samba-test-4.6.16+git.166.8fb11cda200-30.1<>, A] ͎/=„pD)j,tHό WhDI#߇ݱs*BrئD+ٺ HLax`t!G I?LDg`66^C(wa?)1wtF_֬$Em B(csQhT22KC<?d ( - Y  5;D t        `  l   D tl(()8)$94:a>S@bFqG H I XY\< ]l ^bcdDeIfNlPud vw° x yqzCsamba-test4.6.16+git.166.8fb11cda20030.1Testing tools for Samba servers and clientssamba-test provides testing tools for both the server and client packages of Samba.] ͎cloud103xEopenSUSE Leap 42.3openSUSEGPL-3.0-or-laterhttp://bugs.opensuse.orgApplications/Systemhttps://www.samba.org/linuxx86_649//|q8! AH 큤] T] T] T] T] V] V] ] ] ] ] ] fa762a48e2667a4402d139ef7885f7e1a094475ee7398de849e8a32fc79e127fabc5a3e8c6753806c74b1fd3de44e87066aae51625fa4ba606b3d5ff29a4efa23f2e3ce2810a570731ad880dec59e70e4d6e5bc1bb4e382181f697ca24e7b78122397baf72494ba3f29fd9bdb33aeb7d7d23953ee7b986a6fd82d0a5b99c2748cc6fdee5d04a17ed76e0cf09bfc848dfc3174c2dc87df141f507f2235118afc5859a090ae6f32cc9b048c3dfac3418b2299a4e79918fdf2f84c2a5ceda526328rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootsamba-4.6.16+git.166.8fb11cda200-30.1.src.rpmsamba-testsamba-test(x86-64)@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@   /sbin/ldconfig/sbin/ldconfig/sbin/ldconfiglibMESSAGING-samba4.so()(64bit)libMESSAGING-samba4.so(SAMBA_4.6.16_GIT.166.8FB11CDA20030.1_SUSE_SLE_12_X86_64)(64bit)libasn1util-samba4.so()(64bit)libasn1util-samba4.so(SAMBA_4.6.16_GIT.166.8FB11CDA20030.1_SUSE_SLE_12_X86_64)(64bit)libattr.so.1()(64bit)libattr.so.1(ATTR_1.0)(64bit)libauth-sam-reply-samba4.so()(64bit)libauth-sam-reply-samba4.so(SAMBA_4.6.16_GIT.166.8FB11CDA20030.1_SUSE_SLE_12_X86_64)(64bit)libauth-samba4.so()(64bit)libauth-samba4.so(SAMBA_4.6.16_GIT.166.8FB11CDA20030.1_SUSE_SLE_12_X86_64)(64bit)libauthkrb5-samba4.so()(64bit)libauthkrb5-samba4.so(SAMBA_4.6.16_GIT.166.8FB11CDA20030.1_SUSE_SLE_12_X86_64)(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libc.so.6(GLIBC_2.8)(64bit)libcli-cldap-samba4.so()(64bit)libcli-cldap-samba4.so(SAMBA_4.6.16_GIT.166.8FB11CDA20030.1_SUSE_SLE_12_X86_64)(64bit)libcli-ldap-common-samba4.so()(64bit)libcli-ldap-common-samba4.so(SAMBA_4.6.16_GIT.166.8FB11CDA20030.1_SUSE_SLE_12_X86_64)(64bit)libcli-ldap-samba4.so()(64bit)libcli-ldap-samba4.so(SAMBA_4.6.16_GIT.166.8FB11CDA20030.1_SUSE_SLE_12_X86_64)(64bit)libcli-nbt-samba4.so()(64bit)libcli-nbt-samba4.so(SAMBA_4.6.16_GIT.166.8FB11CDA20030.1_SUSE_SLE_12_X86_64)(64bit)libcli-smb-common-samba4.so()(64bit)libcli-smb-common-samba4.so(SAMBA_4.6.16_GIT.166.8FB11CDA20030.1_SUSE_SLE_12_X86_64)(64bit)libcliauth-samba4.so()(64bit)libcliauth-samba4.so(SAMBA_4.6.16_GIT.166.8FB11CDA20030.1_SUSE_SLE_12_X86_64)(64bit)libcluster-samba4.so()(64bit)libcluster-samba4.so(SAMBA_4.6.16_GIT.166.8FB11CDA20030.1_SUSE_SLE_12_X86_64)(64bit)libcmdline-credentials-samba4.so()(64bit)libcmdline-credentials-samba4.so(SAMBA_4.6.16_GIT.166.8FB11CDA20030.1_SUSE_SLE_12_X86_64)(64bit)libcom_err.so.2()(64bit)libdbwrap-samba4.so()(64bit)libdbwrap-samba4.so(SAMBA_4.6.16_GIT.166.8FB11CDA20030.1_SUSE_SLE_12_X86_64)(64bit)libdcerpc-binding.so.0()(64bit)libdcerpc-binding.so.0(DCERPC_BINDING_0.0.1)(64bit)libdcerpc-samba-samba4.so()(64bit)libdcerpc-samba-samba4.so(SAMBA_4.6.16_GIT.166.8FB11CDA20030.1_SUSE_SLE_12_X86_64)(64bit)libdcerpc.so.0()(64bit)libdcerpc.so.0(DCERPC_0.0.1)(64bit)libdl.so.2()(64bit)libdl.so.2(GLIBC_2.2.5)(64bit)libdsdb-module-samba4.so()(64bit)libdsdb-module-samba4.so(SAMBA_4.6.16_GIT.166.8FB11CDA20030.1_SUSE_SLE_12_X86_64)(64bit)libevents-samba4.so()(64bit)libevents-samba4.so(SAMBA_4.6.16_GIT.166.8FB11CDA20030.1_SUSE_SLE_12_X86_64)(64bit)libgenrand-samba4.so()(64bit)libgenrand-samba4.so(SAMBA_4.6.16_GIT.166.8FB11CDA20030.1_SUSE_SLE_12_X86_64)(64bit)libgensec-samba4.so()(64bit)libgensec-samba4.so(SAMBA_4.6.16_GIT.166.8FB11CDA20030.1_SUSE_SLE_12_X86_64)(64bit)libk5crypto.so.3()(64bit)libk5crypto.so.3(k5crypto_3_MIT)(64bit)libkrb5.so.3()(64bit)libkrb5.so.3(krb5_3_MIT)(64bit)libkrb5samba-samba4.so()(64bit)libkrb5samba-samba4.so(SAMBA_4.6.16_GIT.166.8FB11CDA20030.1_SUSE_SLE_12_X86_64)(64bit)libldb.so.1()(64bit)libldb.so.1(LDB_0.9.10)(64bit)libldb.so.1(LDB_0.9.15)(64bit)libldb.so.1(LDB_1.1.14)(64bit)libldb.so.1(LDB_1.1.25)(64bit)libldb.so.1(LDB_1.1.27)(64bit)libldbsamba-samba4.so()(64bit)libldbsamba-samba4.so(SAMBA_4.6.16_GIT.166.8FB11CDA20030.1_SUSE_SLE_12_X86_64)(64bit)liblibsmb-samba4.so()(64bit)liblibsmb-samba4.so(SAMBA_4.6.16_GIT.166.8FB11CDA20030.1_SUSE_SLE_12_X86_64)(64bit)libndr-krb5pac.so.0()(64bit)libndr-krb5pac.so.0(NDR_KRB5PAC_0.0.1)(64bit)libndr-nbt.so.0()(64bit)libndr-nbt.so.0(NDR_NBT_0.0.1)(64bit)libndr-samba-samba4.so()(64bit)libndr-samba-samba4.so(SAMBA_4.6.16_GIT.166.8FB11CDA20030.1_SUSE_SLE_12_X86_64)(64bit)libndr-samba4.so()(64bit)libndr-samba4.so(SAMBA_4.6.16_GIT.166.8FB11CDA20030.1_SUSE_SLE_12_X86_64)(64bit)libndr-standard.so.0()(64bit)libndr-standard.so.0(NDR_STANDARD_0.0.1)(64bit)libndr.so.0()(64bit)libndr.so.0(NDR_0.0.1)(64bit)libndr.so.0(NDR_0.0.3)(64bit)libndr.so.0(NDR_0.0.6)(64bit)libndr.so.0(NDR_0.0.8)(64bit)libnetapi.so.0()(64bit)libnetapi.so.0(NETAPI_0)(64bit)libnetif-samba4.so()(64bit)libnetif-samba4.so(SAMBA_4.6.16_GIT.166.8FB11CDA20030.1_SUSE_SLE_12_X86_64)(64bit)libpopt-samba3-samba4.so()(64bit)libpopt-samba3-samba4.so(SAMBA_4.6.16_GIT.166.8FB11CDA20030.1_SUSE_SLE_12_X86_64)(64bit)libpopt.so.0()(64bit)libpopt.so.0(LIBPOPT_0)(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.2.5)(64bit)libpthread.so.0(GLIBC_2.3.2)(64bit)libreadline.so.6()(64bit)libregistry-samba4.so()(64bit)libregistry-samba4.so(SAMBA_4.6.16_GIT.166.8FB11CDA20030.1_SUSE_SLE_12_X86_64)(64bit)libreplace-samba4.so()(64bit)libreplace-samba4.so(SAMBA_4.6.16_GIT.166.8FB11CDA20030.1_SUSE_SLE_12_X86_64)(64bit)librt.so.1()(64bit)librt.so.1(GLIBC_2.2.5)(64bit)libsamba-credentials.so.0()(64bit)libsamba-credentials.so.0(SAMBA_CREDENTIALS_0.0.1)(64bit)libsamba-debug-samba4.so()(64bit)libsamba-debug-samba4.so(SAMBA_4.6.16_GIT.166.8FB11CDA20030.1_SUSE_SLE_12_X86_64)(64bit)libsamba-errors.so.1()(64bit)libsamba-errors.so.1(SAMBA_ERRORS_1)(64bit)libsamba-hostconfig.so.0()(64bit)libsamba-hostconfig.so.0(SAMBA_HOSTCONFIG_0.0.1)(64bit)libsamba-modules-samba4.so()(64bit)libsamba-modules-samba4.so(SAMBA_4.6.16_GIT.166.8FB11CDA20030.1_SUSE_SLE_12_X86_64)(64bit)libsamba-net-samba4.so()(64bit)libsamba-net-samba4.so(SAMBA_4.6.16_GIT.166.8FB11CDA20030.1_SUSE_SLE_12_X86_64)(64bit)libsamba-security-samba4.so()(64bit)libsamba-security-samba4.so(SAMBA_4.6.16_GIT.166.8FB11CDA20030.1_SUSE_SLE_12_X86_64)(64bit)libsamba-sockets-samba4.so()(64bit)libsamba-sockets-samba4.so(SAMBA_4.6.16_GIT.166.8FB11CDA20030.1_SUSE_SLE_12_X86_64)(64bit)libsamba-util.so.0()(64bit)libsamba-util.so.0(SAMBA_UTIL_0.0.1)(64bit)libsamba3-util-samba4.so()(64bit)libsamba3-util-samba4.so(SAMBA_4.6.16_GIT.166.8FB11CDA20030.1_SUSE_SLE_12_X86_64)(64bit)libsamdb-common-samba4.so()(64bit)libsamdb-common-samba4.so(SAMBA_4.6.16_GIT.166.8FB11CDA20030.1_SUSE_SLE_12_X86_64)(64bit)libsamdb.so.0()(64bit)libsamdb.so.0(SAMDB_0.0.1)(64bit)libsecrets3-samba4.so()(64bit)libsecrets3-samba4.so(SAMBA_4.6.16_GIT.166.8FB11CDA20030.1_SUSE_SLE_12_X86_64)(64bit)libshares-samba4.so()(64bit)libshares-samba4.so(SAMBA_4.6.16_GIT.166.8FB11CDA20030.1_SUSE_SLE_12_X86_64)(64bit)libsmbclient-raw-samba4.so()(64bit)libsmbclient-raw-samba4.so(SAMBA_4.6.16_GIT.166.8FB11CDA20030.1_SUSE_SLE_12_X86_64)(64bit)libsmbclient.so.0()(64bit)libsmbclient.so.0(SMBCLIENT_0.1.0)(64bit)libsmbconf.so.0()(64bit)libsmbconf.so.0(SMBCONF_0)(64bit)libsmbd-base-samba4.so()(64bit)libsmbd-base-samba4.so(SAMBA_4.6.16_GIT.166.8FB11CDA20030.1_SUSE_SLE_12_X86_64)(64bit)libsmbd-shim-samba4.so()(64bit)libsmbd-shim-samba4.so(SAMBA_4.6.16_GIT.166.8FB11CDA20030.1_SUSE_SLE_12_X86_64)(64bit)libsmbpasswdparser-samba4.so()(64bit)libsmbpasswdparser-samba4.so(SAMBA_4.6.16_GIT.166.8FB11CDA20030.1_SUSE_SLE_12_X86_64)(64bit)libsys-rw-samba4.so()(64bit)libsys-rw-samba4.so(SAMBA_4.6.16_GIT.166.8FB11CDA20030.1_SUSE_SLE_12_X86_64)(64bit)libtalloc.so.2()(64bit)libtalloc.so.2(TALLOC_2.0.2)(64bit)libtalloc.so.2(TALLOC_2.0.8)(64bit)libtalloc.so.2(TALLOC_2.1.0)(64bit)libtdb-wrap-samba4.so()(64bit)libtdb-wrap-samba4.so(SAMBA_4.6.16_GIT.166.8FB11CDA20030.1_SUSE_SLE_12_X86_64)(64bit)libtdb.so.1()(64bit)libtdb.so.1(TDB_1.2.1)(64bit)libtevent-util.so.0()(64bit)libtevent-util.so.0(TEVENT_UTIL_0.0.1)(64bit)libtevent.so.0()(64bit)libtevent.so.0(TEVENT_0.9.12)(64bit)libtevent.so.0(TEVENT_0.9.16)(64bit)libtevent.so.0(TEVENT_0.9.26)(64bit)libtevent.so.0(TEVENT_0.9.30)(64bit)libtevent.so.0(TEVENT_0.9.9)(64bit)libtime-basic-samba4.so()(64bit)libtime-basic-samba4.so(SAMBA_4.6.16_GIT.166.8FB11CDA20030.1_SUSE_SLE_12_X86_64)(64bit)libtorture-samba4.so()(64bit)libtorture-samba4.so(SAMBA_4.6.16_GIT.166.8FB11CDA20030.1_SUSE_SLE_12_X86_64)(64bit)libutil-reg-samba4.so()(64bit)libutil-reg-samba4.so(SAMBA_4.6.16_GIT.166.8FB11CDA20030.1_SUSE_SLE_12_X86_64)(64bit)libutil-tdb-samba4.so()(64bit)libutil-tdb-samba4.so(SAMBA_4.6.16_GIT.166.8FB11CDA20030.1_SUSE_SLE_12_X86_64)(64bit)libwbclient.so.0()(64bit)libwbclient.so.0(WBCLIENT_0.10)(64bit)libwbclient.so.0(WBCLIENT_0.9)(64bit)libwinbind-client-samba4.so()(64bit)libwinbind-client-samba4.so(SAMBA_4.6.16_GIT.166.8FB11CDA20030.1_SUSE_SLE_12_X86_64)(64bit)rpmlib(CompressedFileNames)rpmlib(PayloadFilesHavePrefix)sambasamba-winbindrpmlib(PayloadIsLzma)3.0.4-14.0-14.6.16+git.166.8fb11cda2004.6.16+git.166.8fb11cda2004.4.6-14.11.2\ڭ\\ \N\}@\\\X)@\@[%@[F[z@[a[WZ@ZZZYY@Yo@Yo@Yo@Y3YYu@Yg`Yf@Y7Y7Y, @Y"X:@X:@XXsX@X9@X@X@Xg@X,XƉX@XYXe@XX@X@X@XWXAb@X-W Wv@W$W;Wu@W#WW W@W~D@Wj}W_WYZ@WYZ@W=W(W!@WW@V3V3VV'@VՄ@VՄ@VVIV@V`Vl@V@V@V<@V<@V@VjV]VI@VG"@VG"@VG"@VG"@V(V'~@V V7@VBUYU@U@UUAUĝU@UU@Uy@UUrUq@UhTU_@USaT5'@T5'@T3T12T->@T->@T%U@T$T!`T!`T@T@TSS<@SS@S@Sہ@Sہ@Sہ@S@S;@S.S@SSSS@S@SS8@S}SxSg}@ScSZN@SXSO@SM@SM@SG@SG@SG@SG@S:@S:@S5d@S2@S,)S L@SSSS@S@S(S @S S 4@S?S?S?SK@R@Rb@R@RRR@R@RRRRRURURURRR&R@RR=R=RʚRʚRʚRʚRʚRʚRSRR@RjRjRv@RG@RG@RRRRR RiRu@RpRW@RUE@RUE@REs@R:@R6R4OR2@R(r@R%@R!R7R@R@QQQ@QQQQޞ@Qޞ@Qޞ@Qֵ@QQo@QzQQɆ@Q@Q(@Q@Qzl@QdQAQ,Q+R@Q@QQQ@Q@QEQ@Q \Q \PP-P-P9@PPDP[P@PѬ@P @P @PPP}@P+P@PP@PBPBPPP@P@P*P6@Pd@PoPoPoPoP{@Pb@Pb@PWPWPQP,PPP H@P H@PP@OjOjOORORO Ọ@OȮOȮO]@O]@O OE@O!O@OOO@O OoOc+@OaO`@OKp@OB5O>A@ODavid Disseldorp David Disseldorp npower David Disseldorp ddiss@suse.comSamuel Cabrero David Mulder Samuel Cabrero Samuel Cabrero ddiss@suse.comscabrero@suse.deddiss@suse.comjmcdonough@suse.comddiss@suse.comscabrero@suse.comscabrero@suse.descabrero@suse.descabrero@suse.deaaptel@suse.comnopower@suse.comnopower@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comddiss@suse.comnopower@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comdmulder@suse.comnopower@suse.comjmcdonough@suse.comaaptel@suse.comkukuk@suse.comkukuk@suse.denopower@suse.comaaptel@suse.comdmulder@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comddiss@suse.comjmcdonough@suse.comddiss@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comjmcdonough@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comtchvatal@suse.comlmuelle@suse.comnopower@suse.comcrrodriguez@opensuse.orglmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comnoel.power@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comnopower@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.commpluskal@suse.comlmuelle@suse.comnopower@suse.deddiss@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.denopower@suse.delmuelle@suse.comnopower@suse.deddiss@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comddiss@suse.comnopower@suse.delmuelle@suse.comlmuelle@suse.comlmuelle@suse.comddiss@suse.comnopower@suse.delmuelle@suse.comddiss@suse.comlmuelle@suse.comjmcdonough@suse.comjmcdonough@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comddiss@suse.comnopower@suse.deddiss@suse.comlmuelle@suse.comddiss@suse.comnopower@suse.deddiss@suse.comlmuelle@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comnopower@suse.comddiss@suse.comddiss@suse.comnopower@suse.deddiss@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comddiss@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comnopower@suse.deddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comadrian@suse.delmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comnopower@suse.delmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comjengelh@inai.delmuelle@suse.comjengelh@inai.delmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.delmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comjengelh@inai.deddiss@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comsjayaraman@suse.delmuelle@suse.comlmuelle@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comjmcdonough@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comshargagan@novell.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comddiss@suse.delmuelle@suse.comlmuelle@suse.delmuelle@suse.deddiss@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.deddiss@suse.deddiss@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.defcrozat@suse.comlmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.deddiss@suse.deddiss@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.deddiss@suse.decoolo@suse.comcoolo@suse.comlmuelle@suse.deshargagan@novell.comddiss@suse.delmuelle@suse.deddiss@suse.deddiss@suse.deddiss@suse.deddiss@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.dejmcdonough@suse.deddiss@suse.deddiss@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.dehhetter@suse.dejmcdonough@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.deshargagan@novell.comddiss@suse.delmuelle@suse.dejmcdonough@suse.deddiss@suse.deddiss@suse.delmuelle@suse.dejmcdonough@suse.demrsb@novell.comlpechacek@suse.czjmcdonough@suse.dejmcdonough@suse.dejmcdonough@suse.delmuelle@suse.deshargagan@novell.comddiss@suse.delmuelle@suse.deshargagan@novell.comlmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.deddiss@suse.deddiss@suse.delmuelle@suse.dejmcdonough@suse.deddiss@suse.delmuelle@suse.deddiss@suse.deddiss@suse.delmuelle@suse.dejengelh@medozas.delmuelle@suse.delmuelle@suse.deddiss@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.deddiss@suse.delmuelle@suse.delmuelle@suse.deddiss@suse.deddiss@suse.delmuelle@suse.delmuelle@suse.deddiss@suse.deddiss@suse.deddiss@suse.dero@suse.delmuelle@suse.delmuelle@suse.delars@samba.orglmuelle@suse.deddiss@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.dejmcdonough@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.dejmcdonough@suse.delmuelle@suse.dehhetter@suse.deddiss@suse.dejmcdonough@suse.decoolo@novell.comlmuelle@suse.dejmcdonough@suse.degber@opensuse.orgjmcdonough@suse.dejmcdonough@suse.delmuelle@suse.delmuelle@suse.dejmcdonough@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.dejmcdonough@suse.delmuelle@suse.delmuelle@suse.dejmcdonough@suse.desjayaraman@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.dehhetter@suse.dejmcdonough@suse.delmuelle@suse.dejmcdonough@suse.delmuelle@suse.delmuelle@suse.delars@samba.orglars@samba.orgjmcdonough@suse.dejsmeix@suse.delmuelle@suse.dehhetter@suse.delmuelle@suse.dejmcdonough@suse.dejmcdonough@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.dejmcdonough@suse.delmuelle@suse.derhafer@novell.comhhetter@novell.comlmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.deboyang@suse.deboyang@suse.dejmcdonough@suse.delmuelle@suse.deboyang@suse.deboyang@suse.delmuelle@suse.derhafer@novell.comlmuelle@suse.delmuelle@suse.delmuelle@suse.deboyang@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delars@samba.orgjmcdonough@suse.desjayaraman@suse.dejengelh@medozas.delmuelle@suse.delmuelle@suse.delmuelle@suse.deboyang@suse.delmuelle@suse.dejmcdonough@suse.dejmcdonough@suse.delmuelle@suse.delmuelle@suse.deboyang@suse.delmuelle@suse.delmuelle@suse.deboyang@suse.delmuelle@suse.delmuelle@suse.deboyang@suse.dejmcdonough@suse.delmuelle@suse.dejmcdonough@suse.dejmcdonough@suse.dejmcdonough@suse.deboyang@suse.dechris@computersalat.delmuelle@suse.delmuelle@suse.delmuelle@suse.deboyang@suse.deboyang@suse.deboyang@suse.dehhetter@suse.delmuelle@suse.delmuelle@suse.deboyang@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.dejmcdonough@suse.delmuelle@suse.delmuelle@suse.dejmcdonough@suse.desbrabec@suse.czlmuelle@suse.delmuelle@suse.dejmcdonough@suse.delmuelle@suse.deboyang@suse.deboyang@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.desjayaraman@suse.desjayaraman@suse.desjayaraman@suse.dejmcdonough@suse.dejmcdonough@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.dejmcdonough@suse.delmuelle@suse.dejmcdonough@suse.dejmcdonough@suse.dejmcdonough@suse.delmuelle@suse.delmuelle@suse.delmuelle@suse.dero@suse.de- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).- CVE-2019-3880: Save registry file outside share as unprivileged user; (bso#13851); (bsc#1131060 ).- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);- s3:winbindd: let normalize_name_map() call find_domain_from_name_noinit(); (bso#13173); (bsc#1123755); - s3:winbind: Fix regression introduced with bso #12851; (bso#12851); (bsc#1123755);- s3:passdb: Do not return OK if we don't have pinfo set up; (bsc#1099590); (bso#13376);- s3: winbind: Remove fstring from wb_acct_info struct; (bsc#1114459); - Use foreground execution mode for systemd samba daemons; (bsc#1112223);- Update to 4.6.16; (bsc#1110943); + CVE-2018-10919: Fix unauthorized attribute access via searches; (bso#13434);- Update to 4.6.15 + Fix ctdb_mutex_ceph_rados_helper deadlock; (bso#13540); (bsc#1102230); + Allow idmap_rid to have primary group other than "Domain Users"; (bsc#1087931).- CVE-2018-10858: Insufficient input validation on client directory listing in libsmbclient; (bso#13453); (bsc#1103411); - s3: winbind: Fix 'winbind normalize names' in wb_getpwsid(); (bso#12851); - winbind: avoid using fstrcpy in _dual_init_connection; (bso#13294); (bsc#1087303); - Fix ntlm authentications with "winbind use default domain = yes"; (bso#13126); (bsc#1068059); - net: fix net ads keytab handling; (bso#13166); (bsc#1067700); - fix vfs_ceph flock stub; (bso#13506).- Fix vfs_ceph with "aio read size" or "aio write size" > 0; (bsc#1093664). + vfs_ceph: add fake async pwrite/pread send/recv hooks; (bso#13425). + Fix memory leak in vfs_ceph; (bso#13424). - Update to 4.6.14 + winbind: avoid using fstrcpy(dcname,...) in _dual_init_connection; (bso#13294). + s3:smb2_server: correctly maintain request counters for compound requests; (bso#13215). + s3: smbd: Unix extensions attempts to change wrong field in fchown call; (bso#13375). + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338). + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async; (bso#13297). + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't support fdopendir(); (bso#13270). + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error, we don't own it here; (bso#13244). + s3:libsmb: allow -U"\\administrator" to work; (bso#13206). + CVE-2018-1057: s4:dsdb: fix unprivileged password changes; (bso#13272); (bsc#1081024). + s3:smbd: Do not crash if we fail to init the session table; (bso#13315). + libsmb: Use smb2 tcon if conn_protocol >= SMB2_02; (bso#13310). + smbXcli: Add "force_channel_sequence"; (bso#13215). + smbd: Fix channel sequence number checks for long-running requests; (bso#13215). + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired sessions; (bso#13197). + s3:smbd: return the correct error for cancelled SMB2 notifies on expired sessions; (bso#13197). + samba: Only use async signal-safe functions in signal handler; (bso#13240). + subnet: Avoid a segfault when renaming subnet objects; (bso#13031).- CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally; (bso#11343); (bsc#1081741);- Update to 4.6.13; (bsc#1084191) + ceph_statx configure time check doesn't work with a non-default - -with-libcephfs path; (bso#13250). - follow up fix for libceph-common detection; (bso#13277). + Fail to copy file with empty FinderInfo from Windows client to Samba share with fruit; (bso#13181). + vfs_ceph uses a local statvfs() call to determine FS capabilities; (bso#13208). + smbd tries to release not leased oplock during oplock II downgrade; (bso#13193). + smbd panic when chdir returns error during exit; (bso#13189). + ctdb_recovery_helper crashes if recovery process times out; (bso#13188). + POSIX ACL support is broken on hpux and possibly other big-endian OSs; (bso#13176). + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue; (bso#12986). + g_lock conflict detection broken when processing stale entries.; (bso#13195). + The KDC on an RWDC doesn't send error replies in some situations; (bso#13132).- Update to 4.6.11; (bsc#1084191) + vfs_glusterfs: Fix exporting subdirs with shadow_copy2; (bso#13091); + s3: smbclient: Ensure we call client_clean_name() before all operations on remote pathnames; (bso#13093); + Non-smbd processes using kernel oplocks can hang smbd; (bso#13121); + python: use communicate to fix Popen deadlock; (bso#13127); + smbd on disk file corruption bug under heavy threaded load; (bso#13130); + tevent: version 0.9.34; (bso#13130); + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086); + smbd: Move check for SMB2 compound request to new function; (bso#13047); + s3:vfs_glusterfs: Fix a double free in vfs_gluster_getwd(); (bso#13100); + s4:pyparam: Fix resource leaks on error; (bso#13101); + s3:smbd: Fix delete-on-close after smb2_find; (bso#13118);- CVE-2017-14746: Use-after-free vulnerability; (bso#13041); (bsc#1060427); - CVE-2017-15275: Server heap memory information leak; (bso#13077); (bsc#1063008);- Update to 4.6.9; (bsc#1065066); + Reverse sense of 'clear all attributes', ignore attribute change in SMB2 to match SMB1; (bso#12899); + SMBC_setatr() initially uses an SMB1 call before falling back; (bso#12913); + Fix segfault on MacOS 10.12.3 clients caused by SMB_VFS_GET_COMPRESSION; (bso#13003); + sys_getwd() can leak memory or possibly return the wrong errno on older systems; (bso#13069); + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem; (bso#6133); + Map SYNCHRONIZE acl permission statically; (bso#7909); + Honor SEC_STD_WRITE_OWNER bit; (bso#7933); + Kernel oplocks still have issues with named streams; (bso#12791); + Handle EACCES when fetching DOS attributes; (bso#12944); + Missing assignment in sl_pack_float; (bso#12991); + Fix wrong Samba access checks when changing DOS attributes; (bso#12995); + Groupmap cleanup should not delete BUILTIN mappings; (bso#13065); + Enabling vfs_fruit results in loss of Finder tags and other xattrs; (bso#13076); + Fix GUID string format on GetPrinter info; (bso#12993); + Match WS2016 ReFS set compression behaviour; (bso#12144); + Fix implementation of process_exists control; (bso#13012); + GET_DB_SEQNUM control can cause ctdb to deadlock when databases are frozen; (bso#13021); + Free up record data if a call request is deferred; (bso#13029); + Initialize ctdb_ltdb_header completely for empty record; (bso#13036); + CTDB starts consuming memory if there are dead nodes in the cluster; (bso#13056); + Ignore event scripts with multiple '.'s; (bso#13070); + Sort the GPOs in the correct order; (bso#13046); + 'smbd' uses a lot of CPU on startup of a connection; (bso#12973); + Fix str[n]casecmp_m() by comparing lower case values; (bso#13018); + Can't change password in Samba from a windows client if Samba runs on IPv6 only interface; (bso#13079); + Fix file change notification for renames; (bso#12903); + Avoid a socket leak after fork; (bso#13006); + Fix a potential memleak; (bso#13090); + Fix passing of errno from async calls; (bso#12983); + Fix segfault when running with log level 10; (bso#13032); + Do not report an invalid range for AD DC role; (bso#12629); + Print the kinit failed message with DBGLVL_NOTICE; (bso#12704); + Fix changing passwords with Kerberos; (bso#12956); + Fix changing the password with 'smbpasswd' as a local user on a domain member; (bso#12975); + Fix a read after free if a chained SMB1 call goes async; (bso#12836); + CVE-2017-12163: Prevent client short SMB1 write from writing server memory to file; (bso#13020); + Let non_widelink_open() chdir() to directories directly; (bso#12885); + CVE-2017-12151: Keep required encryption across SMB3 dfs redirects; (bso#12996); + CVE-2017-12150: Some code path don't enforce smb signing when they should; (bso#12997);- Fix GUID string format on GetPrinter info request; (bso#12993); (bsc#1050707).- CVE-2017-12163: Prevent client short SMB1 write from writing server memory to file; (bso#13020); (bsc#1058624).- CVE-2017-12150: Some code path don't enforce smb signing, when they should; (bso#12997); (bsc#1058622).- CVE-2017-12151: Keep required encryption across SMB3 dfs redirects; (bso#12996); (bsc#1058565).- Update to 4.6.7; (bsc#1054017) + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392). + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937). + vfs_ceph provides inconsistent directory listings; (bso#12911). + Misused talloc context can cause a user to crash their smbd by chaining SMB1 commands.; (bso#12836). + Use-after free can crash libsmbclient code.; (bso#12927). + Server exit with active AIO can crash.; (bso#12925). + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910). + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs; (bso#12898). + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897). + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for authentication; (bso#12886). + finder sidebar showing question mark instead of icon when using ip to connect with vfs_fruit; (bso#12840). + Winbind stops obtaining the 'unixHomeDirectory' & 'loginShell' attributes from AD.; (bso#12720). + KCC run at selftest startup can fail spuriously due to a race; (bso#12869). + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for the remote change; (bso#12782). + rpc_pipe_client memory leaks due to long term memory context passed to rpc_pipe_open_interface(); (bso#12890). + CVE-2017-2619 breaks accessing previous versions of directories with snapshots in subdirectories of the share; (bso#12885). + dns_name_equal doing OOB read; (bso#12813). + replica_sync tests flap; (bso#12753). + Selftest should not call 'net cache flush' and wipe important winbind entries; (bso#12868). + Old Samba versions don't support using recent ldb versions (>=1.1.30); (bso#12859). + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490). + race starting winbindd against posixacl test; (bso#12843). + Crash in the reentrant smbd_smb2_create_send() if the something fails in the subsequent try; (bso#12832). + spnego.c passes the wrong argument order to gensec_update_ev() for the FALLBACK case; (bso#12788). + Clients with SMB3 support can't connect with "server max protocol = SMB2_02"; (bso#12772). + A log message of samb-tool user syncpasswords reverses string arguments in a debug message "Call Popen[...".; (bso#12768). + The smb tarmode tests kills the share dir contents; (bso#12867). + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862). + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860). + manpage/index.html lists links not in alphabetical order; (bso#12854). + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831). + If a record is locked in a database, then recovery does not complete; (bso#12857). + debug_locks.sh script does not log any information; (bso#12856). + SIGSEGV in cm_connect_lsa_tcp dereferencing conn->lsa_tcp_pipe->transport after error; (bso#12852). + smbclient can't parse DOMAIN+username if a different winbind separator is used; (bso#12849). + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845). + Related requests with TreeConnect fail with NETWORK_NAME_DELETED; (bso#12844). + cli->server_os not filled correctly; (bso#12779). + REGRESSION: smbclient doesn't print the session setup anymore; (bso#12824). + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808). + CTDB NFS call-out failures do not cause event failures; (bso#12837). + net command fails due to incorrectly return code; (bso#12828). + Fix building Samba with GCC 7.1; (bso#12827).- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again; (bsc#1048339).- fix cephwrap_chdir(); (bsc#1048790). - Update to 4.6.6 + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation; (bsc#1048278).- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).- Fix inconsistent ctdb socket path; (bsc#1048352). - Fix non-admin cephx authentication; (bsc#1048387).- Update to 4.6.5; (bsc#1040157) + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at startup; (bso#12814). + vfs_expand_msdfs tries to open the remote address as a file path; (bso#12687). + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type); (bso#12798). + With clustering get update_num_read_oplocks failed and PANIC: num_share_modes == 1 assertion failure; (bso#11844). + contend_level2_oplocks_begin_default oplock optimisation doesn't carry over to leases; (bso#12766). + `ctdb nodestatus` incorrectly displays status for all nodes with wrong exit code; (bso#12802). + CTDB can spin hard on revoking readonly delegations if a node becomes disconnected; (bso#12697). + Printing a share mode entry with leases can crash in the ndr code; (bso#12793). + Fix flakey unit tests for eventd; (bso#12792). + CTDB daemon crashes if built with clang; (bso#12770). + smbcacls fails if no password is specified; (bso#12765). + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757). + samba-tool user syncpasswords doesn't trigger the script when a user gets removed; (bso#12767). + systemd: fix detection of libsystemd; (bso#12764). + Notify subsystem only maps first inotify mask to Windows notify filter; (bso#12760). + Allow passing trusted domain password as plain-text to PASSDB layer; (bso#12751). + Can't case-rename files with vfs_fruit; (bso#12749). + wrong sid->uid mapping for SIDs residing in sIDHistory; (bso#12702). + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562). + Ordering of notify responses broken; (bso#12756).- s3: libsmb: Fix error where short name length was read as 2 bytes, should be 1; (bso#11822); (bsc#1042419).- Revert explicit winbind %{version}-%{release} dependency. + The ABI has stabilized since (bsc#936909), so remove to fix cross-media dependencies; (bsc#1037899).- Fix CVE-2017-7494 remote code execution from a writable share; (bso#12780); (bsc#1038231).- Update to 4.6.3; (bsc#1036011) + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots from shares with GlusterFS backend; (bso#12743). + Fix for Solaris C compiler; (bso#12559). + s3: locking: Update oplock optimization for the leases era; (bso#12628). + Make the Solaris C compiler happy; (bso#12693). + s3: libgpo: Allow skipping GPO objects that don't have the expected LDAP attributes; (bso#12695). + Fix buffer overflow caused by wrong use of getgroups; (bso#12747). + lib: debug: Avoid negative array access; (bso#12746). + cleanupdb: Fix a memory read error; (bso#12748). + streams_xattr and kernel oplocks results in NT_STATUS_NETWORK_BUSY; (bso#7537). + winbindd: idmap_autorid allocates ids for unknown SIDs from other backends; (bso#11961). + vfs_fruit: Resource fork open request with flags=O_CREAT|O_RDONLY; (bso#12565). + manpages/vfs_fruit: Document global options; (bso#12615). + lib/pthreadpool: Fix a memory leak; (bso#12624). + Lookup-domain for well-known SIDs on a DC; (bso#12727). + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728). + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729). + credentials_krb5: use gss_acquire_cred for client-side GSSAPI use case; (bso#12611). + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690). + ctdb-readonly: Avoid a tight loop waiting for revoke to complete; (bso#12697). + ctdb_event monitor command crashes if event is not specified; (bso#12723). + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733). + smbd: Fix smb1 findfirst with DFS; (bso#12558). + smbd: Do an early exit on negprot failure; (bso#12610). + winbindd: Fix substitution for 'template homedir'; (bso#12699). + s4:kdc: Disable principal based autodetected referral detection; (bso#12554). + idmap_autorid: Allocate new domain range if the callers knows the sid is valid; (bso#12613). + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724). + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for trusted domain; (bso#12725). + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731). + winbindd: Fix password policy for pam authentication; (bso#12725). + s3:gse: Correctly handle external trusts with MIT; (bso#12554). + auth/credentials: Always set the realm if we set the principal from the ccache; (bso#12611). + replace: Include sysmacros.h; (bso#12686). + s3:vfs_expand_msdfs: Do not open the remote address as a file; (bso#12687). + s3:libsmb: Only print error message if kerberos use is forced; (bso#12704). + winbindd: Child process crashes when kerberos-authenticating a user with wrong password; (bso#12708). + vfs_fruit: Office document opens as read-only on macOS due to CNID semantics; (bso#12715). + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is fragmented; (bso#12737).- Generate and update vendor-files tarball from Git + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).- Generate source tarball directly from Git using OBS tar_scm + use version string derived from parent Git tag and commit hash - remove obsolete vendor-files/tools/package-data version ID + explicitly generate ctdb manpages, needed without "make dist"- Update to 4.6.2 + remove bso#12721 patches now upstream- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622). + x86-64 and aarch64- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).- Build and install the html man pages (bsc#1021907).- Fix CVE-2017-2619 regression with "follow symlinks = no"; (bso#12721).- Update to 4.6.1 + symlink race permits opening files outside share directory; CVE-2017-2619; (bso#12496); (bsc#1027147) + testparm checks for valid idmap parameters + add new krb client encryption types + support for printer driver upload from windows 10 + inherit owner = 'unix only' for improved quota support + improved CTDB event support + new primary group support for idmap_ad + idmap_hash deprecated + mvxattr added to recursively rename extended attributes- Remove chkconfig requirements for systemd systems- Don't call insserv if systemd is used- Fix check if we need to require insserv- async_req: make async_connect_send() "reentrant"; (bso#12105); (bsc#1024416).- Force usage of ncurses6-config thru NCURSES_CONFIG env var; (bsc#1023847).- add missing patch for libnss_wins segfault; (bsc#995730).- Fix vfs_ceph builds against recent Ceph versions; (bsc#1021933).- Document "winbind: ignore domains" parameter; (bsc#1019416).- Add base Samba dependency to samba-ceph package.- Update to 4.5.3 + Heap-based Buffer Overflow Remote Code Execution Vulnerability; CVE-2016-2123; (bso#12409); (bsc#1014437). + Don't send delegated credentials to all servers; CVE-2016-2125; (bso#12445); (bsc#1014441). + denial of service due to a client triggered crash in the winbindd parent process; CVE-2016-2126; (bso#12446); (bsc#1014442). - 4.5.1 and 4.5.2 updates + various streams vfs fixes + various printing fixes + ntlm_auth: do not map explicitly empty domain + various stability fixes in smbd + match file compression ReFS behavior- Add missing ldb module directory; (bnc#1012092).- s3/client: obey 'disable netbios' smb.conf param, don't connect via NBT port; (bsc#1009085); (bso#12418).- Include vfstest in samba-test; (bsc#1001203).- s3/winbindd: using default domain with user@domain.com format fails; (bsc#997833).- Fix segfault in libnss_wins; (bso#12277); (bso#12269); (bsc#995730).- Update to 4.5.0 + NTLM1 Authentication disabled by default + SMB2.1 leases enabled by default + Support for OFD locks + ctdb tool rewritten + Added shadow copy snapshot prefix parameter- Fix illegal memory access after memory has been deleted; (bso#11836); (bsc#975299).- Prevent core, make sure response->extra_data.data is always cleared out; (bsc#993692).- Don't package man pages for VFS modules that aren't built; (boo#993707).- Fix population of ctdb sysconfig after source merge; (bsc#981566).- Enable vfs_ceph builds for Factory (x86-64) + Package as samba-ceph to avoid Ceph dependency in base package.- Update to 4.4.5 + Prevent client-side SMB2 signing downgrade; CVE-2016-2119; (bso#11860); (bsc#986869).- Remove obsolete syslog.target; (bsc#983938).- Honor smb.conf socket options in winbind; (bsc#975131).- Don't use htons() with IP_PROTO_RAW; (bso#11705); (bsc#969522).- Update to 4.4.4 + SMB3 multichannel: Add implementation of missing channel sequence number verification; (bso#11809). + smbd:close: Only remove kernel share modes if they had been taken at open; (bso#11919). + notifyd: Prevent NULL deref segfault in notifyd_peer_destructor; (bso#11930). + s3:rpcclient: Make '--pw-nt-hash' option work; (bso#10796). + Fix case sensitivity issues over SMB2 or above; (bso#11438). + s3:smbd: Fix anonymous authentication if signing is mandatory. (bso#11910) + Fix NTLM Authentication issue with squid; (bso#11914). + pdb: Fix segfault in pdb_ldap for missing gecos; (bso#11530). + Fix memory leak in share mode locking; (bso#11934).- Update to 4.4.3 + Various post-badlock regressions; (bso#11841); (bso#11850); (bso#11858); (bso#11870); (bso#11872). + Only allow idmap_hash for default idmap config (bso#11786). + smbd: Avoid large reads beyond EOF; (bso#11878). + vfs_acl_common: Avoid setting POSIX ACLs if "ignore system acls" is set; (bso#11806). + libads: Record session expiry for spnego sasl binds; (bso#11852).- Fix NTLMSSP regressions caused by previous CVE fixes; (bso#11849); (bsc#975962); (bsc#979268), (bsc#977669).- Revert shared library packaging to comply with SLPP- Update to 4.4.2 + A man-in-the-middle can downgrade NTLMSSP authentication; CVE-2016-2110; (bso#11688); (bsc#973031). + Domain controller netlogon member computer can be spoofed; CVE-2016-2111; (bso#11749); (bsc#973032). + LDAP conenctions vulnerable to downgrade and MITM attack; CVE-2016-2112; (bso#11644); (bsc#973033). + TLS certificate validation missing; CVE-2016-2113; (bso#11752); (bsc#973034). + Named pipe IPC vulnerable to MITM attacks; CVE-2016-2115; (bso#11756); (bsc#973036). + "Badlock" DCERPC impersonation of authenticated account possible; CVE-2016-2118; (bso#11804); (bsc#971965). + DCERPC server and client vulnerable to DOS and MITM attacks; CVE-2015-5370; (bso#11344); (bsc#936862).- Fix samba.tests.messaging test and prevent potential tdb corruption by removing obsolete now invalid tdb_close call; (bsc#974629).- Obsolete libsmbclient from libsmbclient0 while not providing it; (bsc#972197).- Update to 4.4.0. + Read of uninitialized memory DNS TXT handling; (bso#11128); (bso#11686); CVE-2016-0771. + Getting and setting Windows ACLs on symlinks can change permissions on link target; (bso#11648); CVE-2015-7560. + Sockets with htons(IPPROTO_RAW); (bso#11705); CVE-2015-8543. + s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystem with no ACL support; (bso#10489). + docs: Add example for domain logins to smbspool man page; (bso#11643). + smbd: Show correct disk size for different quota and dfree block sizes; (bso#11681). + docs: Add smbspool_krb5_wrapper manpage; (bso#11690). + winbindd: Return trust parameters when listing trusts; (bso#11691). + ctdb: Do not provide a useless pkgconfig file for ctdb; (bso#11696). + Crypto.Cipher.ARC4 is not available on some platforms, fallback to M2Crypto.RC4.RC4 then; (bso#11699). + s3:utils/smbget: Set default blocksize; (bso#11700). + Streamline 'smbget' options with the rest of the Samba utils; (bso#11700). + s3:clispnego: Fix confusing warning in spnego_gen_krb5_wrap(); (bso#11702). + s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703). + loadparm: Fix memory leak issue; (bso#11708). + lib/tsocket: Work around sockets not supporting FIONREAD; (bso#11714). + s3:vfs:glusterfs: Fix build after quota changes; (bso#11715). + ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ..."; (bso#11719). + lib:socket: Fix CID 1350010: Integer OVERFLOW_BEFORE_WIDEN; (bso#11723). + smbd: Fix CID 1351215 Improper use of negative value; (bso#11724). + smbd: Fix CID 1351216 Dereference null return value; (bso#11725). + s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new file; (bso#11727). + docs: Add manpage for cifsdd; (bso#11730). + param: Fix str_list_v3 to accept ; again; (bso#11732). + lib/socket: Fix improper use of default interface speed; (bso#11734). + lib:socket: Fix CID 1350009: Fix illegal memory accesses (BUFFER_SIZE_WARNING); (bso#11735). + libcli: Fix debug message, print sid string for new_ace trustee; (bso#11738). + Fix installation path of Samba helper binaries; (bso#11739). + Fix memory leak in loadparm; (bso#11740). + tevent: version 0.9.28: Fix memory leak when old signal action restored; (bso#11742). + smbd: Ignore SVHDX create context; (bso#11753). + Fix net join; (bso#11755). + s3:libads: setup the msDS-SupportedEncryptionTypes attribute on ldap_add; (bso#11755). + passdb: Add linefeed to debug message; (bso#11763). + s3:utils/smbget: Fix option parsing; (bso#11767). + libnet: Make Kerberos domain join site-aware; (bso#11769). + Reset TCP Connections during IP failover; (bso#11770). + ldb: Version 1.1.26; (bso#11772). + s3:smbd: Add negprot remote arch detection for OSX; (bso#11773). + vfs_glusterfs: Fix use after free in AIO callback; (bso#11774). + mkdir can return ACCESS_DENIED incorrectly on create race; (bso#11780). + "trustdom_list_done: Got invalid trustdom response" message should be avoided; (bso#11782). + Mismatch between local and remote attribute ids lets replication fail with custom schema; (bso#11783). + Quota is not supported on Solaris 10; (bso#11788). + Talloc: Version 2.1.6; (bso#11789). + smbd: Enable multi-channel if 'server multi channel support = yes' in the config; (bso#11796). + build: Fix build when '--without-quota' specified; (bso#11798). + lib/socket/interfaces: Fix some uninitialied bytes; (bso#11802). + Access based share enum: handle permission set in configuration files; (bso#8093). + See also WHATSNEW.txt from the samba-doc package.- Update to 4.3.6. + Getting and setting Windows ACLs on symlinks can change permissions on link target; CVE-2015-7560; (bso#11648); (bsc#968222). + Fix Out-of-bounds read in internal DNS server; CVE-2016-0771; (bso#11128); (bso#11686); (bsc#968223).- Upgrade on-disk FSRVP server state to new version; (bsc#924519).- Only obsolete but do not provide gplv2/3 package names; (bsc#968973).- Relocate existing lock files to /var/lib/samba/lock; (bsc#968963).- Obsolete no longer existing samba-32bit package; (bsc#967625).- Update to 4.3.5. + s3:utils/smbget: Fix recursive download; (bso#6482). + s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystemi with no ACL support; (bso#10489). + s3:smbd/oplock: Obey kernel oplock setting when releasing oplocks; (bso#11400). + vfs_shadow_copy2: Fix case where snapshots are outside the share; (bso#11580). + smbclient: Query disk usage relative to current directory; (bso#11662). + winbindd: Handle expired sessions correctly; (bso#11670). + smbd: Show correct disk size for different quota and dfree block sizes; (bso#11681). + smbcacls: Fix uninitialized variable; (bso#11682). + s3:smbd: Ignore initial allocation size for directory creation; (bso#11684). + s3-client: Add a KRB5 wrapper for smbspool; (bso#11690). + s3-parm: Clean up defaults when removing global parameters; (bso#11693). + Use M2Crypto.RC4.RC4 on platforms without Crypto.Cipher.ARC4; (bso#11699). + s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703). + ctdb: Remove error messages after kernel security update; CVE-2015-8543; (bso#11705). + loadparm: Fix memory leak issue; (bso#11708). + lib/tsocket: Work around sockets not supporting FIONREAD; (bso#11714). + ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ..."; (bso#11719). + s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new file; (bso#11727). + param: Fix str_list_v3 to accept ";" again; (bso#11732).- Shift samba-client sysconfig data into samba and samba-winbind; (bsc#947361).- Simplify shared library packaging; (bsc#966956).- Enable clustering (CTDB) support; (bsc#966271).- s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703); (bsc#964023).- Add quotes around path of update-apparmor-samba-profile; (bnc#962177).- Remove autoconf build-time requirement.- Update to 4.3.4. + vfs_fruit: Enable POSIX directory rename semantics; (bso#11065). + Crash: Bad talloc magic value - access after free; (bso#11394). + Copying files with vfs_fruit fails when using vfs_streams_xattr without stream prefix and type suffix; (bso#11466). + samba-tool: Fix uncaught exception if no fSMORoleOwner attribute is given; (bso#11613). + Fix a typo in the smb.conf manpage, explanation of idmap config; (bso#11619). + Correctly initialize the list head when keeping a list of primary followed by DFS connections; (bso#11624). + Reduce the memory footprint of empty string options; (bso#11625). + lib/async_req: Do not install async_connect_send_test; (bso#11639). + Fix typos in man vfs_gpfs; (bso#11641). + Make "hide dot files" option work with "store dos attributes = yes"; (bso#11645). + Fix a corner case of the symlink verification; (bso#11647); (bnc#960249). + Do not disable "store dos attributes" on-the-fly; (bso#11649). + Update lastLogon and lastLogonTimestamp; (bso#11659).- Prevent access denied if the share path is "/"; (bso#11647); (bnc#960249).- Update to 4.3.3. + Malicious request can cause Samba LDAP server to hang, spinning using CPU; CVE-2015-3223; (bso#11325); (bnc#958581). + Remote read memory exploit in LDB; CVE-2015-5330; (bso#11599); (bnc#958586). + Insufficient symlink verification (file access outside the share); CVE-2015-5252; (bso#11395); (bnc#958582). + No man in the middle protection when forcing smb encryption on the client side; CVE-2015-5296; (bso#11536); (bnc#958584). + Currently the snapshot browsing is not secure thru windows previous version (shadow_copy2); CVE-2015-5299; (bso#11529); (bnc#958583). + Fix Microsoft MS15-096 to prevent machine accounts from being changed into user accounts; CVE-2015-8467; (bso#11552); (bnc#958585).- Update to 4.3.2. + vfs_gpfs: Re-enable share modes; (bso#11243). + dcerpc.idl: Accept invalid dcerpc_bind_nak pdus; (bso#11327). + s3-smbd: Fix old DOS client doing wildcard delete - gives an attribute type of zero; (bso#11452). + Add libreplace dependency to texpect, fixes a linking error on Solaris; (bso#11511). + s4: Fix linking of 'smbtorture' on Solaris; (bso#11512). + s4:lib/messaging: Use correct path for names.tdb; (bso#11562). + Fix segfault of 'net ads (join|leave) -S INVALID' with nss_wins; (bso#11563). + async_req: Fix non-blocking connect(); (bso#11564). + auth: gensec: Fix a memory leak; (bso#11565). + lib: util: Make non-critical message a warning; (bso#11566). + Fix winbindd crashes with samlogon for trusted domain user; (bso#11569); (bnc#949022). + smbd: Send SMB2 oplock breaks unencrypted; (bso#11570). + ctdb: Open the RO tracking db with perms 0600 instead of 0000; (bso#11577). + s3:smb2_server: Make the logic of SMB2_CANCEL DLIST_REMOVE() clearer; (bso#11581). + s3-smbd: Fix use after issue in smbd_smb2_request_dispatch(); (bso#11581). + manpage: Correct small typo error; (bso#11584). + s3: smbd: If EAs are turned off on a share don't allow an SMB2 create containing them; (bso#11589). + Backport some valgrind fixes from upstream master; (bso#11597). + auth: Consistent handling of well-known alias as primary gid; (bso#11608). + winbind: Fix crash on invalid idmap configs; (bso#11612). + s3: smbd: have_file_open_below() fails to enumerate open files below an open directory handle; (bso#11615). + Changing log level of two entries to DBG_NOTICE; (bso#9912).- Ensure samlogon fallback requests are rerouted after kerberos failure; (bnc#953382); (bnc#953972).- Ensure to link with --as-needed flag by removing SUSE_ASNEEDED=0. - Always use the default optimization even on pre-9.2 systems.- Remove redundant configure options while adding with-relro.- Relocate the lockdir to the /var/lib/samba/lock directory.- Cleanup and enhance the pidl sub package.- Require renamed python-ldb-devel and python-talloc-devel at build-time. - Requires python-ldb and python-talloc from the python subpackage.- Update to 4.3.1. + s3: smbd: Fix our access-based enumeration on "hide unreadable" to match Windows; (bso#10252). + nss_winbind: Fix hang on Solaris on big groups; (bso#10365). + smbd: Fix file name buflen and padding in notify repsonse; (bso#10634). + kerberos: Make sure we only use prompter type when available; winbind: Fix 100% loop; (bso#11038). + source3/lib/msghdr.c: Fix compiling error on Solaris; (bso#11053). + s3:ctdbd_conn: make sure we destroy tevent_fd before closing the socket; (bso#11316). + s3: smbd: Fix mkdir race condition; (bso#11486). + pam_winbind: Fix a segfault if initialization fails; (bso#11502). + s3: dfs: Fix a crash when the dfs targets are disabled; (bso#11509). + s4:lib/messaging: Use 'msg.lock' and 'msg.sock' for messaging related subdirs; (bso#11515). + s3: smbd: Fix opening/creating :stream files on the root share directory; (bso#11522). + lib/param: Fix hiding of FLAG_SYNONYM values; (bso#11526). + net: Fix a crash with 'net ads keytab create'; (bso#11528). + s3: smbd: Fix a crash in unix_convert(); (bso#11535). + s3: smbd: Fix NULL pointer bug introduced by previous 'raw' stream fix (bso#11522); (bso#11535). + vfs_fruit: Return value of ad_pack in vfs_fruit.c; (bso#11543). + vfs_commit: set the fd on open before calling SMB_VFS_FSTAT; (bso#11547). + s3:locking: Initialize lease pointer in share_mode_traverse_fn(); (bso#11549). + s3:smbstatus: Add stream name to share_entry_forall(); (bso#11550). + s3:lib: Validate domain name in lookup_wellknown_name(); (bso#11555). + s3: lsa: lookup_name() logic for unqualified (no DOMAIN component) names is incorrect; (bso#11555).- Fix 100% CPU in winbindd when logging in with "user must change password on next logon"; (bso#11038).- Relocate the tmpfiles.d directory to the client package; (bnc#947552).- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf instead; (bnc#942716).- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).- Package /var/lib/samba/msg with 0755 permissions; (bso#11515); (bnc#945502).- Require to install libfam0-gamin from samba-libs on post-12.1 and pre-13.15 systems; (bnc#945013).- Update to 4.3.0. + Samba "map to guest = Bad uid" doesn't work; (bso#9862). + revert LDAP extended rule 1.2.840.113556.1.4.1941 LDAP_MATCHING_RULE_IN_CHAIN changes; (bso#10493). + No objectClass found in replPropertyMetaData on ordinary objects (non-deleted); (bso#10973). + Stream names with colon don't work with fruit:encoding = native; (bso#11278). + NetApp joined to a Samba/ADDC cannot resolve SIDs; (bso#11291). + tevent_fd needs to be destroyed before closing the fd; (bso#11316). + "force group" with local group not working; (bso#11320). + strsep is not available on Solaris; (bso#11359). + smbtorture does not build when configured --with-system-mitkrb5; (bso#11411). + Build with GPFS support is broken; (bso#11421). + Build broken with --disable-python; (bso#11424). + net share allowedusers crashes; (bso#11426). + nmbd incorrectly matches netbios names as own name; (bso#11427). + Python bindings don't check integer types; (bso#11429). + Python bindings don't check array sizes; (bso#11430). + CTDB's eventscript error handling is broken; (bso#11431). + Fix crash in nested ctdb banning; (bso#11432). + Cannot build ctdbpmda; (bso#11434). + samba-tool uncaught exception error; (bso#11436). + Crash in notify_remove caused by change notify = no; (bso#11444). + Poor SMB3 encryption performance with AES-GCM; (bso#11451). + Poor SMB3 encryption performance with AES-GCM (part1); (bso#11451). + fix recursion problem in rep_strtoll in lib/replace/replace.c; (bso#11455). + --bundled-libraries=!ldb,!pyldb,!pyldb-util doesn't disable ldb build and install; (bso#11458). + xid2sid gives inconsistent results; (bso#11464). + ctdb: Fix the build on FreeBSD 10.1; (bso#11465). + Handling of 0 byte resource fork stream; (bso#11467). + AD samr GetGroupsForUser fails for users with "()" in their name; (bso#11488).- Configure with --bundled-libraries=NONE; (bso#11458).- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).- Remove libiniparser-devel build-time requirement.- Update to 4.2.3. + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780). + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924). + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991). + Logon via MS Remote Desktop hangs; (bso#11061). + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068). + tevent: Add a note to tevent_add_fd(); (bso#11141). + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170). + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217). + smbd: Fix a use-after-free; (bso#11218); (bnc#919309). + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces; (bso#11245). + s3:smb2: Add padding to last command in compound requests; (bso#11277). + Add IPv6 support to ADS client side LDAP connects; (bso#11281). + Add IPv6 support for determining FQDN during ADS join; (bso#11282). + s3: IPv6 enabled DNS connections for ADS client; (bso#11283). + Fix invalid write in ctdb_lock_context_destructor; (bso#11293). + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295). + vfs_fruit: Add option "veto_appledouble"; (bso#11305). + tstream: Make socketpair nonblocking; (bso#11312). + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313). + Group creation: Add msSFU30Name only when --nis-domain was given; (bso#11315). + tevent_fd needs to be destroyed before closing the fd; (bso#11316). + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared"; (bso#11319). + smbd/trans2: Add a useful diagnostic for files with bad encoding; (bso#11323). + Change sharesec output back to previous format; (bso#11324). + Robust mutex support broken in 1.3.5; (bso#11326). + Kerberos auth info3 should contain resource group ids available from pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info exists in PAC; (bso#11328); (bnc#912457). + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329). + tevent: Fix CID 1035381 Unchecked return value; (bso#11330). + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331). + s3: smbd: Use separate flag to track become_root()/unbecome_root() state; (bso#11339). + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342). + pidl: Make the compilation of PIDL producing the same results if the content hasn't change; (bso#11356). + winbindd: Disconnect child process if request is cancelled at main process; (bso#11358). + vfs_fruit: Check offset and length for AFP_AfpInfo read requests; (bso#11363). + docs: Overhaul the description of "smb encrypt" to include SMB3 encryption; (bso#11366). + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server(); (bso#11367). + ncacn_http: Fix GNUism; (bso#11371).- Disable rpath usage; (bnc#902421).- Make the winbind package depend on the matching libwbclient version and vice versa; (bnc#936909).- Backport changes to use resource group sids obtained from pac logon_info; (bso#11328); (bnc#912457).- Order winbind.service Before and Want nss-user-lookup target.- Remove fam-devel build-time dependency for post-6 RHEL systems.- Update to 4.2.2. + s3:smbXsrv: refactor duplicate code into smbXsrv_session_clear_and_logoff(); (bso#11182). + gencache: don't fail gencache_stabilize if there were records to delete; (bso#11260). + s3: libsmbclient: After getting attribute server, ensure main srv pointer is still valid; (bso#11186). + s4: rpc: Refactor dcesrv_alter() function into setup and send steps; (bso#11236). + s3: smbd: Incorrect file size returned in the response of "FILE_SUPERSEDE Create"; (bso#11240). + Mangled names do not work with acl_xattr; (bso#11249). + nmbd rewrites browse.dat when not required; (bso#11254). + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff; (bso#11213). + s3:smbd: Add missing tevent_req_nterror; (bso#11224). + vfs: kernel_flock and named streams; (bso#11243). + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244). + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses are used; (bso#11284). + ctdb: check for talloc_asprintf() failure; (bso#11201). + spoolss: purge the printer name cache on name change; (bso#11210); (bnc#901813). + CTDB statd-callout does not scale; (bso#11204). + vfs_fruit: also map characters below 0x20; (bso#11221). + ctdb: Coverity fix for CID 1291643; (bso#11201). + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225). + Fix terminate connection behavior for asynchronous endpoint with PUSH notification flavors; (bso#11226). + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007). + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201). + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the directory is deleted; (bso#11257). + s3:winbindd: make sure we remove pending io requests before closing client sockets; (bso#11141); (bnc#931854). + Fix panic triggered by smbd_smb2_request_notify_done() -> smbXsrv_session_find_channel() in smbd; (bso#11182). + 'sharesec' output no longer matches input format; (bso#11237). + waf: Fix systemd detection; (bso#11200). + CTDB: Fix portability issues; (bso#11202). + CTDB: Fix some IPv6-related issues; (bso#11203). + CTDB statd-callout does not scale; (bso#11204). + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you enter invalid values; (bso#11234). + libads: record service ticket endtime for sealed ldap connections; (bso#11267). + lib/util: Include DEBUG macro in internal header files before samba_util.h; (bso#11033).- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).- Remove the independently built libraries ldb, talloc, tdn, and tevent and the post-10.3 renamed libsmbclient from baselibs.conf.- Drop redundant doc attribute from man pages.- Update to 4.2.1. + s3:winbind:grent: Don't stop group enumeration when a group has no gid; (bso#8905). + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791). + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with servers that don't send the 2 unused fields; (bso#10016). + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476). + waf: Fix the build on openbsd; (bso#10476). + s3: client: "client use spnego principal = yes" code checks wrong name; (bso#10888). + spoolss: Retrieve published printer GUID if not in registry; (bso#11018). + s3: lib: libsmbclient: If reusing a server struct, check every cli->timout miliseconds if it's still valid before use; (bso#11079). + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125). + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135). + replace: Remove superfluous check for gcrypt header; (bso#11135). + Backport subunit changes; (bso#11137). + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with implementation; (bso#11140). + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143). + talloc: Version 2.1.2; (bso#11144). + Update libwbclient version to 0.12; (bso#11149). + brlock: Use 0 instead of empty initializer list; (bso#11153). + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164). + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169); (bnc#913304). + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev fails in the SMB1 case; (bso#11173). + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174). + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175). + s3: libsmbclient: Add missing talloc stackframe; (bso#11177). + s4-process_model: Do not close random fds while forking; (bso#11180). + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).- Prevent samba package updates from disabling samba kerberos printing.- Add sparse file support for samba; (fate#318424).- Purge printer name cache on spoolss SetPrinter change; (bso#11210); (bnc#901813).- Correctly retain errno from Btrfs snapshot ioctls; (bnc#923374).- Simplify libxslt build requirement and README.SUSE install. - Remove no longer required cleanup steps while populating the build root.- Remove deprecated base_rid example from idmap_rid manpage; (bso#11169); (bnc#913304).- Update to 4.2.0. + smbd: Stop using vfs_Chdir after SMB_VFS_DISCONNECT; (bso#1115). + pam_winbind: fix warn_pwd_expire implementation; (bso#9056). + nsswitch: Fix soname of linux nss_*.so.2 modules; (bso#9299). + Make 'profiles' work again; (bso#9629). + s3:smb2_server: protect against integer wrap with "smb2 max credits = 65535"; (bso#9702). + Make validate_ldb of String(Generalized-Time) accept millisecond format ".000Z"; (bso#9810). + Use -R linker flag on Solaris, not -rpath; (bso#10112). + vfs: Add glusterfs manpage; (bso#10240). + Make 'smbclient' use cached creds; (bso#10279). + pdb: Fix build issues with shared modules; (bso#10355). + s4-dns: Add support for BIND 9.10; (bso#10620). + idmap: Return the correct id type to *id_to_sid methods; (bso#10720). + printing/cups: Pack requested-attributes with IPP_TAG_KEYWORD; (bso#10808). + Don't build vfs_snapper on FreeBSD; (bso#10834). + nss_winbind: Add getgroupmembership for FreeBSD; (bso#10835). + idmap_rfc2307: Fix a crash after connection problem to DC; (bso#10837). + s3: smb2cli: query info return length check was reversed; (bso#10848). + s3: lib, s3: modules: Fix compilation on Solaris; (bso#10849). + lib: uid_wrapper: Fix setgroups and syscall detection on a system without native uid_wrapper library; (bso#10851). + winbind3: Fix pwent variable substitution; (bso#10852). + Improve samba-regedit; (bso#10859). + registry: Don't leave dangling transactions; (bso#10860). + Fix build of socket_wrapper on systems without SO_PROTOCOL; (bso#10861). + build: Do not install 'texpect' binary anymore; (bso#10862). + Fix testparm to show hidden share defaults; (bso#10864). + libcli/smb: Fix smb2cli_validate_negotiate_info with min=PROTOCOL_NT1 max=PROTOCOL_SMB2_02; (bso#10866). + Integrate CTDB into top-level Samba build; (bso#10892). + samba-tool group add: Add option '--nis-domain' and '--gid'; (bso#10895). + s3-nmbd: Fix netbios name truncation; (bso#10896). + spoolss: Fix handling of bad EnumJobs levels; (bso#10898). + Fix smbclient loops doing a directory listing against Mac OS X 10 server with a non-wildcard path; (bso#10904). + Fix print job enumeration; (bso#10905); (bnc#898031). + samba-tool: Create NIS enabled users and unixHomeDirectory attribute; (bso#10909). + Add support for SMB2 leases; (bso#10911). + btrfs: Don't leak opened directory handle; (bso#10918). + s3: nmbd: Ensure NetBIOS names are only 15 characters stored; (bso#10920). + s3:smbd: Fix file corruption using "write cache size != 0"; (bso#10921). + pdb_tdb: Fix a TALLOC/SAFE_FREE mixup; (bso#10932). + s3-keytab: fix keytab array NULL termination; (bso#10933). + s3:passdb: fix logic in pdb_set_pw_history(); (bso#10940). + Cleanup add_string_to_array and usage; (bso#10942). + dbwrap_ctdb: Pass on mutex flags to tdb_open; (bso#10942). + Fix RootDSE search with extended dn control; (bso#10949). + Fix 'samba-tool dns serverinfo ' for IPv6; (bso#10952). + libcli/smb: only force signing of smb2 session setups when binding a new session; (bso#10958). + s3-smbclient: Return success if we listed the shares; (bso#10960). + s3-smbstatus: Fix exit code of profile output; (bso#10961). + socket_wrapper: Add missing prototype check for eventfd; (bso#10965). + libcli: SMB2: Pure SMB2-only negprot fix to make us behave as a Windows client does; (bso#10966). + vfs_streams_xattr: Check stream type; (bso#10971). + s3: smbd: Fix *allocate* calls to follow POSIX error return convention; (bso#10982). + vfs_fruit: Add support for AAPL; (bso#10983). + Fix spoolss IDL response marshalling when returning error without clearing info; (bso#10984). + dsdb-samldb: Check for extended access rights before we allow changes to userAccountControl; (bso#10993); CVE-2014-8143; (boo#914279). + Fix IPv6 support in CTDB; (bso#10996). + ctdb-daemon: Use correct tdb flags when enabling robust mutex support; (bso#11000). + vfs_streams_xattr: Add missing call to SMB_VFS_NEXT_CONNECT; (bso#11005). + s3-util: Fix authentication with long hostnames; (bso#11008). + ctdb-build: Fix build without xsltproc; (bso#11014). + packaging: Include CTDB man pages in the tarball; (bso#11014). + pdb_get_trusteddom_pw() fails with non valid UTF16 random passwords; (bso#11016). + Make Sharepoint search show user documents; (bso#11022). + nss_wrapper: check for nss.h; (bso#11026). + Enable mutexes in gencache_notrans.tdb; (bso#11032). + tdb_wrap: Make mutexes easier to use; (bso#11032). + lib/util: Avoid collision which alread defined consumer DEBUG macro; (bso#11033). + winbind: Retry after SESSION_EXPIRED error in ping-dc; (bso#11034). + s3-libads: Fix a possible segfault in kerberos_fetch_pac(); (bso#11037). + vfs_fruit: Fix base_fsp name conversion; (bso#11039). + vfs_fruit: mmap under FreeBSD needs PROT_READ; (bso#11040). + Fix authentication using Kerberos (not AD); (bso#11044). + net: Fix sam addgroupmem; (bso#11051). + vfs_snapper: Correctly handles multi-byte DBus strings; (bso#11055); (bnc#913238). + cli_connect_nb_send: Don't segfault on host == NULL; (bso#11058). + utils: Fix 'net time' segfault; (bso#11058). + libsmb: Provide authinfo domain for encrypted session referrals; (bso#11059). + s3-pam_smbpass: Fix memory leak in pam_sm_authenticate(); (bso#11066). + vfs_glusterfs: Add comments to the pipe(2) code; (bso#11069). + vfs/glusterfs: Change xattr key to match gluster key; (bso#11069). + vfs_glusterfs: Implement AIO support; (bso#11069). + s3-vfs: Fix developer build of vfs_ceph module; (bso#11070). + s3: netlogon: Ensure we don't call talloc_free on an uninitialized pointer; (bso#11077); CVE-2015-0240; (bnc#917376). + vfs: Add a brief vfs_ceph manpage; (bso#11088). + s3: smbclient: Allinfo leaves the file handle open; (bso#11094). + Fix Win8.1 Credentials Manager issue after KB2992611 on Samba domain; (bso#11097). + debug: Set close-on-exec for the main log file FD; (bso#11100). + s3: smbd: leases - losen paranoia check. Stat opens can grant leases; (bso#11102). + s3: smbd: SMB2 close. If a file has delete on close, store the return info before deleting; (bso#11104). + doc:man:vfs_glusterfs: improve the configuration section; (bso#11117). + snprintf: Try to support %j; (bso#11119). + ctdb-io: Do not use sys_write to write to client sockets; (bso#11124). + doc-xml: Add 'sharesec' reference to 'access based share enum'; (bso#11127).- Update to 4.2.0rc5. + Ensure we don't call talloc_free on an uninitialized pointer; CVE-2015-0240; (bso#11077); (bnc#917376).- Fix usage of freed memory on server exit; (bso#11218); (bnc#919309).- Fix tdb_store_flag_to_ntdb() gcc5 build failure.- Fix vfs_snapper DBus string handling; (bso#11055); (bnc#913238).- Update to 4.1.16. + dsdb-samldb: Check for extended access rights before we allow changes to userAccountControl; (bso#10993); CVE-2014-8143; (boo#914279).- Adjust baselibs.conf due to libpdb0 package rename to libsamba-passdb0.- Fix libsmbclient DFS referral handling. + Reuse connections derived from DFS referrals; (bso#10123); (fate#316512). + Set domain/workgroup based on authentication callback value; (bso#11059).- Update to 4.2.0rc4. - Add libsamba-debug, libsocket-blocking, libsamba-cluster-support, and libhttp to the libs package; (boo#913547). - Rename libpdb packages to libsamba-passdb. - Drop libsmbsharemodes packages.- Enable avahi support on post-12.2 systems.- Update to 4.1.15. + pam_winbind: Fix warn_pwd_expire implementation; (bso#9056). + nsswitch: Fix soname of linux nss_*.so.2 modules; (bso#9299). + Fix profiles tool; (bso#9629). + s3-lib: Do not require a password with --use-ccache; (bso#10279). + s4:dsdb/rootdse: Expand extended dn values with the AS_SYSTEM control; (bso#10949). + s4-rpc: dnsserver: Fix enumeration of IPv4 and IPv6 addresses; (bso#10952). + s3:smb2_server: Allow reauthentication without signing; (bso#10958). + s3-smbclient: Return success if we listed the shares; (bso#10960). + s3-smbstatus: Fix exit code of profile output; (bso#10961). + libcli: SMB2: Pure SMB2-only negprot fix to make us behave as a Windows client does; (bso#10966). + s3: smbd/modules: Fix *allocate* calls to follow POSIX error return convention; (bso#10982). + Fix 'domain join' by adding 'drsuapi.DsBindInfoFallBack' attribute 'supported_extensions'; (bso#11006). + idl:drsuapi: Manage all possible lengths of drsuapi_DsBindInfo; (bso#11006). + winbind: Retry LogonControl RPC in ping-dc after session expiration; (bso#11034).- yast2-samba-client should be able to specify osName and osVer on AD domain join; (bnc#873922).- Lookup FSRVP share snums at runtime rather than storing them persistently; (bnc#908627).- Specify soft dependency for network-online.target in Winbind systemd service file; (bnc#889175).- Fix spoolss error response marshalling; (bso#10984).- Update to 4.1.14. + pidl/wscript: Remove --with-perl-* options; revert buildtools/wafadmin/ Tools/perl.py back to upstream state; (bso#10472). + s4-dns: Add support for BIND 9.10; (bso#10620). + nmbd fails to accept "--piddir" option; (bso#10711). + nss_winbind: Add getgroupmembership for FreeBSD; (bso#10835). + S3: source3/smbd/process.c::srv_send_smb() returns true on the error path; (bso#10880). + vfs_glusterfs: Remove "integer fd" code and store the glfs pointers; (bso#10889). + s3-nmbd: Fix netbios name truncation; (bso#10896). + spoolss: Fix handling of bad EnumJobs levels; (bso#10898). + s3: libsmbclient-smb2. MacOSX 10 SMB2 server doesn't set STATUS_NO_MORE_FILES when handed a non-wildcard path; (bso#10904). + spoolss: Fix jobid in level 3 EnumJobs response; (bso#10905). + s3: nmbd: Ensure NetBIOS names are only 15 characters stored; (bso#10920). + s3:smbd: Fix file corruption using "write cache size != 0"; (bso#10921). + pdb_tdb: Fix a TALLOC/SAFE_FREE mixup; (bso#10932). + s3-keytab: Fix keytab array NULL termination; (bso#10933). + Cleanup add_string_to_array and usage; (bso#10942).- Remove and cleanup shares and registry state associated with externally deleted snaphots exposed as shadow copies; (bnc#876312).- Use the upstream tar ball, as signature verification is now able to handle compressed archives.- Fix leak when closing file descriptor returned from dirfd; (bso#10918).- Fix spoolss EnumJobs and GetJob responses; (bso#10905); (bnc#898031). + Fix handling of bad EnumJobs levels; (bso#10898).- Remove dependency on gpg-offline as signature checking is implemented in the source validator.- Update to 4.1.13. + s3-libnet: Add libnet_join_get_machine_spns(); (bso#9984). + s3-libnet: Make sure we do not overwrite precreated SPNs; (bso#9984). + s3-libads: Add all machine account principals to the keytab; (bso#9985). + s3: winbindd: Old NT Domain code sets struct winbind_domain->alt_name to be NULL. Ensure this is safe with modern AD-DCs; (bso#10717). + Fix unstrcpy; (bso#10735). + pthreadpool: Slightly serialize jobs; (bso#10779). + s3: smbd: streams - Ensure share mode validation ignores internal opens (op_mid == 0); (bso#10797). + s3: smbd:open_file: Open logic fix; Use a more natural check; (bso#10809). + vfs_media_harmony: Fix a crash bug; (bso#10813). + docs: Mention incompatibility between kernel oplocks and streams_xattr; (bso#10814). + nmbd: Send waiting status to systemd; (bso#10816). + libcli: Fix a segfault calling smbXcli_req_set_pending() on NULL; (bso#10817). + nsswitch: Skip groups we were not able to map; (bso#10824). + s3-winbindd: Use correct realm for trusted domains in idmap child; (bso#10826). + s3: nmbd: Ensure the main nmbd process doesn't create zombies; (bso#10830). + s3: lib: Signal handling - ensure smbrun and change password code save and restore existing SIGCHLD handlers; (bso#10831). + idmap_rfc2307: Fix a crash after connection problem to DC; (bso#10837). + s3-winbindd: Do not use domain SID from LookupSids for Sids2UnixIDs call; (bso#10838). + s3: smb2cli: Query info return length check was reversed; (bso#10848). + registry: Don't leave dangling transactions; (bso#10860).- Update to 4.2.0rc2.- Rebase File Server Remote VSS Protocol (FSRVP) server against 4.2.0rc1; (fate#313346).- Backport upstream master fixes for samba-regedit; (bnc#896536).- BuildRequire python-xml on SUSE systems only.- BuildRequire python-xml. - Exclude unwanted texpect binary and libhttp, libsamba-cluster-support, libsamba-debug, and libsocket-blocking shared libs. - Add vfs_fruit and vfs_worm man pages and ndr_dcerpc, smb2_lease_struct, tstream_smbXcli_np, idtree, and idtree_random header files. - Remove nmblookup and smbclient4 binary and nmblookup4 man page.- Update to 4.2.0rc1.- Fix small memory-leak in the background print process; (bnc#899558).- Modify samba-regedit so it displays correctly (related to ncurses). Changed code to use menu sub windows, seems to fix problems with display not refreshing; explicitly BuildRequire ncurses-devel; (bnc#896536).- Exclude unwanted libdnsserver_common and libdfs_server_ad shared libs and the man page of the unused findsmb script.- Skip groups that aren't mapped by idmap_ad; (bso#10824); (bnc#897969).- Update to 4.1.12. + s3: winbindd: On new client connect, prune idle or hung connections older than "winbind request timeout". Add new parameter "winbind request timeout". Please see smb.conf man page for details; (bso#3204); (bnc#872912). + Fix smbd crashes when filename contains non-ascii character; (bso#10716). + s4-rpc: dnsserver: Handle updates of tombstoned dnsNode objects; (bso#10749). + passdb: Fix NT_STATUS_NO_SUCH_GROUP; (bso#9570). + s4:setup/dns_update_list: make use of the new substitution variables; (bso#9831). + build: Fix configure to honour '--without-dmapi'; (bso#10369). + provision: Correctly provision the SOA record minimum TTL; (bso#10466). + s3: Enforce a positive allocation_file_size for non-empty files; (bso#10543). + lib: tevent: make TEVENT_SIG_INCREMENT atomic; (bso#10640). + Make "case sensitive = True" option working with "max protocol = SMB2" or higher in large directories; (bso#10650). + Samba 4 consuming a lot of CPU when re-reading printcap info; (bso#10652). + lib: strings: Simplify strcasecmp; (bso#10716). + Allow netr_ServerReqChallenge() and netr_ServerAuthenticate3() on different connections; (bso#10723). + 'net time': Fix usage and core dump; (bso#10728). + sys_poll_intr: Fix timeout arithmetic; (bso#10731). + s3:idmap: Don't log missing range config if range checking not requested; (bso#10737). + Fix flapping VFS gpfs offline bit; (bso#10741). + s4-rpc: dnsserver: Allow . to be specified for @ record; (bso#10742). + s4-rpc: dnsserver: return DNS_RANK_NS_GLUE recors when explicitly asked for; (bso#10751). + samba: Retain case sensitivity of cifs client; (bso#10755). + lib: Remove unused nstrcpy; (bso#10758). + Fix a memory leak in cli_set_mntpoint(); (bso#10759). + docs: Fix typos in smb.conf (inherit acls); (bso#10761). + libcli/security: Add better detection of SECINFO_[UN]PROTECTED_[D|S]ACL in get_sec_info(); (bso#10773). + s3: smbd: POSIX ACLs. Remove incorrect check for SECINFO_PROTECTED_DACL in incoming security_information flags in posix_get_nt_acl_common(); (bso#10773). + Don't discard result of checking grouptype; (bso#10777). + s3:libsmb: Set a max charge for SMB2 connections; (bso#10778). + smbd: Properly initialize mangle_hash; (bso#10782). + dosmode: Fix FSCTL_SET_SPARSE request validation; (bso#10787). + vfs_dirsort: Fix an off-by-one error that can cause uninitialized memory read; (bso#10794).- Wait for network-online.target to prevent caching of pre-network failures; (bnc#889175).- Use domain name if search by domain SID fails to send SIDHistory lookups to correct idmap backend; (bnc#773464).- Prune idle or hung connections older than "winbind request timeout"; (bso#3204); (bnc#872912).- fix FSCTL_SET_SPARSE request validation; (bso#10787); (bnc#893774).- Remove pre-11.2 patch which by default uses the smbpasswd passdb backend.- build: disable mmap on s390 systems; (bso#10765); (bnc#886193); (bnc#882356).- Create the cups smb backend as sym link pointing to smbspool; (bnc#891220).- Fix winbind service parameter usage; (bnc#890005).- lib/param: change the default for "winbind expand groups" to "0"; (bnc#890008).- Update to 4.1.11. + A malicious browser can send packets that may overwrite the heap of the target nmbd NetBIOS name services daemon; CVE-2014-3560; (bnc#889429).- Fix "net time" segfault; (bso#10728); (bnc#889539).- Update to 4.1.10. + net/doc: Make clear that net vampire is for NT4 domains only; (bso#3263). + dbcheck: Add check and test for various invalid userParameters values; (bso#8077). + s4:dsdb/samldb: Don't allow 'userParameters' to be modified over LDAP for now; (bso#8077). + Simple use case results in "no talloc stackframe around, leaking memory" error; (bso#8449). + s4:dsdb/repl_meta_data: Make sure objectGUID can't be deleted; (bso#9763). + dsdb: Always store and return the userParameters as a array of LE 16-bit values; (bso#10130). + s4:repl_meta_data: fix array assignment in replmd_process_linked_attribute(); (bso#10294). + ldb-samba: fix a memory leak in ldif_canonicalise_objectCategory(); (bso#10469). + dbchecker: Verify and fix broken dn values; (bso#10536). + dsdb: Rename private_data to rootdse_private_data in rootdse; (bso#10582). + s3: libsmbclient: Work around bugs in SLES cifsd and Apple smbx SMB1 servers; (bso#10587). + Fix "PANIC: assert failed at ../source3/smbd/open.c(1582): ret"; (bso#10593). + rid_array used before status checked - segmentation fault due to null pointer dereference; (bso#10627). + Samba won't start on a machine configured with only IPv4; (bso#10653). + msg_channel: Fix a 100% CPU loop; (bso#10663). + s3: smbd: Prevent file truncation on an open that fails with share mode violation; (bso#10671); (bnc#884056). + s3: SMB2: Fix leak of blocking lock records in the database; (bso#10673). + samba-tool: Add --site parameter to provision command; (bso#10674). + smbstatus: Fix an uninitialized variable; (bso#10680). + SMB1 blocking locks can fail notification on unlock, causing client timeout; (bso#10684). + s3: smbd: Locking, fix off-by one calculation in brl_pending_overlap(); (bso#10685). + 'RW2' smbtorture test fails when -N is set to 2 due to the invalid status check in the second client; (bso#10687). + wbcCredentialCache fails if challenge_blob is not first; (bso#10692). + Backport ldb-1.1.17 + changes from master; (bso#10693). + Fix SEGV from improperly formed SUBSTRING/PRESENCE filter; (bso#10693). + ldb: Add a env variable to disable RTLD_DEEPBIND; (bso#10693). + ldb: Do not build libldb-cmdline when using system ldb; (bso#10693). + ldb: Fix 1138330 Dereference null return value, fix CIDs 241329, 240798, 1034791, 1034792 1034910, 1034910); (bso#10693). + ldb: make the successful ldb_transaction_start() message clearer; (bso#10693). + ldb:pyldb: Add some more helper functions for LdbDn; (bso#10693). + ldb: Use of NULL pointer bugfix; (bso#10693). + lib/ldb: Fix compiler warnings; (bso#10693). + pyldb: Decrement ref counters on py_results and quiet warnings; (bso#10693). + s4-openldap: Remove use of talloc_reference in ldb_map_outbound.c; (bso#10693). + dsdb: Return NO_SUCH_OBJECT if a basedn is a deleted object; (bso#10694). + s4:dsdb/extended_dn_in: Don't force DSDB_SEARCH_SHOW_RECYCLED; (bso#10694). + Backport autobuild/selftest fixes from master; (bso#10696). + Backport drs-crackname fixes from master; (bso#10698). + smbd: Avoid double-free in get_print_db_byname; (bso#10699). + Backport access check related fixes from master; (bso#10700). + Backport provision fixes from master; (bso#10703). + s3:smb2_read: let smb2_sendfile_send_data() behave like send_file_readX(); (bso#10706). + s3: Fix missing braces in nfs4_acls.c.- Reduce printer_list.tdb lock contention during printcap update; (bso#10652); (bnc#883870). + Only update the printer share inventory when needed.- Add missing newline to debug message in daemon_ready(); (bnc#865627).- BuildRequire systemd-devel, configure --with-systemd, and modify the service files accordingly on post-12.2 systems; (bso#10517); (bnc#865627).- Prevent file truncation on an open that fails with share mode violation; (bso#10671); (bnc#884056).- Update to 4.1.9. + Fix nmbd denial of service; CVE-2014-0244; (bnc#880962). + Fix segmentation fault in smbd_marshall_dir_entry()'s SMB_FIND_FILE_UNIX handler; CVE-2014-3493; (bnc#883758).- BuildRequire krb5-devel, libiniparser-devel, and python-devel in any case.- BuildRequire libxslt and perl-ExtUtils-MakeMaker and BuildIgnore libtevent on CentOS, Fedora, and RHEL systems.- Update to 4.1.8. + dns: Don't reply to replies; CVE-2014-0239; (bso#10609). + Malformed FSCTL_SRV_ENUMERATE_SNAPSHOTS response; CVE-2014-0178; (bso#10549). + s3: smb2: Fix 'xcopy /d' with samba shares; (bso#3124). + Extra ':' in msg for Waf Cross Compile Build System with Cross-answers command; (bso#10151). + s3: nmbd: Reset debug settings after reading config file; (bso#10239). + Fix empty body in if-statement in continue_domain_open_lookup; (bso#10348). + script/autobuild: Make use of '--with-perl-{arch,lib}-install-dir'; (bso#10472). + wafsamba: Fix the installation on FreeBSD; (bso#10472). + Use exit_daemon() to communicate status of startup to systemd; (bso#10517). + Fix adding NetApps; (bso#10524). + s3: lib/util: Fix logic inside set_namearray loops; (bso#10544). + s3: lib/util: set_namearray reads across end of namelist; (bso#10544). + idmap_autorid: Fix failure in reverse lookup if ID is from domain range index #0; (bso#10547). + build: Fix ordering problems with lib-provided and internal RPATHs; (bso#10548). + Fix read of deleted memory in reply_writeclose()'; (bso#10554). + lib-util: Rename memdup to smb_memdup and fix all callers; (bso#10556). + Fix lock order violation and file lost; (bso#10564). + dsdb: Do checks for invalid renames in samldb, before repl_meta_data; (bso#10569). + Fix wildcard unlink to fail if we get an error rather than trying to continue; (bso#10577). + byteorder: Do not assume PowerPC is big-endian; (bso#10590). + printing: Fix purge of all print jobs; (bso#10612).- examples/libsmbclient: avoid some compiler warnings; (bso#10624).- Fix printer job purging; (bso#10612); (bnc#879390).- Update samba-pubkey_6568B7EA.asc which will expire 2016-01-17.- Fix byte-order macros on little endian Power8; (bso#10590); (bnc#871701).- Pass through vfs_btrfs snapshot manipulation requests when "btrfs: manipulate snapshots = no" is configured; (bnc#874180).- Clone the base share security descriptor when exposing a snapshot share; (bnc#874656).- Use appropriate HRESULT return codes; (bnc#875046).- Update to 4.1.7. + Make "force user" work as expected; (bso#9878). + Fix build on AIX with IBM XL C/C++ (gettext detection issues); (bso#9911). + Fix problem with server taking too long to respond to a MSG_PRINTER_DRVUPGRADE message; (bso#9942). + s3-printing: Fix obvious memory leak in printer_list_get_printer(); (bso#9993). + doc: Add "spoolss: architecture" parameter usage; (bso#10188). + Make 'smbclient' support DFS shares with SMB2/3; (bso#10200). + Make (lib)smbclient work with NetApp; (bso#10230). + SessionLogoff on a signed connection with an outstanding notify request crashes smbd; (bso#10344). + dfs: Always call create_conn_struct with root privileges; (bso#10378). + 'net ads search' on high latency networks can return a partial list with no error indication; (bso#10387). + max xmit > 64kb leads to segmentation fault; (bso#10422). + Fix STATUS_NO_MEMORY response from Query File Posix Lock request; (bso#10431). + Increase max netbios name components; (bso#10439). + smbd_server_connection_terminate("CTDB_SRVID_RELEASE_IP") panics from within ctdbd_migrate() with invalid lock_order; (bso#10444). + Fix 'wbinfo -i' with one-way trust; (bso#10458). + samba4 services not binding on IPv6 addresses causing connection delays; (bso#10464). + s3-vfs: Fix stream_depot vfs module on btrfs; (bso#10467). + Don't respond with NXDOMAIN to records that exist with another type; (bso#10471). + pidl: waf should have an option for the dir to install perl files and do not glob; (bso#10472). + s3-spoolssd: Don't register spoolssd if epmd is not running; (bso#10474). + s3-rpc_server: Fix handling of fragmented rpc requests; (bso#10481). + Initial FSRVP rpcclient requests fail with NT_STATUS_PIPE_NOT_AVAILABLE; (bso#10484). + lsa.idl: Define lsa.ForestTrustCollisionInfo and ForestTrustCollisionRecord as public structs; (bso#10504). + Make 'smbreadline' build with readline 6.3; (bso#10506). + smbd: Correctly add remote users into local groups; (bso#10508). + rpcclient FSRVP request UNCs should include a trailing backslash; (bso#10521). + Cleanup messages.tdb record after unclean smbd shutdown; (bso#10534). + s3:rpc_server: Minor refactoring of process_request_pdu().- Create a new DBus connection for every vfs_snapper request, to ensure correct snapper UID detection; (bnc#866354).- Fix "Invalid read" in method reply_writeclose; (bso#10554); (bnc#873658).- Fix minor compiler warnings in snapshot code-path; (bnc#873177).- Remove references to the obsolete samba-krb-printing package and get_printing_ticket binary.- Fix malformed FSCTL_SRV_ENUMERATE_SNAPSHOTS response; CVE-2014-0178; (bso#10549); (bnc#872396).- User error strings instead of hex codes where possible for FSRVP errors; (bnc#866927).- Fix remote share shadow copy request UNCs; (bso#10521); (bnc#870957).- Add krb5rcache directory to the winbind package; (bnc#870607). - Cleanup and consolidate the sysconfig and systemd service files.- Extend vfs_snapper man page to cover permissions; (bnc#870570).- Fix RPC server handling of fragmented requests; (bso#10481); (bnc#869707).- Default with the cache and lock directory to the same path to have both non-persistent and persistent data at one location; (bnc#846586).- Depend only on %version with all manual Provides and Requires; (bnc#844307).- Update to 4.1.6. + Password lockout not enforced for SAMR password changes; CVE-2013-4496; (bnc#849224). + smbcacls can remove a file or directory ACL by mistake; CVE-2013-6442; (bnc#855866).- Password lockout not enforced for SAMR password changes; CVE-2013-4496; (bnc#849224).- Call update-apparmor-samba-profile via ExecStartPre too; (bnc#867665).- samba4 smbcalcs --chown | --chgrp dacl regression; CVE-2013-6442; (bnc#855866).- Retry named pipe open requests on STATUS_PIPE_NOT_AVAILABLE; (bso#10484); (bnc#865095).- Propagate snapshot enumeration permissions errors to SMB clients; (bnc#865641).- Properly handle empty 'requires_membership_of' entries in /etc/security/pam_winbind.conf; (bnc#865771).- Fix problem with server taking too long to respond to a MSG_PRINTER_DRVUPGRADE message; (bso#9942); (bnc#863748). - Fix memory leak in printer_list_get_printer(); (bso#9993); (bnc#865561).- Fix stream_depot VFS module on Btrfs; (bso#10467); (bnc#865397).- Use libarchive to provide improved smbclient tarmode functionality; (bso#9667); (bnc#861135).- Depend on %version-%release with all manual Provides and Requires; (bnc#844307).- Update to 4.1.5. + Fix 100% CPU utilization in winbindd when trying to free memory in winbindd_reinit_after_fork; (bso#10358); (bnc#786677). + smbd: Fix memory overwrites; (bso#10415). + s3-winbind: Improve performance of wb_fill_pwent_sid2uid_done(); (bso#2191). + ntlm_auth sometimes returns the wrong username to mod_ntlm_auth_winbind; (bso#10087). + s3: smbpasswd: Fix crashes on invalid input; (bso#10320). + s3: vfs_dirsort module: Allow dirsort to work when multiple simultaneous directories are open; (bso#10406). + Add support for Heimdal's unified krb5 and hdb plugin system, cope with first element in hdb_method having a different name in different heimdal versions and fix INTERNAL ERROR: Signal 11 in the kdc pid; (bso#10418). + vfs_btrfs: Fix incorrect zero length server-side copy request handling; (bso#10424). + s3: modules: streaminfo: As we have no VFS function SMB_VFS_LLISTXATTR we can't cope with a symlink when lp_posix_pathnames() is true; (bso#10429). + smbd: Fix an ancient oplock bug; (bso#10436). + Fix crash bug in smb2_notify code; (bso#10442).- Remove superfluous obsoletes *-64bit in the ifarch ppc64 case; (bnc#437293).- Migrate @GMT token parsing functionality into vfs_snapper; (bnc#863079). + Improve vfs_snapper documentation.- Fix Winbind 100% CPU utilization caused by domain list corruption; (bso#10358); (bnc#786677).- Fix memory overwrite in FSCTL_VALIDATE_NEGOTIATE_INFO handler; (bso#10415); (bnc#862370).- Streamline the vendor suffix handling and add support for SLE 12.- Fix zero length server-side copy request handling; (bso#10424); (bnc#862558).- Set the PID directory to /run/samba on post-12.2 systems.- Make use of the tmpfilesdir macro while calling systemd-tmpfiles.- Make winbindd print the interface version when it gets an INTERFACE_VERSION request; (bnc#726937).- Fix vfs_btrfs build on older platforms with duplicate WRITE_FLUSH definitions; (bnc#860832).- Check for NULL gensec_security in gensec_security_by_auth_type(); (bnc#860809).- Ensure ndr table initialization; (bnc#860648).- Add File Server Remote VSS Protocol (FSRVP) server for SMB share shadow-copies; (fate#313346).- s3-dir: Fix the DOS clients against 64-bit smbd's; (bso#2662). - shadow_copy2: module "Previous Version" not working in Windows 7; (bso#10259). - s3-passdb: Fix string duplication to pointers; (bso#10367). - vfs/glusterfs: in case atime is not passed, set it to the current atime; (bso#10384)- s3: winbindd: Move calling setup_domain_child() into add_trusted_domain(); (bso#10358); (bnc#786677).- Default sysconfig daemon options to -D; (bso#10388); (bnc#857454).- Add /var/cache/samba to the client file list; (bnc#846586).- Really add the WINBINDDOPTIONS sysconfig variable on install; (bnc#857454).- Correct sysconfig variable names by adding the missing D char; (bnc#857454).- Update to 4.1.4. + Fix segfault in smbd; (bso#10284). + Fix SMB2 server panic when a smb2 brlock times out; (bso#10311).- Call stop_on_removal from preun and restart_on_update and insserv_cleanup from postun on pre-12.3 systems only; (bnc#857454).- BuildRequire gamin-devel instead of unmaintained fam-devel package on post-12.1 systems.- smbd: allow updates on directory write times on open handles; (bso#9870). - lib/util: use proper include for struct stat; (bso#10276). - s3:winbindd fix use of uninitialized variables; (bso#10280). - s3-winbindd: Fix DEBUG statement in winbind_msg_offline(); (bso#10285). - s3-lib: Fix %G substitution for domain users in smbd; (bso#10286). - smbd: Always use UCF_PREP_CREATEFILE for filename_convert calls to resolve a path for open; (bso#10297). - smb2_server processing overhead; (bso#10298). - ldb: bad if test in ldb_comparison_fold(); (bso#10305). - Fix AIO with SMB2 and locks; (bso#10310). - smbd: Fix a panic when a smb2 brlock times out; (bso#10311). - vfs_glusterfs: Enable per client log file; (bso#10337).- Add /etc/sysconfig/samba to the main and winbind package; (bnc#857454).- Create /var/run/samba with systemd-tmpfiles on post-12.2 systems; (bnc#856759).- Fix broken rc{nmb,smb,winbind} sym links which should point to the service binary on post-12.2 systems; (bnc#856759).- Add Snapper VFS module for snapshot manipulation; (fate#313347). + dbus-1-devel required at build time.- Add File Server Remote VSS Protocol (FSRVP) client for SMB share shadow-copies; (fate#313345).- Do not BuildRequire perl ExtUtils::MakeMaker and Parse::Yapp as they're part of the minimum build environment.- Update to 4.1.3. + DCE-RPC fragment length field is incorrectly checked; CVE-2013-4408; (bnc#844720). + pam_winbind login without require_membership_of restrictions; CVE-2012-6150; (bnc#853347).- Make use of the full gpg pub key file name including the key ID.- Add transparent file compression support; (fate#316266). + Implement FSCTL_GET_COMPRESSION and FSCTL_SET_COMPRESSION handlers. + Add FILE_ATTRIBUTE_COMPRESSED and FILE_NO_COMPRESSION support. + Extend vfs_btrfs VFS module to utilize get/set compression hooks.- Add support for FSCTL_SRV_COPYCHUNK_WRITE; (fate#314770).- Remove bogus libsmbclient0 package description and cleanup the libsmbclient line from baselibs.conf; (bnc#853021).- BuildRequire systemd on post-12.2 systems.- Update to 4.1.2. + s4-dns: dlz_bind9: Create dns-HOSTNAME account disabled; (bso#9091). + dfs_server: Use dsdb_search_one to catch 0 results as well as NO_SUCH_OBJECT errors; (bso#10052). + Missing talloc_free can leak stackframe in error path; (bso#10187). + Fix memset used with constant zero length parameter; (bso#10190). + s4:dsdb/rootdse: report 'dnsHostName' instead of 'dNSHostName'; (bso#10193). + Make offline logon cache updating for cross child domain group membership; (bso#10194). + nsswitch: Fix short writes in winbind_write_sock; (bso#10195). + RW Deny for a specific user is not overriding RW Allow for a group; (bso#10196). + vfs_glusterfs: Fix excessive debug output from vfs_gluster_open(); (bso#10224). + vfs_glusterfs: Implement proper mashalling/unmarshalling of ACLs; (bso#10224). + VFS plugin was sending the actual size of the volume instead of the total number of block units because of which windows was getting the wrong volume capacity; (bso#10224). + libcli/smb: Fix smb2cli_ioctl*() against Windows 2008; (bso#10232). + xattr: Fix listing EAs on *BSD for non-root users; (bso#10247). + Fix the build of vfs_glusterfs; (bso#10253). + s3-winbindd: Fix cache_traverse_validate_fn failure for NDR cache entries; (bso#10264). + util: Remove 32bit macros breaking strict aliasing; (bso#10269).- Let gpg verify execution condition not fail on non SUSE systems.- Add systemd support for post-12.2 systems.- Allow smbcacls to take a '--propagate-inheritance' flag to indicate that the add, delete, modify and set operations now support automatic propagation of inheritable ACE(s); (FATE#316474).- Unconditionally create the CUPS smb backend sym link pointing to smbspool; (bnc#850656).- Update to 4.1.1. + ACLs are not checked on opening an alternate data stream on a file or directory; CVE-2013-4475; (bso#10229); (bnc#848101). + Private key in key.pem world readable; CVE-2013-4476; (bnc#848103).- Private key in key.pem world readable; CVE-2013-4476; (bnc#848103).- ACLs are not checked on opening an alternate data stream on a file or directory; CVE-2013-4475; (bso#10229); (bnc#848101).- Update to 4.1.0. + pam_winbindd: Support the KEYRING ccache type; (bso#10132). + Fix PAC parsing failure; (bso#10178).- Unify the defattr lines in the pidl, python, test and test-devel files section by removing the optional directory mode.- Verify source tar ball gpg signature.- Update to 4.1.0rc4. + dsdb: Convert the full string from UTF16 to UTF8, including embedded NULLs; (bso#8077). + python-samba-tool fsmo: Do not give an error on a successful role transfer; (bso#9461). + dbwrap_ctdb: Treat empty records as non-existing; (bso#10008). + Raise the level of a debug when unable to open a printer; (bso#10118). + Add "acl allow execute always" parameter; (bso#10134). + vfs_shadow_copy2: Display previous versions correctly over SMB2; (bso#10137). + smbd: Always clean up share modes after hard crash; (bso#10138). + Valid utf8 filenames cause "invalid conversion error" messages; (bso#10139). + libcli/smb: Use SMB1 MID=0 for the initial Negprot; (bso#10144). + Samba SMB2 client code reads the wrong short name length in a directory listing reply; (bso#10145). + libcli/smb: Only check the SMB2 session setup signature if required and valid; (bso#10146). + Better document potential implications of a globally used "valid users"; (bso#10147). + cli_smb2_get_ea_list_path() failed to close file on exit; (bso#10149). + Not all OEM servers support the ALTNAME info level; (bso#10150). + Regression causes replication failure with Windows 2008R2 and deletes Deleted Objects; (bso#10157). + Netbios related samba process consumes 100% CPU; (bso#10158). + Fix POSIX ACL mapping when setting DENY ACE's from Windows; (bso#10162).- Require libndr-standard-devel due to gen_ndr/lsa.h from libpdb-devel.- Add libdcerpc0, libdcerpc-atsvc0, libdcerpc-binding0, libdcerpc-samr0, libgensec0, libndr0, libndr-krb5pac0, libndr-nbt0, libndr-standard0, libpdb0, libregistry0, libsamba-credentials0, libsamba-hostconfig0, libsamba-policy0, libsamba-util0, libsamdb0, libsmbclient-raw0, libsmbconf0, libsmbldap0, and libtevent-util0 to baselibs.conf.- Add or polish the shared library package summaries and descriptions.- Update to 4.1.0rc3. + Fix working on site with Read Only Domain Controller; (bso#5917). + Add man page for vfs_syncops; (bso#7364). + Add man page for vfs_linux_xfs_sgid; (bso#7490). + When replicating DNS for bind9_dlz we need to create the server-DNS account remotely; (bso#9091). + Winbind unable to retrieve user information from AD; (bso#9615). + winbind_lookup_names() fails because of NT_STATUS_CANT_ACCESS_DOMAIN_INFO; (bso#9899). + Build Samba 4.0.x on AIX with IBM XL C/C++; (bso#9911). + Add SMB2 and SMB3 support for smbclient; (bso#9974). + Add man pages for ntdb tools; (bso#10000). + Add man page for samba-regedit tool; (bso#10001). + ::1 added to nameserver on join; (bso#10030). + Fix memory leak in source3/lib/util.c:1493; (bso#10063). + Fix segmentation fault in 'net ads join'; (bso#10073). + Fix variable list in vfs_crossrename man page; (bso#10076). + s3-winbind: Fix a segfault passing NULL to a fstring argument; (bso#10082). + smbd: Fix async echo handler forking; (bso#10086). + MacOSX 10.9 will not follow path-based DFS referrals handed out by Samba; (bso#10097). + Honour output buffer length set by the client for SMB2 GetInfo requests; (bso#10106). + Fix Winbind crashes on DC with trusted AD domains; (bso#10107). + Handle Dropbox (write-only-directory) case correctly in pathname lookup; (bso#10114). + Masks incorrectly applied to UNIX extension permission changes; (bso#10121).- Implement shared library packaging guidelines. - Correct interpackage dependencies; (bso#10129).- Define the source URL differently in the case of a release candidate.- Update to 4.1.0rc2. + Add vfs_btrfs module. + Add support for server-side copy operations via the SMB2 FSCTL_SRV_COPYCHUNK request. + Fix replication with --domain-crictical-only to fill in backlinks; (bso#9029). + Windows 8 Roaming profiles fail; (bso#9678). + Fix crash of winbind after "ls -l /usr/local/samba/var/locks/sysvol"; (bso#9820). + Windows error 0x800700FE when copying files with xattr names containing ":"; (bso#9992). + Do not delete an existing valid credential cache (s3-winbind); (bso#9994). + Fix segfault while reading incomplete session info; (bso#10003). + Missing integer wrap protection in EA list reading can cause server to loop with DOS (CVE-2013-4124); (bso#10010). + Fix a 100% loop at shutdown time (smbd); (bso#10013). + Fix/improve debug options; (bso#10015). + Rename regedit to samba-regedit; (bso#10040). + Remove obsolete swat manpage and references; (bso#10041). + Fix crashes in socket_get_local_addr(); (bso#10042). + Allow to change the default location for Kerberos credential caches; (bso#10043). + Remove a redundant inlined substitution of ACLs; (bso#10045). + nsswitch: Add OPT_KRB5CCNAME to avoid an error message; (bso#10048). + dsdb improvements; (bso#10056). + Linux kernel oplock breaks can miss signals; (bso#10064).- BuildRequire pyldb-devel.- Add libnetapi0 and samba-libs to baselibs.conf.- Update to 4.0.9. + Fix crash of Winbind after "ls -l /usr/local/samba/var/locks/sysvol"; (bso#9820). + s3-lib: Fix segmentation fault while reading incomplete session info; (bso#10003). + smbd: Fix a 100% loop at shutdown time; (bso#10013). + Windows 8 Roaming profiles fail; (bso#9678). + Add UPN enumeration to passdb internal API; (bso#9779). + smbd: Cleanup disonnected durable handles; (bso#9930). + vfs_streams_xattr: Do not attempt to write empty attribute twice; (bso#9970). + Fix Windows error 0x800700FE when copying files with xattr names containing ":"; (bso#9992). + s3-winbind: Do not delete an existing valid credential cache; (bso#9994). + Fix excessive RID allocation; (bso#10014). + Add debugclass for DNS server; (bso#10015). + Fix/improve debug options; (bso#10015). + Allow to change the default location for Kerberos credential caches; (bso#10043). + Linux kernel oplock breaks can miss signals; (bso#10064). + net ads join: Fix segmentation fault in create_local_private_krb5_conf_for_domain; (bso#10073).- Update to 4.0.8. + Samba 3.0.x to 4.0.7 are affected by a denial of service attack on authenticated or guest connections; CVE-2013-4124; (bnc#829969).- Require krb5 and not the non existing krb5-libs package.- Update to 4.1.0rc1. + Directory database replication (AD DC mode) + Server-Side Copy Support + Btrfs Filesystem Integration- BuildRequire perl ExtUtils::MakeMaker and Parse::Yapp. - BuildRequire libxslt, libxslt1, or libxslt-tools depending on SUSE version. - Require perl-base on SUSE systems only.- Adjust group setting of the test-devel subpackage. - Require perl-base from the pidl subpackage.- Remove libdir/samba/ldb after install if we're building Samba without Active Directory Domain Controller support.- Remove unused ccache switch from the spec file.- BuildRequire docbook-xsl-stylesheets and libxslt-tools to build the man pages and add them to the package again.- Build from the package from the top level directory; (bnc#794744). - BuildRequire pytalloc-devel, python-tdb, and python-tevent. - Also use out of tree builds of talloc, tdb, tevent, and ldb for pre-12.1 SUSE systems.- Remove the empty data dir from the doc package filelist. - Explicitly use samba instead of the name macro to define the docbook dir.- Update to 4.0.7. + Fix a core dump with invalid lock order while opening/editing or copying MS files; (bso#9794). + Fix crash bug from search of mail=; (bso#9967). + s3-rpc_server: Ensure we are root when starting and using gensec; (bso#9465). + Add support for MX queries; (bso#9485). + dns: Delete dnsNode objects when they are empty; (bso#9559). + dns: Support larger queries when asking forwarder; (bso#9632). + s3:lib/server_mutex: Open mutex.tdb with CLEAR_IF_FIRST; (bso#9805). + Use of wrong RFC2307 primary group field; (bso#9880). + Check for system libtevent; (bso#9881). + is_printer_published GUID retrieval; (bso#9900). + Doc fixes for 4.0; (bso#9906). + Build fixes for 4.0 found during autoconf or debian packaging work; (bso#9907). + build: Add missing new line to replaced python shebang line; (bso#9909). + PIE builds not supported; (bso#9910). + s4:winbind: Don't leak libnet_context into the main event context; (bso#9929). + Fix a bug of drvupgrade of smbcontrol; (bso#9941). + Check for netbios aliases in ad_get_referrals; (bso#9947). + Fix tevent_poll on 32-bit machines (Coverity ID 989236); (bso#9953). + docs: Avoid mentioning a possibly misleading option; (bso#9964). + Fix build with system Heimdal of samba4kgetcred; (bso#9968).- Use SLE as product prefix for SUSE Linux Enterprise, oS for openSUSE, and OBS for any other operating system to define the vendor string while build.- Remove ldapsmb from the main spec file.- Adjust ldapsmb and nmbstatus man page syntax required by a newer pod2man.- Don't bzip2 the main tar ball, use the upstream gziped one instead.- Explicitly BuildRequire cyrus-sasl-devel, libattr-devel, and libopenssl-devel.- Fix libreplace license ambiguity; (bso#8997); (bnc#765270).- Update to 4.0.6. + Fix crash during Win8 sync; (bso#9822). + Fix segfault when loging in with wrong password from w2k8r2; (bso#9834). + Fix the username map optimization; (bso#9139). + Add support for PFC_FLAG_OBJECT_UUID when parsing packets; (bso#9382). + SMB2 server doesn't support recvfile; (bso#9412). + Fix the build of vfs_notify_fam; (bso#9545). + Fix adding case sensitive spn; (bso#9699). + Properly handle oplock breaks in compound requests; (bso#9722). + Properly handle oplock breaks in compound requests; (bso#9722). + Cache name_to_sid/sid_to_name correctly; (bso#9766). + Fix 'net ads join' when called via stdin; (bso#9767). + Fix segfault for "artificial" conn_structs in vfs_fake_perms; (bso#9775). + vfs_dirsort uses non-stackable calls, dirfd(), malloc instead of talloc and doesn't cope with directories being modified whilst reading; (bso#9777). + Fix panic when running 'smbtorture smb.base'; (bso#9782). + Use specified python for runtime installation of Samba; (bso#9785). + Change '--with-dmapi' to 'default=auto' to match the autoconf build; (bso#9803). + wafsamba: Display the default value in help for SAMBA3_ADD_OPTION; (bso#9804). + wbinfo: Fix segfault in wbinfo_pam_logon; (bso#9807). + Package new dbwrap_tool man page; (bso#9809). + Old DOS SMB CTEMP request uses a non-VFS function to access the filesystem; (bso#9811). + Fix 'map untrusted to domain' with NTLMv2; (bso#9817). + SMB signing and the async echo responder don't work together; (bso#9824). + Fix panic in nt_printer_publish_ads; (bso#9830). + talloc use after free in winbind4; (bso#9832). + Function called in unix_convert() path can overwrite errno; (bso#9833). + Fix NULL pointer dereference in Winbind; (bso#9854). + Fix making LIBNDR_PREG_OBJ; (bso#9868).- Remove disabled and anyhow obsoleted net-report and net_rpc_migrate patches.- Update to 4.0.5. + Fix large reads/writes from some Linux clients; (bso#9706). + Add 'samba-tool dbcheck --reset-well-known-acls'; (bso#9740). + Can't delegate adding computers to domain; (bso#9267). + Fix GNU ld version detection with old gcc releases; (bso#7825). + Never try to map global SAM name; (bso#9039). + Certain xattrs cause Windows error 0x800700FF; (bso#9130). + Samba returns unexpected error on SMB posix open; (bso#9519). + Fix build on AIX; (bso#9557). + libnss-winbindd does not provide pass struct for groups mapped with ID_TYPE_BOTH and vice versa; (bso#9617). + Reauth-capable client fails to access shares on Windows member; (bso#9625). + PIDL: Fix parsing linemarkers in preprocessor output; (bso#9636). + Rename internal subsystem pdb_ldap to pdb_ldapsam; (bso#9639). + Fix the build of vfs_afsacl; (bso#9642). + Fix the build with --fake-kaserver; (bso#9643). + Fix compile of source3/lib/afs.c; (bso#9644). + Make SMB2_GETINFO multi-volume aware; (bso#9646). + idmap_autorid: Fix freeing of non-talloced memory; (bso#9653). + Work around FreeBSD's getaddrinfo() underscore issue; (bso#9656). + 'make test' hangs; (bso#9663). + Fix correct linking of libreplace with cmdline-credentials; (bso#9664). + Fix filtering of link-local addresses; (bso#9666). + Fix crash in 'net rpc join' against a Samba 3.0.33 PDC; (bso#9669). + Samba denies owner Read Control when there is a DENY entry while W2K08 does not; (bso#9674). + Fix several resource (fd) leaks; (bso#9683). + Fix a memory leak in spoolss rpc server; (bso#9685). + Fix a possible buffer overrun in pdb_smbpasswd; (bso#9686). + Fix several possible null pointer dereferences; (bso#9687). + Make sure that domain joins work correctly when the DC disallows NTLM auth; (bso#9689). + Backport tevent changes to bring library to version 0.9.18; (bso#9695). + Remove incomplete samba_dnsupdate IPv6 link-local address check; (bso#9696). + DsReplicaGetInfo fails due to sendto() EMSGSIZE error on UNIX domain socket; (bso#9697). + Fix vfs_catia and update documentation; (bso#9701); (bnc#824833). + Fix build on solaris8: Do not force a specific perl on pod2man; (bso#9703). + Fix nss_winbind name on FreeBSD; (bso#9704). + s4:winbindd: Do not drop the workgroup name in the getgrnam, getgrent and getgrgid calls; (bso#9711). + Set LD_LIBRARY_PATH in install_with_python.sh; (bso#9717). + s4-idmap: Remove requirement that posixAccount or posixGroup be set for rfc2307; (bso#9718). + Allow forcing an override of an old @MODULES record; (bso#9719). + Do not print the admin password during 'samba-tool classicupgrade'; (bso#9720). + Make samba_upgradedns more robust (do not guess addresses when just changing roles); (bso#9721). + Add a tool to migrate latin1 printing tdbs to registry; (bso#9723). + is_encrypted_packet() function incorrectly used inside server; (bso#9724). + upgradeprovision and 'samba-tool dbcheck' patches for 4.0.NEXT; (bso#9725). + Fix NULL pointer dereference; (bso#9727). + DO NOT install samba_upgradeprovision in 4.0.x; (bso#9728). + Fix 'smbcontrol close-share'; (bso#9733). + Fix Winbind separator in upn to username conversion; (bso#9735). + Change to smbd/dir.c code gives significant performance increases on large directory listings; (bso#9736). + PIDL: Build fixes for hosts without CPP (Solaris 11); (bso#9739). + Make sure that we only propogate the INHERITED flag when we are allowed to; (bso#9747). + Remove unneeded fstat system call from hot read path; (bso#9748). + Don't leak the epm_Map policy handle; (bso#9758). + Fix incorrect parsing of SMB2 command codes; (bso#9760). - Update to 4.0.4. + Remove forced set of 'create mask' to 0777; CVE-2013-1863; (bnc#809624).- Fix periodic printcap cache reloads; (bso#9650); (bnc#807334).- No longer use the cifs- or smbfstab named configuration file on post-12.2 systems; (bnc#804822); (bnc#821889).- Shift the smbfs init script nfs dependency from Required to Should.- Fix SMB1 Session Setup AndX handling with a large krb PAC; (bso#9658); (bnc#802031).- Point LD_LIBRARY_PATH to the just-built libraries while calling testparm to generate the default share snippets on pre-12.2 systems.- Explicitly configure --with-ads.- Fix smbclient recursive mget EPERM handling; (bso#9633); (bnc#786350).- Remove superfluous quotation marks while setting the SAMBA_VERSION_VENDOR_SUFFIX string.- Do not restart the smbfs service on pre-11.3 systems during dhcp lease renewal when the IP address remains the same; (bnc#800782).- Update to 4.0.3. + Fix ACL problem with delegation of privileges and deletion of accounts over LDAP interface; add documentation; (bso##8909). + check_password_quality: Handle non-ASCII characters properly; (bso##9105). + Fix 'smbd' panic triggered by unlink after open; (bso##9571). + smbd: Fix memleak in the async echo handler; (bso##9549). + defer_open is triggered multiple times on the same request; (bso#9196). + Add extra attributes for AD printer publishing; (bso#9378). + FSMO seize of naming role fails: NT_STATUS_IO_TIMEOUT; (bso#9461). + Downgrade v4 printer driver requests to v3; (bso#9474). + samba_upgradeprovision: fix the nTSecurityDescriptor on more containers; (bso#9481). + s3:smb2_negprot: set the 'remote_proto' value; (bso#9499). + waf assumes that pythonX.Y-config is a Python script; (bso#9503). + s4:drsuapi: Make sure we report the meta data from the cycle start; (bso#9508). + wafsamba: Use additional xml catalog file; (bso#9512). + samba_dnsupdate: Set KRB5_CONFIG for nsupdate command; (bso#9517). + conn->share_access appears not be be reset between users; (bso#9518). + Remove superfluous bracket in samba.8.xml; (bso#9528). + Fix typo in vfs_tsmsm.8.xml; (bso#9530). + terminate the irpc_servers_byname() result with server_id_set_disconnected(); (bso#9540). + Make use of posix_openpt; (bso#9541). + Fix build of vfs_commit and plug in async pwrite support; (bso#9544). + Fix aio_suspend detection on FreeBSD; (bso#9546). + Correctly detect O_DIRECT; (bso#9548). + sigprocmask does not work on FreeBSD to stop further signals in a signal handler; (bso#9550). + smb.conf(5): Update list of available protocols; (bso#9552). + s4-resolve: Fix parsing of IPv6/AAAA in dns_lookup; (bso#9555). + Fix compilation of Solaris ACL module; (bso#9564). + Adding additional Samba 4.0 DC to W2k8 srv AD domain (in win200 functional level) produces dbcheck errors; (bso#9565). + Add dbwrap_tool.1 manual page; (bso#9568). + Document the command line options in dbwrap_tool(1); (bso#9568). + ntlm_auth(1): Fix format and make examples visible; (bso#9569). + Fix file corruption during SMB1 read by Mac OSX 10.8.2 clients; (bso#9572). + Fix a possible null pointer dereference in spoolss; (bso#9574). + Duplicate flags defined in the winbindd protocol; (bso#9575). + gensec: Allow login without a PAC by default; (bso#9581). + smbd: disk_free: sys_popen() failed" message logged in /var/log/message many times; (bso#9586). + Archive flag is always set on directories; (bso#9587). + ACLs are not inherited to directories for DFS shares; (bso#9588). + Correct meta data in ldb manpages; (bso#9591). + s3-winbind: Fix the build of idmap_ldap; (bso#9595). + Linked attribute handling should be by GUID; (bso#9596). + Fix timeouts of some IRPC calls; (bso#9598). + Use pid,task_id as cluster_id in process_single just like process_prefork; (bso#9598). + Add 'ldbdump' tool; general code and documentation cleanup; (bso#9609). + dsdb: Make secrets_tdb_sync cope with -H secrets.ldb; (bso#9610).- Update to 4.0.2. + Address SWAT security issues CVE-2013-0213 and CVE-2013-0214 which both don't apply to any SUSE Samba post-3.6.10 as it isn't longer built. + Don't build and package static libraries.- Drop separate build-source-timestamp file as it led to a second, incorrect Source Timestamp line.- Add server-side copy support; (fate#314770). + Implement FSCTL_SRV_COPYCHUNK and FSCTL_SRV_REQUEST_RESUME_KEY handlers. + Add vfs_btrfs VFS module for optimized Btrfs clone-range ioctl usage.- Add filter against shlib-policy-name-error for /lib*/libnss_wins.so.2.- Disable SWAT during configure and don't package it any longer.- Remove dangling references to Heimdal from the spec file.- Remove /lib/samba prefix from the localstatedir configure option.- Update to 4.0.1. + Samba 4.0.0 as an AD DC may provide authenticated users with write access to LDAP directory objects; CVE-2013-0172; (bnc#798364).- Add the missing get_printing_ticket binary path while calling the set_permissions macro; (bnc#783375).- Use the version macro while definition of the branch macro.- Remove references to no longer used devel macros.- Update to 4.0.0. + Honor password complexity settings; (bso#9414). + Install SWAT *.msg files with waf; (bso#9415). + Fix netr_ServerPasswordSet2, netr_LogonSamLogon with netlogon AES; (bso#9438). + developer-build: Fix panic when acl_xattr fails with access denied; (bso#9456). + Fix "map username script" with "security=ads" and Winbind; (bso#9457). + Install manpages only if we install the target; (bso#9459). + Respond correctly to FILE_STREAM_INFO requests; (bso#9460). + Users can not be given write permissions any more by default; (bso#9462). + Fix MMC crashes; (bso#9470). + Fix SEGV when using second vfs module; (bso#9471). + Support FIPS mode when building Samba; (bso#9479). + Fix ACL on "cn=partitions,cn=configuration"; (bso#9481).- netr_ServerPasswordSet2, netr_LogonSamLogon with netlogon AES broken; (bso#9438). - s3:auth: fix create_token_from_sid() to not fail in the winbindd case; (bso#9457). - s4:dsdb/acl_read: return the nTSecurityDescriptor attr if the sd_flags control is given; (bso#9470). - Support FIPS mode when building Samba; (bso#9479). - s4:provision: set the correct nTSecurityDescriptor; (bso#9481).- SEGV when using second vfs module; (bso#9471).- Update to 3.6.10. + Respond correctly to FILE_STREAM_INFO requests; (bso#9460). + Fix segfault when "default devmode" is disabled; (bso#9433). + Fix segfaults in "log level = 10" on Solaris; (bso#9390).- s3:smbd:vfs_acl: fix a PANIC when setting an ACL fails with ACCESS_DENIED; (bso#9456). - Install manpages only if we install the target; (bso#9459). - Users can not be given write permissions any more by default; (bso#9462).- Fix MD5 detection in the autoconf build; (bso#9037); (bso#9086); (bso#9094); (bso#9418). - Use work around for 'winbind use default domain' only if it is set; (bso#9367). - Allow smb2.acls torture test to pass against smbd with a POSIX ACLs backend; (bso#9374). - large read requests cause server to issue malformed reply; (bso#9422). - s3-rpc_client: lookup nametype 0x20 in rpc_pipe_open_tcp_port(); (bso#9426). - Fix ncacn_ip_tcp reconnection code for lsa lookups; (bso#9439). - Allow to force DNS updates using net; (bso#9451). - Respond correctly to FILE_STREAM_INFO requests; (bso#9460).- Update to 4.0.0rc6. See WHATSNEW.txt from the samba-doc package.- On uninstall remove winbind from the pam configuration, invalidate the nscd passwd and group cache and only recommend the install of nscd; (bnc#792340).- BuildRequire libnscd-devel once.- Remove obsoleted references to pre-9.4 SUSE systems; (bnc#792294). - Add SUSE version depending pkg-config requires macro; (bnc#792294).- Define library names and use it instead of libldb1, libnetapi0, libsmbclient0, libsmbsharemodes0, libtalloc2, libtdb1, libtevent0, and libwbclient0; (bnc#792294). - Provide and obsolete libsmbsharemodes for post-10.3 SUSE systems.- Don't clutter the spec file diff view; (bnc#783384).- Fix fd leak causing 100% CPU in winbind on certain dc connection failures; (bso#9436); (bnc#786677).- Fix spoolss segfault when default devmode is disabled; (bso#9433); (bnc#791183).- Update to 4.0.0rc5. See WHATSNEW.txt from the samba-doc package.- ACL masks incorrectly applied when setting ACLs; (bso#9236). - s3-kerberos: also try with AES keys, when decrypting tickets; (bso#9272). - lib/replace: replace all *printf function if we replace snprintf; (bso#9390). - lib/addns: don't depend on the order in resp->answers[]; (bso#9402).- s4:torture/smb2: improve the smb2.create.blob tes; (bso#9209). - lib/krb5_wrap: request enc_types in the correct order; (bso#9272). - Fix net ads join message for the dns domain; (bso#9326). - docs-xml: fix use of tag; (bso#9345). - s3-aio_pthread: Optimize aio_pthread_handle_completion; (bso#9359). - s3:winbind: Failover if netlogon pipe is not available; (bso#9386).- Execute the run_permissions macro on pre-11.4 systems and else the set_permission one if available.- Ensure adding the winbind group never can fail.- Create ntadmin group only if it doesn't yet exist.- Update to 3.6.9. + When setting a non-default ACL, don't forget to apply masks to SMB_ACL_USER and SMB_ACL_GROUP entries; (bso#9236). + Winbind can't fetch user or group info from AD via LDAP; (bso#9147). + Fix segfault in smbd if user specified ports out for range; (bso#9218).- quota: Don't force the block size to 512; (bso#3272). - Fix poll replacement to become a msleep replacement; (bso#8107). - Fix wrong test == syntax in configure; (bso#8146). - Fix --with(out)-sendfile-support option handling in autoconf; (bso#8344). - Fix builtin forms order to match Windows again; (bso#8632). - Fix RAW printing for normal users; (bso#8769); (bnc#790741). - Initialise ticket to ensure we do not invalid memory; (bso#8788). - Fix 'net rpc share allowedusers' to work with 2008r2; (bso#8966). - Fix crash on null pam change pw response; (bso#9013). - Connection to outbound trusted domain goes offline; (bso#9016). - Increase debug level for info that the db is empty; (bso#9112). - 'smbclient' can't connect to a Windows 7 server using NTLMv2; (bso#9117). - Winbind can't fetch user or group info from AD via LDAP; (bso#9147). - Open printers with the right access mask; (bso#9154). - Fix makerpms.sh on RHEL; (bso#9165). - Remove non-existent option '-Y' from winbindd manpage; (bso#9171). - Add quota support for gfs2; (bso#9172). - Make SMB2 compound request create/delete_on_close/close work as Windows; (bso#9173). - Empty SPNEGO packet can cause smbd to crash; (bso#9174). - pam_winbind: Match more return codes when wbcGetPwnam has failed; (bso#9177). - Fix crash bug in idmap_hash; (bso#9188); (bnc#788159). - SMB2 Create doesn't return correct MAX ACCESS access mask in blob; (bso#9189). - Fix service control for non-internal services; (bso#9192). - Don't take 'state->te' as indication for "was_deferred"; (bso#9196). - Parse of invalid SMB2 create blob can cause smbd crash; (bso#9209). - Bad ASN.1 NegTokenInit packet can cause invalid free; (bso#9213). - Fix segfault in smbd if user specified ports out for range; (bso#9218). - Signing cannot be disabled for SMB2 by design, so fix the documentation instead; (bso#9222). - Fix NT_STATUS_IO_TIMEOUT during slow import of printers into registry; (bso#9231). - When setting a non-default ACL, don't forget to apply masks to SMB_ACL_USER and SMB_ACL_GROUP entries; (bso#9236). - lib-addns: ensure that allocated buffer are pre set to 0; (bso#9259). - Make tdb robust against shrinking tdbs and improper CLEAR_IF_FIRST restart; (bso#9268). - Add support for reloading systemd services; (bso#9280).- Warn via the smbd log if AppArmor and "wide links" are in use; (bnc#783719).- Do not write the build date into the header of the default smb.conf as this causses superfluous rebuilds of packages depending on samba; (bnc#781601).- Do not prerequire SuSEconfig.permissions as it's already enough and more generic to depend on the permissions package; (bnc#782293).- Update to 3.6.8. + Fix crash bug in smbd caused by a blocking lock followed by close; (bso#9084). + Fix Winbind panic if we couldn't find the domain; (bso#9135).- Backport FSCTL codes and fix segfault in smbstatus from master; (bso#9058). - Fix bad call to memcpy source3/registry/regfio.c; (bso#9065). - "Domain Users" incorrectly added as additional group on domain members; (bso#9066). - Use correct RID for "Domain Guests" primary group; (bso#9067). - Fix crash bug in smbd caused by a blocking lock followed by close; (bso#9084). - Fix smbclient/tarmode panic when connecting to Windows 2000 clients; (bso#9088). - Fix refreshing of Kerberos tickets in Winbind; (bso#9098). - Fix identification of idle clients in Winbind to avoid crashes and NDR parsing errors; (bso#9104). - Fix compilation with newer MIT Kerberos which hides internal symbols; (bso#9111). - Fix flooding the logs with records we don't find in pcap; (bso#9112). - Initialize the print backend after we setup winreg; (bso#9122). - Fix lprng job tracking errors; (bso#9123). - Fix setting of "inherited" bit on inherited ACE's; (bso#9124). - Fix Winbind panic if we couldn't find the domain; (bso#9135). - Make 'smbclient allinfo' show the snapshot list; (bso#9137). - Fix nfs quota support with Linux nfs4 mounts; (bso#9144). - Valid open requests can cause smbd assert due to incorrect oplock handling on delete requests; (bso#9150).- NMB registration for a duplicate workstation fails with registration refuse; (bso#9085); (bnc#770056).- Remove backup files caused by running configure in examples/VFS.- Update to 3.6.7. + Fix resolving our own "Domain Local" groups; (bso#9052); (bnc#779269). + Fix migrating printers while upgrading from 3.5.x; (bso#9026).- Correct documentation of "case sensitive"; (bso#8552). - Printing fails in function cups_job_submit; (bso#8719). - Fix kernel oplocks when uid(file) != uid(process); (bso#8974). - Send correct responses to NT Transact Secondary when no data and no params for the Trans2 calls are set; (bso#8989). - Fix build without ads support; (bso#8996). - Don't turn negative cache entries into valid idmappings; (bso#9002). - Fix posix acl on gpfs; (bso#9003). - Make vfs_gpfs less verbose in get/set_xattr functions; (bso#9022). - Fix migrating printers while upgrading from 3.5.x; (bso#9026). - Fix typo in set_re_uid() call when USE_SETRESUID selected in configure; (bso#9034). - Using asynchronous IO with SMB2 can return NT_STATUS_FILE_CLOSED in error instead ofNT_STATUS_FILE_LOCK_CONFLICT; (bso#9040). - Fix resolving our own "Domain Local" groups; (bso#9052); (bnc#779269). - Fix build against CUPS 1.6; (bso#9055). - Fix bugs in SMB2 credit handling code; (bso#9057). - rpcclient: Fix bad call to data_blob_const; (bso#9062).- Create missing doc directories while install. - Remove no longer existing Manifest file from install. - Don't creat a link to non existend html man pages for swat. - Don't call the no longer existing libsmbclient testsuit while build.- Configure with option --mandir instead --with-mandir. - Remove obsoleted --with-rootsbindir, --with-nmbdsocketdir, and - -with-swatdir configure options.- Update to 4.0.0beta4. See WHATSNEW.txt from the samba-doc package.- BuildRequire gcc, make, and patch; (bnc#771516).- ndr: fix push/pull DATA_BLOB with NDR_NOALIGN; (bso#9026); (bnc#770262).- Fix shell syntax in dhcpcd hook script; (bnc#769957).- Add missing int declaration to the net kdc lookup patch.- Update to 4.0.0beta2. See WHATSNEW.txt from the samba-doc package.- Update to 3.6.6. + Fix possible memory leaks in the Samba master process; (bso#8970). + Fix uninitialized memory read in talloc_free(); (bnc#764577). + Fix joining of XP Pro workstations to 3.6 DCs; (bso#8373); (bnc#787983).- resolve_ads() code can return zero addresses and miss valid DC IP addresses; (bso#8910). - Can't join XP Pro workstations to 3.6.1 DC; (bso#8373); (bnc#787983). - winbind can hang as nbt_getdc() has no timeout; (bso#8953). - Fix crash bug in dns_create_probe when dns_create_update fails; (bso#8627) - s3-pid: Catch with pid filename's change when config file is not smb.conf; (bso#8714). - Possible memory leaks in the main Samba process; (bso#8970). - s3: Fix uninitialized memory read in talloc_free(); (bnc#764577). - Treat exit_server_cleanly() as a "clean" shutdown; (bso#8971). - Avoid crash with MIT krb5 1.10.0 in gss_get_name_attribute(); (bso#8988). - Winzip occasionally can not read files out of an open winzip dialog; (bso#8311). - s3-winbindd: call dump_core_setup after command line option has been parsed; (bso#8975). - Directory group write permission bit is set if unix extensions are enabled; (bso#8972). - s3: remove dependency on automake for "make everything"; (bso#8978). - sd_has_inheritable_components segfaults on an SD that se_access_check accepts; (bso#8811). - smbclient's tarmode insists on listing excluded directories; (bso#8922). - Notify code can miss a ChDir; (bso#8998). - s3:smbd: add a fsp_persistent_id() function; (bso#8995).- Call autogen.sh even on post-12.1 SUSE systems.- Don't call autogen.sh on post-12.1 SUSE and post-14 Fedora systems. - Recompile all IDL in any case.- BuildIgnore libtalloc and libtdb to prevent a package conflict on Fedora systems.- Install talloc.pc only on pre-12.2 and non SUSE systems.- BuildRequire libldb-devel, libtalloc-devel, libtdb-devel, and libtevent-devel on post-12.1 systems.- s3: Fix a segfault with debug level 3 on Solaris; (bso#8861). - s3: wbinfo --lookup-sids "" crashes winbind; (bso#8904). - smbd crashes when deleting directory and veto files are enabled; (bso#8837). - winbind_krb5_locator only returns one IP address; (bso#8897). - Wrong assertion/comparison: Compare value not pointer; (bso#8859). - Inconsistent (with manpage) command-line switch for "help" in smbtree; (bso#8831). - Fix incorrect debug statement. - Setting traverse rights fails to enable directory traversal when acl_xattr in use; (bso#8857). - Syslog broken owing to mistyping of debug_settings.syslog; (bso#8877). - s3/ldap: remove outdated netscape ds 5 schema file; (bso#8869). - s3-docs: fixes several typos; (bso#7938). - s3-VFS: Fix building out-of-tree modules; (bso#8822). - s3-docs: Add hint that setting "profile acls = yes" on normal shares can cause trouble; (bso#7930). - s3-pam_winbind: Fix the build with a newer iniparser library; (bso#8915). - Avoid null dereference in initialize_password_db(); (bso#8920). - s3:registry: implement values_need_update and subkeys_need_update in the smbconf backend. - s3:registry:reg_api: fix reg_queryvalue to not fail when values are modified while it runs. - s4:torture:rpc:spoolss: also initialize driverName before checking it in test_PrinterData_DsSpooler(). - s3:registry: multiple cleanups, fixes, and optimisations. - s3:auth/server_info: the primary rid should be in the groups rid array; (bso#8798). - s3-printing: Add new printers to registry; (bso#8554); (bso#8612); (bso#8748). - Fix the overwriting of errno before use in a DEBUG statement and use the return value from store_acl_blob_fsp rather than ignoring it; (bso#8945). - s3-auth: Don't lookup the system user in pdb; (bso#8944). - s3-passdb: Fix negative SID->uid/gid cache handling; (bso#8952). - Fix typo in pam_winbindd code; (bso#8957). - Fix remove_duplicate_addrs2 previously it could leave zero addresses in the list; (bso#8910). - Slow but responsive DC can lock up winbindd; (bso#8943). - Broken processing of %U with vfs_full_audit when force user is set; (bso#8882).- Disable included build of ldb, talloc, tdb, and tevent on post-12.1 systems. - BuildRequire libldb1-devel, libtalloc2-devel, libtdb1-devel, and libtevent0-devel on post-12.1 systems.- Add PreReq /etc/init.d/nscd to the winbind package; (bnc#759731).- docs-xml: fix default name resolve order; (bso#7564). - s3-aio-fork: Fix a segfault in vfs_aio_fork; (bso#8836). - docs: remove whitespace in example samba.ldif; (bso#8789). - s3-smbd: move print_backend_init() behind init_system_info(); (bso#8845); (bnc#730769). - s3-docs: Prepend '/' to filename argument; (bso#8826).- Update to 3.6.5. - Restrict self granting privileges where security=ads for Samba post-3.3.16; CVE-2012-2111; (bnc#757576).- Remove all precompiled idl output to ensure any pidl changes take effect; (bnc#757080).- Update to 3.6.4. - Samba pre-3.6.4 are affected by a vulnerability that allows remote code exe- cution as the "root" user; PIDL based autogenerated code allows overwriting beyond of allocated array; CVE-2012-1182; (bso#8815); (bnc#752797).- s3-winbindd: Only use SamLogonEx when we can get unencrypted session keys; (bso#8599). - Correctly handle DENY ACEs when privileges apply; (bso#8797).- s3:smb2_server: fix a logic error, we should sign non guest sessions; (bso8749). - Allow vfs_aio_pthread to build as a static module; (bso#8723). - s3:dbwrap_ctdb: return the number of records in db_ctdb_traverse() for persistent dbs; (#bso8527). - s3: segfault in dom_sid_compare(bso#8567). - Honor SeTakeOwnershiPrivilege when client asks for SEC_STD_WRITE_OWNER; (bso#8768). - s3-winbindd: Close netlogon connection if the status returned by the NetrSamLogonEx call is timeout in the pam_auth_crap path; (bso#8771). - s3-winbindd: set the can_do_validation6 also for trusted domain; (bso#8599). - Fix problem when calculating the share security mask, take priviliges into account for the connecting user; (bso#8784).- Fix crash in dcerpc_lsa_lookup_sids_noalloc() with over 1000 groups; (bso#8807); (bnc#751454).- Remove obsoleted Authors lines from spec file for post-11.2 systems.- Make ldapsmb build with Fedora 15 and 16; (bso#8783). - BuildRequire libuuid-devel for post-11.0 and other systems. - Define missing python macros for non SUSE systems. - PreReq to fillup_prereq and insserv_prereq only on SUSE systems. - Always use cifstab instead of smbfstab on non SUSE systems.- Ensure AndX offsets are increasing strictly monotonically in pre-3.4 versions; CVE-2012-0870; (bnc#747934).- Add SERVERID_UNIQUE_ID_NOT_TO_VERIFY; (bso#8760); (bnc#741854).- s3-printing: fix crash in printer_list_set_printer(); (bso#8762); (bnc#746825).- s3:winbindd fix a return code check; (bso#8406).- s3: Add rmdir operation to streams_depot; (bso#8733).- s3:smbd:smb2: fix an assignment-instead-of-check bug conn_snum_used(); (bso#8738); CVE-2013-0454; (bnc#811975).- s3:auth: fill the sids array of the info3 in wbcAuthUserInfo_to_netr_SamInfo3(); (bso#8739).- s3:client: ignore SMBecho errors (the server may not support it); (bso#8139).- Be more strict when using PAM_AUTH API from winbind if Kerberos auth is enabled and don't unintentionally use a bogus domain name; (bso#8734).- smbclient fails with posix large reads; (bso#8727).- Use the smbfs init script on versions pre-11.3, or cifs in later versions; (bnc#744614).- s3: Compile IDL files in autogen, some configure tests need this.- Fixes various deadlocks in if-up.d / if-down.d when running under systemd; (bnc#732395).- Update to 3.6.3. + Fix memory leak in parent smbd on connection; CVE-2012-0817; (bso#8724); (bnc#743986).- Use spdx.org compliant license names for all packages.- Update to 3.6.2. + Make Winbind receive user/group information (bug #8371). + Several SMB2 fixes. + Fix a crash bug in the spoolss code. + Add new contributing FAQ announcing acceptance of corporate (C). + DeletePrinterDriverEx deletes files in use; (bso#4942); (bnc#742504). + Fix cli_write_and_x() against OS/2 print shares; (bso#5326). + Fix 'smbclient tar' for files greater than 8GB on BE machines; (bso#563); (bnc#726145). + Remove pointless use_memory_krb5_ccache; (bso#7465). + Fix perl path; (bso#8176). + Grant credits in async interim responses (SMB2); (bso#8357). + Make Winbind receive user/group information; (bso#8371). + Fix Windows XP clients crashing smbd process every once in a while; (bso#8384); (bnc#731571). + Make VFS op "streaminfo" stackable; (bso#8419). + Add an allocation pool to idmap_autorid; (bso#8444). + Fix SEGFAULT from net registry export on not zero terminated REG_SZ values; (bso#8528). + Make DSO_EXPORTS_CMD more portable; (bso#8531). + readlink() on Linux clients fails if the symlink target is outside of the share; (bso#8541). + smbclient posix_open command fails to return correct info on open file; (bso#8542). + winbind_samlogon_retry_loop ignores logon_parameters flags; (bso#8548). + Fix setting the machine account password; (bso#8550). + Make SMB2 handle compound request headers in the same way as Windows; (bso#8560). + Password change settings not fully observed; (bso#8561). + Fix double free error in talloc; (bso#8562). + Fix alignment in the non-extended-security negprot; (bso#8573). + Add systemd service files; (bso#8575). + Add systemd service files; (bso#8575). + smb2_flush: Don't send uninitialized memory; (bso#8579). + Enable inotify if sys or kernel inotify is available; (bso#8580). + Increase a debug level; (bso#8585). + libsmb: Only align unicode pipe_name; (bso#8586). + Fix marshalling of samr_ChangePasswordUser3; (bso#8591). + Don't limit the number of open dptrs for SMB2; (bso#8592). + Fix a crash bug in cldap_socket_recv_dgram(); (bso#8593). + Make cldap work over IPv6; (bso#8600). + Fix intermittent print job failures caused by character conversion errors; (bso#8606). + Improve configure.in so it can be used outside the Samba source tree; (bso#8607). + Winbind: Don't fail on users without a uid; (bso#8608). + Ensure we correctly calculate reply credits over all returned SMB2 replies; (bso#8614). + Fix migrate printer code; (bso#8618). + Fix crash bug when trying to browse Samba printers; (bso#8623). + libsmb: Don't duplicate Kerberos service tickets; (bso#8628). + POSIX ACE x permission becomes rx following mapping to and from a DACL; (bso#8631). + When returning an ACL without SECINFO_DACL requested, we still set SEC_DESC_DACL_PRESENT in the type field; (bso#8636). + Fix the vfs_commit module; (bso#8639). + Add an update function for Winbind cache; (bso#8643). + vfs_acl_xattr and vfs_acl_tdb modules can fail to add inheritable entries on a directory with no stored ACL; (bso#8644). + Document the "ignore system acls" option of vfs_acl_xattr and vfs_acl_tdb vfs modules; (bso#8652). + Fix deleting a symlink if the symlink target is outside of the share; (bso#8663). + Fix renaming a symlink if the symlink target is outside of the share; (bso#8664). + Fix NT ACL issue; (bso#8673). + Fix buffer overflow issue with AES encryption in samba traffic analyzer; (bso#8674). + Fix Winbind segfault if we can't map the last user; (bso#8678). + recvfile code path using splice() on Linux leaves data in the pipe on short write; (bso#8679). + Try ctdbd_init_connection() as root; (bso#8684). + Packet validation checks can be done before length validation causing uninitialized memory read; (bso#8686). + Fix typo in 'net memberships' usage; (bso#8687). + libads: Fix malloc/talloc mismatch in ads_keytab_verify_ticket(); (bso#8692). + Make DeletePrinterDriverEx remove printer driver files; (bso#8697) (bnc#740810). + Fix major leak with SMB2 in connections.tdb; (bso#8710).- s3-spoolss: Pass the right pointer type; (bso#4942); (bnc#742504).- Use correct license, LGPLv3+ for libwbclient packages.- When returning an ACL without SECINFO_DACL requested, we still set SEC_DESC_DACL_PRESENT in the type field; (bso#8636).- Fix incorrect types in the full_audit VFS module. Add null terminators to audit log enums; (bnc#742885).- Prefix print$ path on driver file deletion; (bso#8697); (bnc#740810). - Fix printer_driver_files_in_use() call ordering; (bso#4942); (bnc#742504).- Buffer overflow issue with AES encryption in samba traffic analyzer; (bso#8674). - NT ACL issue; (bso#8673). - Deleting a symlink fails if the symlink target is outside of the share; (bso#8663). - connections.tdb - major leak with SMB2; (bso#8710).- Renaming a symlink fails if the symlink target is outside of the share; (bso#8664).- Intermittent print job failures caused by character conversion errors; (bso#8606). - ads_keytab_verify_ticket mixes talloc allocation with malloc free; (bso#8692). - libcli/cldap: fix a crash bug in cldap_socket_recv_dgram(); (bso#8593). - s3:lib/ctdbd_conn: try ctdbd_init_connection() as root; (bso#8684). - s3-printing: fix migrate printer code; (bso#8618). - Packet validation checks can be done before length validation causing uninitialized memory read; (bso#8686).- net memberships usage info was wrong; (bso#8687). - s3-libsmb: Don't duplicate kerberos service tickets; (bso#8628). - Recvfile code path using splice() on Linux leaves data in the pipe on short write; (bso#8679). - s3-winbind: Fix segfault if we can't map the last user; (bso#8678). - vfs_acl_xattr and vfs_acl_tdb modules can fail to add inheritable entries on a directory with no stored ACL; (bso#8644). - s3/doc: document the ignore system acls option of vfs_acl_xattr and vfs_acl_tdb; (bso#8652). - Winbind can't receive any user/group information; (bso#8371). - s3-winbind: Add an update function for winbind cache; (bso#8643). - s3: Attempt to fix the vfs_commit module. - POSIX ACE x permission becomes rx following mapping to and from a DACL; (#bso#8631). - s3:libsmb: only align unicode pipe_name; (bso#8586). - s3-winbind: Don't fail on users without a uid; (bso#8608). - Crash when trying to browse samba printers; (bso#8623). - talloc: double free error; (bso#8562). - cldap doesn't work over ipv6; (bso#8600). - s3:libsmb: fix cli_write_and_x() against OS/2 print shares; (bso#5326). - SMB2: not granting credits for all requests in a compound request; (bso#8614). - smb2_flush sends uninitialized memory; (bso#8579). - Password change settings not fully observed; (bso#8561). - s3:smb2_server: grant credits in async interim responses; (bso#8357). - s3:smbd: don't limit the number of open dptrs for smb2; (bso#8592). - samr_ChangePasswordUser3 IDL incorrect; (bso#8591). - idmap_autorid does not have allocation pool; (bso#8444). - Add systemd service files. - s3:libsmb: the workgroup in the non-extended-security negprot is not aligned; (bso#8573). - s3-build: Fix inotify detection; (bso#8580). - SMB2 doesn't handle compound request headers in the same way as Windows; (#bso8560). - Disconnecting clients swamp the logs; (bso#8585). - s3-netlogon: Fix setting the machinge account password; (bso#8550). - winbind_samlogon_retry_loop ignores logon_parameters flags; (#bso8548). - smbclient posix_open command fails to return correct info on open file; (bso#8542). - readlink() on Linux clients fails if the symlink target is outside of the share; (bso#8541). - s3-netapi: remove pointless use_memory_krb5_ccache; (bso#7465). - s3:Makefile: make DSO_EXPORTS_CMD more portable; (bso#8531). - s3:registry: fix the test for a REG_SZ blob possibly being a zero terminated ucs2 string; (bso#8528). - Make VFS op "streaminfo" stackable; (bso#8419).- Fix incorrect perfcount array length calculations; (bnc#739258).- BuildRequire autoconf to avoid implicit dependency for post-11.4 systems.- Remove call to suse_update_config macro for post-11.4 systems.- Use samba.org for the ldapsmb source location.- Fixing libsmbsharemode dependency on ldap and krb5 libs in Makefile; (bnc #729516).- Do not map POSIX execute permission to Windows FILE_READ_ATTRIBUTES; (bso#8631); (bnc#732572).- Add ldap to Should-Start and Stop of the smb init script; (bnc#730046).- Fix smbd srv_spoolss_replycloseprinter() segfault; (bso#8384); (bnc#731571).- Fix pam_winbind.so segfault in pam_sm_authenticate(); (bso#8564).- Fix smbclient >8GB tars on big endian machines; (bso#563); (bnc#726145).- Fix typo in net ads join output; (bnc#713135).- Ignore a potentially missing AppArmor snippet helper script; (bnc#725256).- Update to 3.6.1. + Fix smbd crashes triggered by Windows XP clients; (bso#8384). + Fix a Winbind race leading to 100% CPU load; (bso#8409). + Several SMB2 fixes. + The VFS ACL modules are no longer experimental but production-ready. + Fix 'net ads join -k' when KRB5CCNAME is not set; (bso#7465). + smb_acl_to_posix: ACL is invalid for set (Invalid argument); (bso#7509). + Return error of cli_push when 'put - /some/file' is used; (bso#7551). + Fix usage of cli_errstr(); (bso#7864). + Fix 'widelinks' regression; (bso#8229). + Empty notify servername; (bso#8236). + Add man vfs_aio_fork; (bso#8256). + smb2: smbd logs "Invalid SMB packet: first request: 0x0008" and crashes; (bso#8334). + Add a fallback for missing open&x support in MAC OS/X Lion; (bso#8338). + While migrating forms, don't fail if the form already exists; (bso#8351). + OS/2 sends an unexpected write&x/read&x chain; (bso#8360). + Fix build of vfs_prealloc on SLES8; (bso#8363). + Fix the build of gpfs.c on RHEL 6.0 with gpfs 3.4.0-4; (bso#8364). + Fix the fallback to the deprecated spelling idmap:script; (bso#8368). + Fix vfs_chown_fsp; (bso#8370). + Fix smbd crashes triggered by Windows XP clients; (bso#8384). + Fix smbclient access to NT4 shares; (bso#8385). + Optimize serverid_exists() for Solaris; (bso#8395). + registry/reg_format.c must include includes.h; (bso#8401). + SMB2 server can return requests out-of-order when processing a compound request; (bso#8407). + Fix a Winbind race leading to 100% CPU load; (bso#8409). + Fix "saving as" of MS Office 2007 (Word) documents on Samba shares with SMB2; (bso#8412). + Fix 'getent group' if trusted domains are not reachable; (bso#8420). + Fix infinite loop in ACL module code; (bso#8422). + Fix wrong reply to DHnC (durable handle reconnect); (bso#8428). + Compound SMB2 requests on an IPC connection can corrupt the reply stream; (bso#8429). + Fix segfault in iconv.c; (bso#8433). + NFSv4 DENY ACLs always include SYNCHRONIZE flag - blocking renames; (bso#8442). + Be smarter about setting default permissions when a ACL_USER_OBJ isn't given; (bso#8443). + Check the wct of the incoming SMBnegprot responses; (bso#8452). + Fix smbclient segfaults when dialect option -m is used for legacy dialects; (bso#8453). + Fix uninitialized memory problem in group_sids_to_info3; (bso#8455). + Samba PDC is looking up only primary user group; (bso#8455). + IE9 on Windows 7 cannot download files to samba 3.5.11 share; (bso#8458). + smb2_find uses a hard coded max reply size of 0x10000 instead of smb2_max_trans; (bso#8473). + SMB2 create doesn't cope with an Apple client using NULL blob in create; (bso#8474). + Don't call smbd_terminate_connection in smb2_validate_message_id(); (bso#8476). + Samba asserts when SMB2 client breaks the crediting rules; (bso#8476). + Map to guest can return uninitialized blob of data; (bso#8477). + acl_xattr can free an invalid pointer if no blob is loaded; (bso#8480). + DFS breaks zip file extracting unless "follow symlinks = no" set; (bso#8493). + Remove "experimental" label on VFS ACL modules; (bso#8494). + SMB2_OP_CANCEL requests don't have to be signed; (bso#8503). + smbd doesn't correctly honor the "force create mode" bits from a cifsfs create; (bso#8507). + Read-only handles on SAMR allow SAMR_DOMAIN_ACCESS_CREATE_USER; (bso#8509). + Disallow "." in can_set_delete_on_close(); (bso#8515). + SMB2 create call returns incorrect file allocation size; (bso#8518). + Fix SMB2 SMB2_OP_GETINFO and SMB2_OP_IOCTL parsing requirements; (bso#8520). + Winbind cache timeout expiry test was reversed; (bso#8521).- s3/doc: add man page for aio_fork vfs module.- Fix uninitialized memory problem in group_sids_to_info3; (bso#8455).- s3: Samba PDC is looking up only primary user group; (bso#8455).- Add script to create or update an AppArmor sniplet with permissions for all Samba shares; (bnc#688040).- Add "ldapsam:login cache" parameter to allow explicit disabling of the login cache; (bnc#723261).- Retain the smbd startproc return value for correct startup status reporting. unset was incorrectly being called prior to rc_status; (bnc#723724).- Prevent deadlock in systemd triggered by if-down.d handler on shutdown; (bnc#721598).- smb2_find uses a hard coded max reply size of 0x10000 instead of smb2_max_trans; changed defaults and documentation (bso8473).- Empty CIFS share can be blocked for other clients by deleting it via empty path (DELETE_PENDING until the last client); (bso#8515).- winbindd cache timeout expiry test was reversed; (bso#8521).- Fix SMB2 SMB2_OP_GETINFO and SMB2_OP_IOCTL parsing requirements; (bso#8520).- s3:smb2_create: fix allocation size return value when opening existing files; (bso#8518).- SMB2 create doesn't cope with an Apple client using NULL blob in create; (bso#8474).- NFSv4 DENY ACLs always include SYNCHRONIZE flag - blocking renames; (bso#8442).- s3-docs: Fix bug (bso#7908) and typo.- Return error of cli_push when 'put - /some/file' is used; (bso#7551).- Read-only handles on SAMR allow SAMR_DOMAIN_ACCESS_CREATE_USER; (bso#8509).- smbd doesn't correctly honor the "force create mode" bits from a cifsfs create; (bso#8507).- Default user entry is set to minimal permissions on incoming ACL change with no user specified; (bso#8443).- smb_acl_to_posix: ACL is invalid for set (Invalid argument); (bso#7509).- Handle the SECINFO_LABEL flag in the same was as Win2k3; enable Microsoft Internet Explorer 9 on Windows 7 to download files; (bso#8458).- DFS breaks zip file extracting unless "follow symlinks = no" set; (bso#8493).- s3-docs: Fix typos.- s3:smb2_server: SMB2_OP_CANCEL requests don't have to be signed; (bso#8503).- Remove "experimental" label on VFS ACL modules; (bso#8494).- acl_xattr can free an invalid pointer if no blob is loaded; (bso#8480).- s3-smbd: asserts when SMB2 client breaks the crediting rules; (bso#8476).- s3-libnet: allow to use default krb5 ccache in libnet_Join/libnet_Unjoin; (bso#7465).- smb2_find uses a hard coded max reply size of 0x10000 instead of smb2_max_trans; (bso#8473).- s3-netapi: allow to use default krb5 credential cache for libnetapi users.- s3-docs: document -k switch in net manpage.- Map to guest can return uninitialized blob of data; (bso#8477).- s3-registry: registry/reg_format.c must include includes.h; (bso#8401).- smbclient segfaults when option -m is used for legacy dialects; (bso#8453).- Fix 'widelinks' regression intro'd in 3.2; (bso#8229).- Compound SMB2 requests on an IPC connection can corrupt the reply stream; (bso#8429).- s3-spoolss: Fix bug forms migration; (bso#8351).- s3:libsmb: check the wct of the incoming SMBnegprot responses; (bso#8452).- s3: Do not fork the echo handler for smb2; (bso#8334).- s3-spoolss: Fix bug empty notify servername; (bso#8236).- SMB2 server can return requests out-of-order when processing a compound request; (bso#8407).- Remove smb child crash fix. The issue had been fixed upstream differently.- BuildRequire ctdb-devel version greater than 1.0.105 for post-10.0 systems.- Fix samba duplicates file content on appending. Move posix case semantics out from under the VFS; (bso#6898); (bnc#681208).- Make winbind child reconnect when remote end has closed, fix failing sudo; (bso#7295); (bnc#569721).- Spec file cleanup as suggested by the spec-cleaner tool. + Make all BuildRequires, PreReq, and Provides a separate line. + Use %{buildroot} instead of ${RPM_BUILD_ROOT}. + Use straight commands instead of macros (make, install). + Use -p in post and postun if we only call one command. + Use %{_localstatedir} instead of %{_var} in the filelist. + Remove superfluous AutoReqProv on lines.- Remove %release from all Provides.- Fix segfault in iconv.c which caused a null pointer dereference; (bso#8433).- Use /var/run for the cifs state file in the init script too; (bnc#710304).- Microsoft Word from Microsoft Office 2007 fails to save as on a share with SMB2; (bso#8412).- Use sys_write and sys_read in fork_domain_child to fix a winbind race leading to 100% CPU usage; (bso#8409).- Fix wrong reply to smb2 durable handle reconnect (DHnC) request; (bso#8428).- Fix infinite loop in ACL module code; (bso#8422).- Fix getent group if trusted domains are not reachable; (bso#8420).- smbclient can't access a NT4 share since 3.6.0; (bso#8385).- Optimize serverid_exists() for Solaris; (bso#8395).- talloc: + check block count after references test. + added test suite for talloc_free_children(). + license info erratum in the manpage. + fix typos and better differentiation between versions 1 and 2. + preserve context name on talloc_free_children(). + ensure the sibling linked list remains valid during a free.- vfs_chown_fsp returned in the wrong directory; (bso#8370).- Remove irritating "." targets when recent system libs exist; (bso#8369).- Correctly initialize "idmap config * : script" with NULL; (bso#8368).- Add missing include to suppress compiler warnings; (bso#8365).- Point the chain offset beyond the current request; (bso#8360).- Fix gpfs vfs module build; (bso#8364).- Make vfs_prealloc even build on older systems; (bso#8363).- Do central cli_set_error and return the actual NTSTATUS; (bso#7864).- Add a fallback for missing open&x support in OS/X Lion; (bso#8338).- Update to 3.6.0. + BUG 7462: Make SA_RESETHAND conditional on its existance. + BUG 8303: db_ctdb_send_schedule_for_deletion() is not defined. + BUG 8324: smbclient cannot list directories from a big-endian machine. + BUG 8326: WinXP cannot join a Samba3 domain with a 'even' hostname. + BUG 8327: Fix the reload of the configuration, also reload activated registry shares. + BUG 8328: Cleanup of idmap_tdb2 code. + BUG 8330: Fix NFSv4 ACL merging logic. + BUG 8335: File copy aborts with smb2_validate_message_id: bad message_id. + BUG 8341: Fix segfault in libsmbclient. + BUG 8343: Fix SMB2 crash reading with aio_fork beyond the end of file. + BUG 8347: Fix regression for HP-UX, AIX and OSF. + BUG 8357: Make sure we grant credits on async read/write operations. + BUG 8358: Fix a bug in run_poll_events(). + BUG 8362: Fix build issue on old glibc systems.- Remove references to disabled vscan build.- Add missing define, includes, and initialization to get_printing_ticket.- Use /var/run for the cifs state file; (bnc#710304).- Fix #ifdef CTDB_CONTROL_SCHEDULE_FOR_DELETION issue; (bso#8303).- File copy aborts with smb2_validate_message_id: bad message_id; (bso#8335).- Fix reload of the configuration and also reload activated registry shares; (bso#8327).- WinXP cannot join a Samba3 domain with a 'even' hostname; (bso#8326).- smbclient cannot list directories from a big-endian machine; (bso#8324).- Update to 3.6.0rc3. + BUG 7841: Explicitly pass domain_sid to wbint_LookupRids(). + BUG 7888: Deal with buggy 3.0 based PDCs. + BUG 8083: Fix "inherit owner = yes" with vfs_acl_xattr or vfs_acl_tdb module. + BUG 8102: Do not allow to change file ACLs from normal domusers. + BUG 8102: Do not allow to change file ACLs from normal domusers. + BUG 8193: Add new command 'enumerate_recursive'. + BUG 8195: Make rpc client code working against NT4 servers. + BUG 8211: Fix "inherit owner = yes" when "inherit permissions = yes" is set. + BUG 8213: Fixes in idmap_autorid. + BUG 8214: Fix smbd crash on printer driver upgrade. + BUG 8215: Fix Winbind unix username lookup. + BUG 8216: Make Winbind returning correct results with 'sids2xids'. + BUG 8217: Do not stat-check the share path in 'net conf addshare'. + BUG 8219: Fix SMB Panic from Windows 7 client. + BUG 8224: Fix the build on FreeBSD. + BUG 8226: Use c99 initializers which are supported by old gcc 2.95 compilers. + BUG 8230: Move .nmbd socket directory to non-hidden name PREFIX/var/nmbd. + BUG 8231: Fix crash bug in 'net cache get'. + BUG 8235: Fix smbd crash on startup caused by migrate_printer(). + BUG 8240: Fix Valgrind warnings in winreg/spoolss code. + BUG 8244: Fix copying files larger than 2 GB to a Samba share. + BUG 8247: Fix Coverity ID 2582: FORWARD_NULL. + BUG 8253: Fix Winbind panic if verify_idpool() fails. + BUG 8254: Fix "acl check permissions = no". + BUG 8260: Fix DCERPC responses with fragments larger than 1024 bytes. + BUG 8262: Fix build of vfs_commit. + BUG 8263: Fix build with --with-fake-kaserver or --with-vfs-afsacl. + BUG 8264: Fix Valgrind bugs in svcctl. + BUG 8276: Close all sockets attached to a subnet in close_subnet(). + BUG 8278: Fix smbd panic when CTDB is unhealthy. + BUG 8281: Fix build of examples/VFS/*. + BUG 8286: Fix smbd crash on premature end of smb2 conn. + BUG 8292: Fix a major architectural flaw in the SMB2 server code. + BUG 8293: Fix log file rotating in SMB2. + BUG 8304: Fix uninitialized variable in error path. + BUG 8305: Fix segfault in nmbd when using 'smbtree ...'.. + BUG 8307: brl_close_fnum does not call SMB_VFS_BRL_UNLOCK_WINDOWS on all locks. + BUG 8310: toupper_ascii() is broken on big-endian systems. + BUG 8314: Fix smbd crash with unknown user. + Mark 'time offset' parameter as deprecated.- The Samba Web Administration Tool (SWAT) versions 3.0.x to 3.5.9 are affected by a cross-site scripting vulnerability; CVE-2011-2694; (bso#8289); (bnc#708503).- The Samba Web Administration Tool (SWAT) versions 3.0.x to 3.5.9 are affected by a cross-site request forgery; CVE-2011-2522; (bso#8290); (bnc#705241).- Fixed the DFS referral response for msdfs root; (bnc#703655).- Fix CUPS print job IDs; (bso#7288); (bnc#701257).- Make use of the actual library version as part of the package name on post-11.3 systems only.- Fix winbind internal error; (bso#7636); (bnc#659424).- Improve ctdb vacuuming performance with use of SCHEDULE_FOR_DELETION; (bnc#705170).- Specify nmbdsocketdir at configure time; (bnc#700953).- Build the tdb, talloc, and tevent libraries ahead of anything else.- Update to 3.6.0rc2. + BUG 6911: Fix Kerberos authentication from Vista to Samba. + BUG 8166: Don't lockout users when offline. + BUG 8200: Add support for multiple writeable ldap idmap domains. + BUG 8148: Default to protocol version 2 for SMB Traffic Analyzer. + BUG 7054: Fix X account flag when "pwdlastset" is "0". + BUG 8144: Fix setting timestamp when touching files with CIFS clients. + BUG 8153: Fix setting up getaddrinfo on IPv6-only machines. + BUG 8156: Fix 'net ads join' using the user's Kerberos ticket. + BUG 8157: Fix parsing a cups printcap file. + BUG 8175: Fix smbd deadlock. + BUG 8189: Support shadow copy display over SMB2. + BUG 8197: Winbind does not properly detect when a DC connection is dead. + BUG 8203: Winbind needs to reset the DC connection if an RPC times out.- Make cupsaddsmb fill printers location; (bso#8132); (bnc#698209).- Add "winbind max clients" parameter to remove 200-client limit; (bnc#697461).- Disable logon cache for password lockout consistency when running in a cluster; (bnc#694836).- Fix logon of AD users with many group memberships; (bso#6911); (bnc#657026).- Don't lockout users while offline; (bso#8166); (bnc#692607).- Update to 3.6.0rc1. + BUG 8111: CIFS VFS: Fix unexpected error on SMB posix open. + BUG 8112: POSIX extension opens of a directory are denied with EISDIR. + BUG 8132: Fix filling printers location field when using cups. + Remove fstrings from client struct. + BUGFIX when converting from safe_strcpy to strlcpy. + Fix off-by-one calculations with strlcpy. + Ensure we always write the correct incoming mid into the share mode table entries. + Fix the SMB2 oplock showstopper. + Convert user-specified domain to uppercase in libsmb. + Fix Coverity CID #2302: FORWARD_NULL. + Fix cups_pull_comment_location(). + Fix double free of cups request. + Make cups_pull_comment_location() work again. + Fix potential crash bug in display_print_driver3(). + Properly clean up in pthreadpool_init in case of failure. + Make plaintext session setup async. + Reduce fd load in Winbind children. + Avoid a potential 100% CPU loop in Winbind. + Tune broadcast namequeries for unique names. + Properly deal with exited winbind children. + Fix dup_smb2_vec3. + Fix return check in nss_wins.- Fix to renew the kerberos ticket in samba after expiry; (bnc#669949).- Fix a 100% CPU loop when ctdbd dies during a traverse; (bnc#693945).- Make dhcpcd hook BOOTPROTO check cover dhcp6 too; (bnc#691969).- Handling of large (> 256 bytes) ntlmv2 blobs in winbind; (bnc#529946).- Package static libraries with 0644 permissions.- Add Requires libtalloc-devel to libldb-devel and libtevent-devel.- Rename libldb0 to libldb1 as 1 is the current major version of the library. - Add libldb1 and libtevent0 to baselibs.conf.- Don't call the suse_update_config macro before building lib ldb and tevent.- Update to 3.6.0pre3. + Listen on IPv6 addresses with IPV6_ONLY; (bso#7383). + Fix wrong output in 'smbget'; (bso#8066). + "inherit owner = yes" doesn't interact correctly with vfs_acl_xattr or vfs_acl_tdb module; (bso#8083). + rpccli_samr_chng_pswd_auth_crap segfaults if any input blobs are null; (bso#8088). + setpwent() actually does endpwent() and vice versa on FreeBSD; (bso#8099). + Fix the build of 'smbget' on HP NonStop; (bso#8106). + Fix build of tdb2. + Correctly detect and deny symlinks anywhere in a path (not just the last component) if "follow symlinks = no". + Fix timeout in rpc_pipe_open_tcp_port(). + Fix the build of "--with-profiling-data". + Fix Coverity IDs 986, 1340, 2047, 2299, 2307, 2325, 2335, 2336, 2470, 2471, 2478. + nsswitch: Add 'wbinfo --lookup-sids'. + nsswitch: Add 'wbinfo --sids-to-unix-ids'. + Fix smbd with the async echo responder. + Fix the build of vfs_gpfs.c. + Add a 10-second timeout for the 445 or netbios connection to a DC. + Many pthreadpool fixes. + Fix transaction recovery area for converted tdbs.- Add PreReq permissions to the krb-printing package.- Remove _libdir ldb and tevent from file list. - Explicitly state not to bundle talloc or tdb while ldb and tevent build.- Always use the actual library version as part of the package name. - Exclude shared python modules.- Fix printing from Windows 7 clients; (bso#7567); (bnc#687535).- Update pidl and always compile IDL at build time; (bnc#688810).- Update to 3.6.0pre2. + ID Mapping changes. + Implement SMB2 support. + Add an Endpoint Mapper daemon. + Make "rlimit_max below minimum Windows limit" notification less scary; (bso#6837). + Quota only shown when logged as root; (bso#7080). + Fix printing from Windows 7; (bso#7567). + Retry DNS updates when connection to one nameserver has failed; (bso#7690). + Unlink may unlink wrong file when hardlinks are involved; (bso#7863). + Fix 'nmbd --port'; (bso#7875). + cmd_spoolss_deletedriver() returned without checking all architectures; (bso#7880). + Don't return "-1" on success in 'net rpc vampire keytab'; (bso#7899). + Fix cups pcap reload with no printers; (bso#7915). + Fix bug in chain_reply; (bso#7917). + Fix problems with "kernel oplocks" option set to "no"; (bso#7928). + Fall back for utimes calls; (bso#7940). + Catch lookup_names/sids schannel errors over ncacn_ip_tcp; (bso#7944). + Let winbind try to use samlogon validation level 6; (bso#7945). + Sgid bit lost on folder rename; (bso#7996). + Fix getting username in 'net rap session'; (bso#8009). + Fix inode generation so nautilus can count total dir size correctly; (bso#8010). + Use jenkins hash for str_checksum; (bso#8010). + Add explicit configure option whether or not to enable dmapi support; (bso#8033). + Fix smbclient segfault with Cyrillic netbios names; (bso#8040). + Fix file creation on OS/X; (bso#8042). + Add "--option" to 'testparm'. + Fix crash bug on smbd shutdown when using FOPENDIR(). + Ensure we don't return an incorrect access mask. + Fix bug against the new Mac client. + Fix leak in error path. + Fix error where Windows client spoolss returns WERR_INVALID_DATA. + Fix a segfault in the krb5 locator plugin. + Enable sharesec for registry shares. + Fix memory leak in "security=share" and "force user". + Add "net idmap check", a check and repair tool for the id mapping database. + Add new 'net idmap delete' command. + Fix segfault on missing input file in 'net idmap restore'. + Fix 'net usersidlist' not to skip every other user. + Fix potential crash bug in spoolss_PrinterEnumValues push path. + Internal restructuring. + Don't wipe out all printer drivers when only one should be deleted. + Fix winbindd_dual_pam_auth_samlogon() for NT4 domains. + Fix memory leak in print_cups.c. + Remove duplicate cups response processing code. + Follow force user/group for driver IO. + Initiate pcap reload from parent smbd. + Reload shares after pcap cache fill. + Fix numerous Coverity IDs (2041 and others). + Fix a memory leak in check_sam_security_info3. + Fix a segfault in the nss wrapper when libnss_winbind.so is not loadable. + Make "net sam list [users|workstations]" list only the right things. + Fix a potential memleak in secrets_fetch_trusted_domain_password. + Use the right credentials in check_netlogond_security. + Add support for AF_NETLINK addr notifications. + Fork multiple Winbind children per domain. + Fix a deadlock between smbd and ctdbd. + Add 'wbinfo --dc-info'. + Make "nmbd socket dir" configurable. + Fixed valgrind errors. + Fix a memleak in receive_getdc_response. + Don't grant SEC_STD_DELETE always to the owner of a file. + Fix segfaults on addrchange errors in Winbind. + Allow machine accounts as members in groupdb. + Add IPv6 support for the endpoint mapper. + Free unused memory in the rpc server. + Fix possible segfaults in svcctl server. + Fix possible segfault with client_id in rpc server. + Add a 'svcctl shutdown' function to rpc server. + Fix a resource leak in net_afs. + Fix a resource leak in smbta-util. + Fix possible resource leak in net_usershare. + Fix possible resource leak in 'smbget'. + Fix possible resource leak in 'smbfilter'. + Fix a possible null pointer dereference in smbd. + Ensure we send the direct levelII oplock break to the correct fid. + Fix private libdir and codepages paths. - Add RFC 3454 to the vendor files.- Fix idmap_tdb for big-endian systems such as ppc and s390; (bso#6901); (bnc#675978).- Fix smbclient -M NT_STATUS_PIPE_BROKEN failure; (bso#7635); (bnc#681913).- Replace jobs by _smp_mflags macro while calling make on post-11.4 systems.- Don't crash when publishing a single printer; (bnc#643119).- Carry error status in printer list IPC message, do not refresh printers if cups is unavailable; (bso#7994); (bnc#675478).- Define the libwbclient packages ahead of packages with a different version.- Use %_smp_mflags for parallel building.- Update to 3.5.8. + Fix Winbind crash bug when no DC is available; (bso#7730). + Fix finding users on domain members; (bso#7743). + Fix memory leaks in Winbind; (bso#7879). + Fix printing with Windows 7 clients; (bso#7567). + Fix 'testparm' return code when EOF in encountered in param name; (bso#3185). + Make "rlimit_max below minimum Windows limit" notification less scary; (bso#6837). + Fix "Your Password expires today" message for users of trusted domains; (bso#7066). + Fix maintaining of users' groups via UsrMgr; (bso#7262). + Fix 'net ads dns register' in Windows 2008 R2 domains; (bso#7356). + Raise debug level for "reduce_name: couldn't get realpath" messages; (bso#7409). + Fix updating the time on close in vfs_gpfs; (bso#7498). + Fix "log=>ndr_pull_error" in 'wbinfo -u' and 'wbinfo -g'; (bso#7594). + Handle Windows 9x adddriver calls without config file; (bso#7641). + Fix scalability problem with hundreds of printers; (bso#7656). + Fix memory leak in the netapi routines; (bso#7665). + Store unmodified copies of security descriptors in acl_xattr and acl_tdb modules; (bso#7716). + Fix incorrect unix mode_t caused by invalid client DOS attributes on create; (bso#7733). + Apply appropriate create masks when creating files with "inherit ACLs" set to true; (bso#7734). + Fix "dfree cache time" parameter; (bso#7744). + Fix a getgrent crash with many groups; (bso#7774). + Fix requesting lookups for BUILTIN sids; (bso#7777). + Fix smbd crash caused by expand_msdfs; (bso#7779). + Fix atime limit; (bso#7785). + vfs_scannedonly: Switch from mtime to ctime which is more reliable; (bso#7789). + Fix copying files from a SMB share using Gnome vfs and SMB signing; (bso#7791). + Make Winbind recover from a signing error; (bso#7800). + ACL inheritance cannot be disabled in vfs_acl_xattr/vfs_acl_tdb; (bso#7812). + Fix "force group" with ntlmssp guest session setup; (bso#7817). + vfs_fill_sparse() doesn't use posix_fallocate when strict allocate is on; (bso#7835). + Make WINBINDD_LOOKUPRIDS asking the right domain; (bso#7841). + Make WINBINDD_LOOKUPRIDS returning the domain name; (bso#7842). + Expand the local SAMs aliases; (bso#7843). + ntlm_auth: Support clients which offer a spnego mechs we don't support; (bso#7855). + Fix 'net ads dns register' in cluster setups; (bso#7871). + Fix 'nmbd --port'; (bso#7875). + Make 'rpcclient deldriver' delete drivers for all architectures; (bso#7880). + Fix flaky Winbind against Windows 2008; (bso#7881). + Fix SMB session setups with Kerberos against some closed source SMB servers; (bso#7883). + Fix stale lock in open_file_fchmod(); (bso#7892). + Fix sporadic Winbind panic in rpc query_user_list; (bso#7894). + Don't set SAMR_FIELD_FULL_NAME if we just want to set the account name; (bso#7896). + Don't return "-1" on success in 'net rpc vampire keytab'; (bso#7899). + Fix connections from WinCE; (bso#7917). + Fix opening MS Powerpoint files; (bso#7940). + Fix endless loops caused by inotify; (bso#7942). + Catch lookup_names/sids schannel errors over ncacn_ip_tcp; (bso#7944). + Let Winbind try to use samlogon validation level 6; (bso#7945). + Revalidate the pathname once re-constructed from a root fsp; (bso#7950).- Require a particular library version even if the major version is part of the package name. Using the same major version does not guarantee forward compatibility.- Fix a fd-leak in libwbclient at dlclose-time; (bso#7684); (bnc#668773).- Update to 3.5.7 + Protect against possible denial of service caused by memory corruption; CVE-2011-0719; (bso#7949); (bnc#670431).- Disable separate build of samba-doc for post-11.1 systems.- Protect against possible denial of service caused by memory corruption; CVE-2011-0719; (bso#7949); (bnc#670431).- Increase the log level for missing PIDs on SIGCHLD, printcap child processes are not added to the children PID list; (bnc#666460).- Do not require a particular library version if the major version is part of the package name.- Use the actual version numbers of the ldb, talloc, tdb, and tevent libraries on post-11.3 systems.- Abide by print$ share 'force user' & 'force group' settings when handling AddprinterDriver and DeletePrinterDriver requests; (bso#7921); (bnc#653353).- Remove pcap_cache_loaded asserts from (re)load_printers. pcap_cache_loaded() returns false if the pcap cache contains no printer entries. correct call ordering is already enforced. (bso#7836); (bnc#625936).- No longer force activation of the cifs service on post-11.3 systems. - Add X-UnitedLinux-Default-Enabled to the cifs init script on pre-11.4 systems. - Move the cifs init script nfs dependencies from Required to Should.- Recommend to install samba-krb-printing from samba-winbind on post-10.3 systems; (bnc#661845).- Fix error paths in cups_async_callback(), an empty cups printer list should not be treated as an error; (bnc#661842).- Abide by printcap cache time, reload parent smbd pcap cache on expiry; (bso#7836); (bnc#625936).- Fix race in cups async printer services reload; (bso#7836); (bnc#625936).- Don't tweak with baselibs.conf during %post if not present; (bnc#652620).- Don't make use of baselibs.conf on SUSE Linux Enterprise 10; (bnc#652620).- Don't use --tmpdir as this option isn't known by mktemp of SUSE Linux Enterprise 10; (bnc#652620).- vfs_fill_sparse() doesn't use posix_fallocate when strict allocate is on; (bso#7835).- Replace Requires samba-client by samba-gplv3-client in the gplv3 packages; (bnc#652620).- Fix Dolphin SMB share IO with SMB signing enabled; (bso#7791); (bnc#656112).- Add Conflicts to the samba-gplv3 main, client, doc, krb-printing, winbind, client-gplv2, and doc-gplv2 packages; (bnc#652620).- Add Provides samba-client-gplv2 and samba-doc-gplv2 to pre-3.2 versions; (bnc#652620).- Obsolete samba-client-gplv2 and samba-doc-gplv2; (bnc#652620).- Remove Provides samba-client:/usr/sbin/winbindd from the samba-gplv3-winbind package to avoide an accidental install trigger; (bnc#652620).- Add Provides samba-client to the samba-gplv3-client package; (bnc#652620).- Remove all Obsoletes from the samba-gplv3 packages and only keep the Provides samba; (bnc#652620).- Add fitting Conflicts to all samba-gplv3 packages; (bnc#652620).- Reduce unnecessary ldap round trips and eliminate invalid DN messages; (bnc#654719).- Exclude cifs-mount and ldapsmb from the samba-gplv3 build of SUSE Linux Enterprise 10 SP 3 and 4.- Add the _build_arch at the end of the vendor version suffix.- Provide and Obsolete samba-gplv3 to replace potentially installed packages.- Change package base name to samba-gplv3 for SUSE Linux Enterprise 10 SP 4. - Do not package libsmbclient and libsmbsharemodes.- Update to 3.5.6 + Fix auto printers with registry config; (bso#7280); (bnc#617153). + Fix SPNEGO auth when contacting Win7 system using Microsoft Live Sign-in Assistant; (bso#7577). + Fix 'net idmap restore' setting HWM to avoid duplicates; (bso#7578). + Fix "admin users" when using vfs_acl_xattr; (bso#7581). + Fix using cached credentials in ntlm_auth; (bso#7589). + Fix Winbind offline login; (bso#7590). + Fix Winbind internal error; (bso#7636). + Fix mknod/mkfifo failing with "No such file or directory"; (bso#7651). + Fix smbd changing mode of files on rename; (bso#7693). + Fix crash bug with invalid SPNEGO token; (bso#7694). + Fix smbd panic on invalid NetBIOS session request; (bso#7698). + Fix smbd crash caused by "%D" in "printer admin"; (bso#7541). + Fix 'smbclient -M'; (bso#7635). + Fix scalability problem with hundreds of printers; (bso#7656). + Fix crash bug in rpcclient; (bso#7688). + Fix file corruption when setting Samba "write wache wize"; (bso#7715).- Let startproc wait for nmb, smb and winbind pid files getting created on post-11.1 systems; (bnc#520036).- Include the reviewed french translation for pam_winbind; (bnc#499233).- Fix smbd crash with CUPS printers and no [printers] share defined; (bso#7297); (bnc#637755).- Fix printing from 64-bit windows clients; (bso#6888); (bnc#640870).- Fix baselibs.conf for libtalloc.- Fix buffer overflow in sid_parse() to correctly check the input lengths when reading a binary representation of a Windows Security ID (SID); CVE-2010-3069; (bso#7669); (bnc#637218).- Use cached ntlm password in libsmbclient. Prevent lockouts when kerberos tickets are lost; (bnc#602418); (bnc#606304).- Add a dependency on nfs to the smbfs/ cifs init scripts as they require the en_US locale and /usr might be on NFS.- Complete fix for trusts with Windows 2008R2 DCs.- Fix authentication dialogs when connecting to older systems; (bnc#632055).- Adjust position of conditional ldapsmb %package and %files definition.- Create the /var/run/samba directory on the fly and package it as %ghost.- Fix preexec scripts; (bso#7104); (bnc#632852).- Add missing netapi, smbclient, smbsharemodes, talloc, tevent, and wbclient pkgconfig files and BuildRequire pkgconfig; (bnc#632770).- BuildRequire python-devel for post-9.3 systems.- Only create precompiled headers for post-10.2 systems. - Remove mkinitrd scriptlets.- Add vfs_crossrename man page. - Call make basic and remove conditional proto target. - Increase libtevent version to 0.9.9. - Remove wbc_async header from the file list. - Remove remaining cifs-mount pieces from the spec file.- Fix printers not auto loading with registry config; (bso#7280); (bnc#617153).- Update to 3.6.0pre1. + SMB2 support is fully functional despite managing quota using the Microsoft management tools. + Internal Winbind passdb changes to use samr and lsa rpc pipe to get local user and group information. + The spoolss and the old RAP printing code have been completely overhauled and refactored. + The SMB Traffic Analyzer (SMBTA) VFS module got added.- Intilize workgroup of nmblookup as empty string.- Fix net ads join when using parent domain users; (bso#6364); (bnc#630812).- cifs: do not restart during dhcp lease renewal when IPaddress remains the same; (bnc#573246).- Fix "Too many open files" when trying to access large number of files; (bso#6837); (bnc#619787).- Update to 3.5.4. + Fix smbd crash when sambaLMPassword and sambaNTPassword entries missing from ldap (bug #7448). + Fix init_sam_from_ldap storing group in sid2uid cache (bug #7507). + Allow previous password to be stored and use it to check tickets; (bso#7099). + Make ea data checks identical for trans2open and trans2mkdir; (bso#7188). + Fix editing users' groups via UsrMgr; (bso#7262). + Fix Winbind over IPv6; (bso#7341). + Samba sends "raw" inode number as uniqueid with unix extensions; (bso#7410). + Fix printing large formats; (bso#7423). + Fix spnego returning incorrect mechListMIC string; (bso#7449). + Fix some crash bugs and missing error codes in AddDriver paths; (bso#7459). + Fix crash bug in _samr_QueryUserInfo{2} level 18; (bso#7479). + Fix 'not a string literal' warning in netdomjoin-gui; (bso#7500). + Fix calculation of st_blocks in vfs_streams_xattr; (bso#7503). + Fix numerous build issues; (bso#7504). + Fix session setup from linux kernel cifs clients with "sec=ntlmv2"; (bso#7517).- Remove all provides and obsoletes samba3 from the spec file. Packages with this base name have not been offered as part of a product.- Fix a NULL pointer dereference in smbd of the 3.4 code base; CVE-2010-1635; (bso#7229); (bnc#605935).- Address possible buffer overrun in chain_reply code of pre-3.4 versions; CVE-2010-2063; (bso#7494); (bnc#611927).- Update of the SMB Traffic Analyzer v2 VFS module- Fix trusts with Windows 2008R2 DCs; (bnc#613459); (bnc#599873); (bnc#592198); (bso#6697).- Update to 3.5.3. + Fix MS-DFS functionality; (bso#7339). + Fix a Winbind crash when scanning trusts; (bso#7389). + Fix problems with SIGCHLD handling in Winbind; (bso#7317). + Add replacement for IPV6_V6ONLY on linux systems with broken headers; (bso#7196). + Fix cups encryption setting; (bso#7263). + Fix exporting printers via 'cupsaddsmb' command; (bso#7277). + Fix SMB job IDs in CUPS job names; (bso#7288). + Fix segfault in mount.cifs; (bso#7315). + Make TIME_T_MAX defines consistent; (bso#7352). + Re-fix a bug with smbd serving a windows terminal server; (bso#7357). + Display an error on 'net conf import' failures; (bso#7378). + Fix bitmap leak in dptr_Close; (bso#7384). + Fix rename problems with full_audit VFS module; (bso#7398). + Fix setting of passwords via 'net rpc user password' command; (bso#7417). + Fix 'net rpc printer list' command; (bso#7418). + Rename mod_name to module_name; (bso#7421). - Fix unnecessary traversing winbindd_cache.tdb in SIGHUP handler. - Added EN ISO 216, A0 and A1 to builtin forms; (bso#7423). - Winbind not working over IPv6; (bso#7341).- Honor "interfaces" list in net ad dns register; (bnc#606947).- Exclude the RPM release from the vendor tag for openSUSE Factory; (bnc#604049).- Enable the build of the idmap tdb2 module; (bnc#600822).- BuildRequire keyutils-libs-devel for Fedora and post-RHEL4.- BuildRequire pkg-config for post-10.2 systems and else pkgconfig.- Add "net conf import" error messages; (bso#7378, bnc#598189).- Define cups_lib_dir %{_prefix}/lib/cups for post-11.2 systems; (bnc#575544).- Update to 3.5.2. + Fix smbd segfaults in _netr_SamLogon for clients sending null domain; (bso#7237). + Fix smbd segfaults in "waiting for connections" message; (bso#7251). + Fix an uninitialized variable read in smbd; (bso#7254); (bnc#605935); CVE-2010-1642. + Fix a memleak in Winbind; (bso#7278). + Fix Winbind reconnection to it's own domain; (bso#7295). + Fix segfault if hide files or veto files has no ".AppleDouble"; (bso#1206). + Fix parsing of the gecos field; (bso#5198). + Fix several printing issues; (bso#6727). + Fix valgrind warning; (bso#6814). + Fix race condition in mount.cifs that allows user to replace mountpoint with a symlink; (bso#6853). + Fix bug in vfs_scannedonly rmdir implementation; (bso#7075). + Fix handling of bad server data returns in client rpc_transport; (bso#7159). + Never mark external domains as internal in Winbind; (bso#7170). + Fix access by multi-threaded applications; (bso#7202). + Fix 'net share' command; (bso#7203). + Fix DN parsing name was always null; (bso#7204). + Signals are processed twice in child; (bso#7206). + Fix returning of group members with 'getent group'; (bso#7212). + Fix the build of net_afs.c with --fake-kaserver=yes; (bso#7216). + Make Winbind logs more verbose for troubleshooting; (bso#7225). + Fix a NULL pointer dereference in smbd; CVE-2010-1635; (bso#7229); (bnc#605935). + Fix automatic building of vfs_tsmsm if gpfs and dmapi are present; (bso#7231). + Fix race conditions in CTDB persistent transactions; (bso#7232). + Symlink delete fails but incorrectly reports success to client; (bso#7234). + Fix "printer admin" functionality; (bso#7255). + Fix value-needed calculation in_spoolss_EnumPrinterData(); (bso#7256). + Fix _winreg_QueryValue crash bugs and implement Windows behavior; (bso#7258). + Fix job management commands for CUPS queues; (bso#7269). + Fix smbd segfault if using vfs_acl_tdb; (bso#7283). + Fix core dump in 'ntlm_auth' with "gss-spnego" helper; (bso#7290). + Fix smbd crashes with CUPS printers and no [printers] share defined; (bso#7297). + Fix DOS attribute inconsistency with MS Office; (bso#7310). + Many disconnecting clients render clustered Samba unusuable for some time; (bso#7312). + Make 'net conf addshare' atomic; (bso#7313). + Eliminate race condition in creating/scanning sorted subkeys in the registry backend; (bso#7314). + Winbind possibly segfaults when trying a trusted domain without inbound trust; (bso#7316).- Add SMB Traffic Analyzer v2 VFS module.- Document "wide links" defaults to "no" in the smb.conf man page for versions pre-3.4.6; (bnc#577868).- Fix workgroup enumeration, for client printer and file share selection; (bso#6880); (bnc#586215).- Fix tdb validation for offline auth; (bnc#587014).- Fix "printer admin" functionality; (bso#7255).- An uninitialized variable read could cause an smbd crash; (bso#7254); (bnc#605935); CVE-2010-1642.- Ensure to have a valid talloc stackframe; (bso#7251).- _netr_SamLogon segfaults for clients sending NULL domain; (bso#7237).- Merge missing pam_winbind message translations; (bnc#499233).- Remove cifs-mount subpackage for post-11.2 systems as the tools are now part of the independent cifs-utils package.- Fix join of Windows 2008 domains; (bnc#567013).- Update to 3.5.1 and 3.4.7. + Fix security flaw on Linux platforms if built with libcap support allowing file system access even when permissions should have denied it; CVE-2010-0728; (bso#7222); (bnc#586683).- Fixed libldb.so link in libldb-devel.- Fix argc handling in net_share, making the command "net share" work again; (bso#7203); (bnc#584253).- Update to 3.5.0. + Fix duplicate sam and unix accounts; (bso#7145). + Keep the the correct negotiate_flags on the cli->dc structure; (bso#7160). + Avoid calling cli_alloc_mid twice in cli_smb_req_iov_send; (bso#7166). + Fix 'net ads dns' usage calls; (bso#7181). + Fix uninitialized variable in wkssvc_enumerateusers; (bso#7182).- Update to 3.4.6. + Change parameter "wide links" to default to "no"; it's also incompatible with "unix extensions"; (bso#7104); (bnc#577868). + Fix printing with 64 bit clients (bso#6888). + Fix core dump on 64 bit Linux (bso#7063). + Fix failing of smbd to respond to a read or a write caused by Linux asynchronous IO (aio) (bso#7067). + Fix string buffer overflow causing heap corruption in smbd (bso#7096). + Fix bogus ip address in SWAT; (bso#5885). + Fix vfs_full_audit; (bso#6557). + Use the first "uid" value; (bso#6157). + Fix large paged search with DirX LDAP servers; (bso#6981). + Fix crash bug in 'cifs.upcall'; (bso#6868). + Add cross option to samba_cv_linux_getgrouplist_ok; (bso#7047). + Fix DFS on AIX (maybe others); (bso#7052). + Fix pdb_search crash as non-root user; (bso#7068). + Fix unlocking of accounts from ldap; (bso#7072). + Fix vfs_expand_msdfs; (bso#7081). + Fix results of 'smbclient -L' with a large browse list; (bso#7098). + Normalize "Changing password for" msg IDs and STRs; (bso#7102). + Fix malformed require_membership_of_sid; (bso#7106). + Fix reading of large browselist; (bso#7122). + "mangling method = hash" can crash storing a name containing a '.'; (bso#7154). + Valgrind Conditional jump or move depends on uninitialised value(s) error when "mangling method = hash"; (bso#7155). + Fix listing of printjobs in Windows 7; (bso#7130). + Spoolss getprinterdriver2 level 101 marshalling is bad; (bso#7136). + Make idmap cache persistent for "ldapsam:trusted". + Also fill the memcache with sid<->id mappings in ldapsam_sid_to_id() not only the persistent idmap cache. + Shortcut uid_to_sid when "ldapsam:trusted = yes". + Make pdb_copy_sam_account also copy the group sid. + Shortcut gid_to_sid when "ldapsam:trusted = yes". + Speed up pdb_get_group_sid(). + Try to build the full unix_pw structure with ldapsam:trusted support. + Optimize ldapsam_alias_memberships() and cache ldap searches.- Update to 3.5.0rc3. + Change parameter "wide links" to default to "no"; it's also incompatible with "unix extensions"; (bso#7104); (bnc#577868). + Fix vfs_full_audit; (bso#6557). + Fix crash bug in 'cifs.upcall'; (bso#6868). + Fix duplicate initializer in the rmdir module; (bso#6876). + Fix printing with 64 bit clients; (bso#6888). + Add cross option to samba_cv_linux_getgrouplist_ok; (bso#7047). + Fix core dump on Ubuntu 8.04 64 bit; (bso#7063). + Fix failing of smbd to respond to a read or a write caused by Linux asynchronous IO (aio); (bso#7067). + Fix 'smbget' error status; (bso#7069). + Fix build of 'smbfilter'; (bso#7071). + Fix unlocking of accounts from ldap; (bso#7072). + Cliconnect gets realm wrong with trusted domains; (bso#7079). + Fix vfs_expand_msdfs; (bso#7081). + Fix storing of create time on directories in an EA in new create time code; (bso#7084). + Fix an early release of the global lock that can cause data corruption in libtdb; (bso#7085). + Fix string buffer overflow causing heap corruption in smbd; (bso#7096). + Fix results of 'smbclient -L' with a large browse list; (bso#7098). + Normalize "Changing password for" msg IDs and STRs; (bso#7102). + Fix malformed require_membership_of_sid; (bso#7106). + Add pdb_ldap performance fixes; (bso#7116). + Change ldap filter to what really was intended; (bso#7116). + Add new "nmbd bind explicit broadcast" parameter; (bso#7118). + Fix nmbd problems with socket address; (bso#7118). + Support large browselist; (bso#7119). + Fix reading of large browselist; (bso#7122). + Fix listing of printjobs in Windows 7; (bso#7130). + Owner of file not available with Kerberos; (bso#7139). + Fix IPv4/IPv6 problems; (bso#7140). + Fix get_acl_blob in the acl_tdb VFS module; (bso#7148). + "mangling method = hash" can crash storing a name containing a '.'; (bso#7154). + Valgrind Conditional jump or move depends on uninitialised value(s) error when "mangling method = hash"; (bso#7155). + Fix some wrong newlines in de translation strings.- Take extra care that a mount point of mount.cifs isn't changed during mount and don't allow it to be run as setuid root program; CVE-2010-0787; (bso#6853); (bnc#550002).- Check in mount.cifs for invalid characters in device name and mountpoint; CVE-2010-0547; (brc#562156); (bnc#577925).- Don't invalidate cache for uninitialized domains; (bnc#538923).- Signals are processed twice in child; (bnc#538923).- Allow forced pw change even with min pw age; (bnc#561894).- Change parameter "wide links" to default to "no"; it's also incompatible with "unix extensions"; CVE-2010-0926; (bso#7104); (bnc#577868).- Fix enumerate domain local groups for primary domain; (bnc#573813).- Fix malformed require_membership_of_sid; (bnc#525123); (bso#7106).- Normalize "Changing password for" msg IDs and STRs; (bnc#499233).- Build libtevent and libldb and put them into separate subpackages.- Update to 3.5.0rc2. + The Using Samba HTML book has been removed. + 'net', 'smbclient' and libsmbclient can use logon credentials cached by Winbind; (bso#7062). + New vfs_scannedonly module has been added; (bso#7028). + Check password history before increasing "badPasswordCount"; (bso#4347). + Fix changing of ACLs on writable file with "dos filemode=yes"; (bso#5202). + Restore Samba 3.0.x behavior and use the first "uid" value in pdb_ldap; (bso#6157). + Fix deletion of an object whose parent folder does not have delete rights fails even if the delete right is set on the object in vfs_acl_xattr and vfs_acl_tdb; (bso#6876). + Fix large paged search with DirX LDAP servers; (bso#6981). + Fix a segfault in winbindd_dual_ccache_ntlm_auth(); (bso#7027). + Disable sanity check in NetShareEnum for better compatibility with Windows; (bso#7029). + Fix SMBrmdir error message when deleting a directory fails; (bso#7033). + Fix segfault in vfs_cap; (bso#7034). + Fix 'net rpc getsid' in hardened Windows environments; (bso#7036). + Fix a Winbind segfault in "trusted_domains"; (bso#7037). + Complete and improve some German translation of 'net'; (bso#7039). + Fix compile error with WITH_DNS_UPDATE. Update .po files; (bso#7039). + Fix crash bug in libsmbclient; (bso#7043). + Fix bad (non memory copying) interfaces in smbc_setXXXX calls; (bso#7045). + Fix libsmbclient crash against OpenSolaris CIFS server; (bso#7046). + Lock down some srvsvc calls according to what w2k3 seems to do.- Update to 3.4.5. + Fix memory leak in smbd (bug #7020). + Fix changing of ACLs on writable files with "dos filemode=yes" (bug #5202). + BUG 6642: Fix opening the quota magic file. + BUG 6919: Fix remote quota management. + BUG 7034: Fix internal error caused by vfs_cap. + BUG 7036: Fix 'net rpc getsid' in hardened Windows environments. + BUG 7043: Fix crash bug in "SMBC_parse_path". + BUG 7045: Fix bad (non memory copying) interfaces in smbc_setXXXX calls. + BUG 7046: Fix a crash in libsmbclient used against the OpenSolaris CIFS server.- Free unused memory after a packet got processed; (bso#7020).- Add timeout to rpc call to prevent infinite loop when network is down; (bnc#538923).- Update to 3.5.0rc1. + BUG 6837: Fix "Too many open files" when trying to access large number of files with Windows 7; (bnc#619787). + BUG 6939: Fix long filenames when "mangling method" is set to "hash". + BUG 6991: Create symbol links to shared libraries. + BUG 6992: make test for getgrouplist cacheable. + BUG 7014: Fix Winbind crash when retrieving empty group members. + BUG 7020: Fix smbd using 2G memory. + Ensure dos_mode can return FILE_ATTRIBUTE_NORMAL, then filter the returned attributes by protocol level. + Vector correctly through reply_openerror() (which uses the same logic). + Fix bugs with the full Windows ACL support. + Add a few missing gettext calls to the 'net' command. + Fix up a share type translation and translate some more strings in 'net'. + Allow to call "pdbedit -N description -u user" without specifiyng "-r". + Add spoolss_DriverInfo7. + Fix rpcclient after setprinter IDL fixes. + Use generated krb5.conf in 'net ads testjoin'. + Add some German translations for the 'net' command. + Update mount.cifs man page with nounix option. + Fix _samr_GetAliasMembership for results with 0 rids. + Fix an error case in cli_negprot. + Add a lower-cost alternative to wbinfo -t: wbinfo --ping-dc. + Restore correct timeouts for SMB requests. + Fix a 64-bit error in libsmb. + Replace IS_DOMAIN_OFFLINE by a function in Winbind. + Simplify/cleanup Winbind code. + Fix write behind memory block in libtalloc. + Fix result check for getaddrinfo(). + Add tsocket_address_bsd_sockaddr() and tsocket_address_bsd_from_sockaddr() to tsocket. + Always set tdb->tracefd to -1 to be safe on goto fail in libtdb. + Add TDB_DISALLOW_NESTING and make TDB_ALLOW_NESTING the default behavior. + Fix standalone 'make installdocs'. + Output %p as unsigned in snprintf replacement. + New attempt at TDB transaction nesting allow/disallow. + Remove swig stuff from libtdb. + Reset tdb->fd to -1 in tdb_close() in libtdb. + Change the way mksysms work in libtalloc. + Also build and install tdb manpages from standalone tdb. + Fix infinite loop in NCACN_IP_TCP as there is no timeout. + Make winbindd_cache.c aware of domain offline to avoid unnecessary backend query. + List trusted domains from wcache when domain is offline.- Update to 3.4.4. + Fix interdomain trust relationships with Win2008R2 (bug #6697). + Fix Winbind crashes when queried from nss (bug #6889). + Fix Winbind crash when retrieving empty group members (bug #7014). + Fix "UID range full" error in Winbind (bug #6901). + Fix multiple LDAP servers in "idmap backend" and "idmap alloc backend" (bug #6910). + BUG 4832: Fix iconv checks. + BUG 6338: Do not always display "none" in 'net rpc trustdom list'. + BUG 6851: Add pdbedit --kickoff-time/-K to set the user's kickoff time. + BUG 6828: Fix infinite timeout when byte lock held outside of samba. + BUG 6837: Fix "Too many open files" message when trying to access a large number of files with Windows 7; (bnc#619787). + BUG 6841: Fix "map acl inherit = yes". + BUG 6850: Fix shadow copy display on Windows 7. + BUG 6867: Fix listing of directories with a lot of files. + BUG 6868: Support building with Heimdal we well as with MIT. + BUG 6875: Fix DOS attributes on OS/2 clients. + BUG 6880: Fix listing of workgroup servers in libsmbclient. + BUG 6898: Samba duplicates file content on appending. + BUG 6918: Fix krb5 build problem on Ubuntu karmic. + BUG 6929: Fix build with recent heimdal. + BUG 6939: Fix long filenames with "mangling method = hash". + BUG 6967: Fix 'net ads join' with OU. + BUG 6981: Fix paged search with DirX LDAP server. + BUG 6982: Remove erroneous out of memory error path in lookup_sid. + BUG 6997: Fix _samr_GetAliasMembership for results with 0 rids. + BUG 7005: Fix "mangle method = hash" truncates files with dot "." character. + Fix the build of the winbind krb5 locator plugin. + Fix enumprinter key client and server.- Readjust the _libdir/cups/backend/smb sym link only on uninstall of the samba-krb-printing package; (bnc#568603).- Add BuildRequires to fam-devel; (bnc#564260).- Prevent winbind crash; (bso#7014); (bnc#566119).- Fix processing of open modes in POSIX open; (bnc#530683).- Add baselibs.conf as a source.- Update to 3.5.0pre2. + BUG 2350: Add LDAP Alias Dereferencing support. + BUG 6288: SWAT adds a second share when changing parameters of an existing share. + BUG 6435: Fix minor memory corruption. + BUG 6710: Only install the cifs.upcall man page if CIFSUPCALL_PROGS was set while configure. + BUG 6802: A created folder does not properly inherit permissions from parent in vfs_acl_xattr. + BUG 6837: "Too many open files" when trying to access large number of files from Windows 7; (bnc#619787). + BUG 6860: Fix shared library build on QNX. + BUG 6879: Fix crash in Winbind. + BUG 6929: Fix build with recent heimdal. + BUG 6938 : No hook exists to check creation rights when using acl_xattr module. + BUG 6967: Prevent glibc error on 'net ads join'. + Fix vfs_acl_xattr which was failing to call the NEXT connect function. + Restructure the ACL code. + Refactor reply_rmdir to use handle based code. + Fix the build when no external talloc and tdb are installed. + Fix detection of CTDB headers on systems without system-libtalloc. + Fix several printing issues. + Fix the build on Mac OS X 10.6.2. + Fix net and rpcclient after setprinterdataex changes. + Add full support for level 8 printer drivers. + Add more spoolss architectures to IDL. + Fix enumprinter key client and server. + Fix crash in EnumPrinterDataEx. + Prefer posix_fallocate for doing "strict allocate". + Restore "fake directory create times" as a share parameter. + Fix explicit stat64 support. + Add support for NetWkstaGetInfo 101 and 102. + Add rpcclient wkssvc_enumerateusers. + De-deprecate "write cache size" to prevent its removal without a proper alternative. + Allow more than 1000 users in BUILTIN\Users. + Complete support for NetWkstaGetInfo/NetWkstaEnumUsers. + Fix the build of the example VFS modules. + Fix crash in free_file_list(). + Give the user a chance to change password when password will expire soon.- Store the smbfs service state if enabled and restore it for cifs while upgrade on post-11.2 systems.- Prevent cifstab from being overwritten while upgrade on post-11.2 systems.- Give the user a chance to change password when password will expire soon; (FATE#302414).- Rename smbfs init script to cifs for post-11.2 systems.- Allow Windows 7 to connection to samba domain controllers and member servers; (bnc#551811); (bso#6099); (bso#6100); (bso#6680).- Error on joining windows domain (invalid pointer); (bso#6967); (bnc#553622).- Add PreReq /usr/sbin/groupadd to the winbind package; (bnc#559165). - Simplify the winbind package %pre script and suppress stdout only.- Update to 3.5.0pre1 + Add support for full Windows timestamp resolution. + Experimental implementation of SMB2. + Add encryption support for connections to a CUPS server. + Major windbind asynchronous refactoring. - Remove using_samba from the doc package. - Increase major version of libtalloc to 2.- Fix kerberos refresh chain; (bnc#546162); (bso#6872).- Hardlink duplicate files on post-11.1 systems.- Add BuildArch noarch to samba-doc on post-11.1 systems.- Use full 16byte session key in make_user_info_netlogon_interactive(); (bnc#551811).- Update to 3.4.3. + Fix trust relationships to windows 2008 (2008 r2) (bug #6711). + Fix file corruption using smbclient with NT4 server (bug #6606). + Fix Windows 7 share access (which defaults to NTLMv2) (bug #6680). + BUG 4675: mount.cifs: Do not attempt to update /etc/mtab if it is a symbolic link. + BUG 6529: Offline files conflict with Vista and Office 2003. + BUG 6532: Fix domain enumeration if master browser has space in name. + BUG 6606: Fix file corruption using smbclient with NT4 server. + BUG 6690: Fix wrong error check in profile. + BUG 6703: Allow smbstatus as non-root. + BUG 6704: Fix syntax error in avahi configure test. + BUG 6707: Fix an occasional segfault in config file parsing. + BUG 6710: Adjust regex to match variable names including underscores. + BUG 6711: Fix trust relationships to windows 2008 (2008 r2). + BUG 6726: SIVAL should have been an SVAL. + BUG 6728: BSD needs sys/sysctl.h included to build properly. + BUG 6731: Fix reading beyond the end of a named stream in xattr_streams. + BUG 6735: Don't overwrite password in pam_winbind, subsequent pam modules might use the old password and new password. + BUG 6764: Fix timeval calculation. + BUG 6765: Add a "hidden" parameter "share:fake_fscaps". + BUG 6769: Fix symlink unlink. + BUG 6772: Allow outstanding_aio_calls to be decremented. + BUG 6774: smbd crashes if "aio write behind" is set. + BUG 6776: Fix core dump caused by running overlapping Byte Lock test. + BUG 6781: Fix renaming subfolders in Explorer view. + BUG 6791: Fix linking order in cifs.upcall. + BUG 6793: Fix Winbind crash with "INTERNAL ERROR: Signal 6". + BUG 6793: Fix segfault in winbindd_pam_auth. + BUG 6796: Deleting an event context on shutdown can cause smbd to crash. + BUG 6797: Fix a memleak in libwbclient. + BUG 6804: Fix hpux compiler issue. + BUG 6805: Correctly handle aio_error() and errno. + BUG 6807: Fix a segfault in "net rpc trustdom list" for long domain names. + BUG 6810: Add support for finding alternate credcaches to cifs.upcall. + BUG 6811: Fix reference to freed memory in pam_winbind. + BUG 6815: Fix Windows 2008 R2 SPNEGO negTokenTarg parsing failure. + BUG 6824: Fix avahi activation. + BUG 6826: Don't fail authentication when one or some group of require-membership-of is invalid. + BUG 6828: Fix infinite timeout when byte lock held outside of Samba. + BUG 6829: Fix displaying of multibyte characters in smbclient. + BUG 6840: Fix crash in pam_winbind. + Fix an uninitialized variable. + Only ever handle one event after a select call. + Conditional install of the cifs.upcall man page. + Fix warning occuring when building the manpages.- Let smbclient show special characters properly; (bso#6829); (bnc#544204).- Don't fail authentication when one or some group of require-membership-of is invalid; (bnc#525123); (bso#6826).- Allow winbind to ignore certain domains; (bnc#539506).- Update to 3.4.2. + Fix unresolved home path; CVE-2009-2813; (bso#6763); (bnc#539517). + Fix potential denial of service; CVE-2009-2906; (bso#6768); (bnc#543115). + Fix potential mount.cifs password leaks; CVE-2009-2948; (bnc#542150).- Fix potential denial of service; CVE-2009-2906; (bnc#543115).- Fix potential mount.cifs password leaks; CVE-2009-2948; (bnc#542150).- Fix unresolved home path; CVE-2009-2813; (bnc#539517).- Don't overwrite password in pam_winbind; (bnc#515444).- mods for winbind (when used with squid - ntlm_auth) o winbind adds group 'winbind' o permission 0750,root,winbind LOCKDIR/winbindd_privileged- Merge two fixes from 3.2.8 and 3.3.1. + Adjust regex to match variable names including underscores. + Conditional install of the cifs.upcall man page.- Remove supplements from baselibs.conf while %clean for pre-11.1 systems; (bnc#520579).- Update to 3.4.1. + Fix authentication on member servers without Winbind (bug #6650). + Nautilus fails to copy files from an SMB share (bug #6649). + Fix connections of Win98 clients (bug #6551). + Fix interdomain trusts with Windows 2008 R2 DCs (bug #6697). + Fix Winbind authentication issue (bug #6646). + BUG 5879: Update LDAP schema for Netscape DS 5. + BUG 5886: Fix password change propagation with ldapsam. + BUG 6105: Make linking of cifs.upcall and rpcclient --as-needed safe. + BUG 6222: Default to DRSUAPI replication for net rpc vampire keytab. + BUG 6437: Make open_udp_socket() IPv6 clean. + BUG 6496: MS-DFS cannot follow multibyte char link name in libsmbclient. + BUG 6506: Smbd server doesn't set EAs when a file is overwritten in NT_TRANSACT_CREATE. + BUG 6532: Fix the build with external talloc. + BUG 6538: Cancel all locks that are made before the first failure. + BUG 6560: Fix lookupname. + BUG 6564: SetPrinter fails (panics) as non root. + BUG 6568: Fix _spoolss_GetPrintProcessorDirectory() implementation. + BUG 6585: Fix unqualified "net join". + BUG 6593: Correctly implement SMB_INFO_STANDARD setfileinfo. + BUG 6601: Avoid global fd limits. + BUG 6607: Fix crash bug in spoolss_addprinterex_level_2. + BUG 6611: Fix a valgrind error in chain_reply. + BUG 6615: Fix browsing of DFS when using kerberos in libsmbclient. + BUG 6627: Raise the timeout for lsa_Lookup*() calls from 10 to 35 seconds. + BUG 6650: Fix authentication on member servers without Winbind. + BUG 6651: Fix smbd SIGSEGV when breaking oplocks. + BUG 6655: Fix 'smbcontrol smbd ping'. + BUG 6620: Fix a bug in renames of directories. + BUG 6664: Fix truncation of the session key. + BUG 6673: Fix 'smbpasswd' with "unix password sync = yes". + BUG 6680: Fix authentication failure from Windows 7 when domain joined. + BUG 6688: Fix crash in 'net usershare list'. + BUG 6693: Check we read off the complete event from inotify. + BUG 6700: Use dns domain name when needing to guess server principal.- Update to 3.2.14. + Fix SAMR access checks (e.g. bugs #6089 and #6112). + Fix 'force user' (bug #6291). + Improve Win7 support (bug #6099). + Fix posix ACLs when setting an ACL without explicit ACE for the owner (bug #2346). + BUG 6387: Fix Winbind crash when multiple IDmappings exist in the LDAP directory. + BUG 6509: Use gid (not uid) cache in fetch_gid_from_cache(). + BUG 6089: Fix SAMR access checks. + BUG 6112: Fix SAMR access checks. + BUG 6279: Fix Winbind crash. + BUG 6291: Fix 'force user'. + BUG 6099: Try to fix domain join of Win7 Beta. + BUG 6386: Groupdb mapping fix. + BUG 6421: Fix POSIX read-only open on read-only shares. + BUG 6476: Fix more smbd-zombies in memory. + BUG 6488: acl_group_override() call in posix acls references an uninitialized variable. + BUG 6504: Fix SAMR server for Winbind access. + BUG 6520: Fix time stamps. + BUG 6301: Fix samr_ConnectVersion enum which is 32bit not 16bit. + BUG 6340: Don't segfault when cleartext trustdom pwd could not be retrieved. + BUG 6372: Fix usermanager only displaying 1024 groups and aliases. + BUG 6465: Fix enum_aliasmem in ldb branch. + BUG 6484: Fix searching for users while adding them to groups via Windows usermanager. + BUG 2346: Fix posix ACLs when setting an ACL without explicit ACE for the owner. + BUG 6526: Let parent_dirname() correctly return toplevel filenames. + BUG 6627: Raise the timeout for lsa_Lookup*() calls from 10 to 35 seconds. + BUG 5798: Preserve CFLAGS info in configure. + BUG 6382: Case insensitive access to DFS links broken. + BUG 6481: Don't require "Modify property" perms to unjoin. + BUG 6628: 'smbpasswd -a' uses algorithmic rid base with 'passdb backend = tdbsam'. + BUG 6560: Lookupname failed, cannot find domain when attempt to change password. + Prevent creation of keys containing the '/' character. + Fix join of Windows 7 RC to a Samba3 DC. + Fix bug in processing of open modes in POSIX open. + Fix the negotiate flags. + Protect netlogon_creds_server_step() against NULL creds. + Also handle DirX return codes. + Fix a crash bug if we timeout in net rpc trustdom list. + Add '--request-timeout' option to 'net'. + Fix a race condition in Winbind leading to a panic. + Add workaround for MS KB932762. + 5945: Fix out of memory error with Winbind idmap. + Avoid duplicate ACEs. + Fix profile ACLs in some corner cases. + Zero an uninitialized array.- Unable to browse DFS when using kerberos in libsmbclient; (bnc#528271); (bso#6615).- check in .po files for pam_winbind; (bnc#499233); (bso#6602).- Add ntp and network-remotefs as Should-Start dependency to the winbind init script; (bnc#515629).- Update to 3.0.36. + Fix Winbind crash on 'getent group' (bug #5906). + Excel save operation corrupts file ACLs (bug #4308). + Prevent segmentation fault on joining a very long domain name. + BUG 4308: Excel save operation corrupts file ACLs. + BUG 4370: Clean-up entries in /etc/mtab after unmount. + BUG 4640: Fix guest mounts in mount-cifs. + BUG 5906: Fix Winbind crash on 'getent group'. + BUG 6066: netinet/ip.h present but cannot be compiled on Solaris. + BUG 6099: In order to allow Win7 to connect to a Samba NT style. + BUG 6279: Fix Winbind crash. PDC we set the flags before we know if it's an error or not. + BUG 6085: Fix build of vfs_default. + BUG 6098: When the DNS server is invalid, the ads_find_dc() does not work correctly. + Fix logic error in try_chown. + Correctly use chroot(). + Fix bug in processing of open modes in POSIX open. + Don't install the cifs.upcall binary twice. + Fix mount.cifs handling of -V option. + Prevent segmentation fault on joining a very long domain name. + Don't try and delete a default ACL from a file. + Add workaround for MS KB932762. + Add fakemount (-f) and nomtab (-n) flags to mount.cifs. + Fix a crash during name resolution when log level >= 10 and libc segfaults if printf is passed NULL for a "%s" arg.- Use a conditional suse_version macro in front of the SUSE_ASNEEDED export.- lookupname failed, cannot find domain when attempt to change password; (bnc#520645); (bso#6560).- Don't link with --as-needed flag on post-11.1 systems.- Stop the smbfs service if an interface goes down; (bnc#517768).- Disable build of static libraries on post-11.1 systems; (bnc#509945).- Fix missing zlibs for cifs.upcall and test_shlibs.- Update to 3.4.0. + BUG 6431: Local groups from 3.0 setups no longer found. + BUG 6459: Fix build of pam_smbpass on some distributions. + BUG 6481: 'net ads leave' needs to try account deletion, NetUnjoinDomain not. + BUG 6497: Fix calling of 'test' in configure. + BUG 6498: Add workaround for MS KB932762. + BUG 6499: Fix building of pam_smbpass. + BUG 6509: Use gid (not uid) cache in fetch_gid_from_cache(). + BUG 6512: Fix support for enumerating user forms. + BUG 6514: Improve error message in 'net' when smb.conf is not available. + BUG 6520: Fix time stamps when "unix extensions = yes". + BUG 6521: Fix building tevent_ntstatus without config.h. + BUG 6526: Fix notifies in the share root directory. + BUG 6531: Fix pid file name.- Package /etc/samba/smbpasswd as %ghost on post-11.1 systems.- Fix net ads leave; (bnc#511695).- Supplement pam-32bit/pam-64bit in baselibs.conf (bnc#354164). - Supplement glibc-32bit/glibc-64bit in baselibs.conf (bnc#354164).- Update to 3.2.13, 3.3.6. + In Samba 3.2.0 to 3.2.12 (inclusive), the smbclient commands dealing with file names treat user input as a format string to asprintf. With a maliciously crafted file name smbclient can be made to execute code triggered by the server; CVE-2009-1886; (bnc#513360); (bso#6478).- Update to 3.0.35. + In Samba 3.0.31 to 3.3.5 (inclusive), an uninitialized read of a data value can potentially affect access control when "dos filemode" is set to "yes"; CVE-2009-1888; (bnc#515479).- Uninitialized read of a data value; CVE-2009-1888 (bnc#515479).- Update to 3.4.0rc1. + BUG 4699: Remove pidfile on clean shutdown. + BUG 5456: Fix "net ads testjoin". + BUG 6081: Make it possible to change machine account sids. + BUG 6253: Use correct value for password expiry calculation in pam_winbind. + BUG 6297: Owner of sticky directory cannot delete files created by others. + BUG 6305: Correctly prompt for a password when a username was given. + BUG 6328: Add support for multiple rights to "net sam rights grant/revoke". + BUG 6333: Consolidate create/delete account paths in pdbedit. + BUG 6449: 'net rap user add' crashes without -C option. + BUG 6451: net/libnetapi user rename using wrong access bits. + BUG 6458: Fix uninitialized variable in local_password_change(). + BUG 6465: Fix enumeration of empty aliases. + BUG 6476: Fix smbd-zombies in memory when using [x]inetd. + BUG 6487: Add missing DFS call in trans2 mkdir call. + BUG 6488: acl_group_override() call in posix acls references an uninitialized variable. + Improve pam_winbind documentation. - Install a vendor copy of samba-common.dhcp as dhcpcd-hook-samba-functions.- Samba 3.2.0 - 3.2.12 smbclient commands dealing with file names treat user input as a format string to asprintf; CVE-2009-1886; (bnc#513360).- Fix a bad memleak in vfs_full_audit; (bnc#510035).- Update to 3.3.5. + Fix SAMR and LSA checks (bug #6089, #6289) + Fix posix acls when setting an ACL without explicit ACE for the owner (bug #2346). + Fix joining of Win7 into Samba domain (bug #6099). + Fix joining of Win2000 SP4 clients (bug #6301). + BUG 2346: Fix posix acls when setting an ACL without explicit ACE for the owner. + BUG 5832: Fix build on RHEL when ccache is not available. + BUG 5853: Add keyutils-devel to build requires to fix build on RHEL. + BUG 5897: Fix shutdown script example in the smb.conf manpage. + BUG 6089: Revert the extra SAMR and LSA checks. + BUG 6099: Fix joining of Win7 into Samba domain. + BUG 6157: Fix handling of multi-value attribute "uid". + BUG 6289: Revert the extra SAMR and LSA checks. + BUG 6297: Owner of sticky directory cannot delete files created by others. + BUG 6301: Fix joining of Win2000 SP4 clients. + BUG 6309: Support remote unjoining of Windows 2003 or greater. + BUG 6315: smbd crashes doing vfs_full_audit on IPC$ close event. + BUG 6320: Handle registry config source in file_list. + BUG 6330: Fix DFS on AIX. + BUG 6336: Fix 'net groupmap set' segfault. + BUG 6361: Make --rcfile work in smbget. + BUG 6365: Re-Add the "dropbox" functionality with -wx rights on a directory. + BUG 6372: Fix usermanager only displaying 1024 groups and aliases. + BUG 6382: Fix case insensitive access to DFS links. + BUG 6415: Filter out of range mappings in default idmap config in idmap_tdb. + BUG 6416: Filter out of range mappings in default idmap config in idmap_tdb2. + BUG 6417: Filter out of range mappings in default idmap config in idmap_ldap. + BUG 6441: Fix the compile with --enable-dnssd. + BUG 6449: 'net rap user add' crashes without -C option. + BUG 6465: Fix enumeration of empty aliases (ldb backend). + Prevent infinite include nesting. + Mark registry shares without path unavailable. + Also handle DirX return codes. + Fix Coverity ID 897. + Do not crash in ctdbd_traverse if ctdbd is not around. + Fix a race condition in winbind leading to a panic. + Some man pam_winbind improvements. + Zero an uninitialized array.- Update to 3.2.12. + Fix SAMR and LSA checks (bug #6089, #6289) + Fix posix acls when setting an ACL without explicit ACE for the owner (bug #2346). + Fix "force user" (bug #6291). + Fix Winbind crash (bug #6279). + Fix joining of Win7 into Samba domain (bug #6099). + BUG 2346: Fix posix acls when setting an ACL without explicit ACE for the owner. + BUG 5798: CFLAGS info lost in configure. + BUG 5832: Fix build on RHEL when ccache is not available. + BUG 5835: Add keyutils-devel to build requires. + BUG 5945: Fix out of memory error with Winbind idmap. + BUG 6089: Revert the extra SAMR and LSA checks. + BUG 6099: Fix joining of Win7 into Samba domain. + BUG 6279: Fix Winbind crash. + BUG 6289: Revert the extra SAMR and LSA checks. + BUG 6291: Fix "force user". + BUG 6301: Fix samr_ConnectVersion enum which is 32bit not 16bit. + BUG 6372: Fix usermanager only displaying 1024 groups and aliases. + BUG 6386: Groupdb mapping fix. + BUG 6382: Fix case insensitive access to DFS links. + BUG 6465: Fix enumeration of empty aliases (ldb backend). + Prevent creation of keys containing the '/' character. + Fix bug in processing of open modes in POSIX open. + Protect netlogon_creds_server_step() against NULL creds. + Also handle DirX return codes. + Fix a race condition in winbind leading to a panic. + Fix a crash bug if we timeout in net rpc trustdom list. + Fix profile acls in some corner cases.- Default with passdb backend to smbpasswd for SUSE products older than 11.2.- Explicitly use 'tdbsam' as passdb backend in the default smb.conf file.- Update to 3.4.0pre2. + The default passdb backend has been changed to 'tdbsam'! + Samba4 and Samba3 sources are included in the tarball. + Changed the way smbd handles untrusted domain names given during user authentication. + Various fixes including printer change notificiation for Samba spoolss print servers. + The remaining hand-marshalled DCE/RPC services (ntsvcs, svcctl, eventlog and spoolss) were replaced by autogenerated code based on PIDL. + Samba3 and Samba4 do now share a common tevent library. + The code has been cleaned up and the major basic interfaces are shared with Samba4 now. + An asynchronous API has been added. + Made parameter syntax of the net command more consistent. + BUG 2346: Fix posix ACLs when setting an ACL without explicit ACE for the owner. + BUG 4271: testparm should not print includes. + BUG 4831: Don't call openlog() or closelog() from pam_smbpass. + BUG 5681: Do not limit the number of network interfaces. + BUG 5859: Fix renaming of samr objects failed due to samr setuserinfo access checks. + BUG 6099: Fix NETLOGON credential chain. + BUG 6136: New AFS syscall conventions. + BUG 6157: Fix handling of multi-value attribute "uid". + BUG 6253: Use correct value for password expiry calculation. + BUG 6291: Fix 'force user'. + BUG 6292: Update config.guess from gnu.org. + BUG 6302: Give the VFS a chance to read from 0-byte files. + BUG 6309: Support remote unjoining of Windows 2003 or greater. + BUG 6313: ldapsam_update_sam_account() crashes while doing talloc_free on malloced memory. + BUG 6315: Fix smbd crashes when doing vfs_full_audit on IPC$ close event. + BUG 6320: Handle registry config source in file_list. + BUG 6330: Fix DFS on AIX. + BUG 6336: Fix segfault in 'net groupmap set'. + BUG 6340: Don't segfault when cleartext trustdom pwd could not be retrieved. + BUG 6357: Use Samba default command line arguments in 'net'. + BUG 6359: smbclient -L does not list workgroup for hosts with both IPv4 and IPv6 addresses + BUG 6361: Make --rcfile work in smbget. + BUG 6371: Unsuccessful 'net conf setparm' leaves empty share. + BUG 6372: usermanager only displaying 1024 groups and aliases. + BUG 6387: Fix a crash bug in idmap_ldap_unixids_to_sids. + BUG 6415: Filter out of range mappings in default idmap config (idmap_tdb). + BUG 6416: Filter out of range mappings in default idmap config (idmap_tdb2). + BUG 6417: Filter out of range mappings in default idmap config (idmap_ldap). + Change the way smbd handles untrusted domain names given during user authentication. + Replace the hand-marshalled DCE/RPC services ntsvcs, svcctl, eventlog and spoolss by autogenerated code based on PIDL. + Fix several printing issues and improve support for printer change notificiations. + Add 'net eventlog'. + Add asynchronous API. + Make Samba3 and Samba4 share a tevent library. + Add two new parameters to control how we verify kerberos tickets. + Add 'net rpc service' subcommands 'create' and 'delete'. + Fix the core of the SAMR access functions. + Fix SAMR server for winbindd access. + Add dbwrap_tool - a tdb tool that is CTDB-aware. + Hide "config backend" from swat. + Fix linking with --disable-shared-libs. + Fix issue with missing entries when enumerating directories. + Map NULL domains to our global sam name. + Fix driver upload for Xerox 4110 PS printer driver. + Add "net dom renamecomputer" to rename machines in a domain. + Inspect the correct computername string before enabling/disabling the change button in netdomjoin-gui. + Fix join prompt dialog test in netdomjoin-gui. + Only gray out labels when not root and not connecting to remote machines (netdomjoin-gui). + Allow to switch between workgroups/domains with the same name (netdomjoin-gui). + Add NetShutdownInit and NetShutdownAbort. + Fix samr access checks. + Add a security model to LSA. + Also handle DirX return codes. + Do not crash in ctdbd_traverse if ctdbd is not around. + Fix Coverity ID 897. + Fix a race condition in vfs_aio_fork with gpfs share modes. + Fix bug disclosed by lock8 torture test. + Fix a race condition in winbind leading to a panic. + Detect tight loop in tdb_find(). + Fix chained sesssetupAndX/tconn messages. + Fix strict locking with chained reads. + Fix two bugs in sendfile. + Fix memory leak. + Fix file descriptor leak. + Fallback to the legacy sid_to_(uid|gid) instead of returning NULL. + Always allocate memory in dptr_ReadDirName. + Fix 'net' crash during domain join. + Zero an uninitialized array. + Allow child processes to exit gracefully if we are out of fds.- Enable cifs.upcall on versions newer than SUSE 10.0.- Add BuildRequires to keyutils-devel.- Remove redundant Requires to keyutils-libs for cifs-mount.- Detect tight loop in tdb_find(); (bnc#450974).- Fix lp printing with kerberos; (bnc#476913).- Add BuildRequires to ctdb-devel for systems newer than SUSE 10.0 and all other build targets.- Update to 3.4.0pre1. + Samba4 and Samba3 sources are included in the tarball + Changed the way smbd handles untrusted domain names given during user authentication. + Various fixes including printer change notificiation for Samba spoolss print servers. + The remaining hand-marshalled DCE/RPC services (ntsvcs, svcctl, eventlog and spoolss) were replaced by autogenerated code based on PIDL. + Samba3 and Samba4 do now share a common tevent library. + The code has been cleaned up and the major basic interfaces are shared with Samba4 now. + An asynchronous API has been added. + Change the way smbd handles untrusted domain names given during user authentication. + Replace the hand-marshalled DCE/RPC services ntsvcs, svcctl, eventlog and spoolss by autogenerated code based on PIDL. + Fix several printing issues and improve support for printer change notificiations. + Add 'net eventlog'. + Add asynchronous API. + Make Samba3 and Samba4 share a tevent library. + Add two new parameters to control how we verify kerberos tickets. + Add 'net rpc service' subcommands 'create' and 'delete'. + Make merged build possible. + Move common libraries to the shared lib/ directory.- Update to 3.3.4. + Fix domain logins for WinXP clients pre SP3 (bug #6263). + Fix samr_OpenDomain access checks (bug #6089). + Fix usrmgr.exe creating a user (bug #6243). + BUG 6089: Fix samr_OpenDomain access checks. + BUG 6254: Fix IPv6 PUT/GET errors to an SMB server (3.3) with "msdfs root" set to "yes". + BUG 6279: Fix Winbind crash. + BUG 5329: Add "net rpc service delete/create". + BUG 6238: Make sure wbcLogoffUserParams are properly initialized before freed. + BUG 6263: Fix domain logins for WinXP clients pre SP3. + BUG 6286: Call init function for builtin idmap modules before probing for them as shared modules. + BUG 6243: Fix usrmgr.exe creating a user. + net conf: Save share name as given, not as lower case only. + Prevent creation of registry keys containing the '/' character. + Allow pdbedit to change a user rid/sid. + When doing a cli_ulogoff don't invalidate the cnum, invalidate the vuid. + Don't access a freed structure when logging off and re-using a vuid. + Try to to fix password_expired flag handling. + Make sure to grey out change fields in the netdomjoin-gui when not running as root. + Don't look up local user for remote changes, even when root. + Use procid_str in debug messages for better cluster-debuggability. + Use cluster-aware procid_is_me instead of comparing pids. + Fix smbd crash for close_on_completion. + Fix a memleak in an unlikely error path in change_notify_create(). + Do not use the file system GET_REAL_FILENAME for mangled names. + Fix a crash bug if we timeout in net rpc trustdom list. + Add '--request-timeout' option to net. + In net_conf_import, start a transaction when importing a single share. + Fix writing of roaming profiles with "profile acls" set to "yes".- Update to 3.2.11. + Fix domain logins for WinXP clients pre SP3 (bug #6263). + Fix samr_OpenDomain access checks (bug #6089). + Fix smbd crash for close_on_completion. + BUG 6089: Fix samr_OpenDomain access checks. + BUG 6205: Correct sample smb.conf share configuration. + BUG 6254: Fix IPv6 PUT/GET errors to an SMB server (3.3) with "msdfs root" set to "yes". + BUG 6263: Fix domain logins for WinXP clients pre SP3. + Allow pdbedit to change a user rid/sid. + When doing a cli_ulogoff don't invalidate the cnum, invalidate the vuid. + Fix resume command typo for "printing = vlp". + Fix smbd crash for close_on_completion. + Fix a memleak in an unlikely error path in change_notify_create(). + Don't look up local user for remote changes, even when root.- Don't lookup local user for remote password changes; (bnc#493507).- Update to 3.3.3. + Migrating from 3.0.x to 3.3.x can fail to update passdb.tdb correctly (bug #6195). + Fix serving of files with colons to CIFS/VFS client (bug #6196). + Fix "map readonly" (bug #6186). + BUG 6195: Don't let smbd child processes panic. + Add backend_requires_messaging() method to libsmbconf. + Add methods is_writeable() and wrapper smbconf_is_writeable() to libsmbconf. + Fall back to file backend when no valid backend was found. + Fix a memleak in dbwrap_rbt. + Provide transaction_start|commit|cancel fns for the registry tdb. + Speed up "net conf drop". + Speed up "net conf import". + Add transactions to the libsmbconf API. + Reduce memory usage of "net conf import". + Registry cleanup. + Fix handling of SAMBA_VERSION_VENDOR_PATCH. + Fix build of pam_winbind.so with static linking. + Tidy up some convert_string_internal error cases. + BUG 6224: nmbd waits 5 minutes at startup before checking if it needs to run elections. + Allow DFS client paths to work when POSIX pathnames have been selected. + Try and fix the build farm RAW-STREAMS errors. + Ensure files starting with multiple dots are hidden. + BUG 6102: NetQueryDisplayInformation could return wrong information. + BUG 6193: Avoid messing with sync_context in libnet_samsync_delta(). + Fix notify_printer_status_byname. + Fix Coverity IDs 722, 762, 774, 775, 776. + Fix build on old Heimdal based systems. + Fix compile warning. + Use parentheses in if condition to make negation clear. + Add dirsort module. + BUG 6147: Fix detection of the GNU ld version. + BUG 6097: Fix smbd segfault. + BUG 6130: Don't crash in winbindd_rpc lookup_groupmem() on unmapped members. + BUG 6139: Add missing whitespace in mount.cifs error message. + Fix a malloc/talloc mismatch when cli_initialise() fails. + Fix a valgrind error. + Speed up "net conf list". + Add sorted subkey cache. + Use StrCaseCmp in the dirsort module. + Document the dirsort module. + Disable dns_sd by default. + Add avahi detection to configure. + Add event avahi binding. + Use avahi to register _smb._tcp in smbd. + Fix two memleaks in the encryption code. + Fix a scary "fill_share_mode_lock failed" message. + BUG 6228: Fix SMBC_open_ctx failure due to path resolve failure doesn't set errno. + Don't use reserved words in smbconftort. + Fix smb signing for fragmented trans/trans2/nttrans requests. + Parse_packet can return NULL which is then dereferenced in match_mailslot_name. + Format the header check for netinet/ip.h more nicely. + Missing break in conversion function prevents tdb password database update.- Update to 3.2.10. + BUG #6195: Don't let smbd child processes panic.- BUG 6195: Fix crash on passdb conversion.- Update to 3.2.9. + BUG 5920: The length of the memcpy was calculated wrong. + BUG 6097: Fix smbd segfault. + BUG 6098: Fix ads_find_dc() with "security = domain" when the DNS server is invalid. + BUG 6099: Samba returns incurrate capabilities list. + BUG 6100: Implement _netr_LogonGetCapabilities() with NT_STATUS_NOT_IMPLEMENTED. + BUG 6102: NetQueryDisplayInformation could return wrong information. + BUG 6130: Fix crash in winbindd_rpc lookup_groupmem() on unmapped members. + BUG 6133: Cannot delete non-ACL files on NFSv4 ACL filesystem. + BUG 6161: smbclient corrupts source path in tar mode. + BUG 6193: Avoid messing with sync_context in fetch_database_to_ldif(). + BUG 6196: Unable to serve files with colons to Linux CIFS/VFS client. + BUG 6224: nmbd waits 5 minutes before checking to run elections. + BUG 6228: Fix SMBC_open_ctx failure when path failure doesn't set errno. + Numerous Coverity fixes + Fix double free caused by incorrect talloc_steal usage. + Backport delete semantics of alternate data streams on a file truncate. + Allow set attributes on a stream fnum to redirect to the base filename. + Fix use of streams modules with CIFSFS client. + Fix more POSIX path lstat calls. + Allow DFS client paths to work with POSIX pathnames. + Ensure files starting with multiple dots are hidden. + Fix guest auth when Winbind is running. + Fix memleak in get_remote_printer_publishing_data(). + cifs mount fix for handling -V parameter. + Fix guest mounts. + Clean-up entries in /etc/mtab after unmount. + Add fakemount (-f) and nomtab (-n) flags to mount.cifs. + Enable total anonymization in vfs_smb_traffic_analyzer. + Don't try and delete a default ACL from a file. + Fix remotely adding a share via MMC. + Fix resume handle for _samr_EnumDomainGroups. + Fix a buffer handling bug when adding lots of registry keys. + Fix a O(n^2) algorithm in regdb_fetch_keys(). + Fix a valgrind error / segfault in dns_register_smbd(). + Don't log NDR_PRINT_DEBUG at level 0, this always ends up in syslog. + Fix a malloc/talloc mismatch when cli_initialise() fails. + Fix two memleaks in the encryption code. + Fix "fill_share_mode_lock failed" message. + Add S-1-22-X-Y sids to the local token. + Fix smb signing for fragmented trans/trans2/nttrans requests. + Don't miss an absolute pathname as a kerberos keytab path. + Have nmbd check all available interfaces for WINS before failing. + Initialize the id_map status in idmap_ldap to avoid surprise.- Obsolete change from 2008-03-05 by removing the needless examples cleanup.- Update to 3.3.2. + Fix "force group" (bug #6155). + Fix saving of files on Samba share using MS Office 2007 (bug #6160). + Fix guest authentication in setups with "security = share" and "guest ok = yes" when Winbind is running. + Fix corruptions of source path in tar mode of smbclient (bug #6161). + BUG 6082: Fix renaming and deleting of directories using Windows clients. + BUG 6154: Make ZFS honor admin users. + BUG 6155: Fix "force group". + BUG 6160: Fix saving of files on Samba share using MS Office 2007. + BUG 6161: Fix corruptions of source path in tar mode of smbclient. + Fix some NetBSD warnings. + Fix bug in processing of open modes in POSIX open. + Fix use of streams modules with CIFSFS client. + Ensure ACL modules work with POSIX paths. + Use fsp->posix_open in preference if we have it. + Fix more POSIX path lstat calls. + Fix a bug in message handling for the change notify code. + Fix guest authentication in setups with "security = share" and "guest ok = yes" when Winbind is running. + BUG 4640: Fix guest mounts in mount.cifs. + Fix displaying the version string properly when no other parameters passed in in mount.cifs. + Prefer gssapi header files from subdirectory. + BUG 6176: winbindd -n should disable the winbind idmap cache. + Add a vfs_preopen module to hide fs latencies. + Don't log NDR_PRINT_DEBUG at level 0, this always ends up in syslog. + Fix a valgrind error / segfault in dns_register_smbd(). + Fix build on SLES8. + Decremented by 1 for ntcancel requests. + Fix creation of core files. + Fix first mapping of uids/gids in Winbind. + Initialize the id_map status in idmap_ldap to avoid surprise. + Fix initialization of idmap status.- Only call '%find_lang pam_winbind' in the samba spec file, not samba-doc.- Ignore return value from subshell to fix build./sbin/ldconfig/sbin/ldconfigcloud103 1561120142 4.6.16+git.166.8fb11cda200-30.14.6.16+git.166.8fb11cda200-30.1gentestlocktestmasktestndrdumpsmbtorturevfstestgentest.1.gzlocktest.1.gzmasktest.1.gzndrdump.1.gzsmbtorture.1.gzvfstest.1.gz/usr/bin//usr/share/man/man1/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Maintenance:10483/openSUSE_Leap_42.3_Update/3be556ce4b1735da54b485ec0dc8850c-samba.openSUSE_Leap_42.3_Updatedrpmlzma5x86_64-suse-linuxELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/l, for GNU/Linux 3.0.0, BuildID[sha1]=b06b92a4867e612333cbafc76962af213385a418, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/l, for GNU/Linux 3.0.0, BuildID[sha1]=8769b3b382812bf6a8ba0a7e7a592d661428cd9a, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/l, for GNU/Linux 3.0.0, BuildID[sha1]=92b3776780e39821ed4bccf6500bae9abf054743, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/l, for GNU/Linux 3.0.0, BuildID[sha1]=2d016c45a25e00c597eb7decab895aa9dcdcd7aa, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/l, for GNU/Linux 3.0.0, BuildID[sha1]=70021519c8bbf73253570976fa737109449c6975, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/l, for GNU/Linux 3.0.0, BuildID[sha1]=3d6ad1ed11d02028ca682e60b252990b4111bfc5, strippedtroff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)troff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix)1bP113!R!RR8RoRwR%RR_RTRkR4RR{RmRRyRLRRqRRaRRRRRR`R$RzRRRjRnRpRxRRvRRKRSR R3R7RlRRR^RRR!RR8RoRwR%RR_RTRkR4RR{RmRRyRLRRqRRaRRRRRR`R$RzRRRjRnRpRxRRvRRKRSR R3R7RlRRR^RRR!RRgR8RoRwR%RR_RTRkR4RR{RmRRyRLRRqRRaRRRRRR`R$RzRRRfRjRnRpRxRRvRRKRSR R3R7RlRRR^RRRaRoR0R_R{RRmRqRPRVRTRRRRRR`RzRORnRpRSRlR/RR^RRR4R#RRiRR6R2RsR>RgR:RRRR%R_RRRmRRLR R[RR(RRRUEQ,]B.!M)MۓjTrw3ɋ3n9vd O=Ot_z8XJ@UǹᑣLT3 Cqݜ7Ю" vo )ӌlMj˰59CռbB'~\Q{F߻ڪ$8X b]mb€COp':怮k,`꾟z5ok',.A`w*])Y`@aI>#MR̂*gAU1livq5<)uӦju o+lP>(ėi^1US5/7 -sA? Pm%} b "7ԭn۟C8ߓ 6" )"3#%n7 O!9оw4~ W:6uv~=EA~8 [:ՍŤAB'TiQ _k[*ǁ5?5e*ڦrk|⛡üEjܐ/++}Ank" R|P5CvdFݳ\`}M+΄ KSg ߞ9kaٗw>HI I#$:6G;~5/.glSD" ^Ye9oŤx.SWyy3S4(A R +m޳Ф-7gcRAORjPwINMX8Blh=s㘫D=5N$Һ4yhjzS-]R}c( zpz[YxG`C1GR)Zܞ6%0bTL_VcY׫3 +V_ɾ_9 {9P;.el=f63a!P,/ 7ѨJ?~zE\sG'frKn'W6:}}22K fxAdF ;xoם{D7CdUBis{&}P͈n@i>cْ't LAH{%h\b,>ddeHINZؗ y6ۤ6~u@yP_Ep1͘  )qV5MK ~<,9c u ir߽[p?+Q$٦0s2[T[Ѐ?NaYꡏY7;Rd{e Au׶ N Qzˇkjޫ ^(8K&j:t0h&45yl&6ҿ<ݤGt7TeJ!x_ $,-1UzWA9ӫ9zH,ҟ-Kgb<^*𩉔L4>hhߧGuꁷ9 77]{l#ϰk&n\+~Si,dakLa&V1;pc>A!ux9HS%ᦚN]aO7)!7t Aqŝ4/۰rՠ!6XM:啖!,l85o_IUYI^0/x@[^&MQ+Q/0sa F҈ă}E.<%{IaJp g̚#':(iB4'ڌ) RN/+/ݜ" {ۨu{si~4&uЀ{9}D-YV-'~Wax QŅODZ-%,*=?[P׋;ڃ$ `4rm {;oΜ:͟'btO1nξ+E U(ׯ1Ja5՛Hn*HjYR: CeiB#4 ͫ~$og%UTTas1&l|j?>4G} 3'TÚVklSET`;"7ncH^,n i[Zn`A틆}!`=:#qImq/g# @/2[ٯ;c~RuDRH@ bgӗ-QXzC>؊q2xGt%纉t,]:r{C]>ۋЪ+AB5{ت{o>aّN#۱#Hu-(6Em..mhigsQ(6Z4 SԊ>*g};?+VːFCJ(^CX7|n$\^,B<%vXHOxo9"s:џ ó(OO24J69Y a 20#GhwuW1 2hg_oQlmFF$o)sZRcdzԃv!&[U 88ft I\5|WGj-SבzNݫgQe}\en̚5,Ys(Zܭ(A0mVdU?XWIʛ;Wo`iq5w Cj&%;ZP򽷀t^ky>lsN(93x?PWA叫YVYPJ03/Z)z^prew{-Yu ZU3gżEKnB5қ"fVgb[Y&7+gFOH&E[i$: -V/y`Lǹ+'Chs2hWYw4|DKz)ukVJˇ :HGRdF '2^h`-x,i-b Ukk x3]'!`I e]k$M/!조6CEhWσ!l i4tI[2Za~.iK?L)mrٻPM܀a I%TnZuwQ{^b}bk?pK]f0ygb ]anv\}%#bƼ?^CfY OH71JOe\s7 ہ%`<::@%s++s5dcZS\ύ^C~q+>I +7Ғ5-ުU`A<5EF"wEZ\Kxrdgs 28“kmGx[|[Ybwz_V֔xǿ"GۖD ;wAXʰzitss Sd!$W/ߠ _fK:AYy.wp8*prȽ51E8m#;Bi@1z޶`#ɹkB+a_R5G`~ןqո*~rjjBJ3'#vۦXt&ߝlnQ˕'N󿵽$( R}T(B( w9!Zjw!&fϺ-,6')]#7BYa_}yl\RzJƧkMbcYY:3Y\ \XJ`9 nj~D@9'}+aOK:H##/Ӳ`hY-;p4q{5Q1кP 꽿TȊQ%͕OyR*[)2Ei}a EXulz|ȋ`]b^0_rLʃK7\l+$%'ZPu*T<`[dv^)L 6e%0UY{mAm\&o}gQj[ޯ CkDCr vkyn"o __ >x|QY6+|햍bhT,4m ؆D<^P#m# vZic*az`BnjܬU3Q6_0֣J:dy {QkřMV#9RආmTNP>I)LX%Z92jX4Yq Ra%YBn-o * UZv:JWu#U=NCc sʖS@NQ+ȕv;#Kw#=p?p4!Ѕ:n mHf8O"Ҫɂ,U ,Q٠2 6@ߙ{i\kYMԯ;m$x"~bڲ‟v}s 2#еɇf@$M`YR`0+QhL Jq}D)ޮ)={། uK2ǫHk/ͷmB"i:byBܙ0R_w ϟbXxu)IYիa3T_?Ç[0U]')iUCSEpZD_^ &ᜂD VȺIU/+[[U;xtl.OTs/:ue(txirc9Nh!RI;}3naOpxxw9i?k5^uwqj _",_UxqbR 1?ĸ[`WSYkZ85.^6ь?M}ֱ_ёB¦e|ٻ̪Bf0 =4qFM} UgW^wWD,)70q]B:?(9Ӫayۮ50+N()M|SXmb1TRu/wŲFȊ9bWsl A8B2uy_ JNj+j'ݸ%ODx#p]"Ws}N@>0Lj"Lk %˲?hI%BXقc}m0.5J#Y jtRw3rZb !<$;iaenk;=3cNq[Tˮ΁X3;IMe*;#G w1XvIC{tl" 3-(eLS'9%)PAjOR%5эWl@ Gt ?j7XG4:: jѼR`B32+ha j=)\p4@o('Towk/v(?f8X!s$W=y1 g"7\.=hJT+NB5T5D/#f罧JBҊN~Eqz l$`u# UIKZ,L?F8OX6RTj($9Tm,RAЄ'LQ#&t؝;sOĨrW2So&QLΉ){ 壺-:%#%Kj8rijl/3tX&4~_s*`Fn82맓%/B*PV]8FvK8a3\UaP>(<WNfN :tԁnڨ~BU M=-)̞o~Ît~jގU0"АJ["`T`oޒuS$x F:j`n=F8= ȦYرՀy{@Da(P`n,U(gm4-rؑG+F\0#KW!RwJ8joRRs^ԏ؂~&54$uɥqZJ2cK7GyѺ"g^ߑ[v19f{.tQE<Кj!iyUm߻Uz *cL "9J3;P~ClMzJ4nk(- r:-~#P.>+lو(L*oQz 406F!'Mص9ϓ)`ofJw?KR,)9l4,) %8br@wVc2"`ɞ웦B|K\ EsK&/QY٘OTmT*_I&SD`}ޥ|wx8ʓdh>Ds٣}ڌuf 8ZsQΩ[`k Wo1zv4nQ~K('3naj߇V(ĺe0]j^)ֵ+iSRceaO5/R>Sqm'֖ʦ lKl6l~+o ][ _֜ Ts¦&!hH1Cf*ĄY#MEʌ),ju2;ޮcm_tͭ__PFٺ5Zވ7(9Dxhu@|}I , 8%`%|R~4 $SIo1ZMx)~p3RDi+w>gzeKۢMFA^+_A9_|K&^C3+U*'6rM\󾅧G J+Ƃ$0 EN^t^9iICa+`v߼Ogm͵5Z 5U#grl,>v eKBgٺ"bN>HJNM"b ew5V2 x6Ve*ɼǭP }\wyq=s9аҊSjvVO._/Ueߔ~U$`f<:0nc&Xxy!z)PSKqh1L&aNL7Se&\@ ^>Q)Ks${m=GP u4wFòHa'/"#Ƃp("`Jo'<} _66ji8GwWr07>cF%޳ n=Pv`T1ժRsg/jZQ9vd@ xC"#ՉMBc 0+UڕwXҦ R[Il)]Wg}:Bj; nx-,x*CJ9E׵_`-d0L=jQӰO|Y `rd#=Q G!ͫi!$\lu8VtTA)^ğ- KAl8_:9^ೇDv+e,~eQw8GX:A9 !{5'"T2- n^_vt,=ԥC\gx'> Jeԧpt։bZ}\g@Z:Pw2PP9`u+X"X ϖfgɇ:7n < J^pB49r?S$u%l{ԅK_&ZYHLj0RjѪЯʨ.},}N cUi ~q0H㐡}\sj!Kȓg.Xնir RډeGȓIrS_6өGc rw&D>ԇKLA~d|7TKv_&&ۥL!#dRAk_§]*#Zѵ-V励r\SQX2f OVIH[WXppBhgEG^ZxhJ۠OL|Lrb}O_#FYpsj>N9W=Q̈h$_+.bwuq|R3]1'dn8z* s(z6F]sp)ܒ-SX {J;au E5kEB_b۵ F>UxB# a|5xhŸɽ;u}}W-0JMF?BC93H mAx"-#f=/KS$~ Zq5pn KS#2'ٜnLw܈2~I?V[ 7hIjF u$XAy\Qj<(vdn-~`Qsb'汆\9~ebA3&FzwlLa\X[偽NCxEn`g~CKEa8s8bb65O\ w}9+:Q٩&}khoԭ:q-[Jq<.K^h@Vݞw QiO;g\pZq gVX ey~A4:796e #lg#9bE﹙y%_{L@#:2kIP|\W֐P KLT ̱MY*q2kq%!yR9hɨJ[\¤Y9 g M/)$ .la?::fT>ڨ/Y=ݡR(p5Mq+2' ׿W<庯cӣo ] W`pdVWϪ -bn-D`~W#xm/^ ,Qׅ+r'Ys1I`[yFlA(µN5``-8$֕4֊wy*oBӋi#T6=@M]<?^h |su^ mULfX 2 ]$~KIfZ~盟k [ 1nRHr3ccuTN1unSFr6Z*-JL< :Ǖ+|6&i8P [!{MmV׸s6QyK#8Ц<먰!Cż:^kNW[ vt`x0 &&ا-Օr ;֔Pz ^v0>f=U/푅CZw(g,i:;V]j l{_ N-?Y{+n}8nmrYF% U(wSP7:a„,A@¸W Rp4yEl@XCzZ1uDeDk(Jפb1x[р=agZ5ɃF{L`Wc*C"\ҥԩ{v)kֶC;G{D6KfB,ԂG\'-SL,(洮n½Hp)ێZ'. )Ma+; N\kQ;kܯ)Ϳ}<~ o-zjn~ޝEdE3n8wo-~,r o6>>.kMjy~4 yX2G5n@!5 #6A`pΩBy"PY@w>oj~m%-}oW\8k~ID>kYnd.6\nVQd{> x;:khvIEAŲ< ϑM `M\)=+@pkdAtl;ATpvYet8WQwDqɭrea>QκqĠNmabƻ௼PVO\^°~"QRkϖp+-amaQ՗ uZҬ:ySQq?4Í4ʬi3P{B"/<{Lntэ#.s1ڝ^ܟt0T1+BrrB>XH:5hCr|>)ts 6kU+ˣh}9spB܀>E[%$ 74I $t)Ff)]̗$1pv9+e|oR2lߐB QXȾ3Jcm}sjO2=$A#o u '?&>?,w<'ᾴ  nV ֦N,+o7KeYAV)T Mf, q5N5ez/vBiS?钿 t WM>d6aiV8x\h` YOQlNSsɡn5w}]7]# MF#Cc,dE!C@ʴYtLO`Xcj9k[ZKCW:%AhvMm4{/ue4ElUS/ZOf4l;ZG2I'bW0}l ~mJ5fK`,}[OÖ́QQ n|4q\]:BG~K"Ond V2,<)ȥ@q`G: ~ll:^Ҵ.EtCR|N!0A;Je:-Ko2WO'y]!? yǚb& <0MՉ tgWH G>ɉM>:he~6{~fB7"4Ê%L*X ^O I'I*N^@jǖ\ډGW $`_bw7VnHH4h( XyBu}ĈKK,TN[ǯoL^mؾ#kmTbXqʲ(zRsMjx:gv3"_mJ&BS _s0I>9i|G#x6 hbeJ{Eٛ'TM "k( wG7!a&~ݏR[7ݽ~(]D Čqk,#>_]t &[P[o[Zh+/Xlmq[>jc1jXpR51@%M=s[NU 1RmH@))iw3<LI]7k2\n&F~VF.WY5ɉa`Jwl?Y1O L]`5ڹ,x~0FIRVCg~oK-4Qy\᪁w +T"BD(׌[-6hC}m\, 00OEA% h\vOrx!pmf-nqrVX>J*'JᝊЯp7߰ DR;UD8U<0Tk CVS2z=l#ag7HEki#$)U FQw(Z$+[g8?9ͭdRKhp[X0;AHnRL[+Ţgcx[:K~'l50kjMڱȲ"G: I} nDXGe7V(QB+ >0d+3u89Q8v]x1@f7 ޕ smnyMw y"+|HCHR{XRqQ#?мK6ސp#K䤻\ ! AWpe 6飥cyTv &8|Wo,K]0{ =3&Z16ޠxկ[xZk%SExNZe4F ⚌CNȞvF/T}ֶf88 nMUi+g?\ق7w^l)+W"dNދx}\ܷ47OSk넼%qモ98JC;,ѽ$S^ vǂAn֋A~A=<,Vd y(?-,' J$ȿd%9 sy'Fe&Z3CuJƔ !QZUܿ!}#2IXq;6b"LWÖ^g~[#F e̡[~ q73d6S{ d>+V)IvJﬨaOF[0{7cId5jCz5MyMZo=cHXmUWvDJaO=sX;{8 ;wqN-8ѭ,||JvD*[ ]u M-Cs\ 3Y%p߸t2͎M ,*ﶺTH 5 os[?uY943 cߟ|>c5<󰀽'J,a(V*3g>08A9 Vuq%GɂZj'(yws.Aj_?rw"PfCh@SN. ؑva9w~ .Y],U3יf ŕJq3*H,*KsB 1*Up}GFJG-FvC*]!"(' 1`wHhAМB»}C'leOPyhY>Erz!+'ݱrd_FMlGrGUYPEZF h ,3YGEܝM{lZ(Y\47ȴbJ^%"8UТ ;W^Godݽd0 ˷^VJIR:g~~dF*fe>xxqMyZdx/干FYfY{TBܱd%it'ņ ,K2L%&?;^p@>Mb[k}&ߵ]i Mn8. : YAgB܎70̏MܳR b9yJ[m}/ is}Ll=p9&8܉ElLKU[@cWjLX=^jƉ 06ΣnKn:lTceKUT5.R`$>Jз@eŀ m-JOsWBgC~*~kc00ًÆS>r`_tA/к8slܙ} >#Qrymv,8'"+vE&ٸiO(Nimy0;[<2G r g_;f2}Y>0n?;6g{izQX{V0%ʫIrXF L~.v]ȑ8F)=N0Nxwl--exKP|yZtb87ۘXهr[^'\c_;ڊݲ\yY[wy9#C.ryAkBn9ܙEA9hŽfT&ˍnzzG>N5}#ѕ?] U)//vyx&J湶sFz#2Qr֬W$2Ȥ-+rqX)FaqJâ Ο\-eH.|;=3 Dt[M+ @IEVp'yK0g,6d=FxGG ftVV=$./;x;[8v 9PGC(z'gQ y?dmtdJMFYK>%ݡk7Ťi/HdAjpr2w6%*T"sY[rjS&s6Ўa6 ʐ/~vOԘdP'*>@oO9DzrS"e۱R?1|e˚E*0F Ǒ8}@\ńnvrCm71cy(zA,*bAXm[%'Z KRsk52!>lέɳ u>Ԣϱ#WQ!QքQSt5=#6YW8y{r "P炳J'g11Q ZHLA?tD8 q1BS>3TXp!1q!J 3Q?B:kY/Z2*Qu5{faJwpUY[5L 5YisC%=|xvq0iQ+ƍO!%52wǵTdkRqG3MFW֜k[7!u)dnDZE].6{a*8=t.:ܵeUSFb\hxq]X 3F:h$ Y9=ς1ݼN~ж.odk YxXPJG-}\( šj G4msƬCgi/Rl |,][.IȦQpT7˼)[gsEXT5nj2^KKO2ٯSYm5a^0jyKZTեczNeEiP<$5C`V0+r?Ct ,@E+;<7Z!D8g\hBoeMHG8tv ~bŞ%}YeN(oq>g3Y2 ;"'ۥƢҺOf@ziI|)_bw80|%Hg/-y:X68C<=<SC$5C49/`qֈI lfmicmY˙ 7IwS¹a$jz44u{,s ׸ ted^}S'*n?$*%sO(Ag Ve K0OY#;ȠU`"\[iV2 Ɔ-\̨.}XXȺ1387K2B#=pB`igo太i+9R'0Mj VOIWi7?S?夿c4o0#v!7{N╖?ו0E`=+80n/][Ϋ"#?j:ǘ.iA̺sKЖZ 4`W ﹴ&BiE`x1e4B֬w;5F8:= ml"RTY+m?k˝X- E.S~AyBa9VgᇖtȞ0hԨS4] gO N4lUSXz*CA{)[F%.WWveQbNL`&M ,sۡaUޑG'MWFċp)fĴa8ѣiZ(7R--,Q+/y7(uD쵘 kdjM N\g|kZeK;vs2~B'UR Nfxvױ9 Dtłu=JH{." /r>ɾ#-&S]y t*E?v6ԓ O hMiðiO\R:@d]?,9{E)b{XX EGBm"%(֏L! w7]E TO\HU zx.Se;ɑ|RrH@lӼE!ԈIj?wLD utYT]} tw'YLwR*wk'J-#ӳ^Kd?x291ڽV1Y?B'L C8a7Vp@)M]'Cld]vXMv_;`8A><2~=Y-[=Sʆ.{$ 8\{ij+ 5ȵSՙLϑ*WͺK^m@g29FF0HEv)-͠TJ m =Єi>uIunis"~pҽpMa+i>p $\R:l (̓fD_+![[8y+Ѷw(2ş( _8\HWKiBՊb\ \Vw -U\QJ9(XRF?.#Aq CTtpm>ZYěhiתyQ :n, oha/ӆC*J7um, ql[BPsTL2gB\;-\BH2G.uUq1)O5! &IŌc<CME!3T^6˨fL_1B|ɓ܃#x-WO _8o\PQ+;tH1d&sY= i5# DZɣ=̡lcK<§c<`{K*^%\C laȓOf v8]c &m\-S2o{QH*^"4%a7$^e:[<֢C( vT2fNyuI97{{-0 3^BX?gAmA(a *p,1kMV_%+tfvK+=*B ,.0S֭"L{;Be,C~LQi-]ٙ `Ӧ3 _=h { cK}j *#bD* 9(^!)y5,]Ig hk^|+,Ӿ!dpecA&+&{3U< l*]35 S{4֧o۰Ppvn ]YP>m~!RtHQr3?ڻjf9ʏk,|wI)x:&ɠвgvCVe0Ƨ41bʘa_s|X dۊ\ApDŽb;Ȍ=QC+@x.)%cgtܣ=@;v:S_^i#ׇQ12&0wpB*Voy%zhUgpZ+OvѓF` jYy}/h]rSYrњ9gg4|tuD` 1-E|cy _ąZ=:J)3l>1JDӉ tYɸ,@5/>0ܬX*-;&=5$L 8SEY1| 81rOj(, ݞ;sp 3c( ?Sh^}oLGXOPP >&ƯNaƔIuOTrCtU-^CX_dO,]VB 2<- SIj\TCa-]7go"ߟP.Fv_+a.{*-LF}DA;zgyJ8 4RCqGPiT4+iYXfȜ82=*EXѣ?oM`5qĤ&@VqsWDϬL`T񺸄ݢ-bɪ_Z|T*OW9SBmpzO<\}Praԏ!"[jU)ybÔݚZ=h9 ߔy4':,k~u-({N2}1Bm˩$ CYr8<\ahd #Z.wi+6L3)brN6)&Nt)-4#aMHk۲rE,zpW~)!OrtY蟼Gvࣧp9t~AYRucꫦ6,0tIA%KoڠJ;JV &Y^B!% cۅJ#[_=LY^Yjnig%1ނHڟz!oe+`Y;E+H"h/U_L\%v&Qqs8]+ONc`89B2m]R ~MTLK..d˝Clf%$z I5S<j;_ p`jbU?dV1:S-zY,m}GSI\S gf&r4QȟtŢfES]O]g$zY4ZQq)F)l`%PO {kBSu;yAgҁ. ?TəZK8̡d TxRÀiݮ~u_|<}t vN q A~B9rCOӖN+M;op+4$/Ӎ= ~h#>Wo=y?؏}6"ClD^UA1Z,^iMJ(7d l^#9'|Dx@rЩovG39|ɝ$OEUnr?ǔ{˛WF5 n8peço<8c{aY %MCxBjVzh)b7mxިIrnyn=y`\RX ;!x5q6Y|~׹h"kى~M~>O*3{*`íVtnhpZ`lAT2@~KYTT$}4:} d1Y#\7ᑆ_YTM||YCEF"`A߾QNh/iWˋ\R'sUGQ&%Z ,l qnclX2Kφf*aVLaImZ\=#j C3=ȴȦqe[6 &ߌnDG!=KFdЊ^M<$׿DUH`pk֢=7iG\; u=ۼ & uf%-(1 rzޯTW,` q*HFQzE{j(r|kͧ=QlGS4ԃēaVYnTwjnי&O\'/mC9 @LPgK3i/j?8?`[E'*-C18LO;EL7e:[bjIRm͠J˫\="K vԽ'!6 ؅YXAu6OwȻb|y)<ڮoͧ2UWoYd'96I+d%Ȏ\MǝFQΪ_x: O-V8YzesL \TD@ -{܌}9vt2$_4r;'-|-pZϊMRM8PYZRi $oqx[ Y!v9SPL[ψKXwxSĶCX;*B,1N^M빸-:PJ4DDvhnG~4`|t!&W/=3BX`/ˍKvt#b2C>SgSSrm6;kyL՘@mAĭ$%uks+V>&dhLfQ‰sC'6ڮѭaҢΞP$}vRs5Ve7hPXQa=QNbLuǢW,jK=E֊;>>K0u1_a,H~$;<뫧fWh1׾LT"a6E$»y%%e)x5{ݝ"v 6Ɋݫ-1's= ].?rKM 0&pfn@u|6‡vg׀ wt :66Cy*0mv0[pP@"Y:\&1\7H(OIod>\\P7et3fJAawszz`߀cX.7?\e;Ն@Tw<9Y]~izDOvjxxR ZU ۱VTpv#]@NC '~FRr5 m Gx>Dje73~ឈeg ^ B{/)\`K^ԍu\AV"mSfVqd+-T+9"ukru8Ա7$d`+x+6ډ-Fe_lfvA ES hO^G_ʬx҃Jc]KS%@^,&U ,ݱB== V['T9[kz乕zt0Q~C/AmvD˘;;4#憃]j3C%6\ZNʹy0x_p8-`cqrDӉnZ1U?C݉\#ϯ""dG>~2|6h6N}%H^H<%,nh!_O>^2Gk1ժ^́a]HZU/,eT3=1G^pOj׽(*>ЁўESLmUH˲{ךÙ>@:نn~&婔(:ΕE;q€lVP㚏ukƶn(jH 2Gme?DH{{,_X8}uJ3P4kC]e88a ![[X4IS<16:uةXa=Syj``1^֚z|~Һu]fM47pPQ|TU^sӯ폄9}[<zErLTw>M7hfnvbnfE|_c~Te\<_,ݷPJy x5Ǩ E i!% E5Ǜl3ҷ; jY?ڐJhO $r)TRG jSPYrX29Y)!W%|cM[DU go8ws1 Qr L/= +xׯSm_CK> ?h8~vK1ߖSؕlFy~}4uHn't->嫨 OכY :M~e!MƧ_fm:6[VJ2Qlg03ڒ^2I1ڞ51+A (W.F8U M7+5+S[F{M7zSԡ0xGӮ;C%k?(nEXCeDKOZbXC4"~kq;ü NUoctq/\Tйjk!w|E@s8PO%TmmPU4HL#`,s]M\0Y(Pkc4Mq RޙTK.xE-qClGދ SnDǭpW\K.%+EB3%gk?J0|q;$i(7b{{P voe>Y3N*=ǚѴ]*azQ\ fD.I>aʯՏ叶Xm c|0ϚQ@Z k)p$3fe$'&bY<ddn묝;]Mc"5s(Lf̈p T Ô7j+_zO{C/]7$_kG7!:O&n ؒE/&w(ñx2'>DU #ۇOɣ~sF"MRzD݈IV{Rb2ȯ$ԙRwig /&Z3&/{JH렖qcO {;ESZ^#xyJL+9çhi]&ޘKN"ý0vM9Y^K:Tcsk]ѩ(yq0,xr%;>wB|Iy2![ٺ9zN"d^6. gb*tt ᪳t$3Q!pJr*u uiα%]76&F#!~H/WśG?VfB&;Sfe]Un"CBB@>qlT04ҝvi!յ~wROlH~/E/U7u9ǣ!u"k/"(%J xi],Ŕ ^_z#&y, t-&-mY°mԨ~O:V9_vUFo$olhTp*gZm?KbVrP z6ց$g]ɲr-;ll?uDN.I6B,.LS\]٫,,8(G(if7yuVyB|3bf4}6ނ@`U-,#u@Z+p5OC,zjL=:1l.0DZ,or=19ɫeU T Y 4"~NiҦھ#N0U-•>LxW… >KCaiu 6ggg5&g-n0i)!Z ki]Nq<6>i|\+ I!:|"6aRI >Y 9h;LULJ&ZY[cM2:j@qvTth1.(5o먁ׁYF;L{ HuE+bh}J/,:fI!Pri9 Uv uWo=Z1Q;>uJ6&𦪁d6%18&4`;4W 3ψD{_,AV g(9Rl%@_|U65Y) 1G S'RBYL1M|riD)*ʜ9|'CB1խG 1Z;PF%O3Z&3c/aZ֬$ :I!>#tvNȴwd$pC3,[b) g3UB6vƊ8תk^۟=ٵ>:aa{!3[fA)9N T gַ&bV~{sFxY/H`b-Yuof# ;>laR^594tX{=G̓8JCNklEZ֢&` 6m;:cXq9.4. XgcoXpz.;3#^Xi 'M"]x+'&;1ޘ%^'c\lbJ|66#E҄n!*4!ʰ q; AD܎Lq[T[ߍ*tY.(b MPUc'&~Go 7tZGG+5L򚊉=|)u=|[̖X$H Ղk~tZBoW4n]Wy$QPApw31ʁʮM@Q~k6B,>ZK79Q&S}~}5΅eGk؈3Ym'`/tl3} 2=3Z'V(]#A; S'sm1PEPV4+?U^vi̟ |.kQ]6j"ge/EthlWv&7}pXz$,ZȊx A3⯌'Fc_дf"܋ag {| a\0IW<(ۤg^,+r9BRّ`&n2JftiʲZusX>7JgwKc`O3mC$3(82g%3 mK-W:#}7g,rK!nhǾ VTHbn7/(,|?&5t[Hesn#? LwW5/vgcFjwbQHO?]hId$1(C`oX+061&_;*q^T2N1c{ݏ wJ1aink0h34Gz1jKZYddKT&.u *mi~DWUih_mBz5Dfǵ=TwmEߩ(eH=UAf`M;B$Ϋv0L.?] .}ސ۶)}DhS!nΦ @:BcyC.5|KGGCI #*/ظa?zkg&9j龌FfFA^[X' F/Q`azܕ!\VO ;&Yj /l3לG\,w`#L+۷b΃sg!%(ҥ/"&wזɉ}Nf.ւ מIagDe!S^SCY['cPUef1 2jɊ9ιh :b,v?  nU<#0Ү] Z/8+E4f$!q[(bpWeŕ&FVÑ4qx.r*Mu1pSqP]͠)^_}w2 *c:]QԝT|ǻ|oy4 uTOdhW4Ļ3 ;, -F!Ƿg }5%$ @gJӴ#׿TyCWQT.D(k@H9n= ÿ&ݐI~q5 f5꤆{jާ{ձ?0-90S(l-Hk^z\5~xoGStrKF v-MmdS{WZVGlp7KӞo +"ec@II+(9#[q}rD)΅-&KGwWۑ'z1 O$ ~Qw, PtwYqW'O2\u6 $4{WO{qlmL2/BۭpJ=z0k00Z8:@.7DkQ=7M65XH XVwJ0l@S$ 9!M'"G* rǭ>J IؠoZ\=5 LЫ'00B :'C9b: AR#itf8J'?|`@LGlYii+ํzPG+]ץYghk҂#!GSbB+pC( l]~֤M ΨNL?ԃ' ЪGT!kF;L5uDCyyT۵qp^!mLgTMbٹY|CÃbm'=6#')ʆ`F~7D8F[}z?I0ɛհǁь"_!j95Rg7]A!b5%p؎h̟$dU󫡷~AD[ vO Ζy p`%赹d^:;{ZP h 1fJ'3as` )gj.5 P!9.J`C@7M 3Eut+ކr^EOWֹ1¥cM{!sHǰF/r >=HR^t =@ /V,j$>@'vb/aE@ǹfӝpv";,eP780tƂ{ݯehФ>TU0PzYKsC%*9fAĮr?Ϙ(x|Ć~vx QF R&aiyDTڻ@͍], IixG ѢB~bk8B=9I1 SLÜ@a/ fɡ̟kziR])Ooa; R4GV\ kX~UpIv8!҅_)'%.!W'a(mcJGNY/MfCz5I5}M1DLVo8!˴چQ1YjI#h?bʍɕzYSrz2#pcAFC96c-弻ߜ9VǪ]2"RF`fZ8}'AHۅ W$H }uLH!d[Ԣkm[[lBn 0@y"Dk"9X 9+3s@rWN(TSw/s (<[7|H2,K7SjR6芺^ P7M|Aϣ3`̪ܡEs HEXweqoB$ YB-JTȺZnez*;ID]}tOk&1g8Av⠐ }՜T9>S/1@-sh]#}mO u$D f!иe|qpy 6wZ,q8qOZkjS.H^ꯚg|; r!v|wc'k9uauN⻦$҈$Rl~c 3vBA'/z wl+i=0>DκƊ mSX&]7A֯-Z(ѳKj lýł B"z )Z-|FC!Sf7ёW?1 \z`堖fԧet%SD9Ywh1IPaCBInn&$[z$+bF-bL]}V!cXQ-ȏA(/f'?)cɶa)tXrg2 f?^݂S,UW Y8rϱM= ȔC-3E9:t봓7./K$d7 O.?(RH13&ś9Qd UT NhEb akDFC _S:]pe z,'\~yr ٺLMeà_A!}RR"pzL/53Gsx{~XY޺Lv6tudM φIf;z hs!쒵n")of)h{VhsrXteAr>wFc=n% C~0yoNuVo?dp @tg: '4"]s}^Z=.L !l.z>:"{Ӫ'h_AHY;"IgoJ_63^ GP\y>)7.T-r8+"7c]@15Rs#&+Q0C3a'1=`tULNY 3}@[o4uD6fpP^&nPiw{ + Ci+LwH?k T(MzÕjU$e] c@I+cOo9'`]`%ouSPޔ QnЄXeg~hKB̙+Tr@xI>z0P rJ湢ʜIRz]~}DbtEt ѿ0G} >bH PMqO3[ 򣅅_2S믐CCz\tv8A0xzϯW(;A*;^*WB-MjS uJck#pS.&$^s+P7mFO5{~-XE oLD-eTu4򗶶L0Ӹ܄[I^{?:h|l:nNiJBr\qh<| wR ?+#I#(〿7'z܆-4Sy + /d*\@j8亡hve2/+{DYY,x~K\@J_u|AE Ҵ% EPW+OH0jRJnri-ݗM6m˜'|,BKqLtc8մ;QhALlYy_| f&dZH.dpfrɔNsfr&xn,SBƝF+b :P^?ZX5Td}NJ@#G'I-z"`ԠLVPG) PTԞ6`+NcL(&ƣL^!x[r Wo s"<+7_ԛڰ:H?;2Υ`H]R" !N$`T_{jvq VV7Z%zd w F41on\{ީC1oܜ% %A肗 :V c;(F`B=+$ D:k@.]_3#J]>U'PO~΀6Rٲjdqwi;*n >~s4FDgI:a;"Ls>2 Q,.\0rPt= 'ʙ=7_ V??x_s$"C U pGGTW,Ç.Q==IFp"J/o0kr`CB^ڤ8=>¢sA \*Fnd U,R;7V#o6qA3T(\rjM",3I"hDCFJI,:"1ԕ^XvlcWc7ى64K=;6aH^4^rμ2=М;8T;cFIYOoK^n2vC0~XhzO4|o- 6Hߩ{c@N…Nh(O{~" QpD*lͺ[8|Xc",GA+ThE7cWmaS nAMLU7Җ?8,Մ_TMwcr')X7*?q1^g 3Ur(цϛöF"@b_~Z u>[s%V݂yf5瑌4ۀsEިZԕVk.#N*u =dk'6~!F+pmJɂ9cVnlHp0U`O&?HŮ큽_A-:_ӝVcI $vYM-՞(AAt|eJ _[I(m}?Y<`.ˉ~r3.{,c&dW=ʁI\}HalV7@y.>*Ѡ{NLtd'RQsYjPLP?9 *1N8mÑGۃ^w~felVp?Y[!/Hyд"ZxlzD Ȫ:nn#pj˭IEM0dm1'+ VУfډl͇iv3\8(9g(m 6>T/hIJ{^1Ms%ZIFlH4\Q1iZZ?g`WdSvZ7/L,BQƝ% aXdO%Qs YWu:.w䎻unŹu BEqe)2nYf]J q鶽mmxuq vٗʩG7;] 5~jY{j{?qa"ƭ:yQt|M,"H IbXAz#c$ae:yf~mf2[v2hO.MKi C7l g*3 $ ua:9Cc{"fʧiIHq`¦ƢsXZNu->37U|^D({ rksi#kZၛL#[Wgdn͊ y//OY(ݺ>!^!I m06vTW*`5ӵ%mp>빋 [;rs4?q]}S&caЕW J/]GmdAB<ݾU?>KF;EVU@FR GhAgM-ُu4"mBʗu;p;Qgs> `Y&\6c:opYz)Gw}l-dk{P=)59fG3P]ZgB]Ɇ#,NvRF{9CHJƟzgG\@% ĭO!-\JVK37޽pA 9pu8ˎR]~4zofņjG\x\|K־lN'JA=6@{S_zwsk "cVJ{ra ī,aWEù$.G{ `'qyUI^n S/0Lx\E%u0Br+3wT g^iG߿ˏ"۔Sq?xiCCOJE/<įGe&ו٦)@_yRFr̅)>֏TATP 27UK1?ȧD 4ꖇ9%ݰTÉ݌b|88Hd7ꓩ/->jYTl,:J1<cS`|Z$_pQL;V [1sӽX⵱V.VAYdQO(f~~2X v'T_grv ɞc><zzP76Z6iC# d0GkqODdH#ZDI~$̢\ 9oT6/FoJ{Պ`^&`[r-t82UTW?+p K_M@Rz{h(4Jفn8;7` ]tljVlZE[Bo ±w:ۆz0 V^)IMi~>C%HX> 7yB<4s߫a|8#RDP9z~H@ \UpՂ k*&(-V\v U_0U `#X)x/TpU#*1^ּG􇾓* t g}V!!4ƅG,OZ@NF61ק*'6CI\L>ֶȅ/7a6HaDJ,~r}-N)VXNsD#>{Z|rR[1\)>^π}q` LS!#жɈE~5囁b2hCfB =!5NXlx25C ZR8"lWznʶElupn[L:LhRFb䚗9_߳KkZh+$}X`=-U1=W[2 =$q*Κ&28m54odO"^z>}.%9w7/2N_bCE"X 6ˎ xݠ2%\S]vQG)lTa}St&2$O=bްh!_<.@ ҤEXD`4ݡj# N%h21"3Jr[:LKCȩ՜5Q#H-5ĚGe7q1 <#Vyw v X5a5rO3qRrs'E!Őo6WQ^0j[TBLg!&+@4*K6 z߈Yb,sʲQmf=YwluiJ8H'C46͸Ay_pn):XV3HU{SkT]hE{\j- Cs2Hs~ 䥭GWmi[ZM`h3z ql9!𹄈۠ /OEil5vq mq 0JÚD3 T3aqה~*]qSV6K]9^µ~-Z;t R/SĘZGn@sy^|,h4Sӊ uǺb3M-M8??JR?;gLvE + k}_bm W#^h{Q "!M ubC2vGjRxi?@w=QCt=~\Wd"26:jX2w=#a/Iq پ_vϛD{"^cc_h Vx-9 m5dI9{88}T%%`D7֟xFh=up-qU1^BfN&n}Sq…Dt;fS )]fisXt$ T'0N%@J/"g(!F2#&N\b43^v#="pZ Phػ8,y}S/|~ g=,;DI.6D2Kuo1Qw sn#O5=ͽb^/#JR8L=EಇEE%uAdny$ &tL$k`e f7i#,]npj ~_Է%8AYWŴqN:r \a2H&żE1ar=B(o?{jFe,c7 {ICGXC}.,c][,E~BLim#ݒFw x3-iS'5KHyԁ" -6Zcmp/eQ'൴ "Y泻$O5/{.\֥2,VXT7qǗ Vf#vK?-=.IZ=|t [B\V^kVAp6II"ebٍ6&'*EGQ&‰Y0yts`/Y(3Q4X'-d<|=` &  Y2B_R&m/%YHuuL.qi? =];Xt!te}I F!q)uE~n=41Wz`rƿ$FɣSg4v'.htRx/>E_КPnSx-,X&p$M75t;j23Sľ1}wcq䋺n |X݄SlxC1YaiuL+`GZN8n5·H,_.MHӨDaBa*?]p%j܉A9nŒ ZʲX#P^=,7WMFAlO4>!jYR(SQ&}6E̍w1\77ZaD<4c1q(Kan1:x8vlOHdD7 vDMMƢ7l#Z>t"fPc / QqxQS"l y9JvIhOGN8‰5 -~G5'z) ̃I;0;cv_YtD@~ݪPUw-y{buJ4+9޽'ʂj9`_]ĿP\Y ?@y T;CF74`ʃ!>#_&s,+ %K0'l77JgFC)O.G"Cr *ﰼ1FzMuD_b_K t*Z2-hf/&T_@1ǡttQ{LQ:*`)"#a^*LscF^P}ɃX5`;M-XeFN#/XG}[JdOfܳA 4-_z}WH1lrFGc5ȼ`oXheAjQ&4M<+ӂP٣o{^hY>I.iBd7ϘqAǭ{vfCW}b0OV$> H(Ý`1P]kb>sf1vL5C#g`T_S Ỡq#&T m@He?]]!15`"uMwI$ްp/%!bY7cTKgء pGءruLOu)s#k;|Nhsw6*)2H ON sF>wp dXX* d[2BMPjKih%ť]zkEMZSOo˴0..si5kk& ;6JGIIew>u߶Tz>j‘WAs`xH ]-4l(#i8,ힾ^0pwxvvͮPH.S(GzJp3-[^K6CspJP2x9t \q>[qZD7;k:hO{jOsQ Tlj19uO颎<*Xp\v`ND}X d"`)"_6Eih"ZDVџy2fIU3C?*)3lFقq&ž7]'h:Q&p?t16خC:p5%܏fyG| k3J,EKuP:XBs][0/ߞTdE6y"*t %O;fY{Ygb/c -O ;7r%8xҒ Mfǝj[+iuwu;uծ11s ݮ=?R4?=n̥uw^H>Zܑ7r`%}BgXAS$ma6#X<(̙?I.K3?^$A8f6_.J 92[EA]PY/c YJK )281c!#s=\E@uݡf"ch[6Iޛ:LUJHfCU]a_EB$*O^r߉@w^?hY5,(us1kI¬jBʜ8m`&bL*5M\"[F[T4 bVv#3??kz5khE=q.΍<05!$7R*,6,aM-fg|ؒ>c!|([vTҹ4o/5Ps8kG KVR9?F}xrjؿ|!RK-Nno^ЙB8T/pX`y6 4j(5C9 ~D1Tqm~J G9C`:`wCca6=L\^O-#qF?ꨁ(XM`b&%}ظo%s sW%dmMB?}*a3! Tv˚vLegq2lt% ՀĮn2 " nBl;}"ቨk %ڂ뵎_fO0?P~H v&+&2D eddN:B(-LINtH+>Y.וf1:Q?} V*Y[&Q̇:IWwH[w"xKy֡ bc&9퓪j}r[/t^n*EΩ]O׬ucN~Yk- ߿&E,KmӐb O\ǧv1%l+!LK\+> H,)8K0|;Rh2wa- o}z 6}40i,rd9&;hxXTJRNw]9;+*AMh ř7/"}ĩA'Ѹ"&uEފJiQg% {Y Sٿdo|-M /G/)\4SQxxW!IL]&8iVABLF nT%2#sĞ#xcMqa偁3:dmH< IMq¦űEҒ#!x dWr\HgJ mq+([ D!PT/N覎H G%6g6ܹΒ؝Ez r/VaaQQ UbO"6Y]$ڵRym@Փ*SvAPhS]cβ`Vi. ΐet [R'&1*kN*UZa{Zr> c kuit~\ 4hdc{;p*BWnQg牱;\-%. U@lOfV\# q1zdhۗ#|o(Jv)%Fצ'S&ÏV BCנbRxTc4,f&FbAia=i.:$͉cYdJTi+zu]㰣B@sdg[u oiȮex_T|=G=5V<'tu؜K{ǂXg%9Rīk_u$B̍WRG+Xob@uɦct:aþ.TPQp`0+uX6˙gA0_KߛKp3֋7Ol0O?VNnd.sj]^33xCn/~X֧lӂ\m+T柔~49u+$1.@A82~pZ|joNm:2#9hewR.Uliq4d ڼ^S,(0wf=:GW:M"-hcoL\_3&tT9ݞv<@g!EToQlNUFh"Ե©Mw&SD\֒ؿqҵa}{GF͞OKAdW1Аu7|J'` 1ֽ'q.a{DG=ʐ%]w.c5GK:41qs]s +.>T 3䒃*'90ɾENG"u?qOD"&y1(kӶb%*ȶh. 2U8 x4`SpvM6J!j7Ds1rŊ-P (EsP.KBPm"!?Ep*]K^Hqٵ-r< @Z9ږ Y6Vζ߬~;Ч?Fo$sgt)"lF.>!)אs o3 |dQ䃇$?W}h'Hpom }&+Bm0J'mo^W ^S>s w'tL2wUBaۮ8U&<'׷N끅Q04q.Ro<,҇c{`h01kFr{*ǪvZ| (ewWIq(AԖ{ahSj]dP/OaLDpDX `'j, Z6h oSfVpUND(vxS"K_vs[ b>5F:oVxeC2O֐Awf4vRDhvBŐAI *SLԛHx2@DWV^(b\D|gxDܻStYI+s +$қY}ӫ{؛Dg Ylᦓ7 pR^L/=kV,a^W+&IQd[#?٥C2մh3wo0dPj.n/WneI+`HW NWs}N˸T$\TR'M}-Tmf<KiG7bY߼8}タ`1vAøogβ*e'2lLbvmąɐ@a3 O7xmď?.jA=\rFUP@kF\ͯn=s6INZ}os0J ,^Z usK{gUCE\;bh]rSKXT4m ʀةa =vnwT`QCប[?B>.[_5 ɤX2nm,v@|bJH3삨-1!8տe4r Jb (*mst:[6i<:,]hC/ZN;@X}uR~]hU)dG}YD ,_DYPE]Py*6GX"NH뜷H p굪,}WN&VfqƱdʷOaҏ>XeT콄cM$lr=k/XM503-=ez7ze.xӒNĺ/#*էV Aҏ%#~W^|X\WnWt`FP (3{M"ȭ1h9OTDW ͝{d\sU. EjDÚ}Ҕ?E(Z]clN' N cR oR}\2oDe^ԯl5F}%hmsu&Y+ :TaB+y yygf0?Vn=׌IBKx8Оl'n"JEiY15;ËŇ\o4.t n"dx7Veʘn40T7 {˘i;o|HpwrZU#+:Y٫`6#`nW Cꬦ~(Ip~4qO;zgRg4ZK k`]pu/<=ɢvZia^TKI;(cY@ wD_[aNF8QX t4 J3NufG:V)_;ޚ O`eJ{s]$LDcSmb Л; ov)q 늚^8Exa^$$WdEv?Nm7 K5ōs?v=O0|˿i[ۑC]E eR{ TRUj%8TBysAИcAwaw>V5s2Ȣ|2 *tY4fLЬ$y"!QMT7ЁLv@9RfY 9|wWqQ%CEFW^n{:8OέБGKSOs!@,o#" ;}p#oEX"UWks]~NVHU1bliUQ&z/d"~wۀh)jFUh_fGyGXRB),@^ǒTh쑭\j^'S^EV:*2D;0O`PiAT@'R͛Aʁ\:~A|-)%dG]iV/&GMx_98W/pNSME ѭٕN2yײƯΛ^HU͡b9[N,@G;D+aOz־\(QP.h2#f8V/k`OIʭs7" )M㏬)'fy&})띯\/m/*.=A:͢ =6ƲC#GHpNRHzw9&#p\w?^8F io }`x[qsLr2@L;7k{ 6?[?SqLJyA#hyy _B !={GVP|B"ucWF8˽jOyv}>pgqP:Lx-a(pMJni, ?ቺK, -O'̅-Ft̜ǀ)jѯTR)g 1 ;r1o'5I`Zl(JrƧIӗG mͰ&CAm5NR^Q.q7KE =|B܈cjv/ЦS,NٝWܚ-]UA}WX޳l/_K3͜)kqtc{d1A//bz} HxFd~GinKq|2:9?A;l j8iYU'N#]|dY'[Տkʇ3ΰ'|khrj|OX%x켺OZnLjP6NzWqJKgA"c5u /Knǥ'Jr6IcŮhBnpv5ȃE ]GV ޥZkLJc9!(cf[- :A?@GיN,[hڜG?[kNd#8V }-@]@o[^uuަ-jƴK~@[uYK,1cRVF{JwrTS<^M ՜ [Hʨbu ,OC/ ^lE{.}2z}wqeSD&ld* -_[:`G M ݩ xjɉT[ qT2sk`Vm5JEc"#(7+/Хc||_ƄM>\w2礼UpF=\a?TV p kXtɄ!_^D+Yi该-l+ q,<3rzHrmaq"3]萼„x:R _xHɖE@{g 5z8l1hTĠ}P; ,I^Z.d%V:lCēe_Clgja-^l q_njAvb,L4?(_i_9ܶ>))oehۡCnGsd% du ^.ۛo>@F!G*5ۗgF5E˴pDxdk30Ds g^~p"s~Oj Lmwkل1T="ʐ9>Ė3H&`spǮ-VIKUkplU{z| \W0 X\%ͷ`"GSBDOWbۂjF%b >Sf"VSVG94kYDq?elnÚ=jG?%ä&U3i(aۿR`QW:CAll5A%>$@S[)[V<'Qwx6&0 ;kS 뱏憇@=X뗋aj]C--x"vj([ȚjRAWƔT=w ;gnSc~ Z|W/*GYT!Fщ<4 sĽ|me) f^_/T 5DI/؞Y4*|4ud5RJWf8 yd!ž?37 g 8d6f {cK" r]1lC *Fb]yo"V:\ 0DUJ^"YeW] (} K̶L?F+zic_mr"NrL(96Xc^N@ Nn^P0)t(PTgIx<qHeƩ7\ ʃCػk ZtJt}Rr'cQBTx+nyA6N\\a _!@|`;_Af *@clp;B@H<T'Mn$;^$?4&]bSc(nT%:3Zd14י5nKZ,kû :٨!x=vzuq&-?&(#G9'M[;:' z}m"S؞A[j/. XC40l C~'=5(p-iRmE-m9~ 򪱬J梫w6^-L}F_C( x-T|l1c/R3"f0SMVYI/Af/ FSL vw0I Ir`JҸXAǽV*4v?Z׏:Kfo>~T%7"R0Hv )B-ϽX>(EΎ6S߆44r(2Hjp󧓀|'%}4O C'mWlu0΢KF ^)KG gP&}ዞDk6گ'A%uWRlB _AX *`#E )PÖ!_bI9jwX eqNn: :@<\h  N鄸d;'(_QXRMe {7/bIfɮ-WГ"9w۝MaT"6eK^vzK0f䌖>k:8*}ol6a5@"ܞo!&(5*c 8IʷLA8#a*YOAjfIUym2c !^*}St=r_X*C7F7FT=T6iKdLgO;sg6J <+K?n %cLUO<"z?3u[+(pX4^r4PeD!{i¢v%(Q@gj,C5v8 [yTt# nz;fgbut.W;Gy,s5M+IS)ĺ@r7Q=>-e*,8J> CxKۡA4T%YԤ~3#XonJ!uj[\ R*?~?~wCVːQJ)'p@`D9Gw;3ޮx)@ŇwSYuշ̃4kyEf|CVfP!{ҩy}ۥHhJq5h8 }L.5LUuwE|a tEuл 4AMvaUz Pɰ{ԤQ`.hoMO4<+ӲsVk9 (*=Naa21Ss∜gSqd+MUsqߚqNkEHy ]<)eKWWsⴙ/l A1Z̸_Oie S;U7d>%Q16,t BBWQIIA=JԀ;9#N)mi!"}DeW~!x'X<+4r#|$ɇ.%ah(=D^/VA&Kd ZK??$+؅A ⪬ڲE,,lGt:^/ᰜQsUG,EQUUs[0UTV$ wj*e$~"ڤ@ZYVjBGw搌Ӑ%6r ;(aGw,*U/l58sŲ84Fp&" /rvP`ѾA5Zח}_|u7-OLѼ ݉ڛ.htF<Žm^JhXV/Mn4 /&qA"GP0"ɁO|Vm7ui[DxVk6K rv0Qb? GZ,P 8aZ} !QNsG&Yq;^[=g[ۢ4dU& sÿ>Q(5ځ\nz@\wW'>7Yzs3#4nOkc7OemurTs ڌ~r (볩 j(ߵ9Iy~d֬V9Ur| o!![xmsڍt{Y k\e}ղ׀7:%]#vS]Thwwx7Wo\#4 a:X~X,ɫ0qI#m^) Vrb'xNƽy~`g[vʋJ3eB-iOa2nUmدU0"kp䜛si>jaXM oneZ`Ε>"Pq0TX挮@QNL Y>`geI@>`&RRlLs.kvܵeIa4qlK䣬E}iԨOF3k3A &"R/2wzIA?NAȸ }1Ɉuux72"JRX4mxUSF\ScX$_6IӯO.,jKT$G(BFӱݯλN*A9Ct4Hن[p+*'}wG# zޕmWTC}P7B[fX(_KBtj_9@|>l|uX69ɷvС"0q.@pN2NJnwm,1WB_4q}ƒA QϬ0qP  7\jF݇/o W‘wb,%Es,hWCO_h$o2c7#ztQ0Oy^=dPFL1HØŘjL݁hT\R="&_-g^.er4aBWG[N{@\KoD JbwfM KpJ/ߤǽyZv\"$+cFD&Iʝ%Y4Jhc,2dYe ؿȍ`_m1f z=NK;·r~囷H:睰;a!LSkh|e6_߳~GT NAcɐO7ʺTCEK(!CPx ڭ9%/4~OV97j: ddwq,JJ|1w+*9XE eqӋ=A]Q("cmݝg][2kil"'?/HUsw#x-|~(fzޫPD"`7xz6 7 ፕ꾕3`L B!};'Bj ΐܶ gAbHZs$VDE #eoˡ gu}E_jM81A3KC g[0+AzA{ڲZ|N6gdxt;79h#]$3AHem?m)V<7܄md*LbL+߹Sɘ;>U8| FGN1<$Q+W TѶu nŋaNGǹ<0 .&ȗ1!*GP5 FtfTEĬRlu!HDH{'LAX]'԰Mцн5cZk<U~Ƴ s̽`H53gǾk=2\axzK Ϳ=h7$i &\UWl^Y$WTn{c{WIFT E΢ށ̬.EQZ#%aH@јdr'0f桜" ,;ܱ.% ٸ^s@h2yxԖTwz\L¯+6hhv2zz=}i *`-'!FlC]7ڕ32w,UTls2@hknsz^py> N )xY(r4d[҄TZt$܄vмoO޿G5jfR JU8ىiӘڐ=r;6 P|)mރeCU[e(O E@oS?xR#@u'qkK G$[. ,[4v|05YB݃c&Z2cYlo&bxLl>ѶTe6>,3,T+^}R/NEy3RBok|֨H} ӕVQp?:i!<%p2Lڻ~!Ă=M6SFM2e,9NvUJ2jfEx)6S( %ͱa#sPAӸ!aWcŲsK?X§2oF_D!O{M7>얥rrg _OXdS;nhώvM♤*oe؎` )7-GcdfgI{0ek7Cx  >BZOՒ''#k]/+׸8d3si=2f}Om`v4cJ12Z ;xbKwM,:5P ?.R >]Ɇ6=ic~\O"ن P_@˙\gZ!~oZßlC~iV>C_>_@]DUVPN*D!l<] Oiu '!ڰ.<^/C=B]Bۮ'oP>u v^ER~v6ձ\,*vkQNN9#oL8]_]q3/+XDtѝVgF[}N>g2]܏OѫDQB1͇f.t;te0}yrl*GQ+NMFoM})^vBǫesbPڧ3>c %??v;6MU_y5W훷8ZEZFg%G{܄D)J{. 9-'WĶ=~5GFg( I.6ԌM*+ , m*qX+obC뙩l{E|{m?)VTvWOPߌӥ)Uc7 TubPP73X|qq⣸&:bڇ 0!;uet`ϒ/^Β.J ̀O- +#RQ-b r TF0)^ 1)C4ZL V ,q L>5+:{p𰮬W]&Q fd"2ˢ7vچ`hS "DޟE\f*Aj'ٱײ<˦"d8*\W8B{nKW77A=T=jKN\Ofmަ+e?_4D~ulw]W̽dJs@Va;sp;j6/TbD*:+K uD$2ALz!m?0N =_nNp2Ld CKn`܋5MC )dH2:,F;sQ5? Wv0=o-Q06-u̽hڜPm&$"K:!, t|B%4!Y i~ (D~Zopqxaj5Pų> ?|QPCm!}aQPN\.ؚ%J >3=ҳȭ55sTbF,y*1@'X^OK"@@EB9vw@]}6CsCƑ /۩їVb3KQTb2+5p ُA0]/E^l`r)mJ(>)n,/$ҧ>אA(E1U%s. ^ʕ Ǥj4ޔ\|? 7\_)йZ Ia8򵩽pzty[28 <5.hŏ !^Dp~xrZi9sK9Õ Õ5 Ě)]͋N֏ ik>ټ;3lɦ? 2RĝK&ݒh#qGp3= ɞir4Au?rL)}Ф j Nʇ[=fg o؛MTV|mΉyYP;u~Vy+^|^ժBeXWBo/@;c?//!?tbf {vz$V:x[2~;ItJ;ƥ@*_"]îi5FKRE^h{VՓ?7 DB,Oq4T<ԈcQq0nB/ P$Bf<54 {KR:x/>#_vsttiP eFR D4RE>R%e2#]% s@f)!ξRBx9T~ˆ(`vg&$d?QC[8R*~2CڶP7f/F̄EwPĕ^hl% 8h CTXRځd +p܁;;5D@$[85z+?I ZT?O.N$9H8qH'#Q.BMri2|jnX+IWk DG=mT NjK y;#f̘P5-ɢ]Q BEZ:g*,/䇸S7Xaه#WD/ AX;"0!jn6]Zr%/O'E3uVC@) :v&ET۳8C'H{ sģ\نM>M:&o65^bC"n$Dh)Z/z W>_7W J%Ȇ͛x4+h۾_oxqDٴM<r OzЍ~h,{?eg:t--4S쇖O0&_'HASfTjPU}TP%gR8_0s?ne !,^*2}\ 5'6(?-o0bx:7SJ8!N+UTJ(-ɨxr…S+U‚ىUegRzF^N(yڶF朝T .Ka2Sh;9#5 ]MB3{Ih.!-Ћi*8Pv=e1C|p?{So2rSB~9)nw&ri; #l%<]ݹݏc8 " cͻj|d0g{֘-t?EKݫܰM>FzCk m>dŦAHv}-l`Ź'={]C/K 5 7=N6 t3\2VlJHٲiPhi"U6yr('ea6Ƽ_+YAFFKg4d@rl^AL3Zw~T\ ʒ -|P-"vBf{W9%K˜B6K ƝI63O !v8RXe#Z|#53;sxc{f0Dq_?]ϰiN〣oR7`"porA TTs R9Dה .0 SMEEJY~s[MA6ԄE7%"cw A>c5 A{Nzsxu|!& &K"Zowhab2nlOLkaٯwM2}ϣ)X/i8@E"X0>)QìP4^O~q*cV͌NB_ _uidkz0.O;^E[׉2g>a3=h(iZksZY6fj-OēQ,ir/bld4iUN񚻪h$2Դ>9vXO1Wkj] ߦy1Uf4Dꅯ\d!KfadT`nR혬oXm @Fz etw9Ye)[ZS^%T[4@'!GŜd "0xz!n0i/}Wkd +=+cN7żGaUKzTənx6r.u<\O c) 8VOK?BYW9x(uKݟ -5g]0ACZ98O)A- $t-Up53`"f|Pbh Ҝ|U湏ْĻ?n܏zNʍ'R3 :r_~zژ3`a"TceCW8%$K׶P8>jJvLEv'3`!^G}=ܔuEb`4 V`b:TuA$b9Gעgi6EENʪ_C6M$-k1U#&|J¶*? I,2<=T;kC5j<{8Ö)8v!oS= C5"bO}B=-~QmG_T`eB/e Kհ("Z ZoNm\@Ҍ.f&;- a_ ':Kx\o{1$`Bŗ(9d :#[$HJg>fde~* t#{)Ex#zD 6kG ,^4ZUܼ0чde;iJ|!P=Ÿu4.H+Э% jTل %2S'a3r6AJ4CYzC-'(@t_gG\sjQ;z]]umQw{|~j@*&E t U(0NzpqF{:')T +SS)14Z ??O7Z]CA<+[5ᄎJ#ΐE沃٠T  @Xϋݡ4ró\qOsn?ëY @¹>KjRšz6?UE W2WϗgqpA}TȆ} b`)b:xl zH^$rp_8Of?k5y끗QX\-czD-G"c؂b=D;[WK"$2jvΥIVR/Fw?g 7Y2!12}sW5Ծe"}Gދ K/&\q-/.h $DžTNT gQ٪ѿ_Wcd[{o;G=⑭Ѡ(ESBV!5 n?,/;T@PKz?cE}ۖp)Bs]ZfJmǛT-ҹ 6~k6\,,6.扶7fovFf5&9dbЇv%B$MU$ ob&u?nFdUI8Sփli؎Ԩ)?[5"i}+ȦO >cs{WD@D+[馧wl@i쩿;UAG:",7|7(CƲ%-kŠxI>7D}Α{CoXeKIU0 7vәXj";BI>F/LWt1z젺hB®fRjWpG(WwpzPў<,2w(k06՛o <~JH%W_ v!3c/J"_SEu(ep+ A|RExGE'c{?&϶2gtZ=6]C|=\̮l%Հ(~!uT=iE,L&] [fAl7irqX59P: 6x,VSUrW5j6j8}t;5*,D 3EUٺg( $t]ܰ0~elT2qh6ޕز=L<[sNr?BCcZ:"$Kq3 l}|`}4\^wâ L-:CD'Uz݊t23[BjCZOgQ^,2z OI~昸`zc-$.bIlчw׹0{o(@|L&ٙO=NޮIe24YwuX&l5[`3 "CbK#Հtt{W.<^ #?Ag7 H]yӕ٦5!i b%H~o~4{~#ӋP)^dDB 2F8z+zz-ވvcLfz'&3~4Ey:o [顋As~:b6`sHGﲚy{^:`8rj_ͶlfDR>] QJ;>8i mk-ݬ¥1+֔p; +H;q3L<-{jۮZ wpum kz,HxP&Ȩ k< ʟ1}u:uΪ-,CB{Eghm|yc8O˸?l{̫*Gx*Kq>E۬C ڢ`]I+Rٞ7_字7Qz^f#SxBL5IH{G<}B?7?Meu9DYq5:K]:][>`7I犹rlǢ\@2fg.D E b54\3w0Lef;dfpؼ$05$pIixgHˇ]o ӝo+984B;R"IT ţK' c21WO=ix}##3м`xP[*󂘄vo0UO L/Gwx`x,fnk@_C?*Nh?o) >dTv|-J"ޓm3uFkÇIpkhr` &N"G"|򄧹Nd'+PEl+BI Gk#_|rS[6~~q|RU n6uo>s sž-~BW놤,Ѭգ3GfI܌6R%)2|nl;e IsOcO8{Hwh21elqI'K6}nJf򃒍i}ʌ ;ڈ$f|I1`L->|'e]]5}0I:Fmrn!6Td4٠IDc@ՓvfKLR-qc ٝɩuN$׺êQ 3eVut)?Sfj t+{28Uomk-6 \i>$0M2Gg̪kBYl ލڰӏD!1ғ QXLMƹ@0XĿBp~nnf0Єwe:TV!Hڛ^j<%̏G@n:G97J .8-[2h!x4<*0)r͐K|y*=ؾPŝ k-=O]$~? k@A"y玲hЎiL_UGA" {?_vAܵK4Jx`qR(LTH [VI򢆮83+e4it< GutKO7IXݕTy@\7N>[ozkR%3\c;냏V-ׄIj)<^[ޚ,l%t3_fb0nFLn4 ` PpȲfG ~hk\KU-AbrȨ),s,G=_Y[:Q2!~FgĘ+=2JMS:v~Abf%`D:J0~ᲃڟƬ,F ]V4ikM̂+h62m P9&`۝yu5Ui)eh-w 3{IeN)UDيJXUzg&oohܔ8R{Rf˭p遘yUʼ;np뉥/#$F/Y`_a~R3\>h/r@ MjxUK[. %~|($BEXH^,\bY@2ZN9^IB>JicR&'(w'.2[)Rz+V#НR hq}A2?E^o,y[X~ {c54F晚wl d}ORf]jfA3_UOW'b(C-@kfiz$,#%!+`h![xN[d2 bC(?Tl`ݵң2e9`foh׉/0?nn1dؒ!5a%n3?a6*z~2i Ş萧fD |+;.d&2,X GL0)Qyx7!K(2Q_3q\;DsfT!P'e˛9&rڋQmc_ulot/O/Dd-LE喧oy&pڂ`?KPk^{_:/Wr+&0|w /ԑsOo%u>D8~bU.[f8`E])B6oay8Ӧ/\nɠU")w>`Yˢ+56=JT][d|F3bJM3htv;i+֛w.H]A kV3,>ywKvA[Xu.IXarw5qjR,x/>Z|Ւ=.{ + Ix Օ azOqjGb^KIv%*oWktԼh5% uPW2%+GslG (Y4CzT@s5AHOᴪBO`TӤȏE7HZ}z:s.Ř&A>;u]'#K WV 2+9ˡpD&&xfUwB'_D#GXZ!Wa5n6$ jF._28)+FX9ߞ [ofË`fXx\C`_μpC՛(Ev$l&$XR0Utw_$톄 Nca.+tE{{G _Gl5'Ξhfy8'R _esʭH11(L{_)lO;%_ 1= 00xȰdd A,2X,P&RƌoAJo3t5z0vMb lQԦD%)MRGn0TF\692V[ v5&+-_/~e@L)+y/V;yr .5"U"nM .f7+/UhoLM;G~A ϛ[= ;`7w(R!zNtvζW\k?}AE;ѵ0RE\su$2"qRy&-Eӻ3c@ݐ(O3=\Ǔ?S uoxv S]B S>T*z Qm'42lz<1* 3lNu*gV@&w`6P^<k9Wr[-iKg3ɖ/^<0^/G7S_}uvݲ3PeJ.l&N> &yjsY}~0cdmgCO@[xP'lrI!M":_:T&a*PR'&/+Xq_Y}i3I^!g |;fƉՐiĺjgYؙ_B $& _rM崰%q1M.Jꊏ;X\|dy+NS]!J7:hX$Tnv=q,peO]Xe@NDzbRsr4CSev3&5G o+':ʷުx;sqo2%cv@ V|6"H﨩]vS,1gQuGz+NO^M*B&>oZ..zy ¯t蝍}z3' }A>4Ԫ!oory K\{U/H',E]E)fc0oz%r &%߀F'axURF??s+ë/MZI{0,xjFvD /3Jo,IX舸xpvٕjSH0$-b[$E8<`i[JnH FXP0LҠ~eDQ}E*w\ A\)s&eeI'{n5׬#^y9XOmiqI~3M O :,DO,wJߌ>FJiI(Z5n̝?BNk`o.xYfˌU:?V$odžߞoR%鎭vd}:&\[4 VԈa܃+ݬW._DRQ<&$4MPqY%w F2ieʩ|HJPǖ t丿gWDr^6wrkr2gK6} sM0& r-6b0#Q_2y# /u~oa7CE5% ^ǖ/ ͶO`*Е3KMr\҄p@΄NKZ[*Avn]Eg_pѱ Qm8[Ye5Q>,~xYψ!8 K ou 91ueY}ΰNCpCIfe%/dzxЄ|[n/Y$5Vl1I Ses}2M_ے,B,Ú('\Dt}tsFsU !wk>&6C3SjO,4gHrBt:P= õPJZtFӑǶgp` rt mϪpb㼔/feP~)WM{/EHo ̒)v`qj^zKϻ}RCW)8ŕdLX6:U(BljJOE#Yxo﫭j(#T&iv%9gkv|=7TM,h-P&]lތHv|!'=t}"d6:(DLL'|rij/W"Cxt}Tű,cNj63lWBj7H*nD'uî9͖̾3 j63j51"sn7r|"rr)vde)l H<@'a3rIGxȦgZuxr-Q]]5/vS,E!NZ%xmIA2"o_B]v+do,Zdeew4RP*BXln,a>aM(HOOc-`S*ݝnMP v9g>jηf+R\_bYL:|"⴦W^heiI0>~]x~>k?*9aA!Iӛ& S1Ӛ1.=_i^j+EΠ":>0*> :.~55*)27|}C~Į$6}G&gme&c-{G,*nqPǂвNC_q%L(YfV'#ϮU=)mw^,9+XQ}P1VK3^txCm7fxrD NL:&.TB~oWE?7L'wGsq.F Dw~/_L[OBZgN[C4/kOA%_}ͯ]QT G kn7U^+')y6JW_BoE"ŊцP cza 3| мǮy|wB]LH12Yq1\ |[&>ujFiAhypxVO#M0% ) j |%&C9]`QhZ`.C >}G f=p6/i]p{<*bUJ(m |^bK x5ZS8{?G9!U^cS~0Q^悎O܈FibBk٢ݿD  NOC¥ZDMi,OagL۬(:<[' @Y^YedhJ =8L-FoMCY\k㜯F*޳…Bd(CBnVEQx&bv]rH (O5\Wx$s0=W\_W2\uL4 r`]G8lU(qdXcܚL`3ғ Fڀn s2;O`A`LqK41ڕPRD&ƈ=dGKO8#rP 4p?;BTjEf#;*+L琀.KY6v^ʠHKwO8.̌ut(SοIHV=y Gs`?'u}DnU&yU$*|5ȋS co\EªUxo7ޟe4ǥZMwO,ey Ǜ hpV+Z!p],,p4=@ iv@ Y2,iLjmwa#Rlz6xM^fa_'婱!l =p3|5-A7_K*ŽXb ]\5AiT-V8MݞЖrDz0sGwƿmM"|- 3;#r^MEc Ӷ-cufet 2j٦A*7n Ub>QrP/bٹh(:]i9/&si_(!o\Ovަɬ˄NpQÆ?22T+%:~}PRHLVlB>Hjw ZB$qӠ-djK%(?Oqa`w{{gCXWI}c_?S\oMrGw6_o} >x| HW %ǜ .Sh=*R;EsOv4-Z&| cE7QdVڱD{cS/W*B;\]gM"CRVjVNirPCwъPuJ{&ׅ֊%;WGh$5-VW"S-iKGeZ+zTEY4!~uI QU /F}I}2E0e8Wv, \ۥ-zQcV\ a+gOvXW"W*_d:d)I 8ƶkbd!me)gUo" oqqCfӃaП<^O Yl1 $V-\/_i$\Z "i RF\B`xn|ArE CӤ[]#,\:X ew1dn 6a)T׍쎓65iQc(?.XQ$!b5a-Fq.t\OSW@!{iSi3XMvL] =!b "ZgZzB*CE Z:L)\?d/ ,^ؕ֙EE*j E D@˶%|fx_!x-,p41vĘ˯ YZ|To09~>Z\avRsBT,6NtxOyY wI>Lc;g84 h 8W^_@X@\.Q3J#u#EKSo10voz^BX*cգh?6/tUc턟]xff]6F ]L˲ }K&kO2d/d]]9R>9km !N`b dtP-K':wou` _y~l=IhWԸF=mAC؝. : ;V. 9xU>M@&ZˌR0=~@}m''e,&zVNNv~,}1/I50^uNKof`rJ$>v,v=/ppP?P)7oaHZQA}{ܿqdz Sf[jľ}1bbB.zZSX3>;EU[+sci:_8[1:EbHۮ:64X zh-EVHSh G2uzEQJ mW1TƝ9弇TMQt;Ў-$Vw%ɡE㹠e{H X&РQǎP_ :fKQʃ@{ 4Kɠ7Q=Ⱥ# B~,T,0, $eXlMSa##~[#M^WHI}9\^&۱h lIQ9Rʦ!yՂ#c6(:|Y GE)ĝ[lbLKacJ _krFh[.)3E=__ 5+N.a?ݮ,׏iT\oŊ= ]gqV^sYoTL>frb>K˔'őrv Pa//R~6UU֠r׮Cl pHpٴƉ?_:q,l=cY͒᱉vr]JqC2Xc҈, V #3=؛|:KvJ9ܨZ*Ƽdt҅${(֒r>/oV9dYŭaPa9܈nHuUݍJ`S&h Yd0ag ̂[M| \:KJe!SL;`VJy|b?^4:H)*]nj:] |ĖK@*!b;Jm*^$K &qSo2~P`}n} AYDyu}\aR h3rkz9Oyejth9x.zkۮ{^\_Ҥ:laOubp,o~js㳙.uS71 f߄WsBƭniN_J[%w5^dQq)9t0w#Kk ѥۭr-Ќ`X~7.{=Պo;xʧmQѧ|rپM㔎rht )&vܹbe挦ͮ/0ϲ{\QE2Gc-;>7Y.,w-iV_[(̱31|w?mR$jqB꼒o/ag3'^f Ћ=$MV , L$GLFe,\nU LZ<(>ɎA^q5I2:| 9W.!jɻz2S'Wt.;p vf~'˭ V:x@le#ɩOBj 9Hif/7nYJC*RK*Vb-ǝgxm,@CbI] DuHvGY80(ˋłvV@CġK9F@WF_+f |8?q]U0/3fpA(w%zί#f)g+pgCE<CwaΜ'e+,m]rJ³H!^0XRy:]z eWѣËy/ƝXUʎ7%^{N\ѹnD WuY|_l<(J֬!ۮ-<ì9*^Қrne3$=^A DŽ_Lbu u{ywAh@*_rAJ[xh0&ƨY.Ϣ%c(DŽOvãO8ߴH[ŮWL2cjT8N3XrsjW"T}܁؂9,Zf#⎈AV:6'6nZՔ_8i&N7H\iow#BHT'(=_z(XNwh!y[ZƨT-i#R;R}jH-4hr9?9FU( DN"-^ja'Ry*bղ8>#b&͛c1&G6*ݳ1x? o`b0K;KpT^+jLco,w65Ğx;h9;QضSn;#ʀ#cMK!.L#x-ECn B#ϫ"qgU09@$Ԫ(9L'}?Q,кa 7]1je/&spws>lw1v( H tˮ 3XN* ,g TH4ZvȘN?Z<c^/2Y !Vu^$UܘSJax5y'wVwʭ@M)0 2^ ]ì^A6WܡzN&ؾ1exW:%ݙ)_*{򥰭 s֮`vTd~:[ *tb1yc\ }Zc$A)'ï1iSd/ܓVtBd'J3+9X.7sA't:XF γjV3V|p@M']J4p?Ivj^iZNy `1V¿+X+v&?DY7;t٩H=j&=:;9 DßwRn]ak~ }3`BfFCϳ-vrsjTc :n9j`4 {jJ|EjnoG˞D.jHB$1?@i?@, bxOw;#AՒiUtXar=shGj-//x􇖭aMF"N-jf^;mi`7w{]p w="D㧽5;oZ9"ҵPj=pD?̕UM6'n\ O Ψ OaKbH{ ny#0}$.`3ֹ%zkG?Uf>` 0gӶhl3#9I:eht،[}M;V 2_aƈkmc쮀J#Ҹ5H*}ߊp^7GiEl?؇J- o?n*a=ğh+/(Ov,rOu jsT\59$fHRz=(Cw3tpȧu"m_ p-r {#: @ZjIgfә܉X}׉46;kmXa[^(%խ scD"ۙH;pZH2 CKdz.򅶙T$hJiSI :}t|صhC&J]<6dME@N^ +s0Oe֌*Z/d G'2 F-󕘴78= Gbb "I82l)91x/4?sm7A+XMR 9lt$ G~&K(Jg*g̷[C_ABH^!t}7'yP%KJʎ{ M y^-?_Mc Rtп3zkt{]X6٥;ٛ}A/ _Vط^LL ^t+4?m"Ъ*RK WZ/ނ+mtpytl媦 ::$Rۊ##GVɃ5`|jT$-,qdT/mX$$/P "cx_=\% vBjV2,F{a<-H Hջ>̓+>^;*6wʮ%I7*sX(1/[)QBo8}s5w}Q_c#R?EBvtJ `)W@wؘB}& TBy" AET2b̨L]Bzʭ7G^.NOAM϶b/mhK,lgˊφ TvE: z Ψ=(kP))Q$mkf^%WVXnAky'zQ*ʂVGݘl@/lŌ j}8*Q`9.:Jb r@S<Ļ-#b$]x0 k14,EZYJC~ۭzDJk6UGpl@ۓmV%+fߝo\N70g2e'U Vs .{7fA!h6|gCέBc;5G3sܻMxG}3L;J(fw뤍ڮqۢꇕ2xM ? vZ.z~ ڋ& 7oman[vڄ&1/%Vȍ:<,懀yTsp&eM) G-5 GM9ӓQ0|4F_5#ٽ#\Nz6Lw%^>v< Hj`+֗DIHj?1t UY=%UrmɊ Q%qKrI T<{/VXW"Xh`{{΅ #6lŲ=ʰO6]m׬~ח.DkkƔқ_O7R9A~jl&p* 5a'Gcӌq8SYؖ3Q׫L+0_bӶ/Єgh KXT;SfbhLW3U?&0Aejw(npFT$G@.ЃE[i1&K7Qzȁq-Z1xXrJZ𝧊uby2+n7%CTzLGy{aJwL$Do1!Q_Su=ċU7\fvj[;Qɨ vq M+2s;]kW> ZjF::M@*\8B<5- ʂl& ȵ%X\0L$P#,S73_j빒L_c|m}!c鯴:S!֍3p`.n @ e0^;0cE)Z'qjԧ =ʳ۴(PܥSN:Q/Scsf$u h)T#@](GUzk3}8#|e~Ϗ]8DAjL +8G>tfoU;'̢'XuuJ!s3&FfBx;}-E_)m|&\5 @{2B< 6kUT+]G&c?B}<3kS>]ꯗ`Iv3X<@uvg/7&M;sς͏1*!fhY2[2xi 'Bơp<ǭuGw"9-Z5x"SnArṖXo?6T>ggFm=TMT^;ʧ-WJ憝 ?Z9D9"5 $vm@U(D&us(&vT9-i R{}`Vt z-hZDZz٭ (~yMF5^yQ /S'EEqE'.]|q;+>O2(&n;ZXQ6ANӕ`ҘT aE@m?;0fR#|#BETZSiMYڟD X:TycA)/u(qḁ 8n39Q4p7rޢ42(~e)p9/\r›]?jrzG7WNy Y(#2"6mu'wYV&mK,/j+^d9.(VwӉ~L~=I5gt(FJR[Dhk׵. \(E3nu3K\OpGg|6d4X1ؙn; vmu=qC;3QVG0L5tŪ$a376qh+ ߝP:nx3A yYč>rrذKIEO|Y) 1HŁt{UWQツt ,hÉeO#efI w¡SnbAJPJU:A.,|@ d]_YZȓ#%>9sҤt@|[ '%T=EDSձ VhD✬YZ\H3H FҋhQokqieSħNR `$yr#^nxG h,0pW`\(U.h!0&?*[tI&ǰ!W9oYcFrO7ˮ)d,i~FknxkfH#hϝͺ-3Sk+ ZUe7c탆~ {%2淲vzg9 xK׵ 06=-ؐu im M{`a!MŘig^OY/Q ԩ%WFHּ"bSUӮQKwd}}f(ZC_S 5pbX)ex΅ GBT<:C!v6(og9G.p=3`Gh26enuȐb<Mu aXdQD.QKgo:o,֗۷΄s=}j m[s#[reKknv\ x.DŽmae<N&S*~DZ36RJg0jۥ?$pӆXK /&X*Zkd7.\x-Δ4b K[5j2 ,@F[F>P-HI^hQr-M0xx:,ٮL/r)g9=R~źAHE'6nn\mtb=7^O X8R wXMSK 7r@bK=ʎ YTz(!aҟLIm:<j%lyoC%/!'byHBCģ$y8S./rfDԣ{awg2?GoluP84\AwUXCl?Q @cK]k}ywLZ$iܥl |%eJ3OʼՒ ]dqR_s+oYupHل=-hn,(:!l=]=l*[b'd5.dqXH7dܜ.8R-<aSW^03S[c魝&Dr|$2y"3v9l&W칶8"|>)1;e{q-Y3tAWl'<ҊWiϽׄL- \-7bHSw><.#.ZU@-oRqE%e~{ڷR7w/2<"h0:3 ^7!t,lU/n[W-q?QdBFtKBs?1utj0X)W;,DpʃW#ܙ__5ư %qwnc T9&mP8v%-r,hܯ뽱@dy%3Wo !V66E[6"`_JRT, i<%/4iJvJ)AyV^gU5֤|8wtNL8+iڡSc0b9GI#"ϘۛxZ(($^gڧ^|(,ɷJʫ={ߴiD|4w: _~FJ/=WyFMfkCFszE:ylCKuR>[=ZݰKDLzNY9wL[rǧ3)`BU\GBĵv[䝣Tu5%"eȂH!OUVT#8Ա:;`VNu9c.3{LrW."l$2pu.Fx[d=DK,=iH-+T(jmvݑ qn!iEX؊4? ™.ʓmV-D=`ww*ߣxVX <:{q)4Pdul)ъ3$w#( -VB@DE^}}Cv5 -ߌ<= ,vUI5 ,>aG펩3f-EsOGMEzO|n+"sCqwYo+jkpm';(|sdʜ.}hK 4M'sj[6{|NܦPv%Vϋx8׆1j 8.t6Vޟ>Y isC}M PZAJknC5"RLll5о{|w6k!) %jc|<(81OA'hHUHLROnK~E2}я XG tv0(j Hozjf:`C CՐ}'m+GK[$RRl0Sd龤 mGy`Z'P"t쒜lvdw(e펡S16*?P8(!o |1l q)q4k([\Wu!ɴ!/;O=X'doO#6psqw}0IcK[֯Uhhls- ʼso[sᆠcr9 ϸ.N 1cPxaNoECLedY|3DMS <)& _;:a~q= jQ˱d9t??2LiehʢR5 #e$[5;[eD?t>Oy.O})řveU2d{hs7utX꿂JtA7aU)f/?$ぼkDRat.xPI12⑟ }qoXV:Y}|+&5h٠SҞ(R9\`9ـljh8LXC* 8E/1<}x˶PXKΜDG:j'Ūp>[Rmn]Cbmو$eq!PUpw`.~ 78UK / OAY|R\mVf^a1$񠾇k9<s:>7cOH=N7K-LT8Z8vƓl)U)oaG5*QbkUm3.LdՎ$ ̫ǹd=)ۅca/ ="|ITd[(T+GKǀXGF7Y D gω$ۣ:Uŵ{QS{.k*X֦cj%Ҩجv-O 8i_ߎ蛌M;( %Ԁ'rB1$;6$r8f3}DzҵܛkVHܟnJ:ǁrz1±m} KDmA&4RLaƺ9x;N/H R0\Wrk*N@~hmEdU p-ƳԻMPVǝoJO\knB.鈯 oכ.RCP5)0&.C6d+0K$(ڰcB8P /iM6 M9aT~V7GTPgȪ9pݴtq4gfr`GԀr7˕"MJ׭ DuK|-MWeC xAl8xюI{d3袈 "o]6e^$*Ձݨǩs! \#^ ߴ g4\9hKd ^)4G֩EjD+J h3Ǭ+Ws@]:/[vF]JI&;ŗ#%Ƕ%5-I'xj6KKbxrҷl١yu3Dz fC먡MI1jusO9cU҄.`7)+9V=nw'g6.8]oPR[A6qWH 6 瞨±鵫uvUq QXusC>Vo2G']3GGK85fi x# OXvV!pE4o?@w}:&b;J FW`ONkN}] v!%ɍd8&|j'FTbAT/^XYȵ>z?ah̪QZ~bv#($/W㲮Mkz+_TM LPTKM.NBb= >< CD or8,Q<ѹ xxReGJ[^ǹ_cn側??4ɓT'$̪6(S/uYh C |@ %N *zλMmn:be'8#FhV[kɦ#0O ECEiBIGSw kxz ^f`-g9! ^VXh(jYD"K(;xǐŜ[UR}v7,QO`7o+]7$6>u%ra+K1}3׃]Kl%3.}[ރFk;P;<|cj` $9bOx}g4h;jcRaށ'ٚ9x햷F+[V/PߺX$Uz4l6W4!Wxm чKxZvklvT-=# =Z6[(>;~sU:zg[|C}į,ɽm tVr_ mD`"=?I%)pD|%֘T7LRVݹ1S𧱝Rh'Uۂ0jݲ׽MKjI@qIN?پa8wr]XK{d–FҿK23= y9]3?·wд3Klvh3$;(dmЅ~"x0{:(`!NY_1#uu^|%\^P3-1Ja@2Dc_ci.mT\ y(/s7icZ%{$Ɯ`yv?׆$ˇ!rç(qe>Gnc]tP^*hiҒ8jyQ5̀6kTtEn%߯u#m^$;?M]βxˆô'f7լ:yw!pD֛ފD͖?g,a'3.ZODPWp55'47ydҝ+>]Ext1G!у[0#e?K,J9lsr]}@uo﬿&ɐvy5_xOnĵ1ґt:9lŵ"Mtu޵OM_Uqh K&o*Q 毰 8oi49}<\,z^gz37`6=sgjS:e3D̾}OÉL_{K8H8j(' v!,Jj>TXFoքLm[,ڱϺ{p:/خfYz ,j>7܁vrʺ^lߙ0Dۂ0PJڷ~9=NP4Nį텶 .'9mBҁ{_4CS Z_Ykq&?mUκR~ a^n-&a^Lʉv*Q3!D<%:.^\E7lmK͙óxsь^LK^ޏuۅ*P9r E.`p?|Sױ\D24IaE"A'!~Ri-]0PEn:d::A&5#ԙ>LHe#?VPn %Xj. 1݊UM23Ժp&3D+8uK:@A';8ȰוiZτwDv#9E'9[XQZ8 YxN,`SŒS#8FR⼡5P&<&-fcɘoi")l{T;1q#inOUeG(D( F:H!`sܽe>a+¶G͚ܲ[rDM3r?(ުܣfYAתWO\)a OmB yLpiW`qL^/;D;>5N!_jpN:+G E(h~(sWF&-8-ȲQ/ g퍕4L3֗IDT^=Na>ij]F&2ԖuT mVzH 2M`m8Qb٢mRx#D7o/ЙH{r5~oFz;W4&ި3*oZu~MjW\X= ikNbC* XnaInzRiO4tttÍo~~ x NN' 3~zga];V-Y'iI+ nw48` ͽD"?)U27T/xV hѽ2prlH)T{lvq-**lM1ShzBm3JR"a˯/uFюdb~J桲Ͽ JIsIj,vX6iOLjge{bO35@Qkfpr`5b!'on"`ɱf[a3z# AY{$'3*Ǜ_[8(5gp{JճS!XQ-b/)'}Q&m go*t.e*hu`E̫ߘPNꈒx6B3#gt!X{}7^|FcC=XzL >2p 9l[YpEv*E/_gM֊Ǹ8 v: SL$-lQ⦊41*xd! 4XF1ao'9ZQa­P/\z/%|Á-=بSiwE>G_c 8f6ySaZוFCQ[l3ؗ 9;`!qK1מ'v6u/d̉#G$`(ȑ9ǪqƕJP' 3q/Z|¹,0 H+]iCg1@`k֤3KVihh/Xt$S&I=Pc1&aYu*˨xoP_j*7;/8?yҟ^t`GXV04H7嶶svf<Ůc) /^$u)xw=,zuOb?=]+IyBFڿA7:C5~?KRi:!O1QVu"[Mz<_}ش7Ղ!!,fdG\FG{2ͫEљK)BwxyO{!jxf!/+ E4({1"?jμ/址76m\wdّSy!IᇠOjA_t1^Q&[h,Op{8rEe|՟|gU 0)+.<ϵKϰ{8o>} H@"C\gA7Xz2ٱn2nq=oMd13\V/ݚQ T ,&6 j~f-s_?=g&N(y`S]USvb"_g(o%ٛݡ7u Om[F.,\+b~L xhO&D1·]A=BtWx] H2Mgq%J۶r+ s5xsh )Ԏ9bvtM:XcίZbR{^]91 -v2: gEr:إDwg&T`&=CÖT3T=c9ik )fxqlOj2EЖz6Kp>TzȺߧ][a AK)]6Iӡk]GL1K U4?u2'eIKAXWk;9cku q@KiO зF톯R+vR4吝" ȉm1G(RTfUo9k. sSN;r׈hVQ˯P^T;߈u\C./U>-^Ja2Yx&L˒XAYJ|Wqt**V|(n}FU3ST5 g̽9P!TY\=+0T23 "`7|s3Cczdl,YeT2⑟ȗW'Zsis._cMy_+~Ճ54דa3.fBh|4O<#!Yrֶۤ#΁!\bB\!+_ozm}/L 犯 n0-߸Y ٠GTֱ!x @pѯw5&gw^Ӭ.ijsIȜ릁 0V][YVS^ӦǺ;guP"TS@ ͙}~BR^eorڜ^ښʯf\%#je&m KIt M({qXg_W?p-Oǿ5J7aܔd*~ !0' =AAa"l:<:x&"o$r\"ϔDžkj؀;,K9øxOKRϒ c .+ƾzt jCWmxƋt DaNibKbE2*uެRB UnRO_Otb%S=BL9NKN5T+(w]8uUN)mMTq^Bf޺]/SJm^ <ĊI?} N'>I2-gDFדI>=4FN$/ob8b%Xk;cć\pg0o\})ȠٹiKDD%Q7j،HƣgܒkD,ذR#`9lFw]CvQ¢`5^>̄} E!?# :(註($lcltyѱL~]4dY j^HU#Q7yH΅7Saj&㬲f:El;.fpol-3:S 8#tN&ōGDtArLJa"ZbDwՃ[{S5.\yb9:uxr5@C5+8mV*ȢSBux쳊 0zD]hHwޱJӱt{ uN}2.*CDUὑ֪Ɩ1 ԉ;%Me V^svHٕABR4k}>L]HYXK{Ok%Yڧ1EKEX=cMę;**'E''"I ܌Xpc"w7x6jk&dL֮Q]ӽӍeT?u\F8 M QidR\ot ,M(l(OL~DoU{LUl ۘMOBS%ֵ @ʎ-YbIMn3`S ٟH={c@hyJ.&jQ3jvy=Z\]2ZNZmBӧIWB,8Rg)E^5iFą+{7ST &bPXg[D9 F oRqؕŕhqw!Ɉ xo:0$q;_ۈcEB[pE8fϝv{,~Ry%!>Cr'R:zWX3# U` ۓױnÅ-YZljh{}Y -"Q`IO$"{ܓU)ѕhwH,8v̨B}3VRѦ11A +eRzm'V&րi\=H1:[02"U?K6UO :DM!^ ۴~B3a̴4gJͯDqlAaj[.!}W" W<3_,/"^vk#yP %Q gt䕅7t^@ xagmCaf"1|LIX>y#d|`%Iʠpk5n#$IC2Xa:#֚П(p x5+gۮG)#*c+g-4K6ޓ A`p |X՞D|d(/\yusQwq9ܓC yk35fGD4n@k> ZrꜽN 0UrSԗFP8"lx $Fb@TUɋQLH1^?2?Ս?*x]W\ .촖[ i7KFy+J;QX( t/ ~c2_M9٩QqT[C<}| 2'cq"k+< eJZu wMIabn$+l=y# UƖ^]NvtѿļܷQ-7[b.}k+L/ ́Eiu1+7X*%Ѝ~jsdLQhNXwF'*6ۣ X87*91bkm)hXv%<,a%S> Wr)">_Om`=S\u%7Ң(dElwֈ=`+ZܿbZ ^ٻM/2v7wPNa2"0DԒ8)OiP ݸQ-L\+)Lhs \(ɽHdaľ_k#|0[.6k]aٺhW(jDm`0ҧ{wE"f0I|ɇd*݂ߝJvPvkr5SZ03+^lE(JP ds3^Q許 RwpFOG^uaya- t]k}{2|- /9zbFiÏz, 3d?GŎi;o)UrekZ9f̌IK_߿ړ_m^1ΪDn XX  SkL¯@Io6)Pĕ`'/U7/i 18Lw(W|p+dsqD +@nګ833=7*͝&pqX\7(t|^ \Mm&v0uDs,gjó)?`Sno=.qznstqͶw ΢J:7v'wv$(Goh) +o ˺Ҏ^z6|^nH戌B/ [6 LN{B]M9+!DIqZi⎯A$74;.J:vǐhHCx]:7դqJ#V~OuZֺ18BHeO0DPPk\.&C.c|͍l@y&ZՑoCWpSl@P- `EM1 CG †)qw6}zd=K |au'/h}a@\|g4 :'C>L+=(׻:4c9Q,a:P]&ah /&$W>Sn£Up}:잦mU("bJjEXPa' |Qk}&}M5gw盁֐ oygLZ>/Cq9,^n<.Imng* ұz)vdWFdc۰0@XNl͸d]Bxς܂el t-x9'L;,Ӱ/}HmyRz>7YC(6_1W'q kի*s4:GB ` k1 s|N)L؍*^*ꏉdT~4 Io,@2*>Rr )Wy(8c Tډ/O6`JmAKWp[EM\R0LB.'b\ N(!}%|M @Kx|UB[~FIm Cd,9CIUV$H3 ߩTӵñܮ0bL.m`wT5ųsuܯ(tyP_#oR:M& DfXn+a$0S hu]G6l,R\S6L]~<{\2WZ#;dj)֥A4J oCi{f5N4~tOݼ +.fP3I~lk;iipYπRǓ8w%شŽE616hfD\l,vD8X?wB|Gt3OoeS]DB'w'áU$*y1زPk90xGFOB :#{GY2nPiNS+`e0ӝKfR8Ɛ|`IP4^5?]yLac$KΖnԸDqLS"W i,xiFք2wz!Dw r9My2s{ɮq;5 9&޳l>\JV?}"=;n,e>.a +g2[|OK AF?=U ̼-hp*|fr^jhAtDm5'[zl)a 7s 巀ouzw7< Q-OTQl`< ܾb+y:dp(0wiY"Di#BOx䧟IDAlfiad\{ɗ<*b-lI&)dmqd)o 24*o57~ܕ ٯ4^\PT!irj;a6 ;Ig~ic^9A^A*KD %iϽ6#Xtg<«QMڳqh6ذ1!-'-Cgh0H:U$p 49_x)G` "[L 0~WN~Ck˘óF~*tӅTv)з~3ޝ 7]Vg?9Rulrž4Φ)*xc?Ȧz8݉&U aătQg,!x% ]4D|"*!Gk|{ٖ6/3KA(ZGڒRݓ0'a|] pąf-Dig󝖼r? O|d 9Ez?J?xhAV){W Z^aՊo&a)=a xԥC6\sÒ?cEL ി #J[u*YJsָ}m LP"X߃n+[A>2)oK Hɨ,u8+1ԙ^cK4*NǓ$T$$,\QpQQX?Mbār86]zEvROm{#e|9h_% Ĉ *$ l%6b6\?Z Px_j)3<#YoRF;82/[g>*}о0k;{]5:C4[GBfm0`.}_a*DT r~iЇ5w}?-%czx560CFfʌVs2tE҃ޒq_ 6n3Q؈e-W58kgmd@싍G$+{d0/3>Iή\gtyTI'omkPD82g0dh.3$ꩯ=eM#'1'"B5+.=š{E*o:]uVGpj #D^mHs{0hj =w$yu#'B/sk/]TShmpcP X'ʷ'lĭ<~ ȸڎ8iPj x&ׅţ*-8Q2Ӯ3]WAvd2,=Wm^̠IԠL'`4婯)Re ˊ)Z*zDv?1xtM2MZr|.˜} W0 L׸Pl7-~bi}nYU}>۝$S ;Tc6%*# "pL5iFfٰr*kjUCPiؑf0Nξu>dֈ;ӡesOp-V? &.GCSEuU ^*sLJ$SU>]vX9?aȄ= Pf \&B _*y#0, sVYGm<9$Gx[Y7ƍ>U^(_ֺ=!֐|^~_U /8'9 wb ysHQBv"@('D+4tJ 8'>Cv_s=YKj$-Y$K+wCpR+玼us_ lQ{i.(746H CfҽdHUzuɋsd!sۤմl '+57.6y3OrYg3֐9vʔ%(@؝W=՞1+hw)❮O:VRK%]'O62/1ElW_K..&L)O>꺐R+.]i pE\ 2ʐj:aL"C |Y@ǭc%aCe?ȶY3T:ȋxT:V#mt曃$sC?$A "{ {?fy<,DijK5}Hb&n,Ѣ:GJ [_绳|PgrJŠl)ġ' -ds + ći2j[=kR2Bw\'@ >2Q:.?9!UcA5#{_[W_S28E,D#Ps8+곹O.6q>kૻg`Vcx!woatr18 d 6/t<5gOn<"WD } Dt)wlxE=NKsçvӗHHht{Dr ;nɸrPI"ƑF䰾z$i43l!rOB_AB^^f]I'X?U!2@zZ?|r_Tk1FM "K\H"ՇhwW]IVۣ>Xg?Y o'Xe(j#=M۾!~9)\ 3ǾɒnEҒV2w`gYL$AM|j r7#4Nc, 0+s/1R %t5~ֶ<0Kp k E,-2%$gyNyGh ֊L\]FGb*6r {iќNWa~pD17]A#ыU%2׬rհniRܠtqzƠKq7w: [ V,H^mHIMT Z*ù-7,gހo&bog" V#`$3鮅8>1 mkRoFOwiޛgssH)ܙO-1 CkTb1m-b~LԈ!\!!eW&ť'hAkvV@{Ķ]뤰FK+j..|8a.?LD@5I0>B,O (T˱?#6ufeCzL/NUn|&PPx=Vlt\8`ˣRnwb 6Rr##Lk!?=v7fK6 \t'./ZXg9+N聐ԥC]ͮ@!l}!fiv_[>~sѰh:E;|7WhOIH M}Ss`SO- 9:l8q͇ʇbLw̆( #\%dj<.Q_{'5X/E"06A_J9Pmhq3rXِd|:~lXtźmSZ%[D^F#H߬$F9ߑKD29%f;(ngD^eOxntv$Kpaܻĵsp2N38>r𡵚ˢ%XA &MՃdOuK.EF*&+)$[qhT>6cnDL> a(*iOF4MQ4)xZQJmtܰ'a:I&́$XEXz*)7[8j LߠHءќVޡ)e&8W|qĹM@5SqڅpFVI#,:QuCC5cEmbtM˷iZNyg*&= s-hȊFП2㧝4ɧF$9O-C)w󱝮0=={+%&f@ /g]Z0x5Fg]Mf4|fP!q.IcttyFD 5~QV+q[Ssv`Le\|E]_Mi]ۺ8OkzPݷPc31gh[σL$Zn.N \ŭÕϳ.Ұ=w25s]2v5:*V*]JZW#< ̴8hWxgx'0-6Egj0qKp&b -0FzvS~KXJ_%lͳ5\V;Gqo-| ;3B(@:3JPsj%,/aKS)I\[O1|¥Y\Xb3@Al9JGUo;>(.΍[~od2=ǘ9va7e IJ矺.̓TѣePBAqe=+cdAcQ3=1B3Vp eBbҹ7vF3곍RWDЍaVݤR#9[?aaskm" ®w]G 鯎~r4_PIňSȦpvg|b@b]E>qBu\.C&Z42D–bɜ;#FhSh瞨9EC3eyg=xƸ:!vJ]u#5qTݛ)~ŘCzBOխ}uȓI%#*E(m[ߔdza4%T?-?H9|eEIjyU^Ye8eh1k])lΊ--7ҡD"hf%aC6_.~kfR;)nW3@ *ǻi=CܦEϪmW&C1t\_fC{F' CQnLn!ad L!N^N>it#MMw|0ھZ. ߔO|ZZU)"fP W2؏H e#墡 eTBS/A^oM. ܒ۞!XD7@vW9mnW*Jh)vӒKw8N/e.l`< t"e…}%E ˹`DX%-{W Oeqp8$(dFt\5S*-9Ns073R`& !L-;HtD7_`cj\,n}췡[Vw^=`YM9p%DO|E2'/8g}B BGt=dHڅn-p%m1B?Gpqfм{l'AAt *|gr3`G@#1ȍSO4^[55_xa}w ,M~ ʟlQv{<9E2%dS``OTT`T>5KY5:Eu=蚐8:a9?jFB)|O4r) ɿBlb3S^7_gnu MJlf9P Sfu P<~JUiSC-G#ɺH,j 9CfuBG;:JT/܌º&UG6cl4\^9~4J׈pP%g.Xu6/d6--6!W`sr* dž@ 4}lA\G7 $!РbsX{ܝ䯙ȲE.&Tn6XR`?_,I&1,qWtRw`NT`ЮڞD}C[GY.]#"8wK<βWo׊7v)߾j0uf>VE'̔/d8:Gwc}?Yho\"jy .;+75MrƅTIt#?F @u)+^4\h/:+LBL!jZ[ͽz tE8M%\ƁZMP|݈Ji Xc=ͶWbZIVw's ʯz= }1Wi;y `rKf PR رX]Za+sŬtjZ.D,zK}ΫN{rN'Lw$C\ yc]^xFbۣ8 ߁Kފ7_!հ9 ذA s>?$ȨŅ1#d0xI7d4@o Lֈf .}JA Swjx.buG%}@< N[Ҵ+Xm m%`Ctj7`ș26Vf/(99QM9nF)'pF✧ qY FESLH?8+6$b׺}^e tu0 3FU1*eOZX t"ls M9T Ee#0NÉ:.ƾme_pp%'֘SWq#>\;)5$A~lnjG`ݿ嶥륅@ƎozŜ߇Bp`k#lcZdv Ek;GfllZ>dGjvJ>cig6*U^.:S +5AѺ/^Cԏh` !]ն)x˝Mǣ1ѳ!v3d |]M[h1>'9&t+KcP,{8ErZOs@kabm1'&{D8ӗS`Q|SNj`wWq9_!> Ь99dChJKfɄOX^ʲ 8-ij1Kߔ~$o*{sMt DGIt9s*1<(j&j&1+esyfYt[J8GG<Piz֠9`y[N!44bm;~hp]^_(gpLLOv52o~2I ]}C>8^[H͸t!pAbsg ҇f@&nHNG\Ӫ^uV+{cc^*ps:3nJ h5ǼmDf@auA(NŏZ WBܳgGy}(9Z p2u-T.O4u-419yq_2H^&Y,E1d7G*#>oIѷ7'Zz;"1fZ`K{by?iC24`'iR3PJ :*+q`Xz5 ^i(Ad$66[U$1KbjTƏhS޾5ڽOk[&!K̭ RcY8\%chqS#!:y2ݒgl)'6<׌T;rOa<+clyHK[ڃ)'nGl{JiXtW »)Yuئ **Lbt;肓*ץc; Yd^^| 60&~lf?IK4 3gȵ,P!rLC]ұ8]%'p0&_1$ NHC-΋+g矙z-1`i:AD|nTA4|LeX8ȹ+ZDt$?F\.VX h:҇qQߜ$R&q))e73XI &/󵗼zbǀ;ϕУ#(:7t t&24[+tim0!hHivi?l6W 6t׶@ùsiJ-]?0'sAwqhȠ4RƧ%P;ezղenAhxj `N˻]搖\'|\ i5'*5*7x6O`pj u^:cC}XXˢ9oyud#V (pͷ8r@r(RZkƏauı\x^zsII-zmWL#Ś'vť4fx[cL&SJkڂՏŌLͿtϹ2dHT gj/~A{tGJx#{YRd;aulb #Ac H+UMۻC#١u՟\['*{%x{::5^d6rw8ݝFΉh" 3Dc_=?&>_|=jݟ`~+R?NerCPJ ,x$\/U{l=a%{,oF/V)6(̄hj;R=ExZNY/)|MPꦇg2iJ'WM>"}VGVF "i("`sYs s 0 Wo+ 7韉֙nL$)6-Cs&X^F੻OԒVRn2]O:f(^9֎̺^g`KU:q_e>Zᵢf xb\Z%D^$ҊϽEٴb׳Q8,}D~,Gpt%+&ryZ? HS,Vz|`:mv˼t'\՗Nm䴞& $nq͛mKN>YwX"C X Q J-ь*Y^p0*P~&#:3ZmΪQJʧ&Ktd/LT@EKxef*Y6G s|HlVziqE_Gl;~ (VhC[/QJǭFb`k)5}-/\ZVL\kW25؁@5Ƥ]Z-5Z$t*??qf>^/+}7>IdPk`z,G05Eڗ/~drx_ZYѷՏyZ=a"a?ILJr훃]Ls91Z izFObԵ`lc_i0᎛,=qn>yXyjos17+H}ꃭtKx? *}Wt݀K[`NV$t*Bu3.Y(pUݺ-ȗLs:3^Wd͈Cn:?('MJ\RūIzoe)cB{d(b+'yمJ֝"qG+<󾷫Oq]B_~sB|MF] p*]z~G -ņٯL¶BZ_ѯESl|*$*]l}! J_f,yE*)!r7Qa;aͰTgS1_C!siZ ր}9FZ ̅5LG& 3l_s3= Z>]pJD#lܜ|"ԙEIJ.h,F̑R3Aa}x,U4`LEtR&F%AntAg)]گz`s=CqFOh|wNó7h6"\ӻs%kl xV߫18b}_u=W=rutfd4^9/`VcC_Ql֍l ޓ>I ꫥ<í F7WiŢH .l蝖V-nzl6Z/s03N)];w<*UץE@#'!3v[FuvP7qKT"Zս@y[ӄn[{KՃ;9LZD*)J:Sr!Gܼ ܅Oꁝk*S87NeAZ><4WdB|TD0EV7ϹX4r0ؘR8 )7?IRkKqj&H oU2\:,D.>vPB˱Fv枣1v"dU$b~0ovaHr"9'2HeqG|'W\D \hL>b :*vG?7*a.˨ޱ;+ҤkVr٨w4[cU|4qa/P^/` m3ُgm剸"P s͋$|jwbRo=`Tj>v H.Ob0iU2 W%2Q4{Vld86'fy>nd{=4w]}k42[Z1[_n,+)UCd(fptk+> l-g>Hl}\mE43vy+ziFgIRԪf&_{e0MV hJ>&)4 f w/!!^4A+5u$F\ ,^+`;78jH}SJBպO&.CHj+W] ݍF4E\HD "j*xQr42VF[%l)f|d*w1mKr[}Gj:.!˦_) F1h'T)Jh7e>[(jvS~qh<ر֥k AәF#ppf'.Y?7u֓w(Y+ۀUG¡>cq\Ce(I]7Xc: $Q&[m=OǂiR‹]($9'{kB y+Sdw8-x }waɤ{%#,džIQ7ivE߼4``T/$̕ G9x4z{oN2vLkXwsyCX"@'At#,CXtQ'(ϯw[GHt{@,k~ ,;&Nugc @Q*ôUmZ PRy>YߞC Txwv8e_b,9;' ʁ`?lrJ:h^Aځls4}3pҿ荕Q6P%.32}ɻv0mNRJ˕{O_D-^(Ć{FZ˼Jr)Kt 1S[)`_N<`_ֈm*XbO'i=yFmM*% bj{PC)3!юU| z˨Y]o4FK`2kBjK7A`O3bG-,vpgL=Ъt̏*N8iKrMZ%YuQ\ [5i ݽ-)-"Gh֔Op|UoUV}k(o @q2=",LL &9P<.8vZ±KέwW.e6A^?U@Ƴ=ϵ%B ZG:[Lvd|9r'U$*h*sPaFIvI~Ӕ Ԟ$& " o<0nÞj.fO8Xc%D@?IEVmq:yuNQh"xp4A9;rͧT?lQ:3i&Q̃A#~ ]hcup;u7%?'G6]pHV(vjvIT❎ub~P.=vGPS@ڟQUQCpV']\q)@s?F4Jn JT:S"Jhõ1+|X'k',uGzƵR*>Ҁ}ni(Zd %WD%)Y"[iʞO?;djc̷,H75 sg $y^u Jd^t^qIBN0+JxvٟٜW6s/Ks< >܍t˱07/nY<4K&%ŸKS%0HC`Cjף"ĩf'DF0J5si~cK!dA'eZ/* %EFQ^4W@\̛EI**1':4)%N]*k2iKD򝜁!Z/Z.l{H;ulˮҔ b5_/?({8݇m^P7͘{c">%g"Ci2mEjр@!Hy2+L{|9axÆr+q!pN,X6ky1_Y(U4&Iټd9T1nszgqw(l K"4\NͶlo^3P!wpŔa]tS삔1kf# d7hEu$= 84y`ZTtmAVwmb F5ƛjLJJْ@Iݑ2 92áZa-I[A(AC*: j\DSaiyYzzoSh[[. fv9PM-@r*J4`Ə'qJyT1P٤ G߻XuKWk_bМ08Xs)T4pS=dN [zd!Ǣc)7MƝjfCcs^ym0vTC=­hyec#]K,n?k<:7L}gmg ] d;E4/uF8>哻̲gG3&B\'CMvMU9 k0.rMBa5fqr>fxm"YCN+liy"HTj׋/:_wi퐽vQC7  ~>K5J7pw\k-"6:ՁMrԻBV uGq\\X1e2 \FP h璜#͵\R5G܋JZ~8~1B& nԭ ŸSBoj 73@#hⶺO{~\^ jbQHg Y>_WJnOxؓK4J!!3d?ҟԽ0Ud tK[ 4~񯃖ot ND'a Fbނ)+N򰇊KHg-D7X5~.Кp3iHDN-rɺa4aDYidadN-G ~j5W娩 {eM2uwi:wfOuw}{8$qh?pIv^nf+)*\֟ H3-se9n AcXY<'%YI Qa'Hc͖. 䧂*m\LPpLSNI>mKKݦIX&{\Տn[0K;#^}[lDqް?~d`rxAd 4:*WؚP |[_1Z|慀pkdF1eWw7^ש1s5,T& iF.xzC̑q9nKWHk~qYBbVr.WLE܂86rleʹIq W!tϩS]i;z&ߺwFj,{=z5TpC|e,׭\nqdnֺCIT=c} W7Cɽ5ihІr1t/b۳@ 7/?SjdWK G۬SwH{#Wl{wd4װ )JEX])S8E<-s2C$"U}(NO0W;M1.#`ꆞȘ :Bd䆿IЁ2tlE4f>ĚP.X{NFdl8wN<u,`!/915TNdHoՔulQgEU!3!*tiM]A/ވB/0%>rKpdi懹DF,F03͌oAȳmcxK=0];)7 }f у]8u('Oo)g6gcx(T(VyS6D?ݪ8Y k3ƍeceO*ϳf5P[< Q ;̈toNluE:p샦{bܨ-u\vbOp_.l { 3;Zha^ ή&l6e;nz|@Rm#J]2c|1KLܢBfZ.̍aɀj']ƣq/(M熘;+7ь8$hw0_xx9 |xM F.mv1'(kzqIҟ3 &e*X- TǣfɄ{O@@ϩ^:PK\䞑3C5u. x8!Rc[?k]'Ps@<_0D;[׽!'+lV'ԵVSñN!W+YF[uI$AuT /=Xx57`aސKna1D 5Q D|r~a~#ux{ z yW%@)7_]>ޚ1x-ٞ"y;t.2$S㭯~d:JN!\+1 Yv'^su~-5<6%N;테0}8vf^0%֏Rd<Z~ϰ޾Apx%C3=(X^GNfo#L.To Yk nFx_ϫhɳwe !KR|Lw[ؘ׺}V/^o7so z:<5煆,9PFZ/C^0ʙ]*̜Dbdc"v/:Iuf̘'Gw'qhh1^UrSZ{;\%Wã̑ lK (nþ, ssmߴ_.}*cqAں܌`6?$cHSe6G׭S!3yh;p)JKndkfgZͯrөͩkQ>Dy㦳jIZ?+f<)_ƈ/^epT>n'|[ .|cn*sr4~ꪭYP#kOݝZ;ՍL 0hϩb`u:t阽ۉϧݮEpd!t N JYje<Uv6#LnU0uWcAfYDC(^=Uܝ*l[ !1ߡ{.G 3!ރs/S!r3ҾX'zwގ t(` W^ %xFajGvZ`SP2E1l#M۔%"כ^:29Q;re+bk1h ~Ums)V4'"YA,l 36T[]K/ (WFnJhkD0R¯kou;Gبrvt#.%U,?G<"GI&pt_z>o5x~@͈~X"O4G+_1?.jC7zG. 9mw½iH,w_eD,#D\.ʗXg^ B{Mls=4#=lK]NN$! v-c툎'u>T :̥!]zV|8jJdL/.0ʴʖU.4ϭ r%Tm yΜ<>Pl֤7F:! 0'WCObn1 ՙ=Y^Bw NAar-)G曼0{ΘJEHP'k8{?S'EY[o+QCMQp@kqyȈ(?GCH6g#Av7,fj. Co&6j6 }|ϔi,+X'4J6Β2n}(ҷ֣>ABיR֣ O={*l%¥I49 L>88]{]bv +i$&&[tmjbjY6GT'A0`psiZn '*W2TI&^`pVEL.\^3f*G..~]Slb#_&0Mƭb!ahZTG61*OMا=lESx0L;vA}Ux)9EtQ^ W-CD"/N-Ct%VEbL} x`mV\de*i/Q:*csϋ[L:}5?F1aNgnb`.+F;T.*fhضO"'T, ;A%rUy"9\mYa3?I:lQ̸ьK6i8NEӘ۠CᅤS45Nq0iMZ5%CEU0 G d C4aQEoʍOV{ž݈`-X?F@cyjkvL>Ҹ|3QH0CFɘLQu] HY߱8Ioqit[uqdl#p0 TYj +7-:AZˎ%D3qa/ ם}?,=3ބ$lYio$W6܇M>ޞ͆L=.ḍr2q2Yb`86gFmmÕ9MW39Hxp^q@dsR;"BzǷ/o T;(yZQqڻ/oIc8O5/S㨦\oW2UMI b!/є۬-( RgY+| ܭ9<+͆ G'ެQy u`."yXoƙN#DV2Ƥ v@6! $hb3D)x7!36S;sO/0%w;ľ65X.M}8#bM@EtgQKQ)xqt*>J ^8Zm QKԟZ Y<S̻/ih Kw?Ei6+ḵ-]O- k!]34cߗq\iJ^9[I< $q"V)R-;b!P7\%_3DcnCϵx ױm+7@ɽfѬs ܕLx C@$syuADFZ[LJLx~Xh.8nTl\(7vkNB>vnJ LSd&%հH7urb- +%OՉy9 Sc`0ϒQɲ1TЗ*i܈&6x*j+b& ?r T0Y|?syF/@Q3ik .K>Y@Yjcjܧp[1[U?Nި E32>ix9it=sh3&uq&e{ܲ،N3b@wo\ֶe:hLj@y?,n漇9ҕ YH8K,6b]݊] eaAI$˷EMieXeqEUyjU|y:+t)k[e]wl;Cϱji;rKJz@l@\s PE*> BKH]BX jͤʏb[37_o Kցlέ0u$%{EךV^Fm} 4Ue!%5Im^9Z\ y0u { <%r*COoVq (x!kߋWP \R&YDxY^C$k:x 1Y@o~W3^o y~p=Rm 6Iǝ|W +Bђ\h^i7("Cw]"m=p95+'dfO8~nFX@ O^ w[j5E5rkg]Sp;6p3ԯ-Y f[5/]<7)7M{+*VRg7;l"hFhPv)*,^Kl+ 1AN딜(ץSֿK!>: bTDJfu&9hHM[BFa{. LzO)r7Sa *U<'Uep#S'1 ڤ}fli`r^雼ӭ B`pu٤-ms 8lKhNAzŜ@y.&a?bX-c}>ao4m3qvwEjsuHݷ.aWW1[<zVfH# i8ܬN*9M!ɂ~m;\2{LtQlFeB6 n8:&wRS֐RT'%PMj{d"^Xk۾ھQ jTFo`}ܐl Ra\cda|Lxm Mي /Xˮc^\* --Qj5 S!UDs xH0%+_C{}x3J*#9E\Ԓjl$:ǯ(K[SΝX!|bjk:adtX A#5E B>a"*^h׏N {*n[Ր"(KM>&]{YX7*xƑؿ/3 Cl?jVDWF P=O="$|Ԕ~" \e1#h/:-vEt&䀈k%\dڰ~anG3ZcUxG1ĢgOKe{B#-00,XeN2bV:`0|]ejV*{aۍtߚoX8<^,Ne l|[FGd3Kin?R|pKي~-7M/}Y%{y9)΃FoVzvIv$eOfԎՃ Nȭϰr/&! Ύ.Hm%>n7rv[bGe&R@ m/Y\4_nZ~'Bjd&<2 E&?n Xy5<]潔"mي,KIf:9ExPI>'2S#v@HF̫Z6R(n^.ހ0 +, 7UBBH[Z}}mȮf$[㲟8#h`L0%CUz HB3tĄ@ !R̙ûy *MQtY~‡ٯJP.뜫rO5mMeB*ƞ <$#w0Ԅ}) B[4m;Lҿfl5П`Y`>F[cNF8Ia; TöݟC~G LfoLl[~OA-/{&} vՠ@EBHZXw(i`e~mh&.')rw+Dt^[{P;O !􏼩@ҕc'lեT̍lyߥ&JJU%X~94f1SUSDZ@2qd;=Qira I+"I|ةÎYJƙ-ez^Z < 筎\j)oV꺋OG 3DRo*❽(V7ylfxAY W\946սQ> ]X0tȈDmȱ3dtrq%T>pQGǰ4'qv$)]j8 &?45g7/=r4阡LRRԹGO 6a|Hgظ *TGԢ6pcgS$o(].b)՝uOϨY %ȏF"@E ]&s|r1e sqfܦ@Jۗo"4vg,q-V҆gl Lݡ5X=A)Gv",rk Pz9#ѯ7kttl ~);YmT@6Uhq 8Ł>4^ʦ#5qh~TQ4|BsW,:SIL#fSkZL}< n/T;g;d$I,5厴o<im愷iTyk"ƽ@06uVt6II Ϩ17N=KjJ V!õ댟"s^Y z@aMK x3=DY~`ZY4~EY@+L;I?ṬE*,O|KoamF#ĕ'(# 0/h/R׫_PAzit'Ć^(^pM:ߔmg%_-JT 'gY¿ӂi$4uUyFHPiPS+=oώϮ:J>?==m6!Hmp-R'E]&Y<gc&Hڸb|rN#~3߬Qa=&jšO=@?C*0i9CnQM@n+YI1΋^^}*wajQ7#bJ^U$jmS1˙a&3sLXpcXUNWBjl-y|SPAO=h^7caz3+k6$0KiKusW%h*R{E6I+DUg. _.[5rbxZ0`n-s<ub j!H*Nh~v8o4 E,ɣ`apɟB^,a(ea^SXlB`3ҘqBKD[vj(9+#E5pakBx;O˧Ecx*զ%GM._HBN}ai6!i|1֙W <3әO-^.  Tv\mMԌUƉ{UfF7*ݶ#~sC?D=d}Z4]!U2Blڏ x=S#\אJIByki5 2-l#sM/t٧`p[EC]:w+:QC/ɢR5!iUyqwJOZzgbd #A{+zV\5>[/ȗةj1xc;'~UAa:]863#' TՆdp)wFdaȉKQԩYeT5og_u>tuc̊vެe;dF5MkdO3e 'H1nMEeIʔ z,A )A0}Q39qt t a֟yL(l:~Y :<;3cш#Я[7+(_[3Ed%",>Z?FatVM=wn2 <\'[Z$Eڶ/d8tF3lT#l3цE\D *^&A؊3x'H'Ք uR2.dk)9v+x Aĝ+GЙTT#vj[rUWkYhM:[嗥b49Exh~/R|`}+|Bo}߱0983áS_dyV.9a@kn9gjs0`HDTpn pM\_[\030 7 V[kݨ75D-jl(D{bǼ sCkm<2{x~`ߞDR-@jE7ux5WEwD%V1E.~R@L0H:!iH\z/$t 4F6 R(P{aE;d (%c*K )"*a58a#_E?R=4)]a} sSč9&(O܃X jt"L|0>G?QaQ 7H9yǤ2Dģ_u@LkN3 Re[KNM`CcӘ8fN62ߢ8M5NR6)%ʶ+m8.Av@Ok Ckxnf_^hKZ0Yt%7R;;HfipԦ 2.1V31ChMg_ "ɑGgƑƤ]M TO.6@.^Ot!KH;Fw% 3lySA [{J/4žcZ߅CI`v5׭WLva<=q In~VP$hAoXsXf@fOf+I=0C[H4.Ps ||VmH;] 7#H攘,x\ rBCdicJըuhIEh^&=}v3/0M"j&|c8U?LJc_3:t "%8m(93WDbJ$NW> `r:;c[FGGG zP'{(iG(7sGȤ R$),j;b?FIĞ ɞ|vMq[γ/FhF3hgj#mE:m7U5~PuqlMܡpj20.@B ֍>(S`j袢0:[-*$ `tC7225WgbjΈ2$40q ɮ^3 m~WH(pԄg=Yֈc3fw7 D:튺r[;ˉZq1XI0OngMgAK7XB:h/fgawcɅo 1_́]&5=|J<[qV4@b@m)E7vpe-փ[~@/".\f <4i^"ԓHg}y-P8qnᙝ{)~:KB wϜվ8 Y΄G }hl XaҾ}G^v2(ܑzuD}Y{hԟ>D[ƝY[}-ow2s]f|$GK2яV@]F)\1sUIA:K<ٵW>tq_bbNCfچjT$] wP4?V8Y,f&۾a i०mC̒aܡ}`[ 8wXPdۙu4L*"StIƽOMPl.ibo>@eGȬi=sQҝe MaOc12X1nMeB~)ŃGvKA\{ӫP^^KDEAe s/Xl"$)XG68>w6,ez5 r‚Q1M*!Ù)D4?=!d -,;%nW_i҅>=8:~'!H4I8i< olɸ0mqb+¥ӥTʀ&ҞZ$ǬG+{l" O0^AG(l " V |[D3Ơfpqۺp#$Jҋayb" ΍q#[@{{n_5CZya3Hp#-نdg[j wCM=˩@sSY#s2e}Y}gխ˙=r݂_?iiAtZhqoz9=SƆtTaaߺ[X1!Uõ]T9 3ycBK3ƻnGMyRR&V&\Ny<=n[s Z|,Bp F/?'d޽U)TdʪYQ+ 9w5Gf}btFky8)5ߢxZ`;E eOOaA˲rY5s{#F׷̽?l5pl j|TXGb;GI$l T9۪#EpJhOZթADG֊%D\CrDAwa:` ԘRH~t'}$Gm/L۾_$d17TdӢS׊4gʣ%ݑ=3Blis$`yC_/osi0U_# X`ʍodXߺ䩱*dyuHq$u[(/S;7Oj8Ϋ?P=ڰ3+᭮̒CNb9窟-Ib}JV眢te`rU;*:eN(g(ՃN65g֧я܃{tqH$F*a}oʼTf P~&~.,N+d,&! c &")637H7/~A k3ҽFfFJ%n6>V@]̦&vkUp[,hOqqlNz]Oj5?20uS&wv5Y'n}5RBj`WȐ7ctZFRGysp[DՅV[k^.t#d]HKY;y!P>E"s2 ^Sdk0͔6V^3ySC 7)LpD)]2.]?5xѻkqLl`l#mF\Q7d,q9Tբ"g>'1~^ID^81M;wS)Cb:'>VQS 3~m*P,/3y„ۢK%P@>tΨWJY(^Fw@s^QBh.6_o)^plfn ڵk H7բ֮+nmY;uoXg?qF.[-vV# PGxqVnGp%C5v(" m덽–n_8vY\odY۩bjJO:I.SQJ;<$u0F xcyo[A^j]#=#kgzۼT=Z~U- 7say;/Z3rJX:$G Б*SvJ,-(Nj?YZh)_?"όΓ/C%A0,@7:1S\x#%j#iJ3V3xreVՒ<69N蚉wI+]E:Y0}v;Bx\D*Ͷ]2gKys?M"R8r9_GjZYe串>8vUݷxLKD䅨*:u *6h^_8ܞC/v!v%{mw|;6&眇?{5)gɧtn65cap J0{|ctt\P@é78FșlM;G*iu.V.;mcݜI@$4i!W^:d|=*~㋀Ϋ:(zQƂf8lFW7tUY93zU(<\4D0%ŶY@jHIW5>AǮ]]W_6WÎ*tt*䮁Be*2HD -,4zGef#hv~\& x%n^]A6"ŕRWX<mו?7K?fnwy\}TCkY<-R ؝Q3o_68)Gb·d')btË?[ۓ!Iv=sk{iš5At&6^~HQƀYnμݿ_Xi^i!5m. :!(9m^4_ci=etecUi?.yDH2dQHJX#좷|Y~)a9Au!oaCÈ+C:I(e@埋"6e4ԋ(6|`&ܚڨl*kF7!lbVV *u /7/cez0Dʄ8SfY7`9"ʸUհNB:vYeÎxo,Im%ORO̟rXe\zgE}QB;H۽sAQZ͗"%xǸԵF`$wlѐwvѬ)KSO [n}.| |[.pq@*"^}깠t pɬT8l7 hz|EF1V9hZ:m_J jB0f^/`1 (j3STƛ܍ V<< }rkeBV6BC%z ?Co\!B ]n,DžR`:תR|eҌO 9{k*@=; 3]z`fnz| ;9b1|-ЩŻ4>!w!L_>vRQ>>T#'x w=|5=R"/6۴f|dtJ/=Vu?l@?j&_kSsibgp,}Otx|spaabװ RbގߚZnuH/߯{lvoP%iQœe &SsS XX&Z^Gע=6̫IuC\ VI?%>2:+"ޙA1̀^oHtj`M0Ght^(WRf T ;X^$|M>&o4Pq))>;@Czqi9?1tlO%d>Fg }5+Np܇j7[  r\=ihO?rPzc$4t4hzY+73$"@IjD6W>f_ttI(g[//TǨ0G{v)F:]^d.)/oշSV=Dg,cbOZ|R综~cz%:_\\y*u2sٮ{ՠg+CмۮÊO|\z?J\)uumplnMHP D+nE;34.VnWiC>}W{)):>m,uh4PmRlX]{!QV! Z{ o(qp]6:AEꉬv{uXA&kkU&N]F\0p&,26b]Ww9^.wtM?<|Jey0S@SKs HjA^[w{1 oyzpa{/A>}?ܲM%I Uet]n:WxyTцw{sDcx3EidVE2%tO5̬mu3Ch,RqEefZMBB O@xs 06Aj9T20˺cHoo 4O]ʹ]ocӆf.]8ѢD0UW{5/z eCTxuۮtHxd5'IǡfooLIe yvTaL= v״&* `ZC5U~AR܆)$4I4Sbru.0 g[P=ǧ^r;BafRٓfj*D@ wVdEnpPKCfصv/! q\>b7Dzz<ޝr+؛w/k6H}DĎ(2i4vkIUya׎h0amqh:["IKݳ#5ED0%;քEvpnax䡮tᬢ_U|t( 7?Ao:*'0=éb,zJjh*YE-urֶhEV.c4rs@偫oP*#+' /e on-zU=FGLNe""n8~ ul0c%v|p2~mNg;ia.ZgNfXͨW;!>f*i y(^ċr(0^(t(}CȩGcZ)]i3Ө.2;Î93ey"79Gb)-7@WˎHAi}bj%g-ZneUa9anc\)?}nJeKc 3 nkz||K+rqCX+=RCL9r![]6Ybu4/](K)O,M=9qΝհl덇Geyxm_:iyZ5zQU۞z=~ڼ|_;7b ljX+.2̓/:;NCѯxI$rQ-FBԥY3b#4vsohVIq N'Ky*|Q">@wx-x.W\iNڧӄ)rfAbw'yJS|=͋犏8~5k"pWi'no6VZd;h[u2K? tQ^cjSe|@%yZk#,$C,4xK;79)# $S#H5Cq|hj~(qٸ{X@9>u#yaݢ'v +\HnXWրځeEoooj14,ύ% -dY62,'h؋=9GյJ:,ԁ=(t,tII4\~N{Ul~cao| /Ո@a=k{Yc /BhP{ ]3ҌZ[G \tR˝m8n5s~LwFM_"+ml F.au)=HV:)6ߦ5Pj.Q S."1[z@r ??* ϕ;O(ީʋas/*If%)Q'Mj1 :9y0椞ggY1G`!=CDJmvD|%4Wy&y* FhG#+\Ab~ҝ?gAಶ~&ʊ]xYiSPdm[ovS~( U91]NnϨl wl0o Yysykҟ$ !F@LNx^So Κ&fK70 ]sgϯYYysĒ{?n4|]ňrKvl+c4r -j|Dz34\9lςdo$_ X,f.5JݸxQ @h(CYx4D7·&!n|wHPsip¦8/u1')<=}8ks!avlHZR_MQuʚbTdo'،cXh )BqkzE~L~K󯽹MuVGcxἴ*ov# lrp/79dI>kcyx$gUHrkxK b~kE'x;jOZ@wr PV($3n5!]tS]n,h8|{KZW"!sI@ex kCT!H<DՖҊU@Lw+Ű*r+u)g54&Pt6N71S'7pf8@f:+XJLxٻDsmoqK= 9H`L'"f^Ir4& Ee(GZq=oR1ɼ$\" n0z ٞh܍?eLq#T J0•ar’/C@30UKiPzK DJb,I%@UYc X(w~zUйFØ͞,zR [%+" -VPSsMR c {V.cl~/`g5ZmDuN9q=0mOЙN|b5&j?.Q[/D?.zJ]ԲqO)f3yu$XyCCS'KnJd ۴钽HDπ|N ?9QB%7Vu.bkWtEdks3&WoIc%7h7ߙm/6 MZCٟhg+ v勒;I%P.ej5u=+]J;LQ]3f,us3,<@IpoOӵ(ib70?>`w6{w$aApZAralFCe ɲ{9iY2|T/a|MfVɰ?ގ3 F4!" x?K`VZX-T6#ݘ tRќ*{IRL"R:X0;<4p}[5X>ڽ1E(3~8IHyM~ksu1jCPP rޓ>_F/qXӅPJ8TPd{X/$~&w8”gEeȹl!P)z~a3l,5foD2: y^|V,@.0 û fr- c8rU%b;*̝*|Wr y]ϴߩbWaz`PuJ4 o0dE9 p(VR6^Tz&bOFazAU &A) `ĭ:3[(ܠ~V7Q۱K[ ˑ 4OXg@)u`SmlP"UR5>|WК'js=W<,ԎL֔ ,-Cpج?E1{NL7-EKS31W32=Ećyo Psq=qUEѫʆa{u/?rfQ=#&P""ݶiT'6yM[L$2|B9#wv֋n[zş<)&Y<)^/XJNLV cFĢҬB7w$c{ _%0& ) T#^?OL}C>}h}r}g(:Vܽ<0-Yfx3蹂W ]RL?dS筏j3 E0~ 賫$wn-}rYk+"1@7OA;"Ș3¨w1:ZCdш;B=/jm5d zU':x{ozzkd6_RKsׂƥd՝2oH  9e{?5XrWT|TcB~(Q{X<^p*ì,IfYگh?s lR(Ħ}܀TYm1 4:1|>7vLoR⢅nv)?WJ? *JNơ]7dUJDH2׏zN*ZC8r Pz ik&y ꆇ3Ӊ^oQcm3 ɠ7/PgIJqQ5z7B& N@@f4SP>ΑHuZ=.wj P p<,GJ_9FA1T d)o / `D7 mQ3dw|osQ{Ri^/8X> #wo8&R@1 F"]gIfx /*9∋a#^?9> Nx(anU7ƙt=Z|u\D/A{0gkGsu~>T>R3w6 GG)j ;a{8x d(݇!-'/N*5-FL%D"d= TΕ'4[H+6a({t2YZ(dml34Fo"3|\:A5yJun% s9+>vsZRCV TBT7}4@3wݱG2ٟ :(KbK(j,O5'"W[*LMK{<O0ܕݸ?4 m["<͜ &D`VJttv8Z4Y9v^KԲӅ\+f艁Z;iiFNf,Xf3jHC0(h=G0!;$""9R\g1$|}|Pl.9*Ehb .,+~\ Jz [j}R;>tyP]To./s VUp.e A(0W6mBc2 ;h6o8| LNRl;U=;5^ѳP$hf?s_$ ʀAd]p+/E[<7={Cd)e5CKTQ*رFO,b!trZQd |2:%Wpg'\1ņS8b?LD7Ky]%4fy -)˄ִGx`'#/GnX-Z˥4j]I{NmLX"E Ѵ$nW ,z `ykosGӓ{2i*;h.#yyZc*-NmVlTpWwnRPݗȚC*l:oH̭P6FsA؂LsVC:Rə{Iw|8ΕsVsObo7YAPSK#'f\^U[Ёަ51PX{N[w q'jwU#)ij wf3cAm<,v9GD5^^TG(eIHѻK=s$EYo'62|~ " qylGeZWrNfsw~AK^J!L]K]g?=ac-+ s)Ȩ%VRO? jOa|ؚ7HOx~umn*\Zz`o>4s^,Iy2AOVå|bSH VEEAx\co2eʡ}kY^=KM1xA ݞɀ ,[= Yhr @CL͚<ԸWʎfe31[EH!V}&iK*&S:)vI&Q 5JSk=#դo: 6kjr"v2mszٹhmy0v\py!Za Z< :@FJ~zpE^0Oׂ'؝|\8.bzPrԸoyֆߗՃ]ÏgPBY[Oq{:/܎ JNx&2*A$uYW aR)S {_W 5=0x9jPG3"lKvh\!F ݥݚ~%o)F.IWF0JP?}o%%-56t^O뜯M0{e^n v8Nd׏1efgsZK_KcS6$'jftj Tػ滅y;\ pRI8ז$wBX6tAxN]0Ef+sdPL~҇m&>/?lzGycE%轄>O|'ƇK12x&%`n1OK0Ț°Z6!F ONA_[P7rCL$fK`{K2VHZ5wNG9 kWPќ}y4.E_wsVRSN&[gvhƸ/㛘 ځˢmu\줶"g]7s]m?u52/7B|.@dIO Nޫ-,cCzab袸2q!oᢐm g6/6'-Vt)>նX[hc0(,lGYHF\7RBYf)~."+^F !AT4Q~ %"Dk'w>QX`vPHl0j[fmaN@~%kSG{g&ccnIoP.cQL X4Ƶz0侄*sӽNsC~V4 mTi<.ϩP(Aj)B+7[fixPS?Sfw ' òQ[<2_Rp6#[7^M? v剣LT쫂)a7aB ƶyt%ص?)yRиI!:2tlQcߦW JUkي]#R,z_Xŀn琑]R x}M@hOyA A}=X};u$Z¹clKoJ@,)4ͭ'(Y9ny%V|le{!<0=8}sK4(M :,R2Mq!&7X"fy{/h6NxA=F/gt= KKO9V27X7!jtb߻_X3x9p2{-M-<'!n^e?d-MՖ Hn3pS`}!RݞNbfԻkQR =36­όFz\2H ֭3_\yUڟA"POr^>I3^v/L-6.kEkˋbuǞ:dUi"{蘘:'9{+n(GV0gXd5&ɞZ>./GTpEHa8Y Vgz $r*6vp,7Q@c5Q_84N xcՇFNdO3_,VT9@<ם7BL: H>s_)]3Q"dGN]?$SFUOIд?*EHIY~*/ 2_W8aB.> H*zS[I\|-UXݺ"W!AܶC\}(یUay% eŭM3"yMzsvH'ZR՗lp/S_mUhи;M><ՐJ?sD1`|h.W(}'PVRF; UnsKlŷo jfF.f[Ntd.k;v.; R %U^~R^"n ~D O!k"qq '_e|Υ{9ńL.|yh^I:玮(ஐY^QXS@nY?Σ0CHt>2!ț*7V #[cϥm.o\jbeF u7RwEGT~V #.ǪʀveCwn0#$蠠ڄ:-kgky ho/Z¤ InX3O^wC,Y UB [dW2l vOY>[ʩT%iBBb* qa/ݰ4 o=X sM*y|7AiOQ{E9/$c1dkgT^ke;xJZ" R~_p|SZ|;qS|q$o3p&a}g5˭(?Q[ϝ-]ø99^Xϡ0"0*hz+h3mӰ ơ=`HyO—R |ԺʅݰC²eY-{)}5N[BpR˷*`dYu;)^`rzDG6ݘ-C`)R_s\abw`Mii2ElR|\]k5߈Vݴ= otњfw!(Ыʙ;QT LU3l&w)f@:>@z\Y|{ w<0OٸZ~Nֈ0L)O/&!acyuxGf; AB:d Pګߊ8Β=᫒>8%\g$ǸX &ʗ[+Ư)"rya@]o tE^bwݯwgǗ ŕm{P{) 3EEJ74_b֌` k{v1n w'VUkzݮ 撣Qf ) :D<+~{ RLEe)TX f.[4 t QV5oQpA3qܤK8ǽoZ ;1<3:oAϜ}_Xާ/˟o0bq8H r8 N"=`H3/?kyue ס9"mjTMf?U](5Tx;vT,"NT>N~{lV(Q <eޥ PN>ĆOs8Yrah'4|%{YcS<`uVR{C%uf)ӓ(˯neK0m$\74jM}ŒU곡6*u:Z v7.lDzT5fd8`er/H%}r'-M,/xvH%RN!z=!pALx&@,ӝ֎;M^>'[Y4䶡s h`R})&Oy\HBmAfwu48gApfG"x9ӠcÁj<܋~GPsvMKf! 5+PNrYʳV $s]bFF,uTՄ-Kqkpb>^ƪ h`׿}A)6Hh- #Dj__V8)< V\g{gIvZEF/;[ru-I1e@j37Y \|!eegwZ6эp/ n_8Z[]*-mna+В2yjpt(mP9q:i _;ԫ@1N7loBƄᵭz:P3f8 ܰQ'NV(҂aE`i'QjQ\G4HaseylHƐ] ^tz(NQIv wڎ{jqM-]yxΈT|mnZݫ:JIo*oP)iu3ah,;]0 -ۮ>xP|}x഑ĚM5ViU$cL89ç6A"a3.P p2! 2D5l s8ir"2Y mZg8*bw5{@gGzFki䏩TfY[g YWEAdL@`c37]#0esq\ Ӽ灦ڃT~Po}}M8H~BpdNůT+d̳so.r7\z@'=aBRG1 GYך0_oS GW+\Z5IXɿJ\*&2-7 9:۔-C0L0^Thf $_ p8g>Jh\v O_(gn;x3VyHwM}/1s2 Dy0u顗VF,1p]oA\*}dg`ȯVImKU '.ʽCŭ;#wmqIYI 0%xjCOńYyX^]V~p>)*m:8o>zi}YSq ^?GcRaU(OUnrf8&:H*hC"շX H w=Րhf-@%xT- GJgNR$H8Tsp]Kˎ/4ZڗGm'^hBR."A; >N Wܵ[<+d>C|ڏ"}mAK'Ai2U&2lN 7'tޔXe[rG]Pa*?xz^a@̃~Z[Q"Y2/6BFqn0>\"鳙O{k.=ѯ0RK,D#͜NFVrD KA'yy}9 ӌHfDR2շzJv^4+q0GRUJ`6_Y(5KķD 1 N\4@$ebZWyƳWҙdH&U\z<+gfI5mp m.9xT㲿$K>`z>ꀂԊ-®):}-hwg!xW ֋[\pbγ0Q`rugg5 K6뙘usi/h"N`&aE o톐{>Ts$6{,Kc30rˡ%Gwg28{?i?MH)b[KOۀ=CO JoUEh}GQb-`ϢP6&s+Τj*+lŨy8;Ͻ2nР^<-t(FkJ-6&"]ӷOD_%12*͆8OZ,iLգI2輴A=Ѵ1BmQ ǎߋDsˬ(4jt9-D̪:hXvN[[>BIQZҸT+cyEj.Ba! Oj z&V[kVYL poe-/^Vy{]AP?o:۩P꠱XXA lFT|"lvY|O =|QIB2 rL21KȫL%S#!)Xq^(bbOO)$ dɉ8ztY:`jZ0 |&͕Vv ˄?;!fzV!z%HC'VRϒ-/kg'mw-H.(ƓJ8"XXXӋq2dސ*tėAqN|W%밣>tzOtEN =dA_oqM%bXЫR!so\.7C"lg0W.1 /:%r4o4`/xP[,IA\sPsS ͇Ww^f8]w8d n9i,1gϠ[0n` Z;*[G8Yz=o;5 ^1r=5j`ᲷO4je!'Ve1~c -0HP 5{i&l[=XhAߣ`R)9VcR"2pw40"wBy*کl*}BZ23V@@mf]j@C wmrM"袤'@Γos﷧{VHDiӣN"ˇE5$yk%n^U;,yRXd 4фb1mLC-ѷ 9FW=_]^N\{ ޛc lZ̷f~~G>}Uo/ƩKAZ{APf&8χMT'Vߕm[ 1Lqe}r'^^z'y,%_SRq;""H_rO$1 2ݡПŅD:7̵1w0=>woiɌnj xp*](`xRZRw/myVpCx_C˹rmUHJrƱbZn0:Xh&~;w|c:,Nim/i#$gsZ32)P:c`@fSd+qYpcaVC:z}#d*ٝSYSu'21lh+­OQߧ@Y#/4^`6 ܐ2JVP~{5QWsy=Ukq\86 Kƶ3tzZ)W$GbQ rnꮕi6FzD4.02cފ*,|Es#+e&Jk;BDUFDUshOEche 椞!Qt, @ULo隻QoStUžme^i-Ϙy;t:[gqeW ʥ2MtyyFӾ/=#ĵ>0>5sqOuu g'~eyCar4tQ0Nn6\&̰qg(4t1=M-e=,0Ф^0%NZzI{VtT3㧩]|iI=0e6Ǹ4K.cM4n,]<;>Ϡ0 [qI"d5y*- .d2yRqVߞctf ^gf[&/ FK7z f ?0x~4W@zy2,]B1Skw]aǹ%3s B&G/E0㈍~boa5-.ZX%½ vһ hIHLZہ_n48r4XM+󫪘G{$}O9n<(rl8$R} CwNf8""]WC-nO虒QSdKа@)׎jahs|Sģtu;8X'R@zyF[B͌FeKjwb{[8 hi"x98'Bg1cj7񧓡5Kqs"KZLA%K[v~,J=<( ; Ԧ|kD:QA,%8DRFd :; . c2啎mYu  w{`RD&%HT.&@R<- 'Ł#FM M{C!jr bs6\1E>$ЂHa mÂj]0\>*?}wvxϸ)v|GI[1%},ش,ۅVfrFs)for)tuL0~潸cDz% sӏm̑ySscb _ $ON؜;##R5J4DPÍ!-+gX[!R܆ P;dj"fI WPlkd {J'DV06ѿ޼MEحu3@~WQșp :NfR+ }N*&*ںm1[8㛶=ؐب LG-0'x?`B27ʎp5CއZL)uc,vګZմCZ},^6Ok `0@`kԈ?-Q*SnMC62agf><躥CwfO(j3y츭gHq&Ê3LaEANA8)9Q^#6QQj:o+u_]-(YF oW7ji)sm͵3DsI[/LaPXB2G~L(Aʼƻaq#S5)-xH)j\8:K0|fک"oȥ#:jr$ ЕpѤ 1eysҷCtx RzĹ3UWG`v%HzeKޞ?t*PR%PK?N[Ng q#_r,8[u aГ!: .Ish|ڟ e ˪.8R0[9:dO5bn쒀~\ dN$'4ȟ0̋.tm$s佐]-0Ti]nw'8*w%8̭B0j@m4 м[~?f軍>қVj]raH̗3CRΡ!?ٕN,=V"KAf B= |mnF0~)Y>:  /B3 OUёzX?VqҪ8w T\l;ફ0Ψ*6Dq-RAQ_KMqvhâRJRЁA6 c|DYgNx٫<1FDq)TanMh{ Ya~OJېWwBv.G/y/Ig =6;I \7;mdMs~VhGn v3J{)_+_e peNB+TobyX>Hӑr q|EdUW jkz?vp_Ow̷8I*^N^6'%Lv@Ka ኆQmos||]sW/ cIgc KMDQlAuLMOpdj%uJCJ%%YyKQ{ѯ]#S ~?4iO'}T+e V ݔK.T[ٵu|d6UG<>]1=ykb"2-) .(388#",մ28n`țB@]\3sŀѫtf{x(7W\Z8GyTxAse {P98=4SbʂwlCwUE'X7gA@:R}d`S/&‰$J7h$qF ?O @() m#fA͞k4U|! C><09}d2c(/ _M,#u%er;Nn[mޮmzm*ޏA,HJi/pلd>Hݚo~ίHKصQC."/m`xK趦W؛ j>j~+P^ɬONMe՟3J 81?yBbU w4yG4I5*Ʈ1ALNk-om 66ac ]ɇ`JJ|0$+ߥK.8JRhٟ (70hg<r ݭAZzRb*V-0zALS'U_>id"c(3'yit@}fu/D>N|(09US)}ʞ"w!*DV߲)˥ZR"L{7\xb)֍H.fMi.qGv".4I]'xq0O榷9v/رbjn  ~r֣=DYp㞱ehc MC ɹ@GLGޡٞL@!I1BL4qg).r$T|9(1Ch1옗3Liҹ_舕l@SHrp$3 k#mloKE{HoaQZ y,F͢x_P@(a#&kn@P Yf2+˷ٝUX rM{NM'rl77J{ƆhUTgl(zD]%23+h.E_gA@!4CN = a2tx6ߊAK=8N=d˻=|k@P ڌ1N*K'12۝.'poab8*b+Hΰ[uIgW4T:~mRZsǻ&g_os0ԖH;$Xo3{< <+lB3_b'z魭bf4.c|Ws{hfpbS cu:\@jDm4 Zm34qw[ < ;[l6#(~ΌǑ^WN`9}mP:s* 2(&1;Uldf+|zz10lp\s6C S!Pf"Ng$A|3SSecmB[GkjWm8/ͼäHs[S[(բy޶{Si H 8 yI&Dc5mI. _nkGW%EbKj2Y \B ^saX)$t"jTHrLacnSҿA̚p(_`̋g]IsĿcCOh4rFy#x;95<kUʒZ"XJdH2b@2& PI'U-6kŵo]n4,:f㲫v L +AЭs`# .e> 7~P/- (dlr.P.2[kOiϻ@W/< 0CaD"c\4z4 Yn^YIm$$fE/y/3`>4Mj^BӾ*uQ@U` )2ebDt>01Xh~@#{`ɑ2*i P8]l'^x.yF]\sZF^zIՃXI:rKmAG 冶CKn~+&`r0[+1Xa NT#:x}?ʰ";(^vMBˌ\iG:/v{ fsC6] .!%hCW\$ AvFXtf|H$dy=Cwv~Ә'C2fB߹tb"CnI<"14-5)eɅ_QFZ]'~"YKkE4%, f:K lb6{@ 2nc{ ̐f {g}*Η~y;)ysxXr-Gdεeef$KaF5| jX9^'{rЈa S؟K[`x.SB]nX.&Tip&%1jS\T-Ӳh^a-H-r'09'_#-Tn}ce.;PdCc規ʻŮH ͌T:":[bE֧iΝJC?-oㄧP[nHdY5?ݪPvaނ">jލ ']"fˡ'G "")^hᾜ 4*[-ϋq)vg&o0. S=4j؟hmخ&|PjNj"KRT@m3Tݶ061ڔ; a p1IlËWvH"rd xLؐ;=t~ H&u"}g9w NW Eg^n_&n9KBQ(ǝKUεtJ 0m j>#BL7/[ TC 7 o d h3Iw*26`Շ;xТQ#<zU?:R{>v~ܒU%#|\J*Wo>KS.EFAWZi%L lĊK:P!~s RntU88Pg*lMkV{p|B{V $k ţV:#L:{7_bbi_xOqUSBشCbdrڼMSxB@~Չ#Fn_)dT-N6,P+ѓR# U %O1zv vyzʚQm>f 8E]b~V@:ƐcۜހT-v^^SRJpb>v?A&L}ł\SRѕ6mBH'R;0P,rApAi&2GmOcҞ]HwzJZhVtyv -`E? )/\ 9B QТ u]&zQmOT}=l;,(~+>㎙"~A +CzzDٍSQlQ '^`[pLT p> %?-Cc }&,M4`|MfA8fs /s ^% o^<ӄwp/P!?WIxE[@,+v86h.nO@?ޕQz/Ҝ۶FBG]B6 S?1^]'{|r]H?h3iJ2hەZ=i2YAl+`p}!*^S v-uGSBsʣid*sr.YD( WE]Pq & غ^(HP(QXUAw1g矖75Y6dI C>Fǐ |M&L*NfKZ?@ /ߑwٶF[QYډ*x1_o|IW9V1` BN3P`VO""#tT"ϑеqG2}VS˵S\=40({ o )hĿh0|0Pއ;Uږh҆9җ!ѱoTb&QA ySãf5vY?d9CkI$:_ tgx!b$L9>o8g[Sn<9I(HS߁A@}د?&nXy]Vqr[! i!4d75 ~ |p(p3%O[)eOit..pg&85" wR '>^ǁ?DtAAM~b\`>aDBX}Ճ =Z8 JwXQb]CNbSuжV8N08Zh˷y]?3X%2f1NDؽ̰A{&n2Lm{dm3M>:k%В`}1yEY1M/"'a|ra="t*b9QҚ>ѢR'Udܙ`^-fzHA4fN2;YLꍄ"sL,_/jb]U>!8f#?L4/I,k̈z#{.ibGйP; : OfكEFzӂa 媀EUIpC&x*ɮVM,!QANa10C%{`#v̏ ykx[C˦n9Hc{| Uu;RIT&5r<70\ޠo0@]xj:G6@^y{-1@"7Ra zGW:9X %UrUSDZ-SoOsv|^IZEpRIʩQ8ttH ˱WyAfL%.jduhۛƅ(ʉ5)F ծ_hRDz( L48V/le$3^.* om}XbJoHV@zNK9|6͘b{܅-pLxBZb$_D mv'D4(f.g+14o K ´,VWmPl:ֶuw'%Y U&_uYE!%1Vrx/t_|Hm;V{ь'{ x]`N%ae'a1+L$ {$2pI-&Z[離z $Y{2-w|b77 j $ħҿ6/F:"v8,}8e8-2ءd'B5}VAP㯇$V9кR247BrVB HZ1$qi_Fb`|ʥ9'S:.mD3*.($*{{2RcͿJL *@ɗ4վx wCȕtIy% V&}d|&IVn{|UqDR*?̉١`-;fJewM_@r*N,c 6U|WV;H\!scص9o=)&Qn̏``e|%CıL!, GTKs,<vlsl_#o Egc>uVxxUǗ%RDneU'O܏YbJzb_ VGu{܀ k~l/j5}&:_S(CVfrϹ:J>n '\=ؕ I7ˍ|_[g

@^ҢmZ7ߝ,/Qg /y1^|@yC,ϏKy,~!+q5sp(;.y oq2E, /G@mLNԵS[Pciցi6$#Kz+ φ2@6Wl &kb]P#Z>t }j1E:YD-Aޘ)~~ًhgTmF*4ּSJ_LXNp]d6jUnrd#-sq:_D|#WEM/gRȢ;,E|bp olb*wWΥ_y!&mHIDPMCc(kEpY(kt@e3פ]Z =ĝ֘z#<,Af]Ė;N:" {&;R vJ^Ƴ <Y z-A6Pn8`tǢ *ryEfi\4Xn'T&GJ(}G NJS5h.nq^٭Zcm{G Cdby }5LQ|c!2HӀ=>($G~{=DܟN54LAr,QsNKn~jh:-/S/L /e_YދxϥcDL F\5b($-hJi%ӾM@nx0Yfg$>z[T̬Vb)뾭م<#wA+\akp>#_-(K_C1xЌ[ςY_fد|Y3@"PaXh~]4g+א%є7^, aru9';o봯ؔG |4MJM (ڕ%W1]O8%|t~KtZ;E\Ϻ2!'6jJa wizҠ@ Y۬Vy;T{=FO+Ldkw/"X*Ԣt| oIB8EXgi_2O8 HB]/@&7eSN  ?{êvl||BVG/n2m-֬z␀-3; \u w/#X4߰Y4ˆq*P5jHnڛр&O3m?<ӨعDwcttLew.SoWD=ɳ%OC?>޸&\!r5?˪ڴzÁi/VLl|f!0֛ܠ\%6 :2]#>Rx֫7woHEm([R/H q? k}ɘ3LͱP gɤH"=}M& ޕYi\E|Ug`wE> 8uC㙹'K G*ŻR3X Eϛ n0I6hUbqH)GN5I ³iW'u0zzm:UpP#n3eѥ݌,>'@lƆ@O}bBL|eQt_ '.V2 Wv4XVȿ Xd\RBCa#l4 kW)&>:QetZBĕ8rZs3m -iXZM+lMΒlk9"]qYJrzG/:;?2ӈz;,Aگ$6>jp~Jс˫sl+' D=·0B>Qh-& Fd˵ja9;Ybؠ@) +E D}Y6j @4aEbmj\ISQW6`I:tfGhWNj1i:&]ҳ0!ͺ>ςE!lk| )}͑e,)yzXFY>M h@qyr[ hhV{˨}V_qHitfq צ~TPwATzpKOcSLދ)\vX?NjK%/"j!Gx$k@>h9 }T[}1}lUtjO\MwTU: O:gkڍu]o^(^gخ9A =Q\FQ}nVX /`>zH"aΓ~ wUr M-n( p\hcvˋFn]hʨi]wI{;}ȾOͻZߵ;+,v6o $Y!%r'=4};.8줘Zꖂ##|azp~;jwVK\CHCIat`p, ( tS&Tڂll!%s8_4Y>{tjv T2"Kv9(a\ s R5&$OaW-ؘڱkku#.>ѓV<0Cni;iY1*u/2if (%䜎3%W8dP6>æ>a' jJ)SZR!z'>WDC4oչ..M,Uú+m.O%nM[*M~w~_Wu~lαY:U\u!9}fq%e3n>AO%ȤCe'8MRD:'fRѪ9XEo6R4H.Xno*, L5CwヰGgvCflЍ 2$‹r~APOHZE OYYP0s@✤BL8l!w] ~3Y³Z/ڹBn ;/Kc95o!9X'Q}-f v"ezX@[cKl3Ϯh=ip2F8Z,PcFPTwNe?cYlR+yAIM_RR@]&;]_ l3E]94=ٞ,Ѕ b =N b'7cziUQ|'gML'2B=x >/qm7,cFeX c|k:tvm&{Tu%x gՌ{͚Q' mk$ڸ@?& բL+?9w)o)?b +(bL M8P7Bbr̻4[p:vބ`}"D)78^ Cu߬&q}Xp\)56ҙ IC8ڋ_I՝N1oslP1 [wbkE/Oе_Erm*#v$*kƂ?"n] PC'MB.( ..0|؊ ju90 `&ozjFݕPo-q5t4vmT =>@Q*&l-(ȣJ}4Hx~hٲѾ8gQgT`0,H+&x$31Z lj/"ﱝOԚD-N_ߣ>88t^Eַ>4Lrre*Yhjӧ!~EHp6FP+|(c,0W4ptӊpt2߸;3MgH xZsa=y+B°>T8P0}݋w<h:>6:x].M{$~?UGUq_N#[F 5.1j{I6W8ݻB7':42kt*RBql wT0D)sm:|4k=piJF-'d(/Ardu8Lq{+| |(Q8b\LC Y ^ti&Pcge<1{=P1rmԀ3 [l ->rJm/g`([V10uF5.B-ۨ_ X֪E!]]O*NG`G~dϴ9т;-`{/\kuLF"ɜfqW!TzM#KAJNS=!P2`m ab]]- X uJ\tC4zUJݘ ĻA {9Y | 8I"i+wA,cE̒a ees|e`{:$o rxOCjiW`-R}k91WK.MSj~ۺzˁ*ݼ 7'RshADpცN!,˻duh2QpÏ?Jł#{bM5U3>$\졳-՛~aJ6&]rZ^0aK"Cy6imt0'^2ҚOLgLc@#;)wL7?Y1UD)>/S a)'8 <2)*Y4͇Z#+=GNe/=7Jf^? :%!YnNWך&]jQ~jW/` v` -j])T7(^1eqLi, Kچ(Y(^ z5v\A4h9m?0Uk蕦4U-,;)'?Pmf*;0q9VfT X/bm]vpxI0)@:GK]8L86ky綰& gr4BfxzS(gfCZ W~L:!+ g\ W .(=k1nyL|ko-x0D1jXym.(Ͽ!I<́'x+gBb)cw)Ȼ1ûvQnX%>(+%1@ &%bA* )>9O"]~'$<lnSKhag$;/H-6|ܩ;A V<;˾ywS y6$0/8 p9gU9՛뺱'A ҁ%zʑWq - ݱiWzO񲜭 60 AW8F5@/,#XD$U[U;5kbe:j Po V]ihf-l~ShxNt"qQ^@/aVK߿9tsra;=l]AjP"M])ٺ͈HbRi` %$JaaaޫUw˲I!LsE殻VR Xn`J煜?ggLƹ'k]CG+/H 0=a bWT]PJ2JSpeB7E7[;Ri5& U5CߩY}y.F:SI3"e7ߥ~ê䃕:@#dܞ?70*qRCrk zT,0IZ=s 9ŖGhۇ.l;z prXb{CIFO*؁hAz56&mi/oS`?Uӑ(F©^LdSrch'l0F.?1$eK3,(3>CJeƦ^MhpBxX,:[c{`pdZ*洰ls>{>~1 #,?C*@61>IBZ(Y9&4rH<}GjLeݮ%TSR[\Υbu?hZb( ߢ,Bw5]筵\V&R !{O@mVaKvrj)T jXOZ1# :M,8I-[=Cx"5/[x"m@]fn͘`Y7JvIL5i0s>=HdQr! =*NE:R *u9%[6g:ۯ/8-%_Yii0i3Sѳ:3Ax~inX6•$6|SևV^@]ŋ]3GY]WYqL( +Bg/b0 S~s š5G5ǭP} ? JjJ:IvGX-G33!L?Wy @u| hPA˧)`VuD DL*@b]EͯncU~:j>Mb4\AhDN]4uƆHDGu.ײgkOGw*Z\o~jU-x&W0e"7E<"o m24 Cppj8kcM؁%5^#ˍƉU Ls~Ezk%ƷmxF@U#:;3-X)MK&7D9.6ݵkA\}!Q&U4 ]3h;8D5EW"BjtC`]-3y~{l SP.c_uU 19:%6όJ*"a0^Qhl8-cO͓ҝ6H.0Qn X_KӠY~p¼+K8ߥZ60BLI|;YJBNu#ᜒ8?d>ל?{Xj3y@ȶ/&TVDjdMd=7&Z}%ԃ/M'`9+muo zҀAzUCcHLZuOD{]yIuQאX5*~6L5MwCMVc0k zCD m-vIA rk1ˬ# j2]bWԅk;جr>)i*ץl՝G߅suweF/8\9  @*@.$,*HNfnFr e R)Y p|d D (A6T.7$k#yQDD^LKv=!6r#p6"򾅠Q v%@'U"T:#.ߣ\)K3,OLz(^9XAfC1uzL[z;q+\KdRc12 Aq ۄߖt[w1/m 3~R w ,.̅ٸyFN jژ/4 OfUDмJkY2l_61ZqvuTǯ{HWjm_,nVm`EY- %H0jK:Rv& Vē {m%=k#yR4(,B\p&Hjm ׉6`uov~}-7w;f)I;<+ݩ('jLxC zk вә#kb}gŶ)Z>\cn/l]`|]>A߂Y0ƨ)a ֔:uʭ+gU矕cj '36(Iot!#P)>3n5(qܪ>#磵€E8g ؛ !WS槦](5f28YPpb᭳:1sB_?3y1bZ`c4EtDcIH2z5M%<p䅪*W~ЫȨ?Hw0WF$I#aI{MgpdϤH fчkw&,HQ4XqxI.G$kCLB2.p"j,Q.R.v>m~],8kG' @3WpP dٗ9Cɀ{b_S-Mq9@3bs^[IcAfHp pу2#qo/8qL. 8lh7X甚'ؚ;WcyHjYDZL;DJsr;.T8"?\V&ſi͋c3mEwQr`m8^lDº`G_kbmR4\lrg'A~*5EJZ@wA8`U4TH2>Dx c|[1M*ck ncQlz۝˜|owk;a._O(1yՄCA8v T>˿HO~Prh~ex#\ѓ9M`N ,ބd/ Y'g[D Zbm܋yI2}Eicm4.6Ek3P}0nF6i: KόU40K-dֹ3 T;_9Jg3YtV0|ԛT [N ÇG؎lx$'dEŲGFo@`DŽTSbrW廯$Y򱆑"L&-̾Aa;`󹠟Ďt_#30H&ldUCxw}Cǒn*sP aNJt8<3y /V[&H$Aop.s\[}iO0qBiȂ keeB~ xo}j2l1%K'+:a'b q4'Yis)-#>Д̖A vkYp x;e䗓(#},<9TY<:CDf-m\)XM=dJY6I5I7xrO ma}}jVٔ߆\pnamA"cBSƵ˒ggx6@զ=G+a[ϊz|H0d,;11[!q\EOs.} ('H`Fʃ9K秕֙(92~6mޛ ]^87kֈתZ٘oYUj$4:Y?kG2>|9cV,%쟡^DnτwUH.OJ<7(X"di{bВ_#~}* N\.07uDEs4`f~A/h ?;O^(~@, dԟvRKWT2bWe6c4CkE֥ !%G*)>O nB^}@;t#?J9܀ՎUexhHmQ,9o@cP}3ѽA\A[+V<>fu(!Y^R7{sڃuqKJ!pE(ڕ8[lӽ:mEGY %lk'f÷N܈:KB3ud_y&=x}nDѰ(R@~JVaZ:rCٿ+0PlaH`K(kG4L-ԭa@ pq `tFvڙCQގOT6Tr-2qGMsBt٣sZ6xĴNX30wq#nY)f{F礵\Qpu͈`j`'@[# ]ㅾ_eˬ8Ƙ)/ղXym yyU?}yG*RfASu9~)9O<׽' v!?'!@aW?.c3}>$KDNN"| 8gw~ǧ܅޲HD w!4Jw˞L,};6hYP(^pa2G6 `/KUS؝mUkŭ "I@. Xi%a?oZ(0r'۱f*QMV0`vIVU+Aw7% n=y#A~4w "FTSw\)Jβ_YQn#6a#OzױspQ NxqTXP8h/3, T7S*Er%@s-bg.:¾d#Z0d.NV)("qk  *TdC`.^NyM!AZ{ѝ%>"?sM;n=p-)oA`JWel@@ZCM\+±29 ְ7w l0Vl!{+%2{W/y bcSU y^vW K*Yp0*:`5?ubnptզ4n$1DKxѺER\M̌M),){7\^TK'm0ZVS~!񱽦g++qr8@b zo{^2S!Ɖu yfʝ&B"׹!uϓzF9$֕ԝ,px~_9iVT0Oj4ѵ0_ѧPdSRitZÁeh2$9X֭j=;It2AvnlE.&|EeG=N5mˮ6r_Pżmmq [f*~$-cmQ~g٠>j$Jq*61z߱}Gsb/?or,S@Ō*)|e􌘯SHSع᰾#"*:=tHʟ7'|~B=);5cehȦTqwLڦ 9"b埬?}L(J m(\fmõ p(/lY?>P%PI(eC2[X/1Yowp_Me'btp/'*<:OPi甅xx+xpM|ovA|]dfIs+<\%o<>,AL;֓4PM^V*_rM ?WEm>P~[b1`~6)u?Yt`ch v*)͜2Ecmr[n D0 ::iWK1nk!L|Gg3rg. AW6JV:%ڢ r_GL,kjpv"ԗ+ u*5/¾+*> *֡/;DB{9OuG[uCeZ27OQRAY;ڈ@7=9ɤ.f` 9. Or: B|#J6#qa)f-Y;FL9/pk*tX +a[lKyg}ID8|G;GP*9pCi|-^e8T,{xnF$\/˩4<#~, QG{+޹NR_ ݥt7qkhei%` ~αQþ7_QF#Q`c3%h9-*>ǫI;/k/ȹ(+B=,>r@e`ܒJ䪘P|] w | KQi!mˊמas Ǟ_ ^"PX"PwZ?93L*1ײ黋nW3<[s̘LHv %z'6%tّxTvD o/UڠQs8Bvγnz#\vۂ٪^1knőCp6Ãʒ{LƲlUFpiVD`5jC}k?Sn3)-J#^yiUI>3ى֜um%dxF/ŎFw/ JI%),Rq>|jRʘЅ?:K z@NY\LGq A v_JkV$ch_GEñuZR؈UAr4Ԃz<{ dO]2RS]d*d D<Ľ$\>>|:ډOzyxǥX GW%f22fRzOiVF z#>jPIc~|baEet/[UrpFrRPPb|(aǵf#>(!n1)rL&2nwߚ6ݍ"W͞k`քޡ*Qce`&9)p``G.а DF\ ~.?M%}ytS)ѧ pPxZ461܀ xRPlh NBiFwXd̢ "<}+4{lA6VMDp7;5[?'!+\TCp>y5.þdN] *8Zɘ2+,f4S`>r X|]m5q=%.; )Ejz>ԗׄ(ٕmSRr~mA[2ҲvgsUX$Uf -QJ:[als\pGPD> ܦL`g"J&7YĴUa\ֽ]$ేyrtW1{此38Swv { +3A/%l,u6$:GMb4Zi&xLk-|e*'3 f~灾p|o- 1VE}NGQ#D > 0!9WO,$ [`!(Q. x4$MWic!Q\ҕvؼQK -CWh'J-(TwyR0.8x^ >'].wH Gz)-'̻V'ZNXB֖< sR)0/?‘&XeMusH:2޿wxQ;ᅅxB$ af^]eJ4u@saDpxjjH:%ysrka]TU{J̢I>ow]QS"LFI[ `)m{21M̜p8ճ² ~ŷBv_Z2v}cʟ 4(gS$䓔EoapayxcJH; 0)ÅMH^|3*#M}T,2^yFZp44Oc2N* ȸPsϖ&@1H-q&8u(vU,)oR$@cԼ]l Z膓[+1o({IhNĚ{qSS 3[f&U.&d $4laB%i#1> l`_5QG]Gn@ G0?cAQzWl"<[jئYyj؈brcM!ǧzGL˯[8}Hu##Rqk oON_A+?*5~[-ע,#M~ˠaA+>M,jhbT88VGN2YJ[fgN3<ɡD).=uH=$a@C9d z2Oo)xm^sTQ? g],c^m!ڶ֥ X~:Kʊ"?zRp/eu>S{dvx5QWqB8S@&$J^> Ss ȇA.C@֯lԷ'üi >hx" 5 $W̬"SyHC wEPj4dY/N̈:o̷0ʤwiSF  ]sBش)u9Ԁa'8޺5~6{wyyX?مF]XNVG*e``됋{dXc5j_@2b>MFZ5q^ mJ߹3MRmc Pǂ~^ys6oX}'hVUnX;푮 2o_#C"$/w ge+d媯:GVԀ5B7c&/"S8I3E^&%L[X]r+yf}_XT~+$Yk)O?+*\-bEcL>\~kq,$,$1I@ ,D1^cbSG@蟶4Ty[J,TϥdLQ `m)xUt{at@R}y k z v>Ohw{iT:;rY7"F2X>Yc7/\|ӭl`J̶\X 5t,9\hrfEYʖ{CwN+x&2c|XByNaJ=ڲ/2GLC@|'7wUH/UH"_=2.3nkxy)уu =!x#^BZs7]va Jv3N!XPlp@K oz7,`^IJ,|]9y͡\b|.ynG=y/Š{Ӿ/V9׵ #  m;$L $-0s1= -ء|uXu-Q[QHlF._+;1yVOkC I p;\$S]SX$( ђ#{7ޜnŷD*Ue,w$LRi4//(GM0Plq( 1?3 3﷟O.JgGiL\ #?P;ykX#WX݁Tq%w A8j\(1#G$mIj]hTH WďoCů|}|i+2nC.V>: {1k@  Rj"SƵ[Vn]*73d3RCvXo Q{s\̚ćJW21x81:.jdrG$M= D@ʺ{'86#]"qR}ZE/vϹmBD21< fIbR?ȀO*j8*I 9|+n G }FyO,?9?rMx/U_\HY0ϐp|#[ S^"xiW%cit;?HQgNBZOWm}c?lPyeVm}k?yA?730q(>VR. 3ek=m5G2x 3T,,IlG^4 :gqbX2 c&<b mIRZao-to7$ȃxn%t#z'j?RdG0Rꃰgs^YP=z+ZxMeiI\\6'l*Ĩ X?RͶ6kMܘ? T6v3xa7zXy@lY0I3-f_5t9 ߎWȥ:?ZQ?jRPiζWFp8Nܡe W@qewC-T>=Obו+6'=CK|r1j#|AڿiO,VxRۻVF*-8 85ԑr–vlWw3TlA ['KSO6|nϳa> _!T}F#!BU&&8ȶ]8&j_q-^Ǣaq3 _rXZNdAƋp+av1FT,to WzJ∛guO1kL2;ڔr+EnG&ZKm_K2 &plCKïcw ~P3$ J9m \aEɥxk\+ t1XF>M_cAF?iBF =$pBdI"L'![Ӵ0AcQ'~eG${_[/~Lq`Y%R9M&JB϶E֫o$ELldE䛭XW|٪5$(1hV4ĥ sHy<.rL,aoYm*IuB (Gl"P9{5YW:: uhsM+: "KLWVQk2_Aƪ›C4\fhPR*ɭeW*MW!nЪǍgiCUs ̰$Pmuq`>g͘:UPJo|D 2ߗxmhܯږ_K`o!o#BU"fLKv$ vxNut9,2!6\[ͥrYIw!X†#^jM %C ̅2&KT`4*XY> \zJ »TL鋑r_ywmْq2=Y62s+2go$W9enog@&v`QLq.E=j3Ykk^ӗl}5+gZxY+媯ɏb¯*U{"{z-zHnM6jM?h9=v/cw7_Eu: }71bοpD%ߧE=AB׋?&߫߱Y͔@Qnq![K4Kq5 (9j{c1Zpw,FOk40b'*4zwTug7Ł[ѿ/K毵-5N6.\o6>Phm.;G`)P6)\eCJ]VL&KoQ[ϰ8c-CaeQBjM} ])`tOL.Dg{(xɳE^J $@O/]W[K?tb@"qP6Wk(ۡJt܂2*< !fe0GHW3zɇ$ԟ<7ȃ ڌw:Aw>sewV["=6M4-+~^dO~]9jxQN2䅢N8bنbѬK^5̶S}_}zyݯ_"W+E0k]{or/wc0I3i#Tc4b:4]3܎F&`!mH;<=B R/; 8k|?=c.%+= WkN,͹Cx8YrpWobWϧ6:NA@ -3;H"@a]:X:x)>bӰo0RӮMtĽBsXUj &۠Wt.%·{)odqV-k3k [D:5F|aX5XN"I@\c$1*ު]xz*EEnr.i.8idX2MI'oD:Gw>Fqd9jc w ͋Mf)j9ޗ5V颖"TfJ%Q s6"t=tSCT:=$h2)=;;״Kx*u4'"s$?cyQgk&,Jճu#;t4v=B(NB :'6u5c Q7[FAw})waRcT8I]:c.;sݕyϰ\S䔚ɤn:[R >υw10b9r PiLý,$5IqE[U[h\&%+jSnuk$@!jK>IAנ~97b!Yަ׸0ܾ.Ÿ -i|ʟ~{Oq{G 9]l"`$" zWB1 ivxf',(?]kX5ꖏ ~Tu3 o)KLIa=lƃS }RA#EEncW[瓜%Rd;k!QW79eQ~JK tQ鞾wse+G+X#đ?%ѽ:MȌ!6$/oǩSd{%2M~5F?쏖=$xM;n<<"6^'> a ')@ s{3:oEw)XtKwA%R 7r DvjVK5iU?Maa:! F a]bMM`o f6 AĈ|#a'ŗBRG:qp[?k XyR1έe;ܿ!h'韍:Dc`f Hk^J-4x4?TŜmEn谴C6 {uaοچ'716k3k$BàC&4Afe/c6}gv➢? e!KmLC܃* r'T! ? zcv+VyFVLEչkڌ(dHçbyX Ƅ%\ur4\k3.q8B=1~6".or*IE3ro=6;b'w*Jq%;8;w({1Jmrw#"@Gw.{X>!JS)"w-l:{H)/J 7#8r;9o]hbf!J4@}7yyÿДntU01f2w$SQqԜi/TWBZڌ$pnB{ܴ*ft-oW (kj&&Kp:aޭ:z-U";n U6b\I PcٺHȖ@&WQ;eOe¸&lpdZ IVhWݳ]+TPbRy9M<%dGTRMЧ6@p='Jk6{9-TYh% TsE)x_$0c0NټzQױp{ĭvK3в&o@hyoN5=j*^խ+\]=>57+ $}2TcBup lҕĵΥ]6 !Ӎ|"g+_sܶ ?-QcjZRF% hVsNϊ̲p`/I=sK3 $Oǒ@' ]hl9m6X؆b+-'4r7Kl;һ"3oM~ z[ի?XߕUpVƝ^)Ӻnos܊CfwjԽV_C'4X^xv&7eSdH/y勝^|X.ݮG=2zEC$*H44KF-9v?2ruV?0vF*gD熮NKj ~͙H %o:g ؅P`ԩA-sQ&P,^(ӏ0Y漙S 6%m0/AjrVۄg" HI{X/Ji@IQoU:MՃ◪+eS̺~*G(]X%WU0T}ItO8/iOna8j01Qo,"rtV4iR]Vu :Q>(⿵ o6dq;0C͂Cv+bsРEDoXW@C,(qf,& # ],%Q=5g44|UȤX̿d<j,{Ȣ'(hF_|jTe/ T0 N@OEmbBU~<]ؼoC~t3U0JgF#=\㩈#; *sz\~W ";Man2eΖ>~l ;w.c(81%LcoYI~jIe V媅 9a)"u hj~4gq6\iT'8w nnLȷc“Cpxp^&VzНl[0( q(R꜑izP;RB ȢUA4޼UE/>|_M.~.rߵ?'R3S-|K R&P&N9/}pv%I^*(_uOOZ5 ڝ۔UؑJS\И{#\cK?|gSV>>Oy㝧9xV]g,5¬ X5V`2Bzsj&Hvj;\x;L<$&$ّ3`аĆ2*DIX5bE7GBV@)(o4δZXX&Ch9Uj[U4jyNY hfIf4S|C4LjOsْ`F[!LD;;"s` xjöjXw+W ȣ"wxsP"V#V |"*%7?j@.0{ jßSi N5ƃLŞ676ޮ6,%Tr\їekR'c뒲ԅbYgXC? PފXiIo&'\F$^0xBC@tWW u1kjlhp(Vi'4n )xW*IA8H~6I!B>>4D;gKfpD@SX*=*0FW){/(# >;`]'x1eE9xؠ1 nj氅3'_!DN%'SP~V:MyD$fN*oj(4]XNP(Q!,k&\C>h гt,Qp,y?C/_! G˂_Ηm(I/i'hKO:Q'n(~QqTeo_5~pSf*`T$,Mٽ Z`7$xUrL-k`yS* rݱ`mQVc˞zPoPPœ,dTj+4mߟb-47Xky1mT'Y|aѠ +HUݶAJw9؍)Ռ -ƏԥZl֗2Y9./3 Y+]pV^J(Dvh\eˊ!ei]صM֒)J r.y{d&\3mUϴ#D&Qu*hZs5OBږqzY{ ^_(軯8pav@dZ딺JqSO""0zA-*)Wi3r4d.PP -|1`_dnsV$ΧﻣU$ˮ=25HY_J&OZ~&/]=sNp}{)Cv03ηpjst,!rħ(ee٩,yZ7IYj#v .sJ^cJ/2jqЋftiC< Y0EM+l˭bP.σɡ=V6s!ʚ!dՌ e0¬pqiԏut>(h~ iݾZ1Gm/A5KBv Lꙁ#5:e`+`XUjƴ8ĥ`wа-U Mh2xg:I4&߿ry@ƓtZ͖w.|c1*5snZfw13fU5ԵS.N{؂g 4(q: wo1٩LbjT^J@M8 .S>_ %P2EG47f?V3Q=AZ';.s{z)cnXh-q" [5noѠ׽XoY5 ,w?T6Vb2Ҷ"~@Ye)! عJ4hMa;N(MyzdPEn0KAR@]<(a!׽Ao&\Zi4B:01r85ai@YbmG?ϊ%Qakѣ2EC׏=SJ]N 0m `刀7KlsնSc[~zqبX= ԕ5&gȞ=j`L>E 浮c-WXevK.wjm~z,|m9<2œX@!cx(Wh& yε&׼]BSW u4v`ZʣJ)$˽LRn+*+2yef"7±-w6-Hweibsl*Oe-Uy5RV6)(`gmonY,tIrW~K5,B81Ł\H*Xi3mgɭy PrxO?lncn_/`-{l$Y:L:DŽb-k(3F@rsA,_# %rLX~~Z^=UY?0e(r Z룴ADAd#PG |X<31u%<>Ķ̂"nȥ7Ĭb=)rIo!~:p"[t_6lɛ-Z oR/%R65vٗ_,lJ8|>b:j{6$6-kS~IN ^ic32Yb&)|(ZF^0 DvOKп&-jw8$?JvPZZj_" A#L߂JsuψێO[K#%ƻ~ 83+2>(D|́7Ғeʍ.۠ZQI a*CNvܸ^@W#\&+TߡbzT3ϙEO,9:= rw瞬?bS'#ᐨ*?‘3V#Ө'n\) 9_St9S*`T$&~mϐХ/ʌ(3}ώ7C5ͨ097D`Kt91_E78C.q6_aFVyՈlh$=?9avjRnxP2؞s'r :8v.Yн&2ɒj(40wU-jÌaFT'{+gF~GjbSz̒ŔEOuEq }تxRlr| </[aSXf5$yp\%z$@ٜk*cߦr]F qZwr{Sb™/H 9u OJ81U)j%2 ,p*k=싸f9}qh>Zf5R5sNBwkz$uAV~}_eC5 wA%eBBl?M4zےJ2#Ε ~CK*Yd}GVδy )jEx`д9r bu#tiz:u@!ʳ`u7#X,ٗQX02D@Yܰ% *KfSk;L/k!C^?dAa%vBzIz?EX4wwFmPӳ"R(b;c=4N켈tϮpCRO})8yHa^yL:}S56NH&|GObL !_eg0eR]BHm=Wzy6oBϯ..`!`@ JoPPcEU> lh8) "VڹRcՇ?!OvYn8FQ &MT7^JmbK-pξSrղ-VGE2T|>}0+|mb<#&u@1Kh&_qUL:;ȃC#9]6>lhCΚkWM w8QҎ%X %Ld!twA.׶zC"Id8ޮ!7W;ֈOV_ O-p8x #=lu]c8[֗AwQ dbai Ls$]*cbv,!2XqHOp#uǮ|"#D7OsXP:WQEx0^JgrGJߞL}L.f<}Dh"[9@iZĿFx,Y&kSZÑGy{ EpG l\NQ)Mh*w9 Rp+7!&c3sw:q>~8_݆"_J[=WS2!_́`zRk)j{H0Ë荱8mlEbp~S15JxeJ]VM((;֕QF$yrHGY 9$hȷB@x,%؈r_Zs]&]^귙ѾTzCWV|'Ǧᛟìj!0aԵg֧0p'EZ# \Dl%]rZfT#hXlk e|nQ]$"VrbSOnVE_MFRkyzvSB-=C+>?˵:[n/k"35F>gKW XRxj\np9Q0'w80 MXu4\j O,_`D٥!tr*B]b!D.˵b]_2$Vd;k5&Rcҹ>R7m5=^EYƂvl=_3eJ|cە:zEa8V@*q\1 ul<פ_b=[_`)&ٿ('P<Uy82xJWK@?'[Lϳbn(見,-CuO9'SPez2hRE5 h9:iz X/|Sهf`'-~5e"*NR}I“1IV&+9_vZ.]_ZBqzBߜ%_U!eL UC-ЙOPoUP fE >Dא !Eag =d~6}H;bX 8D,߼ْ[{aiQ9j sc89vbj U? 4B&f5\pvŖs%pDvXƙ+O#WknSPmJ"q_DjVt~`i-#uV\8]]gsBNzItR>{.HlN#KY}, X`dyU){Y7P*Br(oRd/z6^ :u8"!8#fMǕk$ziLZ:P:>mAkOT3̓kLqCTeP6Tq#.Yy>}uXcV*6֯s81șc1;Z8`x(5ޟ &FjX; Pk.3#!6CǓcC//FM91Gg[`P2Q dyEDgw9g)_UNS ʥ >pj?G@WyN{pZ{=u4GT`!]: ` j亾 ZKe AtݾV;YhjV[G+I-2`4'&!sʯ5^ 2?F]6 6spk Jz9I$׍\ׅ T֐S%9zl5q$w5fA$/ࢻ`x,aڿaK3Na\>؈mι.ƴv(d mmA7zVXDCPEF6)"=K|.>N)~N}z5qX?Ul3,x˜TUq|L%`sW;֣O38`v%aD6JA|)ȭQÚ<в{ l ֦e>9ʦ& US1?"nj47U3u=P=~|2͠\P?Wbi>E;ljf.;bz9HgL[z1ӝgι85j 3Qtέj^sQM-N1&Ru| " EbQmT5$۔#[’,֖^MbmQ1](}# ^0I(vK,#@JڏQ Pxtsw7b1v;ܸ>X* CLmf(V>45{JP|=W\zR}F׉ Dn 0?"Yz|Z zO)rɎz_YB D$@& 8.9^v}耉{zs #BM8ELu,ɏ +dił6wY*)*T $=`2ΣFz2^表HY?TQә"yHf5Mf܉.o[ S \{˧/qg"OQ*l~6K)l5qhţנrvI|eaL1Rit9&{^}U._dex4e-Ip,"Ba+ *o^bkg2X0S*n&x@0|@##z lϞn;V>v=u1z59E}A(vZJAE+0n$c6ǏSw-Jՠ}1B_ wr'pТc){H? q-͓W--CHqJ*R {Ђtsb$g`xkP".c]6an&C$Ùuj6EV1u^1M1܈9IVx+p R|w@ə /]+Xڮ``X'+fa+vh y<Ĥ Ii.I#1t|SwpcXy|ۜ+>:;-={iM8o\%XX7-! 71ae4Fx7Yݗ$ډv^:*U|jS/˯Y-@jg5*?fW$jJO &"Z^ M}ZDёovE7ÖT y[]k}qU LAdxe6nZx38%/3%1qgE(͟Qn,|٦J bժY94ShhrJ],~ۆȲ6UԹZA<5 QID ?MUZ XU1V _Ou-DKlR距bV^5~ >͋{|hQv?츋s.R:~@ߘ)F!$p.MU`}$"2Dhx0\WJP(U\GiV}%SL3,6\uʯ\YC O.jA:Wh픯}c\ *7*+ YQzK2#2RFCO|:ۇtp+R@tn#Y?ǁV,!2+4uz' 8S $u,H ]:Y̴oo,&ZR<̵|nџasIDE]fOB oQ7}HXG!\`^qTHʵ!Kr+$!3}ݾ,mnwښغ]i/.\}T ;r+-;Ocό}9oHmKk&49lb6w[WHPhYQp}jpKfU@o8+.T3b2 SĂtv^Ϸha,eVaXZʀZ#6hh& <ڟNxM!听.Ut{N*nAyH6rXDd!« {%-P51b XE|yw q)^N(: àb][, }֔pxzKDC#+&bʡ`3qJT-^JnžCK Oz|Ttzզܣ%ʕ7fvjW:=2-qHANfŏ\fݦ;[p@樽ֺ+Ѵ4E˂/ZއNu]͆G %HpS!a;d?KJdɼʬn;}),0i2m&|b/*,LK0%. ¾aFhΩ)Ņ:i"QU5K$`'gG!ܙ\od̅-?rl+Q}G~[ ͔a'@iL)te&[ Ŕ7<6 [IQ0l%y,{%JHaVʁ5K;&#[(+.1ToH@r=0C>)eoVU{b6% wX"G H 7I{$!HJef-~ފl#pcܺO:xc.y Dv؇[Ü.Tm4!;$>{V6ȅIݩ 'tWa]{M M;ʨSqWso/1-6wF/-4^ޟ;ziW:#߰,|mVZaSiAӬ*tNCܗ q|}BJ#]=b)]]VK@"kHt{MzU~ ۷4]2`C85(! X"c8ni׸:S.*1R¥W@=pn U=%LP?'Ro()T体ԽCXƋa#ǖk=g3)ZObT||&ӻ|KpKd{ѹG }AmZ$n\\^م4&kIYHV~"ad;*v]RߞByglzފ$Mq=z_HVx.OK*Ye";S(&'?x yłQj>HgGd~$Cj4WߋjB l!s94%QYFFwI穔ڈYvnU8 5ȿ<D^ D%.ŒK^c:.}o{rmMӞN;̑Mo}*H#m -ًKdݟxV/]d->q hQ_Kw2ՑE@~cE#8ۡdc?Wj&Ps{,!ۧ4KX6qʔe!ô5)O$gk?I'#A65+qja68~>د.S;3}#A;[5w>mY/U1e羁e^%I+@cD\o`\Qǥjr1 ĝt?}&gY Moi)n?>]ZzU.h% Ec6/ٖh:%`mFn2N:%` %%^.a_;||> 'piPR` |l$Lm QDsv+}l~vXs 0iC$ Q>ᘐ3j)N 8ܵ 7 @ 0;K#f1%Xߋ1۔soT#A ޽/Ա^~©IcÿIKMúںMmV8"FUKnɎi&J, pi2}!v->ѤH4g&@I \M25YzEũ~έub=;E}!m%Y`#fg{#zeow0ג ^ERT,47| *)[k>Z-›3$|Hn<_3WES(ѫ`G[hsw=!0E܇GS [:%LCW34n  9ZzW:> BuO=՚tt2W@BiJxq n 4Ԁ7@ {WZ2?Yh-LX܁CzQH%p0}"-1v"uK9Qpן_Ke>0f uNK1WK)ov,1\.%rY@ \g\l 2{71vt'y&7UzPד>?#E] `/xy]܀]I #Pzc.%Na(+єW3:xR>׺Һ.szHYLXǷ?y2uj!O_j&j )tFb]-lUA|t^,v:ۂf$>`TF52 :LZ`XmB| !tҭA0ʨe4$& B1&vi Љ%oH+ `n|FNf m5D)m3Wu~Dߙ>6$t2vB|v6Yo}[<ˑe_` פlfzJi1zIRvUBa8vv]*ݓPϪ ΜC YKm A5O?lk9?dzYwݾ¨[>@L4Nq#pL\SLtԳgv#Dޠ_dnkw~{Il'l&3OEa*T)$L)e#5f*@xsz@/ ZI$163vGu\9]ٽqK${*: yOw{7}n{khhyXU+W\κd5,H #:߁>f>Q!DR[:x[Utԙ*+\6]5# 5(L|$\DI jZ%SݕPwi.CPEi{[q%|ehd,X7/6$6C*$Dy{{(neVzdդ%Ҏő}iI-=OolR5W8v3B҅ޮ.xaڏͺYwrHofYx7Փ 3AIO^ըu|J#~.LlJ_dF6JÊCaj'(wF,}$@ASVIZfjuT1,ۣn2Fu]҂Y'=pNu!f.BY2Wӹ{_@"8Z}x}-Rdt]\Ik#t 8W&sx!$aƈTS4B_{Ѥ0C%zI-%$Y| Ǣ {2 ף8L}mB/5 S3G QJ+g9Tg-ۑ%*WH..};RCG  ?ia^^S5Czp0}f_TF{Ԥ1/ Αz+qޭHyG4Gw6u3Rx{Dc]S ~\\.mPUWTr[\ n[&ÿ#uT<5h=Uf:Ț ,^dV~QV{L4T͏{35LTĠ(to*Z<^ Ī%BEE]^{+خhcu^`ӧ3CnylS6(ڷ/2UPo25٤-GȞd.b1N҆Pi뱃:}y|pU;o2' U_u:\:%joCzNfIS Ã<4,4yF|ǎ@ òjn\n&`.)Jch8zeKoAbW'G%)W &R>]|xvI,㢝5|"j;yu/{:mN0Vg)≝^HBɲ,#c2z}./ |LGԌ<> b=0JW771 }nY*+ i2 dr`,v)PD{lM<?=K'Z!K43$i:j [>//Ꙟܥ!С^j[Jilvu3r˱ hF9j py4+QyirdҲƕ^l-GfI"kJM_gs;U__TeAк_3C|~2X Z^C.;8->h[\OP^2 gJؗb0m~Gp7 r_S%h!3hpH{@2fk*S<~F2e]H|犂5 MŝEs$Vf+lS.N+dJ~SsB` $sp;Nys0t[>e\ChI?9+Jvx/F6@=2:vgٛkVb_Jnuʝŏ DӨo,g&YE3rr& w>$щ/rb=s#HBMV2_S_yD {XʹT7ݾ*Uv!>d& xi}khKKNE8~*#I)Q0=6[ ZM*_ >N t- ;=?S?9NW5b_Ө(T x qkF!4t;[s#ԧN"y&VסkYЎPH9%o"n+K\m=m bknԊaAGQ#xWD0ܓobC#SX<jφI$/*9KJ](FJ(l!W񩌪Riˡ^֝Jt@׹rXm%Wi)s;,;XUL9>;q}e`Y8rqWLht('N+>P"$u>s$/֙*ƣbg9E)EXOiDE'1KXXwKEL vݏ]y_S, V;E2fJ8@+]g tha :aaY Wz))`'$K$`RbÐsxYT x®ߐV`_ݖ[W|99J[,)F̶ے]VcC:,L\?j2oɍ|bh_V V<23:+v)xLg0 .b܌)5r&P-&fMxT XՄ@(xNƛCr|o˾2W|5F-JLRtaz Xใ]ۼ-ꆮQ\hSyHɞw3 oJ {ܴYknX/<㲑Uƍ-&8d2YCPf-˓W1^z.v\س &8!/H,Ew֋A#Nv Lx>3_-y?8Q/&!~N&iN^/B>*L=WzAch@磌79~w2M)N_-d"/jwo>\ ̞G DК  S=|}PNGY=;h:[۾PZ&˜x"&'Kx塳+]E8uǥ-JLYBIeߓ Y]>llIJ2ܙgki ٷ և8tD|_VNtBb1!fHiDMzf9r^yPUNf؟zL&Ж4 ,$Pq&eƹ-:+Wg7 h8!My?"Jnw}PB3kq'1?#{y tX,lrÎ[~(t;)C -kP}Q$KyNB9DP% "M;-/ʹH6B:  }Wqrá$_3w0OE:2T6 NJDSrȅnH a&@j~<\%%ܐn5xk]U:?o џ# (Pws0to=ًE-ƿoU-o=!|C7KŁ# }2 fp 9J%{ܙ]ڃ/+2ŽM¬_o4pȟcTNGGkH_E^b|ݽ/(U\II؋'ţthS_dt`WU +-5ya.&ٛI YyŶqT_%-EcmˢZ'6' -9%/xL}p+ UUw3jWJpcNc0nRhCcK8EhZ%Y. lvL~p⚯3S<1o ܕSJKDg ]?vՉO:l,;Ao~>G,렵P;?Pߣe`7qDp?d<r"4 E v<*0}&e}/IƜZ$rnLe'jڕD0-dorBcP6&vp8(oAkܱ`ISvݛ4K\?m[e#^u2h)4܌Uވ8n:hiN@͝J6 `Wno;9z]Ot_28a /s3د., @列̃Kbh e>s. VܴvG(hdW@ bQ@Ύ^g~d1" {E=6@ n`cZ=>n8/BHb=v+ce|zGBM2,CyjKz̤*n9 ӧNu$ƶLgUfM? Zگ_TuW&>m?GI'eX980\k4=lBU*"am)b:+DVn9L֦q`^6>BWO*Jranz%jSWr*A=iGllqL*4_q*+?WÅpKO=L=9dD*G̈́p Cc2O:2?KrKB+n:>m0Z^OA֐l#]E:xAE)r-È8, _0*rnh(0ebb> _#/NY=8#H^Z7Cϻs!0lцj3oc[nbE5=78y6x' '[{fK=Ku{2&B-;4`Z90Al8̃yS0-XlP~Ⱦ{6mdxZl=qG]Mf /;8@ e( ]8,T&IkRZ2X _$pB(&b D[Y}kx/=u8gP~oS;^RHT/a&~P{'Vg$nݪ$]um*i7DVZ H6{>Q-\ D˥*@"Y r 3,#xX2wY|=4-jyETzzghܟ~Kb_St/ӲZM!y첹zk]3!1Щ~@(@?BX;\_Z4񢝚KND!gP>߇j1ZYp* *o}3[v4isz);a ꪮ3k4s|":Y$G ]OLf/Ļ-곇zedNxcpFte.hs m긭Uйh/od w aC:qk}?*̀7!/! OуsUFp9;sGN!oީ0à+=5e'  lq 5G b)ji;G#rwPN"S$Nͦzs cgaN6^I va\eryZEHwڣDn[U`&RzRl^q*e'.ޤ,[DaY6/)Ear[ސ$kn9-`271 4pvQcqs+1?;r?m5WEք7$zzfig0厡B.bn=LRLLqn7cmԠfL@[>-:著w㞋}r%=?(_qa&uV`AORw5^45߿>9F0Y _4„Xl8gP#d@C&~8k/=l4WƄM6x@H=%VԩE:vd:X*Y!FlDHd+m7V~0ė\\xӗpMBj mQ { uj-+r+b|Mw 3 + &1߻g#a'ZԻ 6Z,=eEz*7B+ $Qfj/tH ZC5'Î-&~79;mh `?mKCw/e2 ݴtlxG`c&'H 9 0^%wER)Ӷ AzrGe=j+汔 \˥[y4~& )T0άA}<hp˥)zaXe^:L׹VŚX'XH/"G]oB3<(1>EQ#`}0ft=τ6FLqZA~䱿=M0!OfQw)YQ- ;#lc8l=(;5qY!)?}OTb@ 4l>a_kGҁc̥^ro+}kjBTSj%5jQ7;\:)$QB4_GFHȆgEs|$4u;0SXTO{qdq?0HY?l#!,B$N)UjyL S\]0-0v%֭J{q jqc_awӤveiJXaW,"/"6p2tSad&qp}J: y Z"\uNR0, ÙE5R\?zoy(/UW) f#a5h/Ir-@r(M^8'ݰ&>lP =6DZe;W'aKXBi?:DzFyI ^{ZlZn'TldKh2ߢoHQ9޻hnm*,T`tdj/(@2GOѨ]Gv˥qu!@l^ o"TJWɀG`+hϳĹɜ$}`S-뺈C Mo#p\;W%Ll]9,&nAG RqXW~YfÑ2SSc\H1Uflsb?7)oD;36o }|ɻo'hg;9s`lEvV # )q9p_mȠu]w/C|TusAŤlh㐲Vd^ddjKncvxXF@e}U_˕x1/% tHJ#0q8H_}]=!7"qHFK0mp~vr:[+a{$aL:^|˹PEѾLdm2&;;Hn7$] U (o 8V$:Yxg5mL%VRrzՄf]CYq9O.b92}K\phVbkpI\).- aۣ}yU鐎;K wR#{'iA8?_KNZ }ɳduPjş>nvgxF E! 4rLA(*?o-oslj_ԍLajt$lixKIlv4M!{l#_!=r/irmTs<{\n,&x{>G{L;(ܯrsH,1`#V8e{C}i:<4 Ip(*kayn*/65NQOW3pcrUTG8mt05~I#hl Ū@ &}_J&ψO=18INO L̇d[Q&s͎He2I*zt sM.Sr*qlV^!aj˕;,d全t6h{fxtʁ].ڗu܀!a]L]E.N9:,0ҫQ*ȏ nKZį"L`ar5e6S`uHZk5:pawBLo?󡎅 f*6YK8K'e'pA|K_bx9|A| <%n- ~46GLXsih,|XDmL5fO*ߙ_)G\&RK]O30ju{Kx/4x Wt(6N 43KOJ2%r]̦{͚0K{B0ΐ%H3[`Ü߆LE8'eB,Buadyd|pu#MmKx=ѠzSʰB (TBQ'=N&y}\!d͑yg]fPGFxh^On0.ށ rjhzCJڐPw?^ݛ~+j킧Ug%Cd 6 j^i0 ߵ")$uY ͚.%Os$ӝXCgf+ƈ;-S~c{Ehސ"ѫfsvΘ"$qjO3dD9bnZ?ƠG1{;|HvfxwvulESZ`.yRdKˢhWwjSP 8و%+eq Mm6 UM̶xʲS.o&A~tAv,,t֎Aʎ;Uu?~nЁJG96f <ΰhlYIJo8m8#Zqe8}YmZaD;+)rED@ZyεiTP_ڃ~1b1Y=~[4L`4"uyDobgE JtM7[DK/\o\p  Gb+J%Ш'CEtLrW1p aeAh*؏潄ȆcG4R9 fUӚٔ-_  >X=adkdHriݶ/_W!~NZ7O~!->椈sQx,nʘi)q{)SN(x 5 H]+ϏCs)|c!_|vQ&^\<M_S<{&8H,fBUi|RB|N,H=(-EiL#ojJwhIQ}㌾ WfPH'c'볱z8Sߐhrclfaƙ\Htx%̒,H=vwSԛFd>^Vb@8hp:rۻ{?+,`y)A`P@lj'jk5Q?qArC.ރ#ug[~XVbvnFIՙ=dC+(w! %< 6A3*9A[@,SU~k֊@da:w[/O?NLX"NoilH1_/DB/pO5 aȆ j((I:tݒl~or0&9s<~{7RћKƇh3}VbVG +c+ >s)wnRE.ǢOa3>:>x2Xݿ|V&G֙p`$ڂ¼%ufqǒ_az~4M /;ہ] &׺\Ndv.w(`Z숪$qBS x4zܨA6TɰYe[֫ PTvE${wgf-qA=iT|>nNZwYnL#o龜V<~AӇ SL}Y TnܷUE7=(׼m4XP WN81KՍj +i9I, yO|&&riO:K6r"%/lDyoDEa'K,4T@ Xް$_ Elk+ vd Z\ؖn )N`g!+wOsi0SJ> r)-fqc7|CoooK3-g^Y;YV3٨HKWrO1cNC5HLSQϜ5hWA+K_Jۨ7~M J#45+wVz@@SYmVet=n2Nkp`N?^xÑtƒ}Hܖ|bݹ.TǠt"lD|-$%Y5BD=Z&QL9Ӧߥ݂zܧ .s2z T_~M0tfžlY`1H/">D. FD }]Wo6B,Tg4Xԫh7E_or/JgH]pkZ{\ ^?G@#zډ /p'={51=%ACϞz"M c):Ku-ٵ5A$]cjz'-2lnX&ٯ.(qJ_2"o[w}N+2@u 8 '<XnFR}POXhkF5'dQg'O׭%NEìդtj\llnti^s)*㻇nWzngyY=|Л^{bk_}V OcIEu*ri!!.%?+w^{JMdY%F)oH2E _r@z#6:Ǥ+iy]G>HuKL0"'x0lŲ/E}%eYyo4=qXUu!8EO#p(p C?iQdtb\2g <:0UPvx,w遗%\cmW"1qcАWP}DC2KPUy*`2K,2KY$HAa蚙⢵]pWuubxw(Ku cK>3[$o*H-\@;1 ~iPge 9 Hu`T5 1^JV6PHꄌM5[CVKFu0X]9o. ;upHVwROCRj>?"=8nXubg&]}z#45]*Wi #H\K~Xcv8'X F*p| B(dm .vOSR`ݟlj^`q{EܠN՗͔CNIͺڮp7(QAv ڇLRIU\ 0;*ӾHGT`၊ۣw]/pG z/fnNS%a&c%`߅2tYklv(FJC$w.RԒL-JP$$FVl Y&&Uq_b0OB]0#5ڒhr*Vz!Xڸӧ]xέWicYDAje~֓q(_7BK/#:_ C^]CW}K4[mG6B,Ҷ ,RnB 2+UnXMX0 k["|vo-4MHT*33Nd*CS>vMt̐[lEcG7doD|[ݜJ/ϔ]avfŪ0apdkky'tX9_RT4e`s wUim3.Nkd /-W&EI5nQv϶uh޵~2sjN_nIkĐkqu:*7uFk_}E߾lN@\ՑA[aEG4v>ooT/UyHYHy m3D∮7tR np }T>ӵ4F5t`1Usi[3(X+mS%I"2+c,zIdTP0;')Q(_󓳎{.;JqTD$"7¿W{l-fFd]9tqB,hџ-ؖi" G2%P̫sgu m:kov@JBrIXäП s51Nu|߰2ܳoJgfuPѨPBWSޫ~8iYn^\|Y3m $''6t8r&)h+Lt\3Y]֛< oT,,ZPQk )O3}&rGԇo+{l vanmPbw؉OeE:Xeu- 10KVƚkNjm78N/NDq/{6 h rk$HzBu_ qwM`8M2eP@˨3&2͋%%6ƐML6 lC ÐX7 T+_97ݒt!վ臽Q'0%*또HDU)kXnr_vcrn_rv'R^ζ/ ؤ! n%H\:pdMDE_ Rz?]\, c&os_˨ ^CXM}wPWbȧKnނ{tЀi~.]ߌ@))vz[;õ٨?_+}xӂE ~zI%HTJFLg\ D7iG֖L,A(+s4E3l P8;:/ t!le5qbf, t5, SK鸰)4~ uYa\xPZQ4.hOU(ܡp#330uCc4Pm*oIhvkUEHy+ JZw 2 0ײ_?Ȁf~ 3b \~E_re@&ʮMz'uO/X3}K>ꝼq-XWyMBHOq9+A : _ tdU.lw=TfNzn,YY~O[93^1 He\|^y'7ǯN.[AXOt'@n0>~TKJxH}Aqνkv~X<4 AUG ѰWCۂ|d֯8tӇWoN|P%mk2?t~+@G}5\&pAIJ6H<Du{D*X|OC=/R/ג&i6 "+6J nsbLX0Q >n1,>MEĂ.c4tnLAa )ZI .>buBn@ Jt%>eў0q3!hHo5x$G(A`tÂNKDܳf"8BxS辋cin,'Ά9m֨%y4|Ռөx+r//nSF307|!׽#xQw>_Z 9USd\`nIkVyf%PP} ]\KDzcÏOZU!^N{ʛ . ߐ+ xq%Ԇ(!GlP3v_)9DGGb59ZTǎAcuG+T$ V]NSA I+LЇ=ymȢb' wiFv9\0ë.l*71L^+;=y'f-RK58aI=n0ͫ ϊZ ݼ;F s``{ԾUF%ܴz[R8lMS>˯`;Rufh7&,/]N7hK.AⳆҚ^*6竵rFB@&Tt>9yc 7ʵat;w/940M辠fK(g(zL?޵khW5pfl%0x5(4B-u_Z(PM *:^qx^x])c/A4ݙY}8"xf2/vǺ4AYخe׿`Y-Bup>q#vW6wīW`5k)+AH 1qkMiEo'zbD2T[lӳQdQD/ `\P'C/:N0ߒϥLn~=ǣaOQ@fWnI%qk¹ngY&9*5%i&K󻊌6HV^P| u48wȃ~+&58~;6gN',`[B,A“;.\Fȱ>+.Q9|䦍sE8!By2 T^aD:'&ٽ'dgVu) AA ='F,3{/)V'Yr ȟm.8"J2!Ϯ~3zkf "ݲsDn c6%lܫ|ܟG|AHXI-$0 >Y]7I2% $/bXlRK\)89gR 8Uӑ"4^PyVIJ6Ώrǖ^?x) uZ~l ZaX pkgEH U,&zȾcm}/ "-? 6\/ ;[3h0+3)R.Z3xY|tGRiz[CN2jͤΨzMe+hBEسpU?CH[ (^P.tgpcwXdpoC>(O Mue-QsHltl|{50Lu_ߤHjAÃg m?czF.=29k(!T,|MY'\beEs{Ѕ۽u[U;˥k#lStZpَ.d<޲0Ov*a9E0}u{wqcye{=aP9̣H~P9~RܜhF,65y' HK ^twS4 mB(,-HitJqݏ2=!!q+/7v/e؈:*Xs!MB N y бKJ`^{xj'II"hfb"9ϸ _$$,hՁ:QUj.mG?'6MT?0ekeB5e!һRT[TgEz8Ajg晖G9Z^jm[h AIC"ʽ0mxpڔubOsWY YvoތLjiv; O3%ZJׇҽXlAtgw30Fzr^4qrIt} ?<+-9:})>($٬hc fL dM#H,,r[Ngu8=) |ф SM8|e%!z42u(/B 1w4~KBpLJyK/ %^An,A Az(Vi5َ҂ݖ!v19Hz숺{K;$=7e 0T.v։O,4`+dP\G!5^hkk)bҝɞݟ!pHS}HgHB2XfPɾ4s_v xr7GT/~/KS?jmгп7XCHYaSZ=\ekQF! 3\[Yoah C?gI!d Fd @s)RXLSuظ$$3vQ̛@6*b^$==b&)R-8^& 7t]_4nŰȗ)O⏲UjݢG遆*x)5_1R2T(.x }@JP$I'8>ߴSX KMaEܥ~RXqϿpz^[!垍 .Lj.qUacA @x:ԀpY \-(3ɮ/dE^?]DM|.O2}D=YMӴat*; "5,sRfĄ@XR-EDB]ES`&3 öNTO狉S[OXԨy(REWi*q(\mTWiH'_%/N~||YÎһ mj 2j& HکŎf=,/+c5B|>Lj:K,5m^x!6s$v'9^Sk++#dN"@=}crΙh "iB`B3_[yM!^G1"^ r؟D}u?16s@vg p\AMxs&0k"1Uc0a{(Fʪ@gA'}ivģGh^Fs1={C0*j7n-txKk§t!زNu;箓5]5U9cV eU#:>Md>ٵ'_5ZO8UPu*hpeC> B &jtNrOۘSGZzYnGǜy<,SR@ik? *K/,`$"3[#̼.Y:Y֖m8[J=)„ɖcͼA-6Cٻ,:Xb'(@% rH>8[BцU(TnvM9G~ˆ:mmnbC8%~tpb"|#א[0P7Zğ4(HRXfM( O{a3^IߠqH ䷁`{ D~^nZ:3~!ǵlIK^dr͔-KNR䠕Ab=5;` ;VRʏ,88^R Zp?exX9岒7|;Fګ zCXMh N+ĉh5F'g:f ?(J7) \CI60(NBq4 œ /jS:x0>d_MCȴ9s>nqd^^@?s@}G={"@QZH$ar2 E7ŏ#Y.Nےy\Y:$/ wp \d] #]P]xHiŴsZA:im`|¹{m?_Er!;2qbVeHV)ƜyZTD]$7=M)`Ng8nmnD㸖V.+Ce.%:Z= b]Orb~.K" FfdASdb!Y] 2Ә-u!V2 LP@ &k48'{9<+M7 Jy-ఎe@-qBl4r&dBn L_ ݿ|)Mzf+c! c_q/]R?TO1.J,}E T,yO/l?s.dIߛ&e:Fa\DXSP|.ŒQK*ɲVzs+ deƩׁVWԏ&TPeaY I*XMw+~5$zQ`'˻܃t~ƈ=Em g+',{kɉkC4-XqDbԇ"l..;9nY=B[q4V2Y˓h1,0 $(ܙ'MX@ʴ|Q0T#bT|ĆIϭC.kXS )8pJ(>R>IU rk&VaBN*,VFJ.( YS6UXxVaI|'kv[2^jcu+ԅ%dzL='6K*F@!vkv/eW_PFgƐa7SMU^4^ED' [ ug1Ƶ,t/6RTcQ6@b4#InK6pU/vRgV02״ۣg `xH3a4[v_}jxMkwJBYrp\E8 >cŤ <n:5:e.ﰄJIVhO(@nD5x1]]~׽<хP )rf9i.͜kKasgEk>h#Q1 U9ݺ-H;]v[&@Xw!^2rL sAJ2G>qgj(K^`3b=5. @oL~,=+k2^͉yK-܆򒯖qq5o]pzKTQ~^Edうw߁j-r §`LJXiAj6OY˶DÊXVRw$?GT"x;Ame7cȿ];3T1Z'*0Mt#6-Yp; ?K,TMJ+<4IfQR)йIW%hgUf-[k; BSWFAF墫oM+]HxrBO1E&Eʻ_28 g>Ko0H'Rh$:A1;D;ϥCxH,6yK#0e,xaG@ 7+t5[]ܣ1>ie @r„ D0t<6\l(ySfF+\VЙDh3HL}O[h OӰz4PDEC<"TVvÂT[b kK9[y{0m7 ۴1J^-YEI }?7 G%<3MuRڕ~Nώ5eh!D<1\tCANa@˄ūlv>zAwWivi_5=#Su74!l*J83Ŕ{j^b]/viio >gP*I?GA!>x>;_Qw^v>4Ѡ׌є8ŊlUQ>LTCun f y qb 'Uv7yea un1Q.fo$ҡgT0`> <\ͳ=Yfp߲a]7I*f%+{FymݣO-ΚtL;h~|Ⱦλ$wz;˴eQXb˓sTs_9jS)0IGw:&%5Lh|rf(fϰw`,{:E6>$ 9 ɀޞJ+Co~>ؿ49~t= ˒vݯݨ}Q`5yHн Swu=oPBcB/km%r'@[KNAPA4h(WiMz}z7U#'hgw~ Qwr[ٱcXLS?huPFp*ch7;>=7$|ӱxտDK6_ІśCtI _D8aZʠM%C0JWA mm-i5GR?tGB 0[!.j߿Tץ3[}u+$Av1/Hjvm([)t2{ܾ.)Nxth̥0 / l^^\t F%J ~j /v?ˊĄ$e7v,[}?*^oh=}N 3J6`HNLeg^N> }@ J_9>0i.VIg3 ͫJ?@Ņ/szl +(ze/kpnyk>os[f.$EX=j,Bq~G^OԻhnyN9}J"JL^秽4qjDMɅ(dnx1/Ԗ6@4ƅ Y̖S|HKK8BV'a y6ldTY¥J=dA9{VPA re+()zGc޷!t͵w$|^˙N 4'X#|yD^ ]mǬx|Kw/Lqgr!i෱2 2SE@gP5>06gđzb*ʴg|Zg]}s8$s (4>Ds/Drc4>mkHXi ?Gv-#Wh (j\H($8$cAw9  &/ݔqYe\jxl D6KquqCٰbˊAZ(!$jN̛̄A VUU#V##2EV7Z̟]ifvV3'/*34{68a̅FԮ!`4T\20P]]G!50UK $n-3]|8mRq qLWfj]B>F'y a>\z >,m2 1'b7'm~;ͼqAq C>*K|n SkP)l8z:NE'PSg+GE9 0L.;7ֱ`*l,ᦴQC,qqLJ鍜%L?7Z$8Er&N\Ƀ =E*A<5 tF#wrP] @0H_*(rCARY X %/_Ǎ5D'Rᒀ"Fx))P}ׇQc|xK0c2EȪ[[῝vh>GLWh1R~@T9:JAOiϺԆ,s Es'mg2į\{7HNgZ"=@.,|sf[R38LJiFQS\op&2S}_MY*±Q_pT+#)g_:Y 2cc:YieɧP[bzE "yRJTjxma8J3yJDumɋi ]OC댵¡J7<N_1:$b|Az/ґlpKQCZ?ΐW4H`5J:%W 1Is/TebjZ:8K8A'm4Ɂm.VރH n~]=0'YlXеf$zEЋ2bÌi?/KNAρ%[윟p:'v8qbiqfUmLIRUb@Lxe$ʡ߭qK1CA1HM]C>0, V۠V``TJ&U"5cQǹKi $mx]P2gfp71uF;pKC Ҙ:]d^}>/AI&C(ЂC3J2;ŒiM=fo7S`2J(E8c sӞY#qYKN:M`!Pc\'Z|Mw@X^Ja;y-ښU0ꭦa>N9mc? H]5.} *P]O:?zC]*4վjܧ>ܺnQ @vOtڎ|5 )?$Ħ=3-0\,'E"6ds`}¢WQEp yLhg]P{. 4ϵ)dR/YR`_EN>=?:wقH*AR\Gn|D|"xẈf;&o:gBƀ͖EW >"Tu_,ԋi0!^ŞM_d2-3uI}V?t҂B"U. 愖vFG$(5^mMcbvў'`ڀ aeUsM*MYBBEU8uۊr h6hGu7u.$;)eʏ- ǁ<~DOY8|mA3X>St:XyY" Bݐ4Gu?5R dPhA`S7 X4ʆŚ#(9809 -hRxm. R$$_u$88gp^-]N3AlKAǵgfģְnn+C ZBj{ dHt~:WmlqtE?d×$ٛp?A3U&9PFAG+Ēp! s䱫. 6 OӠ2ݑR0e.MKq 7?8*/X[aptBudl/ALoXoE҄u YW]3q5'ǞӖ/(9reb%A>3hl+)m+,WQj/ME!500cK.*^_W{gZȡ}6zR<*ZWؖ_ȄS}1`޲c<|"R͖7j{aצ@w͹A'V(a 5 kt(9dXw ϕ;Ԟ *H×Lft=s|֜<SbtW𪱬55Ցk9qx ?TSE*R%8n@צ-@%ł`7ǜ}baq7x|n0kk(V=[gB~ *)?mh~o}gبj#yyyk<ض!JwSp#"fw-nU9}v'Tg`:?Zo$1Hh+[^6aKc& T?MWdw^/ExybO)Yi`Z9z"w[.)^2$_tDPI'bWlYՃo3᤻x?5>rk`ݓSOgߍK# 6}{KJnR]'/ېʉ`X]V3n(Qv8`*Љ;(VumNd5r0c~)`4-f^]L}'ԒZlcE2t|5N^Zb |=:Y+n(ڢ¾(U8m; Uά`Hi4( `Tw~dSI]ԅ!Lb70wHIO^sx׭LdA˴Cyngχ2duG.b/ I͙ r&J Z(BG fZt:W)`;r݉ҕy+F XOO@ )*B+865H8LgNlYPKxF/p@Yxȋ҉c0|xK CĚm.nA{1ݻT*ni^d*L$ |)CxHɆ*k{PArL^iHkeBfSfb8UnbQu!5hPVTwB@L0:_XXp4U`82@*0ePsXJ.Pr~ Gq#@=Ui>`xUz/3Pt[_ |b-FUƒŮe[/ef0d= #*: Y<w-ڮ"Lz 8Ϫ1AU(_$l ff 8\Pt+2aGT/CzHF44Iϖި"GRF KiW^ހ>e4y/ZZ*Wg9p¹BIS94ZSBu8q&1wxy:e1_ _tGrkzIy,۔)A}ߍznGzQ)բ%m2-bDWY Ꟈ3X#wpOiiN_\H9\i,Ȅ1YɎ{-gH$sxosM4fG}x /,f&g"MN ؅8'bo̍hS`̙HfH79 !cje/>5p;0+eF:w-.x_/4s6z4?ko*4IܮO`-FDIm,8M;1/Ge0,(O#=ߤ+ac1L[Ҍ`dyhcJ=Vk__fON|?SmaGr5ݻDx;8]9'y0nJ43ƹg _)~ꔈ6C3=)`0{0KFjӅJؘ;0 AI4(%ػBumyMti> C1%i¹:*mx9D1[+u~iFittsFUrѶHMe)krWqMhV*T.S$z{h 暪*?i8[iWGx$V*<܈H^J _ɢ#}4::>diFR [ zoAQS[%q4{ $ 8IeB+tU|g$T?z=>̹5}Q<0$q-:WKؒx |dFUq?*-E%v84~&W1 |*)$4mS_'iJaiLOr WSTMO' )Qb}wNx]4$6!DBG1(^рؚ#E7n30@X ȩ!'g76߱hQ'4;, x-߲/'?䒟lZhs2 a7i C-)?y`LB2 >2tW[ 'Vbt~^E;,@o&TYh /Į#Vg)KU5!!S =T\yCxpTm.Ija{틿~nil(lXZ"ۣ"HqQsY w?P1;k]`,h:;azjQёgw0Y?T@ =,ƫ%S;"` }d1ե{|q#km< jV H`x~WEjڈ3) Nze?s-; 6i;k4Nb$`xTtԜv5T9@k*T#t{H4s\t-:~X_!|Mw}Bz z_KN>#Ce&Zvz`}7hr&P'o<>~L6d$$0rwJѥŗ9 C:ׁ g*. B\p_ H@jw\QAqt}etס{DCo'.&}6?)_ *12"AA%sy왓ØyV%/M_97xlĉD]f/1l4-%.&IgvDɹ,8 fuc`]aͼt.6:vءNj H@ 'YD;lFjgܧ.8ѳ#&,6T/ޢO%D'd8.T(0 rn% T2Gi' -{U}?TɯN&G{5+{HG˱9/V$3nch: ]j#z.Wgi4S{cAN^HM`p4O=v۹ UĄ: V#$)y 剢מ_K$B)M,Fn;P_W$xϗ(NYү gi^;r엿ws&3$|b0.7o{ ZJXUM>S>Bxl)gqދ`nx{Ǖey:9Z8lU9%D.[Isz+ 'kS{'7C @Wv< RdOW/zZ$`m8z}Z5|]W~/ 9gb M4D|fh驳C%[xQESRv$&F"^D"c%qG"gEvEL[whP@t8}qNf/gR2?Rl}ӳіX>_μ汉݊ 3 gD= iȩ;u)cOQVw i:UVu lKF5 6tg@Wz*ɍ!I(;XGh%ILe19|L|BKD,03viWV]V3w̚ȭ7Uc.a)C@,\7<4ƫ5pkdi$MC)Qj0p75INl 9쏽 lDޓJ.+(Ӂh!XPubWSIdW=ܐ5}B18:(Md"F*eJxU DLo{_X)81-yaP6I{)Pnz=d GQ5cLS{HMǾ=6YծCϨ6H*⒜%\ڡu'.Yb$n\fOIZ6sFKt1aG(䎇Fܘs1a6dFrAo*o'n6UK :|^90-C)ˮgi"±9&caKfBZ팝)oᒞ8l^C=.9C4'%P$xʥ[-8LSOBʨ b#Ŝ1 Gjߖ\Z9fSn{ h6D6k6>q*mrH-+|02%s 8pY~Z még AE[a1-u_:.bx؁߇WKnHPWa US2%3[)"]nu`"⚂R g0-p(wA(A@qrZw2_|t>j{{?HʪrAH iDʅ,%0}Zpvl5\҂[<`{.?l0K-ńc>_& D)P|UK];4b{`k!{`wv >)?7WҠB«dOWHdzh57,̠ӑpp̯`:Ny =iA/χW,r >rSMV:e Pl6Kpش/%”~J:bA$ֶﺆ~V5VZ5bI/N>|3&tΔT18f9emK}HZ1+YJ*bPӃh^yh>xO04mif YVy&E?a6_jg繪Iu,~vVL;gǝza}rK~*4iـ'!5"{>kgjå__{0!R%;)byG\ lv*Ylׯc,:C>cJ0n/BCVjިOlxr__]z!\9n*Lk2( [B(Yl-j&`݂& RsvuTVax KZaXF! P`,( g *򧠔m*q(^=Ae 5.BZTKC25j^ո+" 07Kc!W=YW*,F ІHgK-~Q];A՞һ^z%ˏ0S͔d&/iBe '@t3T&L@JF/mHPv@یŔxXkCnlaY1v|^jz˶7J&d)zr 9zDN)v" _fq8z;Seq D/*+^m:NJ5oe_ Ԛ{u1X^tc"s"-3~?y_p E6OVV/ !RnIH; *UGeAӁ'ƻ|:VgWb :ŘS32~cO<]:dF_ໆpSË_ۛ!bqw0a~B (JU j=Lb`QkJ0O7@Ybgw/ex(mTnTL;*(PYD.:&l8c 9c9SmO~rBaeZ]Ad0UWX)?;pneAeXy ՙ[Rs(ȠѺk'n0 yR|4g/W2:OG;hi㥲_lH) S}eO," 8L[5b>9 l׏,?)ٶ)J?Kú#j-b|&IPMz!{!-$2Lg2ыM.[!I VGnKMy8-f937P H ΏDpe JEՈhd\+Wm"&鎭}Bcaa,iVr@V 3_Yo2!qN2^?i̶t68-7QuUvN#=&͖Y])xwqhT36 9Ew.JI%'Hnp+*KZ ]&ѽ '42=#ÛuM2Dj*#gP)^ tG^2E a<5 X4 Ks8ª̟{1Jr +BB)Qh\9ؙRyU*]揂*F*c8 d܇8-@=bf%Jw|#HmX6V ZDwQ6 1Kc e ?Q14m!L:17^o`K-nE& }R`yMFf8:{;Đ5)O^ʾ鰳m 95/W aD&׻f}~MHy͹D;kKxm՗ '0tAAg<=`,b[b ^ͺc1*8!lY8k5۝'K=X]p`$2P,0e J/CruS0_>ԖR@ U|! #솁i:CMJ+a)}`HkS9͈⩩2]&1en9T&[vJܚ*%"Jh4ܚнEe>' 4^cz^=,UHg1`@8]M&k\?ID<6 )9&9zoݧ8Zm6OvLծԄ #U~Ea1ՑGvl/?SFM|t%w,xqz7= *6ljgO {ְIbx]rAe KS Mgסq%YqYhfl$=&)Mbv輧 oKX+\+jl$[y留< ,xU`p2v'J1=FS%LIxVA?^Ll^WQ(o.AJNl$g3U;7<# }h˜|YFr/® ,Зs̞P.; 7!XwLͶf&W?(ds,bރEV5~-4|LTQjnF]>6(*8 ͘=6L9=؋j^Ny oeCi:8Ĕ_ X䁗1]o ?`t*o-ԱSdkdVy0҆6*\x, {NՑ7%4D-MӲc*.WC95UC}s;U6.@V6 `Urv.^[3*~5=Gw)Yq7Y^JD؃Baк?!]Vt?:9sɚH u]5 .5DR>M2{DՑZFuߜ3L]tc%{k/#fs+gPAFX <⡓. rO}Wkmzry5 Jv{($Z~0ܘa&>H&=@ce H`(t^@/&<fwr&li)&eޞrJ-N_~@bj\,AF ]y<>pq֢rWgP22e)^Oek$r tyw]%'o[-⬤0Gl^P30~I)rF3mu+h2x;jtYdT[AM>mdED&D,sYVHHں'GR##Y,`H&aP_ i XUD6yP/D$X0bЮ;؝dyF9bE;Δ_5Wdn>蒞ȕ'KQf涛!E;g"(8ىXCŨN3F5 JI2y,xBN,e틠'8 K'5˵\FdB[!Hb"ßw>lBU=iu8fW&B tgCIVHN'.a?ԣJIj_~%8dUV;HNNE ?35`?_6c`bAWg2\wXvGQ>1=5^% U@'eha3)i僅+QܛBPU @f'"tВeM$wCZY~їW Rd#lP*|]/6e;(PT#3l'BײAz f\.Nr<6%aVRd/&Yu2~^ʤc !qlp-+P5mXpE7iNMҜ54e0-K61gG) y 5W2 ;ס:faME`8IQV8 `$' BB :r٤SOow9F6Rgˀ=i6@NA ~@|-Ug 1Qe|-@ɁG)o0i;TްWH `2.vӹ"گCVW#b.vbh՚5$s2DmmTyjl<|bBz^=1fa[8S@SV M}*XhVCj .@+=ۭpz B1v)9d {Um6;I# Ƅ 'H+ƮOlLBL* pZΥ4̐ne!\]W$I ?|՞NFzj<)!s{Wp>67;z-@r>3<~}/Tb<Ӂw:NPYBG\qʫB2xfZ֦ƀm%EoDZƌXy1\$bH;BO %җ\"$ky`궧3ɝpL?@XfG .EO[ W{Jz3$w\ܠĆOG{Kut%'P<#w@L _cGiD>_2"%XvjsA]vJfShI唉ܬ|)\ =#"?4lDMN9M< Zяc)+ƒ1`N߻V3Ouq+ y+iE ns ÈIFZ_Cm]6H3f .j(QНعQGj1RčvǶ2 Ͱ\R%Nrls[Z<]7QKІOT)բx .dXq{eY:ЅT#jCc- 87'IˍXynɩ{~{`Q`p9ߥxS%eucdM.܊ȴS<ՑtV9P8 :#, ^¯M\-N|Bm ;8*~Jn%2^N"pÑ#_yB0$|ӗdlSq&O%IЂ5BKEC A2#TSй _8d n ښ].rۮ/nbR1*/;Sʥ4sYMg<ڂ s1]|I dvA[dh`2+ gu#eI}']pxK*h<)WɊ4AˡT2b.axrưifu0uJ3@|SQ,h/t*S8b/Y m/dMIAG:4f(Sl˯AS6sW24'T!X7zoOhwUbQC*Z_Ηx&J+*n)&4*|Hx[*1eҿ3!'z Dj}#gL m:2S%c5+5\@|0~-"}Pc+T8TF> `[rщ҉׶4mxq`A I&ߡ6^.ZI rnChh =h30-]kqx GS DA mv}T2tp`e/,L1Iq{1hF`bq\wH&ξAp&p΢?K_%q P1:O4م^;D'[@>N""=)H32,^2nاOYvTHŻ4K|ɬڃ>ݑJ(\0;+.͗?Yp;~$MW/G0 ) #FXA" KH d<+ѸNM -6"d^}9Gf 9XxaӺ&v<Ăm{mfwYuh&{yoB)o8wj19)u$Ec89[< `n4Ugd;M VT8U+ ^ST[TRDZ{fk-:ˆ eϝy5F<&2+H&հRkAki,Hit$Y)n3,g+{+B͌?=0!$C'v$f,\P+i. }5k!$M1"<@_%_IZmJ}0iU|OGES2ۑO;^ap8#˕fuA@,^hP|ғ$%n/bR3[q~|~ ׯn:HHo`6ZOz {C, ':FJҗzqF%䔘i4h(PB͛]Բ>Yko>knf|wGsqY9Z_wb+FHmӆNҡu&\]Z_߭]i>EH] o;mZN4w@p} d˙ tw?)F56e|0*(+T\ݛiCUGxBvhL޻O"]f͟>PR+86&9'jeN+CLQ6;[ Ǖlݒ EC2y %1K1qw A01I8%_We`YF ZƑL Q"(; M7*6浐z Hji39<@‘ &n8Fw5oPݕSHN fTR!T=1Oj4OLZQ{(t .Ir3qݴ+E@)Bms*Kt;y,xqnrZ,5w֖E!?mX4ZSk[lj2ٚJ:gE\sxUţ^%\F6B`WGY (I ;RB|_,P+Y2$2|caUm@iEG84}wqmo#ǂp8$P˒=lM(`k'x;@Ef~W;{8pPV |E=Ո|_mК1x>#4~Bbۑȕ\"սk7uacȑF3j\<ދ ojG*HISV ?8]8bKܙXO]Jq)[,ufJ;{ ǯs΂ƨϥbJFA$np{qcc6g\VYM t;SI]!eHIXOkGߙҬ2)|jEޝ v}ZX#F: aW_$WfO1|fJ(pvž1\~NEabn.0tR/jf7Tj]!#i8#g4iS8/,`n-.'12}. ٜL<B\ogfolF' }þc`\ַ16OFs)42pPlGX! ycb#ݩ2A~UXpQ+ { Qw*" Fbw(6VYDIH]:m`A"T0ž'yOFYhuݻ#цk?X@^@wēN8X~ytb,$^}⬜+Vh1?!O~bzvkzdR-LA]ꌥA? c";w_4T;55['u:ib| 1K+zf1(A#痣r5]9U%<.*GvD`2ȄQb[^'3 wg ??8y.!c-e/ .PIv`H~m0ux)|gOza[~wjLRnߴ\,bAQjI- -xel`[`^wP. rSLyP}pZU3ĉOu=MHj#yG= p 6 ymm{U Ó~]Zt6%9_7D.ؓrW|1,5[tjHI[G r+CvHA\p. gx6>n6YHQ7GmEߞl-1~ۺ#p…|_CYNk8F4 T4c؃-Y:EUtS/\ָG~馍)k?v0cfԮ$}zWϜnjfFzc6 lZE]gQ\3!A]'S pٖj?hۏf?/;ҁ94Lk#3Pe0Eӽƅ=d#ބʘY/ɓ">\sjvbcʸJc]L%` tV]ZR)M05oP  ɣ-iy<,JiO0zB4aĔB!>}Y]-j2 L4_E.@*pGڭ&{u:x8CffT^%;`n!ȰH`K/WO*Tn)RGucgLX[|rg_H{\cRi蓵 u,H̑"bihc5@kEcsNu$C{m?母M%8KU\|Pa;ҵAd?l!U=Pmr?wXl\*{̝*l{sY]|ʼny*]&ͦ 8=%WI&w ZfsXλ5k4gqz n+ kh;>bq7k DY+昋o4ĸ5K/_VuTMVJ";kղK=OaX/4Q*25)ۉ.t  س={'GjZI2 {C:C h~ * c<3a}B67::PJϩz(iFeW+u2gtX\~im%$rYuˇi:j *E{J-: qrB K;paVFu5)FRrw5Z.IbV/Y lSh"ozYu[6}ZqWE/Vҳ}lj'Ve5 Baau^}R[lA~Kxx\UFr쌡rU/6dx%[y=)㉚E)r]:OI-#|eE* #Pe0J0(~x@h' bd;Xne#JGpfN;rlQN n%b ҜpI_iTveĻ|)V:ݱy<jJ)RA#Ԍw8{ i S#_ܚps܀15Apt?&WcAV_و@Udl IdwC\*s5RQԩ>p2IhN+G>}vibEI)R D$t'`!o&& З"P-]uo Y_/9Z,_#0g@x}A 7@@9˅= odb=6n6|r~=hE%oK?Ӵ @g:\;~ ^%D-&ï\ҭdB~8p(dأ`ivR'ZAO݃*-S𝢗TWpL}{!Ǐ;D I)rMf Hj bNV>>qx"Eܱ4oT ʨb!A>VX[j`[enjl]nR`/:F?̺*=L$Ue(-kqܺpuqu aOK;CNR_I[ٕϐ5z|kr(@[5tvc].! Xu/MH"LP%HO 0S[0MT0^mF ɲ6.H&[ )><ӱnC@zF 9 n ?HR%y {'O gAIlc7Vnb=z+BD]O\~|1b.2S`g(yGɕ Sg uoAwD0OpP.NY >h{']J/_e<0rwkՀ}<\}Gƪ^v u)rG!lF^!-)(CfHSEavfǶDoX.3O#`gɏΝ^tD3]H%]%X%r{=OtBIo!DGs{} mune䨋;{4%y^Gy3r R_- ӊZDXㆺ|%K}5^Ov;RH0;|ғY/EͿfPُ!qr=/X)r[S{ٜ-9JҽNK[ bD;BдCǶ1g3K+~ ą?B}BKڿ"4.mog\pW`9 3L$MPՐCTөpUjn+*'9jQ-:fte❐|PxiuS$tt2o7R:BL_?O+d1 _ QD3P^[6I!ɹ#9_G(I'q,i @DP\aXyd 7^UUk^e 7YRc:i={# zH/E&NM}~^IK$|"NWHBqXC}T숩U$@H+Gu@N4CPmq.dҌj`GC-Pi߲Be溁\IB2v'2,m>@rX+1t8(;!c<,h}B?$ ɠ#u,CQE{̴r1}R , ado;׽h EM@ g8(sN0 |/CN7W ={'=/;܃M4l0% 񛰿 ؜&I/@t[NU"J䒽;$m#! QQ/<2*17w)jgJ W|[J9q2" 䑯tOLxFdZΎ`n<5eMcAU Kgf&$4 }+yur;bĽOJv=r`Anփ,wGժ) >^KI $|b 8ʋN^Wח;z1uL0wj恾g m]1KPc>(tx8fpNk*Y\Frw`J-nUNo*ȯ ol *]~hࡪTN0h~ZB$R-@sfҹH8J< w_+L豐Ufs.dš|MkrwcQ&mGT;`<ef |Z8q:%y¥".꺔Xƛ?=`6efz'ZwiU+.M xD=}͊hLtevB{pvȬ7\w&RfV9O)_/Dl3?`]a"3M*lԂ̮H0 >(URI7 I\b{f[0Fɐ\.10]5iiώ68Z7 I%ۢ˟MIvIyA"c /4m-[2]!ĎV+, ۻmhfYWv'ưL+hXAY8*~mlVz=;4/&34?|zRIQψ&Km+S7$ s׉~LBw S}["ǨiX'gP<Pxcg\Ţ@`m?g_R(ˣ\c+)=lxտKTءI@L;4trh61 Ś$6NΝ/XN=5|'>E\gBuox a%H_U6;R(J&o_I}H5a4u oӬP(E'E(SDCŨ? b^-n*yEk~i( rsԢY^G/ |d$rي6hފ|,[ ewqql4BTL[WKkAg,TG…39BإFt7O9廈K~?ץψQŊ+@KsO`7`4K dhDj`o8Yp8 Fhmr?>1^q}IU&☳a࿊Nɉ7,K42%s3zS={聄ؔ%/]NfڔtWlج f|MՁpɶ-/٪5WİRzX>ͬ0P": ?@F'If5?ooCR")V`WZ$CצεϖBo,IɬvݧӪz߽i{`. )EAXSm=; +k=*IKoKA5`p=uE5rƓ,S7n.ն4N@ /8?ghxd7,1PQK$R.ohqיwR=7[<^f?sz21Ѡ=h7Yr<ó\ 0-dc>(\?d]״ퟪѳP ym &6MNɡyfG)-:Toshf.  s7Pb w<ݠkm(MnʵL +e֡KEHv\b[5*Xat/%eٖr7z݉ǽ=pu$uJ 3ũ)M$q6aG{zJ( nfaN!&6c"x3SeyTXaҹ.3"ZxXUuƈ$ IDXra;yK}fImO^ΦiO.X W? -(bHM/TRcc!oy)b~L]!4Hr0'Y} r jh _SbŪcyЈVl ]]C'"7b]EjQXI$hy ~b<_g]೹ՇƄ+|g4y|y!`)6__((v T9ZjZ+{ l\!Lr ?EҀF3-͓h\ b|{=QޥH{~u2@cbQhiN͙{{C;]%4g"ӠjQFsciDoLEbB6{O|u*6fbX^(^ Q1@9:G\STC:}*Xg7A7W&fA`{_Hr}T .í5q"wO`">Zgc0b|jbf 52k@WCpV&'Ơ $m Ud'$R0*,@/fu@ؖR>ES mS ON,Ӽyk=5|>]t-&*EՔeIuTTMݙч(U&t'6MSՀӓ;ͲeB0sH&PZ 86C@^7ÙXr B~fa4KR@kxkdDƉ\U&tTܳń \8WA K} KHmH&21G1ґ2]@XBB$oav7G?\b_[vM|sV.GO҉ZJL-D^Um7[KxBoSn4xSjv(9FXBQ44 KWQV# R}߀s^Kƾ+Ń¾4>Q=l- Rz3%M(3S!{M=zT.NWMNQFsia.N.BV*&9 ciur}&(NNzN{U3wP4pv(%G9A%H 99*c[W{N b>; nnt hA9MioixիwAㄵxbV:~.G7p@YpB.~O/,&ZyZ07Â1Qr(Tq"\4w1>1:d5p8P%V8/,۰Št?7$agq 2Z R : +D΋;6[@,aCiû+k3 囋?˘r}JWg~9kb#d(}Y?@-#^ |儱KR2FkSa'ƄhBkȹeEmAQQ5 8sK"R:ڎ?^A$,_t*1;']M̛v񤟚h 4ˎ6 Wl G[Oa=&=ŗʦ*DEy@e2 ^AD$LkQЈלw5׮)[B 5qZdp9vj']MᶣaPxcC';1 _s\*\cʟsw;s1?4}(uB.p4hȃe/ jUL]A{}ҏ,mzCܹI7mt^"˝=E^̡OX5 r uq5ҘChc "# [:qΫ1%(Syg0&'vLqOif JSJ׏t8l{ƿ]'+2S$OuW!q%ڽ?n\\-*&s\b\̑㭿8Kx cg!CaW#iYw'ISKOJ# !nd7ǒ0mF7 Y}vʬ0жͭ*Pg'9yI ab8O2+ة 9ro}w4ם#al&=,,gh"2k8$QӪO$bmtuG.+="wՃrxm6Ay X5}TAQ & . ЫhY7FtE )X3ֆNGdj$Bb8kSnw~8EK5n 3o9'p~*!Hyql3t95Ao 0S/(7v.1\"Ǹ" #t/Dgh&g99%fڥ'C ,j!lVVwʃ:Јb]ç7ݗhkj9l^@`KX0d`D, jU^[Z=_03z@*?]$SGp.*l"ݙlp`W r xE3>μ)4X_'딝c/,KKoN{7 s/+>`m}whzCAJ ffP(%5;j㦱]^9d'`~n9<+2IOm}عtr^i^~q_Oj $A) +#6&j?9,[9W9=+=Et=T<ݴ gz+/B+=)=9ks"?pW` ȅXV\Zrnv Ch==Ϛdo.UVOd4/R18oA؈4qnٻdtv((l Dž{]CN ɕ 8z Zga|X+%$JĖ *|ޙȨn`bq0 2ʹ[ @{gK.bҪ{|i(,%..]N< 36XqY'\+d`ƷlϼG"{Y?\"Ƨ/o}~eZ)z0Cƀ6s5RWׅz疐1o3̝Ǔ3k{pښ sfxE絻N*>&m朾bqU /iaaH^fܺJ63v^U fs{ޝҤ}U\"YOP?otL>L>_=ʱ4r5qDX>;߱!1QRv㤡A_8yKUDbj}tYz`a-D$64qʄԎ/{}YDB>l_G?=2A2Peføygs:ߠ?OjNtsX=AJ ~tf63k[:8_N }"B<$lr6fBLj3ȰrKr͈ %TUs-&B PQ=;uUڇ}tӧ];˼6Sϒ@PIj͵R&'GfьͥͅgA^VGLłO]zcXB#phǭj|t.Zbz*s8݁I(MRv/BJ<)W2P`FqWɚ sJR<|E=.J .d_0内@. ,bu ےZ%T多Kp(f&V(Ϥ/TM V~nS<Њꆲ&G#!-SӗA!%H.V'Xͬ+ V- ~g4"d,xΣ^ɬQ>f‹p89KP Mؿ!VhX]9:,Vcn8u֜L.ɛ$3'j賙I&ŀࡉF=+: 3-$jvޏ;q*6Cjo^y,ŧs{8@zK]ԤZf%"-gOfH(a.߅~E;T㕜 Y)[GSR)I"V,zNmM ,Jw(*#C}KWo,W8$?ą!?<c=N%$U$ھv2 nS:_q[{BWoU߀+ė &AKeWrW+ae0T 3ә"|{R/=q(3ag>3~ei248._a*9౳sJd&I\ G9(Fٟ>^*Z7j[ i,Ʌ =a=yS [8K<1oմQlU{@KV*>.7ʷ NG.L_8x˚wpHpjӋ?a.N[]fۘ !r3ωzP>:( o_$%6[ݓ!OAbPY]+JPAΨb,h#( m pdhom^4c էnt0D P\kAg@"(s^-ڴx0fFc{~=8$n ,"  #5i5HKZob ŚWiE zxk"=7z)ġ)jܢY]}ȱÉdݓQ'#rߏ>}l7pT-b k-B_j=xlZt`E #خ!KRY*P?H;뙶f.S.8'\,/d)&ЙR2W\WL<ԫ8GɌltJng&0C.Ή*f,R;2)O,SlhxzG@:d>*Ŭe ʵ&rQl08 { )rPAOyc.|qqI"eKbT@KiM&Ԭլhq`׆:"^RŐX^%kaj1uZTЩ > Ŧ:N& `5ɶ8hQе>Xat)sW"}֢r#FZVoac3M0JUR Orl=LJst29@7cxưM4ebhAĮ%uP'iCK TV./Mi3v!pw}v(xpMMt$yo^(stf~1UQ.&`ʛt͙i|ʳ=xT*"TDj[D=__[ Sr䈣IJ_ڑ_ˀA2LSA*:ؐ~JR Y{ΫeadݹCaucEҖ Ӷ@k ^NtEC6F[(yrg[b3˨pc_rF=!`ّ;A֖r2S=qW W6i?ʫ&1E#L|ƂFI #ϊXyV"+ Tw^/oSd6R[pfo>MmT`SÛD+MZdN5Ww΍u|lڅggPKCjZ'+ {G8 P<85/`FeGgj`I\njܐ h.XOq|2h^J1~p3C':FTfu9Ee$3""|^γQ'N µ,D[ K@ؠrEkȓb )VPǥhɇ)y֎#oP7%d@qUW d!*Qb΃n/%B]{C9#_}?%&d5nhMV܈y)">w=fc0أB]fq3->a0rߢE\$ ~wI *C٬f@l$/LJ$ы8pg80T5RhwNQUt+hQB:L'9]7[Eq;G9Xi\pBfvY{b;mDYҶM9S3cCكݕ$5SaV?g t`uO E$AC~T~E;Xͩd A$b,;`v AlN#"buqx#>#"##t7WW2g,\=wxj%5ZaC~hO^+al~XٲdeqIl܄$QnrKmz\K6i  [٩}M2rZ =Gi޵.gG|hS5bT%oDZO?R_^l•1 2}afY]К:|EOf`) s`?g_7/,qp?fz~<.BS̙ƃE+c^8& wGt!eeE'SXIJU nGvwBDoS8w#[Uwcm9xLjn0ѹαjzkYAחܸ/YHk^5/Tp_j?/H˵9 jqͺ,tY${-s)iMŪ9h?^xľM:d} ж`:rv|$7l;1]7;} W *@.OZXrm'YD27sܢӑzYЕ3Xf\aB12c`&-ZXvSYSL cWt.s8{Xs@*5wyer"针=a-k=1v7  2:#˱<' ?5B,aRD̬  .9z?Ҧ Ĵ`<$OoH^iE.Nֽ>-uNN3WȊXuz9N1WEz(_:+XcF0Pf^4ߛlzr\Wo-uEx/ zۏKc; gFnV藈iP.=;Ae;;i נynUR*t>O573V|r!N{Ϗȴf ׊oLDl0&,ƴjFAz FkQ?i~iJHA%!:7.Hf{&N#2|:h艶cKF).dw{pG=j ef ^ȧhC,!8.Aܧ^K7I^rzvÓdt`.uT a9vA<'V푤Hu6gcKܠ6UJ{`!φ]Op4ׇ#9_Aax& z|*'m\6@w@[xAkև_ []/UA!著x Bu!l?Ok]L}d{:/Dx>HT1O7?~Q90+-'bj!Vv|dhn )=΢9vCEHžW)cRGuYGB$ۆ]lK(>T7T ܤR hXDLh?A3IULG t B +^q:*G Gߢ9YNÌ>DZ#O"o8,R.`b%ˮ x>9\Ԍi%QX pdSW*]҄pZ]J?pL :ޞ82,H;!5Mc:_~2vl=#I)N6/cӲ~J7 x L$|ojW RڣT|6OE\u[A\ZDF \!сyX<]A FcZly鳏{Z\ayy>Uxb`&j'mtdH%7/CwNt(ϔ:ÎmȰ#O|OTƵ;m\NU'X{̓9?y 5X3f3BQ䚶MeXivhxRxWcj% b jFGuv lQԄ'e#Ċ ^:ᣔJ:9}0Y;-O֐Yswԛ ؽ ߲FO;h}~6lcLr$nu{^N˲R()9jH)?ɟrchU M)޻"YZ)7oLeXft@ (p' HRTU0Jj30@Bgs݊XU}%j䖁FI>cV1P~3@.>Z Sz0Kv+"|hVhqs@Ih|C76($hfmw ZpSޝ R]w@5`21 s%'cgRv&_ī S|qYv!fD.WУ fi+G I4g+$q3C-r>Z| } |GA r^< !kQ42͵ +y}Zށwޮݿ'!e#¥^+kߨY==f^mj.%ӴՕU)k\Ά*+tFowMޅ~O '!-XN i@6A}WHRGىO75+r_/:&!? r}[\&\nįN HJ&OG#K(tEbn+Xk*'bnulp$BaG<,ϊɓd7wwHM\[jou܄/scRq|`LV<c\<aԙ:< %'d=>Z}Dp eF$W"O'ϸr~2lb0ݓ~bGsP>.d:pmA_GZ(?z~zLoAo(#*#+rHUѪq3&"݂FMb~ve m1˚@1L۫<髿 0^+M; )$~.idjb"۶Fp.}],ɣoÕH 'k,sکе{'teiS&&>7o:GH`QoO=a|s(+ [ Cit4^{ef(dZd80MGLG]T-0g4mb 2!ܰf o'jQ,GDf腅yJŧ41^u8^kt㶀p?(t<O}yLk`|O8HChBSOb•]9ZE8#9܍%ePU.}AN-Wˀ Ü ݢerlc'Kֱ60I5A@ǡ PB3BF+smY-׆E1S>d6A:Av''>\e<F fu' +HhK!> xS-"_t4efB`^Vn#RN6I {5Y5N3JB<?7o*9EÁtDz^ޝ`al4TɭwV;Pcށ2-JL)x9a(=X!ts g[]NojmSL`7(N\[gB]055kK0;ʚ>{i/{w/'v‹`4_"^J+GP\M_h>8wߏ Vn<<[OW' w}='`Zē3}܇!Ph#]?S{_O&}^:rB#HBڈpvͺ(ʳ"K炗j"C!*_GG4ßE!uD6f/u;IMMZVb `E(%5vO!⿅u@xW5tT0f"̭a˚9riS"% Ŀc:HU;EJd7SfnFX*f!ҎC= t yj-OrHU 1N{;ܨefgK L<&l1`őX~"f(8։;OE w>85\vcӯ)oV+A !$X~)5즤qi2,xy,Wa;Ց7}3YEu[JT=~63V5{:^I3~Z6Q^}NbvA0bj%}5nvR[9Zj =?Gg]!tN,5mXjű}_a.вt7,Ysa$]Y^ê)W?SU(_X0?zGѤ!D^lLJHm*Cտ=6!UD{aI}n+]LdE{ڊ9u.U`^ςlU2k|v B#Os9"TaJۗ9nhť, |:VY|;+8/D*LX'9c|b 'Y*, Gai#"'oh~r?uGT;?m^jeRW `/켞:jyCf鼄z wc$N}&f=eޞr#^.z/ͽTx-]k9 ͪV6ekW뫚+Z~sHN~P0@2r͕vyf>a1I JuPo\y%eG)zBs=  cjSdDݡw5M)C+ SyF$9xT@ak9e 5)x뱞 z"$[rFޑw~]Y~vCi㮤\k2k3b]ʱFX+{1aZH*<],mE(Ғ* ]Kv#(b0<('SPD3G%ECNJ5y H^%2s*6/v>!>b~XʑIk y$U|z-gy|:=R4[p*Xh…zB2cB־?}p)IxoŌgk.r#t>)ˌ CAmU\3kb }O,J$H!]xCqP fFId!?1늡r'`\@ٔ#`Gwf;ԃK~`7z/Tc#h }X߆ LV]w }U[ Kbۭb)?JB |sbGMgZ(Ⲍpi |&s֮߮Ń 36,G%kUh@:Pa;}7B[ʳ@=m^pKҊĶ큻CcEV#Q '= }nvo\ڶ FoBc:òv>R7auhmuC`13PqK8`z^A؎%{}Z{G* ,$ODY՗p&c7slZd3cٕ+xm^v aw% ArM A81#\SB_(XQN{a\ 7**Ӷ J"4B`|Amw<\Ɯtۡ;,P ܁BKje%\o;jZR2b)+ɴ(F|t`]DGpFr~ksls/+pyP5,YG#/zΐM! bJ qA 睊XVO%.$ Zd1Vn,KANuH/Ss-.8̠ˉp\ =?)S),fNfw2W1ܱfFM YN{tCY VFRT*ȑI\*M6(hLlʴ|)&8=Й2 MV1M eT$'\[_)jCc{g=x.'iSrrC/j#4%F(&zVZ9bsX6J>!C03꟰Bܰo1RgnFw {ư:q+6b,PhvSV?~W 1(˜wⶽ1V9+/d5=(KR5aNfHOOS|mњH^g7?DBgcHz_R 8:93wm./-v!-Pxy VY_!΀{G*+eW>hIUH1'V :+ّk ⟬Y--HH>57s86:=󱸔8*kO.m* Q hLI2Mۇ?ܦ'" -yѩDk3hݞ貺]\oILf'@~ T@<e΁1kZl,aNoj@C*,ƚLm|LW.|yՖU,3ֶQf]O;L: Χ>jUH[脔PG\xz1):[#^/c'%KB獇Pj Sx !߾> J7m "CnY:ޑ,E0 )}3L#C[H0oFc(&7>3(Q:"BC IdjqV~4zufs[-ҫ~KvnEfvvD\OBa%Uı1(^\7X~TT& mIt,b;HӍةr /q QKYqu4ٸͪ=u r})'ԹǷlg. KP6,\%Ļm?} 2$+Ua11~9>iJϸ.,l*b &mT|uth@k<9GMG}DHGۘڬWáxSl]gQKuйjm(a8 y5onBq-<U)-Ҹ]gib1A -z` 〮s>Mv&MeU`ߒD'zg d܊ ejm? ^(;pq JfѤfOL4GBjhٌZEX62.~Q#_dn|D ==_|+gj$j_j< &QNQ{܇|~Q=Mq Y;peSAdt/]|TצcK&uBX GjP;eLٯ] @:AxYf ˕04ؼ'j`L)z]RuI)(C<võQ7yS%Ot5~!ۣ2lpLwas_wX\̷W?#}4bwqy.rYF4#H~BQ$?ċ}bW9aMkFKrpLQ{tJ|vTX BE dz\w +ԤcCwh>YSvM?jxC@&2CEzVɑxu%Vn!Il;Wjbʼ*}R.A# 4sribq'!8l< ¥;9rfY&@VQ":$\t4Wo6OkIٵփ"T#s;Ʀ>k`ؤW!\R{4˼ C5.3}GANQ.NA)Ɇ/MǪA,5@tq5}Gt3Eqe9͡#&-ok܏zSfZxR;ZQV$j0R!=%n+U>G4Gdze]']T$2HLB}zjjn&;UՑ'=tsl)>Sd$8Zf@5ADV4b^PyR7U+dOWS>7(Vjx qK[^Z8+` R/q`%K_C9A*πROU?^ej Y3+0lo(I|Jgnw{z+ }Z&\'HwH|Pł6Ԅ="4v ^j$w?6I$m*V̀Lۼ8bs~4܋Kx1yQ&BK%'YA53bU3ΓzGV=L&uı2w݌vIޓ-%ixЪm }'L`2,Ak] H#NZC%0)?[]*=iAŅƺmx3.?RWtZ L*xκPKw7c zD HTz*CPҗ6ˈw6m*6S_ߣ@ Lo5]y$ƫE m( jM4{M'א_pњ}q(Djl$BFL%,ӚQLAlTA wZ<'!~T#URUi o|\I^ H+)#_|N=;(-U3dCe.qx͓iv $W]}lHӋutxfa vK暑`a)hOC^!X*iH47؛RJBm; pKIR 6+چVDP <A3ؘ`u 1&B,;=Ь)SZdM;Hw ʾ=,Y̘ʳ 枂pɢ"Kϯ\i/?ؽ߫ ";Nր4x y=Fq-,=ǒ^ӒZz%&Q @]- MUfafz} +rDe&ME&2hDRex*('nrƸpmX$A=6=GD+JZ>M Nl@-T6VZN,!Jqe"&{A!8<-G#jf OSI&v:37I%Gw1l! "f/-.y_QXf_bG&nwDPMhDWmE}Ya(v",<}nZY䊖e|V2喔IJ3t-=H߬oX Nu2u**%C eC5 s 3tZ1 <2~B WuhVɔƣ2'5iiXFKޮ1ˮ{L?1X8<ӂ9:j=+S.im[a ]>Dry0uaE.J(VO%+ Mwķe&ՁOpUǙr7%MYB#E?&IVD)M1/v.+w܌dS84H @Yg. X1`~GpN-Xugp1VĉwE=Fs];(Qz| &Mّ75 l\mu@mÃj~WJ}G\?`5C;Wh,5tS$*VِazW]ڹɰ1Da Ƕ緑ԺܜB[fo~1C.YK 4NI"dߛ7 s1HM:GyYFMV/Sd@LS[X T:hƃL`eʝRVRcM}ZζЌ[s3.593nc9oN'(槢e Qý H9s.7gD]V* „wb86]gz[HAnxWJҚNEAMx@<ST[RD"VڐdN">U7ES_Qzn5gǸRjhKd~ܰ#F;!7RXIu8xө' &b7,@ icy˩xZ6'>xQ8|>K: V#0jcLT.;bhA87ݿēlT25NFV?#bm9dtm+4I^|hHO6π^1j3^B%G*5Yp,#*$yjub'cf/X` Mճszk?D)g>):2AP }#|nz@>b,2 oCl 3 $\󓰵GνcCIa<ڜg P(F{s/Q"YNހa7&t pg?fIr^׈y,⫊AucRx\W>KaZEy6L.89*ۤGhƁWJV嚔D*E/pg9kzW:^}ڷK磾WOp}g"doa-.ޖ 锏3AoC߼x;\m GOȌI~18N^"d\6;@ 鈧'Bu GVCΆ/ri'zOJ2#if.$@ȫfÑ-nDORF½5DN3y 0wT<4d;z!ovڢQ搫С_LÑ +ls^|'jt%f**pi=g6+ߑ9pyXQ b::"٥ڨ!po{9V dBJ)_mjmílZ=iY2 ϣɨhA,&~ؓD#(dEW_!5^F2T]1p]Ibjih`N4QqE+^s|cs @ 5 O{ư, 9O6}3Ō ~+ᛏXuIZ*-cn<e[=p먶!'9Sn:@ڷS$Cdс.UDh jJg~|Ba'1S0BR[p` Cɮm :,hVD_$ a!4Idj\+01>Gf&J;;cV]eSH*h$TCGT$4pq%V`x\#d&@Dzta Y6npxߧsj7r@/UGz ]'hJ堹ʁ<0dwTJqG\$kqqJ16W~#&ay߄.hd%I"<̛#힭^"qڟ;s7}j:x^(T0ŗY$rlW,|Tfuy<]߇3T߼č싟WA_7D8 M Ho)dƳ&̇IKeiE/Ѯ'yHCxUU*fp{t'U ,RֳJDE#OyCi2QmDF8IzmIz3n[ ?߁Cy+*cl~`|dk[T) i[2'*>aUO bt Rq|e:Jwiqwvrei(ZPX9\.#]z,D}5]}dp3qnSvZV Ow(SO.C!cFTb<,RW8b`\43h9 \>&Ik>1 p :?56ƮOʻ0P( fzv>r<@jks+ Yfyȃut.SMq6~`kH&mWz([ ゕN\,;,^LpºywM/g݋an<Xh%DT^yZTrFHSbV蛫 DܖvV)&F9v=s8eN$O;p j gǴȓU%9b^L aUS,:ETЏfypv!KT0mMf5Mp(sd(َ'H*#vW;0q^b!3Z2V0jUjEvxB|H0:?t0FKZ^7 ]MIәWs:' h FMB-!mt2y51c.RRYu~IlAԢndoHqjc[WQN " keEr"?l 쟖A>o~ pj@?Y[ Kf}.|@vG[QMIlpX {1m`%Ѿ1G*PrMyXCʟJ 񵈉 '>o8LE7Hku::t ?ԍ`}@S]1E"б7$U#_@y[!Q ,A~d3}@K2jAɗb{7nYaܙOj6kDbDk/8S6eǶ3eFCq̅evK3ЗI`1uk#Lh4F˵x@ò k+05v^/*$圴E* tBfx>;ȹM`qŏWFe};z{eqX` Y4W_)G2KE ꟻ4؛gFpokUUAr'(n4yݑW9?Nt^"{˫M tj|^ML;|W9ˤ5/)R rYэrطfK0V,p *'ۨK'\'s!B- D: ;&cu|?>JH8Z;67Rv]o?;c12WauR-,~A|LKNtDag#B;~#NY11T Q,2MgY.' e(64bá3NXW56%wUזc#2'8Q뛄U@!T"eAqxbo麱ԃǹi8[rOH#kVlr^!X:} Hr<;;h^@iMgN*hOa<Xi%; g>DQMnLTcuˡ"[x11<j։kr*J^_qG=Z>,,RќUR%.7Q!b~v 0@ 6]0=;T /n2:-6e[Y5OMc|QG/ޠW^ä S:U7U^ "VĈ\Tkrأ !2l,-츐Q> e'H;LF /16Թ rQrZYX3 \>t}!Gk0;lQQ^?e(d &rV݇:Kmҋ-w$ `WщRA`K~uĽ7mߺ Jckia_'>ko~i@1.TGƥ'U+%?~ۃh4szCčeoXDO3J'G9e2p{ÿYX!=e`ZOjc\ Ck7gM2iŤ'lE#U6phN3ڵnM݂̓9;9Z[FF~MaRek- <4} _sx?*CVMҤ'%6-Oگk%W9 1iĿ Lس a˽~/@ZɃ}Y^:6,%$}>dK&Zaoph/@,gy"cWH䜟qbZ=I+|8ĨhbxmԩH8\&-uXZ\\>w`KFJ)@ G)3 JbuW,+tH_a@LhTmՍ!Ye][8j'D* DBwkg'bchx0MWvNʼnt0J;d2S1?۷TQ[9Ӗ3P =1@C"U¶pG&.|ykh?hgX욏;H"UX̓D\ɋqO(5"М!6wíJ7WŰD@A?X|qt"y2`6A)nfG>u16 Ry۬^;) e-RY7 j*QT",DH%:{"$Er-LWQUݍ3FS0IV`L![ DnLqI-pJ_Di'0NRS^$ |Nef6`b;r]% pΒDJ{{kYCrlP?+y"_}lH:م٥o T>bĶkߊ]U =R mwg{W/@eXXA^[)/ᮓI{=,;,oa?!YKךGKeͅ@qt¨)Y려 H-;A4–81'l ،{:Z8!D~ܩSι\mvn̶E( H~m[Z0 K8ɮT)TӼ@KG6|ɿX]9/|bߊN 7A,' TKّ&FL6ʨ"ffe *-aY"<GJFSGsCNY!*:u{R:Ku? #n)PehJQLuI}S\va2 >hEvDX: Ư,:w-洨(:@aiNB](AF}ѩEdfI˞=Nz'֕a8O9J:-~8ȩ +>]B- &s+3o(<K膅? jBWX8&I R=͖hqP_a[`8)m)sz6Јݻي,\ET^BSa/.<"X0ٯH{@=vt hnqϨyߥqm|6D,e(OIЃ޴0FDL_F8.OivDx(mܘ M[HUBX =Y6W}U14<5vM?c :2ݴ&wZ}oK\e Nugޗ0|*" KcGj<(!g(lqduH9yF] N-J6fFإPHc0f(T*??4"!Br/11ʃiB]c1K#7Z3MYe`gZ[|+yQ*-hG`'+&NLjchWJu;&q (H'HыFY?vʱjLnJotl n f:>#9>VPOTW1)Y=,bFɨU=N2:Ag?UT-W=5CȪP@1D↜ }|4 zu";.I̬?-^F3'!3ip I[T__3Ne7~F›Da tÎGYzܢ!̭ltQ͓3tV,AP$ĜXlu895+ԷkWpN#*;ǹ_516 FgM0OZ>;L`FК64ҥM1 y6Ԑk^H-_AaQ/f'Lr!!qH.50fP3u-) 1zlN{)6 Ʋ&iM,ʶ^jM$Dp8n}k/ W,GZ=E6ߩ[M '% %3t%D {U(v 9dڮ}! ntO24 +Vj._>UpWhy %RRu33cj̄ߔ;-Z%({M@GAeOoP~AI6R! 8/G`ӊ7DRG/kmg,z+n$Rl<,jy݉v+="\wϓ AQ>tHpܠAdߙҒd92 /X(@D_rbjT C`ǩSxd0dJ A3d&MB _iX{Gk(T %I-\gdS>xzu)-fpOA.2*Qi=q,},9Y SZJdTdd>&업h,ՏJ[zf \~&?qБ~fBm,i0>rvvjJ\" \Qi0PkMӘ$yBc{>J>Of?ғbN|T{zUtP}^[|elȯI3 ns@i-O:}U1d3h'M K%!Ǣz,Fnr‡fU`֍K*Yap==aLT^01';D-M&u&7^n&yWJ'EIYKHnvMͦbӰ2+Zؑn<4<-΢w{c4Wn!Tq@2$acB>KK4\o~*lΟlw{)4tΐ-T$T!`p;g~0RB֑i'q6!QsvwL̏;QXw\94'AX,6Mr*diYxUnKj_J4@s'uJ p޽j ѦJ6դ꟡j ^pb'y>ЊxYLb=]VY"KzEO(||uAcsdBgzv!|Kr)Plu?Fn).Ħ[LIѵʖTC:+iZڤV٠]њmνtqΡ`@kXvZ">Ý. uo-IVZQ]Ky{g- S ڹ]&c5ra\X} oQǻ?2Q=Yf,)Fk0?L)a[ٽCVQ2#So?3QmƤO#%}u&A0m[Hd>J^&Hf XjT1O܄_04+/]B`%_j7VruX%F!ʶJtraJce%{OC>`%7a$?%@x+kV)TSz[">.+}tܭO *$6 lݒuc6z!;TXv7u0gnmaGE;G{Rܩǐc¸s4)+X׎aK3آK*Es323p0 SᏭVq fe۟ҳLa+N].f_%P=r7Cy"ΰT*7*=bo޳2YF-K]QNY|LBx  ͽ*ˑ~@=PqpCh@JȭFj z4QjԈ_ڎfaqvO[&SSׁR;Z\~ڬRR~T2 [R i2񥵏,(=fS,. Mh(9bL7 :eL_ti'.&-W݉bl+-R4 N\΍rBor(1ihyR+gRt⟤G*őN 0MDw{i 'ƿcߨ|i1O22+NW7GT9yנMAY`뙥ZcĔN2. ځ 0_ږ|:Lz au&v!$lGp4ߒB 2K*&^ ʍ]i9sgѫ"g IQ*rGw/bU;qikdNja Q~x3=fov QMZ9z~j̄Z_}j(*0Hɱ_'%K1I[$hEܓ#wV'VC&M#wvشR1U8X=3ZxK&{Eg5vh܁>tB[\e;#F9ZͲ5sT_ee +=Mȓ~RwHe ^:?wTOftd";dq1]:,AOkQ雜֢;.rCQ-uTS\!3TOln9A N=?m\wi]kETXko.Ej-G)+/*I8jP&!/q0Ɇ0kTNzp M\`ù伞rdzLu湩nM۞:蓼ֆƣ@)[cZxa0Ud_P?t/O Sd7(=c5ݜǓMVg/[V0͓B?Cc'5wV*׭/8A48I-Qh-*+0zfξQ43 2Hho8kЙޝՃNbQb~"xzCͨn2<c"3sp 9T2&Ƭ%KF $iǿ+:bGh _LdlkV߆OTE}ᩆx͇A TwYjIAҫq'2ᇏI gt{ItMkҚ/XS1plrVwyrdW0.[ΉL Jȗ)5NHa|ɍt Yq&otY4*BGɴ4og(! hq(%WAV/.!B!.} T/|7SB LNC3 :l[Q`ΒL@uM~ްMg()hQϨ%B+.+bV-}QSJ.VTMWm^Ѩ3& F֒~B4.뤁bagw@!ItU.\?>Ft]\Шn}%+)pP '^?ǻJ!he)7i2]@gF7!oP)\آ Iҕ5;%1ӯeM : a )POY'~Xhq ~KM:7 'Πf$Cs:J/"JEtD良IѴh![z:ec'x}X+c?xi;Ś"|D!;%,ML|t]Pzg = 4rT]iEa`bN(Vd$XLdN* T~|[՞#rHPCLtBog4VI]q3Q#`?ꥑ ap ɚKREp7OVctL.F3Ӻޡ<@ʂîLWDFkVkQz7ߓ޺nWYͬ~ɹpJN8b&)06Lr 8/[X\lLiA7<Է}wbD9_X[˗"|Q;iЕ4^v[;x8,B:9X$ΙT`Cs"D# 5Z!p6w?'@pW:|C2ܱ>$PVMǑ4I5Gj]B/Yd ~}bwKBz?$#:UXflOY<9C3q_j0$tdnwh?H$Ȏ=q@=S,.U;LSO;93M/CCC-KܜTYH V vi\%3(0h`PXDDe"yJ!B0IZ矿%ɧ5Tc?=9|w:Vf> :C|J)aǰ{~#49gNLGTY>D]!>@kE,<^5K_ ߡ`*Q\:/ nSǓoWsxvP92Vr\ht()Oj->ELVz:N퀈/ brK&Z%@@t/"hq}h!q{Tp Az`!B &  Z/ps`Q=.mК[A/50)Ҧ[lLЄٙUhڍ(z4df?:Cs DDg*J0*1Wr;mGL:ES2R ^/1sDpI`}?6 ynsug뮶`/44=>fUN@Dr^H)Q;0%3j>(0C"b._r F RvIX`m<Q]4 mz vSNaSX1}.NZxY!rP FbS׷[!?|ʊb(ne^ f{@<)nvcѤ{B-FX7mQ~í}ξ3Iuv$?n>{v''80K;۩ <=/bt/IJTkʐrFCB:޲+16⦺Fo n_n]uNF]ZcF1Z4V! p ԰K:u(aϪ>=G]U&,C[ qVl&uh e"(v \χߪ;]d!u+^ILv^쁻{yZw%UMt3Qq<"ϠCN|Ze' B)%NuV|Sfzm S"%gQ&VnrF7b|5$RÞ@`a;Ʌ;:8&揗ޔȔi^ֈ ɢժa%FUp7,OR%C[2_G %V,,(aDd=FZzD1GP U'ֹgժS.9=&d~ /bY)Š+4va+@k0%F 0 8|@FOrycNํ:DN;'lnjF_2Q+O8ǔ\h+;wmOo $ݣ>u-`دrYPR ' \j@qK`*UD >"īޝC*T P;BE{C>|Iw9=U$(8eaې\=p-j5P$3Hit p2 {V 2uF!*ĵx@JF@@,b9"{1HDu%P7f1 @%ͶhM`@G JUWIxfw1oӨ>ׅ e+UrDzh9 h0qg83`X}֚Wmg:]cm07I-, D֣kȂpX6|N&F&ړk4Z> 1S.ٓI:fۼ47+REfaRf`ty1E T"fɷrNSvTyl H{GbLC*;v&e%yз ]wgֵF_ p#d=zqIwՈ.O9 |oj85>;R." d}n޴5zE3YX2|ȍXGW0d"F)LŽsA@{4+%XyFb$K.T\%6l͒޺3|R~oP=@*FKw <=@ճLD&wy@.Sn4Xè AP@g5Z*vOxz+cQÈ ю2QU:EzbRnQ"D}c9@(P%r9۰Oi ѣBU> $B6*Λퟨ:c釞UF#HPT@sV+f! wڀ̖,v&gX3ayS y(- +qy/i xd\TB]MВ~Z*chm}``hUUM x>GMyW *^"V~~̹ 8QٸF;i(u^hlh}=\˶ N\QYVтyd?%J}Žc4 n$x^0x5o^dqy=|uON)pqk #e6!Rcw1M%8'%>$ODWZtIq%](LKm2p92PN~ۮ5 QK *d\d=vkwd*C801ќ0IM"s䵒hZrq]c2]c8?ȇZUȷW&cI& M4{-B(=ꧥ$J(,Bx zyw.81L%7*'~;.q֏J{ƭZr=\DV`]3d-B>0*gvMB Bt7 sjoWk^j(Whۇ˵{U[u^I$3ec.D1s.1i ;*?Ƒ3 ccћ+($J?d?nCPHUdcvr(^s%CP 2Bt&p.nDv/ᇃނ\\"G: -DiwLrwW32pBZˡH`n9lJ}ڵU*^g%^ov$y%9ƐBsnoGgEgDJ5ej):*4e.֨Q#u9D*~0_L }NJC|%^8 -?1'l{f(v\6iEﱑ׈Of#շ}Lj韈quƃ:@]ljw˹ZA䘥MOO[qo|fM3Es}peD6q/yW@;.hnڰfcRp&g/9BvkvO NP9ܳpP9/t<A:Pm7GCn!GD{D=u&o!F$?Co,@Vr8OꖼP2-IF (^K_l[Bou۝JGeYl]?[dةj%-7M@( IwChB*!SҊW}n~OP=sjr2i伣CR߿k'`8b&liS\AkWH.g9/ԭ zS{O+a`1 9s9^ntX*a%c%ȗ!_ 1oOhB ̀]AXz}LW8CNE^>G6!8~bȿu"B~U-ʋ^wӁjJDOF$(s%LUs}Hch )"ym%7AvDΒQ<%! (qದ<[emb-sT!Il* I%-Doçfm<>nEI:`bd\n BOYjˋ ԐwOclM%=-Ƈ"z b<yǿ`0p ٙ# *.LaI(iJqC[cSpvrjEH:&'Nܡ~;.eAd!~-8v2)ꊋPX^q&9(z8utV-% =v2Y; e2GH  A&gJTN8,Pȝ:9j]AbdAKVB6ѶcBA]nWeX=7Kdi,}R>2PdW+'> Cvƻl18^S#gCK֬CL|3W7>SX%_Ի31(TkX֍=sRtm6@B4'`6teiL+)/lgϱ9K{C Wy)eͻzV/wb +T1چwY{!(͖EWFu.|I4G*zuuߔ>RJ$ƿrDR/yEK<),ܶ!9K.Ühl7? #R SW?BD#ۦJEg;W;*q:kYq6PTja #BH_)/||_VO{-C9; uXuDfo\d9;vs]FMtTCkN=D%˖@p+S=^e ZۗӡKqҠ)#)^6܎7ykr|('4Y"'ZRtwT{oq\gk@>3'䬚&F3(rpþj-)MF9).f{/ S8$`~Ysk)ixe@&hޖ&RG*P}n`TCWC?Fvg sD k|*mitx(#}?_k -1P,{P(Z"|mkX$X !k|]S7y>ȚΘe6֚P /(HF +C=ZQS=E_*dWK Y09Dh1g4 w7 }{waՌn(a Җ:hgzv;^f{X=`붎g~\NHBJ͑ڂml.qc[Gc|OsQ ;ܽ+z#aX!B2]r;w|3aYWvnd)k\,4CkVv_scvpu߅4H) ԍf,&L{xn̖H3A\Uҹbʗ&D↴ V6i.Xgr `m ȓ]_n:kUn9ȕ9Kfb-D=yIg++շr ZDF+xy6Mڦ~ K忕F(p2w*͢gJzX x<ړZuun1@iZ>u pEO+6JP F+jVjA'> `ʐد^N4 gzSVȘ,hX*f@{ڜbXMV?9Ak.R/xh7c&(wǶy}h*@t%>/ytsִ$y.߃i/*lPObe&)ɨcl&iþ[JbTE9u@ʭk~ck7\0ags{^`EA_9k$д@O=_J0D/G}ғiFM';%K7p)ValzT: rfy]'nm_H@ KKc?.Lsx1]C5DqKM*AIdwmg`m4b d}G_ K c\f06$76^ 4q0?Qiik[a]*fi3Jkjh]<(~rU.BTJU~ P{#ZX&9t7<ȈؖjrW.,7Xfz1sh84^YͶ7ϤٵyQPq7+qѫ"FyV5wgXZWл_w;qvX-B:+>K6ܴ:kB{Bn€VqgH6!:0/3jpLbk^$3+&h}w DEOR%3O;~'ʢ %EqO4%5H TSK6߳L$ u?׾jr~ap/K]iu,Ů_<1ivOSvؙ$/27KU Q)UgsJ5=ԠJv8StHp-E67Z+/kH^K0X(mQI&}jL*R2״!"oOj2d$>\PUXMX=ݠ{Ӣ&0noYm f =z$Ekn@|!ր\KӕB;!vZE?/?g `R]a7Ҫdb2#U1Ux}HZ,D,}؀{֨GYج>/9W~h|L ёsnF3.sF&[%U_vFsӾ-Ce8Y@xE];#R\'i9 Jw{K'pH^Ӓ2nM68B&|Bfi|T9$>Х#GVgxOJ*t)TA=8#nJ9V5?Euu$j*v)"!Xy ; K+ D}p uHJ: Aב'EVkhRA^nb;.#mRj_X m@ x\b1.(} Ib9_ƿߴW"}ӘЫ1JRBxq`gmBKu#ix>yKo?u$ǵ=nϫ^l9oqzF)s4+(5rɇ|ERξ%nWKESG$׸*3H!wg*bT;aO& ! \0*DK_ fx%!Q?) U|;_qR7X=29;ۍZIed5ok-> TJivbvQJs,"ݜfMݜ?*!u,Ժ>1)1v!h8ֳ?(@0QKnY8- 5Ԉ ~*Yk5ӅR5>Β ڱ=W9aǝ +3Oa-@(sr0r FrcVt`o) rT8.#U p8aYCnGeO}QRbH-*g)2P >KsS) o&|ic(}a̗_=/ gTځm<\#?z9~w@1L&.Zͼd"DFe'#3}[7~>dWpJ_Y09/B=|WC~A*BG!'VfJ&g}\^:\(0kߠpԋxnXROJ~_@,b2(7}^v(2@v1f,yCϵ'X)2$ɧ?uk ~Wd@ɛ=B_̱SJikj"X0ޛg8,p| 3M|wbw(9 ip(XYS4ZC\FmQO:`' b.̓O-U?:[emAzl5]-Ưt۰5wIyMRYZM(;XOeA#6>6}ADᜣx6+~=^2&V>CMPYc&|G&G(qtWɬ9׼͝v*ⶂzg7_5`5Q,k "z5JQij`e~=OqC=OI|iH sޓWA7`\MuׁO|=!j6I2)ttޚk(p77f1|jÆ; OSjWX'.ޞ Eh!Tv.]Yjykq09ۏnh:7Ky$ԄR``]6gV;qD8 HJdC6h;;(("ಜcAe[͹#4B=% cAv_xjQEѨRA N uL E-}Hse/V쩷3D)z*m:^"R6hG7̰0';?"F9tϬSձʻ+ ؍j85H6q  ^+UI9ڎV/Y;A:t>=o!>E3JF[}!<=}#wi$qgċz9UĻVku/XO,QRq&* !]SR0]!/y4gW}Fӹctzc.,LnkI"WVZG~pʁڃ=N=ċ^!;M΁.UKl:yOB%dɎ k hm "U;[8QLj]&2RğՈ[y2,%j?Py6@M-!lζ~c ު "V$T:%WE#]kK)\_E2lb'導OVQiLEQa{q'TH^õ -ZB}f^Y\+< oB0xؿط1M2g\'eiC<ioDsU]?wu_MI @6C+Ǡ}UH2V'YyI-<ᕡ m74yf>^8g9f4׌%veT򃻗+Kp'+P5=YZIc XH%e4a˗KyP%^NC OiomˆdH6^ IҨH36*D E:bG<ׄ*I=,۬W@[XrbWX0(;cfeه, ϤGi#q=|PCquc]QXoX.*+'s)>Z]]gY!5G&yA3zQ cz݈JYOY[^3PhTJ}}mʵJ~$Y_ߵSagxEM&Km'7fE\1gܥ*& E6YxcMqt|ëCrr6U3Y5ҍiRM02:/k,%kh^GjǑ穩$KJX9 8vlR1'WLF;6Q)3텚'; Wx n~{֝^HDB>0j<%v1^Fh Imıu> ~wh%=8)_g1j`nxTZs Ē7rROv1;HRs)N 7x+b^qhKq#7wv,Co\sa;Qb}nEWͥNx5/} sլ]=eBGݮ:YF' Ov>/&*ڃx%e1(ۛ!+/S6v7; ֪gA\ f;GǨ8GVac.ߔ8A#{a;TUb#M=~nc 5 AS1sb繇m)xǘTiP-ܯ) j3@ë#׮8Yqs7,EQ<'<7]'Mϸ~$}ł4T"NݽvAQPI~tdO&jH\R߆ʪZ" A%MVf>Y `Nw='}mUSSo^v3G$w3A P6PPu9Pu̗q_©#Gh]ޛxeNJ  =jQr}25ۺe'aMa ː-8悾NҴ5KDn]UrRtsc>Ed?jtfT􁱄錑V(}GO$ȗھX#8xރ"I)ICY᯹$}R h. WoQ]U0 Rs'D8_qrM)M5Ny^jc)DU!w:͊Ma=* JP*V *NegZڐkm ưS5*b1#M˖]HEƝ>Zj*y6]Ͳ/.!@wxI/- |âPbWy#HDݏk^PnMYBH'uA풢\~Nv?(X ]W5HQl䟹qdr׉xN֪sUa|`(A$c LNw Qvfozѕ8BT1NF}ǬJ^ Hyr!}׍ ?T.1lk Ԑp^^]}=r-1v#QI !v7}K~Bt#聤|[f/|\Y=0a &2Sa*`ǟK9)!vݩX:DiB^yBlq jC`VRdLWpLU){I{ȧ˿KW>d0Jv$P a.БG!6[Mp='!r1΢c2uNI/ɩz 0xPJa2C:8'v:?dli JHnkQVUnrQ0o7HUZ>Uohq(&b8Vw n_uU&>]N5f6}_&Bk5A7R@GA8KQN :C#U+.E:|m$){]{_TpBCmݥ:N5-㋈Ht__ J+~׺bŗJ(HS ZNy&w%kuԋeU0TjB<#WZٔ UOfuY/;:tB:q4w k?=#Ր` 7Lc͂:n(2w3E2z>:옞 ! />;wm]ĩru*եٻJcs(~eﰊ<:fŎ$r yoPi$2}~T TH6κ75 fHVI{+?EDD6T1|u+f=osX i \cVse #QM`x7_VCg݌2LR DcM<-$tBP$GڞX$d[6GLFƏ`|fήqx 81~!HNhrh>eՖm8v&^b;4MJ^PìNt4;f:ؾգ]9ܻ ^ :0#9D^ul̔fpeVGD}V-`[5 1_NߒDꃸ`jА# |s5KvsQ~uQc5` BR.8wnZx"V Osx ><B2D ȈX뗿=u>$ eA(x>fǰPEK2Fv 4Y`je"֛S0غqajD:=aRj!L~(VĮB5">~I}ADjP)ƴnE3 I0 &V0,8FR}?/P :WX?(*(u ,E1TϋC91QK_![V\f;E42|$tÍ.V=L?C{jSI= 9Ĵ|Ƣbf μ*Ck_2Z p]- GO&{` `']wܵ|zhkS*]SeL 3,ryW@FPe5`K?8$=LM.SӃ?8ߐ4QyWoxp eq Bdd1b|^ZQ!KFig)lQE0n?jҷr쀤k.嗖]셏}jP ~^P=(GO %^NȊǗu'FG.]*DnN)uL#nޗYgn)`zR,.!,F~&L?:5oi/Wm4ͭP^lv?2Rm!p:3@  jK ('ƁK*Վ+)S 4OE<ܼcU0GX|v?mE{hjV gZ\yPJT+{Csb"2k6B]cZB5񀮄(4D+? ~Z8Iw0"]Ӽ0<&tv)ʢIM@ އUMPPQ2zˏgDL6'09w"&=dͱ ~1F*WTrZm$tH»h"eVl)<!GLǸF/mCD@PAB"_+JQhqjKd 8b  ~*'AǛoBbrXµx!SǦvy' ,3>Vо0\?CN @ r&6+3"A:SAyId[nϙTa?j_4N/OL~P`i<)Eu9B7_R̩;:W<2PXBPn n j ,g\ i[ϱNR^Ӳ?j640cᵜq cEb}^w[xED(iyk%(aG@ XBGy fwQ_ʁPO^G%utppszmݰ/hi #+oa?. {\@ o\zdD17(Tv}Q /zւunpI䶊zVw\`28 sk;JɄc gf$+ɲ'(pY:&^r2YTo9[O9 @ jhs?^5߻8+,2c_YP$JGЖAo'09~3}?H|tE*v, cԆLLXXBF$ܡWru*EHİ&ޫyOɜn3{ROt[;pG7Bd T Xb3df)|5mň%* }E+'Yɮsˤ0^F'ph/NM"pTAR܀&uˉw6 ;aDlIϲX'@ғe?bF4QhPor~kvw$+!m nlZj/K/r5hH :~ZY'n跢֨.u7`F^>ǚEO~iw<| X۫.윍NIQ9z]whPT~J[_*~OјwD2^_m3X([1[K3-H]zꊌ͏Õ.N{R\\F uQ0\9W:%Qr7/\["FPߩ§kE` rH!NǏtMDގ yfFNw(5 ?gZ7H9Dh\1<I]*_[ ,`G k/PQu'7?7l2UocS`-2`Ya}yT4B@ZU Z/W!hF$IFV !& C}rf\8_GPE`Kߕ4"JL>2s3;nxIɅm X[dCxB_ED#Ue;\oT*q )ܿ`mbLdJɕȈ+i=OYJIB־m|@Q幰5e:XsAk;*"} G[އt;;@2kj;r$ٝ(RȻO=/&ET }"W.C|< ^n~dxܸbu* :djPɪ3?yf: hvDf{O8Eۣ˥z#HP<\F|jv`fdI4q1z 4Zid U*^KN,as&=• ^&aZ.#%R2o?"8cmYJG{owé>U՞!2%ehҽLF-Ԗ75&}0%A0:[-?aWXM$.AJ) "mxDZ; !nE,-&2u.F!p`jåJ5\uQtzƋi%0RG48zWϘ.iw6tpW+j,AGU+?9a%-kY/^K) ;G sb-d٣>g ; E<V H a,G~@@v;<~rSo{ s 5T9h5qh.d~Z=C( b8rkV2>!/vmyh= Z6˖}q$]e[.7Kb%QY.G B-@OT0Ns24bda4BM0!5& RVbq,҂ܬ #֤|Q9m&50(4y2m(Ӄ3g3M)'D)la n1m3,W\jSl¹ɭʛp6c@V_1Z:Ό/`/EvОmYÇ=)!xJcRAeJO3 s f(?;vM=h(_8ñ4Κ_.el* n;7[$] ;.vf?cK GGw"~zn~]8Oسrj%%^Օn坟P('@Sp?_ ҡm28JV63ļj}ڰ,6~LD]#q(l]B:!:Ou{ݫ}-hOU֐#rpp(C@l=ِ݉DAcvH`,{)F,Nj?gwhѾ&NoTdN?пzŅJjJGm PQ0p)SfڻiCR!ԗXIή۩&%ςV5 /6HWhu J#=Bɥ.{Gu, 80]FZ;:?[(4`;&w}(UC p` HDU2wQ"ūϮ+Zؘ ꣑Xpȹ%t[4lMzQ._QY|/*hц_&; WHJQ?);SfN<]*iCyp>h=4 &!0 !In8rXRXSBkG`QW*HBAF<%u}KCo=> 9p Ԭsߥrxm/s6m3/-r.YKqـIF,9?e:u{WlNG*m4E{=6+?]T'X`U yr ﶘ<VJ^jl(׏`R^mrJ6Ϳ%څ :Ĩ^]}ɖ<DL&r4cJL<q WCC+5Z[m>^K X2CG1eѕEԊz1rp&bJ)(K \h -H^tɓq" iGY0S1'}7̕tݦR$ʅ{%g.W 9X" ǘR`y9椇b-x15d[Hm~ 3~̋@+9vлG츶FvwzL֤쩫@[ raՃc'u l[>zOOxgau:O5ˈNRԑu',]5IW-2L=87 ^6;8;#s2WDCM55y;-׋O(pL$pzcsc[-W2>겆P&r˧oz OEN-7kpY5:wNF57^WnOW-wR_j^e3m=tqN8[=:nn$7.Eu'45V5!$Mjd< 3^: FLkCӠr`G5vi('S9|U=sR /΁SCX@? K@Orj%wٖZ̫~{L-4Vky19LJdG5Iiz 4PA]*IDTE,J02 jeS0K}|Y;'\rѫN)3Qr8 4Vpi s/Ź$YܡRq[S[lc\nZmp1g^_óY"995f4Cҫnie L ȏ!{wWNkňhkHt3`HyVƠeC[B*D]g=|?Px&U3(#v"X.y~Mn4KrzX?0 eKG~g[ M4QE#+q=H%1w:KFW-{^-e;:dTKt.Y*`m -/c?&ؤ=r~ʜQh~:akdH#<dzK,'!G@[>ɻt6Bx@sn-6&[] ?щn%xxi* ٣V+rťO LeSԔ~K՞JRۣS~ E kVmwF5Tz9/sr^xp-YG =2Bmy^ʳd Ga\o777XLR*%e2~ ߋ6藣m @5JWJr^ z7'חd"a7ͲP%i>! )h)*zPMQ=80:~6b Vp.Q7@,}.}/ϒ0𦔈 1jSڴsv0[xM`!4dnp.gUzف,59vR#xQczw_S[3ݜ K>.1}q/FPFUy%,v, Ѵ~J0!s{DZ=ݷ ) @9KS z gJ Mr<нp>?$X4c]6A:%L*cC.^{$B"tFךe.Jg"<NeRf5n+쵅8@B+NlU,hfFNīUUѮQ/";NCY/ݍHMˡ9O"c(C*0;2tff" >'[,H~f=O=DWq(;ď\{5^\f> .MH _oM {.97u-Ӕ3vʯlpܣS|lQ8iNu#YᾒONZ` sз }|\:[ f1o> \fIYBǷ;ޢ}JRս*>ACc)/nn&Zծ6+L/\Z ُfR28}%@؏hm<@1 ?FH*OLu]j8}p9F8sKu>i,Q9NEe\B\3 +2Y|Tu銥U0.F"G[MB½J1,a!)GA:Pfd%BG)F!i>CL|BߩaapD#'^/yTeVN0~))^|W2}|( z@WO\% $}KӘ3 ҫ8-_|"L <Gz [jΊ4KW 1x278` s'eDYca*YSpѳc V=c 7"زu;>;#s=R~{Kr?"06nَxn 7v1"yrodЍ0 ِC;(9g> a'wN}ٿ< pgtCDI"W,2s( R Oa#r@r빭V 0~FCTL46$5D|5G̶`;mpLOmj6=xH:ka7 oMAKKҙ젇w-j9z Df3X9'.| 1n?oQu#d=MJ+rIf;MJ,9W^.`ऐ*qK~JJ)G! %'νb<ԉtLp>2|F]ҹxT!Ѧ;ˈ|Y|Sџ~b9٥m O NR" 򭰪!# /0C1rj;#og.ɦsOiY&;URhSwηT]\xUIJ i^Xcӆ?`j^tN/\"GDAP|Y>TRmݙ2m>e/XkiP%Җ-:ߦ+LfZСxѻ"P)) {bρ n̅A Zchf&o~cXPV1JK Hsw9yu˷OR\Wi#{9`*MYTr7Dx*u \z*{8R{u7h QFcQ fi5B,-,܇㌊>Ner%1!(%;P>xv`]йK6kM36wΩ~0uXI/?;s'qX^HQl3 (_Ӱ*~w9ݍZ"vL'5[ˈW0i y&6.8`(fX-Ƨ独.~(BBDЄeL@ϞFA̸Z_@pZ @Գ=hˈk-OQMS{\Y|6tPۄ7Z?7jo( wсwZV-[Kp=TԷ@m;SKg eQmE:Fvmq~~Jr:Qs(\]Sn9j/TcT3rЏICj= e!L_,YX,K5OoO<HHI9q"죄Qu{rI΂f!EaB vNw0rx߆_>ɕc]Ċ'KuYIoFE*|(tN3S3<32Hٻ}6BVCXh5 KI7*>A]!JBK=ix:bW#`Ei_$#kkĨ-~m3}-彀S-~[DT6}#$OM4IR\;qܪ5uʆ&a^G`?&}'<O&῟Kz,\ DPLMx4?z0f'͸@C4&B8WE-_H.pL"}7l&^+chcGgpY;Y*Gݑ,53i`^g=ø8-)e5 #o/m+{,#Qާ[>}x0zV5V_E`WW@0sS/xF%]2 GR] 1 )lEHKcMe8b=ih5GIOD?*#MSHY RbXNa` Yrsk TdW(_h}^WvC}d;M2kv_04_7[!'b%R]ˆ0?|gN ;A@hc WUv4+h&[v1 RWF@ɸ[2琦bȱQY! -~WW-ÔCY,3*N}& O6Gp u!%aݵ%z]|aK[d]FXrh'ldH&d(wIy[HKhLJ>R T\k}Аa c!qJJ\GMhp1F|oCN%"D y~VcK;$. [9핚Ö@x%]yhW ׽KoMrE+[}Yxo(d}S %ab$a74L%JJ޴~.gcR<\?fHq]F_d/ӛWPQv/P/>Ƣ`7˂nV6 u!h8qh~|vU" ظqbs||y8y,|杘hr/Mʙ&*u1)*w0N^/!ڋXZ3SHrUX\\ZkȵLq΀UWmUeu GV>Zk%mZzFN>kFz;*XNRNO~Bc_^ BH/vDCxKkYf3n\j;9y'dG,h&ztTב?Yڌڮ⏟_B΅f yM023I4L?U>fvՆg@s&*tYP8PO69=-+lVcȶ琤;ү65= %gpg$x[rT' BYG/Ȝ?tcFQ^ae䵬+lyzj+/3Y^-h]-a-+p*:"OԻ?vdKc- ፯] >@w۱= ~%)@Mbn|w>dqNx< rihnQaLEMKwZE%.I^Y2gH:4%|2s7آ|*m^þ4w TrMKXd=yX@ӀZk)!3`cY|r=^iIU V1.S {WVt}ސ@ [)]dUbFحgQNCN:tޝ|*&Y8#6̐w@h׍jaTpe7[[M[ʄ92=e|Uw'jXuSw9i=Έ~ \ږ.\: ϸ'7,8qd˟QyF3CMr=0R"}-L&gF70a>e^wCĵh_UK>| Ĝr]𑵭H/{ZWhoAG "i p$glI5z%xB"31TwpUJ/06/vuD!L9VDTsk,Fv3=cG+f6%p&>B5PJ: aBuH05:)^i?sV+Ӥ\ FPu&wRFi2׏aZGa&7^qTsFg}~m3( a's!,iNC<ᚘe&Hj!P |m홺ŵO, >m>XXz ;f+m/"ӕ :jqq]t@)>Q>Q°]uOoTH@oHE?@: o?W0'p9O qF4鈄tbh.uz&∩ȒkB~C5C EO#m<yc_8h?L1{+LU,/Rt6eCscdPu(ϙ4v!Ɇ6T~ԆUW0)S|;^9L |a[\yZ+ɀd$-GJDZG@1!۰VS1=$*%L^oPkuD,107 /H6mRXA#!޶QMſO wyG36&zt{}~j@iB1 !j Wj vd_ƟGӑZS4aDE|&Wi1D׹4ej&r46Dh=syD=LK7t \TUf<[5?ԼC<Tr#T/ُyNp)@hG Bw28z-AmPܸըSzLks}h5+SHeP)&<Vrh]7WS9,`iKn& u D 4{'a"UA]; ]}Ս$C)#-ޙ|Cv*Tm}a?j0Z}M1UDpqp WBj iIc{ l]"Z"]f{%qc}_)iz瞗Qx.8ބw{"vby5$VUqfDt}K.xyG1Ed:}6| gh{cgY1w29d[^uղ͡niXVYa2C0]n-xqnm^(`Zpj- l޹J`t0J8{@Ecj*vFT b=r ;Fm3vwoGjbA?p8V!x_{9-<`eX8R~Ã'ҁ!a?.& c, Q\քVͦIx"фS"qԾctYWO:M5}7 .ͽKZœ(+V+y}Z}uTf,|]Mi QZs'J]$)IAwt9!d"pW~+i"il8&Yo~&26b!ō7,~p{xY=x >lP8eޣYRF"(C m?ˏ2lx$19!)Iz}x ҭ`iMAI6Y)&MI h{. iȀ%AW)@̜f!Սm)D<[T(_R]x"^?-0YjV)$%6$lí2 gY5̫{m"p!{&Lj t6̕2%OO8܎VmHpo(O:;ڸ.#0P96>"D^7FQSO`.}[/6"XHj{v aT ַ̈>Qf,;1pϊ5VOun uv;<6t5sNL1 TE! \ 2:!b4=SK+4"_؎:f}g8,f< Yky<-?TW|GqCS\K*qp*|VD@?f/z[(Kq]r<woSs>-e>"'Q M /( MQ}xx^0컮\@d 8}ͥ} tQJ=%]}]#&ޟqg湠I5+m +[si'ڕp8yyZmeoE-u6K5h>iacA&EP6M:@쮘F]ͳ #n-d:0 ^px6g8= P]vByF%H s` .bVS J9'Q3 K K>T8bq`i.3`%>nkQϡ8dx}W[% fcY~^V+(.^Y@CtR*`)a"HmKIrLM}/C2 nXSݥmh=mg*6Q qM"uMCD |S<{ٔcb_MA`*fC^߃TsBBM,JJQ,DI4#c Ddv" Q; ͞'HA밂j,đͦX>;Z%`I'h$h9]4BdlJ:~YAȍrFZ xl'X#qvU\MvN|,CF)4(1SG/|5~~?eVk4+~h|Z`5JPּd,*Ws$ΓuNf;?\5k&E!5f3_w)]^ bozy H|x;v7oM?q0_73^?;1a5\m ?1"7GUV4XpܢSj)I{=9FmX!y:u4MA_^fc{Vn "AP3׭џ_T#O[;8>O ,G|QyȝT/J4Q KC=>:xSσ^LO=O*-OypHA0Bhzs SGK8.fB8jN^Jm^L&Ȕ@G z& o&k[c␇FHIs[ٿ&zŧ1\;,e9Ʉv1OSM!@෌ {4xY_]n_9$D39Yyr`mV0pAWѿKFIńYQL :b(kh f0^3YXz\xVķyMg!+ǬTBIpdDI5c`ʆ}?BWWe A@gA(#d%܃JuKhٕoo#m3xZ6 2"*.͈aC漺Ob'29!bƫYdjG&~pLF&s#0sn~]p ztn rbxA5SDd:C Q[ۢ'7ANFz_uQhE&UwX7vEw| ߫jS_s: IYkD'GG^%p@‹kסG1xMkگ]_V2.@%d{Qp7\m0-L1GME*95:I>kA;41eZ&\cSL®_ I87 [,R>hd9 ,6P =K: G]Z6wa;77d<h!`gRR1.'~ED-8!"IvLPFW? &$tՓ7}] @ I#kDs- ,E᯶|G!9[Q=r,[?sR-i"p&!⛍/Ϳt֡'oyV">0!veRM-!dj.a5:{+ Qe>RY ըaɼoU4U (LA}FXԮzCrM06 pOw'c!WVf1;M8vsv:s#8Q>Jv !sl8!=b\IYyZO_y DQ,5H*UUTb$ns/]/a%緹SR>ɮ53n;URN2ɳ:f[<˷\:%̞7'ʍXS 5yuYAs|gc0'Td>; 7% 4H73|Uݺ2ɮH\;lBY'Nd:\vC;qW3Cf %44?},b)X7vJ2BqH=k)yAT_1ũ + PrW Ql4{K"&ҫ̊ 1?mrԡ xm%&~2MoC[¡R̠kǂ+n_MPpc^Vٗr"TS%8pQ1j/1bCx#sa5i'x.Xt d:rL82c"ߝǢ ?[9/U邞Ş]5 r[GdJCy҅<;LgH,asi>PoҖ!QD7nK5߅bXP<]Tz+Ȥ90uj(|P&?L!ؐOTߵ{ecr׼PtD8,PBF}u!n'=SӏF&"HWuĆ]."-X\X?Д{?y߫#(nYrţHɾ%ΘgmU`G-;Q bLSdЊv͜D~z( Z1ʑA n9ίf@0I4Q^e3ˢҠe$Fٛk#PFr~߿ ~5,P xɱ(-TR x^\H~_L^~`e۬ǃF3ޛFKK^,(^*f?iW5t +./݀/ 5kQP)u=Xrd9F T;98·!k]_îPb#CnDb06|RzJ!ˤ f^BC[ISu*@4BZcߔ7`[a/ j]V0E""|,&7#nU+) [y 1P{[n͆f0NXu`ߑ 9g7 ;MI7\ׄV~1#kV\q.wHu r`j&}wpzđU Ӷ<{s0f+e"<$bggC2>? onTcxݫV96yxt/ l-Y8ޞXGsQ ʰ3 5l ncOn{ aۈdKxglH}n1XIHE6^1odE-F8$RF+FYMOȸG "nՄ 9FɆgV*BN)[&RϺVzLlgb 3%D`K'ȅ3yL.I ڙq ^odt.6^@]2 34!fw$ԅ7(3[Ӑ7_&>2;6ڿK:zYV;Fxh;UPŒJ,Pu} FzfjʖoNO\?_ XXsz'G:a(ziU544=I6' V|~6kL2ZT)#C$h>ac",™w!R핳;:E{"M,rW@{@+[sqdBɄiM:KMs130 aXQ#aA;2^mc:/d2_3\A&ɪkG;HMF1ZϾ :S c{ S |4iOPs*xõcVu 0U D˅\9 |A/A16Ӏh\\!uxjkkߕ%kk%; E.QW Q.r|GX6=r7a,gLGZNtV%`*<60ۿ|# S{Nq`~i=/U7| مҬ3%Q魢1Aϔ_`&J̼ia;AL* fOӰj6"meLd9FsqLT>F͸k1P:wn&N"z\Ca!̄]ѹ?nK?xƌ0&J᾵" a jvnCL6=$FjѨq3L#a8AD} u)ટEcŭ\8U{Ka<ywS2I <'ѷFkl]^V(7ώ\}8>uzMpw? "\CürlyPp 2GV'5UT>X35U2hTEe|d|k-6Ѥ02BPeyXF t׊8FkԮ>j ╪hsB׃aj[?K}KA۟@9SN6CAW_i }-})lf]e{M)s ~L@s;b8U a0Y!QڹJ чh6IujoNH8v3X4 &pw=<ďQu=1~<'HyuS?؊nW5kxPxJr_da s/0Ҷaj2&^vyܥijl)1&u=ΐ9^:`]!?@ƍ݋5H"M H]Z%-M@Hn=j,!!:>cKD P{t BFYY/v%:N#vHY+h5ƳɮnadF#*Vmviϖ4C.|c+ԋ :&bKWGGS"C%D8v#/C/&!xIߐ+SOqI u@w7w``  /#NB-5,Lߓw/rsl(`<l15C{ oڙ' eBoE RKtҁS03tnT ^H2>;Wiw<Vpi[Au3 *Qє5)mRQáh=R@d>\0)aMvopBQVQ9_ûHY-SkacZh?zPtM_mh>12X~iǎ6,"2ўܛcm<'KTD?(Q&tDr*FFOf@}d&}90D!tG fULe\+ZAA^9p3o[ZmxJU ezXr(40H!beT6-7fIEɤYIvNM` cgGe` [o6Jn^ ̈́WO\Q 1|5K^(n߀-R üq tqi С ƂaTD߅ƥ"a ܾL]9qH]2ۜUQю>[AXkW.d0Ņ<▛bȒhwbEpJjj(%ޟ2 gj{m]%%% 0c:偦*4e VS3Oy]b{4WThK' z둠6+ܲrS0f2u'ފ+c߸(J[,BqBH#7"0.a\۲gf4>;$ދ1Eh+ލtj!iz,#f0t}Q1DqG~j\1L{%}QYhZKO}AMmCFO ͔4_ hYywFP/c'AǪ әO("^*- sMTw n5@#f r;I`(0l_#Rt)og OElW fO5%(Cc`| J)Ei=! or6_HձA aXqO@ˏV#c@Pkl0*糣't(lu3~"jtG4Lbd4sEΣԐ3gE4 $ Ġ!p0'{(*T&^Pii s1X7uX~MA}?ce0c.W(a+0iiY^Hoc;OkJp7srl<-Dǁo-GDI\=VA"G|䲥6v.BlZxj]tXkҨ U7 >E[ܩb lU59f7Q`Z6gC7^3jۭ%, Q=bܔKSJfx{T*|V@;C h)Q7nP<`B;K_u"0x>jUL8 ]%O6;MFPi%t!C)3D2? 0M>1# Tj"#ZRh_o9/y%@niN 9' W?U(KJ?>#.@Tpj,!{ Ҵs@i/.{V Hb\:ߵvZG{fPؐ #39Tz&{n:,2 H 8u!T3hKl$_㣞k!j}і`8m gILG8ȀbOr-?O`I ?g杧_S>̇~ڈ Fe!2Pя9v RVC;8vR%\D#Ն neqnO+Umho}"m+{#oB޴͉ 2e]J|>> <;Ӵ%eЙ푆EpNj0b KFȅ3rZ֤ֆ63:u֌/L ߙ)y+ʨ+4j}xwތfO*U⺖nTh9YzgEAǝ3/y1K%q-NƢLw]BЬ''ª<3ƕ,TH<*vb5;=#MY\m98E XP@V";}cTɉs5X  2yOVRNMFG@oh[:HBr2 [H.e.k-d)2:Ǹ9hKcLT^mԬgP`N0iEȁc=qob͍!cCgE><-EI2>XCGes_IMGi %;X/%:#heo'z/ C*VoE)+(\ZVs<R/b'}H1cpEow@. *:oݵ+/ [Su{o肀<Ái+oܥjm4,}cY & mljmh\ErIG2;7J1bpY;#cyV\57_W ڴhrLR@8;ʙ,n8QCE¶*[VIHnE'{x^.mȚT^4R OlLiY`NDufVӝs9m8Zb>1t&Nۏ+vUVx{E h$d'E "/ i28S(:@qNw.nV(HDF٤mEr *;0T jd0#Y>|J^ ~8'7hNE/Ru8 .S4rwYL|k Ǡ\Ũ̓<X z1Ѓj%3vC c]ˏt>T:3D s6}1sT"!fU5\7| ^7$g<,Vov4LQ66. (XIFqG`Z~u>!ϸ _8Y]Ȭ/ z<#- u%r8sPXVIXͱ]l>,ʴ&Rj:bL2BrĎ_w5@,Wy6ϊ Vj6} ?*ߕҷ5A^ge7vbFj -+A66#ڥ k!A՟\/yq1) #;:&'k?X.u̫s)7 ^%dwQ"[Kh5wL.=ǹLGYWp"H_fˬT˖{,һ/qD9k~YP!!(?kb"%q裀ƕ& Nq?m`܌uFHaS%&p$4PRUc^ .鱑:cp.&AÍBJo:~kߪ\?j~Z5ob Jh.7SƂVg1y+ɰai/3@+'߀u<P*;!ϯu($slF/bD`-0!Z4R0P2Ůp73nQƈ* jX~a[Rܧ"HY7])0#`|@v/p:]WD)+ouFgPhYpٚGo++`U˂_m\"bw'Rqymp/"}hA0~ %& {Q 0vz0pH6`ӇWvW_шzZCLGr/e5 -3x4?)7dyRhm^5q1gd }wWk* qlmp |Yx#y16;UXnͫBϞ2@K Y{s{<"̒5*C >ƎޔsaB[oO*?a  ݼ;gF298x5K4m?qb _ZKz⊢ʖT?F@͗,٦]d1'o5d&v6amflm1H r\SoM-"Ց6L$I',MK% ?cb/:d)Ɂl|TVSuR~q, [x0v) U>,{ O#P*NJm0M1 ;3htu6h,ɟzWW`5*lPMjvp/8|í/>|l-8܂*➌^Mw2il늒66ezg~S#l{aVVGIN;B<$/ (XRs6EL[t<ITByT7# i4;1~3bZP5v##:TIL  =k81û#^)񑴐WT0S0|`A08ƲhK_+½:(aXw1ˆ̕ċJ$ܽsw]ŠFSf 2&ZKLECW4.VY~?\,(D׬2Hbz]Т31a,XwϘ{z9~LGfEqae z!p `XzQwRW㤖l0h'e~*h?XrBG=yK_c.9dP*^~ͽY0B_lEm owS"U'G)Ecz ' <_Cx*^"TWREo27]3ac}p`4=Ʈǯ;3rG!UgIChu@.3σpͣ4l{ܨsFA3٨qAwΦӃXp#'"SL`tT?cWeKqDEjp.2jE#8FtVѶ S=Y)" (+Hzqг=@~iڏY>V7<畃{zˑyux- ]gQ 6؋êeoI|]\+L%Vb/}]VB Sj[pb)M4cOgW*9k'*Feݎ{!$sAwgI"51Ǔc7E&7Nys,4|}oM&P iY^ M^d'3C! kkRm!Ix7O̜%9Ǩ kAg=iwQsoq2hPMM;lpD"ՌMrn6zuzzxn89NqA3QO2z*,hx_Z W;Fw]K=+ʸ}(* -2ڈa"|N:K:Y'70/@.p."UR _V >Ыv3,+^Zd:I s=sEj:HsN9fzincWFʌcC0K`:ތ4'pp[icj). *;& &\hc\hS%][*G_'7F?z2W&li BFK/g"}*sbhFy.~6D6u-BCE wX$8hsxg6e@o_=:; 7bɬx ehtr|SФ8LUG&o8pI}3-U,&A eUjǥq/]_MwvlH`.2F+&Pga}EN_Pw\Be1h "ݳ4zBԼK.mŀ-"p>K;ׇO_t4.50r+Ht?XՔX!TH<$" zQ5ū[(j.tet Ӧ|D)u11Ŧ:H]aha7Vk;mX-e ]hZ07)2;_e<_lB:X $V+gHqlK8v(@hrf}OUq`X|N#)k|@f~)!I֤6rF/6or!g翤%eP`b ߭#FU7xz% k'\AD g]q;yWj7R2  :ed-A%d(Ņ"H\ [ZӪ^P@2?Ni1*pq@ϮU=v|9٬5b cG<\u &1`#PKNmTBpѡ[rDMv!ԡ9Z*3wmF.V=Ԓ\Imi1k0 "wW[(-"PZk(p}E' ٕ xt7ٽO/W0=G6GUS~s1ZN;敕y`CSeT\ nm=cWـuwᅈ=GƬ߈ zajר Vw2rdFr6e0 .Hiߒ`aE/Ĕ^\MX*qQөi+H=N%a8IUѹbiGҟ$5Z Hh^ATW;eZ+Pk(Í;D"JG'ڐuQ$38'lDr!`k&4a%~'MH~X҉á u8P٩?+PO]2~%izPXxM1 UC K^M-̚uQMՊ8BKo3镾 ұ"; C| @KsLڦ8*7˲$VlƄTDlM 3ܺ,r<3mdkO㙷`'jlVUq&/ e}P%|4LQ=ڢth+{U9Os![uգ)S) _$x4y;Bd`ENUS$If-֋ELm*MG2M˘GԺ}Qɒ9Cg ^n?%F_TD2N]娠kGO3}>l~Y[]+2H!ԋiߺnDكsGVWf[nbu?SZsU;g x+=xk W+sqAf1Je1AjMJYgI^m`'RmoL"cX:/M&K]Qp؝`qYΦ;F?mj1 n /g IA!Hpt5%nXnUdSOMD!jiS[5&hg|7RYTqjpCdGmQӪ `R%;U$g(H<2y_!hD1.#ƱNgٸdh7ZhuDSϤqC6LטP1fC@vv1۵!34|RFRRβL`'YNO2 B=61T|f a㍤ߢqcw L~q<* f}6$B!rOPmR%9&ܮIMCmu\qlּE7^@͙lC Arq$::S@`|L' 奈?#E`-<KP"?xJZyWT6ڑԬ?K~ݱVG kPaE!Px؄Bt,6 NvdІ@]k=l`V~ AMwvzA:_8o\* ":zL:d?\ݧrOq6}=\{H'vd a@I4D"@(BJy,Dtt欵pL5;&BKǰ gM8 Td3䭏`z]Hf黏 )a]TQuliH(ѧeǾIyR+ef{D.ON7 O({?_)ﮡO5 <K 4{44MFT$;Q:V(0haM|ysY57"X}iIS7KEϟ12 ZsCm U>a;3L󹰽:7sCE~XSQ<`TA^G}1'D"!0F*t!bAVH,:&dEkBXuc5p|NnTf0o-Y_n!"Sţ2'MG|kZŇUEGo,x9]xਆ:6^oqP{5:oMX})" >IY %O]eya0}CxgGc@Dv" d-@\\("Q ᴈ4EOaw wy,z$#Y&ExHk B}şڑ!2ә>ZwěA8N&:|OA>8<&둨s>Ǘb.Bo_V- ^pK2ǩ-P:=YGW-dlś?~.j,ܫxFch.7gI7CjiU[ (8[C !]W;*66;C>GQ Sك ߒ]&W_%:Z橤r"+ M(L>)&@]~ֹ3C9hd-hFA$0\S:k}q/gWuFEӘZj/ b~~Yڃ+G<Ɗ8SGF{hˠW]U6*D甦O8vHij(!Ši#ݵ)B 1:7ӼghK3y $Jc @DLMK~rwfʽW7>K9|> xҽqoolx:Ȇ7hjdÐK/-$9 Z/Nv1&lY񣆟aVܨdbÝn@j/hLJ;c@DD | 2k@ qi˽>S:J&&'x_+-{>/=@hċ 8Q zM\fM΀-QD1u`5J=kNZgUUrSx*F)k^a`"._8L3R*(\;T"링X@Ev0b~xpn|܇ L<Y;P anp-ӒSgwF/- ,KL!=P(Xo0Y|j|ەĿcdMWJzfOqZ flWO'x`32<z ﳢ$/Sh%( ,`b - Ňk+y8R#ԩL@X^Ͳ4?~c<*Ś|~:#T0+ΪP|d v+7)o DwXbq"z/E\?XU Q@ x֚Íբ^z2chJ6͕=A`LY6lɗ$ݴZqbмi l*:{fze~t"8͵ƤePo@H{y2&%2jo_reyI1qYQRn G[ 1펞 iؙS_rþύ i"¿_X#WD~QUKάp+>F,5p֜A - ,0r/yg{H'KSʏkHx32>Ǥ"FXLDUв{Z}T+_Yx1%*F`p?ԭ,5GP~>7[Hy>1 <=57F!ZJcofAۮbqCֹntsv*}?j?W;qPM$JBI]/:0vmUhbjӯ}u6!/qV ,l%ڸO{xTr>bK˩YfiJ_k?4O-CK'.HbL ǯT|*Pgd#K9a Z$ٴ6pAm2D—Ry{ "^ }Jp̊#nywUKj[(K.]SCZ-`?5 " kַa~ [Isy׎9+P((O \X'*˧.Q8]CF|YMx߆H$ r>ǣl3ɯd6t6/`]kj[ N1~O䩳2`:/l(T>wMաm*K[ꐹ91@9qi"w {ꭠ}y*JD &$۾ Z$-zĭ>:K)^'~6i)B?n5^+ǃ3v 7Txi2w⾀cEÅ7 m E~YkFPowP izm*t_U.v.MQ !nr`=M 4N>GTϰ}֏ق J#o=<˪^P"|y2Tpm=jغ9/CGXޯb̻3u7.oX?J4Eo>VOsk)\i xП>/}Ɗ0eS]?nzm{NP0͈1gs>c\fjG5/"(Jja;-:P3]ΗO>FSl6N5ƥ{cz"TK&Ԡ6S`4uptSⱚ嚐-G^unh{A'ckvBAM{7 ]Gv?qB#]S:agM#{f`x"kdums_+?+V`ݲI+X!Z2YC$fiÑ0(Z2ѢΪVh}( wN;3XCx`v%CD]y=pHq0xm0Fpj+5E]G>?K ]CU4Of.,lg ~*<ݻp>0٬SYIkgvâv%X>qO2g_S0gR Ņip tS+0P/IͿ!5G)Y04\K;;<=Ds֌6pZ1l| 3fʊ[/ |ؑ]Lvo{{u܋Ӟm2KY&5>\hM/k댓mosF鸕kUCӸM Ҧ8MN<>"(Ƙ-='J1\uD1 1 Y%|0TAG3>#p1OK@l%x/6VW+w:Ŷ+ʌ65Z]5LlMcI'޺h&MF$hje+V_:;3g ino" §q$͆0j7:x/5K­M/6)>{ r">5lQs Ex lF{0VphnM_(sޭ#іD-rHQ+yc+m\oWM"Φ1qYgh`33ثF w}yf6 pHYAf\U6][;piX7×gys[¯gknk?[#M3~s.H>.qgKi^ge\$&RZS6SItr`yP@= ~(L_9a/_z$B^E`vfK!U02S@$kZ1NtP 2q Z hi%+P*5sA[)40a3l ^+7Vaj__o=;z?L|@`MC)&4 PS{ zuŖ F4cc!:v nn~NEh)ˈx7dKm O}/"7s`(֠Q}頸ᴷy |> 2o&mm(0jc ELښLL;>N-RB-cЫ#.>;1,FaH}&T73pB8Fr}*l sDy(_~/_ *tlQ,pu&ːAmwp'M!!q0 `8BbFjiӕz#ƫ)QMpE]ahպYSQ̰6RFՋ"Pд4R Y+ŽQh\DV2o3L: NC4ruܻ:t-> hipFM{\:i,?qOFNOobKeGg! YkKdd{E8$ػGeGI@Ȃ͙('@1v#2a<@C194ykyTa/7;o ?I*~dH$ ;So` .)c %zz|ZXSs1wRTi\껼ÂhD 6ǕOZ֪ƶ7 f'0@7Ϣmbu喻)։TfݪUCQXa-4 rHR}t6y0J\l¾h$KiVC" NST`ZN^LAmTLpE+]U~nhbE")LM>[ei&`lK`t]" Ã8Q z&0ޠ GnXFMN(q[<̀M!|5fTS|zh5:7iwLxX#ߌk̳E<T6rwM@3 ZC@kȰPIB  k^`T'?dV3 eHl JDɈѢ#Z54/'^@Ox.؄&A8Բ_Ƭd&״wD'Hկ&7y"lm6A'#ZybyUUZSxv/wT:Oč%4(e=ɴ/UCSKas9=؅I)[}q 'ks S_1':"s?Z2ǫ(:s&0V\&E=ÂQRlbkۍjcE}4j6/PqA&ڠk~㪗,nb^sV u:6"r0 W[Ah}4fxNǫl4u%5|Wȩw|eKP nQMSMp$PG)ỏdvmSkZo=!TLP*̘Q'ZeBU-LJ!߈UJ ,iǷr8ͽ0Oa/!kcoKr~= q -a=f+'wÒCe5+%왉l, jF﯅bDt>SJ5E0.ոIٍB"b/_>"Vp60=찇HE`'0@$4N84 66E,ZZbd<4N@,Պm RJ,T'ȉ""瀧7κڮ}(5,M]01|ZKA7WU|9 ^iZ`auզԘf~zE{lͣ!ƮO4X&5 / ZGRLpm1n; ʥB1Ru}pnss\'P Zx fsnYp)WH&' *~N8 Y71] Wl#/s>[/=9Dl.?[6Whe)$;8؜"Wᮙ # Ğg3t8|̾j`sHL+y֧o]櫵@U mxɦ10Qu?܌H!NMB.i((u^k*T(OC^T2)mO՟-ﵦ_ fOKk @؜vSvSj ͟/\Y( *Yk1.ʧTnЋ@lB(4*39LXi-Cs+)Gu1?V}M9Ig~>_ɛm̮VFV]jGgW^3ܚdK$4cNk>lT*Ӈ{D&m2Q[гSݞ2@!{iU;z.ڛ h ~/?%< #AN*wʔjmBxx3 \\ 0D VneHi÷]wu^,A2pȿn;s*"#H e zeJ ;4˹$[qq{(Qm-F05RvI<,@92WfUn6Z{gNHZ| rX]\Cs ]KI?M( h :zF8k 3 mmͺگ ~,ʧ9'9_ym#!|ټYu` ^q#nĥ+E$ O*rJfҵJZ-xipH4>G7Ů_|&bKN.گЏ`<,ԙ8CB0c>oegP5h6xHluvˊÕfRҹ G_U0WUCo$1\!D,]W?— CbдbO|&ּWcw[S)Ю͹'ԘG/+-L|AS:Q֊RکI~ļ ]S2) &j[+ ɎaҀ깮貣w"#GTuաr>P5!ԻۏF֝hڑ@ 6u{=t{$UnUG2<^R<< '!o;7O3oMD*҄uNmi-q߃~!ΒqF,t v1AyzE@k_nms<Y#KB;< ;{6/:Ӡ;qu,ܡ8wQF9ϛ-zNt|-;fM}+>xٸb6V++0=  ه0z5Tf\9G_qsey(!T $c1J}MY0qEҴVz)? T9'":z<y!,e:MьDr@wht(K/!zs](PL-*˽&[=4[U;|{`ίXn_FVuʉqa;WB[:1,24ץS2 P9.0(lMfݷP}0tV JJ-l߻:GSbT%C&= َ&qM.܉M!^j^A\uK)6tv$kzډiruЇHLBbGg /NX"@/R6EKzgG}j8*vFXҝAh5A' a0Bt+1])/{Ѩ\ ~8%Խt "lN؊"(0y $,4 ͖ja>-*<8ZSu'kk7snDT B@~_(VEvky**^#ǭ(MWDiĴ$.9@t^*4\4 ̫RlHyM?@fڐiΜ!XuJK;s53fՖSm!.c/,D=,kkF|̤9ه}H5|I.uҝNz 9aE=PzvL s4vWƤN8қ />4"n";YH0<)ቇ= V a:_Ny'ʩsŅzjktqZ\AP_ Y3ȋq!jJ:gYP>)Jg.Ir0fo J{?t)]Tnbtؚ (FEY6!Y.F#y6=BeжWbB /MtXOW$9\= yc>Q^1B}@fb4CQ9º"K^ק %p[Ѩb?#u 䔍[N X++xR1z盛T%l`h~bKSY_sm]\,H@0WuQ^CGhkdn1;6d[^ w% wsWnņN@`{c&@sz`$WuexdԌ̇9%k8˲%>iv&p>ym;_)?g(<j xGXyt j.D3"-Ww&w<9Wj5eTJӣEK%ᶚ w-"?su9u Q%Mk\A՘ s >&FڷHպ y5eωkC;T@75;:-iǺjsP? /pYr)nADj|sDiqIsa\ -~VCxD]!:ogl~$Uk rPZ]BX}` DLmDPEYL iAI#d6,+;h&L: tp#鼦‘e²OcD\(Y6֦1!x+c;mZזL{?F҅hވx\kpӵ;Z h'Al9AAq-Z9/10@f{ܣf޻7V:q k\R*N@Hx[qEA 62-(9JvqJwbc@shȍC+|G% 'YS- - k@1U2B7™NbM=lUyN#34|)A}0 yG%D&E׻l 4IpdU9. *mIUp.qBO&nbK~I KYpB@< 9YȣM]& A"`[FL8EԮu {8rb2c~r7RUĚNzT*N,#4 {TBC|\ajAf%-9:*^ z[@/S5ld oy-KhLä-n5*{FϧQth\fEۃm(?D>wf8B?Z΀GR=\.B D fh=u!Tph[!"GsB5*[t'd\ﳍ'`sKcv ݢ0:&-̯8{(gYiI SvM>5nh8yۜdt9[Jew+!rFrq[Qh?l$P $beKjtBPdDO̪ve1<@2H;\YaqJ=g%[&;.a ₳-=!nP8O:g[-:6 rd^7˫:>M!C_ a'>޷X5O?]0Mwxo ]GQbKgqY1:jUv>S2b[ϱ{ ZkZFįۡ9x|'b@{h/gv\dۈ^x+-W re7yQe5ĺ-xb0keyn3ӣ-J/ ar:1H! ?jgj g#zЀ+40~;TF:iO9h+a==@Geެg?$"c8Zn̯Vmr@ʳoGs/Bo< y~.Kl? #Nb ѳB~+Et~>@&1Gr6}qfcƸI#&TGxܝEڮR6F+矼ZG\;Im'@D&G>!z `8@m-`Μ30le{_b<3އFEEW;Z<~Ed0!DC%+ 7`C79C&_^ >a٭"Éh&I\iOW)=7eN p{hba8iTAa7KQwvr29rf$).%of%235+/xw5|P20zGSO\;d!9R& o ORJI-eBsJօCPG꟢`Jl!lK)'JsZ}0].{PR:#N 9bc0,j3ZEs.ë֡.vDPz(eq-rI膏jl{*tbLj́'%Vq# pZ/'!dŸY%bQQ(PukETHл"S4=aGH.pH WA.i+ lOK1vwW1]d3݁-}[,/oR 1ѕZ\g!ζ JBxdX$5T_ Nz5 kf"_,Ƅӎܢ mo]7V5 qz^:kR?\T%^][0x%:XW{ 9K{HJ1ۧt:>&MRQk"~Ub);qO68JV 鰼Z9hw%Y0g0脐΅[LXU2`/["4 5'=e$1֪4cN[Kf2rqHm\oKGlz)YM%:pi{ޘlw}wL5dv}׿~=놜P>j4QAd B]"t WD҄m\vNX~M&nbOnՕ_g^ob;,l8۞X8:WqSuVLjDfT8lr52EE:I̟z7gK;9-Z3Fepz`B0sG`b[}1.ܕl Mr7cz]Fy>CV/.>,U UqcQqL[meoM<UEyȐ߻uf*0_Aro E&IǡJ!-/B)o; ((|vSGZ}O7v (:C")ngkbI)r)-ljc&9t. J3Г6ҳRwB x&7c줗bW蜷`t Hg|v*8bڽ3m_yl]!SG>~ L":= Z~3QRT YF nʜ?.!/qg*{z@_x/\v48F.|l9uhlpWv6 $9t OU/φakKe_`y#E,Q%$$ xCxl+L7U:Zojnf0{wl0%_k+ޤL?̃Iy$Y3,q! s .^ Blc`-(C6V!J¦+iPxX~VdjHE2\&OyM d[BhBbD[ 7mB3\Gk ϲvՐuY2#ECʄD\Ϛ,ucV<5 ϪKcgSqs^sO34[Jfpl'7P>'`s > 3fO(U`gȧO&vDSZݞ T[(hEC2d+fŸ hf 凼sMϭ:u>gqT/u Fe>B8(V^d_e<5ѵp߲z_o̭ zd6`!<1(y }W ;4뢨5u /δqh"]%U(ſ75ktx,ٓ蚕-twǔH,~HènrˤҾVnIA'g8lusNcԫ` +2M;;c_ܤT=큲A0΋FEhmF|\}]U egTf>xsgb!y0ZUe~(i"D'?k<4[}t|MT7UHOQ]`  2l3x㚊>7IЍŨ[?FY.[g%c6")dqGm$RiKiPh;:xlaϜJ@#so86n)a(ilJa-cuFjdమ,_'iDrgpk1R3Ɩ{*P9R{TN"Ot>iR nfDܴ69K0>`<\$]Kypz!( A9]5]'d*)'iDSph*SeΡܨ)`*Z% aTt>V!VP]W.SY'!^ּԂ0k=:?IF6 9"6M [G#XAH.RrjPt4U{ (-|Ϡ}Ι\b2 ]ZF!It6T} SU<l#dxH :AԮNꗈc U;\9ɮ:ow#K hy㹘4oaikE7X# Vp+rLyf v.JDvd&}־MݟR1)EM)ig>; 4V_S;4  d4y@)\=zwW🟾}T2tZ_D 8V$Nh^J6mVgBy>ݵe$8)|>J mDMRfx85&3K}̗Na\j~`sktC?N1&Y&H,Ծ0+\dWzK2$,8C7#o~k\^̕Xb H 7ONngI/l׎3hq2i0Gy _oTeGlĨ::^ËEFz4/ZYgtU`x-XEO F4+<[Bq12X\]XIYpCHSqR`4)Fx\b}8萱qS5[Ɨ >ff[ XA乸2|YYAAM&*y,*[ۛe0sd CK1[^^}aɩW;}"PF Z;Y|7kkjG WCcjkŬt zxnnM>--EѐQ//9F R´&9)eWVUA[?+y'*Eu*KZt@Xr?W jŞ\[^MQ(ٮeW`D7^ښ$#?NZ=QøA>[ESƠhOrt5ܹ|mݵiyÅKP =2OrGh̬h}mъ<hv bLUUMFsӹ oPeDi^aV~tOvV$˒}X2*M\uv5] WG8uaKU |iOtH ^I_U;˚^騣䦔#2kaK]A 9iq&VL<Mˆ6y,T fq_789۰FG$Ȩ89Ee̺R?dzfsJ)Oc)^ ;̦֫c;7VOEثSb4l""rA\|svZzS7&WJBOrYƘ]ؼ#1Joܧx)'9fݢ)\չDP$юҦ᭓MH|$ڙ){!]" ճW 7t S jlLrf>9ھh=Ai2 . W^+Xՠ&iOv2N@1%+K=R˺IJ{IQkp-r0^ QwY&T ype6ayZ55lU$A,hHdbP..;=bSg'$ҷ8ufw5"8˷HAg'K,zz'4bԛK8I w*OIw =M NuHjm!3Zã xwp-aU{Uq /aff B#oڢӍ:qObz(6:aަvoxY\aC| lujFT:[#2@-PN-^85ddgSZ9N֦=RDagtXr&C&+У"$md$uVso-VwpgI4 K oK( D܎lQ#޺هcp7b+I8jQѝ2 zg^f3K TK0^HqssLى3N8ۦWYLG0 rrRT( H_x;ܸ 'Qf'DjcrOK@Z sݚ6,wƿ] <.q%bHgpX_6CU"ڐa{+Q;SsT(bZG:ԅƈ0~Ѭ954-_bM\zKr%ڥBAg7C"/&ωD$녴 榎8 puiSct%{ SdjP(eKw=BEb֞c$=HTi: z,N?>H\Wum sZh+_@2@?EiMe+E_es]qw$LÞg׏4(Ȕ2 P< ꌴMA{5tī}(ʀ>|sk'dvt:xkN 11o6l@%f4%spq=<羂KU\TB} ,I] [-3f[ iqo- )z+,󖨒s-7V`Z+Ue`!)`AT<\Wާy R1þ8iipXz@"Ds̛gX774 ݗ\mJ5|(%L"WP3/"}a6@O M6xL)c2TJ\r Q.!"NIygmcVЧ6޵`R; V(";M8Ci72[r &#O-ȿ1:V_3.h^~'pv\|%8M̹@EB?̇+_yuFx6)sGTOCRiɖ ǂz@Uy7A?uqAƥ;+dcDYeu*Y,$r>[u,0[szxEWq>i0ܱZc}/5c~cJcXJl2ƫiP4qHE'dS`hb"aS}kEY#7(xy)߷U;5 ߳`<8`ƈcS K9 +M3FW¡jBMFIہŸ%.sAaLBAt#R!tx4cՎM07@b܃uy 6Z,AƗ*j77=fsڛcj@({:QU+97FK\a{QDpCJ7bN Z lqoG%0_0= Rݽl\\XPΑjpDy)JpkµRuT(vJPq`~ ,fn֟~I@,cRΒ]p`]3JqX)".amcoLy{dGEq8S-o{[Ʋ[*B*܁}gXs#U/ oL/h orN$+ Y:"dDɈL<1Tp,+JsPmQ*:[-%έ4[<\Oo >(m`4VtU׀{lt"z1;>)~Pǀ©3i\*ȢAlh]Y F(R|UF?¸[Mkg`]֛kC?./CZEx|OC6Mސ!}5oDM*2c}VHvecRnHk%-сKbޠB~jY<>yqЇQ"w!ZJ Zx}tVمT| ܛxPf[qs`G<1,,̑_.GRwhhwkP4_ 9bSz 둝[βDP0ګs5-G#y% `ꆙ1FęaEmH]+td# עS ?p,^V,?X܋qMLo!cڑ.:XˇqB4PABo0"nOe?2mw[zj};?Ybt'q8cٹ}B!y7o*hf 6FNe jj _Qf#s7xEMkUߟɱ&K= _B&aĚ9&sj21o3#@ɇ0%1ȉF)ߕrT|pX@w.Љ`)тk 9s@Ȥ{ّ[`PAZȍ]mGl@`0VFzaJE,yie*z!yoo7#{ XEy#~ЧmC5=}LywJů3@Z5YlrUs⏹4 T-=1ۄfg_ LxlroԀk!k]Igf|nF6ɾsh'r84,bfZґE91x2H"@t(sb W[tdS'nma%~-RT~(|L/ӟpEk*ױ_;~&vLetmuuT] #yk s|tvK.ӱa?/ڵ \PeG-osFI]g(U%wOeጇraOi"W%,iK =S*T,'~>$7i{kom>ͤ=BFCiɣ";=A /U6EiSu  #\!=OL!% .^d! 3QY-Z-~{:[ vGŌ?kOl xQET_ w`< > kbWfv2PC qz2 ٜ,oi+vHkJ]C(A" q<:; m-V uLw2?xNgqDzåM$g\׌F0NfrGSֿvmt}ӑC!!`|l9:M{SjCW/Ԧi>+Ow㲡n@ ]+Խ,4.z3-4`z_m#5Ezl;-{ FBϞrÆJ*}uCqm q=_w9X{" h~GݡsZb{"vCe,J4$@V;1O0?{ nsQM;*Y /\]۾ﳾDy?Z)v4h!'W~ђ/'э\mr0ysHI{dV~\7wzByik< eR{ɄZ"tDR}I|e|Ah`Ε4P GKXO v ~8s nHuP_kR:#ۦΊ;W-_3Û%@_>*c7BdZ5 66eq/J{G ]z:$3cBZ.-n}L֡o 'jqHb9M;ҕ?9`Ӹ%ۮ83pTz&Őv[-VK`YUqrdG nRt|%8{u@j_ݎs0|(`~>#+&ƄR`˯ESN+ m }'N`+ĩ#Ώ]?“}UwĂ T\4Bޙ8'5 >Td [o3~$aq>X2qEw{Cڢe_arƧi-rH:( } gR;rtTRs>ׂ=̧;q!`_޼ Ǫ4}e2iGy6MWڇX2~Ue3ܱ;øWe b~Obgp4̊pXGr,Oʑ{ 5}Fi7UY%m-ԫϑ eFos%L˒ˬ]]ŒŽ~Bgsd[hx↔D9א =OOnE6k!g~1ǯy|J~w4*R&*YֳŸĉ<á۱? u:s1FBZ=Hkbb[7< MH@M~[5nR;Cf>cѤwz=2\_VM 1^kkIa[!!0-)j޹cYV -9;"-,ln'Lrȉ| DqE (Tova /|QN$5KJnfQ~wIpnaޘ  I2F+{f%$%9-Y#M- BJ$8Kp: 3 k5?܉ԑY9%cfxP'Lc1\;n+f. [a|dw󃘔[|MUqs^awD%9.bok?+Ķ߇G$} V={,-]d,IVվІ. 퐝nLs'0{df.]J颹NI}V{%"[bpvaâ5)PRԴGCK*G\`\lj}@L-)v^e,*y(fͅo":}d,.Ѡ2=G3w7% k(c u;w;8hMJ޴@.{9TؐN =#} Yu7^I{ᾠITIP'9iB̵[5j|'/%Ӫ·E|rJ%/>iXFn`<䫞R$P0V˷"&Ws%W;ȡ>N=WV;? uA#Av87dt信UF>d©dfltQb<5͝I1P4@:H `ϮEv퐪psr?x 7OCLW gYԙ#Φ @eo1צ?_ᆲ̰W5E;scsAY8Aooi%0Z";vI(;0cKVBu6Mt3[aKǍ{:[@dĥ@! 8R/{t}QMDcf l4v 1=/(#g6'+4U.5UOB8rF\Q5\, 22;T v+إe۞grkpvx͖G0J/O)'a\*RumUNJ/: 6u6Tn}H9zx?Gr[}&Ax s[~#69, ǾƓysOܢvi7ufGQqYwRB8wD "0$(45d\XKѨ~m nN l%'uL%ycv-m%+}+©;|e\E: -̞{c҄7OYcAtG% i?<}ҧ xS[_!F4Nrzzb樼j\K{t!JPa^Yx.KfG)uOk e-mk/Z{unOIٺ#ٸp0ŵ~dҫnE1xEL"μKIё)1.OV{cU<5:qzAea٭QIN9rh*$|C,BJ2Cqݪn~Di䒙׆ķwO:TtT'Lz$ Qto;aըo0;;Iz%PyR: lI;دmGѸKcaRZA8yIJ*C6(O:Pdͥ):u'W"V9g:=h.v5K/h C5*)-_ Ul?WЌU qdQ 7h %3Oh Գzݏon{s%Ix]_)\irmEThLʨiPZ[Ηiq^Pۂ@cfd 練Eޮ|vӝk̘srV3f9şO'VwtTa kLJ(]%I@<M^ʆ0k%角*5I]҃XF!I;QqJw}65AP*& / B~=3~JB x3blρXd.@Z}yZaT֋'Vg7!Ԓ9?wPMSv^;"ꫜEip뉿p=XR=9m}=4){d @$*C'33ƳAkt*K-;_Juþ4#ӹϋ.ُkmX J̓۠q.3f<1X^š \^iEW-#p $`oȥ"i;X{{aOM?~P7 LE`?0 o lu]mYXUT__Q* D#2(0C&tٻ4@3 zwH'ndO`#!:dڹ'i>H-;6I+ɌTK+@ }c6GL>s裫kV<5Z@6rSUY@ >Jj hu,d "Tju>ȇiOV@?OD.r7p4a-[?6a NGd% cv'0$M[3 Z]  )ڥX_Ce *=T&1n 4»v+UkhA+ QJ_)=U ݝ4÷8Vu"Sdk]C~~D]?8GbĄ%Ţvͅ->4@tVQI;A\8bJc[kTp:PN'}5UvkKbcrU*`헖W]eXNwޙ}s0A&)%#k PFL 8gWt3yicQ(elȰmdMe 8_OwkBOk־d܂X:ovіJ%, ƣgmF|榟rlE3\;XCa2X7؋op#6MֈݸLYf[D;そmmtOBa&6:DQ%ȕfht^&)5K:B-Tʵs\u1Nb-6j l 6JJvEG~iSk";{c:֭Z;nסfQXxgO%ZŪpy4?џ#DI)6)Qצ0:!\ QYJЛ$lFpK`rz]NiD7OGc0uP= }\;G!<|_ZW+#"_4Y+ I %e'GE2`<>XL.p/4o?r<<mBtcL/q_ F$NC2\[P,ΊCXΥe|*ssWiqW~,,h'}ˡ./5t7kJ)\ƞ[CFkIy:}XtmH-ikDSwS-:/H`0Y,> J> J~0ۜ nU C–-&벌= dv3>zUlt u睯d9D75Aܭ^=dqwz +=HY!V9Zy;8ZZWPΰ>^\0H+G 4BX.QL[kZ '[`фZHxVΧ(OkZ%A/fmzx* adeJ%ii.}8El-y D*o>n {*EV5; t k,9mt֡3,#@sc`/KtVOV'ez$)-#vhBxK`ZE#e5Ia2U^寰>obˆ5:AMA?@ށ_q!<{Kuΰ!.GѲj2)~O7i0!o#4F.[iGj1KA_]wu?4_ۅSIm'-E=vYԦ$buD(rDe֑;cQy'䄈J4{GE %`|G1Ff]-Rd/w;'z$%J%\# N͟ 5wB+[q #/c?O43G8BIJ߆%b6^cqط\:YIe-nboLݜ$ sK0a&z@[pPxtkY{-^O0v؂t#HbNE%L+ǁ ,|lG6Qoa,nՌ;{I4K=K $Ԏ J*7vs'yT'3װ~NjO>5)<.2ff K'dhTUQ+;T#7 AsW@zVEmV :s\qTFal*մIW  h},Gf]!6"w9k?3h3-KgR_eo`:h^J"< bV7p='χ'4ufmP}H$xc>*-QA[-M"YKI ʸZf~$~'54J ^lū~*<Tzpsizf)޲|Tr8VFgT|O@l^7@10IڢӋIǧf1O yGPGD:(W'{A:.s>$]dOR tHp|'Uu@~]VD*Io.&[!6K˳1Mw*%*D`0%P8 [(~?⡼A-WCfX~z*xco&~_ǺR*>CQ" mlM sLCLӍf:׌um^.~=GN d̊31SsOYWmĺpq Eo{'fM !D`-&GY%)nD~)zl{sV5I A57QL>~Pۛ8^nM*ŦtJ#[\0|Ʀ?[ԑ r q&+*>;CKE,7v#Yp+)BGimRtSq=ς+cBx{S[pއWzKK ˆ!Ǟ@GMwװ 'a뜠~kQ!2Xfe W "rq*^V0R&ZAY)4K]N^HMA4mk ߍ0xk]60k\ wj\Fbuhbrrv5r y|? h arbi]!nAGȠJpڐ?މ ludqkT@ބlX*~,zPRv(9diiRו٩ZXpV#T6P,/MkqZ/s8ߚ̦Zđ`|{wB [Ϫk8l9-p&o+}̵Ăoȿ`|W 1tN yV⛚,:"iZBJ'| dL2l`%~ hUZy HUZޜΑ(GJ񴻑dN`ѕL%`pBmBl=<çW 0/?? #G1-B-`E|CϨkA}E??34`=*\rP+ ; Y2N ueq.'z}=.a;[5wOD]g+9(*QF'U#ir:5BRmxTn /G'(8f9#j_8+Hm$7T^/+AoBzq, ;S =B 2*Fζr[*QfROK#vּlh KCN)obȶuFļnqf{6!D5ݲyP-ɣ]B^u.4AWݿP2N<'ͯs-QSS"0YI7Q jģ)9 P@y\ *E#u6bO$N.zrɟlʑV ݥ$9/t5#Ҝ ZL(-`i,=d^yzp~ :sfB7"p6$`4}0o 8$]9xqpCzg($k ` pv\o8FӅKw3r4&A`){Z?9 3gS RRwT 'yc4<9_3g%ZQ$r^Ƣ3ֳ(\d[lb.:D@V%ڋ?8ЖU5.h?^zFrp49pF^ҡu?A-}~< P,qHk%\l |)ͣdY| n_LɣI߅ 0&Ȗ3p7c5nl)J㒙X" !fS?aAF B5u{HsP ٹS:φyn{ńsBҶ&l N.p$ Ӿ]9^90grAx.CVүԩ98Z˒QCH1Wv!_ \O`8pˬ)j>:M%b(yҋ5'?PhԲTW|#wnj\%}P]7 9Ϭ8;x); n\jmWKvo,F#{Eo]Z}#:16ntA$.GtV!mۻI)ɚas̭WWy0 'so2{zP@z_YM >܀lV7K5}LϤL=ʙ:333=s5=B^b0w_.x]:!uoGFxL%V_ q!ؓu\|͘'s>Z{_\kgZ^Hvϟ*3Ѻa %o4IzwvG3-h&C&w ?&wO fWPgU=tV8 * [  ۲*AъL7Qgb֡+S7*!͖!kpfvr@kZ>i2%׾̭QHo㟛ayÈ̀*$,PA!EL+h4E3 ?qPFjR6 ǀpFG\)m._BkC!eHu;ɉi{V$υ|`$")5@eXi4rc0!<).}\F)ZY|KP !A׫'ӠKzMc%$^Rմ+v, B@SF=O 5Vcz򃀄 RTi{Sұ&E&c/Ԟ8XUmdic+1wjh>c%u'#Rd.vfHD N-Q&g^[ ]l;ՙ 얍G|cj9-[+3W?&f>.-n}/[mwV J5H˶mˎb%ÏJDD/GyȇW,Ln.w4|ʈlR#LyS5z,4<*[d yD/;Xan2ic>4"2L ѿX'Bԏ%P6JW$3:-T"XiaeX-E7U'5 y_\s`>\' AG|c yB=mq$KۨGHHZP4t] vPE܁n񘍏:u.>P ^ȵ y'Pj`m}`_1.tSmoYG0sCf4=B&4Y<[\yƃM,3uŏXj1ͽij ''J]~gK~m؈FkK] Q`W#͓֮%7ж#cz9%fdT[xwOk&:#NZ ~؁_)Rȋ!/NpÚxbJm<8:eaDr5^75VAQ'#KZ|bkVC>|R!*ۺ$5(Q`,'' ,Gxчw[^nSGOEdN #C}UHF{CYDGvZ7fF^qQi 3~g(1BHhNcй:3uLGpGnq&8Ғ G\F57x̄ Go4qW+c MkR<@Aifգo;F7P V b3~KNֈ7p;u.1l2&m:t91) ~zǝTM >m@F 'PH sWܒV")=@a UM蕆_zcDӏ6 Rg49@P7 UkO^@o[29rMJOwkmBO|ㆼ %"":ԘQ+!^ +(ғBfI{L9 <񥤡Cw8;=yrܰ֏ kMsz\鍗,MQTM?t>ӧ#^,o&h_0!6s3<|=Sڽ'k%m +_aV 329?O7P"\d}6B15!c{?rzTpABA8T?M?2?w d;,^w04maAhr"& %C+XI,_a[T` HWdFnLYF&wLMBBŵ8qA&p[)}yPw4stz-J(u[UQ9jti,Sr3 %MpL4;H<|(gD}ӈNeHpƔ[m[o7$j0h([ĵ8,lu vj]%oݳn"&w&t&1n+rj% ev˭dp9m`ܞՆ B\9tge>oHEQ(?aðS%#6!L Ǔg 4~l0YWyCns|Ƚ{h\ )Eh zjp ~V0~hwJmp0V@K^Wl2-+I}Oٰ HY奪h'ۚ6V$ X̞ׅd=JDUGjX4o$iu()0C&L>&@9`zN28Yc? [_"͙vX,16<:|DUN%7HYuۊ t#&k?mq&; 3NrsMS&AGGdmwJZKCs;iB[VsÕ~4tS@k:JlpX{{6blao,ۿTTf%8sRy1ʹM f%DfRs{ױ[ ʸ%?(TGB> }{}ͭgwR:{;<ږf}++gl /?,PDT[{%0.u3b];]/Z;WLW?Њ(#>ZjCfZX (mJuȅ6R1(^ϋ/H1:z0—l6̻5=BxIV/1n&>U^%  EqP+(ɭ-ִ5zt0,