samba-client-libs-4.19.8+git.399.71536ca297e-150600.3.9.6<>, (g,$p9|O?]>yp;on:);[ʷB nH:/ࡣL3Sd8+ۥx_3,^@ߢH@C*8n0FCS<>3* HA^3̢7뉏p;*Ϻ'a뿥CMR-uã՜CiёޭR|S8KE(]{O7ɟ?+i`;D[QVrX]5@s\^PfR>C?d/ < S 9PV`v8v $v v v v !v#v&v(l(v*|`Xdpp(8#9$#:#>J@JBJFKGLvHMvIOvXP0YT<ZWd[W\Zv][v^f+bf_cgdgegfglgugvvidwpvxHvy zӔӤӨӮCsamba-client-libs4.19.8+git.399.71536ca297e150600.3.9.6Samba client librariesThe samba-libs package contains the libraries needed by samba client programs.g,$h04-armsrv1y SUSE Linux Enterprise 15SUSE LLC GPL-3.0-or-laterhttps://www.suse.com/Development/Libraries/C and C++https://www.samba.org/linuxaarch64 :yx  P 0 H px #`0 !` h `Ag,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,g,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-binding.so.0.0.1libdcerpc-server-core.so.0.0.1libdcerpc.so.0.0.1libndr-krb5pac.so.0.0.1libndr-nbt.so.0.0.1libndr-standard.so.0.0.1libndr.so.3.0.1libnetapi.so.1.0.0libsamba-credentials.so.1.0.0libsamba-errors.so.1.0.0libsamba-hostconfig.so.0.0.1libsamba-passdb.so.0.28.0libsamba-util.so.0.0.1libsamdb.so.0.0.1libsmbclient.so.0.7.0libsmbconf.so.0.0.1libsmbldap.so.2.1.0libtevent-util.so.0.0.1libwbclient.so.0.16rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootsamba-4.19.8+git.399.71536ca297e-150600.3.9.6.src.rpmlibCHARSET3-samba4.so()(64bit)libCHARSET3-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libMESSAGING-SEND-samba4.so()(64bit)libMESSAGING-SEND-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libMESSAGING-samba4.so()(64bit)libMESSAGING-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libaddns-samba4.so()(64bit)libaddns-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libads-samba4.so()(64bit)libads-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libasn1util-samba4.so()(64bit)libasn1util-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libauth-samba4.so()(64bit)libauth-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libauthkrb5-samba4.so()(64bit)libauthkrb5-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libcli-cldap-samba4.so()(64bit)libcli-cldap-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libcli-ldap-common-samba4.so()(64bit)libcli-ldap-common-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libcli-ldap-samba4.so()(64bit)libcli-ldap-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libcli-nbt-samba4.so()(64bit)libcli-nbt-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libcli-smb-common-samba4.so()(64bit)libcli-smb-common-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libcli-spoolss-samba4.so()(64bit)libcli-spoolss-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libcliauth-samba4.so()(64bit)libcliauth-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libclidns-samba4.so()(64bit)libclidns-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libcluster-samba4.so()(64bit)libcluster-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libcmdline-contexts-samba4.so()(64bit)libcmdline-contexts-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libcmdline-samba4.so()(64bit)libcmdline-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libcommon-auth-samba4.so()(64bit)libcommon-auth-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libdbwrap-samba4.so()(64bit)libdbwrap-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libdcerpc-binding.so.0()(64bit)libdcerpc-binding.so.0(DCERPC_BINDING_0.0.1)(64bit)libdcerpc-binding0libdcerpc-pkt-auth-samba4.so()(64bit)libdcerpc-pkt-auth-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libdcerpc-samba-samba4.so()(64bit)libdcerpc-samba-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libdcerpc-samba4.so()(64bit)libdcerpc-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libdcerpc-server-core.so.0()(64bit)libdcerpc-server-core.so.0(DCERPC_SERVER_CORE_0.0.1)(64bit)libdcerpc.so.0()(64bit)libdcerpc.so.0(DCERPC_0.0.1)(64bit)libdcerpc0libevents-samba4.so()(64bit)libevents-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libflag-mapping-samba4.so()(64bit)libflag-mapping-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libgenrand-samba4.so()(64bit)libgenrand-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libgensec-samba4.so()(64bit)libgensec-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libgpo-samba4.so()(64bit)libgpo-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libgse-samba4.so()(64bit)libgse-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libhttp-samba4.so()(64bit)libhttp-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libinterfaces-samba4.so()(64bit)libinterfaces-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libiov-buf-samba4.so()(64bit)libiov-buf-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libkrb5samba-samba4.so()(64bit)libkrb5samba-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libldbsamba-samba4.so()(64bit)libldbsamba-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)liblibcli-lsa3-samba4.so()(64bit)liblibcli-lsa3-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)liblibcli-netlogon3-samba4.so()(64bit)liblibcli-netlogon3-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)liblibsmb-samba4.so()(64bit)liblibsmb-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libmessages-dgm-samba4.so()(64bit)libmessages-dgm-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libmessages-util-samba4.so()(64bit)libmessages-util-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libmscat-samba4.so()(64bit)libmscat-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libmsghdr-samba4.so()(64bit)libmsghdr-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libmsrpc3-samba4.so()(64bit)libmsrpc3-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libndr-krb5pac.so.0()(64bit)libndr-krb5pac.so.0(NDR_KRB5PAC_0.0.1)(64bit)libndr-krb5pac0libndr-nbt.so.0()(64bit)libndr-nbt.so.0(NDR_NBT_0.0.1)(64bit)libndr-nbt0libndr-samba-samba4.so()(64bit)libndr-samba-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libndr-samba4.so()(64bit)libndr-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libndr-standard.so.0()(64bit)libndr-standard.so.0(NDR_STANDARD_0.0.1)(64bit)libndr-standard0libndr.so.3()(64bit)libndr.so.3(NDR_0.0.1)(64bit)libndr.so.3(NDR_0.0.2)(64bit)libndr.so.3(NDR_0.0.3)(64bit)libndr.so.3(NDR_0.0.4)(64bit)libndr.so.3(NDR_0.0.5)(64bit)libndr.so.3(NDR_0.0.6)(64bit)libndr.so.3(NDR_0.0.7)(64bit)libndr.so.3(NDR_0.0.8)(64bit)libndr.so.3(NDR_0.0.9)(64bit)libndr.so.3(NDR_0.1.0)(64bit)libndr.so.3(NDR_0.1.1)(64bit)libndr.so.3(NDR_0.1.2)(64bit)libndr.so.3(NDR_0.2.0)(64bit)libndr.so.3(NDR_0.2.1)(64bit)libndr.so.3(NDR_1.0.0)(64bit)libndr.so.3(NDR_1.0.1)(64bit)libndr.so.3(NDR_1.0.2)(64bit)libndr.so.3(NDR_2.0.0)(64bit)libndr.so.3(NDR_3.0.0)(64bit)libndr.so.3(NDR_3.0.1)(64bit)libndr2libnet-keytab-samba4.so()(64bit)libnet-keytab-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libnetapi.so.1()(64bit)libnetapi.so.1(NETAPI_1.0.0)(64bit)libnetapi0libnetif-samba4.so()(64bit)libnetif-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libnpa-tstream-samba4.so()(64bit)libnpa-tstream-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libprinting-migrate-samba4.so()(64bit)libprinting-migrate-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libregistry-samba4.so()(64bit)libregistry-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libreplace-samba4.so()(64bit)libreplace-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsamba-cluster-support-samba4.so()(64bit)libsamba-cluster-support-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsamba-credentials.so.1()(64bit)libsamba-credentials.so.1(SAMBA_CREDENTIALS_1.0.0)(64bit)libsamba-credentials1libsamba-debug-samba4.so()(64bit)libsamba-debug-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsamba-errors.so.1()(64bit)libsamba-errors.so.1(SAMBA_ERRORS_1.0.0)(64bit)libsamba-errors0libsamba-hostconfig.so.0()(64bit)libsamba-hostconfig.so.0(SAMBA_HOSTCONFIG_0.0.1)(64bit)libsamba-hostconfig0libsamba-modules-samba4.so()(64bit)libsamba-modules-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsamba-passdb.so.0()(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.2.0)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.24.1)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.24.2)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.25.0)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.26.0)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.27.0)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.27.1)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.27.2)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.28.0)(64bit)libsamba-passdb0libsamba-security-samba4.so()(64bit)libsamba-security-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsamba-sockets-samba4.so()(64bit)libsamba-sockets-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsamba-util.so.0()(64bit)libsamba-util.so.0(SAMBA_UTIL_0.0.1)(64bit)libsamba-util0libsamba3-util-samba4.so()(64bit)libsamba3-util-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsamdb-common-samba4.so()(64bit)libsamdb-common-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsamdb.so.0()(64bit)libsamdb.so.0(SAMDB_0.0.1)(64bit)libsamdb0libsecrets3-samba4.so()(64bit)libsecrets3-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libserver-id-db-samba4.so()(64bit)libserver-id-db-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libserver-role-samba4.so()(64bit)libserver-role-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsmb-transport-samba4.so()(64bit)libsmb-transport-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsmbclient-raw-samba4.so()(64bit)libsmbclient-raw-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsmbclient.so.0()(64bit)libsmbclient.so.0(SMBCLIENT_0.1.0)(64bit)libsmbclient.so.0(SMBCLIENT_0.2.0)(64bit)libsmbclient.so.0(SMBCLIENT_0.2.1)(64bit)libsmbclient.so.0(SMBCLIENT_0.2.2)(64bit)libsmbclient.so.0(SMBCLIENT_0.2.3)(64bit)libsmbclient.so.0(SMBCLIENT_0.3.0)(64bit)libsmbclient.so.0(SMBCLIENT_0.3.1)(64bit)libsmbclient.so.0(SMBCLIENT_0.3.2)(64bit)libsmbclient.so.0(SMBCLIENT_0.3.3)(64bit)libsmbclient.so.0(SMBCLIENT_0.4.0)(64bit)libsmbclient.so.0(SMBCLIENT_0.5.0)(64bit)libsmbclient.so.0(SMBCLIENT_0.6.0)(64bit)libsmbclient.so.0(SMBCLIENT_0.7.0)(64bit)libsmbclient0libsmbconf.so.0()(64bit)libsmbconf.so.0(SMBCONF_0.0.1)(64bit)libsmbconf0libsmbd-base-samba4.so()(64bit)libsmbd-base-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsmbd-shim-samba4.so()(64bit)libsmbd-shim-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsmbldap.so.2()(64bit)libsmbldap.so.2(SMBLDAP_0)(64bit)libsmbldap.so.2(SMBLDAP_1)(64bit)libsmbldap.so.2(SMBLDAP_2)(64bit)libsmbldap.so.2(SMBLDAP_2.1.0)(64bit)libsmbldap2libsmbldaphelper-samba4.so()(64bit)libsmbldaphelper-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsocket-blocking-samba4.so()(64bit)libsocket-blocking-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libstable-sort-samba4.so()(64bit)libstable-sort-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsys-rw-samba4.so()(64bit)libsys-rw-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libtalloc-report-printf-samba4.so()(64bit)libtalloc-report-printf-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libtdb-wrap-samba4.so()(64bit)libtdb-wrap-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libtevent-util.so.0()(64bit)libtevent-util.so.0(TEVENT_UTIL_0.0.1)(64bit)libtevent-util0libtime-basic-samba4.so()(64bit)libtime-basic-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libtrusts-util-samba4.so()(64bit)libtrusts-util-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libutil-reg-samba4.so()(64bit)libutil-reg-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libutil-setid-samba4.so()(64bit)libutil-setid-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libutil-tdb-samba4.so()(64bit)libutil-tdb-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libwbclient.so.0()(64bit)libwbclient.so.0(WBCLIENT_0.10)(64bit)libwbclient.so.0(WBCLIENT_0.11)(64bit)libwbclient.so.0(WBCLIENT_0.12)(64bit)libwbclient.so.0(WBCLIENT_0.13)(64bit)libwbclient.so.0(WBCLIENT_0.14)(64bit)libwbclient.so.0(WBCLIENT_0.15)(64bit)libwbclient.so.0(WBCLIENT_0.16)(64bit)libwbclient.so.0(WBCLIENT_0.9)(64bit)libwbclient0samba-client-libssamba-client-libs(aarch-64)@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    /sbin/ldconfig/sbin/ldconfigld-linux-aarch64.so.1()(64bit)ld-linux-aarch64.so.1(GLIBC_2.17)(64bit)libCHARSET3-samba4.so()(64bit)libCHARSET3-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libMESSAGING-SEND-samba4.so()(64bit)libMESSAGING-SEND-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libMESSAGING-samba4.so()(64bit)libMESSAGING-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libacl.so.1()(64bit)libacl.so.1(ACL_1.0)(64bit)libaddns-samba4.so()(64bit)libaddns-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libads-samba4.so()(64bit)libads-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libasn1util-samba4.so()(64bit)libasn1util-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libauth-samba4.so()(64bit)libauth-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libauthkrb5-samba4.so()(64bit)libauthkrb5-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libavahi-client.so.3()(64bit)libavahi-common.so.3()(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libc.so.6(GLIBC_2.27)(64bit)libc.so.6(GLIBC_2.32)(64bit)libc.so.6(GLIBC_2.33)(64bit)libc.so.6(GLIBC_2.34)(64bit)libc.so.6(GLIBC_2.38)(64bit)libcli-cldap-samba4.so()(64bit)libcli-cldap-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libcli-ldap-common-samba4.so()(64bit)libcli-ldap-common-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libcli-ldap-samba4.so()(64bit)libcli-ldap-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libcli-nbt-samba4.so()(64bit)libcli-nbt-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libcli-smb-common-samba4.so()(64bit)libcli-smb-common-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libcli-spoolss-samba4.so()(64bit)libcli-spoolss-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libcliauth-samba4.so()(64bit)libcliauth-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libclidns-samba4.so()(64bit)libclidns-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libcluster-samba4.so()(64bit)libcluster-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libcom_err.so.2()(64bit)libcommon-auth-samba4.so()(64bit)libcommon-auth-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libdbwrap-samba4.so()(64bit)libdbwrap-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libdcerpc-binding.so.0()(64bit)libdcerpc-binding.so.0(DCERPC_BINDING_0.0.1)(64bit)libdcerpc-pkt-auth-samba4.so()(64bit)libdcerpc-pkt-auth-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libdcerpc-samba-samba4.so()(64bit)libdcerpc-samba-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libdcerpc.so.0()(64bit)libdcerpc.so.0(DCERPC_0.0.1)(64bit)libflag-mapping-samba4.so()(64bit)libflag-mapping-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libgenrand-samba4.so()(64bit)libgenrand-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libgensec-samba4.so()(64bit)libgensec-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libgnutls.so.30()(64bit)libgnutls.so.30(GNUTLS_3_4)(64bit)libgnutls.so.30(GNUTLS_3_6_10)(64bit)libgnutls.so.30(GNUTLS_3_6_13)(64bit)libgnutls.so.30(GNUTLS_3_6_3)(64bit)libgse-samba4.so()(64bit)libgse-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libgssapi_krb5.so.2()(64bit)libgssapi_krb5.so.2(gssapi_krb5_2_MIT)(64bit)libhttp-samba4.so()(64bit)libhttp-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libinterfaces-samba4.so()(64bit)libinterfaces-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libiov-buf-samba4.so()(64bit)libiov-buf-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libk5crypto.so.3()(64bit)libk5crypto.so.3(k5crypto_3_MIT)(64bit)libkrb5.so.3()(64bit)libkrb5.so.3(krb5_3_MIT)(64bit)libkrb5samba-samba4.so()(64bit)libkrb5samba-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)liblber-2.4.so.2()(64bit)libldap_r-2.4.so.2()(64bit)libldb.so.2()(64bit)libldb.so.2(LDB_0.9.10)(64bit)libldb.so.2(LDB_0.9.15)(64bit)libldb.so.2(LDB_0.9.16)(64bit)libldb.so.2(LDB_0.9.23)(64bit)libldb.so.2(LDB_1.1.1)(64bit)libldb.so.2(LDB_1.1.19)(64bit)libldb.so.2(LDB_1.1.30)(64bit)libldb.so.2(LDB_1.3.0)(64bit)libldb.so.2(LDB_2.6.1)(64bit)libldb.so.2(LDB_2.8.0)(64bit)libldbsamba-samba4.so()(64bit)libldbsamba-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)liblibcli-lsa3-samba4.so()(64bit)liblibcli-lsa3-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)liblibcli-netlogon3-samba4.so()(64bit)liblibcli-netlogon3-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)liblibsmb-samba4.so()(64bit)liblibsmb-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libmessages-dgm-samba4.so()(64bit)libmessages-dgm-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libmessages-util-samba4.so()(64bit)libmessages-util-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libmsghdr-samba4.so()(64bit)libmsghdr-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libmsrpc3-samba4.so()(64bit)libmsrpc3-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libndr-krb5pac.so.0()(64bit)libndr-krb5pac.so.0(NDR_KRB5PAC_0.0.1)(64bit)libndr-nbt.so.0()(64bit)libndr-nbt.so.0(NDR_NBT_0.0.1)(64bit)libndr-samba-samba4.so()(64bit)libndr-samba-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libndr-samba4.so()(64bit)libndr-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libndr-standard.so.0()(64bit)libndr-standard.so.0(NDR_STANDARD_0.0.1)(64bit)libndr.so.3()(64bit)libndr.so.3(NDR_0.0.1)(64bit)libndr.so.3(NDR_0.0.3)(64bit)libndr.so.3(NDR_0.0.4)(64bit)libndr.so.3(NDR_0.0.5)(64bit)libndr.so.3(NDR_0.0.6)(64bit)libndr.so.3(NDR_0.0.7)(64bit)libndr.so.3(NDR_0.0.8)(64bit)libndr.so.3(NDR_0.0.9)(64bit)libndr.so.3(NDR_0.1.1)(64bit)libndr.so.3(NDR_0.1.2)(64bit)libndr.so.3(NDR_0.2.0)(64bit)libndr.so.3(NDR_0.2.1)(64bit)libndr.so.3(NDR_1.0.0)(64bit)libndr.so.3(NDR_1.0.1)(64bit)libndr.so.3(NDR_1.0.2)(64bit)libndr.so.3(NDR_2.0.0)(64bit)libndr.so.3(NDR_3.0.1)(64bit)libnetif-samba4.so()(64bit)libnetif-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libnpa-tstream-samba4.so()(64bit)libnpa-tstream-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libnscd.so.1()(64bit)libnscd.so.1(LIBNSCD_1.0)(64bit)libpam.so.0()(64bit)libpam.so.0(LIBPAM_1.0)(64bit)libpopt.so.0()(64bit)libpopt.so.0(LIBPOPT_0)(64bit)libreplace-samba4.so()(64bit)libreplace-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsamba-cluster-support-samba4.so()(64bit)libsamba-cluster-support-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsamba-credentials.so.1()(64bit)libsamba-credentials.so.1(SAMBA_CREDENTIALS_1.0.0)(64bit)libsamba-debug-samba4.so()(64bit)libsamba-debug-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsamba-errors.so.1()(64bit)libsamba-errors.so.1(SAMBA_ERRORS_1.0.0)(64bit)libsamba-hostconfig.so.0()(64bit)libsamba-hostconfig.so.0(SAMBA_HOSTCONFIG_0.0.1)(64bit)libsamba-modules-samba4.so()(64bit)libsamba-modules-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsamba-passdb.so.0()(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.2.0)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.27.1)(64bit)libsamba-security-samba4.so()(64bit)libsamba-security-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsamba-sockets-samba4.so()(64bit)libsamba-sockets-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsamba-util.so.0()(64bit)libsamba-util.so.0(SAMBA_UTIL_0.0.1)(64bit)libsamba3-util-samba4.so()(64bit)libsamba3-util-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsamdb-common-samba4.so()(64bit)libsamdb-common-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsamdb.so.0()(64bit)libsamdb.so.0(SAMDB_0.0.1)(64bit)libsecrets3-samba4.so()(64bit)libsecrets3-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libserver-id-db-samba4.so()(64bit)libserver-id-db-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libserver-role-samba4.so()(64bit)libserver-role-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsmb-transport-samba4.so()(64bit)libsmb-transport-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsmbclient-raw-samba4.so()(64bit)libsmbclient-raw-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsmbconf.so.0()(64bit)libsmbconf.so.0(SMBCONF_0.0.1)(64bit)libsmbd-shim-samba4.so()(64bit)libsmbd-shim-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsmbldap.so.2()(64bit)libsmbldap.so.2(SMBLDAP_0)(64bit)libsmbldap.so.2(SMBLDAP_1)(64bit)libsmbldaphelper-samba4.so()(64bit)libsmbldaphelper-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsocket-blocking-samba4.so()(64bit)libsocket-blocking-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libstable-sort-samba4.so()(64bit)libstable-sort-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsys-rw-samba4.so()(64bit)libsys-rw-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsystemd.so.0()(64bit)libsystemd.so.0(LIBSYSTEMD_209)(64bit)libtalloc-report-printf-samba4.so()(64bit)libtalloc-report-printf-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libtalloc.so.2()(64bit)libtalloc.so.2(TALLOC_2.0.2)(64bit)libtalloc.so.2(TALLOC_2.1.0)(64bit)libtalloc.so.2(TALLOC_2.3.5)(64bit)libtasn1.so.6()(64bit)libtasn1.so.6(LIBTASN1_0_3)(64bit)libtdb-wrap-samba4.so()(64bit)libtdb-wrap-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libtdb.so.1()(64bit)libtdb.so.1(TDB_1.2.1)(64bit)libtdb.so.1(TDB_1.2.2)(64bit)libtdb.so.1(TDB_1.2.5)(64bit)libtdb.so.1(TDB_1.3.0)(64bit)libtdb.so.1(TDB_1.3.11)(64bit)libtdb.so.1(TDB_1.3.17)(64bit)libtevent-util.so.0()(64bit)libtevent-util.so.0(TEVENT_UTIL_0.0.1)(64bit)libtevent.so.0()(64bit)libtevent.so.0(TEVENT_0.11.0)(64bit)libtevent.so.0(TEVENT_0.12.0)(64bit)libtevent.so.0(TEVENT_0.13.0)(64bit)libtevent.so.0(TEVENT_0.15.0)(64bit)libtevent.so.0(TEVENT_0.9.12)(64bit)libtevent.so.0(TEVENT_0.9.13)(64bit)libtevent.so.0(TEVENT_0.9.16)(64bit)libtevent.so.0(TEVENT_0.9.20)(64bit)libtevent.so.0(TEVENT_0.9.30)(64bit)libtevent.so.0(TEVENT_0.9.31)(64bit)libtevent.so.0(TEVENT_0.9.37)(64bit)libtevent.so.0(TEVENT_0.9.9)(64bit)libtime-basic-samba4.so()(64bit)libtime-basic-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libtrusts-util-samba4.so()(64bit)libtrusts-util-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libutil-reg-samba4.so()(64bit)libutil-reg-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libutil-setid-samba4.so()(64bit)libutil-setid-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libutil-tdb-samba4.so()(64bit)libutil-tdb-samba4.so(SAMBA_4.19.9_GIT.399.71536CA297E150600.3.9.6SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libwbclient.so.0()(64bit)libwbclient.so.0(WBCLIENT_0.13)(64bit)libwbclient.so.0(WBCLIENT_0.9)(64bit)libz.so.1()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.3gMgp@fٝ@fxfteԔ@ee5@ede6`@e-%e'e%anopower@suse.comnopower@suse.comddiss@suse.comscabrero@suse.denopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comdmulder@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comscabrero@suse.descabrero@suse.descabrero@suse.denopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comscabrero@suse.dedmulder@suse.comscabrero@suse.denopower@suse.comnopower@suse.comscabrero@suse.denopower@suse.comnopower@suse.comscabrero@suse.denopower@suse.comscabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comddiss@suse.comnopower@suse.comdmulder@suse.comdmulder@suse.comnopower@suse.comscabrero@suse.descabrero@suse.dedimstar@opensuse.orgscabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comnopower@suse.comnopower@suse.comscabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comnopower@suse.comscabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.denopower@suse.comscabrero@suse.deddiss@suse.comddiss@suse.comddiss@suse.comscabrero@suse.descabrero@suse.dedmulder@suse.comnopower@suse.comscabrero@suse.descabrero@suse.dedmulder@suse.comscabrero@suse.descabrero@suse.denopower@suse.comnopower@suse.comnopower@suse.comdmulder@suse.comscabrero@suse.denopower@suse.comddiss@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comscabrero@suse.denopower@suse.comnopower@suse.comjmcdonough@suse.comnopower@suse.comscabrero@suse.denopower@suse.comnopower@suse.comddiss@suse.comddiss@suse.comnopower@suse.comnopower@suse.comddiss@suse.comnopower@suse.comdmulder@suse.comdmulder@suse.comddiss@suse.comscabrero@suse.dedmulder@suse.comddiss@suse.comnopower@suse.comjengelh@inai.dedmulder@suse.comscabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comdmulder@suse.comdmulder@suse.comjmcdonough@suse.comdmulder@suse.comscabrero@suse.dedmulder@suse.comscabrero@suse.dedmulder@suse.comdmulder@suse.comvcizek@suse.comdmulder@suse.comdmulder@suse.comnopower@suse.comscabrero@suse.dejmcdonough@suse.comscabrero@suse.deaaptel@suse.comjengelh@inai.dedimstar@opensuse.orgdmulder@suse.comjmcdonough@suse.comdavid.mulder@suse.comjmcdonough@suse.comaaptel@suse.comdmulder@suse.comscabrero@suse.comscabrero@suse.comkukuk@suse.dedavid.mulder@suse.comscabrero@suse.comrbrown@suse.comdmulder@suse.comscabrero@suse.comdimstar@opensuse.orgscabrero@suse.comaaptel@suse.comnopower@suse.comnopower@suse.comaaptel@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comddiss@suse.comnopower@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comdmulder@suse.comnopower@suse.comjmcdonough@suse.comaaptel@suse.comkukuk@suse.comkukuk@suse.denopower@suse.comaaptel@suse.comdmulder@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comddiss@suse.comjmcdonough@suse.comddiss@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comjmcdonough@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comtchvatal@suse.comlmuelle@suse.comnopower@suse.comcrrodriguez@opensuse.orglmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comnoel.power@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comnopower@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.commpluskal@suse.comlmuelle@suse.comnopower@suse.deddiss@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.denopower@suse.delmuelle@suse.comnopower@suse.deddiss@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.com- Update to 4.19.9 * libldb: performance issue with indexes (ldb 2.8.2 is already released); (bso#15590). * DH reconnect error handling can lead to stale sharemode entries; (bso#15624). * Incorrect FSCTL_QUERY_ALLOCATED_RANGES response when truncated; (bso#15699). * irpc_destructor may crash during shutdown; (bso#15280). * Compound SMB2 requests don't return NT_STATUS_NETWORK_SESSION_EXPIRED for all requests, confuses MacOSX clients; (bso#15696). * Crash when readlinkat fails; (bso#15700).- Adjust spec to split out rpcd_* binaries into a separate sub package; (bsc#1231414).- Incorrect FSCTL_QUERY_ALLOCATED_RANGES response when truncated; (bso#15699); (bsc#1229684). - Update to 4.19.8 * Invalid client warning about command line passwords; (bso#15671); * Version string is truncated in manpages; (bso#15672); * --version-* options are still not ergonomic, and they reject tilde characters; (bso#15673); * cmdline_burn does not always burn secrets; (bso#15674); * Samba doesn't parse SDDL found in defaultSecurityDescriptor in AD_DS_Classes_Windows_Server_v1903.ldf; (bso#15685); * We have added new options --vendor-name and --vendor-patch- revision arguments to ./configure to allow distributions and packagers to put their name in the Samba version string so that when debugging Samba the source of the binary is obvious; (bso#15654); * When claims enabled with heimdal kerberos, unable to log on to a Windows computer when user account need to change their own password; (bso#15655); * Fix clock skew error message and memory cache clock skew recovery; (bso#15676); * CTDB RADOS mutex helper misses namespace support; (bso#15665); * The images don't build after the git security release and CentOS 8 Stream is EOL; (bso#15660); * Fix unnecessary delays in CTDB while processing requests under high load; (bso#15678); * Dynamic DNS updates with the internal DNS are not working; (bso#13019); * s4:nbt_server: does not provide unexpected handling, so winbindd can't use nmb requests instead cldap; (bso#15620); * Panic in vfs_offload_token_db_fetch_fsp(); (bso#15664); * "client use kerberos" and --use-kerberos is ignored for the machine account; (bso#15666); * Regression DFS not working with widelinks = true; (bso#15435); * ntlm_auth make logs more consistent with length check; (bso#15677);- Fix a crash when joining offline and 'kerberos method' includes keytab; (bsc#1228732); - Fix reading the password from STDIN or environment vars if it was already given in the command line; (bsc#1228732);- Update to 4.19.7 * ldb qsort might r/w out of bounds with an intransitive compare function (ldb 2.8.1 is already released); (bso#15569). * Many qsort() comparison functions are non-transitive, which can lead to out-of-bounds access in some circumstances (ldb 2.8.1 is already released); (bso#15625). * Need to change gitlab-ci.yml tags in all branches to avoid CI bill; (bso#15638). * netr_LogonSamLogonEx returns NR_STATUS_ACCESS_DENIED with SysvolReady=0; (bso#14981). * Anonymous smb3 signing/encryption should be allowed (similar to Windows Server 2022); (bso#15412). * Panic in dreplsrv_op_pull_source_apply_changes_trigger; (bso#15573). * winbindd, net ads join and other things don't work on an ipv6 only host; (bso#15642). * Smbcacls incorrectly propagates inheritance with Inherit-Only flag; (bso#15636). * http library doesn't support 'chunked transfer encoding'; (bso#15611). - Update to 4.19.6 * fd_handle_destructor() panics within an smbd_smb2_close() if vfs_stat_fsp() fails in fd_close(); (bso#15527). * samba-gpupdate: Correctly implement site support; (bso#15588). * libgpo: Segfault in python bindings; (bso#15599). * Packet marshalling push support missing for CTDB_CONTROL_TCP_CLIENT_DISCONNECTED and CTDB_CONTROL_TCP_CLIENT_PASSED; (bso#15580).- Update to 4.19.5 * Windows 2016 fails to restore previous version of a file from a shadow_copy2 snapshot; (bso#13688). * Symlinks on AIX are broken in 4.19 (and a few version before that); (bso#15549). * Fake directory create times has no effect; (bso#12421). * ctime mixed up with mtime by smbd; (bso#15550). * samba-gpupdate --rsop fails if machine is not in a site; (bso#15548). * gpupdate: The root cert import when NDES is not available is broken; (bso#15557). * samba-gpupdate should print a useful message if cepces-submit can't be found; (bso#15552). * samba-gpupdate logging doesn't work; (bso#15558). * smbpasswd reset permissions only if not 0600; (bso#15555).- Remove -x from bash shebang update-apparmor-samba-profile; (bsc#1218431).- Update to 4.19.4 * net changesecretpw cannot set the machine account password if secrets.tdb is empty; (bso#13577). * For generating doc, take, if defined, env XML_CATALOG_FILES; (bso#15540). * Trivial C typo in nsswitch/winbind_nss_netbsd.c; (bso#15541). * vfs_linux_xfs is incorrectly named; (bso#15542). * systemd stumbled over copyright-message at smbd startup; (bso#15377). * Following intermediate abolute share-local symlinks is broken; (bso#15505). * ctdb RELEASE_IP causes a crash in release_ip if a connection to a non-public address disconnects first; (bso#15523). * shadow_copy2 broken when current fileset's directories are removed; (bso#15544). * smbd does not detect ctdb public ipv6 addresses for multichannel exclusion; (bso#15534). * 'force user = localunixuser' doesn't work if 'allow trusted domains = no' is set; (bso#15469). * smbget debug logging doesn't work; (bso#15525). * smget: username in the smburl and interactive password entry doesn't work; (bso#15532). * smbget auth function doesn't set values for password prompt correctly; (bso#15538). * Unable to copy and write files from clients to Ceph cluster via SMB Linux gateway with Ceph VFS module; (bso#15440). * Multichannel refresh network information; (bso#15547).- Update to 4.19.3 * sid_strings test broken by unix epoch > 1700000000; (bso#15520). * smbd crashes if asked to return full information on close of a stream handle with delete on close disposition set; (bso#15487). * smbd: fix close order of base_fsp and stream_fsp in smb_fname_fsp_destructor(); (bso#15521). * Improve logging for failover scenarios; (bso#15499). * Files without "read attributes" NFS4 ACL permission are not listed in directories; (bso#15093). * CVE-2018-14628 [SECURITY] Deleted Object tombstones visible in AD LDAP to normal users; (bso#13595). * Kerberos TGS-REQ with User2User does not work for normal accounts; (bso#15492). * vfs_gpfs stat calls fail due to file system permissions; (bso#15507). * Samba doesn't build with Python 3.12; (bso#15513).- packaging: samba-tool domain provision requires python3-Markdown; (bsc#1216519).- Update to 4.19.2 * Use-after-free in aio_del_req_from_fsp during smbd shutdown after failed IPC FSCTL_PIPE_TRANSCEIVE; (bso#15423). * clidfs.c do_connect() missing a "return" after a cli_shutdown() call; (bso#15426). * macOS mdfind returns only 50 results; (bso#15463). * GETREALFILENAME_CACHE can modify incoming new filename with previous cache entry value; (bso#15481). * libnss_winbind causes memory corruption since samba-4.18, impacts sendmail, zabbix, potentially more; (bso#15464). * ctdbd: setproctitle not initialized messages flooding logs; (bso#15479). * CVE-2023-5568 Heap buffer overflow with freshness tokens in the Heimdal KDC in Samba 4.19; (bso#15491). * The heimdal KDC doesn't detect s4u2self correctly when fast is in use; (bso#15477).- use systemd-logind rather than utmp for y2038 safety; (bsc#1216159).- CVE-2023-4091: samba: Client can truncate file with read-only permissions; (bsc#1215904); (bso#15439). - CVE-2023-42669: samba: rpcecho, enabled and running in AD DC, allows blocking sleep on request; (bso#1215905); (bso#15474). - CVE-2023-42670: samba: The procedure number is out of range when starting Active Directory Users and Computers; (bsc#1215906); (bso#15473). - CVE-2023-3961: samba: Unsanitized client pipe name passed to local_np_connect(); (bsc#1215907); (bso#15422). - CVE-2023-4154: samba: dirsync allows SYSTEM access with only "GUID_DRS_GET_CHANGES" right, not "GUID_DRS_GET_ALL_CHANGES; (bsc#1215908); (bso#15424).- Update to 4.19.0 * File doesn't show when user doesn't have permission if aio_pthread is loaded; (bso#15453). * ctdb_killtcp fails to work with --enable-pcap and libpcap ≥ 1.9.1; (bso#15451). * Logging to stdout/stderr with DEBUG_SYSLOG_FORMAT_ALWAYS can log to syslog; (bso#15460). * ‘samba-tool domain level raise’ fails unless given a URL; (bso#15458). * reply_sesssetup_and_X() can dereference uninitialized tmp pointer; (bso#15420). * missing return in reply_exit_done(); (bso#15430). * TREE_CONNECT without SETUP causes smbd to use uninitialized pointer; (bso#15432). * Avoid infinite loop in initial user sync with Azure AD Connect when synchronising a large Samba AD domain; (bso#15401). * Samba replication logs show (null) DN; (bso#15407). * 2-3min delays at reconnect with smb2_validate_sequence_number: bad message_id 2; (bso#15346). * DCERPC_PKT_CO_CANCEL and DCERPC_PKT_ORPHANED can't be parsed; (bso#15446). * CID 1539212 causes real issue when output contains only newlines; (bso#15438). * KDC encodes INT64 claims incorrectly; (bso#15452). * mdssvc: Do an early talloc_free() in _mdssvc_open(); (bso#15449). * Windows client join fails if a second container CN=System exists somewhere; (bso#9959). * regression DFS not working with widelinks = true; (bso#15435). * Heimdal fails to build on 32-bit FreeBSD; (bso#15443). * samba-tool ntacl get segfault if aio_pthread appended; (bso#15441). - Update to 4.18.6 * reply_sesssetup_and_X() can dereference uninitialized tmp pointer; (bso#15420); * Missing return in reply_exit_done(); (bso#15430); * post-exec password redaction for samba-tool is more reliable for fully random passwords as it no longer uses regular expressions containing the password value itself; (bso#15289); * Windows client join fails if a second container CN=System exists somewhere; (bso#9959); * Spotlight sometimes returns no results on latest macOS; (bso#15342); * Renaming results in NT_STATUS_SHARING_VIOLATION if previously attempted to remove the destination; (bso#15417); * Spotlight results return wrong date in result list; (bso#15427); * "net offlinejoin provision" does not work as non-root user; (bso#15414); * rpcserver no longer accepts double backslash in dfs pathname; (bso#15400); * cm_prepare_connection() calls close(fd) for the second time; (bso#15433); * 2-3min delays at reconnect with smb2_validate_sequence_number: bad message_id 2; (bso#15346); * samba-tool ntacl get segfault if aio_pthread appended; (bso#15441); * DCERPC_PKT_CO_CANCEL and DCERPC_PKT_ORPHANED can't be parsed; (bso#15446); * Python tarfile extraction needs change to avoid a warning (CVE-2007-4559 mitigation); (bso#15390); * Regression DFS not working with widelinks = true; (bso#15435); * mdssvc: Do an early talloc_free() in _mdssvc_open(); (bso#15449); - Update to 4.18.5 * CVE-2022-2127: lm_resp_len not checked properly in winbindd_pam_auth_crap_send; (bso#15072); (bsc#1213174). * CVE-2023-34966: Samba Spotlight mdssvc RPC Request Infinite Loop Denial-of-Service Vulnerability; (bso#15340); (bsc#1213173). * CVE-2023-34967: Samba Spotlight mdssvc RPC Request Type Confusion Denial-of-Service Vulnerability; (bso#15341); (bsc#1213172). * CVE-2023-34968: Spotlight server-side Share Path Disclosure; (bso#15388); (bsc#1213171). * CVE-2023-3347: Samba doesn't require SMB2+ signing if `server signing = mandatory` is set; (bso#15397); (bsc#1213170). * secure channel faulty since Windows 10/11 update 07/2023; (bso#15418); (bsc#1213384). - Update to 4.18.4 * Backport --pidl-developer fixes; (bso#15404). * Named crashes on DLZ zone update; (bso#14030). * smbcacls and smbcquotas do not check // before the server; (bso#2312). * cli_list loops 100% CPU against pre-lanman2 servers; (bso#15382). * smbclient leaks fds with showacls; (bso#15391). * smbd returns NOT_FOUND when creating files on a r/o filesystem; (bso#15402). * NSS_WRAPPER_HOSTNAME doesn't match NSS_WRAPPER_HOSTS entry and causes test timeouts; (bso#15355). * net ads lookup (with unspecified realm) fails; (bso#15384). * Register Samba processes with GPFS; (bso#15381). * Python tarfile extraction needs change to avoid a warning (CVE-2007-4559 mitigation); (bso#15390). * The winbind child segfaults when listing users with `winbind scan trusted domains = yes`; (bso#15398). * Remove comments about deprecated 'write cache size'; (bso#15383). * smbget memory leak if failed to download files recursively; (bso#15403). - Update to 4.18.3 * Symlinks to files can have random DOS mode information in a directory listing; (bso#15375). * vfs_fruit might cause a failing open for delete; (bso#15378). * winbind recurses into itself via rpcd_lsad; (bso#15361). * wbinfo -u fails on ad dc with >1000 users; (bso#15366). * DS ACEs might be inherited to unrelated object classes; (bso#15338). * a lot of messages: get_static_share_mode_data: get_static_share_mode_data_fn failed: NT_STATUS_NOT_FOUND; (bso#15362). * aes256 smb3 encryption algorithms are not allowed in smb3_sid_parse(); (bso#15374). * Setting veto files = /.*/ break listing directories; (bso#15360). * "samba-tool domain provision" does not run interactive mode if no arguments are given; (bso#15363). * dsgetdcname: assumes local system uses IPv4; (bso#15325). - Update to 4.18.2 * Log flood: smbd_calculate_access_mask_fsp: Access denied: message level should be lower; (bso#15302). * Floating point exception (FPE) via cli_pull_send at source3/libsmb/clireadwrite.c; (bso#15306). * test_tstream_more_tcp_user_timeout_spin fails intermittently on Rackspace GitLab runners; (bso#15328). * Reduce flapping of ridalloc test; (bso#15329). * large_ldap test is unreliable; (bso#15351). * New filename parser doesn't check veto files smb.conf parameter; (bso#15143). * mdssvc may crash when initializing; (bso#15354). * large directory optimization broken for non-lcomp path elements; (bso#15313). * streams_depot fails to create streams; (bso#15357). * shadow_copy2 and streams_depot don't play well together; (bso#15358). * Flapping tests in samba_tool_drs_show_repl.py; (bso#15316). * winbindd idmap child contacts the domain controller without a need; (bso#15317). * idmap_autorid may fail to map sids of trusted domains for the first time; (bso#15318). * idmap_hash doesn't use ID_TYPE_BOTH for reverse mappings; (bso#15319). * net ads search -P doesn't work against servers in other domains; (bso#15323). * Temporary smbXsrv_tcon_global.tdb can't be parsed; (bso#15353). * Tests use depricated and removed methods like assertRegexpMatches; (bso#15343). - Update to 4.18.1 * CVE-2023-0225: AD DC "dnsHostname" attribute can be deleted by unprivileged authenticated users. (bso#15276);(bsc#1209483). * CVE-2023-0614: Access controlled AD LDAP attributes can be discovered (bso#15270); (bsc#1209485). * CVE-2023-0922: Samba AD DC admin tool samba-tool sends passwords in cleartext(bso#15315);(bsc#1209481). * ldb wildcard matching makes excessive allocations; (bso#15331). * large_ldap test is inefficient; (bso#15332). - Update to 4.18.0 * SMB server performance improvements * More succinct samba-tool error messages * Color output with samba-tool --color The NO_COLOR environment variable will disable colour output * New samba-tool dsacl subcommand for deleting ACEs * New wbinfo option --change-secret-at * Net option to change the NT ACL default location * Azure AD / Office365 synchronization improvements- Fix DFS not working with widelinks enabled; (bsc#1213607); (bso#15435);- Move libcluster-samba4.so from samba-libs to samba-client-libs; (bsc#1213940);- net ads lookup with unspecified realm fails; (bso#15384); (bsc#1213826);- secure channel faulty since Windows 10/11 update 07/2023; (bso#15418); (bsc#1213384).- CVE-2022-2127: lm_resp_len not checked properly in winbindd_pam_auth_crap_send; (bso#15072); (bsc#1213174). - CVE-2023-34966: Samba Spotlight mdssvc RPC Request Infinite Loop Denial-of-Service Vulnerability; (bso#15340); (bsc#1213173). - CVE-2023-34967: Samba Spotlight mdssvc RPC Request Type Confusion Denial-of-Service Vulnerability; (bso#15341); (bsc#1213172). - CVE-2023-34968: Spotlight server-side Share Path Disclosure; (bso#15388); (bsc#1213171). - CVE-2023-3347: Samba doesn't require SMB2+ signing if `server signing = mandatory` is set; (bso#15397); (bsc#1213170).- Update to 4.17.9 * Backport --pidl-developer fixes; (bso#15404). * smbd_scavenger crashes when service smbd is stopped; (bso#15275). * vfs_fruit might cause a failing open for delete; (bso#15378). * named crashes on DLZ zone update; (bso#14030). * winbind recurses into itself via rpcd_lsad; (bso#15361). * cli_list loops 100% CPU against pre-lanman2 servers; (bso#15382). * smbclient leaks fds with showacls; (bso#15391). * aes256 smb3 encryption algorithms are not allowed in smb3_sid_parse(); (bso#15374). * winbindd gets stuck on NT_STATUS_RPC_SEC_PKG_ERROR; (bso#15413). * smbget memory leak if failed to download files recursively; (bso#15403).- Update to 4.17.8 * log flood: smbd_calculate_access_mask_fsp: Access denied: message level should be lower; (bso#15302). * Floating point exception (FPE) via cli_pull_send at source3/libsmb/clireadwrite.c; (bso#15306). * test_tstream_more_tcp_user_timeout_spin fails intermittently on Rackspace GitLab runners; (bso#15328). * Reduce flapping of ridalloc test; (bso#15329). * large_ldap test is unreliable; (bso#15351). * New filename parser doesn't check veto files smb.conf parameter; (bso#15143). * mdssvc may crash when initializing; (bso#15354). * Large directory optimization broken for non-lcomp path elements; (bso#15313). * streams_depot fails to create streams; (bso#15357). * shadow_copy2 and streams_depot don't play well together; (bso#15358). * wbinfo -u fails on ad dc with >1000 users; (bso#15366). * winbindd idmap child contacts the domain controller without a need; (bso#15317). * idmap_autorid may fail to map sids of trusted domains for the first time; (bso#15318). * idmap_hash doesn't use ID_TYPE_BOTH for reverse mappings; (bso#15319). * net ads search -P doesn't work against servers in other domains; (bso#15323). * DS ACEs might be inherited to unrelated object classes; (bso#15338). * Temporary smbXsrv_tcon_global.tdb can't be parsed; (bso#15353). * Setting veto files = /.*/ break listing directories; (bso#15360); (bsc#1212375). * CVE-2020-25720 [SECURITY] Create Child permission should not allow full write to all attributes (additional changes); (bso#14810). * dsgetdcname: assumes local system uses IPv4; (bso#15325).- Update to 4.17.7 * CVE-2023-0922: Samba AD DC admin tool samba-tool sends passwords in cleartext; (bso#15315); (bsc#1209481). * CVE-2023-0225: Samba AD DC "dnsHostname" attribute can be deleted by unprivileged authenticated users; (bso#15276); (bsc#1209483). * CVE-2023-0614: samba: Access controlled AD LDAP attributes can be discovered; (bso#15270); (bsc#1209485). * large_ldap test is inefficient; (bso#15332). * CVE-2020-25720 [SECURITY] Create Child permission should not allow full write to all attributes (additional changes); (bso#14810). - Update to 4.17.6 * streams_xattr is creating unexpected locks on folders; (bso#15314). * Use of the Azure AD Connect cloud sync tool is now supported for password hash synchronisation, allowing Samba AD Domains to synchronise passwords with this popular cloud environment; (bso#10635). * Spotlight doesn't work with latest macOS Ventura; (bso#15299). * New samba-dcerpc architecture does not scale gracefully; (bso#15310). * vfs_ceph incorrectly uses fsp_get_io_fd() instead of fsp_get_pathref_fd() in close and fstat; (bso#15307). * With clustering enabled samba-bgqd can core dump due to use after free; (bso#15293). * fd_load() function implicitly closes the fd where it should not; (bso#15311). - Update to 4.17.5 * smbc_getxattr() return value is incorrect; (bso#14808). * Compound SMB2 FLUSH+CLOSE requests from MacOSX are not handled correctly; (bso#15172). * synthetic_pathref AFP_AfpInfo failed errors; (bso#15210). * samba-tool gpo listall fails IPv6 only - finddcs() fails to find DC when there is only an AAAA record for the DC in DNS; (bso#15226). * smbd crashes if an FSCTL request is done on a stream handle; (bso#15236). * DFS links don't work anymore on Mac clients since 4.17; (bso#15277). * vfs_virusfilter segfault on access, directory edgecase (accessing NULL value); (bso#15283). * CVE-2022-38023 [SECURITY] Samba should refuse RC4 (aka md5) based SChannel on NETLOGON (additional changes); (bso#15240). * %U for include directive doesn't work for share listing (netshareenum); (bso#15243). * Shares missing from netshareenum response in samba 4.17.4; (bso#15266). * ctdb: use-after-free in run_proc; (bso#15269). * irpc_destructor may crash during shutdown; (bso#15280). * auth3_generate_session_info_pac leaks wbcAuthUserInfo; (bso#15286). * smbclient segfaults with use after free on an optimized build; (bso#15268). * smbstatus leaking files in msg.sock and msg.lock; (bso#15282). * Leak in wbcCtxPingDc2; (bso#15164). * Access based share enum does not work in Samba 4.16+; (bso#15265). * Crash during share enumeration; (bso#15267). * rep_listxattr on FreeBSD does not properly check for reads off end of returned buffer; (bso#15271). * Avoid relying on C89 features in a few places; (bso#15281).- Make (32bit) samba-libs conflict with old samba-ad-dc-libs package to satisfy installcheck.- Make samba-libs conflict with old samba-ad-dc-libs package to satisfy installcheck.- Remove non functioning ifup/ifdown samba-winbindd scripts; (bsc#1207414).- libdsdb-module-samba4 should be packaged as part of samba-libs and not samba-ad-dc-libs. Additionally no need for it to be removed conditionally.- Clean up logic for PAM migration settings in spec file.- Change with_dc default to 0 (for non TW builds), ADDC feature is deprecated and will no longer be included in >= SLE15-SP5; (jsc#PED-1122).- Update to 4.17.4 * CVE-2022-44640 Upstream Heimdal free of user-controlled pointer in FAST; (bsc#14929); * CVE-2021-20251 Bad password count not incremented atomically; (bsc#14611); * CVE-2022-42898 krb5_pac_parse() buffer parsing vulnerability; (bsc#15203); * CVE-2022-37966 rc4-hmac Kerberos session keys issued to modern servers; (bso#15237); * CVE-2022-37967 Kerberos constrained delegation ticket forgery possible against Samba AD DC; (bso#15231); * CVE-2022-38023 RC4/HMAC-MD5 NetLogon Secure Channel is weak and should be avoided; (bso#15240); * pam_winbind uses time_t and pointers assuming they are of the same size; (bso#15224); * Heimdal session key selection in AS-REQ examines wrong entry; (bso#15219); * filter-subunit is inefficient with large numbers of knownfails; (bso#15258); * smbd allows setting FILE_ATTRIBUTE_TEMPORARY on directories; (bso#15252); * The KDC logic arround msDs-supportedEncryptionTypes differs from Windows; (bso#13135); * libnet: change_password() doesn't work with dcerpc_samr_ChangePasswordUser4(); (bso#15206); * Heimdal session key selection in AS-REQ examines wrong entry; (bso#15219); * Memory leak in snprintf replacement functions; (bso#15230); * RODC doesn't reset badPwdCount reliable via an RWDC (CVE-2021-20251 regression); (bso#15253); * Prevent EBADF errors with vfs_glusterfs; (bso#15198); * %U for include directive doesn't work for share listing (netshareenum); (bso#15243); * Stack smashing in net offlinejoin requestodj; (bso#15257); * Windows 11 22H2 and Samba-AD 4.15 Kerberos login issue; (bso#15197); * Heimdal session key selection in AS-REQ examines wrong entry; (bso#15219); - Remove deprecated if-{down,up} scripts; (bsc#1206444); - Adjust the systemd drop-in file for named service; (bsc#1201689); * Paths are additive so do not repeat paths from named.service * Prefix the samba DLZ directory with "-" to ignore this path if it does not exists- Introduce without-smb1-server spec flag; (bsc#1205104); - Update to 4.17.3 * CVE-2022-42898: Samba buffer overflow vulnerabilities on 32-bit systems; (bsc#1205126); (bso#15203); - Replace obsolete python-gpgme with python-gpg * Upstream replaced it in v4.9.5 -- bso#13728 - Update to 4.17.2 * CVE-2022-3592 [SECURITY] samba: Wide links protection broken; (bso#15207); (bsc#1204499). * CVE-2022-3437 [SECURITY] samba: Buffer overflow in Heimdal unwrap_des3();(bso#15134); (bsc#1204254). - Update to 4.17.1 * CVE-2021-20251 [SECURITY] Bad password count not incremented atomically; (bso#14611). * smbXsrv_connection_shutdown_send result leaked; (bso#15174). * Flush on a named stream never completes; (bso#15182). * Permission denied calling SMBC_getatr when file not exists; (bso#15195). * Samba 4.5 sometimes cannot be upgraded to Samba 4.6 or later over DRS: WERROR_DS_DRA_MISSING_PARENT due to faulty GET_ANC; (bso#15189). * pytest: add file removal helpers for TestCaseInTempDir; (bso#15191). * CVE-2021-20251 [SECURITY] Bad password count not incremented atomically; (bso#14611). * Samba 4.5 sometimes cannot be upgraded to Samba 4.6 or later over DRS: WERROR_DS_DRA_MISSING_PARENT due to faulty GET_ANC; (bso#15189). * Flush on a named stream never completes; (bso#15182). * vfs_gpfs silently garbles timestamps > year 2106; (bso#15151). * CVE-2021-20251 [SECURITY] Bad password count not incremented atomically; (bso#14611). * multi-channel socket passing may hit a race if one of the involved processes already existed; (bso#15200). * memory leak on temporary of struct imessaging_post_state and struct tevent_immediate on struct imessaging_context (in rpcd_spoolss and maybe others); (bso#15201). * Since popt1.19 various use after free errors using result of poptGetArg are now exposed; (bso#15205); (boo#1204279). * Remove special case for O_CREAT in SMB_VFS_OPENAT from vfs_glusterfs; (bso#15192). * GETPWSID in memory cache grows indefinetly with each NTLM auth; (bso#15169). * CVE-2021-20251 [SECURITY] Bad password count not incremented atomically; (bso#14611). - Install a systemd drop-in file for named service to allow read/write access to the DLZ directory; (bsc#1201689); - Fix use after free errors resulting from using return of poptGetArg exposed since popt-1.19; (boo#1204279); (bso#15205). - s3: smbd: Fix memory leak in smbd_server_connection_terminate_done(); (bso#15174). - Disable SMB1 for tumbleweed builds. - Update to 4.17.0 * acl_xattr VFS module may unintentionally use filesystem permissions instead of ACL from xattr; (bso#15126). * Missing SMB2-GETINFO access checks from MS-SMB2 3.3.5.20.1; (bso#15153). * assert failed: !is_named_stream(smb_fname)") at ../../lib/util/fault.c:197; (bso#15161). * acl_xattr VFS module may unintentionally use filesystem permissions instead of ACL from xattr; (bso#15126). * assert failed: !is_named_stream(smb_fname)") at ../../lib/util/fault.c:197; (bso#15161). * Cross-node multi-channel reconnects result in SMB2 Negotiate returning NT_STATUS_NOT_SUPPORTED; (bso#15159). * winbind at info level debug can coredump when processing wb_lookupusergroups; (bso#15160). * Make use of glfs_*at() API calls in vfs_glusterfs; (bso#15157). * Possible use after free of connection_struct when iterating smbd_server_connection->connections; (bso#15128). * `net usershare add` fails with flag works with --long but fails with -l; (bso#15145). * acl_xattr VFS module may unintentionally use filesystem permissions instead of ACL from xattr; (bso#15126). * Performance regression on contended path based operations; (bso#15125). * Missing READ_LEASE break could cause data corruption; (bso#15148). * libsamba-errors uses a wrong version number; (bso#15141). * SMB1 negotiation can fail to handle connection errors; (bso#15152). * New filename parser doesn't check veto files smb.conf parameter; (bso#15143). * 4.17.rc1 still uses symlink-race prone unix_convert(); (bso#15144). * Backport fileserver related changed to 4.17.0rc2; (bso#15146). * Manpage for smbstatus json is missing; (bso#15147). * Backport fileserver related changed to 4.17.0rc2; (bso#15146). * Performance regression on contended path based operations; (bso#15125). * Backport fileserver related changed to 4.17.0rc2; (bso#15146). * Fix issues found by coverity in smbstatus json code; (bso#15140). * Backport fileserver related changed to 4.17.0rc2; (bso#15146). - Migration to /usr/etc: Saving user changed configuration files in /etc and restoring them while an RPM update. - Update to 4.16.4 * CVE-2022-2031: Samba AD users can bypass certain restrictions associated with changing passwords; (bsc#1201495); (bso#15047); * CVE-2022-32744: Samba AD users can forge password change requests for any user; (bsc#1201493); (bso#15074); * CVE-2022-32745: Samba AD users can crash the server process with an LDAP add or modify request; (bsc#1201492); (bso#15008); * CVE-2022-32746: Samba AD users can induce a use-after-free in the server process with an LDAP add or modify request; (bsc#1201490); (bso#15009); * CVE-2022-32742: Server memory information leak via SMB1; (bsc#1201496); (bso#15085); - Update to 4.16.3 * Using vfs_streams_xattr and deleting a file causes a panic; (bso#15099); * Add support for bind 9.18; (bso#14986); * logging dsdb audit to specific files does not work; (bso#15076); * Problem when winbind renews Kerberos; (bso#14979); (bsc#1196224); * Samba with new lorikeet-heimdal fails to build on gcc 12.1 in developer mode; (bso#15095); * Crash in streams_xattr because fsp->base_fsp->fsp_name is NULL; (bso#15105); * Crash in rpcd_classic - NULL pointer deference in mangle_is_mangled(); (bso#15118); * smbclient commands del & deltree fail with NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100); (bsc#1200556); * Fix check for chown when processing NFSv4 ACL; (bso#15120); * The pcap background queue process should not be stopped; (bso#15082); * testparm: Fix typo in idmap rangesize check; (bso#15097); * net ads info returns LDAP server and LDAP server name as null; (bso#15106); * ldconfig: /lib64/libsmbconf.so.0 is not a symbolic link; (bso#15108); * CTDB child process logging does not work as expected; (bso#15090); - Update spec file to fix the optional Heimdal DC build - Fix external trusts with MIT Kerberos 1.20 - Add missing samba-client requirement to samba-winbind package; (bsc#1198255); - Move pdb backends from package samba-libs to package samba-client-libs and remove samba-libs requirement from samba-winbind; (bsc#1200964); (bsc#1198255); - Add sysuser-shadow requirement for packages using systemd-sysusers - Use the canonical realm name to refresh the Kerberos tickets; (bsc#1196224); (bso#14979); - Moved logrotate files from user specific directory /etc/logrotate.d to vendor specific directory /usr/etc/logrotate.d. - Update to 4.16.2 * Use pathref fd instead of io fd in vfs_default_durable_cookie; (bso#15042); * vfs_gpfs with vfs_shadowcopy2 fail to restore file if original file had been deleted; (bso#15069); * Reintroduce netgroups support; (bso#15087); * net ads info shows LDAP Server: 0.0.0.0 depending on contacted server; (bso#14674); * Update from 4.15 to 4.16 breaks discovery of [homes] on standalone server from Win and IOS; (bso#15062); * waf produces incorrect names for python extensions with Python 3.11; (bso#15071); * smbclient -E doesn't work as advertised; (bso#15075); * The samba background daemon doesn't refresh the printcap cache on startup; (bso#15081); * Out-by-4 error in smbd read reply max_send clamp; (bso#14443); - Fix samba4.blackbox.net_ads_dns_async test with bind9 >= 9.17.7 - Support building with MIT Kerberos 1.20 - Bronze bit and S4U support with MIT Kerberos 1.20 for Samba AD DC; (CVE-2020-17049); - Resource Based Constrained Delegation (RBCD) for Samba AD DC - Support building with gcc 12.1 - Use requires_eq macro to require the libldb2 version available at samba-dsdb-modules build time; (bsc#1199362); - Update to 4.16.1 * Share and server swapped in smbget password prompt; (bso#14831); * Durable handles won't reconnect if the leased file is written to; (bso#15022); * rmdir silently fails if directory contains unreadable files and hide unreadable is yes; (bso#15023); * SMB2_CLOSE_FLAGS_FULL_INFORMATION fails to return information on renamed file handle; (bso#15038); * Need to describe --builtin-libraries= better (compare with - -bundled-libraries); (bso#8731); * vfs_shadow_copy2 breaks "smbd async dosmode" sync fallback; (bso#14957); * shadow_copy2 fails listing snapshotted dirs with shadow:fixinodes; (bso#15035); * PAM Kerberos authentication incorrectly fails with a clock skew error; (bso#15046); * Username map - samba erroneously applies unix group memberships to user account entries; (bso#15041); * KVNO off by 100000; (bso#14951); * Uninitialized litemask in variable in vfs_gpfs module; (bso#15027); * vfs_gpfs recalls=no option prevents listing files; (bso#15055); * smbd doesn't handle UPNs for looking up names; (bso#15054); - Update update-apparmor-samba-profile script, replace non-printable delimiter with more human readable separator as sed can accept separators that can appear in the input data. - Fix update-apparmor-samba-profile script, sed doesn't like multibyte separators; (bsc#1198309). - Update to 4.16.0 * New samba-dcerpcd binary to provide DCERPC in the member server setup * Certificate Auto Enrollment * Ability to add ports to dns forwarder addresses in internal DNS backend * No longer using Linux mandatory locks for sharemodes * SMB1 protocol has been deprecated, particularly older dialects * SMB1 protocol SMBCopy command removed * SMB1 server-side wildcard expansion removed - Add python3-dnspython to samba-ad-dc recommens; (bsc#1187101); - Use systemd-sysusers to create system users; (bsc#1182847);- Install a systemd drop-in file for named service to allow read/write access to the DLZ directory; (bsc#1201689);- Update to 4.15.12 * CVE-2022-42898: samba: heimdal: Samba buffer overflow vulnerabilities on 32-bit systems; (bso#15203); (bsc#1205126). - Update to 4.15.11 * Allow rebuild of Centos 8 images after move to vault for Samba 4.15; (bso#15193). * CVE-2022-3437: samba: Buffer overflow in Heimdal unwrap_des3(); (bso#15134); (bsc#1204254)- Update to 4.15.10 * Possible use after free of connection_struct when iterating smbd_server_connection->connections; (bso#15128); (bsc#1200102). * smbXsrv_connection_shutdown_send result leaked; (bso#15174). * Spotlight RPC service returns wrong response when Spotlight is disabled on a share; (bso#15086). * acl_xattr VFS module may unintentionally use filesystem permissions instead of ACL from xattr; (bso#15126). * Missing SMB2-GETINFO access checks from MS-SMB2 3.3.5.20.1; (bso#15153). * assert failed: !is_named_stream(smb_fname)") at ../../lib/util/fault.c:197; (bso#15161). * Missing READ_LEASE break could cause data corruption; (bso#15148). * rpcclient can crash using setuserinfo(2); (bso#15124). * Samba fails to build with glibc 2.36 caused by including in libreplace; (bso#15132). * SMB1 negotiation can fail to handle connection errors; (bso#15152). * samba-tool domain join segfault when joining a samba ad domain; (bso#15078). - Update to 4.15.9 * CVE-2022-32742:SMB1 code does not correct verify SMB1write, SMB1write_and_close, SMB1write_and_unlock lengths; (bso#15085); (bsc#1201496). * CVE-2022-32746: samba: Use-after-free occurring in database audit logging; (bso#15009); (bso#15096); (bsc#1201490). * CVE-2022-2031: samba, ldb: AD users can bypass certain restrictions associated with changing passwords; (bso#15047); (bsc#1201495); * CVE-2022-32745: samba: ldb: AD users can crash the server process with an LDAP add or modify request; (bso#15008); (bso#15096); (bsc#1201492). * CVE-2022-2031: samba, ldb: AD users can bypass certain restrictions associated with changing passwords; (bso#15047); (bsc#1201495); * CVE-2022-32744: samba, ldb: AD users can forge password change requests for any user; (bso#15074); (bso#15047); (bsc#1201493).- CVE-2022-1615: Do not ignore errors in random number generation; (bso#15103); (bsc#1202976); - CVE-2022-32743: Implement validated dnsHostName write rights; (bso#14833); (bsc#1202803);- Fix Use after free when iterating smbd_server_connection->connections after tree disconnect failure; (bso#15128); (bsc#1200102).- CVE-2022-32746: samba: Use-after-free occurring in database audit logging; (bso#15009); (bso#15096); (bsc#1201490). - CVE-2022-32745: samba: ldb: AD users can crash the server process with an LDAP add or modify request; (bso#15008); (bso#15096); (bsc#1201492). - CVE-2022-2031: samba, ldb: AD users can bypass certain restrictions associated with changing passwords; (bso#15047); (bsc#1201495); - CVE-2022-32742:SMB1 code does not correct verify SMB1write, SMB1write_and_close, SMB1write_and_unlock lengths; (bso#15085); (bsc#1201496). - CVE-2022-32744: samba, ldb: AD users can forge password change requests for any user; (bso#15074); (bso#15047); (bsc#1201493).- Update to 4.15.8 * Use pathref fd instead of io fd in vfs_default_durable_cookie; (bso#15042); * Setting fruit:resource = stream in vfs_fruit causes a panic; (bso#15099); * Add support for bind 9.18; (bso#14986); * logging dsdb audit to specific files does not work; (bso#15076); * vfs_gpfs with vfs_shadowcopy2 fail to restore file if original file had been deleted; (bso#15069); * netgroups support removed; (bso#15087); (bsc#1199247); * net ads info shows LDAP Server: 0.0.0.0 depending on contacted server; (bso#14674); (bsc#1199734); * waf produces incorrect names for python extensions with Python 3.11; (bso#15071); * smbclient commands del & deltree fail with NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100); (bsc#1200556); * vfs_gpfs recalls=no option prevents listing files; (bso#15055); * waf produces incorrect names for python extensions with Python 3.11; (bso#15071); * Compile error in source3/utils/regedit_hexedit.c; (bso#15091); * ldconfig: /lib64/libsmbconf.so.0 is not a symbolic link; (bso#15108); * smbd doesn't handle UPNs for looking up names; (bso#15054); * Out-by-4 error in smbd read reply max_send clamp; (bso#14443); - Move pdb backends from package samba-libs to package samba-client-libs and remove samba-libs requirement from samba-winbind; (bsc#1200964); (bsc#1198255); - Use the canonical realm name to refresh the Kerberos tickets; (bsc#1196224); (bso#14979);- Fix smbclient commands del & deltree failing with NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100); (bsc#1200556).- Revert NIS support removal; (bsc#1199247);- Use requires_eq macro to require the libldb2 version available at samba-dsdb-modules build time; (bsc#1199362);- Add missing samba-client requirement to samba-winbind package; (bsc#1198255);- Update to 4.15.7 * Share and server swapped in smbget password prompt; (bso#14831); * Durable handles won't reconnect if the leased file is written to; (bso#15022); * rmdir silently fails if directory contains unreadable files and hide unreadable is yes; (bso#15023); * SMB2_CLOSE_FLAGS_FULL_INFORMATION fails to return information on renamed file handle; (bso#15038); * vfs_shadow_copy2 breaks "smbd async dosmode" sync fallback; (bso#14957); * shadow_copy2 fails listing snapshotted dirs with shadow:fixinodes; (bso#15035); * PAM Kerberos authentication incorrectly fails with a clock skew error; (bso#15046); * username map - samba erroneously applies unix group memberships to user account entries; (bso#15041); * NT_STATUS_ACCESS_DENIED translates into EPERM instead of EACCES in SMBC_server_internal; (bso#14983); * Simple bind doesn't work against an RODC (with non-preloaded users); (bso#13879); * Crash of winbind on RODC; (bso#14641); * uncached logon on RODC always fails once; (bso#14865); * KVNO off by 100000; (bso#14951); * LDAP simple binds should honour "old password allowed period"; (bso#15001); * wbinfo -a doesn't work reliable with upn names; (bso#15003); * Simple bind doesn't work against an RODC (with non-preloaded users); (bso#13879); * Uninitialized litemask in variable in vfs_gpfs module; (bso#15027); * Regression: create krb5 conf = yes doesn't work with a single KDC; (bso#15016);- Add provides to samba-client-libs package to fix upgrades from previous versions; (bsc#1197995);- Add missing samba-libs requirement to samba-winbind package; (bsc#1198255);- Update to 4.15.6 * Renaming file on DFS root fails with NT_STATUS_OBJECT_PATH_NOT_FOUND; (bso#14169); * Samba does not response STATUS_INVALID_PARAMETER when opening 2 objects with same lease key; (bso#14737); * NT error code is not set when overwriting a file during rename in libsmbclient; (bso#14938); * Fix ldap simple bind with TLS auditing; (bso#14996); * net ads info shows LDAP Server: 0.0.0.0 depending on contacted server; (bso#14674); * Problem when winbind renews Kerberos; (bso#14979); (bsc#1196224); * pam_winbind will not allow gdm login if password about to expire; (bso#8691); * virusfilter_vfs_openat: Not scanned: Directory or special file; (bso#14971); * DFS fix for AIX broken; (bso#13631); * Solaris and AIX acl modules: wrong function arguments; (bso#14974); * Function aixacl_sys_acl_get_file not declared / coredump; (bso#7239); * Regression: Samba 4.15.2 on macOS segfaults intermittently during strcpy in tdbsam_getsampwnam; (bso#14900); * Fix a use-after-free in SMB1 server; (bso#14989); * smb2_signing_decrypt_pdu() may not decrypt with gnutls_aead_cipher_decrypt() from gnutls before 3.5.2; (bso#14968); * Changing the machine password against an RODC likely destroys the domain join; (bso#14984); * authsam_make_user_info_dc() steals memory from its struct ldb_message *msg argument; (bso#14993); * Use Heimdal 8.0 (pre) rather than an earlier snapshot; (bso#14995); * Samba autorid fails to map AD users if id rangesize fits in the id range only once; (bso#14967);- Fix mismatched version of libldb2; (bsc#1196788). - Drop obsolete SuSEfirewall2 service files.- Drop obsolete Samba fsrvp v0->v1 state upgrade functionality; (bsc#1080338).- Fix ntlm authentications with "winbind use default domain = yes"; (bso#13126); (bsc#1173429); (bsc#1196308).- Fix samba-ad-dc status warning notification message by disabling systemd notifications in bgqd; (bsc#1195896); (bso#14947).- libldb version mismatch in Samba dsdb component; (bsc#1118508);- Update to 4.15.5 * CVE-2021-44141: UNIX extensions in SMB1 disclose whether the outside target of a symlink exists; (bso#14911); (bsc#1193690). * CVE-2021-44142: Out-of-Bound Read/Write on Samba vfs_fruit module; (bso#14914); (bsc#1194859). * CVE-2022-0336: Re-adding an SPN skips subsequent SPN conflict checks; bso#14950); (bsc#1195048).- CVE-2021-44141: Information leak via symlinks of existance of files or directories outside of the exported share; (bso#14911); (bsc#1193690); - CVE-2021-44142: Out-of-bounds heap read/write vulnerability in VFS module vfs_fruit allows code execution; (bso#14914); (bsc#1194859); - CVE-2022-0336: Samba AD users with permission to write to an account can impersonate arbitrary services; (bso#14950); (bsc#1195048);- Update to 4.15.4 * Duplicate SMB file_ids leading to Windows client cache poisoning; (bso#14928); * Failed to parse NTLMv2_RESPONSE length 95 - Buffer Size Error - NT_STATUS_BUFFER_TOO_SMALL; (bso#14932); * kill_tcp_connections does not work; (bso#14934); * Can't connect to Windows shares not requiring authentication using KDE/Gnome; (bso#14935); * smbclient -L doesn't set "client max protocol" to NT1 before calling the "Reconnecting with SMB1 for workgroup listing" path; (bso#14939); * Cross device copy of the crossrename module always fails; (bso#14940); * symlinkat function from VFS cap module always fails with an error; (bso#14941); * Fix possible fsp pointer deference; (bso#14942); * Missing pop_sec_ctx() in error path inside close_directory(); (bso#14944); * "smbd --build-options" no longer works without an smb.conf file; (bso#14945);- Use pkgconfig(krb5) as dependency for the -devel package: allow OBS to pick the right flavor of krb5-devel (full vs mini). - Do not require the 'krb5' symbol by samba-client-libs: this package has an automatic dependency due to linkage on libgssapi_krb5.so.2. Automatic deps are always better. - Do not require the 'krb5' symbol from samba-libs: samba-libs requires samba-client-libs, which in turn requires krb5 libraries. Samba-libs itself has no need for krb5 (but get it indirectly anyway).- Reorganize libs packages. Split samba-libs into samba-client-libs, samba-libs, samba-winbind-libs and samba-ad-dc-libs, merging samba public libraries depending on internal samba libraries into these packages as there were dependency problems everytime one of these public libraries changed its version (bsc#1192684). The devel packages are merged into samba-devel. - Rename package samba-core-devel to samba-devel - Add python-rpm-macros to build requirements - Update the symlink create by samba-dsdb-modules to private samba ldb modules following libldb2 changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba- Update to 4.15.3 * Recursive directory delete with veto files is broken in 4.15.0; (bso#14878); * A directory containing dangling symlinks cannot be deleted by SMB2 alone when they are the only entry in the directory; (bso#14879); * SIGSEGV in rmdir_internals/synthetic_pathref - dirfsp is used uninitialized in rmdir_internals(); (bso#14892); * MaxQueryDuration not honoured in Samba AD DC LDAP; (bso#14694); * The CVE-2020-25717 username map [script] advice has undesired side effects for the local nt token; (bso#14901); (bsc#1192849); * User with multiple spaces (eg FredNurk) become un-deletable; (bso#14902); * Avoid storing NTTIME_THAW (-2) as value on disk; (bso#14127); * smbXsrv_client_global record validation leads to crash if existing record points at non-existing process; (bso#14882); * Crash in vfs_fruit asking for fsp_get_io_fd() for an XATTR call; (bso#14890); * Samba process doesn't log to logfile; (bso#14897); * set_ea_dos_attribute() fallback calling get_file_handle_for_metadata() triggers locking.tdb assert; (bso#14907); * Kerberos authentication on standalone server in MIT realm broken; (bso#14922); * Segmentation fault when joining the domain; (bso#14923); * Support for ROLE_IPA_DC is incomplete; (bso#14903); * rpcclient cannot connect to ncacn_ip_tcp services anymore; (bso#14767); * winexe crashes since 4.15.0 after popt parsing; (bso#14893); * net ads status -P broken in a clustered environment; (bso#14908); * Memory leak if ioctl(FSCTL_VALIDATE_NEGOTIATE_INFO) fails before smbd_smb2_ioctl_send; (bso#14788); * winbindd doesn't start when "allow trusted domains" is off; (bso#14899); * smbclient login without password using '-N' fails with NT_STATUS_INVALID_PARAMETER on Samba AD DC; (bso#14883); * A schannel client incorrectly detects a downgrade connecting to an AES only server; (bso#14912); * Possible null pointer dereference in winbind; (bso#14921); * Fix -k legacy option for client tools like smbclient, rpcclient, net, etc.; (bso#14846); * Add Debian 11 CI bootstrap support; (bso#14872); * Crash in recycle_unlink_internal(); (bso#14888);- Fix dependency problem upgrading from libndr0 to libndr2 and from libsamba-credentials0 to libsamba-credentials1; (bsc#1192684);- Fix regression introduced by CVE-2020-25717 patches, winbindd does not start when 'allow trusted domains' is off; (bso#14899); - Update to 4.15.2 * CVE-2016-2124: SMB1 client connections can be downgraded to plaintext authentication; (bso#12444); (bsc#1014440); * CVE-2020-25717: A user on the domain can become root on domain members; (bso#14556); (bsc#1192284); * CVE-2020-25718: Samba AD DC did not correctly sandbox Kerberos tickets issued by an RODC; (bso#14558); (bsc#1192246); * CVE-2020-25719: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets; (bso#14561); (bsc#1192247); * CVE-2020-25721: Kerberos acceptors need easy access to stable AD identifiers (eg objectSid); (bso#14557); (bsc#1192505); * CVE-2020-25722: Samba AD DC did not do suffienct access and conformance checking of data stored; (bso#14564); (bsc#1192283); * CVE-2021-3738: Use after free in Samba AD DC RPC server; (bso#14468); (bsc#1192215); * CVE-2021-23192: Subsequent DCE/RPC fragment injection vulnerability; (bso#14875); (bsc#1192214); - Update to 4.15.1 * vfs_shadow_copy2: core dump in make_relative_path; (bso#14682); * Log clutter from filename_convert_internal; (bso#14685); * MacOSX compilation fixes; (bso#14862); * rodc_rwdc test flaps; (bso#14868); * Provide a fix for MS CVE-2020-17049 in Samba [SECURITY] 'Bronze bit' S4U2Proxy Constrained Delegation bypass in Samba with embedded Heimdal; (bso#14642); * Python ldb.msg_diff() memory handling failure; (bso#14836); * "in" operator on ldb.Message is case sensitive; (bso#14845); * Release LDB 2.4.1 for Samba 4.15.1; (bso#14848); * samldb_krbtgtnumber_available() looks for incorrect string; (bso#14854); * Fix Samba support for UF_NO_AUTH_DATA_REQUIRED; (bso#14871); * Allow special chars like "@" in samAccountName when generating the salt; (bso#14874); * Correctly ignore comments in CTDB public addresses file; (bso#14826); * Fix transit path validation; (bso#12998); * Fix that child winbindd logs to log.winbindd instead of log.wb-; (bso#14852); * SMB3 cancel requests should only include the MID together with AsyncID when AES-128-GMAC is used; (bso#14855); * Prepare to operate with MIT krb5 >= 1.20; (bso#14870); * Heimdal prefers RC4 over AES for machine accounts; (bso#14864);- Enable samba-tool without ad dc.- Adjust spec to use pam macros; (bsc#1191046).- Adjust spec for size * allow some Recommends instead Requires to be configured for cifs-utils, samba-libs-python3 & samba-gpupdate; (bsc#1182847). * remove fam, undocumented and unneeded.- Add missing build dependency on bison when building with the embedded Heimdal Kerberos- Update to 4.15.0 * Removed SMB development dialects SMB2_22, SMB2_24 and SMB3_10 * VFS layer modernized. * Add the ability to set allow/deny lists for zone transfer clients in Bind DLZ plugin * Server multi-channel support no longer experimental * Improved command line user experience, unifying the options in different commands * Winbindd no longer scans trusted domains on startup and will use enterprise principals by default. * The net utility is now able to support the offline domain join feature * New options for 'samba-tool dns zoneoptions' for aging control and to mark old records as static or dynamic * DNS tombstones are now deleted as appropriate and use a consistent timestamp format * The 'samba-tool dns update' command validates and rejects now malformed IPv4 and IPv6 addresses * The 'samba-tool domain backup' command correctly takes out locks against concurrent modification during backup when using the LMDB backend * TruACL support has been removed * NIS support has been removed- Fix 'net rpc' authentication when using the machine account; (bsc#1189017); (bso#14796);- Fix dependency problem upgrading from libndr0 to libndr1; (bsc#1189875); - Fix dependency problem upgrading from libsmbldap0 to libsmbldap2; (bsc#1189875); - Fix wrong kvno exported to keytab after net ads changetrustpw due to replication delay; (bsc#1188727); - Add Certificate Auto Enrollment Policy; (jsc#SLE-18456). - Update to 4.13.10 * s3: smbd: Ensure POSIX default ACL is mapped into returned Windows ACL for directory handles; (bso#14708); * Take a copy to make sure we don't reference free'd memory; (bso#14721); * s3: lib: Fix talloc heirarcy error in parent_smb_fname(); (bso#14722); * s3: smbd: Remove erroneous TALLOC_FREE(smb_fname_parent) in change_file_owner_to_parent() error path; (bso#14736); * samba-tool: Give better error information when the 'domain backup restore' fails with a duplicate SID; (bso#14575); * smbd: Correctly initialize close timestamp fields; (bso#14714); * Spotlight RPC service doesn't work with vfs_glusterfs; (bso#14740); * ctdb: Fix a crash in run_proc_signal_handler(); (bso#14475); * gensec_krb5: Restore ipv6 support for kpasswd; (bso#14750); * smbXsrv_{open,session,tcon}: Protect smbXsrv_{open,session,tcon}_global_traverse_fn against invalid records; (bso#14752); * samba-tool domain backup offline doesn't work against bind DLZ backend; (bso#14027); * netcmd: Use next_free_rid() function to calculate a SID for restoring a backup; (bso#14669); - Update to 4.13.9 * s3: smbd: SMB1 SMBsplwr doesn't send a reply packet on success; (bso#14696); * Add documentation for dsdb_group_audit and dsdb_group_json_audit to "log level", synchronise "log level" in smb.conf with the code; (bso#14689); * Fix smbd panic when two clients open same file; (bso#14672); * Fix memory leak in the RPC server; (bso#14675); * s3: smbd: Fix deferred renames; (bso#14679); * s3-iremotewinspool: Set the per-request memory context; (bso#14675); * rpc_server3: Fix a memleak for internal pipes; (bso#14675); * third_party: Update socket_wrapper to version 1.3.2; (bso#11899); * third_party: Update socket_wrapper to version 1.3.3; (bso#14639); * idmap_rfc2307 and idmap_nss return wrong mapping for uid/gid conflict; (bso#14663); * Fix the build on OmniOS; (bso#14288); - Update to 4.13.8 * CVE-2021-20254: Fix buffer overrun in sids_to_unixids(); (bso#14571 - Update to 4.13.7 * Release with dependency on ldb version 2.2.1.- CVE-2021-20254 Buffer overrun in sids_to_unixids(); (bnc#14571); (bsc#1184677).- Fix offline domain backup not possible using lmdb version >= 0.9.26; (bso#14676); - Require libldb >= 2.2.1; (bsc#1183572); (bsc#1183574); - Update to 4.13.6 * CVE-2020-27840: samba: Unauthenticated remote heap corruption via bad DNs; (bso#14595); (bsc#1183572). * CVE-2021-20277: samba: out of bounds read in ldb_handler_fold; (bso#14655); (bsc#1183574). - Update to 4.13.5 * s3:modules:vfs_virusfilter: Recent talloc changes cause infinite start-up failure; (bso#14634); * s3: libsmb: Add missing cli_tdis() in error path if encryption setup failed on temp proxy connection; (bso#13992); * smbd: In conn_force_tdis_done() when forcing a connection closed force a full reload of services; (bso#14604); * dbcheck: Check Deleted Objects and reduce noise in reports about expired tombstones (bso#14593); * s3: Fix fcntl waf configure check; (bso#14503); * s3/auth: Implement "winbind:ignore domains"; (bso#14602); * smbd: Use fsp->conn->session_info for the initial delete-on-close token; (bso#14617); * s3: VFS: nfs4_acls. Add missing TALLOC_FREE(frame) in error path; (bso#14648); * classicupgrade: Treat old never expires value right; (bso#14624); * g_lock: Fix uninitalized variable reads; (bso#14636); * s3:pysmbd: Fix fd leak in py_smbd_create_file(); (bso#13898); * lib:util: Avoid free'ing our own pointer; (bso#14625); * HEIMDAL: krb5_storage_free(NULL) should work; (bso#12505);- Spec file fixes around systemd and requires; (bsc#1182830); - Align systemd service unit files with upstream provided ones.- Update to 4.13.4 * Work around special SMB2 IOCTL response behavior of NetApp Ontap 7.3.7; (bso#14607); * Temporary DFS share setup doesn't set case parameters in the same way as a regular share definition does; (bso#14612); * lib: Avoid declaring zero-length VLAs in various messaging functions; (bso#14605); * Do not create an empty DB when accessing a sam.ldb; (bso#14579); * vfs_fruit may close wrong backend fd; (bso#14596); * Temporary DFS share setup doesn't set case parameters in the same way as a regular share definition does; (bso#14612); * vfs_virusfilter: Allocate separate memory for config char*; (bso#14606); * vfs_fruit may close wrong backend fd; (bso#14596); * Work around special SMB2 IOCTL response behavior of NetApp Ontap 7.3.7; (bso#14607); * The cache directory for the user gencache should be created recursively; (bso#14601); * Be more flexible with repository names in CentOS 8 test environments; (bso#14594);- Uninstalling samba-client: Failed to disable unit, cifs.service does not exists; (bsc#1180388);- Update to 4.13.3 + libcli: smb2: Never print length if smb2_signing_key_valid() fails for crypto blob; (bso#14210); + s3: modules: gluster. Fix the error I made in preventing talloc leaks from a function; (bso#14486); + s3: smbd: Don't overwrite contents of fsp->aio_requests[0] with NULL via TALLOC_FREE(); (bso#14515); + s3: spoolss: Make parameters in call to user_ok_token() match all other uses; (bso#14568); + s3: smbd: Quiet log messages from usershares for an unknown share; (bso#14590); + samba process does not honor max log size; (bso#14248); + vfs_zfsacl: Add missing inherited flag on hidden "magic" everyone@ ACE; (bso#14587); + s3-libads: Pass timeout to open_socket_out in ms; (bso#13124); + s3-vfs_glusterfs: Always disable write-behind translator; (bso#14486); + smbclient: Fix recursive mget; (bso#14517); + clitar: Use do_list()'s recursion in clitar.c; (bso#14581); + manpages/vfs_glusterfs: Mention silent skipping of write-behind translator; (bso#14486); + vfs_shadow_copy2: Preserve all open flags assuming ROFS; (bso#14573); + interface: Fix if_index is not parsed correctly; (bso#14514);- Update to 4.13.2 + s3: modules: vfs_glusterfs: Fix leak of char **lines onto mem_ctx on return; (bso#14486); + RN: vfs_zfsacl: Only grant DELETE_CHILD if ACL tag is special; (bso#14471); + smb.conf.5: Add clarification how configuration changes reflected by Samba; (bso#14538); + daemons: Report status to systemd even when running in foreground; (bso#14552); + DNS Resolver: Support both dnspython before and after 2.0.0; (bso#14553); + s3-vfs_glusterfs: Refuse connection when write-behind xlator is present; (bso#14486); + provision: Add support for BIND 9.16.x; (bso#14487); + ctdb-common: Avoid aliasing errors during code optimization; (bso#14537); + libndr: Avoid assigning duplicate versions to symbols; (bso#14541); + docs: Fix default value of spoolss:architecture; (bso#14522); + winbind: Fix a memleak; (bso#14388); + s4:dsdb:acl_read: Implement "List Object" mode feature; (bso#14531); + docs-xml/manpages: Add warning about write-behind translator for vfs_glusterfs; (bso#14486); + nsswitch/nsstest.c: Avoid nss function conflicts with glibc nss.h. + vfs_shadow_copy2: Avoid closing snapsdir twice; (bso#14530); + third_party: Update resolv_wrapper to version 1.1.7; (bso#14547); + examples:auth: Do not install example plugin; (bso#14550); + ctdb-recoverd: Drop unnecessary and broken code; (bso#14513); + RN: vfs_zfsacl: Only grant DELETE_CHILD if ACL tag is special; (bso#14471);- Adjust smbcacls '--propagate-inheritance' feature to align with upstream; (bsc#1178469).- Update to samba 4.13.1 + CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with easily crafted records; (bsc#1177613); (bso#14472); + CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994); (bso#14436); + CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify; (bsc#1173902); (bso#14434); - Adjust systemd tmpfiles.d configuration, use /run/samba instead of /var/run/samba; (bsc#1177355);- Fix vfs_ceph query_directory regression; (bso#14519) - Drop liburing-devel for SLE15-SP2; (bsc#1177245)- Register CTDB recovery lock holder with ceph-mgr - Add liburing-devel dependency- Update to samba 4.13.0 + Require Python 3.6 + Move wide links functionality into VFS module + Deprecate NT4-like 'classic' Samba domain controllers + Deprecate SMBv1 only protocol options + Remove deprecated "ldap ssl ads" option + Unify asynchronous DCE-RPC server; (jsc#SES-645) + Replay multichannel lease break requests; (bso#11897); (jsc#SES-655) + Drop internal byteorder.h header from util-devel package + Remove final code for the AD DC LDAP backend + Add AD DC Group Policy Scripts + Only use gnutls_aead_cipher_encryptv2() for GnuTLS > 3.6.14; (bso#14399) + Fix %U substitutions if it contains a domain name; (bso#14467) + Fix krb5.conf creation for 'net ads join'; (bso#14479) + Fix build problem if libbsd-dev is not installed; (bso#14482) + Toggle vfs_snapper using "--with-shared-modules"; (bso#14437) + Fix idmap_ad RFC4511 response handling; (bso#14465) + Fix panic in get_lease_type(); (bso#14428)- Update to samba 4.11.13 + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2 against unencrypted passwords; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Support "server require schannel:WORKSTATION$ = no" about unsecure configurations; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): s4 torture rpc: repeated bytes in client challenge; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): libcli/auth: Reject weak client challenges in netlogon_creds_server_init() "server require schannel:WORKSTATION$ = no"; (bsc#1176579); (bso#14497); - Update to samba 4.11.12 + s3: libsmb: Fix SMB2 client rename bug to a Windows server; (bso#14403); + dsdb: Allow "password hash userPassword schemes = CryptSHA256" to work on RHEL7; (bso#14424); + dbcheck: Allow a dangling forward link outside our known NCs; (bso#14450); + lib/debug: Set the correct default backend loglevel to MAX_DEBUG_LEVEL; (bso#14426); + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428); + lib/util: do not install "test_util_paths"; (bso#14370); + lib:util: Fix smbclient -l basename dir; (bso#14345); + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428); + util: Allow symlinks in directory_create_or_exist; (bso#14166); + docs: Fix documentation for require_membership_of of pam_winbind; (bso#14358); + s3:winbind:idmap_ad: Make failure to get attrnames for schema mode fatal; (bso#14425);- Add obsoletes to libsmbldap2 package to fix upgrades from previous versions; (bsc#1172810);- Fix net command unable to negotiate SMB2; (bsc#1174120);- Update to samba 4.11.11 + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ and VLV combined; (bso#14364); (bsc#1173159] + CVE-2020-10745: invalid DNS or NBT queries containing dots use several seconds of CPU each; (bso#14378); (bsc#1173160). + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP server with paged_result or VLV; (bso#14402); (bsc#1173161) + CVE-2020-14303: Endless loop from empty UDP packet sent to AD DC nbt_server; (bso#14417); (bsc#1173359). - Update to samba 4.11.10 + Fix segfault when using SMBC_opendir_ctx() routine for share folder that contains incorrect symbols in any file name; (bso#14374). + vfs_shadow_copy2 doesn't fail case looking in snapdirseverywhere mode; (bso#14350) + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr; (bso#14413). + Malicous SMB1 server can crash libsmbclient; (bso#14366) + winbindd: Fix a use-after-free when winbind clients exit; (bso#14382) + ldb: Bump version to 2.0.11, LMDB databases can grow without bounds. (bso#14330) - Update to samba 4.11.9 + nmblib: Avoid undefined behaviour in handle_name_ptrs(); (bso#14242). + 'samba-tool group' commands do not handle group names with special chars correctly; (bso#14296). + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo is not valid; (bso#14237). + Missing check for DMAPI offline status in async DOS attributes; (bso#14293). + smbd: Ignore set NTACL requests which contain S-1-5-88 NFS ACEs; (bso#14307). + vfs_recycle: Prevent flooding the log if we're called on non-existant paths; (bso#14316) + smbd mistakenly updates a file's write-time on close; (bso#14320). + RPC handles cannot be differentiated in source3 RPC server; (bso#14359). + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313). + nsswitch: Fix use-after-free causing segfault in _pam_delete_cred; (bso#14327). + Fix fruit:time machine max size on arm; (bso#13622) + CTDB recovery corner cases can cause record resurrection and node banning; (bso#14294). + ctdb: Fix a memleak; (bso#14348). + libsmb: Don't try to find posix stat info in SMBC_getatr(). + ctdb-tcp: Move free of inbound queue to TCP restart; (bso#14295); (bsc#1162680). + s3/librpc/crypto: Fix double free with unresolved credential cache; (bso#14344); (bsc#1169095) + s3:libads: Fix ads_get_upn(); (bso#14336). + CTDB recovery corner cases can cause record resurrection and node banning; (bso#14294) + Starting ctdb node that was powered off hard before results in recovery loop; (bso#14295); (bsc#1162680). + ctdb-recoverd: Avoid dereferencing NULL rec->nodemap; (bso#14324) - Update to samba 4.11.8 + CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with ASQ; (bso#14331); (bsc#1169850); + CVE-2020-10704: LDAP Denial of Service (stack overflow) in Samba AD DC; (bso#14334); (bsc#1169851); - Update to samba 4.11.7 + s3: lib: nmblib. Clean up and harden nmb packet processing; (bso#14239). + s3: VFS: full_audit. Use system session_info if called from a temporary share definition; (bso#14283) + dsdb: Correctly handle memory in objectclass_attrs; (bso#14258). + ldb: version 2.0.9, Samba 4.11 and later give incorrect results for SCOPE_ONE searches; (bso#14270) + auth: Fix CIDs 1458418 and 1458420 Null pointer dereferences; (bso#14247). + smbd: Handle EINTR from open(2) properly; (bso#14285) + winbind member (source3) fails local SAM auth with empty domain name; (bso#14247) + winbindd: Handling missing idmap in getgrgid(); (bso#14265). + lib:util: Log mkdir error on correct debug levels; (bso#14253). + wafsamba: Do not use 'rU' as the 'U' is deprecated in Python 3.9; (bso#14266). + ctdb-tcp: Make error handling for outbound connection consistent; (bso#14274). - Update to samba 4.11.6 + pygpo: Use correct method flags; (bso#14209). + vfs_ceph_snapshots: Fix root relative path handling; (bso#14216); (bsc#1141320). + Avoiding bad call flags with python 3.8, using METH_NOARGS instead of zero; (bso#14209). + source4/utils/oLschema2ldif: Include stdint.h before cmocka.h; (bso#14218). + docs-xml/winbindnssinfo: Clarify interaction with idmap_ad etc; (bso#14122). + smbd: Fix the build with clang; (bso#14251). + upgradedns: Ensure lmdb lock files linked; (bso#14199). + s3: VFS: glusterfs: Reset nlinks for symlink entries during readdir; (bso#14182). + smbc_stat() doesn't return the correct st_mode and also the uid/gid is not filled (SMBv1) file; (bso#14101). + librpc: Fix string length checking in ndr_pull_charset_to_null(); (bso#14219). + ctdb-scripts: Strip square brackets when gathering connection info; (bso#14227).- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);- Installing: samba - samba-ad-dc.service does not exist and unit not found; (bsc#1171437);- Fix samba_winbind package is installing python3-base without python3 package; (bsc#1169521);- Require libldb2 >= 2.0.10 after security release.- CVE-2020-10704: LDAP Denial of Service (stack overflow) in Samba AD DC; (bso#14334); (bsc#1169851); - CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with ASQ; (bso#14331); (bsc#1169850);- Fix smbclient crash with double free (with unresolved krb5 credential cache); (bso#14344); (bsc#1169095).- Starting ctdb node that was powered off hard before results in recovery loop; (bso#14295); (bsc#1162680).- CTDB doesn't retry outgoing connections on bind (and some other) failures; (bso#14274); (bsc#1162680).- Revert: Allow idmap_rid to have primary group other than "Domain Users"; (bsc#1087931).- Fix nmbstatus not reporting detailed information about workgroups; (bsc#1159464); - Fix querying all names registered within broadcast area; (bso#8927);- Update to samab 4.11.5 + CVE-2019-14902: Replication of ACLs down subtree on AD Directory is not automatic; (bso#12497); (bsc#1160850). + CVE-2019-19344: Fix server crash with dns zone scavenging = yes; (bso#14050); (bsc#1160852). + CVE-2019-14907: server-side crash after charset conversion failure (eg during NTLMSSP processing); (bso#14208); (bsc#1160888). - Update to samba 4.11.4 + Ensure SMB1 cli_qpathinfo2() doesn't return an inode number; (bso#14161). + Ensure we don't call cli_RNetShareEnum() on an SMB1 connection; (bso#14174). + NT_STATUS_ACCESS_DENIED becomes EINVAL when using SMB2 in SMBC_opendir_ctx; (bso#14176). + SMB2 - Ensure we use the correct session_id if encrypting an interim response; (bso#14189). + Prevent smbd crash after invalid SMB1 negprot; (bso#14205). + printing: Fix %J substition; (bso#13745). + Remove now unneeded call to cmdline_messaging_context(); (bso#13925). + Fix incomplete conversion of former parametric options; (bso#14069). + Fix sync dosmode fallback in async dosmode codepath; (bso#14070). + vfs_fruit returns capped resource fork length; (bso#14171). + libnet_join: Add SPNs for additional-dns-hostnames entries; (bso#14116). + smbd: Increase a debug level; (bso#14211). + Prevent azure ad connect from reporting discovery errors reference-value-not-ldap-conformant; (bso#14153). + krb5_plugin: Fix developer build with newer heimdal system library; (bso#14179). + replace: Only link libnsl and libsocket if required; (bso#14168); + ctdb: Incoming queue can be orphaned causing communication; breakdown; (bso#14175). + ldb: Release ldb 2.0.8. Cross-compile will not take cross-answers or cross-execute; (bso#13846). + heimdal-build: Avoid hard-coded /usr/include/heimdal in asn1_compile-generated code; (bso#13856).- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).- Update to samba 4.11.3 + CVE-2019-14861: DNSServer RPC server crash, an authenticated user can crash the DCE/RPC DNS management server by creating records with matching the zone name; (bso#14138); (bsc#1158108). + CVE-2019-14870: DelegationNotAllowed not being enforced, the DelegationNotAllowed Kerberos feature restriction was not being applied when processing protocol transition requests (S4U2Self), in the AD DC KDC; (bso#14187); (bsc#1158109).- CVE-2019-14861: DNSServer RPC server crash, an authenticated user can crash the DCE/RPC DNS management server by creating records with matching the zone name; (bso#14138); (bsc#1158108). - CVE-2019-14870: DelegationNotAllowed not being enforced, the DelegationNotAllowed Kerberos feature restriction was not being applied when processing protocol transition requests (S4U2Self), in the AD DC KDC; (bso#14187); (bsc#1158109).- Update to samba 4.11.2 + CVE-2019-10218: Client code can return filenames containing path separators; (bsc#1144902); (bso#14071). + CVE-2019-14833: Samba AD DC check password script does not receive the full password; (bso#12438). + CVE-2019-14847: User with "get changes" permission can crash AD DC LDAP server via dirsync; (bso#14040). - Fixes from 4.11.1 + Overlinking libreplace against librt and pthread against every binary or library causes issues; (bso#14140); + kpasswd fails when built with MIT Kerberos; (bso#14155); + Fix spnego fallback from kerberos to ntlmssp in smbd server; (bso#14106); + Stale file handle error when using mkstemp on a share; (bso#14137); + non-AES schannel broken; (bso#14134); + Joining Active Directory should not use SAMR to set the password; (bso#13884); + smbclient can blunder into the SMB1 specific cli_RNetShareEnum() call on an SMB2 connection; (bso#14152); + Deleted records can be resurrected during recovery; (bso#14147); + getpwnam and getpwuid need to return data for ID_TYPE_BOTH group; (bso#14141); + winbind does not list forest trusts with additional trust attributes; (bso#14130); + fault report points to outdated documentation; (bso#14139); + pam_winbind with krb5_auth or wbinfo -K doesn't work for users of trusted domains/forests; (bso#14124); + classicupgrade results in uncaught exception - a bytes-like object is required, not 'str'; (bso#14136); + pod2man is not longer required, stop checking at build time; (bso#14131); + Exit code of ctdb nodestatus should not be influenced by deleted nodes; (bso#14129); + username/password authentication doesn't work with CUPS and smbspool; (bso#14128); + smbc_readdirplus() is incompatible with smbc_telldir() and smbc_lseekdir(); (bso#14094);- CVE-2019-14847: User with "get changes" permission can crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598); - CVE-2019-10218: Client code can return filenames containing path separators; (bso#14071); (bsc#1144902);- CVE-2019-14833: samba: Accent with "check script password" Samba AD DC check password script does not receive the full password; (bso#12438); (bsc#1154289).- Update to samba 4.11.0 + For details on all items see WHATSNEW.txt in samba-doc package + Python2 runtime support removed; python 3.4 or later required + Security improvements: - SMB1 disabled by default - lanman and plaintext authentication deprecated - winbind: PAM_AUTH and NTLM_AUTH events logged - GnuTLS 3.2 required; system FIPS mode setting honored + CephFS Snapshot integration, exposed as previous file versions + ctdb changes: - onnode -o option removed - ctdbd logs when using more than 90% of a CPU thread - CTDB_MONITOR_SWAP_USAGE variable removed + AD Domain controller improvements: - Upgrade AD databse format - BIND9_FLATFILE deprecated - default process model chagned to prefork - bind9 dns operation duration logging - Default schema updated to 2012_R2; function level is unchanged - many performance improvements + Configuration webserver support removed- Fix broken username/password authentication with CUPS and smbspool; (bsc#1152143); (bso#14128).- Fix auth problems when printing via smbspool backend with kerberos; (bnc#1148539); (bso#13832).- Update to samba 4.10.8 + CVE-2019-10197: user escape from share path definition; (bso#14035); (bsc#1141267);- Fix build on newer systems by modifying samba.spec to use consistent non-relative paths for pammodules in configure line and specification of pam_winbind.so library to package.- Update to samba 4.10.7 + Unable to create or rename file/directory inside shares configured with vfs_glusterfs_fuse module; (bso#14010). + build: Allow build when '--disable-gnutls' is set; (bso#13844) + samba-tool: Add 'import samba.drs_utils' to fsmo.py; (bso#13973). + Fix 'Error 32 determining PSOs in system' message on old DB with FL upgrade; (bso#14008). + s4/libnet: Fix joining a Windows pre-2008R2 DC; (bso#14021) + join: Use a specific attribute order for the DsAddEntry nTDSDSA object; (bso#14046). + vfs_catia: Pass stat info to synthetic_smb_fname(); (bso#14015). + lookup_name: Allow own domain lookup when flags == 0; (bso#14091). + s4 librpc rpc pyrpc: Ensure tevent_context deleted last; (bso#13932). + DEBUGC and DEBUGADDC doesn't print into a class specific log file; (bso#13915). + Request to keep deprecated option "server schannel", VMWare Quickprep requires "auto"; (bso#13949). + dbcheck: Fallback to the default tombstoneLifetime of 180 days; (bso#13967). + dnsProperty fails to decode values from older Windows versions; (bso#13969). + samba-tool: Use only one LDAP modify for dns partition fsmo role transfer; (bso#13973). + third_party: Update waf to version 2.0.17; (bso#13960). + netcmd: Allow 'drs replicate --local' to create partitions; (bso#14051). + ctdb-config: Depend on /etc/ctdb/nodes file; (bso#14017).- CVE-2019-10197: user escape from share path definition; (bso#14035); (bsc#1141267).- Prepare for use future use of kernel keyrings, modify /etc/pam.d/samba to include pam_keyinit.so; (bsc#1144059).- Update samba-winbind script to work with systemd; (bsc#1132739); - Drop samba dhcpcd hook scripts - Update to samba 4.10.6 + s3: winbind: Fix crash when invoking winbind idmap scripts; (bso#13956). + smbd does not correctly parse arguments passed to dfree and quota scripts; (bso#13964). + samba-tool dns: use bytes for inet_ntop; (bso#13965). + samba-tool domain provision: Fix --interactive module in python3; (bso#13828). + ldb_kv: Skip @ records early in a search full scan; (bso#13893). + docs: Improve documentation of "lanman auth" and "ntlm auth" connection; (bso#13981). + python/ntacls: Use correct "state directory" smb.conf option instead of "state dir"; (bso#14002). + registry: Add a missing include; (bso#13840). + Fix SMB guest authentication; (bso#13944). + AppleDouble conversion breaks Resourceforks; (bso#13958). + vfs_fruit makes direct use of syscalls like mmap() and pread(); (bso#13968). + s3:mdssvc: Fix flex compilation error; (bso#13987). + s3/vfs_glusterfs[_fuse]: Avoid using NAME_MAX directly; (bso#13872). + dsdb:samdb: schemainfo update with relax control; (bso#13799). + s3:util: Move static file_pload() function to lib/util; (bso#13964). + smbd: Fix a panic; (bso#13957). + ldap server: Generate correct referral schemes; (bso#12478). + s4 dsdb/repl_meta_data: fix use after free in dsdb_audit_add_ldb_value; (bso#13941). + s4 dsdb: Fix use after free in samldb_rename_search_base_callback; (bso#13942). + dsdb/repl: we need to replicate the whole schema before we can apply it; (bso#12204). + ldb: Release ldb 1.5.5; (bso#12478). + Schema replication fails if link crosses chunk boundary backwards; (bso#13713). + 'samba-tool domain schemaupgrade' uses relax control and skips the schemaInfo update provision; (bso#13799). + dsdb_audit: avoid printing "... remote host [Unknown] SID [(NULL SID)] ..."; (bso#13916). + python/ntacls: We only need security.SEC_STD_READ_CONTROL in order to get the ACL; (bso#13917). + s3:loadparm: Ensure to truncate FS Volume Label at multibyte boundary; (bso#13947). + Using Kerberos credentials to print using spoolss doesn't work; (bso#13939). + wafsamba: Use native waf timer; (bso#13998). + ctdb-scripts: Fix tcp_tw_recycle existence check; (bso#13984).- Update to samba-4.10.5 (including updates for 4.10.4, 4.10.3) + CVE-2019-12435 rpc/dns: Avoid NULL deference if zone not found in DnssrvOperation2; (bso#13922); (bsc#1137815). + CVE-2019-12436 dsdb/paged_results: Ignore successful results without messages; (bso#13951); (bsc#1137816). - Update to samba-4.10.4 + s3: SMB1: Don't allow recvfile on stream fsp's; (bso#13938). + py/provision: Fix for Python 2.6; (bso#13882). + netcmd: Fix 'passwordsettings --max-pwd-age' command; (bso#13873). + s3-libnet_join: 'net ads join' to child domain fails when using "-U admin@forestroot"; (bso#13861). + vfs_ceph: Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245). + vfs_ceph: Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697). + ctdb-common: Avoid race between fd and signal events; (bso#13895). + ctdb-common: Fix memory leak in run_proc; (bso#13943). + lib: Initialize getline() arguments; (bso#13892). + winbind: Fix overlapping id ranges; (bco#13903). + lib util debug: Increase format buffer to 4KiB; (bso#13902). + nsswitch pam_winbind: Fix Asan use after free; (bso#13927). + s4 lib socket: Ensure address string owned by parent struct; (bso#13929). + s3 rpc_client: Fix Asan stack use after scope; (bso#13936). + s3:smbd: Handle IO_REPARSE_TAG_DFS in SMB_FIND_FILE_FULL_DIRECTORY_INFO; (bso#10097). + smb2_tcon: Avoid STATUS_PENDING completely on tdis; (bso#10344). + smb2_sesssetup: avoid STATUS_PENDING responses for session setup; (bso#12845). + smb2_tcon: Avoid STATUS_PENDING completely on tdis; (bso#13698). + smb2_sesssetup: avoid STATUS_PENDING responses for session setup; (bso#13796). + dbcheck: Fix the err_empty_attribute() check; (bso#13843). + vfs_snapper: Drop unneeded fstat handler; (bso#13858). + vfs_default: Fix vfswrap_offload_write_send() NT_STATUS_INVALID_VIEW_SIZE check; (bso#13862). + smb2_server: Grant all 8192 credits to clients; (bso#13863). + smbd: Implement SMB_FILE_NORMALIZED_NAME_INFORMATION handling; (bso#13919). + s3/vfs_glusterfs: Dynamically determine NAME_MAX; (bso#13872). + s3: modules: ceph: Use current working directory instead of share path; (bso#13918); (bsc#1134452). + winbind: Use domain name from lsa query for sid_to_name cache entry; (bso#13831). + memcache: Increase size of default memcache to 512k; (bso#13865). + docs: Update smbclient manpage for "--max-protocol"; (bso#13857). + s3:utils: If share is NULL in smbcacls, don't print it; (bso#13937). + s3:smbspool: Fix regression printing with Kerberos credentials; (bso#13939). + ctdb-scripts: CTDB restarts failed NFS RPC services by hand, which is incompatible with systemd; (bso#13860). + ctdb-daemon: Revert "We can not assume that just because we could complete a TCP handshake"; (bso#13888). + ctdb-daemon: Never use 0 as a client ID; (bso#13930). + ctdb-common: Fix memory leak; (bso#13943). + s3:debug: Enable logging for early startup failures; (bso#13904) - Update to samba-4.10.3 + CVE-2018-16860: Heimdal KDC: Reject PA-S4U2Self with unkeyed checksum; (bso#13685); (bsc#1134024).- CVE-2019-12435: zone operations can crash rpc server; (bso#13922); (bsc#1137815).- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697). - Add ceph_snapshots VFS module; (jsc#SES-183).- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).- Update to samba-4.10.2: + CVE-2019-3870 (World writable files in Samba AD DC private/ dir); (bso#13834). + CVE-2019-3880 (Save registry file outside share as unprivileged user); (bso#13851). + py/kcc_utils: py2.6 compatibility; (bso#13837). + libcli: permit larger values of DataLength in SMB2_ENCRYPTION_CAPABILITIES of negotiate response; (bso#13869). + regfio: Improve handling of malformed registry hive files; (bso#13840). + ctdb-version: Simplify version string usage; (bso#13789). + lib: Make fd_load work for non-regular files; (bso#13859). + dbcheck: in the middle of the tombstone garbage collection causes replication failures, dbcheck: add --selftest-check-expired-tombstones cmdline option; (bso#13816). + ndr_spoolss_buf: Fix out of scope use of stack variable in NDR_SPOOLSS_PUSH_ENUM_OUT(); (bso#13818). + s4/messaging: Fix undefined reference in linking libMESSAGING-samba4.so; (bso#13854). + acl_read: Fix regression for empty lists; (bso#13836). + s4:dlz make b9_has_soa check dc=@ node; (bso#13841). + s3:client: Fix printing via smbspool backend with kerberos auth; (bso#13832). + s4:librpc: Fix installation of Samba; (bso#13847). + s3:lib: Fix the debug message for adding cache entries; (bso#13848). + s3:utils: Add 'smbstatus -L --resolve-uids' to show username; (bso#13793). + s3:lib: Fix the debug message for adding cache entries; (bso#13848). + s3:waf: Fix the detection of makdev() macro on Linux; (bso#13853). * ctdb-build: Drop creation of .distversion in tarball; (bso#13789). * ctdb-packaging: Test package requires tcpdump, ctdb package should not own system library directory; (bso#13838). - Update to samba-4.10.1: + py/kcc_utils: py2.6 compatibility; (bso#13837); + libcli: permit larger values of DataLength in SMB2_ENCRYPTION_CAPABILITIES of negotiate response; (bso#13869); + regfio: Improve handling of malformed registry hive files; (bso#13840); + ctdb-version: Simplify version string usage; (bso#13789); + lib: Make fd_load work for non-regular files; (bso#13859); + dbcheck in the middle of the tombstone garbage collection causes replication failures, dbcheck: add --selftest-check-expired-tombstones cmdline option; (bso#13816); + ndr_spoolss_buf: Fix out of scope use of stack variable in NDR_SPOOLSS_PUSH_ENUM_OUT(); (bso#13818); + s4/messaging: Fix undefined reference in linking libMESSAGING-samba4.so; (bso#13854); + acl_read: Fix regression for empty lists; (bso#13836); + s4:dlz make b9_has_soa check dc=@ node; (bso#13841); + s3:client: Fix printing via smbspool backend with kerberos auth; (bso#13832); + s4:librpc: Fix installation of Samba; (bso#13847); + s3:lib: Fix the debug message for adding cache entries; (bso#13848); + s3:utils: Add 'smbstatus -L --resolve-uids' to show username; (bso#13793); + s3:lib: Fix the debug message for adding cache entries; (bso#13848); + s3:waf: Fix the detection of makdev() macro on Linux; (bso#13853); + ctdb-build: Drop creation of .distversion in tarball; (bso#13789); + ctdb-packaging: Test package requires tcpdump, ctdb package should not own system library directory; (bso#13838); - Update to samba-4.10.0: + s4-server: Open and close a transaction on sam.ldb at startup; (bso#13760); + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812); + s4/scripting/bin: Open unicode files with utf8 encoding and write + unicode string. + sambaundoguididx: Use the right escaped oder unescaped sam ldb files; (bso#13759); + Fix idmap cache pollution with S-1-22- IDs on winbind hickup; (bso#13813); + passdb: Update ABI to 0.27.2. + lib/winbind_util: Add winbind_xid_to_sid for --without-winbind; (bso#13813); + lib:util: Move debug message for mkdir failing to log level 1; (bso#13823);- MacOS credit accounting breaks with async SESSION SETUP; (bsc#1125601); (bso#13796). - Mac OS X SMB2 implmenetation sees Input/output error or Resource temporarily unavailable and drops connection; (bso#13698)- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).- CVE-2019-3880: Save registry file outside share as unprivileged user; (bso#13851); (bsc#1131060 ).- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0); (bso#13834); (bsc#1130703);- Update to samba-4.9.5 + audit_logging: Remove debug log header and JSON Authentication: prefix; (bso#13714); + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760); + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso# CID: 1433607; (bso#11495); + smbd: uid: Don't crash if 'force group' is added to an existing share connection; (bso#13690); + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility code; (bso#13770); + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803); + s3:utils/smbget fix recursive download with empty source directories; (bso#13199); + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716); + s3:libsmb: cli_smb2_list() can sometimes fail initially on a connection; (bso#13736); + join: Throw CommandError instead of Exception for simple errors; (bso#13747); + ldb: Avoid inefficient one-level searches; (bso#13762); + s3: libsmb: use smb2cli_conn_max_trans_size() in cli_smb2_list(); (bso#13736); + tldap: Avoid use after free errors; (bso#13776); + Fix idmap xid2sid cache churn; (bso#13802); + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812); + s3-smbd: Avoid assuming fsp is always intact after close_file call; (bso#13720); + s3-vfs-fruit: Add close call; (bso#13725); + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746); + s3-vfs: add glusterfs_fuse vfs module; (bso#13774); + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766); + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS) ftruncate and fallocate; (bso#13807); + lib/audit_logging: Actually create talloc; (bso#13737); + netcmd/user: python[3]-gpgme unsupported and replaced by python[3]-gpg; (bso#13728); + dns: Changing onelevel search for wildcard to subtree; (bso#13738); + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721); + sambaundoguididx: Use the right escaped oder unescaped sam ldb files; (bso#13759); + ctdb: Print locks latency in machinereadable stats; (bso#13742); + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786); + audit_logging: auth_json_audit required auth_json; (bso#13715); + man pages: Document prefork process model; (bso#13765); + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773); + s3:auth: ignore create_builtin_guests() failing without a valid idmap configuration; (bso#13697); + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC without trusts; (bso#13722); + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd is not available; (bso#13723); + s4:server: Add support for 'smbcontrol samba shutdown' and 'smbcontrol debug/debuglevel'; (bso#13752); + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616); + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330); + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774); + notifyd: Fix SIGBUS on sparc; (bso#13704); + waf: Check for libnscd; (bso#13787); + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770); + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717); + Recovery lock bug fixes; (bso#13800); + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726); + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727); + vfs_fileid: Fix get_connectpath_ino; (bso#13741); + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).- Fix update-apparmor-samba-profile script after apparmor switched to using named profiles. The change is backwards compatible; (bsc#1126377);- LoadParm().load_default() fails with "Unable to load default file"; (bsc#1089758);- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);- Update to samba-4.9.4 + libcli/smb: Don't overwrite status code; (bso#9175). + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164). + Session setup reauth fails to sign response; (bso#13661). + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677). + vfs_shadow_copy2: Nicely deal with attempts to open previous version for writing; (bso#13688). + Restoring previous version of stream with vfs_shadow_copy2 fails with NT_STATUS_OBJECT_NAME_INVALID fsp->base_fsp->fsp_name; (bso#13455). + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571). + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708) + PEP8: fix E231: missing whitespace after ','. + winbindd: Fix crash when taking profiles;(bso#13629) + CVE-2018-14629 dns: Fix CNAME loop prevention using counter regression; (bso#13600) + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686). + CVE-2018-16853: Do not segfault if client is not set; (bso#13571). + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679) + ctdb-daemon: Exit with error if a database directory does not exist; (bso#13696). + s3:libads: Add net ads leave keep-account option; (bso#13498).- Drop more %if..%endif guards which are idempotent. - Drop requires on ldconfig which are already auto-discovered. - Do not ignore errors from useradd/groupadd.- Remove python2 build dependency from samba-libs; (bsc#1116900);- Update update-apparmor-samba-profile script to ignore the shares's paths containing substitution variables in any place, not only at the beginning of the path.- Update to samba-4.9.3 + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD Internal DNS server; (bso#13600); (bsc#1116319); + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628); (bsc#1116320); + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server; (bso#13674); (bsc#1116322); + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers; (bso#13669); (bsc#1116321); + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos configuration (unsupported); (bso#13678); (bsc#1116324); + CVE-2018-16857: Bad password count in AD DC not always effective; window; (bso#13683); (bsc#1116323);- Update to samba-4.9.2 + dsdb: Add comments explaining the limitations of our current backlink behaviour; (bso#13418); + Fix problems running domain backups (handling SMBv2, sites); (bso#13621); + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3; (bso#13465); + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642); + File saving issues with vfs_fruit on samba >= 4.8.5; (bso#13646); + Enabling vfs_fruit looses FinderInfo; (bso#13649); + Cancelling of SMB2 aio reads and writes returns wrong error NT_STATUS_INTERNAL_ERROR; (bso#13667); + Fix CTDB recovery record resurrection from inactive nodes and simplify vacuuming; (bso#13641); + examples: Fix the smb2mount build; (bso#13465); + libtevent: Fix build due to missing open_memstream on Illiumos; (bso#13629); + winbindd_cache: Fix timeout calculation for sid<->name cache; (bso#13662); + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path; (bso#13653); + Extended DN SID component missing for member after switching group membership; (bso#13418); + Return STATUS_SESSION_EXPIRED error encrypted, if the request was encrypted; (bso#13624); + python: Allow forced signing via smb.SMB(); (bso#13621); + lib:socket: If returning early, set ifaces; (bso#13665); + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8 encoded unicode; (bso#13616); + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute; (bso#13673); + waf: Add -fstack-clash-protection; (bso#13601); + winbind: Fix segfault if an invalid passdb backend is configured; (bso#13668); + Fix bugs in CTDB event handling; (bso#13659); + Misbehaving nodes are sometimes not banned; (bso#13670);- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);- winbind requires latest version of libtevent-util0 to start- Backport latest gpo code from master + Read policy from local gpt cache + Offline policy application + Make group policy extensible via register/unregister gpext + gpext's run via a process_group_policy method- Enable profiling data collection- Change samba-kdc package name to samba-ad-dc - Move samba-ad-dc.service to the samba-ad-dc package- Update to samba-4.9.1 + s3: nmbd: Stop nmbd network announce storm; (bso#13620); + s3-rpcclient: Use spoolss_init_spoolss_UserLevel1 in winspool cmds; (bso#13597); + CTDB recovery lock has some race conditions; (bso#13617); + s3-rpc_client: Advertise Windows 7 client info; (bso#13597); + ctdb-doc: Remove PIDFILE option from ctdbd_wrapper man page; (bso#13610);- Tumbleweed doesn't define the sle_version macro, so we must include a check for suse_version also. Otherwise python3 is disabled on Tumbleweed.- Update to samba-4.9.0 + samba_dnsupdate: Honor 'dns zone scavenging' option, only update if needed; (bso#13605); + wafsamba: Fix 'make -j'; (bso#13606);- Update to samba-4.9.0rc5 + s3: VFS: vfs_full_audit: Ensure smb_fname_str_do_log() only returns absolute pathnames; (bso#13565); + s3: util: Do not take over stderr when there is no log file; (bso#13578); + Durable Reconnect fails because cookie.allow_reconnect is not set; (bso#13549); + krb5-samba: Interdomain trust uses different salt principal; (bso#13539); + vfs_fruit: Don't unlink the main file; (bso#13441); + smbd: Fix a memleak in async search ask sharemode; (bso#13602); + Fix Samba GPO issue when Trust is enabled; (bso#11517); + samba-tool: Add "virtualKerberosSalt" attribute to 'user getpassword/syncpasswords'; (bso#13539); + Fix CTDB configuration issues; (bso#13589); + ctdbd logs an error until it can successfully connect to eventd; (bso#13592);- Update to samba-4.9.0rc4 + s3: smbd: Ensure get_real_filename() copes with empty pathnames; (bso#13585); + samba domain backup online/rename commands force user to specify password on CLI; (bso#13566); + wafsamba/samba_abi: Always hide ABI symbols which must be local; (bso#13579); + Fix a panic if fruit_access_check detects a locking conflict; (bso#13584); + Fix memory and resource leaks; (bso#13567); + python: Fix print in dns_invalid.py; (bso#13580); + Aliasing issue causes incorrect IPv6 checksum; (bso#13588); + Fix CTDB configuration issues; (bso#13589); + s3: vfs: time_audit: fix handling of token_blob in smb_time_audit_offload_read_recv(); (bso#13568);- Add missing zlib-devel dependency which was previously pulled in by libopenssl-devel- Update to samba-4.9.0rc3+git.22.3fff23ae36e + CVE-2018-10858: libsmb: Harden smbc_readdir_internal() against returns from malicious servers; (bso#13453); + CVE-2018-1140: ldbsearch '(distinguishedName=abc)' and DNS query with escapes crashes, ldb: Release LDB 1.3.5 for CVE-2018-1140; (bso#13374); + CVE-2018-10918: cracknames: Fix DoS (NULL pointer de-ref) when not servicePrincipalName is set on a user; (bso#13552); + CVE-2018-10919: acl_read: Fix unauthorized attribute access via searches; (bso#13434); + ctdb_mutex_ceph_rados_helper: Set SIGINT signal handler; (bso#13540); + CVE-2018-1139 libcli/auth: Do not allow ntlmv1 over SMB1 when it is disabled via "ntlm auth"; (bso#13360); + s3-tldap: do not install test_tldap; (bso#13529); + ctdb_mutex_ceph_rados_helper: Fix deadlock via lock renewals; (bso#13540); + CVE-2018-1140 Add NULL check for ldb_dn_get_casefold() in ltdb_index_dn_attr(); (bso#13374); + ctdb-eventd: Fix CID 1438155; (bso#13554); + Fix CIDs 1438243, (Unchecked return value) 1438244 (Unsigned compared against 0), 1438245 (Dereference before null check) and 1438246 (Unchecked return value); (bso#13553); + ctdb: Fix a cut&paste error; (bso#13554); + systemd: Only start smb when network interfaces are up; (bso#13559); + Fix quotas don't work with SMB2; (bso#13553); + s3/smbd: Ensure quota code is only called when quota support detected; (bso#13563); + s3/libsmb: Explicitly set delete_on_close token for rmdir; (bso#13204); + s3:waf: Install eventlogadm to /usr/sbin; (bso#13561); + Shorten description in vfs_linux_xfs_sgid manual; (bso#13562);- Update to samba-4.9.0rc2+git.21.a1069afb007 + s3: smbd: Using "sendfile = yes" with SMB2 can cause CPU spin; (bso#13537); + s3: smbd: Fix path check in smbd_smb2_create_durable_lease_check(); (bso#13535); + samba-tool trust: Support discovery via netr_GetDcName; (bso#13538); + s4-dsdb: Only build dsdb Python modules for AD DC; (bso#13542); + Fix portability issues on freebsd; (bso#13520); + DNS wildcard search does not handle multiple labels correctly; (bso#13536); + samba-tool domain trust: Fix trust compatibility to Windows Server 1709 and FreeIPA; (bso#13308); + Fix portability issues on freebsd; (bso#13520); + ctdb-protocol: Fix CTDB compilation issues; (bso#13545); + ctdb-docs: Replace obsolete reference to CTDB_DEBUG_HUNG_SCRIPT option; (bso#13546); + ctdb-doc: Provide an example script for migrating old configuration; (bso#13550); + ctdb-event: Implement event tool "script list" command; (bso#13551);- Update to samba-4.8.4+git.37.a7a861d7982; + CVE-2018-1139: Weak authentication protocol allowed; (bsc#1095048); (bsc#13360); + CVE-2018-1140: Denial of Service Attack on DNS and LDAP server; (bsc#1095056); (bso#13466); (bso#13374); + CVE-2018-10858: Insufficient input validation on client directory listing in libsmbclient; (bsc#1103411); (bso#13453); + CVE-2018-10918: Denial of Service Attack on AD DC DRSUAPI server; (bsc#1103414); (bso#13552); + CVE-2018-10919: Confidential attribute disclosure from the AD LDAP server; (bsc#1095057); (bso#13434); + s3:winbind: winbind normalize names' doesn't work for users; (bso#12851); + winbind: Fix UPN handling in canonicalize_username(); (bso#13369); + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428); + samdb: Fix building Samba with gcc 8.1; (bso#13437); + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440); + smbd: Flush dfree memcache on service reload; (bso#13446); + ldb: Save a copy of the index result before calling the + lib/util: No Backtrace given by Samba's AD DC by default; (bso#13454). + s3: smbd: printing: Re-implement delete-on-close semantics for print files missing since 3.5.x; (bso#13457). + python: Fix talloc frame use in make_simple_acl(); (bso#13474). + krb5_wrap: Fix keep_old_entries logic for older Kerberos libraries;(bso#13478). + krb5_plugin: Add winbind localauth plugin for MIT Kerberos; (bso#13480).- Add missing package descriptions; (bsc#1093864); - Fix dependency issue between samba-python and samba-kdc; (bsc#1062876); - Call update-apparmor-samba-profile when running samba-ad-dc; (bsc#1092099);- Update to 4.8.2 + After update to 4.8.0 DC failed with "Failed to find our own NTDS Settings objectGUID" (bso#13335). + fix incorrect reporting of stream dos attributes on a directory (bso#13380). + vfs_ceph: add asynchronous fsync; fake synchronous call (bso#13412). + vfs_ceph: add fake async pwrite/pread send/recv hooks; (bso#13425) + vfs_ceph: Fix memory leak; (bso#13424). + libsmbclient: Fix hard-coded connection error return of ETIMEDOUT; (bso#13419). + s4-lsa: Fix use-after-free in LSA server; (bso#13420). + winbindd: Do re-connect if the RPC call fails in the passdb case; (bso#13430). + cleanupd: Sends MSG_SMB_UNLOCK twice to interested peers; (bso#13416). + cleanupd: Use MSG_SMB_BRL_VALIDATE to signal cleanupd unclean process shutdown; (bso#13414). + ctdb-client: Remove ununsed functions from old client code; (bso#13411). + printing: Return the same error code as windows does on upload failures; (bso#13395). + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged pipe is not accessable; (bso#13400). + s4:lsa_lookup: remove TALLOC_FREE(state) after all dcesrv_lsa_Lookup{Names,Sids}_base_map() calls; (bso#13420). + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407). + s3:smbspool: Fix cmdline argument handling; (bso#13417).- Move libdfs-server-ad-samba4.so library from kdc to libs package, as it is required by some client libs; (bsc#1074135); - Update to 4.8.1; (bsc#1091179); + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error, we don't own it here; (bso#13244); + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't support fdopendir(); (bso#13270); + Round-tripping ACL get/set through vfs_fruit will increase the number of ACE entries without limit; (bso#13319); + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit issues; (bso#13347); + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without delete access; (bso#13358); + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372); + s3: smbd: Unix extensions attempts to change wrong field in fchown call; (bso#13375); + ms_schema/samba-tool visualize: Fix python2.6 incompatibility; (bso#13337); + Fix invocation of gnutls_aead_cipher_encrypt(); (bso#13352); + Windows 10 cannot logon on Samba NT4 domain; (bso#13328); + winbindd: Recover loss of netlogon secure channel in case the peer DC is rebooted; (bso#13332); + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363); + ctdb-client: Fix bugs in client code; (bso#13356); + ctdb-scripts: Drop "net serverid wipe" from 50.samba event script; (bso#13359); + s3: lib: messages: Don't use the result of sec_init() before calling sec_init(); (bso#13368); + libads: Fix the build '--without-ads'; (bso#13273); + winbind: Keep "force_reauth" in invalidate_cm_connection, add 'smbcontrol disconnect-dc'; (bso#13332); + vfs_virusfilter: Fix CIDs 1428738-1428740; (bso#13343); + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367); + rpc_server: Fix core dump in dfsgetinfo; (bso#13370); + smbclient: Fix notify; (bso#13382); + Fix smbd panic if the client-supplied channel sequence number wraps; (bso#13215); + Windows 10 cannot logon on Samba NT4 domain; (bso#13328); + lib/util: Remove unused '#include ' from tests/tfork.c; (bso#13342); + Fix build errors with cc from developerstudio 12.5 on Solaris; (bso#13343); + Fix the picky-developer build on FreeBSD 11; (bso#13344); + s3:modules: Fix the build of vfs_aixacl2.c; (bso#13345); + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338); + lib:replace: Fix linking when libtirpc-devel overwrites system headers; (bso#13341); + winbindd: 'wbinfo --name-to-sid' returns misleading result on invalid query; (bso#13312); + s3:passdb: Do not return OK if we don't have pinfo set up; (bso#13376); + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);- Use new foreground execution flags for systemd samba daemons; (bsc#1088574); (bsc#1071090); (bsc#1065551); + Add %post scriptlet to clear old sysconfig flags - Update vendor-files to commit 880b3e7. + Set samba sysconfig template variables to "" + Add required daemon flags directly to systemd unit- Specfile cleanup + Remove %if..%endif guards which don't affect the build + Remove redundant %clean section + Replace old $RPM_* shell vars with macros- BuildRequire pkgconfig(systemd) and pkgconfig(libsystemd) in place of systemd and systemd-devel: Allow OBS to optimize the workload by allowing the usage of the 'build-optimized' systemd packages.- Enable building samba with python3, and create a samba-python3 package.- Update to 4.8 + New GUID Index mode in sam.ldb for the AD DC + GPO support for samba KDC + Time machine support with vfs_fruit + Encrypted secrets + AD Replication visualization + Improved trust support - ability to not scan global trust list - AD external trusts have limited support - verbose trusted domain listing + VirusFilter VFS module + NT4-style replication removed + vfs_aio_linux removed- Disable samba-pidl package, due to the removal of dependency perl-Parse-Yapp; (bsc#1085150);- Update to 4.7.6; + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally; (bso#11343); (bsc#1081741); + CVE-2018-1057: Authenticated users can change other users' password; (bso#13272); (bsc#1081024).- Disable python until full python3 port is done; (bsc#1082139); + Remove contents of package samba-python + Remove contents of package libsamba-policy0 + Remove contents of package libsamba-policy-devel + Remove library libsamba-python-samba4.so from samba-libs package + Remove library libsamba-net-samba4.so from samba-libs package + Remove smbtorture binary and manpage from samba-test- samba fails to build with glibc2.27; (bsc#1081042);- Update to 4.7.5; (bsc#1080545); + smbd tries to release not leased oplock during oplock II downgrade; (bso#13193); + Fix copying file with empty FinderInfo from Windows client to Samba share with fruit; (bso#13181); + build: Deal with recent glibc sunrpc header removal; (bso#10976); + Make Samba work with tirpc and libnsl2; (bso#13238); + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208); (bsc#1075206); + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue; (bso#12986); + ctdb-recovery-helper: Deregister message handler in error paths; (bso#13188); + samba: Only use async signal-safe functions in signal handler; (bso#13240); + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue; (bso#12986); + repl_meta_data: Fix linked attribute corruption on databases with unsorted links on expunge. dbcheck: Add functionality to fix the corrupt database; (bso#13228); + Fix smbd panic when chdir returns error during exit; (bso#13189); + Make Samba work with tirpc and libnsl2; (bso#13238); + Fix POSIX ACL support on HPUX and possibly other big-endian OSs; (bso#13176);- Update to 4.7.4; (bsc#1080545); + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140); + s3: libsmb: Fix valgrind read-after-free error in cli_smb2_close_fnum_recv(); (bso#13171); + s3: libsmb: Fix reversing of oldname/newname paths when creating a reparse point symlink on Windows from smbclient; (bso#13172); + Build man page for vfs_zfsacl.8 with Samba; (bso#12934); + repl_meta_data: Allow delete of an object with dangling backlinks; (bso#13095); + s4:samba: Fix default to be running samba as a deamon; (bso#13129); + Performance regression in DNS server with introduction of DNS wildcard, ldb: Release 1.2.3; (bso#13191); + vfs_zfsacl: Fix compilation error; (bso#6133); + "smb encrypt" setting changes are not fully applied until full smbd restart; (bso#13051); + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052); + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155); + winbindd: Dependency on trusted-domain list in winbindd in critical auth codepath; (bso#13173); + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120); + ctdb: sock_daemon leaks memory; (bso#13153); + TCP tickles not getting synchronised on CTDB restart; (bso#13154); + winbindd: winbind parent and child share a ctdb connection; (bso#13150); + pthreadpool: Fix deadlock; (bso#13170); + pthreadpool: Fix starvation after fork; (bso#13179); + messaging: Always register the unique id; (bso#13180); + s4/smbd: set the process group; (bso#13129); + Fix broken linked attribute handling; (bso#13095); + The KDC on an RWDC doesn't send error replies in some situations; (bso#13132); + libnet_join: Fix 'net rpc oldjoin'; (bso#13149); + g_lock conflict detection broken when processing stale entries; (bso#13195); + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired sessions; (bso#13197); + s3:libads: net ads keytab list fails with "Key table name malformed"; (bso#13166); (bsc#1067700); + Fix crash in pthreadpool thread after failure from pthread_create; (bso#13170); + s4:samba: Allow samba daemon to run in foreground; (bso#13129); (bsc#1065551); + third_party: Link the aesni-intel library with "-z noexecstack"; (bso#13174); + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I" options; (bso#13125);- Re-enable usage of libnsl (did got lost with glibc change) - Use TI-RPC (sunrpc is deprecated and will be removed soon from glibc)- smbc_opendir should not return EEXIST with invalid login credentials; (bnc#1065868).- Update to 4.7.3; (bsc#1069666); + Non-smbd processes using kernel oplocks can hang smbd; (bso#13121); + python: use communicate to fix Popen deadlock; (bso#13127); + smbd on disk file corruption bug under heavy threaded load; (bso#13130); + tevent: version 0.9.34; (bso#13130); + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118); + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug; (bsc#1060427);(bso#13041); + CVE-2017-15275: s3: smbd: Chain code can return uninitialized memory when talloc buffer is grown; (bsc#1063008); (bso#13077); - Build with AD DC support only in openSUSE.- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- samba-tool requires samba-python; (bnc#1067771).- Run all daemons in the foreground and let systemd handle it; (bsc#1065551). - Update to 4.7.1; + Fix exporting subdirs with shadow_copy2; (bso#13091); + Currently if getwd() fails after a chdir(), we panic; (bso#13027); + Ensure default SMB_VFS_GETWD() call can't return a partially completed struct smb_filename; (bso#13068); + sys_getwd() can leak memory or possibly return the wrong errno on older systems; (bso#13069); + smbclient doesn't correctly canonicalize all local names before use; (bso#13093); + Fix broken linked attribute handling; (bso#13095); + Missing LDAP query escapes in DNS rpc server; (bso#12994); + Link to -lbsd when building replace.c by hand; (bso#13087); + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem; (bso#6133); + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module; (bso#7909); + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module; (bso#7933); + Missing assignment in sl_pack_float; (bso#12991); + Wrong Samba access checks when changing DOS attributes; (bso#12995); + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062); + groupmap cleanup should not delete BUILTIN mappings; (bso#13065); + Enabling vfs_fruit results in loss of Finder tags and other xattrs; (bso#13076); + man pages: Properly ident lists; (bso#9613); + smb.conf.5: Sort parameters alphabetically; (bso#13081); + Fix GUID string format on GetPrinter info; (bso#12993); + Remote serverid check doesn't check for the unique id; (bso#13042); + CTDB starts consuming memory if there are dead nodes in the cluster; (bso#13056); + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070); + libgpo doesn't sort the GPOs in the correct order; (bso#13046); + Remote serverid check doesn't check for the unique id; (bso#13042); + vfs_catia: Fix a potential memleak; (bso#13090); + Fix file change notification for renames; (bso#12903); + Samba DNS server does not honour wildcards; (bso#12952); + Can't change password in samba from a Windows client if Samba runs on IPv6 only interface; (bso#13079); + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086); + Apple client can't cope with SMB2 async replies when creating symlinks; (bso#13047); + s4:rpc_server:backupkey: Move variable into scope; (bso#12959); + Fix ntstatus_gen.h generation on 32bit; (bso#13099); + Fix a double free in vfs_gluster_getwd(); (bso#13100); + Fix resouce leaks and pointer issues; (bso#13101); + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);- Add samba-kdc to baselibs.conf. - Do not wrap samba-kdc's package definition into if/endif: the package won't be generated simply based on the fact that there is no files section for the package. Allows the source validator to ensure samba-kdc is a built package.- Update to 4.7.0; + Whole DB read locks: Improved LDAP and replication consistency; (bso#12858). + Samba AD with MIT Kerberos + Dynamic RPC port range: Default range changed from "1024-1300" to "49152-65535". + Authentication and Authorization audit support: New auth_audit debug class. + Multi-process LDAP Server: The LDAP server in the AD DC now honours the process model used for the rest of the 'samba' process. + Improved Read-Only Domain Controller (RODC) Support; (bso#12977). + Additional password hashes stored in supplementalCredentials. + Improvements to DNS during Active Directory domain join. + Significant AD performance and replication improvements. + Query record for open file or directory. + Removal of lpcfg_register_defaults_hook(). + Change of loadable module interface. + SHA256 LDAPS Certificates: The self-signed certificate generated for use on LDAPS will now be generated with a SHA256 self-signature, not a SHA1 self-signature. + CTDB no longer allows mixed minor versions in a cluster. + CTDB now ignores hints from Samba about TDB flags when attaching to databases. + New configuration variable CTDB_NFS_CHECKS_DIR. + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed. + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed. + The example NFS Ganesha call-out has been improved. + A new "replicated" database type is available.- CVE-2017-12163: Prevent client short SMB1 write from writing server memory to file; (bso#13020); (bsc#1058624).- CVE-2017-12150: Some code path don't enforce smb signing, when they should; (bso#12997); (bsc#1058622).- CVE-2017-12151: Keep required encryption across SMB3 dfs redirects; (bso#12996); (bsc#1058565).- Clean specfile assuming SUSE-only system and product >=SLE11 + %{ul_version}, %{rhel_version}, %{mandriva_version}, %{centos_version} are always undefined + %{_vendor} is "suse" and %{suse_version} is at least 1100- Update to 4.6.7; (bsc#1054017) + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392). + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937). + vfs_ceph provides inconsistent directory listings; (bso#12911). + Misused talloc context can cause a user to crash their smbd by chaining SMB1 commands.; (bso#12836). + Use-after free can crash libsmbclient code.; (bso#12927). + Server exit with active AIO can crash.; (bso#12925). + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910). + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs; (bso#12898). + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897). + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for authentication; (bso#12886). + finder sidebar showing question mark instead of icon when using ip to connect with vfs_fruit; (bso#12840). + Winbind stops obtaining the 'unixHomeDirectory' & 'loginShell' attributes from AD.; (bso#12720). + KCC run at selftest startup can fail spuriously due to a race; (bso#12869). + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for the remote change; (bso#12782). + rpc_pipe_client memory leaks due to long term memory context passed to rpc_pipe_open_interface(); (bso#12890). + CVE-2017-2619 breaks accessing previous versions of directories with snapshots in subdirectories of the share; (bso#12885). + dns_name_equal doing OOB read; (bso#12813). + replica_sync tests flap; (bso#12753). + Selftest should not call 'net cache flush' and wipe important winbind entries; (bso#12868). + Old Samba versions don't support using recent ldb versions (>=1.1.30); (bso#12859). + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490). + race starting winbindd against posixacl test; (bso#12843). + Crash in the reentrant smbd_smb2_create_send() if the something fails in the subsequent try; (bso#12832). + spnego.c passes the wrong argument order to gensec_update_ev() for the FALLBACK case; (bso#12788). + Clients with SMB3 support can't connect with "server max protocol = SMB2_02"; (bso#12772). + A log message of samb-tool user syncpasswords reverses string arguments in a debug message "Call Popen[...".; (bso#12768). + The smb tarmode tests kills the share dir contents; (bso#12867). + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862). + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860). + manpage/index.html lists links not in alphabetical order; (bso#12854). + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831). + If a record is locked in a database, then recovery does not complete; (bso#12857). + debug_locks.sh script does not log any information; (bso#12856). + SIGSEGV in cm_connect_lsa_tcp dereferencing conn->lsa_tcp_pipe->transport after error; (bso#12852). + smbclient can't parse DOMAIN+username if a different winbind separator is used; (bso#12849). + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845). + Related requests with TreeConnect fail with NETWORK_NAME_DELETED; (bso#12844). + cli->server_os not filled correctly; (bso#12779). + REGRESSION: smbclient doesn't print the session setup anymore; (bso#12824). + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808). + CTDB NFS call-out failures do not cause event failures; (bso#12837). + net command fails due to incorrectly return code; (bso#12828). + Fix building Samba with GCC 7.1; (bso#12827).- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again; (bsc#1048339).- fix cephwrap_chdir(); (bsc#1048790). - Update to 4.6.6 + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation; (bsc#1048278).- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).- Fix inconsistent ctdb socket path; (bsc#1048352). - Fix non-admin cephx authentication; (bsc#1048387).- Update to 4.6.5; (bsc#1040157) + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at startup; (bso#12814). + vfs_expand_msdfs tries to open the remote address as a file path; (bso#12687). + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type); (bso#12798). + With clustering get update_num_read_oplocks failed and PANIC: num_share_modes == 1 assertion failure; (bso#11844). + contend_level2_oplocks_begin_default oplock optimisation doesn't carry over to leases; (bso#12766). + `ctdb nodestatus` incorrectly displays status for all nodes with wrong exit code; (bso#12802). + CTDB can spin hard on revoking readonly delegations if a node becomes disconnected; (bso#12697). + Printing a share mode entry with leases can crash in the ndr code; (bso#12793). + Fix flakey unit tests for eventd; (bso#12792). + CTDB daemon crashes if built with clang; (bso#12770). + smbcacls fails if no password is specified; (bso#12765). + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757). + samba-tool user syncpasswords doesn't trigger the script when a user gets removed; (bso#12767). + systemd: fix detection of libsystemd; (bso#12764). + Notify subsystem only maps first inotify mask to Windows notify filter; (bso#12760). + Allow passing trusted domain password as plain-text to PASSDB layer; (bso#12751). + Can't case-rename files with vfs_fruit; (bso#12749). + wrong sid->uid mapping for SIDs residing in sIDHistory; (bso#12702). + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562). + Ordering of notify responses broken; (bso#12756).- s3: libsmb: Fix error where short name length was read as 2 bytes, should be 1; (bso#11822); (bsc#1042419).- Revert explicit winbind %{version}-%{release} dependency. + The ABI has stabilized since (bsc#936909), so remove to fix cross-media dependencies; (bsc#1037899).- Fix CVE-2017-7494 remote code execution from a writable share; (bso#12780); (bsc#1038231).- Update to 4.6.3; (bsc#1036011) + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots from shares with GlusterFS backend; (bso#12743). + Fix for Solaris C compiler; (bso#12559). + s3: locking: Update oplock optimization for the leases era; (bso#12628). + Make the Solaris C compiler happy; (bso#12693). + s3: libgpo: Allow skipping GPO objects that don't have the expected LDAP attributes; (bso#12695). + Fix buffer overflow caused by wrong use of getgroups; (bso#12747). + lib: debug: Avoid negative array access; (bso#12746). + cleanupdb: Fix a memory read error; (bso#12748). + streams_xattr and kernel oplocks results in NT_STATUS_NETWORK_BUSY; (bso#7537). + winbindd: idmap_autorid allocates ids for unknown SIDs from other backends; (bso#11961). + vfs_fruit: Resource fork open request with flags=O_CREAT|O_RDONLY; (bso#12565). + manpages/vfs_fruit: Document global options; (bso#12615). + lib/pthreadpool: Fix a memory leak; (bso#12624). + Lookup-domain for well-known SIDs on a DC; (bso#12727). + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728). + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729). + credentials_krb5: use gss_acquire_cred for client-side GSSAPI use case; (bso#12611). + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690). + ctdb-readonly: Avoid a tight loop waiting for revoke to complete; (bso#12697). + ctdb_event monitor command crashes if event is not specified; (bso#12723). + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733). + smbd: Fix smb1 findfirst with DFS; (bso#12558). + smbd: Do an early exit on negprot failure; (bso#12610). + winbindd: Fix substitution for 'template homedir'; (bso#12699). + s4:kdc: Disable principal based autodetected referral detection; (bso#12554). + idmap_autorid: Allocate new domain range if the callers knows the sid is valid; (bso#12613). + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724). + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for trusted domain; (bso#12725). + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731). + winbindd: Fix password policy for pam authentication; (bso#12725). + s3:gse: Correctly handle external trusts with MIT; (bso#12554). + auth/credentials: Always set the realm if we set the principal from the ccache; (bso#12611). + replace: Include sysmacros.h; (bso#12686). + s3:vfs_expand_msdfs: Do not open the remote address as a file; (bso#12687). + s3:libsmb: Only print error message if kerberos use is forced; (bso#12704). + winbindd: Child process crashes when kerberos-authenticating a user with wrong password; (bso#12708). + vfs_fruit: Office document opens as read-only on macOS due to CNID semantics; (bso#12715). + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is fragmented; (bso#12737).- Generate and update vendor-files tarball from Git + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).- Generate source tarball directly from Git using OBS tar_scm + use version string derived from parent Git tag and commit hash - remove obsolete vendor-files/tools/package-data version ID + explicitly generate ctdb manpages, needed without "make dist"- Update to 4.6.2 + remove bso#12721 patches now upstream- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622). + x86-64 and aarch64- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).- Build and install the html man pages (bsc#1021907).- Fix CVE-2017-2619 regression with "follow symlinks = no"; (bso#12721).- Update to 4.6.1 + symlink race permits opening files outside share directory; CVE-2017-2619; (bso#12496); (bsc#1027147) + testparm checks for valid idmap parameters + add new krb client encryption types + support for printer driver upload from windows 10 + inherit owner = 'unix only' for improved quota support + improved CTDB event support + new primary group support for idmap_ad + idmap_hash deprecated + mvxattr added to recursively rename extended attributes- Remove chkconfig requirements for systemd systems- Don't call insserv if systemd is used- Fix check if we need to require insserv- async_req: make async_connect_send() "reentrant"; (bso#12105); (bsc#1024416).- Force usage of ncurses6-config thru NCURSES_CONFIG env var; (bsc#1023847).- add missing patch for libnss_wins segfault; (bsc#995730).- Fix vfs_ceph builds against recent Ceph versions; (bsc#1021933).- Document "winbind: ignore domains" parameter; (bsc#1019416).- Add base Samba dependency to samba-ceph package.- Update to 4.5.3 + Heap-based Buffer Overflow Remote Code Execution Vulnerability; CVE-2016-2123; (bso#12409); (bsc#1014437). + Don't send delegated credentials to all servers; CVE-2016-2125; (bso#12445); (bsc#1014441). + denial of service due to a client triggered crash in the winbindd parent process; CVE-2016-2126; (bso#12446); (bsc#1014442). - 4.5.1 and 4.5.2 updates + various streams vfs fixes + various printing fixes + ntlm_auth: do not map explicitly empty domain + various stability fixes in smbd + match file compression ReFS behavior- Add missing ldb module directory; (bnc#1012092).- s3/client: obey 'disable netbios' smb.conf param, don't connect via NBT port; (bsc#1009085); (bso#12418).- Include vfstest in samba-test; (bsc#1001203).- s3/winbindd: using default domain with user@domain.com format fails; (bsc#997833).- Fix segfault in libnss_wins; (bso#12277); (bso#12269); (bsc#995730).- Update to 4.5.0 + NTLM1 Authentication disabled by default + SMB2.1 leases enabled by default + Support for OFD locks + ctdb tool rewritten + Added shadow copy snapshot prefix parameter- Fix illegal memory access after memory has been deleted; (bso#11836); (bsc#975299).- Prevent core, make sure response->extra_data.data is always cleared out; (bsc#993692).- Don't package man pages for VFS modules that aren't built; (boo#993707).- Fix population of ctdb sysconfig after source merge; (bsc#981566).- Enable vfs_ceph builds for Factory (x86-64) + Package as samba-ceph to avoid Ceph dependency in base package.- Update to 4.4.5 + Prevent client-side SMB2 signing downgrade; CVE-2016-2119; (bso#11860); (bsc#986869).- Remove obsolete syslog.target; (bsc#983938).- Honor smb.conf socket options in winbind; (bsc#975131).- Don't use htons() with IP_PROTO_RAW; (bso#11705); (bsc#969522).- Update to 4.4.4 + SMB3 multichannel: Add implementation of missing channel sequence number verification; (bso#11809). + smbd:close: Only remove kernel share modes if they had been taken at open; (bso#11919). + notifyd: Prevent NULL deref segfault in notifyd_peer_destructor; (bso#11930). + s3:rpcclient: Make '--pw-nt-hash' option work; (bso#10796). + Fix case sensitivity issues over SMB2 or above; (bso#11438). + s3:smbd: Fix anonymous authentication if signing is mandatory. (bso#11910) + Fix NTLM Authentication issue with squid; (bso#11914). + pdb: Fix segfault in pdb_ldap for missing gecos; (bso#11530). + Fix memory leak in share mode locking; (bso#11934).- Update to 4.4.3 + Various post-badlock regressions; (bso#11841); (bso#11850); (bso#11858); (bso#11870); (bso#11872). + Only allow idmap_hash for default idmap config (bso#11786). + smbd: Avoid large reads beyond EOF; (bso#11878). + vfs_acl_common: Avoid setting POSIX ACLs if "ignore system acls" is set; (bso#11806). + libads: Record session expiry for spnego sasl binds; (bso#11852).- Fix NTLMSSP regressions caused by previous CVE fixes; (bso#11849); (bsc#975962); (bsc#979268), (bsc#977669).- Revert shared library packaging to comply with SLPP- Update to 4.4.2 + A man-in-the-middle can downgrade NTLMSSP authentication; CVE-2016-2110; (bso#11688); (bsc#973031). + Domain controller netlogon member computer can be spoofed; CVE-2016-2111; (bso#11749); (bsc#973032). + LDAP conenctions vulnerable to downgrade and MITM attack; CVE-2016-2112; (bso#11644); (bsc#973033). + TLS certificate validation missing; CVE-2016-2113; (bso#11752); (bsc#973034). + Named pipe IPC vulnerable to MITM attacks; CVE-2016-2115; (bso#11756); (bsc#973036). + "Badlock" DCERPC impersonation of authenticated account possible; CVE-2016-2118; (bso#11804); (bsc#971965). + DCERPC server and client vulnerable to DOS and MITM attacks; CVE-2015-5370; (bso#11344); (bsc#936862).- Fix samba.tests.messaging test and prevent potential tdb corruption by removing obsolete now invalid tdb_close call; (bsc#974629).- Obsolete libsmbclient from libsmbclient0 while not providing it; (bsc#972197).- Update to 4.4.0. + Read of uninitialized memory DNS TXT handling; (bso#11128); (bso#11686); CVE-2016-0771. + Getting and setting Windows ACLs on symlinks can change permissions on link target; (bso#11648); CVE-2015-7560. + Sockets with htons(IPPROTO_RAW); (bso#11705); CVE-2015-8543. + s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystem with no ACL support; (bso#10489). + docs: Add example for domain logins to smbspool man page; (bso#11643). + smbd: Show correct disk size for different quota and dfree block sizes; (bso#11681). + docs: Add smbspool_krb5_wrapper manpage; (bso#11690). + winbindd: Return trust parameters when listing trusts; (bso#11691). + ctdb: Do not provide a useless pkgconfig file for ctdb; (bso#11696). + Crypto.Cipher.ARC4 is not available on some platforms, fallback to M2Crypto.RC4.RC4 then; (bso#11699). + s3:utils/smbget: Set default blocksize; (bso#11700). + Streamline 'smbget' options with the rest of the Samba utils; (bso#11700). + s3:clispnego: Fix confusing warning in spnego_gen_krb5_wrap(); (bso#11702). + s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703). + loadparm: Fix memory leak issue; (bso#11708). + lib/tsocket: Work around sockets not supporting FIONREAD; (bso#11714). + s3:vfs:glusterfs: Fix build after quota changes; (bso#11715). + ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ..."; (bso#11719). + lib:socket: Fix CID 1350010: Integer OVERFLOW_BEFORE_WIDEN; (bso#11723). + smbd: Fix CID 1351215 Improper use of negative value; (bso#11724). + smbd: Fix CID 1351216 Dereference null return value; (bso#11725). + s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new file; (bso#11727). + docs: Add manpage for cifsdd; (bso#11730). + param: Fix str_list_v3 to accept ; again; (bso#11732). + lib/socket: Fix improper use of default interface speed; (bso#11734). + lib:socket: Fix CID 1350009: Fix illegal memory accesses (BUFFER_SIZE_WARNING); (bso#11735). + libcli: Fix debug message, print sid string for new_ace trustee; (bso#11738). + Fix installation path of Samba helper binaries; (bso#11739). + Fix memory leak in loadparm; (bso#11740). + tevent: version 0.9.28: Fix memory leak when old signal action restored; (bso#11742). + smbd: Ignore SVHDX create context; (bso#11753). + Fix net join; (bso#11755). + s3:libads: setup the msDS-SupportedEncryptionTypes attribute on ldap_add; (bso#11755). + passdb: Add linefeed to debug message; (bso#11763). + s3:utils/smbget: Fix option parsing; (bso#11767). + libnet: Make Kerberos domain join site-aware; (bso#11769). + Reset TCP Connections during IP failover; (bso#11770). + ldb: Version 1.1.26; (bso#11772). + s3:smbd: Add negprot remote arch detection for OSX; (bso#11773). + vfs_glusterfs: Fix use after free in AIO callback; (bso#11774). + mkdir can return ACCESS_DENIED incorrectly on create race; (bso#11780). + "trustdom_list_done: Got invalid trustdom response" message should be avoided; (bso#11782). + Mismatch between local and remote attribute ids lets replication fail with custom schema; (bso#11783). + Quota is not supported on Solaris 10; (bso#11788). + Talloc: Version 2.1.6; (bso#11789). + smbd: Enable multi-channel if 'server multi channel support = yes' in the config; (bso#11796). + build: Fix build when '--without-quota' specified; (bso#11798). + lib/socket/interfaces: Fix some uninitialied bytes; (bso#11802). + Access based share enum: handle permission set in configuration files; (bso#8093). + See also WHATSNEW.txt from the samba-doc package.- Update to 4.3.6. + Getting and setting Windows ACLs on symlinks can change permissions on link target; CVE-2015-7560; (bso#11648); (bsc#968222). + Fix Out-of-bounds read in internal DNS server; CVE-2016-0771; (bso#11128); (bso#11686); (bsc#968223).- Upgrade on-disk FSRVP server state to new version; (bsc#924519).- Only obsolete but do not provide gplv2/3 package names; (bsc#968973).- Relocate existing lock files to /var/lib/samba/lock; (bsc#968963).- Obsolete no longer existing samba-32bit package; (bsc#967625).- Update to 4.3.5. + s3:utils/smbget: Fix recursive download; (bso#6482). + s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystemi with no ACL support; (bso#10489). + s3:smbd/oplock: Obey kernel oplock setting when releasing oplocks; (bso#11400). + vfs_shadow_copy2: Fix case where snapshots are outside the share; (bso#11580). + smbclient: Query disk usage relative to current directory; (bso#11662). + winbindd: Handle expired sessions correctly; (bso#11670). + smbd: Show correct disk size for different quota and dfree block sizes; (bso#11681). + smbcacls: Fix uninitialized variable; (bso#11682). + s3:smbd: Ignore initial allocation size for directory creation; (bso#11684). + s3-client: Add a KRB5 wrapper for smbspool; (bso#11690). + s3-parm: Clean up defaults when removing global parameters; (bso#11693). + Use M2Crypto.RC4.RC4 on platforms without Crypto.Cipher.ARC4; (bso#11699). + s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703). + ctdb: Remove error messages after kernel security update; CVE-2015-8543; (bso#11705). + loadparm: Fix memory leak issue; (bso#11708). + lib/tsocket: Work around sockets not supporting FIONREAD; (bso#11714). + ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ..."; (bso#11719). + s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new file; (bso#11727). + param: Fix str_list_v3 to accept ";" again; (bso#11732).- Shift samba-client sysconfig data into samba and samba-winbind; (bsc#947361).- Simplify shared library packaging; (bsc#966956).- Enable clustering (CTDB) support; (bsc#966271).- s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703); (bsc#964023).- Add quotes around path of update-apparmor-samba-profile; (bnc#962177).- Remove autoconf build-time requirement.- Update to 4.3.4. + vfs_fruit: Enable POSIX directory rename semantics; (bso#11065). + Crash: Bad talloc magic value - access after free; (bso#11394). + Copying files with vfs_fruit fails when using vfs_streams_xattr without stream prefix and type suffix; (bso#11466). + samba-tool: Fix uncaught exception if no fSMORoleOwner attribute is given; (bso#11613). + Fix a typo in the smb.conf manpage, explanation of idmap config; (bso#11619). + Correctly initialize the list head when keeping a list of primary followed by DFS connections; (bso#11624). + Reduce the memory footprint of empty string options; (bso#11625). + lib/async_req: Do not install async_connect_send_test; (bso#11639). + Fix typos in man vfs_gpfs; (bso#11641). + Make "hide dot files" option work with "store dos attributes = yes"; (bso#11645). + Fix a corner case of the symlink verification; (bso#11647); (bnc#960249). + Do not disable "store dos attributes" on-the-fly; (bso#11649). + Update lastLogon and lastLogonTimestamp; (bso#11659).- Prevent access denied if the share path is "/"; (bso#11647); (bnc#960249).- Update to 4.3.3. + Malicious request can cause Samba LDAP server to hang, spinning using CPU; CVE-2015-3223; (bso#11325); (bnc#958581). + Remote read memory exploit in LDB; CVE-2015-5330; (bso#11599); (bnc#958586). + Insufficient symlink verification (file access outside the share); CVE-2015-5252; (bso#11395); (bnc#958582). + No man in the middle protection when forcing smb encryption on the client side; CVE-2015-5296; (bso#11536); (bnc#958584). + Currently the snapshot browsing is not secure thru windows previous version (shadow_copy2); CVE-2015-5299; (bso#11529); (bnc#958583). + Fix Microsoft MS15-096 to prevent machine accounts from being changed into user accounts; CVE-2015-8467; (bso#11552); (bnc#958585).- Update to 4.3.2. + vfs_gpfs: Re-enable share modes; (bso#11243). + dcerpc.idl: Accept invalid dcerpc_bind_nak pdus; (bso#11327). + s3-smbd: Fix old DOS client doing wildcard delete - gives an attribute type of zero; (bso#11452). + Add libreplace dependency to texpect, fixes a linking error on Solaris; (bso#11511). + s4: Fix linking of 'smbtorture' on Solaris; (bso#11512). + s4:lib/messaging: Use correct path for names.tdb; (bso#11562). + Fix segfault of 'net ads (join|leave) -S INVALID' with nss_wins; (bso#11563). + async_req: Fix non-blocking connect(); (bso#11564). + auth: gensec: Fix a memory leak; (bso#11565). + lib: util: Make non-critical message a warning; (bso#11566). + Fix winbindd crashes with samlogon for trusted domain user; (bso#11569); (bnc#949022). + smbd: Send SMB2 oplock breaks unencrypted; (bso#11570). + ctdb: Open the RO tracking db with perms 0600 instead of 0000; (bso#11577). + s3:smb2_server: Make the logic of SMB2_CANCEL DLIST_REMOVE() clearer; (bso#11581). + s3-smbd: Fix use after issue in smbd_smb2_request_dispatch(); (bso#11581). + manpage: Correct small typo error; (bso#11584). + s3: smbd: If EAs are turned off on a share don't allow an SMB2 create containing them; (bso#11589). + Backport some valgrind fixes from upstream master; (bso#11597). + auth: Consistent handling of well-known alias as primary gid; (bso#11608). + winbind: Fix crash on invalid idmap configs; (bso#11612). + s3: smbd: have_file_open_below() fails to enumerate open files below an open directory handle; (bso#11615). + Changing log level of two entries to DBG_NOTICE; (bso#9912).- Ensure samlogon fallback requests are rerouted after kerberos failure; (bnc#953382); (bnc#953972).- Ensure to link with --as-needed flag by removing SUSE_ASNEEDED=0. - Always use the default optimization even on pre-9.2 systems.- Remove redundant configure options while adding with-relro.- Relocate the lockdir to the /var/lib/samba/lock directory.- Cleanup and enhance the pidl sub package.- Require renamed python-ldb-devel and python-talloc-devel at build-time. - Requires python-ldb and python-talloc from the python subpackage.- Update to 4.3.1. + s3: smbd: Fix our access-based enumeration on "hide unreadable" to match Windows; (bso#10252). + nss_winbind: Fix hang on Solaris on big groups; (bso#10365). + smbd: Fix file name buflen and padding in notify repsonse; (bso#10634). + kerberos: Make sure we only use prompter type when available; winbind: Fix 100% loop; (bso#11038). + source3/lib/msghdr.c: Fix compiling error on Solaris; (bso#11053). + s3:ctdbd_conn: make sure we destroy tevent_fd before closing the socket; (bso#11316). + s3: smbd: Fix mkdir race condition; (bso#11486). + pam_winbind: Fix a segfault if initialization fails; (bso#11502). + s3: dfs: Fix a crash when the dfs targets are disabled; (bso#11509). + s4:lib/messaging: Use 'msg.lock' and 'msg.sock' for messaging related subdirs; (bso#11515). + s3: smbd: Fix opening/creating :stream files on the root share directory; (bso#11522). + lib/param: Fix hiding of FLAG_SYNONYM values; (bso#11526). + net: Fix a crash with 'net ads keytab create'; (bso#11528). + s3: smbd: Fix a crash in unix_convert(); (bso#11535). + s3: smbd: Fix NULL pointer bug introduced by previous 'raw' stream fix (bso#11522); (bso#11535). + vfs_fruit: Return value of ad_pack in vfs_fruit.c; (bso#11543). + vfs_commit: set the fd on open before calling SMB_VFS_FSTAT; (bso#11547). + s3:locking: Initialize lease pointer in share_mode_traverse_fn(); (bso#11549). + s3:smbstatus: Add stream name to share_entry_forall(); (bso#11550). + s3:lib: Validate domain name in lookup_wellknown_name(); (bso#11555). + s3: lsa: lookup_name() logic for unqualified (no DOMAIN component) names is incorrect; (bso#11555).- Fix 100% CPU in winbindd when logging in with "user must change password on next logon"; (bso#11038).- Relocate the tmpfiles.d directory to the client package; (bnc#947552).- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf instead; (bnc#942716).- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).- Package /var/lib/samba/msg with 0755 permissions; (bso#11515); (bnc#945502).- Require to install libfam0-gamin from samba-libs on post-12.1 and pre-13.15 systems; (bnc#945013).- Update to 4.3.0. + Samba "map to guest = Bad uid" doesn't work; (bso#9862). + revert LDAP extended rule 1.2.840.113556.1.4.1941 LDAP_MATCHING_RULE_IN_CHAIN changes; (bso#10493). + No objectClass found in replPropertyMetaData on ordinary objects (non-deleted); (bso#10973). + Stream names with colon don't work with fruit:encoding = native; (bso#11278). + NetApp joined to a Samba/ADDC cannot resolve SIDs; (bso#11291). + tevent_fd needs to be destroyed before closing the fd; (bso#11316). + "force group" with local group not working; (bso#11320). + strsep is not available on Solaris; (bso#11359). + smbtorture does not build when configured --with-system-mitkrb5; (bso#11411). + Build with GPFS support is broken; (bso#11421). + Build broken with --disable-python; (bso#11424). + net share allowedusers crashes; (bso#11426). + nmbd incorrectly matches netbios names as own name; (bso#11427). + Python bindings don't check integer types; (bso#11429). + Python bindings don't check array sizes; (bso#11430). + CTDB's eventscript error handling is broken; (bso#11431). + Fix crash in nested ctdb banning; (bso#11432). + Cannot build ctdbpmda; (bso#11434). + samba-tool uncaught exception error; (bso#11436). + Crash in notify_remove caused by change notify = no; (bso#11444). + Poor SMB3 encryption performance with AES-GCM; (bso#11451). + Poor SMB3 encryption performance with AES-GCM (part1); (bso#11451). + fix recursion problem in rep_strtoll in lib/replace/replace.c; (bso#11455). + --bundled-libraries=!ldb,!pyldb,!pyldb-util doesn't disable ldb build and install; (bso#11458). + xid2sid gives inconsistent results; (bso#11464). + ctdb: Fix the build on FreeBSD 10.1; (bso#11465). + Handling of 0 byte resource fork stream; (bso#11467). + AD samr GetGroupsForUser fails for users with "()" in their name; (bso#11488).- Configure with --bundled-libraries=NONE; (bso#11458).- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).- Remove libiniparser-devel build-time requirement.- Update to 4.2.3. + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780). + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924). + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991). + Logon via MS Remote Desktop hangs; (bso#11061). + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068). + tevent: Add a note to tevent_add_fd(); (bso#11141). + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170). + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217). + smbd: Fix a use-after-free; (bso#11218); (bnc#919309). + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces; (bso#11245). + s3:smb2: Add padding to last command in compound requests; (bso#11277). + Add IPv6 support to ADS client side LDAP connects; (bso#11281). + Add IPv6 support for determining FQDN during ADS join; (bso#11282). + s3: IPv6 enabled DNS connections for ADS client; (bso#11283). + Fix invalid write in ctdb_lock_context_destructor; (bso#11293). + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295). + vfs_fruit: Add option "veto_appledouble"; (bso#11305). + tstream: Make socketpair nonblocking; (bso#11312). + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313). + Group creation: Add msSFU30Name only when --nis-domain was given; (bso#11315). + tevent_fd needs to be destroyed before closing the fd; (bso#11316). + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared"; (bso#11319). + smbd/trans2: Add a useful diagnostic for files with bad encoding; (bso#11323). + Change sharesec output back to previous format; (bso#11324). + Robust mutex support broken in 1.3.5; (bso#11326). + Kerberos auth info3 should contain resource group ids available from pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info exists in PAC; (bso#11328); (bnc#912457). + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329). + tevent: Fix CID 1035381 Unchecked return value; (bso#11330). + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331). + s3: smbd: Use separate flag to track become_root()/unbecome_root() state; (bso#11339). + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342). + pidl: Make the compilation of PIDL producing the same results if the content hasn't change; (bso#11356). + winbindd: Disconnect child process if request is cancelled at main process; (bso#11358). + vfs_fruit: Check offset and length for AFP_AfpInfo read requests; (bso#11363). + docs: Overhaul the description of "smb encrypt" to include SMB3 encryption; (bso#11366). + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server(); (bso#11367). + ncacn_http: Fix GNUism; (bso#11371).- Disable rpath usage; (bnc#902421).- Make the winbind package depend on the matching libwbclient version and vice versa; (bnc#936909).- Backport changes to use resource group sids obtained from pac logon_info; (bso#11328); (bnc#912457).- Order winbind.service Before and Want nss-user-lookup target.- Remove fam-devel build-time dependency for post-6 RHEL systems.- Update to 4.2.2. + s3:smbXsrv: refactor duplicate code into smbXsrv_session_clear_and_logoff(); (bso#11182). + gencache: don't fail gencache_stabilize if there were records to delete; (bso#11260). + s3: libsmbclient: After getting attribute server, ensure main srv pointer is still valid; (bso#11186). + s4: rpc: Refactor dcesrv_alter() function into setup and send steps; (bso#11236). + s3: smbd: Incorrect file size returned in the response of "FILE_SUPERSEDE Create"; (bso#11240). + Mangled names do not work with acl_xattr; (bso#11249). + nmbd rewrites browse.dat when not required; (bso#11254). + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff; (bso#11213). + s3:smbd: Add missing tevent_req_nterror; (bso#11224). + vfs: kernel_flock and named streams; (bso#11243). + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244). + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses are used; (bso#11284). + ctdb: check for talloc_asprintf() failure; (bso#11201). + spoolss: purge the printer name cache on name change; (bso#11210); (bnc#901813). + CTDB statd-callout does not scale; (bso#11204). + vfs_fruit: also map characters below 0x20; (bso#11221). + ctdb: Coverity fix for CID 1291643; (bso#11201). + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225). + Fix terminate connection behavior for asynchronous endpoint with PUSH notification flavors; (bso#11226). + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007). + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201). + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the directory is deleted; (bso#11257). + s3:winbindd: make sure we remove pending io requests before closing client sockets; (bso#11141); (bnc#931854). + Fix panic triggered by smbd_smb2_request_notify_done() -> smbXsrv_session_find_channel() in smbd; (bso#11182). + 'sharesec' output no longer matches input format; (bso#11237). + waf: Fix systemd detection; (bso#11200). + CTDB: Fix portability issues; (bso#11202). + CTDB: Fix some IPv6-related issues; (bso#11203). + CTDB statd-callout does not scale; (bso#11204). + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you enter invalid values; (bso#11234). + libads: record service ticket endtime for sealed ldap connections; (bso#11267). + lib/util: Include DEBUG macro in internal header files before samba_util.h; (bso#11033).- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).- Remove the independently built libraries ldb, talloc, tdn, and tevent and the post-10.3 renamed libsmbclient from baselibs.conf.- Drop redundant doc attribute from man pages.- Update to 4.2.1. + s3:winbind:grent: Don't stop group enumeration when a group has no gid; (bso#8905). + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791). + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with servers that don't send the 2 unused fields; (bso#10016). + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476). + waf: Fix the build on openbsd; (bso#10476). + s3: client: "client use spnego principal = yes" code checks wrong name; (bso#10888). + spoolss: Retrieve published printer GUID if not in registry; (bso#11018). + s3: lib: libsmbclient: If reusing a server struct, check every cli->timout miliseconds if it's still valid before use; (bso#11079). + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125). + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135). + replace: Remove superfluous check for gcrypt header; (bso#11135). + Backport subunit changes; (bso#11137). + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with implementation; (bso#11140). + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143). + talloc: Version 2.1.2; (bso#11144). + Update libwbclient version to 0.12; (bso#11149). + brlock: Use 0 instead of empty initializer list; (bso#11153). + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164). + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169); (bnc#913304). + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev fails in the SMB1 case; (bso#11173). + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174). + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175). + s3: libsmbclient: Add missing talloc stackframe; (bso#11177). + s4-process_model: Do not close random fds while forking; (bso#11180). + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).- Prevent samba package updates from disabling samba kerberos printing.- Add sparse file support for samba; (fate#318424).- Purge printer name cache on spoolss SetPrinter change; (bso#11210); (bnc#901813).- Correctly retain errno from Btrfs snapshot ioctls; (bnc#923374).- Simplify libxslt build requirement and README.SUSE install. - Remove no longer required cleanup steps while populating the build root.- Remove deprecated base_rid example from idmap_rid manpage; (bso#11169); (bnc#913304).- Update to 4.2.0. + smbd: Stop using vfs_Chdir after SMB_VFS_DISCONNECT; (bso#1115). + pam_winbind: fix warn_pwd_expire implementation; (bso#9056). + nsswitch: Fix soname of linux nss_*.so.2 modules; (bso#9299). + Make 'profiles' work again; (bso#9629). + s3:smb2_server: protect against integer wrap with "smb2 max credits = 65535"; (bso#9702). + Make validate_ldb of String(Generalized-Time) accept millisecond format ".000Z"; (bso#9810). + Use -R linker flag on Solaris, not -rpath; (bso#10112). + vfs: Add glusterfs manpage; (bso#10240). + Make 'smbclient' use cached creds; (bso#10279). + pdb: Fix build issues with shared modules; (bso#10355). + s4-dns: Add support for BIND 9.10; (bso#10620). + idmap: Return the correct id type to *id_to_sid methods; (bso#10720). + printing/cups: Pack requested-attributes with IPP_TAG_KEYWORD; (bso#10808). + Don't build vfs_snapper on FreeBSD; (bso#10834). + nss_winbind: Add getgroupmembership for FreeBSD; (bso#10835). + idmap_rfc2307: Fix a crash after connection problem to DC; (bso#10837). + s3: smb2cli: query info return length check was reversed; (bso#10848). + s3: lib, s3: modules: Fix compilation on Solaris; (bso#10849). + lib: uid_wrapper: Fix setgroups and syscall detection on a system without native uid_wrapper library; (bso#10851). + winbind3: Fix pwent variable substitution; (bso#10852). + Improve samba-regedit; (bso#10859). + registry: Don't leave dangling transactions; (bso#10860). + Fix build of socket_wrapper on systems without SO_PROTOCOL; (bso#10861). + build: Do not install 'texpect' binary anymore; (bso#10862). + Fix testparm to show hidden share defaults; (bso#10864). + libcli/smb: Fix smb2cli_validate_negotiate_info with min=PROTOCOL_NT1 max=PROTOCOL_SMB2_02; (bso#10866). + Integrate CTDB into top-level Samba build; (bso#10892). + samba-tool group add: Add option '--nis-domain' and '--gid'; (bso#10895). + s3-nmbd: Fix netbios name truncation; (bso#10896). + spoolss: Fix handling of bad EnumJobs levels; (bso#10898). + Fix smbclient loops doing a directory listing against Mac OS X 10 server with a non-wildcard path; (bso#10904). + Fix print job enumeration; (bso#10905); (bnc#898031). + samba-tool: Create NIS enabled users and unixHomeDirectory attribute; (bso#10909). + Add support for SMB2 leases; (bso#10911). + btrfs: Don't leak opened directory handle; (bso#10918). + s3: nmbd: Ensure NetBIOS names are only 15 characters stored; (bso#10920). + s3:smbd: Fix file corruption using "write cache size != 0"; (bso#10921). + pdb_tdb: Fix a TALLOC/SAFE_FREE mixup; (bso#10932). + s3-keytab: fix keytab array NULL termination; (bso#10933). + s3:passdb: fix logic in pdb_set_pw_history(); (bso#10940). + Cleanup add_string_to_array and usage; (bso#10942). + dbwrap_ctdb: Pass on mutex flags to tdb_open; (bso#10942). + Fix RootDSE search with extended dn control; (bso#10949). + Fix 'samba-tool dns serverinfo ' for IPv6; (bso#10952). + libcli/smb: only force signing of smb2 session setups when binding a new session; (bso#10958). + s3-smbclient: Return success if we listed the shares; (bso#10960). + s3-smbstatus: Fix exit code of profile output; (bso#10961). + socket_wrapper: Add missing prototype check for eventfd; (bso#10965). + libcli: SMB2: Pure SMB2-only negprot fix to make us behave as a Windows client does; (bso#10966). + vfs_streams_xattr: Check stream type; (bso#10971). + s3: smbd: Fix *allocate* calls to follow POSIX error return convention; (bso#10982). + vfs_fruit: Add support for AAPL; (bso#10983). + Fix spoolss IDL response marshalling when returning error without clearing info; (bso#10984). + dsdb-samldb: Check for extended access rights before we allow changes to userAccountControl; (bso#10993); CVE-2014-8143; (boo#914279). + Fix IPv6 support in CTDB; (bso#10996). + ctdb-daemon: Use correct tdb flags when enabling robust mutex support; (bso#11000). + vfs_streams_xattr: Add missing call to SMB_VFS_NEXT_CONNECT; (bso#11005). + s3-util: Fix authentication with long hostnames; (bso#11008). + ctdb-build: Fix build without xsltproc; (bso#11014). + packaging: Include CTDB man pages in the tarball; (bso#11014). + pdb_get_trusteddom_pw() fails with non valid UTF16 random passwords; (bso#11016). + Make Sharepoint search show user documents; (bso#11022). + nss_wrapper: check for nss.h; (bso#11026). + Enable mutexes in gencache_notrans.tdb; (bso#11032). + tdb_wrap: Make mutexes easier to use; (bso#11032). + lib/util: Avoid collision which alread defined consumer DEBUG macro; (bso#11033). + winbind: Retry after SESSION_EXPIRED error in ping-dc; (bso#11034). + s3-libads: Fix a possible segfault in kerberos_fetch_pac(); (bso#11037). + vfs_fruit: Fix base_fsp name conversion; (bso#11039). + vfs_fruit: mmap under FreeBSD needs PROT_READ; (bso#11040). + Fix authentication using Kerberos (not AD); (bso#11044). + net: Fix sam addgroupmem; (bso#11051). + vfs_snapper: Correctly handles multi-byte DBus strings; (bso#11055); (bnc#913238). + cli_connect_nb_send: Don't segfault on host == NULL; (bso#11058). + utils: Fix 'net time' segfault; (bso#11058). + libsmb: Provide authinfo domain for encrypted session referrals; (bso#11059). + s3-pam_smbpass: Fix memory leak in pam_sm_authenticate(); (bso#11066). + vfs_glusterfs: Add comments to the pipe(2) code; (bso#11069). + vfs/glusterfs: Change xattr key to match gluster key; (bso#11069). + vfs_glusterfs: Implement AIO support; (bso#11069). + s3-vfs: Fix developer build of vfs_ceph module; (bso#11070). + s3: netlogon: Ensure we don't call talloc_free on an uninitialized pointer; (bso#11077); CVE-2015-0240; (bnc#917376). + vfs: Add a brief vfs_ceph manpage; (bso#11088). + s3: smbclient: Allinfo leaves the file handle open; (bso#11094). + Fix Win8.1 Credentials Manager issue after KB2992611 on Samba domain; (bso#11097). + debug: Set close-on-exec for the main log file FD; (bso#11100). + s3: smbd: leases - losen paranoia check. Stat opens can grant leases; (bso#11102). + s3: smbd: SMB2 close. If a file has delete on close, store the return info before deleting; (bso#11104). + doc:man:vfs_glusterfs: improve the configuration section; (bso#11117). + snprintf: Try to support %j; (bso#11119). + ctdb-io: Do not use sys_write to write to client sockets; (bso#11124). + doc-xml: Add 'sharesec' reference to 'access based share enum'; (bso#11127).- Update to 4.2.0rc5. + Ensure we don't call talloc_free on an uninitialized pointer; CVE-2015-0240; (bso#11077); (bnc#917376).- Fix usage of freed memory on server exit; (bso#11218); (bnc#919309).- Fix tdb_store_flag_to_ntdb() gcc5 build failure.- Fix vfs_snapper DBus string handling; (bso#11055); (bnc#913238).- Update to 4.1.16. + dsdb-samldb: Check for extended access rights before we allow changes to userAccountControl; (bso#10993); CVE-2014-8143; (boo#914279).- Adjust baselibs.conf due to libpdb0 package rename to libsamba-passdb0.- Fix libsmbclient DFS referral handling. + Reuse connections derived from DFS referrals; (bso#10123); (fate#316512). + Set domain/workgroup based on authentication callback value; (bso#11059).- Update to 4.2.0rc4. - Add libsamba-debug, libsocket-blocking, libsamba-cluster-support, and libhttp to the libs package; (boo#913547). - Rename libpdb packages to libsamba-passdb. - Drop libsmbsharemodes packages.- Enable avahi support on post-12.2 systems.- Update to 4.1.15. + pam_winbind: Fix warn_pwd_expire implementation; (bso#9056). + nsswitch: Fix soname of linux nss_*.so.2 modules; (bso#9299). + Fix profiles tool; (bso#9629). + s3-lib: Do not require a password with --use-ccache; (bso#10279). + s4:dsdb/rootdse: Expand extended dn values with the AS_SYSTEM control; (bso#10949). + s4-rpc: dnsserver: Fix enumeration of IPv4 and IPv6 addresses; (bso#10952). + s3:smb2_server: Allow reauthentication without signing; (bso#10958). + s3-smbclient: Return success if we listed the shares; (bso#10960). + s3-smbstatus: Fix exit code of profile output; (bso#10961). + libcli: SMB2: Pure SMB2-only negprot fix to make us behave as a Windows client does; (bso#10966). + s3: smbd/modules: Fix *allocate* calls to follow POSIX error return convention; (bso#10982). + Fix 'domain join' by adding 'drsuapi.DsBindInfoFallBack' attribute 'supported_extensions'; (bso#11006). + idl:drsuapi: Manage all possible lengths of drsuapi_DsBindInfo; (bso#11006). + winbind: Retry LogonControl RPC in ping-dc after session expiration; (bso#11034).- yast2-samba-client should be able to specify osName and osVer on AD domain join; (bnc#873922).- Lookup FSRVP share snums at runtime rather than storing them persistently; (bnc#908627).- Specify soft dependency for network-online.target in Winbind systemd service file; (bnc#889175).- Fix spoolss error response marshalling; (bso#10984).- Update to 4.1.14. + pidl/wscript: Remove --with-perl-* options; revert buildtools/wafadmin/ Tools/perl.py back to upstream state; (bso#10472). + s4-dns: Add support for BIND 9.10; (bso#10620). + nmbd fails to accept "--piddir" option; (bso#10711). + nss_winbind: Add getgroupmembership for FreeBSD; (bso#10835). + S3: source3/smbd/process.c::srv_send_smb() returns true on the error path; (bso#10880). + vfs_glusterfs: Remove "integer fd" code and store the glfs pointers; (bso#10889). + s3-nmbd: Fix netbios name truncation; (bso#10896). + spoolss: Fix handling of bad EnumJobs levels; (bso#10898). + s3: libsmbclient-smb2. MacOSX 10 SMB2 server doesn't set STATUS_NO_MORE_FILES when handed a non-wildcard path; (bso#10904). + spoolss: Fix jobid in level 3 EnumJobs response; (bso#10905). + s3: nmbd: Ensure NetBIOS names are only 15 characters stored; (bso#10920). + s3:smbd: Fix file corruption using "write cache size != 0"; (bso#10921). + pdb_tdb: Fix a TALLOC/SAFE_FREE mixup; (bso#10932). + s3-keytab: Fix keytab array NULL termination; (bso#10933). + Cleanup add_string_to_array and usage; (bso#10942).- Remove and cleanup shares and registry state associated with externally deleted snaphots exposed as shadow copies; (bnc#876312).- Use the upstream tar ball, as signature verification is now able to handle compressed archives.- Fix leak when closing file descriptor returned from dirfd; (bso#10918).- Fix spoolss EnumJobs and GetJob responses; (bso#10905); (bnc#898031). + Fix handling of bad EnumJobs levels; (bso#10898).- Remove dependency on gpg-offline as signature checking is implemented in the source validator.- Update to 4.1.13. + s3-libnet: Add libnet_join_get_machine_spns(); (bso#9984). + s3-libnet: Make sure we do not overwrite precreated SPNs; (bso#9984). + s3-libads: Add all machine account principals to the keytab; (bso#9985). + s3: winbindd: Old NT Domain code sets struct winbind_domain->alt_name to be NULL. Ensure this is safe with modern AD-DCs; (bso#10717). + Fix unstrcpy; (bso#10735). + pthreadpool: Slightly serialize jobs; (bso#10779). + s3: smbd: streams - Ensure share mode validation ignores internal opens (op_mid == 0); (bso#10797). + s3: smbd:open_file: Open logic fix; Use a more natural check; (bso#10809). + vfs_media_harmony: Fix a crash bug; (bso#10813). + docs: Mention incompatibility between kernel oplocks and streams_xattr; (bso#10814). + nmbd: Send waiting status to systemd; (bso#10816). + libcli: Fix a segfault calling smbXcli_req_set_pending() on NULL; (bso#10817). + nsswitch: Skip groups we were not able to map; (bso#10824). + s3-winbindd: Use correct realm for trusted domains in idmap child; (bso#10826). + s3: nmbd: Ensure the main nmbd process doesn't create zombies; (bso#10830). + s3: lib: Signal handling - ensure smbrun and change password code save and restore existing SIGCHLD handlers; (bso#10831). + idmap_rfc2307: Fix a crash after connection problem to DC; (bso#10837). + s3-winbindd: Do not use domain SID from LookupSids for Sids2UnixIDs call; (bso#10838). + s3: smb2cli: Query info return length check was reversed; (bso#10848). + registry: Don't leave dangling transactions; (bso#10860).- Update to 4.2.0rc2./sbin/ldconfig/sbin/ldconfiglibdcerpc-binding0libdcerpc0libndr-krb5pac0libndr-nbt0libndr-standard0libndr0libndr1libndr2libnetapi0libsamba-credentials0libsamba-credentials1libsamba-errors0libsamba-hostconfig0libsamba-passdb0libsamba-util0libsamdb0libsmbclient0libsmbconf0libsmbldap0libsmbldap2libtevent-util0libwbclient0h04-armsrv1 1730976804  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuv4.19.8+git.399.71536ca297e4.19.8+git.399.71536ca297e4.19.8+git.399.71536ca297e4.19.8+git.399.71536ca297e4.19.8+git.399.71536ca297e4.19.8+git.399.71536ca297e4.19.8+git.399.71536ca297e4.19.8+git.399.71536ca297e4.19.8+git.399.71536ca297e4.19.8+git.399.71536ca297e4.19.8+git.399.71536ca297e4.19.8+git.399.71536ca297e4.19.8+git.399.71536ca297e4.19.8+git.399.71536ca297e4.19.8+git.399.71536ca297e4.19.8+git.399.71536ca297e4.19.8+git.399.71536ca297e4.19.8+git.399.71536ca297e4.19.8+git.399.71536ca297e-150600.3.9.64.19.8+git.399.71536ca297e-150600.3.9.64.19.8+git.399.71536ca297e4.19.8+git.399.71536ca297e4.19.8+git.399.71536ca297e4.19.8+git.399.71536ca297e4.19.8+git.399.71536ca297e4.19.8+git.399.71536ca297e4.19.8+git.399.71536ca297e4.19.8+git.399.71536ca297e4.19.8+git.399.71536ca297e4.19.8+git.399.71536ca297e4.19.8+git.399.71536ca297e4.19.8+git.399.71536ca297e4.19.8+git.399.71536ca297e4.19.8+git.399.71536ca297e4.19.8+git.399.71536ca297e4.19.8+git.399.71536ca297e4.19.8+git.399.71536ca297e4.19.8+git.399.71536ca297e4.19.8+git.399.71536ca297e4.19.8+git.399.71536ca297e4.19.8+git.399.71536ca297e4.19.8+git.399.71536ca297elibdcerpc-binding.so.0libdcerpc-binding.so.0.0.1libdcerpc-server-core.so.0libdcerpc-server-core.so.0.0.1libdcerpc.so.0libdcerpc.so.0.0.1libndr-krb5pac.so.0libndr-krb5pac.so.0.0.1libndr-nbt.so.0libndr-nbt.so.0.0.1libndr-standard.so.0libndr-standard.so.0.0.1libndr.so.3libndr.so.3.0.1libnetapi.so.1libnetapi.so.1.0.0libsamba-credentials.so.1libsamba-credentials.so.1.0.0libsamba-errors.so.1libsamba-errors.so.1.0.0libsamba-hostconfig.so.0libsamba-hostconfig.so.0.0.1libsamba-passdb.so.0libsamba-passdb.so.0.28.0libsamba-util.so.0libsamba-util.so.0.0.1libsamdb.so.0libsamdb.so.0.0.1libsmbclient.so.0libsmbclient.so.0.7.0libsmbconf.so.0libsmbconf.so.0.0.1libsmbldap.so.2libsmbldap.so.2.1.0libtevent-util.so.0libtevent-util.so.0.0.1libwbclient.so.0libwbclient.so.0.16libCHARSET3-samba4.solibMESSAGING-SEND-samba4.solibMESSAGING-samba4.solibaddns-samba4.solibads-samba4.solibasn1util-samba4.solibauth-samba4.solibauthkrb5-samba4.solibcli-cldap-samba4.solibcli-ldap-common-samba4.solibcli-ldap-samba4.solibcli-nbt-samba4.solibcli-smb-common-samba4.solibcli-spoolss-samba4.solibcliauth-samba4.solibclidns-samba4.solibcluster-samba4.solibcmdline-contexts-samba4.solibcmdline-samba4.solibcommon-auth-samba4.solibdbwrap-samba4.solibdcerpc-pkt-auth-samba4.solibdcerpc-samba-samba4.solibdcerpc-samba4.solibevents-samba4.solibflag-mapping-samba4.solibgenrand-samba4.solibgensec-samba4.solibgpo-samba4.solibgse-samba4.solibhttp-samba4.solibinterfaces-samba4.solibiov-buf-samba4.solibkrb5samba-samba4.solibldbsamba-samba4.soliblibcli-lsa3-samba4.soliblibcli-netlogon3-samba4.soliblibsmb-samba4.solibmessages-dgm-samba4.solibmessages-util-samba4.solibmscat-samba4.solibmsghdr-samba4.solibmsrpc3-samba4.solibndr-samba-samba4.solibndr-samba4.solibnet-keytab-samba4.solibnetif-samba4.solibnpa-tstream-samba4.solibprinting-migrate-samba4.solibregistry-samba4.solibreplace-samba4.solibsamba-cluster-support-samba4.solibsamba-debug-samba4.solibsamba-modules-samba4.solibsamba-security-samba4.solibsamba-sockets-samba4.solibsamba3-util-samba4.solibsamdb-common-samba4.solibsecrets3-samba4.solibserver-id-db-samba4.solibserver-role-samba4.solibsmb-transport-samba4.solibsmbclient-raw-samba4.solibsmbd-base-samba4.solibsmbd-shim-samba4.solibsmbldaphelper-samba4.solibsocket-blocking-samba4.solibstable-sort-samba4.solibsys-rw-samba4.solibtalloc-report-printf-samba4.solibtdb-wrap-samba4.solibtime-basic-samba4.solibtrusts-util-samba4.solibutil-reg-samba4.solibutil-setid-samba4.solibutil-tdb-samba4.sopdbldapsam.sosmbpasswd.sotdbsam.so/usr/lib64//usr/lib64/samba//usr/lib64/samba/pdb/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:36149/SUSE_SLE-15-SP6_Update/7eb845f5822678f14fa60c6db38aa9c0-samba.SUSE_SLE-15-SP6_Updatedrpmxz5aarch64-suse-linux  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=893218807ccf8327defff08c359975a8e76cf765, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=58a237e3ea9722beb6439abb37705a32baf83931, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=74db946d48afc6b0dfae33c8ea1a16aa23aad618, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=9ccf87a95470e5154253b48f316b35cda65795f2, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=9989a29f92d017407bd6375106ea8e579cfaeb02, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=ffe75870bbcbebff3567854324f06e3c86173394, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=330c153d804288d17ca06107f455596a3903dbeb, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=05f7e90aa33df67aac83533927ba617557dfc669, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=a9b2a3368c15ef26ff6f52081a856a7e4403c0ab, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=a0b9c31069588106731837d57f6b069508c78f48, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=74fdf74ee301e3c1161fdb1f780697d155d2ad68, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=552691471ce19b410f2b80d33eb2024c7a1c7b1e, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=9c666e0d412e369f7fcfe713f0b85a00a4516866, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=f7df32c179848b5bae177bc40ad0939502e09823, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=6eaf63aeb1363b3c4f5b3f08fe9877f39eb7feda, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=c1644d572f4ff2af5c0ec470e687ce9876e65890, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=02d1a082fdb1614ee39defc3b4e2defeac9b99e3, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=54cc6d1a7ad22d314ca55fc584f26c328cebd2f4, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=7f4ed6339aee48b73997dbd03e93f39db5e5012b, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=ffb7636edc9644a1d16c384965840cb515e40984, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=d439b3233ebd5e0b200e0829474bf0c590773fe5, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=9b13c92e750845c0e37e5a4c839c20df739c8704, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=7b04af98e2eb0c89c9347403f4cbdd1cd7930c53, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=cfff61a2ca213d3d8caba0c1679923505e4dbbc5, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=5517c0800e0949f6a7f8be67f74f166f4ec2e7c9, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=36acb53e5cfbd7c526607e2905cca07c2e4b009c, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=c42fe9fd9afd840b0bbf3ba5087a0a3ced9892cd, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=1d5d16effd915602842d71e241cee2d90c0c5f77, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=ea6b25a58dc8460a607f9b1ea89ace41dbaa2dcf, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=caae71bf4ecc7960c02003ca49a1a112bdd2b955, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=2005c4e4afa136f309a5a5178ac45d86545b196a, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=df017b140a99703e9c7bc2056580eecdef00be35, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=a758564da0034bdd634116c15e420e5000f8fc25, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=e089a802400d3b0e2b82d8e1777fb3a3fd4c38a5, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=a1b10a9475fcc7c926ab2ffced20c4804a5d2237, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=16e90901f82450869b27f8d5a4f0f3e04d1a12dd, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=2e7a455a3fb582ba8470cbd571b84e5d4611727b, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=dc8439e214f15507a542d7ee5fcfdb2dde2503f2, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=75c8246a2e0494b29a625166385573c13a93c64f, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=fc77e92022a8e5637bcf94f52c3dfdc9f635f4a4, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=2b57c07ff78827d210be87f20b2aa67262064c44, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=5f6be37c6f01e5b81f834c87db44fbd495094620, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=9724d754acef21e56edfff595b20391b88756164, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=f006ef785d0ff30b6b34892f79d2dc2a4d8bad2c, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=44a48d81a8806d42ec5e3f0fcb8bdc917e76a55b, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=81fd9c4c0da0330599ceaa653c23229ecdcdfd24, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=c23040b0adb6dac975951ca2966be32dc077c5a1, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=f2bf53b0873a3e7d977b7bdd6a02e6ec03a0048e, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=50534a734780f2ea2f8fb14dcc1fb25ab1834835, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=3b825c63eb92030c19daf326b58aa118545b84ec, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=583e4d2d21c007b484d40cc059bcda97e80f073d, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=18febc091dee44ed91fc729d527c3101b8249e0f, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=4c970d2b8cddf8105f95e43db069a90275be7730, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=e254db5f485a093da60607c10b02932635c5433f, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=37a22919711fde2e1a2f6cf91bc1bbae6a4e607c, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=9d1e2f95ec1b6d98aca528249d338df29938aed0, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=c0c3799ffe8a18debd990d1601915103c4028337, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=5c322ad494d9acff6b5622be528a7eed85519eef, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=95e86ab60908e8b89781a91efcca95f08341fe8f, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=168e225b4fb265c0d2db1e594e6b6e96102d7b95, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=b6b88eeef73c854d7c9a2d48c64ca2d7585afe76, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=578e3dd9a01e556e46a035e3413221c8249f2b9c, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=a90b3b866fc60352ff3ba901f6ce70a1d7491377, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=9cd0d34959e1e83b92a2ad58e22f961f8cae883c, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=acde17211ba5e445f2fb9b601ed0509c9571fae4, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=7afd60b695503fd7888d7bc5cbe841c75154b96a, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=6b27cc5f1fc4d0b3c8a887b02972e00190fd2b14, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=7cd4c81a94850b17101df16e3107af70d49eed53, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=553a2154f1697837f55b49a34c8962f7bcc7d913, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=025b9a657672f2cf94818150ecee7be1f527ad76, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=da367babfc9bf01119b1a2b8e2120bb3f21689f2, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=cf38bbe69245105a1d249cceeb289fa9ab6b6dc9, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=252c197f72ecf88fa61057d2e850eb5738a23c9e, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=635ad0e3f3632470326a2577fd5e9207b14f7dad, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=249c7bfc94ad7569001148be67da29b257007f50, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=48f60640cb3c8910922dc2be0ed60936dfac68a2, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=faef347b9f84593c2ccad932690463b377303558, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=59c1ce9a5cce1d1ad8c14fe731617a4a92794bfb, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=166aaa36326547efd79e25bce397a47cd5809989, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=2ce2be2a911c621855cb6686cea8cd4299bbc73b, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=5c8a0f68094d7cfaebe84ab1905d8ee1938f99ba, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=7697af2add03efe151dc76325507ef86597d007b, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=75871ff32d8e2d7eaf7d7c428b8c25ab0056c4f9, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=03630d732b8cad69f5bb602798d07614036b5d5a, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=b2fb639781e765043a37b90c1a0c007de4916775, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=f6344132cb669e24fa9ad078a29f839b3787c3a6, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=193301361f8a37560c09924627637459e03f3298, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=ea38e297f737275364530d1f49286e4dc520440d, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=2b95bf8ba873514e8fe6a68a38515269e1970b76, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=74fbacc42f8b578077ec112428062d60609e3026, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=6a0bf7da9433db0d40c6b874384c02424da1462d, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=3c301c077f7177c287a0019d472d6e20441d59fb, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=fddec62b73780a30d78526969699bc7c0cd6a25e, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=0025ae3d01b64f9a18779a1e1c815fe98957bb71, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=859ec133faa1f5f158e4d2ca576f8296df7c9ce9, strippeddirectoryELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=e50033d436df73f3ed076824ef02d3b2d634a238, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=eb4abb3d02c6d1fe5786c26bc74fba6989a2b13b, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=058a2983973e9191724f46ede9ed0e889d27cb96, stripped"K M}:(6Jt+U{ -Rky (c>Rt2Np   1 @ X v  >  ( 2 6 @ d ~")B7D0G!3L]*?I*&3+!%  ;(< .";G""'3*/   $P+P*RARRRRRRRRRRRRRRRRRRRRRRRRRRR@RRRRP4P3RRRRARRRRRR{RRRRCR9R7RRRRRRRR8R6RRRRBRRR@RRzRRRRRP6P5R$RARRR9RRR,RRRR;R{RRRRRRRNRRRRRR RCRyRRRR(RR7RRR8R6RRRzRR'RRRR+RRxRRMRBR:RRRR~RR@R#RRRRP_P^RRRRRRRRRRRRRRRR~RRRRRRRRRPbPaRRRRRRRRRRRRRRRRPiPhRRRRRRyRRRRRRRRRRRRxRRRRPlPmPmPnPnPoPoPpPpPqPqPrPrPsPsPtPtPuPuPvPvPwPwPxPxPyPyPzPzP{P{P|P|P}P}P~P~PPkRARRRRRRRRRRRR@RRRPPRR?RRRiRARERGRRkRR}RRmRRuRJRR,RRRRRR(RRRRRRRRR;RRRjRRRRRRtRR:RRRR+RhRR>RRlRRRIR~R|R@RR'RRDRRPPRERRRRRgRRR5RRRRRRXRARLR\RRRRVR,RRRfR4RRRRWRRRRR+RR@RUR1RRKRDR[RRPPRRRRRRPPRRARRRRRRRRRRERRRRRRR@RRRDRRPPPPPPPPPPPPPPPPPRRARRRRRRRRRR}R{R,RRRRRRR5RRRRRRRRRRRRR+RRRR4RRR|RRRRzR@RRRRRRRRPPRRRRRRRRRARRRRRERRRRRR@RRRRRRDRRRRRPPRLR"R0RRR,RRRRRRRXRARR\RgRRRRVR5RRRRRRfRRRWRRRRRR!R+R4RR@R/RURRKR[RRRPPPPPPPPPPPPPPPPPPPPPPPPPRuRRRARRR;RiRRRRRRRRR(RRJRRRRRRRRmRRlRhRRtRRRRRIR'R:RRRR~RRR@RRRRRPPRRRRRRRRRRRRRPRARRRRqRRoRRRRRRRRRR5RRRRRRRRRRRRRRRRRRRRRRRRRRRRpRRR4RRRRRRRQRRnRORRRRRRRRRRR@RRRZRRRRYRRRPPPPPPPRRRARRRRRRRRRRR@RRRRRZRYRRRRPPRRRRRRRRRRRRRRPPPPPPPPPPPPPPPRRRRRRRPPRRARRRRRRR@RRRPPRqRRoRARRRRRRnRpRR@RRRRRPPRqRRRRRAR7RRRRRRoRR}RRRRRRRRpRR|RRRRR6RRRR@RRnRRRRPPRLRRRRRRRRR.RARRRRRRRR-RRR@RRRRRKRRP PR R}RRRRRRCRRRRVRyRRXRR"R RJRARmRRRRRRRRRRRRlRxRRRRRWR RRRR!RRIRBRR~R|RRR@RRZRUR1RRYRRP P RARRRRRRRRR@RRRRP P RRRRkRJRRRR RRRRRR3RRRRRRARRRiRwRRRCRRRRRRR,RRRRjRR2R+RhRRRRRRRRRRRBRRRRRRIRRR@RRvRRRRRRPPRTRRRRAR3RRwRRRRXRRRRLRRRVRERR2RRWRRRRvRRR@RURSR1RRRKRDRRPPR\RRRRRR"RRRRRRRRyRRRRRRRxRRRRRRRR!RR[RRRRPPRRR\RRRRRRRRRRRRRRRRRR[RRPPRR\RyRRRRRRRRRRRR R"R&RRRRRCRRRRRRR RR%RRBRR!RRRRRxRRRRRRR[RRPPRRRRRRRRyRRRRRRRRxRRRRRRRRPPRRRRRRRRRCRRFRERRARRRRRRRRRRRRRRRBRRQRRRR@RRRRRDRRPPRRCRRRRRRR;RRRRRRRRRBR:RRRRRRRRR~RRRPPRRRRRRRRERRRRRARR5R{RRRRRR4RRzRRRRRR@RRRDRRPPRyRRRRRRRRARRRRRRxRRRR@RRRRP!P R5RRRRRRRR4RRRP#P"RRRRRRP%P$RRRARRRRRRRRRRRRRRRR@RRRRP'P&RRRRRRRR{RRRRRRRRRzRRRRRRRP)P(RRARRRRRRRRRRRRRRRRRRRRRR@RRRRRRP.P-RRRRRCR7RRBR6RRRRRP0P/RRRR{RRRRR7RRRR6R~RzRRRRRP2P1R}RRRRRRRR7R|RR6RRRRRP9P8RRRRRRP;P:RRRRP=PRRARRRRRRR3RRRRLRRRRRRRRER,RRRRR{RXRRRRRRRRzRRRRRRR+RR2RWRRR@R1RRRKRDRRRPAP@RRRRRRRRmRJRRRRRRRRRRRRRRRRRRRRRRlRRIRRRRRPCPBRyRRRRR&RRRRRRRRXRRARLR RRCRRRRRRRRVR RRxRRRWR RRRRBRRRRRRRRRR@R%RZRUR1RRRKRRPEPDRRRRRCRRRRRRRRR.RRRBR-RRRRRRRRRRRPGPFRRRRRRRRRRRPIPHRRRRPKPJRRARRRRRRTRVRLRRR@RRRKRURSR1RRPMPLRyRRARRRRRRRRRRRRRR{RaR`RcReR]RbR\RRRRRRRRzRRRR@RRRxRRR[RRPOPNRRRRRRRRR;RR:RRRRRRRPQPPRARRRRRR,RRRRR(RuRRRRRRtRR+RRRRR~RR@R'RRRPSPRRXRARRERRR,RRRRRRRJRRCRRRRRR(RRRRRRRR}RRRRIRWRR'RRRBRR+RRRRRRR@RR|R1RRRDRRPUPTRRARRRRRRRRRRRRsRRRRRR@RrRRRRQRRRRRPWPVRRRRPYPXRRRRRRRERRRRRRDRRP[PZRRRRQRP]P\RRRRARRR3RRRCRR,RJRRRRmRRRRRRRRRRRR{R7RR(RRR;RR5RR6RlR4RRRIRzRRRR+RRRR~RBR:RRRR'RRR@RRR2RRRRPePdRRRRRwRRRRRyRRRRRRRRR~RxRvRRRRRPgPfRRRRRRwRRR{RRyRRRRRRRRRRR~RRxRvRRzRRRRRPPRJRRRARRRRRXRRVRWRRRIRR@RRRUR1RRPPRRRRRPRRRRRORRRRRRRPPRRRRRARRRRRRRRR{RRzRRRRRRR@RRRRPPRRRRRRRRRR*R;RRRR{RR)RR:RzRRRRRRRRR~RRRPPR=RRRARRgRRRRRRRR\RRRR;RRRfRRRRzRR!RRRRRRRRR@RRR[RRRPPRRRRRRRRR5RRXRRARVR}RRRRRRR4RRRWRR|RRRRRRR@RRRUR1RRPPRRRRRRRRRRRRRRPPRRRRPPRRRRRRRRRRRRRQRRRRPPRRRRRARER,RRRRRRRRRRRCRyRRR(RRRRRxRRRRR'RRRBRRR+RR@RRDRRRPPRRR,RRRRuRRJRRiR3RqRmRXRRRRRRRRRRHRERCR*RRRoRRRRARR;R}R{RRRRRRRRRR5RRRR(RR RRRRRRRRRRRRRRRRRRpR)RlRR4RRRzRWRRnRRRRRRRRRQRtRRRRRBR:RRIR'R+RRR~R@RRRRR|RRR2RhRR R1RRRDRRRRPPRRPPRRRRRRRRRRRRRRRRRRRRRRZRRPPRRPPRRRRPPRRRRRQRRPPRRRRRRRPPRRRRRRRRRRRRPPRRRRPPRRRRARuRRRRRRRR7RRRtRRRRR6RRRR@RRRPPRRRRRRRRPPRRPPRRRRRRRRRRR,RARRRRRRRRRRRRRRRRRR+RRRRRRR@RRRRZRYRRRRARRRRRRRRRRRRRRRRR@RRRRRRRRRRARRRRRRRR5RRRRRRR4RRRRRRR@RRRRRR`RI=YW uutf-82416c037aafb2bcf5446adbfa02f23938761fc7ce4a3c6e7d39497f3b87772fe?7zXZ !t/]"k%DM2_e#Ȅj((KZo-MP_%H儍?L#Morĉey{9}/dP%44Rh8Hfj@C/ɟ276»Cb&ϣIOz}ğ|4er&zU=2Ofw㿠4lem; E%?ߩUL~lo-<X)S4jKwL .P|T%I2-NnE<Rw^gfӪ! ^vX GV %7$f{xzNFY fUTࣻrəzż0(NYT֗SGVs.2U̢)50K.i0'wIáL0ķ[-{4O]sZ~pJw-ߏs2y}]{aA7GXfYs[Z9ylM E`NqR1C&E/{#9[; ")K;.HFBKPŝ,܎S=N CKCɎS8ÃN{0ԚmXw jhߓU胲I j?b"t;OVҐA!tx}$k`]A)1U69nwQYuwT]ԍ}߬yonیrtCB@!t?H 0ϸʓ/܌7jyW̳T I>i̵Jw6n)әDG+JvEiO >ߎY`͒zUif?W4fO7ԯ~vG(͊c`JWq.%nyN. f;x5qjq5,hZT % CvMu7K??j~sL-)%B.w>Ɗ;Ҧ/[E<9AFe-PH:YfUC݇ڐp͠3>c@Q\ F'g&o@W+^ P<[qv 9I:?>6Hs].$?pmRh4a Ke+8mz~!mK*JqY +Rr)mf9lReCDS''1.$fILS H@,ks8ZCV`~DƙmK´)c@!ù,rm9T{G+?pbwEz*Md]>4l+vJws=Hg տƐEq+#e G#EQp$KaB,Q^翊[J痄˩6.F{1&-($S˗]&ViO%ytaLmS'8Wȟ*X/m\_ v;sI>R "~.ɾ"Beuwdȃ~;HyDN>wF1!H3]arJbz(W݃pPOp6Bpj~W{`϶*~S˄SVu>%MIc)t9&Tf-pN6԰E 9ܱDW'n{9?4m4j>Jn`3CK!ŝ8u u{S-%xk ~*P(5bL=f0ދ]DnNt*滅>gоdQ'D|1؞ICC w@[\c;>/ڎߥ{S$ E/Q7 Bլ= +kEG퀕zbם'̓ 0처4Qoo~\%8P.M,8d}ްQi \T#/]|Z.4ꮙdf96ʼnádŎΆ~f fӟ{ NF2BhhR2$a&)=n !~ @{,*JG}~ Y712%tbؕ-bPۥYR"J"U1UanqeY`?:g<d1oRٿЂ e4?X")Tfou C;ILVpWT8b|P$)%#"Фrg4-uBt¨EO55GqXfJiP q1PlSkM,xKT7:;8 isPCn\|kTrnVC L՞7t2ť #%̋pP ,S>7X⚢B2̏ |O^!B@`ɈOTf ϧW_*Pف Kja<}9OΤ VouCI_6 ܽ.2'He;Cdl !|1+wn53K <љ )?#'1 s D`E ;;5/?`5AuA$2>>NJ\g>oT]GDЏ_Ӆs2uEiFń`95olXQmM*2r͝6`DXb;9AhZ_qGQjK%MJXw|lN},2[PiqZ7t&%=BxTLX(34a -SИ>=#SXjp23WQd'bDbobh|-`&qi;^CQiMg_ײnTPk4x>Fgz{t)' 8ߘ6(C*.RG&tj FG1*CL V`GqسT-!VHyӕ3WjC$6{U|VJ#sMFT)F#ǑБ:iK+ʊѧ GnZ+_9;-n"O((s Aejxu۝Tpn}y2167BN2@DO)F{ 22Q[M|{1ڈBC{%ybX P5dZLUnGдkTЎN@=3|7mz/L>AvΟZ Ӳ }u.@Xö\[mtfyGs(ufT=lԕmM Xʘ%`5$Y:6!5jlXEL]Wo }3=}0Ÿ%oeP7Z")I{v⤪hL3w?瀧k1 Cu,q;~\݆}Jv1>Bsѡ#nČFT,;zZ~2R/c؎?J@)J/@lZ9$hZ쫬oNej+B2'~Gy8ioU< j.6Mɬ}._n7Yt ¥xY ~ :{ v$G 3RT57b^ְY4돋 Ь5D-PNj2,8JRn;zt9|eJpUЪe|:g3ŮKs;/E@ȏ+z6pr2Q4l)ޣ䷋hAPFPن)z>$1ЗatdLҫf]rdJ)<.JIqgMKzŵ#D(i5#8^kE .L?O1b^:#+xtļ;FI@ͯ0@ j0tg[AosuEM5~qq`o)+# uv-K\}wʷyɣi ev, M6a+HcbǪBF/79,fPmg mKφ06EY[KϨ_Sn=NR66s-!;fZ9 r;\K0_wz3`9$T0WYvK$Ss:z wzuFx&#zNEb@7KV%̔W ϧA23EfINͮEи1㈰TD~t5(_Bw-mYaOұ qd+bMT@MLf(GiDؔQO Z#:Kbj2rorGyUGXo RF+$=&g_fƒ]Jf1&_epsGԄkEa:L+*ݹ6?y;5pS#r@4oI!hJqʭ+:? ?[r1G=˥M2m90ӁG $IDpSi \oe])us1`8@qg>0kr.h9}9Cno xx87n,x'cԠff"H7eRs(CoےIƷ/#6ҧ2DK .m.*,~~qpۚ'[x&~2Vc67r6L+׻F)u@*Ówsf'{7+I/'L$HZgOWÃ^5-(tDom2f_]͸!E g)b44T$xf zovuNe~3&1#'k:4,Ss2Jp/=#GDj/BhFR"@]%v!p"7AćV"´ $e!x6Ԩ,,V|KAt]N3(nZСIϩWD ,h`&[&0Ȍ *vFv-nNJ;FUJA;jЈm|Jj=oXTcݝj 'Y0dH^)QR>fMYxEp$u"$-j#aҞDW Wȓ3nu/Smv!{? ҒMY c1F0,FL/_2!>q;n]pl5ܸdM!:xEG:d#vi!%j6Y{Q r@ib3'EDj>m0gayJ+LP4u~ƄB JiӑƼRuh=$_i,'wW/u@lks #ijD0ȇj; 4Š'Yt fڧX'ў?8Rc;Tι$ST%;akzOX>H7o!eA2fI~]U50\XP@;ozdvurx*F}s2# 9{3U/=cO2#ʝ9|Z=kg/#Vc{Уv? 9~g\?TŬ^|_%$?9$S)ѐc m}p0%ۍ_S7w[N;Ã( ]^X휈!׷MvoGI;вcoA9Sl`'p|3Y2S]\Bơ+* 1Fݏ^vaQ;`Y,l$?r['WD(%ʥ`2$Q=£lPMQ{J[cւ?Nd@"`X&h@a*2UUcrȿ'L>+ 0C?~hGꘘ&tJKX\ >tra{*ObӋe>'kns- )k 8MV{c=<Őy$I$=)o3O۔`[;)xZ=,h7z(nnr\0OR}0n(( hF lA>z|m\-YU{8m4ɺGd;3 4SW?'}*d`.{fXA2'b4B2 !pIaF QplM̄!9Զk=Aפ }#4@aF{Tލ~?7o6W%xmB7d 1@nԦ ӰmQw' o.% ~aTQ_/:_$GAҟ9AQBHZm/oFD?%*<V@_Ҕ WYlMκzF +7PˆK6иkTa|g*ϕ$(Q QF*d&qlRbɓ蝎bbcK 0N2#뎀7];VC]2w|Ė֋Lgi |f-AdZ\hm9g9hU-n+Zupq1/ԇZr@3!ow|/WQoH18A{yJq5AZ~$t;5F5(+:ގAsƑ952Rv_c~B9As>i@Gc zPӥ9,! Ŀ;n!\i&.;v $Rݜ1z=(5hiNh%/M11ظ={$c%~RQ [}o &.+]pY( f+ՍʿR81i,AB;+.07X) rxTڸxwzE'J&,WW0ODfl9@kEj+b!jԣ, O} fu3c{"Bj+W4^867Y9(llАN; ɵg\L"xw,x\UGrHlCxeu3=y\#,IOu*)y^T;~e:WTK]N2o =$_qr$K|Ϛݶ?a(AgVusCOv499ķ*=DM^]j* si6X$«pQiJ5@"D$GW&?Zl ?q} <: |l@'2wڨ2 @uC>s·ONW42]A >,ˏ-Βm0ɚ/ôoQ1/%fT]!j424p%-ԇ ZʷEmUD۸~0-,lDuʧi_&J'BQqe쬼 F?B]em;;GW9h`3 fC~0 Msb)P.\߳74e f'7N% KC^S{o:^–.$h,{#M_%8}FB?YWdҹ n:bCse+LaQ{4{UA928j02͋F2OܾD$UA%=G읮l^V-e\obciƇ-(:]8HIə oLXUA4 AiT)XV \Y W_-*\-y` RSV[@5Tc's\uiGi650[&H:+Rfr=.PA TQwaFf8ɑ;yt [Z#/2.:v<`ƵUMQu[PJf-pϨ؀ 6ΤPfQR*&/Ў:>02ɱߔZ°nUZHqZC 4MA  a0)iQXV@}vbpH9+NfaH'c-O@r$4 :Z'qM@,&,:w\, *FtLOte}/5? z6pleM%q7z2rZʦ=XԙZ@sHW\$m;TIږSxXl1ᯘH!nhLּ}I5" .d1E/l mpRKJ'L oQK i_b 3RDwױkDzZ['2zJ}jsAS|H';pe'pֻnj5+cEl"6(]<]TC6Ӊ6#C*!$ B#jy!i7 UNv ~FWI/ >\ FCtNOLfW0B2f.:23a_eP"ѐqBͭTFrfR܂|Y/Q@M#4`hٹߔ t酁y`{5ˎ!1x Y`@,* 6sso ȝN1,t t&b|?8_Mg(~}Vd+GKwЗ1#c廌3NjBuU}[V:<1"Bk7zv5T5LB׏hgZ2 sQMZ\5Ekѳ.zi]Qq˫LۼK 熡СjtJtH:x{3#L>&^_з='(Vs\ ."di+ZO\׫V ]ǎdw vZ2~YtqM{N4P(B8O/to8 :S";]c ߭/DtMt:M/ Ouʄo>՝S:߭8F'gO ۛ }-,#uGKqUlpp,2 x~\jףv6D-`KVYM{ڐ}J;VIQ:^+Y4zҐCbl5#ījΡά`7] SҀ~0yUGtQe.o+0ܦ"̵J&\u1ԈaRir!->ZD^:ZNOP4y;\&sW5HqY1G0"H=9.l]ۥ-Yn)n)D-|WPX/_LV@Ȭ"@ZSy:2p=do84rB ,>nIh ]bRbܲ¤&FB\S]1t?EC 2؋CKw$Ro F%8YV+Yk9M@rTYF ,&v_uyWn=%lAD<3~&cP#Iݮ`%w2,58"#4z/iQH бm\ًqh]t93My: 2w~UtNX6Aɩ䏉*)<)^>0I :[n$~7}-jN ro|cU -l@2fC]޾! AJvC]XeJLʅixg44%$jI-!;ȹcI6͆:փBy)+֍Е}PYh"W' 3czW&ő"8O!{M+qTXѝf _.nROo KG,F38?(A`o0Bn6MTr{ q+0Qx`2'Mg'TWvG{GQ8}I=r7ޣ`gЊd+B-Kv7*ְv&I-2´U$_k&YdaRoz7CSM:„GE=l *-*zH!ng( "рrigrcn {Znk_AY1J/(fp fuҜD(5vz<=f}\#k2 2 i1Et&Ԓ!7ݰ$ʚu .N7WIVbO槟f*g]+^{0k.gq] (~ZdQ,\@q#]v,i nƧq6(Jy@wN*LyѿVڦz.J5kj<@kPD|P=`NA—Q6 5 !u30yPفM0.ƍtfB`NE\HK6غ_R"+fb})PR^•>mZJZ$ aX!JSg֘Ru2UaWmXNܹj_akhYkA4F #vUύNMOE{6ƁnuC4Fot*f4zgoJR7ύm`~Gn4ۯ~ qCY倦};͇3?Ij42\RZp >zlvҍ'@{.S˨ˣGN)yBY}y;ݎAX>K*&gRBdjEbL6y&ʾ .¸:eˎgNNU'dq9wK潺CN\ Lmƹϒ`0o>WͬX+;i#'w'Z˨>`38b ,Y.rYOJ%'z̟Cmr "Nls` eݵ<€Z7|[,d% *νPER] ~e04>BnpI3tеz.ۓ"XV ]SKN_jD8fk곢s_7o@gcهVXb}clmڄ+ŠMY؅m䡾Y5^ i&Z a1IRB$9ؕ K"I}01tG$KեM>~wb#׾DǐD+- U^E jk{8^R\,7\U!:yE%hM4n[ab3ө+TLAaw4ن+;=<&ՕZxY&I5ty r 8[]aE"NK0\Io%Ήqo`7$d,[=Ml}e_ȱs:c5͡jN'1_vWۂRGc#QCN,i Y3)g( W4[w>*˥Sxo˃eS<|'c# +z|MiWBR +ObӳÍZq*slޅIE|WN-E5bsҋOM&"֟[yr{ Qg[ J?n:or*4\cc0?ё[G#y7=NꁀU=V;MYSF94#ꈑFKR ϻ;?y~ (TvbʏٽYߝ|_NN@ٍ#d~:pOQMI-";} B{P|;L\uISd>[6|4F&;uQpZr+,WUhD#H'^~XV=!d h ,s\:1`\o@Wh'^K16:*cXпobgGoԣ>:8ߜA;3Eia8vnT TFss"ՇĥNIiWAHMfK.%.q!*J)51VwcwI]Nqãi˛R[v38j}~Quk0a,:9%(:e||]x=g?gNwBFs?y`a,{]FCŁxZW̳m9Xu(kW'Oa@b8sp[SBt6O|=' h"%JU fQ3fhK nܵ[K} wC8G9YB1pibi8'yrr{iDFH&$:>g 3nKƙ??12g "qi3vm[,ېjo/ wR*8t.Fs A=[abë$2ml V(u}m){( 6iFؐJsHuށܵa%zW|X33z>o*ޡ[&ys/'ՒW21 TqVc岨ڨ,dݙ}^oh,_3"ߓ`J8…^ N#0mUU@kU1nMf:KeJgې "BnS*lQ;kp8%]/BelG-FW$~;Ku~|=%5rT$UϢr.NL;K4rO8p֖6Wbu81nf @=d u\612gRD \Pn 㓄嘶)eXAy'Veβ|2 $fHCh!Vy%+h{Nog+K@$]L:s`@x9_ F<<s脺kHHiI%9$ iŋ^5]V.p^е{ʄ/ABcֆ*j\пlG!$Cfe@:=5R[;epe*PVQɶfۥ6^洐>$l( $HɔQJ+ʣ sq$V `# 8țI$l%޿~c*0%D܉bVs-?u:& :\n]ihZ+7;%d].;qqryjyfi3| NU=$LC||DW4^ {XpqeWxԲe뛒 XBKy3w2* 5@4c`pR nYP1S'F"p>B)>)kdۗKM*̑UpB'OJs9 MBEO9$I4G?`#b.H{1萜V;=OAkA9] Yɑ|rxhꉻFjfP#J!?5 EA:+lΑnCFI=b]Rq@<p+7zL8[-z/k Bm?*]ro$&XlHK [y*&5C'Ĝt3@j+[ #koĨX 4qGgy/ɷ!"0s9u9ԶP Q=_&Hc̓wFع $ I*-P:%(l|/56!$V )bh3T!nJx y$'? `[L(_7?#cnep&k. j_׃bi ORma*G E<^ojp;rs[~3wA\ y-P k6KHH:R?\njeY8:U ;9Y@s[٬H#G.52г@UW}VFΣ%m,ԻJظizf_dTBX'_qq쩓mGfۿZcE&ƨC;SH7ݡi$7@ʮALeFƇrEmۂw^QՇgP9ee >SiU/J2+;,r\'OrWgڷ`CXҺ[pCE Ћl $ӅRd<4 ,B܆:_QtK׼Yk&"G\K| OX 3,U#lg~LT+l?D٦z5=0JDjK4kG`&]=iO;nS+ykhBUo M.qN8]wʆ-ȖUA6'.]9Zۂ'*dO18}6BCfb)k'W]ܤR;4>fr0-Rrq%]F 2*{nM/k6,$G*BS|Pv%[ ^vi!gB8,dEqxc[/Io|Fw u7 m*x|Bi+L}K&ee%ڣْ?6mchٔ▶q-kXʵ&>vPg6~q.~'VDB/n֣#@G&hrWC3 }P1 }ѳ~i@#˅7-ds_E@U꠆g7ZQEUKH^r\4Jo]5<l  'TՁ56POWW#vO-.U.Gz=)uA )*cL LliE蠀OX$}2<fMo77go @ަim&2JڬԨ6ք FdCX4^7eݶ1b_K?3cd410r >&dluv%˸oPݵx*n9b+r1A! "Dr^6}ä@ 2T4um"[ς'[.f\2K'a+9dɪWea<q s0'FZ2_ٲaG #utLpN8݈}m8IBMMi%BFHDt$XV_?hIoX#Ld7trA*'ZPu54wC#`Xm,`] `Iʑٺ:hǺ.#MqN#r#Iz9\ueL}sr9u1s=`PKsj0zaIGmFlôDJ{N,XVՈ("WWo"Ò%v4o}|F ݝ._mV IKrwZlҿE3Al] ˵+2ψ˚,BvڴۼlVɥ)luֳg@"} 7ԗi 5dbGr )vvma~m o2:[L.ES1e@~cKۻ1H`o&| Py@!kKl=}+qݪ3Zb;b_P5hc" qO%8;j=|?*#z !@řN 7}D}s؎dLKa%޿a@zs? ;^Ἣ̧xBYUšvT|E" Fu63<$bg;gK +ڊjPg%WGMa󂒊gcQs:>Un@@D{ȗ%Ɍj[TF@$MD)No|6F WK"/X#ȓfIOWcH4n~ƥ"13ҥed426>ك/5 92;{㗼&y 3~rfOTjpj6f4+ڟ8VB@B5)zJtz/(^=\v:6?#HIuOS @꣟mD|l-~>@VHiX! x&W7._<%gpgn g9NbBN(`i,沭gX{$ŔOtOdw' Be"HݡF-SEۀ8EsD[DiM='iDˁ'%us4P1}j TFHMh!f‘q)* ++_e^8ؖ ')̳ڲS^ nu_^%V.;TJRsD]2SC|p<tg%;9ӗlDjgc^cZUل/"΂ψV,ɐScxG#7f;o-p^T58;ZWڟ)9Mo <,#4UrЋKIX^ y ن,F[Ks,# Og btw?8{ 녿0ߴ+PB13(iI})7}47`Kla_wInldTeOiYoPm f8>+ޱ[}綕?t2)̈́XW|~F+>7nZ02W(~H˽z`MMm1da|,seG߷r7HUֲd}\ DY,?vSfUSDY%TdrT! .LO=ItGTxʄXNaTAx~;?o |aYBFѺ!V\EHy6_%zu*k[+~.g& cXTߺ[I"_nè}^I3WTw\J\62.N^@hv$|K(8R[OVEHkK8Jr/Tx atdQL} a`WPy'=EDZLw{ԤZj|77ޣYr5C(E@Ow1rޣUBX_vQM`ypbg@we$/@|ݝjL@J6?=#Ng--^*H~Yo)j{&MUļF[Uey[ WۛCNUpxbvh7Jj u,DD7.m$7{Sˆ,9!}2 V֢u:dhzO|"_qyL\Ovz^TT:$$!\BgR *ɨ)I+EH{5g.?MWӷ@V# f^&J4NJ*F@Ɖg]OX϶ա\&Z?u8 >ő G``L 6@Yi ~Wsy_(1^%~%xqb"[k*SKLz1Mb rE/Ŀ=N&Y&}i (1iN۬S6¶ܱGuR}p_f;ڇ ].PKG1<ڈ?XC|J&upg*C)io= (Ձuƍy+A f($cw9`uBج͜Q/m%ͨdfU ɧGgpQ%T:dϯ/{!q (,6|[ : Y:nHy:^8+^@W9zv;uG\Es>T:xvYگZ2thtVS#s7R6a`c8h1 nV2_g`M<鱮A-A&r}[wp!LTNw8uIb; <ٗ[̹8+vu-1|E4zǩVV蓑+9매B5`y Z]ke~hHjMh׹(fWo7ya_#?cO/pe?+œ>,THWDܟGӪ01UBLӾΚo@4i ~@w\7RPR)>.@~ ooApچΘwSV~]{?kdi8 Թ,"`+߲T^iF 4!j/<;rKM t9 !]M ?5!xDm_%fvPy>u)=$Rts*KCm{x5f i"˻d(u8'"?̫o_ݜ[Q^)H9w#27 ۰ڗFѲ[xA)2N J>-X-9cG ^v4EďJ4 S M%UH3:׫Ha5zznM ȹM{Q?լ J=ވ|gĨk ;Kߖs)  T _g6_je&*YeX%80\>ivĂ+CRt׀Kb31 8p 7xe¯8_:aۇ6Bn|5@߅q, 7~`2^S'PM6&7dǤ\/a6تͨ7fհ2iV)g /~\ɼCy*%mOtߊ%'?q]?ifqcsjTC JG22  ݭDr+ڶ<$v '=1G\˗e JL+T0vj ͍*a]r ?b$,;a3iǽ)3 , m&R|0D0(!Gi GxS5qV΍b<=ڃ+">u0L|IGCϏ`4& yˆnVn7c䵹FxV_G o7G峍 [qHvM=<;y6x$IP9A}k÷Gq!gwF]Ehu෴E Amà2Pm[mD/5-(蝟Û{2 F6|@-zAE|'LA\m S\l @o]ZZ x3dбn"rVQʲcsi݇y&6۟2x'w3N;YuʜyGY+AU;[OV"蒔.h1:/{&O#'/C]v 7{k:c}ejXGH7KG*{٭,Z!qAF@B0ೊj3a3Z_&:sˆ)Fm&9·!hIM_.R=Aq"+nYx*S 2FNV7Ae%D$ H7[qPn4:I>{+Y4aw@WyfzOd0اqz9KZ`"N㩵J\Xw8纠p)۲S3o#L*95gҺ18<M1 /Ϊx7GWA `-rex" }s؎ӡ9S2x#x"%;(e"ex˰QZ(<'* lss-yu .JEyVd F˪.;b'؄YȀZy xS~E|)Zs 6$BB<.G5mGz,p8/5 3 'DY5;ksXԒ6EaйAZ5?W⯠ϋGH_0.r$OVC3Ԇj(eU2pXı0%hcIY%tQFeÈOTSi:$c]k5thӽG&DQyeF"_nˋN4vӤ[NR,nqqe`8"##`{WEF<lm@fܲ$!xK3,U2.FQ ݢZVƝCI߄u7b]_ٞrb6Pjp]. AFZͪ.7q<,1\1|3umzdd9PBME3[Yq;sbU n=+ݰŃHU$وŤlV#;:R1KDum9FQI b+ҩ!VM4pXG4P`ʨ9VŊm%Tfi~8bl5"! A퟊ViT)}`w7j SqC-~qR$ r) 9?w/Eޥ{14a2ɞG=`p:iKKM.I/q6 02I>p?^xbcQLĎ/t8J4Fȼ5Nmh@#7R)G6P" `q8>]c,Wbca(.YE:Pi~ `]Ӗ·= ]X]>`8 ]4$tX۽$%ۘ%+A*\ӱl!UϛS=vtR%N!p9˩d ^5UX~`")eafz'& F.ɱQ5#vvP1 -lsUpp`Vrq j]ܐ9m{F?4N5:-+b5޷d-+^Ni?3- 9bSGd1AW=)Ph/7;mS.PRL2GvC/u-.b/5M}Bҍ(+W{o¾,Jy ʻo6b"L`=4w?t}͑@IyFo c~aCfQݖ&lCNdp;+{t+4>lR_ pK aZ0V12.< 2AVNj /)my7HO3Mx[ z- A~>#}/;)V?_26C&]VEx($#.`Fid|m"^TnK dHxn/ΣDg6n,r%G˞ύxbF׳ *1|%ΘOU؛)hm߈{Ѐ&3# {|+&Vs`mo|;[=BH^]QwPAeWnS6"{ȗ.1vLǟr "* oҷ?-(*Y3HF)qiM 3%hmRiOi1 FVHnp! -mJf086dp\:S%ShYR˘.W"&;y7݁X ;o&q'c tJ]+vcuX8zS w$?Ygǹa#6hW-5h`e2#Bɴڃ4zGN9,iף3l$>+{QV佱g2-rgNarW OWaizv/ (_XhQ^ EȜ0VT{'<=oݵm"wMw7^NKd`#ier?IŮ2950MdHmXp;ky~a&+ݛ7 ? ީ -OEs+ⵝe*n`PR,-@\<dz[cA,A=t?Gʊx5 aSOh=|'=FGԁ5[xƟwj{je9DyVtO`lpeQSI? 6x$rqY-dΥ0J Jzsv=S̹b̹[ %ZV7AM<Z9H _nx$^yQ9;I8%f͂p 8 OԂ /T`_$Jb!^c^Ҳ55~F')Y5OaBP OFjq=UJ<5Q7 vΡPmCSê46@#ah1<: *Wdi(,>Q 5z bn 4?JCϥS T2 "* P){<k'm)%aՄk-H?ή V1-KmLo1M41P(&a.TR MR'Ro,O;RS -  )zG+߱g9 ZcYZt X@Ę@1Ш!#$CXE*iF_@uGng$e}߬Ɯ'k21JivޅGYI],g aP:;[Q.u*36' y$;8fcQ /`YcqnDW} UE*<7Q%b( wM" /\Hݾ<,ٝҗ$G:̺mAxq3LptS2dj@U.i`nxFYOW5:Kp >dz-N (|[j(n61J=wɺB=%GB{wM9`NtVY6oAN&\cZ7IvWsmT%Tx'@;VFS $"]$\ vY5(-ԕ_bݯI>%¾lߋ6vu*Xedq=1Kq͑.~d|:.}v\ݹ{:Boiof (]Z)va hkN7յi5|m)J) S5hFV6sVέ;ljgmT&Vv$tn`ȴ 0C{v5ȖD~})CHE}wA'L) wX; ַ꓊z!kņrqod\fUʗSpPN5rYGP0r%#hil Pt}kŐU W_7R%.YFK@D91m7\r8Ǘނw0;ώ=*ojɽ>̫%"Ӳ>`i)ig%Gf<ǴNP s2D=",tb}ܵF߼΁Ix7nחJ4sz8Z`KGs&9C,EXJ#^h pEUa=YRc{v<&({1\Pc˵e2ۀ2庘i`h3Cm8 P͸RC_%(`뷉>9&JPʷ+f"5}'_eU!3A3-wq⍉np;*amBD8.Xcݒcv|zo!,̳AgH8O'D2;b)5F2e&XU]hY|N8}'r-/hZI`.:l ;ֹn7-DKvC39H^njkxC#ϣc+]- N([|Gx?4K N_d:am鰠M -;n4 Zlmp|I8f,/ujŌf B%YZښ dpqk:Ile UxHS}0g6Ueb\7q>"AD~UPkX15"D2L "-({n]iךk؞KsL@UO\wmm4\S:!/4t8UaWq+Z5-vs `C'6t#IxkSTb[!A!hY6>RvXc CE*TRXͺreЎI>:4[wdO/@|EC:UC!?|8t-dG+m{b'+飢Rә7mE@Boϕa~$<-]$Kc$/6* _C?7rF}cNm}>ȃ\nD9ƛ9VS<\X]e\~/C)ĕ qz-2%W$&cruO(Ol)!w]p;SтlAŋx_]д`h, k4,|&(]fe8)!tnyՊH1ESAG!U`i`u! 8_2/r[J&1jN@8dIBE!6TUa6,"N񔸟asp0_ÄHPH7g]QOHG|cASJcplMfok!Gpt !R^Ԫc1E֦)'asz/McK;Uz1 |u-\?Qx?dpj)e/2m0z쬉5l*YWP C$]0F8) pq{]`ͤ:/"ߡjƥF)cQDɧxrTC}}˞S8Ԍ!h!k\]nP.j18 4GBbuqͤ$!!6W`ׂX S p] Mj $<}e/^j)k't@pclq+";XfO2-_@+W.3.^d2eBA΅3Fxׄ\C@.Rp;wjO " l&B]cK~ F߅<Urop*>guP;bむ+JΆ-5 Mw']]<WYL?1Ewϩ ,C-uc`L>#2逷W&ڶEC1dAm/ {DmX~yyP_Wr49^ؾ8d%, ºN'CPjU:%* T{޹TwmJ CN\pe!?36{j$?mxcšige&{<O*޵魳ƹ)Kp1efI6P37sFGS`:f)h.: LG2FNq2X n0z@@1+"a}^Q?~hp0H,JǺ ڙÈ{ 7^,1*eSW:S~:;'S.Jjg]|ǟRdV< p{ֽs3^{ꩄý KT]xm =+BPJ9aEC\+4vR#j݋'(|hf5 M'ˍ{ҡGj>Jb!n$%ZN\ J\^^: pN0HDS9#,+'RW3݂#*4o^QԢoN*v;nSpd aMy#}pN[cO]I/'+pdm{ZN ލƗkp!V~R~(۔)njlw泿GG~}X8Zh?Ѡ$aJ}ҚUHqQӺ?[&֟G4 P_,f\9{nQ?O_ݭfb%k\νhFnO:3a\gͫ;@qC+254.=cnS+AFvG,;S+Y&>acBpOP4M7׊.q].$Me ǻUij%pw_h^DY`ћR=ĕ߶^K)s\~ODr~OZQr!NL0g@ZJUG e45d#P#p)~gQXh]Ds{\*T2[eeN,+}4cxt7:+-f[u$IN.0FD\l2Mk` ޞ.;@h޽BGGc0E B("mPEeqslH4M L\t&.2ාF!ݮr>"}ɦ.K/`r%SvW^1 T^]sI_eB4ҟSC| ou\~[9E]lU@ ׶ig\ Q#trKSi͵Wbd)h!aW ; ls~ȍX/;QfUF%u`ͧ=+YXӱ(󦂉" 6K7G$`U s@(ۆїO\VX5Cy~f$x<_LIi-=ϡeΑ_aEFo3LHŠ~뵒#A;nC.|)L{ɶBN4k Ic=vd$a 8BesL>ԷE !=$/ FKͩSû1 bz_ Cci9vb\9\@|R;{-1jdEdRMm5y=@(" rӤs**XsیP/W,aXo` E~n0 FZX60%l0*V#i\_ ^<0V5s<?e$3jq)zBUfȣS} F%n*15;gZ+s>:_8MjF8`( Q_߃H =Qlw y{_:ˡ ~@Y݆LI.}72.7,<,`| q20o7]ӟvw+˅fQP.BiU] ڟ9l?B6#EVH=ļЬ?́]8M%B5( -M,#hשbHNS?2WWFU2]taHpcї෉M`UCŸB ,7Zb>o^9;cddFư7OMpP<0C~s>CBYY,Z>\J,] yE~yffiR֚:cJV°rf|#nֺ :!43άŅnN'~, wh+?yV; HPSWьuf+^VYGmg]aU{5I3Ҵj?/-RMoПo샽K0W;=Њ`MS$|])0iShX)nŻ5NmkCBan1lȰ<,nnn4TH/s[(\' A3Py~bRk\0~BCD!y}f|W%΂8AmK!>ԇ-gb$ `ʝnow>!rʱwǴnX|%>ۗ)>}_%s)(>FI4gvHG 5KH_^h5̌4Aw RnnS&Hz^Qr=;[sg)`כYBK\aRBe,V2=v-Qo ,÷FhIBY$*%em7m)*zM69;Vy4`mHϚ͟3կ*qL$k d@CL LnycQ :L&A(5>w'ioD2-VnO@CGAP2'{?Tf.9/EBC;&qKRt^Bq}e~: (o`I j(Ps*4KU2 +EtlEip=MH-n|T[)A]j84,9.#$N&KcҜK ҫRbM+/#; -nOnUtɭ]tAgui:P:S݃!r j&0炳T̷|rzx4vD8$zŇ^e$rwׇͽ .ƗkZ5Sr=*HxG"R7eHVl#ü,4"yO]k):J!Q{g#J ,bqt&7q48')8EOr*= GIraNgMO9l]H Ff=˽ !XV$Eˮ  1nOrR_@tJ0CL>E]^FN0oRBƟnvFɹ&80uk O=(e16&*rcpISk@݈rpH}ö7y+`g8cYMk^"fXS3|mOm%ۚ,UevH/əi pQN{P^#V7DngOq]W͔ܙ Vм干U,0:CXr7~C̩RQ=tv]^z\9!f֯ "FnQ~mg*s #A{<ךWb[zS,Ѿ?v@SWW2d }JF\OO麶]lRLNY"#;jQWMCЊy=ʳ*pO1hDʂtڟMN}_w)tN2.w%M\/CX[!JޏB|;tsUvϮ2'GC?)hS5ьatY1Gw|X8KH!ٍdi82y4`B)gJsyE#GՂ%:d]!⳽3xl %@ SḅڣbʺSg*^24}8SSWh z3]]-zSזg]2hE(cϖnk O|\w]hef$?RƜ\-M9c~}uikvfďE/qT@1hP;B+iQtQbߑU+_qM VkLcFW.wPU piOMVzŢ落/d7@ qD2.w; )1ޣQ&Yd=B[rRf'sMb|<&ň/TԒ<F &2OX|.Z4LOLyD6\D-E6<S (يW%œ)$OGH".Z'T))gPwڃUBMvɥ`ud&:2"0e jObpJ=Nw61{zdgآZadV ~8/vgo+pTcpzG)NMk\un0 >yb{i 4e,y*&iioj^}$E6*3B7|fsX&;bMgsFZLleߖtAx?5ǞMD3!cŃ̊t, Q1 - o$P 򪘗T{ŷJ4MBu3c灎 Cۊ]GA8߷-?`-NВ}E#M`&湵z{"huHkk?u1]0)K.6{THŰzxGP[476 n !fgtk>z w0̂Q5([)њ您I7y8x͹T?wL 8:$J_ dB@DZfrqG''bUlCc ç6`숲8$4a˜YОm쎛4Vz܋ޒ#hB~ Z2_j =Y ţ:/sbceeᚊ.-QO=c. jye- "5i,[y=^|$5_PƉt}Eeh#`By|3tԟNA uф=`yVl]#H+Ҹp) jm*5+U@y !dZ;;#|2 «.Юb,sr4G_۽L[  {PKWc׵n0VXZȋ"~S%_,# dq`4F?u\8s=O ,<\6Isr< m}8W X̿Ea{X _8}\!XHsS2[gkAjN6'P-\h&@ӝVe釣 }LHvs neV-*uo }?@nj#Jc4 *Kԥ۲-~[ƣ" 7٘ 6#Wy֏lPʣ}K{ b)$vJ菕rjYqlJ6yAo6~o.09)KL! lYKd0\6-EW8 M3ϕnh]RnpՓS9o14sE󧻼f' ?JMnٻ<-48S #TpIzX-`\cc/\teZB"fū,~X/W1hQ%mM `y0ug:%7+?ȑ2 )b2[79e3E GkM9 "974q$3FK'eC' ";DPhX~Vk_UIrNU N D[G\DOFˍg\68ܱm`+%o<%;慄%m&jVT{''0L7}ESO5-+Fe4cfʾhel9 ]ʋ,TPӎY4]n,eO ntG \G$7MI)v70|ԁM-fYg`fw !Qi)fIЍRIӪH_":Lؐ-LSN@60H}65]sڙG"ֲ0p┯*%b)Pq[ z+R4kOz?<4ĮqS/'_#&13TR8s]" Q ed)7rF&#=r?IV.\ވQʼ)"*BJ{opONrx]XuM~T9to_N+ 7| %߂s1}pIvhh46_/iEy B^w2C[ы/6U/)˶մ;|_pG-%E$4 QH\^uXIf+ܓˉѶ y1 DzeiR~pdP(4 5١#; [ !Q-@Xt u5,RHAKW9V{Q+,cDnҮE MZ18=(Z{ǖDσRyĦ滄S0\(ASm5 . 9cZ)P)>fT~ڝXDYuG+f ĤP\Nnni@a"&Q5C5J 1 HRcez{a2UIq?r'@F{sM? )#@-(wOzrTB%Ϯ)D%2 aU!Dba4hv<긒JdlHDZ6x}v\gRy*ƴ)K'e+V b{83U'"qCYe =bX Ml3/pST9 $cR窑_r͟w:aT~Ϥ҅J5/B$+qbZg Xy-*x!TD:EEXM Y3VJ.zp5 D"y/H:&6-Ƽ^( 8R`&MDn3zȥ~Hh< eGl qC*MYSٟ.P_Vga`nGAKmFSa\w)H'Dדc&57)|ȏPC -zIgBcsHt2N~kȲm@y+kT3r kD}&}.zG=R?08'Je"ɩ 2`,m`2g&@]hw4Qq`|RQErbƑ;4 ~Xe&݀4/}JW[:GvfdqۀїJ`^k' 9X zPoQbot9N)'zB7E7yү(JiRoe[6hE!nԥU)6HݿLa* XcK;*o"[n3 n%C1π~-b [zI}ٽ]pk@ Ӕx<2Z t)^|w?DlEєTC&UWn~e=ܿϑc<ƅ3V^ԢK[^:$(0Z"eJ 3icZ$dypײOTOI)o;ErZ^;~;⃃#SMV fUuUɂ:DD$ې^#w lܗqxSU06~\RH^F9e6HV#h?Kx[lu&* i4?oh$%z_X^kdt\d/۱+cɳ蜜-(.q7|}[ێN-焾޳4W3kbL0a¬qvQYzQje2MrYm$LNX,dдYrhe G; FC ʨr\vYUK VoThNWH`ӔV=s#M*" in(Q<4ˋԸ(8GAG0gTk;h^?Gc=\HԗoCSBᚪ͍(4̀ u'-Voq_Uq˙O,d]_FXm 7N+v-ZW۪(0C غi:E=Ƃ1=P[9pH殣3q.=2GPhr<*D kdh] ʷde>'<\Q̚)]|T 2Y$R2mO~M`Cc߂dl|Y㳻d` Ϗm76bZآӿ>`Td.3=9 z@"5(^o?`UDmF[İڷ/g [$v/p0tj+S^J@Uᇾ ݮKB;Kt[|`}8?/xƘ'!ϒ[mr|]jE睡s^-”>Ԅ 1epwê\3 X]_oȱ Kym}\$)MA]?yӯFV@E^|]a} vx@B۴lV_km; >=iN&-O{Pg n: Iݜea^h붜\p5PA"y2sNL857X7m2֟;!z0R .{jqGPSrwYM=ي.z/Z;D_$Ep*Z:Y͈w ۍ@TS7OJ\2՟8'W! em"*3mm7c%J}O6Bm)ΆJSs bͭ5\7nz`dl lxI]ck AMO $/ XD-tsSm!j`v*y"X  y($y&]Lk{<:^ wGE''N20zzvag| 6+$URĠ!Q|V< $?~uVâk-۴Q*z7oUIh9ؗEԥPtr<օNrwyz(#QG}sIM@#: z?_z>VAlٙ&TڇÚDmm98]ٴ 5 qS]ij&/Y?(T"kCՐЯ-K$۶t{ u8mE&or?SP K &< $A#hYf-^jFǵB'~AgM@"]?_i`[y1j);33u >0ŗ_F[/q3,X͏Zdi dyb/vI@=(:u@\HK> ǙNKw_LZD2qϏ vTj%p,v^' LjgmCLV]?P?:H@ dSZrIZK%]X./dAc} `"4VbFDzҍО-Gq2,%|@RtA׀74az)xt_|H]T0C9 :]Iy5Vo1M%ݺ\7| Q2&wmRM[CF Kx>^)1U* I[6^ _q`)wІa60^5ɀ{=G"'TI=Ġ|&_- |TAa";d'pDLF_t 4k.&-زrfI5I:H+F L\Y*FCO<I llΑ,::ygMoGsZhqc [$iO42%VG'Dt?kcʁiUWYk`)hw/۫6u1gjMYJ!mJ1ڝ'Iy" 7nb۪45WpAbtYC6Մ(lFuoH".'yg$L;\,$7uFFcSaJe@bJZD:y,tҧdr7Wfkp&JWk26UJ}d2*_tA1spqn#HKX /SQ*f]#jGL#,e}ƤUk_1Wa;۫}۝Ku Iɇl݌E&jsRov6>e`甴yjdn-UYTS~ ̟x3,OTRBx^ sbO Cݿ a"y2\Dt2ϽOKBϽE;1#Rok8%p_V}I@oVN!0j;fQxq"EЍQ3iA&OkJEG6dS]C<Ts]O!,J[ݷ\;бQ-h#!^m  M]Y3Qy&#P dLYӃcg鑵ލ< T iYc$hLQcc_M j!q&U3|904ljOO`zd`}A!p7ۖ?*JRU%'+X~^}:I*&wi_/߱5ԜlEXa&Ϭ)YBGS e+#P#+;^\((9(uB${cGХx!Ꞛ@e>;1+¬m{}nTqs"nn]-JmΩkG%?4񪏷ނ+$#Fw ˆO5){IEl?HL*o=ʭ>7fi0@B`\!qQmOZVfV} ԯڬ,O G#wcW.JLwj,*t yf.^f63^P426;w9i#4w7",NQb#Ǿp(k~*^LD μI*g]SƠB24r *<:؞6 m9;a}aL 酟5I'-2y?.eS{Ze.u-"Bw67}e|o!Aݖ+!=j5嚶)GLS6РhE~xsݖQ+Ә3-"a$MSIE-l~@#e|Eۥ9"gFL*`ԻUA yb2Xc2 L~l~&b$8wZwPi#&>TŇ YQ8nF(|q˦McTԉf!k6}竻"VUJ߯-9ƠRi0ku:_0Ǐ#;ęn ݄ԧ4#9F/_MH5^9:Dh-RQ[>. Gqg?'_< %TgwoDEyN_p=lS0*H<u%RvDu-鶸kp)e{jԩcC47s&w;)}?@Ń@vrb-ؖћA%=ײMaFL1֕.gJԘw-groJԦ<.wOZ~2я4^LI|pz;FU -B+Iďgw&> BکnFg9ps!&(U\ ҥ9UĀr?pgb&߬wԖv#,J=sU;{mo8[}[ Z'Q-KKR4Lў*RM@%-(>b6GVѓ+6@1ZeL֣"&VGjrE#_^w;.R #ޅX]6'J.\-eV~=s~GMkdll NR{C\i,Fn6ħ);Z+Nr9D)38s7q߮Y{o6 ؂mRₔmh`7aS_׹^ޖ[dvFBEZ.5Ѥ+$ߒ#eu;T,= +<妙1M4Ri٫V1:7tfެTg~ea]s#u'=PW)@퓿(?O=+a4=wnᲤ"o&oمIZIC x REgvdm_s =!5rvzF{3`0*3a XtZl{' k-t/@M6Mt'].ekXlJ5{_k'0fϧIIDr+w5@I8aJ/?\ZqwmWeY+eK'I3sϦF}KE.O}L ;<^hut>8fRnY$CaTVqneֆs)ӞFY#.AΆ,%+|dUԚJ.v0E`CoHL_Q<uL( 4dh^raaө dTk̶-*I[rlm Z#4;O >ĬZ<6+ [D:RL,[w_!Vey2]No7{tGl|J 3$BQ[Ơw}MjxI`u|:Dʦ٨v`¹E >*$U:WSqqD3_?d5"xGSG{Mo^kJ[  wH.>ƭLaV>__:tv8^{ICNVN.xS p 36#0y]%Vȯhtj3{MaQ'MS,"@-7lɑܩbM$ @C(S-G}jc7[J D[8c:Bb@WgXM*{&ߥ>.@aa&!jܺ &ه1P Yq3&MSt<=&)BI7[l4\`/][l~nHB@QKn^s) ȿl2eGޱ{kf#A&k~?Rqt #Ji>V㔯?!t01iUz<'y4+C.%a#VY>}u{.3P?ve$( RneG Frr -6LCԢ4Mža^ sd( 3=WZ2ܘkʼ/du(MbHJhz_oG_ZPn((%H#ZUۦ 9ngh%iMhA3`oKUN noJ.O(B K=cاF}+("a_0gʥz`ckoEHJ (crBL~£3,79^`+_v֊)Qob(֑ŠTQ IOSXQO~gkXLJVY*Ek_>7хP##b]0#0wGi:bQp![=FTՁ~N[4ԅqK%Q%C2 Kbڙ(G7@EG-8"9et`Piْ `dP1+41dLJSn  Ƣ3j טsE DpX*R3g]*ʰ2~F (Ge[laS n\#[1~qXr'**P V̅qq H'^rJd\iuˀV'03BP2iiJ+4UA~C@_Ms9۶ Dn)BA#iO|^\51I̾teB vܦkK ZPapY B1wx}6 ,gQ0160?Vs;.LFBe|->s+^:Ē @"S#g zd5_wKP#1EVW~4I7qhu66]׏ %;TaǕmɠ_GSx^m k7UKTlwe!t?Pup󤮑.Fx@.#oKO6oL/38KϷFѷrAy tԐ)2?bj!Inffp)h K[mt pYu1~;[nUWCF#4kc'gz$ Mipz.k JҨDzZ 5MYzD{eA`C>tn& TH ! ZL',rUWIl b 5ڷ<9-؈ IN|nlan׀qZsg` pNݼ:"2XKi H{O5nI<ߣ%KHobLpa-Ԙ4%uVIf(2'-TnG {btF(@BźB:NBΧv@S0= mP@ xeˣm˱leDATD9J Vk/w+UZ+B*pkAFK[}-mmM*wSݟc#C zh!p7N0wQ3M'q@ECN a{hF.F솨~-Bުq P"UDZ"Z Hv6,0a6MIiUSۘAHBc?'VaSe1 ;*ofazէ /ddN`Q"4G˂5V6(ńR/Q [?@a1QLh(zMm 3c#s"b2 -He)XG Ûd3l5]p*jISZ5QAUIQ+MҭT3*L12ڎPQ}"冮 \ffXj,4Bn8**'1D `#~_)QSY*2,QUjPAG@ED_ڈ" qA{Ia yTx;r`N(p0VҖ7W* AS|Tf,&QU0}Jƴ|2%$&9bz\_ 5SnW}2ݮ)aG[Q -}:6*|{FO/:?ӛlNjˬ}<[Y\[ƭzQ񉛶y;3wV[;|76E[as;ZyV{nXu~^8oQvO翩?$gy`Ǽg3y x#-{ iÂ~s3;:h>~itmO]TGvWz+ )Cފ!flH+#L7ZTET2OLXweo{<%i71ez7"@؆N[ ug%}XwJmO~mm\0HYm1l7AU_h+*z)dSr߯%:E ,$k уh#g+z.zw^WrwPn~RގtwJ#17˂<YKs:'5N-!:)GVVij̭+Dl_X;$v}@]׉lCSXC$}0ktl+1k@T|kc?p}Nb}H`.;](W^ +TZ }7=^ ^ٌ̻.22+D he,7e"nQoˮa@ߛ?tR[F{*P{RO[8`E2{<5ާdFaR B|swĭ'ҁDbMe%WG_m+dlDM =M6a{6 a^H"AQWj4p /w_:eϬ { IPg\Àڽ(5ڱl4OvK2Egn˩EhBNip}`N^IəGo3:AXu/OTnedn$b?IrffS9g$ XQ HhXD 27]`Fn/qTo R(?D5uNwe[ tV-fna9"+^U5u3ptݸxYB)kt/m`_"^~EGS||ھ'Ǽ3309YA@. zj{7ګr| 7:Wun2~,` d,YZW8߬n;(_M~;:J5譖PI_p; sVKfh3]Qn|ˆ[ABEX#5hI?{ l~O?HPnN䪪m F>[-9Lb>˿Rb?[ꦾߢ`<.݃yI yА,ۤopkug{kT5XXL+)60F[>TUf.z/snoMac{$׍ ၞɨӹpow lWjEx5!&rIlND+G3Et=}7ӹKv q?6lw}gұ42\&K)enSUdt4[]56Xve$1>/j߮G~L𲟆[~Vz{m~Ow{Y ́ )'⦓hJi`,m9w W}韭P U"I*4|(~yY5~yoM=/u돔APNc\`#' ꈪ"BEQKh%U,A7(55,3CN7lK1󌪝LC~[51ws.mq|-iorEȀ%W$vL6gv_U4x424bn,t 7 y7I3JtIdt $µ; Uʺg.U lham +NkTu?aճa\ñtcRC3 7gSTfvI݆z~RAފ zAW߸tz[--rdnRO<_1C {޻IWhxZqru4yZ8^\f dfA0g"65eÚ02#Z`aSO<ݵ*m-;_De"]v(3x{}ya7̺ϊ8@l4R,zL2_'{NχOMW5>n44t%N0©0F"Ч>Ƞ-J!=:WGW$Džɟb9֎T0 孝Z[bIj !)i# Ig ǁM!d;ѿ8tw7>D Y%ZOJwǢ'#{?1\N[a i qnM*4UXmt>3z{EHvP^ 9N" ^tRx7Z.-$m;RA<'\zSvlHaWJV}+ ٌOð-ک"x٤fzhLb˪gbڜ/P$(ixP ( @~vk]f;uK 5K̃w!CBL b}UPE/_c2RUR~ A0ÄAÄ9]uoialN_llGۭ'aLB tYAK!@A.)a+"ֹFi- .r87]Øg :` =>K:h|kH bX d32!Lך4r eFTF :@t圄,PTs;{X {s$Z U)4ګR1@2qS'vkYϳ:jXJwLHPb0 .iTTi 1S.LS|OպƺT=;8妇|-'_(،%U)]q,x;9@jI=9?H:WEN4*[^|Z8rk&Xt1| |ӲW StK]0r+}| b쏣0, x)$!R+>\вA-2!% dt:5WgS2QbFzy탩SiQ pH Tr$d #;cguVVˍE|E~}Cc/McytZC|69,{Z.~F:G䰸$]cy_wå֏k*Lt?{ufZ#yj,_ɓ`o*ZQ_mJŧOa1DD b(;}_v cwwۭAWq2=/#}  fCpe4o*ss#OE pSl :N>e}_鯖'?5To}Fd޾"=X]n& WKS8z7w7z$  BubVO({9PTH%J;0o'[Hqc x i<_d:8}˭b ֡+Mڏ6T\7P?" ~T:](MI/&˞';;DP>uHD!](Y(X.aG$_&WHQx:"'.*(p(HP%Du8 >\4Ct0E|4MYP)qG12>2Sa* 2P^'$@kxX+PHcKVj?`v0򜗚z0֎*߇48z>;AoMdӹy^{!bH賏y ߡ[{ݡqԗfϫ€+BA N%F|Lǣ\Bڪ݅ވOV5F d=Mk.,{؟$,9z4={}!dF 2  V*&J"&(/߭?-1UUHiF"b(y fmDEY KsEz`.)J{?ȏ>p2;4Dfd\dot="ovP`P*}(7m"u^/XD5 #p"R+h"V?#j»OĄIk@ <+@jV(~X=~?TEzmX4CZ`^GB20v| !7Ѧkޮ*aH 65bI:/ecyŗl&|eoJnwJ%$CC~_1ʌ~JjP2T|(9 |3ӗwu'q_N/7b^筕便v;: cj<=\En9 {ޫ/=,7[/so7[y=vTܷ/ icEXk8/_M ̈H0Aq$?kp HzttedҦ1+&e1}:Ofx|FH_ (M8Lp?w_Q{ꠥ (m*#cp88Q =, "`Hq%6QCHD>t WT ?xiLyǝ#!`R7㨅θup Ijd1R{PH$vS})lju-fIp'?o +rvUa{/q~սoU˝'܈WKxRֿg;yf>|M<>Hoe|v;1iOD[ )blY'Msˋ$P baBZw|#z6l{[\WHʶ'C-B2}8U7 `æ \g($Q>:FЭk a @XU ޖ~,@'ŘM^$Hˬɲrx;yZCӚ}&'ASUYc88=N¬v,e[Cw鱫Pha˃| sՏl6,uk8 әd17m-݀x,k8_VMMW>Ss?:.s뗸o:n;w^/i1dyrfw ,G땼~m5[[7H f+}?/"3?f@nrֵV]ZS+'Կߞ,Rk<7ݠG~j?YOoO?zC3BռssWH: 9iq STPSDLb+XDD_^+Abvh(((IA@DUǘy/L<[@貖GO鹦x_w% KӷU 0 zNb A9f Aˈh4КNG~PC2;x%1c;dcwU/3{*|"n"B78T/-=5Ս^KŐī:2Q(A3PdVAAy?^߄tGgv*ֱxpMӨAg2ukHTt:_Vn?/s!?f;fgE3VS3m4r:u:|٭'ivUmj=ş8韆G?ބ*&Q>xzH~T,>CD075+|P<=GPi)AÜ|˅`4>uTBbX"E TÈ$څSoiU](!OJg"fE\BЉU{>#@B'J E?!Q|lfA~v@CC ' ?@LB!J)(Oߑ1@F!'U'}uh܀s7޿?9x}+~~o ukWWm=]Gn@ho{)7qa>M CFi3HBJP #hbsK=ogRڟZcTjxuR ivݿ_7?u @>a8F0Z-D1v(&#BK$LK$ 3Ϥm6YJh_^9'}3ׯULw7gjzJdNa2nKJDȴ"}/R]76hqHfu¯cIgCi_ \s,*ox¹$ѝ|b*X_>{ ov؆ -BttŴ i;] _u&~d@-\mgHvy3q>]/}c+ X+iM~#JE&[,0Vو0bARU((P JQ((Sq;**Z6+4Mj6Ym3f4bC?~T"kػw:F#?V"F1QR{]d)7hH#6\{Kkn&Owy i7bD*YOZ_jwIoҹgyꝇujyJ6pK}D5d7\=&$S" ZLJ~CxNa@9 XKV GhXY3Aΰk>o7 +S)=dhKK)EZSD|װp_тO*©E=qRtAHI`A_zK ]is]ی(Шd-; P~{4 n9P/5\)N|'^vlGΧnBd_wWz_xeM?vj 7c^NNKa~ʕ?DښzsTZho+}ܖ֛a6tZ7qd5w^% hw9gzZ/,ދ'Ox?旜C=֟87wNw5̾yCżw󎞴S@ܭ<'NgBt9LPdfd`Ȍ sGm~NǂTDgg3v%׌-1YϝSDlov?c\r  9u#ě!swGijD43J BUr5~CN*IJ0̱UW/?/ [jDo? $s'Ӧ6,f h yTt}ڊSN7/v/<鈝{nEA Y&SBr87Di} F`haWiy H7ݶA A֠ VsĵCFn!D?\6T*]ԈQcɮk!?M/?OS?zf\ Ղ5~kmfI 1)+Q*VE* +`(b,Pb@i) JhRd,+s>7%`Rr JXc( RX[kv,b\]:쮋) t4!LJò9CgzzTEt*&\"zMcF 0Xfg|uo^ oS۞!~WȠmRo/Ӷh]/}}҅ Y5[h Y;<% T.BAcnZ_ t'cd-} k'ծ$TKE ]Jbm|^?3m p>3{~2=8>|gC-Ԅkk+x;3)gH NrC 4&BS_3m=俀:OwE{GQPEnjT5[J[bF`ob,E-9DL*Yjc>Lt7vyck{@Sޜ1$c<5*BŬ 6kؤm(Vb jlcXu y7kɌ1 P=z6pJ5, ke혔&,y|tܵJËPbji['9B Ch [ 5Rlbdg"U"-(l3|d d(r4+̌mx"΋̄ ,(p nmu rwe~co0쉿R*肏+h1G*~T[Z‡mo 9ôZ^6o`ᘹ^L4ߛ* \뿫~>:*,u0+ai);Ug&ɋOY\'zkX#b!eݴ_s>QK-F}SۜӜq34sܰbh!^ 3QN_Z5|Q6樆sxFiZ4DY`S 1_:mvx9k%%p6,mOGToiyP]y:oٟKG?ߔ\!İ @_yeX^'!zevt>] | dJ(~lD޴jQ(lX, YZJ1JT(Ŭyr)0 Pzz2b1|۾NCiPXG,E 7>i]=w{ |+2 ́i&fkD&ٴ 󹩡d5μ UCjARa;+ 3~A7{~ɪkÊ6`/5g^Kl{ NxV_:4( WB- ëis?=u>~,EMSCS~gxaq7..Vog*)d@dlB $ 42Jrˏn1}'*߾o>mW3A@bxk,f#"3 = . X[n kBf_+7fuϟ뇻~;d06͝ˑqOe-R2@ڋGrjPpJ:I4`MPPG@{R!H QG C%Cev^,'8uO\k&*U4}UX }UlӍ / SBd #&ǗyIj'Z~-ǟXbbޢ/U mt0Xj& X @zNf-wyɗ'N$!f쪐T0l-닋bk`kL~zeir9ܞ/_-[,ݶ[ L5YxJy/kn_b8oS9Wj_/Wy`?.\]q8js_+m|>mj)T]xp ٍyw @D& HZX3~k'Xgbwon m*$7q _z11;(vJ4,JT !w70DN8FZ|5?Br DTfzOX4"&{\u=˅OgzuBE">OSsĀ"*R:B| CBcaFX("I7B "'I!L@ B @*6Dwp4\Pn'WG4K|}>~gˆ"eIvQbqZ1y ?g"V ȷZ>rƾLeݩ ¡l4(q+ 9iS|aiF! /?H>>]BDz,kU=Eș|ZͷdOeGܻIT666?"~$ 7J}J,=N 3Z~--T-E$#Aݭ:_Ѧ+Ѱ'YjTCzM:/~.D3Bp]lC&F9w9X"vdnOMzfom.t7xIbD2)ROY6|7w7eUffNF%TJ(^%wD T&982<աPPvg9T~lmz}d+n|;W=^y[b~.6ndz{\ }L a.V\{{a18)MT?mt(HQ 돊=o/c{|sE!'Xx 9v=b΂y0Da0x{"b Jz&\jy !9xϸwA[r! ޒ]m=X/ZN~n,c~ֆP쥫|Kt`zEX @ 4j3+2^(cXRȟ%{8ܝϹN˳yB@0FԵץxwU ~\ptO~*Qҍ 'PVdln{)ܬ d[WlN%_/Nڮs=8w+ k>)6;ˣ&`@. Fwv8^.r  Kx`m׼~nZMv1ԞaU˥mˇ=LirjOs 72%QGqUjw:8%j4u#z)|cyca/o/u͎WmsX~m8 m}(8%/bpL^Dzl&6}q\^ Vzw[OGFn$,dK,$d_M[~=7>FmZU('G֨&_\ + ~(CqC)[u7(,SԬ4` 9ϢӴ %43PT.Au]f $/Uw%G?{{?j،GQ,eSuvů^WyG{P=x޶F5pĩ|'e;#2aCBo~)jpHk}9`S˹.ꅦIw 7[m_8n]\!^#̷1&UYn-Y@VDQƫ~P,2]Z#%㾔 9ΣxĤ.^msR>Otm!Iw]q,7JK7?xԼ>Vdm 'B)_DbT!W]:|g_:y#:NWwGv^v{zjsgz&6VU,3{wMl39RdPʱ2̯[a2ų^sp1IT4s=V yM=O 9U.*I@_]#a;$@DDGwTWաwoF ?s~gq華8-r )I̢breX`F9UK3Ieej447$ˊy{VKq= lqJR X3Ri3\P!9Dhh 3.J(?sW?g%O(gR _H gMEBJPO?:7e)Uˑ_ (3 !]>PU(.ERH ]E e$5i{fg3!d"bmBUTa[;ϟJ[g#Ji^sRk]'j} օh%ƙSF IKFO<g0Չ@Nޥ*`bDrl'@"H)ATȀ"xqQ:HaS |'A_e7pD<CQkFgJugkQ|>!)io~Ȭw9zЙ )CAFavTwC&?Y)sA Is2ţ54BDQO#VgQ+7R={LNiڶf-$ t<2Α1S%:NX>v| 2:|hvHDIl,%n\K%f̍ts{>f؏c!:71mj^"rG&]%Kn`G0d&`VNر=Ktff:ћsjDEې cM$/.TcpW3Qs>1=JPFޝ0ep;{n~b>?XL[ًUZоLakG7yE_}dS ËsRWkEA*El ³~}/vK\[2P c`~Ȁ"ɓ =_sߋa=wP3P7~N/M [f*,RG܈yhHм}c=$d3kt斢D׵y8ѫ&[D48o \R.Mkޙ"|Pe2񵶚.U뤓X ƨbӊfC *oq[̳_÷rE`[ ], 9E`\>sS z4obqos;;fM'du0as!(F Lcۮu) P4Hp+n^Wsծe7Н(cmjR Ej۟M.tz71 2er@5vJwlR|l4Άo5,ϛp4ʘV9$0 c7ON~3h c0v abPWdU $PҢP&@@^4U?lOyUvHwDUqDjp'g} * e1nUK` rΖFUNߖ|7YfLB[I5lĒGŹʐj-Juupy%ɢ?=ƕkXS@ ]_lO{9Yi$`R$."J}&7"ּT=)N@0^PSFb6XX#5wԙ]Z\E V'Ԫ$Ig$'ֶ5˙SvN]۾8K7Tbwń" ubaҨӇoX(I27 Ls*W؀/|[P@'%G*h EP6UȞ%3j*!Z{ӭRA 4ę#o&*7a6AH+Yu$a^`o뺻,NeB~oD!tF~jC,5!HR=%ђolPw3׬2cԝ/b|X*Z)FU_y`FRff@}q\$ގ0A f/ !5f]]{YN!?/h;غuHk~$jSW~*vjJbRhKO}ZѼA.{DT򉇓 b@ސ㎤DXFSߧsv[z&<=V]]vFLZJ}\ה2I"%Hf@#҅;JsUJLEIblWtYJNY6#죥=_*Ѿ,NeQGyHߘP=c$,aPCzk>=Šä-Y=[C H)#΁%qNdnࢥsM6 9 9 qE$~[x|ػ{1}+;^3(+“Dٴa iD=7i߹/yM!oxԢU@%(r3"'/z`_:M m "wXj~DY ViH%{h \Ձ) n}96G0iKmd{yפ*AnRDnn=j`ݨ]߰4XT-(ڠhiA/J'kz萵lx jοVe}˶$õfrׇpyyF/&%# \+_X-uD]h@,k0ufLך*d$j|B DԞ@h]f/`_43'ozz'w}831r',f"Xӕtt?6qU*z` z/H΋/&Bk/rVtF ٠ѽM&ɢ^(WvB # Xj.z.B};|ݳjkꣴa ڿvwSkgNo1O7"Q dIÆy#jZbZD"o*s&Rzh_8(Ƀ'=3r 1XؗdHɿ-o 39zm^7G:9A$!\i|W eĸ~ hLJf ^|]ۅ/5M)2ʭ /=bXlyTLB$Ag;E Թ.e%f-#'XH7OEF?-la@&)`Qi {.q#S1g\"tKC{Og̓Mj[Y=d}sݤK+MŤ%dHG-utZ{Sp;ZQY*C~(\0 Bgϸ| ! 063λXWCfй /y 8e$Qk9fkn!=z[o\VaƾcUR;.}07'42׿t- k6_aSm֠X/b zANHжYb4VZx^~UxHHa鞄xvB( 'y{)ٿ٧%pyHb |mCDʥ 0H-/n{!'u>3cSٚ<]zb1=Jڲs{U:bP) }.;Ȱ (b~y^$Ȍ ._Scs~׿x¥˕5z`ŻF"]EUƺ;"BLhҰ Zx=@{z'J!^FcEAJ\UWm] |fEZ ݅zGoq <)P /3hYChZ C=0fQe2vY 3:)Jr6]܀ W%T,v+CAHiZ@Y1hmqqZKO (̔zuٯWI(uwhY5]#|3/<͉6 = Bi`Kݬf>]%l; WNUjYN0V/c Z<۝]<={ý~ED[gKY8(pp`jڒp9.K4Dj܏{. Zt=7jWcƑRIZxO>wi.RpܷAcKhzq;^o+cԣGeoE!MqГ̂FZN )d*#^Go|RKF5E/*_mWк44z8*/Ȃ89hE ;wYz=oV>~Gsv5;Ϭ=`/?HdȥM( "mZN@%I<.e-&x⓾⎒w-x ÒQ/)0vΛ[w-`~B )@NVsQW bQLQ:w9Nb(\U ѤPF^ :4x7ڶ"&c'/)uY%͘+{p6 yV`".D9:F DK\| Xgב( p:ʏ#?V;K|yI>SޤK2qނjHGac7dQ"" uv;.5-Fi3W#=&P'aIЂ#5o+R)˹1@z:x[hS-ߏC{ ^_0,ʘ>%H昹ۃadE2}3" //V ;@-[OT]p,ĝ\EV2V Fm~2mN]͈hbKñYw3]6ڊX594Hvw}~Mrd]?Po#aej5y Q>oÚK喠trye&r%ݛz߫x}[QɥMxu ˤMc)ScoQ^m4 [/&H?1l+v/R/9ʋ].ɻ ٓa[Wt %=O;wN=fY69 1b񵼲if/]M o۶dcÔqC3Ru_Q.9ڦZ%T;?_%~U5|K>#C G(eU!9jBE?=|mt` AUv=WR=?>?'G<:{\!GVC8uCk>:rqF*9;o&(^R=|ǁ󲈛҇bC Gl' A'i"w@Om D]*zw!T?v" ȅD:)UE0/bB,0sL<_߃Yoْv&:Jh,xgxi~@0r}%{=*A!+gCQNվ)-'׷3hY,18nɫKuJHD뺬1Æ'wd܇RK -%cC6ۢISs <Vتaeùf7.!LH`a1$TRR%DAZARRP`FE[arYݞg2򛣕"vސ<{/YQUMQ$g]m$Zubĥ>y%冓p'57F+D=s>j㞘LH?Lo1xv~EW6]O1 al8M,lb/(dPؒDqQ1ݎ-yD \nH}7 8ʐ @Qz?Jn&hn+o bfb"bߧwyS GV^ZTmoP<xgs΀NTK(W1@[5ĮHD]);>:&8{o2, %wƨohwNy;8r@8&ZDM&*X.-}1 {=S[շo!ʡ:xjpo6w ۆr #tS[K[6nN9b $µ.~ɾ6HB8cx܅xcCfDdziHE,ANȣaЏ\$s݅xI(OcޣpkkP8~-t%#ؖG#$=%8InTWxx豫-QRtؐo!kY}kǮ 61OtKKZ@`F^{ ǒ__Go7Bhk`BPD$yC˝.d<5!6Hn24@HB R:HK ?kÚSi7~=r S6Jw}JP:7R#PX_Gy, i" mE * 9 x? ąDpr\YG<>v֏|j"a[}8~Tu>=|R9a_iM`* ;l :`=#Iub R< B)^EC /JA ?roHQ@L+ed8r;6{w:Xå6hS5(ڪZj$ ޺2Ǻ{-|nt剖K}m[mC`j_ʦGSl dMec:` Xڿ^C&@ؖb.K-~ǯ,( 8Y)d:gOVu% '*>6Q*R,W{yu74J[+r0\8rnHr8 z$7|p9@bEH:̂kҨv,]SpuE2@0ɒX']0׻PY4<跖ޞ;S=_K* e!GF},WNՍ6d<HY3B/ 7m_*7ߚKTͦb LRt:i%D ))RiP0La:.RxҀd^(T)%`B(-eNRa6&0> O<&L*p,Vi0`jaRrÌY;xY 3wl68|SYNP5kJGab͌u]qT7s$^p!0qn-;C_z\b;7lΗ&lЕPT3ݶ! iuW Oc $ #ܫVH;\O?YtWѾoBp["elz/  5hgaw'8aqkgĆp`'p͂R%Z^Mđb$^- c4i#_CQ0 npwrWSe#G :ѽHW0\'$g"0XĒԠ; p*if %V( TWfh{O5r2[qus߬PĞ[(bd>?\xxu[ b-dܷߌDߑpLqFgMmɴƷz! gnӲL0Uv[üΞ? BǹuEƁKFGY8E :٤IСXVn\.JK-iBHhK]w=-q9'.m9ױ@XvhЅ0Xo]Ÿ> >>y$79vN {G\tN<d|C>GC ai`s#߷V`l6diwthZ+֊ms,v޿}/DJO'Zp{a!nv>Хv9#GhLe,45:a~5^^jNnJ0 "D"gH9H!Pjy(|\S'SYbx0OM":ˡ$YMy eȟ {n%A)e$fU=4WbTA'pנ7X ~ fGSԻOI$H$ĹDsUn=Xm'!M\ }6;/^)7JH8gf LRqt%`;V-N`3`㇧䀀 牖-oӪZRLX)$7 8xE_'dDurhbhiVh Gf @F=fod+I@IzM"aPA-kSҲ8s.1Z@a jVGXd )Jjơ75i4r>5&n~q_2Pb:}( Kr}|cUHӟW1 C|&sT4YŅKvQ|@`Tڔt\tBAmq#u8c {g2m9">Jofi BD$@@|z/7-$ )D`1/083DW 㓏 I qy֒FG"QZ \tx$& ;]B%UTB cđQJk4Woڲ~w_tPOS:XNd!soZ"DTiDck6TV㐢3`.? czQH6IZ31w8U%`(aЫ i0*@[`64 Ȧ}#=omB+hYv[^N>!p1]YD`>w͐[ost4Wy]?WlNbnW DO~8:UFdzK;^sNYlK4-'u5 MR!Nly8H\x : 3]ph-֭ж#敭$SBm8y7R('A <:jSU̥u(#NkC>aM{jD bDHg%' xwKF [ OA XzMZ>j~K{1ʌ,<+o|S;4m[hV*TrUo޶Gw@{oF6VI!$ѼMkZ8#zʶA,(!Mq<(7ɬ6ritx&9;&E%)ֵ6.syj8@po7ix+sܕ]"H T&IbjO޿zjz};9w;Ҡ GW󷦡$IX!h{"-=#cH"BZJy=A:_Lyl3BoM tNk@> GcQ߶А[Ϲ GϣoHъ$Oe0fX?;_p#!w}]W=oyu2*҃v5pRANinmFe輶 ۡcھ;ސecv3M {PV# !>!ރ{ձS`݄p!`7H!>e9$#ka2 VWBU]Q볎G&W (xd[So3_*̦\ ٽjAEs/ax^7zK*ybJEhGa.9`k3^ uAֽ\`J^~5P-p.[x!ko6`M@IvS)oe m-Ӹ9>"噯k˅`/Xy1ŷ]xx{^I,Yb9*։^aimycxvQv Gtoѓ8HSrM^/B"@sO 5ѠW;DX+V9 4FVbVSS=Jpvc2 2뭽N0~%rj^a#B2fml]ݹv[*I'O[S+YˇUN7h]ޫ; (Ona}.j_C$U&-<:'w z5ȸw6>v*{#/^Eȧƨx\|=v,-VuvO4&|&y]da~?a\EzlawORDa2IMi{E v!3eZCK4.WzfE?_/l i1úaI!]>=m Q̃ K{72k bu!׽c%լq6o=FMi$!tPʆw@ A lJĞm2 qM{lW[buf"!=Y _[G_+e92U5}Ns;/)\gȭgnnxtoVP6Pgn I~ yxנ\0ުBD^Z,ܵG= ƩE#J?H;)f̪_j_}l _a-HHJ:Je3]G0GV#:RbCPؕfk.JZSbdŨZN^>w}:u~ÿ$ǐ`BE= R䅇Ơ%T/@ {iawލ<^heya,',|j~lYo!2 ']ys>񣧗y,J.D=>ň{{;5_K ~#ZEddz˪Fպ'B*͕oys9-Cy}'ygfȂ~_7'~x!^$@4ŐC2]*[G(~QCXyYwIp7a@M(u*6;.3:4)-/=@SwӐl __s/w 'BS(̑?~AQA@@B_6ȿ*BbvHH*JD H,*tW~6yqž, !C$r}ߟ<;g/MB_~4;rGtݜ"ٿ-2{ 8J1"XP7L+U PY`WS!J/y<,|>p{5J̸ I8+WѾGˋemڭvϩG|oy +tXDU-DE锌79Yy%ܧ ,ԏ* >(?B(7uTF"šG? ˪όq#X[Ҏ2>A;@㗽ѤWnz)JzeOO_cs|ߐD%$/}ˌ5[eV7eҩZO nuW,¦d%TQ$(sP i\vNLqCJ Co8c?Re0W>[izurPR:I<}usVu=BO"IB^%I9_:oAH%IxOyzUjl1-□o266tQ Cso_ 7םFTBbXTpoD wkif)`ãtd͓5Ze\1]Y8G31=X 3| #ŝeCcpFJ-s ("'on{jҒ!9) Rb+L!>wQByd>W N@?ɿE޾gIiTС%!{s<:)nW)8#uJ0%gNdJ$*XAWhA RE!A+1rI=k>:Է*Z)DV"G7YvErdHB]Epp2AY$ ,~+Ai|C 9=3`+G}s*%lXcnt&n+rD<rC=iYqGAm0&?D#*itwkG|F%^vUhA",$,`a 7PFLC5ܯrwa:^()Psyn7UH0f<apP|8ˆq0e(VihPc!ݚt҃&h#zh}PEdS8DUL"HzR M^Vw>eUnq BRjSx\Rlu^%:o(N 6 MjW2b$NRE4tqtw`D)Cn>12?]VO'ɻΆKxr9U7"F@)sO hfd[N.(jlm[ :9;nJE*4 CA[1<4AcR?`Ol!Բh_06,켊穋1I5?bdrK=0J 3  3hJ8Ys A;*xƕ?.)jV,QTKeڕ*y|>^ö{Y/q5tLIfˊnBjt pzځ<_| XErt9nWDRLdixƍV`rsڤ|I66nEX@Yx.HBeQŝ?o}!%ZDyj&:dInrȿnfnYu5|sJ;)v˂v^qEϡk8)+0m-9z:9l)yX 7# ZI13%Ѭ/׀{F!pu]w} !`) vDLҟZ~ЖJK5dJxj߁=Ůw̶%I a K3 4P $IKЛ\"dEj))գ' 3d˧c=rg|ܽH:M‹3!'Ho o1#Z1v<Vq^\lL$}|V U2ŽUK"Hf''mk4uӪB̕T`>5[5 Bz$D(B`$~ݤ 6pXyF<(2,$@EH&Ow}ngvw۫BP(P-Y ,RD'$47imkb&AwYK0w͙'G8ɷI"$GSaz]uP' 74қDa]]h% ,uz+ P0K$GSx~>N amOn/qV"t嫤k<5qmǨ,;" g" `H$%"$N5|ՃhIfA 0Ќr%nqe'B"#I-ٳ n4 08`5%T @-- z#CqPzUՂntoȿx'+Yެh1cI BՔ1BԈL%hR>RCTvrcDد'kgxI! <,=~2xhZמAyv)gL-֠@Bk*)*)"'Kx`ԃӆMn2@/en`H J=_0bdD&j.Yy/ K [C8Cyf8*q=MǢbuY!2QdEQ"0c| Ų` k! "g $hA*bk<#؊~b'"oe^GW7ʊX8E'` ke̙Z2ŭbX8 HYH"%!w#8Dn[TkHn>TWl̏A|;JmQ5jK/3u , #No(<"-c9 dM6L$dOԡdEtL݋~% >PI-2kA  ,2հ#N480,JA,\@xw2iB;'\Ӥ\VՑnGJ㼔lbh(diFF>x.O! ETVlt (!x_ 1uvoY~ \p8Is"8\_$~DE_7Y.Q5XPDOހ>.z*F wht3Ut2ABoy&yy@>gmOi1l?3"9W4,2]cD (/!@jsMKz\&ĀAcB1ڕotWx9 #Bx\2 0{Wc;!\pQc%X6)׈:$[!};9*jm-+ $V_P"ħ=?4r!ZQ#[(Y:TGY%L&֢t!, A( ~)ί#~^EP/wѫfZ PIԘttneW9]D dJJi2ER|Z$ -dm[%d_2?*Z^)s5c0!2}FhIYoU6Bٖ lXG=0zW vO4oVB ߌ$%= ΠS96#kt c^ ` <԰CU \FA[_M4IzQp5ф\WX &?"n{g;o{>BT5<<-0=:RBv3Z~_Yu׽ۦa<aǔ8[.29h'y۩>יICl0¶۬i ?};6Hx9xɶvBp**fc:>gg:xC0t 0hmaIɁDu6rl>v!]ąqJ JOm@p;bɠ*$ 雴0& s U:H}d;I)S c"e0iCvN~h.Iaϲ7.ÖOr2Ic^sa0]g7>}/}M{&40{.V3YIuAkf裻 ēM4f$BH,<7]k#Ӄ'4 #@[pQyc¶Ԓ@=[rYgǧ{Z# ,C:0:UL/rX׍\OkRcyjzC3"+QO0_i:-іk\ IUP d,g3C63dKMÕu;9DZV;E߭媏c;&aLdP$uA ՘+ 3>iLz* 'Uvau(`q6`HƁʫTivs8o@D[Ŵ!iaxΐ<]D/nof_#<}b4c"°*/>fvErU"b`8A-RhCϜ~tO!怰P(:_fLRYqQcnԗuJ& LP45]>¯3ŷ" 03H؀@F!˂h`Z'(Ԥ5, % A[kh;ӫsiRo(tL9ZwَZ,T2LW@ _ʶva窝q?m\[6הCl"_a63(HWb H$kãW{n gZ0frPT\@iZ1\:BNT(sr%aeڇ)TY/ >+{d>tIdiF[,c0> Wx_\ZFQCHN9-i j?KɾC !VΦ_ѲgV˝'1A\a[ KQ4,!۞A%zi2Qo8h⒇,(jhL.]x3+v_bFرn5I0I TV738blSvJ{B*yqUuHC*a{ZGX fAM׵-n8 wꔢ,]U'0}K_so6PO qJxM6VwL{g=G"}Ѝ1GEFuH "##Yl)ȆA48$Ĝjݘ8یQA[9. 4SJw MH@J=Q0h*7јEDf"+a 0X4Lȝ/ooW%ф"S5IʹmY K:$k@ ,x%G[o=T4:5gn!B WjS ȫQjc g)B/H=|۝Z1q5$ IV8~}oZܝHU`;n4¨8rq*Hp?)4*7,.7B)ܵ>cj86fE۪rE28<]S}[+T8,<^Ձ"(<+ c%/`xK2*.-Lda5ݷ˖ 06#ECUAԌE6I ksϲVrnsJdNv Tx@SH /H7<`AZtcܩի^5}]+hL1@F`ĕm!  ]QI"V%K 9.V_OˎhWWkeEkȐtl=Uq NMu[mpid |nk@k1Pc, he)$FM/N\/xJл> eRI-|8/ba?qF'!a({€|K1 mA Nw!F:V*{.PAEfA TyA=^6}t>@XڝEB a<(bli7M?Ӌـ5@t)FHd2|eJhxKY>XM`lѐB,VM ,(Ĺ%U]etws&ӆvC;{SI R_aӟ{vn"A @@ ;g.EO(:`g{32:\7`42r%پA}Z٤Ml{y|.m\c -W["MZ/X<5L=NOY8ko׾Quٝ>&tsl֏|(# C <' Пr0pI.ܾ|6L_jRڳ9hQ3as2byj`,Ri7LŞ;P;,=}}pʏE7mHdʖX| XωC0;Ʌ)i꓈"a WMhK| ~*ۍJ..4MC KyG!$zFH. &N:oߥ1h8U%2[b|(T䥴pncbƦ="hg*=#~;SZlpOrk)xHxt4 " E>mZ?ĝ8ϋ2o)xz2@yY.Q⟄ re|: ^r@I{%ZƁ'1McY4[e`F(et"d W=h<.Zcօ_& Q)UB`hPu`”zlQkϲ!5b o /H l ؀hoƀқxµ2O!QF歸'} oJ($p $FJу-J Xvp{;,<V{`HeAȠk6sG22#q5:"4Eq:$euvbJ ֫L9xNF ʊ M!]pH}7@ߖmdhAR&Ƞۻz0,4)6!Ŧ?vcBE {?ӭ_E1*"N O@@`HVmXkQCgb NjPX7=sFJ@ $/"?I"Q 5Ul5ʅ%aZ+Uha~xO^́x菞Q0L L )BqQ.x8 6ԇ= L˧MT\SuNЬT9 p`>GZ#WRؑE]""]  ˓"A c~o7=#E <02d'Dr,]XIX[Ɗq/O>T%''i({)AU*/WKqkҤEd4"u]uUHEU(-My^j37CL6 {VC\07w5٩nfuh‚zUQB'PHwSDD:X.$}Wo;&ƴSh?˷rSfkf-cFB鄠!ҊD>E]j @$()KBizlf>& -iLqBW$W^G"+F:ݟ}(WM[yՍ2e{z҄iܐH1EoV*Ę>upkX&BI'_G~A-xS>"HN"z$e4?7zzRYrnIGY-QfJ_ |=1rbWfQx6jwE] /bYhl  ųqXr ag dV>As(6o z#EJ'.W% E-f5 \p؈7!oppT wpBܹu0>$ `I)UJ r/y@C}il*Ʈ*b#^dןu#Ʌ\`Ao "kҩPǐ61̈2NdO߁ ! N Ogi 5{tУ$9Ư9{i΀{yVc/Hri0[IR=mdJ!<-*hl~VVHI(ԗpN]Gw( 8ѳUۓw%J]|6Drur[LrL^^:aC ITn@ai{ ;M (H B~|M)֏й$5jM?A? ]e֒ I+t#3++e5VsM **Gg99u6H7'+?8s׫;jس\yޛnOc5M첹UF3>lf|r aT{V=Rخ?_IxತWk@) ^^:cv|ɵnu7}UI$蠋"I_߯"~*$IOzCŰTظ`=y:Ra65C$-0V!6_a6JUر>dH#¹ *dzV kF à2.) A B◉ִh@@d誌W9 a4סoJNCKQŻBdsT9&$|YS""l^:_+,†Fd *_/ f4 jN5 y/z$$kH<)%:W{kP,-r0%yas45즭:\۸qMW}g<RS 5^`|oI0j uөtz^Y2n: ӘI!6{h7u"ox5^LM!qF}_&@ h|'1<3YP@X)L=׆*[>MmO (C]U&Oj#$uB{ ]P¡ E@2*AN{=$Р&H̞ҋ.^ ,2Ss`<1M.dJ[ucshLHy/]~-7Z^W/oc9y@ĩGb DC{HC\A7)s0 U*{P!lZ<_Z ^̙5-\_C}I'|!@3FD' G~v{{F]*&Bd,ٽ~'1O!TX3!mMq>Ǫ?vC"wq_0`|2ox~fY}tReyZTY7ƪ+6]iL]L;+EZuddE~UYs/WJQ}moݷK_M[HHB7)i׀̹tusdkd̥ɥVjH4AF*ذS5ٿS&ڙx4##ڼpuӶ ^Y/‡m06\#A {oEr5D$4 [U`%6?;(lkjaMժol8ZV ӦSHD:b݊Ńyku.u &[Lzb&X[T[`BNe߸Dh3p*VG?F.\R+Zc62ҐhҒ>'/L/o[d/HvHBўZ8 $f tp}n҈A;Ķ#0 X1<_ p %)#!?eW@͝dG]D%ujX]fev~- @#s80EB]@,qbڱ].lr9szïX&~6܏=BȮnNJY5X.eJqk431>/2 G!&IFvVdUeOyXom T()}ۣ yva^Y;-o.lFx%@)mȬ0weP('hN $G,FIڪ="MG1fULT3)qc8 L8&g،FCaDݕ/JH?E>׀/G¥!X.pLޓ_.'dXVOuߜM/c/x.uRQQ`>Tau=>cP2?:Eʹzv4z/B>~Z{\YUWIےbU9~_SVO_u_#qKnW+7IACl?8fS?)6otMOAPa6 U]|z󍆭Y&99M@@DMG^NPpNr.dzU!Hsb]ah; 8+!ܽAAC}ןϒ'4#t PHbAÑ쿉̋2DP IS2ʿ(pbP71'Ǯ4#z;X\6 g \Dvp8a6eV5fJ{]k)VNb T1 ES0/C _u>Pr(CoyLPFWeT·Coc65L\!'p^U8$cw%pHV9,rڏA:-~SQw zOY./ڭ0aQ_y U B;3$8(o &WD'''B+-c82y~*XyĒN@cU㾞0َc|"|ͮ$y3ȶ'M0\$LWpu=-`,V0A#FD'"S׌ܲрmj{buC(|`Dr;3"fh''ɝq TAθ`PAV-ȅ(3 %e{q#IɬGq B P):bFG}p'LJ@LJ魮.6OOr6?_c5tG3E0qWs?;rĀD>HC[ uHBu*@d@@33 ̛KI(ԃ[BzlvP.Gk{{ޕ~5p:-*/`B&uC4~!fڰ2ݦ~)HrAt H?pCA@ƀlw//$-3\2hu#)07DlV`d>$,Bs)JP0BP2U@ 狡0o{zOpTgAR1A^p^ʜϨx|sEꖖ% 2CTdYx+Igo_$ߏ~,D(Q>J^_ؕZ_vLOz%@)<;؛%uW`0@99`.ÌthA50iHF)ʆ2S:lFuǻ \[썈s#8jɷ̷e|G[ H05tq20iQ 6nߧr˝ t}3 hzg_ P,#|nV?i$xx2O|1[De u ̞yspû$TcN<KvŠse.W6M`/GQ&mI6kԯ(φP],~ 4ۙE-=Y1 csńmz_cJ@y8${8v{Ym "0Y%`psfX<@PFJqndL( @Hg%LvDW"TiUWOQ~>Gp+>^$@dqBp|[19&^ǖ`B֖S^=. '}e{Q!p)l}%v*ۈKw0/W$C0Cہ?JD N VoyW[B_/fp&<׊ 6-v{!p6%X{Es֐u#=O~WF W @?<)!յT,nF#Jһ5wO/Ȓ(%7YmɣqZoeD?)Dki5Ųdϱ587}C] l;Xٌ! z[5<^"IPU4 lXfG#Yw;t{\{FM y6SgDDN?pݵKW$(7PseKB"Us21X9.Qs z ~} |:bK[ܨM=N!~($H&qB{x(žf_t4MvI.4QF _O۹gx}8.ͥNsJ`(Q7*Uޮ@xq|tGO1xT>=N8spJHt-ƒǰQݸkހ]TqEU}u>uOH}Y G"(|^G>YnE_kr@t̕s~y%M]qr`NBQ11 9`#Ώv Fr=1 D@s`2Xِi>,/ÂD +/|Y.a+ q  ?Sہ$("KO? `nBvPD Eixx_pw||-KwM9dogX9V KtMa̼3Q*o ~̥ ~2ŷ۠ɂeJD /$[wkBēnrNM`*aEDȀ_ӶSHXǽ7-'O7lKm0>ܞ0\d)e|(PLgE1d |`Xr ,a z8 k<4~0L98ѫʾG%sp@&BRsU]TA8p.Jw-=̦%vU:E]IT{M Sz~5VPօ}\&}:A$^0(* #_Y?u )Nf>'{9H ae,E\ɨX+qqzoH&fa6z#=Goe0;ѹdj#@)CqYVa{P9A*'!/@1xe}ܚ}镨%ߒ!h/*Hoy^#km]ܰ)~|̂;v\a rI>ҳ/"r7uQ0A?NmFiQ x]^ɿPo.-?fkH5J8,Af3W߻S5H3WyU.!X]Ei{jPI]ۙq;P^~|{o\aS3RuyTJ\fswzRv|`)(pO[2o$479$Cd 'U۷35u為ؽ9hcE.';ݥtVqZ#2@TՕ_^iagaHC84ab7`?MzAp[9Is-9_bcwvЌ_f; 4euw+Qƙ$#^{e{R$o"~ψk%ĵKT$ $mr΄4DnR 7lI4kcC@Y``;Hf+%!lu'l\PTGR(b)Sc 6|t$H& M)fK{6  R9aG%$ gujc+V^W60pF@j]Ax # 56܇p%"9I\&V4H[a3|cm0(*ilU]+.CŘHhlz B|Xs:_%zDla z@cDkcVQ3}||$x~g{?5w9/[ZO/w(S]rcmHOٱ"/i?d4#/+}ńJA* Z O1b#KJ`-Hb M"4@T* &#|4?vi勌ę`6(my \{|}o/~J@8{83m@ܷÒmq` GL/1:.;I?Ƀ޿Hs[{e W~˿/lj\ ={a>#-]?oh˙#3 )QAw~Gz}f<(`At!0ξ}_ºm3GQTg~+/ă~WX0BMwˤE7[nzu.d-(='dJ ueW%~f'Sl)%D(123|[:zW^GZ@K|+gkf}jj;sڷz-K옭~4{g˃FAl.9}X8ss79horWoW]V7qrC߯d隧]ҍN;;ʾ..3~dնU^W§[.{C&At%F TN.+eFJmA9ivA}2Ţ`E(F#5dz Jbxtߞ__+!}$}TP_,G햋j1$168M0i9$o9z|8'}ɣRo{wǯG'zV*AxK~/zy,(%.4-?I y|,:ԆP;Oo5촌lYK|8a$yZ!wE}\%!&2 X/F5̖ayz }nlhTQ^~9"w bmwtZJQ?- H% <.yv(0ri#%F UNg|oK`q=i?`q&L˂eWQ^b$:@O v7K%uν!߃@pbAuR1n@TWo(-dֺb=Y5V&%7m^A ;AiV]$R uwbd=f2[7#6d#g(Frηd4T!}(dkzdU#,h=c"rAg0d<2L?ȴ kmZ'rIp`FW?K\F[Q-̨"X0|SvX;!!.n0, s;r3k/#VŐuHEFO&02Xq{39 RmSE;ƾZɤw#-da5ph""Fݗó,rqJ#-=!=8Pr!i6{kA!ʠLW E$ ,+JC0̸̑o2w(RLIbI#stX:ve/hD b6ӭ7Cpo4f%kTZR6aGUEggE.|:YsnquiYYk#'{7d$|2i\Z4IVLe!oͷ13S˵j#k'\0ײ 6qBCݷH3uyF$kBq,&hgNޕR45oܡDC=5ϫ5=9ߎ(UZX$ 3zfqq#w~D?L8hEʇĘ:jh/Wv1ÌZqe>-HLbAd"Ct&"Tb+ڝ>TZo?S4ȼ8x%5,Ri#2AXO$#3}4}4XsgtʬT{(}<"'gfbR9wnwMgTTx Y*(D*ժ/ -[2R+R=l}8oܵ_>OBc/f+bO/fiᙉf BVT5Az'!EXLv̂Z)hhoGvԍ6ʊ-JđG?u gVUd8ۀAF6yh%_Nb^|:\<ϞbR.lLiLUVV>?XBX=cZ@!`PPFRA,%rfHkBn,Ac;4@4t_?f-ٞ\n0/Ѥ(ȌOðK{/#냁ȴQ^rn~+\-D\(i`qw=7A % PDD|oO븽@}+[;ѹǁ1TJ@@}2lŠgC~`1*9. I5̷ gtVU`Sh+ؙ"@dE"Ax0q(K*)ɆL*" s1`006.T̫Ih|J{MpNjiڽf,!dpx:GƦD -G?ʺ;wDM=].. ~n7k.L(6u+htjX!MG .$p~,3l}Z ͤ-9q!L,laq!*Cj&+N)|[*xz[ r"wrfTOբ㗮yUft{oUĈӥAO~N? ̯c𛾛ij((pniJ?mOEcccf߽B8w Lob$ӑӆ98ϓSjcCJm/ o(21v' Ǧ\ㆋU5ht jwAZPҥV8 屭rgBqfខ18WUKtC(aT.= iGm:X|7п3) 1?M 7MlM/? ;ӲeMEvuվxt~Fa {_g̅O1V HyELB+#Buܻ|~$H V#c D܅s 4UÈ6qI}*GwP3]me!S@V_~-cSi"[)By_IPkT T~&I0;-F1tK~EX1eHl$ߕ¨${ F@Y{ G0@=$. F T(IA ¸aD(VGtZ^Qg9ƦTv8fo4ɳ Tbj+:f*;elNrB=z/gqZ7O/fy޳)10`_+"3uGɏƓU%LI3"YsҊ} .6O<ĕqV39 z(誹ҜukO'kx9a;b+$)| ;Ր&˞S)So?~ :W?gk$JZcI]<(3&Zbp+_wL!Ui )_ T  iS&{*5C2uAV0ymW Z@|}~c}a Sy}=ԨFjÁF!yAF.lr8LPbS+>V>R~!LTR\wNbe ɃgJ$!-}^bD< }SU}:F@ n-ev-@Rd/]eVO ~d.BD3U4a}Hڔ2߽9dĂ]`C P*@Kk ᐊY0ꋦI#WbT`@g_l@}N{7!-G&_ڔ#HAIn){OK狣M=U/<{ s+ '=#I4d&xyL$bSI0jG/@L@@RO ;}$>kD"Q ~'iȀxGk*#4lC 'f'slbrПFgD*P1a'T28QI#n C T&)#h?BIʦ$c%b"e+:1{rrƙ RM[Er _SX 1l>1bzi]}BH>;/Ք*U0I΃Zڮ׌_Ee_0O};_!;$nl%䱻;8 sO,ppL|`$$dAV$)&T=|3[gUL,?_߹vp! CnةKKvXVmֽ&楶p%/ c/F&>}{Am|3* Q˝{hRpoċcW:]XXm pham[QyN`%HcWĞs.W͇]Cwv-2ߺ~_+V0վ  8,VT?Q竁 yoJCɷȿ?<3Gvbdo䀎y P/ǾH֗˛.\J)C~\v1L~"elNq*=]j+*7D \i{GfJcZ-{?'{D̓9ϕ0Mz)?v 3(pǰa˯(,`̣J?_2j`>EL,W?d YthH<ތ .G9/z;#@|?WKx4ש5EU-PMTr8TZP#p]I[ZRkIҩXeaR/ږYo-ͅMU;уOvT GqG%R1U=QCCjD2 Z[^'|{@|S$҈Qaka.wt_tJ|NGc F_P8 d"co605D`'svXѠa̡k$Y|hzZSpdcor)[0T_/#{7M1LvHaDހ`i2ۍKe 5Y6ɍ=-^ jrT[O-/qZe>5|Cn\wˬ /Ws{;^I|r X{K|=WD:&y |jTx>Ȓn:o)}}}׬=vG굞L\1&%O@P$, 9~]foS3JZ=В y> stn{| r?MP-ρ}ŤN쵦DC&c?TK7S#o2:cZ̐'œ%Є}Rs.!GB|7CXe܇_D n{;]d?$ }q\8q4ծfez|Gӕt-.݋;϶7{ Y}%_19Bf!M߮I9aL+H|lޟxv`hMQVd=آ._瀠gG ?G9A֫'_MTE;Nf̀A4[{cn<;)R@:Đ8E!NH9΢MD %.l_b`Hl?z#!6c"@M a=YXlY=V۞OC- GX D:F EVTPMTƯ2s[B u%Q=?wT'?F}R_u)ktv+-X!J%UإHKf]lm Dhta M193 -n _+*&m/UgH"y;qMZNR6>m?qHi5k#\ rVґ<@4 $HSޢ 3Hx`=qcR7,4O+ y@yVS{˺sij[~=JUr3.bKTڱ>G;e<g@ ռYr"T3P>SXH{wiNG}2|棯-ֿ?Tz'jolh!_;A`'h"72r<&tex ZFBb JD]%븰$/rId |{ @bH^Ԇ9?S=G҇ɕ׼+>s7󃎎~yD#"TG;ۣd7ue#\KaE=g+ Rf^]k`Ɂv+j@Ihቀ<0 ~gKنVwpKBрH"H#~vl$}Ҿخ~md|wO+!JOSI]#̜5_7}N7*#_tXp4Y^גo8=?/u[KLZ=wo^i??GKW/kȹ)' _u.<<3w?ӆTɴdױڼ-أG& K8j!{x]#'yhoUb tzQBߡ cf(악Zη?6)P#ը^.ַ>D*[s~5gRL2=҄s{鿚jJ4,W\<jN7DqIi+`n?CK~,_w]Ϩ::ո햺Տ_#zHY^!q>3ԿG|Ee}{v7>CWS)~g6TqzvdѐHd*RuC"\OA@cV+ Bo,-b؞ݸ MZ*@gi9f,CsA[޾ +ל\`C-*?$b nC^W?@FT^*/ Wy!n$O iApN=gʆzL!wȩEC} X@!Oz?l萍)oi{59P Ay(xR] ˮ@1`A4h eM߅(*D e&bVW\, &* ׋D[|]\j$NAD~ jv`Q`|u!DW/ 36N/=󹻰{֣ 6N ν~ \,SKcWJ豉BaQ@C5@,,g\j:HQ֟<}Op ĺYY%8]o<^K{]տS?`Ws.\/Ig,li!~pʸC)=UI.6>iЊ,'&v m JP$LB6yln\ڏ/y3l;P^ Eڥąf}q#OZOeiS"eP֘# SФ1E;~JWZE4JXtjV 'Q!hz)v7븻bjg'0Db.j(OP"x0Pwi]%|o~?^Quk<3Mr,% ;ҿ@,!Bg~-fkS ,D?pG-W0rb`]"E=_#~5C)މ (!4 D*;S G,oH'},[L#? iu1G _W4*']JZgR$̉ 1L}VKKF"AZ`Ka5 IbY^bH=e 94߆揝%Y_z%.`s!}n,Cze͓OMkSA= @0$yJ٫ җݩj ˆ!/sJ"*u#t &{:8P.㪛}?a4f&N֕G=̢q}?YUQ@I B'f!@Ts!\YHؒ aqE ,r[Wl>mTDJ;е3,% |dLR F+|8_JĒItEjPVۀcQnq;hk5{Y83ain\v7Zǁb76~We=}䁽XId Єڿb]ۚw|(`[AJXEO'ж&zOҵ6"sUF( %s~ݹDp_x%&p 5*Cc =%M߉ gr{?5  !ay1v!FҺ ̫٘8$+R&,V*ƶr~}BtgJ]l1T9Y@5<LjD=O2%omho*FH*_}m$?Q aI:sQ99Le[Q Ժ=",9Dm-XіMjarҍ»2,?J#7 L $/ ù0瘄%&CjwEH3YKD̐j?u ߯@أm;ݴ`{fuh!!wpυ;%Ce{YA-ÎJ!4W+.Tae(S~,WyeMg9E _-@UGڔ_:F?_pvc%`״C]M:?Z+ޮOn0dȠWD)И0Fz| ؒpr=>nW $2 臵wIoBC0w:Cjb뤅.ANj%>;Vzٝ!=m{PHWPA]R-zV7ցotۃn! ʱO;T얂mUq .=XanIY%%Oj{Yf4E0$r$ڴRI-%`/ _nwH4;X D߽:OC_l hjxcUuxVշ@<4"J*$,\&akqgg{" 861k==|+~ȇEDxV9k a[00VAӍ6 UGhCvFQG];x'#YiR " 42գGt#LTQ`@=QgGFji6#z,60 :ԄB ɦ~*6DZHDթkLj0fɡwɼddw\&0(Y(Fj .U璗RSI4`伥@ֿiWrЂ-=KbX0O[gձ$bwH4Z&;7-x6/FFWi?lv4N 4ᡛ{aX 7U6epm qݨ*Ip`:]^q|aj-dQ.'ӛڣæ"yd;*D)&/&HBv*"M$Yan[^w.@cPBYn-ߔq\BYw&f_\@t ,khVfrƤ4!ӟ;;k@"=4fo4qV$0}6@ª`eK^ =, Y{fq8Peywi>GQ' _3bwgb@ȄAnU*=,.}TCЋy 5$qY6+d7U@).j X"ۓAWkնqsyS>NWhmvM`{WxAn&P|;Mt:L|Swk2tZE՗Cs0 7JyJLҬ)b f@0ɽK(KGq#ֹ"soyVmô 1!м/؝Ҝ8RV;"@w.ʜ^*xHB3-7 FI H2,F.rUd5Hp[ߩm4 }29Hsů[ e_L4a0:W4vOփJbnb3~&^9x'ߴ=40a#/Y`tIc25 E_v^w>rSo?S0:XlX\11&P9WQuctԛJq)MFj?;.HAd"jZ Kz F$x}q{>on6ΰpI&l 2GA9.zH $km9HS"PR7 b]_aյ$r;1=]l@['BU!0p1'OPoJ"F-]K"O4xZށ+!LH^xطwI"wAP+- 7_v8v\.? r61@#P0-25f0Sp70$0HFЈ)#2/`[cwWB˧+ $ 6ȯ\sA'bTe_b5F  ؇#M@aHY mbj3 I H4URȊctM`GkLF |Xw/f\|_?Ωi·֙ۙ][ʒP6ޕ76]O׆}HHݪ}xcSko `Sb\+n·:2 .¶"-"0[9R*?~:lûTg ˃F3%a2[kVI/K+{Ȱ>_!>p3yrݤd Z{_1a:LPf M4RG(²91MqBw**3Qg Sw92 ,y7L)< 8yΥj M}cOk_eVX#6,GBv.dkhA"HR+G/=\`GPq >P!X3P5Af<_o٢tSdQx6ʐ1t}J+3CAE(J:‡nª!(RREQ2{[s8>z< A3'7ʊF1U A"WvQzew[n^r~vRB@ #$xG hp Q  J3r)X\.ݮ8fŰؿ~OpA=P"+i 5¥L$f4^ .?6mh`pξb"xP* ˸s¹v8f/}1! Pg/A8 (-ڀƥbG|l^n(r[Oli?}~JXrhQFؤ0]UW Ooy dI9{Njx :Vk͐h`3YrT ;؁"dfz_/[iU©M'w ~}ϦPLPTN"3)DB,rt؄$% X :c`Cl^V9ذE8X5G$N|]fTP! N̰^ГR01Ze丝²ddJ?n݆~߻ 8s^qKPV>bS'DM8X[;LUs haAl  ǻ;^UίSAM6s'aV iVֹ~~~WQm.2Ib/ہO/f !cG;EV9=-޸na1N^5y6bםDŽCFCOݧxGXg4ƨsl ls W`p|^Zuda l+ {>>={fYtÚ)]GUsʷ ˩\ 8*9ݘ(K+qf>.-%:ʽAM6F@:*4e\6M{!M д Q;qr_|Ks.7EvB R!UTs:~^GpLBD"6+o}!1c6֙z^TF:4:;C\`C /%l6!Ua}ٛgRyIb$'pf$$9zg J5B̠4,6N玞ybL<joa瑞߽!MD>!ÑT@_$OX`AٛY`8n|\as@X)zxhjwr= y@K|# ,Rf0ơ$w&/rN*RT0Th$4Z>!ʬLl͉q$.y>/Y,~ې,00Apў駑LE,8"Er5"j)coWr\~lR'Qe"wX-zOd*H^Ђ71vlOpŊhn뾿'8ӡ$hn ]Y>o1(ȲgnֿHkdw#~DꕸŅYu\dj]Jqb&k!,# /{#<߶9HD fu= c]#-Dy\H>Q/7+Ji{eK]U5I{HotU4vˏNڌ9T"R|H @ )]OG ~YvQj3jfoUz]&,f (f >,"$fHI·r}r-]ؓOhA*%N1DEQCԈ鱠s(FP9L̋_Wh+_^nXz_3()DwKJ|1L;v vG'JA2]ܖf ̌@^)FMUaC}xFac0ZmPV-}ٞDž?3Eb=muKUw%(o`~a. ʉ>4ܒ`hy,/\6Sp P1L#nM/a^%HwrWǹ7/?9*q&?\RH'rQ͂y {}m <{C@|&՚9bGr0R}ԂǍ8vBh??"*?=++}8:Jb꧿7ި)ITJ6f YD 90g2\mכ꼑d_D ڥʊO:q5\''ėS*oQdWo->gx{:ϥ{ęQ2&! !:=UoLK)tZ (*#o d+ v:{4`.Y>!#~[ _4Wؠ]zC}+(ؠ7&+/uwNY>EG% %L B HEn B]d/3#-1ڊHݧ.A_m,X[ )=5ڂ#}FW9'cR.@@3<=&ٌbm5050Z!V/ZlU'dk]JyL$ iذKe^׀JTKYzx6-mF4r{L#lkUH\7>JĒ-8$gʹJw %4_UIy>"+0L=S'T)DS+x9 ߃Z{ډܺ%+ybM$ߴpa Y&KG}m o=SĄ~\ТG9Ċl "5Nڸe_Zg//!\? XWdu-pOW3>l/-<5 ~&o:q/ )1wm%! S2L*)*6s|a S*SW<]YLet [0ѝjrkg}qu(*o0BAB6}q = >S Q}?n8 ;6WvKmh8Dž"'Q~keBLNsu-[Se- % ˷5c!Q=z{ҿjzoqq?''H92ʉĮ˫_MYU{13ʙi ,͐+[;q2?v(wS)3$CZӫժҗxy uGD+?L6P5Vnf@J2==aRnm+{1Zc'ݐ?f' mpjO﭅S?bPi *ԻRy'+Ʃq'TP1M,z~,Ao>/r?ܾ\X* %s ISǏmZ 8{Ϙ(%sax!8T9 {dbXb:_e~NůA5\A e*<:rf/x׷hk0قЃ(s2@I9Ug!,!Gy&^]`|#EEtA| ?4ij#]|֯:5\uouK3zS??0"(AeϽNvJ{)8~ҩ:_|UkF\uI}i5s DTlfS[bN6Xyo-l⤣eyﮮZ90d?28Z7Rr)Ŷ _πaB (B &oXV^t f=%}BT)Ijڒ6`NzBS%nZ; nΛnX֟?^Ӻ׉,˼kȳijT2U;\.N;irɍNdc^0ե/e[zwf@D!,n(Ɖ4hq!A_w0 uo?sg}f[ "ޓld՚wUR J;QVs DHP3!1^XU򜸫!9>v=zEa~W9T9v `D l,&2s,5D$Oٶy.VW :4;wF'>D;=~Q.^Ym*Nl·o2O=T}b '=G)ɥ,O1ZWia^QJH7܁Rz(HCobک,ɋ5@/vq̰,n»KKaVeEzl.v%*VS+/Io`8 m 6?t=7*4$8:^o#%%2HF5 !@5;*zKe7|'r߳):8 !~41 |܏g8?W:amHNj%qYbϨ~K|y v Vg+^rٕ췏0c-a\#99Hɫ dK[ڽ%͑@HFB_Пl}j@5Uڨ&ad%D˓|)J,#?_?oo > }@kBG׼/ohXD?.eL30 TG P}|pSJt-Ip]tùME%a`l]vVm}?NB BAV:z2bqaGI%Cqpn>@bB OBP5}>M ʥBS{>N@$v5LWv e+ĵbgQ)|s6Ÿgnz[k nc *^hCY&M\CYFFcb"BP%50_\ucU^w6 ipk"a%D^Ÿ%4Hа Z>1}-Ր\U?^MeQʱM0*9%dsCJVA͇kD`aiO5zU6=_ű?A#&!L| <3wY@]b{7u=.G^fn~(7nPש#A|-=lؔSyc1J79礐4 NM0(R|c'/o]s?ٍjnw^?,K/KCƉ-in%ε1*)C\F@z$ X$7 061}ʱiW7kUfd$%`<˺Nn'>1$g%CkN:lUES 2@XTjD"7d4B0W6{N}HMڌeg=窉BK:~L*'ZiOGIzuq/oϏiX#UdI&(Unu+k!ppleX52d$W9K>lSr'QG>WkBKHE]RA +֭-Ү3nuVk] 3 '#K}޸, CU6޽Pw>}y>vq0+..$FsŦ~ifɿIl%$Fe7 23->@rtyE .kOz?MG '3A~]2 OzڸN" GH$EhLҵE=gw(k-- ' "UL_h$AVĦ!5õ~cy?ݎ%K[7q},(5 Uc_pW!Y{gЫfH0fz* 5 ͦ ?&FK-v=-F4 @Z@I N{f.aM)m3 ;rڥQƘHSzN"VRq"Ѐ1VpAPTl *J`[N/Ez?!ҍ'etRe}B]E L#.i+)SJٷ;MN->5r90>_x/*Wˡ)4aI[gr_8!^wxzN%F]Qxh&c^o2`NV5'vwƧAȇ5{H6egzb,7ei/ȯiwF=9Hwq(qv|^^_KC>e=ƟY3FFN*$BИ+, T#¶Ou1wh:mOI54"Ťؚ1q52(Q%x`P0nN^֪i !qzV:mbn-Vq{K=8.ޑo06"MoyEl?K1U\􉵙M/t,"@v=0in1eCSS^?mB)Id>eJQȾwOɱ$-X'ŏe!7F2۬D1b~ȯ __KUY[@1jHh.$;~&B2UWg)YM֌X5!ԤLZ(nz6䡆 K w_pG{}54V8B8 06 `h4#`jV  h.ueA0ф8IeJq#8{8K#^KKz3kǤffF 0I=%q?9Ӟy?t~)^^_?Я5u|lL6{/LJ i*h) ^^*}8}8la t)_1ϨmXHd$@iRکNU)fK%qjqp {Qwp#NUTe>kX~7fo}> s~M}Ʈ$̅kYiKYWڪI6$lMM1OrT"}'f+RUVl ^O7~JHm%\/T\^y cD>i.v{ x(~2U孉}ș)z o3z_to K"߳noqTVݭC ~lju={)0Zfw]?pqp-9Wj 0ԩ"GIH B#L K?ci.biey,Џӛ ;b'k \p8 fd_mI#>zXGl1r0DqF.Sn.X:,E[Yv8J"o _?tx7: R TVǛqe0/aV$rC:|yG-m,-8T*p^yy̫w4_,kSx;g6mļK }QAGi}`V;&(_]ѕZӆ!b[p(9aZ ^MMٍ76) +mElZs^)OJiQ͞jUpMS rUU5mPYOȧ௼QetQ??M~MjviP'0| r~yhbZ D>cXOnԏd:Vg#?^)6]e'c)y\0U;o}²An뼪e!i] QZ׵|GM@7}*B ~#G"d?{ A% 1qD$(P_5_nq @BT%NUηs虜v CwwY*ZoWz};x~- Kgb_U*U&DLLJ(% 4)40/>+޿fN4Bz8^_X+<9 eF׽#uVVY|=o]诺ߵxy7QBkVC&?`)w4l3NX,Ijd'ٗ# "-{ CYtIV>)V EUDT F@ =S;c|;H.vy=o.52P6\MGE>GWTj(fg'}ƢN ǧ9`.äb R*ǧ \e>/>gdQ맘Ϧ~*(HǪ* MiwUy劉?3~d>3z:gI 2Z!!D.KhmH_}='#?@f][f9)-DI=J#''̂AX!}-vG=])FԒ`('Ur3_7J* '>k׳<|n7vRhiif9⊳Pʟ˳@[S:Stm=&744e! $QTlVɒ17S78/jA dz^Q^;t"@>TBrx4ZQ8Ȁ&H>5ҊH4J+ho|"b4ww`eQ#N녒2g{(&"1!$hƗYMPvwa p7O5QDO%òH$JIj6^dkOa0 3GIO,r`[}I`M2\U#~h7ے.̸-؈ʁd?`]{k R1 {\PfL{exPD-"ԪI!je gI Yyعl ?ck3ޖedLuʳDR yѱ$B́E.K݋ֿѧiaroQTKM5: $ "HzZ8^z2o:RWwӸPS-<.aްm*,S' C8s$xxA񁸱d1WY `&VDR&"!2 ik}0oV{GDe=B<)X{ehʓMyB衚 bX^f%ҩ~2(0$V~i P#JtW@2_EԕO"#K{xvS!)O! f*(h< (CGN;0m?(8w ߡH"B@)q7Y(T>>7 Z /y2YH{:L(82]xAK_shX_Nu\ ř|ѬuQՋ^gOXb|}UMamBl;ֈ oĠ7l^gR.3Mt1^F4 ""jSqh<;Qf gdP UfD)!eCy[!%2=q;B0cFu-x"sXQ:h{-v_[f~qWo;T܎S Z+׎pawþɭEwB6GXZm"fJ*97ŵ蘃 j( MV.E>n 꼺򎃤g &c`܍E~\Tup`\]`{QVi/P)ͣ4ͰdjB-f8oK ʸ}؏E<[%{N Iuk^̿GL◯c+b}Sr;{uS[!c4%Q%>wԴ=ūɚ7"xHа{7Pե e@T=C >mSNQ߆v09\]Q{ );%a rwd ^(t\EBe^u_DpCXdD7V_[P%eSnOΨ6Kpaڭ֮w3`&FѴGQ.V+| 9I'\a%4٭¦2k4 Ѻ!@ݕ{;P&B6t=Z>l(Jٟ[0S7j?(2w~DD\GM2 [Rݩ0`xyz2s>ܜLLALa wXݚAq2CDQ.RLJqGMpAF8XL=vWd}6`Os'0gE>ʦR8kb G-qPY9R0X&7{̻mS%1@RڪJCF>ꉂ8b,Ue&0ȘbHewT1_T]CfʸؒY(k3Jl-np˲jv͂왲i*AFK9_.Q8Ve~\WR5ZYHd`]+xQx(/ ٧Paxle u^,ù´:|? ~r- `<6iM |=hD>Wk䢢)t;?9d XZ-,kQI m*{CF>ih E FʐڙTWԴfp4s@Dr3U+wW߭= ICRkN3| bc]k;oo2뭶Ȁ 7 ^ATw@Svkv "o;!%s-YJ(hҐ-l+GU3rpl0qݻ}ID9`X~2B/JYDV-DHe?Q\U"[ c.\= 6&DZ *BE*Iᡳʎ̈ơ|7ْOf< tL!cj4 P%/dܘ2;ZT@p fd$a,IUr2g|cz$kMm:F4ʴ ih“Ea )]GnC  cps6&C7s]ZsAGa*G7VX-ͩ䂉pHI13QJ̝¼_Vȫ{c1i|I}f s,ƕTD@/N ujj0U;2cN 2ȁOɢ©bjw!!;5J!;7> /V?98bxHpZrP2kk~w kխ`ǪMwPL\KA5v}\q+3ujK#sѤ8,Zh?qTnK;S}QZMMG$aI|jVBḙl\O@֓CoПe[hŧj%6vJ`xpˇi\ 5l֨G!CPept-2>f@͚"p!r1b'8{C_ Z|H 'PL`\ 0M hT\Skݑ~r7-uSU a_I 괥h;^ϯ썛O¸B ZbS25 WkH[%2UڱEkaaZR$ykRU!n oxktRC/3A)|6Wj| ϥi[«bN#u Zٯ#IZ~BU'aSsH\7uG?(n\CApO0VtBֶ0T.Zyl xk_x[Х>eÌޠ6?6"єkSǎMNTSS0Z#q`+$pB@9 Z䍉4p͠kR+q|~J@ _ɯxj|_fvϦ3 RD}#åP45:? hUfD',d~SWT66ó>^wQ+B -f?|3ɣMYό$QQ.nѫaJ#EUq,_㏭Nɛ}} 8\cZG|@;a(X rŧ5!r#Qp%K|( Ϸw=svtu9ZZ;ӿY,tϼ1*v|w܌vi㑽 `"FS1SgeǤ'12k_LZq˾jhmeq{P8uCЬՑm Vp2ԇ2dbw[ >ެZ^ϭG(H'率~yϴױy%Iֹ#,\JtZ 3/xo:!ǔOsƧѕx0hj'{О[6,* ^~zd\>zҕ5o =cEZi4FHp'E}y7cH<:ҳ.<6)Eo^bziYGvcFmZ<|sK &4 8%>Me^[ 6>=; O;` T6>se95 A*< >Τmo)})ѽ9Vt|g.e:1pIx?/o/.f 1U2!,j^sؒY^FϺ[eyB ְ BxJ;`,3~w{,a 䡉X %_л:bRBg|g {(H9/&MYc~!VSD" Zڡ9!WUIDTRՖjS( hw]0UsG>zA1kNR3b+v˞S_uU6P~hR,AA {eQw:^qEnf6fDx,Yf~Lm3-Xts=~=;"py& Ohx]JF;godm̸nAC8 B=k Y>bqlnnO "sR|߽_٪N>l13U Wȓk1W9WHKo|=q0W"M f5XmS7फ़Y}=mZgq|}nc_SW+T;z?y1^fľ.؜Foqb:"؉SGn~c䳛裃 rgoif$ 4y FKߕqrێ\G65/W>mſqy̗e/y=8T4Y.XP{?χ],N1@Vf/51:9FL]6-p)L̫S( _gP {-<>79/}NKջG26MM^OWmM'&qG #4tDVt # XS @6h>$lvӁY:yn7j-1Y\@]DmВa;)1yޟj=6U!pd2#i?OҮ9*gt] aawT.דvY)s{ALNk7C[lw<Kr'ÿUUW6X?sPk=.%x])=7?c^=diKO*&xi?K*;ݾ@X߭O+J״mʛf FUH~H7{Xz>=KKhx>8ȑNE Ӳ1@ya޾4KԘ*&Nv/%o/en?iyl|mo.\~g|P뉥Y?VX *'orF@@N2B  2忩VO6&qQ0/A)~ԋS\ @ 20,XOaл4Ȏ@'\#lslIɍN^3U'<:,UwnmQ2+ eզtͦSm[Aܪ 9< 0` 5N;255V!Kelk?- rc^uz @9(nWX\ۼn{Qf ]V/&&? E0&8#ϳb2~'?*; 77ҕ]̩V@.ۇރ"GF4Gs|Ct3|V;-9`Т$rn?o`xaOXA3XzS:u`NeLaˡE)AYa3Pp=Trn.Z]@p'[uWgy)W3?w3mhC(Ǻ.h4+M,`W{,%N]YIb*TnEl0DY x喺xRjwx)X[mU>D5 J$x^5^~!_'J+y'7p97f=jf#waa'H v]W 0+ iַ[u͆B]~%(:Sw- 6feV ˔d&8J>](~N$r¸ˏP6O)=_1>9wk'6Yy?~kf+c{>}׏hC'lNף3+ɬE=:h^ l73 (#,5"?ԵZaZtȎz5KtM, $ װkQƣ.9bM.VHpMi _ܫx`!7wұ 3s<+4Ӵ-ai ᱄~)?o\(y " a=dHibD5U Nby|k!)G0MB緙K\h~9욚jrb"Q ~?",3(p/l9;6BZ 6 [͞Sճ/ϱcKׄt6A#X̿_|2,EUM}+a0w^\;{{.=5[y*g¹Uɽ;ͯ {ѿi~"ͭ|(5~UnT>GA膭wo3v~ͧ^4{{#P_.d^oW=2eWxS#7?z4^"ón["m}: ]\*eweX5hsÃE[Ő): gSaH)A<槵v>O:fS'4?ݿOwIg w ȵ>ѐ*"H1 ng?LYDzݔ~~) E3f笮7] ƾ]v;cZy& T;{YMʬcuiESMqv1anrKl'%8hw kW|ZK|U )O>ϱu9&H*V+ VVr0ϐ]yZ[6B?aH0 :9x’rɺԞ*QoФ eq`WBDK|m9onw>nf{=%y5>91R2k0QKHW"YW=)O6N蓠&&>6)>V%o`\.'6@ *<"uy-y抑]zHǪΫ8oky>;_pi<+.1Za):_kmD9XM9(ln$;|=bP\RHmc3;XdZ- [+ p nPw;O|L1 A$pg_K/<2x{8˜0iY |եq^wmYiD.~VNi:&ͫΝM|(3:8opJ@yku3a鸛2dH]YSo.{N<G7葊n l 87I]{=/sszjF (hgysiY(1Ggј˒=>h,@Y} '5`ъu(]ZpJ5f`Ϯk%hbCVh5=NfF2>)دU]>R;bJcsW#PF' L̘ I0ffA5h30)=2gkCG 1jϱ[l[eBP!MGLqanDx( j1|5(D[D_mѱX\r}-juU)% $5&dC3wpvK;xtт/hgć}d m{֠=hB ԰2!^vQC[Uܶ{#PώtsBvu8FV&wOː 1^ \fmQђX;% (MtSa{|Mo@#(&fؾ)8W3^`^' mOfRpda5h;$ao@Mwul?oڱq_..Yy+̻hGp>.M bfİpYUm6ȹl]sVo{Z}Y) \͛q'j:Oӫȱ+@?[y5ykxWxP)InF-S~jWĔt&͒TX/$qp>-O&gf ߍsuفEM\.][MUdc.t>śEͽs7msuN~f/zvSMSUf-b- wr}9i* |/ƃgMP(57">1hR|.K7-^cuhz=/Ap#51^RJ l4i@D 8!T$ UTJ,`/G;澹mik ۉ*Fd,SyH{ھnr_oq< ;_a׼8K @4}`ԗ.7+w^N󽜵wZ|{|Z쪧?MߩsI^=DX#*Q@8(vu9xuyYs\5"Ml CQ"=_;-7B{ YnokڻVNn~vY={Krm{~-nE)K_eڶ/e?{+nJo` ը v#NmV ?ٺ| 34׃sr0{p|Łiq+`, Q\ A%6%@Sa+)9\cdb@8eHK J0Kh`F= SĈ"#R)Yc‡D V@˶ ۜoѡ ɦֳO&V[˸KJRy)yQusyd9(eN'7[ J'\@V@cF@jrd}t|=lUQOxZ+?'^ݾ}]ԞnԠM+<3S)yF-nFDTQqX9=mYlRܽyϾ$^scϕ,w;Wtvh7FpzMwmϐ~mE?W"D,T{wgq_3&|v 5[@bzJ]q>5t3_ĸm9y6) _:Xgj[oyOcyMAKR6ͷS&Clťǵ+cdLl-K&ꚡ&(b57ݡ(wbb@?NOF:A=>R ԰)t=O3"w 2?b6Nj7;_ifXdwx$b7q++?FOն)YaI_\E[mGU徴W>7_~gEX:-w&A c7w.)Z !n ;3h :mh/nseY @_]Cz Uڨ-;/]ߣyO9sUC=K/]om/v A^},v+.QuٿymʉF\b.cvRی-15۴CM~z%l}L¾יRo%[˃yQ[tc.' MM}}P>\8Hg# ĽR.<<]7eո$Wו᎛0S_8^=5=Cl)cG/`A֫bȯL;Nø ɐMKx&c1n`PX(ו'X;@ mO;q(ϣl^]by\mQt~ų3}O͆eNFfXUZ5[I8[פcp-Ѯm' [c?wJw暌ͫ{{s푳Hl),AUETw-,cيyxg=]Qr>i-Áa*:_>7e׾_pC(M6P"z=ɼ:m*6zj'Vi稻JANoc]P`|-E=tm H%̈́ğ@mg d'Q [~$s!3bJUuWq۫uݪ/MzUJg *PUBѩ3Xw; 4´k>0`']yUǫi#a1u,r֦nާ%dq䖚{ug3uzѝnHzi~R0aQALL0ILDQD@PTP5LE!LDD S!MQ WF`6ɻ]SkvO6k14mfΎ/m+޹8 ײJPWN _̬Ilx:s \dBqY?γtuk7ouƬ:G9fML3 3|qȏ-{'Yo#o%_2SjHYrO[+O}j<֊eA )0|&&ԜhF>{v8N?uZ?75];W-tKzz6)W_ jkoTh.;.JѮ~we"L$x,b-2?=S\OupbSEQ? |?5*A]Q  ;1P d-qHapD`7M7Ψނ[Qvq;[\ހ!q@3 -"nMYm_\Fju~P;EimFBBƆY$nWrɣWpקUF{ÚDyzz2>vÊʧƶac=#[L~ss6cDHEF\n5a7~ճgeg4S'/7Ǧǟ,!֗Ѧ_{zW] ]Ed[eca&$g`39Gib1d29AN $,_?R7~9΍Gm=FJVWoAZ ʑLݕ_}7O{+ΦՄ~R|b/ŽD3JpjteH p|t54/Ԕْk$;|Q8eߏTf@bB`6_G5 cbB Po6]#;kA^t=忨( .>23!%6 z+vKLszks.ra`'2ie4v.a3〭Ype5]љ6 KNׯ~ޖ[V&g~4_|Ij {9|׺b^+<7LFԙ빭^cnwK~԰u%EFIz[#5ޟ.mlWWyכ'To21t4yz $9֠ ֠Re(34r30`Tl x+ VXL/Vi|W[1'Ru*|9-Ncډ9M@=SXymºLgV4zXV ]fq^O!ÖA#մO4Ycy:8=f:5iu?v:)8[kfN50h}*'Wu^c|'dz-]+u~?]i[G˼{l.Mz_0a(h2xUV$`~ ɂq:?Vk_EJX}{QE ]Q{յAEe_%>ٶ׌k*PI&C;06~+yYxo`o}Yg/)!M}M!#ެX$8|{ӣ0&J A> +.Kyh=f;naO~O3,G_UoE[:>}7kg~ !- g|yͪ~=USj kjzlv1keݥl)QΗ g샹ݬ/p](ca%>\O*;saF6:\'~q:=lG~j:<>F˛64UhWvC|Mѿ| R _W^/ l5wOד;W-5N)rTAEL{c$! iPvWf'g$P]&/*gk,DI Z fRy~Gb])Do.@6Mx{dv?!dJ3X ūy;W#Mq7AaoInY{|e&TN1ldϤT V $pHCƲ%wAb@$nea2 $[h'-8%!ZGD4ũИQg*{=|g}U1>'rrI= `շJNk @C L0@>yyz%v|ϕHE!$AKFH,&#{CP(Ƃ 6{LE9D8L ̎v.uo3=L̢Pb͍,Sq*ό:si8?CdҴ);wӓ};R2KRLCkGJs4!F@-_zJ)#Koa9w@xsb400@'%q}~5܍a~$Ymm@1"i|!Wћ^F %ƣ|*%|4+K7:Jk B4h#_wd 1s.HmpDʳ2Z5VRӣLd"pu `Zh@26Bu6JoJh^ xzym+$ݠ VśnD>j3e+7Y2w4bpL% V_}V8ir N:"DңϺPC1mo[1zPhxQ(Ꭼfk$@~/% ŋ,;`X:іWY֗W w#j;u8GK;w6Ns$8&I-z#˟aQb_ͽ!t?;MƊS֞޶r^u8 =4vPge&cIԋqwy^[-{[nw79Sp xSmst0G-ߊ,xgi`Q6G$%*kt ZO$=GAƥI'/|n k-Wvk-+5N,r ޡ( Գ_ՕrC԰Pa,f "7AR 0`O?İڰ1ΟC~p;6Jƀlҁ$W5__wO֬q eApn~ŋuJ]gn0_/=°t_~y?g9ˆCӣ;ꧬ؋5WsL<,={^}XmW9~VBP'd.Vu:Wr~߳pv[UÕeM_Bz'~bg>9,:=w~}=X欏yW߯\wui?g˟gV}~?=˂s ?߿yo򯞷k,W):hzی˼dskvf?[UQ51p;/ =Ǔo_r?K[X"=^=볯^/ЎrpoOVۚ3vjݶ:/#Lힳ;#˚L̒̎DE"J{|h-ȑ]7+ܶՏL5MrT dGǻ )|~Oɾ)>->Nvגaz;ȽpQS m@ٰ~16whK5G7zH xdTq/DtyՖ u6?ԏbLn Ȏ#;a;0C4+qXm{  va\|=l|44K{6=ݮvڪ]E㽹;,{vۯw%62.ڴȘDZ@Jv׭'z]d<-z۫}}Z@M}@/m{J Z{`X>=}Pӗoflvݮ6_>s4}h֖oyyuwĒzĢ2Q^xkIN&Mt9{מWSנ㽰cU@h V9S 3IRUb^Nͼt2dɵslah5I4IR>_j͘Mד"fkFsj6VgwDw׭ iZXh][V+eUWԖ ׭{툗Jzֹ `G>M1XѳHEUPI*@U@3& l}m(Р)YT)ﻛG]ww9ݛ: UD'`mM*;{|P__Pn_APXa8q QYj,]Ԙܽ{cם=x>gvg{ "wP*ٟycrۙ@eR5mbX%ַ_=+!(^Q颽%|遺w1j p Խ!<ǑZ@=}Zts2aknl᯦{ hvݬ R;-W/]3۝^wCLa#A{7Umo{46BB{ڙ(9(mx}{ }WX;a{o5vog@f3ڲBvoONJޡ*NmG=Wo[niOi޷E/OTr(^-ג#}ǨqOCOﵹU|c>}ҫu>h{3y^k[}su}>_׳99_;z=ԻswˮΌ:>=\ݾϾhP}|zoӏw_5wmT:{.>PϾEyo_suLS[ﲺOmWJ=gxn}p/vRs\/]Pv!v4=NXZ^^x% "" [wP κp]\nq`s.*>ˏ->{:;a_`x|_} 8ҧ_~?27?O% t*JcmAHl0`A$%@ƄͧL4}b81嬐OcVt\:-AhhT2/9V,*gA^FI3A^hb 78xiԫyWMF2%9sKb_Lĭ Mt GMfW7QE >8 . pIH%.&9%8%X*G%c r|X1z)^r$iYj̔B(%թ3r%(Sc>eZiWf zXkY2+r'6c=Gc"W/-XD0Z` Lޖ$iBC9`A^n{:m6%N֎& QH?̇s,s?~Pg3aictŕez83!EKZ-J֪}ݯ)ƥːODj&yj&֦(֕Uł|ڥkH[#/j߂&9d_ aQ13ҲX ,;U5}7)vuYoG:Ww#妣R6&*"PR0D`) "Ab*#""U`"X *$ȠEAAIQbATETUER##b@@ے :I*r\Ne,7)4KsUנ T̬uSۖ׆ce)~Dۆu+b67DO$~nv)e'ck%,Cbl3(~ySu?j틑֒/bjj$dXJtدYufE$N*e6n,2I4 *u-MExUjPWUga_QQ1:Dp{k;׬#9}S5F/ջ`:fnHjWhL~v\SjObV3q:PuH:l[0Ѯݬ0ڪcŧ.Ę^ 8 Sjm$9ɗQn]:-ۋSȼbkjŪjaGNM%Yζt˓rm?1٘@PA$ 39-Ed"(F E ˜ѣ/?F\BAѸNi A(U{F:p=Q坰!v5)QAΓR5#޶[ӿ|2mWo5Ӣ:AVN#N[/HұqfQG=4*fǖjߠ3H&e6aA :BjBK)%@r(AV\-8VM_Jw?]cuQR{H6n6+843xX A Qj4;fh t)LEݥMbSr#^e?.~)ÏAbv[NgsLTۊ`=ΫC`"Mƀ"@&W} )={,VaMпݿ{r8Y)R)?;~|]Vv)Ͽҭ~[L|JZ. Bj%P͵jȥU簻7ÃhglZ89čL18A3Bd@5Fl>~>9n|d[)T{{zcR"]D-NF,e?F@Ж9GBV\F`([n }oW[Tڎ@ N%lx4]m*ax*.Rt?yΚ gJjw4Qm| ͓ۖ"rqeO?cx떸Ro16ۊ D 3s-[͹ چw(RbW AV #0d$><[].TU[9|AL:&Hcu+4 "+ʥjk}ƺs7ӕ'3a]MŞPs~2zrm2(MY]O?B_G''iU>ߕ,O?x].^TÀ҈ՉJHXůs;ڀn_-nJsF/܂r &3OvƔ~z/oO݇²coGE;o.KR,bݜޏ0#rˍ{]j888_/*XHoBbse'93t(1@v {+ysxW3FaF-3N=\LLj`DbSPžaHpB-",~gm:4W';_v^B`8ދ*.75hĖk5CR6PCf}Vq㚐m?zVecx0Dgp<.v &g:dsmPKiOgްy6}. ;ںbs}i?f!Ź9`R<@}=f?w_^rJu3hJ_CYA6M-ICIdqFjhh.ལ"JFgj"\C O?pژdZhƒC![4hͶ./{Y|tII! [[4FiQti~͊}cvkL]|#U^gRJIIM UjgUql5-6MhI4lpgW/8'& @ֲWvN%tt9<- :-&pεT5ZֹS%84phxx̡Z-VƥgxrPQ N#?DQac'v$ cJAi]пP"o62;2[kԜSƀ0Ɣ}[3m_~zuHG vA'%B-WrwYi I/3qlJbQ\>?_h?/cŁER՚l"_mʌ7?:;[`^o/@Nc6}I뤔Z= V˛;b{m~kur ߁-zD#]*yt==ruְ-G{50в(_) 3 NeQElY+C"2Crdd d@q!c :u/jj!6̄Jh(6: dh>>HP4ߛ帩hzf S}qDFӳxc(;ˆ$4Qa=^v]: L]pm/bB &ǥ;U9N&xļUVJil 4dGbZiLgCA]gz\]P^,6jhE~ón)(ŦC}$-J} ڣ ]_h]rZ, _pm8'LcJ'6;wue9 (+=wFzZ4FRq_6>oM[?bP g"6TqƻmpոryO TYW67K ecfp$ ”JP0DHf9w=2$N :2 @L0A{[z!0[W̬ mp=o#{+Re׫:Cw$$CKIIPi '@jk3ЍF/[[zE*T95zu kQR %uӷJ-2Q) EwPs^P:'K Tn/o:hf{WAs籂's<|=a\77"f쵢YG/З& ! _fo36 x*@@$)kAa\[&KH3Z(|PKǘ?#DfaFQ51h5K9Saȧ S*EnC}%˗;F1=S>15dXׇ J#uJP;Ќy6oOH$Hg i44`H/[F7fB *Yq^ъ 'JM;N~q'5>J9r:$>|^u0 JCe) ! Z|ԃ$%Ïoj?xw=PRC2(a @H} W _F~-ԅ{o^;c\)߱f*bAU+'`ym9I! A'!YcpB翢cHyA6d2%4~On}JXFW ٢hOS{SJm͕Bqfi{X.i6)ª{l\QYcLn q\¶`qdK,eDG˃e[s%ܦ9Lqk*7,1\mV[2hIVf-l̀.0@ba&>w7|qvXGzrNX$CNi] )VB&R'۠ƥ6Fxj̋A'`r;x.XYq)((Y MQ^ŪM6_K[aPU^F-3\ $/Uwhe˼ XCl2_lNS։ZX0!~f]ԀxQ&=9ɴ/Oc울`8|jQ̷ 1dǙ`)"X#v)YYCY,7b%eqڙ$ |x1̬qB"1%PFNy@$I D\,ʍ.6YbMdʔT\JMgw^IGѾЯ40MӗnꙘK TH(6 3иrsRrb' \00 ]3dÀ"lcPI'/{AtDdܺ \` }F[󞗱60M)v]ZQsM kty5 P,uIΪeE-?NLFF\z~U3$!bG'o+n);SZ,\:!#'4OlD5WIM(Ϧ"z$T?^((>;a=ќ6nWq5"0wGs%0BW鼮 3Nph oo[Db'qS|'.ruUǃ:X MlJGE+A%CEU =.An\Bџ %3/Fn‡⩩hDpBG#f?s%=+*vr[Tpʒ]Vߍ R"lYSjoA5ˤc<)oܝlSX踗Ok2PD!D.==}30 >M)MggH?^Oa]Dt3G|h=T.Gٍu]' <4@Sjy&I\m͐;HGS גAœ/F֚s//Y檮{7~76Hz^p^JWg})@\g9_~AAGx۵fFk͍JD'$iNml%]~tc s"F  w,C\Z&WNu!V W`B]o̻6߱lw`l7'OlehI'ڀ2*Zݐ^yIbWp܌CMr\>ݬiBJ^=Cߖk_[8qѻAWj*e.Ge/i~/nc! &pHuǠ4MݝcF)n~˺aW|n}Shѥ12&O)h-AE0D@`vm?JmrV>rE6nRuĊ/\)۷{-aa 0h/4]zgWK8˜HKxJ@(B9~$$G^[+tۑm)İ1OE$͹f[wn})濞}W?%bbLe03B0))據KZYǪsJ߿[F'ro?+ُ-8:c38/SỳlwWf8vyUw(v25Bq=H{"!;˴boe=E:eL|#iv?&m{o*m,cuQ k<2 =4q57& ϏU*aSUEP/Fi~+8d^dAj٨_7oCW+ZI^,aC㳮^E$ |ٹh Q0uDp !FТbe8D ʳ%r v`ɎSx8m&4b*E-h^GE;[CajpqKԗ=6bjL4Gȴ#9/޴MN&z/)92D_Ho.4f4*lICO{ߵ>5_~bTIYQ k7)YjGI,J7 :տOGo<f.f]"z6١#qi\Ed0?0{Œ-5H8MA" 0@11vǾxެ"I"\ ̣§>{#DEi~a?!Y#~s_Ix`+  .,6/1*Go~`3b,ERkM~E|742Aoaju&6@RfTJd.٘lXc:>}1{5ݲbJ]-.6e[߫u]]yCs9{aJnâ4BQ92 wmމg#؟9q)22@Er@N({ kA v;yh=-vwr6A!Uz6W@P!ӵt!.UEAUVE Jb*PNou;x/CڹzsaTEr}FUlC k+ <) 91UAJ5pZSwS@2GF%avjmaYZ,A7ڀ~T&t,gWdPjB/Dbccud 0X#E)4iDAA 1r|S-kEGF$ʬY5%B#_.b3 X{r\DPB.W-/ߢj(F7.!A[\i ANeb /wPKB${R? @Ԙ>\o__B>:R݁R:pZn?{ U`^V;ԭNA&ǫ5΂RE}b5!8H$내!II@c@Q+QkY`5@F`mb!w N빚8ҋI7L$?Ӑyqڥs?H]s"92Ln)@9䇐W>J7eڔ=Ҵo'3XI%,(d IH ]x__m9!YgL-t޹߯P \cz:oI~ (ϔbsMCrC&%aB<㖴hsOt ~Y;r¡98XT?tռ؊Ae|`3RD J*s MBAqa淫Ds]Wá7!\t9Q X5F#~ b(:` Qo ){03k았 '6bZyZuQ iܭ@ b"rs:$,IBJ"! o`{0`<:ixJra 3,D`jE2B$,P@16h2gu% f }پ"JZL$QLqkS:ei͎|wH"X8X\4?$ 8_9M1-Iogm~_O" dbxq& HU˟翽( a%d Ї5$,.!Mb&!@"ի!@Vv8SuF*&=;ftM%c7pưYb n=ƶzyVbLL&xd7oH,b1A=p#t F'pDn1F"_]8(}jP[OԽdT6}zz㞥vM:@Cf։,R@D#hBPj4H3IDH'n>^6^T-,0'DPKXzy ȢeI]Tr"iN,5Hgp:!(#bsj$P]rt trbLn"L VdQE4M%) )<ۜv&9lvĜMh;$JDjр U16IDL:rÑ V8|ELk F q%"$>&fphl N˜au@zbgi79o~"@87h]MzL=|;e}oA08n$ 15eЁ<`gz0%`5HY.!dtݖQAqBx)l6A^RhRH_q"#!߈F*3cP1<I C@T{}E?ew !>_v .cE4>1*~q7h,F.om |F/nO{2Z}iCΝb0$8<3{bu߹e`՚1O+!7<[|zhO]#GX@HʃڛB` Alf\˷ XLUy%B"q'o;o!ζe?1"b+r?qKoji8IN[C!|cu?@BhL+P8U"=o,C4wupZ4ѡIɄ<Ŭcn\|퓷;$4qOK֐EFߩx7M,TY6LȤKd.*S *CȢz:n4 D0e=ڬ2$3:ҲӗB[ƈmRRB=FFv-dcL(i[6]* r2K< gw㲡gDK^aQ#NT}`}`[eqe5 Ws, u$1d=~;s\zdǥ]j;w-(U$\Z7X+Mg JG)<g$M[޿ [w٬*XzRv0zT.HΣ0] ɕc L@74J5;O 61 _G$o$F\G29"60[m;rҠOW}T=B=R:L 0MξvtPXZ;;Fg* k)UG2۔ r;;x0Q"(T4E# _0ϕMQW1MY.$KfP2pCeOwjH +KE4֯a  t]ERf"!NgQ(ˌj:S<۝У01ɣ63el1$4a1E,[10DE"G(z/G4wu9ur F"@dnXgP{mÊC7 B$ؑa [R'Px2lL-jSFp>LYJ[PIVl9ZiKfo`[?JI"Ҋ'R3GgL@hOkpp ~>B5ՏdB5qIƖk50(B4iHWԲTX"ՔsvjE!hhz빱eJJ>B͞X1%"E\33͐;7M;R,1 0f!6i'.ɤ !SMNIa;ɷ.2mtЈ#EtMΏN7v+lo36PAJ&ȶY2lD Wq.@ 1fٗgx:j;qPu6o^'r_}vz~{GqCb(u_d3*C͍AU*?֚OΫ"| ј́BD} PFհ񤻏~7@hk\n9W@\xutPP`"5wЉV؇>L:o)T)|en'(5.螾e(ZRz(XD  gv#B<8qG+|l< >5?[r7Wڒq>Ѝ.,KZ߂XQ0 >[l .رQArgqPoN=>\z\Ns"s玞GQ1#٭{rpL19RtR#b;VDVa"UU8r7/?,`]og-! BFm+4oS{;'b`a aH+ɘHCLT:'48CkBD԰AF20 קSclr6|V^&\W@ ]胣ārbFo1F+[`Z$ kir7"@DDDG'mH)I!`nĜiٷ#EܱI<,[3rvɳmO!8:t*hظtB 0 f@4PC(24RڹD 4b#64VD֛e0LZDFXXߋEqډ+^Fo8Csp@IFRx_zhm/*jCh ,Z +Dw%r]pBhp8"Yէ0B-w5j`|/a:3'=nkq`g; $ " f1ڋeжP +moO.!V&tZsߗ]NV0* !׃ryZi tNQ%a7a5Ω ! $4 ɑryڠ$"DP&혐 d(bdVfyz,^!,JaZl@ =J%q5l1zhIdVٸv"X/,J'1/ Fs҂EM删a̋7ѠS*嬃ve"8^]o3ZjoK+ BJE1WS)̊< 6Z|4ýǾ^ЦO}rDX< ^(֟qӗ<'=g7\,] H Þnv/Lsv.ΒOIC,$%DGQe- W P0ͅYvE2gJNn%vvIͫjMޯFct6wˆXezCɗҵ k&d, !\%Ć̈ AE P"HdA0`xS&Ĵ&+J.^ ʃYWRFk1"m#6Z՛xaUI 3orf"EˆQf x"lPr[ D[K"b&bpnȹ)aO5eSl3ścV1@ yX3 a`fױ%+r5\D{^o{bl@cbe2I$!&j(wջ<3D׌xr'cˑxl&[]7v/" e]Hz󋇌<+ؐ+ ,.aY"n`ZllZ3$#kP5zk$! cJgWɚ&"Z^6j  YX5iepP#,Ux55naD Jbo Պʆb^j-6b!7fʭYDȱ컧0gb\-QQ{ ra$|gݹjX;wMF4һyy$;˻5A "AD$9lY1}N шJXuR&ܕ >hWa7oDPY 9kx A W >ptPAQU [&N**w19| Rѐ?}Ec1+uDi5>]UNRS) 2,#I`֨o7f̚2X 잴LivR_P4).eNpaxQ8u`N%!?5+Ģ ةsAQ "Ī9WukʕFggqD\Faa)) Bi ̧qºwCĆ@S&F*i!.ul+͉r84Y[VB'gр2*c&?qU^l}+螂 aEDM\pK ^{:*0hhC=92*u}Ȑnuk!QAɅT}߸aAC 26iu ~AV9 b}2c5ĩbn'DDgi0Mn5-M4KF"3ǜ[2+PN4c _v/ Y#Kz@:Yx=&K Og;: Ķ65 'y*l0Fwa*E؝L_K]ŝQb 5ҖNyTtuuNk@%1ALf^naت\Ң|j!wPf ]=]P _c!䱮v&,bf7Rɢ?/sI2̮%HY+"pQ`q#@Ti7tFL9&`zs Eϫ֚UoV>"N5V\l2tpхHKռ K5O-0iM [*jMoCղ͹EA>s6W\0V"aI58Dۋr1CВT4R+erH=~?c_n?0ś/ wg|ɎF8"΁5;Soױ=Xs]mڥZGf.}Ecw|:TbeZh-Y>:OA.CDzjhOAJ Ԛ7V''_>7>r2bm_gǯ&xޗ{tQvuJ(9)-oi_q7|7]o_?cF]c|M7-)!%ktVRM(n8}?&RN ÀIZEi6`MAx՝MHOg' A9V5JQRvWquեrхٽխW4C)Xp~w,sۢ.q0Շ w-x&h=kpͻ7uOpxM1^s*õ4)Va_?OxG]n[NK i[)+mdZ^zoicޮj](ze8g(/R]^^s&lU&SSbSk Vh?<b39Md}EvkXjlMݎ$S :$DQ@783UjYu`:>/czT! 8)g:S?ͯkswzU&hTZnNR(u-|O|N+yhjg +hjZ{k NeΆ2#qjYAd &^_ o?I< SO$5żZ;NWyپ Ԩ얙ُl!̴d8tRM)^ .-wj{;R:7Cpo)DH afđ0`, C+^ɧՊrh2iTbXOe湞Vˆn"` Ĕ%: {ߊ|+a4QWfRe^f6Hc X+ a%Q Teo6&on ,J׽]q`,JiXXM~?Xz O{!vb[o* n:/] Jܔ+-0+~ޏ="$ P$sT2?-F$dbT'x1Tf^gj]"h41[5'CJ%?)罇ns!h~Vct?2-BD `R^r^=LR J__Scko@5,q6f7,}o3YFLk"Z #H:@$0! $ߧeLeئp?{ÌF`(, yUG_Uʰr mJ,E|'Qz,/y==On.Bˮd2Q CRɨt߫1sFn&8b. >;3$RZD޹9sD^{wǕ0Ab@Q2<xru'W‚1P 8k'|y:{㸅RL(e+*7aſ6F.()[Lm*,${_`w>s [v+ϏOٯ]ee)"@ ٨lbn^,b@h}ȸ>m*T1mI)WCk~Ϣ/7ϖ'㈉=l4y} %CpHg]?z@ B c(uH=)@K2&߅S~S>%T}DPtk rMZUfi kW܈:눍7ugL4IVϕ?oT0VD߆_xJRd}=;,A<^/i{Zj.JmynEz%H '?Y_}|?*gA3%N5jJu,6ƿ~>pq[%aLז W}W3ea؃EXVz=]o;o;׽TqD0XWb,ca<-0pakg']UͶo*MC! x$qa) ٟ8Nyz+]ecc#Fg}kzeV9֯x>*z/q^9Ü6KJ)Nҩ!Hsfu|vWB߫*~n*rL]ۗ/cmJؒ}neyd!:MZ~&>ឱ0D w#6)NckOiP$#=tc-+Ӵh;vݾ>ؚ_&֏sΔIe %aƨ?<_n?T^$JAm*3dP9嶛1<˛Z3r( z^-ºM6qoO)OJIxڡFml-&&ҽr6կ+$#̕VƞUIZݧVe,jp`m+1ʰVva֚VPH $ Bqte^w5ZGTMy?JgX̳7zvvuv-}>XBSaJ])ć:i~Uq9JXCХ'>t83 ?9I.vڭ֒nЫ6ZXf{a.xwhC+R CU l[ءlHAH3HUZ# CtHW6ۚ1Ks)lYƚ.Ϡÿ򸑦 <2D%Sd4G;rAADq&)oت |(G\-aMp.NJo| Z@F"sJ6ܢ䴿|Vf/U$dW0FCTNYwH?VH`bWf b*gtu-gP1V S'oyAD,0Y\[['=}v.G:Rs}97T$FA8U~?{WI}ҘTҢ nhaox^u<ϹԚA?+ҭ+;q_D*.kUcoXy%K$C9ji g`y,}45fY%P:ݭǪCcK`jNThQ:M.U‰\r̷u^kCb|9+B* Վ'O|C*'Uө+ڿxQ=.Y\5S+:>sN?^.-/WRߊF7PIrԅ9S>1}(YjB}F|\?'Z1q)2bI Nq0$Ǡ˻~>AYq25 37w3h : RZΉ?6N߭AQ&Y 'PW{µMm(+ͻʹu`NIkD\Bܩۣ꺟۹ʶv +Qy-#?ϊ醠ܛ}}e[kN1pb1DaB4Ȗ{=rU͝Z檒m$WV͢F]!kKX-2k#b 3qHu^%eqsJ1P6O~.ϡ0TUtuث١Q t,o]9Ff@8u+8qD7$9@c\G`= <a[J<}{<||QYTL FcINXZ֒(9S}~}c埪70M?ENƣ\=~G6p24 LM z1ũֱ/Zu{Sne {˺Ɓ{HvoOax<~="ԯz-)gG?gwƴׂ*/NޛBkI#TPM wG p[y5cyK+yJ v_k4 ᦪa̜T_U "v0 ")Laћ{Ηe:@SY $|~F1M#b^BA^:4h] 4q/_M >[Fsl^=[*`uFRiz 9gg#zf̩Bo"NӉ7y3y"=c{S|e c 6^8k 3h6 ӏ*aROª pnM<=aqQ_v>J#bnq+>hwTqMg=0=G^6+g]j45mt.[J6,F=(ij*ղz-{Ԫ[k_8;*$&] [k9/%[/ݿ[zg<6(4P6DM7T *.&XnD0YL풝N(wY8&: /GD p,1%+VXb}%~ry^D&d~3s# (VTG|eE06)ABs e$V11XI⽃ 9|yY+PtKܽM)0B׼AT%"Ai<-J_HYн-weL6G2A:+/~)e5٪AMUp cK9Ć` eo7ګKv$jʏl6*҇q?Wv[n|G B? b(__[GGfFSgn'_Mh'c?' '$G! Y|Ҋ/ޛ>Fh١ۅAiDtr1 _~|K "/*O>dLŤrjgKh|b\:2$;Ft$bܠui|5@ bt&60$I1j74No"BF2%hצqZY&N?!멍x@mߒOQ97pQbLnr'Ԧt`19HnY3֧g;!w$WL v؁{r(A갿~QoiB2e Փh<4U#qF뽵h^>c*NεG؂9X!_ LNoy/ >çU"A`sؑeīĨ3}|,0_!kxϑb1R뙤LsOI05Mo[ʞHltO9A&C*:w}I1<!l' aëJr1-{V=!urn}*ȵv=<88ZDāDyBa ;Ԝ\`a{IuY6*&oDL E;"$^?/2HgDaӂ:4ɤٶΧnhwrvK %UDk1sP)"9ErVf`h L Ȅ.o<4QJuZڐ1^2b C)BpkK}~lv#uVSE&$rbRyOo\f b!E.5NREּ 8[Ufv'h0@EP)r} # .R! "jǗy^\ es\8}kySGP9޵={LMr> e[oVj.9r4 T#H :ԗ$)@8.zz>:?q2QN!,4O!MR|FWlz=hrw7/V.jsz>>^x9yZzIc5^,!,+q-46\@ I(㶧YLT qJ cpVmٰl2bT!Dd\PlxCt6r!o[>%Y؝nҖ9ĉ2BHO#^4^}>inG}zM'gƀ&-〃tɯ2b;m9̶J^ʔ }%teE"WwE,&mї s]^'U[Y^frP&|`97p?YHN3$M'`F[ P[dhj *&IӉ >ـT3TlJseC]4ǰI|Z(ĪдԌ wI ODmaL2k˳LhYC (/6 }42t]7m77A`Sn0nkPi>;"( C&oJ|G0}5& \zX4p؊|,GŶki9-aw湝@O >#c i}ʤS&l(lm8Wqs}fַX7y/t[c?TXi{m L_\"HP;OQr?DjfY- {/ҝoty;8وRUlzXM[Rf,:U@0b՗fևG֪R3^`dа(-zd Ydz -B2]RTqwT#{Z93ڿٛ2ch0i7RJHav.a J3բu EX=a}R<#3iP=P0xR΍o&1{\HqռZZubO'Ln̰{OCΝÛGjѕ=yXeB'imy;xfkTC%K]Ai>?+FWA?J,O6pD-e5$<QQʾ:Am4ݸv_~8X}GEvE _o_+\3=XgVR6i(ȧkil]WjUUgѧգ˿% e1'%#]pjnB(Q-oϿ`z<{| )xUZ3|Gws0) wA[ЉlQ1ݺ\8:pnh cw𙆒; K.32'ww ]An"խI(ؔ%-νK\ [`2hyߛζ36֣.<\%E@k7jɹ"j<-kCmJ՚b!:⒔<ҾAܶvg\#VlDEe{>ϗr9 ex!"޻zn {ڪ:動(:lbN7CАnsB]]CۏIf4fx.,4䓹<"7@u)ӏZ2z4K喢dzS/9xR6?քI>$ST+a-\Q/s/ޙc^G4غX#v)JxHgcܸ*&t/̢Ah>P9 ^\2])y\"$KҳRv9甉5aB?Ѯ4fT Xs}4}; 6#(vX ܏hLk|wC[&3ɍH%]$`N;!UN\|$չ@\;^YCK<$0BeupbԽ㵃I½V |h]w!xG!!|\_y}bAؤUEL- !g!CͲ0+ ZsWMqz:Ų ͼ!q>A 4SNF13nNSY($=π}/}Hd=yW:5Dlr69>Ke0j!vphcA܁d]v5T?PSp:ď-abZ5)J~ﷲW noJMbǴP]7YIHTJV%)Fy~Ɠo/r­ߧP2bӷKM?ozz.Hi_\4zVFeNN?Z}߃czj{`oҹOe@ONX$%xZ j]  4 LxSU K 5N[0@CD ꆆ^n짚Tw/?Gi+QCOla7}jTPbr<E6]~3dEIW,PI+KkkV 5xt#ƌA#]>bHW,b ۗt*olrBH$+D01o5f*:֎S .%+W1 OtD@HFݗZrzr7Ỹ x@1~/gUǢ0"Zӎc@Ӊ5 "A!쩎Tf#ck0@Gف]s_a5[!6=}>/e8w^Oe l /z`7!f:d4*~Wc]%s *D 07:C\6\\A6#c+Q5GiC_J׀׸kg5;5k yGmo? ꘷ 67IB4i鿔4V=Դ@tZY;+࣊u-XT5w>[eqm#$G򷺎]W0ώDh=#"~'pilw5R뫑K2g]wYkՔ:dB0,d8iKUApaPÏ&tusȰٻ]P#C$ȐuN F$xD_||{EC ڧJ^liD2t(4+ ^ # H|u%i_>]+B2b: Oy[Pfkk;fSLj.%A`lgSr^D8M徴HzAO/dF !.|)t8i~|;OFA [ˁ:߷Y('s2A X<sxѧe# JjݦQb!B̄ & gQ9ҨrJXLU=j`Egc @ ;6ޔd䳫MJ!Nc0];tEM5b"%eDO;6 -<_lhsw)$H" J86{KG*[˴ՌWp+XЀęh!/`$+5uf%heTlR:ҐLsȌfXG˛2c?q#/"y|sg`jC<գٽ6`-{z瞷V3jLD2;B fp.2j\?ra#2]/yHi1FN4# l&0'rS,.ry \ (!S6wP" tf@͞ӌcvQ_Z#`26%G3KX\B`MmkUbL"…S;2\(+NΧDdDѶff#.C&Z#ܥ( ̬ 6E UJH܈R,՝/BfL;;( 5L[ xbV5%D䮢&M J8v6Vt.b3mVaͭE]gjo.`\j( x"10z@(=nlay~\,n ~iu.bHgbBebvLFr>)yl c`(nBt˶p;S"PvQzƭ3`#1T` #1Ӗq5yP0@ (lab czM ^hU h~ \gO!^ ?>G+V5Ǘ]N1@`4N1\'5bD+@o=̗$jwDql#GR D- PdaB{yhz6/qwF{f}ˎ: a&M붒f6`I@4kOnѤzǃar^7.:6qNDa7@"u_!Vyq 4$Kg|_IKkA9\}MCXcpGVwc ӿ33Baq\XITIM5_M|M!EI^_WO)^'v^A|o>0@([\oy eX E] n@@'*IE.B42$،A9665iq=dFD)!E;˰M.WºG`( oCI7[Q2V q|;U[x)ٛqNhB;fVKo j %C4zxƳZT8892OO+;@hVT3m Iڇ6A,˦!,<"\뉠9@әte\G373iuqЬ &DGkc\"[ 5v3\2,v­r c֬[>0æ2BqfB*$ϦIϨ`=k'6YvfC bOe+MF]lp=ژʩ^٢(X}}mp_x ;(r,*L[kRIEj=XҖM-w ŎΈN5CɭfwqpS ,K sVa;Rk- ;x#zX/485aZf@씮@?9UB-%:91bD(âPP<.ۼ$y,\N͑<] j@pgV]Dvv,肈a܃OQ>b19Z;MB*֌N5嫾[h+i-h5YP(rfvۃͻ $L'9k61l&R>kw`X5z˼`h %\ P(#j=3DFDDu"]]O$ŭ#;ݑh.J1{RXX ]u8tK H7WȳΐPH (EL\Bbb2H)Ε!l6D.y$DoP͜j"`JVcJM6# $6IKUkCKVSiPA@+[Z @cC6"ǾG|f(`vVYvx{f &R(~Ygz=- %*7uPEH'Wm{ vh6~cL3 qi_ngJl,˄OE16tp`»C`e.3f xw QcrOfA[aaWk YJ˩OE!lU6f DR ,tO./ѷG`q q$Ga|L `r9H)\`RNL^Om̅pC5Q+`xAZrR/^$͜*x"x\ ļ6?YqYZIgzHp4s,U0QX a3s1,wT"룵("LeIm$*UKbm%PU"DG"*̋4 K3MۡaQܷ;μ}ƹ_ax# $$rp+VJŽrI$ s8qO gXJZAuݔh*"ANA$@BS,vVb=C5DQ&'yAm"@3է~wenYnHB4|5}VM&ķ0YD7|' 'шqEB8W"dd1/y.Sq# . uvCu7_L(1%l,$p*7rBA,+T!|SPi;3}ίΐ(/c#vu \ #*DM,6}zGD˾u(JE/X"2Ive BC$E`O;J'^L9b2ė֎GӀsƭPA "$5ȣ%W D R4:SݛVb1Wo)Uf P$60Ws{VN.s f[e1q^$FL^N8D_@hTXፖYbNe7"DyAϮBGpLb!f#w|l ȎXN7va1KBĩh/Y04[TvԉkF[^pBw_Jl  GUн1VԶ9SB "mКлq6a̍swdf@QmAET @SuЉ2.Rͩls zٶ^25`}qX l8}9c=W;"$ 0;[r4_6/Mg9xȳk#Xq*碱hu sC k?hqd!y ^fQ&dK IaH Si6AIaX35WAy? ,N.a+x^?h$@U$!8[0eW9(}aAMdTS%)T@ 4;B{:vPDJP>H $THVŸÙȀ'^؆AD'ۑGmjm_֠z /l۸! kUj"rҩdHBH>G;,?w1wO86=2D#%J3T=#ILT@"gbe8 NHm9j̧(&AҦ 骡cX0iD`q#Oo\f bS>€ &A"dN XȂ9A2NٹvvT(;B։{e*邆'>:B+a#Ztr4~9C4ly/p]l Gg||pפR0= v(dB<'1<] PH`LЄ PʔjJjjB=ZnC":,0{wF)ȭړwK0r^nIXN p'94w0'$rɡ-"*@=-5SfAQ͞BoFv9[8̵Otv2my8&7A$`PRj߭8Wpb/z9_kNqJE5kڨq}[,MwaD+,>uB\39G,0 .)],5Rf AZU,\9ó$vr`flXHg3 x~e =Lښ^?3a(16RT5Q S;KMr 5ҠB yS]S@t}.Bg:sUGWa[~(vb*rI*YBH3u7u?IKb#7F)K%'UQQ,# P$Zg7=]wfߝLɂaiut%n=Yث7m(so/W}fɾ3<3q H>4zN]8q+ BYC'r3X3y:jwD@} 3%Λʯ_pvd%۽Mˋ?$fToC˧':F(R 8|I,% MZFLC  .;pRT֖ @(JMdHZB]͑jDnc!,QOTSVo{VxV;s+ "73hFDV=|a}2>a|̸xY]C­<uѐTYc͵}gUͪTwf_h+bק4Q3{ـ=S@}ĭbcqA20$@@c|g3 'S=*B:0DGXkǾ%ye;צ 2T] ['F9ͤDIp.皼DTMB* a;*n9ƹdHz]K ]#{dmcvDNYڪ"HЃXSN"Ŧ*E$υe6w4§cN05j;\ 'm {J`kE1VT0`4B !u߉"F["D`Pbg0NY uK\ZpR'NG:/t}Srr1UwCYk*>k&7\`w貝#45|t2,%L736Bw)3룪7"y$#CUR}E44SهNp[ v'\ QQ)Oʹwld\moa#8݋ Z;;BhŅ1; UB B3 < m䑿 5 2~Rci vHCDZ$pk׾79@j#(фΥB>_=-03+vJ$w\W+{ }‚dA7Dp3=Ц J ?vzmxikX)RIk}B6_MؘvlM¸dC+r=.\5^~=rr5Kx~@G֕ D7 I&8@#yYz<.a4Mj!`(/"l dƿ1rޅ`z zC$jޏHt*s2ro7k$+,b 9yhD (q\*zn,TcÓbB vX:$xHcw4Qh睫lrL‚ADžZs=rxU=k8acޟO]|$&vFWZm1 J1;s÷^5-'!y8M{Px :l8n]'~1)wӷCCT2cUbZSylғd$+11 / ܫ,%Y!hx/ՠ?=U<"fN54$Fi!4toy {x$PgKݲ*_J Ц?XFk|NMLW R^/#BY钱F ;DV`αSЅxԊR >wqm6!t ]ey,*LE {&UŤg7h561Uz#5NL98x\bhZ K-S[, RI)hS45 3<=Kn]-#^]v֦5`,Ad9<8s|(c|IXl 143\F˫Q-iQi:FM#ioooqk_ 71W+t@UvdĿ(LŊ.G(1No4a~aB$c7 pÙ o q-\ 4!Ʈ%Zj C6\(&ĵz_NBI< s.[u|I.D}9FW$T_D;X5:Ds&+ 5d~-=Sp1zCѿ ?xNGvdD](HQ TO%uۉvxɑ.'p)DLD|BaVGBAQ{~HHzr'hPzl | |(@)=5B.k-!~s#`\s16Se)nfmSu;}i)Q!4-F%"2srT]nNbF Llb Dx ӛ6JA$74NINКc8a&]V%L!_K *5l\tyX?[p"9YKtLFpJ`@S"'@);%ZJ^\dP@ bT %f]Lʕ]0u5ũX&Ac(-O5l$(6T뜖&YFmLi\E j-l凇DgJخ%s{h6,Nud5ʻmY%r'TLP,hR1k”3af9S!jPP$fֺkɵ\"4l 24Ie\KG `9X#M.|rثH!L*"l 9,Ļ3)סvtCɑUPzA\ir8.CFg(87 Exu5Jk^4\SeĉhkC"._X`+m^ =&X84c$8h6"Qy:R. )^5ZDGQ&Q C(.V%E1:| T]ue2  J#a}nr'ޢC08; l&Dp(3{V(ҕj* 8C^ؽIKyLga-*7ւ×p'3Wgե2 MQdyO<3ᥭVNV /1&osr7lT/J7 ˀ)>NfUx.#DDdRV澓I &vR0TL#='wˁf(e9#vVyu;h<9dy%vф*Nl á5*7htHXVyp2qN], ЪCCY|q\V ?MGa(X,0,t3QqbIsiPg\SEgȼj ۫TP'uzԕs\'P6綥 IF۞T/VI:k٬`,索hh,ӑ7H71j[՞uyTö3*i͎k;<89thAi !&W4 7pՄ$.l/nij60nGH䨸!]1H!{|}OW,)@XӰ(QF6dB"6flCERAeٿ#y-=e:t8蔥0_:xmؓA-,X*9ݓPR ,Y0ȃ[!Q)VP7 |a.:rR2 "G UNR#.vT2=y'xȽ 9E 1%1B1H^\+-zo\ r6o=n,LLG\vt݇ Y8MtvaN8f'w=s6&ۘv`$D'Zֳ\f fkőOT ܵV&I!F8]lH TՀ6hX/6YGllg;!KL `(#f@$g@ӽ6ukeQ޾ӐaUiN\V-8h.v'kI͹]_'(ӗ^ Vm+&i2'W2rK䳸<+y*Q\&dM0"\ciͶœ#Ra,.rrL#p,N6$7$@^W nʷ느Ui^F$nyOfQPQVgB ~>\1p,Ҋf0H 4KGq Ш8k <ȬbHkSh^5"l{kכӗ^)mfv;v.ͩTs÷vH"[ G#@B 2$$b28Deu6$Qs(2DX$Nʌ16\;-eE0gn!؂,l  PUen?C8dÈ/"b]vt2l|FݹQH*17b٦-KVX}Rк}hypj$B:kl,& 9Zy!S_JEaG*b 62L#Q@{?j/;&cY,ˁ:\KmUY^5i1Iz}k2 sX5pc,A]RJrg^c7f SXc7QZX#"Hvw>9"H>zoVA0>ndRz"JPCji;XYce=]'HGuPUx ^ʸpP*DTQR9$qn*ᆾuMH1=d(M-f;–"-$AғTALLv$5B==^y { v"B&a 1z<Ҥ@1%J4 E嗿6L\ =[,3,鷶߿\"vДY!1BP&7f3 OxͦTJ)$RH絴UXUTL1YMU"[pͦ(Aِ2C԰JȆ#zGyR M{|-'Ix7wJ53e zeƂHHUcwŽ:!HLx͈М%U0-,!5nI5ZQyFQl}{a{EL@04C8e+3hDl1[Yq #<ߪ$7$ DA27*>n ջuǖffk 3AJ\!Y.D3_a hD^ej΀AX/8ܩ4dblx](rSz& "`) R$-ʔl(rDSO v}Oh({hg]W]Ty%A>(q8gE^=)l;`,ػ2#HQZ1&#z+q6?G^e[jl 1͈zCR,RJZ#]- &]@ .r4_zH +wFVS9ȐRW؉K=,"(~7 h~Nd%ZS^]NLǼxr6- RF66P\d". |h*/`XԤ=߇WH<(܇kن]l-ċ"FbBDF( 1^p Zzt;_.0oZ@ Xut}&=:.q,CHm&S ѣ⼈8Τ #_KO)=a,%$4얢n*׍w\5@2H^gu5)D>ˉ!Ҝ?3v3Z$rjSa-ƂӞFQv] qh ^>fwQ§`o93粝+58A۩J4WXIc0ߧmXfWњ F]IEǁԒwV)sv=Гw󬩞4"Ԩ5(]$.rH1E@H*Զ+ۧ;{y+C- Ie,Y Te2J(b؂$Zk\9eAd2"!Dž$&~3㳲S¢5wA &&+1vx1+DFL (2.PkQ‚.r>!.Z$mES!y]tՊ{/cl2CrNDP ;ί##FjB20 F-[9͑kgcDșּ K$$<-_MjG1r/1Nxܻ;1Im w L;;qeهV44}(|ČYvUE$*M.{fA[n@8qcqב$  oTq7/@@򚲣7.= =6ݎDH",I,鿂=o LOkAX=<־pdT$WVGkY< ' o3v}A%y^6&ɧݔ#DvA<NuLjCWv,+~x[^+ Lx{.;퟇ٶTOv٩TơUZs(,yhUqq/|&LB V[ č)l*/)ƼI<8݅CvE3Zت:!67~͸͂=mR HhJY@@ \^o{;u7ׄ`2o7¤{Gs|h"!м 3G|A_^A[;R^R~cy0LbbPq@\ߟc]>&;QkHN%Dt~T9PDG_%kjA4lSPCp `OO3:E`7եyxGv!Z%u 0D h / }\>M )y-#L4eAVQCjчab4i@D0lj1aW񣣆gJF6 `r ٘ L22$)gUK!u'CΧkZ3S ~4v49!\8I@́ KM_zqP!K p(L .Z=7PnԸxz31Q1j@a|H!JT,1 9 ݎ#!9LfBVAYU\)$Yx8+*@A!<ۄlJp^'4v"1(#m*aNĢkmiKh ylIޝۓRMd$6wޟ 'aPl 7{9ꁰv0 >%!>p`dȑ R0q`n  ̆ >ѦY<As2a`,P3K${i"D=T/c)8`n4* V&ZiV*i BA?p II+$i&$#kQ }cچiZF{A6Lkav1 4|L_ʇǵ+ܺ/6!. Ҹ'N@$Ad4pb$ $?:+ c$0ITЄQF$U[I z&4tb4Z%i@KAVB%< H@$&$zHE$pd RIa,dX2t rK괏x4u0N@Z;)SoxfBỳ拏_#n~2áo;}\[/j!ez_g|ܮ?[HEs~A7/ca5=P&C7PP  J!XMYE \4J-4;P'z5~!MCc/_ p3Z!b.Wg5d 6*uu-yiGq)M.Pײ0C1GeleR2p(tރ`ø`E\П4N6+(#,6O"(ă󐐗hI:$ް7جxY 3TaNj7vĜ p߸U/%mQb| cz̊K 7@|ԻYT@4u 5R D5{;ԑI|vM  B\ćHZ7쩺D!D=_zy5=l̇[7svT)iֺPŦJ$mtr@O% ${nϣ}q6ܨzXiƂ}S= :>iυАq1~9ڃx,%ٶh}n6\I\у:yZ~Wa@yd7,ގHћmRW֜"%S~>9?ËuÇxY_k(#M5[wj$uBI/*/7?%8:Ji{N<͒=I޻]YR빦^$aeԹKŮ?Q56vR[YqimO~6g"uL0Uy|I$.BCS[^-+ۇ/ףv*4 2*X F("bTm" X9t]SHDDH]_1kwgG}owp©;BB`FfxW3 5>33Ӽ[Ky%-#C  !LA-Mj[/~ƌ{Vxط<s! Y鱳{YwӃ g?#uQq79&X: $e0d}l~\βKx>+*}VG€K?9'תWM gT[ xsHQf)PD]_ 3{ho{pg[rw!B [|ZXz)oMr[}LX" i,K G<&6_yfvj7^YWjTC-ثi0 $Xw*"2'* GZnƦ@mS_bS!(UUQ#'ք6'^|\doh6M(i H@zyroyy_si=>r1Kɕw_ 50O/ǣ_[.*!_jBg5LEoaPHOt1$eF}oimm x E#sl7=cEyV'Ā@g~zo\3tM"!>[#Gt7Q/-Z !ƁgApb*>_FD:q!<75qRY<ŷGX$$+zNޤGһ|@$АE#Ƃ]7;Vhm Vl x߲ >f;vloXB'#qJLA#iiKP'#A!>:̱ U&Y I$hF=VOvNʄ$x uD$p1Z!M.1{U/v|?{~K_m{si3H'O_ێnmy?m  ϩhHH_iDYp݆/%1K?Go~"SY}&LB1wFzJyГ<,kc|vtwEq#!$@^Kkpf;`*yBBSIf0AyGoUn9Ɉ^~w8?!VʾOo}w?(GsE2\/I|T%7\;MMBi`ws˽h`#>yl[xSH Om%ﴟTUB86/zqAg|n.q1/"ʟ|8 8*8FsX(LTi9~3p^Z\9쑴~w #B yI aD  þM"e1?ݙC%׏}b~3yN)C|MQbC`~_z m[`G@\˧81\3B"!ZY h-5=K[tNR0$ `~lQMyZ(GZQ $$g-K|,S+wk[)$/KBQŗ'T|n{e?ٰjZ hcus f::y7j.6Y1}Ham`?F6t {D @WM Q  H[#w7Ir=_>Khziyن@?WiGmP](yG$cq/Q>; "% m`@psBM=$=6q&:$63ח( G`]F;bjZP2 YK4pq=9,*҄J! ]$򇗓â OCEIh@+{z&X`dbf@'y ؘ3Ƴq@BWe^fk#T,V71Г񚵩ޔ9-3T 1$wrᐓD  ऒ!?vvKZ+>V%}x=W4B/(<@0"@{9-O*]T@aȂ;jil<tPI3\QG@ރg-M0l|@&,ZBJҁpe)_]t,hյdK9vnY۝2u/MB@q6R vWٶ SW^f[Ynd$яk''Z +JO3G3T~;?}_Xϧ3 %jw<}ddpfEl{L6'R$?cml4vIh vs=K-Yj^}QU5d= O:A)! =&=?pA47IJWT:}\ ]U}Sפ!OKj>;X5P<^ٝB-ZTutwES48;)?0R63%h f|-ċЖ/xET3ΙX*A-R<3YǼ"!\4 F¦v @&K\~9F9jyYgxr8&t\2\VAh<| N파B`OXZtpZggf%L6 PwZ⸩8V^;p@4#,ҼNT3 {JH)H{Cu9ݛ>ޤkgOv+3+rkAPrN± VpyZB%Z!ն5HAf4~7!EYGȦCԶٸvRRmK>Vbt~kA7[>I. H{H` @|[.v{GSwzm5,LE$dsiA @ 국2Ⱦ|GZSأ$pn{fk+?7ݦwu3Ec ո`BM#L5IϠqY+UC0OaɞuWJ%즄K+'63S_~JKhw9[ZG|~ yMԙOggqnrzN0v$C>Dh30fҚ'Lgu]|ϭKH`7>ٝUhI6,f$dFG-d >HE Y.ܤmz ~+lmH)rEl/;/uQɴlFבIɤ\ly NqZwYX_u){i;VT&u3>řۮsFݨYKi|9ܳ:֭ >j&q[ 0ep] q_ _'}?nغt֏Uf_,#E6.ph1xic?ߨ/n$S ]# uc8fW 1S=K‹HcIi"BbD-wCa؎@JaAvqT3Dxm/|5?+Ax30QaZ~п_̋s.gjUy1pzkcfr_&7s `݌ I-@CA@**Ioty*":짯YeoVՋά&mA˚B5 ""6%`-bKLkZ+iBCvքI+!X$6GƴE4Ɍ+ !$$^]R!6x!H(C1 2<5Ö>si#gnC#’8!lEnllF`Y!W/Z[@5hlB`@4jAI @I'OIɈVT/s$]ONL3 Xa;@M"I$i`ϑ^WO dsA%u!Y\Q$ Az@ m`rz}5 $ nBI}&@='t@C!u'܌}kaؔͦ b߆+qZ;qIka0Bp$ 6IÚ a8de.L! 3Ӧ(!ٽXkE:$sClPַ)8d3C}XM'5ݭ;'k)kTuyM0ٝH&.ӦW]sƢud9eBF rp6BHLd9eA #&4íc&:v]0Uذ) ;Rs v9g4aɐF"Bte$5 !iɞ:@xa+y O9s{6$TaC&0ɳ405a'rBՆsȳPpf5L`Ht8t S otNwx>10Y@Cd267g;3lPTc=R0kærCe 9gfmEI5MXC|&t3{9YYiRl§!76V4T1QH(M"_au3 `xFlKft;*VHM3Xמ]ajtf]0GgG @gr wBb3*"TSlImHuՄ$7N6q92ݷ;Fqwr0qnC5;P !s!ڱ<.{08Q&#&H6,w3n\jB9N6磷rʆ'$$Mtd42:B"(0ޞ03-;+m zBz&'(E+Si4M%ufN+ҦW+a&Yk F 0k҄!MٻQ]6Yb5']D⓳8q|qlv$&ڤ|d㲐Òl v0M"aBU58&*Hʚ&3 !UBl6O @ $>vt_AZ3:X{t=vm7,94<9H鉌7M l 'K 0ݓ&-COg1ak܅ uyU:Ts<Ȁa65я]3C>- ~kI>߆Ff?#1Y>-kYϟ8k* 2wQ ļ @;8Nhve4:n?~SNP5/Awk<.DF3KDcWv ^m <@UPux`~ 9`c3"D0E ay^h0|LNl^~b!,2ymơ B@L%`p$' + vvyt Vߗ3$I/fw"՞L`I%_ azX1ZLhͼO'SPd]!yY$BAq$ aR@xCpO:?n.R aW)wƘ4vO VKIu5gX"i703S˧EV7VNew׵೷}ӳ[KI PДT2!@f$XzXT$ !ސE(!@@@y(c/VM?KoQ4. 莴%)ƓZshHuk:5/Q. _o6ўlBC |d! $نSWS&ĐF $8S)z Vy;!8BAd< ns@_|P Q -+n;з*|k6s=#`0pmxp-U* 8 F]EDAJ5 --,=41~-*w|e)^FlcCxhEeՂĐ$\HDHH@}v!&$:&$rhaсP2O%&"8YQ+V hV~J114t WE9heun}vqXh!p]Xm.#lyzX|g~-i_PNY9d6)@1^8BiKT Dxܹj $ IYl^ƃkUIJi'ga˵D 8;Cre GTUV31i=g@¼y4cۥ}BUY[,&]M$ʼ4YVPք uoU7*`Uvb7bOxeܜ`s%ʕHKT !P#j;Y͒MZ+P׮25~6MԨcEDuMv%<RMZZ$s@eMMs^o(Ϣn91 XmZI$քh5"2"3TDSB[ =spJϖ3`k䯻M5VNYgբXBKNuESRMnJ+ʙoh\}B-B -BR,lT9V}JؤN%PN|c%k%BW%j .)UIӷnnx.O^5!j[T :f9'ʤ  !Jh"!$4-ɑP۬KR)ڹvD*drZwc>"k,vi@3X!,Z.4[kCBe[eFTi$K Ūv;cܵ3%JK,ڪ<[qzzO1C'k -5i.+ qhwӾe3P;ߙ^(e_ͣ>MsKhH`ᤪEmkr +c; i;BJ[m7zucQ@I Z3LB᠆ 109e24gERbhf4!!$wi.]z;6gA!\E;֣&қpĘn/ћI [BHKSo[vfc^o. K9 B6;7I,n.ogS4[;yI!eFCA[1Oo~z$BX keLU;RhiOh$$B԰6mzF:ە$ė e=&x]֢F]eݝYVo I,ZF4󥏰ϨN\I$$Ҵ % YytI ;4ƿ2P $=]L$Fah1+rD! r!&$$x +HI |:v 0`j;J l!$'gCK!$ $OUqz@jZs,֤ a崀@PHi@ra$HE朐đD$d[BI$iHF/Đ ̄C @1B4KA5u R; $bDHE?ϑR H6Y+ e Umty@E* (,T  1Ec l1(AkFH$X >#>#TH[F[V TlBd5H0 #=@$l8d&̐&$ OeHCI% $;$E'$IRvx3O~OA XHIY%iT1$-I 8Y$!BbcXA@"V"1A!E(XEaĐl$ X46d$$ yd̄=4$'˲ ipb>:KOT z>4d444 ^m$F BN[A 0I,emY.CC2vXzX-"V$@ $#F\]}tH@edbv/\e)AQBU$KƬBP]s^D8KUzӮ.*i^ Ȋ '#@1"ykl5u)!g1a g xrጝtѦ'" x#oj!nvLXhZu4>:՟<(r5Zd_ >8Çx1|ApID X[uaV\O.;'9zo.le+l``& $+D1JiQ#&b@_pßaP+2v'e"u .9mYSӪU96Gu6߮ yߗ:8Nia!ّ$7s:6@zZ j2 =:+1F~nTۘfE7Vr׆71fh Ă'_UP+M PɄ-6uŐ4>}" \e\ӫ/q!vҮ]5|#8Vb׭B8]~+eܺn;]z/5vm[}1-߃\xiU=]tw:x\+fVw!TXD-c]f8סQt+R*TeJRk`dKlqׯ}| yơPE^vQ=ĺ|beluAk0D=Ϻ1 .\o_dWF\6s'LEp\ DpA{[nF6x@9MCɐ, 9ji[Jgh_P8%JBa\< uOwM˭'~V&|ӟ4/hMN5h4u`l[rT11yh#}wEbR̾e0j*wî6||1x>hm Kf9D"F@- k;^Cp,0hG @A!HN ^".xv=5AXSȒmx`=]~:_4EQcIzO8J-Me#^fH5f}9l#VTU_g7X6@bwЂ ӳ H ; #"* zFvAD̋NHXʊ0kq@w8u{Fu6@!oI¶Qnx]J{]skD!`Uִw^l )~ں uYrkB+,Y뛯ܶ_`;C Y'2gf؎KUjWdSE?2Ǽ vrR'9̏?ADVɱexPTRW.&Rp$4 d;#7 @f++v(*PSwOɡ%M3\qHU|)):@C'AYL8vOFF@ >Uq`̣L ݌7VW6}DY4ɲP">eT@0!+bkB&bIRIoR~|!abȀtuNTɲ$DXMĎZjWsG¥L$" ΅x|ݷL({/qcqtLEu Z} 0h0Z~3ҪjCѾf> DlzXa.7$a5ncqc΅IDBDŦ>NXM`b$$04yU] ˆƤpAy5jJ7ߜ@ {lב4X@ Ӵ4in^N`M[27zQBZd!"f #GynOi'ppnfS !syxg$ow9;ŘĢx=hE._~֔ 1:;5xq[^r-6[~:]45iV1Gl >'_#FThyTWP*є^pzTF~ ?r CHWOW WM0 $p6r,(P/xPȁ @M3KOlи{3Nw=UxbxT_W1kE\k=vza2qA01jnX4`1.FT1a3nm=>!$bRZ@|fAi :qIrq{^t}JVfPPQ)LHSHiaT_{~ ۼ埕,&JC/+2 VYqk<߅=apP"|I)µbY4[Gm0R{i, m!S[э=h֪%8@׷}7FSׄx.ۮ&Cb6/5fԞ.Oil8ec e&7ٚ= |/wyl7]ݙy巏%t\+yx)۫-Cv4 S&YQ:秒oCdxuj$,7^;-W`vj|J޵ち!YC#l: 4^$L#&VrsqC Le]fcf$z'jiZ1s?!Q蜼x|39oj9K7-X`d'[& f.)ڻw=Βǖ'𯗀&yQf;nv6meYz3e+kfV9> ƃ5~.@՟~0dD2-(V}#G1 /L\|v{sn=M= ~E?@chL\w0pzh ,~*k>OE^}>5y<7iirNϤO>TtZ;q;v&wOP_KQb69g˟qоĻs,7ꮢ TJxs̕ia|5pti;94G̫o1;^mO?35Oq\y`Ic m3L [F+t,_;-pm wk)mվS;8·ncpk=YV׿zNt٫fsrct Oև7!^'m%m3Ѳ 8jb1&1{_I?F쓗߇D DQay^i*I?b ,c;kYiʠ50f!Mj1 Y=Ew$B5Arb99jAM]:cJ iUck[_AXݥjNƂ{t*;Ҡ Ň;bLVfJ*[t`+|fsWf߫ݾa]̎ۼnϘ]lɞn?bhr.}j'8JC Ue#(LIQ%(b-܁*M(# ۡ ' *]v2j[=vJsE;4ʃ*& W?cⴸt4X7- ta@mS ث}k̼eE;u!Gpj;:+jքX\Bd&L2@Ϳ(T)`XحY/y:ۛQx`7j1-`9 ^w tO ,b`]H延FחA,ɕ* f䂪$ 1%bQ( ^Xd5zlLP@FDNՀ+A'{Z4U_-d"΍[5!bp$13Q>W@7&8tt*rV,xBdG?/ik HZ IJ>s!g$RDUVVW[Xgm6my`BW~4p8q0d{8k`jiѸ$nKMD @F|lBt @LJDs ԆH7gv(!S7^\rviPR6/Y{8fGJ7omiukApEC~qq 3Wybtf6܁kWP♩hHu`2~P*[|b7C|zԘWT"-YQH6- #/>) Qbi.ӹ.hK5xPi[`@Qq0"0(H w7{Z-Bʩ* 23 _?+a>:@&zGvaV+9.mhJ :ʾ!iiyuHNLi(&[t3,N f볻3 jf{@a΋Ab)S3]t;j'w5wy^{Pi BD>Fsq{̐})e(0}Om!R}^ԫo]%sST{u;"LHp]{De50t`J"?#H㸙 rmXJwmhܿ;eksNhjԶ631Q +σC&U)n䷸kl]b4F Lcu@OeǛN;o%8u켺3Gګ s!}J)}ckX\"!9ALtlqDŽG 5)e:5j)txrFJƮ ͷ=HHu}/sʳ?z;dkx.VCݽqz)lr]l gki~ɎEpÕ`>2pUG*UW].p|F Hgenoدt׷˫AYxg!)jn ; ='~w\e9'/y {fo\- A5 8YAa JSĝ{#ꯨt&$cu,F={7#3Z.,J1/"Qc%Ūʥdї7/̬%0 Լ`u$ B;~Z&Z[ ">U alAvLq=t*7sn3d2MCrf ihmlY&_{db^E1 یQRA-ڜZyWVZ= Bdjgǥ(|K$/ZqExaT(6VFFfd1f=Gq<}Wdjګ797Oyj6JqoLYڨ&3kT5D@~7gfq1 a4%# b3{On';/ηի9EZW m] Aܺ]]W/B}ۥTژ%x^-tՂ%%ußݷ6xocd|a9]KG#h>FĴYqq^Uǽj.g1PrX?gDns?[xu\oVm^>B>7wjZ:l5\C/0X>{_trW{3qʺgpwo?t?ƚ;gWb[g-z fD.طގKMϡA[{3|4ͬpj"T4p.뺗Ol~6)Ӆfu{~:'rCn[辻giU{ݝ[#6XU$KJMWv}nc0Uo>nc߹m#62?II!4{KMd348U i'M9SX6ISLzvO$>2K4ľJ|f=;Tȝ8_p+B[I$PSo CL姭n$ B)a"E I>2B"V&0'dHTTEJ);CY$%ddGyaCVpe4{ GG!,gScI-](wm_/Wgv6zc?9@yu=f7|yx|NYM~rlNIvvIT$m:}dAt]x@JdXkP{鯾wm(gI7s|~g>;;ءhZըqŋ}n-bK* Q4n[`':j ZPUyJ5/J=w/r~yfNl5} -PvL߹RQ;{e% >:'&Iq='LH9p  D`3/ @hs ƖVutDy,̾Q%jvUפ<͜Σ>HX^rELUVh$b{Yz۵49kHKKХBqCx3ν瑝]9W,{޾T<.uUB&a?UYzv o Ԛ{L9̷:wS\]amtOJ\i"]_ vT >!+$v=Gِ|΀H$ܯC]b=μT밺?+^2nN)gWǙ E7o9&?o23B7 mZKۖl؏d\q(K>60)QtBBut{`!<%p]ErkF WÝyL>>^S'm'.'=)O6 _KjcJ@˜!{A4 v +(9k ČdUmվ2}X"1EQQ*im+**"֨1kR>b:Sт>E!KHN%_wkk#zlA@rrJhЌrXb%zM?I/_t]q[T[ )姬f\|00$Eu7kitPf?X^D9.M'Q*6E5#ribBmDtv<ȳ&ծʗp2l:D?J)d_' oQScF*eeeJԇt,JJϵ{my9ڦ?Gn[;lSiD2r""MJ]?upc%SD?~u߱MRm7tK٪vz}yAQqqtYOOuͿZnlMXl}zpsf/YZRbǚ_͋q_+ұ,^RHiY !U$~$$$:@Y!HB{IXH!z@@$NO`@adV I{|90GH"M0Gդ$?ɶBS?h$Y G^վKnp7h D𾸻ƅ?Gw]!3MEɲ̱k x^<ɼ-FBw.a]?zҷ+*(UJCoƶgh,r1UX1Y-(' Pb1jT^Te. ;Jn[PuIWkٛGax3zr2Ol8^k+qq1{?ZqR5?dN4)%d35[gO!Zr>?O~Ϯ]`3Z~1^TD[-`py6.R|Ƅ4$Twa@dJV`9)on0d9fC_ͩGZ7Ǥڨt3]W%Npns]*x D[l/W݇ uϑߟR-gB?c$go83WW;ik>q {ݭZ^Tlƃ_p2[Krg]?%hraĢdk1yQEY4}5Pj,""0s;uV3ƽ9 jڱFt/_Gm|u/yi$:\nө۝3j"n*=$~Wk)Kљ 6w/fſ,o:v?d2Oyx_z#wr}߉gd5DMc`؊T0 e +F**eAEXcX""~-3*QUQVkmynW5-/qY1T~ZK=!VOO1!zm=mo}?o~l7KgW^sIf!r}){]z5)wՆ?RȰyKЬXZmjfR3#E20q17Jmk`Ҏ Avއu+b$&TIf5(ŔJZj0FjE&b 9C-1Q38ЭY\s(T3F9LJXdRȦPU A[B$eʈ1 3IΕK1>3+[M*^n/ aV$գlpI(5+9Ì7T40<Jq1 S= I\s՘??W4r,ֵ/=/Wl,^ ]KE,5w$w~R1 ?u=L~Nuh= ;Cme!P>S>v!H~;Ʊ!Pײ?Gi1#5vFFBE$ >{l\g#Wmb7Joߪ%_s}U\KNu @BKxZI"I [R@q[6ddBVI">Hi$!_Aı$6"n ǫ%I '$;ЄIAH~RG\BH(bZfoH$F>/⻟MkF=BC|8/K;a~85+_fv3Xr(BBkx1Z.ZNd1AD{D{qڽ[[=i7.LUXB?=PC{sp2f6-BD@O{,rNefUԇZ% H&opnDÄGAO7jۜ 㟴DY灵I0t:|a!s̊bR"z녪FW!Co\H~!ޅyA T ұVzcvq_jsvf'ڼtm ط5 V7xaE2 3P"Cm wj? ]Dޤ-P ,0 4\0.aV`1NU b9ѐ!SAChG BJT;k9_j?S?Ks@2yFښJ&i֪ Qr'r96!oNƓޠMZ{ӿ4"X]l؄@bڊCEGڿWw}b؀3& m?a_ϐH?Ȟ▏ZMOW#oE8 %ٷKBfDݤ0?YXEev"(1ӈ4S^°~JqO=$H,$XED BEcCBg6$]踆" :c`U6m'%*4  ™LVuAh-Q;}V#ߦ3JbAQPrQ2 ֕LIi~qP)k}'d \uGyf!$Ggp>ڜ) Uꘂ"#ڜFնRC-XNI/U9XpW8Abgg@TZF"Ջ/Qt|)±3 &yC 6+R _-2=g7U WpH~# L(H2#AfDBC\ZX%okzFh2?Wi)fFlrEw6.퍒e꺐8&f) ٌ?Wczyv_?[+ݼ-[luFj^4P_4gkgyrVc5Z SBB7]]en^8kʟ174Zn٤Ne͒4/s{7Zt^G_*Fv_:zSQXGļ#p_&YOλvFVݮٳ٫Esquy'r>Wrg~ˀ?nKY7eC?^kSn4Z!|X=^NiV10PIm)/#5ze\Ĺ;Mj(0E7caD""-dM{N|8hȽe8E^LAB')-@۴ k̽v?A1Z)EYr/^gOs0 G F4#_еRn{%v߶9м'mX'󿠜`d9!?ҦO":݊Q )2$q!QKrW? RCE)|6ll|0q˽m.u VB+ͽn 3jjk41H@` lMl7Nd8Lڪ6)C'OexN) ?5 z {_AX.lsd+ x dnDÄ̓xcP6i+t|\r 0`Ƈ8{Lu7ҔQ^cZDZ[ĺD,E `˫_SҟlW,b2m$j  CjFF,,h[8翔- Q. s@җ6rP!Դ*?_k}! G/p!~J b44 ϜYM\J I);z߭K&98 vQy &тXŵvILZ %7+,_tͭCZ)'Zah0AJCG;v'ɀ˜*ZI1d;HQe;M8Z *ÕdbY(jjD@W G>EazS5?!bH#$dX"`g+0S]kv=m䖋,<Ԫi%P?NwBweg:/WXdKѿ,٦i޽ֶfEOm }h #$CԹB6e%:6&&R I#)ٜtˊMX^W:93O2ڌߋ'#0 -tDs}+ Жuln`4%'XBݵ. dD~e%s +)ae :Gea|Wl]B +.=p-4㫜]B l-c{黭 u(@@gGNCXӜ[f&yhŝOuMdዴo!V_vy,Aog)ZE 4T0xJq񁥯ŹXռ>z_ Ow2{V#BE<6C Rk=xC!aGl<ٺi;%bL9(_*|\Ovq&Ӻӝ ~^~Om:hȘHf?++U߷5`ٺ; UzbŁ3yQ;27z}7[O0"HHԿe A0]PJHQ jU2;vmv։_㓅YZ"UW \LeGFETEłpvJ(-A dol *T1_o>3*ep1#goq`04( d%HGmcq'B+ p] 95u1#E9xou}4ʶj?孲",|bDXnePI^.Omdl^8Ӯ\r7.1eɷ #TA{8}gJ\S@OZ|)A͏Avǐ`LbqZ(jRi x 8~^U3nqL0VAl`ICY*'wB$pmZ60wu/ Ap-exk!@^<1ϰ2YZ;e㐒V;ZTuW╰ȩ0Ȭr-Lk?U)jLKJ@MFJg:Μ(wWq5V]|i] ]@WO+ ~iw\cgØVuL},0TxV\W:鞚N&RB"AH& eߑWYO?MoTUiHٗUJk\Lϯ&HxV0J.CBxm"RlhдLo]lxG'U:U[ Ɯz|^mkt97ǬVlezy<}0(JQ&*^W썍.@pBc>-+_Źn ikMܓڮgaWbd6 wv۞O[-tm\Rqnte-d(HI뫊#ۖ5Rm/Tt}[rL(A9FP1d1G,ckRIפ!3hߵeH:{{-!̞׃Uy8{Lf3\yԫކ}_f, DH2HhmSSgci>LLOn$;[;XRf[AIzՋ)dsI7xΌ2loZj5uh!A1a-D}S_鴇4^sV_W8ltbX2iŞH@Ǟտ欵HSU79!W-l|m Ȫ_ҧAHy{ݶjRtn `1lFhmZh./qWU Vz_,X!jvr.UUӯgyzJ|lσK&r> רs$_xqˎvHs=*s{dzN%Tq2/n%Ac9݀<7hfX8r kãk]7c 䪻=)C5<Aχ}nMhy,Ea2HgЖRx8d/۳밉 Vyw'XUg}<" OkD^o8,v,ˊɐD/KPҶ!DwtYb>ZT?Wsz_ttDZܳBо'}iuo.j]hh /OpAQE VNߕ=9o~חM:ץK|=ٺF!8)Nix:W;fَ5h}uvUy!-zSPVė_fG0k8^jNRqC 8E.~mYnWfF>[]_&+\t\u<;]r8b. nrF v[z% ó+VU\$ZbLj]XN/kF;xF*SKYe#`v_)=9Ixz%dA}c\o$k&N^nk\dLr`F#=#Ãlua+T \ `*xk1Fԗb~\"?"}<_І3"ئľWǖ7@ָDmoڹ 8(vq1xfnyVX(҉ e#qzyɡu :3Jn ҇I磵]]TNWVlP#yNlǤH I9qN{i*h4{hg*_"m篇ʵ\.2Àa}~= M2=ߎjmM$tx^6n[am>^,8Is濞lC;3/,c1μb~xl>5mw >H!!Ip0݂;Fnߥ# 8gbHMRn7H}`0_U?_Fz;%PR d^bE!&\,Xf_/k///fЯфKV?_mK8ⰗnKEL@~} F9<// Ǐ7˲p}^,g) HkHO6 Lҭ:yXaqag?jgOwQ,o}=͢Eey/˻/J(BUvp.\ M4>D 4_R*Z3rwNGk$<,â.=ٝ0296MK}Lev_=\$~~m:Tn/c3aR3os^<_~AzSTRz+=,NPgĢ='# FN*Fv7aMr౹({&[ɒOz]|lOcPj陿F釠}G8=ѹДZv]h<.\M/vpW_X@ی@H@U-M(` 7/G_?z<|PzkZ"kU|/ߥψ4>uM⬐(h=@،OަhrҺ Jgs~4×نh(}SD{k箟\E 7ra\KqKR_]í{?}{9Ega| 8lbnK';}!ß0Ga4h 4Ia/__r2 uPAqѿsދWi,v\Ə w=5JdհNI7GBf;(wlj/7˦a^V[? PxҞgjv=eqVY2GݔeE`^ 0Р"3%Z 0^&ኜ҄W;[@SwH(JF kw=g>] qnߎ6ɶz _ϐBN-_vZWWk>;Qrݯ]coohUo_30Q`D/\ c3-?z7_[oa!8}tHJ)DۅbYw_*Rۣ짳J蛻XÄ͞4@@x"QE1X1CJX]'snlib Neɋ9lj$*f%K~Yʊ"xE{~ګfnCNp/RdDN eIf; 9c||l" [H&$ I>F'yϥtIn/_VjmY'V(7KF煷,ugggj _ዾnE罇_|98dO7S%:![*_bZd0B"qہL&g]g" u,]UA0sTnKϸD|1ݯK@u?stͫ B#/+}3U@p9{ܔߠq(GgaK.~~:&}3b}rQ޻RD +!!{o]òp>vQcѼՑ8Jl"/qՊ6DvJ3ĕ٭Ȅ9@8pC"qw PV*HGQeP) ϕ|iےël{kG/ګ==@ґt˫aR@`5S *£ޘr۪> Onm7ԐG<ݶ_txأч;}Z\{6M"BTAHаA0 !)H"Juɧ7<5(Sp+b-eYPI1ag kwz xiM^F D-oP֓X\I~S2VOce"@lxEs)P5O:n"ΛrSy*ݶj9oEY~N %ZN-di-dKaІ,'' ¸c:f3B뫙~M4J)K3)YV\~iB&Xͅ;Ad9MzI3,;| `"4=+W X1Ltu-3YC7zk5zxnV1N)ۨ+1ft0D{P6n& ݩz,i! W@|!ýbS.𪮥D0 qQߩB)!7Vq̔魚A`a.t-&^6<,A:) iHl ŢԞV'2/x)ۅ@]J.8GIc YRKwUuo6ҧ4pkcK"id1SKpڈyi+,*\{z}]iAkĹg%RS#/Tk 2Id*4Ymoĥl0\?Hڻ g0j|ۂ̌ϼM IY( k Tr! Ȕ2j&J[8]lsCYSq^\4`**2zu_6irRYݽfiBHj`u5%11{hn Z±@b:ߪD xCitLERVXn]9,9nUXmQWǼσ?Qotw ڧwxg"|l+jN,0;:v6՜/Fh |)a!$l9BJ\Ʃ}/sӟi&)ӻXJ'Z@D!\-$ Q-"  уI !!sw/OؑoZpѯR:t+l}f+&ߣyZZ;znh AdGQ4:6/m9m\[NG:&=%JU$,a)i+-w47KwPiǶkB(Z*3['R0CjF-eT\"*LL8&u(s] `dž7AVԒPqBʨM64v;<#Um&m~Er}3Z1XZNxmqM{G V5 uM$qn?6EAellcl$K~9HRHynfnJM=Վ{ ue&C DN AY :ࡉJtVdk#!$<i:lW2@ M$2Spsq,Sng0A"! H@UCJ!-E"j䃟='fg['4 АL?`cd$%q!=0t#Hե(nf`Q#_\Lwd Ab7D$x%_1<}n65R4+Mڢh{+nYճy(!Od$-ißzci0.9"ndD:ߋ7;E1M#DNO':{K-`4?'6A;rwiT_>t)\!)1`VW:}c_/C,ŒDuLr͢5z!AS8SW6U.^}/D @AAA6+AIy- !5l1X{n@$ x 累akoU rQۡ,*!\oWE6(!x/[#i3cjo[ڔ hu׋iƝh ;ԪF69ri#.vF45 q+>`ɟ&Gۍ/[Nlpdͮ-ekM:d a4$2܁,%T#dpdz aSz'%W0;X sn½c#=nQSl t"ֲ#w;r;zM {W$=́.ph[4H1>:zy$4)1Ca`Mlu(ƖHɑО`T#uz*+vG92o'I%E4UT۲Oa7UA7 (j>M 4X𿩭ڛjeAٵ^34ypU:8 7F84gݽwg3pm`k-S HDHl5STҼ-;dcz| o (scӮhL<<\&ivvCմEID-MhprHxcvFs)M p]48p$rYS/Yam{~.Fo0_٥ܖR"]xbc^@u{m, sΗ<1K;0, }a@/|%1zfH,vQ6 (v'?hWz$ RjM_M:C PZc+ڬҺl'բV;z/ d֕xpH_jaֵN1ڌD. J@4lcy?j%ݰm[1=7O&dx_̜F>"Oj:!@)* S *B=;yw@4gU q y*(>1u~{Ehg7=Xqnj0ߠRKo&亱!m:FlZ6S?fM~x</hHa zpdz#: 7iXn{;6S:Fo3>u:= ]]LOV["i4CMrF ~GA+XYܥ)P. 4T^pbH.\{ʗ ,. E6ʋ:{a[Ӥ/qWltۍf_4 4! ijkq2FRJ؞SWb8< ;>Q;㰓od뚺 }^Mu"JP,bsOcu#ESUϽj #RooK2sgx}mڌ>^"DbH!u_n_ xlZ!D%mi5M)4vM_ۻv7g^o1Ďu6.wy/ėRZoii` hHBE~hj&OV@ ?%< PUe4vx#h5>5E2fѰ u/z躽4Hqd]<[qz{ssi{uMOueb4`HgtwV8=z p,1G~nGz=g>趟1znݶ4 Mۈ.<y. LCA[SG2ÿ^+vȸ{. I! _I+!B dh $$m|v 1  -#4>+=n5 9!(PْHQԒA6 _B PױhU{pϳ;v*x {>wŸݖU{ AB<@!H i$]$6ؐ}G>W8/AuER'4h=L}*'+a^Fp(-,?dT>2EF 3}WYxuLAմh#d!p(' !+H M2THlXBٲIB,$U A`B @d' Y!d!!F϶`A): hBұ#%^. |=66!3)M@!C=TN+EgA;jyZ^fـܟh)npm'4%[qz=Y'[͓+ @K}gǓd|]k n}%*>=IlfA*Ug*Q"[0=]7)~BhFv|_> ,p 74a*K~kcPD ƙs"}΋[=~[& [zJ8/ fY%oPȕr^-K1iRr6"nL@I+IbwVXm+.d`ۂ'P,rd2CrE_ӯiڎK"1(wܞB%헣 V*lы8 #tGqbuekɯ4ZǵR8fgFۻhm0_¹h~3w V5g{;gxg-*6:) 1v1g&1eo]&ʸ5>H(R8>v#s&IpԐ4(I)1-)ӎXc}56p2~-~.:A d= *NVNM/\6Pוu ndfNw%L=Ukb^n>ij+HXZ߅v\ERc O"|#b P[gᴋE Z4H݅Q3y_a(OwnKˆIߌ#:_wG r&["CjC;0,d, r˽4tJGi}.{!P%`+Z 3//&p}9_? 8-aDz8(xW-h1Xe KN! 0X{A86a̔,VhjKKԡNBVԀ&Lc힉VjET9`.فmb-zOqd+`a=D`%g*;.I5p.7lW۶FQCc$cw1SV(25 oȁ&wB HӁ3^* 3URcyRli͍iSe^Zy` &g˝ږk~6mF\:{S=yz57CnPHQ ipM(X9+D.:k)8ѣda[ h )|6Oι. (& ."qP_4os9.d0uF#dd8cYt9@x2RvW*fuh?B̺ʮݾm LmQE&A`X.AiKG#s-\jZE^%$3)t-؇qM\17erb&|iѰ >HX8\J1bv]a^Q͎IkvMyMRXqKm/e܁;JGG?4C |- M(i/.2q~$7;w5Gvڸ9neܷ +Vm.a|$]k)>Cl;w1[Mm6h7 #Xk·nn֘VT(-x|%f^g5lZ=fOmp<v99 #8ul/9 [E:!y}tk3+W0^ͫw!^f%Mxڳ) z{^Ǚ4n]|6}Ɗ់k+g%PKzw7|f.Ķ7cbՀMǽsVj-ĚgrujY7eYylGvh xO~x8;ZizHcR>+1h|:¤ J܅9ȵ+/8Q oi]},3s @Bk u5_BC(C 47qOC@ݔяuiqN\U$ '42crQ+/Unsm Rڹ1\̈́VotnrV؃ #+5z0!YW\^<1߬p5#xEcqښpf6paowcWymmnq+cx `5`o$ٓ%(5N-ѢJJ&[rߞ=J|VVg9,.&xV8e ZjmKFv\PlЎ#us O7pql/KYx My/N%a{m؇H>YGD]ciUΣš{ݎOly)д5uYbwzF+voÝWK9㳛85oi;9ղLjiU= >=nE}f`GUbs̬Phcqv4F 9_+ҷi@[p>?'cX][؋-xdQӯO:J=gqcғd5eDĻ5/=klUm`ܛC=%^ÇCU{5_jg ۻh'"+'i0 8kp2BuQ(a[-44jZCoT4䲷ʹ4)ݒI(J.B1@+OjPS|uDe(;WA)>64ZH}n{.7ծpTRq4}k1\]S<|~6翵ٌrC! "e0TO{_}?͕UTLQ~P/)J!B5'?U>PS(d"MarQ=˜#ε8ݳvmOq&Õa5Q20(h wAl?&~{j\0-hq C|f2IA`C  $&$޲H`H7`IXE9tĐ!K 4#4I&Ē7b_@I$t~@2[^0iuCźf$ws{#tiӥ eq#8>KV ;DA(p\(n7F++)@ikU8p ym+.EK u^$'/p(o} I\)0R)/woz+Y6SC; WvQmզ{ 0 Er Dld$ tQ E]2 \y`юɐRo]ƵMܠaf-ߴHѐocOB63~zڠBG %Qz<*( nUm^?K l)b(TtHy/KI\q'/uS/ye0I{h, ÄzWdz0F6b{cXqhQ@  *i8b "[@fjatD1+2~۵]_'Կz H[)5q[2StmϽoV&X>"_,ƤO'H):؀܁,OtƫsQ[]g(;בq}ָ9[!I#T~5D$麡7ct(#*O=vCFL];Yw^hAśkF(%fJ(fz_:z>OKG%YaŎWgAځ jlƓlw^K*߹l̾spѨ$rO{և^$`Nxm64!Q[L<~g3dCљԿk!kZ`GsGzN)|H?:l%L8Ee4f76rDqMĪ\hx×ee>qnVI;xI*/sDD &kWOG&[ û D"rm\0ʦ)uy!җSm 53uc i,E#>]Td  B) ذ[!dOlFZ6YjPlCc[6⸈j58 SCLlELWO#Hw"ձޫj3dak6GFcJŮP-S7T}zq $`C(F6FKcjz*)m;YE z]Ƒjk&!\I,-Z˷-8Ȉ'e.+|7pM!{ 67Sb&8"[[)>s)VVa B@e_y2h"b$)P!SjykWv+YDrc{G7u3ֆyid*{}V j@FKך/oߦ㖣ڌ&Z֥o'f}$֪9^=i:|*_;]~i)>oS4T$C %'7S叡V+CMvΩ\/N!r$[*&ȕwJg}Suo#ikn#!YI@իhJQgS0D{~jCfu/S\ڳ;bVm$ o]d4;g鶲aQ=f[QT6m$zH'<,3 X~ƳME&LvLI󩤇!1 iKHrL;HOF\a1zjF'6u 'Aمb]QS5TCgdʧo[~o8BR "JP?*~Y]O+ŭS?e8pwv6*VЖA0DD#HAl-;$wS)Sӧ@~(+/?E_n ruHBxrsnοʩruk.Ijrd8BXTWH|lB$QdH|6i iAd$'D!"Kih@Vla IuBc 6@ T$CԴ +1D$8I$ /n*7Ź=U\}kƭꝩǶx'l  )+VgzW4?5[XWz|a\r7Zfm{yETfvXn9F}؄SdV%KKdULIQY>/ۦ?SqJuZhA_=[ar3F?e̲#Bfů2tmEҞ@NJZ$ 7"W05'VȜphk"0 4߽{ym؋HvUc;"3 NUz`ތצ5rQ'1W12]M[}-w56^8*sOWdyȀ DC0%~\SqLؾk_{ "_ǻ ~rj:u<:zb,KdnuC{OU_aۆfTiH1؊(i2iRgZ# w d wAi gߕ |Bf5ʉ>B:xf̐g&W_?ew;m UlZ ̕q Cdlۭ6OEa0p8]$Gs˗Aמ0愃݆|Z ] $ϊ#UW!)&ڃSݖbYH].EH4Ӎu9{'rT7 s+1X2Hs;J+Ǒ|-MC9U8 I|}>^TAסBX8XpCђ˲ "CHD|]g Xf "ͧ6iDH DmtljD ~JMIl g DܳJ=m4!^w[h}'FܜM:&c0dƢ1,~jhk+S8.}nb1@:[* 4r'鋈9/2#gjHq$BbilܝRmPT"7"Rǡڜ=ݰ+muV6YtfcTBB>%.4նZ븫ZSksdrCTVWm >*F2~nߗrao|;D}A\y=%;[Fm^VE!kj¨ qٲx]y$Dk At߹U{ɶx*@x g C-ykguwn5^ёg}Ϻ']e-Ve/4[xk\ems+g7O?5~%znbū^~<dc;iض[H}7ϋ&7 A@ E @Y"C@AFBʇuAZU}l:' hޒ֌=D7;~/|*8WxtE6;bqwطa D6FJn:W?;a"%꾃r% O'n|E3eŎgމuOE@BȀ 9&eO ?JYmr:8z'/RŕƐFv *Hht:`O>]<r  ۵'d#px1ảU霼1b/T&l4(؟P6 Y 740;y\f=#5wp5伥0y 1EA[0ѫ8|"T(2]>on4q13ZG[JXQjUe /yC4mtDD"rT!_'Goc *k1QEBqƒ "Њ1.&YKZ԰?^vZZȓ,+ǺY*EYzL$iAZmUe{:+H職%۩QSiJOtҽЦ- iE*1=HrlucBӒXj=;. {da1S{9a:'ִ UpޔShE 5aw SĪ>s4j n4nR5_2sVDZ9'Sy"i=[ j{9P+ 2[kQGk+R P@ hbrH=#âvKX̺4f4}q9iNRDR^iMtQVvkKRˮ6 vħys⹣xHӌ `]HVx!ZD \HCP۲ U ,-AHM+WČ!pncRYMfNފlvp6Cg+,H6f z}QB1aka##PpQ~5Tav7V`abܷF"Ev᪉;\*$PSz8xܞ$=|{zsJ (+nW2f8&V͵(n =⥤߭a- Лl}7nI݄"5yˁ8uu'JN1?%2VvgoI&'e^ pX`'Zײ!` "YfoͬhRAzjw}Xli:gf[A ? 뎒B@5J-hhQйrm>''h׵c7s*9$TP/Pr72;YHݭ1h͟+Ȅ[UdK D VRW;[>U ^^c=1Aя6S i;T{ /jx=.Jj {*^-~G v8d I@vky'srT /zuJ]cyrAJig24Mk\l:$#,,Nlh2JL`Q&wU[- X_R`@)$wF\73c562,GO@=pf $V1%ô% n$#wxET IDx]q~Zej ܺu!:;"Iew$HDňXVʦȉHY 8 Di1M[m6x2ME-` Iɴ5l%r^ZJ 7FűEj^Vp8Q($]4 4NkB"vU-1=e3~\NN>kinYr Xܪvժi,XՏE=nX6p 0d Y2G'=J\}jx55d~aYtmbL _R4W` K\'=<{]gSؓV\ Ge+-WE5>=ani1C=)sajXAg,<\ lwz]I«WFdP!G=}!abBWe 2;Cg>1|o~ɩ1S e,G)HQ$)oq!C61 $r/2G+x+JݼQ|*/+w/ cUr5`i7;X?:rKC@)!a جqOTZc`y*7}5'oQٖ–O{fZtH@,X?`CI>K'x@ddLB@d"P % !1BV8Wۿ9C(MY#5Bhἃ" O}q9;!k(V.\$i(ĄHQJjB@ 0$zCmd4'BԄ Q!'`BB, d%~" $ܬ6I$Ik$|F$BE! D#ߠ~"ҬaD:̶/łl #E<*`b2W #=#OCuZpF6pc0>5'(cD7Tv%jhed-xD|grwIto1dpAb4m֧.Ƭߓi nNΡ jjmqwt+~yO-aCL E {){x|ņ4 }!eӣE ȒI^eC^6 2OXHK9d}M:HNg5.Jp~lҰ+]tj(LhSpeOQ/"QxgbO#56䷷ci򜏒Ql|57_wb]#Peq}w^$JqZsoFJ?Mf;Y hiyw{ɇoJM`jS -'@Fٵrh9~ZOd.mFz> iOtЇԦb]~2|xW~? MTA=fu6b-on!Q6r鉼vgFɋq6җ(b?`6z1x^(d/!m1'dPBJGbOp ^Vo>\e֋ Ǥe">gQAcƔGO:3OGG 0i}>xQ85OńN˨0$pQ,MYc|\)QCFYӰy{O­eA"HR?̍`ģ9o-YGqF3!BFߤ'aH" UI+C~1vafo6AXό;QhR=Fp Rtx6eǻr Vpg-D z'7J2Ckp]beN8#V yx6#Rb,vD8BM 'Bi"zj Hh2bF})~چ=:V}rCJBmAqϊPŹk~LAo [p&OiVЊn?&fO hIԤ``y .b~~B'ݷ.dPM9 ;i接|S ~ڲ2GLM0%G9&WM--L TOAz|dWe>Dc8ViMyPhtq(4/#+%饻mnM ƵnƞF,i$Є8rPHC"iDv*JI!$ e$C41 v:<^m.)D he_hD.693kJ[*'iNo*B@L ,BT=ԱE&rHi Hn3fC ~Q@d۞ 98SFi3 %ޡۥ{NWnH M~}=.q}VdbRqԂuܵvU?3|^bKd>27V[hrpέXm7묛hm02ij6l8hFUQsy\|^?A[ E K[Ҧ$P%EqU d㌞FqV K*IpɗIZ:wI j,w[vRG} A\Xms@S!uGjA?cu咏#GCiڸǟpy K~ewprJ,9!DBJ6¢@2my~Or1GnSm7zhǵ#I)Bp1av;꜓t7z$T_LxoLHr`T d9P٦ ,vMߙI{z:QgN|枫؛ $/b$C3 VJ5q50 'v)Dek CƔyd=e>{6 Eq1c*[j4kd齣*]\YOl* tДXYہgc=NKY%ow($ֱcqāoV@bX:A. ݫ]}orv74 D֊(b{ 5rcx&-P 6}V`18H>8=TU||IfT 8) t +{j"C͊* XUf(O?%θʏ' vKqFwV"kHD2HiyP7y6ٸ<Ў=diQz1NB;S+"7~0@zvurn"* e":!{J4Vm`U8b_G<*S s Oc dJՔ*-GPp{J2uN氂(Pxkrf21Bv@Xp y:\x+FY1]XHuXSNQeE 6"E w29 }Ǐ۽P S>+N2X"*YNΤCl V?ꝣN`M0tB5 x`p8:BF;Y;qQa(  )"R~tU [E|LP8$c DŽT-v>_i N|?_+ hiqUϛ2$" -E=joDkA"Y&mKL:{Eҕ-h$ -bˤsWD;ee$M%Ft't7 H` 뒱3sC ֜'?:$,G^IWkXCvnvSUɈ$I#ZbfnE4r[8Ah$i1"k}҅i9BH&Mv,8G7Aw=|;P&I)&*l<;Gߑ. ~]vx`Ã_/?[@TuZTqvG'W;uRH۝rd5%Iהi35X0*F&-#Bt*)]Q\ʭ]I Z's$ObĔnJ8eZRScr5lB"I֖N̲$x#RsYϿuPcv?Ȯn6N2]T-Quʼսk-q7zօ;gQICQEǷ 2CQ5q$v:c+/I"-p%^>'!~(6j%aK۔{8캻mӏJ5Nv[Kd][ScDPȮbP,lYVk}Aٱ6F;c2 cm)3Ս',P kgq X@\v(^#V&z/sV,A:ѿ5*=[1zCoY VҴ@'7Ȯ@O?EZ%դ᭝=2W!?զݚ6+lg*~Bmձn/˩b}Mvi]cO|ߔA_$g 0qŎƭW`7$&o U[&ȫo:~pP<,qNW5vmB;Aeeb,&!zqNJnsP7~Q? AgΝZ{-~,q_Mۮ6n+͏Сj`"<č=\cx\Tgq1a;ܛӕ4F&Lՙ`>~[i>zڄ #HDpȟ|1Kt1SS4 0CY39̝vl듻E|VuЕRs\e 65tШh ,0d"H(<ڞsM;kgSC*Ŗa2`>TSXJ] j=]n1NS#84-ܶ](R;̓?KG>`YezL&V?-U;޷/p+T*1؂bc $@fLa8?Gt;ZdǙ3O6p“R%\+%^RQeG Mqw;DU%+2 PGWJ~gdC%\NSNFjHØEwwKrr?t s[1`#!(lLʳm]ʖ@cej|Z0}={!P0g<  ž3I i9jm7K% K?=-lƖS2rSNS"׫cr?Rc~_mV!$Fу3seP 9^&x?  *,@R)@PP#Q,$A:bFTBBh)4"0 ]v":hRF0 !jv æG1K jbL"B|;Tcr$O|8>_dzOO"Lc(!2 !c Tc9BcdV^=u6Ih6n~ 2 :)uuXs&ݥE""UA8 z* 6]όeBjȄQ8vd4QO/g{X[Y] "WtkruJ YTk5*E~ l 0!\T%6sJaz4kw>4,60MF~@F$A Z|ѵR<ux!t@c8{;gKUz46*C̀ʑ݇#)hČ'L$|ocؗ{M5!_) x5ul/ul\cCWvYS(ʫ$Ѷ_O+5SM17pT_|)eJ{ٚkZ‰dư;V\Z+njcKi,=7o&&JmV= +$JֹYJ< W&V%<. klgZFZ4ɳkɓvUS6ЕnM7 cg]`BI#4\.4oY\!:nܣ~% ޿t}Όx& ם98i $7)Dp˼_SB$;bԂ׷6D`\U{\jq2 ngI`9}ϕ7q:i\%[m1 *us?j쟻څ5QRi7wOfHZS2lu}\nD@,c ^nܒB{^ڐ I?)IOͲ0K.!H>Ր ;P*z!qM%URb& i8%OgY~Mw&[$`xG4wkVX˷TjN HaHHXBk $1EY>$!ICl!HbipM?!<% "~:T:u RT G9Ǩ+ꇟwZK4BRLk5Gl_O1?4w8,w͜{=ѵIVРO;. PJ+j(oWc|^1Ò?׏hH|ɍLHyc? (Ee5 " ]+?.K|1`/x0W; EBiY;~I=&NIQ}tG#$Z a$-[6c:/Z eSڒN>ɞBZR6}7c}OO\*͞oPҿ4T,T*hq-Cޙb@W,:7x:kykF]onKyDz8N@lQaX5LQqFN=JdƏNrt|[_"_P*fvë :bd`Ê|0r$<,TRAQ{ZVdrc/4'7w>a jJ)+asVb$Cn8ql3΁ޑR}+CNViXSjdᙿiDaq'Vf[sBDCקA]E58-=9c֓.E1ʅ)VTd *0f0ű8.Ea$PL!m0kbq>&W1" .2NaBXxϯm{ ߝ[}4ΘY-iIr&MpǾo(PX8 bis纷 yY+'x RS;/QG 20*P C<]fJ%t4Tͳ@ӸoޚD\AZfS;1 24a)J nnrmkl1aHm,0m$]5M5ܢ-%pNHnt=KS̔iiiR.riև.ŭjz0QQf@Fn?/Lbp311Rrh tGbFws lk1/^ݺzޡl̈;v(̌Wr9gM6.={9#ԙ֐!d4B8M&eʛ{zz<546L v6ٹhP!U;*c!U~////Jx^J|a⮊!"):&Ҁw PiETezk3>TmUdMTvn˔M UAKLL¿:.9i-Az˭ .3H@ -#@4xiRP–{vcneh\ ud TmɍGD%FfLR'AxGǘh>^T0z>=2бiI꫉hrg8sQpޤkXY* T9pHeAW1[XpTZiC'F3ݜaFMe{J܀׼666FsўUz3R"ʠ_WXot}8ṓ(I1.HAqf$8 NWwl>=[B$B:q?L$iA1 8/[f*7eegr˫r ;ؐR49}fDTnp^Y3*ؙsporpJޔ5)队3Q agF)`P9i D#:̄R E@;$Y I$?yIy%i ڕID>èh _}7'ae?)_щ0-=wa'F!$L BC$ Y"R! N'FLV1dH BӲ)ۑAm B@yp99f cB=3w}ܠ'x0!r(u=kU`p!y#:w5M( d#3ҁ%^D gJڣ+EJ"*OeQ6iT^tj|h.JѥyE=iϦegb_[dod_sz6jfǦH=@s:稊 ݣ\zuZO?YO pCik32”19te4X?iX?8Asdk3=lm"^ɰlLz]nR=^}a"NKB3PTPZ>tj]G@ vs\NUIPU  V;VhamAW D+_\DB$Nx[*fN>Dy>EcMbw5p@kh[ E6Qq-Xٵ^806$ M#3aIdr'\,3Qfϟՠ1G0DI'T&\XV*x"H0AŠoI#:HA81 iqevG: Y'SoW⪀JmbP}Ht8krӴ|>Rf&0`^{]s9'}R7mu ;h6c.hf﹝ˢUDoKR7O! nU|B<7nSq["{9 _ = ܎#쏥XpOV>KLd_pmc ߋMi$.7-wVu̴r?o}u-g (%g B:b9>@H4!1;r׍[LFƹXc:αrKmPMΡ|(V춟Mp*1eE~3y2U Z.d]Q˩jl"d-I)ejRڑNG`A6Gxxo[ gmxQ΀i( OR F>/m$'ײCp 8@I1&BVOYddJ !-`~׸|},򣟾I6V|[CS>hm0ysSaE;iJ{љ@.$=U)4$hK޲/z9d\`D/*omv\l|^=@S޳ Dtϕ㪙w?> 5A~J>[ΐt@@BNI0d8LdƤxlD,%}1W~[p6$5[#<&âr>;i.u.n;+͆A~(I@/Y$>C;ud Pa74KnKLGMq h_/=?z#i ̶(hAf%38yAIkz(/.'8 i[ˣP0z~ uQ6A/C4#vZo훞ijJV!5L4x֬3DP< k}o=/Ks=gaG̉=qa 7W\EޓƑ|fc>+߇4;>&4Č }-Blc~@-Vaxc')È:pl~A+ʓA;:HKw CKeGI^ΰ"xz1ݪo;c`ʸ^9,Ȥ# c_8Rczsb`77p|jY[ *TTQeg~>յ,?L%qQuw5ze{( j>ΙCn=M#6&>K^Nۧ:w(?Gm>) Ire"ؖHԄIҳzVLh19GHбkj4ZȥǪf Sњ`C;`}9F})]Jv<* $HGo!"HAv(dƽ3,(G\-EqaE^qc+:"H% !7Gv: qs{#>RU(t,эQEZeKBwH(B82 "]ēʮdO[ z֧u* Wn[>q-"M DN^iyoS@kߝwXn H`~< qAH+"4שĤx D/l?Moy2<~@͒(&3Dlh0 \doݍ A.yKl2!rk$"As}~Jˣ> ;YQͬ%"|&!pVubNőφi!︮0v-gKG|Ð%O{n;Ѵi=p}p-_)[:-!>GD>v p[_G@moW-paA0pdV7`-p4% n4{$Ns3{3wS6uMGӬŸNO7_Fp3{vEsQ3(~Nl8>LD%.Oe a1tދ$_h_Fh迬.dR%[`k_~7*Egċ5^a+=.u;ϫPYcJ:zBRM[DJt'O5)?!_fjf'Ujf;5HE|eqE}\J(bPYHҁCx_yÏK~jy":~3:X{{^~;a{̝TdLN=_ek'xކ=ŵ Lh2ydXH^DPS ˒So(~\ ͵i&y2;$>7݇f MT5Gh'`RE!}Pn6~h2,ZpP[hT!dl}i(CYof_G_WN! ~ˠ yjUke$]&oiZ }3/5|6S*ǩ?oǥ<|H~q˓}!/7AAi! dTV} Y_ H@ H|MGvl[4RFh-FCh0h/_O|OڎK&3xH>qZZ@͸]Jd3GqLz2xg/'qgb$Xu2#V4K2Vt#8lOOG˝ ^dQ-)8T6"}VʍNId T?}V0<){@+Q^U~[tǃq<=~5{t8&(t! cpܝ[PP2.9͖3'I~u7Er_Z_ipe#!09&D{YdCI-O!HuB;M4BP݃9" y9rh6RL\Tis 2+H GܠG'xB(Ca=8I/' a0଄1 ? $j^M62"4GWTRj.'T\ii,Л9$:sd"`{t?Ύ&܏Ȕ4B e۶@_y/cݵʏzTBzBRߞQU[ΜbtKpr?:P=kHj:TF bnLCZ*Do<3Sy{ ~Ii3">x |^SVP=U )kKwkզ82JQ)%bml?꾧m-߅Q-I^k sLDMk0fD$D3G*%3vߏmbX?n{dM!M r`c?Y 5J[Xĕ'kݏPGw2FHh1v}PzOɝs~uֽwתR@}OiJ /,< PMB}ղʔI3Zf)$eKr&ֲS୅mo 5YSLx3H>#]xx>vWqwÄ`͋RQT &kp  v%MjyƑ~.y}y s)Hs81?>IaF, |\?Jtc&r͟>#e-8ەQw>/`L!wS!I)ޟ~퐙R~; J!dGil99H=nd<6~/;_Vę(O ST$,j 0$E BI OP? Wr̈́u0{~52I6 בy1M6ics_G8Mw%ʻoT{~І~UyoOXc {ci҆UV@>['!O Q\URۭHC4^ #,ayrQ /ekS2M!G.&[Ŵ;b) EmX<˟6ܵ8'Ҥ=75df9=\Gj=@[u%#~M7=@Zrdf#Ƒ8}K"8؀jM3ks:+-mcy\8檲D8,$)4h՟_MG8w&h 7%&$3ww1p~#}eŅ_9rt*H;KrrX?7{XiM`ǞN6|o:l5ߚ/Egc:,S?@|UTD<_~a*U$۾XULօڼ*X 2IIHpƢ{]L3@ 8 q|UOc9e x$;*ni XI1~`I` I{x>U.ɁQ!)Y6ZOQmomp)ɣ&0aalsbylW g٩, JwiSYwi9C%d,ys/xSwtXn7IY@]܂≮*i@ΰ1.6T-^}8FSgķ-X9jlJ eq/:f&0cjB@;݆Eyad{bSٶiJP _ABnj|5x^n妞!Y8X |m&ܿ/NXgķ+[p&ڣ zn:3z4ޗh\0Ggqt09 KX\gK5-0'Fw_W}5f!@eu|42>_Ik9!|@<8t6Bc N͵;ԛ"rnNp=V󬙶]駢Ŋ{ XdO ݘvlUc* d ȠٕJƱM*MVΏT4!IXzIFJXbT%)_txۻ 9JNWzVdkŪZ7ݔYw^[) x F~}( !Xb]܂dR4O@& M0.O>|wQˏaǔDDS1|@@S3]/0̡S/GGdhR2F xO~J}-$˚(m d?fъ + s4?w<5? |vۢZ04PY{'7#1eH HtDX`oVLh'7Ѩi v;=h2c UK}rO7co*X!UvԒ'/:P%(\@QD7P(vD)0.|Ӄ?'^~/-uKoE*t8x8sF 6e[:^._QSO9RKj Mj;N(g/RH/F }x6Nj6];p!W]oj'TxZ'\X}x]Z4}Pg}pX)EC~G0`Yjſ4PoNgmTR9 ȝd0 X96>/A N*,UX$e %ydCD6+ahBp7ʣw1ЋB6oFYQ[3k"fk=< *$tpY*sEmڴv|'S3^ #.$o&e"PxM4~IHҏN4sG{~_AG%Vؔ0'OmZK1/ŁO*5FvUn00@@mTÑgD͝03Xnkn{ ?IeX/btᘏH0GZGȋP@KGs)kgK3*̳1OgӞ ` &:Yt30dc@PÊMB7uS5.ߵ}]׹>MGri\&LƲq`Ȁ(yIr#jݐ,q,'jVB9(aA9} vCoow aЧ},RO5Y I.Ǘ:b>Ő5d-{~?8u#(Kߋaf_ټ)29!crlǦZAreSB:D\J !Lf׀R'^_Þ_]T_}lOJ.~U_5>v|ʅFl oĜW,rvRقBsI1! @ǷiAaӣQD\DBV8rAEm+>{]&*KCHA\)) \^uŞo5W畲=D|ZIdgWOclIV1 ޛ3ķ|^N^ٝ„:ePa"i1_|?vkTP0KMQmqE۝|5jkov:ގuG[ 9}1J ~I$7Q6|upO˲7ZzNI21yيجsy2G'M]nj2^ZгEtQ(Iu=n[U?m5 3%Uu際^ qǚAw]{|ht>EpL^4|I! 䴎 ˵&(w`9lfP;C9(T|~u_̮_6jݦF\Y$0'nV ~G}vl6m蔘6R )@O?uz|}/?(6̎T3,A~2'PII"]䪙cTws5e+Ho[Vw.y}ݯJ^WsU`G *i}.S6kz[$C-Vɑ!}aJUgj/?aCp̡#qy~8aSoX@'Clw2SW?o?w__NVj t9 ADHmtpdԉ\?>}C}9뇕fT5ZͧGqj (wZ(i!deϙeOt6{HP?!Km|vPU|oMѿE]jFtSnNHl|%E$' i=Y\`鰓|r$=\i' C9?e勏v,,D6)S-5Jq1Qs**`BCVM/ڬt{0 ,K}r(")$N.'t|cyOvW/ziі<5ڽ-1=p:y}-0b"ʚ'hܨP$<G6g7~W8~x(e.*ףb :\N IYW}Gqm\^i Xdr{Jskڱ`0co6󵡒_8 ʲi^:(O^{Sig̦-ty1}:Y}^hط . dOt0a=OKdbZomxG2e̟ΊܤUt}x(@L.Inw']PHYSb @v@q,fFLG ~^޹ k$3|w"A N"чϡv曭,gTu==X dI}(4f5Sq!Cɀ˳7TQ% m?ͦC G~SEw{qg,{lNξҰ\XtIQKo- GTDZO_10+M [^/ڝ̫b}4boD_#,鮢#^2k psHJI<']_2BϏirj|o@ީVvf4̏9aŀM?5CV#%'8nԋr!0DtiØ{t܎ޗY4[e ̾3{^{M{?wf 8kSwS$UUkC?iRdjfG3|e";H_ᰗ-wO(sX+>T_NG_ȩă.bP{s EjD)eA9&8zf\_f̓hK.?-n<8glٓi5Se?eH _}n3Pu輇Dŀ#CbI"jN}+r\|<&i\Eﭕ"#5 AXC'zU~ܮ߳ZĿöVwO~<uSUz5!7! q(d $@z4|(?\.>p_ГwKLX J X$ m1*!] K?y]bIVa.#a< 4"K[ۻ.`B n(oPfHHLIWOnNwkgLWNêjdE-Ўf,WխyW,J:?C=v8IHi"oIgHg֣9X:a\IVKb"֤Xr(+Z\$ ]sNOi!_S9ڽaAML98^IaGʯ0c\(.FOn?GkE$FJM&h-$\ 01T ~q J5ĝ>?P?+=ߣOxkio#JC19zY)} !DG2kkA>ll.7VL(#f8Sމ?=,gD8;%2;L~cPT V+PoG<$Yʟ 8^6.奓ju@V蘸0!<oY/G[ oT&MT!(Q \:>k{ҏtMWfm)cgHcڦ;>1H I{8a[{Nr>g<Y/|nW1UGI}Vw7M.]YD1ra$jfG!vwt_/=\͋qTܦ 4If)dȎ 3.Jm=$ZO> 3PI u>=QL%,(+Z&x BK^Y}>[UPBgtfcfvRS8}8t%ĦDhV!CG߸n\LLxPg32ldGeI#Ӹ2ѳ>ES0Q%=UR]uo_:qO$MBce$.-%sgI$D1ayE GQ&72t&L`Gp8mjR<'j_ʸ / \ ƪ~PBJd0'4x†7fv_ӕ+_1+cFBh@ )]fu|'شfÀ44O3s}]ؑ\؟rjk25qYmO%Wt\Mn!}!ܶnKdȵbnPꔷ_ƍ >JK_C?b^5ZkeqIUN$_.?SuM} \L%}O]yK h9kfbguntq:U6Χd&AyA /Ni7Z?@sh9Y6RRѲU:k c1ݼV\,]b"Gf%f;Fp1oLO#~\oy`?]5qqDg[1mqRjK/ zu[zNHQ\jeBvSmwjv s`c|+ 4I GYa#H9b> 긯=nelv3CVVH4HCUCX0]fA(!n j*|TiPc(Є|'Uy6V{nÂRlT8TPLx%~ɱx *1K^Fr9A$r,X5s2q%j#}UT^ >/y vq= v0ƴ@):<aAyD‰3]Նh9 "sQB 1$fL!Eؒ~D$%Dd1}z6v2 k"k8 ;clM!lOS٤s}ޓeS2;島_R uO/C}|y7g1d2f8Nweqm Y4odk[iB$~٘{xmkd WO>~ T2)R&|HXDd 0 E6j HID>.V+ ?O`XE[ͮ0/lNOzc8\DIMxtOXcXΰ fPзx?㹷T! }۱jx#{ڹt-Y0B! lx~6 e L{FC}o%UdxIe}.S>*K0vFLIi1$je*hOL$}| *-$QYf | fc("yL-*!(G{gUg ȾTЂjz? :$+ez:RH S f:eҞ)8:jʋ&O?kB?}S"kx|뼂O%:\wXev9],|s_VZnWc PERllI(ⵣ&N~pLɄ 6Czݼ%}rnHri$1T)#Oٷ@}绺hnCq#(tft%:16DUReޢ$X|ϯϽ7z+qN d4,ה=d#JAuRIfa%AfGke@uֻdS+n7>RQv9|{1R?#@#D+.aJ6H GJ'b5|yi09CO=eVo=]? jeE*չلhѝ4şV~~e>as7-|"hKymY˕X%M0S2(Vr#gOӣNOYh>^jR3 AOA,D*EԷ7 y3_S7\Zu{[ p֭H>g"8",4VS-w v7g)"ĺþ{_3o#J9v_"Z晘b_{^sbT.ɞ#غG~+VbG.hsCɲ3C)L(J$ޛKywZ {:x 4lv]Rٿ Fi}?ѵU-P۰\ 4QƺM|gt)t= ;d?Ch /Ш3t?$y}3h]MИQ( Iןe( k(RL||Hvш^;*bW]uJ7߅]"sVĬ軵]j@TZb' QkQ\vq#E%E.GYd)I$4HWQ/MwHQ\x}Ёh׾`?s&24|1F'GT6ӛZxp/˻Qq|^r w?rf<;+6ʺqA??x4_]@3?e%:Y~fF3O3 w L~Cds\ċX 6A6/AsWίYͰO f0污tWO|秥IpA &:MlY"ilX_NeCO?c&yLIj%,}ѷсdC)$v(6D;I$2 ޞvGfn))kwJ;r˝]!}Ӟowg1քyypS mfw۩߰ u!NR C2g)~_rGKssũt^WK28:z^XWKZڳV>= HE3(rtΖ6k~9OovN*pVmύJ`c!PPZڅu=aί98Jް0) 9 r5m)tZ$N"0=_|W o)vobQܖ8\ٹG'Jɛ9Uo`֦}H~hcG_UBB@Mv-8|uU$G-gH=58r`|hOysgd⽨8Q$0 "j"m^0 7\H!@0&|ь'/c86`Qw_SbueVV.Um`@aA~Bm h4R%̨~Br|73C?yMGz`S+3?fY5u|))~;Zc 委=QF|F0?L?{/玅EAu3.Oc9h~[F:F~ra)BKHrȼ8s֜FRpR&L3eko'D1{eQ 1M%C?gK(stsH,X]\hpI`b&JIǹV{{?uR>z7wAf-.t`q d.euMyM CZϚ xg 76Dz?1h:iƉH:GKe 2$L}L1CfTf}OAN2g]0ԥ\Z:&CS UT۴IQ> (x%'D"&GƉ*sz]g귙OqsbV39Nq@eL`*HuHG6r{VrMާPB$Qgq > HRDumA,BpS >oq6^6ko hg5x¤^T}"'s yqljkYCwʬ܇C 0^GYb?>쵒#:/}FSDZĕjN)&h@>-3xԬCG /ʹU-j__.V1kXJ[`XW!w0vtޘihg 6 ʎ)S[kGHݢΞ?c UG ,Ӎ^C﨩ܠ-.4YsM>/PcJ6 a <'l4v41h 0|^T$&nwҵi_u\61u֛u+TNYj򟾩h\=뎋'ISbœk>hx,ªs}ס/>˹~b 8ͱnMǴv}*­}*-&:zyo>ݷ31U~SKy(CȂ>N"$G܉Gɔ GTuQR}~hĥt&7MGLÓ^ғI4x^P>R5Z{K{K**1䕤 Үoy-#j]Щp4Zg$m_,=?7ޢ1G/o/zǥ(M9on@ R?XL; ys["9Z\8^$څgN7wZa"SJ& 1W9E'*XXpؔEfٞ rr&?4k{-Mdy?!H͂'mTy'R?C'~~m˘ZJ:Z&ܳY>̠PƄq_pJD@L.H fRP%&ǽ*{9a#Us/\n-vI/)0&pF! P@[szXhT *EJfSxFH$q {xrj_r?ZӢSD:+e#tw^O{o (kw{?F(K*ky`wF;0Bt6ì(]#tWCfy 4X~w- x+Jfۦ'X#~R;vV9*\e,R%exV2AKfǟb8(mt>s{vc]^TEM3/܌ܶc{6{ pᒒmزk{=/sA"L0ۦg i ꜢhU3 ;%xR`f(}6:$ة/~b#S21# pv~#ΦlWOsx>S*k|=7~c:C=ojf3;I6D@>#Ru|trԘJ@r}hD04b% t4>w/Crӱ@-܆=ZVOwA?y?q yڎYV@^72?_M~뗎s?Rx2u]^_HՆZ ZL6Y+=\ Zo jDEqz?674*Ĉ?_%qrb׃T D Mj$DurP|OC{4=|`SIP,EIL A Ň7E$McVi s?v""u ȱWOW?L>y|̌FxH7Ǖ|LeBߋH (>?8H-}]¼ &EER  7mBT2r'/d,{ !;\r%H"|i-B_xDI0j4@CLu!D(+M>2c)Քw_iؖ/,w}>) /qKt{Qv(L"2@Jv @:3+yFmkNDLPq9q1BBiMAad9+k/yL}}LckǂڙALGg;_YWu^8'0R%WK%TJDоc^p897盞'vt&hMv{RyO`d&ȉYf$kmX[2%WrT"؈Vk;I^"˛kSLqnhbN}0`%6"P"i5f(ؼEZX@Coo`vaL)eY3z`JBa<5 '"s nA}m՗3.ZϋyuciA#2q\mLkQ'{kT 5S(lor#{9zMU>xPQ uc~jר4D!D<\Ж08r"^;4mnNV-Pwܖ'E2,c]ZefbnYcDGs(Rg2?@p{f?w㐮dM (gםU21f +2"nZ<)s.R!h~)vH03%{j;-o9 /õ`?3>(3]KsD˕I24yFތ:NzD'eWﯠͻ7|.i^) Z_Ezo8m6lNR"bYUgS_ml_tRvGva[> #r^uÀ( g dRO(~rᜈ .bV7RLptwWH)]+I:d QDh"D Wn]5 9|}An{N?צ?8.~1~,`A{HXRgsa<!.<3f :֏d|3ʜxyWjU&(<+ٸߚT3W?$Qc=8-fa6CE3猒P9|N>&ORVmHp߬$4UPc?O@3?]v{CnaF n)VRԸ /UrZVJ^j CUnpnzEZg-.%{ Ϡ1/_}إzl>MP/޻L,n2]/_So[4c?b 9l5^M7x3|h]^&F)cKg 8՘1&)WR_̎uVF6q^Gd7s)hid9 xwCLrZ+G Z`"@g.B23^4:+wR,x(#Hήx,=}%jSJv"2 BY~->ݦz iWŋ$m%)cȈZ?=eKߤt t.奷 . Zecvf0`y[St7I<m-@߲7N%?}5NH$XeӖRxKjp+8!<~y֏Ь}zIh9QTdZœu_k9YeWf±wDBAC *-?f:p4i0-aya$F?E\죸#~7"I\ay#;9ϼvA sГ8pٯɛy*Z}VVQ/.Y1Ok߷y_ƦQ-&.㠽Ȁ<'CLݘlxO3rEoKz/=J~NgaI*C!!,L'MG^Z][ _Iy8^ٴ0fƲTc# _x]qMr5(8Y7zJjD`TC &3q$W]Z2X"P]7F1 FqL ш$nZ $m)E(']!:SeR|Cq*N*e2;mD}oW`/щ3o8ߓ։ADE^&Dq?xW WTbyNZ?ֶ6p˘0yeDAx}\ԆxpQGkx|.CL7 v8%e{"@2(ͽ]8P-L(aϱ;mm% - aOj6TW}ᙬHϠ{ !.fr׎,KRMjzA$!\C^k# }"":* @ kDikN&J9k~"| Fq@Idbe!SΊ=۹ko8}l&w;пuAjP-GeDN5*l%~fu2421ZCiJ3f:B$!LњgY&~$ݾR-5MNrFHd|WIL, ڂIFPZ`|@Ipok`ܹ0X$ѕ SC  #mۖ%`Bљ$ 4+Â0`~T>%uM#z^ 5d߶O*ˀ.QJ˜ R/ '߿8\ty/-g4?| )(KTWq iLBO) y$/f\>vI`cQ$hExwf8[ خC=s.fsJwD*Of6hPS: ?qo$R7.lجӷ[ΰ.+!I{,q>v >^|ݞCtz6DUF1EDQS^{k6~{Xtwcgnc@2;|ˇ6<%tŞx*+6` Oކ4 cJCsGh=hiE*~)8y_>|H8_*'m'^*5ʑKXtªW`%.+i36)[OE90v &ƌV"jX5l+ڹExMiܫ[&(D]d#Mx1HmJq @"()r4Tl8?}TOyo0緋1>|݉s`8$VgFirmz-`3.\ (`Rz3|ޛ(h5 %9Ixnl(^3 MбA@kLp1yGn& cN{W][pJ)ڸN4ߏyxr*̪h:L|%@l2SD)ͮ[r|pu_}w[m#-P͛G~δXpJێޅ8h8^aB_ds-Qz`_RPbml8'ޜ^] /].kz_:-5HR7R0,nc?P[r_e(Ti 膱9IB= !>sz>p;UwLi$<ԢCmCl2)f`Vo]Td>trhlE#v3D CGV ?cҷ"aIzʖ/_,a1 0>%Xx+kT5ƦF\sz[Bx7-aG#֕k7Ot zPx&XZaaC[Qʯx: -]f=R쫤Rg~9% Ш~8mjDV$.c_6[gS3Oo<3}u#yO4ٞ ֢(/~+tml'KVW>QΩ٤_rQ#Gd#}0T dEY"28)}߮t=v_l L @@!)QW)43Ae`4jhگGuyo9J]$ je_㝌cvVGQmN ?-[#wQkC]R|-cFrQc{hd,h96!m"LW&PٿNyoknӵT7-KN:fYNݖ6̴mnVj|ҺOD9r XЮB`HBb(Tc!t܀|,ޢdg`[~'=q O ^z8"a6I]aīES CyF tDjnmrsM\ ڟbݫY&T-oI*ؓԷJ?Oc]0Z,NJ{~׬r0ޜU!{nKB/clT+:~oC:uiO]E. f30ڔF9;0@۪B$M_ 3܉!BfȌ-7ic d+Lm\kڦ}p46׶Pu5*p=$5;ڵHDح'RvoDIkY4"KO-VqgJg?ts4Sboq;#C~Rxw1k 9៳Z2}jbB#1<.=k`i1QZ@_z6R2/Zn"ֲG'؅2o3z2vr';0ZüBg?6ߞ?l$,:!3@*\yW` =O"]3(8k[?˕1V?9mKA2_h{  zx-ͱ;Fh9d!!]LKa/-{c(z\^]]jqe}f<Y죃`*ӡMq1#oWf k俣Nkiٵyϵ^ive6; \m'9൝^Gyx{8Y]f)%=Vt4$&)Bܞ\I,6 Oɀ{=x_.ҷ~ݜctcWR0?|ǔξ۳KIOi.zMDy%w#>i+!zگ\'A߅ڱ,v_ RwLLB~)(Q?[Ӛ99}@҈DZ3գ|6[ Kkvݛ׏mp~N+HKcuрnI6[kB$ADo]geҘ]6B&ŶB/ Q)sֽiݜgo$_섶_X8<jp1?wwͷ.,7"Q,V?4@HDQ T 3=2]{|H@މ R88G5L ecz\1k? '[!XNj>,yGUGx6VߑzRK?u RLh0]αޥ8|r蕂K O%w w j/yJŅ+V!lиlOD2c島Ai7iMNFzivrOv'au21H2IG\@ܯe}hآt{ i@A4[O0%w$#Yn: zQR-Xi-c{>ZRHEa4-k|` r$ 4zj9RQãV:\->^!s9W\N?vκ,%)uV*>G jrc])\[.KӞ֩TCUAn9F u&ٵݱsLzRNV\jDڕ:Ce(wu؁/_}!^_AmUBKiI,QR~օ L^pםQS-o.x*y-R3*z'M` mԢ H|$ Ho흤4yc2#^pںimXrrOS J^;c`d;JAN3FLFdBu(MNz0~rY{=e'}eϤ1~] oc{̱8O6]:k2q; ^jY6zCrUQ{Txm׺GbyRb[tgeyR -OgEmC]B*κߞ ޚR2:IOTosܷC_sZLKW;n S"9K-rӡkr 6 ;O BRWck-iWsڡ2Ou@q>3XOq8F31.~䋙|8vըBd -V-z\4}OWF G.Դ~{|NwS/NVO{7T;ڱ Yl\l>BCc#7bh=ZOYZy1{{-ƑhllMrZL)k!%? [6oSJdkBosϵK$}1}1dަ="$&#mAUt=s+EQSs+Pb_93#uWjd廃{rЧkpt Q8V!J+.o2HĶq]0PMKY2m{ 4g#WRW+|OmMXu"qŲ ^ɯlOpw3ʼvLm wVujz iB|Կ{ww_OV@ i:iKSBi&@'4Gw[:"rc;c_]0-h<%5 r{opӵ{:iWt}fR+wqZ4B4vU-JX{m{Y^[ddؕ%ƚnS#]r\oXֱŵbj(6##bK =焷Yn 2 Ĝَ)8X4T>Ra>pZC[=& RP5^Lk2K̎L7}]w~}%*$1L=)ᴲQ> g}q#?ұ_6ny4ֶ/80nemUa9OjRc۬MkAp2;7=M帻Ş]tϐr׷[9 %kۭlyabU 31<]%p2Rr-[BBky!)3Ti(*S3Us6;N3i HɃPOw̳?b3d) qy&ܙéܔcg~;׺dm}jOF2lYs+,>\7V,'>~H1-D#]ؚ3;}(wK_o9gƣbdt{r7h#Ȝ2@OC} -:M6kƎyMy4_N>SU|NEEh xjSf+PZޫ*^{%jWҢUq vis{s+Иre=VJsU1hn#IYF*k_mY(c\Zզk[]iN}{nSP8I{V i$9=z6kQR0uEW ˲3i12M8tu>p !vQoKe^οs,C]BO \RV7#Cus@NL1=k|aoݹ* 274F6cb.6O9)vos.+'nwQszw٪. gwǞFdg\VM \f3X}sn3ʅ4&(Ϋ_hE8L3t4WvJ_ ~Y|_m3~щ90L]?^$B"bR@$(D yUjA&Y[㔼Fh0ϵ>IV20# ]Mf9F4o134B. %?=敖 0qދr}ݸ7u|m J#V愙N)R$9@t{Mx1)/zjbkK/Nu8B^VzaED<1>FH s2R2a]^j%i'|}m#L qَߜtvmJNFi@z]|ַ?{ =Bh(,\aJ6t-S~ )ɩϻG΃H'ɠ޽oє8rj|E۬*]d~wG䑸 -:W`y(wy>\EHpR&vjZQG0Š1yA6jчXymc:Bf>Ԩ3:^dv'ˣn~ H *zNH׬Qxa&[z,5pv?v]WKysxWOkG/hts|<&݋/(q'Rȴ\yh=˯#_l[}4,ޖ]i&sbtW~5(BI+&~ݲRGCRhmI DlϘz9H;qs򤤔6Z橬kn.C]4?־];{09NgFY#>RL\D]\)},Sk'OA~ 6` En$'kj!x"4_z_ + RT pSSìs:Qyep6ڦFOۯpBh<$v457Z+{_x$wu>ߗQඔFLnm\p/|u7'xgv+Rti'.^9U۠Md;m09- 翤1&`,NIzkҠ-p~z] nǫe+mΪRc"*Ą(8쵶Ŀv݃'/Ho6K&KiCU}&WS;!Zl^w_GnܼQ`Z,mq T!glѲȁeĒ+g5sMĈ>EҾfr>vD̾rU7=KfIc KC9Σ}#krwm:{~EcϪ2 |bZ/eXx!T>QB9#%'ۦ- þjsުXXg?A.#RZqfZc RZvq _thx#Ĵ^3gq6)yRe>AKB_]|7g/}ʚ"Qs'ppmHxC1"KhE$b\d8(%&OlFB>_Ӗ dmy *(pK;(ktq{jz&֘\}^o~֜3A8sl!‚+qQ<{?weLckPΛݎgw9lF1z0ſ#9 S-c;|oޒ}Ëřhx@$뾯0\mI>_&iXNN \m`aeưW%:_iAͲY-%4ftSNnTk;J‘*H_q z?(-9*R)k7 ̫yD{S$un¤ =迫mi2";5JQh]G^]|n(L4wZFq[e٦MΒ9&|lkW% u(l?b5u%8?xM(WHI 8bЈZK090pwhA-<3ϲG⅕S6=^?2v6^0Ox j`hFҼ\O]]ȩ^IkD7G<a&pwVY(o>ͺ?^L^-[?/zZ1*XSmޝƐdc?1-οft_hxT?nu1KƘMMv9aoWXHv2}m>+! ~.˹QeiU6NcK[j`8X.#jmw_OOa}KZG~]-[|^q^.Y`%k<{< ~:^&"ײl] Ս ݖh[TkRY=xC{E7UJ2rp$uinH݅c,؋~(x&M7_e ;yg1 q̆Tf YN~4z3U1b~^!kmC !J+/O˗ZJJdk0~\OqOlAYm)#CFvU2&XU΂ٍ%eȽyc.>ǰys4B>ZsncXYDx5_F*T\` `sPݼ>' ;pNSw%ŶǸI!kgi Ws\|t ÈH[ֱ@I;-$z0h2:eP}ԭER_-gdRkuiu㉨F ^GOGS3 T^ ΰޚ2::wC[c!Ԛ6˚/RNe2Jr-%nԓCR2)֞0jmRCs? I9OtŲ5LiVlSJ{$Yӯoo.neAkH}+}*1I+-^[s`v!s8D/vHvQO5Za1wR{`(qwi\7r54^d!ԔClRNHkL}1,6VAh95hxȚںD@[p U(  D2:@#f[ ךGW2ϛyfɶ=KuSm>61mݎM*XMRe a, Nso Sv692q~kkбoiC&jġ$F (jsbqwVmj-S_Ioq .f@! 쵫7R%ڱ zɦ\9xZi]Ny\10Zf.5qtY*wfE1JvO7w㽬 Tu]Vڰd+P؝KNGK#ulƳCKt/iʞwJCjrz5S"#$\92ɩ#CSV,Ns"-XnY-a΁ڌw?a%4sam_@A;v{@}~ρ0fqgў2jFkQL!g߭Q:8ϢA\]E)^],Hbu=:wr+)īS(N=>zw;nŌq9EmYYHTauH4B.ٺ\P}-iw{-*/!,nG/;=^Il9$~=+ `Hc;1M:gd֟uL͊:^6[.'ύU9#%{^¶ݫX`|+vJ}ïuc:s{uROG\`z,wYyyǽkU>-P|ЧhMgt[ eaMFm(J%'o}z7 S#BVu+vbL Й\&Chln*Pu``Ǟ0;T̀gdp, .o=s}N;G-x@ݷ*ɠX~'.vh~o_v7O+Xv#㖭(01n^]ɰM8EYCt!&&;H gO:b JِS cX}y&I_ϬWyL꿌;CZ0MBHr9gSe/W}+l9g$ia!%vҕGO_ ˵2UĽ: O ?m6zO[T4Mݫ3@x1~By%oA^Q7dOX:]-Ԧn"'aGxv|Wwi5` w3('71QPW G۽svzn5B>Wz ѵ,W8atB) ;4}R%LJ DA_k`3Kb:C,H=vӍ kmnn0G/ 5yvw/"J,<D 1)>t]Ӏ0 ahnXH7}zl}m٭[4l&i[PܗbbU{|~C#Sm-9fjTx)>I) x_F-6dט<4ot8֪^n?Zz^<_uMnv>qiZϡ[U18gWoٙ)l9V_|\sEUXn?v1}~͔6v0 N}=F3o}\Td&sݺnMsGB7\zꀂVT>ksM?ʆ>g[6^-6߆6ꍧuZ4=st 2,󟺀N'.0DbҡV F0FcP_I5Oov<ߎQ>MK^7}Mu.+ "0AnT{ΐQhsUffc'Xdجȭ߮;P9YvB֧>bo}~DϹAg}S>gDf%A'%|l߉/Yi]bw5)"%< j 9[Cn1( LunvFd,ݪ$:_voo7 um%h䘁CB @tpz(cNT! 3jZ>%=>|:/9X54' W>#=h7梁i$Y&_-7q?;m~55~>sAqy/(g;|Wua2D{ludF'eGZlc?Q5\˒ksMZW+5Ō kMpm_~ Zn>oNᩑXz[ ǏMMyTA{B$zm{&Mk5Ek Y'KCEQ#+A@ T&yc-A ^08>Y+JۖUΛwcu&S-FD叧|Y0+/4Toİ+@M v2=Dե.鱶>1FUYc,KA>oHj!.b LJy[Y*}8 LA ˍopGV̭^@ bpav*l{&:N?QtYmƗcg%W BXCb-3BP>x@Q0)[T.aЭ&BEHehTq7YL,qjG 7l蛁{;+9Ι.O5+$47;抲gtifߕCqqemYՈ3ϵ ?=_a=_o/D#GB[{]z|Wߴ-6'ޖ㨩#z"1{Նz Gr0v5\FTw%U^\&Z 7㻼P<7ٟEYn?YciGǫpkdp)ngcFL`1Civ=?r?Zw$Å=SOĖYNQ_Os"ޅj?ir毖:~{Pnpl.4]f"߈+(yĬx)GwZWyjW&!CEBhWu[&{91\w;e?cYx!@mF$_x(04 %PņiEɨmɩ2~+vݣ\ɡ8RKwţݞ_-}]CA|_9 !Z˪"Q^^;"l1(\vPu@Z?( p?+tߎ)c }4:%FDy;2U:ƨ<,S/,]|ou!%hhu{xK?C?CxH9U|_Hۊg/^ΪiNLN_kzp' }| ZZrU6ϲ׎ SDLFϧ~]:{:xфoIikݼuÅvy嚤>^LլgϲjO]s\|T}oܪrMsngkoU__k=_G޼ka 4jXi!x^0lH\<+< @ZiPD&h)މCYÐ04÷P%$ -gbKQ Cf%p>)]r e 7nHqann^g;M͞EqO5?OVmSN+N76(}O5Z0 ~f{kgxRPr zO=ն1!ziݵ-|S7iI$, ϼur1&;,k\Zwҩ6bQˇn{ڍ6XާKh}[Ty7͕+s6#L%}EUh3dk(:Q1-\lt-*򹬩,vO]\UZ?4fbJԢ~^/͍Cia8,8"R50NйS6ƣx/ڟt+=:t;1N[04C%I@١$6(KGR34I9-qB8Rq 3,Pٱ않1Mq83]Δ ?)iHw,iNR%\ Pv€eTE$nfի?ߞ d>ÀUG[ِĆ"n4kKQ <աxtԊ[<Mݏ|+U8HQl AѢ(("qh"ɥJ6t E-X, ?7翏_oob]L* G [GKRC[,ńk*F"Zjt_n,1hbsJO[)s!*&a zK dWetIqt {s]&R+\ =lLnlj?E> -5awvQO ;  wwÆ5^V,;@Ϝ+#DHb[2[hhٻ+?Nv Bsh4n50k3OvS]AмuIZ193j^2a8@bkJ"N4 S秡:2Ґʽ*{z78B RA=׻͏ 1NA !$d݅E1j$2Q0QUL 0HٓeNe8T'LHfZ[q4N!;dLXg7D0B"vXq6. V, ,K #mjU]D -ON&^a]ⳬAP9ddLj7EE•s4VH4~q]Gǎ"|u&}$f,z}grwynH~^AGcLͻ ;%f>?Ih3#{5~ 0a!-\$  0fyD_P`#~4JT*:=_$%{}HKCᜣ?GzdZ;rz*徵*upQކJ6t]M ?~NQHi`NM-N1|)k̆Yd5 #-ĭŘS5=_Cz](2-kDs0ti"i1@$*s uΪfo}kPr<;Vׂը~hB7띐)pI|cs> 4 maw V]!!g->-Nd*g o$*ٝDUKT`t,4bq_PKoq2bfmvor [ ݩ)G(l݁`Rx<>P:B萁 {ퟻXh'neGo6W}$x]"M682a`\h*Qi7}JFvK/̰6\ƛ.Ë׹Ի=+Y'BnG{]oxר v=q ]AsqI(72`o/y-,>=1cʾ4)d%͔XV?oxZjT,P6/~o{릷[WdOdq{h~Ȩm&.w ]Q4%=yn3?|Ϳa ߚN{Zor%?}2x^ﭙG*5$3;^C.4k-}+r oeؕygt339R"iN3ٝʹ_PZc+G~0Fw _yɷ 0ys[+Iػ$±bo*9\S5^V5ئےFc14Z Ztk*/9bqﰴfZmHWm Gx;#car][sZoZN_\-5 m+qO4RW."}=it[YSA=-YK#~ji۟ O#_R{2~ Ӆa~TL{OF 3Qn5đ8&KGw%^\1݊Z wk5{-x; nK˃n97ן̔pU-@Ǫmmmؘq-yֻixEoܹƺh6]>s¿x<{bco2a!$ $:{M s{|U7ιq H1ţ-l*_P @(gۅ\DtFck1yȯ궨ֻGnߵ|xgp|xww"M5bksuIZr`!8~ ~|){g[~[nޭ)(ѭww}?d9U:E:5*97>=>x:Aq;!k"spRn>[0'hfAkkkѧiWWT7st*[ ߗ0ݴ. r?~y˟|x^$ m@8APǏjy-F%_F#Cڤ{omeviYy&,=?'K,oO0H$p8g+{} kP$$I"pa %|_[jg.VPCL> %`GH 9C#ڈYv`(*%EZmm**֟6S[g` aykʇ$$,LcdQv۽¹gPEI^e2d+ASZ+o]C?2'7uUo2 N(..e? o")g.2>YoMdb H$Ao(#PuZe{#h'ݯm`<2Yk&"C0T`w-7M!IV3^~մo7FIv-t K^,QD_J@kUC1*?Y{z=wSJSZ־'䙼`voj$".\,B <&RnMoк չ/c1^Uca'ZȲ7ڳDDYF.sFu/ 661jDog{ej\?sBDpj$CP\Lb;l@cU1)3Í4it~ZC.f*>y_[O $3eb҆*\'3V",ݗ>I v?ϞީFi@?%u I)5͢5 V(9ZNQ,vgE_\9UeQzEYKlw PoSv)h !OwO?11C䘈-Ry=W\3 -hЈ-¦ +-]:O.n&(Qhv.QH=bAQ$3yŨ7X'OR쾗{#O*:b{=ƽiEG`̖XDnQ#> 25(DNLEQK+!#@J~6T7+NIiubz]i%nKV宜=v9:GiyAYXraJ[m~ a dQ a%,~{Z8m> +-i;JMJ^ۃC;CH )ҞZunP=u *wmf iۜQJFw6wjьMpn)U/ClS≞#G#]lz199=sEp' q_ÑS柱ZHOJ \=E6m/pa`Elwvk4m/E=gT~Wi*W0鯬ap$HLRhwaX.$Sg!,ڎaZU,C5|#?$FA6n)bC'E|CH .`?:f[В I$h- сGs_}pmR0αȲD")*Y@/@" SҒ@ r!<ə6Np 9GtM2ڂǹ+ Mq+ Q"md+U%EL$~scgĂA|n Bda,rb2ʌ.%FV4˫RqáWԹbP`(1Tnz,8$ZRiF<"$Ll7W&iͤecnU68BN1A] H%MK,VhM' 凃 mSl%Hڻ@R rpچޖVePXVZ,{m|f\VZ ,XnJ&8"f=|;c6Q]aK+aP)VOM*]DPQrS-X׿9q28gˆå"Ɍ&ƫ|1&{ӭ)Y:R6 bL`6JQA+lX Pm" )P j-UU݆&5  @([$RqNyGLwlu[3hIG7nNcvٽm>cc6|Y8Ӵj*:TkHuʜ/WWGcs9WG^$ևHk4Y}Qlr|꾗zj?:r˓Gm:TOYUf2ܓ/-sݫ]z-qwBl׿8m\Az{zG_柆1S>o۶Y{퀺<@!n#(_m P!nwMhQ{}E`{նo0+@gx݁zR 0I6\6Ϡnj鶨zJh12PRwO6|,ڽ뛝Ǹ o/pX}wψvJJ )w>wԶ+GBƭ@H穵,o*`}= X'ko %BRf5{)k2uj秔ma6 .Nx⶜Fl.isҀxc&N46}Ѣk[CB'=|Lw׺N6Eפ7u::vw=4UBn[{`f o;TGbhD4#hCA L&#C@10`Lhb44ѠdhO L@22d ѦCIO&L鑑OʞLjiSɩ<žwt,݀t]5$懽 ^Zzh}K>C49ڜ$awnOo6V}>`?8=5cpIfJ.tĐ~}yn-~GabqJe^(<Om0Ϭ _,mp4'v~FrdXYcǎh^]̝o83=ҴQ"-:>w'*F#H$372һ@ $S!>+ ^G!YX~fı<]{g߽2nHtQZ.VED1'`~Z3"aB-**,F (8rbԵQs(meˌLrQ$g_O>Q;Ss~nSyoјDcxTb$k{](Ih E]|1-ؼ^5퇺,KQJf`%Lprc%G,1vٌZز"1" `REK2XX`dER,jisJʖF*Tn2Ka+Da.[C00LF+r4!\hf($& fL2QW#G)ƉJTde .Q` T JrC3+Tf8)m##QUb$b )" Ȉ("E(X+" 2E$bPA-1DEdAE R0&Md}=8=G'op8ҒM!]ek`b"=%(!aJ"F#$PJeF"aLX *T20dQY}7Iٗ*ɌRƒr`TW3faX7J0jɉ3%Ȧ@LenRW30hj`,b4 OaO^=wWc-ܑ$jnxq`I mu$IJ(X93k#.eHD\9kp;IHpnc&((ٳ=DD@F׌Zr@ԒB`V89 {Z7Kz C 0ʶ*R ,-IJEREC)P.,`,cQLR JQEȪc2QA dAq %[`"Z%cZ eb*b,1FZJ02Y2 X!LHUG31XkAIt6ʕkH(\QA@_Tõ6`WƄ+r(sկCꆩbgj̫f^0}8tPusZ֪bj[rYiMQb 2p8t I|&6Ö kf[Z[E֦R*}8~'gO/oy'bj)" $"+T zӳ;˕.4TDGnvE~{Y ȀDA N 8anw1l:L଱h{$U``([B``J*b"1B(Q "J  (Ab `, !Y  1U X*(DE(X¤"rUbabF(2,PYP  L*dJReIIbF[bclp嶔Ÿ0̮6k D#H,Ab+)JX029LHe(bZ n702JW ,nfc( *-nar3.VU̶jcC(feeeSdRJR\.\ Z[1ԲT" n\Ǚq@V$ZAbA<\ݍ'su"Vb]C#4L$3ad3,"*K}MT$1g vr\a4<=PS[0&nԺܵ< [&;۪';@y2Q

BgmŜ"# /ٽgјr䜟{( PxCl4 tI:j3OKMa\4Tcb.F ,^Z;e~p~#Dwan2m8 CjC3}6y &48%ړ#,y9RɿTO-er,r׎ U:7n6WPh3ƀrdy\*W`GڔE…ʲgpgИ堘ۊ9埇{?}-p)@3#F~Aj$ N`1@Sm.M$4_{ܴ dXVE9(ჂUǓN-K8oH \7+Q·-3I]cկm.nAist>N+ L'f8ǫ\jc0!@=_OesøY exK"Tkxm+x>o-o̔""CXt׸P/`ËNt@NG/nb&Ș3.䔝d}&Gv`Ej5w !,(dZjQV@K=d3jXܵ  R$lQ'7_Sez%V[*_c\.yYKڀȂG*EQOoy-QvpJ >ЯX8IY<B/17'lqVyzC^=fptti&jaގ#o|=a2&/?/TA_$ߑbZvpe" }4*¦ +E[7~f~|݆ ngDNtgw ȡ%E\ 9!opn,4ns92tv;'x+oYړ0G9O$ɘבp^ [vd#B@ I eNGcv@F7^K1ejW14eG02Q@hh ڿ~c Χڮ~ fmU9{7jb"Ϲm_"7T$e L/)8c$ f )Ux H\8yRfb9Lиw`Ս0A2j e[8@n` vP cG_S0J~LW4N~_WLBs0/9jS~o'[8߯9@kZA /e:H#a<$RW{o;F-7l?̛i>m 2Z4kZhrL UU4nY[!FFXp7XS Jg/u]'?6*toj9;_cWAq1k1C6[e J}N;̎aU8 (qٴ |*fl+baM0-H[ "R|&L[>?0=_*%qq;[!$oz_F A ^@{[ˇٌT A%,ʰUO\;L{`̉1 -JwEO6cC$J7%`r:օаj]!YÉ*z*DtKbHEz?y?s`QY*XnzpH4h,jTcWsarA&FbbV'kE?c KY#Q`K<#"a&yYσ./9opnv}nm#]] qbZGR.:4r>yשt^¶)eEJW4WUI\bRXER(>?|x|Dr= olG/ٴW7Tdi 0KRDLNv}2")UaiIQΙ޾06\8jk3 F* N 7F'm/mx' FD$C(w6 VH|?gi[Ē@dxa/vRT a֕m.hf w]\BP;L A5W"Fyvk6:i3͈F#Uxw|]}F4n!ע4dNh "Y`7sINfl|8HpYF",OUj#qٗP4׽Ve" ,HR`H(AdHhOz/C?ajf9?;WQ2%Lqܹ-E3*\n֌UIUer[T:qq*5 01Ȫj6m3-JVVLqQBe+WX{kh߁h j±b !*Q-U*R5%TP(,FR1̡.ee[4mQ\TX&R$aS2\LbR `իUUU12A+dS1R9IXYUV" QLK9jm qr , 1Y+FB0ebJdbEKJTm *q×藝[sfS1LQ0+4)\.cQir Ti0seb1nbeCb-b(*0̣)B1&TZ`ZV˂9Z%!r3\ Q\nappكCɰO`v:9_8VAPtdt1x*.#( "ݻ{Zy&[-FF ?N֤qc)K~ߦ{۟w]}^㞼iާ-9Q^X*^&M?aL~|Q,a8\*[S̿ծ†9,_z J?2"E#'厊L)fm ZwN̉ !fV@y}N7./ݭ&PJs:߰UµF)P(Ƞw,JU2zm mDX+ӳ7 s|ڌnf4lsU Z[Ppxma٨̨"G<:.Ը+\k@egxugŒ{.ʜLk,e9 2lT!md)hvY_Иt҅F cW^_`A]~'d᲋_wCtUT;;\T'P|UtZ/~WK_DžL^+XSXO}o> : "s7vaxzi9W)e,(I8,瘾J:IS9ߗ5/`.#,p`l.;"PPК6j1/vxl\]sy*m76͵d4#<5qܣӜ޳CHvڛ 6.M& gTݔ .kl+3ل9տi7!x0;(بH;RҼLzQHQHyYg?Dx_?q[MX Вj!d&h vhE*TX_I.ZT|vp4"P6>Z8۵!UjT"g4JXŒfr~#gkjp/)6Tܲ,jj;CvT%@ah{H;켦.8f?qa6Uf3oKzF:rJ>.:|E?y7M~%?z5IdAGw~Qj@0DaTBf4 `61(UdYaZ$P"DF$"`,D lԀږ0N%O+e'D .լJlR1,HIX+RfP͋9neB| 333@ѩԪȓus.`2>tqpF)NC K\w5_CM̪<&(D`f'osN\Yʋ J5:2 w5;wt  (;X]~ }È h{} D*,yNLX0DR 8#1TArMdR*UA˫y:ҩj H,b AQV%]w7mavއG,plA-3% HURNaptT^GQ97>U÷:Ch'pH-m>&؁Qb;^Zȯb0 #PՖ K_4^"/%̹OBZxvRŒVahe|w4!IT JfԛV:G$ ϚZ*$ԒK,숍VQxqI4lr\gǪֽajH %kj}`ӫAqr,߭+ڞ]N;/FxÓE^-f}D6!8!$^c/,H"26IWS 6ˈ+$ X ^yVc^*A|3{b* ň'pπmxZ~+צ\ +c ѕ00LO#)acBqY,̸vԼlCH/p$^dlԹs3aLf5:rϜU~;EX/W ܡo){ |RVWG."tp6c`rwf}7&AfaN35sO>>)-N|\aCR W6o%brӒ)L`LZf-\%.k00CzT"7˻oȇy?j'NAסj"!Q̃1#$h]lfR^( ˨z8FL&a4Z5WN|\=p>UkϦ+(ӡ >c1 _US gsKfZ p/sL{] V;'=l:HpW|yBۛ2@жU@(!G_Ej{4V|c>3B"ʵg[xc6x ^$8/usaa|.T[8 Df..HyκIjDJuZ5DܽG,iG(9'G7,GjtyU6/d2x!HB EZFeT!uyĉ\K6,2e/_9;30: X| Z~l7>ww9:|z4Ƞ,Uuf?Vćr:ua7 Eh]E4X{8Z#+'vPA>`z׽{j=&NKWi1Ef=Sϫ!OozvH"a * £S1,N  oi'Usj|XJYP xݹn46й&\x#[2tȼm>څ{<8n5 2Bd1",}ӥ1ղb-"V "mNacaɎ2` : k{0LG'aba7xddF`fi{'>3n *,~-1M&C>wgWz h=3mK)@Rk|\rA"+ߛ^=k3<ۙ'cEPNsANqT07eZ.8qW">;@FHK ۢ+ tvӼ{]3=sڇvTcQX( (V "EQB A`py +̯!׶$ZSܤW+:+a)E:"EAd?gsӭlG|DF!] eD+̬ ,bʀ* K=nyptv4(x{%pB'b-8돛 B`WJN ^aXaoUS^;:?>^p8J hl-N?O'6P7 0֟Ůʔ]N_maH]`=HFд ɡR=\ & ` $2;vE$ RvhꤕB-M [Xfj96fƤT_4 f816tʐOvmC}gS8'9;wLu Ӑ_ (`)NNi Y45hh` ^X R[oE3Z8rߛP{6ɋ*ԉuafH,^ɉ$3i`>m=^3e  \bHHi՝㟏tx]b#0j풔(eыs5!uJQg`ӏ+0yKȚ ԰=Ba"9VF DH'*q;H/ aw#ͽz{2r-*^o( " W Al>QQ+zdo \xR?>|")d^^:L=PsMY}DcǡT0_hPx*'&J :ѧD6.RF5,μ$_;5{`T+7dqN8vՕxrD.5x0CO4ȄH NMR(moyGq Gck8}ȝLcg#,(rha #24 rk/G+.>D{BE{YQVyNmf~󯫫BǛk}(˰]ϖp5[C ΢z֡خjÙ0@D 8wKUET,X bU-E͛f E]H`|9M[pz<@[ ÔZ F@L)Fa2+~2'kOPq0vpv%@g(}C` QcT&pzP˱Hᤓ?]$K:h8g7Z`*/ث/=σ%znxŭā Ƅn-i"|m7dʯjkwMZx-˓:;%hu3 ͋]w>W`g`g\eo(Cb?UL"ٛ#q^_ Z|U &Lqe|i3hsSp.'b1goC|xww$Tb7j>$$Jdq\V+/IӦb Z6|fk^i:WRR+<|a,I,F,QAQEDF"||6+O*WO7an߸$(`]r$*015h <~VLad-JGN,߁hGMgMd\ g>woN 18ki֫5⠋AGAf mDwXa]"gzG)43n4vã0/p9H Yy(f^n,.mlFQ+CGB)F~4WNljtgx;ȯ. UȈWvmcKyG"!uoy4{$F@qн,|bAOΌr*cw?`h k[kNS6O2_5q'|sܧQB5>1-2V 톗ZvZފmdz/L}WrAuhPڊl|ݰ ز!YGh(ʙ1`(Nj>w-ńĬSڏ%f2B(,ZMԐi3y CHKROSH#7`cڰ$_9ڔT@ iֻ%{_3,ma5#R„pYfKyV~֍[TmŢ|1%cvF|K0@>/߮їYr%f<%Pa"MVS`\.!(#^f~2OFrZA]u%Dڮ9Ŝtʷˢ^jHYtK6|.3.8w9.p,\HxPՆ ΌY{9Y)N/Ac$N,#ϭΚz~CS4w'b<>nvz-R@2@xȈѬ 3e>6,.4p aj"x6}/24%Gv:7!uLcZ ˁoס-ys&M*Hϝ^\pz85!*/ǵ"7#V;V(#R4 ^&H.&<؊q~! 8[Aԙ#2tHeKuJ^7HE۵ֹ==%;!fiS Ax֚G.4_uV)Y`bi+k!6jA[Usͭkz9 U+z&hH닪Gף>C]R0en]VV]׭h=-">ρeE xņt Y$[kRj`l=\N;fꖒA剆  W)"ף9ƣ* +WiJ a(jB@Y W9Il-X={mafvtGd=&@LDoC d "QC1e|3k>"%#u`]z;Vj&fCBAKk5 TF Z69*{ۂq65߈va++)o6 HNQM1m'gD\[7g:~j8tΡ~mV1gR74xnR.c}tOeo}OŹ+%{@A ۈBҍ)P1.pe?2 ._O߃**Qz]MajԈEyziP }i\;]Mm-fx$jZNx$& 5Hʟ<쇔ovcoG!8!cVh[C~K6ܞB:O^_od@eԘE1utZ(Gg]0giV8C>NCǧUkmQ-Xte!H29sTR(_>hO_xvCh0C/h&6Z+8NqZ4fAxR>*o҄2hQinYxz ;4M[iѦl%T Iq'Cjڷ伓Ka3z_ +iר"Ek{]üadwE1EVJ _VR: L2fMpDPD(,+Ƞ_XJ5@ަRКczZd AhKeykl@eT8 "j\esfqűǣ6 \w%U Fds 4q>!v\7'mwQj9rӍp6<:HƼ{}$Pu؄jXt&at@3']4 UZ|TbiL}n wK^\s@Rq13(:u@N7i+eϔ30JSMh @9 l 'Z+ HJZ֮ 0 Al c4XFH7;Q4<85WV9`dBW,T :€x707EɱԚ*3#4d@ LVU$!łZٹ-qZlu<ْE~!^Z3|eEzu|һCue/Qps`nWK5"Yeim?w oRI :45o[hH`Knwf,uK{QvS&Ӹ4y" WWDz{U:10QvZ6qn7X }Pzu^%D]DZ!IhVT8Qxar58qnrQl\7P&˪!/BA[(Ͼ;7wJ8,Uf=:0k/}Q϶XIua[ xMd>`aTҳսo vߙYa6)PRI}~ސ応>=wj$E PO-,\=+]/!Faӳ Vv3rxVBI S2YZ$n)"]M,eK/zC,CWϬTkT9w37Uط'ѐ}r^'镮K7pIhB\i^F[ h#Rj^Q mY0p8e1KAɹɶ>̢-f]NMpy![;eN9p @7uA6fx KF)Hb,!0 A8=S6BU1`( &>D;ӣ;z|n`ak)DC5淐|a&y}'ςG^u:vNTh|-# 2HSAv}yrEVفhNFk*,3s0}eؗ5A6 o^W89`20dC* xwï[O2gy5)}3-&{?SΛŅPli|u\J,L !Ӵ{`Vg~aXS5d 9gsr|6vPR)Biy.lCʜcŭdژzGU@mh: Μ6M<ƣ1JJP+Gh%+;ӌEȼZcYmCϑ]emmb^:հPCŖdgb%IچxїpkZvu%O5D r4oCxݼ;mW)3 e"o]GBf Jmq5,uQj% F2}eQfDDõکdQ떽#up`"p6ܥB>kǽJJ ~q  $цvɶZ 5-WXX1ၭS9- j`)tƇ4I.1lR&ppl63Gr$0g̉O#p<ڥy 5&#}X h$ ,XD "s we'*%8UPm3<1gF4nA4^u em9*؜#c eĆ#zog!pjhυ;(ϒ<{dG#}'U$c TS!z{>^>b$wJnNsT)C3nDGMRYϝzeFEYic_pvGGX&*7V5׳Y<!ԥqu@OqX]fZxCk#k vw+)=n"".G_?,|[e_!љ@GQr{xRCS$7}X^{L#"" +e-xB駟a&beAAEt5R'EhEW{UH+_G;{Zc̀{GýhzLYR^]&!"(Y8$ != x m3ƂE'nݮ.[_|4;QV*UclfMxqp9^iC4Fg0!(ٸ 5"#ِwSB'e Қz&.>ivD8MJ X8pH,FC0"۳ I^ w {1PFhNXTk:ˏhpe$BF;xϰl8,LVssfKD5AM@8Z$"B"]?6&)[*.:Ob*FAyU6t!ŻzRޑSߚl8[0>#KNa fָn2-c/NhakuArMM;$oM1&h< u&B3[80O"!aq۽+JǤJ>s33݇x,:+>'Q(J_ AAC|zSB1&Ss9UsPzckGq-ڗbJu${Y # 'љydy"ς9??ͶreQ;ԬSiBN [ęk3[ZKz Fi`}8qi_6M4m}&|3ˍxN[q!pϿZJ pԋ70KlLy6a#ꚉMNhvqQYצ=KwU7<ۀ 2(pw[iۆpaT8I7iF-f{@! iL} ;]'5)]'9\խw^ݓH >mrҎ>hV~3Y"VW 4۵R}j-/1iyĀk'eg" mYGI$֬tU8* i"_MYvj!Cqb3cj>lɫFjG~^>:|{CծU!}N n&;(0Qy4)8 Ywm "VE]':&gT?|$+A>t0q␉=H%Z3>>̈́z?R@ŧ ҙ vLbE"ŃG[D W}ߏZNR >ۣ!h#Z.7R"ذ&]hE8_VPe# l.&._L%f&jZx,>pV+otq0_co<@^-²Zs;k4,+51ltqG{$ Zb 4.,HphU>V3|&3kRAS) +OWKVm 3@0ĿVmXmE=@ W~ ZeO0Dj|8@˹v$0oW;Oq; =|UZ80Q5Aؐ(HPD4CjpXCfowd(1<43T P02w,@hbȰDEVEpvoȡhs*#yj* 11FEȴ5Y@'=Pg(gNhaRf k!sAy!|~Sx^emc[#Z`ntqK[z;wvpGc*OTxF'76$VBPp#ģ[p'))>5`jh@yeRKURyub4>ϥ!Oy?O;״G,ZDv,y\!׭7!_^6ey/Cޮ@AdAhFYw q3vi E[#8Qnw&$=畻,EC9LEL hښk.HئpxgC,& )&( KQ=*pA6㩃Wy=ow4sdx~sC=EJAU7`NVaqacHGW$$ j<3me,=n㘻fF5TCVw>5D'Oc^̧8WŦvQ|9~0 ܞiCI_:`{Ns1$UUN_4t8@2!)AS;8:bz}}#nkQm *)J`~ "-ZZhpfEՏx@^?) kz뺵GAtquo3_K<kk+d-5 ȥ'No1(< H%\P5ˇl >tXw bՁ}oIݑuYeFY 5û,k63#n५! ej1W'axTԋA݆F]",@+P} :0dw<>I*}|t߉-hs>61׌uf v`7b؃-'ҷ+ǏF$eȠAv 8y~.QԽ/)ɇmg60;j&_KIO Gy`tGnԃs.2ڬgqczyccn2"&3WGM9K@A׫#2 )ZDD0i˞PAgbV1!HO Qs5pT#Ҋo߬A cj/z)h-vWÄV8tNx+,hL0>{d :;Ҝ%][1KnW @%j""XX:A߰kYo>Ưy?ipo~o{-;L> x3Y(m{TMeU,e~'</MP :,6 vu1&̃r _cSp-{ce^YpK.C`wҹq%lјܻ+"AވT2KCMH&> R`u ;ZK$}iIB^_J\V] ^8B1WT(Q"fC{J簾u;TtV8]H0DIDr(R"h(Yz?":R` 6JQݡ+0j:Kh46@qەJ^:y#[.Cm^3YKV /܋G6TԻt"Ou͠mJNH:'Fδ73k\pII#9 ? qAHr;tӮa+^8͖T5~I4 +-uF"EfF)@6`y[Z"' =}'`wvxktw@ vA6CvvÎ2'㮹pvX̝~nrh@my[ho])D_CaMa$?>;lNaI 01L0" A 0-D}7^C3 N @{DC" 6)PQ}TL p1Q]rT /A]PZ">cf1kA)z^ Ι}߳-Ȏ@k^4z9^=Y/s"oekufh{x{^9lU>JC^?EҀD Έ4_kB(=ycULY>%Mn;ܘ22J 󻧱u1"ۙuXLAtZ=B&&[@P" []["<U¾ޯrh;WMs(*m7͆&P  D|8PɆ92p@/WK{k3@=F?5dy-.W- n tz Q}S58xYtR%%i6|fM/vh#`Ҝ-,}USX-qDtE#aa(ZbI24U0[c&0#+y{2xo:GVNAU;_`q5po3_G3? wS=s_pyٓj({fÙ4<eլ1pWT"2*(!ˊ`@K@j {x;6uV;z&mg>7| ((D5Ël'B(*VX}- ^/*竕}׵MB@: E$In)qـ*{SPCz0_̠TwCc^{]_v*F  U UF(PP"EX" ,EH( **,QDdDX(( *"D,QEQ*** @Q ȠE [!>)X,U"fC 4* *-8hѳmf&lMUQTj8g5{-ͭe6_|/ǟvݦ>u8xl>c ݽ6JJɯ~E`yoUPϢÔZP=Kbp̈ q~ Ǧ\6ꈦ$=!;nB\A5}>~$[X'1`AAdPQb1 $&Nb( 8N|IOїjD.}\ 9FL`V TQEó~*DN62m9$0#AWzA') Z}}X,6ت>Pk--KiY(HOOymz@'{~+Ϟ9'̈́cCYʫ_`:ٵ(տ lڋ[' h57}Yoy5^Y0݈->R" +9! 2  "EdͶ֏:D~Ƣ%Ýz:Pq"XjqcM8aY"Ř$I]*b2D`(!$kZbw"[˧yO7f!UE5˯ͦeu+KV("|SY&!ë})o~H,k{Æ|[#P6lV@g aꭠi5ǒV7f6"#5RI=]NLŐREV(AEP$c (PPD($Qmǩ08|iNxqf|Y=j"+imsA|ޞywO6)>q㽿o/; $ OJh2")Q2mjYĚ" C/}?'PbĂbF"AcUb1"H(QE"(Ȫ"dUX+"T`HUB X)b`QU`)E AHB,Y EUDHB(R""IXXAH($DEXUAbAH"$TDb"1DbH#$ v^[Kjع Bt8l!ڇK(?AVn.$񤐅`h䐪ܕl,`@&pC,-u[h[RNbJ`8QXkdD֖\.e7ȰW,ϫMIPDQޯD()EX( U1`"AF3h!k?5$E HqDɑ 0.F -FE?캏pUTV L0oM6@fi< @^,??{So~Dۣ^Xyc~% D2Pu!9n\؋l=UY註@6\;>Eم&)P >(~z|}cy8+E,b'T45w! แ`?guaj i-݃_Z دy;YLq2S.`((DDTT**ȈPTDc(XUX" D V<)cE;R|OZPxN_MpڋcIarĂ@!d$i/[n\++&ݦxԡу{Vi7 WkB׫(v3Tcp4;ZG|\آ)H 0*,Yc([ER~GLfRO 5.YDtlFZQNXq{jCB<ȡak@S9Kkp4F{%UIyխMx, 1>*k^^w}FK@rçpf07{vkև㈏)ѝjI%~_  Eq٬kCg8nGV#JT@\DSKTDQ9H Jѭ;cnR% jffʑ'-[ܘ1H Y |s~^l1-[(*j܄ʍ3?Ў: BEK/I(RZ(AVDf$kP*܌+<|Rx#ǵN3JnLSF:_J^,aQ6uu(ŏ/=}ER~Ϯ^mP6]xWڞ;(1ΰ:wy* Chu'Zkp -M=X%7t7A #prU%c0^DypKL5%BI ̄{ $&kԚSj5Δd|sʹ "t/{5/DQs)Aܕ/mނ_gɲ߽0:` s}>\6 Y4VPH?7zMC**@ PFDDQIF@UXL(qP拵3A5C>n8*蕴rn7Q)DpPG/PT;pDWu;k[wYY5̊oS.6Fi$}fD2G%DHl$]uD25'CwڷXs[vr\dW,GX-ɓ0KZ{!lԘRY OavFv)!//:87s~TO HETAXliP(,6@]oAdEFb ʑxa6>c! "EADE6""0&1)JVŽU949]ZnY̥3)b 9MeQTD˕p.LIF,ii@D.SZe\I@8" 9tő-Ӣ@1;sqQ3A$HZHH$۳%Ryq̥3-`cf QJZl+@Ӗ&)Ѡ 4ض( uQ]U"OP"2*#/ࣦi16,Z4*Fzd (E<6CPDTMNpNyDWn1S`@T{ZM8eqm+V[th@/ԊD#h\ " ~`}IyJ)[ER m$󤅑XTUE #H ,$ݡR2I #D*RY 3TP20JJ"hZHiȠ)PPDX+DiHkd` Rd5ł*t+0nSvgf&I* AQ{452jTSl҈" [b&iD4*(n5kZґb$D1`"8 ئAĩb.pfC!j,bFf21HE3`)6aІ770M2Js|(tBDHưRTRPY \̲d tEj!PD$>$,C)""i  9PWvTrӦ"ȎYT$lf3, E\R&… xqe5<rц+USb$bDȈEb\.Ѷ1."j5Es!uX0%S"0\\`"IZ Ke[ndEbɊYDJEUH N5{P$^TO"^bZ'{*gJydAwUb|LF$HYb* 0 YEPR"""+"$ )(*dDVEQPF*E$PR*ERE-Jŀ l112 +#,V"2*"Ł*$ "H"Qb"",  DA@X(@D*TA̐ѓ>/*}Ϣ\ahPEq̮2bQ0ks VЗN6f&\pLS2eprW(%+3.Wە)+c* (-tI2{{?]0V&VűjV *[n8l\BPRj%2Ֆ5q,mو⦺Mq5eϥUbTܒŊ-E+q*xNS˲{or&+Mem3*-:M7lӓӨ:[m]&fœV%%[`FĚ԰k oRE aiqƒ}at65[nS|auJu5Iq meGbv̔EM[ƭ]] ģ("PS0H2s&b"fT\19Չ׆Xf[#3̴R\7du9 7w !'fe7֗8յ̱yp6xyD%N{] k2bET<dtʊ*YLLX=W jʱq+RbeV;Z .ڡ6w+6uRM8m9j۔Ícx۔+.iG}#vj8TVaPPPF1IvZ[R1Plfc92M:ueb V;ҸVBRjV/(;ک2,c0k`KT(̥mJ9f%1lXQmZlK1 )=vjdwl0s GZ6' e!a-&>ހ1cTRsM`rKmfbjZY6ٶj`Vo7@wwk]FkXJDU0.dZJ:Ln] kMԧlGm >?Ff_8㱐S ri9S|](Zюv՞ٜ+= 3c9[*F)^iM"k[NaA•.E/2Q|˙L6̴15ٲ #d5T4muEk4.fce9lfٱ֬-M#+p1Je2Rˣk]md"V* Y ]m5CmX Y`g3l15FD˛e+s4c }Ӓb1o 0DFI 'z666(꼲KCTќa8eHF h^amVDF$^l;nR̻E|rÇLVƆEi*U0~w7n.Fiqٻ K\&ku3tXGÚ_6Z"eS)nDOcw+ "yתls`?=0jeUr}t ӁvG T:bkdjcDBKS $ea1M&T`[ʴFȤEQ"45$[7fE&"ł1EXX!]PGXjk4]i]K e DY2"IFm pnf( \MW ]c$MJ HPRM"ŮA` @usքUE][R&mavfe;[*fNZ. CfYX"`*kXR0pDJQZ9QKKcjQh`SNRK PVR $ Pd$XCt9y9|DNq̈cIdns8 # HW'M/@qt{bJY_͡>Y])¦GGAn&vAXCڌ U- 0331+, WRFKinkF n9&2f 1Į6"&4((Lc2 h[mq%)@5\+S-ĵ!PZ6VU'DiZ5FkQYpŲfY1+J\YFKn Yd@q ҍ9Tf8Fs-ne&E59rD$q߇"`ӏ>@dm OO`?=Ů`!݃|} *+&[|?&"rb8:YF9j5]_crxEwe`x ?,Ϟմ'SJHuW*Xᬆƥ-24 -qU ._kCЇ1I0w[J zٽSQ$H(egdwV&\ DǃPk'7b>+s ,g`*pl!kSa ]Ej?s}o&fE*鈰HhqvH]xqD S6&m߾ Y2:U!aݡg=k|o6j{{9BCٹrːrڼ9 ĄL2lpֹxxоnp[Κ'ɾ!DF'eY JyqǨ"L[~t3a6k~x<>󜵼0>9S7\ϻVG#~'U吶YRAl(B-wN2@7{ܽ共EϖPJ oH;K5h aCUS ,G&15X21l,ݙߐG;6vML "5- 0ŀOf ح*TVjϏ`af.Ǭ)]S6e -%S6EvEQI9?|2!Ks &xBH-}ʭ!N[+jä u^+X0뎞Lwϳ~{ްhǹ⢠J +`eO-2 $Os2ȅ]Vȗ`΅B&6R  Qjr2Ee -nAf`n~3@u~&zb.6pUݡkŨzOŖ?~~gs]ܕg2mp&n?08.zVv%͇^vY;.G CZ`Ft` !it5<ܘLa]7b0([0tZF3/6λ[ LY} G?$FZŻnxhR+I:-U6 eBX 2=Ow|xP <|rݝ@s.+?sܑU~^n%ܙLpgs:LM5Y6n[m>6Q)ki |-l(vj7 dՁ `ƛ\0t,Ef2sVQj/u^cs,YX)LeRKn&͕l|sE-Ȼdqp5׵mgbf˫0ܱHCB!ٷg“- CbM?[" 8S\{N 6rtWSkܜН-˹b=| \p!R:׵wSfj%^+qOV_7+y.y\|?yC0.Zc.ZeFIzļZ>ʝ̲ѿ")F.PH ܦl5Le3{JoN[/Kh Ok ߇~)5NӅ jN\ȼ@A2["9S=ƝW!SL-V;9}ReQÈ``p#P@~A_31i\| (6B{Z<{9́ʅ>Fɫgs]`sVM>\,$TCht+"8?~ثz+)E Bg"^`t_Qh"j?>eEܛ_)Äz),O4.j3n|z[B.31n!I({дY뻏g`[x|(:uQT_+QRp-mjHoi&σH'YAB*.}^(mD V"0T;x {7NƠ+D| ÀEPߌ**D=CY8t=ƍ9^m/%lkg.L4_U>Au}~Y_oEyp.v[*B>]G""b/ll(mfCj y H1x:pR//XlzѠA-p 'ឰ~߼xoxRܐblF 5Vϔe-_y.J \H.zg|?膻1z qb} ?:*:P[0 OkKA@͗}kڍ/.B U0;A (L: /?9lń99Of |I v5ٿ å8[5cAMq ~oœkPqԍP0iY<)A+@YW|EV"΢ϙ/*U[Ҙך)a/A{W_m,1DK;7,uۧ 'v)WWYϗwĥ,9lPrp&f3ٻ1&Zpka~}s9Hj ta naxq@c[6Dyk>3u.ͨ΁m;@F,e䭛x/6qu:!zLS~5flV}:Ԯp@ye--aמ7v5Pևeú ja=&Lb|Ipb}GFYCvd3"g۳EI>Bus:-BZ);Rs߲cWEqϘ:;nDo^o@ UNm$ϛ۴:굮/âߓ\~yؽtT ×.{Camfw`BYo9 e8UGWh+5RJ1-C5[|.>KnCOf2[Fg(FURPp V v C|䫝 _,b U7>=]?ʷ)J]\f$rb7wk;\]yWEe\~^ $1`QQ"J]~/A8i` lTI.,R5nN󄝺n|o%PZ-~zN0,@e2T7◕:ɑ Jp421'ǁeP{O?@DT&Gg& kx0u|usQO} >V (QִFwrפQqmC54t@ƒ<ASL,j3sR8hѦakfԞs·W$ynFDgG*d\/VrgȀUcÇ k kWG--ĨK06#/=3cWkDBVY,7M]_vϟRr{Ǽ{-<9i3]gf=B-'^T[|a]`w!kDKvaXɬ%H#H1B?dk$+XCլ0,p =^G[']7?e볭5s:qG [*>b|~M+r9-[E.QCRv+>ÿ́ CBoټumnY|ڴ! Ǖuy  &O!U:ůhv (fy sĠF 骩Ͽһ-E [N2mkž}y_]㱃맂L5~:Iq % 6nZeko:euTktDhN.;lͲ(}ν}'qlJ&|e'p˛F/iݏpj..\-[_g*q:pVY[!YR˓A;Z2L+r T|xTUiUt$Ⱦ`СsF\1!_Q4RC /WNԍCsi)BO<~m'DufEc{hh*XUF0U._ 5Ytk-F[L/I.ŞUhZ{za묀~wmV'^lzP[c*Ae Gg "1QLک)AV"#ƨPP6iw>W!=\{h R8N;κ2DR)htNyK5pBN\1}3+3"M U2ѽɸoSKP("i29=Y4J6H' v^y+W퇹.[TE8xC$wp: j"?u6W` ?ék2!јd0!5FޕAY'RŒ^eP+ly B 1[+CC#{P07 :KPeo5FkaN(A0795RI8ި /@[B؍>wa>'3E$L:T8LtCC sov:b۫ $!Vgm/a5 @]+EYvia&.{/GX1ܫEWx(3}1a$iאT!? Նnسm;qC=I30Z":@"PRe}Wc^( ˸Aveb5 Jpa8BwYzh,r\2@/l89gxеZ8CrnA:TZ`YY7PF Amj$m|RcMkC $*n-eX[%>F7q2;jsk@,9SifbrtIxņ+H$-bfB kȂEzp;rh1#x b@%.Ggs8n]۫@ 'ϷOi'VJ~JpEZe. #e珡1ʚFD+e8m5v:"F,QݱٷbꪼY pSdB8Zn^>Z*DFDR6je[2lĬeW̯Ҫ&1ذ3oD+5֒[{zʅ[:#J&6KsbpkXS~2¯NKn2VWC6 ,RX(AiK1E 5 VS \3e2!yh%SNN(<wPؔn;^Ќ^`4T6(3ٍ a\LXo%Q%k7;ƿLXX' 'xSw Xf7*$*J[k1Y ߓ3׍+"8U >nk'& RͧKwC,[_feF-vee48(@ Q(o`٨BD@XvmXslرԑ` l. BK6[ Fy ,[Xžwld,iV"a ihybV~3J=3.8 [gq2TzTVk_.8.$mcEL8δUSLXaoke6hw" &ߘ 4<5BfY9>Ja Qyjbo9)_K>^ NJalDŋ -XjqܳY;M#{(42l2\C_ᒇ]:nun~U lL,]t2j\6 Yk_TUl#x[uPmMZG( @˺u^MO6EX<\HİC^,]V{&S`n'xՓ+"ȵF\Uco"(DŽƛӝHusyQ aM9 pWTv*r*hnLQ"?[yYZD2r1r{>v. 4[+c-ѢVidԖUߚI^ܛwܖ Ninq(VUWmHkߣ3PVӌJE K[Z_M3G ㄖ%꺆Y1 KuF+"wȥ`QfVZIEq!^ -6\#zуI`]bGn/gLzeLD졑W؁Ы&K:&0UsmTS$2}\ddߔFHSE,\i7)˜ w\VjΒpVM)D5W>\q?^l|$4rBk5 `립3G5]Ƞ)^ V,AScS q<ţKD+01_ d41m0|Dlw(֏[y|w5hF%G/ ١} ,s`s(קU{*H:f*qMf[aðmF " <صOs齏Ȉ"* | B B(e]C޺-q'EQ9 r:pFBSG5m-J;bo'ÄgX|=uz hb= o2Yj&O+5!2S>Vy~B5Tᦿ.'/y5Az`4Qas}Νi~jL\JyS*&_vUِ*U[%76f^ߏF.EV6uLv7vf&,yNǖqٞPCko~# >_eH@i]"JRQ)$rn^:y}zVJHiŅۚuP:+Bi$t~DGݘ*96 ~EG+“ptA @!!{E-`>΢-Z%Xn"/$x^fgloEbL/x?Ѐ{58tuNJba5s~+TJ`:f!|>T#a~ Gqwu`\@Օ _nn&Q_*dʂ;NaIkl 8KN.sWWa՞,u܈?ݿVӪeeRLtdMT~SNhcH'@A WA5DDP|-P.@ڬCUxXZd.SPݥ>{EZf;8N#G\͖b(9W g@jZ TIFVJSLQbG(Sߑ𓎳 N3Aa@l5nzWoϖX]/yRby%@S#*Eq; bZQCֈ|*`sA>,?DwqQOXDK4C0@4f{&KC|tWэ=|֞"yWON'/:ނ?s!Xdy{+mm{흦[LLcz˲[ Q6fZ"Zd%n᠔ ~H TPXqP ]@F$ Q@K 0 }"f.&mJJ4+tI[|wme>ftOFBa>8@O~sr."&a$I,;p$|I+-M-Ne,V5!!;[H}s*'b GTU俣ݭCy1 d9F|~fֲ7H<}r/4oS 1;썚xb["}Zs-S&_}BÚ_힣'gk֪>O{_ftjU&YFck-Ch%/Mv<}?Qs7f@l hCXE} Ĕ(H u.\ʮ'P>=F0Y`~dXvR✫x ٔ캽ޣZ#})`D<vZ MЪ Ҡi(שO"+ \m _O 1}*w"'r>Q~Z֋%@F@Zy;g#sdr٨l^h'f! Hbbvo7;z _\ *8+uU 0X O,XĝYcM UFS懬z̻a ʄ-,$v3F@$Ы<jY_P@ l8p$.r9304¯&)jZ{yFxy-[G݆j8MF (l$ ۸@H7nֺ'!7p R**(Ȉ[]Z{1@]'i+{+>F0(}VFw]uM7S@n4m7D,[={ md1>C0>Uږ2~}Ljjrd`R[k;! KA)k)|"1!H|S q nuHV0͚'^湚nX+wp\GsĠ1BK^V,}Sg[uF^Y|ie /eM|a"ׯmLqvS{q\TQ 9x db" UPNo,aȘs1J/hxN!arpWJHX{!c;؍׎F[;DD8Xq dX칅Al EpreZ# *j,X6FP&o7!*뻈wJQFȁ-/h`5+sKBu<ӛfCZU/&ݶͭEںxjjpM&3N!?Jւ)IkeZ+I]40b8(+WPNRyX D@(U҃싔eG)Pe;7,2`|@ UCHzy}ws|!_tubOSEC`{S;0~o((`Akc@wJaV *gSXa /1GBW|+YQUlb[ZDŧk;FnTf]~#E9X:&({& `"%NXXװS0#u’M ٙqd6^ejJ+S!PFEvcnlPKi/l(!3]aPTo{7IX@meq'MFOΓP{>_ %v'l9UL`Q Ct11Q PTgJY(ZU(UP}ao^^AF,^XQ=?Ck p " D~EW&/͊\(~? mϣ`am $d \ЙJ.3 `T`4b홛KMV\$#R-K ̚ajK*j䆷]W_Ѫ,?=r7fe%k(-_3}firIe5?{vJ`lle6ԡ4\)++-ruj]WŚQm̅s nb +qsj{3 Mq"$X2I&޶|vJسS|xk:k'Eb cvKn{Z5Jr |6|S+ՇL%W JqNQ-= s`z3U}"n*D?T1DU\P mhMgТEǟM8GE|vjYSe_?~kwa^^b\FE&.PSZ AD9K H !deHE]AMm'I""(+TX R1"*3 q|%?*8Z=&D_]sa]~-^ˈ2 i2l[g̓C>cHd"d0lD޻L?F gQY,Ts\ժe By 4vIYcڎA?+1CS=cXyܯFZ&$bojRuRk::w:hC$m eإ wuCAتKO l޷ n$s,`D'wZaf%JJrT3f?-FnJy[dԝ>W[jz)y5@=٧xݍZ!(6jp-4l }64Y=ݯŌqAW 0DI3ٶ}j$|H|H/ ^V B@汗&SE垄)k/;oc\VWp5DI-p_S:br%? ۯ??B~Cp[ q0ײ nnèID\]kJ,LE6R4I{c/ܺ0SOk<26/[`!>G-Ly06WtlMmyfs{Y.wYչ{ky8cj "u~[Ƈh@oIrVJF@Z҆N FteC)HAg_PTkOFG#qO__S*|I|9 `C"Yy{km7P3!_^)>2J"{:=iGo1]u n 5{u_laIEP`zl%㋿ -, n~ƀU}yyc[V@W1ш(EySk5dj> nDBӗ\2\!QĜ-k!{jsD^%j:IR!Dy&n-xa*-< gsk. Gp͞yKQQ׳SK8/@Kr&a篩]%y*|7r'?}.L*HGq^8=X|\he_#U=~~q0ڈ̧=-n=n=nißá$S!<lbP`l 5כR1B/'Ɏz9 >zC/LL-+{|*)]ZrK.zjjMY[L4le.ov=-璇g/# ?@3j TRđЁ2 0\;$\id!Н#u,5?[( 8Rb1%BRb) j+ T Y ,d`T $!cKeJt޼~Rk'qՌ-GdyxP3W >m}?gI>.Mߪ+Ҫ5p LJqjd |%٤v ԜTjH$f$4E]\,ءP`NQZf\S16phjb(pLDQ-p\3&)^kELfh]5BKC~`(I3,Ć~=&!o3?ztȊf7L=p F wGɇ1-s k~&5[V_M8cC lz@UO|N tPG:0vDxdnܗ*TfcH`?Y"Qw@K:O* N8P $ "Q>q*A*8QPQIAa"  XIҒLb3($`@R@!`6 XB-[tq[ TPaqYBib2` [X\,Hl`J 4b`DICfC XmUs!9B%HD(0XXV~.R8uR\Bͅ)m.PXQDDKI(" ,b Ť$* 2 R"* reA @@"@B X@, )@P (I Vd` IdX I_B,ABH#! 0A;́C(QS1 \IAw啂 ?-6\/gxfdŔ"5Dl@ }=As(5GVF}/k uC(ى{pkyp39b~{wl4ngs]QܪFB31P0(CLoϔD6 yU*^;_rﱺ5E0pT H$b"Q,'n'RWsK8 ɣ*.BXq@ %ƈ\wopqڥ1 &`6Ӆ(cט8۶agcIJ44ls5f|N0(\ :bY<0(lbBFNJ]h.J9 Q la 42;6њi 3&kP.lFjѐ"a`%8K(!/CG twj%2򊂪R8rAGB E!⎞N Eg@wHN*ܰIXӉ:0ȌbDX+pܯy1U?"|)hH?6%fQG@1K[-(זqN|Z +DB$` [`` 1"AlR$ #(BR-$0Ye`"dj!)!e +( DFD b0A!cD@ccDF(*b#ڢ+V1H(f $T Aـ7= ="m\sݖ.ƧWzcj[؅S}8eL,{_i=& Q TshC# sQ_퀊i (sE3Prd>&z;K )- f7gLd@ΑNZ*+~-AL^x C؀1q/cNoԦV[ig]gg-Z'}d# grO9; mfX;Ç ɽ]]dgy|5/Z'1է[0 뻹ADE,&Pwy9tO[+g,.v4!@?+D7钟v G%0j-`3C-z~$Ǘ6UY#-rÊN~D`fm`" E= 4P?@0bSO*!!BlǛ\e3Yyibltך;LU!_+Sʟ('<':t F@\t4W-C zp~;؉ 4o9S^Mȓ>"569^?NɈE r2px1gH☍`j}a 1W@3'*F$H b'Ss+ٰ;i\2&2,7L ԎKU vnى{g-. IT!х3i7dGC9$66?LQ|)gRۖɬ"krY=(5Pcy3Ҷդ%`@4Tڤ[il'%\,D6&KCV.ژ,H[7Aa׃g`1o Yk+&CҪL&D"Xb5hkeпS3# >q_x6*}mɍ^HLFWУ{FrO̮sa$24V{ѽ: 9TF$"j?8n:}: [wE3ٔ"`` ऴopl=aיe bf28Oh RL#a/"Ub!@X 'Hr@\J# ofߥ _ DN IQ~f=ULKofL(+6[\5N8iUxh0I\W%G H_'src⌞[0\'u ;b"ej3q4>4"cw>/$-{?tC*ޜD#U J̭@y!ϒ?˧`,SE3!_<Ã@]a{Xe_['i rή{R!N˔!Ͳ"p_ !ReMp a(ɉPfL͢-{XDk<HS@S1;Ih:&OjrG*jk`DK43IqH=67Vž'k{o?m(:x=;?PZzp'd"n8O7)yPf^TS&7 7TV#+XƈǞ"A3}Q \uZFa`ocvڲ)wz a@R/:VJ.~_E{XMఞD[1;]>ٯ4m趿_bOys_}K$Y/k`\m!| &寿 dJYe;!7EH<0POJa÷,LB,?(hsa5ySRSlŖgcYf\qɿ!w@"wGCN7O]ŁG5;*HRAkaƿOW #kߒ_3;lyzI(bٰÏN0D["aA#{@q=ӻ|p Wj-H "_6]Df &Ioe0*8LȸcOJͪ:S#0a`mKz(AW C*0䵘/;yUq ݯ<f9 Gd5JSGX׆F@|/Q"Μbm';^)1z\PP&"NK+#& 3Pb@f$VtA܋2]yL½ q@ƉL>ɓ& LHK|۴渀CHz1Fϻ?-{,;9LH9Gθ|Q XրEJIyo6{ָi>4`Rwwf dc ;t8_ֲ7 dpדG>j`ƅW`/p>}dެYy臕i'5E9>:ώ«P6Ptf#&hW49呰K@2pT*`zj_9 1s.AIlP)Er`~롖#!6nMӀI5eNgW-}(Z8 PPTL"?^U-oӵ^rwW/6la / ꜞÂvLɒNzUDކU 7vAuP73Tr3.A;H{.(gMPfE?oŨ =qCնpij2]z-l HBòQx|xteτ`Fe H HfEWM[~uknv }[J3bx* S$o

sm7&זrBɪyr, NE%l<}Y;[ČA<օ+ `TFw#Cͩt EE !tsjv˶\xRb.Ε8,]6i7"5.5H3~ O 21zВřґx** *]Vcz|GKAD9c3U~+X*j0bRn=? DP[ۖ53GQdIxf'1d.WM19笉0EI|"qhL^j ȝ+Mb?{K͛}}q@l'ԝ- V yV/gD(#V#Y\3~"Zg*LcF@D5+JE/J"oX x}7N>9gϛr@fl.ǣw&ᨷkar*͕"225I0 Yמ4؈8t|:&:u)@; 6sF+3NS[E定zc񵂯9V@2rv>ߥ~ jCY?zBAW g_Jٞ9Z`NdpPھc~Ko|d:Vg ';94p&?um=' cu fmҤ4#P;"X?/TvFX|_I#ҨZÀfT|`!  =0ױ@n`O]Ys4l4FfI ce9K $ /,Tats]LlSM͜(Xx{&FZxf|QB}q4|Ui)z Y9zK?tǩ9I=eR̽+B tYӆO(q$uuV̟GI0w@b;0%(ԪXhy((KM%'VhSn <4ŭZEIn5O169mQLLRF=V?zդjIkN`L81-_P&2HjYZ:ّ%ڴAc N(<(7 T"Vʚ"&$Q#4&0 RVH[!X(,7iXM\l*AE&^5`jȈDT[@8,֍fOsFk0+l[Q*-%E,b"m+ERTXSdp?>Y q;w1"!Ů:@^wBf2dĀR" L{us;=DA-.pyYr!#=hDU>wR %WKꃻ_~`E$U Cފ;xkgゔVE"TE}OA1rInw+62cPPU 6k;~:m'gwz B$d"yN{>V8=m7 @ؚwd~uW L@7,Gkyq OYD")dUE3j\XB"X{틇̏cDfdJ6DbZGD(9x96!;q]#TQ# B0 Ad$!D,B/||xz|7F)Ne8.*'N0@t 鳽ךꩊsDPEl, z1TDXEFPH䯨kwT̃g7!bT~{C|36xvf(fj$~*$Iz(6/yPA 8 uQ@D=dٛ(O{4/MdA"'N^ ~X kF KP!ow5Luު.T'7i^Ső:`-n;{?c{&_'Qs{qL( )̟:ޛ;+Ղ9ٶfmQ**5㛰CK*yWxa^x(K þ?c2☈znȁq7Ȋǂ^Q \gVL@B-2MG`蝉' M³¼i>Hf5k+/fʝM蜰кOѷQ=|GfJaPiCe /0&`1e'LD"%Q _Q>鲴smC?K[,>?]-XwE:h!AAyx9jU)LJ_R_P; i./CH6msesgr'sZ uSŤT!ꝅ+.2g1b dDW2NmVW&ڢXXGs\c5=ăZV8Xұ з8pz7#`ud(`,1HS]6_p禽0͗Lg~Z]6j9 \6/*P(t%%{\$Zgľsb#1)ҕ_*G}Ef(p.X;m5 8- Kl 9_SP;=|ՓՎ_zN z8ـ#"hc@q:r:qrt0Q7IueW@+#YhɌVT+i!7iBJwrֺRد841tܸi (~QuJoY}r6EZϏvDt/$0kL|p*#GSsTnH4yyH;呑;ӫ}2q6RΥKtvg~vFcDa|ZF"UjKԉ@/BwZE2h"5e1,"ȌE/dR#Jp:խ*ߵ_Cv<,z?sX R 41V+R}C/6y"t{b:fWST`3U-fKSF(u J  74|]t)*MZ.l$>{I,lZ1-? ζ. 6OY%ycy|3,L2ߦyDn)"j"wV r L.V 4GDp~K1-*j)_E )߲u>_F]RaR}!2^y˳DOV s!ܘC.i,(HNbJ6q榙mP:ŶHz ѹ6J4{?^ȸ'3ʹ!mX5m"o n[Ӭ4ɤꛊl0oS/~έ4H!VYɖӗ%xl7AtQ#kp~:૓,g՗.$RY]u6rӥ|#5@Ԇh,!f$igje`T |ᐳJ~[sq,l!Xfq)pokӯ/Il@Ci]M_(&UBK F 5F]z0T,Y4XOd?]jaI#b,尣n=``0Aa֝S{yV&-:Ab,[L(#Hs2iOʴCS!|Kۍ۶3rDbí* uuI؆Bf_?PsOsZgk:"xFN}4Z_ܗ^EuR'ͨňAP=)YCxjS?ڄw l#vZvaLiw&PΆRzt5r]h1GYW@Ú~kL H΄+#lmw-y|@&xk"c1 z;z+ݭ_ؾa* s:`Dh22@RU?'6 zzCň!/]gڎRU0$PUX*JŊ'Z0@̌` ̫f`tt qَ]dgR\vc|~TzKJ-MBɘA!-ĥ5xD6~eg9VAu٠dR`!xпRWƭ:_-;QJE}aMx՛r+(/ʃ!L}xP(&x2ZD3:#+PPD^a /54飷_V#BƾxP'~,of0=C* b7&%7YH :@+}\i_+b8*|*Zn"Q5Ezle2>NKu: #[\dS^QER0(8>/e/)Ex~7ȹ.wЃO+# J:'c"`p 9` Z@BL߸|υ!]vC7ʅ'$;}%h} _3%Ƌ-Q ?Z Fuq:ֈ)ou*s1g3[q<]~[bs^N"z5 ~r<>4=N=ZH; e=SPd@FE`We-zt;?kH!Ί, PRC\i_,Jcj`uO2NSLsUlD0 V<ݽ=oUCn ϩ{فpM f\xlaBode?=D`g}̺9.m 5P}"+ǿ# A<>ʆrj2Mfݚ y:Z%aГm+SF:r*nps}=Ej6\է޶'I-|J,vF`HS[YF7k)d>#V8D5*پ]kq'Ѻ[\Q |aՋJFS{^qʬ=h6p@b˔X B)off7vfmᅂoSMMj)\E#Nw9 Uz'ᙷ(݅.5sruPEF`djUnb8M(QzhV*iPa1X=2fDF*pEɌ*"PI)M|QRM.5,Y(`s m~#ڗPd@zx(G YJT(v\֭\¾̃ݓy8|t>.kG5\1FDkp8 M^M+\M]RL"뒕Ռ8nsc>sThႀ"Wb!No^BGP6@;]mB}m+c0$]6n܁HIIl%RTJ8E.BTU ۿFz[be)Bh*5#fBES |E44$+vw&Q(ܹc(ewo't( `+mgCM1`6]XEk^vY\^vFMZIaXwr6kI #h5/̄4w٥p@ EQ~6Xc={Zi̱33 ae_+=9>VSӭd$ ]N;#(51.NIy]CZ{u+O*zǦ\Cƣ?Ĉӄ>Ĝ;ӟ݆;(wTGon!kZNtNWΫܐ?c{Q2䤦j! µ} H lv- ” llrkPl@CMDQ,hNû:({ũ&f_BA|cq /zb?mBz,-EKOz,i6ܕs9>m>bgwyMϑ띸}3:t;.D(3U%[޿?ϲIwc75T>Y ֞ Cʯ$lR04kEL$2ƪC6{%gN?3a֕yIJlie'ȵé p/;[(3.Z.gY[B\ftMuVw{{N^\0 8s'c'AZ>lw"sA0]P s+;J okoojovrv<4͂% k';vUI#/ӧO{%eqʙsƍ\8M,1e\qyk ;z8p ŗQ} V9:W츁z#2D{Z'~/sdzksA1?q`l}nY9#f ZM0]}AkCK>ߐ8 $δm|Y=]+_̮rj1fgo*6*:G,F$q*'abF8 NO?bq; BgF4 B9H{߉R_#GŲ1T{?oZF@g2']Y9:5b'2G@"ܘi$Xj Rjigď*{'jueri>>d6 ݎj?2yifN7nn_,C2,kyѢВ ;֠hV߯H#[ 7 z,`Fug-^0!΄w9o^? 9mMm{F-e^B9ִv̸5BLk݆ g8թ[Bm#!">O;{en5p^H^fίZ%uusdQK:LӀؾC\ŋ $dC+2~Ad4 U*"QEQaa$UB)VƖ"b$,R$QO;̗/m6R8o ׈zq91 z*l`M t,/uo_>7LAzVsWq%FC,7]L/3[Hsz)g0F[!/:@4sWLE苴?'%U?r9@CYwtExf8T?1?3?!?spp,D|˩d/YI3^Fqc?zmI\VXA'TӓnuAR$I/2Lځs^qM *aڇ쮋,?FFK<A0' YN?l ;Ho HT^'"&&KWEiIZUcŹZ>[Ejah.M2-T`F 6) D1,m}9UM28W9{FRד5;Gȍ?ҽQ57]q Jsx0qj$XJ*OUsZBc%pHa*8  \ U ϋ$$YPf aErŒfHJ 2Pi, 83f'D=S \>` ;hΣtT"!?߫: ?B] /9ϲ Ǘo~68_Y9& c^+4"zE؊oe3'nLWL0`}sO|JITAgUS][dCطг>0)D?vʧ>=orZ>bg"BH$2.7ݏsOK{l†pVĠpFhBUjIQ-hYY$?m 'I\ؤX\̊ E@!w} e~wT0Ões:_񻾿^{Djwu+66k]:O[ Rހ4q_z:/Wz0_qm/yg\-͛'Ǣ(# [`  ](Yl0$#di-3G_9GAوW[axAbWc]ww+0eߖIk ɳZ2".X1Ⱥ!4ZL(@OL #ܟfBl+%Xv`0&>a/ԽN[}ن * royF}yuAxE(v,4$`)OD<# XDõ1*ʠ_?s?৿j.;3 Kb\gX͍նVEֿ>?= s2Sb pUX6}MiI , ' +AE>H`**(>S1˽UQxsmnWǶC.eIғJ4z_P>SYsWҕc@wY* +J%1Ru}`_cy@,#>.A !|–芍SQ^  [T G<.NQ\}toշzV.Hۿu Ny2M{9}l 1q)(1Qm֢Zmc񨜎K^S9*w_fVH^KEX";c/bm^3?-22~prXX9zҟ/6aA,L,rcijDC o7>^I-ycC q(*CU51‘N IEĕO+A]Xּ=lejpІ9CRe w(2GPk)Ҏ'\Ѫa?^9,~/Ȝ2L[9 #{8+_J%WwCqfi׳w4VWj}iF <ޝiJ2/:rt=e2,CS,zUV ~4]Dǘ/$$BeP=:,r_{~{~G?T=edwo|p}N[& ~d=}`-.+>2JDwS<~K9q-˴ %%@T$dI y XXUBdoaP?vvxszUC&2 )$# 5r4@d@OdE'0;unhoyV1{g>DGZ=k eϹ?!{|a5ml'Af,.|ʋrqJSa1kNB׫VMKjHʜkif#S6u|Y'ޱSW'c>aO3-4jȲgv:ѕ{Vu5jT?uhO,KN6,9 WbM[u5nh.%.>ٚon$%X&Y=;5nqWs\Nmc_Oم^m;YI߱Ыs%)kwfR8wkIWol_ASh1m__7/95hB.T1neI[Ҵ&-^ K}+!wjؿU$B:W_}Z*qw>֙aɗhí(;}g~ڡ0w &2<2@엺?c`uDVB*XW4F!v15™gR*fɩ ZȤD- Yn# XQ*:IHDU=U4 1)'iqˆDZ4C2]ǀ!`~Hp=qPm+A-} |_O%<N@E: m\ L!-!Vu-K7AF]n?pݜ[]pmVdζKuAetҔRvrl[Y^ ϓwEA Cbr`# Td9l%dHd &V@6K10dP:Y)qDijɈ3 z~jx{f1`C` ^3JqHõ@QVlu'?AI9 Xa!Hacǵ/N/}w^vu/Ǽݞ8f^g:ܡ9*2K9}!ވE*CN7l_欛Z:ڋ,:L)7Z~ eܘ`$Jt/p?*4ŪA)(˃*3vzS W7s*_kޥ.ml7 EG; ?˒)(н4tcz7[:["Jx,Oe $4nɧ_R-=_ޑ$_q}gGȗ2n<&f2bŝNo!vjB}}kgrcy81ez-On4+ *6>Í2|YpbN*;^(0g$=ilVЗ }쳲a2uEoSGH|L\i&Vd]rFg+خcR UaGm&a=a_uWߗ' Z3ݫeic"oѻZ|Y`O2-R$[3y݂يuoznf)/s[t^9ϡjӌ ZO`FfB! @ % e{DZu}W"5 {i35z'~{cg޷fG`0!!D {6?oXo=?P>V͸rJ9;ϓ>DzUj\[[Q0wm~yxhg}:a9 ݷ9! ф ) aHYr ڝU=R`Z=OcR̋HrcV0Y.1qoqsvu#.5ٯbh?}7?yDbGv?~^N߾|Hm? }Dg&3N2',4pcXQ=}Otc*yf4U%e|ksjC1yEGg]/w;V7+/\ofŒ OpjҼ4Cz@IXvhN0CYm)XԤf#">U kjڵ3|)ы$ՌkRŢ:͏`A(k&PC M@aP@fFU/yp* \d~2sK/;x [S$e6x?s翿D8G\O O7r]QWC6pxdu-(`mٛ^WBJp]@7fּNi?UKoXcY⼽rw5.꟦ Q፮wE-'Zj"Apmz?b}*^5xaͯ9: 0 J!+M/3r"ib-/P8nQ*$[^T:03T&mZZ}cӌߙT*χp_>UP1O 2A` -|E st`K:JnN:M,ݦ%ck,ni4hVfLqXVk}=m3ce}nյ5=`#55?UhQnZ0ͫ1[CWAmw\`#Ѐ-uAHB"E'rc!RJa/U8C4@ KTURL+,1X( ,&2R(E)T2+ h"Ȍ0ECs'x(=cZ m*XDmBԛ6Xdu9faHZb L҂ˊ\Hy1d08젯R"湧PzxrѢbE̬MmɛR 7+$фe25R߂xqzGٱ ~W[;kMG7hrR36|zml=ZiJ~ks2W(Y?+۬lJ޵.V[&/u~8FA%%fDC5dj{(kO7a-KgpO1Κ`%pUȜ39aZ!opl_6/C\-#|S=-hkrORϖkg^04p\H+QYk<8_>k?: 5ݳ5!q2$UnhgRzyԱtGPyjе" @yt><CiԑnX2z_X.` C>#mvp<9ϕݎ'|7',/19 I`ȁr h9qM-Tj=}Rz!p}-ŲZIC.VXO 6b5a 0 ziD.dԩLKfvȢ3Ǽٷ;#Zg+ qz"V4MҴ#,.K bYA@D " ;ȃ Oz]wۈhl9q|ANL6CJbgl|Nhצk 1;2κi!ԵQs5\ڳ P1E{w:yIWyRCqPDܖJ>uQ\B@oCVڬmQUo{X0ZԍkƗYa* esDk")Ghâ\|%ys0%ȱ- $??VN;1 =jրʒgcۏQS3$\ERrڞ;(BNv$i,sb+8սHe^ ɊW*)Bk('Bvlݬ¾VJY)`.IS$KYsevzնoF܏ywLNI^y"iH$Xrq;q;,>_}zx\v-{Ayÿgi_zV Zյ+˛໥_!iLZuǢlvwݽ+YY:X,1c1q qiaݰ\J;Ȼhϋ S东gHv*SkCtj|f= L_4 ʸ]rz;HC76BIvd^>|+"BD^57[k_κ ` yԘKsZ!I};?jA-Gno 4y7*ӁʒpW&(B;9n(/rr` @ Q=jf߭qwLΘT[߁x޼ᒨwY]Y kZpا=J<Ȅ5D@ yeuҧjbb.CɰCzr[Qg >S+]kØW1x}?ԫt XkT=heAC6&pGej.MeNa ?NFg[: 1DZ*R.m(=:&t7eD(!*Tc@&1S!1^[Do&`xc\S07V9ԵS2mu;]h|$VSCֱH"q{CZuƘXP1iiѐ '4F5 *ZĚ-W1I"[sߠNյ'WB1m̥J)l|]HQIR((3Т2\,3^oFwXyÈcQ@KRׄȅ%V B売tjVbnqCY}Uj& :ZNZtdA@D"h @ E,,^ey'csF6Y.s24wR@R˒I$oՆҀd}  r |̽A]o0썆 !ZTWڔJ<}5#B(15cA^F<9z S+YmTl~wĴ˫e,רlt>6߇/b pcu}V71\ϝeS6'%Ytiu?}5L~P8ؑ|O kE0@0gHǂ`,yR SjD'UgklV*sPPM`}Gk|QF:Ybdi ^ڟե .@8  FbX{^͎yd|/Mnl!hk"ńUEX:/ fcu[q[; {0_]wD>wx~F[V;Qu-֌dݜP=~raIĪ^)jA[ a5* "^xMfG^q%qdb-J{9X-IN@+J~D h[ rSBվCJWQ[<ƔAJc/hI&ҹSJoGh[p-}/g `IltBaH3 Ekw]Jm;(?ӽ%(TcnaJzr`P]OwyJW"",@H1@EH'SE ?Q`BEY X1"X"DT"g>Y)xJ2$-?'8q  HBBEXb (EA(F,U"F@IȈb*1PA X B !B0DA! BJԈ M?_p_W?q{GpWlȆA\[A*BdE A3;XE 4K80]!ea[HͰf[1yռ[:S:k.@(6 A$d]SyQkOopEއaD{3_&mggep5LZX {үV30Q  #`d$~%BDs5K%"ȇ |*4 8v CU=؁@4D14vj([;TS!N8sOO 8j6X@9d*wn U_0A"[0_tOG:1读rG9bv{a5/Oeol)ƏW5pp@؛סhqKY@܋yɂHT[lF䱏/62lq,9t`0&E&Wcsc`b^}uϓp`8߅۴'~c!1HҙTiEf_Uktd7~m^.eg 狝-c?RWUx:F$ ۾|LU܂3(mOeimgCeA|meyrzA #Iٻ%{™\>X%Ňa-Nf3|X`#JybsM}_a|Q7DGքu2/!h?X%&zKz;+1b:$˅Js1Ѻ(}K:{k^or\= -X\JUGSN}D БvX28m4 _O[ vz( _d~yFU4Z&1}`!!㌠P¸6E)-.D:?4:dY8gnݒXvǖk_vowҔ@Qu,`ndgBD4!||) )dcPF;JrĬ)AA5"lw9_?OQQf+σtD%V{x֤,n-+ulO'{eLoeUqdA(ΗԆ®J[HdQTF^RKEbw֩[SBo^ͨNYy-$j47@1J &H;a~zq_߶ƕ'p}rr/! nqa[(D^W."P z^X^:~pPOPDQ3&e{7\3\қrR #eE$# /WK`#/lCF uPh?LxZ_ٲC [/ȀJ=̩wV:~X!_ )%mǙ}J _kN&aÂJwq/ݻ"(vMu{TQ@8H|;w ! oSWE.5r؛]Ħ##x?xG{8ƒH \mLrQs*rfǤKb;[aDfrnUb[KepMPhhyHrY X JؑM8Zl|*j0:X|6zoygH(\)6IkEz;4O 6J 5/d@@ȰԝsbẠ}Eu토YfZp25@ 7egpc6l-1F.]j(?XC2SY"[A+R[%I(M5M[k`Tf`Y(TRA l(ԉPх(q@Xq~ =rM;]T|noRB)v d@$XARa-셣POjt|Aj xfҜ*$%P\/;>\2PtpIKq}ZANm%ӻ $gl.Ͽnn_$)X赸S]/drwAk]j`";8{V蘯Y~J)aQ4(0.|l8aF@DF@ɔ 6 [qܯ)k&8rg? S´[WcGif 6Fߍz=އ=L)Y1`Y< nkCy0ʻF+AX-]j;I<{wsz(bw6i#qn0tGdfE"s%-TC:ʎFN i@"$>OCָ`ʨ+_ݕ4|;``%`RS]K eܟ` Q@Ih%;o>yM6>FBJE5M)ZD̚BIsͰI9<Dҥ`q{ Ыk}k`pk\g i8I uQ\!:8:s ݑo}xE\P5( WRBe29+V6*A;Y"Ʀ"iw֪8l"TDZH amIƇ?Dq,-)g_ǺOEO^qw@$6mƳbgG;<4@Ed$Q"$;]$7 ÌQA8.cRRig6E 3TGw O]̉ wE}cܪ P'3j |-=-1c,}>v:dc⡍*I}uam*=L;s8 >ok]9o3$p?1Ŋ!nZA"&{2s%FÜCr<Ʊ=έ`qW¢h.fuEM}‹aQE`(Sc8Mr;~o_^mn(V_BM)P2g ~^Zsب5mӱC 4wIOMHio9Uӟ!Ԫ eJTk~:z!2I"&~o na]H,{6Q࿡(:Q׀q.:ՈӪdJ:8fԶgOw=ppqБXf'l$[{Щǀ?M|o5Cx{\g("T( ?d:6PP Ą'ȕ;>^hFPg}Gz 1|M߲q *sC&s/fJB'FȐFyĆldm8:ig!/ 0g",'/볾\w5wOL "C I " AJRT#@ ;l̖.Վ:Kkiļ&,@5;dzk?P>Zi:-DqJnM4|Fv9D U"!JB0VR kgK%HUX,!" Vrp$7$gvSk`~;Q" HF 2  H"̏2= u?Mx-x;k#Az(պȮB X FT*+,>z&0mZK-$),, A60X˜xw5XH YY2ec)]f[LXS*M2,~8?2ې~3?~|ee_1%~Gg\efqi!ծLⅱ@uFTBnLNPFQt4e:m^){SX)JRn5|Ue-0Ԣ$ʩ7K 6q ei[ @FvwikE2b8xZ[])m6LbMt=0wN]Gi?UG̡ @$"B$d"3z4sM'cryLjS"2CIc=/y.B ^z\7\X+ʤ6^>;Fi\\/`uAHLTj*ćeBQZu},9cX@D0 ":kd*8BOT\H*~q]C:7T'zVLhrYaf9+k|V8p^@S~vXH]fe%[7^n_@/X51upl|SqmzCH_1@sQ{e44LdGHQ[~3[vng('{")mM^ʵw|h݋ƖN;.>XX#X!e(Hd--xR_O);?\5)h>K/gW3MT~K$ L 9( Y/z"Eɥ揶٦S4ebu(%M4%߀жonԆ}켉ˏ I%qY_2~/n%1r9 Bͭ!juOKo ypi@se@EȘD+U@,QDXnYi4^R!uIB @PU+VQ!D4agq;һ?oZPYz!٠DH@B8nԝG˵!! XRЖ( %fd25f▐t:Ia"nP*#ŷWX@D`MJ, mMI]`X Hg636BFˉ&5e)$ h0=='bчL qt,7o 1vӍd,ͭK0143̘Le cCPmM2 H UDu}zgga\1~ ~E(; i 2y&Jۣ݅^o] 9/9$Ο4_Goc==x2 1J=7k PD1 ,[4@ "FJH0(UV0%dV$b(* #HD! Zey~OlcEW>Ç Ne}I2yRg4_Ox~E TEۮ ^hվ5S9-/r8BAyxEȨ3\M}' $Wժk`%L+4v?_.^' b\߬Ѣ]ҥfs:&OCP%;Y.k2]n($]rMc쳠L;,͒״(^[U/+f{}rm7.Ю~&Q ~B@IY ~Rc `)XX(ȢR!"R#IH6`-")X's]{mzխNjlPY #Pv섁51sssnq1L<3 G2r̄̇͛yӒlp4LLj-+zqgYːWtuytl2~g4 >_tk`ɲnl\h8:&K~&Oq.3 CdR#U JD@vzzOúGT;Ϗpx/WHzA,̋0 9gW4}Vr!Zc׷̷;zWԖwkkEuF4:<ѯmP㝺j^ ][RNֿ1tr?,Vsrsx44:m3-ɍ*[tz_$C/Cf\)e?߳5(i>ukS3ٺ٦]M)K8V$#pb[nTCo =ZR'Ta7fɻ(3 dV,  XR2 M$ʉz 3H꽪a,l9+gv IAVS1ك<IVMځva(= m-9%tQgɆ <&WqQa΃'LCGm{~~L]y)| ByI5?)%b)7i, ,KA6xܛew.!!DK orvDp9G֪k2|ǕՑ׌\P#$b ?MI!K 5lj ʯ7^ޚe^U%Gn!˒~HuQ1߈>MGƨS$Lȑ(b$F.c+Os #g2?igy?QكEN݅ v>TR4C"B)(΄*?cTlK,v:+W =b2}&{ e-K ؑr4[D*0w;f!H&i<kay} \J"sv6Èڗ҇p\5eh0>u('6)oaek"D5ډT u:EXε^@.dޥR54==#V# Bs:s#vALn{'׏ca{EF aZ* nPi_=! boVpἎ)5lW \38r^ Ȃ*dORJ;ݶbR;و) 9kd6v2=>5 ,ȸ3!ٝph*[ TL#1Buε(_RsLytD;qp Oj {' Npִ ?AespC;vT v'qFZi\eH`!.KF{"0V]_V?ix Iҙ ӓt۬gcE%d+^Z4!)9r9rV!$bs,xeISٻC朩2 {T-p)6 ӽGY5]1[٘qN;#/E3-[fyM6.-,#tףo2+*('k=u.*FpkLBf-X(#h Q)PgsI*DdŞ@:|TdBHc%s:W\1U q3`{7=27vST̵,2;JY!3 4_xQ=nKUhC.aڛk+2b,Q'8XS4Ag8֢ 4&47}b^1-ZT?|P4Y@@?Ń3,FԘfNXGZU}=YidIΝ QtX[D~e!};!dplM8J@T  5~WFӅαOn9Z{25p%[i(d"G8Х)a@KzkH zxPKv4O}D 1a٢JFCh+]'-v޹##&IJygS"W7SM Vv9knX r}uqYd P~Ǥ.*qnmݸ'SRH{厔 1ajԻK5"-Lfh)C7YZ?8( tOS6Ғg*RYoM !jQ{.}2̜PE$ZPli _yj"T{*,͈՚BNSZw&rBPŎX;O42J$:՜c?`}GR4:XJA`f1$ , 0H.^N'c7Bܹ-KU$Щpba,#@}57;.ϺÉ$&rԑzҊoiq8H|^{Ek2T-| Zz]BpdngQsj{FXq7:{zA_wDtR;j◄EJyaQZP1_0o3#~OWN+Ӌ#!fXW{e9hUٕ`-f׉b#a?бitk%`4~Iyɀ c,z:K㷂(K׬?XDZ?C%$9|9@@$ URBCO\9o}6E Tn"<oz-g vXr'wvSI3ywدı?mR'`W=}Y#Mxs/6u8CBvk1fC;\^"l$_npVU +Pstdf-"?O&\&x!ü!,V$}0u[PG"mnf a]kwv 낑U$oέE9=3*E^J!ӠZJR pCXy1o˞a*9]/&<e(ns nuSWM2?2d94 JK7>jYtNu=lL5yU6ˆ$> V.frC61b?uHLTyMYNnk5jxۺR=sՙV+f[ %ud(dBm1+ڝ{Q\k/!.+xVVh=p'^h^ * BNC öB~a;-4^PckDCg+q˓e.8JhOzr[qp$l:8\]  )z S'X-TG5Hxɠ1[-׼Ol'[A8X}!(QJac7tU#d5i|Q^ qwm=M|Q@G rSѩ |29!_6 7A8X3>\KR=qKyŅz۾$JS&cԯxhQoћR+*Ǩ{. 7!d?]30~+$b!f׹hm2O! 79AGdy@ِ Ocֳ}a$W]ӄ_qP-^d(Лp!kѨͿZ08ӂS?Vr11v?4"0K.0%Hb{iDmb4["$9hU4H}_hXw *>~'TuˢH~b/|Fj@pUW ! h9`nW񠷓)Ńo '~ e}3[v[8`^@ABl3q_{D3]-ĬyMK=^Zl U>^[IruTU8v̢L}>p';ϸY*tȪQiճ3$3^v hfP,K L|u/g9?%*o忩L( {)tUݎ¨tsҔ/i:n;;ݟ]褄~n1BP q9 d?r> } !3s D8 ޲\slHJ)ylg1 1 qO~V6"C͏n}< ̐+eI(K1p-bZ;Cf1莮L2( gu8-S;Jڇ3ADﲆ &f 35i]<&1Ʒj ڿSwX0#dµ@Cv yt5x\;:L!~5K_fR ;cd0sR[nl7hFA]`D/KuW0# xu,(7e53w}V R3Gf/E8̌IW]5L#^f<@cpҩ}Mձ7(mז}EغZ k9sÈgr3B%Ac~Ar={:YHbwr+.YamӸvRt_\r'f$K]EN H9]ǕS N'2XЩ 1LjKfhOr/"6b0@Vs!K 7cѐaX](:YOoܴrtyHO}B nlER7lmQIkxځW\~I>E&!4ݪѐi$(}w#ʡ K)SuOVE*%cKTsV5mCm0.%NT& `E='WuM rz/3 P1Dҷ물=HaXB|틯#kY` 9|'}pߏU^!zU^xl$n¤ !7|V9H ݈IIƉwz#[oEċ2uT* vaL7j^N+DhY-Ũ]};Xm%W6FGρ뀤' )+D8K,~ [?!u:7؟m"c?3X:ڟ%0g!0vr~/T3_# >{/iMjˣRB)5aD%)Аx$Ab:ʂmWeMO%톘(N따P:|+l_bb{ۛґTJ(uXzX*$td@Wo;ur/Pw,MgwQs'&ZBug^  £ctqRb> N)8=> 5A׺!@>cz4H밹Ɯp#ֳW Z"t(eӡP5N*kĒlf!W=Ya#NVrk CbtpYy{?T? ( \w.dM:W_rC S!P9F+NujW@*3hE:(%Ic!EGXgs'Wa+8[v`Jw[.[kQmXVnñ?JQ|0ϩ],NmWK8U( =?fUkЦ"!NqE]!d1mJ:mVs 8tݘvZx1 ϳNG7<_Y7T*ވN_ )m㙺ՉIQTv)Fa-](4` f FK6^x]=4 ƚo?Js B2>+׏T(ӆwuJU._ֈ63;x8C]}( v즮 פM4l2-@9kL#ƝE%Hq 8QmMjӝ[@L^}%k$Hx؏MGөQeX2+NS@WSmQnSpsTP}TJ5v*3<^2-+hZzwc,*d;.VmiG§!~|2kq߰$@IglQJ'$k }qAf>,Ǟ#NѴ^+rJlۖgws?k=Io^+[kB9EOo`H ed*6C6/?~EŬt)(wucQ ] H,cMv5>jx f%L ʡO^YQDvbJ3'sP#v_qή;$4~g6jk0ĝ)hd@my!ZHO8 o"'1;I0Djq58"J< H94&F 13j؇ :-=n^濢$_6fhy{ʶMˇ3 IL]|aQpÉB~Gt;{nz|L9GZ)k3͎_Ō@Klm*|@P9 E a:ǁ4Z:OBKʙӁ_3SS>m;3(? iTkGXRX5AP @,Qzzh|R OjY0ȉȏ?4`c(X3)w0Z[T@絰Up[ui:\3_crjxOW7mzC ">v޸Q իo~S+#DL:đU4w[\%!LWReXv"Y«q)=n:9*FE 3),^պm ^.H*%_jqu VOVPa]櫕'GLҨEug XA? o%R0HK-BxaMqU/fDmI*s Q, )Mw[*Eg+2&e6[wBvqvcYA YUî1-ênkf$;}fxU(`8#M(6%/W~d~uMC͉B֨DoJ`{*;\xQMDZRɗHp;p}ԓu07Z8f;_q:lEExBϮkJD6=fJqЍ^ b% %Ur }tG+֞ZNڪLu)ѕmީe; . z)1 9S>A\]Y%t$IK/2-ui܄d!my0@Ra>6moJgTT,BZtJbPMBTT6 P K6 w 6M촍,}ylRZ#C:,|+WA+pap r-A~bHBPZohT{^z̫2*oȒ5-ḍ䣰"M6U/$'+sp !1ٰ&N n$)SQ8+X$I,LٹqzCu7b&T3ʗmyQU4Um`,ԁ0tAh}Z9ŶD`DOV#g-Ǘ':>h *mG.l{]O]]<>,Jtozn]mRXg9 h,=u9+"zHH ne_Ai\I3* R| \EsßlQ q`[d~hX 0:'dҡ'$Զ. ;-.d*?@EIf> LbJӗZ9v^ oo0'<6c$粖少kwQU[#LTO{FVI(MPO `¦s"w)hNa@QWC(%˝9&&>*~_$ݗMkMky2~Q0 ٖ[.d;tk .tZ Wܞ) s!-W'̷ ]#JeV6OykM%(iQ}yOѯ@O%#yyb9cHsR:wY&hq}i Yaj-$H'#$Df}gVYo+gg]$al!aVO'yvS7^';pl\oΘ,cĄ? (ql?}:LC\HI8wS' ~\qdp;ǹ`d*oԨxJ^p߽NΟx&90(\{`3rD؍ihKpճ &n5A=@0XMN`"h]1Þ@}q%{FطwT[X+ {߻X|iEznE >R7}ЍbZ@uʩ ̓tC`H{8jaG`B8qlL5~4P󍴿brz?u;fV׮dXif2#xݶ>@T}ݙDrP\.ȨE~Ou*&Ix2w]H-. P$OB_[(+ϱ6` S(8+tg ,#R))}ǡh x|}|]Hegn+0@,U 纜%r4=@O+ph^ZA b.ĪC ϧ0 eY`?bh$/ӆb{]o=я¬} {wՃs.2F1Gݰ塜'E^ fS|\}}:Bݲ{&9UF;$:| /@=#rۣ Pz?L :wrL y/ra@g:1y:zwLVyڑ.iwi юvF@x{3U՝foJ9pFD:63j=*[B0?8*tQ GX2P퍖<_` P̒d9쒿emFЃ}ɔ tO.=4:^Cy߿3*YkI{C5J '\hDe⿺Нo|ޒ lF=>vс)glDE0Vo$G}ES:5uO|^q#z [j̀670RՆ(uDyjU]<)0ZeiLLr0J6rn*\d\PPM<)TjW>q(|"dJjP۵C&' XU7GRQ Ύ.l%/ݯ. ӟZ߰H5tJO$կ.2G1^njmMatKqw Qw6UHB/DT{$sA &H1uu6Vqs\KAfrŔ$EgU?![NNsCB沂m %_Cxc L<$IPRӸWT CtT٩Ւ`0w8 z(HK@\2>˨K'D47KgYc a^X"\՚gO,.i``ëDr:Ti&X{ᵙ$4\)LimI0,iHiQ A w'8ƒ5!r՛>R"ےfX-i]JWztWU~Y/ȟ6ЁrlV 3nPR-AL$D@/_HʼnauކHA'Ʒ2d[\ dV=p N5~f+ULFadPXM7֬x$jb Xd Fi3W Oar@Ѽ9T1+vk.gOe!;:Kc''Q18@m3xCkYc<1߿=-Ar`)h=hwxS&BZ;m3ި<U״ ,^(Q7Ol/!5? S9 k}Yyx|Vl $Qx;e{*m/ѶhPxɯXF*~!Ozxiǎzޏ "{&Rǽ $'BK ͚tƅC0X҈~|EVKn`䰤MT`],H 0v*=q 4<] J.6ҔAI>W ϩ9}eր^ÑHVh#a+#G!ZWT! ыa'~/yhTm̙*+d!TkB3ElTWC?ed9"Yo/G\8nS7e"XwHD˨)ٍaգ;Uɭ\5ipF|Oܭ?26Hș0KNM``QәȼەөM_Qw-,<5cm1=$7davPrӼmd,!G# j$}@1FmNN޷߶Ntce6JdCR&]wuB?k[ OL=w_̸s>SiK Q/V c ޥ DѾ?j͓dN = j) HPt0[9.vv406Z@ڷyLQ"q{>̟yuZC>R^S,J`__q^:{d a0F56]jN͡x0xm_XQr>\n`e/_6QOpN= {a cJi}cWLYl3*R V) fČ&~ ՜]`2*-/!p#ҌOt6{F8(fRjHq"(!JꟇ6d]KzߜrRkKg! ME=U4Gj']w[CH2 ^̱[,.ڄ(:G=XpYpܺA}Lpj2o3oTx?xSq Bj_(s!/çҔ9?aQKn9A!Rd2 ])J>65? K&# w~zx\w7*Mvs~r禮O{wZos}F;>[Drede9z Vac됚͊w72C=ԞopIOOk1~@W?Dn5nbꎧkFxh͹D}权^_{0 r /,b|I4RL13ʾ4 BĦik8WHw tP5WۗmcN_3A;>XJ 6,qΆ@۷Y\᪙Pd0^yɪV3ֹ}B|6_w\D` Sz[^TO^JO|ATs"bБbgeDľhAQ" ?!g+hHg{Uq;\v83LdXy%[@H2jj2'ǀrL'gӕ1w`'i2rҌAOv0IN´J2#4`07ӻ% 6q|ܛ:symrsM3r[S:.thLZX/oW P. ):vܮxAF3<EQ :hbF7(ȹ$'iVRg,C 0ɳ p SNN$h\gfNe#`s[|{\iCsp|#H,uNuA-ԉ*`,GEJ\@p]vbʧT hΘmۃmnaLa4U6zˢ3J!N} em}'l{τ`6w:鉑Y0^;fM4(,tߛ ̾4v(NgQjˉw <^鼱wkŵj {4\%;(ژz%.#oA}Б4Q#HV~;8an,;w4BqgU$ںh0?h7/UebW1%E_J@TK&b7(o4{=~s"tN5r]y'fɂ,R{#5.X+sKq:in64zW.̺#[bO.1u[*ΕC%NT#CyQaY,ƓMB6ќ66Zz;Tpq`L X%Q`Sq&?2·/F Oe(uirڂ!85á#l{#1fd0N&G=[ [C#&HwFW@2=oE$SĠ=d8ģf1s+}XkF!$RMbxP1}R.kYej4nGj+L,UT$lsa7 ќiJVp&K[p`ؑ"(p"׼~ӧtZ:YUq[_s|َޣ]aEF0n{|yxN(osvOƙo~9(kudGOtZ| XCGOT6,ZP.>rS#G#CK@p-fuFS)Rf@O;[Ap7 *I.§*;tbP :'bUŭe?-ht@ctBL3 ` O;RJ$@}]ceS^)3; "I確Hfpŝ{I#DgtpUrEa51|Ad9s2 Fq˷QH6iz Vy5EN"Atvg)kXOgs7*e|şUs{ `BܐJl&)]L˯b; |zb?LS*FkCS)~-'!aq-Ug2sGꔻt1KߥM@(jԁb*B϶DThPXor@FΟO(2vZ:y;l%C|Cŗ?qSprfrߑ%x-Gqs{Xrx>WX5OA?>OhOT]ERIWùK4cl ڳ؁n0yeH4uk7kX+1(uxAm|!MGDPE/&îԛ_Bu8GVmPoZsi?ݤވ#1 fUfyqP7F1Dg'oƀƌ!'JynvJrG9bUsk}`M\7^ĊhD%7νe~4N-3xYc&e!d,[3 O oTtGRfsBܙC*D[r".ybp0Z(,^'N`-Cw2@ >wSRZGbSz;fjfJՀ_Ŏw0"TZObiH&'sXmU \IQP<$8)n 3DL2Q4h& և<.a?7_0}9LjL޾Q5Պ.]zOe혗bCὪiRl;^T̴bM:8QI0"]`Mv )h-KQɑg YQ 2=8gO?+bVxHcpۻڞ#Ҡ;[ v0[mVAApaN}Ȧw$(ıqaq U[h.j9ԒeOأHҽjxDG`"{)j9s!D ъixP>ѣ3ǽR Ĥr(eIwJ&1iXu1io"㗉 T\oh*ƺ4}8Z&<`tLiA_(P@̀ 53ϓ>9<2Ҭ_LXQ BmRRJF;ę0zDp :rmּ`խ9JςlΊ!b=zfQ R^x_JY L{Imd5RDur 9gB@qcn:FR߀daKMqH5b F&V&#&啒>Mjc&FVyF?O @2 Oj|4[Dc9t*/G3Ah)Swp?SLh2uj)=)9^5wv1벷RXʎ){(u鈔5/N Q[`n~&q7n3Էm9JRn YZ