samba-client-libs-4.19.7+git.357.1d7950ebd62-150600.3.3.2<>, Lfp9|]T [i[å%Op!X4m9nrWk@އ=l2 d⩠R9ZWc?+p繅e9H(ոȒ`{x`g ZBn"x5{ԣ7蠑F*l6:N=jʴ5 &{S ޑT.S6Oor"fE7ol筏>|̐NTY>C(?d/ < S 9PV`v8v $v v v v !v#v&v(l(v*|`dLD(m8t 9 :  >A@ABAFC GC vHDvIFvXGHYKTZN|[N\Q(v]Sv^]Cb]wc^ d^e^f^l^u^vv`dwvxtvyL zɸCsamba-client-libs4.19.7+git.357.1d7950ebd62150600.3.3.2Samba client librariesThe samba-libs package contains the libraries needed by samba client programs.fh01-ch4a4*8SUSE Linux Enterprise 15SUSE LLC GPL-3.0-or-laterhttps://www.suse.com/Development/Libraries/C and C++https://www.samba.org/linuxx86_64XX(`(PXX7XXPhPXxX9@ M`H8(XPɨhhXx8p`hXX(P(((8+X8@HxpP'XX PHHX`)'H((XPH(8XX0M((((X(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-binding.so.0.0.1libdcerpc-server-core.so.0.0.1libdcerpc.so.0.0.1libndr-krb5pac.so.0.0.1libndr-nbt.so.0.0.1libndr-standard.so.0.0.1libndr.so.3.0.1libnetapi.so.1.0.0libsamba-credentials.so.1.0.0libsamba-errors.so.1.0.0libsamba-hostconfig.so.0.0.1libsamba-passdb.so.0.28.0libsamba-util.so.0.0.1libsamdb.so.0.0.1libsmbclient.so.0.7.0libsmbconf.so.0.0.1libsmbldap.so.2.1.0libtevent-util.so.0.0.1libwbclient.so.0.16rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootsamba-4.19.7+git.357.1d7950ebd62-150600.3.3.2.src.rpmlibCHARSET3-samba4.so()(64bit)libCHARSET3-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libMESSAGING-SEND-samba4.so()(64bit)libMESSAGING-SEND-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libMESSAGING-samba4.so()(64bit)libMESSAGING-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libaddns-samba4.so()(64bit)libaddns-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libads-samba4.so()(64bit)libads-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libasn1util-samba4.so()(64bit)libasn1util-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libauth-samba4.so()(64bit)libauth-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libauthkrb5-samba4.so()(64bit)libauthkrb5-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libcli-cldap-samba4.so()(64bit)libcli-cldap-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libcli-ldap-common-samba4.so()(64bit)libcli-ldap-common-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libcli-ldap-samba4.so()(64bit)libcli-ldap-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libcli-nbt-samba4.so()(64bit)libcli-nbt-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libcli-smb-common-samba4.so()(64bit)libcli-smb-common-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libcli-spoolss-samba4.so()(64bit)libcli-spoolss-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libcliauth-samba4.so()(64bit)libcliauth-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libclidns-samba4.so()(64bit)libclidns-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libcluster-samba4.so()(64bit)libcluster-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libcmdline-contexts-samba4.so()(64bit)libcmdline-contexts-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libcmdline-samba4.so()(64bit)libcmdline-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libcommon-auth-samba4.so()(64bit)libcommon-auth-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libdbwrap-samba4.so()(64bit)libdbwrap-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libdcerpc-binding.so.0()(64bit)libdcerpc-binding.so.0(DCERPC_BINDING_0.0.1)(64bit)libdcerpc-binding0libdcerpc-pkt-auth-samba4.so()(64bit)libdcerpc-pkt-auth-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libdcerpc-samba-samba4.so()(64bit)libdcerpc-samba-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libdcerpc-samba4.so()(64bit)libdcerpc-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libdcerpc-server-core.so.0()(64bit)libdcerpc-server-core.so.0(DCERPC_SERVER_CORE_0.0.1)(64bit)libdcerpc.so.0()(64bit)libdcerpc.so.0(DCERPC_0.0.1)(64bit)libdcerpc0libevents-samba4.so()(64bit)libevents-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libflag-mapping-samba4.so()(64bit)libflag-mapping-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libgenrand-samba4.so()(64bit)libgenrand-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libgensec-samba4.so()(64bit)libgensec-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libgpo-samba4.so()(64bit)libgpo-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libgse-samba4.so()(64bit)libgse-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libhttp-samba4.so()(64bit)libhttp-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libinterfaces-samba4.so()(64bit)libinterfaces-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libiov-buf-samba4.so()(64bit)libiov-buf-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libkrb5samba-samba4.so()(64bit)libkrb5samba-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libldbsamba-samba4.so()(64bit)libldbsamba-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)liblibcli-lsa3-samba4.so()(64bit)liblibcli-lsa3-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)liblibcli-netlogon3-samba4.so()(64bit)liblibcli-netlogon3-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)liblibsmb-samba4.so()(64bit)liblibsmb-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libmessages-dgm-samba4.so()(64bit)libmessages-dgm-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libmessages-util-samba4.so()(64bit)libmessages-util-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libmscat-samba4.so()(64bit)libmscat-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libmsghdr-samba4.so()(64bit)libmsghdr-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libmsrpc3-samba4.so()(64bit)libmsrpc3-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libndr-krb5pac.so.0()(64bit)libndr-krb5pac.so.0(NDR_KRB5PAC_0.0.1)(64bit)libndr-krb5pac0libndr-nbt.so.0()(64bit)libndr-nbt.so.0(NDR_NBT_0.0.1)(64bit)libndr-nbt0libndr-samba-samba4.so()(64bit)libndr-samba-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libndr-samba4.so()(64bit)libndr-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libndr-standard.so.0()(64bit)libndr-standard.so.0(NDR_STANDARD_0.0.1)(64bit)libndr-standard0libndr.so.3()(64bit)libndr.so.3(NDR_0.0.1)(64bit)libndr.so.3(NDR_0.0.2)(64bit)libndr.so.3(NDR_0.0.3)(64bit)libndr.so.3(NDR_0.0.4)(64bit)libndr.so.3(NDR_0.0.5)(64bit)libndr.so.3(NDR_0.0.6)(64bit)libndr.so.3(NDR_0.0.7)(64bit)libndr.so.3(NDR_0.0.8)(64bit)libndr.so.3(NDR_0.0.9)(64bit)libndr.so.3(NDR_0.1.0)(64bit)libndr.so.3(NDR_0.1.1)(64bit)libndr.so.3(NDR_0.1.2)(64bit)libndr.so.3(NDR_0.2.0)(64bit)libndr.so.3(NDR_0.2.1)(64bit)libndr.so.3(NDR_1.0.0)(64bit)libndr.so.3(NDR_1.0.1)(64bit)libndr.so.3(NDR_1.0.2)(64bit)libndr.so.3(NDR_2.0.0)(64bit)libndr.so.3(NDR_3.0.0)(64bit)libndr.so.3(NDR_3.0.1)(64bit)libndr2libnet-keytab-samba4.so()(64bit)libnet-keytab-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libnetapi.so.1()(64bit)libnetapi.so.1(NETAPI_1.0.0)(64bit)libnetapi0libnetif-samba4.so()(64bit)libnetif-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libnpa-tstream-samba4.so()(64bit)libnpa-tstream-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libprinting-migrate-samba4.so()(64bit)libprinting-migrate-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libregistry-samba4.so()(64bit)libregistry-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libreplace-samba4.so()(64bit)libreplace-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libsamba-cluster-support-samba4.so()(64bit)libsamba-cluster-support-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libsamba-credentials.so.1()(64bit)libsamba-credentials.so.1(SAMBA_CREDENTIALS_1.0.0)(64bit)libsamba-credentials1libsamba-debug-samba4.so()(64bit)libsamba-debug-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libsamba-errors.so.1()(64bit)libsamba-errors.so.1(SAMBA_ERRORS_1.0.0)(64bit)libsamba-errors0libsamba-hostconfig.so.0()(64bit)libsamba-hostconfig.so.0(SAMBA_HOSTCONFIG_0.0.1)(64bit)libsamba-hostconfig0libsamba-modules-samba4.so()(64bit)libsamba-modules-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libsamba-passdb.so.0()(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.2.0)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.24.1)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.24.2)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.25.0)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.26.0)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.27.0)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.27.1)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.27.2)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.28.0)(64bit)libsamba-passdb0libsamba-security-samba4.so()(64bit)libsamba-security-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libsamba-sockets-samba4.so()(64bit)libsamba-sockets-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libsamba-util.so.0()(64bit)libsamba-util.so.0(SAMBA_UTIL_0.0.1)(64bit)libsamba-util0libsamba3-util-samba4.so()(64bit)libsamba3-util-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libsamdb-common-samba4.so()(64bit)libsamdb-common-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libsamdb.so.0()(64bit)libsamdb.so.0(SAMDB_0.0.1)(64bit)libsamdb0libsecrets3-samba4.so()(64bit)libsecrets3-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libserver-id-db-samba4.so()(64bit)libserver-id-db-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libserver-role-samba4.so()(64bit)libserver-role-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libsmb-transport-samba4.so()(64bit)libsmb-transport-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libsmbclient-raw-samba4.so()(64bit)libsmbclient-raw-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libsmbclient.so.0()(64bit)libsmbclient.so.0(SMBCLIENT_0.1.0)(64bit)libsmbclient.so.0(SMBCLIENT_0.2.0)(64bit)libsmbclient.so.0(SMBCLIENT_0.2.1)(64bit)libsmbclient.so.0(SMBCLIENT_0.2.2)(64bit)libsmbclient.so.0(SMBCLIENT_0.2.3)(64bit)libsmbclient.so.0(SMBCLIENT_0.3.0)(64bit)libsmbclient.so.0(SMBCLIENT_0.3.1)(64bit)libsmbclient.so.0(SMBCLIENT_0.3.2)(64bit)libsmbclient.so.0(SMBCLIENT_0.3.3)(64bit)libsmbclient.so.0(SMBCLIENT_0.4.0)(64bit)libsmbclient.so.0(SMBCLIENT_0.5.0)(64bit)libsmbclient.so.0(SMBCLIENT_0.6.0)(64bit)libsmbclient.so.0(SMBCLIENT_0.7.0)(64bit)libsmbclient0libsmbconf.so.0()(64bit)libsmbconf.so.0(SMBCONF_0.0.1)(64bit)libsmbconf0libsmbd-base-samba4.so()(64bit)libsmbd-base-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libsmbd-shim-samba4.so()(64bit)libsmbd-shim-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libsmbldap.so.2()(64bit)libsmbldap.so.2(SMBLDAP_0)(64bit)libsmbldap.so.2(SMBLDAP_1)(64bit)libsmbldap.so.2(SMBLDAP_2)(64bit)libsmbldap.so.2(SMBLDAP_2.1.0)(64bit)libsmbldap2libsmbldaphelper-samba4.so()(64bit)libsmbldaphelper-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libsocket-blocking-samba4.so()(64bit)libsocket-blocking-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libstable-sort-samba4.so()(64bit)libstable-sort-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libsys-rw-samba4.so()(64bit)libsys-rw-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libtalloc-report-printf-samba4.so()(64bit)libtalloc-report-printf-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libtdb-wrap-samba4.so()(64bit)libtdb-wrap-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libtevent-util.so.0()(64bit)libtevent-util.so.0(TEVENT_UTIL_0.0.1)(64bit)libtevent-util0libtime-basic-samba4.so()(64bit)libtime-basic-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libtrusts-util-samba4.so()(64bit)libtrusts-util-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libutil-reg-samba4.so()(64bit)libutil-reg-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libutil-setid-samba4.so()(64bit)libutil-setid-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libutil-tdb-samba4.so()(64bit)libutil-tdb-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libwbclient.so.0()(64bit)libwbclient.so.0(WBCLIENT_0.10)(64bit)libwbclient.so.0(WBCLIENT_0.11)(64bit)libwbclient.so.0(WBCLIENT_0.12)(64bit)libwbclient.so.0(WBCLIENT_0.13)(64bit)libwbclient.so.0(WBCLIENT_0.14)(64bit)libwbclient.so.0(WBCLIENT_0.15)(64bit)libwbclient.so.0(WBCLIENT_0.16)(64bit)libwbclient.so.0(WBCLIENT_0.9)(64bit)libwbclient0samba-client-libssamba-client-libs(x86-64)@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    /sbin/ldconfig/sbin/ldconfigld-linux-x86-64.so.2()(64bit)ld-linux-x86-64.so.2(GLIBC_2.3)(64bit)libCHARSET3-samba4.so()(64bit)libCHARSET3-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libMESSAGING-SEND-samba4.so()(64bit)libMESSAGING-SEND-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libMESSAGING-samba4.so()(64bit)libMESSAGING-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libacl.so.1()(64bit)libacl.so.1(ACL_1.0)(64bit)libaddns-samba4.so()(64bit)libaddns-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libads-samba4.so()(64bit)libads-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libasn1util-samba4.so()(64bit)libasn1util-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libauth-samba4.so()(64bit)libauth-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libauthkrb5-samba4.so()(64bit)libauthkrb5-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libavahi-client.so.3()(64bit)libavahi-common.so.3()(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.10)(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.15)(64bit)libc.so.6(GLIBC_2.17)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.27)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.2)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.32)(64bit)libc.so.6(GLIBC_2.33)(64bit)libc.so.6(GLIBC_2.34)(64bit)libc.so.6(GLIBC_2.38)(64bit)libc.so.6(GLIBC_2.4)(64bit)libc.so.6(GLIBC_2.5)(64bit)libc.so.6(GLIBC_2.6)(64bit)libc.so.6(GLIBC_2.8)(64bit)libcli-cldap-samba4.so()(64bit)libcli-cldap-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libcli-ldap-common-samba4.so()(64bit)libcli-ldap-common-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libcli-ldap-samba4.so()(64bit)libcli-ldap-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libcli-nbt-samba4.so()(64bit)libcli-nbt-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libcli-smb-common-samba4.so()(64bit)libcli-smb-common-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libcli-spoolss-samba4.so()(64bit)libcli-spoolss-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libcliauth-samba4.so()(64bit)libcliauth-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libclidns-samba4.so()(64bit)libclidns-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libcluster-samba4.so()(64bit)libcluster-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libcom_err.so.2()(64bit)libcommon-auth-samba4.so()(64bit)libcommon-auth-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libdbwrap-samba4.so()(64bit)libdbwrap-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libdcerpc-binding.so.0()(64bit)libdcerpc-binding.so.0(DCERPC_BINDING_0.0.1)(64bit)libdcerpc-pkt-auth-samba4.so()(64bit)libdcerpc-pkt-auth-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libdcerpc-samba-samba4.so()(64bit)libdcerpc-samba-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libdcerpc.so.0()(64bit)libdcerpc.so.0(DCERPC_0.0.1)(64bit)libflag-mapping-samba4.so()(64bit)libflag-mapping-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libgenrand-samba4.so()(64bit)libgenrand-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libgensec-samba4.so()(64bit)libgensec-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libgnutls.so.30()(64bit)libgnutls.so.30(GNUTLS_3_4)(64bit)libgnutls.so.30(GNUTLS_3_6_10)(64bit)libgnutls.so.30(GNUTLS_3_6_13)(64bit)libgnutls.so.30(GNUTLS_3_6_3)(64bit)libgse-samba4.so()(64bit)libgse-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libgssapi_krb5.so.2()(64bit)libgssapi_krb5.so.2(gssapi_krb5_2_MIT)(64bit)libhttp-samba4.so()(64bit)libhttp-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libinterfaces-samba4.so()(64bit)libinterfaces-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libiov-buf-samba4.so()(64bit)libiov-buf-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libk5crypto.so.3()(64bit)libk5crypto.so.3(k5crypto_3_MIT)(64bit)libkrb5.so.3()(64bit)libkrb5.so.3(krb5_3_MIT)(64bit)libkrb5samba-samba4.so()(64bit)libkrb5samba-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)liblber-2.4.so.2()(64bit)libldap_r-2.4.so.2()(64bit)libldb.so.2()(64bit)libldb.so.2(LDB_0.9.10)(64bit)libldb.so.2(LDB_0.9.15)(64bit)libldb.so.2(LDB_0.9.16)(64bit)libldb.so.2(LDB_0.9.23)(64bit)libldb.so.2(LDB_1.1.1)(64bit)libldb.so.2(LDB_1.1.19)(64bit)libldb.so.2(LDB_1.1.30)(64bit)libldb.so.2(LDB_1.3.0)(64bit)libldb.so.2(LDB_2.6.1)(64bit)libldb.so.2(LDB_2.8.0)(64bit)libldbsamba-samba4.so()(64bit)libldbsamba-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)liblibcli-lsa3-samba4.so()(64bit)liblibcli-lsa3-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)liblibcli-netlogon3-samba4.so()(64bit)liblibcli-netlogon3-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)liblibsmb-samba4.so()(64bit)liblibsmb-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libmessages-dgm-samba4.so()(64bit)libmessages-dgm-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libmessages-util-samba4.so()(64bit)libmessages-util-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libmsghdr-samba4.so()(64bit)libmsghdr-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libmsrpc3-samba4.so()(64bit)libmsrpc3-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libndr-krb5pac.so.0()(64bit)libndr-krb5pac.so.0(NDR_KRB5PAC_0.0.1)(64bit)libndr-nbt.so.0()(64bit)libndr-nbt.so.0(NDR_NBT_0.0.1)(64bit)libndr-samba-samba4.so()(64bit)libndr-samba-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libndr-samba4.so()(64bit)libndr-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libndr-standard.so.0()(64bit)libndr-standard.so.0(NDR_STANDARD_0.0.1)(64bit)libndr.so.3()(64bit)libndr.so.3(NDR_0.0.1)(64bit)libndr.so.3(NDR_0.0.3)(64bit)libndr.so.3(NDR_0.0.4)(64bit)libndr.so.3(NDR_0.0.5)(64bit)libndr.so.3(NDR_0.0.6)(64bit)libndr.so.3(NDR_0.0.7)(64bit)libndr.so.3(NDR_0.0.8)(64bit)libndr.so.3(NDR_0.0.9)(64bit)libndr.so.3(NDR_0.1.1)(64bit)libndr.so.3(NDR_0.1.2)(64bit)libndr.so.3(NDR_0.2.0)(64bit)libndr.so.3(NDR_0.2.1)(64bit)libndr.so.3(NDR_1.0.0)(64bit)libndr.so.3(NDR_1.0.1)(64bit)libndr.so.3(NDR_1.0.2)(64bit)libndr.so.3(NDR_2.0.0)(64bit)libndr.so.3(NDR_3.0.1)(64bit)libnetif-samba4.so()(64bit)libnetif-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libnpa-tstream-samba4.so()(64bit)libnpa-tstream-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libnscd.so.1()(64bit)libnscd.so.1(LIBNSCD_1.0)(64bit)libpam.so.0()(64bit)libpam.so.0(LIBPAM_1.0)(64bit)libpopt.so.0()(64bit)libpopt.so.0(LIBPOPT_0)(64bit)libreplace-samba4.so()(64bit)libreplace-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libsamba-cluster-support-samba4.so()(64bit)libsamba-cluster-support-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libsamba-credentials.so.1()(64bit)libsamba-credentials.so.1(SAMBA_CREDENTIALS_1.0.0)(64bit)libsamba-debug-samba4.so()(64bit)libsamba-debug-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libsamba-errors.so.1()(64bit)libsamba-errors.so.1(SAMBA_ERRORS_1.0.0)(64bit)libsamba-hostconfig.so.0()(64bit)libsamba-hostconfig.so.0(SAMBA_HOSTCONFIG_0.0.1)(64bit)libsamba-modules-samba4.so()(64bit)libsamba-modules-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libsamba-passdb.so.0()(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.2.0)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.27.1)(64bit)libsamba-security-samba4.so()(64bit)libsamba-security-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libsamba-sockets-samba4.so()(64bit)libsamba-sockets-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libsamba-util.so.0()(64bit)libsamba-util.so.0(SAMBA_UTIL_0.0.1)(64bit)libsamba3-util-samba4.so()(64bit)libsamba3-util-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libsamdb-common-samba4.so()(64bit)libsamdb-common-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libsamdb.so.0()(64bit)libsamdb.so.0(SAMDB_0.0.1)(64bit)libsecrets3-samba4.so()(64bit)libsecrets3-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libserver-id-db-samba4.so()(64bit)libserver-id-db-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libserver-role-samba4.so()(64bit)libserver-role-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libsmb-transport-samba4.so()(64bit)libsmb-transport-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libsmbclient-raw-samba4.so()(64bit)libsmbclient-raw-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libsmbconf.so.0()(64bit)libsmbconf.so.0(SMBCONF_0.0.1)(64bit)libsmbd-shim-samba4.so()(64bit)libsmbd-shim-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libsmbldap.so.2()(64bit)libsmbldap.so.2(SMBLDAP_0)(64bit)libsmbldap.so.2(SMBLDAP_1)(64bit)libsmbldaphelper-samba4.so()(64bit)libsmbldaphelper-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libsocket-blocking-samba4.so()(64bit)libsocket-blocking-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libstable-sort-samba4.so()(64bit)libstable-sort-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libsys-rw-samba4.so()(64bit)libsys-rw-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libsystemd.so.0()(64bit)libsystemd.so.0(LIBSYSTEMD_209)(64bit)libtalloc-report-printf-samba4.so()(64bit)libtalloc-report-printf-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libtalloc.so.2()(64bit)libtalloc.so.2(TALLOC_2.0.2)(64bit)libtalloc.so.2(TALLOC_2.1.0)(64bit)libtalloc.so.2(TALLOC_2.3.5)(64bit)libtasn1.so.6()(64bit)libtasn1.so.6(LIBTASN1_0_3)(64bit)libtdb-wrap-samba4.so()(64bit)libtdb-wrap-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libtdb.so.1()(64bit)libtdb.so.1(TDB_1.2.1)(64bit)libtdb.so.1(TDB_1.2.2)(64bit)libtdb.so.1(TDB_1.2.5)(64bit)libtdb.so.1(TDB_1.3.0)(64bit)libtdb.so.1(TDB_1.3.11)(64bit)libtdb.so.1(TDB_1.3.17)(64bit)libtevent-util.so.0()(64bit)libtevent-util.so.0(TEVENT_UTIL_0.0.1)(64bit)libtevent.so.0()(64bit)libtevent.so.0(TEVENT_0.11.0)(64bit)libtevent.so.0(TEVENT_0.12.0)(64bit)libtevent.so.0(TEVENT_0.13.0)(64bit)libtevent.so.0(TEVENT_0.15.0)(64bit)libtevent.so.0(TEVENT_0.9.12)(64bit)libtevent.so.0(TEVENT_0.9.13)(64bit)libtevent.so.0(TEVENT_0.9.16)(64bit)libtevent.so.0(TEVENT_0.9.20)(64bit)libtevent.so.0(TEVENT_0.9.30)(64bit)libtevent.so.0(TEVENT_0.9.31)(64bit)libtevent.so.0(TEVENT_0.9.37)(64bit)libtevent.so.0(TEVENT_0.9.9)(64bit)libtime-basic-samba4.so()(64bit)libtime-basic-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libtrusts-util-samba4.so()(64bit)libtrusts-util-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libutil-reg-samba4.so()(64bit)libutil-reg-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libutil-setid-samba4.so()(64bit)libutil-setid-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libutil-tdb-samba4.so()(64bit)libutil-tdb-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_X86_64_SAMBA4)(64bit)libwbclient.so.0()(64bit)libwbclient.so.0(WBCLIENT_0.13)(64bit)libwbclient.so.0(WBCLIENT_0.9)(64bit)libz.so.1()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.3fxfteԔ@ee5@ede6`@e-%e'e%ascabrero@suse.denopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comdmulder@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comscabrero@suse.descabrero@suse.descabrero@suse.denopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comscabrero@suse.dedmulder@suse.comscabrero@suse.denopower@suse.comnopower@suse.comscabrero@suse.denopower@suse.comnopower@suse.comscabrero@suse.denopower@suse.comscabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comddiss@suse.comnopower@suse.comdmulder@suse.comdmulder@suse.comnopower@suse.comscabrero@suse.descabrero@suse.dedimstar@opensuse.orgscabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comnopower@suse.comnopower@suse.comscabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comnopower@suse.comscabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.denopower@suse.comscabrero@suse.deddiss@suse.comddiss@suse.comddiss@suse.comscabrero@suse.descabrero@suse.dedmulder@suse.comnopower@suse.comscabrero@suse.descabrero@suse.dedmulder@suse.comscabrero@suse.descabrero@suse.denopower@suse.comnopower@suse.comnopower@suse.comdmulder@suse.comscabrero@suse.denopower@suse.comddiss@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comscabrero@suse.denopower@suse.comnopower@suse.comjmcdonough@suse.comnopower@suse.comscabrero@suse.denopower@suse.comnopower@suse.comddiss@suse.comddiss@suse.comnopower@suse.comnopower@suse.comddiss@suse.comnopower@suse.comdmulder@suse.comdmulder@suse.comddiss@suse.comscabrero@suse.dedmulder@suse.comddiss@suse.comnopower@suse.comjengelh@inai.dedmulder@suse.comscabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comdmulder@suse.comdmulder@suse.comjmcdonough@suse.comdmulder@suse.comscabrero@suse.dedmulder@suse.comscabrero@suse.dedmulder@suse.comdmulder@suse.comvcizek@suse.comdmulder@suse.comdmulder@suse.comnopower@suse.comscabrero@suse.dejmcdonough@suse.comscabrero@suse.deaaptel@suse.comjengelh@inai.dedimstar@opensuse.orgdmulder@suse.comjmcdonough@suse.comdavid.mulder@suse.comjmcdonough@suse.comaaptel@suse.comdmulder@suse.comscabrero@suse.comscabrero@suse.comkukuk@suse.dedavid.mulder@suse.comscabrero@suse.comrbrown@suse.comdmulder@suse.comscabrero@suse.comdimstar@opensuse.orgscabrero@suse.comaaptel@suse.comnopower@suse.comnopower@suse.comaaptel@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comddiss@suse.comnopower@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comdmulder@suse.comnopower@suse.comjmcdonough@suse.comaaptel@suse.comkukuk@suse.comkukuk@suse.denopower@suse.comaaptel@suse.comdmulder@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comddiss@suse.comjmcdonough@suse.comddiss@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comjmcdonough@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comtchvatal@suse.comlmuelle@suse.comnopower@suse.comcrrodriguez@opensuse.orglmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comnoel.power@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comnopower@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.commpluskal@suse.comlmuelle@suse.comnopower@suse.deddiss@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.denopower@suse.delmuelle@suse.comnopower@suse.deddiss@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.com- Fix a crash when joining offline and 'kerberos method' includes keytab; (bsc#1228732); - Fix reading the password from STDIN or environment vars if it was already given in the command line; (bsc#1228732);- Update to 4.19.7 * ldb qsort might r/w out of bounds with an intransitive compare function (ldb 2.8.1 is already released); (bso#15569). * Many qsort() comparison functions are non-transitive, which can lead to out-of-bounds access in some circumstances (ldb 2.8.1 is already released); (bso#15625). * Need to change gitlab-ci.yml tags in all branches to avoid CI bill; (bso#15638). * netr_LogonSamLogonEx returns NR_STATUS_ACCESS_DENIED with SysvolReady=0; (bso#14981). * Anonymous smb3 signing/encryption should be allowed (similar to Windows Server 2022); (bso#15412). * Panic in dreplsrv_op_pull_source_apply_changes_trigger; (bso#15573). * winbindd, net ads join and other things don't work on an ipv6 only host; (bso#15642). * Smbcacls incorrectly propagates inheritance with Inherit-Only flag; (bso#15636). * http library doesn't support 'chunked transfer encoding'; (bso#15611). - Update to 4.19.6 * fd_handle_destructor() panics within an smbd_smb2_close() if vfs_stat_fsp() fails in fd_close(); (bso#15527). * samba-gpupdate: Correctly implement site support; (bso#15588). * libgpo: Segfault in python bindings; (bso#15599). * Packet marshalling push support missing for CTDB_CONTROL_TCP_CLIENT_DISCONNECTED and CTDB_CONTROL_TCP_CLIENT_PASSED; (bso#15580).- Update to 4.19.5 * Windows 2016 fails to restore previous version of a file from a shadow_copy2 snapshot; (bso#13688). * Symlinks on AIX are broken in 4.19 (and a few version before that); (bso#15549). * Fake directory create times has no effect; (bso#12421). * ctime mixed up with mtime by smbd; (bso#15550). * samba-gpupdate --rsop fails if machine is not in a site; (bso#15548). * gpupdate: The root cert import when NDES is not available is broken; (bso#15557). * samba-gpupdate should print a useful message if cepces-submit can't be found; (bso#15552). * samba-gpupdate logging doesn't work; (bso#15558). * smbpasswd reset permissions only if not 0600; (bso#15555).- Remove -x from bash shebang update-apparmor-samba-profile; (bsc#1218431).- Update to 4.19.4 * net changesecretpw cannot set the machine account password if secrets.tdb is empty; (bso#13577). * For generating doc, take, if defined, env XML_CATALOG_FILES; (bso#15540). * Trivial C typo in nsswitch/winbind_nss_netbsd.c; (bso#15541). * vfs_linux_xfs is incorrectly named; (bso#15542). * systemd stumbled over copyright-message at smbd startup; (bso#15377). * Following intermediate abolute share-local symlinks is broken; (bso#15505). * ctdb RELEASE_IP causes a crash in release_ip if a connection to a non-public address disconnects first; (bso#15523). * shadow_copy2 broken when current fileset's directories are removed; (bso#15544). * smbd does not detect ctdb public ipv6 addresses for multichannel exclusion; (bso#15534). * 'force user = localunixuser' doesn't work if 'allow trusted domains = no' is set; (bso#15469). * smbget debug logging doesn't work; (bso#15525). * smget: username in the smburl and interactive password entry doesn't work; (bso#15532). * smbget auth function doesn't set values for password prompt correctly; (bso#15538). * Unable to copy and write files from clients to Ceph cluster via SMB Linux gateway with Ceph VFS module; (bso#15440). * Multichannel refresh network information; (bso#15547).- Update to 4.19.3 * sid_strings test broken by unix epoch > 1700000000; (bso#15520). * smbd crashes if asked to return full information on close of a stream handle with delete on close disposition set; (bso#15487). * smbd: fix close order of base_fsp and stream_fsp in smb_fname_fsp_destructor(); (bso#15521). * Improve logging for failover scenarios; (bso#15499). * Files without "read attributes" NFS4 ACL permission are not listed in directories; (bso#15093). * CVE-2018-14628 [SECURITY] Deleted Object tombstones visible in AD LDAP to normal users; (bso#13595). * Kerberos TGS-REQ with User2User does not work for normal accounts; (bso#15492). * vfs_gpfs stat calls fail due to file system permissions; (bso#15507). * Samba doesn't build with Python 3.12; (bso#15513).- packaging: samba-tool domain provision requires python3-Markdown; (bsc#1216519).- Update to 4.19.2 * Use-after-free in aio_del_req_from_fsp during smbd shutdown after failed IPC FSCTL_PIPE_TRANSCEIVE; (bso#15423). * clidfs.c do_connect() missing a "return" after a cli_shutdown() call; (bso#15426). * macOS mdfind returns only 50 results; (bso#15463). * GETREALFILENAME_CACHE can modify incoming new filename with previous cache entry value; (bso#15481). * libnss_winbind causes memory corruption since samba-4.18, impacts sendmail, zabbix, potentially more; (bso#15464). * ctdbd: setproctitle not initialized messages flooding logs; (bso#15479). * CVE-2023-5568 Heap buffer overflow with freshness tokens in the Heimdal KDC in Samba 4.19; (bso#15491). * The heimdal KDC doesn't detect s4u2self correctly when fast is in use; (bso#15477).- use systemd-logind rather than utmp for y2038 safety; (bsc#1216159).- CVE-2023-4091: samba: Client can truncate file with read-only permissions; (bsc#1215904); (bso#15439). - CVE-2023-42669: samba: rpcecho, enabled and running in AD DC, allows blocking sleep on request; (bso#1215905); (bso#15474). - CVE-2023-42670: samba: The procedure number is out of range when starting Active Directory Users and Computers; (bsc#1215906); (bso#15473). - CVE-2023-3961: samba: Unsanitized client pipe name passed to local_np_connect(); (bsc#1215907); (bso#15422). - CVE-2023-4154: samba: dirsync allows SYSTEM access with only "GUID_DRS_GET_CHANGES" right, not "GUID_DRS_GET_ALL_CHANGES; (bsc#1215908); (bso#15424).- Update to 4.19.0 * File doesn't show when user doesn't have permission if aio_pthread is loaded; (bso#15453). * ctdb_killtcp fails to work with --enable-pcap and libpcap ≥ 1.9.1; (bso#15451). * Logging to stdout/stderr with DEBUG_SYSLOG_FORMAT_ALWAYS can log to syslog; (bso#15460). * ‘samba-tool domain level raise’ fails unless given a URL; (bso#15458). * reply_sesssetup_and_X() can dereference uninitialized tmp pointer; (bso#15420). * missing return in reply_exit_done(); (bso#15430). * TREE_CONNECT without SETUP causes smbd to use uninitialized pointer; (bso#15432). * Avoid infinite loop in initial user sync with Azure AD Connect when synchronising a large Samba AD domain; (bso#15401). * Samba replication logs show (null) DN; (bso#15407). * 2-3min delays at reconnect with smb2_validate_sequence_number: bad message_id 2; (bso#15346). * DCERPC_PKT_CO_CANCEL and DCERPC_PKT_ORPHANED can't be parsed; (bso#15446). * CID 1539212 causes real issue when output contains only newlines; (bso#15438). * KDC encodes INT64 claims incorrectly; (bso#15452). * mdssvc: Do an early talloc_free() in _mdssvc_open(); (bso#15449). * Windows client join fails if a second container CN=System exists somewhere; (bso#9959). * regression DFS not working with widelinks = true; (bso#15435). * Heimdal fails to build on 32-bit FreeBSD; (bso#15443). * samba-tool ntacl get segfault if aio_pthread appended; (bso#15441). - Update to 4.18.6 * reply_sesssetup_and_X() can dereference uninitialized tmp pointer; (bso#15420); * Missing return in reply_exit_done(); (bso#15430); * post-exec password redaction for samba-tool is more reliable for fully random passwords as it no longer uses regular expressions containing the password value itself; (bso#15289); * Windows client join fails if a second container CN=System exists somewhere; (bso#9959); * Spotlight sometimes returns no results on latest macOS; (bso#15342); * Renaming results in NT_STATUS_SHARING_VIOLATION if previously attempted to remove the destination; (bso#15417); * Spotlight results return wrong date in result list; (bso#15427); * "net offlinejoin provision" does not work as non-root user; (bso#15414); * rpcserver no longer accepts double backslash in dfs pathname; (bso#15400); * cm_prepare_connection() calls close(fd) for the second time; (bso#15433); * 2-3min delays at reconnect with smb2_validate_sequence_number: bad message_id 2; (bso#15346); * samba-tool ntacl get segfault if aio_pthread appended; (bso#15441); * DCERPC_PKT_CO_CANCEL and DCERPC_PKT_ORPHANED can't be parsed; (bso#15446); * Python tarfile extraction needs change to avoid a warning (CVE-2007-4559 mitigation); (bso#15390); * Regression DFS not working with widelinks = true; (bso#15435); * mdssvc: Do an early talloc_free() in _mdssvc_open(); (bso#15449); - Update to 4.18.5 * CVE-2022-2127: lm_resp_len not checked properly in winbindd_pam_auth_crap_send; (bso#15072); (bsc#1213174). * CVE-2023-34966: Samba Spotlight mdssvc RPC Request Infinite Loop Denial-of-Service Vulnerability; (bso#15340); (bsc#1213173). * CVE-2023-34967: Samba Spotlight mdssvc RPC Request Type Confusion Denial-of-Service Vulnerability; (bso#15341); (bsc#1213172). * CVE-2023-34968: Spotlight server-side Share Path Disclosure; (bso#15388); (bsc#1213171). * CVE-2023-3347: Samba doesn't require SMB2+ signing if `server signing = mandatory` is set; (bso#15397); (bsc#1213170). * secure channel faulty since Windows 10/11 update 07/2023; (bso#15418); (bsc#1213384). - Update to 4.18.4 * Backport --pidl-developer fixes; (bso#15404). * Named crashes on DLZ zone update; (bso#14030). * smbcacls and smbcquotas do not check // before the server; (bso#2312). * cli_list loops 100% CPU against pre-lanman2 servers; (bso#15382). * smbclient leaks fds with showacls; (bso#15391). * smbd returns NOT_FOUND when creating files on a r/o filesystem; (bso#15402). * NSS_WRAPPER_HOSTNAME doesn't match NSS_WRAPPER_HOSTS entry and causes test timeouts; (bso#15355). * net ads lookup (with unspecified realm) fails; (bso#15384). * Register Samba processes with GPFS; (bso#15381). * Python tarfile extraction needs change to avoid a warning (CVE-2007-4559 mitigation); (bso#15390). * The winbind child segfaults when listing users with `winbind scan trusted domains = yes`; (bso#15398). * Remove comments about deprecated 'write cache size'; (bso#15383). * smbget memory leak if failed to download files recursively; (bso#15403). - Update to 4.18.3 * Symlinks to files can have random DOS mode information in a directory listing; (bso#15375). * vfs_fruit might cause a failing open for delete; (bso#15378). * winbind recurses into itself via rpcd_lsad; (bso#15361). * wbinfo -u fails on ad dc with >1000 users; (bso#15366). * DS ACEs might be inherited to unrelated object classes; (bso#15338). * a lot of messages: get_static_share_mode_data: get_static_share_mode_data_fn failed: NT_STATUS_NOT_FOUND; (bso#15362). * aes256 smb3 encryption algorithms are not allowed in smb3_sid_parse(); (bso#15374). * Setting veto files = /.*/ break listing directories; (bso#15360). * "samba-tool domain provision" does not run interactive mode if no arguments are given; (bso#15363). * dsgetdcname: assumes local system uses IPv4; (bso#15325). - Update to 4.18.2 * Log flood: smbd_calculate_access_mask_fsp: Access denied: message level should be lower; (bso#15302). * Floating point exception (FPE) via cli_pull_send at source3/libsmb/clireadwrite.c; (bso#15306). * test_tstream_more_tcp_user_timeout_spin fails intermittently on Rackspace GitLab runners; (bso#15328). * Reduce flapping of ridalloc test; (bso#15329). * large_ldap test is unreliable; (bso#15351). * New filename parser doesn't check veto files smb.conf parameter; (bso#15143). * mdssvc may crash when initializing; (bso#15354). * large directory optimization broken for non-lcomp path elements; (bso#15313). * streams_depot fails to create streams; (bso#15357). * shadow_copy2 and streams_depot don't play well together; (bso#15358). * Flapping tests in samba_tool_drs_show_repl.py; (bso#15316). * winbindd idmap child contacts the domain controller without a need; (bso#15317). * idmap_autorid may fail to map sids of trusted domains for the first time; (bso#15318). * idmap_hash doesn't use ID_TYPE_BOTH for reverse mappings; (bso#15319). * net ads search -P doesn't work against servers in other domains; (bso#15323). * Temporary smbXsrv_tcon_global.tdb can't be parsed; (bso#15353). * Tests use depricated and removed methods like assertRegexpMatches; (bso#15343). - Update to 4.18.1 * CVE-2023-0225: AD DC "dnsHostname" attribute can be deleted by unprivileged authenticated users. (bso#15276);(bsc#1209483). * CVE-2023-0614: Access controlled AD LDAP attributes can be discovered (bso#15270); (bsc#1209485). * CVE-2023-0922: Samba AD DC admin tool samba-tool sends passwords in cleartext(bso#15315);(bsc#1209481). * ldb wildcard matching makes excessive allocations; (bso#15331). * large_ldap test is inefficient; (bso#15332). - Update to 4.18.0 * SMB server performance improvements * More succinct samba-tool error messages * Color output with samba-tool --color The NO_COLOR environment variable will disable colour output * New samba-tool dsacl subcommand for deleting ACEs * New wbinfo option --change-secret-at * Net option to change the NT ACL default location * Azure AD / Office365 synchronization improvements- Fix DFS not working with widelinks enabled; (bsc#1213607); (bso#15435);- Move libcluster-samba4.so from samba-libs to samba-client-libs; (bsc#1213940);- net ads lookup with unspecified realm fails; (bso#15384); (bsc#1213826);- secure channel faulty since Windows 10/11 update 07/2023; (bso#15418); (bsc#1213384).- CVE-2022-2127: lm_resp_len not checked properly in winbindd_pam_auth_crap_send; (bso#15072); (bsc#1213174). - CVE-2023-34966: Samba Spotlight mdssvc RPC Request Infinite Loop Denial-of-Service Vulnerability; (bso#15340); (bsc#1213173). - CVE-2023-34967: Samba Spotlight mdssvc RPC Request Type Confusion Denial-of-Service Vulnerability; (bso#15341); (bsc#1213172). - CVE-2023-34968: Spotlight server-side Share Path Disclosure; (bso#15388); (bsc#1213171). - CVE-2023-3347: Samba doesn't require SMB2+ signing if `server signing = mandatory` is set; (bso#15397); (bsc#1213170).- Update to 4.17.9 * Backport --pidl-developer fixes; (bso#15404). * smbd_scavenger crashes when service smbd is stopped; (bso#15275). * vfs_fruit might cause a failing open for delete; (bso#15378). * named crashes on DLZ zone update; (bso#14030). * winbind recurses into itself via rpcd_lsad; (bso#15361). * cli_list loops 100% CPU against pre-lanman2 servers; (bso#15382). * smbclient leaks fds with showacls; (bso#15391). * aes256 smb3 encryption algorithms are not allowed in smb3_sid_parse(); (bso#15374). * winbindd gets stuck on NT_STATUS_RPC_SEC_PKG_ERROR; (bso#15413). * smbget memory leak if failed to download files recursively; (bso#15403).- Update to 4.17.8 * log flood: smbd_calculate_access_mask_fsp: Access denied: message level should be lower; (bso#15302). * Floating point exception (FPE) via cli_pull_send at source3/libsmb/clireadwrite.c; (bso#15306). * test_tstream_more_tcp_user_timeout_spin fails intermittently on Rackspace GitLab runners; (bso#15328). * Reduce flapping of ridalloc test; (bso#15329). * large_ldap test is unreliable; (bso#15351). * New filename parser doesn't check veto files smb.conf parameter; (bso#15143). * mdssvc may crash when initializing; (bso#15354). * Large directory optimization broken for non-lcomp path elements; (bso#15313). * streams_depot fails to create streams; (bso#15357). * shadow_copy2 and streams_depot don't play well together; (bso#15358). * wbinfo -u fails on ad dc with >1000 users; (bso#15366). * winbindd idmap child contacts the domain controller without a need; (bso#15317). * idmap_autorid may fail to map sids of trusted domains for the first time; (bso#15318). * idmap_hash doesn't use ID_TYPE_BOTH for reverse mappings; (bso#15319). * net ads search -P doesn't work against servers in other domains; (bso#15323). * DS ACEs might be inherited to unrelated object classes; (bso#15338). * Temporary smbXsrv_tcon_global.tdb can't be parsed; (bso#15353). * Setting veto files = /.*/ break listing directories; (bso#15360); (bsc#1212375). * CVE-2020-25720 [SECURITY] Create Child permission should not allow full write to all attributes (additional changes); (bso#14810). * dsgetdcname: assumes local system uses IPv4; (bso#15325).- Update to 4.17.7 * CVE-2023-0922: Samba AD DC admin tool samba-tool sends passwords in cleartext; (bso#15315); (bsc#1209481). * CVE-2023-0225: Samba AD DC "dnsHostname" attribute can be deleted by unprivileged authenticated users; (bso#15276); (bsc#1209483). * CVE-2023-0614: samba: Access controlled AD LDAP attributes can be discovered; (bso#15270); (bsc#1209485). * large_ldap test is inefficient; (bso#15332). * CVE-2020-25720 [SECURITY] Create Child permission should not allow full write to all attributes (additional changes); (bso#14810). - Update to 4.17.6 * streams_xattr is creating unexpected locks on folders; (bso#15314). * Use of the Azure AD Connect cloud sync tool is now supported for password hash synchronisation, allowing Samba AD Domains to synchronise passwords with this popular cloud environment; (bso#10635). * Spotlight doesn't work with latest macOS Ventura; (bso#15299). * New samba-dcerpc architecture does not scale gracefully; (bso#15310). * vfs_ceph incorrectly uses fsp_get_io_fd() instead of fsp_get_pathref_fd() in close and fstat; (bso#15307). * With clustering enabled samba-bgqd can core dump due to use after free; (bso#15293). * fd_load() function implicitly closes the fd where it should not; (bso#15311). - Update to 4.17.5 * smbc_getxattr() return value is incorrect; (bso#14808). * Compound SMB2 FLUSH+CLOSE requests from MacOSX are not handled correctly; (bso#15172). * synthetic_pathref AFP_AfpInfo failed errors; (bso#15210). * samba-tool gpo listall fails IPv6 only - finddcs() fails to find DC when there is only an AAAA record for the DC in DNS; (bso#15226). * smbd crashes if an FSCTL request is done on a stream handle; (bso#15236). * DFS links don't work anymore on Mac clients since 4.17; (bso#15277). * vfs_virusfilter segfault on access, directory edgecase (accessing NULL value); (bso#15283). * CVE-2022-38023 [SECURITY] Samba should refuse RC4 (aka md5) based SChannel on NETLOGON (additional changes); (bso#15240). * %U for include directive doesn't work for share listing (netshareenum); (bso#15243). * Shares missing from netshareenum response in samba 4.17.4; (bso#15266). * ctdb: use-after-free in run_proc; (bso#15269). * irpc_destructor may crash during shutdown; (bso#15280). * auth3_generate_session_info_pac leaks wbcAuthUserInfo; (bso#15286). * smbclient segfaults with use after free on an optimized build; (bso#15268). * smbstatus leaking files in msg.sock and msg.lock; (bso#15282). * Leak in wbcCtxPingDc2; (bso#15164). * Access based share enum does not work in Samba 4.16+; (bso#15265). * Crash during share enumeration; (bso#15267). * rep_listxattr on FreeBSD does not properly check for reads off end of returned buffer; (bso#15271). * Avoid relying on C89 features in a few places; (bso#15281).- Make (32bit) samba-libs conflict with old samba-ad-dc-libs package to satisfy installcheck.- Make samba-libs conflict with old samba-ad-dc-libs package to satisfy installcheck.- Remove non functioning ifup/ifdown samba-winbindd scripts; (bsc#1207414).- libdsdb-module-samba4 should be packaged as part of samba-libs and not samba-ad-dc-libs. Additionally no need for it to be removed conditionally.- Clean up logic for PAM migration settings in spec file.- Change with_dc default to 0 (for non TW builds), ADDC feature is deprecated and will no longer be included in >= SLE15-SP5; (jsc#PED-1122).- Update to 4.17.4 * CVE-2022-44640 Upstream Heimdal free of user-controlled pointer in FAST; (bsc#14929); * CVE-2021-20251 Bad password count not incremented atomically; (bsc#14611); * CVE-2022-42898 krb5_pac_parse() buffer parsing vulnerability; (bsc#15203); * CVE-2022-37966 rc4-hmac Kerberos session keys issued to modern servers; (bso#15237); * CVE-2022-37967 Kerberos constrained delegation ticket forgery possible against Samba AD DC; (bso#15231); * CVE-2022-38023 RC4/HMAC-MD5 NetLogon Secure Channel is weak and should be avoided; (bso#15240); * pam_winbind uses time_t and pointers assuming they are of the same size; (bso#15224); * Heimdal session key selection in AS-REQ examines wrong entry; (bso#15219); * filter-subunit is inefficient with large numbers of knownfails; (bso#15258); * smbd allows setting FILE_ATTRIBUTE_TEMPORARY on directories; (bso#15252); * The KDC logic arround msDs-supportedEncryptionTypes differs from Windows; (bso#13135); * libnet: change_password() doesn't work with dcerpc_samr_ChangePasswordUser4(); (bso#15206); * Heimdal session key selection in AS-REQ examines wrong entry; (bso#15219); * Memory leak in snprintf replacement functions; (bso#15230); * RODC doesn't reset badPwdCount reliable via an RWDC (CVE-2021-20251 regression); (bso#15253); * Prevent EBADF errors with vfs_glusterfs; (bso#15198); * %U for include directive doesn't work for share listing (netshareenum); (bso#15243); * Stack smashing in net offlinejoin requestodj; (bso#15257); * Windows 11 22H2 and Samba-AD 4.15 Kerberos login issue; (bso#15197); * Heimdal session key selection in AS-REQ examines wrong entry; (bso#15219); - Remove deprecated if-{down,up} scripts; (bsc#1206444); - Adjust the systemd drop-in file for named service; (bsc#1201689); * Paths are additive so do not repeat paths from named.service * Prefix the samba DLZ directory with "-" to ignore this path if it does not exists- Introduce without-smb1-server spec flag; (bsc#1205104); - Update to 4.17.3 * CVE-2022-42898: Samba buffer overflow vulnerabilities on 32-bit systems; (bsc#1205126); (bso#15203); - Replace obsolete python-gpgme with python-gpg * Upstream replaced it in v4.9.5 -- bso#13728 - Update to 4.17.2 * CVE-2022-3592 [SECURITY] samba: Wide links protection broken; (bso#15207); (bsc#1204499). * CVE-2022-3437 [SECURITY] samba: Buffer overflow in Heimdal unwrap_des3();(bso#15134); (bsc#1204254). - Update to 4.17.1 * CVE-2021-20251 [SECURITY] Bad password count not incremented atomically; (bso#14611). * smbXsrv_connection_shutdown_send result leaked; (bso#15174). * Flush on a named stream never completes; (bso#15182). * Permission denied calling SMBC_getatr when file not exists; (bso#15195). * Samba 4.5 sometimes cannot be upgraded to Samba 4.6 or later over DRS: WERROR_DS_DRA_MISSING_PARENT due to faulty GET_ANC; (bso#15189). * pytest: add file removal helpers for TestCaseInTempDir; (bso#15191). * CVE-2021-20251 [SECURITY] Bad password count not incremented atomically; (bso#14611). * Samba 4.5 sometimes cannot be upgraded to Samba 4.6 or later over DRS: WERROR_DS_DRA_MISSING_PARENT due to faulty GET_ANC; (bso#15189). * Flush on a named stream never completes; (bso#15182). * vfs_gpfs silently garbles timestamps > year 2106; (bso#15151). * CVE-2021-20251 [SECURITY] Bad password count not incremented atomically; (bso#14611). * multi-channel socket passing may hit a race if one of the involved processes already existed; (bso#15200). * memory leak on temporary of struct imessaging_post_state and struct tevent_immediate on struct imessaging_context (in rpcd_spoolss and maybe others); (bso#15201). * Since popt1.19 various use after free errors using result of poptGetArg are now exposed; (bso#15205); (boo#1204279). * Remove special case for O_CREAT in SMB_VFS_OPENAT from vfs_glusterfs; (bso#15192). * GETPWSID in memory cache grows indefinetly with each NTLM auth; (bso#15169). * CVE-2021-20251 [SECURITY] Bad password count not incremented atomically; (bso#14611). - Install a systemd drop-in file for named service to allow read/write access to the DLZ directory; (bsc#1201689); - Fix use after free errors resulting from using return of poptGetArg exposed since popt-1.19; (boo#1204279); (bso#15205). - s3: smbd: Fix memory leak in smbd_server_connection_terminate_done(); (bso#15174). - Disable SMB1 for tumbleweed builds. - Update to 4.17.0 * acl_xattr VFS module may unintentionally use filesystem permissions instead of ACL from xattr; (bso#15126). * Missing SMB2-GETINFO access checks from MS-SMB2 3.3.5.20.1; (bso#15153). * assert failed: !is_named_stream(smb_fname)") at ../../lib/util/fault.c:197; (bso#15161). * acl_xattr VFS module may unintentionally use filesystem permissions instead of ACL from xattr; (bso#15126). * assert failed: !is_named_stream(smb_fname)") at ../../lib/util/fault.c:197; (bso#15161). * Cross-node multi-channel reconnects result in SMB2 Negotiate returning NT_STATUS_NOT_SUPPORTED; (bso#15159). * winbind at info level debug can coredump when processing wb_lookupusergroups; (bso#15160). * Make use of glfs_*at() API calls in vfs_glusterfs; (bso#15157). * Possible use after free of connection_struct when iterating smbd_server_connection->connections; (bso#15128). * `net usershare add` fails with flag works with --long but fails with -l; (bso#15145). * acl_xattr VFS module may unintentionally use filesystem permissions instead of ACL from xattr; (bso#15126). * Performance regression on contended path based operations; (bso#15125). * Missing READ_LEASE break could cause data corruption; (bso#15148). * libsamba-errors uses a wrong version number; (bso#15141). * SMB1 negotiation can fail to handle connection errors; (bso#15152). * New filename parser doesn't check veto files smb.conf parameter; (bso#15143). * 4.17.rc1 still uses symlink-race prone unix_convert(); (bso#15144). * Backport fileserver related changed to 4.17.0rc2; (bso#15146). * Manpage for smbstatus json is missing; (bso#15147). * Backport fileserver related changed to 4.17.0rc2; (bso#15146). * Performance regression on contended path based operations; (bso#15125). * Backport fileserver related changed to 4.17.0rc2; (bso#15146). * Fix issues found by coverity in smbstatus json code; (bso#15140). * Backport fileserver related changed to 4.17.0rc2; (bso#15146). - Migration to /usr/etc: Saving user changed configuration files in /etc and restoring them while an RPM update. - Update to 4.16.4 * CVE-2022-2031: Samba AD users can bypass certain restrictions associated with changing passwords; (bsc#1201495); (bso#15047); * CVE-2022-32744: Samba AD users can forge password change requests for any user; (bsc#1201493); (bso#15074); * CVE-2022-32745: Samba AD users can crash the server process with an LDAP add or modify request; (bsc#1201492); (bso#15008); * CVE-2022-32746: Samba AD users can induce a use-after-free in the server process with an LDAP add or modify request; (bsc#1201490); (bso#15009); * CVE-2022-32742: Server memory information leak via SMB1; (bsc#1201496); (bso#15085); - Update to 4.16.3 * Using vfs_streams_xattr and deleting a file causes a panic; (bso#15099); * Add support for bind 9.18; (bso#14986); * logging dsdb audit to specific files does not work; (bso#15076); * Problem when winbind renews Kerberos; (bso#14979); (bsc#1196224); * Samba with new lorikeet-heimdal fails to build on gcc 12.1 in developer mode; (bso#15095); * Crash in streams_xattr because fsp->base_fsp->fsp_name is NULL; (bso#15105); * Crash in rpcd_classic - NULL pointer deference in mangle_is_mangled(); (bso#15118); * smbclient commands del & deltree fail with NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100); (bsc#1200556); * Fix check for chown when processing NFSv4 ACL; (bso#15120); * The pcap background queue process should not be stopped; (bso#15082); * testparm: Fix typo in idmap rangesize check; (bso#15097); * net ads info returns LDAP server and LDAP server name as null; (bso#15106); * ldconfig: /lib64/libsmbconf.so.0 is not a symbolic link; (bso#15108); * CTDB child process logging does not work as expected; (bso#15090); - Update spec file to fix the optional Heimdal DC build - Fix external trusts with MIT Kerberos 1.20 - Add missing samba-client requirement to samba-winbind package; (bsc#1198255); - Move pdb backends from package samba-libs to package samba-client-libs and remove samba-libs requirement from samba-winbind; (bsc#1200964); (bsc#1198255); - Add sysuser-shadow requirement for packages using systemd-sysusers - Use the canonical realm name to refresh the Kerberos tickets; (bsc#1196224); (bso#14979); - Moved logrotate files from user specific directory /etc/logrotate.d to vendor specific directory /usr/etc/logrotate.d. - Update to 4.16.2 * Use pathref fd instead of io fd in vfs_default_durable_cookie; (bso#15042); * vfs_gpfs with vfs_shadowcopy2 fail to restore file if original file had been deleted; (bso#15069); * Reintroduce netgroups support; (bso#15087); * net ads info shows LDAP Server: 0.0.0.0 depending on contacted server; (bso#14674); * Update from 4.15 to 4.16 breaks discovery of [homes] on standalone server from Win and IOS; (bso#15062); * waf produces incorrect names for python extensions with Python 3.11; (bso#15071); * smbclient -E doesn't work as advertised; (bso#15075); * The samba background daemon doesn't refresh the printcap cache on startup; (bso#15081); * Out-by-4 error in smbd read reply max_send clamp; (bso#14443); - Fix samba4.blackbox.net_ads_dns_async test with bind9 >= 9.17.7 - Support building with MIT Kerberos 1.20 - Bronze bit and S4U support with MIT Kerberos 1.20 for Samba AD DC; (CVE-2020-17049); - Resource Based Constrained Delegation (RBCD) for Samba AD DC - Support building with gcc 12.1 - Use requires_eq macro to require the libldb2 version available at samba-dsdb-modules build time; (bsc#1199362); - Update to 4.16.1 * Share and server swapped in smbget password prompt; (bso#14831); * Durable handles won't reconnect if the leased file is written to; (bso#15022); * rmdir silently fails if directory contains unreadable files and hide unreadable is yes; (bso#15023); * SMB2_CLOSE_FLAGS_FULL_INFORMATION fails to return information on renamed file handle; (bso#15038); * Need to describe --builtin-libraries= better (compare with - -bundled-libraries); (bso#8731); * vfs_shadow_copy2 breaks "smbd async dosmode" sync fallback; (bso#14957); * shadow_copy2 fails listing snapshotted dirs with shadow:fixinodes; (bso#15035); * PAM Kerberos authentication incorrectly fails with a clock skew error; (bso#15046); * Username map - samba erroneously applies unix group memberships to user account entries; (bso#15041); * KVNO off by 100000; (bso#14951); * Uninitialized litemask in variable in vfs_gpfs module; (bso#15027); * vfs_gpfs recalls=no option prevents listing files; (bso#15055); * smbd doesn't handle UPNs for looking up names; (bso#15054); - Update update-apparmor-samba-profile script, replace non-printable delimiter with more human readable separator as sed can accept separators that can appear in the input data. - Fix update-apparmor-samba-profile script, sed doesn't like multibyte separators; (bsc#1198309). - Update to 4.16.0 * New samba-dcerpcd binary to provide DCERPC in the member server setup * Certificate Auto Enrollment * Ability to add ports to dns forwarder addresses in internal DNS backend * No longer using Linux mandatory locks for sharemodes * SMB1 protocol has been deprecated, particularly older dialects * SMB1 protocol SMBCopy command removed * SMB1 server-side wildcard expansion removed - Add python3-dnspython to samba-ad-dc recommens; (bsc#1187101); - Use systemd-sysusers to create system users; (bsc#1182847);- Install a systemd drop-in file for named service to allow read/write access to the DLZ directory; (bsc#1201689);- Update to 4.15.12 * CVE-2022-42898: samba: heimdal: Samba buffer overflow vulnerabilities on 32-bit systems; (bso#15203); (bsc#1205126). - Update to 4.15.11 * Allow rebuild of Centos 8 images after move to vault for Samba 4.15; (bso#15193). * CVE-2022-3437: samba: Buffer overflow in Heimdal unwrap_des3(); (bso#15134); (bsc#1204254)- Update to 4.15.10 * Possible use after free of connection_struct when iterating smbd_server_connection->connections; (bso#15128); (bsc#1200102). * smbXsrv_connection_shutdown_send result leaked; (bso#15174). * Spotlight RPC service returns wrong response when Spotlight is disabled on a share; (bso#15086). * acl_xattr VFS module may unintentionally use filesystem permissions instead of ACL from xattr; (bso#15126). * Missing SMB2-GETINFO access checks from MS-SMB2 3.3.5.20.1; (bso#15153). * assert failed: !is_named_stream(smb_fname)") at ../../lib/util/fault.c:197; (bso#15161). * Missing READ_LEASE break could cause data corruption; (bso#15148). * rpcclient can crash using setuserinfo(2); (bso#15124). * Samba fails to build with glibc 2.36 caused by including in libreplace; (bso#15132). * SMB1 negotiation can fail to handle connection errors; (bso#15152). * samba-tool domain join segfault when joining a samba ad domain; (bso#15078). - Update to 4.15.9 * CVE-2022-32742:SMB1 code does not correct verify SMB1write, SMB1write_and_close, SMB1write_and_unlock lengths; (bso#15085); (bsc#1201496). * CVE-2022-32746: samba: Use-after-free occurring in database audit logging; (bso#15009); (bso#15096); (bsc#1201490). * CVE-2022-2031: samba, ldb: AD users can bypass certain restrictions associated with changing passwords; (bso#15047); (bsc#1201495); * CVE-2022-32745: samba: ldb: AD users can crash the server process with an LDAP add or modify request; (bso#15008); (bso#15096); (bsc#1201492). * CVE-2022-2031: samba, ldb: AD users can bypass certain restrictions associated with changing passwords; (bso#15047); (bsc#1201495); * CVE-2022-32744: samba, ldb: AD users can forge password change requests for any user; (bso#15074); (bso#15047); (bsc#1201493).- CVE-2022-1615: Do not ignore errors in random number generation; (bso#15103); (bsc#1202976); - CVE-2022-32743: Implement validated dnsHostName write rights; (bso#14833); (bsc#1202803);- Fix Use after free when iterating smbd_server_connection->connections after tree disconnect failure; (bso#15128); (bsc#1200102).- CVE-2022-32746: samba: Use-after-free occurring in database audit logging; (bso#15009); (bso#15096); (bsc#1201490). - CVE-2022-32745: samba: ldb: AD users can crash the server process with an LDAP add or modify request; (bso#15008); (bso#15096); (bsc#1201492). - CVE-2022-2031: samba, ldb: AD users can bypass certain restrictions associated with changing passwords; (bso#15047); (bsc#1201495); - CVE-2022-32742:SMB1 code does not correct verify SMB1write, SMB1write_and_close, SMB1write_and_unlock lengths; (bso#15085); (bsc#1201496). - CVE-2022-32744: samba, ldb: AD users can forge password change requests for any user; (bso#15074); (bso#15047); (bsc#1201493).- Update to 4.15.8 * Use pathref fd instead of io fd in vfs_default_durable_cookie; (bso#15042); * Setting fruit:resource = stream in vfs_fruit causes a panic; (bso#15099); * Add support for bind 9.18; (bso#14986); * logging dsdb audit to specific files does not work; (bso#15076); * vfs_gpfs with vfs_shadowcopy2 fail to restore file if original file had been deleted; (bso#15069); * netgroups support removed; (bso#15087); (bsc#1199247); * net ads info shows LDAP Server: 0.0.0.0 depending on contacted server; (bso#14674); (bsc#1199734); * waf produces incorrect names for python extensions with Python 3.11; (bso#15071); * smbclient commands del & deltree fail with NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100); (bsc#1200556); * vfs_gpfs recalls=no option prevents listing files; (bso#15055); * waf produces incorrect names for python extensions with Python 3.11; (bso#15071); * Compile error in source3/utils/regedit_hexedit.c; (bso#15091); * ldconfig: /lib64/libsmbconf.so.0 is not a symbolic link; (bso#15108); * smbd doesn't handle UPNs for looking up names; (bso#15054); * Out-by-4 error in smbd read reply max_send clamp; (bso#14443); - Move pdb backends from package samba-libs to package samba-client-libs and remove samba-libs requirement from samba-winbind; (bsc#1200964); (bsc#1198255); - Use the canonical realm name to refresh the Kerberos tickets; (bsc#1196224); (bso#14979);- Fix smbclient commands del & deltree failing with NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100); (bsc#1200556).- Revert NIS support removal; (bsc#1199247);- Use requires_eq macro to require the libldb2 version available at samba-dsdb-modules build time; (bsc#1199362);- Add missing samba-client requirement to samba-winbind package; (bsc#1198255);- Update to 4.15.7 * Share and server swapped in smbget password prompt; (bso#14831); * Durable handles won't reconnect if the leased file is written to; (bso#15022); * rmdir silently fails if directory contains unreadable files and hide unreadable is yes; (bso#15023); * SMB2_CLOSE_FLAGS_FULL_INFORMATION fails to return information on renamed file handle; (bso#15038); * vfs_shadow_copy2 breaks "smbd async dosmode" sync fallback; (bso#14957); * shadow_copy2 fails listing snapshotted dirs with shadow:fixinodes; (bso#15035); * PAM Kerberos authentication incorrectly fails with a clock skew error; (bso#15046); * username map - samba erroneously applies unix group memberships to user account entries; (bso#15041); * NT_STATUS_ACCESS_DENIED translates into EPERM instead of EACCES in SMBC_server_internal; (bso#14983); * Simple bind doesn't work against an RODC (with non-preloaded users); (bso#13879); * Crash of winbind on RODC; (bso#14641); * uncached logon on RODC always fails once; (bso#14865); * KVNO off by 100000; (bso#14951); * LDAP simple binds should honour "old password allowed period"; (bso#15001); * wbinfo -a doesn't work reliable with upn names; (bso#15003); * Simple bind doesn't work against an RODC (with non-preloaded users); (bso#13879); * Uninitialized litemask in variable in vfs_gpfs module; (bso#15027); * Regression: create krb5 conf = yes doesn't work with a single KDC; (bso#15016);- Add provides to samba-client-libs package to fix upgrades from previous versions; (bsc#1197995);- Add missing samba-libs requirement to samba-winbind package; (bsc#1198255);- Update to 4.15.6 * Renaming file on DFS root fails with NT_STATUS_OBJECT_PATH_NOT_FOUND; (bso#14169); * Samba does not response STATUS_INVALID_PARAMETER when opening 2 objects with same lease key; (bso#14737); * NT error code is not set when overwriting a file during rename in libsmbclient; (bso#14938); * Fix ldap simple bind with TLS auditing; (bso#14996); * net ads info shows LDAP Server: 0.0.0.0 depending on contacted server; (bso#14674); * Problem when winbind renews Kerberos; (bso#14979); (bsc#1196224); * pam_winbind will not allow gdm login if password about to expire; (bso#8691); * virusfilter_vfs_openat: Not scanned: Directory or special file; (bso#14971); * DFS fix for AIX broken; (bso#13631); * Solaris and AIX acl modules: wrong function arguments; (bso#14974); * Function aixacl_sys_acl_get_file not declared / coredump; (bso#7239); * Regression: Samba 4.15.2 on macOS segfaults intermittently during strcpy in tdbsam_getsampwnam; (bso#14900); * Fix a use-after-free in SMB1 server; (bso#14989); * smb2_signing_decrypt_pdu() may not decrypt with gnutls_aead_cipher_decrypt() from gnutls before 3.5.2; (bso#14968); * Changing the machine password against an RODC likely destroys the domain join; (bso#14984); * authsam_make_user_info_dc() steals memory from its struct ldb_message *msg argument; (bso#14993); * Use Heimdal 8.0 (pre) rather than an earlier snapshot; (bso#14995); * Samba autorid fails to map AD users if id rangesize fits in the id range only once; (bso#14967);- Fix mismatched version of libldb2; (bsc#1196788). - Drop obsolete SuSEfirewall2 service files.- Drop obsolete Samba fsrvp v0->v1 state upgrade functionality; (bsc#1080338).- Fix ntlm authentications with "winbind use default domain = yes"; (bso#13126); (bsc#1173429); (bsc#1196308).- Fix samba-ad-dc status warning notification message by disabling systemd notifications in bgqd; (bsc#1195896); (bso#14947).- libldb version mismatch in Samba dsdb component; (bsc#1118508);- Update to 4.15.5 * CVE-2021-44141: UNIX extensions in SMB1 disclose whether the outside target of a symlink exists; (bso#14911); (bsc#1193690). * CVE-2021-44142: Out-of-Bound Read/Write on Samba vfs_fruit module; (bso#14914); (bsc#1194859). * CVE-2022-0336: Re-adding an SPN skips subsequent SPN conflict checks; bso#14950); (bsc#1195048).- CVE-2021-44141: Information leak via symlinks of existance of files or directories outside of the exported share; (bso#14911); (bsc#1193690); - CVE-2021-44142: Out-of-bounds heap read/write vulnerability in VFS module vfs_fruit allows code execution; (bso#14914); (bsc#1194859); - CVE-2022-0336: Samba AD users with permission to write to an account can impersonate arbitrary services; (bso#14950); (bsc#1195048);- Update to 4.15.4 * Duplicate SMB file_ids leading to Windows client cache poisoning; (bso#14928); * Failed to parse NTLMv2_RESPONSE length 95 - Buffer Size Error - NT_STATUS_BUFFER_TOO_SMALL; (bso#14932); * kill_tcp_connections does not work; (bso#14934); * Can't connect to Windows shares not requiring authentication using KDE/Gnome; (bso#14935); * smbclient -L doesn't set "client max protocol" to NT1 before calling the "Reconnecting with SMB1 for workgroup listing" path; (bso#14939); * Cross device copy of the crossrename module always fails; (bso#14940); * symlinkat function from VFS cap module always fails with an error; (bso#14941); * Fix possible fsp pointer deference; (bso#14942); * Missing pop_sec_ctx() in error path inside close_directory(); (bso#14944); * "smbd --build-options" no longer works without an smb.conf file; (bso#14945);- Use pkgconfig(krb5) as dependency for the -devel package: allow OBS to pick the right flavor of krb5-devel (full vs mini). - Do not require the 'krb5' symbol by samba-client-libs: this package has an automatic dependency due to linkage on libgssapi_krb5.so.2. Automatic deps are always better. - Do not require the 'krb5' symbol from samba-libs: samba-libs requires samba-client-libs, which in turn requires krb5 libraries. Samba-libs itself has no need for krb5 (but get it indirectly anyway).- Reorganize libs packages. Split samba-libs into samba-client-libs, samba-libs, samba-winbind-libs and samba-ad-dc-libs, merging samba public libraries depending on internal samba libraries into these packages as there were dependency problems everytime one of these public libraries changed its version (bsc#1192684). The devel packages are merged into samba-devel. - Rename package samba-core-devel to samba-devel - Add python-rpm-macros to build requirements - Update the symlink create by samba-dsdb-modules to private samba ldb modules following libldb2 changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba- Update to 4.15.3 * Recursive directory delete with veto files is broken in 4.15.0; (bso#14878); * A directory containing dangling symlinks cannot be deleted by SMB2 alone when they are the only entry in the directory; (bso#14879); * SIGSEGV in rmdir_internals/synthetic_pathref - dirfsp is used uninitialized in rmdir_internals(); (bso#14892); * MaxQueryDuration not honoured in Samba AD DC LDAP; (bso#14694); * The CVE-2020-25717 username map [script] advice has undesired side effects for the local nt token; (bso#14901); (bsc#1192849); * User with multiple spaces (eg FredNurk) become un-deletable; (bso#14902); * Avoid storing NTTIME_THAW (-2) as value on disk; (bso#14127); * smbXsrv_client_global record validation leads to crash if existing record points at non-existing process; (bso#14882); * Crash in vfs_fruit asking for fsp_get_io_fd() for an XATTR call; (bso#14890); * Samba process doesn't log to logfile; (bso#14897); * set_ea_dos_attribute() fallback calling get_file_handle_for_metadata() triggers locking.tdb assert; (bso#14907); * Kerberos authentication on standalone server in MIT realm broken; (bso#14922); * Segmentation fault when joining the domain; (bso#14923); * Support for ROLE_IPA_DC is incomplete; (bso#14903); * rpcclient cannot connect to ncacn_ip_tcp services anymore; (bso#14767); * winexe crashes since 4.15.0 after popt parsing; (bso#14893); * net ads status -P broken in a clustered environment; (bso#14908); * Memory leak if ioctl(FSCTL_VALIDATE_NEGOTIATE_INFO) fails before smbd_smb2_ioctl_send; (bso#14788); * winbindd doesn't start when "allow trusted domains" is off; (bso#14899); * smbclient login without password using '-N' fails with NT_STATUS_INVALID_PARAMETER on Samba AD DC; (bso#14883); * A schannel client incorrectly detects a downgrade connecting to an AES only server; (bso#14912); * Possible null pointer dereference in winbind; (bso#14921); * Fix -k legacy option for client tools like smbclient, rpcclient, net, etc.; (bso#14846); * Add Debian 11 CI bootstrap support; (bso#14872); * Crash in recycle_unlink_internal(); (bso#14888);- Fix dependency problem upgrading from libndr0 to libndr2 and from libsamba-credentials0 to libsamba-credentials1; (bsc#1192684);- Fix regression introduced by CVE-2020-25717 patches, winbindd does not start when 'allow trusted domains' is off; (bso#14899); - Update to 4.15.2 * CVE-2016-2124: SMB1 client connections can be downgraded to plaintext authentication; (bso#12444); (bsc#1014440); * CVE-2020-25717: A user on the domain can become root on domain members; (bso#14556); (bsc#1192284); * CVE-2020-25718: Samba AD DC did not correctly sandbox Kerberos tickets issued by an RODC; (bso#14558); (bsc#1192246); * CVE-2020-25719: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets; (bso#14561); (bsc#1192247); * CVE-2020-25721: Kerberos acceptors need easy access to stable AD identifiers (eg objectSid); (bso#14557); (bsc#1192505); * CVE-2020-25722: Samba AD DC did not do suffienct access and conformance checking of data stored; (bso#14564); (bsc#1192283); * CVE-2021-3738: Use after free in Samba AD DC RPC server; (bso#14468); (bsc#1192215); * CVE-2021-23192: Subsequent DCE/RPC fragment injection vulnerability; (bso#14875); (bsc#1192214); - Update to 4.15.1 * vfs_shadow_copy2: core dump in make_relative_path; (bso#14682); * Log clutter from filename_convert_internal; (bso#14685); * MacOSX compilation fixes; (bso#14862); * rodc_rwdc test flaps; (bso#14868); * Provide a fix for MS CVE-2020-17049 in Samba [SECURITY] 'Bronze bit' S4U2Proxy Constrained Delegation bypass in Samba with embedded Heimdal; (bso#14642); * Python ldb.msg_diff() memory handling failure; (bso#14836); * "in" operator on ldb.Message is case sensitive; (bso#14845); * Release LDB 2.4.1 for Samba 4.15.1; (bso#14848); * samldb_krbtgtnumber_available() looks for incorrect string; (bso#14854); * Fix Samba support for UF_NO_AUTH_DATA_REQUIRED; (bso#14871); * Allow special chars like "@" in samAccountName when generating the salt; (bso#14874); * Correctly ignore comments in CTDB public addresses file; (bso#14826); * Fix transit path validation; (bso#12998); * Fix that child winbindd logs to log.winbindd instead of log.wb-; (bso#14852); * SMB3 cancel requests should only include the MID together with AsyncID when AES-128-GMAC is used; (bso#14855); * Prepare to operate with MIT krb5 >= 1.20; (bso#14870); * Heimdal prefers RC4 over AES for machine accounts; (bso#14864);- Enable samba-tool without ad dc.- Adjust spec to use pam macros; (bsc#1191046).- Adjust spec for size * allow some Recommends instead Requires to be configured for cifs-utils, samba-libs-python3 & samba-gpupdate; (bsc#1182847). * remove fam, undocumented and unneeded.- Add missing build dependency on bison when building with the embedded Heimdal Kerberos- Update to 4.15.0 * Removed SMB development dialects SMB2_22, SMB2_24 and SMB3_10 * VFS layer modernized. * Add the ability to set allow/deny lists for zone transfer clients in Bind DLZ plugin * Server multi-channel support no longer experimental * Improved command line user experience, unifying the options in different commands * Winbindd no longer scans trusted domains on startup and will use enterprise principals by default. * The net utility is now able to support the offline domain join feature * New options for 'samba-tool dns zoneoptions' for aging control and to mark old records as static or dynamic * DNS tombstones are now deleted as appropriate and use a consistent timestamp format * The 'samba-tool dns update' command validates and rejects now malformed IPv4 and IPv6 addresses * The 'samba-tool domain backup' command correctly takes out locks against concurrent modification during backup when using the LMDB backend * TruACL support has been removed * NIS support has been removed- Fix 'net rpc' authentication when using the machine account; (bsc#1189017); (bso#14796);- Fix dependency problem upgrading from libndr0 to libndr1; (bsc#1189875); - Fix dependency problem upgrading from libsmbldap0 to libsmbldap2; (bsc#1189875); - Fix wrong kvno exported to keytab after net ads changetrustpw due to replication delay; (bsc#1188727); - Add Certificate Auto Enrollment Policy; (jsc#SLE-18456). - Update to 4.13.10 * s3: smbd: Ensure POSIX default ACL is mapped into returned Windows ACL for directory handles; (bso#14708); * Take a copy to make sure we don't reference free'd memory; (bso#14721); * s3: lib: Fix talloc heirarcy error in parent_smb_fname(); (bso#14722); * s3: smbd: Remove erroneous TALLOC_FREE(smb_fname_parent) in change_file_owner_to_parent() error path; (bso#14736); * samba-tool: Give better error information when the 'domain backup restore' fails with a duplicate SID; (bso#14575); * smbd: Correctly initialize close timestamp fields; (bso#14714); * Spotlight RPC service doesn't work with vfs_glusterfs; (bso#14740); * ctdb: Fix a crash in run_proc_signal_handler(); (bso#14475); * gensec_krb5: Restore ipv6 support for kpasswd; (bso#14750); * smbXsrv_{open,session,tcon}: Protect smbXsrv_{open,session,tcon}_global_traverse_fn against invalid records; (bso#14752); * samba-tool domain backup offline doesn't work against bind DLZ backend; (bso#14027); * netcmd: Use next_free_rid() function to calculate a SID for restoring a backup; (bso#14669); - Update to 4.13.9 * s3: smbd: SMB1 SMBsplwr doesn't send a reply packet on success; (bso#14696); * Add documentation for dsdb_group_audit and dsdb_group_json_audit to "log level", synchronise "log level" in smb.conf with the code; (bso#14689); * Fix smbd panic when two clients open same file; (bso#14672); * Fix memory leak in the RPC server; (bso#14675); * s3: smbd: Fix deferred renames; (bso#14679); * s3-iremotewinspool: Set the per-request memory context; (bso#14675); * rpc_server3: Fix a memleak for internal pipes; (bso#14675); * third_party: Update socket_wrapper to version 1.3.2; (bso#11899); * third_party: Update socket_wrapper to version 1.3.3; (bso#14639); * idmap_rfc2307 and idmap_nss return wrong mapping for uid/gid conflict; (bso#14663); * Fix the build on OmniOS; (bso#14288); - Update to 4.13.8 * CVE-2021-20254: Fix buffer overrun in sids_to_unixids(); (bso#14571 - Update to 4.13.7 * Release with dependency on ldb version 2.2.1.- CVE-2021-20254 Buffer overrun in sids_to_unixids(); (bnc#14571); (bsc#1184677).- Fix offline domain backup not possible using lmdb version >= 0.9.26; (bso#14676); - Require libldb >= 2.2.1; (bsc#1183572); (bsc#1183574); - Update to 4.13.6 * CVE-2020-27840: samba: Unauthenticated remote heap corruption via bad DNs; (bso#14595); (bsc#1183572). * CVE-2021-20277: samba: out of bounds read in ldb_handler_fold; (bso#14655); (bsc#1183574). - Update to 4.13.5 * s3:modules:vfs_virusfilter: Recent talloc changes cause infinite start-up failure; (bso#14634); * s3: libsmb: Add missing cli_tdis() in error path if encryption setup failed on temp proxy connection; (bso#13992); * smbd: In conn_force_tdis_done() when forcing a connection closed force a full reload of services; (bso#14604); * dbcheck: Check Deleted Objects and reduce noise in reports about expired tombstones (bso#14593); * s3: Fix fcntl waf configure check; (bso#14503); * s3/auth: Implement "winbind:ignore domains"; (bso#14602); * smbd: Use fsp->conn->session_info for the initial delete-on-close token; (bso#14617); * s3: VFS: nfs4_acls. Add missing TALLOC_FREE(frame) in error path; (bso#14648); * classicupgrade: Treat old never expires value right; (bso#14624); * g_lock: Fix uninitalized variable reads; (bso#14636); * s3:pysmbd: Fix fd leak in py_smbd_create_file(); (bso#13898); * lib:util: Avoid free'ing our own pointer; (bso#14625); * HEIMDAL: krb5_storage_free(NULL) should work; (bso#12505);- Spec file fixes around systemd and requires; (bsc#1182830); - Align systemd service unit files with upstream provided ones.- Update to 4.13.4 * Work around special SMB2 IOCTL response behavior of NetApp Ontap 7.3.7; (bso#14607); * Temporary DFS share setup doesn't set case parameters in the same way as a regular share definition does; (bso#14612); * lib: Avoid declaring zero-length VLAs in various messaging functions; (bso#14605); * Do not create an empty DB when accessing a sam.ldb; (bso#14579); * vfs_fruit may close wrong backend fd; (bso#14596); * Temporary DFS share setup doesn't set case parameters in the same way as a regular share definition does; (bso#14612); * vfs_virusfilter: Allocate separate memory for config char*; (bso#14606); * vfs_fruit may close wrong backend fd; (bso#14596); * Work around special SMB2 IOCTL response behavior of NetApp Ontap 7.3.7; (bso#14607); * The cache directory for the user gencache should be created recursively; (bso#14601); * Be more flexible with repository names in CentOS 8 test environments; (bso#14594);- Uninstalling samba-client: Failed to disable unit, cifs.service does not exists; (bsc#1180388);- Update to 4.13.3 + libcli: smb2: Never print length if smb2_signing_key_valid() fails for crypto blob; (bso#14210); + s3: modules: gluster. Fix the error I made in preventing talloc leaks from a function; (bso#14486); + s3: smbd: Don't overwrite contents of fsp->aio_requests[0] with NULL via TALLOC_FREE(); (bso#14515); + s3: spoolss: Make parameters in call to user_ok_token() match all other uses; (bso#14568); + s3: smbd: Quiet log messages from usershares for an unknown share; (bso#14590); + samba process does not honor max log size; (bso#14248); + vfs_zfsacl: Add missing inherited flag on hidden "magic" everyone@ ACE; (bso#14587); + s3-libads: Pass timeout to open_socket_out in ms; (bso#13124); + s3-vfs_glusterfs: Always disable write-behind translator; (bso#14486); + smbclient: Fix recursive mget; (bso#14517); + clitar: Use do_list()'s recursion in clitar.c; (bso#14581); + manpages/vfs_glusterfs: Mention silent skipping of write-behind translator; (bso#14486); + vfs_shadow_copy2: Preserve all open flags assuming ROFS; (bso#14573); + interface: Fix if_index is not parsed correctly; (bso#14514);- Update to 4.13.2 + s3: modules: vfs_glusterfs: Fix leak of char **lines onto mem_ctx on return; (bso#14486); + RN: vfs_zfsacl: Only grant DELETE_CHILD if ACL tag is special; (bso#14471); + smb.conf.5: Add clarification how configuration changes reflected by Samba; (bso#14538); + daemons: Report status to systemd even when running in foreground; (bso#14552); + DNS Resolver: Support both dnspython before and after 2.0.0; (bso#14553); + s3-vfs_glusterfs: Refuse connection when write-behind xlator is present; (bso#14486); + provision: Add support for BIND 9.16.x; (bso#14487); + ctdb-common: Avoid aliasing errors during code optimization; (bso#14537); + libndr: Avoid assigning duplicate versions to symbols; (bso#14541); + docs: Fix default value of spoolss:architecture; (bso#14522); + winbind: Fix a memleak; (bso#14388); + s4:dsdb:acl_read: Implement "List Object" mode feature; (bso#14531); + docs-xml/manpages: Add warning about write-behind translator for vfs_glusterfs; (bso#14486); + nsswitch/nsstest.c: Avoid nss function conflicts with glibc nss.h. + vfs_shadow_copy2: Avoid closing snapsdir twice; (bso#14530); + third_party: Update resolv_wrapper to version 1.1.7; (bso#14547); + examples:auth: Do not install example plugin; (bso#14550); + ctdb-recoverd: Drop unnecessary and broken code; (bso#14513); + RN: vfs_zfsacl: Only grant DELETE_CHILD if ACL tag is special; (bso#14471);- Adjust smbcacls '--propagate-inheritance' feature to align with upstream; (bsc#1178469).- Update to samba 4.13.1 + CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with easily crafted records; (bsc#1177613); (bso#14472); + CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994); (bso#14436); + CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify; (bsc#1173902); (bso#14434); - Adjust systemd tmpfiles.d configuration, use /run/samba instead of /var/run/samba; (bsc#1177355);- Fix vfs_ceph query_directory regression; (bso#14519) - Drop liburing-devel for SLE15-SP2; (bsc#1177245)- Register CTDB recovery lock holder with ceph-mgr - Add liburing-devel dependency- Update to samba 4.13.0 + Require Python 3.6 + Move wide links functionality into VFS module + Deprecate NT4-like 'classic' Samba domain controllers + Deprecate SMBv1 only protocol options + Remove deprecated "ldap ssl ads" option + Unify asynchronous DCE-RPC server; (jsc#SES-645) + Replay multichannel lease break requests; (bso#11897); (jsc#SES-655) + Drop internal byteorder.h header from util-devel package + Remove final code for the AD DC LDAP backend + Add AD DC Group Policy Scripts + Only use gnutls_aead_cipher_encryptv2() for GnuTLS > 3.6.14; (bso#14399) + Fix %U substitutions if it contains a domain name; (bso#14467) + Fix krb5.conf creation for 'net ads join'; (bso#14479) + Fix build problem if libbsd-dev is not installed; (bso#14482) + Toggle vfs_snapper using "--with-shared-modules"; (bso#14437) + Fix idmap_ad RFC4511 response handling; (bso#14465) + Fix panic in get_lease_type(); (bso#14428)- Update to samba 4.11.13 + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2 against unencrypted passwords; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Support "server require schannel:WORKSTATION$ = no" about unsecure configurations; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): s4 torture rpc: repeated bytes in client challenge; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): libcli/auth: Reject weak client challenges in netlogon_creds_server_init() "server require schannel:WORKSTATION$ = no"; (bsc#1176579); (bso#14497); - Update to samba 4.11.12 + s3: libsmb: Fix SMB2 client rename bug to a Windows server; (bso#14403); + dsdb: Allow "password hash userPassword schemes = CryptSHA256" to work on RHEL7; (bso#14424); + dbcheck: Allow a dangling forward link outside our known NCs; (bso#14450); + lib/debug: Set the correct default backend loglevel to MAX_DEBUG_LEVEL; (bso#14426); + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428); + lib/util: do not install "test_util_paths"; (bso#14370); + lib:util: Fix smbclient -l basename dir; (bso#14345); + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428); + util: Allow symlinks in directory_create_or_exist; (bso#14166); + docs: Fix documentation for require_membership_of of pam_winbind; (bso#14358); + s3:winbind:idmap_ad: Make failure to get attrnames for schema mode fatal; (bso#14425);- Add obsoletes to libsmbldap2 package to fix upgrades from previous versions; (bsc#1172810);- Fix net command unable to negotiate SMB2; (bsc#1174120);- Update to samba 4.11.11 + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ and VLV combined; (bso#14364); (bsc#1173159] + CVE-2020-10745: invalid DNS or NBT queries containing dots use several seconds of CPU each; (bso#14378); (bsc#1173160). + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP server with paged_result or VLV; (bso#14402); (bsc#1173161) + CVE-2020-14303: Endless loop from empty UDP packet sent to AD DC nbt_server; (bso#14417); (bsc#1173359). - Update to samba 4.11.10 + Fix segfault when using SMBC_opendir_ctx() routine for share folder that contains incorrect symbols in any file name; (bso#14374). + vfs_shadow_copy2 doesn't fail case looking in snapdirseverywhere mode; (bso#14350) + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr; (bso#14413). + Malicous SMB1 server can crash libsmbclient; (bso#14366) + winbindd: Fix a use-after-free when winbind clients exit; (bso#14382) + ldb: Bump version to 2.0.11, LMDB databases can grow without bounds. (bso#14330) - Update to samba 4.11.9 + nmblib: Avoid undefined behaviour in handle_name_ptrs(); (bso#14242). + 'samba-tool group' commands do not handle group names with special chars correctly; (bso#14296). + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo is not valid; (bso#14237). + Missing check for DMAPI offline status in async DOS attributes; (bso#14293). + smbd: Ignore set NTACL requests which contain S-1-5-88 NFS ACEs; (bso#14307). + vfs_recycle: Prevent flooding the log if we're called on non-existant paths; (bso#14316) + smbd mistakenly updates a file's write-time on close; (bso#14320). + RPC handles cannot be differentiated in source3 RPC server; (bso#14359). + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313). + nsswitch: Fix use-after-free causing segfault in _pam_delete_cred; (bso#14327). + Fix fruit:time machine max size on arm; (bso#13622) + CTDB recovery corner cases can cause record resurrection and node banning; (bso#14294). + ctdb: Fix a memleak; (bso#14348). + libsmb: Don't try to find posix stat info in SMBC_getatr(). + ctdb-tcp: Move free of inbound queue to TCP restart; (bso#14295); (bsc#1162680). + s3/librpc/crypto: Fix double free with unresolved credential cache; (bso#14344); (bsc#1169095) + s3:libads: Fix ads_get_upn(); (bso#14336). + CTDB recovery corner cases can cause record resurrection and node banning; (bso#14294) + Starting ctdb node that was powered off hard before results in recovery loop; (bso#14295); (bsc#1162680). + ctdb-recoverd: Avoid dereferencing NULL rec->nodemap; (bso#14324) - Update to samba 4.11.8 + CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with ASQ; (bso#14331); (bsc#1169850); + CVE-2020-10704: LDAP Denial of Service (stack overflow) in Samba AD DC; (bso#14334); (bsc#1169851); - Update to samba 4.11.7 + s3: lib: nmblib. Clean up and harden nmb packet processing; (bso#14239). + s3: VFS: full_audit. Use system session_info if called from a temporary share definition; (bso#14283) + dsdb: Correctly handle memory in objectclass_attrs; (bso#14258). + ldb: version 2.0.9, Samba 4.11 and later give incorrect results for SCOPE_ONE searches; (bso#14270) + auth: Fix CIDs 1458418 and 1458420 Null pointer dereferences; (bso#14247). + smbd: Handle EINTR from open(2) properly; (bso#14285) + winbind member (source3) fails local SAM auth with empty domain name; (bso#14247) + winbindd: Handling missing idmap in getgrgid(); (bso#14265). + lib:util: Log mkdir error on correct debug levels; (bso#14253). + wafsamba: Do not use 'rU' as the 'U' is deprecated in Python 3.9; (bso#14266). + ctdb-tcp: Make error handling for outbound connection consistent; (bso#14274). - Update to samba 4.11.6 + pygpo: Use correct method flags; (bso#14209). + vfs_ceph_snapshots: Fix root relative path handling; (bso#14216); (bsc#1141320). + Avoiding bad call flags with python 3.8, using METH_NOARGS instead of zero; (bso#14209). + source4/utils/oLschema2ldif: Include stdint.h before cmocka.h; (bso#14218). + docs-xml/winbindnssinfo: Clarify interaction with idmap_ad etc; (bso#14122). + smbd: Fix the build with clang; (bso#14251). + upgradedns: Ensure lmdb lock files linked; (bso#14199). + s3: VFS: glusterfs: Reset nlinks for symlink entries during readdir; (bso#14182). + smbc_stat() doesn't return the correct st_mode and also the uid/gid is not filled (SMBv1) file; (bso#14101). + librpc: Fix string length checking in ndr_pull_charset_to_null(); (bso#14219). + ctdb-scripts: Strip square brackets when gathering connection info; (bso#14227).- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);- Installing: samba - samba-ad-dc.service does not exist and unit not found; (bsc#1171437);- Fix samba_winbind package is installing python3-base without python3 package; (bsc#1169521);- Require libldb2 >= 2.0.10 after security release.- CVE-2020-10704: LDAP Denial of Service (stack overflow) in Samba AD DC; (bso#14334); (bsc#1169851); - CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with ASQ; (bso#14331); (bsc#1169850);- Fix smbclient crash with double free (with unresolved krb5 credential cache); (bso#14344); (bsc#1169095).- Starting ctdb node that was powered off hard before results in recovery loop; (bso#14295); (bsc#1162680).- CTDB doesn't retry outgoing connections on bind (and some other) failures; (bso#14274); (bsc#1162680).- Revert: Allow idmap_rid to have primary group other than "Domain Users"; (bsc#1087931).- Fix nmbstatus not reporting detailed information about workgroups; (bsc#1159464); - Fix querying all names registered within broadcast area; (bso#8927);- Update to samab 4.11.5 + CVE-2019-14902: Replication of ACLs down subtree on AD Directory is not automatic; (bso#12497); (bsc#1160850). + CVE-2019-19344: Fix server crash with dns zone scavenging = yes; (bso#14050); (bsc#1160852). + CVE-2019-14907: server-side crash after charset conversion failure (eg during NTLMSSP processing); (bso#14208); (bsc#1160888). - Update to samba 4.11.4 + Ensure SMB1 cli_qpathinfo2() doesn't return an inode number; (bso#14161). + Ensure we don't call cli_RNetShareEnum() on an SMB1 connection; (bso#14174). + NT_STATUS_ACCESS_DENIED becomes EINVAL when using SMB2 in SMBC_opendir_ctx; (bso#14176). + SMB2 - Ensure we use the correct session_id if encrypting an interim response; (bso#14189). + Prevent smbd crash after invalid SMB1 negprot; (bso#14205). + printing: Fix %J substition; (bso#13745). + Remove now unneeded call to cmdline_messaging_context(); (bso#13925). + Fix incomplete conversion of former parametric options; (bso#14069). + Fix sync dosmode fallback in async dosmode codepath; (bso#14070). + vfs_fruit returns capped resource fork length; (bso#14171). + libnet_join: Add SPNs for additional-dns-hostnames entries; (bso#14116). + smbd: Increase a debug level; (bso#14211). + Prevent azure ad connect from reporting discovery errors reference-value-not-ldap-conformant; (bso#14153). + krb5_plugin: Fix developer build with newer heimdal system library; (bso#14179). + replace: Only link libnsl and libsocket if required; (bso#14168); + ctdb: Incoming queue can be orphaned causing communication; breakdown; (bso#14175). + ldb: Release ldb 2.0.8. Cross-compile will not take cross-answers or cross-execute; (bso#13846). + heimdal-build: Avoid hard-coded /usr/include/heimdal in asn1_compile-generated code; (bso#13856).- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).- Update to samba 4.11.3 + CVE-2019-14861: DNSServer RPC server crash, an authenticated user can crash the DCE/RPC DNS management server by creating records with matching the zone name; (bso#14138); (bsc#1158108). + CVE-2019-14870: DelegationNotAllowed not being enforced, the DelegationNotAllowed Kerberos feature restriction was not being applied when processing protocol transition requests (S4U2Self), in the AD DC KDC; (bso#14187); (bsc#1158109).- CVE-2019-14861: DNSServer RPC server crash, an authenticated user can crash the DCE/RPC DNS management server by creating records with matching the zone name; (bso#14138); (bsc#1158108). - CVE-2019-14870: DelegationNotAllowed not being enforced, the DelegationNotAllowed Kerberos feature restriction was not being applied when processing protocol transition requests (S4U2Self), in the AD DC KDC; (bso#14187); (bsc#1158109).- Update to samba 4.11.2 + CVE-2019-10218: Client code can return filenames containing path separators; (bsc#1144902); (bso#14071). + CVE-2019-14833: Samba AD DC check password script does not receive the full password; (bso#12438). + CVE-2019-14847: User with "get changes" permission can crash AD DC LDAP server via dirsync; (bso#14040). - Fixes from 4.11.1 + Overlinking libreplace against librt and pthread against every binary or library causes issues; (bso#14140); + kpasswd fails when built with MIT Kerberos; (bso#14155); + Fix spnego fallback from kerberos to ntlmssp in smbd server; (bso#14106); + Stale file handle error when using mkstemp on a share; (bso#14137); + non-AES schannel broken; (bso#14134); + Joining Active Directory should not use SAMR to set the password; (bso#13884); + smbclient can blunder into the SMB1 specific cli_RNetShareEnum() call on an SMB2 connection; (bso#14152); + Deleted records can be resurrected during recovery; (bso#14147); + getpwnam and getpwuid need to return data for ID_TYPE_BOTH group; (bso#14141); + winbind does not list forest trusts with additional trust attributes; (bso#14130); + fault report points to outdated documentation; (bso#14139); + pam_winbind with krb5_auth or wbinfo -K doesn't work for users of trusted domains/forests; (bso#14124); + classicupgrade results in uncaught exception - a bytes-like object is required, not 'str'; (bso#14136); + pod2man is not longer required, stop checking at build time; (bso#14131); + Exit code of ctdb nodestatus should not be influenced by deleted nodes; (bso#14129); + username/password authentication doesn't work with CUPS and smbspool; (bso#14128); + smbc_readdirplus() is incompatible with smbc_telldir() and smbc_lseekdir(); (bso#14094);- CVE-2019-14847: User with "get changes" permission can crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598); - CVE-2019-10218: Client code can return filenames containing path separators; (bso#14071); (bsc#1144902);- CVE-2019-14833: samba: Accent with "check script password" Samba AD DC check password script does not receive the full password; (bso#12438); (bsc#1154289).- Update to samba 4.11.0 + For details on all items see WHATSNEW.txt in samba-doc package + Python2 runtime support removed; python 3.4 or later required + Security improvements: - SMB1 disabled by default - lanman and plaintext authentication deprecated - winbind: PAM_AUTH and NTLM_AUTH events logged - GnuTLS 3.2 required; system FIPS mode setting honored + CephFS Snapshot integration, exposed as previous file versions + ctdb changes: - onnode -o option removed - ctdbd logs when using more than 90% of a CPU thread - CTDB_MONITOR_SWAP_USAGE variable removed + AD Domain controller improvements: - Upgrade AD databse format - BIND9_FLATFILE deprecated - default process model chagned to prefork - bind9 dns operation duration logging - Default schema updated to 2012_R2; function level is unchanged - many performance improvements + Configuration webserver support removed- Fix broken username/password authentication with CUPS and smbspool; (bsc#1152143); (bso#14128).- Fix auth problems when printing via smbspool backend with kerberos; (bnc#1148539); (bso#13832).- Update to samba 4.10.8 + CVE-2019-10197: user escape from share path definition; (bso#14035); (bsc#1141267);- Fix build on newer systems by modifying samba.spec to use consistent non-relative paths for pammodules in configure line and specification of pam_winbind.so library to package.- Update to samba 4.10.7 + Unable to create or rename file/directory inside shares configured with vfs_glusterfs_fuse module; (bso#14010). + build: Allow build when '--disable-gnutls' is set; (bso#13844) + samba-tool: Add 'import samba.drs_utils' to fsmo.py; (bso#13973). + Fix 'Error 32 determining PSOs in system' message on old DB with FL upgrade; (bso#14008). + s4/libnet: Fix joining a Windows pre-2008R2 DC; (bso#14021) + join: Use a specific attribute order for the DsAddEntry nTDSDSA object; (bso#14046). + vfs_catia: Pass stat info to synthetic_smb_fname(); (bso#14015). + lookup_name: Allow own domain lookup when flags == 0; (bso#14091). + s4 librpc rpc pyrpc: Ensure tevent_context deleted last; (bso#13932). + DEBUGC and DEBUGADDC doesn't print into a class specific log file; (bso#13915). + Request to keep deprecated option "server schannel", VMWare Quickprep requires "auto"; (bso#13949). + dbcheck: Fallback to the default tombstoneLifetime of 180 days; (bso#13967). + dnsProperty fails to decode values from older Windows versions; (bso#13969). + samba-tool: Use only one LDAP modify for dns partition fsmo role transfer; (bso#13973). + third_party: Update waf to version 2.0.17; (bso#13960). + netcmd: Allow 'drs replicate --local' to create partitions; (bso#14051). + ctdb-config: Depend on /etc/ctdb/nodes file; (bso#14017).- CVE-2019-10197: user escape from share path definition; (bso#14035); (bsc#1141267).- Prepare for use future use of kernel keyrings, modify /etc/pam.d/samba to include pam_keyinit.so; (bsc#1144059).- Update samba-winbind script to work with systemd; (bsc#1132739); - Drop samba dhcpcd hook scripts - Update to samba 4.10.6 + s3: winbind: Fix crash when invoking winbind idmap scripts; (bso#13956). + smbd does not correctly parse arguments passed to dfree and quota scripts; (bso#13964). + samba-tool dns: use bytes for inet_ntop; (bso#13965). + samba-tool domain provision: Fix --interactive module in python3; (bso#13828). + ldb_kv: Skip @ records early in a search full scan; (bso#13893). + docs: Improve documentation of "lanman auth" and "ntlm auth" connection; (bso#13981). + python/ntacls: Use correct "state directory" smb.conf option instead of "state dir"; (bso#14002). + registry: Add a missing include; (bso#13840). + Fix SMB guest authentication; (bso#13944). + AppleDouble conversion breaks Resourceforks; (bso#13958). + vfs_fruit makes direct use of syscalls like mmap() and pread(); (bso#13968). + s3:mdssvc: Fix flex compilation error; (bso#13987). + s3/vfs_glusterfs[_fuse]: Avoid using NAME_MAX directly; (bso#13872). + dsdb:samdb: schemainfo update with relax control; (bso#13799). + s3:util: Move static file_pload() function to lib/util; (bso#13964). + smbd: Fix a panic; (bso#13957). + ldap server: Generate correct referral schemes; (bso#12478). + s4 dsdb/repl_meta_data: fix use after free in dsdb_audit_add_ldb_value; (bso#13941). + s4 dsdb: Fix use after free in samldb_rename_search_base_callback; (bso#13942). + dsdb/repl: we need to replicate the whole schema before we can apply it; (bso#12204). + ldb: Release ldb 1.5.5; (bso#12478). + Schema replication fails if link crosses chunk boundary backwards; (bso#13713). + 'samba-tool domain schemaupgrade' uses relax control and skips the schemaInfo update provision; (bso#13799). + dsdb_audit: avoid printing "... remote host [Unknown] SID [(NULL SID)] ..."; (bso#13916). + python/ntacls: We only need security.SEC_STD_READ_CONTROL in order to get the ACL; (bso#13917). + s3:loadparm: Ensure to truncate FS Volume Label at multibyte boundary; (bso#13947). + Using Kerberos credentials to print using spoolss doesn't work; (bso#13939). + wafsamba: Use native waf timer; (bso#13998). + ctdb-scripts: Fix tcp_tw_recycle existence check; (bso#13984).- Update to samba-4.10.5 (including updates for 4.10.4, 4.10.3) + CVE-2019-12435 rpc/dns: Avoid NULL deference if zone not found in DnssrvOperation2; (bso#13922); (bsc#1137815). + CVE-2019-12436 dsdb/paged_results: Ignore successful results without messages; (bso#13951); (bsc#1137816). - Update to samba-4.10.4 + s3: SMB1: Don't allow recvfile on stream fsp's; (bso#13938). + py/provision: Fix for Python 2.6; (bso#13882). + netcmd: Fix 'passwordsettings --max-pwd-age' command; (bso#13873). + s3-libnet_join: 'net ads join' to child domain fails when using "-U admin@forestroot"; (bso#13861). + vfs_ceph: Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245). + vfs_ceph: Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697). + ctdb-common: Avoid race between fd and signal events; (bso#13895). + ctdb-common: Fix memory leak in run_proc; (bso#13943). + lib: Initialize getline() arguments; (bso#13892). + winbind: Fix overlapping id ranges; (bco#13903). + lib util debug: Increase format buffer to 4KiB; (bso#13902). + nsswitch pam_winbind: Fix Asan use after free; (bso#13927). + s4 lib socket: Ensure address string owned by parent struct; (bso#13929). + s3 rpc_client: Fix Asan stack use after scope; (bso#13936). + s3:smbd: Handle IO_REPARSE_TAG_DFS in SMB_FIND_FILE_FULL_DIRECTORY_INFO; (bso#10097). + smb2_tcon: Avoid STATUS_PENDING completely on tdis; (bso#10344). + smb2_sesssetup: avoid STATUS_PENDING responses for session setup; (bso#12845). + smb2_tcon: Avoid STATUS_PENDING completely on tdis; (bso#13698). + smb2_sesssetup: avoid STATUS_PENDING responses for session setup; (bso#13796). + dbcheck: Fix the err_empty_attribute() check; (bso#13843). + vfs_snapper: Drop unneeded fstat handler; (bso#13858). + vfs_default: Fix vfswrap_offload_write_send() NT_STATUS_INVALID_VIEW_SIZE check; (bso#13862). + smb2_server: Grant all 8192 credits to clients; (bso#13863). + smbd: Implement SMB_FILE_NORMALIZED_NAME_INFORMATION handling; (bso#13919). + s3/vfs_glusterfs: Dynamically determine NAME_MAX; (bso#13872). + s3: modules: ceph: Use current working directory instead of share path; (bso#13918); (bsc#1134452). + winbind: Use domain name from lsa query for sid_to_name cache entry; (bso#13831). + memcache: Increase size of default memcache to 512k; (bso#13865). + docs: Update smbclient manpage for "--max-protocol"; (bso#13857). + s3:utils: If share is NULL in smbcacls, don't print it; (bso#13937). + s3:smbspool: Fix regression printing with Kerberos credentials; (bso#13939). + ctdb-scripts: CTDB restarts failed NFS RPC services by hand, which is incompatible with systemd; (bso#13860). + ctdb-daemon: Revert "We can not assume that just because we could complete a TCP handshake"; (bso#13888). + ctdb-daemon: Never use 0 as a client ID; (bso#13930). + ctdb-common: Fix memory leak; (bso#13943). + s3:debug: Enable logging for early startup failures; (bso#13904) - Update to samba-4.10.3 + CVE-2018-16860: Heimdal KDC: Reject PA-S4U2Self with unkeyed checksum; (bso#13685); (bsc#1134024).- CVE-2019-12435: zone operations can crash rpc server; (bso#13922); (bsc#1137815).- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697). - Add ceph_snapshots VFS module; (jsc#SES-183).- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).- Update to samba-4.10.2: + CVE-2019-3870 (World writable files in Samba AD DC private/ dir); (bso#13834). + CVE-2019-3880 (Save registry file outside share as unprivileged user); (bso#13851). + py/kcc_utils: py2.6 compatibility; (bso#13837). + libcli: permit larger values of DataLength in SMB2_ENCRYPTION_CAPABILITIES of negotiate response; (bso#13869). + regfio: Improve handling of malformed registry hive files; (bso#13840). + ctdb-version: Simplify version string usage; (bso#13789). + lib: Make fd_load work for non-regular files; (bso#13859). + dbcheck: in the middle of the tombstone garbage collection causes replication failures, dbcheck: add --selftest-check-expired-tombstones cmdline option; (bso#13816). + ndr_spoolss_buf: Fix out of scope use of stack variable in NDR_SPOOLSS_PUSH_ENUM_OUT(); (bso#13818). + s4/messaging: Fix undefined reference in linking libMESSAGING-samba4.so; (bso#13854). + acl_read: Fix regression for empty lists; (bso#13836). + s4:dlz make b9_has_soa check dc=@ node; (bso#13841). + s3:client: Fix printing via smbspool backend with kerberos auth; (bso#13832). + s4:librpc: Fix installation of Samba; (bso#13847). + s3:lib: Fix the debug message for adding cache entries; (bso#13848). + s3:utils: Add 'smbstatus -L --resolve-uids' to show username; (bso#13793). + s3:lib: Fix the debug message for adding cache entries; (bso#13848). + s3:waf: Fix the detection of makdev() macro on Linux; (bso#13853). * ctdb-build: Drop creation of .distversion in tarball; (bso#13789). * ctdb-packaging: Test package requires tcpdump, ctdb package should not own system library directory; (bso#13838). - Update to samba-4.10.1: + py/kcc_utils: py2.6 compatibility; (bso#13837); + libcli: permit larger values of DataLength in SMB2_ENCRYPTION_CAPABILITIES of negotiate response; (bso#13869); + regfio: Improve handling of malformed registry hive files; (bso#13840); + ctdb-version: Simplify version string usage; (bso#13789); + lib: Make fd_load work for non-regular files; (bso#13859); + dbcheck in the middle of the tombstone garbage collection causes replication failures, dbcheck: add --selftest-check-expired-tombstones cmdline option; (bso#13816); + ndr_spoolss_buf: Fix out of scope use of stack variable in NDR_SPOOLSS_PUSH_ENUM_OUT(); (bso#13818); + s4/messaging: Fix undefined reference in linking libMESSAGING-samba4.so; (bso#13854); + acl_read: Fix regression for empty lists; (bso#13836); + s4:dlz make b9_has_soa check dc=@ node; (bso#13841); + s3:client: Fix printing via smbspool backend with kerberos auth; (bso#13832); + s4:librpc: Fix installation of Samba; (bso#13847); + s3:lib: Fix the debug message for adding cache entries; (bso#13848); + s3:utils: Add 'smbstatus -L --resolve-uids' to show username; (bso#13793); + s3:lib: Fix the debug message for adding cache entries; (bso#13848); + s3:waf: Fix the detection of makdev() macro on Linux; (bso#13853); + ctdb-build: Drop creation of .distversion in tarball; (bso#13789); + ctdb-packaging: Test package requires tcpdump, ctdb package should not own system library directory; (bso#13838); - Update to samba-4.10.0: + s4-server: Open and close a transaction on sam.ldb at startup; (bso#13760); + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812); + s4/scripting/bin: Open unicode files with utf8 encoding and write + unicode string. + sambaundoguididx: Use the right escaped oder unescaped sam ldb files; (bso#13759); + Fix idmap cache pollution with S-1-22- IDs on winbind hickup; (bso#13813); + passdb: Update ABI to 0.27.2. + lib/winbind_util: Add winbind_xid_to_sid for --without-winbind; (bso#13813); + lib:util: Move debug message for mkdir failing to log level 1; (bso#13823);- MacOS credit accounting breaks with async SESSION SETUP; (bsc#1125601); (bso#13796). - Mac OS X SMB2 implmenetation sees Input/output error or Resource temporarily unavailable and drops connection; (bso#13698)- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).- CVE-2019-3880: Save registry file outside share as unprivileged user; (bso#13851); (bsc#1131060 ).- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0); (bso#13834); (bsc#1130703);- Update to samba-4.9.5 + audit_logging: Remove debug log header and JSON Authentication: prefix; (bso#13714); + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760); + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso# CID: 1433607; (bso#11495); + smbd: uid: Don't crash if 'force group' is added to an existing share connection; (bso#13690); + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility code; (bso#13770); + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803); + s3:utils/smbget fix recursive download with empty source directories; (bso#13199); + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716); + s3:libsmb: cli_smb2_list() can sometimes fail initially on a connection; (bso#13736); + join: Throw CommandError instead of Exception for simple errors; (bso#13747); + ldb: Avoid inefficient one-level searches; (bso#13762); + s3: libsmb: use smb2cli_conn_max_trans_size() in cli_smb2_list(); (bso#13736); + tldap: Avoid use after free errors; (bso#13776); + Fix idmap xid2sid cache churn; (bso#13802); + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812); + s3-smbd: Avoid assuming fsp is always intact after close_file call; (bso#13720); + s3-vfs-fruit: Add close call; (bso#13725); + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746); + s3-vfs: add glusterfs_fuse vfs module; (bso#13774); + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766); + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS) ftruncate and fallocate; (bso#13807); + lib/audit_logging: Actually create talloc; (bso#13737); + netcmd/user: python[3]-gpgme unsupported and replaced by python[3]-gpg; (bso#13728); + dns: Changing onelevel search for wildcard to subtree; (bso#13738); + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721); + sambaundoguididx: Use the right escaped oder unescaped sam ldb files; (bso#13759); + ctdb: Print locks latency in machinereadable stats; (bso#13742); + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786); + audit_logging: auth_json_audit required auth_json; (bso#13715); + man pages: Document prefork process model; (bso#13765); + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773); + s3:auth: ignore create_builtin_guests() failing without a valid idmap configuration; (bso#13697); + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC without trusts; (bso#13722); + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd is not available; (bso#13723); + s4:server: Add support for 'smbcontrol samba shutdown' and 'smbcontrol debug/debuglevel'; (bso#13752); + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616); + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330); + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774); + notifyd: Fix SIGBUS on sparc; (bso#13704); + waf: Check for libnscd; (bso#13787); + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770); + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717); + Recovery lock bug fixes; (bso#13800); + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726); + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727); + vfs_fileid: Fix get_connectpath_ino; (bso#13741); + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).- Fix update-apparmor-samba-profile script after apparmor switched to using named profiles. The change is backwards compatible; (bsc#1126377);- LoadParm().load_default() fails with "Unable to load default file"; (bsc#1089758);- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);- Update to samba-4.9.4 + libcli/smb: Don't overwrite status code; (bso#9175). + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164). + Session setup reauth fails to sign response; (bso#13661). + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677). + vfs_shadow_copy2: Nicely deal with attempts to open previous version for writing; (bso#13688). + Restoring previous version of stream with vfs_shadow_copy2 fails with NT_STATUS_OBJECT_NAME_INVALID fsp->base_fsp->fsp_name; (bso#13455). + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571). + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708) + PEP8: fix E231: missing whitespace after ','. + winbindd: Fix crash when taking profiles;(bso#13629) + CVE-2018-14629 dns: Fix CNAME loop prevention using counter regression; (bso#13600) + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686). + CVE-2018-16853: Do not segfault if client is not set; (bso#13571). + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679) + ctdb-daemon: Exit with error if a database directory does not exist; (bso#13696). + s3:libads: Add net ads leave keep-account option; (bso#13498).- Drop more %if..%endif guards which are idempotent. - Drop requires on ldconfig which are already auto-discovered. - Do not ignore errors from useradd/groupadd.- Remove python2 build dependency from samba-libs; (bsc#1116900);- Update update-apparmor-samba-profile script to ignore the shares's paths containing substitution variables in any place, not only at the beginning of the path.- Update to samba-4.9.3 + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD Internal DNS server; (bso#13600); (bsc#1116319); + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628); (bsc#1116320); + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server; (bso#13674); (bsc#1116322); + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers; (bso#13669); (bsc#1116321); + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos configuration (unsupported); (bso#13678); (bsc#1116324); + CVE-2018-16857: Bad password count in AD DC not always effective; window; (bso#13683); (bsc#1116323);- Update to samba-4.9.2 + dsdb: Add comments explaining the limitations of our current backlink behaviour; (bso#13418); + Fix problems running domain backups (handling SMBv2, sites); (bso#13621); + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3; (bso#13465); + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642); + File saving issues with vfs_fruit on samba >= 4.8.5; (bso#13646); + Enabling vfs_fruit looses FinderInfo; (bso#13649); + Cancelling of SMB2 aio reads and writes returns wrong error NT_STATUS_INTERNAL_ERROR; (bso#13667); + Fix CTDB recovery record resurrection from inactive nodes and simplify vacuuming; (bso#13641); + examples: Fix the smb2mount build; (bso#13465); + libtevent: Fix build due to missing open_memstream on Illiumos; (bso#13629); + winbindd_cache: Fix timeout calculation for sid<->name cache; (bso#13662); + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path; (bso#13653); + Extended DN SID component missing for member after switching group membership; (bso#13418); + Return STATUS_SESSION_EXPIRED error encrypted, if the request was encrypted; (bso#13624); + python: Allow forced signing via smb.SMB(); (bso#13621); + lib:socket: If returning early, set ifaces; (bso#13665); + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8 encoded unicode; (bso#13616); + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute; (bso#13673); + waf: Add -fstack-clash-protection; (bso#13601); + winbind: Fix segfault if an invalid passdb backend is configured; (bso#13668); + Fix bugs in CTDB event handling; (bso#13659); + Misbehaving nodes are sometimes not banned; (bso#13670);- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);- winbind requires latest version of libtevent-util0 to start- Backport latest gpo code from master + Read policy from local gpt cache + Offline policy application + Make group policy extensible via register/unregister gpext + gpext's run via a process_group_policy method- Enable profiling data collection- Change samba-kdc package name to samba-ad-dc - Move samba-ad-dc.service to the samba-ad-dc package- Update to samba-4.9.1 + s3: nmbd: Stop nmbd network announce storm; (bso#13620); + s3-rpcclient: Use spoolss_init_spoolss_UserLevel1 in winspool cmds; (bso#13597); + CTDB recovery lock has some race conditions; (bso#13617); + s3-rpc_client: Advertise Windows 7 client info; (bso#13597); + ctdb-doc: Remove PIDFILE option from ctdbd_wrapper man page; (bso#13610);- Tumbleweed doesn't define the sle_version macro, so we must include a check for suse_version also. Otherwise python3 is disabled on Tumbleweed.- Update to samba-4.9.0 + samba_dnsupdate: Honor 'dns zone scavenging' option, only update if needed; (bso#13605); + wafsamba: Fix 'make -j'; (bso#13606);- Update to samba-4.9.0rc5 + s3: VFS: vfs_full_audit: Ensure smb_fname_str_do_log() only returns absolute pathnames; (bso#13565); + s3: util: Do not take over stderr when there is no log file; (bso#13578); + Durable Reconnect fails because cookie.allow_reconnect is not set; (bso#13549); + krb5-samba: Interdomain trust uses different salt principal; (bso#13539); + vfs_fruit: Don't unlink the main file; (bso#13441); + smbd: Fix a memleak in async search ask sharemode; (bso#13602); + Fix Samba GPO issue when Trust is enabled; (bso#11517); + samba-tool: Add "virtualKerberosSalt" attribute to 'user getpassword/syncpasswords'; (bso#13539); + Fix CTDB configuration issues; (bso#13589); + ctdbd logs an error until it can successfully connect to eventd; (bso#13592);- Update to samba-4.9.0rc4 + s3: smbd: Ensure get_real_filename() copes with empty pathnames; (bso#13585); + samba domain backup online/rename commands force user to specify password on CLI; (bso#13566); + wafsamba/samba_abi: Always hide ABI symbols which must be local; (bso#13579); + Fix a panic if fruit_access_check detects a locking conflict; (bso#13584); + Fix memory and resource leaks; (bso#13567); + python: Fix print in dns_invalid.py; (bso#13580); + Aliasing issue causes incorrect IPv6 checksum; (bso#13588); + Fix CTDB configuration issues; (bso#13589); + s3: vfs: time_audit: fix handling of token_blob in smb_time_audit_offload_read_recv(); (bso#13568);- Add missing zlib-devel dependency which was previously pulled in by libopenssl-devel- Update to samba-4.9.0rc3+git.22.3fff23ae36e + CVE-2018-10858: libsmb: Harden smbc_readdir_internal() against returns from malicious servers; (bso#13453); + CVE-2018-1140: ldbsearch '(distinguishedName=abc)' and DNS query with escapes crashes, ldb: Release LDB 1.3.5 for CVE-2018-1140; (bso#13374); + CVE-2018-10918: cracknames: Fix DoS (NULL pointer de-ref) when not servicePrincipalName is set on a user; (bso#13552); + CVE-2018-10919: acl_read: Fix unauthorized attribute access via searches; (bso#13434); + ctdb_mutex_ceph_rados_helper: Set SIGINT signal handler; (bso#13540); + CVE-2018-1139 libcli/auth: Do not allow ntlmv1 over SMB1 when it is disabled via "ntlm auth"; (bso#13360); + s3-tldap: do not install test_tldap; (bso#13529); + ctdb_mutex_ceph_rados_helper: Fix deadlock via lock renewals; (bso#13540); + CVE-2018-1140 Add NULL check for ldb_dn_get_casefold() in ltdb_index_dn_attr(); (bso#13374); + ctdb-eventd: Fix CID 1438155; (bso#13554); + Fix CIDs 1438243, (Unchecked return value) 1438244 (Unsigned compared against 0), 1438245 (Dereference before null check) and 1438246 (Unchecked return value); (bso#13553); + ctdb: Fix a cut&paste error; (bso#13554); + systemd: Only start smb when network interfaces are up; (bso#13559); + Fix quotas don't work with SMB2; (bso#13553); + s3/smbd: Ensure quota code is only called when quota support detected; (bso#13563); + s3/libsmb: Explicitly set delete_on_close token for rmdir; (bso#13204); + s3:waf: Install eventlogadm to /usr/sbin; (bso#13561); + Shorten description in vfs_linux_xfs_sgid manual; (bso#13562);- Update to samba-4.9.0rc2+git.21.a1069afb007 + s3: smbd: Using "sendfile = yes" with SMB2 can cause CPU spin; (bso#13537); + s3: smbd: Fix path check in smbd_smb2_create_durable_lease_check(); (bso#13535); + samba-tool trust: Support discovery via netr_GetDcName; (bso#13538); + s4-dsdb: Only build dsdb Python modules for AD DC; (bso#13542); + Fix portability issues on freebsd; (bso#13520); + DNS wildcard search does not handle multiple labels correctly; (bso#13536); + samba-tool domain trust: Fix trust compatibility to Windows Server 1709 and FreeIPA; (bso#13308); + Fix portability issues on freebsd; (bso#13520); + ctdb-protocol: Fix CTDB compilation issues; (bso#13545); + ctdb-docs: Replace obsolete reference to CTDB_DEBUG_HUNG_SCRIPT option; (bso#13546); + ctdb-doc: Provide an example script for migrating old configuration; (bso#13550); + ctdb-event: Implement event tool "script list" command; (bso#13551);- Update to samba-4.8.4+git.37.a7a861d7982; + CVE-2018-1139: Weak authentication protocol allowed; (bsc#1095048); (bsc#13360); + CVE-2018-1140: Denial of Service Attack on DNS and LDAP server; (bsc#1095056); (bso#13466); (bso#13374); + CVE-2018-10858: Insufficient input validation on client directory listing in libsmbclient; (bsc#1103411); (bso#13453); + CVE-2018-10918: Denial of Service Attack on AD DC DRSUAPI server; (bsc#1103414); (bso#13552); + CVE-2018-10919: Confidential attribute disclosure from the AD LDAP server; (bsc#1095057); (bso#13434); + s3:winbind: winbind normalize names' doesn't work for users; (bso#12851); + winbind: Fix UPN handling in canonicalize_username(); (bso#13369); + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428); + samdb: Fix building Samba with gcc 8.1; (bso#13437); + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440); + smbd: Flush dfree memcache on service reload; (bso#13446); + ldb: Save a copy of the index result before calling the + lib/util: No Backtrace given by Samba's AD DC by default; (bso#13454). + s3: smbd: printing: Re-implement delete-on-close semantics for print files missing since 3.5.x; (bso#13457). + python: Fix talloc frame use in make_simple_acl(); (bso#13474). + krb5_wrap: Fix keep_old_entries logic for older Kerberos libraries;(bso#13478). + krb5_plugin: Add winbind localauth plugin for MIT Kerberos; (bso#13480).- Add missing package descriptions; (bsc#1093864); - Fix dependency issue between samba-python and samba-kdc; (bsc#1062876); - Call update-apparmor-samba-profile when running samba-ad-dc; (bsc#1092099);- Update to 4.8.2 + After update to 4.8.0 DC failed with "Failed to find our own NTDS Settings objectGUID" (bso#13335). + fix incorrect reporting of stream dos attributes on a directory (bso#13380). + vfs_ceph: add asynchronous fsync; fake synchronous call (bso#13412). + vfs_ceph: add fake async pwrite/pread send/recv hooks; (bso#13425) + vfs_ceph: Fix memory leak; (bso#13424). + libsmbclient: Fix hard-coded connection error return of ETIMEDOUT; (bso#13419). + s4-lsa: Fix use-after-free in LSA server; (bso#13420). + winbindd: Do re-connect if the RPC call fails in the passdb case; (bso#13430). + cleanupd: Sends MSG_SMB_UNLOCK twice to interested peers; (bso#13416). + cleanupd: Use MSG_SMB_BRL_VALIDATE to signal cleanupd unclean process shutdown; (bso#13414). + ctdb-client: Remove ununsed functions from old client code; (bso#13411). + printing: Return the same error code as windows does on upload failures; (bso#13395). + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged pipe is not accessable; (bso#13400). + s4:lsa_lookup: remove TALLOC_FREE(state) after all dcesrv_lsa_Lookup{Names,Sids}_base_map() calls; (bso#13420). + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407). + s3:smbspool: Fix cmdline argument handling; (bso#13417).- Move libdfs-server-ad-samba4.so library from kdc to libs package, as it is required by some client libs; (bsc#1074135); - Update to 4.8.1; (bsc#1091179); + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error, we don't own it here; (bso#13244); + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't support fdopendir(); (bso#13270); + Round-tripping ACL get/set through vfs_fruit will increase the number of ACE entries without limit; (bso#13319); + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit issues; (bso#13347); + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without delete access; (bso#13358); + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372); + s3: smbd: Unix extensions attempts to change wrong field in fchown call; (bso#13375); + ms_schema/samba-tool visualize: Fix python2.6 incompatibility; (bso#13337); + Fix invocation of gnutls_aead_cipher_encrypt(); (bso#13352); + Windows 10 cannot logon on Samba NT4 domain; (bso#13328); + winbindd: Recover loss of netlogon secure channel in case the peer DC is rebooted; (bso#13332); + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363); + ctdb-client: Fix bugs in client code; (bso#13356); + ctdb-scripts: Drop "net serverid wipe" from 50.samba event script; (bso#13359); + s3: lib: messages: Don't use the result of sec_init() before calling sec_init(); (bso#13368); + libads: Fix the build '--without-ads'; (bso#13273); + winbind: Keep "force_reauth" in invalidate_cm_connection, add 'smbcontrol disconnect-dc'; (bso#13332); + vfs_virusfilter: Fix CIDs 1428738-1428740; (bso#13343); + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367); + rpc_server: Fix core dump in dfsgetinfo; (bso#13370); + smbclient: Fix notify; (bso#13382); + Fix smbd panic if the client-supplied channel sequence number wraps; (bso#13215); + Windows 10 cannot logon on Samba NT4 domain; (bso#13328); + lib/util: Remove unused '#include ' from tests/tfork.c; (bso#13342); + Fix build errors with cc from developerstudio 12.5 on Solaris; (bso#13343); + Fix the picky-developer build on FreeBSD 11; (bso#13344); + s3:modules: Fix the build of vfs_aixacl2.c; (bso#13345); + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338); + lib:replace: Fix linking when libtirpc-devel overwrites system headers; (bso#13341); + winbindd: 'wbinfo --name-to-sid' returns misleading result on invalid query; (bso#13312); + s3:passdb: Do not return OK if we don't have pinfo set up; (bso#13376); + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);- Use new foreground execution flags for systemd samba daemons; (bsc#1088574); (bsc#1071090); (bsc#1065551); + Add %post scriptlet to clear old sysconfig flags - Update vendor-files to commit 880b3e7. + Set samba sysconfig template variables to "" + Add required daemon flags directly to systemd unit- Specfile cleanup + Remove %if..%endif guards which don't affect the build + Remove redundant %clean section + Replace old $RPM_* shell vars with macros- BuildRequire pkgconfig(systemd) and pkgconfig(libsystemd) in place of systemd and systemd-devel: Allow OBS to optimize the workload by allowing the usage of the 'build-optimized' systemd packages.- Enable building samba with python3, and create a samba-python3 package.- Update to 4.8 + New GUID Index mode in sam.ldb for the AD DC + GPO support for samba KDC + Time machine support with vfs_fruit + Encrypted secrets + AD Replication visualization + Improved trust support - ability to not scan global trust list - AD external trusts have limited support - verbose trusted domain listing + VirusFilter VFS module + NT4-style replication removed + vfs_aio_linux removed- Disable samba-pidl package, due to the removal of dependency perl-Parse-Yapp; (bsc#1085150);- Update to 4.7.6; + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally; (bso#11343); (bsc#1081741); + CVE-2018-1057: Authenticated users can change other users' password; (bso#13272); (bsc#1081024).- Disable python until full python3 port is done; (bsc#1082139); + Remove contents of package samba-python + Remove contents of package libsamba-policy0 + Remove contents of package libsamba-policy-devel + Remove library libsamba-python-samba4.so from samba-libs package + Remove library libsamba-net-samba4.so from samba-libs package + Remove smbtorture binary and manpage from samba-test- samba fails to build with glibc2.27; (bsc#1081042);- Update to 4.7.5; (bsc#1080545); + smbd tries to release not leased oplock during oplock II downgrade; (bso#13193); + Fix copying file with empty FinderInfo from Windows client to Samba share with fruit; (bso#13181); + build: Deal with recent glibc sunrpc header removal; (bso#10976); + Make Samba work with tirpc and libnsl2; (bso#13238); + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208); (bsc#1075206); + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue; (bso#12986); + ctdb-recovery-helper: Deregister message handler in error paths; (bso#13188); + samba: Only use async signal-safe functions in signal handler; (bso#13240); + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue; (bso#12986); + repl_meta_data: Fix linked attribute corruption on databases with unsorted links on expunge. dbcheck: Add functionality to fix the corrupt database; (bso#13228); + Fix smbd panic when chdir returns error during exit; (bso#13189); + Make Samba work with tirpc and libnsl2; (bso#13238); + Fix POSIX ACL support on HPUX and possibly other big-endian OSs; (bso#13176);- Update to 4.7.4; (bsc#1080545); + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140); + s3: libsmb: Fix valgrind read-after-free error in cli_smb2_close_fnum_recv(); (bso#13171); + s3: libsmb: Fix reversing of oldname/newname paths when creating a reparse point symlink on Windows from smbclient; (bso#13172); + Build man page for vfs_zfsacl.8 with Samba; (bso#12934); + repl_meta_data: Allow delete of an object with dangling backlinks; (bso#13095); + s4:samba: Fix default to be running samba as a deamon; (bso#13129); + Performance regression in DNS server with introduction of DNS wildcard, ldb: Release 1.2.3; (bso#13191); + vfs_zfsacl: Fix compilation error; (bso#6133); + "smb encrypt" setting changes are not fully applied until full smbd restart; (bso#13051); + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052); + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155); + winbindd: Dependency on trusted-domain list in winbindd in critical auth codepath; (bso#13173); + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120); + ctdb: sock_daemon leaks memory; (bso#13153); + TCP tickles not getting synchronised on CTDB restart; (bso#13154); + winbindd: winbind parent and child share a ctdb connection; (bso#13150); + pthreadpool: Fix deadlock; (bso#13170); + pthreadpool: Fix starvation after fork; (bso#13179); + messaging: Always register the unique id; (bso#13180); + s4/smbd: set the process group; (bso#13129); + Fix broken linked attribute handling; (bso#13095); + The KDC on an RWDC doesn't send error replies in some situations; (bso#13132); + libnet_join: Fix 'net rpc oldjoin'; (bso#13149); + g_lock conflict detection broken when processing stale entries; (bso#13195); + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired sessions; (bso#13197); + s3:libads: net ads keytab list fails with "Key table name malformed"; (bso#13166); (bsc#1067700); + Fix crash in pthreadpool thread after failure from pthread_create; (bso#13170); + s4:samba: Allow samba daemon to run in foreground; (bso#13129); (bsc#1065551); + third_party: Link the aesni-intel library with "-z noexecstack"; (bso#13174); + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I" options; (bso#13125);- Re-enable usage of libnsl (did got lost with glibc change) - Use TI-RPC (sunrpc is deprecated and will be removed soon from glibc)- smbc_opendir should not return EEXIST with invalid login credentials; (bnc#1065868).- Update to 4.7.3; (bsc#1069666); + Non-smbd processes using kernel oplocks can hang smbd; (bso#13121); + python: use communicate to fix Popen deadlock; (bso#13127); + smbd on disk file corruption bug under heavy threaded load; (bso#13130); + tevent: version 0.9.34; (bso#13130); + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118); + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug; (bsc#1060427);(bso#13041); + CVE-2017-15275: s3: smbd: Chain code can return uninitialized memory when talloc buffer is grown; (bsc#1063008); (bso#13077); - Build with AD DC support only in openSUSE.- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- samba-tool requires samba-python; (bnc#1067771).- Run all daemons in the foreground and let systemd handle it; (bsc#1065551). - Update to 4.7.1; + Fix exporting subdirs with shadow_copy2; (bso#13091); + Currently if getwd() fails after a chdir(), we panic; (bso#13027); + Ensure default SMB_VFS_GETWD() call can't return a partially completed struct smb_filename; (bso#13068); + sys_getwd() can leak memory or possibly return the wrong errno on older systems; (bso#13069); + smbclient doesn't correctly canonicalize all local names before use; (bso#13093); + Fix broken linked attribute handling; (bso#13095); + Missing LDAP query escapes in DNS rpc server; (bso#12994); + Link to -lbsd when building replace.c by hand; (bso#13087); + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem; (bso#6133); + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module; (bso#7909); + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module; (bso#7933); + Missing assignment in sl_pack_float; (bso#12991); + Wrong Samba access checks when changing DOS attributes; (bso#12995); + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062); + groupmap cleanup should not delete BUILTIN mappings; (bso#13065); + Enabling vfs_fruit results in loss of Finder tags and other xattrs; (bso#13076); + man pages: Properly ident lists; (bso#9613); + smb.conf.5: Sort parameters alphabetically; (bso#13081); + Fix GUID string format on GetPrinter info; (bso#12993); + Remote serverid check doesn't check for the unique id; (bso#13042); + CTDB starts consuming memory if there are dead nodes in the cluster; (bso#13056); + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070); + libgpo doesn't sort the GPOs in the correct order; (bso#13046); + Remote serverid check doesn't check for the unique id; (bso#13042); + vfs_catia: Fix a potential memleak; (bso#13090); + Fix file change notification for renames; (bso#12903); + Samba DNS server does not honour wildcards; (bso#12952); + Can't change password in samba from a Windows client if Samba runs on IPv6 only interface; (bso#13079); + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086); + Apple client can't cope with SMB2 async replies when creating symlinks; (bso#13047); + s4:rpc_server:backupkey: Move variable into scope; (bso#12959); + Fix ntstatus_gen.h generation on 32bit; (bso#13099); + Fix a double free in vfs_gluster_getwd(); (bso#13100); + Fix resouce leaks and pointer issues; (bso#13101); + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);- Add samba-kdc to baselibs.conf. - Do not wrap samba-kdc's package definition into if/endif: the package won't be generated simply based on the fact that there is no files section for the package. Allows the source validator to ensure samba-kdc is a built package.- Update to 4.7.0; + Whole DB read locks: Improved LDAP and replication consistency; (bso#12858). + Samba AD with MIT Kerberos + Dynamic RPC port range: Default range changed from "1024-1300" to "49152-65535". + Authentication and Authorization audit support: New auth_audit debug class. + Multi-process LDAP Server: The LDAP server in the AD DC now honours the process model used for the rest of the 'samba' process. + Improved Read-Only Domain Controller (RODC) Support; (bso#12977). + Additional password hashes stored in supplementalCredentials. + Improvements to DNS during Active Directory domain join. + Significant AD performance and replication improvements. + Query record for open file or directory. + Removal of lpcfg_register_defaults_hook(). + Change of loadable module interface. + SHA256 LDAPS Certificates: The self-signed certificate generated for use on LDAPS will now be generated with a SHA256 self-signature, not a SHA1 self-signature. + CTDB no longer allows mixed minor versions in a cluster. + CTDB now ignores hints from Samba about TDB flags when attaching to databases. + New configuration variable CTDB_NFS_CHECKS_DIR. + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed. + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed. + The example NFS Ganesha call-out has been improved. + A new "replicated" database type is available.- CVE-2017-12163: Prevent client short SMB1 write from writing server memory to file; (bso#13020); (bsc#1058624).- CVE-2017-12150: Some code path don't enforce smb signing, when they should; (bso#12997); (bsc#1058622).- CVE-2017-12151: Keep required encryption across SMB3 dfs redirects; (bso#12996); (bsc#1058565).- Clean specfile assuming SUSE-only system and product >=SLE11 + %{ul_version}, %{rhel_version}, %{mandriva_version}, %{centos_version} are always undefined + %{_vendor} is "suse" and %{suse_version} is at least 1100- Update to 4.6.7; (bsc#1054017) + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392). + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937). + vfs_ceph provides inconsistent directory listings; (bso#12911). + Misused talloc context can cause a user to crash their smbd by chaining SMB1 commands.; (bso#12836). + Use-after free can crash libsmbclient code.; (bso#12927). + Server exit with active AIO can crash.; (bso#12925). + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910). + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs; (bso#12898). + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897). + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for authentication; (bso#12886). + finder sidebar showing question mark instead of icon when using ip to connect with vfs_fruit; (bso#12840). + Winbind stops obtaining the 'unixHomeDirectory' & 'loginShell' attributes from AD.; (bso#12720). + KCC run at selftest startup can fail spuriously due to a race; (bso#12869). + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for the remote change; (bso#12782). + rpc_pipe_client memory leaks due to long term memory context passed to rpc_pipe_open_interface(); (bso#12890). + CVE-2017-2619 breaks accessing previous versions of directories with snapshots in subdirectories of the share; (bso#12885). + dns_name_equal doing OOB read; (bso#12813). + replica_sync tests flap; (bso#12753). + Selftest should not call 'net cache flush' and wipe important winbind entries; (bso#12868). + Old Samba versions don't support using recent ldb versions (>=1.1.30); (bso#12859). + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490). + race starting winbindd against posixacl test; (bso#12843). + Crash in the reentrant smbd_smb2_create_send() if the something fails in the subsequent try; (bso#12832). + spnego.c passes the wrong argument order to gensec_update_ev() for the FALLBACK case; (bso#12788). + Clients with SMB3 support can't connect with "server max protocol = SMB2_02"; (bso#12772). + A log message of samb-tool user syncpasswords reverses string arguments in a debug message "Call Popen[...".; (bso#12768). + The smb tarmode tests kills the share dir contents; (bso#12867). + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862). + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860). + manpage/index.html lists links not in alphabetical order; (bso#12854). + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831). + If a record is locked in a database, then recovery does not complete; (bso#12857). + debug_locks.sh script does not log any information; (bso#12856). + SIGSEGV in cm_connect_lsa_tcp dereferencing conn->lsa_tcp_pipe->transport after error; (bso#12852). + smbclient can't parse DOMAIN+username if a different winbind separator is used; (bso#12849). + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845). + Related requests with TreeConnect fail with NETWORK_NAME_DELETED; (bso#12844). + cli->server_os not filled correctly; (bso#12779). + REGRESSION: smbclient doesn't print the session setup anymore; (bso#12824). + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808). + CTDB NFS call-out failures do not cause event failures; (bso#12837). + net command fails due to incorrectly return code; (bso#12828). + Fix building Samba with GCC 7.1; (bso#12827).- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again; (bsc#1048339).- fix cephwrap_chdir(); (bsc#1048790). - Update to 4.6.6 + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation; (bsc#1048278).- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).- Fix inconsistent ctdb socket path; (bsc#1048352). - Fix non-admin cephx authentication; (bsc#1048387).- Update to 4.6.5; (bsc#1040157) + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at startup; (bso#12814). + vfs_expand_msdfs tries to open the remote address as a file path; (bso#12687). + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type); (bso#12798). + With clustering get update_num_read_oplocks failed and PANIC: num_share_modes == 1 assertion failure; (bso#11844). + contend_level2_oplocks_begin_default oplock optimisation doesn't carry over to leases; (bso#12766). + `ctdb nodestatus` incorrectly displays status for all nodes with wrong exit code; (bso#12802). + CTDB can spin hard on revoking readonly delegations if a node becomes disconnected; (bso#12697). + Printing a share mode entry with leases can crash in the ndr code; (bso#12793). + Fix flakey unit tests for eventd; (bso#12792). + CTDB daemon crashes if built with clang; (bso#12770). + smbcacls fails if no password is specified; (bso#12765). + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757). + samba-tool user syncpasswords doesn't trigger the script when a user gets removed; (bso#12767). + systemd: fix detection of libsystemd; (bso#12764). + Notify subsystem only maps first inotify mask to Windows notify filter; (bso#12760). + Allow passing trusted domain password as plain-text to PASSDB layer; (bso#12751). + Can't case-rename files with vfs_fruit; (bso#12749). + wrong sid->uid mapping for SIDs residing in sIDHistory; (bso#12702). + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562). + Ordering of notify responses broken; (bso#12756).- s3: libsmb: Fix error where short name length was read as 2 bytes, should be 1; (bso#11822); (bsc#1042419).- Revert explicit winbind %{version}-%{release} dependency. + The ABI has stabilized since (bsc#936909), so remove to fix cross-media dependencies; (bsc#1037899).- Fix CVE-2017-7494 remote code execution from a writable share; (bso#12780); (bsc#1038231).- Update to 4.6.3; (bsc#1036011) + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots from shares with GlusterFS backend; (bso#12743). + Fix for Solaris C compiler; (bso#12559). + s3: locking: Update oplock optimization for the leases era; (bso#12628). + Make the Solaris C compiler happy; (bso#12693). + s3: libgpo: Allow skipping GPO objects that don't have the expected LDAP attributes; (bso#12695). + Fix buffer overflow caused by wrong use of getgroups; (bso#12747). + lib: debug: Avoid negative array access; (bso#12746). + cleanupdb: Fix a memory read error; (bso#12748). + streams_xattr and kernel oplocks results in NT_STATUS_NETWORK_BUSY; (bso#7537). + winbindd: idmap_autorid allocates ids for unknown SIDs from other backends; (bso#11961). + vfs_fruit: Resource fork open request with flags=O_CREAT|O_RDONLY; (bso#12565). + manpages/vfs_fruit: Document global options; (bso#12615). + lib/pthreadpool: Fix a memory leak; (bso#12624). + Lookup-domain for well-known SIDs on a DC; (bso#12727). + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728). + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729). + credentials_krb5: use gss_acquire_cred for client-side GSSAPI use case; (bso#12611). + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690). + ctdb-readonly: Avoid a tight loop waiting for revoke to complete; (bso#12697). + ctdb_event monitor command crashes if event is not specified; (bso#12723). + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733). + smbd: Fix smb1 findfirst with DFS; (bso#12558). + smbd: Do an early exit on negprot failure; (bso#12610). + winbindd: Fix substitution for 'template homedir'; (bso#12699). + s4:kdc: Disable principal based autodetected referral detection; (bso#12554). + idmap_autorid: Allocate new domain range if the callers knows the sid is valid; (bso#12613). + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724). + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for trusted domain; (bso#12725). + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731). + winbindd: Fix password policy for pam authentication; (bso#12725). + s3:gse: Correctly handle external trusts with MIT; (bso#12554). + auth/credentials: Always set the realm if we set the principal from the ccache; (bso#12611). + replace: Include sysmacros.h; (bso#12686). + s3:vfs_expand_msdfs: Do not open the remote address as a file; (bso#12687). + s3:libsmb: Only print error message if kerberos use is forced; (bso#12704). + winbindd: Child process crashes when kerberos-authenticating a user with wrong password; (bso#12708). + vfs_fruit: Office document opens as read-only on macOS due to CNID semantics; (bso#12715). + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is fragmented; (bso#12737).- Generate and update vendor-files tarball from Git + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).- Generate source tarball directly from Git using OBS tar_scm + use version string derived from parent Git tag and commit hash - remove obsolete vendor-files/tools/package-data version ID + explicitly generate ctdb manpages, needed without "make dist"- Update to 4.6.2 + remove bso#12721 patches now upstream- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622). + x86-64 and aarch64- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).- Build and install the html man pages (bsc#1021907).- Fix CVE-2017-2619 regression with "follow symlinks = no"; (bso#12721).- Update to 4.6.1 + symlink race permits opening files outside share directory; CVE-2017-2619; (bso#12496); (bsc#1027147) + testparm checks for valid idmap parameters + add new krb client encryption types + support for printer driver upload from windows 10 + inherit owner = 'unix only' for improved quota support + improved CTDB event support + new primary group support for idmap_ad + idmap_hash deprecated + mvxattr added to recursively rename extended attributes- Remove chkconfig requirements for systemd systems- Don't call insserv if systemd is used- Fix check if we need to require insserv- async_req: make async_connect_send() "reentrant"; (bso#12105); (bsc#1024416).- Force usage of ncurses6-config thru NCURSES_CONFIG env var; (bsc#1023847).- add missing patch for libnss_wins segfault; (bsc#995730).- Fix vfs_ceph builds against recent Ceph versions; (bsc#1021933).- Document "winbind: ignore domains" parameter; (bsc#1019416).- Add base Samba dependency to samba-ceph package.- Update to 4.5.3 + Heap-based Buffer Overflow Remote Code Execution Vulnerability; CVE-2016-2123; (bso#12409); (bsc#1014437). + Don't send delegated credentials to all servers; CVE-2016-2125; (bso#12445); (bsc#1014441). + denial of service due to a client triggered crash in the winbindd parent process; CVE-2016-2126; (bso#12446); (bsc#1014442). - 4.5.1 and 4.5.2 updates + various streams vfs fixes + various printing fixes + ntlm_auth: do not map explicitly empty domain + various stability fixes in smbd + match file compression ReFS behavior- Add missing ldb module directory; (bnc#1012092).- s3/client: obey 'disable netbios' smb.conf param, don't connect via NBT port; (bsc#1009085); (bso#12418).- Include vfstest in samba-test; (bsc#1001203).- s3/winbindd: using default domain with user@domain.com format fails; (bsc#997833).- Fix segfault in libnss_wins; (bso#12277); (bso#12269); (bsc#995730).- Update to 4.5.0 + NTLM1 Authentication disabled by default + SMB2.1 leases enabled by default + Support for OFD locks + ctdb tool rewritten + Added shadow copy snapshot prefix parameter- Fix illegal memory access after memory has been deleted; (bso#11836); (bsc#975299).- Prevent core, make sure response->extra_data.data is always cleared out; (bsc#993692).- Don't package man pages for VFS modules that aren't built; (boo#993707).- Fix population of ctdb sysconfig after source merge; (bsc#981566).- Enable vfs_ceph builds for Factory (x86-64) + Package as samba-ceph to avoid Ceph dependency in base package.- Update to 4.4.5 + Prevent client-side SMB2 signing downgrade; CVE-2016-2119; (bso#11860); (bsc#986869).- Remove obsolete syslog.target; (bsc#983938).- Honor smb.conf socket options in winbind; (bsc#975131).- Don't use htons() with IP_PROTO_RAW; (bso#11705); (bsc#969522).- Update to 4.4.4 + SMB3 multichannel: Add implementation of missing channel sequence number verification; (bso#11809). + smbd:close: Only remove kernel share modes if they had been taken at open; (bso#11919). + notifyd: Prevent NULL deref segfault in notifyd_peer_destructor; (bso#11930). + s3:rpcclient: Make '--pw-nt-hash' option work; (bso#10796). + Fix case sensitivity issues over SMB2 or above; (bso#11438). + s3:smbd: Fix anonymous authentication if signing is mandatory. (bso#11910) + Fix NTLM Authentication issue with squid; (bso#11914). + pdb: Fix segfault in pdb_ldap for missing gecos; (bso#11530). + Fix memory leak in share mode locking; (bso#11934).- Update to 4.4.3 + Various post-badlock regressions; (bso#11841); (bso#11850); (bso#11858); (bso#11870); (bso#11872). + Only allow idmap_hash for default idmap config (bso#11786). + smbd: Avoid large reads beyond EOF; (bso#11878). + vfs_acl_common: Avoid setting POSIX ACLs if "ignore system acls" is set; (bso#11806). + libads: Record session expiry for spnego sasl binds; (bso#11852).- Fix NTLMSSP regressions caused by previous CVE fixes; (bso#11849); (bsc#975962); (bsc#979268), (bsc#977669).- Revert shared library packaging to comply with SLPP- Update to 4.4.2 + A man-in-the-middle can downgrade NTLMSSP authentication; CVE-2016-2110; (bso#11688); (bsc#973031). + Domain controller netlogon member computer can be spoofed; CVE-2016-2111; (bso#11749); (bsc#973032). + LDAP conenctions vulnerable to downgrade and MITM attack; CVE-2016-2112; (bso#11644); (bsc#973033). + TLS certificate validation missing; CVE-2016-2113; (bso#11752); (bsc#973034). + Named pipe IPC vulnerable to MITM attacks; CVE-2016-2115; (bso#11756); (bsc#973036). + "Badlock" DCERPC impersonation of authenticated account possible; CVE-2016-2118; (bso#11804); (bsc#971965). + DCERPC server and client vulnerable to DOS and MITM attacks; CVE-2015-5370; (bso#11344); (bsc#936862).- Fix samba.tests.messaging test and prevent potential tdb corruption by removing obsolete now invalid tdb_close call; (bsc#974629).- Obsolete libsmbclient from libsmbclient0 while not providing it; (bsc#972197).- Update to 4.4.0. + Read of uninitialized memory DNS TXT handling; (bso#11128); (bso#11686); CVE-2016-0771. + Getting and setting Windows ACLs on symlinks can change permissions on link target; (bso#11648); CVE-2015-7560. + Sockets with htons(IPPROTO_RAW); (bso#11705); CVE-2015-8543. + s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystem with no ACL support; (bso#10489). + docs: Add example for domain logins to smbspool man page; (bso#11643). + smbd: Show correct disk size for different quota and dfree block sizes; (bso#11681). + docs: Add smbspool_krb5_wrapper manpage; (bso#11690). + winbindd: Return trust parameters when listing trusts; (bso#11691). + ctdb: Do not provide a useless pkgconfig file for ctdb; (bso#11696). + Crypto.Cipher.ARC4 is not available on some platforms, fallback to M2Crypto.RC4.RC4 then; (bso#11699). + s3:utils/smbget: Set default blocksize; (bso#11700). + Streamline 'smbget' options with the rest of the Samba utils; (bso#11700). + s3:clispnego: Fix confusing warning in spnego_gen_krb5_wrap(); (bso#11702). + s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703). + loadparm: Fix memory leak issue; (bso#11708). + lib/tsocket: Work around sockets not supporting FIONREAD; (bso#11714). + s3:vfs:glusterfs: Fix build after quota changes; (bso#11715). + ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ..."; (bso#11719). + lib:socket: Fix CID 1350010: Integer OVERFLOW_BEFORE_WIDEN; (bso#11723). + smbd: Fix CID 1351215 Improper use of negative value; (bso#11724). + smbd: Fix CID 1351216 Dereference null return value; (bso#11725). + s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new file; (bso#11727). + docs: Add manpage for cifsdd; (bso#11730). + param: Fix str_list_v3 to accept ; again; (bso#11732). + lib/socket: Fix improper use of default interface speed; (bso#11734). + lib:socket: Fix CID 1350009: Fix illegal memory accesses (BUFFER_SIZE_WARNING); (bso#11735). + libcli: Fix debug message, print sid string for new_ace trustee; (bso#11738). + Fix installation path of Samba helper binaries; (bso#11739). + Fix memory leak in loadparm; (bso#11740). + tevent: version 0.9.28: Fix memory leak when old signal action restored; (bso#11742). + smbd: Ignore SVHDX create context; (bso#11753). + Fix net join; (bso#11755). + s3:libads: setup the msDS-SupportedEncryptionTypes attribute on ldap_add; (bso#11755). + passdb: Add linefeed to debug message; (bso#11763). + s3:utils/smbget: Fix option parsing; (bso#11767). + libnet: Make Kerberos domain join site-aware; (bso#11769). + Reset TCP Connections during IP failover; (bso#11770). + ldb: Version 1.1.26; (bso#11772). + s3:smbd: Add negprot remote arch detection for OSX; (bso#11773). + vfs_glusterfs: Fix use after free in AIO callback; (bso#11774). + mkdir can return ACCESS_DENIED incorrectly on create race; (bso#11780). + "trustdom_list_done: Got invalid trustdom response" message should be avoided; (bso#11782). + Mismatch between local and remote attribute ids lets replication fail with custom schema; (bso#11783). + Quota is not supported on Solaris 10; (bso#11788). + Talloc: Version 2.1.6; (bso#11789). + smbd: Enable multi-channel if 'server multi channel support = yes' in the config; (bso#11796). + build: Fix build when '--without-quota' specified; (bso#11798). + lib/socket/interfaces: Fix some uninitialied bytes; (bso#11802). + Access based share enum: handle permission set in configuration files; (bso#8093). + See also WHATSNEW.txt from the samba-doc package.- Update to 4.3.6. + Getting and setting Windows ACLs on symlinks can change permissions on link target; CVE-2015-7560; (bso#11648); (bsc#968222). + Fix Out-of-bounds read in internal DNS server; CVE-2016-0771; (bso#11128); (bso#11686); (bsc#968223).- Upgrade on-disk FSRVP server state to new version; (bsc#924519).- Only obsolete but do not provide gplv2/3 package names; (bsc#968973).- Relocate existing lock files to /var/lib/samba/lock; (bsc#968963).- Obsolete no longer existing samba-32bit package; (bsc#967625).- Update to 4.3.5. + s3:utils/smbget: Fix recursive download; (bso#6482). + s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystemi with no ACL support; (bso#10489). + s3:smbd/oplock: Obey kernel oplock setting when releasing oplocks; (bso#11400). + vfs_shadow_copy2: Fix case where snapshots are outside the share; (bso#11580). + smbclient: Query disk usage relative to current directory; (bso#11662). + winbindd: Handle expired sessions correctly; (bso#11670). + smbd: Show correct disk size for different quota and dfree block sizes; (bso#11681). + smbcacls: Fix uninitialized variable; (bso#11682). + s3:smbd: Ignore initial allocation size for directory creation; (bso#11684). + s3-client: Add a KRB5 wrapper for smbspool; (bso#11690). + s3-parm: Clean up defaults when removing global parameters; (bso#11693). + Use M2Crypto.RC4.RC4 on platforms without Crypto.Cipher.ARC4; (bso#11699). + s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703). + ctdb: Remove error messages after kernel security update; CVE-2015-8543; (bso#11705). + loadparm: Fix memory leak issue; (bso#11708). + lib/tsocket: Work around sockets not supporting FIONREAD; (bso#11714). + ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ..."; (bso#11719). + s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new file; (bso#11727). + param: Fix str_list_v3 to accept ";" again; (bso#11732).- Shift samba-client sysconfig data into samba and samba-winbind; (bsc#947361).- Simplify shared library packaging; (bsc#966956).- Enable clustering (CTDB) support; (bsc#966271).- s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703); (bsc#964023).- Add quotes around path of update-apparmor-samba-profile; (bnc#962177).- Remove autoconf build-time requirement.- Update to 4.3.4. + vfs_fruit: Enable POSIX directory rename semantics; (bso#11065). + Crash: Bad talloc magic value - access after free; (bso#11394). + Copying files with vfs_fruit fails when using vfs_streams_xattr without stream prefix and type suffix; (bso#11466). + samba-tool: Fix uncaught exception if no fSMORoleOwner attribute is given; (bso#11613). + Fix a typo in the smb.conf manpage, explanation of idmap config; (bso#11619). + Correctly initialize the list head when keeping a list of primary followed by DFS connections; (bso#11624). + Reduce the memory footprint of empty string options; (bso#11625). + lib/async_req: Do not install async_connect_send_test; (bso#11639). + Fix typos in man vfs_gpfs; (bso#11641). + Make "hide dot files" option work with "store dos attributes = yes"; (bso#11645). + Fix a corner case of the symlink verification; (bso#11647); (bnc#960249). + Do not disable "store dos attributes" on-the-fly; (bso#11649). + Update lastLogon and lastLogonTimestamp; (bso#11659).- Prevent access denied if the share path is "/"; (bso#11647); (bnc#960249).- Update to 4.3.3. + Malicious request can cause Samba LDAP server to hang, spinning using CPU; CVE-2015-3223; (bso#11325); (bnc#958581). + Remote read memory exploit in LDB; CVE-2015-5330; (bso#11599); (bnc#958586). + Insufficient symlink verification (file access outside the share); CVE-2015-5252; (bso#11395); (bnc#958582). + No man in the middle protection when forcing smb encryption on the client side; CVE-2015-5296; (bso#11536); (bnc#958584). + Currently the snapshot browsing is not secure thru windows previous version (shadow_copy2); CVE-2015-5299; (bso#11529); (bnc#958583). + Fix Microsoft MS15-096 to prevent machine accounts from being changed into user accounts; CVE-2015-8467; (bso#11552); (bnc#958585).- Update to 4.3.2. + vfs_gpfs: Re-enable share modes; (bso#11243). + dcerpc.idl: Accept invalid dcerpc_bind_nak pdus; (bso#11327). + s3-smbd: Fix old DOS client doing wildcard delete - gives an attribute type of zero; (bso#11452). + Add libreplace dependency to texpect, fixes a linking error on Solaris; (bso#11511). + s4: Fix linking of 'smbtorture' on Solaris; (bso#11512). + s4:lib/messaging: Use correct path for names.tdb; (bso#11562). + Fix segfault of 'net ads (join|leave) -S INVALID' with nss_wins; (bso#11563). + async_req: Fix non-blocking connect(); (bso#11564). + auth: gensec: Fix a memory leak; (bso#11565). + lib: util: Make non-critical message a warning; (bso#11566). + Fix winbindd crashes with samlogon for trusted domain user; (bso#11569); (bnc#949022). + smbd: Send SMB2 oplock breaks unencrypted; (bso#11570). + ctdb: Open the RO tracking db with perms 0600 instead of 0000; (bso#11577). + s3:smb2_server: Make the logic of SMB2_CANCEL DLIST_REMOVE() clearer; (bso#11581). + s3-smbd: Fix use after issue in smbd_smb2_request_dispatch(); (bso#11581). + manpage: Correct small typo error; (bso#11584). + s3: smbd: If EAs are turned off on a share don't allow an SMB2 create containing them; (bso#11589). + Backport some valgrind fixes from upstream master; (bso#11597). + auth: Consistent handling of well-known alias as primary gid; (bso#11608). + winbind: Fix crash on invalid idmap configs; (bso#11612). + s3: smbd: have_file_open_below() fails to enumerate open files below an open directory handle; (bso#11615). + Changing log level of two entries to DBG_NOTICE; (bso#9912).- Ensure samlogon fallback requests are rerouted after kerberos failure; (bnc#953382); (bnc#953972).- Ensure to link with --as-needed flag by removing SUSE_ASNEEDED=0. - Always use the default optimization even on pre-9.2 systems.- Remove redundant configure options while adding with-relro.- Relocate the lockdir to the /var/lib/samba/lock directory.- Cleanup and enhance the pidl sub package.- Require renamed python-ldb-devel and python-talloc-devel at build-time. - Requires python-ldb and python-talloc from the python subpackage.- Update to 4.3.1. + s3: smbd: Fix our access-based enumeration on "hide unreadable" to match Windows; (bso#10252). + nss_winbind: Fix hang on Solaris on big groups; (bso#10365). + smbd: Fix file name buflen and padding in notify repsonse; (bso#10634). + kerberos: Make sure we only use prompter type when available; winbind: Fix 100% loop; (bso#11038). + source3/lib/msghdr.c: Fix compiling error on Solaris; (bso#11053). + s3:ctdbd_conn: make sure we destroy tevent_fd before closing the socket; (bso#11316). + s3: smbd: Fix mkdir race condition; (bso#11486). + pam_winbind: Fix a segfault if initialization fails; (bso#11502). + s3: dfs: Fix a crash when the dfs targets are disabled; (bso#11509). + s4:lib/messaging: Use 'msg.lock' and 'msg.sock' for messaging related subdirs; (bso#11515). + s3: smbd: Fix opening/creating :stream files on the root share directory; (bso#11522). + lib/param: Fix hiding of FLAG_SYNONYM values; (bso#11526). + net: Fix a crash with 'net ads keytab create'; (bso#11528). + s3: smbd: Fix a crash in unix_convert(); (bso#11535). + s3: smbd: Fix NULL pointer bug introduced by previous 'raw' stream fix (bso#11522); (bso#11535). + vfs_fruit: Return value of ad_pack in vfs_fruit.c; (bso#11543). + vfs_commit: set the fd on open before calling SMB_VFS_FSTAT; (bso#11547). + s3:locking: Initialize lease pointer in share_mode_traverse_fn(); (bso#11549). + s3:smbstatus: Add stream name to share_entry_forall(); (bso#11550). + s3:lib: Validate domain name in lookup_wellknown_name(); (bso#11555). + s3: lsa: lookup_name() logic for unqualified (no DOMAIN component) names is incorrect; (bso#11555).- Fix 100% CPU in winbindd when logging in with "user must change password on next logon"; (bso#11038).- Relocate the tmpfiles.d directory to the client package; (bnc#947552).- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf instead; (bnc#942716).- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).- Package /var/lib/samba/msg with 0755 permissions; (bso#11515); (bnc#945502).- Require to install libfam0-gamin from samba-libs on post-12.1 and pre-13.15 systems; (bnc#945013).- Update to 4.3.0. + Samba "map to guest = Bad uid" doesn't work; (bso#9862). + revert LDAP extended rule 1.2.840.113556.1.4.1941 LDAP_MATCHING_RULE_IN_CHAIN changes; (bso#10493). + No objectClass found in replPropertyMetaData on ordinary objects (non-deleted); (bso#10973). + Stream names with colon don't work with fruit:encoding = native; (bso#11278). + NetApp joined to a Samba/ADDC cannot resolve SIDs; (bso#11291). + tevent_fd needs to be destroyed before closing the fd; (bso#11316). + "force group" with local group not working; (bso#11320). + strsep is not available on Solaris; (bso#11359). + smbtorture does not build when configured --with-system-mitkrb5; (bso#11411). + Build with GPFS support is broken; (bso#11421). + Build broken with --disable-python; (bso#11424). + net share allowedusers crashes; (bso#11426). + nmbd incorrectly matches netbios names as own name; (bso#11427). + Python bindings don't check integer types; (bso#11429). + Python bindings don't check array sizes; (bso#11430). + CTDB's eventscript error handling is broken; (bso#11431). + Fix crash in nested ctdb banning; (bso#11432). + Cannot build ctdbpmda; (bso#11434). + samba-tool uncaught exception error; (bso#11436). + Crash in notify_remove caused by change notify = no; (bso#11444). + Poor SMB3 encryption performance with AES-GCM; (bso#11451). + Poor SMB3 encryption performance with AES-GCM (part1); (bso#11451). + fix recursion problem in rep_strtoll in lib/replace/replace.c; (bso#11455). + --bundled-libraries=!ldb,!pyldb,!pyldb-util doesn't disable ldb build and install; (bso#11458). + xid2sid gives inconsistent results; (bso#11464). + ctdb: Fix the build on FreeBSD 10.1; (bso#11465). + Handling of 0 byte resource fork stream; (bso#11467). + AD samr GetGroupsForUser fails for users with "()" in their name; (bso#11488).- Configure with --bundled-libraries=NONE; (bso#11458).- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).- Remove libiniparser-devel build-time requirement.- Update to 4.2.3. + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780). + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924). + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991). + Logon via MS Remote Desktop hangs; (bso#11061). + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068). + tevent: Add a note to tevent_add_fd(); (bso#11141). + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170). + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217). + smbd: Fix a use-after-free; (bso#11218); (bnc#919309). + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces; (bso#11245). + s3:smb2: Add padding to last command in compound requests; (bso#11277). + Add IPv6 support to ADS client side LDAP connects; (bso#11281). + Add IPv6 support for determining FQDN during ADS join; (bso#11282). + s3: IPv6 enabled DNS connections for ADS client; (bso#11283). + Fix invalid write in ctdb_lock_context_destructor; (bso#11293). + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295). + vfs_fruit: Add option "veto_appledouble"; (bso#11305). + tstream: Make socketpair nonblocking; (bso#11312). + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313). + Group creation: Add msSFU30Name only when --nis-domain was given; (bso#11315). + tevent_fd needs to be destroyed before closing the fd; (bso#11316). + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared"; (bso#11319). + smbd/trans2: Add a useful diagnostic for files with bad encoding; (bso#11323). + Change sharesec output back to previous format; (bso#11324). + Robust mutex support broken in 1.3.5; (bso#11326). + Kerberos auth info3 should contain resource group ids available from pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info exists in PAC; (bso#11328); (bnc#912457). + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329). + tevent: Fix CID 1035381 Unchecked return value; (bso#11330). + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331). + s3: smbd: Use separate flag to track become_root()/unbecome_root() state; (bso#11339). + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342). + pidl: Make the compilation of PIDL producing the same results if the content hasn't change; (bso#11356). + winbindd: Disconnect child process if request is cancelled at main process; (bso#11358). + vfs_fruit: Check offset and length for AFP_AfpInfo read requests; (bso#11363). + docs: Overhaul the description of "smb encrypt" to include SMB3 encryption; (bso#11366). + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server(); (bso#11367). + ncacn_http: Fix GNUism; (bso#11371).- Disable rpath usage; (bnc#902421).- Make the winbind package depend on the matching libwbclient version and vice versa; (bnc#936909).- Backport changes to use resource group sids obtained from pac logon_info; (bso#11328); (bnc#912457).- Order winbind.service Before and Want nss-user-lookup target.- Remove fam-devel build-time dependency for post-6 RHEL systems.- Update to 4.2.2. + s3:smbXsrv: refactor duplicate code into smbXsrv_session_clear_and_logoff(); (bso#11182). + gencache: don't fail gencache_stabilize if there were records to delete; (bso#11260). + s3: libsmbclient: After getting attribute server, ensure main srv pointer is still valid; (bso#11186). + s4: rpc: Refactor dcesrv_alter() function into setup and send steps; (bso#11236). + s3: smbd: Incorrect file size returned in the response of "FILE_SUPERSEDE Create"; (bso#11240). + Mangled names do not work with acl_xattr; (bso#11249). + nmbd rewrites browse.dat when not required; (bso#11254). + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff; (bso#11213). + s3:smbd: Add missing tevent_req_nterror; (bso#11224). + vfs: kernel_flock and named streams; (bso#11243). + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244). + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses are used; (bso#11284). + ctdb: check for talloc_asprintf() failure; (bso#11201). + spoolss: purge the printer name cache on name change; (bso#11210); (bnc#901813). + CTDB statd-callout does not scale; (bso#11204). + vfs_fruit: also map characters below 0x20; (bso#11221). + ctdb: Coverity fix for CID 1291643; (bso#11201). + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225). + Fix terminate connection behavior for asynchronous endpoint with PUSH notification flavors; (bso#11226). + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007). + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201). + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the directory is deleted; (bso#11257). + s3:winbindd: make sure we remove pending io requests before closing client sockets; (bso#11141); (bnc#931854). + Fix panic triggered by smbd_smb2_request_notify_done() -> smbXsrv_session_find_channel() in smbd; (bso#11182). + 'sharesec' output no longer matches input format; (bso#11237). + waf: Fix systemd detection; (bso#11200). + CTDB: Fix portability issues; (bso#11202). + CTDB: Fix some IPv6-related issues; (bso#11203). + CTDB statd-callout does not scale; (bso#11204). + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you enter invalid values; (bso#11234). + libads: record service ticket endtime for sealed ldap connections; (bso#11267). + lib/util: Include DEBUG macro in internal header files before samba_util.h; (bso#11033).- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).- Remove the independently built libraries ldb, talloc, tdn, and tevent and the post-10.3 renamed libsmbclient from baselibs.conf.- Drop redundant doc attribute from man pages.- Update to 4.2.1. + s3:winbind:grent: Don't stop group enumeration when a group has no gid; (bso#8905). + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791). + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with servers that don't send the 2 unused fields; (bso#10016). + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476). + waf: Fix the build on openbsd; (bso#10476). + s3: client: "client use spnego principal = yes" code checks wrong name; (bso#10888). + spoolss: Retrieve published printer GUID if not in registry; (bso#11018). + s3: lib: libsmbclient: If reusing a server struct, check every cli->timout miliseconds if it's still valid before use; (bso#11079). + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125). + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135). + replace: Remove superfluous check for gcrypt header; (bso#11135). + Backport subunit changes; (bso#11137). + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with implementation; (bso#11140). + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143). + talloc: Version 2.1.2; (bso#11144). + Update libwbclient version to 0.12; (bso#11149). + brlock: Use 0 instead of empty initializer list; (bso#11153). + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164). + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169); (bnc#913304). + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev fails in the SMB1 case; (bso#11173). + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174). + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175). + s3: libsmbclient: Add missing talloc stackframe; (bso#11177). + s4-process_model: Do not close random fds while forking; (bso#11180). + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).- Prevent samba package updates from disabling samba kerberos printing.- Add sparse file support for samba; (fate#318424).- Purge printer name cache on spoolss SetPrinter change; (bso#11210); (bnc#901813).- Correctly retain errno from Btrfs snapshot ioctls; (bnc#923374).- Simplify libxslt build requirement and README.SUSE install. - Remove no longer required cleanup steps while populating the build root.- Remove deprecated base_rid example from idmap_rid manpage; (bso#11169); (bnc#913304).- Update to 4.2.0. + smbd: Stop using vfs_Chdir after SMB_VFS_DISCONNECT; (bso#1115). + pam_winbind: fix warn_pwd_expire implementation; (bso#9056). + nsswitch: Fix soname of linux nss_*.so.2 modules; (bso#9299). + Make 'profiles' work again; (bso#9629). + s3:smb2_server: protect against integer wrap with "smb2 max credits = 65535"; (bso#9702). + Make validate_ldb of String(Generalized-Time) accept millisecond format ".000Z"; (bso#9810). + Use -R linker flag on Solaris, not -rpath; (bso#10112). + vfs: Add glusterfs manpage; (bso#10240). + Make 'smbclient' use cached creds; (bso#10279). + pdb: Fix build issues with shared modules; (bso#10355). + s4-dns: Add support for BIND 9.10; (bso#10620). + idmap: Return the correct id type to *id_to_sid methods; (bso#10720). + printing/cups: Pack requested-attributes with IPP_TAG_KEYWORD; (bso#10808). + Don't build vfs_snapper on FreeBSD; (bso#10834). + nss_winbind: Add getgroupmembership for FreeBSD; (bso#10835). + idmap_rfc2307: Fix a crash after connection problem to DC; (bso#10837). + s3: smb2cli: query info return length check was reversed; (bso#10848). + s3: lib, s3: modules: Fix compilation on Solaris; (bso#10849). + lib: uid_wrapper: Fix setgroups and syscall detection on a system without native uid_wrapper library; (bso#10851). + winbind3: Fix pwent variable substitution; (bso#10852). + Improve samba-regedit; (bso#10859). + registry: Don't leave dangling transactions; (bso#10860). + Fix build of socket_wrapper on systems without SO_PROTOCOL; (bso#10861). + build: Do not install 'texpect' binary anymore; (bso#10862). + Fix testparm to show hidden share defaults; (bso#10864). + libcli/smb: Fix smb2cli_validate_negotiate_info with min=PROTOCOL_NT1 max=PROTOCOL_SMB2_02; (bso#10866). + Integrate CTDB into top-level Samba build; (bso#10892). + samba-tool group add: Add option '--nis-domain' and '--gid'; (bso#10895). + s3-nmbd: Fix netbios name truncation; (bso#10896). + spoolss: Fix handling of bad EnumJobs levels; (bso#10898). + Fix smbclient loops doing a directory listing against Mac OS X 10 server with a non-wildcard path; (bso#10904). + Fix print job enumeration; (bso#10905); (bnc#898031). + samba-tool: Create NIS enabled users and unixHomeDirectory attribute; (bso#10909). + Add support for SMB2 leases; (bso#10911). + btrfs: Don't leak opened directory handle; (bso#10918). + s3: nmbd: Ensure NetBIOS names are only 15 characters stored; (bso#10920). + s3:smbd: Fix file corruption using "write cache size != 0"; (bso#10921). + pdb_tdb: Fix a TALLOC/SAFE_FREE mixup; (bso#10932). + s3-keytab: fix keytab array NULL termination; (bso#10933). + s3:passdb: fix logic in pdb_set_pw_history(); (bso#10940). + Cleanup add_string_to_array and usage; (bso#10942). + dbwrap_ctdb: Pass on mutex flags to tdb_open; (bso#10942). + Fix RootDSE search with extended dn control; (bso#10949). + Fix 'samba-tool dns serverinfo ' for IPv6; (bso#10952). + libcli/smb: only force signing of smb2 session setups when binding a new session; (bso#10958). + s3-smbclient: Return success if we listed the shares; (bso#10960). + s3-smbstatus: Fix exit code of profile output; (bso#10961). + socket_wrapper: Add missing prototype check for eventfd; (bso#10965). + libcli: SMB2: Pure SMB2-only negprot fix to make us behave as a Windows client does; (bso#10966). + vfs_streams_xattr: Check stream type; (bso#10971). + s3: smbd: Fix *allocate* calls to follow POSIX error return convention; (bso#10982). + vfs_fruit: Add support for AAPL; (bso#10983). + Fix spoolss IDL response marshalling when returning error without clearing info; (bso#10984). + dsdb-samldb: Check for extended access rights before we allow changes to userAccountControl; (bso#10993); CVE-2014-8143; (boo#914279). + Fix IPv6 support in CTDB; (bso#10996). + ctdb-daemon: Use correct tdb flags when enabling robust mutex support; (bso#11000). + vfs_streams_xattr: Add missing call to SMB_VFS_NEXT_CONNECT; (bso#11005). + s3-util: Fix authentication with long hostnames; (bso#11008). + ctdb-build: Fix build without xsltproc; (bso#11014). + packaging: Include CTDB man pages in the tarball; (bso#11014). + pdb_get_trusteddom_pw() fails with non valid UTF16 random passwords; (bso#11016). + Make Sharepoint search show user documents; (bso#11022). + nss_wrapper: check for nss.h; (bso#11026). + Enable mutexes in gencache_notrans.tdb; (bso#11032). + tdb_wrap: Make mutexes easier to use; (bso#11032). + lib/util: Avoid collision which alread defined consumer DEBUG macro; (bso#11033). + winbind: Retry after SESSION_EXPIRED error in ping-dc; (bso#11034). + s3-libads: Fix a possible segfault in kerberos_fetch_pac(); (bso#11037). + vfs_fruit: Fix base_fsp name conversion; (bso#11039). + vfs_fruit: mmap under FreeBSD needs PROT_READ; (bso#11040). + Fix authentication using Kerberos (not AD); (bso#11044). + net: Fix sam addgroupmem; (bso#11051). + vfs_snapper: Correctly handles multi-byte DBus strings; (bso#11055); (bnc#913238). + cli_connect_nb_send: Don't segfault on host == NULL; (bso#11058). + utils: Fix 'net time' segfault; (bso#11058). + libsmb: Provide authinfo domain for encrypted session referrals; (bso#11059). + s3-pam_smbpass: Fix memory leak in pam_sm_authenticate(); (bso#11066). + vfs_glusterfs: Add comments to the pipe(2) code; (bso#11069). + vfs/glusterfs: Change xattr key to match gluster key; (bso#11069). + vfs_glusterfs: Implement AIO support; (bso#11069). + s3-vfs: Fix developer build of vfs_ceph module; (bso#11070). + s3: netlogon: Ensure we don't call talloc_free on an uninitialized pointer; (bso#11077); CVE-2015-0240; (bnc#917376). + vfs: Add a brief vfs_ceph manpage; (bso#11088). + s3: smbclient: Allinfo leaves the file handle open; (bso#11094). + Fix Win8.1 Credentials Manager issue after KB2992611 on Samba domain; (bso#11097). + debug: Set close-on-exec for the main log file FD; (bso#11100). + s3: smbd: leases - losen paranoia check. Stat opens can grant leases; (bso#11102). + s3: smbd: SMB2 close. If a file has delete on close, store the return info before deleting; (bso#11104). + doc:man:vfs_glusterfs: improve the configuration section; (bso#11117). + snprintf: Try to support %j; (bso#11119). + ctdb-io: Do not use sys_write to write to client sockets; (bso#11124). + doc-xml: Add 'sharesec' reference to 'access based share enum'; (bso#11127).- Update to 4.2.0rc5. + Ensure we don't call talloc_free on an uninitialized pointer; CVE-2015-0240; (bso#11077); (bnc#917376).- Fix usage of freed memory on server exit; (bso#11218); (bnc#919309).- Fix tdb_store_flag_to_ntdb() gcc5 build failure.- Fix vfs_snapper DBus string handling; (bso#11055); (bnc#913238).- Update to 4.1.16. + dsdb-samldb: Check for extended access rights before we allow changes to userAccountControl; (bso#10993); CVE-2014-8143; (boo#914279).- Adjust baselibs.conf due to libpdb0 package rename to libsamba-passdb0.- Fix libsmbclient DFS referral handling. + Reuse connections derived from DFS referrals; (bso#10123); (fate#316512). + Set domain/workgroup based on authentication callback value; (bso#11059).- Update to 4.2.0rc4. - Add libsamba-debug, libsocket-blocking, libsamba-cluster-support, and libhttp to the libs package; (boo#913547). - Rename libpdb packages to libsamba-passdb. - Drop libsmbsharemodes packages.- Enable avahi support on post-12.2 systems.- Update to 4.1.15. + pam_winbind: Fix warn_pwd_expire implementation; (bso#9056). + nsswitch: Fix soname of linux nss_*.so.2 modules; (bso#9299). + Fix profiles tool; (bso#9629). + s3-lib: Do not require a password with --use-ccache; (bso#10279). + s4:dsdb/rootdse: Expand extended dn values with the AS_SYSTEM control; (bso#10949). + s4-rpc: dnsserver: Fix enumeration of IPv4 and IPv6 addresses; (bso#10952). + s3:smb2_server: Allow reauthentication without signing; (bso#10958). + s3-smbclient: Return success if we listed the shares; (bso#10960). + s3-smbstatus: Fix exit code of profile output; (bso#10961). + libcli: SMB2: Pure SMB2-only negprot fix to make us behave as a Windows client does; (bso#10966). + s3: smbd/modules: Fix *allocate* calls to follow POSIX error return convention; (bso#10982). + Fix 'domain join' by adding 'drsuapi.DsBindInfoFallBack' attribute 'supported_extensions'; (bso#11006). + idl:drsuapi: Manage all possible lengths of drsuapi_DsBindInfo; (bso#11006). + winbind: Retry LogonControl RPC in ping-dc after session expiration; (bso#11034).- yast2-samba-client should be able to specify osName and osVer on AD domain join; (bnc#873922).- Lookup FSRVP share snums at runtime rather than storing them persistently; (bnc#908627).- Specify soft dependency for network-online.target in Winbind systemd service file; (bnc#889175).- Fix spoolss error response marshalling; (bso#10984).- Update to 4.1.14. + pidl/wscript: Remove --with-perl-* options; revert buildtools/wafadmin/ Tools/perl.py back to upstream state; (bso#10472). + s4-dns: Add support for BIND 9.10; (bso#10620). + nmbd fails to accept "--piddir" option; (bso#10711). + nss_winbind: Add getgroupmembership for FreeBSD; (bso#10835). + S3: source3/smbd/process.c::srv_send_smb() returns true on the error path; (bso#10880). + vfs_glusterfs: Remove "integer fd" code and store the glfs pointers; (bso#10889). + s3-nmbd: Fix netbios name truncation; (bso#10896). + spoolss: Fix handling of bad EnumJobs levels; (bso#10898). + s3: libsmbclient-smb2. MacOSX 10 SMB2 server doesn't set STATUS_NO_MORE_FILES when handed a non-wildcard path; (bso#10904). + spoolss: Fix jobid in level 3 EnumJobs response; (bso#10905). + s3: nmbd: Ensure NetBIOS names are only 15 characters stored; (bso#10920). + s3:smbd: Fix file corruption using "write cache size != 0"; (bso#10921). + pdb_tdb: Fix a TALLOC/SAFE_FREE mixup; (bso#10932). + s3-keytab: Fix keytab array NULL termination; (bso#10933). + Cleanup add_string_to_array and usage; (bso#10942).- Remove and cleanup shares and registry state associated with externally deleted snaphots exposed as shadow copies; (bnc#876312).- Use the upstream tar ball, as signature verification is now able to handle compressed archives.- Fix leak when closing file descriptor returned from dirfd; (bso#10918).- Fix spoolss EnumJobs and GetJob responses; (bso#10905); (bnc#898031). + Fix handling of bad EnumJobs levels; (bso#10898).- Remove dependency on gpg-offline as signature checking is implemented in the source validator.- Update to 4.1.13. + s3-libnet: Add libnet_join_get_machine_spns(); (bso#9984). + s3-libnet: Make sure we do not overwrite precreated SPNs; (bso#9984). + s3-libads: Add all machine account principals to the keytab; (bso#9985). + s3: winbindd: Old NT Domain code sets struct winbind_domain->alt_name to be NULL. Ensure this is safe with modern AD-DCs; (bso#10717). + Fix unstrcpy; (bso#10735). + pthreadpool: Slightly serialize jobs; (bso#10779). + s3: smbd: streams - Ensure share mode validation ignores internal opens (op_mid == 0); (bso#10797). + s3: smbd:open_file: Open logic fix; Use a more natural check; (bso#10809). + vfs_media_harmony: Fix a crash bug; (bso#10813). + docs: Mention incompatibility between kernel oplocks and streams_xattr; (bso#10814). + nmbd: Send waiting status to systemd; (bso#10816). + libcli: Fix a segfault calling smbXcli_req_set_pending() on NULL; (bso#10817). + nsswitch: Skip groups we were not able to map; (bso#10824). + s3-winbindd: Use correct realm for trusted domains in idmap child; (bso#10826). + s3: nmbd: Ensure the main nmbd process doesn't create zombies; (bso#10830). + s3: lib: Signal handling - ensure smbrun and change password code save and restore existing SIGCHLD handlers; (bso#10831). + idmap_rfc2307: Fix a crash after connection problem to DC; (bso#10837). + s3-winbindd: Do not use domain SID from LookupSids for Sids2UnixIDs call; (bso#10838). + s3: smb2cli: Query info return length check was reversed; (bso#10848). + registry: Don't leave dangling transactions; (bso#10860).- Update to 4.2.0rc2./sbin/ldconfig/sbin/ldconfiglibdcerpc-binding0libdcerpc0libndr-krb5pac0libndr-nbt0libndr-standard0libndr0libndr1libndr2libnetapi0libsamba-credentials0libsamba-credentials1libsamba-errors0libsamba-hostconfig0libsamba-passdb0libsamba-util0libsamdb0libsmbclient0libsmbconf0libsmbldap0libsmbldap2libtevent-util0libwbclient0h01-ch4a 1723200264  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuv4.19.7+git.357.1d7950ebd624.19.7+git.357.1d7950ebd624.19.7+git.357.1d7950ebd624.19.7+git.357.1d7950ebd624.19.7+git.357.1d7950ebd624.19.7+git.357.1d7950ebd624.19.7+git.357.1d7950ebd624.19.7+git.357.1d7950ebd624.19.7+git.357.1d7950ebd624.19.7+git.357.1d7950ebd624.19.7+git.357.1d7950ebd624.19.7+git.357.1d7950ebd624.19.7+git.357.1d7950ebd624.19.7+git.357.1d7950ebd624.19.7+git.357.1d7950ebd624.19.7+git.357.1d7950ebd624.19.7+git.357.1d7950ebd624.19.7+git.357.1d7950ebd624.19.7+git.357.1d7950ebd62-150600.3.3.24.19.7+git.357.1d7950ebd62-150600.3.3.24.19.7+git.357.1d7950ebd624.19.7+git.357.1d7950ebd624.19.7+git.357.1d7950ebd624.19.7+git.357.1d7950ebd624.19.7+git.357.1d7950ebd624.19.7+git.357.1d7950ebd624.19.7+git.357.1d7950ebd624.19.7+git.357.1d7950ebd624.19.7+git.357.1d7950ebd624.19.7+git.357.1d7950ebd624.19.7+git.357.1d7950ebd624.19.7+git.357.1d7950ebd624.19.7+git.357.1d7950ebd624.19.7+git.357.1d7950ebd624.19.7+git.357.1d7950ebd624.19.7+git.357.1d7950ebd624.19.7+git.357.1d7950ebd624.19.7+git.357.1d7950ebd624.19.7+git.357.1d7950ebd624.19.7+git.357.1d7950ebd624.19.7+git.357.1d7950ebd624.19.7+git.357.1d7950ebd62libdcerpc-binding.so.0libdcerpc-binding.so.0.0.1libdcerpc-server-core.so.0libdcerpc-server-core.so.0.0.1libdcerpc.so.0libdcerpc.so.0.0.1libndr-krb5pac.so.0libndr-krb5pac.so.0.0.1libndr-nbt.so.0libndr-nbt.so.0.0.1libndr-standard.so.0libndr-standard.so.0.0.1libndr.so.3libndr.so.3.0.1libnetapi.so.1libnetapi.so.1.0.0libsamba-credentials.so.1libsamba-credentials.so.1.0.0libsamba-errors.so.1libsamba-errors.so.1.0.0libsamba-hostconfig.so.0libsamba-hostconfig.so.0.0.1libsamba-passdb.so.0libsamba-passdb.so.0.28.0libsamba-util.so.0libsamba-util.so.0.0.1libsamdb.so.0libsamdb.so.0.0.1libsmbclient.so.0libsmbclient.so.0.7.0libsmbconf.so.0libsmbconf.so.0.0.1libsmbldap.so.2libsmbldap.so.2.1.0libtevent-util.so.0libtevent-util.so.0.0.1libwbclient.so.0libwbclient.so.0.16libCHARSET3-samba4.solibMESSAGING-SEND-samba4.solibMESSAGING-samba4.solibaddns-samba4.solibads-samba4.solibasn1util-samba4.solibauth-samba4.solibauthkrb5-samba4.solibcli-cldap-samba4.solibcli-ldap-common-samba4.solibcli-ldap-samba4.solibcli-nbt-samba4.solibcli-smb-common-samba4.solibcli-spoolss-samba4.solibcliauth-samba4.solibclidns-samba4.solibcluster-samba4.solibcmdline-contexts-samba4.solibcmdline-samba4.solibcommon-auth-samba4.solibdbwrap-samba4.solibdcerpc-pkt-auth-samba4.solibdcerpc-samba-samba4.solibdcerpc-samba4.solibevents-samba4.solibflag-mapping-samba4.solibgenrand-samba4.solibgensec-samba4.solibgpo-samba4.solibgse-samba4.solibhttp-samba4.solibinterfaces-samba4.solibiov-buf-samba4.solibkrb5samba-samba4.solibldbsamba-samba4.soliblibcli-lsa3-samba4.soliblibcli-netlogon3-samba4.soliblibsmb-samba4.solibmessages-dgm-samba4.solibmessages-util-samba4.solibmscat-samba4.solibmsghdr-samba4.solibmsrpc3-samba4.solibndr-samba-samba4.solibndr-samba4.solibnet-keytab-samba4.solibnetif-samba4.solibnpa-tstream-samba4.solibprinting-migrate-samba4.solibregistry-samba4.solibreplace-samba4.solibsamba-cluster-support-samba4.solibsamba-debug-samba4.solibsamba-modules-samba4.solibsamba-security-samba4.solibsamba-sockets-samba4.solibsamba3-util-samba4.solibsamdb-common-samba4.solibsecrets3-samba4.solibserver-id-db-samba4.solibserver-role-samba4.solibsmb-transport-samba4.solibsmbclient-raw-samba4.solibsmbd-base-samba4.solibsmbd-shim-samba4.solibsmbldaphelper-samba4.solibsocket-blocking-samba4.solibstable-sort-samba4.solibsys-rw-samba4.solibtalloc-report-printf-samba4.solibtdb-wrap-samba4.solibtime-basic-samba4.solibtrusts-util-samba4.solibutil-reg-samba4.solibutil-setid-samba4.solibutil-tdb-samba4.sopdbldapsam.sosmbpasswd.sotdbsam.so/usr/lib64//usr/lib64/samba//usr/lib64/samba/pdb/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:35188/SUSE_SLE-15-SP6_Update/5e5608c3682ad2bc92e419933b401d5a-samba.SUSE_SLE-15-SP6_Updatedrpmxz5x86_64-suse-linux  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=b8974b875e44afa52014ec3520deef626e2b8607, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=6a1a7113fe6aea14cba6176a71b9871610987261, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=8a7c75cc434b5bfd77c564ea3b05417ceb822400, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=91ad463380ead46d1cff07960a2d30da8c121073, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=1ec90468834e55e90b24a8e23b0a0210452ea934, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=c9f14cb0c9d21dbf75d2d9ea7dd1090bac7b9e96, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=f705269ae15fdc978302101b9cbc0b64215881cc, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=a72581a53ac6b12343499f3d3baffafd07ec1477, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=8cda3b50ea76a98cfa28e10d93f59c21b9577a4f, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=104caf63379ee8dda470c5a8bc297dabb0739bf7, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=c60479e0c1fd87215825f9d9cd41cfe6b012ba27, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=298ac8aca7586eb13e40e7300be07f35121ef309, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=6288f11b039c91093b1578674c342ae203cb5550, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=243facc9eed68a408634bb85faed92d8c557eec6, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=0aa4dd582b4572f093c06c2e1560a1d90200437a, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=ab8bd7a0d01fbb66b993c37c75f3692a97612d1b, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=3d4fa2d3568295aa3ff332a3a51ecc38df0e7ba0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=84ce367677648ba36970880ecc45ad6fe95c3419, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=4f12b9835c7af2eae8b8916de460080675a13a32, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=f1b23bf10b33981b64e2d1c58e8f4d568e057e3a, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=bc3f077665dc970c9e10c10a404571c1bd59ea62, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=f9a2e27b072ffb5ee88c1773e586e48782c56532, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=bce3e36744e759806e362dc140accfbe76dfac09, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=a023eca01499accc2823787871cd17fe9ca61919, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=acd24c463eb155cba3d4a8bcc4a7741258a57e2e, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=c345334116e80ae61bf5d539f69685360dfcd555, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=0fad1119e1255e047cdba0c9080fb1cb2532d87c, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=5f3001a876e6b29a66ebf85da08c746d6c76a02f, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=8e0cc45108c22877cb305d670dcc8d369b25116e, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=c92c6266af8cb548f51521f7dab747184f8804c4, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=80188b3f2f85f0953722f0bb98d5a9af3099bd60, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=1b7e61db053823631eb568415b589c7b5e49b311, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=fd6a80d9cc4f95570eeacf680f4a98151b8b933f, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=76db70daa27de29e848fdbdf60aefb42eddb2231, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=106d13fb98302da9b5ab02350538e8e2fab75cbb, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=d4db17984615baab5ec25676db006a0dffd8f476, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=9984d005166df693be1572e5a963010c78edfb91, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=c67fd6ee0b85c7279bf827ab0dacf93833ee1fca, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=a4f491f0715e52a9c344c3f2d9171eb78d04d2e7, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=0e372d1766a20e4cbbf11649e90777a74c5fb4c9, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=51b74493b97e0659ff2e4e5107e6f5027cbd5df6, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=f6d6d6eb8c56b06101b36050763e564d5ee60b6a, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=5c2184e19559e18f424e06a36e1373e396cfaa0c, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=f6d0ecaaf93e71d9f3e55725decd47138caa7599, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=ab5667dc5667e111e087ae4cb7696069196df1d0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=092ada2f7300b1e414cbfa8b194325255b1642ae, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=8c40bff91eed7637a47693dadbb1cfdaaae9cee9, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=06141f4f26a1040fdceb888b3c744b3c829bb375, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=e99c98a49c6a812f45af2db862ceba9a4b49cdbd, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=28a9ea77049a8ddd893e729b6706cb70bd39870a, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=74ee993e91278799b9a4c53a3be42ec7486342bd, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=86f4313113080b9d3d0a1794d2b37fed6ba660c8, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=c6398f71ec1b8bf2b25bfa81796d27c583726519, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=a5761edee8e127fd0acb882e6e407c459fbe5f18, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=c3b07ad58b11e04237cd8efe7118d92f7032932e, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=611b2bb52ef4dc52aad4cccc386024f93037b8c8, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=1d4a0e96da9f3f10af777ce0069e15223e843c75, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=36114b5c98df8cc3054ac5c9d74542b96ce51752, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=b86b2a485bd947edb4607c229e5d4b4756a70177, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=338e925a10c16af6531ab74162f23646eaa9c0a7, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=aac9cd59aafc446ac3e0ef37bb50abe464cfd74d, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=ced697638487be3470d46b47aff0e0492977bb67, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=d7d223e733e52005aeb9584b4f99369fc49d139c, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=23c0f96547e8fcf6f9128ec8e42a90749472f7ff, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=4959bc4f6ee328d36545865f84c7061f7f28a18b, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=ccaff4e97ca55328f34ae6c94469149b2a1e8bb1, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=974c59f687d67a0056704021c3f398d14e8ed353, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=0fb7b9b4209d348dcd946ada0e344bba974884ee, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=364ed227d32e1f07e7ed41781631d227e138b5c8, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=6d769c9ee5920222c5ef8ed2a11f08540d9762d4, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=3b90cbae9ae5aab7d1ed8d572ccce16a6df4ea20, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=107dd96b557d2fbdf8b4eac209e211c70585c6f4, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=ff8d587fba5b1eb01e14b7f12e8286c3dce50e2c, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=db0a1e78c0add0b0f9fdd91ea3d2241b3ddcd8e6, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=d30aa245f8f73cc4506b8d31cc8a190340bc4689, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=5f3164a8be66ef9be1858d6ae90fb9156bb5a421, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=5a8143961351c2a47ea6499ce2b7fe24adecc342, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=407f77eddb6d5c319dfdc91f3b017cf7c787111e, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=001e30e20b4b32c23a122005b3d2e0967e973e7b, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=f9767f2a50d4c014b0b7526a78124c04ab6475f8, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=4cfa575d9e081b632285ac643c60439233dc33f3, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=6e1e0c60b7ba5141a01c0f1a2cb61aaf1fc42221, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=1b3524fe1319e69f925ca5abf90b63d1df0c1dd2, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=765815ab16c9521e2d8b51e7ed8d118177cb862b, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=e159375d2e5288363fceaacf674985829bdcf3e4, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=d801e1852aed4cf96baf8c3babd228c0fb5842af, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=41e6dcf90c1d41c82c89fd51c9e3bbc4535e7f3e, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=fbb886390223b958ed0b1066a78be7b64ef11215, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=452fb9d77ad8d259e7a79ea8b30e5b997c9fe9d5, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=55c4783e0c09b507a73c7d485af301f51e7ac99f, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=d775951f8b062c217f257dd0b2e81f78dc2d46af, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=92e9326e4f2b821215aac7ba0f731b32bd0ee45a, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=2a13b704e67a612107de9e3b56d048340669fbd4, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=b0e2d38b3a9f2079e59419b509c6d33ff6ff92e1, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=33b130e9e6fe877f6c6266106b6ff49dbe05b847, strippeddirectoryELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=c3e6f0fffe6f85074bf7e114eff666cfe329e8fe, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=f6b9a171f7ece6088a6c50cd46dbac902d4f08de, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=0337cbeea37accb1bcaa8fa99e8b605400bce1fe, stripped#MTL+EReKu+Kq*28E2cv [w  , 2 H ] k  - 3 D t   " * 3 A G d m q { #*C9E0 I&4Nb *!AI*&2, &   <(> 1!;"I""* 5+0   &P+P*RLRRRRRRRRRRR)R&R%RR!RRRRRRRRRRRRRRKRRRP4P3RRLRRDRRRRRRR$R!R&RRRRBRRRNRRRRRRCRARRRRMRRRKRRRRRRP6P5RLRRDRFRR+RRR/RRRRRRR7RRRRRRRRRRYRR%R)R&RRR3RNRRRBRRCRARRRRR2RRRR6RRRRXRMRERR*RRRRKR.RRRP_P^RRRRRRRR&R!RRRRRRRRRRRRRRRR RPbPaRRRRR&RR!RRRRRRRRRRPiPhRRRR&RRRRRRRRRRRRRRRRRPlPmPmPnPnPoPoPpPpPqPqPrPrPsPsPtPtPuPuPvPvPwPwPxPxPyPyPzPzP{P{P|P|P}P}P~P~PPkRLRRRRR)R&RR!RRRRRRRKRRPPRRJRRLRvRxRPRRRRR3RtRRRRRRRRR7RRRRURRRRFR%R!R&RRRRRRRuRRRRRRRRERRRR6RsRRIRRwRRRTRRRKRR2RRORPPRLRRRPRRR@RRRrRRRWRgRcR7R%R&R!RRRRRaRRRqR?RRRRbRRRRR6RRKR`RRRRRRRRRRR7R R RRRR%R&RRRRtRNRRRRRRRRRuRR=R6RsRRRRRRRRRRRMRRR RRRTRRKRRRRRRRRPPR_RLRRRR>RcRRRRRR&RRRRWRRaRRPRR=RRbRRRRRRRKR`R^RR>RLRRR RcRR7RRRRWRRRRRRRRRPRRR!R&RRRRRRRRRRRRRRRR RRRR6RR=RbRRRKRRRRR7RNRRRRRRRRRRRBRR%R&RR!RRR3RRFRRRARwR?RRRTRRRRR6RRRRRMRERRR2RRRRKRR=RRRRPePdRR&R%R)RRRRRRRRRRRRRRRRRRRRRRPgPfRRRRRR!R&RRRRRRRRRRRRRRRRRRRRRRRRRPPRRLRRR&RRURRcRaRRbRRRTRRKRRR`RRRRRtRRxR7RRzRRRRRRLRR]RRRUR|RSRPRcR5RRFRNRRRRRRRRRRRRRRRRRRRRRR RRRRRRR)R!RR(RR&RR$R%RRRRRRR3R@RRR{R4RwRR?RRRRbRRyRRRRRRRRR\RRRRRRMRERRTR2R6RRRRKRRRRRRRR=RsRR Rj jc#ɷ}K1v& )*l fMf1XA2TA6+ɜ_%I!vp{);-Fsk 3 @4<<3<\m/82ss=4H.>VH1)~m\GaO;p>(-;4zm].a95"PJ%l䯧-";qMe!qOb*'ofJ).x5G F0Qrլ_+5dSK 9"HTH$I)W"HsM)TUj|dL^G/ P6 |0V+0b@kQLxˈc&Q^&ڝ%b2ӊ5N8NXklvkEG'30yoG69d}NxvM6|㖡a}` z8HPY"23)M gy B?݌{EvJK,F#M %xmUYSҧ7L2\'.X\HT{ʵ"! /3d?<^Q q4}ȝ-X0]C!DNY>O=]f7q) j~-iwnGCY`!^c1EY~\Fj!Y/s}#XP wgXlxuEF1\-$<PW#RhŶ9Sh!i\9ww)c3xa 瓟nfc֗ݫ (]оДX=< ]ѫwdnYB_kfVcO)Ծa s0!Zh5M}?Kn#MI 6\'LWDەxr+l1k@@Hg)L9OSͧ|4EaP౻/.!9%P#`SUkVQ\={k $C!Lx_Kฎv]b@h"As*Nn' ٙ;+NE!9d#X0HI-t,< Ev 3Cj#z](fhW(M"3- )"gs;$pw}@=~+^tE3!NG_a0j4^P~[ 9ϊ]hRXG L JcKJ\at~peaJz<懒t;~MO_pAW%-(׌ Kj9;$>#&8hr6|Hve&]ۿ5 ]Iե gB3 O3LNѪ۾OlҜ\Um<1؊ j }\t H6B zG8٥Wn^]iR}1Y=˿N9/~t%yH( *hxJ6>@5)Ke%?I1obyl8K@2PUnia)O_+GuN׊,eڃkJ}YI- 3Ho|7N֧=P Zl+چLC_ jPiJn zi%BKK7|P`C; 鰍&i"f+e 2Q'dv e 9P[8H[vG~od&Cnf+" +RzM mk?A9ZiGm,$ѽح߿L&}ɭ9gg /"шbdi )u!WfW3omkۙEc|E(& u;3M?ŋ6Rl#>чقL2Ti8@R2jp+7xZʡ^6{0 u$ 5vSxطRƬĆB(SBv :ʢn%Hʳ$'mrf "OS &W(DB|rjکtb1h8Wޡ@9K'auO̔+ʇ aP~IfNd|81jn^'_ <_JD/Dp}0쳀lQFlmZjƩZC xiVªĠ"g=UMxW<0,$ᒍ2't5SŤc\,TN5tf} D*rA !aB ?{ٹFf~Gtk9.2,S!}<@d\f?=79WdV~fqW#'m5̷ >p[.0|?G+D. pXiQa򄄳D)"7\Q뚟C$ # hbYQoQ6UT]5T;❜.H\#]]՘0A;'? V=+2ގzT 0Iω>wpx}EEwM̸Ȥ^3S!~l{28 E>,Rc:i[5ֱ!51g%":7ɀ/-_]Hj<k}hϴ1 o^ L- \Gc>Wh-QD묥-SPOO}{'©&ujHcOCU. 4S&#{g/:_,U}lnFe4 `rBA8`j;V7赟!P5d,}y~RK̅n/}br@e¸ÒS1/YևA(Cǝ;hp^Ӫ[?mATW:hN?JTlҫ u\^)wv,\ejH:v W*V "Gl30RX4nj/kp1fD(3rO*\dYsX$(M#H+>y@cB& u6f j88-I+8f+C :%K)e"qN qx?cT/d.^&km͓Pw0Ήl+2J_G'ٲWo0SYH  9ތEddܺD5Zϛ-B.HgpW,FkS 4 A &ЌS*=*^OtǕb{Z)Z!e't'Sᳰkl#X0!Y] )4=5㌫K? #Ϲo_8ߍh28R] -x_澥˂ZxZ)mC6IBBX9#{MRCs;|yPK/WQB,܊=Q+ar}ROq] 6_gv(QmI?tpD]kap w`C\G&x>40,9Ǡ契 ACO6[ jҎ*+[){{Ϻk#053v&QPx)AV=}12@\5 Ra2uK9ʽrWDwT|8wq GҾS΄$WQB{]|KiݬO!fy+c` B\Nq&i+}·m Ek@S [˞zAr5o .j E.12#mNm~q.zdHCfG~lJO˂WRM{) 1sPc']z7D"I?'F jP/0%umEDl`7O }2,W }LX$G^ b8cȐrs',/uo=NI׋1}Yuh k 6vy5"u[* a?O1M%UܕajRMayͣ-`n|p.ʡ`pׅ?}_D\9hP¡nu˄i#b2/_( My86A6qKb- Ƴ^е76/;\T]*)򘖰Jo, 56ə̳rv0Ⱦ%d' W]AՔ$RHI6:` S64y1ǖχy_ZۖG\Ъ[y|<…M" v y-gZB-p:)L?u>q4' yvns"`T꘲x1B:?waJv8&/ކD<QoWɻL`v<Ҕ\ ji6aۛ4 谚 |f԰| H83X_Kf"PC7z5u~ŗ2ݑ:ضZrLW]tyؿБ1?uVw H=8jq6yf}w켔iI*6qgSB`k3#doiܺ61.AZLSr\%F J.Ol跲 v;14)jd)s8x=vo7,@鯎M Er<-w(oD$Q}9s "oZP&nWSfU5;9ܕ(hPF>#sqA)1( |ܴA}o+8Mݞ5"L9.0PZ^78p|"P?E~aPA5(}f? E?#\h*ϛ/q`nu(jI=5OH'CH9bBNJخQ5njno7~,A bǗtUPs74PULF`&<kc+CƮ'4X?P//ڙx{F@X*zohq~CM9MźL|n&6#&"Gg44"`'4{8myn:x@ zj`ۊ:R!tW#f:-6]?Aq61&nV ͐YZCN.W3y].,}9zθXhskRq}l (,f8àuhlٍ+WE*X,ǀ;6v7}#oy]MdHvIwW.Tn*ђIly:; K$X?zyG Hnge0H]Q$ϵVG H޴N|SQ#-<ܪjG|7.Ynp/6`k5IK WrbzAl2N0j >DP带[qs)]tlx|h2W&[gC!xnBx 2?h$؆ʢ i, HQ}%#n4 Y&4a(^,3+KXIXSBI>w-i'h| d6ah`Znu^5vx_{6=>9xF^ !nVky?iƒQ(S~J]9y(¼=;])NK0QQ#Ҕqo2H\@@FEUTGI8혇 " 2H,9Kxwz2v܂s.DsDՋK~[=wG {5`ȹ4] Pְjad6G8WB5" nN:/­3}\B:ĚةZ(hBZt_Un/\U#yB|/Z5U:ta,v+A[`jQ8ɑ!2)4N4}{9⡵1\j)sױd ޝbFN9ӘbtksIF:= ';'#3s 6ڝj~+]R \W{ZBxKDל–% %>ԓ=K rY&GZaEd ?boG!Ȱ@Vyvi6tvw9`b9C`h#@#1ԻK1WDL"g ҌH^-X 9R˖Bٕp>~9v!lNԼ߲ϰ*!y'G ` @z%$f뾗^ 2m9Dz-WokZmX$ (Q3d;tʍsaܭu*`31ߟ b=tP&RKxLBVB_F9>b mP"Go݀OxwvmڌwS L=юΩva:^ssҨ,a#*vp8_R\/PSAzD{zLiNJNX@Wf#N@ڃ ncCƿ*9K`_Gh8Q:-Jg˄41 ,bB-GՎ lf?UP /ŞƗBp/8H w]N:%͗ڿllTǔ#'V>:R{uxm X"v톏7T7:9rC_`PNZ| {nH&+mPz'cY|t^cӧ"U|dI/H-7Ax%g-LtY%Eak^g_sS3p?)S>:3Zh6AG.7Pm)fnJXҨV?L܆~Cf+9iOK{ "T0KWɃ{D("?.&1pOg8ñ3:OQ(cJ 5Tzerf8͈ }PC;fLܑJzMv:j9hpֺew1~H<?{Dz6{̨wfQ wajM~AN׳0;6``k vi-tJI+>{@d$}Jo^ph~B|bL.v3YRfU{4-+uo8a'CY:УQJF#F1{s(} `F #FU&;Yp,}=kr:7K@%b!m$^ػncMz g\d|t oo6M@ pRWJh*H?MYxٷX{c9gtAw6|ɰnw`:`'PsO',M|)~ֆ46_~YAb{Bw{Y= ZAXgT Y:i#EJi#<}%~%@ .+Aeec#qѮj[7oCȹ菢8b݈y,ؒdr(NXx Y/Nw 쨴wхذ?t m VPUpު}AeC]4_7 >X_;߻AǑ9B& 5?|SvL|!O}gtNxӗLO:ޝ?)d#Tg5#'NK--(fnZhHk1ۦErnuҾ2IIV68;7!m wQQ:rJPx_O+z#Ģ.И߿Vi[X^BX^j|MV\r*>t=#%1M8L{m,GPP5W=54P RpI_ݔ(厮Ϥ;Oq٧!I b>xMb][͔3[;ؠRZY/Ax],#c$מbGZ t74| K*?]/2Cl^| =s <757-Z5#z$Wǒ>o.Z!@~t7h_X1CNCJVf wC&b~ 6ࣆs ɥ=<) :=Qʅ/6`f0aa09.M[Z\SJ1'.cfBqi10U;&i Ļ/)=ū5 9+n[ٶΦtx}:0l^_}xu/P[r=^o}>.ze?!el+S;K$yE(8v+^/W>sǙکIz' 78 &Jhp+bHּH쏩`q9dW]]bCtV~7m }XM#ψgS2tsh#R`֥k7C=C|L9I' %~@s{B&?˖8JZIrh%eTcN'^)bo{d(~DWyT8E#S<ϱ?\,т<?r{vEJdZ@n_ċ|pqakG9 #Z: WkS޾+ž^WfK0`:&y}u7 Ǯ\Ǹm*1_.*Oa|@Y WS K Z?`r8Nɞ45^ 9ƼE5̈15x(#O43u`iQ*+ɅZșd}7.k,jA|γZ&zfb`?ɰ* 3J36i̦ ei z=PFH=kHh\sGnu:= A~ ;VNrfαg &DMKK9a4 Krip20~DnοKb= ߨ}ä>N6JvU^}s 9DŽ=E7 &KgfD Wonae>Q˜hsԅ\%9?`"k#M0x'P'ԥ`1Ujheb~lNzsz)$ϷqVk rj@cz6Ϥ y@.8c[A_hJξiG5 GIpҾXi|vOg|=֘"i[%Lno)AG!kІ8Jjpӷ3O*h5*)Chv+RmbjW!aC=N^AKPO;]l̀9`dbks"9դa߿%idD'?5IauMw< Oi)bdЧBd7{upqz'?tuwr)چRO)@va߯ViMؽ8#c*` , R~{[ De܁W@b8WUa!5:Wʰj]ONmmXNX!vBDTj͕X&HL'V~o1GEwLkJWX6HʇsV5;QB.&-2W3#RW"R!{3 ϛ"5NqɓԘѪ8PJU7{mbύt2!{'n4{Aee45tZ }]+^MvX^:|7rJi\Šh$ M]& )*Vv3Sk?7dW T'30Yf`1 #s=%"b0n_d-!jK*46 * sfz ]1~Eй- P ,iu6M܈=gromn*Q#^|_; Py.<%COzIfc}\ 'Z:Ê#`s_cCs6IGamabad|7,c.1erˣׯ1=ڗ;9Bzt1|)a@&R=j8;*65Rh߉F`>*7'W*Ahڅnܶ@w.zon\ \C_3X_Sf[ђbՒ`wwV>k!t/i2BfNt.+EL whRT {<ؾҐAKumav>v3N6˨{C6j)(a[z:O(3 ?n( /\lcya›.CM+ZE 䞉^$`KiV`v79zBqԅ 'VVx6R]|y$@4f53chI3 5R.Vp+YmRK$5L8wٲ߹/2-/YJ/vZQ +U)_ζ~I-wgsWL!W=dT\G[Oj"ofBS٭FIר)Pr j[DwVYnD~LK~BtgLkEcE54SsET|)|Ŝ](sU3n]2ݟ -5OvTeܑCo 2 j%"uoJ L;EU}%}sxsuáK*R0-"j6M;O}8y}GJ%~ᬸo4] 8Tv cxVaORF("ߎ=ӯy,m.0+λ)+9çe6(x:Ɨ, V5'+oM"nl@so"fmycfP q^ԗ^ks(] h{|9I]ӚWEc$"\qc)iL<0-|ݠ Ε-^0^+/P<,^œ }I3záLS4$HD&.?Cx`i-sy /DeYV0cU= 4;bV "P!>+\!YO6f{jfZojrGֱt<^<(ccVж>B۲!F=bgcI5}ƙd@@eetlkvG wz h3ziV&Nt>nqDZ M& gax =v=\_-?fٽiԭBdW N#UK䟍%(ls|g ;vWbh/dYAXN["5>>لZҶ;;Ճ?U!ymU֔)TTg`{װ]΅=dElX[(ō=fH薺,ʼnk)ivyc yKhos}=lНt|h+}qzOom%WsMf:,Zǻ8Pz5d|1 I|%"9%{RX@&pS{@7#<] ]vK+,F|C9V8 >[˂̝km> * w= @i1 yN:& 0XB۸kӣx?񸩞(TtHmRhSMeR]ܦLBкHԳ,zNqLɆ{U;֖bTW]Af:T�)$twy;DC 'GȞF-3WN؀J MCRZ16w4XK(l9sh d8+J7 "٣엳|ioU:%)ByrdRˋ_e/:b{Z,""; ~f3q ˰Jq*^E^K3 $Jmm?r[EXUЀ_72Pȿقf)C"Bk\`}bKj++ (@:ҿlӈ 34D!nMFv|UO:D-g/l${ ~NͷݽцuwR MưhBNfDCO|6K IG L`CQs@hI+ W`zD6 Z6 4.􋎟JtnALkW~e8N5Aƍ?*OЄ8k$#Gg6+!4aP]ڣɝwKTDN; U&C$@z!Lq# |v.#qs"0@=>)sφEy0A8+;Ӛݜ)˗1 ޮMwq=]Zt\LFMĀw=b WU*w\~2>4>OZfPvw9c7֥P՞2ۨeu 9y|ݺcrb2ɠCïȱw\LJOĮV鸶g(S!I uSt۟ "~]h=XA/k T>Ʈ;bQ۸} =4-eTS1ۯriRa|B%]?*54]v|/Y޾Pm^Zѣ|m 7ʅIOhJn :š&k"i9k!r.7rcbsDb0uM*_s^̔ѝ# 5,-܅0z9oBf~HŮ lߜ+ DYuvKۣ(LyG4#匤rd) :E"V ʑ#4 N\z GB#d"*n: 4D˕H.@ WEtpId{\wf>⿶O[7<(k*hFQӣ'!t+)yysD0I3-hkR>ײvFvJ`MEuҒ緄 2  =0G!J (܈z-f}-)`&L<έl,;$2O7)bB()E?K] AYJ;"zj%K!ki|F[ ga҆;rzo`gR+'O"֥`nD#*O)!~`2 =&r@nm'"kXv-&H2R#R=~Mk^&DFa- jT=9tRTv*A a;.00:˙$10Ԕ`]o~FspBp}8$X`R IV}bK ?2j$˵_#p"r];󶽾I_Jνŋ ܙ n^q9'iL hpL(4MEXC˂6eO.28]U%vG&v-g몰 [W͕Zcgc=Oo&n?"dݨd*耂|'D1>\}&|Մ)ӄwL7#~2#[ۻ_GcRNoRk%Yɪ_4As8%ŧR{Jj9M]imF WTpf>xPc*y3]5ZT0] ymd{Ő+ XzӡwnD"5ňc\#]VvU&Dr˸p2[@ Cqd0IF*w0(~BJ[z<ơ^W!F7ZL{3?;jt|P)MMIMz١UU[g4N3D]Z0] Qd\sC:9O 6~'TҸ&PN%^|h$ہ$H8<њ0l cIldӏ+I-vnx#MOv* Ixt/2uΌi岶q"sØsu{,a E><"\zt.⍡,;O!4p9C-oęCv9]pE]He [3vhF/^ 8⮧]Xҟ2U,1!v9@I0]Wr$+VD-䣡avHU[vit oDY8kh'bZu{AD XO P yyHj&9Xδ2If5[P)os ЖṗISڳu '~?Ab=&轿 'k@JlÄKJ^9z7KId#AZ_aR+ꣾۯgy!0cV^4jMp<)`r(bdUBDVo3wL,M؅l.6[=Xo28H[Dgh.ؙ^mo|RI@+Ov\Ѧ %-#&V&,P;tLʩmhSd\32jQ]{R,hvn,kӆL(ҦG*Yʟz]#=`x)"ECt'>`"oGJEUrܫAoQb3VjPRSZt2wT$NT0huמLgΟ@Qk׺% I")Ek7cR[n+ͨ3yeYGo^gٟQ|ĞeFt;sȉB5pHJoذxbvjѡ #߮h*3ZHJO,b<'s|ϲp,<9= Q1aDF3O>QpMЏ&a?~ > "b<Kdb)mh,?ez1rz\?MX4MPNOWĶ]LCwg//$+\>MлNb =<{5xbr3~vDCNO>@3W?( \bhΥ@r 3%LAK۸.u\ddeQd޽UN;AαZ4'x`y,+Z'ˊ Tjj%WC` r)SJ.ʬ]X,.D~ٶQD^`>MQ4[նVF>L: ~HN]9k~QqMcSf$G'9>0{H^l9(es 0rSǝ[E_{:inDW"{P"Χ܅@~v[(60_.YGS%ϾKdd@&R;4TCU9Jt[I*b1!˃ 3]dctvO0.)p7Ch?/ s( 4Ўw=? x"BkiMIP/6B$\)ȫ<XUonK)% "ʇ!U9o7e|aӔmj`ǥ׍Qr 0lr0@ɖIa=Wep:I"IaL.:įʙmTĐTmg&S*\F?ON@T<|2n:DrK}={BI^~ T Y]i r $ lX:,dY.h"{s%.k m=Ɲ_޴DlmI6{<i1(ҍ:w(;r/'5ZlF'OmbcyV~OT˹E.oV w6^>ziNzƖ3[mQ=wTQ3wz4^3\~.B'_lҴ\;Ƴ oԷUSf2G~_ͩEDЉM'tϏ.m%#-(l>駋.G\FAx n_7.gk ]|>8gWMEoav?Ϥ|/-~_Yįgɫ':sxljwTg[%Xu;?`?uTន3,{FZ8`3;2:BaOGA%1ИvͲhBk'Fm4pv%BXNgYFhOk•ipX#UTN51V' uu(^( xq*ڨ(tDy͎{g UѲ!*{1,ҮEv-10Us˥B\`ɯ0ӁXJ9g5~z4ʰr׍'vQz)L\EV%6ʡ5bTMaxv53Rvٴ3YL` WGL I},M c[Ɩ Tyȩ$D. G7˷+V{8>qF8K{L;D|V1mM`DVdͳcW2EHzB^>"t# j+X ^w1Ğzf>: T\Ƚ:Dc|o8B#bbvE piԹvWOl?^OK< JGuI_MM|#0?.B&0ϔci-H~"qǸ 9q7o"irAnq 16O zB퍉}3ۅ-|;"`g"nz/#?S{렬`[i{='."ޓvbKH+.ܶ%iG %*5=xpq5oہFOs`3p丢8՝J’Pմ6A9@M*XPN&[#cHq=KC!zŴIyNVt5zqliKf'SG*.E/X}") م4obPM&e@v"C, ļURw˚U tr&zK?4a`(d3d:$ok,I%o%MDf֓:} LY_6nVahZp% Լ_NnmH8Vu eb*SNd=Pn>>k<,#y^$4+^(uv$lCxT"!,H9esQz Ş$@Y 1 .mJ\Xb 1:c?p3Ñ N#}m%\lmԺ9x#39l׾{?1*V\;Pz'܍ZEs/_RErcRFhWNbB+Σss.A`U֮I B0_9͕U4!*u4f'" -7oxtfp$Ǯ  T0T"uO_.\"fx`/rK'z7Bud ^u:Nق $wx ÷H'iUl7"SHc(1ن`ם0EteąR}DaLJTk_1ƤnPG!rvPTSJ&+o#ŧq51mLdaQ`=@Xp9D i#-I)>!cHayEJFg'd*YuaAau @AgqD nYO`1dK zd`7~9~ܯlSt$w=Z[yF㧏t8L!F% tdZ1g Z:k+\l6۔IPM2Q`s}_zbB@geRѩ7i)GNp[1X]TL+!'ǁz=:Xo-\@L7#O8j:I25ROqsem$K7v!;OK+ȸ`6T9-#@EF?:b\0H$F d";p":e*wp7Wd(8ᰱ_V0hYy93s7ua'L-CT7*Q[v)߽bꑘ$.wQq.ȰAu b9;UV>"F{+{Zv:Zhz<ʳw!ϡ&w}#(s" EBiYLG}p9Xh*si˶?XK>_7Ziɀ$C#8ΝJ2Su&֗TAى| ~@O/%j4:@cXwց1''aR]L_M v-BtFc_𧰿;VRZǚn9?%iQbJ V >szqZe! o/l> 9'*1kAv F0漚0xi` |ϻ1 dnn+9x-"H29cRl Px䈻/ft( Z xMdU,o2nm˦fR*@bXn҄{Wx-|&UU,XYѦAp; 'k8)@5.UWy9 }Mg5DEB?"=x=Zdx>xaia=UWҺS1be'# '%s+CcCl}j8;#,/> P{s=?<իoU&$'b*<Fx(k.lM)B)5ZTN4[h;<<;&U,ݭ8bE4{zaG3eG ć~"]F\S{4sͭM!  l] @oAlHbل!OkB($w|] BMwo y3T4[ϗ/ؖHGo= ^Zw}<0 WL: Yq*ܡg4 _zq߾ӳ. 6X2;n0lq,5}+tcu5_vتsc}2 <5G爔ݔ%+i2jX9H~B,bWDǝ]D LFC"2,'geW=UySk'1,fVSf==PT_f˴=f =PRz{DBͺ,KϡJ9XkAnA4;| 5Tl_﵉*;C J^ӈ i A$1wRJљWx!Dg^_? azP9GG%:(P܎H3Ή+ vBk6v,JPu(N{ab#$Umqh4vРQK1h4T&cWii[DbadYc,jMјUL`(n!@U XX,nB$ a-\X_ 'h%VT1_ O%`)<#\܃rK=r2$3 W`lJ 07,m1= m%Z^.6UfF摙L]nL6NNsy\X$@f5㚱U|_PXU=ZmъP,uu*Z~]3n{mEf2ABP]9챡FiĄқtد8CZ#{\eI.&[AbMv{z,b1 $6:;~ğx˪y X"HA!w"_(Q26t-?:ovi6pȖ0ҍ"7:7hp.%hWr6)h +7ۜ.ʓd<*+^X~։۬\Ol(+՟ nhq>zlf?.w1l{1]ul SFYM*xvg=vEg-!t/tz_uU !~Y a|S!9m+)=*[:ojC-(Dd-% Wn u4 Q ScR2ҚI.54V2h^% 8|ڟv.9\ZNBQbKe!B}D?}'S0PObq9ךЍrDExY#7U(ўr Ǻd1xZeY]ŁT, 55~4 `۸+e8XBh0T'e#~;bh9>vJE ے u*].22_lmSm۶g@>r 1(LQ^\^Ou!/?āQbP z¥r?b>Ezp" Uπ/x,2iLz0%yCdo8Nr -a c;)szWjr~'%[*#L^u2F" U^s/Zy?eKs77*!F` I,^ +v]J:H,Ue^hE@ݑ4]_*g {疀 tS`qtKwip$oɡcQDc8{ G^#I?V@ĨZ!Ƙ; ,:k~6J֘-,4H)iTOpksɡ2Vjq,3VFi#O9\=w1M"ĮEXQ$Ui|B1dO2`B`"ቛi;=#zr^gc1L*Yh5'r9b$kz2yL=[;lb0,*=VdycbraPPLJfκyAkc|+qB:󫃑B\/Ej#^-Ozz! !5IW(3Mw Ec9kJIq0P>^P '(qXAi'Z>5,螨I<3T7Бb8"C6Xa*~~"}WwC 4%ff*uR_d^4 =.4!IFTsvzð&iiłj.kuy&LP lp|ne>yȬ<":ݔڍ' 1a7%cKě]nƋ,bkk5'xn#D2 =MhKEIfHK++khp 4()=, iR43X5景H6FoYȍfϒtZ2?` ޾)Y^30}kHׁS e㜖3c=}B-?qף[PG՘@i.0#8 1vO`_cW3g[TxH,Ug+B/zҲ9G$ +tp4 E&fm5:z5.o&:le^Sz:xQŇyu/vOb>~ [=Gmj'ƷlgzRd;mj"]'ėӕ\o-WB856Z^ж~Y+3M$5u|44̪%oт|2pc}N؜Oŧ0$Stpb;U<='w'3[gzY`8@?hUg/W7WSܛI,oJ6ø0^- .n]dTzG闃@]X׽S#&<ǪNb D;x=hLL󍡢}` 6nʌfKWbC-NG˱e6Z>T\LNTcUC}ƮX74kqJV>ff;ql7K]u^82[l,CDZq)!hn(>ιz#$sᡯ9ra'm)(#Y{Jb>y%q*J*#sڞ lʂ`Քl^dn"t͛YƷv` Md`aom4r:ǵv}+hL2d vT{tƣbh{.. 8VV'#[k,OJAD#58b% VXz{.{'2`3vzDQT=E{Ы ?d -2U^b=0ff:?UbrhU'T=y%%VeݟY7i6j!*]{ Ag:Ro6oHwH7s6ƥ mRpcUm~EoH1u 'BcJY0y$ys&H!);> ;"7%!f5FO')XXeZ]/[Xi;{Oa>Y鉍_~C?(wO"T~IL}B7T,h|K 9vڹI1AA!Rx">?|dzL"=FjgK6@L9C1ykfıZ`;SGٛ^6o~}D>:8"^lX*H~?FO|^<OWLuҀw眊 9cR+CU/,x&H;ofvELGD`Qj+Jar [܏+\#nGH] V^_;Ϙ ʡ3]d(^y1|^KdDp-FPlo!}6fK)@E?39qZf%Y'9G,B0k+P%8q lx(|&`}#~:' ~b}$ ILqubHJw#kZ}+RBH aZ&m4jd#Ȋ&l&H7uX'wD_zOZ.dUI-\٘i;`M~$0cL)}yy+PvWu[Nvk8 KXuhL" ĺ~o@]ײsq]|ϑ>PġhJ1}">F r훾iL^5qwǿYZKp \ĕ2j a}HO +V T́C_l0g?\ {x X1?sn ~;FMu>`t\vqn^EbYÛ:A k]y+tJ[G+9bK 9w ^yZ ;j k^,IVVv/M/ KlK!^sO;OtSԥWaffUwIC%&lE?-+:Q}#,̿Y5CQ< 2"+4n_Wclt-lF!rt|&;l^ vk*xG&6׆CC=JG @/Be7[vb&IB`vRΈy px 6i% M`Սrwqwkդf4&%otLm}ͪIל[Ǻc B۟xm*2`gV|{N?QZFhQ$-- W59DvJ! eq 9g16 V+Y35lm#@cF-/ r֍8sH2_Am+ڻ%SERip_{kj*6[#kee7$=YᦿjPBVa2? }edf%¨IRƽCk/xtO/ @FdBM؀0 ATV i{y"չi|pbr? h]P+Hjp7W{Jm: J3]|c>isM?<*e{*/fɊ浨-|]0j1قutn303=83x5x:E+ᵝԲHBJ5)mX"`M?S8bVbKF)Z+Ri,a6bZ3dS82Ycc!}ǢSbtUXDtx'AdJ`?pIPRv}n@BK TM~o]k?3:?zG{eY`ӰYWQx_1>kZNxz:0N6=`?0Lv.H]js[ǁUS氐Ftぁo#:*?TFr4_FG}w-~P9(xŗu9 in^0vqv!lI֌(+,jЇQx@;n셜E5!s6[e-:D5'*K$g[Í0o3- P'3 oQ+NV!r0饀}Fs׃a|!*Q/~3fg̓`ܢ!.)Xк2S>fUȹ'_<" S성Vr~8 +Nɵeh<nW{A:;FY xʐ`={:M&{Aovx r9d$J0))Ֆd}&Ju0ҵ!Enn %(\2ckǪ?Us#ZI듓U0c{kd%QXXOQ4s$17s =•(n~m]ՙmG^,&RA@Znu BNe M xLG܅G|lI,].}783RYbCCL#Ƕ~24ʠ%%߈4<--;W tG6c]Bq:~? eS3(E[tngl-:XS8D/F6Imś~s>v؇  G+Qw:8uEzTu.Qgf1~7[HawBoI,]|[ʞېZ_0#Jh% M'OJ| AI@Szx{ה#~Oc An/;ﰐE>µ =Q2r]˗]vNJo/6aj2 )S i;9Ї@wlCXu97}܈'Iּ{0^яv%ʹvam~U0SnIav[8ۛvScL渖ڑp0l%Y)O?d:i8J:SJk=BP&XHL,5` Hk@U!IOS홚aiS`)´t2ZC tRUKF\M-ѥ2#J%ŞCR{ʻ;J4aXYDžѝc u^sQgo4P)_`hf/^T!x90Lܥ{9[ϦiMwl%Rfh$IvsI,~q 6 ڸrSOHX LGMMS xH9YY,`E(/yexB97[otr5k$.0 XyzuK)nfj? .-1Lxގna vioS]6N?tIӆZ.Z` ؽh+-Ĝ+T#b~{,fIo6L&(<U% YFkuoC톾FQ|Q6N Ķcp^ᄇ_<Hkn2.0 ZLqhs%UPBz4(-};6ŧըgd6",۠*kYб'ZM. a7{I^#`hdȑD~'}hpM) @)~$Ҩ2|D~^ɲJ2a v5 _ sD@lQH l޴RX3u7X 480_y# %#w9TKCZa)1LnA+ʃ~ݔBϪɛL)#WZoX.K5opm$i/VoƧ Ϙ;b~r>t=3X۝7K@lpNK + /e*x !r&S5FÆGf FadO/@˶ώOX%!)elxNW&=u1nPc^W+нȈYIgcYxKu=(ēR^pys"v )1Jk1\"kKh!3#!Gy )Nw[*_++lgmX@YccJ!V4Φ j7!Agr/=q]ǐůR7h<LӞ9`Ij O2͚gXXh At7iذh.= P_= -C~nLC/@ Vj#ÿiPU2 ܷ2N/RW݊2q\0fuCa\6 wLR!tk:eR,~m{S^M|t` W䎷mU̝ 9ߞ{^&rQ^Nw2r,S&'ﭗȾL9 Y8 ߳)S~Wzwn|~yI+wAnGtyr8 8 hy'<꭪h|L^> m K:D.Ȟ<ˑlBAA35׶k s^GUnƚXt$}mE.n7~{'\̑!B4k2rPI%kZ"/ i+6j m䆘+icLTtFp"@Y9@lWNzHziЯ|zJ6&0ǮHn?WzdP)b]A@bƝ cN+Ch95eWߙw'Ra-\L޳!ޡaӠP~4:4c]sMT%}iAoG8l7rG,QYt' \PP?,AI2NIT};xdJiK}%݄3, 1O̤ntVWSMU9L)Bin/ޒ-T%ys|ɳzr2NPrRD vX~™R~E1_4ƹi+a{ZlAmN{biC-B)-:'@N0]fCکPg40U_0Ÿ`Ѹ1|@q_(zoXe?z֪dMa[hT3=1k@"e@i[ӌ҇nzjUWڤv`}{#UNN}?$xwQ'Z{.gƒ;x2;:dC}kx0I Bl_xj&`nMA䏃QkҋY 7Eن c&Sl Zbޔ6W+͞8iZ2s~-]T}yU& Wu)Łl]HwM6U!>J* +~ub[~SڍE3客caozs4n+-2MnR795^Z#8zoCO ^EI/dtf|:TLK'fh`2y:ʎ$Z <~`A-)wVkj9Amg@aJŁu a\lPPzYQd"i Tҩxq 6swE /UVuA(ҬQQElfa |/l&FZaӨZ0ek̺/ɔq=MVr.<^"S|D/O>jIaAӰE9Def,[]ڧ).LR}VWEk1&76 $< 0R CG=g5]C9 R6Mn{H*c<2 ptM~ bNt?oO(c4OU8'+ܺSyRHHemE04nyznwbahj+9KK䝵лV@ώ^~AsXe[+3cI֓:q*FlUggQ+b|AA ᬺK,l:`b13=}fHo>[ܭ=$?o!k9ݲd[职9gzuc&-9 6؎J<'|:Y+ AyݲWhbn<u饀0&H)I ZGSsN0`YfxI.HLz<fZ&ue\IoALEӑ7tvP !pbPNf`{{kx -$Wc;?D3,d)̱CCqyTܟ#yggAPޗvdR9f0>y"yIƅE K1C cWj$/v~Ж>V Xi~țZ]9WDjRQ~AdywFqX 43x+|4Wyre~E{u?҅:f?Kd"469ڔsʃk8N ȳd_AZ l y5ΎN,굪g*iw>hkIZ5鰇g/gN#}'Ah~ShV=M1r>`;ygU͍Ҵ& H#&`Uٻ/ݢ,+́qXޑ Z̲*Y!-a#HE8"o8PF]f_ Ѽ( o)N[6'e+ f"6.QܞvζO.{͌e6&C*q-lAJɆ:_>)@Z$SVY'?|T -j4eL j><9B⍹m"IҐ#ۂxIUXZ mcVj}>^=F?i s?@r ֨΍,?aRVa T88S"cVYr9sҥj&!ZB3oݸ;mPSAGx=hPcnئ8r倎܎ X-d|wQk瓓W5F_VXA7d})?iϤ\c ~Q ;ځ loyQ>;47Ӄ-T|d^߅8\j.69xolILGTzj3IJԻ(/?4HQn.^=;_,wCgƧ܄ 1 0!~3΂w€ pͻG14'R<#%DtۥfRXdTϔ 7?)>yxyǿ)9D'T^2/dl$} u ֙jbOZ~v)+q啡2BV]뵇 E,y@Qy6hh5bW']a' #ǑY4(į!A[IG6G:f;]r&,wz  Ȓލ/AS@α@He؈)52="qZ#RNX[9Ui]}:+,Xӂё$eQ-S]Ac<&~3lV&Dv!y/`xm\"8)y6mD=aǍgzN$h6=p4~]J!U@5]Pbu! ^i2Dʙ!a80WemXHJ(0,Ax[V8}T*|CL"k[p nz/ιhk:ܻ"IĈ95P8nrk?%@mwYnu9lR{5m{g̐{-eAC&"xȋ=f2z2{CV u !n7S,An`Nm5ZDqǁ]zv`{\ńؗR /WC&ު^,7w8W0^UTe<)?a,>9e|[46DVQd(bpIB0Tn O Bl¦Ts@u-Of;HcqѬ;z2T;*3]M0,e  bt4xF^nM|WJ;Cxz~N7/!l3CлkҭLh 6$k_vb&0Ċ`9MMi&h^Ma3Ifaҙ<{A6m$l_y)hsWi@5iJ&#~ֿJAi~*5STH/FtS;U-N[}Ǚ6͸$eE. H5\J-aش2`O %N(rτI$‚=4֣`#TG!2.W0x4dtlP׎`+3X>J@ OwiNkP0( LKK3gK@ {Kee./rymugJP:K02 #DY-[|9 @׬uF6Bi37 a(n.X` oĢ'\7$*K}d$Vp|(pmQzP{Ak֞M .aplP3 67&J+#ip+#QjFC+aȸ;no{E?GLqtp#h_<P7; =M|! MJP8wXT]8rgڑ$i Ck7ay1S}T1gG& avגG#I%i{ß-x]>IkZFרW΅5|c `n,u`p[Ս;q~G(.e,]\i"59NgT˻Xv)KDpuFg(X\4< x&3v |a1‹{CZ41;Z jRo`Ia<%?#- 1ST(|Jru{A\B`o}<2Fgl5 q tMZ_T:0޴IFKq&vnɷ1 7/ݹujmYXWSRg|.@Z'p8Jo=\bK!gu1:P4ܞw7b!+X#^ڸƏ~h梁)IҘ!@nweqb?uV˒6-mA}.ZQ<Z3BEzv"],#8V &? jK$TK ЛzOӱr^L7d,jG4nm $a3l].gU$/.7\ČLASNҾP&V_Ko)B]LkVc’z "r޻%?6hCn95V1u&o[1cc3>]K/5X1[G"3μ ѺX"eޭb)Fp4hdu(cK׀dFSУD=Dc3PByg p\D('`r{y}W[x+RĐYO!k zSڠHKQ 4z^Zt~?P4ę{^=ggM+r:X .*c>auf+Q~KD '<=Cp8Aq{'Hߚ]Z)y.I3@,ދg!ey v`Hܲ UyCno"O C*Yd+w,61ϛuΪX#aAċh* ?Աr&˧ueFcĵ&/y˥#ԛoB?̨6!Å_f O xkpl ~!DuQv|x5T38中g9T Mvg߂zc` Nf%YWڵgGqE'WprcXg2Z$b? &r&-@x>NdAw Y6pLT^lW_6.9޳e:Se4d^bA5]Zv 1=?^rZrg' 6T -OZxk[1S`v4fR^JT%F:sM.cBc]vHtkh-=O2iݯ} |l3l>}ؤWMgy'ӏ=O1|ݘמO[44aYMygw1\a`[X߆c@6w'ӀascU:^0P"R'dKgiQ4j_-[2t'$(E7YJC%M24ġ7xBJCh`䷥&4wnsЇ"L:aCR T,vN\Up_F)w4vk9#H/bopAz 5XUׂ[ O.?UDrboGtȶMғfk󯌞î05|] Fcn7`/jcA8C9UM!/7VNKf /#mXYm/؞ZfQt\.+(w?W. 6KXH'ZZL_ju:LgC7쾲R1}qZ?B,\| }h5xy&}0 􍛽*Ll]FxXr ~q2eCwd @v1$Ld V;-Ol=DZTTzN??%Ͳ) k,?yP >wKFx*_ig/88x"Ba- b& Xƺ8 7M9c`9Ui yVrq31o^$vPN7 6G$RR1A֠l+)H>QGgla @) *qٸ=8/@z^ZG< Gk󉕻ybpecI/aǷiݤ %d`@Ӆϧx9s(9`=FYm.[Ҙb/wfe,hBp۔W/^>%b@ԩ`ϱtBVC"H1)0r^f͌C+J'wE~'@5<l3vH&]jݚ]26C["ۀ!t)n^<śz%*PYZ'#{4c;ӭF!.ۅSDmb){溩j>+x"}YZլ W0Xt } }\H5#FԀE,Ju"^0gK5ϋyسVe$<&P5.'27I# Z$K;8 pstEjhԆB#kQ!e]ʉw,q_{2ٛ[YLk[7*o71qs! p8NVq2ζц;LVABDFWR3g\o.)#}7qJes&eWKkks>PDO;:W"3 - R?F^dUpPVFxnxb3YIKhO@H>Z]kk z&RD(nWPLp/jd"'yҞfA`R;I^ qk$r%?w4=WZ)wzX5@ ifok'Hsnsk7Bcm2N N@Z9`siP$y y$pgscLvER5r2d0*k"ލjw~Ww7Ʊ5J&);97'/ $9 bp?#A( Mbϣ7(tix5`CI n{(nΡ;dAZ\FQ URp69wX_;1YgM]YZ?˸b5kNqzL=H,2ݪ| ϋH@maĢ A׸bSWPzy9&{ >o:jLIkgf.EEn\T U7m/𘕈(JreWQmbfxCWntqWSdTEun7dpi^wpw jXcB>N:vw~jk!˭pyOD$iN5]=C7oܓ{ʼDgKM1D+Ƕph1Fg Ae/xQm+r,EؾP)]O5x6-gP5ͩ n@W)4 xH5 `t\rbs̜/CO[=?J,mSDf\.J)}e05'˫o'PUE*abXoJ"_߳}+fǢ~d8(;pBuw fr̤4_h4&@eA"*)߀i<~n-Z~auM7 guP\ҁ=] E`I,N8 zQthz+=G}WttiwD@Ihȫa/{eM9"n`Vp4 Cz÷Ds=A ӥ^XjPB6,) nդ1uLjx7rΦ])U#*s G#1ȀKmMܶ1I&Om;ޡqQnY7ʛ~Y꭯-3mƩ(n*o5I=\OvX{@U.e޾GT2+P\S+L[.$veT^Eg7we1i\|,= e̕Ըp.Cq@{.!lÐ ,3CfsCΠy!1?8MDKG°崣Sq b/=ZTCjVW>ĩ—g{oc*`ڟlV|L/tFWFgoU c)4%my?\n1~V{3V,39A|)Iȝr  ͼ☘YY!wXHWyPDF& MD8:4\٤5~-qw!mmM`QUر+|7:Hk>'I/o~Je_S߇p-)StU| i -yxl'`U. Lb"Oھ}} B-ĐIpC1 XOO4N b)K:5pKtV>5mo_x'Ezk1tzYܶx_I#9j{FDgGctn\{uZ ̃|^փ QP S8 NaKO/n]AJaVXaH dgsXwuʿ*~6JH|u:@xIDU3JT4%}?~U;kX+#42b nYIJ݁DJ0bw[;5^/{ݭ%uz1C,ad D "\2> ]6Uɡgq?{=vv) zzNѠYT&LY-3a`}3KY=׏8 72F MuKFj"'~D1>iJ-]OT%F:@F# rMPhӭ8ދ6]h+0z"cmFʱy={r?nѸ!گӡ?*"&4c^ V s=WiU 1^{ I yzǀ8jpqau*,ڤ|L\7/Cdq:JRZE%#!A&aumt<vQO481"1kJb U ng@-9=ϗC*ydx'r8`t@Ty) >e'XY wo= L`9V1"ɩzi?Zh28"ذ1IlplTōcD[g0a&`V2V*73P+b)aŭ P'nųhuihV(<œf3mP6-}H$Ǔ)hQ`=0n ʍzo e=X?ĕd^Gw[Grq5SYnOϔL^^Ca&YF$DQ>#szC }0mᆜ=8~_sI`/BUC?VZ̯%tV@͡2V#vqEў;ڽ6oi\{+4$y43x6E@|cX4LIO:ktүPEGJ#KoT9 Mu$;{l%{:Ÿ6uI[lʈϋg_X6za1<2A# !"B=uunnJ$9#QsR gqT I˳OW>,2`ёxUEeľ!r,t鸉c.Y$VɅD)u]"#â5T'J'+/CI _bx2bpmfD؉dsf@?`]%>FF#}#xFں dDpQ¿U "V$4ً|/ρv=) z0{a󩱩dtf$K pJ. Mv^]2<[Ę<ROtŒCu+mEC͍թ&LQ=#F :P{+}R '>+Zewh D]6Ѷa@"@ե7 QҍV H93&^1~Y]LЕƱJ{#Hdv^1Z Be&l^r a-%#P#@=|ՙQTL˼_-+ =9NFJ#ɛL#84fO++-P)N]5t(?Qp$e?AV'JLƆ8t@jky*e v;Nib.67IKq&R=I:51|s+Ks<8ټ:a8%h.O'V5>d7(mcrMobπ+N4 DC ?FHx%&gnj+E~'Ruzz=Uh=yF}.h@yB9L% Z/WO_3WuD&c]1B{,-w Mc,>?kCƐRTdho<†хZ:8U5(]E7{xhFA$26%ph?Փ%b6JZ%uD2γ4 Q (z}ѫs!l(hEU<'YC Yyk]m>{ Mh)b\qzȏz8J9O8EKP +ęUXfp\V#5R& ڪ\]]~3h=IQwF}jk_rlEABl9мKɎOnS9(g W.:|Ir7{oeSCђof'n(Ǐ N\ɲ/kL Xm&`;H@IAatqE>}>C-wUCG=uAv]jDfPt4wO5Y46)QĤ]%` / WI d.ʼ&`5N~+9|^P&$ whWvf4R9]3TA]읥MUr \{gIG `D_Ҍ%+¥dd{=֏iX?\N7uAjJ5IE݈@ (~ OWsmbx [N2ֺ"vtϠ "qP4CZYUϝ[4|輎G+yKi8^>7x #7v{Xρ~bIZ)eq(hNwQn` ͜~;p+a2}5Yi y +S+lq㎪,̀bvA Tt= d aW^U~S AH\/!@` ~ha(cN-C`LzTtLY7*UFVA?eI3wV&݂*T*qeCυ̢#/l[aC׶ Q5X13faד߱%C#yYwT?˯QiE,mFܞA smzwROIH*{Z{m*{|u[^x^*§-2`uGIjg8bqeIFoUac HȀ|A J {U9Nj'guJ-žuC ַfyDo_*09:}y 1t<qW z=L}:խ>yL&7d<_2ŀH8L UgK,Vot::<##g.܄k@kp@7-",: nSunݛdeWzN@?&*'M3xfyj s?yG+]`FOZ{e^V)sxtԦ^M.QVw20BO\_fF,Cα}JIaL&eסH鑶 6oY=XɇR) Qq`(BTPƂD9*EkUg lh;7}|-V1paG\AҢܓN` X}`1L뵁 Sc\ [S${$]LG'OX^7NLc?-46^ &}"VկQEuWv>::Iajt8F H* ' C09= Pbr8 :O ˣ:p}C6U/Y%2fnH톷SݰLC)9`&w4(zD{UKδlW~H&\ ?}aM'Ytfu4NJ} -f cQȴ 9D͓*r# A5D,4s$XB)}$ @%E9,8?r$fg5/ /$?ְ$P X]tLMC&v=f,,F:/vxe5ǺJ)*?ĥdsY&iŠ&u}mL dJV!C6N7܅'>F: ͏!wDh>S 8ǏG8A8'xؾ K8:^Mkkq|jyrm6Ƿ* Vxv#%xj12čE =V8 77hN''ݜn:`Q:CO֥M5vq;Dˮ,sNwYuggb]@@$n~;'.4R%1CS̶{R#cX5y$(*y"ݲFRlJDRLK"pLyxs~Զ"(*aܰ0hh v .7(읐 0%fwc3˭ @uCyIQK *al}~Pz\2 RpҀZ2T;I:8>x ȊoJ;? 6"Hמ/pMW͡rW#O'hiC\e$MqZq?v cكP3{4w- 8nnN+c)zPK ~^lE@&+H90d 8Z~)ͧw7d;`<ͧ--md]>[7wMrWJN/)@ Z `WTPXg8_BG$ƀ%y$To5 vVfRA=\pVϛ~jB?jhp3䢏<0 r}]RM(7ԧ_GWI!iq$T"цZ lZXJAvSI4eMf( PGy@3 wLkIMy3S0al8$^deZ;%N[h;GK{]mZPʔk H봕=Eϔt0j񩹃Z "`Ea+h>^HXvn-S79W &e2hp8(m\ʼTu`H@˭Jf'^?P5Qy,' 9iV%*ij8kqw#>\rA%YI62:LDhNl'2J XDD` xmS2=Bd(׉yS7*u-_9 ᠤ]^2~$T|y ǾƏ,^˨PihEP Gz_(>ay U25_ms݇x^E[K5iĤlТ `U2OOB2m+ 3 v[e R7ljb$RY惍)='^-J.y-pd w)rD{]_Tl {+0ԺiC2,э0607m1NEB`NȧIf07g A$7:il=܉qz _3 Ϥ˼DRĒX@(G6PuIW6YGH8(#&,y΀p0(#*Q0#ũ ~ f7. -'/YUABM;돨J= 0[CUbG[:GtE$wUl ȿ}$vɩ^?ß/6 xQYȠR.pt\TpAU&H/s~-T_f_^lȿ9.w!D*QiPBEIDWy<)oNW^c:Mɰ(UA{OyORW55e6~`!:DBU72|T]yM'=b"hoQ<9T) ;r5_ʢ,`Llr7'R" eքgBp|=pqF ]@#ЕjQ s5H˃BfSVQ'a0Xhj9rGaZ+Z ʢ0BJD"nѼoUls7v+x.?AfDa-[~_چpHϯW=ƹ_Fuwd`hA(}XHj]H>a}MTqys#n 8t@o1黹R2IÝgP D(Ijwǐlj#RGQ 딣i$*2nŢ32*bKhMr^&U۴E8vg\%6?`<;atuʌJM[s@>'ltNS]Bc J!Y<#P6ŘXv~{h$m-/uqġUÌ|<"2Re:Sl3Eث-TLp hˏ= d~c?@^35PI r n>@h{*aKa|S':fm|ESR9n}44AbG_. +AB"{tr{jsyLd SGmTL`ݚ8<=4f+Sۭj"iKճ|N_Κ~ n?uǙ{ka:V.\gWKԮ7"B8q` 2 ,9Wu&Y}Y1aa .Z5H5V:m 0 8iHl%_AZnđdPQ->2ϮNN;v5IsK&bKh)_ёw0UQ؀4+"(ѝ8bvM{'"q$\[=|ՅN-X3pʬi`WoNiYfgALp |V0]/<)<+dMnՙn3~~E=^29ٵ!W{[;5mL%$ 𐜺c+{D;||oTSqm:2s4s恇 E'}9a=.K+'-ҢbnUS5x^,ǔ}AU$w0) K(q`LJHPKhHR&B}\quXɤn.ECQN^3kvA9Mb[ȷnR|ܩy*)1V2nqrM"<*5J@Pwq9/AdлZM(`?sp_\Y;(OWE%`ʉ CpaQ.c8f&>tCn_mr1``dY1̇C@UZxu;]Mp♫`إ+iuT?T͌ ?}p\D5|@{^owٺڝ/%jJG'Gj_p69$YC+?ӯ^fMӆ#,#梃09F]"0uaS5b\UqlE15`R%L)ekhE nC9y)hy\Š'V/qWb*\L+[\]LmjΣ(9 *5(U"2eb|_9470UOF-v|dfG c^9E՘pN舉y®3ݬPE6aZf۔ d0AyKiMEVZz:=տ6#jޭŚ QNDI)?|;8x XtʼnSfaʉ!#AE%f)yh3XBYr+>$=>/0{[i}#UΧ\iq&N*1f(*5z.ϝ񴸆)TvqM~id6:7끗2uQ^,A!u˽YS)ARI{v jmݟ) ҶEE{+݆ TN`Aqznv⸺ƶ"LGcVhbaxKQ[e6 &v{z*<SO ,ͬ*9\wU9063[ěz*ìK#?շZcܫwt/s1;L|/X`a$HUP@a#޷ƈ~l\vrgS֮֌Af=)Ǿx1uhDQw.ZNJ^Ur?/[[Y|€J/!3,Ԉt1yB$*ɵkrfPkrq{5l}_*Yh杩x,Y/$f2&.9jkNK0,vH%>: .5W  Tt4QYŒ]]$vd:I#^w:.VD5e~R&Ë;B.ꓧѤz_K͍N?:\K52>Jy+z磪=ʈoctSz62DeRC`d> KLyƼ/}|+ufnnꉍAC$f0* TQA#J3oـ(C݋8ٌoo^(wyz4b>wY[4`Ìۛ5[KK*}z\cfUFmtc;%R&UpK E3go&zKYV+C&Unٮ6׉yr ř{ʫ}kܐUUvǾ{ŦA@X_u|?DӮJJ̙E5axbw,! le2jL- ST2wKS[Vnxk c(*l(joaS@, e_ *K :φ1gsB9*/l/*z$\ ~kYu7"jy=N:}BuRN-SVQQ #hu7MasSؕkA dHi-};f<*Q찍ђ%$8r)|)#Bcꁃqzרi@/涒9\۾xL}M&=HX*ڲ }J@Sr,v_kY=9 <e,0gr`Ngz H-jbÌ'SSS`o3"ݝ".;ƗaI KÞ/cp7+$lxߛ".B1DV]nQ]&8ꅲt4!W*kjKKnȲ +)e8eDhU[Π e@29ZM}CȠAJ}%D ɟ0h"-aK (Aꮑ/iN8v?/ٴ Z0{q=$gVI?gC7Is׏QF^ka_PCijkEܙt S!A[Vrx"; ~jV`F n.1ƫ&\tfq˃2,+_%7Lezޠל5Ffh60'rv Cd}󶃙WWCMiw,6rj9:IQ>lDZF$QfDkE&;ݔ,HZ1ȭe]ǔ$hXH+nǵ_#JYyJN 2rγ$6sLjbY#d_|癐ʛIsܢ].9' '= @*gD1~ bLGî(Aej}rfwYTf7hRbTl͞is}_}u.,jA͕^7%DU>CWE"haF)Zkou纯wK788"jcaj(TDQDfU<3?;+A'N}mpݗ P"]kC^K MW8"[h֫KL~^ :@(T;ңF732}r0ą , H~EK6e`#uP+hBHȶd9twp?+tY]­!Ƶh dum42卂=d$/A]Wɹ|/'=uC)߇x(r,l [8ku22 aQ i5B}oGt@o_+ b=eڙ=4OGLj끓|#|DTCE]5òs8LG T~\{ẙ]Jf_!Mv[mB@s}c&=v,84  hH !"P9.PT8.!XV_K\7i`WT>+h d*(p{;<.w#5*U|"Dw2rbcFETNR ES6R!MC6?9s_Ǽ3( BED"Z͈h@!0%$%Dun4L3"萀 _Y|]juA$dB@$U}iɨ}y̙#"b!\5aЬiʄSNc8P3YzQ<ޝKQQ&( VsLuL}Mގ D/z'e dҀ 3SY/7??s dT}1ܹڎT>#yh5u6 8Q=.ϽnpZ1/7|]K,@0l/f~I,nIΟ+;E^`[KwTl;g&|RIR[>uJO:OL?fVu\"i RHH5 fEcqoZZՍqqc uŀ]1"cN%e5;؎&ۻwQ e2"5L3 "" {?'pd5I8Ա@#))I K G}=˝ڼ)9np ]-dSc2 >;]2 _mR4..œZfkըѹTms7o)Sa׊ $sF[vO̯:7>IGi$$d ׯ*q \oxmn^?@x(H>+ՀBqxK5(5V;7Ӵ1`h}j.\ϖ^E;[*Z/њAc''Ku%UoIio`@̈mٔC p-#VR||o_"sA r@(7pCMP3Zl t~'0Dh3Xز)8ۨn~hY(o%Ý&el|־>VƩk@e9i&-G:Fۗ%/9kU? ӂL+Rr%R-%f}]u#ѥu6T*Yи Q~onOǻbXpD*9@#N47[|ρe+7ok>sSE=M:*F#wzf \ N.{(%.A^Jvl; KC|~=]fZtܫ` )~1ѽ-05k>m>]5j sJ2 S30&.UB`n4q͐|?rIju{XChZ8K] m ^5<(uuk7v. 65D0:#{p>MA}8{y}PߏJ x@++Rx]<|}_·UR{N1> hfE"TB]Y+ \ܣnFAx!PQCD@D- NDQQMߩwZuKڔIMA6M6qU QPj&sAr4ʣ|,rj _!uˆP1Jj"4&8}ya,|'ǬU}vn ;m,i  0E8)ĈbȨ<8>H !$L*T?)oIU;_ z;+lnOb-PtpJa_B7l%(@M|t@LI, b+$SLG>0'5P\KTU@>T9)b(j,h P !IҷR׾$ndQ$PynǴVrY\4T 6)FE;~3PQYhM?OVJP/ po{Cfмan5!;mg2 C!0;kkc`]庵oCm Hp|*5#dTijuuWnU̷ҸFnA8NIԪḾftBˠ&lܩ ltet2?I=Q $ VV @mY6 H0 AӥsC Hl!AE0DLT$G?ZDX Rgs@t|~ڧ{gM˵i^\ŮvpOBc' ̂:e^\m緫m 80l6#p;Jy7qK/k6( SΧ1~RRq!/" @`fdNQTz?'_RPA{G_Y45Auv+YA2#7P@!jȥJ,ۄ NaF@X HذjO~ vRt-/9.(^ /f/˜vP#Bh%J)AAde~"0J=\ !c,COU3&{O+fB<fdFcnG-SH2V%i܆PL$fH9u55A'_,FoZH˥@=>՞Fy2o:<@e~`kBaT63nslX9*(V"*Hd>1p@$ R.]*! _jBET|Tou9!QQ)OB"lYnQ`h(%pv^oXf7}7Hj[𧼂X}npoE?^DU׽tiRLAH@^E+_c@A|(nʀI2ǨN;1q7%*!7HnҁZ:|nl#@gx8mPs[ D3L@EնSs*2?ˤ ͖19sf jdDBEoWź!I}Wb[=/W ]%db~n:Æ4|0xCLja2/_n7Y,쥦*(Ft@y۔]1n*YԯʂtI8&`OHn^E0 s Kh0QBE dFl}ݝd X֤M=XC(Ȓ#",{z}M>>^[fDȆF o\F:HTiKwUI ʄ"9pW猉[hަJx~o:!J$SA|pH%A2%ZZ5䊰e 7?IÒQf3 b&m D$" 8':g{[;4!Կ 5|mywlsTȚDi~=Y3Qs g~ߟxpS&ˀSPu}}1M$k$F7,H $B =* $1zݎgr G]cH&Qer.Y(\8Y`5W twv6iuT"3iPasu?Bh4:E Xz2{ PHl B*vOtSEzm˓PO"e(6wFOam| ow^M%bϝ]3Cf1 !+y/HE)%^^mT_б<&zg=O7;+ݠBFP ^yHO("SwrNq8s𣻕ȹUh'@1T*Qaއ6dwO87tǛ b>Y]Fi uD8Q!HFGFrD6gĹF%Jey*rXcVޛB**+$B@,||*~5nI*ƩDħ)DS4HCan0ŵRH B\7:^EklFq*=(h'>T5NV/ADZ<ߪXKz}[%6P R &79o>6_3KwqF^QA_ 1=2v{H$>\5-7aXIP0 o5&SjWEyW*Kꖇ;}ב[vmsPlû.FzD!R608K7zFٲ`.J䥬"e -=^5륊ݪ<^W~QC޴{:&X8LFS$H;RLH2A4 3ޭ'Gp_ǎ臢([,<|/a݃0Zi8jY*]ub]P6g!D@$ܴG0519A` ,'ꄌ ŜP46)TľY%]fޗ`@$}c"wu7\iuK`e-JZab !KtkчOH5]iAqY8%L}lƂ0 [Zfϛ|oθj.jϋf˦JpCJ }Qs,R6*L# \ޡn]ҩtȡz==VHQA+X!)U1/s_NAWVmTnEyH2",:?gbjev=iqM P_WcpŲI/90Ӳh eh pN%etΣMBhy'@ؘ2 NMɁN'El]Bn;;C0.wAWQAT!Wp b1 CbW7Z#(*K:kp2޿"#D z3-^Q2HXDgP1JϵקMp1TO<`*dQ6ͮS*P&JM1Eo&UWD9JK!ؘT}ۖbucv&[ZA!ND?j7rq~{l,$MExt :ƸL@ahKMî&pnTD=/@3I8u*MQĠu^}2 ISw}Hsޮ8,ͮ1j^*QZVY8-^C(ݝʚyE]JV:tRq/le{1XM%K.ɳܺw8?leJH \>l>^R'WMk}w >ڋ`0P{Omt8x%r1`/):S8~a12gpI"k:AIOZlXNR7lPCT&2们IEJd:C̷{?kgnȪhG.7x޺~= XUߧj'{7RTum u?^ʻ}[s/-P (BAbHs848nﳪ!uH6"5K/ӂIly|Ն$N:iB _i.7ϡYFe-ߍ  n" ~E?c={N֛L 딣eSKXm/E59>Ǫ[4BZNr8ϛ}Rs]'qo w0bRFA'wYEc Iۡ)f:*&NYf0 T6m9wAЭD{M  Y!"pi)i)˵UϙƮk_\"P[v"ɥKtN)%Z-J!!H0z<QB=33Q>_S_WS8zd{7?p]8h :dBWMH&+?כZB&NGoZP>w_5{tx]յXZ 8\`Z"OFE€)X6E6|..[)-zS"K3P1Nv /lE$Q /ѡER@ȲiYGg+w/ٷfw5F#ƺbB(@ރ]3sD&S5OlzTT~JZnnc9^aF+T*93+!?\Zukчj6 Cʧ!'M:l2]Y$DQ f 9R>zzނ\?,Df`e;KW/+$] :N̴ }9.?"QaIoo^ҡn .}YY$mSXlcvy>6H|;ŁMgWpT op_ǰ|w;1TIw׋z<ߙ}vho^u֊I#bOӹ ͳnL9&8LK/ LMC+vfws&8!9xk"J+0d3hL~e?\3¹9 I( 2d+>ғa5tH\uU=qk/i<[cH `PS?8Aj_$  Δ,撾B6~{`T^S`6Gԛȧ׆6 >_)"7HQh`+crN,*Ž w}-⯰epeTEY? (Ff2$׭W,9 b lQD72*R fsʹG=0|h3YQűҤ:'b"V8x®AŦtdqQ Wf$P~&o謩V5B@d&s=3"np-+:HY:,ô|_=fdҺHpi ,gkؘkCB@k?P$uw]?:$.W>CY[znRe~+* jr))_ 0p9-^sQ T%q9G1?lXMeZ.pg~C~R*Fӫr j,m ˺I]7XTO}}Xy;h,L}Tb,:BbZT50ba{%`l[@١, հmfzo2Q!uO*ȼH2JL,醘;>";^Eڟp*Y:B%C$4/&jaX(,"aJIljĩ-ya]P|ª3*_O܃U:7lDb|I w!FiWsӹ\4dP㫩ZLݗΜ!֛O?LN욷sr+"l-Y˪ ݣ;3bGNV`_x֔-Dutk2?pTa`76751T*1|( ;~'#|h, *|Tr[2-g"_@6{9(x>wʴInts¥$VTvo]uV A"h?-HWn0}*J-v 4h2|ְWs_0o]`}P]_Y,0jN)rZ 3"R#h%.,ȗw~DhoÆBHlr!aq$O/̿oȏy7ųOX'h~rS gMjai'/KGmSz*SPhcȻQg2 7kc5Dʘ0 #;.;Eù<3Orb:X g,CY@ ?YbL_hHZ!)M>M ۇ 9YANO6~yt)Hq; Ms7ןFfvoH~>">3Xo9}K{FKwA3 |+k<'q'×b]Jh,L|e&[Z' DSǏjƍj9|E4pLEW53y܄|}n(Z}3j{w "g"k>e*Ok7u# zYy6v]gpzwQo~DoZ"jO>FسǔYxtݬ[۷bm \\MsTGܷtosڿZFB='vIxD2w }-xXl.,(٧ʉ~&ԂHӑWOn^˸sr"4sS.΅4ԍ枞C KPe5d Zp4tKs@/tYh\Dy@QJj.KwYv2:ԋs$̆9TWde\!8UT@'tĤI?3J^+cch߬?@|Q$:tI2?4(_N?e8e&zB~/C 5!_O~9BݔM^ߣOwL(':Ƈ̓^R_>xOIkY1Tj rrS:rp}-CFYt01\]^y$"t޾ $3]cX]ksYw1XTs.M B )R>al,˸RLwĬ#d?S$n /+1!տp~rY ?洯Y`846ޟj7cw:w~Y*A$jZP,6 J[Sw6=͹H{aunv?'ocNc] &0}*VsLRLN*n%U{2VNKϷ`r]}W + gvzw{g8 M!;5}LvC7Ku߾}{_M 2 8FDC{wE1h^J~Jȣ}Mb[Ԭys&Tx)A?~l E(3@VK\El!MP'ǮU> 3q'Sb3y@:3>@߉hPPA>xXx6fdzOK_xh Ify@S/&WW"um0QXHJ|z[civ`L: "]3"h4k|[7X@dd6cg'ioP^/ 6OҙE+ݻu6 LI0 i-ވw MN̺zNBG_~ϓ͈n?(/8]&#z` K[ 08[OD>j0n=Q>ƿHnV ډ$R}ڦMဝl":Utvq`pljUoPݸm$fNppZ(nn2a&;H?ǩa1Ap'RI 0c-9$1pajA?9/=*442=1bT) O8Z[ S} 6*LzT{}Qg1#EҰuI&u a >XG(`j`Aq4F̷ͳ6Ş-4~d^v>pqD3]8![O؎4PyN\ylgi]=<JشCM]F,V\3 7?ɟF_frî1B8HW<3'jNr(N%yAճLV=i6D ˬ-# kEF$` ~Tb/73زEL@'(_8 џa]mPjޟ#ӧr9/]<̛0s!hNC19`\t4L.bQ;Ĥ@3$M8$L?k;egu 3!NZB(H(Ru OgN=axIpa TRO+^ɡ\1j~FĦ'*7?tX=Rޔq! j!P RlR#"H# 2 EXyE78z'oN_&k5MHB,"R, 5ı5W4% d@v:qa#.^.bþcIw!pg@ьx*irržӷy~a̒j]^\o$X(" ņEI<0X*xyy"0:}nadN1 )[}߿Dr mag >U&M ` Rɾ> ^.Y{F5x;t8MoO0~\/oʘL2 )7Hp@-PP y0b sݱ m\k`!0i8NS52L=LtFhL(̓˾GB(:M3*uL߱Ь5}Va/4ݎ6/] 5 A^))8L0XPؗX`*|3-z%w,?t6ngGʂ^ct>߉/2)]ڦ_[*`ca)4RDFD#`dXkL`TܩeX&sL`{kz7g% RE8 zD=*"=Þx $I/ġ^Z~7?# Y׭D5UkU0F<u 86gl &BhQ=t1bY\85ZU(dOx8\"/UT[ٌˉK'5sf?I #DT@ಟ0\t1l$,>Qu %4l_3z jaI@47C il943+ rd;!tc._vbnjL.  @e@s?[pl3'K z$B:MHnQ9./t~11Sx?WYXk)HXV!R@#Jtz9YU!zabzfnR$xn ff% $&ׅY V!ee?v{Ptaဍ";,4+b!{".B0hCރ98޹dKnDxDw2  ) WMNa~U=56=ϩG0Ad;SS\mzi"WOd`%"O_=Jyle`m 2iދ3 =* gi["zS-{ 0]u|:-w/G'J}gtf#47FQpi-T պI$z9լRR嘴N]L%ASyy%hi3)!9pݑ 0B}NQv;Ut^ ,K{9NNi#^%9(xcG==H/nǏ ; YW*ρ{acbڌ ڻI8Y։"껼1xLC֫oF]ɱO~^l@[$T,wGFRfR.-:oa 2oE--V%vގk}Twk5rtzcBjtC%'(\ZZ@gCQR{k(O' eRsëM qw2j gQ@4597]Τ^c7 - p#̓?fWAJeHQ):m/IK1\g܈k a1&i~G s ܸRj*m,'Zb[6qpJmNZNj`jTS_3̴ԢT--&~] nl)6\f4Xї6l<Ԫp͋%5T|8?)S@- ҇WUP^ZK-T,ZuUhVsT_)e A>L\f1>ֹr&8kNlk,am*ӝzPsB/V(fH^y$3<Lr 655e:la9ap_8z*$hJ`soX>VB0aB)YJ?[(*Mܕ%OcStt7umU{ S%{n=nB'0z8s+VRo 8 /w3S{Q:dL/m ̻H<7jBAR.@5`wt/zm>{Ίbp)Vp0R&I [ ,ec+U@ /;o2ow pY];{cV--Z]$PISH9dΈ7E >֫p#tBN6ڤ ^r~W(&gmUP[z-D_. (RUe+ZJ^+*|^K\]ZZ!DsVL GECTk!a;4t).Fp?cE6UmJq ;p)ԩ{Hc'mNm{q'ێd X'E&BsfUҕzJE.mFhWVP2hv o?D&W0N%g;4@ @YB)R( PF *dHDW-w:UR~r[>+k tNÛ2*Ξ3D`K:&_ZOk8%Y[jn2vs6t/ sVNE˓KS_u};[)Vr+)#yRl|<~ +*,ql]= c`wPT 0d 3E+ܭTţRجxirk6ȕh٩b1&BSb+e >;-/Fs r]=\YFͼn>r":pLb-EZp?#+3T^&]qzgx-տz~>sLCo ɝv@@9AsPIXYhaT`ɍ>Ug?1luc{]wKmY -?gh>R˥E}y4j犂`#4TT6))AiHgͫd\9Z<67C[!qnEVK\5Y^]?L$. 1VC=iۺiOf0XUHDI䧟1뽯1CO`dRUi8 X j(6=ng@(-pbjІM \q ϵwcQپnk2˓k&) RP*߷z$gԲV 6:u)@/dNi!h(u±LRq]L "ˍmrPXE!LUH^h--K[=do h3<$J% M]&)OĢOy @a6}F]`O L05=~N#A"RQ\ ]h- jn16`}l3~!|J`֙@! ؠT{вfܴS#٫a)yB..,d]#]s7]Zc'I,CY9zu"v*; [_3cH)GG` 2\cmӵbl}rCtg:GP60Wġ bqfì<^41Cu`uBim^ ^<'tΝY{vd4!z};PPlN:}zd\S HdE%n:Zj.K=x;D t%1/͠fP|:FvcdRT B40+$5fst,2'e9*s0 hՙxoKƾW4w,Y)! >ޓP\dt\J0:Ar `g/Llu$|S 3)kGGSǣI?1Q i7t_[VeL3m3PY]ӉoL;~#DHeB ]@xy뇳_TbE.N6콜nz|[J`^6ohbveU~Sv3Fk=MܴıgI3/:I<6\$GK׬p:Ѧ, U*^(O/Z2Tw]!blPǝp<ݥңڃ&1o]sJ -M/r, ,yVq`bI~+s0z QC S)8ZMv6rPYŌʱ`DmDC:#DwPfHcbvx+F\x' l`,k AΠUQ&vQa[|P||ۮ{W:HpII0cƷFlP>'տM̓"D8+) 3246Ch?䆢`1&&>/bN 'b#+ |T?y19Sa~e =ְ+b(5axOcܴ8dF[ D:gJuJ06i7d")ӦNZ'wРZH`2d;sZ ȒȦ;|q+RVitt,e1 00(y{؍n P{, ''Kp;`PU5 T+*B]u֥|;ѝNtT@I$$AQ;@!IlFԨQJ*i2St]3∡ ԥH9 ,aE,@PI ) HQYRE=gSβ+%d+*jPJjR,a>11.0֞Y&xTD;[d pz83BH)"ȲO$q{P+ Ȥ!(beye2+%oXH$ LWj٧HNCR@Y"'|g-ˈL݀lT$D ()LP*E$H,xIC@F* H r0_coRnU2et=bGķ SmM"9/Ver"&H'G3|)Iq|*}>{9{g1U%khU_&d-0[CbMb,)a0ͬ^ŋ nʫ"V "ɎMf5sb,`A`,$p' Pt9BbD&T0zx:D Lۈi<'Dl;'Cg3]Aa3ҘtXuqpq75H;0< B.\4Ƴkz4(=ۤF_y]v[ᷠ;_mܻn=0n@a>V~&~'"oe7: +'H):Ϧg̘_I$sjEoMai 6X?5X&H~ 6!NhFC>dg$8qM$Y$AɃ%o}3YGv.VmgPmn93iNBS T)hbjA8hAbdN-b<x UT(2457.yI ѳ踏*v!=z}N֋ni@pK o>wgX'He_W[Crё.XN`ĸpZaWw*;[*0 YmE̦o90Z.&/ t3VOpZDeBun;얣@F2sh̘ Ɓ%P\*DvA(. %T!R|@k©P4$/.l+ ԠQ?_^VP3kF`B.#Bfslvd3Ÿ(L ;I(eR`|5 SxK=V孛ⳉXo F^Әnq%b>`v3cXݞ 4aCZEi:}Րwwczu/NבqŘkĜ´!:21V(x`AD|LXm=!/:{T\>cˮ.˙e÷P5~fqdI݁'~BcU;$#i5gb$i ŷiѧR|)NRޢ&jy>Fp`U$;X)wR@!cKO}Eܕ:c'Sh8GsG ˤ &=[3 E!=Sf>?MQϋ)T6YCzb$pjrK s^*-P /DJh/mѡxr7^!ڝ{2nԾÏѓTԀH] 1w8n5ՎppmkTP,Xa"`IOus=O>QYmo.@!T'=0[*EkS8F6x'̽ȲEd(I#I3l:LEMATS]J;` !2VLHVXJ!S2 dłeaXH,dI) $ $ E Y 9a aU$FF@mJȫ* -LdRB)`TJ$t.dB9a ( "Ovj^_9=B"Ѥ׭ SEWLaufcPd҃{{-'FA=dpmdj87L:zğ2ueLZ".,߄Hˆ[B-G\F%e9JE0 ۮGJop-ȌT!Ȉ1v1!Ws˓|lPϲTy}~ŒhAK"Xmt0>%EV#S_TMXA2Tӽfx)TxJ[*|n`#p@6wabh$OUbs($rܥW rVcV4.˂6MSĝ%A$s`%)C³,dfSa5p;d@)CμJHاlXaq'vz }r_nvD 5ƌLXؑ$tIDVI/}Ӿ.m*:FùN&]YwHŨ#(!gs' ΎS':$'E`dLniG`ە1bԹK 4'V=$ ڰ9=׻t " w$ovCLA*=3WLԉrŸڪ~M*pD%U7Y"x)iք3C5|^)om)"d@$@$D$PBC}71c !>$H D>k*p<)!"!"2#"|hu2yO5tG=mem'q/BW-#J a.E{>B)dRs$AdPb(H[NPۄܪq:Q07 >ލDDSV'scgjJ  ʩFm1V(Ȫ䨱C,D)t5M%#6Wj9KQaY*ŁU%ev8BQ("*1+Ze)LM\h KF!j cCLxFww Jx75<9$'/2X諂4Kǽglu070 MYAd檇=Cͩ3~ZHzx=v3b (k+iAŀܼ>Aa j&``$PŹ}1f8sPm_JMײP('¨ kɉׯZJ ) @ ˉ\`@6WeG `S>3r# HKUIB& .$*IU$  BI.1%iƸr4pv"00i%).?FskFtc*hJM@՞k3ϋ/Z)b C) D'i9v_*kf~\F>. kG//MPQ (B#+y]x8-BYmM0Ctg-(I"SrXē)6/I~~~vrB+XeGYdFI d! ‘I$,VL{}4&=TL9B蟘z*?X_Z-1`Rнe9^\=bE'VwCo==k31_r?xoE`~B@1 E0XL-X0jxrV3@‚mX ݶyJuԥ+$gD䜳N a_FP=:*>I;Szi}ٟs I>G .eCzHPLaG'S)2CʙCD"nW H҂D֚ʛ0")!*eGJ섯`!M8&oq;dV55Hņm7}tOg|]HEӕÆs"40LhC2xuC!\uքECSX1R`&*=ҢfcŹ \1p#,[^v~jsB}LnDcÀTq\^yMFN3 7T4_!dD8j}Oh߽bDl /.6Uz  i7J"_ 6m=c: 9,OY\p;HWuGF́Y^CX|W~DQK hK{SwqHot6^@ѣJpoefkz-l@G:}łKĔRiYdT V8PhYvBF(4*赾Ǣ;:1&6 u!%6#=׍vi16w0}旗|nb/^tep^|z$ׯ6eWGUř>zaN'? u:+OMsЊr $0Kц@rPFzAc ^Z@sr: &]{秋/Mo(PR@%2 _3|vgϹx4AL.F\ǽ3b355N6ཝ\ґJݡW͓ ,WQLsŲBQv\vԮ{t船jhLe\~m۾K6tR,b-ɪ\)F<͠-cIgq_(nR Y{C]   TH@kAF.bڇvNd6icN$X $C;| |:X.G1S1b)C&9sqψF7-ܩ$זuj2'ED\ٝIXbl8q)1  6k TcJ02-}Eͻ5j+ q_[b8 \%جZj7\+GhogJƮ*'^;RW^0 pƵjl}3dQ"#U S u_ WdV["umVŒoB25Caǯ6tn5cljETLb6^B(J 0pig>7V--j]]|8QJ`ǰsx2N jcA,4[8mO qe&;u:'{ jͅcwkӡĮnyh-᪟t]&)%4TiJEIbqJ-CMc0/;a {I]pcŞZ6TAtGh' ':{w5ؑ+$mfj T(-:wpO^&:<*W{{e~ڗ'w`$Ti#]mB^Nk^sz>M$Ed*'N(ڵ .aM7 0Fݻu Cb3^hg>T:tై`ܩk80yZ%i" 70HX ddG΃LP*K4]D Y{H%8$c`A@< k“EqU/ʼnthn+a 5 ( 8Ḇb3J0FLZٞD9v5F c0$&JR>1]> &voO+ge*qB`d .6. gUc'>bu4h_(+Q `ec4_ DT)M[qvnjG'tެ_YXRH}}ש>o"Ψ:ot"$Ii1@ZɌjV@yxO!>o\+E ױHpfJY%a!XV*ffa)Ց@E$JTrQ` ib@" R5"³(CL an6IXHYJU $] 1"&Lb\x\E,BJXB*[qq .Vڋ@Ypi˦),uEhdYcTT$m(@oWr~v{0T?m-j{jXB4|vPJz)(\|;Yv>̜O596^4+`؞cC^=Jh'4]-s YаvxO&<} V/v ("V™J3308Qa]IL9&qʨ )P25A&m|odQ)*uz_NXy*7m\-VM`jmEXY&5$Y:fCuaVl!FFC|CnhkבVFy0PYoZU5geT&&&fa@2'54EWwgK\e-1\TֲMq_mD:ڲEq@R_"$Q<5S{Xb2F9.;uZ XNԒ/&z}`v5̅;HQ`Sް$İ"$X- Ȥ18h~4pUV@X K RbPxګ6ShXTB DF( (DDA"nIl# $RE2O1IY Œ!`j,b@D1 1,D=cɟ'Թ˵zWó> zho SGj(lH9(c^,DRãe @ ߶9'Z3f;Q d17=kNzq9T(Da@@wfvPCl4hŐPLCB2c,TY1R,F@I)wb؋,o;3'!:(Ld17IumRa iծ[ !f?v<|u` 6SӒEDI;ϤC :zUH(5.1UأWɧ߿0?4ynX8[fBNL?ĖvH ,rd"QBN\A/L 2eL1 4{ 'VЄ ~U|^?'[>=^yXݬT$`I~8 :J"EjpTGN5qNywx9'TI iV,PDPD9dR`!UU +8 =Ĩ,"f0C2 H P8 V@B EVQAea EY$* /& Y(hP!"H)B)X EE P> NY ,ShTb`Q$5:pI5Hu=2Ʉ:$]%"!Gfј^aXwMB43dfby?NΎs'^+MytKhe3Q!ȿj FiΩ[flT\? @`,gTUA?_f(NSk􎮭`92P7s˺Hd*KW˽0fIM#1o(!$"AETm("Zhsr&!q!_y{9tfq&LmDQ%q2=Nw[>7Eo"0"1*wl`xHȤޯ$' ,A Oז?;_K HbuAǏZކ} ˜@W:#2 0ah\mN 0[mf2M2b%.PEf:NU_rC|5$tic~GyqLrVjVBk[.URn(1 BvutZ/O7{T-2̋NT P0GG]tGN)JIGJkFP1 JHeݜ47WF|։ȖY ! c53rn{f%-AU@vn8:{ <zQҀO`O3W';XC?2LR ST(0 ?KԒDP @ysgO,{.i١?:1H,#"z۝̡DĒ/=Bě.m"6T3LX*:_-"2]VNKT+U͋EJȿ%԰cbym(4.b~Vٗ[V*E@`ր0:FqӲ@DӯVrd$@Bn-F~Ǹo/ E NP 2$0I2K M?%fS:nvpD=Nv9AOh҈D‡1Y}݂~^@VqMZ"\HLΠO1F d\2$7}19HNrOw-̭:ݱj GTW)1Hq6hῆN\x5;V+gמ\c+.u!͌^ۄ=$D 2#.POҲ8e|!ЄmlS/yՈ17p.̫(ťTc\E~W滵!V"1*PBQW؞]òEY>Zol䲤AV5n-w,CnF7!wh "#OyCXcm=2>=L>Eˊ:o?3.h5|.jomdc`i\P@WCq|VS)nAI#oh~4Dhc ƴDF,P{9C8@Ͳ8EX0}S_u:}b( bq BfX cL44{E#N7rjHG7ͭ:Z!{ 5 #)sf{nML'GyHQy@y5H!Exn~ y$i (mڨmyOfX-UNz||a(d"d5wRbrU, 2VƂ؜ DyoÉ* iyx*RH Pp.VZUjN:P-!J@ ~{:mčFT;o(/uk7!|8<[wB5]c]y(>D3V í/"r/׽ m`yMRЕ2xxB1RڭS0Aw]}ө8#Imgb]" K/Bb`A)LBH3s"f̊71LA]_>vJܙ&(UT$e3l4=rm^Ո5 0 bY%@11!"EI&2ꖖAdJ V*A+XHTƨaSF |h>M8gC_>}j ,(M%| [뉝gPE@6 Fr5ԧSyG86cnH,QqTLTwnID 1VD( Pptl6m NoDKj4L|X a4Z7uoza0ֵ1P)oԴH )e]ϙse<= :ʙp.:Z89-Ҡ/yPWNV.;(A\xV]{r#zw0vp Ty5,2"j dfLv|0V4_J3M5cp%F(h{4-AV61`znK鑞GC=V tÍoKk:+fi P 2u(£\0 d-O.S1eל4\& 8qݙ;7fK<h"FF'C(b^?#~fvzzDZL?o|Nuy_vjtܞ(Q Y6<]Ž5zϳq90Q'(]ߐ -u,|g׆KVE*Q<[|&ee&tzĂMvu-bgͿ S--)\\~4)YCb Mt+8ҷi R>?60ʶu@%y)`~`õ@aZd }0-ToaWEjʠp #,`$ sA#zWP΃[~6Ex};P[7I $yCX hyzD2g c@<\^8l& +Vi7~-b.m_g‘$Ƀ8lęuQc(F M:6sBŮK )V}/~:fc/ׯ"GN닑nDe=RWLK|фN¢!\4-e:`mjXtÇ.(mh=lp "Ô=ŌFꉮM/= f"-3CIJ&3Tِ*J- WDUa\PE#RZ D+(%HU[>}ӿ"t:PJ C$4y*䂰@@b2`yB1(ڢ޶X>ω e ^j8B^\uf q#F}XA,kィIADZmbWցy=&Nm P@ ?тMwQ;|7?68}𹡟^V(M@-%\>!ZĒ:ye "t}Fp೽R`@zl8O}yVȋ@5ߢ /V G]cwK\D% ~Ҽֲ6a0|rwe\hFQaӼ&|28=kP?nkӣk <6iePKU~:'-_߲W0s]/koT?b- nyZ(QƲp=45-F RqQeD=`j1 υœ K .8 sFw  76,vbԜ1rJךAWtt6У;_4/84=QZn KF ]Cd-< E ހΤ`Dž f(! &pUSd[/]J?oMǮt‡>꾛GyBqMύZ!鶻e7;xmbrT^6;+=rUl"Tq[.Q: {Ռ/2.`k%+#ڤğLy噖$aX> mWDh<ɩ a>ODRn4\$Iݙ<&^ZŒkQ Q;QX) ! ٺNy[Þ ̪pvl'ov~<u H9GI_R[!,w  %x}rګNz. j L"-S 7}i?hj ^1  fxof&+aN]Ti@Wў?[-6/-u||[KnDey={yh5I$5SK=~{SO/o~)֨fCU.MmAzz$AU#sf*8 85T@L 4Ha.1Uv@jK1A_M:1p0ث{vUVSHtE0yAheqVϾ w9vKT=v8X *%.s ?wsFcew>8UXၓ'Nzj,޿R^iuj2L^h :US˻v+4i^'_n]ȕDUȨ%G$3L.eJ9/ ~ҥhZ#7oڰ-HTJG};7vB*}pË7_{%O'$Mդ{!ep>7J鏀nX35$aIɼhYP={᛽xLGWoytDhe{X & #5 3/X=-@yn{a1iȱݖiQġI#j Qcb6KM9㬬Cs)^j}M+a_VK:_NoasĆV>y7:DYo\#R`)$%TM!P_;W]{/ǐfT fR:.wt+% C25^`5 #5*.{$BS QW*|a@h߲>fkl~f PS(5ƚ@oq۠ZfLSJTcx(RiաՌ7I3SU8&6Vǵٌ` 8b^D6hzgJRM]cyUVbm>bɈ]M wyb(X zT'?3M:k0% , S'6YI>8X5 u 'l΋w{ֲI8Xϟ!E$~Wi(窐+HG 5mj6[{8Xha?'1 mZ/?9̬1TdHZDʯi;$;\܇*; sNbyMȊ[1X,?վR !vũdv '›&?Q?D_MbHp8m{RTkgjAxUȁTZ*mf4w $,{ S BtNmS TD|/DJݸrւMv1h2@=  dXdxs4sÍsH ƧЪP0Kͬbַ|U*Z~<-k'av¼YOp0Ěx {W{~az5^ aʼEʻB;3Z/[kۣîۼk14|V wYI:H/KﴈG! Ekp2=e€J eOaxHBRow<:34&k̡LH?0~ yeneQ2fi?W <>o-DrIatF4X\Znngc5Uqpznvbֳd瀡`л 4NOims]Ĝ!˩c`e:fztUX(gw^RU7{]NRhA c<"d6:UW?ZUf²D$2" +Fʰ#(o_bzl]U kI}Ssxg 6#r95[۠) %%.A QGc8:*Ā37mu jmom)玈>͖[+KqsBx+Hhv❜ i M[ yź7j&+2Tu,j5*(;ʾ3u3"%]AӪ A1@3ᚥ0#lp .M lJ'8-X0w8N3Y*/ |fU6[e+I $vUS~RGdjf41&c5cZXA#=3ꎻ[Q9:pB3^:ꈺh Z}|(ԅbyIGeٶy y`TUvJv4fNuo-r3`v1{m4x ڂLYXRbVP ,Oc%8g,9! By Qt ,ANNTJZn˯"FJ?W?\we o-`OX\~;klj:ip#<$Xm" 0Pc)wS6z`O/H3]Ň'Y|yfxY`:XXVW6R\G7r/T0!8LW.䤒fR܁b%fGPM ysq2:WՕ٨t ۻa3[ݢ[&àCL ʨF>.\_?Ra=v<~7٫ҟ9ki2!(HUNcNCBO CRmm Av^ԐY[@ofWg.QRs l|}9!4,)d< KUR^;wUĦZ7Q8b*@$$CoI:ei=kv! BmMs[`~+摨~w-W* AMܖMNhcEu'>[y& ܖ>FWs(ݽS,tJurKJr]yT1ǧ~vڹ8p]ъ-~hNqAxu'1־xe4O+g[\H]]ccU<毵y(e_M39'8[[wzg)ȊJIts NY64qFi0!3qX=]oGNU~zs,h;MRa툀 c &n%O#auZGwMPE>KjSX\EjN2'IIE1i7I2t=H Cƅhَ]"Pj ''r}ByJ-6s/i=]?=J)Q?楉X?d=|l%}r D(|qzg~5HTS߿)E8Re:kl3$4\x%! 5Sx.\场ΎhS9|IO"ڈLdҀPqaw>Od0W x?[VL Fkm??|ڟV}1}=+gˁfܲH\ fǒ:oɫiP9r?/gyFy n4;MNE 4Tڜ?BuЍby:N 5qMY#,fL,ƗQ4,ll $RC&@6\+ x|?QR#"%E|6Nã``"4 ,E/RؑV~R@mպQ3N\4B֮#O[@"HǕ(ۖ:7o&n->_~ā,+Y(H6 iP.H@AK}9y, ق  CK_/h5)`@j&P8OE=L"|֙PI0DF`zds*O5ћjGsr,ve=őyb:#q/.'cԽ\vpP?) D<.7~;>A&OM(dw:=]~nkOwx3no»n5C_Z=~MQhUz{.Z_-+-+:>1qAs4UPIT ߒub0ܭ,]a[zW++S l'64i){PzGh-ܔy=vqC/|h.djr$*HL(×x j)k޿ѯ]MՂ'RfD ~K=Y$Wo5bXM$BLz=q|޿ͫi3=ɗ~yG!}jҿ٧yar[6[ť(v5j-of!N힖^ɼG_bB?[=:]':l{::'Z[g,}Ϫ2/(հ/MXun9OpDa_?}Gx]}mS:dul?sa6v9Y+j'{VuA%@%&!)'ޥqq?6]Li8 T6芜o|xqf]3 T L):S9濠ݮ0k srXU*}MGy]/ܹ}戙Xf'IqU'%kf~rDT?+aZȆ Yٰ,BݛwfH-nV|Kߧ8Sԟ?&KbtO#ª/{kyOgz?uu4{&v|-)əq%OXog_! j73OEN2wmGq:~o1& ž{~){I?^{6)%OBШĉ`orXYb: iOv;N[{m|GLߕsR{_Qu_?w ^wGnnߍ}Xn1$S0^sVZ4ep0cB0*eqyFo t8b'`!PtCޣ\C7NOf,fYd尷UExѼU AqY05L*,O[*6>IN dyu9?4 Y4;愣3''Uug[Yʮ{׵CYn.{`})Qp;<-UUf]v 4S ?4!g?CqSR=1$Q~i⿕Mg,gOC~mݝOwK~\?:W+r)7±*J`ɟpnIX/ZotOZ߫!>|VRm]MzD$devXlY0y[}1C?sr~(",-?fցG#7|g`6?::v>Kր@ ,tI߼MT$/O= Ϩk-?LjEFU-!#`.Nx#4-nM%V(Da V?קwuڙ%YTkSZڕf~k?t Aפ{*fi!+"Yiy'NCh=n:`iQ*d^o|3Xck $_\pbo1X(h,!z{0. ۉj,O1;,](a'iǴ=s?4$%DH۱ն@$.ق]1 G˱^<޷q}~^y~)j7G;;Qί/S]&A`Ys}g%uo}h O爤0 z.Scvh|/+=_c%ĔSF@C-o=@a{z_q*Z-os|Koϗܖk/cxT '?-e7Y:VO {W7<_g)e9 /Ku]/s׻cGn0>KǸw׿ŏ2(o5h_ʲ7~FO?~sxOO}BXHG?Dwr@2gث)cOEosދYMnӟ$dqf &135UQB{F6ܷa£lvl?cs7w7۾mE?k F[q;5RmO &2(w0$ qK3y*{GX=L0k  L2D[?wp ^" $JbÿX6QW]1 ;g=64Hex z5id$uz_kfQUOic1@gXf!i/K[P6O^+XK؉:^m,iyܷؒ˕:plD7yn#]4Chb Q(<Դ龜@BL/zts٫{#3VBWQwECm<?SXJܔY'%0BVc|[כEg-z suc]ң~m͡/»yfq_攵$rscRU@0t~5}Kv-~H^oEsR+v/s?`y=Yu란/L!*ڭ2ax:| lꓡp|ھ'P|ź8?tʎ@n@B8Ffe)}nv[[y|mA@eE0OuM;br_bL g̜Fim4dNp ^C@}t_nuZ{@-۪&w>|kl+n[{4|]ѱl`45wr}m>ڂkWTW e16U(]ZăIۧjfl\%D :sV[Twޞ @k*=d+Nt4J Db [(3a"P@ Pm;별4}Zh> _G}>6ݷhEIhΔu&\V[n:"SE7ۢUv5fڀi(M]ƺ棭8̡ػi"ۭ֦Xi}xwn\R) E* J}p}}w4-׶KP@Pkz+Nf{νkvs0=⋜̶RW}<m}_GM[d|kt ڽ8>ؾ*J@vq>f}R>]Xsg׸.}ϳzXf=sNy@}og}P9uC|aOi.s˶nqQݾ01ΗyhɌ[ATz_{6Wݨ [Oӫ{}XͲٶ }M2sZ5oLs2ǧXk{{c]}v{8z>{コmǻ6lw׾/6UI@>|y!#Eٻ4)k=N연0@`@y|/gH-2-}8Dcq`}@;i]nMk'<ίwFڭj{-E5^Knگw{Cd۪zj͵,rnùzyTwjWՒ6}ݱEtrkT}B;:r{Utcrǧ  (Pwou[vt(<([eRlc}| ݝ)k{wtU"M1sQuf񌞔/`9ٛr>O6+˦\͸u|}+{sחuw)oC|G޾p[g˧#hwwz/XiBIEZ<}(_]ʠMAC[4A@ #FhO0 &P L &CS10biM4bSM44h3F@hh L@ dȘLM4ɦ4ъm4ii%O?IS?O)?SSڣOSj~MC'bO 4dL L2hzm 2dbme= L4hmMH4h@LL4ih_DvEsu놓 [|k&%3ȶBE|\a:P"_ 4ם//x=O _eQ°xgR}HU9cmbM\ۉ\=}>?#ܽ><5'X9PP^-DXl)BH =E_8=0 fgRthvGztv߱ыuuk9uAGn%ݯka-T4>) r_OUv$"hJLTf1kO"n # J<!&*CS`[m1#yhfH -gytw٧<Ύ0(EV~`||2dG ۗ_>Z8 2 Q'q,y +NtXYȶF Dab_:Vsy/!^ݝ_3 rRi!1^rx%R'Amwk60&# t=BNWPa"MNcYRg`HƃyE&8[6""g3!҈fS.$!%ɢtUTBݮ[ЭJᩪ2LTdw?`m!B@ZD,,OWL4 c9ތ@,UM4e{}VYFKAeܰ1ĸ $I|_A`%DA0ILE w=+Y`(`Y5+`X/s|?y̴H§Z`PȽZ0>'tYU`@@..?惷bRaߒ%V-Ym z%i,xT{ibd=]c«>vlT=l%G?@hPA #^~Aʌ^((kÁT;~@Vqp;9 qCDLk73qPU,M`bO0$ ? IjS`1f]oP-O @&/j!5zrʃ^a0M}ZJYv8kAa tBDА0U{^E໙9\-teނɓuO$ZOݓ _UCGe*3K2y7xfLIy޲ž{ĚS‘eR"TTddaL)rHqRQHό 䌎%A/W"e-O.`=kGgsUsaCghf_Ag[FA.k`'gWw᳿+>g-*QM/p2b`W),⩔@ )HNWmN8A;8‚ N AOF/7/PW^!z zS岢?\,8A19i-@;JN58tSK:B-%#TcZN+z? q0_fV:Ao,V"qM-S&ܿ#n*ؠc@M\ٰ3 eшB7go8~j5R" $fT =no9S0͙w UD5KɄDJ@E#X*ayBPrvJHwkbu\  AN@lL&QF/p5n-.%NT2* jUU6ʩ%P(J *@!B%iLjH;<>z(C" ]PBhQU`b&lرEnA0Xd"" $QbB0$2BoMfAo6OUos:ǀ]ޘ>$&%a;D y`u.~li}oV`/o%Vf0mtH(z Ϭ.ύ3ccP@fn0Fw&ر܀ا|rqE>;\>Nd^!K"t3[5bgPJ2ͅu\(LcV#=V^ZΒtLjг>glZH$ݙ´QazO>ps徶-Tyg6È-"ƌ,PLF/ #X.e|~pP ,c$+1Ço_3֯DMU~&0.$uj?$ +' PA&[2mx'fp!b}H ;uNO.ʮg]ρ?OŇ[E-=S+u{;c!}y43!C.7nD**H,Lh=Ԙ QL3PPvJ?eaPʎ.=MJL7VGC,ٸ9o?yƋ~YXs )׀?5 U~Z3> }_ڔi{{ ϖ|D|<|YnŋA6/BIɭ|yn|i" ߓWB~/$ Km7yJŢSJ۴׈4m<ß,-m:oa|7I6~upP"硯E|nlt!|_L5Ya0MBC0 (x}}sL![ybf HPAOZ<옼(c~ڜ' f \$p>;r"M 7>?|ӫ㥟WjxSj8hHte%B( -b@/ F]>MWy6ˠ%i@0{<$ <$Eʏ(O1`m+"f؝Y 'j'UjZ^w%[t HU ((0ADA,,7 !H@! rzl0vuXHEsA+1s~c{6d&<č쪡\b\bKCxv>d6tsh,|U'^YnGELYeUf]1lJ)_JU0ZؠbāZ)eC:7Thݚصw(ru֍Ƿx~%z~(v!b"s_O%wh!um)22dNH%S4gg5<]zE$Y*<]r+g"nե[EU IUHʟ1 d2V5TXP4"ESY?þ9e56緧<R!MW?)m]¸2ņE~vА~4@5]l&P .L'Ons/}l⢝.Їh\b͗8XC.hSk^1s;_6~cI- 4ŲߠV15hI#fʸp -*/SJPS:d]2zlE/Rso)v m 3/1pXN$/Z?sȑ8=HqLrm AI qS&Mgcf>;m UxcLHZ> Ccu77nsfvmk:RXBInX@ )ф1E$oD1:V{ޚ̇[ϭq#C قXJR6V4 :#| yGUeU&Em'lp 7GĹg H)~mՔ517{Y"Z>ra|F^r 8l@T$.J֯$P22 #5WAdLp]m*<CE/ib@U %J(BГB zj2y vUQܖw=aj$ 1'BHe'V)?O!='QSHlAͲrQ$Q㚞xB%k(u:O4 ;9=wͼJR@n.g M7sd h@@Aߛߨ bPqBz둫J4⦚V?q,4:ޢPVvp$  BG;~i!~JaaTBbj:/d52(gK2t쮧[b,z_kI.^ 9KViz6Oge@@ |uU|Rmy?;Y [-:(ԕwikS; Vgp#p M| TcU1cTaB 1Aswǣ;f0ȚsX陓RRh+uu4x]"I.$cĴF]07peSD"0!S0`?V74bă);,.1 `G7cBJS j,dʸT#A|RV܅ _d }{0aH(\=$A; hE#(2i1@m=t`Zn,CI pyo^L$ KO9۬w$ aĮ^5e)SEmjUvND g7jCaK bqNxx^We4Y4WL#+H i\Ul_JHIg_ުPzt*q>;ʡ䲢'm*UTTƂ׽Q_Wmf(rz"qJA@F" (*gL*]%Kk-Oft|h.72H]CO?_ߙݬa0$&YHiY0x "HP$fE^7y߰e>6/G&C.U+\ "ÖG{ac^;Y.&Cy;/ S $dC٤nۈ;|OEbg__){ޑ7зZ7綎:(v )QDU/Cj+$Չw0Mj&$QuH82YF|Hi -R"[E!))ÔAqs` <ƌ11uy}o/>|}*nHIկ"gƉݐ $,J)qt.ې_0EӨD b7kR$oh8E"Zq2]zJ|ǐΞ۹.@2nii$=I5_.eЩ̮@a e0 S"o~cBF${b ),DKe\rkGJDk(/m_N9_[WmbOg:=_eIjLW5B@A~;#p`b@ ؈v9Ի H /r4k}x`)YgZ]E#m@JhE.5g[®w##s//E߫t3Y:-h"-q LqH "m'{>sp*@ N:T]c4?{;{)\ZfEf->-~pVeͿJ1w>3_d5P@1Z \fF4t}?ѿ[_=ַW^RA06`,tWD_G`/!L?ۗV"gSŬ|]EwCc Py%RWb}1V=3 Xp X$Txm42ǀolm1y"?}ĝ$MwtUJ[5G Gs2,S 4_~3Wv:{K`[R%+wc Rv  &۶R SŋobãʥʾĮ[|6[H0CW$=stZ*#F֟4om UºfG^D[XdP3 JNfkD{-ynV"8MI Sk؎ 5pYUӗٖ05ĩ{ wmߴmGdG/N|Ipt5Y_(`t)=Cae(,wqZjTk1JR#ܝwVOQW9nvsy\e2TB kxd Rur_ќ!Psw)Ͻ|d&E!c ,TE[DJaC",UQbȌTEF01ADG;~ Bx:*lB p!+Cʻf[ _XPsֱ=OR\m,:J`Ȗruژ#f3'6444gѩ@.]F([׶huvSoO4]!'f"rbC\8ڀEu$nÎ 3 *q-Y ]Of|c6lH;a\'ζjY٫BsvcʮLH<L&K vS :SY/V[`ɂ0Jp[7Т2Eζie髁1Je"`Boua>w7;ϗ&<"Af_le'bc抂 ^CmϒC!h D[URw 3}soή0+f/z{3fFCh"L D,^9++ןj"w.XK<H (qsB;ay7ܻXeSh`ֽ/PS/$Ca(+Y ip;6÷˯h1z6Cz.H\WuQiaf H3PJoVDQ,E 5 I[cz#0dφŇfaD Ϊ}9^'/ (I U!CLZ;85OW/ w噇1<]m`=,6+, r٨ @^C n/y#I۪+ەs&G.f*!_)q*5OL %rɛa{VޜrTaϊw(3cfη_?[BfRϸ!d u3c*-9d YD)sr%ʸvB蕹fl("!믐i+UlD@DQ"`0 8*8VGjJ]A;n䂃KqY!SG~7M7i4*tAˬhn?!/{:( Wz8b)Z`O%zTewPFHY~ϭpD- p28F `@-CRp oF/׍WP^Wp4’G=@>E[=ȌqAɡi,}.PM-"!(:az_0)}''_s7'ЕJ$gV|ٸ ,m&lT~fkFq/>GmdZFTo5kCh[v{Yu[oGܴB+:λls|/c{Y]pZrouS?@f.$^D8CPD * [(JH=O7C/it&y89wGƐoQ$E)d@]N-@%4"ޝm#],拏Oyچ6H-Rq8](=V D[?"乵kѯ cg'J 5uώj?E 6yyUzH;TZSBpD`< 2緆5; 3kHe qk:rxo]Zdl|Oڗ +QUJ@)i1Rqno,6PN.9|[dP4y-ό5 Kbq{N4ml%=_и "U?Keyf$bInIE9z4e b֞r" ntzκg:~j˾V5PnU!Jv>3k+)k;8RlXSH zTU3(HsP4⼉O" +t@_)+toGw~Ro h\q5Pqx"ۑG/;;Ω X8u 0MΘP%wdl}56h·vna&PwX"" TUE"Cvt[@ D+gȊ(9Xɜ-UqTAs⁆ڴu@ @!~~X/ftS! 0ls͌]#c%+w(:#6 ;U4J=6m0LGV[Q7FY#TAA 6l3dfIҡ\PbkrvmMie`p0R{ g_43qĵ U16^)-puzPfڨtTj)jp!, 31w2u\-<O->a՟qX_%W|_Mapq|fO'`:+0&䚧ULt%&^J!C/hJ(34Hbk>Wگjc_)J@J4'hFm:E|Mڀ",-Z 21Vqjw(77%\☶ Ptz>}wHMtU ug4" fv:cW/򶟶cZR~n}]m[@dez=/,ޢ !m J`(o]zZV\ԹT$#D'b#V(}ϷfB835vx(8%$_H4VeWK4@Yzm✆V2iȌsBhdJK ~)(7k:X{if״3 )Fp[Ed)e2/8[k|vUTADU>?V`_one[ 2gy#Y(mx|d] 19 Oc~UFN. >Ǵ:8$#S>{mU!%*$Z?ۇ)o$!m*C A!j#+;C}N똠=_#".`*-J*-rłxL)^t6|V]=XȮy5ؤ6%F_~k!^y $k7NyGr:E=dFa"hDo6D^X%BJJܷ'0ȴ9z #1ÞBČՉoL{`3irEHwZJjpg_Vx2eй;-'g&Wqmn#2\ RM(؅vO g[f> 뷩I !8q>6a>283TJCK }&9vpwbp-UD$~H BrM9#|s־_swCspr9k֝g6%#ɆDDCڈ=J[,ZޱX '`Ŝ͞vxx3GN*?r32$2^ J)"\YN=nUqV푬  f!OHZm#N=%.3)l[K:qG뎀6g:`b)IwЗϭeKMj* }f3E,p20,͍,,n;F#v+ j †H,D) 'eM+x5;1@:d w tz1'e$d 6v/ _tiS}V](*@U"wnMoth++A DEEz;XZѩ+{=x*Rxg!4Hv(+ϡfEO\5aBNrF#E~ L-$pÚ>EfFI"Uh`@t0t0hGp;=qku'KCM2`C$6IRH ,F5NL8"qBW) غv=$: C 9B̬Ô@PR (Q =\t6hzZŽ,榪q 4R_n. FecHZT_*:656G :4-YXNOJ0^kcV?`_RDDDt.,3VǤXN[! 5MBt nFľAURjrӝz s0qNiJQp1 o~dg9=e´("+5&u3>lN.,}D!ݲLlL~THO$t)A_7LbP=WooDLJ>h&Qb΀ydeNv(W~SNݍulEZqaɗ'Xoa;xfC .^0f3 @5UJU)|fr fů6b1(ҋ[G*Ʌ֫wB K;<@au|fJZ=^'fvy$P~uZ6 2^:eS{M\Y&4Zh-A\qcˏ4!.*x&HLڳ@(dp%Д>F4?{ AKlMk .McK#ŧ*-ZUa7bĨAKJ(8fJrϹ(y r^0&\,xH`%XD蒮3_ f+* 0^?0qZu&xx儽%:ep[qN ټ;LZY4zjzUdrJP!3ߐ#mfӏWu P. ^E^>v),/Nu,e\(%1렼{kVJ:$ Q(y*1<Y6(<սŹ%rq C A`+ʔ(0XIU|]<3t+7pUg|=*Kdy>Hㇼb"I4뼯['kP;3`o'5Hؘ!.NB$pbcp4SG+5pQ;Yw$O98T@DDDfEhP ,fojAF8A~R^hj'nhCMl,Y&7=lq$mx"-J(3#'{AN}{}PZWR5yP۸±;} nN)e$88?\ނ'.UY98.m2D"_= yOsoЯ_*9s73uηymA5" y *an 3ur^}?]܉P4"ԒRRD%+m XU!ݯA/ƞ 8$xAzH! ro\S7+={xAYt B"R}3ڬPuNtzo]i22t *F/h"#JX]%AŅ&1KkThβ[z򬺉@sIC-_UPEx!UNKBSbr~vF- i `JP P\ǦHwf2nMw@NRA{5~e8ȷ-G3cM}Z"bC`kD{s;r py:(Lo'aObU+Z8XP{! nXhrbB8#6:娙Û4خF뇓b&׾qcG"f0tlmU_mA u=e\˗}slpd 6TKifhqJ' jsVChCAK /}∰c[=#=G!0FdC]9HfDwH-m=ɝݘv1AXs|\E7`^>y$̛:<5}iD;ل`]~o[M{7BRbr $ J0%˰Ș+:z-9:#8vc쿬Тn!ݖgq4sI:gEճ'b)rsnJm#D ʃ8xT 8: c]c6Lͷpv+t&nA0%QVtA8d0[QY"  e^h䧎k<]%_ŒK>nM/Bjk[T~0D݆)!7Dz+'dGimEEeb-owzaG1PQ$]x]$T:LPB"d|  rp[N`8U[иv^FVm%9; P ?ͱǓr\Z "7W=6os.0;HY-؀`xK59o[RZAa AsбݗǛ-j""*(̟{2<"k]XkG_Yd]sB.&:kRI;:,~GxD.-.ü8 :Qv;YZJtu6[`ZۃiyB#BǑ|}{<V [HqKKo!g7zXRtrY᠐-Pӻͷ<+2艣muE+9܇gi1;5 \W.B>mv:,dia{Fk[G3Ѻ^D@h2]i Z53c=wF8Y3 rrj2(D ZT&[ "X)| HZpbQAtCXUִi6(,}!AnZȗg$Ȝ7r8b ]Sf^ M( aLf3WC M##ן78tnmu^ b'"mHb2,-{p<ݐ" Új!]% VktpcBV&CZ!8N& `2{M"edVK'p+/L٢\Ռ:/4O'EHo`C  ԈPI g[3);JЇjFvP }yFtQ`%(FA ,&{"GBtq@͏IC`J3BIW^0BS$ZhS(e0Up Tps"C;Y_Q |PC7aRLB~bN?13缙]^Ez',ȧUK 各!hȆ1THKyELP"O ݀yG$hmT@cC\">[ KјUkRe1tW k1SILQ. Pfɞ&3!o:<*4@r,kK8r(L'#lN:(IIbARkƲrcQxGVc„yooS JnT!}*) Lj^ÖBOz[6›0ˆ\1FKw2+Q!*Qj92=\IKQ"+m `Qks#7jE҄)H(rqvw59"~}sV_V8!GS,BXd|׫R8qr_y!A( {RT.¢-U*UVJGRb(YHX!4@S hȲUH]a؍AKpa`$.+ttBF?#Ud\l+^ˠȮn2AbZU0!I 6n; İ#7Ifa`wFuȠ\ۻn7vsZ(~J͓rF'nj*-a l@dI8f Ɉ7NmHrEz('Ch6jWLlb""VxǕP`=mR_or u[,-'rA\8zU1S?=|=hΕ:"S^ǘ裥NQɥ1oxZ+6D/8$JKnD5P1Y8ǟ#tUܮF5lkV1uqa13H*wŞh~ݼ <0Ks?Nr&FCo5!6N?E?JP~Qho_5 xX8K{)46,2bНi*"#7yA%l! ͎ "WF2;6G ^7KN$uR[E<%IC@<,ƺ:OB$`Ӑ#_X-Ϋh, AԈ0uhbw+X_)eaU@ZqەJCD;_4 ۽xFYsݰ{9Yse@BabT`C`BNYJE4zCpAɂ:PeN#.Nn8j'M"Y E^UՄRy.@Xp1j +%]MOMpjuvxt lזfŜq\OV@sWuHwjՈ@UŬ2mz;+kN,_eT,lAI!Dk3*w@ s'*Rv0")X1|-]+#R(CC].91 -̪aXrdo xLZ4pPkiks$' JǑewjk_'/ 7tnI>)fa@[pBm tA`(HѹA .*nf}!FUU30׳crl6ظK[- DM"h-6\,mXڶZ饸k+p88V`CpFgFCd[[bFmihE $ U~k<|Qn-yr9  ^HAe=Vȿ̄[q%T3L(6g lp0EWTP]׎YK: oѧj|x&ritqѝScwHCLB0uw{YmJ 4&(u6:*v@̖l!`=7Wi;%FcKnw?G{q-@/2F qD[rb}2*d ĤX4yS >!År /vNIC]*Tح\(JP]N Whyd$+ $&%쒲8@XP#a t(5Xޚ)TheѱS/q !^BL<)鿼l HW11,jkƛ ,3Eblsm[*5ETV/%5!Cx}*[Ԡ@"P5S%&M1|py\Ewi%}id޷Q / 6z(8b2\d)r| Ǽx1ɜ9+nG  U ,3!ªT<>`* K B!DQYDOF: 25s1c;!eĎDHiH/ K\ėjZ,F7р $" tb(d w7ɈIejfY!^28#O`7=waj^ ON\\"QcwAb傯|鍂9<zVTn1;sH);d9C#Āo&f55NsOgGix}u[-;6j,E f_ ƛ_5{tl$bHs  Y^by="}fhs&N:9GUBꎁѲ,$)=0G B0v9=<q `kn7t5X42[,HVWc>s f Cq*\/EQfִ @50#KoR!e*ꭉؽl> dW{ {BcV6Kn_ :WÄT3Kiv@ɐ\k͜:%:xA{k#MǾ=r:Y9N9^6/0Mƹ(7eP92cDSYk%=MdqR̖M\%2 - p| g ɨ]{u 0r[vcM&c]#Ɲf./b2xm=װ# XPo% `@C8(SieX ARڞ=p1׎+k`^(qcZmCtkY,8a,\,kdȤaupdpEi2AxyUWĚHm8\kV_fՓ_}Ig:39x DH9.w.Mf/T@)úpYRk%KgMֿ}WLe[տRuCKEaۛS4Ґ8klͽ l츭"i!N {PTU|r":vwS#FF`AcIx$#g'i i+Q=TUe(dʝBTNWFs/B Xgm}ek /> I`J}`LsS[Eڵ=<炩H =u&sTJq9?O{]-*s_O_S23.wu{7qf(NAl-ܥUz]s {#VXr  [rnltեX 0j0H\JTwZ)r3Wr-q!`"_Xb3d9EDN-4Ugq X@$plon5 oB@Ā*- IZķo^h@|s g 1ڡ_q;Bt9_=މHE" ʬ":0h ;OO^qWw7d@&ڬ UG\I6l$i Mpt8 Y5Qb?{v g\~LD'w{F8ᕦc ^E?߭~η34^y4+HU^JE^X~Ѷ̭GAVe˳? ./s4PS'Ug74@ؘ^(.B /Bux&#Ҋ`)ĀvV8 Ó\[-)҂3N%zM-b4QˡWZMX~/`0Ly4L ^fd~, K9UTR+]jLjNqIVUpzs.8,:f~:=:5$Kpǫkz3L"D u(Gk1'=F:6Lp=ͺ4t i!elLи.xy!G{( `%F8F)0Ȁf%nx?5_{+16 XMMjI_ij -+@{pTMPa36Fbl➚T[yS0'zjZ.IE 7i,^)3wbKR@sXqhGEx6^ U,}O~s*L c~x%K+o6Rvu2}Iw%dEe0VO! c=VahQҖl΅} 80 eFܟ]3αb HVW= 2&Z1ĺkJ~ѿ1eK3NWXjvE\O|7f⺫X"׀}.vw5)C7àNB;mPOmH:U| r\!9ṠKu^Ao85Z CiJ5X'ԥ UE=/C;s,/AfDJ?ᨽ`XJ*Ù'HM? gth$4 &TE.\LU*׫siwLeM2'ܺL64exHL_/JJ8 jeA-ޔ(YV!qWIt3=.?u*ؘţ:wRȞ{k:Ŋ.ST9AZm#j,[mEdY=d>/w}%ҡBSR2svTFp Y5sN{žM Ed )wm`Z PQiu,2ȎS{=e ||[mj&D.U(4@I6<|cTC]evZ73vXڼdcUq4` EtBYfSVSS ϨV[;.p0mF["Dؖ˅`A4S|Քbe !ә,z]+Q6ˬ| ;9'ᘘ7]mRKhQHPOtMd]߲y6ύB1_jv[uq{ŝnDyZ`I'k(HpC2 ]oH~6oݎس-L;./紡x>yNS@"#T\V, 8!n<~ V~}#z}HeżSBMkği(C%D5 J8VP`έ|T[d;: >憺wIo[ه=k7Bn,-$1  UdȓR{htDZw{Yo{­9Nc?뭔rJ)]H^?rbQKL}lgJ0 !+ 4^IeA_~w}s]mRp8RHhӖ F\uWndV2A^ ;ݢI V EF߭Z34:u{c^R6 !aCbОP=ocsPyV bFj/j+ni}*r8d 8'2n&7r'p}yhLp`6|3 IJ/xeMHO&4M%4$[mP35V7c IρI֖$۟a)&ĿG+>N\df UMo4]y%nzr5C4B (ƄҢ[)N2(N 3sĉN/`Ʒҭ  B}A~ԀL|W0F(f4w6;Domϋ&og"dFrOv WBT/N|ք"iv>B. tLQfJunw6LCfA (֖ wiQ oV=nKA\b߶}l[6:6:o~^CGQFJBיY78-60RLvepK0I/YlJϔ`v6o}K"[) 92Cy\jͪs]u!tS-hǘ!fFh}ͬeYQz 5}*<Z}wL#JW"+ogߍK~ |b쉉5H(v\)$ nC[1}xjT,h0@fS{jIbqqE}SP8#Ӣ*mo݄°ۖ7Gy*Z`L h8/ f.-()"Ape\DQ$L=2k"\+fLWCh;wJ42&38;BI„YM p$UOʵUPOGͭO!aGۉeKw1ee f 2S8Y/+c.$5g:. 8^)^o>bgP6컚*^  u/iLo*=M1p>L@ bd'(xSoƸK|a b)6fVUPBT,gS!Imish:DT(>/)|'I .codžd T J -$" 7kT[uTZ* 6UH]sH'5]V̖[?}U[us4&79(יWMe t[}~4Y<3 V ?LUIڨ8bJ[j#cOEO+@8,LW֦&6V39THC ]*Q! qQJXmDjZ2$wcE5c ƌ~gקL`1`DX{U/ L3ʛV~UF:xbO.hBPC@Rd)gIarOxݓ;1АׂdnENȾ'gzY~ߛsrPV|?J߃o|(XXd kq cБ}4+W8[|J f._d( jE}LGr})G5V)7@iZ.ZY-gJtZ1Hg'&{y{9DZ{I(!A<U_JpO тgz:zY>DzеZ}l'1zcdXT>Bo%04g.OZ<ߝ9xcmb wNFSvҨERe&P+p8{W)'b[ b8E۠Y3X@g/?WCgݛ?ϵYZa)?M.$&|Vtd4敘B1#bt3;|uv?b}K?cuu@_, (;{| IК۴0\8Z ׏GT; ;q.NnW_#Xň\;ͼG?k E*cKt~V -5#e{j"mUi6{pϏLfc4!!A"P@ ԰E;Kea.X.RrD1ѕJV=FU_SXOy{Q]8 _vr6C+r~no#8P7$fȒ4-Og^T׶wJřU76H%0T_S]k=:MG IsuxN0ղX2&J:U_"gԯԻnAE ʔkDT)~~ӳq_uXr;|uS%+!{rHӞrHEĸ5>۬8h2Em/> PhM{nB.rpyn2'x0365?R/QVJFl歷-~K>lhj_aW-lE2]^E3 !~p;J"%f=d4#驐]1%+ [!?gZUkQG㿅FUR" ]p۟oSDiOy7Dp/ŭaoR0`5]OU5A[ bs0c}ɷ[I FVaS\3Iƙ 0b o2r{&[T 1<o-MRP*v.ac)?vgNXD¾"lj$P``0 ֦ K~V^3F1 DYYSUj+>""KһM:+fd!+MB Vg+,Q\__BwA~Mzfl} <ƖR?3|cIs P]C*Τ_ߥ^MHH&-#6}RꥍOC$ B ~M^EDOі#^dzr[1k2fưm.EYJ-63~ ӱ,yp_,(+$C ȳ-b& nG7EF-kC"79H>,ʶT!2 ЍUTcAȤ4A0c(;Jeޘ VX~^ae5YgCS$x5`Yd0в|젩E[GlꡞO0@:E[5T飥m^փ} Ї삶!D,Fՙa{k't^ΞgʣC9y"Њ8[[{l*#3\=Msݍ:koѿL^jm/u  H6glf)!R^7Buf@RP6x`ZXE(H (EUB$ עB1j&3uQg+4+z ֣p(XPlfۭ($&-bVx睹gZ1A@ NXld fΟ'kV06B`nqYH_}/;iZ&Pddؒ#(BU4"OoSa:iRkR~bEi}h q&[nHKx dX9x(#VG%7@"4.TH>_ĎT c˱X*EcIT;]wd$& +'{4VCvytB)LږrO $\*swNmp:3B?ʜƔ/ʉ> Vq@4 ~]*>$b1mqaei1H"u1Ož,jVGT9Dtzm=JHƓg(fLNra]'4twoj _<4M/c[2m迟r[q0'?I˅_{*b KHKdqgڬDꭍr'PJC%Ծ0ge9?Nb>k.Idr- IXl1QȴN\ ZFϠk|jg_2q}P|Ҕ1 JތCFF`-Ɍp Iqjh(-<<>͈чv;(hliJ*4%ԼgiUVh=٣kj`RlR5t] XM&5OPRsb8Jy1쨷ەIWbϬы~Od3EH)*V|-ʧ\?!oCȘ9A4ݪb@qdb<.p?u '[ R1ZoFK+ֲr0tIPSpdD1q HBqɮ"qrNSmPGA㚵ԧjܶ'O} ؔ>6;Q`󼕽JMp5fQAfp[^ 9c+enm&EAU @Iʬ8kݞ;]-@ouMi򚒹\Y#U J=)QeTmEN^0kYIj;Eaٛ`U5X c@17 f"(x$% *'s6ʞevr ]/+YXiJ 71%ʸ y}2vә_UZWWGVm[ XjfzV2Dd71ЩuyW%w5vUaæ=qDWY|jBWnحg]GoLTʣ$r9?\\ۖ8ײ+/#w@Lz#/R9ha|b@h 3̧J+L"$&ӰӵQ ^&*tk& 1bm6ܒ5hޏF-_-&߯)C k~Jؖ0Aha|`Z|kI^jF \'ݔE9r>ϺZAPVKmM lB?/yAyT\`3QS = X" !` Wn=??5+m}qq+WGHE@R /f >Ɛ3PXewen3u>HRڧWS-^iaޘae~\=ט<#U9Iª+Zh~wQvrAr>cqxt%J.##̰ "/$I#A콖U8_MwvZhT&d@@d@G݆-6eK-&I\);#çJp$C(_Q_$?d׆|u5TC%Vַ,re G6jTE}q=.1%8fzvF%$'M\Z>F =*'AS5Dv<렐pY~5 (f4m71Z_Z'$S$}$#y>v;9{F8.}ZsҌ ƌc R2Ȍz0%SԀ,P}Vڙd᭤4\#Hh9rK Bd0{c^kA$ w~#U?)DjMuӻh'QH" q" HE*m=0_ɭꚏÉhq6xj7o>}9ߥ|{gp9kY#+*Qcֺ5kO/znSYGvfB?C:2k!lɚJ:_Oq<%P%µ >K-xsQcc=Q . Jc !6wvCp%GGu()`(B~߻%Km"9KWddPj1x3ZY^8Ud2H&IHYSdYU:f9lQ1$9,|:^ wM 5K "c-ek9-}AaʄoGBXdHDAGm(+4[ੜ(0&UIBx1C5@a=VץIfv _Sݷ0Bkna/U xKa硈(D$5klGimjdsEsDB5shD[Q:YoN®,8:՝0p0ns@J= Hr֨5ވJi(F]|?֚, s$i yH[z. Xer֌_b0 IQt=L| Q`R'g[Ձ%waŮqiۊ;kRz x:Qutuƫ遌7uu׻VZwZOFH0!`zIr&U=f. )MuII$`vZP}oS5;c$g[]2 -CZ0BXJ@(q!B" 7Ү\ e7t,z.}ܝB,f問ҘU= liDݭ$$*7yֆ0M *Ȉ5jTXad qd,".hw2q.˪#;ha7 L6IqV4پ;~]`(c, W/9kWiX,Ip&{ai;PXNV/P٢^%dXtW` 9 ^F|IV|`Im嬕ҭA[)fmuKO9b"quu)ԏ6(RN[96,`o3Aŝb+9{E幻ql HEf9a BhȻ[|EK5Ȩ6^SfRY,kȳ8+/b1Qə). A Ҩ5H`wU3kW4z+ܗ=Us^g Ir| #9RY}\6[ LΑ}u# CR-l۞Z'0T\H2z4/(p;kF3s"H[I<7ǁ=$QB _VORͻX'Maί iMz(E0 ~=[|\\4gѦeƾ\zVفegj͔n!d{QiI3 z) "1: &TBCӛc@ x A`w˛OCwiyX: R˵/:ʎ^cVQч#Z>,WkvK(P0wҖaVmZaDm6#iFB T͐e$lgPQI84{} YWuFCFb][2#$fw)<Νy<i? X-ТQbggsY6Ycwg-fzX8]v|Wz4rLoZ s-@I(H*[$SlC2V|tVާ-\z璬K"Bos(AXNbĬ2bm-K*@@DD]N?CW7jR9zpʳ.X>8ݠ1n8[7n*ȔɁ/f/ۓAVZVgMwgl?=ҿpwddDC:֥_ݷuz;XGeekEqZP3{j2ZW+>-eW00ݮtRv e@ױ pzsh YH"&Y{(`L~f yDWHjfY5rDZ s&#[@8q_`+] K.UV=!Y(ҶIgJR7]OpdJ> Yޛ=k` }tcM[:t6b IjB,W=+SQUfg{1+$ 9aEe^ 2qm`VBE†ae+Fd 71vߦȩ,XA`gGV\)uvi$Z5xe$QyGsԦxp3GHv]n<A7cvs - ˍV{uY5oh[z -I!/s[1@l bce!-'Z=)ói< 1͈۩D*=P| Z9.+Aa1NUXok2瀬O=2%I׎P`qe9 ~\P .cb4"aki/%O 7Z?P9RЀxJ'd={\1e^bLjiIJ'Hnf(C+5[h6PлL_ƞ_^40Ɵ[#d# 2\p,HqSwR54{7A6*^=G2D"_ CŦOlMRyO/_=%n:J3S}W,. 04(38Abгvhs㎥({s{N'H-$EL(T@@P >+SQq$4C4cɸ_.Z'\q'=ro:W%vAV B$(iIӠ<( Ar5z^QSD:{gY]M]7FE2*WƈmC(㒼wӖ3gvCf*PW[T7&JYE0yrKK~>%obh</0i򷟳}q%KZ܋L͑1SvLVnذ;* BVވ,T_E81^gW( Fg r@۱M fxCX/ P^DIˑyMCOR-dFJتʊ-]a.(ENA w+aqwUԧr5R|t0Ę2-Ҩpz[T^a13ծf`~7؅m0uV l ~:exxI4 zgPf)t}4n-Ydă'EPφ.dVEN`EُbE4 WyHġ,L=Ђ;n3f{Hk䁈ֈwutۉy>hIIWt]^îdgZ Tb4bd U`F.R^ tGlV4Y鬥֔^b5_3DR0qfX|-0U\N[P[J ,1Ή.l,-zvL|lʃuPi+}pm JYXd޾4]W@ #}#n>Z|tAGţ~Ės/v6gƴB Fm*1q_jX=Xﳔ?̜?H]'HvyǁՒp240'} VJfҴԠD(+ [d:l7Y6L&sbqf7_r#2cL=:%j!QmG#r JE\K%`R@_danLMB:+XroH$zJOrՠfVX`$JҼ!,O ;:8!"j% &B2dvv")8UZjgez0Id4;Sn-6mv5y sTbnplsvXFS&$ir̚IR%R_ M0$ Xfٝ^PlF"5:>RFJo Rr.8kX0惔[ƒOgh%ޭATD]l96hxؒ"{vMO&2p&hAe"`̔pn7#rbxte=35,e}3F@ EJ|ikŅazA֘6 Wy.tx(}Nrf?' a"umP,>BLO"0u[y.-8k]/{B-;}DK;XmBSFn|/{Qۭɡr0<>vKAlYf=DYƟܶi`PHu8>,b\޶ -S;\m{CL\""VxfwK)]'u5cY% r%XEo,f٤sgN|k錢I,Sxx &D3 0Q#`Ƀ${%BkWoTsJ0igUDY=yvB臗ӯ[,OSJKuUܥEǁ.LI}IZ+I"q:yC3LRc]#+%VGDvc̏U2ܥjXs477 Doo@լ&wAL߭"uL2 :d,M,>]M'7sm׼N+[w[#/,)ĽU)[ V#fC0Ql:!ӿHG%ep2 01ILz qR`IA Es}3^,1%d icQSʢkcPȞbZfAKpF /AQ J-paX@5$mH'YI4ÊiU>JڛJjX^-bRɴ&֗N> '*SPB +Q3S0k "VϊdOY/K8TFr糉cfFs K eH1TF:-Esq H$p bU~m@FJ"Ih%NE(2̬HQ*QA:^V'_7V9|=S{3v{Ǖ8IdϪ,+5dEr>2.:S+Gh507 "E4aeC*N0N .!Z^fzKpu"af qN %o޴PF{F b"! @xmK-ך8,W5ðxYWVfxHP=yDҹj0^PC(Xq5 Jg__`!ѭ8 >rUAeq-baN1QjY-i&,yD@ ƚo}Y+C>ukJbyf~ ^ܜ0#g^ٴÄlKMQq ̫J"d9sL%@,qý1>mQ*DQB0XEXTS\( #".zEDS:)RED1 x;o<7S/DxA5=vb. 8)H"ݘ.J v̈́}"jt-Nw| x[*$辍r"/0CN USm@/UEHpP]Xkc2N)c :ۮUq-]1[kLkKe|(;YjBW;",wyzVA,.bC}FˆVb$\cb̦D\y)Z . &Q&wXc7Dl)bە{bH1FRB \.]lYzȖb쐊zRgx< m`pmCRsI2ԥZ=@ clm&VDjDh=zJ]:]-$.| kA'-j9H[c5)hpye9I{4hjE(n8))lp]m9ib{ev˗6&nnÒ/y}F,ٺᣵ)tz fqb,/lV!8o/g`C0j{ێ $]6# ,&o\:w4cIJ"40 ڲYPUg.\Vaɛ> ŬQ! exe\Ǥ)v(Χ+@`-<)-zJTbYuۻo)GEsIu #Hs3&.R=e#rűRESt̔|3'E#vH:^vhg7Gm0rL|qq@]ec0Vo/^>&B+"WYʤ\4/d5g;Och̸̅ PC:r^1wMl0InkrVXm?"ۋ.  W*ry  L ) eʽ MVQwfFБ1T뾼Rv죣DDxOelTqr0)gB}G͹EϧM٦Km? .XɐZLG{16bxnɉb J[HFY .L+Aֆ}3Z+eU-YA;{ld$c"ɛw b p5ny-  jã8)e0As oe;`0cuIBSLYTUpQ4MP$ŷȸ ހ#AjdT @<]:l2<o@& ds$̑B!$,2SC9"ȩ3in_eYj6!Ӌ89Y$ob9{u 0Znbi%keD  `dPrZ^(p ,XQ`2CG GPe T W2PyuSm{P:yW=˖nNjЍ2%M1Vu !ڈL~' کd  KvAJP` cm&(z;BQ۫Mnŝ"uڻzqee^cMs*GzpAXdQ[CiUoZב6Wm+piwBs&3_x476'X|%ۗ3~lEu(bfdQJ^|f2o6Ȝ WX{:݀tG^,m5D C[8ZsZcUnCiadI{sl@KkF #Y  v{߁]t5r[1vF1Q R߯L=QYx _Ზ* E>'v;B.Kx,r$@nt*8捩t6/V;XD3, PoBwq';-NIU+,xkZ؏ngk4dF^i8f0n 5$}T< EiƱ[ȦQac8qyyئB5}ZM}{Oil֭rOP{ [tw!׻Mڣy8/ah(c~l_8s f Wd*Q_VR]0.8V3l 6?[7nb c~N@bQH3ZNJ nwk3s &(a9Ⱦ]zm[[dKCLV \2wי̭~^6 @ER~)x˕ %(AZ c"a7\M9΋_Ux[kl평n]B{r7rg&ZR\ȝ9Nn_7jnO^JvԵRς)J7 )IB>=X.&$+O5g=sk~DLa~<}f1(?#NXzKIy 95Lkʶ16ǠQ&L[ mhPs ydl6ulM9RL׽Dw䁫!i ^|ܰd8zd3R5MR@{Ś$ZLhƒr,F>uUZk,&3"fkVf~YaWc(,w.(71t:NfכVfG26]ՆV{pczZ[bNTs..zgkvV$~ i:[50n}W}r-"+<ڰhI Tvz\^r'[7nZ\te^NyLm# of 6;R!d6߂ &-6,+5ҥrssgfDk d 0d`D _<&w&7Ln1m-0rw| Mkr0(u=ĊMlDc, M kƅHNq3x+sw?g?={ye.ΉK-d"|Vh:'av]E9̹28azt[N>;磉Ԋ[i"9<@y,fQۮ0%o\O2z_]px!щ4Z׏G-Mw$ؿu0˟64b8+iUid ;QJ S WF"/ m4" ֨{0*<-3u>DB{3! 9bi8ehl 5e#)hPh%FWz9Z\[ϲލuxWU=]WFZw^!CbұijYZX7ao$1'   ΩBR")l[H K^Z ]aq@Xlt|/n͸FWzBi *AݛP֭HIhTAbP+J2=ZL Uyg!F18V#yraM"<`.FJ-:Jei/"0`tVoGw!}FTIܲˆ)IO);"abZw9^J'ǕK 9b~Mvtf5XD䦀l_ 2u_⨦H؁md"Ȕc2XfejeA-<@="EeƓ6tw㋪v N ӑhͭ: ' d_V %#"S0zp/ޜ9diJݎLW,7;ɋrq^nu-jC(w<|ΌM-jҌN(R6iK 1̥&[ZAT #)?DD=sU>bVN &.n^w,J_f͋קGdq 368GNF!dwQ`DDJ$e}&2tV8&X@;~2 -4,> Yi`[4ƾ's]q.mY[jeidބEcWˤ8Nb8->?cROF^ڲރ^]"%o0r;IFDс.yjP )B<%&6ܑqZW½mk41 lvWNmυfL BBp7-cfF3[xLɦdTEK}MƲ-4)%!c6覣qֵND=Yn2z<+-8bg^4X KyWsxs 1L7S@\x|G+`4*$2Z59gnȆs^YD"S,ZhbCtwlќ%c!HHkxraZP)?=^t~ $0dt"k-U (BB%>ȅaZr< $ 6:G9PFj,9fhƒ;i!M#w75rQs_9*ڳ@ވY4JO ^62@HQ_aEps =y m15.(nzXe Gg94sqW2 cmj/L) ZZ =Ka13 D@B5w\!AslGC.qO&LC>ʙ`zwcB6J KKOԬuO\_!0MKB$ ڰ@bfTKO59O.R|_RAPkƵY ڍĥW%Wݹ$ݧ{܎ oe?F#-:7i^vc3F[٨ kH<"]).v&yfeycI @,q$Xvå_4[<*HM{Ɂ^v!;]A x%G^]zBV_M/16{+tRIAe=[}:6#:@ gϡh" SuM20~P =o^_|z~ o>jޫr3V=RVM|7S $O(=*1 ޓ!͏8S3?\Z؃^Ꞅ={tK%~pqh,( x^nX=HFκ<)8Av@C#8JOw͎=Xby7ifKTA7KɟǜỶgy X~}y5 xaL! MՖx>[[&]U$ae:jPBiXGGyƢܫl@9WӾJ]Θ,YZSZ Mo1HfFjŠ-XĘY.]-8 T!fܣ]xo`lzzjjRq_ׅD`UJ3 ?HM d*M%2}* ]M7v}9/Mwwۇ.2"uoYpKhj[7R`}xD91W0X3GŅ+86^\u J( )38 D3Մ:/nH̞BefR`rZ+ Չ.OW PC[i@~]mm蓬ss)5a/!}㞘c@ȌfPV;Mn7BkbjIuԙdTI|*w~"OY]Ra^M_~`:&:Z+XwٝƍG^GCRUn@,.HME)AY^ObG QQ`|Ak@(!i3- Y!=S` :r~ӛ O4$1 \W=|N](5ugrc(* ֋6e4ߐNH\[5)HACyqAC[(SymyT0C'y!!C|N|~]?ON]w)eCѸ~Е/y6T3헋{Gr̒q040t\qlSbb0Kԡ`库xS)b|$;ǒ,Y&o]&fVcb~.m3'Gչ# E@0\ֆAhۑ+gtYFz2GCfSlFgs|'`z2i;{żX +"\K} k8Xs?aoa aӡl¯".Ds9WW 3ы7QU&r l\͉k $XhqJV\J9NsrTӠP4MkKkCN!r|x.D.߱-&`iU}K"4'(}l("10X!5],hsr!oR,# 8`OaO`5e2K'8Zqߜ1ƹAq8+tI8@¤od aw[w&aVKrJ۔K(mj|Ǎk|xW[݁#ڞ&Dm+O}L UudVHT:‹tb4@LHmPPEB~*\r%ŠFAR{h50솗!Wq! PJmYkE)\8z+1xH:Z7){S۔J8fk`\%\\fY!?SF[h17Fb/%!U(k Z i,qDUTHoW ^?~ƶnʼn{9,.Dnt6>O(8e}B?_׶)qޛ}7-4˰#X٬ / 9JfԐW۶҅g/O6kRVe>$9A#KS_Ucd-L8F"E|_kuG/ ֵOY" X]q4Se0Zɢ絪ylsZAXƆq&9MsͰkB nӦ٠/YleyS"2.3 %\fi;,2R~E=DZ_W˥Ꟊاk?RJP+6P9,G;,ahͱv`))&_'kMk֒nr,݌ pj7]ςzczZ$BBJ-Է+C4Lϛ3DVJZ%(qXC_cYXX  0/drµ@ڹaC[Pq~"CC R,uSx$֘DRI#l+"VYtBụbaCD0@)!th_=4$6ml{Y߯MKlNK=vSf3vIw ԞZQ$UMW-b^Fq 7V]LW&C0ʖnu4!d1tv=YzAac-q?pVL"wQ:աv9ji?omp(LSwwntklp$^H^siꛖ7#q0g= j"TXcfq*h]$1~ںY0ƼlɆ*l׹F~[SH5ZP4$ՎnL[eR slD h~oyT %[K@s`Nf!wQ@FYH~93nj-U)l e^-%agM&' 5A&yB yww>/*w?ؐ >xnSm+[q 58L*.J @f$DG0D=8&{wξŚqsx,s1ݺ0GE4h.J.7ߤ%- K|9.7k !qiE䎜bpML :s- I@SHBF % Q^Q)֖ FC)GCC0ߤ UAܷIX:L1aK ʡR%HY^0B`%҂Pu,օ CGUb6HRH/@*eDڂ &lQ R| IX$Y1Ә(t} ]0I 0IL/DH͉i+PCv dD* ⁳Ej"6 ILf`w^( hC ݢb&K3ۢ(@: PC )E[U*&lCoDl2 yHz@Mv#~"r*T `B #hPE2 f"BqAUɈ(P@D;H9Y2`$8ب6ߊT dDGEKLx BХpVq@' |8rڭ9dΊ9d)'U@:ެV̿j_my\3ћs-Κ:p.^z9_Z,2^fw;~?39ek~/j~K|QW}EYY*(V߆&; 9XzULۮ}M9[GV,O[g{Z oW.(N@"':#)nrwhSaLy4Ziĸv5ۯ㹮/i)A=mBKrAOd3`$:Uy?ryˋ~7E?Wyc6Zk{uSivWS"63>Rg%J8.l+bw=T< im[~PUx(=yOw9pCͽǵR*:l~YBRts];tRЀB@>A( Q?[{/5-oœg^z l,*ab "$6H= MNlON0c5PI$Tp\UM"H"C.[L櫌#BaBBǠo:|7LHSĈ7^g;OwU۸-G@ q}gə$_FޑT[CSx@-Cyi3i:=̯]0ʢ S!aoc q/q}H4=7B9 ŀ _!cu9=f]=n훹{V۷f)R(DA:H*8TDsℜ!_&q V#mٿh}+}LF 9I $ jB+ZiQHBG7hxv!c" zw8|>R*!A2EVsxr;^MH*.JBvG;vaZkۖϖl`7-혹^J^ F\Ӧ5!@)];+ZJ >1S*vnP@n+CKgt q+(PURHF t[ϒ" Ln>eEC}Mݶ^F2Dn ȡϯu65)g.M^Na䠊< (㼷}/ɾ(dnMǫwyQD9,6J srUfH]UT$7]D⺎=fB,*I P*8m/2Gvн *C^sd Wf;6ۛy'7r=dŮW/[kO?d PnIjgPEQ f^;Mؔ ?=wlw}2?m 7tz5Ust g&?t3rSNk3 ȬJ@ .g㬼TOt*A@v]nQDP1Otk?jL~Wϯ ~7K>7-8o*;ʜ6AQ=MD=+=K^}3?0$YJ(>\Rf4Q&$H=}BIR۾O7-^9G^w7s~V > q-ew[oyT*cDŽjmQ=;u`OcY>!EENj8ͳ|no ]!Ȅ H+ HW9uo^%t߯c z.58˯ow@'ž}'@"|\^nߗ<#2@TC+_s{c cΫyq@ ?砘&F͈N;dc~A9Hb3K@HJH"z^:GqY9o/\vZ.~ }m&t8(h"8(^whӔPUf{o9D~ϗcj> &2Ac B$)Stlx|,6,Og;>;j*l߉oEArulj](LN&o9;}=h {}"i}DpƊ/z鷌eW9G1tZ]KyD\zS/Ra6T0#@yl;6߉ٷ*=?vsҫ"+W{q@Ny緫/t t2ykl`ENc&FA=l?*x«z36vN!J|+W~GΟ*4L' BJJUT9[Js=C E Rȫ("?kz[ILS*p~ Mt<ƿ9y,O[=2صoOC{r9:٩|z~"d0t`TJVBNGA P9o\א_wy~bMƃa~ Amx| v!"9SiF"Lx/{ScEnܥ?*"H)=Ɵ3QfЫ z Ng l7?v!~t^v|~fWn[lopZ02 *T*R0yD#ty_KZ"#u>[\zg$8h!W A!goz~~O;e! .=&o(499!t#*A2{xnjy.!1]lB w(a|d^$ hBS\[WyyO/xtc~ppQW7k߬y.b00A*Typ/ t^j6XJ D;Xqrox~ QS{̮&/_;<3;6Z|,8_;p9PlTx'kÏ=8٫fT\2_wE1{|ϕoM7w63o~>iĮup/sƲ/z mwOѫ~=4EC *$h{`hzT*P! *';QAqz #^T컾Wp7 <:#~+_#E(]vV` 8uׁa2$N\LGy3OG~,8`z;7{5}/_ )($x0í{S^kq }qv=W% 2J]|#U(CR٪ZQE1}zF"0  猈AH@]vЁ!))A1&tb_L,@m7T?VӯLTRs`n R.txn^L@ɺPNY)9tL m&%|nnK. )3awòxMp-;E\.]g5 !W s) >E]:F_KOݸ"ki?eS{>zᙾO;t{WWk8j@TS!*u#èNp8g#!iu~6CI$lfT|m-"5GqV$s 3 3<{uM$i/짼P1#+obti4SBŷ;A+=)oe dQb~[l9LUu)7=IJTZa2?-z]g߿l'bټ509_R7ZV/!4m!k>ﵩ>`Usf=  |>")JBńfzE$ܥ!ՠ}U~eNcx觍THu?+ofydvp$(Oe537Nߧ~7g+JHHB-xo2ZkM萀CNDX9oQ t--V}59R[.v<;9׮1])G<~5Kr]{eq|F䝥& .VrZ H? Ioo*b(CDjJMԆ-F9$˾Q9*_]\M(Vټ5DS_ښl/X c5-0c[7jHnQn"[ߪı3{ia٥@@0ucmYd|B<.iwݱ3Z&Pȿmuid2T s]/|p7+3N]^z-`୪,;ƑL &@ cXw+?)7USauH(=]!g{{A%!B j_6HJYsީI@e J -k[ӥ3rRoD ~o !vNӬ LLj ]S>^WZvfH+q*ճ!xZ~T2-]3([gsBt >/bRUE):+qpig78@S)bAIrFw\_{͆jyzz|6!a]AȤMqOO;%;Ndn>(˖/VԸ>Ϡܫ;p| Vf[RCNYd$' sBn*U{QiRNPM%ٔRk/9qpY_%BGxDIXh߻?= ^&R霪}Rz+ni480\p:+~qd&ql1ڷkSc2G6۰]Ch碋+ADtAw_w|'O F}Y+|yt? +4)9_(9~Xɟ[ 6] YTqBP*WEdN{]-Ʈvm${e8oxj[?a9.f *L1QMs< a$݃>X}êS|=7tB5.jnϒb mBd?/1 AɫSJt/#=Eʘ$əP~O`DfQ6VcUNxޢE|.|mx&:AtMm2:%A9WaԓS'__K-U}K1`e#!E!л}_qBYqM`;cX.v˘[$kI];:(X~D0x?RGru- OR!D힯%HQa'^O%V jQ[u&%Z}ϑ|?IH7qЉmzTuY 2@],)_kms!"!h]Z &*(.DIR@uBz M=oh1!C&;5 9m/:H$1T+ һ lj!A؇L;L-+el1@tEbC'< TP&L!}d1IwC6Y0H&oqQz.^pQP A $B̋ *)blIIΒH$Rp{fPgL1heEdTP6%3H.h 곊 EH,PظP%L 砪.d́j.(! h eV+Q T f dHBHs$@ɆԔd2ْhpa$ljEڙ{& ":K! HcނI!s$B.'z y:B$FEQF"*) #2ZDb :t@CbQ` !@QEPL(H@t?̙跣J)i 0DAg-8!*ʊbL1401dʨW=@0@k 1nIdPB’9ae,U eRcl~Օo0FSA ,6$\!)1Mh! 蹹$%KqKdЖH]2!RI5jdȭ[~>U4QEAL^N pEJF4N`1ɳ) D1DPLx 2  4^АI BLޣu҄Sª5)z)!!rS&ڸm $Тp$ Cv,sC Q70$ Ͷѩ]I FbkAd I$0 ]%'#Hr!! `i$hC6CbK*"#Mo.( FD!dT * }6nBCs2f(gUB)%0X%@3Do註EZ"PM_bT-zETΌY Vt\(1I'5 3#~J[.*8̙V6@mqTN'I4`к`Xa 650!v`:js@WU&lP:&Tod.,7(lĚ9kn*3P+*IƄhG] ^]*I d 4o$^[܀toHmCi]աRo`XTRd:Xi4vZG}I0\+eH,NMfOHB̙î n l -Ex[6%t͇Xs$ eT.S $ [ҘK0dԐjI6:oY1cD&I!\ҚI!0C&:ۅIxPTVdUY6UfHATX,n@@&oC! I \Lna VbIn4lu,Cʪ``C<;jC4D]4$ڇE'!'m1uM RȲ@RAʥWBI8W 8T͗L:HE@)ĘSM0rMHjCv $blaPdt h-$ѦRQPXbȈ EbMR07Z*ܵth(6E}%nl8hP ,L ݍ 4WtnZXhp3^1 fBSFk.\Z30Bt %TJ2Ĩ3C!:dxh* r8x/|P3IȐs4DԛIldCfJ6`pMKaAMaa !5lyY$ɚn6@ɓt 9 etCz`( \^BYCCg:*C 0Յ!FbI63$.P1KT!mLY$N6!0 jׅL3bY̒K+ ՙd$ИމIѝ@% 4k&2CMp0ƒtSf%C7 .m:b>$)d"XB"`H" ¡,#y>ߗ۹`NtX"0F($H*H!"SP2ER :b&!l&I]@?~?~zR`-i?̄'ib,x.M;'d8ֺj1V6ևn"Ia[tż9uIݫ@Yyhdde#l{ԄYš3ZdҚ:XE L0ʯd &oEО4j! :l;/E߲ D[,IP&w6 Й:,)4*z.RUT$%$) 5ڶؘ%!eTo[ 3-M6aHAU%0 AE(68lgP dY$Im6[Uu`!) IbP@dYrM8J#MZ~-~{kXu6W:87HCõޟh_jꄙ'UYی }|^g}ɻ|B@x5\-w& f4e0e0X@)I) o Ɣ*ytͶUab+m$-x9DҺ?P2"Im5Yt~GE{<*Q@ "]C!1J-'f, E"riAD-bֶ`dCCF_/eb9+c9%,P`iF2A9L̈+uHٮBiiT7#񅫧Uׯ\lM5 ̓P|G?5dCB,%M~?5wKe04Mf͗rTq_&L֬gg ֹ"YP +䵊h!{vYqxQb :,}}?x3ے> -]ʅ~ț~nje-15q%1)s[.Hg'>nBDzVWV^N ;igRJzԨvHXX@PE  R 9Q:E1".0˷ 2& &n{2I`W2%) zR6nОDer]Q5Jc ic7݌9bz3Q5䡯Sїn},q+q =!jHec=?Ku,jERngYEZf9ۗ,ZX VW{C8"kLޞ^a3Ji*8b f#lS2Y-)͉9I2M9 l'R䄤X8LE Vߧ*//oy{ۯ<_Y],):p$ܳfz3` u0Qu :N1l+BȆ!l=5'Ξ&׸,սo繿7.$IQ:rxSŘ1봮!>r3qD2ʸoed9fnBq< ( J"9)ܖC/\ p&XNnK Gm֗Ͷ{[z1:2/siufx[B]IQƋ˺kMKgmWR-IklZZ!r8-̽&gg*+*͊)҈ @sdRo L0j^,[SA!r>aM;KF`.ϕhvkqέynmU q !(DM&4jU1-^¶.Apk>'b}ĆRe]VrJ o h|~*-bNjKff`}I!€} ^'0vZc-c |}Ŗi}sƔϭY0}:ƙ)E߃ [ٖI:ǧf\%hCINDҀn٧})0~K >f3_v2YurSV_Q4"v 5B*8_ t7riŇnkBz@!5$ soCYsG'c\eKJQ-,đ0!*T)r˗Fe6dת& *rChgsi#}ﲷhе|R2Rv~yf/MWNhePqG7_IÛ. 7;dk]9ϿѦaӰۋ/A%5"Z(ƕ 6,=-&jutn]9m.IY-&\bTU CQ& L 碼)ݿoIYU@y(DAPA@ˊ \@*YLII 93NB~F]Ry&ˑ񷇓bX(*dJPPtT̀ ") ɮ0٘y22.H\:eOH Bp! (g W-_Tj-=ܥۋ[:qse`f2HHzdɩ3cϼZ@4@2 0 *hf9 dhO>,Yg/iz@EvR ] ޸>pàkpe)I @ lLo{h{]v^`b +L|Fk4sl;42;oD I =˫Ṕ ϓgN R T7=9p2&)sR^Ob(( W1y,|l KI< !;nϘt@PMnڝ>הQCz@ BXAT ;tsL_M jʶ/u=n{N s (n0w-Fe n^ i hANmPAP8(`i*(=$:&p(@q72Ԛ8) oy D ̰v{(ֆPl5, b]:hQ E\Hfuu #@ QmȇO P7X'!H]*'QzH i"OtAQ$SaP" 2I. ] y%w->P X;~PE"`n DP 5G*2*yؕ$V@Ĵ q../t M*4pn*0Gh)U` ~+ ipjL@\h aބbDGn? ~}AQ@Dj)c?e@:O‰ [OadD6s0"#"^'D`D 0GZE@GD6h@0.\<H*&*y. *!@0mu@>By"GeKQ)hZ4 pChmDF}+EA%P0DEO @DmW9w4+DEB DOwSTߠp0u-&.H$u*f)t0T~ Dp@ @4d?47uq%- `e*'!z(&)-Vm)^C:1y:?*i .( .Ȋx@b7+ Zw@/Dn J`*"ވ'ӃPoqD_' hrex?GhNZR/3۠D0Ge^;Q&CEF@sQŴG@xOdK{+"''0G+ch x (qp.>r+h:) Q6& 䦴"`xZ1A;EЗlB0.J A̎9h[gDžC P`DCȈCR>,34Ԇb&(ȅDb)~ ~8~|,R$z)OBD<AKEWIƒhăh0 b P|('^Mׂk3(?lMf_]8!"_?DWJm1_z<)AO.BF!җEpP/a 1jƃtQ\̌k6n!)I0gؠ~N.˲R3CAC @}$61Q0A9vx5khK(w~#OgkO5zS69<#馿;xw^ D͙q0GM Q\(iapdX2 1>|9P'"8&M >,RT E+oM6h^e_7yLNJ$tHBq(p47]7D n^/r~ʓ[oD;6j3(@B8R<YjA/(6ي*fkd)ѻ_=ӻ̂cE+/uMn "ly; Uxݛȿ'sCK9FhW6`0Iqv'Js40. xC99e7 7r7- 1z9o^6Mzc\xU0 ti8MmyM*Iۚ^au\ع%T }p@`(8)V JT A_n!m.v[о58c9+Z/n_~[fi |ܸz3'̜,x^P8 gsU٨mם 1SMVٰ{fFer $TQuxXLvSYB 34˶Ŗ]`<1>cTL=w[ ŧ{eFMTvȶLz4_2D4i@]t^fvJd$TUu @RHaC>={rN BpwׂH;೗[c8fb1X}ɗ%vEMsLT0,  ]nHSNiqhe2QAqH,Xtr,9ےwLhewVweb 7vZS<slg{+QYv Ldlr?6YxzP$]Z5~Go9FEP޹0`7Mf+vureU- N^}w=eӌZ`"=MLU'U{L٩n4{7^( hbD,%g | 3V.#Ȑ7{,81l˓Cvݦ8J+va,aH[Ʒڌ4gM~ʸ6pb#(jcW#H[L?_[W㙕onrn[K%ǀ{ Y}=pi\IhX;mضmb'}aΚJ1N% vk-y 5&m_'q,EN&D@,@I ҙޥvf76w.[]o[P^Do<̻7g=Iv^*}D 5YK~ ݫ6F1t@0[2zGG /{v4(nqTi_Jó$bi)-f ku {~`I% +">?_A&ȩ# bjSTaReĊ@8.9+H0:pj1u{^nT0O)Zv7?:O=gE)q"@]m7\ދ_P7xT d)C_L^{!!id[PRn^r<[܇a(p=(%lMoiXDQEAi<ٮ`f횏s5CO!qT3E2yIfBrd;\V"Fܮǁs=BюOJmcܡ! ¢g} QJRm/鸟7?OoƊ0d 0"1}@37W>h _1zU" 6sMdt^2clߋz~>۴Pe^wWcXN3dTScsk?|(^X+vߘJ(# _'%?)80 !:X"E?#DESYv5-ژb7$kSC*I/b@EC{6(-LS#iFU0N!rMSK$?m˜AU u=~ĂRB.Yckb@w<^ taGMs QҡB5T!7( ]1^\@"ϧrp2AN,$HNDބTBEr:9O&  s鏐Fդxz`! R fwhY!kBSYZ ?77~`v,匤L ;9f*(E3S`6\SJNUkD&%]Q@٠[#%_9M,d-K}LːoVNJg0Lr$+CKڎ!rzoPIBAbEfݣ V\21H*([$f@Z̅M&F5&R5d+"`we!r:dΦK᜷ l0TeCv6 pq6ζ?﷟]CogUmcW/ PFBM(&P4,רM7GǬ'"\A `h}p2(Az$;Gf)eɢT cK@:C>?v!+_n2qtm]gBUu&RDlV'QS &Q i@=|CdEL!CTz$"HJlt#d_`gV r ^)B${<Ɵ^_L>2BPX {ݶnѭ:.…1"fn ,Z!$ -ra{k+4֐D=,Z*; TM, 5!F,2 l8 cPVOXB@a KBai 0DQEsRٻl)j r4^*>ȷg6}gF[֊ O>&mӟ7 ۜC ^ C] 39]YK-`%,ujS[ I5!˫xK4V/|ĆƓ#qkfmjM45y0SzHCňꭣ@1ɑ2YlD鼰ǐ=]BFa^$' M\Z${XMA:/&HUI2LZA`ܣ2``@mkEm+7^id8k I#(tUƋib-U{ )Eէ21n M4 šD"EyA  ds؜ 4wꬴ;σ{w\|VO^[wn0[6S*~\FEr<PuëvT8Fe4P HAjJa>iebHsm)m%68،OZK?ݻ~̎ϡysn10Q<ԡt;/?y\ s]O?|G} W뵼FU5*+]H0܅o/A .:̼~{LF?EqZo2!u&V?8N BBٜ/°If~5ڏwL y0= Yu>_޿+`80ʡ1o:bܦψmW]oVvW9Vm)XsDU|c?l&-'B5RksNߩ"Galj/pL_7ݮϻ HYw&{vn67JzK-%Wxw>lN>9m#<7Ct̼}ͣ_sa.]X[^Jjn!;]B L7 yo}R<=_ǥ8ֶ{ j<e`"̐LSiB^!2@ 2-1]vSPęd1&9Қ77Tu_~fɯFj(O dy;/H(mЈ,MĖ&`}`#}+kmqAE}aLq~I̖8* 8XׅXu"!3@Ce"1B "A"p"$fԓ̵1,)\Pr=^fu.6\z/{O{}x_'d{. |TB-nJHBF!̴f5-rH `$wpw9~Rs& ssA%׉NKԹ#T8vU`s'VZR_#U->/mH%YL ntͧ$SȇI^mW+dKXb<0uA}~ҋE&$3RlQUb;cz,Ω7Ó zN@[ )Ammf$-\BDĢ=m۱QqwZng`s\W:ͬ$6[ BZ*T^6Jjh7"R!ÖV PRwlsS܊JDL3{zf>c8ZCʛ73|"nO@ߩ ?`F3e$M Ǧ8βK0=hTH#Տ(d&greBԁq ~_Qz5mX_e)kl!KER-HQ|mYB &?c8@&xwA :`|S)6KL4jQtXB/hxXpqeY XR!3qRM) WfĬ* 1,Vw LBez+fia\[ryY[5lV. OKڬ3}a:Xr(:qTNzE|X^Nw$ܠ"@ -'/"{L.wBPMAr=?/ H:!!3W?|LԖJ˔"K# nIaMHu/0mwz>Q;ٯ)q ]`EUI\Ozi[l /]v-bq0%ITu"[*I}'ۙ~z < @(N5[*UM1c$_A:A{~< @EcH {3rNY&¬LrXҨntaFVDT)bFQT dB̧b SiciH!")ְ ΁,&,jlEp tkL;$I"lyzJD #%bycciz+,$Dfvj*@(٫%mjIUMRUc|VΙt E*B=lyeE#L 41-F5EUTPXS0T* }R*HPXYU)X,E2RU6YU!ڠ1y) i&jĄ wƝ;C!e;ǒ ACs&u}Ks$3LY|{ aoq W\C)@㆛"h+hLtKm#= xʀǃ C$'h0%eSlHf%,HQVbBwgK* 4E4-{(E"W3&Y@J+;gһ~/~޷u%r;l?[j95&k%7(lخ#mzd:UIs[emS^-YLJ:ݨBh@ N_mOG|e9Fnq}([BY^X}ۼSr1/7?従`{- go+~j՗Axݛ 4 |K: $e-\ӗKe۽u\% /yu-6n:;;Sshǯ|-eb_Vi翷z˫]_<gܲT<;K}9ߦ/u7|xsoWs=@,jj3_w2Ū5*wNV$ /oL3Tf+tU>z䀄 E2m3ws!#ߺ͑E͞ cX= )}pg#$0}i R>h[v'A A&nSxueէ!& KÃu8PHzɈ&_.u{OY t¶??IeB^W;`4[Uzh0Ҹo[`OA{/݄!n b{G飏 JW-9f%j@dԣ9}* x$x"@(m@@!NVK J 9Sp_;[tvr\N[Wty]5}N*N.|7z hR)D-JT7D|9ִ ?[n^N#~o)i7LF ehg|O=9h ]/J9{Yb밒4%qBqk xa̠C?&\WM9~_NΧG U+JVKѢ ?E\}=,@]~ǫ̋8#sGY*b|\.zĈ=Hœ`},:OBS^|eRƳnԣdaA#4tZS0*D9N~ݹhq*'Ǻu{Y=r꒺p_dc⎳ MޠNKoߒW ^IqvsQm6\W nKcӹ{c,q~Ww^g 1h4wL jmղ zKo+}6rY]+'V3au~ΝO+ehnu50wV^K~^9WNh׼pJ?[>rzR{vxoc}7ޭY6ah>UdBoTX8=ٹ $:#*CWw6,vٯlv0GvнlKUIF!^~g^+`oNuԹ5hGޣ҂ 5yJ/YO75pW!Ok񽟳4ZO'?>:4q|힏)h^e3BRF#JIIM4?fX[*. k,G㞒+U}E~eP,XQMER* ΓK:!}&TR+b!$6F۾C"J`N Q> ҃Ǔ,Qyg ̀hxQK >0YU. #X.C}6S3ѷ -^]2$ 0㭹D7<_^|E`ȿHI/]ya{b5IޟvZ?(2c"pDDҁD@A'UItuR.M@Jd\-OT`Bq(RK jFȔ߹=Z1]t@@e2{:4SD:["WbIi`!T4yY iS)ob8G.ߣ"=@]H1NxPWSg~?GMskOE6?e~e찳&z%~FMG+9MH/n"h=a@Q(6|KV#t:7o0g~5 @ @@badxkTLSj5.`kF%UHUJ`(>rx엳rUi)~~kDiu@~]K)-T٦~Jl5UdXguś`=w^5}{a2ٮm`95]l~_:+x۫Nr\ipI(_lz-ϐ_.\N׳߮;$-ғ7Cܴb]L>jmS5㺰V[$Tﮘuo3\>N._x *"B ' E; QF0D䘡KOJ#"ϝ^k[=5qtt 3 t;]־8@g>vɽ/AXފ @FA@NV5 )L@D <{YOWD|v"up꧃8M$C,եzcEA`DQN~spȂ/GÇoSD@O nň2!""t =DZNw {!~"EM."zDlryQ W,$6^tx|^0 "ŖH@9}V ?ڷ>de#ܽOGޚ=2݋bn\S[a@;5}z`ufUcfN`Č

hw̽`jQb_YCwhTwV*#VS i,U !dP5-}sxjKCUMvic_]Q/8nv YD3" -MB $a WH?4*CњoUwSr~cw{Zc)znMc3biˋ}f9m@q,2Uo~_x-o)GjuXʽs3o%lv=?X6]Z)cY2oy ۉ ɡF\vVY=}6^ =XIz)+/߃dQV< vIa=v[6>IWSOBOiz<T۷sD̾?> U՞JVзnp~^r㬣o1vΛѡ<^: q޳w@b{fܩ>1qLADIDA4 XҰsbPWke_CI$ v}\Vj]TSs OwbzHl+Z%Z+4ѧےEH#2TR$9~"׫¹;lSK<'9^XFZeDNpQ)u[b22RMfa\ *}00ŝ\_،In0ca~ Ux gշm Ⱥ;w @C$"ˏ;66n$f#pV9g{u (Y$9~ , =q(K%6jM f9;1:7I,fa\;Wkߵip\黇ӈo_U3fuƒApX3ߺ:v'o*+#>w/[r[WO_i,QA=ۧ*$d* !]<=X`* t2`"z4ֺc" tdzH'9kz(v uDƊBBP!iB~Lx;_GVPhĂ7bB:$.aA(?Y<+nM>#Ȇ>Qy {{|-xcG˵hZwMZ=.G"X*y%LP$2hbP 4d2)M几, 8RI_3"Ϳ'wKpe8e ^S[. D`~aV?6 jϔb(@v6c]Yxbf!+m\*ԁ}un9|0uz-?e 5N{WoKyuSh? e]mg`=ecs5/N;9=o)Op05"FToN}[= ;xV[oiv.g˞bo]a{ X/^ ˙޲1JWygxqmY,d E/z>/Im2 lp9]UݴÿJ7ϓ5_dV MU%ggL~Hr3vsP* LK 8]cnqB*Q_E(dA*h3ayuZ]cG)o@BD`wQ)%Wy  b~@d*~Dx/! ]gtܮ;MoPE_8rmD$a>B?*JGg/YSp85_x3-:S9b28HpN _8LYQ@  'ҁMs֟켗Օr: mVÙ::=,ͩPyɘ7 \86iorWαf ̽;4U,[^l~o&@h HptW*kzŹ̠79N y2s/.zEH PSOanzX0P DrNHL6"#tIax-SG8i⡔o/ƒ$1,3"PM_e =ѝQ1/ud :^tbpHBY?\yg:?K#+nVQ.#`+@whJ ln_ŌwK+"[91p(^_-~h#f~z+ & iz/H8|ep~W`gx)@ˏ/K[{9Tɲ/Z实,sf{^އ}mVlj%|)p>_͖7uspk)ا=~ռX՝o.Grn}o>n"8ݷc!Ɔq[^+}=~w|͖cC䰰Wޕd빤w5:anhx5v69DOXOϹn^կY^Kqo]ǃ̹qqهZ}5VbE&@!D )|(-o`y<9nw5n f %5S{O׵vr<[ {e Hc'o{:s^+>&wt07Z!"+!P*Pd E[@":XS:CcbX>"?G;uU";:S*o9 EX -芦" >EXaȂznRs)-B ۇp.h<ۄٕJ?¦&9i`yyCd"\0IqmN]ľ[g3kZCW6q[s>;BB]wō6rŴ&;6|TlQ,9E|Tԑ=>J®rҸ\*_)/V5nwHr$çH@R{/W6N5Ő!m3`ET=u t[91}ayj-us8<,̕PHEWF~L~E3m [dĂvE5Kư-Ϸ}ηLs~p׹Y[4۷-#?CaP3Ynч۸j.]KK9I}wV2 DËA.o?B˕Ik0%|B`&`vEIxIh ^V@D {5 AVEۢ;T\LPEp@F Asiµ`4C0NLBkW]?+Y;9I>W~[|:g>ܐޔ殻N0| E[./P)ߜYzB~/R}{͌ċ P|ѷ_x;p4NqH{39$15.L$?㇝уZ{?n>;T *p xQ]Z|O63鏘]4|RtO)j@5oU (n6 2zN#ڳp^o]bF"q@jǨ#eL[N{-|xp텀/@%ewfd3` A(5a0@ 7pP`O}hr;km[zsq\'Uz.`L@^ @(# Y(f\Z( /dB$W(@2 %>u a cU(Ƞ \zO@ UCj *r$FD$uh:~,@3 _ >S&'  Mef9x ;a~J]i,kXC,.hj\0/BYx)$p3#`gv@C7H H J8}f~+34/̧0WG [N80K{EŠ:ς ~,& {HΠP@H3J&;A< FF(&>AW7&џk[7/ak6S??acn}fwCPQ2i}_~3 OrxI݇b_-lTQ"% uSgѤi/b{Ow;]+\0 tyy[~ Ͷz1Нfg_{c\@@)ULj>qL@@ueU@Mi[tIS#v\9a*:ȞU"R$D?˲=/uQ^weڝMxӘ4Gޫnwӏ>6knI~?Q%A1#]RPfGhL;A?U HLpD01a .Гe3]^xV?1=,߳YMxH%H5f#ZD&9(ߎT\`Cyƛmnmuvr0()o{}fPT6y S ^\ewgp'Ủ!`G (QDAP@ە" 0&D9,Ce>==F c?W{mb0@aV! @h I\=Ld͆G AR0^K6>C>Ep9AUgJ`j3h5݃}qt $XN֋P:ն% QDIF[(N uʹH6a)6_\ãlIf_<;-ՂxttzUnjA_E;}1g.*ʷA0D%w1% q-Ax{_kkk-qO`T~I>_~+G|w B 7vsH7QXY~n-g -F3 5a`H:oijKZa Mb% ڢG{؃oȂK@P97 >J"1xߞ@5E9K QQH'a|Sl~RI |q3}UE'`Q!y} dm18j A,13Ы jl{4VHWzQPYsW]?+ {.ogǷZ|lK^yj"}Mo vZ[ZjGsbviJ 5\W}?!7S1_31 -G?=} MPY%%&搐DM G*nt<7R!] QJ"RG[ (N"_6P>7moШX).?=\zhߏfT2"n05 =%sQ7 zX{ơ$GaP۪Tx}η vPqeY7'"Ĥd9?'S?{_9aoV%{9ou:5hK6&@:v'v$ىE0+$ kH/N.|dSn Vzr Hzئ[\ߙcv__2:G3AlH_æ KBPS lrlSB'RcL; N)pᄈS~=#4" @ZN@KQXթ/֬!TrՂvk -PJ2 b6AD@Qv"Ċ tL&rD@:8a!Ȃn"mfP^ {-#h_Y]2:n%~Cp^佮 mFQ vMe_,TFr+ce`@ HI)` ,r8hp# |?Yz6$ՊSͤpO5<cۉW#1uYEDd#76 :r\:DLB$H (ꔟ^ *^>?MR~aU1-NwIަ h*&yha 8"'kj@1`+3`҃zR_- kSVt/iNJ) AIyP<¨NSvA`q>5z@ꜷltGE'#D-?AY0ྏ2TE#|F+a+;kM /j=ǦAr|Lb e͓\^cs,|\Tp,OJn=7cA[n_& DCTEjAƵ Z UWϱXæ wc#֏2ft?rD3ǀ97l;[z_$,tY)GkÉ(ȡzMIw/1oϷ8q9|?Kys?&vڧ$`4[ 6q7Q";g`6 Ș~.L7-QnapUn wzP7tt[R@DC=Nn/)h*\AM TžD$=4RV)ISm7x73b{3_aKzMz_Qu2S62 ck[ L6(c, bAS;ܬ~gy?/uԽkuK!z6h?ɯՔ:FFi B`/8cфn5?V`˭I(/ 4z;^NN&OBXO@nn.PFOd H|2M}EH# dO"H5m)UA_GAF()@麽@?rXQStN(*T砪{7&v) hgt9yhK8^YII]Ɏc"4s-~e׊K=6I_d(Sa})ȉ@`7߻JQ߫տGdn~hfs4$鯢*WqvmD !8Du/8PD┋.yqJM/^_ bŀS ]A:tuL3Y؛[iF3!d'W3o?l}+J' CA4чb%{bD" ~Ch\ј'S=(e k]V ^d_LXT8H6!b!PSdPA[XbfTB`;߳8t5BC0hgoߏQg~`5v-My7.A0O{Քeԣ/Yr^UA$T+ К'bpih>DJ,NGdq)ߞoOv~57C!+d @D5U BL 9PH"˭gтW-kV{CePB*8勞sP)%N$[Oِ;2^.]JW: " 1 A`,'uq1@FAdRADt;KԡѦVMVLk5Vl"nqr]BT}%"R-zAn[  PP0'S|>jANX&yY8&ɻG+ie5wr}/=>֥qZdpHb&0դѯSp'eYC@7+Nrʩs1 U*8OQV2SAҘ891~Y Ltg@?=^C>&V8 Z{Xt&ZZ @*g]C-gU4gBP$*P0KpH"xtI^;"L}ܯwS;'5.et:xUwv s3otԖr1Ϙ;'%Z14gniˆ6vuK_'0 Bºz"Q&ф\!%p˂tb۹'f[P)0/~~t׎!D" 7kYteo_i0RjN$0 )ҢI4.}eWf0kp( 1&j$CyTyvS,c1l%16dl8wX gD=([E" )dwng(1Q!Tƨ\;qnҳPpc[DYo*8+n7RP`׌Pe%4Dei*9!wc{dMyT秫]e 8:eb彔_&Pv< MO>+ #ұ Jtr3C?u]+c@ɝCTuM@0;";|9@\a[:c'[ T' OіMS(`@RCS}.|muahv7k^&XGډ{Z\[Cm#J@ǟl]^JɃfw1/')ܤc~Hg. nL @:B& ('J,*fs- O3,1),fT pa0T_jxeQmXBW(eNeޏRS-ltRX< J@iǠI|]MT=G0;=**`dQV "1<={ݽk ]j'+fCظI, ˴;7¸ X.5Ɗ8BH{s}[<_[u8G=_Κ3WS1N6aD5h ,r$(AcxhZ'~xw9c;nS 5㿼nCHǫȳ[PUM~~O솞{?+Ȕ!wPRe~/)6U3SJHw! )S"W6bcW[Ҟ=U8(8#Ln[?;UlbT3(1JTh,jiW: 6S3`y*-6IzrM%gt Ee PY( s+uP1Yjڂi*iM~N8OxQ t< @OpGq]YjC,&5'vtxܜЬuUdik,9D5X]й(K|6_$եfh@AXH@a.0WCpz X>xѽ^_.*y2lLQf8n2Vf#Os_(`>KѫD_:>YR߽=HQH%_3.+ʫ|ƃTg_7SH 3rRlE]VkC2M<l)'\&Qn?&+T6`'#\穹bK?R=U81Ǯn}Δ4-ʹuXa3)ns+\Aܻ)R3%_]jid&K̙[xrRoueU%b~B{>]lgt1DrmbBhD@ ه ZWTS.5C`<**(˝v:[xwcC*p)/j'g105Seա95  W+u0ehSEbY[3c߄ ׯfs unK\M`4ȲK~ m`/ ;I~lB~bͫCI\yʪ_J=փ@9:[YXɼ: cܰ>Ώ c!^ʁcbczHYXCgP3@% /њәWbm̈괈\_-pד_zm*yM.x܃ӇZ;T. D_ G\,JK~T];_WQ䟑ȿKO>^0e!<@k\0rJ O~.PdGL كf_myukjJ^ c4yKBw+Kt1mP{'SϡƷXqK]##1#Ԅ4'ƻJXck>Jt@؏+9q)X};UA-J+NABғ|a@i>VK]G7w$A{S`/rT?Kghƶ+ 0r%wi $<`.p:,[1.o$ \+ Ė@@D1VSm6f@Q^ڇ}wg;#[K!s0tzyӍ7ǼEGb!"d3ռUWP%(zbp2ugFYHju"D^AnEO̥Jj}v\Zcj_+qkh*g3'?8' 2oʶ'tٚ3](\*#qZKf俭9#txKCt;)#«X[!DB,w uL1M4(Ƈ^hU2j\ =[{4pqdyϛDA=w!}cc+ylR$Ĉ `Kxkz_Kc9t9PD:OT<-.[ ]AjKU0{dUY*H]ˮH*)wOtK8כhe2]QZqs(pad2Φlj n1?[HSLh'6^mևԔ9\σxE;-vjmݩ`8_[=7)Q@gK]P[&>{5кjTm8\,piOv EKf@ <1)_yt{ 8 ]>Ѷg׿qqbv)޳lg=vmn՛卞3Ɇ( سCg?_W}yƋ>L@Ov ӚRڕoSCV"`ܣ>JV!OVs4 ^Gz8]nToDfz6bQzeE bI7mNY0V)DۨC~['_ճr. ٥9% ,!0nHp_>g9t߈P.n֎cPyf*QeUVOb^Tz::Cp#u/[~oɯitÇQX3J}G 4-msl⟿j'݋J8]nNS9P!;ϛ-\1S>rw8VR[L-TeԜ``]릪Ӱ@`1Z=[)W^NYk,(2*jLk<)_GNDpXkos-[;ѺWQl6mןzV\r(L:2{ ;g\9.lp.(x^Z0ihTd +N"L|/vA(DK~'t%! I)Vdž<~j?jZGC'p7aZf=U-I]$PWwuȥD |N h'GKA cijc%*XyF ATF {ͳ/dOzF*&0zeF7owo;HG*UԬCx/, ʝs(udTBZªwBP*_¼a^ľ?!cU#Nvt*NWC|mcI>L:%iRX! ԤPZA6 Y9I)MڈI}Z)dBޛ'BĠ([&M(}7Ic[@} NYs ڹS>Tsyv5>%x><^= 9q>RƟ[>p$y>]wlm_)TȀ&M ,e-RzE[>k˺x4!p }WQ; 2xpr k.{7Sz>ї8Ҋ'٥WEx5EXx8{7:-_fr/qu_dF0&p|5r/;/Ufl%K7oN$.WS HM ha*H+:vQJ%/#h#~G}NI &躇 lq;W`X?k}gkcZ'e+rCnjgY@]C^I9sk 7d 62G J ?"'{Lf])VXVH+Zcc 7,S,~}6_ץM0q L,ٴ ȝ W9@ y-`CqzW%0{]-$l8w*NsNϱQ-*U?K2|;[<(Y阛ށ%/R5 /fnZ%+ד^+M{\cfs Fd_X+LQ(F8@t cc^e5h±BbZ GYma 9= |mbwZŲV+o T闄J$P8TyFKIpQ#k7ڜ>s0.! 75`A}Ķ't| :r ̈ Y4 σo}fʸuAkɋ -$ Q(p4`hT ݡ{p [ծdMX+Y;zgݏM)<RFl;6J|M)5Wuw;&PJ1UTfҹjsШĞ:ZTgNdE6wѫ:;~D VŽ[]pɧxôI:tsu Q QgZRQ&e"׬6VZb/?^r!L"q1v| [+Ş7MiF SLO'iAk"FIJ}>}jQL5E`*Cu&>yZi@FWB5?FLtsNR.UJ,Ys2™g6W{]>84!"3{ (K 6/E }L19Pskz%Hnנ'DŠL#~%Ys{{H\lo# b-caշi!![C`q v!۞×6Lےa3Hď5~T?!Ts] .ݚ53OZx~/bf9,jӪu zE~lG# ~fh)]XN*-HT}D"&;R7w=qS"zx"NO!Q3L8x Hy.UZg;7b!׈ *xPâ8vұP>bo̼%%-le[>٫&."E2Y"pd/+4@͊$%PA ]EIY|0"wqWD@PGŊb/5GEO m,|l"*A1CAu@d4Ut@-<~&(uQ  "* P" %laB "d FXع22Q\^ӡ-Ԙ ìQT6cAoU_ƏuҨo@/OVQJ Wx" DGdE@@ґEruL H( H(~A;XD@A Q l4>DȊ,j *594|U D3O=쾆=3`C9%0zA Ay;ϯ/{w&-js|{ `3J'n Āu}bqx{4ǩ"^d>x8(ПoV_l4Gh<."Kwk` uDCԑTrD;P9C=LP ~˫2C=U#""$,l,X/8s&xrkl'/5|qKIǐJB%]Iz7ٌOgj{\HqtwU\v|m#Ce,([kO!h>i!:ekwO?Wgz8+©@N )siT:91dBzrqҌSħ'*Ac䎻s1[] (c8 !Џ"'/{l\V}Gk<>x`-m T >^C|(vm3 ]xIbQBCDTx 'l, '?YWADTC"D~< (z*!߭ifѻ>гqHBgqOk>|6؆'Cw;8sAZ7VDDA@ދ!P!ͨY@7HɺEw-wQ(d۠"!@paCǂto񼠍UEjO@uPI ˱E*"',E>8M ~*p˅I^rj:M];Vi^/wĝϑ|,RH8.Y+2Zϰ'?4߫~D(8@8 13"s/>Fk[~3\Ƌ^qTNؑ;q;۪-df]@ tBЉ09ۀ9Y3ApH)l!gz­Z10GUĬwDf|`8!& AA` Hy~_}L0{̬5JyG)oHd]'?F(e~oOWR MZ4"Ѯ̂Li|˞jԨ]2\8 k[()Y߮(fM{fb f'j(D݁h3Ğ#xGu09HUh T7A@N6Vr1#{HflQ8pN|})U]G)ydɧ ŸR%LgЇP E` \K.p(0f3koeIh2P(*_Ϻ49VH0M>]55.fbb|ՁTTKqeN 95 ;HԉƴRC^)eu7u爵E@H {}-f>!?gm41VAP"jKFFŵ51Ӱ B"emP Ĩ~˅=[5@novByq>~H:''ԌۀǛ~U'AsZ2PE:T3U{Prd?,1[dPc.V]VR HwB38@@d k7bS׶7|_R[JJ4D` ~^``%>zͅamUHE Ca(\T%" 'Z2E}/|B#] c 4!A.W;JɃ-t}gs$Ħ Ib (/|=kD] ?{7 Ȇw?v8U(P|Tޠ לT>\Q]lﲻxneLU5-j}>EJ,z ~ƺvr\ *?ONbA Ђ HvPE`yE~*#'?~Ԥ"rL}o^4]m_'Es1V ^yϭ`UQ`JC&)='INUR%x&X~+.ZP*ZQH&0P [+hF|? hhU* Hgh0q@"͉mvg@K$O'Oz;ZH WG~l7aAl eC4@: r /XibnD;jwy,OK{aWw}W^3|K=btxDD-J6PHQ(@MQ~(8b@ :(Q.;j:SF+,Ĩ}WJOp:"W z44m f+| #BFJ$I>bMPfZh%6tdVL | nsU<]ods0>C  A_khS=j`"8X ?d@|` &~c.c21Wrn'YafnBl9-qF F}Rnӵ)~fJ4 Q`?;_RϢ-r}B@0ŁSih ` ENC\[B4꒹}Iv!ND dL#M_xg/vR62DJjA7SST!# X~[hW Y:ȜGWa0Dt OHr)^Gp@GA=nIC{wLZ/Cz艶bJcNҩr4!ޚsҋ^kC}Hޏ;7.{o0S<ÓA*2𑁭H`,l#@e򠹃h%-b#a" H2P"آ&ERu(A El#*Vdh4+uaPV\lfiBcAe4Un+hvpHf-m˖a Q설,SVd)ljU ߙc`H87R:;(/֐ԑdc,"ņ|ݳIЗV$t={tZ4w3 w3Vmy{ފ QpjuY}eN.zn-ʒ =x gq@T&|I񷝞dqd#ly4T@X%;0ĉD@AjV%hV$NW/'CX f`60we#,cwV 9m>cнwNGi5#=)a`Oc AEb0F "̔z{ :qP❛<~Rbh5U8VRV:P>xpՄ=m~Aٷǧo}㖫TLJ&*r&0N9dA3p3 jw:!ƶ :s3K -Fi;gaw_x |D FrК = r/LjVeݭuegq4U4vY7#r"qm6cc wDS rXj,,p c&)1Bծ>Ŕ0Ym @ )Rְ3ɞ 42jl X"R,oE8us{*κlJqLNQՏjf;Kڢ(o9.[[2Қу QkH\nzp {@Pmܣ"@S'o>uɋ.Qm :Oqh\#<+@ " s0EDP2tf^&l›cy؞=m5CaB1AV Βh0d 7j05 SB@S$d_yUY5$:K ]hZS"! J L *7u0L1E!E B%"S *SOQF 0,Zu1^5 "E' Myl4A6N=u9imʕ/w gЛ &obQS,-^!J%uGw ֖`%2ɡ2,jUF&bB|gxթ\Φ)_BE9Z*.7=-_reZY GR.mՐR/G~x|}S! .~a,c7˴.uO|!0Trb'\*z-'H--tM`oΓbL31HpOa)/PX'tȯ>k+.!bd\HAqFbyh_/gj)d.ЋvFF1E")D)fł$ER($*b]0Q=LmBqmWeZ=% LraCTwRf?׻3-ޝIe5'.OYYfmJͶ]>vO{TD,PRl_UKawW4__e\48%tܔٲQO<% DYsK~mrewؾ}0x.5W_>ߏÍs$xwϒ ow3{UWnef Fxf,C>Ɏ%Wq)d{?Z㞧Cf[3|i&xjw.-tVe in.SJjfH,wʼvqI6Ru0epRšLe2rsSp^>'&,L{=JV3C^Y?,42/ UӊDs*kڃO`b"Czl"5}}$P>|"=-p , :)1Z9V{` }7Pf9 Q^I۱kwPV++LȪ}c3Dhk991mV40X]=OuxkY:o7o  l©MyNOjE#Û?d] ^$~&TS3v4l͖)W1v:Jʛ{0NV@l@Tp<RX8cGLW#,pa|2O(;DŘY] q~BDQU'A)R$+(QCBtС 1KlZIc`Vc[bw%K M.(y'_3ɷ}y %R9cC9bJnf}< ϳv-JTB-:Tٸ}ܫ͊48Og˾ gkq#+4֞: ؽ=ZsC[+w'ox%)!Okc~O|~]jU`@ 3-|Hi0+؇g&Ȉ}m='$I9"y -ƿ;X}|^9~գ1\_Ot]t@g;$KrV7/gs錀ھB|r_ppl/ yK'ib@A ];QkU lZ ׽l8C#c.x 7K9{зC&^؃ЮG9n c$.'}B.)@ *ť(H($7I H(?{nߓodO߿coy Cs@ 9y`CO-qDFB90YyytjøLMspt @B!tQEb|#OTs^/ 7 qSSSsssSSQӓss3smt8DKkRh"P8ǜROuo'?Ө 0@0rK6tGKONf7 .Tk>EJHq;Ox2bJ( >CL 9{_ SEEmBSb@! 4" ˙ygghҧL)SXb.A)|aSaJV_}e-N"l Jh,(( Zv*ܘ! {pP:*aUHE,BEhfE@#4i!zC|%CAV`H)b ިYXABlz<:ThP,jh^e}SjXÇ%l*U CqI,@] *+zBجM(L AH*C (`YX;tNm E +%(^,&Cf!0) J: 87nY-&PFQE#_jENXr qm7t{fBOĭB,E̶ˉEcS ZԔ,"(1CN,xDdUJ̌rl@ņ j OjwVsH'ԅeA>67AD&Tmxx8 }ݍj{{ Q&Zal3s BbٟP(DD(4$a 8,?qVHgTt$Y)1DbV0D?ύ[qS#ĿNqir?gc'! \ Z},%JL^ɻ5Flsp#?ܣW_V@lH7#p)^XrwaQJIB7۷;XثZx:R^A DHPY#Y)|ߵ;X2DB7Tא.VcCjG{?uXYOχ"%0nS!P)mz$^{[U6U[6Zy=/nN&_1Q8+. bc\Y[m[ & H"Go~-&we#YASC x2U9B- YJwxv۷mv޷}nPbb##/ T'h q9q`J'} cbUAwES&v_JzMʏvvAN*a{O?tP*7Z.AOzc^{eS3spPP ApWL+䏖:`*P J@EC,)~ `v\a@Ѵ{QC|T0AD#S9Z3OeK !t P\^ʯ6VV]fo}ֆފ _e$ۗ̊6cݑ-O/c^Zbz^fqsz}l ί6 5V e]?=Vޭxa t(cJ_ bFr'x#c7>Pt%4$_>[V T ^ˊFR.<ɒ )4˘ospwqgǤvC{[zj{O#XF+ߑ;`(CH2%6/2R i|Tz̆T븻N#SbȁṕBV&ŷgN:fmEtF5:v [.K]_{׉YxJg $  f6WdS'ǁry׊HtZ+HÒ<,jN2yOVP,%!O=a=L=+wi{xg^ּ>rt遈HE\ĔGG,kGn8qCO?'gvWx|8)N;q[(M1t!.֔$UPH*pq19`65ڜ)J#r@Aj0 "Rtu0^a˯KICt_c^U|d썣\')H!tϰÙ  llׂ뉥1q$ W!&[?Z70?,GcUkv>֙_g\X# s- ' b[sե0z 'o h{6z4Jed] { 0UZLnx0T eg,#gr#Nb Q bQ..fl\NR2!A>pB!wbNӄMOSיüC =ض?Nr!ec{Qn*:,ӟWcS-;;{%ф\gLHdTrַĵ]e%!R* MoFaZ%U!u pi'I^x1*e6'NZmeVѢ/ˑdPUNMijڇ^(J=D8iJvre-֤@'(oD錧W@@]Yq[.B^&vAɬ)96yIyA \Ųf'Vk+P0bIr`S;Q=eFfX\LT{ JZ]/&f͛Zzv|Nrpaº|wCuj!A6DzSc2 mڄyy$'5 j]>\s@B']CzޡQﰳ%cW@AM/,"eMNkm!z;)2Ym/P\dJL+7%k^({e!^ŕ/,lLH{Оhc%3\C YE0{}k_^F3A=ܙ~$)t.lZ߽oƿdg[ K\l 0qc+e^K'z+nP͞V F5ProKN_CF>ࡊz"})^bmM5B={Uc`[_) MF|5g#y6EA͞PO*ʣxR5rqpxc3vN6jښ5LLoo"y/3Q`qKV>dZ Xׯr~/|N$U8@SqƆ2/}lZMqrp͕5\ 0#qKvW7&N%b9IW]s͏זv]UX[D^&eݒ̂ձ7fsE)Cr߷5{қ(ymJSߠ^ӳz7*`֜)Ә• Z]He9D47؟wWYR;R[B|īd:w Ђ'_C"55$ڑX!I,8BrZ쪿wK|89Z#9}c "3S7wnB[}&0Ccӗ+i~(_M sEc&Gzzk^d[!_f?6PD6("d9Vٖ< Ą/#}IzMKR1$BUO-O2M/357 E!bF4:~w2ex{O0Uaj]Ts#A,l)VR蔄 Zxf!Z5Vdk$ek 3gEnn%0!NwlƌҠ"%<#֏3D0>H `w#tg|l2vdz妺/JRR{^qE%P纙6p(8):d=]6L̶ôx Yc9 4Up !$ j,ܚ>\,$Y Z\M I͟3b} _Z.[ DoF&zBϳ\ oԪ hI}k]Fy^;|V[av`7hel\n1^ l. ӟ.Zf5K)~E})XOtVl]*' vbZɮ#֢.P6ҿJnbHd͒%LĐ K˒0iO3jiuۍ/e+]X pB/znCOF:5=Jj`\7> rȾ!Y}Q:V1Ӊhf{x 4rt <2,+׌P7@bC X"r[c(cxZEoc$W@Eu9/oCEo\; cHtf@yRZSmXzvsp/fbÈqrsѩ GБy&&RFq>Ϗ @So[/R]ޛlQny/tn"ͺzK]3LWw"a!O*PA 󘔣m3}mn֭wX*.kݬ9Еh8<k2u-Lz˱v!YT PԻIM_7q|o}0Ȭ^B[;$/PbgB,Qcz4Ca O787pU(.NXdƯwH#?;E%X*GX83J09>sGUoe1fRN+w ^lmj?VvS *@9,*'V*Njl3z|ݎ;dzwJSBj<<, IQj'X.FŜTՒ _ȯdwfwu7|ŖJdnoZˠyu|ĴYZM?=z܎% 9׬r碽RIĨM?řXu R5Bt ?#-;+|e n<̀# NXyh>Cx8 , [b QL& ZX V*W0XF`ha^ 趻i~q/SJD^zAdBs% }K9W<6- IQ(.a@ ~C?W=?W_G"w~3.D==lb;A=D?dPPFL@Us{T(QLBHTΏa%IjpFr* :IR%KcU'+VUh:}SUu:UT hāR b= _[R,whixF_G,D6~j* eۮkSÛGN-=  zZtdc$LL<%VEC].I*jv Ro rfuA"2fA FaC=]\pLQB( F@R Ysrsʹ^Y0V82rr !l C&ksZdBJA"  4HF4zQ\P@л.y<C`NJ uJBИB1Dg%iLg{*RZ^~s}Oɐd@kCK*>2[/@\NKn~ bFAW >7H~Eb~<ȗ<,t1S9 Kj'IcG 4Lz"SyNA ,Au 7!n6f.dA@e뎇-iTB<Id NŨءbZ)U"x'cH e@r55K p1@%'ww fX.ީxsx^CO\`nI1PU?̴E͈ЉVS{r9t*k_=β#l{N=? Sۘ-؀m!I0 @D&JrrHHLѾ_%hEWGGq/f|g6̅Chm42Pzh\-<]4_Y&Q9PF'79?vU0ڮՋ`Ql v0B\ ކ^;vNR$@t\b< &/{ށD0s)H"|{:>N_u}~衔Cp~w{ !nGV B]njCqGԼ4N?uMyXߩCVD +&VW$ ;  AA K!i^ A?;[9,:%f ~*TNP)P 86 JͰTU'V!v/' (tURÐux9,׹ҽ(_l~Z౼Rr=Cú +JDB@ȵT*o Q컟er8ߚÙɤC3IY 7*߼WC/ub"%Ҿ_K?n::SǤVQTJ.1b!? ŖyB)үN$Җ4'sB7S2Ĺ]94!-I6~l*fT2!6IaC@V_+ؾ' ?a_d+}}Z#AQ'ݝțHĀ2pMƯI0.BJܣn5C=a `-AϠ+=! ѺԕRzQQvJjC P>SKu]}MtiȏS-96KL:bɧfgȴG@rC[zۉ8ȵW;D*7˃+ 2boTPKA DDܮ˶bpx;*5, NFԊ("e_r `2nX{mx`f\Cm, ȋ 0D\Q{QTC &6!>xx8fi \w%Y7^yvxԏta<J@m]ˍovHZ)1|R-~#maP@S* S"S;GvYA˰Axq8Oc3̥:Pvj,C.!Ke_lr¨*4L&9DRq:AҢ3'c|sg4l|ڽu[O+7_Iz&,-^X7vj m98{$/fT 5'Tw#aR)TȪN U֋/W~.ytB'?^a4|@Nmv8 N_+/B@ +zOʝ#{z L Jw-4x#=_1Q5gjQYw5#Yy'ػ} 9ěPv9+|^2?%|̭nv<췃دXA\i`2H'h/ew76u>G9@ˁRFk!ik%؋*w@?)DDa$ ҸΥcEA(+CIszNSaa hYRܯ}'ȕ ~fnA[`m~2L~[NJ-NuM|TXRz|G03,.d0dzb*`y=k@n`ξ!?qqktQ0ګzn 3dYȌu!)3j9E Vld5 ![\oC<|Ti'D$?7qV0FJB{r΍(t7reZXm\Ѐ8LW-2 3sn@Y +ET6W*. O\˴uy[Q MQ/orfuw[i!lLLnW;sx3ns3pkf7B MyU@%:}d_3sbTs/ن,KƚYO >@~!FoZ=ɓ6r۝dnp.jX?Jq;x}s[}Úwl#ʲp}NM9+.~pU/ܓ_`W}Iܿ<xU9C*y}ԳjlW~}BG)禪=3k53G;r3kjkoHI+E)6o5s˦k~.VhƐ-<ԻW1r*гK%]?ʒqg+F|F f 7Sh%GI9n"L+JrKeQ$P} On);P+zSOX ݸ!w! Lwyr`,h44@^ imKLE7X>zOML{UIɛ-B#h{zU@ Wl0w$1UvPyXC%?G}h>&/ahn`MRΩ?+kΒb#GM27OC+ʰZ3x7F̺?Wa84"wZh-粁y8B$8|3=c9bf5GvVz۠ ve[c ܮp3 0G1x&hD +DNNcAх=Se(`UR"fK)PZ4S'BI"SP«ȕEr0@Zi3*:֞OvxJ0/2,k95g*'63?ϑc NUcClo"bAO@ t@.e=.8q|Mξi;2{'DKn+3S=ds42,`mq5C)CHv4ϱ]al"X'tBDJHrڛ4[ / RXMQMAdY9kB2Pf'bԞ7yj+R3  jtSVCsզeBRђqb#oG"^4K1^iqd<ӼşVB%yKckwWku8)[*t}=5ڥ<{M0}O:3 {_FSv9mhhZW1r!/o٥ȳ6i+a %"L5GZiA)eδM^ fżN4݇jpܧ*rsQ52V0MjPf#Rx1c/L?M e\uuy+/T&/ 坻+^6>8dkZ6E?uвiv!y§UfSPH9]8ww2)+vqosQ}R&{,w5&K01L//[h3t[VZ$>U Y[jNaf)f7/[JIR>^PK{<+T I-n 0Ջ5@N_AȱLkaGrC;qS=#`@8 Fjٶn1Zsý% r}ei6vw3o??tNBw Ra5!@*'FK*yS 2ob-nTE? v$"&/8>p/Y3ߦ?KMBq&u P5,$$"u!!|8fUOhh) eLش žCE.YnnQO0.{K@'iPXʝVW1o5ml(oYfȲƪJ[icke2W8+_}t,U2z2wX& vI5:Ēwxls!"t*wrRYq_ ."gY(+ZoH4:7YX]&j .p$۾]q+U>'XͶC2yP]_T055pQ1w\ͤժ ,VZ얋2&gCXKq3ϔYxڥYќOz {'yƽ\N! LBWgZiv^vgmԭPjAyMDȞ {{+.:JC6U@8"HQ:\NĵN)CV4P1:S-D0}3]B^ճÇԢt)Z$ڋWP  JCqBAo";Z.HK8PJ)6i zrgTcY6d$i5U,d-=1a?*d~k<Gu⼾@x5*ڻRv kؖ~~ZmgU?­ʳƽL7 n! CTa *MTxx]ӅvGGm[;MEEEBKKOKMNQAعcT< @=U.\* >T|ZR([~}&g>49'Eaw}$̒ ^҇AshT%kzyz:]( ] Kܡ~(C^Ro[$ >5C~z`Dv#"sƲ39*3x/?"=jN1B> u׼ʉiGKa_kPD[^Wx&m{_Rs[Ǣ~<`X2H~Fa0ek^Q.yN,Cu@ GP91IoM \i&K~i3DNe󯘉,ݖDUG@̼X79ZC*:;NV{. s|Cs, BH& [mL{g#`FPx_yMNWh?bp?̎VCڋZqY L494(h =?;GvR-E3aM3߾h#kwޞ˜#QM3`.8Okj=|M5C{$$I Xd0|ރb}s5?+264IpJ$ʳP>E$at{./>ݔJ͇Sz 9:.4DnYk!gfM("íw'aq`n RmPCe΍;ߟ27^~۶]BctC{ly_WwY~Ƴ_HDZGťXWWw\_VK#{S>CO `W@Y:ߏ؀쳔S̥C|j.;8ҙ97R?~ ?R_[`?A}w{j`>4Ӕ"b?u5DB,XNK.=w9<>wW8/1ז^UDRO!P ,!ꈅtY`ƴ$-66ִYkс-t۹wv 6Zs ij=e 2 zĶpʰ=tCxʠOOV?mn|gq|&Ǖ_PqO_xƅ$ƺ7xb(~PLj&z'޸qL$0'8 +; .߶4RidUc4Cu/;S1/3STy1$ѥt)y)\]wNlr*8sU㤓.yX y7ߍI@ &u3:AYT@2g*˞<.>7s3%:h z?Ԥ@}@K0*.<&.hiP@Ief4\Ј>پ*ݠs^޹:ӧ ?D@@4Lr{ۥtId1/ssYo&#qkmNL Ku5l5woB*4iN>ёi+HI i_h秊ށtk?zYˣ#|!؜ 8kO׭Ss>-,.L0pG#`3 eli }07 cn3֧D72Z3槰w_xT4h+T0M?W"R{Jl48 ֛cCc!yWwbGG- ,Z|r:`Vj4:1ʯ-ٽu#Y_KFAS6FhQ:8*i`e89?SfU3*T^|[s%m>.548w bY E&-Tձsrg:uHjv)ZW+hd/rG+둶7XVyopu@+ My|]!jar L̶ oL+p3#wXWxU~줛1Kb|78|tO$ &)Y+ SH@OOlS_C59n 0H '5QB<% 5m lP H 0*_}/`;>۠Nu¾! \F-dᮧ7H@OcwY Co[bd tմZxrAִ!q"EbnַVhȎK ۵QLqoN^{U𑖕Bqr늓fv[Z_d:7 KY*j [֒T]'YE 6ue"fPm I ggGAR*Ijg5K;%ɗXZd+V=)V%!sL#m*B Y>ֳ9%)9pd*A-Wޥ6[wVW ]UoBbonc I\T W/hi vC`Mr&Td^]HV/5hi/:j䳴]KWN. O}hշ0E"$6-h| \v'z+LL&c:Qa {s-YMMqVٛANy 'H4%KŜ_v&WXSt'xf%^#E5_.db=.p2 ?z:9=<]+y>j8X}|^yK;]q "rsNBVKsԤ֝jjWzX\^3b䢛o%A~TJ Z1QdcLRS4Tؠ׫ZEX )-&,,`XHmi. K1)1QC$Zp*R0¢U2x0&+…2b8֦XDèҪjL.8 fVmMʋ AKU Z,j8Z7bek*j\l.l4r8fvW7[~G%Qc)c}*] ӂL/4lzCy RdAxߎUs"0*a\pOO7ݓVwt+:ELx\n.[CO2 dYHЪ N헄7sZo{hۓ.l2$q-">$|=I. D~ށ=jb+ {>:tzNF13W`(AX7t xӚd4gҮi]*:xxy(:v]P+SHZell;er^OS?w kлs32J6ܩf&l%nI٪RU%y(WGrN2޽JdS'x1jиjLh)X 4@??e|y}f`XL[!,KH=JGOCXRI0|1h9DD4%)%)DGNN)<6?9}|gp;\y*n{KBA'|zV<7W77чwlT^U@)Gy,vw]THw{s΋sCv\@L#讨(Ußn9f;6)C(Lc"WPەԼLя諒JkEJ+`UֆOKQGAx@yl곜#:Svk2goXXVVw8.-ޟxO#z*HUO-muG*j ,`aϚ=.ۘT/yxv9 l4zYj>~%: 9nc!* :V[q~V~4v߹_tQ|&@a!U0lfL9LvY-=u dt$̑Vڊ kurn>iP=l]\OGc @uOq~qf:gՁPGL:\XuMtM԰:+LtzB _Ph?~TӐ} 'MP$WECR,jhth(>bO~zetPՃ~Ժz-4~Fo|K;qzNT=u$tyAhk`&8vz= `\JɣO˜f;2 {aC3g}F :i7Vj2P}+GO 0SHU/IzzoIR[O(|T.kP+ov1/v88`:/\"~{x' CQ<8jx#6$az %jTFs~ϥ8r{m[@lx$'L @YgIFC& _\DsgJKk%owf63X~KT Zf -Ygw^>8 恼&sd"SE)Vys3+vE3l;]ڎqÞ˒o18)Yي!S%Mmߩ,jrӱs⯦ v۵pp9/ \07) 2gQ D; #l`(S7y\}6,ᗫr)u1JNbf{Ŧ3ʒZ"a+` Fz*aL\<Vn'1,so3]{o7>q"@ØjLۛ}= {aj]Dq}4y,mGa52sꉲ6[u)i urtZGcGh:?[F?&8EK4ڧy`Q 8%_ʺľ20'H%XwO?I;ȃrhR>Y`9()(\[ Ζvk5=lbu!8?2YE R#\us,6}%qޚGpݧ#6o ]D"G=DNƛ^Y0yeXb;͙H}9'+iͯ^sҿd:5}_N,5WWW&GtZ(Ar&8 zzlTDc%e~ 5d䋶լz:3nW<_[-VZd p %3l ޣvqn( ;iN T]u3r̺@~wj.vgu}RZdBK{)gmnWpo 7GX{yFOO#zՇUVQ-TQVpWs5U, $$ (vB>D) ӊ&4Aa  K{vܝ8 CB0x?3'-, Ƥ҇Uv+P[ ٖ^7x+ 1# | Id}rƦow>ֻBvle W<{cmv@"}p@/,u#/T; O&7lPv]RR5*_ZqcD[!)z[I:+`'$붞Qg II(Xv 8Bm8淪 m4zsC\R ;?dXwCjMa un,GKm4„9 WBB2M1YAZ)»PI/0 ɾ}ۥO3sz81OJ]VafkS:Ƕ lhPM ̵w2zY,x\`h7o9}])wc.SnD6 _P8#5jdC쭐Ŋ%AJ$gq:[W3ՆTBupY~f:_kaz{4_U}?Y1dIBhmSBwso70>t7h\Ɗ.%!a?._;|{܌Nnpw8a9k/PB}jGi7Aʅm}8Sp9&]8Ե6x! l!>^stɞ'3}]"fc6jSA . ş}4v uqE_\_ {d#Q[).P!Czkc=JyX"?;IerF߰\e-?R}P'I'.Qkw=o1az]U\D;Oۏ6ϣg2qEWyDowAفH/[~t[K^J/>st29HO>uIYM; ό畅_[HauĆ,4>} 25_ϘMYV/q!N!YbG)=!)`ߚ?gp`(pV  C &*~ Y ) AZR^H Fo4}v~)g u7Z]Wz_ )~;}M?MUPِ< 1xي- 7_O-1V&xL O}I885E3np髁f!&2\&/}TlWYNP4Ow5'p.=utH;gcu8\ & ZO$"P+bP7=7/Pb(W轇2au%q15o7pA7n$ * 0 Ps@B (&}7̙ܾi~py xZDʼnsD> ~qf%8B`^ak!z˙"Ivܵ.W骢($#!J "@A ] (CzS,`fa#  V^ 8vu 16+7.D2B ͳXXPr ip?4nsO:͚8" d]LUxeLO?.(\ 3jbU@uUMVM=︑l1Vٹ2V*KȔV8LM_AlԸCD&"u[pp!>M &FؕҚ Uz( wl$|c@F}bdUCF /zYݻJ I@GY[X驵πENO| Sjr7`"/ظz7FZt];I! j WNbЮدb:uyݮ~]#~JV7u/ն( -9pEusO2:&o-vks53p(9W G>2糎.#Sr% TPb\>qkH*a3y)^kxkeb6%n&Pw{n.?.^ؓYR.8 d(WR~Aj.R= EYl]𹚅&횛c4]r~Si2b0@ɉ0eZ÷Ic90 "(Rњt[R@bdDRVTne[T0 /6f hQ̮N{I{z \t³.&딧:SӬ%r'nA(ٶM<7TC_dgADp*pl&oN©[ϝJE*} xDo.c35t߲P>g Ͳ*L~+KpL tnw5F,rm"<^.#\^"uByt^A{x{! /QAz{OD+x͹ۭV/{Z$Zz=ҬɆE8^4ƏʿΔ>aϵ+ $7C]LA(PrvW 7lQ"a2]/+==REpkљcsT< G-\Pͺ\fҹbj>!2_]-dvIr3veid5{,!bzCrL*~-fr6t1:|XB17CYKij?eGoQVnU_[ڮmWXyS,9n6}YN~;:(֎T7kX>bM*ԐF~P!C+ ثi]6=) k0Rv+r݉| Pp-{67kn.UNWT'tk7]W| -e(S&,E87<>W,ՐX> ,-V7G"O_D]SsF>^(s a&ExG@HID&TWyGg#owNݴ?;N*Y4Z\H?o?O-o%AjG{1ubamEKu~w;gwBp>9/tƉ1$tjqQ"?"`I!ӰO/eb%n72퍪"AE vFX0ʔ/*Mqr@޴neB>KsvWw5L3l!ݏ:!ƒ G M;skB4oB=8`,pma5=dh9<+=hQcdͳ10WOGTL1ILA<~LM[3u6&-38 ݤLPww(xRq0[^~5O9nCFvTݮDqUBaj60 DHF^_u'%^?MԽ{{ݎ+=hL,='m҅L?~4 x؜~QJ1GrPmLP#GȲJ(jյ^gVʼYP=Tk7؞{9WvP-5p a|"KՍ|PO{Ěd>C7-ۆlY<ҦԟmjWUjO;1D'z/5`2'j$\߆@xJ۔ī~U/Rs8LP u+P!{w> }Bnu3V`\@l?g* (2Gݩf~_?WZy4NϥGчxsl=Xluzl Fa>Qwi-P{aF9OD8w#c\8ڟc=i0캃YRɼMFwi65&'p\dN?l~c^7?!8%w4[d0\ =jNbZA?u.iR <]zԞ>PsSEV]|NZ1~ L`c>+~kP~ocZÞٳWoAH>y,5auUf4fߧJ/q{Ơ`e98o^_^|*#RJϞt Qy?Ta 2mWC.M)Uƫ;ưa@u~Rdܣ|N۔y)ꢬs-F؋6[JdVh.g3Ӿ ]OUtZәy2=}V?^Rt܆%upA!)V"ʸKc&7KK*?ZV  i\,nSϡBUdӯ=6B}_Tq3»=~ ޼6: J%`PSYZ Pp#^UZ1 aj z,H,D_3Z]yXR&˲b_x OrX~?~x*yNI8jj~;88WP~OhwO.dAy֔>K= .'y&$UZ}ˇ_a|9D@E|Wv'd~/ hp1{n^tq5ԧ3F"PWT"=&sE <*B&VKr4eNK!WhEdCeZU7`a h}]rνåzh>srK'Ῑw%L0æ۶I|\ 15oK*dB]E`z+}/<=7Sur'u_b\פ0nǑqG_W)fh@bvxYɇ|(_P"/s$@;x7t8bxYy4={GnѹϿ=xju:B6t:'*<:2As P!#X]# 9N=uy$|*)uNȗFә7v kz=]u88nq(X#aB8DDHXd?ʏPݣߴ_8  Be]J@{:\g]`El}w'7hNT]XۣG /[Q!( Rq{C<+' Ֆ:,$,Sj» Oj|<~UL?.`,ɕCuυut)Htc2*4(E?ڬ9 @q2ek,:bcN@S~ohjlAFȴ Qy?*g?Ed#/'Q-ѻKRz(K6SיecfD!q*?hOx"Җe֥fG pjkpݢg^u3{R ħy='ޅE]+yxuEECÊ}XfخD%s2q/\*jfI zΰnVv:;t5yOޤM_"i3T(p)QhʓlbF!_qضéYOz`vWK"@D^7WNF)>dvqռp{i'00]@ ?*GY\PJq* 0|ib|ENL"!0c cYsa#%0)3/?(V8l/96ٰڔŒOqzp?ge},3p4g}jM%[;7R\1l-$4`ٚ931甾\w"ti>Bz sm/DBtQ#^I@M}lxֵ@p>E9K&?,q Iv^VhL,=^i_&& F$2Ҝַ~U&+ݺ,nket?{үjF\(N 5V=e9gϭ*g ՜<6*`.UC/(4NbJw7ĵ׫س$l?I7_SZvptzNqFp+OqDG] i9??zgwo~L.BP4Elͫ/jЛy)Y:;/x<lml4t]T;_}-GbRoѼh?OQ1CsۛԲ[z>?z:m׃F Į>?Q P HnyH`JcPBo>EΕsE./yDd*R Rqy73{,7(qkm#'{uazJ$iJߜf"ܷyH|cBPUXck.u`y^}_[SZ68 ۬EpKANP(ڥy_;/ Q l!J ``k6_|D7&nv4H=&.poj-y\<cƈ?(,( |B  Z.d.OQetQ FQ6ΡXvkv @[D @+ЁA'plFe@~Aӓྛ~Z`@cNaoΣgbyKXw]r㍇"˗M( qDP Gc ID(#f.>v.^SqGL>xx[ !P* w"z-^ dn!s]$hD:PXƅ}nh>Xw+Q3N 0tJI(x+ I?5ؙIV*\AE{D x.ZR~ n 4m9sثHR÷WoR}H4#L< ]+lzX2Buڞ %ՠ ިۜ@? wGW.> x|Ceg^ivE)Ja`zF%3`r*xoRpbʷBLKx,kfSd u?WJ;~('Z%^-c ߤf]>z4^sEuZ4II" JW_Q,R(OJe8E`._2I&Vt4B7BwL4s"mWŊ^?&B/Ε{BS}w$,YV j-}$ ,A_T#zN@ Պ@s+w,cmvaDK^{eZ'ʷ T4e0p1]vCIn<;e=s Qe}<++2L{&~݃Eכz`libl9 )̃ͤmh$%iڭRѵcRUZ%3(hg\܎wGSosƜxx/{< -./W1FtF'#>,/aN*s7\QYRz߯ E]h+gS:/ i#+2+hSV+V0p3C 8C vLHLE?K@Hv{  ,=sZ9 DE~$ks{['j*)H9*%E?Ck!R'%1-yRҀ@ #($|Ziج./M7k@t~ybWH@+V,<'~17LOHPƷK*w!vᜳ 'RG[g/bje2>LcNf"RU fxLDmq'MQ4q^ڷM\u~볘Fc`:;.x㤍N LĹKVI`&{'S$jV-2e.&EԂ,b #4iXO_oqOv, cy:ndYXu24V;D\|nt("7;\gpzG'3sQK(f9 VVp}k)y9붨  ȻQ( UDwVX~EiI$ƪ}vep岙0rGA^ő*)J(=/R9sPK߹U٬ӍWˇ%#/Fl su~~.z{}h?:8ݿݲuVfK.)6S ˊU!bmhG u29 M:}#tW Guiw%HwG;.Mre,})g{eoKSMU \;GBUb>{DHWGkųqn 6GFţ(̝mw0a=eX''ƇF_0j5?(4p൒O]_9Yj")˄4Vp#["o4`qQ+Dh$%J*Te8 ۳Q0MK k7kK?njG!/Q7߳ ɠ1~!V;}H3̧6\O% Q\ 3"+.40`R@7?kPp)R[!S4II^$_Y]/ЯnaJlpE­ z@GR,p(M{I +NL@zhB/:Dl:Gt*A oiv d=3KloKzrBM6DxRٔ;<i*4}< z3zNSqmj$C07:SzaD@F(DO /#SO싊"O$X`oMx05=K`Lu| |oMa0^ᷫP ?|Hi\b9yc̟G:^8@_=y5TrjXsȯ~F l!PE!(hI=sAK[U/rhtâ %tv(4>By=r0]͔^nFJPxQr4 ׻7%)(۳Nʣ h@&-a<I&'[5Ũ?wǺyOmH_ pgIl,WrOSǫ^Bk )%_Xuw PQO&y҈DO sNX cSo~nER\6NDM}9/M U*k0]IH`d3Q"S 8 ޶MBm6#JhgR tT-&kmViʍxk]%Gŵ;zlX ؆L h`5HkԂ*SH2`( ';:5xsƩ(;;\:j|IE)*,61p2iV-+z~_)ӆ?Kvzf +ߔu^\d<5n7 86i _I\XS[Ro t(Pƍzi,?:M;N}VcQ{[eIK>lA.LwN EWk'!̱l`JZfg6I@G@bS2Soi.Nt 4A;?s+r*`poVdhW}k^69ϓ 1MfL|V*ǹq\:kng/ _?b9nCpe&|F)H啼/KS 2i6^^ *!D-Je?.ȃTjҵ)ꗽ{h("*4z'fDCuxH˫};5$ՠ_mrkլ%D.zĕptsj'AA'Y^Vz 82֔Lh\c/yE+1_frPiFh(_S3Zd%.I5#;H2h.0!Hj<.;vlOOjUez Rsg=^6"'뛝]N'#qQi2عYGQ=ƜXídըҙB6g̥̀W"d3V?}딬 ƽᵥlUfۡ.T }xw$|.vU7a\9$f[|U]#Y 9Te(=g//٢<{T2bӖ5skw}zibKd&aI >cx^ZwxAo֫mElfᩆn~69?Zft,йĻ{ƾܧ{Jۍ)rD%%&`id m8AE?jgL+rh%[}&C^WT(J"{ecТkqɶ;Oi%JMg]wI'/ay(YQ\IbWfpmzU_//Jw2hq~mt{`C`>Rd}$Mx2쩁j?Ρt&n]3|ނ;E]2$#CI`D(O58IVV[ɝiU@8_/ NWjvbA%`^@AxRx_`#9>2EQ2A&gJ죐KVɭġaQXhȲ"Q(A%6/&[Υos>>//#97rfp*nò"سtCD--Up_H^ y;}c`fQrI.jNpCQWĘ 6ZufuxPX Xfjfj͡&ݩlacy#fU}r3%įr_.+ LWrٌLg27S@ cV4`cW[qo<4$ p  :ZUgKgpn/` Γ$OwV4 TDDK.uc hK+$ V4"ykӶ((G`$=*J @/@)QV-'$ Gі_kWJ4ʵ>UJm_B Lw|0xh@a^.?m?^Qwʳ=#,j4Al dKWߠv L IHR@@HHϛ-PII,WNLS̈́5r0Z^,uf=6I)l^WDΗ?R[eH>o5|U.[<c5<,]RbWSƙF_!cj6!:]PtZEZ@KT%tCRhRlٗ{Y0gﴰs 7mdo驪Mߕ&l4%q97 2Lz;&̯9y}\2C!!xAB Tlw]rq!o$3/{/NY~K=lVEZ1^u&P@':|vo_jXsnvl[ھg_6%MڰTOl}*1墿cOʽǻ>>V$u݆[(FX}(T?5 Gs蚈`m<ŧl;ӻGDrv]ˍG|Ĥ9$=yͳ$ٸ(d#WB4ʦj3f\~w{ZzS6|Gx6(@d̛C4bp8#qh~APiz\y?G%/ö|ϭyD*'#dHTFhGdzok3suh﹨jZ*_Wzkp~?@kj~e j}A uQG_O=o@9qGA[ dOǞ@?C. G5?sC"E 70_SĂ sK?I[z0X=#7cg$7.PUNX$T~B@~^ 5{!M@C{Ԫ@Ԅ; KR/׷W x'I^}{KGpP$wǯc161jLJj/D y>em(N wC9xh٢gX 5;yXa2a`Et0p ӌOfvjUS,zT`Ǐ)%R@jB +wA:& 3EH;3ޭdNP֤ !ZŁ@ .t;@Εw7cxIR#7.醄_R? 9sc۫?tckU4knku)dj)0A8 )"N/op7 I)@=kAxE$~={ܸ8:57'}4ѕКKpHGǸNJNyI b> /:@p8(<=bHwcUůk/^Dfh5uōvgr+ b@5!INg 5.9『[$0(nO0Ӧ0wj*5qC  * =)+Ku>^ e˗2BHA2-n D[z &x^|IGTr4:8!`y&o" (v˖J7\P.d&ca7HYBCG|xK=ۂKR.΍99XA}_W-vV+o:YX}4Utvy㐛\(.8@I) oh|]i9›lJ_ӗWGΝˣHV,wKx85YD% Ugz"LD[`i褻ۓh<ƪ WԈ !llJ `,ňEQ"ʐ DݾPR WseK/;rO .%\&^*NAAK*5ed d|S)U[Oxɂ-h)D~֮5d|z&{bWTPh#' Ww5a=)(N..B!0R()Ж++2GZWz}-!}HSMݣ;}1T 5K-у S0Ҋ +\Xǐȳ, ۴%^O)5e--/K6j*׀B2!4PtTo0RoK ]xm婢ݔ\ia6Jz!-W T"I*U]~wgSH,U/ QD*e<`ʣ/+Mq!׼Tsqkԧ׮5]rWaޏcw^UDD9x.$ 2 pr @&> XrKЕIGGsw'XB΄g4j=?. (Ds$B .k 13%t:#`*in,01@`@G|J" ~&D-;Ps1\ADH+DgyfprJ7z\EA.] g lM+J6 m 9)7tcIt eoǬ`9e);@JMŐb*)RƯFrR:Pc.ó?'>9}YMpS,ۿ W~eTYj04D*k(-&B @}T =Cy7`RKcmϱGg{e&ZJ*ZӽdMٱPچt\qgLZg`6](Ç>/8R?MxYוI{|o̙Cyiyg}5L!݌]<`D,5/MzhWB2dwuW@/")s\n]+4,j)fs?R`&&\HcDVשΪŊnTHI0#o8򸦭}e.o'c¯ɘ^G9xxK験@#ǔ 7m04SQ2VMֶ*ad]Dg3I3$\|U37>dj<!?;[nw H*PXup5k?eg&K-GIը+=ЧCEKq4v_trL'SvݝR36qjޞ%6-F_}z =WXD'D>"eO>_A%V"= CL{c`#& [ @ x43xmKZZܙ_Z>疨!_Bzo\=Z ݶM/GһxُKw+@<ULRe\Y̫?Dwjc zu&7y;*Kzmr˕p"ӿw(A{?^tiʭ9CH>d?\>)3/5\79w2. yZa66-i ',M﫦zz4PՍ"f-[Q ~!e~'hK6 c*/m VH!w {}5c\PըKw+;| N"Z<~@lXDIe|3}a"\¦ F_$ڪ̘ͬWxQn9c׫1Ǘ-uRHGk=kE zp.g?fK?B zaIg\5Љ_kIG.t+K^YwGYǟq^O5oITQ[<6,y๓sEiD,S8QU)fUt4V[r\i6')()bPZh)(+N4uou[yiڡ)d/WYN?RI6聲>+aO:̛62ʔbИo%Z^O-KP|%x۳W l\ı<`CwLPnyEtm'^ 9B2̦(U-OZW!(8̽YB:/&UrQS*܎f*;jYMI,gĚf.ti9)3^hўw̗[9D@)D@W5:ab~bA[r B<'c3edgX.R3M.T1`x}kO’6J.79ZbbV@[MVS.i-=W~};Qyawypk`n,9iq4r(30$cyӲ^d8yܻY(n{ A$HB @۶{~쭊]mjQ$3iloW]B=!/,Z%kP)&JTvrp{ օd4Sr^3x%m/hz3/.ut1L%`oJZv8Jyf(th>aBRdB05 gaoQ`;r!3|Y| +!V5c@uX=ɓ@g3YZj+k|n=76BbV$E9H !EAż793(ֱiA \-QX@"Ǔk\i@=2~3}Ǐ1x,p_SǤzCQѽ쨒t).BEBAʟA<J2" cX\-% V(Z(0B*$"1Eyh~=o?_XR{eDCndF" zEGu5{;a֪pH@)Oˡ8/i $0‹BO)T6l[M6f#)pcW3P-T K׃W-tYVUvyޭT 3ƿ;rL9U,R |gsE4"͈=CvFC.,VdZ"0ˊOFp6}K:M'{[M'^@PX2VP]% HPI*w_/ xw_3= 4?T(RRIJ[ᦅtj ?Y|{ӡ,0 Q$ȋrPk\@/p Zo1c@R$SG{ϋ?G8ek 2J/q;cTKyg"7G2+tr"J(D]3l 2Hr%?g~g4lr e!=$ʚ M|ctcs@f,`.6,8t,e0yPI W70)/BLi1 Z^lJP/|+al`lXXcRP1JXD+'AؘZ;e \(,* !_O-$/W>lͧעdm%i=t2Cfc2eѓ?uAroR+*W unDJ\-րiOG\mtb%:|OI$y^?:=Gyϝ6v=R7)Uk2[ƎZ~uu's46Y;̥T [!EHsy:M"2a<_l6B+@@te w H>&q?vL{ l+dl8`GߧU d>[e ,j /bwoi)~_v}$6 Bi㑆 >}lB8F{ݞ}?+9ՒX8Hdo&#caZ\MGt8hYItJuU;@fQ(n̐ #ZOՋJ. [=[nם\L8^^U:>BHhQ?Uv-G. ߶u:1*V"Ab"Ȣ`>"E(H,R*|bE"a =%!jIIX,HtTZ+"2M^/!,~;_I:RӁ@&EU_6m$Ūwl)=sI5pzo;g.Bl@–jTf:r]Jʹ%݆Ԗumѽ.Wvx *JOf^{&Y}xtcOvg 2İ-JșQi4 %p7fo~?g9zQs۠D[ݙ?i>__yHL~,v-x "il1"DI)+В$Ha[xXzS?;kJnjsG4rr g~y+d[GiF㘶~B3_38I9h 6¸WBz| |aX  i4x?+3̄HKm@Q|Y}U5exA[S)< ZuR:>m?gs:Z |c=#>/9.D"(4] Y)<B左SH QlDNxq P_ˎҪ" FSJ ,n}K$ sk$vKEE<mͯ~BfIerME였h+Z }Ds_Y'aCv̓;r;2L%*.o:ZSaIT1B@PBN nWzZ ,ACgyTEUW: ]uRל?z˺c#?FY;W:>-d`X 97ڍeA 1)) kGsjkx3 BM-ğ!B z! tKd|~t+:YA*sMC$`m$\yX)~7]jR\ srvpo1鱐 \MVg'W g7~ٽ>@ƜP Y*Ʈ,n:ZtMATc\$$c-K<4,vt\7J0cz2U{wsKJ |n<w|XP(LKuS-9vco 0hc^).sBҖH˾9WowyKleZ! T&Yh2۔,$-d{OxHC؛'7 :;i>w7;=Lx\.Ql{P^{<{|{\\w6Ͱ?B4?Zpɸ'WgVW8Zn%t&^t'_{ijRzvi ˷R_7^`&$؄2^ ]ߩHtg>LlרQh[^ldq~fIw|oKL[eӜu:L\]4g% 8M%WWDUNa(*"WI<!˨ū.W,` Gw.qihZS:O}vڠG3^<CpV.cVPnu(]e1]mV-I:ŃZx:w:.2,۪V>/65I)=ρFNqonҊSb)ɡEOl΄8oDAD@'^)@մg F։d_#HG:4=n!^d ""@jSR" sM0"LSeA[>_tIp1qE29և$/DgE NN۠ŜK8"} ` EV6D@)PH|l`X:`;/J QTXvF6Yd㊈T˳7m[-{z~tfJ[L TKtF+K&ęDPB0)U-s V)*ՀנzS;>{ٳjo.eεv01͵'k*>ͿH 0yDC"/l}|>=ZkBRQ3 K^mNNPI/<ԶcӬr^YuCEO1ʮNɽ2.*ܝzҸ+CwFhw}\cO &K%qi eL@ D*6H lw~ހ|B岦4b'-T"c1 y%4RH$A*gɺ3*ٲ': {ԗ6 Rb 4X[w-HdRlYifEs7Wg}zlQ73:BN9?MyY,9TMBpThdoY"q- & N%Ѕbō_=IjҐ+$7u1, %JUNE[]S'Z-^jTn1@?Ȼw vxjnB튠SoҾj&(0%*b=I."{2t<.NRy8d&aoQ#awۍ,N 79\= lY ?ɠȴ B @S2Ix.*'_~(ZZK!JB<.R'+Ѷ\`"FB^I$ 7ܜOŷ^ \m-VS @+=WNJ]. 檰hfo8u2JEpWId8ԏUժerv E^n=T^((ErG*H~yIIcMQ718ܨ!Q8,ӆS\tXK>=#8*perl$%QW!9 tﺉ#AD9C{=f",f:w7Nl,],0Wy>.^ϥ\YB붮v~:w{`&6&ǴѻqJj,2U=Q@ YO$$-Y0[RڹJO0{vYT` -イgr(>> Upg-z'PLwqW=n^[Ziz!!<Ϲׄ-hE9v@taYp4_Ɗ^a~-U&$pDk)<=r>uf.!Q09 O(1(e١)T2r5oacΖ[}[ ez **ܮBl9Ia, ) l\|[uz8w;gf"PqbK=4*c.v^ObأyE]nwu_8t{waIC-Zť=a"^v js˞{{~^rVL{6 za%shɔ5 ЭV'>?zљS.OmTo)晋#\ 8/:ftuR'%@l^w x^K\L OQ;5WEZYS* Bh:&u't/|uQ:ʲ_;O~w o6fbrE"^-B;ckjZc8%e!?zrH\aqWr/N ~->Z7$uܿǮ_C3TS\%^C- yw<:O_r]Tbm~v*1YW ¤;EfR+Vjnca֧zPboӱ1 փC%)pH%fhK<4"ϔSSj\!xWK,`LReIz UDb()"Ԑ[rC>8yt8yVgTkR .#1^ds.MlG*# E& E %Q4eD1C R *쯤Pl{hn#R3#]jo]dzoZNA֦ ʷ:|WP\K=ϻ^w?UDQD`}WE -oPZsQ Ր`[ r,d!EXIńI t/ՏV; NQW[ U<;!0 )@aIxÈ,x 1g5'KbZAGrÉH9 0󎕤Y5 ]hcz zK_ªrzo-FRJojOEtui][.q$C2vٴB,|,mjճ:vmW}EF[`.4^S%oy]pt90_зBk%8y$)ݵ7J:( bFܪ:]'(:40;PZpw(7vOm)ڣ25dW?iU[ j^ެs*kP吖 EI#82{8͛ՋNb$sBBHB+r,Rx"e /֊'{|!%B1C40^7[Ny~g{/4'mvD,g\U%y` I Ѽ}!&3=W9:j5k2P!I?j@\Cj!9D kK>.3Sbꖳ->"'N<֮ʧ?G]Ou`[v[-v np*!lw|,/JġL.J$q9Jxǘ HY,k$BiYUYgo/QU?v_S 2AP8 pP?Ҥ;LU2G?s}f!8 uA|Ens &n 19r(2ĵ'<1B{Fdgp1i/_*aj8m<aynz÷_ߺvA˦Dr1l$C*. WK3㜡T%tz'A!Z' {5h2.JJٟ;榉RύJSl©*O%t_Vj6r%#9II$ ,0u(X4u3|z  c((6 3&AʀB/B TP}0Q%)BI3ÉSLuZxW' ,{h,r;~fF҆B-0wjA(v<$WkW w;%)+7GGhirt-W-N e-]:g[وd.1&KP='vEnp”r fr,IW=^W7>ebB@cK;t%/T3KLbէyMAj`,@txvQX?Yc?oX,@2om:|7?Zkr[ܕ  i8ZQgyƣYV)XVeX 'Od\bK+'#t].ܱU*-e!n٭oM3>wf=(,(сsgOrL%-i)Q#\_^zwLp*%6j]\J)w[<ڒWjYJr?#v@RTm4ՠvr~ MrSv{qDNCN Շu4<=€BZuY_ K3D~!뒂,>cOhߧ)ֵ#ե/(·rK׍/h(x_%% އːnf@g "@ \ j铌F]G#Sq?R$ wl^`j(A]im!ju]έDU9:ڀVV]!kk^+o eЯݻek:j9Z<3pZڇ0ZPgxݘb$2%oR(1mlurq]5Y}9ǐ?vjXuܥkbJkmӳOM!}#y֯iGݟ*2+qF0&|gJ)pO*`@υc'uNV=И" KJX+R*CF $4g=! ށHfXh|^8;iY?=-EM|Hk""ϑﵗ7OQv+uok\۽)-/=igmZpF$Cy1TF}_s'vmY-6w] R7Ɣqu,"TujETZ-]+=sڀ?Q.5}Ʋ YXʰB8HV.{Ihn :,"i 2VzH۔+Da 6n D0YgY )'iu9*xBPfuyiw| wd, B[ \.G{?w.81[]?ys}7+%t#)LDx; ?{˔\Dk8#ˍI潢̍ scq8C$~<$}qԕ?_&?l 3E;^+k* 1e6]Z`@  dRAbŐ,X,@E" @P"BHP"""(n@P"j|Rӝ;h[UtPR *@ұYJ[^Q&h| 2”q <[&(s15C-V?4(@|xv4# ]#@xvhpC`GD$E6SH7KtZ"/_ IvV"Je@"/:ce2FJ!VyRr)4u61\:s0rx"Ls H)""LP%?ѩt*?rU3sOAw *^GK+;ziEkg?ZiBm %4 kUC~s][np&7cDb ji:oiڎ˛Z 硸e>&ZY_`7rKș0hMT egb1MܖRJZ}ϞGiy=r:ml_o[>7L44 BZ7Fp~lt=~ 8= 5ޙȢT,6h`!_|s ͬՎlV>U|ucZ ٖYD8NlJBQCS !*(\<ߺLb{slGY`IY2!t-kS~|\Q(;Ⱦ⛘!`^|Ę:u')a?T.We?}5y=[>vfnk7ῌz 3:G;g a2ܳu'#<2JT;҃n3=i ?ܦmN%|e}kVms.PGSW5f_/Z֞)i Ds8IƩ8jj2Dq3ϑ7;g][쎋`|_nGk33{T'̃#fF|i9P4~Ko6{A|ƛ^%Ta %.&:Q|D9~"E+EV9ԭ)oW{J&wAEfI"mn𩤆ze=6r™ߪ5?𭖦2\-HtKVnOϷ_m-EL;V7pjkkcIWda̝_K9Zb`ež nyUM9gOx~7^*9om?fU7EGl5:MIb]$e}(dzuɲ +M!+'pRO2t6>rZDvBGAYp7{|֭:o3,'Ol:.ƫɗχu8U݌e&:Y(;/3SCOS9Mi83zT N{1+<2 Y>.FB9-i%X@-KUiʽN[j&Z]LlWMz9tpiEE.'ykLK0!vFP_\O$9tYFo%NB^O5 s[ Clqͯ<8l>;=hɊUD3h('3\E#Tn1h6Wi-D@ "@!fc/'ˎviʹű[].|.ܬSzc_e]V [V/.P9^˴ZuTjV-馛(scxd$d$@93̞7|.88,t b"JFRa" u ]\L|l. ;]g`:QbL)xD-,H'r"˅*X捜;*'n1ܩåu Ptٰ/'@S,K.|n9iݜ;=瞳&εY!ڴm,ކ]EI\:-a:&@>h] \ mHkV|~<=_v7icO,t(4i_{|\]-#|x"Yl/C4 C"L<\K<ʼnF6dzP e${qwv^.4("@`5W>V* 8„ !8_Ȩ'HI:fM_Gν.{C`|ΕH4ږD7 Wq6s] ݟ)վt@EqxV. ER)S(媲V *(d;˯!cN|8$5JE)} gn&3M/[ghk(Kl\#] [JVdwLI@9\~&Ԛ~,OvclA j&Ҝ@Ԉ tطL$\V5凟F!WVPTK "J 6EKU -40 ˗jI}t;?i~SBcEo~(bJ^_cy7j>E98짾$Ic9kKatwk^+H9J:'LnL?dVW ^VӅ5䎩mkZ~fb30nwn#1F4-[KtpkbPM*Aa9d@+iȭ~#Bh)!q $4$Q`զYjB7CWܚ=E/R-ii Qn"I,HqOOT  q!gGL- y?:dtGF_ ]N{GW_!Azp(+0"׳I,"LeC RGg֩KJZZ2'u}XL7K]ę|1x'_[WlPBW>5 B BH r89%ZZ5ݼ^^t. ŗ3N~7dodzN>ڹO5Ā ^&3BƟTnh|PRA`zePUiwwg\i޾9-[eApAT rfL:%^Y>hA=e{Hy}"nJ-&=h5 1l@IMS =i^@|Ĵ"OZiu- =[jn*xsa8p Q(iR1j Bzy)Kw]-8;M32+@(jmp%HXZ{*ψ&^e.^e2ڙNLZQ8Xċ*'yzIfKNc"S,m&N Pe[A"~"Foݮgt20\s4:3vsK+SىƜzOT6yrʑBx| kyMxHsq6Xu ϻ}&"F,쎁uB6\QX@7sC{{Ai;".8>wӕ^ C7]&F5䯐X* c@FoY*(u-P""6.+7MmsQF"Y?nXr:4_g<88f>ު@fęelN'O^R.6ZmDckyu0hHt -Sr$ڑUA䶶w3Qb~}=|iL "\X ةU;-=%w9/nƲfԹ xQ6>%e*b`va5ѧ:w[.DĠ4t+m2kCM:MWymsoQU 0Zo:F&?AtrVx(y`h-6P^lQd,u39^'[!F.a#~k4s3׀緵4+])gm`o:tJ>v;LoB혶&ZD*3[ /3PH5 EYKDO(CJ/a*P\`J`\ (ck$5BfϪB4 5Z-jLG P @c 9s,t-d ad bY PqTNBRXdso$ (\< |ݧ}כP7o@Zt;T"g;)׻/;ن8wD]q~#ϲ#i-/߾}5E e&ųPK^/K.Ԋِ Cet tY|H]lO>[+{8崂 E R=iIq5j H! ox=JHEc!m }i : >ǐ]1ݎ-;@6_g1`tileʭ+ioÔ1)_*T!\!!NGmc ̯/`ͦ]JDY zԔOM`:}Nc{cvI׏}J]/Gev\ڥ_ kGž .1d-# >'X0mC^uשQٍ ӑ H7o"c6.5kQw]Mm9DIo1=7Q9Sgܴ/vwA<`.|wp%y q0M ODMOLP 00fχ smpֈJ>)o=R!5羇q8kE BVH˚VL] m QoYrhLB SA crɥd^-ux_ӔOڋ[6`[' 9 (4" wӉ0hCc`I3Y UC/s_.?`=j}!C150 B(YeDnno㬠}ŰyV]\aS,6=Ȩgnr7xc0]'6~f1+*N2 eKeJJ`&ܤy¹8d<#l4`=Jpl`OtOu W }&MmY ,޻Y ׆@owZ^ˮD}9PH8 bfmTlU?Pտր3D"EgVi[-,ޠ%ϒO&?okpCv7yt/*/ya@BB1)#cyp]w{-"w]9&Dp/SҾk^y|P*f`GױƗk_qHg ױCF]"o _b^(ɑ`\IcBCa4`{Eʤju滳1 I6xun/9 ]xGGry T*cSO~wu^] 9\m).O-oI5и Pvc\]wLS/R{XN|Cќ!B/kyCx~ڔ9g?H vTgj"a.׃b@[Nj[Fְ2LM8a``!͔Kఔ  1HmhrjҘ[;\&Q{U`/9f2H20f$>zVL.eӳ# MJ]]P*GGp-XI)4U֙_MYUTiPЬ* ꌚvѼpeZ]}^٧(uWWja(5~l Uzvw ãuŎN;ϸi9o?_7z XUԶk: ߼b83j@r0}XkW7[:0H@@2"l-wZJ-Y*Ÿ]D*x@/(JY\Sr:ĠFv4Kie/gym z@ 3RZ)ga`8,L>?%|Lx C&_71ׁ.GS4ۥi.x˭ IjR * "u\8x571,ݤ7G9dٸtvZd3^7;RAͿ3iۛ# ?kVZ!/P9R2DF^[Jo$)ﯾ^f\xb˹Hzz>X S\zcWۣjcr:?ʲs] oӏ.(.AKs8|E ȃd`M!,W D$rj]]3Nlt݃$'3sÇq%<`]\N-yNf|ڕv" ;Kiˠb )"fA<_Nµn˷42n`>!.@&*(Z|eQC4:S-Zċ1&@LrzٴDI6T? cy9$#+F}˂!h18 34 zB,Qdkbi؆Li{#ffB~1V>2χ5>ә痟lZ=r~3n. EU BI}vX!B?5Y>Rdr gm˧Y|k& DeЮ_},s"9[0nTV]PM:LM\a:9ɭcŃ-c&l,Nq!dT}]8NNY6ĺRXK?t٭m$dԢ xvgUݾ>E u[*eE?K\cG:ZKFdh!t8{>\i^lT%[nJ߷ 0 |>몟 j|;A֮R] ^ =qC7\-bC'P!p )N~R7#/#7z3,I!l%Ikr!3h" (dV\Mw7 ag !F͌;7&\ ߆Cv  RYg-y#5 ԦN@: sOJXU<T]Mx㙶yB}fӃgRfT&D [GoCC=V<*qY* >bbhՕ:԰=`E:zݿ@6 t4Ū B#7³Vk.fhRQv*ŪnH*ς){|QB6+` _ff秇\ "-o|y ߏ9/*ic2qBmټ[ev\׃AطP9? k g_nX~de[sI|]2uzH}FXaB S:g~eEqS4gՒ%g)>UćV 4 ?N0|4?cTnX EK S|\ʀ|.5qfKB?c`';͑8 ;`c0=Éaү|fp@ɛ[$/T$!wQ,PvQhd˳Z?{j.N<>] !41q]DǂR__ymXi1ywC;ƦW>.:Qx K%#+w2p;e`˥f7nxJU]?nq㄂  $Sw'ѳ]>h7{3Jd߽_pѳ۞>8ˋhDJi{POGW'v h(*&~#h!AWR@z ~w9 H_/ Q9ZB8eDGk|?"G#AbC!3{SwQ*%ǂ8lxxXGyeDGX!jhm/R}Hj2a'C9K|GgOJoz #Ɖ.@ҕ1.F {6Yp҃JF bZ[X%/KY(< &,0j\E~Ɓp~a/ [>D6@N4q8YDa|c`㫫[9]uΜߍVV@F'4RjVl?WUI_dP>(A @kVp24?))88*NXTDA0Qn Q`>rBZp8\1@᠄ŒO(EܲoA5P fG>5E-c!c=yrL?^S$JJymMw*?:UACf,؂' DD@ S"G~ף#5V.5Y$ٿJ𼍆_r5&}?*j Su:>[YkC'M)Td5}Dw~q:H ҄ 5:ySxAzx܃懕A!Oر_ gdBy gkuc`;9 = =#w u|+`[Ms)E͠A:Ls?MT1z*507x(_mm_4'I͚>}o'4K0?OzVWf2|d4[GK.޿GsGno Tij[o;jťX0⹫6ͭ9i =Gg+~_Ꮜ_/OO3;jSBt?F߽G'vʦ˞M+jUP'{A.`Zx*rWP@UNMM1PPQ}ۏ-^8)bg 0&w?%'.5V?o_b5]Pm ʖ/dR`3y_"(Wbq"1X VN1o ,RRC8b:X) ,gІXfh2ԉ8Ђ!f?_?' MK M8Ps Z@ VH?ޑ&|h*%#EL _Βp)@F^:qr}jgaou88oFi>9gJA R r@@#Dڮt+2FjGk}fғc@n;N=R/#x;ɨXcsm8Y_e>@]XWTt.::[՞w|rnCOrҢy QGyz9vjc*}N罟=]Y3vL65Fg"$v!Р?N4p;d}~Dq%@@@Ĺy%8Р8Є!B"ۭǠi4EWS5_:G%Z01/:W_wgGC ~ .~1~oN?\ˬz'ΑG}T Mc/|MDz2 0y%q YNI 67b-&;zEZGׄH)??I|X-G_Ir݄MU ~E> %;J (~ˁu#dȢH !LE$Y)P`)d}U:l\D~Ӄ8ӏ޴2]ktqjT?Rִuj_SSJg;i U?p6柱[GouQn?wLOK1M8J{3kU77]q9|?c~5Z>WNu>޿иuЛCݒz{qznл᡾;ǚlnNwBkEC0ZnNOA_q = "4|#/ rkzqj<ŕuM[(˖)V;\NSnbpE 7JtZK^h.dϹc_~? 5cp05p < ' >W^FM3 )+`>LD`TEJJ_l}o-dU˰~o;mޞgAe絤@zEB}ۤ*U0~;2QNQJpN(?@x7ł/Л$ŋ,ti1@|DVsjvZ|cbudYkh\#WP&ֆw7UMI݀2@=~՛khk7'EX{h?{_ovM\B.QuZ;{ Hl~Exi +,4j^oUDRF6HB a&ga:3Scm sRt˼wN"?H @.7 ׎kuMk1nPL_H/Ùzj?;Wym|~ .Brb흞놇Vϙl]tt!,FE6Ѭ^EdXo2^ ]YICxBj}t\_ŭVYזmO~m`(Idm_Wl.=| :7^1]p\n\KBa9uHTIz\E ;  S e- ]Qvu>rK?bx0=JmZ -ug^y1Ύ\g^ֵ W-e&FLZKnv{|']r : K󐂺g^-jl|7gg.0Ŕ3H&=cކg37Iä#?sHyi$>q7h2 V5}^+NcZoC ⊬ 8@DIHS8wMy %>k3)d]1[}6unIZ99mx[ڛOPz>}31FQ8ar^of6#dP~Җ8h-o!c5l;|Qa2:!> @9m(B"Q;?9V+[i0ԗkB@$ݰا>-Y'oy @T5FjPSșj+s) ՃJfM).mf2."~ǰUsy'7|-vSfZ=m-fd1ݺ]MzٺCiQPt<>'z9ﻻE-`ٜ= i|=DSc:ȫVI(f[!L/]-]~nTq '0]'|nX 7B\7ڲB{ 8:~I >]ll=Ϸtuۻv %7Ƣ#&^So;yKhklc01zp.n0# _74yմ<2Ub+ڪQ EVlWn]]>cb e|1:4d"i=ߧZ" *A,hI,[$id=V"E5݄+gϼ#+/\~5kkA)^K'ҥ.{]v@*A}vBsjBlb zm-igNV8λr/6ԭėzQj,{u7(?kknDc~Fr#%,-΢E!&\mfG֙ǛN|L10%MYH,``W4ؽh"&;\sݷ踝1Us}1B/;{$\l;Br(H"գj:onT*aܵC!ÐWΤ(A#swڛ"܂}╾pX+UEeNjFAYPWvkSWLcs fQoK~BxL< MEDpozL{AFZsR=_pwwz/Acf.c^bN8Q.DU}t9`&&_AYS-keܜy*|?/#f4ʤ%\^RNM& —T Ɓ$):(Hwf=R[4ݳ17qTlC&. &&͒vYZ7œ6ȴԩ޵KU^w=G]63X=xY?ywR|V.3>DYΔW_>5[]_efiC&[[}5-ɑSr=%l..e}lr܇.l&L<6o+ZͳsL$assܖ2ʂWg`kZa4& p+& W[kNs[|l 9 Si纙2 Fq2͎lEtpKK8*_wӑkB^/A\esE,9qz悔̥Vf_nkx\RɌ.# )TL69+m[e7]'=ZR"ݣtc e# ;&,mZS `Y }4]fK^yc+3&Yflcʚ )9u`26ֵK!1̮Ka6ۓ&f[#Ƨs0)$.(Kvz;wCq=˸Gdl}V˳K*^Fcr |avgx qM6o-Yts8u~/mKw^Kapi z<=k~&qa}]9^߳|5i`kr;.CqxAzڟwkGj5_yObKXLu#O  ҪBɵTKqC* n Eə ާ9by% zzu i$=N., NoȇW{{zWy"q= M wj'6so+苞;oW%W˳gug-zK𱵟KygK/(}ĀOO6q_﫾(vB>7yWr >VN\`;C]Rˑt *5gn:Kv57j؊]!M̔ Y!k-yKٟ@b)@uh,aALb3;Q´n!@5P[?R5u!6ɔI w븰֨vs S L_QH]hA*5100S+bsJ}Å652 +b f5TK]ޕ`]w24bv)Ws? %egM@]_Ϟb@Ā'{V:݈7}ʄ<5[B 6 nMY['r0'<DH hE,tJ""dP8ʜ/ڲN 5iIYjs:Iu7pHx!Auht.()Z:15w_FiD6g^?ܛ2&;AT[7kSߘJ!ʒ\[ᲊ: pNzlBXTu>L÷ѱx Fm#Ed~)DK84q*4n+n\BZUh[jxKX&kuE-c DZ4w/|zuW&(3#8Lc\0)+WsŃ9w}<]Y4w,UtY7㺅ӶU 7빷}\}l7+1D{g0lDiٺejZ:~ 7e ;dX@A0,_5ۂK.g'LsT.4X E?-kA|DH% z>F+aa(Q̏ ' 8Oϭ}Y^*¬5.׽q8Iy( <ʫh F|9Ӎw!1vX#LDm ea:oP4(@ *5+B#Cn)=ѿ+y[Ml™e#A} 10%6H}K WZfUA3FEUn=,b [Yz\ ~,cz{)wy_ՂG:H+EucѿFjRStj>G+~br`[Ģ)Z]Q0ױ>o9u κA3e9K*P_ ڛ6qbvKͻХ![:9U? Ư4>$jc,B=Ѵ(rkNgضV;15bazb,ߝո [iyW..#'jNy>#[=*Ut-н+<_ xop<"7%חvmGI/JbX߮Jmo0m~lR_dGATif%4)5g80Kfv.smk-kv#_#6l-tY P5fJ>)Z"GRCJ30LP vcECZo~#qqY,VZ@EU"ٍjm %7GR~ dQ ~Rᾂ!B6IV:2%(F5bb Γ[)ƙ6 Ȅm&&2jD0kJ `b,MX\+2sq`ֺ`rC}[j>ŎR*FT{">e5!hayÐujfݴ{M4*:D/-/]8f+J)1)-tl3|$35$%4_@ʶbYVn|un_ ;'nț>_r D W>m5a7͑rKgAV[6i?hsQ7m !w(5JJy52jq)fOiふOۿCęh>/1˱HP|z/CtNeuZL7Q{5Ts ңw܎Fc9o 请efj<5ywh W9j3`z_{|'tpDgڠz;c C~q[;n I {~i7bۗ+;r&"3h&O/H-'kr{!^ܵ">f+/,^kt|$ĬQ~}DD>&̰8⟶jK|5(/޲FF= Hnd oG 3m=v#uE}6_W?$Ukb[ύ=th0Plf A<f?/k_[gV%*.ku\n7峆py>' &?Q~W?w~;|^Ql~7?xsolSe݌W7"Op/bx֐>>wBއoz_ɶ贺Lžw3uxe,]$-GC_nK5ګ&6%/C};c T˟]+cL|#?Ǘx]oK"pNca^66 ~{cszwBtwa P݈-20y{2$SW\uBr؂XU1bj^ƭR ş?W4FT5uTblՕ!_3F(bNK-cv% kRMͮ#aA:yosj,VD7xeXI}}Yy`bbc)jN)oZ-`7αH&z߀ I"vr1IxL a>NpPM҄?0V(ajPFCH{ѫ;+baUg,냅@t,峗AJ率7o;!r49`.>-< <ّ{2JP/*y 0dq!2>$ۀen.&\ `ŃAPPDR1-y-O"|S™se|L10MԁrM#D S1 MmX8w][Fp0`4q%( gGhqë퇄9`8Jakeeo#/[w٪,٬w$]H0 W_[֡y|?#;ѳ%cWEMuZ#k~7!gr騫 bo CE|JNr0. ،A$I1 t6y"nqf#Ehf *Eȹrtka 8ct9Z(XA!XtXIA u1 e+kc0$f@,hfYZiiZ(6Bd}\n mX (RZ-\c oHe1MHu\*#>7#kKRłW L![0}pos.OM+ZFՍ_kl9AP TU" \#FvY%n[_tEY&ݭ>Rl)R+C[T˃$Nd^F7-6$bk%XBSĢ),p,sW]3| ˃_̢LA?2n[lEɌk3WMHl>jwknIMV<4vn;l\`SUX&֐d[lV1J2Jw*yJsē[k kz9F 2v`e{W%_<(82²Eq|nO^W"KrfӚP*pnH ]`ښג堓.*f +5>U3M/[6)n7u;'CRZB࣋/Фmw`Nߨ>xyLT+aPY W"?߅f 1zh(k\ֽ{,\d  BO E -|UPۉj d,UˏzWSeO0{A>X_T""GX(JUv'=mrʥVYR*]I ?D,W{h٨*[HAT%P6 Gkz' ?UpR G֡*[dAK##hP|b+]9QQ56-ʻa9d L9o!b\[j6'ٶTfg0kV{]8Zp4Ftm5aJeÍ* t,9M_[=<|b50CK\47nW_(rp(U98+z̃F xбؖmwǾEj׽y0t)BdSWo -GzjP\͈\D*S"unB#dTܨIut"@h61⭲͎G%ҳY7b݀K @YU™>x[kgu6tD?gpK?hlBx̕#wKȻﱃ}.@y*W+_;+ٱe{I@/7"A'=JQҺKnwc 8o5Nta\Dә#`a,X0S&J ! F7`T?5āk='ى?娲] [D\o_%S(Oٲ;Cti'%[(s|&#C_b3ƊTQkr],qJe lZC1z-Γ&1qAx6Tj tLDh|66.ѦBC ApsV+f=%׍kzp(AN л23IW.\RUʼn\,:\cQr,i( ƶO ]?4A|dڪ\gsjc8clU`խY Ij11 :mhoZaey(WAO?I(}^Uk@ջ-/v4DrH 98YbT=6,JYB_o#C+f'WBaDlΔ,5t'6=!;k,om a z13D2šI-hl\eMkҺr_DXPu 薤g"Ni{Ŕ7FÑk0|]Y.R_#c>klv:Vw&.c!FbYc>ye5k^$|+ rNo\yn+/<yAKA-wG^)ZL'm<7c|_އ~>Mui4}0ƹ-@&,H@ H%N?L;^6on 9sm,jZ_Oqy9ʴ<\68rw{7#Enl4nGumOw5ia}C~#[wu',nR=ug{'i}W oy>ͯ喩Χ>J8Ue=cjs1t1V]/'me!0 f}NnK!wssqᕷW%,oC`zymGoڸIk$+zc 6S v6" CtC֡ǽAnԀe1KcpUnf2?V -#z>5V]iEN3.8> B^1 \?$׋Oޏ[}zqxnsUPhpE HYJG믧Q-!XNwC=-K ljON_2 y>x[YX}01h @Lf ق@)"^?>_lc {示INku#l.n>.uL{m*7+-w]HL%volkWZ#ӫmr>mK0Y}}wq]H7jjۮg5$Dl`R56]; [Q9\s;kSsVonZA. n$9P k=wSAXjܸ,UT͝3.Ix7@(}a[پ>M>KfUOҥp +MTˋcwW@*nRPND b ͨ1O[R5QGv8H*!R&'m%Z>PUE*Ȣ%v2RTR}å65VPJ)NmTO>mbu|b5wz@ (a/P$^4Z^ xO/w֠{smlsU/^{/HfW`8@U FQg=`-r!Aҭf؉g_ctfuG{\]rh}}ۻ|҅q}5A5*ӛڽUaM>ymn–/X J>;]dM iӓdX<eUՍ+ۥ`sǬ<T9*wT!D_"ڠ8ڍz[`8u ;n(pz|}+y}QYGжeq,ht}{7yCdqWOjﺮi {d۪J7}ޠ;z!/[m.w@ ͝˷jEsm{go4Yorٽ-@/tkGRf;>Q@;i ଇ o>@>wGlLs`@Вmid {o{1;>-yn:/sP ^րpzhoo@/u4K`U)AG/Ynp;}뾯. #ϝ_zV y};y\wv:'`jh oeh42x;xjh@ La 2bx !4dě 4d4S5'1SɦFLH`oQ?Qb%?TޛU @ hdFj )4dbjd@Ojj=513LdSMMdcJxyM)ziC(FM=O&d MI!d@&Sшj5zLd' @ Oe'ڌ4z4M &dڍ4LLi4I"hѣAh& &'L14h Lj 44M122d z#$ LLe<yJ~隞Jz2IGA4'6IISѨޔm# ڞ=M4Ci6LB4z ?TM5?OC(!$ @ b삩&'#oƲ-gMv'#ANWp3 3 'Chjyqh:?j)֟muǍ wrU@š$>lʯta8{<<}K^{>[-1VB|41G 8D `w6;9m+) X0Ab,?zofTU 'jTDH,`(Z"SM?!fpYϋΟ⌽Vi$T"(F?Z3(lp, ЁRH`0N144bk"6C1P#$ g@'H(*ζb@D+ *sD rk u11Yfk0`])ȲE"@YȨ@PQAPXE1XX ,+Ȳ,F1ATAAX("ńR T"EdD"EX"`E,(1%Ҥ'bxGWA@7LJ07anNbGqvv!$ʫH: "1|^\/>t5ADTF(Q`* X#Pb Yb" Ā2EXtY˝wlb$d RtC(@ݒ)vT* !~w&DE*TX ( ""@UTQ'矸l]R(EDEf#r"E*E" ,T^Ԥ1*b"`Ƞ0,T1DX* $Q`X#" "QAb( E*AQ"Ƞ)+"TY"TT4ɤQQHQX1((EY,XUJdKkSIևPR *PTEA "K*z}?[=/o^a>$W^rt@z\p7ODbʴsN# 0|Y }gqkX8Lǻ^ gmE!^-Po:o9IMelmL 諘,87h9 A RF~s=YiTso?Lfmʲ(TDY*eRE WeXՑCa+BCCH @`( qPDd:Q/Aj) 2BgL&$'43M m HVCKŢޭ|4_!"̤Zq=ʰmž<0"5;ߝQ։@g2_3b "&T  X$XAQ 1RDQ?x i t$!bƴR cE `O{,d$ASH Q9: "\tGL@pXR9fMm Ɩv*cTإ4%.WӖ}~5$H*9 ) ?jG~jQq> tB(fAĈ݈I2~Mu敓ByG3f9E$t.~# v޻9| ͞>}W<='0; -*ǻqc{ &`0hNmC!vꚚc+ n߅՝LWxz@O/)q#ŻpY/&!-̣386I漝 (i3 NNt9nEztqhדx٠y%> ElXF$Fݘ2$a@p he=;0"{#D ө,51__Uqûn:|] 4 Q=tx- ϶:a" HT Fl&2y'/ Lk9 ,Ģu4to^9Ă{>w!}$4cD 0nxPZ3l= / ex7Mּp782 i+yȕ(õ#v3/ICnu Bff.6Be[a>?ˉ2և0.Rŀ//:"IǬ) ; [^~^}kB/vh_$$%\9 ɱ,Jt]^f'gW`U Gq=FnSsyZ ׵q_s 58K^@D#rCUdƂK#N)P6VEڢlQO}rLH,VR^?Cϛk_D5'Yg=75Ŋ*`"(DdUPX""EXEdQdER,TAH#D`",XX*ȫbbDH(*2"R(PPP+Ad DYS{y>i%6.ą!ت:!AGC3Kf~s\0?^*]޸<+XA9`DKG 1Cz4A 7v.T DW\T5DuX}r+WoŐ4x"Z+Xi I ,|=&DhG_]HyOdBdSF_>q4ť'njIWܣ7Gx—M0cꍟbК-["͊jzɤ@[Rk4G}nC(E}Gܘ=j5\s^tZn3a9`:t56Cwl{&Re-{\-`g{\x~iL ia +2y?Vav>>wVfʧumܿꝀ!<ɵ :RpsGW,R6akjTs*q4;k5LO{Y۰..jG~њSp֒\>Z,~ʵwDb>04:6s5Ct/S%%1^ gRL:7ǫa:mL#Lۜl?'N× ?I%|*{}^J:fp#hFN `\ANROtie^j^a~inLd`_UNƹA0kUǢ**g*GSd&㊱:FIHJ9J~D=nA/ýz+v|M NOTx䏍;ͮHAG\?WOk[1BK;dܒxLZx~7WH`UOnð@BQG o:~e{b?8,nNSVҊ* uHjKYڥ82@{+dٞv!'>>_MJ aw&BDcW=2CU]b/|G ݐ#nVY.*_:$RGa!_BNzd>d|~a }snPYX6/DFmeCФ;X=D 0hu2`03ϸu78oJ88AGq!&F"`fC'&:+$\1l>9_qC&37PWj:6>: "@"utsmh*&dюqmC-88Y:P~ X2e0y 3FȘf*1Gfk޶o(YWoDe,ҭ:ur:b Nσ9X[#BbEbgԣ,+ǟDCD@J M9Id ^@=sPiSEY݈g?HeTyhrȟ"?yw힚q<,axN$۹s:S]BC r kB@u@]'̷Yid1I4Ў^]uio~/Lۻ ,]5ĿG[ffr$k-6VD\JMa]4[LX(%M#yZ-pw ˩3NMG[oM&=wYN% X-B{RgA" C8m"ԊdNXܵޢ6hDWt'avhhXX?^ݭT!&a\,#tו''td""玴 I 3\r\ W40gb/Gӎ64q[l̶ V@,Lٌ4.aѿnT9*ڔq! ǔl}UW=~MK C=(S=So?OͱsJc _w9 Mz+W?NG2ztw53faa2іdQ<7^3*Īﺀ@} :sgO&׼;)$8|fЁ߬u ^\$>Yآޞ򜷒@3 K{yR;o? 'ǃDp#*iPH8,3/سg3D|^r'yƙT ?>[y1ίH z- h"VF,QX(w玲;8y=׵+Qkȓh!1s5gj(x<$7aN،Ù(`1z@PU/A"c,eMwxY4gƐJ=v h7ibb*&ZieqЋ 1EV;Sf8k#U%k1*cUM@* ([]2&C6ѽ Y1>w - YXrX,IN3 v<RM;)9.R~;m:{J0Bǣg ŧj\>tTj<jgK"XƒtP`TQC@|Z̡>291s7m#*%_oy=)ˉ^o;ۘ0="Q^k ^d\8p *d6d6dJ2ea@A R -cs9P`5FՕ&3sVHxkRC2$!P>%}LJs_5 {iS]Wt߷oY1uDF0U&j"7PuAd`5yXT kN74.6MG*ԝIWauuխ62vQE 6 + 3mfXV3lU(XՃqO; Hұ:Yq*LH^n@\6ӿv. ȰIn{i ;kGiZ (svpN  AY HE"+ +9}-]ƕ 4 ̦(gf>bcͬ(Aeг8w,3yl _>w=7CIyy%sEZV3=UÓ* gaJYȘ3/''`cεC#!=/~J_ʉe##CLl}`:~Vq.hR2P%\uA-eshBj 6;X&P1Hc4zRگخANXy<d~|CNJ mKQjU\2jfEA5vv(6}5tv{n GTr2vl,7` 8xkT[F9 r*˜\m?ʉ%nt ?w|\nl:=(G׼+%`E $"^?-%j3qy2*:ׄc=m co0!Cﳐ  E^$ Ie1{~Iyƒ,@m'wmĎgWٓZn7NmhJ]ʎVΣ?G(.SY/,Z.McLq*Z6Ѫ[Kպ 1uZ"i^e;(YJ|2'o[a)iTBvQ03g(٘e2n[ *xZiKl2RUA "+nKA ]W?HfGin+:@J}J.]\-_i+ǜ}6D,CAQ'(f;[Pi։WXd^m{|t]^e-ˉm:0>X~< 5ӧvij1m+NSL5/YaWFP) 6yCrQ<֘Vvg1oCey*;1LD-­ʇI4xTZ1n\1kq)ƪ@+wţO2AAl3,n|ayJՖ"I` `TTDddAK6і9ohLMèr O0`C4 MjU=A2@p|[)X"Yr~Kð6/Q:5FF dTPdPcF1QHPX"]#A5r<O%\~мl7y4(N>.gb*@ eȓUvEփֺٷ@Hf=? #ҐMoPߟq Vp/ʋ lb-DU"Xna><~rbߘ"%LO9xT$z҅څ>&bM*`EP?nE3Fٍ}:1ɝf"#|XjY4a[l8?F>!ՋKջK 滵pD@X*0AQ,0N7@L M]zK]C j$~N|750_N6}ק[r875O` $YDY d@$BARIv/onmZ?٢vyaOG۞ÆnSQYp0oV%cuk.;8.{G[P̎C^h-*DZVѶJ[ )e!,K}c\2PؐP 2,A:^ߧH[{ƜcC-crH"`ymvRL& ye񁖩]\jr]R̀ kմJ@X!w{5r,jd2x2#ĩp7GUN&ӇZ,E-͌6s#N WD:P!`#9NGÁ?L;aN1CE)Hh=6?@/!'r׫9E[u*E! B$)?'1lp'`F!׶0 1@G1Z$~+QdͿ(b6F bKS Ef!>D"2(AH@! k'sǘmc(e{+v Di|Q!C 2cYdXCt/c,B^wwLԍLa%_2a:^ʊ13s"Wz8n9Þl{L00GA@ok|lL} pI\14kLcوwmZ]}$,Y;m[3Qgm{}AL_Ԛ A:i8qia T4fR*@" X!Bt:_ӥ?id{~S󹟀ҟp4=^+U]j*ҋE/ ӕs26}{d]Ӽ_)#1)i\i)Ru?p8?ʄ0f42WfE33U&K'I Rʽ#WR1׻7hᓾ[,m%,_k?߻}FeP~8  .Hnjň8H1R "DEzo|7fMB ;(`߃ A剻VnM ;:7d}D ŎOtՋ& Ƶ3Պ !1qx˘+?tAEHVFF$d$R ATXYy3ڹqW3ޚl)!+"؄S^m25|,5;}`EH$ L;" E՜{~<~ |V%~ ` T/:_2 U0-/8Q]N=yb/d/?uW2om.=pPF:Nڋz/{Gه/Sϑ£*ދ@(ܠ:qKZ(VZ##}d pWc`y0Ou'EuvoIkAs;EX*<ʂw4gGrTyP^;3ǧ4o `56]'OcUJ}ٙ0 LRK,zZŕyɪ)uѓqqdKF@JOw(cۨ ј>}f $V,^ 6bdSvUP$HvSzҴb*,,l+**v3V,NaИech@R(XT$ wwQ`jMw5(rK#@SkeI`t B)|ЏHд|CŸhB˂IFgt:,YΦń[3&$bupƢnX6plͩtrYS+oN7ixHDd8rJ"blMܛ[{!-rEg0F- tH`92fi,,F6r{٦ d&m`1,nvk[ief&DvY^׏OBctDT=H02 rnDd暢Ȳ߿nG 4KueRזe$Gc^GgRH0"uYRkhkz|X/T#+xlH־7ܦ)~PLAY6gǍSբQ[usCx-KA&2`d[oۉ-rcQnq,DnQXDo#8$˄,NoG-ĒFo}l{ DdPYJDzϥ/ZeI}p&"y@RP/#Hϗ+xCV NCɖELhFS5|=J>ՅD|=z3hQ&٭NYq6kgcn/[iڈ4qAH5vB˙1{@q{ fXK2A/,JLR,Hp@EX6.S=/u-WL% `)i0te6q}5(d-ݖ```ajjCd ]TP3@pDdvã6׫RHhN{Rbfk]2\C84:)[ (5?7uvCTzdCuol|rt_)?>6&b98%k(|4Jf[N\ܺ>[=`gh$dT+b Y$Ro3VqQ 0V!QMk@pk߯0t9-%S3Юť&mJ囋F4^gg ?>cPY+ &[&oe&XgX9Õٖ\a2&Owxs0'>vYp3 xԑV櫸ce뎼ߒs;u=:X QVV Aa ,0X BhѮ6lT嫫aH0  nw&K7˨Z cP% iM=: I$))J"u'zQDFJ :Q`# l6杰f "/^psv2& aq LeoyY^ ( <0S:OC ^ Kd:|=7xfmߔA>G2rf؅TZbYb9sf a@x<[mP $=&uY:7"Bd!0i`5< >xk6֜b.̃9_gjͥL*]Df~C@ʓL:IYkfGn}~ɸN]9cuqͧ.[v󚕿&nQdnb/@{LRT=-dZi%vmFʓg0/Omi7>-q@I$\g!2ly;_5.'DZҶh;]ѥbn"ܢ/sX$i(+E9D#bcq>aGg-UĎc}wBh޵A|>7n<t s\^ձyvxal՘17<2~} 9Sf@ߟT,#mz&\g#GGIxG!AO%p ~f8Ff CM89ʜNBwfeRw&+//NZ Tgk$@~R7mmFՂrU@-T? N"ߎ~A ]>%"w?>&>!La-/L"i&pcyl.>y0OfQ3jJP0Ab@` Ca8Cm=7Hr~IQIԡ PbqFC~2a(>]# %ÖM5aɄUʚRZ(_Kb^#NK%/V d򴘂VID^JIs~o>;yN"1WφàB޻_rf"(HaA&pP , $䬐XCAv`I5>M-/+5RI!m>ׯB^^77Җ(_]!(6Uڮ1zP5ksYbκ󜺔PSupn/OV/ީV+u2́" A`~7ON|uﵬ-E8oߞ2Icg#.3@$-Z--B3#LդJ@;R߈u9>>G-Fp W|'I/5_TtUMB _*ɯcE}=8geNqxާnQ+ڻXH`5[8ŁܗԉT\@dnt&nd.l!XJ@&A,@W5hvh^W0" Jc&$SUVsbod3Yp!qYX sގX@̾o&ǟ."Γ{T 1`Q8΃Kp%N,Ȁu87?+VCQ.[|ք $vЈ.Svn;"la0*'SI6d%/WMce#\!Z^$c*-l9F=_-zy x'(1|Yӯlyq3wsIUm$wul0ϱgofgAVŝb0՞} FhB6 o~&GoG{É,2afaQ]|oN^D&bHmNY$7Ԁv1z]r e̅=RIW &D Y30 sxYw"C ȁuy6AdJx]E8c,yqH T+hRC/Cr?wjM"lU});LJJ@Yk^p7WD?PV G%~|yoIX:RwLph`?-XU':wk}%cJ5X7"DE E֚dfMx ZA./uur, # e%r]7>"Kij2pҊZ@n:`C0 /i.;OfH$ +lk6v|,oQ2{'h_2(0?REOe:p^v>Ɵ{,o73ޛm:RN$XT$"AOsiCP*x<|87S{G*oJgvX^` f0@<븪L- G-:M1$ng/ aN;:z;*lչuSLP dC 7PC9,w y0RUXw{x&)xPļGD?CӧWP¯V'\n# i=FYFlGhb*1+iG }~$\k/T5Zt"e4/ -j,çGnh<±;A=? @)yX2 C6=I:u l磭|0AB^’eH _zw&)TRp'v ђ43"n*VdDLq7('-dE6E!BŅJU]($7{/uh8\\XZxfÙi|7N hږ~_0A/۴ `GG?LX89m^ɪ \99K;36v̙yYwPm!ǛC~,/\up.y(j6mo~<~Sr`Ȳ KEލ+ʱ"",PR I+Ν l֚`氬т7Qa>V >4UpZw̑4 LqfГ %B,Y1N|hBB?k|V{bs*^GGp !Xpv>߰/q/#w}=әV1Nc҉HyPՄ󰁸I %-Ll5;6;" D@YI IZ98sl~[@y`߇y `(P (#"$A-~7&T.Eṙ4a]ssg@L6_蛮Y6IIlbx0ޙn֨c#qL0cYlWҡZ\ZpwqAeFDa'$ FBmk*Vi%XHVptwJ -8kU طJ\OhXh5Ajb6M8/鋝k\iR<ǁU%HuOt N_Oae"ŷ=5 Lrrz1! ώ`!] q-:DђE~{;L8`T7>z^ .!`*j<գo&@!'0Vu=: x ٺ;;A< 6+)=6cԘrdļzmX:]w!AbSz Cþ5ݺu{Tl}-DN#bB,t>`fVA'Zj[-B:糏qٺ1$Z<)Ea:dݷߖcvGG7XhBT(:!eP>MͦiȰCLV˧ifo>jU<>f|mjΝ6 i2[@PuޮS_=`_3vï$C @ !MeIֵ+!&ԷS}d &XXouNl 8+Gf xETCsz2(=ο[4"z78jUBdLv٦w򾿕9[8èGQb2J$R;יWW_?N.=o%މ }!SR=e{+'>9U]{y0$һQ&5&P\`0ogHX~='cpJ Eysbfe꾓qJ7}bǡ.,C8"U>8؁AEqlzK*/c_ "3Bk>(e܌k."G!h-u-]Xyo8uT7BiFimX1 *֠dg|)zud2Z5Y؍"m2_Pya8ω Lٳ3Dnz#]zټwVw,`j5cJ@hw2 .p.3^F1%rPY<$vk'ӮfAjWۘ HbhQL@4R@'rf'B8*SBv6w |`owtQ?8 n[#`ɮgGF=P**/Zp"Kg[0!; [.A!lγ 1έs41lXa$TFסVuԦwm_u@P6@h6F.hʽf*̭0/ހ 5?GlU\raۜA‡ _m*c്2e {:AYOm'&@Z )0sr{!tMa~)>ImwXc"KfMvC ^p=8Nb⠍iP k:l8!L8Ј5/ov+il1qAjޜhE*&fhcH<tKI-.~f 1$0!|^0@ő/=Onj e{*EVfm$& :4N| 8d [UՑdG"³@lo}'rt?=~ scyPJzخFE*}BP)ty'I_7W<>[S]j&UVC9 ?U,hCąߨw4O}ڊƇ+ŽL-54)=ѓ-Nжގ]]XgjJd|i2=&ݜ [B #Bq'C˔E/9n$Ȳ?;Ҽ nKBg\-`ϯhڪ1ѯr;{oϢnHcݎ |WRF&2ݨ_)ӱ:;xV:Idx3D&Yô8%H/ۧ~N{Ѳx. 4$zlgLAaE\6j+Q6iHwOr߼{;U{ ygyɃ^PbH̋7'^=A\;.p"ބH BX5*QSƧ&BԢ^)ԟ=BSOo-;¥ߘ)o.V)qYjFI!@"_nIZ6')kӠ=Gd^k'|@!|ᯀGQxiKII"!|):˶ K7(y 7  9FKɳpa3$1=n4#6 @$ne1<|sxx?F6OMu5xDD+cy ɼѰwx7<.2WcW gonHzjwH2I u5VE-0pH|9@qX'3=ZZ׋@,HPuBZ:t (N %5w8{*(̑E *SZl{oɰ֟pU=in_ &LF`8L\GLLh.|BC3t! ,L |;u;TݒÖ<p礄XMk/lu$jRrtL(@k[p_ 2K?{G!b 6x68GyY宪s P0!o/^մQǺnvIYaVܳ`Ϭ΁fݒKf_WdA% |rt5}~ A`ۣςsa|Zx]wNEy$P" Jtuu@S +(o419s:yL/alh [TNiS ҭ$N30(Y y[.q_ceHg0N&מ"f_7gX %RV"qD C[\/Pٿgٞ[8 (p0_ _fHB`\ B] @Qa͍+z\?2W.CT& N}/ Կ5ZV;319|jŮL$OAXSˉ3j-2H%" p9ye@W[eqyFH OhH~o|^7FL9ܸONrT06fq>7\mWPt\JAƎ6)Di4!˛\{om1*HtngCr`<̪asx L#ottr}Y;i2jEMh @B] J.露8qXxay!gfI "ދ;^]q'iZtQİy7r"`K[g ucfKrF!K8˯_npe4 L#g e ,E[:qkSTCJheE5rY]UR.HTyhs uZ TFN09؎ʔQE ]Ɲ5:vEFl\ea_cTE f&7-"}ft(k1 :fkJ1q|1n7Hl4ُ@ pvAb 5Lmt— dE>o0I^^,}yYqUjӘHFJQA>;kyrVe?UW{t+BzmoʿWŴ$`& %rlJB$/GRjʇǾ٬^=`{_{ ZEX;dj<F {1 Mxoa0YI Ň&Vy6֚t+3 aw=,XMy` Eh=R56(MIz0vïd>4Rxc'DktR#P0VHiK`SHR|gdJbSjCp]2ZDDMDYIBA$]( 0@#dENvŮo/^V뤓66,FuKү,0Y<UU$VXJ_K[i>PmE%Da(1H#F)fX+Ksn:Nrk@K#ipNZorϛzG|^ZT+gPUMR}1!Ecp+fg=_/0O夥_+gKV}b#`5y~>S׈ݶ{sҘVlcE+Ӊkwk!O~+%"{7BgQaHscxKZz,eCy{ uSvj-ǮM,Pq*uZ9Y&'A]Ǹaf7/"29{ f2W  WH^w_l? >owi*/wAαOḇ`y'om]}^p=Uz\cf+` Ɖ\ K^(϶.ZC+ԀI =r)[MSIn8hg6*FKAb2etIZZ0?!eIw}˪rD|n8;^$ RWǾ%/ϊ  (RqPYh~`pmFMq|I~Vf?u[E}C3TY!PB*Hiز "|y]áH{uc]-.7u\:vvv53&EQޥ`? EHeU`)>e8:{>AFe1uN~UO?U)w[)T:w=yXt;_q%t u5RuKy@HC=SB!%MPx4ds*VWœ3лl eFGCK_CMo9C#ӈ= nUV5gq&ey?m}fZ4ϝ:-}b#{mރL~~[i>d͕J:Tm/YHI'#4Ygzvx@ 0eO PۡNߐA$QGet`!"ț]]אD- , Ni7Qa?+l&n]YDDSE q:~do h{m=;œmE:<6Ҩ̢7Tg4=4&_'N!lΕl@!_8,g/0֭ ΪWI]BwmWnuֶ֔̈vu6įJֹXGk'}7t 0!y6Yɾb"^~_];L~`k\ -w G_LPRJ@ YDE]grSH]h`|^ '_?tu>:?C\K|ڌδ~D8Ke ~"qjF%7FsQD됧ٟc */韒:7YGРFfm_hy3'Rk>\-«O.p!'OTާo\ٓ{v6'7w # mCr.cŻj% !^U: X([o=h0P,ʼnT[SEX uZ( a(& ]P] YZs__~^˽~ba_I_iU^/goP;ljcuugO҇R6Cči! ޞ)e(2RHÐFoJdTl}UGܯz Ϭ_L6`> L%ʠx${zLNoƔbGPEOԋB,H}bTT%E4#¹iCq54[^_P/W{On-o=qאWm-4 j`Fe7WVa"D\N|'e{ E*Dyp16#)^S~[a6_KqS[|?gÌUk<˝bVfE%G,ڇ9bPuM7\UQ}Xh̏L"|Sٱk򟟲Tʋ4;WqI"ܘ䨿PΏ%xL~HAAQ_Y}gV75o=cc}_y_zN%o~'Ao}?͆,lTKc\/MmsJI"Q%&>npzAH|TIϽe/iϋYe9U)UUڎ3~+cx }=VZ#ߨ&W!̈́_:2CM}wopw܌I10{f |+Oɀzݿjgt>0(nhOfҋx$z/oN֋3j=Ji}+rJX֬gFD> C\ !#8c->TOuq!+VǗP4πEtZ|R^ 周8ۏ-o[FȦpԈJ"t#GZ[_grAaV$1XȰqӜAF.—-mm֟6»:?qsQ~l( {KAoiT 8sh XQ`s@"B\BP@ܻfi!8i?4MdZ;beLE_qhQX*<^OҨ! ə7J_cX8\3W Qdž/C)th^+W?GP|75p=_zc(l^iP0|x,:ă>u* IrO?ߝ!{/G O]gcCaI8U*$8kRQ曱a; 7dt}nޛoҿ#R57#̬dA!N=L +B w;\ۮoԖ GBy$ )2R?z[p·CNcF |7FF/[ePL6xUS Gg09ӢhEw.{;,F&FHdnB`BL/@gQYI7~ϊwE:xθJ6teUzâѮ(֎9 `?wq# "DžCDnkغF.oFQن޻l8FR .fXl,ʌbwQ,RSXRboE3y¬]fvnh+JF0tƍ~CpyRT* o}rvvvіYANS` ƙMti,4!=9d7b -\t3ULcΩYK|ibLXTN)?^æp&l ̓wCn΅J1n!qbtBW#GT.1e[ͷEr+YWN͹L8CG^Zcw6T GH7: 02q(M AI6X:[| $("{LCfȦrm2n>WU-I`VrT3G< U\t;Z9"ͣxK8.di\ٶY>i]䢂1IJr ,Kac+JSiQ\\<ٚ2񖒮 Ő-3G勍^m>,DUPF#^,5hѣQsxt vզ"`P8"V (  bE~Կ_$p+bGm—=WڝSx򥳤޽ڸ I߱|2U̯;hW 2x^Ɣ]Vvmdޓ N./s?EI O"-HQ6 7v?C>BuL1 2VBu${s_6SRn8k"d7UUAP3:萪FskS6D\n;ąǂfx= Y;U/z ҶB;N}FqE@8'I.;UL9p0 ˆ^q\1AiF"ك `U)^81m`8.pA|>l$Rta]>} Q (zTl *Z:+μg)A$Y&4pfNУ#9Е='? 6hOR Xn@]WF#AwIHh5^zaLqX*-.8X3|2M1J30p 1D`ך ",@ e!א=3TBCL@"<8=w@@H5Á6m>̀,9e ӥ+3wǖas=sr`]W<"'w L6#_cm}=рR, 1h)$a|C1jTcUC@bc ;MO( d !ݥy)ߓ S( 9!RR{SIE.\n&0su:؞{Q "(xXBMKwQGO| #3-ˈ$n!2Q>jCO -#,hu,&EuӂԍaW2!> әE4%@H'`#bcc)0I Hlx;jh&eֹM2rC 6N =Mf~oӇ(x{!7X|':9(:ϜB9xMݕu7c/T TxE@~?}$@{OZ >d.#ʅ!̮3Nriղ-|rczͯo sr QYcgC3+H~DXc~HuBH$HJk=rzf&!ܽ `J3cw޺Nq&rLCߟ1(3CgL{?h%gS-kOp:-㇞8nR+$ Chh@$!Kޯ{Q0 `'mη%'C7? W1ӫ duPA445.sqYDr:r}'H iy!ƶGv3;ٗwA"a(]v[1ؒW&w&Bp`(xPrd?9^a tXU]`$\t5C 5*.wOo3yYMM pcCZ)j^ߌoT Tv]p"p9?ê<.V:ef%8,3Å}T!GBi tǤMIh0eμh s3{# &t5O.㙋pO^篯%l_d)n6[S8edh{ogd}O "X#>z̚\H(S.5UA2yyipݶC CW.q95] ,-ݕ[J9OM-Mv袔sxósxo9$Z\W |gZR G(% [@7"$"*jnE6䦧e88]z4wctL^'iTF708ID9[c?nɼ?uvC5 9 PS:XSBlPDV~oC!VpKSnd*aǃ 7+ژ06/|vy"X,DJ|tk ;G6bTdAlF< ArR)XmHJN=D,;r\sd-ى%Uv+vxo88[g`@;0p$*N 0 l$%mnMfu{L $ ~]?i@NMscq/~8CWAjkԄ1|Q"mP嗆?ޖ# qОM @EjϦ_[f%&zur>˱p9,ë{oڿ\{~<֖!}ϙt ώgkժnު!1fm]v &PfhlDDi8ǽ+DOg稀4Tp(*-lF3*ig2u(A9X*lzTֈžϥ< ^?2LX=$@ϼ=LxTn{ o߾`NۇC.DYndcS&Ʌ{x d]&?]i(_[=V =Nޥ:#ǂuR=\9 Mf@9QÖ{Z?"9='_<\%!L싳?85 \Р{΀HIYp:3W᮸CK|+yC/8}93]@vccoja_b]7|_&^e cCW6FrMO[v;?;d:L QgS;gg<PPm; h~k!׫dC) ۗxQ' rX1FOgϰfC볈ܤ H7)q,B( &]M: <0!0J{ [@ E?6} -mU4rEck_ g{3UyDqpu#+v:8ʪLT&y>5nbcFwFUϬLZ7#;Qc&Ne5pϏ0E2؜ ފ|Q% ` g=5EA3 8y''2;7nKQy*Ý0qnF ԗM\ U E6¸~>%,"]AdM7a0!lDQd&P6U4d)저a6gmsU3- ke?Da HN Q{&@w=$)S: P bߡ8Xڡ%yz!&GFgYӉru`>̇5͖Ђ9n EmCs&ňUhW0V~ ǰ,q!&+hlv;TAgpj7K.>dFf^m/Gؚ|)6˪Ufb>L^SA8T+VydqmKw@^!=h,Q! J 0H"w;butHa=uBtg9> /vO\cj 68QQGQ#D8gMai¹[-b*c1Ah#31E,K?d4}iH ]\;w).;OhdK1"RN<6kH55:ŀҺ&w"8WaApva +Gqόϓ8_HEHcWLQ7zrKyM;E\z `c#k*1;/ӛ;O俷Hy`n=Զ#l)[հR {1"F<Śgd>/o}1[;zWӍ39Dkt7hRFv-fE-ELN؊i{?G[`ޗQa\6mT۫]muU;dcnL +Eɘ)5F68?8;I jIIf}<dElA,15<$ ta|v:N2u^:~ \_gok˹,ox$ĂA(oʽ/F殾~쎶x:h%s9pm' t-*_#yLj13*mه9(D6fmRK`\܍]j7y0h%5g{"rl' T5)8&G`wAs/ީnq Z%H4Qpfl|jɋ)NHKZxDA7L$i1:q0UdI)sUt Qm psOxB<Ǐ-/F3տF7O12J)E@"8Xޓ 7 p+mӮ.MS=ֽٛtf %8r'3H9 =6] שk*0yiq9Ffë܏/|C]1 rM'n`?wך,(j^8Dx}YwT^@=X=waVưr^wac۸|܍ڸn9ȊiY .$+8r"ǃRs߭bJX)%>󿭗 ^(Cb خsjQmnhnxIt6dޏ@@ 8zGˆjQI)aႆIb k\iGBw_ﰍ~,>3Ś=9vm Iح7 (סird2Q ls`7,Yޣez]pCÅoCQyNKAb7WʙNƕ].f4(w#W#b>#D35яoKC-ߍu2 , >+Q^ذclM8XP'[U Fm;tE rY,%zPmdGYz~&Go>9M aݸ= w*+W'|=x1H 30s=>3$Y8Lognd݀,GsSQf4Th(squ|q\Z;saݢ &fgQZK+ %K(06W.ciHO^gClmג5^&ߺaZahFHՏ֡;xaT~&}%> .X ԁ^~-]7{̇o~PV#߷ZV"i!/,HALEƠq;緕fUyCS1D Jl6!0 ϖl^fU\Iu5J-pFQ{9hhA&ŞNc<a(Œ@%qt^#!ěfʎ ˃-c32\I?TށZaz1sVy"0oYJzalEtImFt ޿l%"_:KZy2|vm*Av{=nBK*V W _C^/H7^F8:H*BIu}Twq̉|^]i4եߎglc"Kas36.XC Q3t7 לV\6OM\?-XhaL=oԷpjB+9{厖#Ĉ}dJwt**Wz ͱg'9"@1Q` e1"\02F@PLzPKUp]= c"3ysEIwg} APPAZ ΢[ Is C)F@%S[8|vDz!/2J4/6~Y4"ֹfnOoDZСP?'*[7ll[[L*}oY 2qP~?pu`b$%Fftp}zXAiK05&E||0EYMБ63*kX{ 6`3gtDGL`,A$*v܅r‘``byH#ZUh\•…П1.Oo)NK 3:<9 t1nOG)='*7ߕ\v'@meL1b"s]&R!Њh]V&8'E_='.0$z \%8u35 -2s붃7_dj!S'&}mNHfy,+Ok+Ǡ?ɔ<[9i)D |RKZ@vۡŮētɮ[NXy*ҩ^NzrHhZr =~&}-tLU_ (jv>Lo&.ĂG2$b[ 4*(Cx+&N4RS!@Ӡr3|Arڬc2{8gr;]*]= irJak^oύi@HML.P[Z؊Vg@C: I0b!k]8]2s4da<cЯ;v M:[*GͭekQ]^uEY"L<֟+bkw(ӳӬT*J*z=˫! -JjOTdKWiRz(yk#ۅu("FMtТBKz*pσٞ<ү[ %-kط'C] #u_81N͡-d<P}̊O0k̇ނ:8m5IO6Pa@!0a  >n|W~UF$(Kxa1ק,6R>TLٜN|:0pih2gqգr0rT 3^qpPJ`8D:g٢tfzT&+H ΃Y[Xb1+0<&&V ؅vLCL%D#2L|E(@v#|jʘd| 0}(M7 gU;ٯM{eVw[ۏ3O:u~WQ>%/zur 'Nŵ{wTZC5ЅGPղQ@ARPHZ{n顴 FWG`ٗfmF>ujX2"PD*T$"|Ɉ`g5{،} dYQ1%8cim~EhEQB<~:Cq:nɊT"UIo$$*f=E)hW%7y97imnμw=x><Bpc.ֵA+[(ACj 픗2wDg6͙fP,8W}ggedc!!7S-z?+TDa XԊV=vD b!8n03bhG#͝`SF[bV2JQ>%e9.9kpi[:^O{Qj8F %3"H2;:r%NzʠG$/0:w+*QR1(Ѣ31%m^GJ@5/$ qhr{nzc5Kt§1|! 0e 4$0{*]UAolaX5,Af ,IM-x >]L$8yYj|4Py i K fu1CsEǂ{$!֥#$b 2FPβH@: UvqOLH@ڑwtW]{_^cIF߯qfAF̄'b{9hTzt֍ffXrA`j{1Zi5W+f˾9o,rC8pk6 CљmouvT2+wytlYWS1'' B:ɧŧ+eh__ԈZnJ7Hqu闚,1Vkl0b 1rfsDXhšHDa1Ъ+D/ ycb־5!8=KnME<>,V07銤yh@ǗZ45pFUl %Z*WZpb UV.sm!ZLZkSV ;nDY(/\Ȉhϱ7wOA1%Ԡ-s\n*mѵJmك0͆-E\݌f @\L.NNjH:/2p@|ҶDn !ߐ^ߚp7 * ՕH`Zh+M}57;O~ס6jG?QH9PL*IT h&=8~bkvKh` !`.+LJ_MԳc(4XlDp[A#+/J怢w$a B'PT\)03QwaqE r$WgEQѯ[7[ַ{[D7 32~_+3%04ba)CdCt:&C)hsEOUh}XZZ_/>)(V+ _`JU~2+R4S`kQu{ SbVb4VaajäOW4D,WsLp "7^`<ԗB rW@hMZIfz #_PZT8W5eDe n`ohz^$+hH@v8 eCRuǒ@eX"7 u!\{ E#֞p l1h.BPȃ0M.^$L(Z-J,JP UC&~S&1[:j W8o^qQ{(x-TG+InKw3|52P"B"Bh3u^/2CwaPvjZ'oo-Šm@u#:197݃yV+G3jQݒ:mehn'n9#GgCn @sXX4:x-tPX ,VmvEvWZ͝bڿῢl,͔1 a85r/g'"+)t[ovťRRVزsUcp"s!'ѡ {rB5Nݬ:]! 0I q~`Eo)f6ւe ??wҝ6է @|vqCՖnjY?2(Xa)ıۦ@k"{Ruء!߯Gѽe> תn i0FI)"@s;XXrHJģ39tYwa>xjLRa +a;igզ-/l@ij1>șAܛzSਲ਼SAiMNq43h::H7o"57p1=}Yg\ 2D͐=A\NdFu[6֓G:pWw~zfQHRMJ8uбuviFjx$&Ӓ7֗o>@{V-,#5!b`ǹ@ǎ34HZup./..|˟/㉴5E*U9 z*Zza*LYqaY; MLw,΋4+jدm$S$0Y52.µHv<K$nSe?9 :2PmpC.,#y5}ynrF]Lq*4/ꮽ5 A;\Mh9$f~- y!yNlx)=70Fyz3Rk̤1gzfQ :<]s1Sz@҄ӈ^!  qYBlo^~5IfWoŊCHƵPwZKsq"}OXWx-I$09lG RamIJc \\톴Y =:򨽅>v@߲`"Hk(@!Ni-ؾWҍP)(L! 4QEERWMkăvXsH)&Kf2 : }úK[|#m/dOP I3qmVA.+=R(_'<(ZSŸ;(@ÿҵ &ܶYa@<ܲ = :幒fn,%s8P1t-~2Q/M%7|oN߈#W QAD!ҖJyf +mhO%ekj k[] 5̱aiDN(ҭFht$D }z"ʷP^kekT6h\2庩G-5JC yr4,fC8#! $g5}u,|$r(' -?9\>%@Ek&sIn *mNCFmD3NF0TrQ𧜃T]U5c Gm@"?^DǠnxx14A~1iJYyӑʵc*MdW'i̻✩8g&U@^hDCb7T:K7QWl&JZj\7S;Jz7Pko2Ű}Ԉ(MXA8o,mM28W(vy0\<j3]I!ֳ پ. Ҏ`qdα+t!;pqO]`:E,i3A[ rݧXCΞDld_R-mW³#-n {*$d۰"n|ۡ"d~, 0̅ZqYWbMn@dt>nƨ0|u]riTGޭ0![wԬ h9Z>f; ӹzט &V`k&8ˈ<J}?2ւSwww`T:ec|ODts~]Cw Y_O}>%:{hJ2yS9NP4P3$;PY>iGot2bHEN(4q6bMx؇z P1"P 8C>MCH u1A غINx!4 7H~NRt1iR0ݛ'6<*_/Q_^*2b 'j  lA6a܀)"&0@…M5dQ nBEED*)ӀaL*k&*(uQȊ*Tj @v pTTT*߀b!"ȡ0 BBnj[Vl#/+Z7(>_.xrz>: x{ e*7@(Ge_BJ"h!OiPPܜ8 "'S=zƽ]L+{ { gw~#39Da$#:pn @DBA#xjӱT_534M];o{H*t"0MWNDS >v(!VEǰΡ@A*Q2"oADA^/eA ,y8W}J(nY%/̲*X0l>?pDˊ& ?"Ύ"y/cx wǸiS=V_e9U+]$IPvnX4@7ooqP#沀#\OA[{xTme.5W+#PqGis< 1AUC ?z"*qQ}Wz袨gt$HH29vBP " 0w\/Dܼx|?98tACN" q4"r(aMuQ]!(.Sqxj AO=LP .T7\y쐁(dX" UTTbU`DDXUTgGCP"* _M >eD3k _6Z:EG: ?ð 8xȢ݆9AV`B V֒+G2C"Of n E h2 PdX*VOƳ^ 6ʂPuEUʈd?Qzgjn|; ;XV{Q{ZU_' |-QuS:!" < Hrt;FHB.sDV*Tb 'ǀqi+| QD 7ʣGA~xzMU >? 3k`A(=upAdb:*[DO}~rMy ^,jnop! B@;5vw".ڔN.#*vU= S|~6E,Br|ú@0@&*HO_o4O2OꙟebT~ER*EQD"eY$F0$&"grlRJS.r.œgz&TC9^3Ae/跌8UO۰go!;ӏ첋yH] ⿲oyC622* ,X!.|Vlũr( * d% r|YHo~6Gmj.`kAuCK;>n<ӈ4!5l{ ;ut{ Td%+P7ȍI:X;|"ȿ(O GS*t}&!zKw_}]U!;y-qQ! eK 2,UEPEXQE*)X(12 ȋUŋbYTQ EEO:!B~lET/eV]d2H27֗3#ϰKD^+qr퓿z:dFEB!`"0AˑS0aZ0QːJ &@? _OuS]=E=CvݦtrMud_?^>;y\4Vo 5 H$R<%Ƥ`Gu}_W{>xp럁 !ŐFMmjY& PڠE1:߅_*`HAyIGyظoտDLP!p<!g8kh9bܒvLonG{ Υ hތ{ {T@6ܛ.m[߽/?S&t4COO*`nqGy ܽ9UIQQ(EDR#T"2,PX+« Ux?wo<ias`qo6g, ޻pdT+\x+Y_MuA 4:Rc5~>}TحxX"_&[P9qh?QJzpQ@㱣?/MxH|[2wyc˜gU.Q#{_&턫:^4Z)"-LJKtm|ǟۆUKv3j8_T&ѩ>guH~5h|q ۜhg[eW?;(c=WOջ/1!͝faaqƿ#cahﻔqY>>&j@ȵJdH^$瑺DeBg-(=\U09[mGOV<.ǫ7ĄC2Ցv_{VNYDAY*:H>tϙyjuX?@^!Hmj zBh]QTe-?M05QdA]Qd 8 62C~8@$'t w0Ew EjP!PTߊ8^T mH[4]U "%1AEIoNonOG^Эg P@-RE2!h/z9__턱Zmuc:^@^g1"ZH0PU@av( Ā7n0Ո ^X"("'0a$bPTEQb*QU:QEEdQAE1UQ+XDQETV"YUR*( QE"ȌH( " *"*+X*EXXTAB(,"h(UXX I $$GE q툩xkxT Q5ډD32@d %_Jf@:a{*E܉ծ 15E+LL"ZeM^yPD8:*E(e4*ր aAQPJ DU4L-B"":!UT "gD v !M܃h6D / T1Q'nr@!6gD8y v3Œ Za )L&tQQ]QKDx ;jDeEUBދP L" D;EME P**c-AQ+ 3 BSВH !U ;a!|D@ b*+Y `cށyUNpT-DQ B T!E`@d -]Ȃb\)E [E < WWvD ,P U7)rSd DL݉0g]Bz3")jciA^yDmj YKH@W8:iLU&t(ZXnD0 BDa {P\4RKU@W\m Tnީԁ+` H $HX H@FńBE)A@@R b,# ZBtHhvU"AbR1aQbEHUEEQEB(X.,4wqN$MN{ڐﶴٽ8IM٬!SYH%T@77frP;66GzI\!g '!&8*ILy ٠v3*R@ [v6 <2qjBLI.ǭݔۿBLdN+fI&$fT9]vBLkQAV(é!FAb,D)s$ " YdbQERL 0XCt *C!*,fԷ!N%L5gz݃*`:`fg kr"R)Bb뮐;l!ސ:9LSv2we&QM bL"RirueIHbM?BX0V"b*E dQV,X*AH, ,wU&F(#E!ϯ~:;%d{Y I;`i;CIq1 e w[ ̆3dldNdI5jϖ 袧/S %" IX dl!Vwڲ(YXc)U3DÕXki:[/n0 ئ: ĴN 豫K 9έTIͬ1κ{'/ +u'tiP_@jذ:1=@=9ĜuPc{"hF 0'^s8d B'S9gh4]bOY ϤM4PM"_CZ53J^n_I0h H B!q̀ꄦ-W9>ʶ0ΎzNgBSiE4㳱."?-(a,hиU@5ʛ@j0UDi:w!m#pKb:uR0_[sy v̳ބ;&/x1رR YWT~h)qRATY}-Zҋq|?MǾ9f*_pc1/Z2$A@^ADQ\A$U'.> Kҷ0Pr~Th:}%<)mygYL;y `ڑ^ZUx"\IT9=!63Z9m=/""*A⛻;M<셞`r^_]nuro:q}@ *E|ofhwcELɀDDDE"ɮȽV b:=(,k&DD ɦ5Z4z^jnjʌ@" [jBu |tx=&[%ZST;kgV9 nDy5MN` f}opʺ ̆{SvĀ /9 :sPNx=Mvg}\@J,}][?-G#w^_+ =U}_w5b*ݜ}g*)@TuѬ ENqٵ h^My*Q@T},'zyoݶ@GӏJzY`܀ZiuP ͿGDOfWӭb")!OGHw"zu&!ɍ5Du Ze=: +_iPEvpG@'Y"B[: x놔Q @9}E}*'cMQ"ü #BDO]2*2dDU*{xM*x") UtEr!$]APQP7X"&"k@KD̂>Aւ튦j 'DDdMA0D(QvC5qD @MT@]k_Uހ͈nRC?Z;Pဢ*R&AL@Xu&桭P !!B@gps" [V9bvEBpeH\g!dO'R;X^/rAi7%!KzlJYH-M͊Le 8\TjdciSENh>Mv>qzr*σH>D{AFrmoVG2[z[~|2`J*9\ їq _( 1Hpt`6D,ua߱$KH m+%D$1#F#\%ӕ4 0xWich~O{܉*(` ^׍]*pwz+F{iwn&b1ޟPS2+QV` .p> {E!n`[.<&~E*EX{0 " =ϛ@!rRG(Jd'_zfDEU"bEET,DX `*EPF "ȉdF*TAEPDbH#fAd:I9mԘbHl3*, Mץ,6, 0"AbE Nj3Lls/KZy/TSH̱LRҞcP #lwN"DF&ͥe„;PVPLRMFuRlɁeam`H0fJHx:i"t҅Qc9J".2 Kh-@F "-Ʈ$*VULeDVV!%VUAVQe"H "2,ڄ+&!C_ϖ^RbV4")+XH[e0Kʂ2,m! ʕc+&8Z.gDBCñ}ȠG*'U;zi}So-8a|z.5 73hxBC2!g3]`1EV1Q@PH P,VdAXDY2X(FbJ'N~=*eJX4&rj*+dI"A(*ENT v㍵hV\E+ZRI,{-lc6DU10wmyüÔ!l) xGp-kL19<{>+}u+UEY:\qB5uA07kEan}XAU*tVYd;yCַv$dlHtr DꄑRa3#LWNE$P! ƱB9??'UIݓc) )J_ d iZ03f'COɻsYhRH[% yWQ̰d+:k_bQP$Y:n9.sLYj Xt9 ^|58G[׾o DveC̴JZڠL063LsO[HN@thV/!0bΠ*3d , 'IDTm%DQ5 AjʃY\n\c11 ,V2U /tbsi^3|mrE1DkVcq \e2.[Y\Ӱ{P͞BWuU$EUT"R""(UT@X1(( O7]!fǝ츘'6L;wã$ PT-VYaAF!sI'LAO }Ml# H]Yyܪǧ>{ 6iȻ6mdždB2gjDXߊHAn+&o##@ Xe [n@f@ 2iGwd): +8)zRT)_?Q((lvG3 AXADE[+$V#oYY[۞#U{,+*6:TQA)>z?AAt/G &AYR Aۘm:Hd* TUP²,d ("[DaibE$`e  'I67yo XvD2-(aY"edmPR (R %.YE7?.f4Fb4ӱOp!w܁rP>9r??\DȬ0{Z,H RnxOp*9xc0S |y|rlpŹːr٠bߎO[αb# =LdRoghi}j#dKbԖ-ޜݻtR$&M2XY67NtQM `5yVનrBi}7> $7݇\Ѐo ZO7S78XD({K_Nsni/~wk}1"cb ޤD҈VX2A@"y's2I!fl-?GW?ջ?bxStq5ߎ|[[, `2 R&]w$?O?eKgdhl%$0"f3<nI16"٘kQg0 !&8 H`2D-<ud'RAT ڒ( )THssDbȠ%;ӷU آ@:z@λSY4Er9,?"m o6rF*Py7 0qޑ(ft!F(w\klm8x9!oTdQa ,  "X H )I!׳ϲ31ʋ^^sLx?n7i;ʧFV4ߙSߡ靴4jO܋їfv ex[hA3 _fdӢRC" X͚[؀#VAצcXigIC/_O~hEX (Q* "VE"(wKt ̓I`|36>b2#gl#-dž;{J R@ɀ8TL }Џx?7>rDÉO ys_dLSN/`h]&PdwwC@u_Nv<4x^|7>}΁&gkY `H1*I6:4x,Tv1V)g iײ'ۦw$& ll8]M;wM=f,|!)d,+ B0 ~2-*0Vh|5!znZnDY=3r{: LАQyk(TZ++d9;΂rL1#R6e3%+k0F7}|n0L}.sYm`F A&F`5yX?7wο]g u=7D}.ŏS0"11#"HȲ,2# k9; Nρu|[0_9,/uvnW9붞؏ণm;cw;8]ݍ^O-y_; '2A*A~OOǵI>=~U0 n`.}^+?L<__wk7__ӟ}y}G{FFޘq'=OS |kڟkx}W3x6}vEkyx~K>}w|g}Fi8ޑ! 2@RE2J +7ƽ_7jlI={ca|/a{S<: YW|twogg\OKwwth/KQߕ6, XBQD1.PAa|LU%LP?}_q>mVQ:oqEs0%31!S"[,_g-깤MSU]sq4~4k S&3A: o_@o[(gR7<_@m8>.qYZ7w7eBr, Zm~y7v& EhxY+#RC |wGWR/MTO;ļg0PK+t2Ք2V.oT0u!Q:b LG߻t[K1 k{4~;c[c] gD zH]m0UH4ӽl6a<,^ݤZ(h{cM_uZDnDIfXs/=š-ɂ$[[S#U} ȇA6߿kaB1Ȍ^ؑө8ZiMrfs$4UmqЏêր,PPE"2/0_ %gkH[n1vqVo0-:Ģ 3{-Q_mV9 etX?pƗeϋUtORw}k*r, ؞sL8D\<\?>s C"8RzF+8mA}xZ?)*7SXW$iĂ!dmpfgkˣΞ]UFCo XQW?mX[H4KX/oJu[Bu吡L\ bZKGdhb΍=8#v1iB iESB=nv`uFv jP,KBYfDf)mFVu,:!%a;\E_ϧa~5+F0s^_{rKw>G/&\s~5{Ѷ__ӭؔ+>Gc]=GC]Nwf6ק4W[{|=ֿc Y예nƳ`!:*mЇKRMGPqE!lS: WW@S\}UU~I{ FO 8Hȃ/@J#<}fW[VsIAr>wpA*?y}oV[Jűw^92mʉi; 7EEC*)  HH:|@|∡!\;2g9@s {"}݊dMbڤKqwQAa;$FE(,X,B*"!*{>ߓʔaWHIM \ EXH0;C *)FA2X10HDsHB|kw;6)-x= pAH"}Ϟi /ދMu_WzZdiTʇa㝦IFLٻ GF\A_QWP{5Ѵax1#,nnZdTID`#w~\m)w^JŚdH+j0DK>kOMSlnگD@&!ڀ@h )[[*5#ͺzPqJ>u6$V-Bv}vN>[GxUmsBV6۔j>_qn8MvWwߤ=ϲ'O-B0R~m{>jF_Z"p@*)H)raޛl0ۓZو߸bnWU E LpφgDhئ^キ{?CLaH?v¦+]8AhprctlX)L Z~ UrO{ev:M) |PR#UBxG8 >RQ 婴 E@YSP}肧犊"z I* v@A-4RF {oO!^iͿn'G NP~f*Z.v΃ˬ>uw_] 2TUqy'Mw ;}e3,O6N@;IR&2lW7nnaO3:L2t{.̮ ۨ xȌ5}{ϫѣ=C~- }w꣤$!4u$@:A˭&8zλx2{.h~vݯݷȡ%~07Vc"wG[A> AGcKADTjl(H!ંT? ?! #j$>q]H|.CPڜŦv'#Ln~-cud:M5A! c6.3~z$s@3S>~_ZiIbOBGh(m_cc{{Om~/l;v=2/)>O->Wkwn/O՛sϿh|݌{v?Nj?'1mz۞v_`n?^'VB>faA*t;"mK|C|Nx^M |0ǚt3xuvYw^wd>Bct..?YHaBSeOAuٚnG!f~ϧww?Ygn| faXT@=*p$xGwĐdQEWިAADE gYb*_uٗI 02v{3ǜ ue~晆6,O2pB0&g^;j#=A#3ISUK'_4k&O^O7>Ώ1za}J9OSކ~Ifs=~U>c!#}_ϵW MB_=9N?RiY~yPm͋;rg%J:L/y*B @9?Ty+| ?U/w{i:>MZd+A &;)l?$ji`~)AA0nL?f8 &SH&!@\zR" J#M`~h XOq~+%M-h5ox9zOd{mO},wyzt]ڕ~W'72X7(?okO諣>e}_[n!w9v#Hsݟ~@Qռ@g^qͩ?mm|V>0>{Z;?WS2gK1~Z9|8,)}H(7E^>"/* cP'P# X AQBQDp U] ~1U?o/^亿^]a.EpkqVx_+kn>ooW[ |cx_qck{{ϕ;WvMʽNe|t!{A.AlѪ h7X_~2קbqz9ynF0TJ%Eb销 hcA@{=l)ywX?hEp>Iٸqݍ$F(L-R*I-'9% 9;wFAH2:Ue:We&4Ԝ`D\NZω] .8M~_34 06ɐjT}ߏ/19{u2,T&Fǁ00BFKڜ-?Lcl_kyDO컲mQV?ɺpz[JZ2BqԈ}%(}7M*qmJ+\?nlSwkqO9ȳ"gR=U nͮL/}Jkm;Sߍ>޻N=Z_Gn׷/uN?f&ؐ+.,(>E~tQmY~ܒ"[ʉOBJHL:^gW]%h FLXLcd~$ yU.+M[]y:ϸ9vĥ$Ȯ)*旇1oOkmfo1HoQvkX-Ur>&{TQXYFEhDOV]׀f \h~s61a 2`mG2k్L]7vl{PCD@* " TvjD&Ғ-iY @>jHK0!}Ԅ9'淸)]iެj:۫p`C17rXTud9fAQyk,D ̔ D6uo4qDD( PmA$NQU FAQ'KpVF!j! zGxEHG1 P~׿|?K~.7G;}!tnICdGCZUP" >@Qz'nDPnZ0pҢu\FsfW=7E9|7i2tN7Y*@MԀ&Tg 5Q 'j ,F ^6 ]@SN Mv~_G߅4[5OR)0I hPEQ\96*[T4@ދDO̬/j*^O'S]#T6>* #9+!〉[[Cɫ*`C62>ZW&oW -F?Ӂ1 5+oxwV K(9d:#xAO_7DݣNqׂEހ!x#u6F!*p¥;$ 1ߙ{X\hne7JغKդN8跒?تQEFDUy`|"" Z!A"T[D@yHy7iwqq2^ ׯP3nlpd E D$ATc# &b5umK+<)R,ƭ%&/f'8;xkYViv}\ ͩ"lHc^qlJsu%.&7Iuʬ -ѻY6v ğu%J1N?V ]b\ #Ƀ2yM%poGVUcRyEV#VJeBC?9tt5(Dly3SxF3Z9if(sWrlyVLPwlםq|]onxo1޸3hC_)@{Qc$VuL.Zzk<`L*ސ2WD tj͙ OԳL\\;,-C86{kf󌗅SBSWZq*cCh &~qݫr`:][}  d 9w4 ϘldD=9SpJ "qAELrеsCf}+Qq4G&FANiij8:tO[nD# ;b }Ss1MTb,(@,!fk|R) \H5'tD@  2MhB ;6$?E4?ZAHa8C{ΎA*L\GYD7Dޢ?Rʇh!nkMGQ鱆{w3.T}]`Oq}!G "-,zxYȬ\qn|n9aY!01!+V0X!/FAH )q b@PI6uf9@yVSf`Lȅ"c*y[H\Kc7BHTZ:t\`]0Qd`EݶuyC R JRL#B9C7TX*iZ-Բ4Biqd:T MGӜ~Klo]7gr닫}Rq_HgqUM~}Vuqı6qsr~Nw[FҐ' nVԅ&`UҋS:R*ٻ)o}ǽE;ti6"/;$N|)}4Nh̫0GN%&$35~,*P'>60d6UnFX.OmP~嫇(^h,6X?qzXfX)(AH+RAd=t=_U }&0o9tלeIwk(6kAl+4;kujqw!}Dk&x"@a7';# I󥳀IOkO1-9 akA@Y1 k1zF3)]f&yZklf(I`K PI" kȉ)`7&kH"^E3(1-)H23bֵC³!]"uW]Vqi61vḙAW8KrWy΂{`,RMoaXb) !+AB 1TYVE%2"WFXM'1:;1ڪb9qD!CW1 2T%̜fXdLCi6WLv6ӊ<Ð`Ht-(4>Wl<}+sI\=|S6fZ5;\ gi\{R8f6I$QEvUwoqӥ.jh!ir7eZ'gV%)dhK]ykZlLy N0cOX%{L &WoBR ~qӵj_jb;#r^go ?{IuYA!,9†$g,1P:8>11G5Мf\ .|z%8ډ,Q * dG*+2Aɵiׯ{kQf`ke8C&4))FP^#qajPRJ*͆Sj%Jؘτg J1"B&E. 326;rmڂ>[z t2\*73gjP>U u-y=moe kgp$xLcAD8G M*A8l,Sji-RrJDhg֨z;M5P _^x;鎙Bc{z^H@3buSڕM l!D\9^3`Rd";^K.jIgt[<^g8z.$V9Mѡֽnxporh&,ck#C*{ w(-VRb[,~&)abo,M&|?f8ݷSFp=˦YIWԹG?E8X4@rҾWLK Wd/a3LWZ`/;s};82-)!DKqMfu9rΪl(#">7p!WV%i5R@h7lޮM|x1 w}v QE3~GmAC-kN>)H< ѻ/> c}n#{\}9Hʽ=|0`#ʤ]^ƫ{~\qx"Ǜ5Ptk!BnI(mW1>DYInݧzN}x[htecC2F`VذdZS4n5(eӂ7FR[EvA힤 :e^mϘ0XE@4["[ʜ#ARv-N{7C E (jY-ʓQ(a"1'utXE_FPǧ ]۷Ƃ@8H#N+1Naa6Q_+c|{JI@\۟Sp5R"`+|H#H%òLSҨVmx;j)87BZ@m[`mVpf&^[FNCX TPg2'r$@5jEFC3udM h;󱫴/g«^Q=W`fivLaI{}~A{G :E('_nX@ r@IRIXE8BLbʒVgQ{|iscl¡3g PKF -AP5%F1 Mk%^]m:>?,.LIjuzOg5FH!P"at3!3e3 >oϯ-_F/  $@9}[v{|sBbBO 9de7g[ݤ NQ[ fЦĻ5uLVʨ$gt˩YڰE }~OxnCw1CV%EjSa_'u O3Vocz4ۗ^ i7!fgS"30gxtCtrZk=yL0Pd؞]bu w6[&A f G+8 r;~^Bm@%\;$h3DGy x3*ckq6 DZSm 1ZD]tCʍw s ]W4 \еwaUrS4F@2Y@U U2P}Fw~\|1 dy QoM"]w EC>U{ܾf z,ml+D^y#F,N{*n0.gHB<*Ue,Y 4ZGoװ1*$7.B%3W70a .5vKQcf|wB&*NCڰpjEQF#l6=mKGu;U9-+<m͓+Q M•nsuŦt?' L5mf<\Nv ]QI! ,H AeD2(~ݶfT<RXg:?$"e@Na(_>ؘ53!WZ:TWdӶ7|m:S`լ_>ԁke5UEBgRUfZD*^[f2LJGV3F"" ZhQ"LtvȉR㙆”x(U4~$Kd@[UJ|)KLsM2鷖)`5QF~b9fMuZ]įR}*9#Q dJ]UK}WyK3VfIjj񿥛yMA=eȇNҽݫP+/c.UV>zt57͝:>^ Z+S.愲1лb|4"S Ud@`o*ő"'o?>Vp4}C_s/Olcy1oY}||]U9862އc,8:nOߝbRcsQYtܻM/_w>oԖ}Wm^W.FEQc䩗ڨZ1֒VNFu&g)CbѥJQs){u6pWݞx4vsZD|~BcOGIr-DCVea|^/nN5ï Z' ة.1~?o"s>< .~\em'#Gm.uѽ/>AB=/ˇDá_i#u^N$m~v_Af֭iW41m_/P{?;/q CcV} K[s,d|.^ r<9GġGqY[Nf(9;{Fǀi<{Q{#ĆY6Z]]l˯[~Q{-^>j~WI䫸Vλ+z.YӋc}8ݶngzg.KIR5/umw󼙾3UpcT.~#wx?g[ci\&9;]z?tkXrykqm z=0Fx vgqp@ܚY;xJP%涒5 lIIQL${Z)*r'2T0]?]w3]NVۚiB 8L{VBP$RiXU1eu]no2m8DÙȶc h݃m\Th-+]Pty8n3Jnѕ`r65}B?xݝye~hX7LN@L4t5 wfa,c2V`u:2o32uڐMd*DRcWU&ו>s}QshxD %-l8\f Ujڌ0XGs`r"0$@p=L;%[Er0/+K2竡mV›"߿]7DB*Jbd{&`w.}q̉׶m_YQ5cB-$b䩜P0/6J&*+! ~:L `NyWyW'MR2Q emkGӍ>LѸ^#1zu: [+vdTgj^rtm[F)x3_!SsC{ƮvgrnbGC[D*jvqaBR:ty,B]B=h&,K*{01З wIQy'ugO'ac'{X{eZ\20Kv_;o{ҴyڟN =B.fSg{ Yio[7 kNZuf_.vrZnʩ~@#m{Im+ӲvƵtӽ}4h zmhĺC r_G1V$j})63`k5=ʊ^z. Ȣ~Hmw1ONr͹JJړ6ͳ4\Wm"ˬMloLve֬6v[ 0M6q6un=Mn6v+鲔c[ե ٪8X)vɆdZ e4, fUp˙b)"; 3*bit[t*m]Zjef֎bV9]lsm̒B(J %%$KԘj˳4Z0jhv3d]v[f`mi)jʦ`:\WMɶ\6qa+uS%JXe‰rLԹAv,r)J4:Blj蹶֭BQ5V6Vdv23DkXbLū6ˎa)hљ uw6QĴXeњ빜lSZ7]ˑ +ѕ4KDAx" 2I@8B6)tlG:;x9lofMpKZat+m2oy^ #X_쳝嵸xR^) ~ުkf_dc==7\Zl\B#e>>};p-C餑F & 4P"(nCO ֪:z1) Nwjkl-kHb \sKaQuY5P8KLB@@{{6p'reQpäblB8?҅A#Mjӎ$&q$c8u-,ŹL*rj3eq_W7\rםk? q E:d=.Z~yY-FuqaГN+HKKR?fm!p]x<}8?zi[Yq&ϵJ]viZRsP? `ߝ:vٶLI-Y@.md@PA@Tq,ESb@]@zXpD_Ϟy[msux !HAE -MUPC!ղ~ri|sԉx`腠?J 'jM\?dP2RIPDYUV[~;OyRL&/7Cu҇u ـCPXڧ€R $#"!wtYIF@w&C};N2jPIF%L$oUg|ٚ.nX8*/-y$ bQ"Hԉ|w:祄:Q#=ߩ7"iT ʡppjXԃRZL!r2z(xP "uCY {q=3'ա}_l6hG<D: H(1P!eZ?qY{__9Wܛo[W,~ݯGe"4 HI"yD:P.WܗI.FWi$]M68_KVTH_~&Q˥̪\~#U_(Yآ6W #Zt$"$u5iOY3 XZ6 PhSO!\3Wp- *6 eUV#|^T m&#-4e0߂1HE F)"`ɧ| #"H F22`Wkx`{W>A t&UKb0hHuj攋"X@|/Jp("@DQ0$^xeLwlcjd޲D,VC Ճ5j{ܔ>kò}faSX,Ӌ bhXM MU,o,RU]PLdkAFi[J>Ϸʑz^04,6rx|>QɩqqqA̘1 Jwa׆ެm_SIӵwWl\H2!iJRՑ4༴\,X)qD@@Q,R#H.%HE_4QP6UTRCD3ykуaRX=W;buv~빞Ca- YwXДXk$ +dA*b*;km2Ae6L{*$D", ,I`EAdHPH(EXF,B,U7m AIQfHCJaͲN;6w8f@Y8Me&Ƃh&)njb>ؖM]7$$8u{e^ ٖ 7gż1o^+t (zzhwn6eoHY7m":4ӸqA{k%,Hac%›w`wjёIQe5~7^̱` ܸV9Z'eXBRjd~o:f%ƎgłF(7lΐ0p $Z h$^YkSpƇ{Z1&ZӌenSׁl ڭ_">xuM-[^vr~Ku s +ۣkau0|u\B c|6S#ĩtν*bA@b{gmԝE(i{y ɑ2Lgdl8Ǵ po]#s}΍ VA fHj\ aDr=GwOY@Ggd ,40D>"f[珱{Σ?q 7 Tf#d%=~D֠M1qr%fz|6Hd@8dH3Vto1]SAǑ&nyZJv N0A*}f4LZ(ȻrAdY!mOsiR,ER_<9rbw_hRB1DQE#$r s_ﯴ7"ku0wWίW9  Nh IԪ(]:N#ݦ׮F$bȂj{N'1>NF_r0(!FꤱIu 1g{W^ڒxb%V%C杁-찥wf"o5B(# 7P.7Fe^\\kHjg`D!ӸH2 7`TQQ25s ͓q} {<њ-`#7^5 ^vXdgUȉ*/f߆MLܔPACc9m۫woXN0m( 2&,5Q,@0D8Yfn;0Գ:;R.ЗR#"o t֍yc}#$Xc."R Iޓ`G`((, %EX @P  !n{\\іv/SdO+tWiIw:|֫z_׷(Z̈=˯ f[Z n`Ӛgy|ٝG{9}s7>`oQnW)Ε[본xh|;B`KWTu<7w;o`ɴT U{1mKAN|G\MY&zVF Y"* 2#"fj|4#z>]((eH F0_}^c9z8Jh@ q"R(_aSI#?@|:Y!lWG8owֈ}[u|}Tk`-HSJ$XDQ`H& bP,j;m/~?5R7B?>.2<-픻]Լ@O(x?qr;Wڬljehx]7]tOlA倭d xQ>=:i2ͩcx*| };`[];Qs?1V w\^wX@YHѴy{$S1;6ڲA c6HrLEŀFœn[S 39b ]*E5 s/K,Hp Z8ee1TsGoA܇j(x3bZP4KXgr (5 VNdkNx3*Q-=~/թn@@CH$B_gNOzĬdclH,ZdY%*+ U&& dADT,aR"YQk$F mUɵ>[_بz =p T3WՆqqd bES/rY9%y*YB}v0!$E*~,Ԭ­Kn98tWsmG} FѸBV* ,$Ug;w2<>nv>?` &3d,DX`QIZ"* ,XE(?4b}dQI$YU6| W}saqXCAE( e a*HVE" Q{E,A(|&M-R}hZBKǸݷ^~yLdZ$rvͧ%~P.$ߋP=/suiNxjŤy'V>a(=MxU2 eJn|.G|fW ,afR \̘PPSeuvp$a@F$XGI`R#UU "}s_7Yg>pɆ`#X>%&MjNЗD䒈XјJ#{x#EN\y%mOz1I' &I c!r[B|<쩄 ;W(rKw@ȡ?_AEv(Lߎp؛IE$DDI@Hopid݇x:~iNσ"31DbRR1"_d&6A`\.3l. |b%¥FU|@AbûL̽=9>@ {"$YD Smu8MϧHKH30'JĿEqE߼5#,\~I,|kNʅ!%,"oY#mv3]EU"C!Dom_SrYUoSKkF$DFw$\.zu+Dcd9C oCuf_}ß{G5'XM.}u@ -Q꼙v + dD+2"p6pDRWn{`BQp)=~ϔ@"􋧰%ܿ.%9I30Fg*EKfeam3ދ!es!h8[7*{q~6G&mw(Ц!Npoctfţk #AF@=pl|n>t3p1. V̅sdAM F"J5|⣃e جFHaƷ o|0̈?d  Ŷ F9 czI^:wƦȂ:v[=%Ea06(+Kms 'RR $þ*z#ZvdxEw'w38C'zYb>QQn=ewUf[92u[d%B`x&CRv&^K2mU^:lCԻ@٣:uN])쨼")փ@ @ַ۪Ԑ#kޒ: V FAu**Ԑ7 :jD7>¬0(ϐ[ub5+@*& @Ř !q,W0690r\E#⤀1J4g4b/5 fii,CίYh d 5"&Y;lYr80?@D hJ5,ZZTlR&XG.gYeVm+}Dߙ~FON9t[;GxSV< {Q}a '3o TZG Q{-Q \5%4YT q--yo9^fuqV\lDlWg?bZ0Oj-/khl5.fE oI2=(õ kM3;gkSayREm2&RW<*{쾕 nl}FB rۤkٵW`\-# u-5[`5Q9d&ܻF Vp ? G#CwslC?ky˯Hkc.MB|{4$ Bށ%i-6LD5`'un*^sדM_W$$$ I@+)%b"AV,Udi`,>*m@.AVEv Id a[yoq˳ï6-'Jqc~F϶rZ#@J`FRؾ=jfՕ!,EȌ' ̩,WpZN\>Kv廂zcUlXz_ 0{x+'(J' kϭwizkY[1UήSn)VTdCϘ| tCG]];hPwj_(!*HH1Ȑes}[$Tg|tb-Qvxx,/s{8L. o ]wƣm)vZSs'4ݶ]^o1o%%apg#HI]Z\j%7vnu1wTѝ؄^/j"'-Mv/w#^[cxu XW. b;b|=4hw@9] F@.d e 8T= E:WCuϤ|_y[ y&i ,Yޛ!0IC@9}H*>D\"9[~|0! YqD"f"A/bM˻tdzٕUOٲ)8U~(7rwCf |;I{ݭUS>)CF6T+wcAټ="{].-@@ ;5ꮀvnX\3+3ROW9HLM܅|"w2^ rCi S>dqrg tZM Sc]3-h FeEO9}y0F tājeAމP..e`EyF@*FCFuUzhVn/aK8X L/LpogJy$'/o5FVQ q3P?gMIb`̆zΐž4Y `\g%r.uݥIr(=8uQ# h’aP">'2_ѭcMG>J~LM=t-,+WcI!&,&pqr0rI $[]5R$RjB6<~wwx%|]6;CwF,}7,S2)vN[exD@">{[ oh#h?R+Qg'dU{l23IяF^:5^dzGA`@@QKCW7@ٷ}1 Ek7~;;F Zjû_@_x{>@QQ߰@{E\fKe"M QPG KI߽jKWem:̘w %,$p#``^ T8D9&{82<[y&{ghh DA !۝pY eqL]jLk |E$];%Ѓ^ 7#yT?wZC_`rQ1p. 4ZK+>iR[ 4-#=νzC>e&쭀C61[t5`3Nݕ<ȟ=DzI/ x`P4K3494B4!ۓ~GcYh,+Ќ|u}~ޘ5 /n@}4h V7brS)*΄WʳK6˄6.  a A*Cݽ q2DRB!ky$Z%k:)ΪrZuf-#Ũz@ͬЍHIj4jrs` wso@vZ:mkBgGϧh8ަ 9$ŗ1mR'̈9\d4LX]_+7uߏW:FST5ogڌ!Ϫ~ oyWۻ~ׅ, pjBD$vښp+hxά܉+?mu t*)ɳuFF.hѺt|z3w8W/nzQ3'E6.h=S;7{sw=4Qn#7muGF>ʯNsܽ.as9sv0ڮ[h6r.I l $5s">Q&“!h>Ug5~v$ ݨ_@6]C]~{ ^3&ĕ:1M=MyK7:̍F'#oD^7JE8m*·d[{ ``c+oSa}W m݇W{MfnU@!Z?;Vc.pZCHs^uy9&Ղ:/Yb)7SIr>4Y774c,T}߸УS]]2Cn!7Iy}(e;$CJƻ%7IЉh5'Gn*\Eǃiuϥ42mi/g^.юr|~\ƷmӤz%(7y-S+wZAlUrwY\C'd {<ޙCk0R}iPAN$'6B~>/-<}O3 zy;[#,=dlU41Q͆G@Hytv)hQU 03+nWFݮo.DP{: MqCOHT>WIV[Hp4C夺 $O dP<~ QO=*u0!FPK_~|_ =f`=ͪA yN^('s$D7EJW1[r~[|$޼+_F[]bQ$TB ^ b$_b H'>Vo~6Y}VHud^JE!~-Eu?Ghpzq}/|;Ɔ0$45+" tTsDrx;~ ܂'?AfSd9857L  b#vx3s~UՍ/>YΙ FTnTnt~˻}+ӣ2R& Eu+1 H" sNuӯ1`Jo/Bto{KTX|)snu_ ~#!Sx@AyMXQm%>Timb LT'ߔh!PP>E4 "Jfiw][3g$?iwwd]{Rjo@"n x(S5 i #Dp~K[z?hyLJ^$P4 ȉ & */ftY֫3LWZXRx{Ȝ  ) )_ܤԌ{\؃uR~6O CwȴK1JjpF\S60TUf[^v Ҳs;9O}nzvֻU=bǏ>lukW|~f˴E,㳬z,e/2"R؆ӗVV*D-Եx%Vat}ߩw|bCpLҲ%!r1V9cV(RUCO7i4Ͷn}64(ʈN([!B*"FiFJeLMesd1AK0WlNʄ? `_e=bQNe~Qe?DFhM1*M׳Lɟ6h5UYIA$$3`"j-]0K:(%{|q ̓x,sd-}M`i7 |]#;3E/'bp3@2IRayZG؉})8H5aK)!^r}SUr;>fg(lgJ;gSij1嶶Л5=d/pa-j `tl|l ۘShv(=zc'u0y~2ypt?\'=x9K󼑑bﲅadkkBpOܜ6tu=.$'c|=yM(WWrFnIl|(;1EB0e>vÃ0u6;Dž!^HImF4]ZFJN^y:,9ku)zɱklH-:#cݭ; )6~.[;}^gm>1PHLA^1TҶk`z=cWA[^n] iV7+ WXBߍ# i+և_5Չ*,9:[ JnZa»PWML{qnc:' -[C,ðSsOGNC xWr{qSO54gILdT[sBlSpI}vO%/C &%?ﵾE%¸v*fde{K4WlT.,}v.)0aTC"UE3ք#j ޕ15ֵ< ^eNwq-AENj]kPOΣ۪`Y`a͞f SBaǭF# Ԑ`D^ Uwe= LȒe>(A n1M.gW1P|ƾCj8z,JG7+ec`CW\SŖW<)h0o5A+F]`,F $rԊ{11mvV%@C#P 8$ <^fZa"$41Lsee>='_Ü1UmTu0;W3?_i0\c [ FR!M@|jҩ#d!@^$[,tPMj.LxQ*ьhʶ]~fe]ԡHl(ZvOATeVuX/L $mv\e2`Ec8B?wHPs)A{Iȏ7kD(6ctf pD][R,{L&a0ZELf:]th7O>S@ĵM*P;]Vh*̜YOE H2dֆ g`09>cٖ纔2s8mdGZh3e5QYh[2%[j=EfWY .+ANW-)v*Tr;lHGsKhQdm5)ZkLskb[yMQK}b=qcՒvwv 2%|9o'q-Ůt,$jXM{ĺRR:}/VF8# >Tw0JBm5pCAN7DC蔅C_kEHu ߍ?OS}?ght7O0 lI(~NH#h( Q?_uǯ<ϴ5,eKǚi7(Z"l-?*;5$Dftg.#sh,*= Ỳd@Gj >_{éI[%RVn8躼%NMC[yNdAj{V"*Ԣ!U*pOo`y~30m7{ EI ` 8J[ini3Qj?P'sѰ)wTE F6FdW^EOWiQ;g8i ߃_ik$eB$@Yh")|ajej.k/I_{sbhN[A p_0|Fǹ;EIE$ɥ* TEI_ggb}9_uŀ zl3`l)Q8^Hahnܵc\d^X(_U9x$&I}{}a/'JzKhm]d4=0\ V) XO 3ܫOnkM{^lg=-a'Trh5ΠP?Y@}^||k/ybZD3hCb>2]4'C[5rdnva{Y=t0?l|JimF>PΊ+sHjp=۫XP 7(ˑO" #{Osٶ?ZROd_l@ ?< ZtC㾅cg+ r;2B4>_/n0#E! JxnҢ> yF ēqx9ԨQuhm5f2BHc$u>խ-:RԥJD MT$`eM=>J"qQ箷O^w30}8uQTm-TtJ5(jwd䆦 k4ǐv+O>./puZp}}>/xwk1V(#?6\nsbCYDE`Y!K R4XE ϖ-ofywotbpVQLdejXTq5F%%U|{]d}2= ;l?̳q{qo* ?" =6^;G?eMTw_Fw8ֶwfQʺi}xm4lo c!E@_Ͷ,M(`}C$_S\M6ABLUHeRd$bi(ɿ_N*mU"!H11@w*g[vx:H&D Ȃyۇ~׽nӏ* Ƨ}OLLv(N^ʻFzGZѺp1uTcKIS/+֞ gڴ|J_ m0=ͳ fV7d unf'$s)_[NLDSTvÖ =ޥoCv%Dy'$8b:OUGip 6y)\!*P3C/q3z[qYH{(Id{ͥZ鉲շcqo*Pj5VIQ ̉#25{?}'HPЉ˜@ iq׺iOڄ_С1BP̕W@Ј2`@ĮYXؼu9aO __'iCN)c?u&xw[_A^VkF}@@Z1A+&d#lA k+JϷH]j(Q22\09jT>D5y y^f0y5FA%kJ3b_.QQpgISv۞SZYԝh{M;_%DGŭRIqbwc oKߊ~^'/~+wS`jwl_GmAtwHJpHjPH r/6kg[q[>4O/<C~˂צa ''U Cb*J 8 W_- $(bF/#a .cUTӉ/҃4I'Eg$zhq$W9F>hYr׷ |l5RT6GM(X9J#j@d2۱fcno+olZN,bW-hÑ+| _3)|q(Q{QߏE ;?Ŏ&|r% I_ ,$xDP$_[ R䚶Hs?gb__޹|8w qDU e_ yg5pV~"I Aau56JS;+v_ tXqa;LmrNf@Y$OCZ:x%䱙3hc_0bI `qPE>PT5C0X!Q%C]@Et KwZ.fKF-'3ANP@ l8?&(*e+M6; %)}O͘nE&m*H(DssOpe\` P8ըS(AmddR8i|?o9wV'W"H$ )=# ̠G碡&ؽKK~tgÿû[(  Y0Y^~]jsws8q{-cPyVPvL!x c jɀ>C}%j8xnsKǙ6|8A: ?hw-o Gm] 5Fj-nM vtHOIwu>g.g16ñϽsݐH oIq-qk٧Z" @܁fﻝoPUH%ȁ .[a _Q␩Inm" sԁ __]*뛈 ]sÚN [>K?%ۛ|3w\w{hEa  sH.O%%@<`wj2;/{$?xV|ʕAXQ`h6[k*R[݂rEȄ%2%.:D9$$8KzO5Zd4*7> ӞF}K.Ŭ~+^uI,9D GiB Yovrزxկu TY/.ngFi7y1s1ƺ#YJrl&_ց"{p .G(9v !0P_̗2۪ΑbcZ/Y\ʐJ7k@䵨ͳUͳx3b[iq>a7"ZkÇ/t),y`f=wa eܑGm6 c}=I=fA%}nf>/S7iߢĻ{;Ňfzimo s2Ue" FJ^WQfawr-2݄(䏫m(,62_ቧzj0Ei6֝^iN\Z˚ITvՇk=.[v6$)緽mZp@!M@pÐg{K s (fpR=_!A& > ¼w^Y{fԲ w޹Bs~Zɶ SLet7 B} u޾37|yc4 ̎oWIgk[z}M*GC&%Tnł]ωVMϻaUMҲ0KPLpP;[V:9~!Z:ys5$6Usq"6D`ZHdRλy[ҐU0)O&7 d/'SYH1yX@աZi$GZ'i z220a6.C 1\NzqRQgN4xsՄ]Tj&JRa]7qInfU[,/V}Ht(Z#Ao9>Y8;06j Sb+-yodJuUM.zKzWӿ_yģ/G_`ؽ[׻`2MG҉)inU%i?e23ϗ#S🱻sG'K$';py'z%T_w EJVl:L!5o[,dvZ!#ę^ERr(AI UT˂ƀtHCyl:/|D5u**ʴZ^E4aZ-٦ʧP("w afϐ$,8juF?@5)\j|kF;NRSUҴf9qJY%mD'LŹnʋVdIp' ,BBrtYǎڠTZ\ZLˌy&whnZ#//)ֵz`'\s<;,ʃb]BC/_MDu̦"Fu܋ja:Mɹ6 YZΏ\iľl`;]]%#i6IHl `E4N2H ;5bg4rvر"^.PդPeDA4QR#茒nkljW`>ᄃƧB4ϿR`Z{zz9t$j ,/!qEƣϺ\؇/$cƠ,A+ZpCM؁<F;kFlp= *uzUxVM㦴FS6usЈ9WOtQ)A_!yQB6%1B{zuO01]6Wk$psQ~aΆ.E#OؓSrt4(hDj9 fP6 4oLțŬa_F|/3G& @''\]I ;l T2c0U5;Zh&)Xޟ=NEyiη}9tcFvR+emi QJ2-3a'U| ->Dj ,{ZXV\k`aMXzSCBf]9VZެC[Ӷ.VhB'/p;q>46p$BȁkASg^M͉KS&zЩ.(2rcuct F%j\KSDL .'g3C_8YzPKc}HZϕ:ΩT0L|xaE9/:4voe4WZ^l<(C+nX͝Ri]ɝ: 4Ư7K_xY~l_ϪRg_U,Q4kylej|P$I| ̂V;Wm|y?YhCg a[$*E "L1;3wx]T!s"oYBgUMN[ȰT*(H1O]G|MMQ>VAF uQ V ܗ\Fhf8# "*2*]V*nZv|O+s?>x~/sf}IYOBOϺ`O[y,5=ila'J=na1@)P<8Lǃ p u|y$"H E$>&A{s4zV@dQ$Q GVf8qys2x1P BB 4W#Y5RoS?yCFRcUְ-,~%=^c)h PU nyp77V@bHoo۱ r!UH N7bX=k\ouf@:ͼ._! '[P t LJm]Zn굈!E6w1"0Y н ;r}Mw}9 hֽhv_iw`UJ(ES͝sRM(Dsk;>n(:R6ݞaW @k3ÊF?Q|a ջu5^y~,Vd!_v,QE3Cѯ[$;C%tq1pXD S18jgK{Xg1UV"\ U3BTQEJ`*,UQUV3WrX(ST5,dOgLAiH$ $#D '`eRH; R%,  Jv:|da_2Ϋg8r_eb??v׽ZcQײэnN-k3m۶p_O H }.&1 j{Fz$Ѧ Srː LdK_EJ^4)=~5:-KMuڬ8G[k7PE6 FW)|7]j_K \ήv_Bx^gɏm/mrȗ5wwXEUUF,QEXbUEH,UXc.SoIzs%٤nT8f),pqe}'io7jaHֽݫ46:?!G""H 9%Ȣ&93aIm]CL!df9cd.(rfkZRiΪ|,&![kc#BtKfwԆeGVteeh͏$є.\ߓ*YpOo[Pc +mӶxxzXQTUH*EQDV("T`,(TFTV(EA#E"b 1XbTQDUbAQDV#Uzۭy7>S8[v{4j3[t-q8ߗK{_A^@]kۡm[םuk+y7:ٽ[yu;,68zOA07>L*$vֳWgʊI\4%2R>=jyE/Yz zM]O{MHWP}! ev&^ҫuƕa)oqI\_|:)Dbe" S("*"Q*|zߙ<}<ٟr\o,ۚ ~AҴNCc;=7 Ao5~6Yz-Θpr~vn|yΌu u}C)tU(-s³0S퐦rLJӦr9W[xL":֡*(UqNdQj1Da>iJ#1D}ӳ}ڒ-Ȇz?+M<ϧSa*M-@_UtKK֬D~< j#V$5K 9p0/aj\7e å%'4Ooβ W_] sW4 R҆0ԩ'*S64ٗ0^Ӱj&+m)8L;qwhϒbGD94FwlU󕓬RSy9p9hP@8[bδt QE5qZ^l0!d|Ǧ| qEmw6kt"OrԖ~ª픾',L*N|͉J6f!+zT+馔ݭy͊'BPf8.&,e:0J/>\ vmCn9Ogfb+ឳ牕If=W[\Φ=u1iͩ n'I(PεgKHG"}tĚEn.drb8%_7鰫P^3mY#0fYzkKt13p?:j- ?wn,qQ ?;',6ƎxGĸRR9LJDPQX͂Efjf;ՍtE#>3[ywC<^wvz3v&#*"1 AP bHrm5LjL:qĞX;j_ >\nRGB.W Ir|OZ^lpb 趼TmW'20?(4>/۳ w70XF "FAHDUb 1EEUUAb"V1b ETbDb3>TꆪֱP%g gd[VU\XMĚ vDyOCVKAӖԣk.u-,q Ib@]~/O6M`dTTQETUV"D~>;(<ÒH+;z!p8q5疮[xY1zG5YlDL*o_szIՖR OOzM~0X,5rM?Y\;ãKzp/}YLh%q===nxnJpeޫ׉(?;Ne,y}1ës\#W7fV0Xz2ϯ@]~o-93бsʿgE&Uv.(. Jcw57;6bS̫L@&jǡ\Ӈnl{;ì_-ߕ_\fܰ4}okGe$~v}cYϒN1^9Qc^ m;3ԟE_FĢ@ Vo9KjИ \w 0Lo6PdˊAHgP2@IP+2)| )50n~꾾f_I1KN(3osˉ(8B;c:C^TrRxL]ѥhwDկ4 oԾB 8Xw%24 R@2< rpZpu NֵTtd g@D-Gq">=[M3L3G2y+0C0VLȳnxT|+29`  ~lX>Ki;R>=2Y*')Ih i5fL4gqOc}tCsNytӒ&ԫYo$\y;Y!rYAw Y!VU4a!|%zfqnrLb1 _j9rS531~$Z2[tgŷqnӅS?9󜮇3,?ʩ@4;Jp]B?b6z[yULE {qD7udzFsGߞ.2! K7K핦I~ #ݻrq #>pPj$"$C? Y0meh@ttZHóGXp[u51Әk>uПRP79rF;_SkHNY+r*UBgx}rϫ312e>s@wiy(:-7q.,DH"-%Bw?;'?k~,9|h>t Ć|e{CƢ`Fe/m_?`QB;II"|(X3ﵻ9RFߋ2ݕG8)/`nZr%~4.>7/.x*0ݽ!D# ]gu`w!s\_*7dTSCr"uQ)PhF Mq*p_, `1@*JPԡUS%j>_6g3RU(AŝF%;\Y@?Lu*ִf2S{xue}l(к)&HY[xTN˽iZ mERXpek`uy|rH5(oloX1 mq]/[ a؉MN_s⁽{xAvIG w'7M]"Fe)-h|W!HC gV +MurQXlXjy3YAMEZJ"9M壻妮G]qN&7L! &j4W7iI8 BTC\_c{}uI7yl;h'7m`44||H|pV;iˆ(&ki/!9IR8C)ß1~nz~?e8ԓ`Xz0=\L؛:0s8sJ;ז5Z-1; .!8VjTL^cD Ow#-?5t~6`!l91.K@7u15CT16Y,̺ɉǤq䮴LUOz3om#сgNO_GV{zҴRhrؚ"á_|jv7znd]6a:ݹZȞ*U/\Z1]XT_5z~z챴4T\e+Q%$Hhi.[Ķoޞ>׷ߐ|K]̄ Qu쨡#%5;Z~:/퀤_a*Fdր=ul3W_{8"} e:H6CT>ov;+:;hbw1={GҔsZxA2|#}7u똝Z~v*e'8Pu 3^ "M+q]7nIƁ{bۗ}G$_%qM{B}bk}+SZ~ez=AlGέj`d31X D!YMz׹ף!gX ( IL< ؋jw|' &#ἸBuq>U/>FvHɘ>[ |G9 wM[IP*LPeɮk:~y}*?P,7h m]cϵRArH#J!MHgumt$sZ\)p j!*(9MHFEB4 VIyHJ) Ya='7,#2r-a1D+;6=69]./ss68Pg;QxB[ҡu@YӛE+K1ԫ%}mD3 */N>+;)_c$,Sp;'k=\V&lZ E2Zo: 8w ZXAix/6wYF@ښ`tS"&b-'2 r0ZK :!\(M%&)MAܣv[t$ ^Bh9$N,hɐRC%Fgm#8^},ZAeXE$^Q^ؽ1rtC QflMOpXK]V~hUz^A::c{nxl [뼋*hNA.ԑtTNmrm\*C2:'pwV{qlUmw0ջϭI+_qXk߳!oc;7e.Ej#^3#ޗzaq8bsb0v-'yG/Ym@Y J7+ gP $P]Jjz붞l_h*B&h$!gp=#:/ uV$>y.3?zwqob0@fD,r$%2!i" E`UDNy06C! '6X=~/{S+~Gd`-l HԸ$d݉>zv uՑLIE>eSkeLy 1-_.#)PIXEHDAd:"sm:L7n,Lq0{FU+Ɲv _&L\pfg2bL阷%X%ZAUĨx*W7Tm0㦋Ob]Aն恗"q=%S}=4I1)Yz޷=^A-Ƌ1J翓P7O6#bz=}]13mIS d!% %ϝ6n' e-O͉DG"26h3t‡IU}M¾ !FeQW2 |2\]ـ87'i//-U"n˸.^Ӊ_P(wIy bȥMφqP3sQgﷷJD,mm^ɌxM^qhnVE; f~ڏˏ jٝ6q6ow{~GbfXV:p Q5v>v穫n|]Y[s1{}GiJFh{-/uuAxj_s\IT -9]6m<\Kd]z|{ɗ*~u.4lkMe(it$葱(mG*A񨹓'Sv+~o%t9sK37(g'JS`TShd'ڀ1i;ytgpsw`nnn°x=ͪ+veLZAx$> D*.$'A`J^.h] z׺O e CŪeϞl^~VtGg~CF4ȩ_s9̲",Ӌ@mg%ǐ#dî\ {-Re?Vֳ fbWPyTg%BCv ;r.skOc) YTϼdtȹ$Ԑ r7'Gje/c8_r2fZTd$>kjH>C>cǗh*$$Rii}X) w7s7!:C?iiWKCEeviH0;d? s۹=?: 3;&UTObc9[N F/RDdXA')UoWa -$FCB qhOmeKIPTmK`o- zYͅhcqb&WV ܆c P"#VXoCLIW)? `\AEmfj>'Y|/[x>Bm%S|yn /ו&a3n(%,?W:> k0ж]!zD}'+I݅QuBV$b'Z/eh5Tmn5 1ضZce z@շyqs yfCZp'?Iks0a)drANq>Tb0҂)RrҺז*w[o| Sle7] /"L(]DNE^)hr&F7GZ鍱[4aM&VRr ˛phdJi3+I^j 8ˇ>} ]eG0V_F5K  Uw^XXK;ڋv׿c'ZFMlH2ޡn\ rISO)Swȝ xiD3SEH= ՛> y!rq1* fRAtk1 SCmC3àE(FD}_4Ϩ@9ۯ鮬H]=ˇ"waȫ qM{Ho6o\{܈JsWwЙ>5̿|}_.mUUOe~h_Z  /f}_dB🚢"gl^1A:q)mm>y5XlIx%G6m`eB|X^7sBGkMelkֲN۱(ͼ>J(J3tQ3KXUBd8 ``od04^O]rfiG5t2BcBGr|~v3ߟhNCdM>O뿹]9TVJ`3F~NGXH9xX`rؗQB%6}`2f\;)d D?L̷?Wg#}EHȓpy>:-h+3Җu). *@C({yM񗵤awi1Y@P֗q,CB;['%$JM*DFp,FKX cLF9rW:F?6ߩ BVk@'濷i}V;3֢@` ~{Y;.fՍubo:xfzv1Sܮb<{O1ɷM6Ym8tz,a6TRH]mlofv7hGo FȵRGz 엓 Jz?7 UuPw .x֯(Dyo'C[x\_wQuv<={4:c(4ąDwWqOZJ镓Uo/xwNg-;|5-+Ξu%%WG^S0뇶;t~Һ9 D ) i0:!ezVh#lǵ""Ib{`ߍ[Ċfna<7;A@T=Cx+Ho"!Zg0툙&\blW ˚x2mTA[8j OjĚ`U E|tUEoJ2beD̂ZC@!(8 q1߉ <?Wo|30e.͓N q0$]О: RIk/ܢu*I0XO'">=_ ECv=HbS&K݁WiRf]#Џɲ4Aw1QHX% 3BkFl өt{A7һ?#9s9 7GPa8@@Jˀ*-#5|d@@6RAd Te fj4ZWhpRL/w6Aı˼W٭ .bP:.zK`Nd0d&݆Lq|iy=yqXWs9}d[L'*9b+~3"8XlnUJm0@V#CDf忤ҡ"wF; E) @L0fҁ j?`#C-Ick AG;a+OJE"kDRhK*l$R_{ [EpqήVZ< kPȡu 2p=?o^/@=C_mK ODqe20ق1;5 &j# țl=^1! sE# 7~fa:a?)vQkZ|>#]1g"*Ŧ?gOІg6|nm+|M6OA[zݕ0@} ݻ4xWR{Nr&d4Uoo=y:8tXOs$pefm6RZѪu+F)r<+(t`;O 'G҂nGst.{427X<)4E#3v;Q;h afn)T0$,(`c !6!TyPE]@8xyEekY/*7.&=͕vPc SBy28O~>^>zF7o쭕/-(yîrkP$P"1hf wQ/˻K]RL䰋c&m ѓIw~:XWVЋsZʷ+!@H;Dd^ W# v:d^a@AB+AS; u1pkώ o3zv"ا2!;[|Aʲ9V>H4(/k@ۅ꾚L𰾺Hu'iYl;wf^YoPH FBS ܂r6^Eq/uHFRf/@!tXG/gMxc[K-XѲ$By}[=ꃽ9` Υ]MI֦ TyTsd priP6W.4v|#|ks(vlDbA ȹDt$If$H9Sý{ߕ!<dȔȁ6M3gCsq@!ܛipxc!pcc@:q˱^ DB6 .qSOkZVj"e+C3n7D ZrzxtOY<)p+E M< I; B&$N*~7g/#+R37&o7y-|;Ӻ%9A$L*/Q)gqX0BDUh|NJ#r|m4r56_:@.r*HO <;PhO. |THChtƣ'i73pg-"D 'R'}b޽S Z mu9*ADE%z};oWm_k H%LXdYuN:b\*&DA^2K5aN/I f`ۯ9Hw2:CZqW\0_'O2$d֚b2X"XP020Wvxiu&N=)ߴ^#inv`fjIhqyC,Gxw sT F&L7pͅE01X"(Z߮F.j!H><-c(~]} I$Ǯ:]}uf:L!PaDA[ufm}?wmd6o=hfAnWmCk#.2'5-%mC*ZwbYS)j7D]4D`eR@I0P[|7[q&A$E[Ǭ"@~JGSЀ]d̻H#c8gm 67d f@ oN/QFb[$$}u+6$7[ Ь)ɀcz~gh9`E{@~ T6}.0ŽSCe\ӯ%ǭ Z(1|ڬ5YqܑSb7}ѥP[ޫrEfV^v}L1ن'w.9OsɯqQlZ#Vaa^;c粵 + ĥѠħ:ޢ槀¸ #/U8XKxn+rcsK.` PԓadH~w?wOnⲿ6'︽?W-IͥWJ&KxZ#$Q~C _ԑ1wiWj$oap7u>᥇HlD!'Q LG@ CW/0}pK$몉~ʣ)ry7a!1bo),{I IQ9?DN'3Ո[;}%PZ{l ?ӟe~aj[;4ڔQee'jHc]= }P2I'=o7}A5;KS|kϹ'AQN^Q_6z-KI򭄐A~F]BUER-NQa Tx?]$q_jvn0x8QF;ZJd9;;YL7i! >w u޼)wVz._i;,x}=^)MywRb@T_, `ysnϣ>ƬE㟝ZDK.r3*-K$~֯diAs1as=kk8̤#nƦ n2$H$*3io,1Lg@Mȝ|P[c;υnk9y2gS2oWF@ w_Ze0|E= ëDf>[Se5K<WId[f^G]²U%`VyC ;+nJA\[?W۰j;6v X{Di?hna I ~Ăqkm0Y[*2ʯnF$0*/ݻm!(j,ɠ|f qN/^#; x#/Q,c6lTC&_͈TQ0A&apUqK׃9y+hgzwOse튣GV^ e٧:f`>/tǡ @L,(7z^ܰqxيbgD+UN7;}!OC)T3H3n EoyY$Wq1"^.{=9t^/n&wH'pJ,N}LR,뽼{3a=j>>64|Mn=4+87[ yM 8WB]%QDٮhR9Er2@SOcH~|)ZekO̕k(C0=*6zRM9z:FI[nC4~cEKllUw9̓159֫D1߳)#+46Ƒ Q&I[e6^(CIp7nI0nj7vzCvf~~A|@fE$4Pw#/1FSE6B?Tflb | -K&4HDG`HzYW*Ad GO<+B8|-tj'OhR'1>N@{蝀et @(W"s]MψA 3-q/e$$$D@ bv@o"=-z f?ن!MӍ:GJ7+\ӝ̣n}(Υ&[eР/a@˚tkE ,o;x KyS{;f]V޸FLu̦̾Xy4RW<&$mG?Gc65CoQ uW\tCoobPde7ܪT_45 {]%0߬-_[/AkyyF:Dn A5qҐiF|/DKg0ooFnf-!^CXEuX"@Ԃ9:GN'aE)~K@f$'jrrU/(yg 5 #b%^JwD2Ӿd2 -B&QgFɈY:[cTd"?:Xg1L5Ip d/A"VKKImKxݲ\8;X 4AuQnI.^{v[z;.bVb _Q8/M ZZ&NKrD1bO W#*X:W2|GvC2z!F v⾃9frDp lh%-m/2kϞ[ȢG4j@abX3[`if QʶvwQ'4ŇnL̴D"'`Eü15^N_ɸƒXGJH硡T_M7dӝKQX/F?#ȳQk5/A :uQWy4u8T(b2(eR{rnܞ\/!n"گuLӋ=i<̕zO_ɂ mGvFCLYJ?MÙ\KDF?d0 o&rqXvrlgl="6|ȀY0nՐAWl9DcLST<0sa2gjG͙k|. (_ [D1  6Ubprv#3'Se {0+y*槻48o{1K.ۯ=VbT|"cēfĝKxSuB R0F1 ,+UJY21N~eU]g׷s}rN\6k=qJC+zXtmTUGdҢOLĕ 3p7wb+U*__U<ŸYͤ?Wz3ɒ"u78 f Nl @ސ7!rחIN9Ikfx^އK6 Q0F[~5x? H jcZ,g ܄j ndb˅r"|Ho9 ][<)3 ަ-V6625gO1/Ko{F“B𶦃zbu٩%芒4۽wP.$*V.VH}bma*P< g/N\Nk@M sAwfŀ~:.m:A?/r=hiO>w{]~G=_ho>mܟQsh 6>7v1%\DL _sFoƊFF.=k7Tz۲*30ghbEK͏j{./w?qkఙ1C9 t;:t{B/wtHW Fof4u£Eע?G^k읯{S.!hx+R"dP @ǚOa|# ×gMӶ<=3?e1uš_+h50R!b`SH=4N =y2)j:ݝudiÆRr ^a/ܠA 8َUmXY[b I+KLLFm7;fcrK[oGZi0%>Lg# ?E38 Ex .+[6n73Z)g7S<& P}V6U!g@ y-Aam)h;W-SPAܒpFKgNtGн?#v%C2[$ {J/|!tg4tR{@jQ1w\:TOVe%I1 v̉d K14+~gm/Yf^Rx"֑sZ@:{zV&`v8H OX5oi|vn2d~EubƉ|%Zn!F:|4}'[~SA= w%70GRI1 rz7v0B"0W40\;58+gŰe'0c|ޯZ2>.0*=ʢFxf5SFuRY Z+O{PsNCF]}I3Yg/ٚ& 'H~N$ "V> 3vj/z0= }ţ_DmzK]xaYݝKS4%R|9J$uIQA_8 4͵|s/Jb@+~2@`%Md(訾KqvH69sb]7Wuչ̟kMJZ}MTk'_3aW§L@@n5)22P"VAfa^HcoxM0U3fZR)R%9q18.;4Pvǿ]5?Ыỽ69kP0 rBP$DLgѢ`zXX֮ }=Du]ȴ\KqZ.T!/W:Reg>]۔H5_NR/Xl>$ 1 "J_q&0Y_ѿoyg~eU@Q'`GnHFA.k];dL5c̵2um-vgbcNY Uݾz!6{F4{Nimy(®@nX` ,+QƲzo![ ]]_y/Œ!,٦L(/B9u̜vݿzLB rT4B% E_cƭ B.sE{yËh׶8؀D=F^Tp}$S\?g³xiWEB^U0uX3@ڡTЩe0쉍A!p4H+iDV671lgcf`?j$y2g8;D uDVg_ ؖRmHݔ0t }Z5cY0ӱr^LMx HF2$k_fS7r @DIHw}0|\%XFhS[mky0WXʯslW2՗v΢d@g_!:pldF&!`3_Q j[jQB#F$HFl\.k`MKϣ}23֛fF3}7w% 6S񁫊-J[qL葯VrdsZ$%{趧`ZL>aBVUdҖ3iWhg0/!JXl׈Y]uҢYJb7H}NV[>nR8zCم~%_?Izc?YgC~|=,Ҧ!U>}~4 F@vQ )&ۓ<>oY8G=pj,ϲ}ÙϓAVf#`|7fԉ܌ 4i=VFcGˮ"IɈJP"l0Bo6QfK7?J"㎯;TmZo[iHB$'7{Pχ򐰐c0ݬ/lAl@m~&V%'FjV[]\<ﱇ-Fpf1#\B6 *`G_o.uOCy䑐$Y `){X;;tT9ty4>3W331`,Qˌvr xK?ߡB4W۹rb Uilo"Țsl߷Iq[ŃlQaĦ&Oo/{upX+Ur]Kk@kqz~V[2GwQyrʾ?,)̰ /!*ysȃ%x,(䔻{W{fސ;6s%G5z# _$`cl!~xPP wxYafgW I0/\8q9# oQ$7濶hGe)c:(l<^ZƸ5p?j4o/^ eqdbNG%Jp񳊻E HY)d,İ?F~^$ߣ/ֆ9b!:TU28]o6XN!mrrzd7Gdk;, )5{h;#ՒaEpB=2NЁ ,%F/~J߳lo`ȺKpSwժ㦊G>#19VP;(<?au;lS$ /'"" !1esLd8OT0Q0C ; 8%H~u/xl\U8lqw7,HVl,v-D{]mB 6+?K]K~)ytm~xШkdVk8~ЉT:Gc 7=窪7??*==f'AA ޻o|௉]._ڡ^}Y Ɉg:`P W]*CG>=< =oJ >)QM[.J,}2:vQ U^*4~\e0B4X28 3ī)&yc+s#iD~[ rMUcC4S.m9V y~8dz,S#a&ެX̥RWjݽ/RV%*` Zf9?1 r1ǷIۘY @F A@x!YȝK$䖄eiloŶMHǡ/]Jk,1!AkV.R=ad4R]zL,d^&߮in@~7[TԖG";kbsP5`21srF!f@(@zi=Zy Lz/qwku\m[yӬkAH8>R@9DbgP*cGvWOnٴ QmrVA*??Çt8C;&QJ7łU 3 [/!H|ؼр5}'ka8ڥVEq|g6ECJ8B:X>Cs9۹lπ=e{+Y{w"!̲!Oca*m˺$IF5} Q~mh[)s^J ̠Wq?'LZq[ڱQn3r97irv ݼMt7puV镐,Eno wqM WŇqnxP0U J+30ip4^]M̍Nؼ/J5mp>j.;LOf3W՞} VSQ7[ S\~/w [Yy;m)""(wS_2f6" 2"[\? Eɻ%ȌpP1{Uvd2UF2s񑾴i35i0rYl7螜xLUXҚ9lF,RKPZg@z^yw?sgIjypy I_kw4-pG|Cך:LZ+?-5=9940v +:Y6 E]k7ylCD:~A`Ɏ*jf@ufe͝,QMMYn2m6F᱅Zք/*lE-*;Mѫ1^z̖ aDUEI 0yNYٕ(ş@\}wQ=tX` !33۔EWNUT}z~*N8e4dp_&n," t",< /0N%v k?OyO\ƻ(1z zS,;~ëYsfLmKBF4Sd12Mh7@b7l6՗3n{T1 ҨUgt(D$$ |Gr W83 i5K p;z@ 0DRޠÌCQԼY0nSbpdpW ʮ'wG -]|wh(r!a6*11PȲv(RslS䫛} `{ w3&gnq]<,0ֿ wd \ -|g^VDܛ| &eSR`40K|k((ƅC>]|HuQj-}}@mJe/\+GfA[c#G!<(6_ZY3bZF01AeqMUO8HAm[QR;qSn*1J 9ȕ7L@N꼖_$k9hߪEײGs? i^ MpM -p\8/<~\jryg?'p K ""A;T` Hكب=Y>);HI>#x_JJ[km7$:)cd0~ ಔ^H #0yCoPbe?]!z1:@*8@%+Oo\o3R,2D9{֝Hb3èӼP UA[PE# , !Dxgt}Ir\6qm TEHDh C2ЁPsұa"PP-J !vI,R1[I$hPX0!R=→Sa1 N]:z=U?[3}*Al Ui!P )U\mk 44Toz)oqsdb:Waqcc8}u .do\ ܽ?3OBLBՓa ,Yy2vh+NKBzi.I`b[dIVe*{]JH$|bwOc֟1&mv;-|.u(+gI(׼&/%]$ Նi\R܄1*X5\U}eݳI nPrߺ~ʗ%G8vFhtYA`br#Gb~^ +%MѮ<7*LaV-T-ȑE6rەsLgJcv 3aήPs 4BVp|̌MaJv}s<Јyzf\S0 ypNm]lH))f41 cn(Eq bآReN F)e;P~!304f6q T})X$DBM?PJf8Я)*n7n1-zn|s#nLozl|vF]!\bj"&X&͛lnlLw_j0`P$&2r"ֳ6BSPuѲv.,>:е)Ynf/ib]g&:oJf8meѳ{Ż`xi0j3d]zߣb hYl㆐P\w%7pA2+x%bx@]_z+ YXv妯X88\lqLț!=4AUF;P%WrJ(mwTOUo k:>.1#(\R>ބ H\oLGeWu7YҒ, WE4;Df%E$WE ґqXllCϔ15yd< !r"p^;jNvyFELȝ6uG|6gh`2|,s'l]qzʼ1泸mO*qN|_]JxÕ*٪F@r g[3͎+K㐭7 ꫬatJ;m5Nw' 0jFԞ,Zad(qղg >*Z,1SYNmaQo&7wiDWGk{gޭC>H d#x2^$=H\$谹96 :f5ip@z$jUmB˹azh,-l3<79:J/ɭκAR22@pIB9.rHA]ܦۖ%I02Z6]4*ғXUe]JCլcRf S9UEDEwu$"5~6IH@DFʵSJ#f܌Il5g]{Ti(@ !N*"","TLT{LUc$s a x0x}x4o"@@!x"3`eUy_uIjh-oP t"?R2" r8wٺaC^ vy>*+l]vEiʢ%ҬC c2Zw`T:[ FwUl%p6<5#{OU0LJRxJg`w*5jI@[lwZE"A N%~i~Yfˮψ> qdq^[ͅe?|_ &eq7?,}8TW#ٱ?(UeDnblܥy-8R5qkH|Nw/ľm->Ud \.i#ӷEҦ3^4s S𚀍9|L㝌/5zIx 14y]1)/$cm^S`\w{F+WCA|(jٲ#D8J keӆn [V)(? AK9 lFaAg?ZtJ؜|NK Qm3CdWV&*C:޻(6t)mn p H1䥼gҰ]a/2kd-3NڈPJkryPwU+f  9Ցuxե"Lb.} ct}9GJTRwoܫ %hMCqnLBz&5sn7г9ROU`k!{ޒct)!%h$̰=]*fe7\ELe7֛T՚ˬ޽Scm6LG .Nٶ٩:ƘG}olm2ѶVQqKC{c\KD1vL!pe4YSIxQhXQcs70Xr?GT>[SU u;#ى"F" DD(y.(ӥko0Ծ>fd8nIEٯZݫvیP+Q1@," dQ` 1=dտ0g֜D6amW5t>4X( T~VKT/ܗȗͽF Sf.,]H.&!l`cMa{{}lzOwT}6ϣ]eWW_UAFI@!8( kzx'1ÕnFy5HQNxBLIjӺtbJV 7g2kBO 2>Q<ε ғi??")}O(v'L#Kaa ")z4bo}N]K/ą D6ĭkȕѭkmFN\Q:Ԫ%LlBk p"?I?tZrZ^-H3&J^ m? !PV_Z3OƗZ$kn!37alG׽[<`a۟ U *im;QCT "N`1mpTcim}nUیo7EirO%{aQ+s%-6dG97ґلb§#~{#t0HL飻C֍; sP,bѢzyYvau#@t*\*Z0!a_(0X5NnpʴD~,D-٬:tC½ݯM ьEU׿~+bq@].a(g\; &{KuKm](]x&;%^/RR r0y[b<(TaEW߿Gf{FfjeR":RX9?9MN@d >l"p UMO)k/{9~> cDj2ک"B#iw/HvL~O=ھ#~(FgxNZq{"a|/z֬8҃^-F,WoYg:Nƃ3bU oqtd2tAPك}EfOLy٘p0MJ!g.+Zjc7++ct3TNW4g>DΧ59>ܳN yҁ[֗YUg+=(q H %7&\o茮aa9 ;&] :ho?g߃WMi+AH(%Y9zqΐ{A %;] ohx޿ "̇{@ڲr[ԯgvS׵ρ5>gsppiϋn4̐"Q_@Q3˅ovZ<ϓ|xSO7@77̯FioI[1lT~|wl^ e^/:CqN` "#-mcF>I_g{̨/LPd^*q:8US}- o|p|_1ܻ ySRG{Xd+$uO2=I_Ӷ,b9Ab:ԐXx^*ׯuE\%BB!KHKuЀbE`I+$#d%`" Rcj"+K#KeTR BH, )B)Qo[-Al QbȐIp BQA`$d ⒁JM J"EF0H… %J F6 VDB$P$*P1 dDee !,%%*VTBbM%L!QRb2Wf [ m ݳ$ҩֵ%Dj2-p C}C|[HiE (+]SQbL9_2Uر{E c[P㌃-P--kJ (X")cZTXkHmKm iFS|"FeDF#JfZiHƛ+ ve%(ҵubƭmijJ:2!+- X ӓ@gh0mCκ mB\54)T-V n@8D1^- /-O{y`tkro8.vQGِt`c#Qڣ> JLW;9WbgUtd5>ӟTIdb[RY0Bd.2k@OIR.'MlLW'W|iu 9[c Rruíbg31V!7oEU]صF!fٷ>b8("fG,yJ`(`~Os|^N?;, + ,H"!"" "+ (HQT$F(U(,Y"( IB,P(EEXH),Pb$XE FDsy9 2 & T^* .ZgP}ΐٟ$ cojgqZbbFD\{P0ƄX;vgm`](N=! kTe&(4 wZpuXඑPn6t/֧b4#>336$R(,rT|^y|}~m}km2ǦOs~}wFG8=Б-c}$ ,DE@;;M|zYg뉻3NG֙G4\X(zk:o'$}דwz'_,vuX,P٤@9l^[^!"MOciȏ_ BG>Bk7e1ho(۟L'5J<@tuvdBvu `l1qhkd@6Ba8y, 帹y܉̹~E9wϡQ`W4?bO Vy@D#|r!٫M{kVr,Ū6 s8e5qrFxD)%+qRz{A^+j4l{ٺ {^k;9>!,Y <3DBE뜔ݱ: $sٓZKyj7VxMI^gg4Ɂw Pl sԣ88nZ=',.9ώӵC򼛁F@B[WZ4e E[|Jo,m)FkQ9jzϬc@Ћ( )'&y6/ 5c̲",PXSؠ,((H, `a^c_о b9*2ap3#1Y {if\2ѴcT "o$):!~8k(85hHܥPti]M7[}k8mJ S gq`N.'?B%)epp2JkO3.㖫h9oi@<1AŪ*R 1Հw/C ]od؞W <[u}ŋEmr wNsБ9wu^^.B;Jo 2%i>j|oiiG}߳RQ1n{<5ji'Tz{Zl;U&(F6!m\g.U#iMp:f⊽~&C1:|M߳P[Ql`@ygyԗp[-d0rSupdS!t]>~`cƒ=+TF˦pt-ʁٺ5' ڄ?5~K@Ql\a\qv7It7Rlrx+`W׿3KAЗ14-!!<^"eeH.?Gy4YQn78zIFmu`Q!RX xKl!CqCLGK;voۓpmaUGiRCr|Dj[7&eϓ#u:Z)X@W*Fj=W͹quC2}"o_/-cIo]x_xe*ZiA="E䦲:6Z'̖KYHkLe5YKF28VƞZz|,{LHkXkujxI~=l^}E?f+CFXAwAޚsUJ4d oOG~v:]|Kg4pO[ ÿh^Si>]Nw9 [Ư A߷9%9ooUqyۼuRMז6g kdԘc9wGg%[h_Z2ZFc$raN'Fy?']̫=ǣ#E5T#kPr ]NuvT?!We})6Lږ QeO0m<$]SL\?3^.QjdfDl@ Em7y-Fs[O]c 5?InacbTɽ٨og0&w4{vmS$ɮRXs >EsD N$ddI%̇۲ς+ݞWp&pwDoc$`?>.[iU{XUb kAspk< 0U=8~?/p nȻs, v \Ax$Mͩ 8A "!.~ gz-Ɣ7s8xL%r93(C^ilf b1^9p1WW@Մ85qs"U|ND+AnD$#1qhkY1A !"ۖQ)ӺJg[][ǎMv0kH!'OPIUЮ6GDjioCD3^U _7i{=+{T S6FpcP5xd;*p##61W"nκc)1D(5AB`;~}JY͇}y8xj* A$RM 8]v3I [La6vSUx/3e Р hm φTĘ3h.ʂid J"*%խtLu]IO G=8/÷Zb k # {ۘN;k>v~ :WSуq5$c\ p@IW$71bs])#Gh~j1aLCFz\[ҵx*D*0"1]o?bC:_3ͺۥm 5}ɻ $yP(Y* QY"J/VnpeaǴo50^3Y*K-z]GRK{7Hfw`ne`,!wmMwNsЃ.Zq5|_OV+MD\ ?"`rF2aoA8o#"˄՗]G׻P3`0v'[Vxh2O{@bM .F^ Wpjjl/euc9Bab+{{aue[A6C̑%F|ZQjQKSzX+f]BBئ'FYlv5ʵe$]`x`,+4cXwKm/5N=܃ؒ.w ?1GxZ2z)?DuF/YƚQosk6HyK$Hő>?p{U֥-Q7fʗAڕsK h-{$fZ54*GAR՘e\ O.0]*wj`(G۷۸a{I#&št8[HqB`eAIe.Yt~Cs$WA3wnNS'  FKDËJΓiG,E4qG) G>MdfM̂5A)e*jNŏҳ;IZ]ֵ概kqN (d!uZP62[TK.է΀?%4eYV18[W96>%06C{HlHg1&i2ƎNYܣ(bȴX-V/53gC"ӅlJժw Vh)V Ql Kwv{U~fW{E0`N9p֘^ _ W4w\wqH^y~ aA2%ZSk"?6MDԴNM)뿆A"hINww6Y@p V͗2RHQ} BI>PrϢAS-۸i{sԔ۰eueylELDiJ`A9^9.\ s? ޣ*!7E*Ú:[x<%#(*R0wq bI" .C4UJ ֗/qsU 6os4nDxAK i5opFfp!m:mI&3$D`(2 g/WTKػt^e?Y3OzJkUDD< u*͡CogZ=z!_WE>~tR=HdXuV^{kT]w}ōyTհ<0F,+!a:kMnДv ; A2o@ $SxQT*+YjoV)eI]2>|nL9om !!!"# H $"?jٽOݴp8rx2{=lM,_soV AEP! *_c2&6X}qZY-pFɏyЬ]|l ͚}a^JO9k=[9¼ ^OH Q樯q<'ʹéׯjBC(٭c_`E;z=~umȑoZֱyܼ紂S~km͗[sT?! NJfB;>oF{T60g쫓CqRZ&T_m(rS XH@i#΁ڸ4jxs0ht/Ch`T`# 1~GwoY|;D(V˓0È|V79=HT+51Iؐ87e\j_%69jǁ/ jCLl =U*"Vʬ/u/>;BgvNKJj)/cOVMZCjok]sU;5aN pCÕOKP`'$RKv<:-(se]P`XoT8%Dt'vڮRFBM|ApYu3 I L:V% |BD_YP>K}\št&sIH-MUTІaM"O>+!x[uH0[-RH}+os6ÿ+Yvvz@9@[^qato{3^IMX@w f .s׶omK7;tfG"lhd9;}pZNm9Y(5q>6V- ѥaXV߉~* ?v 7}'Ġc]4)M\c:<ۮتغO[Kw(:>L}O+Fߗx @Y\Ah/DO'5Jf=׸tk6E4ef-xe2 m{ʫ+rZ`\G- 4hn7nfHg1%a#B#1l?@˿6v, T\W{%sycz$Wɡ^ϨnᰂI[lB(/ "n?O;Eu3;WMCd=s;9=Hָ~eaPſ{ߤoS}q-C)d bqހeKbG06C#H[tAl CKxIxq4Y`Q~os~EO#?me9dHn-/];i 0}4Rk(W 2 z}p8s],{T[aQ]]/wF!a3-xV mYw˯֞jG:ʡKo>/;q423'G#4[)iG1A9ȯƄ|2`7w ^4Om5~YbM_nsl!b,~o!߷NA7nx($(/Z~UtA~$1T>6Zvpզ!P`R`$"H2<[S9 ]W86!# ht߁RO2Μ,A aFP}%<\3h xȃ,˕:kσL=w7k(v9EXX. #:Kdz7wޏq|usy|sjƜӋ "|ˬ;G+`ya S&VHl( :HuqzCAx>؂&c+Ԁ$1)vcPᷳG!?Y,lcu_N7XG|>pv}^'Cs<WGO-8+z׏0;$OgR*$hEz)Mml_9Nvq1Jsi9BvV9y,JGhfO2Ă 0zPIؖC 0x 4 ~9~PG\; %H΄L3^'8mϴNӯa`~,[ W>' QO;软+QNon?Ϸ|/Ӻoz˶= ןO~nSG>M35R@w:3.t< bsq9X,{؝G^Mu&ϭv??i/ xWWB.RT ܬ-1 T!lUjtDMto:%XxYFuvs5j;%~k<_#帝ygo'ى..1(PxOM+{=EdmNƗZ{2i}fOV4tl+^/vCZIb":@H@2B>!C6e!~RQg6QyGLsu9-%=\e={s,Cgн4< e7I[{1Չ}86ydƶg"łe'Wu`{I>GI$ @{D,(6_^7lMk.m= `$ (utۋ0oMt,V0fMئNNlO};Y^gHbڟ=~#ȏk:/= ] gp5>tw}W;:Hc;߅ŝX7I?OM_lz{X/ph5'9sJQr.mOڸiq s-,$!w 58]!b(<7btԼ0ر 9뢾2ǫ,8EtT9tI3Ld yhACP p "^<cŃPv2p(@.I"IBnYw_3ֳL]ǣyk bH{I,|z5+O#,9W/p2?qyuL`SB}B59+/cܝ=AȄnM$-"xsdu *O?rtuχ~c7g gh<=@1R׷=vWfӿ?_y.oly~N[L#t}aϳZu盓wk7>}ik_?׾˙5LJ_?9gː m,S@ != ZyTT@XQYHbfz/@,R+gjH z+z=b0 <-gfOи-/{@O榿C=t{ܜTYƔc}/BgN_+g=(;~w?^>40Gf}7_9KyLG*ģj`]Gv`@kPB~wHo}Z2b d3{_{F5~ȵ:콏}s_'r!Ln"ten0 hmlX=qtW+BD2u2 L!:̩[d(ʨxKF(q"OfV&z G/yGl~f<~J0m.-_s<\sė'>/uos:ܩ2~۽JR,ނZ}x[S^Z0>cGCc[¶ƿ[Uԇcs+T FUKo247$듀W09rPGsCY=>wWϽ>a~bn5.Gn`/,2 TuEԫx8S륍`"{jGǽ;1&~ެHw!%IvGZ7)/ ߑ˽81]Nd 餄}ܪ/4/L7 JCZj5S?q:n,prX`dQXh*"%k?o{Gl`*+1 ߨo!< 3`&>-Gg}ԩh6օ/u*Ŵ;*zoy7l8Q q~!!xhvQ!A,/./ dνwDf{ky ~(ð0Jk):7KB ?i~>Qm:q9'1wQqi>Ò-㋛ZZd@|Kb/HѴaLuSVe`%" u!çQ3&l BmV .1ʚNkSL"azZ+ixj0`fI4&4B$8rP %v:zr` 0Y^M-g`M03 'l0Txn 3P$D9;V$4 Ud;As@wRE0!@3NS қ WCbd"\85!H$ztVm*E.] "$9^](s(%R)oL<]-յ4Hؘ9fEr6)Uy?JwsTMkrAҖeE,_#KS`w"/z˶%]dv( H=Od_ؼKxHsypw]PT=Z)x'A`[X gA$,PX*p4D`hE04 ethҋ>wj!)^0Pz@^Zt=s[hU߈ֆKq7j\X.[lomt7UdX;yN_rj^X vSy U{m,W&64 2)au@X}6 E c(xtZl],x`^c2 i,M|"A'd4I-֗KȶKavIyH@AqVXe2&d0KK=r% ?T#}c!f>0vb+ enixGjل"(,MB +ښDBQ p nЃ,(A6\ FN]o \ kU63+ X+:OA^]I@MV-RUQ9pw/p[n+d=&,fсӊRrcͲȀW BAδ#!JʙY˻Y(BQ}[[Yͺf8]򦠤AESG15dQ_][3]?_ڦ?AX뾐.N?ec=!ЬŔSfNs[8p4[;Gq[=[wO?mZ/pC/-#uI c.Rxs'$I QiUcZ3. 01Y7'7*a CUQߖ>㜈h@>3as0rDV)u7vD ZVXrǛTz`EGBFͯ*۬4,kӛQD}0 avi$Q@> rӤwӱ)w%Q("UP TRk(|սso/ \_6/@F9IbA86A~4jҚe3Ly+:ˡ)c waίedZ{!Z(xD+s Ud+N kl 2Pulf,&2t/kZL: 3eYh8%>}03*F DU;5 bvg\`N8 $<=q8Ոx2l/ߡخe32E{vAhdKԠr VXqޜg,@FbmΛM:M-W"q:e 1$yk'`܁gGgv:[: $W2@cȥ~R`0$uLHC%#X=: Nҵň0 CyU 6\GJ"2 Vdd_LO `kdtndMKߨ7uv*ި[ \ F@ %*fqk"NZY.Lys[te-dWij3ƪpܲ]|D&:j75u$^o7.L,0MX 3]~YegU ƹqb$ yQIÙY &Zdži˷Evs4rOI ]"(ۮ6g( Di@5p\s2A1uhh]INګ:Dl3.!in,O:d,}c&]8@tg=e yU1_Fg9KD!mRG5*& _"\ˆ~-i&.]+&s0I5H??Vg%kYfH "ؼCs̠HDdWM1X }6qʖA5!e-ڐ,xbuAgqMu{\i;)m'78[(w+Ō?0k+uU9n;r<2NN[pP2u1o.s;^4A5E-Tu"JRȶI؀J?'CөX Hb(eϘ|#{5xxxd34ZW6L %Ӿ>DC ׽L3`It{N+Nj-2:Jέ7wb.\y7 S@ YoHZ{2 JfKڧgwLGWTn=8I2Q)&Q]vTQr$L?n+?O%z0`nˀԁms|Pb-{{&DíkgJwq2Zfل"!B$_K*o~:ek7^yrSwk`EP^9/S{q#ZD$Q`,U8$oNl )khO1%"BV8BrrsA9G4L4β*GyY yZ6m{[soH[M^Kk9 cd LV ׽ـQ@\n ;x(H:H~{s[O~ϧy|Ok1qz~iqYj&=?m=_uٮH"9z@9WX`赝VEnRf?-x 9(p 79˽]G7s} %SOKyiT?7{_j|o8.W?~?{fߍ^ƶ%e[jy~;͜ @t+ P@(aV 5W./㣖ϥoꛣnqm9?7~ 89u U]4/lr ھr_Clon`1L_W o?T}nj ~gkR ^o6^*c.: /#yu۷@\Xc$k?pr_V P J*^j5[Ê19J_߲Qb  G$*IH%A#}"!UÅS>}>oK9As?_V;HHgF8cDjõy; $›􍿓k_(>ҿ/q#\^iF)hς鮹[ˈ4 mm&@_5W[a}pbE W~ 5ȴ:@DhsqO?>ݸ}eY 55@u#_]Q{z:9G}zT!iܰٽ%'W.2 <y =8߮27- 7.@LZ20kƫ#-tF_cw]aK#=(qߵ,p}^ s⇍u@6`+jq>*$" H0xuR}YnӔNR$cجO\pWү_ ! Ð ?d-u? y |E@f;;12ZNqa:SUXu4`H,c'j(ފo;cyU %rf߾Y:AΆA>ۘg,IajƐD0w'oeSk3b: AedX˞A(ab3XBNq ǧjv_-9ט9T_h|F[DhҖ"=3lj!P_lZVqnchѡ%h\s`-g[-a[S.W!i{񅑵#6pŠua;kʉ贑*ɖ2qyh0w`w wߢ*ာY9s4Gf4Aشh}J5]=s/:߷=دĸl\yr֞x( zat}G3_]]kx^^8?:s (IPbh"X4(ey1aႤ64"_ur7Eq!}F+=suE(׫Մ̐@:8zfEQ&d )0@y7x{/f)9vTwehR[i?lh:#ny޸_tky MύрXyխD mLY5؂'< 2a,Vz0iё;p&:nO1!= %ahKIy.G ,x|?KTD9eVq١qyfakս+sW//xn={TlNc9:\mĈm dkcQ5[/ȂZرl2\ާ1]QC 0sXr F ,~[D!}&\pG)"t;smB9 Ch՗22B329+ HC1$|X~T{VMA5SlziXhk[LAib2 " !II`¶#5e%ߚZ]Xnp(u{¼{Q}120s-1$7QR#}qH]aQimQӫ)طIN m"4pheѲm9Bۊ]#2N$~/<[oYc,'\f-xllzI};46T;SOܱ,uܙݧ2&10DN! ۮR vu6 [Xjf 8,cGsq.ByX/:f~<._r pbt+*]<0ِ"(QrY4TWZ3$s:VJTZ >0N![La4Tش<&\<#?1QA{ϵDVaɺn16g>v3|1z 4*WqM ]_`M?y6x6O;{$E㲉m8VM:g,}ͼZ0J@U\FU }!U8iX2u3 {1UWEM1֪o2ɉ#"}M}%43D7^ˮSNC :dä}tLj~ž1]pjݿ>d-XaW*T)Ȝ˫ WN$KK%c7X%8?jbuf^BfJ+ -nt?u?&9;],9ZɃ&|^y(1 O XZ58 `6E4+cQc~ׄ$$c:ti t'/sۏ%Nmr`H KGyUV w]*{=7s4qThjٱ0Ma:$$&uz> łBҰ,4?3_Bgrο:Pq`SX"<(wss)Е1Z1|1ݞTO r?=|s𪿾7]w[q oǴ<|'~ԟ˾\%{^?>o] \~Uocz"/_;]UDSm׽xUL7^ ~ñ[k#tW77uޟ oTƍB) u }#bSf1Q1ah%~dsl-u+:pITc,H^#Xkk $*mףּ._p6C-oH޳-!9D9siڙ}n0"ルoZ?;8~3AL&\B+81AY&SY`k-4m;ZZ5CmݫdK-2֛Zɬ0I}e%ww}zVwp}B#ozajOGͻgeUz ҆wJ4E|]k׾cog2hL&!DMa2hdeO0)6cD`AMfh5ML&MbiI OH& d)4𘡧鄃 <b24iP 4 jziB4FěfQ@hzhhڀh4=@4@zMIi2&$GP›DL2zhh 4=OSC@4hJHF'CSzOTSOS 3IژyADhcHz4z ѵ14ɦM4iѵ4ɣ!d$4i=)jdѵG0OH#52h64ѣM=&44M4 4 42#%ho!od?L[߿@1ƕߍ90n檄. D=)4ڹyi&?îmFeiB C*X(N]&bb>|[_߸ɗ?#d~鉶VrYnY doHp[PSKsAOɼپǥ4YYIC7D#$ɬpULeytǕ 8q-nLj%)r߶\*=7wSg%U?ks?y_xUGUJ)(R ,cZܿMvEɍ(mz<ŪLFfZ8atǞ4l. 6hffCc:l]J5SV|o, t3hhqQJ u1jm`ް:Ik"4/ xp@߱NÑe:|g.9jû4 :.0iC:XMHS,Cleu0"$!c0@sf*YPK޷yUϝ\]04RBiVîJ5χML*87q߹QrLZ;˜$r^V\Y@ibueeU,#k et P ABF[.QݢH"T ":o]CViqf;Xڴ$bERn2.l<<  DkUHzXnw@ala:Eb ̎ [PŘu7$ua63&EU"5z ޲I"@ֈ͙ 7 :$F9TK6WwZIVs0 *Ežʏwÿv VRȠ,JJi)(6QNָv˚FHBT>!Ie:5M͂DeXp,ً?TMס۸%3ej/ J ]qӞVFc[%/UEBݧv6 h2 B!+HMzԠq_ymzŭN5>6  U26w([ZmumEI;1{1ɵn$Kob7{<$e8q3d쬙-md , ʃ7UTHJ3 TEpR +#)<lٯ~v<:qt= O! E Q`P";]x崡 0^M8b458M2/9L;D3Ū UWx Ҧ辬/hFφ˚yQ~Cw}dvp)2f"j[} "zR-RΟn3W2^cע0c2͢µzr赭^X~{tM ">B\/2,E py-vaPz?#q\vLJ#祿HA #_QZ/cݪM0Rɟ.QAVjum۫Lwa~8Mb*X(FUI:=j U5 k{[㖴`}'uЩLɊ,X v A`E1a(Mv@6mͲA`vK8 $ `sck.nwYa$6cHBZU"*#{T p©R {DBhd57 ]\(2ZT0lUwaۀr058$ˣTA7>iW%2KݠM>jRlea-[}Sab*S!@*4)Y}9qz9+@ċ`8sHx 2.W!bY XA0 uZ) ;Gα}bcuR(Ĵ.u[L)Ѝ1zMVHP2B)H$E UPPFK@ >-;+YɥdF i32|xxדu}CyF Ԥɀrf¤쓦R ^0P?퐠凞 t3R0\C; !,$**F"mcDL"cA7إTv>l-D3j.Mr^yt;f-dt*R`}z,[JRrzŤP.,mXU׹{Xgl[d슒 GMnVo\7`Tq34J[lkG'm dira^ * sܗ`T.*}=UhjvO;~Nkl,(+T{* r/l(kW)C HB=LT>LwES{¦ :O.1Q4T~EMLGy&2 =eUqza:s)?!C}I F>#:Hȕ |ߵſg2"^mZ/5?C7 0cwvGQhEf8XyrT :L'#n~D%pajonZ9]3W5]1aZHlYW*Tߣ&4A#&@b (dPB DD- Qס@ &Z %T@8u0&lP8:袉KJWgĎ @0=[Ep%j!fqdٕQVtVxoa{gȸ&"CmblAlz1KlLJK"m2l1M+KS@p/!JR Rk& ̀:(s6U*4uT z L JeeHc8a{ˀm[r"躷XLS8~ޗ8Q+,x+:\w涒^pu˪ރ?y:jm]\91jRe oΈ>ɵ8x ^Ӥ *a2ǨybQBX2!hIx>wn|) z*:&z; GZax=ObGDŽ>ьYpw(5ʁzHk/V+->8Ϙ둙&ِ!ҢHgҷKLAdt zzS[*3[U8~c7kuԢhj!L4a=@sH[A+i{Õ"X/>gsŒ kX ao[uy-PuKY;iS;GFJ?XP^uHISl,D sy0}Z/7'|8{?b/G^o\{>'ȈYgH:" ƙ Ej  *ێ{֎]w;1`Aax~ᓯ%-^aYSEJ;t푅 abS1h^l5uX0.g-~jPj78'Q ա? J#A"#R{]<5}qC %h[ @#0|NW*m'owՍS_ACwUoLwue\BOK'+\NdzhH\ҷ)\2pw!{6]1a@}^N{ vHUL[ĒwVa>=7:n8:&pN>.K'*)!az\w}wjs_GE؉D=uNJScUFsFͩxkFW ]2=n"y ;Ky![ڪT?2ۧٷ2 O6*B(oYzm.i۾XQe_C [M\Okw6VJlԍD` 8sعHF@w*혎m8h|=C}1zFH-+V}@h+=1&9A OF -0* g*\yO;Z,x݁h%y%DL@j'h3xvLVd&X=(2U1멓fkKPOc||АmS)[LO[Rz, /N_yVt%>2.iU5HnES9)nG1cO7wi:/O"#k{-w9_<ٲܣ^=HPi@zC@ 9oL{3A@=;B|JPơՓMvs՘U;CƠD֤2BW3!hzMi#9$8Vzo| 'ӂ9xAڸts7OuvG 7%Sp`2kP7>G`!2ccThP/ _S}?-Erݼ|^A8)R 5TFZ? 4+jqz/%o  /%Q>y9QR), u Oo, D𒎝{tR^_d =c쇗kG\J+s{G\]ԐLMa>߈U֜.Ò 1\'2zޓ6L[3܄OsD0๸sF{<{'u߀#9Ƞ`3>9ыAC/q)1P men51d>4WXvսB@z u8Т?_Й. fW`?lE}x͸Tcɋ߆򜲢ƒ }v?Mjo n=h DNKOZTj[U;}HH8%ѣ݉-Ѓa|JNF+dcτƮu9s]߂&ձЊ_9E'%#G j'A($5n,|kʓn$+4 lw='!YxQ8e;-`+c//䶗rO8ItrNW5&qm&Q6Y?S ѳJF ˗RȵVbT=Ƨ\=~tGcb.'!o'#O>X֧4Z90Nw4% E ~yrv \3/y#ݎ؂g$u`p\Z~ 9A#E[NUj- o.S}YfF򎫑U |Pn|h.hc#, Bɀo\iqV.A6ӥ* (=7r!hZ&aB3 Z,:w3 D(֣# +dWܤWB3TՋ#qv ItwiUx\ zvl0aѭ i3[`ȋNw ɾY"LVf4yӭ˩ b%߱VW4> Yy[|H- trܲ H.5 E#Qqg:ބ} ex_Rfn ;mDcXf?`!7rIuQ3TFŠ@lJda-Xe (IP7z_A2 92;8uz;u\q榓A7K8‘ ySq@Ծ i=6!xkcrԘp?%xnmu𭳁pgR%Kc&A Rvz R.{A-f]f-=8o׏c/FVg8GjF-tdGe5{UbM1AxtW|U[Dm9 )[./;hR=f+F`|V~ l-вD!(\&NC3"OuQ|5 Bw4^NtSq\!(w ŧX*V[ɽ8봨DLjfLxoE\oQa\+\hE8Qx&>hޚ B4M{ZZo,XSf=PzMo _G!%R'Bt/ʃ,=2b2?%!zY&˖[^~de_DG,E>|Fyw9EH[߇"͘y~'z#4+~PۇB؈D^UDMtAABQ WM1UEٽ!Ss%MS$-GT)eyB a7,{=eH3$h> `~ xm_ƽ堟x 0a :F~/HyQH Rp42H^vߏe¬ rf^.fn%D"j鳌ixnVi>>PqRo-XaAHG/\¹^J+؇Xcjr_j՚dPW5.atayxO YXrX?t9}cmMj) f%΀FQ80g-sQ%LZ%} @g.^IhI{,f|(R ? 7 VUذ,IQـ4K]y+is ,h}t5ASo( |Me!~G5]Ptϊ{> gx,7-:oj2p'o51uԈ{zxL1Z\8)=EEh' 2yBd('L7: LHKN+!_q7$KU03}99WR<3h:jԾ>i {}n0NU8V]IVoABwY0 wwn2 7ߚQj8NXwɯ^ғ®]>l%2j\zțXX%DG#˚8Z"4ZDH;}VpŪ[vh4AQwD^>n!Ho Ž9j 7D=r0($g#I)/[xYs^TfKw27)PpG X±ʈrNZ nL5nAg "L3f<$dnKӽqM <,Nw5ġfeI%^ݍ\š|%VLf"t^HB].uvOz~kFPvdYT)[N(FIZ4 =fp(%þhgaT/\(B"krxu~e2q7vd9ZⵦW0$kKRwŠp)CZieMm٥¬"JVE!ۻ[ _ʖ&$HpI%]5*J;k2]Zp/\>7vk~V p"xKq80_o+6U`N^>k *c`P86{E5Y /&p٥@뒻Kh6G3tO)ϟ`C|jFa1dz<'`QE>Z *yɢ5L |h%vz(+~m.Y$:u?z9vbbgO<ղ?diR)Qۉ2?jmch8QrKx=9Af*DVnB<ׁ 4ŏa2^np8z;f #d!w[P"uUF7U i Yyk2%瀹R ?mgyp}Bv}ӷ:p }iU4#plEp"]}ǹQȁII{0$(Z!h oxa|Ad}[Ge2y@"tO>h{51Dy}fG~pe7aݸrZ4}V+aI]7.W1iBn_7KɐUZ }O5W޳M+U*@]l"hA*$PY9ܭcׁ ;Q'ʦ tnDZZtNZ7.?7Ҕi!u]^BUlup MHNYEk%)XH6\fmfڽqͭ?}5tf&ǔqfMʻJ̣aO_ W}٪>n"66{CJ˵Z t'QgX/C^"&ps6F_XKkXQ"Kozgnp.lҎ2[u*ăf,ta%F.Ԅw@lPdt^ADO~ 6܎qI)=gQt zzP&oePSz3΁`KT5wW$ i>E=; @bFº;) 98j:~n*Xg|.`HBVjO_c!PGC&r(_ZgCpMm"tZq5iPY^"!f8B6>," Q ֈ ,A-PS -"X4 BQ)á 5 u1 79垕ٴn^ٌS01kWGK5"eWXx"QD5v`&5D)5 R.r@zBM%GVşKEhĘ˅ym#*q!@׽!`׳Q `}sqM%'|WR ):%تɬ\b .|dfyVؑtO5r mmrԶCL ſf/9]k4^6؎ɸ߬H۱Gܐ*ֻ[kN,J yVvcqˆE{f583r ˔w&4l4tO86݄g-շas'hZ>t{= ]ҤJXxYBjZd,j08ZF&3WYÅ/Kr|Dʖ;--RsaTjOJ xi,c;xN}Ȭ(̂$wՔT*\IP*Z#Ĕ Ҋ:XBJI#'ӽ/;W0>,ǒz=<{[^wƂ^Pg`6~ަ.)wǥE0;*uj/MY87տtb>Qx!W031#d}8ګ0&ȻaTY4g&U8hAX!F4/| ABjM2i9ٯtJ_A;"B R҈)嚥lp] rVT#šuBc[?%a%~㋹faD+ǮeN\Av#7}DŽjDƋJz˨A}܀ )JJ4ɄFs7ldSP>zɴ!6Y7,,EGcR:}w38 BA RF%d\4ZnDŽ,$o1ƥT-ҠFi(~ Rcu.6Aa[gwl\4ܒSц 3ؒ֌<&Hu5LTgͤHDz9&?LH8p~PQM1?'{ɏv{a Wy~:[BF#L{DyF$0"8 `P)i}OJ&r0\aV;ժJᡯ' =YQ"0 6h}Z%8YqC1#J.X3,vۜN튱YUqڭH$bרYt! xa*}U-Zo۽6 s(yYd`꫄P{-i|03Q C0=;K,Q,R[q{WΈ+)%-,0k''}e0R#xg!良ly`wU'NiAA<Ojx㯽ȭu΅`苭hmH'Pq`~'S'ǘ`c;gSφmT pM$$)6ew^ @rC>P7a%?z|k *[QS8y߀Jm)">i2܃Ivc qVO4(75%I>:\*7(8 QW%!Yէ*Qu|5"wPJ_:Rñ,#pPv" f>ԂMn̂Z䔨s7\.tym0aoFW-[2\\}Ak9fhxUΰE]|?4E È9CUV2s#%#·"%KYԌyj".uN,~SWJ n̹Ack xgCրၲ%1e"b l,7x.KsEO_ձ*.J$bhZHY+%.\X|.N2PR<|[ '$9 \"ew~oC'j-A/Շl_kB09cn⿧} ަF%OwHip{Рզv+i29vb=sQ/_3RðqJ \n| Wmj,}X5zN@%ey6%8 'v5Wb{-Pv r*fk+chG0})3 ܚ*ZplO 44_W]GFQ@Kﳮ zI; ߴ PSp 8;p >Bvnȥ e̼}|_kzޙggE}>̀H/."E)?Ac&6X:ڀLl 0&p)Fkُ X+1z+3k!\[$3NA8(fs5;11WQ^ ;y{O/ KH$wKJN&][梿}[MSG)V\i/Gi3@T~/T1Xfu ͎<!0AKO%?5[@L"`T6)@N0΄8:7Nm(n1j\*r?5JX%Ȼ{jG¾NNGGugNaa1%JWm]:'7W%J"X ֨Tyx.C+q'" evq% u W败NϤ(whO16 yQ]h%koM\z=laAr%x'Usg#@DaM|:jxԈCQT<aCfٔ3 is\Oh݆uXm_wo5jQ* F"/LY[Ȯؤ qIp09WSjh-EprRؓ%s7!>d 7."ZNc0)yP5ţAEyl(*ymLF4ƂǺH8quU^[; Ǧo>9K_ acBx&UTԇد$F2[08u+x`;l=c@CǰWf[(eIߓV";$VDI"Tb.Q!t iE jt{2QzFkh}E8p+7|S˼`dr)R),=TnuedaW$0+8qL0vtHPYi}Yc0f mO;kgM"fS1?qE^,R(Ηbb>O?%SC\ţ smb;28! f>] ܴ+>3:zݍ]̡d¬;to-3NxG*!:Uq7 *qg{@(N" ᎯeR+B5TӬpMމ:P{U #$"(mM>o\&B!F%86n]3Ջ\3;H(׭h%Z8 1Qh86OVbP_T lp-m'>I疍D<,( T;k_fu:k&[e@l%xjdNבn9k2yu3[bfZ`{f|aФ[KMMBrgPR݌OBuE!?|#@E5vnkgp)}cD.13D/D";:[F Q,&b»l#zǺ7l xvמ,ߋ=Q+t-6 a!ݑ95&"C1faO_tA8hv0v C"u4KXFD b72ԋȮHx_ǵ4u8=34 t;[ˊdV&.]LzN6UVU{3*(オi8 ] ]0'sԢ`FykP9|xdVGH.ь+x'8y8^/krV-Qkc>e C_n[诏--4rjq)X\=w]ŕZ&"9+B7Sv]+))IrTDޅ}aڽ 9M?%Qϥ5i:+Po*'&\A6!ATkE_\(= e8qAs9vSWQ)Q? t3s4Wƛk8kN?yxGeC8e]?&|EM ](u C j~zH{M~@rz>~y ]'io*'>?gNSr :1P Z.31^&o}EBEE5Ʊdm8ҔTopJ ?9m"adh% M=[)*f7U'oJOobG$tf-4( NZ7[̹@,' C}ԴIO7!t9#xy^S]aj&~n"O#N8.nߌ UF6Qb;hdHu1CL1XkSi)&c8VFOsʢ}L(3g$+Cf;hMr '6W{T&~^~1Bu> ".Kuz7tc븲eǒ?!dMgM*ai,.)?*pi]B$™M\d- appzt-+%?rk_2+!΁*mv=Tm8J:O p2ĜIE/eXy.#͜mv]N;vo07NSY(i";ixm:f?RLLr֕QV=F%`pe>ei- w(VP:c|(P-lcH̳th%\nz* }* ~Ep* qXffYz'>qMcJIm &HYɤk-IE:WoP+Ͼ:|rp9!Ǵ5j"$(<|h hq+zvUlx3OTs|fO" ߎ{LC nr0[Rx[7bOiH#鲚K!Ht+ /gOU-GN}NDz^TtBuK- ?O6K‚=/G[>x;k_k*D |Jg9[IdYʦHbS;YRa64E= %.]K^.:] l%M=ɄvKĚ,';!HL\R;KSRpLj)I{,V" ms>0Ao]7rަ"# Hx]/Oךd?)JStM7z[@YaƠkYaKeךJOt=-DoP^jnj%ʼn{5ʐ:Jƕ1^& /D2Mҽ hS<bXix4p[ܲv@x-Fi쳒 KD|Q&E(֥p|W c66 :$IKam)pgaSzĈ.<~䑻L1C#{ M?@? _sΪҬfN Ç]n1m"w}HzZ6լ:fB{2-}q;'>\{vnҤH̓7,gX}EE$D4H8ev$'] 5t r0Y,me@7u4EF0kG&]S404Q1YZvIO#L*;4a>#)K8uqg0jL1gҜ(򇑽@q}$7&AK Uz <+ElˢhteFb(swt+gϝi6u%Uĵa("sGIRt99b՗)Bt9R.|*^_5R")P k%E͉I?DB3MdrxT=щ xf]50b5F4BL!Jˡ3fȃEX`D9ͦ%sI'XB񩗭FCV80Tlk9i$+FLh H~̎VԜۄG,(kL $l[G"wmEXreMH||2\ Ra\%f:հRLHg֪0Ff4^=bc&|zLg}4*ay2Q=s]'d 4SEB9OETO+ N7N_f%j1" Y./>Fe7 ""t(40~CG+ 7sxLYҟFG=eSVv#V[8#g }_jI9"?Nrφz Q}2NdC*Gݺ#s.+XӾ KW9/>ݝ\o!51/.ʡH96v}~fN P.Zt%'G3\{Ta)oǁ x$8l(qvkCq7 `g ΧV|SDzP"v|Ε:V>@xtB;tüZ~iKu# HL_r49 =پ?H5٤ !=P* @ v #&UY߉55 9{&H<団.FmL<  ]kͭ_n.p/kizٿd HuEkR&1ƭ& ?Lӈq?08b%fY4Χert}a*wԲYt:h8. cexc$&uq-5D.[OWEO膗h[]]GM#4'":k+T{qYA@JJQEWԱxT.J"/~VJf˶{ ׺1 3"kW=Fg*/vI} >Fpdsr[? A~[ ULwJ-=_闵_,L v1sK~UK%"xκ5p!C7Ci)i+]8eڇ£wT`^2W{gE`\cj d{y1J5Ĕ[Tlcp2ő$UUm9LIj tvӟUqюI'8L*oSYꌽ;_UTܖSdc: Qep WIyC0wїO_Ex"Mre&JebL } o =N~kDs X2(Q,NT- 4cݯ*Gc!fWʱ5+ C0\=kd]M.56zב9T@4c\oφً4?1!d)bK*W@GNK"@ʮblj.hBb4 aQJ/>{ُoC\$ 7%DBxKs~{*wR!:VpxҴAA rg% YIeQb-4|g^l ']>ز#`":{(w)Xy_ ?F8@(,6z1kѲcPN߬͟j~#5G%)~sp*'*O=lbkK2R|<.!"ncrOH.Ap4V݄""lk='aqppNh)jbJuImv NZ.6eZ \}3d#"lKa`ǥ]ޭy35ICΧi`A+0L: ?l`m"XjuĴ8TDA$|p&׶.&TZn˕n>٪hͮEQVb-"Sĵ9yͨ'W dLq`%I\<*i[x60Q5O#k,˶a꿠YSV6NoW~wEYfUiۯ&#CBxdTAse쬯Buzg*ةզ3Ɗ٫ c*⚛.Т7bA?~X+u7A(7z\O?+ڎ^Pg8|fT`$CLS"<'1/b1ÝoWTβA+05 j,Y8#'W&ƪb;Q,@{/@V}[i>d`X:q!XoDWa-$ r*5<c9Ba6/aomSj=O#AgYv;|CIOQҷ֍<):щ+Ѿ:ii\4/v%N^e4:s:%Y"w&" c 6&æXi,A(:&K[F9&ﺇQSxʰm ]d6E<6_iWɘTKrίN2r@_tਤ ԨSdw▏ty|Xw2JsԅotшeE`>8ɉKGDCDQ]Uѐ,l& ::ag*0lp[ϋ>S*|n- 7=!ktڶ YZ