samba-client-libs-32bit-4.17.12+git.485.dd39ea0501e-150500.3.26.5<>, rg)p9|70e{۬OTmSiLx&v__LjI :EJX3*166Gr:GuHvr/ns!hRCn$- 6$ y[3u^v}a8F lPQV[ؒj/΁Li*؛WG<2J}!suu`o'jLw! e_.>'9\"gה^էE>At?dd6 D [  !AX^etvLv 8v $v v v !v#v%v(@(xv*PX\\a(8 9  :J > B G PvH (vIvXxYtZ[\lv]Dv^%tb%c&`d&e&f&l&u&vv(cw`4vxb vyc L`Csamba-client-libs-32bit4.17.12+git.485.dd39ea0501e150500.3.26.5Samba client librariesThe samba-libs package contains the libraries needed by samba client programs.g)h01-ch3b^SUSE Linux Enterprise 15SUSE LLC GPL-3.0-or-laterhttps://www.suse.com/Development/Libraries/C and C++https://www.samba.org/linuxx86_64/sbin/ldconfigEC %`v x 9 xE|55x%&Xext5xe|xUx%m(u|x%|5xx&x5xW<5t5|xxE|E|LHE)E|Etմ%xe%|&Űլ5|U|#ʸHHP%x%x|e|L5xlplAAg)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)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-binding.so.0.0.1libdcerpc-server-core.so.0.0.1libdcerpc.so.0.0.1libndr-krb5pac.so.0.0.1libndr-nbt.so.0.0.1libndr-standard.so.0.0.1libndr.so.3.0.0libnetapi.so.1.0.0libsamba-credentials.so.1.0.0libsamba-errors.so.1.0.0libsamba-hostconfig.so.0.0.1libsamba-passdb.so.0.28.0libsamba-util.so.0.0.1libsamdb.so.0.0.1libsmbclient.so.0.7.0libsmbconf.so.0.0.1libsmbldap.so.2.1.0libtevent-util.so.0.0.1libwbclient.so.0.15rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootsamba-4.17.12+git.485.dd39ea0501e-150500.3.26.5.src.rpmlibCHARSET3-samba4.solibCHARSET3-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libMESSAGING-SEND-samba4.solibMESSAGING-SEND-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libMESSAGING-samba4.solibMESSAGING-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libaddns-samba4.solibaddns-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libads-samba4.solibads-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libasn1util-samba4.solibasn1util-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libauth-samba4.solibauth-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libauthkrb5-samba4.solibauthkrb5-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libcli-cldap-samba4.solibcli-cldap-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libcli-ldap-common-samba4.solibcli-ldap-common-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libcli-ldap-samba4.solibcli-ldap-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libcli-nbt-samba4.solibcli-nbt-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libcli-smb-common-samba4.solibcli-smb-common-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libcli-spoolss-samba4.solibcli-spoolss-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libcliauth-samba4.solibcliauth-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libclidns-samba4.solibclidns-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libcluster-samba4.solibcluster-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libcmdline-contexts-samba4.solibcmdline-contexts-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libcmdline-samba4.solibcmdline-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libcommon-auth-samba4.solibcommon-auth-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libdbwrap-samba4.solibdbwrap-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libdcerpc-binding.so.0libdcerpc-binding.so.0(DCERPC_BINDING_0.0.1)libdcerpc-binding0-32bitlibdcerpc-pkt-auth-samba4.solibdcerpc-pkt-auth-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libdcerpc-samba-samba4.solibdcerpc-samba-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libdcerpc-samba4.solibdcerpc-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libdcerpc-server-core.so.0libdcerpc-server-core.so.0(DCERPC_SERVER_CORE_0.0.1)libdcerpc.so.0libdcerpc.so.0(DCERPC_0.0.1)libdcerpc0-32bitlibevents-samba4.solibevents-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libflag-mapping-samba4.solibflag-mapping-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libgenrand-samba4.solibgenrand-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libgensec-samba4.solibgensec-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libgpo-samba4.solibgpo-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libgse-samba4.solibgse-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libhttp-samba4.solibhttp-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libinterfaces-samba4.solibinterfaces-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libiov-buf-samba4.solibiov-buf-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libkrb5samba-samba4.solibkrb5samba-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libldbsamba-samba4.solibldbsamba-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)liblibcli-lsa3-samba4.soliblibcli-lsa3-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)liblibcli-netlogon3-samba4.soliblibcli-netlogon3-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)liblibsmb-samba4.soliblibsmb-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libmessages-dgm-samba4.solibmessages-dgm-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libmessages-util-samba4.solibmessages-util-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libmscat-samba4.solibmscat-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libmsghdr-samba4.solibmsghdr-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libmsrpc3-samba4.solibmsrpc3-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libndr-krb5pac.so.0libndr-krb5pac.so.0(NDR_KRB5PAC_0.0.1)libndr-krb5pac0-32bitlibndr-nbt.so.0libndr-nbt.so.0(NDR_NBT_0.0.1)libndr-nbt0-32bitlibndr-samba-samba4.solibndr-samba-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libndr-samba4.solibndr-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libndr-standard.so.0libndr-standard.so.0(NDR_STANDARD_0.0.1)libndr-standard0-32bitlibndr.so.3libndr.so.3(NDR_0.0.1)libndr.so.3(NDR_0.0.2)libndr.so.3(NDR_0.0.3)libndr.so.3(NDR_0.0.4)libndr.so.3(NDR_0.0.5)libndr.so.3(NDR_0.0.6)libndr.so.3(NDR_0.0.7)libndr.so.3(NDR_0.0.8)libndr.so.3(NDR_0.0.9)libndr.so.3(NDR_0.1.0)libndr.so.3(NDR_0.1.1)libndr.so.3(NDR_0.1.2)libndr.so.3(NDR_0.2.0)libndr.so.3(NDR_0.2.1)libndr.so.3(NDR_1.0.0)libndr.so.3(NDR_1.0.1)libndr.so.3(NDR_1.0.2)libndr.so.3(NDR_2.0.0)libndr.so.3(NDR_3.0.0)libndr2-32bitlibnet-keytab-samba4.solibnet-keytab-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libnetapi.so.1libnetapi.so.1(NETAPI_1.0.0)libnetapi0-32bitlibnetif-samba4.solibnetif-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libnpa-tstream-samba4.solibnpa-tstream-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libprinting-migrate-samba4.solibprinting-migrate-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libregistry-samba4.solibregistry-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libreplace-samba4.solibreplace-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libsamba-cluster-support-samba4.solibsamba-cluster-support-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libsamba-credentials.so.1libsamba-credentials.so.1(SAMBA_CREDENTIALS_1.0.0)libsamba-credentials1-32bitlibsamba-debug-samba4.solibsamba-debug-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libsamba-errors.so.1libsamba-errors.so.1(SAMBA_ERRORS_1.0.0)libsamba-errors0-32bitlibsamba-hostconfig.so.0libsamba-hostconfig.so.0(SAMBA_HOSTCONFIG_0.0.1)libsamba-hostconfig0-32bitlibsamba-modules-samba4.solibsamba-modules-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libsamba-passdb.so.0libsamba-passdb.so.0(SAMBA_PASSDB_0.2.0)libsamba-passdb.so.0(SAMBA_PASSDB_0.24.1)libsamba-passdb.so.0(SAMBA_PASSDB_0.24.2)libsamba-passdb.so.0(SAMBA_PASSDB_0.25.0)libsamba-passdb.so.0(SAMBA_PASSDB_0.26.0)libsamba-passdb.so.0(SAMBA_PASSDB_0.27.0)libsamba-passdb.so.0(SAMBA_PASSDB_0.27.1)libsamba-passdb.so.0(SAMBA_PASSDB_0.27.2)libsamba-passdb.so.0(SAMBA_PASSDB_0.28.0)libsamba-passdb0-32bitlibsamba-security-samba4.solibsamba-security-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libsamba-sockets-samba4.solibsamba-sockets-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libsamba-util.so.0libsamba-util.so.0(SAMBA_UTIL_0.0.1)libsamba-util0-32bitlibsamba3-util-samba4.solibsamba3-util-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libsamdb-common-samba4.solibsamdb-common-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libsamdb.so.0libsamdb.so.0(SAMDB_0.0.1)libsamdb0-32bitlibsecrets3-samba4.solibsecrets3-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libserver-id-db-samba4.solibserver-id-db-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libserver-role-samba4.solibserver-role-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libsmb-transport-samba4.solibsmb-transport-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libsmbclient-raw-samba4.solibsmbclient-raw-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libsmbclient.so.0libsmbclient.so.0(SMBCLIENT_0.1.0)libsmbclient.so.0(SMBCLIENT_0.2.0)libsmbclient.so.0(SMBCLIENT_0.2.1)libsmbclient.so.0(SMBCLIENT_0.2.2)libsmbclient.so.0(SMBCLIENT_0.2.3)libsmbclient.so.0(SMBCLIENT_0.3.0)libsmbclient.so.0(SMBCLIENT_0.3.1)libsmbclient.so.0(SMBCLIENT_0.3.2)libsmbclient.so.0(SMBCLIENT_0.3.3)libsmbclient.so.0(SMBCLIENT_0.4.0)libsmbclient.so.0(SMBCLIENT_0.5.0)libsmbclient.so.0(SMBCLIENT_0.6.0)libsmbclient.so.0(SMBCLIENT_0.7.0)libsmbclient0-32bitlibsmbconf.so.0libsmbconf.so.0(SMBCONF_0.0.1)libsmbconf0-32bitlibsmbd-base-samba4.solibsmbd-base-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libsmbd-shim-samba4.solibsmbd-shim-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libsmbldap.so.2libsmbldap.so.2(SMBLDAP_0)libsmbldap.so.2(SMBLDAP_1)libsmbldap.so.2(SMBLDAP_2)libsmbldap.so.2(SMBLDAP_2.1.0)libsmbldap2-32bitlibsmbldaphelper-samba4.solibsmbldaphelper-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libsocket-blocking-samba4.solibsocket-blocking-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libsys-rw-samba4.solibsys-rw-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libtalloc-report-printf-samba4.solibtalloc-report-printf-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libtdb-wrap-samba4.solibtdb-wrap-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libtevent-util.so.0libtevent-util.so.0(TEVENT_UTIL_0.0.1)libtevent-util0-32bitlibtime-basic-samba4.solibtime-basic-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libtrusts-util-samba4.solibtrusts-util-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libutil-reg-samba4.solibutil-reg-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libutil-setid-samba4.solibutil-setid-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libutil-tdb-samba4.solibutil-tdb-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libwbclient.so.0libwbclient.so.0(WBCLIENT_0.10)libwbclient.so.0(WBCLIENT_0.11)libwbclient.so.0(WBCLIENT_0.12)libwbclient.so.0(WBCLIENT_0.13)libwbclient.so.0(WBCLIENT_0.14)libwbclient.so.0(WBCLIENT_0.15)libwbclient.so.0(WBCLIENT_0.9)libwbclient0-32bitsamba-client-libs-32bitsamba-client-libs-32bit(x86-32)@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    /bin/shld-linux.so.2ld-linux.so.2(GLIBC_2.3)libCHARSET3-samba4.solibCHARSET3-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libMESSAGING-SEND-samba4.solibMESSAGING-SEND-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libMESSAGING-samba4.solibMESSAGING-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libacl.so.1libacl.so.1(ACL_1.0)libaddns-samba4.solibaddns-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libads-samba4.solibads-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libasn1util-samba4.solibasn1util-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libauth-samba4.solibauth-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libauthkrb5-samba4.solibauthkrb5-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libavahi-client.so.3libavahi-common.so.3libc.so.6libc.so.6(GLIBC_2.0)libc.so.6(GLIBC_2.1)libc.so.6(GLIBC_2.1.1)libc.so.6(GLIBC_2.1.2)libc.so.6(GLIBC_2.1.3)libc.so.6(GLIBC_2.11)libc.so.6(GLIBC_2.15)libc.so.6(GLIBC_2.17)libc.so.6(GLIBC_2.2)libc.so.6(GLIBC_2.2.3)libc.so.6(GLIBC_2.2.4)libc.so.6(GLIBC_2.27)libc.so.6(GLIBC_2.28)libc.so.6(GLIBC_2.3)libc.so.6(GLIBC_2.3.2)libc.so.6(GLIBC_2.3.3)libc.so.6(GLIBC_2.3.4)libc.so.6(GLIBC_2.4)libc.so.6(GLIBC_2.5)libc.so.6(GLIBC_2.6)libc.so.6(GLIBC_2.7)libc.so.6(GLIBC_2.8)libcli-cldap-samba4.solibcli-cldap-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libcli-ldap-common-samba4.solibcli-ldap-common-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libcli-ldap-samba4.solibcli-ldap-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libcli-nbt-samba4.solibcli-nbt-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libcli-smb-common-samba4.solibcli-smb-common-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libcli-spoolss-samba4.solibcli-spoolss-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libcliauth-samba4.solibcliauth-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libclidns-samba4.solibclidns-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libcluster-samba4.solibcluster-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libcom_err.so.2libcommon-auth-samba4.solibcommon-auth-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libdbwrap-samba4.solibdbwrap-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libdcerpc-binding.so.0libdcerpc-binding.so.0(DCERPC_BINDING_0.0.1)libdcerpc-pkt-auth-samba4.solibdcerpc-pkt-auth-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libdcerpc-samba-samba4.solibdcerpc-samba-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libdcerpc.so.0libdcerpc.so.0(DCERPC_0.0.1)libdl.so.2libdl.so.2(GLIBC_2.0)libdl.so.2(GLIBC_2.1)libflag-mapping-samba4.solibflag-mapping-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libgenrand-samba4.solibgenrand-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libgensec-samba4.solibgensec-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libgnutls.so.30libgnutls.so.30(GNUTLS_3_4)libgnutls.so.30(GNUTLS_3_6_10)libgnutls.so.30(GNUTLS_3_6_13)libgnutls.so.30(GNUTLS_3_6_3)libgse-samba4.solibgse-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libgssapi_krb5.so.2libgssapi_krb5.so.2(gssapi_krb5_2_MIT)libhttp-samba4.solibhttp-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libinterfaces-samba4.solibinterfaces-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libiov-buf-samba4.solibiov-buf-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libk5crypto.so.3libk5crypto.so.3(k5crypto_3_MIT)libkrb5.so.3libkrb5.so.3(krb5_3_MIT)libkrb5samba-samba4.solibkrb5samba-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)liblber-2.4.so.2libldap_r-2.4.so.2libldb.so.2libldb.so.2(LDB_0.9.10)libldb.so.2(LDB_0.9.15)libldb.so.2(LDB_0.9.16)libldb.so.2(LDB_0.9.23)libldb.so.2(LDB_1.1.1)libldb.so.2(LDB_1.1.19)libldb.so.2(LDB_1.1.30)libldb.so.2(LDB_1.3.0)libldb.so.2(LDB_2.6.1)libldb.so.2(LDB_2.6.2)libldbsamba-samba4.solibldbsamba-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)liblibcli-lsa3-samba4.soliblibcli-lsa3-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)liblibcli-netlogon3-samba4.soliblibcli-netlogon3-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)liblibsmb-samba4.soliblibsmb-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libmessages-dgm-samba4.solibmessages-dgm-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libmessages-util-samba4.solibmessages-util-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libmsghdr-samba4.solibmsghdr-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libmsrpc3-samba4.solibmsrpc3-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libndr-krb5pac.so.0libndr-krb5pac.so.0(NDR_KRB5PAC_0.0.1)libndr-nbt.so.0libndr-nbt.so.0(NDR_NBT_0.0.1)libndr-samba-samba4.solibndr-samba-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libndr-samba4.solibndr-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libndr-standard.so.0libndr-standard.so.0(NDR_STANDARD_0.0.1)libndr.so.3libndr.so.3(NDR_0.0.1)libndr.so.3(NDR_0.0.3)libndr.so.3(NDR_0.0.4)libndr.so.3(NDR_0.0.5)libndr.so.3(NDR_0.0.6)libndr.so.3(NDR_0.0.7)libndr.so.3(NDR_0.0.8)libndr.so.3(NDR_0.0.9)libndr.so.3(NDR_0.1.1)libndr.so.3(NDR_0.1.2)libndr.so.3(NDR_0.2.0)libndr.so.3(NDR_0.2.1)libndr.so.3(NDR_1.0.0)libndr.so.3(NDR_1.0.1)libndr.so.3(NDR_1.0.2)libndr.so.3(NDR_2.0.0)libnetif-samba4.solibnetif-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libnpa-tstream-samba4.solibnpa-tstream-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libnscd.so.1libnscd.so.1(LIBNSCD_1.0)libpam.so.0libpam.so.0(LIBPAM_1.0)libpopt.so.0libpopt.so.0(LIBPOPT_0)libpthread.so.0libpthread.so.0(GLIBC_2.0)libpthread.so.0(GLIBC_2.1)libpthread.so.0(GLIBC_2.12)libpthread.so.0(GLIBC_2.2)libpthread.so.0(GLIBC_2.3.2)libreplace-samba4.solibreplace-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libresolv.so.2libresolv.so.2(GLIBC_2.2)libsamba-cluster-support-samba4.solibsamba-cluster-support-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libsamba-credentials.so.1libsamba-credentials.so.1(SAMBA_CREDENTIALS_1.0.0)libsamba-debug-samba4.solibsamba-debug-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libsamba-errors.so.1libsamba-errors.so.1(SAMBA_ERRORS_1.0.0)libsamba-hostconfig.so.0libsamba-hostconfig.so.0(SAMBA_HOSTCONFIG_0.0.1)libsamba-modules-samba4.solibsamba-modules-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libsamba-passdb.so.0libsamba-passdb.so.0(SAMBA_PASSDB_0.2.0)libsamba-passdb.so.0(SAMBA_PASSDB_0.27.1)libsamba-security-samba4.solibsamba-security-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libsamba-sockets-samba4.solibsamba-sockets-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libsamba-util.so.0libsamba-util.so.0(SAMBA_UTIL_0.0.1)libsamba3-util-samba4.solibsamba3-util-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libsamdb-common-samba4.solibsamdb-common-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libsamdb.so.0libsamdb.so.0(SAMDB_0.0.1)libsecrets3-samba4.solibsecrets3-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libserver-id-db-samba4.solibserver-id-db-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libserver-role-samba4.solibserver-role-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libsmb-transport-samba4.solibsmb-transport-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libsmbclient-raw-samba4.solibsmbclient-raw-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libsmbconf.so.0libsmbconf.so.0(SMBCONF_0.0.1)libsmbd-shim-samba4.solibsmbd-shim-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libsmbldap.so.2libsmbldap.so.2(SMBLDAP_0)libsmbldap.so.2(SMBLDAP_1)libsmbldaphelper-samba4.solibsmbldaphelper-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libsocket-blocking-samba4.solibsocket-blocking-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libsys-rw-samba4.solibsys-rw-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libsystemd.so.0libsystemd.so.0(LIBSYSTEMD_209)libtalloc-report-printf-samba4.solibtalloc-report-printf-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libtalloc.so.2libtalloc.so.2(TALLOC_2.0.2)libtalloc.so.2(TALLOC_2.1.0)libtasn1.so.6libtasn1.so.6(LIBTASN1_0_3)libtdb-wrap-samba4.solibtdb-wrap-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libtdb.so.1libtdb.so.1(TDB_1.2.1)libtdb.so.1(TDB_1.2.2)libtdb.so.1(TDB_1.2.5)libtdb.so.1(TDB_1.3.0)libtdb.so.1(TDB_1.3.11)libtdb.so.1(TDB_1.3.17)libtevent-util.so.0libtevent-util.so.0(TEVENT_UTIL_0.0.1)libtevent.so.0libtevent.so.0(TEVENT_0.11.0)libtevent.so.0(TEVENT_0.12.0)libtevent.so.0(TEVENT_0.13.0)libtevent.so.0(TEVENT_0.9.12)libtevent.so.0(TEVENT_0.9.13)libtevent.so.0(TEVENT_0.9.14)libtevent.so.0(TEVENT_0.9.16)libtevent.so.0(TEVENT_0.9.20)libtevent.so.0(TEVENT_0.9.21)libtevent.so.0(TEVENT_0.9.30)libtevent.so.0(TEVENT_0.9.31)libtevent.so.0(TEVENT_0.9.37)libtevent.so.0(TEVENT_0.9.9)libtime-basic-samba4.solibtime-basic-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libtrusts-util-samba4.solibtrusts-util-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libutil-reg-samba4.solibutil-reg-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libutil-setid-samba4.solibutil-setid-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libutil-tdb-samba4.solibutil-tdb-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_I386_SAMBA4)libwbclient.so.0libwbclient.so.0(WBCLIENT_0.13)libwbclient.so.0(WBCLIENT_0.9)libz.so.1rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.3gp@fٝ@fqvfCR@f @ee@ez@e[J@e6`@eSd@d.@dd-@d@dd@d6@d@d @cvcvc@c@c @c@cctc5cM@b@b@b@ba@banopower@suse.comddiss@suse.comnopower@suse.comnopower@suse.comdmulder@suse.comnopower@suse.comnopower@suse.comscabrero@suse.descabrero@suse.descabrero@suse.denopower@suse.comscabrero@suse.descabrero@suse.descabrero@suse.denopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comscabrero@suse.dedmulder@suse.comscabrero@suse.denopower@suse.comnopower@suse.comscabrero@suse.denopower@suse.comnopower@suse.comscabrero@suse.denopower@suse.comscabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comddiss@suse.comnopower@suse.comdmulder@suse.comdmulder@suse.comnopower@suse.comscabrero@suse.descabrero@suse.dedimstar@opensuse.orgscabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comnopower@suse.comnopower@suse.comscabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comnopower@suse.comscabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.denopower@suse.comscabrero@suse.deddiss@suse.comddiss@suse.comddiss@suse.comscabrero@suse.descabrero@suse.dedmulder@suse.comnopower@suse.comscabrero@suse.descabrero@suse.dedmulder@suse.comscabrero@suse.descabrero@suse.denopower@suse.comnopower@suse.comnopower@suse.comdmulder@suse.comscabrero@suse.denopower@suse.comddiss@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comscabrero@suse.denopower@suse.comnopower@suse.comjmcdonough@suse.comnopower@suse.comscabrero@suse.denopower@suse.comnopower@suse.comddiss@suse.comddiss@suse.comnopower@suse.comnopower@suse.comddiss@suse.comnopower@suse.comdmulder@suse.comdmulder@suse.comddiss@suse.comscabrero@suse.dedmulder@suse.comddiss@suse.comnopower@suse.comjengelh@inai.dedmulder@suse.comscabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comdmulder@suse.comdmulder@suse.comjmcdonough@suse.comdmulder@suse.comscabrero@suse.dedmulder@suse.comscabrero@suse.dedmulder@suse.comdmulder@suse.comvcizek@suse.comdmulder@suse.comdmulder@suse.comnopower@suse.comscabrero@suse.dejmcdonough@suse.comscabrero@suse.deaaptel@suse.comjengelh@inai.dedimstar@opensuse.orgdmulder@suse.comjmcdonough@suse.comdavid.mulder@suse.comjmcdonough@suse.comaaptel@suse.comdmulder@suse.comscabrero@suse.comscabrero@suse.comkukuk@suse.dedavid.mulder@suse.comscabrero@suse.comrbrown@suse.comdmulder@suse.comscabrero@suse.comdimstar@opensuse.orgscabrero@suse.comaaptel@suse.comnopower@suse.comnopower@suse.comaaptel@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comddiss@suse.comnopower@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comdmulder@suse.comnopower@suse.comjmcdonough@suse.comaaptel@suse.comkukuk@suse.comkukuk@suse.denopower@suse.comaaptel@suse.comdmulder@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comddiss@suse.comjmcdonough@suse.comddiss@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comjmcdonough@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comtchvatal@suse.comlmuelle@suse.comnopower@suse.comcrrodriguez@opensuse.orglmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comnoel.power@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comnopower@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.commpluskal@suse.comlmuelle@suse.comnopower@suse.deddiss@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.denopower@suse.delmuelle@suse.comnopower@suse.deddiss@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.com- Adjust spec to split out rpcd_* binaries into a separate sub package; (bsc#1231414).- Incorrect FSCTL_QUERY_ALLOCATED_RANGES response when truncated; (bso#15699); (bsc#1229684).- Regression DFS not working with widelinks = true, updated to fix DFS link enumeration; (bso#15435); (bsc#1213607);- use-after-free in aio_del_req_from_fsp during smbd shutdown after failed IPC FSCTL_PIPE_TRANSCEIVE; (bsc#1223345); (bso#15423).- Reduce winbind error msg to debug for a PDC/NT4 domain (bsc#1221168).- fd_handle_destructor() panics within an smbd_smb2_close() if vfs_stat_fsp() fails in fd_close(); (bso#15527); (bsc#1219937).- Remove -x from bash shebang update-apparmor-samba-profile; (bsc#1218431).- Add new idmap_nss option 'use_upn' for those NSS modules able to handle UPNs or DOMAIN/user name format; (bsc#1215369); - Avoid unnecessary locking in idmap parent setup; (bsc#1215369);- Add "net offlinejoin composeodj" command; (bsc#1214076);- Update to samba 4.17.12 * Weird filename can cause assert to fail in openat_pathref_fsp_nosymlink(); (bso#15419); * reply_sesssetup_and_X() can dereference uninitialized tmp pointer; (bso#15420); * Missing return in reply_exit_done(); (bso#15430); * TREE_CONNECT without SETUP causes smbd to use uninitialized pointer; (bso#15432); * Improve GetNChanges to address some (but not all "Azure AD Connect") syncronisation tool looping during the initial user sync phase; (bso#15401); * Samba replication logs show (null) DN; (bso#15407); * Spotlight sometimes returns no results on latest macOS; (bso#15342); * Renaming results in NT_STATUS_SHARING_VIOLATION if previously attempted to remove the destination; (bso#15417); * Spotlight results return wrong date in result list; (bso#15427); * macOS mdfind returns only 50 results; (bso#15463); * 2-3min delays at reconnect with smb2_validate_sequence_number: bad message_id 2; (bso#15346); * samba-tool ntacl get segfault if aio_pthread appended; (bso#15441); * DCERPC_PKT_CO_CANCEL and DCERPC_PKT_ORPHANED can't be parsed; (bso#15446); * File doesn't show when user doesn't have permission if aio_pthread is loaded; (bso#15453); * net ads lookup (with unspecified realm) fails; (bso#15384); (bsc#1213826); * Regression DFS not working with widelinks = true; (bso#15435); (bsc#1213607); * ctdb_killtcp fails to work with --enable-pcap and libpcap 1.9.1; (bso#15451); * mdssvc: Do an early talloc_free() in _mdssvc_open(); (bso#15449); * Windows client join fails if a second container CN=System exists somewhere; (bso#9959); - Fix crossing automounter mount points; (bsc#1215212);- CVE-2023-4091: samba: Client can truncate file with read-only permissions; (bsc#1215904); (bso#15439). - CVE-2023-42669: samba: rpcecho, enabled and running in AD DC, allows blocking sleep on request; (bso#1215905); (bso#15474). - CVE-2023-42670: samba: The procedure number is out of range when starting Active Directory Users and Computers; (bsc#1215906); (bso#15473). - CVE-2023-3961: samba: Unsanitized client pipe name passed to local_np_connect(); (bsc#1215907); (bso#15422). - CVE-2023-4154: samba: dirsync allows SYSTEM access with only "GUID_DRS_GET_CHANGES" right, not "GUID_DRS_GET_ALL_CHANGES; (bsc#1215908); (bso#15424).- Fix DFS not working with widelinks enabled; (bsc#1213607); (bso#15435);- Move libcluster-samba4.so from samba-libs to samba-client-libs; (bsc#1213940);- net ads lookup with unspecified realm fails; (bso#15384); (bsc#1213826);- secure channel faulty since Windows 10/11 update 07/2023; (bso#15418); (bsc#1213384).- CVE-2022-2127: lm_resp_len not checked properly in winbindd_pam_auth_crap_send; (bso#15072); (bsc#1213174). - CVE-2023-34966: Samba Spotlight mdssvc RPC Request Infinite Loop Denial-of-Service Vulnerability; (bso#15340); (bsc#1213173). - CVE-2023-34967: Samba Spotlight mdssvc RPC Request Type Confusion Denial-of-Service Vulnerability; (bso#15341); (bsc#1213172). - CVE-2023-34968: Spotlight server-side Share Path Disclosure; (bso#15388); (bsc#1213171). - CVE-2023-3347: Samba doesn't require SMB2+ signing if `server signing = mandatory` is set; (bso#15397); (bsc#1213170).- Update to 4.17.9 * Backport --pidl-developer fixes; (bso#15404). * smbd_scavenger crashes when service smbd is stopped; (bso#15275). * vfs_fruit might cause a failing open for delete; (bso#15378). * named crashes on DLZ zone update; (bso#14030). * winbind recurses into itself via rpcd_lsad; (bso#15361). * cli_list loops 100% CPU against pre-lanman2 servers; (bso#15382). * smbclient leaks fds with showacls; (bso#15391). * aes256 smb3 encryption algorithms are not allowed in smb3_sid_parse(); (bso#15374). * winbindd gets stuck on NT_STATUS_RPC_SEC_PKG_ERROR; (bso#15413). * smbget memory leak if failed to download files recursively; (bso#15403).- Update to 4.17.8 * log flood: smbd_calculate_access_mask_fsp: Access denied: message level should be lower; (bso#15302). * Floating point exception (FPE) via cli_pull_send at source3/libsmb/clireadwrite.c; (bso#15306). * test_tstream_more_tcp_user_timeout_spin fails intermittently on Rackspace GitLab runners; (bso#15328). * Reduce flapping of ridalloc test; (bso#15329). * large_ldap test is unreliable; (bso#15351). * New filename parser doesn't check veto files smb.conf parameter; (bso#15143). * mdssvc may crash when initializing; (bso#15354). * Large directory optimization broken for non-lcomp path elements; (bso#15313). * streams_depot fails to create streams; (bso#15357). * shadow_copy2 and streams_depot don't play well together; (bso#15358). * wbinfo -u fails on ad dc with >1000 users; (bso#15366). * winbindd idmap child contacts the domain controller without a need; (bso#15317). * idmap_autorid may fail to map sids of trusted domains for the first time; (bso#15318). * idmap_hash doesn't use ID_TYPE_BOTH for reverse mappings; (bso#15319). * net ads search -P doesn't work against servers in other domains; (bso#15323). * DS ACEs might be inherited to unrelated object classes; (bso#15338). * Temporary smbXsrv_tcon_global.tdb can't be parsed; (bso#15353). * Setting veto files = /.*/ break listing directories; (bso#15360); (bsc#1212375). * CVE-2020-25720 [SECURITY] Create Child permission should not allow full write to all attributes (additional changes); (bso#14810). * dsgetdcname: assumes local system uses IPv4; (bso#15325).- Update to 4.17.7 * CVE-2023-0922: Samba AD DC admin tool samba-tool sends passwords in cleartext; (bso#15315); (bsc#1209481). * CVE-2023-0225: Samba AD DC "dnsHostname" attribute can be deleted by unprivileged authenticated users; (bso#15276); (bsc#1209483). * CVE-2023-0614: samba: Access controlled AD LDAP attributes can be discovered; (bso#15270); (bsc#1209485). * large_ldap test is inefficient; (bso#15332). * CVE-2020-25720 [SECURITY] Create Child permission should not allow full write to all attributes (additional changes); (bso#14810). - Update to 4.17.6 * streams_xattr is creating unexpected locks on folders; (bso#15314). * Use of the Azure AD Connect cloud sync tool is now supported for password hash synchronisation, allowing Samba AD Domains to synchronise passwords with this popular cloud environment; (bso#10635). * Spotlight doesn't work with latest macOS Ventura; (bso#15299). * New samba-dcerpc architecture does not scale gracefully; (bso#15310). * vfs_ceph incorrectly uses fsp_get_io_fd() instead of fsp_get_pathref_fd() in close and fstat; (bso#15307). * With clustering enabled samba-bgqd can core dump due to use after free; (bso#15293). * fd_load() function implicitly closes the fd where it should not; (bso#15311). - Update to 4.17.5 * smbc_getxattr() return value is incorrect; (bso#14808). * Compound SMB2 FLUSH+CLOSE requests from MacOSX are not handled correctly; (bso#15172). * synthetic_pathref AFP_AfpInfo failed errors; (bso#15210). * samba-tool gpo listall fails IPv6 only - finddcs() fails to find DC when there is only an AAAA record for the DC in DNS; (bso#15226). * smbd crashes if an FSCTL request is done on a stream handle; (bso#15236). * DFS links don't work anymore on Mac clients since 4.17; (bso#15277). * vfs_virusfilter segfault on access, directory edgecase (accessing NULL value); (bso#15283). * CVE-2022-38023 [SECURITY] Samba should refuse RC4 (aka md5) based SChannel on NETLOGON (additional changes); (bso#15240). * %U for include directive doesn't work for share listing (netshareenum); (bso#15243). * Shares missing from netshareenum response in samba 4.17.4; (bso#15266). * ctdb: use-after-free in run_proc; (bso#15269). * irpc_destructor may crash during shutdown; (bso#15280). * auth3_generate_session_info_pac leaks wbcAuthUserInfo; (bso#15286). * smbclient segfaults with use after free on an optimized build; (bso#15268). * smbstatus leaking files in msg.sock and msg.lock; (bso#15282). * Leak in wbcCtxPingDc2; (bso#15164). * Access based share enum does not work in Samba 4.16+; (bso#15265). * Crash during share enumeration; (bso#15267). * rep_listxattr on FreeBSD does not properly check for reads off end of returned buffer; (bso#15271). * Avoid relying on C89 features in a few places; (bso#15281).- Make (32bit) samba-libs conflict with old samba-ad-dc-libs package to satisfy installcheck.- Make samba-libs conflict with old samba-ad-dc-libs package to satisfy installcheck.- Remove non functioning ifup/ifdown samba-winbindd scripts; (bsc#1207414).- libdsdb-module-samba4 should be packaged as part of samba-libs and not samba-ad-dc-libs. Additionally no need for it to be removed conditionally.- Clean up logic for PAM migration settings in spec file.- Change with_dc default to 0 (for non TW builds), ADDC feature is deprecated and will no longer be included in >= SLE15-SP5; (jsc#PED-1122).- Update to 4.17.4 * CVE-2022-44640 Upstream Heimdal free of user-controlled pointer in FAST; (bsc#14929); * CVE-2021-20251 Bad password count not incremented atomically; (bsc#14611); * CVE-2022-42898 krb5_pac_parse() buffer parsing vulnerability; (bsc#15203); * CVE-2022-37966 rc4-hmac Kerberos session keys issued to modern servers; (bso#15237); * CVE-2022-37967 Kerberos constrained delegation ticket forgery possible against Samba AD DC; (bso#15231); * CVE-2022-38023 RC4/HMAC-MD5 NetLogon Secure Channel is weak and should be avoided; (bso#15240); * pam_winbind uses time_t and pointers assuming they are of the same size; (bso#15224); * Heimdal session key selection in AS-REQ examines wrong entry; (bso#15219); * filter-subunit is inefficient with large numbers of knownfails; (bso#15258); * smbd allows setting FILE_ATTRIBUTE_TEMPORARY on directories; (bso#15252); * The KDC logic arround msDs-supportedEncryptionTypes differs from Windows; (bso#13135); * libnet: change_password() doesn't work with dcerpc_samr_ChangePasswordUser4(); (bso#15206); * Heimdal session key selection in AS-REQ examines wrong entry; (bso#15219); * Memory leak in snprintf replacement functions; (bso#15230); * RODC doesn't reset badPwdCount reliable via an RWDC (CVE-2021-20251 regression); (bso#15253); * Prevent EBADF errors with vfs_glusterfs; (bso#15198); * %U for include directive doesn't work for share listing (netshareenum); (bso#15243); * Stack smashing in net offlinejoin requestodj; (bso#15257); * Windows 11 22H2 and Samba-AD 4.15 Kerberos login issue; (bso#15197); * Heimdal session key selection in AS-REQ examines wrong entry; (bso#15219); - Remove deprecated if-{down,up} scripts; (bsc#1206444); - Adjust the systemd drop-in file for named service; (bsc#1201689); * Paths are additive so do not repeat paths from named.service * Prefix the samba DLZ directory with "-" to ignore this path if it does not exists- Introduce without-smb1-server spec flag; (bsc#1205104); - Update to 4.17.3 * CVE-2022-42898: Samba buffer overflow vulnerabilities on 32-bit systems; (bsc#1205126); (bso#15203); - Replace obsolete python-gpgme with python-gpg * Upstream replaced it in v4.9.5 -- bso#13728 - Update to 4.17.2 * CVE-2022-3592 [SECURITY] samba: Wide links protection broken; (bso#15207); (bsc#1204499). * CVE-2022-3437 [SECURITY] samba: Buffer overflow in Heimdal unwrap_des3();(bso#15134); (bsc#1204254). - Update to 4.17.1 * CVE-2021-20251 [SECURITY] Bad password count not incremented atomically; (bso#14611). * smbXsrv_connection_shutdown_send result leaked; (bso#15174). * Flush on a named stream never completes; (bso#15182). * Permission denied calling SMBC_getatr when file not exists; (bso#15195). * Samba 4.5 sometimes cannot be upgraded to Samba 4.6 or later over DRS: WERROR_DS_DRA_MISSING_PARENT due to faulty GET_ANC; (bso#15189). * pytest: add file removal helpers for TestCaseInTempDir; (bso#15191). * CVE-2021-20251 [SECURITY] Bad password count not incremented atomically; (bso#14611). * Samba 4.5 sometimes cannot be upgraded to Samba 4.6 or later over DRS: WERROR_DS_DRA_MISSING_PARENT due to faulty GET_ANC; (bso#15189). * Flush on a named stream never completes; (bso#15182). * vfs_gpfs silently garbles timestamps > year 2106; (bso#15151). * CVE-2021-20251 [SECURITY] Bad password count not incremented atomically; (bso#14611). * multi-channel socket passing may hit a race if one of the involved processes already existed; (bso#15200). * memory leak on temporary of struct imessaging_post_state and struct tevent_immediate on struct imessaging_context (in rpcd_spoolss and maybe others); (bso#15201). * Since popt1.19 various use after free errors using result of poptGetArg are now exposed; (bso#15205); (boo#1204279). * Remove special case for O_CREAT in SMB_VFS_OPENAT from vfs_glusterfs; (bso#15192). * GETPWSID in memory cache grows indefinetly with each NTLM auth; (bso#15169). * CVE-2021-20251 [SECURITY] Bad password count not incremented atomically; (bso#14611). - Install a systemd drop-in file for named service to allow read/write access to the DLZ directory; (bsc#1201689); - Fix use after free errors resulting from using return of poptGetArg exposed since popt-1.19; (boo#1204279); (bso#15205). - s3: smbd: Fix memory leak in smbd_server_connection_terminate_done(); (bso#15174). - Disable SMB1 for tumbleweed builds. - Update to 4.17.0 * acl_xattr VFS module may unintentionally use filesystem permissions instead of ACL from xattr; (bso#15126). * Missing SMB2-GETINFO access checks from MS-SMB2 3.3.5.20.1; (bso#15153). * assert failed: !is_named_stream(smb_fname)") at ../../lib/util/fault.c:197; (bso#15161). * acl_xattr VFS module may unintentionally use filesystem permissions instead of ACL from xattr; (bso#15126). * assert failed: !is_named_stream(smb_fname)") at ../../lib/util/fault.c:197; (bso#15161). * Cross-node multi-channel reconnects result in SMB2 Negotiate returning NT_STATUS_NOT_SUPPORTED; (bso#15159). * winbind at info level debug can coredump when processing wb_lookupusergroups; (bso#15160). * Make use of glfs_*at() API calls in vfs_glusterfs; (bso#15157). * Possible use after free of connection_struct when iterating smbd_server_connection->connections; (bso#15128). * `net usershare add` fails with flag works with --long but fails with -l; (bso#15145). * acl_xattr VFS module may unintentionally use filesystem permissions instead of ACL from xattr; (bso#15126). * Performance regression on contended path based operations; (bso#15125). * Missing READ_LEASE break could cause data corruption; (bso#15148). * libsamba-errors uses a wrong version number; (bso#15141). * SMB1 negotiation can fail to handle connection errors; (bso#15152). * New filename parser doesn't check veto files smb.conf parameter; (bso#15143). * 4.17.rc1 still uses symlink-race prone unix_convert(); (bso#15144). * Backport fileserver related changed to 4.17.0rc2; (bso#15146). * Manpage for smbstatus json is missing; (bso#15147). * Backport fileserver related changed to 4.17.0rc2; (bso#15146). * Performance regression on contended path based operations; (bso#15125). * Backport fileserver related changed to 4.17.0rc2; (bso#15146). * Fix issues found by coverity in smbstatus json code; (bso#15140). * Backport fileserver related changed to 4.17.0rc2; (bso#15146). - Migration to /usr/etc: Saving user changed configuration files in /etc and restoring them while an RPM update. - Update to 4.16.4 * CVE-2022-2031: Samba AD users can bypass certain restrictions associated with changing passwords; (bsc#1201495); (bso#15047); * CVE-2022-32744: Samba AD users can forge password change requests for any user; (bsc#1201493); (bso#15074); * CVE-2022-32745: Samba AD users can crash the server process with an LDAP add or modify request; (bsc#1201492); (bso#15008); * CVE-2022-32746: Samba AD users can induce a use-after-free in the server process with an LDAP add or modify request; (bsc#1201490); (bso#15009); * CVE-2022-32742: Server memory information leak via SMB1; (bsc#1201496); (bso#15085); - Update to 4.16.3 * Using vfs_streams_xattr and deleting a file causes a panic; (bso#15099); * Add support for bind 9.18; (bso#14986); * logging dsdb audit to specific files does not work; (bso#15076); * Problem when winbind renews Kerberos; (bso#14979); (bsc#1196224); * Samba with new lorikeet-heimdal fails to build on gcc 12.1 in developer mode; (bso#15095); * Crash in streams_xattr because fsp->base_fsp->fsp_name is NULL; (bso#15105); * Crash in rpcd_classic - NULL pointer deference in mangle_is_mangled(); (bso#15118); * smbclient commands del & deltree fail with NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100); (bsc#1200556); * Fix check for chown when processing NFSv4 ACL; (bso#15120); * The pcap background queue process should not be stopped; (bso#15082); * testparm: Fix typo in idmap rangesize check; (bso#15097); * net ads info returns LDAP server and LDAP server name as null; (bso#15106); * ldconfig: /lib64/libsmbconf.so.0 is not a symbolic link; (bso#15108); * CTDB child process logging does not work as expected; (bso#15090); - Update spec file to fix the optional Heimdal DC build - Fix external trusts with MIT Kerberos 1.20 - Add missing samba-client requirement to samba-winbind package; (bsc#1198255); - Move pdb backends from package samba-libs to package samba-client-libs and remove samba-libs requirement from samba-winbind; (bsc#1200964); (bsc#1198255); - Add sysuser-shadow requirement for packages using systemd-sysusers - Use the canonical realm name to refresh the Kerberos tickets; (bsc#1196224); (bso#14979); - Moved logrotate files from user specific directory /etc/logrotate.d to vendor specific directory /usr/etc/logrotate.d. - Update to 4.16.2 * Use pathref fd instead of io fd in vfs_default_durable_cookie; (bso#15042); * vfs_gpfs with vfs_shadowcopy2 fail to restore file if original file had been deleted; (bso#15069); * Reintroduce netgroups support; (bso#15087); * net ads info shows LDAP Server: 0.0.0.0 depending on contacted server; (bso#14674); * Update from 4.15 to 4.16 breaks discovery of [homes] on standalone server from Win and IOS; (bso#15062); * waf produces incorrect names for python extensions with Python 3.11; (bso#15071); * smbclient -E doesn't work as advertised; (bso#15075); * The samba background daemon doesn't refresh the printcap cache on startup; (bso#15081); * Out-by-4 error in smbd read reply max_send clamp; (bso#14443); - Fix samba4.blackbox.net_ads_dns_async test with bind9 >= 9.17.7 - Support building with MIT Kerberos 1.20 - Bronze bit and S4U support with MIT Kerberos 1.20 for Samba AD DC; (CVE-2020-17049); - Resource Based Constrained Delegation (RBCD) for Samba AD DC - Support building with gcc 12.1 - Use requires_eq macro to require the libldb2 version available at samba-dsdb-modules build time; (bsc#1199362); - Update to 4.16.1 * Share and server swapped in smbget password prompt; (bso#14831); * Durable handles won't reconnect if the leased file is written to; (bso#15022); * rmdir silently fails if directory contains unreadable files and hide unreadable is yes; (bso#15023); * SMB2_CLOSE_FLAGS_FULL_INFORMATION fails to return information on renamed file handle; (bso#15038); * Need to describe --builtin-libraries= better (compare with - -bundled-libraries); (bso#8731); * vfs_shadow_copy2 breaks "smbd async dosmode" sync fallback; (bso#14957); * shadow_copy2 fails listing snapshotted dirs with shadow:fixinodes; (bso#15035); * PAM Kerberos authentication incorrectly fails with a clock skew error; (bso#15046); * Username map - samba erroneously applies unix group memberships to user account entries; (bso#15041); * KVNO off by 100000; (bso#14951); * Uninitialized litemask in variable in vfs_gpfs module; (bso#15027); * vfs_gpfs recalls=no option prevents listing files; (bso#15055); * smbd doesn't handle UPNs for looking up names; (bso#15054); - Update update-apparmor-samba-profile script, replace non-printable delimiter with more human readable separator as sed can accept separators that can appear in the input data. - Fix update-apparmor-samba-profile script, sed doesn't like multibyte separators; (bsc#1198309). - Update to 4.16.0 * New samba-dcerpcd binary to provide DCERPC in the member server setup * Certificate Auto Enrollment * Ability to add ports to dns forwarder addresses in internal DNS backend * No longer using Linux mandatory locks for sharemodes * SMB1 protocol has been deprecated, particularly older dialects * SMB1 protocol SMBCopy command removed * SMB1 server-side wildcard expansion removed - Add python3-dnspython to samba-ad-dc recommens; (bsc#1187101); - Use systemd-sysusers to create system users; (bsc#1182847);- Install a systemd drop-in file for named service to allow read/write access to the DLZ directory; (bsc#1201689);- Update to 4.15.12 * CVE-2022-42898: samba: heimdal: Samba buffer overflow vulnerabilities on 32-bit systems; (bso#15203); (bsc#1205126). - Update to 4.15.11 * Allow rebuild of Centos 8 images after move to vault for Samba 4.15; (bso#15193). * CVE-2022-3437: samba: Buffer overflow in Heimdal unwrap_des3(); (bso#15134); (bsc#1204254)- Update to 4.15.10 * Possible use after free of connection_struct when iterating smbd_server_connection->connections; (bso#15128); (bsc#1200102). * smbXsrv_connection_shutdown_send result leaked; (bso#15174). * Spotlight RPC service returns wrong response when Spotlight is disabled on a share; (bso#15086). * acl_xattr VFS module may unintentionally use filesystem permissions instead of ACL from xattr; (bso#15126). * Missing SMB2-GETINFO access checks from MS-SMB2 3.3.5.20.1; (bso#15153). * assert failed: !is_named_stream(smb_fname)") at ../../lib/util/fault.c:197; (bso#15161). * Missing READ_LEASE break could cause data corruption; (bso#15148). * rpcclient can crash using setuserinfo(2); (bso#15124). * Samba fails to build with glibc 2.36 caused by including in libreplace; (bso#15132). * SMB1 negotiation can fail to handle connection errors; (bso#15152). * samba-tool domain join segfault when joining a samba ad domain; (bso#15078). - Update to 4.15.9 * CVE-2022-32742:SMB1 code does not correct verify SMB1write, SMB1write_and_close, SMB1write_and_unlock lengths; (bso#15085); (bsc#1201496). * CVE-2022-32746: samba: Use-after-free occurring in database audit logging; (bso#15009); (bso#15096); (bsc#1201490). * CVE-2022-2031: samba, ldb: AD users can bypass certain restrictions associated with changing passwords; (bso#15047); (bsc#1201495); * CVE-2022-32745: samba: ldb: AD users can crash the server process with an LDAP add or modify request; (bso#15008); (bso#15096); (bsc#1201492). * CVE-2022-2031: samba, ldb: AD users can bypass certain restrictions associated with changing passwords; (bso#15047); (bsc#1201495); * CVE-2022-32744: samba, ldb: AD users can forge password change requests for any user; (bso#15074); (bso#15047); (bsc#1201493).- CVE-2022-1615: Do not ignore errors in random number generation; (bso#15103); (bsc#1202976); - CVE-2022-32743: Implement validated dnsHostName write rights; (bso#14833); (bsc#1202803);- Fix Use after free when iterating smbd_server_connection->connections after tree disconnect failure; (bso#15128); (bsc#1200102).- CVE-2022-32746: samba: Use-after-free occurring in database audit logging; (bso#15009); (bso#15096); (bsc#1201490). - CVE-2022-32745: samba: ldb: AD users can crash the server process with an LDAP add or modify request; (bso#15008); (bso#15096); (bsc#1201492). - CVE-2022-2031: samba, ldb: AD users can bypass certain restrictions associated with changing passwords; (bso#15047); (bsc#1201495); - CVE-2022-32742:SMB1 code does not correct verify SMB1write, SMB1write_and_close, SMB1write_and_unlock lengths; (bso#15085); (bsc#1201496). - CVE-2022-32744: samba, ldb: AD users can forge password change requests for any user; (bso#15074); (bso#15047); (bsc#1201493).- Update to 4.15.8 * Use pathref fd instead of io fd in vfs_default_durable_cookie; (bso#15042); * Setting fruit:resource = stream in vfs_fruit causes a panic; (bso#15099); * Add support for bind 9.18; (bso#14986); * logging dsdb audit to specific files does not work; (bso#15076); * vfs_gpfs with vfs_shadowcopy2 fail to restore file if original file had been deleted; (bso#15069); * netgroups support removed; (bso#15087); (bsc#1199247); * net ads info shows LDAP Server: 0.0.0.0 depending on contacted server; (bso#14674); (bsc#1199734); * waf produces incorrect names for python extensions with Python 3.11; (bso#15071); * smbclient commands del & deltree fail with NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100); (bsc#1200556); * vfs_gpfs recalls=no option prevents listing files; (bso#15055); * waf produces incorrect names for python extensions with Python 3.11; (bso#15071); * Compile error in source3/utils/regedit_hexedit.c; (bso#15091); * ldconfig: /lib64/libsmbconf.so.0 is not a symbolic link; (bso#15108); * smbd doesn't handle UPNs for looking up names; (bso#15054); * Out-by-4 error in smbd read reply max_send clamp; (bso#14443); - Move pdb backends from package samba-libs to package samba-client-libs and remove samba-libs requirement from samba-winbind; (bsc#1200964); (bsc#1198255); - Use the canonical realm name to refresh the Kerberos tickets; (bsc#1196224); (bso#14979);- Fix smbclient commands del & deltree failing with NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100); (bsc#1200556).- Revert NIS support removal; (bsc#1199247);- Use requires_eq macro to require the libldb2 version available at samba-dsdb-modules build time; (bsc#1199362);- Add missing samba-client requirement to samba-winbind package; (bsc#1198255);- Update to 4.15.7 * Share and server swapped in smbget password prompt; (bso#14831); * Durable handles won't reconnect if the leased file is written to; (bso#15022); * rmdir silently fails if directory contains unreadable files and hide unreadable is yes; (bso#15023); * SMB2_CLOSE_FLAGS_FULL_INFORMATION fails to return information on renamed file handle; (bso#15038); * vfs_shadow_copy2 breaks "smbd async dosmode" sync fallback; (bso#14957); * shadow_copy2 fails listing snapshotted dirs with shadow:fixinodes; (bso#15035); * PAM Kerberos authentication incorrectly fails with a clock skew error; (bso#15046); * username map - samba erroneously applies unix group memberships to user account entries; (bso#15041); * NT_STATUS_ACCESS_DENIED translates into EPERM instead of EACCES in SMBC_server_internal; (bso#14983); * Simple bind doesn't work against an RODC (with non-preloaded users); (bso#13879); * Crash of winbind on RODC; (bso#14641); * uncached logon on RODC always fails once; (bso#14865); * KVNO off by 100000; (bso#14951); * LDAP simple binds should honour "old password allowed period"; (bso#15001); * wbinfo -a doesn't work reliable with upn names; (bso#15003); * Simple bind doesn't work against an RODC (with non-preloaded users); (bso#13879); * Uninitialized litemask in variable in vfs_gpfs module; (bso#15027); * Regression: create krb5 conf = yes doesn't work with a single KDC; (bso#15016);- Add provides to samba-client-libs package to fix upgrades from previous versions; (bsc#1197995);- Add missing samba-libs requirement to samba-winbind package; (bsc#1198255);- Update to 4.15.6 * Renaming file on DFS root fails with NT_STATUS_OBJECT_PATH_NOT_FOUND; (bso#14169); * Samba does not response STATUS_INVALID_PARAMETER when opening 2 objects with same lease key; (bso#14737); * NT error code is not set when overwriting a file during rename in libsmbclient; (bso#14938); * Fix ldap simple bind with TLS auditing; (bso#14996); * net ads info shows LDAP Server: 0.0.0.0 depending on contacted server; (bso#14674); * Problem when winbind renews Kerberos; (bso#14979); (bsc#1196224); * pam_winbind will not allow gdm login if password about to expire; (bso#8691); * virusfilter_vfs_openat: Not scanned: Directory or special file; (bso#14971); * DFS fix for AIX broken; (bso#13631); * Solaris and AIX acl modules: wrong function arguments; (bso#14974); * Function aixacl_sys_acl_get_file not declared / coredump; (bso#7239); * Regression: Samba 4.15.2 on macOS segfaults intermittently during strcpy in tdbsam_getsampwnam; (bso#14900); * Fix a use-after-free in SMB1 server; (bso#14989); * smb2_signing_decrypt_pdu() may not decrypt with gnutls_aead_cipher_decrypt() from gnutls before 3.5.2; (bso#14968); * Changing the machine password against an RODC likely destroys the domain join; (bso#14984); * authsam_make_user_info_dc() steals memory from its struct ldb_message *msg argument; (bso#14993); * Use Heimdal 8.0 (pre) rather than an earlier snapshot; (bso#14995); * Samba autorid fails to map AD users if id rangesize fits in the id range only once; (bso#14967);- Fix mismatched version of libldb2; (bsc#1196788). - Drop obsolete SuSEfirewall2 service files.- Drop obsolete Samba fsrvp v0->v1 state upgrade functionality; (bsc#1080338).- Fix ntlm authentications with "winbind use default domain = yes"; (bso#13126); (bsc#1173429); (bsc#1196308).- Fix samba-ad-dc status warning notification message by disabling systemd notifications in bgqd; (bsc#1195896); (bso#14947).- libldb version mismatch in Samba dsdb component; (bsc#1118508);- Update to 4.15.5 * CVE-2021-44141: UNIX extensions in SMB1 disclose whether the outside target of a symlink exists; (bso#14911); (bsc#1193690). * CVE-2021-44142: Out-of-Bound Read/Write on Samba vfs_fruit module; (bso#14914); (bsc#1194859). * CVE-2022-0336: Re-adding an SPN skips subsequent SPN conflict checks; bso#14950); (bsc#1195048).- CVE-2021-44141: Information leak via symlinks of existance of files or directories outside of the exported share; (bso#14911); (bsc#1193690); - CVE-2021-44142: Out-of-bounds heap read/write vulnerability in VFS module vfs_fruit allows code execution; (bso#14914); (bsc#1194859); - CVE-2022-0336: Samba AD users with permission to write to an account can impersonate arbitrary services; (bso#14950); (bsc#1195048);- Update to 4.15.4 * Duplicate SMB file_ids leading to Windows client cache poisoning; (bso#14928); * Failed to parse NTLMv2_RESPONSE length 95 - Buffer Size Error - NT_STATUS_BUFFER_TOO_SMALL; (bso#14932); * kill_tcp_connections does not work; (bso#14934); * Can't connect to Windows shares not requiring authentication using KDE/Gnome; (bso#14935); * smbclient -L doesn't set "client max protocol" to NT1 before calling the "Reconnecting with SMB1 for workgroup listing" path; (bso#14939); * Cross device copy of the crossrename module always fails; (bso#14940); * symlinkat function from VFS cap module always fails with an error; (bso#14941); * Fix possible fsp pointer deference; (bso#14942); * Missing pop_sec_ctx() in error path inside close_directory(); (bso#14944); * "smbd --build-options" no longer works without an smb.conf file; (bso#14945);- Use pkgconfig(krb5) as dependency for the -devel package: allow OBS to pick the right flavor of krb5-devel (full vs mini). - Do not require the 'krb5' symbol by samba-client-libs: this package has an automatic dependency due to linkage on libgssapi_krb5.so.2. Automatic deps are always better. - Do not require the 'krb5' symbol from samba-libs: samba-libs requires samba-client-libs, which in turn requires krb5 libraries. Samba-libs itself has no need for krb5 (but get it indirectly anyway).- Reorganize libs packages. Split samba-libs into samba-client-libs, samba-libs, samba-winbind-libs and samba-ad-dc-libs, merging samba public libraries depending on internal samba libraries into these packages as there were dependency problems everytime one of these public libraries changed its version (bsc#1192684). The devel packages are merged into samba-devel. - Rename package samba-core-devel to samba-devel - Add python-rpm-macros to build requirements - Update the symlink create by samba-dsdb-modules to private samba ldb modules following libldb2 changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba- Update to 4.15.3 * Recursive directory delete with veto files is broken in 4.15.0; (bso#14878); * A directory containing dangling symlinks cannot be deleted by SMB2 alone when they are the only entry in the directory; (bso#14879); * SIGSEGV in rmdir_internals/synthetic_pathref - dirfsp is used uninitialized in rmdir_internals(); (bso#14892); * MaxQueryDuration not honoured in Samba AD DC LDAP; (bso#14694); * The CVE-2020-25717 username map [script] advice has undesired side effects for the local nt token; (bso#14901); (bsc#1192849); * User with multiple spaces (eg FredNurk) become un-deletable; (bso#14902); * Avoid storing NTTIME_THAW (-2) as value on disk; (bso#14127); * smbXsrv_client_global record validation leads to crash if existing record points at non-existing process; (bso#14882); * Crash in vfs_fruit asking for fsp_get_io_fd() for an XATTR call; (bso#14890); * Samba process doesn't log to logfile; (bso#14897); * set_ea_dos_attribute() fallback calling get_file_handle_for_metadata() triggers locking.tdb assert; (bso#14907); * Kerberos authentication on standalone server in MIT realm broken; (bso#14922); * Segmentation fault when joining the domain; (bso#14923); * Support for ROLE_IPA_DC is incomplete; (bso#14903); * rpcclient cannot connect to ncacn_ip_tcp services anymore; (bso#14767); * winexe crashes since 4.15.0 after popt parsing; (bso#14893); * net ads status -P broken in a clustered environment; (bso#14908); * Memory leak if ioctl(FSCTL_VALIDATE_NEGOTIATE_INFO) fails before smbd_smb2_ioctl_send; (bso#14788); * winbindd doesn't start when "allow trusted domains" is off; (bso#14899); * smbclient login without password using '-N' fails with NT_STATUS_INVALID_PARAMETER on Samba AD DC; (bso#14883); * A schannel client incorrectly detects a downgrade connecting to an AES only server; (bso#14912); * Possible null pointer dereference in winbind; (bso#14921); * Fix -k legacy option for client tools like smbclient, rpcclient, net, etc.; (bso#14846); * Add Debian 11 CI bootstrap support; (bso#14872); * Crash in recycle_unlink_internal(); (bso#14888);- Fix dependency problem upgrading from libndr0 to libndr2 and from libsamba-credentials0 to libsamba-credentials1; (bsc#1192684);- Fix regression introduced by CVE-2020-25717 patches, winbindd does not start when 'allow trusted domains' is off; (bso#14899); - Update to 4.15.2 * CVE-2016-2124: SMB1 client connections can be downgraded to plaintext authentication; (bso#12444); (bsc#1014440); * CVE-2020-25717: A user on the domain can become root on domain members; (bso#14556); (bsc#1192284); * CVE-2020-25718: Samba AD DC did not correctly sandbox Kerberos tickets issued by an RODC; (bso#14558); (bsc#1192246); * CVE-2020-25719: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets; (bso#14561); (bsc#1192247); * CVE-2020-25721: Kerberos acceptors need easy access to stable AD identifiers (eg objectSid); (bso#14557); (bsc#1192505); * CVE-2020-25722: Samba AD DC did not do suffienct access and conformance checking of data stored; (bso#14564); (bsc#1192283); * CVE-2021-3738: Use after free in Samba AD DC RPC server; (bso#14468); (bsc#1192215); * CVE-2021-23192: Subsequent DCE/RPC fragment injection vulnerability; (bso#14875); (bsc#1192214); - Update to 4.15.1 * vfs_shadow_copy2: core dump in make_relative_path; (bso#14682); * Log clutter from filename_convert_internal; (bso#14685); * MacOSX compilation fixes; (bso#14862); * rodc_rwdc test flaps; (bso#14868); * Provide a fix for MS CVE-2020-17049 in Samba [SECURITY] 'Bronze bit' S4U2Proxy Constrained Delegation bypass in Samba with embedded Heimdal; (bso#14642); * Python ldb.msg_diff() memory handling failure; (bso#14836); * "in" operator on ldb.Message is case sensitive; (bso#14845); * Release LDB 2.4.1 for Samba 4.15.1; (bso#14848); * samldb_krbtgtnumber_available() looks for incorrect string; (bso#14854); * Fix Samba support for UF_NO_AUTH_DATA_REQUIRED; (bso#14871); * Allow special chars like "@" in samAccountName when generating the salt; (bso#14874); * Correctly ignore comments in CTDB public addresses file; (bso#14826); * Fix transit path validation; (bso#12998); * Fix that child winbindd logs to log.winbindd instead of log.wb-; (bso#14852); * SMB3 cancel requests should only include the MID together with AsyncID when AES-128-GMAC is used; (bso#14855); * Prepare to operate with MIT krb5 >= 1.20; (bso#14870); * Heimdal prefers RC4 over AES for machine accounts; (bso#14864);- Enable samba-tool without ad dc.- Adjust spec to use pam macros; (bsc#1191046).- Adjust spec for size * allow some Recommends instead Requires to be configured for cifs-utils, samba-libs-python3 & samba-gpupdate; (bsc#1182847). * remove fam, undocumented and unneeded.- Add missing build dependency on bison when building with the embedded Heimdal Kerberos- Update to 4.15.0 * Removed SMB development dialects SMB2_22, SMB2_24 and SMB3_10 * VFS layer modernized. * Add the ability to set allow/deny lists for zone transfer clients in Bind DLZ plugin * Server multi-channel support no longer experimental * Improved command line user experience, unifying the options in different commands * Winbindd no longer scans trusted domains on startup and will use enterprise principals by default. * The net utility is now able to support the offline domain join feature * New options for 'samba-tool dns zoneoptions' for aging control and to mark old records as static or dynamic * DNS tombstones are now deleted as appropriate and use a consistent timestamp format * The 'samba-tool dns update' command validates and rejects now malformed IPv4 and IPv6 addresses * The 'samba-tool domain backup' command correctly takes out locks against concurrent modification during backup when using the LMDB backend * TruACL support has been removed * NIS support has been removed- Fix 'net rpc' authentication when using the machine account; (bsc#1189017); (bso#14796);- Fix dependency problem upgrading from libndr0 to libndr1; (bsc#1189875); - Fix dependency problem upgrading from libsmbldap0 to libsmbldap2; (bsc#1189875); - Fix wrong kvno exported to keytab after net ads changetrustpw due to replication delay; (bsc#1188727); - Add Certificate Auto Enrollment Policy; (jsc#SLE-18456). - Update to 4.13.10 * s3: smbd: Ensure POSIX default ACL is mapped into returned Windows ACL for directory handles; (bso#14708); * Take a copy to make sure we don't reference free'd memory; (bso#14721); * s3: lib: Fix talloc heirarcy error in parent_smb_fname(); (bso#14722); * s3: smbd: Remove erroneous TALLOC_FREE(smb_fname_parent) in change_file_owner_to_parent() error path; (bso#14736); * samba-tool: Give better error information when the 'domain backup restore' fails with a duplicate SID; (bso#14575); * smbd: Correctly initialize close timestamp fields; (bso#14714); * Spotlight RPC service doesn't work with vfs_glusterfs; (bso#14740); * ctdb: Fix a crash in run_proc_signal_handler(); (bso#14475); * gensec_krb5: Restore ipv6 support for kpasswd; (bso#14750); * smbXsrv_{open,session,tcon}: Protect smbXsrv_{open,session,tcon}_global_traverse_fn against invalid records; (bso#14752); * samba-tool domain backup offline doesn't work against bind DLZ backend; (bso#14027); * netcmd: Use next_free_rid() function to calculate a SID for restoring a backup; (bso#14669); - Update to 4.13.9 * s3: smbd: SMB1 SMBsplwr doesn't send a reply packet on success; (bso#14696); * Add documentation for dsdb_group_audit and dsdb_group_json_audit to "log level", synchronise "log level" in smb.conf with the code; (bso#14689); * Fix smbd panic when two clients open same file; (bso#14672); * Fix memory leak in the RPC server; (bso#14675); * s3: smbd: Fix deferred renames; (bso#14679); * s3-iremotewinspool: Set the per-request memory context; (bso#14675); * rpc_server3: Fix a memleak for internal pipes; (bso#14675); * third_party: Update socket_wrapper to version 1.3.2; (bso#11899); * third_party: Update socket_wrapper to version 1.3.3; (bso#14639); * idmap_rfc2307 and idmap_nss return wrong mapping for uid/gid conflict; (bso#14663); * Fix the build on OmniOS; (bso#14288); - Update to 4.13.8 * CVE-2021-20254: Fix buffer overrun in sids_to_unixids(); (bso#14571 - Update to 4.13.7 * Release with dependency on ldb version 2.2.1.- CVE-2021-20254 Buffer overrun in sids_to_unixids(); (bnc#14571); (bsc#1184677).- Fix offline domain backup not possible using lmdb version >= 0.9.26; (bso#14676); - Require libldb >= 2.2.1; (bsc#1183572); (bsc#1183574); - Update to 4.13.6 * CVE-2020-27840: samba: Unauthenticated remote heap corruption via bad DNs; (bso#14595); (bsc#1183572). * CVE-2021-20277: samba: out of bounds read in ldb_handler_fold; (bso#14655); (bsc#1183574). - Update to 4.13.5 * s3:modules:vfs_virusfilter: Recent talloc changes cause infinite start-up failure; (bso#14634); * s3: libsmb: Add missing cli_tdis() in error path if encryption setup failed on temp proxy connection; (bso#13992); * smbd: In conn_force_tdis_done() when forcing a connection closed force a full reload of services; (bso#14604); * dbcheck: Check Deleted Objects and reduce noise in reports about expired tombstones (bso#14593); * s3: Fix fcntl waf configure check; (bso#14503); * s3/auth: Implement "winbind:ignore domains"; (bso#14602); * smbd: Use fsp->conn->session_info for the initial delete-on-close token; (bso#14617); * s3: VFS: nfs4_acls. Add missing TALLOC_FREE(frame) in error path; (bso#14648); * classicupgrade: Treat old never expires value right; (bso#14624); * g_lock: Fix uninitalized variable reads; (bso#14636); * s3:pysmbd: Fix fd leak in py_smbd_create_file(); (bso#13898); * lib:util: Avoid free'ing our own pointer; (bso#14625); * HEIMDAL: krb5_storage_free(NULL) should work; (bso#12505);- Spec file fixes around systemd and requires; (bsc#1182830); - Align systemd service unit files with upstream provided ones.- Update to 4.13.4 * Work around special SMB2 IOCTL response behavior of NetApp Ontap 7.3.7; (bso#14607); * Temporary DFS share setup doesn't set case parameters in the same way as a regular share definition does; (bso#14612); * lib: Avoid declaring zero-length VLAs in various messaging functions; (bso#14605); * Do not create an empty DB when accessing a sam.ldb; (bso#14579); * vfs_fruit may close wrong backend fd; (bso#14596); * Temporary DFS share setup doesn't set case parameters in the same way as a regular share definition does; (bso#14612); * vfs_virusfilter: Allocate separate memory for config char*; (bso#14606); * vfs_fruit may close wrong backend fd; (bso#14596); * Work around special SMB2 IOCTL response behavior of NetApp Ontap 7.3.7; (bso#14607); * The cache directory for the user gencache should be created recursively; (bso#14601); * Be more flexible with repository names in CentOS 8 test environments; (bso#14594);- Uninstalling samba-client: Failed to disable unit, cifs.service does not exists; (bsc#1180388);- Update to 4.13.3 + libcli: smb2: Never print length if smb2_signing_key_valid() fails for crypto blob; (bso#14210); + s3: modules: gluster. Fix the error I made in preventing talloc leaks from a function; (bso#14486); + s3: smbd: Don't overwrite contents of fsp->aio_requests[0] with NULL via TALLOC_FREE(); (bso#14515); + s3: spoolss: Make parameters in call to user_ok_token() match all other uses; (bso#14568); + s3: smbd: Quiet log messages from usershares for an unknown share; (bso#14590); + samba process does not honor max log size; (bso#14248); + vfs_zfsacl: Add missing inherited flag on hidden "magic" everyone@ ACE; (bso#14587); + s3-libads: Pass timeout to open_socket_out in ms; (bso#13124); + s3-vfs_glusterfs: Always disable write-behind translator; (bso#14486); + smbclient: Fix recursive mget; (bso#14517); + clitar: Use do_list()'s recursion in clitar.c; (bso#14581); + manpages/vfs_glusterfs: Mention silent skipping of write-behind translator; (bso#14486); + vfs_shadow_copy2: Preserve all open flags assuming ROFS; (bso#14573); + interface: Fix if_index is not parsed correctly; (bso#14514);- Update to 4.13.2 + s3: modules: vfs_glusterfs: Fix leak of char **lines onto mem_ctx on return; (bso#14486); + RN: vfs_zfsacl: Only grant DELETE_CHILD if ACL tag is special; (bso#14471); + smb.conf.5: Add clarification how configuration changes reflected by Samba; (bso#14538); + daemons: Report status to systemd even when running in foreground; (bso#14552); + DNS Resolver: Support both dnspython before and after 2.0.0; (bso#14553); + s3-vfs_glusterfs: Refuse connection when write-behind xlator is present; (bso#14486); + provision: Add support for BIND 9.16.x; (bso#14487); + ctdb-common: Avoid aliasing errors during code optimization; (bso#14537); + libndr: Avoid assigning duplicate versions to symbols; (bso#14541); + docs: Fix default value of spoolss:architecture; (bso#14522); + winbind: Fix a memleak; (bso#14388); + s4:dsdb:acl_read: Implement "List Object" mode feature; (bso#14531); + docs-xml/manpages: Add warning about write-behind translator for vfs_glusterfs; (bso#14486); + nsswitch/nsstest.c: Avoid nss function conflicts with glibc nss.h. + vfs_shadow_copy2: Avoid closing snapsdir twice; (bso#14530); + third_party: Update resolv_wrapper to version 1.1.7; (bso#14547); + examples:auth: Do not install example plugin; (bso#14550); + ctdb-recoverd: Drop unnecessary and broken code; (bso#14513); + RN: vfs_zfsacl: Only grant DELETE_CHILD if ACL tag is special; (bso#14471);- Adjust smbcacls '--propagate-inheritance' feature to align with upstream; (bsc#1178469).- Update to samba 4.13.1 + CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with easily crafted records; (bsc#1177613); (bso#14472); + CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994); (bso#14436); + CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify; (bsc#1173902); (bso#14434); - Adjust systemd tmpfiles.d configuration, use /run/samba instead of /var/run/samba; (bsc#1177355);- Fix vfs_ceph query_directory regression; (bso#14519) - Drop liburing-devel for SLE15-SP2; (bsc#1177245)- Register CTDB recovery lock holder with ceph-mgr - Add liburing-devel dependency- Update to samba 4.13.0 + Require Python 3.6 + Move wide links functionality into VFS module + Deprecate NT4-like 'classic' Samba domain controllers + Deprecate SMBv1 only protocol options + Remove deprecated "ldap ssl ads" option + Unify asynchronous DCE-RPC server; (jsc#SES-645) + Replay multichannel lease break requests; (bso#11897); (jsc#SES-655) + Drop internal byteorder.h header from util-devel package + Remove final code for the AD DC LDAP backend + Add AD DC Group Policy Scripts + Only use gnutls_aead_cipher_encryptv2() for GnuTLS > 3.6.14; (bso#14399) + Fix %U substitutions if it contains a domain name; (bso#14467) + Fix krb5.conf creation for 'net ads join'; (bso#14479) + Fix build problem if libbsd-dev is not installed; (bso#14482) + Toggle vfs_snapper using "--with-shared-modules"; (bso#14437) + Fix idmap_ad RFC4511 response handling; (bso#14465) + Fix panic in get_lease_type(); (bso#14428)- Update to samba 4.11.13 + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2 against unencrypted passwords; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Support "server require schannel:WORKSTATION$ = no" about unsecure configurations; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): s4 torture rpc: repeated bytes in client challenge; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): libcli/auth: Reject weak client challenges in netlogon_creds_server_init() "server require schannel:WORKSTATION$ = no"; (bsc#1176579); (bso#14497); - Update to samba 4.11.12 + s3: libsmb: Fix SMB2 client rename bug to a Windows server; (bso#14403); + dsdb: Allow "password hash userPassword schemes = CryptSHA256" to work on RHEL7; (bso#14424); + dbcheck: Allow a dangling forward link outside our known NCs; (bso#14450); + lib/debug: Set the correct default backend loglevel to MAX_DEBUG_LEVEL; (bso#14426); + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428); + lib/util: do not install "test_util_paths"; (bso#14370); + lib:util: Fix smbclient -l basename dir; (bso#14345); + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428); + util: Allow symlinks in directory_create_or_exist; (bso#14166); + docs: Fix documentation for require_membership_of of pam_winbind; (bso#14358); + s3:winbind:idmap_ad: Make failure to get attrnames for schema mode fatal; (bso#14425);- Add obsoletes to libsmbldap2 package to fix upgrades from previous versions; (bsc#1172810);- Fix net command unable to negotiate SMB2; (bsc#1174120);- Update to samba 4.11.11 + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ and VLV combined; (bso#14364); (bsc#1173159] + CVE-2020-10745: invalid DNS or NBT queries containing dots use several seconds of CPU each; (bso#14378); (bsc#1173160). + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP server with paged_result or VLV; (bso#14402); (bsc#1173161) + CVE-2020-14303: Endless loop from empty UDP packet sent to AD DC nbt_server; (bso#14417); (bsc#1173359). - Update to samba 4.11.10 + Fix segfault when using SMBC_opendir_ctx() routine for share folder that contains incorrect symbols in any file name; (bso#14374). + vfs_shadow_copy2 doesn't fail case looking in snapdirseverywhere mode; (bso#14350) + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr; (bso#14413). + Malicous SMB1 server can crash libsmbclient; (bso#14366) + winbindd: Fix a use-after-free when winbind clients exit; (bso#14382) + ldb: Bump version to 2.0.11, LMDB databases can grow without bounds. (bso#14330) - Update to samba 4.11.9 + nmblib: Avoid undefined behaviour in handle_name_ptrs(); (bso#14242). + 'samba-tool group' commands do not handle group names with special chars correctly; (bso#14296). + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo is not valid; (bso#14237). + Missing check for DMAPI offline status in async DOS attributes; (bso#14293). + smbd: Ignore set NTACL requests which contain S-1-5-88 NFS ACEs; (bso#14307). + vfs_recycle: Prevent flooding the log if we're called on non-existant paths; (bso#14316) + smbd mistakenly updates a file's write-time on close; (bso#14320). + RPC handles cannot be differentiated in source3 RPC server; (bso#14359). + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313). + nsswitch: Fix use-after-free causing segfault in _pam_delete_cred; (bso#14327). + Fix fruit:time machine max size on arm; (bso#13622) + CTDB recovery corner cases can cause record resurrection and node banning; (bso#14294). + ctdb: Fix a memleak; (bso#14348). + libsmb: Don't try to find posix stat info in SMBC_getatr(). + ctdb-tcp: Move free of inbound queue to TCP restart; (bso#14295); (bsc#1162680). + s3/librpc/crypto: Fix double free with unresolved credential cache; (bso#14344); (bsc#1169095) + s3:libads: Fix ads_get_upn(); (bso#14336). + CTDB recovery corner cases can cause record resurrection and node banning; (bso#14294) + Starting ctdb node that was powered off hard before results in recovery loop; (bso#14295); (bsc#1162680). + ctdb-recoverd: Avoid dereferencing NULL rec->nodemap; (bso#14324) - Update to samba 4.11.8 + CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with ASQ; (bso#14331); (bsc#1169850); + CVE-2020-10704: LDAP Denial of Service (stack overflow) in Samba AD DC; (bso#14334); (bsc#1169851); - Update to samba 4.11.7 + s3: lib: nmblib. Clean up and harden nmb packet processing; (bso#14239). + s3: VFS: full_audit. Use system session_info if called from a temporary share definition; (bso#14283) + dsdb: Correctly handle memory in objectclass_attrs; (bso#14258). + ldb: version 2.0.9, Samba 4.11 and later give incorrect results for SCOPE_ONE searches; (bso#14270) + auth: Fix CIDs 1458418 and 1458420 Null pointer dereferences; (bso#14247). + smbd: Handle EINTR from open(2) properly; (bso#14285) + winbind member (source3) fails local SAM auth with empty domain name; (bso#14247) + winbindd: Handling missing idmap in getgrgid(); (bso#14265). + lib:util: Log mkdir error on correct debug levels; (bso#14253). + wafsamba: Do not use 'rU' as the 'U' is deprecated in Python 3.9; (bso#14266). + ctdb-tcp: Make error handling for outbound connection consistent; (bso#14274). - Update to samba 4.11.6 + pygpo: Use correct method flags; (bso#14209). + vfs_ceph_snapshots: Fix root relative path handling; (bso#14216); (bsc#1141320). + Avoiding bad call flags with python 3.8, using METH_NOARGS instead of zero; (bso#14209). + source4/utils/oLschema2ldif: Include stdint.h before cmocka.h; (bso#14218). + docs-xml/winbindnssinfo: Clarify interaction with idmap_ad etc; (bso#14122). + smbd: Fix the build with clang; (bso#14251). + upgradedns: Ensure lmdb lock files linked; (bso#14199). + s3: VFS: glusterfs: Reset nlinks for symlink entries during readdir; (bso#14182). + smbc_stat() doesn't return the correct st_mode and also the uid/gid is not filled (SMBv1) file; (bso#14101). + librpc: Fix string length checking in ndr_pull_charset_to_null(); (bso#14219). + ctdb-scripts: Strip square brackets when gathering connection info; (bso#14227).- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);- Installing: samba - samba-ad-dc.service does not exist and unit not found; (bsc#1171437);- Fix samba_winbind package is installing python3-base without python3 package; (bsc#1169521);- Require libldb2 >= 2.0.10 after security release.- CVE-2020-10704: LDAP Denial of Service (stack overflow) in Samba AD DC; (bso#14334); (bsc#1169851); - CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with ASQ; (bso#14331); (bsc#1169850);- Fix smbclient crash with double free (with unresolved krb5 credential cache); (bso#14344); (bsc#1169095).- Starting ctdb node that was powered off hard before results in recovery loop; (bso#14295); (bsc#1162680).- CTDB doesn't retry outgoing connections on bind (and some other) failures; (bso#14274); (bsc#1162680).- Revert: Allow idmap_rid to have primary group other than "Domain Users"; (bsc#1087931).- Fix nmbstatus not reporting detailed information about workgroups; (bsc#1159464); - Fix querying all names registered within broadcast area; (bso#8927);- Update to samab 4.11.5 + CVE-2019-14902: Replication of ACLs down subtree on AD Directory is not automatic; (bso#12497); (bsc#1160850). + CVE-2019-19344: Fix server crash with dns zone scavenging = yes; (bso#14050); (bsc#1160852). + CVE-2019-14907: server-side crash after charset conversion failure (eg during NTLMSSP processing); (bso#14208); (bsc#1160888). - Update to samba 4.11.4 + Ensure SMB1 cli_qpathinfo2() doesn't return an inode number; (bso#14161). + Ensure we don't call cli_RNetShareEnum() on an SMB1 connection; (bso#14174). + NT_STATUS_ACCESS_DENIED becomes EINVAL when using SMB2 in SMBC_opendir_ctx; (bso#14176). + SMB2 - Ensure we use the correct session_id if encrypting an interim response; (bso#14189). + Prevent smbd crash after invalid SMB1 negprot; (bso#14205). + printing: Fix %J substition; (bso#13745). + Remove now unneeded call to cmdline_messaging_context(); (bso#13925). + Fix incomplete conversion of former parametric options; (bso#14069). + Fix sync dosmode fallback in async dosmode codepath; (bso#14070). + vfs_fruit returns capped resource fork length; (bso#14171). + libnet_join: Add SPNs for additional-dns-hostnames entries; (bso#14116). + smbd: Increase a debug level; (bso#14211). + Prevent azure ad connect from reporting discovery errors reference-value-not-ldap-conformant; (bso#14153). + krb5_plugin: Fix developer build with newer heimdal system library; (bso#14179). + replace: Only link libnsl and libsocket if required; (bso#14168); + ctdb: Incoming queue can be orphaned causing communication; breakdown; (bso#14175). + ldb: Release ldb 2.0.8. Cross-compile will not take cross-answers or cross-execute; (bso#13846). + heimdal-build: Avoid hard-coded /usr/include/heimdal in asn1_compile-generated code; (bso#13856).- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).- Update to samba 4.11.3 + CVE-2019-14861: DNSServer RPC server crash, an authenticated user can crash the DCE/RPC DNS management server by creating records with matching the zone name; (bso#14138); (bsc#1158108). + CVE-2019-14870: DelegationNotAllowed not being enforced, the DelegationNotAllowed Kerberos feature restriction was not being applied when processing protocol transition requests (S4U2Self), in the AD DC KDC; (bso#14187); (bsc#1158109).- CVE-2019-14861: DNSServer RPC server crash, an authenticated user can crash the DCE/RPC DNS management server by creating records with matching the zone name; (bso#14138); (bsc#1158108). - CVE-2019-14870: DelegationNotAllowed not being enforced, the DelegationNotAllowed Kerberos feature restriction was not being applied when processing protocol transition requests (S4U2Self), in the AD DC KDC; (bso#14187); (bsc#1158109).- Update to samba 4.11.2 + CVE-2019-10218: Client code can return filenames containing path separators; (bsc#1144902); (bso#14071). + CVE-2019-14833: Samba AD DC check password script does not receive the full password; (bso#12438). + CVE-2019-14847: User with "get changes" permission can crash AD DC LDAP server via dirsync; (bso#14040). - Fixes from 4.11.1 + Overlinking libreplace against librt and pthread against every binary or library causes issues; (bso#14140); + kpasswd fails when built with MIT Kerberos; (bso#14155); + Fix spnego fallback from kerberos to ntlmssp in smbd server; (bso#14106); + Stale file handle error when using mkstemp on a share; (bso#14137); + non-AES schannel broken; (bso#14134); + Joining Active Directory should not use SAMR to set the password; (bso#13884); + smbclient can blunder into the SMB1 specific cli_RNetShareEnum() call on an SMB2 connection; (bso#14152); + Deleted records can be resurrected during recovery; (bso#14147); + getpwnam and getpwuid need to return data for ID_TYPE_BOTH group; (bso#14141); + winbind does not list forest trusts with additional trust attributes; (bso#14130); + fault report points to outdated documentation; (bso#14139); + pam_winbind with krb5_auth or wbinfo -K doesn't work for users of trusted domains/forests; (bso#14124); + classicupgrade results in uncaught exception - a bytes-like object is required, not 'str'; (bso#14136); + pod2man is not longer required, stop checking at build time; (bso#14131); + Exit code of ctdb nodestatus should not be influenced by deleted nodes; (bso#14129); + username/password authentication doesn't work with CUPS and smbspool; (bso#14128); + smbc_readdirplus() is incompatible with smbc_telldir() and smbc_lseekdir(); (bso#14094);- CVE-2019-14847: User with "get changes" permission can crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598); - CVE-2019-10218: Client code can return filenames containing path separators; (bso#14071); (bsc#1144902);- CVE-2019-14833: samba: Accent with "check script password" Samba AD DC check password script does not receive the full password; (bso#12438); (bsc#1154289).- Update to samba 4.11.0 + For details on all items see WHATSNEW.txt in samba-doc package + Python2 runtime support removed; python 3.4 or later required + Security improvements: - SMB1 disabled by default - lanman and plaintext authentication deprecated - winbind: PAM_AUTH and NTLM_AUTH events logged - GnuTLS 3.2 required; system FIPS mode setting honored + CephFS Snapshot integration, exposed as previous file versions + ctdb changes: - onnode -o option removed - ctdbd logs when using more than 90% of a CPU thread - CTDB_MONITOR_SWAP_USAGE variable removed + AD Domain controller improvements: - Upgrade AD databse format - BIND9_FLATFILE deprecated - default process model chagned to prefork - bind9 dns operation duration logging - Default schema updated to 2012_R2; function level is unchanged - many performance improvements + Configuration webserver support removed- Fix broken username/password authentication with CUPS and smbspool; (bsc#1152143); (bso#14128).- Fix auth problems when printing via smbspool backend with kerberos; (bnc#1148539); (bso#13832).- Update to samba 4.10.8 + CVE-2019-10197: user escape from share path definition; (bso#14035); (bsc#1141267);- Fix build on newer systems by modifying samba.spec to use consistent non-relative paths for pammodules in configure line and specification of pam_winbind.so library to package.- Update to samba 4.10.7 + Unable to create or rename file/directory inside shares configured with vfs_glusterfs_fuse module; (bso#14010). + build: Allow build when '--disable-gnutls' is set; (bso#13844) + samba-tool: Add 'import samba.drs_utils' to fsmo.py; (bso#13973). + Fix 'Error 32 determining PSOs in system' message on old DB with FL upgrade; (bso#14008). + s4/libnet: Fix joining a Windows pre-2008R2 DC; (bso#14021) + join: Use a specific attribute order for the DsAddEntry nTDSDSA object; (bso#14046). + vfs_catia: Pass stat info to synthetic_smb_fname(); (bso#14015). + lookup_name: Allow own domain lookup when flags == 0; (bso#14091). + s4 librpc rpc pyrpc: Ensure tevent_context deleted last; (bso#13932). + DEBUGC and DEBUGADDC doesn't print into a class specific log file; (bso#13915). + Request to keep deprecated option "server schannel", VMWare Quickprep requires "auto"; (bso#13949). + dbcheck: Fallback to the default tombstoneLifetime of 180 days; (bso#13967). + dnsProperty fails to decode values from older Windows versions; (bso#13969). + samba-tool: Use only one LDAP modify for dns partition fsmo role transfer; (bso#13973). + third_party: Update waf to version 2.0.17; (bso#13960). + netcmd: Allow 'drs replicate --local' to create partitions; (bso#14051). + ctdb-config: Depend on /etc/ctdb/nodes file; (bso#14017).- CVE-2019-10197: user escape from share path definition; (bso#14035); (bsc#1141267).- Prepare for use future use of kernel keyrings, modify /etc/pam.d/samba to include pam_keyinit.so; (bsc#1144059).- Update samba-winbind script to work with systemd; (bsc#1132739); - Drop samba dhcpcd hook scripts - Update to samba 4.10.6 + s3: winbind: Fix crash when invoking winbind idmap scripts; (bso#13956). + smbd does not correctly parse arguments passed to dfree and quota scripts; (bso#13964). + samba-tool dns: use bytes for inet_ntop; (bso#13965). + samba-tool domain provision: Fix --interactive module in python3; (bso#13828). + ldb_kv: Skip @ records early in a search full scan; (bso#13893). + docs: Improve documentation of "lanman auth" and "ntlm auth" connection; (bso#13981). + python/ntacls: Use correct "state directory" smb.conf option instead of "state dir"; (bso#14002). + registry: Add a missing include; (bso#13840). + Fix SMB guest authentication; (bso#13944). + AppleDouble conversion breaks Resourceforks; (bso#13958). + vfs_fruit makes direct use of syscalls like mmap() and pread(); (bso#13968). + s3:mdssvc: Fix flex compilation error; (bso#13987). + s3/vfs_glusterfs[_fuse]: Avoid using NAME_MAX directly; (bso#13872). + dsdb:samdb: schemainfo update with relax control; (bso#13799). + s3:util: Move static file_pload() function to lib/util; (bso#13964). + smbd: Fix a panic; (bso#13957). + ldap server: Generate correct referral schemes; (bso#12478). + s4 dsdb/repl_meta_data: fix use after free in dsdb_audit_add_ldb_value; (bso#13941). + s4 dsdb: Fix use after free in samldb_rename_search_base_callback; (bso#13942). + dsdb/repl: we need to replicate the whole schema before we can apply it; (bso#12204). + ldb: Release ldb 1.5.5; (bso#12478). + Schema replication fails if link crosses chunk boundary backwards; (bso#13713). + 'samba-tool domain schemaupgrade' uses relax control and skips the schemaInfo update provision; (bso#13799). + dsdb_audit: avoid printing "... remote host [Unknown] SID [(NULL SID)] ..."; (bso#13916). + python/ntacls: We only need security.SEC_STD_READ_CONTROL in order to get the ACL; (bso#13917). + s3:loadparm: Ensure to truncate FS Volume Label at multibyte boundary; (bso#13947). + Using Kerberos credentials to print using spoolss doesn't work; (bso#13939). + wafsamba: Use native waf timer; (bso#13998). + ctdb-scripts: Fix tcp_tw_recycle existence check; (bso#13984).- Update to samba-4.10.5 (including updates for 4.10.4, 4.10.3) + CVE-2019-12435 rpc/dns: Avoid NULL deference if zone not found in DnssrvOperation2; (bso#13922); (bsc#1137815). + CVE-2019-12436 dsdb/paged_results: Ignore successful results without messages; (bso#13951); (bsc#1137816). - Update to samba-4.10.4 + s3: SMB1: Don't allow recvfile on stream fsp's; (bso#13938). + py/provision: Fix for Python 2.6; (bso#13882). + netcmd: Fix 'passwordsettings --max-pwd-age' command; (bso#13873). + s3-libnet_join: 'net ads join' to child domain fails when using "-U admin@forestroot"; (bso#13861). + vfs_ceph: Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245). + vfs_ceph: Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697). + ctdb-common: Avoid race between fd and signal events; (bso#13895). + ctdb-common: Fix memory leak in run_proc; (bso#13943). + lib: Initialize getline() arguments; (bso#13892). + winbind: Fix overlapping id ranges; (bco#13903). + lib util debug: Increase format buffer to 4KiB; (bso#13902). + nsswitch pam_winbind: Fix Asan use after free; (bso#13927). + s4 lib socket: Ensure address string owned by parent struct; (bso#13929). + s3 rpc_client: Fix Asan stack use after scope; (bso#13936). + s3:smbd: Handle IO_REPARSE_TAG_DFS in SMB_FIND_FILE_FULL_DIRECTORY_INFO; (bso#10097). + smb2_tcon: Avoid STATUS_PENDING completely on tdis; (bso#10344). + smb2_sesssetup: avoid STATUS_PENDING responses for session setup; (bso#12845). + smb2_tcon: Avoid STATUS_PENDING completely on tdis; (bso#13698). + smb2_sesssetup: avoid STATUS_PENDING responses for session setup; (bso#13796). + dbcheck: Fix the err_empty_attribute() check; (bso#13843). + vfs_snapper: Drop unneeded fstat handler; (bso#13858). + vfs_default: Fix vfswrap_offload_write_send() NT_STATUS_INVALID_VIEW_SIZE check; (bso#13862). + smb2_server: Grant all 8192 credits to clients; (bso#13863). + smbd: Implement SMB_FILE_NORMALIZED_NAME_INFORMATION handling; (bso#13919). + s3/vfs_glusterfs: Dynamically determine NAME_MAX; (bso#13872). + s3: modules: ceph: Use current working directory instead of share path; (bso#13918); (bsc#1134452). + winbind: Use domain name from lsa query for sid_to_name cache entry; (bso#13831). + memcache: Increase size of default memcache to 512k; (bso#13865). + docs: Update smbclient manpage for "--max-protocol"; (bso#13857). + s3:utils: If share is NULL in smbcacls, don't print it; (bso#13937). + s3:smbspool: Fix regression printing with Kerberos credentials; (bso#13939). + ctdb-scripts: CTDB restarts failed NFS RPC services by hand, which is incompatible with systemd; (bso#13860). + ctdb-daemon: Revert "We can not assume that just because we could complete a TCP handshake"; (bso#13888). + ctdb-daemon: Never use 0 as a client ID; (bso#13930). + ctdb-common: Fix memory leak; (bso#13943). + s3:debug: Enable logging for early startup failures; (bso#13904) - Update to samba-4.10.3 + CVE-2018-16860: Heimdal KDC: Reject PA-S4U2Self with unkeyed checksum; (bso#13685); (bsc#1134024).- CVE-2019-12435: zone operations can crash rpc server; (bso#13922); (bsc#1137815).- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697). - Add ceph_snapshots VFS module; (jsc#SES-183).- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).- Update to samba-4.10.2: + CVE-2019-3870 (World writable files in Samba AD DC private/ dir); (bso#13834). + CVE-2019-3880 (Save registry file outside share as unprivileged user); (bso#13851). + py/kcc_utils: py2.6 compatibility; (bso#13837). + libcli: permit larger values of DataLength in SMB2_ENCRYPTION_CAPABILITIES of negotiate response; (bso#13869). + regfio: Improve handling of malformed registry hive files; (bso#13840). + ctdb-version: Simplify version string usage; (bso#13789). + lib: Make fd_load work for non-regular files; (bso#13859). + dbcheck: in the middle of the tombstone garbage collection causes replication failures, dbcheck: add --selftest-check-expired-tombstones cmdline option; (bso#13816). + ndr_spoolss_buf: Fix out of scope use of stack variable in NDR_SPOOLSS_PUSH_ENUM_OUT(); (bso#13818). + s4/messaging: Fix undefined reference in linking libMESSAGING-samba4.so; (bso#13854). + acl_read: Fix regression for empty lists; (bso#13836). + s4:dlz make b9_has_soa check dc=@ node; (bso#13841). + s3:client: Fix printing via smbspool backend with kerberos auth; (bso#13832). + s4:librpc: Fix installation of Samba; (bso#13847). + s3:lib: Fix the debug message for adding cache entries; (bso#13848). + s3:utils: Add 'smbstatus -L --resolve-uids' to show username; (bso#13793). + s3:lib: Fix the debug message for adding cache entries; (bso#13848). + s3:waf: Fix the detection of makdev() macro on Linux; (bso#13853). * ctdb-build: Drop creation of .distversion in tarball; (bso#13789). * ctdb-packaging: Test package requires tcpdump, ctdb package should not own system library directory; (bso#13838). - Update to samba-4.10.1: + py/kcc_utils: py2.6 compatibility; (bso#13837); + libcli: permit larger values of DataLength in SMB2_ENCRYPTION_CAPABILITIES of negotiate response; (bso#13869); + regfio: Improve handling of malformed registry hive files; (bso#13840); + ctdb-version: Simplify version string usage; (bso#13789); + lib: Make fd_load work for non-regular files; (bso#13859); + dbcheck in the middle of the tombstone garbage collection causes replication failures, dbcheck: add --selftest-check-expired-tombstones cmdline option; (bso#13816); + ndr_spoolss_buf: Fix out of scope use of stack variable in NDR_SPOOLSS_PUSH_ENUM_OUT(); (bso#13818); + s4/messaging: Fix undefined reference in linking libMESSAGING-samba4.so; (bso#13854); + acl_read: Fix regression for empty lists; (bso#13836); + s4:dlz make b9_has_soa check dc=@ node; (bso#13841); + s3:client: Fix printing via smbspool backend with kerberos auth; (bso#13832); + s4:librpc: Fix installation of Samba; (bso#13847); + s3:lib: Fix the debug message for adding cache entries; (bso#13848); + s3:utils: Add 'smbstatus -L --resolve-uids' to show username; (bso#13793); + s3:lib: Fix the debug message for adding cache entries; (bso#13848); + s3:waf: Fix the detection of makdev() macro on Linux; (bso#13853); + ctdb-build: Drop creation of .distversion in tarball; (bso#13789); + ctdb-packaging: Test package requires tcpdump, ctdb package should not own system library directory; (bso#13838); - Update to samba-4.10.0: + s4-server: Open and close a transaction on sam.ldb at startup; (bso#13760); + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812); + s4/scripting/bin: Open unicode files with utf8 encoding and write + unicode string. + sambaundoguididx: Use the right escaped oder unescaped sam ldb files; (bso#13759); + Fix idmap cache pollution with S-1-22- IDs on winbind hickup; (bso#13813); + passdb: Update ABI to 0.27.2. + lib/winbind_util: Add winbind_xid_to_sid for --without-winbind; (bso#13813); + lib:util: Move debug message for mkdir failing to log level 1; (bso#13823);- MacOS credit accounting breaks with async SESSION SETUP; (bsc#1125601); (bso#13796). - Mac OS X SMB2 implmenetation sees Input/output error or Resource temporarily unavailable and drops connection; (bso#13698)- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).- CVE-2019-3880: Save registry file outside share as unprivileged user; (bso#13851); (bsc#1131060 ).- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0); (bso#13834); (bsc#1130703);- Update to samba-4.9.5 + audit_logging: Remove debug log header and JSON Authentication: prefix; (bso#13714); + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760); + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso# CID: 1433607; (bso#11495); + smbd: uid: Don't crash if 'force group' is added to an existing share connection; (bso#13690); + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility code; (bso#13770); + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803); + s3:utils/smbget fix recursive download with empty source directories; (bso#13199); + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716); + s3:libsmb: cli_smb2_list() can sometimes fail initially on a connection; (bso#13736); + join: Throw CommandError instead of Exception for simple errors; (bso#13747); + ldb: Avoid inefficient one-level searches; (bso#13762); + s3: libsmb: use smb2cli_conn_max_trans_size() in cli_smb2_list(); (bso#13736); + tldap: Avoid use after free errors; (bso#13776); + Fix idmap xid2sid cache churn; (bso#13802); + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812); + s3-smbd: Avoid assuming fsp is always intact after close_file call; (bso#13720); + s3-vfs-fruit: Add close call; (bso#13725); + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746); + s3-vfs: add glusterfs_fuse vfs module; (bso#13774); + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766); + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS) ftruncate and fallocate; (bso#13807); + lib/audit_logging: Actually create talloc; (bso#13737); + netcmd/user: python[3]-gpgme unsupported and replaced by python[3]-gpg; (bso#13728); + dns: Changing onelevel search for wildcard to subtree; (bso#13738); + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721); + sambaundoguididx: Use the right escaped oder unescaped sam ldb files; (bso#13759); + ctdb: Print locks latency in machinereadable stats; (bso#13742); + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786); + audit_logging: auth_json_audit required auth_json; (bso#13715); + man pages: Document prefork process model; (bso#13765); + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773); + s3:auth: ignore create_builtin_guests() failing without a valid idmap configuration; (bso#13697); + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC without trusts; (bso#13722); + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd is not available; (bso#13723); + s4:server: Add support for 'smbcontrol samba shutdown' and 'smbcontrol debug/debuglevel'; (bso#13752); + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616); + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330); + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774); + notifyd: Fix SIGBUS on sparc; (bso#13704); + waf: Check for libnscd; (bso#13787); + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770); + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717); + Recovery lock bug fixes; (bso#13800); + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726); + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727); + vfs_fileid: Fix get_connectpath_ino; (bso#13741); + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).- Fix update-apparmor-samba-profile script after apparmor switched to using named profiles. The change is backwards compatible; (bsc#1126377);- LoadParm().load_default() fails with "Unable to load default file"; (bsc#1089758);- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);- Update to samba-4.9.4 + libcli/smb: Don't overwrite status code; (bso#9175). + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164). + Session setup reauth fails to sign response; (bso#13661). + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677). + vfs_shadow_copy2: Nicely deal with attempts to open previous version for writing; (bso#13688). + Restoring previous version of stream with vfs_shadow_copy2 fails with NT_STATUS_OBJECT_NAME_INVALID fsp->base_fsp->fsp_name; (bso#13455). + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571). + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708) + PEP8: fix E231: missing whitespace after ','. + winbindd: Fix crash when taking profiles;(bso#13629) + CVE-2018-14629 dns: Fix CNAME loop prevention using counter regression; (bso#13600) + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686). + CVE-2018-16853: Do not segfault if client is not set; (bso#13571). + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679) + ctdb-daemon: Exit with error if a database directory does not exist; (bso#13696). + s3:libads: Add net ads leave keep-account option; (bso#13498).- Drop more %if..%endif guards which are idempotent. - Drop requires on ldconfig which are already auto-discovered. - Do not ignore errors from useradd/groupadd.- Remove python2 build dependency from samba-libs; (bsc#1116900);- Update update-apparmor-samba-profile script to ignore the shares's paths containing substitution variables in any place, not only at the beginning of the path.- Update to samba-4.9.3 + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD Internal DNS server; (bso#13600); (bsc#1116319); + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628); (bsc#1116320); + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server; (bso#13674); (bsc#1116322); + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers; (bso#13669); (bsc#1116321); + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos configuration (unsupported); (bso#13678); (bsc#1116324); + CVE-2018-16857: Bad password count in AD DC not always effective; window; (bso#13683); (bsc#1116323);- Update to samba-4.9.2 + dsdb: Add comments explaining the limitations of our current backlink behaviour; (bso#13418); + Fix problems running domain backups (handling SMBv2, sites); (bso#13621); + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3; (bso#13465); + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642); + File saving issues with vfs_fruit on samba >= 4.8.5; (bso#13646); + Enabling vfs_fruit looses FinderInfo; (bso#13649); + Cancelling of SMB2 aio reads and writes returns wrong error NT_STATUS_INTERNAL_ERROR; (bso#13667); + Fix CTDB recovery record resurrection from inactive nodes and simplify vacuuming; (bso#13641); + examples: Fix the smb2mount build; (bso#13465); + libtevent: Fix build due to missing open_memstream on Illiumos; (bso#13629); + winbindd_cache: Fix timeout calculation for sid<->name cache; (bso#13662); + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path; (bso#13653); + Extended DN SID component missing for member after switching group membership; (bso#13418); + Return STATUS_SESSION_EXPIRED error encrypted, if the request was encrypted; (bso#13624); + python: Allow forced signing via smb.SMB(); (bso#13621); + lib:socket: If returning early, set ifaces; (bso#13665); + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8 encoded unicode; (bso#13616); + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute; (bso#13673); + waf: Add -fstack-clash-protection; (bso#13601); + winbind: Fix segfault if an invalid passdb backend is configured; (bso#13668); + Fix bugs in CTDB event handling; (bso#13659); + Misbehaving nodes are sometimes not banned; (bso#13670);- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);- winbind requires latest version of libtevent-util0 to start- Backport latest gpo code from master + Read policy from local gpt cache + Offline policy application + Make group policy extensible via register/unregister gpext + gpext's run via a process_group_policy method- Enable profiling data collection- Change samba-kdc package name to samba-ad-dc - Move samba-ad-dc.service to the samba-ad-dc package- Update to samba-4.9.1 + s3: nmbd: Stop nmbd network announce storm; (bso#13620); + s3-rpcclient: Use spoolss_init_spoolss_UserLevel1 in winspool cmds; (bso#13597); + CTDB recovery lock has some race conditions; (bso#13617); + s3-rpc_client: Advertise Windows 7 client info; (bso#13597); + ctdb-doc: Remove PIDFILE option from ctdbd_wrapper man page; (bso#13610);- Tumbleweed doesn't define the sle_version macro, so we must include a check for suse_version also. Otherwise python3 is disabled on Tumbleweed.- Update to samba-4.9.0 + samba_dnsupdate: Honor 'dns zone scavenging' option, only update if needed; (bso#13605); + wafsamba: Fix 'make -j'; (bso#13606);- Update to samba-4.9.0rc5 + s3: VFS: vfs_full_audit: Ensure smb_fname_str_do_log() only returns absolute pathnames; (bso#13565); + s3: util: Do not take over stderr when there is no log file; (bso#13578); + Durable Reconnect fails because cookie.allow_reconnect is not set; (bso#13549); + krb5-samba: Interdomain trust uses different salt principal; (bso#13539); + vfs_fruit: Don't unlink the main file; (bso#13441); + smbd: Fix a memleak in async search ask sharemode; (bso#13602); + Fix Samba GPO issue when Trust is enabled; (bso#11517); + samba-tool: Add "virtualKerberosSalt" attribute to 'user getpassword/syncpasswords'; (bso#13539); + Fix CTDB configuration issues; (bso#13589); + ctdbd logs an error until it can successfully connect to eventd; (bso#13592);- Update to samba-4.9.0rc4 + s3: smbd: Ensure get_real_filename() copes with empty pathnames; (bso#13585); + samba domain backup online/rename commands force user to specify password on CLI; (bso#13566); + wafsamba/samba_abi: Always hide ABI symbols which must be local; (bso#13579); + Fix a panic if fruit_access_check detects a locking conflict; (bso#13584); + Fix memory and resource leaks; (bso#13567); + python: Fix print in dns_invalid.py; (bso#13580); + Aliasing issue causes incorrect IPv6 checksum; (bso#13588); + Fix CTDB configuration issues; (bso#13589); + s3: vfs: time_audit: fix handling of token_blob in smb_time_audit_offload_read_recv(); (bso#13568);- Add missing zlib-devel dependency which was previously pulled in by libopenssl-devel- Update to samba-4.9.0rc3+git.22.3fff23ae36e + CVE-2018-10858: libsmb: Harden smbc_readdir_internal() against returns from malicious servers; (bso#13453); + CVE-2018-1140: ldbsearch '(distinguishedName=abc)' and DNS query with escapes crashes, ldb: Release LDB 1.3.5 for CVE-2018-1140; (bso#13374); + CVE-2018-10918: cracknames: Fix DoS (NULL pointer de-ref) when not servicePrincipalName is set on a user; (bso#13552); + CVE-2018-10919: acl_read: Fix unauthorized attribute access via searches; (bso#13434); + ctdb_mutex_ceph_rados_helper: Set SIGINT signal handler; (bso#13540); + CVE-2018-1139 libcli/auth: Do not allow ntlmv1 over SMB1 when it is disabled via "ntlm auth"; (bso#13360); + s3-tldap: do not install test_tldap; (bso#13529); + ctdb_mutex_ceph_rados_helper: Fix deadlock via lock renewals; (bso#13540); + CVE-2018-1140 Add NULL check for ldb_dn_get_casefold() in ltdb_index_dn_attr(); (bso#13374); + ctdb-eventd: Fix CID 1438155; (bso#13554); + Fix CIDs 1438243, (Unchecked return value) 1438244 (Unsigned compared against 0), 1438245 (Dereference before null check) and 1438246 (Unchecked return value); (bso#13553); + ctdb: Fix a cut&paste error; (bso#13554); + systemd: Only start smb when network interfaces are up; (bso#13559); + Fix quotas don't work with SMB2; (bso#13553); + s3/smbd: Ensure quota code is only called when quota support detected; (bso#13563); + s3/libsmb: Explicitly set delete_on_close token for rmdir; (bso#13204); + s3:waf: Install eventlogadm to /usr/sbin; (bso#13561); + Shorten description in vfs_linux_xfs_sgid manual; (bso#13562);- Update to samba-4.9.0rc2+git.21.a1069afb007 + s3: smbd: Using "sendfile = yes" with SMB2 can cause CPU spin; (bso#13537); + s3: smbd: Fix path check in smbd_smb2_create_durable_lease_check(); (bso#13535); + samba-tool trust: Support discovery via netr_GetDcName; (bso#13538); + s4-dsdb: Only build dsdb Python modules for AD DC; (bso#13542); + Fix portability issues on freebsd; (bso#13520); + DNS wildcard search does not handle multiple labels correctly; (bso#13536); + samba-tool domain trust: Fix trust compatibility to Windows Server 1709 and FreeIPA; (bso#13308); + Fix portability issues on freebsd; (bso#13520); + ctdb-protocol: Fix CTDB compilation issues; (bso#13545); + ctdb-docs: Replace obsolete reference to CTDB_DEBUG_HUNG_SCRIPT option; (bso#13546); + ctdb-doc: Provide an example script for migrating old configuration; (bso#13550); + ctdb-event: Implement event tool "script list" command; (bso#13551);- Update to samba-4.8.4+git.37.a7a861d7982; + CVE-2018-1139: Weak authentication protocol allowed; (bsc#1095048); (bsc#13360); + CVE-2018-1140: Denial of Service Attack on DNS and LDAP server; (bsc#1095056); (bso#13466); (bso#13374); + CVE-2018-10858: Insufficient input validation on client directory listing in libsmbclient; (bsc#1103411); (bso#13453); + CVE-2018-10918: Denial of Service Attack on AD DC DRSUAPI server; (bsc#1103414); (bso#13552); + CVE-2018-10919: Confidential attribute disclosure from the AD LDAP server; (bsc#1095057); (bso#13434); + s3:winbind: winbind normalize names' doesn't work for users; (bso#12851); + winbind: Fix UPN handling in canonicalize_username(); (bso#13369); + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428); + samdb: Fix building Samba with gcc 8.1; (bso#13437); + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440); + smbd: Flush dfree memcache on service reload; (bso#13446); + ldb: Save a copy of the index result before calling the + lib/util: No Backtrace given by Samba's AD DC by default; (bso#13454). + s3: smbd: printing: Re-implement delete-on-close semantics for print files missing since 3.5.x; (bso#13457). + python: Fix talloc frame use in make_simple_acl(); (bso#13474). + krb5_wrap: Fix keep_old_entries logic for older Kerberos libraries;(bso#13478). + krb5_plugin: Add winbind localauth plugin for MIT Kerberos; (bso#13480).- Add missing package descriptions; (bsc#1093864); - Fix dependency issue between samba-python and samba-kdc; (bsc#1062876); - Call update-apparmor-samba-profile when running samba-ad-dc; (bsc#1092099);- Update to 4.8.2 + After update to 4.8.0 DC failed with "Failed to find our own NTDS Settings objectGUID" (bso#13335). + fix incorrect reporting of stream dos attributes on a directory (bso#13380). + vfs_ceph: add asynchronous fsync; fake synchronous call (bso#13412). + vfs_ceph: add fake async pwrite/pread send/recv hooks; (bso#13425) + vfs_ceph: Fix memory leak; (bso#13424). + libsmbclient: Fix hard-coded connection error return of ETIMEDOUT; (bso#13419). + s4-lsa: Fix use-after-free in LSA server; (bso#13420). + winbindd: Do re-connect if the RPC call fails in the passdb case; (bso#13430). + cleanupd: Sends MSG_SMB_UNLOCK twice to interested peers; (bso#13416). + cleanupd: Use MSG_SMB_BRL_VALIDATE to signal cleanupd unclean process shutdown; (bso#13414). + ctdb-client: Remove ununsed functions from old client code; (bso#13411). + printing: Return the same error code as windows does on upload failures; (bso#13395). + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged pipe is not accessable; (bso#13400). + s4:lsa_lookup: remove TALLOC_FREE(state) after all dcesrv_lsa_Lookup{Names,Sids}_base_map() calls; (bso#13420). + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407). + s3:smbspool: Fix cmdline argument handling; (bso#13417).- Move libdfs-server-ad-samba4.so library from kdc to libs package, as it is required by some client libs; (bsc#1074135); - Update to 4.8.1; (bsc#1091179); + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error, we don't own it here; (bso#13244); + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't support fdopendir(); (bso#13270); + Round-tripping ACL get/set through vfs_fruit will increase the number of ACE entries without limit; (bso#13319); + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit issues; (bso#13347); + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without delete access; (bso#13358); + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372); + s3: smbd: Unix extensions attempts to change wrong field in fchown call; (bso#13375); + ms_schema/samba-tool visualize: Fix python2.6 incompatibility; (bso#13337); + Fix invocation of gnutls_aead_cipher_encrypt(); (bso#13352); + Windows 10 cannot logon on Samba NT4 domain; (bso#13328); + winbindd: Recover loss of netlogon secure channel in case the peer DC is rebooted; (bso#13332); + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363); + ctdb-client: Fix bugs in client code; (bso#13356); + ctdb-scripts: Drop "net serverid wipe" from 50.samba event script; (bso#13359); + s3: lib: messages: Don't use the result of sec_init() before calling sec_init(); (bso#13368); + libads: Fix the build '--without-ads'; (bso#13273); + winbind: Keep "force_reauth" in invalidate_cm_connection, add 'smbcontrol disconnect-dc'; (bso#13332); + vfs_virusfilter: Fix CIDs 1428738-1428740; (bso#13343); + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367); + rpc_server: Fix core dump in dfsgetinfo; (bso#13370); + smbclient: Fix notify; (bso#13382); + Fix smbd panic if the client-supplied channel sequence number wraps; (bso#13215); + Windows 10 cannot logon on Samba NT4 domain; (bso#13328); + lib/util: Remove unused '#include ' from tests/tfork.c; (bso#13342); + Fix build errors with cc from developerstudio 12.5 on Solaris; (bso#13343); + Fix the picky-developer build on FreeBSD 11; (bso#13344); + s3:modules: Fix the build of vfs_aixacl2.c; (bso#13345); + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338); + lib:replace: Fix linking when libtirpc-devel overwrites system headers; (bso#13341); + winbindd: 'wbinfo --name-to-sid' returns misleading result on invalid query; (bso#13312); + s3:passdb: Do not return OK if we don't have pinfo set up; (bso#13376); + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);- Use new foreground execution flags for systemd samba daemons; (bsc#1088574); (bsc#1071090); (bsc#1065551); + Add %post scriptlet to clear old sysconfig flags - Update vendor-files to commit 880b3e7. + Set samba sysconfig template variables to "" + Add required daemon flags directly to systemd unit- Specfile cleanup + Remove %if..%endif guards which don't affect the build + Remove redundant %clean section + Replace old $RPM_* shell vars with macros- BuildRequire pkgconfig(systemd) and pkgconfig(libsystemd) in place of systemd and systemd-devel: Allow OBS to optimize the workload by allowing the usage of the 'build-optimized' systemd packages.- Enable building samba with python3, and create a samba-python3 package.- Update to 4.8 + New GUID Index mode in sam.ldb for the AD DC + GPO support for samba KDC + Time machine support with vfs_fruit + Encrypted secrets + AD Replication visualization + Improved trust support - ability to not scan global trust list - AD external trusts have limited support - verbose trusted domain listing + VirusFilter VFS module + NT4-style replication removed + vfs_aio_linux removed- Disable samba-pidl package, due to the removal of dependency perl-Parse-Yapp; (bsc#1085150);- Update to 4.7.6; + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally; (bso#11343); (bsc#1081741); + CVE-2018-1057: Authenticated users can change other users' password; (bso#13272); (bsc#1081024).- Disable python until full python3 port is done; (bsc#1082139); + Remove contents of package samba-python + Remove contents of package libsamba-policy0 + Remove contents of package libsamba-policy-devel + Remove library libsamba-python-samba4.so from samba-libs package + Remove library libsamba-net-samba4.so from samba-libs package + Remove smbtorture binary and manpage from samba-test- samba fails to build with glibc2.27; (bsc#1081042);- Update to 4.7.5; (bsc#1080545); + smbd tries to release not leased oplock during oplock II downgrade; (bso#13193); + Fix copying file with empty FinderInfo from Windows client to Samba share with fruit; (bso#13181); + build: Deal with recent glibc sunrpc header removal; (bso#10976); + Make Samba work with tirpc and libnsl2; (bso#13238); + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208); (bsc#1075206); + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue; (bso#12986); + ctdb-recovery-helper: Deregister message handler in error paths; (bso#13188); + samba: Only use async signal-safe functions in signal handler; (bso#13240); + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue; (bso#12986); + repl_meta_data: Fix linked attribute corruption on databases with unsorted links on expunge. dbcheck: Add functionality to fix the corrupt database; (bso#13228); + Fix smbd panic when chdir returns error during exit; (bso#13189); + Make Samba work with tirpc and libnsl2; (bso#13238); + Fix POSIX ACL support on HPUX and possibly other big-endian OSs; (bso#13176);- Update to 4.7.4; (bsc#1080545); + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140); + s3: libsmb: Fix valgrind read-after-free error in cli_smb2_close_fnum_recv(); (bso#13171); + s3: libsmb: Fix reversing of oldname/newname paths when creating a reparse point symlink on Windows from smbclient; (bso#13172); + Build man page for vfs_zfsacl.8 with Samba; (bso#12934); + repl_meta_data: Allow delete of an object with dangling backlinks; (bso#13095); + s4:samba: Fix default to be running samba as a deamon; (bso#13129); + Performance regression in DNS server with introduction of DNS wildcard, ldb: Release 1.2.3; (bso#13191); + vfs_zfsacl: Fix compilation error; (bso#6133); + "smb encrypt" setting changes are not fully applied until full smbd restart; (bso#13051); + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052); + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155); + winbindd: Dependency on trusted-domain list in winbindd in critical auth codepath; (bso#13173); + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120); + ctdb: sock_daemon leaks memory; (bso#13153); + TCP tickles not getting synchronised on CTDB restart; (bso#13154); + winbindd: winbind parent and child share a ctdb connection; (bso#13150); + pthreadpool: Fix deadlock; (bso#13170); + pthreadpool: Fix starvation after fork; (bso#13179); + messaging: Always register the unique id; (bso#13180); + s4/smbd: set the process group; (bso#13129); + Fix broken linked attribute handling; (bso#13095); + The KDC on an RWDC doesn't send error replies in some situations; (bso#13132); + libnet_join: Fix 'net rpc oldjoin'; (bso#13149); + g_lock conflict detection broken when processing stale entries; (bso#13195); + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired sessions; (bso#13197); + s3:libads: net ads keytab list fails with "Key table name malformed"; (bso#13166); (bsc#1067700); + Fix crash in pthreadpool thread after failure from pthread_create; (bso#13170); + s4:samba: Allow samba daemon to run in foreground; (bso#13129); (bsc#1065551); + third_party: Link the aesni-intel library with "-z noexecstack"; (bso#13174); + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I" options; (bso#13125);- Re-enable usage of libnsl (did got lost with glibc change) - Use TI-RPC (sunrpc is deprecated and will be removed soon from glibc)- smbc_opendir should not return EEXIST with invalid login credentials; (bnc#1065868).- Update to 4.7.3; (bsc#1069666); + Non-smbd processes using kernel oplocks can hang smbd; (bso#13121); + python: use communicate to fix Popen deadlock; (bso#13127); + smbd on disk file corruption bug under heavy threaded load; (bso#13130); + tevent: version 0.9.34; (bso#13130); + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118); + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug; (bsc#1060427);(bso#13041); + CVE-2017-15275: s3: smbd: Chain code can return uninitialized memory when talloc buffer is grown; (bsc#1063008); (bso#13077); - Build with AD DC support only in openSUSE.- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- samba-tool requires samba-python; (bnc#1067771).- Run all daemons in the foreground and let systemd handle it; (bsc#1065551). - Update to 4.7.1; + Fix exporting subdirs with shadow_copy2; (bso#13091); + Currently if getwd() fails after a chdir(), we panic; (bso#13027); + Ensure default SMB_VFS_GETWD() call can't return a partially completed struct smb_filename; (bso#13068); + sys_getwd() can leak memory or possibly return the wrong errno on older systems; (bso#13069); + smbclient doesn't correctly canonicalize all local names before use; (bso#13093); + Fix broken linked attribute handling; (bso#13095); + Missing LDAP query escapes in DNS rpc server; (bso#12994); + Link to -lbsd when building replace.c by hand; (bso#13087); + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem; (bso#6133); + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module; (bso#7909); + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module; (bso#7933); + Missing assignment in sl_pack_float; (bso#12991); + Wrong Samba access checks when changing DOS attributes; (bso#12995); + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062); + groupmap cleanup should not delete BUILTIN mappings; (bso#13065); + Enabling vfs_fruit results in loss of Finder tags and other xattrs; (bso#13076); + man pages: Properly ident lists; (bso#9613); + smb.conf.5: Sort parameters alphabetically; (bso#13081); + Fix GUID string format on GetPrinter info; (bso#12993); + Remote serverid check doesn't check for the unique id; (bso#13042); + CTDB starts consuming memory if there are dead nodes in the cluster; (bso#13056); + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070); + libgpo doesn't sort the GPOs in the correct order; (bso#13046); + Remote serverid check doesn't check for the unique id; (bso#13042); + vfs_catia: Fix a potential memleak; (bso#13090); + Fix file change notification for renames; (bso#12903); + Samba DNS server does not honour wildcards; (bso#12952); + Can't change password in samba from a Windows client if Samba runs on IPv6 only interface; (bso#13079); + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086); + Apple client can't cope with SMB2 async replies when creating symlinks; (bso#13047); + s4:rpc_server:backupkey: Move variable into scope; (bso#12959); + Fix ntstatus_gen.h generation on 32bit; (bso#13099); + Fix a double free in vfs_gluster_getwd(); (bso#13100); + Fix resouce leaks and pointer issues; (bso#13101); + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);- Add samba-kdc to baselibs.conf. - Do not wrap samba-kdc's package definition into if/endif: the package won't be generated simply based on the fact that there is no files section for the package. Allows the source validator to ensure samba-kdc is a built package.- Update to 4.7.0; + Whole DB read locks: Improved LDAP and replication consistency; (bso#12858). + Samba AD with MIT Kerberos + Dynamic RPC port range: Default range changed from "1024-1300" to "49152-65535". + Authentication and Authorization audit support: New auth_audit debug class. + Multi-process LDAP Server: The LDAP server in the AD DC now honours the process model used for the rest of the 'samba' process. + Improved Read-Only Domain Controller (RODC) Support; (bso#12977). + Additional password hashes stored in supplementalCredentials. + Improvements to DNS during Active Directory domain join. + Significant AD performance and replication improvements. + Query record for open file or directory. + Removal of lpcfg_register_defaults_hook(). + Change of loadable module interface. + SHA256 LDAPS Certificates: The self-signed certificate generated for use on LDAPS will now be generated with a SHA256 self-signature, not a SHA1 self-signature. + CTDB no longer allows mixed minor versions in a cluster. + CTDB now ignores hints from Samba about TDB flags when attaching to databases. + New configuration variable CTDB_NFS_CHECKS_DIR. + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed. + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed. + The example NFS Ganesha call-out has been improved. + A new "replicated" database type is available.- CVE-2017-12163: Prevent client short SMB1 write from writing server memory to file; (bso#13020); (bsc#1058624).- CVE-2017-12150: Some code path don't enforce smb signing, when they should; (bso#12997); (bsc#1058622).- CVE-2017-12151: Keep required encryption across SMB3 dfs redirects; (bso#12996); (bsc#1058565).- Clean specfile assuming SUSE-only system and product >=SLE11 + %{ul_version}, %{rhel_version}, %{mandriva_version}, %{centos_version} are always undefined + %{_vendor} is "suse" and %{suse_version} is at least 1100- Update to 4.6.7; (bsc#1054017) + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392). + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937). + vfs_ceph provides inconsistent directory listings; (bso#12911). + Misused talloc context can cause a user to crash their smbd by chaining SMB1 commands.; (bso#12836). + Use-after free can crash libsmbclient code.; (bso#12927). + Server exit with active AIO can crash.; (bso#12925). + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910). + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs; (bso#12898). + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897). + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for authentication; (bso#12886). + finder sidebar showing question mark instead of icon when using ip to connect with vfs_fruit; (bso#12840). + Winbind stops obtaining the 'unixHomeDirectory' & 'loginShell' attributes from AD.; (bso#12720). + KCC run at selftest startup can fail spuriously due to a race; (bso#12869). + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for the remote change; (bso#12782). + rpc_pipe_client memory leaks due to long term memory context passed to rpc_pipe_open_interface(); (bso#12890). + CVE-2017-2619 breaks accessing previous versions of directories with snapshots in subdirectories of the share; (bso#12885). + dns_name_equal doing OOB read; (bso#12813). + replica_sync tests flap; (bso#12753). + Selftest should not call 'net cache flush' and wipe important winbind entries; (bso#12868). + Old Samba versions don't support using recent ldb versions (>=1.1.30); (bso#12859). + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490). + race starting winbindd against posixacl test; (bso#12843). + Crash in the reentrant smbd_smb2_create_send() if the something fails in the subsequent try; (bso#12832). + spnego.c passes the wrong argument order to gensec_update_ev() for the FALLBACK case; (bso#12788). + Clients with SMB3 support can't connect with "server max protocol = SMB2_02"; (bso#12772). + A log message of samb-tool user syncpasswords reverses string arguments in a debug message "Call Popen[...".; (bso#12768). + The smb tarmode tests kills the share dir contents; (bso#12867). + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862). + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860). + manpage/index.html lists links not in alphabetical order; (bso#12854). + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831). + If a record is locked in a database, then recovery does not complete; (bso#12857). + debug_locks.sh script does not log any information; (bso#12856). + SIGSEGV in cm_connect_lsa_tcp dereferencing conn->lsa_tcp_pipe->transport after error; (bso#12852). + smbclient can't parse DOMAIN+username if a different winbind separator is used; (bso#12849). + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845). + Related requests with TreeConnect fail with NETWORK_NAME_DELETED; (bso#12844). + cli->server_os not filled correctly; (bso#12779). + REGRESSION: smbclient doesn't print the session setup anymore; (bso#12824). + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808). + CTDB NFS call-out failures do not cause event failures; (bso#12837). + net command fails due to incorrectly return code; (bso#12828). + Fix building Samba with GCC 7.1; (bso#12827).- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again; (bsc#1048339).- fix cephwrap_chdir(); (bsc#1048790). - Update to 4.6.6 + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation; (bsc#1048278).- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).- Fix inconsistent ctdb socket path; (bsc#1048352). - Fix non-admin cephx authentication; (bsc#1048387).- Update to 4.6.5; (bsc#1040157) + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at startup; (bso#12814). + vfs_expand_msdfs tries to open the remote address as a file path; (bso#12687). + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type); (bso#12798). + With clustering get update_num_read_oplocks failed and PANIC: num_share_modes == 1 assertion failure; (bso#11844). + contend_level2_oplocks_begin_default oplock optimisation doesn't carry over to leases; (bso#12766). + `ctdb nodestatus` incorrectly displays status for all nodes with wrong exit code; (bso#12802). + CTDB can spin hard on revoking readonly delegations if a node becomes disconnected; (bso#12697). + Printing a share mode entry with leases can crash in the ndr code; (bso#12793). + Fix flakey unit tests for eventd; (bso#12792). + CTDB daemon crashes if built with clang; (bso#12770). + smbcacls fails if no password is specified; (bso#12765). + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757). + samba-tool user syncpasswords doesn't trigger the script when a user gets removed; (bso#12767). + systemd: fix detection of libsystemd; (bso#12764). + Notify subsystem only maps first inotify mask to Windows notify filter; (bso#12760). + Allow passing trusted domain password as plain-text to PASSDB layer; (bso#12751). + Can't case-rename files with vfs_fruit; (bso#12749). + wrong sid->uid mapping for SIDs residing in sIDHistory; (bso#12702). + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562). + Ordering of notify responses broken; (bso#12756).- s3: libsmb: Fix error where short name length was read as 2 bytes, should be 1; (bso#11822); (bsc#1042419).- Revert explicit winbind %{version}-%{release} dependency. + The ABI has stabilized since (bsc#936909), so remove to fix cross-media dependencies; (bsc#1037899).- Fix CVE-2017-7494 remote code execution from a writable share; (bso#12780); (bsc#1038231).- Update to 4.6.3; (bsc#1036011) + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots from shares with GlusterFS backend; (bso#12743). + Fix for Solaris C compiler; (bso#12559). + s3: locking: Update oplock optimization for the leases era; (bso#12628). + Make the Solaris C compiler happy; (bso#12693). + s3: libgpo: Allow skipping GPO objects that don't have the expected LDAP attributes; (bso#12695). + Fix buffer overflow caused by wrong use of getgroups; (bso#12747). + lib: debug: Avoid negative array access; (bso#12746). + cleanupdb: Fix a memory read error; (bso#12748). + streams_xattr and kernel oplocks results in NT_STATUS_NETWORK_BUSY; (bso#7537). + winbindd: idmap_autorid allocates ids for unknown SIDs from other backends; (bso#11961). + vfs_fruit: Resource fork open request with flags=O_CREAT|O_RDONLY; (bso#12565). + manpages/vfs_fruit: Document global options; (bso#12615). + lib/pthreadpool: Fix a memory leak; (bso#12624). + Lookup-domain for well-known SIDs on a DC; (bso#12727). + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728). + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729). + credentials_krb5: use gss_acquire_cred for client-side GSSAPI use case; (bso#12611). + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690). + ctdb-readonly: Avoid a tight loop waiting for revoke to complete; (bso#12697). + ctdb_event monitor command crashes if event is not specified; (bso#12723). + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733). + smbd: Fix smb1 findfirst with DFS; (bso#12558). + smbd: Do an early exit on negprot failure; (bso#12610). + winbindd: Fix substitution for 'template homedir'; (bso#12699). + s4:kdc: Disable principal based autodetected referral detection; (bso#12554). + idmap_autorid: Allocate new domain range if the callers knows the sid is valid; (bso#12613). + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724). + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for trusted domain; (bso#12725). + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731). + winbindd: Fix password policy for pam authentication; (bso#12725). + s3:gse: Correctly handle external trusts with MIT; (bso#12554). + auth/credentials: Always set the realm if we set the principal from the ccache; (bso#12611). + replace: Include sysmacros.h; (bso#12686). + s3:vfs_expand_msdfs: Do not open the remote address as a file; (bso#12687). + s3:libsmb: Only print error message if kerberos use is forced; (bso#12704). + winbindd: Child process crashes when kerberos-authenticating a user with wrong password; (bso#12708). + vfs_fruit: Office document opens as read-only on macOS due to CNID semantics; (bso#12715). + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is fragmented; (bso#12737).- Generate and update vendor-files tarball from Git + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).- Generate source tarball directly from Git using OBS tar_scm + use version string derived from parent Git tag and commit hash - remove obsolete vendor-files/tools/package-data version ID + explicitly generate ctdb manpages, needed without "make dist"- Update to 4.6.2 + remove bso#12721 patches now upstream- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622). + x86-64 and aarch64- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).- Build and install the html man pages (bsc#1021907).- Fix CVE-2017-2619 regression with "follow symlinks = no"; (bso#12721).- Update to 4.6.1 + symlink race permits opening files outside share directory; CVE-2017-2619; (bso#12496); (bsc#1027147) + testparm checks for valid idmap parameters + add new krb client encryption types + support for printer driver upload from windows 10 + inherit owner = 'unix only' for improved quota support + improved CTDB event support + new primary group support for idmap_ad + idmap_hash deprecated + mvxattr added to recursively rename extended attributes- Remove chkconfig requirements for systemd systems- Don't call insserv if systemd is used- Fix check if we need to require insserv- async_req: make async_connect_send() "reentrant"; (bso#12105); (bsc#1024416).- Force usage of ncurses6-config thru NCURSES_CONFIG env var; (bsc#1023847).- add missing patch for libnss_wins segfault; (bsc#995730).- Fix vfs_ceph builds against recent Ceph versions; (bsc#1021933).- Document "winbind: ignore domains" parameter; (bsc#1019416).- Add base Samba dependency to samba-ceph package.- Update to 4.5.3 + Heap-based Buffer Overflow Remote Code Execution Vulnerability; CVE-2016-2123; (bso#12409); (bsc#1014437). + Don't send delegated credentials to all servers; CVE-2016-2125; (bso#12445); (bsc#1014441). + denial of service due to a client triggered crash in the winbindd parent process; CVE-2016-2126; (bso#12446); (bsc#1014442). - 4.5.1 and 4.5.2 updates + various streams vfs fixes + various printing fixes + ntlm_auth: do not map explicitly empty domain + various stability fixes in smbd + match file compression ReFS behavior- Add missing ldb module directory; (bnc#1012092).- s3/client: obey 'disable netbios' smb.conf param, don't connect via NBT port; (bsc#1009085); (bso#12418).- Include vfstest in samba-test; (bsc#1001203).- s3/winbindd: using default domain with user@domain.com format fails; (bsc#997833).- Fix segfault in libnss_wins; (bso#12277); (bso#12269); (bsc#995730).- Update to 4.5.0 + NTLM1 Authentication disabled by default + SMB2.1 leases enabled by default + Support for OFD locks + ctdb tool rewritten + Added shadow copy snapshot prefix parameter- Fix illegal memory access after memory has been deleted; (bso#11836); (bsc#975299).- Prevent core, make sure response->extra_data.data is always cleared out; (bsc#993692).- Don't package man pages for VFS modules that aren't built; (boo#993707).- Fix population of ctdb sysconfig after source merge; (bsc#981566).- Enable vfs_ceph builds for Factory (x86-64) + Package as samba-ceph to avoid Ceph dependency in base package.- Update to 4.4.5 + Prevent client-side SMB2 signing downgrade; CVE-2016-2119; (bso#11860); (bsc#986869).- Remove obsolete syslog.target; (bsc#983938).- Honor smb.conf socket options in winbind; (bsc#975131).- Don't use htons() with IP_PROTO_RAW; (bso#11705); (bsc#969522).- Update to 4.4.4 + SMB3 multichannel: Add implementation of missing channel sequence number verification; (bso#11809). + smbd:close: Only remove kernel share modes if they had been taken at open; (bso#11919). + notifyd: Prevent NULL deref segfault in notifyd_peer_destructor; (bso#11930). + s3:rpcclient: Make '--pw-nt-hash' option work; (bso#10796). + Fix case sensitivity issues over SMB2 or above; (bso#11438). + s3:smbd: Fix anonymous authentication if signing is mandatory. (bso#11910) + Fix NTLM Authentication issue with squid; (bso#11914). + pdb: Fix segfault in pdb_ldap for missing gecos; (bso#11530). + Fix memory leak in share mode locking; (bso#11934).- Update to 4.4.3 + Various post-badlock regressions; (bso#11841); (bso#11850); (bso#11858); (bso#11870); (bso#11872). + Only allow idmap_hash for default idmap config (bso#11786). + smbd: Avoid large reads beyond EOF; (bso#11878). + vfs_acl_common: Avoid setting POSIX ACLs if "ignore system acls" is set; (bso#11806). + libads: Record session expiry for spnego sasl binds; (bso#11852).- Fix NTLMSSP regressions caused by previous CVE fixes; (bso#11849); (bsc#975962); (bsc#979268), (bsc#977669).- Revert shared library packaging to comply with SLPP- Update to 4.4.2 + A man-in-the-middle can downgrade NTLMSSP authentication; CVE-2016-2110; (bso#11688); (bsc#973031). + Domain controller netlogon member computer can be spoofed; CVE-2016-2111; (bso#11749); (bsc#973032). + LDAP conenctions vulnerable to downgrade and MITM attack; CVE-2016-2112; (bso#11644); (bsc#973033). + TLS certificate validation missing; CVE-2016-2113; (bso#11752); (bsc#973034). + Named pipe IPC vulnerable to MITM attacks; CVE-2016-2115; (bso#11756); (bsc#973036). + "Badlock" DCERPC impersonation of authenticated account possible; CVE-2016-2118; (bso#11804); (bsc#971965). + DCERPC server and client vulnerable to DOS and MITM attacks; CVE-2015-5370; (bso#11344); (bsc#936862).- Fix samba.tests.messaging test and prevent potential tdb corruption by removing obsolete now invalid tdb_close call; (bsc#974629).- Obsolete libsmbclient from libsmbclient0 while not providing it; (bsc#972197).- Update to 4.4.0. + Read of uninitialized memory DNS TXT handling; (bso#11128); (bso#11686); CVE-2016-0771. + Getting and setting Windows ACLs on symlinks can change permissions on link target; (bso#11648); CVE-2015-7560. + Sockets with htons(IPPROTO_RAW); (bso#11705); CVE-2015-8543. + s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystem with no ACL support; (bso#10489). + docs: Add example for domain logins to smbspool man page; (bso#11643). + smbd: Show correct disk size for different quota and dfree block sizes; (bso#11681). + docs: Add smbspool_krb5_wrapper manpage; (bso#11690). + winbindd: Return trust parameters when listing trusts; (bso#11691). + ctdb: Do not provide a useless pkgconfig file for ctdb; (bso#11696). + Crypto.Cipher.ARC4 is not available on some platforms, fallback to M2Crypto.RC4.RC4 then; (bso#11699). + s3:utils/smbget: Set default blocksize; (bso#11700). + Streamline 'smbget' options with the rest of the Samba utils; (bso#11700). + s3:clispnego: Fix confusing warning in spnego_gen_krb5_wrap(); (bso#11702). + s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703). + loadparm: Fix memory leak issue; (bso#11708). + lib/tsocket: Work around sockets not supporting FIONREAD; (bso#11714). + s3:vfs:glusterfs: Fix build after quota changes; (bso#11715). + ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ..."; (bso#11719). + lib:socket: Fix CID 1350010: Integer OVERFLOW_BEFORE_WIDEN; (bso#11723). + smbd: Fix CID 1351215 Improper use of negative value; (bso#11724). + smbd: Fix CID 1351216 Dereference null return value; (bso#11725). + s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new file; (bso#11727). + docs: Add manpage for cifsdd; (bso#11730). + param: Fix str_list_v3 to accept ; again; (bso#11732). + lib/socket: Fix improper use of default interface speed; (bso#11734). + lib:socket: Fix CID 1350009: Fix illegal memory accesses (BUFFER_SIZE_WARNING); (bso#11735). + libcli: Fix debug message, print sid string for new_ace trustee; (bso#11738). + Fix installation path of Samba helper binaries; (bso#11739). + Fix memory leak in loadparm; (bso#11740). + tevent: version 0.9.28: Fix memory leak when old signal action restored; (bso#11742). + smbd: Ignore SVHDX create context; (bso#11753). + Fix net join; (bso#11755). + s3:libads: setup the msDS-SupportedEncryptionTypes attribute on ldap_add; (bso#11755). + passdb: Add linefeed to debug message; (bso#11763). + s3:utils/smbget: Fix option parsing; (bso#11767). + libnet: Make Kerberos domain join site-aware; (bso#11769). + Reset TCP Connections during IP failover; (bso#11770). + ldb: Version 1.1.26; (bso#11772). + s3:smbd: Add negprot remote arch detection for OSX; (bso#11773). + vfs_glusterfs: Fix use after free in AIO callback; (bso#11774). + mkdir can return ACCESS_DENIED incorrectly on create race; (bso#11780). + "trustdom_list_done: Got invalid trustdom response" message should be avoided; (bso#11782). + Mismatch between local and remote attribute ids lets replication fail with custom schema; (bso#11783). + Quota is not supported on Solaris 10; (bso#11788). + Talloc: Version 2.1.6; (bso#11789). + smbd: Enable multi-channel if 'server multi channel support = yes' in the config; (bso#11796). + build: Fix build when '--without-quota' specified; (bso#11798). + lib/socket/interfaces: Fix some uninitialied bytes; (bso#11802). + Access based share enum: handle permission set in configuration files; (bso#8093). + See also WHATSNEW.txt from the samba-doc package.- Update to 4.3.6. + Getting and setting Windows ACLs on symlinks can change permissions on link target; CVE-2015-7560; (bso#11648); (bsc#968222). + Fix Out-of-bounds read in internal DNS server; CVE-2016-0771; (bso#11128); (bso#11686); (bsc#968223).- Upgrade on-disk FSRVP server state to new version; (bsc#924519).- Only obsolete but do not provide gplv2/3 package names; (bsc#968973).- Relocate existing lock files to /var/lib/samba/lock; (bsc#968963).- Obsolete no longer existing samba-32bit package; (bsc#967625).- Update to 4.3.5. + s3:utils/smbget: Fix recursive download; (bso#6482). + s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystemi with no ACL support; (bso#10489). + s3:smbd/oplock: Obey kernel oplock setting when releasing oplocks; (bso#11400). + vfs_shadow_copy2: Fix case where snapshots are outside the share; (bso#11580). + smbclient: Query disk usage relative to current directory; (bso#11662). + winbindd: Handle expired sessions correctly; (bso#11670). + smbd: Show correct disk size for different quota and dfree block sizes; (bso#11681). + smbcacls: Fix uninitialized variable; (bso#11682). + s3:smbd: Ignore initial allocation size for directory creation; (bso#11684). + s3-client: Add a KRB5 wrapper for smbspool; (bso#11690). + s3-parm: Clean up defaults when removing global parameters; (bso#11693). + Use M2Crypto.RC4.RC4 on platforms without Crypto.Cipher.ARC4; (bso#11699). + s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703). + ctdb: Remove error messages after kernel security update; CVE-2015-8543; (bso#11705). + loadparm: Fix memory leak issue; (bso#11708). + lib/tsocket: Work around sockets not supporting FIONREAD; (bso#11714). + ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ..."; (bso#11719). + s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new file; (bso#11727). + param: Fix str_list_v3 to accept ";" again; (bso#11732).- Shift samba-client sysconfig data into samba and samba-winbind; (bsc#947361).- Simplify shared library packaging; (bsc#966956).- Enable clustering (CTDB) support; (bsc#966271).- s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703); (bsc#964023).- Add quotes around path of update-apparmor-samba-profile; (bnc#962177).- Remove autoconf build-time requirement.- Update to 4.3.4. + vfs_fruit: Enable POSIX directory rename semantics; (bso#11065). + Crash: Bad talloc magic value - access after free; (bso#11394). + Copying files with vfs_fruit fails when using vfs_streams_xattr without stream prefix and type suffix; (bso#11466). + samba-tool: Fix uncaught exception if no fSMORoleOwner attribute is given; (bso#11613). + Fix a typo in the smb.conf manpage, explanation of idmap config; (bso#11619). + Correctly initialize the list head when keeping a list of primary followed by DFS connections; (bso#11624). + Reduce the memory footprint of empty string options; (bso#11625). + lib/async_req: Do not install async_connect_send_test; (bso#11639). + Fix typos in man vfs_gpfs; (bso#11641). + Make "hide dot files" option work with "store dos attributes = yes"; (bso#11645). + Fix a corner case of the symlink verification; (bso#11647); (bnc#960249). + Do not disable "store dos attributes" on-the-fly; (bso#11649). + Update lastLogon and lastLogonTimestamp; (bso#11659).- Prevent access denied if the share path is "/"; (bso#11647); (bnc#960249).- Update to 4.3.3. + Malicious request can cause Samba LDAP server to hang, spinning using CPU; CVE-2015-3223; (bso#11325); (bnc#958581). + Remote read memory exploit in LDB; CVE-2015-5330; (bso#11599); (bnc#958586). + Insufficient symlink verification (file access outside the share); CVE-2015-5252; (bso#11395); (bnc#958582). + No man in the middle protection when forcing smb encryption on the client side; CVE-2015-5296; (bso#11536); (bnc#958584). + Currently the snapshot browsing is not secure thru windows previous version (shadow_copy2); CVE-2015-5299; (bso#11529); (bnc#958583). + Fix Microsoft MS15-096 to prevent machine accounts from being changed into user accounts; CVE-2015-8467; (bso#11552); (bnc#958585).- Update to 4.3.2. + vfs_gpfs: Re-enable share modes; (bso#11243). + dcerpc.idl: Accept invalid dcerpc_bind_nak pdus; (bso#11327). + s3-smbd: Fix old DOS client doing wildcard delete - gives an attribute type of zero; (bso#11452). + Add libreplace dependency to texpect, fixes a linking error on Solaris; (bso#11511). + s4: Fix linking of 'smbtorture' on Solaris; (bso#11512). + s4:lib/messaging: Use correct path for names.tdb; (bso#11562). + Fix segfault of 'net ads (join|leave) -S INVALID' with nss_wins; (bso#11563). + async_req: Fix non-blocking connect(); (bso#11564). + auth: gensec: Fix a memory leak; (bso#11565). + lib: util: Make non-critical message a warning; (bso#11566). + Fix winbindd crashes with samlogon for trusted domain user; (bso#11569); (bnc#949022). + smbd: Send SMB2 oplock breaks unencrypted; (bso#11570). + ctdb: Open the RO tracking db with perms 0600 instead of 0000; (bso#11577). + s3:smb2_server: Make the logic of SMB2_CANCEL DLIST_REMOVE() clearer; (bso#11581). + s3-smbd: Fix use after issue in smbd_smb2_request_dispatch(); (bso#11581). + manpage: Correct small typo error; (bso#11584). + s3: smbd: If EAs are turned off on a share don't allow an SMB2 create containing them; (bso#11589). + Backport some valgrind fixes from upstream master; (bso#11597). + auth: Consistent handling of well-known alias as primary gid; (bso#11608). + winbind: Fix crash on invalid idmap configs; (bso#11612). + s3: smbd: have_file_open_below() fails to enumerate open files below an open directory handle; (bso#11615). + Changing log level of two entries to DBG_NOTICE; (bso#9912).- Ensure samlogon fallback requests are rerouted after kerberos failure; (bnc#953382); (bnc#953972).- Ensure to link with --as-needed flag by removing SUSE_ASNEEDED=0. - Always use the default optimization even on pre-9.2 systems.- Remove redundant configure options while adding with-relro.- Relocate the lockdir to the /var/lib/samba/lock directory.- Cleanup and enhance the pidl sub package.- Require renamed python-ldb-devel and python-talloc-devel at build-time. - Requires python-ldb and python-talloc from the python subpackage.- Update to 4.3.1. + s3: smbd: Fix our access-based enumeration on "hide unreadable" to match Windows; (bso#10252). + nss_winbind: Fix hang on Solaris on big groups; (bso#10365). + smbd: Fix file name buflen and padding in notify repsonse; (bso#10634). + kerberos: Make sure we only use prompter type when available; winbind: Fix 100% loop; (bso#11038). + source3/lib/msghdr.c: Fix compiling error on Solaris; (bso#11053). + s3:ctdbd_conn: make sure we destroy tevent_fd before closing the socket; (bso#11316). + s3: smbd: Fix mkdir race condition; (bso#11486). + pam_winbind: Fix a segfault if initialization fails; (bso#11502). + s3: dfs: Fix a crash when the dfs targets are disabled; (bso#11509). + s4:lib/messaging: Use 'msg.lock' and 'msg.sock' for messaging related subdirs; (bso#11515). + s3: smbd: Fix opening/creating :stream files on the root share directory; (bso#11522). + lib/param: Fix hiding of FLAG_SYNONYM values; (bso#11526). + net: Fix a crash with 'net ads keytab create'; (bso#11528). + s3: smbd: Fix a crash in unix_convert(); (bso#11535). + s3: smbd: Fix NULL pointer bug introduced by previous 'raw' stream fix (bso#11522); (bso#11535). + vfs_fruit: Return value of ad_pack in vfs_fruit.c; (bso#11543). + vfs_commit: set the fd on open before calling SMB_VFS_FSTAT; (bso#11547). + s3:locking: Initialize lease pointer in share_mode_traverse_fn(); (bso#11549). + s3:smbstatus: Add stream name to share_entry_forall(); (bso#11550). + s3:lib: Validate domain name in lookup_wellknown_name(); (bso#11555). + s3: lsa: lookup_name() logic for unqualified (no DOMAIN component) names is incorrect; (bso#11555).- Fix 100% CPU in winbindd when logging in with "user must change password on next logon"; (bso#11038).- Relocate the tmpfiles.d directory to the client package; (bnc#947552).- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf instead; (bnc#942716).- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).- Package /var/lib/samba/msg with 0755 permissions; (bso#11515); (bnc#945502).- Require to install libfam0-gamin from samba-libs on post-12.1 and pre-13.15 systems; (bnc#945013).- Update to 4.3.0. + Samba "map to guest = Bad uid" doesn't work; (bso#9862). + revert LDAP extended rule 1.2.840.113556.1.4.1941 LDAP_MATCHING_RULE_IN_CHAIN changes; (bso#10493). + No objectClass found in replPropertyMetaData on ordinary objects (non-deleted); (bso#10973). + Stream names with colon don't work with fruit:encoding = native; (bso#11278). + NetApp joined to a Samba/ADDC cannot resolve SIDs; (bso#11291). + tevent_fd needs to be destroyed before closing the fd; (bso#11316). + "force group" with local group not working; (bso#11320). + strsep is not available on Solaris; (bso#11359). + smbtorture does not build when configured --with-system-mitkrb5; (bso#11411). + Build with GPFS support is broken; (bso#11421). + Build broken with --disable-python; (bso#11424). + net share allowedusers crashes; (bso#11426). + nmbd incorrectly matches netbios names as own name; (bso#11427). + Python bindings don't check integer types; (bso#11429). + Python bindings don't check array sizes; (bso#11430). + CTDB's eventscript error handling is broken; (bso#11431). + Fix crash in nested ctdb banning; (bso#11432). + Cannot build ctdbpmda; (bso#11434). + samba-tool uncaught exception error; (bso#11436). + Crash in notify_remove caused by change notify = no; (bso#11444). + Poor SMB3 encryption performance with AES-GCM; (bso#11451). + Poor SMB3 encryption performance with AES-GCM (part1); (bso#11451). + fix recursion problem in rep_strtoll in lib/replace/replace.c; (bso#11455). + --bundled-libraries=!ldb,!pyldb,!pyldb-util doesn't disable ldb build and install; (bso#11458). + xid2sid gives inconsistent results; (bso#11464). + ctdb: Fix the build on FreeBSD 10.1; (bso#11465). + Handling of 0 byte resource fork stream; (bso#11467). + AD samr GetGroupsForUser fails for users with "()" in their name; (bso#11488).- Configure with --bundled-libraries=NONE; (bso#11458).- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).- Remove libiniparser-devel build-time requirement.- Update to 4.2.3. + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780). + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924). + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991). + Logon via MS Remote Desktop hangs; (bso#11061). + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068). + tevent: Add a note to tevent_add_fd(); (bso#11141). + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170). + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217). + smbd: Fix a use-after-free; (bso#11218); (bnc#919309). + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces; (bso#11245). + s3:smb2: Add padding to last command in compound requests; (bso#11277). + Add IPv6 support to ADS client side LDAP connects; (bso#11281). + Add IPv6 support for determining FQDN during ADS join; (bso#11282). + s3: IPv6 enabled DNS connections for ADS client; (bso#11283). + Fix invalid write in ctdb_lock_context_destructor; (bso#11293). + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295). + vfs_fruit: Add option "veto_appledouble"; (bso#11305). + tstream: Make socketpair nonblocking; (bso#11312). + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313). + Group creation: Add msSFU30Name only when --nis-domain was given; (bso#11315). + tevent_fd needs to be destroyed before closing the fd; (bso#11316). + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared"; (bso#11319). + smbd/trans2: Add a useful diagnostic for files with bad encoding; (bso#11323). + Change sharesec output back to previous format; (bso#11324). + Robust mutex support broken in 1.3.5; (bso#11326). + Kerberos auth info3 should contain resource group ids available from pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info exists in PAC; (bso#11328); (bnc#912457). + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329). + tevent: Fix CID 1035381 Unchecked return value; (bso#11330). + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331). + s3: smbd: Use separate flag to track become_root()/unbecome_root() state; (bso#11339). + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342). + pidl: Make the compilation of PIDL producing the same results if the content hasn't change; (bso#11356). + winbindd: Disconnect child process if request is cancelled at main process; (bso#11358). + vfs_fruit: Check offset and length for AFP_AfpInfo read requests; (bso#11363). + docs: Overhaul the description of "smb encrypt" to include SMB3 encryption; (bso#11366). + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server(); (bso#11367). + ncacn_http: Fix GNUism; (bso#11371).- Disable rpath usage; (bnc#902421).- Make the winbind package depend on the matching libwbclient version and vice versa; (bnc#936909).- Backport changes to use resource group sids obtained from pac logon_info; (bso#11328); (bnc#912457).- Order winbind.service Before and Want nss-user-lookup target.- Remove fam-devel build-time dependency for post-6 RHEL systems.- Update to 4.2.2. + s3:smbXsrv: refactor duplicate code into smbXsrv_session_clear_and_logoff(); (bso#11182). + gencache: don't fail gencache_stabilize if there were records to delete; (bso#11260). + s3: libsmbclient: After getting attribute server, ensure main srv pointer is still valid; (bso#11186). + s4: rpc: Refactor dcesrv_alter() function into setup and send steps; (bso#11236). + s3: smbd: Incorrect file size returned in the response of "FILE_SUPERSEDE Create"; (bso#11240). + Mangled names do not work with acl_xattr; (bso#11249). + nmbd rewrites browse.dat when not required; (bso#11254). + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff; (bso#11213). + s3:smbd: Add missing tevent_req_nterror; (bso#11224). + vfs: kernel_flock and named streams; (bso#11243). + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244). + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses are used; (bso#11284). + ctdb: check for talloc_asprintf() failure; (bso#11201). + spoolss: purge the printer name cache on name change; (bso#11210); (bnc#901813). + CTDB statd-callout does not scale; (bso#11204). + vfs_fruit: also map characters below 0x20; (bso#11221). + ctdb: Coverity fix for CID 1291643; (bso#11201). + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225). + Fix terminate connection behavior for asynchronous endpoint with PUSH notification flavors; (bso#11226). + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007). + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201). + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the directory is deleted; (bso#11257). + s3:winbindd: make sure we remove pending io requests before closing client sockets; (bso#11141); (bnc#931854). + Fix panic triggered by smbd_smb2_request_notify_done() -> smbXsrv_session_find_channel() in smbd; (bso#11182). + 'sharesec' output no longer matches input format; (bso#11237). + waf: Fix systemd detection; (bso#11200). + CTDB: Fix portability issues; (bso#11202). + CTDB: Fix some IPv6-related issues; (bso#11203). + CTDB statd-callout does not scale; (bso#11204). + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you enter invalid values; (bso#11234). + libads: record service ticket endtime for sealed ldap connections; (bso#11267). + lib/util: Include DEBUG macro in internal header files before samba_util.h; (bso#11033).- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).- Remove the independently built libraries ldb, talloc, tdn, and tevent and the post-10.3 renamed libsmbclient from baselibs.conf.- Drop redundant doc attribute from man pages.- Update to 4.2.1. + s3:winbind:grent: Don't stop group enumeration when a group has no gid; (bso#8905). + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791). + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with servers that don't send the 2 unused fields; (bso#10016). + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476). + waf: Fix the build on openbsd; (bso#10476). + s3: client: "client use spnego principal = yes" code checks wrong name; (bso#10888). + spoolss: Retrieve published printer GUID if not in registry; (bso#11018). + s3: lib: libsmbclient: If reusing a server struct, check every cli->timout miliseconds if it's still valid before use; (bso#11079). + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125). + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135). + replace: Remove superfluous check for gcrypt header; (bso#11135). + Backport subunit changes; (bso#11137). + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with implementation; (bso#11140). + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143). + talloc: Version 2.1.2; (bso#11144). + Update libwbclient version to 0.12; (bso#11149). + brlock: Use 0 instead of empty initializer list; (bso#11153). + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164). + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169); (bnc#913304). + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev fails in the SMB1 case; (bso#11173). + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174). + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175). + s3: libsmbclient: Add missing talloc stackframe; (bso#11177). + s4-process_model: Do not close random fds while forking; (bso#11180). + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).- Prevent samba package updates from disabling samba kerberos printing.- Add sparse file support for samba; (fate#318424).- Purge printer name cache on spoolss SetPrinter change; (bso#11210); (bnc#901813).- Correctly retain errno from Btrfs snapshot ioctls; (bnc#923374).- Simplify libxslt build requirement and README.SUSE install. - Remove no longer required cleanup steps while populating the build root.- Remove deprecated base_rid example from idmap_rid manpage; (bso#11169); (bnc#913304).- Update to 4.2.0. + smbd: Stop using vfs_Chdir after SMB_VFS_DISCONNECT; (bso#1115). + pam_winbind: fix warn_pwd_expire implementation; (bso#9056). + nsswitch: Fix soname of linux nss_*.so.2 modules; (bso#9299). + Make 'profiles' work again; (bso#9629). + s3:smb2_server: protect against integer wrap with "smb2 max credits = 65535"; (bso#9702). + Make validate_ldb of String(Generalized-Time) accept millisecond format ".000Z"; (bso#9810). + Use -R linker flag on Solaris, not -rpath; (bso#10112). + vfs: Add glusterfs manpage; (bso#10240). + Make 'smbclient' use cached creds; (bso#10279). + pdb: Fix build issues with shared modules; (bso#10355). + s4-dns: Add support for BIND 9.10; (bso#10620). + idmap: Return the correct id type to *id_to_sid methods; (bso#10720). + printing/cups: Pack requested-attributes with IPP_TAG_KEYWORD; (bso#10808). + Don't build vfs_snapper on FreeBSD; (bso#10834). + nss_winbind: Add getgroupmembership for FreeBSD; (bso#10835). + idmap_rfc2307: Fix a crash after connection problem to DC; (bso#10837). + s3: smb2cli: query info return length check was reversed; (bso#10848). + s3: lib, s3: modules: Fix compilation on Solaris; (bso#10849). + lib: uid_wrapper: Fix setgroups and syscall detection on a system without native uid_wrapper library; (bso#10851). + winbind3: Fix pwent variable substitution; (bso#10852). + Improve samba-regedit; (bso#10859). + registry: Don't leave dangling transactions; (bso#10860). + Fix build of socket_wrapper on systems without SO_PROTOCOL; (bso#10861). + build: Do not install 'texpect' binary anymore; (bso#10862). + Fix testparm to show hidden share defaults; (bso#10864). + libcli/smb: Fix smb2cli_validate_negotiate_info with min=PROTOCOL_NT1 max=PROTOCOL_SMB2_02; (bso#10866). + Integrate CTDB into top-level Samba build; (bso#10892). + samba-tool group add: Add option '--nis-domain' and '--gid'; (bso#10895). + s3-nmbd: Fix netbios name truncation; (bso#10896). + spoolss: Fix handling of bad EnumJobs levels; (bso#10898). + Fix smbclient loops doing a directory listing against Mac OS X 10 server with a non-wildcard path; (bso#10904). + Fix print job enumeration; (bso#10905); (bnc#898031). + samba-tool: Create NIS enabled users and unixHomeDirectory attribute; (bso#10909). + Add support for SMB2 leases; (bso#10911). + btrfs: Don't leak opened directory handle; (bso#10918). + s3: nmbd: Ensure NetBIOS names are only 15 characters stored; (bso#10920). + s3:smbd: Fix file corruption using "write cache size != 0"; (bso#10921). + pdb_tdb: Fix a TALLOC/SAFE_FREE mixup; (bso#10932). + s3-keytab: fix keytab array NULL termination; (bso#10933). + s3:passdb: fix logic in pdb_set_pw_history(); (bso#10940). + Cleanup add_string_to_array and usage; (bso#10942). + dbwrap_ctdb: Pass on mutex flags to tdb_open; (bso#10942). + Fix RootDSE search with extended dn control; (bso#10949). + Fix 'samba-tool dns serverinfo ' for IPv6; (bso#10952). + libcli/smb: only force signing of smb2 session setups when binding a new session; (bso#10958). + s3-smbclient: Return success if we listed the shares; (bso#10960). + s3-smbstatus: Fix exit code of profile output; (bso#10961). + socket_wrapper: Add missing prototype check for eventfd; (bso#10965). + libcli: SMB2: Pure SMB2-only negprot fix to make us behave as a Windows client does; (bso#10966). + vfs_streams_xattr: Check stream type; (bso#10971). + s3: smbd: Fix *allocate* calls to follow POSIX error return convention; (bso#10982). + vfs_fruit: Add support for AAPL; (bso#10983). + Fix spoolss IDL response marshalling when returning error without clearing info; (bso#10984). + dsdb-samldb: Check for extended access rights before we allow changes to userAccountControl; (bso#10993); CVE-2014-8143; (boo#914279). + Fix IPv6 support in CTDB; (bso#10996). + ctdb-daemon: Use correct tdb flags when enabling robust mutex support; (bso#11000). + vfs_streams_xattr: Add missing call to SMB_VFS_NEXT_CONNECT; (bso#11005). + s3-util: Fix authentication with long hostnames; (bso#11008). + ctdb-build: Fix build without xsltproc; (bso#11014). + packaging: Include CTDB man pages in the tarball; (bso#11014). + pdb_get_trusteddom_pw() fails with non valid UTF16 random passwords; (bso#11016). + Make Sharepoint search show user documents; (bso#11022). + nss_wrapper: check for nss.h; (bso#11026). + Enable mutexes in gencache_notrans.tdb; (bso#11032). + tdb_wrap: Make mutexes easier to use; (bso#11032). + lib/util: Avoid collision which alread defined consumer DEBUG macro; (bso#11033). + winbind: Retry after SESSION_EXPIRED error in ping-dc; (bso#11034). + s3-libads: Fix a possible segfault in kerberos_fetch_pac(); (bso#11037). + vfs_fruit: Fix base_fsp name conversion; (bso#11039). + vfs_fruit: mmap under FreeBSD needs PROT_READ; (bso#11040). + Fix authentication using Kerberos (not AD); (bso#11044). + net: Fix sam addgroupmem; (bso#11051). + vfs_snapper: Correctly handles multi-byte DBus strings; (bso#11055); (bnc#913238). + cli_connect_nb_send: Don't segfault on host == NULL; (bso#11058). + utils: Fix 'net time' segfault; (bso#11058). + libsmb: Provide authinfo domain for encrypted session referrals; (bso#11059). + s3-pam_smbpass: Fix memory leak in pam_sm_authenticate(); (bso#11066). + vfs_glusterfs: Add comments to the pipe(2) code; (bso#11069). + vfs/glusterfs: Change xattr key to match gluster key; (bso#11069). + vfs_glusterfs: Implement AIO support; (bso#11069). + s3-vfs: Fix developer build of vfs_ceph module; (bso#11070). + s3: netlogon: Ensure we don't call talloc_free on an uninitialized pointer; (bso#11077); CVE-2015-0240; (bnc#917376). + vfs: Add a brief vfs_ceph manpage; (bso#11088). + s3: smbclient: Allinfo leaves the file handle open; (bso#11094). + Fix Win8.1 Credentials Manager issue after KB2992611 on Samba domain; (bso#11097). + debug: Set close-on-exec for the main log file FD; (bso#11100). + s3: smbd: leases - losen paranoia check. Stat opens can grant leases; (bso#11102). + s3: smbd: SMB2 close. If a file has delete on close, store the return info before deleting; (bso#11104). + doc:man:vfs_glusterfs: improve the configuration section; (bso#11117). + snprintf: Try to support %j; (bso#11119). + ctdb-io: Do not use sys_write to write to client sockets; (bso#11124). + doc-xml: Add 'sharesec' reference to 'access based share enum'; (bso#11127).- Update to 4.2.0rc5. + Ensure we don't call talloc_free on an uninitialized pointer; CVE-2015-0240; (bso#11077); (bnc#917376).- Fix usage of freed memory on server exit; (bso#11218); (bnc#919309).- Fix tdb_store_flag_to_ntdb() gcc5 build failure.- Fix vfs_snapper DBus string handling; (bso#11055); (bnc#913238).- Update to 4.1.16. + dsdb-samldb: Check for extended access rights before we allow changes to userAccountControl; (bso#10993); CVE-2014-8143; (boo#914279).- Adjust baselibs.conf due to libpdb0 package rename to libsamba-passdb0.- Fix libsmbclient DFS referral handling. + Reuse connections derived from DFS referrals; (bso#10123); (fate#316512). + Set domain/workgroup based on authentication callback value; (bso#11059).- Update to 4.2.0rc4. - Add libsamba-debug, libsocket-blocking, libsamba-cluster-support, and libhttp to the libs package; (boo#913547). - Rename libpdb packages to libsamba-passdb. - Drop libsmbsharemodes packages.- Enable avahi support on post-12.2 systems.- Update to 4.1.15. + pam_winbind: Fix warn_pwd_expire implementation; (bso#9056). + nsswitch: Fix soname of linux nss_*.so.2 modules; (bso#9299). + Fix profiles tool; (bso#9629). + s3-lib: Do not require a password with --use-ccache; (bso#10279). + s4:dsdb/rootdse: Expand extended dn values with the AS_SYSTEM control; (bso#10949). + s4-rpc: dnsserver: Fix enumeration of IPv4 and IPv6 addresses; (bso#10952). + s3:smb2_server: Allow reauthentication without signing; (bso#10958). + s3-smbclient: Return success if we listed the shares; (bso#10960). + s3-smbstatus: Fix exit code of profile output; (bso#10961). + libcli: SMB2: Pure SMB2-only negprot fix to make us behave as a Windows client does; (bso#10966). + s3: smbd/modules: Fix *allocate* calls to follow POSIX error return convention; (bso#10982). + Fix 'domain join' by adding 'drsuapi.DsBindInfoFallBack' attribute 'supported_extensions'; (bso#11006). + idl:drsuapi: Manage all possible lengths of drsuapi_DsBindInfo; (bso#11006). + winbind: Retry LogonControl RPC in ping-dc after session expiration; (bso#11034).- yast2-samba-client should be able to specify osName and osVer on AD domain join; (bnc#873922).- Lookup FSRVP share snums at runtime rather than storing them persistently; (bnc#908627).- Specify soft dependency for network-online.target in Winbind systemd service file; (bnc#889175).- Fix spoolss error response marshalling; (bso#10984).- Update to 4.1.14. + pidl/wscript: Remove --with-perl-* options; revert buildtools/wafadmin/ Tools/perl.py back to upstream state; (bso#10472). + s4-dns: Add support for BIND 9.10; (bso#10620). + nmbd fails to accept "--piddir" option; (bso#10711). + nss_winbind: Add getgroupmembership for FreeBSD; (bso#10835). + S3: source3/smbd/process.c::srv_send_smb() returns true on the error path; (bso#10880). + vfs_glusterfs: Remove "integer fd" code and store the glfs pointers; (bso#10889). + s3-nmbd: Fix netbios name truncation; (bso#10896). + spoolss: Fix handling of bad EnumJobs levels; (bso#10898). + s3: libsmbclient-smb2. MacOSX 10 SMB2 server doesn't set STATUS_NO_MORE_FILES when handed a non-wildcard path; (bso#10904). + spoolss: Fix jobid in level 3 EnumJobs response; (bso#10905). + s3: nmbd: Ensure NetBIOS names are only 15 characters stored; (bso#10920). + s3:smbd: Fix file corruption using "write cache size != 0"; (bso#10921). + pdb_tdb: Fix a TALLOC/SAFE_FREE mixup; (bso#10932). + s3-keytab: Fix keytab array NULL termination; (bso#10933). + Cleanup add_string_to_array and usage; (bso#10942).- Remove and cleanup shares and registry state associated with externally deleted snaphots exposed as shadow copies; (bnc#876312).- Use the upstream tar ball, as signature verification is now able to handle compressed archives.- Fix leak when closing file descriptor returned from dirfd; (bso#10918).- Fix spoolss EnumJobs and GetJob responses; (bso#10905); (bnc#898031). + Fix handling of bad EnumJobs levels; (bso#10898).- Remove dependency on gpg-offline as signature checking is implemented in the source validator.- Update to 4.1.13. + s3-libnet: Add libnet_join_get_machine_spns(); (bso#9984). + s3-libnet: Make sure we do not overwrite precreated SPNs; (bso#9984). + s3-libads: Add all machine account principals to the keytab; (bso#9985). + s3: winbindd: Old NT Domain code sets struct winbind_domain->alt_name to be NULL. Ensure this is safe with modern AD-DCs; (bso#10717). + Fix unstrcpy; (bso#10735). + pthreadpool: Slightly serialize jobs; (bso#10779). + s3: smbd: streams - Ensure share mode validation ignores internal opens (op_mid == 0); (bso#10797). + s3: smbd:open_file: Open logic fix; Use a more natural check; (bso#10809). + vfs_media_harmony: Fix a crash bug; (bso#10813). + docs: Mention incompatibility between kernel oplocks and streams_xattr; (bso#10814). + nmbd: Send waiting status to systemd; (bso#10816). + libcli: Fix a segfault calling smbXcli_req_set_pending() on NULL; (bso#10817). + nsswitch: Skip groups we were not able to map; (bso#10824). + s3-winbindd: Use correct realm for trusted domains in idmap child; (bso#10826). + s3: nmbd: Ensure the main nmbd process doesn't create zombies; (bso#10830). + s3: lib: Signal handling - ensure smbrun and change password code save and restore existing SIGCHLD handlers; (bso#10831). + idmap_rfc2307: Fix a crash after connection problem to DC; (bso#10837). + s3-winbindd: Do not use domain SID from LookupSids for Sids2UnixIDs call; (bso#10838). + s3: smb2cli: Query info return length check was reversed; (bso#10848). + registry: Don't leave dangling transactions; (bso#10860).- Update to 4.2.0rc2./bin/shlibdcerpc-binding0-32bitlibdcerpc0-32bitlibndr-krb5pac0-32bitlibndr-nbt0-32bitlibndr-standard0-32bitlibndr0-32bitlibndr1-32bitlibndr2-32bitlibnetapi0-32bitlibsamba-credentials0-32bitlibsamba-credentials1-32bitlibsamba-errors0-32bitlibsamba-hostconfig0-32bitlibsamba-passdb0-32bitlibsamba-util0-32bitlibsamdb0-32bitlibsmbclient0-32bitlibsmbconf0-32bitlibsmbldap0-32bitlibsmbldap2-32bitlibtevent-util0-32bitlibwbclient0-32bit  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuv4.17.12+git.485.dd39ea0501e4.17.12+git.485.dd39ea0501e4.17.12+git.485.dd39ea0501e4.17.12+git.485.dd39ea0501e4.17.12+git.485.dd39ea0501e4.17.12+git.485.dd39ea0501e4.17.12+git.485.dd39ea0501e4.17.12+git.485.dd39ea0501e4.17.12+git.485.dd39ea0501e4.17.12+git.485.dd39ea0501e4.17.12+git.485.dd39ea0501e4.17.12+git.485.dd39ea0501e4.17.12+git.485.dd39ea0501e4.17.12+git.485.dd39ea0501e4.17.12+git.485.dd39ea0501e4.17.12+git.485.dd39ea0501e4.17.12+git.485.dd39ea0501e4.17.12+git.485.dd39ea0501e4.17.12+git.485.dd39ea0501e-150500.3.26.54.17.12+git.485.dd39ea0501e-150500.3.26.54.17.12+git.485.dd39ea0501e4.17.12+git.485.dd39ea0501e4.17.12+git.485.dd39ea0501e4.17.12+git.485.dd39ea0501e4.17.12+git.485.dd39ea0501e4.17.12+git.485.dd39ea0501e4.17.12+git.485.dd39ea0501e4.17.12+git.485.dd39ea0501e4.17.12+git.485.dd39ea0501e4.17.12+git.485.dd39ea0501e4.17.12+git.485.dd39ea0501e4.17.12+git.485.dd39ea0501e4.17.12+git.485.dd39ea0501e4.17.12+git.485.dd39ea0501e4.17.12+git.485.dd39ea0501e4.17.12+git.485.dd39ea0501e4.17.12+git.485.dd39ea0501e4.17.12+git.485.dd39ea0501e4.17.12+git.485.dd39ea0501e4.17.12+git.485.dd39ea0501e4.17.12+git.485.dd39ea0501e4.17.12+git.485.dd39ea0501elibdcerpc-binding.so.0libdcerpc-binding.so.0.0.1libdcerpc-server-core.so.0libdcerpc-server-core.so.0.0.1libdcerpc.so.0libdcerpc.so.0.0.1libndr-krb5pac.so.0libndr-krb5pac.so.0.0.1libndr-nbt.so.0libndr-nbt.so.0.0.1libndr-standard.so.0libndr-standard.so.0.0.1libndr.so.3libndr.so.3.0.0libnetapi.so.1libnetapi.so.1.0.0libsamba-credentials.so.1libsamba-credentials.so.1.0.0libsamba-errors.so.1libsamba-errors.so.1.0.0libsamba-hostconfig.so.0libsamba-hostconfig.so.0.0.1libsamba-passdb.so.0libsamba-passdb.so.0.28.0libsamba-util.so.0libsamba-util.so.0.0.1libsamdb.so.0libsamdb.so.0.0.1libsmbclient.so.0libsmbclient.so.0.7.0libsmbconf.so.0libsmbconf.so.0.0.1libsmbldap.so.2libsmbldap.so.2.1.0libtevent-util.so.0libtevent-util.so.0.0.1libwbclient.so.0libwbclient.so.0.15sambalibCHARSET3-samba4.solibMESSAGING-SEND-samba4.solibMESSAGING-samba4.solibaddns-samba4.solibads-samba4.solibasn1util-samba4.solibauth-samba4.solibauthkrb5-samba4.solibcli-cldap-samba4.solibcli-ldap-common-samba4.solibcli-ldap-samba4.solibcli-nbt-samba4.solibcli-smb-common-samba4.solibcli-spoolss-samba4.solibcliauth-samba4.solibclidns-samba4.solibcluster-samba4.solibcmdline-contexts-samba4.solibcmdline-samba4.solibcommon-auth-samba4.solibdbwrap-samba4.solibdcerpc-pkt-auth-samba4.solibdcerpc-samba-samba4.solibdcerpc-samba4.solibevents-samba4.solibflag-mapping-samba4.solibgenrand-samba4.solibgensec-samba4.solibgpo-samba4.solibgse-samba4.solibhttp-samba4.solibinterfaces-samba4.solibiov-buf-samba4.solibkrb5samba-samba4.solibldbsamba-samba4.soliblibcli-lsa3-samba4.soliblibcli-netlogon3-samba4.soliblibsmb-samba4.solibmessages-dgm-samba4.solibmessages-util-samba4.solibmscat-samba4.solibmsghdr-samba4.solibmsrpc3-samba4.solibndr-samba-samba4.solibndr-samba4.solibnet-keytab-samba4.solibnetif-samba4.solibnpa-tstream-samba4.solibprinting-migrate-samba4.solibregistry-samba4.solibreplace-samba4.solibsamba-cluster-support-samba4.solibsamba-debug-samba4.solibsamba-modules-samba4.solibsamba-security-samba4.solibsamba-sockets-samba4.solibsamba3-util-samba4.solibsamdb-common-samba4.solibsecrets3-samba4.solibserver-id-db-samba4.solibserver-role-samba4.solibsmb-transport-samba4.solibsmbclient-raw-samba4.solibsmbd-base-samba4.solibsmbd-shim-samba4.solibsmbldaphelper-samba4.solibsocket-blocking-samba4.solibsys-rw-samba4.solibtalloc-report-printf-samba4.solibtdb-wrap-samba4.solibtime-basic-samba4.solibtrusts-util-samba4.solibutil-reg-samba4.solibutil-setid-samba4.solibutil-tdb-samba4.sopdbldapsam.sosmbpasswd.sotdbsam.so/usr/lib//usr/lib/samba//usr/lib/samba/pdb/-fomit-frame-pointer -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:36266/SUSE_SLE-15-SP5_Update/973d9dd70e3364b1a8a58b8bc93f5a72-samba.SUSE_SLE-15-SP5_Updatedrpmxz5x86_64-suse-linux  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=e0cea6e7ea1acd92d4a7df7016252b72b618ad16, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=d1404085f799b6d5d8086572d34014672d8e792b, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=df3828432e838efac87435fcbc567807c0a787b8, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=c374f516741340e903b79c79f3b2e4a4296778b9, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=131747f3b0aa12cc7711ec3afcae859d7690710b, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=9e1b820ceb5a58d85c94329623803f871631f0d8, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=14d594abd4b22bf0f20c02e1eac12bc990c26d1f, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=b1a2d6124f49a465b94850011158f4ecb913aeae, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=911ea648585d0353f5887686aee6e8ea054c06de, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=e55699a16892ad37d33d5c59d635d5bbc07e35da, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=fd4882359de4394412ae3d7b33a970428a70d372, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=3a6e39507a471af24044be7cd264314a1d0ffd11, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=0a90576d972d30558a363523a391c036221471f7, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=af3b6d31a826cc5b895f91f36a5278d7bcb57d09, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=ecf5bd3edf6626f005f2055dfa7d92f889504b6b, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=973bb552845c134765a2ba5d8f8b893815ce9c4f, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=92af4e89b980b4131e12fbbf93f0c362384a3ed2, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=e0c91e811660c51008ed0cb37c614b836f2feb17, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=bd8307ede44fa50737001ed951f7f5f742631baa, strippeddirectoryELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=d35f663adab20a5c1c053ca29ca1d04f806f2eb9, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=0b15d20cadd89f738571e129973fc45b9c056524, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=3afaafdc32f0657ca7c88c5aadf3955ccd321df9, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=4ab443ffcf56c378551b582ede4c7e9e0a9eeeae, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=005311d30bbdd9db03e134d9b001975e9db536ba, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=010f4021dd7f37f776465f2a8d0e137340d27c15, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=9d2cf4a20ee3b4e485794260d8687cfeef9a2fda, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=ce4d57cb9edf3850065d06fdea0bd33de3aeeb79, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=acc3685fac18b16af73fbde690cfbf8859181a61, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=768918c04344e950931008a9ca712bb7c250bc12, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=4ba4c5f8a2077ec6f6dcde4d0560cd2ed033887b, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=66730bcea5aa65ddf390d800db0ce6cde6039899, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=7fac31b2ff4492f818713e56f8572b2172826b77, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=bd17148c4c8ae6b5e007c249e3b6140a25fb41f8, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=d7d71861e9358dc3ca77e196b4e898ab4937aae0, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=178cd4245c6f545c6cf032d8b14a7e1778ea506b, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=3058556eec4406618ca67ff7c09d73cab96d398f, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=a36977b676f18d5f5a63a46d3a86946dd0b67e66, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=40b774deaddee809571b6a087e2da66a1883939e, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=77d1670183ccd901755bcafd7af71f893b706ebe, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=8eadd98bbb00d9f84a0e9efd7a1fc70374538b62, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=47539eb1d6cd9e01efd218ea2a5cf10e0bef0f97, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=9396ff4428d7228aeaaaa4bf3667fdf6df52e0e6, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=d5489e3c61e3a0f170308593b46c0c276e0999c6, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=e9e3c0b8490a5252339e7dc9cb9bf288f92b244d, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=a2586597be8cc4991107ec1d6dafb012caf4eb08, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=8a640ddd94de23df1fa63cb7f0c367f27a41b344, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=a5663a86c9dafce9c61b64b4f14c94c2ad15e77b, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=b01ce2fe16237da6e0795e5fafedb5d7a5ad93ad, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=8d7f03210d7842c44079799c44d37eedb3938d5e, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=6893de55f402d07f5f29af6d554325451959fb53, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=1a5607e2212db2d8bda28180164ec09378044161, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=f089c3d879c0b06010d64c5ce50439d9ee15420e, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=77dce7a3ceef7114e3e7ce3dcd1e786af1a692b6, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=b1f12e037df4bb2ee29654099d29de0d29dadc0a, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=8d2dc909646f17e94fbe4bc635ff2bf94ba61581, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=0c0810d116330c560b767006e0df3d1139ad45d2, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=ca0dfac50fd17307c570a5f0adbc35b4eed112d2, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=12d3c63a517ffb191e6ee20bc152c383082ea51a, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=1c620b32505eb098d41e576b6fe43f67824fcb44, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=ce3d42781a098f682b540cf4f0f5f9f2a159b740, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=bb1ea9e9d6c6e31ba26759d5e1f1914505cbe489, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=bda85115dcfe781fa710b0ff5cb12cdc280175f3, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=ec7c8fd06a945219ba9b3f6434997609ff90697e, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=fe1755316d7a5039c219ccc6dc9900155daef994, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=08b87b32ae2d8362a648f15a1e78819326a7ea1f, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=504251b26ae3d55a0446a8f29dfbb4da3391fa9b, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=8c8be0abca51690276c25f6f9efb3e6eae1b9ed2, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=c8bbc68d61d15a9aa1b6eb786335255b5df40a00, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=f9dac02b67ffcd698e1f6bd912f866d2e3d56efe, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=9176dfc76acfedd4bf081a7fc18742f3b9a63500, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=4ec4065c8b6b13b7a4e96b31da945614cf5830e0, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=52882b70d3c186c7b2986bbf002ba5d02bd73b8f, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=a5c1bd928a52318374a3b1c5c14041f2cb7e56b2, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=ce21dd1d820e4b6856001c91d0fc031eaef62a7f, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=c37f97de7017e974885f250fc70dcf17e0dfb240, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=2e8ac7d975d5cb7cbfd22f707d023810a0e4a27f, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=f3cb5a27a4a217761ed64b8f61046204306bfd2f, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=f72a0bc23d2662a71797b1bd521fb958bf122a6d, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=843d1d5e94585943eeac8a3c0a82947b481e50bb, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=96ebfe38284a46b5b56faa44b65da4afbad7b27a, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=c0a5bee5f5d38f7b7dfd7a91051fa95d5785763b, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=3e3686a17d17294c740046948070f17c37047890, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=85288c3ed1a78691122145dddd82dd25e9ea485d, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=4853d08a0d58c24e36bcb8b09380dd1d16aeeb72, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=0412099a551f5f00620a871b6df29a40342b2108, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=eb8eb3d007716872116338d3d204ffdd30f77ed9, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=59300e0b90b3f8b2bb07988e8097d7397a35c9be, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=fe11a9d8e6fcab79964d29f29a7ae1bc7a3d1bfb, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=08a670acd0620cd9b6b3af339e31cb7bf13e9576, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=aaea08704f1f279c0eec4d5b536d18d1b1a8352f, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=2ff067998a9a0fb0de76127b68d6ea59ca2a631d, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=8a2f4ec97292eee6b891b618a5b91ce6da624f7e, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=c5d2716b9849292a1b27e480d7b87f7442e33538, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=393af77774e27bb9904b904f802deab0129550c5, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=94f62f0a800c5d25440c57eb0ee7fc87b6d0a5df, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=2b4efdcb18e37daab522ea1f26997fa6b66b307c, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=7bf1e6d25364a57ce3874d0f1918226f23cbc3d8, stripped$NJ}L%5LZn W?`!6HPVd/?F^)/CJ  E s z  D v ] b ~ )$*C7F3 H+3Ok,#>K+&5.!' !>+A!2!<)J!"%."621   '#P+P*RRSRRRRRRR RR,R-RR)RR(RRRRRRRRRRRRRRRRRRRP4P3RRRSRNRRR RRR(R)RRHRRRFRRRRURRRRRGRERRRRTRRRRRRRRRMRRP6P5RRR;RR3RRRRRRRJRRRRRRSRR`RRR RR/RUR7RRRHR-R)RRRFRRRGRERRRRR6RRRR:RRRR_RTRIRR.RRRRRR2RRRRP_P^RR)RRRRRRRRRRRRRRPbPaRRRR%RR)RR(RRRRRRRRRRPiPhRRRR)RRRRRRRRRRRRRRRRPlPmPmPnPnPoPoPpPpPqPqPrPrPsPsPtPtPuPuPvPvPwPwPxPxPyPyPzPzP{P{P|P|P}P}P~PkRRSRRR-RR)RR(RRRRRRRRRRPPR7R}RR{RRRRWRYRQRRR;RRRR\RRRRRSRRRRRRJR(R)RRRRRRRRR|RRRR RRRRIRRRR:RzRRPRR~R RR[RRRRRR6RRRVRPPRRRRWRRRSRyRRDR;RR^RnRjRRR)R(RRRRRRRhRRRxRCRRRRiRRRRR:RRRRRgR@RR]RVRmRPPRRRRR)R(RRRPPRRRSRRRRRRWRRRR)R%R,R(RRRRRRRRRRRRVRPPPPPPPPPPPPPPPPPRRRRRSRRRR;RRDRRRRRRR(R)R-RRRRRRRRRRRRRRRR:RRRRCRRRRRRRRRRRRRRRRPPR RR RNRRRRRRSRRWRRRRRR)R$R%R-R&R R,RR(RRRRRRR RRRRRRMRVRRPPRR;R^RRSRRDR1RRRR(R)RRR?RRjRRyRnRRRhRRRRRxRRRiRRRRRR0R:RCRRRR>RgRR]RmRRPPPPPPPPPPPPPPPPPPPPPPPPPRR{RRR\RJRRRRRR RRRRRSRR-R)R,R(RRRRR7RRRRR~RzRRRRRRR[R6RIRRRRRRRRRRRRRPPRR RRRRNRRRbRRRRRRdRRRRRRRRRRRDRRRRRRRRRRRRRRRR RRSRRRRRRR!R'R$R-R%R)R"R(R*R R,RRRRRRRRRRRRCRRRRRRRcRRRaRRRRRRRRR RRRRRRlRRRRRkRMRRPPPPPPPRRRR RRRRRR)RRSRRRRRRRRRlRkRRRPPRR R R RR)RR(RRR RRRPPPPPPPPPPPPPRNR R$R,RR)R(RRMRPPRRSRRR)RRRRRRRRPPRRRRSRRRRRR)RRRRRRRRRPPRRRRSRRRFRRRRRRRR RR)RRRRRRRRRRRRRRRERRRRRRRRRRRPPRRRRRSRRRR R=RRRR^RR)RRR(R%RRRRRBRR RRRjRSRRRR RWRRR^RRR)R(RRRR;RRRRRRRRRRRRRRRRRRRRRR:RRARiRR RRRR@RRR]RVRRPAP@RRRR\RRRRRRRRRR)R(R RRRRRRRRRRRR RRRRR~RRR[RRRRRPCPBRRRRSRRR R5RRRR R/R^RRRURRRRR)R RR-R(R,RRRRRjRRhRRRRRiR RRRRTRR.RRRRRRRRRR4RlRRgR@RRR]RPEPDRRRRRR RR=RRRR)RR,RRRRURTR.>=o\t=˄zlӏualPK w?Tyo-D G;iUf+NOPP={ ViUA}nyv}[O%9@V(>9ޯ&Dµ^ftecЙ5na:W$$'AE&p4MbO 7>XSL;ԄxcS$Xwo/}hpq |?l".{zd#pu! 5h@g^9a:H"%\Pl- =]&c1P#Hrę 0cAK\?}oƇ~drsQ,"D*:"`S״1 $jkʡtd[y:y RQnH bI,Kp{^M8_07<9O4ųMRJ$#qO jMI\9v}F{ Bs*}Ssy֙nPW(a&RUˌ2Y37{Ԭ-{*Q)vqa:+AW$O~nU(t/RWr-$R3dD0J.|ƫ ,`\c긪3CJ vO'yC`!_Dց:s_57 !A46{zɾ4<()K\jؐ"(| ,jX7F.2Tօx' EEl|h3VB'WL&LrWq)c/`V"z MuNI{H V-I ݧu^L5|g*[|1Z; z|\r3}i͕nٍ:5Zݣ}dLF8`jp7>۽ ${FolPRGKKu5JUiBIOP!V;:ițD9՝N0xJ?pc1}_/ƃ4j{NHX;r`NOS@tI6j0ve"x1GWi6RB -^g;ܙZ) /2ue+jAJj'IQ}{P,سlN"p7rJYN-⧐bK~3_7D-K#Tǩqaw;~eIxo&Qn }vvf/UyZLm/A g<91HQ:YȮzMV&"99wt5(('!5:D1o{TfA 6pjp|jH=j 6VҜyzP>iJBenuSaK=3^umWޕe6;:;ӽ\HԗxvOrVQ? 3Pva1ES V8+>K!i /l>nv_q[e͎qj68R ndž'X$#1P:ʅ΅ٵb!Hm,c[Q_j=:RSҏT"dm{l}vc^1+ݩGd"xr.@B~/QvA=j[-RVA9֗ګ+@[+1$PdKWvd]fݡ'q,! i1=3X-mC#%;3}ɇ_vڋߓ(伝',^?S= JD ko/fk- }"t32V)r9bO!w%ÉX !`GDdCQ,)JU^rjF?@&G9}xZ8 7 +;[al_\v{pAN(d/NXl[¢Ed&>f~3J˛P30ӡIC]3'qok:vg4CZ: -z׾?Q5#l/nk T֖ IG1KU(SxZ:NffSp8 ^*i#1 E?,8`˴dҎǺ,:%T"k*=4@pRFϙ;[:qv(E]K)OUF4d>-aa %+6,-CDyHVe;] Zbmۘ=٪\U,K,5} wdCyf7(:hK:{Wc)'/2:"B}tۮxf@IQn1}? NJ̒֯TL;J{xs03n}=| q5!wutSt*tV2٬-:F[“ؿ"]yC8loOI"Z:~YRߝh90HKھ:aǁmL_f& o?:^0+g$Q`x"ø꿶1)gpS2XGA[ 3T7CяS,᱈f$IER%?'ɕ7k`r^vݺ|~N'9Rv}5M;10&ݾgnh1`xnV~!t?Z`1H_K8r{|kaK}`UOVH.T`Več Jqi姸*u/dm]sm@!9pC|9F<4 leUJ_ta1x,tIC? }.wVi+Ulj e$/mAN@8zȡɼS%=6&G4[@|S]1Mξ`j5ŘmXDgƠ}n|*dAZajA4۴;oeOE`ȹ6MSەۃ(]C&%RzQSwR _n0v&~"b1Zg{J?%&;&g0Շ#*ۘ w\k 6Z:gحכ~4DQ+Х DFuj;wET]bz-L5, $UOt wZ 3~, IMڄW䏇Tϓ꽸vԣlz6F Oۗi7roT=|'EۢUa LQ[HoR壷½#ǀ]@=,\b U8h9pz>\E( |9YgfЈb=hA@dM9"udR qDygSK P\jL( Kի+]3G>%FN.%ί PI9) II5ՙt].Z%NeUYK:%ۆs'R% >OͮDOX׍??/ǠI;x+^qM1e=[;YCFsd$yհ${d9{D\/oqkyw}S6q{F_b&:~4E kF2G}Y)+\$PQ+ھJe'Bt:|gWj@okn=J j.p{bؾV{rpԲW:~KNIM~{ yΠ3 3W( }rB*ڑ̈rHY/KTz쑢UL;$WmL򔢚*iWv#\.T7&gH߉h}Y`#p̼ˣZ˦cpz~R #4k. cx9bULn)ԟ-S3$p()L`'W*^+Ia;Pub(W"|ޫc0vכS1ˉ9x.8z Fd7W:x??_@?T!&|5*eIN 9=taP qD5'3ݪPpoע<9wĜyڑqa}FSYy _sRcSIaS{[&TOEGzkgzHACs{˴}>P"cy 'o siS< ybTx,^;Pz7b:2 ZgVҞě9QuB;GgJc<(+k\K_ϑpj.jKRg[܁ȉ ]׾A谾xg%qAlrqcθxvh%2T_<ڕVUKr#BXގ5Yʂj@|ډMM,vFIMQW~ @"\%X2iu w7*PIwh :PJ4/`4_%Qk=kMn_U(@Q'liCP?k/{4kH<\ӊD D#)0$[k6>:Q T ]7>@utW1*^` <{f%w409 M')hiY^eF2bbכ2VLURUd-MqΤwn{^z6y|F%Ҕ! WiҠ. 9Iat)qYR)%yBêLie랎2,2A6vydVqDk 6%'Z 'Z_'*+*fHNM ϘUź6af҆:^o={i >ZDO^]`^ xtnm @[wBʣu<M%QU>LA[|G\cH^pKKQo-Ȃ! fgΕd50 @WN0HL 6/Qf4##gR1=IdFa$ݜ <^1Z?nfߏgXZ6y.ZؑFVLTިzcqYk`en0z*ҔDshS5m W^5C+Z8oW(Nf żN(qm8 Cj^7:0SOP "kl\iYV$0i}?;V m\($; sJxэbt4\b,Xg`7JIK  | K/ 97Pyh1$4[fc;ZUG[Bd_1ˤT! 'd bO;ug,ϯFDXH/6 Q݃0,+0L9~yIeד#=яm:#ijE_U N)mar%'"[|PohH:k`ZOy[!+9t򸷟/eVIGvX',x\/VkûP?@NCK"Bت:.t_ r U*fN,dNj?Ec$eݶ#alVe57VB=5 >-=II3c"\3~NlW3z iWn0^bޞlwJz\b鴇2%*O!^]neIʹp4Tй] Yw5Q6>n8fn@3E DDkĩc$0-ddwg3no\V-ҪǣX1[iDK3DžDY&J>ơ&,KV>6s"C@  "4|&)'a!o 6`%[+X1fФ{ kO]D3v<+ >Xv}ViC]zVl2Y<*>C` l;%jPK[2P͢c:[U d?}و"JTk@ +踏o[uU 2eK_P ZP;AԅIǁS~# *Ah~UiR'gus!8cBSo6ݢHn]Cn1ZA<(fb.u8 ~NX[-ƀ7ۇ,`WIc|Zb8Kh@5PYa ,9) 8vD&$Z!T[x?b(W yӬ5UEڈY`Ff/3;hה&fj> $gqZؐP8Y;da2tmrvG@*+Nz|.0 gRheEKDuTBQw^ڷ| ;72DZo { ehK]tH1 .qh7?hh\9~BP4#pT2̜)*S»cAݵΏYl{ љyr҉J?=1ZUS1gKp(*Ps}wzew(Imf bv+׵u{#0Mw$u}:!trw;lO7뾥6Z̈́l*5e2,姙|f~0Tn,F=2HOaQѠaXQؤgOӃW]Cg`\E/@[)f0p(̀VEJvQ Kn4qh B$G'.On+ ed]TYb@NwFo93n0-$i~=X#D_#k"ia;NYN`E6Q08 IJ$rg:Q3F\pW,779bvIsaU1ŌEQ$68`nt@>L w28#a;٧սw <5hd%8bg+:^ڗu}Y L|_Mw$͚R|wI4pg\Oth.믰2c%/X49^ 9V ǜ˫(nJ2 XkvK(ZΠfl[2mv$N'rkD1c}+36K?d*ݍNoTٮӎA<3-`H,hfV=9V$ JioO0 /md M_ƣVF߅8@3c|)s-]9T.j\?/%>4uvv@g)3~ >e~?G M[pKL|Ɋ;q"Z,ּ%" s|3#H(s vO[Ab_ 8 g!!Z^o x5Nf90 ūBzSd̘q>Ծs߉Mˣw=&[XfyG <~ؿC)DCL%!JÒ'Nsa6wi(W(YoxԅrN/ ֟OG 2h;XER|OC"0h"cELvwc0VLКך-/wJsSnF\,Ω*", ڰ)g)bxO"E()H)s={CMa꤆Nʐ_!>YS?'_Ӛz|5YY.i"aѣČ+<2 (HAPהo̅H,By4o;CH! x=Dd 3ә:E H$Gh|m|f TQq>gcX4.➰96pIJJel#+Q2CM2wXip/,#Ʉ#d1:YȫLAR#B5n+$2BS%0ׅYvUV=2uih [׬xn_E+L<Ҝ@hYX0xXB9:o!@_~mp:kXW}\4 (^ s4%;ڿ7ħ5j11N 0)B~3y##XrɈ26ıFmC9ܜSrEb|BHUZgfr"ki8p^U@0.Ј~3Iy vgf{|=2ButPhr h\7&,{DybÕʴ{7CǭLB32*jQD[MY.ؔ.m1li1aWQ#G/ "THb$ Q5 Ue)n~t Nν0@W228]kْg JoX f9_D 6n&urG49զTiMA/沖!UԜGI7 L|-H+bkcv{<ȋѭk$}>1Y2o)tE$[WRA4&]mhI9l45;Cௗ>Vm3#USdKifzն421Ϸ\(ZI3ӡx{̛ވge*K8Ϻ-NSC?{v08i'%`Wpc2"HԬO^n5UgD.J\z.7x=9%-.F2 H|ֳA&N年r#N#b\[JBuH ˱6~7R"`,u;p.6-.1bB"dUYabG /;e'KGneоvƶM^݅ yl%Nk^~"Hc9T˝L4i>)-Ϯndl#\$38L) 倭6tr?1x9^y+7N> E(Kb,^W1pT'߂)A?$pJ7ħ/{pPvcK#G9<NR- @㫹 M"0K8PRcA)l`5<6zc%t^*S14F\<}g|/dh)p[oz ,UfQM`v}L^QˆjWل֍53;^vdl{0ו z ]Dv>`Y= Mg:`-9PqT IvܛEKc!)pju*<~0!,1 ^au3>x]rzڑy<'"VۭGfKF[j[iPͳ2WFJӺ%ƒYK  JD`eH?ƌX}}:SѢ=ۄiI}EWFHo:gde"ٗg&*m7j0ADf||S4aeI>=ߣc9AbLgd]A:w-Pe"AJ]c <_/m_Mg/ O{=áDdFg\If)ASt?Lu0Okj7\; k~`7.m)jEg`@SF H`b`JF-sRx޲xJjc>@I_h^ZR"kD\d`pAU͘Nb.aƾA-ӭd\lǎ{)9eaf֣OdEԆz|O24[lY G9șݯTXcڛYؽ(F@Uw c:{$晝3&epi/7:!/{}(0{\Bx{ƒWCRBvc-24Kh= ^BlXW1Rm)Z)o;dL|xvy jF˿ZEU[m*Rم) TYÛKjK2[e¢C}߹Ce;Խ`ui!0ƣS W2#߶݂՘ݏlx@iD׫ bZ }cv?UiPqJӘbK qߛ'kIn ~Cj.&p8ݹj]_W"'9mcҩ?YiKqV!ؓ>/>hEykGW^m(2j\i])?{B1 O){M~cnv.Nc (E |6*j#흋[a 536*M8= 4UnVn5&󅯷j"̠8/!v.侩fgAkn̸!ܛbW)\4W}/LYoh tƵyek|D4 Q2~?~6 D oN0/8 uo u':×5ևb83TP/Do C0Tgoq? 94\oDЎ;22,Cag=M/p 0dRVYg  )4ٸ5?J&.&({SRk#wSAxu0. ~*Gt*TqcIED`kxj_GrDxKEjQcYssL]޸bKqi@w83yG87޿n4yoZ3{gg#YWE|~!ޑe4;!#7ʼYXܰ8wtqèyBl/[eyYp*f&֊Wr N~OiE:ׂfvBm-e"TNTlX2T)zntK WVmAӡl)*\?]Cvσ)϶tԺF̽H9B2?ەQVX8t-fX+i"jP{ˌ c1ˢjkob)@ώYu=T5^Ӡ 3 N0ʏÌԑ/?f@veBnj9nBLx u4zXxϻr0z-'<[խ#u2_㜨mg:6%dů>7 qre*Uj2.tl<_)msEޡCս:ۑ2zh~IƐ?no)erJ_!ŪS+v̖W鉼GU0RɁ}iƀ@~T.PxgM6BRϱLhL0p"jOSʵj6;.X5mYF4#͜ج> p3ԀAwwoߊŠ{2SBK;*OnN&;5KaA>Yu(yOAwTLe% k'-44I4Qla?! ʃsZLѾ5cRCp0EBS)%Ӥ"@qLOYWUee*<^V <ϗW#u˅7~LA'PWiDdhT( ]o")3WUW_:ptCFT̫/FW(v :6Lz^zL˜9[vSn⫶l١X| =zʱi8O˄j]kO߮kmnzT]MӘG_!뾘c-WIu-ErE޺iI4"һ v/ƪJ̭&xk? oЧt{mze( 䁄|R9&\":-簊UGA3vweqD>0:OXn&:V^גr%rՔQuF'go{.,KVyh1]〫RMF \jmqQךc) Uȷ=ZfY{r*-aigWj iuYH(-,`U:";'㮱yp*GZ˃)a"5[iM3`Y(X܏z騊=,wN Sz LT RAbQ;,,-*!Z CAv7@=z U٨V\`A :3>W JvQJ1'=-xanoMĂRAGHl Dh}‚ʤ}V-,dܐš7RE}:BŢZPL> lF~x3}vl('^fryDazV\ % [oë~lEX/v{CG\]m*>ʨdT1@kVm\:G}t$R&郕/5uQER/BEU ,Қᡷ Y[!Ivyg&݋RTs=WS'l+ޛfcYo`ݬ5HQ'wx}G3!i޸7k^7̛Q@fB0r5Ey~9 u]"Q? iw8Fg Qu sE﹮PifzuFүeu}kF;>[8 >mVz:A"{M Tȿs=C 05zARP' 8^}w4Q^f oL@O6i ~M(/1qp,j_ "5ڔ(No!s%oG4\l'6ͯ,3l~}4Evn(YXEvIqT]5y h~ ;(_e7r2sU7Y[R =ّAhBc$$FCl76j-דml}dKkA@鵊HPf%XDVlst1᎞2T"vo:Ո)|`н8H?M7xOXKZ.oa.Nvör_wxn.⧁LL]r1c¾A(Xf%N`" D],%C*디˻k7 a/8Ԑ!V :695I!\P;2P1$l(pn g\=Q*Y^.deQha ,A52&cLBV%P*4L1j]w Y@XG_/4+g[n(-og 'M5d4Jzss̝RWI(J@(TD\:nglh="|25uܺ2ZNt; bhMS)2cAc3}^nb9mBiPUqBQ^98 cpěnq@zҵ+ixVh;N{yAL *t]LQQYzS ~x@ID@®Up$CN^]4a{?>j熟 6O.߅^tDzXm7>Xz34K&Q8? wĨ XZ7-yQi7?Q`c[5JF0M7=bI8; UY '4K`RkʀmpO)ٜ=T](靿k>x̗0qϞ!SgPڬH2:z?ʝWA;OPtD"ov$h.G+(nh0̧_GIaCN1U?fW!>u&;#(#8$o ,ݑo\bKKJF2<IB_D ='{2dɯN/8Q = tci LmdG gk.k2J !'Գ- |^ryZ:V$;ͬȶ7|CM8> aSHs*h5yI@K2dkm7E ԠMŒĘ@BudѡSN`'+X4,]LN̪yS-HOLN6hm{D5qZ„\c?0BE6K\S#;r_jzVKoE$Ry$ݹmB2kV rpg3!\5Uy''44Z@r+3T/m%N]moH@@n;cM{ Iq!RS`F\LA;XJons&S:6aՓ?! 8eE7,\$a~ `k7ys![v\bH2!"{[I2-RM08HǶ9T F /2g@ٴеrӈ1H=XCt%_]^>FoҀkqƊDuM+xᗵ|'XOOgז RO!(Q]dpSlIjG{YPne}6~ #=k! 4Gy7ASvX)'*Oãm`vJ~͒nѾP vւ@p&e|,:7Cx["^k$!KXSOi+B>P5֗p|4>&o13}!Ib7oTVbOC0NIʃ (׺ҊK^*a ^] .; tk"ÂaӉZGE׵v.:l uRXQ((-#aǞouL|CW6S?TĞ4#z1iA̢gg&4 %˗)+ [߂` Y-Ha2ܪ[؟V?Y'%*gB /21B"Dl8<\ >Ălg Ѿ!ZТ<-qx'y03v^ԥ)<}V|>h1J,W [cA ;r:I>ةu٤` BP6E}Ss y` z-C=aLĻP&>6h>ͽ~DУv!v-q}:ϙ͊/;vzE.Xg.ډ^T# x 3rbK5Nt2i{ǠhNwF^q&k?&?RŠeKLȑPuJx,2./U>-)xouzNYܑܴ \ lWx]xS ]U)THc0XCPO}دPi_L?u|O/T#N I)YivRW4'7qu[tCsN(~FC|3۵SObm95FS#[oG.o dDHzH:-)u#fhU¢!*t%p:y(A^@X6Yyo77Er/{$Jz)NŴtr_k-2(ZIJ[Gْ/db;GYG:X{-rgE%gU$bDld%$'v,׿DH 5~ʓE. (L֐Sc>Cl#[(\+i&}/^Ȇ_zv^,/4?jbo`G^6uAg$*iGH/%,/ ]h|0;> 1ueccC9T YѺ^>'t.bPu Ƴ,gx`[\}:`C6[(xZ1~EPB!\x%H 4k4? 3GӅ4F{O`Z[rt6&  #Zǐo=BJ7KĿm ;8HO>ikBJqӠ웻i0 `%[1}.~7;SK] u]3lFdX }+2 @ 5Q< 'pJ6(ZR [!e'A[@ePb+Ae$UV(5n9=#GU3``)EK<3R},xi 5!VZEXEC`Eo}Z*K^Go<\sة2 o[MY P(m#\Yq eg _@N(f8[ݫq)0TR%`1lIP5Y)Pq:t[E(3h`b$g,:xh!> fOQ˭-|L֌OKr}@Z1De_-oRZ4٢N:b |S\$ G0 K,Lub> sOPf b6]zm9 38Km|`4>슢X:nt$;J@K][===&`Gqv- ^4 ς?Ojq75U_'8[d\:W5}K `KAWqT`ů;"ݿvu8O+hKR;*BN/[΢~ͶeTC Y~u?2-cŏ]Uy@vr*+Ww'#R#0BE@t$BU ' NT#76P!h.Ld!adrAkVR4ɬiP`J?-Inu.H]Ywy!+vjh"&5N,7ٜkYutXBрMK%=LկAR.z^ڷOr\6 ɻ־tn˦Voy6A{! s.WleGF~o؟J:AqZ zi~;p(Ry(4Kѵ޽tUc/ 1p{E2@OȃNX-[;QVۦ1s.;gq+L)5Ҭ ]lU`b)-Dj*3K&@brXy[\g?:-ǣ4#kTPU KN2|یK =8:~'vI#F'3^|`8)i(qeKFsj|_!̐7pX6#A>ƙ{hbmKNBls,|nq\C IMޥX&֭!غ$\ u.,>6Փ<(n91b]+,Oxqu"Lb~T2:}k6*Mnpm}5 ^ d5 2jrdUݬ=b ="vW-2y*Zzy 382DCP؁j(ћۭ- zƍ8][E*1͕)3JRp7v( $D#̑9fJnF3u_SYfXw GSHѪ5U4t&S9ubgJj(.mzR`F>v<{;wJ| NV`>:޼jbw|-p RKt;!r|j83=/Cgh).)0ǹz{AD%(: ׷Q6p̥VqFW(38|&#@𢞄ռǺϷkWҪūWD'Rkds#Vuy γ#@bo@QO[}/Njy#Ugu3hALD=/{Cr+}41\YeԬv Eۀ2hSVr ND(mڤTK/ gv oy,3oZuLyYl%j)lO&kq,󕽬V{M_z.f}V%w љmFr; '$M- >ѝ 1:2"pG,u[Lm}˼1ti5A PclW0l.KMbEu(&8mB̜$94^!eh|Gl#[}ͱheJ%)r PSZn>yh.d.♙XW[`Fz\*ԇR3bnc̞#_➵!$FvGVhI[ڂj[ D|\Vs)PHP] r4A+ Nv䄰qSЗΑ[{Pp2i'KC{Mr8'T>Y /$<.v-bqwl)qWυ-D +뿸-𖔰-oYۋ8wT ځI;R5w1\=S'bcl%0{1څ. m.hf*\S]H5'ud܍:Ca7;"f}NScg"WQ#˰BT}mr.|ͷBS»r,{ljTr|FZ z`%ON'd&U(/}){D 2t3 ͳ* X7$kP]!ΜYl3_d] T5|3U@2 G ũGzO1TRh)ڗ[km%4Q6CŞvS E!yė!y". Տ:ӥ0ݲ0M0A8W{{EИ[Ӣ/h&yn_8y mO\948|?]RҨʁq~ыr Itc yɠ= ,[Ȋ\P5] &nE/[i7)&Y lxq^y^d=^C,XPV%seY VGؙFy\:<6OyZfŧZ/qJ'H6^x1ȚK]WƋ\w]JV [j3B{-*Oso-zGtyO\Ɇyj"@55OPu܏1{jxۮdzV‰m: 2G1@6!E¹{U5jyeo;(;YOso6PG:Ʈfppq-)ENK4kAvO`Q[7 Bm~DB/AT%'сI3ů}T/eXS=d̋\asYu^S(̸rQ}sf7ը `>ixȹ琡6as0qK~Fk{l# RK7/7T'D-r tPv>.HeKIw*'IO? _~ϸ9V%H.GtISV5% we^JXw|m>}d-F#:Kr]}` h !״ kNH mS\yGl_ ,yOEzaM4iM,_c3M)%oqx텇K'ߐ;7gpHN-0m}-_MA̙vLP+mjz*;3g+s_ %{#,wGJCvF/mtFE[S܉VOfmDFu]]Sito'W =h1zcݢAǽ!y<+y)W$9wSMZLcn;=K4(xR~f.؆t;3R&Œap lh욕l'80ni( %ofcz f S6W;`,pAMKp*7.h٘E[@xLz, ?G''"ey(ۗM!FzX:NmO pZuw )aj.2I=1"UkFD1dXu{,7#7jP=7/#TmPOZ- aT _ =HB8wi߁Vyol-N%DAPŬd{ә0W'1?Ŏqks'mKu\jeҹ 8y}q^TtJQS9qN gTGiS6q[n|i6YZ|kpd.s32BLEմW^?}'s%:D  ҜNy eىݳ\GŨۻ=w\7h#iu}]#D\H}M@ۺNAx5J?<{!!:L/8m7sB{^K?ۆdTP4#0?qv# l%mz;@pH=5 #5*?6Wp" y'gkkI\Q>aUj9R&~6GwCHBJOޞ뗊m Zc 8i}>oTH2'VPdrŗIALFD˗ mL8K kC#{UYr.櫫P$p-\?7RG~RG`~Ӎ"Hk1=`Q &5j ĝM erL)/W@aݹ4' _u6ƻH3ГFqJָHtH?gv:Dd y\2$F(Sȋ|hB0I&̶)?Nm.q +5i?kTx22tݓ0\αRq3W kDTr{U^7~,rON/Np+c&WȸkUzDZXgƖ+j_RTK5d6ҳ|0/[Y22>B@דz&(lՔ 'Kmsva,rwj$(IR$lSncʤ05m}i:K:UQ[:?%O$*1ӢyC'GtxQ&@"%+TV̨JmH=dR ("Jm1ˉɛxY~>1KY 2݊6ɨ* " >W328y{t-Τы1RS;B{,en?|لC%:Z*&3,)s_#>8̓2S9tӽͭ7LÉdD.!U`=%J ;4nybdJGq(7RH/6ǖQ$(dYR$q6*%ghNn|,P:GByL`~=&,'nK0-'rYiwZ kBe[e4EO;V~p]ZTFSg:Wj\hIe.>'RxNP9Ą(脥Z@"gt*0 p xi5 ?H7F /fS:ˀhVGū7Th׮ Y5ɳ< |@w/~k&L@pya=!d#,xR/zxeB,=@㟊J "w/4tFzbqМ|b!*PK{z:vpM)p#Jd;e n5 Z9p&?fZ/"P]^@րäڒ'`@J, vDŁ!4["e%^o*^As-fkJrؘhj𥀆Y(/!PB(ֆTwߵ/e@V9 \&@R<6%b~z, VN6h9尌:`n +IŴD̹8MT&#T VaSnv fcqr1$jBh+My|ěԺsh3;HKGNϟ@XH]xcZ䯸w!с#6] ,Ss~Le!Cvmb[eGU=AN4fMőw磭s'FO3E:Գ|;'˫ _|ӄ U&tVN0@<Ml7РY2TEP;_e1DIS՞C66ھ{4sړ: q+1mhʵc)] wL'ec.F-G}O5;ִ[h4E൶O pVLqt_D]x{a6WHJCA]e78Ef"60#)m&"6P`Q$>]K>7'` LLFO`ev4/B_K3ac<:S{@Lq fL*μyM0{p<5@G#e`|!66O*-4?ѡ2| "/{ݺUply(jA^jc( {P V1}VL^fbK9m!Gm^Mu4匢_~9C^ IashGa<BPnt!8fFz{ .QTaDž$<,ĵVh%:!\cd Dڋ^c #|XNqs)v*{B9Yu ߶ݬ 7sGk>*aBI:gGkQI B2%X@Xd,R痢R-#\(nSndv .Og/c¯@672e$)5^ք=v>*k|LE?rIozR5b1ADir7ʶVɸn/&񓱟 >Cm|ɩR;kF1rd9&hwưCEӚ0duhKF@_&=2mqm)B, (ڪtcn"5M6R~.͈)~aPuZS &C*f[6oWBj+js8/T/ʣ)$3#CYrF*A7i1Z œlI~~. ɂάA/dćD3ȑ% 3vbT93S«=9㕊vcܓg?7ky\=l> EdQYTͯ%̯ *vra+}3+(5M)-j3Pj $vȒ@ [uxP9F]0-5Y1JiIh>4nY'|,U>ȼzm/Ρx0%5K ǻ^/ߣa7čl6z*#HE3v-6|}'Ӣ=f13Cm08IC ,pLa)U6Wxa*MҊ޽ Ml7DM0(@+0voKoS#gSX(CnX00l^"R(R:qGuHVZQäߤCݴ>hwi m|jl̄싱 {Vg"||eYqr"󑉫?Y#iAŷ[]+b]`q5wCakzIQU`ϜB:4% {xBMfSo@ mԡZ\Cr9Y0 ȜWqc$hAZ iA %9զ"Y&Q۷#0ozh9H]JܻԂQ@/+=jEwW\B+0Òh$͎bW-_WK#&f2* [j,V-aΡq Xw.= OgL7 ÖBkc_<6G(K, q/,,s̾%F96-/7J;MG. J{dȨ9QWb;MA\a!cP3L7_j*FR]i.l U\m'0oU\ӥH?PyKib}\ 5O?=&ief [FgD2 tJ2h ޸%MֈGk$ BُNi,uN-YRFSZ43ICd}]UF&aUuq#{D[RBqHUT& S.(3sc>AKl&xA %~I~L]$Ku(N߂by£.R(zi&Um?<I2ՂYIgP> h):6zPv\$+ Pln!"'֖Gn~*߉y7ݑX*0) B~рzG /KjNn]i]Gi\S=邨cMɂ^C>w;}t&Ge=ӧl%R|9է^7SV|h"sFڤwW;{`Xkޑ[9/33t]|t[!BAq8l /RIؚvDN,[\g50H.]!WIV*9Ke4Jڽ^}v#ñxaxl#QI\TNUKqa]EJ]Պa(&MPb} h)2dTEB$8rǏ̀SMGG'b/zƠMrܼGv>SSC ԄꟉ/0.O[ ŅsLs109Ctu':HY iGSrT+k gSr@m穾Ie [N@kV`Rݬ׎a<|A3xkv_hW+/rh'n`Xdֶo=F0~TQ= o q~-Lj\lqO '`P QQIC*w;UvFjEᲸx?}aBڭ !H%I}bҠ|}]_`nHlqg/Zg|=Ԑwy9CH)oؚQ#g yp5It=$W,@9^9{^}%AY{:?"#6X(PDpgNg\Vk Q~;$**!| F rͪx%O/xja:EwDclcLOSs`$>O+A G$*|BE P8\yJmwz%3gyZG aTNUB$ Πwث"k߅UPTq]qiF! NHeS]ٕ}M8w/=wQ] l,BHDRz1уݳ۽u9Dj y<N0%tI]kvm8 NYB]*(*\X925!a1b!ረjd;+0۲f7ntcݟdC >RxZUW^KQ™Ǭ_i>9bL川\]T]_5CtZTayJ^g mic{](%8`O8EƩb7zPN5o*Ox@YBYLsU`'%JR;]jUVTZO@u2<2_=Bsfe69HO+PCt!aF7ܬ<*_OiC%VJZ{ICr,"&`鸹+{8~hDA!GƄ42=˗Sa!_մN9Jn (8=i>i)׃VJIJŹpf( N&ǩ`a'm;Z)Px0H9-1h"rI #6hEIL~BK8RK9䦰QT˿$CQ U?- ϙ 8B fx=_TmD6)>{cȑ/*xxu*:4PNQ$0\bCR&e_?,*9]B{Hee u(]Naw yRY?A\N_eHH)}-0E Uepd5W44r`jぷ| uMd䍰<#b)/NT.ɯ  &ޖKn/[Z2-rvׁ [[%Х.aZaCTyv֫,r|rEX>0,^iۼqj`){F h_y]`(/E:fLu660&lJ`zSyF;_NRsn/3u߹)D3&yv8]IDu H@rT :Ă G,Wdv+W&a-ψכ Fe{?teF{#<ҋ9ftPc=BpV|G~۬FcN˩ּNHZiIJrW&,&ZfC&n&vG<֭N9grAgjd 4АHOFeo 5GM(-iOd? JM{x6IqEQR 10yܮ01{D[F {hjC (G$] f տE GhW[iD ԋ?iEA)o*!r%],'575}[qA?c=䋵.-NS R`hyj7eȓW dG"Ax<\;rNg[E`Z^;m`7Ą~iA!{A4\\GpKs^E}8z_t5 J#%XVXr?k܊ASr;ot!4Fc`zLbJx5'e.""!*rQm^%j6?Y-ylH'P)ymh(R)Ȍ7}t _*a65vgQ5UM繮ֈXc9Ѷ۽rD 7uA?Y@g-f%L乴Wjw0چQ4ৃRZPtו.Sz$˫ςuA4s\IehWza8qz5$"3vXiŒ+6,5wqWQ< ^&)&m,>pm $"eoi=rB{ 0{p\KPRckWA0&fj`s"c.b"BdK3F3kR~*; 42#KUNȘ=&#VZ(cs^|gmR2c-GBݱ3lvTʥqa˄yhc^/ESZS|KHV{^*GAժU8B"M 㯘3sτQJmfi7E^=Dz_oIuzGA;m(E<*_A<%ʉ`:'h9MM^_I͎r⫶ D! 랸UģoN n '*+bL$-W׺|?Dy%@|҄XF[dY,\( 1)Y@ h#>͗T'; ?ŠE_\\kLCedn3) u1wd A8;&'քdP~[轲`Lj渪!  UdsİT,4h$]DLBPpA1'.$esd霢9 F(Ok>bzlFDRQ<0Y|+$mκ0qt=``i]AsSeE< H$z乲6ȳ0)w5&]W1MhCxL%Z_=`H{tzEu镢\usOh35!5̋w`;UnKU8rGl3GTNcsƮL&ĭ@*=]?@8ږ*:ժ-ƹ$գ챺xrm*.qȃ+zr>XTI5d˾ͽK#`աpֿ q1):gY Bgd~ʬB_/6L,KiA )E*qe`۾yT0y dU'2]MЦp)Gs Fb5x8z1vlHw)F0IqФlڂ ?ޓD$<̪ѭR(^9iȘ/r)xz1"G e)_f5PW?.%r&ոE_xbֶ8q^P |Kj~&j8c3/ait׏]p*&;4?^p.6XN)]HM vǩW:11Id+}$,;E@}*_3[K܌rdկ`2'J:дe//aCqS3 ^ < 2c0r]YJa 1̢H lYt'\篟1%KnFQ:}@p7-_1Vr4"hɨռj{6!Wnu>3Pb SzEjq8&+m@Nj aSe1{ڞ3b•SITŒO"Q>zB/.i-2bP8j' T7!:E>I(yKd%/a $ I9kTqbMmBHm;^zNX-*> {'a`˒cU(%'ʀJ!{2WPU;K)?iP]@'UqKoӵO zwҚwΓO8NV $ɗt:uAPS`jMjH+a LRxRѿ^̊- 'T(2qe{BZ@a>፩_k7@ų]S9BFɮh e:rDrܜ#N:RqeŠm# a\+7A `Q @#n1f hѥ/'i)N.ڃ?D)?霤2C0#ټ<'z0ERά~ 9'iqUln("O5l?KtRN;%9k**d.s2$.+_@!*T205 ҄mzJD%|]_**5^-~K@Hӟ^g21yeȪ>0;ːe$ vinУdw<ԖqU*#EL֜My2щ5(c ="8ʽ߽aOZ~xA BGw ۠;B|kR=] 5DbA}l6lHo^`, P|U W( 63u -N<;Q}&}S\f\q>S=55/GE NZ圾/"0،ЬX:FFl |{|sE'Um>.Ś ed%yi_t%qAV$&Ra'DxՅ)55)cM-lJ;10IvR)wBlZ/BJ0}y= WGO~ C&Rۊ "DuU5&nkºSttBh>t9ǚG91M9?r

ci/䣧YQ36?%ƊoSFEX 9cUUbe>$w zj鎠$YD)LF_'n ]9v0Z ;pBdl;5~|紿x{oX^Ls&S5)1v@OM{}iJلtR K'<9P6JĕȨ_(byFĖw:X::M IqupZ+T(#{+ jyr9lUB{fpm脂8L-/!n9`K8G2YP :G)@~`TE%#CC$_+`~ϩ; HIq8|]$Jm?sPjv>Oh>efqJ-1B5@D(,}μ~8f/1tydA;ї? Y} Q[ qJLE|zbѕJ^[\z*Fx`JO)<\B9X>t^K$@ųãp͸>E ꐳrgp?M01ûx^_ -ߒlRMv1,^ķ`˙O<#D:M}g݌iȪ% ׅ%(KCg֡O]wt 0Q<޾*eǿ3oj2 W:5T^uLtKo]i3~I(O`}q@|tOվ[".TYzoa?a(vO:W:(`{tWy}|d7z+)2Mh_CCدѠ3qVhb HKd\30Di6W'@_p8+voJM]2>/Ncb-:yC&bhRxTBPzGJ&>wRG0RIGcO:85q܄Ō:)P=;Qs>퉾DÜ/z̦L|lKd{̌8XBwMyRbXx".mz*:+e*hbc熡*:ىhhs!@շꯡOÚ4SQ`Y')jEk?T#["êW9vcV;M#@KIl/NYKԐ>$;.jgHTV-Tof*-Up=39é#XZ8f?/3"njճ%dD{<>2VrGRgMOyz$Ӯ䇬;\:Eet,ܭ=N!ٞW{EhCBZ-\$M"x'm#ZfVr,l)mogt.\60o&CCUVm[e_;A?t_SD$4K!q`.TF{K[T`k-ʸJT]~jYײG'ǁk^"fak3鬎uP ^ 1n)D&XW`Ƴ3XI\7M]6r0OM" rgrM5Ӭ?;5uEX>x);u]a8OgEMzR# { wT̞5@ݥ6Jo5.qy)8HO!%Q  Zf{>ALJɍO@1>H= A9A>m7>Qg+PS C Pl nwI:<)p#qÀ h 'dmp0Jv2kcjTH DgP//|1T禮 Y?#g 2inC;Զ ~)H{YgϮe>L[Z*j-K&yIԒ&K,$&{$|~9Y|b?o;͞:PTcߍOb\7^h"˨S`"o$QPD!%O]v|(:iV2]{X$PPFk#uZM>"xtG e z'!X99r5T"hihA52N9)"kZsG3 \ǜr'C7Lؾo->2IyL+]dWh;'J2]qqi +(K9Ӻ?1ٝ&26R3,JR0=! f9=ɓpNUPpI|%Jexez5CH̅/*K7/` >ݽꛆ~r$>[}(e$ ,+SH|iT침~%&0hro<[6`q!t ×Tp;AtC<&U 242N;<KBQi&Ǜ"M#V7~;oH:㡴k[w:,[>1]B47nCg%H"jE֮.CwJRq|Vc{ x͐Wg"JDs @ A |%oJom#a [4۠E"Cլ(>j.tX{4B~〤h"J%x Ô!CHJYuwߗue0bYq{/%I>p@MWZOt/ <Oz*6Īn~OA.}y%9ݮxz%,_iTԓ[GP, NI_Y>#ύ[1LI}>46_S~Yp(óu dۅ\TenDd&I;)Qܽ a^ELtmAC;f[c?~Fx(  M݇4T/ϕɚkZwA,vĐxqDs%Y|!dE"n"M$ɖZ|iU4V掗vr 06o/Hci(nRI6=0.N BpG$f^&qx9&":ͭz)<>yoK@FDԓ0(lm\?IL\gQӺݑʐ 3'-6a#:P1HϽiZmQ`zO 7a!ls ɕ- BF~LGt.r1D=y"rSw.֕PWKi:wwV9X)xҍ45MiIHV)LB!z Xttʱ3ܴu¹dz赭W-]%Qz͂ ٶCvvKz @QS*Vxkhɦᆧy&XހJ+R۠z6+kL;gPBO^.=Z}^7Pd3z1-"ZnY`'Sㄵ{nTt_^"0Y~UՁ0dn@ .=mdN7l*FKi/Tbn8" ,;O9}8 6߸qzuhT WEe2EoSՍu%4].h#>qWЀHѪM6[T6 fIPg_+0JȈ#X0x($6HAwz^j|ٟSxb_[ăTX*vtt"cyI=K`)#D%% ">rtY@ P.ۅu:-|S?IUCb"}]k$ zLb1{"LSFg ҿ U&=ᓶlfY7b0b9&?K8' KCޗF5Z#X'F̥^dCSo'ĐU*ԀZv)F-rZ(?Q^ Oh%<+ ql1!۸v1-7>X Zq^hڑ=,~D=XcYtpD]s̮+?Q+nPۛ" d|ֶ̠Mw:'1`Zh&eCY.mdKQ8W-  ^W{0w#O85 v\OJBn&S~2 zh^˚Z-<2MtM]7?8 i#C̭SZ;j#$r ?]Eh;&&g`e8Xڈvh8mƆNq )ڱ%}G㱞qv9F]oOYdQʁ` Β#O3V(khJB@UN?X`V'^ }J12=3_+v 2{iw! S0 Hr+9N.* "9'&=6ᴴJ$hsYOv,X+ ;j2=:ƥ|>JILp0T Hlv¹V=YC⒴N+3Vc@0MʁCAiPçQ3p"j+N+[ҺuuZw7]H\`SȉB~SJSi"Z/ $~]yaϯ"00i+iJ' x-(CRu؟?'"̭'yg9,HvӉ.j(zxLJX /E@A9rdIsNg!0u2"Ŋ[!G6.aYlF(2TNEN(Ai\#(K5X~M#d]-?N "b=} 9__P*2E}B  ZԣE `t5r~'OMATxRsƈ,9 DFőnэۂ-<ͫudU^] IK/4/p+iOt}xsG:HrsHԑt'V:=K^٭5 ,a &S_U2?NpSS1 ;U!)M[,D\ ɞbM{ufAсJ%`x%h{_=ڗrӶv -rVJx8 y4y)@NO/.!Si9=,! ®r?@\4,y[ mFݔ(& Uz@>45i֦K=#΅ Dlsg ';keLkCUzgK"ZSB]ZU\m ?Vɺ@|1wGG_{r;ebKԘx.:jh:1c'e+J19x3lJh )\WN Q$ Sݟ/ǥT/~$EsYF4AZIH(مsE4'5C-[| BtKrJlMe/xWlc+Y$zBm; ġSMH4@4!ZpE!;aG75X vY}g~ V=\FfzXw2t[AO8«Z)QEFA3wcLX@ۧrw̱NB \%>]aEϡ@4H(&v ^]_fsOv1*$HQdsAk$i+)jMDPmRa;*u];LjL]7+? Q:Thؐs* >xQnM8}1no7aZ'(%J ,tu%||֥fzE[-"6?K ]]&nWW~eyʶT/]t1נWA{Oz'fF% 8ʮ#'y'㵌@M]|3P`*`j"YՍDԾq.-ysH7W;k#/11 e 8-׷8mApc %p*#7eLpgl(z8KiV F۪:2Y6njA8~R1gI808kkiYl{FXjeQ! 6awxf?׫W 25ӫB83 laruH1y\A(bpÕf gamT*0Xg^dpHH7 HqIve$~LLߵOʡ? J0TP>$O hyC#s82"K 6ڵNQۨ5SrCO ;DEr3ӧPX*A n0"]'Rr5_׿}O+}B J-D>ƚV 9?GV`a͋u(`TX4yNH =&v-mZ;AxJoI3D ڝ3qݸ/āQRgI>WFq~(eɒ3٨S'd <}4`R׌x!:Isڲ@CR*9̬x)(+// "*iF"aTM*izj-mʱSFu]'uw2OA:N/lj7?)J0J^e-F(y1{_͜gAF@yI}&' S6WiR+1YH:rRGiT|lZ8ʑ9xDf d$ Z5\A"]c@js/5j`L̆,).}lv{6=2dQ5#z[2&ʘg"{j}] j.b`E7xtMeqSER},; :ܑk!8=/uMdS1*2t}7[~x ȃlRt`q#:SW=*k +*O:vB8?lT6[AS&L5r2ᔓ?Ԇ݀TUFf>f) NYXOUcӈXR $~U$^H>R DJe+WE33!fY/q - љ:or#7T{!H%PL6%F8⑩pg]q,q9#{ÿo c|~k729hD~k>MAT3&1-uʢԂa䏉yr;6qkcՌ(uIX;MNucsxCQ.^oY-RT 7I'BT`e%&{KwʭHX &$QLHҁCm5`|Ll$ Z#fOu_5:H6x>g ҺlWlֱ7nǧ H --71'/A0x[iϞ,䰻l`^ڹZ1I5E ѣz{/b?>b#Z MI)lA R@x [UxvJ_YdIA"də%=_͉k !M,|jilvcjf/,n>INhKiN6)6|Q@ׯt(b+(𿺓˶v,Fj%C 4/ې*k3Eޚ:}rctBEFLJZŔ''qEsm z\|燄lZcs#%Rd7K/˥aP~R0Md~s?`a+H.5L{ZmKqʏV5lS58dU*(`uB<8-‘IL)@6u|t@T%LVgUX[0'T~3K~:#s%kAe SpP&3P~E.y dP:mYvS~,ajnWkL.Y0֘Я/E{5rATB~\߿=RM)SR#ө l $wz}O Uv\u}dB&^@aivoLѤpm,b @ 1[|ҥ ~d/:6Saz>&d0o5MrAGߖk9)F~2Zy>X$R@;j&ҳbD {0Fv҄ڼǫZv>Sf -a}=4ࢻ6Ess0o1U7Ba[@R2L1n1< ݢi'gIPs/)P$ :u4cOǝЬyC ~|AhPjnH+_v ܅DU3_%;]O(!{[ѕϢޒƊNa:KѲ¨~#ooJ]X 2qIJ@ǭ{m"n Y{J@?n FgˣT C<ГHvAj2pRɨM i()Y% ; k?<Ћ9L}]o 0smHP$LD@{FkDTUvĂ^f }uFn[3%B;le`a ԨSL1ݼ;Iˣw݋ v( (3^0r 4m]5CY ЊVL"668{[$Ǐ];[>جX-_6W@HR1TA) tKNWVx||M>kl3nu@|1}4+)D{4-;d י;G;%$q̕&Vm㭲#Z۷A3+/n׉u`l7]wߟ7URSUm8>"oQ%5էZ_]ƣpw&ai367w"ϝgp#'(ٟ Kk;&/y:W;Czu?ئn_w]e/}/2++yLs>SFw}x~9lݴW~\G}x<-o-o=uc.@Ŷ7+/=̶Ra@ ʹ5M90EG _eTsyz13Ԧ)H+Ɗ 1X_#N||?e~d|@Jt_qkGyY=>cd`7N"(op1Caʯ®kա|BўSPv ݥXEX>{mV| ]Mٛ [_>F*m*1WP5ꦀz5FA&!:Dc[W.$-ʁECʪbhfB T4&Y?_z_f'.OWz߻>vc(p'E ^5x0Rʟ+:~5L5hGŴOTDMd%O\{1&1{h&еGAQp[kDQG~**1a.w[>n;huޘ}oz3յĆӘ5"@AG]{k).D!zv+R'5gn :7^;{9prN;2t -DA)e<;F8alyh/=1뫳lzg*\+/ Y~rDN^zA_~? X)\(W~9$ t sIV[lU3}F(DrkPJ_%\ PY;Z׽̉B\}]L FG*fͩ()Ȉf"$R.JA+@`#4;8}3Av0>F8ܝ皰<~`ylF_Hܾ%dR/xcNexL /v{xhi15y4R[u߼jEʭĈ~&WU5yvVoMuJLQ$T(RgYs[MpC V [G1k!WaI!,XIm[7u0:M2BۼoC֩D D'){Qu e 4uDXi;@5f)H #NDKZpU o`UŴRު(Ϣd. x ];,1ķDTKvvFPι+`:+Q"TODq;fBmkE\BTՎg4@ ?_+uL28lZB1) e+TTYHhBDlaCras\7`mpp:|]Y#6ZTEF8vzkudwu]ս|3~G{SNZ$bku??}޶^Ps!70t|)#S|4AK{B%b 4 mQ7WwڨbukGTfXm_d " I B ES {ơ@XjeJIΟ`y34F}{E,\޶`{(+P1Q2"xj0B*rE.!yZ#6'2 RM.$B(,cFY1`VaF , ""H͘qBY#xܼ#|{Paɯn{*v-;μ8zݯUqEsX1H`C5! /il$1VU&*:o M֢¯I1"IJƈwn4 N Bjrq 3TT(r{ԥFO(7sf9HgKEsX i^ =|UJ $Q#lMS]c- XBMoj@{4ějs$@cafʭsi5*r1xc8u.wc7 ‘gJ%Ib8,@RCȡ0,YEf{pe3N6ʺ7V 0ɓ:'?(x$9 6aN/zrL,nd+r_İrI,)uwˉ;s7ߣ> 5rwWI̾kFfelذTG;7DzFƻ2?LjB:{Γou9E13D$H]d};1X|!$R)W8D#W G3@TT_zWjoP !*:znl ngZAz cQ7—M&EeLQ;Mec*j$Yf:RMr1&rtDQŀ nn/+ZX~_P M*"6m6>Pr@+DЧ:sdvV9r8ȑz%8ȰjYӐrY 716 &WR)nE ?^E,EmFXP -;E)JVMPUB.[!})IxϷGUSo_ukkmH%5RO{K`J8hEX6 6s'kUQYbhƅ5j@m77s&_do!<[-YNSxB臎:$ƪ T) ~饷wſh.AQŜ)T]Wjsgsݼsx?LOyO=gd3_{j~v׬Xh~Z{=wZΏڽK`[wzY?s>|rķ9J쒺{ہI];Fo'2ω@/~nZ i:pc&]d;YjiLʞ~)9RnG W!,֭-]on^iggs?I\/c?g&ΓvZt?>C%yИ&2^GI5rh!eZtw{X%yYq\-U{_>_ >¨_oU $!X|WI& |45"SWSK/Ӗ(}bBQˣ?+z*ϦJdHI"Pp@$X(H@:7] Aye0 U5N6GRe2wy~Y+yMs^%>Ygw95fU}S*62?/m3̭D~ ωHy~B﹦y涘",aNm{wfoK{+? _~?{%'`79в̦ca_Gj/ﴛ]Q_Yt;=ݿh~~Qϧܧr~9NWJ@|o>&+K-zgW};ͷ 6dB$@/'{ƿBo_ЋnRL5EU,!A.Î۫ƿD(,I(iC%eΰgd'y_?GuP1=>H!dVxOqwEyvO9$olb׺'UBh>e٣9Xխ57!9vweW~?.s|Oo݉#X)YyOI wI_ =s1Ɲo4W+ =Uu֚ e߶ e8m崜bhhmn'|Mρ}_Uᙷ pnɘL ,E u!aQOω샥:Ϫli1L }sژd`a6C T> W*ʧ1oA(Ck" b~|W+gi6LlWO}r:-!ugl/D'aJsRAXdjR=+pd[<5}w=&WU%XsΓAD,N"`_=+498J aX${γaum&k%gL-J>˓Hpa?}78|DrAw{ymDJ} ]K~ǥ=}CJG= MB@#-Og^b@B'd z '(|\K tW/ :[m~g6Szz<Ճ/oljٍO2IR @" @(IRUud(B,kVWm\ߢZ}mzگ]mVZPB"@ܒY$x:@; b@{C|Cg5kiެqvyt0gSK_>g EVٸ6>l&w}ן|&Uo]vspտ[%zvQ;lx~?}3Aw3><+za' m:ZyKfM; DF)(3UF0U""^nxdz7˃7zpdI|l 4bTlTѥ8?knG8]߰r%jncAi >zgy'ciW+Dm!I7W{~'xq׿Uz3'<.[)3yw[Z~fWb4{L܄iy/ܳ\՜Ο십^_bC qqBK~?/̫C&`+H_(lyݭ=SV]?+7'a #XL0vh2`]0 uWNeB@UTãL4S\RfGj[~ϣ|kyao[QFVSw}ɗ{$<<ş{<6ɌslXl>mk?7cmmnQ{ogD{ /xc|-QBRVX[˕g~IE$ vz />? fg 1 ]@@(֠@'t+exx_Z2u۾iDqgGŠvNosjnfUsF[u#7~b 鼜8ϧ@5q;<柇ȹ$zo Wɂf`hcH eu1J =B% ày2@2!73$ )2LJFleZP[^㔓ͨ-`r`TC j>ķirzۏqP E1fi۞ |LYQ6pv0*?` LvLzʚg$m T;|5f{e: Γ{2JKGff,Fkd  K\eDC2zi Y/:G̥d#;w9DQ bG O= {~Y\zGwc[;qۺQ> _*ŒN$XObJdrVW+bCH@9HP$HH?86lJ0*K: zb?+y(|5{yCIy-wO˔rc k3ioAtoNJx6SɋBX0D}z)  8*/Q?_xCϭ`@,rGh/3 wV}1<9}ln3+d}|/:l]]Lڶ׳~X:nk^kOsK sY؜ed_<, 8b " U}L``C$)@ P@DHP?-//*j C ֓75!)ùb4UTO<f5Ɖƹ \?x -?8? #a nvF$ sBk`[ W :Ǣ B F`Xf#$/qyt@r-7ڕxx9|UOU!5]$D] Nd$R"?(v 0a!4@@$Bڽtm".l[~~UcoS޽5.b;٪s0_d!Dž,Wf _3kT %ae!uOE  G N}oS?Z Ī O+|ݨ}H@2d$>BHfիjc9u/ݷL)/V|XFBI/,@^6/kQ7U_ ~kQk^꣋tٸOS=9(K8ݞB5"|ӢI$ہq5vZb(EfsCF 8{=ݢx Y$>%*(,!0xmcY!!L'\(O8l!G*$b5{OV>_7t.YW?GGnĀ w7Q3b趛η ;ii, CqT.Xua7ORb]DSr fItb&c mka=rM҃(C; [,Z@/EyBmⶨ֪[m\kWUjV֢֭mZ-bVګFڣU}5FѶsg߃TV9*؆wsfσuKL7}mBf z?j ܧ}e]cGr8\>}0ެ!%Wт_-kim_έ=EX+j**7UmruڟvwqNj*k7dQO1y$'HCa6Coq ު!L 뫖}ܬkhڷkR$?1OxHC$. 5R@3ޠ,i*H(U̐fQ-D9qަ; Xn:OgNl:wi Ǒt/riN$5` L0ϘǥwlH^ce ` '١Y~?W=™zp(~B˻ˋSV,CI`4UThdp-?Q_~Ρux/m'/Oº(jj$Y@?\:gQTOB{U[Ob㏩I!c_j$I ,!0%0@ Wd Ej 0TVFC-J':dgx,94w>u8]Q5s9 .$K玩~g<[{>2A!I FaM$X4x*?wY]uVav,.I-Yf@zq _۠  D5jRS_)Ub'8{pxB~xLEkd{O>XRMF@A,1Mzx^lq/i/W ^c3,z?쿮ΦN<bB7e[V~j 0PB !΅0ő{g?q9/'?1$C&]f;!ŭ{cozS?OCbU"mB8Vs kǫUB*SPPCa z2?Ec ?_1AEXGJG6@-><*\nA HL\XJ 5 |'ٛ$_."Ҕ`#5 *eL5"KcLQQ|m7v\!yZ>/~x\/҉.8oc3FM Z{gD41upPH xþMG?CLőMp_]-lx{s\ .7_U._{ZRkŚ̥1l 2!$_?N]mrjȈAtM*P @+O+ov*z{(8.5t q3yL3Ľd#w3tb 5e0|%+DsXu=-w{5E7 Ӈ -*ץdM'/G4|p%tRW`u4gཅ"c2IEsz+FZaH7t$)`+2~E:\qm ns~87: W_w~Gz{˞>\qG"$|B*0Q{%㾗t~D{Y Hʴ"G-6Gő҈OFML;e :,Edmgԥ|]qMwv+`?LJ0y|tűeTVp(@af)إ!e*穻t±NlB1p\s(BЁXoN=Lezn{`MZhTВ%3i Ԍabi/9}EǝHG9leEӒY !>W J0ԥt>5hCP|KE&cN]Sb6iάa)Sβ)ńc>v#B"E~U&ه _UV>:FиٲO4_o3aN>OWC^kC_SD^MRU ^hrfX]iLd!e(o\t.c|y3{uj ϪL̃/'6/myۃ>I٭E[T\pj϶}kIvP^ԛ,$fkU@o q]2)C 8PP$wq4*q%^(Ǵ)|"~!G'|I\&u שakknC9꒑Tfld5Y)/rLh \nkoI0G8} [fF\a@ U\Xx%HB2l@4gjI1Lq-;X<*g%J$`Hr/g;qR7(BN-Z(HRsmJKZC{TaT)bUfa@%$ )P 5a2%LSKl73-K!7T(d٩TM:w(47bT.}I`I)F EHrj zO$$~F"wGD!@M[ 8M{'!Sc&3s6Aeh5 BR{ ol3Xtd PE@kpP;l:"w~y`a@/>"qELde~6;* hCW/\rx̓nt_Iru,L[T 23UHzM3Y)w=ӍS"r(AiOz"Ż[5scdc;?5Sh7`;tVD-)UpN*GPe)G]}}Ő=O8RpUS#;d*I=pjTcS*3S"z$:_b@˼b c“킥1C#>aĚ$!|0ĐAL%)ʹ`&W_9t`Qz~ r4.p؝IeSXfj$JB1dS_eh,}/ӌjw iV8%eNog*4h=z&YEm%HX:_'QIXFvd |ԭ3ڰĪUGX 9QLT&!waHڋh) ,b H dq{Ѫc*AYgv\w6 u5 ڔw(9βv`9c)O`h4P3jƫEChI[5ƣ5 C%A}{< BVZlGyyxE͕]`//OcA+6{(Ff%mqU^\Mh мؒ V33kjh WrJ㣡brjdDXF)$aÏy)Q_k[J+_NP,Aqe"?该(M ۲_IpD,< DS$apG9(JwQEzQqcqAW&y5+X)r[jjgҡ,41MrOI=OM>.͗ /|適;NrbejyOd EsIvCg19^T d<fHkFQߐܪ?wK@exXbt*XU٤` Dn1 Vv;:O1r;/yyBzXpdgtn8807-\ K`Z%E) _O.ZӮ@q1sFM9:<1nN]xD[W@nlu_7u@ }vPGLU2_ѷ IUV%1ҶDҊ=.U6B0a@4dyvgLcߜq_[_n]ga>s6]iNiTꨵ@YvDgq9&\Cl; 1(xE'oYOc)5== xx{9* {~xȡäԄlwQ\.A{# ! mQ8_B ig2`9j@`ʪck@+gdS#Da2J-ub@1,N\ʩzh0@DSDD!(/Uj:-1age%5mIl·ܛۣ#(ŪѼm$Z#bU+F(fn w_Ϟ\ϋ ' .e,z8)&$Hi+A jJS~y( `8N DoW#y'7UιZ8YP ud! E-ޔzbs;Ǒ*D@+ֻb1iLb,`2i!Q<,w6Mid 2#JRBoulٰkiu?|S/?a.jY}f?4-DDD)ߧ7mҾbe$`g%c}S0t?W띏ᙜ|MH|,BR[@ 5tb'uq}ě/1F q00 .`qb:H- H&=` b=+kbRPF \́ڣ$Gь (,m MƓ3;3UqvrkC\A& yT XqPT/Y`;s&Y#mXΔd?q|g_381ZX@h-M>rV]Fy!1,c{7SGEV}gF24bq)PX#yz^`u/vV2 ,B'R 5Gv|xקegrL#2IWL"9{-& /MT1# &flfr RY#$& (Mظ"O𡚘.֕\e<HW)`h!@ʌ*;m?ajg,a$ĈBvW]&|,VSmQSX!, "8u@xwJׇj @5=뷳8].NbB@iB"@fuS2E` VO[6bg'ȺvmU.qƞ| Mj;d\A (1knWz7sQFEםڹ1y2Wy(4^cIIyU 3x^ya,sTY(`(FHpſD̍@@:q*ru_|70PZ8L9^IXv!b XO9:}Mj9gehuE @S7͓Gr!v,-{{˟V\/Z6Iȭj&]N|Td˘-l04tê66|@=Mp6>qKZS^JǑׅ#ߕʟeOǒ'Aw>@|} ~P(JZD)N>fT&JAɶz@ۯ 6?rxbiQ\}1GN/tLg02} !@|q0Db m=JY֞}YQqiQ,CJ|sJ:nfKxɜ^*WtZago}mj@ F"8yK[N;n>}Lw@giPQ{dًSϳsegU|5/jm^fǨ28>3ՂQLz|N>l$1F}*Vww+d`-<ɦ `Q;9 YfLy 'I R$m;/ 7:U YI4ӈ0x,[%ò}bl#0yz. 2 GVǴCc/<|8ڃB^ Y,.G4"{A_>NzM pDNÑ1h7!y'}>:pDjp"zA-:Cf^.JNfʼn 4GG!1ګc;/ i/VtBI%UG; tH[9S(X %ȺKUf!tv8naFd-HsHuPj=Yڔvijf= Ir.{T%^ZlC"RF&EC!X ܓzO~ӧk #ٖپ x"Wc a1 ee"0.rٵpG ,SsM Ut=+DCAɇ= v?7G-f= k^#)dh&``ƬL-HZ6I{^!+\fQ։~%NpU 0'Mԯefh<9]Eiy=~1 ,w^)k!/ݢ'--g!@$Z@2uVLShw@I&15RCb:e.I %8#~+yZSEA()*n$zy бb|L^nK8,c RQAĪe`l-& sT's}IYZ 0w=js}j7 A*Qa%ks-n=_'׷@1 e/}$ ~]j{zw'A']>0Dz% ݣk 5d@ohNsq'ow=6 U پat$ c@@ 8#(8H2^7~q]H[+T ,@) f􏨼/}(lk!XKQdU%CVe*HIHQ H@ v W@m4e'#lmI?̌0fC5!b5{ \,p=zH}y^w5ox]8(eR2E2[6BBŒ/1 -M~G6C1gЏvCrا3i9ef\[/rd$]V౩?ߦp> 4|mvH#{ ƌOd!k;9[;>WG4XoW!DxURqf>|%%gGd,;Yi4n򔊸b"lO<2чs4Md뢙X44+>iy|ʹi$"-#[#X&ngžtx1SZt?Db1$|#\2]6Zh:Jf%YeHAr)w⣓hV Ga>OQ>Q5q]KɊ V tl)H:}O?#]EINQAj+ELg Q+ .EmGUNWa|dfKzu2{Fb G3'īilW║6#@hxU$Yp~D#;Joy'!~䌹hXw%O?ԩk~(g/~8X6rBPpd bţh~pNߏvשּ:Ο1 EX0~ q`4>d%\dm?E <"[@udJܿrs3`@L`:ߔ- *D6y8<>'d#h0g_|j7Cf?2¢7F0$d*]HKl2Mv*qӼ_F~p2 o#`9 >!tx[j*){~|IU 0ÎkyZd)jzxfs!UA\{ۃ`mǢ:=Fy$Hf>\ܤaU?K=MW>}ⱮR 1dpI4 ΖV쌻*1% &sHABC: Edd QO{a30 /*nLv( B0.Eh~RRcpvg9@\AdTMUAު:Z6^ͬj+F9+?[hr14",[k6/(pM&aOr첊sgij\nW\Q-e e'qCF#?}a9H2g'A@npbo#j$Q'9) gK07JV" w0vgBW^71?U'A"p/rD\.!a1*M$P=?w꼅 c˭ 1p?ȝyLf8ֈKxrtCEP`1y> M ƻΪeɈD<4aBlUA " eG?ږdaA8N%kPnmW+:E's<Õzշfsٱ?;Y{_ٸk *N9|d;z: e5ie'R=d F 'd$:&HHB1!'cD "2EyuZCJXnJaft?޳)1\'|ϯ}]z#_b-Wv'ā !@ɹ0;%`aTޤUfmI8uP#$Y($ ,mHBϝZɕGr>_?? ?+m S%n@HZֱVa!! ~B&H@ ,yP(=w:ez&ih>-V_ڳTo}I0daA'hu$ \G\%m_өuAJT% [j(Z{nac(BH挀}@ %2h@>'Egq pU)p7{D BA8Ɉ=׬|7gy8۸EY^c}Pzx J { 2XܗEEq0FEn  8U2Ù(Vv%tfdA'ݚV,H4(DR=g' bPE\'p,;-'SQ1XgsD)×z(lwO:Hu5[÷8Z3AeLYxD)!S\` Hnb D?ßqy# E v|vg|y3cd-Hx9IVYi/deL.t[hM Y#^0[^3vWp9]@ S:f#&MfKBֳ_4?Ooo]{[_gr9 yX[ӏv`9[reJ^uQi% A[v8BS](=Jnۂi[z( Hs`'s仜~+]6@fO;Ƒ+Dž+d $[T{8xz(@7Gq McHYE :벸p,uO7?(헛dH @;ʐpÂr9Tp^μ#G&@s,׈Uc@8HbZ-?[jsyu;!- ED5Φa ,z·Õ1wD*qL?4](B^ ؐ[:;ڹQQH9I}) f>;GSer]yXo,4yJzиړN}d4XRi Ad#vE@rd +H^%"|z,/'>𒖳 nru:HfO Œ7_T{jnA1EAynZJG6Hѐx;(,=T D lg&"݋ |Ht(4*B3.Ŕ]jлY.w'"< B$q4pu8$8sY2=(@8,YcFR?һ/k]Gc+$"W@GJsרQZin8Cz2s8n D؉$AoCxMWqazQϬ 03howQ8:b \ڝy c9އ9NN}4 d5d d0\&+BWR(%܊JJ/j+AY -RQGU xݓYFrr" ,s^&q#1esbC]ٱ@'dsk +Fh@tƄ[H4Y*|&/kp!%|:+۞SyX-Ʃz`{N`.ԏJ"j%(jU7I)1O&*-IBJ,w&MH/N vP"l z$dݺhfs /~%؅lrOg$\ֲm4dzȃrNG(v?#6h5 }]yeZҝj@VC.I ( DY $xPi85UDؒ>08 @ mLN3*yq ^NhϬf8y v5-7ZəO2h}@?QOB!|Jm &k:|z_-8f)@8Fb,νYe۲珩.ʽKh<݊0 WmODDd ! QoR޹0~ &x< !D+AY7?Y)w@\%F< N6.v k$0ײfXoN]UKRjr7weSQ_g(XGc)mapb"AW%YbТW" 0xG!wAeަ͒GWW<3}d@H蔄9}-fs Ƌ~tJvk%. ,{q̱Vz_'[%q"BIv,vvvt@;ܴGе0۷/mwA\-1Gzxc[6O5,F1#`l%"6TA *s75p&_ Yk=_XC4z;Z VN %,}<儲;cP| 1ywyL?غ -L1q|`B'+ 2Qh`_AUIi8%ce?rH}<؀IldG>6 z= UI@#A\޽GPRJ,#+/^{%'  6c2wcj %5 wl0Ǯ,UgQj`l(::}?zWvi6db*,Fb"RD=6iz.K$x!a!1&Tq zt(0pEgޮt mK"J7Q-SQ嗇%l1>ZȍZ_a9\Jo W!  >4Z"g0hQ|$"u6m e' 89#gTopMSci #?{yFV\"#6*w`(KrSA1## \jcC}W>%bh@I#DF,`lث]߻E /\:}jlTy05ֻjq}^?KajRmd|ԋlT_;`S"y޻ή^vfwE:z2ڱhb5]_X̋\йJh)#4GS ﶲ~ci̓ ,7t4"`55?U^%`~{C,1})PV8frT$ goԾYjZڛXԡ]$!JCvbIc*™.k![L+rjWs@_oPgUա͢0^ X獕q2\Vk32.U{ٰ\o߃- *0.bɀ[$r52hh O0na/np6r1ͥ0&0+Ӝ#.g ՛/tӧnpNwWAՅWR l\-m SBȜl}(+<'L.tBWT,Fo̎`g'mJo3vDfꋕ e1t"JO/2x@ڶ H z%Mw ]!P/CaSQk 'cX _{8WR)#;a1d \3QU>k38 ]Ŋv. +C)hLbk$MQ;c+p=Ia.jB0WZ^@286HAń18WǏ{ǓhfmSDu4!@*@]5rn@ pq{RM3ڣ7O"יmB7NT6=)ž ( CzFT~RRD0]6K*{؛sX'CMIuAXv{@I_J8@ @A$fi秝SyN||ٰS<%D y2 #E yX/h7?OG- J/`ԍF@$$'1RQ2F)@L>L 2minB..{0ٕc^1@ \<ʗcuUwgay0D]qUQ+ѪiDJgQEN.0!أo˼@vc/1r^2g³lŃ,O>x ć%UKtx8VGdi` lG^'ɟ{vb<) G'x©#gv Q|j5CW2=vll޲DYx<-kIr46hh'HU]uK%}~t v D#(O> jdsL1&(-{ q@:`f3S.)!me-NNo}ÿ=|p6i ۽ /{^Owttuǥ#&N[^PvX~`"͝Vi(Q4A\ሲQ&/IES1Iyh2Քhm8\Gn!?$УFSn;5@ 4]@.h V#CHbe%z[Sqs;mqakQ=[_A-V Z'Qh65^'8>~$:l8IX#W:U5nu#*Zv-Op2!Z>M$B@<#[xh%?$Hv3wcﱮ×?(:N &!YeM+)xBz|:wF|#QH'̓r8^qCJ9<._R (ٝ# eZgI%]0%I𗊎bqhV\Epm2Ky <'>+ ^ӅRLC+Q!:VR&æ=#x0m`Wcܫza:_S go:a ?޽Q+x0nyGc}y7nr{ e_ľu$s|pVrMpuF{8c2Zoe;r0^?}tEWvc<]yԬATQ:vbDVaܡK0<*RGBUqdoYvr𸔤#x%D p+!p:*y%S]baW *^͊(n'}dBף4Ĭ')?A}ؠ.Scke^e7t[sZ{g^tl8~ ?Fw;gƏ+&0vHBO4 wOLGYPY!0k89"xPɧD nzlG&*޵ 0Zj׳2T.GyQ۴kxjaPA10do޲s0-*R@I٠!!j*ִn^_iCWѫ~ Е@HZ$XO_+y$@ b@Ӣzvd8VZr?~s~/EId"l^kTU ,VL ńm~u@d!犐 )$F,iRf}gsAd!5x^g޿k/c=jkb~U\mP ({[˷+~׍߻m{OܸoJ&iԴC $'` OF-{M XfIc˟]{I<_ӛFx$$&w$I$ K׋1hv/dI;! )Ekm[V՛Vת,SjzmY?k9뿳'O6>Mi 7jM3@I @I' 09PS! 1BZ~l}^E, 6R / m *J]=ݾk\&b#vI5$&A $7@~a֬CazR=138h=F"BE`=d$6Y$rBfnZ2PM5Wj옲j (d= BNc! H䤐! ZC?q\ֽq|@' d,ݠ~Chp ԪX$%09RvC=~Pw{ý]~kW\le U hڶ-E_WWs1IHa?Bj^g3j='C²a%$[[Uʪ*  LVzuȶSOtԆy_S9@3e~ܕs{Fd.j@61NZav_lNf??<aH$g&jbS<|J-Wŷ m]?`ݼй BN0[|V} Oȍ+;E.Fh{'1饃-Vn~2RՃz#xydZLBX>%y<1M&*'ǚ q@ IK),a$[+@@Hf0#2?,J)pg'U9S9ZrPڕZ6sak Z;?]hGH$% 27YQek|.ݜL_88B܄-6mC[RwkPc1H Vg,8!(-ND>yQhV +T 4\+Eʻk_*m(#3 ?= μ#;',$_l\8hNp5⒬\V/X $qr!dg| S\9L-#sxMBRD!]X;aQ':  N>SH᧰^9Zx,# W ʓ紮ײuSܧ`] lOg9wOɝl7a-/.oOܩe=JܔLw6|BN[PZK`R_ -0g/n(=r8,h$J@fcBgI\ !51 鳎+}|W#co4ӹM_!;3Z FMY 0oo"w+XJ)%%BP9&Zh7wl9!1g>+T$Lղ3V ˜ =}, srY~a/ EZ-ͫ}$;4%:B3ViZr,Ȥu>ƛQuBS6yV`v'1R݂ϷsaU/@!e$8SeCG<泏7wɃ}彫Mq3Q =9gK=vQnZb쬦8f>c)[MuIFNpV.p&=DmkgБ5j gm~o%dv{|OI(JO u|=QYr*^,n=H~ÜsԲdWKϙF(9ުÒg0$}t8N/Mô CQ!Dufp$! ztۭUӅbrq"6g, x∷EBW»԰?MC2Kс39>=VκY֨X:C%r-鳎7q5~fwxH+tPvHvl0 פ)L|T~ sAI**5um?;܅d:Җ%h+$tL!XP%BcD n)VwduQDõaBywC{W0Z64:BTPTͫUB#ȵr,֣950Ult(ݮ?ȳ1V7ܦ(m׳Mޛ0`WI 񢘌^kH|8Pt̼".vy N,e3NC7l}&T8rvΒa՚#%8f*zV2E^8@ =NV"%5,Q~<9wg!TP'McFSڈQatɊDA /[KAa4K|U Y |̻r2%|ӆ_wZ2SF_¡2C1[BXҕ<49z/S༿f# v'{odSmW-|ܩFuc2s $.38Yyk)}cKBsҸa~_LZ R~0G1e0/Rf;Obk9g)KW T'n,G"|hn%:qVT5W*'}. B@>)^nMI֠"*@$ ג(lO"㙯`}9JS6B R;WD!$%  WUW6-;$hoo5^,.4pxMwmd5injZt(Ɔ"!I sgϻO8Zs&/h2cWKFI fGZbM޻c6?wb(6RFL2@Y!3rJR=J2>?/͑~YlY)OE2ٺ)K @F ?8HaA̔k~n-Lum]'26Jj@ :TNȗ2I?WLmI ׶[Yњ4% _ɢ $X*U ӷ=47I>_k!L$ + ZmUJ&lHx{6N!dDLX,>7?+you\c"_y緢Mm\jyֶZ2~V6f( >.E_ YmG⍀=2PPy;iφGQ s,g۴t;a ! `a൘eQYj=odP)3Yѣ F:{ \$HH @ (w|+5|?eC&,Z*Z&!zHJ`Bw'll{VjkTiܷY-leI_1p-gFz2rQR dbyO^nj>,> h7tSz>Fҁ?U]7SzQ ".9*5.niT*Z D}]Fj<&$*+D)Lz.v{D.*-H `y0j##{6eo u`*Wz.,X{5,y99314qRqZk|T/ u'cf츆 r9 n.(3=!9 E֭_(8ƷOF^N)hB  #(RYϫGsTaҧl@rUۢ ]wY7Jz?r[yt{Hv73o<^s0~npN燇ff]~t+[f?"[L5;ȺtXUِx9yUGO';|9-|=~CݪY6{- YKU|t[oEoRg[F kR}0/cKJ/Ir;K"nF},(~9~o[*Esi$ͩvf}K{#^f_|ⱥs 3|ᙥ~ erڧ2fNY_JJu%IY M(oel=g Fc%ޗ2;v- tnsnaoV\19m+f7e_2Xr2oq: ARKTgL/!xO`|J5(.py|.. $t{qxSUVvU /ŗ2Y]xw_>R z+R–3OcgDֆǴjsd0 ԩN:J1 24ڮEwP^}IwZe_0(SThV5OwD!okM77u$˽N/{s=Ot2@l4ι$ `3H 2SKg24y16'A9;~iq[(q(\.𞲳h [:i8Còܚcp;.vuh`F ClCixM7y7i'pf(*Ә;/B&Kq$(h/ q[ G6=~$,-ȧw9HzZmWх{ڝNY Pȥw4`E Y7YCy;G,}h~% Z4.?Vdב$g{)sȒ8W[ e60I@Oe~jNw]m^r/v0Ѽ4عӧfLl?I0ƀΣ_0oRBʩN0Ăg$}jo{Hvޟ1j3d:,jJs*T3xe_MqUf%OgIg0\.̚vTS͙ 5XBD,*,P=zf7[u:nR/h1-*I>]8Yܹum";Dj^?3IW i)#9@ـY xw0`$*~0FeK+_6k RI=C⸜sW)&̺9Dge|ȊVjP@,|D]EX&0io%t.}miLV9>7I*(a'RI Ϝ^/dcchB  O7 ,۵еӑ}e= ?rF)JI@ȬdڽmH  @XcVCx>2$XiVʱ^R׳y/yjf>`d=sBx>  >u5^t(S90BR**͝S+, =Q@9 Y7Q <lVrFն,Z9Lcu!ob j/S/bHaPX) 96!*RtTs)a՛B HHBq^'b,,y)5=2E' tנ:6$IV60QCB `dZ$q],9)ҭj7:7 :?FAf 6Son1(%sfIJgkٕ"B`I,xȲ9 O@!͌ ®Z5p~}蔽_zofOOU8]䆒bhOk]h(vrz|BI TtQa;7( H &t&~&3ҧjE*r<ÃS2u؂sYTbLd0vX{@ 7B@ fÈ$nziҽ_I ?=Zgd#) Cta~KpC `okYtRߡeDUHO?H>u+#ʪ"@7аʬ| @։u4U958F4Q䃌UFq0*TE-  yVbeQ `H ӄ/ BryƋdp O"CΜs5v35gw$x7,pZ]>:Ipv`SD=}mPK tL!" HHdP mMDn542ne<[߰f)zP$.^$<6B ͚Jn"%N J  u,bC!/Cy0fRly)Y@t{XwA2~R$@$0;Id8$:~_Isȡm$/[ "2,=CwmHo "k[Dq58Fϝ8FG}XLMf'Z=`8|AIsNAbZjڴct ie v`P2H7^}O@0Y[|G,>`oS;9p:GBH!ퟩ;QWu]?\~J7e~TZLNysQH)!c@$:fe 'm[7k[a}imlN&Xo2egsE HMs?E›+Y~-)Щ3|` qh|dWz%svE:jd\p;id$sR<ܾbbSK P ߦ齲J>uM|UyTPtha؇s(?7; 6-/Qo싿f‰6k}mv@roEB:N4=bxVI9䇩3M ʷ tpCRR ĎMV#~SP<ԝ>86tYhG |xdUXa&S_Qf A`B(P&&18 丙??yAD]cq/nD0 R ) HN&azc8Vu|L} %[H$7qݭ7bCOEf]3[.$IZMe^M2]RN )+L?Jk,m"ٚ뎝삎 q00nOʸABM'G҉sBj{lGOK_9O<Џ )a'%5 i8i~+OMRH&80xf>5Amcy\:}YG="'8߱=:#*wQVB'SWIMMU;⢄,φۢRwz;NQکy;.H(Uj;j;.$"pN筣I'@*eW,WE/y84u5T bʪ`uy)fWR<5͸s3H\hZ*,%r2*qA%Q<~o;F" `H< i]g{b0 +SL"xv! dҀP4CZ@4rG$:wEʇa+lG"@R7Ɓt `р 1 7iE$ MJkCEшc Ӻ*ra8p2E{ Ɖk@sKI_p'wLpّq>{K#ɫhs(\PŃa-U^]O \a:=\XzK ]+moͤx-QA6SRɃGm;+;7۝#Y8+F[[r˛)TՎ]o^ǯmgsmM~ߋ6˷2䮦m>4jaygY-Pu&AR%sb6{=!3 (*tֿ,^&F1A)LQVV*#akjqidwZh0g,f%Mب{|DsEB\c* K'(xD oryRoĎV[c:=^Df 6<Y4d@AV#l.J-c[ky9ZotcJ#^'k3eL;j6F!|Ds tکϝ{y5~ jMRgJ L$8*+EҩHSJ_[ǡk9f.YEP^zҁt$,0zsV*E-!$%]1nqpW;w|q H8?"@4[uƱ6_'G+p peOͼߐ5ዠ C' A|aczJN8K QOXOEeD "LkGi,*Y I|Ɋy7


w͎t-7&Y[[! $ܿCӧPL0hH";R9-fM-/|G&$0Aa!j?rCi?Z7\-Rx_we,Z|K`HI)T5 Ϩj!Jb(~FTDm"[/s.AOy÷~O"љ6Nt߅T+̏bV'MTNAի˱s>[fq1 BReHN*д&Q[g3n=/N<ڵ%$y[Q27?22mNwEʂC.2&"*(Ìs36z?q]wyj7ـ5J +Ip14s~?L,v@)f/"{ $e(`ŕWT DT/K5\EOcFjƽOM:?+иꖎ Iko UxѾ5D`cr` T䦀%/0q˘`F`@yHX7H.dtU!0/{J Ltpdd8Uq)Y:*ZO^l(%z"=1&[F&߈pP~߲CPY"Rhs:Tߍj'%-̸ qgz9-y A8seqsmgw hؽ_w-'S;#t\LjХ1~t +z!.nRZ5FՊԖLabVtp6UqG;%vդ}9EO36\}Kں6ۿwCԊ<|5-8Rf&cWqFnOCPtkh48Nw\#5}ȸ6 CZ:=5m6|5.S(aAv`b&X@|AkN|u3Vf0AnT)$abƒj&1J%(z=1ylW:ƢHH@n̯A8$-B O!7sE$FZ$!-^^UEKȤlDubMMSq4ɸHB]7F3z c(@UwɤwX*!}| 6)l#Q4T[58󽙈R9 }V]4}[;qy$Piٌ"-W;gs WKj.&ުw}~P;zeA<jCvT|# ]vrbۨ Lu!~@#iIn"n^kd * EmAnv:K] ](gyG`ݺ"ENׯ pnLTUY{]Դr, YjzUJ6_nFlmCUM yz O^wyXC&V!P$ Fsm^-}Y8%1U(u,wZ@@~]t]çh")mݰ~d`.A(>򇗥 p3Dx೤e<؉VL~ ?:=$D $2I '|+AZ,vUv]?okc>\)$dwJHi60/LW}Ee_ W,S0l?΢g&{dM4 mlHL( d ఐ#C_A{NkQ@BPx$樔?NoimMlvb+`5U)Y!;'~} {t &<+Iw(?Y0—+Fv\ρajU% a%!ɂHy1ńZ Xv^V5&,XJ 2)("m(aL0ߛn/o;mkjHos\`HCFd0DTReJCOL%vogj蠪j'aUoWZ-V"֌P8yU[Hs*q{ϔZ|v=UHI!2ww:~r6kIeӔQhƴE1X֍FcU&5XŤ4mA=hONkd5RT3l)"ru s.1K bDVOk]vZXȤ~'6|%a_>µsmqH9E&"B6Ə/ְ?Q\.iF " ƠM۔h弋fϵԱ 5ACr>ԢJL4o?D^mf,U婘p#ƾ{\|/%cV D&뙰}ثx֧"w ɴ!2VfchG="[~5nj61X3_5X6-n t٥X*i)xv2F^^K?NPaŢ[цÆMEڵh3;sKaI!߫b#'1swo6Y Ǩ(Ail;8b'_v92F:p#i֍ME)TQUtU|Kʹ-bEhF(irqۉOo'Niۤ9]"05`lMEe$Ux)_U*"{DT(2E_t&YCzѲVWNw{o\ϵ]II*1cIKsl נ.ݴ nrm+f3ڵr(PRsHc̫W0ң0 SΠq0[_{F(TQUÆӳ-eyW\Ze0F1#͆/k%.w ` Ŋu5+=G Y RI>gk|ȱH18x," +*u*7* uЦ2F)"f+bI暴(!krU"1Oj)eAQZ/dP Ǿ61*("#""k2׷MjxiQ{)3*E;/]IC4`DTխW]`+:Y&76>ZZ޷.\^ͷyNheyM-s`b3rY3>ȼ<#MMD$(}=f-y8a%~m|F4{\:9ٰ Z||˽,︚ MBx$&>h-mNEwb}`!.\5{3*/cXԕ9+JBM,KX" Љdw#mPpۋ%c q9*?1fmS\;ɵ[rX@7gW jE{H8 &N3*ckԛ5c|^}Z~TrFܾnEբCWQЊxo~;n8n^TM(/yl J @ P}?Q-Ö4:ڷ PT_+ 2uOM!Fun)^+aBH 3enfOHFx瓙WݓYv%89 <:HQ."3 ?6C7bJ:i; M mydž'~dΦok,sTVu&pCP2#+3gOKI=V|c]KYw΂\9988cu{,(HE~|3P3|l9g^}nVu-] Z@seSuzyD۪2mȬjuӋ%aɭȥ^Y(إoĦsә/Oj5jՅ5tͯH@!I2''2u9L+2J]OaKCTRjܴ#API?e ~\Hd2$c7J I I$ހ@U$*Jqbט&6$yrHI-C! $=G!3 lSԶZ^˙練.PlI(@A4 Gۭ k\L^jgm=$ܨByVV?(VSy Gdׇ^u&>3 tR"ƅ ;Z!=}q$$ړyfQZHѣE>~Itk #ﬥL(mM |-Qeӄ/$c aοEh悅R@#:AQHOzdVdf-R:f©E?B<$OTOjY)b}M6/ -?@P O`rijJݽV׫+?9~dzMچԥv\4pZ$O FwmNmm7()o*ÞhoU[%I3& f+U9!Mo_X z/ fCԁ*X漏1I%,JqaLÒ!=6Rbj3Bw2;h} ]l2Z\"!rV02t,߮l"c araK:']~פ@&G9zj\%S.8ìHrtO]0an:V֧{``alxҕJ2Raqq:̇y O#1U3 @Q/A{}=p1%ݮf)/O 1r!+; Lڪ'-2l"tO4a_RVJNCޣs"9~d>޴#}Di$dwaKcCJqm  DEϖ9s4+VVG~|S8*|:Xy?tk?ࡂZ3WNSRΗYBvŏm⪖o6]S 1'ZHY?Я3:TchtV¬O(jg252:2:w;9~7$K29 WS3ɒ,ؖ #'f `lOC2CsĿҾ ng)l:IwV DU%CY*aU$[VIBK6;z4n"H!\#4 Wnco*ݙED-FbH&p8$˵j-ٻ0/V7 L{ ndOӤ<?Yg BycP%-֢D: Ԁ5bO (gKyJHNؔP&AC4!D噁d푭8H*Od rr6\lBaM$ s W&l{x۽w8cE1>2SIlV/>%ص<2SAdF( 6$Ýzo&ߏٚLr* ] x"̐ c4B@ Hy35MJ-X#~yL 蚐` !6FZBL{+uDp)$" 4KouRICC;{BElSgm RhT7KCxB2gPmNBfq{..#4q7Oa3AJ: \-^+n e]P>:((#2_|{l9Y]*I?y'$%c+w %4v-)0!V"_w> "]gZ;I9 ʷ˦\M B!AP0!&CT7p˘SQwIax vڔQRܽH{82, ^0=b:I2jK|J>N~~cܴ!)Q"$6g|+Q@BIXw%j>Q =FΌ>qFce?ԟHHU) ~T,*"9ysᅨSfYjUG'DdWװZ9f;}/;2@݉ ^V[yNCq={'tXz|u= 0Z`;WRY&=/Ìe'˭%Mzk2ti'Ǭszda@gv$@̜s\>"&H ֫&*Zq^mA6: lB6jkhm{h /P靗Nk*sj)$*FMb$6x?^17;k|e+Q_k=Dڪ%*Ԓo(jp1+i[th载T]u{gS{ѷw[貔J#4VPw =Iy* 4[{Pp/.o]Q~<|>6qN_ DzPD/jdiYJ„@P{ؐ"NRRRRuZN\QNLyT` Gs:v8psVIl^萳"۰/=97\7cQUNEr]r^1:%:+xjvh,AAIڥ k5u+vX x7fk}dK<[Ɉژc,zvz{i~ޮ =؛1Kwc(R9|gi}u,bc)eQ24*L0ѤS$mG4~[ 0Tnӊ4{VXXZr]]1+ނVQiUjY׹ ]BlS{kpZʣσ~VaI}!WgqKC]Hy`#:kzœbᭃ+Zd<4hlO|IV#-X_,4qg8(ȈA1-G,܍B弙kkc.-oٛiŤ.)~T > "|m2g$'7feZц+,1ayc] /}5Z>=t(pisHlVZ9].m ̞명>G\MPŗp. LuQuSgqsj;zTa;33c!jXօ4 : xo-Qj>=E ˯W`j'(% (bޡ0 M ҉Ӑ;oLF7Hsbz$Zjz(P-V!Uw`֟ɦY"6;;AR"͜[ agePjo: &OkPAom{+"V%콃}!u!6\!˳2iӔib.syȄT=E|_t%9*{wmkߵ|"ny?WON)H"QԐr#T5fgkқ'?~Q2Hvktf#CJ&;|}/ꝿ]y%<8 6QWMqiOÊ;>%HnM, NyLpOSM$Ȉ$C j6D#$z HO=(*Ә-ƬqW%ba $~}}zC 6[N2̥&j*6o'PD]<=d+E(Oy{iUzqD$\DŊFbvwZ(&"ιد5YLdM\MDiZʭ6 <ڐU(>Hh ].D}_ctR!X)ŠKP7Q'c9RT?!FØ|h:2MڢFDM`iUѐ$lB$*0 Kݤ)7|ޛYZS0͌ @`S1aoF:D_(JJʕ;ɬv_jе=b_͋L3%bR\2ZďpmTu MB8- ^[_kgZO~+3kquMZ̴Y#3)r??#2}T3:@r-BSЍ̄(gb[[YIg صRzļO=Hi:5CLp^ ti"Zs}Yod,CyGۤnGuҦTtw@BNIπCuU;z_Z7H9%1cSswLꔙ,XlHW+lY:^翖KڋAAjd>\ɤQ>{Td6mx-nVȏ _LO-]9kugXPv^{!^\е6%,&:72d:wbYKDBFUPlsQ%[ܗ)dM[cQU{-=)h-bI(Dn{Q_J#|uCq.1`VAq7fGs~2BXY鍏_hCGVij {jᱥOS˥@o& :_O}o0`; [V]R$:}w_VT>z|)2*^Н"Qa̅3HcFI;.oYױdM O: қ1ºkxҋԳ}+@p[8OG0mQa= L߳j DqAjTa)FW@uxG ,mR 72pOmmH/VѧI 2\%D݊\$)2筘w vȾAV|1%/'I#8 u ps|B8*˔#^wJVrN&5jU7a}^ U"e…3w>]iByrL( %U?b,ߊbF#}%g:0SvԧT֭5CfA$5E]JKϦD5;d!J˞bNۻ>R5ҭ?c(6̉I5{¼;5Gd/V+I%6ed_ǡ,U .(]`cfP ؗ_*t6~S^m0iW1 :BX{+MkE鹻WhS^'|4c'89]w٫n#? {^ZF='nz}%!4TbUh_j-4훯z3uL/KR:@ų\(jmgAIs"΁m b> jLkY4|}Y,ӻk)AA"{\.nd:-- ٲH78#W 283ҳY Tkk;Nєd2=:G8 $PZlPZ7Nb/1JgD8LNh4q( 5' ˯$paH.i˫Ǭꡬ HܓHd>7#szP1 kz-GKSMN.XrAD 'B+GURjR!fGKH18@%k<Ƃ@Ϥibt"bNhHJ^wsaP_.;F{t٫ V΍W'G eaQ|CZs}9" ue/ [8 :.mȰy$n' jlH5&ɭla 0?#kU%>fV8Iցl IiڈTk);`\Dd+PrJ,ҝCX2Y3 "#ߋd=Kip-UmRBNX7`$qq?B=ܚ>TP:ZqZTr([A^]#MʅBYb"thq<Ϲ1׻D\bQ)eZcXHH D @҉V/- BKi<=̲>A#$FaYӡ !1ۧ텽y^D{vj}UeZ]lϞѠCOW}瓶67d;+{3,őA1 ~/z9l9CQ۫TȋY@UIG6޶,uXؖ]V"#,"=ڗ^A@A}D8F#4ۼР}G2(|}j A˯`n$mo.p4sryfp9 LKk!"ШÓ" p'(Jٟj=ÊzԸ66 ?Od6(Nƶoލ{ &{v9׃`-/fIdqk7TB*U45vI6}ez!O\U.ރ8ʜ`\džTωNBFGK=}6H7 l풰]L7n_C"eRfTfrHp;&zrԲs>mDLDms,S3*9Ogg oWk.ݰ[ZYI_o4CB xmW+bLD02 v ,/Y ޘTyx>v $fL+sxW@wx8px⍏P8q!àpb.sd:6|//Ā#_g>I UTaDF|* -VHM,գ'zdǡPb[ϹS)esI\v+\q/ꑕSه2@R01?1}-$!DHJzׇ_ތƢy39G]lMm!KspL@`.~PB9Wc` yH $Q07U)yG9t9-eEƊ܃hBQ01Fu4@5e)T3E$ 7@"@KMBXG5_rzT[ά1`}7W)r% H @(=2Nה],4Q0!CqWA5D G9 (xKu^T{ DxQ1 i$I^8^MZẏ5<vu'%e2u\P#uFEnk44dN @A as][A{)=LO0<6J&}䋚]ӕ`21jFwآN0SEQy̢9mRر ?ҰZS1 ._gdgS $3;a~ 0 I2+KBc{~Ч|:һ&QVO(ɽ@Y"l { Wy2sa1n׻>=N;‰Uzw[ƑgU !E9"CP {p/ېUG. Vmb P%bt (2¬ABY wyjir4MvtIv#:Faah{$3#h֊آrR) /bبxt v_gwx `CИ8 8)J}qۘdR7` )j6PJ|/ 'Dsc[|&%ڽMl*:AK#Uaډ,$~E7A/3eo$+řf.,4ڳA/%hnZXEE>67?} Y~: J@q " #(pcy)䧯zLxwn EV@kʧdD yB(r0c*Bz(\i_rLUod7t\N~D]Wr"`8rfL(szQ9A*p,*n˒%UÄj&01&jv?lm_x6 gR֓w2l˝r(B'#:k:"3g;0u)u"~O&eڤ*S#|3ְTh 6?avZԥ!>-ZGư=*6xtb4=э|{),ҷvϞ; Wsl7#LY_Iɽ6vb7|M_1lL/q,)_gk~ =HcNe- ;]e)'y&IgV=FZƒ!NvsݩG#ht5]M0w~C#n[;$F<qRj^,i1Ta܉HvDy;kD{֬0*J[#3 &'Xfb i Wm`tP3N>9EUG~Jc< R!!0_"l3}dXVK#kI3kHXIkk<;Yia b5[` E}Zg77 ~ss[`U~䫙X|4LN /)EO| w%$tT`d+'@ | * c1~~f&DNY!fLx\}X pVnlV9fb!쐩(={c'4Lh0J C,bA:jO("6#r-b8Ͱ(74{OÂQDɯY*|ᨳsDZUX|"\Vt>xTysђ腐dC#Z<,55(qLr b*'73/ sqmz~\vLUKj<*$r;geXY9jknj3z/h}/k*'=_ tZ 7ۀؽ ̏k;kK,6I-?xA=4ViS^"g  >xR.CQIƫԽǷB;G(gV!xR b9ͲIA]b8I!~S8 `KwƜ)]*ZyU47nD}ۍؘ࿫bwqɵZgYĚ v DJ$lhA8Jh:YozK>11=r{֜,s ? o)e= {V [%+ٵ!ZFۙmr E Jjr?] OA7 mzɵcX9Xc&%Ԭ=0ȸVR^*8p,d.r"r}]x@-x*4qJP?X>ut>4۲ςf';+)E埍¬F+GCMr+dt &9&&*"-٬6M|}%313=)<:leGzmq3GXwcϊcMW2Pp^q稡]fRe/!8D$i!Es9KEX,|qkt@>ўls|C5Q;E̓4bpk O @S7OtejYt&?`PMUmZF_:=ud,i${neS4;@y!./A2X19lji"&`UP?C\ 㬊+8|C>n<6r# .c_l&MG5{)hoJJj_™#x\Z89zc{Z4(5[R cLIVglΛ!ufQ~J7!a#|t U@9|tkiu)a#g楉t/#BØ9\ycY]؇re7)(D"Bn3qJ7xo'H1hs=`ϔ B^cm@  zCf1N@gRu.7uRP"V*?W'5ru ) :֮+-#;Lyh~g54nV@e˿| \HB~gG.nEjb𚱦x֫\[Ol<.oDpp (O |KI;Ivw쁜J rºr1ֽ~e1Dc|7̤]%UN<cadV OKzM7*`N|g+bH%YPa< ֍OGU مKM™wGaݧs8I0{'-bGykA j:8e9_btɞq$\~r'-iC8OL g֥1-h],Ă?ͲY1}ߪ:7}U+f@NPݱ (4),̔YۡGٙsmҿ ЋD,SJI*`YRM먵g1=+ZŏiHaLy $8f D_lg9rS/{s NhzK^g+G~$;* eh,9=|&Ewyz_iBh;cZ( !%̾ޑ+ZU T3W7/f7D_8zsm] α6M yǕW_Za~ZwH/hz(Is<€E|Qhl:𼿍jUf.u[Fj>ȫ屏TNؠ *w%1{zE~.;2gҸ$|أF!ە֪- ' Dg[PTh1Ct|27\x^Y ޜ.,`gaζ J:fF/;怴^Aok3 IaON*D; ~ 46Z)qevo)'vH-pbjH*S)װ~XI^EBd\tah./ѩIzIYg8YP$XL9F?}ه9p.וhOJ+ [ p\6XDDGJ't'\n \׽e80$It^'2a5yjuB[^Glٞɺ2,f֙wxM=6>YMxwx_GD dt/j?9G t:rYS3s, @F&VQEحSďŒl$%CNٵ`+=="OObA1Q֪a~٩?7>vH p 'v_NUVL"v@bf}Szᅥ9ʢpx܎Ɓ^ K{ agrOo*]11bUʫ\[ZP, FTP>ӿ?e^Pq,?ԇ/[ 3^'jQe\ y?URowhbR5B l0 FɰwX%ϟ )n3K5ǝz5\A_S㍲8Y^<ӝ8^FLu#D_y䝹!M|0,r N7$``OQymDٞvO ZĞ0N"0 C"׀ϻ/ٛDYEzڻ\Kyݖ`x7;WEl- d`$;Z=TC}f.6Yo)ԘFx3=3M& i= /M9̎y w|oY"FUseYHS*15m`'82 5')&ALm6R(9E{?{Cu]Qq{Pp(Mhngt-Ojg8Z=V 켽-'[pknI]ۇo FXډ$d}~8~2PnwtW usj-U$r,@`W g"@Hʒ#9U,+h9gu9jnهnyQ>'jmzx֘F&ѸZNmsߦn+Kmd l 4|K *v%aC4G^mqPGHM'^mܫflk"r٧ `硗}@(KU""^}|Ui2N pN-[v{^)oůHBC[Y[f3)F0ï+~$=O- G1叕濠` [mbuQW± ii@VC?_}ә<<^zH͓ ҡYFkgZ)y#9wW7\|[ǯR-,U!L!Y<@ZR",i~d,۫[9{5>?J1 {#*G??SwrIAB_e8@ٔBHHkA{d14 _L8ކ"147ҟrVBB` OCM׾LX:bZet@!I2:Z,ª*b6b+ZOc|qzD>T,/ڕZyOaV&aVoʢCygTJ/P7;>` [0oT_TC%P 䖴@D>J@2D$?+t>ac>S'˴a.U|& ggtS:-߷ka˹z-L`D!ޥ 3 y,=uŴ%TOIahn5}]{olg9IaC?4G?3R@;sE y?wac?a^kWٿkVQHA=|0Ah`-_5dETx]r[QCn 88!ץ@0)@̟DOVQF8A[5v=!0P<󷒲j,$rN79jENnNcXɈ/b1ǝ֓Cz3sp;Zs,]1Fw 0bLB^BǧZ52ٷC9dSoQ#2 ÝrCSk7kN/~@u3&"Zbt|wT1ޛUmkL9R"0#JlǑɶ)P|pVCv|z!x5)e"E<>,[iv,u>/i=d%I+`~})΄Ygɰ¹xrp4AV'z-^ӷt]ږE-{9o`Ssa³||:t5'V(ofO)ܢK#=^f]5~'OT"bq+/ `vX+Pk _Ƶj˫lMt}mZ)/^зj.K,au47mL6kW+,?VG˟K5s@@xq.FM4#!j-iPe(Ε}~^ò񊠨Un"ZqTQPcK**Z} [h:wE`6"*">FmzqVju癷bNegC5Ǧq~}5Tk?X{JO}[sq$kʨ7o^C"hr)h ;0 Mo,'-~ؙXKS᳎c3ݥ_]ֶL0c9M"qE]xJ5Ko5v_t4f$R,VˣXt|< VާvӬ &ϡz9a c`G90@.+_]LtDKZxMdʹUzA}-$#ysl/*4F cNb0鷐3pbn J@r )#Kn𸌿Sdjxev3mah8sv\`|OC|r|z@;-КTʨE07-׫Մ}j{4Q;|Mɢ|s*}VINN9 0v90j aB~`b N^\C]Qۢ~ N[פ&ޣ7ӨLCi34C]]tވ>I"-fK%"}簭G}4ɖTNxvv\g3~ }c sbG=_`4ɀK` G}iޟ/~n)Q6Kwl8FVH1>6Ukh{i*/ z[?LJ\D-dq_~hJ[:2$8d9D³[r,yDžF|j0FPQ#XKZQla< 4V#| $m GA~e?ء>.Lʍ@n2ImA=E*5(}Vߏ|/ߨϹmlҎf@)|,yݥQn}_G,,UD',M`*:l&tvWѷ:Ge'Lks:Nȣx 54 41'Vj3Tlf׬7/C525{>d N)&{?O#||F{D25=^&sGߤ0~|߬i;I GP&ўbRPox!'Z>S{(oa9?m7rƄV.9EO;v/bN7vޙ -A)+8aO;bPШڂMՔ;Jg ݽwNu.on/:Wѻۣ3&:3ta\|:Fӑ,%5so (zl'eݟ1A Cc:\͕ ]]7,-9<%S.p[kys7>k4z_uuucvg{d^L1l)$,|?gS0 $$$#'B1;bҷX"QĹy{=]| ݫśuF.)ϽY Civ2P{G6~`ҏLK%ճz\RncuaS6?ɟ"uVYxӥM2TFZ>o8%% ۻ?̬i[ryV!LTn<#9WowQo6ιQA F)uo^GHo{'=KȼuUd҃zn#aZʅ#JHxXamiӾk4Bjr̶N/c0٬v|MyϪIsS 9&Գ+U7<0܊$.H8#^_)ZmGAz",'?g?2D.$f9˜W2+KU0J5l+n毇t[Yw3mklU~]#JJBǂ>d=wJ&WW?fp?YHx3ٞ>f]Gp'W y[M4jի_M!b?MѹiԖ axZJ?/|?߫,H[MPz]ZeSA4I۱ZF;xK\_E[,(X?.OCJN;t| 4JQ~>ƺA4HE2C dύD ox' p~}Fviث?)ynuaT&Shq PV^jMc&D !5pF| "dR JFJ`,QE 64jTmX1MAm(F%EdLj0̰kbDHX!6b),Ii(FcTdfaI@"E`"+ J4DeS1H ɴlĨJ*6HQ&mdVfɰ(*h-5E͍3& RRQch$64li2hؤ"F66`23Ah+ض H5,PmbfMQlE*ƤB,$ CqTA;Y_AA@Z < |{ &zG@G z#4Tj0go8ɦ82'[Pd7쯀9c `jM^!j.+܃)0eWC Vz8=ج޽߱mbiՆ-$!7p3ܢ{ЫVoGRhidh+u+zMՅVF_]̩`)V2'> `tdQhjW*~RTN nQAйcRY ~O xRT:*;z'˕d"׽ _+h#gd}%K3_GF-J;z9?}+ୗp 8*;Q)#Ì$H =\ ]>r3{Pca_ *>{ m&dAkj{ ~`V ZTHuƃ`TpRrYڹB>3,̏)7;V L"YI2ɤ+(;% _ 4!V !7pxy*;HIxg64 37K)eMۅc~ RMKxלVv C O5e4!XJ?6laL][@)䲿HP)Hz2XҜq,{sӃ%ʡD%nU*Pl|,nޡzOm5w hgmm]k~S.wIƒc@Y|kZγשWew|e KdBRlʷKWp[}eD%G[xwÍ woe'1m붫k;*6=58B m)ݘ˼.(j SjN8× PeDÇ<)j}e015$sߝ>UZEI{h\K_z}Qm" LYB6.D׿&AFe"F xs4/d(Ūhm{Ԃg H,7ZjhrB CYfZdaXA 2M!j!( 6YuY%g's P^ @ԩ.(D?݊ML6gs> Gqyw|2/5vTr%8%:$ϲӗ%;@ K|׍ڒ2?".-(xTat<\?Qk5\7Wl1վ7Oot,dz2-1nCbɑu&r4z|cts1Jr'"=9P,cSzvLpHRٔyœ)j:yU~: npci8y+ՑVl̀@ ƘGqȃu[޲~cYԔ}^ׯ?;.&Skw4k;;Y7Udzv. JZPemޯėV?>_pW{q~}wJ}DM1}0}UF`[ˆ% B*@S88Y[54})Z/ x).6SmfZÇuiH"RR0`i!JD ZWxhɦa2Ζfwp56=6TI j3Q8 (a CNٰ,CU-Ru=>}Wax?s{{l:O]yU!sZkoU` EҀcnr$\]קzZqLkq Oa&-!$ !\28ji¦@zyp+T(ڌSIVD=Goy8ҕy/_2~&!egKnEOנ;a!ͯuS {/Q$KykU4?CZ tW^7;Q5s3{q%mjyf!0):>IQEV#߫i;3|מLt}]qoZe\ A8۶RBQ<$dL!]Kc?Vz/ʷo]^B"@Jod{IL8}0 E~씟7{YMc*VKRvzt03nSy (cN ``ck0ia> +Ξ.>pxBt9!.O\9ydT q3zmz0S'5w\xi.Cq&:xV|2qǨ,ZfY?}~:G}n!$>dE(?@Y%"5jJ)GbP>p!EJV,L[Bu~,1//"dtb M{Ң`U"]jX$z0oaUo- GJ{"bX/1`KC}gPq0YM6..d"1Ĝ{m^C/޽~WjF-Z ׉␊n;υF=y [7<6iLs--eanloZ]yR&'9gOtx'UT};<[WeyD"ٟd2p1/k; d&QHYꎸY?\~>q=>kF:IbJ~gq q..<=8LR%5$zn,Po3QyxmrtѪkRci"Z*;SP~mT>Bu{<:>67S˲mL?mrnhߧ}OVbgҥDYb4;%1Ds3X(( ԉƁIrQ>~ިUTUu/?{[\jsGF,j4jVֲuӜ%oS[s^u\H.* &:`PgwƓzsuS;Υ)B[UÕY-<~ +JtTtL;VCNIV{"+$Ln~fEI]R x @AB pAFBB`uG UyJð86y A7"ELi}q+SK} 4I@NPn?U׵sm5E.O:LJDD@jQtN&:؇Cckݭΐ`c4i<)>ddTe1AjHH3(|o6ء7%!*,n%M}϶֎ʣޡ=hKrTX](qh'rw1^lSfO*5-(\纟NRh@8$Ch62;|372Q]Z]GA>Rh2= :]lx= #Xf'Mj) 9k0 .=c]m< ù) |~["j%&岸 E]G4YHk)W1(ﲰpF́Ӯi `{2˫g(eUBB/.;g<$gvNæ$#g_&~L7SdGJا?ӟ#+4Kadr&0SvpQvzFa]vsk ҌF8UN}WE; 9㰢GWYYZ3[G1h#tКIk?(CWH~z>{ /CA8~N-(1+eS8(NcCTQѬqqavubR" EPVJ !{;BK_O27AMR5(gaZ,60^\eϙ;u_ ZmNkcr#d",G/6W?P&z,uw,e~pp*zaWmhR1t5\1-}&2Td易z_ agcgUo`ev卐zxӨi.Kq3 }0HHKHDt5-D4܈>W5z5Ju e[OFs70ͪ|-jL9v'j9 2 zKc,$ u)c+zYZzEwr]Ei)PyϘbHyۧI;%TMO< 6( \b$K'wx 7kcfϒsrg2t3mAK/V*lCERN 1I8ٵi3k+'vKD~[!Q6{b-yyM+',ƭg5r7cݩWG2 m@{ș,ni撥T[W3W-*km&6jYP23d#LŒXz}n/ߧ~Aܫ3<ǹaTMcZ^s蠾4w;[~vXw&o&_fiw:,sy;le/ȝ7N{z b+WFSk|JגkSҴHʝm3oC5YЙ]{y[qz2zkܷ6,U&lFo\vd}('_ՂY wSlYnQ6O+*ܞ{/F}YG|"_>c}Vr[t.o*L'asoxBZϟ;߃ؒlZ;O+KX-O[5{N=ERMhEvgȨPP'7)]}=|9{Q!٨u?1˷M LELy:bt}Kx>',39Wܘbֺ~vFӇ z}tV3N}_KY}?{^ W ̩0ZZzf=Hn}NR`]T2B@S1u(lK4f*yB{*jZ8fqUVM-mVt `lws Ð<--$ҕ!ۺܾ@$Okef -&Z Q Ǵ>.ӈsZ~j ʘTގ:E9ze÷VG9!gUFCZgy6zGcPvj'qőueM=;J]>3onEd7#%pXU7If9nw1MKFp>?Fe-cJ^UMkÙF<3 eT܃us1N0;3q%-ٿ!^n}yk'Wtt(R֯3o.oG3Ʈ+bbF%*[sph*>^ D 3Db"hbJ(3VY0`Ұ6{sKE(HmẀI<~_enks!+C{c:0 H!#(OvvΪՀ"1,"`Ԡ =Ǻ˟JW-ɻ~Rxo8m^@8^cm']8EVcϢњrV%Rp=ϧ9& ǾZMx],.0$F, ~7c<|s^{ײ:m>lhRJ8e ;2 6 6.ͲU FFO*rwlR(vvf,*lfEJV!Ve6K̞\ͺRJo[@'uͮE;;s77ޗup{]v ?H4. >4L]fc_H5)#k1#@DBy8T r9hXGud"]:E~ yVXO9\;`+C ߙD L{[fZ$>l'f(7~u찇Ѹ3>W͘IL_ɥ!}75ՠ_VW_` ~Hw_/+!t4ySh.0'B4Ce`EJ|ZͿSُqYz?&׻S0|JVMIanּUGݾ ǫggj@_WeՇ~BCp@qFJPbJ^Af 1!naj=8Zw6RPWpu Rq"Qs8ۨg1O{bG1x$_redec& |myq:*uO?cwwX~AN¨<ن A~XxZtyP5 $5h(5m*{6eLk2j0VOl=c;=a/yC=ja !H"LL{3 JEA F1 gT8qNn4I EsLv$|! CD ЭY);۰)YwTJ 0ed.Bf.xL\2`rAdrmLpZĐgapUb'rdOdԇ pH״W%8QӍr~b_}@pƫ9ly ( L!D~Z wmy,+8y=$=;g{4]Q<ךW)%SuׁDȦ;+hPH>`DNZ],W)0ʎ~k+z<\i1&4/5:^%ۘO3z+tf# @kĢAZPemџ&U}A'\ݣFyɪէ!aF/+~,~ȹ3\?u,*dBMPr>e_Y׳s7?CqZ\Yc[n:mm}RX}}ϝoWhv84ԴQ0,; {,|wkeS^]Y3*A`q-jhE((/p`& Y>$]oG{ܞ Fw16%_9HufqGM5K<;l+%Ct|}ȯ< >۝qz:ǯid%UJ’Kډ)=LE[4V@gfC4M%kB^kYUH C@X*mF0fjqNPlbr nB!VXx{'mb"HVc@c3[b9cfAe1@k Yl 1"L(($/kx[ \v  &F)7dl*UjyN&d#I!YINqM 0QƬS"ύ,p2]\Y 9U98Y$/ X'’ O9!m.zmϴK}7JBqzd$Y_+>0Fyï$Η9GtjN,aA=K_/1e qR5}Whϫo|S7N{MƏW4^PY26Bww>6S.G!.Jʩjb1==*7'+ZVUVsX Mx}}.F̖]Ek}'`Uf U%T p 3uNumajaU;䒂Z9Va)uz̴ ORW>#>lɊ|rPoF~ˬ?&[]m6 S\K0CWt3WmzNﳓkB|!i;Ox4a^CVOdz=F˽dvʐ7.D@>&"*UK}c?^äEl=| V*iV[}#.^˄Gѹ:8F7{^|/?ӗ*ՀH #ˏN{c3)d8-yEY#0&z4-|CDʭZC KA, z7ή㯅S6XŇnH /]N.ʛ6vG?k#l|10 ?ٝIF9]#`!{28S=·)e9Y/xz5:''>,'-ǡds$Hvi.qX$ 0J D*Ô̼..OCwc>賺Twkk$G'K&c]~6C?YUVn=/+D6qc7lsf=N-RWQse}ܬƯJm3'cb\p_Ų:nk:߲ρVT}Og_șr[lg=/[a>ʽq=J >'yzם^KhIIOnk`7.AԒ(#!>b@5D O'K߃;</+dd/W%Dw7 jzu_OҶ|ZcE.s$]6C\f~+}inbXq}G*=[oX. j$$,x*x>8̈́:fֲ}n?h@TcEk @t-#M~(1& }܇aLs8 +L0' je]XUE@?gv7-En\| &Ea:i4 5|r@5 o{'NVQ#}[|$U{:=g٦>b]܃._F;-+}\ : ̡8],FgoCd\iC"ay!='> '-]G_:ޯu~uͿ$0`ОJ]1199'kO k^Zjzpd .?*KzЅ' 0&wwE 0{&(*ێSyYH*_r<T;y ?#1a8 ,j8QHJR@ݭĉt $ YS!"es6@RTXՖ-bV-4"|2TMR"Md'<5M% !A ŒRMI C![@ZNQ;}~;$GB;W-g/\6f"㩐J6 :HQdoF_;睰"!gQF9[:Fj٨Wx FeK,*OU걋J4t턠 ^*/)4%WG xM  G (pU1^ߒdQ yόf^N!ǡU=mUsJNmWuloqt5SG;bk q2|Okp|?]m5U)~WnCثY ,u*40U!|b*y#!: a€3os9Z訍ORB(l`W:?>BKׁƫDN YMPB_y}mF0۩GkjqvhxRgkm8|T=HNOjjsx:%/6.MN͗_/'7mz=Y9c{jD;~{n+We<'O]k{o\u{MzSwwFwY1Aqr|-ž֧"+_~[hnmr~d;i,WZUr;/V~B0zS.u=1t0?Mꪦ]tN^z7311-1#]4]9⾱TFbgis<={h )qiO?},92߿9uyodl-S9[6./8 BXSn4Eتܗ=Rw,~%w1OF}(~]Plb -yooo/{rz"/hWQǽk{~Pbcmo@J* C$c/۽gK?1E?=047"z_wx1)v sOխT?O &Lw ijX_Sx0[_T(o(na<Ƣ⡂b΃PjBch)1J`xۤOL '{vh(?Me;4Ld҆:(=,_0Iѫbť^h(?{_B@~{1__`@j1A R=i"ЂW<8)aאyڼ ?_i=^^ `0Ĵb5D~[^=InAo6k;qߓZޭ؟ϗSȥv=OXMs>{Jm~}>ϻMD]`̔ &4'1SD{ɻ+eUڙgVV5&x^w=Dk *~qT#|:rtJB[wVkq^LJtĿpG`\Y 3̊ʮE(3F>7 F,o Υnq&_Pal?':4ik`?K'Җy,GlixwȄO<[., %(GL@ζPDDխu-YuDD)3S_>~{,R9=ov2 s婸WV}opKqwbujz-8NOcϟK_ojgCpub|Q!8KkoW'gZ 7IA[Ai~gY;= %~aO!zѱo_C^HA "-uFLo0J[w+}6UO45SOې"9ApIR*7"IU 㐆CR> !"s4T4O' o֨UE5 BtX9z4-1e{:'u "EjA8t-7DI4! G<۾aV,H5Ģ?_}pYD ^I* *)aF4iА.mSf.":A5hk)Rf7VD"$ˉ@rl @C+_ Eh:DjT`@Oݝ(}; T}Z1ӄO@YR"SUZ(b @A PQ /ؘcRhP}:g^T2b 0c@G N670 e< nJ(BpD@_Ȓ7M *lrNA挼cQ5ƿh^N3B?՟?] \2UI@wVe|]H-5gHMTVAb09d4y6;`/OEӬֆDDCOĴokZ** `\ )p3||j x.~9yv$oX[ʋ UɰDO@+'R 5j4񱺑ޱy*lb.$O "'wkn@Ǎ!lS`=㿧.i3ԍ.LIBA;UH;;z8l[4Yw XiX7v]`jT!1` R%ݯeTT~<>IpKG9ޥ:3XpaLQb(3U" EEQ8 vQWXB#8<ge6%ܗgy#1Dp]M]A2mw LFEA^ hv. ^L% }v']FQDo@;3,-21ߌ+FېÔ+q/ $9~a0cjI|> #k 3UymT1^H(ʁt t`ƅɁL^?I^[9N3&a֣iO +BKw V@&fx-l 4yF{l.ld ɦJ ?D8q GA$Ecn3{7iwRbFDWa4ydf`&(1M #[;eB_gj0B"KE "|v >?7=. l束Xh; q~tdPx ((ȪKJszkxA@_)՝A@b ^GE 901rts} OoWSpkB,"Vm Ue6BUM2~S߄2 s+ڛc}G?Guݶw?)hdAE_:~+*2cM75Dr_{AX\womvYZ YJW*џ_K1l`>K|wT T<8+wWkJ|We5^RaxB?Vu{E[=LjS/IꝇzgBpK=^SaЇ?@!,tQ6+j{uY̥6챤lEí:aDMp{ə{J#A4Y9c$93iL=ƄwJ0鬖m f.]<#4#1P$Ӄ23k`gTS5T\JI%PJժ)D|w*wo'^tă֐8b ?sV19oec~8VwEIt&KBOlJ@Dʌ!&;£$"'m&c4c2~$H ͢feOPqJ3y,/"fEҫzl.QU(|f*|O FFXDD80A!Cf_S~>~?s${W:##{N;t?/8RxQG$c@Ё>Q$u7|ɒC])WW!Z`>&!'𰤓Y 4MXU%. c$nթw|,8 2 p,ֳ9g\>z}}v@w`\{ʀ_|*g<>';O-m :(]#H} |^ ԋ{42jmRsצj段vK3h 2d(ii1(sUevuJYBkBv] vmڌ2(c9:CJ]gLGd1tكUG]!(@l4mu&Tr kZ]v[etiZR֚#LZ ]Se 6v]5@ҩR  ȠA)!TuT(("9ɌK{I@R PU gz}kC@J(*waljTz¨zHnL|>_}9Â5hlNe  IU@IȻBbzsԱoZlql[L6sAh nqv@<ϭֻJS(MκҦBYcgoMQ (* ,jT@^= _XE ڵ2mDrPﴎGw}̥^磷>wAʕe=='PʻVEn+l6ӟիEJvrN@T.ZƆ^Ӷh+Et7pۇL uw<{sL-e⦆NabQ3/=ƽM H_wKU;7Mݝ 1_p+"E4b, "He?cYC }?Twp,J ׳9r?7_G[Sb;úr?ӴWƯ^e.GJ)a*Tq Mk("(Q+#T+\R},ó]^qCf>#{EvbOL4Slw6{e[ˌM\ tȮNW Z8N˸gAE<#0&rˋ s. khLȊz@Ru+Mqb!XØ&cDeTNtE3j8ȵ*Ƌhs0{7XIȴs {WIq*T mC еpDZª(J\ČBUpo.Sx׿ߦ9rRAzw44FUre丽jb-GI%{P'{Et^i50:=kۗ&\ yeݒhHmmN"\ESαTy ThzxrՂl^s.6BMt5ʜgzzklw'K"t hXŎ9DbrH},T@ͅŃ܇@ҥ !R3a3A%mpI$ -BZk(鲇lʾE"{:fbӕԯw7"dL(DhuVݭ|Ut5k8&D1%6׍G kZ l>S F7z!2F $ cWgti01WJ=1чBXXH+h:?8ӡs8uX@zAy|ćwQMyߖdkJd0mp qs,[$t qf r/_KQc73d ^6%| yRLL@}/|+,qpGpmYyGRIzņ"|2B!mzsy$& ]*p^r%\J `,)* % 9sŬ9䁸z0X2eowTHa$6_A\ۧ8xN'I"χF^OԛR"m\#QIqk qV5†15y7ho1 N90YlaOJ7IjՈړHrKi]+[a+l"ֺsEEYɶ&n8Bt2&bVŐnct d YE n1$4B7) J+%NV6ydc"fXx93hgaꂵFi1$hQ#,ZI+ΰ18wD ҌTt9 =O:ͤ 4Qӗ pX+@lSNחbfhXx)@4 4cg!J:cz#rq$FSxqf[2;GҀyF1wJW]z 9f8UTx_}8Qxw%|\Ӓɣ \w]zMA*lDOJoybTHD'D0,;a+J*3RA[ [Lg/V㬩N?(p2PlciVr^QiMBa3[mܶc7ek"DM*v.:Z<>&㣆Kbt6ټ5%`ǡG3°nɪ ۊôF#TӜسM߹f(:MnN-z"^;ڗ';Ob#yjM*}lx%n+9 ^nͽ?ܷ?';O\y'SK#\kSBO;~mq? 5l*fwP g\BMLЅ5t(U.XpiN`n"NCT(?|jz1ҿN6ڳos"~'wwo0mxg{(r~r^aj?3OykGOM2P&ԾZק͸aѯW' ~[w33JKo?,:p N}(@qy:uxԼb"ZIHđT$D\nYge^et6W8yɆK(/]᡿oJî},|OCؒ QV VQ]Kjk{*Z)#ES:w6}~1oWI#x?ȿsF;I0[Kys0GmB9R39n6Һ?4\|S%vONxM9]RtO*߸Hp)~; gV?U eL*r |V^hIy-X,D3OJMvxe[ÑYφ;Cv{\w]A5ŠޑC6oMv7{{G|N!{=*]M})U%[]Rdǩ,<)bArN|.S*BWumy+r?ʽۅH+ ^>QMNΞs ^t.G{)4Zq5I+#i7<~鋐p#ʥfh1Β|5).t1LJSh DXj&Gqapޭ U ]i!#*bP ?Il|7D13=DR_eC]N[w(2H{UΗkǥ-m_Po?yvu7ÌrrlW6N1.*_+9~Ex?Fq=E{~}ĆZ6 ?b@-s17@nOT0id|u|wy>oRs`U]cyk)b+Te<ݪþE3?wcvri}gOyޖ?O41>LuDZlyn!=f^{ |Mwg_#lQ:2b\ʌD_O+_@GKmM[,&+,{,Ed-iD_h@ o~ [ n_7w}Up=OK08T~m:}JfH!RB2RyT^- Xk FO^tÂpWG+A!אqڒE3nJ<ƭ@.K?=w~KQ/m^ń"'#ZKC أ%y 0vL0!s]H6$A:Er<[>.ەtުփOo!mIv ;ъC 7csSVs<!St9{I:v]38!T7H~!YY5]}O/~kOŝ>UV_%D?:gCxTbGh[R\#g^N`qv= ej i?~TLuitn@PHMc&YK'7(Ĵ:wt=O;}gpbKT$C̏;t4} Nf]GӒiCxm;?I~ Q){Kl'[OCq@[; b53EV8`3bt4:_hHP 0QC$rb\O5^>+'~UGBp9kֻ0m1ֈ " ~ J3mMz f&Ktg*M=me3k^D6'v8~F.TSvp.ZCS0u]s$B(H,sg!URH X+ZX[OϛVHssk{789#W"R^f.-ix7rDfIl5\t&eA c(՝ge`. x(4u.;xk)QIԤIO6@NYˌb.b)ĆB) \s5ujV:6k1 Qx"!Ԇgo ;{rwwtGzaWڷ;fl w{=ounh;:56 &7=0!3)#f푠y~`$ir $2`b{, Lz>Is;s@z7m׽0٥G"Kq^TP%$@sř݇x{!GnNXjXF8ĸ"@*+2E#YJ~ 1 BX[ӯ/+镟%ˤݎR5ƮXtw|9Q6m9i`=0 I0 ӜЉ,৛w 6xS/wh8Aa?o` Z?yE E,y0dN4R/X_7& \JQ2^:fYQj$Ԕ¦~=a(2;]SbK}690ʯ_l3i7rIW*bT4tТsn\=g^]{EQ^v6ySzV'ΞK: h6@JLHprۢ|GvT AL$̓YcG{=5E<=c\ ҳnc $X*X Xpbvx8$3/^ 6&y{ @Db* .]+LQ "k zD,%2[,}0nВʸ.[ifX81#Y&j1EwwUiϖؑyi畅a!|W75ݯ#wxuZ>5W(M5Ā_u{ \MMݒ~EJWl: ϔ$qGiS07Ԝt_ߢcҊ`?;cz]7?IWld|zGq7|=umm\ubhj1  Sfx/1sO+{M%8AZ_DٟX_9i6'Pz8%@ߙ)ܾ>ʤyD{``k\=LkA 9?7;v(aOF;5QyrTywWQ)کb~6?y[Yh"rN`-T#"4N_ 8@\Nk>טPꨩ^ԟHLGxP9t,N1k{T?5M޿}<L'rK&Y.o923]y9\=Na#9yzLAԕ %hoG@qEǯk kg~Ygd%szcv4mpl)s=|/?X_UourCk2:{ WvA{QO")nVY/Fb|.ƻW;_eA @3xrA=MEp f*$MÕ[o'}( ;kRd2TimE9, 65ܨZ*}60akĕ@Ֆ,gjT!ٜ^B:Ꙩ0dH崎'S,aX $miYT0pAeqwŅ; M]A,@rHbLG ,DGk~C rX.::Fŝ>ҬA,Hb>_b糋0z"݃EHr3-x- X^j A#Hv I3GXlct Z+>_AvG*0 D.7qz©4՜N9ͽg0cQpUyݟ q)c`O=;$ovw0z_nOҁp Ot"xP)"Cם0cHyh9jc]7Kun:+z\;l ܅s }_;57#sOEi {.s+SYO{,9\SgmS5+:^F hm-ڞ2w=)|yѡ/+hJ "&뜐ї^ H#؆wl38$M*m߰NovTˈ,c0D"rS^ ͘z)7``fF&;&PD\-ep,Xicb]|Df-߽o=><2aDAz4mIA%/HN.,Og`ne03ikr> ݠՙΩ&HT1ADæ$cLy~kRw)CE@fM(ZP-]--' THfټ{5z=ZEL8Jzdmz}߻{ }"^nNq _ȰywsT:{!w+ R8GK5lƈ`:f<ۖY`fJi/H=`ĒGp'[xZ-=o6ۣSr>VM8~^W9F4gJ+%fz܎܊f xJKst  Lfg޲ ;T`Ye&ZqT:dXHFQ5a aRqf[Y9yq s/:Q~0v븁&"{αp@3FgZkQ҆A 0jjb0O7x xE!堁+K4p`K0H3Y1uN3@ jyi,@zͧ..U"ilFF\ldbtաcDVݽ_ _k>[l~'T7L(?  oxZUedEz?`&g-2:9y?UKW}9UJgP?ծv0rt5U&QW$[Gzah Hi }_n^&zZVJn&O @.o&,(c/dgoι;I5m[Y5ήKügL;WGW9 Lh#& t9ByFK?V;lG1DIdjc3?e7Z[ՏrL Uj8䓉^쩯*ٶm[0oz~0~yG-!h;4tӭ6 ĪsM$lG3m$?F7j{=ߡJ:1mE:]қDV-Ty2ٷM#%(&Oz(Ċ׳ @ceӄO [zrQ{!zǞ|U??$Lb3Z=LZc_k0u4"&ptXnYsgSUܲf^Cћ%YW/_ZV}Ƴ}0ξ4UM']6\kitm KW~jhu*=Qls:~_?315q{+J kZ*R _˰jV6~J&H:Ϻ:[ĶehI}l?5y?ؕjuVӞJGf}GTL~~O%1^Fn%u֕3AGgghqTۗȒɞzgR֖?u}GbRl7g|Z̤͍Lv--4MNׇ֒g{dZe@n氱?OyG >רj,_eݖB-\&a?Qŵ7Ά4#޿@曦Qde޿W8AoJj.V^<Kص)#PvdF>ï ۋ7B4"|: @y7Ѹ?ЧLBаo#)pnLvE F$mzVV _Ur[*c5 a|&)p NRrt[9kŶP,äa$Ά;_Ѵ'LJ6`6r4#ŷcq!^{|[Qrے_ۗ|,M A@/] I!35Rz+_zA=!9BZ&">!B IX\⹥=*bA{VVYvRNc-B^ J25+v.2ٯ>i3qeGEa #Էr:y^Kr녤Po<(g2a/<} nu͍Õ=t̄Dy3ז9D {Քf8ƻE MR ",H Ki7,uLhT:ZM2Z`fd@78!g,و)&Yj H4 R@0@iOƮAmycC+<)k9G,F'۸o;gs4Ȗ,!rkȽ EIĘ&RT]X/?[9T /f[ֶ< G-t0!lŇoAZfjB_ ZyQi'HiU)$z9ld\:ÆV}8:5ո~{)iэ@GDrw%'I_m-=ɥVG(y4+)K50Z>-;7U\u>_Ƿp$s;CUւii-)RקOC?->c=5ekoݳD |'nn],6„ QCipuRU#ξ]&wNԧLjɻMMa\VegZMvxMC/\#џչB ϟ?lQQdɰP9gJ6n-ڸgstf#O?QrZt-0^!2#vy_6>!#T"$ `]G]љ:zJe8]Ӛ.izhx,x 6Pju|mDn&ڳ_Gw6O;ŮW%%VqOc/KZ:6՗L[8Y6\RxVuMAkvȠ4-ZT@fd_\'.6` kFKǠNq"I qzdqOOq cV׿yirt[NǓYWwX*O-<V{ zctն820kfs5tE2H>`ю" b"!Dtq.@282MD`TpKMذ- (8+t߽E3+úf Wb=ҋ49YNbMϐٟq(tMS $I$t| jRj^runMO"Z w%r}_J ڪUFr :7uƀ>TP;>;bY%6UBa? U$qqE @IuJںXni, ɦ])AuLh~6RJ-קo114:gv\Q=M岿&{.D΃*L&( k4 )i8E֟ǬU?&?+/q?SX%(8! SAȐđ(j|Z^kqoU_/P*$m ( τTix}V5¿cSxL K-+:-0q:xI'Ӕ*uld:Qbe8 =?DyBܺT7+j.>S%=aT#!LI)a?$GVGW3p'֓}CRT,DA})1O徙^"& ^ 8mRƹ/"1`H|59{39dLLb@@m4&\)&mFılLVNr>tppz%Q#x 4Qc rJ;~9ԝ/[Hl:v |< x}< 9̵ ~0)Z#ۨzx^h:{; 2ĸE:xW΋Z=rvtm 4Fg.&[]qRF X0;^]I2:H:sr)P)gRטvy9;r,GRAYl߅}#@M$S)  S#f17"YGݜ: u,0>ZQN!e0Y®gÌn/UHQ#h{G2p) bvd0έxИMRe@K ϓ@vW*ض0g@rB@4CA&] *B0˘2ͪQuQL0/%w<ƽ}kk2cA.0>cZ(կw iʰdV/VRH6fbm}cfJyB;wڅ__ؾwg **@M\ә䳊@#=lCq7|Z#ܽ`:t{26M:{uځaD>[<đZh AQAցvÑFK_g]lz@%DC\}k M$Jox!NـSY;^lpŎ_ Zw?g̠wd|e yt9X@&5#f`M|S ~)} 0)d2{&HXK d~BqMoq1h rE=MH v(ڗp Sa&1y=_nڿje_~ȁW_PKXݢˑsk|<ױ24QǏLW_?I}'@~c@5F)#%%P` 瑧Aڹ0cqt)PHGC#h8lN6 X`RLG4>bl4qTrAz.ц &/ЋAdS[! !>5dw;F0 .FDwSn9M}.mkHqGk[mL5dgFW" (` :9Ak85g<ꋁw'N}> [60XgfnĻ;HUޙNZ]xLah'.6諝}D>tdv#v>nHG㌝P!A .6x=3+X,{`B )o#1NE'FgB-Dah&&S,:%^ͧ{S0`B@6v# G*kͺ5n6iqE1>"]8夳X~z;eh` Qk$@#rlP,s\O6s}]o՚zۘ HՎ-L []an$Ly!p(Y 'r0a7X GP>]n^6KR 3&:X/$\8'r!RuV $ ̭Q !6`crfFLx'dA)]3 7nC=rI KeDٿ a038\ԿQx=k%"\`c,F>xhY0t8ftr X,KAP,ME3, XHb.qíɥ- X"YAF hA,$=0A{z05^f<`VAT?ŭ8]t>ĂOȾz|ϟE8H{ !{!' 8jtg$SL. 5JAB4>&eH@ÏB /"sp9&p]L.Knr"uip=CA{yd IBn:T6/3Wk>i KQ 낣7taT7(N|:Miѝ+$h ==m&[U% ݉ Y2*UKGNc7nA۾0 L,f0tT6ȯ/aEf uq/TtCI p6.U a]fsZ,&Ze{oާank{a 9 6$$esd+sjiƏ+˃F]'6.|I4Gذ)-h~8E@#0~gΎo/!sP~"D "$psu yt`I~O[{.p)UqfntbW2 J~wP@eZA,;!E.CXMv35sU*]rl7ެR# If"CZI%Ksػ;[/AS9Ԁ aѕ\ J% hH s)덾6gV)뻺vh" nȳ@"H1IVR Ms/(3n| GDİјzfL\9T(Cq0 HSeSnL{s 3ZR3 * B߻ֈM(]4D(E"cfa ~@U,ƺVeV|ߎZ 6%8O=_߉wr]rp`QzŮ8h j< Qngi,3uǠ/Uۯ{c6Ktb @v3&"oaR,{3 0 ç;PN3Y 6=n{Q '6FE"5! iVFDG_|08֞|ŭCs!::7 C/69 `#7C`"fwAjlI J%9zg]pֶ6Ha 0T++Ȇ# @'YrXZ h/̓N֞,;٧0MV\aLz.LA%wdmtOMrMl[BKKdJ͝ E +=f\X`֑l-D{@]cij5V4qZ;n!j)0;;'nqױ`tؼs:(E \d ټn'* o5&c){:!Ŗ&׻iuIT `!wcG^ko|woÏ* i/|}oZ  ň=e`3{^e-Pív9\.K3jBa6 4Xk7#ڄx]``̌ȅXW9=QLS\:Ў7ar }V~h|4{p ,2SGwyF/O0$i[;x X_u{\ ̝'z'Q{yi2 00 3=$zx W{2e4ƌgܽso=W^vҹ.=ؑk)?~yQ no#ls2:cun 30wiaR^]=v)?Q{/r@"7)`,8-ϧ)*M AJR 6l7sy;ˀY5ecTMb("[7L&@5\jAJǁS$5 2nL;?3(7A; 7H鵌StSa}RQb]ѣZ>hrH2[,cn*8#e9!);YuT\EYd ;R6$ Ԅ3m,%†Epn8/Z23; *1{ x,~@Tň\I+=#Bm.>E/xJS:z:tAk]˕my;7 ȹodD%f$a A :wB q +PnM0V<ǯA x#dom  3еڧfj1pɍ>;P^uNFwTyJ69XZAMo!.#"C9׌2uС׻ɿoG5Mt Kd՗:'r1-Rj{/lj$oJ aXNS _s׈pmo/'xqK,mT(~u`8f`B! &ϟˢ)!ٖGG 8H"{}ʽrMO8a4xԧ#iaL3njs!}G%g{d[Q:hhm9? `x@H$b4mF aQ=h  "!$1Lm:bqH\\}.gdBv`I9Iк̞9u;Ye8pbiMX aفY0)CG3tKVVIqT2*\f́`̵]b[nNVJn=fpN:ދ*o[ alÿEׁ t`/L2([m@d@N@Yۉr4N[`kYHc506`UCԆ-Kr$:x޴vʸ'G gDlٰwh:2-͢|2x } " ooS]bl̉`Ypn|{kaze,134{T 4 `||@ַ/( ;pÆ1(:[:lIR I-%SAN+4K0*S4M071 ZD!B*t& C U5+;A@X(Aw0HNKe+a`(*53!޿ فsc0*T*` @N;+i?C `V^!1BE %EHV5m$_L'BU:'=: Uy}տpWe͘fSwV5< w}`*MI{XxL7:NUNݻG6.ڢ6|}}|<w#AA{A G'- |Oy\)lu_ïo7Y\JP#XOC 3KIYR A  hӰP3Pn/k 6C]>cNnֈT:L-SM +%jhNᓚaAMunvy.ۭ1ux'gF^k2Won:_tJw 9l6b% K :^XOQFZcDr , E[Nt^)s VXԣdj,"7@R/[ӎز8{&bӐʼn,ټCWs\&Q͊~#KJ9akqh g@aNEVA0ˆf&0$fʳ*A\ZI33VFu9. Fn2r"8gG>߬8w/ I]yGWC@hn|g6koyM)bxmbb$.6t Qx xb@Y45&%uo:Ѷ"߇*s 9n(6g;d-#$U;7[:H rN+Bh{t5Fsy}B`&FFfffD 28ã57#~]ĺ-׹g:$?8gn$ӅIAWFJLa3P`d'X4:"$pDLm1"O[`tHCu%Hvp#KYl P<MK _z$CŒph. f}Wy|n?Uoze ,z $;@Qos TP\b,a= v3#En[zzSl&YIOmߍaI ,#s+8G0- fd]o5Gz-7(Y0#7@c3T+F0b!'B=Fo@ചkk!|z ̦5)_Qd"rDhd (KĸǁCKF R'G LН&}`4SIiAa4PNn}v1v];ӵ{\ERNa~G{.GC;vN5ڂ[sk څ0P&oalMcgva 1a#k9hHwk]LW-)5 6.j`Q&,@Vu4\i3YɁ04ksM E̓l#*GHj0Q4OY坤hocN=;HȬ3Jscu%i.+Lܔ]37:  C6o] #Jc~ycp0 6#i uEo`, ՅxKp5!ԀW@'*zrX 죹 QdB` (h>_ooWذrL*ٶ!CG6*"={; T.vV9= YG 4/"y;o>̈ݞ񄣳$6Q2a2$,'s׿Xɉdv{yJ}> 5}\q9@wr̜ϠHJӍh\&I@h݋ۜ#(d!|,- PlX$躾2EĩGXZՄY S F1 .e&3*P4܈wo@8L 2+,Pϛ[GES7j6oV+<_}0$z֮S>}D/3Ī*بj3clRu"%X_(CxE U'bF^xm4@Hhvܝ:ΖKӣxҫ\ےbvbRU=Hl{k4qd} |̄K*ˏ[`:+*مs+nT!udE )9]<+^y̝a t2%k9w|#\"1>Tne h<X ޓbC2cי̡`RyuTCz绁5(J)7]對  KG,<}'<*PM(33 ĂDlq KaYNk[Y/m*yݺKEn+~tPOWMh-̭nlNjk}Scl0p+Z.0nZ=ׯD-RRc%Xx Q}b0u9z^.;g0 w@~*yZq mX c4ǹ~E #7b|HS̛`X^{lOnbkp;vR (!Ndۣ]_ a,b .[0q3>\ ymUrD޳J҉3 UxZzmgnSy> GM@_~ds_p G 0'̺&]1k@nYw05N4$7fڻo{[^&rE-YmV,ӵ͚@Ř, 4{ nud@ǩǘ f2emV^KM.&rP1(! $`TH1R\DAqB;ɫK gI0πr=D{ ޥ~iͣ"Coo\l$ >YFamn4SVy(j]zX1M$C#Gy~Gy3e.&1Ϯ !:0kd:ap])cUg At"\wqT-tW|9ImZS2h:!J,L67F 5RPj*x Y 0D@x9FsPps0`xSjRk;佡#_LS#$߆fBt2}OV}ƗG JW-6UNzq7V2I6V?Ք3;ڵ')GD!t Y|b>u[×߽A!y8 t 3n0ؖL׿'66<E`ǁ]2ЉqXӚE`uuUtb(109Qh7ރyYAqyPx)@Ɇ:Y~)i;/Fa(@cz;c4@ĘAd- [(pgSJ&â_R+!%4KF>)Q!3wh$ SNoE.F=j2%p[:+@ADV4:6`)r?qg#L!ٽf`cj\` F%` vV83_ :g|!9Ahi+n4o.{6NgTo^r/sPY9 οI;->Q@XPΡ";LE@kl[ڳCQ~z(,Iu(pͻt1va RC?|?<,vX-=I=X=TOrH+}o>" !"mAɒ R *~'ČDA#bն sf8Uʪy+]Ć,krM3Ggk2ĬTWYk#6Iz"ݼ…Ag˲Z;ZmX&K0(Tb5$--g%S#w)3]53!#a ɮ@ƶ}`c* mk*<e+`T@́#qꮒ)Lvzܓ]Lb0_gLMyb;h;h;E,3IffGF Y?.Oa>aat ĂEm."0 ݎn 45H,8!v`dA@U$SvtQFF ;j+ck #VoF'K&s m;~BcT郕\q-2aMz4 sS74nn۽i | $ &Ac&/C ؖp0N9`05fXiۋgOEh~>Vvv`kN:Iؿ]txEOg 勿O7$0̃S`]`eq4vI(V]-DaMuYcr1Vkv7 9YOhzd S+l& 7uQ}Ptz}C3_e'5\+Ђ*z8 ) Ws&+u6Z-o3)(=l $nMC̋<bw>YC7#Ƈ =\4Y * `xs xA` Ɂҹe k.h5ye@ iX#B>Cl31hèXrr|iqTsyWB8Eۄ@Q`1OM`3|T M{^q+jhY%,ù;^f,<ȳ yۗ~9;j}1w`mOo4T,mE-XJ^h_`.VfhCu%bD lu'JB Hƽ+n N,b䂹ck.{3ύ;u`ʵ`%I-9 5Z/z06nɡzR{EKñGhs g˜=blB9'uE}"2R$uYt.8Q Kj A&†AN.UԈj5=a#i˷s Od #jL"Y>xzN=qDPiqeŝ.'j9$h̄)Ê R3e1⅔ |]%AOzDIbE/P \bBDD'tp pH bNJ6cBjD)h`:ku6ܖ弝\c?_JqL8=ؚ4\+W, Tb"RO@Sc YPꡄ_)&\_J?D~mOVuöK͋-I AmOMfމ`\ֶya!Y%ļTdTiIa紋99qzM݃ . 9l E-5O1z'-4gO DAEGY?';h5J9DŽnup#ݍpd0GT&뉽 4Nc$QTBh6q!;qϚzNGX"$66a049 kd`N "d4pn0TZin܄n:$J縎}޾xڢwǗ kFnv=9vy鸌BjDzJ)GX1if=hF#GB˳ ס {nv]pF#Vߋ}L~} 4a|c"(ʻO(CnF5;bH}8$6"_Gp}B`շt;At~st 2g-oq`9~?m5߷*J3k4t  Z1g Vov%0m=}88)i}ٟ[9-aD\"hK7daS u%ot)04M`mj7B6-aEV,H"O=fY`P~h՗32 Fu|$˘4b/r} C}(X!M7u\^}e%qSVxƣ=P,8yFz)2R^;wuᴀq3rHb-ۜ "G.pޔHVә^OݸGLsG0CST#MaSZ0+j94Ys֞ţQ 5aqEfr?NI{>یMVXָ19FO#ٯ.p"6=:yB˚ID޷\36g]kZLA|?{i8 Z웊k|l=fFV.WH.|9jH ݪ+ 4SȢrA|vI~ x<"%x O;F@Y9Ln OhhIalh;ٮX48p, ]qMm)-kƍ|n-}]Uwuk5qlǍ8`-(ǏEc5nAM8 A! YmѩioO.؄[9>mr}c`WX8v|€bKcęg]gjӢN!Gמ`$d)p6m7H+ tg5ڵkү#b@=Z\&! h CxG5dQWF3rɢ/9w'Cm3Άl [.8ؼ*Dr7L0$%cՔB8A-LJ.88n8b*oh:X S1?0|Ю"MX݆Mu#ѦtfЏQZ}pQlG,7q*QFjYqa. HD Ȱuˢ`Rᗵ|N;BhyXM.ev|9ʹC9Be^.\NWD$ %cSݯmTS| YG{u'9W 4dc PZ<4[l*zpZf(bͧW/߻|,:B N!d?zdZ+wCPGӲ &fffIkDHc ¡L\"ݲvJ:wN$PǤEQA5HTRfز c.ٕyE `,fÔD ;d8a !^(b `kc W Y{x渇V3{4"cNW'v> viJeCu>WӑB =:X66]dtqSK%#kX^Ħo 0\(,Ixrcxz]M)*d˘s~iIRLIG-\,bKi;/p)#݋OtV,!mOA+iS>R M_9߸~Kw˭fxWh:j?hk5āK\V譂a](x> 6]Ā^( #2Q!st[4ć,QL|_έylt¶ã.j\Çt -FX(r)~VC~H3 h0Ly@ ݐ!va/8,ymk1ȟ s\PSӋ ErlcO!,!(xrҀLiDbeqcs(P*lßM:s Bkg[}iwuͣ-'>8h6^J͟/v<M ә֔$ 5"A'AJ!:&p9׬ Vh_9I%R"% 0RƁi|hGMʉ !e:/j+1sTU#1Iɞ/ J987<3gSnCAN%gȍClr0h΃gNjuZ*[ E"zG"j9Đ8%k4ġ4 hiN~9OLnnZa7qWu䣾+Mhe-oHq[g(x4G+Ҩ7Rˇ_Q3sq2Ѵyhi#;Y&q wW"n}ú=2F&kb9&A)fg wR<2 d.0Iʼnm8`X[{sۇ -5/0 AW8+ȩqm5$.z6_^\Rt@$@A1@Yl絳.j1?k#ý=RQA9[P:&]p:X& CJf b }pz0 $P 6堒}o+'D0`+Zī|T[G䈊pG#lUwx(Ni'6S⍽Cn!]dYEqb8oP8rnG;6as  Ld Sfz!uB#ʮ@M25/C&B&PU{tSKeR BQz5)c Ս*!GAτsZí 5<|{O]̅PKO Xlbdd ,Uᗃzp`ς6ٺ!4\c.,CKf4@# [ov,%b \ &8ü!հnN.D29{YET[ Vx6ĚL힄'=;;Y6Mc\NfDȌ_?[F:- :xFSGKU U ?W&\G ew0#k v(׎g8e7wB bnڲmA;9)тi(p'okoJչp!Ft~tGw>V ׅW 81[hq,hs/1oBGn+EFuO5C,5C ٴI)BpHJ@(aZ. aKEѶTӈXM9ѮUm(٘UD!N qCL q/a5,   ?/ne(dn@xNbA#~ ƧR!\Vɸ)6yrȍ9}fbLz7<#MV:=**$:v95ih $^„~T&͇.`ǒҭl^[bYBt,èᎭ[m;.֠]z4gx}U(6X.Bo!L mޘ|CqgW&qlk^oe AGUӏ?4pg#(0,2U%<+śk|Gjg&7iX5w"셒\E/#D=/c{DAhȄ`.:MOں}wprF*+00gv1pq Xu.`^E@-05iz}[;|KitGff>3ĕ@P oV0IKq-}f 4 5L 9_+\/ Y2nX%LadNY(esxv$p꼢*va < 1@XzV#Raё!#.x4h!k*+^gt9- F~m2K3Pb*U9dL?-^YS}ex1.:P <-5@p՟Ad@b{vt};tp8s CPΏ\I*A:BS?u8i;Ul( 'f!D_ywĘ3}偝r1>(."p 'tA!P<-NE([9~Oy+mlO;s#O۫ F(í],KM.(lmf,u3\+,r6(\@8Z#z6ܷO[@LX0h|._6B684GǻCG]q"^lg/x_TnS\I Z 2i$,@8lRe]ȃ~xMeE (aUE &զcߟvCv 웋HE"Θ";%Ro`@f{Ӝ|ީ |.f㬯r=[ ][; 9`m&Pb`EkfÒ1p1|SGp#^:o򮵩Y]!`)1 B2!yn<7$j@Řjڶ1RTG.:t՟.CnW8v&+08_Rpib y_";^w4 om ~9xrx/g2]mW6]M` 1wPgcocZ?l5yOi)~36orY!rp^\]h ZL|sݾ9HV!B,Ϟ=|L7s]-/d,^Wհ m4=0"Mf\,+R"r4ng^VHO8\?1^{ևAP]Ѫ*p[<_KF"?F)ka8}[]Ŀ3S }t+ *yyjᅲ6 c@Es48+Wa{)jx}G: ^ Ѓ4zgRXG#f+]6sqd~Oi2"B@~)ͭM᪂ZMpai%<04iԁo(֘`Ħk;dLrBphtQ|B)h0Z -4Gݶ.ܫF;G\ÞVU=P\ґM3*|o|hDE(qy 28|p ?+a&G." 7 eƑe)7yچ.nzT& .-j͡x1݃|ܼ,)cup==4{Vn9j!0!]l;GJ>8G?C}>Ã,z?6mtD-`lΩş`@`K^l;YZdn+Mz{lA(؄QJt 0St[dɌ89/o9 D.nAu5IZjm^?r7dž6mLl @s~T->x\18>:mjcۚcHw%zNjo>`D[1!r/q͙ {cYmyey870=ӯ9g}3zA:m֥ <`9$cuB~(OҔ ے+UUJm肂Ǝ,Ut=d^0a=3;Pےbq̇Pdt}33q?@A!3cUqyOǍk{"yj^q6>ZB?˼CDXo/vq>4ϖ_F( lqD#ʄ0&ÿNd!K6Rٺ3gDEl!uSl a8l_clv塲V>Z]m 0d҃M, f(][-;X59+jLv^|%!.1M- Kkv1jVł,noۚf gbwajX0YYxڃrB߉.H4pc^m=m6#Q73#w ]6ad'÷=PkݜC^c zu,VL #dP30+]^2i̲!sJQ 1%l:cN&T? ^{дn9BBW}q_^ua(0VXQlU\qWˮ\ˈMߑ= i^ƚ$jLvV+;={ZFmInp1+ {֯*%Vm+EFGk^ ȟ`2"ݝk-Y;.QAkRGʇg)B/\/1<;`w-aF*7JdjuyӴd*!eF7ӐpIk1q+0{Cםh-7=Fsa2LJ$"'DluzuSuµ=K`nWsDbH.Q7Zj6  )o^7Z.w,796hbޮ{WioM] \i~u=u ʧg+HMV$"11[DzL=J:WAYrS.=lIHu>qǠ}Bٙ9r=k9߱o9x_O-Í91vōh3-g=jE&Ǟ;5sFlRԠcT8[/8NrЇ&K,5[_B!f! Obl Y~P5;~YLsc#m抅;WxR+gK2$ґ+^y,A_p@Al54h8rJں`;pu`Kݮ} Wu 6`v3ۻnSź^gn܌wi$i m^ݧ x#{zy UdXC1sO'@#H._Vv>=&inTSKUq Zޯ{}Bn[ :ߠx۞1nPE!恘P̺LSS{Z+OǟK{0E2 jD{gBg}mmٲ*6֓L&Ԏ>b; n-vE5,'u~F' ڠ=7h_+be!k?SUӮ0s^KY[#0f2.:HRrT{۷7\ }}_ܝ{{[ gͻK#W4QhS\׫ū^)a֑\x.-qZq߬:TLd}AQV#]ٔ0LjyRaYlIʧ7W;Д5UZ*T_UP7pxVC5T(LchpGSV皚هp[ˉyojֹ ޷Y cHBw۞湸sw㘘WCQ"=:mK_"p0VK8ڟnc;fwËcķ4ph QR4Q;R miӚ]¹*y9G96Lb5)ԣI]|e4 ܧ Z9Fs1VF88h56VA.<f|Z˕yv8/^dt8~f7imetNmaaT)6Cͣ?NXa=^jr&+n@Y{F;64 ߐ_ n#ra!u\g`K 1ⅈ.7Ň<0lٓ\T0. S5}rr~orj=m\<?*}3I8-v||#NEO"H;-4;E;!fe :(}y9iPY!Z Y.2u138?z' g [%r*IHf`_ E=D4Y (4d,Sm7;1BڹQ|:HYHM䔥[!] R+X6i "Gs]Fm1,J6[p '( YXJ殫ȱuwc`,m >=cIγA]]A ӥt4َ[ cN%}!2gUԇ@kia$eESLH ~RO,;}sawBwF/ #R(3<9m #b'Z ;4kMY_Dl28bKmtyYkdlIqg?צ,[<߾_6mҬex{b\ҩasY`+{Wh)#>V,'uMْ:QR` @2IVX9Pe5>~8P)N3]7d F#'>;UXNm*y-KqmߴӛXfxO>H5 6Hi>|y~ ;/3 bȈVA`E" a0ix=, XRY޾Mb-3mݘ3i~S4} 6:t=(hzm= P̓++݅e8az+xk̀ W]t;rf|]>36zD7fl{t bƺVsfۂ]p8~ Eۙv);;ocOR0ְ֨IT7ڤ߬CS 4ˮzBgix8Ih_ s(j$:kū N fR'8;Y4vxy͑dNΙ)3eNZxDi*[`3[۹wqs#h="NLn0m'sϭ.!7s1>` sX`FJw@u @oɝƑ蠙iM4 B-lqVq# vڶS{a uP%ʭ̵c;W୬U5!T(?fxh\ݜc@G w\,41 J1q5LA>73k@DŽ&}f0H_ C)"w1s flض'=;8.dT?ם'M? U䪽h2L ?|0@̀|8DaAK@cO ETDKAD*Ԋz(9SD:hPS* E]< A8hID$$ dAˈA$:">`@Bo QP.EFg@;x9pED [@H) *@`(meOTEr"(P@5EQLF@G̈*DQ܈@KAV")DUpF*TPE*(i6ڌ5ykg$<_ Y&L:M/k~y|@M,qC@ &Pƫ͚j|`ۃ^ѝ폿aچ$c8xw֝𷃩lѭ yh>l}N4(w?VyCѻR kN @^v.c5  4Uo2+& ^Z@̂}&.oq~4y}tnq/MAӭ=#x!P%NCz(%Q`qݯa)xmHvt m0xU`)z(n()"M'K4inp4""@L/Tc w<H'_sd,PKF&d0hxTQ jk;soKj?Ebߴo<wi." "胺no%gQfI仟rMa0@Q" 8 m9=(Ƨ/r\o'Cߙ4=wg0(vqh#x~}M@ELW+x()z.Ⰺ"*":g7~'>ѹq9f"(:^/Uˊªˮ* @{nGppDPPrl7#(E@P?;/16"?VW%W_zAUz7x~#Y4̠Eg5y Ca>}O'osJy|~,E[M;|t~Sq@ܺ-Zc;swp9-QPOCL97ܞv‚:؊'wSAU=F@]\V?_?%Q{x]tR@q#㸼QtG AO>nc+ :H TEKd?Ǹtp¥Jܸc<:`Qpl9 &ێMNegex.lA6W\(~OQ}Aߠ=VrGIO ڸN U2H(oGEgwˆzYBD ('ڴxA4ٶ?}q DTwi=8 ?Ec=`n+ɻCp<&.3oUGnp?/}Eu_i9zD DA}+R)?޿n7YN"/俷?=DR50D3pK\M|M75@0D;w PO~|>g~} ?!G6?w" P|]fM7<(h' ?{8zb'!AP޾U:ar?yv۳3pqUF Z/ru@` Zz>'a2_g2Pg>ߋ"&NR;g_gO5̛ :Xti{;7ejz@;.n|N+ hbZ#[sܽ}ϡe2~A}2iUB_7sɃ6 `6#Y~͂"@^G]<u7Trګ=ToE 8rug3ǎ j,Hn qssMca16ɧjnqrQ^[` 'm~~O H#Mm !Q#v@M=O<^ @'mEKmaAp]q~@muxq !>/ub h>/]'_ I_׺L4-{;NaL'Aa $ۄ}C 1C[|Oުh'k~.LɏUSEtV^ҷ"fC>!v]?{ v](c%:=ŸKov@0 !"04B0궍u=_wc5qup9S^l%1 A{>Yrpo;{c{SM^WSm:M/ g~H-airnȏAO=2}n;.ƌ _ @ڰ& Sx_t3}O{?~O{.?@ndž S:]?5+ZL5?ĎCc]k{<ֿ`Mbwv\jd\ȱm6|20cwϫ{rF70O1#D.;jiPv_a™u/"/3N.q z=;QO'wq۸&+wsI1Z "{mB_|E5]Rf R7i ^&c%, @X&\MHxQӯc3M/;̐a}|D=>@ԭ4cfu-O}~x/[4< wsZ{ӰM$Tzۺ(}^v~Ʊ٥'i̖ikoX#2f}iM(g^6x/}8 rl;{zީrÇSLPY1jrМ*3(J^Co&rV*w\uuS֣+eQ0o xZPi|Uq#Ol|?4n 5"vj =q^7BCJb' ɞϪ=˭c|1+ze.mB>q0`ut w-~T *Q7"("}^{Hpu#0 asi[5u=T(Kq0^Q]I "r$)ŨW`Ӽ oXI4x )WΈm,"_DAj.Q$ uC_zæfu"KViO0}߈nq2P*eO?ީQ 2i5kІUl)bSk>>x`#0PL?κo+43-8y7'(q3=/ ?-2Nu5S#O.TNޕ-=$c,sJEJКbOcpQL͚~E>%RM)ݦۯ{,ysHE2D<BJ]vD`a90L" :)Ef÷ɽ]u?a"Tx0H!K,Og LhF&8#hTU$# "Q"HhKt-C D8-Es"i:3M*;(O[/@DPPۦ 3KGT@c3 !!"( T , BC@}k x( @A &$P"aW )x HDDӦ@LQLf2G\CJAQ >"8UmF4 2)ta7[h!ȷoSGG@woEN@@@7(:`0E^"!\1pM{Qx mQ1D2( Vi!h<A aD\`8 H#„M5U4I\T/-b".kqGlAvmT " "Mp0*dAqM&P -4D@& ؽTD^E д z(@SDP-8c T DA]0T-xhC(ᮍ-  !ϏvvM:$ (aC,6MFa 4zˢm5!nP 툠€8l䴓T׻B&B:x! ua[x(Q* Z 0I*cT(.4ELA`;2e*H@I»09BC0-MqKqP#*QiK݆E000,hD~l@J @\zxi8;VJm9 T ^YmzPDe2|袁mmkATIM$HnB9**29]0+#P/ù(PqT1x"o@rCss4&QHT752IC~j2= 8P4II8:$MCgdHk`_> E1P^?EdXwcvDw#G%&#8!h p+W9"ȢnE  1 @ B)B, a$Ed`EVŊ  Q5P3_˔w- Ƿ*1*xƱܒYj pk|,}!2PM3UKg mvɩCVωY(L[;-o۳=̰kӻk椼E&tC!;,յև_ ;M HG^AP aJ]s˖ۥ̸mRlmgm鑡Ut&5pMFʣ`rJیy 1YzK+H6zLkY*LWaeW]iuXDPQ "^:Cv!-xǷdUͷ5jE7/1<*ojn5lVs3 b_LiKY"+=zyoAܽns`HH@tID7,HpXU,uUwόSkJJYO%<5ٮI{X=F,kcnzY]ْF7gmk -̴*8@tz:Нm)#}VS]%O=Z1FZѯFs:dom榔mŖڎYmZ3V[@" 1(UfAtavi ='[muPz,jM{tQ!-Wt=8GN99`Xü9X7:ѩǭvk]'I~{k˿]>λMrμyx.k.3Qxz|=\8 JU(@EIVNӎO&2 c&mj`p7c8S*73cx3Ny6٫=8FTt%$Gko;x @̀} csfuDtQrQnu彇$u sE€3wܕ_[갴L @1<`*J-jዖ#ܸ۟daώџѩ3æBpӞ(/zmj7Ǯ ǸizZC=@2DD@ FskMدѿܞ d|;>e]k݋WA {yxznsRl3Azq Iqn>0ȁE3T67LpQ@S)ٽ^~5Φ:ۚ9c }淊  .q`r-P2ܯsۊ@G8sGWaյq""sD*pE>v"s;J߲*mݧUa7⢈뉵 pƀEA^D+" u"<@𦨀PA@P? *{PAGo + 07tPE7H ?"!E Q$ ܡx=2&DQw8(*c@lD(T;ȃx(ERP `5ԠTQuOO\"}PqLQ "{U&XP4EACYDWAWM G(N8UϘ⩟avo,"vABӓ$zDI@EEP HD1N(*! "4GDY|8kC@7f US x( qHG8xzV'rDp}QzCh_ sNt M؏7% v= VD H٠ 8hlգO_=oDy2b"oZ H{Tm5;D"`M(៉2 ]wvo7]yO!Ȁ|%Cn:8Ͳݠ~\XgrѿmQ@`7FC6ZQ\Ȉd0 fϽP8y%Ȫp &bg3 ],mMVzQl2 1s"gQIF{qs_{^[,V>mxȈDb7 f4LfFV0t68飦dТ So$dpg ȍ hwqc2 x3O':ThnM1jy F@c%PFeYM˔K2.CΤ:d&lҥpvxSnJ~y._F V;1svJt)znnE"' !FYVf)s']=(\[r6:o[,%vLW|+iђUuDM^8Yj0@ 傢 [shwݷDw̑jݹR[To:a|J T9-R fګdv FI.;:7 . <s4vYz_n!о n>|ԕtѱ Y7`q:_[u(>+ۖi3 Ń9-SJ8޸rh^w:v4k~b5z\v]Vshb5XkFLU㳓j5JĂC[DD{lb,HYK^$9\9*Hf+ uˮ)8S6$Ԇ1XQ]f5FY;qNnQWPfkUVWPQQuT&=0:!@1^jx9-b{g)}{l7Pc3T.áQzq=Z1a433ѳt@7&}T(j@yd[@4HQ/%N$H"EC4>GnEw{|ji[?ZSZ:/U)wlte9TfҲ Bv;5ISo-3jjʬZt,qޞbc]-#SE[xDr撠C)RP]{XKN -Jyt]1Wq,)V[x$v~}:֯Ӻh\>ůs^BwǗU;~^Gڽyx~whG;?rtv~DI\a^x?{|UN'u?cgurX?KUYP?9cWi[}a~ݯKaLivMlWY~Ť'PK9JF{q3,f~gUFmg {OIw9XW9qGSOM[1? s=<>]{y>m^eo3k_P._2V{ΩWQ:6]û?"烻K.<>y66eQjc\_P=i?:͟{?ߗ.GA0{艹mnyv3_jug_g/qpw(c?r۔u}muR9?םw:CkLݿãkz>l_y!X*$XY}B ;~u3sp_8,"0㋖S\eS m@5J{m̂*xi yM=? ӥ2UtI3\Dc0Xz]8P;fDf0^{㶐nB}l&?,Θy3ay߿eBȻWc]_7f;nS]%tN,T& 4t g9TI>/hQ'k>u9?ß^)6*jqűg\kc"95]Y f3rDdnyR֓\68sgJTwbw3lܪ;zQt6}de{Hry#GFLOv#z9\[NHQDx7 [@cé8Bk3r`HUvI3qv  M|=;:42һ'xh~sG"TPB,]2wXдL=x2__=?OyrG{W}ZT]{?BMȻ/s~zgYۼtQ<==OׇQE8DD/7O4.hvW_7ҺiWЮv_nc<. oK9˥N9}]^K %8]ĐŽBߺ=k/jZQ`g3j  kmFߍO#=?b蓊GPS,>CY'(dANxjLowgBhvgg񁳦"CP+ʋ?~'C?נKewеȐ5&Z ֩ <@.Sy"q0Xuc&[Y3Dn " QӶ?s¨ڦ:bt6CvpZ}ێt/J'#aaj5 Hp, Vns4:oNkuM- 9B#6 ŝOXOhƎm TBH]IrɎdHG_NiEʀb#ST%p0PɥNyrʱI-5ƺ4Ҭ,z :+Fx^y8֥q`_v(Թ}ڒyt@\cI1|Xo6B A (] Wqrֳ鸊m4A1*q^ 4 <:668fhC$"s̸%e^DӦnCJdi]hC:| `JxT& !ahڋߥDаI] ʨhfM3Cm(t\6`hm61+d lޝq0?Եl9tg>/Bmm/n}ղH N.a% Pϰ#I9^D0w"PuNN m@ .DՋR*RK{L0>ܳүAHD%J Q P& LGBP~}GETߑ-k&SrDF+ZQAK$*|^_POg ]`;DjxI(f ;8k}7ex@Y8AjU'_7%= iLS"!;B$s)&:GIE1 1 L"ImzhɽHh e:טj)_61m0b a 4y+6r7Z4K~x>| >b\@BT@ RL1+iKhpѓk"XS`˴sڹG׭wک2Nsxii%fkҜL9I"hW瓄PUmhafMXp v[S@GKAV~:U{wmNhs~erGAzыriaMc]'KX7qqt#HqojH IqOtְP !; X|Ͷ8-m|wَ gm:$6(@U( MDB/WP 崙&gJi;Λd D zxÝշk,qSq=Z\?#[^HkmJ@Ũ֊#JWnsmȭ >o{v&F,sZ?d$Th~oV h_ j<ŹW8&HcI`v{Gc1֟ yQF |wW 8IߧFqHkz-ȸz`˜ڄ=Ԃ"9⧦q{Ύev 髬}8Tq%%3:nl ؽAk޶lJBt$LЍDs\H\N6qq3 cQZTQ:-T Re׵gw֯X6@/@AGoJ-AB!ˑZ=Csc0=G>OО2ym7;sZDc-tt11dP @j_/7v.Ʋl (01h5"ԢiL&E~6gk gft>g ǬoqkSKr=3 jվt+Q?|E-(.ImgͰ3 EAmr F%pk6zC̞ݴ(na a08OϞ=jmuh IR[]j,ks.k Ug+Y X zZi~F U  i6fuXL! @biӛ<)QDs]t,>N[[anDI{ ڮX^@M42"K֚&3}^'m"광>5{8L4bi5fmelɶ`ꭞf ~ fmN6-SjN۪,[ѥo^r.mr·U_ :z,,, 5䈙24U|tgo(5vx[r[\Y%^ϑyx{w0#b]y<뤯)r~sn5/;V[loNfՖil厣j\8&tB#\-"3vU22 3&Qvyٟ3; ˛. ;VၚMP=SOϥ$ޯKZ Dz@VCqfV,Vmwqþ$DXQrN.FЏM!qg~wM\T{>㶰$lon*ގ+ob@؇,A:~-2;,i̋F(諪 (\2:D#$!OkJ/{g*'(O̅,lbm6ƣ&,CriV1ܖt+'.Hj}s;{ʷݵmiY;FLց&bk6F5m#]|阹2Hɕ~tnI.tͬDT.\oE QCde\:6O>,6p/ɍ[ȱ6St~uY*UdTՙ)u0Tou՜ž?j^s7ǙX +`Ì,bQ?cO9Ԭ󡚜my1f{"0/ΛqR*V]{b ʙH}8LBT2hoEQ6̌LU^6zed4$#MB7w:z-v+Acl0RiA`_g~A7Nne;u = s |wnTlBp{CK$MwaV,S edvP'kXŌTE sd+F\w>QrqnWGՆտTnUQCU"cq//?"0BlPm=a4f'K=;Ph,4J **?j6e6>ߦrZ5:@2F MJ J3{$-;~N}:hrW7_~<5=ދIK?$ݦ/SW&_WY|[^Wt]ow<~=w=o75\יWׇYgQn~[z/ŧ2LIs7!Bga1}{;޻IS?}c~_z~E6 =B">Z)#GK৩}(e B<|u{|0K,k$"*-~h%D ꏧQB0'gD<=_!~i_﹟KW}Wum{^r<~+oB])Yly:{:?+9l}{q#l?ֱ>3'Uq}x4#_z}o/oqgz-߭?fN^sV?t߇Ut9<^1? kگsy6Nݹny?g cg?{_qu٤w}6W| W0}Exk/we?J/߉sFƬ.;2W4VsC2?eDEܚVp26rQ#"0EkU#-bشGÃ.k~w3s:o/{dYu{k [vdLAqAJ#%b}' h:J._hL9og\pZ:zj{Z^ͧɳuh~F79|GuOo~_{o5Wb)#az(^̅}Z_/ޖm.xI3H' WR/ڧ[bW$ؼ n` :ڞ3ő fpbGQ P,($<``UydV@ۢ;Ps9gmy8yM@d6:1H&N6g~`r\޻Fpč^Pߢ`N'QOebpB/PE2*OkQqũMplU-hA kaökSHV޽V#otV=O|'2܅z/O-цR]K^+>+泂MYO/N jJv3L\Ar6NsyrP|GOS???qxu]6?\}fly{PI<:߿v~E{l^Ӥ{嵺Q3zZT $T*0( Xt-;~Cmvz~x9?znu]`mW[{ZG?~CS,_Ӹj)u>Ҿtu9__Qc'"EVH" HpqTs"ZH$ȩGC!J0QܞrW<&/PIfp#v?_{F%U? [q/?njO4>5oaoK]KmF3W͛P8>$b5]R765 DX8jDJ>~[Q.޾U<צ;5ܧỆA?ÈP )eϛk~9_&M'Ы}=O7&%9OX/K|ߊ3V]Dv)d{~l4$_|+ߛ,Џ\>bkgy[fJS,[0auobbUoKNHd(d. fo .!ZfpKg|j8hiG~lk`4a:%w ߷7/hvdbPĐN0$tVA9*GAF/ЬWT y?/8 2~oߌ/vw=Kv^TdZ|=:&kn˚NkL[x!Ɵw\.L0q#HĹmQ.,cW!~_?]|zK v`y{@r^y϶O"@xK0ZQ>fZ\Yq!cF,G' qj[?`(drD6 \R`gH/M{;er?ð N 0lKP{OFUyNZ Bkk"go\/$X IaC/ϜA:'cF!r'^\yrR6vzt(~l9yn[o#A{}!=CL/?<]s0\XKw*nbQ}=׋`vUg< CmI$M_m $OK(IsOoz/sY{M{_o_#5R}suҀ5@8v :T!F\_mCCL\Y`0 ІtEŅ= *7ATWFAڢ/:G??e(afiO?]Mw}r7m}m;1][iH ϐ"9Alaj#(AO?rЗCA6 nx?|!9?{ryw_wNW5Kr5:ݎ'w:}^=$uiqO@iLFAǧK%6 o/~+i·~oߗI6s~븳η~[28 %BjhΔ\-pg~/G?K_?~;sG4u3_Cc  8$@* .vrl(|-m/RU*2 VVTVg:_ Lpg 9]_~״9_+ѣwp{>(=|Zlk~$:sْ x'w?ƕvlaj9N>r<~ s^n./y0+h !~7/Z1ںPo/'>%^9=ϟx}WO+g9!O'nm/wpӧk!&0}c'#Œ@IT9ξ7F|cvo஺M\ED >ZQ@$QVATgJdTb @ 0z7[]*ca=ox-х{O-Zi#?'wU?{xރ5[S7e!NϿw~= 4K?H݂-6גm;N0ruI]B.L&yu>+b6,qQ-K@A&4?]`Jg ]2O'MVQ[ª&6] ,BЅu[O;6;?Ι_Xw/ous4kz+Ğ_Xqqh$D@{&cfȂ|\"DMQC4;'>~Ѿn7Ѵ_w|(]k\ՊmvK9L= #~)=/Z+D*¨u*;zPXE:"U@B .VQC ,.G:y^ߟE?& GM}[=?Ory{ );m@(TVml=r,-QbP.z/(MPТ VN(;u rE]tD?EQN~| ( CI߿}U?M]c_u>Gsc}=wj 5[Ձ+'ba ^FC|؊ lD0MLQj$H$wS&\2Pם?ENB}0YY6?g7 q$grr|On99=i>kJ9ho~gL{sȆI? !V{g@cA:#$CV& >%ʥt*6DmWVED- #9% k 5;lެ0/1^n߈@QοPEkBҹ?8 LG_ TЩ 9+ *#\#E91!SKz!tUY8~\U*;:,{i. ;gM "1ThƁr{_mTP*ڃU mi@m ~ee:ZT+؉eUV}JΓы{ok#5~Akֳ=a[39&FqL=?i}&mXKD}oV)Wz-4חy8h1vuSRz46zɉIL1٨Q8_HimCiAoDS\G_^-- kQ "| UĪExՙq< 7@ݐXCG{/W ֓NGREtUAӚQĦںkuȫ>Y(˩TŒ6#cH>En[\ϖ7WQt,vYx?C^rEeټm'}J݂ҦўEL-i)eB`L# KkќkJ3ܳZxGC׮ r *Yƒ#ul`'fLꅄVE,F̠'kN4 C;4)MOfFK3N\@z/Q#;"b,CK{_keZ89z끐Y1̿ߖ\Y>`o7:YL',MJ@awrK@3ڇq5|OAa䱽c> ͸sJ|:TgeVR 6hDEUҟرi ) Rac;pz8\vh^wG2rЪ0s* 39L{mB?-~7л_OB^3Y}6"s[d8#}.};CDWµ ;6Updw{j&2?Zǃ-=|zU &]dyG`'fg[ìأUgUҴSn:&9.(M9f6C(VG1Zu!dBBNkCg.VH3~M=˗d r-66Ֆ-|ĺ D؄מd'p\,eF Xk]bgT9{ pk$6!T7qH5#𝽗y@݂9:wv(!; 3kVr82_J v[\W(0'I{KFRQ&69ڪsh}*=~(ٽ^iQ;QsRgutC7!6Ǖ)ΟLdmh@8~n5v$vUcnlSSۥɰʘ ^S"db0 qqzUdd6kWrQKF:})ʃ2 MDf=O*SPH݋}+>6,={ncA`Nu1ANвp}NiY(4|4ﺋ^j&l7ɒHo^qɞ} F,7W3'$c{}&*`o!W>MIj7JS,+h"* vXCU&=*^t Ocu#^Y>KW: 9ȉ}x* &XuTXqzvTQ"Sْt}NM_?ku>H+gpc mpam!+umvնVhӥm-5'`ҧUkB" 1. cS{6K+}U:5ݻ=/3b^9 Gf Ou\HS?I Q][te- NjPmIafcyˊ=J.zO>y]Fzzp4s[-  Cwwy,h6=jlTj0ARZc-O˂ņcAGBttil1΅J<66QȊ_3 .u+QmŰZӽl-{ȐH?U bA_}ogi`YUtccvݿE^aWŝ:WSڦT\FŸf۩*a!mzO^MɅ^F^=)Us΍t@k(aBE\tThpjQO(*u֡) /T'o/ϭ4!ha$@2r"ʡrH(NNpA`[B~ۈ5|ڲ6R_r¦ ڳu+6jBi>g6:{G ڜ kU d -cgEr oh;ay7͑4'|@IW[ìxu$Do6^_s=%Nj"ŵH}DeoȤNԤhTDߊY@N DaTiUyϕOo|.K/ xHd꡸Luc80$@P@D@G -%Lxԕ鈔BMCF}OWsJ$Ͽ( a.~IߐCH0{zMmk* buP9"\0D"x3nҀ9 dS8``a>AխԂagۃ kv̻gU >A(@9xmh~j D| P*  >%#]ܿG12!&c*eO5 tβX:opZϋ9j.u֎=!0ԅ]>I8L" EPC΀=+oց7ِe++u?d6nP Nj+vDAh͊ @梨AAD:P)" P0#2@v (yz~_5{\3htF ?~'8bt/H]ՐHvQYBE@ @C M *߭-οN?TjzihfCJ]b"WiMEE}C@iPmUEtAAA{T1]o9ۏγyLN:l1]P|!WbH +"2 ("!"!B "#(QdD !# H$DQT,$,HEdAEHQd"`X"`F XFAXȡU"A``EdDdD`$`1TbbF1DE *,b0XR1 Xł,EAdEV 0DB,EF"*0`Ƞb(("AV(E1("F EA Dc$`QAXE*UPQDȱQ(("#DHDQH EDAEUA`,QX "2HbDB# XU ("A"+"ł(PI@d0 DF1"D,", F*"` A` DIDEH 4`"2wܲ>ڡ!I:W״&^̫ny936SK%I"nspGEA  &.2sZ x́*Fgddt=^u+ 㥣B5Zm$M6vtI;g@U@XE;*b1P-֩m{pOrW3їR>6Ϡ2Uv1 BD?yPP T@sPorp$3[6NOAi Z)T@ѱUCpPQzu&{u؀>2%`E_v{LLBHC &|X0oeas8,ӄLP/I$EbQ&I$K2ba+oÂ7fRz͜ 5f-?FɗT4ZcɡZjvT tX/oR.MkBkPxֳLX*uG ;D4n?8ar;N¯͠-j~߈0~}&}VHM^U;;/JΘUML)nש1fؤxd'}NʴQ#t9 X9}*{N]j~G7Qr: ^"myVb `O)hF%^8Dt6/*&gujJЖ͢دm L]#єEHW sElj3T =L}~;`DC/x+&tT0V% e@bb]- .'3'* <ŰUƮ9y"WufSjF8Zb'ߝ==87[ŏT9ؿ&aZDiAIL<#EJ ns:}%=VC}|'KKͮs{WXK 7ijٽPϖ"¹u\wH`?. v P̖3[cf*"E$(Fl^G3XTNF\ܠHHw8oHhW>ډ+XJ"@q$]^_:楾5Qlc{|~JքXcp\`[XCY_A~2PKag&|#??/ h[cw *@>7jb6AVh͛ҁ %Lc}5\Y]%u4AE-VZ(8FiiX b>FN|fH~-ѠM#5\j# 30w'j#_]Fvе83 ڤO#q>'OKڻ{;XGxt]!G^O$%|N5\#Ol!/oߧTR­y6&isoyh˼XGwHu 0kjˍ,m4BklPC#J:N&Fɬ7nPDwIC/o=BBh@p@# <@}٫bZcçMo/%^dWjjZ+z)Ol-hӡoxچM =޲eB# IO$G3_`KOڱצfFq(4UQ R!DO^i:PxO0?: f4L1/P*>Nƃ8}YRwP!GS?e }`$Q<))rERzՐp>Q\>O }H[/eiޕ~Sipþ_J4VG<#V\Lnoڎr|>%0zXQ-q %Cg k4(BY[j-)u\&V;SmݝܩiOpdX"4+6ByC+Qb+Ttn+}EV2"C[_9/VqđDˀHMZ/︻ ќnkTv&Wgje'.I`G"xGNqSuy~ Ŏ}|~1.Ľk6W~YKY~K2-$9pOA5TX>峼˗:n+WFQ7^xe،Ȟ8G>{A}eSu:n GuŎB9oc3Ut6*J.Beգx]V1M;qO9]med츯^X4om*N?gj\X-6G[x&36g&#jc6ڙŤ!k = Nzv$D"Oa.E liWghLx*cJ49ҦD$(}Gɵyƽ(̙&-$[с\,l!Э5/jmEΰE+c3/[: G2bZ:; __|F ^vT*@Gs҄L@I}J6|&AAEH(:*aNBi*>z~̅kmfεQ qg3geS5,{w &44e?^d>u;żj@R @d%%" & 9I #|Y[-$y 4P͉#?!8RY+G/12wlã,E 4vUI$K%@]TOӕ!=I+a/-쮘x؊;JsoDF(ur79$E"0" pSVhS]Qfq/3GFM fr4].֎/_aY&)" <6y+_A{7S+q>3rB+ho6x4Vnep!x~#&rt*2xiHra7.9[.rPf3SƿUOorW(>㞋pts?N<%Qoor`,L#;c)C (ZLV@dIamSLOТ5;Ę; ;liݮSE-̽:Wҩgi1S$g G)ʨ8ilI {zL].{~؍|DZ;V~ժ1C?r3\(1e:> XNKȝ|%78wcardxևpuk%\唔g9S-g`b+$IxT'@MGٶN7=*ZR6jҷ.%jBsSl576Z8n]ugZŞoydM:9 8WNmd͟qCpӇlś¹qQMGRS+woږ<;7ǑaW-śm]t*.t>- }v,޷M- V!8-yjer:$  ךd ¡pB WMj MA f! !;JZ[Pu1 /e6P]*Uj6'5>=_0j,iәN;M,2'jL.Qs]U )Nxk1RHqy@f+bwQ| iOu{7w~-lXZqF­k_ohK̈}8X񉆣:Q:s==z~@ŁAUN}tABXS|i OK,G,}& FN3aFR7QʭRuZChK a~ }^/BXYyi J'kX-cZڨ[ܼGg0ʬi lBnixg,EX&@6t3^Q#VVnOhv2k f>2&%um3ٞq1-GBU괒B@^;> TYg3t?9\U'ɥ.#9ǷASJȪ%F, #~.eԼnڮ}&Dj#N{I坠npF#0(s$Wen^MomiN>U߭b\hO]1ZS+*s+cg-xϺ iN벋5lf]0qu\hn,"D\u.tF47Y{SMX X~5$Lc$,xH^:~$5]qѕUֽ dW njY/:J}+i=D>l4b/_;VװڣJ4㒃 tf{,M! o}>t|]*,1VJSj;ji} Obr=պ/(6E &BiDK2A(lƼ.|Q@ %ZIObKͺڑHc(H`!ߩM4Q?@;$T_`0YGϛkxe/b/DEO|h*,P RBT1+(z$̣Jf\ ;޿2RD(D"H">)F=˚hs>k?e;0c-[]\ZPjTc_}/DTj{_U~݋v_eeH.(O eT-cPxtkz $ zlUB*""* *SA DuUH 4%U+l7'{\fLPy;P$"(H銨@  P/^Ien[:y"J!):AIREI@DL 25j¡-Ý,Fd& GdTT* H?mU,yvo|{9B06n{q " &5Â(Ј8" ҺHPH)}ʨXglsH&HhC݋   #!k@K$d0 6 Mf>eMVݹvpht!c.nQBE [Ь3ogs~pJ x2L)a%IEj_qDNT=,kD=Z¯LJ8=0pQE Us X@AP@ nrB~CzݩK92k$q>'/EeL͂S/3`*ߣB}D7DB芫L[%UVen?Qѽ=o_i?پ 9eˉooeϱtYq?(\rwD:m/+!Awpͥm ׬FSSRY٢ug|4iMu'25&WGr7*uT.J U68P5JjՂv@oIH  : )PJ3iDĨwp"@eiFD +LMn\snzOt%s0 ^@{_/ҿŶ/wndNxqWֹUwIf6VaXȪ|{eBcWBm= %@J6:9v|Ka#mL |VfMaNLiZp15#%vu GsW?ꉹPX#QV$@u mA۲ogu|wU: 8GYEO'# d($· ׁ߯⣖kwo=ֽW  Alb`*  SK܄@lS#[v "M];ͫ[wәGq{BvAjMї [Y{Ec[煺BV[J5lVv)k4}:j:kѿH> AtKMSh\-[6Tn|ѳ{4r'bf*ׇQlAן !-l,!ۤԔKN[?y1#ԧR/+k[#YCڞ#K)YM"V_?_;meiֈ kkSUME^Sʻ-6V`Ϊc&r::(Uξu۬Xy+gijNd7Z|i"Q;U-!n0B6K1bƵ(x ~ 61~bL'Z 񕒓 Ve,7N.v0sugHi)l#NsOwk21`7s_[ [K8P0^QY(i h3 K>na dOJ';;?xhI,Wla^l[#٫UwT#IER0Et",@LmJd3W0:mEոDD?]wV:sy`BbHxBP̬L63o 6ǏMfUD(03,(3QDe$* $A|1ee[O|zpO7Yt}Zr)2! #&;㬩Vҍ"(*-.ӂd8s.!쇙v Z_;H+h^"cʍi\9>P"5f\.sEY_Ь\TDb1Q?v',%N_ <-SOVpGա 6㔆[Crf#jn,&h6\X_b.h&88'-)!/ξwI 5dDfPnd;HmL<>jQ%x=-އcƅk z5xZ\}>]| mkžM߹ nR|6P2OwVI+kF$M<"{ft .L7:v\`,7Y a T7  H-E1m^.N%SfyOH\ <^ьrpJ 2 XHH""m @"?I:ق(ȈP|jD}U&ł">zME?["7R2 *^#A@8*w0?Lx{M8"5ڊ6u*׽|i]z|#`oUIPJ6{_~.xw8PcWi! ?*k* n"j#^4Ǜq6^O7?ݷF %pD"V- KGL0h8ss୸q3-&vTIQʪU{h 3=!@Ls2:gZΖۮݎឧ.6B)"͐K0Ӧ.Ǻp RCtN7oдA$D$FAIV0sS8KJby?66u;K^Qt6EKUOOΙ>JqJ`Orhd ̈"#㢽AK(#$s{<\58fa4$! kʠ¯{^{sUoHHeYڴWk`qfgoMW$#|yJL|UPOʠT=?50"tZ{2T2PP>" i߮ep" THw EDů_u8_dGbEqr:0x@ѽ>>>e[+59>nCW|uU7sWa|/y:8<$4'j݊' KDji;%YU @q؎{0Z]ʭO{`v8ӥmiKp+ W,֡q!hab%̬iIK˔^=pI6ch F=mEJ%DŽ^0\l{7*]m3!Z# 7YMѳ[\Iw6U}[/WxtA85K[ Vd~nI2:DR8oUdoRͶ[կ%s^n$ [Lv~R! R 薱l6rtJ[7:Z{b!hgk+ hrq_YY4˹ޅZx |w 4<د]#/"BvضЁ]ģ?@2hH::٥ Q,'YVloRydžN^.|T|'GɻLM7r:?o%#dne-smAn1ʻ'5!]n1m>ή\Uс gFR?wOa Z.ƷN%kl59qc* fN[ h-5Dk+t7Ir622U~L|O5kڦEUS&׻qZŵf1=<@c9?&G=knd[u$u섁Dt+fI w]h(m 6\P 7\P-0g{c㒓N|*l$azo(E! I;рKtԝ4}.W2s磊;2z!ժ˚H?aStA7l-x{ukd'.׵^_yiܿ+ZڣnsgHUع>Ʈ.b'LPk!&׫\fʔE݊ÉqLhVK_疵Q `%C[g :ޗ1<*BWioM1;(MIF mr*I5yG mF86ֶ]uiY FYfMf؛{גmjaS(x96WSv{Ic}g*\ͤ?VO_Vy, 4ïrFWXS_Fzɞ7(97Dt^~]i"qfxЖ'b&(urBk1%°cݰ(Xaܿl~fu&~! W˄2C8ئQ GS GU}$kQ=daM:qlg]v El 5Jӷ=,<|Hג[zt>҆ ⫀&Rp1,j%mg]DŬ%uCR:FYB@N`Md>4PPuM5 hwh0A'm?-]C xjzb .S d_KB#]uOg$A 9:I0|̲Dϧ:*J +b U9Z\2cnO%S4IT]8n_7w/vq-\>Fs2Qc/վVݪpleBS:ΦZ2cJ@txys L  HބIphZƾ n[ygB%GL=oGCLbQwclD-,N\$ s|혒 >\iv"d桇~oO}CׯҰ;}$sgd'Yy^(W4rpU8xwCQQaRf9,OU>n{?gmVD"(ù(9!xz]7s A=o<޲Yós'S"wL: )(:ԿS-2{R~'ȝΐχ25٫kƆ,p:$!R[U5i]wnD?+0Sz?Ih})_>GW@m $Ih MQkw~=MV]DĚo(<˩\,گ*zԢj]I(9 a&^'`uSϙwMy]at>vD+"w/~q>{vx~PeBugϳo>-/a=OaC{!RQylʣ{g! ҈+GZʄtȹDe zV;f)BZ# T IjdEUgc' lTU&hۥP"J89 h82޻9F{ !@{^S9i!BI{9v:VVgл޹-b)(Iz;a2ĹXҪ;$/@5A,z3"1[|a﷊rWNn.?Ym(VL0X,b#WPK2*' n*,q،3k^UU;}Q 1I \&V5G)`?$ÓHME/^0rE;o3n֙qa>j;Aksru9hePr 1hD6x|cґ}LTn iWzVCJ!޶Ī%*?9~Ӥg>CwGk#xHA>=N-uʻS_wE\ӂ6&ѳ4Fz]XpN*&td \5qDv[ϟ6bB`4xʕj4'枭2"+k;|wQu| bszKiSnUSҍ7ZM2֕ j"/] :}U텰zO(W߲J:䮓ٹV;|s41.5v˼u}S Jݪ˹)﵋/bI=UwO'%Pvǻ*ms]okӟ~V5:@|k-}̒ӠxW3B Wˡ h6pJCJ7xNn=Uy~%"f%aޠ;u =fvIi6 )rPmoh?& HJ $\\܋ l'TĊ IF~pp)KN)uĉ~˭ʪnh,bvM0%ȯ v6wr%GO?xtKCWOՇ[͇?-B3k2q1̒Bϓn1qũ7Rš|&]HKΎV%9zJTr$я^ ?gD^_+"$  Q<(:][_tjQ)^p@Y! UDQ:}}+f¦M?^ A[0JWjD^UJjxr`itM_WǻwnR֯$C`K[ΰڨ1{G&U~$-'҂I_z={uf#|.J< qV=O;8ۃ,4(S*? "\uPJ3k4[F&5-Of%xͳNF7m{Ʃ13Iഇˡul0Da ,$:/`6M`C{U{$-HB?I2]=i&J31 F ,Ci9(̣32mD9%\W8pԕ쁙 SEQC1+iM(1σ.)OB9XVhC?62G!böժԉ(zsOiË_/ln؛`@Vѐw%|y})9w6nQ͇N`7sd'jZAt8kPB:7+{=!I yjqxG5yFMCaZRÅ>{ՠc)/lzad9UXgyMknYi{1avq";˅cW kZ[l zyMC!ӕGSɠO}z~yV QRr,V("`DH;@ D@JTÄ`LkRsgb&rXzkUp]WH]Rr[8.{2>`;ͭNZ>\ôK?g^;Fp ZBurux0Yk 7KZCnQ}3d3eNy:Id!:MJew\KX/ò¸7;=;A\D s  *]쓫Wr1mF% U{eXWl%ŝc*͊Vp[JMqHV3}ouX*Db#TU4O''Vs\L5-6[V[U﫯V)&ъvg֟}NY=:OMjO3~@7lDDD ]ʷmaf窯k"OYX׆Mvk3 f55I%ݡBj*.NQSp23wNicXh%Y#3Ir*֟{"`O{ESOz6׻ZEay*W!MVhI+W?KsHJ%tF#ӛS"]bF럪8 _d7Ԩxo<-8:HAܹKn(Wr%D"1B`]?lU-9kZcVi?Al)rh:kWRD Dn[۟k;t(UԆT#q}t{ί|Km7y݆L$Om`6LYO)=v_&ܼ}{nkVǷUmauY&T<(4뫐QݱiɎ}K%1 Y:'7w՝A\zr;=`:D!CĢɡ>;T*T!I4. 7X|"CV`a ]ډDc齷j?V/nU=oЖϲ gǯ7f23riQ_9gd26%T ݣ|\%NcȎ5O3~a7L0'EGo| rcxUȍrC/.w}]Wt-=WƅЫ})Γ6$;NqGPrGyD&Z|A{D芨d*3GakթNz> "Kw"nRwPqO+I}~;pyӜ_hj,iQM) Um6[Yě ɳz啃K# %HUWUxӢ74`v8#c%Y5ulJ`Uj)+=.*Ř%d3{\oaUrfNݡ^jg_~,< 0( 1l6ek TrGP?oyCi|U>kM.ڶ4xVi]Iy~L%BkwUN+;lzƤ8$ &x~@dUad ;˪fYpTb_p~汅&@EG#DMK=vД>QT'P7 |M6JCO7E_cPvHruKt.1I=ާ¯֯,jL?_)1q*⬑23-źmHo-4^?ĜIw-lZGFǑ9^l=Lÿ-y ~dWHƞl-#KWe`SWaΉF^ZO~q\av<\?uOTە߱zNz||\^Oiƙ5!m+S Vca;8{C򚠟_" 1:aYk~w5{XLPr~U/.rqU﷌zGɍ[Em.~,C 'mqn8+Y1\C\"Ї@T$0*Budp_g:6jrbKeѹx?5a O^jFl\n0m7@yvͤ;7{-y[.?@&4-tF^=6oQ0J0~MF*yx88]0-d<L <>sxq>n} zZj2y-wqD~b< 򐇭`a0ڛD\Y1PV)"(*A1AXAQdRAdQ@U"TE`,cb((cV"EQb y3`# ,AX,U_9**a$QX]R*1H`H#!EX* (XSɸR*"/HH^ dY$R}b$A}X=:QM1RF $Y H #)"dF @R0$"XAEPF,ŒlT߹FAbUDQD,DcvUKإ1X*"+iNXFGـPccʑC0"ddb# (b`E PUV*,",JrEAyY PdR,P~!_V""߶pHW?V/u-D'R͟#s9u|׮nm D@<$@Hz`1E'?x&P<@X֊~"4=w/;,d^!y"V_CNi`x\̢ȫ+4yfPz,`E"(=ϓ*""Xk}}cωs1BkPQ;ցx{t{Nَ5D PܶU9Ss&V$H(Y85Z{λT^^40A=Q*D>Y—rGU튊"ґ=UO}QmY"b# ,Ub"1WsF220TEc"*0D|KR*EEQE#b0El,QF?JDV?lWEXhX([J"1j֢lOa"UőQQ1"*Ȍ4Q,QTV^C-/ tB{U?KW*:p^1Vf{ 'j\4U-ٳeH/$ թ΃&6w%R5&gpԣI;ZO_M)*F%ܗ\7- ±[n7%h*]\ZQ>tW qEJs*4N`\Ya]2ɳ6IN4KMBbIr}ͅs6Z2|j<:W/ާvDK2B'~J-IA]ŰFT+Xء:?9Qs%Co*s+Zu쿡 %%ƌQ@L0YU6) -2jTcO3&/pOPCF(~j??mS70eQyf( ,bwq!UR "/?Y@ڽUC"I!$,_C۠k8҉9) ';ѴQ m j$@N G2}fQkn1쾻崆VnqoTjꄐqJ#ͺ g߾ "!:w{!Pќ*N:7_i+k TT)ر/2w gy{:sZJQٰ "}> ]ͳ ~svpʹb-?b.VjJپ]+-=ɒa^Vd8zDo0 =uAZ/Hll]U'˫XYOѿnВO5[n( (\c&9ju^AK ]kgovbDR 9D6t(j4o ;%!nPn//\w]뎜+sPt3^h5|ʲVJBխpH6&e|l ժ &t9`,&q)]8:zaG (]d*.uIBֈWvIԂ-ґƺbj0GV$/B@z{.:m{fH`̻qOgDۑ;v;2 cO}xf4S^f>8b\mݠR_Ĭ8 .뤯fٮCpA,$'K>TmO>Hg!W\UOrdڮ~0Is6{0f󶵱iURӨfK|Ll\9 Zz)O>3jcҭ!;̘V2֚l8q\T9 [9RaXikiv3 ;:z]B\'VMXljSUQ9{gv7{>O)ݧ(l%rFK|$#eVfm>6)tMrU^lw+p\ )trȯ5׿ 2۲;rzYʹ8^5W#L_ ?O+bg-IJ,;"1Jg"L,Ч--โU >a3#0bޓ*T/]~G;T[_Ԅ`:sOpfd$L )r12;JO{n]ZeͫGb}aFZNrdwXe:) W q+}o_臿` {|f>6_t0c?\߃C55Xɿ|qO}4efa]]yb\@4W_鱽ciDS R(@#EH?%aR~7d1>O|>~tO@?h򍳟Ʌ_ez4el%S-Vw q~6>GR3d*{ Нej)E;>m9q;a!Dus>Pt ,Z}møvF2%X€A2utzFxo՘.Q'>;qN+ G[c&ᨡN@b[GOj+鐇 ZCCS L4yb2Ȝ >=y)nΝ?yotI0qpTp=~z^H8{D+10! *`1r @nAE!VJ\c$E˴=Ks6Z 39nbHG<; 촟WWܱA (jw mAv?ZTpߦD8wQ?kDsfff@b:7ջpq8.9t!l~O1DŽCskdCEVĹ.GaQj҆ =Y4}B蒙)|q vrG䇾c/p͞h@zH#*.g_]l%x=>tLsbR WtrC$0S&xЋXxҝ+dMo{f7e`" nXg{6k^C+oO>›;#=NdI$#sFvBZ\i@Є&a?_Ej3{sӮ'av}"jWKň5-tRFN럯|#gjFW)q%8<%iўZ|p#9"M}g:-?& v_twcRҜ׭ҳc;kVuFB}zwFS~dZpO^VV5vgjt j?cɉVUTz УSVW ru0QÉ[z+X[km_JOdV*%P4b@w>"} [̫ҜȲș0\߁^(9؅@wuoJp}Je۩cdrbK?cX08tM5_jx 4i4t)^Uޝţ./`07C7aD7?u͡q ¶]y3j"u* RTyPmt7P>=g^C! ^vyi))[Z{P_$>%l|uaN1O]Jrޯ/57{͞2`%x^:=Se#fwstJp3WaAdݓx+9$#:$[Ba„`=t蒯3ȸu g;1>Խ_Kn^}73D5sépG*$ZlvfAlUπ,Iv"niOfۨ _l)394gp BҒMWciJOEXuf KZW1Ņ ZdKǥMd̜ q3cC;7Sn':|kSY_[EJOB/ _;_" 6'v^{n^,~9(CvDGn9U^Zdnf`*0 &  tWL[5w2I&hoM 郌08]#5HxnizSsٶ .92eLgb5j/?D^̈́͸"_OlkKb_SC\BC6׎;߾iO7eoop8]pnU?V0Uv@ *)"2mļ{K?|:OuOqQPzKjiqцsQ:Q}lmJˎ%fmdRN_AGچM63 ':fLo2>E4M{midaHp2(vzM!fUcXҷ<۾:t^Ni'Bb "GЧ+~AwY 5T!nsH_nA4fwh߷ P6ͪD\<Я+I>|[7Cj@r2Ez:Tд-Т-8_NeU~9W(kF3UX9ߤ*kSCsNdPc}@DP<{XcEVIAefTi2 uNL FXEp~}@gYbwol%g*nzwe2yIBBMCػ{nq ŅpHDHI-,ycE=.^'Q4  ΚQ+go)'3>.؂J)Q'ɘ! A w)ۧzZ4|-潪Cr!͸cG1řAFfW|"[BxtlQEj֍I:<]_j^>B 4+vm_砠L|f?xqO!0[c/T[g!V :[ԥ0R:'`dJ Ny`~[yMJ d5ހ133ߝgk-05٪#ǂq6wxwxe RXx|D2bc'=az|١G3{ TfYt<ԱV8tte,nD<ݏ1?& 8 2!ZKa#U^|>Vk'QJb}D~wf@zF4Tƃa~wcDoà'UfG f{PandD :,wsä/! .Sf B@kUl- eeJd0֬bAAl{'Y;DjFF%]0;'4R $ys -P20m1Ćcv_}ݲc'Iɑi[da=I+[Ir,;r] ;T:Q{ ٩t{ߋJYu)?o8Z|iS0 0A[b`V6z 4kHQgp5!c+ޤᗮ'sZҍJa`eg9um"$ϙsCYPv{6]Ä7j'K@j$ DI ٽݷDo{#U d|쮎Kަ\6)FfeQhŧ2?g# 18珨$FZ{ +]#uV :iDX>NMCAt^o=ܷmNdCztiicHsqecɣprBɡn z]g1YrYOUsX];y uc=| ?_)kcaVJi$Q`èD}Sue|^uF|3}@ JSVjHgd"kїym haT(_qxǧZ ]}19Дz#`.xykkU$Dy?N@BiW=B: 2[,+i 5/R _Eer!r=g B+Qr2d.mTlUĶECÅ-%:*184thau1"2iR:d=~ tw{RZrO ab.̫jv),6wzI!+r,HO[Cmk%&Z-(%Ĕvۥ;CJIt$lNr"7&%3QU Vٜ9*E0.[$LBN*(ax$L rI!jw1 ³QiW]"ʮqaY۞u ~ ?0D2)?r.&NDTkxs/4|P>&mQ{*agYI`wmoM tHvHFSDqjDǢ{N> xDFDNO;Uh>_yi^4u&9s6^ rQ p;INO*-uQ>:v;`5mnZqORD}2 /IDOyTV%: ]ҽY]]Vfm{4YZl2/ͬ0GEkv"G(]UX$|2ѥܼ0d=ɥ-0{ϗͤ01* 9k۞ELQ{hpϛ&w"=؜k7G-Si~@/ևsp۷lVA5rd"gYUYף*JTt$-7ޠz٫ ɉhP L(E& tOU @&ձmg< vMTpHC`EEo!A>_~c2TaOmAM-[\IVX)2*^XNm;`|V]6;ң-grTӱhvaMjr @ D Fegkƀ j\E 5Hwlj';EwX4ZsQ$U&5aJҞ}Y ;H2Qkuok׳?Kphq O*&X `Dwb&o .'k};ByW[G < e]m/.he>@ k PW9ϥwx^>%bD9Bql Uw.,r8fF |G'_{soUۮbTaQւPt1 3KT=p0Q3|BP jߝT|6$xuX2  n?#/ww ńdzJ*"b J1{)8o/"8 K{c /+3v8ŖKLq{2qvI8C< 0h\ɗ9F`c&JKtM!f!1\>LcI )l(6&3V30fc >p8Mz>B1}fIɣݲ23˂bG7hP={3D /5Cl0T ?q6mo~#= ' wzmOmx|_nt7uvnwMyl2rdCt1g(8iq2P2"jo -ϳ4,̹P'N^,դx#!2m( u2齖Yv;*lD3!0Pt>NL@y7B\e-b&2 AI4ȉΛteZAIB!v-bslf%U[[WG },mPƿg"fo*wmn{Pcvj\ǐtL;c)D , 23, 7K}=靽cΙ 2 -V;[KYho!S%DQ%] 3w%LAoZ%zteҦg`[`ga ,-"zP D v{d-NA)4t.-Pӑ'r+wח8><-"eb3JI"j.#)tu`=kӉ(Il+T\U7c4TԊ\蕤jb3ˎlXfd GI.4:7t'}Y&-kK_2.N#@VRm2mr1=5aFFG4NЗCNC!YvLfӣZIW`ϥ'3%XFHJm8>͐L`wO3 d-TN, ) W7fzvW:|1Ƶ.{nm{k"͍<׍Y^m*fVm L':TdBh\;~/wL=[u C*x݅K95f#,W>ő{0|zCa`<-Q R v|?"J"rUNQY10Z4rk?kwV8g5vx:i7"x_j{dR#Uۊ Y(-9D4 4,ↃC@?KLtaǹnbj*q 7$[\ŢU*==K[¼h@'ҡOuÈ{/$#KVн7Yc@]7z%QxY̿"6\Aa;kP!>mq".[iGh6׆Y7 (g`dQ`VA@U{83 vL1Bs݀˳?Wܦ&sg.]ݯWӯ2YP%!)2dR ,X)X1bQ! >_enz*-@_j* (%KpSˊ+[96{VF!Lmo*Fz*t |-zaTxl;P2jVE<,0"_iѺefuaOb|5VI컌`kEڡa=vё6wof/[DV(ebC¾~6g>ZJHBj).QB~/H`@YAHIQgdXry[`5I_ȏ$(KW 5:)ptcr*:qy2?BfH CzB.6t^Ze@Ϋ%SK-?:7'n egT|п|`]Ba>ʦ )[̨T!4ğ;a]N$2,YmblI7#4DFy<)ȰJT_&sV"$.:Q""zޜz4+L߻{?ol~`*9$\I%x򕨯)Q`$/jvT13QPCyko;y!}H% > jV͐9SHx0#^vKŸ/`]fTxC g]VU6G52 Ld. ;cg&׉] #Րm n[VE"|T3=+Z=ZӉ. wil.$TkS<~T!%Sz\Lĉ[)Z+{#q&RM6ڑ`1?!nT芡4˶s7 s GR*^{CcҒmfUb7len?oz! 8 $0U8{ZVK|=+DU6q\YA,&AiIkNi4&i \q]9klYup~M1F?V*2e+9/pΗ쟫G A+6Ճ8ɇL7ҽɰp}3,Ø0=uJ܉8@λ;a2q&F 彯qo!}.(J> ih*ޑn%r;XKI8GB[o.VA"X=[GH_ ɲq O.5<84~_vy(Gχ^?ď3$EƊTy gt 1V1&TiCis%-~ܣo,jE6 @ ̥9v7Ce a(a7o l޿ ^Y֎q:~ 0Ǻc\ӞA (Xn`HjѴXzl(=exOdʊ3̴YRH2#'oPO[‹ڀӭux[y=75M,0#Fa;TYuVt2Xvptbmd2~ IXX0%h`J `51[~L$.} P ) Y% )R#eBEAbY (,w%Pn'"w":Pjʞ {7f(e,@'Xu,~El; Mj3LH-YҬ'Km,IJZ3Z=XP)AXT-"87? 1Bl@n36&MKU>8 444%F(@guw'=ZlRKq+w6>8Qv(޻ 8߶pU{GvT.!xdet"H2o|[8xvYg+|$(3W "ȈGߞ}/r{BD1@ XFȵ*čw *xX+bp{YR(# c[jjAXi~We+K`9"ʵdg@Zq+۩ =Qs'"(<:ZkIֲ}Nmر{&g.mu2s^(|ksK&gj"[9M]<K5KÚUe'1Jߴi@CSb ͷgNެw}dOu\w`HZr1k6P˯r[m](r\qv`Z(|3,ie%d2t9XUk)P0`S}n*Epd0d= ‚z\عt“QZ²F.]6kOU,G|{r+^8uVK]_ojIǐ$dį|⿝ÔSS6Z>F,m[`7(7f K)_+>z9s wϿ>2u;nni`t Ј4ЯSIiSJeږHI))eYSRKuAl *RCҤa%.u~"w3#1r5`uq{#**3c-N@?s[y3>Pg⅌8{«T_^P|W:b:QENц[l6Mރjq-ŋq9$~^rF@}Z I?ȝ{$qEXy˝gIRq23p,.l,;-+o'g1vp(vvKZ$|3m_;E+ c.NEcڡ,[ KN-}Pr璘-_HzNlP\K&gShrIxNA(!}fE}o W3 BMBx/W@}ynJm> 0phAڳe18U*&$I &[{ *.MOBALWoؗVNC,D9U~2$}̸kBEˡX [}~cc*)KX3Ѐa\a8X7J|Wqȉ2*|aF/zٰ  N)O{vY`ϽY;|ö#B!Ǥ`ҕt5&qlpfU3D6\@AZW5<zK?c HN WSS s'kjpA H{N ,&oX^¬+O@Ǟ|&()"#kYiQVunov{!: *)|jGu'q΍ٍ4@hvf(8l7W%-wb}H5޿}zb"9"^ W׫d?zU\C]If% :֔=|T"(;^K4k[WHoZ)m_քiM[JrX)og^8'G~(ؔ.u𮳚Y+.LQ%PWPԱKS?!dlO5#j*޵O kC>eV߲we}K 1%t *c.F0 89t%>/!ؓCNZ[q(/s0r\^U6Y!Z1ݩ00Αw_ɯDj>$D*A赏u˵NUƹbnb|4{쫕>QLö{j&:+F Q~t]4-2VsȘ+?]hx̆~꾻nF89QC|k 9h$WҖsJgnp`N?X~nؑ6[e78|_O;\I; ;?tLV;Iݮ9}բ>}0,~f[Y_+?uYF{Z>7*#RWY,_OX|ʿvdMXwy ~͋~O?MyʘZQ^'&ϭJjlow6eo+|a7o  WjĚEc_![P>]&GAG Y0l29Dsɐɣv`\{,FfkSJ>;ã-]RBAS:dJm?ۚf?T,EwWgKaED8xc{(vdߘVBͲ,`3k?]-9s<`RQ/@(Q(Š{/ zi\Sן[J$;$rTb`3NHI~WI `妠sx<nM?ntB6#;?ekpU,Ae#R4DN:;n98W$(_uGb5F RZ- 98oܠͯO3tiӛ `5(nm/gHy?OU$=aWQ% V lS&#Oԟ]~MICwj ,%v{E[4r/NCA-"Nz 6%'FZFdR nBpSD|]}Wo=pOٴ<L|%qOI >8&/\޽a;At۫#L@Ocq8rPJ4,!2"JΈ Z{\vBęqsS~)0{l10,ZGS02j09(DmFXVh>OڄM·.6͹p&*Ӌ”Vs <QC\T4k<"PDIM彻EWp_QpU^;b;6M,nk(PMJ_=٣w:E oҀ"\j(WC=x ?% +tO{ W)bS Ȃ°ױiB=VFw'jp0H'40a @C ~X04H&حfUL@E/Ǘ8ޥUtbHH#$Y.P0n AEuww;{cskQUX4jDk ~nbA}Xz{+j2 TO]iJ6#N'W@qPW*^lٯyѺc}2#$FP4p)yZzd6P~3aL|D>a㮇W&vHBۊ ,]eqtZטrlMXwO>嗿ݶyNM؋.$fԤNZ=6;퇃;ן|N>6yx YoJ{Xsmiey[|ˤ$A(V6ZC(P$ 笢{},{+5Zz2Q㊙J%Jݍ{|1x#Tůaq}Em +Yr6-Ab ާBpPyZMN,o4Vk}.{KoMV53yzA_Erp{&N}=\r`O&jP1xh hm#"cĀ`&,ѪlhcS zSӵz/ٸ}6KPXҩ߂c_c?˞oX ΢U>v%U,"+$֎8Y$Q[%@rpt$ t z%&pܘOToU{< ֢[Vj F.NzDg߿@PIG5kvPlے$Xtq]F%>Jؐ|B;$ "3k.b>e&/ \@&ż*I,E!yXC shǪvrB"/OqGYC2K0NP7Uj9dȣ GkӰ_FsrVXBET:G{zz ~ube ; 'jcӍ״sSGtuɲtIoVy5\._Aj;tDCE& 2߇/˴ ԍF>ܵvAϮd4DkFls!VqtvIkM)Q>Mk]7 aݕ}*m8=ª>88Ym0 to0%M+@a ?_'RPٓs-͝22P5ů0=_d>'xoS[?>4vUROK-3O/|]M&?;~{''wun}6U;?aU4k.-2^uON>2DM9fQ/ԫZXùgO3ZbՏ?$4W}.\.wQqJG#˟C0 ,FPpm1?wsbg $ }Tc`u+?` s6l~%[s:?l6C/~uw6/#?js"]uI7`K \~7u^'ﯙ ueԪXYWw04zm8`Q^ t=WAGodΆHGU_,grnR9."[l'Ӝï4˖=tٻ>HY4kjm&׼t_L_z4q'N}/?_?kl_!+r%b FV`:4Mk#Y 1L[ a;;~a9KԔJx(R:~|A+4s;%i~Fx?9 o.)Y5Zɚ!;6YPnᚧt\YNf9H{#[frmk 5U")WZڂ@ ^9o)o=v#6n=_XrR=y&k m]9'v+yGW}3WFUP1!''_/~9P{_dN8\ՎNYJZ%I%<yvw\ λϘXҮA]eZ~YI?y~S {V Cm&>Ы o#Pj+K4!#3 xx9[|z_g3eiNc7b E XbEiL6ꔜ* ]U/ƇkBvo3Zq"MI @cb_;F'dLA+ ^ Cjݧ*|@Pgem炁d ^Ee8sD00.q7K.}:v^ rvajF_z豨BN3Old$Oa4phPDR@ RUiL!D> Hۃ1~pǿ(Daz=6Z1"0tnʬ9)vYq92<0k4l5Kq38]{ok|4{2B'lX>[KQѬM/X110,egg;$40~/VfGƥR7b$|cYsݛmV7*+GB0:  ro; 'HuTFq޾f8JSJ4^TtS"֣%ΊQkHRe < jLrت[$oEC1-IJѧ\&c[y!ȞO;Md[O .Ws$0}B=Uѻ4iQݨ%ɨl&o:xJ>*CPQT֛L㏋l`LSBWb$d^i@^8D)lj^xDΥU9FZ~G_m,C<aw-`szgf )o0~Xz3hVe ;ʄ wYVuSEC,]-hS,KRP 4msoӜ5X߮6]16ui²|m,֐i6ҫQHZnSf:p+z[<Cj]w嵅3jٻkPXIzO8Vdw UhQXVk+ ?:[6:Z=|!j Oc:%KmH֌@9Zo6KrDêRٳUFֿ[0@uU΂ltܔt1)'蕇f!󫼦{g^<]|&}HjԕI#:ɱ{*s_QGΨ[s[G|ɷ p$5U ܟG]6ל#hT2-ӟto`MD(/ij 5B4k~2x_ɶ].lj$Ljɹwn˜6ѐ|4^5ս9)Oi PA(MyTnEa-6N͝9 @:\in$myxuR m^sq6GUռdgj\i Uإ,chbZzʒ-8^MWA]W 亗$^v5jͅ8!WE>I:dBdW%h,+EQηM=o`ԕ(6Kj 4P@4N-X;feM3G*sKLEIXGu׊ފ@KСD7QL}z !h 'b@Ν &H92J#2E ѻ41}'Ch:]sS .~#g=*1~-eW\b6!l61NVB)(u]F4Y(͞ i2&8|L4Ha"%c0 `J- q+ {֕x_PZ1 e"jr]'z,}>B_W59c3u~no}{]pR%OD ՄC 񝿕k ao}?9 l\q) ?a?뭗-NV#bϽeGьU:ȿׄ߰M^pfѡ~??YI$?/X!J%49jh?ySyfZ"e'E␿AH~I Xrl@Fi}v`4bn@xtB'u!dr̢ж\|.yI~=],D |w-|cxz *|ly?%$yV- 6elj-U%'žtD_J72fKkֿOl''e?ؤ!sh>lӤڈ<3.trЂ8CW tVש.wxpNoV i4uW uLS}H;(H=I>M Fn`aa;^P4@mR:dcr@&Rퟞ}Rgf}I) /*ogH6 \ts5kTGNP#"nx z743 MK[*S=?$0w} (-E}-DxtE i0Ϫ}5npNTN@n= aI(s c(z'swuMX7akU$ȉ5"7LW?BƗj q7%r#"bJt V#Ċuxŗu_4ꝯM:}rv+ҟ&LQu*uE~#Kg8NVorʸ UֲL$\yE{ĭʼ z<;3o|=h-1qAL+$ jyix6'}q0AډXJ{QAVABґbAE&5U]斛kW5o>(RbN#ks%m"D7P5Ǜ>Ƴ"3f Qs"Cg>V2="n@P][#1V&,d:΋6+ʼn-_=j3jVАRzNӰÏ9|.j}_zEهߴa6B3ytWJUASs*ɸMd"#Mœy8l?;g!UPsGn`S~@eKÛwPOvV>KII 1" !]2P,[)UE\jtŜhSi) cmpq#@#ltV{DIP-:Y*N9׏јm{/R 81өKa9cs!,Ϙ9E\OnHHѪaQFY V+RrYUt <H?ϻ~%9dh$`Qr.rU"_iKjye G]5;ՀȌN,MH,y8rժknҟ"ƪْxX [Um#Q(yӂX7ў;3PwlH`odVf W VLK[t9_^,#2]no;AŻp>{vӧ5˲ bKvFv`}yQWӁSl ũ8bA]sq~պxߑA&-@z&%+RAc:LHM7؊n9 RNߗM₂%mnjUz>^ |ԂifS\MQ0j"|'#ΩT5}ul1bhR63>v6e-=x<ɯmR Ux'.eKg&3dB/iNLJ_a0=mo}l3tDjYxR1D~2#<c%xĬ&)dXOdf0BS5;Mٷ$`Qwq:8ĩW*o`: |BzAҷ\PݶYp5 yðm-HÇ8Xeʴ(9ѪkHQ -[VX2 Zd`` ya|{(Ri!V`45h>|+_lw!RZMr̭fi ׋#-"e#&FB"oϕ|W?C7'%O者`\i25|)~o - I,[o~1thR.~޻1oõEq G[T/\~҇]08Q(ث+= !':lpC*C_ -<:ٽi8so"eFUUDQAYRBAdXE ,F*"D`ȱb+UPX*XE Ab$"aXE$X ," "DXDE"X* "UE QEEV ,TA`#1Q`*H,dQ`,H0 AA` "V(+UB2P"$X@H !, I"0X)QX*"* ##"!D)tPvA-uؘ-}Ww9)e[Q;/kw0ztϕ1~m!Z6?і![*28ܯe`!=O!Z>gauT û萛Ub{.WiĿH`R81;jZεĝ4#/ݞc(A'$~ UcFm|7 E \:le57g+?O9?7lf7lXn y'9xn2'i+nx|O{,>?8O6`N|pFYG iX%rXLR}>O۹A"z@Lr焾 e2&y [kHUd%NJAt' ,q9cM_EܹP3 PGʴ뺨GrƔ[Nl-U'K_bq"n a'{ 4*;[Uo%SKT4СsuCUƌ *vmVǪByoû7\`^bYy/Cg ƭ1:;;Dr9΢TH+C8`emq`-tJrw167" F !-Ju[餈i5(EÇ >ró'xF'ar|$sjӫ3BYƉ8"5J5D"V # ([)iI o'*@-Khmk ""j!38 wDŽngYg}6#hҵ8[LJȜsVo|oڽOZL:4`Ws=S72}2O|vNDSkOINVĹ2dKP DDžj Rdó"{&FѢBkGTQe4~߯~<ϖt|~sƙ誏:Ljn9W~/ %Ѩ9L~skh}O/Iaœt?Uc܁ EE ZWPX3%:|:^OEA| *CcbUOp} } #B8,4(*jV6Yiktts|ip>+܈c(O:׮XZvH&!qIUb!;w]ŀoZy ]Mmљh<{(~szC))b+J#6G"t=+/CGyl<<6 @[~ nj*pH2}y:L+E00R\~ J5C98*1*=V}&߱,> ŐH4D$;5NF$_w'mke"#ty3W٧#:h_ N0tքs- zm3'暄#mW 8>:ǡcr f{(˩&sw:+Ss? ƒ!F^Iy}f*!+|ab෨s0/QrnI#E(=qXPoV.S!ʜ "qBr{|s޿M1b#bd Gv=:xHNҠI&T=d$,~O֕W) \UDBb;v"+}g@)wBY q"-Ʀ.ѰղKTcJ-:Fd݄(]Sn#j5zʿN!U֞uxvcUچ tFt);f!@)\m?䩡 ;S{W'D4L,@Ɠբcky-R0$N?c_YgQ߿OIypETTQg>go#Q(Maot5T2NhmtTJo<>Z Bx1FҿIUDvg݃DA ($XE'کf  !-|Zy ʵ UcJBqvRmjuOO xSL K4*PBnΉ }72x@BR/9ywȺYar%P,;~Qx^3 d)RQ.ɣ_/GZ;2x]>\skemboۺ{ص.T8@Wli#Yp(fI5UG%U-E;Ln=E`AaWԉ22an7MJ^~K\c/xz G0`sZv5;.2! BSPjr~kXz0 @ w|jrBߑ! R&*^]Mz3}\vgif`0 A UB{tM]X⨈dej_ӻz^mUM'4ݖI1C\Mwּqq`ߘq! C>fݱs{FG;o1hđQ+>4}e|ɾyy'u͋.K$gt$WҞmmz  A;ױ,K[sZ;Yljg? 3GtIX݄ϕPA6u\lEQSpw'HуY|$E 0 Vd1B# y̝Sl2N#\皊IELVbYmZmfq2Cc(vH)Emfڅse2] ݵi|>C@˶(%aΑ!9Kؓ3 Xrx(U}G^oЕr(rփȎ}%W++c;f1|O OgC"6ck(GZpfh86k&gy*_kK@LDAпVfnA[; xU8Joy3`o(m3\f2+ $!^@$8:hA)Ҏ&e|p=ty e&:U[f3dԟB*&Ga&.]Xgy=mZllD+ڵSfpf yd澲Sӷz izQ#ͣK|G,>6f*Ni 8ﳐu퍐gQkHHO{"ISwmf[ykSJ͕3'}_g#Jޠ|gRk 9xNB$AR 5*mHGX+% &rl',̒S{r'#.# ,Xv[K=`&׷}w*(H\jDM4@5)Ӏ ` qlg%;(V^E2 is^5ճ㠾BXdΛԡÓzy:ncW>X4ٶ I_sodfOn|xu2Z Am[[g"U]E^GָS0>DGGtЇO|apfB [l!Qc%܃&` s?-B[DN.qela"c 1(v kWM|5&:1EnXI5oC3Ǡ\1]3ZYK&  P5?Q09IvBx+ŽznDXMrNa؃٧hi>G&:^oh_+\D`\_ 7GGZ#.yS]Uks=: z9b!۩? Fut 2a#Wཇ侵L~A&Nr F#c"R3Y_Ui$ 39C}fo` Vӻ co4ů8j4rnl\WH9T##$klټWǐCG$SmPR~g~9"JѪlr.# i?ӗ",LG8M O&D A]_=_O B#ΐ/uM6?c ;7sUb B  o|n Cd߽R&`!؝\ߦ 2tfp\_ڟrr1#wm%O 97Op}.vߏnP[8K`i=oS5wTu"$O8"5 ]:I5|-}g^aLZ݈`8I=߅ؾ>˺~5iRyOOiAEq0Rry>o)Pg;$`p:/3B{_) srL #A3}?|db_j.w[xΔEt!ӝb%ejoii i`T-|־KO~sZ?u$ ! w@\tWTߨ{Ec;ۿ ]f@5aZ{]( Nh4W4 TX4yϏP_?#BF Bo(;ۯgjV-"\"4pOM#q@I) zt7/ùrNd在E h0>]oDKP3k?dvN? e:z[]φ<;KN,\0O'~j V8ǣPGoi'AW&;p%$F"P+D]F$5?Grί#ildHp,6Y4Za vw2ڳ783g@"PsBFRM* `G7tzEY (# ] y&o=OfBWnEd+;Sdcƕt޵x^u&h_O>FO8 }eؿ+vI|jDVb=I7 BO+Es*@k}uPZ yFG9UCr~#iWeC0ba: ~O/0/5?fq}U}vBM spkz[#lY\}-@D"ͣyYjA-G`߯Zj!OOUg'NȮэ3ֆm0LVRbWV1ҫJ(J\&M*C ,!+NJ&/ë> 8) )->AG#+'60rhxQá!PRMEkƭKy$+xCw͹}oB]5U.,b8aKPF~pdǴ~Q+1x:y;>,Mۊי B'*O|sV.!|<`/$p 2G*ט{ӱ"#"@ &Rja!qzpe @+`r&n/X\Ӌ,-9{~ԘIH)`%z#CyH yjS\x18}m;[y){ FiQvI'>_9ɤ:"%$cSlr:f#q. s21 p }%h T(1z@sPS/p 4?V9wS`Y(dV„BJ>!$Y)ITM̉0fḀ 2r{gW;ِ,%& E:g1[Oʹl\*LC>ƓD:I1^{i]*FӣN5S`yZud =EH`ZګջñJulyu$UWJdl 7]aG=FƐeW3vAH?R>ORg%#B0u0\ "6Z8{ZFgc}G"j͘Si5vv9$ӎmNɓ>LP>v˝Ә F"Q 09}3i{F/'ӽ1F$t-|?G/kӺt(v|y]gx7(wM>?z\٤eecڍ6SLssI3+9re.1q (BJPY ^PNcoF5ЂM>2@0gax?5D1pRڍwiKYVmEX/p B,6LWx%]`c_Ad B>H ѩfGNt(;X]Yyf1qx1. |t{~?w +̇<$Kūتy>sw1f{ɟ Ӥ0B:I UycE&2܄1IYp@| 451Gu[e 5+fXKbZDv=%V(x޽]Yh#1'a)$&(g DzͶlas\;=c'z,"C6~Z7 r*GJqX4UhMBLfR_Kpk*H̐94 ֹ,\aCX+˞0fz5ֱͧޥoK6'}_{ӨUbF5 $)8 *SFdjD.mg:*lx/L?9AcvL=Yg@{s4֐>\L;tf{5rN])yrx: ;C{2hT1n\r8K%%E@qeQ;Vt׹0I̧Hϥ%tS`BA-${ӣSuei+&m\D(- Lvi_$@ ⒄Pm9PŘ} @C%P-d|һ{Cd,,W1ܑc1=C/Q pBaH{! OxoE~}mkC,^ D@K9i2 CLgƀFOj.$S\}d <^GL2u@`zxoq2TvZ.J*x1DAUg]lE/ǻ}{lu F) 4oBL `rHʰgL Q~ݪf ;SvWx&׹%/Ɏa&s2#kULO[D7A0+sO ٢8D@ $1$Sؼ\ZapQ'7u @kPvXDʗ.L ݆JǑg~`kG &:GI뉚K4/L5(i.ߡp{@.)gaԳumMXͯ-;D6 F# txyb ͂fCAn8&CZ|)=! D9] @TɮR?*sx Eȩӑ-D'%c ^ciZn W=^\7uPP$jWr9gn/ZG#[nܣDlL*gh,%Y5B4ېov j*4]O)u[>`Frqi':} G,[ 59Bs jV[Rfи { _=qk+PI1J„u"C@yCoOl ,yO0Rmr;gCTh8y3WJzGN<#"% VF.-PA3'U"rSP> kjԹ%.~A/s^u,A` DzvU2npVVH'IzĝZYh|lӦ۬,>ر]2--•6&6pWnƞk=Gxh3"FN`T79w;5.5s%)*ZMBI8,J06Q!\.eQv-UJ%%nYX.!?g8Zo[$_UOO3W+23 "f3E h^.uEb7*wLhDg5f3>4f&͗Br[kKwݸ? 1w<64D0@hlx$I$&m~60:y:DEŃc&]8wzrJGO)\=i^Jk |qPߟ @"0kG]o)PcE|N-YeH009g ~!ܝS3mw6ݞAf6Z}E6㨗}ΛS!e[N4a&6I$p&j9دSwV>|7:<98аh.c}mU}ϡ+/ ֫Yb%ӳǾ[W|K\yii , UqSj}Q; N8%N>eY+X9&*7&߂2l3|bh~ 8si54e%+CP7l̙E ƙW)sE8Ws*lT;JrWAuI ]&M^z.bqakwQ;z%V%#2*'@# ')5l,AW'kgҵCۡ ׆,+ϥ+)?%L c~ū2 XɩïdcpY^esJ&ϚyQes:O]$xU'P23 2n&>UDS.4o#BX5_YHq]UU>0ZgZ{ y-K®ޥ꜔[Zs{,iGqMt'W|}RJeU} [**#m3?sKw4=}`GW8}|TbM$ K03">o*@K/[C`O3UJn,Vc}!t-dJZH|Pf;Kg[vEr;ñS!>)mй'[Vy}XU+u$dViqYRk[̪ @6;5%,'eaYHIӬQmf*e8̨pm#gίAؐDr$F.IurbVѣ#qU_(dhd*ʕkT!@هz|0dfo vbVa94't z<UJDk&y1G zKxN1MZ2N~s\Q]ku4GN m/k=-UUʼI UZYg.N#=!b<ԁ5 l %C~ሪ%0H `7]=9o-RwkZ~_1|-j-pFUmm8o°Z#ܞQkĉiwǤw%QFpcֹ_ўìy<2T [!N%U~,}ٳwFfE:Q]Ceͱ'^3zz'NNͰ{HWjŧgEC?<4Yq0k͹#k)[?;G5ge4w_GK\t\JF7QM2V۪ [Kec$ͷŜɏ*HE#1ycIbMKѥ%k>Ûܥ_I lVQV6ÌR᭸qm1LPA9 0b~d'iK~t&`f;yn$G#zLˎ.td/qr~>h7of5Z.a3Nk $< e,7(ɄjgPζS䶶lYZ~1F;Tf;:Yο,|(@' s롊 ɡOEDWonv7on>K5ft5X|L pNk{O_~Ÿw'(-}|C][LӺgF%zCaQ^ D8`Fj v._]K+4}|"?˗knr?? Czv>&vvanl9V[{{Hsn^2G>CUby,'j*1~jm<9:4N7ƞn*`i{ JsvT{p}{>7[5՗PHyt%OMLdB#͡5ϔmjdacy "#'v}Olv]N.__OgA}&>?+?t@khAz&+~V0f!E>|Cٍ&Jwg{_9un3G~<} nqz~s9h9P.g „2,Zk=BFH*萙M7ZR 6=0bECS%P@d)ZkV%_hvs%1aI0oFQI}@<:j(utqpm*ltH}ΫnNXÚvx Yrb"!:".7y3ʲ!}=!O}?Wr ]^w 5:1sޱH8>@Ii)Nq a8($-TX?>wEbc/ɋt]}1C t|q{u%"ә@1NpF4^DFL!H\gsKHq9nsy/[m6}uG=_{+;dXd Z_pyی4ުA﷽_ǃ1ǍRO9yiƺXXWe_y}KgF?Yh:=M`xQuTxm[JB9[6coڿ7nݒ½81DF'-A9-:\5f@ኤWl_WߏM.gݕxğ>F3 #N:~B΁!>}^cd-Pq Аbm_U_";tcKN8/uLL"KסjD`![ RIwAr}wg]wΧpR _{k{ߕ:6yׅrN;l\r_D?qWjuִ9}OEml*#KhÔ894|o0$ԮK.6m>xx?~oQ[2 |{;3_\_XPX\nVw{]G.yXX[>7;p??,sFN&{V]]ommĠ} .0K` 1+XlDSG&yjlS5H "Oڱ0lBو6L4E0]-Uq&4RԎ3:9$3rԱ$34à2B}m`M\B50lK]IϻC 9b?txY$- *22-IH dR@Ja "8^  AM BD4 IFЄxnjkf+_n"| WKh侎V7?% nԍ_yt?{M-^۔sz_Qw|Wv< n/}=>ΚV#MPsn4rE4Xa0ZQH$F;=-qLcn=6dBv- 5{tQXucY|@Ƹ-x߰]K݅ocn~K?0\;S~ދ?虍ixt_71 /}_=ʞx0$Z?al,M[7.7C (ݷʶhBƀ]ٲµqľZ370&uֵCla W#5%]5ZjݘGI5|KcP1[Ll?T44~XRƣ!XLC&fJRCʴLsx݅f`/^0bF"Zo?6s)v, Se9GmXH./86h8)Rc&;?هvqylG8,*!AwOWM+҃kSH%Ƿ9mLFf[@7m^f'+tܖ C{_7wZz>l}yv܍yJ~b΂<$ v* p*U+/ާ@!䡗F][DF, -}GSI7q9j?ou9N5?H{Ok'|G2~mзO FG݆=onKx]k;OEc]fNk濧#n>z8ܧrXxO Γ7a4񸙝Gm}*]{{-:#E4A*_xb͕QFZYZDAE$|<@O5^M˴˸;|g4t@ g]gKE Ƌ/ND$b D!S}#Nr._4:/axSozJ?_oy-D{/>Cdno}bηq_o9??oG굋Rm6>j7;s2M`1Y%zeyL `֐>'Jb0T櫀ke pjjt ;I0aw?,hew VdD{=J9."WG[>(G0KLAwDXŤ0B?ӷ'wc[iJR|p)}ܭ1Ƥ 0H z=ǺƘ;s, Y,nߤȅ .h j(6 0/[Eço.\0_=*W(bviEKOZh}G\3zD.C oOeѪg3_6`G׻_/?k; v{^mM躯lr_վsPx>}?vq^?)7=tYq}ȥO "(͡6j9i4ҼDoP%5a>=^e?o}_ȿ;XM?.o}?=5kxy嬼8y~^p?Cuջd.Bso|o5okN1~qw>ƎsAq"}azz򞎎öW/}ٸ6x c:?Ucw}ob9ON}Ϲ:_{7{SY_{s=wvLҷp>ݧGu&^/;;w{+j~5>m~/OL6^.KoUOtB}̄vQЀEߜ5dE|z|gbTW{7f54MR* Qd5eQ]T+}.>&w廿q8;śM5ugݝǘЀ&ѩ`ࣀF2OWrΧϱ's9gGwƹ{hs[s-;<d,[T"ˠi_Vl2޳4b4 :jZ5#cߔygoti@/\I^ dMYDrbw@mvC^M g+bu ^ ~~&PH[ճՄcOnEtxOPSchPA/q 0Ԁc v"qk8CcRE& R@|7# 7!˞d/~ 秩@tX=6bg#IY-11Y?sf//h?g?5_DxUh,>sȧ;{^M<^quu]|:ٗkX%z'khۯSA=xH 2tD~FV)c``# Şk8UF ;J`*Fd008;<7t)p~~$J߸qN'$7ـxYaD<˾s7Cq^K:ߺi% ;GE_ڟ_yn_X~&vW~r}Ot~i݅gGU.>Sk}ow/g2a&%kz[YCqw|c|rv.| c3_x9w4ێ^y.sѓ}4빅~؉Ew\t]9[ o ?l9r~g__;D*^'yT^˶o~k㸷%So=[6zYޏ鿮{y)H{\dy5Oz?soGfcɡ?=<ߟ [8ߑ~7#ܥo?G/<^ߧ=}vuQ <>Ho1ﺿ#S94¯xze^I/yMly5~OX+IR~0 ꩕w1Y U-\{\bXonԿ5hzС/5Oɫɺr)U($4Л>"xݘ KY/g2(Tˢ,?tlzib1V.e0[K?b=cM)=c]USOv0U a^~;gHkDW"hڬUXH1g'xƸџ^c0:YC]*O 2r?^@tλoy/Oy7*ne}oV?s;-)6ku5rtH^?c{y s~is-dW½l#+Z<+^ymngKӋ0or6uZ[ڂAm}bYARjc{Bz+a#$IU cIQt]%~Os]޺m>uއw~}k1=6:+R1F1.hݙ!1&0Ϫvǭ >##^T2A@E 08ƛ,rȆiNݑL"-\9.`SRL$iC~QroE$!oMe͘na}r+  Ȧqz 0@FJuiu̎3nC?6sI˺Hmu[>+_ϫX[I9O Wo}y?X>gq?ү_GKV|?_h$u8~_30F:,5X Hb5N#VqNv??q}nZl _Z)0AU'nܫHmzsGjȼm @8 r @I1ۻڧiA&t Jހ`="&ƃL5a֪emk-`KGs!w3~fd|90ܴJͅoA=c/]{s˛@?MB!D(O ;ZS%p+I{2Jsm ,s6" (k~む 5CgPK?uw~rjd6Ҧ%FiG.Ǔ `Tl-l6U" f'fsnmd5Z%+Aqv0".Q4C&ʛdYwmPqJ:֟&  c hфC l ,=Bh9!ї `"ǭcNSR5w Zϋmv& J'uyoZcM"MNPYʬP 8 ߴۋgq>鶆DX0܇gl Ơohat1fS()R({@`'ܼ_Ϯ̈f":Aڹ, ι,^:߅8g`@<*33Q #mpE;wo49'05vƘ&&ײaHAEeYkB[v}K"m EݎX]kmsBm0k.DQlѫ^X5p_9 HKN fMv%9PɌy93. F%b=1lD9F7 ҃ud@AQ=sHh$ R L 5k+$fа ?bc;8cW8&'$I9WW00$EX*A*XB ZJjюMYpkà:k]6l1ϦeDMXm ,ϊ;KyxM +V7){ck.Z h% `s%:߄5hXb֚>EN(n@6 b D6Џ &,㱔Ҍ3Lc3SfbI&،) P0:R LOt NoԹ p:מ9Ov`$寧]b|č;ckdSN(z[<6j ) N'B}PƗ8NXg&Ē(3FTX  Qgjk%ѣ UU*዗>"zt 5Z"`)-u|qk 4P$?I;4#N]{U|"d'ÆL t=[&,ͣLs7X h-/xg,H96li"Z@idͱZsd??N\}c0یq=\= ?J27"*66sg T 6۽: w\ˀ2x0:KD-_oXMocHoh#S#m|(a =~xѶ|Y[}sP0uŵy1ƧPE5͚aŧL3wsBm|Qb7#SmibLޓ0غVyp3jEklЂ%YOc?qz\k\n6).gDA]Ib)K ! 5 #ɔmCxqzLW lh/=F4քC`;^u 6!4<^#. ?s=\m)k2b;F7߄Z@8S4 96<((7Sf~komh,*? 1Wy1~Y/oF(pN!.6\kI H\kk X2yun͋vDP*g s1& h^nC ń^jjVΚE{ .鉐.I,/Zd_\c|xP馶 d\3#wyBʰu[yvOmMCp a™6^)pIvL+d]tecTMNӥh3視-H@rzCA$~P<ѹ r v:>zM #e9Ud yBa!,1=8 }04J"VL5@hY 1pvl'o(\lmTq"& re蝮L;N^>>o@l^pl%o΄Rf!}kTX4Z[+7?`k3[&4dTBd1fhBp(LfK#\t-,WisgjѬQKlH΄ Rn-ywLzgyMV6z:jDKF0Ŗ '(N%+Bv/5vT֯ dwL <κ0F@Y佴8"n }dxLox[[sx2 뎶+X;t8Ά f3: j}z)q}m*0 Q}'uK>$Ȓ%Y9)?%{9^ѥmXk st}$;nec[훼5JfDQPWYƳj"P4Ke{{g.šoV=78Ʀ kk-rA|i(,kX:kebe>Yj"g"kO$gg_V7Z(1knmը.%WONr:] m[;\o}/Y`nf߱Ɯn6W_hFN,M)[F1Kr-ɿswmm Ҭ!R/֞K0Ɇc]\ P&/1B猝!n7m \SM-_#ΚT&.c =-gթ |$`4ALWh.LƱ-J [ c'椬Ua'cC}&$r uKjtx9t3j~)\ҫD]όSĮ1&V'3N\\!i04yZV)GtŹC* k.I.,PP XT{hwS&` m, mDϤ2 DAA1lXAeJY0Ȳ8U}2Fp.PY (,O͙bybBO?noa=ˮ-kiO>?7=o=&h6oL Oиׁ?g'[z9V!8^gOcH~O`} WyTx'}Vӗ8?޽u9r' O}o:=|W[:.u|Jߺb^]쑴=xo3m+/Eˋs|[/#{q󻌉.zeH.@3P@-_7gܮ8*L^3%7,0)_:z4O}+z/25jA)MR\?ߟT@R}VC mdVكj:Ϡt|v-@urԥLuY`jr޳ҸS̈́]mKfM{^Gٵ틍t έݍM>4Ky0:,@{{.ReuH=ھD(nZўڣMT"+ͧ,:bATPAl7nFJeX(A@=\@)EGMҪ-m`@Ee-@IAMYiR(4PiT P[he- ;T@JP}"JI@H"@H(@!B ZhYS}e6}ho@ֻv RA# M4L:!,뽽T{ԐPP*aG;^Isք% 5Bh&)B k7FWl a NP%}P4ۜ@@{y[Zꁽ WÔL:ރާ%s}<3LλCv=} t+5Ʈk#@/n{k֌1T^>KwT@tF 0#{x֞zuޑ{|{ E>{;^zࢀ1x0l7`ޅ4HADR:ojm*)Ruye6PPJDD8:a c#/S]Mm4m̃€R@0BJښh{v]WTD*;nhhGudJJ!alםㄨ=R٤ۭtSv@*h 6̧KD|˽l` v˛;fKQҨEf  h& @CLh2iLL@bi hS@L&&4 khQ]M6DEF1 Rhh!$k{bQN_51FM!bbP ŢԖĉ؍ 5XFɢ45,EF2E262cdذ@Xsת_mI# NFb١T$5_Uk&.UJ<j6j/o0޺͇Qk~7 QFLS; $?f0Vz N2 U'H'@ªZh41GQAdX"L((MpR*2e [[7fXX|[HhRlm[hF*Jx߹msgCj,"E0n?knk&b[صb bh*;}>7M8aR(DfdVQkH |Whd~ϥ9P}-]yȿ?_$Wߋvh7Vh~zGk}_c4K/)U/>F#8̆uL D^W|T z-f3XıdH $C )_4DBVŋ3ńaRUrʴTH`MhHڔҡX̔V@^p6uҽkǬ7ܜm<ԇ0* b[\r#"՞lܪ(mi'SyF*Z>NnjǯS mbccK&H&W`Inxդ7IS96KθHVi+Yd1 s{M2B3ȑA{(" G*P 5ىQŭfmrq` -F+@"B ^fQ8ƅN*gXg5=jT& bEbK>jfX=Iޔ !/b+riC,S!%`ܣja%T0ˆ߹(TJAvWMJ= :HP.+brD@@p'"&N #L^cB+Ty(BI!LajsMN+5n6DXT0@g ztTL("ki%pq[/{K|tT&mCP)$B(t|@8`1DB!DIix/ \'6PȷjGS˭*ayX<) A̎ sKUY`m|[b.D`Lr2?~mrȈ'(^.d07Q{/0gg&mu,sa>Q%8z|ABXIq.:');dg<(@eˣײ6s5 t @qB#"DDF#LM0R0͊ fW,,I!*FEA1 j6SJ,0HVU[#K+oLw+b@TH`Nui6vJNWñֿ, Yy66"hWD~xtk_Vbd6-O("e(4I"Ic  6(,6-20Yex:NѳZ-Ӌ_-Sfs4o|qWr֬#.1J^DĪg< }B! I&3\uZήMwq;_+.5#5Y O} t0TЃMl3ݥ8_h0| \ d"`Έ,hm#TKUx+f[;ZhcXaræEC9c5j0> L (`DD't|njS׆PZ"=7gu, oDB#i%`{<.(\\1,C!᭾/Z N d. .ʥлT2gS="K# HkCF-*SQj" ?0& IE+@BX)5grY)'Y'5#D:oHҨ%ZHbe;NeU9%hQJ+@4jPHD@k~A,%M6r`&8ɷz(*̷[Zïri ;OO/guqy3>u[_}) }W>~O\ |&%Y3) Ϸğ;^di/8&ށ BBPرM9Ԉ}Ej4 d R#P[EHM%+At@d,wc8K&J͏"M6̳Ϧ?7nW fױd_%%izD%aVxʭ mZL(2#+k~+joD,$:UuAJ !G* w>==/j12--cfvO uG`Wi`۪i '6!VE_=Z.B p G L?l2XF=teQ4g|G3*+v}߈V;'5,/c*{!dTLGL`>chCk`P鿋'FbJ_-SnO|ֿutq;k9!"#[!uPWHwg<^np`i4EIbCM1DQ0hl^ 1(@PYQ)|i~U~>_WS.ŃcWSNWVfIߋ])wk:?Ukt~ze_`tY"I3E`+q^|,uu3fTL؄QXmaaZ@D}?#B8jF$Q̑% K fq&~X_eϱz%oTދ_yX|mG  Y@؄(1$PpxCR|OGx\0bOʲC&k>χ'rmpe'DAi#TR/):N!9%в-nTFbm?y{8q^{qX/L_~&rca h aلb4PP dp|Y/ǒı`%F0j,)p>RC"0XwJ p*K IV{~uOvLdU͟:vONJr4Co믎R8ّf,/g%p_ol+fcaob:F^v ;p{& x;5UN{Wm}4?Zzද~c17X IIPl-W16Db#bRW 5o3OV/7{GB-J^Kkv(Ψ( ;9"Y` :y(j +z }z3CCZ G"f#YשZf = O?[j>݃ ٲ">2VswF)PP ߁ p`5Pc2MXK  " $!HQdQsyǪ/C`gbNAq\\6҅ cY&D pulT>wĸ75l0]j{zG߀G+Dv "&w0yz^ַ+e-IG }.Ε?{NU30Vkwdt?փ;A Zhu&?͝Q9!y%9?(RPP]lbuDCd`{Ґ= AɉfRؐ]5џWԽ>O56^+{*ugֽ#>I52sowkө1H|81`tM>.=#uhͼ YZi lAa@앐@&So-qx?Yg.Z\sjs؞#}K+UܫkQW !;͌oH`xCJ? 3f}"τ&vbT7ڱbʱcTj5Tko{60@XO?:ifQ DL@6D_m/rc9PHp. &`'RgtBal$堾Uhyr, * g缛 6J6iMfI?P. vseb}+gY:ai4A"ڋߗ*wKс8(ՓE=kU 0 3 N\|`TBJJ smeztU{P8uμnos](LcAEQ]|73 1%bƌLŰ`f2EcI$"my&⃾ê{6ض-bۥ-Y-X]]s|JngݳX9@Қ͍BT؞(s/"E ))-biiaBԌf$#cwT`TSu8NЋ? YV5fWjRv @+aߊmp:n-psˆ[^$#@#LPv6,+v۹ۻ1 1ҏС <j3.sK6YvsMBUAu!NAŅGkn.ۮZ2gu5wv@D%T*41%z%4څ1vl3 dBҢGwhr2Tl1%6u]ݮRu`*LIM]R(H5UG!Q܍Ĕ@1=ƌb"45s/asi\\< \nX* 1KlMIRG.cHFCgwEA|Iew2@CK|S(l"8U@Ľy =5Xfsl닯 4hB'`+Xp;F^fV00 &1_7FnX8aw$ڃf­X [V$DI0QXyϚ铥7[WGy^AbJլQocsIh`(_m.0UPD"'[}r@^H\|$s*0Vٱ tF;iک{#bŦa\h!B.IW·CZPs84G"sC0  *ȯ,R7&p&&"xi,cZթ hII0AE 酁GqJfj_ĉl?JE), 5aLJK&Fb;DH D($)8 ;!w,,ĐSr̭L&W7/k71ؤh41c l&&X.Ima fփ1Tś")y"  Q17J KQ0W,AY!QRoQmkY%Gh~òQ}U]\" H1.&|7WX8Ҭ_`dM |? d!1sn0`Sݼսƌ+DT8٠9S>6',ɐo< 4@A]ajHQ%+¿>K8WjP<9?Fxu,z}~6?4Z6ryݣ< cPѢ, ;mp%Pda-iN+4/)ld׻=HK=^FͥB4tܷHQ8 ),rP}=J;]cъi hˈ'MiR;3ylh豾g@ `T =&D)d2C1-hxP8x4dܖZMrx-iϊtQő!87=' bz e߰~bkG$}),dC,)bVMɯW{p'?.XKVNoZYhpČ<0J (VF(jSZaT`Ju@$^D!AX"I.F'X%ηd+5PX;ǩMIb" 6ǿl}48Ob?`8AbXA楄" ݶ,)L?(^`"šWY VVs=jn>G=a3ԬJRUARx{/v\a?nUX _ ѼoV4ȁF\SxtfIdw_6wU`BBXcJB!HUHG[m3RdIh/,>c H?:ow SON=UR[݋qv(¼f͖W7) UE7Ob4H{z}?}8/xH#3 kQ#y?Yl ZL51yn#RD-:9,"N:/wג0j"y@$*7c9-R3hpP▙x+7?> /" D0 d-Dtaa&5|5$Z#Y@{[ήsе~YIQ >Q[;HТ!HbF8wͫEPt# .D[5 UHCf- 0PoR^`L(ee-RR`!R0-Lջ+TԐc*9ڍ74zl03}"I8-΋ZHtHxޯa]&g6D;Uf__ $"UFF Imlґa0`XE![T Vq#dbsL߉,ŵ~Z?+NrFZ0bb +EJkeWa{mV19kZsab.v;}3r#ͱӹ%бHba|Iz<.RNW1h$Șd$Q )#IH%B({>4Gm{m94F* ,IeT[ hAvZ. bmm8gF !R+J7Jh@RğtuEuݒ:Z<%Nee Lqj 1PsnUڞnyʄo9Gs#t ˣ/>OXU&ё(IPmX1 FDQVg8OkGNhgjD(Bcj_`Fאּ"P4JFj F?xoͮM5E$" "QN;aSiְ'dC#[DiexT0H'(yj1#n9@$:XVw`r) hmRIؖE \10Ģd11J! ȜN@t~LeV,WCSPo ߱(n0HZ"h1${K=["+/mb CYxCii )jz{ӂ&&ʹ"8cɚaĐy*^x?=,ؐEN8DaIQ##.I5W 2_Er,MzQj%1* m(Ǝʿ~A-'-4%D"瓫YFAQ\(<(yw$w+x U>DDUdb(5qe[BDI89&⟴p8c<ޭS)[xȺ S4@D1TZz|"& @2D, NHy"bdkb.(Ӥ0"Қ>W9&1!&wgF̅X~̊0ľq{BE YNLgE$~lG%iMZ7?ߏAϯ5Ux_M=>gLבQ//=L e1\$wwH-XJ)u%Q)0h,__@*@@7q($u¨0@3I};!&DP#3 JW]ٟD.=bZ\ yϢ_ں3%j̵|u>'UmGu_AjZuR+Jvxlhku9nn2ħ΂u?CU^H~ahaH8~FAs!\d%,]B4%5<&HB)*o s}/r+.Os|~aX=X)OM;RHno?kZ 6(N[KCkPUȰy/o̳YWOXKJy?{[CwߣO{z»XTQޮ\as子>̼@pbNם>y˷Y,՗a4}waPgf=VCH@D "-6y_LkNe쪉[C@5i[40@ [B?Qʯ6,ZXİEQXhY}2]Pr$*Bh۽&Mڳ"1EDTDD"`Ta .-Q`B?NqpfazYyv ]yfś}.'\ n q9ⳝy7J0yW ǻ/D{rj[_Ѩi|ǵ@koUBv<js39T8HGEDdJƚᵂ)A tWb;xfK;2\m+ i>7W(!xWAFr~ H\K8HAH|ZĄk۞>^ш%r:9]A9|sFF<[5-i=wR<[p~jn'Y.q 3eAs4kF!Ӵח)|_gb] (L%5Vss+0\a'570`γv+ lݻcp}S ]./Y @H HS5 \<6EBKS]//|NXd߭-~ϗ{ hc`66*xt/.k*g-xc4[]65,'P}4Hxn]s8$>cxǰv9d]PB6~_Ck?Wb^}6d(,6`3#4h1 Y+Y+wc2dl=]<Q3̃PӖ}V[=] azlzKy]h4Ž4{ Y,֪K(NVI#H'բٯijKuTM1Rq~w޵Kv>Hc9߲(Kc) }l9-iq`6)gVMYeZlF!X ŬL.(rPCf)73`rͅS#>!bmʒ>U!4R+!(`x#\G/TQOuԀybwj3bοos}r=BwW7+`V@,>@N8 b1ϔ`1#{lAl*V)P5gK s?b}?mwbJ8vt|kXriX3|m9&)ꥬp}ڢ\祛-inΥ;#;S{  ^"eHHA-D(å}]HJZَwܛEdp-T<+ro3},,niCG`Wz+4mNc<o-'8^zj"FJfF'{^x'U_)e’˃F\шbCDa'T>]h@]Ğ < *Wh #W.ZɡSWݢauQXP>;AUXu;n'kk#S&z緁IxsSጷ 'b4ToYaOuwj?„U뢉B#P0tL^% P#@Q^Kf]hQ.y^gAU[?k0n)I]ǣ?k>OU/⎳{<ŧ*O=a&w-Yҟ7CGˮL?NuR}R& LJ$<A1I1(z7{j+..rg.hS\9P0B]/D֣lo/֭c9ikEeYz޿6Sx+Lί*HXԳXxQbNQI>̾_t׾wɇg7[(@ D'\?TMA"A{MSW&#ngeT(kU̶ zj9x)J )0ai]*5^皳Z|L&fò5n: GdjU*%T( y?3a\ᔾˣ߿6zb1$mr d}mz  <>^?jrq$e1L10p* "*LR J/i|WּɼmuA\)VZ̤,ըQe+34dfa f%`XX<O׈tzuC:gMUHd5FѱQ &BHbUtY!,d$].D.ip6FŌ`LQEh_"ڮ1q0ƛ4"Z\h-8.V9aBш1bD9f"BNj֋pe" 2쯂&m0rp8vtIm ͨ*`:YTmRB0cH B6(6澚9̵. j0$!$lD&Baݘץ3ϠFrrQE P`8F3?UH@OYee׶3\+ZK)+X%!# DJQ"yD_Sd0[d!W2y\anRy8DDך6QPS8J @k;Sa_lwd nڔE7XB &-D x󦒫/ER^2Ayyݧ-]/u ܕ&@o;̗s;H$-ʈcF\$_t]ߐWs.D b48-PZj/WLR< m*+Lne @QlbhnosP\3qoL&ٲ  0L_I4-#$$!exS49J8\Չ9 ę 8x"K47wN=c1u:H2` 3$:5JP0@UGb5FZek7&fdub.F UytM,-,8`"Ѹ6!_42;vD~.@(g߲hr3/q t9fIL2BH֘́SE_L֫Xa~? *N`?_O/!|#9 N">XO?E, +8u/){5q sb:>T Dz`#XjO$BBpم41w{|-HՈ:Z7'د$g^[PZ_YO:M;Hׂ }]jd-%b%,M%=ݸf,$ APj0h H1Ϛ9tOYqgO󿡟#ǫڣ=Q2;3b ݸ∤iK~( FU)ަa}dPW;WUzs}ZHOinj\l+_O޼wW6y碷8Z>`;Gl}/a>;b_+N!aSpYC!Փ٬XH$E0n[gm"`Ժ^֧S826R1R2TԴ]qNohUD1ڀ4Dq7Οx鏫 #]!Z jBR$Dlk 8^i1qGYm5VAkH*X君!*I!݇Ñ\*|~=/GYj!,O zFՁC)KaË}4A(!^2Y@F=\Z NWΜlFWɊqkHB#$wQ!"5qP#I%[9x63 .Nq !5dV\$@$w(ױwޣI841 W1UTS>Ӳ>>{:hTH-D-p3?B܌`@ ~JV%A"`Y9fZNC#2!!vg}yT#FH] jȎvmP# D`KmY 0wRD1$/F?%NEb7(j=azR0VI% />/gP 9Ka%q|#1*]S}ux K+7 &7yL͍SxMJ^peHRzCE%VjB% RX jxT0"7>h +ؼ lxЪccL$IPP'رP)]sV\;ü:={ 3Dp.2nAU^׎>@ǎg[!hR`w=ȩk*p/` /$ 64 I`'flPOf'HbI/ WF/q1;{rg{6 gOyS y. q 00+W)eS{_h8BeWA%cFpԌU)"Ț."ym5LI4˲ۈqGQko8 kزv`@H)fH`k]pI{ 7Wuޭ)[BOkĖb /ǁBrwCGxDI;u1뢴zg\St ͵k2xu) ;iQ$iV{U<~;y,4QbRmʡD b/E ɻkX}n= n/; NzKKձԡa.cW-x,EDj03xw䱂71Yce[Ar-lBNo u@5m?oEFlZF#~4-_S" @"N',K#o>YG⮢u%caK 41 ݴpitonc<͜5nA}xSwC!ng `]L<2;@8^ bpYl'?Wk-2-xz_"8ePd+man''^`фwQ_gkmf$:.򿬙-#3jGc* @ iyHJ C+;^]\ڱVOՋՌ@iMUtHx92L[$ $ RV[5_Ҭ!uylDڄ 0 I #2%M[yb涥HSbX5^E-7R$8=H_v(hcG8:7oozcYl"l rdcHobx;X!D)pf0C9҃|'ݵ-A :`?7̺džoM׹n|n3pf h'0?Y,XT'%6i&өlKdqAiv=hOp D̚QѤ2gЁ6xocQd5LUp"(BD,XsA4zo6P7}K#p<\_ #˩vm#'ho +zI?ӪmFJ#g`zj;\7#+P<5Fo"|^7yzƧ_+2"3'ۤ:'- #?G~=˧1%1pXTLqeRFT/qG9dGT?q}[V,,5|,aƞ)mGjhg{Gi4{zfJj"(˽-U5AeI,<.]Nm+wVh;=y B9a=_y{UhK S*ڏ>}bVWq65( S7x|oa,࿁vuV*QN 'r6;+ƠqS2/J=1%՛p=Ψ<1h,#;? FYCe-մ.[qLq ʀy/FE 'jDq'Dp>j;kھ_<짳0E!!.k}"n ީ61/g,Xɻ[+Z*W[D:SsncbN<|"i6n-^؋ lȉ۶H;32 *uMds@tUb>V@8<&#Y z.F#~jPYpV{;>6ָRFl dm owސɨa{!?Yp םƖ#w|nM77NWn0—!lt}+ #t }-yk!ZsIy<t/HO`z= ڄsLy|oNTN>t͝gzՐ]k'NӇ`AЎiON\0G1+h6Z*ZFClzÓ믰/we4!nhDإ)keiϣxX t{ o;%M?w~Qo@y>=r !Bգnjy7Yc2lh _LdH84=LBی,8tA]{>U96Xf!zε|M!; c@5"tK?,pbdM`*1XtqCi?vä#&$Zcd"_kȹ} 㬅vLˆ믆s,C\G>ӑx ;tuX ?U}! $D¿ԣ154GPhL#E0/zPAbt Rdsy-4Lo\eo9+")`8>I5o썟ʛt*@O׭W۷QJI,dƤ۲CNf$~~KFÑV$?`[zw.xx$Lg`{n܉3R|y$R^ds?/{ήRKMWŚs7ƣvDc>;ΌgѦ|SH0m$Fme\`",$ E+3?*-`V2sPia WO#싞_|=j܁*_ ly "jlyI]-qy&EHKqYW`D~ #'B% s4bSF:45ϩ Wʢ cZytW f pH'@92!^My:*'$M.V[Gc| si#|@(>Yj-P"peȍ>MI]yb&)Ӏ8&7NtRR/qNHOXF 0H|qsIB( EP Ϧ@O|^ ^+rO ObqNj6=Lg$?sinŧAbP$i{jY \R5SNR]ĔhP$Ρf}kՆdHB xًW߽& %>9ϒ9Vfttc- b?~$5J2 9]V02],H%Vl{b0x#ZZZΰ+^A}| Xlث̜7 9 c o` FGnܙۛT\a}wxZXIt%t6]j pw9c9M"%Hxu#n-CV{=:^ۃ ,񣰢 d@53去>Q# BIT=Mi-v}<z |}LnuZM t{sAW;Nӹ ڳ2CnMvJNF6m}c,M4 75#+T6_ $I d'{ԋ97 OU{v bM,g AD} %%`-&~P C9T(zG<*e H/С€NΓ#V]enO"-!yuТQT aԛ89J&ۧg˚NtA6FI} S8ϭwG =\$QO6'&zw/4jiە cQfû? U4CwV٦GsƈhýrJjz[}VXwZ?O_o$Lؠ&_FYnzS7gUGj䞶 2>/quDlNٱ^}[r/leqۂC": ZV& 5C7YQoO^BİF]VY,iQno̓lMNaM2|g.ˬ[ue1~17ԅR­Q: TIaCL]E*{e,:3=fRV m0(@0`HexN((92A3zʏ 5$\p>⌮.{3ңZ ( !nL hfbKx-vsV=1[y)NP-zi(bT c)N^X'Mn0\3VAY9"´+%PS6ʳw.2% 栉M9rI$ Flp,6KRvm,o٨g>&IJD\DDXMHH݄3Ҏ0FyDF]e :h=gǹ?U 6d}CǕkG?/#n$էݤ<ViAH!ǖ &l1-bT|5Xf'4N)bq<emV%qwgDXƃhOT@}) ? KZ:$T`0H$">F|OuK]+my/}|*[lIڕqO2?T90@c!r߳֗btۨ(H wv<_I#6g).Gj5UOi3u EK x>fIRʣQƫjI!b\ D%#5Ս m-O8m~vVcwxWkp){pHnңIyt[?}|TԔ7L]Iv5_7xҤFB}g!R(Xʿ(368le]XH\bقQ ^.v-5f{/nwxy3 [FdR,Tӆa3>Hm@n t.g`._>s;] 4nzF<9``71|QX+6{܇sxsmtwā*!QsaʼJ@@t7DM:>M{1ob3=p 7>5޸Gk#}IbAK 6= ?պ9q^  b^g0D!(fi!F Y[#+%%eu\"]<&8  4gǖC>4FQ$$ӫT!:iTrT8i8NXxȰ;i^Ʉ&R a",JK}99-2rezB>XniPR `̅"zwKO+ |_z^"&yey=$+}jXBRI>_?s5 (.Gn<RWrAXPjwI0AH|R4A_'Z,0k>_R:K>OF@@ş7 gux1Y< P s0P4L,d+tGR& Q-WН{ki ;&>9BcuqM7PIV+2Mt΃3 ?­j}h{Z@bN+܏0".`k3-YtOF2MG!saǏN ] * H Smz7?2` 2PsMtRzTO5[-;dsf_WYR\x"i? f*[cT۷zxx](O;@fAYox*kyHN!Zc8+8uK'Rwxp3YdP0`Aȸ {A}O%Lj;$ d!/c[VD"& Y|7j \7+s4NO)Ntg@3%2R]$ mlRje"U)jd<Ϯ xb=-2Bдg,K}78i댶EiT ,KjRHY{1҂rcW:{g/>9\{d ϼ^W#}j%uA|;1Ds8&/?(ZlH!ÊW:gx&^JٷW@2HgXUG L?8Njؔ;g+sO =D"0S#$z%Rqln?w Qcګw(?Qɦx4blc:u]|L- a׵4.ax;TyZO~ܧ|A$yM0'zH8D8ʣn6\wGSqn}̄Zxoq"42s_sERZkdžjTY07cd~_%ŷ8ЫHPX,~wUvp(}9Bz;N";wC2C>&E8aEY.%3u='WwD$C/3zFԢm!}]Uk^1(sT="/#LW 3SCm/I32VŸ w~i".4eQ).Î(0H;;mq<{3>¯ Ѷ6KLHY57ׄzE߻팲) {0b \Amˉ__{vB#b '8 ˪ZJĥ<^wGp.NxJ-Z=h_IMB)ĸbtV?opu.t@C!>]@z<oFSY@a@*s|*!궿elRTk#`eѬP^H' |l6M5t*e N3ک-G4LCr$-T (jT7( [ҥJ V{+tYg@dF 3xs()xsg!tk4,O; 6SDw)m֏骂q|jє?8Ige.T]Z=hǜkrRp^OCyCq6+ E҄“TUvi3My:1S!\0䎕t`Ӯb)cul/RB =P `p q=vs3W:T %ĹfNW!͎6 oOPD~*på5b&PUh o8c o=2ЙG(c>s'CSRoȢʰo{88r%#Z܃y+C]Jdx}INOù3d[p(T k,ܫX/ۤ3S#$ciKP @Qތ|(H`ևv5F\C7]"pH$\z_2feyr|{QB,c)7eTMbj g u1'TO_^A%3K*eA'M]@έqO"rIaa#5G?MTM]!) 6"wR-Ǿ<;kWUMCfGpe׎EF1|e]9=-J0_zG]o,C; x='hЄ *@rzᏵ3 K_cLsJ8&4_, n֯fRFZIF,UW\SB[d\pM3wOT*ꏩC3ȥZ8HZ-yE04';fpJVA4YbRӁlOG("BK!{X& H)z]zW< EdռW&2nx"S:$_ tXG2؅^!.-rK-u(9lE qPe#"!xn-mz_䶦 ' {=63e veg{*]z7TG NGbXZxCHBi i3H(r{GP@wA"BYTSM=Of_gG?.+r YfgHzy*<<$g+R $aPd 1|KNjM)tܻHhQXq*>>].vAKR3#_(I,JyRS{@r;]QL2$K:Ja.A&tEci`k6S$M4鉇킾.oj\heAd2Hdlst=TG}uXmHz5f g!NHw?j9<.13{Fjv&W3jec۟*(0jqv~݁162\ #͡xsH&5"ҊȠ9.eGZRBQ4tI30*RX2N~Tb5ō,$==UXlyG]*), W<\!z٫bb+YMzln2B;' >d4v<4~(+0UOk<۠Sŭ'MOT;G(Ƿ˧Pa]0NWIxyd9^6֞BMjFqyW*! h,V_^VaIcqra'.!^sVT!-XG 3 Q;a cʢ؟ V` \49H2a O32hf =x1`X.xdُ}*C7&ч"ٗZwN] ͟Y3]ylݟ{oFC_}y7^=!qbvJböʓ/yW*0qf|AhU[qQt AJ1BHƼ iNW+E,=LkȞF۞,d|Nt|.zdL2%wq%X˞bh:,_T>A_iue)mπ*.]+6-!XKtW>:-Zeѻ|FyI}}NFC2jI2Ivvj9 ["$ǁ]@YP| h>dHrϓO Ĵ:%L{Bl5fymR_]q!R1 V~Ͽ%}흧 -{:u \n=岓שLB z,~ )E}7c{bxx[T"=wOT&ؤ$%eȷ?Դ]%JT$i%G&ovv2MY Yh=I0dY@{$z}!{Jd!bTuGrw{O-#F b.@SL!49J #'cDVA'cPdyDfK]U dl 34p"jf;p{?O<5x||vW^KLo'H+KpӠ!E(b{'BLqZ1/Q:za{K7 b,N2,#Fxpٺ8Wv $-V1rdJszs'(7sGˏ%B/N) ` ~j5l)J,_QqdV%ɓ*ݒjܷiGFι)7i9Dcƫs+ȘHYa/蓯7p*u.]\ͲTQzaBI y}ךdٯo]Z|6rE/ rsF 2qQ۰yCR=82"Q_u&הk*z禴 J)- ")ʫI!LV]ATP.ϰt1 V5OD lk+ |hm/n NAUp0hGT S(*O䆃a<]%vdoXDdqd@Ul(:& G n7jc>@!MMT![.x*q1Ĥ\^|*v8vcS&ՔO` s[1Ҙ," o"A/;Zhu桒Gx'6Wjt{v9%Q + pה1}~P8V/}$G|Ư^@d@Ȉ_P0:V%_QyJ="h_7_[P̂<=^u!fT`DBZ?[G,hcZqaCzvrA*`RUa&2GA|>gI\tz=+nDŽ"M5t,#׈%HA\큤}}bzQ1yeƑ)ߺd!eC_`9E(/ne>ܐY`>H,y kdׄ} 1wk{oDžQ]=IE#(p'*+%_! nNk1:O]U>o ZwnZZcw4 qP惣~{} DPy Z, fS8 6xG2)P/Pe8xķh dP (u Fi"t PLۣ.Ҫk\uFH4S ਻I']WZ]g%!ZmS׈fe'ȁ/ޮꔋz& ~Tfշ)cE(:? =Lpw"\.sDO!Kǔw3ajDFT%r ظ+ʳwC\&WRݲ\ O܉#٫t@~Ԧ I'jFσ5q0s$a&y;s$6C]_G~cj٧wI 3D >lcY{3#GYN.}Kt!!)W;>ҬԼ H gVeLa|CCHk;HA.מI1mJc*=aǬTcJ[HIJoG6{wMq:$m[ ^h7ȮQkp_&˄>N‘b B;+JP+"SnHcI>w_2y8`4.yk@&5cw79ΜmpҬ+% -4ξ 8i#= L:gт"!.ncaJݒе[|ꉗ:fgj{6!DNC!_Nc\ D507A@XD?F/1&Y_|u" dD*n21^;hׯx [eG  g_eur@~?V;g>^'ztwKx8I$I݈>ڱo[KS{K~u= qSA2~ٚ*5_1O.SD 3p2|0}spNIm{ld6Ml)2 r5XA67_( k 0Z1&$5i7 = X@ 7WE02ޑy0@!8Je TWF*?|tU ȉPBsW^07#2 ;@•z1Zb$l{=RD{nٗfp'ggù|4#^$fDb`sYZ6Cm&NnQg/ä́cuXTT̋NLë-٭k}&* O Y͢I]X)M53;YWB@w0y,B$1F@ɸlar!fqH(`˜]]^Ϊ[ƹss|bRKM)B}\BNF{sY! p=Q/m."G;Ar*7⻢MD02 d!%22tWt'!!$.:˲]h$&Hs֨ER!Lv`]l$!t) LdP$7@.εl`PH) RHm!Hy@Cd%61a`Y%n2H-0`u($ ̈́& ChBdI5CRS$f$CLz#)8\j֪DTΞ~y|Aaß~e"VӸ EBš{^_aabymǞu;T}NwG&Ι uP_o'O]= np5!a @&w;umf&8xGw_[4ԼWk]o<6IwT V?UǙ͹Ij4k빚GQ^do=p!Bs;io_%xmױU9 ξ`Z(07{7:/y[\7/pBId!_sNF}_hcnHyBB,sOx}~Oq=?AhӲMt%TByc};o:.G1IBN<7=7B@ &<ޞ9~}{IN#M:qp&"`$BbB:ᝥ;% t "$f{qڹΛ0q ] ?CYp3eƫM@ĀĄ&-,àl$;黎nc@ɵ䛴ZrI$uH:~C;l$],)$0<::B~6㴇!dxwE7[bI '_i؄  $x_}8u-6~utBᰝBOC!8 I$xn !&N[Hu,_so'YȀ@ 6w~ό vH@s{˼?|!x[$>w`rXHH|7]͞@BoD8'}a%IY=2p)Pғ0 '% L՚O-\ש/xܤ̀a? /uqXy?T !FD aSPNw8?0ak!zoB>TR>Hc!ybO*cݪ뱫6ڷ/%!$ d0h Y OQz!$&{R@>ƶSm j+%lk\ۑ%rzXWcG5͹\b e@~JI `BLv@'a4T>g$!<α>F!٠Iͫ=èul%fN\w|MyNE<$ ?HS|=_%zH{_lܒgI{.@6j@=tՉaTf(I& $Eb`CfI$lB $XBI $_cd;75 ,S~A`!kȲHst@ zoЁ}<}! |5_StOd2I=V }kk_u[٭\SUUkU%ƌ,TVSiDTT-ubD$4M.u aѰdScF0%i5!Rh 11$!Lad&EBD@Ō>3가xa6$I:$V7m4i$ '5$ΝP*Bgpt`k I@w6!2 O ?zXwo` G_$NQ\ⴐ?l[RI zο@oRBwP''Cs؜HB1~wO!h~T'c޲Lb>Cx_bzQ^?p}*;Nom`,# :0D2Ƀ FuI 9?tI6b@&{ 㐦#VBoy(zo%^RKC&ؓ[T.uU]+h&X6 $]^{$W0:=j?g9% ( ja$!d_,Q&KG9Yom#S(QwZj5}H/0,7S5e6Yش!ԛ"n?R؞ ,_֞zBK@Eww|oĞ1 1/Q zU]d>/]PHyO5 +nؐ]߱ιBq]~=Cowm00Nnia==q佐R1+O Ns}mpM$h[u;YAx$ hv3B2"ls5sDHM.ًUyVX( xʉ61}N=KvDGԿeb77;9X ͵eȨ(Ԫ>ª pӧ-L%^bmm]ZL-%Y3cߨ}IwnCEJCnq6|u7@TX$dCH ׬G?Q?5|cwVߵi워5 òtI2e2d q-][i_ϝo>]%e $R0γAse.4$*@P(Ja H.L`W&]3ZI$'! fI$3cY$3@H@ @ jCY.)I1d5x=lڱv $ vS%5Y$f :YD dL fw>XtH @$ , &)UHiON )kT{2K$'y`bH !$$MBӚAbК靐.va dALPCK.1``R4ҊMnw$k`nP5jp0rY sIi>5 >[ @w B 7@ EKI Ż& nB@Œ #n k&HLa$7ڇP6ْBI l3aBA`]Гa38T $ K4S0]@ $,:RE@ *d v$6H@ l3qxSeQ'`CŰओ0'dГvoZHm222I,! %70I oLCI[Q $a UiD.̭! HjI,l$pnI&| !$zޠ\$mDƯ@QAU|+DF6LZhBK)UY&t l2@'OL ~ Α&YD6TXD4dEbh TD b 4I (02LȚ !B,Jh,ѳf62$FQ0S&fPB ɤ`Y_2m'klk}ԀIBC33!=H(B!H&IwؐB X@$U!HՅ+ݭm4}}_:Dq݂JW;uӮI&wjڵ\`qHИ0 IឝO5!Y'L3 I͔HndTTQ_/r XiMZ-^u܃XՓp)b냹:-r*C\ݰWݪޝܨܣrk.ni oDRYBH˜I Mee:Nq@$p,!Є. 559hB⁰fE臾G>!߿ xcA Xop~%EO&fk :68[P]s,Y  ̜5&,04Ґ%&/#\s˅܅+m<=<=:QЬi 2;?uK [$6o ;$:&BpRY\P-!X@! aŒCT 3&H`EBFYҒIoڷm#E6z5Uoâ=rNGSDYBl6!JX"0RHnIo 8;X@ %2;)t$px!?] FCLX a6E*-6Ɗ#XęF1 DYX&$%B|y(,Q ZcEcE%lE b6-bF0(չjRB}\ 8Ɖ'E9pt@AC$5Ui6H[D@ͅHMjaM'8T3 kJa0CSL5__t6Jj6)"PJK>oC5#`ƋcZ+EhţT'y|bvXɻaM[U$MCeKTjn, ̜@\$gE[ZjˆI 2JiԐ߲}{630}Ӣ%fUwĭ[vU,kU'-ݡAv2-dkXU̖ UJܠşd=CPɼieUH,v K+K7ju`An tjͪō[V6*!4놾g˴Qdc޷E>ߺ4#!]zyIv|.OBr戱笼=z܍[ݺGBFWL8VH& M0&2W @R3*iU:` Rd9i7A5aFEk->N;cLјSc LS(&`cJld6FLDdȕ&@F`$bP$ȘL&lL`"bdbLC)"Ř` &d-}ެJwBsTC:,&t!.).3; &V̘E9o-9T! jBeFpq%vTyaD|q$7&vCY Q0uLB9kHV5HR@萄IFV 5;yW{_5m&wt !fI @;#ADE#CQIj4UX֍6VƴZѪ߅z~W:LH]㚁T1, a-m݊y?/xM:k]$M0~bL23t /xOQOwBI·:n% N;T'xh\xg-SF bJcjv, 30AIʫ$hHKj9U)RApuֽh}T#ɋ%'7u|858T)6|?|N8zl@oPw;5Dbbڠ].™L4BW.A8&5wS/]հYtקK٤wu lܫTgC-!acyTL*4W)(nCh2cEbI jBkO./V괲jOأ+] b9Txy [y6rZmXpoB6@pn вx"""K:m]3Ւ  j9LjʕH;wN(B%XʬX,E+E7^D>:\-*:D9ww"sbQ]Ҧa]{t_h[uJQ$xH6uhkoXc9]¼T'2o˟iNWԺ^acyMM+6N=OxP?W( xA'K\˺Wڞv<n^:.oĐ ILdt4(41}k@V!Mq"/ܚ ?NmDDG莨:UFA1(21UZ1[{vƋRG99ᴜ@[^-O|A2n>suv|b@auPzo XBBN7|t}N{s\$HHk37'[V,:S܄hB=KdrJ;BssHvO\ss ͭ$$ [$Pzv {j r;?5n+8n=x;;k!0 $m0OՉsX$I tH@d|۬ HН$}Ē'g>wcT $N~ٹ7$}EMOs@suь !5В@lCq[sZ (@ԝ'd& Hfg)$Iβr'N{Nvt9yĒtIݡ$$xiqMvoi!'mDD:4 3 `&j`s;Ѐp Š1HnaB2Cx} N#c{b@8 0!$Ǣ51`NN}'*e dݬ*zRNజ;={8;4z`<$9 'rsϵj͌&j2]`, g&:W2.o1p17L8ۧw̜I5};9L7٪yl*@w*wӻỳB jI6GI0Kg)5NH[6{ 4~R:kW<&;X]; }>W_(Cx{٪Cq">һ@{xi rGvуpX`,@,0 W9+oU??(CB|_4?d{+_a58j~g $:nY~aNתN5 $opkg_e0Ȉ0a (w>3h(Am᰿TɅ<_WQD@Jgf=f^/kM)oSrsl0AX #d#S6r{Y@JO  ^ H3jx+M25gbgq a ;#$!}ƲcpD&% u/7oշxx߂Ԉa,0@ oѸYVKrTjxi,݌j& *ZtG}ibB1(iV.Ƽ dIp5W`o4ಏ0CQb|Zy5dA`rڒD\}ӂ]=cڈ>'YZL~o'ܦwI*=Km#~'‹tM蘱 ]TL`{/9,\t9>Nm*_+d{+#NP$a/;zQf[is62 C0{R`'P@6XBHewP8>3ܚo# Tz˯@=R!~ L TXB`X4V-/OO7 Moc5zdcPLe@^7_8s >f"ƭcQ -%ki2ZЀ1MclTlh#cb-EQ X#Z*1Qjńõӷ C5n^yjH"t[R{I)F ?1:D }u®^mt@&uFqrsp>l<=y 7Dbљbj66 4m!4I,X.\bR)a-ŒHM&5 "PlF D2 o7FL - #+,cIF I$&;{//}= cF%*!QWhZX3:)+9^ڱmM[(Lbƍ۲}:wKFbXHDa42h)ȱ`)dv\6KEHz;}^ؖ%]l0! !EIB)z! Ț1unX/$!,$Y&EE&4X|WoI&MS; 1c,U`:10+ۑc=ddRHߴfD;&9ݾDmKx}GK]7sP?'v78w8^ЁZ<ە na9w؍+ޤK%۞{FM4مu:5u]gUN>$q8W`8KX!w_o=%5bR]ckeqYm` @?_)˾o؏I}=CyymwC~oK@H(B@B_ң\DfAhL&0> 6" }E"<(?G@H$ f<W*2Ea@HbK)nSu!`F@3?|챵>F_ՍDHD5ω?nU{ vbe nd]Tt3iE_4|R8zTt: +wGošc枕"dzX[ >1ZP0AhQ\jpkE潌iɃv`e+6{YwfZwVݙ{(̢H6D҆;A3 1sٛq5cLf5"#&&RH,"1@bcj 8EؐfdC$`DFC$Z @j4l|=tyLA0l`i=Rzy=hhm0F1QFou>/1I"U$ZLjڍ"i4Mcg|f%0,0[[(@BFp9*`2BL2bF8/E6`RdY Z ƱEm|}?]X`&@ĵ[&,:Hw1% K%6z'ٍٓMs[>IA `"PL$MjWC㺞"/r V,0B- R0EFؽmM{Z_2W5Zwk^DcEj7ky^KܮfM)F4+3%F #T*LF!) }oޓ`[Y\>U|W{P25Fh`bɅv3ZDd $]Lfy 5B)$` =N}Yc4^hIv,JH- TЮ (谂E#z.aP`]:J C [X`MIHP471 @ u"A^,vqJ؄# ͘V! AِX_V-;jtNfk0v2q1cQ`-6]w$Ol\(YA2Ė[\* AF y8L\;֟5˃BZ[E @f:LywX\T50{k y 8^gwAYIb [^kfVؐNSMsJ tƂN׬Vx3aL6W_1-Q*73,[T{jo-QNm) 8ޕҿPNfdUtT~t1TX <Eshƾ[OFәMU"gmQfR֯ge]6JtuukfReQ ,ݰ k,M6}Z8qK:DfwV7`6P,;P9?QNL6jz 3syP\lYw4yz*pj0/މڴ߾B1=8-_$uV#^q k"c<&?˻W' M0U1w` 8s3HVtX.6ѩ%?#gّzˬR#m zA7~F1'{j{wh!V,a)PbJMA۪Ћ9eY鶣 b7ntg#W R)@ğ79pOа%/f% @I0tu\Z!!! aTȐ]xlgc2)2PR'ӵ Ӑ1Ag a5KS$i*(raj)x_W^eGHr`8ܓDx.ΐ=ļ]qWp |JA j>>c)KS-{_?*ыA4{F#fn}te{ 傽6اʆ& 줐' rRo1@:?)I{5ldTԁ@:DfWaThN7%d~^r0LHoK١ZZ@\нXc}qNiKnNvXLAXrmb$C;J(LRϷeMfCgJ:Xx9?Sjz=yU^ lqmЮjKfU~k^DcٴHoG!S&G%RTζږ;i2)<삨S=jDٚAts&&NRI(H +\q,BfJ5FNBQFuc9z,8 D?ξ C@QuVIB.c ꔕLV7b'`Y._<+Uj寵X)̫9czR0*pYF?iKD}#IG6U *B%w\삠Xd9E>c9Լ߇ 6Ql)HP45iD,+sdH'{_;H?`x\Y)XwfyR_bZj'+>Ʒz{ww)V@5Mr#e+*<"P讳>_0Ka:픫K/g4]g5IN#ٛ8/Y,ŻS~6'U|)?xsw[`ћYfU;nz`QL=\g2g{%As׎*Z +)%RWײַ䎔>gK? Y8a1f6wy@=M̿P ǐ [x4q)[ G`dFbırtİ뱍kZ獼:6p1 VJzR%daɵY+D%j hrP?eSڊ6N_fU_%"hcX-m70bj&/u|PU1߲61, Yyu(ҾX+$[:-q|,_Y_89vlk:Ԩ~~SYk$ptq?4eZSu3H<l"5;AMt͉V8qj{yv۫:?ˣVOjJ[T-1o~FXZ,ŽcO]!6YNya,F|xRgu}نJ$5`[xd̵bZr^]z>,/'*FZ=LigxH r&kC j ɚV!i Q[-k>s q2QTEpJӉ@ZVΛtb4}__/~n7o|e8W٣wuw֑g%'y&wkx Aϡ`Gp(i0* h %g{ /.S{V|)0bJ,mNkx |9 #CXIxe $0%Y&X"e\Fk,`tzly7{>NjO IiPz?*^MŃp5:Ou=Vd&  @(ϿN a^a{/Ǻq9bk9^}<+G簟uڜ]Ѣ ZRPn~gq;Ozܮ,Z<0(LGjH~g^:5z`D=w̩3ވ^¼=r@ !5_O߆HB~nO#f9}XgNo>?7=^Mjyu7yu-iUڨ WzU*d?gNqCawv@  B 7>/ >kzU?HyC٧@O'xo/YjVi9byLJvi ȗ} ~un^/#y:gAHwT*'e0$:siK$$ S$,ϥ ڿqD<7g;os?'9"ȊRH,HYШ.LvYHҵ2 " GdEb3`6Pm׺~Ln]cӢo__wO1g&;L ‰?-Յd DXvZ8e tyQ|+uu{џxS8ƣ246[n:qO?bWokL"7QٴO~G9$BU_}j̣}T?}~ :TFI2 QdG9CzFPvNN湱P$42C] C&H[ MLɬҺ .L 4fVȽi "B(k &lݟ|/qa;L5q3! V+A< jÿ́iXEp , o|{F)/)!mOOxi_a=ͧ},|IVXd(`Tĉt K$釉eWK20KaG3ٙDNРe`=\GtuP,T%P$2)nf(Y8HbE0 iYT 36U13:{hj(+ð@Ri2DWfN2s'D6Р"ę_&\ZJ*S+Xh֠ [Cv0 rűF7fzȤ"WIR#7ʲ ș@B GJ$rx_yF|Nąxh&~1Z(+<@2P0e$9ZQ<%p}(VNyˣ1´] ܓ]6v+s#ZNSO&4rB "@(sw=쟔kIY~դ E`)'WoȀw~Oycqq0+DRm'~k>]g,r.;H])D%vOu`X< * P A'w_{ J/Uk-~[^Oxv^Ϸ_#y8 P %pCu z!Jaxv[jƪ,ڭ mVB@/JMMTY$=4 B !p9?%}~|%UCsji1;LNe_#sz=OWq;}d/]?rFy;.ޒҼz"$" g]UR[_ck~4:>.o\7ew=o; qgC~ 5Cx`I`# V8h2H-ނ D*QQRQ{[\Lr2@X{r>l{1"`{_*%xހ?4{=?Ous'0} #Bdz##<>#a\&3딀'v9B>b*[#^ʺӿtcl@! $9d"aS!:GHm{d'PBY Nф)P !?)$ټm_Z[k\ڷI? B}LLx%D I@vl$ ۲@ o^̈́=0P@Y_}s>t %|ʿ2V^/XJog{]eӼ|9,O'믵[_2F)η{cXmo}72ԝ%""jJBX{4{֦ ;y2Z!D-=}|bb9ϛ/66D=ԉ4gd̰MA2 *`w8(:ž^0.{oc[&S-_>2g- ov}>w,t-T~]V͒-@ѼYHQZ$Ƿ57rjnz=A yb@x$I̧߳v5 sy$'0ByfI 2]>#I5h{P,2Oƴ$ B ORI ! E!H  $ !dov+#܏-~Q;QjVO?nxv>f滭{YZO'x[FgmEO?L';;5y]_O;8߈SDpA}b>n 1yej2NG58ɓ_q݃R[u0Wk]1kaiF*țuֱڴjAOB-s#7u /ťQOrq=q_lm2.fC y=HY'0)$QؤY  FB2:~u=r;z}9PsH Y{_2,;qҳkݿ蝬AuziAo}ۅϓܮkxLX\2ύ:|o}Uܶ,>r¬uofsWS^w|kQwaG"u,AGa{^}Nj ء_3PJ"$)=q#5%?EVw4lOz;~?~uMϥUJ 0ߕڧ !IŨML1FBw !8S"lW2#$ UEI$CK$,$(@)/*ahItWc{iC}[޻ kO9qz/d>aT[>׍.NI^سq0† 8c1z5MWo?|TQ10FKJݔOR[=ڶBoI@qP!!ܐ"I2IHY :HSLƢR$*$'36d$ "C$Ooy~Ogޯ|PxcEjr1<61]@Jx/;WI T1ںI{\6B/(>GO_X_=Ym]󚩦Ӹ|iNsj@@= _Q%,6B%~!MdOd'IB<7[x,CI$?E sai\ޓV@$lFv F k;>"~Ɵ7}}÷?u?-MBǟ}+5b$NdҮE{`\(DI m*ÊOmض@ᤀ NhIEDsUl'SH6uܞvx"/A,&$c]/aS ;gLU[y\|s,1VojLJKj{n~N␛,$6 椀d! ?)!($.EEŒL RHk2Y!'< zQ{dzAIE/i{OǽxQ֮Tx4% '5YoƳ{ _c A]< j@gM~75ն+jչjjּjd Y.6vho^2rƞ b;y.C?x9jb@l&F)‘ " 1ՠk0="ڠeT)@h4{8W5U[FT[[mL) I-IՏR g漱$@ %[n_X{H?+jٷ^G*x-~ Ê5& I:CBCCBhMou}*~I$?Ԁ3;TP=k =BC)H@h\!TeoOqalAۍ|L?'f_Y Sf> =,)tT"eD<,6_=ꊿcL:RV /MVݟry5 &a"H]($D'`W,ˊb `tɏ&),xܧ3gS&dIzVk3Ǽ謈Hjb1wKOsƯϲ2WK_{G4\8P`Mrܳw}l*YiN'bˉ|S7>Ajq{1PPl를@]<$3040̱81r\Stֳj _B~&k/b*ʹWg!TX#'t_U׼uhK\ڻMȏ13Je`m+ p**= r_--,l]|jzX3'XhQ)֓VI%859-NThsUGE&O@@j/շYIvӿfn7íǼMѣ' nQ7sʙ:ej4S ÅRt~[]lttέ,qGoo ivȦ\1iXxR _ft8f܇_]Co(kكp9|<"@A|8z m-ebog⨀ȡV},;F]?w=3E&sA,`o6N}^J FLۇ&l/ϼþ'Q}= ھv^4CsKYRwYB0rӅlpis7f=rޥ9Zr4MѮL,p]5u ۵uЛZ jPur|,N^ϝl?7Z1FbzO~Ʀ G}wgm.[vk^?6-eaA%f{Kyby+ S;ED>FD36T"= } $G1Vgٻuuv_o{5-F-Dr x 2N@z">@֫4 $I,jڼmUsUkn&@ 'XԀ5wֶ W?YR_d@>u(b$@b8\@ǜ$H{FIMfp(_'=#l#7ondI IY JHH)$}'`n'$BêOuvTls7\Oە^$a= Y&!1H"@1fx!0 ~*BR "&.MZUm{~}o zkQw7;||VHa$yL 'd;D@qbhd:lH,je2N1 nPD$SU~.6*ߚm`1E(@0HS G˗}>c?nv~n w6 LY$Y yy$~+$Bz4)鵡j~c|϶װ7]}nuxM=CxWl"Z~$SH5CƂ2mm5L5-RV+h6Fɨ&ٚ*,h6ɣXD%(¶$ 5"*R 1 H2$L 0ADA* IAE BLB`cd,La*-djۡmk5^=kUZ$$NzT]~c6L~n) $6ℒa? $I  R'U~Ox7Y؝tQ3$6ʇB* TQX@ $ r &,zԼ9c]J^;bσM€#@ {I % B@<$$ɡ-~U>/?m~wZ6.!MBIϢ@>O8]`d)#U-,;Gcswp6M2 kHC2ʔBIjH~ , F'Q0c978i5MuCbĒ @?! 0 =Ip`• `&TQ]f.+F5-tZV0YN$p۝N" ;Z!k z^)"/̣"L4]ee9P.&a>+ʛ8>G*ou;J!5 |;~/(?ݳAZmo9!mD0/E/ܷ2ǁP=ZEkI.8;X-r``UvTH<,-<P<`]ht XɎS$f}V)ڛ[%IoQ Gkܮy [v(Dxdjҿ%;}5)pX֭ݗ<`W?wJI(e8SrF]E|s%XNějCb[l'rݿr8Iq4y5 ceR#|ǁUOXqF؊nzЯvt{fN U#[e eor6ڤ{gcGjxy%Kl@v%EsF3B϶9Ȳfjs+WA%[۱qd=w=#N-8KB-y%ѫ$D%KfԉH@ĝIB^i:SwN7cFLtR ?vhBNS 7TnhIOjۄPM[o!$(GE}-.G\+9bHZA?pj8qkouc:Hy&@$g3Y)]y{ogZPS~@ nBeU ~>B] ?Z5 ~%s|kb@8"z $dX1`@h)8ܯ>&lܬi[ַq$shCX9i ͜*O7.X0a _+sL ='٨qi7gӄ%8?+x HuzZ cna[wN% &); .B=|ZBlHJ!!" Qq70ĭĒ,YBˁB2Mfeޭ/*IT~/^U4zgP}w{@r=H(@T%2Ejڂ@ɀI3n 7ϸ/>lkն3_aiiIB&H~Lܚ_k`~qoiZda`H]qO{oƦG]Km4fNiuۨ@2`0pը@v;@s\-"-5*2^{;_šsk\m\ĺȬ LjKŸԗ~ e 0Dӎkr8 ;dusO7E-7F[Q=-Of49VGiL6I'2%u9߱nZNo%DBT_ Dt:S)2Pߟ~0E,/;ũuK 9:mT]Dq3~*6 XTisoyZRig{<~7"ZbV;)&uaqcR`ue~egwXb駘3 v5 OR-%hz(m&(/Q5A-B#M =VvJatW _r}[3pF惘&"|oIL2 g/nX9=H9gȳK>w/TN>S2qAD0'ErÏ+>96^9V7$~3\V.O_LZ')Wo'eXHYK6  tv&Qyp'X::VP)p3+ѱ\<7.sc }ZvlvGĆ2]]Ed'AFH`fE!"7Q {6?O b=ЦsCͿc?Ƽ" k_esi-yJoo̻~nxH3m^ca|z B]r<ˆꥳS3ĥ!wiBb[!S0#27ʾu2g'z v}$&_S7:yOw̤]>e<\ a!yM"#6/iUZ"V)p0Vpb&lُc:pSO'Jeuȫ-m>v/ry]}D6O 42P2*V_Be A $i;ƶ#k7>D鏢iXU Wg=o5Z/ll7 Ez\ͦW9(4\tj{~ǐS'[_4X}09w] ^8 吚L:wlXBfI$@"lkLoZOѥ!%H"AO{X=|y ugix A{K\" #X]4R.8ʨwdqDn,hhGIo^vE= >wi d ` ¨K5amkKQQZcq 6$?\NGMYk{S9#IX|ޘaD9Lxi,rftk[[30t5p booS%Xz#33 ÊpHCuAxfv63 qiZ-Afv f.?m ܙBBA[oHXRgrϽ2&)MEI߲V՚FB\hL*]L=֡P]3o%?!S42=Q"O伯W.9S@Н+)߰&(HYd(Hi\E=>]uZN~F=Br\ȎvY!BRI$N\>Dtu.{*hx,_EwyzE%Uj?BПK&Bt 3Q>wu.Z-rHna!Kt"~pX y}p`C /El$|#}.B Eo\3б!w"T`Kv9ö8&"+C]V5ps9iࠞ b7DRWKB&_U&b7Eim, |nE퐰 )ꈇy8nc..GjCѾFK#D{3Z bC:L!)$Bf+!GwF\_8?~: lXT|4$X"C6V*.#k3_8rxkd;$'2Cӡ Tjz].Io4խλhܵ~aW=ݹjszXh]uGiivH SS-M亞Gu?ϱt;WD'O{*=zCԤ 2C,Zŵna5Cm;Ubر߹щ_f$C#QmBRPKy)PZt+1;+O<.w|;NVjsZfIlZ@w۴?i?6̛|DoqD(bn/~;:/W^z.`]'o}͚/7lEADPDųH2 ID!!H-3De-ɚ H/pظCP) |0b# k6LU\=Zy)_qÉLޞŤ\,,uGh7+ےp2FJ`t &!ΧE"ă5Q4b[Ԥs?g& 6y&ۆFp|jj)$M67C{f?!-v UsͲ}tg^HE+bu܊tX80G7RkR T'9 {%1#i1%Rw 6WxcC_[o}'>TÙ̐-~xc59Yqb}?t~ 5)ëgrREccpڮhz>fӌUTTU4BH@D-ÐZ,.5+}3Ta6Jitubjk6?811˯T?WTV%r]b듮L<^ >986 \݊A$!H$0YG֮51÷9} $H`@Df0el/\7"c" t(0I D"Yถpma!-l;߬!\%bFlUπ[OߏNgn$0YܔqO.i)+B=@++pi}c8lHjAǚd)?i13;U}ZvwйW}geHQ9f]dP~BŽ(+Ҧa19E)cXE^7&W׶wVU3\7(V1D&5bNOQp[+523"e'O{Pi0 M9|Nn٬ηw׷f&/ SF]Ws˫xWI\{ixuko=ӛ_cm0t6zffSZ(%9qzBH7K5z _OcfsQލ9Z='u yڇbhG+ v5iQ<054;KckJR|$H{>OB?V?&ӻq/[ ]#u=oE"20-1Ź.el()+0|;*Rk)2u i'c/3!P2!(r&V% b $+V|6E(<;|__pSvɏ<>H\ xu,Oӧ;=nQ&5~_٣5|hjה߰G9;ɍJ5߲ *AI'?!^CN6lMK>!35$aJT݄uܠblՉZK}6:C !JWC N&;oIx{ط.1?lMvl,C*!rX3K~ v;.kq3a#deBDfIfTϖ^ǃ](1h=EqnK{{Sg]ɸIu$纶h*Kj}!( .og} 1Ka wѾ(' @QݪcXDRA ܤa,g_ 2r]Skc, 5;"TUH "N&՗xߛ< OL@Br8 |ϑ8:U`Χ6 _s/Iʱ8# 4kO:W=(ds<|{'*^^/e#8WRk#ScX !!BIݻQg fc (!.He-CmAdzGMlVҐI]#bN @M.&1XTg6nAuCv!4b / k.Rv)3w vb@C:N & eMx 2 %lA #:yr Va둮.E\ rcH=H:)&Zovۇd3V''yk̜$]LUXg ]&(k':.!SM=jaAv`0`@@A`' H Pi KeR@,gfM a)E%ji;F*&xk*ǂxS`*!b+%$6|[Z 88mSY Zki7+:4kk+B bػ9L0R\ѵת2Jx%#F\O~Wͯfrf-¤v.եH_{M&b/>I?5dSYs)("UY{^kYSdgLq.Y]ؑwrv*' :r*mROִ♄CA | ϢrnFwz\ V[èTՂj%@$(5&fI'3ޯ #u˙b\L1n‰Aj9e2/E񾪳V0!F|K b-RTiC{o[wj7ۮfl$ [k\-Wa@b [r.O2 \t_7gv2W1kR[(K@S@BW0LLϿN'bZڷ{;^u=)/p=rJ SR&]J KwmRUlcvׯS{{pPRt95ԋRxǠիil*%\^.4c|-/F$5?Wdk|xy&e!l&ͺ3ۚ6;kejjocr?g!nh<@ƞ%CvL/Ss[M9R,2ϣ|ɟu?GbJ1Ar&Bm[iɰwo[΀ݬy1_&2`ˆgE6*${R.Cal~O/a͊4Dx ;(f=k~AL~7d>W1dQvqq2 AR]= NL ©2Z~Ӧ Wl8,|SGBL; d8S&dǬZyuJOX!x#>kF>Kfy,K` 9DA𤋮l!y<^+$X_$ʹ1Q?$q8i\lKb3?!rBnoU _Kneގx޳p-4hi/+<+',mR%1-$@ Ӳ@@KL5!E X=@nN:=5'"O lceV_C {:ygK_JPz>{˨3WmW<L 8cEϭd5Z}e`p_C˥XF没g[bwNor-REˢyqC؁dn'1E9 uOa@=86p(o#D6 fa{|td'WvXmDiX68P3Ԗ ~Ԑc <,3x"Q S;*B+{kߔ@^8H?ъqu%q1C0s$AB:!_GAd `͈*%OY=tiR;6mF|ɼMf!Y;kw^gwb6iL)$ϱޅ@nZi9˅XЈ )^(BEt<֏^W"^SMU=1_/K;j'@!<-? !L!fa_{uG_9e {Gsۏ{_ӻVSz[L0m,ߵ0;[6Yo4_[1MPУ]q=w6"{=p>7BI v%]WGqI<<&C^VǑ{wU\Ydm8IGCбbk|iO(1`1d"8P!LslC@%ql+7եǕ3OpqbteQT-L! X`X5its.Quq{ɢ!7mQ [ l[P6Mw@s;\^  i2 9_ A4m -~f`1 ś];ZK Y|"i8_|!oVH2#N{f,a7gk og,7DoFZ :з[*ª}lj 89KBFl& !Il]fmaѪ/_BRO<&m /QbQTc=U\ ڨ7k"s䃾^oS>\}wcl>ڇ ,҉/?К&Z= ;GkrJ[#ȩ>#O; ;V=Yb!Dv/d!ק[A?~(r@\|~DYZ=7"?Coc Z3":9},b@۬{$~Kb w}RڙH}Ie©:BA6oIPY'8oE )HBE#CRUp6z1 O[k_B(OdY@o,L]?~C}.v jǓA^PfѲiX>˫v(G f WġfZְ߭߿Xc>xn9w (H7y@V腙d9#/%=m#:/{׻;%|5ͽքZņ-Wzkmc; Cߢ~ͺ-r@9'ܡϭ~|;`|#s gRy?yo3[c_]<$:d`8by[^Wp]l .HLHݖ|;}oդ:B:je1 ZQ6/gns֐E$&6ӆ-ֲLX}3 Gc: ⟩Vgw #R:jL((>{swޘd:Ry}lB~; b1Ag=5%Us0fm'ܲ^#w개hD(1}đ_$; 6RyXQ&/E7q@Z>n6b2?i97L K`7>@/⹡/."eV=hj9!*,;TwUJ#ZN~-fz0 {5?%_&E4WlB#+I~fۖ[{pjUc{iy1rM^3q)"̨?^bD9]~♩gn6@` J=}LV3 ]xfh8A6jDᅨ\yO3@=lDaș'жc x-GWǠwO{HQc_L= lJ RiOL#/UCN s$Fidžphq)'g+>_ղBŎ'Q@O1#{J$I-6$\wDOpԤoݬ:dI4j}VtᗟD V$K)6|?'['P199+OQ gp>\2.lB^ Ϥrp$o?FpkwOH, @6 PP:J6IhXLbDgY LESE n,WKE{2qzњyz} `)jatRF.CNeS>{btڼ:b)]Z!S~{ bӧWM#Fhx򴌨#+-{9ܬw۫rʗVNNﴤE+G4kfX:#;f7s+ u xomfxt`Rx6EO1b\װzdPkoH} mN= v}/4)~T#eA+oyǚMV&lG31m9Gt SL|oC 욬Ȝ-8FF2EL'<.OY#%*(Drwy-T=$#)'|+NhrwM~Te:ձۚoI =F&=dL$DEl3;񿜼\N6!2×Qr15;Ԍr,(`A#$+0&{ׁ]PB'xK D;w6dY+ɡg/$g_h!d r`5S(]-ĴDԬ4B_0lcɗŢ 0W >~P JJ.~wX0o{Hh 0Cp|iln )2}-@6Pė e!w&+:h e9@l.VuS_/BoKoidFh-rkW_k `vp9n$DN\ѧe' HuB ?H nGI{<|ӹx6=~mC"sJKV[U@hyPOj~$9U'~FyTQSUUӠrG{.dP56V݌sBX4ZZhJ@!xo8H3ݔʢİ d!Hcj(( ;'sR{GcfDI$\%ێva|.>"kuн=R.FK1B5CYԄwW`Y0i:UэK.t[j(ZhhAK+{>7UD$\cRKeHqp KtlfP̐mMI *dP`#dd`F=݅CN  ̱ բm nBh+]P-YGZ`)PI77 Kg53s| `$$:t(Y FcPF& mHtE+I!%{(a(Vnz`vTdQ:8R%1$ e[^ץdŎA$3 )!a#Y1D# זNb|]sF\!0r3'302I rx@C|Yg5]$fC-yTW?aKh_J#YpE$nޅY&Ep|Bq$\Q s`kZߣ[ݵaZa:.%]CKdyxLB耊 G4{{=Eњ:ieJH(iW\hPd@[<~3 gxLgM7ZԭSdqGh>>ޮ.ܽ8A?~L7 3fɝ<}d6)71{8)Q=\ta :,.{:tG633ͩ{ԕXs<-+%-?}] <BO1Ȕ@-@&?T?A(OjgM}MeL2S$IJHn'yD3SX7QVH{#jI &aұ<9=@1I~nS <|b.$qLy;C+uk :<+H`ԗm{-a9Ox+uZAN;(Nդ~9_ zզ'ߓVKSt{ 9vO f)6OCnNzsT]5\~~'C$k;>tZ֏?0n`{Y.,O|s%*N_?6Hv3:rT_{2NEfKYQX{mOs*68[3haD;PL|kvx>6Ԫ>т RNmii8pMN|Oft;g噰EZYG/xg]IE, PT# #~5u_w^_G?+l @,&_B^yM&1CL"*1M4420QDY,I$ RҘ5$0 )ZyzD%DY"Fe+ĢoRg}o7DdWyQos?3=pusBo~4Dh$oY~1>r;\E2o ɢO.)j>C7GWʹ^h_r$o\XUA AG`&Qӕom*gO|T\ GiD2G翭t:{%DUYƨOb pJ";b1,[3=,&Rjf2 RןHv`^ŔfJjvv5*Uy/ Dպfn1DU{EqZ| Ic}unI$am,f1ҐbNfmT)}I]oI,Z(+0'=-ż ہVA))FN\,V½rP**Tw)  }pѻxG ݒ()$5Wh?&ezmQ]d|wzLD|wna%/d0,1HqD3a"R/WRt $I>ݦK6~LQMM9ZL[(`L ua"FLXdŒ0P@QfjSa"Ť6(HA $~٘0?Jsignax:;HEp`w lul5b8M9GuKSݙb8XOlI\Ҏ-nl+/l3}3- : {+LVB9SP*K lp뽲sͬTNOoG5; {9p_ԙPMijaA~g lXW[v;d`^,;3YcB,J,,XXUѯ/T(]="JF4Xc08V3.Wp;ysa 4aZ"vc n呬˼ʖ ]Ӭ R/Ȼga3_hh\>U )cpǖ8@j)mH| T,EZ-j,ӊXa>ج0E B4}C`j$ZtgQ~P[4x7<{v||"&hٰ }Xz !$`ccY;>"BE=D4~y@٥ؚq۱8בHG&RӇl1& nJrP,oh]0_cPdy.mO] PƽN^pEG^S L``]К#ahYۢ*e0d#t @]`bL|G.`絪BȌ^O^_1GF|7Ad[>mg"JՔEN-K'!fsiC:TMxyw|}J |o'.$A;NY;m>EcOg٦}2-rd~bd3%n|lK^  a([+_M||8:լQɫt!T>C-e  So0XXP)9FDR@UywڠjCB58Wrya S/߬)哵1CU?1/Mmmf,{B%#sV<}pfdjiCZ?w 6Z}GG:kd&6ʄ ܊&LUrcx5VR2QBcEn~7>ǗoZI -f i<@ /cpy~ !2v,s= 2J TQ99a.q>7iAJ׉yU=@g= ,^j |T-6EKZu}Uf+Y,j`Tlޮ[~.\4' gZJ0?9riIoP!, j'i `'eGW;!v*7fIaԴz_߉g4=>CG`lXuwx!k@xqϰ& (|&;"PtH+\ᬰ U?b>{a'*ϣau_~hLf_VÒʠQBE ?4&Qj(j a| Ƶ'vm<^87ѢY„ݔُGLC`6;NZ%m4l~e6I{W6yr-*5uWNniW58r\Tm&vmMLCW.?ƣŽsaкAW0?}޹Cf6B*CYIkp<_'gPݱZjĽ[ڐJg~/y_mqԑ@\VHsa5Z; 2?ó!NžR&Dn 9fH2") xy~?^x" Yءol.U7b;_T7W M}^Ƒ Bʏ|5}ʫyȎ7֥/hjc$sҰwm,%Kq0.CZqۀ6ECrz?ʌ~ "ÊLe}t߭ufO GR6#*$)y*䪇V"YgxosW DI>埬hYBQyȘa8Iи CڮJq !]:ī, چ<p ޭnՀG@vcy#2OhYow!kP%Ze"&OJ(6-cq {$J .oPDGG%:}y5}*μ ŚǍ /#Q;[;8>mE[?ejzA,8_b1ћל]gl~uZHoӵ^7T9fp./QU7ihsOR.YtNM$fL:;QjD[_32fi+j/U8k^zcqg6jMe^ڼ`8bX4/q&DD Q9Z҂.~:1l?lC2T=Tۑ.|y{O3sNp!gϝ`LK 3oPjԥ!*ŲȖûG ,I L Rg+qj+&CQڃ@)' $` <ɦ''B1`'dHy ?e }"fxßl/r=t,[O!́Rr"ky6+M{Z~6enoKuf_կ|/^Wdyv࢞SwQmv#B~߸k錬}w[QoѰ -K&a(+`S.pk=߹hz p^%ٳj_6εGE4j,rkhdNEYm) D1{s*{!;}+Zi`#+RmLnxB)~_IOޑXjBu>h>|D1w1pډamR %Z>ˠKM0o 701<ؙeGk/e|"嗰) J8ٖ.g93")!}yBJ‡7+ Uࣧ<:0әfȔ*h.|1_xOv^35;ߪPIשyKRk0&[L;ϴL;Em&ԻՃTZ ?Үfu_%[VƖa(QuH@YaG1 &#kxzܸք3$$$ ~0>w[:k `rݍW݌{??`yiOBXvܾ4~{˿w#z&T`#).!p o7 nD0Cܵ y*E5M$QoD'xΏQ3hE_fQm{tp=U|/_yN  H_yV*nqkw;^t4ݨy7i8fceq̼W8YM(x OhǏxh`h/%`A8?PA{DaL%Q1M<YЀT;섇&y-[ޟ/"|E]hM6yI_-W "w1qYg{T͜rH^t[8 Cg!b'O{ ]h;GX)zU_vOFh`-``SQ\G\ $3;zF1S7u6",E7;`*`$< DK3u2U{(S Lp'%$> 310!`T>\W&Bt$;c|Ԯg\yu,f|= $E{u[lH0@%yDDWӿ&xJaǏѦ@{hዤʖ2|,@pH35MBA`gzE9uvٶu߆4p\61G$H+pg4t|~=^K X #]WHATj|-Qe%l$(0Ah"Q=9$ng`yܯ(&lu!~MM7pI-)9mMy{RoJם1^y|\Dfc6ͭd,SI74,,S-[ێIJ$1}qJBF xfX \=}aV 7:X±*"Py[m"3:Ip._{y-?+qo_Ѿ9.HwA2 l%qkJǸ:آb-%2%Dϊ1X L%73`0<,pr\OmW ^KSiw>\.W"?!sr4օ0S8dqi;gXԔ Ƹ⑸G9ݶG:z3"WmybnrS34>BE$ԕH[grD;'R f!Y;AsH@ge_.6 #YŀVUH1v߯wQ9g>S?Wc~kRwl ; ai: bJJ7ub67LHB>=qe:En r|*$m9%^DܯCzT " IVVn0=2Usª(ױ"4I'DK!F g9EOYLž)`Âc#){sGATsNߺshW=`}ބ1#Du|oڸq"g3&F^T&iAE+ xh`sf_FzB].YPy~{KNͼ}iSjm?뾍o*f3z< '߫nprjN q撖vlпweCM6?凼6solI=:?'ꩇ(EωĄ,$8C<2@HLz]fnC)8;z=9H08@_=^١"ET_ڽk$nx̳[ībzGس~w]0ϕ0A~?1b1V1bAc4vb[hRQi+ߺ'Me2uԚ=k>qAl跪g넢"p [QcS*Q#ʩNvVq`FR|wܪ]xע%TҟN ŧ uɔQlKC5[Hp2/^?4Ym5#hzեQgWx{7 ];W KXjPh =qs bqe#F9{ '.1?~* $='>yt ˑ~8u%Be1Ih/0ꃪH! b[hޱ> -O.,d2#iB@~(тDfE{%[h,ٝ2VH(c Dk%#Xx0CiZ 22vhL/ܺՒɉm:nj"$'9yps)pp@˞yZf()_9bҮqTF70Cj) *Ek7-tg9]C R_+wE? ;UmE8~S 9Kc͡)n89A8JG?/U՜Uբ31:觭8}H0!^yR(l⒘%6K|Ŷ|VQX _.; ݩ UkhT^w[05~H$颭ӿŜdƅh՟!ݝ~4VQka|lު ?>cTDy÷/Z~pp43)"_F 3eSKxb\&.,Mvxrlil--|:d32A&2LgM{&9 LgcK2a}ITI$"b\Lo/{Jve'["% Jh Re}U-XF|!{zahWK8D[^_8QbЀ279ID5qCX9r@@@D!S}n&#̞ $;fi0v;6sz+JUB,o$ҁwQGheyBdhcsqEɛSa]O A8WB*/8}j 5%_L0R s0[rtL|;B3|# m^cq8@Z؈tY)DcE]LFE a=.cqsir`#[FPBA@:@'_&5n6{tL@[A@$wfh=G50kI .S4p]\a E f?{Yy%w r9*i_)FJyᖥ"xVzՒ? ٴVeXv ,W'1nh<gn{/XSA/7k-p$P.qI(:b.X`+[E?0J @4䲒 n\פȀH``A|ma,_ m[/1oP]߿[z'\:g[3Rፒܗ7oNXgJf%3)7"UmB3{o塆32@@7o3aqPwE]]ctCF 733K).e;u2ɬ-͇1;@tiB:t+.+ zpnLtC>RL@pv}[jgBGvYӸ, P]ܝ ;b5-K/F.e`|Q@8lnI@tbfm.W91;o_$q<bl8~ny#Kss~8(_ FRl[žk{x(1<<ģ:׻XȨmEH2h4yVPYܷ|9Must"tyaαVyOp0@q{*=ʶ6hB5H( 22Aol@"a1tgvrǢP[ Gf|ݷ1rcY ?4->nbߏ>5dxKud.ܒ<z$ցM9^0"jЯ0-#tPmӁ4)j99ۣҳjr2j{cpw\x5z!n9y#YTU_1<"+U$( W hqAψ#c/xMs:I%3@#'UňjمC汻Xot2˃_ix$Opv1J~ysqcK)kL{Cu#vR07+OxZٚ엑d?3c;aR6e鹏b*N9ٖj}q%tvZjr`@@"BBG8I t CS~7e|VGzW10k VvvKe˛R泭dthl<2 "XxIEsg!GMqȝ%s?M2 >dѣ8EC`})3ّȽmxwfxB~PvR[m<=lZ\Or~c/u9Y.aXoKazwvf'l'(loTg6na:M/BN=bg-]ݝWima}F[)D/ח9ZTX큍}G6G8 +݉왦/X_yIJgN|mGs/\޸I6?_P^3q5O0}WZ/Zia} |Nƃ,*Y>>$H*c^">̔ΕTOU i/r; a0Ȏ=0"IjlHsFh=҆V~$$7r,(Mey3J!b+&{(#w @2١F@=fX>ll ILcz)vzq ~DS$ıʻA6[g1vYM?~?H&oM/ Y? ep۰[r0yx7n{Ϻˍʹ]y(1JDyٸ(pC)hĬioT=Kzg*YNmHetJ3ֱw\;Xۻ,I,dJQyAAstJs\:-Vɜd$=w6[o`m{{aym^qnvEu|Y$tgFDLNMFeQ@9QZi63+ns@S`!onu4wG3 6_Z iOv6LɼN nv/aT1\"p*|d6{T[#ERr4 Do#vqB\E" [T,4D*mO'$:.|};B؃h;I^Rpz oPK;a>ʵm>t>`)ה)5e.7-L1˲,JV.m{w.EeC 4i"i^ {!Ҡ}.zѭjׅY{9?nbъIn*aŭJ1Pk²l01_.Ѩ}p9})X,wlN }}A3&q*󚤡Ԇ^rY6at‘o\CRҥM:!t)i0 N-YM "=H ҾJRhW <FZ#|œU繡߶*>)W䳴鵱zs3ycF)07X~$7A[==o.6~54VHHE0vB\^aV#k,(XeXV<ɤxjCRy@_ ( w4֪Q#Q ݶ[ok#7G@Y lge&%dӝvV^"?2ߋg Ϭ۲?2τңw ,ir E4P ðdyTɤ0Іki^VpU˖ ˔|a-i(}{Ղd,QdȱW^#szAxx {(a֗G1 ,^+ ?SRBpVe4@W3ĦBtmRP~5 WYbMہ܏s]ԭMe6[Mhv܌5~2bn+n^zH:[5_?*ܗuߗ3J5[])6;pCqVuX"E2AI[6liLFchPTqmȥй>Nr"tW0ƼMJ#v'3)jq-$}$JtV.@gT7-g3AV#o#Q R7V@ E ^)B([ӻsʻ%߬8 k_beQ_aUM L6V X?{t; L#Ku&Sns~1~("7;ס\#C7ݩ61~x!iZI{dY:PbK í F|7'6xd,B! {q uZj7)|.ټ馄Z0^& >>a=s@e> \((@MO|d`~(x{w] >EeMIC_`R@(\+yJzKW?˵`651CcM%r<LwO(GP qp{̄ڵ{~wlԦkzޮY!A 870,!OiAE010CFliߗ)^@|GM9~onez)|g2be _mi*"(:ĉ3&xNȶ}'|d ׮cGheC4m3dbaٳ]d!:$~RHS1h}Q9_73G?=/z}^ݎݬ1/X~0}kE_g9D;M+JE9!MI KGqq h}Xj.R/;_G=b̡>lLΆqslQ1鳜R݀'̶8LHk3 ] T= iItTQO~j42@+;_MޫDHm]Sna֭vƊXfpyHuPN.7d>KV˗ 91 dȇY4yyk0ovi20WfL=K'r Ao+=TyoQ4<hf@Iyu>opzćW.Up,Pv%=ڸnJ67=vM:yYK_ \1aM{֯3qǿQIezQf3Y=tUmlc?Fvp+WVCD7סgHԖ N2쐖4qc_S'*:OOw PHwk2aACIŇJ@jzbqŏ _=eO) La2OdeYDVK].kgûAqΒCj\' u1[OA ˓E;XЙǬk Բ i{ D~DE/qzDF|eS*Ekݗ ^s25qF1V~m[/U48dW:Ȧ.鷌5r [F*0Fq߻XlIFb%fK&F6,E=h@O][qiMy7UAwq{zXBOHiƋw6Jj+N_4<>Ƿd+Ƶ3'm Y5RNjˠ:Ke^wsٽ.E%Q6!HE1 RVS W[@Oy&x8/un(s-|R۠:TZ јO06A#2!(_} 46WBVJax Vcu0>CN6/!Zo<dA#Aش R4/JOHHѥ2vǰCNb޼D$e% |_ff|*) xl(;KG[r^')t] ^"3~iń-ك*qDiVO!>5?9|y­NGv7 < V(<ݻL=Ö,[?io܋~ר&#V/)H䍤zisQ{T?'DDH݃[D{Z wU8AxRv^xnR<ϨZf@diPe-D+ LW\oҧ=޶ 2@8n *_KWy.ҽmǢqϦ4 1yfj`?̿/!{%wv&p,)v3nm3'dрb=bE<3&S0qFLT[wq7Ux7.!EtS1ɇ~0MeLkTpseһ]ϳ: ɝo<.vQ4ǧ "pQfBBgE/&)l8R\ib%iᢧw%.VE,Ū z٫3\LG?=vIrLoe+(fU|At$}l#1JO1E÷%cW>SӦ*S蚰y8bseRɂeVK*bM gnztv0s >RQ #uAx6{#ٌt"꒯'LӑH 2| w(6&g؛p"ܽr޳uZysL3f}ഞVe{WrNOƪ_ѻ_ټgkFr\#4\&rI˕ Bۻ8)LN(d252[P;PXR6E01(_ACeݰcӤ5ᅍMDOLZ <:9}l崠c {_6onyw 6V\G2Ɔr;L_Od,ʊhyhdL^Em`Vnr.0-i.R` 8+#.Ւh3A 6e>-ebk6-xDBtxxn!ݷ['sHAeGRtʒKszzwyG[MutU5闶ܳ[8sږ4#v8ZǐUcIShZt bȗ2.7,/_#M cm4.&4h>[$q=E:ff+Rm%NRF: Osϲ^ΕwQc/"Fqt6 ac|uzCw}_l5bW_ӆWǷF3v9$ׯċƸb)+I-VMp[58,|83,PK(֕z#^B1Ø=oOu|wvh0ʝ\\52k&хό˶VcZޕUA <l@+9[\-g ;{Jd7%(h[>$BJuʷcTMZTg(,&*H-ϥ:ը5Sժ+ֲrDMӈ$D>߳{4wOh'CY`XCO3sfNj*}!Κ_۟|o[+lђ#N7'CHҾyoݣmgNL?^ nR5i⥋#q Oօ~NoRU)Aφr*Sr߲NܘZ_9. 24r (zrt\u!5eʆ Bs:g|Ndz>Iv\z,vϮI']:,jưE`(eu,P``5nJ* 2Y ب.[kǒڍҹ-m[f4d5˺Bj5ͷھ4 `BkX,Z 25U(L(`[5 .,0%tJ Jad2E%$S6ձIQD& 0qIIs^UvWզA ,v:Ŕ$C`}e8 /y=LG[gf:\|:ss?}\oz(zZ_-1DwF1F$L O)-9/T<~ MCAb2U&''9fdqg@ʩ{-]w7爿w?h5ʚFB܌'L \u1Y);#T~0,;Xz k[}eA_jgK474@7\(yoLnJ?EnxF?y/!4{]?`;D{Xb0"_1B TdU4\b^g3S]Բ.PUN\l\!|0`HW\ȁf3~glMYJPaiz'8w9p>C!A[: U;E$36?,E]sbM:*銻ߣۚFW^;·+ jVW$\ܗ2rTZDؖunT_A}޼l8.ߢ$9u@2LΈJvB>e="uaѢO%)v^svXD:maa,I9z-LB$T SW_tUXc9iG 9+M̸UXY]i'-1vFm%TsNc;JwE%yE~\}M0͖8.V, *$3hZe9*Ey!8S%jފ:AJ[fz,kNPg6㝔^e8V,ƞ>fOB4 ZZQޟ=x> kr&^qĸ0,*4a׾ɟx3Ӕ jOY@WݰaySLopES!:K`h&0aW` 7o!Q'{{[Bn޲q7;֔ܐr:F/쵹"@D#IyQ I,?jg+!}sEˀjBYu e\m."&˚TB6- ylGdbvlgOp֍Q`3jQ0d9/ChpnuG2XJQ(O+!|uP`W eƆ}+KgYk̛~`` O-)KϹFA%r6PN{ָUiy0أۿO\t&ϛJ"k98zxY^l`M$ s/B*bͻ6H@K$,ԢͣIzUX+'ExJ [s&Jg&.]c/+p&uc'DžE xZ)NS*u$H @H",$za+ &BFtBr-2a6p@@'D;MXQ'RJ)6D uay8 ,j]$,lL  $LU9 ɬ/lN `ėGER4þ&(d`[L؇+s#*QGof@g°$F:gl6$Q9D" dXo49u TN]b 1?|j+#/ :EͩVʴd05[i.D|)U]4y3hJ`dz;ݗ 'N6PKىB.G 6yvynajFj퍿1e0^0cqlz5C:(֖8Zy]%Ղdinyg3^Ghyc5'K-[ M;ץ:._]CZiSWh3jĪyA˕و?РB]ʩ׵ [$a|h^%V4# ܼ5fJ^9q)_j.a- 1f˩(W1o{>^6Nqc_Q-d+3y/ʿy h2[jynH?i!&HCJd :[z+u.p<3-Z`d[<7OՑޗ3 ;j7 oDekP bдjq]]n[Ӿi/!;Ϋ>SAjkXF%:G= }-c{s7[֞[]~7޾A qB@ &yJsON EU+TW@8P|pu <_ֱd|F|D Ln&?3BP^H7-h֯ q`ߟn9gxZ|5T9o)*FuyoDQfŢqizޞSgH uMsRXp_n'}V:Ҷd:HCܴՃ8޺Vߨ?'ﮐV9^4{?//M wTt ei*vY]<.谹ߚ&nБp_ɷI /n56\_}:<1*+y;]]xrX=pjv9eq9n<i(V@x( #Fƨɤ <"qe^]m"FBZ{];F&&€P#Kbp/ F&Vrh9~Lȯ"o^7^dA{mF4V$ =O{;;wrO_^l@+X*0W{խ! bPe,#{fa|axH@"*&wPQ0A sϺnp@ݥo^]K"ȜѱW.E$:QG Bp|Z.Qi D>y&f*7(^aaG'J{Ž_K aw7 jVzlxnz +q};OvEa^ )xp 5m҃/DVMBO\ Lz: .?::4ֽm/WO{LanRuijhV% wJ/yP]Σ:Q@e8vS sRs(H +ڲ HqY@9af*^4p ;S2ǡJaB*Nsj~+s1ٲ~r[[]R(D6Iz~m." 0>$iă6oŢ~ai{93V&n dBed" chB:9 oR[4uHe۽Vx7Xl]G{!ǰM9k=<}V[zm؃DHF'ۚ4deOߠ]#mgmm@3I>jA⇭:CK:Uo*VNR$=<4֖v']M5GV"eo,P]~z;1"ETBCL-& h YK=P>A<@{^V;YznxI+ HkL͝0+_9 .{2XT%5 q\Par%ETР#y %i n):H@/ Iؽoyl/1Yأxku?CkaW\r4+!Xvu&>FGzpQAz,XfGw٨C }//SZ16]]n~\߈se 7JCi k~]Ŧ3kc\-OY #̷zK)gOڴtc;T[h^7ʓ~c8/Nv<:.>Vx;W74DR|ބV7X73"yy81T1.;4ncݟ5懈yiuFQN:Z-Ńt1L [AxڹIHɉ =iȫ7UŽ9T‘\:\z t%Q4TV'[Bœ[7rKR,XywxuhCh7A`{vPXJ$\[ i`tS١.&NqYj9`e%e%=y 0E*2R\m徏Y>7W/goT6mXM=A%-dɕQW__gzN/'{A[jշ;(@8LVWa%Ihh 4'ױs ~nٍ?/[RB=l 0'{U>YͥO^W򘦍К,|贠 I M# (e5mV`Q@jQkQQci&Ih0%13"H(1aF0J-C(mTj#XڭBVCaޞvˆ.QK]V:€h{amB&׾Is~{]{ Iض.|J?J4¿]s3e0a x2(?1(fŜ1H3blC!~}QP`ID͆D""pD#;bQ[V׮>S+uIx*(MO *,d[h_W.N1eЌ-wDq [C<6o"I1z#X? A%QXǐ֕rNfPKuU ZIf%+(tCis!fl?Oe7`bkwTXXz:a}$!L Ja''I)=dt^pͻXDi4|*)TC!>K*KZ%r~2|1_LoەrP5L-0Z}M8d[{q»IeaA8/M(=eR]3Ih! 7Ni=Dϒl}scYJ}q9ZpkMfI,t UkY5}/5_Uw뻌܉gkko[SP/" ,eVR| ,-hVWlI9}4ZK#1vIk4 ^#2JV _s+nx)Ћ]|ew@|lǷkN&Xٻo[ċ޽j_pi7r[+oyN0noqv[\>>JZ, U]L.go!K=Zu#csJY/COiqe83AYg&.[nv>t\j/6g^T\{χ{X.+JSR ;-U1x+$C FzfY> s)zG.ZHd8N']fX+4kzYC g(vO+;zWՅ3lFM'z맖7|<O{;CUAOADtOwBV[q6E>o j5A| d'Dw^i+♗Ceta ]Dg[xB3RH\*-Fizu4PWkbuhk1| y7һ )J-mw%C[TSzt! A_-JƊ*hih3KC|bE eLŴ4h^ȩ+1^AN:Bzĺ+wBd?B'#g3IC9] QB-S$9]@fmq(h/lg*'t)!٣,g0~0-O Fo.9ݍ#.~SLĵlIJQr9/2#޽09ҕXi9 \qL(U j*FYO9k=LaTWISik꽄yK8ڠPh%wj{c/Aσ灳dSs`0#:iTs gyhC3Sr#^ۙȲՒ?դ ԋTeTV,]-f$6d̬bE1_fGR\޵\ z݌Pz7tF&Ծn /e>yV=:$1/hPhȲ1!Rd_HϓBvp $1? Oee-\m. bI֭/JN>åH i=)ϵX~dܙ ! 1w ȗd"繢E sdžnwKMAFe@^1-GNTNs8Qg=Km2ap=Ȉb[%;wO=__==3o[1'wM.&_CL- )py.jExhF4QY+#Mym 쵁Kp7#{MIH7 . nu7r3I~}>՜L38IM0װw \sWio~VI9V.]غ )r3?ZPP; /W5F--pL:jRUՒxT v$Khg`vMtM[n F]QD2U# X8(VC!LCnW>So̱c\PHx1͂J&ӭA 6NmւR?D ,1>j-:Qw)f_ V|Q<_ 9#Ai7eӊy}Ae&t@F L6! A]u,BS#)'оٓcI&^{$hrxy!k/I̸|BaJLϟxbEk5.ҝvF`?nECCNBk<ڗ4)-S% ϸd$u >ch@ v?MPW+IE-ݢofT{ɠYbgZ_ Wx4 9zTjGW~)X׶Y:|*-;&Gp^zl̩'X\S =Y=Bg]\wcxwt9az)W$0;&H ಀ#ªw^'U`]@"L?^qmd0ުimJRW6+sfOG <Ӳ]UWus{S`ϑOLDf&T#B:9\xy9vm{0w>Kw7&P פ҅T+HṎ^{5;JcJ{xjͪ_KqNze *3<9a3xDqi/DoWBvsVm$W [L9 IZ`&JhA;*%`Ǜd- 1ofhY:Q%0Lho l$\ bֲ\Ԭי.v7CCK-!E #۶T (*f& }|њ͠XJN ֻl_Zay@6SUWiIwOlbd?h3>!KcEpY☦UBw:L:[frWP:: OPhD ayW5`E G - u7TYPY[L[XwՇ#5 c:m^Q\t ޭzl\ q(cf9;g9ԨW L "5[b[v Z:SPetMFAJ|xaM;1\~%z2C*`$-$5W"%NRۈ/#V1ݫRW{GB-֓8#BdHwIt)w .I7LrJ=|1*W/C^["Y?V(Z{2iYCXOw8ĿLEgGh5dGA> IUW`1U>,G by\5?[##{:lHdꐫ` &{˙'ɒ7`n4X6, N" |[;i>;gmw7 پLb)&bhi:'DRFMXjFjA>~r/@և:]efTŋkxd6bdHm(V82#T>D"CHVԫݖCdlARmvo7Y</6K#gr9#KFQ(7_2[xE+Bŧ9zbs맟lkҵjPi\F*NQ)sNH?+#pCЌLvAID|~1`FFA{3pE?h`*Y6zI.#ں n/!IVLE)L`!C1@Sm%?]"Z锥Wֹ$>}L{6" ^LM06W;!B OB5,ÌvP/*jc57Lm+޼xtr)%N¶zQp!_fzT([W,*9T?|.+eL8)QW>Eh_Xw\ND.>=>ɋU? ~ޚt8gRؘ79;/8A-jςɌJ> DS5w*6Σ W锭ՕqbiŤ_3)HSAGڲ8 FHoZ#ad/K!=%i2M{[Y𚨐60JdJ#jPBP@+6zT'F=2iczgY#O%7j.D_ǘmJ[[sBBbr% [eYs;TDy6HO|VTɲxn<d 7rQ,x [YʮF19%h4~v1Q]WkׂUi0UFoG[7hqP c֎a.*,_rGU@l6Wֳܛ^FmGy&$DIQ"U6#$on/!\Om)qt.@LI$?TՏuǗEWLPa d1 cUzăiƒCˣTx`Z N>z SpD%=!wΖlp)lo,7 )߹|aNQdG-vG#Ͱ>uJo-S#8 1TQFI Rqh!ݥ0&c+6s].ݪLLm~:H!b{B4eHzLt VPz6mU;XQ gN?rC!쿉-FyNѢ ږ$"c/˶С8o>U*IʝaX1QHN/5&1rB ?*!:Թm̄0XXyώJX!Ҍ=/V,Ot>G|"{Ùdy-ء=.xW0L!J['acP!6CG |ʏOuMIE_[!OvnҺ:ut^`"<% ֳhgFr$ "!fC7S O̓*g i2'xpM1Rr!bvj9 =TW- Whg 0B>EmfP:c((4-!0o9W9T dQY͞Q@[p9D*6G;ګ5IEjt<{.aз{q^jp28.hB-3n :dt!W{>]lFwy`<'TD遞M')`4o _ڈ-8 goIȮFPh^\iTB՞UfCdC_c30oîf(W [6w~(mWiߟ6ZWM'? O Ėe[2(Y< ]`+_J;X9RʀOE -~ժ%(QFFeVC_WE(칖z7LנPhЛ.{shbIiLNs#^~JJ7e%ܡg3L1ع `dhJ!JWqn89 ,ƴpa| 񘰗{]QV#cq%y*lh:&/T 5Vm_r #)n3|x_tn}̠;г$ρ֯.뙒=xK=E)\H5fK B9JA?Ak HJ7h׆g]v}ƗIV Y7pJ(brH@B6|nje)bC6 TT G uy8 tEX# Y,p;ykdUrn /Qwbbڤrh$1Lۧ:gv,ww ZG ,k ANץ`׸XF3 w*Ot݉JHV3w<(MԈى^uB[!TBf=. 'YM%RTD<>C{ao vKætlV>"V >x) @ +_nR"Ef:º) D7Ɲ_`JXV 4|!0,FGc3&֩<'uz `T߻MRy?gaϫo?47zeŃ^w%A~ipN^#g5#c\ߘX ]~oc@kͻ;rhtG^:cShT]i> ҰQ@DzL bC֬y@ BEq6ъyI d\9Y,aΟ Q\*F1s͜\-!MUG($ "|;q&˲̱k(9C#J'=/y" >+d;`aE=[:p"?3AY3߉9=7[k\6 {5ssRץ-);9w h(H:UO~*lzdyy3}i ,'~5 q[r"kE{eܢ,Vy5ed;(=MϺ)|@ G3m?ƞِĜ4N_jw\vl,Cj2' db򡪺q hۘ##eSPaWv|gU%c`YatF2^N%ο?J %fm^f!gT؞V*ڄ777Ϸ3qSf.3\MiԳ7qϸ_-R IȠPMLj۰yxUn*rg"$E3#{i h({VЍl~zjh H"Ex Qp5ʐD{9AW諰ԲgȼjʹlWWvN&%DzK냛V V !vc D/9CJէ_@eHThP`X*f'nT&DK«M^@omT Dp2$AQ]~ـv2ln[f~2yOFCo%d'Ė#̔ >2ɦbL=9Յ^1`h Se.w~*~m I*]kVCs0ev<'`qW QU5 KQ+k2foGش *- &緑'2btS\YW"L'0Գ /'^[.2L)cAڎ;@yh%s:5k4۔ۉ58G(>)&rOм3ג;c3>B__uاyp{;W@)er*g[kÓJrH3[)E|@8|Ҡm`pVXH7 7*gpgV/]6r|mVh8?^Z)]C"Hְz[XϾ'ANf&;KOX=j7l[OX1NUYH#pwL R`-#xbS{+^>akyB(6 &VHx@J$'K:nso]7\-eUu4+0OGљȁ{A nj܇e>yXmBMG]?uݹ@Q}K=IL#r|g%|Dgt$&5D:kwk", W̃FE)8/. p[/q<ծ5{AaI~;idȏCk)$1iZҷҖ",O!.+BrB8ʠ齭ֻAa¿V[b0# ^pq6[*rQ+`-=O^X2 _whژGw)Ll |g)lJY*YʖP }V!رɺ4͜BBdeřYoWz +ƤSg 2_eqWP4z5کW/cVix$4c2Aw~`'>aAV i-.J4Q&Dr>s˕*&XJ"8'29H h33}=MT-%?vU%|\aNnT1daeJ13ļ0z{h 0R²nGqbyubqrځqAB0 W6QWdKL -#@Udr(Q-˔ )WԤpyO{eI ?W刏zDfGSuGF?}fkiiFa!kVR4T5 +:͊б~^F,` 7]M)ն1v4:d3a9+`N5Y- u" !R#IC1$2y]͐B5pWFɢ]ߴa ⩇;8.4B74<s=cxC{,.bo4?V &Včpa-,ܧ+ :\a{ _v#^GĝIXz̡)n`}( ?حZm\*Lrٵ:Ċ |v{|Vӎ#_"V<<yE3S¦xR MlshW0Ϟ]tQ|3\ uPDk{7lws3w\fD?5ΫoS kO`ʇ{8HhaVvW5"ۈ^~f$}uW"DId%_q~OJ>y肜IjM5?ݪMriIZcuI܍h2G̕c}sFby&&kn:n9Ѷ u :he΀mv°.Q1zXI+=l ZOR!͕Nk]"GBZ¶lYP4^cuAm%Dy_ JIsԉRɃrO {:":-u{M%LTR=wq@{?;:JiewzCvE=5EaG&s4e2(ʦ5"b v{Fcek"}5u#\}#~żSS'`EqLM6"cBGӫmԾ8ئ.L\d*K1$H`ʾӧ"u~z"Jib_Sy:mRHpL{-iv*p1T˛ncrxn!!1o 0v2Ĭ& V+uK+D[ GM1ܓ"${$ዃ>s?hn-^c]Vd}!&W_ ӕ~cV,DDWSpL dOGU;J =;NrPq4dLs]P' C`}0_fJ<IjMQB}0M)jO_쫳7-Z-]\, u=LÅVp/Gd&ۅU#"{?tGu%%M|G;L*1Ng+*EN-maX ⛡|>PbkQֆӺ}cEJ7?`O8ȁ`E-KMcçy˪--_΋+Ew ?}XSKkζ_\2)_)S YZSŷs:s蒮x3RG] AQu,2eW Y}&Sa 9RjJJ5VB dN`v0E5&IZSJ=]vVL$I,\"JKK_6o\ZTEy> .+_+UeRųfDtLk/f 7w%["bk}|HimkRAeA5nh) Z+f1}՝L}GGЍUh2 }6,ix\u&ڒ N6F<%7(d(pnd`KDaO]7X*ʦ巃@Or&D1)Mku^&5o%5c`F$y #è'`u]tYh+/mje(ng^6Ƅڼ 㰫dh=ʎ,FEYbx*4HgKMuGHΘǍ|+`Uy0p l^6nJN6(tFBeFVJ`8d3F!%Gd6AOҵG lq{Yq-4`׹ϙuamq=Ja= Cd hlfioid S٤%'gA* ,L/w4E꾥fPwZOu7|{Yx@OAO/D\δy:Ȟ\p3òWЛ "|qgP#hLzxm\x{$]wcb|r`T"^#94igXEdٸPcz?*>-a}MˆmIe:n@O5A#+S6I8o8RhV KBgs_).|M#/e''# x[I@jd$1X*0`MZR`s% 5YvD>P.*2/9Yl*RxJ[5mPpx.l%bu4Ք;/& J#5ʹVS!{$Ϟs dVRh<3/]A=b%EfG{CIz'tֺ!Qpb2Ҟ(ԭ+T'[Y,PFX!1W޿oleVB; a4aYu7 WA] ) 'lT-g'bGRFSt4cw} wfm_%%n4d_,5qT2Wwj#RP.LSkTY l.ݙ-=>In#)Ci!;3|]"~dd颦vWpgcHQw%ވ/y Zj7h [ a[h͕ͻ"WJg_~Eґou1Up*98B/4yЅzjN}w\"} oL }q̞|[tpB Q'@gx4*o#򃻘OH36sQ(O~Y<ap9LviطmF=(@H2 ]L?Cx\ tw`>wZoZA)Ԥ]D9TG ;q!\[<w%[mֹH12A_cq$pV:fU޶_or>n[ 1H/t>nSS14JnǓZ8jBɍv= kzMf~ZylfA&Vh542%䆦Wkv6}Spz1":8Mb_ lIy߄fH8AwFnļx` y*/ pDHv ]uɔ2~JtjP@;,>߸ W( Fdg.Aw޲_Nϒ+4Pʐ,ʌ6)`]r6:vkC]|SXHy[AR%/󧀌+"w>fs;za$neN PjYZ:BZ{ юnYQ$B DWF)P_&MFk]p#k& uh'K%6< 7> X6ʌ{ye$d:V#Ty h:G`>?o?l񵺟εR.5g 6>і<8u@O=D'Ft6mIi^_YW3a׶h:mF뤗IQ)u@sgVQCYN5"Ź~FpBM[wHr͜< EW):5ٌ̜r,`v[ 80+jM>^TTJO]2BFOAkEs{ {@Ɣٻ&QL_[y[PkBwqh?9Vc@p-ˍ!bn_A[p'^Z.r†դ?'w QuHmE, >]m\9~&kF(A,.+]S) c0I՘X\ʛ. ՛rB</[|wո(bVƑ.֣d!LÖI/lHhfM?=@a軼 PU$( [y"3 )c9\$z%4}cam()ᔓVbbc)4,*Y6DF K D$p-^5bW- Ա lę;*^)~!̯KX|&4(]1Ό3Oi) I7Q3 VG~-W?r6cܸ0zBwUy#rR*gb8SYǓ%,cK:k L#@ =yg.aNXpvmDG-QI.܃cP]tF_=ʟwv%.67[`g3NgCT|^`=Q#bA]2.$9HjCwF g7))iU h'u-vq! "rWFq7Dly$øG^塅\J6}4>2s4&.~KgZ}Dwۚ_xv--\݂ɪ7D&ܓ)/E{< cqz+z:Wa[xHz 0!|`'&f $ua\6Ռӧh@Q~ Va;OApz+4V; x \|څϻ+]V3D(=D9bk-Utu{!uL.xU+Ã'>ԙC'@9X/q:HnZXFCk^@A~b4$1'31ܓ[Խ~HX~e9ű6Fš 8ċ;C+}o΁@.~>U4V*qzQ..EL r( sд`o$.sY={6џwoڳS$ ##,+=h1.R4 GXC^|Bеm VhD'qW!d6q)k{}] A@3j$엌W'"URH12K:ųTcxU@T~(B'Pu?ku67㫼1N8?(މv}BtXf%&^?;U8bq@T^BhηjDp9ݰGoj{16,wGX Cލ'J=Fkͱ1!抴!LsD,v[|KUELq{:7}il\ΦWt{h*"&[@/#L!Ӹ-Ǥ ?WNtl^c2*_`M炑߷,](w)ҀVIJ{sQQ5|Cαc.Xَvy:Jc'$|jһVmY~ 0BV`j:J$EPQ#S=Dڅ(YcPso{Eq}M&}smJB:s|qP}&HNż@j#].L{t0]9w9!療 3$LhKf-17_P=\L.5VIq]V5ۍr(RFo%5Fe=ѤEP^`8X !džCQoS{p8L#n&la^piQk6>IOl喂zCl06n':HH:~(lgC2\ʉ»\ܠʦ\X߽s[L٫"ԷNga<Ĝds\59v^Eq OuV\]As)4^298Vլ>}^v(PLEJjZud 3C2bB~!T4uT!o\<B:ɸ {qt߻}\e~Lujf^m SqI<ƴeaV%%IX"ʱ@){lV0{m8" uw dQ1Z͇W7 G4@ci Nկ{*fPͽp{덤p.u|$#OhBcjKF_ .;{̘fI_m$͢Ř~Ŀm։ 2W}԰ k7yYfQc 퍕gWG{# vf~UbJm&mE<4$<6V^2J ޫ52O09U{T?/9x护z{y0t8q5oH Ť{EcYzd䃫N+W=yb\0X/4i$<ډ谷4h&R8g%:;+ق$#پeP/} #JgX XxM?-=ϕk \r0sliFk]%zyqk^M&8)fӐ"u(֋!=5Rpel;'6|YyMguNI9YC~/Im}>"3I1w訋; @<Ã$mi$^6=/Gzc7_Qp> Cf(m?lPB2(A"e3ږo`& OiV8FR[0:j,U;R[}1(;6Z?bI7H\׌i6$Hmd9-tiyT,A,,-OS6_Gf8 fz5+{ځm' W+W`:v͓Jb'6o%P\1wj2~Z.8eQ<0 -C d11V̪a~r li9{}g,eَ|^SІQL"lJ8wmWs2t=T)1ɩ&6Ҩb8)[3 k'u .%.KeW] '0!>kD!!~9*@ޜA>HtRyb3 .=*0xiibW̭ QK8=.G}ݺYjQW2|vsFP>?lN(5 _;Kp&Rj28hX|Z l-u7&_8:˄%q )s? YZ