samba-client-libs-4.19.7+git.357.1d7950ebd62-150600.3.3.2<>, <f%p9|h_fJnncb<6*qL@i?AWS BR8='~` ,_:@OWL$}]]+S"t28D`hGVm[&kuy Yf5v#Ziڠy88CD?4d/ < S 9PV`v8v $v v v v !v#v&v(l(v*|`Xdpp(8 9 :D >@@@B@FB.GBHvHD vIEvXFpYJ|ZM[M\PPv]R(v^\kb\c]Hd]e]f]l]u]vv_dwvxvy` z0Csamba-client-libs4.19.7+git.357.1d7950ebd62150600.3.3.2Samba client librariesThe samba-libs package contains the libraries needed by samba client programs.f%h02-armsrv3ySUSE Linux Enterprise 15SUSE LLC GPL-3.0-or-laterhttps://www.suse.com/Development/Libraries/C and C++https://www.samba.org/linuxaarch64 :yx  P 0  px #`0 !` h `Afffffffffffffffffffffffffffffffffffffff f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f 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-binding.so.0.0.1libdcerpc-server-core.so.0.0.1libdcerpc.so.0.0.1libndr-krb5pac.so.0.0.1libndr-nbt.so.0.0.1libndr-standard.so.0.0.1libndr.so.3.0.1libnetapi.so.1.0.0libsamba-credentials.so.1.0.0libsamba-errors.so.1.0.0libsamba-hostconfig.so.0.0.1libsamba-passdb.so.0.28.0libsamba-util.so.0.0.1libsamdb.so.0.0.1libsmbclient.so.0.7.0libsmbconf.so.0.0.1libsmbldap.so.2.1.0libtevent-util.so.0.0.1libwbclient.so.0.16rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootsamba-4.19.7+git.357.1d7950ebd62-150600.3.3.2.src.rpmlibCHARSET3-samba4.so()(64bit)libCHARSET3-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libMESSAGING-SEND-samba4.so()(64bit)libMESSAGING-SEND-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libMESSAGING-samba4.so()(64bit)libMESSAGING-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libaddns-samba4.so()(64bit)libaddns-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libads-samba4.so()(64bit)libads-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libasn1util-samba4.so()(64bit)libasn1util-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libauth-samba4.so()(64bit)libauth-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libauthkrb5-samba4.so()(64bit)libauthkrb5-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libcli-cldap-samba4.so()(64bit)libcli-cldap-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libcli-ldap-common-samba4.so()(64bit)libcli-ldap-common-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libcli-ldap-samba4.so()(64bit)libcli-ldap-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libcli-nbt-samba4.so()(64bit)libcli-nbt-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libcli-smb-common-samba4.so()(64bit)libcli-smb-common-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libcli-spoolss-samba4.so()(64bit)libcli-spoolss-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libcliauth-samba4.so()(64bit)libcliauth-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libclidns-samba4.so()(64bit)libclidns-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libcluster-samba4.so()(64bit)libcluster-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libcmdline-contexts-samba4.so()(64bit)libcmdline-contexts-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libcmdline-samba4.so()(64bit)libcmdline-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libcommon-auth-samba4.so()(64bit)libcommon-auth-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libdbwrap-samba4.so()(64bit)libdbwrap-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libdcerpc-binding.so.0()(64bit)libdcerpc-binding.so.0(DCERPC_BINDING_0.0.1)(64bit)libdcerpc-binding0libdcerpc-pkt-auth-samba4.so()(64bit)libdcerpc-pkt-auth-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libdcerpc-samba-samba4.so()(64bit)libdcerpc-samba-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libdcerpc-samba4.so()(64bit)libdcerpc-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libdcerpc-server-core.so.0()(64bit)libdcerpc-server-core.so.0(DCERPC_SERVER_CORE_0.0.1)(64bit)libdcerpc.so.0()(64bit)libdcerpc.so.0(DCERPC_0.0.1)(64bit)libdcerpc0libevents-samba4.so()(64bit)libevents-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libflag-mapping-samba4.so()(64bit)libflag-mapping-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libgenrand-samba4.so()(64bit)libgenrand-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libgensec-samba4.so()(64bit)libgensec-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libgpo-samba4.so()(64bit)libgpo-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libgse-samba4.so()(64bit)libgse-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libhttp-samba4.so()(64bit)libhttp-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libinterfaces-samba4.so()(64bit)libinterfaces-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libiov-buf-samba4.so()(64bit)libiov-buf-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libkrb5samba-samba4.so()(64bit)libkrb5samba-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libldbsamba-samba4.so()(64bit)libldbsamba-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)liblibcli-lsa3-samba4.so()(64bit)liblibcli-lsa3-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)liblibcli-netlogon3-samba4.so()(64bit)liblibcli-netlogon3-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)liblibsmb-samba4.so()(64bit)liblibsmb-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libmessages-dgm-samba4.so()(64bit)libmessages-dgm-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libmessages-util-samba4.so()(64bit)libmessages-util-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libmscat-samba4.so()(64bit)libmscat-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libmsghdr-samba4.so()(64bit)libmsghdr-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libmsrpc3-samba4.so()(64bit)libmsrpc3-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libndr-krb5pac.so.0()(64bit)libndr-krb5pac.so.0(NDR_KRB5PAC_0.0.1)(64bit)libndr-krb5pac0libndr-nbt.so.0()(64bit)libndr-nbt.so.0(NDR_NBT_0.0.1)(64bit)libndr-nbt0libndr-samba-samba4.so()(64bit)libndr-samba-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libndr-samba4.so()(64bit)libndr-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libndr-standard.so.0()(64bit)libndr-standard.so.0(NDR_STANDARD_0.0.1)(64bit)libndr-standard0libndr.so.3()(64bit)libndr.so.3(NDR_0.0.1)(64bit)libndr.so.3(NDR_0.0.2)(64bit)libndr.so.3(NDR_0.0.3)(64bit)libndr.so.3(NDR_0.0.4)(64bit)libndr.so.3(NDR_0.0.5)(64bit)libndr.so.3(NDR_0.0.6)(64bit)libndr.so.3(NDR_0.0.7)(64bit)libndr.so.3(NDR_0.0.8)(64bit)libndr.so.3(NDR_0.0.9)(64bit)libndr.so.3(NDR_0.1.0)(64bit)libndr.so.3(NDR_0.1.1)(64bit)libndr.so.3(NDR_0.1.2)(64bit)libndr.so.3(NDR_0.2.0)(64bit)libndr.so.3(NDR_0.2.1)(64bit)libndr.so.3(NDR_1.0.0)(64bit)libndr.so.3(NDR_1.0.1)(64bit)libndr.so.3(NDR_1.0.2)(64bit)libndr.so.3(NDR_2.0.0)(64bit)libndr.so.3(NDR_3.0.0)(64bit)libndr.so.3(NDR_3.0.1)(64bit)libndr2libnet-keytab-samba4.so()(64bit)libnet-keytab-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libnetapi.so.1()(64bit)libnetapi.so.1(NETAPI_1.0.0)(64bit)libnetapi0libnetif-samba4.so()(64bit)libnetif-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libnpa-tstream-samba4.so()(64bit)libnpa-tstream-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libprinting-migrate-samba4.so()(64bit)libprinting-migrate-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libregistry-samba4.so()(64bit)libregistry-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libreplace-samba4.so()(64bit)libreplace-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsamba-cluster-support-samba4.so()(64bit)libsamba-cluster-support-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsamba-credentials.so.1()(64bit)libsamba-credentials.so.1(SAMBA_CREDENTIALS_1.0.0)(64bit)libsamba-credentials1libsamba-debug-samba4.so()(64bit)libsamba-debug-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsamba-errors.so.1()(64bit)libsamba-errors.so.1(SAMBA_ERRORS_1.0.0)(64bit)libsamba-errors0libsamba-hostconfig.so.0()(64bit)libsamba-hostconfig.so.0(SAMBA_HOSTCONFIG_0.0.1)(64bit)libsamba-hostconfig0libsamba-modules-samba4.so()(64bit)libsamba-modules-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsamba-passdb.so.0()(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.2.0)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.24.1)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.24.2)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.25.0)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.26.0)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.27.0)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.27.1)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.27.2)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.28.0)(64bit)libsamba-passdb0libsamba-security-samba4.so()(64bit)libsamba-security-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsamba-sockets-samba4.so()(64bit)libsamba-sockets-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsamba-util.so.0()(64bit)libsamba-util.so.0(SAMBA_UTIL_0.0.1)(64bit)libsamba-util0libsamba3-util-samba4.so()(64bit)libsamba3-util-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsamdb-common-samba4.so()(64bit)libsamdb-common-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsamdb.so.0()(64bit)libsamdb.so.0(SAMDB_0.0.1)(64bit)libsamdb0libsecrets3-samba4.so()(64bit)libsecrets3-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libserver-id-db-samba4.so()(64bit)libserver-id-db-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libserver-role-samba4.so()(64bit)libserver-role-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsmb-transport-samba4.so()(64bit)libsmb-transport-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsmbclient-raw-samba4.so()(64bit)libsmbclient-raw-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsmbclient.so.0()(64bit)libsmbclient.so.0(SMBCLIENT_0.1.0)(64bit)libsmbclient.so.0(SMBCLIENT_0.2.0)(64bit)libsmbclient.so.0(SMBCLIENT_0.2.1)(64bit)libsmbclient.so.0(SMBCLIENT_0.2.2)(64bit)libsmbclient.so.0(SMBCLIENT_0.2.3)(64bit)libsmbclient.so.0(SMBCLIENT_0.3.0)(64bit)libsmbclient.so.0(SMBCLIENT_0.3.1)(64bit)libsmbclient.so.0(SMBCLIENT_0.3.2)(64bit)libsmbclient.so.0(SMBCLIENT_0.3.3)(64bit)libsmbclient.so.0(SMBCLIENT_0.4.0)(64bit)libsmbclient.so.0(SMBCLIENT_0.5.0)(64bit)libsmbclient.so.0(SMBCLIENT_0.6.0)(64bit)libsmbclient.so.0(SMBCLIENT_0.7.0)(64bit)libsmbclient0libsmbconf.so.0()(64bit)libsmbconf.so.0(SMBCONF_0.0.1)(64bit)libsmbconf0libsmbd-base-samba4.so()(64bit)libsmbd-base-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsmbd-shim-samba4.so()(64bit)libsmbd-shim-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsmbldap.so.2()(64bit)libsmbldap.so.2(SMBLDAP_0)(64bit)libsmbldap.so.2(SMBLDAP_1)(64bit)libsmbldap.so.2(SMBLDAP_2)(64bit)libsmbldap.so.2(SMBLDAP_2.1.0)(64bit)libsmbldap2libsmbldaphelper-samba4.so()(64bit)libsmbldaphelper-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsocket-blocking-samba4.so()(64bit)libsocket-blocking-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libstable-sort-samba4.so()(64bit)libstable-sort-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsys-rw-samba4.so()(64bit)libsys-rw-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libtalloc-report-printf-samba4.so()(64bit)libtalloc-report-printf-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libtdb-wrap-samba4.so()(64bit)libtdb-wrap-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libtevent-util.so.0()(64bit)libtevent-util.so.0(TEVENT_UTIL_0.0.1)(64bit)libtevent-util0libtime-basic-samba4.so()(64bit)libtime-basic-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libtrusts-util-samba4.so()(64bit)libtrusts-util-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libutil-reg-samba4.so()(64bit)libutil-reg-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libutil-setid-samba4.so()(64bit)libutil-setid-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libutil-tdb-samba4.so()(64bit)libutil-tdb-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libwbclient.so.0()(64bit)libwbclient.so.0(WBCLIENT_0.10)(64bit)libwbclient.so.0(WBCLIENT_0.11)(64bit)libwbclient.so.0(WBCLIENT_0.12)(64bit)libwbclient.so.0(WBCLIENT_0.13)(64bit)libwbclient.so.0(WBCLIENT_0.14)(64bit)libwbclient.so.0(WBCLIENT_0.15)(64bit)libwbclient.so.0(WBCLIENT_0.16)(64bit)libwbclient.so.0(WBCLIENT_0.9)(64bit)libwbclient0samba-client-libssamba-client-libs(aarch-64)@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    /sbin/ldconfig/sbin/ldconfigld-linux-aarch64.so.1()(64bit)ld-linux-aarch64.so.1(GLIBC_2.17)(64bit)libCHARSET3-samba4.so()(64bit)libCHARSET3-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libMESSAGING-SEND-samba4.so()(64bit)libMESSAGING-SEND-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libMESSAGING-samba4.so()(64bit)libMESSAGING-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libacl.so.1()(64bit)libacl.so.1(ACL_1.0)(64bit)libaddns-samba4.so()(64bit)libaddns-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libads-samba4.so()(64bit)libads-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libasn1util-samba4.so()(64bit)libasn1util-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libauth-samba4.so()(64bit)libauth-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libauthkrb5-samba4.so()(64bit)libauthkrb5-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libavahi-client.so.3()(64bit)libavahi-common.so.3()(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libc.so.6(GLIBC_2.27)(64bit)libc.so.6(GLIBC_2.32)(64bit)libc.so.6(GLIBC_2.33)(64bit)libc.so.6(GLIBC_2.34)(64bit)libc.so.6(GLIBC_2.38)(64bit)libcli-cldap-samba4.so()(64bit)libcli-cldap-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libcli-ldap-common-samba4.so()(64bit)libcli-ldap-common-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libcli-ldap-samba4.so()(64bit)libcli-ldap-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libcli-nbt-samba4.so()(64bit)libcli-nbt-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libcli-smb-common-samba4.so()(64bit)libcli-smb-common-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libcli-spoolss-samba4.so()(64bit)libcli-spoolss-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libcliauth-samba4.so()(64bit)libcliauth-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libclidns-samba4.so()(64bit)libclidns-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libcluster-samba4.so()(64bit)libcluster-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libcom_err.so.2()(64bit)libcommon-auth-samba4.so()(64bit)libcommon-auth-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libdbwrap-samba4.so()(64bit)libdbwrap-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libdcerpc-binding.so.0()(64bit)libdcerpc-binding.so.0(DCERPC_BINDING_0.0.1)(64bit)libdcerpc-pkt-auth-samba4.so()(64bit)libdcerpc-pkt-auth-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libdcerpc-samba-samba4.so()(64bit)libdcerpc-samba-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libdcerpc.so.0()(64bit)libdcerpc.so.0(DCERPC_0.0.1)(64bit)libflag-mapping-samba4.so()(64bit)libflag-mapping-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libgenrand-samba4.so()(64bit)libgenrand-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libgensec-samba4.so()(64bit)libgensec-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libgnutls.so.30()(64bit)libgnutls.so.30(GNUTLS_3_4)(64bit)libgnutls.so.30(GNUTLS_3_6_10)(64bit)libgnutls.so.30(GNUTLS_3_6_13)(64bit)libgnutls.so.30(GNUTLS_3_6_3)(64bit)libgse-samba4.so()(64bit)libgse-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libgssapi_krb5.so.2()(64bit)libgssapi_krb5.so.2(gssapi_krb5_2_MIT)(64bit)libhttp-samba4.so()(64bit)libhttp-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libinterfaces-samba4.so()(64bit)libinterfaces-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libiov-buf-samba4.so()(64bit)libiov-buf-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libk5crypto.so.3()(64bit)libk5crypto.so.3(k5crypto_3_MIT)(64bit)libkrb5.so.3()(64bit)libkrb5.so.3(krb5_3_MIT)(64bit)libkrb5samba-samba4.so()(64bit)libkrb5samba-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)liblber-2.4.so.2()(64bit)libldap_r-2.4.so.2()(64bit)libldb.so.2()(64bit)libldb.so.2(LDB_0.9.10)(64bit)libldb.so.2(LDB_0.9.15)(64bit)libldb.so.2(LDB_0.9.16)(64bit)libldb.so.2(LDB_0.9.23)(64bit)libldb.so.2(LDB_1.1.1)(64bit)libldb.so.2(LDB_1.1.19)(64bit)libldb.so.2(LDB_1.1.30)(64bit)libldb.so.2(LDB_1.3.0)(64bit)libldb.so.2(LDB_2.6.1)(64bit)libldb.so.2(LDB_2.8.0)(64bit)libldbsamba-samba4.so()(64bit)libldbsamba-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)liblibcli-lsa3-samba4.so()(64bit)liblibcli-lsa3-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)liblibcli-netlogon3-samba4.so()(64bit)liblibcli-netlogon3-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)liblibsmb-samba4.so()(64bit)liblibsmb-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libmessages-dgm-samba4.so()(64bit)libmessages-dgm-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libmessages-util-samba4.so()(64bit)libmessages-util-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libmsghdr-samba4.so()(64bit)libmsghdr-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libmsrpc3-samba4.so()(64bit)libmsrpc3-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libndr-krb5pac.so.0()(64bit)libndr-krb5pac.so.0(NDR_KRB5PAC_0.0.1)(64bit)libndr-nbt.so.0()(64bit)libndr-nbt.so.0(NDR_NBT_0.0.1)(64bit)libndr-samba-samba4.so()(64bit)libndr-samba-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libndr-samba4.so()(64bit)libndr-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libndr-standard.so.0()(64bit)libndr-standard.so.0(NDR_STANDARD_0.0.1)(64bit)libndr.so.3()(64bit)libndr.so.3(NDR_0.0.1)(64bit)libndr.so.3(NDR_0.0.3)(64bit)libndr.so.3(NDR_0.0.4)(64bit)libndr.so.3(NDR_0.0.5)(64bit)libndr.so.3(NDR_0.0.6)(64bit)libndr.so.3(NDR_0.0.7)(64bit)libndr.so.3(NDR_0.0.8)(64bit)libndr.so.3(NDR_0.0.9)(64bit)libndr.so.3(NDR_0.1.1)(64bit)libndr.so.3(NDR_0.1.2)(64bit)libndr.so.3(NDR_0.2.0)(64bit)libndr.so.3(NDR_0.2.1)(64bit)libndr.so.3(NDR_1.0.0)(64bit)libndr.so.3(NDR_1.0.1)(64bit)libndr.so.3(NDR_1.0.2)(64bit)libndr.so.3(NDR_2.0.0)(64bit)libndr.so.3(NDR_3.0.1)(64bit)libnetif-samba4.so()(64bit)libnetif-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libnpa-tstream-samba4.so()(64bit)libnpa-tstream-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libnscd.so.1()(64bit)libnscd.so.1(LIBNSCD_1.0)(64bit)libpam.so.0()(64bit)libpam.so.0(LIBPAM_1.0)(64bit)libpopt.so.0()(64bit)libpopt.so.0(LIBPOPT_0)(64bit)libreplace-samba4.so()(64bit)libreplace-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsamba-cluster-support-samba4.so()(64bit)libsamba-cluster-support-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsamba-credentials.so.1()(64bit)libsamba-credentials.so.1(SAMBA_CREDENTIALS_1.0.0)(64bit)libsamba-debug-samba4.so()(64bit)libsamba-debug-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsamba-errors.so.1()(64bit)libsamba-errors.so.1(SAMBA_ERRORS_1.0.0)(64bit)libsamba-hostconfig.so.0()(64bit)libsamba-hostconfig.so.0(SAMBA_HOSTCONFIG_0.0.1)(64bit)libsamba-modules-samba4.so()(64bit)libsamba-modules-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsamba-passdb.so.0()(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.2.0)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.27.1)(64bit)libsamba-security-samba4.so()(64bit)libsamba-security-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsamba-sockets-samba4.so()(64bit)libsamba-sockets-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsamba-util.so.0()(64bit)libsamba-util.so.0(SAMBA_UTIL_0.0.1)(64bit)libsamba3-util-samba4.so()(64bit)libsamba3-util-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsamdb-common-samba4.so()(64bit)libsamdb-common-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsamdb.so.0()(64bit)libsamdb.so.0(SAMDB_0.0.1)(64bit)libsecrets3-samba4.so()(64bit)libsecrets3-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libserver-id-db-samba4.so()(64bit)libserver-id-db-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libserver-role-samba4.so()(64bit)libserver-role-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsmb-transport-samba4.so()(64bit)libsmb-transport-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsmbclient-raw-samba4.so()(64bit)libsmbclient-raw-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsmbconf.so.0()(64bit)libsmbconf.so.0(SMBCONF_0.0.1)(64bit)libsmbd-shim-samba4.so()(64bit)libsmbd-shim-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsmbldap.so.2()(64bit)libsmbldap.so.2(SMBLDAP_0)(64bit)libsmbldap.so.2(SMBLDAP_1)(64bit)libsmbldaphelper-samba4.so()(64bit)libsmbldaphelper-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsocket-blocking-samba4.so()(64bit)libsocket-blocking-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libstable-sort-samba4.so()(64bit)libstable-sort-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsys-rw-samba4.so()(64bit)libsys-rw-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsystemd.so.0()(64bit)libsystemd.so.0(LIBSYSTEMD_209)(64bit)libtalloc-report-printf-samba4.so()(64bit)libtalloc-report-printf-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libtalloc.so.2()(64bit)libtalloc.so.2(TALLOC_2.0.2)(64bit)libtalloc.so.2(TALLOC_2.1.0)(64bit)libtalloc.so.2(TALLOC_2.3.5)(64bit)libtasn1.so.6()(64bit)libtasn1.so.6(LIBTASN1_0_3)(64bit)libtdb-wrap-samba4.so()(64bit)libtdb-wrap-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libtdb.so.1()(64bit)libtdb.so.1(TDB_1.2.1)(64bit)libtdb.so.1(TDB_1.2.2)(64bit)libtdb.so.1(TDB_1.2.5)(64bit)libtdb.so.1(TDB_1.3.0)(64bit)libtdb.so.1(TDB_1.3.11)(64bit)libtdb.so.1(TDB_1.3.17)(64bit)libtevent-util.so.0()(64bit)libtevent-util.so.0(TEVENT_UTIL_0.0.1)(64bit)libtevent.so.0()(64bit)libtevent.so.0(TEVENT_0.11.0)(64bit)libtevent.so.0(TEVENT_0.12.0)(64bit)libtevent.so.0(TEVENT_0.13.0)(64bit)libtevent.so.0(TEVENT_0.15.0)(64bit)libtevent.so.0(TEVENT_0.9.12)(64bit)libtevent.so.0(TEVENT_0.9.13)(64bit)libtevent.so.0(TEVENT_0.9.16)(64bit)libtevent.so.0(TEVENT_0.9.20)(64bit)libtevent.so.0(TEVENT_0.9.30)(64bit)libtevent.so.0(TEVENT_0.9.31)(64bit)libtevent.so.0(TEVENT_0.9.37)(64bit)libtevent.so.0(TEVENT_0.9.9)(64bit)libtime-basic-samba4.so()(64bit)libtime-basic-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libtrusts-util-samba4.so()(64bit)libtrusts-util-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libutil-reg-samba4.so()(64bit)libutil-reg-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libutil-setid-samba4.so()(64bit)libutil-setid-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libutil-tdb-samba4.so()(64bit)libutil-tdb-samba4.so(SAMBA_4.19.7_GIT.357.1D7950EBD62150600.3.3.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libwbclient.so.0()(64bit)libwbclient.so.0(WBCLIENT_0.13)(64bit)libwbclient.so.0(WBCLIENT_0.9)(64bit)libz.so.1()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.3fxfteԔ@ee5@ede6`@e-%e'e%ascabrero@suse.denopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comdmulder@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comscabrero@suse.descabrero@suse.descabrero@suse.denopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comscabrero@suse.dedmulder@suse.comscabrero@suse.denopower@suse.comnopower@suse.comscabrero@suse.denopower@suse.comnopower@suse.comscabrero@suse.denopower@suse.comscabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comddiss@suse.comnopower@suse.comdmulder@suse.comdmulder@suse.comnopower@suse.comscabrero@suse.descabrero@suse.dedimstar@opensuse.orgscabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comnopower@suse.comnopower@suse.comscabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comnopower@suse.comscabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.denopower@suse.comscabrero@suse.deddiss@suse.comddiss@suse.comddiss@suse.comscabrero@suse.descabrero@suse.dedmulder@suse.comnopower@suse.comscabrero@suse.descabrero@suse.dedmulder@suse.comscabrero@suse.descabrero@suse.denopower@suse.comnopower@suse.comnopower@suse.comdmulder@suse.comscabrero@suse.denopower@suse.comddiss@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comscabrero@suse.denopower@suse.comnopower@suse.comjmcdonough@suse.comnopower@suse.comscabrero@suse.denopower@suse.comnopower@suse.comddiss@suse.comddiss@suse.comnopower@suse.comnopower@suse.comddiss@suse.comnopower@suse.comdmulder@suse.comdmulder@suse.comddiss@suse.comscabrero@suse.dedmulder@suse.comddiss@suse.comnopower@suse.comjengelh@inai.dedmulder@suse.comscabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comdmulder@suse.comdmulder@suse.comjmcdonough@suse.comdmulder@suse.comscabrero@suse.dedmulder@suse.comscabrero@suse.dedmulder@suse.comdmulder@suse.comvcizek@suse.comdmulder@suse.comdmulder@suse.comnopower@suse.comscabrero@suse.dejmcdonough@suse.comscabrero@suse.deaaptel@suse.comjengelh@inai.dedimstar@opensuse.orgdmulder@suse.comjmcdonough@suse.comdavid.mulder@suse.comjmcdonough@suse.comaaptel@suse.comdmulder@suse.comscabrero@suse.comscabrero@suse.comkukuk@suse.dedavid.mulder@suse.comscabrero@suse.comrbrown@suse.comdmulder@suse.comscabrero@suse.comdimstar@opensuse.orgscabrero@suse.comaaptel@suse.comnopower@suse.comnopower@suse.comaaptel@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comddiss@suse.comnopower@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comdmulder@suse.comnopower@suse.comjmcdonough@suse.comaaptel@suse.comkukuk@suse.comkukuk@suse.denopower@suse.comaaptel@suse.comdmulder@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comddiss@suse.comjmcdonough@suse.comddiss@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comjmcdonough@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comtchvatal@suse.comlmuelle@suse.comnopower@suse.comcrrodriguez@opensuse.orglmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comnoel.power@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comnopower@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.commpluskal@suse.comlmuelle@suse.comnopower@suse.deddiss@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.denopower@suse.delmuelle@suse.comnopower@suse.deddiss@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.com- Fix a crash when joining offline and 'kerberos method' includes keytab; (bsc#1228732); - Fix reading the password from STDIN or environment vars if it was already given in the command line; (bsc#1228732);- Update to 4.19.7 * ldb qsort might r/w out of bounds with an intransitive compare function (ldb 2.8.1 is already released); (bso#15569). * Many qsort() comparison functions are non-transitive, which can lead to out-of-bounds access in some circumstances (ldb 2.8.1 is already released); (bso#15625). * Need to change gitlab-ci.yml tags in all branches to avoid CI bill; (bso#15638). * netr_LogonSamLogonEx returns NR_STATUS_ACCESS_DENIED with SysvolReady=0; (bso#14981). * Anonymous smb3 signing/encryption should be allowed (similar to Windows Server 2022); (bso#15412). * Panic in dreplsrv_op_pull_source_apply_changes_trigger; (bso#15573). * winbindd, net ads join and other things don't work on an ipv6 only host; (bso#15642). * Smbcacls incorrectly propagates inheritance with Inherit-Only flag; (bso#15636). * http library doesn't support 'chunked transfer encoding'; (bso#15611). - Update to 4.19.6 * fd_handle_destructor() panics within an smbd_smb2_close() if vfs_stat_fsp() fails in fd_close(); (bso#15527). * samba-gpupdate: Correctly implement site support; (bso#15588). * libgpo: Segfault in python bindings; (bso#15599). * Packet marshalling push support missing for CTDB_CONTROL_TCP_CLIENT_DISCONNECTED and CTDB_CONTROL_TCP_CLIENT_PASSED; (bso#15580).- Update to 4.19.5 * Windows 2016 fails to restore previous version of a file from a shadow_copy2 snapshot; (bso#13688). * Symlinks on AIX are broken in 4.19 (and a few version before that); (bso#15549). * Fake directory create times has no effect; (bso#12421). * ctime mixed up with mtime by smbd; (bso#15550). * samba-gpupdate --rsop fails if machine is not in a site; (bso#15548). * gpupdate: The root cert import when NDES is not available is broken; (bso#15557). * samba-gpupdate should print a useful message if cepces-submit can't be found; (bso#15552). * samba-gpupdate logging doesn't work; (bso#15558). * smbpasswd reset permissions only if not 0600; (bso#15555).- Remove -x from bash shebang update-apparmor-samba-profile; (bsc#1218431).- Update to 4.19.4 * net changesecretpw cannot set the machine account password if secrets.tdb is empty; (bso#13577). * For generating doc, take, if defined, env XML_CATALOG_FILES; (bso#15540). * Trivial C typo in nsswitch/winbind_nss_netbsd.c; (bso#15541). * vfs_linux_xfs is incorrectly named; (bso#15542). * systemd stumbled over copyright-message at smbd startup; (bso#15377). * Following intermediate abolute share-local symlinks is broken; (bso#15505). * ctdb RELEASE_IP causes a crash in release_ip if a connection to a non-public address disconnects first; (bso#15523). * shadow_copy2 broken when current fileset's directories are removed; (bso#15544). * smbd does not detect ctdb public ipv6 addresses for multichannel exclusion; (bso#15534). * 'force user = localunixuser' doesn't work if 'allow trusted domains = no' is set; (bso#15469). * smbget debug logging doesn't work; (bso#15525). * smget: username in the smburl and interactive password entry doesn't work; (bso#15532). * smbget auth function doesn't set values for password prompt correctly; (bso#15538). * Unable to copy and write files from clients to Ceph cluster via SMB Linux gateway with Ceph VFS module; (bso#15440). * Multichannel refresh network information; (bso#15547).- Update to 4.19.3 * sid_strings test broken by unix epoch > 1700000000; (bso#15520). * smbd crashes if asked to return full information on close of a stream handle with delete on close disposition set; (bso#15487). * smbd: fix close order of base_fsp and stream_fsp in smb_fname_fsp_destructor(); (bso#15521). * Improve logging for failover scenarios; (bso#15499). * Files without "read attributes" NFS4 ACL permission are not listed in directories; (bso#15093). * CVE-2018-14628 [SECURITY] Deleted Object tombstones visible in AD LDAP to normal users; (bso#13595). * Kerberos TGS-REQ with User2User does not work for normal accounts; (bso#15492). * vfs_gpfs stat calls fail due to file system permissions; (bso#15507). * Samba doesn't build with Python 3.12; (bso#15513).- packaging: samba-tool domain provision requires python3-Markdown; (bsc#1216519).- Update to 4.19.2 * Use-after-free in aio_del_req_from_fsp during smbd shutdown after failed IPC FSCTL_PIPE_TRANSCEIVE; (bso#15423). * clidfs.c do_connect() missing a "return" after a cli_shutdown() call; (bso#15426). * macOS mdfind returns only 50 results; (bso#15463). * GETREALFILENAME_CACHE can modify incoming new filename with previous cache entry value; (bso#15481). * libnss_winbind causes memory corruption since samba-4.18, impacts sendmail, zabbix, potentially more; (bso#15464). * ctdbd: setproctitle not initialized messages flooding logs; (bso#15479). * CVE-2023-5568 Heap buffer overflow with freshness tokens in the Heimdal KDC in Samba 4.19; (bso#15491). * The heimdal KDC doesn't detect s4u2self correctly when fast is in use; (bso#15477).- use systemd-logind rather than utmp for y2038 safety; (bsc#1216159).- CVE-2023-4091: samba: Client can truncate file with read-only permissions; (bsc#1215904); (bso#15439). - CVE-2023-42669: samba: rpcecho, enabled and running in AD DC, allows blocking sleep on request; (bso#1215905); (bso#15474). - CVE-2023-42670: samba: The procedure number is out of range when starting Active Directory Users and Computers; (bsc#1215906); (bso#15473). - CVE-2023-3961: samba: Unsanitized client pipe name passed to local_np_connect(); (bsc#1215907); (bso#15422). - CVE-2023-4154: samba: dirsync allows SYSTEM access with only "GUID_DRS_GET_CHANGES" right, not "GUID_DRS_GET_ALL_CHANGES; (bsc#1215908); (bso#15424).- Update to 4.19.0 * File doesn't show when user doesn't have permission if aio_pthread is loaded; (bso#15453). * ctdb_killtcp fails to work with --enable-pcap and libpcap ≥ 1.9.1; (bso#15451). * Logging to stdout/stderr with DEBUG_SYSLOG_FORMAT_ALWAYS can log to syslog; (bso#15460). * ‘samba-tool domain level raise’ fails unless given a URL; (bso#15458). * reply_sesssetup_and_X() can dereference uninitialized tmp pointer; (bso#15420). * missing return in reply_exit_done(); (bso#15430). * TREE_CONNECT without SETUP causes smbd to use uninitialized pointer; (bso#15432). * Avoid infinite loop in initial user sync with Azure AD Connect when synchronising a large Samba AD domain; (bso#15401). * Samba replication logs show (null) DN; (bso#15407). * 2-3min delays at reconnect with smb2_validate_sequence_number: bad message_id 2; (bso#15346). * DCERPC_PKT_CO_CANCEL and DCERPC_PKT_ORPHANED can't be parsed; (bso#15446). * CID 1539212 causes real issue when output contains only newlines; (bso#15438). * KDC encodes INT64 claims incorrectly; (bso#15452). * mdssvc: Do an early talloc_free() in _mdssvc_open(); (bso#15449). * Windows client join fails if a second container CN=System exists somewhere; (bso#9959). * regression DFS not working with widelinks = true; (bso#15435). * Heimdal fails to build on 32-bit FreeBSD; (bso#15443). * samba-tool ntacl get segfault if aio_pthread appended; (bso#15441). - Update to 4.18.6 * reply_sesssetup_and_X() can dereference uninitialized tmp pointer; (bso#15420); * Missing return in reply_exit_done(); (bso#15430); * post-exec password redaction for samba-tool is more reliable for fully random passwords as it no longer uses regular expressions containing the password value itself; (bso#15289); * Windows client join fails if a second container CN=System exists somewhere; (bso#9959); * Spotlight sometimes returns no results on latest macOS; (bso#15342); * Renaming results in NT_STATUS_SHARING_VIOLATION if previously attempted to remove the destination; (bso#15417); * Spotlight results return wrong date in result list; (bso#15427); * "net offlinejoin provision" does not work as non-root user; (bso#15414); * rpcserver no longer accepts double backslash in dfs pathname; (bso#15400); * cm_prepare_connection() calls close(fd) for the second time; (bso#15433); * 2-3min delays at reconnect with smb2_validate_sequence_number: bad message_id 2; (bso#15346); * samba-tool ntacl get segfault if aio_pthread appended; (bso#15441); * DCERPC_PKT_CO_CANCEL and DCERPC_PKT_ORPHANED can't be parsed; (bso#15446); * Python tarfile extraction needs change to avoid a warning (CVE-2007-4559 mitigation); (bso#15390); * Regression DFS not working with widelinks = true; (bso#15435); * mdssvc: Do an early talloc_free() in _mdssvc_open(); (bso#15449); - Update to 4.18.5 * CVE-2022-2127: lm_resp_len not checked properly in winbindd_pam_auth_crap_send; (bso#15072); (bsc#1213174). * CVE-2023-34966: Samba Spotlight mdssvc RPC Request Infinite Loop Denial-of-Service Vulnerability; (bso#15340); (bsc#1213173). * CVE-2023-34967: Samba Spotlight mdssvc RPC Request Type Confusion Denial-of-Service Vulnerability; (bso#15341); (bsc#1213172). * CVE-2023-34968: Spotlight server-side Share Path Disclosure; (bso#15388); (bsc#1213171). * CVE-2023-3347: Samba doesn't require SMB2+ signing if `server signing = mandatory` is set; (bso#15397); (bsc#1213170). * secure channel faulty since Windows 10/11 update 07/2023; (bso#15418); (bsc#1213384). - Update to 4.18.4 * Backport --pidl-developer fixes; (bso#15404). * Named crashes on DLZ zone update; (bso#14030). * smbcacls and smbcquotas do not check // before the server; (bso#2312). * cli_list loops 100% CPU against pre-lanman2 servers; (bso#15382). * smbclient leaks fds with showacls; (bso#15391). * smbd returns NOT_FOUND when creating files on a r/o filesystem; (bso#15402). * NSS_WRAPPER_HOSTNAME doesn't match NSS_WRAPPER_HOSTS entry and causes test timeouts; (bso#15355). * net ads lookup (with unspecified realm) fails; (bso#15384). * Register Samba processes with GPFS; (bso#15381). * Python tarfile extraction needs change to avoid a warning (CVE-2007-4559 mitigation); (bso#15390). * The winbind child segfaults when listing users with `winbind scan trusted domains = yes`; (bso#15398). * Remove comments about deprecated 'write cache size'; (bso#15383). * smbget memory leak if failed to download files recursively; (bso#15403). - Update to 4.18.3 * Symlinks to files can have random DOS mode information in a directory listing; (bso#15375). * vfs_fruit might cause a failing open for delete; (bso#15378). * winbind recurses into itself via rpcd_lsad; (bso#15361). * wbinfo -u fails on ad dc with >1000 users; (bso#15366). * DS ACEs might be inherited to unrelated object classes; (bso#15338). * a lot of messages: get_static_share_mode_data: get_static_share_mode_data_fn failed: NT_STATUS_NOT_FOUND; (bso#15362). * aes256 smb3 encryption algorithms are not allowed in smb3_sid_parse(); (bso#15374). * Setting veto files = /.*/ break listing directories; (bso#15360). * "samba-tool domain provision" does not run interactive mode if no arguments are given; (bso#15363). * dsgetdcname: assumes local system uses IPv4; (bso#15325). - Update to 4.18.2 * Log flood: smbd_calculate_access_mask_fsp: Access denied: message level should be lower; (bso#15302). * Floating point exception (FPE) via cli_pull_send at source3/libsmb/clireadwrite.c; (bso#15306). * test_tstream_more_tcp_user_timeout_spin fails intermittently on Rackspace GitLab runners; (bso#15328). * Reduce flapping of ridalloc test; (bso#15329). * large_ldap test is unreliable; (bso#15351). * New filename parser doesn't check veto files smb.conf parameter; (bso#15143). * mdssvc may crash when initializing; (bso#15354). * large directory optimization broken for non-lcomp path elements; (bso#15313). * streams_depot fails to create streams; (bso#15357). * shadow_copy2 and streams_depot don't play well together; (bso#15358). * Flapping tests in samba_tool_drs_show_repl.py; (bso#15316). * winbindd idmap child contacts the domain controller without a need; (bso#15317). * idmap_autorid may fail to map sids of trusted domains for the first time; (bso#15318). * idmap_hash doesn't use ID_TYPE_BOTH for reverse mappings; (bso#15319). * net ads search -P doesn't work against servers in other domains; (bso#15323). * Temporary smbXsrv_tcon_global.tdb can't be parsed; (bso#15353). * Tests use depricated and removed methods like assertRegexpMatches; (bso#15343). - Update to 4.18.1 * CVE-2023-0225: AD DC "dnsHostname" attribute can be deleted by unprivileged authenticated users. (bso#15276);(bsc#1209483). * CVE-2023-0614: Access controlled AD LDAP attributes can be discovered (bso#15270); (bsc#1209485). * CVE-2023-0922: Samba AD DC admin tool samba-tool sends passwords in cleartext(bso#15315);(bsc#1209481). * ldb wildcard matching makes excessive allocations; (bso#15331). * large_ldap test is inefficient; (bso#15332). - Update to 4.18.0 * SMB server performance improvements * More succinct samba-tool error messages * Color output with samba-tool --color The NO_COLOR environment variable will disable colour output * New samba-tool dsacl subcommand for deleting ACEs * New wbinfo option --change-secret-at * Net option to change the NT ACL default location * Azure AD / Office365 synchronization improvements- Fix DFS not working with widelinks enabled; (bsc#1213607); (bso#15435);- Move libcluster-samba4.so from samba-libs to samba-client-libs; (bsc#1213940);- net ads lookup with unspecified realm fails; (bso#15384); (bsc#1213826);- secure channel faulty since Windows 10/11 update 07/2023; (bso#15418); (bsc#1213384).- CVE-2022-2127: lm_resp_len not checked properly in winbindd_pam_auth_crap_send; (bso#15072); (bsc#1213174). - CVE-2023-34966: Samba Spotlight mdssvc RPC Request Infinite Loop Denial-of-Service Vulnerability; (bso#15340); (bsc#1213173). - CVE-2023-34967: Samba Spotlight mdssvc RPC Request Type Confusion Denial-of-Service Vulnerability; (bso#15341); (bsc#1213172). - CVE-2023-34968: Spotlight server-side Share Path Disclosure; (bso#15388); (bsc#1213171). - CVE-2023-3347: Samba doesn't require SMB2+ signing if `server signing = mandatory` is set; (bso#15397); (bsc#1213170).- Update to 4.17.9 * Backport --pidl-developer fixes; (bso#15404). * smbd_scavenger crashes when service smbd is stopped; (bso#15275). * vfs_fruit might cause a failing open for delete; (bso#15378). * named crashes on DLZ zone update; (bso#14030). * winbind recurses into itself via rpcd_lsad; (bso#15361). * cli_list loops 100% CPU against pre-lanman2 servers; (bso#15382). * smbclient leaks fds with showacls; (bso#15391). * aes256 smb3 encryption algorithms are not allowed in smb3_sid_parse(); (bso#15374). * winbindd gets stuck on NT_STATUS_RPC_SEC_PKG_ERROR; (bso#15413). * smbget memory leak if failed to download files recursively; (bso#15403).- Update to 4.17.8 * log flood: smbd_calculate_access_mask_fsp: Access denied: message level should be lower; (bso#15302). * Floating point exception (FPE) via cli_pull_send at source3/libsmb/clireadwrite.c; (bso#15306). * test_tstream_more_tcp_user_timeout_spin fails intermittently on Rackspace GitLab runners; (bso#15328). * Reduce flapping of ridalloc test; (bso#15329). * large_ldap test is unreliable; (bso#15351). * New filename parser doesn't check veto files smb.conf parameter; (bso#15143). * mdssvc may crash when initializing; (bso#15354). * Large directory optimization broken for non-lcomp path elements; (bso#15313). * streams_depot fails to create streams; (bso#15357). * shadow_copy2 and streams_depot don't play well together; (bso#15358). * wbinfo -u fails on ad dc with >1000 users; (bso#15366). * winbindd idmap child contacts the domain controller without a need; (bso#15317). * idmap_autorid may fail to map sids of trusted domains for the first time; (bso#15318). * idmap_hash doesn't use ID_TYPE_BOTH for reverse mappings; (bso#15319). * net ads search -P doesn't work against servers in other domains; (bso#15323). * DS ACEs might be inherited to unrelated object classes; (bso#15338). * Temporary smbXsrv_tcon_global.tdb can't be parsed; (bso#15353). * Setting veto files = /.*/ break listing directories; (bso#15360); (bsc#1212375). * CVE-2020-25720 [SECURITY] Create Child permission should not allow full write to all attributes (additional changes); (bso#14810). * dsgetdcname: assumes local system uses IPv4; (bso#15325).- Update to 4.17.7 * CVE-2023-0922: Samba AD DC admin tool samba-tool sends passwords in cleartext; (bso#15315); (bsc#1209481). * CVE-2023-0225: Samba AD DC "dnsHostname" attribute can be deleted by unprivileged authenticated users; (bso#15276); (bsc#1209483). * CVE-2023-0614: samba: Access controlled AD LDAP attributes can be discovered; (bso#15270); (bsc#1209485). * large_ldap test is inefficient; (bso#15332). * CVE-2020-25720 [SECURITY] Create Child permission should not allow full write to all attributes (additional changes); (bso#14810). - Update to 4.17.6 * streams_xattr is creating unexpected locks on folders; (bso#15314). * Use of the Azure AD Connect cloud sync tool is now supported for password hash synchronisation, allowing Samba AD Domains to synchronise passwords with this popular cloud environment; (bso#10635). * Spotlight doesn't work with latest macOS Ventura; (bso#15299). * New samba-dcerpc architecture does not scale gracefully; (bso#15310). * vfs_ceph incorrectly uses fsp_get_io_fd() instead of fsp_get_pathref_fd() in close and fstat; (bso#15307). * With clustering enabled samba-bgqd can core dump due to use after free; (bso#15293). * fd_load() function implicitly closes the fd where it should not; (bso#15311). - Update to 4.17.5 * smbc_getxattr() return value is incorrect; (bso#14808). * Compound SMB2 FLUSH+CLOSE requests from MacOSX are not handled correctly; (bso#15172). * synthetic_pathref AFP_AfpInfo failed errors; (bso#15210). * samba-tool gpo listall fails IPv6 only - finddcs() fails to find DC when there is only an AAAA record for the DC in DNS; (bso#15226). * smbd crashes if an FSCTL request is done on a stream handle; (bso#15236). * DFS links don't work anymore on Mac clients since 4.17; (bso#15277). * vfs_virusfilter segfault on access, directory edgecase (accessing NULL value); (bso#15283). * CVE-2022-38023 [SECURITY] Samba should refuse RC4 (aka md5) based SChannel on NETLOGON (additional changes); (bso#15240). * %U for include directive doesn't work for share listing (netshareenum); (bso#15243). * Shares missing from netshareenum response in samba 4.17.4; (bso#15266). * ctdb: use-after-free in run_proc; (bso#15269). * irpc_destructor may crash during shutdown; (bso#15280). * auth3_generate_session_info_pac leaks wbcAuthUserInfo; (bso#15286). * smbclient segfaults with use after free on an optimized build; (bso#15268). * smbstatus leaking files in msg.sock and msg.lock; (bso#15282). * Leak in wbcCtxPingDc2; (bso#15164). * Access based share enum does not work in Samba 4.16+; (bso#15265). * Crash during share enumeration; (bso#15267). * rep_listxattr on FreeBSD does not properly check for reads off end of returned buffer; (bso#15271). * Avoid relying on C89 features in a few places; (bso#15281).- Make (32bit) samba-libs conflict with old samba-ad-dc-libs package to satisfy installcheck.- Make samba-libs conflict with old samba-ad-dc-libs package to satisfy installcheck.- Remove non functioning ifup/ifdown samba-winbindd scripts; (bsc#1207414).- libdsdb-module-samba4 should be packaged as part of samba-libs and not samba-ad-dc-libs. Additionally no need for it to be removed conditionally.- Clean up logic for PAM migration settings in spec file.- Change with_dc default to 0 (for non TW builds), ADDC feature is deprecated and will no longer be included in >= SLE15-SP5; (jsc#PED-1122).- Update to 4.17.4 * CVE-2022-44640 Upstream Heimdal free of user-controlled pointer in FAST; (bsc#14929); * CVE-2021-20251 Bad password count not incremented atomically; (bsc#14611); * CVE-2022-42898 krb5_pac_parse() buffer parsing vulnerability; (bsc#15203); * CVE-2022-37966 rc4-hmac Kerberos session keys issued to modern servers; (bso#15237); * CVE-2022-37967 Kerberos constrained delegation ticket forgery possible against Samba AD DC; (bso#15231); * CVE-2022-38023 RC4/HMAC-MD5 NetLogon Secure Channel is weak and should be avoided; (bso#15240); * pam_winbind uses time_t and pointers assuming they are of the same size; (bso#15224); * Heimdal session key selection in AS-REQ examines wrong entry; (bso#15219); * filter-subunit is inefficient with large numbers of knownfails; (bso#15258); * smbd allows setting FILE_ATTRIBUTE_TEMPORARY on directories; (bso#15252); * The KDC logic arround msDs-supportedEncryptionTypes differs from Windows; (bso#13135); * libnet: change_password() doesn't work with dcerpc_samr_ChangePasswordUser4(); (bso#15206); * Heimdal session key selection in AS-REQ examines wrong entry; (bso#15219); * Memory leak in snprintf replacement functions; (bso#15230); * RODC doesn't reset badPwdCount reliable via an RWDC (CVE-2021-20251 regression); (bso#15253); * Prevent EBADF errors with vfs_glusterfs; (bso#15198); * %U for include directive doesn't work for share listing (netshareenum); (bso#15243); * Stack smashing in net offlinejoin requestodj; (bso#15257); * Windows 11 22H2 and Samba-AD 4.15 Kerberos login issue; (bso#15197); * Heimdal session key selection in AS-REQ examines wrong entry; (bso#15219); - Remove deprecated if-{down,up} scripts; (bsc#1206444); - Adjust the systemd drop-in file for named service; (bsc#1201689); * Paths are additive so do not repeat paths from named.service * Prefix the samba DLZ directory with "-" to ignore this path if it does not exists- Introduce without-smb1-server spec flag; (bsc#1205104); - Update to 4.17.3 * CVE-2022-42898: Samba buffer overflow vulnerabilities on 32-bit systems; (bsc#1205126); (bso#15203); - Replace obsolete python-gpgme with python-gpg * Upstream replaced it in v4.9.5 -- bso#13728 - Update to 4.17.2 * CVE-2022-3592 [SECURITY] samba: Wide links protection broken; (bso#15207); (bsc#1204499). * CVE-2022-3437 [SECURITY] samba: Buffer overflow in Heimdal unwrap_des3();(bso#15134); (bsc#1204254). - Update to 4.17.1 * CVE-2021-20251 [SECURITY] Bad password count not incremented atomically; (bso#14611). * smbXsrv_connection_shutdown_send result leaked; (bso#15174). * Flush on a named stream never completes; (bso#15182). * Permission denied calling SMBC_getatr when file not exists; (bso#15195). * Samba 4.5 sometimes cannot be upgraded to Samba 4.6 or later over DRS: WERROR_DS_DRA_MISSING_PARENT due to faulty GET_ANC; (bso#15189). * pytest: add file removal helpers for TestCaseInTempDir; (bso#15191). * CVE-2021-20251 [SECURITY] Bad password count not incremented atomically; (bso#14611). * Samba 4.5 sometimes cannot be upgraded to Samba 4.6 or later over DRS: WERROR_DS_DRA_MISSING_PARENT due to faulty GET_ANC; (bso#15189). * Flush on a named stream never completes; (bso#15182). * vfs_gpfs silently garbles timestamps > year 2106; (bso#15151). * CVE-2021-20251 [SECURITY] Bad password count not incremented atomically; (bso#14611). * multi-channel socket passing may hit a race if one of the involved processes already existed; (bso#15200). * memory leak on temporary of struct imessaging_post_state and struct tevent_immediate on struct imessaging_context (in rpcd_spoolss and maybe others); (bso#15201). * Since popt1.19 various use after free errors using result of poptGetArg are now exposed; (bso#15205); (boo#1204279). * Remove special case for O_CREAT in SMB_VFS_OPENAT from vfs_glusterfs; (bso#15192). * GETPWSID in memory cache grows indefinetly with each NTLM auth; (bso#15169). * CVE-2021-20251 [SECURITY] Bad password count not incremented atomically; (bso#14611). - Install a systemd drop-in file for named service to allow read/write access to the DLZ directory; (bsc#1201689); - Fix use after free errors resulting from using return of poptGetArg exposed since popt-1.19; (boo#1204279); (bso#15205). - s3: smbd: Fix memory leak in smbd_server_connection_terminate_done(); (bso#15174). - Disable SMB1 for tumbleweed builds. - Update to 4.17.0 * acl_xattr VFS module may unintentionally use filesystem permissions instead of ACL from xattr; (bso#15126). * Missing SMB2-GETINFO access checks from MS-SMB2 3.3.5.20.1; (bso#15153). * assert failed: !is_named_stream(smb_fname)") at ../../lib/util/fault.c:197; (bso#15161). * acl_xattr VFS module may unintentionally use filesystem permissions instead of ACL from xattr; (bso#15126). * assert failed: !is_named_stream(smb_fname)") at ../../lib/util/fault.c:197; (bso#15161). * Cross-node multi-channel reconnects result in SMB2 Negotiate returning NT_STATUS_NOT_SUPPORTED; (bso#15159). * winbind at info level debug can coredump when processing wb_lookupusergroups; (bso#15160). * Make use of glfs_*at() API calls in vfs_glusterfs; (bso#15157). * Possible use after free of connection_struct when iterating smbd_server_connection->connections; (bso#15128). * `net usershare add` fails with flag works with --long but fails with -l; (bso#15145). * acl_xattr VFS module may unintentionally use filesystem permissions instead of ACL from xattr; (bso#15126). * Performance regression on contended path based operations; (bso#15125). * Missing READ_LEASE break could cause data corruption; (bso#15148). * libsamba-errors uses a wrong version number; (bso#15141). * SMB1 negotiation can fail to handle connection errors; (bso#15152). * New filename parser doesn't check veto files smb.conf parameter; (bso#15143). * 4.17.rc1 still uses symlink-race prone unix_convert(); (bso#15144). * Backport fileserver related changed to 4.17.0rc2; (bso#15146). * Manpage for smbstatus json is missing; (bso#15147). * Backport fileserver related changed to 4.17.0rc2; (bso#15146). * Performance regression on contended path based operations; (bso#15125). * Backport fileserver related changed to 4.17.0rc2; (bso#15146). * Fix issues found by coverity in smbstatus json code; (bso#15140). * Backport fileserver related changed to 4.17.0rc2; (bso#15146). - Migration to /usr/etc: Saving user changed configuration files in /etc and restoring them while an RPM update. - Update to 4.16.4 * CVE-2022-2031: Samba AD users can bypass certain restrictions associated with changing passwords; (bsc#1201495); (bso#15047); * CVE-2022-32744: Samba AD users can forge password change requests for any user; (bsc#1201493); (bso#15074); * CVE-2022-32745: Samba AD users can crash the server process with an LDAP add or modify request; (bsc#1201492); (bso#15008); * CVE-2022-32746: Samba AD users can induce a use-after-free in the server process with an LDAP add or modify request; (bsc#1201490); (bso#15009); * CVE-2022-32742: Server memory information leak via SMB1; (bsc#1201496); (bso#15085); - Update to 4.16.3 * Using vfs_streams_xattr and deleting a file causes a panic; (bso#15099); * Add support for bind 9.18; (bso#14986); * logging dsdb audit to specific files does not work; (bso#15076); * Problem when winbind renews Kerberos; (bso#14979); (bsc#1196224); * Samba with new lorikeet-heimdal fails to build on gcc 12.1 in developer mode; (bso#15095); * Crash in streams_xattr because fsp->base_fsp->fsp_name is NULL; (bso#15105); * Crash in rpcd_classic - NULL pointer deference in mangle_is_mangled(); (bso#15118); * smbclient commands del & deltree fail with NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100); (bsc#1200556); * Fix check for chown when processing NFSv4 ACL; (bso#15120); * The pcap background queue process should not be stopped; (bso#15082); * testparm: Fix typo in idmap rangesize check; (bso#15097); * net ads info returns LDAP server and LDAP server name as null; (bso#15106); * ldconfig: /lib64/libsmbconf.so.0 is not a symbolic link; (bso#15108); * CTDB child process logging does not work as expected; (bso#15090); - Update spec file to fix the optional Heimdal DC build - Fix external trusts with MIT Kerberos 1.20 - Add missing samba-client requirement to samba-winbind package; (bsc#1198255); - Move pdb backends from package samba-libs to package samba-client-libs and remove samba-libs requirement from samba-winbind; (bsc#1200964); (bsc#1198255); - Add sysuser-shadow requirement for packages using systemd-sysusers - Use the canonical realm name to refresh the Kerberos tickets; (bsc#1196224); (bso#14979); - Moved logrotate files from user specific directory /etc/logrotate.d to vendor specific directory /usr/etc/logrotate.d. - Update to 4.16.2 * Use pathref fd instead of io fd in vfs_default_durable_cookie; (bso#15042); * vfs_gpfs with vfs_shadowcopy2 fail to restore file if original file had been deleted; (bso#15069); * Reintroduce netgroups support; (bso#15087); * net ads info shows LDAP Server: 0.0.0.0 depending on contacted server; (bso#14674); * Update from 4.15 to 4.16 breaks discovery of [homes] on standalone server from Win and IOS; (bso#15062); * waf produces incorrect names for python extensions with Python 3.11; (bso#15071); * smbclient -E doesn't work as advertised; (bso#15075); * The samba background daemon doesn't refresh the printcap cache on startup; (bso#15081); * Out-by-4 error in smbd read reply max_send clamp; (bso#14443); - Fix samba4.blackbox.net_ads_dns_async test with bind9 >= 9.17.7 - Support building with MIT Kerberos 1.20 - Bronze bit and S4U support with MIT Kerberos 1.20 for Samba AD DC; (CVE-2020-17049); - Resource Based Constrained Delegation (RBCD) for Samba AD DC - Support building with gcc 12.1 - Use requires_eq macro to require the libldb2 version available at samba-dsdb-modules build time; (bsc#1199362); - Update to 4.16.1 * Share and server swapped in smbget password prompt; (bso#14831); * Durable handles won't reconnect if the leased file is written to; (bso#15022); * rmdir silently fails if directory contains unreadable files and hide unreadable is yes; (bso#15023); * SMB2_CLOSE_FLAGS_FULL_INFORMATION fails to return information on renamed file handle; (bso#15038); * Need to describe --builtin-libraries= better (compare with - -bundled-libraries); (bso#8731); * vfs_shadow_copy2 breaks "smbd async dosmode" sync fallback; (bso#14957); * shadow_copy2 fails listing snapshotted dirs with shadow:fixinodes; (bso#15035); * PAM Kerberos authentication incorrectly fails with a clock skew error; (bso#15046); * Username map - samba erroneously applies unix group memberships to user account entries; (bso#15041); * KVNO off by 100000; (bso#14951); * Uninitialized litemask in variable in vfs_gpfs module; (bso#15027); * vfs_gpfs recalls=no option prevents listing files; (bso#15055); * smbd doesn't handle UPNs for looking up names; (bso#15054); - Update update-apparmor-samba-profile script, replace non-printable delimiter with more human readable separator as sed can accept separators that can appear in the input data. - Fix update-apparmor-samba-profile script, sed doesn't like multibyte separators; (bsc#1198309). - Update to 4.16.0 * New samba-dcerpcd binary to provide DCERPC in the member server setup * Certificate Auto Enrollment * Ability to add ports to dns forwarder addresses in internal DNS backend * No longer using Linux mandatory locks for sharemodes * SMB1 protocol has been deprecated, particularly older dialects * SMB1 protocol SMBCopy command removed * SMB1 server-side wildcard expansion removed - Add python3-dnspython to samba-ad-dc recommens; (bsc#1187101); - Use systemd-sysusers to create system users; (bsc#1182847);- Install a systemd drop-in file for named service to allow read/write access to the DLZ directory; (bsc#1201689);- Update to 4.15.12 * CVE-2022-42898: samba: heimdal: Samba buffer overflow vulnerabilities on 32-bit systems; (bso#15203); (bsc#1205126). - Update to 4.15.11 * Allow rebuild of Centos 8 images after move to vault for Samba 4.15; (bso#15193). * CVE-2022-3437: samba: Buffer overflow in Heimdal unwrap_des3(); (bso#15134); (bsc#1204254)- Update to 4.15.10 * Possible use after free of connection_struct when iterating smbd_server_connection->connections; (bso#15128); (bsc#1200102). * smbXsrv_connection_shutdown_send result leaked; (bso#15174). * Spotlight RPC service returns wrong response when Spotlight is disabled on a share; (bso#15086). * acl_xattr VFS module may unintentionally use filesystem permissions instead of ACL from xattr; (bso#15126). * Missing SMB2-GETINFO access checks from MS-SMB2 3.3.5.20.1; (bso#15153). * assert failed: !is_named_stream(smb_fname)") at ../../lib/util/fault.c:197; (bso#15161). * Missing READ_LEASE break could cause data corruption; (bso#15148). * rpcclient can crash using setuserinfo(2); (bso#15124). * Samba fails to build with glibc 2.36 caused by including in libreplace; (bso#15132). * SMB1 negotiation can fail to handle connection errors; (bso#15152). * samba-tool domain join segfault when joining a samba ad domain; (bso#15078). - Update to 4.15.9 * CVE-2022-32742:SMB1 code does not correct verify SMB1write, SMB1write_and_close, SMB1write_and_unlock lengths; (bso#15085); (bsc#1201496). * CVE-2022-32746: samba: Use-after-free occurring in database audit logging; (bso#15009); (bso#15096); (bsc#1201490). * CVE-2022-2031: samba, ldb: AD users can bypass certain restrictions associated with changing passwords; (bso#15047); (bsc#1201495); * CVE-2022-32745: samba: ldb: AD users can crash the server process with an LDAP add or modify request; (bso#15008); (bso#15096); (bsc#1201492). * CVE-2022-2031: samba, ldb: AD users can bypass certain restrictions associated with changing passwords; (bso#15047); (bsc#1201495); * CVE-2022-32744: samba, ldb: AD users can forge password change requests for any user; (bso#15074); (bso#15047); (bsc#1201493).- CVE-2022-1615: Do not ignore errors in random number generation; (bso#15103); (bsc#1202976); - CVE-2022-32743: Implement validated dnsHostName write rights; (bso#14833); (bsc#1202803);- Fix Use after free when iterating smbd_server_connection->connections after tree disconnect failure; (bso#15128); (bsc#1200102).- CVE-2022-32746: samba: Use-after-free occurring in database audit logging; (bso#15009); (bso#15096); (bsc#1201490). - CVE-2022-32745: samba: ldb: AD users can crash the server process with an LDAP add or modify request; (bso#15008); (bso#15096); (bsc#1201492). - CVE-2022-2031: samba, ldb: AD users can bypass certain restrictions associated with changing passwords; (bso#15047); (bsc#1201495); - CVE-2022-32742:SMB1 code does not correct verify SMB1write, SMB1write_and_close, SMB1write_and_unlock lengths; (bso#15085); (bsc#1201496). - CVE-2022-32744: samba, ldb: AD users can forge password change requests for any user; (bso#15074); (bso#15047); (bsc#1201493).- Update to 4.15.8 * Use pathref fd instead of io fd in vfs_default_durable_cookie; (bso#15042); * Setting fruit:resource = stream in vfs_fruit causes a panic; (bso#15099); * Add support for bind 9.18; (bso#14986); * logging dsdb audit to specific files does not work; (bso#15076); * vfs_gpfs with vfs_shadowcopy2 fail to restore file if original file had been deleted; (bso#15069); * netgroups support removed; (bso#15087); (bsc#1199247); * net ads info shows LDAP Server: 0.0.0.0 depending on contacted server; (bso#14674); (bsc#1199734); * waf produces incorrect names for python extensions with Python 3.11; (bso#15071); * smbclient commands del & deltree fail with NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100); (bsc#1200556); * vfs_gpfs recalls=no option prevents listing files; (bso#15055); * waf produces incorrect names for python extensions with Python 3.11; (bso#15071); * Compile error in source3/utils/regedit_hexedit.c; (bso#15091); * ldconfig: /lib64/libsmbconf.so.0 is not a symbolic link; (bso#15108); * smbd doesn't handle UPNs for looking up names; (bso#15054); * Out-by-4 error in smbd read reply max_send clamp; (bso#14443); - Move pdb backends from package samba-libs to package samba-client-libs and remove samba-libs requirement from samba-winbind; (bsc#1200964); (bsc#1198255); - Use the canonical realm name to refresh the Kerberos tickets; (bsc#1196224); (bso#14979);- Fix smbclient commands del & deltree failing with NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100); (bsc#1200556).- Revert NIS support removal; (bsc#1199247);- Use requires_eq macro to require the libldb2 version available at samba-dsdb-modules build time; (bsc#1199362);- Add missing samba-client requirement to samba-winbind package; (bsc#1198255);- Update to 4.15.7 * Share and server swapped in smbget password prompt; (bso#14831); * Durable handles won't reconnect if the leased file is written to; (bso#15022); * rmdir silently fails if directory contains unreadable files and hide unreadable is yes; (bso#15023); * SMB2_CLOSE_FLAGS_FULL_INFORMATION fails to return information on renamed file handle; (bso#15038); * vfs_shadow_copy2 breaks "smbd async dosmode" sync fallback; (bso#14957); * shadow_copy2 fails listing snapshotted dirs with shadow:fixinodes; (bso#15035); * PAM Kerberos authentication incorrectly fails with a clock skew error; (bso#15046); * username map - samba erroneously applies unix group memberships to user account entries; (bso#15041); * NT_STATUS_ACCESS_DENIED translates into EPERM instead of EACCES in SMBC_server_internal; (bso#14983); * Simple bind doesn't work against an RODC (with non-preloaded users); (bso#13879); * Crash of winbind on RODC; (bso#14641); * uncached logon on RODC always fails once; (bso#14865); * KVNO off by 100000; (bso#14951); * LDAP simple binds should honour "old password allowed period"; (bso#15001); * wbinfo -a doesn't work reliable with upn names; (bso#15003); * Simple bind doesn't work against an RODC (with non-preloaded users); (bso#13879); * Uninitialized litemask in variable in vfs_gpfs module; (bso#15027); * Regression: create krb5 conf = yes doesn't work with a single KDC; (bso#15016);- Add provides to samba-client-libs package to fix upgrades from previous versions; (bsc#1197995);- Add missing samba-libs requirement to samba-winbind package; (bsc#1198255);- Update to 4.15.6 * Renaming file on DFS root fails with NT_STATUS_OBJECT_PATH_NOT_FOUND; (bso#14169); * Samba does not response STATUS_INVALID_PARAMETER when opening 2 objects with same lease key; (bso#14737); * NT error code is not set when overwriting a file during rename in libsmbclient; (bso#14938); * Fix ldap simple bind with TLS auditing; (bso#14996); * net ads info shows LDAP Server: 0.0.0.0 depending on contacted server; (bso#14674); * Problem when winbind renews Kerberos; (bso#14979); (bsc#1196224); * pam_winbind will not allow gdm login if password about to expire; (bso#8691); * virusfilter_vfs_openat: Not scanned: Directory or special file; (bso#14971); * DFS fix for AIX broken; (bso#13631); * Solaris and AIX acl modules: wrong function arguments; (bso#14974); * Function aixacl_sys_acl_get_file not declared / coredump; (bso#7239); * Regression: Samba 4.15.2 on macOS segfaults intermittently during strcpy in tdbsam_getsampwnam; (bso#14900); * Fix a use-after-free in SMB1 server; (bso#14989); * smb2_signing_decrypt_pdu() may not decrypt with gnutls_aead_cipher_decrypt() from gnutls before 3.5.2; (bso#14968); * Changing the machine password against an RODC likely destroys the domain join; (bso#14984); * authsam_make_user_info_dc() steals memory from its struct ldb_message *msg argument; (bso#14993); * Use Heimdal 8.0 (pre) rather than an earlier snapshot; (bso#14995); * Samba autorid fails to map AD users if id rangesize fits in the id range only once; (bso#14967);- Fix mismatched version of libldb2; (bsc#1196788). - Drop obsolete SuSEfirewall2 service files.- Drop obsolete Samba fsrvp v0->v1 state upgrade functionality; (bsc#1080338).- Fix ntlm authentications with "winbind use default domain = yes"; (bso#13126); (bsc#1173429); (bsc#1196308).- Fix samba-ad-dc status warning notification message by disabling systemd notifications in bgqd; (bsc#1195896); (bso#14947).- libldb version mismatch in Samba dsdb component; (bsc#1118508);- Update to 4.15.5 * CVE-2021-44141: UNIX extensions in SMB1 disclose whether the outside target of a symlink exists; (bso#14911); (bsc#1193690). * CVE-2021-44142: Out-of-Bound Read/Write on Samba vfs_fruit module; (bso#14914); (bsc#1194859). * CVE-2022-0336: Re-adding an SPN skips subsequent SPN conflict checks; bso#14950); (bsc#1195048).- CVE-2021-44141: Information leak via symlinks of existance of files or directories outside of the exported share; (bso#14911); (bsc#1193690); - CVE-2021-44142: Out-of-bounds heap read/write vulnerability in VFS module vfs_fruit allows code execution; (bso#14914); (bsc#1194859); - CVE-2022-0336: Samba AD users with permission to write to an account can impersonate arbitrary services; (bso#14950); (bsc#1195048);- Update to 4.15.4 * Duplicate SMB file_ids leading to Windows client cache poisoning; (bso#14928); * Failed to parse NTLMv2_RESPONSE length 95 - Buffer Size Error - NT_STATUS_BUFFER_TOO_SMALL; (bso#14932); * kill_tcp_connections does not work; (bso#14934); * Can't connect to Windows shares not requiring authentication using KDE/Gnome; (bso#14935); * smbclient -L doesn't set "client max protocol" to NT1 before calling the "Reconnecting with SMB1 for workgroup listing" path; (bso#14939); * Cross device copy of the crossrename module always fails; (bso#14940); * symlinkat function from VFS cap module always fails with an error; (bso#14941); * Fix possible fsp pointer deference; (bso#14942); * Missing pop_sec_ctx() in error path inside close_directory(); (bso#14944); * "smbd --build-options" no longer works without an smb.conf file; (bso#14945);- Use pkgconfig(krb5) as dependency for the -devel package: allow OBS to pick the right flavor of krb5-devel (full vs mini). - Do not require the 'krb5' symbol by samba-client-libs: this package has an automatic dependency due to linkage on libgssapi_krb5.so.2. Automatic deps are always better. - Do not require the 'krb5' symbol from samba-libs: samba-libs requires samba-client-libs, which in turn requires krb5 libraries. Samba-libs itself has no need for krb5 (but get it indirectly anyway).- Reorganize libs packages. Split samba-libs into samba-client-libs, samba-libs, samba-winbind-libs and samba-ad-dc-libs, merging samba public libraries depending on internal samba libraries into these packages as there were dependency problems everytime one of these public libraries changed its version (bsc#1192684). The devel packages are merged into samba-devel. - Rename package samba-core-devel to samba-devel - Add python-rpm-macros to build requirements - Update the symlink create by samba-dsdb-modules to private samba ldb modules following libldb2 changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba- Update to 4.15.3 * Recursive directory delete with veto files is broken in 4.15.0; (bso#14878); * A directory containing dangling symlinks cannot be deleted by SMB2 alone when they are the only entry in the directory; (bso#14879); * SIGSEGV in rmdir_internals/synthetic_pathref - dirfsp is used uninitialized in rmdir_internals(); (bso#14892); * MaxQueryDuration not honoured in Samba AD DC LDAP; (bso#14694); * The CVE-2020-25717 username map [script] advice has undesired side effects for the local nt token; (bso#14901); (bsc#1192849); * User with multiple spaces (eg FredNurk) become un-deletable; (bso#14902); * Avoid storing NTTIME_THAW (-2) as value on disk; (bso#14127); * smbXsrv_client_global record validation leads to crash if existing record points at non-existing process; (bso#14882); * Crash in vfs_fruit asking for fsp_get_io_fd() for an XATTR call; (bso#14890); * Samba process doesn't log to logfile; (bso#14897); * set_ea_dos_attribute() fallback calling get_file_handle_for_metadata() triggers locking.tdb assert; (bso#14907); * Kerberos authentication on standalone server in MIT realm broken; (bso#14922); * Segmentation fault when joining the domain; (bso#14923); * Support for ROLE_IPA_DC is incomplete; (bso#14903); * rpcclient cannot connect to ncacn_ip_tcp services anymore; (bso#14767); * winexe crashes since 4.15.0 after popt parsing; (bso#14893); * net ads status -P broken in a clustered environment; (bso#14908); * Memory leak if ioctl(FSCTL_VALIDATE_NEGOTIATE_INFO) fails before smbd_smb2_ioctl_send; (bso#14788); * winbindd doesn't start when "allow trusted domains" is off; (bso#14899); * smbclient login without password using '-N' fails with NT_STATUS_INVALID_PARAMETER on Samba AD DC; (bso#14883); * A schannel client incorrectly detects a downgrade connecting to an AES only server; (bso#14912); * Possible null pointer dereference in winbind; (bso#14921); * Fix -k legacy option for client tools like smbclient, rpcclient, net, etc.; (bso#14846); * Add Debian 11 CI bootstrap support; (bso#14872); * Crash in recycle_unlink_internal(); (bso#14888);- Fix dependency problem upgrading from libndr0 to libndr2 and from libsamba-credentials0 to libsamba-credentials1; (bsc#1192684);- Fix regression introduced by CVE-2020-25717 patches, winbindd does not start when 'allow trusted domains' is off; (bso#14899); - Update to 4.15.2 * CVE-2016-2124: SMB1 client connections can be downgraded to plaintext authentication; (bso#12444); (bsc#1014440); * CVE-2020-25717: A user on the domain can become root on domain members; (bso#14556); (bsc#1192284); * CVE-2020-25718: Samba AD DC did not correctly sandbox Kerberos tickets issued by an RODC; (bso#14558); (bsc#1192246); * CVE-2020-25719: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets; (bso#14561); (bsc#1192247); * CVE-2020-25721: Kerberos acceptors need easy access to stable AD identifiers (eg objectSid); (bso#14557); (bsc#1192505); * CVE-2020-25722: Samba AD DC did not do suffienct access and conformance checking of data stored; (bso#14564); (bsc#1192283); * CVE-2021-3738: Use after free in Samba AD DC RPC server; (bso#14468); (bsc#1192215); * CVE-2021-23192: Subsequent DCE/RPC fragment injection vulnerability; (bso#14875); (bsc#1192214); - Update to 4.15.1 * vfs_shadow_copy2: core dump in make_relative_path; (bso#14682); * Log clutter from filename_convert_internal; (bso#14685); * MacOSX compilation fixes; (bso#14862); * rodc_rwdc test flaps; (bso#14868); * Provide a fix for MS CVE-2020-17049 in Samba [SECURITY] 'Bronze bit' S4U2Proxy Constrained Delegation bypass in Samba with embedded Heimdal; (bso#14642); * Python ldb.msg_diff() memory handling failure; (bso#14836); * "in" operator on ldb.Message is case sensitive; (bso#14845); * Release LDB 2.4.1 for Samba 4.15.1; (bso#14848); * samldb_krbtgtnumber_available() looks for incorrect string; (bso#14854); * Fix Samba support for UF_NO_AUTH_DATA_REQUIRED; (bso#14871); * Allow special chars like "@" in samAccountName when generating the salt; (bso#14874); * Correctly ignore comments in CTDB public addresses file; (bso#14826); * Fix transit path validation; (bso#12998); * Fix that child winbindd logs to log.winbindd instead of log.wb-; (bso#14852); * SMB3 cancel requests should only include the MID together with AsyncID when AES-128-GMAC is used; (bso#14855); * Prepare to operate with MIT krb5 >= 1.20; (bso#14870); * Heimdal prefers RC4 over AES for machine accounts; (bso#14864);- Enable samba-tool without ad dc.- Adjust spec to use pam macros; (bsc#1191046).- Adjust spec for size * allow some Recommends instead Requires to be configured for cifs-utils, samba-libs-python3 & samba-gpupdate; (bsc#1182847). * remove fam, undocumented and unneeded.- Add missing build dependency on bison when building with the embedded Heimdal Kerberos- Update to 4.15.0 * Removed SMB development dialects SMB2_22, SMB2_24 and SMB3_10 * VFS layer modernized. * Add the ability to set allow/deny lists for zone transfer clients in Bind DLZ plugin * Server multi-channel support no longer experimental * Improved command line user experience, unifying the options in different commands * Winbindd no longer scans trusted domains on startup and will use enterprise principals by default. * The net utility is now able to support the offline domain join feature * New options for 'samba-tool dns zoneoptions' for aging control and to mark old records as static or dynamic * DNS tombstones are now deleted as appropriate and use a consistent timestamp format * The 'samba-tool dns update' command validates and rejects now malformed IPv4 and IPv6 addresses * The 'samba-tool domain backup' command correctly takes out locks against concurrent modification during backup when using the LMDB backend * TruACL support has been removed * NIS support has been removed- Fix 'net rpc' authentication when using the machine account; (bsc#1189017); (bso#14796);- Fix dependency problem upgrading from libndr0 to libndr1; (bsc#1189875); - Fix dependency problem upgrading from libsmbldap0 to libsmbldap2; (bsc#1189875); - Fix wrong kvno exported to keytab after net ads changetrustpw due to replication delay; (bsc#1188727); - Add Certificate Auto Enrollment Policy; (jsc#SLE-18456). - Update to 4.13.10 * s3: smbd: Ensure POSIX default ACL is mapped into returned Windows ACL for directory handles; (bso#14708); * Take a copy to make sure we don't reference free'd memory; (bso#14721); * s3: lib: Fix talloc heirarcy error in parent_smb_fname(); (bso#14722); * s3: smbd: Remove erroneous TALLOC_FREE(smb_fname_parent) in change_file_owner_to_parent() error path; (bso#14736); * samba-tool: Give better error information when the 'domain backup restore' fails with a duplicate SID; (bso#14575); * smbd: Correctly initialize close timestamp fields; (bso#14714); * Spotlight RPC service doesn't work with vfs_glusterfs; (bso#14740); * ctdb: Fix a crash in run_proc_signal_handler(); (bso#14475); * gensec_krb5: Restore ipv6 support for kpasswd; (bso#14750); * smbXsrv_{open,session,tcon}: Protect smbXsrv_{open,session,tcon}_global_traverse_fn against invalid records; (bso#14752); * samba-tool domain backup offline doesn't work against bind DLZ backend; (bso#14027); * netcmd: Use next_free_rid() function to calculate a SID for restoring a backup; (bso#14669); - Update to 4.13.9 * s3: smbd: SMB1 SMBsplwr doesn't send a reply packet on success; (bso#14696); * Add documentation for dsdb_group_audit and dsdb_group_json_audit to "log level", synchronise "log level" in smb.conf with the code; (bso#14689); * Fix smbd panic when two clients open same file; (bso#14672); * Fix memory leak in the RPC server; (bso#14675); * s3: smbd: Fix deferred renames; (bso#14679); * s3-iremotewinspool: Set the per-request memory context; (bso#14675); * rpc_server3: Fix a memleak for internal pipes; (bso#14675); * third_party: Update socket_wrapper to version 1.3.2; (bso#11899); * third_party: Update socket_wrapper to version 1.3.3; (bso#14639); * idmap_rfc2307 and idmap_nss return wrong mapping for uid/gid conflict; (bso#14663); * Fix the build on OmniOS; (bso#14288); - Update to 4.13.8 * CVE-2021-20254: Fix buffer overrun in sids_to_unixids(); (bso#14571 - Update to 4.13.7 * Release with dependency on ldb version 2.2.1.- CVE-2021-20254 Buffer overrun in sids_to_unixids(); (bnc#14571); (bsc#1184677).- Fix offline domain backup not possible using lmdb version >= 0.9.26; (bso#14676); - Require libldb >= 2.2.1; (bsc#1183572); (bsc#1183574); - Update to 4.13.6 * CVE-2020-27840: samba: Unauthenticated remote heap corruption via bad DNs; (bso#14595); (bsc#1183572). * CVE-2021-20277: samba: out of bounds read in ldb_handler_fold; (bso#14655); (bsc#1183574). - Update to 4.13.5 * s3:modules:vfs_virusfilter: Recent talloc changes cause infinite start-up failure; (bso#14634); * s3: libsmb: Add missing cli_tdis() in error path if encryption setup failed on temp proxy connection; (bso#13992); * smbd: In conn_force_tdis_done() when forcing a connection closed force a full reload of services; (bso#14604); * dbcheck: Check Deleted Objects and reduce noise in reports about expired tombstones (bso#14593); * s3: Fix fcntl waf configure check; (bso#14503); * s3/auth: Implement "winbind:ignore domains"; (bso#14602); * smbd: Use fsp->conn->session_info for the initial delete-on-close token; (bso#14617); * s3: VFS: nfs4_acls. Add missing TALLOC_FREE(frame) in error path; (bso#14648); * classicupgrade: Treat old never expires value right; (bso#14624); * g_lock: Fix uninitalized variable reads; (bso#14636); * s3:pysmbd: Fix fd leak in py_smbd_create_file(); (bso#13898); * lib:util: Avoid free'ing our own pointer; (bso#14625); * HEIMDAL: krb5_storage_free(NULL) should work; (bso#12505);- Spec file fixes around systemd and requires; (bsc#1182830); - Align systemd service unit files with upstream provided ones.- Update to 4.13.4 * Work around special SMB2 IOCTL response behavior of NetApp Ontap 7.3.7; (bso#14607); * Temporary DFS share setup doesn't set case parameters in the same way as a regular share definition does; (bso#14612); * lib: Avoid declaring zero-length VLAs in various messaging functions; (bso#14605); * Do not create an empty DB when accessing a sam.ldb; (bso#14579); * vfs_fruit may close wrong backend fd; (bso#14596); * Temporary DFS share setup doesn't set case parameters in the same way as a regular share definition does; (bso#14612); * vfs_virusfilter: Allocate separate memory for config char*; (bso#14606); * vfs_fruit may close wrong backend fd; (bso#14596); * Work around special SMB2 IOCTL response behavior of NetApp Ontap 7.3.7; (bso#14607); * The cache directory for the user gencache should be created recursively; (bso#14601); * Be more flexible with repository names in CentOS 8 test environments; (bso#14594);- Uninstalling samba-client: Failed to disable unit, cifs.service does not exists; (bsc#1180388);- Update to 4.13.3 + libcli: smb2: Never print length if smb2_signing_key_valid() fails for crypto blob; (bso#14210); + s3: modules: gluster. Fix the error I made in preventing talloc leaks from a function; (bso#14486); + s3: smbd: Don't overwrite contents of fsp->aio_requests[0] with NULL via TALLOC_FREE(); (bso#14515); + s3: spoolss: Make parameters in call to user_ok_token() match all other uses; (bso#14568); + s3: smbd: Quiet log messages from usershares for an unknown share; (bso#14590); + samba process does not honor max log size; (bso#14248); + vfs_zfsacl: Add missing inherited flag on hidden "magic" everyone@ ACE; (bso#14587); + s3-libads: Pass timeout to open_socket_out in ms; (bso#13124); + s3-vfs_glusterfs: Always disable write-behind translator; (bso#14486); + smbclient: Fix recursive mget; (bso#14517); + clitar: Use do_list()'s recursion in clitar.c; (bso#14581); + manpages/vfs_glusterfs: Mention silent skipping of write-behind translator; (bso#14486); + vfs_shadow_copy2: Preserve all open flags assuming ROFS; (bso#14573); + interface: Fix if_index is not parsed correctly; (bso#14514);- Update to 4.13.2 + s3: modules: vfs_glusterfs: Fix leak of char **lines onto mem_ctx on return; (bso#14486); + RN: vfs_zfsacl: Only grant DELETE_CHILD if ACL tag is special; (bso#14471); + smb.conf.5: Add clarification how configuration changes reflected by Samba; (bso#14538); + daemons: Report status to systemd even when running in foreground; (bso#14552); + DNS Resolver: Support both dnspython before and after 2.0.0; (bso#14553); + s3-vfs_glusterfs: Refuse connection when write-behind xlator is present; (bso#14486); + provision: Add support for BIND 9.16.x; (bso#14487); + ctdb-common: Avoid aliasing errors during code optimization; (bso#14537); + libndr: Avoid assigning duplicate versions to symbols; (bso#14541); + docs: Fix default value of spoolss:architecture; (bso#14522); + winbind: Fix a memleak; (bso#14388); + s4:dsdb:acl_read: Implement "List Object" mode feature; (bso#14531); + docs-xml/manpages: Add warning about write-behind translator for vfs_glusterfs; (bso#14486); + nsswitch/nsstest.c: Avoid nss function conflicts with glibc nss.h. + vfs_shadow_copy2: Avoid closing snapsdir twice; (bso#14530); + third_party: Update resolv_wrapper to version 1.1.7; (bso#14547); + examples:auth: Do not install example plugin; (bso#14550); + ctdb-recoverd: Drop unnecessary and broken code; (bso#14513); + RN: vfs_zfsacl: Only grant DELETE_CHILD if ACL tag is special; (bso#14471);- Adjust smbcacls '--propagate-inheritance' feature to align with upstream; (bsc#1178469).- Update to samba 4.13.1 + CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with easily crafted records; (bsc#1177613); (bso#14472); + CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994); (bso#14436); + CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify; (bsc#1173902); (bso#14434); - Adjust systemd tmpfiles.d configuration, use /run/samba instead of /var/run/samba; (bsc#1177355);- Fix vfs_ceph query_directory regression; (bso#14519) - Drop liburing-devel for SLE15-SP2; (bsc#1177245)- Register CTDB recovery lock holder with ceph-mgr - Add liburing-devel dependency- Update to samba 4.13.0 + Require Python 3.6 + Move wide links functionality into VFS module + Deprecate NT4-like 'classic' Samba domain controllers + Deprecate SMBv1 only protocol options + Remove deprecated "ldap ssl ads" option + Unify asynchronous DCE-RPC server; (jsc#SES-645) + Replay multichannel lease break requests; (bso#11897); (jsc#SES-655) + Drop internal byteorder.h header from util-devel package + Remove final code for the AD DC LDAP backend + Add AD DC Group Policy Scripts + Only use gnutls_aead_cipher_encryptv2() for GnuTLS > 3.6.14; (bso#14399) + Fix %U substitutions if it contains a domain name; (bso#14467) + Fix krb5.conf creation for 'net ads join'; (bso#14479) + Fix build problem if libbsd-dev is not installed; (bso#14482) + Toggle vfs_snapper using "--with-shared-modules"; (bso#14437) + Fix idmap_ad RFC4511 response handling; (bso#14465) + Fix panic in get_lease_type(); (bso#14428)- Update to samba 4.11.13 + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2 against unencrypted passwords; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Support "server require schannel:WORKSTATION$ = no" about unsecure configurations; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): s4 torture rpc: repeated bytes in client challenge; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): libcli/auth: Reject weak client challenges in netlogon_creds_server_init() "server require schannel:WORKSTATION$ = no"; (bsc#1176579); (bso#14497); - Update to samba 4.11.12 + s3: libsmb: Fix SMB2 client rename bug to a Windows server; (bso#14403); + dsdb: Allow "password hash userPassword schemes = CryptSHA256" to work on RHEL7; (bso#14424); + dbcheck: Allow a dangling forward link outside our known NCs; (bso#14450); + lib/debug: Set the correct default backend loglevel to MAX_DEBUG_LEVEL; (bso#14426); + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428); + lib/util: do not install "test_util_paths"; (bso#14370); + lib:util: Fix smbclient -l basename dir; (bso#14345); + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428); + util: Allow symlinks in directory_create_or_exist; (bso#14166); + docs: Fix documentation for require_membership_of of pam_winbind; (bso#14358); + s3:winbind:idmap_ad: Make failure to get attrnames for schema mode fatal; (bso#14425);- Add obsoletes to libsmbldap2 package to fix upgrades from previous versions; (bsc#1172810);- Fix net command unable to negotiate SMB2; (bsc#1174120);- Update to samba 4.11.11 + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ and VLV combined; (bso#14364); (bsc#1173159] + CVE-2020-10745: invalid DNS or NBT queries containing dots use several seconds of CPU each; (bso#14378); (bsc#1173160). + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP server with paged_result or VLV; (bso#14402); (bsc#1173161) + CVE-2020-14303: Endless loop from empty UDP packet sent to AD DC nbt_server; (bso#14417); (bsc#1173359). - Update to samba 4.11.10 + Fix segfault when using SMBC_opendir_ctx() routine for share folder that contains incorrect symbols in any file name; (bso#14374). + vfs_shadow_copy2 doesn't fail case looking in snapdirseverywhere mode; (bso#14350) + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr; (bso#14413). + Malicous SMB1 server can crash libsmbclient; (bso#14366) + winbindd: Fix a use-after-free when winbind clients exit; (bso#14382) + ldb: Bump version to 2.0.11, LMDB databases can grow without bounds. (bso#14330) - Update to samba 4.11.9 + nmblib: Avoid undefined behaviour in handle_name_ptrs(); (bso#14242). + 'samba-tool group' commands do not handle group names with special chars correctly; (bso#14296). + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo is not valid; (bso#14237). + Missing check for DMAPI offline status in async DOS attributes; (bso#14293). + smbd: Ignore set NTACL requests which contain S-1-5-88 NFS ACEs; (bso#14307). + vfs_recycle: Prevent flooding the log if we're called on non-existant paths; (bso#14316) + smbd mistakenly updates a file's write-time on close; (bso#14320). + RPC handles cannot be differentiated in source3 RPC server; (bso#14359). + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313). + nsswitch: Fix use-after-free causing segfault in _pam_delete_cred; (bso#14327). + Fix fruit:time machine max size on arm; (bso#13622) + CTDB recovery corner cases can cause record resurrection and node banning; (bso#14294). + ctdb: Fix a memleak; (bso#14348). + libsmb: Don't try to find posix stat info in SMBC_getatr(). + ctdb-tcp: Move free of inbound queue to TCP restart; (bso#14295); (bsc#1162680). + s3/librpc/crypto: Fix double free with unresolved credential cache; (bso#14344); (bsc#1169095) + s3:libads: Fix ads_get_upn(); (bso#14336). + CTDB recovery corner cases can cause record resurrection and node banning; (bso#14294) + Starting ctdb node that was powered off hard before results in recovery loop; (bso#14295); (bsc#1162680). + ctdb-recoverd: Avoid dereferencing NULL rec->nodemap; (bso#14324) - Update to samba 4.11.8 + CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with ASQ; (bso#14331); (bsc#1169850); + CVE-2020-10704: LDAP Denial of Service (stack overflow) in Samba AD DC; (bso#14334); (bsc#1169851); - Update to samba 4.11.7 + s3: lib: nmblib. Clean up and harden nmb packet processing; (bso#14239). + s3: VFS: full_audit. Use system session_info if called from a temporary share definition; (bso#14283) + dsdb: Correctly handle memory in objectclass_attrs; (bso#14258). + ldb: version 2.0.9, Samba 4.11 and later give incorrect results for SCOPE_ONE searches; (bso#14270) + auth: Fix CIDs 1458418 and 1458420 Null pointer dereferences; (bso#14247). + smbd: Handle EINTR from open(2) properly; (bso#14285) + winbind member (source3) fails local SAM auth with empty domain name; (bso#14247) + winbindd: Handling missing idmap in getgrgid(); (bso#14265). + lib:util: Log mkdir error on correct debug levels; (bso#14253). + wafsamba: Do not use 'rU' as the 'U' is deprecated in Python 3.9; (bso#14266). + ctdb-tcp: Make error handling for outbound connection consistent; (bso#14274). - Update to samba 4.11.6 + pygpo: Use correct method flags; (bso#14209). + vfs_ceph_snapshots: Fix root relative path handling; (bso#14216); (bsc#1141320). + Avoiding bad call flags with python 3.8, using METH_NOARGS instead of zero; (bso#14209). + source4/utils/oLschema2ldif: Include stdint.h before cmocka.h; (bso#14218). + docs-xml/winbindnssinfo: Clarify interaction with idmap_ad etc; (bso#14122). + smbd: Fix the build with clang; (bso#14251). + upgradedns: Ensure lmdb lock files linked; (bso#14199). + s3: VFS: glusterfs: Reset nlinks for symlink entries during readdir; (bso#14182). + smbc_stat() doesn't return the correct st_mode and also the uid/gid is not filled (SMBv1) file; (bso#14101). + librpc: Fix string length checking in ndr_pull_charset_to_null(); (bso#14219). + ctdb-scripts: Strip square brackets when gathering connection info; (bso#14227).- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);- Installing: samba - samba-ad-dc.service does not exist and unit not found; (bsc#1171437);- Fix samba_winbind package is installing python3-base without python3 package; (bsc#1169521);- Require libldb2 >= 2.0.10 after security release.- CVE-2020-10704: LDAP Denial of Service (stack overflow) in Samba AD DC; (bso#14334); (bsc#1169851); - CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with ASQ; (bso#14331); (bsc#1169850);- Fix smbclient crash with double free (with unresolved krb5 credential cache); (bso#14344); (bsc#1169095).- Starting ctdb node that was powered off hard before results in recovery loop; (bso#14295); (bsc#1162680).- CTDB doesn't retry outgoing connections on bind (and some other) failures; (bso#14274); (bsc#1162680).- Revert: Allow idmap_rid to have primary group other than "Domain Users"; (bsc#1087931).- Fix nmbstatus not reporting detailed information about workgroups; (bsc#1159464); - Fix querying all names registered within broadcast area; (bso#8927);- Update to samab 4.11.5 + CVE-2019-14902: Replication of ACLs down subtree on AD Directory is not automatic; (bso#12497); (bsc#1160850). + CVE-2019-19344: Fix server crash with dns zone scavenging = yes; (bso#14050); (bsc#1160852). + CVE-2019-14907: server-side crash after charset conversion failure (eg during NTLMSSP processing); (bso#14208); (bsc#1160888). - Update to samba 4.11.4 + Ensure SMB1 cli_qpathinfo2() doesn't return an inode number; (bso#14161). + Ensure we don't call cli_RNetShareEnum() on an SMB1 connection; (bso#14174). + NT_STATUS_ACCESS_DENIED becomes EINVAL when using SMB2 in SMBC_opendir_ctx; (bso#14176). + SMB2 - Ensure we use the correct session_id if encrypting an interim response; (bso#14189). + Prevent smbd crash after invalid SMB1 negprot; (bso#14205). + printing: Fix %J substition; (bso#13745). + Remove now unneeded call to cmdline_messaging_context(); (bso#13925). + Fix incomplete conversion of former parametric options; (bso#14069). + Fix sync dosmode fallback in async dosmode codepath; (bso#14070). + vfs_fruit returns capped resource fork length; (bso#14171). + libnet_join: Add SPNs for additional-dns-hostnames entries; (bso#14116). + smbd: Increase a debug level; (bso#14211). + Prevent azure ad connect from reporting discovery errors reference-value-not-ldap-conformant; (bso#14153). + krb5_plugin: Fix developer build with newer heimdal system library; (bso#14179). + replace: Only link libnsl and libsocket if required; (bso#14168); + ctdb: Incoming queue can be orphaned causing communication; breakdown; (bso#14175). + ldb: Release ldb 2.0.8. Cross-compile will not take cross-answers or cross-execute; (bso#13846). + heimdal-build: Avoid hard-coded /usr/include/heimdal in asn1_compile-generated code; (bso#13856).- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).- Update to samba 4.11.3 + CVE-2019-14861: DNSServer RPC server crash, an authenticated user can crash the DCE/RPC DNS management server by creating records with matching the zone name; (bso#14138); (bsc#1158108). + CVE-2019-14870: DelegationNotAllowed not being enforced, the DelegationNotAllowed Kerberos feature restriction was not being applied when processing protocol transition requests (S4U2Self), in the AD DC KDC; (bso#14187); (bsc#1158109).- CVE-2019-14861: DNSServer RPC server crash, an authenticated user can crash the DCE/RPC DNS management server by creating records with matching the zone name; (bso#14138); (bsc#1158108). - CVE-2019-14870: DelegationNotAllowed not being enforced, the DelegationNotAllowed Kerberos feature restriction was not being applied when processing protocol transition requests (S4U2Self), in the AD DC KDC; (bso#14187); (bsc#1158109).- Update to samba 4.11.2 + CVE-2019-10218: Client code can return filenames containing path separators; (bsc#1144902); (bso#14071). + CVE-2019-14833: Samba AD DC check password script does not receive the full password; (bso#12438). + CVE-2019-14847: User with "get changes" permission can crash AD DC LDAP server via dirsync; (bso#14040). - Fixes from 4.11.1 + Overlinking libreplace against librt and pthread against every binary or library causes issues; (bso#14140); + kpasswd fails when built with MIT Kerberos; (bso#14155); + Fix spnego fallback from kerberos to ntlmssp in smbd server; (bso#14106); + Stale file handle error when using mkstemp on a share; (bso#14137); + non-AES schannel broken; (bso#14134); + Joining Active Directory should not use SAMR to set the password; (bso#13884); + smbclient can blunder into the SMB1 specific cli_RNetShareEnum() call on an SMB2 connection; (bso#14152); + Deleted records can be resurrected during recovery; (bso#14147); + getpwnam and getpwuid need to return data for ID_TYPE_BOTH group; (bso#14141); + winbind does not list forest trusts with additional trust attributes; (bso#14130); + fault report points to outdated documentation; (bso#14139); + pam_winbind with krb5_auth or wbinfo -K doesn't work for users of trusted domains/forests; (bso#14124); + classicupgrade results in uncaught exception - a bytes-like object is required, not 'str'; (bso#14136); + pod2man is not longer required, stop checking at build time; (bso#14131); + Exit code of ctdb nodestatus should not be influenced by deleted nodes; (bso#14129); + username/password authentication doesn't work with CUPS and smbspool; (bso#14128); + smbc_readdirplus() is incompatible with smbc_telldir() and smbc_lseekdir(); (bso#14094);- CVE-2019-14847: User with "get changes" permission can crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598); - CVE-2019-10218: Client code can return filenames containing path separators; (bso#14071); (bsc#1144902);- CVE-2019-14833: samba: Accent with "check script password" Samba AD DC check password script does not receive the full password; (bso#12438); (bsc#1154289).- Update to samba 4.11.0 + For details on all items see WHATSNEW.txt in samba-doc package + Python2 runtime support removed; python 3.4 or later required + Security improvements: - SMB1 disabled by default - lanman and plaintext authentication deprecated - winbind: PAM_AUTH and NTLM_AUTH events logged - GnuTLS 3.2 required; system FIPS mode setting honored + CephFS Snapshot integration, exposed as previous file versions + ctdb changes: - onnode -o option removed - ctdbd logs when using more than 90% of a CPU thread - CTDB_MONITOR_SWAP_USAGE variable removed + AD Domain controller improvements: - Upgrade AD databse format - BIND9_FLATFILE deprecated - default process model chagned to prefork - bind9 dns operation duration logging - Default schema updated to 2012_R2; function level is unchanged - many performance improvements + Configuration webserver support removed- Fix broken username/password authentication with CUPS and smbspool; (bsc#1152143); (bso#14128).- Fix auth problems when printing via smbspool backend with kerberos; (bnc#1148539); (bso#13832).- Update to samba 4.10.8 + CVE-2019-10197: user escape from share path definition; (bso#14035); (bsc#1141267);- Fix build on newer systems by modifying samba.spec to use consistent non-relative paths for pammodules in configure line and specification of pam_winbind.so library to package.- Update to samba 4.10.7 + Unable to create or rename file/directory inside shares configured with vfs_glusterfs_fuse module; (bso#14010). + build: Allow build when '--disable-gnutls' is set; (bso#13844) + samba-tool: Add 'import samba.drs_utils' to fsmo.py; (bso#13973). + Fix 'Error 32 determining PSOs in system' message on old DB with FL upgrade; (bso#14008). + s4/libnet: Fix joining a Windows pre-2008R2 DC; (bso#14021) + join: Use a specific attribute order for the DsAddEntry nTDSDSA object; (bso#14046). + vfs_catia: Pass stat info to synthetic_smb_fname(); (bso#14015). + lookup_name: Allow own domain lookup when flags == 0; (bso#14091). + s4 librpc rpc pyrpc: Ensure tevent_context deleted last; (bso#13932). + DEBUGC and DEBUGADDC doesn't print into a class specific log file; (bso#13915). + Request to keep deprecated option "server schannel", VMWare Quickprep requires "auto"; (bso#13949). + dbcheck: Fallback to the default tombstoneLifetime of 180 days; (bso#13967). + dnsProperty fails to decode values from older Windows versions; (bso#13969). + samba-tool: Use only one LDAP modify for dns partition fsmo role transfer; (bso#13973). + third_party: Update waf to version 2.0.17; (bso#13960). + netcmd: Allow 'drs replicate --local' to create partitions; (bso#14051). + ctdb-config: Depend on /etc/ctdb/nodes file; (bso#14017).- CVE-2019-10197: user escape from share path definition; (bso#14035); (bsc#1141267).- Prepare for use future use of kernel keyrings, modify /etc/pam.d/samba to include pam_keyinit.so; (bsc#1144059).- Update samba-winbind script to work with systemd; (bsc#1132739); - Drop samba dhcpcd hook scripts - Update to samba 4.10.6 + s3: winbind: Fix crash when invoking winbind idmap scripts; (bso#13956). + smbd does not correctly parse arguments passed to dfree and quota scripts; (bso#13964). + samba-tool dns: use bytes for inet_ntop; (bso#13965). + samba-tool domain provision: Fix --interactive module in python3; (bso#13828). + ldb_kv: Skip @ records early in a search full scan; (bso#13893). + docs: Improve documentation of "lanman auth" and "ntlm auth" connection; (bso#13981). + python/ntacls: Use correct "state directory" smb.conf option instead of "state dir"; (bso#14002). + registry: Add a missing include; (bso#13840). + Fix SMB guest authentication; (bso#13944). + AppleDouble conversion breaks Resourceforks; (bso#13958). + vfs_fruit makes direct use of syscalls like mmap() and pread(); (bso#13968). + s3:mdssvc: Fix flex compilation error; (bso#13987). + s3/vfs_glusterfs[_fuse]: Avoid using NAME_MAX directly; (bso#13872). + dsdb:samdb: schemainfo update with relax control; (bso#13799). + s3:util: Move static file_pload() function to lib/util; (bso#13964). + smbd: Fix a panic; (bso#13957). + ldap server: Generate correct referral schemes; (bso#12478). + s4 dsdb/repl_meta_data: fix use after free in dsdb_audit_add_ldb_value; (bso#13941). + s4 dsdb: Fix use after free in samldb_rename_search_base_callback; (bso#13942). + dsdb/repl: we need to replicate the whole schema before we can apply it; (bso#12204). + ldb: Release ldb 1.5.5; (bso#12478). + Schema replication fails if link crosses chunk boundary backwards; (bso#13713). + 'samba-tool domain schemaupgrade' uses relax control and skips the schemaInfo update provision; (bso#13799). + dsdb_audit: avoid printing "... remote host [Unknown] SID [(NULL SID)] ..."; (bso#13916). + python/ntacls: We only need security.SEC_STD_READ_CONTROL in order to get the ACL; (bso#13917). + s3:loadparm: Ensure to truncate FS Volume Label at multibyte boundary; (bso#13947). + Using Kerberos credentials to print using spoolss doesn't work; (bso#13939). + wafsamba: Use native waf timer; (bso#13998). + ctdb-scripts: Fix tcp_tw_recycle existence check; (bso#13984).- Update to samba-4.10.5 (including updates for 4.10.4, 4.10.3) + CVE-2019-12435 rpc/dns: Avoid NULL deference if zone not found in DnssrvOperation2; (bso#13922); (bsc#1137815). + CVE-2019-12436 dsdb/paged_results: Ignore successful results without messages; (bso#13951); (bsc#1137816). - Update to samba-4.10.4 + s3: SMB1: Don't allow recvfile on stream fsp's; (bso#13938). + py/provision: Fix for Python 2.6; (bso#13882). + netcmd: Fix 'passwordsettings --max-pwd-age' command; (bso#13873). + s3-libnet_join: 'net ads join' to child domain fails when using "-U admin@forestroot"; (bso#13861). + vfs_ceph: Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245). + vfs_ceph: Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697). + ctdb-common: Avoid race between fd and signal events; (bso#13895). + ctdb-common: Fix memory leak in run_proc; (bso#13943). + lib: Initialize getline() arguments; (bso#13892). + winbind: Fix overlapping id ranges; (bco#13903). + lib util debug: Increase format buffer to 4KiB; (bso#13902). + nsswitch pam_winbind: Fix Asan use after free; (bso#13927). + s4 lib socket: Ensure address string owned by parent struct; (bso#13929). + s3 rpc_client: Fix Asan stack use after scope; (bso#13936). + s3:smbd: Handle IO_REPARSE_TAG_DFS in SMB_FIND_FILE_FULL_DIRECTORY_INFO; (bso#10097). + smb2_tcon: Avoid STATUS_PENDING completely on tdis; (bso#10344). + smb2_sesssetup: avoid STATUS_PENDING responses for session setup; (bso#12845). + smb2_tcon: Avoid STATUS_PENDING completely on tdis; (bso#13698). + smb2_sesssetup: avoid STATUS_PENDING responses for session setup; (bso#13796). + dbcheck: Fix the err_empty_attribute() check; (bso#13843). + vfs_snapper: Drop unneeded fstat handler; (bso#13858). + vfs_default: Fix vfswrap_offload_write_send() NT_STATUS_INVALID_VIEW_SIZE check; (bso#13862). + smb2_server: Grant all 8192 credits to clients; (bso#13863). + smbd: Implement SMB_FILE_NORMALIZED_NAME_INFORMATION handling; (bso#13919). + s3/vfs_glusterfs: Dynamically determine NAME_MAX; (bso#13872). + s3: modules: ceph: Use current working directory instead of share path; (bso#13918); (bsc#1134452). + winbind: Use domain name from lsa query for sid_to_name cache entry; (bso#13831). + memcache: Increase size of default memcache to 512k; (bso#13865). + docs: Update smbclient manpage for "--max-protocol"; (bso#13857). + s3:utils: If share is NULL in smbcacls, don't print it; (bso#13937). + s3:smbspool: Fix regression printing with Kerberos credentials; (bso#13939). + ctdb-scripts: CTDB restarts failed NFS RPC services by hand, which is incompatible with systemd; (bso#13860). + ctdb-daemon: Revert "We can not assume that just because we could complete a TCP handshake"; (bso#13888). + ctdb-daemon: Never use 0 as a client ID; (bso#13930). + ctdb-common: Fix memory leak; (bso#13943). + s3:debug: Enable logging for early startup failures; (bso#13904) - Update to samba-4.10.3 + CVE-2018-16860: Heimdal KDC: Reject PA-S4U2Self with unkeyed checksum; (bso#13685); (bsc#1134024).- CVE-2019-12435: zone operations can crash rpc server; (bso#13922); (bsc#1137815).- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697). - Add ceph_snapshots VFS module; (jsc#SES-183).- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).- Update to samba-4.10.2: + CVE-2019-3870 (World writable files in Samba AD DC private/ dir); (bso#13834). + CVE-2019-3880 (Save registry file outside share as unprivileged user); (bso#13851). + py/kcc_utils: py2.6 compatibility; (bso#13837). + libcli: permit larger values of DataLength in SMB2_ENCRYPTION_CAPABILITIES of negotiate response; (bso#13869). + regfio: Improve handling of malformed registry hive files; (bso#13840). + ctdb-version: Simplify version string usage; (bso#13789). + lib: Make fd_load work for non-regular files; (bso#13859). + dbcheck: in the middle of the tombstone garbage collection causes replication failures, dbcheck: add --selftest-check-expired-tombstones cmdline option; (bso#13816). + ndr_spoolss_buf: Fix out of scope use of stack variable in NDR_SPOOLSS_PUSH_ENUM_OUT(); (bso#13818). + s4/messaging: Fix undefined reference in linking libMESSAGING-samba4.so; (bso#13854). + acl_read: Fix regression for empty lists; (bso#13836). + s4:dlz make b9_has_soa check dc=@ node; (bso#13841). + s3:client: Fix printing via smbspool backend with kerberos auth; (bso#13832). + s4:librpc: Fix installation of Samba; (bso#13847). + s3:lib: Fix the debug message for adding cache entries; (bso#13848). + s3:utils: Add 'smbstatus -L --resolve-uids' to show username; (bso#13793). + s3:lib: Fix the debug message for adding cache entries; (bso#13848). + s3:waf: Fix the detection of makdev() macro on Linux; (bso#13853). * ctdb-build: Drop creation of .distversion in tarball; (bso#13789). * ctdb-packaging: Test package requires tcpdump, ctdb package should not own system library directory; (bso#13838). - Update to samba-4.10.1: + py/kcc_utils: py2.6 compatibility; (bso#13837); + libcli: permit larger values of DataLength in SMB2_ENCRYPTION_CAPABILITIES of negotiate response; (bso#13869); + regfio: Improve handling of malformed registry hive files; (bso#13840); + ctdb-version: Simplify version string usage; (bso#13789); + lib: Make fd_load work for non-regular files; (bso#13859); + dbcheck in the middle of the tombstone garbage collection causes replication failures, dbcheck: add --selftest-check-expired-tombstones cmdline option; (bso#13816); + ndr_spoolss_buf: Fix out of scope use of stack variable in NDR_SPOOLSS_PUSH_ENUM_OUT(); (bso#13818); + s4/messaging: Fix undefined reference in linking libMESSAGING-samba4.so; (bso#13854); + acl_read: Fix regression for empty lists; (bso#13836); + s4:dlz make b9_has_soa check dc=@ node; (bso#13841); + s3:client: Fix printing via smbspool backend with kerberos auth; (bso#13832); + s4:librpc: Fix installation of Samba; (bso#13847); + s3:lib: Fix the debug message for adding cache entries; (bso#13848); + s3:utils: Add 'smbstatus -L --resolve-uids' to show username; (bso#13793); + s3:lib: Fix the debug message for adding cache entries; (bso#13848); + s3:waf: Fix the detection of makdev() macro on Linux; (bso#13853); + ctdb-build: Drop creation of .distversion in tarball; (bso#13789); + ctdb-packaging: Test package requires tcpdump, ctdb package should not own system library directory; (bso#13838); - Update to samba-4.10.0: + s4-server: Open and close a transaction on sam.ldb at startup; (bso#13760); + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812); + s4/scripting/bin: Open unicode files with utf8 encoding and write + unicode string. + sambaundoguididx: Use the right escaped oder unescaped sam ldb files; (bso#13759); + Fix idmap cache pollution with S-1-22- IDs on winbind hickup; (bso#13813); + passdb: Update ABI to 0.27.2. + lib/winbind_util: Add winbind_xid_to_sid for --without-winbind; (bso#13813); + lib:util: Move debug message for mkdir failing to log level 1; (bso#13823);- MacOS credit accounting breaks with async SESSION SETUP; (bsc#1125601); (bso#13796). - Mac OS X SMB2 implmenetation sees Input/output error or Resource temporarily unavailable and drops connection; (bso#13698)- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).- CVE-2019-3880: Save registry file outside share as unprivileged user; (bso#13851); (bsc#1131060 ).- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0); (bso#13834); (bsc#1130703);- Update to samba-4.9.5 + audit_logging: Remove debug log header and JSON Authentication: prefix; (bso#13714); + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760); + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso# CID: 1433607; (bso#11495); + smbd: uid: Don't crash if 'force group' is added to an existing share connection; (bso#13690); + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility code; (bso#13770); + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803); + s3:utils/smbget fix recursive download with empty source directories; (bso#13199); + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716); + s3:libsmb: cli_smb2_list() can sometimes fail initially on a connection; (bso#13736); + join: Throw CommandError instead of Exception for simple errors; (bso#13747); + ldb: Avoid inefficient one-level searches; (bso#13762); + s3: libsmb: use smb2cli_conn_max_trans_size() in cli_smb2_list(); (bso#13736); + tldap: Avoid use after free errors; (bso#13776); + Fix idmap xid2sid cache churn; (bso#13802); + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812); + s3-smbd: Avoid assuming fsp is always intact after close_file call; (bso#13720); + s3-vfs-fruit: Add close call; (bso#13725); + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746); + s3-vfs: add glusterfs_fuse vfs module; (bso#13774); + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766); + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS) ftruncate and fallocate; (bso#13807); + lib/audit_logging: Actually create talloc; (bso#13737); + netcmd/user: python[3]-gpgme unsupported and replaced by python[3]-gpg; (bso#13728); + dns: Changing onelevel search for wildcard to subtree; (bso#13738); + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721); + sambaundoguididx: Use the right escaped oder unescaped sam ldb files; (bso#13759); + ctdb: Print locks latency in machinereadable stats; (bso#13742); + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786); + audit_logging: auth_json_audit required auth_json; (bso#13715); + man pages: Document prefork process model; (bso#13765); + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773); + s3:auth: ignore create_builtin_guests() failing without a valid idmap configuration; (bso#13697); + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC without trusts; (bso#13722); + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd is not available; (bso#13723); + s4:server: Add support for 'smbcontrol samba shutdown' and 'smbcontrol debug/debuglevel'; (bso#13752); + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616); + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330); + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774); + notifyd: Fix SIGBUS on sparc; (bso#13704); + waf: Check for libnscd; (bso#13787); + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770); + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717); + Recovery lock bug fixes; (bso#13800); + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726); + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727); + vfs_fileid: Fix get_connectpath_ino; (bso#13741); + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).- Fix update-apparmor-samba-profile script after apparmor switched to using named profiles. The change is backwards compatible; (bsc#1126377);- LoadParm().load_default() fails with "Unable to load default file"; (bsc#1089758);- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);- Update to samba-4.9.4 + libcli/smb: Don't overwrite status code; (bso#9175). + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164). + Session setup reauth fails to sign response; (bso#13661). + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677). + vfs_shadow_copy2: Nicely deal with attempts to open previous version for writing; (bso#13688). + Restoring previous version of stream with vfs_shadow_copy2 fails with NT_STATUS_OBJECT_NAME_INVALID fsp->base_fsp->fsp_name; (bso#13455). + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571). + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708) + PEP8: fix E231: missing whitespace after ','. + winbindd: Fix crash when taking profiles;(bso#13629) + CVE-2018-14629 dns: Fix CNAME loop prevention using counter regression; (bso#13600) + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686). + CVE-2018-16853: Do not segfault if client is not set; (bso#13571). + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679) + ctdb-daemon: Exit with error if a database directory does not exist; (bso#13696). + s3:libads: Add net ads leave keep-account option; (bso#13498).- Drop more %if..%endif guards which are idempotent. - Drop requires on ldconfig which are already auto-discovered. - Do not ignore errors from useradd/groupadd.- Remove python2 build dependency from samba-libs; (bsc#1116900);- Update update-apparmor-samba-profile script to ignore the shares's paths containing substitution variables in any place, not only at the beginning of the path.- Update to samba-4.9.3 + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD Internal DNS server; (bso#13600); (bsc#1116319); + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628); (bsc#1116320); + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server; (bso#13674); (bsc#1116322); + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers; (bso#13669); (bsc#1116321); + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos configuration (unsupported); (bso#13678); (bsc#1116324); + CVE-2018-16857: Bad password count in AD DC not always effective; window; (bso#13683); (bsc#1116323);- Update to samba-4.9.2 + dsdb: Add comments explaining the limitations of our current backlink behaviour; (bso#13418); + Fix problems running domain backups (handling SMBv2, sites); (bso#13621); + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3; (bso#13465); + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642); + File saving issues with vfs_fruit on samba >= 4.8.5; (bso#13646); + Enabling vfs_fruit looses FinderInfo; (bso#13649); + Cancelling of SMB2 aio reads and writes returns wrong error NT_STATUS_INTERNAL_ERROR; (bso#13667); + Fix CTDB recovery record resurrection from inactive nodes and simplify vacuuming; (bso#13641); + examples: Fix the smb2mount build; (bso#13465); + libtevent: Fix build due to missing open_memstream on Illiumos; (bso#13629); + winbindd_cache: Fix timeout calculation for sid<->name cache; (bso#13662); + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path; (bso#13653); + Extended DN SID component missing for member after switching group membership; (bso#13418); + Return STATUS_SESSION_EXPIRED error encrypted, if the request was encrypted; (bso#13624); + python: Allow forced signing via smb.SMB(); (bso#13621); + lib:socket: If returning early, set ifaces; (bso#13665); + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8 encoded unicode; (bso#13616); + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute; (bso#13673); + waf: Add -fstack-clash-protection; (bso#13601); + winbind: Fix segfault if an invalid passdb backend is configured; (bso#13668); + Fix bugs in CTDB event handling; (bso#13659); + Misbehaving nodes are sometimes not banned; (bso#13670);- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);- winbind requires latest version of libtevent-util0 to start- Backport latest gpo code from master + Read policy from local gpt cache + Offline policy application + Make group policy extensible via register/unregister gpext + gpext's run via a process_group_policy method- Enable profiling data collection- Change samba-kdc package name to samba-ad-dc - Move samba-ad-dc.service to the samba-ad-dc package- Update to samba-4.9.1 + s3: nmbd: Stop nmbd network announce storm; (bso#13620); + s3-rpcclient: Use spoolss_init_spoolss_UserLevel1 in winspool cmds; (bso#13597); + CTDB recovery lock has some race conditions; (bso#13617); + s3-rpc_client: Advertise Windows 7 client info; (bso#13597); + ctdb-doc: Remove PIDFILE option from ctdbd_wrapper man page; (bso#13610);- Tumbleweed doesn't define the sle_version macro, so we must include a check for suse_version also. Otherwise python3 is disabled on Tumbleweed.- Update to samba-4.9.0 + samba_dnsupdate: Honor 'dns zone scavenging' option, only update if needed; (bso#13605); + wafsamba: Fix 'make -j'; (bso#13606);- Update to samba-4.9.0rc5 + s3: VFS: vfs_full_audit: Ensure smb_fname_str_do_log() only returns absolute pathnames; (bso#13565); + s3: util: Do not take over stderr when there is no log file; (bso#13578); + Durable Reconnect fails because cookie.allow_reconnect is not set; (bso#13549); + krb5-samba: Interdomain trust uses different salt principal; (bso#13539); + vfs_fruit: Don't unlink the main file; (bso#13441); + smbd: Fix a memleak in async search ask sharemode; (bso#13602); + Fix Samba GPO issue when Trust is enabled; (bso#11517); + samba-tool: Add "virtualKerberosSalt" attribute to 'user getpassword/syncpasswords'; (bso#13539); + Fix CTDB configuration issues; (bso#13589); + ctdbd logs an error until it can successfully connect to eventd; (bso#13592);- Update to samba-4.9.0rc4 + s3: smbd: Ensure get_real_filename() copes with empty pathnames; (bso#13585); + samba domain backup online/rename commands force user to specify password on CLI; (bso#13566); + wafsamba/samba_abi: Always hide ABI symbols which must be local; (bso#13579); + Fix a panic if fruit_access_check detects a locking conflict; (bso#13584); + Fix memory and resource leaks; (bso#13567); + python: Fix print in dns_invalid.py; (bso#13580); + Aliasing issue causes incorrect IPv6 checksum; (bso#13588); + Fix CTDB configuration issues; (bso#13589); + s3: vfs: time_audit: fix handling of token_blob in smb_time_audit_offload_read_recv(); (bso#13568);- Add missing zlib-devel dependency which was previously pulled in by libopenssl-devel- Update to samba-4.9.0rc3+git.22.3fff23ae36e + CVE-2018-10858: libsmb: Harden smbc_readdir_internal() against returns from malicious servers; (bso#13453); + CVE-2018-1140: ldbsearch '(distinguishedName=abc)' and DNS query with escapes crashes, ldb: Release LDB 1.3.5 for CVE-2018-1140; (bso#13374); + CVE-2018-10918: cracknames: Fix DoS (NULL pointer de-ref) when not servicePrincipalName is set on a user; (bso#13552); + CVE-2018-10919: acl_read: Fix unauthorized attribute access via searches; (bso#13434); + ctdb_mutex_ceph_rados_helper: Set SIGINT signal handler; (bso#13540); + CVE-2018-1139 libcli/auth: Do not allow ntlmv1 over SMB1 when it is disabled via "ntlm auth"; (bso#13360); + s3-tldap: do not install test_tldap; (bso#13529); + ctdb_mutex_ceph_rados_helper: Fix deadlock via lock renewals; (bso#13540); + CVE-2018-1140 Add NULL check for ldb_dn_get_casefold() in ltdb_index_dn_attr(); (bso#13374); + ctdb-eventd: Fix CID 1438155; (bso#13554); + Fix CIDs 1438243, (Unchecked return value) 1438244 (Unsigned compared against 0), 1438245 (Dereference before null check) and 1438246 (Unchecked return value); (bso#13553); + ctdb: Fix a cut&paste error; (bso#13554); + systemd: Only start smb when network interfaces are up; (bso#13559); + Fix quotas don't work with SMB2; (bso#13553); + s3/smbd: Ensure quota code is only called when quota support detected; (bso#13563); + s3/libsmb: Explicitly set delete_on_close token for rmdir; (bso#13204); + s3:waf: Install eventlogadm to /usr/sbin; (bso#13561); + Shorten description in vfs_linux_xfs_sgid manual; (bso#13562);- Update to samba-4.9.0rc2+git.21.a1069afb007 + s3: smbd: Using "sendfile = yes" with SMB2 can cause CPU spin; (bso#13537); + s3: smbd: Fix path check in smbd_smb2_create_durable_lease_check(); (bso#13535); + samba-tool trust: Support discovery via netr_GetDcName; (bso#13538); + s4-dsdb: Only build dsdb Python modules for AD DC; (bso#13542); + Fix portability issues on freebsd; (bso#13520); + DNS wildcard search does not handle multiple labels correctly; (bso#13536); + samba-tool domain trust: Fix trust compatibility to Windows Server 1709 and FreeIPA; (bso#13308); + Fix portability issues on freebsd; (bso#13520); + ctdb-protocol: Fix CTDB compilation issues; (bso#13545); + ctdb-docs: Replace obsolete reference to CTDB_DEBUG_HUNG_SCRIPT option; (bso#13546); + ctdb-doc: Provide an example script for migrating old configuration; (bso#13550); + ctdb-event: Implement event tool "script list" command; (bso#13551);- Update to samba-4.8.4+git.37.a7a861d7982; + CVE-2018-1139: Weak authentication protocol allowed; (bsc#1095048); (bsc#13360); + CVE-2018-1140: Denial of Service Attack on DNS and LDAP server; (bsc#1095056); (bso#13466); (bso#13374); + CVE-2018-10858: Insufficient input validation on client directory listing in libsmbclient; (bsc#1103411); (bso#13453); + CVE-2018-10918: Denial of Service Attack on AD DC DRSUAPI server; (bsc#1103414); (bso#13552); + CVE-2018-10919: Confidential attribute disclosure from the AD LDAP server; (bsc#1095057); (bso#13434); + s3:winbind: winbind normalize names' doesn't work for users; (bso#12851); + winbind: Fix UPN handling in canonicalize_username(); (bso#13369); + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428); + samdb: Fix building Samba with gcc 8.1; (bso#13437); + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440); + smbd: Flush dfree memcache on service reload; (bso#13446); + ldb: Save a copy of the index result before calling the + lib/util: No Backtrace given by Samba's AD DC by default; (bso#13454). + s3: smbd: printing: Re-implement delete-on-close semantics for print files missing since 3.5.x; (bso#13457). + python: Fix talloc frame use in make_simple_acl(); (bso#13474). + krb5_wrap: Fix keep_old_entries logic for older Kerberos libraries;(bso#13478). + krb5_plugin: Add winbind localauth plugin for MIT Kerberos; (bso#13480).- Add missing package descriptions; (bsc#1093864); - Fix dependency issue between samba-python and samba-kdc; (bsc#1062876); - Call update-apparmor-samba-profile when running samba-ad-dc; (bsc#1092099);- Update to 4.8.2 + After update to 4.8.0 DC failed with "Failed to find our own NTDS Settings objectGUID" (bso#13335). + fix incorrect reporting of stream dos attributes on a directory (bso#13380). + vfs_ceph: add asynchronous fsync; fake synchronous call (bso#13412). + vfs_ceph: add fake async pwrite/pread send/recv hooks; (bso#13425) + vfs_ceph: Fix memory leak; (bso#13424). + libsmbclient: Fix hard-coded connection error return of ETIMEDOUT; (bso#13419). + s4-lsa: Fix use-after-free in LSA server; (bso#13420). + winbindd: Do re-connect if the RPC call fails in the passdb case; (bso#13430). + cleanupd: Sends MSG_SMB_UNLOCK twice to interested peers; (bso#13416). + cleanupd: Use MSG_SMB_BRL_VALIDATE to signal cleanupd unclean process shutdown; (bso#13414). + ctdb-client: Remove ununsed functions from old client code; (bso#13411). + printing: Return the same error code as windows does on upload failures; (bso#13395). + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged pipe is not accessable; (bso#13400). + s4:lsa_lookup: remove TALLOC_FREE(state) after all dcesrv_lsa_Lookup{Names,Sids}_base_map() calls; (bso#13420). + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407). + s3:smbspool: Fix cmdline argument handling; (bso#13417).- Move libdfs-server-ad-samba4.so library from kdc to libs package, as it is required by some client libs; (bsc#1074135); - Update to 4.8.1; (bsc#1091179); + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error, we don't own it here; (bso#13244); + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't support fdopendir(); (bso#13270); + Round-tripping ACL get/set through vfs_fruit will increase the number of ACE entries without limit; (bso#13319); + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit issues; (bso#13347); + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without delete access; (bso#13358); + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372); + s3: smbd: Unix extensions attempts to change wrong field in fchown call; (bso#13375); + ms_schema/samba-tool visualize: Fix python2.6 incompatibility; (bso#13337); + Fix invocation of gnutls_aead_cipher_encrypt(); (bso#13352); + Windows 10 cannot logon on Samba NT4 domain; (bso#13328); + winbindd: Recover loss of netlogon secure channel in case the peer DC is rebooted; (bso#13332); + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363); + ctdb-client: Fix bugs in client code; (bso#13356); + ctdb-scripts: Drop "net serverid wipe" from 50.samba event script; (bso#13359); + s3: lib: messages: Don't use the result of sec_init() before calling sec_init(); (bso#13368); + libads: Fix the build '--without-ads'; (bso#13273); + winbind: Keep "force_reauth" in invalidate_cm_connection, add 'smbcontrol disconnect-dc'; (bso#13332); + vfs_virusfilter: Fix CIDs 1428738-1428740; (bso#13343); + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367); + rpc_server: Fix core dump in dfsgetinfo; (bso#13370); + smbclient: Fix notify; (bso#13382); + Fix smbd panic if the client-supplied channel sequence number wraps; (bso#13215); + Windows 10 cannot logon on Samba NT4 domain; (bso#13328); + lib/util: Remove unused '#include ' from tests/tfork.c; (bso#13342); + Fix build errors with cc from developerstudio 12.5 on Solaris; (bso#13343); + Fix the picky-developer build on FreeBSD 11; (bso#13344); + s3:modules: Fix the build of vfs_aixacl2.c; (bso#13345); + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338); + lib:replace: Fix linking when libtirpc-devel overwrites system headers; (bso#13341); + winbindd: 'wbinfo --name-to-sid' returns misleading result on invalid query; (bso#13312); + s3:passdb: Do not return OK if we don't have pinfo set up; (bso#13376); + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);- Use new foreground execution flags for systemd samba daemons; (bsc#1088574); (bsc#1071090); (bsc#1065551); + Add %post scriptlet to clear old sysconfig flags - Update vendor-files to commit 880b3e7. + Set samba sysconfig template variables to "" + Add required daemon flags directly to systemd unit- Specfile cleanup + Remove %if..%endif guards which don't affect the build + Remove redundant %clean section + Replace old $RPM_* shell vars with macros- BuildRequire pkgconfig(systemd) and pkgconfig(libsystemd) in place of systemd and systemd-devel: Allow OBS to optimize the workload by allowing the usage of the 'build-optimized' systemd packages.- Enable building samba with python3, and create a samba-python3 package.- Update to 4.8 + New GUID Index mode in sam.ldb for the AD DC + GPO support for samba KDC + Time machine support with vfs_fruit + Encrypted secrets + AD Replication visualization + Improved trust support - ability to not scan global trust list - AD external trusts have limited support - verbose trusted domain listing + VirusFilter VFS module + NT4-style replication removed + vfs_aio_linux removed- Disable samba-pidl package, due to the removal of dependency perl-Parse-Yapp; (bsc#1085150);- Update to 4.7.6; + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally; (bso#11343); (bsc#1081741); + CVE-2018-1057: Authenticated users can change other users' password; (bso#13272); (bsc#1081024).- Disable python until full python3 port is done; (bsc#1082139); + Remove contents of package samba-python + Remove contents of package libsamba-policy0 + Remove contents of package libsamba-policy-devel + Remove library libsamba-python-samba4.so from samba-libs package + Remove library libsamba-net-samba4.so from samba-libs package + Remove smbtorture binary and manpage from samba-test- samba fails to build with glibc2.27; (bsc#1081042);- Update to 4.7.5; (bsc#1080545); + smbd tries to release not leased oplock during oplock II downgrade; (bso#13193); + Fix copying file with empty FinderInfo from Windows client to Samba share with fruit; (bso#13181); + build: Deal with recent glibc sunrpc header removal; (bso#10976); + Make Samba work with tirpc and libnsl2; (bso#13238); + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208); (bsc#1075206); + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue; (bso#12986); + ctdb-recovery-helper: Deregister message handler in error paths; (bso#13188); + samba: Only use async signal-safe functions in signal handler; (bso#13240); + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue; (bso#12986); + repl_meta_data: Fix linked attribute corruption on databases with unsorted links on expunge. dbcheck: Add functionality to fix the corrupt database; (bso#13228); + Fix smbd panic when chdir returns error during exit; (bso#13189); + Make Samba work with tirpc and libnsl2; (bso#13238); + Fix POSIX ACL support on HPUX and possibly other big-endian OSs; (bso#13176);- Update to 4.7.4; (bsc#1080545); + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140); + s3: libsmb: Fix valgrind read-after-free error in cli_smb2_close_fnum_recv(); (bso#13171); + s3: libsmb: Fix reversing of oldname/newname paths when creating a reparse point symlink on Windows from smbclient; (bso#13172); + Build man page for vfs_zfsacl.8 with Samba; (bso#12934); + repl_meta_data: Allow delete of an object with dangling backlinks; (bso#13095); + s4:samba: Fix default to be running samba as a deamon; (bso#13129); + Performance regression in DNS server with introduction of DNS wildcard, ldb: Release 1.2.3; (bso#13191); + vfs_zfsacl: Fix compilation error; (bso#6133); + "smb encrypt" setting changes are not fully applied until full smbd restart; (bso#13051); + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052); + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155); + winbindd: Dependency on trusted-domain list in winbindd in critical auth codepath; (bso#13173); + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120); + ctdb: sock_daemon leaks memory; (bso#13153); + TCP tickles not getting synchronised on CTDB restart; (bso#13154); + winbindd: winbind parent and child share a ctdb connection; (bso#13150); + pthreadpool: Fix deadlock; (bso#13170); + pthreadpool: Fix starvation after fork; (bso#13179); + messaging: Always register the unique id; (bso#13180); + s4/smbd: set the process group; (bso#13129); + Fix broken linked attribute handling; (bso#13095); + The KDC on an RWDC doesn't send error replies in some situations; (bso#13132); + libnet_join: Fix 'net rpc oldjoin'; (bso#13149); + g_lock conflict detection broken when processing stale entries; (bso#13195); + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired sessions; (bso#13197); + s3:libads: net ads keytab list fails with "Key table name malformed"; (bso#13166); (bsc#1067700); + Fix crash in pthreadpool thread after failure from pthread_create; (bso#13170); + s4:samba: Allow samba daemon to run in foreground; (bso#13129); (bsc#1065551); + third_party: Link the aesni-intel library with "-z noexecstack"; (bso#13174); + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I" options; (bso#13125);- Re-enable usage of libnsl (did got lost with glibc change) - Use TI-RPC (sunrpc is deprecated and will be removed soon from glibc)- smbc_opendir should not return EEXIST with invalid login credentials; (bnc#1065868).- Update to 4.7.3; (bsc#1069666); + Non-smbd processes using kernel oplocks can hang smbd; (bso#13121); + python: use communicate to fix Popen deadlock; (bso#13127); + smbd on disk file corruption bug under heavy threaded load; (bso#13130); + tevent: version 0.9.34; (bso#13130); + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118); + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug; (bsc#1060427);(bso#13041); + CVE-2017-15275: s3: smbd: Chain code can return uninitialized memory when talloc buffer is grown; (bsc#1063008); (bso#13077); - Build with AD DC support only in openSUSE.- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- samba-tool requires samba-python; (bnc#1067771).- Run all daemons in the foreground and let systemd handle it; (bsc#1065551). - Update to 4.7.1; + Fix exporting subdirs with shadow_copy2; (bso#13091); + Currently if getwd() fails after a chdir(), we panic; (bso#13027); + Ensure default SMB_VFS_GETWD() call can't return a partially completed struct smb_filename; (bso#13068); + sys_getwd() can leak memory or possibly return the wrong errno on older systems; (bso#13069); + smbclient doesn't correctly canonicalize all local names before use; (bso#13093); + Fix broken linked attribute handling; (bso#13095); + Missing LDAP query escapes in DNS rpc server; (bso#12994); + Link to -lbsd when building replace.c by hand; (bso#13087); + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem; (bso#6133); + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module; (bso#7909); + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module; (bso#7933); + Missing assignment in sl_pack_float; (bso#12991); + Wrong Samba access checks when changing DOS attributes; (bso#12995); + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062); + groupmap cleanup should not delete BUILTIN mappings; (bso#13065); + Enabling vfs_fruit results in loss of Finder tags and other xattrs; (bso#13076); + man pages: Properly ident lists; (bso#9613); + smb.conf.5: Sort parameters alphabetically; (bso#13081); + Fix GUID string format on GetPrinter info; (bso#12993); + Remote serverid check doesn't check for the unique id; (bso#13042); + CTDB starts consuming memory if there are dead nodes in the cluster; (bso#13056); + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070); + libgpo doesn't sort the GPOs in the correct order; (bso#13046); + Remote serverid check doesn't check for the unique id; (bso#13042); + vfs_catia: Fix a potential memleak; (bso#13090); + Fix file change notification for renames; (bso#12903); + Samba DNS server does not honour wildcards; (bso#12952); + Can't change password in samba from a Windows client if Samba runs on IPv6 only interface; (bso#13079); + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086); + Apple client can't cope with SMB2 async replies when creating symlinks; (bso#13047); + s4:rpc_server:backupkey: Move variable into scope; (bso#12959); + Fix ntstatus_gen.h generation on 32bit; (bso#13099); + Fix a double free in vfs_gluster_getwd(); (bso#13100); + Fix resouce leaks and pointer issues; (bso#13101); + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);- Add samba-kdc to baselibs.conf. - Do not wrap samba-kdc's package definition into if/endif: the package won't be generated simply based on the fact that there is no files section for the package. Allows the source validator to ensure samba-kdc is a built package.- Update to 4.7.0; + Whole DB read locks: Improved LDAP and replication consistency; (bso#12858). + Samba AD with MIT Kerberos + Dynamic RPC port range: Default range changed from "1024-1300" to "49152-65535". + Authentication and Authorization audit support: New auth_audit debug class. + Multi-process LDAP Server: The LDAP server in the AD DC now honours the process model used for the rest of the 'samba' process. + Improved Read-Only Domain Controller (RODC) Support; (bso#12977). + Additional password hashes stored in supplementalCredentials. + Improvements to DNS during Active Directory domain join. + Significant AD performance and replication improvements. + Query record for open file or directory. + Removal of lpcfg_register_defaults_hook(). + Change of loadable module interface. + SHA256 LDAPS Certificates: The self-signed certificate generated for use on LDAPS will now be generated with a SHA256 self-signature, not a SHA1 self-signature. + CTDB no longer allows mixed minor versions in a cluster. + CTDB now ignores hints from Samba about TDB flags when attaching to databases. + New configuration variable CTDB_NFS_CHECKS_DIR. + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed. + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed. + The example NFS Ganesha call-out has been improved. + A new "replicated" database type is available.- CVE-2017-12163: Prevent client short SMB1 write from writing server memory to file; (bso#13020); (bsc#1058624).- CVE-2017-12150: Some code path don't enforce smb signing, when they should; (bso#12997); (bsc#1058622).- CVE-2017-12151: Keep required encryption across SMB3 dfs redirects; (bso#12996); (bsc#1058565).- Clean specfile assuming SUSE-only system and product >=SLE11 + %{ul_version}, %{rhel_version}, %{mandriva_version}, %{centos_version} are always undefined + %{_vendor} is "suse" and %{suse_version} is at least 1100- Update to 4.6.7; (bsc#1054017) + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392). + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937). + vfs_ceph provides inconsistent directory listings; (bso#12911). + Misused talloc context can cause a user to crash their smbd by chaining SMB1 commands.; (bso#12836). + Use-after free can crash libsmbclient code.; (bso#12927). + Server exit with active AIO can crash.; (bso#12925). + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910). + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs; (bso#12898). + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897). + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for authentication; (bso#12886). + finder sidebar showing question mark instead of icon when using ip to connect with vfs_fruit; (bso#12840). + Winbind stops obtaining the 'unixHomeDirectory' & 'loginShell' attributes from AD.; (bso#12720). + KCC run at selftest startup can fail spuriously due to a race; (bso#12869). + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for the remote change; (bso#12782). + rpc_pipe_client memory leaks due to long term memory context passed to rpc_pipe_open_interface(); (bso#12890). + CVE-2017-2619 breaks accessing previous versions of directories with snapshots in subdirectories of the share; (bso#12885). + dns_name_equal doing OOB read; (bso#12813). + replica_sync tests flap; (bso#12753). + Selftest should not call 'net cache flush' and wipe important winbind entries; (bso#12868). + Old Samba versions don't support using recent ldb versions (>=1.1.30); (bso#12859). + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490). + race starting winbindd against posixacl test; (bso#12843). + Crash in the reentrant smbd_smb2_create_send() if the something fails in the subsequent try; (bso#12832). + spnego.c passes the wrong argument order to gensec_update_ev() for the FALLBACK case; (bso#12788). + Clients with SMB3 support can't connect with "server max protocol = SMB2_02"; (bso#12772). + A log message of samb-tool user syncpasswords reverses string arguments in a debug message "Call Popen[...".; (bso#12768). + The smb tarmode tests kills the share dir contents; (bso#12867). + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862). + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860). + manpage/index.html lists links not in alphabetical order; (bso#12854). + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831). + If a record is locked in a database, then recovery does not complete; (bso#12857). + debug_locks.sh script does not log any information; (bso#12856). + SIGSEGV in cm_connect_lsa_tcp dereferencing conn->lsa_tcp_pipe->transport after error; (bso#12852). + smbclient can't parse DOMAIN+username if a different winbind separator is used; (bso#12849). + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845). + Related requests with TreeConnect fail with NETWORK_NAME_DELETED; (bso#12844). + cli->server_os not filled correctly; (bso#12779). + REGRESSION: smbclient doesn't print the session setup anymore; (bso#12824). + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808). + CTDB NFS call-out failures do not cause event failures; (bso#12837). + net command fails due to incorrectly return code; (bso#12828). + Fix building Samba with GCC 7.1; (bso#12827).- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again; (bsc#1048339).- fix cephwrap_chdir(); (bsc#1048790). - Update to 4.6.6 + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation; (bsc#1048278).- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).- Fix inconsistent ctdb socket path; (bsc#1048352). - Fix non-admin cephx authentication; (bsc#1048387).- Update to 4.6.5; (bsc#1040157) + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at startup; (bso#12814). + vfs_expand_msdfs tries to open the remote address as a file path; (bso#12687). + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type); (bso#12798). + With clustering get update_num_read_oplocks failed and PANIC: num_share_modes == 1 assertion failure; (bso#11844). + contend_level2_oplocks_begin_default oplock optimisation doesn't carry over to leases; (bso#12766). + `ctdb nodestatus` incorrectly displays status for all nodes with wrong exit code; (bso#12802). + CTDB can spin hard on revoking readonly delegations if a node becomes disconnected; (bso#12697). + Printing a share mode entry with leases can crash in the ndr code; (bso#12793). + Fix flakey unit tests for eventd; (bso#12792). + CTDB daemon crashes if built with clang; (bso#12770). + smbcacls fails if no password is specified; (bso#12765). + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757). + samba-tool user syncpasswords doesn't trigger the script when a user gets removed; (bso#12767). + systemd: fix detection of libsystemd; (bso#12764). + Notify subsystem only maps first inotify mask to Windows notify filter; (bso#12760). + Allow passing trusted domain password as plain-text to PASSDB layer; (bso#12751). + Can't case-rename files with vfs_fruit; (bso#12749). + wrong sid->uid mapping for SIDs residing in sIDHistory; (bso#12702). + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562). + Ordering of notify responses broken; (bso#12756).- s3: libsmb: Fix error where short name length was read as 2 bytes, should be 1; (bso#11822); (bsc#1042419).- Revert explicit winbind %{version}-%{release} dependency. + The ABI has stabilized since (bsc#936909), so remove to fix cross-media dependencies; (bsc#1037899).- Fix CVE-2017-7494 remote code execution from a writable share; (bso#12780); (bsc#1038231).- Update to 4.6.3; (bsc#1036011) + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots from shares with GlusterFS backend; (bso#12743). + Fix for Solaris C compiler; (bso#12559). + s3: locking: Update oplock optimization for the leases era; (bso#12628). + Make the Solaris C compiler happy; (bso#12693). + s3: libgpo: Allow skipping GPO objects that don't have the expected LDAP attributes; (bso#12695). + Fix buffer overflow caused by wrong use of getgroups; (bso#12747). + lib: debug: Avoid negative array access; (bso#12746). + cleanupdb: Fix a memory read error; (bso#12748). + streams_xattr and kernel oplocks results in NT_STATUS_NETWORK_BUSY; (bso#7537). + winbindd: idmap_autorid allocates ids for unknown SIDs from other backends; (bso#11961). + vfs_fruit: Resource fork open request with flags=O_CREAT|O_RDONLY; (bso#12565). + manpages/vfs_fruit: Document global options; (bso#12615). + lib/pthreadpool: Fix a memory leak; (bso#12624). + Lookup-domain for well-known SIDs on a DC; (bso#12727). + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728). + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729). + credentials_krb5: use gss_acquire_cred for client-side GSSAPI use case; (bso#12611). + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690). + ctdb-readonly: Avoid a tight loop waiting for revoke to complete; (bso#12697). + ctdb_event monitor command crashes if event is not specified; (bso#12723). + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733). + smbd: Fix smb1 findfirst with DFS; (bso#12558). + smbd: Do an early exit on negprot failure; (bso#12610). + winbindd: Fix substitution for 'template homedir'; (bso#12699). + s4:kdc: Disable principal based autodetected referral detection; (bso#12554). + idmap_autorid: Allocate new domain range if the callers knows the sid is valid; (bso#12613). + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724). + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for trusted domain; (bso#12725). + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731). + winbindd: Fix password policy for pam authentication; (bso#12725). + s3:gse: Correctly handle external trusts with MIT; (bso#12554). + auth/credentials: Always set the realm if we set the principal from the ccache; (bso#12611). + replace: Include sysmacros.h; (bso#12686). + s3:vfs_expand_msdfs: Do not open the remote address as a file; (bso#12687). + s3:libsmb: Only print error message if kerberos use is forced; (bso#12704). + winbindd: Child process crashes when kerberos-authenticating a user with wrong password; (bso#12708). + vfs_fruit: Office document opens as read-only on macOS due to CNID semantics; (bso#12715). + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is fragmented; (bso#12737).- Generate and update vendor-files tarball from Git + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).- Generate source tarball directly from Git using OBS tar_scm + use version string derived from parent Git tag and commit hash - remove obsolete vendor-files/tools/package-data version ID + explicitly generate ctdb manpages, needed without "make dist"- Update to 4.6.2 + remove bso#12721 patches now upstream- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622). + x86-64 and aarch64- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).- Build and install the html man pages (bsc#1021907).- Fix CVE-2017-2619 regression with "follow symlinks = no"; (bso#12721).- Update to 4.6.1 + symlink race permits opening files outside share directory; CVE-2017-2619; (bso#12496); (bsc#1027147) + testparm checks for valid idmap parameters + add new krb client encryption types + support for printer driver upload from windows 10 + inherit owner = 'unix only' for improved quota support + improved CTDB event support + new primary group support for idmap_ad + idmap_hash deprecated + mvxattr added to recursively rename extended attributes- Remove chkconfig requirements for systemd systems- Don't call insserv if systemd is used- Fix check if we need to require insserv- async_req: make async_connect_send() "reentrant"; (bso#12105); (bsc#1024416).- Force usage of ncurses6-config thru NCURSES_CONFIG env var; (bsc#1023847).- add missing patch for libnss_wins segfault; (bsc#995730).- Fix vfs_ceph builds against recent Ceph versions; (bsc#1021933).- Document "winbind: ignore domains" parameter; (bsc#1019416).- Add base Samba dependency to samba-ceph package.- Update to 4.5.3 + Heap-based Buffer Overflow Remote Code Execution Vulnerability; CVE-2016-2123; (bso#12409); (bsc#1014437). + Don't send delegated credentials to all servers; CVE-2016-2125; (bso#12445); (bsc#1014441). + denial of service due to a client triggered crash in the winbindd parent process; CVE-2016-2126; (bso#12446); (bsc#1014442). - 4.5.1 and 4.5.2 updates + various streams vfs fixes + various printing fixes + ntlm_auth: do not map explicitly empty domain + various stability fixes in smbd + match file compression ReFS behavior- Add missing ldb module directory; (bnc#1012092).- s3/client: obey 'disable netbios' smb.conf param, don't connect via NBT port; (bsc#1009085); (bso#12418).- Include vfstest in samba-test; (bsc#1001203).- s3/winbindd: using default domain with user@domain.com format fails; (bsc#997833).- Fix segfault in libnss_wins; (bso#12277); (bso#12269); (bsc#995730).- Update to 4.5.0 + NTLM1 Authentication disabled by default + SMB2.1 leases enabled by default + Support for OFD locks + ctdb tool rewritten + Added shadow copy snapshot prefix parameter- Fix illegal memory access after memory has been deleted; (bso#11836); (bsc#975299).- Prevent core, make sure response->extra_data.data is always cleared out; (bsc#993692).- Don't package man pages for VFS modules that aren't built; (boo#993707).- Fix population of ctdb sysconfig after source merge; (bsc#981566).- Enable vfs_ceph builds for Factory (x86-64) + Package as samba-ceph to avoid Ceph dependency in base package.- Update to 4.4.5 + Prevent client-side SMB2 signing downgrade; CVE-2016-2119; (bso#11860); (bsc#986869).- Remove obsolete syslog.target; (bsc#983938).- Honor smb.conf socket options in winbind; (bsc#975131).- Don't use htons() with IP_PROTO_RAW; (bso#11705); (bsc#969522).- Update to 4.4.4 + SMB3 multichannel: Add implementation of missing channel sequence number verification; (bso#11809). + smbd:close: Only remove kernel share modes if they had been taken at open; (bso#11919). + notifyd: Prevent NULL deref segfault in notifyd_peer_destructor; (bso#11930). + s3:rpcclient: Make '--pw-nt-hash' option work; (bso#10796). + Fix case sensitivity issues over SMB2 or above; (bso#11438). + s3:smbd: Fix anonymous authentication if signing is mandatory. (bso#11910) + Fix NTLM Authentication issue with squid; (bso#11914). + pdb: Fix segfault in pdb_ldap for missing gecos; (bso#11530). + Fix memory leak in share mode locking; (bso#11934).- Update to 4.4.3 + Various post-badlock regressions; (bso#11841); (bso#11850); (bso#11858); (bso#11870); (bso#11872). + Only allow idmap_hash for default idmap config (bso#11786). + smbd: Avoid large reads beyond EOF; (bso#11878). + vfs_acl_common: Avoid setting POSIX ACLs if "ignore system acls" is set; (bso#11806). + libads: Record session expiry for spnego sasl binds; (bso#11852).- Fix NTLMSSP regressions caused by previous CVE fixes; (bso#11849); (bsc#975962); (bsc#979268), (bsc#977669).- Revert shared library packaging to comply with SLPP- Update to 4.4.2 + A man-in-the-middle can downgrade NTLMSSP authentication; CVE-2016-2110; (bso#11688); (bsc#973031). + Domain controller netlogon member computer can be spoofed; CVE-2016-2111; (bso#11749); (bsc#973032). + LDAP conenctions vulnerable to downgrade and MITM attack; CVE-2016-2112; (bso#11644); (bsc#973033). + TLS certificate validation missing; CVE-2016-2113; (bso#11752); (bsc#973034). + Named pipe IPC vulnerable to MITM attacks; CVE-2016-2115; (bso#11756); (bsc#973036). + "Badlock" DCERPC impersonation of authenticated account possible; CVE-2016-2118; (bso#11804); (bsc#971965). + DCERPC server and client vulnerable to DOS and MITM attacks; CVE-2015-5370; (bso#11344); (bsc#936862).- Fix samba.tests.messaging test and prevent potential tdb corruption by removing obsolete now invalid tdb_close call; (bsc#974629).- Obsolete libsmbclient from libsmbclient0 while not providing it; (bsc#972197).- Update to 4.4.0. + Read of uninitialized memory DNS TXT handling; (bso#11128); (bso#11686); CVE-2016-0771. + Getting and setting Windows ACLs on symlinks can change permissions on link target; (bso#11648); CVE-2015-7560. + Sockets with htons(IPPROTO_RAW); (bso#11705); CVE-2015-8543. + s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystem with no ACL support; (bso#10489). + docs: Add example for domain logins to smbspool man page; (bso#11643). + smbd: Show correct disk size for different quota and dfree block sizes; (bso#11681). + docs: Add smbspool_krb5_wrapper manpage; (bso#11690). + winbindd: Return trust parameters when listing trusts; (bso#11691). + ctdb: Do not provide a useless pkgconfig file for ctdb; (bso#11696). + Crypto.Cipher.ARC4 is not available on some platforms, fallback to M2Crypto.RC4.RC4 then; (bso#11699). + s3:utils/smbget: Set default blocksize; (bso#11700). + Streamline 'smbget' options with the rest of the Samba utils; (bso#11700). + s3:clispnego: Fix confusing warning in spnego_gen_krb5_wrap(); (bso#11702). + s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703). + loadparm: Fix memory leak issue; (bso#11708). + lib/tsocket: Work around sockets not supporting FIONREAD; (bso#11714). + s3:vfs:glusterfs: Fix build after quota changes; (bso#11715). + ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ..."; (bso#11719). + lib:socket: Fix CID 1350010: Integer OVERFLOW_BEFORE_WIDEN; (bso#11723). + smbd: Fix CID 1351215 Improper use of negative value; (bso#11724). + smbd: Fix CID 1351216 Dereference null return value; (bso#11725). + s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new file; (bso#11727). + docs: Add manpage for cifsdd; (bso#11730). + param: Fix str_list_v3 to accept ; again; (bso#11732). + lib/socket: Fix improper use of default interface speed; (bso#11734). + lib:socket: Fix CID 1350009: Fix illegal memory accesses (BUFFER_SIZE_WARNING); (bso#11735). + libcli: Fix debug message, print sid string for new_ace trustee; (bso#11738). + Fix installation path of Samba helper binaries; (bso#11739). + Fix memory leak in loadparm; (bso#11740). + tevent: version 0.9.28: Fix memory leak when old signal action restored; (bso#11742). + smbd: Ignore SVHDX create context; (bso#11753). + Fix net join; (bso#11755). + s3:libads: setup the msDS-SupportedEncryptionTypes attribute on ldap_add; (bso#11755). + passdb: Add linefeed to debug message; (bso#11763). + s3:utils/smbget: Fix option parsing; (bso#11767). + libnet: Make Kerberos domain join site-aware; (bso#11769). + Reset TCP Connections during IP failover; (bso#11770). + ldb: Version 1.1.26; (bso#11772). + s3:smbd: Add negprot remote arch detection for OSX; (bso#11773). + vfs_glusterfs: Fix use after free in AIO callback; (bso#11774). + mkdir can return ACCESS_DENIED incorrectly on create race; (bso#11780). + "trustdom_list_done: Got invalid trustdom response" message should be avoided; (bso#11782). + Mismatch between local and remote attribute ids lets replication fail with custom schema; (bso#11783). + Quota is not supported on Solaris 10; (bso#11788). + Talloc: Version 2.1.6; (bso#11789). + smbd: Enable multi-channel if 'server multi channel support = yes' in the config; (bso#11796). + build: Fix build when '--without-quota' specified; (bso#11798). + lib/socket/interfaces: Fix some uninitialied bytes; (bso#11802). + Access based share enum: handle permission set in configuration files; (bso#8093). + See also WHATSNEW.txt from the samba-doc package.- Update to 4.3.6. + Getting and setting Windows ACLs on symlinks can change permissions on link target; CVE-2015-7560; (bso#11648); (bsc#968222). + Fix Out-of-bounds read in internal DNS server; CVE-2016-0771; (bso#11128); (bso#11686); (bsc#968223).- Upgrade on-disk FSRVP server state to new version; (bsc#924519).- Only obsolete but do not provide gplv2/3 package names; (bsc#968973).- Relocate existing lock files to /var/lib/samba/lock; (bsc#968963).- Obsolete no longer existing samba-32bit package; (bsc#967625).- Update to 4.3.5. + s3:utils/smbget: Fix recursive download; (bso#6482). + s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystemi with no ACL support; (bso#10489). + s3:smbd/oplock: Obey kernel oplock setting when releasing oplocks; (bso#11400). + vfs_shadow_copy2: Fix case where snapshots are outside the share; (bso#11580). + smbclient: Query disk usage relative to current directory; (bso#11662). + winbindd: Handle expired sessions correctly; (bso#11670). + smbd: Show correct disk size for different quota and dfree block sizes; (bso#11681). + smbcacls: Fix uninitialized variable; (bso#11682). + s3:smbd: Ignore initial allocation size for directory creation; (bso#11684). + s3-client: Add a KRB5 wrapper for smbspool; (bso#11690). + s3-parm: Clean up defaults when removing global parameters; (bso#11693). + Use M2Crypto.RC4.RC4 on platforms without Crypto.Cipher.ARC4; (bso#11699). + s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703). + ctdb: Remove error messages after kernel security update; CVE-2015-8543; (bso#11705). + loadparm: Fix memory leak issue; (bso#11708). + lib/tsocket: Work around sockets not supporting FIONREAD; (bso#11714). + ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ..."; (bso#11719). + s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new file; (bso#11727). + param: Fix str_list_v3 to accept ";" again; (bso#11732).- Shift samba-client sysconfig data into samba and samba-winbind; (bsc#947361).- Simplify shared library packaging; (bsc#966956).- Enable clustering (CTDB) support; (bsc#966271).- s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703); (bsc#964023).- Add quotes around path of update-apparmor-samba-profile; (bnc#962177).- Remove autoconf build-time requirement.- Update to 4.3.4. + vfs_fruit: Enable POSIX directory rename semantics; (bso#11065). + Crash: Bad talloc magic value - access after free; (bso#11394). + Copying files with vfs_fruit fails when using vfs_streams_xattr without stream prefix and type suffix; (bso#11466). + samba-tool: Fix uncaught exception if no fSMORoleOwner attribute is given; (bso#11613). + Fix a typo in the smb.conf manpage, explanation of idmap config; (bso#11619). + Correctly initialize the list head when keeping a list of primary followed by DFS connections; (bso#11624). + Reduce the memory footprint of empty string options; (bso#11625). + lib/async_req: Do not install async_connect_send_test; (bso#11639). + Fix typos in man vfs_gpfs; (bso#11641). + Make "hide dot files" option work with "store dos attributes = yes"; (bso#11645). + Fix a corner case of the symlink verification; (bso#11647); (bnc#960249). + Do not disable "store dos attributes" on-the-fly; (bso#11649). + Update lastLogon and lastLogonTimestamp; (bso#11659).- Prevent access denied if the share path is "/"; (bso#11647); (bnc#960249).- Update to 4.3.3. + Malicious request can cause Samba LDAP server to hang, spinning using CPU; CVE-2015-3223; (bso#11325); (bnc#958581). + Remote read memory exploit in LDB; CVE-2015-5330; (bso#11599); (bnc#958586). + Insufficient symlink verification (file access outside the share); CVE-2015-5252; (bso#11395); (bnc#958582). + No man in the middle protection when forcing smb encryption on the client side; CVE-2015-5296; (bso#11536); (bnc#958584). + Currently the snapshot browsing is not secure thru windows previous version (shadow_copy2); CVE-2015-5299; (bso#11529); (bnc#958583). + Fix Microsoft MS15-096 to prevent machine accounts from being changed into user accounts; CVE-2015-8467; (bso#11552); (bnc#958585).- Update to 4.3.2. + vfs_gpfs: Re-enable share modes; (bso#11243). + dcerpc.idl: Accept invalid dcerpc_bind_nak pdus; (bso#11327). + s3-smbd: Fix old DOS client doing wildcard delete - gives an attribute type of zero; (bso#11452). + Add libreplace dependency to texpect, fixes a linking error on Solaris; (bso#11511). + s4: Fix linking of 'smbtorture' on Solaris; (bso#11512). + s4:lib/messaging: Use correct path for names.tdb; (bso#11562). + Fix segfault of 'net ads (join|leave) -S INVALID' with nss_wins; (bso#11563). + async_req: Fix non-blocking connect(); (bso#11564). + auth: gensec: Fix a memory leak; (bso#11565). + lib: util: Make non-critical message a warning; (bso#11566). + Fix winbindd crashes with samlogon for trusted domain user; (bso#11569); (bnc#949022). + smbd: Send SMB2 oplock breaks unencrypted; (bso#11570). + ctdb: Open the RO tracking db with perms 0600 instead of 0000; (bso#11577). + s3:smb2_server: Make the logic of SMB2_CANCEL DLIST_REMOVE() clearer; (bso#11581). + s3-smbd: Fix use after issue in smbd_smb2_request_dispatch(); (bso#11581). + manpage: Correct small typo error; (bso#11584). + s3: smbd: If EAs are turned off on a share don't allow an SMB2 create containing them; (bso#11589). + Backport some valgrind fixes from upstream master; (bso#11597). + auth: Consistent handling of well-known alias as primary gid; (bso#11608). + winbind: Fix crash on invalid idmap configs; (bso#11612). + s3: smbd: have_file_open_below() fails to enumerate open files below an open directory handle; (bso#11615). + Changing log level of two entries to DBG_NOTICE; (bso#9912).- Ensure samlogon fallback requests are rerouted after kerberos failure; (bnc#953382); (bnc#953972).- Ensure to link with --as-needed flag by removing SUSE_ASNEEDED=0. - Always use the default optimization even on pre-9.2 systems.- Remove redundant configure options while adding with-relro.- Relocate the lockdir to the /var/lib/samba/lock directory.- Cleanup and enhance the pidl sub package.- Require renamed python-ldb-devel and python-talloc-devel at build-time. - Requires python-ldb and python-talloc from the python subpackage.- Update to 4.3.1. + s3: smbd: Fix our access-based enumeration on "hide unreadable" to match Windows; (bso#10252). + nss_winbind: Fix hang on Solaris on big groups; (bso#10365). + smbd: Fix file name buflen and padding in notify repsonse; (bso#10634). + kerberos: Make sure we only use prompter type when available; winbind: Fix 100% loop; (bso#11038). + source3/lib/msghdr.c: Fix compiling error on Solaris; (bso#11053). + s3:ctdbd_conn: make sure we destroy tevent_fd before closing the socket; (bso#11316). + s3: smbd: Fix mkdir race condition; (bso#11486). + pam_winbind: Fix a segfault if initialization fails; (bso#11502). + s3: dfs: Fix a crash when the dfs targets are disabled; (bso#11509). + s4:lib/messaging: Use 'msg.lock' and 'msg.sock' for messaging related subdirs; (bso#11515). + s3: smbd: Fix opening/creating :stream files on the root share directory; (bso#11522). + lib/param: Fix hiding of FLAG_SYNONYM values; (bso#11526). + net: Fix a crash with 'net ads keytab create'; (bso#11528). + s3: smbd: Fix a crash in unix_convert(); (bso#11535). + s3: smbd: Fix NULL pointer bug introduced by previous 'raw' stream fix (bso#11522); (bso#11535). + vfs_fruit: Return value of ad_pack in vfs_fruit.c; (bso#11543). + vfs_commit: set the fd on open before calling SMB_VFS_FSTAT; (bso#11547). + s3:locking: Initialize lease pointer in share_mode_traverse_fn(); (bso#11549). + s3:smbstatus: Add stream name to share_entry_forall(); (bso#11550). + s3:lib: Validate domain name in lookup_wellknown_name(); (bso#11555). + s3: lsa: lookup_name() logic for unqualified (no DOMAIN component) names is incorrect; (bso#11555).- Fix 100% CPU in winbindd when logging in with "user must change password on next logon"; (bso#11038).- Relocate the tmpfiles.d directory to the client package; (bnc#947552).- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf instead; (bnc#942716).- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).- Package /var/lib/samba/msg with 0755 permissions; (bso#11515); (bnc#945502).- Require to install libfam0-gamin from samba-libs on post-12.1 and pre-13.15 systems; (bnc#945013).- Update to 4.3.0. + Samba "map to guest = Bad uid" doesn't work; (bso#9862). + revert LDAP extended rule 1.2.840.113556.1.4.1941 LDAP_MATCHING_RULE_IN_CHAIN changes; (bso#10493). + No objectClass found in replPropertyMetaData on ordinary objects (non-deleted); (bso#10973). + Stream names with colon don't work with fruit:encoding = native; (bso#11278). + NetApp joined to a Samba/ADDC cannot resolve SIDs; (bso#11291). + tevent_fd needs to be destroyed before closing the fd; (bso#11316). + "force group" with local group not working; (bso#11320). + strsep is not available on Solaris; (bso#11359). + smbtorture does not build when configured --with-system-mitkrb5; (bso#11411). + Build with GPFS support is broken; (bso#11421). + Build broken with --disable-python; (bso#11424). + net share allowedusers crashes; (bso#11426). + nmbd incorrectly matches netbios names as own name; (bso#11427). + Python bindings don't check integer types; (bso#11429). + Python bindings don't check array sizes; (bso#11430). + CTDB's eventscript error handling is broken; (bso#11431). + Fix crash in nested ctdb banning; (bso#11432). + Cannot build ctdbpmda; (bso#11434). + samba-tool uncaught exception error; (bso#11436). + Crash in notify_remove caused by change notify = no; (bso#11444). + Poor SMB3 encryption performance with AES-GCM; (bso#11451). + Poor SMB3 encryption performance with AES-GCM (part1); (bso#11451). + fix recursion problem in rep_strtoll in lib/replace/replace.c; (bso#11455). + --bundled-libraries=!ldb,!pyldb,!pyldb-util doesn't disable ldb build and install; (bso#11458). + xid2sid gives inconsistent results; (bso#11464). + ctdb: Fix the build on FreeBSD 10.1; (bso#11465). + Handling of 0 byte resource fork stream; (bso#11467). + AD samr GetGroupsForUser fails for users with "()" in their name; (bso#11488).- Configure with --bundled-libraries=NONE; (bso#11458).- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).- Remove libiniparser-devel build-time requirement.- Update to 4.2.3. + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780). + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924). + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991). + Logon via MS Remote Desktop hangs; (bso#11061). + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068). + tevent: Add a note to tevent_add_fd(); (bso#11141). + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170). + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217). + smbd: Fix a use-after-free; (bso#11218); (bnc#919309). + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces; (bso#11245). + s3:smb2: Add padding to last command in compound requests; (bso#11277). + Add IPv6 support to ADS client side LDAP connects; (bso#11281). + Add IPv6 support for determining FQDN during ADS join; (bso#11282). + s3: IPv6 enabled DNS connections for ADS client; (bso#11283). + Fix invalid write in ctdb_lock_context_destructor; (bso#11293). + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295). + vfs_fruit: Add option "veto_appledouble"; (bso#11305). + tstream: Make socketpair nonblocking; (bso#11312). + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313). + Group creation: Add msSFU30Name only when --nis-domain was given; (bso#11315). + tevent_fd needs to be destroyed before closing the fd; (bso#11316). + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared"; (bso#11319). + smbd/trans2: Add a useful diagnostic for files with bad encoding; (bso#11323). + Change sharesec output back to previous format; (bso#11324). + Robust mutex support broken in 1.3.5; (bso#11326). + Kerberos auth info3 should contain resource group ids available from pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info exists in PAC; (bso#11328); (bnc#912457). + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329). + tevent: Fix CID 1035381 Unchecked return value; (bso#11330). + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331). + s3: smbd: Use separate flag to track become_root()/unbecome_root() state; (bso#11339). + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342). + pidl: Make the compilation of PIDL producing the same results if the content hasn't change; (bso#11356). + winbindd: Disconnect child process if request is cancelled at main process; (bso#11358). + vfs_fruit: Check offset and length for AFP_AfpInfo read requests; (bso#11363). + docs: Overhaul the description of "smb encrypt" to include SMB3 encryption; (bso#11366). + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server(); (bso#11367). + ncacn_http: Fix GNUism; (bso#11371).- Disable rpath usage; (bnc#902421).- Make the winbind package depend on the matching libwbclient version and vice versa; (bnc#936909).- Backport changes to use resource group sids obtained from pac logon_info; (bso#11328); (bnc#912457).- Order winbind.service Before and Want nss-user-lookup target.- Remove fam-devel build-time dependency for post-6 RHEL systems.- Update to 4.2.2. + s3:smbXsrv: refactor duplicate code into smbXsrv_session_clear_and_logoff(); (bso#11182). + gencache: don't fail gencache_stabilize if there were records to delete; (bso#11260). + s3: libsmbclient: After getting attribute server, ensure main srv pointer is still valid; (bso#11186). + s4: rpc: Refactor dcesrv_alter() function into setup and send steps; (bso#11236). + s3: smbd: Incorrect file size returned in the response of "FILE_SUPERSEDE Create"; (bso#11240). + Mangled names do not work with acl_xattr; (bso#11249). + nmbd rewrites browse.dat when not required; (bso#11254). + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff; (bso#11213). + s3:smbd: Add missing tevent_req_nterror; (bso#11224). + vfs: kernel_flock and named streams; (bso#11243). + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244). + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses are used; (bso#11284). + ctdb: check for talloc_asprintf() failure; (bso#11201). + spoolss: purge the printer name cache on name change; (bso#11210); (bnc#901813). + CTDB statd-callout does not scale; (bso#11204). + vfs_fruit: also map characters below 0x20; (bso#11221). + ctdb: Coverity fix for CID 1291643; (bso#11201). + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225). + Fix terminate connection behavior for asynchronous endpoint with PUSH notification flavors; (bso#11226). + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007). + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201). + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the directory is deleted; (bso#11257). + s3:winbindd: make sure we remove pending io requests before closing client sockets; (bso#11141); (bnc#931854). + Fix panic triggered by smbd_smb2_request_notify_done() -> smbXsrv_session_find_channel() in smbd; (bso#11182). + 'sharesec' output no longer matches input format; (bso#11237). + waf: Fix systemd detection; (bso#11200). + CTDB: Fix portability issues; (bso#11202). + CTDB: Fix some IPv6-related issues; (bso#11203). + CTDB statd-callout does not scale; (bso#11204). + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you enter invalid values; (bso#11234). + libads: record service ticket endtime for sealed ldap connections; (bso#11267). + lib/util: Include DEBUG macro in internal header files before samba_util.h; (bso#11033).- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).- Remove the independently built libraries ldb, talloc, tdn, and tevent and the post-10.3 renamed libsmbclient from baselibs.conf.- Drop redundant doc attribute from man pages.- Update to 4.2.1. + s3:winbind:grent: Don't stop group enumeration when a group has no gid; (bso#8905). + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791). + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with servers that don't send the 2 unused fields; (bso#10016). + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476). + waf: Fix the build on openbsd; (bso#10476). + s3: client: "client use spnego principal = yes" code checks wrong name; (bso#10888). + spoolss: Retrieve published printer GUID if not in registry; (bso#11018). + s3: lib: libsmbclient: If reusing a server struct, check every cli->timout miliseconds if it's still valid before use; (bso#11079). + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125). + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135). + replace: Remove superfluous check for gcrypt header; (bso#11135). + Backport subunit changes; (bso#11137). + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with implementation; (bso#11140). + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143). + talloc: Version 2.1.2; (bso#11144). + Update libwbclient version to 0.12; (bso#11149). + brlock: Use 0 instead of empty initializer list; (bso#11153). + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164). + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169); (bnc#913304). + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev fails in the SMB1 case; (bso#11173). + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174). + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175). + s3: libsmbclient: Add missing talloc stackframe; (bso#11177). + s4-process_model: Do not close random fds while forking; (bso#11180). + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).- Prevent samba package updates from disabling samba kerberos printing.- Add sparse file support for samba; (fate#318424).- Purge printer name cache on spoolss SetPrinter change; (bso#11210); (bnc#901813).- Correctly retain errno from Btrfs snapshot ioctls; (bnc#923374).- Simplify libxslt build requirement and README.SUSE install. - Remove no longer required cleanup steps while populating the build root.- Remove deprecated base_rid example from idmap_rid manpage; (bso#11169); (bnc#913304).- Update to 4.2.0. + smbd: Stop using vfs_Chdir after SMB_VFS_DISCONNECT; (bso#1115). + pam_winbind: fix warn_pwd_expire implementation; (bso#9056). + nsswitch: Fix soname of linux nss_*.so.2 modules; (bso#9299). + Make 'profiles' work again; (bso#9629). + s3:smb2_server: protect against integer wrap with "smb2 max credits = 65535"; (bso#9702). + Make validate_ldb of String(Generalized-Time) accept millisecond format ".000Z"; (bso#9810). + Use -R linker flag on Solaris, not -rpath; (bso#10112). + vfs: Add glusterfs manpage; (bso#10240). + Make 'smbclient' use cached creds; (bso#10279). + pdb: Fix build issues with shared modules; (bso#10355). + s4-dns: Add support for BIND 9.10; (bso#10620). + idmap: Return the correct id type to *id_to_sid methods; (bso#10720). + printing/cups: Pack requested-attributes with IPP_TAG_KEYWORD; (bso#10808). + Don't build vfs_snapper on FreeBSD; (bso#10834). + nss_winbind: Add getgroupmembership for FreeBSD; (bso#10835). + idmap_rfc2307: Fix a crash after connection problem to DC; (bso#10837). + s3: smb2cli: query info return length check was reversed; (bso#10848). + s3: lib, s3: modules: Fix compilation on Solaris; (bso#10849). + lib: uid_wrapper: Fix setgroups and syscall detection on a system without native uid_wrapper library; (bso#10851). + winbind3: Fix pwent variable substitution; (bso#10852). + Improve samba-regedit; (bso#10859). + registry: Don't leave dangling transactions; (bso#10860). + Fix build of socket_wrapper on systems without SO_PROTOCOL; (bso#10861). + build: Do not install 'texpect' binary anymore; (bso#10862). + Fix testparm to show hidden share defaults; (bso#10864). + libcli/smb: Fix smb2cli_validate_negotiate_info with min=PROTOCOL_NT1 max=PROTOCOL_SMB2_02; (bso#10866). + Integrate CTDB into top-level Samba build; (bso#10892). + samba-tool group add: Add option '--nis-domain' and '--gid'; (bso#10895). + s3-nmbd: Fix netbios name truncation; (bso#10896). + spoolss: Fix handling of bad EnumJobs levels; (bso#10898). + Fix smbclient loops doing a directory listing against Mac OS X 10 server with a non-wildcard path; (bso#10904). + Fix print job enumeration; (bso#10905); (bnc#898031). + samba-tool: Create NIS enabled users and unixHomeDirectory attribute; (bso#10909). + Add support for SMB2 leases; (bso#10911). + btrfs: Don't leak opened directory handle; (bso#10918). + s3: nmbd: Ensure NetBIOS names are only 15 characters stored; (bso#10920). + s3:smbd: Fix file corruption using "write cache size != 0"; (bso#10921). + pdb_tdb: Fix a TALLOC/SAFE_FREE mixup; (bso#10932). + s3-keytab: fix keytab array NULL termination; (bso#10933). + s3:passdb: fix logic in pdb_set_pw_history(); (bso#10940). + Cleanup add_string_to_array and usage; (bso#10942). + dbwrap_ctdb: Pass on mutex flags to tdb_open; (bso#10942). + Fix RootDSE search with extended dn control; (bso#10949). + Fix 'samba-tool dns serverinfo ' for IPv6; (bso#10952). + libcli/smb: only force signing of smb2 session setups when binding a new session; (bso#10958). + s3-smbclient: Return success if we listed the shares; (bso#10960). + s3-smbstatus: Fix exit code of profile output; (bso#10961). + socket_wrapper: Add missing prototype check for eventfd; (bso#10965). + libcli: SMB2: Pure SMB2-only negprot fix to make us behave as a Windows client does; (bso#10966). + vfs_streams_xattr: Check stream type; (bso#10971). + s3: smbd: Fix *allocate* calls to follow POSIX error return convention; (bso#10982). + vfs_fruit: Add support for AAPL; (bso#10983). + Fix spoolss IDL response marshalling when returning error without clearing info; (bso#10984). + dsdb-samldb: Check for extended access rights before we allow changes to userAccountControl; (bso#10993); CVE-2014-8143; (boo#914279). + Fix IPv6 support in CTDB; (bso#10996). + ctdb-daemon: Use correct tdb flags when enabling robust mutex support; (bso#11000). + vfs_streams_xattr: Add missing call to SMB_VFS_NEXT_CONNECT; (bso#11005). + s3-util: Fix authentication with long hostnames; (bso#11008). + ctdb-build: Fix build without xsltproc; (bso#11014). + packaging: Include CTDB man pages in the tarball; (bso#11014). + pdb_get_trusteddom_pw() fails with non valid UTF16 random passwords; (bso#11016). + Make Sharepoint search show user documents; (bso#11022). + nss_wrapper: check for nss.h; (bso#11026). + Enable mutexes in gencache_notrans.tdb; (bso#11032). + tdb_wrap: Make mutexes easier to use; (bso#11032). + lib/util: Avoid collision which alread defined consumer DEBUG macro; (bso#11033). + winbind: Retry after SESSION_EXPIRED error in ping-dc; (bso#11034). + s3-libads: Fix a possible segfault in kerberos_fetch_pac(); (bso#11037). + vfs_fruit: Fix base_fsp name conversion; (bso#11039). + vfs_fruit: mmap under FreeBSD needs PROT_READ; (bso#11040). + Fix authentication using Kerberos (not AD); (bso#11044). + net: Fix sam addgroupmem; (bso#11051). + vfs_snapper: Correctly handles multi-byte DBus strings; (bso#11055); (bnc#913238). + cli_connect_nb_send: Don't segfault on host == NULL; (bso#11058). + utils: Fix 'net time' segfault; (bso#11058). + libsmb: Provide authinfo domain for encrypted session referrals; (bso#11059). + s3-pam_smbpass: Fix memory leak in pam_sm_authenticate(); (bso#11066). + vfs_glusterfs: Add comments to the pipe(2) code; (bso#11069). + vfs/glusterfs: Change xattr key to match gluster key; (bso#11069). + vfs_glusterfs: Implement AIO support; (bso#11069). + s3-vfs: Fix developer build of vfs_ceph module; (bso#11070). + s3: netlogon: Ensure we don't call talloc_free on an uninitialized pointer; (bso#11077); CVE-2015-0240; (bnc#917376). + vfs: Add a brief vfs_ceph manpage; (bso#11088). + s3: smbclient: Allinfo leaves the file handle open; (bso#11094). + Fix Win8.1 Credentials Manager issue after KB2992611 on Samba domain; (bso#11097). + debug: Set close-on-exec for the main log file FD; (bso#11100). + s3: smbd: leases - losen paranoia check. Stat opens can grant leases; (bso#11102). + s3: smbd: SMB2 close. If a file has delete on close, store the return info before deleting; (bso#11104). + doc:man:vfs_glusterfs: improve the configuration section; (bso#11117). + snprintf: Try to support %j; (bso#11119). + ctdb-io: Do not use sys_write to write to client sockets; (bso#11124). + doc-xml: Add 'sharesec' reference to 'access based share enum'; (bso#11127).- Update to 4.2.0rc5. + Ensure we don't call talloc_free on an uninitialized pointer; CVE-2015-0240; (bso#11077); (bnc#917376).- Fix usage of freed memory on server exit; (bso#11218); (bnc#919309).- Fix tdb_store_flag_to_ntdb() gcc5 build failure.- Fix vfs_snapper DBus string handling; (bso#11055); (bnc#913238).- Update to 4.1.16. + dsdb-samldb: Check for extended access rights before we allow changes to userAccountControl; (bso#10993); CVE-2014-8143; (boo#914279).- Adjust baselibs.conf due to libpdb0 package rename to libsamba-passdb0.- Fix libsmbclient DFS referral handling. + Reuse connections derived from DFS referrals; (bso#10123); (fate#316512). + Set domain/workgroup based on authentication callback value; (bso#11059).- Update to 4.2.0rc4. - Add libsamba-debug, libsocket-blocking, libsamba-cluster-support, and libhttp to the libs package; (boo#913547). - Rename libpdb packages to libsamba-passdb. - Drop libsmbsharemodes packages.- Enable avahi support on post-12.2 systems.- Update to 4.1.15. + pam_winbind: Fix warn_pwd_expire implementation; (bso#9056). + nsswitch: Fix soname of linux nss_*.so.2 modules; (bso#9299). + Fix profiles tool; (bso#9629). + s3-lib: Do not require a password with --use-ccache; (bso#10279). + s4:dsdb/rootdse: Expand extended dn values with the AS_SYSTEM control; (bso#10949). + s4-rpc: dnsserver: Fix enumeration of IPv4 and IPv6 addresses; (bso#10952). + s3:smb2_server: Allow reauthentication without signing; (bso#10958). + s3-smbclient: Return success if we listed the shares; (bso#10960). + s3-smbstatus: Fix exit code of profile output; (bso#10961). + libcli: SMB2: Pure SMB2-only negprot fix to make us behave as a Windows client does; (bso#10966). + s3: smbd/modules: Fix *allocate* calls to follow POSIX error return convention; (bso#10982). + Fix 'domain join' by adding 'drsuapi.DsBindInfoFallBack' attribute 'supported_extensions'; (bso#11006). + idl:drsuapi: Manage all possible lengths of drsuapi_DsBindInfo; (bso#11006). + winbind: Retry LogonControl RPC in ping-dc after session expiration; (bso#11034).- yast2-samba-client should be able to specify osName and osVer on AD domain join; (bnc#873922).- Lookup FSRVP share snums at runtime rather than storing them persistently; (bnc#908627).- Specify soft dependency for network-online.target in Winbind systemd service file; (bnc#889175).- Fix spoolss error response marshalling; (bso#10984).- Update to 4.1.14. + pidl/wscript: Remove --with-perl-* options; revert buildtools/wafadmin/ Tools/perl.py back to upstream state; (bso#10472). + s4-dns: Add support for BIND 9.10; (bso#10620). + nmbd fails to accept "--piddir" option; (bso#10711). + nss_winbind: Add getgroupmembership for FreeBSD; (bso#10835). + S3: source3/smbd/process.c::srv_send_smb() returns true on the error path; (bso#10880). + vfs_glusterfs: Remove "integer fd" code and store the glfs pointers; (bso#10889). + s3-nmbd: Fix netbios name truncation; (bso#10896). + spoolss: Fix handling of bad EnumJobs levels; (bso#10898). + s3: libsmbclient-smb2. MacOSX 10 SMB2 server doesn't set STATUS_NO_MORE_FILES when handed a non-wildcard path; (bso#10904). + spoolss: Fix jobid in level 3 EnumJobs response; (bso#10905). + s3: nmbd: Ensure NetBIOS names are only 15 characters stored; (bso#10920). + s3:smbd: Fix file corruption using "write cache size != 0"; (bso#10921). + pdb_tdb: Fix a TALLOC/SAFE_FREE mixup; (bso#10932). + s3-keytab: Fix keytab array NULL termination; (bso#10933). + Cleanup add_string_to_array and usage; (bso#10942).- Remove and cleanup shares and registry state associated with externally deleted snaphots exposed as shadow copies; (bnc#876312).- Use the upstream tar ball, as signature verification is now able to handle compressed archives.- Fix leak when closing file descriptor returned from dirfd; (bso#10918).- Fix spoolss EnumJobs and GetJob responses; (bso#10905); (bnc#898031). + Fix handling of bad EnumJobs levels; (bso#10898).- Remove dependency on gpg-offline as signature checking is implemented in the source validator.- Update to 4.1.13. + s3-libnet: Add libnet_join_get_machine_spns(); (bso#9984). + s3-libnet: Make sure we do not overwrite precreated SPNs; (bso#9984). + s3-libads: Add all machine account principals to the keytab; (bso#9985). + s3: winbindd: Old NT Domain code sets struct winbind_domain->alt_name to be NULL. Ensure this is safe with modern AD-DCs; (bso#10717). + Fix unstrcpy; (bso#10735). + pthreadpool: Slightly serialize jobs; (bso#10779). + s3: smbd: streams - Ensure share mode validation ignores internal opens (op_mid == 0); (bso#10797). + s3: smbd:open_file: Open logic fix; Use a more natural check; (bso#10809). + vfs_media_harmony: Fix a crash bug; (bso#10813). + docs: Mention incompatibility between kernel oplocks and streams_xattr; (bso#10814). + nmbd: Send waiting status to systemd; (bso#10816). + libcli: Fix a segfault calling smbXcli_req_set_pending() on NULL; (bso#10817). + nsswitch: Skip groups we were not able to map; (bso#10824). + s3-winbindd: Use correct realm for trusted domains in idmap child; (bso#10826). + s3: nmbd: Ensure the main nmbd process doesn't create zombies; (bso#10830). + s3: lib: Signal handling - ensure smbrun and change password code save and restore existing SIGCHLD handlers; (bso#10831). + idmap_rfc2307: Fix a crash after connection problem to DC; (bso#10837). + s3-winbindd: Do not use domain SID from LookupSids for Sids2UnixIDs call; (bso#10838). + s3: smb2cli: Query info return length check was reversed; (bso#10848). + registry: Don't leave dangling transactions; (bso#10860).- Update to 4.2.0rc2./sbin/ldconfig/sbin/ldconfiglibdcerpc-binding0libdcerpc0libndr-krb5pac0libndr-nbt0libndr-standard0libndr0libndr1libndr2libnetapi0libsamba-credentials0libsamba-credentials1libsamba-errors0libsamba-hostconfig0libsamba-passdb0libsamba-util0libsamdb0libsmbclient0libsmbconf0libsmbldap0libsmbldap2libtevent-util0libwbclient0h02-armsrv3 1723200549  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuv4.19.7+git.357.1d7950ebd624.19.7+git.357.1d7950ebd624.19.7+git.357.1d7950ebd624.19.7+git.357.1d7950ebd624.19.7+git.357.1d7950ebd624.19.7+git.357.1d7950ebd624.19.7+git.357.1d7950ebd624.19.7+git.357.1d7950ebd624.19.7+git.357.1d7950ebd624.19.7+git.357.1d7950ebd624.19.7+git.357.1d7950ebd624.19.7+git.357.1d7950ebd624.19.7+git.357.1d7950ebd624.19.7+git.357.1d7950ebd624.19.7+git.357.1d7950ebd624.19.7+git.357.1d7950ebd624.19.7+git.357.1d7950ebd624.19.7+git.357.1d7950ebd624.19.7+git.357.1d7950ebd62-150600.3.3.24.19.7+git.357.1d7950ebd62-150600.3.3.24.19.7+git.357.1d7950ebd624.19.7+git.357.1d7950ebd624.19.7+git.357.1d7950ebd624.19.7+git.357.1d7950ebd624.19.7+git.357.1d7950ebd624.19.7+git.357.1d7950ebd624.19.7+git.357.1d7950ebd624.19.7+git.357.1d7950ebd624.19.7+git.357.1d7950ebd624.19.7+git.357.1d7950ebd624.19.7+git.357.1d7950ebd624.19.7+git.357.1d7950ebd624.19.7+git.357.1d7950ebd624.19.7+git.357.1d7950ebd624.19.7+git.357.1d7950ebd624.19.7+git.357.1d7950ebd624.19.7+git.357.1d7950ebd624.19.7+git.357.1d7950ebd624.19.7+git.357.1d7950ebd624.19.7+git.357.1d7950ebd624.19.7+git.357.1d7950ebd624.19.7+git.357.1d7950ebd62libdcerpc-binding.so.0libdcerpc-binding.so.0.0.1libdcerpc-server-core.so.0libdcerpc-server-core.so.0.0.1libdcerpc.so.0libdcerpc.so.0.0.1libndr-krb5pac.so.0libndr-krb5pac.so.0.0.1libndr-nbt.so.0libndr-nbt.so.0.0.1libndr-standard.so.0libndr-standard.so.0.0.1libndr.so.3libndr.so.3.0.1libnetapi.so.1libnetapi.so.1.0.0libsamba-credentials.so.1libsamba-credentials.so.1.0.0libsamba-errors.so.1libsamba-errors.so.1.0.0libsamba-hostconfig.so.0libsamba-hostconfig.so.0.0.1libsamba-passdb.so.0libsamba-passdb.so.0.28.0libsamba-util.so.0libsamba-util.so.0.0.1libsamdb.so.0libsamdb.so.0.0.1libsmbclient.so.0libsmbclient.so.0.7.0libsmbconf.so.0libsmbconf.so.0.0.1libsmbldap.so.2libsmbldap.so.2.1.0libtevent-util.so.0libtevent-util.so.0.0.1libwbclient.so.0libwbclient.so.0.16libCHARSET3-samba4.solibMESSAGING-SEND-samba4.solibMESSAGING-samba4.solibaddns-samba4.solibads-samba4.solibasn1util-samba4.solibauth-samba4.solibauthkrb5-samba4.solibcli-cldap-samba4.solibcli-ldap-common-samba4.solibcli-ldap-samba4.solibcli-nbt-samba4.solibcli-smb-common-samba4.solibcli-spoolss-samba4.solibcliauth-samba4.solibclidns-samba4.solibcluster-samba4.solibcmdline-contexts-samba4.solibcmdline-samba4.solibcommon-auth-samba4.solibdbwrap-samba4.solibdcerpc-pkt-auth-samba4.solibdcerpc-samba-samba4.solibdcerpc-samba4.solibevents-samba4.solibflag-mapping-samba4.solibgenrand-samba4.solibgensec-samba4.solibgpo-samba4.solibgse-samba4.solibhttp-samba4.solibinterfaces-samba4.solibiov-buf-samba4.solibkrb5samba-samba4.solibldbsamba-samba4.soliblibcli-lsa3-samba4.soliblibcli-netlogon3-samba4.soliblibsmb-samba4.solibmessages-dgm-samba4.solibmessages-util-samba4.solibmscat-samba4.solibmsghdr-samba4.solibmsrpc3-samba4.solibndr-samba-samba4.solibndr-samba4.solibnet-keytab-samba4.solibnetif-samba4.solibnpa-tstream-samba4.solibprinting-migrate-samba4.solibregistry-samba4.solibreplace-samba4.solibsamba-cluster-support-samba4.solibsamba-debug-samba4.solibsamba-modules-samba4.solibsamba-security-samba4.solibsamba-sockets-samba4.solibsamba3-util-samba4.solibsamdb-common-samba4.solibsecrets3-samba4.solibserver-id-db-samba4.solibserver-role-samba4.solibsmb-transport-samba4.solibsmbclient-raw-samba4.solibsmbd-base-samba4.solibsmbd-shim-samba4.solibsmbldaphelper-samba4.solibsocket-blocking-samba4.solibstable-sort-samba4.solibsys-rw-samba4.solibtalloc-report-printf-samba4.solibtdb-wrap-samba4.solibtime-basic-samba4.solibtrusts-util-samba4.solibutil-reg-samba4.solibutil-setid-samba4.solibutil-tdb-samba4.sopdbldapsam.sosmbpasswd.sotdbsam.so/usr/lib64//usr/lib64/samba//usr/lib64/samba/pdb/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:35188/SUSE_SLE-15-SP6_Update/5e5608c3682ad2bc92e419933b401d5a-samba.SUSE_SLE-15-SP6_Updatedrpmxz5aarch64-suse-linux  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=a64dd472a485552b0c8d72b871eb246b3400012f, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=3872ee37c3719aeec172ea77672e0dbeebba08d8, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=b5a5e87d75a901793a47eca80281535d53852c2a, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=183ec890c6ff7ba7a838834e15eaad86471acb89, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=bdc334845d6b2e7ee407cc07e935df192791c2ff, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=dd2a050f1ab349c7f7cc5b3c7a386df0ee826f34, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=bdbf4d5a3e78a90611feed91159b555641947e2d, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=78aa51127f3187346396812b9106c3afbbf1589b, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=c3f217148fd0a28aea5ad248f5a42082d456e10a, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=d2b4310eaab99f3f55da2f23e795ec5063e7578b, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=5309bfe53fcb83a8c705c6f006a0c6f4fbe6b96d, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=a7e17b2ee52aba3141f8a1c5a66d6adf44c52e5e, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=32497f4a88f74969beffc3338e319c2789e4382e, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=9c52953a7430d1bab25263270ec03df351de40a3, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=4908f9b36431a9cbdfc23a4d9b07473ccd1fc140, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=cda8c4af004b148d68f2ce32126f618ff595b4cc, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=b8b8d916196fcc85ea4b64edacc5447a8a987de2, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=7df066e811470d9dec2fb90c24a930507a6ff79a, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=12c1e66fc92ccc139f645e635f0d9258a0a95b00, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=aac99ccf3e0ea67ed027d35b700133294a003164, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=d3875b20097fd5eac300100e7d63ea3e93edfc40, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=194be04ddea3719106035cb588f784c28ae723bf, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=09c28a3762d5331331d9bf8e765a6633d8413a7c, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=24a2717ff98b2024dfb50674db37672228e2aca0, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=4cdf5264753caff27fa741396ba79366333f71d0, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=8d83b4c8450f761b13eab97e95a0ae5f23f39de1, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=45bd11e1c8aa96211610e4b891e8e38919b653e9, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=0f49a74b97ddc41ccf7164cc549322319f11d1e1, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=65135fa08f67bb4442c02795d3f8eb3a1314c821, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=122e0feb600260f6cad8b3e91ef4a015af982b0a, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=dd232ef7c3be23c08e8b778c0f89fb4ce4396606, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=961d22a91b2593e7ec6be8fb2434434d678830dd, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=9a52234dce909b74c59dc82718383555eba6f9b6, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=d26d53f9271b7de2b2a3fa19da774a96521276ee, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=bf7c9523a281b9e64271b0b211bef87d8f9f5c64, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=aa1c487337bcbfd91c3ae83735e14ef989aca22b, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=c4cd53206a742575ebd30de1253941984f4d5555, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=deef63daf4aacc5897c5fa378bf7ff6fb2006b13, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=0e628e0101257f013559fef2264534949e8db070, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=e2530090b85f4ed2c0ca5cd0ed000a0f746fa67d, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=8633d9eb667b43b33b21f70b5534112241eda1ad, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=7ca9929a283974a3e66ca9d9847de7ec635cb6c0, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=62d924cdcf06dadf5f8186a1cc01354b4abcaf70, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=28a40a7009ad50813e5234b297cb0937f7588c6e, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=d9b0f01e83e81b340d2ba63ed7aa3cdf43fe9c06, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=9231f309902231bbe0bd8051b74960e3702744fd, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=f57e83b48fc9a4e9cd663c7b326282d97f3ca2ff, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=9cec78d967a0866fa4bba0688790054bd436710a, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=e82c6ce5ac5c22e6df8ccb976a6c4a353773d52f, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=d8faf526db92e81891d35a77a8e4eac9b20566f6, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=eb211a9b6a1cb15a541a727abcd08f9917ddc33d, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=60e4b25834d07f9a716547a745a735d16ef537ef, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=065c7c0be43f8aef8ba8eea16e49481b111cf97d, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=dde33a389a400669dc82321cc4e6a3550bba56cc, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=e74708c764bd7b87afd5e85c58fceef46fd40b37, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=21343f47ac4e256e330605c5f97e0c7fa419b2e6, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=695a54011d80a6dbdb7ddf04feba536c1747c56f, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=8ca7f438e6c0a85ca0b5818d51e3f7870c71355f, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=48a1e6ab5f59eacbab3902c0ab751b15a9a05967, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=15da70c643d83bb1fcc5eec6733721eeb6532ded, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=081b5a0a52241283db752aa83a0478f12b63d75a, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=22a69eb1b0985101c8a39496ad89212b5ea1a3d3, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=677cb00fc6e641498920f541b1aa75562917d749, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=144a66ce4fc26fc9ae377222fc3ddd585b90bcaf, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=6ee5b5d8e66b3e2652b7176509e92b7c0adb812e, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=3000da9327e01b9b721e23c9855264543617bf23, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=7abd1793499406729c9cf56a9f57a66dc2207f00, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=7b2375776e5a6739a7c60a0f7636cff226c0ad64, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=b377fee1856cd879d8baaffda353208e1a76e716, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=ba08ca275ced4e07ae08b8238978142d3a7f19b8, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=6d30b3ddb371c14791d34731bd8a905ea597f405, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=6f1106ae0ccdb7fa6c6f4c1bd995126e97b656de, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=247d2eead32ec31e0c26ea85a37c2e68d385ad45, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=a94409c8599cfee6dd3cf4b3fd3b0f1a4e4c9ff8, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=d9d52486b5cb6c5d05a935246555cacf2234929c, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=99f46f55176ba309529ea6e24cb86b0c0e6ab188, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=95f8c8c8c9188445ace566d3e821b06e0de31825, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=1d97f27f2edfe77ff48393a2470d01f8eedc6da1, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=0b01f67d574e92a16c03dfdf1fca16a03deaf94c, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=cf8a9702251ca2d696daee40c4cd4750ee6afe5f, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=9fa4e9706074bbdd0a0b97d53754d32db282dc01, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=5cfa6152c0540c9f81cd9092faf251a49ce145dd, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=4b8ccec1586f530b570b00d5bb7b95cd23f42833, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=87dcd131404620174e77f47cb6de624137fc38dc, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=d6c81ffe9c31cd34693aa49646cce590c4819da3, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=fdf92fa12c31a8c8b15a2f11bb694ac3595cf011, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=430abd442dd165b0b65270507fc9d9a4a87f1d37, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=1c1eba0801ea5a3df0a3bbd422c17670061e9d63, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=4b41fc8c8f06fcafad30f6a7df6c44ee367e04a3, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=f347826ec7f580c719bf14ff90942ff499186904, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=9136011f565d8165bd060e984083eaa59b108947, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=c5e4e545f9cec567561ba7cc9a60e3cfbdfbca88, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=a8887f90d8b640b6bd5904507f32dd59a9437435, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=7001c560628e953e7b91630f522c6a5968696189, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=34a8a06f712327776d02206f06112b30168131b4, strippeddirectoryELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=1eb524cf82d573869c0b1be0aa49ac0434933ae7, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=bc5d2b46b6bb91533db08f3a63f94f108930d464, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=67b11007dbd8cb55dc9849b6acddea7f7b7ddc84, stripped"K M}:(6Jt+U{ -Rky (c>Rt2Np   1 @ X v  >  ( 2 6 @ d ~")B7D0G!3L]*?I*&3+!%  ;(< .";G""'3*/   $P+P*RARRRRRRRRRRRRRRRRRRRRRRRRRRR@RRRRP4P3RARR9RRRRRRRRR{RRRR7RRRCRRRRR8R6RRRRBRRR@RRzRRRRRP6P5RRR$RRRR9RRRRAR RRRR,RRR;RRRRRRR{RRyRRRNRRCR(R7RR8R6RRRzRR'RRRR+RRxRRMRBR:RRRR~RR@R#RRRRP_P^RRRRRRRRRRRRRRRR~RRRRRRRRRPbPaRRRRRRRRRRRRRRRRPiPhRRRRRRyRRRRRRRRRRRRxRRRRPlPmPmPnPnPoPoPpPpPqPqPrPrPsPsPtPtPuPuPvPvPwPwPxPxPyPyPzPzP{P{P|P|P}P}P~P~PPkRARRRRRRRRRRRR@RRRPPRRR?RJRkRRRERGRRRRAR}R,RRR(RRRiRRmRRRRRuRRRRRRR;RRjRRRRRRtRR:RRRR+RhRR>RRlRRRIR~R|R@RR'RRDRRPPRRERRRRRRR5RARRRRR,RLR\RgRRRRVRXRRRfR4RRRRWRRRRR+RR@RUR1RRKRDR[RRPPRRRRRRPPRARRRRRRRRRRERRRRRRRR@RRRDRRPPPPPPPPPPPPPPPPPR}RRRRRRRR{R5RRRRAR,RRRRRRRRRRRRRRRRRRR+RRRR4RRR|RRRRzR@RRRRRRRRPPRRRRRRRRRARRRRERRRRRRR@RRRRRRDRRRRRPPR0RRLR"RR5RXR,RRRRRARRRRR\RRRRVRgRRRRRfRRRWRRRRRR!R+R4RR@R/RURRKR[RRRPPPPPPPPPPPPPPPPPPPPPPPPPRR;RRRRRRRRRuRRRARJRR(RRRiRRRRRRRmRRlRhRRtRRRRRIR'R:RRRR~RRR@RRRRRPPRRRRqRRRRRRoRRRRRRPRARRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRR5RRRpRRR4RRRRRRRQRRnRORRRRRRRRRRR@RRRZRRRRYRRRPPPPPPPRRARRRRRRRRRRRR@RRRRRZRYRRRRPPRRRRRRRRRRRRRRPPPPPPPPPPPPPPPRRRRRRRPPRARRRRRRRR@RRRPPRARRRRoRRqRRRnRpRR@RRRRRPPRARqRRRRR}RoR7RRRRRRRRRRRRRRpRR|RRRRR6RRRR@RRnRRRRPPRLRR.RRRRRRRARRRRRRRRR-RRR@RRRRRKRRP PRRR}RR R RR"RRARmRRRRVRRCRyRRXRRRRRRRRRJRRRRlRxRRRRRWR RRRR!RRIRBRR~R|RRR@RRZRUR1RRYRRP P RARRRRRRRRR@RRRRP P RR RRJRiRRRRRR3RRRRRR,RRARRRRwRCRRRkRRRRRRRRRRRRjRR2R+RhRRRRRRRRRRRBRRRRRRIRR@RRRvRRRRRRPPRARTRRRRRwRR3RRRRRRLRXRRVRRERR2RRWRRRRvRRR@RURSR1RRRKRDRRPPRR\RRRRRRRRRRRyRRRR"RRRRRxRRRRRRRR!RR[RRRRPPRRR\RRRRRRRRRRRRRRRRRR[RRPPRR\RyRRR&RR RRRRRRRR"RCRRRRRRRRRRRR RR%RRBRR!RRRRRxRRRRRRR[RRPPRRRRRRRyRRRRRRRRRxRRRRRRRRPPRRRRRRRFRERARRRRRRRRRCRRRRRRRRRRRBRRQRRRR@RRRRRDRRPPRRRRRRRRRRRRRRR;RCRRBR:RRRRRRRRR~RRRPPRRRRRRRRERRARRRR{RRRR5RRRR4RRzRRRRRR@RRRDRRPPRyRRRRRRARRRRRRRRxRRRR@RRRRP!P R5RRRRRRRR4RRRP#P"RRRRRRP%P$RARRRRRRRRRRRRRRRRRR@RRRRP'P&RRRRRRRRRRR{RRRRRRzRRRRRRRP)P(RARRRRRRRRRRRRRRRRRRRRRRR@RRRRRRP.P-RRRRCRR7RRBR6RRRRRP0P/R{RRRRRRRR7RRRR6R~RzRRRRRP2P1RRRRRRRR7R}R|RR6RRRRRP9P8RRRRRRP;P:RRRRP=PR3RRRRXRRRRRRARRLRRRR,RRRRRRERRR{RRRRRRRRRRzRRRRRRR+RR2RWRRR@R1RRRKRDRRRPAP@RRRRRRRRRRRJRRRmRRRRRRRRRRRRRRRRlRRRIRRRRRPCPBRyRRRRRRRRRRRRRARCRLRRR R&RR RRRRRRVRXRRxRRRWR RRRRBRRRRRRRRRR@R%RZRUR1RRRKRRPEPDR.RRRRRRRRRRRRRCRRRBR-RRRRRRRRRRRPGPFRRRRRRRRRRRPIPHRRRRPKPJRARRRRRRTRRVRLRRR@RRRKRURSR1RRPMPLRARRyRRRRRRRRRRRRRaR`RcReR]RbR\RRRRR{RRRRRzRRRR@RRRxRRR[RRPOPNRRRRRRRR;RRR:RRRRRRRPQPPRRRRARRRRRR,R(RRuRRRRRRtRR+RRRRR~RR@R'RRRPSPRRRRERRRRXRRRRARR,R}RRRRRRRCRJRRRRRRRR(RRRRIRWR'RRRBRR+RRRRRRR@RRR|R1RRRDRRPUPTRRRRARRRsRRRRRRRRRRRRR@RrRRRRQRRRRRPWPVRRRRPYPXRRRRRRERRRRRRRDRRP[PZRRRRQRP]P\RRRRRR3RmRRRRRARJRRRR(RRRRRRRRRR{R5R;RR,R7RRRRCRRR6RlR4RRRIRzRRRR+RRRR~RBR:RRR'RRRR@RR2RRRRRPePdRRRRRwRRRRyRRRRRRRRRR~RxRvRRRRRPgPfRRRRRwRR{RRRRyRRRRRRRRRRR~RRxRvRRzRRRRRPPRARRRRRRRJRVRXRRWRRRIRR@RRRUR1RRPPRRRRRPRRRRRORRRRRRRPPRARRRRRRRRRRR{RRRRzRRRRRRR@RRRRPPRRRRR{RRRRR*RRRRRR;R)RR:RzRRRRRRRRR~RRRPPR=RRRRRRgRRRARR;RRR\RRRRRRfRRRRzRR!RRRRRRRRR@RRR[RRRPPRRRRRRRRRARRRVR}RRRRRXR5RRR4RRRWRR|RRRRRRR@RRRUR1RRPPRRRRRRRRRRRRRRPPRRRRPPRRRRRRRRRRRRRQRRRRPPRR,RARRRRERRRRRRRRRRyRRRCR(RRRRRRxRRRRR'RRRBRRR+RR@RRDRRRPPR,RR3RRRRiRoRXRuRRqRRRRRRJRAR}RRR5RHRERRRRRR;RRRRRRRRRRRRRRRRRRR RRRR*RRCRRRRRR{R(RRRRRRRRmRRpR)RlRR4RRRzRWRRnRRRRRRRRRQRtRRRRRBR:RRIR'R+RRR~R@RRRRR|RRR2RhRR R1RRRDRRRRPPRRPPRRRRRRRRRRRRRRRRRRRRRRZRRPPRRPPRRRRPPRRRRRQRRPPRRRRRRRPPRRRRRRRRRRRRPPRRRRPPRARRRRRRRRR7RRRuRRRtRRRRR6RRRR@RRRPPRRRRRRRRPPRRPPRRRRRRRRR,RRARRRRRRRRRRRRRRRRRRR+RRRRRRR@RRRRZRYRRRRARRRRRRRRRRRRRRRRR@RRRRRRRRARRRRRRRRRRRRRRR5RR4RRRRRRR@RRRRRRUNۤ,W utf-8dee81a469b029ed42c5d74db381794c11a55b652b77acede990d134f6c72e622?7zXZ !t/ !]"k% 2_e#Ȅj c KJꑍ,J]),+1}B3_Uì+=JM.qQ`g+ح -+iY(A8Z2VyNf#SKşyWxYyuD$U 86aOp|h[Iz"2E 8{PDso`]4o~n~@c ʄB$`Ν+.=#,[4Fc&Hc' \XXcL'NJ:Τ=9 aAɦYX(Uҗ[3EOdE.AsgpA EjFQgݩ3«p#ȅI8 8 GZYȋOl{Ri1>EYrj0+_NLإ) 50|`W S&VQoیۣ4p"mM\>/Cクz#[Ϊg%5JZo̝-OP7iQ TKX^TϿ7:!$ =hLڸ tV -clLB%]yi?,5L^*9p0aJ]x˅eq/Q CvX5-=!lt:/g +*kκ8XW*l6@[%3k!yWsZnmx1 yM_^M4vgU4&31w%fcADv]m]+ok$%UH/"j,q%"`p<[a,c+*(+qU B}i0Oy'3y[Ad96VdΉt}R8CԢ=I:SMm䘀>=8VȂqꙭX%ݝ)BCމC7n`+~o''d%Ny=B3S r0{ npRn/)KB=0JZ5cWL2Gg{n@봺 ,g*82a2gdnjwa ^-LTj`~ CZk!){Mѯ\BrfP(jFhEl܍QٔZ 𢅐X gܭe V)w|k CH9QKfy[6^yEgiZ؁c*xF٣P辀#au8X9m՛n]곡r+6Bh:GII߸q5HD9ԆXDqdChc}9=~rQz,dhKB0[9,0Z0E5.nx"[&Gy">26Hi?jVd W[Hs2ؤ $1Z'#5nj\m~dOI.0(.d9{K1?UQC\#һjU9[iV /K0η0_ĕI{]4xD;ӣ=ܤ4$ \LTdAo:,C:iD85j e-7g'VG()i_-궗TcT %1 5Ї+@o;dε}m/.? ]3x ,_<(8HJ2|@|*E8ezhm0i)o˭/ x/a~ݳvziYį3B3(թ+tep bL &W):.aE˚r֒lb,>lJҶt*ar0>kŗɹL^UG e543xĎfZ]^\W79ѥ(ĖF_7R2ː/&@CjJO:2ͨ(G]4< p)?%W(S3& == yy5tUseaK$v5G•[3ϟ*nXt$q@GU~.z1:򩘌 73@ cgQzt2{}=t%+(KVJpNg* !ˠSr ׌|Xw-nG( z(J;V@Qx(#"%V:nq`ReH$ TptT ^(J__&Q4Bw9~D37vp6{ݷ;I$^y8q{?Ns g佸/|Nib77\qQ%#a.@e+cjv1q+o6ѽ,B7xUw\|"n>i՞G&o o5woOhmymQ98Xa?ְ+#5@\ =bav7`{A$սM7Ɏ-CmVR[ KZ* %$\ ę^yj7.p1346B +*? HZhYE53ס#y"d^JPe~Qv#DNqv)y-N>bLm WSP 9;1_;IDaP3"$ڕqDi7_5sGQYMrơP5Ԝ;a8qy%_շ @~h5mhys2-fWKvn(GlJlroIjpZuKe$'yya3 v$i3iʚm;ޘ>6 Z;*R|;)ރR(W_XM_sqL<8354[&Q\@GWSqI RV|'B3xa1KC}tRpEaܗ' '6eCooaZ wqo Ĵ=9 /W.|\K1{m%S&@;߂m\]ǁᑏ{qz[sG&% xLixt'bDžË_&M?F ]HC X'Q [='A0S0l7䚀Cǎ>%:'.]1XP)GS pN%gu=J/~,rʻ7dZ1߀ 4N܂YyFbx N`ܡ1 wplO̍FKֻT^e^4qMa^ڼZ[of gZ' }6JZjV*u[xbf._^X:t[ O${:V/5n/E?ؔOz͇ubkJ-q0@U=_Ⱥg=|qro!GQaW\ TLO__kyjdKв_Gm/}q՛ T~S<{ܦU0j\(3X"2)mḳ{W "yTf`WJ}! a ՖDA|Q\Z6u~_i7|…Şlֹ ` +{ eQ {R"% ||v$傥jJt먧f%n?l`o_ \].(QS] Wm̦_ ,M".T{Q;n+EҍW: 6S2%I+A}24K{pnة-5Ƚx?3D;C/Vu2Z:#$v]:bdm2Iz\?6@=ޖ%avzF," B4>sE訟%TB:oIZM46iNl-E. p;m*e-^Q?Bur)E·C T@q.ft:+1!;f{M78{vӛCT=J{4b ^oi^ي&*1AY-0䰙0~͛A=0Jp { d,=ܪŞ&)Qߝ!i|a@9ePB"$dVE7 m>;ϚVA% 7ƞ"Pp|2p6M1f"&Ji;2 9xI:FB-|AiЪ)mOlo7Cc-g+Zj&7A u&͇Spw9iѶWmԿ2]m~K;O tv0ҹ.s-$+܋}+ՕKQWO €v~V*wSg V78!*uk’W^,%Fv}w+Mv"<䯼6i3?Io({ Z6Upۛj ]BbN8<Qn7d(Do<($ J݄AoGq8 yh#9bd)_;YUdS|8s#[E3Z28@~g#EOjNqDv@^0g2n/iN]x+%;nk+czH ¬DeJS+R\@EǭPn  5pklnFRèXь6cܸ?n2:ɐpJd5}N~\Lk^zH,XK}K|Gۆ*^9m+hxog}i|tP@>H,A?[T"Yӓ&Ìbnr껄cDL];p>Y:NԖp.PD9?FFaTg{Sfgq = >E4: [R4G @;Å}i[H۟h^IvY-vHX ܊jly0c%/KLL՜M!O W]5R6 aT~ 3yj|F̰ vG%7ˀscIgtyJ#[^{ٰrvh0yÆ-:|[Xoޒq䍈-#?2~DrbN㝖/OJm5CRA KOaɒI6 P`d.X'1w0Co3YNas諨ΓӬUK*,*:qv 305˯ @<: ɵX^%ط{N%w%ciVtrh$"a?=H`l؇A]jK\dn::n=LT>;yą\A d3Oȅ_NoˌJCs<;@seMm}g*FBp֜sΒypDstjšӶn* iE T6)L=(ϯě4~7k4pnzrhIYkV34T𣏕DI@ {[=ȸ80? ?I N3OSTfZ{UF\"I6/#",v`rxۿXKCep^AڄNa0FIACj,z@w_O\w^жtm]5$IoD^(8WXzh؟Tgv{IK e(Κ)_h$&ަd֥Y]CX- Tv zc\5]%'if躐 i?)$\UA[G v_ SXn&bXVZrz ؒB_ ̘69mS˚Fs7Qx+[PZ{EKi?Bҝƹi`zEV>i9q#cN}@[d:K"܉ '?g`z(cA~{$$%U# UCgcH-]JM>5RKKGN1J,y@T]s?#T 9m1sߧޫ$<:Tz.caȦF؉-Q0f/“$~kg>H2ƒJN9[TP `ɍ(\\/g-'ѵV2ʐPbj&A f {8 D=VM@9]f&mƮA/Je`+CIzI2zۨZhih3p-W;XԪSW,7P(yHpfx_.]6dV)d"L[ %;Kqw޾9}W1X]gy$ԭ&>!֖ݝI?b_UَpD dɨAzaQ˕9>P3_"{O1$llr1Q_W`I ^k$ٕ,BLS,J}б4/}zxB+6EޘgÏY6 d%lTWLWfANp@Y uAhb]n $aUAE_Am碭̜M2Ȋ-A%wcu`fX(uhͳ\TH"t!-s`v./=P/i's ZݤjՙӐZKt]%FG0_ Dn|㸉5y?{ncpeD%hoځ`Gfs 5y0ЛqI苎W7^f,aEP GSDf+WkE f>5cRj}-ce2BDWR+-(Ocp'ӏ:i|ItC{AQm;Dl4*2m%S;K%MFu@aUax:[OT|^)Kb!_+uq YN~_,<'|z/uV7etC |2nT!Y$e8!I펉jSZ9+gul~iݐNoI ^{r4Vԥ< SxeySmIk|tsVN+m!p+<6)2}j+ E#ȵ{C S;LAa0)5|f P>jhӊ]CZ Cl{ |cCKgOǭ?s͔d2"nnkWvƧ3T9kA)Z->CUFn頡,ŭ78v8^!b!j4"YtHY))_ޙlZ~%Jp!94ZwW+q &&g{W 'ΡCg4F~ӥMn:7IqtwgFLNit/\#̏S@>6P}g: 'yڗq"[!ks:uʏqrLX꬙[M c)Nd{-7q(UB5Wh Sqbm]Jxb}pIp7 ۣe8\WN d<-u

}Aq컁/54m @_ ӂ =/% {*\g;(GV232 FM*%HM]d'BΘ $R񲌠_'%Ia8lx79_f\lb{ۘ&@@! i}y%?4\(c.ٌzȘ7f/̫u>],._;:+4*<{ԂUl4)#?L+8cQki#'PT#Џvrc߂ߦp~dxR\Rv*}We[8y6Mk]Ӵ+.%w`FU'#%Nx٬eY Qw =5%誝@UJQFL l~[YVNi"3t'7SSo p>S Ty5%>háO)~x ǚ^VN Pk[YxVo?pRr$5ܪ Ald:xW{%%[.Ab%7My*SaEР[ad+`Tr:#prb_ "bR]U=K:ȮyY]0H]ۑgJC ^?th`*°[suS*4r!)$!C#L uEj!XOQkQ a[瑚D2Yktȣ|j}GLN&dn5`~i~:GȔHP8x"#D*3PlZ r ~|8T&#rѻNV L%o>Ò~J J*Jo`.R|0OEw%-W,2ośb}a (Y+"GN]EX_l>L+^xT`dz%_wCqT'L(RO'Bj 8j1:L`HtΣ Q䷡y*?2 $B )x{^Wf.)_S0rq+:}:>e jik~t&X+~AeX)5rc8]nY/ :]W)YTY/61gTTbQɆCw2:˾ xЌ;xs:3e" E:g#}ZFN¢YTvYu|6r#aDECB8l/y86+mtهfyj]&["6B_'Pe;#MԛR`2ѳkċG<9$4l*{H?'N9v~Tg@8k:N$Gv-&djd5ӏNE|/V 8]T&BCTvRpR?éam KVҵ ܀ eWx(nNR H؞v ɻV~/|27A;"ֿ=m BwnߋFW>}r{)E dnrc.C|S< *봗Dkt&"m~gȇ4P f|l%n>'Y0h4S 1!ڹ@?`D S9(.mS+Q2ξۡ^Ex#fYѾ5s [C$!2-:s Tɞj/nԂU/Si`rDB2 7ꦜZx.R@YڃWe`tQ*lp %e02 *i>``ԗN)1@؏ɛ4xS$``ӳ"iE@3!Nvv53wLҦW/B{7И^hj@?JD~6S|Ϫ<kJB254Iaeĥq/Jn7f_  h:;gp$@[_om)q![MLr@[ѼƸ3{yTf Ԥ>M2!`FF*[;Ѯ,iEB^W%FuIep m |qK MgO`px:ji(eY".]jvΨ#| I[(hQ>oFRw,CV4:c8?)1)u7#/O, G]hpAAS挑$a8!J/A# H?~H*'&XGP%N?j-GVfm$@y鷺]Ce+kWg &KeCg) tR SqH#f(Db,ēر8orֻuU˄\isQGXI]W;g"6TP>E4;ZgSeyّC/*n*Nx7[sC=m,⊗ײ7GZ?3Wf5ӊ?1mxuNis-$ } .0K$1?, ֎m kvlgx搻==}Yy Rr*׭*?YҫEeiWIQL^Zp$1Bpyڸ_Ji,,xvOBf怐 z]3E:À|_rFE}6V( 8cxUf #Tu,ZL} JN&?tgOm!W3D{BlWIuNکU<_0񾔾rIth!]bj}:Oÿϡ,?Z?v$2ܲ$3*L6McgY^6'Kbz\k=D0;~XA拿x%ŭMA{-u*]z\7X^tAa 7 9z/x,z +Rz<˲>hPV}jUCf{7kc:eD.>ƻ6!̎%0`#{IjCL`؝ܽh1D՜o`yrP6/\vlCcgz7t/4ؓhBSE`6%1)еʹ^ ULBrs\Ru? oH<S@cUmˤvURܫ(\6k$r̬6\oBۄ 2c .J%쎸wtn wG̃X0IqH<sSfJ&Ў:\I4 [9F)M~@ГbƛDٴ 1l< e<;'ad2(&$u gxHܹpy##VaPMŹ38{%wH4'33f!}+}3?hqY™+KD*6k2~eH<EH_FL'Kݴǣ%#qV[m,n%g\{022(Cޮ MS:UPb9hIe|]*paX5/0iInNQWl9]?zyaDxLZI3h\†`HΝ63 '} $&G%}[e 0ԫrgrę"3oYuWTD =aOJRe;-;CtW!a2x[\&]s6-hl' QG-m8jM]YD#ҔD^C3 -/{Nݸ|o[g&-&wٞ(.~;U^*|P]~y`i#;,TSP 4@$ҩљԸݜ-&g2R!#lF0>DfκU!0ejJ%D׽T:P#hxkK;ES"|鱷4 )Vwqzo +E|~\f,-"/sx|86'rzg7SX[_([}=~h5h@؞}E0Oٳͭ1/~{l g KQtl- 2Yu|N;8/Ǚ**OZۯ̆8tE"S"r}RfG#<7=/^*La0;hSJFzml3_@mٵ l)Tp;/(锃|7оb6AzB8JKyUFN5CNܔ"d|Q>H5KIRe揽1>loUŮEQ͔o}Y}MQnLV*D(db2fMW9'mag5;/wN{U}s ~N36pWL:TW($Vӣ%9Qk8ߦs.>d t 1qӒ+uyAD%'+IKn~`Ťc`njn#0^qY0#7!7'tHW:U=P386NeUy`cb,(֝psipL`XE,nrXJK"aQXыrbZKh{pCqU뉶Tw*CNIWÍtg  G-WNgZ6DxR1*s>{DaJ;u"oD'cVGJf…QڃV:8_1R;6[bVn17g cɹt*:u+-.CaYy_ Y6qJK0QT2Dg㘢Kd.wj3@Bk( IEPw0붩lJb`k뤔A@ judK;i $GI+U(~+F-ZP:*\%QtyC!9׾Q8DnQ֚LE_K[%YT5WqC0\m _K2e͡zp.O;nTfY;k ~@Kv:3t5E"qAnĦ~ז. ^GYV[ubV+ 'A@v7G7e8D!ςFstM7W#UIXVLÿdwDPFV}GghJ(1<`UNOw`B )I*r ֘x0ubbv6:\Wq[$яrNlA־#m0bRL_ P >ۆY&,7VK.l !>a/ױ $w>8"-yqJ}nު}YY=ȓoņvOk$It|" 8vFMX|wEХG4_Ylx#o#k(weJNY4үW;l`j`Ay7M}n3~L~"sf~Ps"Z=jD`5uNMZ11>OmJ-7>WG5Vԗr| <)C%.97&h*/PT~nDF"7h9?Ü9~ t~'(ײÜ(+6]~P}>n.q>.$RNe\!XQ{ Ao-,*j+JDKf=v**=MI!ZDN߭VLcqɞUd8:pBw7iS{P JKGdXrE`!T %%O/U$g14#v<_4(mo7Xś17?f=TʡVj4}KTq8TQr6t.=(E@ߠN#݀].Ԕ5ܦ x M$P:V?Ps9zv@zNC#IóG*2A P[JA\3b#GhW*or@Lm'Z^3Wk ƒMoD4(*j|^)cƜD?z0[/Әr6|[:P+`^Fa's}uW׸xTo;:.ӝr[8 b{Dl3CJY9A}ccf{aQFu).$y/it}hODh?[%ISDY&AWMH37f(=4bwa[h,fj[)I'bAwr(vjGtYds*b% t -h{  ,/j\;Y,ƙxK ҧ%fk}[Vٶx2(E5t]lK0ap0YG~=~+cjuimNB-Sq[="'⒳؛eH\ՙ WtDBGbMP8Ay$Í%.&Ǣa{CqR!SHm`pGSp/l kb; ^jqB3]M[អ#6_ EVsLG )# uBBQr`*%Є9aho3v[P9gq-3|QE!!-Me2YEӼn\H(fxo<,@M;X#Id4zfSLqZgpUezZi&/4w8 7ׅqSZ,t#V& gY$|UbMFqh)mFj䮨9G1'qHZ?~& MYȠb_=f,Cz}_CJ3S0@)>7l^CF8^ܵl\GCN` dͩC]Q_퍧IЏT˷45чi١w B:@8?X@ZeVuҀ.btfH"ڊ p6pm|/k&u[%TqIciǿ[QGсj=|E:=he=,@{=4].-ȗ62F.~cNnE6%j̀aT>L;]N8EI< O*d:2`Fs95ZܢX=αDNt~$d"=څXp8myJKSclJx*xLs^ Kjw4٘G }NŕxYVKȤ`pj ^ z0vCl)P:z G&VU9i7h5lg>c\Q+ȼ䳝JSJJvb,=}yB6 oZ Vg.7BfH ړS8EoQ.~ d gH4HZej'x]+l?1ԮlEg|g9S^)u6J[IS=J h Œ\&@})"j[1~D2ΪPLn&&>Unmwx +Q$AZ5gn1+\H$%4X=dp]F(/h~ihHH㈨ۉ#YF3IڟdW;z,]# ?nX[(){wjҤڀNo<ʮ i[.H202?jL?FU:W~c&tSCQ29 +kX8o^ "qRGVEg~Z4W92EFV zG;ʪĚcG@߅]+ 퍜h=V֦Pc?en]mv6_pQcWU. Br->AO财])k2,(*ђ}Ict2O l3 {㯶#z?$U V%A0oO-S!WڿT/P' hWs,]bxcr L?|rp|C|->..Vi`U:*;ty !څeft۴8^ =L3Vܜަ va*ry-1ּ,8aM?hX\xDb[jU@SSpQB+3E/9ҵI6!{ 0\޼(aLsP7wcLٸP}s9??6!BE }&Pk'I=p ,mIP:) W>5sg?PX/4!gkWdyٵnN_q'~pp=_`!ϳQ Ab48BzUhNQ 4I}F\Li P|\ a/5`d1h@;jӭ•Q-KWNV\5^N-dPr umA3P+]y"~N2IVRʐ1PCJ`cŻSy 赻{N{Wt3:WtH w&(;s1K52HT/tIoyV$7_V:ebWZtΩ&ت0/9eHHS6q5)_F|_V'BW1摟j;"w{DbzW?vl,hKߙ48ݮһS_1yDt"@2z;!.%W@M7r=Нi c{]Wp8 Rz aB@V14Z }&O|7e%. 00Ƒo ֝Hd?Fև|6O_B ŠxaL{ YlT:`\ = K<_ *\wd*mN|դx dYmZ7Z$ #Շmi(fD)^$ >5V+̖!UկWGG͢ "_D&nnٕTijd1%$ 60iN6FZdFDŢRVf9r5~f깏!q6xk1penWүm|MAP``s`BT(lce# {8-㐯qFń> Tg[`5<58 8cU~SdF$Mv@%S붚6ksiZb 7ؼi=#x,*|~ԹPb#EY&_F< JjGLqa48e!$w,[= 7)I)K aB` 80̇y=e6A+yAo([YX%5 UHÌtԾcY{1 z],4W+o{&~YpŐ#gY/_'|0ez{\ %FAye9OQ^S^8F_ m sk#*"i;м].iҀ.]^6*c|Նx4`780;Cק@ l Rߣ?N^ "֪T3=TypS&)|w%B}P89R'hч_eK< 88G҆x)F/Г}}TbbH#fJՁxU.'JQ@ɤ𓖙IH&4WQ+FxiV[9bVF5 No#'b53,ˆU["u~nauH:K/y*  =ÚϤ$ަ 2MQgWE|"#G)&Ρ'A1Js5)7p7 $EQZrsn&$ӧFPE!V'U_hWB/?_}X9Ou+.Xe6'e Qi2t1GoLԎ"8rQ{*a1,^Yb)bJ=(r0%!Q~~GO1 T1[W|I*dg2XPc4?HC@q'Ҁ[Il+hM&W$C̺{A;)i7UvxaTⲤ:ON{%`HʁM92w@HdJ&6Ֆ&Zc׵x2 :^C&PSi*P/r [w@F7[dL𷩉e&V&#r×ehX<.PX P4@PbTaT?08i#V/B+*{1xwWl,{I3"(ץz*N,oHkˊn,y hz-ԘAW_BwF|[^m{u,}B GW5 ;Z5+t t\aj2OH35+n*aPFeND z#[EƹSTSHskZP>ZSu*`5#"zBs_JA$8 I T ʤ~>Z>Qv\ΰ_9a[Zi$eyt>ܰ"4 kr5O.4 Bu7"ᛰKײvSg{^nֶ_(lYp a9##_z|[5+L$ތe($ܯ2 7NFNJ"n*%;~fwю2{<yqLƣ%!M8ЋYWKJUv#x%׬b`3tBzU'ІpT7 }#GͅED_[mḞIL's ^w=fQ'$Yog9@6|FPM`C@iȭϴ`C"Zsz7B0 UE)麺a6S_!x-{p'-ab:` KT#{H`;ȟC|l U!g[VQhzut +ghA ulp˺lIu0SQrК֔i3+<L,%E;'!=5G|F =dJvRvI]x?"s Qr`e*"[\(^ $!qyM5 Q~Տ"$5qÌ o~3RZ:6TWeL]b{K'^c6\8, fȑ|:R*Ʃ&i cEU`iE2^7Bu#Imh6'>Wox~ǿ[l.ۍݟV/-\丟܈<+"W/_,"S3&X ܵ OHc]M.U}: Ӓ$"ƙ-}-&z8N5]iчp^&t-81"sa*3i\u1}km"hIi[f2O">`;FPC3Y_A2hBIșo0(xګu'?"O~9r3b:1IXtsݚ ;#Qւv)_t9iuE{pwrm"[N8tri!^A_(8#݆ Jo,FMa̅ɹIo]cXzX8dK{z>/\:>Y ^wIm),PQñaU.[2# =kIج5$skAe=W[F\7ƽ=a%oh߄Ruw>p~6D rb8+F\\.b*. m6!qAZ2 4$1WxSX%Ton ق9Ċ7yCWuQJhG#\ޖq.^k(<ƃhn4ɳ*J4X  yr=@`[X^~>1xA:_G- Ϣ *gۯ5?X GOo B.`l1Nm/}JK~|kEcMvy0v5IK}pӲ /=S _b.umvۺQvtdkR;"XU`s'!(3i=pBv}ү8ہgu'))d:^=%Y$3^Oݥ97EفҬ[]i4$cO!3-C;EiݰGcFx4(.C3d }P. 0ۣT,<XW \]]Ӿ`$Ц´5/% M|Nšڨ+9(HJMřV9}& Ep*'Oqېh+UBP1bN]\H d, c\H)׈0|-hP;eYKmUm=`M'ém|n@3n &1Zo0-QD_!(VA5t~!yδVmF<>\8 NKE !,i@ڟϳ2NOb ou80ҿ"7 zu3R.\иY?PM,/Wn6s4n/4^#l+٦Oh۾ҙE UY"Ɔ'/SDP_}z +Q870"(t*1&11MhgI麗G=J6A:rUDu=н6v!ף{U<6Xk)'_y4Bƈhs?=v$}H= ,FNbll.J9.4+dNA%`Uy$N<FPȌ|L v'3ym.끏J zT B65>U9L.MH)(Bk)qa;S5YvB7-{+G; b{Q\TO=OQobbf0\VtI(-ˍ蛺۵h͓|ǺܠjDNX HL$%_e'CuDC# o1~vs3泥#Wh(D=fN{KńVqfje+P}XOXchv7v Y?U(i4!tl@R\dx[i!dhWϢpR@h D3E`e^ VO׺f>etVU=k@ʃp)dujUcR7*6=Lp;:8("H$BbOë nzn3tz !b-U}ڙ#vG8a j,[=ܣH<&q,h8:вE_UV+<6 Z&w;36zh+񕓴FEB8m5o-8HA4̿$}o8R}yeutbb=i?#I ]XR]ra'GPP Ias8)I6ԥ/r:YjXP[ nO`Km+-Z,/Ix4%5(Q{K ZmΦr`ݕj;H. qV˼{ *bއ†Թj(3'F% 5L`CI`,8j^39ֈx9﮶ÎϕڃV9U7M!չ[ 9Qj WE-%U `J"w3kgd7Z,aԁI{)>b =WZ $6`GI="!MM c dJΌNtk1TۏEldiy抬۷O98N+r9Qi’H{cyudN=7l*V(zؓ $2unL 4045b_]ptc{a8#_1--&%ƛx?Bg-Z)>bw̹b% *h,яS 6Yh_jZB" OToqCuܒ/:|79`m'1Dҭq]VH٣Hyh`U;[r%%D*2G5a=5SZzL aG zo[>hyd2֓̀uOh0FSz$=H`vC++WI+C |`t>B }K"X텟dep"V1ߦ`s_ʕ eݫ} o>(RbqT辆q=N"V(5qNa񺙱?̶ɻaB)oFJ;;?!k!h#\(ή6%EBSlh01lL\0 aL˓^s7}/ feTT]8g3sR1hwr'ݫ,BAxtyK?v '?>b c>~q+wXx2/nhV׻T@ B=`t}^VuӿN/E6-f uPX H><܏Xj:%֚59[fՏ6쫩pꉺ1YL~?aiS٣ʴUN~Yn'ciF~lIP EGbqOc 鼗Vz#M i'>s)4,UH?g8F(#zjlb{X" } (&z!ɕNIx4(=s!!If?xa?#'f\݈; JU>B! =aߊt+׊* aB;&QWl{7kԱOV<,1tj|k!o~G,G( yQ u"7ߟ5) _} *cr*J+ǡ{ tMZcѨPAXA|M"ws#m[3h~)u88HK_[0?[DTؠ=DA*;2@nM |8K6M}ݒvyHȥܑG8n}=%_7Edp+$=VHhMA3/--k~DUuV?@f^sVC|Cs8ʸ/ɰTyNk ~E䨜+5kr[6b`pCbx OD/.-JC.|y iu.9BNtRQ VF8N6 @u{Ы!RױK EeJZQi zIcbbͣF"$ب 9pGiL(L~S,;BuS^1|u7|kSyH.'R !++KZ5r.57v*p\hnS{$$2bO] X dV>h7cV#{ZlOA|O]9'f<(_x!Zx9[J vgŜ4IcQGfC#Q[vj ([@~~ulQ|<$AtXύtՁyj0$9{ 'rv\avx5p ^ozZh%vzFJ1-( c. %NJۡ1̫#/r5V8k_>zj9rqZ*'[$e 4QVOCԻ}M/Nތ@x -KFN4&έI@NT(OBFsM;s)݃g%jI|؃< )1ߑpT( eJFYkJ_ /˜5 l g]u,!.,}5{\pKFJ)O'x㔴$a/H?7 ¶ThD`aNV+zħ< ,Uߪncx9~oȨQlWQKؙLMP#ڲ؇~^䕹gmt[Ly+3 峰]?FEWgQ O Bl1vUĨ0@jYC^Y@fUSZZA)u1j_0kA"zF͔ۡ9S,Pupa^y3i8JJ8,`-DMM-eTA.AE{cMά6=+>!4y 츅Lxl |p1 (9򞃛·kp5ICb'uŸa^AF'͕5nrdFS@irB^EFxOG >8<9ĺc^3n)7+rN&~6\X{+K>s:|j+͔SX7ޏ[DH İ5VVYXTNE`Yv#H*8#[x`*'x)M/E ~rc'JddAaw@,[g/nL-X7F䶅 s\XیԐuUԊa!~)c !H$X8Յu2+ k f\F\ʕ[%9dIQҖAיEYЧ15pd%џp }d|m&G(*Ss%O%؁"LwgT\Ԭ׈/“O Iӎ tlӏ+,0re4i?P!{Z~nPsEXy"z L>UMuxv3B`}EW)DGZ)?cps l%n̛;mv$?3I-. nOCFb0. 8n6׀VXfy Oq⩂&gqC'RwBzCQcWsNW@BH ']1+Zjkso,Ә6f C~ļ}K5`1xl+PK}9E"'ԋ<5LlO!3 +{I:+ أkVW+4uc!1s%O1D+vp@8E"I[C{( YvZQ8d(W S`A{7d,J`hq8) rUAg^՝G%:ŭ//9!r +ap<*"Bhj+/)rΜۨ7.܌7oZ6WD{RV0c}'Od~qxFgD[-++Q`i=|Vܻc]бR MXdDyӔ=;FYl|ӥ3`Q\^fSR>_$v>IR;|Sak-;'\Z ,&-qRvj+@atYm[;bHnes{d3I$3ߨGĔ7PR&-Gt{]Uy#D&#¨n#3u8)P6pcZuU^)ݥ_Kuׄc -v$ nqIW%&V~ɯ{ dQۊkK/ TنO{ 7)S7]hXHI;R XefIAoҪ>5ӧ>dq<1ouͥ9w69'bin94pHJRB1Hd1Ѕ"E)HCؿY*i"E^1}96gh ; VըOc;ӗ J,`_Oa61h#ăٙ5lƉ߳G>x)Pxs3*:\eB>!3tr{_FH8(n %IX 0 u*a栓jcΉ(f z:~ ƶk5^OGA9&!c1F Z-caڧ⑫*/߭*.d݈y3i7hm{ WX?γJg'} fmlzT0:ǢV[T^$Y[yd L|`!C BѠ?A0"Hk=;SKR8#(=LumUaQ#%>|)ŁQ`3D5$4i>TYS3)yubP^ՄDW8Erbfe|O"a:ʷISTBiXeY->@s&][]nǵ]\޵j|8on!| pc犻t3cժݗ@<>r߳^{ܳ,! 0Dtr}VjP9Z.`Y%JU7 aTR7JWp4ÒpjԠ@Yϭ5*L&{)4l=l cw]ItW[IP[Ф^> ,[돤!hg elݐ5nD>KޣwG3ŎO kݯ3W?fr#v$wp;1ƃn̼6FDֿ2șհFX/iʃNݚ3C>928; Ԙ58QDSU=IWTREgfgaޡ+ @6Oy/_2vIge{}xjúmS/GWAG Ov4tRÖlFP3>iR!/#LU5q!@DJSwkIuۙ,րލLXdBQx68Do(tդ@EU]Z/9B( v޲QWՙǐ 'O~C]8xYˤśC7|#S&@@#;.U$ aŭS#J H-&/Hu Z;`NJh"Gm2 y X]LUSՑr3Ѐ2ǣwۓW!? "8&tE04O.à_+145%bq,ZxR~ѰZaȰ%‘]2>B,dUPO $d ۷jkTfTXi|o>ˤ LF 9`iHNYm9~Ƨ&S?WJEo"F979FTqLfȆK?x$Lֱ-ݠZʂeDkLXX5RtAYCNg1bxW/D*&s3*GZJxOәN]+baꕠ򮮱}d+Г ܵ`.Ok:p=|<M$O!-Uqn7Nl7WlU ŪjKP4RT3{7S32Wݔڪw)fC>3SE,a-Xo".@DYC; 8 }kMe(DΏ |7 +g9H#b6 \{+"{]3^~Gd Ot/ bRҊdpmw̟*Fw`@j۸4D~4:a#jL UhUb`֑&8fS[݁zpTgvA粕7`=\ NZ SԷ0 v Wq GLGbAy703g _xNKEbtRx4yO @3>J+hq/gb+\}2;KF幄0 ŏZ(74~Kܙ ODpW|_|1me0{>Iӳ??%Z@2t yoWO(}8x*sjB Ge:)p7u|EDZ&nuTDC0Qd=o! &S8b<@W޼'R$/^n݄%+,K k fuX!D⊡,*٭+̮6H Ri+}ܿYɥZu$P((IOS{]%9i~\M\QI Qa Ć &[<)9F̙g.ȹDzB3w;Mgn4(FP :9'-suΓ"EtpƚA8ҷ\M%Ε*Q ~2.,2B@^gbtD )UTBjA#i2 (⽱0hJåix{vi$ѣwl L rh2\=l6t!(ݧtzU/R3UJln`0<6饹ͬi#U9gn2}TJ Dz4`'МLGM%lӤ陮OWNK*Fw c2l}K1i\b& r=eE"d \LlGp=*1VKyG߬CL`caH|h4H¶J<'$O:$fvnQj6gQ˗rJN%% PT ]? _0ӃS+%f* wȜ/TͿ's,FòOJJ$kJNu WVDx6J sN шGnx # ^aZ!gyB^^a"m 2- BGDu5  @9VNl,=Q38&\18[ZF4B ;Rc]2-*VnI#_;(xiwIG*!JqA 4욘Ŕ z|߼9yƲ <ITs9h7T ? #$@@R R7+m0s-2:ȁQRPxrǔBQe_ކD @WV6-6:ә6Fʮ0Sv{p*.)M -i֞#uRpD!4?ج7 +l~_1TjRDL%7pudfdXVܦ{'cMWp1eѬo&<2E;mI;(O>8EWk!!5?~9-K9!Vj* 9zG{ǃq<ӷW@0j]uX/IX8ObxU= HHAwD1Էgx`eEp:WդW9O $0d!ͷs*I! ;$ ޿گ5θw!_Oe7{.tcW)u봹y(hY.j[֖oh(^LOׇ>4SD)h`Ro$;X'2UU@}U9!(Cfh_v2z HY踂0pkƧ8 XAKu%kEMs+kAѾ 0ůgZnjR-د9=tpW |\*> -CԨ]HK&Tçk}Ӵ޻^7>ɗ$GYD3Y3~O,v5QlCw^I{iDװ7 rx9Y>K%ǷR.q;=X `P)sk%r"xdOo}|uӌlIط$wpJ3X<8~2KZ/$ʟ ʦ8C43k }.k4o2?Q=ZL5{щ7G)$1BYs0RkGiہSTQ0-.~sHý|l,+UO?^#&Ҏ9g W]_=*6*v pzrm[ci c>~dhd&p#zQ,Ku Y rq3# qKB3rZM(TkI]PHK Y`/9?{|-^ào\/Nn]nܾDB淰_9WI/9'4DHErs ȅeN|eF#5+j(nTo;9̩HFyD9QFiYe6O?m mj6ɫg2a>(__u7(#K(sPC֨äe!-o}fۅq&Q݉BIJ;W30Kۚ;'Cevۊ1N}^JLn U7O'Z~PM\M]Qʂ2w#\ln"['*K%-if6/aT8Qsd\'.ym:xkXA87+!jKj-`Ǔ:$B_tC0KHȼ\¦Мʂ,}yUpuַ07tն]كqEJROX! 5{)M,bBtRgJ^iEAFx©W "~/tݢ.25JC9ܒ?$ȶ;42`)W'>=s--^5sSμg9"q$HAr̠6a•V3;B-G*1ùB+WjMa@IM- Fz$,R+ T.+ l˨' kp 2s 4|cntU*ZT# I-뀆.WX|eV5BYLh&B;6cA?x()`7Ρ1Y?fiR>TУ+%.0]{Sj4KQZe_jΜ4X!yQ-~Hvy *>WBMOg`Ռ`~wvu6/f庩#UH_< Hۓ 6;VWN0V® 7eln~;R'BoT~V7~6P%g#Zٻ(ƌ h7Y-RAb*=#' TuFa[lRuQfkb RZ敭 *}D-o:2.6u, \\F}&[we')WԬ;R.| m.C$ZzzҎJ!}fD鏈(^jW!H׸煋g4Qq{|Y;h8~P}["XnjhNwM)}[&w,\!sp֚r\O,OF8:_CQo5*K_Apmuo匋GRjQ%ЩL5ǘw> $f!S5NV{oc+V˴tR^jŭ_HMp;2 WR;G3`;!_ˢn3%ϐPm[8H$` zMwO!hXdXsF|jBDDP 5T0&?9~Tb.&X@fkWuw(?b;P_ P˴!;_&D;@nUxqyĞQf8NV@FR=/W]* Z,_oBgn_#I92eSlXmrrt>4lZdoCd}Ɣ2 I?p;sn8?6 ;7JSTV;V aKdI]D=/_9.z_~Th4n|N,jXܖ~ydx,0iXS!vF9C-ʚg*c^ 3),pRRW!<``y Ly썋NNOsڂoT ǔQ%UAX۬D0. [$v!N9"+ b/WBboXȁ_еP;"ȟ2nvVYc%ZC̫ ~:}tuiGxWOAd6.n@ GNdiMGhcdD"@%}7g=$!7GcȲm* YY @j C|FG,ZW;YϪqij/y@C@D;*XJi';Ed(T Ky.0}Il_,'wTDD9}sZ{1f?aWwu- c{*U&szǝAYY1 9_:Ww:e:>H-捨ID/fNrՠCNIwa?TFTǎBc0$&#t!}ja7A97g3斬w4mG'v\]ZjJq^W@6gi҄V__75I +ɓ4MfH1˒bd`>spWeBCŌդ8;7+7m^ïFY S&%3PY\ Grv|WRf;BJv aDᔕSږi-KIVOx"J5`ۙ.lrOzs@d`L%lmVᵈSf=3i~P(cP.W!>#<(3"MZ7:yw!BF@ aGonܞƖz@)osĤ=хdKޅG.T%13TkDJU(dISG#&E?#Jq:Iwb>T1f#SX>@rb"n m{MjClk*^*023hx({#0r&} ui/"~{u$+U밖"C~z5RTdffY0M~_ @nd40:WWueFwe-1!˅dcZ|^tJ*ήA Gl9D_%<=-&AZF@@gCG/9I)Z8d$5V`guclH#4vSCܑ4 =DqCY*Yo3nЛr0#2N $e`Tk׺:ui8$,8igy2i u#nPVFMSfsB yN"ؚ{ysLE@ &@^"KE_2Q{Jec%DfFw]{A9򍊘V##0rVXyrl~KڏR&KHԾ)Ś )Dѧ?T^kz8>x6h,%^G`ЫMNGi'[Eba GU"ZtwY(Vs | 9 O XM ׎i/mq2m3^.`f^;/Se?(0 tsa"zݍ!ٓ23<} CG޴meSet7Rlf8@2_r(.0֋ِIH!Unэs$KQ> ?;JF,:k'Jȶ#T2J&<}Ξhgx͒0A@T45@?nr0MPOet@@laLU_NA6_ E|ޢMk" M.ܑ3gqbHqgZM`?v@jN;joV9:JӗW&DGJsfˎB;agYXԑ%ah_5Z7;Aʕ;/?z}n9/I:%tFh:󽚼6څME{ctY+vG'x+zVJA ~޳WpaYE@$iDҼ .ImWOt~{%N/#)VlKD-A"}h%qJQ|WQ` ʼ}ֻG8ȔgYY,b?;S.L)]+O(yV俜>46L\ьzZ4-50M3Nץc6 n! Aݺy:>c".zz>G&Z;V\D\mv7cQk=C-KR 6G`4 5wXj+t׬ "]Df*gWU$:6-KiWd# b!?u4kCjImgsހaSeIEgV/ WSK$g1A}\ʠ::%^p=>7Z9MUd[EBw&-A.}Lp uRmҦ}[i@naտpd+ (s"THquc$u59睟-R.\s 39~ܶ6wvڙ90 lrjQXiڔzTN.QA>1?Y^gpy_&)J*79^&@(X[Grƚk/9pLYBvXȷ|`N&d)-f&sZݫ K4s!2E1Y!PKBsDqbV[C}@H>Ö-`򧗤b y6W3=;}Op&`N\eծJ?y>I;+$b0j^ 7i?7ehPAΐ1nP^B3;DR"C@HXbIH}"b\ gTSxXk& s2qJDyS 7K6K]*)O@?z)/j7Bi:uk:%p>esD T͑Ɔcλ FBFQW.:2fG3kI98JeƯ=; kU1ODё0Q( S|ɦatk&h:~m0v26OgM29IDcG(b] 6JPϠ\$|2K䟦<o &?0dQyȱNVz\uHќr~މH7ћ2Y?aMڒ/}|e$njX-ՉoJ|H\v_=zbAXzB?_!l/Z ah>U4~A;G޲хÕ>%x8⤬SHj ea?3/-O j"!~"u>ni::?E> ;YSPCʹZ{C`8Qe@1p-&8I+'lI0}.2#b[p*cp~QL@7П ZAP/G/}=>H"giHPhb4(9q}#sY ^͹dubwz$+׏ϦR$Bw[A!5W/wـ?<Q\<^48гM@u_7rǛ~(.S }5/V[//._~9+CcYom(=#o4wlo8sHp_rbWzR D/p汳]Ge~gϺiW'8|dlW\x[Sq؛ڣ'@^ ;)A(tMA]`UqZsTO) 2v l3?ijvl|Jg`N e(4dn HZyFNhIUZ^e TPS]Lo9(~ -IhHmkcGiZP/\ɻs+۲7wP(! Y?WVno8&6Rv0 pTAن|S]ė|SxhFA^tNP R0u]t ZN$ }nAo#$Ii6GK:q:}0wXh?َXSkSG ;Hc 0&^P"_PbQJdԊJZ C>ժخ mg;_}^-tydEG ssT cVaϪK #TE 2؏#o؈̕Cѡ`.~]UDJ:MDH]}\3D["<3 ŧwVp靴IH>:A yseĮrqʼz!W="uzm%M[ǂ݂XUQ)Ĕ"[1MWDJM }6)vEBUҐb E!81siή|_f zcY:)v.eaNz!rak,90]fAڄ#")gw7m 0RӖ[o?ȀسJ-d0_A<Ϝ:Vk6ݓ9p xF얘NDq ܗПrݞ>Š{FuhR:S*VU#xֿUw=xFe9ezT Ab>Lws O[aת(ӏ㸇|X:$/s8lPyܫxS,[aR\}J+8MW %rlKnU:s 1NR7vpR{{ g U ?)("3ugEV &T7$?0!h!NwJí3P~UfĖ9n?%\G(@5t'H`sϝ$$Q^wWä`@A':/ yٗ$τfS7}(w%؀ .Qx&0eY?s"]2U3(IZ*karfnB`fǗ6Mt& KK}f56s a~-$ ɅS+"$JfPޕ0w?X^A/]oj!(P {~7#͚PA,`,F6.8zݽnQW oo=)g bbVa\HfJxo 0xg!Yhh`[}^ .q^hs$3ke UWWjn !3^-@ [PhT>l|7$t"Dk{PQ&bk*|Yo˓]JYgҪB52 1)t cY0"/aE[wg[T@oӛmMoz?w_I1Gl?0Q5<B:G1f'd!lI.Q0NPxNDV7Y*U6;95">^t\p1 Wl#¦ /gJ\ij7-4G~fqCtL"Cs@Zb(^K8 6⏐q$pSrʠL ~8}$x1iN#T.Xܤie&hE[MqC[nCwT([PP0'|o2 1ɚY{;h34-q$}q.%kkSHX B:ظit%F#MƔ/5)d֟͌l8 yO1'`v;+гwJeuLOHdT+?dہ&( ԄZ3hGE07CҪsC"*QTM8Z?:7V]=_w2<|7+dR4LnƱS~I]"lڹI,< 5o`6IVVcD쪈AEyup*3y j6z ;$/\`,24N7'?HvboXRIۻ4)&&(ͷᵷWtʌy%T5zV4NJWγ!,hn٠w5S#Y}mI<(dM_1i*="AfIM1U˚\GIEU=Z !BbKBL?PP2;幏W>&n;yJ&$bPˡbw9Az9';L\p}O_Je\hD<ϘYyrP n$Yd|tKm[\KQ ۧ|+6xӬpĘrUI'릒Ü/o⁑C֍ʋ5rjH+&ciM쭔í)=&~YȁsQOZ͑ͭNTV<̇O{n$8B$u:5S2+IweRbočgkI$"e=bu@]glC+Etv aC:d>2BVޠ52UN8ʸΓXyH}Xþ }d@-Fϣ_a隵i۰7~-4(N&< OE}"znH^݉twQ?ưxSD *V$mk@E{UJ"6&"ځw;tW8|" f'Jzs~ATnO+-7F'VNTLjK{)m ,r%bQF!xzݐgi\;AiL xmâñª#> uY8Ƭp";%<&C[?: ʵQ ;50h/Sa58(Vꬫ{zd1ԩ$A[/% u qq=puEHyȈZ ѱ=2C.% eyy 3-em_Yy @&dN\kP'푁?gօEGuݷ J!IdMw!%&l!+`fpW% \:(b阽D(g΍%P FH,S?\T94 $xzKn_$JF%3] l.mu)W(91<ր92Q:KRҝ]e$m]hk-:aq6[9m9r!JnsnF)ո؇ŬaLD8${a\QQ6v׬s 1vF` tC$ېJaM )BP,'T(0C:S`akӿNdh;?AW:x{ *^'O$tzKt--' T&w!ZMȗ< ߏ&5L-UlQbWcj\'$ nj}GGuA6Mi>Wm&;OMF$cӈkmw?[b+-ă*p VUQ~)5֒m*Ce,./A SC ~C&DEr)iԲr0$o ?}uJ/Ě{7ilBS5lfܐ}dXR!2C2gj! &0' "ȌB]F mz&yvYGEy~C4Z#]kC@RU81i(TQ>o-u}pk>M4?;e*`$ߛ>WZkQw^Ue9 U6_#Z^EIZRnn4#;U3Dz6pSV^% c@N+\ '% a2/}?}a ӯrhIi]Ƌi1kkx[>rXJcφ\7bXO rI.;JJB)sV2ʚP {Z7IQJb||n0RXoayG6=u$ ?7RY($5l3ZjRa[?a}׃&N$|2Q!R6[[/rװmAUyDd/ƙGa u`%yy5~;WΜ\r;1%G{>TїqR'O^/IY#q ZL݊h̖VŁw OVX6ڞAi98K; Ghrpi248_CP]GUm2"6\D 9 y)l!b,ʢ#0ҀA,kK':c{0fkIODۃ=֢z /,'CA^8Ula@RWQ'rő"^JS Iܛ쯒Bϖ7yj9gFA5mt9x5HJ^Vgcn[Zl^5娍Dr$S268u3^ ڤتŸ+RŕyP:q"o,iPP^\TDEL"L]NM#b%b;E I+ҘK|u`+lOw q[C]3vD}1df1&7c6`\*Z`.C&u1_0Ae+Mm|TEf>!/Kg Pv;ses(OcuS. FF𻭃 9+?S\# h×TϜ,^ 7VMLnY])~'8 [HɛutFGsSk Lxlllma j_ mI1<|iaaJ沝eߎS< މr?` ^W7e+Z Rk"OZCD y wgőV?e~ig|wdn$[䵶/v˜/{(n&vK{32F2X;rP+HMX1 ]q Hed3e3^g~p&FuL]+^CNVLf nD,JL ٯSUF@ < qM?C1"XP?//U_gz{w@ 7w߹ZǐZ!\ & VY/]n;4xglwt"] )I|_Ywܥf$mLzD(Lq+U0]755i-@2 Rtku'Rqҽ24`\=ͷ%'w~wo%zVjw9tJ2GbHSo’H0hYQ2R o]%&: >m1"XlTS#K 0ѡ+@D<68I]*ӑte3B.;Ǒ'$ w *”a @zŔ^In!y2%&k(W]^=I7}dfAӠkFсK5d+%rGxl%:D[^~%[~~ }߯NƱ}ou٧O_ ]^>y+ ]7p*` ~C1+_߲]0YERMoldJL0C);X,"@0X\&cH 4CE?=wF1GoYˍwuͶ䇳?7GowE]qY/|'Scs}^nqv6k ۃbPh0?7_~g).lnFg{)a߯pr{X2[[,Z~\O+1umgչz?q qփ='-_F>~}qk%&ƀʼnrN9nK^XT)&F{xvyY~ާn}^5վ{M Lghqz/#)и-']5F@ 2QlTچ:G~ب:[5{C;i}`߮rwxᙛgozv=2_cu}.ݴvfyz n|qEs^e1;ͯ;f\8wLfodI ^T1؁]=mXqK5?!r>C5!^~oժoh]{Kkq.2?0>s$L3 TWݺu[?qD@J?J,Ī q[8O5\8i{Z#a'/VUAQiP$:gGR#vAMU';1bZhdSFͱG?0Ht~#0Y#!cWEңQU|3&㜧SP||Nz6hQ$. cBqn!vlW(',;ѣ|YuC v<&.m~m.g*xa%qhv ( ,QyEJύVB7hXHʡHc "7Q1OXFuDXӬ&>ה-r2y! z9afxqs4~Df{SjIF:8)[H&HHEȽ{F)N+$EpUMYXI`d! \)ncC>'fPF!NPXȂF<4I ^*5c`7-Z@ÔX%& H5k ?,TOָS;>:Byo嬀U)@ "$ 'd\>,7F`J̮ue$# 4 TQ8Ư:"JJe}asC%I1E"kPA6rM [Ͼa&go*0=:/d !fdGTwgVX]MAF:)#!*(Ht1aP'wKbm:8 lDFN0=qIz[ kco.jcNE+CEDE@8-msQj2VwS'|=銆$ xԱUFhy?cVJWƀH4/ Z(R|9En]o;Q%"P8Vf%5 >@I Oji?v醝T1 jdSVQ4>S"a-r*yK}3AkwnjVk~֘\f2EP5ct5l {w3-ݴHN;[LGװs15k^IgmL,ݖ<{to7ΊIa4Hhd*"S;o`W>""o]5^ISႆ Y"3!/.}ccyXyܶ_яK~}ݷi9thr;7O -O{qjLÎ8y%[2snK25O7Eof<ihr@COrG}c$ug}u< v竽EFIy%}'.9)w#?O:&C%ȏNpJS<:;&a 4~Dd5QTQSRQ% , -n`0v`(JCaTYUdA"ƶ~vlEAR滚kUD%TAIESIISTԑLSPAMDO\bA"0"ƈ R#A!c"̐*T -Df&eG,$QLHr XJb E @s1a/14ɘc A)81BAS1zzP{:#OO q>Tt GW̒^bfBO@Ē2H1hrrO7dh_Q8#I6F&A_΀(`?{$vx. ̊A휁o|6j;fĻ Slbt*=W֒+ti}cWŧ}M]u|?k[7rUˍ~K)/n~?_ce7m2Zx3T%zY LGeOu0|+4c62^&rv5>`;_kHrL ЕH(pVUEho]Ǧ{~[RC4C[PV4ALlwտb۪ZpA[F #'R= MsQ b(hٷ@2 KEoHZP+|| ?;4x[5&IP5QEc 7WxDM$pVo52hDJm3jNBKʖJkqͿm̾HxYvu7bS +%Sghd>jO 20c3R'#/sM2#aRgtG?&=kȾc!x7܃[ ybc$ube-z?qgc2.uY?BW."zٿvZ0|/C`il67σy9>xϞ}s{!H_.T)4XlHT}(Bndi*勴GE.8 ĔzGz*?eG@#@# !>l|xQAQP:qCNAE; 2r#|i"rKgﺿ{x}YWO_7hm|}MU`"v5eYW$!s<ȵj 9h%У^2^G3)xks2Є-".9 T+(TurDlx:3[#m2IigenߺA Ӧ])X z#,.aEbS'ӟJ?Ćl7y*.D I:_d:A}k:揎ΉľX?[h|oGz?xvwt_xVi+^}+c?"ʚ,4>7m7a̍^V_{wg{^|bگi|FMuf.Xh:{TcU 6BBLr꠵]Ufd# .f~reTߣm [lҹ v沟/y]vIݽ܏wtui;6n'SW~/{) 7+[v`5`ac LeIoaGj.MjA5A6x(bġ#3W`}ۖUƣQm[6uAI;rv(|C|elv:k)sa>vGNg=}hKYGV4hD,^9RͲFfoseNd/ ќ&B Swf͹qi*tsۏ߳cl-Wz֊Z>+"t$͞KR |:El@{,G1~{Uh;q{`?fBg{F# (ͮ(n[?A g*̦ܻn̽{D&s?c:l\M9L(* n4"9 ߔvn8rG8GtzN['u_g*]cZB7\Rv ŕ>&, Qs"e{=GF[܊ɴn9vmh8zN7DHs!"ԀuZ BBi^7JJ ׎(YL])>ڙtLX{MB@;nB^ks{N|'nt|*Ё,#*x1j2)C(`|AkLn "5_ɟJwK AtywqmIN<ԎGJ޳Ct jqvIw|t5GTTҖCs<Hx.g)ҙkuu ASqôwcЯ?[f,OdM+`o?[Gg/YYvVW]<\!g @$(U)D(JN^K%cABEFNL@R[kBJ[KjHyLlĮJBعYʊ0,&HYPATUeIJh{;]hpå>|<. 񅁲F,AİĶ%GtٛĊ=cw/*d|499_>ի_(X#I8c!E `PmK>V)phq?n6@d=L,T6`aB :72ObꊸtfH䶩0T 9Ϟy,<=jcvo 7qd 0ֲ2J\Ҵ~GAvi߶yDa4h yj-ʳ_@g`wnD&F kJs'bǷs`_n_ͻ};sObazּ sy~/:  i; W6<>"f:Ƚ7|]ͷϪxFog< f[;E yo΁EPa74BZSzz1Tໂ<!N}#m$٣Ǻ]sq~Ր%tUFQӹEλAhciɈ*^YL3M47QR=e1R wd/d$G9C7Iw; b=h>RC̿9W!jkk_,<džE@0vˁ~0aL# 36 [f,}m;PZ }=Rފ#z:+qd[ת POTCu=C6Dp)oьu!W7tyE5mn:/(BH5KAI@ҕCMPP44F- )Jd,M$ML@Ud1,Fd4 + o41UwBMDC@ՀӔdzcpCmօ;N72(eS`@HO`U<αlήhQZ*(0E-z i"՘ԪrwsV y`K&oehSAǩoz<ɎW /fY7Ԕ87@[{4"0z%;?3Ӫd HmPB +WL/ެK#X`+'*hӲ6sV%캔GM=A^I."ta@ 1w\t~LOhi3')6d1p؃x9ӄ <>xҞqv 7++A!Z;%u* D/1^QLy7GM9*v>݉^(PJEG.ժZluEF !2^pn: nJb"{,)QmIQ 8JV8G|JIFA;2:tZ:Ҟ8& FЩ3"7##,UE'g;Kw r@4 i`V@TJ1ROJR4o~`̭m@~UI"[-::ZRYF!"4(9#  {VZJSYVƏە? 9rp]ϬZU2sRʶ8:S C t&]M[&MfjQr sz E}Cm!QC7p py{9ۯ#W G,C\EM^^Xv bl/qaDu bUV"*&5XW`*EJ5Wlu_vQBԠt`eT2 rh~)i-F(؇'nM(^*$C8de}"!.,82-`ر3S3UY'4kQPM1XJNGA^ n]h~޴7,,P%W-0O2"B3߹ЦnK!U脡ܻۃf D\:o&_ͱl אַ ׺{Zxt{ /p"Q,*ҎCe8RQ 'Ee"x #;VAз?y =B 6hT ћ1$[&>\\;i"7cz~q< ™ҊS#[P]f;{w;Gcs[mŇ>JTc7mt2rŘWzX+{3[p`G/\k{M{$U}qo5za ׺PbIx:=&زӪϒ㛥ٳrґAjF8O0!ۡmPUFs7`ō_ 9|\{l4Aѿn S7+~]:w.wt x{Я8jsڭ:[~6Sz^KNy޹#)kZ Cx/@\B_5,=twV/^6,.ǖ^,i㯹wlzW'zIm"ݧB9| (nw%¾i4u!/$'Y fNKoGaSz#tV7ׂ}[8:6,Lޗ ml{=/wV,7u,Wƒ:RMyo7!oaE Ƀmb@Hc67֐_'zYbݐGQ-՗yg6P)odC?&/+ b.aF@\I]#>BʻZZ`gl94\DYv;y\mkgRQvv[UͪmE/#-9$YVbzU <_qfES>v_s>O+Q]a=\_cL(l2M+t?xJûGyJny[%w9wtV4ҮqwjTFK7^]_O], WhIpAď >Rf2>53-ebSQ{ foP G&27?#{쬗xDuTv յu׎oZ*3sY} )TeJS"@Ȁ0i(sR$X)H}nӴ g!e V%>=uJ9^f"ۣ~o]OP\Lk -V%gNo*Ͻ,e9(<Lڨk|"y3\R@lp蜏؃1#!€Be#l4|@v}#~½qy{37h) ErdH'VJ9~~DvЀ{MAtĆN.f$hRL6v cpguvQ~^_Kg~(l[^y wPrY[ u_]3}<.7y}(ڽ#=u,g 9[[8-lOKuۯr<|&!%U~[+TWf \mZ*[=4sg}ʩIע 5wg0]-ֳm̤~-~r]r`'5H#ַuB'cx}R=V2on)L=JO|~FID$#q`%02Y 'lnϡ[Nq%z^`2ԝGl{P{DJpO MA:;cvLO ;paO~@3(L|iڝ~ʸ/ctt'EPCM033#a#~V$i~cΠ@G08, C 3]UDGuvjZVБV5 |Movu27:xʼFحt%bB&t!:=k_A-jq|G_$98U†)C(9ILXň&Yj%@'(.}1~_n5r-:|};36#1\``Eg&]T2qQ%$] 2 mke|{okYE(cgz=k(_/6y=;q̂"AT1!Idmﰄ4 ʇdh_/hPD0ITS]4AE@_9[ w$!Jn@H@tЇ^ACSrGvPSE\;\ CS_?vpY/e)P mP)]#N (X 6F|sX?R M|tuLdeC}|J9:>Ҷ7}EyUh"6IC!Ї.麞?]sd<)S4 0DGY@S+ˆ?H@$BPJQZ iiP묁+(d{'> yf_'|lPLhtLsZ*M+" 2ek1&c12#nF>܌{?zTBb!!M̗ *CJG׬nHƵ?d[8\( oQMfC)HBrn0F?Ĺ {XڌhnJ]}S1o?+v~P _|2ZC`0] p34ɶW֎MFi }ST@G27+Gqt5~8 dDFP(o۠;=ŘOIׇ}AHѕ.Ig5I!G_X c_${\* ǓA\uKL3K|[Fp>2-}^Cǭ ,q&Ԯ=謵Uۦ$b&UT㏺бM(5D0*]BFH`U?<. ̿0-gB+_qia#y$e* 9e02NS"TFhaQ'n}qefllnrv9Ir*JbjilJĞWCBW5XPMB< ՎS SodU46)4QDsXtY$RNB@a*Qޣ[=k}_Ӹ=]f p}mx W-{Z3> તu?OfrU8~]v0` )0Gb@C.0cAh>g*4vA칾oӋg]$RgWc3 s|jRw>~/O}!$"|. {s7"%g]RNo|\j&NHy\%~A ¡R!(d4ocLB=ƾ)#P12qyyԃ,la)!cr* 0@<̩MF pE@d &T \= YUqFjٙNъv @HV WR\t$w懳, kWyfm̐߆qhO}F$j]o8a-W\Uͭ:qeˑXys\ "k~Ow9Ԡ}QJ:?^^v|VQ#qТ=EEFuudRe9Tz}8FK꩝5~7s;o@+ 9kh}sE :Ô+bw[2PTȰiڰIz&5kd,T5Mq2U/ڎ?.GmaG:Α$_lqHP$2t?O@ gC,TOijv?(EGv$tDI?7S= t1Zaړ8jeM>k###M%&(߅Hԥ'/a5` w7XwSfWV >L^;Wi_~hHZl0.w@KsЮ:saNcs`rmr=>nGi\KVI!"DCpşg&#X&JٔU-,j6{0{[cϩ1c"*ֺk$XʧXRхÅa2)W-RQ)mo)(ȖU)yL1=Juk+tMD dp?r$VZA k/G)y!C,I F!v>O0Hgil)8 OO~|Zvg$25[D1 d(- Zo^'iѱ\ ֳa5j/ń=]fM޽?$:]m՞KK^׿} ɘ'O?ky,7e}2d:Tt)!aT:@"Fj͈`.òݰsz9#uId?x}t" ȑݑ 0@ ;2r;-eoR ;FwjjΘz2mg;mGV\>g42JroW_*tIϏAJPn ?"E!M0d5Om )UWXU>d)k":‰JDD a$^E[*kKIm7l#$Suﮒq~vxFo~}Ķ+M,&V6Rz'eϠ~:F9cfs@@TiiQzH @D@iU EA!E~fH  SwAig||,#rb }Bwpʙ#oi 4/&չy6}&k"W:8-kW%MB\ ݚLJt\oO{ ]SiaMKuZ(nEjtRX?A2_?ZsLBܐ_;+Q3Epa9 IFY] TPu$_dPþ]G8\?z]&=g}ZeBeW܀{0 ۖ·n5?ePDJ"@@Ԥz,Y`Lzjі#?/<qx0F:։ HM#CP`|˿7 >oT0brasc/ް܄$$;A;^']gJ$W%1ԐE>8}mmMYjjE 4~F0HrP¼XJt &Z͉̚)_}w 0Vl8TbYL°&~,ҝ?~fCM}x́{`OBm4W߲]H `2y冖[IwN_X7өeẼAAHh?]/bH? [9g%AWکƀ€,;GM@zu86kp݇Ha~>](d(r~sU?W;6Bbh NpzN@T@cߦ`(Dxkϖx I*7P!sXlo0qv<10fw(S::7}Ɵm~}F }93L]Pu-oo\Zb2p.Wo9#f(JG'< { y4 L$&JD@RK?Y}G˂]I3 $-hZj~N] NϢ9^oDNM+Hz/BMor#֢WH!4Kd\h>n֙f!aFT%g|ZW U]q Yk:  /\,B;9Ap;'cx',h8c`8B0Tr٤EzL?pnْܺk Y_: 7ѬM4vR)htpzyA\(F<3@=NY>,4 #wj8O?RՊƢ\% 1-i!߬L#ېx:R|wT AkxlM75]_̥Q+E>Y=#f~MizuyMgы)H[y%5MR1m87X44zc_>7Ig&!ǞϺX#M?,\> 6Լ*}^f&s7mPmI 2T(BЉC] );QD0$@¢D!LQG%ANL+I>X! ^{[OP{찿jaM::H5ۄ/i\!ny$ӤiJfЊ*P 8H˔P= !|<䀛xiv@"܈TU!D0EaPԚg佥\ŝ$Iov k]F&1 ncu;2n[GΗ:>0~-| t\ d\f2^wI~V9 .*%5j/w_Vғ:^4M_Gf}TL"5ٕ"AaRBo]J:QބЀo7Tn"}Uځ1,"8.\dk&[a7nnTAYS2mw$gFӹ/?7>̪%rr1ByC嘓X_z*$vfTk>]ίv%,)ZYWDqCT*P`4 J-gė%eiti _!i20PHV|3^ :q5ɵC+ cHUΚXɔX]8ϙk5VEE$dH˛%82vb"F9e{hRw&Sjz'Lo 1%E[߼mx `Uk)֫;''gIGrJ1|5Z#pJsp?y#Gp? C1 cك| 0ehbv˟і~tnx J- ׽1TXt$#Ửu հIRG[}pm7)Kt+T^ۻCͿeJ1ֻq?N@69I `E oI Tʇ&I5Xl ,b9}WBR$;@ tpO>M2tp3l-h#Zz0Yʼn:ICDOWDpw7fjG2mg" RE_@t|nʪz} {הJ6̉\Jz"O3u XD^NBi#m 4s)G=K}K>uA>eVk"aO$>Kt#2gQ96>DŽIЕ q=A簇<?נ˖f|UoHK=k@cT3:@tX'EfT!XRAX@%D#0@Q%'w3 {툄 /nehHǦLVhiTA'i'! (X@QJl#{/w5_{j1 =4 cz2~z‚GYg Y64{^Es1[\u`/18'k0%rur_{Pڂ .(6:TYmVJ}*;!qAßşεډ!`ّЃoe,-nA,iA 3EPɪL6Esd)r} aV{Q?=w|߹uMC" 0a('r㖊7~OãDTdd"R% &FI2RbaQABDf THR-R9!t2ߕ4$rrW%22@ʨB(E[b$@>jP1dXidƈVCw>7s 7O4DQ4Kj*&Hp/Yv PyAxn^S fH(THƹz?\1IMF8 A5`!ltgfJ{7N 6=Ffߢ.Ds؆!B4J44CBS0@_2R%BPj(7W'o{~#]gZ:Q:cdm#z>:jTBPJ+UA\wG'oK;ݤ\#bl3m@/^aTFɸUkR|:o [ %Q@RSTuR&fשA$oQIXF0ݎR D56-ݠ&b/L8H bSZEH4JVyUl.+O$.m/y:>+4_To)FCtrBFwB5RAJ)7=|M-6zƃ2F~u_ZustEA(&fμ7UacPi#X-$L Za_ DE2M?"' l0/Dd* 7(pik5I qn}~67rEu`"T F_ER?! k #P<$:J)J & @JJO__^yO[]PgoqG7^${SR~Ę C޸{θb,Qi8o2D-"otb&߇(ķD4DFƻ:gQMN%Y6H`!pL KնŒ{~D;`hezKflW) b/jSH61,ӾU|WV9Aƒo^S'>4ݔe^Q[\9}7ĶGp 6PCxV>Qy@<}f~(f[fRa39guE59V }%=w90 F #Fm""lǫo%(Iͻ9E8::XXֳ>WT{0~^M4EH4_c>̦q*68\|ˍ|rA@E1 ɝU;Ա^Ruo|yD#4 `vKHd_˅PP5IHD HoOϙCsh;\o?C~K܃\ E 2Da|L@OSX $_[ l)2&JQB'S%DT K BQC^5}9pݒ0p<~~3w/ŧs]ٿeڻ6aE]^82ϝ,#EaDĬb P`V)QYɬ2͔+U ݗlSx{7G*#U{,1(Ua&C3PӪYUfvq@S=8q# .vSu+9%в7VTG!s<ThCILվ$E0Fp!G[FDr1U0qP"BCIIOcXFjQHQBKZ; EVh#üTѓa@jx91tZ+ I9YVuֺe=iHjzOxJmm<2BjhOZ h2ɢ4zD\v>"m KUПM4a 0͡@ 7iTA,ă՞Dކ]n1vfG5d|AL`ALd+QQAFDJ"$RKDTgn IHHf)_ 3yվZmz_,?_V$1=X Sңþtna~5Ta\Ï @P($38ݼاi %&D4HxxP}z?^2/GqIGzVG5f`,>'E*q"1Kop l9"5 9t#oT|s;=~I/ѩz|d.UV6zͦ` ˒ȇ8'n௨J ^~=\  TAl!!1HJA,cJ`[cģ`wF^yL{ވ{3a`JdF eGP'ތD*iRC@)5 v2 `\ v6Gs9g JeO;.$nvχ'i[2Śն;qoGrJ!*)|._70(Ʀ2!/}T"Mݱy?;1!.ɂ:!BB?H4~t9Q"kNJ:Jc hTD]0r89 2Eh"]B)0(A & Kj =+HucTg|[cgm9`5N +.E@(XU[à{zv[hPJ)7uCA& z^"5<ܵlѬ߉]D᠈YeG֚b[>q*; R 意X, lH,,cSP N!wӁ!bHK02"dJP_څR}*E ~*( B0D;M)@ Eì=4]3FB%Hmg| 䇆p+jC(P!RKV\TtvְF.BJIU9 &bb ҍ7L^Z=[2XʔBBnR9{B!7cn:X:GBBA \ CBF D}C 0|g(&|HȆBqDe $_Gk9kqBh⼲Xb? 粊z" JL;I;qrڿ$kѦ0N@4 SNr  @8d ހ0d^I}Coo [}KcgO, ;W*  HRP)~TiNa(C !U%@O&{W@@qAcB Y!aL&` |*rM=VpyS? ;2ʨ"J0m==a:>YV: IB>! MX΁Oǹ'@=ff`GMjq{9jrl)&5]_KJ_.y/ z -*[s<&V3c{bae[S_Y%lDWtb ԙ"Gf!rOFEI$ױL{8w^5dLÇ z& |)~kͦaD,t![جz_kEd?+8QF r?6j-{UfE;7ϾI؆(j.}{eM\}wg+MOOs &v!t!Cl&|dz]|'}S^ScQArhBpDMy!d@JAޔDPh7#4P.9ahA)3|bX[ ]ZzUt#' :/#9]]T7jU= KXT2S_0a?'@H4H 2a~ןq>bt>P >j[u"$} 5 1N7tlaiCՑ|{bܓؿ_%b.g#PI.3:qM(O,jФOD] U-- cY,W*uzR33 A_68Mm$~D"Wß^^}Rk|1W廱Yy|9ڪAq J("S(N@b;M̅ %vj{64Q''A5 LˍM(zҜC\Z!&P?%" ĩ$Q,0]*8F]FHHФI s(Ao{Y~%a= o,\#˽3ۆ0$$$1S2w`>_Ym>4q+ P`y b†'%S+/~%`fe=C@`` r_+@DH4$6D8H:,zz UG¿Qi4xK:RbwݲRV=aU2qQ miQӕ1ca<"s1D'xRI-o6-{jsXS# ɭ͆x KINKLSbC]F9r_nU*! lx\U[F3nF  LivSN'pɉWG<)G|6Hqaw8/>o;sm_9,Wb@)>_龲ྮ}e?^<!TJdL!ty*js{^}57Gx0 0tQEB1t&% h/1瓖+!y{8vW?ۛ o ڜڱ̏ /o|- n܅Q4t"H,[qc꾧y,d%]߾\[-s41eR&BHaBAr(@(I)dA1'VCHFgŪx2o[**_:yeߕ4)3 f_,WXT+Nx4? V6$b>ٛ=)My8](|8}7Lc@7Hd_fqP)vwfSŷQ,چ.~$صwg* l6jTZӪZjw8',^}@a&29t?.`ghGUH2 J6P뢈TԬ;%K3lYb+M&tP0J(vHTZpawrqX[D{yۄsA#$3V@ JD=ߔ[12U*vG2[-ҫi OlY`m%'MVk[;gG 5 XPdߜkinޣD8 UKՂv\@$Y&&Z=W@ \GV"=$bo# Ǎ=zq}=l{ 0Rrx$Idid-z]K_}H8,`ޱӆ#$*Qd.F{ w1*j|_̯+TƶAڌ]x_*B\yÙ@ (q |=""B,+@֒ͼ>[xV$qs7] Z48WUPhs!gՇvb H" -Rsjy 5swDsfVlm ֢OqvnYG@ 4F /wTR3S39$.H!I/=?蝢q s]$Ϯi"KR<6$֣XAؒ* %wjT6}/@Z‡.5B^GBiH""@`wZQ*x:۬ߋӡ^6V֋ GdKJr}ilȰ&BMY_P#]B{OCp*_~o:Q7c" 6CȊg8zIֲ~?!61 Kz_"Տ{7/*{ev32KBRY{^ﶺI@&& )3H;L.$߿g_EYnɑfK7~n=ɶK=H^ǃ?+GQfj66B'cdb+bB?U|Ec2s϶_qQK݄n2Ka{[1Yeqq:bLG*;2O|`m2\P,`\'!yV.Fvx(22Jb q 6(-~oׅrM 2# L $'&’.ɉN8;gL,&FZq(9VJ1yHBH#@mڲGŪ?m<)k8nHOm(&;,ʥ4r6)|yX4!>+MZ=4yt˄,7H5΢OZQDEly#@&srCHJ`v+++EOu{|/6͉ v˫ R ZʅLJu.ҢF V)4U#okn2|H,j3j񕈂!XVaX{p1@ CB&J23d1-a,ӛ1~;>Q2U|o>KXMkߜCdb~tئ\YӹQ[#c'0Nl*Z.: pr_F4cv&3ں}P$("//[M5R_ȖwB(E(\`R:@(H1A3aQپ9ҐRb5\L, H^SPQ* 8QXz䀺CsѱCuf^0):'w[-t՘Ik, CmΰL 2iDV.)[etδ j0PumUM{U5 |iȄH9M?5guӢ;r:/wjn>~uxA._>N89InVRT;il#f<>.$hwp%i9B[.3ф=TU1 @a01]XjBBsvoeBp%mA |HugҘ$$}LHRf kH8D#* VZPm s)b%AAIF8N;EC!y@3VxPuQzkicpv]g;/"Ӎ/w$[ Is4ivFRN Ux\XreI!¾{@ѐA$D U(O*pMgՊ'ݎw5qW N75%II~LCK3)wDB]|Pd| Y+JFI$Є3-[)</S$㢍mby\W znie=8& Awɦ-z.YUޮk?[-8$.BD<[Ykg{O/'_ *ɓsue*7 U>d>4f EC3 & #@Ly{$ a V]|M=#=R ]%@-t ?zY/ yfU-0> LP]SGhGg GDP;2{a.=]$2RPe뭙6|֯K6'vr OgT\Qa!"gwQ5iq>S8:ٰ 0t*&D\X.:$=DmV2Ngq_whp663w!r+$lݻ757Dbԃ<BNCK72<ˉQJev0 S`^h5Q]YBb@[!޹D٢a{+;س<2|6V>ýV :R^j;WF {jրF ]ik+Λ^ٰ- nf^vYkաv&1GVEJ-rInkh*C}'Ł'&^B\Xc0J '7e_Q.&޶pkhk L{SHE}^Ѓu*ki)J P>0 >k4ۀoC?q;6Dhd1Zިi-ɥ=Rٯ/&OAҎ e[jZBlM}򕒐dÙ%[^k?0^DUU҂%6L?ʜH>E!8)yO+@9U/pP1D)M~k H{h,ùJ6x+лv"8:gLD׻G^`q?m#;FBRXR-H ݛ?OsǴYgmҊ\TهZct H7C6 [o"\$N5i6IY8y!m&C~[岢m1Fԧ%:\Y΍m,4FD{׹,69&AЍICJ 0FpM!Ne"<( ɇ2(puk~2zt~zPHő" (J'\kL hCAĊR|:Ue;Lͨ>;)eфhh%>L& Aвh=v TＸ $Ҽő'9$dl퉮yREȳMdHP&1gjƽ hlVu=Vq_a|~Ӆ߲Uq0FN2ZVT(N$$ãPu-Gh"ǐ0Ĉl]c=4)i4_=#o @1RhMF.AtE !/ٷם\Vp ,*9uYS޶,V[=DLõe3Og 2.@IXWbBlOuYP|֥YU|QBCNR!'{~zCC)n`"\U"H7f: T )*%P0uMۅ[Q!d("%;;ӭЎdi+b=A" CQu`$BвB*Ka; J~ 넄ᰋ}9jڂfOMNߴu=‹S ]IS i0aè7u&`}b } mw_=JӉ.;RП|~2q"1HI$6tc|w3ͭe[*U~goEjO6(\z☶܈j}5&] :ɐ 1sN,a]wli1bv[9 Zm&eCb(![##i"aavAU>0wrMVD3 jq4=ner͍Qb%ػs"dx(^쩡W ~rAfD8)!r6J3N_ ߫@/_lL%IgYqh=A5ld Oox|L4g'04)鉤@L!@L!0f ==+ާv͘k*r`((9$FǬ?BI}a(MHE?*`gd,#8hm (ټKƯs-EER$'@:a_}CJ!{Q؂7w-f$Dĉ__Guh=;b\L*2GZc+;#F&xxVj߷*VtQ7XU' + ?ï'h"ńDQSSHU+j 6#)Ǣ=SC _Jw;'[ʜݙZƸ8&eEc;5b4PĂm$$KZl]3\L >6ZK'3S^hC 1}&MB QZ%#+lF605(A]H$,er9@T)^ )y 8'i,jJ$K}8+JWb!EaaKRJQɗ NR+,mIsĄ^7e%JX8YB ֘l`-"˜,ӭ":$rV՝yNYՄ̍5\`0+L !DpNGʨ@|C7-4`C4rH#>]h4 lWݦ/g4dzj $?燯q .w.BH= ;+zn>@d7|byӨχI.rikL1qcHF^|5x=#ffpfA"SHd ,eB 7*ˇ6QC5(Tt,!mU!`_$d͝uB od_(KQAL>?:nC+/W0ԍzRXAY?ϭ\ice% ]OYYL)_'3.Vj@ꪐCpؠF*÷=jVpd b1£:?i7dI'r#3v(tՁUݩ 'a4^raF$&E#u gD{"2=;>wN/x]FC ~75t凼/g@<O? $r6yJ~gSOOeV> ,1$TrHG 6H6220v;w]_cOUCõp3mhx'-v7>g>QI1GhuRfYχ.I$lQd{wqa@0-+O3 ʡPRM>!|QjoCs4FX^IADEncٿy0 qVI0D,/sNMaLFɆ~u?\}1WHmgj݅^+.7!D 䟗T{GhcM}9 ȑG|ո ~Fd-΍+|Sƫ\#C~4z6 I8z:*UP0t)$6&I|u4/`;yXiDH{c8?軈wUZ6egw齭M,A1L4ʛ!Z"IeBR`wMqH/ĩ"H^Xe3T*by1-^9VIfB g;ueC&N 2ڠ]@͑YoB:T[[UXP)z!o2z%ABLY^>D*SףvD<'&M'A7=O!D!Z驾0y8{<6OhRrO`1;C)7$[-,ɳ{#OcéZq;b :Kj P~L/4.]n̄Xh(@H= % Q_k!B3IQq3PFy~PhyN㴈i K2 ̚QˡuIub&\27@/)+Z0u2TT r [U,:V!D˧\JբKIt.`e_`Vms00\JAǭL &<8J]Q2:}BTȌ# VIr}'iE'z,M6<uO 耱N  r:(_șp܎u}USrp4o<:Hp3wV/l%(A.=|$M:}_>C~B\jC1yFL/xJme"{R'e/Hݣ{ !jH66),KG ]/I̭e ypf`[quاp!t B![[R6.i۪NmrL9ҥ/nh_{SK9'*, HĖf~ ~'q nZ Xnָmd3I<7f'6^1( Ziwq˃IWJn V}D>Q=ڮCxm*S2}M(a&2N}ј/_6;xq: rykRvﲪ?_"SB"(Hsɣ<;F%1`=BeT$/Aq@`m9;f[mFP!FxİQ/-P(guٔ7WfJGvT`/%st/ا>/k/JsZ[bQv:k:UNʤRͥJ1et܅9`:u/Λ_I'I(hm|J>)H2T4[ۋIc`nN}V=d@SBud+a'nܗ>,EYFRX s}v{$d'.A~i>=?pNCz5QU'h:Qcc~p77~ܵTjT'OdNN5C$)AK+C;K ~IѼr1Ƴ prj XS(O*ˬ[t 4Yac<u}m @$oJ.K) > 1~quc*lGk۰ WEI%(><.LF9,o4{jAX'3G Wxb soj`qM _}Tvd^s&lOOQo#!2L7Ly5?W%8&3>uͧ,'02s3 "J| T/p%QV5[`HNPl.@×/GRZ=mIǑ6cU7To,vũpv' vy^ZitK=zgnS6(7RCMİ-<`E?HԔX/߽x)5=+ GH`'К 迳JMX֕ehC]*UGk$ᙸ @7 Sj/I-M\&( }Sr\P1NJzE2HH~(V-HϏNB|]&ИYtJjfpt* WgY7} g]͂3Vy.f֐F~>w{鋏 i*H@pP*-_ *>-)wvڍkRtnF؃ct:i_B($K.Ka j{t*)27G &p, ( Y،,+QY ,GiZPϪuDm)b$Lo}xg tpkBS c_tQ(iDmͨ1P7l ٫VTkj5 ‚|קV}ԋH1,i u%v0dR(RJ/SJʕ2J!N샬%(r!t܌<ޯXhdu2TڨRy`pA=Ao!w㷥qVw}poLABD~p B;i鳡IbZd♁~/SHd $!97=#My\HV.J?~@8?(dWW8SBV 3A05>.ªLn楂0s@#o}o t^`椫Ռڼqx\uRNfa|4f2yJiʧ$'gi44RN՛ NgųgΠ!{O]$0FY%(QvXl5aNe 䵒GLY- YAo/ISWDA,W =7.ǿ(k)ƨI8cL"RٲjM&)gzSjHAXQmn ٞ([`6R Fi= 7w& -|װsdEvƜp~<m٢ t ;g8Zh)vhlxi9lTojJ1c9k FSl BWG=3Z^RsM7DU) w4Gb ׻/Y >O~=8|6,+Fp^@ {@r!C?t(661n{o+Ҵ gbb& #u::WgR2ۇ4(jeo^]qNr|˧}unxCl5Sf*琬-[ .èD@:.J35oK͍H"dE3.|~zaqYzI0R\6w!E{!]%ߜ"JuAюԈe/W9m̅|^Ͳu\ B#}8ѯv'!F!=ԥdI, 8GV ٌBtU"wOA`3/ɤb hRv|OQ<^w{IqOn@rz5ګ$RP0IّA];n%.(lT" nsٹIlxc hV/^2_a'ʼn4C&lK祬Ň;0$Y>i6Mtsl(Ȏ*pr S'kP?3r;e璋FS7SIH=1<Т4{t?-®XBV]LLʓ7vn{ԐDD^/G~/nNKg)Ҡx,w['4}]lU>|GsbbϗVK&47BV@X|)=h~a"u24{"YCStH@`a:kG'>Y X`i 2­HW9;>Hftcf/u% 16&@ſֲEAWTT_ UH,YIVњhM%IMATT ,MDDTֶAE@TM SAEEKTT*R1 APcnDAXo.1e5f+aIg#R5{e$/Qy3[Ҧ@Zrb5,|2?g,69Qw#Q t̸/ie[1*>D)E8ȮYcEׇgP4z-ӚN! ,@! ?8a,ǞJ0J'`X^=='DB1&?LTw ܽ uAMtʊoE)0z_q1UPE~9W@]k39O.` =ʀv"o|[hލwc(I9SI,(P`Qƒ\J.s%}o'԰EQ$uwf`\ܑ&Vv=x 5%@8J)E>ߤ*zxEDSN.2}bDZ*$` H=tFBPþ3t*+ܛBOE(͹MA[aHqUp`)r)qEJW ͫEhhS]5HX`50vkjC+|K^vXU6uv+JJY&6<ۨ.L~R`qJ% y~n剗iI Z33_9A1̿s,<ݒT*yNk܌wB*LF4R1ʴ RoC" 1㽾Z% Qg"ƂïuW}AvX" ,9qij:MR &%^JPےjX]=>0~=jGdWA+>IEeU$`ʲVk36hB+`I$j5MQ;&K2TH$=DI?uӠ5W`ɎYYer`(4hqL.]$[in>F.TW YmqBoz>[KI\SFW D@aI+/>ZP02IVڥ$;Xi_yQVhnc_Վn+շלt.I@aO7<#M͊N r`Lhlu" .kzUbzK; tb!CPHN bK!% EUCVifhݞؕZip PлT .m& w.JIHdEt:&u糯$ća/֌ i}  zͼ<j1BM֌gf“Ih)50chevJ"ޓ. d`V41 ˹)cqfaEy1cs&ϭϼVϣ),3,TcUO8  0xt$_9K(C4(VWK3F:o:L/a?dѓpH4Tr9"IYv nM" tSx mC^ NW<5V@~_Vlin#ɩ ܐ Ӷ`En|q"(//,)KjDpǟzjDƤjq}1xRHx Qeа¤DձӪhZ3 ÿWOI[FEXB̐+Sd`sQA)$*(0F̗+mꕡS%[Oէ"Jk;oWzz.?g&X'$h*Ji䓇T`J޼ Vi86+S/  $t#gҪ8J6?ջ9Mn{ԅB>?y l]T?Fx(R ^Hiؑ^Ղʙt?M"11GΧȈ-~⦟r`uSQ?f(@֎*PvWH #B!w$R :9Aj'rJ[PxnT_y+",Yagаsܧ ]qAG١أ$SS_BkJDI6ȁ \% r 3ٖKxrˡp> jXDi9Ÿk*1Q;:// .7'*r$a3]<<|tTW_T~K][>Z Ζy䉳GxKIωS It3@))>G~;nTa#q4'-gyQMF c1 P3_\Tz& UI?w7Tܿ\cCmGǝI=g qam wHS\<FկnCn\`DsH TOtvH׶9z NĢ.T<ôS+IZc0S|,ol]I7c?*Eؐ/bjcZX;b7֖»)zF2= tȡOmCI` w궧&"ľ }b;(/ K%J-^ -cJͰ =\Sz|E2Ub΄e@Zo快Ip@LGPc *DG0bf0Vg&giTfh$ Gc(͒MLlȗQ4*T'{(91ti-΀)):DE1ky ğN )jjj/k~lY"i(fa.[vGx1f|' %q1SsHzC4 ).V51™"ﴻIyܢH 9|/`KRk~6&6hlCf7,lV7j`WSvn,VH`{sgzR ~mɻ= LR^3VHq"0*,&La@>z%ɵ7t|d?Sa+r9}9 GrvMTg˳:]ޤ aiD$=;J,ۇXt"~'S:4Y TQ@F2P[Tfd~roUkXQ}vicďlL?Tw֟i [ ٯ93®ҫ-AyPI~'-& 7Po"kd#֠Չؿ~澒7\?!^߃E\@hAYDpB9vV=ElكMhtK|?O 24כM2ԲbF7(i >gM'"ލn. &0i0GI$=2ӚIrlI{UE[Y446q^Vɛ@2˂HfzSTip`@@/Ϣ'?#MIrvwqrdl]>nlp?N;{h{-2^CS:=_xs2)$5}sbICTd4sܩң+!޼Ygjᛴ]wj[k1u(djq|h\LثXօr/Y2kZ+bHs&Nqjćyir r)!G7#J,Wz0 V*WXsN" & w۰gc>~၅1YX,!('o]y/,"YS׆<.ʊJ:؊>d+nz*5t.]*goB͏_n.G!yQ">*I۴$ D@30f?pղvi2ùXlK+3Kc }3X4 ]Ja1HGa  Y1wfo ۴]j%p_ڕL.| ٶ'z{2d`sR R4F`#>IƀdZd?o[7{n^TE$R'e3ۚ#uc_Ʈ]bʔLdPԕ:m7j*ҞT;b*fw @YSNŧ(3h\<`)3H{֏jA*=˿Owu6^-Fd CQĂWSWo<+. G5)m(bM5Za{!7 :VBf{ة8DE%P32'% A5~Ѥ7uǗA.qmehK{rI_);Oxb琉vT{7{uCw+)bŭ# M9 %޾ha%W+jm+euYsk.5ͨ֐rwB9/|XF÷1K sFxE4Y~ƈ451u4/{Ý O:ad ! ljx}kaWZp+>?a1Ygr#Z+=5qtNsjLHN/CRKֈk4"C\- N\< k5Hpr0Ix^0 .{^7fWnBa~n#cW ()[iҳ'/içIh?XK d ؘncJY--ğ˽>OZ|RŌ):oοhņU( 4&;gl\ӥ2RIM'ʃG؄mZn^XUG(LXn)DꨁcK!ʍsG֖dBn]\fᛌ&gcAARs #$ $0IC)9=,yv,(t 1/L0H[  C 8Iբ!H[fK(p`k 's{XafkLЎ䣅VzS*@BEi$UуFt7 {h}WE/<XXyHJ^]- ~Ga%>؟ 0Xu< # I]L5ei* aS@1 @ K-. eFsU%lJ,p].dݩ! >pe(4Q@ xkX H0d'pʾq s %DjFւ_qg>^W2=t=D($1W )(M老7!wprjwTw҃WK1+<Ҋ&9AĨD`G.[cFRG&kMTZy8?*.?)&0QQJW 'oTxF _WYymKYN/ C#Oތ58K)my?6aq ,RPPPLQ?I,Uhp|> /XQ.L52 Dd޽QB'w|BxfP8~n+]X[O1eLۜRfdH23Qڄ Ot}|v[*5?eNS by&[L(jPP<3DUi(Xdw]S8<GF_FٞDÏ?x?_VcZ&>AY$X(T6{2Ѣ}@ g6ح! ^}㷹E!T-4HP%!HP!% DR%-!D@S@Д @4!@P% JBP@߾`C`\Ͼ ^хVfoy:\?MDQ}γbmz!pz~$)QKaH!6m]0 2H\jd$+'V?>`w)G'D~n:V0з/܃5赁59BH>S @B®AJP4R4L"RJ 5:SHm9 aTPYw2i9}l 9@E F2p6@EQ '@EMD5t;柗ݙ6$eI3N1C?=<Bk\,fmR E0Ә̵/uIXՅo+IGZn *Q%%ZTlo?OSr3kc*9c62HlOv$!9Y+ foS<:Y@[Pbq*fJC"xG11{K&?ofށ!-̯^@JP;qn` c6;s`eꐮ,)QvOEFl/Yx]8'z/& iP_b81Agp>p ɉ"ߝ_bhX/ea{,gȆeDfdxL_^ eIpS3 ~ $?@a>{$`Fڬriҏ16KS,P^.shҗr^hA"AV(ֹzZy23L&". 0`t~v?qGAcJ!tKZ஘ {'ed3yZ4-pSnCqyR{vklhLy/_ɸإysA"&ϡm"BEr:ܥHsUD |>!%Po S.k.72]@]V&xVXJRl \1Jϵ`i~yUcn!f6Fԧn=EP+& >+(P1-De,: @'Q0{$6 <!ڴw,q˱͊aVH}_c+j[S`rSMJpe#պO՟YCf.7#b˿H}f`q$JG?BXh[CeaY?%aTM)jM?! =24>R e AGZv H.lr:+6~}6tenUS]H!2RJ@aMATZXY_^ya?]K K!j4@Yd=knp_04m&bb'[2 {ǗJ釭7Z1WҞa@qo{Șm1yeX#Gz7 J&c,;̇_qJja~zY=W,(ϢDګQ+Ja "#&{۞G zK i`53pbCmVl[<֊ŃLAtSbs8:A$kH0!`~g!Y"Kv%--8,Дwj-VAƣ!:m0D5LHTvCHp ~O /½[zuE I&*1 00]aaO`}ɱX>BVzE?&<8H^٨ ;нl:`;{I;0DUbϢ<;v;Pq RHER,.өVeZR "J [Q-lP(Z iUZ"Hx3pOp/6k;:E6* Kntqpy$]ŀtLSwV@%VbJ` ]4Go֙7gȨY=FIct~j'-O(9ĹBܧ~ OM(E^Sya[edȠJT:ZJut=;QXeUm8-oK ~a2PjZE挤knj82"dJ8ak.>HjPm' NS3rԘN.?'&15JM+\`q󮴘bzgҧ)fLeDV0֦!Cgg0(^BW>ĨT/:J'>ąHh j)PD,7a* 'ՆhzclL '@U29 4M,ҳe}Eggr@:|=4$l>Fr,Y4WZi5dZ?k5}m}F;bp.N`GPĎw_(U&n~U5 /$bPAdNI$<$!@ޮړkp! Wa=Vsyk A(qʑ{?uX"pnY@f^s'֚oFAL,ubGF$﯐՝fGki%`sUJH͉sd&9m7Rb?.=_MK*gP y7KU r2SL"9ęc^GŹS,A*G15o;~K[S qöΝЉt17a ]7evgCuc6 U]طŻ U]H5 E(bֳ.Ͷ?3a>ҞBk}=+8LɌ0Sg6Be7Qoo^pv*D(*8V3pfr5mxg,cqEJo ɋ־-="ngXbw`7yP f" 6< R m> >+sfL6Mu&z"qbR@:m_ǟ͕\mGw|}E?sz^qyp5]p BCAH)ӟdZSY[`TWC)m{d"H+ !}gLyԜrt&kکkBfM0Ai j֮{ Oo[7tyER4EM+AEĕIM-?E)(P)AKBSm-%j+.?{~TJ$:t?JK .xϳq?_4' Tv¨0@d;ZK)~/g:W0mEjf}}7oϩfLR>RW@sNG\DeP8[;#E 4ZUeڽD7YMW9rv-oo1h SF)}|fd:v%M 9k[کLHh[(-AA}) ;` hdnH , b]~俋,@3*Gz=v\ڟs'}; .m=; ;(izVa&^wgO)4S;U\Əy?}% (Nwx..=2u׺ER :8?u18z')&% Z9$l5(ΜDPIH|blH^Ī"׷`s<iWi&aHyHծ*KF@cnzWEd t@j;{ g>Ɓ@|ZaQh 6g=e6h]\ BTPu?{v8ng{&v{={*v2R6Z^×:NΚ/__<}NՔO,uvQ~כܷ539 YcgZ!ݩ8kj׊"lN#u">?͸*sfa/\ ]0eÎeKR-O$˪hއs݄=U-s-t]$$km,t.L o&ѕdeڟ"X0uR4-6#|akmMF^| uy|,3ћu(2AH_LScHc)$4 jrpM @RJJH~b~r}ߛ6R(Em?P!a>p+ߒ:DXTACJKY)]:XRB. i9Q aKc"},avyF]~em*rTilk ﺋ'g *r9xB bT^?,E[0.ܛ2Þ8pܒVQ Wa_9'vp6V@X@{a7׬?Wu)e UȯdK ^Q` 2Fsbr4CWN9ص{bcŀq`0[=(L NΓN1|hg4{ذclYx 9t"o/c Ou']1al2AUj7&?hsG? jI@:HIz#sq/iva]pU$,{#݇^DfЭ Cq&bzvJRxhHD֐1hY!oPq0۩gK*B*DidiVhT((ED}~wJt[E{{/(FMO@ ]TQS% Ş]ߞ ;>+/OWeQ;ʸdҲ뮽!ù G,\j$QΜ|U:xNQ^'u6ЍwkEcdɹt .k4)в$*_QQ)"DHRʶ=Z'U֞?zZmY;ϘԹ^jjj[P0EW>E2vn@E^>5D3ӡJ2 -i! 130IjJkE!^wBo*~./w_/eR٭Zgs#.Vu2am4 tm!N'6ɍ`1a_'ݺEwiL28 :iՎYq;4E,5*! \!xg XZ7K4bž*o2XTÞrC kyG yOrnݟ ` 1WfLjoau) Z_y{'}&2AM&<.2؛tRb|f^gmȦkf 0@5K@g! b cXU 5A=! v$w@!9cS9"kEҿbF$DN5~zWH0L9s[A7hRbO}LLO'2AcvzzI'>6O)D/T{Qu R6Wݗ:5 %]JBؕV0#Mˉœ;޳G8̍v] qZPkryKk+X2v|7]lyd ]hD Mq;U<8w`!ĻtIb@{!$[ڃUŤ2>,oO`i~+0@ O2 (%Nvkߺf..QQzȺ?@C M.2ĆzaeݘVE _ ʴ[fX]l@4/-бP_])G>DuV0ܹeBV3S[{gBrтhR¦{ܝ-6P y"tA2un8JE@|H5H^ֵkuRb15YzZEԱ{j(u5<*oYeuWUGF kAIύ$`sXL 7!8-_ j>Ih4sde*5#c!7;1Si~o^:7_>*%- #h~w;{Qq0l!4WX5uBmj%7J> D=9Y -#6 Ԡ$ArU>~*IA7w#`c9yD SRŅcrθ*dl=YXwc>7wx$oqN퓄0h֯y"[t$AEf̥otA§KV s"AM>;WL쭛c-–H @A@?~S09գ9X+t" "ʡ C1xE~E1Xs` [$~,M}0վ:J0FecEPnx]R+1#fX9HREhA172/}窤Gøwz427X[3jZ\yCInv'!<;[R wȀ H S$ y3gSSXCvC[]β(2(mbjSM(P6h7f6] 3ȓ!6$`yx6ۚ b$=y'焦- R%8']e7cRS/HtʺyVtð;Bxaȋ;9#P*NTm5Acԉ# ,"o üH6scObt |B86}[yQ*MS#AA{j(MZH(璲 oUUtJ JTt 2ոXB^_==xhM0yFG3P_~9$i"CM.;H!Fo"OwC,d1 ̘w_=!ܾRJPJd&!ضf]bncd^$ק#6`[Yo}񰶙0j܂ ]6@,00j09qXg""4!Y]"mE#bHG{t q!HM AoK:XT5C_^WaFp^@Pl ^L $zaAcfvfx˱B/),obH,]Dl& “hHzdK`Keבr. $4Q }].1t h"HFXT$PS"efOLELuZ81ALy=C_$9p@eڢέßlWckxr*Io8" 1&tfY+= ^ߧu.j_գ9mʍp_Yz+Az,2ΐ:HޥkpC6fPFAi]Y`\Z ɗ0F)e^Uj)|qj/V)x&Ё 4@RvR/;~S*$T LsN \o 1^n ]1R#K.,bԎK>vk?Ή1\.6CzW%ǽLFnKTEzUQbSF@67,Q#Ja;}znȕFu=X*Fzp G: nC7}4F* q)]ʶ:. Ӛ&+2xcl HhcI"̛Ǣ*5aC{_ʞlګ۽fCVd;薞- MU(In;$UYv97;dIيZ-th*gd/g9쬝#\!ލNEWs)щvPUHz%chHJBEE llԽw>ez<~[e|.=UBTvGr ߫zd\H:`7^0Ke]ŭ?2nM$R6jP7=~dd*!wm% B^Rk%ƘS}3&Ґp ð;cNAzhjZ蕊]b!fD7rbXY"SS.Iz%0a*6<]uqĤZ``]ω?qû҂9zONcz,oN:C`p:J 91%wc{ KkؓfSQ Y8ЫZ3Qw)7 X? tu *\ m:tH6]A 0%H Ě=X. Sfhʍ, R_[%pmJY-PmROwRFgFaÙ\LHxc.1_.~FXʐhI%)%+/Bbd_OOQVnki͛^gU#526-U#)F_h6dcF6(m7_fI _2UdC\'q-xލ'`9G]{1;|.gIe.;äVet|M "&X-f%ZOf01ASOH)cH; M^ n$HzyM6mD"2A #50[}gw G*!nk &#g\@Jo\oِ78jTCfDVpM]2֢ŭҮ3Y){(aձQfkGIsJ A"EHU  <5d@F@" = >gX?ʾjbff٩S| zox> YI .9ABcSh ~H!m7#,2Cׂ˧),܎UE!n 0AGqP|ijlPcPŊhrT@N`V0qUwn.~JpAh&4M@Y2$t44s49 DA%PoSMf&Ta::+~ǡ{V2 Suߛf1U\wY+Ą]2%i1%E*yRL{EG#F2aTHX!ū>8KsR{ݹeg?kfO{H3I,ڲމ "Ha#H3y\.N :tO,>ruBX Z11nJm`eblbǂ"B5VLB2ppLQun9"hI剩2-c0.j{J' $1s^Bo-ui\'ןj9w?*h (4c)@"bǼ][ 2 ,$>vمT8p"/]cϢhcwgy}5+p~Q>{ n/toԂX  5Zӳ3/j-YU`mkʰX3c`]-_/u1 ]%z-z &bkdƁk[ F`Pek%I)/ iY_^4^c8r1=}q4;r7Bs&Dx  Jڥ_;?< SA%3.'EpAqrUwG|J~!<Ǽ%ԍ߿вǫZF)><6b ;L\C.<[mjz J")o~)4 V!6IzJU5|ҦX1%ɢefu`n'V"@6҄tj:$Otg_#n&[r8"~-fl.ZYJ j9a6(0EeFK_v$/jBH/wo."U\KX-~Zltqw/?u/,K0$ȒFځvIozH|" wP/&MKe/$ B"%kƜF}(^t9C^TB\;gkxf0H~+|>;٥*.K4_2cA^YMQ'c5.T?{P@:r w+Pgߙ‡@S$ #DOUT =*QܤM<Ц4Sr;9{ u f[:z4*\N*")_3ޚA "CLEEьQSnf7{5yrF7$KģY0 V|hQ 6" <;{]vd >){e;e2cH^A) w$d@ IB]&` T<͑{;wx=JnSyW'eMF,Ŗ 0dgqhQ&@Hȍތ<4 $3&#E[I ?N3ۯT5z@>ؽH VVr n67f..%hA,K7 QV7H⮳l['t]_f#p@υ;q^U]J[D KD~{VЁn )ɚz6a3[Z׺Ek&.JgTi/(Om?cewDa!;ӨX dy }F`\ %DEQzyV'$Ȁe0z?y}B߭ !rB<^^3n߮ GnFhZC?r~b(HQVBo/Ros>Ęid@W:pm@$n} >_pP쀌dBv3cMøB"08 {UkHA ~ϴꪍiJX]쵁P$ES2Gà{d:MO{@ޝ=I, fk$9Յl8k~ K(|H|86(LmY>u3b@κvl<֭G$.sfKҭ.x^e)נL.&& A^GXR1- b2g c<_𰩪¦=b yY .vH(^Mw04tfd ])~=>gIR2"EuoN0)24kE9T1wOA\ Z $~$a /X #P\!(5,ѭTW+_D"Y*EgMGChTӀ) ""k"k%#T{[y/PIaر* 8D&㓺etiI°`fG }d/}p]exs}}Hm: ~I_p*L ϹmK6Webi6Yۨlk]*O7>æEpt&2mhĜRU-h9f]FǴo<86X.l=e]Sn⁣OAlht YL vdߏщqxС@ѲM>:|O-RdTiLb6Ч@2rɨQT.ACCzN^mŁF %hHlsCTPm`dX dwu}F.7N69ՊDՓCoݾw spj9Y\[iLj{sLT "H40d&M&؀tfM:򣥵v̆tPIS'T6v.K}QnU#&X~4 :%ZK{?{{xOn;m ޗu\ 8d QbJB,z3.չGP:`=r<{#ؐ2ۿ;dF8>P.L JD<)TJU(V)hZiPQ(V!hAJN(LVU!CddIˏObA0;W(%P}*T1Y9 Dj`ybuy$*wL1O2Bo6ȣ/HNx4ۖUcZ;!3NApJ$u?F=$sso߻_~ ƼK@?b  LD6r#4;SzZcJ=%Y`1mPLs^o:wd Ѝ!||rQT T(@a @)(bSY/xqބçgJn 7ＲDL?Qpi.SY|l 3Y\Ǹ\ wx $HmiPHrK3P Kj # VǭX 0MnWI}WohFCĀ2,"0WXC@*4Bf&QKMbU2)31ҋ3^п5[]wfn61Jۉüz-nZ6Vɼ]^t=or>)~M#|s1 e$ wuŠH^EfG< ; 0=oDJ | UGh†kBd:w/Ҩ([WdSmZƩ۷{tw-q$֐UG2-dv_f&&iS tdkVKb z&׍h?@ Q[)]R?6d(@v&ûp8MA:۫4snq'VHy &wmAkT/qFB&/H >mO8=;AtgV\7sf}Ws2z:EEc?'^(VQ쎪)n Cq(L#ø&:nwF v*M5FZ*%f(ؑ4ȂX"| wIDC~4wof;q+sl}_uC=oo-u}a@HD2ƕ i!7r$BBЍKLd@%7)@ g>bK WH^ Mjj`eJ96p>y+4 o 2rV(#$ޑjtHLfEtx`%v!o}4C@gVMpd1FOEg%==)U*':"?:iNDyr'Idr!(4ŝ "m5b2@or7\I) zG˭DlFɰW+B?*^&s3LIbRc]Oʁ!ՁGi(`#'zB:SKYL Il}zce:l__}868dd^+N Hh Cq* IQCχ~\gQxXP#pRWu1CĠhf4Zžu0_w_F YJcϬu D-&[G( qJ ƭ>2 g7 $qLQzlMˎ dD(@"RpMr&W:ܯѶ'43MX^v*-:nʣR:k %JE&;$#@ ONP>Hi0mrLѻYǘ49Ftni)%1bmFhdGXUs`Z (zݫčnKR쇆;Fb쬗+EHeb@CM/*VE3 D]KCi>k ]JEnJ*#gPl8aXF4CҁW{R##|V SQ\FJ"' @Db '_np߇QJI(D2Ew;X𑢃@bs&]crʫ,Z= jx-6#MI`/b0EC.BL̤I Kze%u[\怋 =l?ldI!d d G92~k̰PR* &kBlH)NkcbZޛ.QƊ&3-eǼ%->݂2NdЁ)NSAyB궊 44C>"PEu8tѝG'u eVj4IyoktEbŢA:|NCmGWzi "dO09hO$o;f.#"Z ;l "꒜6}nLnFùDHv!`V^+;3Jf٤<\.ȩeŀrhbGO8 ghvL483=^s%BM16HlpET.Ըl=Na6w[3NRweF|0_96TG Oq@oŕ,K1^_ɬpw-B G]i*℅aYM4Ȋp+|lB#,$TrȔ GM#k|!W\qWfK`iPN05{:8if`Ws0 ERϫz Mxm9p Tͳƶ"MU@P0 N,t]4 Jj!יRlCk <]mS,3QJWRuq{l[D#k>&[/#Qo^Ÿԥ"0>A@r&֎g~M#u<\'ͰM=ﰮŇ2&,&Dma~GR/>0=qi(U>;׶t FkZ[,9nHoL#鳟 lg.5EY!c|1aasx ek\S'l{4h̏K8l^.ԙeœ ׉s}Ai(3HgӺ@j曲Uj7MÇw(q85lv:dh wUb2HH QjvB1u,D ON"@,.tW=&0hZQa{DMed/K҉Y: uF² MZq(cp`f|_{K(RH)86>˝n޹RB.,t⋭f`gGMN\X㿿x\{XQ h}3 겦.vU%23҆&HLYy"gU^y[m8FmOC #єUGReCo Sx'[Na6h:_f}H֍P5̳?/AE͙fѨ0e`599bp/G1&h *@MT&#P4i =Ge:`%w&̙,$Z!!̞4Ha#WRb06ja,iB hC.΁SEt]M$"j;sÏqqb ؼuv @cj<+Gp_!%n4NuKPᥥ +Gp$|u+q LDʤ3rm{rߨp|Wo{]^;vv  =Cg]p' 04afK4.0ɮa[`:&eJł2TH (M3KHrJ#$!:xnbbi`@'l lwGa8 ٵ)VIέApP@Wxͺ6i9NT9+'AʶW@`H]0~\xk3Nj4Rru$BP姥 zѤG֕SgCVzrӡKsFY;w)d7$!ޱmIMdՈ 9TFFH3$U[~FzށПw&ͻ䚈-S,]A 8(ۂ[H+BNrtZ i M]sNP`/5< &1OQˁR ax|.:h.+Y\ⶓMNȘ,:;e BCQoۥs£8 5ЄQ\FGvcf;zdIBph&Wu"[Q"Q=iD*pgHQEv֐3 _ӎ{ 6͵(̮ϪD!Cyq>&mM:*#HٰM;j6e~µ#osY^8^x2".!R dELtuX4= Pӕeѻ&w 7i:K[pp|R`g$1ƛ@B.Ů! `2bUKִHS"sH>鯥kDʆ? thDyU"^ j³F^ĥA]yrF;B#Nk4 oAM;#{O^KE_6x4!@M!%p.%l9̰©X7.$fsXέٖa6"kdZi|Lo-f&$ YFavx LjOSlD_ەVIa6ԨֹZ%GJ-Ors@p4JYw7Asdb3W=Hl (Jt)jKNz%Ë$T jӪB7x1,3+ʲyX ,I 'ܞeT3mw)FUIm+qiymߖڶӔ0ok{jY|VgСM߃%B% -Jz('^>1"Ri "֒ryiуAڱJcϦ쫾‰v],haA8U vؐq2( A=<1)% O"̝~nc!:A) /F԰r%u Q5Q=81hU$& q%cS #bD@d>wsf!l a (J8lcw]zusB1^Uq+N1RG.`kTD5EշO.Cpu0:XpY0SZnaf|%qDSqx yNnJ Pz׶:cWJ;JiLm.ۋ:⒜VTa"Vtu#)JqKjKWI9wp!I*#)%Vz?^X(Z˳i8QRI4u!}=}/J$3o Mx>FRc's# =(!ݛkjAҹXb +"H|9v.X6UFq&gηMsDq={Bۻ:W[݊0"ti|Q˞;8!؇R.{ôܩWnzLx>ʙnvNT+ܕjiז>NF -ՂH4]nk|d!:zl%&W Kw܎` aH´!$h2Uu-k`JWuHd&`un#Q¦h9zg #Қ2 $qgBfbTL[V 3dVU&(Pʉ3P.iWlEX@5BYnȔh9R9pJ50?\#`DKI9foe_%4`ȃ M>zRs~>F߼"P@3܌Pg*P&~bhIO< 0oÃ& HAb*Z*Uϑ_5 Б}&6KE|-o^N(7t)IW䗵)t:a'#j˓ *׳:,%wmMOe+]"' . rҘ3J e"ZKa @J1&ᅌ[Fd2YD|]L#C, K#?Ik˥8`ZJIԯ 2jrj]4BLq{ 6[K׼펢z6iZ!@:ƚ^^s}FX0<}KgIr]׀p_ڈ|Vn7sM+BVSxx? ^7dr|]VO:6~Um},u}# 1LWi /ޙʚyz fdJa{ MŶ4""sx7o STbk ,b9<~g~jֿm`6[?=eyNy$yԽDa1R˲բ&},.3S0N _MEfbkFk U*cg[1 >V}_NrFE#GK.QUdm-p~F~8hypI[+|szڨ];."ʀf`lc~Vu_P[k\*D zgv#ŔR F<nf ن/M*zk=}ئ$Yj&zSV-< S4֒I2KOZ`u3ɐ MZ$iE (HT3 1֐4&)aCX `ސ@$E'76uk4Z+G[ŨG^|-/BGNlDC$d@mAD5&}Y &uj==?QwEF%x(ħph:!R( ONc D+V02 ]Nw73߰ű立䴘\42cAiR#} W1yAa xSVgF}ކܻ'YƁH=ѿ 0Y"lqD'*0;Qt`Vn^UE^,dnRp*@ =s -tZ694ι~CYÙ K;cS6!|Raꦠײ."Az+Yfe& Ŀ^̨9bۆX̟>EKvv`P\ j[ s4$d!J*b ajm/,}!g[H* 33:q^+`g% =Qwme4crM iiӱGesg'6wd !B"($e8yw+S{msT<7]U*qarDZ؃gm]pyv~&G7G%.2Zt(`ǤJ!j 6q' >(K GbնԮ76d Ajc!-abN 0\b}C|d !,N>4`Ul |6\6 !QTrPWůR*)\&:@_¸dYH|&ro.SQ@HDZ b!m6 >lAHY .0yܢjb|ىɾlu;vH=޶Cau qI[ѐ7>we[~t49[=FW߼7}o/[M_';{<֕we9G|.Ϳv>OE䬞V>#lHNQkc7Ќb=ru9$u,)2 mS{~h+5ن[Qe14uYfU1~h ؄ !ŶLpF=wE$iνK.5[C{`ǹ?ψӿ6p/4 wGs 7'a XtHL#=bt,biZ6Y׿ KxAT.YɄ@uЕs(:j_ne1°3q# M_($h,n&NFp0ߝ/ܚlLVB> mN UFO2a LFm&?rk4Y䍸 RP'd.{y 3XbЅf&Ѡbn':* ;tH341ԝu#0Lb Iɕeў}T;qlhDJi($;4s3^\Tknb_k+wc3dnl{'DZ63I3Jhf?\b]]c@51NnɈZ)(4&*GmYEdkx fHʳ%cCd啧%CcbŒ].QϝefZTf TQHT*QT<|Vß9^'.*xе6̗9jxznB#Tyԋ: `kU sDm A h}ZbHNozt^@,ɆM|wi1' AX/tIO}8a'Enh"Cּ9'_7UU(Cb,@"4 [v6|.#Nět=J }SćS@6u×j gݓIw\ʆ)BwMq!~iQNzk[dιV{1@[];DDhYx"Cj' h ;*FruKۈFHնw=yyדC:˧k3o^p%nR']cFg CZۧ 8+& ǖV$C OC.07gca*q4A֫!|g,g# I !&pF""T*q$--Q))-qzb\":GJ8AE'08/IKͪzWnPa0cm1J gvHTCdž@hT`1)F9mgj(ŵT\FӌxTIջ*`>0<)Y73aRpq& CA %YtnkCaz}UpMh (ѫkhX{=bA  N .v$F>E-}4Qud_PgR 9f3ѯ/{NΚ;$asf!+]A   B=Dr2R4I,]TM71+%š)Puny 琲S\~{sAq 3Q4{ܛ2]7ƨl酽nAˍ@Q{~Nt|&2-x|nvv(pmm`>0* $T$h}(l$QATrS)QTZ/px%}[Mig7F-Kg=B Ajb\wJYGr36\}$fYk: =D1MI jUB5 'ւG[\=1'XlԈJB(%䃨Pa$g!AܩYRU ZoY7~.~(e[o=f\"ТRcXC1(a't<",<kSG0t 2T,AJF8@+/E'¢d܆aLC< 1ouUhJݧPн.Zto_5~ \׃Xe(KWTglu${M5JCîD|F8)hOZ32é.5cqhAŕwnZjҁ &HdX0r![Ф4bM|3_*p0" B`sŶ&z:omEl2 D@ $$ݭȽ^I' H$+_D2j뢐9Ed]up#LI-8F8FiLa riZq9aJiX6Z@_*al?' 1GRɆ#x J D7=:U^pdȐQJKqGT콘C\H=+ K)-NSTa ÔvAg탵KSϱ`5z; Ћ_ @FA?RdŹ{X! bP;V}8ٯЌ/'?߁ڤk,J, hshcncLPInά>nxB"'wqT, |x07ekpm$˃1L BDJkcD@+vOJhL"Fp<AHWŋ>ۤar(gKSZs׻Q3t7wk _ӞGFo~%$Cރv-(=}/vY8`hw/ CuX]x_[ä3o=$Uqɛ2n/iLLz\:^,DQBH$zOlDZ$XrVZ'||M|տU{ɿlקkO۟z϶+w~gx[yH\1vrXG!2sNBJf+ H(9l~}2nccs2(BRȱ8^ް/6jTCEǘ:b.55ou&p&]b./j;~2~ hr[~M<1B#AEfVՇK,ϴX>c>lAR16xqM%8(XEn8 (12`SVL6}(Y<]X28z% jCgpx9{ [Tq<ڡ&򈵴w4RTKW#CƲABw&fG€x^$rQ.֘`1!-vg[rzQfU^ˉL\dw %(8I`"$\a`m;[\T1휄_Yw7.s ::m:եKz :[A35@Pl^cw:[Lnv/aG &̈́puM{wͿz6cIsDO^ %*?,O^\vSJmzo&VϽ~E'ć?^c5ϡ|ryeG;zU`9^>cV3[aHq{nNko[;@Q+5 =n&ZھXn3YbӴz(+ ۃޯw/߃@ S~9ن%0Pu?f7?7TF,TPUm}ê!I3OoqpMϠf]q~SpYVwˉljK()1ŽZ.L#nrbf73ECiO"5dBpE<^W~WU qTZs[xۮ0uǣL6VgVVp9d&*c5< JA;DE 1$j %gqV7Z7N={@Rowf1IIM4\y.ՠذO~ C rq3jbsQ,OؠJz I2 7m 5P59O*W&Zb:[+wk<9cǗyV޴ ty9uoڬ~-R8$GO"kA!"I}L(roU*h?o^%Iy"ZԝB.:;Å&$;$tFD[a"c֙;6edhq uXrl pzjCIkF.(rN TKa5-7 ʽ} [8msݦGKs Bm {?f&F! "SȐ{ 3%+FFVGb|~ 6ǻ4{~T17dqo$aPz~dܘ200ـ NrGSl(ߟy߃_aڴ-/:v}־=ϋqx_FvΥZf(!ISm&x;˽?(XKocܱYkm: wR´OC}*=S;x|/zֽ= Df`~7zj ([$YYp-pkk2I2"AAcz46DXEcEyӱG6R,9I +;|Z-3 Z#gG \" U\Go}NM+ 4ƨ/֧wGb<02wV5׸h٫mw׌h-3Úܝ[Tӧn#>_ĶZb]7/sCqCywnh%uf(OyX*-cL?ŅM3P~<}a˼JeR' qT փz djsת95x;66Lw]@/[Ж7?JC GkyZ`J__z_*x( FRoJ=b01$qf[!afosmعǑ=3/ЦW4F{9wZ2_~ǩav9TLodyroFOLFߜ/S!]7|~#G3FŗS79'7?Ia_3fDWNaW:D{ :s%)Y=__eH{ABҠAB\7>fc0wO1̣R/hDjekX${10$Mݕg]hR֝0xZ (8BL()H~F;[v]~8ɥ!8]JZ"JP&\Z662Oz\Ʊ2Z_.=z};KN%0̮G+͸@ Y DQ\||7H~*ս_-dŽOU1oԥ`DǨF>0ި@T~}v| 7V!~s~j}g_s$%kV> SOwB%.TJ3E=FRGE[qָTvQe& 7=Fހ셀>q$KDAJi\,E?,N^e[KRx/ȆFߎ`|VF) MH6%tO/Ĝu/:mo}HAK[!?!N+Y/TQ XK6mxCl!B I÷2`jѣV;&{Vk۔mt'vk\OO`y-jWvcl<&b8QyYnbӹU_o$^F% mɿnQ;lnLj*(1?@ĜԀ߳ј }ߑ}T~V~Ǚ8\,kr|7f3kA=f!mp^O}z]zFCslZrw>m$/7/9S_n/e"|:7z9}c~9[-o&=I.n[Ew~oVxfgKKZʹ3ngnSTo6h+{qS9ɯl1AO5zKfIVO[ϝޖaot\IGL9rY ,'z?jzDal7V+KmP[x"8VwŽw<<Ƨ(7])n;Z,r{׹/k"u |hi!l. bTw.j D} țlt @ cͧI w8/c8V&1禐ɸAlj;J=T{tVQ 74wy!0 D#N-ך;adYO{m'Wdd|CSR=:kLny1ORhn? ƪ 6R2SBs`t 1\95.wEs1?{|kI'q XS}g&dIB1:f0IQ5M-\殼 t~ˇmі8'~?+!r2cm`\4Rq {P _(b(CZOC'crtK܁4Պ$ eS,Lg^]w.-'OFrك4y1x&+bM11clttpWoE\0N`gY_li `\,@LNiͦ9UO f[T](I%&QA{dv ׏wk=mٷ շYl%K`%:ǡmo>_:G:fT ff`G6p>g{R6X8Hu` DDda$Zą\va7)AW\HajALI`O{;_ΉЙB +R}z^6cy-7te3C$̡ʴasoJ NtTD1mPH}xI$ `9x36URpuM(k,Q@ [f; [v"Դ/ܶq&H-QWzhOֵ\Klp C#F|:?-M ;:ĜPħ!W#i=0ñ,ֵ] |_gH6@&"4U_K!D &@NÈ>ORUu^G, KswB 2) wIjr9R ޿?v-WO?yy/.߷} j)"ڑ#8-X}םUO'mj[/a[P}/߷}^|ܙy^Ce)H)aTgK^Cp$ TƗ3~,?ZA|?fn1iWSː` *0tJ͗>=Y'aڒor^b=a u>LmI 82FCmI})Y+i$N!8]QdMd$h7&;7FmAO|ƟCQ|$P>w}k-BP#^}޳{}wٻ{YmS=4^6Խ/S7\W]om]ӹ}4'^ρc0OltS:cDjCwvL5vehH }w`.@@7`:Hu{U>g۸(熳mj wo}o`ägw*[E֬C3+l їL.΢w[sEӯ7J U6{}TAu'9yEjl*X{a@9 K(,Μ-fZjZ;2 m-kFBT(7.f)+lmWYm͛IIF5(mݹSٶxcf v&X0l^JUv`n프^(;7mG9o>]8a9==ERVH#l-`-"ֲvh݂v} -wݞmx}|Vۊm (NpwW{w$}=6Ǿ! ǟ\ʴeiHO- $*f:ssl5g_O=S':v,Ww^1(-eC_ynW#C{=tgzv}1z}q42f::܌c9˳G{I/QRW/+Tj7QJ"Z/ygkxw^4rͺwQT;]ַ=J>FsMͬiv{wAl3Qչ:ЧJHP$ݳhz{h`,w}^w*4oW7E[혴AwW+}ﯯJׯS_{˫ϟlfakyz U}횏_^{Fw펀 /n=h`l܆Uۏv v**hƫ[&M;w3뜪wkxt롇v7׳[g_\)|]ݮ- Xq}]={Uoyloz4lKӹGpM؍4xyw}9=Ğ Mwukkm{Wz z>q/Xp{wݽr󻃯} iC@:4D@11402`FF4`Aa #"ah@F &4&F&L@4 Sh&`C&C&̚!  4& 22'F"mɦIa LbhɄjzi6&i'2M5<5 iA&B F4 ɑ2jOёy=)=G?ISQ54f'{T==IOS4ƚMFOSizzzQ(=Ab=mFB410ѢzL52a2) 'h2dGFѩ11R1F&SM5M馍u/oe:&l6 -4ol\--[4bjaDVW5›ms~_ew C!KiADjEukSϩgyyryRaw'0bCc%/}3{4B%D.5ңO,$$nU!IJ8۶aF4cj[+jlGY3%B>Tc>o_-:aDSgC3?ooȃ0@~(*  DF2B,!V("*@a b*,THFB/>srKVLK@W>a=BDllo`͵yg\‹I}?I[ L's_o՟S_V)w5irge/cGV=V/'ETOTu{Qc( 8J"@A,7x[O|u MM?n6^PP 5U]KԢ+kj)8DP cn=Dظ s]|fEW{^¿޾4,DOJVaXE~ `&%>7c|,40 P-z Pal~~0vf7# O˗'p5+W~ tÌÄ7uMe@HH'$ V->[H ! OPCf,?Tj9[NHy3 N $j}>\LoYg9^;.PP BOnb (k%{? oH%QGa>Si;JИ@AԀjU)n1T֐l%g?^.@]+i*1ƒy6ꈜ;lwMnp{m}}4N^L"w``!&_vT),\/D}JƱ=LXdVI~z{Wf=n1@o3$hǝsȸؽU~i(}kgz^]w(9z_ؐ{edžg{Et熋|( ߨ2gW=~Y~R ~m3G}*EigSl?ז* #-U6:Cg$Xbƶb b@cX(}`\.fEqfUoci@|-w GIު'|=gc3yJ]vִ'<-⩈~Rۂ4e0Zf 4J)wLVED@+Q᛿nځnCR,& YYsAi+T*IQDR t@A@PKtFɲɎj]SB(Vސ)L'g-wA|43@'mofq\hF/m: 3҆sc#rD׻H/) B{|=~,]{'C4gh^'77:i.`|߽s+g - H|]`| !\Y֓XvWdSDސ@BH@ m<6uϿ e<|q&rBAauzO)ogqokC ES)X>),\U)v>ri7*i;;psC+A ]a$P|:рAd> 0]!Z~i7 [MzdkD5 TE D=s.|bRxq ʺN ha6 1&K72"Isr_9[eZ]x1/&k\eWKh9E#"S Mp Rht46{m2QDuCNJ4B 2E AH $ gWe;M r\kmI&9`.8gĸZ"(H"s ˯X]2C<Uh'NITA%μ/$ɳ7.ćEI|O6Q@ "% si& &)rj 'oqc+RCc'~?ұr-wX'3FMi>| @m"c0_6*2t%y)ڲH"łFO_"f)ӿ1\Z_YȍDU^g2&*+/亼>>g=*c66E/Z-pW#(,a&T 63}-^Zle{ P^jV%P10᭔f ?&9.,>-M+B`1bc͡c~{)~+ H \š+d*%IV &Oaa mK9X<Cwa wHmsCs)l jgvzʄOSW 9ڃIwUҳppzE9 4B_b#llH~km<&oԸh%hR,&!OӊetNl]vWiϛ(x^Qߍٷ5fAXǿ9֌5vYOVJ fee0u0eeBDb T4h>f ?,Œ8$ec~9T~5k{g5ө#wǞߞпg{z-<1nöu~[Tmh*؟ [GWv͕M͜EG[Ɩ427%Q/( .]c(nvzKBV_>)E_,Խ- Yx,5 c z1@( 0OM ׋PyY<6m+=Gh+"e*w;~n?Z5W z*F4ح4dOGyF.qPFne>O_x 'auxgÃ!7~ ]xDeDhAJES @!^WY⺶P08l$OzAwͩ{h ]=wd&0#xFZ)b4F! -R=i!HU'`d揘n'v r ǣX`Bڥ4wLKk$պ*LAE?EWpFtB4qC.C=@#V(&]7s ٫ZLۦN|ok+fK&1!5%%r$/23pqx !N%h(RD# !R_\0\:C LIy͈v!a9K0la&-fڌssK}&cu3SɼC!;yr[8S7IAk2&`ae[>mm{=G[Ac]9+lK1ntˆՖzZJPh221S( y~_KR‰=s{w_Kn-(Tj|w aV@H*/N? )DDH`B RX@n$[rA]U9 P"ۦ " g3zj'cq#,1j^ Ry޻zUkD"1Mrכk88*Jī(6t36J!}|g@H PUDi۞_xz{yrjTPQTQbEEӣ/L.TnzmxဝS)|ř0u;!w v>+>/\M֯="(~{ yk*xySc"!kɜ x&?=8 q2R{/!_aDKkgAxHT>Dϩu"CIjh{ .9|Na[,-ml@D70;?}ŇS_{ST~ +>D񲠠9;zs^1_$s|/I4N`Hnn-ͯ#.Gk,8ߕhj_L^즻DDDD2X"RjS.6! D!ܠ} hK`(`(ᇘ)Cibl@QDU4LU^T8( ^!~hxi쑃AΕkF??=Uj>ؘr9-=Ulc.C"a2ݥ"EEOd0(#_o{h{801Ҫ]w4&9^ɮ#R_xy 0\(0#8Pw3 E!ȵf:6P6pS[M#ٺ%f$ R"?|y]{HT{sr(k=+ة{8`ޤ.SCqx@8SnM%ض;wSԑT Sveϣ~F~mx , `Ԃ(M!4σ[}=ݫ.{򀢋1"λ卟T$RA}Bmcmk(Q)W[jSPͻl:2Zh S XQ &icg`Izp=kRF;^9{jf5җ}F^Qcۼ}V$H=Rjec^3jT̤Pm=kt[ǠDfN q>>(%F؋{lNζ8gjPX Xu٤CfxS")ɪ&ymy|jb0bYssA1{{=gs(6r9oUp= $R&iqolrCIWtW[w*yYM֨TRˈ]gϧiew.rHQK/p֠* Wk^`u[ʦƩVAnPJ2kh/S >]Q%! —lF|]%0]}nѮbYXˢ^iaid, - ڙˮB`-1c,/+X1UjW[X Qo6pirM=cF%햵fl/_@k|a7d&kVވOjPM DF ,#&I5x{¿=5dE"|Ȏ9ՓV %C1&/~r>Y`f ]!Q;.#Š?|wQ? 8 HAk+]}h}~ EdS]nxZdq}oͽNk [C(WJw N~ q:6q Ӣ @\⥹I0R<30%'k '. V|{S~wVq$ϩ@}5\{)Bi D *`f\IYI i_>F|\d (o(zN`TTʑ L7Ěj4f9gWr8JMaJR|MoBDU_$ EhǨut2Drk ǹFI4*cRT|ỉQ,`iΆꁻslJhxwpX:`xZ̴(D**U@%ӧ!2XY6ߙu|Ljf\aE|Xf( DRUrłEDș@MRY( #<%ҳ"ŃayJdZ4=LW ѧ42e]o~i ݮ8=:lo7qۮ4lXh@sjFݻڞz5ڈe!M׃Ш tʃ JbVgﹶ=\+urӝ$bQ.ň$ Tz0t_6:Bႇ4c&2ne7+:ݓVWw,>8n(],/ #'zäU,CEAkIX)gq<'ƛ=9֜sU8cvO%wuA&ʮ~c- 8I"ZEql.2;ƏGDF9BJxsWL==.:|<[&ŘF21dI;Pt ē*$F;RAb-Ek U`-J, ,O"T4GHOg.zߵc-326QCϨs)t߶ee Z`m>"s0{Y ^⥂̙-4Qꀆji];݌((UE^Ys~}ֱyoζ [vK2r>]#*( 2@dhX"]q" /67{<[(n? dD$U[=ZuCZ{Kg3kt1VzYS䱢ƚ@P)+`jE(:B $k㗛FYBx(J``p S  _mDzU|Dv6&,yKtRŐM$+ gݏg?C2W]P!4l&kO(qpXK؄(f'2Gb5˅m/p]Ջ$#M+ r&k]~O%$:V).*,;mTٞ=l[ǯ>gHHC=!¼{ra}y@J26!zXqѽ;dilĠ% ڨ%jPUbmf:<Cx |4d;Z^=gʜtreM;.2uh7nسE 8yd(G3}F7SE_~ y>MYl (1x=nP}Pޓ/fmSPJ_ɱ߈ă;;i3uNWg}U[jd¨4\MDq,FIBLt)rDM [oNY]ص&i7rTpU`)`jC-a,l;-&M-(,X -hVTlQP ۵ӚɆ2k BpmxM+2#hkG)l EkJ6.g MLNfQk ٹ;j&fYfԺT-jXXX|lrf3ܽo[.xhW|= /=};lw~S`U-͘FڑIZ'<2 -dDJe(eub6e7TQKs{`2 vJ !b,KUݸ:!ߒ1Nud̻onC-(ѵgpcj''(%J $Ș! `%dX cJIPP+`9e*Օ*,DĕY\-Vlfq.0G,xֶtm*Lށ&PU0" > o܁;8'3oMY[|c{ 1)'#B^ Dwbk*U1XGp-ln0`dTykXԳ"9nQ BՇ{l뱺 9-ۏ+:6lQ&˲i6Gx64 ]*T^hLøP^a .(&;g9y@ՐL ^G*} Eб0{U1Z~Ay%z;cRfIwSCsh-$&љRgXkěh-/GeЩw)qqNQCFXkaXUQa2*4DkjQwh méN6DJJof6Azx6@نSҲZ L:@ s=7 mt&Pњ/WR3cry$1rQ`sQ l`IQFփP Bceh :DVI]9`$S)c&r>I̐VߏdVMgW%$AڨYVy?2L &#^LMUL3#31 S7(&a쀣1#W9=ZsCڪ*tWk,GgpJNb\aeIi4,FV9E]RwFpyVz?j^8FEI3r]- 2@l@i(`v-):tPSЈA$yz4v~.&¨ %_FT6".(T$Li/9Hs`w|*~G>P\(;L0 yլg%9F:5_Wi5TI2Trw Q o!w=glRa<o=9<*UiN?}M;VrsӕϚδ*Q4%I%DKE&CaC)7ԕəDco 0 I3x=iǎ|:>cy:uN K ;$"zQK|q*2&ӭ1ϛȭ*@S{ 4" f` i .^MXg;kcȬuDv_JU]7X ZQN܍JR>iQ+ \7#ƾۧƕE,a>U<:#*bf}k9мmkF}{cˊ]Lа`[>-9.>P,O.6V ru-B0W`64uYxYM(s#,Q@ifu_?Ml|{j=1#l9gd91A8^W*G_[qH/jWMj,ŊurhkTm?W6~:3l;Vd -c󌸢c v9aوS OV$lA/s #Ά9g<?U yt׍Gv5rON97-KIU<5 900־653e#V5st^cXٜοY?&UDGLk SO*y[nuqWmC:8ʳޞByЎ8?G>~W,D C ◩$Djl[YC~6y(r}7(C>+ZVizC6"hv8ʞ17BcRk오Y ZpjI(=]]4ud\Z"9]oss{цGEvĤwÇ{Ԙ~griX(~bǐCMN_C'sZ?^M5N&h}Zw~M\1g-EU Y$Yuc<}&y%S;It8 fUxS8Hjr {۲Ysg-rƽt~T~Z<*Ov$"gaTMXM2I͑]\o~;t#4?'+rk-B.~_?+`nz!"%ꬶpJ"fC߃cCW{/{͓ ,Yk=2R,|_dy?嚶QjI% [UN·Zz~3$91b ),UD!VHbF*EF@QTXAA,b*,V*AA+ Fe}t~d7ȣ7{|qI,:}Fje t(y(fAsJK^޹,P"Sݏ[ѵ{hfD̷WMQ7.%?]nXcLkfFr:^C\>[$+<]c#,|A,nYKV@6Kh&k1</XF_R2x+;Kb+;|iYܒC톡/wBu?e#Q#ֲ[ߢL(RH' @Ahf ;*X'SγˊHA$O;ѳ^f E=]#6epUOcs3Go6ѩ J7|28oIp!LpUK],~-QΌ j7u)z>1E7cF8m b?oyNl[o/JDj *`a3:Q_L5#E3*˫|7Q5_g}|Q4.힯Vk>lJM^Z v5 "ViBG?$ %E“my6I2Z=-O8w%OJz |/5v>Mߢov˛mw8`$&+f0gF\0dVhowكȋ 1`́PEU&ΉbG^I+YruX5/ˣzI/LW gml?bΙ/d~b?q C"V7tLف^6׉WPJѿiJ|Q-gzٴGTεe7@ϫWFZcJR Qֱb5 ,ￖ8 'd}+:8 VO{$;S.""o5E5JDقbZ 30 Q[Փ22m<= Htݺ$TbgUzizimV)/S|.BȢ`N`3|@`1yҊ\uѶBӼo'VޕA%o%bc!tR@dSϞ0aձ&i!>Ե ѹ[aUGQv~W+m]x4!BsScK$yG /kC_kj\'#3ctIZXVj^rͲ^- |ؐ 6:Gz~ NG+ Zd7+G%( ZA ׿W}(b5M^|}dN#:(B|ӡK{jFyզO"CxI,3J_fԥ'$6p\384"7==XhfJ,F+b [Jݶh4e |>m,iI3Ɲ[n~''չ{k"o`&E CA$&N }/WGt}/cF<7=ƭ~asω0#H(e"VZr%tt!ٰ2 z|(;~I~"NǢ*?Rp:Xs#4Oh.yp^ŷ- V-=N󵛦ifqs0m;6…@׈ց:mO\:C]T.%]9\/{fyngvdM u阠];]Zg@u_̖Ck#s̖kHAJ\̵vg#J$*g_DΑht MüikxCPUO?JԂݚ2o>&,_s}x$՛^&+ 񜣽w7Exmy̯]o ?If%b@w2%/SV[ZD1 64G3PVՈ J lYT JA0N+f'T^҆gq`uVಇ#wP3.MmaErdڗ%q0N*#C\|- 7w660!p!M`fxW d zXz{E0oŲL+2=l%Gyoj_ϰnl񊕳epZpulW3 5m.f/3H1E,i @;?t1k˪cOܺViLbLV]PiXb-?Їl9du镦sJ\&AxR-!#$ms_ yucBKS>MeoFQoV´իScqό#yqH@UrDue8h)k,φP[I4xd &B{,*G(Zף!8C/4qs~] @2^qsvw7@:z&Ed jJpW/+[6חOb_KqGFMo9ېӞ=:~?ꏗ> c?-e?lf<֖[ ۥ|.)lnfڱLPr(faD-D'Y6>|V]k-J۠mkk3aћTgX6n'B jW4PS1@B⡂ c8抅@Ƥ-s~>_-2zƁiD2<4;dY^9pX B QK\{5i}c??O0WܲWW|} 1RҌ]0Ľ~L\[W~b%r2yOSdmkIA 3@ptP-Hf"|E@A}y՚0V(E'0j갖KМz ̊2WhZ7z?6_zeyWV8d_,:ϊ (D&`D A'|ƶfa{ڕbÄyWwvTr,X6"R0(#5Rl&!єNْٝ."D ō)qV3rAꛢs/TؼAB ,H*Z,F"Ϸ~\07Zj3F ͂l۸9A=fM\ M\VɶD((( H%LK "IZ6u3HL$^Y]EHeVp W~/og8AF$cZ"4U"N2J)1UC'Fku᝼bn74u-m!svɧi7XI% *aJC".4!i VkWՅI!TmQ=&_Melqv?yA)''g5,秘ֲ}ٟE =ǚ0&SC!'-3v 7aʬ&\aXtK ,ɾM<'6s1Dw f֬vԴ UGt 8''$R)ߚVg_f)%T}3CchAk1~ӀdD ! N-҅O*n2 @0uFT?8x&S7aa+, $ w'W o ׿~~\×"= Bi>nO{}4:0XJ*)gEE4✬rA)~ZyѴG; !3z*ܪQtpm8wqsѼ;S:§0=c̀l<wMW ({) ƺkM;'S K(0H[t9ViNGT1pDH52_gy˵ C@sb( Lj}Cd i-@l_{`%#Ą,ʩfU8+ 'K͝ytBHF :l]v%=LU*]ڈ1x|hn 8Q&4 т!&޾nqXrTq/<0]t yysu yH 6 &mZz3{.vIP=XkEdKn0E*̔$'׷/ $"Xǯ6zDqɫn4g1 W6=02.&Anpn,2gR1 $6C=iƪ\?(V>O /ȋQE"~pGO"07߀Ba0 :15DK;&: ULR,:廄 KƥJ$^5jYDHŀ!AdD i$1 JLq_E6. hu,rlZD4!H)Ђ BA k5pTZbEg@M"bM(1R!xH@$BU\$NNYne˱NW;LҏKlF+j& 3%B$IC] X3t7'IIϓZ5JjUWkJc\8 Mrx: ȸgj^qH$ Rx#@5\UL*")r +PXIVۣ>OMaZ'Ғsgا'"=u ;Ɯ50ڡƃs;"'Ch'UדwH&`I#A%ӆ(Q/,ary&{Qs֙9]_J9<~w(2l:6-zT+n}&C>*Z6Z+ҋ`Mk 7uP|MEh&5@•,$RP3_tCLr!8k٠lXTN@VY+ѵ${)6$C!* Tȭz '/'-K&ܭǭ6n}ׇ/*x6qxTtS3-5 $aŞYD"C33LG)| ٭³pgZs H{a)AaS5DR[Q(.6pH!B刯\@O65߷G[gm υyj@[9I ]|:NW;/Q4ǯ[Ɩ"Q<ˏ ܬxV<%]>o{yѴ1"xkYou;^m\j^|Gzݐçx1FEaG)6$5>oV!u!l'W8aJ$$#ɱ͈w D 3!ٮx`^;,ßGFMS,tI°90`E>nշ`JiOJXKT%R xY4%hL2@VCs`5' +lJ;AMB%\kU[DC̓뺳. z>pp`59<~!QFAo .L5,H]8~w=GN3[m#x!G96rЇHd4.IqΞ׏>iWok`s0Q</})ԗTYnn =Vxy)\Lw K {8 <p _wvy ߽H#CF/}m׷>*';W&bo֥y^;4w[#x2]/h8̍3iBDq8x[5g^:.M$]1Yjk}7Zڰ2 4Ɨ{Z};ЈRd!"6` 46F K "PLx\mM׮&ĩRau 0ֵr(ZNqHB0:䵞 %£-jK.C0LxޅT].\7dmUmv:q*;8̆&fIR۹w5IfiBkM1cmLe#1+ qK]0@}67{jpdȹ#R-#e!iˁ[b.!n^6K(h,4hLA L;w +aIA&H'a]-NXjZ,SC.]" b|<=><Ow${#X3|e>=F\"mFF(3ƃe2"c9[8+ #Ũ,AupOOE>N=?Q(>wX徠35P ؄%8JQvNr&5H4 N^lЬjQꛔF}6/`? kDژ|WSH^LyFlH媆ZэfB#QEt5.}*Ip#@)g۰t]a\TT<6I{OZMue1_AEZ !HcaS 嘙suPvœlft"q4] Җ+1e!m=znr6iݰ9Ska HrqFaA7DeJ2"q)RReqr PYFD9{qG ?#xrX,}iv3fq n8FNNرlb&QY]GfrXıw;u+]T!!`:&Os;=N6QRăW;SviՐKJvvE2z= 65!@PZbK(/^rh3SzB.0]aj/W @ZAKVHR PT hPl]ļ CI W1!QtZI(/hwF=F:2@jRA^~e2#0f A w| ރz&tӃ? cXVocwsx{ $VkoO7KH#E}_nO DL>;i=;&=:9އ>qR'|5SqScSc[> Dt<4eXx,50 et7TlӛC</()Tsֳ%fjuۋvo"z380MJ)Ӏh(Ԡ+^Ь$ƨ[D"Zm]X1 =t 4<!ilh &ƻl4Hc7uommh+EI o/ پP Lف÷5 0€ ALS;;+ ii*>jmZcVh,s0"Pn]2r2 co]qfa)fk3E!ꃜy/!U$B:0%tbMwT4~ڂ<ɉP9rH;I% ;f[JiL'@Ie!t"WlP}ή3~`)2۵&eg "bDC0"h `;tT\G,_qt ǯLN#t:ozaҘ]7fzdP-޵ 3B8B4CAcrjAI]^/W-H`xw2{'CI,GUaI+__4"( vgI'ĸ۟C3吨(yz~~5 }:9wZT\-VTs A crM*v(vv ]!6H0HE#>^&|AR( ^Mx8:q:=C0, J9FX( /1:JamΡ=l3wl1r[FE:ZúxsolF)Ld$Y9^p0Y3rز!0 R M[{I M`w E``XJq@X* 86, dkAZ-w߿g}WyR1sNtN4Eֵ~iQ칤Q\$r[W  7iHhb/f t`@kuԻE"0F÷ o={Q" [ed]1,=΍tė4Rur-DEx =,Pa}!ˁϩ!vYuiS =Jg -:$sS8xȡZ9:޶S՟\Lv b 夈 ~ޛz;qv7ܱ6V/[s|_x@X<`{;H&1HjdS1n_T2_2@'=ޟ-F`<,9ynBAs?Wl&bؼ '{M&=ʱzuDjZ)FSɲ`Tk6Dz^q 7s2* *L%iJe+ Mb%U!a[q"_6o6PY*-0|CkxۯGeKyh>GgX'̻ HF{0yQO)!I1EB4.E6^6~fP0J#=E<VH8 zr\%21R\^k@kfwcL-[p}g'vl̵Hш)HDDVjoӮ 9qצοĴ3ƪm+>n:yS0´[q R;]tү拐.G[Q&'pqVd;AQ!/ȃ_AzP#L52l>Lzʕ= &i~r:R)^O̔|wh{3U "YUSI|3¨ۧ "XK wODEO#oE9.m (IԸv2(msZ)x`QWsu(eR26[paGy72[a3oB;9ɦ晤Q4Vaz!x4yvmA j!A Vdo@]pl4QC (jLK G+ ^։%IA &_)#:3t~o>p28yo Ytɻ.܆+A4UDZf!PEH4qKSMMz32+1ܓa5 vM`D,0ëd-tM;&Nť\ Q< gy& `j;ۈ(ӕf 7K?lU0Apdys*3g"r'Gə_IKbIX%bDcxԎsz8%2cg;,DM{0xr@@AA@GZx;pni[*(n59o2EWi<7 tn;LWt 0.B6,-j"veRPv5;bM *{xC0;JUDm,53X &%V1AV EWUJF2*0d^-òIQ`j¡a1sʇvl{ۥCŎ߆]i C󁶌L8Ó N]!YV6JXTAR ;ވ6)諰1qk']>.@صpS{je6sݺtH0 #QfM,=72t{zp>]ݿeQoCOnxb2Mq@PPh72#=  7>պ UaY}@L~VW>msK[gv} ~Ws^/X@F\HHPKz~7-(w\D-6?c[D0D mL^(:GG4;Q bA)PtEd8 `ad;wӖܹ;c8i:J,/ICZڨh]d:7y@ypkcv ؎(^vٛ: mUdlT(*(Q[rwj!ޒyJTs)\CMEU6NܽZ j6T(~s+WOclƤq7 s|#*0 _B@IfMFw*jקs "+F BopyqY8.xK4wE"0PU /S|4d1`z w{qpR~=*b FW>9~v^XpbD$VU[jFEFFcTPvZsXu&*nO[blpPPffKS0O`[.mل`XͲy,MB+ǥ kʵHq%_"/.. "k' ʼnsLc>nmA*追N*f\!{"Y A@g EMU(P1Bws:kFl%*S L!WVD!Yh&uAWK&E(2Oo1`1L`0)_Z6\¿K9sH4RQ˜7fC64=Z3(*ryk:ok&+oh#x58NVbzhp78k3\-qT}ԊX&0d0AP&~,'?xݍ\ 8j%bCo.u5q}2wV j}\xж/TV+`H@hZpH FD.w (@%e nʶ#{p61KֵY[.s|:E䦡JW"ｒԉ9g &G }ha.OsvZ|֑ugEɭQa*Nz`ċ ͑ƉyH+i6,$#B ./kjT5VCkg@ZZHgf׸ 7+tE(\_ivaW wҺG2>4(xA왑=1iKo_4_Ԟk[GDcp~ZHx)zk͹Sm=c3d"cwM̎wEˊw^h ?_ =`ʪD%2ER*C3y 6V R7Q9AN₡#P9w$-=.GV(Tnh~y"8w꽤N%&W2!Y5KQ1e  OaTjOU"j\ư@I h(;P`n|wz#@NJ}k nn %1|}#sFu҉ lfҦ fIʗkz7X  8"^S^whftJ[s,lpױ__O$0M=l%x1-HZ+څW Gj6?k e&zjr@L Vϛb9$ I#LߢOjW$d4zn;DJEET' gu(QY HwESOFA,_mE'h=E'[.vAȶ*0_Kv;QzXWgҞtG4 4s7,W@ wkd9HqO' G|BH.z@)  C"#홆5Ӆ ~#N eAHCk;wBjj:Fug6$0nrKw cK@u3WNs=My7sHJ>__7 88r+d Nr+ ]!"#a4թ eĚh6QB$|o^J֦: ID cK8`:Rb!kF8B䈬pE'9=3ѯϼoKl:%۸+6crWdf/*BW=Ag+lf~h/> 2 wB(̋(a^t>/ ^JiΆj,C F=x5vL5ãmsM:\`*l΀nP!qg~aU3XADP:y5r3vFWJ%G\["8TM'Aat6Ҳ}!ylc:O o\t1Bh3y& ցs|ćEy\R+Fh@u^_e p/qs h< w-<qNOaIcFk"<]aM Ө}%'::cLMpD(bٜlD&d[~0=rlc~Ӭ;J"he7r},$:kpq2gnU_ llf벨gxk@tu"X9YQ15p e\mphs54N#E*6yM70ݝZ%%[7f~6c_;6^<۷1~32v ܂IŜya6+ PL(k+ t8ž}j'X-AP |,qK[Մhy8͚ns|"i)D) gvZOw|ܳɐ9Ԭ_W;}. w#9v fwKxDo0;Ӑ9Wx~8aI\SJCTD @@ ܂]y"+gjGM!xa˺{Ȭ09pye;6"@yH- qBp"K RxJA_(V MB ! r` fb/.*ڰAd8\l@T$ɇ'b:oP@*uYRaV2`օp&|3b.S-{uÏc۔x^`u﬘~ a9[3õ3%&,cZwoȥ%32jŪKUʿIH I2-Dc@ |zJ p,j\ $3^ge[ɛby1⩌7V]]厳6ޜGQa(Pbl,c 7q i嵛c@r3,W8#\DB+Z3&#]ܶoͬN;ɝ bd:;-:T3uU3$vv-|i,`/:뿠HT`7}24wk7h@#) B^o 6Fr47 ݵBcVC"5` +{ NTD5#qݓ]%fBC!zE LX&. C8X6 &/>' 9'M \3NeV 2 `! # ON %Ym, @KS%đ42eщ$v3"ndd c{kt6NpT{r-`! ava Gx*E  w|WA*ŊìyjUULnA0/'~++n)wToQp9xAB)0*h8Rd!,/5LHCX!Q.q̇חQq}\W|Zl{U5@5F֜ap)b NDJbvz n9lsVh>-mQkQ+ihoZ'ɠWF oeLƳ+D6ƽƽ{\U txO[ s2*J%TNo =% ΋A?|N7'-'w_p-g"tnhF{9\k.7NYV\IWΑsLpQ@FD'h28ZIMDK*aʶi0 u5- \Șofqzx_@iT}$/2,R@7팟֛v"[*OQYC,Eig`ϷBY֏|7(oM S"*"fٍ3(h81DJ d xJrYA(\DA$V0嚌3z3dڻcɛXii6SÉJR.BD,2Fh`58vc#E)BlC4M)}P42FE *{ y1CN7SMD\=w, q`sUdǗ+FKhF7K8 Osx35doǢ7o/͠1pXyTiiD9֦N6<S5c-2J྽~nNFzzzܷuIcgDsE4uOH܆ 5TT 89t1IJ;y6Gs%h'>,;wx) 䣵 Au4,& ,d,+4]Y5CrN\XP<^ H@ . ̡M:.ZOe-ag̽Ѥ6Րx%(1,}o Kx1Iy;c&)5s KI`jː`$`pRI4c ,* r@ąI{'Vboka6((4@ QoX$W*"]Ո[/T$PD@p=!r P@-{h"H"!8DD@ƎDBS mGLDbs{Mq ڀ`H'AR m@ 8 0WAAp㢪iw1Q$R( :TLD$DQDV@E @@@/ӈ+P b&8 |@8DELmΈd=T$Tvb(*dj!.+ PSC@ MEB I`CUaD^͒M⭢ Z7Dc%BqGǁ;<gg\~gͮ`<^ץmV*6!j8"]pW,Qݎ0qݿu`tB0ca臃>?aE(8\KR&O~1}򿹄{{ђ]*݋sD" t[;Gk " ~,@Gt_χ^(f׳>R݂Ϧ O&N{44P~{'y̍_.BK7\Bd@`z yA??_gW" ~ _ަ(Ue}V 4񸜐>@cDUUb+LoVykt+`@ wq`W sڰ67õ~D ~Ʊ4񨠈<4<ٖ?˾q^ߣөɼPD|UzXm>{wn~׊;xCi>xWs{@vs9on .I!ai, *D,~gqu^AM<ܠ~\-~~⴯DO}{v .1"'_𿷬rA D(%0;mLd @\f+ @9V 'هʊiQb<.=KQC4DTשO`d4 7u0D|ξ> x?a?|}~  ̭g\D%'}|,.f @ꆤ="D~&0 `}um֋2* 襤ޟ?6USbxKW?)qp|7 ~IM"ݵg2  d 'UWyemdDP|7PC+Oa{pc"w\:˄ "}7iDscӒN b;P _O{_d"/KCzKOx("t~O)=p)0;e-H;GY?;"D `z u $"2TEv#kL>CQۍxv<=!swt&, (9\>! ߳u_J"%|A -Br3>.zȈp8P(h|u. X#Am0q׺h ܡ?gϰPh*"0 B@!8H(o_{ s}//ό9 fǎ<4ok" sl Yo) DCjd8f< Z Q ^>ob7w<Ý H3# R뢤G*4N~)r-Dt !QHʎOm,ku(w]x2[aSߤ'~l* ̮#vZ̄)/RCx oƸoݫZ]|mX-ۗb &Hծ ]gV)m F:m1q>Ue:Z `} \;hUMY:MS{׬\ ٨Ƥ>Lnejc'bJv4i G j}3zp\5fMcaEڂK(<$LݒsݒWZVUr Zpd>[&3ylm4C2OVȐb~<^U1l4 V8g wr7]bj$+ODj A̔0]0Fk]j :%.W\HڡU9( jMC([&X};H )] rVĺQNQ*n@[aEA;Ї7k ڻ:M1G2\0U'yB XpbUm"Y(ֈվYkt: ihLCnAȹfRﳄ}bdK0 AE~nU,?ղ'xx̯ 7-4\YL?c ;LPB"`*T6f@Cv<)bMK_5L8[(ճ䭘7Nپv 6{m^K<-wtbs?*SU@H̴b@B{c)QqHH*P$ 4G6ƭ28Vg1h *ހTP Cn$!|V] ~vMVҰĸ3e*Ke 6WfI7BIdU˩4\h⩩SEPȈ*@"PrD25뽏KQCn HDxAKT2eBO`'Y;H/ed?x$rSSBJ*b "/=:(e/mX51V(b\g-PL۰  R^#xV@6"DH_z,AD0h'fJ2(i& CQ\sTp@R,`_U o{jCT@P6 p5b": hgP jզA(Ȫ@i֡C!(Jb<,H#dc9&F "2@&RY9f BNlۆxMh X(ᘥqu"TTm4:4cH"/E(TvTDSiCUa H1jb5,E ԛhyW5m qA׆UE1Bړ:, 4 TM:7>GmM=Pמ*Z?f !(1  Em('eJQЂ@@Ƒ$GLka^>cYٰNI1ҀGxƑbc^j9M>Kw3(9$pU;=&|?*UDK@8(o$a !ʟw[TWDلR肋ˡNdDASLS$@$5-UH&U.ś,AbD`F,d)*6 s~plRADV:CN|utnuઉl^ȮxT5DG<ފʂ ^(tƓ}BT =_"ETTEU 8E`(d(V)}LϚxi (3hB:vw, y˲ǁNrg;Q@C؇6r] s~(&S4D@P3չȨ $!d$t@b{90{cl@׈&H1E[CW5<ZZsB6ThCW"D=BEpQ$L, QFסG^-a"#$on ahAv""( C:Dp$q :d93;!M8f3P(6p@RpӠq *F$a5n@sHrJѩeu`/`6#lhoo; B7ǞU3pxaۀnG4q$WԊs]AA֎XdڱD."2#7AD V9WE! ;L@m+!C\iIހib0d$'$HSͫ8I OĎ04Pڂ6] EF5g &0!<BO6xw'bO(o沰ܵkut1^bbH (ؠ&1ibձBE  s([S Ct²ERr3n[lN~ 9cm]ٵC $&}Ddm!aA*7Dt#6#ou@AwaXY.Ld9z9ͼ}Y3M!I7wړս yXJoEP pTE$<-4U fֶfFQiB~,F"Xm"Lu !Z(EQd<(I3`oԶ, XA' iCWR wCěQ]fsi{n9d=LĚAI,̝vcQ;StN4xantg}@EA>aXgv\9{ #'V0 EE}jϢ2CNu t0mOud=y$(s:D!͒)`,N]tUGQ]i!h )%^Vxl>H͐a Eٵ4CoyCfIކRbb{N0[:)B݆|6v \XCS2`_ñohXdWElH9 YDW]{ayl<ߚFƽ8gl@؆$mu Ȍ:*&LtjKԵXڮѼڮ4`#I bQi-߷ p֛Zf7ygN v6vHuIwg-4$dBA$D$Vd_>;/Clk1PYϭl'X>œ ѝ8'X=6TOy'Hhanaql )RQLAcy<+YFۣ-%^\C dAmlVbTXfS6D%,1 QICC`ڰ#^|V΅&6cuC"t_a1 0ZԮy@-F7{bd3ڑ:rАbs00kD>Bg=y^};Ǖ;'7NƼ޾y9(w|$i潵;y{Na!jY :_S/9^@j`,ŒQj3?}t ~Jq,]m OXPW#_.r?b8hlVD Zz}3v{O7dR`*ڕJ [ tIh6LT$LG?H /(J*KPJ&Oᝋ\1i5aDϹc M @6 NvHP!{5קD }~ItٯPݴ+4o_қp(# ~OxN1/g4  1;X6|mQ~Պ*'٩ژKsw S~짓bwrΗ޳s!#0Bp,!yHeLX}1y͍vl;T/hv0ayjuQ ~zmeqFtN-VYdwqryhg6N@9;#s(H&' u!ܜ ' m$FLe-<:\6nC^n>Omg/[7_fbyH1K(Wn#C`%lTshK?b)~m|p\H Փgf2 ,Tc 0] kmEAEQACh nN5]Ki!r>iO9yZcҳJB(  R+ s`TPcSǑu5.IBvB[C 6Q_fFHQdU@ F $PY"$R(T̈\@(hE1OFVUdgb仸J[:.|y݇޲17J3ҦLծcsI l B*AbUUV ,$1"F 1TXb@X,Ń1DbQB)A"HH`&AT𑲫jeP'e[{;3l\˩s[F ^`+ 1!EB3P" _Z S<jJLsWC&r3YX+}١Z0WC\WԴsfAsKn)^ 4\K5]B\-i]&3) dIp򇫊Qr" "$2 1n∯4Ed۷: 7v{#/UmR/"@H~bOՉ*QX AH0 d@仵5{6\չPYza!6QTYaT >_=otq f5UXu#LzR" a1Y}5_Etkks1*ⶏ:Hx)nˣ:}]<.N:8`*h|G$@P'LDP3C GRҡEeo `|`sbmc==7/nn"+rj+h""rT{n.n.omU<E߈뉚cSbi{g~n?jA]ףvݶq,U~(rz޻^Ľ -%@,vKn 2c|lh \Auf]Ԑ>!H 3{VFF$b٢̶AIؐom{:~ 7w`P*DjJ'I QQXYH}>*I-Yij4Y@, *OaX"8bu袧.) `ggѕEGԱ[ٌJ$I 9qCA[I$2Gr=[fhH+n: Jf)lhT'i P*h9htzHAD 2 h1y=A\bv"u.X(PdQyEqN@sA903C\@])]J,*2 8tY$UAKAY#AD^t;.b "B*\;"ʹ5l0=!}IY3!Q/L}\XDTdL\`Bɒ@ʐ2 30*!.68KhV VT([Y$ RrAV bvCtQp/!c$@> y )/u)aaX|l5d BI+' 5`a`K2ʒI77lfփ2cE3(G,S QFՀ}va&̸P. 'bY;5>T `)N^3D 9$KD+m9m پ龻dAQ嵜) +>`t3Cn~ nJ~/!D-̛ڊ=E٥506nn&]ٸPTBi['7̯.9H R|qa.R ꇣ~ILL=v6ksyz1كͅ"Z0-Ba`:4{z  ̔H0@z>~:f\"E!2+!e0쇖+4f00Ȩ$UDHQ_9roK$ *2!!ŋ0liw{D9Dd n, N ۥO{{oeTnܻT) ScB!){VoEk¯k|}l0!ш2 ("X Hu;F|]l)TdBsV,I! ];;ϳw-Bt@@ $Db( QHH#!**"" ȈE` ,dBAU(XE,l S Ci֙G>C\v=‚Mf+w f TYNC[DU"^=.iqm۲]9t3,<WqF+"`C~9YjwoN6_ D 2S(UCF)fB5]c&Fժj( .I-Iqv`nYfVeܭcP4Y$qngO KDZbAtn8\]@{s:]hG/+ioaQ4XYP`NVX[Ԛa1ٿᮤW׫~Qn]m^wfT 0C`v}$5ծIO>Uz p{dbcJ4brJ X^FޥB D\ѼU:=i0[ Ҿ7<{3 =YSԒJr$*@P0$>J 6˥]m_Lu^"*<L=[_g~e4 AK̷57HLLAQ ݙU c) nC[TO6Z]p:K͊7mW\EڊQMeS眳램\QM$[A^v*4 )ͪnՆ;6vm?:ʼkQVQ]Zh2n-ujPb]]YF6U"6 ,UTwB$Dy(?"Sr蚕@Au}LUӊǸ~_z3aoq`hWWaX-eqĖиq>7ǖHA7 jY&{J CM5LT WjZ"q'c1s8{'!K]5hϞ/"#ʠHƎXv;iSwVQ|7Y&3Gאa:/T7gXe^"\i`z^$9.q6qb~VW2&ՑFXh0g4594uN< VJaphŹGk;uvj\Y sxM\tmʓ~S?}/Cཨ~vo?1 s{`a}'(39#;eꇙ.ڥr@Y9z/2 eˋkz?qwq _ws3}mq/(>y>adX>q%1^=Bk/fVBqx/DUy9tI$rprX8H=n_ƥnU|]9D#gcބ fJNm/pRk郫ևot@Fq(,[3]Ỉ4>̿f-:}Nk~GyqIByZI̢Oh:zS-N}{`6%KP&$dEGW)L|sqm-sC:ΩjBq9M+_rmg6E]O?oW沈 OL ~:oH l - AuK2AȂC /"T -^ o v˜3w$#s}tR|a"UHUY~8E0p V)! dyd GH5e-s͵䊥3=v/?}Khx*6,GWwˠ8u׷o@h$Z$N֊JI~1PhB=IDOMO9 8p*Ԫ&$^"rpaKAq"hZIbw;!d Id!Kz65DxɆ<]DT2OHLW,;Hw{Rۈv"l`3bⰶ51m{\{vn1!>u (sr[ ,w pt#z$$"W슬ͷgO3xHP;Phír !ZCB۳qMXp33,"\ ?>^z+.j#!8 P"ϘlWh1fUm?1P,qm'`$/{"@ 2oU XuG?9UR/ph(t<%t3K]瀻`̹m$Ye4nBE 7]hu׀g؄vhᤄ\k2AP%fi ^ rp 8k@ިnS'f6 7x+".&y1 $UɽUN^07yL '6[Ƙ4@{g"T[D\,'eLWZe1nax x=|\$=@ۨ(q@P?Uo  ay(eu +B%=P3{N8eʥIXgi1r[ji5E[p˟籥fѢʶ<ڊ)W\&95zUԵ5Yy1Skm Cr͊t峾W=WXjrfJYr.h k1O\PLťm̜X5Bt4U>g(ÌgfƋcߠ$g^b^N4fV-{8+lB]vRv rmZdO F:wK$- @سX.B,SkO%$B<ы%o1PļE_z.Mdjf3]}-Ü(Ka0~4Lq ^\'?Y7Z_v_{ـK6n />$bŤPI'(* ?ooU5rG9$.oA2y漽K.!F6,mh [zҐ򩗕/FX0c-V^ɀT7c8nιPió-x>JXH` ^yZP$$ye|\۾ Nsǣ;G4NtTFyO>E0=?FA#')z G/M吻pA7^ $P5@+%P;9Bc0ߣwa➍v`l0?CPceyB!OE{&ckW˻6O;ѨZ?8:oW/9kvrq{ڄj2Y;n_VGm_xs-ͿYpގOG}WK&Am/Gbu|߿@Cn9[f?s W ^Cro[d "('[TOL֙i6[Ox,=v䈀ȘϞF8{c |i{d̿SKg霝JkC`"~)3lu *xP^gt~p ϊ mh-ēqE; 0ks7zW+Zz7T Z1;իuWΖ[s:%Qard>5GζDǻXo;'tχcɈ=6wOksZ.Frm^qKП3- p^$=IxD1IPEO]C Ei AI( Ԓ1 %z: ;$Uc6- Ip[^u5HEPItHD_Y9idUZMd ȹf;^ʪ~b}ގ&'KH&r0`D2{Y>TCq3 x5NN>߈ \,C"_C /J%%It$N\׀*7bxXȞmbqE^s[l_ w53sNO>%ÙpyX:W[ &.25.)@JﵼDCh |'j=c/V3ׁЇPIYۂqVy$+8}}gp[JċӺO6=A8n@S2;M+ʠ 3B̈R;3v/Eɂ'~4S1aqf\7'yrhfօaMRDu'Fuw?P1Yr1]/T& .=6"_{b|vIkO'X~uZ:͘M?j''G츝#+Yd! h$Z@AtR<_ x*}G3YlJG#pU^les6v٧|eJ7ꖯsvo#_Ć !#`JH|1٥cBe$3'hk3N t#2͍.p#cm J\?|nZ=߾@Ww}VnLP˿O^OpD f 訂\ dh:s8;wopjIKF(icctf=+:Wy32i@y=-{5 k4;g1iiZHPo v#P%:!]a$@ߟdSUQy({Ӛ}=l1ol<}s?O8J{Z 9`X}wkq`5hq.nNg-WH$m{;SA26F=~[|vƚVkcK?X:ZV6VW?y^6=^%R.3wW)M>ojV͋Kݧ6h jTWOsήP8qK]Ox>c|J꤈|Gaּ]Ivm|1Á_XX,/q}-Ǜ Q9}R!hb}_4H]ͺ5-FY7G6O~;GnU)w_f5R,NYu-Z2:{e7};Cmq:S_0Z&*% 阵8@}Lޅj 楸}+We=SV}sq,qtq z"B!#QQ(*X ߭?S5Tg T`&23ҬeUSt 4/*ʰ ohWb&R}0>WN0/1\Xiz?*Faό5b'Od;p.xj)hUq.a#&xvWUq-r~\>r,) tWז"?3? ~f2㭨"^7~gDD@L*T$$J%_ga1ǝ2X}- !BXШ)slak̨~v;7N˗w~ oUNlJĎ34 6&YY"#F֪C6mN ~$=@oSu4r!:Qxn!զpGφ׼47ZzToӖzRv>){- v?+ ّ3wh۫Z%},gՃ+q1dx9o*$ҟ6o!LZ긚ey+YjXi R EbK*1+3("[h?M6ef|Z#!'r,&eJCd$u{youԢH,V߯?+_t#O_ݵy\_@G7꽷\[4rt~Г?Q^kc$(|O@8"^/^+EQ(; (Ԫ:gZsK^GEמJӒ+Z ` b6`Q^A/*.h@ceNUj)Yݚ|ʼn_k0烀wc 'B3131v+GϋNL:K_lRy{nIHBGܺicin^޾XP/̃G"$,7"SgZ*VS]dZ'a2B A(4 AbX1r ;*"-0?gF߲k-J(aZa#m<321۱q,)|C=Bᜱ̈;\ (?yz$ ] QgagVSƢץߍ-ÃU"Ԇu!]qu,9 m-pdWfX^lX# )]&4 n^_Ӥ?1moW(~'Ǵn;.%O_qg]]M !9ys85K;'R֭6WHߤv11C#s7B$̇ȈM!(@sڰҪb݂!cx{ɡhtuNBG!8N(Co~n))}0b K2uűr odcGNR-uA߾TI@h# 3R։"l'ړ;r)?T{ 7׹7m/؇(Ĺy{$7*'G9ⶡBWM~*mQI RK oWe,(Rځr/.O; }jj{Ɩ~k0c*,E1?3,6OI~r;@Ad_qy|޿2;ۼ\Ӷ W_{qOId! /z,Y]~yM{оQ-{CHxipto4r#W.x}NHe[%H=WfQ#[wAo1 ASRN~s!Q JQm_s^+_'qpT;d/_2^3ޓ4 )@КrY]eivhdB4,, w+T+9L}oYBx$IW]UUτd;8eMR@ yK/0QY-Df pHZ}${5 <3pV[Ԁ~wV;+ 2y>~'G^ϔYX}Aw.wS  G[HKϏJ󴳓stzqm "En{rCS}*m&d^y<ydٓcov:Mq<q)d085u89Wx?6ƴ[=X1]sȫKvfDd|;S]z_\s8F oiU(.W7/|}1CL %wrrnxI]pNdnqJ{/ڀci@*ܚUM@0+DJ2T5Z3dϓ#{Lh~TS!$`9fsm W_]ܽ[pt9X?̷6-AaANT_e0UKXRk\j|y66=ٻ,]Eww8( \yJ9/<v:a㩆BR+ ~6-۷}Zi?fRPBq)ڒ!&Z_U%rȪ0"%]6|/dh˯/0 H]<(ճ:+Bdfjwߟa8^?.(D9bY T@I.j{-i[hzN+s+C䎅SGPE:*ׄ=/<Ȭa*)@̕ZrsU KoP4uXp?J;\UeU."s/A"wdvsDU7|RVsj )uŧ`jyyp648gs*to)Zx1Zj*#mI|Wg9`P.W37*A7*@2-_W>-+zW~%.Ϯ;AF!9r͸ H˳X_?1@ecڀ:~4 L5 H^TMe96bLA3 ίW+AITu5.ݍ_}Qn#{{-iBjip͑w~?Zm9X8]f{5fyYzMߴF>rXoםufq8˕n槌[/`q;j]cS6M` uA߳3JPc;o'A9cGX`@ɫ\9`DĨ0\j~\mkQըLp55D`}Xkq?x& K`pɮ6heJ }.'ڒ oyDv W0v,>{dh}my13ZdϺl=\0gd2w[)]_K.vڍW؅)_#6<2;Wl}o}NY5cL.pbb 8ϲ~@!gt< ,uP_=b&9ܔ:VA a};*~ލS.n䞶^/܇Lt[I{{ c[+u4s͜'9Sm翇&^>j1 niڼA/׿b&/25 ˏZBaL`?)PP$Y<q:9vV3Ǟml?9Ԡ\}~V]$e"6*8^is46n|+8v=Nhs(u'ɏ* "r/(HFy=43d_Nq}=ʥAߘCj-w[,r,$Faa`u?xCX!A`_qlqѴ 8ɸǦMG4RoX75D34|yyZNYM|b?FA?5 z\?^o&A`L#IpAIĻ)+WQaED Wqrzru_[5G]e}ntPj]y^aN@,>"`8vz^y34aPͣF܍Ynb +pHM,2To`6_ #p !VqA$BXﶺ% N+-_vi0=\青GSOsr6v:{V\kzIw Q2!OQ2@WϤ~BNe F!2 H^ItUfwxxwErE鼡D?36.>f0.Q R)n1 ? )W𶬔+x/RZ}<F(40W2.5 @2[0viyz! A 4,*5 JAA>n)O#0T=n d [-u,?ɼJ< o1<#۽%a=6La#.Yio.5urknWԮX[#ck57A%5sTɻ1ns603@E0}LAcoZpY$t$,fDt ^"1_R~/FY[msǞYSy++f2Ol:{c' ,> h}}3>la 3.;/zz OXهǞeBe$ ̈o"!4LW/\Qfj{WoMω]kgjwO=|CⷖߣZ"s`@OG\7;|~jMbW,  @~{omm/O?KnGQ|ߣX-:#+,gmtGXQ@ ( 70ZHLG(,89ZY~^Wֿ x{sl悢„3_7{ȍu;QQJРgJiwп֠ܬqsΟs\-GKEȎ{5#g`}mԅkz;Q>_ b6~:v'p |߫_5Xu$<ʽ9}=f.p7{ܕr>By:S&Uc>Q*FX6oW7 sK;2Femھ12u0uS@%W7xQTV஡w"ߒ8%Ř']jj Y ˵G9mŃln[[Ϡ7>y֭xG_ Z-Z߶C~Kم\q:H#Y2Ɂ~^ 3( ɑx7Wײ ,L:|kq~ΆqĵX=wQɿގVŜkӟR *WkWB:>_ Zγ{/Mq2VԐ+GRq0QiɋImb+ a賨+yUN`*q LZxLX]3k}u$a `@$,ǓvMd_kvZzIUE tI>"`! BGv} ac}(LUwث}',shn?_'햊߳RÇ!W;OO|ir]<@8eC*w.\Y7P\}ZR7HT?0>Z(NJAAFEC*H| 8@mTo&T2D Aa CA_P";(+V‘U]x޵R/zV2q{W%o'?姩<ӯwc F+=7uG-*c.5cMf/xki+cl]t-XvW/}Ne }ghԍY˘1 4FD0>'MzVcȾ'<\*%BkLYo[M=3ۥݧg[VVRkPY?Uo=isvTZuO"gY-'!h@{?TSIvJ>7AZ_-JR>޻;o?yN?PՒ;<3<86 3@L@19[;7}ʸD0>۬uyT"H1yH*Q3,Pd{<5~z`Cbl凊d0*C0>I[; ݰ |&%4qaVz B @_ze;A2ڨهF./uJbRvM•jfU,z=lôXCK`MCݡA iAdI+=1Ps ~VJ5{>a:ﾱ>b*p<3H;_b_e f'0O#|G>GkC}@R  rObDww3f$v!EBZFX¢) B+n`Ȭӧuy^U::ݧ.]r-0;z jUJ 56 Hj 6/$w=mFceWe8p8W%=ˋ&" f/(h^s_x]rUs4V|$7tqn?YLH*k*b '5Qf* |c0M| \ڧ}i}w614炭8L!2 C&O?59ZH޽try%ΎknaMngGGvge*O7VoK>h;)N mmYk:8?nT{)'z\jWa&/hiN~]y%aƧS.MTH__.p;B`覗3c eqoq9^5fZ3O1ԵZȓ8o ZsW:3 G|>Úex;Whd5 SM;d}?eBMUe߽7[~F2v f{Wϩ`#buDC]﫵w=&Ӿ|6ܚt<0:6R}aN#v+Ϋ:W@<\ L _g]EIu>\FpLz \pMPڼ V\zeFEWR%&T. $@a6׃[1c4(ąmA~.3xC~ǛCl9/{3jcW^zY*YR#67%01)=?{̿Ӡ: `fLʈ(S!Рm" T@jA/A'dPDˠAOSA(* 4@!HQ.(wa Amri^%@)0H4ʾ9HW$XtXsF~B\'|~d A^Kؔ5W b-q3XZ*2m.,䭈^?= "8=$w__c. F?TO^((Puy3ŠQQNra}fyn]"b݄jyw<{cQm%ShB:X$ ^ ,Iu9ޥE;YCt_VO=Øuwӽ<\:`pۼ6xYdWg6kܥR} ޝY/U)W@=. x2`AH^l1? "p EA۰Hpt.ΑZNe&<uj/x0]gȪyzZ6O1y 2ƭ7Ԟ'4:(bcsʂ%iA{^GhM:7u.~_.帒4pd4C9\v9JJs3`l+l0 n/{7ʋpj/Iֱ׿Tg.B9@+;o^[୴2̈F-M~-\V-D^QJ2dDMT*@}TX1$aO*'ޮ|:}/KHw!|2fB$e"dםߒUs)&=|e!lmDŽXGUkЊج8Hz&*|{~jȚ(} &1$GQ>εϯ*>~`CK5A| 'X-zնK<(rguz06RG*wPMg!kV_t7/md>߾ke C 6$@'Z An@!I<C@ږ@@H,4+}VT<2}LU wzuOxmIvZQ=*y>p <]vaJȭu#"VifG^YS!f 1D(2^Km_0?'q6\+UX mh0f`FG$?Fme$_]fmx1q4lO_?:2HD1w2d_>;ƒlr658f@[4J`"I:X/bTP#"AIހ"HDD$@GS5Xۯ k/:8_6e ȢQfJTݦU4YNt˱U~ J%20A %k$P<!1I`oC}[\Ay %e *SD!I$U D:x (@> p@tSCAŠ좢'x)C_戠T;ZD[1O6rݪ/q,GԮ-(<d!<ō(?_] W;TaXw F KI5U#9|=o)KF]8U2RCp -+0Bg|yH! dҨH`~Ǚ/ G`0 9tOcﰄ .;=h!@j a1Z1'`ig6:ڟgsү~y¸OD!0@{ ?$ل?ϣVêi%j~u 3bBΈxe:GsÆ2g;s<rrB)Go͟vS= [MO}beYm>C+(0}!qO×]_I{Vs7BȬ; 3؋s%J-j Ӝ )Z H&Nj@ԁPK4M'_ ([U3̀s E!v82eܽVSۀ\ȺI[Ipr׿sպ7qI#0XԈi: ws^ճ](WRC<7m[0:Nr`3q!&!7jNlT:CCF&-0< uk'Ẏ,F^C ߖ]k*6V@Z[-6WddtC4|>Cx=HYioR \rBcًXj0}w4Dw&8p(ny}D[7ׇ='ᱛc&+`9b M9Jp|K'xo?#;='(9CҺ5'N2<<垢^x))\koO=~dlV(jɀ;-c×11'^Z PNnC/RJu VZ`mA8}8ßKYRdBZC!!{NF+Ngך[d{&Qqjk '[c/M e8a:κ,S3cʏ)õ"yQ-GW|f*~^qswOTۗ +焑 twzC9g ɶ~O vEy_Pp0V\rp46Y>F!4Fkkg ɧBmħp!dqƧFxcd7jL6lfEo=ѧlz))BJW'fF$ ܞ/uXb*Gg8 VF%BݧaWmD7@]Y``0L[#-=s8elҖ A? >Y鋈@e2" #<۩Х[mK^i/ B+B;wꂀ[0ET;WLi?DҹYJAUh/c S2L'Fy2mw*k,Rh` g-s\1.pZCxM9XFPTdUy5|iҍW.Qھ)_yMj5헤 r7^eGcWa_=UB^;L b;}SM>T݁coh.6tC^I/@iSe_o5]C2J^WAL\n6&ʆbdİW&Ml{R(i{f{y.n_ o˭@f:{,NgxXi/XZW {0i f7|A]'^q ԉ# *Tj}ce"*tV͗n <7{! j; k]űȞ"iDީ/[gk9uMZӒZnp yK-4"%33~-`剚ׅ^kg}V]>^$.{pلg%/K.29}YCt>LܸNVaXqsm"{" "I0'XH aO7zUq4ࠈO/I097&\Αs7e,W .FbX痷<dyG$.?I57G{yJaO)B/}b%:veZ(Nvò3t9 ˹Ԡ##z ѵn!B4Z,)BػSFHda]<hu}'G;O%{M"!ӜI # Zz% H2B% J+UY'ոD7^~?(X Ni+*р}~ӕ>|*X >"r@7*KC!P ~^ dvq1Đ-E_;WY)_V[@mVQycO,V+5V 9ԏ׏|wǪl͋S.2$|"7H&< s1i\(OETU !̀:p eՈ$Q*")=Sjed >7Q Jir4X5E+Uʣ~=s2#N?X8p~v\lzͭ9[y2r\9d ['T{،,y۪4ҙ]*ߪ`*DI&ɗqi'NX羔i5[]7E3[4Ņx1Zܡ)Ŀ4L`,$FbkHZ}lĄ{2 Q{=ݝڹPqi-K%9B@LJ)"VkBZOk~U@F`KV $qroU_;r c}}ϼ9=$Kҋ$DJAH0b {\3o UiG%n:V_t=[#BX1$;dc ` > ^U˹:8Qk 1%j*6~CѦ&4,@bCYzpGKAK3D &&$T -\NS'94g*"DiնIPx^PBk* +Zbԝ y%b35 ip.T+ZIuN%/S7g[Ʀc9©|glNn6c鳄d^rɍXhލtOkaJ=dr9cgm$a+ NȮಸǿ?ͭT)Y.}chw3 )bRjt5Uӹ}OG |FO)S̑l\%@s!I>/yӤQ騒mWv"O<%}Wck]P&Pc޳CL#QOW/u8`g2|uj-xҞJ5Y$.=7gD91X,9S({𷫅tWX'?"⁑Pu:\NiӗqܵTN21av.k5m^w6WD+ JmPGEGBxN2i誋mJb4dmdyO7vXKTdy?.V&F7ҎuB߳sPɘ2g,%%Z[|:,(U]H!" |dB?,UAM _T5UPm Zko~LUZ>+Fck{ BL&A &L04_Hb1xzES'P?Ԁj(j@? 鈠]$$@$E$!7: {D D|N$z[HJY5?(ϸTfA8#頊'Ѓ㽊8! $cPby**^s(q/}u7>O%@0jmLLAyNJMb 7r A]nwi6) HzF ޼!>Ϳ0R~eW]/T0I ̜Q %ѨڷW\2O!a9NVY` dP@PR?B "'k$`,Ȥ"MuZT+|M3.`pa ]k6oNN'9;R#VC22 %1(ԅO+iwS&nT/1Q)m.''dufpA4UM=.CƙT8P$bN?ۋMf] `[@(_0,+OS~SIrϩ=<[?+Dh:MyUCmjU+<pvx|JCj `SD+-;Ȫfbb2cx6k0I:Í~T!/ }OhFZ̉^z.|V!GZ a~Bk$aL7ă%/ b{!ׄHLbE2TȮ$"~[9! H c$!?O7 ~ ?f!;\DnTó7#U9u|}|=1<P%$\rc u!b{9{/pӱdWYf,H"DeAqvџ } qy! $颱Vt2eL5DF|֙73rն޶ⵞzɳ%a=l$ T&gT{zzk X*{= ސ.@@/ ]h"Hg!,0y^?Uߜit-?Eq2BT2p]J|}y<\@vNƀu>:,̱YÉQ][Pk5ҝ3;] $ԧ9A),Ą?y:@PОA!@VW U$%W396o93>n-S'C[1c(,"֒BM}T殡'{ }ǿbOt: "B~*,5CvAs1!oL_П*2-Պ;aYw= -Q7?W2j.LJ"aQ70*$ N@Q{ Nƕ a:ARd ^֕ wa Bf @ PIU=j qD6 |(^* H"Uc'(g?" +WCaHeiUye $f-'-͙* $6M:g;. ]a7{u ƙCGf|ǵLgaC- ?.<Z SrMAt%Evs$s{L>joaMֺN ]>vh߸@UOm9o@ 0o[DIx>ڽDz\#jHξ~"}dx 4ӌRf?DM"#OSܟabfnK*4 @Cv 4P;k2*|(N ХGDx'w/c}8J&%CZ < C V$ 9tPB X'OQE+"H, yDI,!Q0Xk*ގ]c8rIwFx{6L^i/%T#3YJNF>\O}q<4 J~B@`a"R)́MK{{@k?ƛqapɵ{o\3XV& vvM <{Iv,/[C! *Wq_Ju◍ӑ@+Z*""|;x!?ACs$w_R̊;)h E Lfw>Tq̓0(_Q7Vu0EQ߯8Dl֠g8:/1!c+JvOezfIĎ\WQ>._? [{,*, $x[[_l }…Z"i>z͟!emn+^z~^ Y4Q=;'PWRuA@x-{'QoUsz;_7ܮM\(kEpF#d:l!Jƶ 7釓0ÖOrB a"=AP/g|c᭛ZKNwEp* wdLt|dq%tw3][_;_vHib1޽4&pke֤ -JԮ@`&AH܇BbAb/=Lq@DdWVJk=rӼmb#lP$2(뢯f"BaDp`a$$@BDdScQBziMms/0%"_7(G sQF7?"N럮3u^Y 4rxIo2-@R (=u !7}r.ʓCה5(鈅DG,tEP1P5mТh}vݞ^s9IxҵЕURP >MDI$Fo}ݿt?\YV#WJy:bEP fsaJ+>\fX:Zli.ElcLɺ94D[Q|RR!r[>@Vf>.Hs~{`,bqB045q9^s1No ?l'm"udbBoS˕JҁVn 4o;"1Ԥ mxjDwz7edd .1vm#_t#/r>y0_O?gE/TϳG@(FR5#s{7R-6hrP $Q_h ?ma- a"Q_ޤs_?֤yZ[}2?3IrCvUR5x8ce$!U*"tjZDOEC-`+"x](]TE!WܬoY>tW.'.WQw&5UK?x:ELJxMu'0ZlzNǍ~F䗪sVfd(#LW~Ǫ}Z -D@ -@D< C z(" 23ˢ r9:3> z.NضXz>/ac< z?!NzX/>$s^B$D !"Ph#Hbn@xtvr5<&7JH#"" !mdR ]qbLM8Y$V'{jj4p3tfRRdn*?`6d˘&?5 \vLBuO/OtЖf,N:b9o)0rQmu!v(j[mcfAɰɋ8:ul&fTE܁ls*q*UOzH{ߟ[1ƫ@ H@!eDm-A60y8%= 2'ˈnm#Óˍ*c]#q*Kt&Iy89g~ _x?St+d, i Td'˥P:"b D! p@A8&LVgG`PUi ** F+>9a(X]i0xm7MZlJܟC STeM܉Q_VrUΕ7WK'\guSbS KZy븶Dv[_&F}š֫ӨN͔.:{<_=YzMgO3& خ3ke{W js\Cf{w _ݷtQ\ЊNj[.ðt}:u3@W3{}uV<7ǩelnxαUؿsƯ)e?}s/BV`,F_>]0|x҇ot|_^2r_oQ\ajrRe;sv.3oY|i߻}^Ժ-56V(|ۺ\wfzG(7ղÕ0j{ۮk#?k{}_X)w$"`dnxJCZvcRO([i s8HFQ3C&RHb (*$bL,W/ ͙«,ͻTrXQwZےRΝ0)/M/~/| BH<fB  E k5_mtߘE`"O1UKxo 7. W+q 3f2;E#_sM>GCO^֐.[?FTB"Hr $,K ~y{W̰>u' =;/AE@?ioIv## |*%AGDT!/BES, ̪; TTwHXCR ",2د!lfs m9Baɉxo:kѯe[W_Cj$l/}H.3%\5lCFR_|C3|o_,Q1XBGO0ϛCf\{0hK@SՒH &0. A poٌ۩qn3=Of[1͠|틞fwctީ^fjoi2;71aQ /~ _~P9/nZSe@vAh8$浧%9߱i1Jo)$V*.~PNCFj/.|u N(iN][\K }@X;&nDQdE"`,<,&?Cnq ŷ8@ɼ T=.;^;VD$CzθS顚oU6"7{'}TN'Tf_Bs~)Ddy*xz!bAj]R' @6}9s~jL&$l|@z& ʂ o4F5hSk9 xG$O+Cz30)E7!X)xI%dnd1^{r5$K_ND/f,RTLY9kUhh1=h.QP6^v͙򽅹va§Ӡ%jv5EXV#YC5Tñ#c25ymBrq~5GxB(0ЃO]GjRrz^_|SҀa>H${/e; :3%6HԝN{^h䗨7˕VT=JWEԣ[$2 u2'7vw;kqZ?e\hbz6_[HB"Z#Ѕ|jNT! cZ|e8stxg~Jq)LHaE Ji&,}o 5%ч$ 'el?_Ic^ƍ3Gy +$ˬO9\g6x~ X,0@?@]J>v=LGֿNZ"Ȳ}6xgLJrOҾ9J{Z 2##*蝤=nC4ǸxWVR"^/}?3??\xc~0w<)=r_@zѣV@w8q@@A!"n|6n*<+{釡Kv/ۥsL @Qx\+0SL>@›h7qh02j7j ~rN6e7^{g<,njBТ 6t F@r}L5Q1q 40jtJL 3:0PN,g13 khz7o4mRN٥NgBX#Sc E ?~::?F?>$6ʀIv+mwcf0U"g3Ke2r/Z咫E|uP;.almR]p" ؒA#U Ɠd-⑳}biBAYK; )v!4˚%ׯS:̦[ 1+ hUC r$^F59ZTrMuv}* m0ǃvc])tVxJ!dPkn& 4HM'x^Eȩr<jV\ j(ٝ+eȨ#>jr5"AS3!wkXT,u] -:TC40iD@KתE5ex*h FT`n9oY\3㊃F mQ&3Zuxl*}0WB& qyf(¬e-L(`j5t7^-X*mX9pg 7^09NFٻi/VtrЏ ']xt PqEKu[`0NPmNr\׳RĂb0l H`Ab:&uD#z< ES o M:gZ͑a|@ͩfm[nbvs)s}h6$nɅy '۲_^!Q}L66`@ 'ґΏ7sfs1\T\覶A0)'\f1~Kvř (xJ&̀꒪g{m0 1Lol u;pB[`U U<~[jy&/ĵmZ[Rt6ca A Y S*"3ŐDTҬ [%_Az}I WC1V8v>ԗ$֠`M"n΄av/2げr y% \Svrٟq48 wVvax(H4~#@]nqҮ!4."E Alm̂A%1G]xxy/?Gy}O=R,J[T( ʤR珻g6x+e m2l\k7n@_C](f=k xu Y HtG%^ ɛgNnnx-Qy&w|^OO>a.l6x*$Ep3 QTyҲlx R:n/b5C0" 0Zgt_u=t-Q[`zaT(_xL+kϔM T@mj9DF K\@쇔}K`qlۗ"ivfp_5 ,Xl!>4NyR3P\@JPLkFvQbRYf8ݫ˯j !ŒoI/-{0#1>VD4 'ZI 9Q9uQt gTM/KūaTC^M!}7c"'k:M2i.lhL!l(Hj1w+A!a{z2@ $ćwnl6;W3h ̵kZa4x][囦ڵ哆AB|]9wH'ܵﳧXˣNk teݪ(負"ijykIp⎆4q*$FTN0/\/+>[[!3zb2asbj &fa 3ˆp=t8ݨOTyvrLJw^>SM)|PpRŃ931p,M0̄]BF@C*6٦Yl3 5@;rP*/[~mHM?;L,EM$qnO!Cu;4EFȐKCSq!d~+{ CR25eA{Bbdrau4|;ߛn6oӬ\+ kvzk>ȋh!B]&BpqDiд}9>Au +Rrd\`NFIew3@1#C>l_ ̞Ĉ 6Xo@)KRuL,X N>w- q $OUj캈w,T an n"囓G;hyr _ڎas]۷'o͍ @ڃN!/ȮMBv'k٢)|VharC Z.|jiR{1(5AgJ`XocRG4Ne@#'BeK]|=yԂޡug> IO~9c}nz836 @wuuF?D -zDd.!\R=ld7)2I \A,";i_>[vBj 1 ܯf{'nO`nʊ)Cy2}T ̏0f[NtTtQ"7mnِQZj͹*xq|r7!P$)H}N?<,F'Jvc5%$`dBRU2K621f`ZʬAQq7i\PRb!ڔFRi5MHd6ܻba6.MɫAk1.]J7g^Fۢ7p)xb5U; ˜HP B&Z1 "dzOn,0gfChh^-峔jŜéOGIRb+}zyN7=N'3~O-_Xk^:]}ԱEk1#z[ O̭ggL<$-LSRuݪ\FXH<K*|3l3:;/3v0Ax g<6S,Pvg6 RjVT"T=<;DzƠ#j<آsTlVxk`xVS3:| *X|8`<{=ަb[ T^iˑ9|[U w$IN!Y4ʅMVM:`3=MR1z[ 'ǾP435x]^;w<~|;w= X#QG* TUEQ`(,UPUTF* uHX,X*U| *A. cIMd6%ݟK4Z[uu>H;*,֞, Wu}[TAo6y.5vyd\6+!7]G%]n@9!JڙRӿG2[}!leF .䊗&:W75DެuhFܾ5l %̾hӀ=²LPpf]h uNl-V԰FFgKZT*mKhk>\,*řbbZqPgUR`U%ZNO5D(}yH&6 "@-ۏ@!0!]dݍԀ!"6Q;'` ‰>_~~p<-rö,:v뉁wmԎHҚTig]Oh?Mq7v\C+'=SI*#"(|l$@ @ѻ; VJryKib"aF@0'(CdXvU,[gؗ6dtO"!5Jၱ+!M/H&F&rh~~ͽ]Oz(e[F #YEXVc-.ޝgZZoz9hsUg:Z;{tPԢ 2L2T軌&ZAΥ JSB8{;g6Ivg9<^4BZ!u8η5ۄ~- {KPh2F[h}~Ow0A$( .J0*EfShwR 6n6}C pscÛ9`YݳX7cJ "5u,F\־փioZ.zrDZ6؃'k۫JQ jٮg]rjhlEs3ʈƾ^nބbS3穬,=y)a9XZn`\B vC=5-L ==+fk HMG'~#@3NYSi]zhVhb]+tzG o[wCTb^"e+m,TrNu"*,O!{,`X T|z9f.58( H'FMnjOox0C3G2|[6s̛>~;r^鮘l[ӏO37ӑNaCP(d Be̦z]uj}%sBRM,H:朹vji$߱K3Q(<&R"@rHHɚ["<5cT7g0/ [<(J.ILT6L3948rKp0$Ҿr0+WϕSz;"w`9kbCXA `n(VİTʳoMhtpxm66.u$4BIXEI VɠѦj& B!]gX7wq1eP .Գ^>8dd1좛z U`&߿%AkSsj`XE7)I] a7,|T DrNkf<2#D =Z醎 >&:@HE =SgTT&֭d3 (`3ɛrFiVZME|gU8(3iH  )mlR}e ӱ!r4NpQ/ M{9c0:Р$ 4,!X(FHI),"Td4fRVLTPY!ڨ6RJ%#FAhm &6 AHF-jDs=}|!gz4ҝApͳF/Fuѫ޻h a[i<Еr㖡ݴᱴ46XVQ 68TDA: zP$.\#`sϣޢPnԇ?gO}0Q11e',{^$Y9+! ]LpqlDw5)sXgJl(߬##3/ #D7f5 ަ=EĽtWyS_f5m/Ԝ\L >, |Nwǣ ܮ.!~Qfg9R0 P gB1s48ބ߼B-!QlaAWUz*,K-LR('C`H 9T2)$ >GjZ}G~jj #y ';RF}orf͉(3E=i:33ê@jN>m*Xk$:H|iCN&FD֢l\]JMթ4hh40t53T@rւ$ᨤbsʪ+ڗ:z_S;J&"DɭD:A}fS1kS]P o]}j~I^?SÏz{\峻 ?y70AJ[P`D@ ?K>fmb\/>Ҋ qj>SaKwȲoҤYrg!$ e>radb_l, o@m4iR,_q?}dQM5ؐ<"s~k9fN5C,7PQT J)]2'NZ= +>~|:2D>n _ԈqP}-έhIG@G{sg!D^ 4wgv͈SĐĀ*IK2%Ncͺ6R|17Azud 7C\ivXΘ m5"v`|股!7gw>}ެkZ2%yv~ڰ30W5LmTH{Fc$ 덇BZZbAGH $Q{}ފqj'C4 hùAAc}cJxʑv5Nٍ.alHv´_Kddc|kuNCE@eSҒ/f[Z&:0/5&VMt|nuH/5$9 ;u'O < zI9q njVwWrpw5a(Yvo?wRLi Fg$?<> N'Hg@HCѢ˧ȃ,KN[bf9ϻo[YbOȥ6avQ.+_g A5b :zS^g+1o9M@_M+]&y_#(vC W85FSsZasdCe?GD| ADHD]qǶL5IKe7;Ɨ{[|2Fc4d(4jctZu%BȃAF&e1P4@Sruo0`b o<Rw>`" į|gN*LsJ9-|>`G$, GN$QcӋ$dI?԰T:<Z%@D~めܔEVm?}M6vLpv>Sb=έu( Gjg]l#(-_`cJ}KFMZKU؍/gеHe;3Κb@?qL vgp ^3;bNiZI$,E{^Fd7dX ǢJw #^SG/w-ٯyKOJHtQ cROĘ{@vg݁z^iЖOi%&d|:A~~6 ceI }~ QSo&2 Eu4+eb*SSDid=IuXO?:l'2 l ba1g"2()J6k=i6J!R9UO6LvtQ-_Lĺ@|aM~Jr6 49}(U"4ڦ1y tJR DJ8N<3+(;h`F't@f$4h~ljlkH'O?rV 9Dl5weg@ dW=z/곇"\8ѐPGf) -=. 0ɅLl"ЪHh)TRlf~1sd&цE7H-yVMz' !DR^ET/r:s {7׽FE"ߟY3wLϓbf[H2oN$F(9U8Y2cP<"njMpϭ,-؇X#Q\X74NaW6qz)]5QIcꔫ0,2riM[SWRĢa 3LNg=,K ȶte$Ѱa '*ѭ/!6RA=f`YzOruڼ@4[9mq&[jľ1 |tq?L>[uB- ɬ<`Ң0bX'XizѲ(H^ {iVud1.'S]fVsC,Z-9{{3~d*)p~G sD1z4C)bQ5cYΡw-֭8q}.DOHA,8ᖁ?U@@gظ~np|,7?ʁ)הc?z()5P!'dc ^ֳwϪFC~ѦbXoDZ^(?.Rw8aVNQWj;~3Gs"Γ":Ex^W[+T" ;v/8>W#+ s=ܭ fW2i꧇rᷕ䟨bI(8A$9wgՕy*c((fjSIFU2/ujL9b$E hY1Jn1op{O|a~:t'lh*{abULFsJ8ńW(Gq̤4"nx|W3벓?NCn~,?ubOYUPEc +3$9?onlD "˒@Z{׿k˛'uoo{J̢BiүˇHLl`Bq0_wχae7+z[^ U~7v_k$k ;׸;wrF,,GF?B?Sxw_NK;Wp.UB*#9ǝrM)g ~(}ۭՙɅ\ՙ3 dn5Uȼ Ҋ=vIqiYrD5~m95 L'esS$4cL/)aҙ“tzn=w%uTbyXY7QUrGh e1Q+]~y_5^o{45mcVG y"Aa,2P(H}M ooikk@Nfa%g?-noyd2i pRETA1Pq~R"޸?Fi {eQ ̷,{ۘ宅:+^Ƿ+jykyc%%&0A>? )DSR<$H珡hn㰏^5&i2}8бb`Q#!#"ujcn7`?^;pCj  aQSd4il|Q7[Lʐ(hŵgBeyR0h:6eziKSՠl[:BF$ڐr{_XnL7nwnwΨ[Z]0 Iis\נ̓ua9*Oo{ϿA.~,v;b\ڋ Xd>}eMAppa\ ׿GNƂUY; /c]wZ1P6 PS}_nN KQqgV>2Єf $>׉@v(/=26>$F๛-f{< _QwF!`~Clpc^N;eٟySRtc1d02We52q v#T`zW>[/# >/npj4A,(ff0*BO1'# tZW^}}_k(I% @L_xBIKl W<ߺzߤq'q|Xh#|4.(YbNܱfJ=;(`2B'LKBuׯaάa,T"qa<'i IJ6B3bdaXbk)R-EQ+*Kpvv#sM$tOCP@;T4J$g4Um_jb^E{X9:XAՆ1(j ?G~?#~ rT,X58UYݍdU[jV7'@X Tb(̋,0;M৓5XW-ºr/'6ͳrQ?Ў^y _}]8d 2܈4gl r`@m$pyxnf|Vthя5ˎVrG*C^*A~`o/^QNH~PuPܐ2QHnzAbH)" pV8Fm1/Xȸ"~6Ot)&>l'VBEbph˅cY:nG_h 0"xMZ+8}-u1PGPPՠ ܗW6-zᚼLw~NyHn'P_ͭ0mS0{mmJNmḑ-v|\AҊt:J$30Zd*D.|=PXpADȓf9N+vjsv* z_^|eqCii-_ MDD?z,"3'Xnzi{HV:S8rSĩΤ/i/^/{emMv>N~G"bԲܮ#}u=,4>/ Mm,/HEMld c%R(u D^vE,iC{I^OSzfDٮ7~|~G=@,0> f@i.h7f^GWZf( Hy,iCbi^.[lmcG0Ē}f5͖Iv;t;R)q_ma: T,r!4\UFZJK4 1|m #$ΡV[RUܼ\x񌨫>Tj dm?IbcsF ?hv/;rS,l _|^m]9I}2N!5*Z{ Oo^$QUHȡe,=ӷyUf\ޅm(d%L"xXwfBh UGDA*4&DoP2Q̓xId>K"[mp];B:STfHf6dj8p^=>U5,#d̛/ s4,as$rt/H;357!CcOjǞTa6'Ie:+HpzhVDbIBL~ǭ ؞@X"?O~Gu b YyFMS'\:H }K-KB c3sө!o]bQoAB;t]ၺ0 ony+& d^sauSBGjX A-$i/յ)?ell-O_.CsCp2ޏb2Z뿈?W}vs73 ol#ߺCYfjB\YʪJYT 84"ĝ`9>z 6Zg~vDȏ@&P #e %=CѬ\9pJ?Jortq*\l>d?.^d@ >1UibC@a e-HFI24K׆DF` lTY|cKqQZJ.?~C#"@XlӋ}T鷯 _h:7~&Tgd{21H;_>G$y9#ݻPckt>[>6&$8KgУ~o|߹,*8 %öOOɇEc%3I Jzx~|?wA𞗃cyψ`c'r#4H&/j @oVMKb ǡWG> D)ݹ|Z_ą>ೝO` 0?ar α#$I7{mTC#u?*C$Q g‹YXp\XX}v9t`vZ0YU28_34YO@iʒ~f8bg}f>1]ct-X^Ҿ cb6˂J>^QfyIďB]S-&N B0窵!7W_C)7Oj-,#E[_۾Bm@Kjm;q gpk. d~[0[g|EbvGx'l{rbA'P"^'f䀈bXT_FNm,=68dďa`CC atVϛ/ܧ"Nx~rܩ9'~?>{=4W;ՁJ`(+G '}yhW-߾lKˎ@EK2id' 71Š9x*}H7G{98! {Uğ?Oe_IǓKp ޑwW-&qx߻s@^/Sfy!m`I T$ +Q43/: gֆZǷV줹&PƪOCcp}?# ~}o@l[4}w-Gy]ISCKVoNJ`D?dWa>I0d&x +n>:liCwOqP7ڸh/hL@Q2~DzNœ?` ey e,M?ܳ@7iIC3!`cH :(# r'ԗ"SzX[=_lW]˹ w& vVK7CH@18`&-ս.>V^1p~)!ǓB$ E34G7hHHH?*%8s00ƈ]؎~Pퟤ.#X5 4}Wyk>9YS"9ؐ! Lax5mk0vl ?$~+ܐd%;.QFSq?/>,&r] .qnwA;f66[z[n$V7~&8maC Fe1w4X~ [cp{!ʌc}i"(9dB>mU}|ב,pѱ9ؙ3^ {Ap^Ȥ`#w_qb{.8 uEC~dAfvDӄIXglCuF`@~?f?Ao1Dr>[`l_ZIe^܀M'DzzzdHD'ln8GV^/g~*2%fThƖ&cTaoQco?h\`c"_Y!)@p%%T|[;Og4I$[k<{'/SGt}NUu>硿r?8]*4Nѡpw©^ >Mk-h[jؖn"g[+{ecB?LHqHdgi@#.тqζZ~ו @SWZ‰=SC/L}R<+[*sRJ3}ĕt 8㓿^M;F,%~M% (:OP`v5-ysVS*Ē&Y6^9 F~0[nXHLж0O0K qj3޼-Z٨Q۴HMZ:0ʦed>sj{GSWVJPЇ8Th¢*%WnE3jha`?kjµ&%+Z[@يuxvYQؙ<ևÿۂ[iFH쫷!6GTbXi@A)~wŚo{xz-0IT=ňHڃWqA}S=L\S1bO{V({A%0[.`̈́ |LTP&aLBZQZs@mXRNw2""cE݉8pt$f$y@o 3 Qmy&9L<<3>zT=R~w{W2y >ϳ9Na_8X*+?ʮC VW6q-ʴTk̪Nږ2ݩ~n&nʩN\Y \)\> -rIx-X޹zصEslorKI"I_f4yJw lKf`] e6´:]s& #>@~u ͏\7 e*?zkBԫ5@E]<W~ͽ0R4뒓nTKwܘ tK_%$ K n ʝp0k .Ays$gЀAI@g8HQv>̈~':ܸpC![j AywZya| R.;QqCE4OJj#JWx?T>*s;V&/ȼ\]AU2.+l6KQ(%|3 `|c%Źwc!{͗7?Ĩٚ{VWWUZ^\wSt{%?\,&+R&(Ye{-=M%NȚŒE<4jGc„U?1p:P+t\3{,"o7AM. 3&*:rH3q|&?cfQ\`ք@$4𤀐-73NoU@(75H$|Z;$=T |z i(w|NHBmhX37@8jx!ccFc}sC%? *ӆ:p34)D>hgS{ Ͼmoן­ `SS]sT7">wz2ާ[ASå1k!Pa̦b\0S߾^J '0afKOI^Kj j*>_tt5دiW8yu) pE ˊ? jrz^Q)1ΐʲS0bU_J=C4楁>㟣u^|Um=Z]}I3m$z 뾨>\ZvoρD^;כa7,V}n3NZۚ Xb~jFLW=i"?zҔȅfLa( 3/\O8%;sJWb8$l@*|QOSaH=oc(|T0}yp 2=;*N岈.RǣET{$M Ev( _=;Qx ]ZM1W ˾%X963>\26U͙0໮d'}S6-8fctTFL/G(E^L ӵ8 һ[\'}u-b\K7Kߡ$QLDΩ`W2 O|K5S g4E/&,Iw[/Hz]՝/jGeoiji}, sͱyt{i2$Nđ>af[c,~;:GϿ}=i<T4 ۜ k ퟡ\aO-kеT =Ӈ ℍ8^ .]%ӗ_lp|t4w{7{I&)FA\n0y0@ENsm-Jlx;- VL}gE]#tϽܽycPn1Gf=F᳏=}!?B}*HxL`MɖJ$2]5>qFޓ AeX5]'ʵ KY6|7[;蟝ñ'?3Rtxudatdñ_'HS'ۤѷ^u02A^n?оMfM:>Tt߯@eQo&*Osu7b\1ѧUc= ֧allԍQItn <3Mm$jlwu[/>t7a&ZWC~ۋ4oI@+m9x }vR龟p7?\(=,hIJ{w* 4Z\L '}1X3Q%/^f 'š~U Dѫ $ }f7*2 33%nF~g^+}M nMξa/?x43 |u=(_%ŧ5 4Aޟ"xMӔ?6!~($c(jV́b! p8ټW9b7-f7½݇4_p|fI4j$U2v Ch8R0U"իCtOb~#9k$'Bo._2jĥ(@"=; `! ~WoGaؖ2s_nkXɛ(IL^cC`œdIgK6V0HGT"OssϿy۱ ~4\Oe ZV&J5q_NWrH0?\&,9d꼶mz9r?{ q!}q͖OTHCm-h-q͹0[뎣Z \#u5CԿ(.ݜbyB=['+'3(plT (|滹F^lf od"G* 5٣pjr;'^}t4`T+ i97lQ7?Vw,ں]#y\JG%Sś"F9q\sPG׻UwƝoD)sY&V$LdM6B{gtaAcK&t&VLm?8HT>*rνiXsaK)A7B4b2Rjj(T^P@|Ƥ6v94qbѺ\)Q vmyg`mΫ5UѝAr¶wtBrQ5T:JB2L IxI$VB{tke5JMP/{(rQgyO+4'5]GzS`yTM,HYcj6bU9̒u2:m*<9T_n4HGTB*N}׈2yA`xPױ4;&?[3"# 8j;ra~6îol..G접| 43>:񆫴@fL!ф BN~6@sڦ;E"o]Gs+ Gm7k$ 80r䖁TuIpMt;cbACk&+a-w؅%$ |noeL{œ6=Nl24?A`*|ъsSJYbo&Y$# 2Lr%hLovadq4^WMp0cnyLFb<Ⲻ lkr`Wѐ* lIc*G__^)BFx0ڝnQu2wvU?5DӨ۝$Wf߰g1/ڟ˥ rPֱQA`u *~%lp}ٌe㯇]$dh Hot1 35+"},]%ƥ H㙜$Od/TJB  48NE:Nsn0=)@ϾהA`Wdt 7K{zd2 ~ߐE}3! R װwCo?Ά*0}S(Qi_IB7"&Oqk?kҕb0Qa /}aʾ 8~ɯJ'N?.s[2;`}̑B!H֠͑sx}6wH;'OCA(cMEo} uLKa~UL]иrsv"MTB\تVPv%4Ң=ok&XPq뼸fyΠo)!>]}| $0O,2aS`N(^n"35F- AáZ}HfSR,f34Q(Ndz :\҂6nU3# JkS|9nE-)f A$df Mx;7LOL4= JQʈl<f,S[+7! %/\[QL^mB 3fJekSyxX2fՃ]Ѡԧ;YFVWXAׇ,lu3 yBQG{An/y'3R+bsnX[]~^x3-ASc`sG,U u~P }V/ Clc0_Ҫ]Sən„MեٜvńkZ{҅>.Yy6IX9E\*2?b%b^?hP6Wǻ&lZ.cI5#?AɡU7A@תMeM (*lR2Q,hG gk.mBk^5vý&^S`Ui)6X{P,nZ7=*ڊ*ICFhAUa B.m}b~ 4t(閑JWu]5Fg#Av3ʊM'>E?~g}K*ks55+Tq{Ꙑo~L!&r4tUQa}9SNYvPOlŧag{; PmH(y{]?;uA Htc~8l]cVqRd'L賹27fĴR)$jB,E EWI?HtI5DW,ͽgIc1`6JxU0Vn;;^:-WYeڢQBz" %U#P9:>t%`XN:?a\PGܶ.bYN}KN?7TэlS0r-!dXW-_GI ?#3zZ<8Uoܸ*Xb4ݹGѹ,7}$~]@W%{^DշQ5`s*H(LaKIuǬ]3@ؕoCvpZ)H.-\0{g & *կ> ݙ0v7D;PDOW9$.fESԜ9,})Mۃ.jf}}yٶf0: A?=}C%] y Y+rkN=nT&! yh βohinPxx+rB,XX95s2"}ikgo7?\^Tڇ]}?@1 |΄L2 2wMJ$2=b &.AI*CY-&63D";6C(݂9`3UP^!Qn#is/^|%QӞgӄ:B%P6(dV8 C723a|ai/=BrQSޔIUL#+_8vs7*uZ=NZ_'o_G~Ȇ i;ǭ`Er`;mwc˘q{z\ YL0m}7bqe{#l ~gqP)D@i]E)2{]+vm$BPO_ {8m.M`܎\v}ԾR?UD^Wf}wxD|D(rh 4Vr}:g=-l ?;#FH:C4 EB9n ڵ+7$A8='')Œ'IY$g.~l֢W'r.r#_ϩp" ~w&}.Li ^#H헤2.Y6Iiyf̞g ߛ죗3VpT:7AĢ {<70҂vW֘uܡ;ĪZ@b8ĉܧxIxiQ.D rՉ9H)Vx:\ҵPpWSF2L4r)0I/e  S͐ R-dmCְ> a4π/b\H͔b@%N 7CHe4Pƃ;kۨ!U6kȶ9+㐎xL)D !?D!TN Y@>*M}_ƑD0İ KxR0@JT\ { `6 {LE /K689Zetpk' #[DɊJ7*'1|,_MRNKv .FR^7]*XjPrrcxj_f:?WͦˤK꾋 ISvrAXx)υLwyCRey,޶I',_<{}FT½̷K$WusZy1b;*xsvk?,Yur Z&gɂ [kf`184\?s\ueءQrexB{NG;}6A4D [usί๩˗_=\]=>It l[`}>kq rObV{6@Wcrs0ze2 JBz%Glz>(5LM $ D9>mn7MMv$svԗ(cݮ;Des,j\"K n?AW"7t0O'.l``)j `ƫ#Ͳ6eu-:Y[ݝV&O]w ڊtL[ؙJHkl0ȀJM>|m?騿. 0B8Y WWlV |^-&r3f+%b`QA͘?"8nG/;{<$C,p2>Ku!ˀ{3S?~=@vYvV=#Qw uwbE30> #DGƦϬ556ǩﶆs:ITLZp3 A;U1{gwLHy$5~Kb uS<O. S'ԈS{.qi3"pdr.S}xLC/ ]AqR*T{);gRMřcc JVm@j;H~\1%M D ![Pm~{ۮ;uMz( dsf=ޏ6.Q&u"I2\J(s .˫2.q5u Qy$h[+>@Ah61uK'b&TȈ 0iRlpK6 3*c8a \0:-i?cʌ*IU=_:?Lra$ag ۳nު.3KFMԥA$In?+NܷGp L-7.0:.Ms4ɿa΢s<L:UvUZTJiHЪldpF! \Ⱦky+N)*еHk0Gl)|Hkc}и{[/GUB8@"864Si0ϥ0*>%ƍT1u\> 6MPnnꄚV!߰-Ď?6=C sJ^y.71 b0JĐZ'lE< K=d-A Vрgy2-:5SZ$ThRF{ 1R-̽uΠ#z?OY. -0)'_n騄1҈g:0;b^1d8#q)ܖH-[45B&sHU*v\p ]h#6@̌` )2j6ihې3!^, {q\ x"LTh'(k;U_5 6|Hϥ"mɰpeMc~%%)ƅӨ3]20Cfֽ@{Ϙt@Xxg\ Z, Z5[]=,Fw?]_]c|~_Me{rSVN0ZH2()g{MI# r3;IRtP‰;9NKϩJ`lE$-@bDr!T׻ [.a2zOdw~F`E_-kBM@N>P.lm1]\XS 6wr/zv{N]s\-jԞ-[cf7PCP 뾔b2$1  &;^M7@"a.B} !CȨ#"LA`L@ZDr "v[m'ݥz{צԆa켩e]o0&1QjGCV< Ao@+&|$!~'} x$as& + "RzzoMal4f7(c @aߗów`T|;8ug1z_h^`@7W@#"2K]`8D٣H5^0x>q.u#)ݒ%#FkxpZm9FsJ[W!z1%|{ɅN!_üט]ILHYnEۑ:f+٬ZE"}!2Z i"ˡc\!_H֣-&# <{O ]D0`Cn4_-x\κTXb-˒KdU!1Af\ʬ\ `ާbWԊ.i|W5=[zIe5sM,&>S+sfX3P?fRb#s\d7|NMu^̙¡P2@]u5\^kɷ~I=f?98P2\FE:ՃqD~X&ڐm(;)5I$ L1ڧphAri<@5p%{fd bv3u[a&N7 ^62@x꿴|Fu 7!m%aohVgZ}gySuwPYxP1Y!F5Ů,/Msc5خg 5>U+gQC~PN0 ̃%̤rj u^=Z E*[FYH^kIJKi$l?♯?VI*!dA%3L)do3ͷT0W ϲ{=G51/͌} v>\8Z;5Y>ltI$h(8|OA%ζ~c j:u z2$W?MeVdz•젫 56(Yߏuǭƚ}ۙSwRZkC *1e?vr,q ^˷Z5Q\٨z+Cv|N'ץY)A̘nm%[=#CHH $HW߫@9S`tnjZc`}>ݜFj7uw5ySLWl_߳9KLunyooðFU~+l&@}f} mF|zFe)cˣjh\~c/ˢzeŀax[vQcIhevsa>չ]f~s )+ 5F1|/tѸ*9F?mҭ?jRQmk5EV Cu?]?xqnE$Q/]ﵷv-"Vئ1 l_щ>FK? ehlbs * !>~G(e;]\D񽲀*𫗎*f23ăS`xahzyȺiznJғxjߏ_WŷځӘo6YF"'9" Yk(C'ޖ 0e,68fOݎ&gPoVu/3㤊ӃnP GT~d oIbƜSFt)q%8;@`&p1MM2r`hՄמì,11p$^9 :,|o޷"ᖧ5c!5#p(b=R?s\|?ڢ;ѩdmX82ka&R8O+L~ xaUXݽ)T6l%lH~za 8TV I>>NBC?}d2OVC4TH XEPX,g++  emKr߅I35zYWu1 gW_ʀZW&K:V[)P!Z Yn X9z߃bby:qP֝?c S;&:eKRha >gFy!B}._$v-PPGb5 cm"&dj 9u=gDlE.6X,NypnE+&nӀ!@`Hd- t~K̅ m n=+X!̟Nx4 Ccp4UǾvLjȄ fir'[nۊu 9O׶ DOMzdS9Q+k&ڏd{'`Y,/n57woo}Ȱ.Fn V5P/JzI ")G}@ Q>^J"VlZ vp hf5}3:|bLg ϸ>}gD1'-SjZn_姜! c9]LwDo@z"zr.v' S٫ؗ?>2vXnOwaBIz7+H0G$ *mSr"ȉ%m f)IS @9Q\CdPf|}Zm ;k ٸy\aޛ>*UFuBnv>Ž^(G]{0U!kMɺߚ*W~͜+)LqΊa0 ؚe (^1zҝ=.31f/||nx,I @1*ЮT7lt%cPya\"@&CV|vϚW[KL0 r]N^UH@|pW7C5́LDŽE3;!i s8w]WˤЗBH9 uEbW uYW}UX-՛_b@-C$rā<`U i[F]|0{ywRj*_Â0e QVnVcfdsCM* QcN0rcu_l +yV0ג2*޳b*&UZ5p˜?ރ==BAR[ . ýer0LVdy3kvz`l̻K]8n.82\ 5ɻZt46z>7eM݈мy[:S{z16/oCؼtح7KvEцtsZ0}G*p@{{U C{^UoAk`ұ>MC } 9ZKgŃ RN#e$^ `vtߠ"yoa $H.^?g\#f/: 1VCv^% ջx :.ʼɁ-Smt*vV}-[E`bD+)/a^.iQFLD 7/3|>/ӒlkJoni(XhȈ~kS?WDF!)0eƁEo1X AmA0cYd*g*4nV^8/0J+fk})9MD@ ; io+%}!ˡt6"Q(Lr۱Cnܰ3=o. ~s}\Rѿ3tVs9OwaPEf`386[[l]xMAubՁM&~\3^{UBb~SkǴīB蒇Y`HO~%a)M?1us%N8sL.f-(̣Ѧ1R',x`䮫{VkH~'_ {4iikBÏMы_=Wjuz]ݲiTg]󛶖D@&]}z[ޞZ͝]gia^yU˿l0J}53_Ǩ\bו9ӗF},0cgגgۍ(P7[.{ k]N$mzU**ɞQOtVodEUv(í9U}cbےc^0[&MFm[,`ur8hdC RQFJeJ,*_n;rGمvy ӟX6 ]= Ϻw_~o#$$6Vn[ m8}}YDS {2|f 1s2S*89&[btb>?-Q;gYz. O? feu.*_Ό+pxWӦS@VLS@)\:QaRk^NA&^P_nAY]fdϏB4H^2J ӄ?&S'''G{>|[ѱ*/ꪢ>1A)oA? S$ e3$d7eI!b`80aT#g: +=((q9"3n >u`ƀ?ee}z _)lHM9_ qWkUp?OYïM7_Ꮃ'Ez^,%eo12]~/G=_?nr _e'1W=?wɞNtQ _};zJ@G@4Ůjxx g;Ů/DUQl )XW"DKeSRՁFџj{?|wVSD6'a2;pmzGO(4\kwxIW! hI u͹'ݦ"\;ð*p'>޶w7z/x # p\i0ۈgu5ѸxNMڭӯp]Y);K/kRt .ߢ!%Ȑ ĸpi53 %6e-Orl'Aq0J}$DOz%;6ᐜDL0 O`!Ts jd`@Q+hbM{G{R_<ѳ"Uxv- ε??<-d"Aԑ&F%H^\~K76C K&ļT{5vmޏ^Wo|[{هuټN7el0:kuOM`['{e][d,_GET׿KOdžrP{Kez r>{l55SrE<_ܧӺEա*H6XfDW 9nstn Q#` 81 bLa6EQQ%[@E)/igX][LzK -N |@'MU|mٺ{чW^.:V'uX.OM[z~Nڵй]7>},ݓ~s1dn:Twɯom9,-||e 9M'ݙg+жpDw~ S[4wވ-)HD |9YM)dD(˕z6ކTzRbK`e, |X3_w | (kPADID)cC Ff 4FZpb}7nED~נlq){ mv=ɧkRq5 NGov eͻ{ ?R N̈҄"}7`Xaw˅7̖\-s\$i;Gl|F1foǖj`u BPI0`֒Yē4Kamab@sƢUO#T9@-~O\{/X,4DQEER*",`Ec2l<'y"vœ.?4wzk }04P Tiq""u*  Yp4Yr^21Rԅt`E\C2b1K#Sb s`>wM(0#p  , $ e88\}Waow-qF~1 !DXImY'?ލ~ORYh}3弅̩1ͽv0">.YSO;T[k̥s1)S@aDr=φ{9f1-M(uԳYQ g|eiR<}^2m]}@;3XrJ _ur'<lvķ[;-Ј )s`lvIRNԳq y]]L-=S(%mc6T˂7mvܐvz\IX1DTPQHVk5iL*UAAEOYIPQIߵ4.eQ2ePkG*sf-nywO brض1b(1AmbbDTH߲{$8 hM8抮f[4Ywy_nOmx=S dxu{^I(̎;͹ AW!xvyV}#̈́֏+.}SX͗`` 2)2/&-q="3 Ckz$E@D3vK+)UV, 5'(V˃PO:€!D+稁*P=9? * _ +f|Z6zg=WYE&Oo.9V\ҵW6+@s[˘LC b̓foV:(3~oԤ./2 $%0'+հ5̩3f ںݛ*w ӷXSrY*U6ѰA*9-Û׃"Zy|Y]`yR25#2ng*lK+Ġ$V6PnhQ$`<ˋV Fҡ=+emMvXaػ7=WX{s3T08^Q+L E)-S- I!ÓD{-|K q縚=!c_!/rw^x;3G6ƥ{+,$`*i[? ჽNAF{6ma/cf2 ,mQQUcyO~oa \wjsu჈ ud` `QlWVPi0]#9C3$QGAe MeϑO;8mv>{Sbl,*m k!I 1t " :Le E;$es 2 tU_j`.(-o5=z؇= t=/APt0վl7M_׮ (U4 C Fh+k f+֋r7(\9о6)FԮ &g2%q,S!4$I154=*W+3Vm4$?S]_Ul"6*=^f8.h26ݵʹ2### "e˹lӮۅUD#՚`Rt+&~'Ū"Rm*Q<+&! I.c"@с,jG9.}N?^Z5@"("n}|L|]yl׺SRe]8_c_y5I{Ees|. ͔P^C7j,=>~APG/3aIKe0 b>l8Y!]Ϊ8[Įa,-}YlmI|R؋ a0D0yd| n55FUyR\TVݹuQ!p;ןQQuu}[ͯaon-(>Р݉`kQ)d;ƥ7P`CA?%bsp5ee]G|77<(B@3O=w[8h!r1 0 =U"nvd!FJ /ۮ#;Q>,ڳ#Đ)ژG^:H"H;Viu O;:V?QAElrnoz|.kj:8,`;ڬ3ң ;l:0ޥX1l9w^p̍)=Hn+G4ϺhVT ./i`Ar:Iw=UGv6;ݷP\-^=RtjUS%KP99X4f@w `KfӇNᠹE/fYuwYJ\f $cL+-닡Vu̲JM MZz#5n\+[G޽e׾uU;Yu~67i[_ٹԻ귺/"_"yRW1LxfP?,}qY*!vͼ~?k?9Mw=.ѶZgRhvX4>_oK~\k?l={..+o؍?afZ%ׇwlol.F*/`Pz.j{(`s?{XfgҀ_牔}L/-J~sY>:Tx_~ B0z o,W??;C(L<9p7J۸iD'>Ú!'&P?S<>Ufj-_Y-}ܟqr_1PBu0@| UoD]1S}BojܥJW~*o"CS8N&q/(ݘs.׽pg޵>CP ︸Xg4dG85͑__CϕqOV0UtT]>u>ej.NO;ȈaB=W4 ux.*ڻ{Ta+L_Y ;fp?+o7&.*a7ʜE`!zf RM C2?mϭ$4\Wһ_ipLSȲ)$iiiϼYTBbX*H3 SהgfV:(jh=cIH%m)exQ@1J"+7O\i5!Yhs~'/N&KY8v@.:U(1JI0B sA辚]Zs˰Dmǩ!χ~y{MXzgc^ /5Wh^OVɧ5L]4lzNk<ﯜ=~&–v~?Qsk.u/_tpa3E/!Xe9vg!FolߦŐ&`"$q4[>^;1ǡ*ݿ__Z@@Uo(dyVB~ɑfNn/@*.C+"`ȕ@~ϽmIPWןn:.T?!om696rXE?|&3k=&[hapD9A ~;J|{L4Wɲ}>ht{>FW"L&i4A~U#v#\#חfH/>$\E 7w`[$w gѡWJ6(ǝpx&IQpTYc`LSn̄?xS_ɾŋ$Xث=wAt~k؈Owc(v&+]Ev;l`@yq|D(s>˱jwasU& w!jZ]pЃsO5m)eL "2t>h;jְ4к!cH;C#\Zߵu>nϿ縎[~yoㄡjٜRo*,u8FOlwz'AyuԜk{ɫ&?H݂R#rRn>]Hk'urR+~`|I+GqXl2_ȁ|iH! 5p~Ly-OK(}FCcuz gs~aHS,]CL1S)ΐf i#Oqe*weV)=Y[}оoC Γq{8ޫy8;+^51ū켧1s~N J2e LJ k*T Sٓۇ2.͟D3I  H;#/\q]c|`P{&Ucr&^=VI[QHv岟5m )We뽡 R!+Bu~ %ɽ"e$j֣  %GZҺ̘#P RW8.nf~XzΨ5)s}P2)7"_RIn:p}%39cp',$FਸM!Ωh}J8XAi6)֏aֲKu8:O+&Ր>&*Go\6_i︾.4<s';>@x?ڨO_~`M#8v>Y~¥:n=@ )v/rBξo00[WkuQ!.t10(!sembT'ԗwWWH7ܦ!!^i|¹ЊDkyVks{Jd;Э\,4u!:6I*<ү-7M( X#2 F`׽y=|]4 ojjZa{hv֚A33㟣g쐚PGX4.Y?ڦn^2v$"tN$\ @9X(#_K>ucr-ͭn~؛om%ɰD~zGqf"l/`_u_ړzcS?9ȼ<|g}]Dˮ^)zR:Kvh0 }54/^fe@XߔHF_w ,]{5:ez)-`5_[ݿW}vqpXKVpl_$W63wת(F_(`n0N? ٷun>:kɫ>GS=ِpl\ Lm--ף]d/_e+}"B~5cxm0 [\zXZE1ŏ~^ߘYjP^0j:DzTE:^}%Wi2 ~WVk{sg6h|^ %Hn(d\J_n/eJ2 {J_ 8?w+Ẓ~S`(wm}-W^%5*'֕-%g鄉ǚG ̇ 7]`TeE@A7~sN^,T [#4"ָ]_z;O|uVMގeamdƋBmh )As4Ø͠$h,e2Kvr@{[Ii]W_GxF(a=#At{m;S??iXSyaMvʹPzP&3%W~7=6I4l ٶOP)6d6O_-)Ҙ02:aeiM8cZrTvIUEх,풂>9wF7LFs=ߢX&dt1hc!]ֹ?s~#}cP$@,2%Zb|^Hҗnpt{O<61zqL XuՄx!`И~no Q[! ̇|r+f~Xi9RO%]b/K2#i\PMѱ#zѠpt\=R"=ĹF UZcJa[ F[)g00fCG(jIaXx?FJ$i~"g}΅e+ sc/PwnK)$|[PTrؗ 'YoӆL*FXč$G ܨopͦ] )Ctuvs ~/ѣ.0>]-2tXaj{pʓRH4^]HdǵK "t./jۯJei[sK|cўq Pc(Yϔ-ۑ)oL ׼)LkX 9? E$`D%Aw̬M[fFO3µ:N-w/)T|FN:QXH4&QDplof HlS .IRrB/K(;INѫw"Gxx*@$>G؞= NP lgNlVnd #UŢq&'q~Zn]~հXioq`XZM ApW95=7;7)v`;q$B8&Ӗ W)+qiWOHN" Rޫ;=;s Y^2!m.|-ہƤ2dn$pxqx .>}0Gg쳤=Z=Yu"R"0#U GvӒq!~.#5эsyHg\[;N86I $>s'OF=yM_'uI \ڬL*~5RW !G+<޽j}q_clg@*#4`ܸ譇l7>JJ5Q(&b 4P.4J1$K'}w{~t_?u꫹{t}*?s3ͤ6{6;Y,=@l])F%PaNWI?5jmݖmTo"Vm;sdX"N::O؝}Y0;|/Lv5{uA6_q^OS2GwȕSxTb\l"/:Z=ӢO~:eVRV֏÷Lv~93TXźO>-cG5ʶR?iE%C@0*qN&ܣ쮁J1Vkā2V'W Oܣef/_dBs*u0aW43>oqU?s˳mH6Pvf/V`,HJyLn"-@U⺋o(m5Ge':6ſ0p=ݻQQNZ+=Q|k>MG[:^nٵk=."Gr7:;lOzo'9i BdD1›FJ@!D,F|_~BkQ<~q$ʂTTWF%7_̋Ne{S"eu@s`e1k&ySK륺w9>O.䞫7aY4l'ŭF#e|sv1} 23{G+&Y&/e5i)c'Na@P9ʹ>pW@].Otӯ{U€ʅs,@RA[Ҏ vQ`ҺO Eʢ޷0%]9`Fpy>7yۊTst3jECֻf '}}sv kŰ}v5 4CL ēWu5A6py&aNF ޽*7^;F\w7ir ¶=wݏ}{%=z:ei)yCX>] Kb٭ח6D`QW&Lܛ(9ul@mClo[]/i`Bxx8ݭ7{>5zѓZ$)@@TQ;5c}}'v4wvl0ZA@Ji SPH>Fַ-sgC}{]>wJϠto|_` ݐ>K}y _}},w33fMe魕Th1zdVm=ޝVnΟl<Ɩ(`(s=wL>  7`=^OO}wtN+w>s|@w;qs>z;޻=W7ӷ]7Nz*$=c۹p=%ћ=3=ç(ﱫW=i@Հ>{篻]ztuO|)Eg4)J 3H;IkK^w=y;zp_nW4;들3[)nn\u@s}w@FO`#mTr7cϗCfGmSd Ckkb6 D(oh 5h<{S.8Pe>3&c=xMq ׽+6e%PacwhZ#w=ҶM֏_{e);o2<ը;wUX*NnP"a>o=kDHPh^*TٺBwB =r[LLeŸG͚9G *)JH4#0||@ްg\^v}q5kPTDAʸ4hѠ&L&hh0@@M4C 0420dѐ `&`)香4D 4Ɍ56! &h @&L#@0&4&fdҞLj#SzhiODi"A# OTF =ڟiDڙɐz4ڞ4iz LF$BidSM4bS&FA S Siɉ412dѠd2f4#fACSM(<4 ~$@ 44ɩ%?)L#iM4ڧLzMO!=&`#'mM=&4b|ߧm蟝4ЅU -30Ю>nhP"ݨn|.hCqdfϒ߸Mj4 HdLi73Vn}-+رZPfCcJ+{@3$5"DjM%9KF@H`W pðw@ct-TyG2,aD#uGg51} QTaקFDb?\к*REtP8=-oiFH \Pk2y׆QR "0E"*"EbdY3Y N\m>c'-#9r q2T.KY֧s *9h)([+&qyko#ۃdQ@R@DQEUPDP,PPc"(TE,c`U R"(b*cE, b+E H( "1b0EPX V1$R @XȌV##" "0#""@QH*"b)TUU @EAA`PDPTEPA#"!XE~$+$Db **(AdTVA (*Ȳ FJVB1 Ccb(H,bXRU2Պ1TPD0PX#1,DTUXFE* $A,AX2"X"E"(*.0DHQQTD`R1*1`,QX"FQQdb$R ((1V*QdADPcbR,PREXQ`*ȤUUQH"E  )U0bEP,DDEE(,R*QA@bQ,A)F  (bȢ`F,ED""E"$0Db(H,D"DDb1aTUA`*Ȩ@DXA",b$QT""X AQX ""EU( @*E$UAE@R"1ȤDEF$UDTX"V2E$,UDDQeA5l**L10.'#`.zuGF#HA#E$)LQAAUGn75י1AE^qgsg,F(DQTb1b((>dUSŀR@8X HEm`K I* cmAbTPUXR",d%`5,ƫ&4UQQ břec"PRiYQd"VS-Xq "qEEC-E"`UPF%nR}tiȠc1,13((**KlE DEĬQ`DEXJH# *H E*I1 LHLd eԕ\.SI2&Z-XHB#B(،l(DQVEEE1(LJE["3P)"k% E h-",KaD(F V(k,@midc*"+"S(@R#Ul(4JQ[YwrZZzt"(`R'@1&4}UgN^aogg>:kS$LX)VX' y7u|SQ^Jfgv^.xnQϏs[WkZWYKnoyah[͗E|.҈JrN.& 5-xMofKoȱ'ZVj:GO¿o9yz\gN# 9<AfiOwjNKTę`*ED0bv ĹmZ P$C f+BK#i_$d ,T{w\s͛z4U)9:2* EV"(qoKsAeJUG*X J,AED|DEbqΔq/=lLQøa[[pT !D"Kf{Zgkɘ I_P$Aߐ~ydwFyWyhҳ?%5%#HЮ|wJ͌D$7G~?Mn%P 5x~wy<̾_lv :;&H wP@Jn+?FݶQg*PTb Ec#"-b#ZF"V5F0@4  t#\T8Bp.'Z%)i4WT)!h&D#3 zɜ! ]~ρG{^ϛ2s}zKOKeVЈ 4%fV͟&6_I 誠뙜;I$h-t_H DAutC_P\Nuy r nJ_%݊4_yo#OT4dE$qvU?BC  TdUEX"1QUTbT(EY X#PTEDXAQb b*(,X UQUEEX(1H *F"EUb(++ "D}u>>{Z-'QkcHIy3A2E.9XE-Ă"J^ػ a@p79| _e[qwA.8qu0W[|Lõ3TC]kV]ټMuz"gbRUoV17vߟV $K?Ggdt /P<~X<Noq+ڬE ]-(%k0ṯߎB YuHs& N0By*wZKQ\3!2uZ@D5 Sס #3+~9HbCD49usGW%Vm(-/[hw';)!4Ivhj'QEkޑb4"IqT묃UhN$j=]-3!WB$CDI:_lO3f+[TPFW,k&\ILГpҡ}=9y>FOWС1.^}^d|ui"sFsc K2hoiڝr!{R"qw[v2rHukC4m]B&"zÈXU+ FF(.%& ˮ;[ xn BPq ^-zwx6'[=~bABeL.lŋ7d2bJ?t] K 8QnԻ1|JG6T!Oh&耆4tw 0͇kTcsc-U4YaAEA55 .ѫJ nd{19%YD!k *ڏW,qgEqwR*|D:F5>"I߂Ag[ >}|iˋ6Hy4Q!x4z[$_u"tz!3I/6o "H4E4s~><+ɀ@B9a8q?wJ7zqM?.se*15b(3"I@i.?KjVٍ֓Qּt{!)0ݿ'dSeP1/V̚h+XiB(5섥+4:LC_;>R| xB53| ؠE;X&tH.1נu FD&B *7D3<}LnBM-Qe} MfVzN{QE9+,b]$N0=({UkZ),8H캬7 棰83鍩hxO 12g4F*tW?nxu\ ]㶁 gT2ށ=4 kH 21MB9ae9VB`;po|uchЀ9ݳG:Bs-8p^3P=T;<f(ρ4J Mx@ob:;Gtb}'-߇O%?k+yڊ׀TLfbgץTIf07GC̆M/E~Ōg3vP5S¤rT'&GeM*g95mhg}o@  VN=>GPI?"'V_Z\ȥi_=>Hs[7#t-4̻yZM:l#&Z6gf˕s6z].hw8iF[GnPxfFh(]a+nsbosqx -G,K#cH3fCJ޶ug-U f9uc3ؽ C>HG\3u}4/s ᩛoI27wuIKey@4JPdL6úUsD-1 H5+go]c T orUH՞Idl<A~4N3HͦTtkFȕ9RTOFC2u['+HQH}c%!dԢq`ii7:Tҏ,ʻ^Sh_V_kWҎbI܈&><@j[|걢G7Ie=V~}Wڵv2^fu\:3ED@PN! z5PP6 rRVy&C;qU{t0K>;f_m a`jfvlBR`D ګR c`2K@WEq$JAC3lauaS;dٹ {tu;ϴ}$X ݝK9檒cQrfSC]DU̢3Lȹ(RE8EUN&ƀ-jKh#oGJv|P"~xKj妺Û(<ʤJ(_E >6 Oõ1$dՌ I>4-bG3g`o]+$"EYHUTUAV"@Q V"UEaEPT`EPȦ *1DQ EDUc*6---pX PQk֔%3Z{j&X]s$&!bhX;ctsM&?(7oRz Sز{/܀/ў'*oVcQC.X9w{<{S",}Q,i4" QG)fLmJK"`Tb1QQQQ"6 qDRX,Uc ZD"QjLQlX"Q-(B*0R+jQETcPrF)E1*j,X+ BȪy3V,UATQQPTPFAbł3K`b([bDC0 ʔlĨU3(#TE"ZQ`*Ŧ9˙AV**J#*lQC=QEUa׭g;^M*,zqy,wv܏?g͝$Y8tiWq.UL#X9]y䌝W)R yRUPU[J´Vłd(Q`"hUA*ˆ̥EŬ,QX b 2*""dF(QHAj()*bQPV(D0T\UF)beUQEkA(eV1F"ZEDm,V (A-Jr{75X,USITAmTTVPQ("XQ1 KFX ,*c\QKJIQAb* AĤb#1E)XPEUF(EaQ!DJq&3UULlHAE25**|9 ]N8;F `(,QAdQA*0QdDX (#"z'"TG9s䊪3g`;Ug' ;v0XqP1#X*d4dU(Ș""PbŃ3 0%4 !-$4 J"&wT udCelWaI.\(; `dV\ $GM:4єg@ D"]w4 k]UM"8t ZJĪ(-*ZJ QF#m8+tL!XʙwᆝZF bZ*TUbZX""եKj XPt]4;BP  NE=EVk$$,Sz"(˭;wz3}8ɜf4Ԟ4F'k@+{, I"$ ZLf1 3""GA ~7<$rBBn,Ic}I-{HP3K"Y":ދpmR4HNKԠN}<7x H% ũ>M9s7xi},4$'Fe z'DdzMш֘s8(E{2.(໳w+j bGwsw5{()sVy)Lt='yY3GQ~RVQ9я>, ڽ<W_fZ|}̹;g D=̔iY*Tr0 c!Ӻz6hG4-$~ulxEAk*D ±&ƍ ZTdbH* %UP*,Vi(m-hf}=ƙtJ&lZ\nOA|Ys$GHtGw\+ H6ӿHkqR. N2)49I+oZ[hIS?_HOC<ʑ,{!ܟz˙AWsm1Գq &QM ,( {79y 88UsdCן+$.'i*[Q'kh~'c2^lkƞZ&STg)wM9͑"_;D:~ylˏb2IF+FCDD\B?g ̾6|0z@D >RnLӎ4H<=,ɹEqlfo)ZihpNA:([<Ӛu|V|[&nVqW$pQVk߹<,hA &1$@ [m֍RAB$EVmJgd~' [ėy@ tk^KLa)$XC-]Pk)8xfRmUGbnz$Uc+qM*%kM տw]X"'Xo7yH"{YP鍅 q. .3B:k.*]pXcސs"T+mpT!,-iY !S4K`3lEԂ\4MvINQV&c&ЌW)O _p !8f0 s6y ģg$[vn(Wqx|EWn`b<4iX+[aIP1>ȧ/Iy9y`fis>A#,+q弰"+Fϡ>\8 sÁ?iJNJU)V(xҞ=`{0v'y\8@@ BH/$-6K;9D0-YƎ*AcH,#Ѕb0Q{]ըW6Om[pm.ۛrlp_T$# 0N<xX_0H_"X" MK q]TFa'o-~2c'AD | 7/x ݏXBѭc&vJ<",!v ཁ)Z8#=|bPçePsaT4FB߽&K$P*faH\kf(Ѥ%1\N?wCo +͇8c;FԻ׫⨫lqnOyXR߭PA@W^Us`2=zușYwaŨť^ɡDI8:YE)"&"4 :;ok߼ /"K1Iӈ+hP<*B؊N:YyZ i,A_*LHX,sB)0h"^r,JjZ-wu>p(\. $:kc7 \*Wh˔! 4">_n,r v՟h}Wけ F`eNq/\/$NiM偮$` j@l eKmz=&= ·ʭ gj|a?:Ard* t@X>E0~G?oM+AJCaXNc3p\+R:!d瓴B4$ײ!K #&@p?]Ԧlis.DF^ ~3)j G9z ҢowR}33҃>դ=h|D55uC@N(G3?Ot1 k "ׅȠ^E³6={8¢r(~䂽,CxFuѶik!DgrAH30d,[C* A(W-si& Wak?7ÝϸH뙲^N#RdArX4TzDEKX-?Yֲ],C.QϵMs-W/:{{[Hnz]ސGF%g3 3[+?Y@"%2M}%)MlM u1L}/_)&TBZHv}G@ )D9sVD0yNcN3hġ,]"\/B"؆e IDhW֛I! @_ J %v OImyNNB}?9-!qSZ xV's[%V2]1Jj[PHOo^Q$*}n<H]Lץ )'^{6ψǭ<~*v}Mn׶'X_AEIV#JMqNk94%8&DG r/bqYV+E9~u?2(H{bE=\_YRbYʹvAyG۫#iliK?&T~{>JTCV~t- #u|As2u f?;; [u0i,o%?moOyaY䮉yCV>C?^{hsk<܅D$?$}sj6>fL-1\4x̆$"i'[BƝ^ <6̈́UCAh+7_hQ˧z4rM$uĺ1B+!UV*FE1PVB(S7 TF0YiR1X# 2f[&kAQIhU=ł1ICfo(6}[.ZL*9vɂ-ک%dۉf,>f@E-() Ug(G3G9=-p!>,p덮=Nh8n{,G x-]p0:qڪVgUzWo_Jq>&Ho.(qޞk&Z^B7G"~Q*#un#2qȡǀ\Ў'w^]h&v1>6`V:[C%e$q\vNfSJQk0!]A^6]{ءj%@hI3佬,T߽"b2%baU>[-e RLKhIp"Ijt< .=^>,L8HՉDf}7q픜$~4b [-US׫wϚ4k=ΞԸpCw p"b4w)2в} <|yL5f DA3e$=Jڥv9==Ru><>vb!^cyqW{xpʕBCž$MzZ1G$DijFͤ@;DUcXe$NC73̰ ' 4Y' blY)R"0h&o*"B]08.q^4emEaQnsu5u5!4ߵYDMBƊwo kt/Ʈ,۾4=^C"{i,#T TqC4&%<5N^C#;0q흡@g8駯~{6mxr]`YJ,\HXp[Ƥݬn+">uxA]c}B> .X3s[>b jТ ' 3-=*FE{ ҙ#x'Kg qȦWZi1j;|'! A=;5$5\ԑ71 D.Jk&JTG$5e^j2,/O˵}?8hgDށx4҂C'BJގt/EF ,c OO%end6OX/sK#hqjrOd5J|ruD!wm1^N AKw6ZJ}"Qfɝk אH Fu9I /9aINl;h( \3ϿAT]z? L~ UUU cTf,vIg)Ǣw1u.dks; $CmH!#y\_u?ȊHNi.OiOMk"K/:Q92R,jM.N*ݢ3*u/E RB]R2yDdD`ue8"$uRmKdJiLlpi0WA`,3'2'(.G#arpG D*6f /H,̦n6whdsY(UHR[bLknݐ/ xEj$brU*E4EC(ErўFJb]Xvڈ? *%ɸ%LpXQ1#iUkjoS+-bRi`\o߮oQPa{/-츽UF Ӄ~ ; 1bfbs#Hc]đǍ<5wWw(BlH |9]qZ]-UF| *gR\oXA|I @&r}׮I霜mMvН!%uZ(]"GΟxcd'_[E8ʪT.uv 5aSY@ҽ}*%occ:1utW+!h9j9  $Ac64x>G kc7HorݼZ6q'G;u^2B'\t/}^r_=|ia yrb\{8YyŅl n{]<7WQ&㫀|rS#H,!<[ /SKJ}kwr@!-eCP^ A&Lo_S E$HT>CJxABbezR2X )HO5pslMGf"!y%i-AF,Mlgx|/]IIE.]nX#\o c_5Hu,\qk,(A=qe'S_qa$mecxlNl@WSoyn:/m 疼M+?>L&*. ۔cG{YVΨW54Vjqr|~ډx2eX$Z{R)n|6#warez Y9 q%v]vP?oQf>2in9΋N6"O?S L  >E tSP£&Da]u( "]!փ0ѳcjImRqR}~sATabEw8hCqyxcU˕ޗ7:b;-.pc0rcrx\ aK5CyU}pZ;`\{qwo-Hss /@V FH7 <]4+f!k]XIMMw1`r$}+ Q[v2u`Rk)18v8y&]Ӡ%ʗyf`I--J@"g*(i%(2i LAwsw{ 5aZy"&ӆ] IT܇X/pԨR$ނ娣MViӖ4) ]k{duJ@B!0HLMdzk1k9p͆q='3Oߩ=QPJD7GdDIhOp[d \u'Oa]1ӿUy$/h]etRℬASq\q| ~!IhKVؾ3,nH|S1SM¸P@#/2_~?sKe\V% f(|=yN^Ww~o?WO5:xU%>_q`>%Ƣ`o$Ѹ{QPNKAV;XLA7Kϻ4xo#9;NB\Y$>?DlK@Z(,+JIU(bMkpHHYʌVѶ0XeE*(1+YaQe`|a0KbN y!׵09 B:]EW"`gFb$Uޞhx4 b"ʡZQUo𷘌F&*4T1mQoL=,DPX8u-B˫㬬/=,0rJI㟲 {μZ|~sf#95h`2(DԪ T1h[+5TM*4fnL|0qMC]4 ۏ">^.V!P}%w#%2 <:\ >T6 !䲽2Nf",]2`T6 |{7r丧SLI"L |L$\ENƮ9/31فO;ꨈ(( dke%7Xn8̈ |H*$Ud tA;i#|8 9hP8n31xXia^Z;7mL%˫V7)ӣw-Ge,^9 f,;N~Õ嗀H$>>σ2m Cwi˚W ,#2"(gw Fv3f o ໓R8/6%WtrR`_>NyRo:6@3pL[Xo /,D55n[ l;kvp=֍CkDRdy8 کh:r WpFlL}A`jb062L|{{W ExSᖛ<"W3`U]Ub5|*w}L>`M1@DU~*!u$`L-U<V?b9ݴE'nM`Ubɯymذ(b$#'Tvx! N3*;&TIBJh mTM x)*HL (ig0eBpī0)u=Ǘ:o=?\<({>703N_ƐI;wܬUͤT~bk<1/($sDpw XbzpuEWZ?@)J - ."tɺzݞIib昖Ŕw gAGm8BhJұW'U}N@FQi!ULͷZWJᦊLU&I7o ˡ$ %Ǡጪta W娇 <(49#r2p+&Lzh^FIna+0@F [u[wNJb1l]|'=q_\Ɏyʈ[A6t .N~s yI H NLHd6&٭ n2cUU4 ?i!<|ߥ /J $9%z-vH ?1NK7qnKx~CJ}+5ܼ բZeC)ӿ|ohrd5~.TQE.!|InKe_3J?#W<` 0LHLmö፧^eBv5 AЯnw6ȃ']HWźV=$*S\LޣV ^9S){ɄvC1(WrNghxq_ ЋIJxnȄ"NiF9ź"T!: IR M"x&4.`DƋ{oxXDggؑN9%LAv"\FSfXC}o-uIy띚Qd8Vt*H, $Oyr%puvk^$(w[KeKhծW KG@2.$" ZhvJC #7V0{; aT{)=8q( DLD01 0Ak9'`DjUa.;D0!J7)Rvu#=.2Y.W",9”2F=ȋJ{A$Qò3s.epW駉N<<.>5OE]˼UeF03ohDbE}4*,a@u$4_j𞖻 es^1G78ZAL*IҢף=ȢVw?IJ˦M*E4mq*cd=e`XjZ d=r01ȵZ@ "?>+yKޑ"]Em5D8VoCȱ09tO(ќʫ*Hi#a/n!$҃>&i Jiŝb]G`_ Ȟ=^J"@N|"?anڄ`mDy }F2-CPA4 }0j%ͣaS^gId.|s[{ⴙ}޳QpTS!HIBEmK},V*g3 ;zqysQpE?{:!zӚILo٬-Hm5ۯ/mɮNkq]ezC'ĭi303gO|憛ā0 KCE0tߚV0`]|| 7]>}CұoM[OC/N&H{ bI$?s#z MJ|::( \eMhtmLB`6'#:DWtĘ @< ݾbŸvkM2 6bbT!cz'I2~m4zw! -'h$H3>a@UdD_'x}v,$3ʯo]/Fwt5Kz?dH19Ω= }Xv>硧۸D4-"}X&a?5=P‚~c]jꨩIҾX0> |?9m‘TRB uCoep;GUѫ&rY{m_1LRm*M6_r3]~D|?06ES7?4\|.~"Xc=U=+ 2(y&LV%;\ӊagaO ,̓GNϹ4o]c-x?lEAv Y9*Y5  QIRV-Rm m;M=\xγ?vtCiBI5nRLHC,*G.YnFRwwzVmUq+aIeVZow7 -U2ݟҲXP=>C}xљ:s7MJ#?B.c 3R?\p z3nuIl <>;IA:[-+. FUyg;_~"8ǜs @ϚsQ90PV)q8dYh#+*|jrD9˺tGIx`axO.3w/Ozb26R|5j42QV*_[g)7 0ܾs|&[1_ar ̴ICс@:`łwvUV:3~yܪ$w;jv',w9)k{N~g1q~l!ەl%j?|Kʗdq&˾iJjnF%םI{T,Л$k/C&5$=m4W^4eMԷ?ҼaݓZcbVoR޻ɼ]%,32$iMmg 󎁺D@YX!+,lוjnw߮kZu7[Kq<9,;=WٗF*ψz{fz]Mbo$ ,,?U['fkPہDpд {K[O4ˮDN1u5Pupuiqg4i!04T];pfBa>ZY ( 6s/ʸ1Mu{+QEfsE{n%]=d0&iG@BL!7yںMdMC^?z_%(*˨gu\4nZպoG̃~Σ4{Z)O#S/H87,eâ61}?|XN41s㵲[ǀ@>Bz͖;(QF0ۜ1ArS!eW /3`AaѢuZxeΞLgu̿9[iVgt=Wa룛JL ]1=j(@Ln&A= 36G^bvh '3ã?'<v$YOm~e+J(i2PS y?lI $M$?ѷ{Õ[b{NSo "vaFnȿ`|,|/++ɬM  3UoݏWnKo%6}%?VzR^UciPc)R9qUqrV+ZGU2,b(TDV~ϓ/oߛȩuh"\<29ͭtٵ2?#<'a2Nh*7zܢ>'SW?z]Dƺ̕(Vг5DDa&=Of,&q{uĒI"a"I$"@@!98y_] ^w8“4e*+ﳆ~(Q E4).g2IŪ7Y#)}9(ׇgsp_זJ;^'7oW'Lzkn+lH/kvZ"hrRf~ԥε Lʴ??{N oPB2H2 PSAg~dBf:&2zCuI:d7:4 ri1^ܙ[2.(^JR á5}4k; AiXaz^Gr[N=HDru>;lXxKDĐYJc OpcRԄ;l-ħI7{hfC-?AU]= I}lt7{DdƞVB/]Hw?:x}l&yٲ62q2 #t7Hm`j=^IM{qS1#! hoۛuN\6r%8'[xA9΁@f3zd3DhV 8\B+Mvj"ߔC~陻t0kXyz i >?HЀ8akvo툵]&D5? kL&?䰌?ynBrU?O>'#ƶ_ȫ$6HI]۲ZHC%)8]̆է;aDB:t+$p5ĕIQb P*Yh!L˥v2U*I$ln?BYN׌g iq~WWV(\qDCkR+R/htӵg}B?6”S#F½pZ5y,98f2Tת.**~Ev=eJkHj82?s;{?J>a̛O#fyuOW,Ϩs8#5i(߾9 n>f `~)q,U(D0moӚ1VEQc &Ģ'#55lPWKuTz/φsx,Sn6ZQ - g z ?:;'jl.yzO6wps;(caYt&Urd.iYJwî`~m4M)d^YX3sm>_x,;%&6^VȬ9>Ĭ2?Kٟf/׫uƳQ]DZp T7R@t֐MM y/m-kcޖT suݹH12$Գsǃ.P^|8}6oH/]D 55i@ "/M1@ĩr2R3X8' ɩ 3@-wSϫGX}EBW+N(s!EKޑc=gԫnk֧AzPb̾4uPa|[{&Q]WEWszuwvN)W): []Qd3ܧ~*;4uj^H\m$y9xj;wIAI~ 2&{Ҿ}\) N6ߥvneo-s<|\{L=,{Sc Z&7#KjԏY;=~{b@Up7Cɑhr0+\͖}-D-qC(u0dqj#cWae<$$OZ#8xnej{p߶<),^fu}Ь2³7'|[W[L7 UiS'wx8Q.h'V&?b;5l.V-!ʔy%Y'1UR+YZ$Dy XFCKקW̖62Bc3W Go ..H&*I'oI[r,rRTxއW aK҂He5Tp$Q߈A'|vu|kϛ {x.=9=|yi_ʈ0@2! HpPv $1x kxY/ljdEwɛX~ү2q!Kk2YR7:a9~~2'FQwx81bCWI0RMLUۜ;?"g|gPX4CR҄'wBLV @D?{3Kf!iy$#NV* B\u) .qq\9Dymn?zpU!uacJ&H_nKcu8/c^,UQji|}VH "8,A9`gKc%?Pu%YtN_[0|d|NX1e+x_HOT͞MdQ1=c]Y?|QÁ(Ou@q@Zo회|@up97wamC!lQeSwiYҴİƍ-pFv5םVA H@$҇|^DfFC,*e2O7 (!(h.S1Q*= f?y:[+0mZcj "e  MLxNYy8 oX ÌɉIFRʰ8`dH#k'$ N Z)QmEw|x9q9:%d9d3 f <35gN?|6VA;H%AA$.aC}uxA+?kAOHHO{5x*]y XRq)o^+:zh-M0jmXr{"O`%t 'b aΓaD\ȭ5oguEiJZ"PCtIbú-H0b$CZ&2LN#vx?u`XF B7UCFKi!vT8q".g^9~(TP:vxw>:-j5^lg)+eTȵ*J)cL ub31l)1"y ȅSBd:;bYW#(4WA uAYs[3N|:&yh+<)-#h[ ~Sw'KxmF7Qm[B]ЅoC4O\#,Z]h;; X^# 5h,3M)N~9h7I" J.]iTI I;|mUÔsn%Il5yA I2 wƷcXg"r-c.0kV86NL:ё Q 3ƚ!Eiؾ\]zkp1p2FM c@P!0񬻷]32HѲX"\dWx}hA-=&BNo +>@ח o)|0jLI{[E`*PmXj!iHZ`j|bdA1d+T ⅠbWK< Ni7@а0XG.55rLiH&24wz,᳐!(%yO˞ g5=@MhrXF-J.CGp2e/ :7Xo4@rTGc{ćOgiD!E⽹m{#-?#|~Zn, (֗XMEՍV &Eh6&?)RU&tFDjߤJC:H  r}3~BSmJU%8fWgd'xD2'g:>=H6cO{s f'CH?ZY NW.A"?2{6o.觗=ԓ"Fg"ؓ-?e8jyɄ%=zR32;%jƔv%#¡3xƧkc{qte}r_\͛}mO$ M!7d&. ˈ@1IJgF$JGSG_I7||cMH@ X.@ -ERBHoRuQWzw`rQ}{Y=1}pVjadn⥕PI^\xtB5tօS2Zgt imKYC+VrhYui R%Ψv"B @8&ꜽ${,>_*74ag=u1H"AKtQpd5D3{ O iok'ir r5yVLw }ؒ!PoR+(SlX@DoLYT0}Vݻafѩ0YLiM*{hV+ zK)Rhl^IDRz(c M9Sf1M:J 5OH(QS3"I0FՁT# ^FrDyQ<;,XcoB&ho+ƤL{v5A݃={(7:iP x⽭rx\[ئ^մv-$yuբ|4zX`3 ːr?DMNH{khks _+S出H t2 ErP^t`7JE -;q;ϋ.Q#0Ha`F)d`qɄ]9> 꽼]MD5B3$ atIÑ1< HE ,}qqy`^W[[*3an; +_`A6Xܑ<+$A%sE89n nӅg,,ϣt cqb2\jۋ_|:qAtc>P-@MS"2AasXzxwڶY f+Vr8>P).gR{y\c9 I -dߌ{ CgNySȼPrn?AP0ZvOuR9V5'*I*t6:r- X~[E$Pu3 T dPDYb=ǔ{FC D<sI(ACS0Y̼;ø~?mI8H\Ԯ%А~{0۷"Jf#>׉=S<3$4*+}(x>^c#;)A@/c0OuTc+]a$z l>r?sm{dA$g(ri_rya4ɖ}A~oN@&{|e7|zje2ټiayG#,^ 4qnw"l3dYE5G98 py>\oܮ1qV\1|&} t7ȉdaKjţEە~;7lS~ߛ1:A@4|Y6&/$0p$*kOǷ0=Xז_Vlg9ZWh RP!sP/3C\i0hѨ&tK5U#5/ *zhCKsBFBHH@0``=0D&{,XZd"R f%8Ejv#A;HҩPfa!JVGtdV1 5n}mjQYTQ4Š͝ocz70WX=_ ͅg1 {5K_AƘYݝMfާ>pw!S$&ύsbm e13"HAݹ}g2b(>o r}]-͔,% HFtC l:` .[iA#EڧuۉeZUc#dTj;D2KD/eQ# z\,4LjiZmj6!e3 K= L]M`ruR?mpwBy߽O䒧Tx"\KD+\y۾IJl . إ:w>³r}tsՏ@$s %j5#y(&:n}\Cy)&3I.-)+Ma:ܣ;i'#NqR!!㹭 c B/7!v  vY N8Yއ$Q** T vT(ԭI˃Qo-\-7I50c"r m*r|ff h m(p 03+C͓8!-^WحPѳg{@H1uN%7R>P=fs[( I[k\w!fYXzǗD]^wFt_r}_"sxtN1Aݬ˻>Lǽz~֓٧-3ò"+XFVB-Qb0s3Vm\7ߡ2͋eN0/J;75@_|f˥ffc9GBU$X%Sc_PCDnUȩQԍ4Fw.׊4؝7IHHt^AHH6LJ XH :)q~K. ¢ͷhlJ2ՠޡt/sIԯi 7ߏGQS(|-)˻'4q>8 E#u ֐^ZY1f4K EFrKNz]A|4,IE:ЃƧ-FCUDsh÷ 3 *{9|'-!}~lXay'41@ZI9 fscN])G3gU_ l|Mc0ck 17[k>$- lWu6WDHH k h5Uī̘5@0XzQ$4gOBy &jV+7hr` h%#>5&+T6[n!fFj<ҬgwmA#^B9~Kޞ'-(#"PC 0d`w9I.0_U^]!`Afq6|c"Š[ ZoFC/ 番%rntι4<+5ÿ7{q{r̪M,\1$ "$7RCYrC0J(F td^fHZr>N>贖 M͐uC'D%&ȕ>(VzB8 B,9su)Ƅqhǥ/"\IU1|ݱ R}!$ÀJ!7F=м=w E>&?mFe ! 3H1ER{!_p2M(wt㺉d$!tR j숄v"/B xKS!6ro7w?ij!t & b0=MzvSCmk۔ v H.-tDVPs(MSPÆoL$p߯SehYN4@g?v|V PFF|w{۶ Xƨ;vbԥPp#Nxt2Q?}ƼEY F 6 P[g sTud &V$Hv~i0R*QX#1Ec(ھ+0Dwg꺷VBo$]7/yk"^@o,'o\!͜I\PUQ:2׶<8Azg7uuK`{ _a.~][T,_6Ej y+חQ`%d0 3 @Og]Xwy6mrifjGK~\9[.mPL-oK~Ɏ#u&k,`R(!@&tq# Z0""f0tZ0#"BȞ`'<E5 { -%B:ΝZ3߃>qxB8*<KR LjTo(s9{ާ .+bX9TABfa\DQkOьi. 29rL:C:(zuY68xi~RzYMt>vGtM̭nq#9ֱ8W3rWn)@=;J9 _Jk^GΫmS:TȋT2iv8r~̳ @%[w@RAUpm$kWOQgmd5`E@! khkuU_x j<=뺇t;l7h/{#?Ff@(IdݞY5Esˢ!u뜘xJXe9ňL#;}zeZDkJWM{mh91m _&aY}||RT\y5 |H$cfBS2KJaYVi|aK'B0[9^D_Kp=u\Wʥ I'BM3>2&39U{,S\]eYM0jiEPx({DTA,KI'#xoV# SCT `fI}ⅦܛQޏvl w{|v=ƅfJxqft}K:wtЭPx@zi@ p{D:jiU D6۷yav8d;|IZyIQ`ϝ;$ydX͕vI?+yoys3X bA%Ơ@"!)BDD [v D:d<> 3A~c8}/w- P! ӯq=kL/k*l ,sӷpZ KI,X |+6|^c[D((%82: @$<;<޽f\a]eHXԝ93&LLnw{Pw{-//u\=ƚ*i8(U/5h7/7n3>”xb|<7Ho!{2(vZ{T #IQ.(`Z5̋}uB ;%QRtr9廔“@Hx~H,# e7"IdK]kZ(J{= ǛKK>EV0ϛOϹ;FD">ފ)*NBܠUG'% QyEmBE5pwugs)x"b¸##hآ!^#a ^M"." =ء"]1""(;s49{< ^U4.6\t;c ;R@O]wǘG)#bǖ]Ӓ 8ׯ@E4xqVwd[7{֛y{J S؞kQۘ<D~ccI RDŽdIc2gtU[-qPs_\/âTEp0ipDPF {V[ n)b|`P5ʃb$7c.)yb!EJ&[ϫh"eL]LRFϖ'TڈPN%͓-|5$ȵxhƦF*nt,[fkY."@vPC2&(h UrB#I~t- v+=]#Cw"Gc1 y[ } 7_e?c? B*F1F~AOOqIbϥ4KLA;aOM=+#e>Ԣ}zXX ].|~*Ƶڢ"LO3XZ qXsE9B0$A*pWk~$n 8 ȧn븒oy_r>(/vghTAvdH t:R'{ &F2j(ǞyD5Yh Ѡg07T}A"(%eUh5*ލ0a`MJqq%=1- )紑 DDrTEް2 aiX nD9h]e&F !1Q|n8T=LKKD& aˎ{md3^,|&!`@)+F9 Y+Wt`A|,  0Q25&,zgKk1sĪB>, wDN>Kےf(eσCԡNJ~&6KNL˘`ͳr.X2 @.@ l[P[z(ѿH[R)5 ,6˗k5;^Bs3x(R@|{Go{-+%(cA:: WlQQiKqwb~ԇTێ[{< ݁TS˚۫eV|,aW22f_ykf&}h9yY0S&-,M+ݯktCE!&HJQU2L~8ki;"l|ُҔn ժaL:/E20 (HJ8ٍւS/1_iƉpNk^}8_}\ I4$O!Q@<4-켏`<\3w%?Y~,{3i0|tH^A.;١Ħ ߇_|cqsd v飬i޼1"+<I85ࡅ BRыg#VX'/.Ax}Bll}I|γ*}f H%R)tDPv6u jsl *SU6 /œ~4fR bbF9a{:L\ fbjU5|,'m9QOd* b(&[H`6kbȁ$ 0%u4Oh]T;"msf vDH i y{)7 ?*+(qKG fh&1 HZHg!93؍Y`2n&t 7@; aLuŚwpś(`(q>cmzvLfeRh{OiH(^]9VKkB53]vL5IBKHoB6.H}Be|3|~̗wbqoN%U!U@Qc@|q Q+N6ۥǻe>a$n]ai+sݠ2ˎUʫ;ym}USO3BwF mP [7bCRi{eF0w0Ɇ%*l;, A K"k;m5akΧ ,NחD(X0E-(L{;<|J)4 k(OAFvM$QeQ IB ʮqmQ6XȗDxD00)˜#@=R^z{+6锭pBNV Uӽ!dgt\A`S@9 XHa%ünnD0yf 8!G9 P@`xM`wR@$wmswVɝiW ̛_H@=~ yטn F]a敳tga@HH55*l]b< f4u0H[d Ct-P`5z:e7):|R.Ȳ$ ;{fԇ$md-Zk r$sGV)5ЄO)]×'݄>$}ҌLfAp錣KZPA77(Y^%jՖXXqԨ XҌb2 !'ۧMC$Ww{"C$>-&YhՊn7B 2eYj& X$"{$Iq9Xɛ^#@ǣL%$woI?+FdLEL P. faZ32Z8yӉ{0?=Ԣ7j:9-Z\茤&/XtU3 ݆/3 Z`f%}Lj0la64~ۅ4{}X틯W^,뾺!v7_hqp/kԹ݆8 C|DDVn "ٰDK{ݞbGL$X fA8`IDb*rp7#N2Yg>"Y[h b ru՝O3#W'ad^;;xNȑ_L >¤Ev&:Uν9%f{ IE0E`P!RW~uO#lulv0Yp~Fp/$H,I$ڟ}TiunTcN5q-p,ñueȒmedЀ㹸C,<Q[5Jʾ-U{#mT2s[ }tzE qvty\_jcH"L-MG$X({qd-plH}]챾F`># [p#,hwk17*0$!!@IB@IdnlS bEP޸4K?ɀj (12Y;,u>Uhʢ7YG5gwx1 @T\-oo.XB5,)!Q\0H!@p;joO7Կfob=pO`h ٣ LQW ϾL "!Y 8Ha_usrFPML~Cg k9qAu`*&>tdR*rqۙV:/BG̈́ra朡!`@SK :K3?_N7.U[1 Oh}e`ʲ3Mk6Ą 's@oF=>qO.N~ {w{1+a VhY WYY`rѰ<`HUhd.>)ZءO D]-s?ICޱ>=^<@lL-,?\dE` l!@D$.f% t "D*QD:Ԧu@=,ۜw^n!#dm14c'4AbɫNY!_Z-񷷴DQ Ͳ&o4' A/[ս[4Gg:/<$} 6h^dLI%U;kA s4g ETWLEԨ ;wsvh&8Gq>m%jBs"b"^Ka͖xofAA}#R>p>k Bm80oP`st$b:gl\pB|ycVMJz7",Et ЉU_vDŽ"?4[arJM 4 sY}#B4GsalV\ U uON`$M˳Cg}ì< d!vR,. ~.q+RFI+<=" |P2*,UH@3Ȑ7y-;!9͘7/?-ގcu9Y !_X2I?Hn[J=.T!7BޜQrE`sKD.~?}7zspGGN<'uR{#U8"k8M& @X;q~˰q3z:` bNkY&z Rr4# )h*jﳝCRUtPo 5"r{ 5@sᛡd12o)8s7^mYrzX͸%|qJ l\JXt÷2ٿr%@wdg_wr-Ŋ&S wOR.8fq0N$1.[_R]U6\Ł"SBooyPON~<)MzjHtG^&ZKkOA@۷jL\qҙ4"E B@@"YȈDp&bEL lw"PKS|wׂA ?[jǵkP u}&Mbs7IҲA~2M##tiL8hS-^90DPێP0)2LHy\=O&u+ lK S(%=+[Zq +;w-ZS0Suf$)LijpxWp [yҫ Dz2: *]U K@ M+!# v]ʉl9*(Z:\cx $ZJldD0]`̗˔oc!m#&ꆖ]d6a<^f2j![*BPϴ{[t"KE|DXMWEҘӏt ^_F~pLԁI 2`Ar,9Ux֣chmwnOj/O<~ڌ8"$f"P#-q_^I9T8y7ϸwSMŴ;tlƝ}&rʖC>l .=5%mLb-у#R}guaa?<%/ɵOwYjƹ?2¦$nJ:'w|E܇[wBt "2)$ = <\a$^45Afu)(1i_b(6CL$r87Ums|u5y#cHvQ}2(YMr~t$ iX zs +c,_dV;hʀ9GF Q n/ U _J1hMc" InWts^vBFrSvk&5Վ.ڿ.TOk#^B\@3aߍ#=,s1V72 \1xO*oe@4UXK>^.m zwK[c `Q(-$cNyX@j}qԥYLD) .υ&~ܜEw'I" ;3;:l2:;iH=~vƶ@҄dH͘ WYdJPP(w3@4uz,膎i!,GFnvl ٫>1vx8p?ɯs2-%!RIIeijMZ(>m^ I=%.%WV7,H&ɗhB3܌qV4{XwQzX(,8-;@d @A;vǍ)ahDwE@ҔAJU!4"(G>[dl@@O7dEq)@"G:wWhSRkªB3tgYg7(OOHâC1I!zH&9D1A}~|P֒u6CT ~?7n>ɢߛyKc-׉zw=LR´<ݬEhMM36}-- ~%W%"PJ6u?֮zf&.3C,b!&]zxzs ņx6I'ЪS<.Q&DNc[cj!/'3ZktDf}jz#cJ{'me(eL.rF]Mec" xp;$7K2Rc)eBcJ UKɈ0OB]+?/Bx$ £r >H/ vNK{(+DDPƵ މ :2gc.1RpbAϩHdIO4Ze+X`ˈo4+bؗL+a J/6PPSlyU#\X O wIoݾ_hoL{:rg3J"~ns%wEK mP9Z(E r>hGp1Lrk &6ri]TK?.W45_jv&7ZeZ'L:4wit6'Ɂogr`êTbEu>q\X.ˉ/N&Q?r' 8z^-rP6د~pW;Ow2@n<9bw:(.,z0_—wˀ?Bd*F;F"c "M0=t%}hc<DM!Iq,EY X P}$&4$FDKEJ`&rZ7 xQP/Ƃqm hnHh}8'$|؅ PXtE|qDQ(#ϊtR# ς>*R h*y""-Q*q͊P]TnE"ADFE dT0T-/+":Ad!!<V* "h/}\tED"U Q 2o)p|>n7h;OCT,&އy|c}Uu_Vɇi!@ |E_M.=+xV ;| 'fxM0{z?߁.'c[Qcs dFTU*#t\gƜ&?߅UO߂fнO;ٹ.oIrȵ>Tƴ]2¹u g7t,N[? vq%K$N%yծ֭Tݾ$ ɐV-r kqyHO N-9}|B!q3:_q߼_k-3RsEP'V&<Ȯw;ˏMsmooe " 7aWȥF g, bXZ~-~|m:6.qQU~gf7*fLd@" @ mt֗a-3"^Ox,XO/Gvb(|y6,VMmUPh)&o!ݤ3@(62QFƽwdj+iř D4>!f F-N|9CZ(oNt8 (XQ֣䪷z@QP|lgY/e!Dd@Aj*abwm4y : vs]ꘁwkĢ>")[""]M,J+[VM]ݏ寤&z' !T":6CνU/Z칣ϙq@mu&‚pQUQ=!CEP@P\x0!n~o%ފ|"NzϚw44 {SsASAEanEM v @Ž7Pg඗cD?^YP3"dt(>>g`'}wq K@>k} e3e/"x"og,+FG`U3xݪXxݽDQLۿmWyʝP#8_]a]"lWwɡu1D'5r "6`~>I!%E}~ 'f{If@q@" LP 저)E  xD|(?+_ہAU/Q""C=z gO4vʂ"m>Uy!p+" uxڋ(jA򊧱Ҁ F 7n9}om^u6WTC$@IGѰh=./ES*(~YVP5|*oM@}yL|{2Q@~<q7i*{4UB((y(+ κͿdC^fH6zz UĿ9?7+y{Q˂(uЏIߢˍ'-Q<;<)ĠCX1ru~he_5W=.UsW GVY39N-ʠ1Q`ǁ -t0ʀpz͎i=ɬӽ wgOM~jD]98=7 'ˬ}"/ben~ Ǭ[/@~ hr|8˦koQl漯5z3{ ECޟk0*{ؙ^3{sqz,O Lxqs~HFi?&gQ~uQz"`U-%mR< R1g>cX\!pV8l #B~hu2A@}(ɴ_f]TJ})2=lcǦv@?xie3\i2X]}eoo#;dPH% >*Mw.]ǜ_a}@ጰBR@eaY(xT;_Z] 'qw(BAIw}&`Mǜ7y8kIX;[}5+hܬ;aC6;V!G\]vS;;M'DFD@!$( !EA`$-AiAAhI$AJ`]ёak+f1b! =06_.::dƃn 2Zx9m6 I0 tbҔi P@CSUB-.6%jl}B$ }C"daϫ㜽fg;r~(>)JV2[,A-D? T" F(kT\FPQEIY,D9_ty-IF857`ګr/coz +^E^@ȇJ}4KXy3]E׷{[un[-/+wy%Ie|bsj׾Wh{',~; ]5Ǥd@2?ի9>_W:&މ_)fQkִi|vJhV}K$F4}0ks\ G^,7Vb wķ2CJkN\pzF:UZL"ʘ"`@lCujtO6sR^Blnr \2h B WeVtKWDWbR >HMO֣$>{6Τa&LkhhtY!*e؎ၗ9+W#Z؊ɩ2pe9RO n^MeI|3bhj_O'R"cqK8!0_홪-T{SФy8<2fJR0HDdr6>^Gl$=B'bC]EEGa}K%tE$v`EPP gtvValDH]y4]D7^-9;pvM#']KEZY(ǭ7hQqMԣSbN4$jUKJը p*(e4MJM9"a( i*"*,PDR(1`DE""&f̄;|{0gc=@HE8rCZ a G4D:0QG'{MZ vk EWLnZ$8agzM8ޕd ,1TEPX,  2i YdF#AE ,EUdH AR *"E ,"$X"*X( XEFUHP0FEdPU Af4í ;'V\9bpv@=\ I8!!@[/6w2 H .Z"# W;,Cc OmL-1 W(Z d[-H s ë؜f$$0)+@.3g5 qBN:ތ7צ CmfIɇρՆ3N8BMn&kH8 D7&!ح@XPF '`"#V h/qk6 `mpߛ| o<&_cV8MMifUl[mPbT2Mi,Q۪Ja(,Ho#lP"DHX F0@YX(e3!FRa1IHY6FA^y|BꪃuRtb]$' ڒwq`xw[fm ARx_KB`y}xqg44Vi`hs;sFd Zuprݚ֙v{e4S@;+.w X4Dv:6xxAD77~n Ū62e᯺6S 2 ]nQ*>lK2y2IO$4:.&.){_F"R |PgV9Z'W'{fW%3HҠHM#EGєFB!xvV k7@#tVWdFHqNq&ZsuTNNI}$ ċ!ڐʜj@"Hj`w҆DB $Fp!t,2FE"-y6?(oQXpzmg2< 衅P lR{^y%7ݹd6x,KUIE*Fѹ[bhmT6""m…Aa x mAvs- zB#DiUĻꥡ"h{Ҽ>@*Ӈڶbph`MuJst;Ҩ I(}\HAu.zGǣ꿮Z,uS ޤ:dƊvUsL藝#eۿԞA8Hnخ݅LR-e[qِ-(̵r5[ܗ4df6˖)s$.%H>f6 B )1֝)\QD\UuW e "w6z~N}~$:-qZ|}yav;7mW04گLK@DЙ z %$YcT󖦹L$f8#jۖY$Ia9f9}+1զ(Pm !B*GeAX,X*ũDH"KNn8::K2w7ngSֶΦJ(.n4^ z, Vj&FLi*"P6"1zptUU$sWۙ7EH5sc[uon'{%yۘT1W׍P-Aj#.'U^Tܔ,.zPR"#ǥ߷BɌj h}R a4;M?fM*ḑS~hjơ(3DD$F ̱ $ < iQk[%)p D#C)U+E Zi1YtY@ A<--^Yql+Ϻ|ӣ|#cʘ;pb7 G<,ϗLyh@@ `PaREjud#FM{| L  Hm* w:=>wnc0>uyvl;9;Bf Uh%TXR!9|!^sCƒؚz?Nu8 *?k~KV$mZUj7o{ŧ3f:ًrEE|gYr`a$$\MD@t]0$\.&=<$5B ҅eIFIAATH"|lcHHפw`{pE\`'K{ފ(YJPD۴Ĩ oSPBIRh dN *!KR1˲; -*ИִRTV耹qS2Z(ΐᦘ (/EA@O >TREX ! b Ed"$2EPOK >ϖ!'N*gz2*ݪ+F,T.Da6bxP\F iUeA-*DUm4T"@kYLT4fUp `nVŻ4,PCS R)hvVtfRFT21+V&eɤ{JU,jV)wknj\sw2ndJeej*6S2UVmE KerrR6,3,po `b&4ֵ-kfe6յ* IwfLȲ7.Jns F"әșV.)3+g ㍜4A+oeuaXY e`@IhJKJƒ0ɪj7J4&VҼfYkZ(eQc 8FchL(Zq ˼V^T̥ŴvUƈ BŴykpGBs3 ! in:>2A\QˈO- +Ċ  (EzV XXE a!IHpBLBNAUPF"F0EA@2b(PW SSF# FF`ȊP!Y@BbȌd"ȠaB B @P A`Ă "PPX@P02AAH)!B`EIVERED$@xIhHb` ()H}F1. REU:@@dPI J H@QH @TU+ (`"D ##XV*Y$AUER1PPXEX"YŊbERH*Q # @D+$Pb$1(E(F@ Ad * 'wp!v93b@())TEBB"X"V[lec>hEfHYkUX-"V#V[U-YT B[-ʔDa"ƒQD-AHTdc DDH""(,PFI$Ya[JQ1#`ȌDTH*X1XD&2(#ETXR,ؤ (*őTH*HQb1#V,"P$D d,eTQ1T*51( (4dQ(4m  "PAF* ( 1ŀRam%EIDA@aD` 0U\DP-R RV*Q"ebe)@-XQH(*Ȍ$`" "cQ(*mYF Ȃ(DR(Tb*J+ ImUb*Um(*c JE,UQQFQVY"Z[,l"ETX" JZ2[+ ")b0JaLhnR̡EJ+TisC@0o<1q3 lVd[°D*DX Kb(ʅZZAXh_ ˬSH87Ʋ6Kl^3+ \RQUAmQ efeqQĬ.UUdBiYiR%7 (QUTVF# I,F)+V4Q$F V,*AaYUA%K0Tm Z[bjTXlEqhXQ*,FEEReV91  *J+imeY[s eZVƶlUU,b%jZ`QHB* j@T`ihTU4AUIFE6EX*dij8bVm3,1AAZ*Z5Z,X|yHJ9:!8.|Q"NF(a iB7rBD3Eboǎ)|98*1MSZẀ7&E]T,I2Ib;.A΂5kQd:Q) "D6,XFCU$" CX"dYqFUD$J!rYXgb, Y("",RB(-XS3{  , TU`+d"&4 !` , nHKe۬ J(ݗ &ҖiRVr,b DAR#n9f$Ȉ{njZ#@a 5 %J((,DЍd L0+"!#)U*JU4$F",TDDbk**0R`TQɄPE`EPUDE EQX,`PX)R,*i QVEUFATF"*B" "bP, L\@* ,,#K Kk %cs ( dH Q$"UQAaU(mDEb+ 0 H"UY,RE"EE"+BX(@dDEDDE`K.%(BPQV"5I AEQGTH\,EYII2% V,.RX1ԬhX6U"*cZ5Qb*(Ei $ZʢU"R\^)`,IQVM T QF,FA`b:"(R*2Y2JQ@R** eE [*Qb$YZ*,0eBf-1AXPWVEAQF,bRA,H!\B\("8jGWR$̑QDU`HT 4'+CJZ05* C9tESfd%r* $"PE,(go NW_?{•,uhՕ*-0.2J8xr(w0Ω'kXrNMBo'p)u(Pw$'WSzʜ}*A--UlĸQTUEQYETA"iAUΗIWmsRI (jⶠ.02UYL`F-;R2JrfuvȔP M#*SGX$Y>K7X"cҩm뙙pr PpXUWS$ >$ fy*O'vV@1@Q;ZeGTPEוɌAif2h`QKu8-aPTc X(yiH~'.5jۊhvLf Z$ƫ  $?ŻHz/a@Ǯ;{hS][g!@+`ooP^$XIV,0PUUTE"*)\ڊύm*)xXł1IR5gzT{fz1e(w0M}=@8IL`*\Ɋ#hA'B~-wA2"{pb"K=i(<6M'{=.ao)$#`rEP1/sXH2RܒIQ,"E$*TײXiHXzSUHS s"4e",cAQ@Y\c>&1TbX*"(>u&@d"` p:3/97__1A6uL2(yS]w%=b !ALgV{óo|zzNXt92i%qOhfnU 'u=N|x}׾Mncl@NOL iT=e~CJھ0lǿL`JJ"@ n\ICyWU9$Jp+u ZfYŬhSZw:ov[cA/|l6 ab$E `_XIFEP y=]3N\ 9?ll_ѸTS*Id#P2LmwV&7m;YS6,?Ciѩ.ge~l'a'' %S K‚rQ mO9V x_ͱdň&x@q5$h\o 0bm~XhAl-"o2\ڽ&5Y P/{d5p^W^> Tmr/}3R,v>}S,b!J(#.|_vs85k'3;l;3}r~mEԎ?~/}%Y<Phn>5^sC@`7o\Bzfw_S<`GӣrdUc!#" Os !6OEAAD$U"QTa0SS8]$?h2mQ@m>O,"/N4R@qG2~7csXx8g屉mB"$t G2FG O/Td?_^+Gsy&46 *>8Z=crfEGQtmǠb׏QկH-DDWdU~. ]r`B V0mcˊ^e!b it.teaR^31j(PQ^VU`UOc6s *eDH|O]ʃD##5}磁c摣vՃ#) DlQnaе'»_%B< k6Ð<$A@bbcY)YĻc!+(Dr GbX\d* 2@!gs͏z遬6]5krUfmo茬z3, .od\e7M@B"gx ~:1 r9?sL3)Wίr0A"`18Y?>օﷳƮ}j#L8~jos@>j <>8E4E-?}eks խ}߿`` ~5/>d`zQlFτ@. JeeYMDkCϯn/^[)!XWL  od񌢈j@4Oz;Ӽ-7ZY xK C=p>:R:Q& K?}2eru{[fwY.Ȇ[Gx(HZ-I]YznX$RU9Yf޵ ์Oj).D;֖ Y!j[{ç?w<*%Vlò-Œ&0z=Eѧ?') * Q]A\}6DBs !RQZ d8>I i@؇[9R 4iw`ôKy H8- yYznɨ4 7?'彞ߋZ:/.z./+G_6;=X5YQBI:.-ZXƁ '3sO2~<7ifiЩ-Lb)t]xw9V bęrNHk3{_uª2dR#`$?σ '9!?l>dxE=O?c%CXA_o7D_?3[pC~~W$yW<7 Vɛ?{ۉݬ~_ݻZK{inÕ絛nlrדX)ݹWr+pZo|_k]wzx1vs K_o?W?#._VjYB0aJ0fhJM2=E0y8@$҃"F#۶SmBV!<1JZ,M_L7`ޚpG>Yruz<|?% yUU|aޔN?{ғsɐod++ 僰96Ë5B:#3?8C6 Cٛn"I4c׌D![t@xw@);n[P\@ǶjmN8>S s*/.Q2na(]qm[r]b( ! :)~ ڿ@K뮉ZAas~v3 s^AL60|h#P^RbQJ>=/2hK(DHjwg:{VCsiǓrAn":2"%{(0qGcF{eAQP@: }5>MN$tkuM]+rĐdd$FE$ o:k`{MMƤNdW^m'8SlGx=᯽DCVQD{:u8Qͭ+ @hZ~scYz@7k#neZB] v78_7te >P3"9LBm<1&ԶN93,G??po~{H+2(]g{:^2&-3Vm;fbHժS"m6X;$Wtk2 Y?4;!T5mn ;]JlΕA7^uMK0=;1;SFu3`YmhD d7]PdD\2 gS21:*bcp!C-D$/.mPWGIDӉ)g[fR03ytik"H˛PƁBۣ."U$<@'_RU`8r܌{R'κ#)9ͬ=V^ScCަ46hUZ >/ڔrZv\>8_'?Z*7}"H}Yf55mǬQAi\^ếQawl. c9EAw6|32<ъE $lulPmSW3/+*ͶUЪRNry:\r-+Lc*ʕj!PEzE*[ Ym~jYZ1bi[cDY\, JʐQeAeJ3&>îAdx;zQ)bĴ L(qsHlMET]vlNd":ZPEO17ex7=4Uo:tښ@fړH(RU jd#1)9ِYUR}{Vc6k77gCWؕJ\G͹v_|Klw<㑤͏Qr=ޟ:n|]t}W| /"^qٹt=$@GVzX)Qs{Ϸn"Kk*2}'QI#(vtLqfk*}|t߇ǃ"0dfF#Լ &Y 'er`Q d YPČbx?NxּtMT{n7mǓj*~s'|k<Pz.'P AN~x[~GF. dY]q?P4:~߄dmQjl&@ABmCXM*PTF((uBkTԼkLMcp"9&3@ ,ő!±i砛fmHy{o@,VqTTa(Ta,PV &JAF*MB"+gpq;ʣ9iʹmܞTIRp `LQ9~WGYe{vN+їtasX?fhi2KI46x]Դ>ƕu*\QuN!6`Dt RL@q&lj1-j3 JDQKE[EMdPA$D3r**(_:\E5Q? h h((]ږ:y9}J?#?<2NH[&ydl!Uݓ[xp2xn.i_z;d-|#{=Six^JugyoqWA|O_u6d8ap='ߋgn'eϷ~ߛ:1ͥ/_]]fAnQh-"7F/=zlx}i-2oӹ+XԚy}&Ad8d-eya1fwt%U^W}n/YiO <{ȓQ?5㣥$B:T[Dd'5﹮>ftûF\۟ F tYg;Ә@@0> XՁs(1jhiBB NI @M$! Kf܊>uނܳv`/90HL5"F0aa׾2wHvPZ.N?^>7MST V~ɧ镉Ad "2_-2#I :~]T?Ư+˰=zM퇝;ˑm5,4xNגƎxMqG{YV=O#q\ρx\؝?c޲BqGUy ٤ɾa~~2|u_~\Ζ^6z޻k^sRF'C4} #B$tuRX+L ''皛4r$l~xR֊' !~ rP"gyF'%*)74*K<=;&>:#bHR,UNd3HTV{sӱ}{0 b@qf>mŽ5,P16էN[ _`9Hēgpc.>C- y47_*9~*3RֳAl"P/?1 4xΦI:L@ $ I څ3~3ԴIcVQfQN'BIx=Z)DՒz^)lC4SҞ+x$Qhcdon5etL|:4zz67g!WQKm$!/7vapwd[Zۂ_vQƩb8PMn6< Gy^Λu`!Ǣgߣ0g~Fxp +\u!ob72!?rUx.N 鼐?{tkeЇ8=3#fAsŐ04@.gWhʫHȺHٮ98or y7nofGSx~BqUc|Nvap/PvP@Ci9} `#*D[ϩ^u7|SS?}=DB1h0XdeW>wL7IoΏ[:S4|8֖u ϗ >֠^t2kP_3<0>@_Fb>?),׭+!"YṔ@ #<C2p)LEi-k}xݎNwG&:lz#m8<]`C9㖅NHfU9f)]1?a5Cg4rxlb'}~lieg{\;+SAe {w{{G Ϻ~FlqjĄWz&q. bt+;F*\꼛K,K@ez盍C \6'=ӿ~C T!%y;48ㄌd! łC~\揵wjhĸ}-*H+4Eu|júx55HZ^G-!حy\JP4|J5%꓋ 'ʉ+E~?]a8pDY!I]iF%(!:IM!lFߝU]T|="` 5i@8K8\`N6qg2DM7"^KS"?籶_l[ a^i=Cx&ƖY!,{g' VBV$XZGqW%!TWY""%ݬa":\d0H17mYL)Lc]RЩE|1}+¿KDeU\t$!i$̐>}-Z{WuO ސ$1IG)+@34L|qjHH vDpH7:s:`M 4^jGTȨb6O1&q(5ꂤPE!(ܣ/጖3]\0EGf|s psCfB HC|@x18y+,X⌅s%ţqFl9KaKkU֎y3BCxHbS'Or-D-ͱU'oY=?&?"w8Na2DOllq+ CKJa~h khc`$%p xǎO!1g&lnF<w.AXwNJ@2#pɈk76bBc֡˻(m<ԓ'TYrB4H:1ؤQLʸ+ttG|5hʫ] C>gn+ /Yq3%ا.k εG-fȘ1 aADk<t?跑y1BO| E^ţΞ8۸1-ոZ.]z3mΧSg)$%i*51tRMm^sf- mBǺY/^tUe8 aM,Rs!ֺ'qSߕzҨ6yϢŋ@\7O*+**ZKϿ}eqT{_ۗ\/ yM[MOFx?bb`zt8Zo|`bo/s#]taBtwz#_b[4y_ s1^aB}=Fᝌσ)D|eHhZwv xIk]Hel{6y v CR/oCI+鲝>&ִ0)e+tXhXP7E/ei6 z2pJf 8ʸʱ5 ф*{dnlp6Nܤl[<[ a= 6tUȁ]-z/ i$L%,w "=eы/<^Uf/& -@;>qrWӍF_ծW&n3 /oM -\K HlVT%.~ ;d1@i>tOsҰ] X*-aG %Ε#mll z :xYN!V|~pb2P ݼ ,ezOC|'0 {:?~sJ).wk}0uv43& x"opHđGKWFJ'B {ଡ଼"{P}S!9K\Q*& b"$MP<[=\m}ٯOUsO$E:/-rUt‘ @ZѠykoeQ k5{Mf^ާN%̪jKTR*M|_8 [.ĚѤw:S?7"f>}x?N4aVzHΗ5<=faYr{ˀRoKStTV,7c(7 ?קm%ZygJkX-QYP*#˓UԀ LT.uuZsTu 0ҤGP\qA%qSѨccA`Nh'ma, ]xnbSNFҢ5 5cl{I]}\/,-]h5FyBh,N-a[YRLY?LiU|"/ԠCgaqi@g6-4:hhX-2jo)ztԻ7Oڹ}UIeڕ*RR$-IUKeYg{Z,ZvIܼ>Ú+3/iD٫:,.իr>`3LMw9=gsj͕B Vo{jÛg0RdգwI_U춽c\9v9U'1q3;ϮΝ6,[Ss*j'ON(M8 Zr9eYbxFBqD*FecB<;g4bN $f݂\Jdew/6 T!"ʻ1CjeY8 .7FՇRc],mhBԪhtB!*Zc C=wQoaoou}< w%MCY71`C|\A?ܘr)Uk.VZں-q1A'yd*3藧^ SUDz2rNw(\0@UEFYQ h TMS_)˩R8dm t4uJD"qg:Sۡ:ѐO7Dz9¿3"me,t-E%VI`[6}C RSV4͉ʯc%}'¬:#0iVې@{SזB/__etԔFh1M(κ$565QbC=-g*gΡ7$ͣV5iɺ:<өŚHM$ѢX,rɗŲaCDHbCxr*6\bM׌U!QQɥZ\ZjGԌK=wNPŴ  S76eiZ.)^9Pt:#[7A:؞A!XH%FNĘbLI2'gqVXW^q3g2 =qe'C̓[zYOkYq[g}s4!RB("!EADIBAdE$BOI(_T#$"8e ęSH`;vSCߤCY7\x g)w] L1ow-ƞ"3t1VG{ͽܣ WiV'-o)ݢWYhbֳIR.M7T7xJx5y)[ }0t$ ^Na;^g OM܉pHzý :Y!?Xj,/w{X B@ H"H XP$Q Ab~2|Ͷ Ƴ5{D ȥMTRǛ̮W H:B@i5pjI7Šïv=+{Z6|*:"02(Ã-!6J(w65μîByJOftտk7SlR(&[jJ,9*.h/>םo|~dzo? o籤w_~889n#;"|,)abX wCsV@|&6_:Ǝ)C/[S[qwn~tM\iH/Co3 8bH x{^*r|kxgk|[OZۺ;>;79~̴ȼZ%O//}=KCU; {AKgXo{KC|?sON3Eu!N8Mx;$4|:IB PŞ{c?bUJaaOiF|Oxc!tZHt: y , $-^nP!)u 'ivvs!SrS:6)I 7r\rlˈn5[ J"'755(s<ȀXz0d_ق[[JxcNm̟Çrs @2Nׯ p$xg%ډ ?WC5,4°!b76+lfY;h:HJnv{_k~)#o9NU>7PqȰw/iYAv'')}֗hՁ5}Z-<*A`2")*fBD nJQ2E !DCAjXQ*Bkdij b idOeKhэX2 P9(8 (3eeR%)QL5A$ & /1@tå[ਧ4dEREZ *AEH9h eBPWϽQk'\)d\V홫O6F=ےq\_st}S:oFS^1}y-q~7eݼ|+8^ {><^Ʋ!J6(CS(((m`5+xyیmeP5N/'1w5i?ؔC6vιs.m}V_ov ]֧mVԞ ( Ǻ)/&*ɲ$yB6ZjM&䎉ch^\M[i!j*Jh3}eiKabSF5@{2veޒWMN;vz& - ę6"ge>gǮm]1qO5gq̴qjWJny闙 pnV=r<2V}ozy̌y {y_E@I`DGF(LO¶ Vem|5p9)a'UѼfͲR)ثRN+sf00gˏ^6VsgP$pqT{`k?Wu{Ҳ9yۗ# D[ƄV;9.ϑ_Bk${̦0ICJ#Uqa T7I.+w(uX0Dڝ>b[pޘ֝k&BtqĄ;W ōq_[Q:/Zi~ke,"lH);BÍ{tǚb*{2ZrJ ydN;:;v]q]l:)b.&%d;mi\؊WBE8{Ou]7bMֽNffk T Rp;y9X0[d#Ծ)Oj\p!𗿑ߵ%nwxxK~(1532ri%CzSr?ώ+я%fsZ>yHft$y5?[s3ޓ6*.­8ngiR15 =xMm/zsJf{bO*h5}}nٲ8atUٯ%F\O&8G?7;-aer)$G_4Hlsۊ;-^L&WXǬhe`JUJLlm:6bǎw1ϫ1ڶ+],;˝7)w=+| UZ$CYGu,^/Jy[zLblP<^23usMߑO!R%O?vFfZ>`/G#kn.Drth'i ۧrq[?rGŁklA\BSO~KɽYlo5}u8F'⚿MIN'ۨBE6z> ŪcLMjjOT@J& fLxΩAصPq]p qs3{,%Ë7jS?_~=3vM恻nUm_i{iW "iFSt5ְeD\ =C+Q3 s481(xwP%DS+CI%@+ de]a WCJVA`R&x}k=?6d|}d8F}m])y6߲#b$`DEMAG/- WXV*rEtފ(p`݅(j]GkJBTDRb AQX$ PE!!"$ "$}`M%ac=%Hx1bcRNL3)%$ӉJ I@FC_4h9/ DZC= QKm j_\[[RVKՔ&a& :FPYoX$oP!t\ 3}ݮ8:^ctKHҢ-(HEC-d EDPN*U0UDA**ht0^g!t4*OGc}]'7micHtmH@U,%+[ڙ L5I׋HOi&QbHM25!;>+(+A=pNJ@â1&kb(0?1_ ׵دe&J&ct=3 f-f icsYTkrTltkoKG$( NS;*Gȟ콘 SLSIy^-,v"&{sI}*np;} e/Ybqll2m~V[7yWhMeōCiS ͟NJMgJ?qH 6֑]mӖ >=ͰPW4i7>wlR}eG8@HGТm/kG!a)w^J7 )UʇNǏPc.8]ކ{qM^:J=s;![]c hy`sMKZBMn>g4Gn?7ui7~lm \9&1O4x q+Ǭٹj`HI wwib0 D!o]@ŕ7'{_7Fޟjs!\XyP%_m^}Zݚ݉Z9Tq]i -9_hvV%!HN$9?ӦZ"Y7d80d _"ye,&+tN{QJ"*l2tV=72kO7B9Cxz+ev}@A??L~\D"ℼ]v*qA40OKR@x x* ߧK_)맪mߺ>E+NjA`U$&7USF~?T]˴ë{|Vc;8K - ۋ3:rKF 3ߣ }‚c DDR(b'z>쉨G6dJ")\~aJRjD8bQV+ <*4@ -vR2,?sN=nH$xV}y\ )I;;%fӟa }ԱMީg6XB0Załgy;7W˺M qI?!T'~6i]|34a\KUTdf9ɊT 1^RiIw|6P8@/O2$lK,~v'k#0rqb@1ҸPAzrOL͛xƘʵt4fP)BwdM""3um6;tv$IRMLU$9xg,gV'Y2!??iuTFNY]h g*S@Bdui@9XƦ3BhЄ*spHr65u1ݥHs)v vllPj 4hG0Ƈ^  МM,1j'sݿ_Y\ RPY7,WL0m˹-0D H$)GNG7Mi(zLVJ1 MdSA @ Q_mTT5E$Et@* T ZSZ i% /y: '׏{=V<9 p w("g .]gtEp+f0QCB#HF^—X\e..V/o K %M4&{ Î!8pq'p !j0JK% fZ2 4dfC33zYif-a5wJ"\ɭf^38efJCBKs-3ѧH:2 1H~`EϞsDdHx%Lua\2eQiVh#vhbPv肄JT@pEE> `"&4\Ed:%fxi~ory;Lӑ(, 46ﺄ/F2YD6׈>izOX;^`GBZA[ ~ ł!'/Nf%tXoiլK~EX}?3 acN+ᾳ#"e[_!E ρAtas(4ӵmo<ǻ 3S:..1$R5Q@UcHZb۳$[L |"Kd/Qʜd)`|laqn"xdY-ыME g#RFf;2`} g K2z*PMU&bM;[vpHǧ~S(+ * 4ѻտnDeB>jeZA5#<-Pk]z& 'h 'ZW^vvX@Y5F'^#z<߾xҺ\taKӍP(I }$;ô8 'j#ᡝTjDK0ɢ":t~/Px8UN0AU FNi8^jYܻ|fN{ro67gU(]<;h2Q A-E}8tȿ^~S:.|eįO˅?Fk*ѡ~oyLpV?k|DH":j@I~^:V$w¹qF:G;.t՘$+1E|a%_zUkJb$"6Kq|R,rW.ጎʩ$! .OJo%.'[ 5K)W*l9f#f,6׫\Et{ ȁbXY2ӈxPaYD5Q.^<f͠FTqcg2sb"UR~CCݾoc|k" 9OOJ9FzKW'PxK7YXaڝj8~"Qz[2y"IV觟uuT ckm^-i -"uZ"(m"(߭e*ke4ϦJQ_9~YR¿n RiQ@ ~OwAg!%D0w±DZ.l"-:Oggt]8ET=r~kFy@#s̀r˷9 }z!I"gJ>82@T紡Й٢/B%Zjf]o&(Xo6Gl7-"R3_$NF+ CLJmJ]VQ{9>fAEF% &n㽞SP_^ 5! :brתG1Uو}D`(TTX/D9:M5sQP5gEަ_pG-D@":8@uP* dAOES2#b"!h(*d2"$V DTBh(AY;(EPG6#JCo5vmzE]rqs8Lۧ]p}sX;Ğ=\JI}9_T}692"X9|DT3@_a)VwZ|n+ NoBS $4y=U(:S]ƿ+X2HPv@BqSe?0d(+/n,w㲱A I=cй~n6؛ ƫ֊S4dl} 7;,մ_9 w"n1MYfY%,%LSʥ`͆I#uC\q#_TMc| M1S gts3Ν96K=o 62x0MO38YK{rgINS1,W/R,}%ם=k֗Srl7.}o[U9_x<5fZbo+j:6jgzsxq "ͳ6{>.翡@H-*yKNnzku^iyZ*dQ sHQJXdS. !7J * AR :Sf7~o>?:^}3yFg`g<.&qE`IbQw~LCxTAiO!]^\C={6i5F{N&-p/5-,>o]nO^e㐳o/u=3Ж : 3 ǣ 9{ `X'OoƐ++#0 R-nz?uQT')JWR& I!J%'wdVt5C&$:.(,QA,'9$|c֎ß-2?!};KSwBqt>B #墇 R+ ꐵ1ؕ)9lC @1H1(nOQa) dO{xit&| 0)5bo_k< #I`(&oe_ 9k&j~_gb!n2dY ZVAAJDq @pI$AkGpE¿K$3ZieR#ݻ.ѫZGʉ?=YAxLHOשx?g9c3iO5Yi3Ní"{_#->||RXAKjB\W"'mM˭J+HAR*@L*1Rr]8;SNw?Z`a}fAXz}fP.¬w4 =^÷9!dR$ HCzC8x9Al &8hHo5hiD[#OurSy|jT@׏s<4X-vU;#074PS42fZqQ2~*+GLϝ A+;*sl sG'KG{KwȀ @S wۻ{J&uҜAaUP/7Y8F=,kn$ >}!bŐPP(EQAI$Y>r@'4ͅFdBYƟ^_Gd4f.6UlXW]p\5$QB*_<:q|p<7綾YYXzޅ ]up$vJ@!H H:6<b6pDd,Ћǣz@9F#&)֓qR-O/ !0P8KO\zUz+X>{Rw ^s[G51Aqnb_ϕYZ(_èwn&5v^[+Ni'ANڧ8[%+q6lj*dT? G^O"ъԧkƘJ}TOTy㘒q>EYsNSG^F 薙izq~7LSN!Mly^9lBRahvGg֖tZԱ*M sjNŮ`]7V?.KZx3/#*! G00I 3"33ٱ[Tp! Hq qcסnWӱYbtKc12<7[;f[pcdʦY[cnd/w.4KWd 'hQ˲A"TA'-"܇h;_|L @Y?r[(߿z.| C(紸b"*Oc˟=vY3{{˖Q'ȸc¶I SDm|Fɭ&"ۙl0l*cK6ޑ"D۶UpV n,Iv{0%,!ZRn{Lj|fȯ]l}[7C=&q tnS{*Fg Y-mS,9Gygn,&gR5֊VieEmLkK:,CF R;ctiwW׆WOԉ jxm3 ""#J%ȳ&,v4 o` Tި$7| 7Ȝ 2q FeTvFM:ϩYlOӫ+&#P"cbQli4.4ɶ)7!sߦj0~c?.&IZ|W{PDjtQqB'Ct~"9s4Տ}cEzȽ^T^٩c|Ž,n:>[*mzfF5,@!x<)+RP,כ4&}=Tډ]v.SGL@RT ~DSe)̒a3?fX@ME8@A !*ABEU #MQhDRȉ(7 bwtm;8> B/K[ů];ڳ~$5wNw_dT zaWPQb~*\/"vՌ.gu|f%t{KD4Z3Px߲ZE9 PY½a :dճ4sa^M7se&,9K?݈de;G -n3ӷlrҤf;F7rH0r \9;¾Թr3ud6s;j%CSLZЩcb HlH_, zu^qνzz.Tx=*%ZV#"bl笽;3zsu(Qd7+Gt8G\"yfsس,胡07@ l`"'/w>gGˮXa. ! UmqwKy$} (s'oQr4\mܶ }U\K0jͮ^y(`/xL`N@!Q!XC]"~(ObUfgHʲEe9Bteܒ6r DH:Z=_^^gtL UcLkO2dِw )h3\ݓk<ϓuv,bټ=YD 1$0`|rV^}6GߘtdǐEˊ h|X =N#3NG -iAU>w+2 x Vɵ(0R(Z"MR!5KUtDZDɂh+1ˠ}x%S^@vwC*k+ѭz.?xVnpV|aHz M83sL '6^V5^֒;7+a{=H8%EGZh$0™TcBoxSNyT@@n&8Y|/~MzOHnmDmmzYl]iԌ2mEz|`E%PǞ^G*dm<$gSLQFjAjDJUxP"s=5x4E]ܲx~^!|/MǴJ @n1 e}{(aYBXAY^J~SL_ry· T !`7A#E"vO11T+"))n# 3\L,Ht+ΤةPi02itϟʦ{v^F9~ܝpon;m+E8ꥦPmAZ6(rlreEmE$@Gu(㼦]7>ǧA#2@Oky'8b8KH,\Ou?s PK;m;"`XT6h !-IVE "+h$Qpڐf{7ϣi]B  PGTQ$[A ZnJ89;ԿB/8$D@Ai#`|B.7z֭^`W/ޑGO#d(RIGpI+$2WU"laK\C ?Ft}̖BEt,f< wtOFJBZI=p$\qIkA_ qϡ>V1J9(;[,.Q$-CV)'"/9aQ5I3{S~hZ4GaepZb&qF.qf|m\L5=(C#k2lp8r0#.m0&|}_uIfp#$𪢋PJnb&0VLr4{;i4Y@'pblS_V,Ola"\/iUN(TMQdЖDf(1{ZTiJ:wZ<%qDj0䙦<%=q!(rxd (dj-&3uhag'R#oCK dM5F9u~T!--I1x`'~× \g(Ġ@ Q " #* ؟NryV( # k351Hn>]O(*" m"0dMB(QUƂ=LQV j(R]@ @|-(fg i EAo;)A00Ъ]Xf_ ( x: 3 \'wrm9먑{0J^\ESBA!KYTDJ SG(:bdR—YG#zOh`9` Zh.ŷfd+'^IW L*`+6)tWҏu]]zn?b 78ئo*Ai 名Z0ǣ]rl^y1:;`] j7MRyhë :vCo , 7Ǣη21=i` '$~!ZJ5* nz+۳b=px-4sPɄTJTçihq68<ZyE$Pz>Gݿ3&ߵV<:~TA-*.1 "H"+ܩ|A4M.9"u$EM$Sn((cK*m?{rTѹ@oL"b@FH$ a@F@0Ȅ@*2}]ǂBt3ݫMwu.܋[霺 o҂ n@t fCB" `naML,wo;;y2c!% !Å𙙻3dUx]`ɱ3})qr$Q?PSU$PKD:8LV|i (CŠM3%mmZ;v~^Tb H9p! 7DD0\z0nq(䤃&log<~1b>9ԡ>ʨU`Q~L'%NiQ|5D*O]"Eb]!D ͮlCǜDlfZ -*\C(,ߨx~,y}1 @Hu~"|rM&p: 7\<2 AV),ZZ W*pTS4sG)@#ySK[^1*{ծB6# t@ڀNI9Z0ڲ}RA<ʙCMB˞,JLF^i"yт4/Xh''Wz`M`m2,Sg(bܷ$lA|N̉LL#| GMhrfNZ 0^C) wg >/}uKeΌK[G)GSR\3PZb |YZ!;W,LPTBxoHmlR"6S,0( <>I09ӖZ]}^v,qrj<u%דU>L&bu2U^׾ ྅RҊQ\&go8`;Aٳ]w)I%ϋ?JG.M{ku҇ҢV[(}]6czi2װh*#V~tLⷁW׼'8vwsJiN8d#~27'*NgY].kǷYɜސiubVmx%Xbn`1@W>K>68FTAS6(Z#dkDK\c6pK,ikcnK*YK8[oJL: T. rbpU]K5)vȲݞMyFZI$JլRu%:]K&u KX fIs$oiҦ";-5vW0r6Ƥ~) fDh{|oT- XǁWRVȼvZ:io;L3;PjW?k?2'uODGaR0T$7`JY IX, E@XT!`PD $XȌ !!+6 OTrXO%` Ā$PY c$e`V!UbIBNTBȮP (E$Da Hr`$$4T&+ a|jE"(I)x`g҅.Kv~ceB@$D 'u@6sE_WTg~ k=!MؤZ#m2`wZ[)QGM31hnI'}v7WWiDbay5KtLBSq9Ni nAҀ;JN]s7p- !-B DGA E/(Hd@ ǁ7 -1ͫnͼ/佧@T " JH'"4!`!B4wuLdS8[n Xtަe",!n 8.5W;^ũu>Q[ +L WLJnn95HUɹ r~t}{?^HH ̉X|-qivUUy ږ+1s_ㇺ>gb%l78sOc ?c2xwn>O]*CZT4O!ųHfd"ȌH]|lK..I"ԈhEj@=SĄqx&pTx*mr?]{{,\+U7v]j)oinq?5eK}ʦM30L|O /|"" (&O\`(m۴Mx"k )#LdCy$5a:u\.|C̍{ug?x$#Cp# A09{>_)!'$ ^z3#g|. [{|$R🭤|C!>"n􋊤{$QdHVO=LV觷3Dhd9l:BWX{m.r$PdtCLI,ӝ }%yZO|J"a=t9x}\y[=t$ܢkEx|AIb  Dyc:?xPmٷ 0>NG]D1\d@ e5+&n6ͣQ,ɄJ-am$RAIEj"H"lOԖe/͗_ηG70>6Əŝ^\kwot"H2/l"he2`AQU7iĂa#) u;U@yuJALRZ_,m[~5_ gCJ}rF`hUO"hcn$O1;H?D83mnpA> ~sP'X;WG!%BPVa L& dnhI6W`x<3gn:w䙬J%[|:,B42[S' 1ŏb yh_k}7Ml1)6̥6ȗDS_I~ԣ[Tɿ<iy fw^e İ9-{Q1!G9J|12 a9N >2ejk"r.! H<Ѥdkt)FHc ^nٞ`T LA͓ y78E1 ̻B!&*jqw'fUa1۞@iP` E#s̊*$]a "nFfoGEm>@9R3rF(YH"/SrjD0n PByɖ ʠC S$+m!Kiې3)wf8"Kˇ ۑP2š'nFlFff,4 A6YM#6Fz^T$0F)\Vƶ-qbDo_Th_mKg\+^ޅ3&)}n՗V#$*MU Yg2y.8 Ҩ;()4S!/X9tdC\#_IaX܋%nF8ZŠ'bYiss6Hn!RPj#> g'2 d)\F!iDLrjD q}^m6a1"ԉ^ C ·sw”/O5dW C N|3 nڹ{ufz"Ř]\6Жٳ~7] O{{[:t I`/t-`Lr*sZD4<;W/܄n0 #Ddڊ۫7=B:(cp}䨯uBKk:1)'CQ56MYq &cr~7DݭH QCIȇTk3Qla ~@:Ň`zN߬$XtGk/0rيG2ܰ),jR+39w*ti9mV]mhӡ F ӎ\fDfǝ b#+4u|Wm9bI oɆ15\&,H DPF (ȈȠ!ܝ15Wn@[ o3.(xXygtTs=j'&ݤ䐱o?z$Cmyj>FC'{;]R=4C{z}9|]S}'"iKz[mO:f5U9ӿiDa!R63GjaA*RdHuVyw=]yi2 E)g$^W;&pdk^b|tc1PE)Jd Բ*hLOd fbUd=sS![K Jg}Wlk5L▘h(콇5U!$5 )+S6,u+1yF2]ѫ $$6Fm0Ѡ:ɱu:L  ¡ٳ$x},2#2m(!yz{"ꇕMs7 8-ƇvPuG1sѤn BvmS!z"X ֈ@ұ -Y!2qqK+X@ɒebB'n4*BF]ӻmbTVD&{gt耡lHN}stʩs'fDs[LrqI$/:Z"7CZ G-9 Óu,Pf2bZЈ~rl" Bn8oXa"G Wy מR0Eh7ўn[=6ݼxrsbBdrbb2;dǐ|p*N/Y*8RD6ʞoP=wn0Xo2>&ü@“nzuֶDIB,HE68 Aٸ LىA|70+k)q*TB=&`YPV@^g]8~gҧh3DD S+p! KmZ r>{Y/F.8ׯ[b>{?>NA%Bsv Ƶ"ƨo(1I@ E.v ᰄ8%\l+$FhxYKlY,kOG9MńuK ꏪ{N(uLn}ÒeSLgbhTPT{̓Ta wX^MV!uAQ!$ DdggqQgi=6w'VF,Tc"=z\ѥTU.s8t9vtycUocz更!.Py.@94E&Fzq[Ej(] >TCW1nָMElHg} I_;5uif8,vTsO+ס8%JPF)Jtxwjª,N8Y"kXxdہah,-̘D<.suR:qRLz˥^f2E!K)_.Z1A" $I$ld%-Rb zK5V4Xg6+;L̉0(ő~O^L1ť  [W]!I !"P $*dDBDEdVJ-EEfˏ38t+ѳ\F\Q-2#ڒfY ȣA虩lDPDE֩UQPĒUDb1Vc QTH"VF2)AdTQbX", '?paY<఩(֕(QDn91E[kf"ˍ*ѡRU7q\2Ҵ44c,Ox_,]Zj (VYS-ĸZ 5"5S^OMReBu(Jc5VF3,`S)G2eQsWnؐ=Q)yf}$aKkT<b,. eb Y>PrZX*8+`Uy( 7hET=QcYQaaVg2LFJ3zےŅLw\ɚ!TD{H|=?d'.n6}zTʙ&yza9N\BױTfT$Qyx!~}z>ַڀ-:bE dP 28i}'6#=}]Q\P!tqrGc2/Ito` 4i~‡i"8A4iF뒐Q+kSfd3G&: X Il`z/mh].)]Ci5Q˛?p~uh6A-Ij0{o $HKӖsd@[o˝rsGe coY%gȜ IxC}]i7+`Ga"~Aۂl@CB:+L1bj~D-DP+u_зY_1Vr_A-$f`'OO뻟qK[j:B6-Ya6kjf_lgq?CUL3"QBsc~8LO6j|5xs8t_0P2A*AGxcmFu("GpO*]2nN3L^ȧ@j=t'=۰6eXZ\/|Á'RKt:CBa80,MԢގw?Xг'H.EQi#]kM@v'뙦yu!%A%<)K֐!C>ѡQ խi)5L˔OYSU_z{Yr* |4+^3U۾_  Eg>c [{׾|!6RAzJOe-H7a&)tA't> b~޶'\< ٵ:x)uiNU׈_$REd Q䁉QaX`b ""-j+` U!X-$R *F aRY&2zw wqZ`X;?l lEsŒ{vdNͣd L$.`U)&k_L[tj$nUs>9oHOg?F~U vmN:h4'gTk8GgO5+s51ei[4ff,ٮm X0$I UOOj* ,1Y"v$I*+$E#h"H*)i @H)&1mյ݌d{Gᨏă~Vo)1|׽LhoݻQ`G?:oj 2[u[{ f}*4d*pHjj?gG连ur0cW1dW#I(F,i۫~!e*$6nR[gRs9nh^Ȱ==D7kE8)ήh\1sÔRKX_5PZ{]tJJꎀJsw+]FNbd&p_G6tzW?^շ4v_VUns$π''2sPLk&e/{%&2non/yWYmk2>>Rx[C!@ER?"Wyo`|W䗇J%TC:^MDٻ/KieHT}fĕu2ǂQXJ j0àҰdO\d]XsY1B*J7~>#R ufhPZg/[#i847o]L@~)QV[? vt%Rc58.r-0$LV7rұ4ʶSź=&[V]u1D蕕-uY=p$^B*(䚛|v.MKdt#]rz3Sng\|8HU$*f쥏)A!gK'$k͍v( )3Vh193W ؔΧ nT~#]6vêx1YB!;J'wI*b9.o0^2z>3{'%-VV-w)yIVnf+C |>ԋܗ ܲAnwãw"U!HA]UUm-Cx(=i.1UT9iɰH-PX7SLqed݊ֆPx!~A?q Z}f"e6kZo1vZM{3V&p!=8K~w`^j+ğ݆p`[o-CB״ڟyc2 X\*zrX.bJ3~{ݔ:.X2*I~=XyFFۏF1\/H)$X8›wZS2ۇݪЫ.oGzLLżQ AҝIE<'|f>UɼC}g`|7;\ikf6~BLC^%KZ]ݿ$Gw}n9}IqHGbkuD`8LsA&@]I$BdYOP|^î 8ϥ]b4tܹQd$Cy`h5=c7A$m?}8_}տN~TAĜzUP}`6J1+1`iPIbIXk՞<J^h*^yo*A6:~‘V/KFD9j7mKXjQR vhF;*3bbxQWL]4D@ܥ?c8GbXg>ouO/U-|fUfm78GA^s2n& `?xSHd|jGM),?O{V z2 tA.rc)K.|g%{2{ kΈ Sqf$DSb=}{s+ ucs])C90y|x3z[ND$f>o0FN](Gޜ_j3e?7˱.F먡 sޤ:`7hRKŸwj}$~oLwSyc9rp*_յi!r>ҋAlG=M.TdBSj*?ϧ&lwx@@6|[; f! y~`9T}#,MݽD5l١"v{ϵWq@0KC6o@rG!2]y (Rp4ߍ/"qΖOm- Cl`xGg5{nG1=E?r{J` Gcu üQYU(@xX'=JzFĢϳda)mS .ozãj3ux{Cۭ*nrEX}٧]˦ >mmԑO^z@q]tMR41" +^H2`6G˥GCokcZ -|*>Q?]ap92YtlcY8+th")>hFq0Af^:՚uE՟"1)m~}3L ?v!J17Rh #D}`p~F Cg%,LvJM׎I ;.f vU C͘&AJ`;yLU3dvA(/y +"m;0*j%  */($PrBk8|Pb^w]l]j.;ZJKw>6ar(ǧOE=O{o͇v3R'>sTV1xܜGQN.ՔB֢މuUH(*xbABxAGKȑ( A6J4S#/Q7-**72ˍ mIrj#JkE[ZF>MS]]#[11ձbWT./-*[KQBŻWwXt8T[T}W ^Wӗ .f[ްxY|)=I*CQUW:k&0SQȠwn<<:݆sO~A:$uO i~QX@%D$1QᮛIAX؊Xw*NGsǯ'Q ! I#^\)ʜ QQE@rSnTO/ĝ2ڰ|j=}p#\&l",Bbı.}#9YdMND-aNʿmxI1lJaA'  nI9QX()<{Nwޙ}|a2_Yr5d$$qhVֻӲ-m)#1T6Rqox.̈+L]m$q<%$,40 ,,)Z"4*.sՄ%IwL8 Uɍا=q~l4j4{;ztOpthrk"uK0f|F,  ԃ\})ʰY JogpWz7]ycc\* R KR;/BQ6{L3ARvO# bI v^ucNa\aiTyq חY׻.Fm3~g:d ǫH:Gpe9 )(sAf㗾ѧPtlؿ{Hs-r !dTiAEC:L4pvD]G\i `Arz| 6ht=F4QW6h]eLDcF̐$y.#%3f?ef!'zhgbsD?}׃xؚj48 Ά hVN1Cԣ 8YNTdk QnYK!d#DKm4]Cw<[yB$4^ bE+aD|*qgjИb|mxVᄶ26&zogvT3kSDĪO뙃szlZluɲb za$bQ=d9b$DH*(+ ((,q88<u*s!_[ٟĕ읹G)nG눛Y rNm^^5Dr~ٷhS$ q'} DP2zsÝ-L]]2Ce>|;GOƐwMUWKOjOay=^;!1].> GyhyB$2D=~o}{o O|/чxwwkш/9 QQgv*?KޮcXeЄ&qh}O EAd9"@UhԱ:,Ղ H^G=( {F ۪ (lE1/qS4FK$ |k,K=$U40,/cqY/;4a}`]2vIқ'Aq )!1+zCR;{nHqgWgyUCj&E&NMB}ỿw`K>ma1.*oU_tb%Oʨg(khm^fG?"~m S?Gp&- #Ez=GWB 4BtEcu@Km#1 S; ӶkݶfrG$=v>#7hEDnXِMkUߓȁ!ꙓڇIeK TΕfa-y$RHdo:voG1XRʷ6 R ķ?} mqMuzϜzeEZHr0L#KFT?ߙ/w)6Eǣwς#eGACHEsm3 1)qd/5"%hTL.tdeHL@G+,lduTα5Z@Uש%z`r)7r;ת[Avq2;PAT?rp aPuHg;sVOB7dnDZҵUf.&WO" FC7lx vSݺԚBզ|@"RJ*w=ȓ_kclfmAmכYotc* $vbվB Í"VrQ*-kj3qY<)03Jwܓ18^mb_S1ǯ,ϸzONw2dZshw g b 9C r2d2FbuC?I\= UkRH`$֡V PW4k'8ﭦ $sR%̤ Wu&)&[9{W=LC߾1Ŭ~ؔݫ|0 +GsZ|kZgU5+ޜOŕ_za4_UDm"2ۀ<>nKrs'<ڛX)L,jyŮz j|qb!f9'{(aԷ}iz-Gn|dr3d'#Zx4Ӡ6貄6?E[-8;NCcM]˲et$UITY6x]\&zQ!ȜDfzo̹p-4|N\ZFl45.(+TiКƛ/\RQa1:'Yl^?'ρT+ݣ/i'EFRh ?X*9]Sem;5aPgr13\W>_|q/:}J+Z΋N(.S 2Us^YUSz#G6p 2,RwNl5/.];m7ܲHӶ코|x)fqVc:Ϋsjb߭˾J_4Le^3kxќiWuL(ko$@ K '[~h^>w5e\u[Kd}wYDғ~1Xy迿=1]RSøTP}z;2! S8ٯD(~6c-}WUur-rr5`6e~IJ uM4z3i֔{>]7 嶺wL+[ V|'xU!qڋf*["ٖ)"77"8 vNM6&BNbo1RZYZ`6E϶vu>-5)G#~G?H7S}oo1gnQ찟_]S-Yc'7q̮,U2fHMkڧ WX v{(gʲXz̠#GrҺM7P(}׵s 2u?ob.9?AJn!(>tL64fP3f FfZ;{auk^ qu ~:J\_4ѠxߓX2Q|H_~D֘ӫ`U%ս'6m"}i"PgPM%m 0:>Bl)h\uaS^wG4ȆQZFf` c j#wY!рoJ`u[f! PkQIadAlw|6 !i  d.xZ{Zv1jx2Cw'k9z1'!䁋䋬0BH8Y2ΩbOh 4jں ܉7bU$iH4]#oqiU{aN)sޔ'ˊַ e[zdŷ;xCM5 ~zDml6{\AZ *Y=j:SeZIQc'xRA,O|`IgfNb#?4gqq·^M;O[bc e-ſ 9 8F'D.JS"X?omHQ3ؓ*0rV iweāQf(4L3k |i\]#W,]S^xz%KjTs'$J$?G">>&Q_uc ="q mA97M9 [/vh%rh]T1.0`^q9Za2΄ %N_CPxcqc2֗!z=u=_dB7`ظ@%i'K"A}/4|ˌ\l }ǥm$Rc .]lt/dc#Y~" T-VuĊа-DA KfGzb7JXoFZnszKòO'a¸3(,K^X~(GG)#H5dpr͗ƇsH>-1)ƿPJ)"DmzyNӃU773&"db!t4cIӥgmplN -;$tnyK XȻ?m;W5E%Nܤ+]Ϲ.3=`%P@t^<{ڍ ~:-< 6WQmaq+O.WDD @]1K+5j>oo_m&(0F3bpzo]H]M0†Rs942nlXe@&d)?2^!X}\$I eAfC&90aq}>?{«pܘz= uqd$al|(|Um˕Sr;6gH4,ZOf(4CT óOk aK`8H V%1.Q5.Q#<£Hr2RI w0Q(LZE FS?Yn88/OE7HxԹD,_1B~*&i9RD[/:IzHԤƪPFWΗw`%03s>$RjOk\@5yUvE2b]L(&WԤmyrƆ3#c9pYeeLz@dP!ВZz17‘`vG7ਸE/t顿B|KQ"[}țHjʴЫ%.U)pO*[v`ki68USnA@&U"!Z3[׻z<-V3oZXf%/`4kODX"ka#At G8$iKxvv_@;؆oe'+&Ai.o50 S|͉Jv_V4MT)WC*4WJ|͢D$pF/9nf| <޿ $ S]{ΖyP?sBzy> lEiڰw̑_,Su,l2 8z {[+Q l7=;X{;mKD Y巋XMVA֮yrmZ^,7pxL12H@BS"Ÿgڻ a8Uz~fʤ;Tw&"P*A z]BNx@)\ spvA5 uM4гlZiLu!HE_}A.!9sؓdCv_Ο?.Rw;&jW }"Ad:4t$P bb8iR]Lqq/մ=*d/}=2/|4ٮT]̔XF/_ι-خK,Y߸x.4^Zey_IzfCy R k=J2[ /*z< { ?K==%41R_%aum3aXPҴW!`$dE\1Ȗ6n5؝W6&XO/t9.&NlIɖ6͝{RΞnKՐOc賐2} R +k{)`= bXo~O\0Q w?w+lL\vGY8Ɓfj;BZL,4r01A\p.%!d?}>t{ 00Vi*T!v<]Mύ)SGLIшzI!'O\1 k Ц5Yf;{B>ܣf+lb"f͚仚,b**34%մ^$L`ەIaJHy `rj3RBA\An`@Jfp!q[ Ih͂%\"C|Ph,(O1٭0[d/n׆2H5U/N,XA@ nkR{c<x5MAb|k`y|βrQbXo!SJ ӛN1mqm̖/3!h'rTaÁ_"nw*&k][/u#z軝Rl2{g$F%-')E3 Jm@IE~Ќ< ˭y`:¡F9VL !cO@?`;zi˽4vT@2`~@:N \EC2؀9"=Ul:t%l4EݭJq( ͘\3{袢aZr8Vl. \ yR{jE3?W'[z 9ª~`G8P xW E/#j,%N_'zB/{@\wVz6^][քg]r"s]kx  egO*X 㗲F -cnNEE )7zPC|nCc*<`3,G( $2>:S *[QB0wfYubz@Le@pcm=Z\f_11-PtAU,  @\\4%9P#Rߥ̾z D!1zmw6N,7R9h~A72Gr?kܽk$*5&CVt̞fg% aD;m)=ZB#tS*w \lDY&GxN Tc-pbajp#Wȅϱ/MSI3oC7}"{R}J,6׆ɜ[Չ%cm:94>:ØbQ m_sÔn#qҷ23 Mo,qpVG"9+J\ /!=U?7y o~^"ͻZ~H27*:,#Bn*V9f1J߭0ԉE<Af* BТBpڻjl )Zo*ĶփW;9b~ĥ7`ZDNXrfL2}bPMm R';=ZpYH]/ޞr Pps>q4(fll)]3|?:¢%R6]l ^ge 1 VFݜ}f-1Qw^2 dyeu,kd:3=^U9H 5u]ȏj  2?(X({7 AE`ށ is`(;jas jg:S.Ĥ'iavk 241/8jt곃4W;o79OOxj5&1="ט,5U~\ù^ղܩ@:%01_30qAsB}&wgahe`9zp sĻɚIgl5WT.aAP~@QN\# ctN)g <:NdZySs*xث9{:\ XUegi.)㵰w\.x4a3L4 Q?v ;;h^hZT U/L7X al.:3k1TR%ֈȈ< 7"KO]h* DbZdhGAyO"Q2yyދ9A~d&asJq!"5LF&QN.'e,ީL!J' ]KDN7Fn>K{@9}!ոZ?ߢzJM63?+E3<?>S& oh9 Wo=4OOr }%94,& -ΖdPYZC:؂`A1@zofAQb.&BCU]}V,f!JlE; {D)"ߚ'7.f;xuș*-d깹.W7C~Q@rPz8!K_x0dN{x}ۇe3/r=G}Y <1omt^bčlVx`SBƆP=$3J{LI}>jJ5A-t-O* F2!v<FYˎ.Iۅ;Q l! $ىL?k:ځ·UZ*i{osIԃLQ/|n/M=+QFC_NvB}OJeR7r)Ye;7_PjrWuS[>v')GA jY$$4TR S۰*-ʫS%)ZF|O".X%&w{4+FI;x:9)+ |/:bA"Y0tUE_soH} (A@~遁q^/^qq1e JʷerpP ]]g# zhԠŞJ8rFH'JΡIçxB$T{0+icblc27[8Nt:nh~rrV;Hv!}/HLQ`4a(x@lz6 Їjn ]AZCX]`3X]@ HBHzi=ʪǼAK^&3wfU}pV3?0H &lsً{g,avM22ԀY2 Qrab%oF#FA Ow,h"x>\/|k-׾$JSV>`v>@~Fu?EEY|)p o'/jQ$gj~8.,kaiNZg)dłY}4 vD?8{RGYy/os^wJ1͏%fTY.m4Љd$&A}%rWW)>;R 4c=G8S6 E݅ՏYҾscHYU܄0&n8Ѳ[C>[TNLKzFPB4A *¾Z2+uPqS %Q="1&,B.[;dq6)eA ۹oڹ,(cD7jZKزشzK7[4I>KmE -U;|m7S`NC9m/ů`5#Y>G;a!tGɿ6zecyR#b~dro ._QdՏ \C@=\ԏmZ67Ϭ7:6AB7j?7Gկ S#@Mج:\Pլz?ǜu0tQɝfc~-ZY,eכ )~PQ^nGiѐ)l.~Ji/os;VL񈨓efVacMﾗF qHo|OW p Zбa.G'ټO-hЉsG^y272A uM9^a+tm4-:=_1j44͏N$3%SnN](Ll͛l?v;{L'~MϢa(TSNi>xn\?LU,*Խ_uxZ_YͶbZڬaGKʚR^鑸$aqr-U`~0Ӗn@ͩGxWfSVI(6  )IZ dV$y&zNI^t wp. Ƃ7[ YC;߅=zD|?LcqO鍭 ;j(o-EaeQ:k &ZT@1c%ӆq=!a2SϾWT ԋ:m\=G/[+ЄhR2DǛ@-ZJǭa\S=;$ ܛboo醆P9˄Aۼ)Iaɤ.)7A1؉fxmc6.~{LrZt{V\/A,h+p-H.X ۘC]BlYą{y][V8vM%K2J^` s"g0׊L,y&=}=Qv/,"e t֒88u<&KD:NH3rI hO}*oe^W#ݿ;-6d[U%FVoLHN> LEױp]Õ߄a8|tşBrO'4) /^*y|%*,ЭW:/|8-TȽeVulatm‰ 0V4fּ,j!ˎqB]JFGm)3s:úPJ=2RZDHJ;kYlP#ytt !9ES[6ҍE'^zOmNyCkcorBK\ d9cP"4=|l'vk(SD!SZ__ IQ-qs|?m,B1ʕ7!*?#;/7l]ڋ>ٕ[hԻv~ݪ9#nfNjm{OAS y Yo%cð3J,,LD3~} w)ڢ5mCfJ3vwwȁ=^)Faߚv2Ijֽ{h8$HK (wɣ06PwQfjȏi>ɗD* 1;Xk=n&KSmvO{;qL5#dоіqX dJ=aS ;"Ğʇ!2u&)OE*PPGGwu椾y״q.fy(vqx4;?\+3lDY64J́3ۢs0i=3˱*cI?!́uSP)??L(y(,X], , +UCD-mα*;ZTțo6I[ԫ#12|nPu/-[g˚8:EhDlFFF̤%5]qb]ã3N7ʴ~q_LLQE?[0EKv=;'Vyء鋞|vO Q]mO}?xk/*(I!|N#nFב"o>  䊟;R%ŷ5Tש;etAiaa80e+iMu>=2S yӺ#^AXbe[8-`|l3ou.Hv1X1>gt? yV+I(8Zk"]ڛo:w .Zr*".+ĽlZhS$H]t6lwGz؈Jݴoc܉2Nxn;b[*JvVH.N{n7Fxh&ݬ`$#-+ [E.Kvl7^f ՟&v{9U$ؐ|?<%MnRȝ{iIH/m]=NuGQ#3+o\/tgN)݄sBbwY|K) 'Z.o_/i)h|j5i2};,@[EAe!s\]]ɕmqz1f^!

@ qJA7ᵷ6szNVȴ)0_;\kRTy ?z~)uroXvhK\gu$e2U15N :qf@,扺rע) U'xQ@I|q|%w8vM01 %cM(<<|ƥĨJSH~M\f ?x>'zG4:OZQ3/X8vZhGApox tRؑK~;X}K>n:-eN6v__aʡP朢07K|'\la|m25ӥ\VjG&iCk $zS~" Wh:TOnv@NS %.8\lJ1bO =wX-z{awWcrĥ3;(hGhÐzWMRVht5JIa 3hb$cLH"U#ϲ~vǑֻDU{m'{Ci"ԢQU±HgL]k6_NUvue( ^',8m=w&>Q#eM$I`Hh+S;v_ Fƃ l@T=r- Ec1( E? N$mӤ s^_`Ou?GTfIwR.g\IC| -WˀYLyJ)no[±fw@zSҩ~Kl|6,B]'R?^vײUhT`$Ծi))<@ll sB0p=h*V5BQYL̎N^$Ly0H>Vr@S3/K[ J7&wq?i(W3wI}CSd ȴؤ0wZnFEf/j@mZBOЁd'OnMtC~,]/gTN<H$`MT$ɑŐ IWq|PCdUKvǯDaq{qD#y˄E d)S L -v}4XUC|LA\?F]uX/f6 <;c(lV?9he?uBGm z]>9m?SWb["+! I⭊+ibYt>z_%vE6uAǰ{'CNʫN|n:Īnif+Xt@h+մ fr'4*o &o~:~5M~ 3D FXTL|gH| Wm̻++qKv2)y>~[bOd%G&#j$CF/7POgu" D<׉GujlcȌ9ļB!on-tkzcZ]H]TGp\`sbʜ,Aa p#[UM4v X!Ԭ~ռydS@P߂sLqI-UɾQĨamz $ˬ2}$>a+꬘c&_aϲcW7} ILO w?flT۫c,fE)S2] QY^H$F#qmYDCT?NCj,qS>p\Oŋ lWADD_w:~ص$c8/cѳ";PeOEJfL^|GaV Z-o\S9;<7ڎь9 N}]VU u\Dn\4(4~Y%ل"~ y1O?*K wM#~l9'ie{7#hh;wδ$A+{Ùˌ8:'x#c U{q敬h&<՟YeIgՔ;,ȯ)Ѧ ;!jox{n p1 ri)3**6DkWK\SSvQL St' S0нx)бJS6xMDdqV Mg[>y}:\MCsK:DJ$Y@{zq? 2^T<Z#ʛĤfcs(2$Ԋ5Uw?tb"NEف 2k0",S5m4e0GdUɼ x4a^U8YQ16ϵ5Oj n%V{JFΩaF۵S q1 (DC8j" y6?HI[6c/oIdMP⑋+0 PPOIzq0v\3▛;U"#+t;f"z%j>_GoPEs讌+ r<tLb3M&'Σ0sa)XiQ rx.p7/_8:UӪTTܫ}4/_#,SNp6j 8WHfyΌd_ #6"-΄µ3WVl77 rC}Ti`v?83^m-@6@=?۪+Bzxhu9W(UWu?C^p^mO Tus=7@;膊2'*?ƙ9^#Da3Ol#Ȉ\ >8Z M#mw s 0qr`eB6`M bw@#i]ߘ>j)pȼ!Gyr=Hw&/"#gwtG KKğ6*YsD~޻@M }ڃ(Ͼ6JȂ0V "+mLDVELZztƗ *܈}`/O=q"-9GO딲 s0"J8SF < *-۫YjwZk c)ώ;j "eX-SFۅf}M 3lyO]c:%HW!)>SR9nuIoKY'bA=\Z|ĴԤ_a`vzsVu㿻Ni\s+JM2C>!6+9'd8wxÉ=ƨ_,oiPFClv p康`}NK/2>0^wBX ^˝In= G(vjc' `^ o0@7Ov>&;jP8hƥҍ!q@ 9EmPIGr'aΒQhɥ~&) yY 8[Gϛ64O/к ʅۀ5C QbFZ{3^c zwm釽ćB :W!gN`tw{`&M~Fm9v<^`Qrux*J< ezat L_Mf3pryU9f1Z Psx`S$c5VA`qJ9[2)2* &`" \CxN<3;5BZUPVE:sKGG  6@á~=q0m!}1u87iz3>ؕ۶Zy"B@ +5rMfsLaZj {E:rJpYA)q1 tK}5ٯNurt¯L*K˒ l|J%aѝX^{͕@ijJ;搉D/-k5xX%|GY!e]W6Bߧ>|CQ1[>|oɨ={zw%?QRpĽm IDe'ˆKÒߠ,^|oO~$OsvfssM1e 9'bTȱM1Rc$e}1/ $ ~e[f=^E3`9;(h'ZV0f&2>vw&nD 1+Gw"SR9 r}b[d~Im;&3R7_ 8w FGP(PhVDн $a:Ƞ׼"ceG1z,BL)Iqo AԈ#+CFFd3i30r.B'|`KvR:GqbD^eP6gNh~~KTL: Ѧ^JuacM-QJ9CpD\zTa:vCRPd5 u⋌ɪ߲"gh$=V^c݊J2/E6jt7ܖsrS1fRG/L kfP[Nypֵotҝe[yOe OTơm/;zHŭ&O+-1wJ|,|HgA_A9̉31 kø!4͎}bP/:>Wbܝ>QWbq}"ja6i;miB ܋Z!~훲u1~x'faL;5Lz*~)/׋Vϥ ;M@QG]<[w824Sittd VLV2#+繡8;vF)JCF#L瓹Z4}n"OlsA C)8v&hV,vMo緫$t'^_b=Jl,D`1,[UWNh;x*"߹Bqh }5fb{ L[&YSAΜ 9# Yd 0p0ɷ|)[2=Ü!O}>HGu#F~3[s8sz#Qsc>tڙ¹03&n8ޮPTـ;JVlW"2raպ󓡒~OE78dfjuoFR9FVow_hP7TٽkWIAҁ+Хqma9p$1 _cKڇY6z- Ojeeɟsg@zҚ'i 2*M ^X[WC&Z :n$nt\KkUg#Lf)=cs\sH+2摧qBx|.᫔YRlXxZZu憅g+e[T / H?VOκ%;wK."%Q%pt tkdb^8 ML7PVBDSJ*xŷ_%\Qx)ll 1^/Y)3u2<e-0Fhǟf]=݊JpQWy7QCkmCCÒm 얄 Mb~mʩo1Xtºq>],ۡ\0؈.M K6Pi! ՙ;kWEawH\~vLOerHtvc?aF|4֓7ծ!kᓿ^Sx+`A{! ÏCsWB޾";O&bφz./;Swe7RN`mݏm[uH'K 2^-j_,LC_96Uts/T40፸|p{nxyeECd!#LI."oXBVվTτxO瀕DƳ榯1*PxUs1a5 *"9XӄGQE ANrAx.tw3|/:ŔynN'^@,>9i4 2#55F];vXH ϮF\~߾v8~gYzP'E˙T*;\\7ND,==C.4}}~oXcttǃѷ4)@A(!Ƶ&=9O_j!l>)vz0uqc1{őwG9c&I~%s~'ir-SLUh~bLEG]3&$?S.ʺD1huQ!M:vwsG H=bCXxYĠx.{ȼ?1I\m>0,̼~T%It08:x.2đ6326m=L)КC(x*ľ Jy) D^.k7vڔooH!kZBiI~mE4uHL[3mQë1c'!OQG=4Vv/yiwLj ֞|$?Hg0ph43FB'[j1<Pu>wqHQaFPaL1H7vCxkU Gݙg Ҁ-! HһW_գKN[ Z9Lly, ^|p q\'\] 6}+qvݵS65.d7(i<}w @뚧`wȝ?!Pf.FVGзW8.}uVPB2.J&>"^&R!iü`{_#};Tbh+g)-iweeh+[+Ҕb}_l2/`vtu^k pfĜ$R뫩qrM/k@|]0 b*9aaf3](EIcIN.tVE:r] g-;L&hxEyډ =|ْG9s?R`C"r1yƉ)_eRwR(r+{+)@Fe1l= bC0]RyNc[n^WdP'mZh.@OW[-/kȪ'4 !3 yb9wzrұIh9B8z.Mj~j6. &m7{Q>8Ȃie['Z@}w~ PXQ=gϏ''|I7~‘˒qAQOeIT4K$V ED'~EYfx [s&L)nХEǕт2:A>0#K\?ء  j_o3 WDi m>\(_8Q6>f%+Nyz`CCFak>lS_a&2@'( zG/ML$o`VRvL^X7?x-5 (@G˵8)k1H|Ih }"$].>12e P6ε'HxW$u %U<'oW>%|3; up !p'U˼iU g Kv &@=PjDVM&׻VY F+3-Ȕ1~ twj>H+3>=>K,xo֛FSYI!ǒOsENw8wYT"aF;*d"aT* XJcW\SL`O)aU`>BlXl7:VLb\|,QlDZKPvHK!`!x 0;rS}~eIDtݗ\O'mE?5GS[l޴̀ v"ߡMG@kEޞ!{>3h-;{[8ƛ]Cְ٩[@_jםI,耭x"y"t휯cڱLǓ GG׆&w$-`ι?=z[Eh OTP~?!.\}K+}ۋs Tհh(UP {"Wr`x#辮k 8/tU:VyG։ IQҝ۠`TJtr}j>E+e'<>a 9ah%|3k=<$~e[tӕV,L "(贁Cs/$98n `+XZQYylJR=[xk$tq$Nb,(@y.?AxTn]LJ+ƹwq5ف |J1 m1 t P0ߎ-߹ ق/"i%`$=ތ.T$8GIRS{IK7: }+@AOjz7v-0}w( n=K~X]]WF-=5 Z`.97ZM?yɡ"`77 9Hbx Q,b)4#iD@f Uri0 & ZyܾL(5M _5h|MЀH׿zNYE>ɶ Q'Fz͉n$ү~%XI4z| i[uG6{^^[@r*ZέNTcYLe~D4Ј7Wd \彉S޴W;l{ahƑρlCHؾGq5صqG[+H-N[O}Ta|@NMvU _P!g0!'_^ "~MyAh0?$ЗB!bX%QXdqeg_f`P|e=1$pi&rCsmXaӉ}cY3i(XZƜ l6JdETZd"|Y=楔mpbNDc'CatơP\1<@BOA Q-G4*ٞFs*=.;ChĀ` %֠n~omK2@z{[Ɉ@&ϹXL ֈM\ k.&׺ ui_ݭoe*rY(WjU7GEq!I/^X׽qtv|jc'E!sw4@Ҏ?8 y"fw=Z=| ʞYȩfko]$Ol%gllDZ+h0MW9j0?,q =wWM+Hԧ8@lf;ZEΌC4,HS*HAEێ(N_ DFƶ^^JM_V(V +%-Y؈5ЙCyQ,U_KK6YZ%CrFakbjJD!lL(Ġr֊JE(G;4_B_=85CF܊eHٵ`uMO-B xF<ɹ)!RJV*?'4a/.-i"w +96!b\,b~UtsJ=fD7FxoF~n0'J[^ ߗe- u1B%4̖ ZDq˲+%QRFÙɃkn>tgLAK5jFFksBY\,Q-?~cUIQ\NJ!jGwCaؾO3J3ɵx!TiX8h\سndS#ƙծTZQ_]{}>ܢCKj I57iM;V(Гwz^X%ocp2}4ռ2;!v(Z@o\кw1 Mw3~9{ &Vb:Q8(®yWcO q')Sc `jĹ,\B7VlV keCL-. 89k=rk{ГT~nDjTk+w>ƙ`aMl/ޞ4fF F ?;M(.bj{(OwbOUPح\^ p ZD"kZ|ĶRo6t ʎ VAA[a(X+G6ٕ_yXN%롯'IazrV\#ڀ%whidn~G ˌ,ȼ7?N+D֟ !ZUo?;CE Ǹd_mC`\紲?}gBC('oT%Mqi1 LַaH|Cݗ>:^${M&Nt cnV_^Q݌FHAU2p~8:wN\м`Cǃc~  pEk|3pp m=|h?x6jbu5ʌ1 BlһGo֍3|*2+8 l tt#/Ip(f=~?E{Ov7CpNRϙW@`6cqspގyc 턷J`M4si(X:xivUbZvϴ,~Jk`,l|`<+k X{i,O(Jej97=!J˝Vʴ^ N~[M{N-(\ }&Buk:%5)]v&N÷0,fTfΣ ) [p]E*SU)^Ƹ,B+?x X|حd(r c%[/jX%J/۲:=5Io(p}aw2t.M> {t(wzrܷퟎzkzwV xg-bGfUO7U2EE%֩#/pCֹ]$Jl4T^tи)q=b*nW9sͳ}um]>FU3q$uyEM d+&f4U2:b~ _з)Lh5Uc !Wb2_6#uDMrzds453!p?+PxufTRFP\N{ÉkН@YO哣sY`w-9(nD?"@ihObj#M-z|kp֓bs.xZ2CA6i oʄs܅yJ1(2\\ۥ+3;?TbY\5y87J>m.4#!yl) Y>Lwmh]mumtb>)@jqwʑB#hWQh!qNe~"Oiq= MπϦjMoǥRNV rߩ~=lģVufK2>Y+^tf7ooZSٶ^okC<954a#Y!p 5z.9cTڱmc-%goռѴ A{V9C-:Y ÐO?CrĀ.?P,kd6L&g_3qJukӘtzulHMeI;me @">|Wkv1.g[[95NV{*UKĈd<0gcԦ~ɣgsTAqjVXLmo@}_7~)j^ZjZ;;JEhv쁖^åcASӘ\ _}82g>X~VC&@tDp#Χ ߃^ OD\^ |K1).)(P* )%_^܂Q=aGo;X{bgﾣz&떂ysɤc8b ) ܯw# O0VJ%E:ōM 3~]lȒy'YpIb0sPg%aN<{*[A_W26f;1Vd $@%e6\%HRմC._b5^9gW9S3W4®=,m_KBdǑ㗭s"G`hDCt]d=X5>l=Vc1S'T̠T2:]ZG^:b-5N(1PonlivUr2pQPRhq?q[C":!Ah9ML1\B^q5w%e 0[ӝH(Ndc*_d‰c}y$r^fQ:_W.1)}0a1BR;z!z+?Щ `Z{s@mП' kM)[B-Q%ǜ*Ur*."ԕ띬fBdؒ [ :7ʥ0884x-e2>;3u0gluFeHe9UG 4 2a5OnM+rEgI+AxEorǽ`Ō>T<=DGxZ#g^%ӀLYZ)~ U8 pHQ+7I|hvURY\qؐGJ*BYn|1<:7fw {԰LB \eݽ%)>~ dVϨ(4+44 V'[MӗKJϐ3G% 6HU// UNdB{H| $1l:mC[@lY@ *ߚ>a陋 "QdiTm븶#$eb[ƖF'72;FB`ENMʥrfB'~ ~&p9MrY鎶+a*PQ!GEc(l=iH~]U/VҪ`TJY*GRBVG=3tJ}+>`[.OVwIt0^Y>F#B5^|`,s54"}(sc-m2I~ZU!GL%k ' TJ%N k'W<:nRSZ^d`͋Ews3"Ag8?ݘ(["`,~2Ӂiڤ8l9w.0A x\tEk6z2;ǣ/΋]5Z[XD0Rk<5I RI='zꃼ`=!/fd+۝~_*j+;AЙۥ3J Z)mr" Aq&S#9i[Zm)[R Bs#Qw>qBPjҦ'p`yA7vq^L׈ӡGfjhUĢiO{{1T,;\GØ\u,9*5WX!{'O=?LiJ?(YHY 2I"5T|џ7k4Zswfv}пq*azMh 6Y>T]SKO6T]xr:&;$r>čHeǎLcShֹnBR Խq{O/}h&BC$nJҫ!}-X~Ē"](-I 2i L[zdO<ty$ lG3{u-~\׿S4-Z'blhx/W;> \Qe\&!][*dWl}AQiQ-'c>bg;.0Y'*L#W?zFe"j)k-uUf`m+;^2Sh Sq1۵[]04Wӵ`X $`:Bn)fQjfq^@$`2jV3wy4 +2SP+;c2r(|1HItlR@\M)?ͺ:]\9̐a1nY+vdESZ+AD5!&r^p&1;Y7vzk[L?P3G铝]Y#xf5wgd`?f2_BIHxk }'GSkY䰩uЃ*3TN([ӈ4Ak !u9͗i[<tcžqk^"L<y[ˑ+!Vs G؂+I${PCkȭ1f+vM܉wNOr+ejds6Z͠=I@AՒh!,vW2j|p$3Jg_[ 4?2#\^Z5_bHOJ1a(ڛIg_mG}faHkk':YiLt`"] x91J悔s[d#G!Bjkod,UT"I~֡8%fY];:[INIaHyks34567DI ?y).,EQ. R< uF?لQ_SYx2vca'ʿ_8K'PCCI9PdFܑO\t_,VB7E敏\'eʐF>#`=6T`/d"Ŵ֨%4"=iž \+`y( ko {V/^̘ L2XG皽bͥjrK7hdy8IƔؼqwX ^DVOn˵y< ~XV 6#%A&Uiz} hw.dڤCWԭ8"$:=)BH}0 Ai^G0Tc#|r!s׀1V'{U4#{[MHda ^.! -vRWeg U^̳ܼ#4wZo2Bt %0T_,K4djP$&7Hp&R^m`MZq"ÿ=0ֱ:w-H`VĨ#+/9nqK FYo,V.r}-Qql*ׁ XD/=ewt-t|4Ea&!Ն#+KYj_ߋE`87'aJ%q%P.`d*5.4*qu(XR4ت6-uA6RPmn=ru4#ʍ2`+ue"4)?3+B)WI|T j.![{fP_x3"ב*=V;ݤZ]#~[IMS0Lb`5C|7;ϰZu(!yWa;(Jgg9MyrI"'۫S7aY}ۗo7l@'đ8]P5fS`qV=;Aii Y)|cѣԵ`/5Y&9YwYtQAvVU OXrn("tMRPd`anU\ƃ;4OPC:fcZyYj+Jw\F𗷦i{0Fēye r*`9]Խ 8v:?;%tGqZwI5a2p)c⮝}9ÉG'5NVvWH'%DDr$w@Qh~\-5%9.ڤ6;cIp?c:bf1+SN%ܭ8ʕ{s ʝYfv`<`yE+u&RlRXX;n7 |ŹxE i`1iu uSV51|c%@IJ{4%^ԏ.QEJ8%,vjΆgRd ي^rҞA R¸m8:\Q7[Q9.e/17Uـ}8`4pl: t^6{ 7?.I{R30赞'1簴B*D#v5VVL_N&7O$v8Q=PA >["`AN3m 0U / ՘wDR^h[ H߶puI9?fNC-ǵkdjY݁唨Wb[2D qY%|c87rd!` E"߲CB&(8إRëۋ^Yc* !p(,A)Sٖ?¥i&u]!_Z$U7Ҟ&HI϶~V[b]EBsB.84΄WgLRf!Ό_LC%%PNUr+R#z/hiJ34qG-Kp[Y?0+[߸v<˺B;ڌS٧n Mzzki(O!.#4#nTR- #7^[x'-"U ݡE?r(gvm3IVSqR>0}}@RNs[7a߅f? r||i6DpO@ 1O^/)PTiC&qO[}[h}$Yg35L͹9qP8YV)[W6RMĤ:C<uw)q,W--v#XiL"'3S:Ɓrݜ|gF&JI#=W(sgnĔDP<~ˡc~"gv^Ctu\J9%ᇀ3hdM &3w&Q]+\okSz6n_#+z9I"8A4p ߮dd{s ӌ6IIVz34I-G䈘 60ƶ YX1nU>QL o9XI*C>SlGK8Z 드$*E#Ǭuy~"噉-A-̱X噩Nq 8N õ ]@>P& "Oׅm"o썸l]DkM~HMV*;Uw'7 Ȥ8?<)q7ޛ o `z_@Psb#.7-ZF>nYʣPi'L @h raV5; gTm8X3p+k # 2K^8".h2ݴara <zKQPqMDUQ:^w/̯5,ttO#(_dh:!/r[oo%3PƦZ%?_t_g"|z,NkSŀ#X6ZR>-%fĿsy/AsI`KYU]LOBe:%t]EE#ѻ!ę]!8j4xlr7;[ѳvLe {fHNTz/Uu'c0.'xz ΋Mo7g*\[̴ x'D/5/q"k' < eHq՞XϞkp{yMjsDc[9{΋%>>d&"da%* %JGPjy G蠩L(MExPn@ xEr#XaUZ|^1Hd{C&7s,Rx^ֽ@ŀ.<ܢꓵ/|QO͒] ݆#4\ȂVy?Gsl:8e˓6$VUJ6{Lp\( rݟp0aRe`|/[h$A"S-\ |~-z=6:FXx]5QPȹ߭0}Y 9U#z@{83nOcz9=Fb%y:=2@s$afq8š,4lC.L~.); 3j&VPGI[|)85YB'DYJ]ؽ|۳ AH QQh6 ɟ%ΨHmlp~K'4N/)@pȆFT(a1m3 8IۍeKGA/`"11;Z1  7޻p)n84 Vb`_*croAZ1AU&cEӂҩe2/"Ǐ׬sp6BIKƿ12B (;}#qwfŌlcta͒8ڦ\i:i9| iZ1S3uKj0;w\^SGri>M9sJԽ!X6/.N(=`jx3<4b $ཆBIJ{oz1[4x(WjJ+-R/TT4*f"D`?3\v=)_d_i 7Dvozi>cp*h?%|({ȉG>&Tn;7w;&pIðo)'ܙz"uHA-4hedI/1+1*;-f[a8 WZq~?nH&H~I\qӓ|>x Qݬ>Fw77zU 푾|o5V 2^*6ts:~ۥUʳ^q nʻ7[<!]%jJtq cݫxNyfxQ U琧| f4 VoEb a1k6aӤ&J-*l$ "KLߙ,ErmFL9j^n[W fwKշ.oA *_ЙsLcy"W ,LD.k>P;x]v!j\:huG,\LwnN|SYw3?YP<7oYeDn zиAl۳aaBva !a_M64|04KrU"ߺ䑸{D<MPeZ,~}=];/E3f %U;k4 pٖ6`'d=1\4ԟ;5s Z*@Ϗ)=ߎIXxʈ@MViPzۭ]_ȲowRqll;ZFP]TgPp\U% I2v(9> ċ,l W< gVp*GS1X #/fIK&pЗ:}r%M+]p*[W#/3"F Y6v plVq373K=muay.%7V\HbB&)*Xu &urL{0zh3ޛ]R{ч< }TZ/s6*mu^+?lHfYqrBYGe[=*ˑ1o.v/ .qPޯzB1V[f6M%J8ADef3tb% _P'b7Qfu$X'LJӮΧEwOn3fG.EyL鎕Fž+ \HHuHå kBm0xZqk  3l PaG i]Ԅv#J/S#2Ff7GgnqSvRg^ :_\5y3&ҧȠmP Nb^F~tY%J0"9nau kjii(&MKxCy=AȘ~V{دIׁثɣoPtĕ.ِ-:ې`r!LZpW";*өe,#İ=߾a0d?2;u a!`expl]ErH We"7ޱ) ҈[5L_ݕ6a+r>n-Ft IU*),\ M7}Q*,>Ӫxx<;H|1ggE b-e8`K)q]uš-qjCkbfb-P ]Wf1yE`(]gď$zcY1ӗ#.m~,ܶK*Z,ZC.(\=@b*"ElÐ\I ˮ$[O l*!Iƥ%}Hb~j$7z ]flX AIf\_T5@!KPIفNRAXfMg5?F[(4VGaY(N#-?c4HYb0p x}6 vʣB kF~WmU/l'zW Vu#Q<80G<"7_ . 7s~&# e@r)!n(uXQIDvb2%P{EίE0+dd(Qr\u$"yG2 OLKX҃{XɣN#Y'@#GdB\qi硭T1fQ =j0o`)-eV&8V^9:e/3"lrb]\&?… ɴwbbf`6NʓMY( [ΚȄ^6tϯ%l ƎWJ <[f KsO fC5'l!lIQnC}r"js_kyM[yx`r^]:"1է j7oͲ~*Mvf\oںŽp{3c&6&H2PѽoS||y}(Dt[pb`9ՄLJzt+#e$璼5zdqn;l,u`iޏG:Ÿ}xRtwՈfɞ١&-)χ0hO , b%5k+M{MOh˙M@,v}Mz{Ynt>ˈ-OaSm6']*uN"(R_O9KPQjOR-i3]47+U5}Fx;BT"Q:0mCN'B'%踦} 30ncGi}u(/9{zsYwZ)mn8L/PՒ>[`~q%p #4UK,z\_5t§Ujy43EHUtػ~xBPU̪h">J NPKu֏ht,{˥ŒpuOk 6s 6+#9 wa5@ *튷iJwziN#[Rdqt.C'9FXe>xẗxlܻ z6&^ח1SURoUN܉UСz {ʉ]R:M&^zMC5Ѧ-dmJeSD&G5,4i1Tudr4 q>j%urwjtX5fBl9xyjG'{!-\ 9]s浚#d, ;Hӎzs c̛J=H0j{f]^^dUV,Mu5)A~͐k*(`+i:l xaLBEN8 lZLEJu<-i)$K (\d}ʼny_7Y狪ga> b *slcyfށ殌I%y~9 =zT|H͟9gRl1+ :M8ƹ`xtꮄK^A&жx>/n= ]ïKY"V}5^'D`[TshƝ64;@/!>^ 9f k12d\<!&e ¢ˁ7ݮEW.\ . "WL4ЪB* rMۓ<BW0~>1G>P2RPs(VS'>?(I_&$$VEV\ & wנ]/Q|olIZO͓62I_ImBx\Az7L X^/(nȠHXaMJ0/PѦ<,*p^|U4WcW &hAAd?@sl'jcQXb˟Ȑ@ZBq4֟qdk|8~:(Ը%]zJQ s1rwAmQdWf^DYT!8 %/ĪEwtU0K?^JDgc/'(Zïu [gNyO3@G[A(7 ]21cb>gjÞ GG31xf;o qjEK^IE.VNvX}I|uAW[YZW[{䦍gM4 æ?KTDy U4ޫ\ _~&h?G'>9(?_aWiIbTΞn |GG oqd@}u^!m/|fTYDs2zT v *<ϕSlS\Ǩ>a:bq ƍk[<gإ3M\ -k?fU4r 0e& 0CɛІmB3R!{;e=ይ.g:.åB*Qefk"}P=?_*% {؅q"BO ټ| @@Dbq.ޏx?$+àkeYx"r{v7kp%suCӍMs 7k<8w)nx+աЕ AdC=.Fa_<єw؂\aY7i:⸺"(A,ǺpL 3eO>3+ )7e| ?WfA$sZ9V0PG JGc9g" L9(Ϛ(fPd芍rpb co/^vx8ly|"Ь~)qf +ޠ2ZHb p\tnC "*/1/1kKfRŜ 7+>1$|fEdrV$nԱA_~{*~oG ҢMp"·lH](!Ӈ; 9I u@1℘5^[D"kHHe"_[$>t#x9Nsw# =1^L,EQ t5 ǝ- Q9*o]zci 0Tyط2MKQ0˂H`y3iiݗFOLz*J!d%?S }hsVF* \ㅘae\SsrdXqlr7ô;X^vSy.pUi1C&m1OY~:cނ &hb=-W HE:W-W ՁZji 0݆C?5?POL'OY`ku\/ѝy~a|N+wcgi1,Oe1u_n?& *N1 UuIASf;AFAP% g;Z;!ztt*}3r0=?l=wӝ:~g`Ve)7H{ۯ0OP]Gk[/a儨ga <)Kzs+w9RKe s斌+@ȚU = jD\Q|zzXR%ͪEU-v>2-"4+Nr~lC%NOpLЌvΓX˨~" "O2B J¨D sсyMt{][{I򌋑ުlXLN`΍Q3>%vbWt6,5aBrfKkJrLGidWNMr2C(֔^=j2#]`q) quzXCw=r7c.yJ/s6Ksci-wĭǒsj7ݝK^_JI4QhH0-A^/~=fE_#r:Q<%F_ Z`QʹU3 fNh y4L_0Vm'Zp_E}w cxɂsEVKrLNz*#UG+y%{%rҌȄHt+@~i֓b߼rzP d ng?&cكsH6{5g hzP]&Ug,%Pq6qo JcƖ")P9"?F"q)?2ιI_A1nsj{I3-($7̘vJL ݺ?@x0~ lr9dӒχ}W{g]]ihHzGT9&qnӂ3+㩇wrjiؔI=Q]2iЉMݩ \ɗRnť0fMHJIGw+2I/y?j ?_@~򯐳FmWH_^-;\ZiϾ:A3HZ?J ke̕iAYD:ak9#PTI+~͍9 FIh#sk~/O;|PYId,Tq!eZmAP>%UPh-a!{Bd ~+׿Teb)z3ثwBf;B6R£< 8Q !  H|GZ@ahJPF))k]e@ c;46Fxv=LlV~s&Y9jp*rR *1o?[yN2|3;NyrYpL]/<ӢA}M}cӓ.w[*"_$I9R|pC䌏J" VIEw iHЁEϪՓPbEL{цU/Yʃ8POD-x5K7xVXGw-4yĠ/:Ö}&P7qM25!IuEV=D$!n ~6Wѐ6/Yo={ MDU@lL y?(8{bt*q84fy6 0U csf am @Y^ Aˡ<ǓCZ`Xe68ɑ.@ߞ]{Ux]P at2+DI,sVIIdHo_0a>ةa0\˕)G2W93E p[o0Qҡ-f-04Ǯ QT4&Wɪ*:uHLQvxz U-Okqv2'DZ`!eZ:_/AKLlrHbZ*&ŻekW̜{]H]f2(>ܔ AG`{M@.Φq6f)=KS,W @]6ND~(s9@:qbTƕM ɹ6d0QPB+d]  ;lJ#Ak>}3OP&N;/؆Zjsj}"~p+[%ZO[H<Җ~1 `="h9Xn}7`۷ JEʫ,[I P͇a`NkL 86yoC G=&WV")¬縲 @`YȬ*#Mc:SN.mBAXjL|9_y|Յ]Y"ja3Y΍vS~9]ޭ@)9oB"yVxX\ɐ ЀiTz,Wv>}2 'E avG5$v* ]eA~;8**`lz y}q؞iNIJ?ԍE1u{2F}`/ܸz5/Hk=eY)nԢ% "JKg ަPFC SHӠǎ2SlR\l 0S9ZAz+eNJmnPBYԊne͈) HPZ7iq&܀y1hbI2.f,6Uod9a.'bZiy]}&$ <8¾R8cYi̙xy#Jr%1 !$qd:I.}~*BS6EpY`] kO1NX/qCYCBn{yқ* rZ*m:;WO{FU>QYm լ(|.t>9d34. Ek'2bL"\-1~5(W>sz/[a)FOSǻ-xETGY9l#5᪢j=Q/zQIKmR~=XerI&"]:K_UL6mXh; o cΡnyieyrkz!B~ ( ߷#c :w {1hBB<{~|} xWQGω[R3qba_n*>X&c;[duFg.a)= Il?~}aWj)Lsdzħ {Xϡh.1h2=zyN!V!ƩZeMBG l Tx@RSw%ئ'z -D Z$ Ȧ=_ Z!w!܃dubfe + 3n/ikj.|\"fC@? "D6ޕgD֑A+8})^ҟ( NfEDBC =l׈5XK}zLs4 m?Bj ێg Xdwy*O4FuYb}K fu4d"XòϖKe}7C[|1{aUKm{9~^]Ye͈oK WN'{S㣏! GK}D¬\hzjlPwS2jID1m] X5|sUBs v@eV݄` ~dFY YZ