^)^l T#vY$,*y*mG`TK #^]a$/#x8'N Ru74V +4wZ, 녳ɄIL]%M_x.9 E?Y T1`86L\8'PMsP~O+|y*mϒYJ;ԵDh)cQ%܅;9N.;1 Tfۗe؄{y5 itOaD: s?PtCqݕp/Qkx/чű΋ɟQ_/E4HZAЙ!r>q \y4YXЧ~dq4)d})}&=wtp6o*2Әa+-pFl:7;׿E'9/; >?Q2*@;)_)5\S/?blc:#i|8#6{@Gq ui] %JjJ/𻩫Xh& [?egDUYdկ\&-4oQLwDz/N^^my_!slVEG.iMHmj0|E.'"֟觫$F)SG}cWt/Jf,!DltN? M:m݊ ^qoI50 u|}.aIBރhsxQ[ (֠ÀK3%!uScVz$._%O);4؍ _u)_tvSQ.KU3xĕ55񅞏a::UOw&"q$W qjZTjSOzԐG&dy ^b'8ս*BKRzsR~U^vf+fNKb1\wӚi 7Ā`v}ף2$tkS^1;1X3%f x0|lၾʽ< v< OFeYtxܛ.f21yIӪ#qDžrJ2VLdD"pHCXiSOiD_*;Q2 NR%xmKTYPZS>R@#⠬{0E Jt0"@:q5h4_xA%lTц]0AsMY@7Rz(\ay+PA>T|9H~ ϰMO˓!hV:1|ZQ;A#ivh#rpM0pLʲ{Kwdy4R0q>?oo؛' n,_jcFŧFj̇:Een*?Ǒ,GN+8+YY@(pb>5HDYYa68攩 Ϡ'>b`C ~bAn +l`0C/`1Uul+̧U.Ľ}8F;A[чaUʨu3ƨU&Ke{g74xq1ʣ[ fD,UDslsPF ހӑ>t3ah- iH]b}1~^_RWf.oȌFNPFqEtmi)!'( XS1Z= Qg&d: oF#m07TW\0ij+#Y"b~PX"ytd?qF"*l?;*dY( wswF)$TV?/6zS[0A8e(@$8M:n,Ŋa:wyj{{IA2jPX)~w#x' hnS7֎i8HvV^y_ԩ,z۫_л&q{=.-~ S];ı C Cyy{Rl"{H3M3^q ${Q$r*?}!#LGoi5Y~Ͱ#kɜi"H„yrm @}V0.dH/%,` nk16< ުs,ЀM~SwZՅNK#./.IqR4*ՔŊ;""5`PDNgI߲D8f1x `:խ8XzlbFsf>qO8vi5F!̡]Qg/B{873X3$3mϲ NReO2:̵6'i):AS4VrV'`$(b>"@aGFu$Jvԏ p,, >xtscuW촹[k8H*7_ up* fT>ңBXC&_Ӱ|X)CO͸ ruCIaӛG  (Ѹ6McE;/oZe6Р棲yhZ1'fAvԯy Ȁ%bRA16t)r5rB '|Z؏$WC.tII.OSBxA|gNa!LbM6 l%ZRRg|WD3[J|)Y g ruD'ԜrύX5/ģ &P906oWbs5 J= '& o)JC±I|EMg]?* ;G!*t0AbY8>fU7&֭4<\GLA^w:l;4* Soh!"JjWM y{uPoҁxXɶ&-Kࣚ@*tdtӗ.|#w'*ٲu)FR&<'2i&z3[q$Tdl^I㓐\t-QmmDl)p؞9/~b"zC򇳙B n,;n~pĤe!Trdz!妦E2zшУ[!w>KQ~ px;mkwetߜ)M#oG-֨xi$;A'k> "fDQEX7՜J=v B3D0ߟU{1ɽh-jDZS([[(vyPA*gO&Qcv^O1~Y? ĺ$ 2?>x}$tfCV32 ԨP$Br|:߉W`0b[.Q]ؘʳxR#S%!_+ cL,ůp uLCS^*9 =Ҟ+oJ1:lBXO\QB+~t;"!3Hu-ձwFFN z#} ?+h2F*Lnl D5@ѿMHx* Ӷ@I=a0k!6Jŷ K̥9T;ԅfUNL֎zprX'2M-cn0,έ]J^_5p}97gN%>N^Wf\xNE+"RM}0Y͹֚ɜmJZ]ps< 'FVpL&nr08w^ݓQI_J QeY:4ᕸVmolyk(TǵQJssDyҭ;JJ"(8MmIL2^kI( W>>>O_oЇ㤐iH56>c[[PDH=¸3-S%U>u|qGWCܹΥ[# No*O#۳5{ =C0)iY¿: !OR߯TZ1˝?u {&93D%NT%υUpQ\B˙AA'u@efMu+hǥ"kҩpNZY/wY#g#]KC{F5p‹4 N>ifzջ>mY9U}@yp^koru׺">Z0r, hd f娇\i #QÏ~G;*ה% %ۋⳇǠih/mH|,iڡ]FKfdwa05@QczX6){2NPCVH>wMVn!H>щTaf$vI'[WR, @L$iLUV]2RݴIN=M-#[{fȫDl'|_ig۽  JummGYW3WG@> T؅}͞(]βRfsc[|s|-\ f1BJpR~X9.T=0; s8W^n$ -*\eξ룕[ZNT* QjHֿF׸v~lbh M<kS#G >;ٯLqDm"#OQIh"XlJrfvG9AyZ3 CQ, j(^dLD9e]2D0jx_HN˻_υ"36zZ |-˛ZtPA"'jlS(` +G/6c8~/@;j;Ie e!"-ꦎm,W,,d|ܵ9**܀lJߥL ޹9yE̖WPܚ&DW,(MLLU NSyrq(Zim\S1E5&u"I9𩂲˶J~:w#Ug |WV `=Pc9؄Oɫ7)%Ů)!,i\} 0VQ҈׈Nj f/ %`t𷱟džТr:#LIM0 lC/!#;et%jSpN6~.kQPwE*KK+y"?\(,5;}goArjLpLɔ91C.+io t@1F" (>@F>^[8/涹$,j:iӬA;AN6W-2݇G7Ӽ , ev0t۪HY#˅J`lh@Gj.̮w6]!c TL/6RHIq/RC' qR8ScjlŸLz?z1e@ZŁ?K;ñ`_V#' X8z|q_SmHpЙS g嬆#}X7rɂ"H6>d_~NX;j627"ʼX&m`{DgAiG{݈Ϋw?O^qسXG%SDCܵ͂c]dRIOjlXmGv,4z#1L7F,s5 jCGh4*3.$Ί=.qn$JET,*q䭅* U5=4Fa\ͬ/8 mcH),َ6bc4iSց "Hǜ1Fb7E.;ȶS>,PߞyWT)i?Xaf΅6S뀄|[TW4Ԍ=Ȁ-5wVR ,XEF=XkYUP]ΩDZ=Өq[dޙ!8|frg} f7;i=TkMWY`x/,JO^|3BjPCW¦lf]=},siTx 8 |$c;Q %aG%顁v%/ӟj`dEz=*t=@̨iACV'CqGȶ1s3Vt#Bϭ/$ܔ׽ a;'ĞFG$H=D|8@7YIP\]  KiStAhÄкɬSoaX|3g /Si(Gs2L⽖[}H&.rxoTʹv1ǧ TTSG<]}!S 51SC'-vJJ0|m{, Vc8MslS9m+`:q j$MRehh(f@Z7F47R0F뛹YΨ}}ך lj4z3 bȃ GK"9YOP`BlړĻro#י'X}ygŖ뱡+Y1%$}ݡ nqpl=^XBuFCzsj p<pWɌ &GZ4ZZhn!ҹGhSf(*k?3OI5BwKñζaM;ku5 9SA㫱GD :>z"gA>}~?1-Ρ%ǺjO>Us8$Iq K8sG C~ k3k1='FT:H&L(Gpv{!"n}(A5R[bq7AW͗ >ջ{**GymO?7H,'R`X~BYggd\EqDiJ(P7%SOف;/"' QtPD?HԐ RTE}MFgZa7f8:3T+B^&r鑎djj}ofm|B/(?7!R ³p|Gh[WٵB+;Alc,;vei1J [RB\f3zîǷ>x{g蘙E%ļjsJ>-:[˾%eo^25^mTY)-1K9z>N$Ԕ:&ڗ 2mv^ՍwrYX$el$XLZPd/)ƛX ؘ+1uKUG{[{] 8:j @lO!.CCϝw$AQ<΋ F8Z>BrqNW7ZR KJ 7-Vi@C[6ZMik$]dj|/w~e`r0VQ  ]fᭁZRQs@P94t,^Y 9wv m izMw^zԆ+??~8lrܪ6XC܏g: b_ >#qC$|;}6Fْ4%V\>iaA׎iCt;Ţg յm1x 90իi74{0R3F%#%#}[sVR01lo~&0O7gjW.$۾ i)w$^~\[g[ C)خ$߆7 acɨat WrE((;3_5o#OS9xFuSf[tǢ/#0'f1J=)11t]3:2.҉<bEDµQ> +$Xi$$M6vK K^lmK -_vٿW#Qo \s&m*rMX0%j -Grc?d \e]FuS Gd]GQۤ/!'BfUݐ:=*ݣAf՝4dHϊƂ)bs͎G>պ "̩,pPt4{<kP 7l01>=:)[DmrOꡝ[Id:˜SHV|,4N_k}aQlo y5!uN,>ğyҿ vp-{P3[ (: )eV)nz1UfH&I%8QQA;\w3Dt;<&8d ɐ1sHRCpmŎ1!VE]GglMun:_̀3Ao!TFSy qFNR͒/Lλ?XT6-}=J\Wb;.։/<(NFV"@-gm-5I9a 0s(Q I/GCiMZz7:'!0wZV7S_DXf[⌘-?`"YJl^`?뫦# H 93)o,p ϫELVJ.!KB ;_^6z ȑ ˜e|X y+f5#mQeW :^1oiQkŊXn޲ȃQ^G) | O7#oMS֩ni ڨ?2qu$ް/Kr]|]xs:_ B0[v8+qEOKi eOM3LQWmIl!/go'%]yYg@4%TzQ4"'VZz]yyn$&+L(>ZqFYZDR$-!_-)v,Ҩn{3{{j/#g{60jSR+F174i-_i2jm B}9qw}tBP!^?Pbi(; me:5]ZtR{NN 0FR#DjmHCe/+ϗ++ ۘ xK5I~sɍrsjO)FDfUͱlY%9|Zz,@k 1ƽ+ѦңS SHn"Bƕ-`vƸ ';,ǜEE\ 4:˶3i`kWy-n@Ж(kM݀tx[,{ft5i|/8FWW]ub_7SE_cLpg?:cI;uu cKm 8/V!~gCt<7Y#3Lvۚ{+p:i/C6 ^iJ}a]ѫm{cc׷|KEDp^ eēcegQ@z}T@M"AKi!sX(7ž88gў-:kBjC)RMUt> \[C# Pٰx3Jq>kJ:»+AYTͽf8LǍd> y]'Bj43- supB/0 ]F4Ĺkb$X!ޯLZ!l`I$Wg'[|+1H (>>][k{ yhb"OB<8TsUb/Mbx58x-x1m@3 m3?]$Ciob6!f뎠i'ay-"I..ӑ>l?%p p@ J In"P7)gˁ5tGeܯYGP`LyC`rӵw}g6"-lt '~1̃X7 @8Y=lb0o*@JC\n[=GmtBPrw謤Jp.HeEf:B°)74YDyI)i|hBB9 8m®9Zc5uFMlI PT*H1//Av-yMXgEǹ?*@dx4P*%U86}-FPYP``5,UmVx^?D$аW.D &JAHeg6̡o1:1?c?mu2tL ҭ߇j3"_vBjR$d4xHθ4-)P1%&h$՝9{1cub\I*8M`R< e"d3# `0&tliô"yv|&E-b]pX{3kN#o;-h?"}Pybk_/2u{p)@h  roV]%3B9Jlb^o ~G@z2eB2X'=\o*TxL+Cq;Q=H'I(Gi~&;jTQH4{/v\cW<|>I,l̀A3U/7aʛtϋh/n+"V s6[6̰5zXN3fWژ*5cN)^?nvc7vQh+`cSAvʔQ9j;m" ()O(\+7n^m}.G:G!8@#uݕU]Lqb^wt!?[*SBl6 )ޚsLYX0ǫ8/e6 ּ ;*'ތE aJ."tdžh#? G`JEHM|aeeea<b5M +QN`r2jeèPl[]5w+pܞʤA451u1T{8YiN ~) a"x$&drG]/6&piHL8 s=(]Ctr/ r묐bBMWL!LOK;&ܨ.Nbs>c&ś};"[kM+0w7 U,,A8n?@L/.کC5ppN\/ju3Dw"?p)4ku~+VdMvRB I2гmXη Pެ 8w5OABX<֊~&(e00qU2GJkᦆv`rjp).9hbZՖ&/3E vt8!So<VÓ -UqA//1ɯȪ KqTa\~o~̊|¦N?/>k`(ǘ/]5RƬ޴K=M"`DoZꮳOaA=5w>pgH\6̶Nn `k0`zv ŵb>K^YrZjm?&@,NqE Uٟ c#Z ,Kь'ʽ0Bsָ UpD$$ 쮙Dk 4|V@#1.o S ^3sWTi[܎® UQ](*vF5Fp .-rG_%eOds+"$p7!CrBazɿѢv\X*0u}a!RQ}lӑoqF2t  (o"Kfv"wt| 43N ,[/bQ?98S/u~Rz~" XOUMktgFP?rծVQy 2P=+ \̴h)^pc#[^h4)tRik /;;U='/<MOK,E8*.}W+Vq~nHJhn|garQ< `Ѷuvq;k4@/ҵ=8TIהםR"r}T5o+U4 &qVE40r&2\P*_]xq7b@]N$79ޖF-]"^*Exl$zT _fz~>B #${X¨&!=nYVfc޲P_uZeҬl{#jjb/EPj* 7 \z8 78!t-C$?]pVs oj26g + 9 z_OQO#QͶL JT&-Tr5ȋ#K7QmR:h0d1oݶdIUx49[p);CQǷcLS)%(o@ge+)VbQA3N}]; 'ޙ;w(/sĵd\020V!5[㡿%$I:Tc 2 ~h? 0.9ӠUnB%+6傻QvQ:=.5uwY1.;z(UgA=+̝Nz'(ottOa`gR%yay:IqE~b{K[QCnJDֲڨۊ|{q=&f3$y υ,Q=,~yT/.z1Dn<:˜_A>@dJ:ƼQhm EΗR@H9|qH㉼8nR@b\c3e$]&:-&Vq ìL'Fjʍddu{_TП ȧe׷wi~ߟ7J}!+-YB1Uoe1 ?^unj5KkC)8;zf 3S2g62kmoa7ҷc-D¥,gCM J-B(6C$TclWʵ *`7 FO ; #*KCb3aT6_eX/ZÚr?{bQ:pe^y\bQC[ɻ"$VD4tadnAZvn)[53Pxp{p--C53^S TǶGol#z-Կ[TvEmK}_Ϭu<ĉ4rvDpש4VmCɋdLx9-DDN7&O=.f.ڣpOhby-p"gMy12ZET}fYW6k>8hhƈhmhD^l\ lz5),}4w PhhPXto7(\}˫ h5cHGEHWxFç; EB}y6'%$nCY !=>S2l|w2O޽#Cׄ%UZ:䁉)XYP(T>mbyI*8([yA4W+&PYgq6mӈe DAyPB0)qFE: kcˡ7C`xVK|+мfCq" I>30/spf`/*d`(.'oyYjyͨ+åff H}joy|8|^by@iiGྣ#@w˹ͬx1:% b gj. xd/ ),ߑ4 T:.0uSdm\Ш:t SQ%$ 5Lyؿ0ڢݍ]ŋhIVARMˮ**tQN 2QZ2"6&PVsrTC^Q-6#l_ym??sJ gj9xKLt7*.dT8oH`xuߵZŌqz;ǡ.j}0Eg$ymhjL&s"5Ū0GĊs Q&ATs( fFᛅ~JA56Sf3EU! S( 9\ufcOlo?*RAכ֗'t)}\v}'Y8M.Oa>D`N`q_gft8H6CRy҃b~g$u0o{-!`?mbfV?\->ʀ&͢RDđ|Ěau2q/k+թR!SfYk!QVC1$$dJS(Rd3,Gwɓ4mvZ\&XX̚5 OraJy 2CXFfNȭmgZKǫ9b~5|RdzI#%/$&nDȦ3֕;!*Gegv6iݳXvL/*T:2Ὥ)W,*Q `-o<.S!XQU\o]'5k> [t2*Vm6.=8.zň p7)%ͯj y^Rܻ"=Xz*Wid?l?HquV|ŧ,e%e^U(t3bPЅ'Ҙ }w{[~_ՙ[6zȨToG SӠԙr74)b@7=WXMdOٙB|O@3>?݅-K_X0P@8ZŤ-y)i Z|$ڥZXe CBI}T:or1Vrؿ8O \k^A htӽq6p 8Q_莹OS5iD"'-Kwhإ1#G56Pwk0WgM C Zxq2M &rnm opM,| ?d}w˶ͭ6]^o:AHlלt @Uhps'6n;BN^\ļ:E\y5M`EГHsHѻrS5ƎQdS9|,E4;B\zs OO=z`2n.;0=y&^龞Q)Lw8ቡ&WLAQ[[f&w^scځ*K533MK6i&x/k|V݊ 0 E:2gYe< ,U&K:L ϗ ^B|% JhیP0<'hCH6o'~߽ĊLR~u { gi"(!(L!}W0 aË@rf-%' H^E7 {eG >70(@-;3ғ~I4YW' 7ӿj԰IRQaVH½:Ok7ٓ L(0Qr%R|n},qGSAYJ c=*Y*BDEq[EGN*CǢVWKc\pdk/^]P#Av˖COg.ؗ;}pAǔKQxDMʹM…2kBg;| xh#DO"~Ly,Xi<N{q^)a6r[KdKmQB|ݣJ(~B؀KLmMqۂOKЦ$9+7d]dKԺO^0ӑS1Wv# o☯qpiԺ31񨿶 h4CV!մ,#+`BddN۷X`Lˏ{ͬ>?~=s)cTy +6߱&^/;v^Q?MꍺS53G-W)]Sxw!GZBCݐ?Kް c+qӃ}[B4;ojn0ЫOj48%b+?9-_w5RvW*`/':rE *$T돠P~a lYʬĩ98.!c-e#f#/O҉K^胟ix})ˌyP7!&01ѳq18ٻ}RHb&4$cw\>@לCtN TkPiҜՋ@ &L@9k4n~Iߝu|@F1": ?Kf CFb (_E/cEu1bn3/СaS%&3mj;:d0l EAP[aW>3ΆCifpdɗ 9~0aNQ%Ɗ6(++_IEjl|W߷|Qb¤s+@=-v.3̗ZB?k6a.'B~7;9&}:N&n%܊-9t;VR,Rg@)ƙGV|֑:%:(r.ȶ[>7;X3W<+kUrIJLl΅MXuϺ=0'zzPS˿>?MLe)c4X uU`;aŲ:{SL '9VV+#IT*HWNo!}.=v᭵ l7\u [ ɠxNt1#EGiHŠl5aW`a3l1TU.:J_ ؊z:#"Q⫕&b~c]E+@WH5< q)m{B*f&1Ģ(ij׹)ӣCYTV6b3 +,L#(J GwxǘM*̀T/l {5 E?y'6{oݻ$g7P"*yBӟ%P"cdΑ;޼vܰȴK`3Y4ZEIB5Ic8^|;'+3ҐJjɩ < 1<2=gׅOh$:vϞFjO kczY &+"]mc|UuHN J#Ӆ^ J#VCoM6LmPllGv zjtq!* ))P"Z\qa"º4\EHվ_mGc~ٮǒb!kfp*;=wCN*X gx9<ϷkcF# .hrQj7I+6ohR +QY¾4ptO` ̒(;ZZ+>)W_YHy^fx돗:=ӑawn WIP%G`ir H%p;VEŰŠ;įxޜ條h*Me4;/ґJ; 'tt2҉ f^雮cEs<-rܼo Ԓ ]e' yRчɎl`$AW{Kƴ}tdCu_.̈RƀG ׌`}g{Q$*AY)`鴖zH "t\28!D{5"L^fn0#e%C#̷rI%jzt[lWغPq=}p}}a *^I!EpJ奆2YGa F8OȌaqg e,#`6\T:J s+M3!쑅 יzmq*(-oܙ#F@^\C8A8 :(i|~zCS2 BZ1{Xsmv ;QŦa$z6 !84pjxA: .>b9"&CQ ,$w.ٰV!}`sҾlAs4v!|fJxG"M%R= %RUW}J_Lw\` 8% rʮ}`v/hf` ZXw{US '|rC}ψ%Zޯ ] f7e/T,Ty\y4kW ~Al诗c=t(ׇgT,wH=5 2߰f!0L&ǯk Dt<2Ɓn_RV2Ð /:1#GSwCeP&/>hhߢݙDm=R`OAasa!'3<YkG)Y_H7!qfM;cb "qa@^Y2Ro( '^w\9Q:|Ojw6DSlӇt%*?!'_K 97Pg(S ;fSB}(W UgIi> [2GEʥ8\{s12h7{v{]ɍx ~Y6B,em#ܿsI] d%N.v\hu|&Go7a 6HP  ?ztV%ICpE!ߤ&7!ׁ3F DvtÌj;gE&BLd7Xx饉svّ/*'Bˊ5'ku~v0!1kJ`XZ}vuiqh:Z3`Ā@K2I FLe )2Fyy9_- )9I\5gP=㢵ZI G:f9; #J$"Wh?bƼU>I @˒Kz\%mjw=W'oGy =q0: NcP4 @#73iDA[GPa`pj5~D]FILJ5魹ѻPUO͈{y}ځaTbu[d(; &$n36/ZQXPfMXLe؛vSJyWws,m/s_3'8gc{hUtSkK U εDU&5!i4؆7ȿsIe8h42F':)r8!Y(dEC0=Eq0op"lWw``ա+^,2>.:iUg P 9WJ)0Z i)c:*ޑЩTMEbYo&$ukzzcy|?}uU9B)/hnpyuáX ׹);'WPAB+d"D8Ńŝ\_M4GX$dTk VR jcy_Ѓ^{8Jde8 "XqLTTWKT!?r'rZ|Q.sb1~Bop^'Ք~hA{!mHQ[R0g/l3}Țϭ[0ƈ=M%؍VnذUVP$pPWE;X~pb.~}+~!ĩ\uyo~zZBaAdB&(xϮ-cΊ)cQ6EOQlv+UW4S;db-`OJiS`@dCJU! 6AN N%'lѬ:<d^WFo/XmeQRx /^NqDO3 ]&r:n1z lA/?eŪ|nTVeFZQ%" 9KcpăUsɬh :YWۥ\Q.H5nH'7-ozPK?R4Rz0-Mu? ]4. Zj1AxPUʁ+<h٫2NY۽ytH.Y}{4ni*Sds gȲt&>nivǔ9 7M?LßL)7%}S?jJ~8{N#~RLҗ~,x!/G:c&3%;-gUy)ҿ?h=Pf -蜶8kG IV(a˱~sp k)\s(f%CNk!)sZf 57vVlA/EgbzϾ#a kzثD0`oM䋜& .)1|}|fڣE b[Z]DPRr^Q'A{.AJEF݀Q߄†rW=={.>MdjcSHρ[ Gh#˝2&w»YBSK c.hW hi-'ȡ@xH2bBw#J~(4f-$%1Ҭv-2w퓡c2/Z@y U`^. MXzyt$8C0e[7j^@K:/<D'M ~RO"x@BRӸm( UtXmVEK{u%*d+Az y388F m7~5RL֏_Pf"q oAx 8:CTuhi·ly7gT;v}Ϥ&MEp\n*KoUKZw Qֹ[_@򀝏4)}(K\qz9mbWOkL~q/GȥtcR}VtbXKIE\x>"kdVC&K<3ĀkHt (dMY" .ӛtKRLNϕ''gިvO//fs*uq79fi]cbg[|13zfa+.. 4(`ykIްTӺ2;T'\}ĂdbûD| wg>4bRl D3EoαY%IJX$^ *xQDV% &t+΂?JE5Ukę K o21t9&:.͌ZHe wB`O 6Z8(Xzk}.,q+yFRɲ=^;I"9ֵ׿?` lgjy*J{#S5+EM~|O iRlm-!!+&ވ˳c9Zg95ZN(|-cT&\x =Hhl)InB# Sy9.ʒXT̍~'FaTb@ydr;9n> -GcθQd6R,BD]EX٥;̊l}~ilbԂob@}=`[0х+ؤB- =̾82"=v[ͩ$ SZ#!E(Pv16oȾ2E~|T+:^(ZyzM;fF^KQColŎjY[8=niHӒ7-g6Tc`~be܃29S>x vJc&O(T$%^̄Z2]3i@TuǺ?}4eZ+ou{d  gvNWb)tUl<^ҞKC)FADBKƖ>‚d2l(n5"Ԁ'Y},$dAyat)vy"D*m1?iكKg+odHE@UBiSYjWU9J Iؼ js[|ëGp k]!Bq5Xz3z9Fq &#Xuw+ vn!d)#&?_J'liǝ 4 Bcr~UYzNjm KZ$o˜ s-RNcQ|dHXcdVϽAkgژi1{=U[S"+XAbPufs@eiDN+.|D䁷"PCgc9iP{ogr4G@V"w~BH@dh{Ŝԗ)b!Ǫ5wBAzV(*C0ZI(,5 omW7wu&+׳ml`tЈƋŁ!Vڹ7ݾvѵx24{5Ğ\xsK޻]bK6Q]5maA5Ѿ2e4.3 ML?6rre _\ 4_Wr1CqBw|Bp>23LJ r΋ٕ;Y:ӆyQWfb𤔺qĻI%_2Zhw escTvUqm v}Э%IN=\ҭ@-d q&_=WqNCM]]ce5[~+f5xN"26:hvT^b^rn+!5kcM!6t%D==Rs\P] ! /˒IfX"bkd-r eg~[͈[D " 'F9wl",6iG$fnM:YfOc. _')m\ToM|ptXjJJql$rO-;]2VꏁԖL_6n$a{@FP՛br 3+oY}xKb3K[4)epp#<^>tKf'T?fJɵ??qr٪_ԓpX)FԮP'Kp y[UR5k믖xju=K隤30 ~W'^AUF|,6Oca#e KL"4G׾ K(̵^>cd;^wڈmzEt~2>M ߧuTAlS73O,B<$.Ç]2ȎONސRF^ra u}n؆M\m¡= yuH bk#|: LOXD˜ ?M)]Κd0[Gm*\_ApP)W]+Z7Jα58gv<ɧ*LMB ={_sSYɗ=Qt{mlY}fKgۺjAzpi%˷i9E aڧU,#.`$ЬH7zj'3n"$0$9+skfϞ& }Q!~g3_=͸W=4IԖT,o)Y[}o;6Dc`UXdskl+) < /wMQ\z֑DxHVN')g:%[[؛$ESTK=ͨˮ%19dW"*gSzLHKNA{3@YJ`z8Zy%' d&sf1Lck-MW4?O4D!(Qd+pwXKysa_e~=TUbiY <̱dGdH*cm D5A~@L)}Jņ'}CrNR?8'.7~,ly Ah|$Vv6`ytU12*UxG݇|nRI(IFu#Gc)f4baN'a< _@ bA̪  :iV):EQaxW^SW3ixL/4රݹcK):1S_k@,N ~fZ غXp%įu[-=*͑OX((v婡6|uPskU<1H`ZDED*|®ЕU9ܹ_lpc,Y!%y}B.'ٯĐ@ʄc|ج)$CQI0}W/e\g`kp ^0i]>> $PXס),eku]06†- +_1?~';n&e[SVw` NlGog/F\cFb1Vlǟ.I$V# 0[*= eȧсew0Ͼ|%Dt_=gؗ#f*@d{AN < >%eőR A8]ROG7 -EY|"rbC`c`lR-ߘG &65[񻇧B7c !Pfz3TyEgvo]}_HoqoQQ}T6b@a>UR?L1-5 hIRxѯ RI)=FFӠhAJ,)²=}G*CFEж@K~R*sL|=JTv"!@T;\ٟ?jNMPQ;bEߢqc0/6o=Sd*2æz:؍M|%z8睐pY& 1ۍ7P*.bܥFŨPe_zDX(+t<񷉖ݠ/tY=eS,j%IZ\&6p9g4'FlU5 E%ms}ano@6r͗)ZJqdWѧAQٙ,p>6AH@{&\Ɗ;af?)f*x׎rr$_< Mتz4ʰ6̳)ʤ$Dp6)Y/lR*"u?$uT85].óuszZŜ맊P[Ow(l6Ѡ%LNIs&)cؔv9:/O>8{n駌DB/F/aJkyͱ Idv2$A_2;bD7O`Ԓ@nۭpwCZwڊ:9ᆴϪڛh&-V;Ͽ:[W P mw':jWRc ̉|Vcti5={ / N\4ݜɬ~N0K:ޠwFXΠO\.ZPS7,y{/C!:Lta%% RФ0ڿZTejk˖Osd̑~$V餋Nw Zx,Ts+m~ 8 - [`)輘$@p Cwi-ipZbxF"0;XْA# 1WevW O˫A%M#x)2G鈵̑m:[Y@<,mv]=b !dE΢e׈fOVhsg]crMj\Ϝ(Ab_xsMi@0*:%b[$ l:PQt炔wE+s7 Lִ-ndqV> Ken9$Qvr(*s}zЁU/32;bRGàFnVmcZᜤj<,g^0'-e7t\nW0Aʆ/Tۿ/GŮxܡ2hܥpOhMps^xw϶k}np{+n V5̓UXuU8<]2Ìw ZMV0)fN64ĉݲ'n U];b wI_syo غ(tlF}i`'g'Jl^ y imdb|>"N,/qe^tUقگᾣ[7c𨿱U3f~LR4=)f` ΒO'.TXs+Ȼ"Id1Z0FyRtp*M#r02h4 GvJ8 xqc/wkP|o4QߓooSZRdSl9HJFKu>OH,5 d3 o5% [SvaZZeO;w9.E sdAڕ_S̿`=mykw1`2 zLKo;,yoiÖn>!ʡ'eh-~Ҕ-ؤZp{ [`2xq@?Րo?%T@rm%kd(-ݡO۬Vk ږGxj[{!Mܥ ez $6WL'0P^|(5{c!9 Ȭiwk)ŠG 24$7B!Y:AW:@n2CCKq(avn  Qehf-8wnޠ/Ri=+t=;F| 0jaZY{d8%+_2_ WI&DϪ&б"AFRy*PzqG%HId#ajbK9&HV>>{]qWTs^d'ð |>n. .μE]鿦a^ Zk0Lu˱ 0Kr99ql˽3B貿M OUDK߲%L90qp\3WZ8%I:PK.4QL Ga&`TK8;ԝ%#,lt6&8źOl1\7t1&33}3S `1܆kˑrNw4\f69뤘Diil|7嶙̪w g.lѫ;Dإ}@iMk^DtqFC2PpGT<Ԕ$Ol͙>j8+ C|Oni5eLP#vb{}p[\.VD tR3p04 HťZB>2Lro,XK@4p(2_^*#Ϲ}8ܩ&'Zb#Spu$27aJnfL.Mbj]qleqRH[B6R zJRHGJr=KAor*[CWE ,No٥mQmX(7y/buYt&כG{ ֦Z.&tāc犦r0  ^ӏ6>UOG"#)w0ZePYnW~xޥ/:h~M7.+*Nt!:Q@x[-|򲾶j:K27`"3Ҥ!%=Ox8- INKpo2ƭTdUÎcs0gUw@@g m>kf(H")'_N` ׹BW-B7d5ݴ폪4$aCq*HSI :EG&YL ;d*zw4TB:|zzI7M{Ї3ˠ: Rv:C^{,S3c4;Z; TpN)Yc&B<{&6xˬ<) YWy\';sOj@SRTU1I1axZ2]H.&dw䒽.41 *GIE_;m N^٤t'td !b*"}8FjoVd*cܖO7.&j YZ