samba-test-4.19.8+git.430.a10fe64854c-150600.3.18.2<>, MhvTp9|`4UH*P`+w~FB2&-]KKvd(-M2O *8 o4w5AG%Arc&Ia˟Nɞ?{ !'yXi Y3@ IJF/WaSs+K!yL"1/779]Gz߹ Xd\ N0n8Iϕ8OLqȶ>@X?Hd ( 6 b -AX^h     *p 9"(:S8:\'9>':R'>&@5FDG\HIXY\8]p^#bWcdefluvwxyzDCsamba-test4.19.8+git.430.a10fe64854c150600.3.18.2Testing tools for Samba servers and clientssamba-test provides testing tools for both the server and client packages of Samba.hvTh01-armsrv3{SUSE Linux Enterprise 15SUSE LLC GPL-3.0-or-laterhttps://www.suse.com/Applications/Systemhttps://www.samba.org/linuxaarch64  AH Uс큤hvThvThvThvThvThvThvThvThvThvT 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-4.19.8+git.430.a10fe64854c-150600.3.18.2.src.rpmsamba-testsamba-test(aarch-64)@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    /sbin/ldconfig/sbin/ldconfigld-linux-aarch64.so.1()(64bit)ld-linux-aarch64.so.1(GLIBC_2.17)(64bit)libLIBWBCLIENT-OLD-samba4.so()(64bit)libLIBWBCLIENT-OLD-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libMESSAGING-SEND-samba4.so()(64bit)libMESSAGING-SEND-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libMESSAGING-samba4.so()(64bit)libMESSAGING-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libRPC-SERVER-LOOP-samba4.so()(64bit)libRPC-SERVER-LOOP-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libads-samba4.so()(64bit)libads-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libasn1util-samba4.so()(64bit)libasn1util-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libauth-samba4.so()(64bit)libauth-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libauthkrb5-samba4.so()(64bit)libauthkrb5-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libc.so.6(GLIBC_2.32)(64bit)libc.so.6(GLIBC_2.33)(64bit)libc.so.6(GLIBC_2.34)(64bit)libc.so.6(GLIBC_2.38)(64bit)libcli-cldap-samba4.so()(64bit)libcli-cldap-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libcli-ldap-common-samba4.so()(64bit)libcli-ldap-common-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libcli-ldap-samba4.so()(64bit)libcli-ldap-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libcli-nbt-samba4.so()(64bit)libcli-nbt-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libcli-smb-common-samba4.so()(64bit)libcli-smb-common-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libcliauth-samba4.so()(64bit)libcliauth-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libcluster-samba4.so()(64bit)libcluster-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libcmdline-contexts-samba4.so()(64bit)libcmdline-contexts-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libcmdline-samba4.so()(64bit)libcmdline-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libcom_err.so.2()(64bit)libcommon-auth-samba4.so()(64bit)libcommon-auth-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libdbwrap-samba4.so()(64bit)libdbwrap-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libdcerpc-binding.so.0()(64bit)libdcerpc-binding.so.0(DCERPC_BINDING_0.0.1)(64bit)libdcerpc-samba-samba4.so()(64bit)libdcerpc-samba-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libdcerpc-samba4.so()(64bit)libdcerpc-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libdcerpc-server-core.so.0()(64bit)libdcerpc-server-core.so.0(DCERPC_SERVER_CORE_0.0.1)(64bit)libdcerpc.so.0()(64bit)libdcerpc.so.0(DCERPC_0.0.1)(64bit)libdsdb-module-samba4.so()(64bit)libdsdb-module-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libevents-samba4.so()(64bit)libevents-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libflag-mapping-samba4.so()(64bit)libflag-mapping-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libgenrand-samba4.so()(64bit)libgenrand-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libgensec-samba4.so()(64bit)libgensec-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libgnutls.so.30()(64bit)libgnutls.so.30(GNUTLS_3_4)(64bit)libgnutls.so.30(GNUTLS_3_6_13)(64bit)libgnutls.so.30(GNUTLS_3_6_3)(64bit)libgse-samba4.so()(64bit)libgse-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libidmap-samba4.so()(64bit)libidmap-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libk5crypto.so.3()(64bit)libk5crypto.so.3(k5crypto_3_MIT)(64bit)libkrb5.so.3()(64bit)libkrb5.so.3(krb5_3_MIT)(64bit)libkrb5samba-samba4.so()(64bit)libkrb5samba-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libldb.so.2()(64bit)libldb.so.2(LDB_0.9.10)(64bit)libldb.so.2(LDB_0.9.15)(64bit)libldb.so.2(LDB_0.9.16)(64bit)libldb.so.2(LDB_1.1.14)(64bit)libldb.so.2(LDB_2.0.1)(64bit)libldb.so.2(LDB_2.8.0)(64bit)libldbsamba-samba4.so()(64bit)libldbsamba-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)liblibcli-lsa3-samba4.so()(64bit)liblibcli-lsa3-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)liblibcli-netlogon3-samba4.so()(64bit)liblibcli-netlogon3-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)liblibsmb-samba4.so()(64bit)liblibsmb-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libmsrpc3-samba4.so()(64bit)libmsrpc3-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libndr-krb5pac.so.0()(64bit)libndr-krb5pac.so.0(NDR_KRB5PAC_0.0.1)(64bit)libndr-nbt.so.0()(64bit)libndr-nbt.so.0(NDR_NBT_0.0.1)(64bit)libndr-samba-samba4.so()(64bit)libndr-samba-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libndr-samba4.so()(64bit)libndr-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libndr-standard.so.0()(64bit)libndr-standard.so.0(NDR_STANDARD_0.0.1)(64bit)libndr.so.3()(64bit)libndr.so.3(NDR_0.0.1)(64bit)libndr.so.3(NDR_0.0.3)(64bit)libndr.so.3(NDR_0.0.4)(64bit)libndr.so.3(NDR_0.0.8)(64bit)libndr.so.3(NDR_0.0.9)(64bit)libndr.so.3(NDR_0.2.0)(64bit)libndr.so.3(NDR_1.0.0)(64bit)libnetapi.so.1()(64bit)libnetapi.so.1(NETAPI_1.0.0)(64bit)libnetif-samba4.so()(64bit)libnetif-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libnss-info-samba4.so()(64bit)libnss-info-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libpopt.so.0()(64bit)libpopt.so.0(LIBPOPT_0)(64bit)libprinter-driver-samba4.so()(64bit)libprinter-driver-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libreadline.so.7()(64bit)libregistry-samba4.so()(64bit)libregistry-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libreplace-samba4.so()(64bit)libreplace-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsamba-credentials.so.1()(64bit)libsamba-credentials.so.1(SAMBA_CREDENTIALS_1.0.0)(64bit)libsamba-debug-samba4.so()(64bit)libsamba-debug-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsamba-errors.so.1()(64bit)libsamba-errors.so.1(SAMBA_ERRORS_1.0.0)(64bit)libsamba-hostconfig.so.0()(64bit)libsamba-hostconfig.so.0(SAMBA_HOSTCONFIG_0.0.1)(64bit)libsamba-modules-samba4.so()(64bit)libsamba-modules-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsamba-net.cpython-36m-aarch64-linux-gnu-samba4.so()(64bit)libsamba-net.cpython-36m-aarch64-linux-gnu-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsamba-passdb.so.0()(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.2.0)(64bit)libsamba-security-samba4.so()(64bit)libsamba-security-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsamba-sockets-samba4.so()(64bit)libsamba-sockets-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsamba-util.so.0()(64bit)libsamba-util.so.0(SAMBA_UTIL_0.0.1)(64bit)libsamba3-util-samba4.so()(64bit)libsamba3-util-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsamdb-common-samba4.so()(64bit)libsamdb-common-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsamdb.so.0()(64bit)libsamdb.so.0(SAMDB_0.0.1)(64bit)libsecrets3-samba4.so()(64bit)libsecrets3-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libserver-id-db-samba4.so()(64bit)libserver-id-db-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libshares-samba4.so()(64bit)libshares-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsmbclient-raw-samba4.so()(64bit)libsmbclient-raw-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsmbclient.so.0()(64bit)libsmbclient.so.0(SMBCLIENT_0.1.0)(64bit)libsmbclient.so.0(SMBCLIENT_0.3.1)(64bit)libsmbclient.so.0(SMBCLIENT_0.3.2)(64bit)libsmbclient.so.0(SMBCLIENT_0.3.3)(64bit)libsmbclient.so.0(SMBCLIENT_0.5.0)(64bit)libsmbclient.so.0(SMBCLIENT_0.6.0)(64bit)libsmbconf.so.0()(64bit)libsmbconf.so.0(SMBCONF_0.0.1)(64bit)libsmbd-shim-samba4.so()(64bit)libsmbd-shim-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsmbpasswdparser-samba4.so()(64bit)libsmbpasswdparser-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsocket-blocking-samba4.so()(64bit)libsocket-blocking-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsys-rw-samba4.so()(64bit)libsys-rw-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libtalloc.so.2()(64bit)libtalloc.so.2(TALLOC_2.0.2)(64bit)libtalloc.so.2(TALLOC_2.0.8)(64bit)libtalloc.so.2(TALLOC_2.1.0)(64bit)libtalloc.so.2(TALLOC_2.3.5)(64bit)libtdb-wrap-samba4.so()(64bit)libtdb-wrap-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libtdb.so.1()(64bit)libtdb.so.1(TDB_1.2.1)(64bit)libtevent-util.so.0()(64bit)libtevent-util.so.0(TEVENT_UTIL_0.0.1)(64bit)libtevent.so.0()(64bit)libtevent.so.0(TEVENT_0.11.0)(64bit)libtevent.so.0(TEVENT_0.12.0)(64bit)libtevent.so.0(TEVENT_0.13.0)(64bit)libtevent.so.0(TEVENT_0.15.0)(64bit)libtevent.so.0(TEVENT_0.9.12)(64bit)libtevent.so.0(TEVENT_0.9.13)(64bit)libtevent.so.0(TEVENT_0.9.16)(64bit)libtevent.so.0(TEVENT_0.9.20)(64bit)libtevent.so.0(TEVENT_0.9.26)(64bit)libtevent.so.0(TEVENT_0.9.30)(64bit)libtevent.so.0(TEVENT_0.9.31)(64bit)libtevent.so.0(TEVENT_0.9.36)(64bit)libtevent.so.0(TEVENT_0.9.37)(64bit)libtevent.so.0(TEVENT_0.9.9)(64bit)libtime-basic-samba4.so()(64bit)libtime-basic-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libtorture-samba4.so()(64bit)libtorture-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libtrusts-util-samba4.so()(64bit)libtrusts-util-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libutil-reg-samba4.so()(64bit)libutil-reg-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libutil-tdb-samba4.so()(64bit)libutil-tdb-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libwbclient.so.0()(64bit)libwbclient.so.0(WBCLIENT_0.10)(64bit)libwbclient.so.0(WBCLIENT_0.9)(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)sambasamba-winbind3.0.4-14.6.0-14.0-15.2-14.19.8+git.430.a10fe64854c4.19.8+git.430.a10fe64854c4.14.3hm@g`@gRgR@gMgp@fٝ@fxfteԔ@ee5@ede6`@e-%e'e%ascabrero@suse.denopower@suse.comscabrero@suse.denopower@suse.comnopower@suse.comnopower@suse.comddiss@suse.comscabrero@suse.denopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comdmulder@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comscabrero@suse.descabrero@suse.descabrero@suse.denopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comscabrero@suse.dedmulder@suse.comscabrero@suse.denopower@suse.comnopower@suse.comscabrero@suse.denopower@suse.comnopower@suse.comscabrero@suse.denopower@suse.comscabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comddiss@suse.comnopower@suse.comdmulder@suse.comdmulder@suse.comnopower@suse.comscabrero@suse.descabrero@suse.dedimstar@opensuse.orgscabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comnopower@suse.comnopower@suse.comscabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comnopower@suse.comscabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.denopower@suse.comscabrero@suse.deddiss@suse.comddiss@suse.comddiss@suse.comscabrero@suse.descabrero@suse.dedmulder@suse.comnopower@suse.comscabrero@suse.descabrero@suse.dedmulder@suse.comscabrero@suse.descabrero@suse.denopower@suse.comnopower@suse.comnopower@suse.comdmulder@suse.comscabrero@suse.denopower@suse.comddiss@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comscabrero@suse.denopower@suse.comnopower@suse.comjmcdonough@suse.comnopower@suse.comscabrero@suse.denopower@suse.comnopower@suse.comddiss@suse.comddiss@suse.comnopower@suse.comnopower@suse.comddiss@suse.comnopower@suse.comdmulder@suse.comdmulder@suse.comddiss@suse.comscabrero@suse.dedmulder@suse.comddiss@suse.comnopower@suse.comjengelh@inai.dedmulder@suse.comscabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comdmulder@suse.comdmulder@suse.comjmcdonough@suse.comdmulder@suse.comscabrero@suse.dedmulder@suse.comscabrero@suse.dedmulder@suse.comdmulder@suse.comvcizek@suse.comdmulder@suse.comdmulder@suse.comnopower@suse.comscabrero@suse.dejmcdonough@suse.comscabrero@suse.deaaptel@suse.comjengelh@inai.dedimstar@opensuse.orgdmulder@suse.comjmcdonough@suse.comdavid.mulder@suse.comjmcdonough@suse.comaaptel@suse.comdmulder@suse.comscabrero@suse.comscabrero@suse.comkukuk@suse.dedavid.mulder@suse.comscabrero@suse.comrbrown@suse.comdmulder@suse.comscabrero@suse.comdimstar@opensuse.orgscabrero@suse.comaaptel@suse.comnopower@suse.comnopower@suse.comaaptel@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comddiss@suse.comnopower@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comdmulder@suse.comnopower@suse.comjmcdonough@suse.comaaptel@suse.comkukuk@suse.comkukuk@suse.denopower@suse.comaaptel@suse.comdmulder@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comddiss@suse.comjmcdonough@suse.comddiss@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comjmcdonough@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comtchvatal@suse.comlmuelle@suse.comnopower@suse.comcrrodriguez@opensuse.orglmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comnoel.power@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comnopower@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.commpluskal@suse.comlmuelle@suse.comnopower@suse.deddiss@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.denopower@suse.delmuelle@suse.comnopower@suse.deddiss@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.com- Windows security hardening locks out schannel'ed netlogon dc calls like netr_DsRGetDCName; (bsc#1246431); (bso#15876).- Fix Samba printers reporting invalid sid during print jobs; (bsc#1234210); (bso#15792).- Fix crossing automounter mount points; (bsc#1215212); (bsc#1236803);- Update shipped /etc/samba/smb.conf to point to smb.conf man page;(bsc#1233880).- Update to 4.19.9 * libldb: performance issue with indexes (ldb 2.8.2 is already released); (bso#15590). * DH reconnect error handling can lead to stale sharemode entries; (bso#15624). * Incorrect FSCTL_QUERY_ALLOCATED_RANGES response when truncated; (bso#15699). * irpc_destructor may crash during shutdown; (bso#15280). * Compound SMB2 requests don't return NT_STATUS_NETWORK_SESSION_EXPIRED for all requests, confuses MacOSX clients; (bso#15696). * Crash when readlinkat fails; (bso#15700).- Adjust spec to split out rpcd_* binaries into a separate sub package; (bsc#1231414).- Incorrect FSCTL_QUERY_ALLOCATED_RANGES response when truncated; (bso#15699); (bsc#1229684). - Update to 4.19.8 * Invalid client warning about command line passwords; (bso#15671); * Version string is truncated in manpages; (bso#15672); * --version-* options are still not ergonomic, and they reject tilde characters; (bso#15673); * cmdline_burn does not always burn secrets; (bso#15674); * Samba doesn't parse SDDL found in defaultSecurityDescriptor in AD_DS_Classes_Windows_Server_v1903.ldf; (bso#15685); * We have added new options --vendor-name and --vendor-patch- revision arguments to ./configure to allow distributions and packagers to put their name in the Samba version string so that when debugging Samba the source of the binary is obvious; (bso#15654); * When claims enabled with heimdal kerberos, unable to log on to a Windows computer when user account need to change their own password; (bso#15655); * Fix clock skew error message and memory cache clock skew recovery; (bso#15676); * CTDB RADOS mutex helper misses namespace support; (bso#15665); * The images don't build after the git security release and CentOS 8 Stream is EOL; (bso#15660); * Fix unnecessary delays in CTDB while processing requests under high load; (bso#15678); * Dynamic DNS updates with the internal DNS are not working; (bso#13019); * s4:nbt_server: does not provide unexpected handling, so winbindd can't use nmb requests instead cldap; (bso#15620); * Panic in vfs_offload_token_db_fetch_fsp(); (bso#15664); * "client use kerberos" and --use-kerberos is ignored for the machine account; (bso#15666); * Regression DFS not working with widelinks = true; (bso#15435); * ntlm_auth make logs more consistent with length check; (bso#15677);- Fix a crash when joining offline and 'kerberos method' includes keytab; (bsc#1228732); - Fix reading the password from STDIN or environment vars if it was already given in the command line; (bsc#1228732);- Update to 4.19.7 * ldb qsort might r/w out of bounds with an intransitive compare function (ldb 2.8.1 is already released); (bso#15569). * Many qsort() comparison functions are non-transitive, which can lead to out-of-bounds access in some circumstances (ldb 2.8.1 is already released); (bso#15625). * Need to change gitlab-ci.yml tags in all branches to avoid CI bill; (bso#15638). * netr_LogonSamLogonEx returns NR_STATUS_ACCESS_DENIED with SysvolReady=0; (bso#14981). * Anonymous smb3 signing/encryption should be allowed (similar to Windows Server 2022); (bso#15412). * Panic in dreplsrv_op_pull_source_apply_changes_trigger; (bso#15573). * winbindd, net ads join and other things don't work on an ipv6 only host; (bso#15642). * Smbcacls incorrectly propagates inheritance with Inherit-Only flag; (bso#15636). * http library doesn't support 'chunked transfer encoding'; (bso#15611). - Update to 4.19.6 * fd_handle_destructor() panics within an smbd_smb2_close() if vfs_stat_fsp() fails in fd_close(); (bso#15527). * samba-gpupdate: Correctly implement site support; (bso#15588). * libgpo: Segfault in python bindings; (bso#15599). * Packet marshalling push support missing for CTDB_CONTROL_TCP_CLIENT_DISCONNECTED and CTDB_CONTROL_TCP_CLIENT_PASSED; (bso#15580).- Update to 4.19.5 * Windows 2016 fails to restore previous version of a file from a shadow_copy2 snapshot; (bso#13688). * Symlinks on AIX are broken in 4.19 (and a few version before that); (bso#15549). * Fake directory create times has no effect; (bso#12421). * ctime mixed up with mtime by smbd; (bso#15550). * samba-gpupdate --rsop fails if machine is not in a site; (bso#15548). * gpupdate: The root cert import when NDES is not available is broken; (bso#15557). * samba-gpupdate should print a useful message if cepces-submit can't be found; (bso#15552). * samba-gpupdate logging doesn't work; (bso#15558). * smbpasswd reset permissions only if not 0600; (bso#15555).- Remove -x from bash shebang update-apparmor-samba-profile; (bsc#1218431).- Update to 4.19.4 * net changesecretpw cannot set the machine account password if secrets.tdb is empty; (bso#13577). * For generating doc, take, if defined, env XML_CATALOG_FILES; (bso#15540). * Trivial C typo in nsswitch/winbind_nss_netbsd.c; (bso#15541). * vfs_linux_xfs is incorrectly named; (bso#15542). * systemd stumbled over copyright-message at smbd startup; (bso#15377). * Following intermediate abolute share-local symlinks is broken; (bso#15505). * ctdb RELEASE_IP causes a crash in release_ip if a connection to a non-public address disconnects first; (bso#15523). * shadow_copy2 broken when current fileset's directories are removed; (bso#15544). * smbd does not detect ctdb public ipv6 addresses for multichannel exclusion; (bso#15534). * 'force user = localunixuser' doesn't work if 'allow trusted domains = no' is set; (bso#15469). * smbget debug logging doesn't work; (bso#15525). * smget: username in the smburl and interactive password entry doesn't work; (bso#15532). * smbget auth function doesn't set values for password prompt correctly; (bso#15538). * Unable to copy and write files from clients to Ceph cluster via SMB Linux gateway with Ceph VFS module; (bso#15440). * Multichannel refresh network information; (bso#15547).- Update to 4.19.3 * sid_strings test broken by unix epoch > 1700000000; (bso#15520). * smbd crashes if asked to return full information on close of a stream handle with delete on close disposition set; (bso#15487). * smbd: fix close order of base_fsp and stream_fsp in smb_fname_fsp_destructor(); (bso#15521). * Improve logging for failover scenarios; (bso#15499). * Files without "read attributes" NFS4 ACL permission are not listed in directories; (bso#15093). * CVE-2018-14628 [SECURITY] Deleted Object tombstones visible in AD LDAP to normal users; (bso#13595). * Kerberos TGS-REQ with User2User does not work for normal accounts; (bso#15492). * vfs_gpfs stat calls fail due to file system permissions; (bso#15507). * Samba doesn't build with Python 3.12; (bso#15513).- packaging: samba-tool domain provision requires python3-Markdown; (bsc#1216519).- Update to 4.19.2 * Use-after-free in aio_del_req_from_fsp during smbd shutdown after failed IPC FSCTL_PIPE_TRANSCEIVE; (bso#15423). * clidfs.c do_connect() missing a "return" after a cli_shutdown() call; (bso#15426). * macOS mdfind returns only 50 results; (bso#15463). * GETREALFILENAME_CACHE can modify incoming new filename with previous cache entry value; (bso#15481). * libnss_winbind causes memory corruption since samba-4.18, impacts sendmail, zabbix, potentially more; (bso#15464). * ctdbd: setproctitle not initialized messages flooding logs; (bso#15479). * CVE-2023-5568 Heap buffer overflow with freshness tokens in the Heimdal KDC in Samba 4.19; (bso#15491). * The heimdal KDC doesn't detect s4u2self correctly when fast is in use; (bso#15477).- use systemd-logind rather than utmp for y2038 safety; (bsc#1216159).- CVE-2023-4091: samba: Client can truncate file with read-only permissions; (bsc#1215904); (bso#15439). - CVE-2023-42669: samba: rpcecho, enabled and running in AD DC, allows blocking sleep on request; (bso#1215905); (bso#15474). - CVE-2023-42670: samba: The procedure number is out of range when starting Active Directory Users and Computers; (bsc#1215906); (bso#15473). - CVE-2023-3961: samba: Unsanitized client pipe name passed to local_np_connect(); (bsc#1215907); (bso#15422). - CVE-2023-4154: samba: dirsync allows SYSTEM access with only "GUID_DRS_GET_CHANGES" right, not "GUID_DRS_GET_ALL_CHANGES; (bsc#1215908); (bso#15424).- Update to 4.19.0 * File doesn't show when user doesn't have permission if aio_pthread is loaded; (bso#15453). * ctdb_killtcp fails to work with --enable-pcap and libpcap ≥ 1.9.1; (bso#15451). * Logging to stdout/stderr with DEBUG_SYSLOG_FORMAT_ALWAYS can log to syslog; (bso#15460). * ‘samba-tool domain level raise’ fails unless given a URL; (bso#15458). * reply_sesssetup_and_X() can dereference uninitialized tmp pointer; (bso#15420). * missing return in reply_exit_done(); (bso#15430). * TREE_CONNECT without SETUP causes smbd to use uninitialized pointer; (bso#15432). * Avoid infinite loop in initial user sync with Azure AD Connect when synchronising a large Samba AD domain; (bso#15401). * Samba replication logs show (null) DN; (bso#15407). * 2-3min delays at reconnect with smb2_validate_sequence_number: bad message_id 2; (bso#15346). * DCERPC_PKT_CO_CANCEL and DCERPC_PKT_ORPHANED can't be parsed; (bso#15446). * CID 1539212 causes real issue when output contains only newlines; (bso#15438). * KDC encodes INT64 claims incorrectly; (bso#15452). * mdssvc: Do an early talloc_free() in _mdssvc_open(); (bso#15449). * Windows client join fails if a second container CN=System exists somewhere; (bso#9959). * regression DFS not working with widelinks = true; (bso#15435). * Heimdal fails to build on 32-bit FreeBSD; (bso#15443). * samba-tool ntacl get segfault if aio_pthread appended; (bso#15441). - Update to 4.18.6 * reply_sesssetup_and_X() can dereference uninitialized tmp pointer; (bso#15420); * Missing return in reply_exit_done(); (bso#15430); * post-exec password redaction for samba-tool is more reliable for fully random passwords as it no longer uses regular expressions containing the password value itself; (bso#15289); * Windows client join fails if a second container CN=System exists somewhere; (bso#9959); * Spotlight sometimes returns no results on latest macOS; (bso#15342); * Renaming results in NT_STATUS_SHARING_VIOLATION if previously attempted to remove the destination; (bso#15417); * Spotlight results return wrong date in result list; (bso#15427); * "net offlinejoin provision" does not work as non-root user; (bso#15414); * rpcserver no longer accepts double backslash in dfs pathname; (bso#15400); * cm_prepare_connection() calls close(fd) for the second time; (bso#15433); * 2-3min delays at reconnect with smb2_validate_sequence_number: bad message_id 2; (bso#15346); * samba-tool ntacl get segfault if aio_pthread appended; (bso#15441); * DCERPC_PKT_CO_CANCEL and DCERPC_PKT_ORPHANED can't be parsed; (bso#15446); * Python tarfile extraction needs change to avoid a warning (CVE-2007-4559 mitigation); (bso#15390); * Regression DFS not working with widelinks = true; (bso#15435); * mdssvc: Do an early talloc_free() in _mdssvc_open(); (bso#15449); - Update to 4.18.5 * CVE-2022-2127: lm_resp_len not checked properly in winbindd_pam_auth_crap_send; (bso#15072); (bsc#1213174). * CVE-2023-34966: Samba Spotlight mdssvc RPC Request Infinite Loop Denial-of-Service Vulnerability; (bso#15340); (bsc#1213173). * CVE-2023-34967: Samba Spotlight mdssvc RPC Request Type Confusion Denial-of-Service Vulnerability; (bso#15341); (bsc#1213172). * CVE-2023-34968: Spotlight server-side Share Path Disclosure; (bso#15388); (bsc#1213171). * CVE-2023-3347: Samba doesn't require SMB2+ signing if `server signing = mandatory` is set; (bso#15397); (bsc#1213170). * secure channel faulty since Windows 10/11 update 07/2023; (bso#15418); (bsc#1213384). - Update to 4.18.4 * Backport --pidl-developer fixes; (bso#15404). * Named crashes on DLZ zone update; (bso#14030). * smbcacls and smbcquotas do not check // before the server; (bso#2312). * cli_list loops 100% CPU against pre-lanman2 servers; (bso#15382). * smbclient leaks fds with showacls; (bso#15391). * smbd returns NOT_FOUND when creating files on a r/o filesystem; (bso#15402). * NSS_WRAPPER_HOSTNAME doesn't match NSS_WRAPPER_HOSTS entry and causes test timeouts; (bso#15355). * net ads lookup (with unspecified realm) fails; (bso#15384). * Register Samba processes with GPFS; (bso#15381). * Python tarfile extraction needs change to avoid a warning (CVE-2007-4559 mitigation); (bso#15390). * The winbind child segfaults when listing users with `winbind scan trusted domains = yes`; (bso#15398). * Remove comments about deprecated 'write cache size'; (bso#15383). * smbget memory leak if failed to download files recursively; (bso#15403). - Update to 4.18.3 * Symlinks to files can have random DOS mode information in a directory listing; (bso#15375). * vfs_fruit might cause a failing open for delete; (bso#15378). * winbind recurses into itself via rpcd_lsad; (bso#15361). * wbinfo -u fails on ad dc with >1000 users; (bso#15366). * DS ACEs might be inherited to unrelated object classes; (bso#15338). * a lot of messages: get_static_share_mode_data: get_static_share_mode_data_fn failed: NT_STATUS_NOT_FOUND; (bso#15362). * aes256 smb3 encryption algorithms are not allowed in smb3_sid_parse(); (bso#15374). * Setting veto files = /.*/ break listing directories; (bso#15360). * "samba-tool domain provision" does not run interactive mode if no arguments are given; (bso#15363). * dsgetdcname: assumes local system uses IPv4; (bso#15325). - Update to 4.18.2 * Log flood: smbd_calculate_access_mask_fsp: Access denied: message level should be lower; (bso#15302). * Floating point exception (FPE) via cli_pull_send at source3/libsmb/clireadwrite.c; (bso#15306). * test_tstream_more_tcp_user_timeout_spin fails intermittently on Rackspace GitLab runners; (bso#15328). * Reduce flapping of ridalloc test; (bso#15329). * large_ldap test is unreliable; (bso#15351). * New filename parser doesn't check veto files smb.conf parameter; (bso#15143). * mdssvc may crash when initializing; (bso#15354). * large directory optimization broken for non-lcomp path elements; (bso#15313). * streams_depot fails to create streams; (bso#15357). * shadow_copy2 and streams_depot don't play well together; (bso#15358). * Flapping tests in samba_tool_drs_show_repl.py; (bso#15316). * winbindd idmap child contacts the domain controller without a need; (bso#15317). * idmap_autorid may fail to map sids of trusted domains for the first time; (bso#15318). * idmap_hash doesn't use ID_TYPE_BOTH for reverse mappings; (bso#15319). * net ads search -P doesn't work against servers in other domains; (bso#15323). * Temporary smbXsrv_tcon_global.tdb can't be parsed; (bso#15353). * Tests use depricated and removed methods like assertRegexpMatches; (bso#15343). - Update to 4.18.1 * CVE-2023-0225: AD DC "dnsHostname" attribute can be deleted by unprivileged authenticated users. (bso#15276);(bsc#1209483). * CVE-2023-0614: Access controlled AD LDAP attributes can be discovered (bso#15270); (bsc#1209485). * CVE-2023-0922: Samba AD DC admin tool samba-tool sends passwords in cleartext(bso#15315);(bsc#1209481). * ldb wildcard matching makes excessive allocations; (bso#15331). * large_ldap test is inefficient; (bso#15332). - Update to 4.18.0 * SMB server performance improvements * More succinct samba-tool error messages * Color output with samba-tool --color The NO_COLOR environment variable will disable colour output * New samba-tool dsacl subcommand for deleting ACEs * New wbinfo option --change-secret-at * Net option to change the NT ACL default location * Azure AD / Office365 synchronization improvements- Fix DFS not working with widelinks enabled; (bsc#1213607); (bso#15435);- Move libcluster-samba4.so from samba-libs to samba-client-libs; (bsc#1213940);- net ads lookup with unspecified realm fails; (bso#15384); (bsc#1213826);- secure channel faulty since Windows 10/11 update 07/2023; (bso#15418); (bsc#1213384).- CVE-2022-2127: lm_resp_len not checked properly in winbindd_pam_auth_crap_send; (bso#15072); (bsc#1213174). - CVE-2023-34966: Samba Spotlight mdssvc RPC Request Infinite Loop Denial-of-Service Vulnerability; (bso#15340); (bsc#1213173). - CVE-2023-34967: Samba Spotlight mdssvc RPC Request Type Confusion Denial-of-Service Vulnerability; (bso#15341); (bsc#1213172). - CVE-2023-34968: Spotlight server-side Share Path Disclosure; (bso#15388); (bsc#1213171). - CVE-2023-3347: Samba doesn't require SMB2+ signing if `server signing = mandatory` is set; (bso#15397); (bsc#1213170).- Update to 4.17.9 * Backport --pidl-developer fixes; (bso#15404). * smbd_scavenger crashes when service smbd is stopped; (bso#15275). * vfs_fruit might cause a failing open for delete; (bso#15378). * named crashes on DLZ zone update; (bso#14030). * winbind recurses into itself via rpcd_lsad; (bso#15361). * cli_list loops 100% CPU against pre-lanman2 servers; (bso#15382). * smbclient leaks fds with showacls; (bso#15391). * aes256 smb3 encryption algorithms are not allowed in smb3_sid_parse(); (bso#15374). * winbindd gets stuck on NT_STATUS_RPC_SEC_PKG_ERROR; (bso#15413). * smbget memory leak if failed to download files recursively; (bso#15403).- Update to 4.17.8 * log flood: smbd_calculate_access_mask_fsp: Access denied: message level should be lower; (bso#15302). * Floating point exception (FPE) via cli_pull_send at source3/libsmb/clireadwrite.c; (bso#15306). * test_tstream_more_tcp_user_timeout_spin fails intermittently on Rackspace GitLab runners; (bso#15328). * Reduce flapping of ridalloc test; (bso#15329). * large_ldap test is unreliable; (bso#15351). * New filename parser doesn't check veto files smb.conf parameter; (bso#15143). * mdssvc may crash when initializing; (bso#15354). * Large directory optimization broken for non-lcomp path elements; (bso#15313). * streams_depot fails to create streams; (bso#15357). * shadow_copy2 and streams_depot don't play well together; (bso#15358). * wbinfo -u fails on ad dc with >1000 users; (bso#15366). * winbindd idmap child contacts the domain controller without a need; (bso#15317). * idmap_autorid may fail to map sids of trusted domains for the first time; (bso#15318). * idmap_hash doesn't use ID_TYPE_BOTH for reverse mappings; (bso#15319). * net ads search -P doesn't work against servers in other domains; (bso#15323). * DS ACEs might be inherited to unrelated object classes; (bso#15338). * Temporary smbXsrv_tcon_global.tdb can't be parsed; (bso#15353). * Setting veto files = /.*/ break listing directories; (bso#15360); (bsc#1212375). * CVE-2020-25720 [SECURITY] Create Child permission should not allow full write to all attributes (additional changes); (bso#14810). * dsgetdcname: assumes local system uses IPv4; (bso#15325).- Update to 4.17.7 * CVE-2023-0922: Samba AD DC admin tool samba-tool sends passwords in cleartext; (bso#15315); (bsc#1209481). * CVE-2023-0225: Samba AD DC "dnsHostname" attribute can be deleted by unprivileged authenticated users; (bso#15276); (bsc#1209483). * CVE-2023-0614: samba: Access controlled AD LDAP attributes can be discovered; (bso#15270); (bsc#1209485). * large_ldap test is inefficient; (bso#15332). * CVE-2020-25720 [SECURITY] Create Child permission should not allow full write to all attributes (additional changes); (bso#14810). - Update to 4.17.6 * streams_xattr is creating unexpected locks on folders; (bso#15314). * Use of the Azure AD Connect cloud sync tool is now supported for password hash synchronisation, allowing Samba AD Domains to synchronise passwords with this popular cloud environment; (bso#10635). * Spotlight doesn't work with latest macOS Ventura; (bso#15299). * New samba-dcerpc architecture does not scale gracefully; (bso#15310). * vfs_ceph incorrectly uses fsp_get_io_fd() instead of fsp_get_pathref_fd() in close and fstat; (bso#15307). * With clustering enabled samba-bgqd can core dump due to use after free; (bso#15293). * fd_load() function implicitly closes the fd where it should not; (bso#15311). - Update to 4.17.5 * smbc_getxattr() return value is incorrect; (bso#14808). * Compound SMB2 FLUSH+CLOSE requests from MacOSX are not handled correctly; (bso#15172). * synthetic_pathref AFP_AfpInfo failed errors; (bso#15210). * samba-tool gpo listall fails IPv6 only - finddcs() fails to find DC when there is only an AAAA record for the DC in DNS; (bso#15226). * smbd crashes if an FSCTL request is done on a stream handle; (bso#15236). * DFS links don't work anymore on Mac clients since 4.17; (bso#15277). * vfs_virusfilter segfault on access, directory edgecase (accessing NULL value); (bso#15283). * CVE-2022-38023 [SECURITY] Samba should refuse RC4 (aka md5) based SChannel on NETLOGON (additional changes); (bso#15240). * %U for include directive doesn't work for share listing (netshareenum); (bso#15243). * Shares missing from netshareenum response in samba 4.17.4; (bso#15266). * ctdb: use-after-free in run_proc; (bso#15269). * irpc_destructor may crash during shutdown; (bso#15280). * auth3_generate_session_info_pac leaks wbcAuthUserInfo; (bso#15286). * smbclient segfaults with use after free on an optimized build; (bso#15268). * smbstatus leaking files in msg.sock and msg.lock; (bso#15282). * Leak in wbcCtxPingDc2; (bso#15164). * Access based share enum does not work in Samba 4.16+; (bso#15265). * Crash during share enumeration; (bso#15267). * rep_listxattr on FreeBSD does not properly check for reads off end of returned buffer; (bso#15271). * Avoid relying on C89 features in a few places; (bso#15281).- Make (32bit) samba-libs conflict with old samba-ad-dc-libs package to satisfy installcheck.- Make samba-libs conflict with old samba-ad-dc-libs package to satisfy installcheck.- Remove non functioning ifup/ifdown samba-winbindd scripts; (bsc#1207414).- libdsdb-module-samba4 should be packaged as part of samba-libs and not samba-ad-dc-libs. Additionally no need for it to be removed conditionally.- Clean up logic for PAM migration settings in spec file.- Change with_dc default to 0 (for non TW builds), ADDC feature is deprecated and will no longer be included in >= SLE15-SP5; (jsc#PED-1122).- Update to 4.17.4 * CVE-2022-44640 Upstream Heimdal free of user-controlled pointer in FAST; (bsc#14929); * CVE-2021-20251 Bad password count not incremented atomically; (bsc#14611); * CVE-2022-42898 krb5_pac_parse() buffer parsing vulnerability; (bsc#15203); * CVE-2022-37966 rc4-hmac Kerberos session keys issued to modern servers; (bso#15237); * CVE-2022-37967 Kerberos constrained delegation ticket forgery possible against Samba AD DC; (bso#15231); * CVE-2022-38023 RC4/HMAC-MD5 NetLogon Secure Channel is weak and should be avoided; (bso#15240); * pam_winbind uses time_t and pointers assuming they are of the same size; (bso#15224); * Heimdal session key selection in AS-REQ examines wrong entry; (bso#15219); * filter-subunit is inefficient with large numbers of knownfails; (bso#15258); * smbd allows setting FILE_ATTRIBUTE_TEMPORARY on directories; (bso#15252); * The KDC logic arround msDs-supportedEncryptionTypes differs from Windows; (bso#13135); * libnet: change_password() doesn't work with dcerpc_samr_ChangePasswordUser4(); (bso#15206); * Heimdal session key selection in AS-REQ examines wrong entry; (bso#15219); * Memory leak in snprintf replacement functions; (bso#15230); * RODC doesn't reset badPwdCount reliable via an RWDC (CVE-2021-20251 regression); (bso#15253); * Prevent EBADF errors with vfs_glusterfs; (bso#15198); * %U for include directive doesn't work for share listing (netshareenum); (bso#15243); * Stack smashing in net offlinejoin requestodj; (bso#15257); * Windows 11 22H2 and Samba-AD 4.15 Kerberos login issue; (bso#15197); * Heimdal session key selection in AS-REQ examines wrong entry; (bso#15219); - Remove deprecated if-{down,up} scripts; (bsc#1206444); - Adjust the systemd drop-in file for named service; (bsc#1201689); * Paths are additive so do not repeat paths from named.service * Prefix the samba DLZ directory with "-" to ignore this path if it does not exists- Introduce without-smb1-server spec flag; (bsc#1205104); - Update to 4.17.3 * CVE-2022-42898: Samba buffer overflow vulnerabilities on 32-bit systems; (bsc#1205126); (bso#15203); - Replace obsolete python-gpgme with python-gpg * Upstream replaced it in v4.9.5 -- bso#13728 - Update to 4.17.2 * CVE-2022-3592 [SECURITY] samba: Wide links protection broken; (bso#15207); (bsc#1204499). * CVE-2022-3437 [SECURITY] samba: Buffer overflow in Heimdal unwrap_des3();(bso#15134); (bsc#1204254). - Update to 4.17.1 * CVE-2021-20251 [SECURITY] Bad password count not incremented atomically; (bso#14611). * smbXsrv_connection_shutdown_send result leaked; (bso#15174). * Flush on a named stream never completes; (bso#15182). * Permission denied calling SMBC_getatr when file not exists; (bso#15195). * Samba 4.5 sometimes cannot be upgraded to Samba 4.6 or later over DRS: WERROR_DS_DRA_MISSING_PARENT due to faulty GET_ANC; (bso#15189). * pytest: add file removal helpers for TestCaseInTempDir; (bso#15191). * CVE-2021-20251 [SECURITY] Bad password count not incremented atomically; (bso#14611). * Samba 4.5 sometimes cannot be upgraded to Samba 4.6 or later over DRS: WERROR_DS_DRA_MISSING_PARENT due to faulty GET_ANC; (bso#15189). * Flush on a named stream never completes; (bso#15182). * vfs_gpfs silently garbles timestamps > year 2106; (bso#15151). * CVE-2021-20251 [SECURITY] Bad password count not incremented atomically; (bso#14611). * multi-channel socket passing may hit a race if one of the involved processes already existed; (bso#15200). * memory leak on temporary of struct imessaging_post_state and struct tevent_immediate on struct imessaging_context (in rpcd_spoolss and maybe others); (bso#15201). * Since popt1.19 various use after free errors using result of poptGetArg are now exposed; (bso#15205); (boo#1204279). * Remove special case for O_CREAT in SMB_VFS_OPENAT from vfs_glusterfs; (bso#15192). * GETPWSID in memory cache grows indefinetly with each NTLM auth; (bso#15169). * CVE-2021-20251 [SECURITY] Bad password count not incremented atomically; (bso#14611). - Install a systemd drop-in file for named service to allow read/write access to the DLZ directory; (bsc#1201689); - Fix use after free errors resulting from using return of poptGetArg exposed since popt-1.19; (boo#1204279); (bso#15205). - s3: smbd: Fix memory leak in smbd_server_connection_terminate_done(); (bso#15174). - Disable SMB1 for tumbleweed builds. - Update to 4.17.0 * acl_xattr VFS module may unintentionally use filesystem permissions instead of ACL from xattr; (bso#15126). * Missing SMB2-GETINFO access checks from MS-SMB2 3.3.5.20.1; (bso#15153). * assert failed: !is_named_stream(smb_fname)") at ../../lib/util/fault.c:197; (bso#15161). * acl_xattr VFS module may unintentionally use filesystem permissions instead of ACL from xattr; (bso#15126). * assert failed: !is_named_stream(smb_fname)") at ../../lib/util/fault.c:197; (bso#15161). * Cross-node multi-channel reconnects result in SMB2 Negotiate returning NT_STATUS_NOT_SUPPORTED; (bso#15159). * winbind at info level debug can coredump when processing wb_lookupusergroups; (bso#15160). * Make use of glfs_*at() API calls in vfs_glusterfs; (bso#15157). * Possible use after free of connection_struct when iterating smbd_server_connection->connections; (bso#15128). * `net usershare add` fails with flag works with --long but fails with -l; (bso#15145). * acl_xattr VFS module may unintentionally use filesystem permissions instead of ACL from xattr; (bso#15126). * Performance regression on contended path based operations; (bso#15125). * Missing READ_LEASE break could cause data corruption; (bso#15148). * libsamba-errors uses a wrong version number; (bso#15141). * SMB1 negotiation can fail to handle connection errors; (bso#15152). * New filename parser doesn't check veto files smb.conf parameter; (bso#15143). * 4.17.rc1 still uses symlink-race prone unix_convert(); (bso#15144). * Backport fileserver related changed to 4.17.0rc2; (bso#15146). * Manpage for smbstatus json is missing; (bso#15147). * Backport fileserver related changed to 4.17.0rc2; (bso#15146). * Performance regression on contended path based operations; (bso#15125). * Backport fileserver related changed to 4.17.0rc2; (bso#15146). * Fix issues found by coverity in smbstatus json code; (bso#15140). * Backport fileserver related changed to 4.17.0rc2; (bso#15146). - Migration to /usr/etc: Saving user changed configuration files in /etc and restoring them while an RPM update. - Update to 4.16.4 * CVE-2022-2031: Samba AD users can bypass certain restrictions associated with changing passwords; (bsc#1201495); (bso#15047); * CVE-2022-32744: Samba AD users can forge password change requests for any user; (bsc#1201493); (bso#15074); * CVE-2022-32745: Samba AD users can crash the server process with an LDAP add or modify request; (bsc#1201492); (bso#15008); * CVE-2022-32746: Samba AD users can induce a use-after-free in the server process with an LDAP add or modify request; (bsc#1201490); (bso#15009); * CVE-2022-32742: Server memory information leak via SMB1; (bsc#1201496); (bso#15085); - Update to 4.16.3 * Using vfs_streams_xattr and deleting a file causes a panic; (bso#15099); * Add support for bind 9.18; (bso#14986); * logging dsdb audit to specific files does not work; (bso#15076); * Problem when winbind renews Kerberos; (bso#14979); (bsc#1196224); * Samba with new lorikeet-heimdal fails to build on gcc 12.1 in developer mode; (bso#15095); * Crash in streams_xattr because fsp->base_fsp->fsp_name is NULL; (bso#15105); * Crash in rpcd_classic - NULL pointer deference in mangle_is_mangled(); (bso#15118); * smbclient commands del & deltree fail with NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100); (bsc#1200556); * Fix check for chown when processing NFSv4 ACL; (bso#15120); * The pcap background queue process should not be stopped; (bso#15082); * testparm: Fix typo in idmap rangesize check; (bso#15097); * net ads info returns LDAP server and LDAP server name as null; (bso#15106); * ldconfig: /lib64/libsmbconf.so.0 is not a symbolic link; (bso#15108); * CTDB child process logging does not work as expected; (bso#15090); - Update spec file to fix the optional Heimdal DC build - Fix external trusts with MIT Kerberos 1.20 - Add missing samba-client requirement to samba-winbind package; (bsc#1198255); - Move pdb backends from package samba-libs to package samba-client-libs and remove samba-libs requirement from samba-winbind; (bsc#1200964); (bsc#1198255); - Add sysuser-shadow requirement for packages using systemd-sysusers - Use the canonical realm name to refresh the Kerberos tickets; (bsc#1196224); (bso#14979); - Moved logrotate files from user specific directory /etc/logrotate.d to vendor specific directory /usr/etc/logrotate.d. - Update to 4.16.2 * Use pathref fd instead of io fd in vfs_default_durable_cookie; (bso#15042); * vfs_gpfs with vfs_shadowcopy2 fail to restore file if original file had been deleted; (bso#15069); * Reintroduce netgroups support; (bso#15087); * net ads info shows LDAP Server: 0.0.0.0 depending on contacted server; (bso#14674); * Update from 4.15 to 4.16 breaks discovery of [homes] on standalone server from Win and IOS; (bso#15062); * waf produces incorrect names for python extensions with Python 3.11; (bso#15071); * smbclient -E doesn't work as advertised; (bso#15075); * The samba background daemon doesn't refresh the printcap cache on startup; (bso#15081); * Out-by-4 error in smbd read reply max_send clamp; (bso#14443); - Fix samba4.blackbox.net_ads_dns_async test with bind9 >= 9.17.7 - Support building with MIT Kerberos 1.20 - Bronze bit and S4U support with MIT Kerberos 1.20 for Samba AD DC; (CVE-2020-17049); - Resource Based Constrained Delegation (RBCD) for Samba AD DC - Support building with gcc 12.1 - Use requires_eq macro to require the libldb2 version available at samba-dsdb-modules build time; (bsc#1199362); - Update to 4.16.1 * Share and server swapped in smbget password prompt; (bso#14831); * Durable handles won't reconnect if the leased file is written to; (bso#15022); * rmdir silently fails if directory contains unreadable files and hide unreadable is yes; (bso#15023); * SMB2_CLOSE_FLAGS_FULL_INFORMATION fails to return information on renamed file handle; (bso#15038); * Need to describe --builtin-libraries= better (compare with - -bundled-libraries); (bso#8731); * vfs_shadow_copy2 breaks "smbd async dosmode" sync fallback; (bso#14957); * shadow_copy2 fails listing snapshotted dirs with shadow:fixinodes; (bso#15035); * PAM Kerberos authentication incorrectly fails with a clock skew error; (bso#15046); * Username map - samba erroneously applies unix group memberships to user account entries; (bso#15041); * KVNO off by 100000; (bso#14951); * Uninitialized litemask in variable in vfs_gpfs module; (bso#15027); * vfs_gpfs recalls=no option prevents listing files; (bso#15055); * smbd doesn't handle UPNs for looking up names; (bso#15054); - Update update-apparmor-samba-profile script, replace non-printable delimiter with more human readable separator as sed can accept separators that can appear in the input data. - Fix update-apparmor-samba-profile script, sed doesn't like multibyte separators; (bsc#1198309). - Update to 4.16.0 * New samba-dcerpcd binary to provide DCERPC in the member server setup * Certificate Auto Enrollment * Ability to add ports to dns forwarder addresses in internal DNS backend * No longer using Linux mandatory locks for sharemodes * SMB1 protocol has been deprecated, particularly older dialects * SMB1 protocol SMBCopy command removed * SMB1 server-side wildcard expansion removed - Add python3-dnspython to samba-ad-dc recommens; (bsc#1187101); - Use systemd-sysusers to create system users; (bsc#1182847);- Install a systemd drop-in file for named service to allow read/write access to the DLZ directory; (bsc#1201689);- Update to 4.15.12 * CVE-2022-42898: samba: heimdal: Samba buffer overflow vulnerabilities on 32-bit systems; (bso#15203); (bsc#1205126). - Update to 4.15.11 * Allow rebuild of Centos 8 images after move to vault for Samba 4.15; (bso#15193). * CVE-2022-3437: samba: Buffer overflow in Heimdal unwrap_des3(); (bso#15134); (bsc#1204254)- Update to 4.15.10 * Possible use after free of connection_struct when iterating smbd_server_connection->connections; (bso#15128); (bsc#1200102). * smbXsrv_connection_shutdown_send result leaked; (bso#15174). * Spotlight RPC service returns wrong response when Spotlight is disabled on a share; (bso#15086). * acl_xattr VFS module may unintentionally use filesystem permissions instead of ACL from xattr; (bso#15126). * Missing SMB2-GETINFO access checks from MS-SMB2 3.3.5.20.1; (bso#15153). * assert failed: !is_named_stream(smb_fname)") at ../../lib/util/fault.c:197; (bso#15161). * Missing READ_LEASE break could cause data corruption; (bso#15148). * rpcclient can crash using setuserinfo(2); (bso#15124). * Samba fails to build with glibc 2.36 caused by including in libreplace; (bso#15132). * SMB1 negotiation can fail to handle connection errors; (bso#15152). * samba-tool domain join segfault when joining a samba ad domain; (bso#15078). - Update to 4.15.9 * CVE-2022-32742:SMB1 code does not correct verify SMB1write, SMB1write_and_close, SMB1write_and_unlock lengths; (bso#15085); (bsc#1201496). * CVE-2022-32746: samba: Use-after-free occurring in database audit logging; (bso#15009); (bso#15096); (bsc#1201490). * CVE-2022-2031: samba, ldb: AD users can bypass certain restrictions associated with changing passwords; (bso#15047); (bsc#1201495); * CVE-2022-32745: samba: ldb: AD users can crash the server process with an LDAP add or modify request; (bso#15008); (bso#15096); (bsc#1201492). * CVE-2022-2031: samba, ldb: AD users can bypass certain restrictions associated with changing passwords; (bso#15047); (bsc#1201495); * CVE-2022-32744: samba, ldb: AD users can forge password change requests for any user; (bso#15074); (bso#15047); (bsc#1201493).- CVE-2022-1615: Do not ignore errors in random number generation; (bso#15103); (bsc#1202976); - CVE-2022-32743: Implement validated dnsHostName write rights; (bso#14833); (bsc#1202803);- Fix Use after free when iterating smbd_server_connection->connections after tree disconnect failure; (bso#15128); (bsc#1200102).- CVE-2022-32746: samba: Use-after-free occurring in database audit logging; (bso#15009); (bso#15096); (bsc#1201490). - CVE-2022-32745: samba: ldb: AD users can crash the server process with an LDAP add or modify request; (bso#15008); (bso#15096); (bsc#1201492). - CVE-2022-2031: samba, ldb: AD users can bypass certain restrictions associated with changing passwords; (bso#15047); (bsc#1201495); - CVE-2022-32742:SMB1 code does not correct verify SMB1write, SMB1write_and_close, SMB1write_and_unlock lengths; (bso#15085); (bsc#1201496). - CVE-2022-32744: samba, ldb: AD users can forge password change requests for any user; (bso#15074); (bso#15047); (bsc#1201493).- Update to 4.15.8 * Use pathref fd instead of io fd in vfs_default_durable_cookie; (bso#15042); * Setting fruit:resource = stream in vfs_fruit causes a panic; (bso#15099); * Add support for bind 9.18; (bso#14986); * logging dsdb audit to specific files does not work; (bso#15076); * vfs_gpfs with vfs_shadowcopy2 fail to restore file if original file had been deleted; (bso#15069); * netgroups support removed; (bso#15087); (bsc#1199247); * net ads info shows LDAP Server: 0.0.0.0 depending on contacted server; (bso#14674); (bsc#1199734); * waf produces incorrect names for python extensions with Python 3.11; (bso#15071); * smbclient commands del & deltree fail with NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100); (bsc#1200556); * vfs_gpfs recalls=no option prevents listing files; (bso#15055); * waf produces incorrect names for python extensions with Python 3.11; (bso#15071); * Compile error in source3/utils/regedit_hexedit.c; (bso#15091); * ldconfig: /lib64/libsmbconf.so.0 is not a symbolic link; (bso#15108); * smbd doesn't handle UPNs for looking up names; (bso#15054); * Out-by-4 error in smbd read reply max_send clamp; (bso#14443); - Move pdb backends from package samba-libs to package samba-client-libs and remove samba-libs requirement from samba-winbind; (bsc#1200964); (bsc#1198255); - Use the canonical realm name to refresh the Kerberos tickets; (bsc#1196224); (bso#14979);- Fix smbclient commands del & deltree failing with NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100); (bsc#1200556).- Revert NIS support removal; (bsc#1199247);- Use requires_eq macro to require the libldb2 version available at samba-dsdb-modules build time; (bsc#1199362);- Add missing samba-client requirement to samba-winbind package; (bsc#1198255);- Update to 4.15.7 * Share and server swapped in smbget password prompt; (bso#14831); * Durable handles won't reconnect if the leased file is written to; (bso#15022); * rmdir silently fails if directory contains unreadable files and hide unreadable is yes; (bso#15023); * SMB2_CLOSE_FLAGS_FULL_INFORMATION fails to return information on renamed file handle; (bso#15038); * vfs_shadow_copy2 breaks "smbd async dosmode" sync fallback; (bso#14957); * shadow_copy2 fails listing snapshotted dirs with shadow:fixinodes; (bso#15035); * PAM Kerberos authentication incorrectly fails with a clock skew error; (bso#15046); * username map - samba erroneously applies unix group memberships to user account entries; (bso#15041); * NT_STATUS_ACCESS_DENIED translates into EPERM instead of EACCES in SMBC_server_internal; (bso#14983); * Simple bind doesn't work against an RODC (with non-preloaded users); (bso#13879); * Crash of winbind on RODC; (bso#14641); * uncached logon on RODC always fails once; (bso#14865); * KVNO off by 100000; (bso#14951); * LDAP simple binds should honour "old password allowed period"; (bso#15001); * wbinfo -a doesn't work reliable with upn names; (bso#15003); * Simple bind doesn't work against an RODC (with non-preloaded users); (bso#13879); * Uninitialized litemask in variable in vfs_gpfs module; (bso#15027); * Regression: create krb5 conf = yes doesn't work with a single KDC; (bso#15016);- Add provides to samba-client-libs package to fix upgrades from previous versions; (bsc#1197995);- Add missing samba-libs requirement to samba-winbind package; (bsc#1198255);- Update to 4.15.6 * Renaming file on DFS root fails with NT_STATUS_OBJECT_PATH_NOT_FOUND; (bso#14169); * Samba does not response STATUS_INVALID_PARAMETER when opening 2 objects with same lease key; (bso#14737); * NT error code is not set when overwriting a file during rename in libsmbclient; (bso#14938); * Fix ldap simple bind with TLS auditing; (bso#14996); * net ads info shows LDAP Server: 0.0.0.0 depending on contacted server; (bso#14674); * Problem when winbind renews Kerberos; (bso#14979); (bsc#1196224); * pam_winbind will not allow gdm login if password about to expire; (bso#8691); * virusfilter_vfs_openat: Not scanned: Directory or special file; (bso#14971); * DFS fix for AIX broken; (bso#13631); * Solaris and AIX acl modules: wrong function arguments; (bso#14974); * Function aixacl_sys_acl_get_file not declared / coredump; (bso#7239); * Regression: Samba 4.15.2 on macOS segfaults intermittently during strcpy in tdbsam_getsampwnam; (bso#14900); * Fix a use-after-free in SMB1 server; (bso#14989); * smb2_signing_decrypt_pdu() may not decrypt with gnutls_aead_cipher_decrypt() from gnutls before 3.5.2; (bso#14968); * Changing the machine password against an RODC likely destroys the domain join; (bso#14984); * authsam_make_user_info_dc() steals memory from its struct ldb_message *msg argument; (bso#14993); * Use Heimdal 8.0 (pre) rather than an earlier snapshot; (bso#14995); * Samba autorid fails to map AD users if id rangesize fits in the id range only once; (bso#14967);- Fix mismatched version of libldb2; (bsc#1196788). - Drop obsolete SuSEfirewall2 service files.- Drop obsolete Samba fsrvp v0->v1 state upgrade functionality; (bsc#1080338).- Fix ntlm authentications with "winbind use default domain = yes"; (bso#13126); (bsc#1173429); (bsc#1196308).- Fix samba-ad-dc status warning notification message by disabling systemd notifications in bgqd; (bsc#1195896); (bso#14947).- libldb version mismatch in Samba dsdb component; (bsc#1118508);- Update to 4.15.5 * CVE-2021-44141: UNIX extensions in SMB1 disclose whether the outside target of a symlink exists; (bso#14911); (bsc#1193690). * CVE-2021-44142: Out-of-Bound Read/Write on Samba vfs_fruit module; (bso#14914); (bsc#1194859). * CVE-2022-0336: Re-adding an SPN skips subsequent SPN conflict checks; bso#14950); (bsc#1195048).- CVE-2021-44141: Information leak via symlinks of existance of files or directories outside of the exported share; (bso#14911); (bsc#1193690); - CVE-2021-44142: Out-of-bounds heap read/write vulnerability in VFS module vfs_fruit allows code execution; (bso#14914); (bsc#1194859); - CVE-2022-0336: Samba AD users with permission to write to an account can impersonate arbitrary services; (bso#14950); (bsc#1195048);- Update to 4.15.4 * Duplicate SMB file_ids leading to Windows client cache poisoning; (bso#14928); * Failed to parse NTLMv2_RESPONSE length 95 - Buffer Size Error - NT_STATUS_BUFFER_TOO_SMALL; (bso#14932); * kill_tcp_connections does not work; (bso#14934); * Can't connect to Windows shares not requiring authentication using KDE/Gnome; (bso#14935); * smbclient -L doesn't set "client max protocol" to NT1 before calling the "Reconnecting with SMB1 for workgroup listing" path; (bso#14939); * Cross device copy of the crossrename module always fails; (bso#14940); * symlinkat function from VFS cap module always fails with an error; (bso#14941); * Fix possible fsp pointer deference; (bso#14942); * Missing pop_sec_ctx() in error path inside close_directory(); (bso#14944); * "smbd --build-options" no longer works without an smb.conf file; (bso#14945);- Use pkgconfig(krb5) as dependency for the -devel package: allow OBS to pick the right flavor of krb5-devel (full vs mini). - Do not require the 'krb5' symbol by samba-client-libs: this package has an automatic dependency due to linkage on libgssapi_krb5.so.2. Automatic deps are always better. - Do not require the 'krb5' symbol from samba-libs: samba-libs requires samba-client-libs, which in turn requires krb5 libraries. Samba-libs itself has no need for krb5 (but get it indirectly anyway).- Reorganize libs packages. Split samba-libs into samba-client-libs, samba-libs, samba-winbind-libs and samba-ad-dc-libs, merging samba public libraries depending on internal samba libraries into these packages as there were dependency problems everytime one of these public libraries changed its version (bsc#1192684). The devel packages are merged into samba-devel. - Rename package samba-core-devel to samba-devel - Add python-rpm-macros to build requirements - Update the symlink create by samba-dsdb-modules to private samba ldb modules following libldb2 changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba- Update to 4.15.3 * Recursive directory delete with veto files is broken in 4.15.0; (bso#14878); * A directory containing dangling symlinks cannot be deleted by SMB2 alone when they are the only entry in the directory; (bso#14879); * SIGSEGV in rmdir_internals/synthetic_pathref - dirfsp is used uninitialized in rmdir_internals(); (bso#14892); * MaxQueryDuration not honoured in Samba AD DC LDAP; (bso#14694); * The CVE-2020-25717 username map [script] advice has undesired side effects for the local nt token; (bso#14901); (bsc#1192849); * User with multiple spaces (eg FredNurk) become un-deletable; (bso#14902); * Avoid storing NTTIME_THAW (-2) as value on disk; (bso#14127); * smbXsrv_client_global record validation leads to crash if existing record points at non-existing process; (bso#14882); * Crash in vfs_fruit asking for fsp_get_io_fd() for an XATTR call; (bso#14890); * Samba process doesn't log to logfile; (bso#14897); * set_ea_dos_attribute() fallback calling get_file_handle_for_metadata() triggers locking.tdb assert; (bso#14907); * Kerberos authentication on standalone server in MIT realm broken; (bso#14922); * Segmentation fault when joining the domain; (bso#14923); * Support for ROLE_IPA_DC is incomplete; (bso#14903); * rpcclient cannot connect to ncacn_ip_tcp services anymore; (bso#14767); * winexe crashes since 4.15.0 after popt parsing; (bso#14893); * net ads status -P broken in a clustered environment; (bso#14908); * Memory leak if ioctl(FSCTL_VALIDATE_NEGOTIATE_INFO) fails before smbd_smb2_ioctl_send; (bso#14788); * winbindd doesn't start when "allow trusted domains" is off; (bso#14899); * smbclient login without password using '-N' fails with NT_STATUS_INVALID_PARAMETER on Samba AD DC; (bso#14883); * A schannel client incorrectly detects a downgrade connecting to an AES only server; (bso#14912); * Possible null pointer dereference in winbind; (bso#14921); * Fix -k legacy option for client tools like smbclient, rpcclient, net, etc.; (bso#14846); * Add Debian 11 CI bootstrap support; (bso#14872); * Crash in recycle_unlink_internal(); (bso#14888);- Fix dependency problem upgrading from libndr0 to libndr2 and from libsamba-credentials0 to libsamba-credentials1; (bsc#1192684);- Fix regression introduced by CVE-2020-25717 patches, winbindd does not start when 'allow trusted domains' is off; (bso#14899); - Update to 4.15.2 * CVE-2016-2124: SMB1 client connections can be downgraded to plaintext authentication; (bso#12444); (bsc#1014440); * CVE-2020-25717: A user on the domain can become root on domain members; (bso#14556); (bsc#1192284); * CVE-2020-25718: Samba AD DC did not correctly sandbox Kerberos tickets issued by an RODC; (bso#14558); (bsc#1192246); * CVE-2020-25719: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets; (bso#14561); (bsc#1192247); * CVE-2020-25721: Kerberos acceptors need easy access to stable AD identifiers (eg objectSid); (bso#14557); (bsc#1192505); * CVE-2020-25722: Samba AD DC did not do suffienct access and conformance checking of data stored; (bso#14564); (bsc#1192283); * CVE-2021-3738: Use after free in Samba AD DC RPC server; (bso#14468); (bsc#1192215); * CVE-2021-23192: Subsequent DCE/RPC fragment injection vulnerability; (bso#14875); (bsc#1192214); - Update to 4.15.1 * vfs_shadow_copy2: core dump in make_relative_path; (bso#14682); * Log clutter from filename_convert_internal; (bso#14685); * MacOSX compilation fixes; (bso#14862); * rodc_rwdc test flaps; (bso#14868); * Provide a fix for MS CVE-2020-17049 in Samba [SECURITY] 'Bronze bit' S4U2Proxy Constrained Delegation bypass in Samba with embedded Heimdal; (bso#14642); * Python ldb.msg_diff() memory handling failure; (bso#14836); * "in" operator on ldb.Message is case sensitive; (bso#14845); * Release LDB 2.4.1 for Samba 4.15.1; (bso#14848); * samldb_krbtgtnumber_available() looks for incorrect string; (bso#14854); * Fix Samba support for UF_NO_AUTH_DATA_REQUIRED; (bso#14871); * Allow special chars like "@" in samAccountName when generating the salt; (bso#14874); * Correctly ignore comments in CTDB public addresses file; (bso#14826); * Fix transit path validation; (bso#12998); * Fix that child winbindd logs to log.winbindd instead of log.wb-; (bso#14852); * SMB3 cancel requests should only include the MID together with AsyncID when AES-128-GMAC is used; (bso#14855); * Prepare to operate with MIT krb5 >= 1.20; (bso#14870); * Heimdal prefers RC4 over AES for machine accounts; (bso#14864);- Enable samba-tool without ad dc.- Adjust spec to use pam macros; (bsc#1191046).- Adjust spec for size * allow some Recommends instead Requires to be configured for cifs-utils, samba-libs-python3 & samba-gpupdate; (bsc#1182847). * remove fam, undocumented and unneeded.- Add missing build dependency on bison when building with the embedded Heimdal Kerberos- Update to 4.15.0 * Removed SMB development dialects SMB2_22, SMB2_24 and SMB3_10 * VFS layer modernized. * Add the ability to set allow/deny lists for zone transfer clients in Bind DLZ plugin * Server multi-channel support no longer experimental * Improved command line user experience, unifying the options in different commands * Winbindd no longer scans trusted domains on startup and will use enterprise principals by default. * The net utility is now able to support the offline domain join feature * New options for 'samba-tool dns zoneoptions' for aging control and to mark old records as static or dynamic * DNS tombstones are now deleted as appropriate and use a consistent timestamp format * The 'samba-tool dns update' command validates and rejects now malformed IPv4 and IPv6 addresses * The 'samba-tool domain backup' command correctly takes out locks against concurrent modification during backup when using the LMDB backend * TruACL support has been removed * NIS support has been removed- Fix 'net rpc' authentication when using the machine account; (bsc#1189017); (bso#14796);- Fix dependency problem upgrading from libndr0 to libndr1; (bsc#1189875); - Fix dependency problem upgrading from libsmbldap0 to libsmbldap2; (bsc#1189875); - Fix wrong kvno exported to keytab after net ads changetrustpw due to replication delay; (bsc#1188727); - Add Certificate Auto Enrollment Policy; (jsc#SLE-18456). - Update to 4.13.10 * s3: smbd: Ensure POSIX default ACL is mapped into returned Windows ACL for directory handles; (bso#14708); * Take a copy to make sure we don't reference free'd memory; (bso#14721); * s3: lib: Fix talloc heirarcy error in parent_smb_fname(); (bso#14722); * s3: smbd: Remove erroneous TALLOC_FREE(smb_fname_parent) in change_file_owner_to_parent() error path; (bso#14736); * samba-tool: Give better error information when the 'domain backup restore' fails with a duplicate SID; (bso#14575); * smbd: Correctly initialize close timestamp fields; (bso#14714); * Spotlight RPC service doesn't work with vfs_glusterfs; (bso#14740); * ctdb: Fix a crash in run_proc_signal_handler(); (bso#14475); * gensec_krb5: Restore ipv6 support for kpasswd; (bso#14750); * smbXsrv_{open,session,tcon}: Protect smbXsrv_{open,session,tcon}_global_traverse_fn against invalid records; (bso#14752); * samba-tool domain backup offline doesn't work against bind DLZ backend; (bso#14027); * netcmd: Use next_free_rid() function to calculate a SID for restoring a backup; (bso#14669); - Update to 4.13.9 * s3: smbd: SMB1 SMBsplwr doesn't send a reply packet on success; (bso#14696); * Add documentation for dsdb_group_audit and dsdb_group_json_audit to "log level", synchronise "log level" in smb.conf with the code; (bso#14689); * Fix smbd panic when two clients open same file; (bso#14672); * Fix memory leak in the RPC server; (bso#14675); * s3: smbd: Fix deferred renames; (bso#14679); * s3-iremotewinspool: Set the per-request memory context; (bso#14675); * rpc_server3: Fix a memleak for internal pipes; (bso#14675); * third_party: Update socket_wrapper to version 1.3.2; (bso#11899); * third_party: Update socket_wrapper to version 1.3.3; (bso#14639); * idmap_rfc2307 and idmap_nss return wrong mapping for uid/gid conflict; (bso#14663); * Fix the build on OmniOS; (bso#14288); - Update to 4.13.8 * CVE-2021-20254: Fix buffer overrun in sids_to_unixids(); (bso#14571 - Update to 4.13.7 * Release with dependency on ldb version 2.2.1.- CVE-2021-20254 Buffer overrun in sids_to_unixids(); (bnc#14571); (bsc#1184677).- Fix offline domain backup not possible using lmdb version >= 0.9.26; (bso#14676); - Require libldb >= 2.2.1; (bsc#1183572); (bsc#1183574); - Update to 4.13.6 * CVE-2020-27840: samba: Unauthenticated remote heap corruption via bad DNs; (bso#14595); (bsc#1183572). * CVE-2021-20277: samba: out of bounds read in ldb_handler_fold; (bso#14655); (bsc#1183574). - Update to 4.13.5 * s3:modules:vfs_virusfilter: Recent talloc changes cause infinite start-up failure; (bso#14634); * s3: libsmb: Add missing cli_tdis() in error path if encryption setup failed on temp proxy connection; (bso#13992); * smbd: In conn_force_tdis_done() when forcing a connection closed force a full reload of services; (bso#14604); * dbcheck: Check Deleted Objects and reduce noise in reports about expired tombstones (bso#14593); * s3: Fix fcntl waf configure check; (bso#14503); * s3/auth: Implement "winbind:ignore domains"; (bso#14602); * smbd: Use fsp->conn->session_info for the initial delete-on-close token; (bso#14617); * s3: VFS: nfs4_acls. Add missing TALLOC_FREE(frame) in error path; (bso#14648); * classicupgrade: Treat old never expires value right; (bso#14624); * g_lock: Fix uninitalized variable reads; (bso#14636); * s3:pysmbd: Fix fd leak in py_smbd_create_file(); (bso#13898); * lib:util: Avoid free'ing our own pointer; (bso#14625); * HEIMDAL: krb5_storage_free(NULL) should work; (bso#12505);- Spec file fixes around systemd and requires; (bsc#1182830); - Align systemd service unit files with upstream provided ones.- Update to 4.13.4 * Work around special SMB2 IOCTL response behavior of NetApp Ontap 7.3.7; (bso#14607); * Temporary DFS share setup doesn't set case parameters in the same way as a regular share definition does; (bso#14612); * lib: Avoid declaring zero-length VLAs in various messaging functions; (bso#14605); * Do not create an empty DB when accessing a sam.ldb; (bso#14579); * vfs_fruit may close wrong backend fd; (bso#14596); * Temporary DFS share setup doesn't set case parameters in the same way as a regular share definition does; (bso#14612); * vfs_virusfilter: Allocate separate memory for config char*; (bso#14606); * vfs_fruit may close wrong backend fd; (bso#14596); * Work around special SMB2 IOCTL response behavior of NetApp Ontap 7.3.7; (bso#14607); * The cache directory for the user gencache should be created recursively; (bso#14601); * Be more flexible with repository names in CentOS 8 test environments; (bso#14594);- Uninstalling samba-client: Failed to disable unit, cifs.service does not exists; (bsc#1180388);- Update to 4.13.3 + libcli: smb2: Never print length if smb2_signing_key_valid() fails for crypto blob; (bso#14210); + s3: modules: gluster. Fix the error I made in preventing talloc leaks from a function; (bso#14486); + s3: smbd: Don't overwrite contents of fsp->aio_requests[0] with NULL via TALLOC_FREE(); (bso#14515); + s3: spoolss: Make parameters in call to user_ok_token() match all other uses; (bso#14568); + s3: smbd: Quiet log messages from usershares for an unknown share; (bso#14590); + samba process does not honor max log size; (bso#14248); + vfs_zfsacl: Add missing inherited flag on hidden "magic" everyone@ ACE; (bso#14587); + s3-libads: Pass timeout to open_socket_out in ms; (bso#13124); + s3-vfs_glusterfs: Always disable write-behind translator; (bso#14486); + smbclient: Fix recursive mget; (bso#14517); + clitar: Use do_list()'s recursion in clitar.c; (bso#14581); + manpages/vfs_glusterfs: Mention silent skipping of write-behind translator; (bso#14486); + vfs_shadow_copy2: Preserve all open flags assuming ROFS; (bso#14573); + interface: Fix if_index is not parsed correctly; (bso#14514);- Update to 4.13.2 + s3: modules: vfs_glusterfs: Fix leak of char **lines onto mem_ctx on return; (bso#14486); + RN: vfs_zfsacl: Only grant DELETE_CHILD if ACL tag is special; (bso#14471); + smb.conf.5: Add clarification how configuration changes reflected by Samba; (bso#14538); + daemons: Report status to systemd even when running in foreground; (bso#14552); + DNS Resolver: Support both dnspython before and after 2.0.0; (bso#14553); + s3-vfs_glusterfs: Refuse connection when write-behind xlator is present; (bso#14486); + provision: Add support for BIND 9.16.x; (bso#14487); + ctdb-common: Avoid aliasing errors during code optimization; (bso#14537); + libndr: Avoid assigning duplicate versions to symbols; (bso#14541); + docs: Fix default value of spoolss:architecture; (bso#14522); + winbind: Fix a memleak; (bso#14388); + s4:dsdb:acl_read: Implement "List Object" mode feature; (bso#14531); + docs-xml/manpages: Add warning about write-behind translator for vfs_glusterfs; (bso#14486); + nsswitch/nsstest.c: Avoid nss function conflicts with glibc nss.h. + vfs_shadow_copy2: Avoid closing snapsdir twice; (bso#14530); + third_party: Update resolv_wrapper to version 1.1.7; (bso#14547); + examples:auth: Do not install example plugin; (bso#14550); + ctdb-recoverd: Drop unnecessary and broken code; (bso#14513); + RN: vfs_zfsacl: Only grant DELETE_CHILD if ACL tag is special; (bso#14471);- Adjust smbcacls '--propagate-inheritance' feature to align with upstream; (bsc#1178469).- Update to samba 4.13.1 + CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with easily crafted records; (bsc#1177613); (bso#14472); + CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994); (bso#14436); + CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify; (bsc#1173902); (bso#14434); - Adjust systemd tmpfiles.d configuration, use /run/samba instead of /var/run/samba; (bsc#1177355);- Fix vfs_ceph query_directory regression; (bso#14519) - Drop liburing-devel for SLE15-SP2; (bsc#1177245)- Register CTDB recovery lock holder with ceph-mgr - Add liburing-devel dependency- Update to samba 4.13.0 + Require Python 3.6 + Move wide links functionality into VFS module + Deprecate NT4-like 'classic' Samba domain controllers + Deprecate SMBv1 only protocol options + Remove deprecated "ldap ssl ads" option + Unify asynchronous DCE-RPC server; (jsc#SES-645) + Replay multichannel lease break requests; (bso#11897); (jsc#SES-655) + Drop internal byteorder.h header from util-devel package + Remove final code for the AD DC LDAP backend + Add AD DC Group Policy Scripts + Only use gnutls_aead_cipher_encryptv2() for GnuTLS > 3.6.14; (bso#14399) + Fix %U substitutions if it contains a domain name; (bso#14467) + Fix krb5.conf creation for 'net ads join'; (bso#14479) + Fix build problem if libbsd-dev is not installed; (bso#14482) + Toggle vfs_snapper using "--with-shared-modules"; (bso#14437) + Fix idmap_ad RFC4511 response handling; (bso#14465) + Fix panic in get_lease_type(); (bso#14428)- Update to samba 4.11.13 + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2 against unencrypted passwords; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Support "server require schannel:WORKSTATION$ = no" about unsecure configurations; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): s4 torture rpc: repeated bytes in client challenge; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): libcli/auth: Reject weak client challenges in netlogon_creds_server_init() "server require schannel:WORKSTATION$ = no"; (bsc#1176579); (bso#14497); - Update to samba 4.11.12 + s3: libsmb: Fix SMB2 client rename bug to a Windows server; (bso#14403); + dsdb: Allow "password hash userPassword schemes = CryptSHA256" to work on RHEL7; (bso#14424); + dbcheck: Allow a dangling forward link outside our known NCs; (bso#14450); + lib/debug: Set the correct default backend loglevel to MAX_DEBUG_LEVEL; (bso#14426); + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428); + lib/util: do not install "test_util_paths"; (bso#14370); + lib:util: Fix smbclient -l basename dir; (bso#14345); + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428); + util: Allow symlinks in directory_create_or_exist; (bso#14166); + docs: Fix documentation for require_membership_of of pam_winbind; (bso#14358); + s3:winbind:idmap_ad: Make failure to get attrnames for schema mode fatal; (bso#14425);- Add obsoletes to libsmbldap2 package to fix upgrades from previous versions; (bsc#1172810);- Fix net command unable to negotiate SMB2; (bsc#1174120);- Update to samba 4.11.11 + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ and VLV combined; (bso#14364); (bsc#1173159] + CVE-2020-10745: invalid DNS or NBT queries containing dots use several seconds of CPU each; (bso#14378); (bsc#1173160). + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP server with paged_result or VLV; (bso#14402); (bsc#1173161) + CVE-2020-14303: Endless loop from empty UDP packet sent to AD DC nbt_server; (bso#14417); (bsc#1173359). - Update to samba 4.11.10 + Fix segfault when using SMBC_opendir_ctx() routine for share folder that contains incorrect symbols in any file name; (bso#14374). + vfs_shadow_copy2 doesn't fail case looking in snapdirseverywhere mode; (bso#14350) + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr; (bso#14413). + Malicous SMB1 server can crash libsmbclient; (bso#14366) + winbindd: Fix a use-after-free when winbind clients exit; (bso#14382) + ldb: Bump version to 2.0.11, LMDB databases can grow without bounds. (bso#14330) - Update to samba 4.11.9 + nmblib: Avoid undefined behaviour in handle_name_ptrs(); (bso#14242). + 'samba-tool group' commands do not handle group names with special chars correctly; (bso#14296). + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo is not valid; (bso#14237). + Missing check for DMAPI offline status in async DOS attributes; (bso#14293). + smbd: Ignore set NTACL requests which contain S-1-5-88 NFS ACEs; (bso#14307). + vfs_recycle: Prevent flooding the log if we're called on non-existant paths; (bso#14316) + smbd mistakenly updates a file's write-time on close; (bso#14320). + RPC handles cannot be differentiated in source3 RPC server; (bso#14359). + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313). + nsswitch: Fix use-after-free causing segfault in _pam_delete_cred; (bso#14327). + Fix fruit:time machine max size on arm; (bso#13622) + CTDB recovery corner cases can cause record resurrection and node banning; (bso#14294). + ctdb: Fix a memleak; (bso#14348). + libsmb: Don't try to find posix stat info in SMBC_getatr(). + ctdb-tcp: Move free of inbound queue to TCP restart; (bso#14295); (bsc#1162680). + s3/librpc/crypto: Fix double free with unresolved credential cache; (bso#14344); (bsc#1169095) + s3:libads: Fix ads_get_upn(); (bso#14336). + CTDB recovery corner cases can cause record resurrection and node banning; (bso#14294) + Starting ctdb node that was powered off hard before results in recovery loop; (bso#14295); (bsc#1162680). + ctdb-recoverd: Avoid dereferencing NULL rec->nodemap; (bso#14324) - Update to samba 4.11.8 + CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with ASQ; (bso#14331); (bsc#1169850); + CVE-2020-10704: LDAP Denial of Service (stack overflow) in Samba AD DC; (bso#14334); (bsc#1169851); - Update to samba 4.11.7 + s3: lib: nmblib. Clean up and harden nmb packet processing; (bso#14239). + s3: VFS: full_audit. Use system session_info if called from a temporary share definition; (bso#14283) + dsdb: Correctly handle memory in objectclass_attrs; (bso#14258). + ldb: version 2.0.9, Samba 4.11 and later give incorrect results for SCOPE_ONE searches; (bso#14270) + auth: Fix CIDs 1458418 and 1458420 Null pointer dereferences; (bso#14247). + smbd: Handle EINTR from open(2) properly; (bso#14285) + winbind member (source3) fails local SAM auth with empty domain name; (bso#14247) + winbindd: Handling missing idmap in getgrgid(); (bso#14265). + lib:util: Log mkdir error on correct debug levels; (bso#14253). + wafsamba: Do not use 'rU' as the 'U' is deprecated in Python 3.9; (bso#14266). + ctdb-tcp: Make error handling for outbound connection consistent; (bso#14274). - Update to samba 4.11.6 + pygpo: Use correct method flags; (bso#14209). + vfs_ceph_snapshots: Fix root relative path handling; (bso#14216); (bsc#1141320). + Avoiding bad call flags with python 3.8, using METH_NOARGS instead of zero; (bso#14209). + source4/utils/oLschema2ldif: Include stdint.h before cmocka.h; (bso#14218). + docs-xml/winbindnssinfo: Clarify interaction with idmap_ad etc; (bso#14122). + smbd: Fix the build with clang; (bso#14251). + upgradedns: Ensure lmdb lock files linked; (bso#14199). + s3: VFS: glusterfs: Reset nlinks for symlink entries during readdir; (bso#14182). + smbc_stat() doesn't return the correct st_mode and also the uid/gid is not filled (SMBv1) file; (bso#14101). + librpc: Fix string length checking in ndr_pull_charset_to_null(); (bso#14219). + ctdb-scripts: Strip square brackets when gathering connection info; (bso#14227).- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);- Installing: samba - samba-ad-dc.service does not exist and unit not found; (bsc#1171437);- Fix samba_winbind package is installing python3-base without python3 package; (bsc#1169521);- Require libldb2 >= 2.0.10 after security release.- CVE-2020-10704: LDAP Denial of Service (stack overflow) in Samba AD DC; (bso#14334); (bsc#1169851); - CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with ASQ; (bso#14331); (bsc#1169850);- Fix smbclient crash with double free (with unresolved krb5 credential cache); (bso#14344); (bsc#1169095).- Starting ctdb node that was powered off hard before results in recovery loop; (bso#14295); (bsc#1162680).- CTDB doesn't retry outgoing connections on bind (and some other) failures; (bso#14274); (bsc#1162680).- Revert: Allow idmap_rid to have primary group other than "Domain Users"; (bsc#1087931).- Fix nmbstatus not reporting detailed information about workgroups; (bsc#1159464); - Fix querying all names registered within broadcast area; (bso#8927);- Update to samab 4.11.5 + CVE-2019-14902: Replication of ACLs down subtree on AD Directory is not automatic; (bso#12497); (bsc#1160850). + CVE-2019-19344: Fix server crash with dns zone scavenging = yes; (bso#14050); (bsc#1160852). + CVE-2019-14907: server-side crash after charset conversion failure (eg during NTLMSSP processing); (bso#14208); (bsc#1160888). - Update to samba 4.11.4 + Ensure SMB1 cli_qpathinfo2() doesn't return an inode number; (bso#14161). + Ensure we don't call cli_RNetShareEnum() on an SMB1 connection; (bso#14174). + NT_STATUS_ACCESS_DENIED becomes EINVAL when using SMB2 in SMBC_opendir_ctx; (bso#14176). + SMB2 - Ensure we use the correct session_id if encrypting an interim response; (bso#14189). + Prevent smbd crash after invalid SMB1 negprot; (bso#14205). + printing: Fix %J substition; (bso#13745). + Remove now unneeded call to cmdline_messaging_context(); (bso#13925). + Fix incomplete conversion of former parametric options; (bso#14069). + Fix sync dosmode fallback in async dosmode codepath; (bso#14070). + vfs_fruit returns capped resource fork length; (bso#14171). + libnet_join: Add SPNs for additional-dns-hostnames entries; (bso#14116). + smbd: Increase a debug level; (bso#14211). + Prevent azure ad connect from reporting discovery errors reference-value-not-ldap-conformant; (bso#14153). + krb5_plugin: Fix developer build with newer heimdal system library; (bso#14179). + replace: Only link libnsl and libsocket if required; (bso#14168); + ctdb: Incoming queue can be orphaned causing communication; breakdown; (bso#14175). + ldb: Release ldb 2.0.8. Cross-compile will not take cross-answers or cross-execute; (bso#13846). + heimdal-build: Avoid hard-coded /usr/include/heimdal in asn1_compile-generated code; (bso#13856).- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).- Update to samba 4.11.3 + CVE-2019-14861: DNSServer RPC server crash, an authenticated user can crash the DCE/RPC DNS management server by creating records with matching the zone name; (bso#14138); (bsc#1158108). + CVE-2019-14870: DelegationNotAllowed not being enforced, the DelegationNotAllowed Kerberos feature restriction was not being applied when processing protocol transition requests (S4U2Self), in the AD DC KDC; (bso#14187); (bsc#1158109).- CVE-2019-14861: DNSServer RPC server crash, an authenticated user can crash the DCE/RPC DNS management server by creating records with matching the zone name; (bso#14138); (bsc#1158108). - CVE-2019-14870: DelegationNotAllowed not being enforced, the DelegationNotAllowed Kerberos feature restriction was not being applied when processing protocol transition requests (S4U2Self), in the AD DC KDC; (bso#14187); (bsc#1158109).- Update to samba 4.11.2 + CVE-2019-10218: Client code can return filenames containing path separators; (bsc#1144902); (bso#14071). + CVE-2019-14833: Samba AD DC check password script does not receive the full password; (bso#12438). + CVE-2019-14847: User with "get changes" permission can crash AD DC LDAP server via dirsync; (bso#14040). - Fixes from 4.11.1 + Overlinking libreplace against librt and pthread against every binary or library causes issues; (bso#14140); + kpasswd fails when built with MIT Kerberos; (bso#14155); + Fix spnego fallback from kerberos to ntlmssp in smbd server; (bso#14106); + Stale file handle error when using mkstemp on a share; (bso#14137); + non-AES schannel broken; (bso#14134); + Joining Active Directory should not use SAMR to set the password; (bso#13884); + smbclient can blunder into the SMB1 specific cli_RNetShareEnum() call on an SMB2 connection; (bso#14152); + Deleted records can be resurrected during recovery; (bso#14147); + getpwnam and getpwuid need to return data for ID_TYPE_BOTH group; (bso#14141); + winbind does not list forest trusts with additional trust attributes; (bso#14130); + fault report points to outdated documentation; (bso#14139); + pam_winbind with krb5_auth or wbinfo -K doesn't work for users of trusted domains/forests; (bso#14124); + classicupgrade results in uncaught exception - a bytes-like object is required, not 'str'; (bso#14136); + pod2man is not longer required, stop checking at build time; (bso#14131); + Exit code of ctdb nodestatus should not be influenced by deleted nodes; (bso#14129); + username/password authentication doesn't work with CUPS and smbspool; (bso#14128); + smbc_readdirplus() is incompatible with smbc_telldir() and smbc_lseekdir(); (bso#14094);- CVE-2019-14847: User with "get changes" permission can crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598); - CVE-2019-10218: Client code can return filenames containing path separators; (bso#14071); (bsc#1144902);- CVE-2019-14833: samba: Accent with "check script password" Samba AD DC check password script does not receive the full password; (bso#12438); (bsc#1154289).- Update to samba 4.11.0 + For details on all items see WHATSNEW.txt in samba-doc package + Python2 runtime support removed; python 3.4 or later required + Security improvements: - SMB1 disabled by default - lanman and plaintext authentication deprecated - winbind: PAM_AUTH and NTLM_AUTH events logged - GnuTLS 3.2 required; system FIPS mode setting honored + CephFS Snapshot integration, exposed as previous file versions + ctdb changes: - onnode -o option removed - ctdbd logs when using more than 90% of a CPU thread - CTDB_MONITOR_SWAP_USAGE variable removed + AD Domain controller improvements: - Upgrade AD databse format - BIND9_FLATFILE deprecated - default process model chagned to prefork - bind9 dns operation duration logging - Default schema updated to 2012_R2; function level is unchanged - many performance improvements + Configuration webserver support removed- Fix broken username/password authentication with CUPS and smbspool; (bsc#1152143); (bso#14128).- Fix auth problems when printing via smbspool backend with kerberos; (bnc#1148539); (bso#13832).- Update to samba 4.10.8 + CVE-2019-10197: user escape from share path definition; (bso#14035); (bsc#1141267);- Fix build on newer systems by modifying samba.spec to use consistent non-relative paths for pammodules in configure line and specification of pam_winbind.so library to package.- Update to samba 4.10.7 + Unable to create or rename file/directory inside shares configured with vfs_glusterfs_fuse module; (bso#14010). + build: Allow build when '--disable-gnutls' is set; (bso#13844) + samba-tool: Add 'import samba.drs_utils' to fsmo.py; (bso#13973). + Fix 'Error 32 determining PSOs in system' message on old DB with FL upgrade; (bso#14008). + s4/libnet: Fix joining a Windows pre-2008R2 DC; (bso#14021) + join: Use a specific attribute order for the DsAddEntry nTDSDSA object; (bso#14046). + vfs_catia: Pass stat info to synthetic_smb_fname(); (bso#14015). + lookup_name: Allow own domain lookup when flags == 0; (bso#14091). + s4 librpc rpc pyrpc: Ensure tevent_context deleted last; (bso#13932). + DEBUGC and DEBUGADDC doesn't print into a class specific log file; (bso#13915). + Request to keep deprecated option "server schannel", VMWare Quickprep requires "auto"; (bso#13949). + dbcheck: Fallback to the default tombstoneLifetime of 180 days; (bso#13967). + dnsProperty fails to decode values from older Windows versions; (bso#13969). + samba-tool: Use only one LDAP modify for dns partition fsmo role transfer; (bso#13973). + third_party: Update waf to version 2.0.17; (bso#13960). + netcmd: Allow 'drs replicate --local' to create partitions; (bso#14051). + ctdb-config: Depend on /etc/ctdb/nodes file; (bso#14017).- CVE-2019-10197: user escape from share path definition; (bso#14035); (bsc#1141267).- Prepare for use future use of kernel keyrings, modify /etc/pam.d/samba to include pam_keyinit.so; (bsc#1144059).- Update samba-winbind script to work with systemd; (bsc#1132739); - Drop samba dhcpcd hook scripts - Update to samba 4.10.6 + s3: winbind: Fix crash when invoking winbind idmap scripts; (bso#13956). + smbd does not correctly parse arguments passed to dfree and quota scripts; (bso#13964). + samba-tool dns: use bytes for inet_ntop; (bso#13965). + samba-tool domain provision: Fix --interactive module in python3; (bso#13828). + ldb_kv: Skip @ records early in a search full scan; (bso#13893). + docs: Improve documentation of "lanman auth" and "ntlm auth" connection; (bso#13981). + python/ntacls: Use correct "state directory" smb.conf option instead of "state dir"; (bso#14002). + registry: Add a missing include; (bso#13840). + Fix SMB guest authentication; (bso#13944). + AppleDouble conversion breaks Resourceforks; (bso#13958). + vfs_fruit makes direct use of syscalls like mmap() and pread(); (bso#13968). + s3:mdssvc: Fix flex compilation error; (bso#13987). + s3/vfs_glusterfs[_fuse]: Avoid using NAME_MAX directly; (bso#13872). + dsdb:samdb: schemainfo update with relax control; (bso#13799). + s3:util: Move static file_pload() function to lib/util; (bso#13964). + smbd: Fix a panic; (bso#13957). + ldap server: Generate correct referral schemes; (bso#12478). + s4 dsdb/repl_meta_data: fix use after free in dsdb_audit_add_ldb_value; (bso#13941). + s4 dsdb: Fix use after free in samldb_rename_search_base_callback; (bso#13942). + dsdb/repl: we need to replicate the whole schema before we can apply it; (bso#12204). + ldb: Release ldb 1.5.5; (bso#12478). + Schema replication fails if link crosses chunk boundary backwards; (bso#13713). + 'samba-tool domain schemaupgrade' uses relax control and skips the schemaInfo update provision; (bso#13799). + dsdb_audit: avoid printing "... remote host [Unknown] SID [(NULL SID)] ..."; (bso#13916). + python/ntacls: We only need security.SEC_STD_READ_CONTROL in order to get the ACL; (bso#13917). + s3:loadparm: Ensure to truncate FS Volume Label at multibyte boundary; (bso#13947). + Using Kerberos credentials to print using spoolss doesn't work; (bso#13939). + wafsamba: Use native waf timer; (bso#13998). + ctdb-scripts: Fix tcp_tw_recycle existence check; (bso#13984).- Update to samba-4.10.5 (including updates for 4.10.4, 4.10.3) + CVE-2019-12435 rpc/dns: Avoid NULL deference if zone not found in DnssrvOperation2; (bso#13922); (bsc#1137815). + CVE-2019-12436 dsdb/paged_results: Ignore successful results without messages; (bso#13951); (bsc#1137816). - Update to samba-4.10.4 + s3: SMB1: Don't allow recvfile on stream fsp's; (bso#13938). + py/provision: Fix for Python 2.6; (bso#13882). + netcmd: Fix 'passwordsettings --max-pwd-age' command; (bso#13873). + s3-libnet_join: 'net ads join' to child domain fails when using "-U admin@forestroot"; (bso#13861). + vfs_ceph: Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245). + vfs_ceph: Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697). + ctdb-common: Avoid race between fd and signal events; (bso#13895). + ctdb-common: Fix memory leak in run_proc; (bso#13943). + lib: Initialize getline() arguments; (bso#13892). + winbind: Fix overlapping id ranges; (bco#13903). + lib util debug: Increase format buffer to 4KiB; (bso#13902). + nsswitch pam_winbind: Fix Asan use after free; (bso#13927). + s4 lib socket: Ensure address string owned by parent struct; (bso#13929). + s3 rpc_client: Fix Asan stack use after scope; (bso#13936). + s3:smbd: Handle IO_REPARSE_TAG_DFS in SMB_FIND_FILE_FULL_DIRECTORY_INFO; (bso#10097). + smb2_tcon: Avoid STATUS_PENDING completely on tdis; (bso#10344). + smb2_sesssetup: avoid STATUS_PENDING responses for session setup; (bso#12845). + smb2_tcon: Avoid STATUS_PENDING completely on tdis; (bso#13698). + smb2_sesssetup: avoid STATUS_PENDING responses for session setup; (bso#13796). + dbcheck: Fix the err_empty_attribute() check; (bso#13843). + vfs_snapper: Drop unneeded fstat handler; (bso#13858). + vfs_default: Fix vfswrap_offload_write_send() NT_STATUS_INVALID_VIEW_SIZE check; (bso#13862). + smb2_server: Grant all 8192 credits to clients; (bso#13863). + smbd: Implement SMB_FILE_NORMALIZED_NAME_INFORMATION handling; (bso#13919). + s3/vfs_glusterfs: Dynamically determine NAME_MAX; (bso#13872). + s3: modules: ceph: Use current working directory instead of share path; (bso#13918); (bsc#1134452). + winbind: Use domain name from lsa query for sid_to_name cache entry; (bso#13831). + memcache: Increase size of default memcache to 512k; (bso#13865). + docs: Update smbclient manpage for "--max-protocol"; (bso#13857). + s3:utils: If share is NULL in smbcacls, don't print it; (bso#13937). + s3:smbspool: Fix regression printing with Kerberos credentials; (bso#13939). + ctdb-scripts: CTDB restarts failed NFS RPC services by hand, which is incompatible with systemd; (bso#13860). + ctdb-daemon: Revert "We can not assume that just because we could complete a TCP handshake"; (bso#13888). + ctdb-daemon: Never use 0 as a client ID; (bso#13930). + ctdb-common: Fix memory leak; (bso#13943). + s3:debug: Enable logging for early startup failures; (bso#13904) - Update to samba-4.10.3 + CVE-2018-16860: Heimdal KDC: Reject PA-S4U2Self with unkeyed checksum; (bso#13685); (bsc#1134024).- CVE-2019-12435: zone operations can crash rpc server; (bso#13922); (bsc#1137815).- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697). - Add ceph_snapshots VFS module; (jsc#SES-183).- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).- Update to samba-4.10.2: + CVE-2019-3870 (World writable files in Samba AD DC private/ dir); (bso#13834). + CVE-2019-3880 (Save registry file outside share as unprivileged user); (bso#13851). + py/kcc_utils: py2.6 compatibility; (bso#13837). + libcli: permit larger values of DataLength in SMB2_ENCRYPTION_CAPABILITIES of negotiate response; (bso#13869). + regfio: Improve handling of malformed registry hive files; (bso#13840). + ctdb-version: Simplify version string usage; (bso#13789). + lib: Make fd_load work for non-regular files; (bso#13859). + dbcheck: in the middle of the tombstone garbage collection causes replication failures, dbcheck: add --selftest-check-expired-tombstones cmdline option; (bso#13816). + ndr_spoolss_buf: Fix out of scope use of stack variable in NDR_SPOOLSS_PUSH_ENUM_OUT(); (bso#13818). + s4/messaging: Fix undefined reference in linking libMESSAGING-samba4.so; (bso#13854). + acl_read: Fix regression for empty lists; (bso#13836). + s4:dlz make b9_has_soa check dc=@ node; (bso#13841). + s3:client: Fix printing via smbspool backend with kerberos auth; (bso#13832). + s4:librpc: Fix installation of Samba; (bso#13847). + s3:lib: Fix the debug message for adding cache entries; (bso#13848). + s3:utils: Add 'smbstatus -L --resolve-uids' to show username; (bso#13793). + s3:lib: Fix the debug message for adding cache entries; (bso#13848). + s3:waf: Fix the detection of makdev() macro on Linux; (bso#13853). * ctdb-build: Drop creation of .distversion in tarball; (bso#13789). * ctdb-packaging: Test package requires tcpdump, ctdb package should not own system library directory; (bso#13838). - Update to samba-4.10.1: + py/kcc_utils: py2.6 compatibility; (bso#13837); + libcli: permit larger values of DataLength in SMB2_ENCRYPTION_CAPABILITIES of negotiate response; (bso#13869); + regfio: Improve handling of malformed registry hive files; (bso#13840); + ctdb-version: Simplify version string usage; (bso#13789); + lib: Make fd_load work for non-regular files; (bso#13859); + dbcheck in the middle of the tombstone garbage collection causes replication failures, dbcheck: add --selftest-check-expired-tombstones cmdline option; (bso#13816); + ndr_spoolss_buf: Fix out of scope use of stack variable in NDR_SPOOLSS_PUSH_ENUM_OUT(); (bso#13818); + s4/messaging: Fix undefined reference in linking libMESSAGING-samba4.so; (bso#13854); + acl_read: Fix regression for empty lists; (bso#13836); + s4:dlz make b9_has_soa check dc=@ node; (bso#13841); + s3:client: Fix printing via smbspool backend with kerberos auth; (bso#13832); + s4:librpc: Fix installation of Samba; (bso#13847); + s3:lib: Fix the debug message for adding cache entries; (bso#13848); + s3:utils: Add 'smbstatus -L --resolve-uids' to show username; (bso#13793); + s3:lib: Fix the debug message for adding cache entries; (bso#13848); + s3:waf: Fix the detection of makdev() macro on Linux; (bso#13853); + ctdb-build: Drop creation of .distversion in tarball; (bso#13789); + ctdb-packaging: Test package requires tcpdump, ctdb package should not own system library directory; (bso#13838); - Update to samba-4.10.0: + s4-server: Open and close a transaction on sam.ldb at startup; (bso#13760); + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812); + s4/scripting/bin: Open unicode files with utf8 encoding and write + unicode string. + sambaundoguididx: Use the right escaped oder unescaped sam ldb files; (bso#13759); + Fix idmap cache pollution with S-1-22- IDs on winbind hickup; (bso#13813); + passdb: Update ABI to 0.27.2. + lib/winbind_util: Add winbind_xid_to_sid for --without-winbind; (bso#13813); + lib:util: Move debug message for mkdir failing to log level 1; (bso#13823);- MacOS credit accounting breaks with async SESSION SETUP; (bsc#1125601); (bso#13796). - Mac OS X SMB2 implmenetation sees Input/output error or Resource temporarily unavailable and drops connection; (bso#13698)- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).- CVE-2019-3880: Save registry file outside share as unprivileged user; (bso#13851); (bsc#1131060 ).- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0); (bso#13834); (bsc#1130703);- Update to samba-4.9.5 + audit_logging: Remove debug log header and JSON Authentication: prefix; (bso#13714); + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760); + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso# CID: 1433607; (bso#11495); + smbd: uid: Don't crash if 'force group' is added to an existing share connection; (bso#13690); + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility code; (bso#13770); + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803); + s3:utils/smbget fix recursive download with empty source directories; (bso#13199); + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716); + s3:libsmb: cli_smb2_list() can sometimes fail initially on a connection; (bso#13736); + join: Throw CommandError instead of Exception for simple errors; (bso#13747); + ldb: Avoid inefficient one-level searches; (bso#13762); + s3: libsmb: use smb2cli_conn_max_trans_size() in cli_smb2_list(); (bso#13736); + tldap: Avoid use after free errors; (bso#13776); + Fix idmap xid2sid cache churn; (bso#13802); + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812); + s3-smbd: Avoid assuming fsp is always intact after close_file call; (bso#13720); + s3-vfs-fruit: Add close call; (bso#13725); + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746); + s3-vfs: add glusterfs_fuse vfs module; (bso#13774); + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766); + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS) ftruncate and fallocate; (bso#13807); + lib/audit_logging: Actually create talloc; (bso#13737); + netcmd/user: python[3]-gpgme unsupported and replaced by python[3]-gpg; (bso#13728); + dns: Changing onelevel search for wildcard to subtree; (bso#13738); + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721); + sambaundoguididx: Use the right escaped oder unescaped sam ldb files; (bso#13759); + ctdb: Print locks latency in machinereadable stats; (bso#13742); + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786); + audit_logging: auth_json_audit required auth_json; (bso#13715); + man pages: Document prefork process model; (bso#13765); + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773); + s3:auth: ignore create_builtin_guests() failing without a valid idmap configuration; (bso#13697); + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC without trusts; (bso#13722); + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd is not available; (bso#13723); + s4:server: Add support for 'smbcontrol samba shutdown' and 'smbcontrol debug/debuglevel'; (bso#13752); + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616); + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330); + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774); + notifyd: Fix SIGBUS on sparc; (bso#13704); + waf: Check for libnscd; (bso#13787); + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770); + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717); + Recovery lock bug fixes; (bso#13800); + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726); + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727); + vfs_fileid: Fix get_connectpath_ino; (bso#13741); + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).- Fix update-apparmor-samba-profile script after apparmor switched to using named profiles. The change is backwards compatible; (bsc#1126377);- LoadParm().load_default() fails with "Unable to load default file"; (bsc#1089758);- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);- Update to samba-4.9.4 + libcli/smb: Don't overwrite status code; (bso#9175). + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164). + Session setup reauth fails to sign response; (bso#13661). + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677). + vfs_shadow_copy2: Nicely deal with attempts to open previous version for writing; (bso#13688). + Restoring previous version of stream with vfs_shadow_copy2 fails with NT_STATUS_OBJECT_NAME_INVALID fsp->base_fsp->fsp_name; (bso#13455). + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571). + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708) + PEP8: fix E231: missing whitespace after ','. + winbindd: Fix crash when taking profiles;(bso#13629) + CVE-2018-14629 dns: Fix CNAME loop prevention using counter regression; (bso#13600) + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686). + CVE-2018-16853: Do not segfault if client is not set; (bso#13571). + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679) + ctdb-daemon: Exit with error if a database directory does not exist; (bso#13696). + s3:libads: Add net ads leave keep-account option; (bso#13498).- Drop more %if..%endif guards which are idempotent. - Drop requires on ldconfig which are already auto-discovered. - Do not ignore errors from useradd/groupadd.- Remove python2 build dependency from samba-libs; (bsc#1116900);- Update update-apparmor-samba-profile script to ignore the shares's paths containing substitution variables in any place, not only at the beginning of the path.- Update to samba-4.9.3 + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD Internal DNS server; (bso#13600); (bsc#1116319); + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628); (bsc#1116320); + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server; (bso#13674); (bsc#1116322); + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers; (bso#13669); (bsc#1116321); + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos configuration (unsupported); (bso#13678); (bsc#1116324); + CVE-2018-16857: Bad password count in AD DC not always effective; window; (bso#13683); (bsc#1116323);- Update to samba-4.9.2 + dsdb: Add comments explaining the limitations of our current backlink behaviour; (bso#13418); + Fix problems running domain backups (handling SMBv2, sites); (bso#13621); + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3; (bso#13465); + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642); + File saving issues with vfs_fruit on samba >= 4.8.5; (bso#13646); + Enabling vfs_fruit looses FinderInfo; (bso#13649); + Cancelling of SMB2 aio reads and writes returns wrong error NT_STATUS_INTERNAL_ERROR; (bso#13667); + Fix CTDB recovery record resurrection from inactive nodes and simplify vacuuming; (bso#13641); + examples: Fix the smb2mount build; (bso#13465); + libtevent: Fix build due to missing open_memstream on Illiumos; (bso#13629); + winbindd_cache: Fix timeout calculation for sid<->name cache; (bso#13662); + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path; (bso#13653); + Extended DN SID component missing for member after switching group membership; (bso#13418); + Return STATUS_SESSION_EXPIRED error encrypted, if the request was encrypted; (bso#13624); + python: Allow forced signing via smb.SMB(); (bso#13621); + lib:socket: If returning early, set ifaces; (bso#13665); + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8 encoded unicode; (bso#13616); + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute; (bso#13673); + waf: Add -fstack-clash-protection; (bso#13601); + winbind: Fix segfault if an invalid passdb backend is configured; (bso#13668); + Fix bugs in CTDB event handling; (bso#13659); + Misbehaving nodes are sometimes not banned; (bso#13670);- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);- winbind requires latest version of libtevent-util0 to start- Backport latest gpo code from master + Read policy from local gpt cache + Offline policy application + Make group policy extensible via register/unregister gpext + gpext's run via a process_group_policy method- Enable profiling data collection- Change samba-kdc package name to samba-ad-dc - Move samba-ad-dc.service to the samba-ad-dc package- Update to samba-4.9.1 + s3: nmbd: Stop nmbd network announce storm; (bso#13620); + s3-rpcclient: Use spoolss_init_spoolss_UserLevel1 in winspool cmds; (bso#13597); + CTDB recovery lock has some race conditions; (bso#13617); + s3-rpc_client: Advertise Windows 7 client info; (bso#13597); + ctdb-doc: Remove PIDFILE option from ctdbd_wrapper man page; (bso#13610);- Tumbleweed doesn't define the sle_version macro, so we must include a check for suse_version also. Otherwise python3 is disabled on Tumbleweed.- Update to samba-4.9.0 + samba_dnsupdate: Honor 'dns zone scavenging' option, only update if needed; (bso#13605); + wafsamba: Fix 'make -j'; (bso#13606);- Update to samba-4.9.0rc5 + s3: VFS: vfs_full_audit: Ensure smb_fname_str_do_log() only returns absolute pathnames; (bso#13565); + s3: util: Do not take over stderr when there is no log file; (bso#13578); + Durable Reconnect fails because cookie.allow_reconnect is not set; (bso#13549); + krb5-samba: Interdomain trust uses different salt principal; (bso#13539); + vfs_fruit: Don't unlink the main file; (bso#13441); + smbd: Fix a memleak in async search ask sharemode; (bso#13602); + Fix Samba GPO issue when Trust is enabled; (bso#11517); + samba-tool: Add "virtualKerberosSalt" attribute to 'user getpassword/syncpasswords'; (bso#13539); + Fix CTDB configuration issues; (bso#13589); + ctdbd logs an error until it can successfully connect to eventd; (bso#13592);- Update to samba-4.9.0rc4 + s3: smbd: Ensure get_real_filename() copes with empty pathnames; (bso#13585); + samba domain backup online/rename commands force user to specify password on CLI; (bso#13566); + wafsamba/samba_abi: Always hide ABI symbols which must be local; (bso#13579); + Fix a panic if fruit_access_check detects a locking conflict; (bso#13584); + Fix memory and resource leaks; (bso#13567); + python: Fix print in dns_invalid.py; (bso#13580); + Aliasing issue causes incorrect IPv6 checksum; (bso#13588); + Fix CTDB configuration issues; (bso#13589); + s3: vfs: time_audit: fix handling of token_blob in smb_time_audit_offload_read_recv(); (bso#13568);- Add missing zlib-devel dependency which was previously pulled in by libopenssl-devel- Update to samba-4.9.0rc3+git.22.3fff23ae36e + CVE-2018-10858: libsmb: Harden smbc_readdir_internal() against returns from malicious servers; (bso#13453); + CVE-2018-1140: ldbsearch '(distinguishedName=abc)' and DNS query with escapes crashes, ldb: Release LDB 1.3.5 for CVE-2018-1140; (bso#13374); + CVE-2018-10918: cracknames: Fix DoS (NULL pointer de-ref) when not servicePrincipalName is set on a user; (bso#13552); + CVE-2018-10919: acl_read: Fix unauthorized attribute access via searches; (bso#13434); + ctdb_mutex_ceph_rados_helper: Set SIGINT signal handler; (bso#13540); + CVE-2018-1139 libcli/auth: Do not allow ntlmv1 over SMB1 when it is disabled via "ntlm auth"; (bso#13360); + s3-tldap: do not install test_tldap; (bso#13529); + ctdb_mutex_ceph_rados_helper: Fix deadlock via lock renewals; (bso#13540); + CVE-2018-1140 Add NULL check for ldb_dn_get_casefold() in ltdb_index_dn_attr(); (bso#13374); + ctdb-eventd: Fix CID 1438155; (bso#13554); + Fix CIDs 1438243, (Unchecked return value) 1438244 (Unsigned compared against 0), 1438245 (Dereference before null check) and 1438246 (Unchecked return value); (bso#13553); + ctdb: Fix a cut&paste error; (bso#13554); + systemd: Only start smb when network interfaces are up; (bso#13559); + Fix quotas don't work with SMB2; (bso#13553); + s3/smbd: Ensure quota code is only called when quota support detected; (bso#13563); + s3/libsmb: Explicitly set delete_on_close token for rmdir; (bso#13204); + s3:waf: Install eventlogadm to /usr/sbin; (bso#13561); + Shorten description in vfs_linux_xfs_sgid manual; (bso#13562);- Update to samba-4.9.0rc2+git.21.a1069afb007 + s3: smbd: Using "sendfile = yes" with SMB2 can cause CPU spin; (bso#13537); + s3: smbd: Fix path check in smbd_smb2_create_durable_lease_check(); (bso#13535); + samba-tool trust: Support discovery via netr_GetDcName; (bso#13538); + s4-dsdb: Only build dsdb Python modules for AD DC; (bso#13542); + Fix portability issues on freebsd; (bso#13520); + DNS wildcard search does not handle multiple labels correctly; (bso#13536); + samba-tool domain trust: Fix trust compatibility to Windows Server 1709 and FreeIPA; (bso#13308); + Fix portability issues on freebsd; (bso#13520); + ctdb-protocol: Fix CTDB compilation issues; (bso#13545); + ctdb-docs: Replace obsolete reference to CTDB_DEBUG_HUNG_SCRIPT option; (bso#13546); + ctdb-doc: Provide an example script for migrating old configuration; (bso#13550); + ctdb-event: Implement event tool "script list" command; (bso#13551);- Update to samba-4.8.4+git.37.a7a861d7982; + CVE-2018-1139: Weak authentication protocol allowed; (bsc#1095048); (bsc#13360); + CVE-2018-1140: Denial of Service Attack on DNS and LDAP server; (bsc#1095056); (bso#13466); (bso#13374); + CVE-2018-10858: Insufficient input validation on client directory listing in libsmbclient; (bsc#1103411); (bso#13453); + CVE-2018-10918: Denial of Service Attack on AD DC DRSUAPI server; (bsc#1103414); (bso#13552); + CVE-2018-10919: Confidential attribute disclosure from the AD LDAP server; (bsc#1095057); (bso#13434); + s3:winbind: winbind normalize names' doesn't work for users; (bso#12851); + winbind: Fix UPN handling in canonicalize_username(); (bso#13369); + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428); + samdb: Fix building Samba with gcc 8.1; (bso#13437); + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440); + smbd: Flush dfree memcache on service reload; (bso#13446); + ldb: Save a copy of the index result before calling the + lib/util: No Backtrace given by Samba's AD DC by default; (bso#13454). + s3: smbd: printing: Re-implement delete-on-close semantics for print files missing since 3.5.x; (bso#13457). + python: Fix talloc frame use in make_simple_acl(); (bso#13474). + krb5_wrap: Fix keep_old_entries logic for older Kerberos libraries;(bso#13478). + krb5_plugin: Add winbind localauth plugin for MIT Kerberos; (bso#13480).- Add missing package descriptions; (bsc#1093864); - Fix dependency issue between samba-python and samba-kdc; (bsc#1062876); - Call update-apparmor-samba-profile when running samba-ad-dc; (bsc#1092099);- Update to 4.8.2 + After update to 4.8.0 DC failed with "Failed to find our own NTDS Settings objectGUID" (bso#13335). + fix incorrect reporting of stream dos attributes on a directory (bso#13380). + vfs_ceph: add asynchronous fsync; fake synchronous call (bso#13412). + vfs_ceph: add fake async pwrite/pread send/recv hooks; (bso#13425) + vfs_ceph: Fix memory leak; (bso#13424). + libsmbclient: Fix hard-coded connection error return of ETIMEDOUT; (bso#13419). + s4-lsa: Fix use-after-free in LSA server; (bso#13420). + winbindd: Do re-connect if the RPC call fails in the passdb case; (bso#13430). + cleanupd: Sends MSG_SMB_UNLOCK twice to interested peers; (bso#13416). + cleanupd: Use MSG_SMB_BRL_VALIDATE to signal cleanupd unclean process shutdown; (bso#13414). + ctdb-client: Remove ununsed functions from old client code; (bso#13411). + printing: Return the same error code as windows does on upload failures; (bso#13395). + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged pipe is not accessable; (bso#13400). + s4:lsa_lookup: remove TALLOC_FREE(state) after all dcesrv_lsa_Lookup{Names,Sids}_base_map() calls; (bso#13420). + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407). + s3:smbspool: Fix cmdline argument handling; (bso#13417).- Move libdfs-server-ad-samba4.so library from kdc to libs package, as it is required by some client libs; (bsc#1074135); - Update to 4.8.1; (bsc#1091179); + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error, we don't own it here; (bso#13244); + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't support fdopendir(); (bso#13270); + Round-tripping ACL get/set through vfs_fruit will increase the number of ACE entries without limit; (bso#13319); + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit issues; (bso#13347); + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without delete access; (bso#13358); + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372); + s3: smbd: Unix extensions attempts to change wrong field in fchown call; (bso#13375); + ms_schema/samba-tool visualize: Fix python2.6 incompatibility; (bso#13337); + Fix invocation of gnutls_aead_cipher_encrypt(); (bso#13352); + Windows 10 cannot logon on Samba NT4 domain; (bso#13328); + winbindd: Recover loss of netlogon secure channel in case the peer DC is rebooted; (bso#13332); + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363); + ctdb-client: Fix bugs in client code; (bso#13356); + ctdb-scripts: Drop "net serverid wipe" from 50.samba event script; (bso#13359); + s3: lib: messages: Don't use the result of sec_init() before calling sec_init(); (bso#13368); + libads: Fix the build '--without-ads'; (bso#13273); + winbind: Keep "force_reauth" in invalidate_cm_connection, add 'smbcontrol disconnect-dc'; (bso#13332); + vfs_virusfilter: Fix CIDs 1428738-1428740; (bso#13343); + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367); + rpc_server: Fix core dump in dfsgetinfo; (bso#13370); + smbclient: Fix notify; (bso#13382); + Fix smbd panic if the client-supplied channel sequence number wraps; (bso#13215); + Windows 10 cannot logon on Samba NT4 domain; (bso#13328); + lib/util: Remove unused '#include ' from tests/tfork.c; (bso#13342); + Fix build errors with cc from developerstudio 12.5 on Solaris; (bso#13343); + Fix the picky-developer build on FreeBSD 11; (bso#13344); + s3:modules: Fix the build of vfs_aixacl2.c; (bso#13345); + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338); + lib:replace: Fix linking when libtirpc-devel overwrites system headers; (bso#13341); + winbindd: 'wbinfo --name-to-sid' returns misleading result on invalid query; (bso#13312); + s3:passdb: Do not return OK if we don't have pinfo set up; (bso#13376); + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);- Use new foreground execution flags for systemd samba daemons; (bsc#1088574); (bsc#1071090); (bsc#1065551); + Add %post scriptlet to clear old sysconfig flags - Update vendor-files to commit 880b3e7. + Set samba sysconfig template variables to "" + Add required daemon flags directly to systemd unit- Specfile cleanup + Remove %if..%endif guards which don't affect the build + Remove redundant %clean section + Replace old $RPM_* shell vars with macros- BuildRequire pkgconfig(systemd) and pkgconfig(libsystemd) in place of systemd and systemd-devel: Allow OBS to optimize the workload by allowing the usage of the 'build-optimized' systemd packages.- Enable building samba with python3, and create a samba-python3 package.- Update to 4.8 + New GUID Index mode in sam.ldb for the AD DC + GPO support for samba KDC + Time machine support with vfs_fruit + Encrypted secrets + AD Replication visualization + Improved trust support - ability to not scan global trust list - AD external trusts have limited support - verbose trusted domain listing + VirusFilter VFS module + NT4-style replication removed + vfs_aio_linux removed- Disable samba-pidl package, due to the removal of dependency perl-Parse-Yapp; (bsc#1085150);- Update to 4.7.6; + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally; (bso#11343); (bsc#1081741); + CVE-2018-1057: Authenticated users can change other users' password; (bso#13272); (bsc#1081024).- Disable python until full python3 port is done; (bsc#1082139); + Remove contents of package samba-python + Remove contents of package libsamba-policy0 + Remove contents of package libsamba-policy-devel + Remove library libsamba-python-samba4.so from samba-libs package + Remove library libsamba-net-samba4.so from samba-libs package + Remove smbtorture binary and manpage from samba-test- samba fails to build with glibc2.27; (bsc#1081042);- Update to 4.7.5; (bsc#1080545); + smbd tries to release not leased oplock during oplock II downgrade; (bso#13193); + Fix copying file with empty FinderInfo from Windows client to Samba share with fruit; (bso#13181); + build: Deal with recent glibc sunrpc header removal; (bso#10976); + Make Samba work with tirpc and libnsl2; (bso#13238); + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208); (bsc#1075206); + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue; (bso#12986); + ctdb-recovery-helper: Deregister message handler in error paths; (bso#13188); + samba: Only use async signal-safe functions in signal handler; (bso#13240); + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue; (bso#12986); + repl_meta_data: Fix linked attribute corruption on databases with unsorted links on expunge. dbcheck: Add functionality to fix the corrupt database; (bso#13228); + Fix smbd panic when chdir returns error during exit; (bso#13189); + Make Samba work with tirpc and libnsl2; (bso#13238); + Fix POSIX ACL support on HPUX and possibly other big-endian OSs; (bso#13176);- Update to 4.7.4; (bsc#1080545); + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140); + s3: libsmb: Fix valgrind read-after-free error in cli_smb2_close_fnum_recv(); (bso#13171); + s3: libsmb: Fix reversing of oldname/newname paths when creating a reparse point symlink on Windows from smbclient; (bso#13172); + Build man page for vfs_zfsacl.8 with Samba; (bso#12934); + repl_meta_data: Allow delete of an object with dangling backlinks; (bso#13095); + s4:samba: Fix default to be running samba as a deamon; (bso#13129); + Performance regression in DNS server with introduction of DNS wildcard, ldb: Release 1.2.3; (bso#13191); + vfs_zfsacl: Fix compilation error; (bso#6133); + "smb encrypt" setting changes are not fully applied until full smbd restart; (bso#13051); + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052); + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155); + winbindd: Dependency on trusted-domain list in winbindd in critical auth codepath; (bso#13173); + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120); + ctdb: sock_daemon leaks memory; (bso#13153); + TCP tickles not getting synchronised on CTDB restart; (bso#13154); + winbindd: winbind parent and child share a ctdb connection; (bso#13150); + pthreadpool: Fix deadlock; (bso#13170); + pthreadpool: Fix starvation after fork; (bso#13179); + messaging: Always register the unique id; (bso#13180); + s4/smbd: set the process group; (bso#13129); + Fix broken linked attribute handling; (bso#13095); + The KDC on an RWDC doesn't send error replies in some situations; (bso#13132); + libnet_join: Fix 'net rpc oldjoin'; (bso#13149); + g_lock conflict detection broken when processing stale entries; (bso#13195); + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired sessions; (bso#13197); + s3:libads: net ads keytab list fails with "Key table name malformed"; (bso#13166); (bsc#1067700); + Fix crash in pthreadpool thread after failure from pthread_create; (bso#13170); + s4:samba: Allow samba daemon to run in foreground; (bso#13129); (bsc#1065551); + third_party: Link the aesni-intel library with "-z noexecstack"; (bso#13174); + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I" options; (bso#13125);- Re-enable usage of libnsl (did got lost with glibc change) - Use TI-RPC (sunrpc is deprecated and will be removed soon from glibc)- smbc_opendir should not return EEXIST with invalid login credentials; (bnc#1065868).- Update to 4.7.3; (bsc#1069666); + Non-smbd processes using kernel oplocks can hang smbd; (bso#13121); + python: use communicate to fix Popen deadlock; (bso#13127); + smbd on disk file corruption bug under heavy threaded load; (bso#13130); + tevent: version 0.9.34; (bso#13130); + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118); + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug; (bsc#1060427);(bso#13041); + CVE-2017-15275: s3: smbd: Chain code can return uninitialized memory when talloc buffer is grown; (bsc#1063008); (bso#13077); - Build with AD DC support only in openSUSE.- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- samba-tool requires samba-python; (bnc#1067771).- Run all daemons in the foreground and let systemd handle it; (bsc#1065551). - Update to 4.7.1; + Fix exporting subdirs with shadow_copy2; (bso#13091); + Currently if getwd() fails after a chdir(), we panic; (bso#13027); + Ensure default SMB_VFS_GETWD() call can't return a partially completed struct smb_filename; (bso#13068); + sys_getwd() can leak memory or possibly return the wrong errno on older systems; (bso#13069); + smbclient doesn't correctly canonicalize all local names before use; (bso#13093); + Fix broken linked attribute handling; (bso#13095); + Missing LDAP query escapes in DNS rpc server; (bso#12994); + Link to -lbsd when building replace.c by hand; (bso#13087); + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem; (bso#6133); + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module; (bso#7909); + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module; (bso#7933); + Missing assignment in sl_pack_float; (bso#12991); + Wrong Samba access checks when changing DOS attributes; (bso#12995); + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062); + groupmap cleanup should not delete BUILTIN mappings; (bso#13065); + Enabling vfs_fruit results in loss of Finder tags and other xattrs; (bso#13076); + man pages: Properly ident lists; (bso#9613); + smb.conf.5: Sort parameters alphabetically; (bso#13081); + Fix GUID string format on GetPrinter info; (bso#12993); + Remote serverid check doesn't check for the unique id; (bso#13042); + CTDB starts consuming memory if there are dead nodes in the cluster; (bso#13056); + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070); + libgpo doesn't sort the GPOs in the correct order; (bso#13046); + Remote serverid check doesn't check for the unique id; (bso#13042); + vfs_catia: Fix a potential memleak; (bso#13090); + Fix file change notification for renames; (bso#12903); + Samba DNS server does not honour wildcards; (bso#12952); + Can't change password in samba from a Windows client if Samba runs on IPv6 only interface; (bso#13079); + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086); + Apple client can't cope with SMB2 async replies when creating symlinks; (bso#13047); + s4:rpc_server:backupkey: Move variable into scope; (bso#12959); + Fix ntstatus_gen.h generation on 32bit; (bso#13099); + Fix a double free in vfs_gluster_getwd(); (bso#13100); + Fix resouce leaks and pointer issues; (bso#13101); + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);- Add samba-kdc to baselibs.conf. - Do not wrap samba-kdc's package definition into if/endif: the package won't be generated simply based on the fact that there is no files section for the package. Allows the source validator to ensure samba-kdc is a built package.- Update to 4.7.0; + Whole DB read locks: Improved LDAP and replication consistency; (bso#12858). + Samba AD with MIT Kerberos + Dynamic RPC port range: Default range changed from "1024-1300" to "49152-65535". + Authentication and Authorization audit support: New auth_audit debug class. + Multi-process LDAP Server: The LDAP server in the AD DC now honours the process model used for the rest of the 'samba' process. + Improved Read-Only Domain Controller (RODC) Support; (bso#12977). + Additional password hashes stored in supplementalCredentials. + Improvements to DNS during Active Directory domain join. + Significant AD performance and replication improvements. + Query record for open file or directory. + Removal of lpcfg_register_defaults_hook(). + Change of loadable module interface. + SHA256 LDAPS Certificates: The self-signed certificate generated for use on LDAPS will now be generated with a SHA256 self-signature, not a SHA1 self-signature. + CTDB no longer allows mixed minor versions in a cluster. + CTDB now ignores hints from Samba about TDB flags when attaching to databases. + New configuration variable CTDB_NFS_CHECKS_DIR. + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed. + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed. + The example NFS Ganesha call-out has been improved. + A new "replicated" database type is available.- CVE-2017-12163: Prevent client short SMB1 write from writing server memory to file; (bso#13020); (bsc#1058624).- CVE-2017-12150: Some code path don't enforce smb signing, when they should; (bso#12997); (bsc#1058622).- CVE-2017-12151: Keep required encryption across SMB3 dfs redirects; (bso#12996); (bsc#1058565).- Clean specfile assuming SUSE-only system and product >=SLE11 + %{ul_version}, %{rhel_version}, %{mandriva_version}, %{centos_version} are always undefined + %{_vendor} is "suse" and %{suse_version} is at least 1100- Update to 4.6.7; (bsc#1054017) + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392). + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937). + vfs_ceph provides inconsistent directory listings; (bso#12911). + Misused talloc context can cause a user to crash their smbd by chaining SMB1 commands.; (bso#12836). + Use-after free can crash libsmbclient code.; (bso#12927). + Server exit with active AIO can crash.; (bso#12925). + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910). + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs; (bso#12898). + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897). + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for authentication; (bso#12886). + finder sidebar showing question mark instead of icon when using ip to connect with vfs_fruit; (bso#12840). + Winbind stops obtaining the 'unixHomeDirectory' & 'loginShell' attributes from AD.; (bso#12720). + KCC run at selftest startup can fail spuriously due to a race; (bso#12869). + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for the remote change; (bso#12782). + rpc_pipe_client memory leaks due to long term memory context passed to rpc_pipe_open_interface(); (bso#12890). + CVE-2017-2619 breaks accessing previous versions of directories with snapshots in subdirectories of the share; (bso#12885). + dns_name_equal doing OOB read; (bso#12813). + replica_sync tests flap; (bso#12753). + Selftest should not call 'net cache flush' and wipe important winbind entries; (bso#12868). + Old Samba versions don't support using recent ldb versions (>=1.1.30); (bso#12859). + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490). + race starting winbindd against posixacl test; (bso#12843). + Crash in the reentrant smbd_smb2_create_send() if the something fails in the subsequent try; (bso#12832). + spnego.c passes the wrong argument order to gensec_update_ev() for the FALLBACK case; (bso#12788). + Clients with SMB3 support can't connect with "server max protocol = SMB2_02"; (bso#12772). + A log message of samb-tool user syncpasswords reverses string arguments in a debug message "Call Popen[...".; (bso#12768). + The smb tarmode tests kills the share dir contents; (bso#12867). + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862). + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860). + manpage/index.html lists links not in alphabetical order; (bso#12854). + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831). + If a record is locked in a database, then recovery does not complete; (bso#12857). + debug_locks.sh script does not log any information; (bso#12856). + SIGSEGV in cm_connect_lsa_tcp dereferencing conn->lsa_tcp_pipe->transport after error; (bso#12852). + smbclient can't parse DOMAIN+username if a different winbind separator is used; (bso#12849). + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845). + Related requests with TreeConnect fail with NETWORK_NAME_DELETED; (bso#12844). + cli->server_os not filled correctly; (bso#12779). + REGRESSION: smbclient doesn't print the session setup anymore; (bso#12824). + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808). + CTDB NFS call-out failures do not cause event failures; (bso#12837). + net command fails due to incorrectly return code; (bso#12828). + Fix building Samba with GCC 7.1; (bso#12827).- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again; (bsc#1048339).- fix cephwrap_chdir(); (bsc#1048790). - Update to 4.6.6 + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation; (bsc#1048278).- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).- Fix inconsistent ctdb socket path; (bsc#1048352). - Fix non-admin cephx authentication; (bsc#1048387).- Update to 4.6.5; (bsc#1040157) + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at startup; (bso#12814). + vfs_expand_msdfs tries to open the remote address as a file path; (bso#12687). + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type); (bso#12798). + With clustering get update_num_read_oplocks failed and PANIC: num_share_modes == 1 assertion failure; (bso#11844). + contend_level2_oplocks_begin_default oplock optimisation doesn't carry over to leases; (bso#12766). + `ctdb nodestatus` incorrectly displays status for all nodes with wrong exit code; (bso#12802). + CTDB can spin hard on revoking readonly delegations if a node becomes disconnected; (bso#12697). + Printing a share mode entry with leases can crash in the ndr code; (bso#12793). + Fix flakey unit tests for eventd; (bso#12792). + CTDB daemon crashes if built with clang; (bso#12770). + smbcacls fails if no password is specified; (bso#12765). + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757). + samba-tool user syncpasswords doesn't trigger the script when a user gets removed; (bso#12767). + systemd: fix detection of libsystemd; (bso#12764). + Notify subsystem only maps first inotify mask to Windows notify filter; (bso#12760). + Allow passing trusted domain password as plain-text to PASSDB layer; (bso#12751). + Can't case-rename files with vfs_fruit; (bso#12749). + wrong sid->uid mapping for SIDs residing in sIDHistory; (bso#12702). + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562). + Ordering of notify responses broken; (bso#12756).- s3: libsmb: Fix error where short name length was read as 2 bytes, should be 1; (bso#11822); (bsc#1042419).- Revert explicit winbind %{version}-%{release} dependency. + The ABI has stabilized since (bsc#936909), so remove to fix cross-media dependencies; (bsc#1037899).- Fix CVE-2017-7494 remote code execution from a writable share; (bso#12780); (bsc#1038231).- Update to 4.6.3; (bsc#1036011) + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots from shares with GlusterFS backend; (bso#12743). + Fix for Solaris C compiler; (bso#12559). + s3: locking: Update oplock optimization for the leases era; (bso#12628). + Make the Solaris C compiler happy; (bso#12693). + s3: libgpo: Allow skipping GPO objects that don't have the expected LDAP attributes; (bso#12695). + Fix buffer overflow caused by wrong use of getgroups; (bso#12747). + lib: debug: Avoid negative array access; (bso#12746). + cleanupdb: Fix a memory read error; (bso#12748). + streams_xattr and kernel oplocks results in NT_STATUS_NETWORK_BUSY; (bso#7537). + winbindd: idmap_autorid allocates ids for unknown SIDs from other backends; (bso#11961). + vfs_fruit: Resource fork open request with flags=O_CREAT|O_RDONLY; (bso#12565). + manpages/vfs_fruit: Document global options; (bso#12615). + lib/pthreadpool: Fix a memory leak; (bso#12624). + Lookup-domain for well-known SIDs on a DC; (bso#12727). + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728). + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729). + credentials_krb5: use gss_acquire_cred for client-side GSSAPI use case; (bso#12611). + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690). + ctdb-readonly: Avoid a tight loop waiting for revoke to complete; (bso#12697). + ctdb_event monitor command crashes if event is not specified; (bso#12723). + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733). + smbd: Fix smb1 findfirst with DFS; (bso#12558). + smbd: Do an early exit on negprot failure; (bso#12610). + winbindd: Fix substitution for 'template homedir'; (bso#12699). + s4:kdc: Disable principal based autodetected referral detection; (bso#12554). + idmap_autorid: Allocate new domain range if the callers knows the sid is valid; (bso#12613). + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724). + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for trusted domain; (bso#12725). + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731). + winbindd: Fix password policy for pam authentication; (bso#12725). + s3:gse: Correctly handle external trusts with MIT; (bso#12554). + auth/credentials: Always set the realm if we set the principal from the ccache; (bso#12611). + replace: Include sysmacros.h; (bso#12686). + s3:vfs_expand_msdfs: Do not open the remote address as a file; (bso#12687). + s3:libsmb: Only print error message if kerberos use is forced; (bso#12704). + winbindd: Child process crashes when kerberos-authenticating a user with wrong password; (bso#12708). + vfs_fruit: Office document opens as read-only on macOS due to CNID semantics; (bso#12715). + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is fragmented; (bso#12737).- Generate and update vendor-files tarball from Git + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).- Generate source tarball directly from Git using OBS tar_scm + use version string derived from parent Git tag and commit hash - remove obsolete vendor-files/tools/package-data version ID + explicitly generate ctdb manpages, needed without "make dist"- Update to 4.6.2 + remove bso#12721 patches now upstream- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622). + x86-64 and aarch64- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).- Build and install the html man pages (bsc#1021907).- Fix CVE-2017-2619 regression with "follow symlinks = no"; (bso#12721).- Update to 4.6.1 + symlink race permits opening files outside share directory; CVE-2017-2619; (bso#12496); (bsc#1027147) + testparm checks for valid idmap parameters + add new krb client encryption types + support for printer driver upload from windows 10 + inherit owner = 'unix only' for improved quota support + improved CTDB event support + new primary group support for idmap_ad + idmap_hash deprecated + mvxattr added to recursively rename extended attributes- Remove chkconfig requirements for systemd systems- Don't call insserv if systemd is used- Fix check if we need to require insserv- async_req: make async_connect_send() "reentrant"; (bso#12105); (bsc#1024416).- Force usage of ncurses6-config thru NCURSES_CONFIG env var; (bsc#1023847).- add missing patch for libnss_wins segfault; (bsc#995730).- Fix vfs_ceph builds against recent Ceph versions; (bsc#1021933).- Document "winbind: ignore domains" parameter; (bsc#1019416).- Add base Samba dependency to samba-ceph package.- Update to 4.5.3 + Heap-based Buffer Overflow Remote Code Execution Vulnerability; CVE-2016-2123; (bso#12409); (bsc#1014437). + Don't send delegated credentials to all servers; CVE-2016-2125; (bso#12445); (bsc#1014441). + denial of service due to a client triggered crash in the winbindd parent process; CVE-2016-2126; (bso#12446); (bsc#1014442). - 4.5.1 and 4.5.2 updates + various streams vfs fixes + various printing fixes + ntlm_auth: do not map explicitly empty domain + various stability fixes in smbd + match file compression ReFS behavior- Add missing ldb module directory; (bnc#1012092).- s3/client: obey 'disable netbios' smb.conf param, don't connect via NBT port; (bsc#1009085); (bso#12418).- Include vfstest in samba-test; (bsc#1001203).- s3/winbindd: using default domain with user@domain.com format fails; (bsc#997833).- Fix segfault in libnss_wins; (bso#12277); (bso#12269); (bsc#995730).- Update to 4.5.0 + NTLM1 Authentication disabled by default + SMB2.1 leases enabled by default + Support for OFD locks + ctdb tool rewritten + Added shadow copy snapshot prefix parameter- Fix illegal memory access after memory has been deleted; (bso#11836); (bsc#975299).- Prevent core, make sure response->extra_data.data is always cleared out; (bsc#993692).- Don't package man pages for VFS modules that aren't built; (boo#993707).- Fix population of ctdb sysconfig after source merge; (bsc#981566).- Enable vfs_ceph builds for Factory (x86-64) + Package as samba-ceph to avoid Ceph dependency in base package.- Update to 4.4.5 + Prevent client-side SMB2 signing downgrade; CVE-2016-2119; (bso#11860); (bsc#986869).- Remove obsolete syslog.target; (bsc#983938).- Honor smb.conf socket options in winbind; (bsc#975131).- Don't use htons() with IP_PROTO_RAW; (bso#11705); (bsc#969522).- Update to 4.4.4 + SMB3 multichannel: Add implementation of missing channel sequence number verification; (bso#11809). + smbd:close: Only remove kernel share modes if they had been taken at open; (bso#11919). + notifyd: Prevent NULL deref segfault in notifyd_peer_destructor; (bso#11930). + s3:rpcclient: Make '--pw-nt-hash' option work; (bso#10796). + Fix case sensitivity issues over SMB2 or above; (bso#11438). + s3:smbd: Fix anonymous authentication if signing is mandatory. (bso#11910) + Fix NTLM Authentication issue with squid; (bso#11914). + pdb: Fix segfault in pdb_ldap for missing gecos; (bso#11530). + Fix memory leak in share mode locking; (bso#11934).- Update to 4.4.3 + Various post-badlock regressions; (bso#11841); (bso#11850); (bso#11858); (bso#11870); (bso#11872). + Only allow idmap_hash for default idmap config (bso#11786). + smbd: Avoid large reads beyond EOF; (bso#11878). + vfs_acl_common: Avoid setting POSIX ACLs if "ignore system acls" is set; (bso#11806). + libads: Record session expiry for spnego sasl binds; (bso#11852).- Fix NTLMSSP regressions caused by previous CVE fixes; (bso#11849); (bsc#975962); (bsc#979268), (bsc#977669).- Revert shared library packaging to comply with SLPP- Update to 4.4.2 + A man-in-the-middle can downgrade NTLMSSP authentication; CVE-2016-2110; (bso#11688); (bsc#973031). + Domain controller netlogon member computer can be spoofed; CVE-2016-2111; (bso#11749); (bsc#973032). + LDAP conenctions vulnerable to downgrade and MITM attack; CVE-2016-2112; (bso#11644); (bsc#973033). + TLS certificate validation missing; CVE-2016-2113; (bso#11752); (bsc#973034). + Named pipe IPC vulnerable to MITM attacks; CVE-2016-2115; (bso#11756); (bsc#973036). + "Badlock" DCERPC impersonation of authenticated account possible; CVE-2016-2118; (bso#11804); (bsc#971965). + DCERPC server and client vulnerable to DOS and MITM attacks; CVE-2015-5370; (bso#11344); (bsc#936862).- Fix samba.tests.messaging test and prevent potential tdb corruption by removing obsolete now invalid tdb_close call; (bsc#974629).- Obsolete libsmbclient from libsmbclient0 while not providing it; (bsc#972197).- Update to 4.4.0. + Read of uninitialized memory DNS TXT handling; (bso#11128); (bso#11686); CVE-2016-0771. + Getting and setting Windows ACLs on symlinks can change permissions on link target; (bso#11648); CVE-2015-7560. + Sockets with htons(IPPROTO_RAW); (bso#11705); CVE-2015-8543. + s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystem with no ACL support; (bso#10489). + docs: Add example for domain logins to smbspool man page; (bso#11643). + smbd: Show correct disk size for different quota and dfree block sizes; (bso#11681). + docs: Add smbspool_krb5_wrapper manpage; (bso#11690). + winbindd: Return trust parameters when listing trusts; (bso#11691). + ctdb: Do not provide a useless pkgconfig file for ctdb; (bso#11696). + Crypto.Cipher.ARC4 is not available on some platforms, fallback to M2Crypto.RC4.RC4 then; (bso#11699). + s3:utils/smbget: Set default blocksize; (bso#11700). + Streamline 'smbget' options with the rest of the Samba utils; (bso#11700). + s3:clispnego: Fix confusing warning in spnego_gen_krb5_wrap(); (bso#11702). + s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703). + loadparm: Fix memory leak issue; (bso#11708). + lib/tsocket: Work around sockets not supporting FIONREAD; (bso#11714). + s3:vfs:glusterfs: Fix build after quota changes; (bso#11715). + ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ..."; (bso#11719). + lib:socket: Fix CID 1350010: Integer OVERFLOW_BEFORE_WIDEN; (bso#11723). + smbd: Fix CID 1351215 Improper use of negative value; (bso#11724). + smbd: Fix CID 1351216 Dereference null return value; (bso#11725). + s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new file; (bso#11727). + docs: Add manpage for cifsdd; (bso#11730). + param: Fix str_list_v3 to accept ; again; (bso#11732). + lib/socket: Fix improper use of default interface speed; (bso#11734). + lib:socket: Fix CID 1350009: Fix illegal memory accesses (BUFFER_SIZE_WARNING); (bso#11735). + libcli: Fix debug message, print sid string for new_ace trustee; (bso#11738). + Fix installation path of Samba helper binaries; (bso#11739). + Fix memory leak in loadparm; (bso#11740). + tevent: version 0.9.28: Fix memory leak when old signal action restored; (bso#11742). + smbd: Ignore SVHDX create context; (bso#11753). + Fix net join; (bso#11755). + s3:libads: setup the msDS-SupportedEncryptionTypes attribute on ldap_add; (bso#11755). + passdb: Add linefeed to debug message; (bso#11763). + s3:utils/smbget: Fix option parsing; (bso#11767). + libnet: Make Kerberos domain join site-aware; (bso#11769). + Reset TCP Connections during IP failover; (bso#11770). + ldb: Version 1.1.26; (bso#11772). + s3:smbd: Add negprot remote arch detection for OSX; (bso#11773). + vfs_glusterfs: Fix use after free in AIO callback; (bso#11774). + mkdir can return ACCESS_DENIED incorrectly on create race; (bso#11780). + "trustdom_list_done: Got invalid trustdom response" message should be avoided; (bso#11782). + Mismatch between local and remote attribute ids lets replication fail with custom schema; (bso#11783). + Quota is not supported on Solaris 10; (bso#11788). + Talloc: Version 2.1.6; (bso#11789). + smbd: Enable multi-channel if 'server multi channel support = yes' in the config; (bso#11796). + build: Fix build when '--without-quota' specified; (bso#11798). + lib/socket/interfaces: Fix some uninitialied bytes; (bso#11802). + Access based share enum: handle permission set in configuration files; (bso#8093). + See also WHATSNEW.txt from the samba-doc package.- Update to 4.3.6. + Getting and setting Windows ACLs on symlinks can change permissions on link target; CVE-2015-7560; (bso#11648); (bsc#968222). + Fix Out-of-bounds read in internal DNS server; CVE-2016-0771; (bso#11128); (bso#11686); (bsc#968223).- Upgrade on-disk FSRVP server state to new version; (bsc#924519).- Only obsolete but do not provide gplv2/3 package names; (bsc#968973).- Relocate existing lock files to /var/lib/samba/lock; (bsc#968963).- Obsolete no longer existing samba-32bit package; (bsc#967625).- Update to 4.3.5. + s3:utils/smbget: Fix recursive download; (bso#6482). + s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystemi with no ACL support; (bso#10489). + s3:smbd/oplock: Obey kernel oplock setting when releasing oplocks; (bso#11400). + vfs_shadow_copy2: Fix case where snapshots are outside the share; (bso#11580). + smbclient: Query disk usage relative to current directory; (bso#11662). + winbindd: Handle expired sessions correctly; (bso#11670). + smbd: Show correct disk size for different quota and dfree block sizes; (bso#11681). + smbcacls: Fix uninitialized variable; (bso#11682). + s3:smbd: Ignore initial allocation size for directory creation; (bso#11684). + s3-client: Add a KRB5 wrapper for smbspool; (bso#11690). + s3-parm: Clean up defaults when removing global parameters; (bso#11693). + Use M2Crypto.RC4.RC4 on platforms without Crypto.Cipher.ARC4; (bso#11699). + s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703). + ctdb: Remove error messages after kernel security update; CVE-2015-8543; (bso#11705). + loadparm: Fix memory leak issue; (bso#11708). + lib/tsocket: Work around sockets not supporting FIONREAD; (bso#11714). + ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ..."; (bso#11719). + s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new file; (bso#11727). + param: Fix str_list_v3 to accept ";" again; (bso#11732).- Shift samba-client sysconfig data into samba and samba-winbind; (bsc#947361).- Simplify shared library packaging; (bsc#966956).- Enable clustering (CTDB) support; (bsc#966271).- s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703); (bsc#964023).- Add quotes around path of update-apparmor-samba-profile; (bnc#962177).- Remove autoconf build-time requirement.- Update to 4.3.4. + vfs_fruit: Enable POSIX directory rename semantics; (bso#11065). + Crash: Bad talloc magic value - access after free; (bso#11394). + Copying files with vfs_fruit fails when using vfs_streams_xattr without stream prefix and type suffix; (bso#11466). + samba-tool: Fix uncaught exception if no fSMORoleOwner attribute is given; (bso#11613). + Fix a typo in the smb.conf manpage, explanation of idmap config; (bso#11619). + Correctly initialize the list head when keeping a list of primary followed by DFS connections; (bso#11624). + Reduce the memory footprint of empty string options; (bso#11625). + lib/async_req: Do not install async_connect_send_test; (bso#11639). + Fix typos in man vfs_gpfs; (bso#11641). + Make "hide dot files" option work with "store dos attributes = yes"; (bso#11645). + Fix a corner case of the symlink verification; (bso#11647); (bnc#960249). + Do not disable "store dos attributes" on-the-fly; (bso#11649). + Update lastLogon and lastLogonTimestamp; (bso#11659).- Prevent access denied if the share path is "/"; (bso#11647); (bnc#960249).- Update to 4.3.3. + Malicious request can cause Samba LDAP server to hang, spinning using CPU; CVE-2015-3223; (bso#11325); (bnc#958581). + Remote read memory exploit in LDB; CVE-2015-5330; (bso#11599); (bnc#958586). + Insufficient symlink verification (file access outside the share); CVE-2015-5252; (bso#11395); (bnc#958582). + No man in the middle protection when forcing smb encryption on the client side; CVE-2015-5296; (bso#11536); (bnc#958584). + Currently the snapshot browsing is not secure thru windows previous version (shadow_copy2); CVE-2015-5299; (bso#11529); (bnc#958583). + Fix Microsoft MS15-096 to prevent machine accounts from being changed into user accounts; CVE-2015-8467; (bso#11552); (bnc#958585).- Update to 4.3.2. + vfs_gpfs: Re-enable share modes; (bso#11243). + dcerpc.idl: Accept invalid dcerpc_bind_nak pdus; (bso#11327). + s3-smbd: Fix old DOS client doing wildcard delete - gives an attribute type of zero; (bso#11452). + Add libreplace dependency to texpect, fixes a linking error on Solaris; (bso#11511). + s4: Fix linking of 'smbtorture' on Solaris; (bso#11512). + s4:lib/messaging: Use correct path for names.tdb; (bso#11562). + Fix segfault of 'net ads (join|leave) -S INVALID' with nss_wins; (bso#11563). + async_req: Fix non-blocking connect(); (bso#11564). + auth: gensec: Fix a memory leak; (bso#11565). + lib: util: Make non-critical message a warning; (bso#11566). + Fix winbindd crashes with samlogon for trusted domain user; (bso#11569); (bnc#949022). + smbd: Send SMB2 oplock breaks unencrypted; (bso#11570). + ctdb: Open the RO tracking db with perms 0600 instead of 0000; (bso#11577). + s3:smb2_server: Make the logic of SMB2_CANCEL DLIST_REMOVE() clearer; (bso#11581). + s3-smbd: Fix use after issue in smbd_smb2_request_dispatch(); (bso#11581). + manpage: Correct small typo error; (bso#11584). + s3: smbd: If EAs are turned off on a share don't allow an SMB2 create containing them; (bso#11589). + Backport some valgrind fixes from upstream master; (bso#11597). + auth: Consistent handling of well-known alias as primary gid; (bso#11608). + winbind: Fix crash on invalid idmap configs; (bso#11612). + s3: smbd: have_file_open_below() fails to enumerate open files below an open directory handle; (bso#11615). + Changing log level of two entries to DBG_NOTICE; (bso#9912).- Ensure samlogon fallback requests are rerouted after kerberos failure; (bnc#953382); (bnc#953972).- Ensure to link with --as-needed flag by removing SUSE_ASNEEDED=0. - Always use the default optimization even on pre-9.2 systems.- Remove redundant configure options while adding with-relro.- Relocate the lockdir to the /var/lib/samba/lock directory.- Cleanup and enhance the pidl sub package.- Require renamed python-ldb-devel and python-talloc-devel at build-time. - Requires python-ldb and python-talloc from the python subpackage.- Update to 4.3.1. + s3: smbd: Fix our access-based enumeration on "hide unreadable" to match Windows; (bso#10252). + nss_winbind: Fix hang on Solaris on big groups; (bso#10365). + smbd: Fix file name buflen and padding in notify repsonse; (bso#10634). + kerberos: Make sure we only use prompter type when available; winbind: Fix 100% loop; (bso#11038). + source3/lib/msghdr.c: Fix compiling error on Solaris; (bso#11053). + s3:ctdbd_conn: make sure we destroy tevent_fd before closing the socket; (bso#11316). + s3: smbd: Fix mkdir race condition; (bso#11486). + pam_winbind: Fix a segfault if initialization fails; (bso#11502). + s3: dfs: Fix a crash when the dfs targets are disabled; (bso#11509). + s4:lib/messaging: Use 'msg.lock' and 'msg.sock' for messaging related subdirs; (bso#11515). + s3: smbd: Fix opening/creating :stream files on the root share directory; (bso#11522). + lib/param: Fix hiding of FLAG_SYNONYM values; (bso#11526). + net: Fix a crash with 'net ads keytab create'; (bso#11528). + s3: smbd: Fix a crash in unix_convert(); (bso#11535). + s3: smbd: Fix NULL pointer bug introduced by previous 'raw' stream fix (bso#11522); (bso#11535). + vfs_fruit: Return value of ad_pack in vfs_fruit.c; (bso#11543). + vfs_commit: set the fd on open before calling SMB_VFS_FSTAT; (bso#11547). + s3:locking: Initialize lease pointer in share_mode_traverse_fn(); (bso#11549). + s3:smbstatus: Add stream name to share_entry_forall(); (bso#11550). + s3:lib: Validate domain name in lookup_wellknown_name(); (bso#11555). + s3: lsa: lookup_name() logic for unqualified (no DOMAIN component) names is incorrect; (bso#11555).- Fix 100% CPU in winbindd when logging in with "user must change password on next logon"; (bso#11038).- Relocate the tmpfiles.d directory to the client package; (bnc#947552).- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf instead; (bnc#942716).- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).- Package /var/lib/samba/msg with 0755 permissions; (bso#11515); (bnc#945502).- Require to install libfam0-gamin from samba-libs on post-12.1 and pre-13.15 systems; (bnc#945013).- Update to 4.3.0. + Samba "map to guest = Bad uid" doesn't work; (bso#9862). + revert LDAP extended rule 1.2.840.113556.1.4.1941 LDAP_MATCHING_RULE_IN_CHAIN changes; (bso#10493). + No objectClass found in replPropertyMetaData on ordinary objects (non-deleted); (bso#10973). + Stream names with colon don't work with fruit:encoding = native; (bso#11278). + NetApp joined to a Samba/ADDC cannot resolve SIDs; (bso#11291). + tevent_fd needs to be destroyed before closing the fd; (bso#11316). + "force group" with local group not working; (bso#11320). + strsep is not available on Solaris; (bso#11359). + smbtorture does not build when configured --with-system-mitkrb5; (bso#11411). + Build with GPFS support is broken; (bso#11421). + Build broken with --disable-python; (bso#11424). + net share allowedusers crashes; (bso#11426). + nmbd incorrectly matches netbios names as own name; (bso#11427). + Python bindings don't check integer types; (bso#11429). + Python bindings don't check array sizes; (bso#11430). + CTDB's eventscript error handling is broken; (bso#11431). + Fix crash in nested ctdb banning; (bso#11432). + Cannot build ctdbpmda; (bso#11434). + samba-tool uncaught exception error; (bso#11436). + Crash in notify_remove caused by change notify = no; (bso#11444). + Poor SMB3 encryption performance with AES-GCM; (bso#11451). + Poor SMB3 encryption performance with AES-GCM (part1); (bso#11451). + fix recursion problem in rep_strtoll in lib/replace/replace.c; (bso#11455). + --bundled-libraries=!ldb,!pyldb,!pyldb-util doesn't disable ldb build and install; (bso#11458). + xid2sid gives inconsistent results; (bso#11464). + ctdb: Fix the build on FreeBSD 10.1; (bso#11465). + Handling of 0 byte resource fork stream; (bso#11467). + AD samr GetGroupsForUser fails for users with "()" in their name; (bso#11488).- Configure with --bundled-libraries=NONE; (bso#11458).- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).- Remove libiniparser-devel build-time requirement.- Update to 4.2.3. + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780). + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924). + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991). + Logon via MS Remote Desktop hangs; (bso#11061). + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068). + tevent: Add a note to tevent_add_fd(); (bso#11141). + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170). + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217). + smbd: Fix a use-after-free; (bso#11218); (bnc#919309). + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces; (bso#11245). + s3:smb2: Add padding to last command in compound requests; (bso#11277). + Add IPv6 support to ADS client side LDAP connects; (bso#11281). + Add IPv6 support for determining FQDN during ADS join; (bso#11282). + s3: IPv6 enabled DNS connections for ADS client; (bso#11283). + Fix invalid write in ctdb_lock_context_destructor; (bso#11293). + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295). + vfs_fruit: Add option "veto_appledouble"; (bso#11305). + tstream: Make socketpair nonblocking; (bso#11312). + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313). + Group creation: Add msSFU30Name only when --nis-domain was given; (bso#11315). + tevent_fd needs to be destroyed before closing the fd; (bso#11316). + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared"; (bso#11319). + smbd/trans2: Add a useful diagnostic for files with bad encoding; (bso#11323). + Change sharesec output back to previous format; (bso#11324). + Robust mutex support broken in 1.3.5; (bso#11326). + Kerberos auth info3 should contain resource group ids available from pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info exists in PAC; (bso#11328); (bnc#912457). + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329). + tevent: Fix CID 1035381 Unchecked return value; (bso#11330). + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331). + s3: smbd: Use separate flag to track become_root()/unbecome_root() state; (bso#11339). + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342). + pidl: Make the compilation of PIDL producing the same results if the content hasn't change; (bso#11356). + winbindd: Disconnect child process if request is cancelled at main process; (bso#11358). + vfs_fruit: Check offset and length for AFP_AfpInfo read requests; (bso#11363). + docs: Overhaul the description of "smb encrypt" to include SMB3 encryption; (bso#11366). + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server(); (bso#11367). + ncacn_http: Fix GNUism; (bso#11371).- Disable rpath usage; (bnc#902421).- Make the winbind package depend on the matching libwbclient version and vice versa; (bnc#936909).- Backport changes to use resource group sids obtained from pac logon_info; (bso#11328); (bnc#912457).- Order winbind.service Before and Want nss-user-lookup target.- Remove fam-devel build-time dependency for post-6 RHEL systems.- Update to 4.2.2. + s3:smbXsrv: refactor duplicate code into smbXsrv_session_clear_and_logoff(); (bso#11182). + gencache: don't fail gencache_stabilize if there were records to delete; (bso#11260). + s3: libsmbclient: After getting attribute server, ensure main srv pointer is still valid; (bso#11186). + s4: rpc: Refactor dcesrv_alter() function into setup and send steps; (bso#11236). + s3: smbd: Incorrect file size returned in the response of "FILE_SUPERSEDE Create"; (bso#11240). + Mangled names do not work with acl_xattr; (bso#11249). + nmbd rewrites browse.dat when not required; (bso#11254). + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff; (bso#11213). + s3:smbd: Add missing tevent_req_nterror; (bso#11224). + vfs: kernel_flock and named streams; (bso#11243). + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244). + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses are used; (bso#11284). + ctdb: check for talloc_asprintf() failure; (bso#11201). + spoolss: purge the printer name cache on name change; (bso#11210); (bnc#901813). + CTDB statd-callout does not scale; (bso#11204). + vfs_fruit: also map characters below 0x20; (bso#11221). + ctdb: Coverity fix for CID 1291643; (bso#11201). + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225). + Fix terminate connection behavior for asynchronous endpoint with PUSH notification flavors; (bso#11226). + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007). + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201). + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the directory is deleted; (bso#11257). + s3:winbindd: make sure we remove pending io requests before closing client sockets; (bso#11141); (bnc#931854). + Fix panic triggered by smbd_smb2_request_notify_done() -> smbXsrv_session_find_channel() in smbd; (bso#11182). + 'sharesec' output no longer matches input format; (bso#11237). + waf: Fix systemd detection; (bso#11200). + CTDB: Fix portability issues; (bso#11202). + CTDB: Fix some IPv6-related issues; (bso#11203). + CTDB statd-callout does not scale; (bso#11204). + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you enter invalid values; (bso#11234). + libads: record service ticket endtime for sealed ldap connections; (bso#11267). + lib/util: Include DEBUG macro in internal header files before samba_util.h; (bso#11033).- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).- Remove the independently built libraries ldb, talloc, tdn, and tevent and the post-10.3 renamed libsmbclient from baselibs.conf.- Drop redundant doc attribute from man pages.- Update to 4.2.1. + s3:winbind:grent: Don't stop group enumeration when a group has no gid; (bso#8905). + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791). + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with servers that don't send the 2 unused fields; (bso#10016). + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476). + waf: Fix the build on openbsd; (bso#10476). + s3: client: "client use spnego principal = yes" code checks wrong name; (bso#10888). + spoolss: Retrieve published printer GUID if not in registry; (bso#11018). + s3: lib: libsmbclient: If reusing a server struct, check every cli->timout miliseconds if it's still valid before use; (bso#11079). + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125). + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135). + replace: Remove superfluous check for gcrypt header; (bso#11135). + Backport subunit changes; (bso#11137). + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with implementation; (bso#11140). + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143). + talloc: Version 2.1.2; (bso#11144). + Update libwbclient version to 0.12; (bso#11149). + brlock: Use 0 instead of empty initializer list; (bso#11153). + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164). + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169); (bnc#913304). + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev fails in the SMB1 case; (bso#11173). + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174). + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175). + s3: libsmbclient: Add missing talloc stackframe; (bso#11177). + s4-process_model: Do not close random fds while forking; (bso#11180). + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).- Prevent samba package updates from disabling samba kerberos printing.- Add sparse file support for samba; (fate#318424).- Purge printer name cache on spoolss SetPrinter change; (bso#11210); (bnc#901813).- Correctly retain errno from Btrfs snapshot ioctls; (bnc#923374).- Simplify libxslt build requirement and README.SUSE install. - Remove no longer required cleanup steps while populating the build root.- Remove deprecated base_rid example from idmap_rid manpage; (bso#11169); (bnc#913304).- Update to 4.2.0. + smbd: Stop using vfs_Chdir after SMB_VFS_DISCONNECT; (bso#1115). + pam_winbind: fix warn_pwd_expire implementation; (bso#9056). + nsswitch: Fix soname of linux nss_*.so.2 modules; (bso#9299). + Make 'profiles' work again; (bso#9629). + s3:smb2_server: protect against integer wrap with "smb2 max credits = 65535"; (bso#9702). + Make validate_ldb of String(Generalized-Time) accept millisecond format ".000Z"; (bso#9810). + Use -R linker flag on Solaris, not -rpath; (bso#10112). + vfs: Add glusterfs manpage; (bso#10240). + Make 'smbclient' use cached creds; (bso#10279). + pdb: Fix build issues with shared modules; (bso#10355). + s4-dns: Add support for BIND 9.10; (bso#10620). + idmap: Return the correct id type to *id_to_sid methods; (bso#10720). + printing/cups: Pack requested-attributes with IPP_TAG_KEYWORD; (bso#10808). + Don't build vfs_snapper on FreeBSD; (bso#10834). + nss_winbind: Add getgroupmembership for FreeBSD; (bso#10835). + idmap_rfc2307: Fix a crash after connection problem to DC; (bso#10837). + s3: smb2cli: query info return length check was reversed; (bso#10848). + s3: lib, s3: modules: Fix compilation on Solaris; (bso#10849). + lib: uid_wrapper: Fix setgroups and syscall detection on a system without native uid_wrapper library; (bso#10851). + winbind3: Fix pwent variable substitution; (bso#10852). + Improve samba-regedit; (bso#10859). + registry: Don't leave dangling transactions; (bso#10860). + Fix build of socket_wrapper on systems without SO_PROTOCOL; (bso#10861). + build: Do not install 'texpect' binary anymore; (bso#10862). + Fix testparm to show hidden share defaults; (bso#10864). + libcli/smb: Fix smb2cli_validate_negotiate_info with min=PROTOCOL_NT1 max=PROTOCOL_SMB2_02; (bso#10866). + Integrate CTDB into top-level Samba build; (bso#10892). + samba-tool group add: Add option '--nis-domain' and '--gid'; (bso#10895). + s3-nmbd: Fix netbios name truncation; (bso#10896). + spoolss: Fix handling of bad EnumJobs levels; (bso#10898). + Fix smbclient loops doing a directory listing against Mac OS X 10 server with a non-wildcard path; (bso#10904). + Fix print job enumeration; (bso#10905); (bnc#898031). + samba-tool: Create NIS enabled users and unixHomeDirectory attribute; (bso#10909). + Add support for SMB2 leases; (bso#10911). + btrfs: Don't leak opened directory handle; (bso#10918). + s3: nmbd: Ensure NetBIOS names are only 15 characters stored; (bso#10920). + s3:smbd: Fix file corruption using "write cache size != 0"; (bso#10921). + pdb_tdb: Fix a TALLOC/SAFE_FREE mixup; (bso#10932). + s3-keytab: fix keytab array NULL termination; (bso#10933). + s3:passdb: fix logic in pdb_set_pw_history(); (bso#10940). + Cleanup add_string_to_array and usage; (bso#10942). + dbwrap_ctdb: Pass on mutex flags to tdb_open; (bso#10942). + Fix RootDSE search with extended dn control; (bso#10949). + Fix 'samba-tool dns serverinfo ' for IPv6; (bso#10952). + libcli/smb: only force signing of smb2 session setups when binding a new session; (bso#10958). + s3-smbclient: Return success if we listed the shares; (bso#10960). + s3-smbstatus: Fix exit code of profile output; (bso#10961). + socket_wrapper: Add missing prototype check for eventfd; (bso#10965). + libcli: SMB2: Pure SMB2-only negprot fix to make us behave as a Windows client does; (bso#10966). + vfs_streams_xattr: Check stream type; (bso#10971). + s3: smbd: Fix *allocate* calls to follow POSIX error return convention; (bso#10982). + vfs_fruit: Add support for AAPL; (bso#10983). + Fix spoolss IDL response marshalling when returning error without clearing info; (bso#10984). + dsdb-samldb: Check for extended access rights before we allow changes to userAccountControl; (bso#10993); CVE-2014-8143; (boo#914279). + Fix IPv6 support in CTDB; (bso#10996). + ctdb-daemon: Use correct tdb flags when enabling robust mutex support; (bso#11000). + vfs_streams_xattr: Add missing call to SMB_VFS_NEXT_CONNECT; (bso#11005). + s3-util: Fix authentication with long hostnames; (bso#11008). + ctdb-build: Fix build without xsltproc; (bso#11014). + packaging: Include CTDB man pages in the tarball; (bso#11014). + pdb_get_trusteddom_pw() fails with non valid UTF16 random passwords; (bso#11016). + Make Sharepoint search show user documents; (bso#11022). + nss_wrapper: check for nss.h; (bso#11026). + Enable mutexes in gencache_notrans.tdb; (bso#11032). + tdb_wrap: Make mutexes easier to use; (bso#11032). + lib/util: Avoid collision which alread defined consumer DEBUG macro; (bso#11033). + winbind: Retry after SESSION_EXPIRED error in ping-dc; (bso#11034). + s3-libads: Fix a possible segfault in kerberos_fetch_pac(); (bso#11037). + vfs_fruit: Fix base_fsp name conversion; (bso#11039). + vfs_fruit: mmap under FreeBSD needs PROT_READ; (bso#11040). + Fix authentication using Kerberos (not AD); (bso#11044). + net: Fix sam addgroupmem; (bso#11051). + vfs_snapper: Correctly handles multi-byte DBus strings; (bso#11055); (bnc#913238). + cli_connect_nb_send: Don't segfault on host == NULL; (bso#11058). + utils: Fix 'net time' segfault; (bso#11058). + libsmb: Provide authinfo domain for encrypted session referrals; (bso#11059). + s3-pam_smbpass: Fix memory leak in pam_sm_authenticate(); (bso#11066). + vfs_glusterfs: Add comments to the pipe(2) code; (bso#11069). + vfs/glusterfs: Change xattr key to match gluster key; (bso#11069). + vfs_glusterfs: Implement AIO support; (bso#11069). + s3-vfs: Fix developer build of vfs_ceph module; (bso#11070). + s3: netlogon: Ensure we don't call talloc_free on an uninitialized pointer; (bso#11077); CVE-2015-0240; (bnc#917376). + vfs: Add a brief vfs_ceph manpage; (bso#11088). + s3: smbclient: Allinfo leaves the file handle open; (bso#11094). + Fix Win8.1 Credentials Manager issue after KB2992611 on Samba domain; (bso#11097). + debug: Set close-on-exec for the main log file FD; (bso#11100). + s3: smbd: leases - losen paranoia check. Stat opens can grant leases; (bso#11102). + s3: smbd: SMB2 close. If a file has delete on close, store the return info before deleting; (bso#11104). + doc:man:vfs_glusterfs: improve the configuration section; (bso#11117). + snprintf: Try to support %j; (bso#11119). + ctdb-io: Do not use sys_write to write to client sockets; (bso#11124). + doc-xml: Add 'sharesec' reference to 'access based share enum'; (bso#11127).- Update to 4.2.0rc5. + Ensure we don't call talloc_free on an uninitialized pointer; CVE-2015-0240; (bso#11077); (bnc#917376).- Fix usage of freed memory on server exit; (bso#11218); (bnc#919309).- Fix tdb_store_flag_to_ntdb() gcc5 build failure.- Fix vfs_snapper DBus string handling; (bso#11055); (bnc#913238).- Update to 4.1.16. + dsdb-samldb: Check for extended access rights before we allow changes to userAccountControl; (bso#10993); CVE-2014-8143; (boo#914279).- Adjust baselibs.conf due to libpdb0 package rename to libsamba-passdb0.- Fix libsmbclient DFS referral handling. + Reuse connections derived from DFS referrals; (bso#10123); (fate#316512). + Set domain/workgroup based on authentication callback value; (bso#11059).- Update to 4.2.0rc4. - Add libsamba-debug, libsocket-blocking, libsamba-cluster-support, and libhttp to the libs package; (boo#913547). - Rename libpdb packages to libsamba-passdb. - Drop libsmbsharemodes packages.- Enable avahi support on post-12.2 systems.- Update to 4.1.15. + pam_winbind: Fix warn_pwd_expire implementation; (bso#9056). + nsswitch: Fix soname of linux nss_*.so.2 modules; (bso#9299). + Fix profiles tool; (bso#9629). + s3-lib: Do not require a password with --use-ccache; (bso#10279). + s4:dsdb/rootdse: Expand extended dn values with the AS_SYSTEM control; (bso#10949). + s4-rpc: dnsserver: Fix enumeration of IPv4 and IPv6 addresses; (bso#10952). + s3:smb2_server: Allow reauthentication without signing; (bso#10958). + s3-smbclient: Return success if we listed the shares; (bso#10960). + s3-smbstatus: Fix exit code of profile output; (bso#10961). + libcli: SMB2: Pure SMB2-only negprot fix to make us behave as a Windows client does; (bso#10966). + s3: smbd/modules: Fix *allocate* calls to follow POSIX error return convention; (bso#10982). + Fix 'domain join' by adding 'drsuapi.DsBindInfoFallBack' attribute 'supported_extensions'; (bso#11006). + idl:drsuapi: Manage all possible lengths of drsuapi_DsBindInfo; (bso#11006). + winbind: Retry LogonControl RPC in ping-dc after session expiration; (bso#11034).- yast2-samba-client should be able to specify osName and osVer on AD domain join; (bnc#873922).- Lookup FSRVP share snums at runtime rather than storing them persistently; (bnc#908627).- Specify soft dependency for network-online.target in Winbind systemd service file; (bnc#889175).- Fix spoolss error response marshalling; (bso#10984).- Update to 4.1.14. + pidl/wscript: Remove --with-perl-* options; revert buildtools/wafadmin/ Tools/perl.py back to upstream state; (bso#10472). + s4-dns: Add support for BIND 9.10; (bso#10620). + nmbd fails to accept "--piddir" option; (bso#10711). + nss_winbind: Add getgroupmembership for FreeBSD; (bso#10835). + S3: source3/smbd/process.c::srv_send_smb() returns true on the error path; (bso#10880). + vfs_glusterfs: Remove "integer fd" code and store the glfs pointers; (bso#10889). + s3-nmbd: Fix netbios name truncation; (bso#10896). + spoolss: Fix handling of bad EnumJobs levels; (bso#10898). + s3: libsmbclient-smb2. MacOSX 10 SMB2 server doesn't set STATUS_NO_MORE_FILES when handed a non-wildcard path; (bso#10904). + spoolss: Fix jobid in level 3 EnumJobs response; (bso#10905). + s3: nmbd: Ensure NetBIOS names are only 15 characters stored; (bso#10920). + s3:smbd: Fix file corruption using "write cache size != 0"; (bso#10921). + pdb_tdb: Fix a TALLOC/SAFE_FREE mixup; (bso#10932). + s3-keytab: Fix keytab array NULL termination; (bso#10933). + Cleanup add_string_to_array and usage; (bso#10942).- Remove and cleanup shares and registry state associated with externally deleted snaphots exposed as shadow copies; (bnc#876312).- Use the upstream tar ball, as signature verification is now able to handle compressed archives.- Fix leak when closing file descriptor returned from dirfd; (bso#10918).- Fix spoolss EnumJobs and GetJob responses; (bso#10905); (bnc#898031). + Fix handling of bad EnumJobs levels; (bso#10898).- Remove dependency on gpg-offline as signature checking is implemented in the source validator.- Update to 4.1.13. + s3-libnet: Add libnet_join_get_machine_spns(); (bso#9984). + s3-libnet: Make sure we do not overwrite precreated SPNs; (bso#9984). + s3-libads: Add all machine account principals to the keytab; (bso#9985). + s3: winbindd: Old NT Domain code sets struct winbind_domain->alt_name to be NULL. Ensure this is safe with modern AD-DCs; (bso#10717). + Fix unstrcpy; (bso#10735). + pthreadpool: Slightly serialize jobs; (bso#10779). + s3: smbd: streams - Ensure share mode validation ignores internal opens (op_mid == 0); (bso#10797). + s3: smbd:open_file: Open logic fix; Use a more natural check; (bso#10809). + vfs_media_harmony: Fix a crash bug; (bso#10813). + docs: Mention incompatibility between kernel oplocks and streams_xattr; (bso#10814). + nmbd: Send waiting status to systemd; (bso#10816). + libcli: Fix a segfault calling smbXcli_req_set_pending() on NULL; (bso#10817). + nsswitch: Skip groups we were not able to map; (bso#10824). + s3-winbindd: Use correct realm for trusted domains in idmap child; (bso#10826). + s3: nmbd: Ensure the main nmbd process doesn't create zombies; (bso#10830). + s3: lib: Signal handling - ensure smbrun and change password code save and restore existing SIGCHLD handlers; (bso#10831). + idmap_rfc2307: Fix a crash after connection problem to DC; (bso#10837). + s3-winbindd: Do not use domain SID from LookupSids for Sids2UnixIDs call; (bso#10838). + s3: smb2cli: Query info return length check was reversed; (bso#10848). + registry: Don't leave dangling transactions; (bso#10860).- Update to 4.2.0rc2./sbin/ldconfig/sbin/ldconfigh01-armsrv3 1752585390 4.19.8+git.430.a10fe64854c-150600.3.18.24.19.8+git.430.a10fe64854c-150600.3.18.2gentestlocktestmasktestmdsearchndrdumpsmbtorturegentest.1.gzlocktest.1.gzmasktest.1.gzmdsearch.1.gzndrdump.1.gzsmbtorture.1.gztraffic_learner.7.gztraffic_replay.7.gz/usr/bin//usr/share/man/man1//usr/share/man/man7/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:39674/SUSE_SLE-15-SP6_Update/aeeab13b449b36a000127e6292fbe0fc-samba.SUSE_SLE-15-SP6_Updatedrpmxz5aarch64-suse-linuxELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, for GNU/Linux 4.3.0, BuildID[sha1]=74f436f13c53fc953bd08175e5a5db5d6117b3d3, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, for GNU/Linux 4.3.0, BuildID[sha1]=13655f652717045b91795d06ec86a4dc9e77bcd3, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, for GNU/Linux 4.3.0, BuildID[sha1]=fbf10f2dee11498337751b8eec181bcbf26730bf, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, for GNU/Linux 4.3.0, BuildID[sha1]=20f424d4b72e1a018f5e2fbc51d9e68ea7fc1a07, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, for GNU/Linux 4.3.0, BuildID[sha1]=618d7026652cc7ef86840f73c85628c3323dd822, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, for GNU/Linux 4.3.0, BuildID[sha1]=2ca347de32513141a6e21665416b6be965e1f947, strippedtroff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)troff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix)5g523-RR%RRDRBRRR}R#R>RoRRRgRRRRRRRRRRRRR+RRnR=R$RfRRRR*RRR"RRRCRRRRRARR|RRRRRR%RRDR#RRR}R>RoRRRgRRRRRRRRRRRRR+RnR=R$RfRRRR*RRR"RRRCRRRRRR|RRRRRR%RRDR#RRR}R>RoRRRgRRRRRRRRRRRRRR+RnR=R$RfRRRR*RRR"RRRCRRRRRR|RRRRRRtRoRRaRcR}RRR2RRRiRRR)RRRRRRRR+R(RbRR1R`RR*RhRRnRRRRRRRR|RRRRRRR}RRkRoRRRRRRRR+RnR*RjRRRRRRRR|RRRRRRNRR>RRRRRR'RRR@RaRRLR{R R nBh]3JiBO!i4=ru!>T*^T3Z6mFWN:Qr-P1'Gl6 bxp#YH'!Ӯ}8$0!e˄|WP-g,FuqU '7BM<TP([Hyx ,%I>DҢNr'XWc=+KxeB,|T_UñJ f|Ե->u7e"֔U՞Gpg'/>\jǃ:L1 &xA/ e`/m3З$ (@\~ cYzJfڤո%#{ϑ1Z\IPV ^\R5r[PgtX,f*?i 9;-Ü2MI]s"w>3J!{) |ސX*= mrݥoj]*6ۑ2O~C}?bn!(ڮJGAa>q?YҒ`Hj"%Bx!I.zXjW6=i,]e4c" p[|ރ?M{:}=*A=z,"Ǻ/ǣQ3z_-|HGgjPUOU@CCЩ m|V[Zы^LT0*FViEjV.ΖpЉ=}?![-{0^E['D$^? #],ȘC Ϣ,c`tڼVv.,bSOAL+iw Diw#BT2%F mJ4Ti)ocLFz0lOV*PjhH(HiBUKp 4J@,'\8nyZuVr\|@("iT JxՋIq;esq$!z^8Oe/z~ra|a=+R= eBԉ}.Cx0ln "{&?|0GGx߆?\Z<],ߜ1n26;^a>|Ґ/Dy0-?}{CEqNe 90a׎CTX緘׷6< Թ:Z"z]v*C}5…Wi Ϭfi" ƢL`yʃ#xW1T] iT4"jW]VjDdj뵮F]Ķ`@_tVy'Nw*r{0v{@za֡?^gvXS5U55)e:Q6)]WmC܄T1V001% 5x g>dU?12ǔF6.ݵ>XZ{Uۦ!udK F Ji.3&Ú(<:Dw' W^Hˍ{9!m>Jc ?^E@\qq] c]?t kBz&zi!*ڃ#/xWIt,rdL e;(ZA4;?>Jg1Du \ nh|?‹YTfz׌pQH|Z C-'o$/o!s0 w#/bXxՄcD>X6naLKA$K!:i&4g[LpwC[\$vV {M>PyDFC_#21b#Ywesm9ө81aCQh[LysAp:[%;N"j!y)D1IaxGMPc^_UnX\i##]\ 8;ENU!Ǥ A\V4rMq5gfT泅&!-Vq߭zE,#|q_y_=GODǑ CRR~5PX٭fc/ۋޕŇA\xmG7Ȉ珞u~ 6B ɩLVPLzk+]{3y}|y,oeQ] .Prb2Ho)rdKk&9K _rV;RMYe}(0okH&hu7N 4\ZGİ#eeD6dǕځ}DpǸ/JЕ=yV,l|eg($H f vG sȳRpH#JѪ)P_hЌ:Pp| *C)WN8mU:LAfU?wJmV,U/hmu$W fV*R${Z.ËӾ<}}Uw1׸ur.h&K 1ZuRgi, 4M ^ƪQ/zkχj$vc[`D]]?(AkBăT2,% {$I] `JLo\af?pb-9~"4xEH WSlbcu(~ x1d.P{M"[@n賍hmZjP%KLS 1քriN}nԔOkRdgy~(tYd+,6tJlqws h}<|_ * F[Ul0 ڭ {Og{2N%pB VW ]T6ˊ_=~^nkmDm#ǎNԷkJ4E>oIi|aMqZɢëcwyP~I+\tx-tOE9S{/9b`B)r^4k?^`n(/+CȌXW >a{ qF~YC 16,0?_S!B(fգ@3 e樀E,W歒l3'YZ6/N: $r +72'$&rf#tʩ΁ըNLۓ}1xC7jr.t[/ >z;;lH}ۇ:c#GCp&`MnNG&2;'l (vDfM!6@/Fͯ6zTϯfyhƑƗVr+v 6Xױuc(d!.CfcDԬG[JNf15&_p!̳@S?v?WXrr>k! Es"LǘgY51}# =y (lRT ݪJ,xq?D@;P4% Ru|QV ώJ-L4ƛ65sN?jf”R~^%M8Z{oJ~{S+Mڀl%( Q!Snb׿ZDJgb̙!jfxz@lX3`Dw7vƔmՈ8 ue0ۧv8"Ź5,eWE(1WUigKSNj!쑘 `;\1JF*kbNo,A#:(!tPna"5?^^=s'm"J-CRdލOĚk}$WA+?3` *U&?uqh{ i?Ԓ@`\,X׫e Еk\ >8>Td=5luf$Wv> m[P!z@A##ӿ{^ {QDJ]r'޳Rhr9=H7ieڦ}NlkxWhyLl8GA'])W9`dZAj':>d21$ܿh;3Ʉ)Nj\ZKԑf^\wc>Ul;+k=gp{I`J<SpnF-*-|&uA(yN<8GZuO`Jvd)a;Lz"{ &*͝kZ>,EUHPz bLM!AP,d@.}_PZ\HDϚo:Oc*SNM&QoH -ݿoq3ĝ1EȺr|$ȟUي FT7,0 GD>`t_"kpdt q̆4?P*3&6N$C(n 0u=gq弦TQ }ⵃݙ,e Qs ^S0HG]2kq PTu*쭇9<ո(ZR| 6|ڣSK0`O,1F`;l&f.1dܮ\DݩY 3R7^ wŧzk69t/3_D;UK|e1d5Suid0L':W$AS ZDntpl7}hdM! (NtVb5X7geo%wZ-3CvۢK^p@BLG xܩ!Rk| 0#FbQZ5LH{g7 2WE:hB HOwUYCJ쟪zyP08@b qHd!)p9ںDSrpxdbxA ֪ Nq:QrFM!E[ ēD8-Qq+()y˾@zs,@|p4d傜:%,,rlWN<NKA᡻ĸj &h Wk耦},6qلqEؔ˧ Od}j\@ ptfKJ?!+uCƞJo$@RpHqGp6?a>Zd(*-2C=!V{^t8 -o1̭ej,ap?$]ˉ.)i-MmՋ 9C6qf9R 8G8Mh)@EN 8^|JMtDߦG.R$ֹXEY6[Pִ{/̢}ܰp?I֗,HSL?d㩰Aƙ8Qӧmj:|Q (Q}EH#>V{h ryE]2 L~ZOe.=3kLaH` KOٖ\@ō+Va!5-DR_B KlO,4vm?`~%AwC-u_!Mx 8{ʆbb&b%O&l tw,J(& Eyf]kiedDVU{[7J-m%9k%S!nMHnwK,o5hwPpe,J#aN9"[t aD8^K~>p=kr%u itAW#PL!·LaHT\:WLK,}s ޡpاyԸ.{TΫo_aY;pE| YkAc;_벲ϟbG߳m.qu{IV[-:ͣ[8;MS$`B-˹-L밾G b²o\jnQ򯠟#3pPSZxIZDиD߄k5+ދp8=CȷU}iy?zhrf _&Q׾Qo `ӿPlA S 7ۏ0vn~5`6ie=xOy<Y>=OMD6D#K6SbMA$Ǭ*T aJ&E)imtdItJtc8-bwH*,UT%DaW3y!/4P҂7Ha_GwwsX2EnS]p1D$|AJz hT sӛt)z> KQCϏyEqT`-I=~{>QH"`5#>4v`ڙ֡5V5$ʉc1)'%?} JzY wx=$Hmr_]]eH@><rk7b ͑lz-7 =k0|،:X@C;@0l춃!r*=ҁs"wU t;K"0*{4sɰwU?v cr5}/<{3To]ٙx8w|zѷ`͒ V'sm?Cߧ}5\&F`nn,7_h=LR:8yݔċ/=,?µˌY qve_uFʛZ3?Rw#)CwY+fM-)| }9cCq7<UM-_f\+ kCt z҃&7഑M R$mO(:dp.'$p2s0g*d EO+zӧ*w'6&WS=I7O1A0xB9ӽ]8 q)ym}þ3(Ź~~ uͰ]b:X,ZQu36o^wk(-+ GT,Ksҿ?~羭^Zquk?N!po 6/g#'~+(#LK`A,B8q4qսc; x K~=3k:qŨ1?(325gƭVU10`]aQ%zq,$vڋ'Fe:Sh'͓pkj'5b0!ەXwg(.m魧/لyk]vէ4]^e*6gАd>De?E%u/|&Ǔ^>jߟ hֺ.,`c;k.1[?{/n͌0 r팔wƵ3bh=jFpMPn=:\B^yV)Uu0JgUh`FKֱfteU-%Drpy}qlkO+q pw{%"ի=Lڀ snmgKmK [ojZ.DG˵Krk;̫(>Fp>˂ĜV+pD]X'&kĿAD^y*lʼߞ7y;-ݎcۣ͢.Hře[ OrX}j66}6ꙉt>3Ҍ4ޣ{S U9ml##bIJwPf/]\8϶Ia445>kEP7aӨ謕(bqHqpG"ֲp.e puq=l`=TzYE.UǑPUy`€q<3Uc7jḍIo NA ۸ڌh6k dF6|մZGzq~x2.Z&C)hage/v+ [uޚFquZzQO&jӓ8 S=@VݮBXJayK=7i~JE$'bys [$@kF;>{=!w (_^c+wQBCOdrETLC(h?~g+ȶ=̠VX*fZ!'zm,InC^ƶϷ88_N;B%n0Ie²,g=(} @w:W ܅<`PX|"[x=N2 Uf}iêТ7y}c`Pi nPjިMD*$Ot^ɬ>*ۭh-R jC;RDXYnxk^J? , 5N` FMm9h]?Bp,x!Z;29dgձ#&,KѯPEYV)~ڗ_'xO0uig S$%:rCur_4e][k&$+`fî:UhVɛ :F>'dBQTfe6:19$"6XIp7Fyݦsx +e c[7 1њJ*5/îTX h^=# '9k^]N_j;'/$FGn;'#34Mb~,^SŢu9!}͂P J27+w%cIwͤ2'SY===vd_xFPw3m9ʭwg'Ri-.qgQK+nVn֙'ƃ]@DQ&x^8n ]H)WA.<[ADar&̯ƋNij>4'ga '֦ac^okA`J$TBUCиgOK"WdKwDԨe`pc'Imv hˀXJ'`+Kb6y`1c8 h#8+လ0؝J [0syr0G{KzA9Jjn_︿p:HYFŷ6tkpr?% ,gI~ŲEifU{"r/mcnwbo[pωjT6/cN*Aph I[`Ë&g)'FdpbdTА is?+? v+H[ @/= mrU: c& '!3v~Jo"eS@AGP׍gƇ#:ZV4l.0?H4{ނ@U&P{~x"A G\f+"GVb:Ř7KlP9D#`tVNCqx s?]Ъ~ll(NS }%>_M10.hs8wfGv`2s-Zj n_s8:|ߧg!r](>Agf(oh)wF֕c`RS|(i(3v5Y2P`xm(Ajk%XofA3&Ve\vƶOڔU)f-NUbd^#goְ݁gSg&5)0PI?PL8iAv ,aS%p Fź9Fd\nݗ re3_=W 5qжeqM\-KÿEcrF$B44H^XaZr|Ń|rCjT_4pL 2LhA؞O`yR bKj!Q$\lf_~&dLXa%j {aƦy]Zܷ5t| MSG%m"ae6-C\FH2S{h_oFK4+rhھy)mqq*|wp@D_LQE hq*X)x"1㯔a03! }=r ,f텛-İ-hĜ߹=;_̨(ʯX2}Eo2˝ x (R U.ѪOEXn%v؍x}[0Jf'ZludCö=nbU sHOJ{@|0j:ELM Y^qW G .MJ0TTc>Lm81i7YDbbvqyMAK/z:r,G ) EUPx΢7L=G&I RNF6ϊ׳[Ih 9,@㑿2RzC$V!.ЧVA`x8zxS*s*3ñu M4vFI9w/n\K8=_S3Q QŚ"(PrBUBD&gL<Yl)_ ]i Etck ~KqJ{0R!0+@Ȝۢ4*2L::[LXp0L]XFEuPNJ-mG7z9{U9Y{3ر9*M^)=WH dwoXeUN?]H}Ҹ7d=Ԫu Q'a Mf\9oIGv`Zk*Ї)gV@8l9 { fvL O"V -K.hq;h3)C7kiwr!M -S|mťYtB6`؇2EDkeޤįF뇇/?oCFTؿbԤ۵ 9:Li(MMoa1LS!Th.s.ŅL`f9`Ŧ햱O)͍\1|S zlf| W$bܳ^QȦ .j=pPlyX=zk;-UI}% bUa(:1Lg0p//5U%•]P)}q!(DE䰔 "p.;V;WȮ'S+]r1+fqwrAi^w[%i0Z >Sxepod yh01}&ޙ< e|t Tb:;;HTጃA}p ėIxG^0l(R0Ӱ/N?ND,T)Fpl#pI+qW872C0e$ .^g'S s$CKɪ3Spr)HUW\no̫3~KBL_@;YE>zZu1;<0C~R@A&[W"{bY'n?(RF14W#}.Bhm>`WEd$rE|+@DL6EYO&{#[̏{ݪ^նjUșIO$_daqsҵ _i͝rlrK0)^r棶$/) !q+aog2g=xhcf/M)Zk0/! y{{[_LW&:C磹j&jl ϐb uǪe/xQ}RGT W>n|# _$+f*y 4 GtD+hK瑥Ց%5lN4Y Ptw rlL(\߮sQfBG6]+Փzz]Z R{[#̞7 8~ .xJݖZDd]5lYRt#ԫ8W -NDt Ct${4?]:~kW'LSx*N9Y޵4IUqO{&麨]0tN؝)PI>&9}`o 4itb,qAM5_$7eEfsC35.3b\q,oOaE6P8@Gž1OUm3yoŖ{vX$8qcVs O\tkjQɯh/^vĥJ_ӏ> [\iI2]i{jC!.^Z{p%Oaon7(EN|w`lLo@ӟhƃ{՟aw 5).TʙG̥jFu3ٯv Fv_p+Ksڃx@k 8 GQ@)8Dˡ9a^Eɡ缾F{Z#F}t`#RhS*PxG=u݄q0xPi@b7N%ȒӼ? x IŘV=I+W4}?#O*vl ׳Ўm (!q)\y,4  x$;T5.(<&p܅`43' Ϻ19<+LtJoɴRW^MW@@߶Pu<< KEt &!ҿHd 0SZ]+fC5ِ~Ta U.?sD;Q{H[ϔaR,l<NGz!{FNuI0ː}$îpQx Y^uA6U:) Y.Fwe,2F泌5i0}mtlClx@n0l !L@>$Kw_Ɋ?)y9|Uw-G0-L^>˔0Y +/lxDYX|}w{yav瞶e8m N4ZR^4xf@RBt}՘rpL`N]9P{lhYzh&)iΫcdGEEv jpwJ.xيPmˍ\ǁԜQG 5ߪcb?Oؙq3B3lPvw@ãHSdXSbdm\b#NA>xX<7s#GOLmslFto)o79k .K_t%6h"wD~=Bm"V@aPK4VŶr45[\L_*Q|;&3r(T6Blƫea?Vy"fF)Ql^'yvmFlKN1/|\3̤uš ߩӝyu xtb[b>\"*0ѵ86&I!,"[p gũao :oziRj` l!8K~vpcP[W$,Pn>6 zJ = <;'OUm^cԛ=:PVfTn)HZY闕R,Furv3=(zj=~=V 1*PPŪ@o`NNoaGq^._ ix;L!UL鎐4])MdĘkT?ːbFfg̉5XxN0Ș1DŬE݂&qj cRu @8WbH;a; Y6X?@Վ63 ȰIHor.VkF9M5eyNH 6LM8=j\ݼjMOz%]0HJ?Pm,b~]n/ʺJY9R< V).b(QYMUuj ks Q]WNv-G3 5ͩG?Z *ר+c6yx]= U"S3EKQۋŖ4(Tk.fqyg4BAH `dJ'rxܚ x m ?xT /@l{D3L kfU GaIH>0-&1r#R3C,(w~&cemN4032@;PiDvL׋6R0|1mc.O{bw\&( ӯ8GPJ ,,&dKnqA-e$p-e6~֨g8 $WtǪZr| %ty9ŠW\,alf Zy.x%3$[0L J22`-Knt:MlJܾz- =+2H_ K#nN"bNt{?o:Aq`d}5j][gu'bb9U% \Ӡ)/T3 Bڧ_Oպ!+&M#y8MJG Q(K\!Yj=:V|?7kB/US'EflmէZROa 쫴 x׷Q?II=}}QaI)}]Dfi#p Q42@"@pXDb$CSŸݎG԰i.b,Lw&R;cۖ! '`' >Fvm3FR?u)/'&g'ó!N=c"5lN}go낇&s>GD?e,:vUC翿3I7 by,FݴTpҕDi+호{,ԇ*jЪzs\j\ Pp/#8n p+ Q8M3RUU;G%geq^J&)706Cn[@=n7u*AZuȗ4|hj|(Gy5Èx(Kݰ_ L)I奯ņ~@SַP2'Ŧh㠕cdQ^V2p; A8z~2BF}L< ZHW"i xI]!=pt|YFʆOcu=֦/+:yK3c p($Y4 %P. $tFB1²W#9qUݔJ :<8]gg~,{od62@Я7csb&Ϸ1QL+91N_rHPȵXJ!%F3tBL>Ji8cq42)Ų%\{0:@ -C@.4pl i+!ql(7~htFfs7Q,fbF:&w|S'CF nh7mZQ੤~XZVKn7 \Ff2$N1N5z!='5kxu(xC"`Z$Ia_\Vds08 "Xck7NGٴ5BIt |6eԚ` \_j0:ܸr7*HD/bFiqRѹ@uRU~T\?JRNzbY+cu1Uʽߡ)eA&Y$ө ukEg~KzE @$Zt ֬c-_PG0ei{w2Ih9yO}f.Oٞ̒n!TQUi;Zz&VjT]81֯5*|a%>p[/K,{J–u9~2֩p?55h-Hy]MB@̱'$Ԁ]N\oYNM@LʙR-,0<4Fu:8YII]xNY*mf#0'vmE@D3x^u |H0gd+ Y?ŗ#HHiOOKt3$!Cf-' (%D&xFDJ_/񎬢%'ipK0(* V&8*`_(*6+ hg z| }{PY~c qz89X3KlbVCVޣ $ q߉0ze1g?4!mJ[Œ2Liޘyg՘\?`ҕ6<^#I$Ħآ8V+J$J8Ðg.lïl F,U^ tw{AClMB.H 3ovF:7̽j|v n-2<"<ń֬Dzӱ{,$sEmGespCi9%_G ׷CZkQ23t6Ojۂʹ'DdI.w\d$Mw5["f$|&gh-mV`v~*_,@MoAYm֚n`׏9lN+0Ģ$/*Y -.sSl__}$5@/KQJNݟL4 DF!naq)nh[cZ'hyx+ P˖B7<(ǯ }h<5B@kS֤Tt*WSYQ$ uZ QV˴ w+-OTj؀l ZN߁F`r:%|&N?rmܟ|NX'(ƂC8z|| w6/':8Hc86Q6~a '*_8V0қ嗐i@Ѷ`7r)_=ˑL9C]6qzNAg&AA_i#9(?e6ނ1@HP=zy2G?8A,`pfgjϳ7ҫ{J|kԾl&'"6oA(ViC #?uV$-V&)^>$FC]{j\<tHtp.tNJw/q[0_A #?!/j:q%%*gWꂿ1zn?ps qsV¶V" J~;mT򱖽ǠY&.՚EVoS[/\+CW(`׀xGPq3|R5x;~i}wyޭ^oo d?ϓ%֏Q4 L{RHcD:'aX2()pp$P(ZYjvf:5-Џ6 x[Ɔ& t}AWХyll*T;%V 0kjەc)u犃Zl˸E@,^c{v)m9gN~nNZdzWU.8FR@U{N)iNz዇;f* NL&Ÿ'A7"jܱ/!3 8r e#hȅ4T!L!W!gx)zG!*g<6D9S=-##E !fGRgѪnZ\(_eΘb)E *&Bsr;5 (;a>1c6:Nf/7%^;fp?;E+bLʖq֎N;P vff7Sc&B]"#[V4%sYih9]R<?_uHu)"i~1GO'N˰؈(DF]-—H=f|7a~#i.3D( E|n 8AYt:i6&oX06Tהlٌ]pǢIn-L#>&>$`) 7$tf8F`FQ 5@ET ކ6O1m]QR$Y=>$-&4l@xWP">3İD "=F卭8oQ/&+#xi`wv]c8E.Q 'gw:N.Wv.V I,(<c[Kh%]?w:YJeS'l݋Jy]t)'Oõ_<{3be)RQjBZ~Vxf2XFRЬpI3a Xss?{/ 5-r=ouwBt ھ,*a"ٜy]FKT,+#'_0 ^5}&Wgs9RXb=9G ax`w;+)$s;0Ú)J hzZG\g)IxOkx e 轌_B~snM6"}8K B(4uC iYK E G&8h 6/ubTdzae"PDv8Zk1avnI>Ȃ'.*F[ܞ, 'פ)21M>M:P6MH~I!v8sUvp:/L2D|0o[|M_d>9LrCj I*D=w7bOK=ʜ?Dp5I HF䂬YD.XmoӁʚ}tz! }]7l*[h ͸ROlBqm*MaʾO ?=Q!Yv _GÏ O]=Tr#m&|g{^k^) IHOVHb4b3Ch$$_y'~.Ȝ}5 t^UrfA8yRm3^WhtA;`L˦wnV ?/kr6uo1mA;a~D$n3´IeRJ;ǫ>9p44 SBD>*}DxN0tqkYZZoT @d/Axe"tu`nq 8k{SfmzRrq uL?ڌt{q[cY_ӠT@[0}%l b=]ʡ_fPfuV\^#F#x4QS F5*Y5-ۢ(T"7ţP+:R T vy8\HW$ͲPOYQ>hRE+ w>H@)r~Dž!};eU!݃>t„TE⊥TNX~V̉I{Y-ɝJzBƣgK0aۄ>jxߦ2cЊ̤ap./Lru[F)1ߞ΁<Bf{f/V_FTӟNxPgoZQ8BR;BSLz89+wI7G 8F m++DGI&/;Q*ur?r䈥qx髝| i Q)[r Fm?OU) cb4E1%zck׏MO]eVqz%If)se5ЈS}8۾5kKZOjomaXGI* 83]?-&M(qȉ l% X7X )ӕ_f/4ħQ;Wqs|u@ ˵pW8Cgeݗi-#*zR|FNUWGyj{F6~FJ\HCL:X VYL M%D; *bYP7r&{6] xe.J<{ & )kHwCmOe+4YhcyH=M ->pVp,K"Hk3&t1p)U6P~JD9_l$/}7OsH'ѷ/%m>ʹ29M's^b=Ds 5eV|TLO_kIPĸ9 k&FT3qr^C{4V0l4BH>0 UD0F6O8n'cEa(ˡyԳ?KK!4Bq4;='ن/r[z;AlNJW#B򗺇z߉mC+/0u(hvDsSf>\w`1j 7|ϊь\[[1F2EÌ )TkW&lz{Kzm9ATRs4MOx# h&^CWYnqvXAFU$Z4jh t'#[9Ag4E=eQ6_UB64+"};^ H Yaf I>{Rlm6,ȀhQV+Ps(ѝ28c]HX> 4vX\fGS):Յ&101c [v#ԹlnzqUFK Z0K3 ^$ae$iDYĠx&nCz;@y^} Jz?-V%b V/RWLIg &CqNkޠ= >h"k{^>#_ R[HeGHN+8bS}#'e"O4$WKjd\pW*J6o3*`7PTؖ4E Dh:ɳH"DI;E j0yS-ЌI6.rCu:1g(@.[xwN2QڒSImbQU=Z$/ 4P..bb yhG? #(KGҋRL9(MXֱ:djc%ĐsJ/Ϡ9~#77qhl !pzf\)rYno P"rc~]~G?֎TbJ2u'8:$"fYσ9-9*,uz9Vܗ;X!qnn :o~R>pQSTд|̵iud %,i3A‹`6 yCLY0jcX/x:nN?bɺ )dV$[6zwdM(+uH R'@k**xa*CC#RbeL:X#ØRül:.[]!xD XCl '5Z$_/){.^fh2qx2,yW2O_yQ *O$q`p.%J=;Xf aqoC͸u1æ~O&_д|Wx@!si9Wwm2AD`ڨ-E}]hh :Eׄިl3cS]> ςp;(:肽`v@e;a`(Q(FE~A}'oz.gL([[21Evbe03KGY~eM08>߮RZT\9-^ʙqWЊdV")& 37$cb&VI *łFu*W'Cw bNΔ?3v#y80EPX8B'BwsTӉ\ EӐz TA<˞;̀K9.6Ǩy%::mqneYU¤2)垡 *'S}2HuC,.'"$JE+}KbBDzǚx[|0(ZRi*fR?+i& }vExl}HS =M SRɝr PO=R5+L:BkC9aL>c>*2Nf Xcbk/ŰzO X_>cPqloaq EX~ jJ!RkXNkHnŤԢB( M&gcZpmV=@h`X tj^{j]O  \xf1!4l'.]*2о9 ï>ڸ d$t.fqЀlGv.a}yxj? E3?|762i:VڦSS,#V:[I XNۘ*v01G& NЖdAG1~\CDܒUL;?xZv&S52>+9 <-/{ԪV ȑ`m\rKKX밞6?KAa%]${/4clݕX;97ֱE5!txQ-ar6](\efNa@U#_U yTW53'6ȳPNZ}r ўHa$[HCFWRL%46Jޱ^: eŎ;vY' +9e/=> uh! ls|j3ƣ $}j_HAKl>n{YOZjzxfgP̩XzsC(p 19Yvw*I2f;PRnImtf}OptWYe0l]Rа/ׄKu(1XgpZ,@(Ώ1)!B\4zFhr[خ؄B,P+-(TQ;o?*ׁwWVVN{NGƺu ||LUhA;R,}H÷=7$ #$E TQne+ur3.U֛wa还;1|ֳzG/>A =;?!bBC Wls* S$aoםQ^Sq`qŖ(4u)XE[(泝}<db5q.ba/T R(Ԏ GaU_8$EV4 B_L.h\]e 9f;b{G 0crϱVa}(3}[3o4#Kibgorz6,~æ!2Fi#j%l2{\x [sg~|K# V(E(J,&U!l4?k 0LyuN[bIBaml)0dA>?*i"8I܊i]/l%lޔG-.'|i+^&l\ ~K;R*" #m06S #^J/UvwFQ{m1HMW~2u*!\ʯ/YPMLIJ6^kzlL~.F4I,mB<\ #OJѧ`^vgX& *VI$K &{z4BØ먨㮝C*!@I. 1[Z['nG;fhcC BO8E"5-aBTDi=|tKGtҵ1hB<5bT+Ӟ$K#<$rZG'>K793f!EH!wN A>} ~| 7ϸ0.L"0nW 9<ѷ.2%8-,cUq(wS:Qb涝PﶥNwkq5mAgH[-b!.L:gIV=%|hn}V/Iq~!}|&ИL^tGh s\\҈u [Q)jPI{"̔7Z=>قOς] uq܃Pɧ*<le7WsDـ_ sXfِ6je_EX K:*'63 @T hxuv[0CXi;ܚϕGVE ²Jb,/ڐ q *a+ 7QI8Eg){׫\S&34L5sB[s~IVϮZ{7nFb9 w.9>JCÓ P4_7q߰[f#3t7fFnD-wL̬|~dsZt`\5ny|h8t)H1F Jڦ1 3xxy!sB׸#җ(˴@^-YPn_uzmNOhϮĻ^`\v*\g!DE3ɡ>%B$oGU7H %E ʊ=,dp\K:; @aש<.BvEݮ 5׶ģQSt%I03G*S0Y.3MAoϪ޹K%g8zˀ8x6O-2ޟz`;ۻ@i.^UMȋ /X'0̑I;ki0qHXL4ىFN gFvVfONg`"5P_L=q{ilxG&wJeUF,b~V # Ͱ{o]3:{d2ߕ HW2|h{; .s)2uxC{ N,zCT m|"Z2 ~pʏМu۽$Fd0li<֨lsУծ_?^}њVXԚ,egAٴB &Z "'ັǼ cqz:֬r:Cؿ<ɳx34 |sE_~'Ax(ko%;Ӫt?o,^RB]4cF5.@xɸjM:+ePTTq$;8u,h*5)Jp0ù,3?F !AjCw2ࢫMGuu_mIQʿ /TQ Y"*pQb}O * k)6פ<] n/sm3 pׂx\u}"IsILee掠3jj|JxtZ5bsD$&iҭmQH&+HGQ뛕őt#JȥT39n;Fm%V@R˻d5cy@\i Ccj$Hܪ;;9 DfcB٤nJC4.CˇEC=b-Es|jgu6.UYc[0m@= QF^[Sk9j(g$ yRad Ŵë]u&Zr?Jx87 xL5oQ 7YF?Q"J{^/]~:8Fš1fe[9=Lj@I 9n}<1$RE+nYt'oW K{!ˀX|V] t"cӝu=p {tT uGHX5H#yuYGx$@D Ŏfe'q(?EoJO,XձB$x3O|fbl"ܩdFz4LС'Dqü>ǵ˘* Q;jhp;^+ծ)8ѽύ jPlESC^)cҰk;*Vɠړؽw}1ndS(%,s7pH]Q(VST NW u #U3hgR\Ѭj$=r!ۂt/%sw!P8E0`ˤd&g%Ig V #D@lHWWʬ <]忆z,pX+"#zih8Sn9Ҫ͏Ui|7+h\aeИԵ NQaUBZ`q3S5^o*eء6/(#qG& lnVhv^A7y'*gHîooɝ%ntV RaPd}Ȯ5s`>J)vZ\PXʝ]ha%T=?7P Lp2) Ys*-8!k~Cu;*89=o|i9Yx0+2rWI ?-踷A@}(s[dd2 \H02 C&,0BJٝpu2եlo@J]jK;$Hn7=@v[e+7/btՉ2(*B6TK<ԶBuf[|_fDW;=I .f?*42lm lE_s 1y -K(_-UCk FλcbZ ] IvV\8y}A(Ux˖t/_E3c5q#Ȁt)M(gƼ[$mw^+A 5Bh;N&M5Ԛڀ"m4W=pʖ-8˨ҿay[\t'd'w5"6+<6egཹE-1Ȩ#7<~= ;!̥j7az'j6W#}Io\030JvrO33o7-lEXQ& o/Z6R Cd9VV.Oy(N j9-b++ļҏSi6f@M"2*ՐURf &J*1դ>7>I 'D >5IH;Deҧxp[fg=Tҥ|S>jfsL|4ˈ6j:"e<[rhpC_0^Ʊzk2{J)oS6t9&A~ZܵL.o |.kJPo1&& G*ynVIc jdd#fmqk1!C[NRoh {q:rjy;q++zbZrj!C%)Bmw=l3ޱJ9;>bcA@I€,}%ps< ܄LE͛-p:\o&#gflD#56 pExU9w0j5ø$d2{:.ELM@uË;j B O5<hHQb =/RhLrr҇f8rGPQs@zlgw/P%j=咩",$X̧0()ȴAs @R(FX`$4iF $:@[ii}Ed^a&Wx̼*ml h9~H0yz?57 5;r1f6V_N|,j4bv6`j֜T(hvq`͢kĶ(l7IC;|K$UH!{<-\ʤw\9h-Κk|۵k; q8z y!RJ&aH1BԈf~+:x9$#P*hQ~m6R(Ko;UGՋob遼:!eZqmX2_@#p]sv1>ޅҏCyI3sZk A{ӡ)<1RӁ7siU]{ m;=UvJ_; ΏYxCޘ$;^C0hSvoN.Wi 䃐i ]W%?Ӊ^6O S.1@ڮ^7N0 &Yl󴫎OyC Yruqʍ~B (!7Խ^m'` KқYNl˘B2/^Zyk]s@_ɨNTeЊ'7少5t5w`n9vY~gG,}:@6YcT5spjgB[L<_߸Vtx>rΐ_%t,e iJ-Ad>wNW.zz>{ 1O vr2?<CKlWI ywpdlgiC(k}-u}媡Kb^֏PM.&]' ?`ͨ~_Y#Y]l*Nskuᘩu/(iM^ay@u;=JT >ʰqoF 1md!(/Ѷ5QOrbO[[9XBM86;^|UL>va8gGz\/|kn8kPLf~AA6\:#Ki^e\:p&:7{K *BO+V@H8LD_4”Z`H[y! ar"f@˿pZmģ<ӪNH“$el1s+w  rN8>8*vfL1l"AE~6 XQ'r g *ŤTpT6&]f٠]_ QX Q= vpWx23 P.},f/(zS},qR`&iC4$z&! ~B(6?gqfbo$o1{9Zo^{ Q0$D(""3t y#i$awTD:f0$qI3VfFՄOU{s3M*d*~gSY5Hu,EJddYxva/rU_ ="d7Js@#HR#gt$^]f` GB)e)mƪ-ں޺KKБEcz8$㐨 S8\.&RBz;_[P\BHC`ۮOS]S_׻^v7("B+HXڈi+G*@K:I<:XT3#0g7D{sGN.gMf{S^|$aek;OCaQعm4J5(7Msʟ_قFuj;&p' i|oM^ߏ:$q jl- Y1$rȅHUoQ>EVBĐs28H PZ`ƈl+&2%E*;U8Gu®f3lV <;!?uf=~A[ .H2⸠HED)|o%j|&Dv*!*"|-D|#y(*}ln[ 198No #'rNƼj7`^T rړ!Ng8@c vFΎ+3@LDm1@^na((38L5fL2jbG5rk yٍ}LW(+z÷db31q2QٜYT8 ysT#Vz(ʿe`P!T;5-Ϗa q݄^4 ?x97%׃oL"x6"2jQ*3j8B4{U?K,#^4y=z#b2U#8C\ N|t1ogO=3Y_ ɖ1O)5 gԕ%渺yo+if'Dh%{, X"afh45o0ꭗ|Vw(=kPblQrvsˬ|j|F6=ף;xc*./<(@%RD/S xrmg (46aq&aLGov?Np=V鑦>AlO ?r}Z1wF?{ 1ҁn^qYPڏҋ!/vxi a"Z!$=e2l8g<_~{S R4.xҫ6c`PRzvEZG*$̀7\1>x"FjV}'0DSBmMl HJi\ok, &!HZ] e|72p(氹3W'`-gE0={\ҝQZgv<!-wXK2DCW N04}<2lTͯD5_:ͱDT_ls2+j|^HC fp?9h5$.B;.l8x.A&(,.`ܒ\38E2 m%&V=֣j-YXt;$,6 f]Wt(t)9kfi5y@XugAv}{\N!J^;pqV(D 豀R1l)qTsicEE =: W'bA 0C=r4h` `[…Z8hT H!ǬD:TW(A泥A(l:Vw[`6_l u+hGnSקS(͝I‚ly f>>`Eg ch؇g:6MCÓ(n8Kcsabs8hH_,|ޢ+)~;iO B:MS+[ۖZĠG0Iб0Ғ5x?#cSc1Cw}OkhZd3c1_Nß)ݵ`N";VíJ" LݪD` ʱ\#3f$1p_CCMAk+ DȩOajeK$jʹW*/k\'sUKgkp1+֍V#=|B4qgsP8cp(}=`)GJ|a8 wV 6R䍥OQl!j7:.o{} J.kdEP9$E)NoV#4t¿쫱m9G(9އZ]Fε$UzIGp",CC|Cd-Lx@Bn8,ӊHF4L]Usfn<:h,^b5T1_*H1kBQZK5#VIx9N— ! (1V  ǎ<=)#+qkyeX{7JqU *nE]'Q1 'dO_"',/޿8s"u#ȘAs{NxRuW&*Mj=abp\hOn&5`Zs0I i~Z 1_OȆ@M+Aם_0(äFQ驇ŋ}UT۩Jȫ;NT1IJϥ)cRoE6HV'3 a+éV9qN^BEMB:XJd)(,eHڋj -+)lڄ!WOQܭo/ w(}R ^`>2xǻHj*[ZlcI 1D"6Ⱦ_n U]SpZ^ u$GNұ6t 8#/~j}o)v8o: 0X!bT$M~QV|f~XGgYY~E2 vⳅ`%4N跧R~s6SnT ۼKOV hJ<r>l}^k˟ZB4ZAJ".4i~rӫ~? Cy"lv 7II+3&ǤW{`($j6S֕=db*'lœt"al?*?8I %vq;ퟹΘ^Xԯ_YގyIY{Ӛ\!_;,3.@xdj?p5r!`#^HxF0H! d׎}@Nkz)5PCU@ןnY":RXD§ /=d{ j Hq+ 4Πg)a֫%SQ@uIXG(i;:}nbb?g -Đ]+iw(zٯJHEQ~/ZHa/dՄ9'sʢ특t N:[&o|"9.08ax7aVZĕt(*: ;^ ZOPd|",-(Dv,f;Pp8TNk'r#L&'{!c*茄s:}\cEL/R<S2o&gta餍[N$y@.0rzJ$þT}Oێ2 3*ϻapKVy@);DRm2B#2:ld2Nc$b["Cg2ob9wNbߛW?RW"}dvKy qT:gL?]i~N|Y : o[VB .rvI|uo>+J HcbtE4Uai@c#Cpd$ w+YWA/]5MAU?d%FCMÐSMko;%?<̞}zj J-nOty?`|݊abāC 1=@;+:~ճ3[ǹX[wn5j H7Yȗj.U$pN"lTDKyj@t{?ōpd^ϟIakvqD..6sqqwmi@˟8f 6m;dFCJڡ_tY&c$rr|XER 9 -o)A)B) ~`(cUH]0ό>|#!&GWh?3Dxd*ê=vXmֆN2AW>3؅W%r).[,H4;YFs,E74_} ryI~Qki%MGDTGd1Ƴ <Zl]f?~jVf۬QLp~gc) |;Zi(r2aKn?d:vc\Qvgk7z+VnS"YWVhnZh&=SU ؀P[~;^Z-QNgri/}Мc(p@geh{de`=.!绚)U\MՈAǂd"j8ꦶ#ŏu7sS#k]V_O-l0 `ǿme!IED+ KZD+LmTw3Ccfv<OQb}Iғx4LGH2<׉'k:x w8XN9/HwK@3,p0 ό!{2j#>+Kee4ZqQvJk}]pzI1=E i ]>\u<*n+B6uU?@uKɻiCBC"Of?AM8Bgfr`c\5*>Ep1ރ 0ϞY]~_Jz:WAdq'M0 LHBֻrD"Xc;JzL&Ti|)Г6E^]#6sFHKtT5T=vM`=W٢/Vl~̍#㲕RErf1{ gImKsv9]einrk RA #W*挙-ҲLAل>=_σ]L]أ:RK)W#h"X)5-! &Kh݆ ){x csl"6Ʃ7rVBzίѳoK`zT,rta̠lEԷ; ƕX%m:WFFƎaV.,;X7d67"ʇмPq'ɛ 0WeQ~Ύ#dpI9Li0^9he~[i!Rӹ=̨ 9gReA4lB@$h%x((C3&40Z5 [xZ3RO vAT $ [vIUO>LJ4N E +?q<5^J#i-_"r Vȥ!7&x I,a Mpo+0K9@_B2UDS FJ>T^{i&NHOw[ӯPnlݪ댹a:Ё}50FW#z[.yC[*y9o4Fgd:[$C]JP 8ຩs:>{ño_ >h.F)||֌g=vdBP)Н'n@n֮e AfR_+VF;5ܴaaS~'J>*W~XGye8RUFƉySEE\泿TFQ"*njPn\qͺ @UP~Z~=bT@m`2i^g#pK(ORMurwE|{8N2йL VcKׂhv8-'=D3:cFׁ9pZzf_NquERa!FR[>#,ԗզbh$Ȑ[_[ V+ BqwM 7>={|g\ ؞ƫ$e /Ķ%d`%{8R ' RN"a:&W)3XٖWVE$[uJ#LJW5!Mtn7/Tح蚆epz %2Q̙ǭ]OWh/էyb۴ #/gǤY G`P$MJxMA=;`po#)&|-`fցS6g}{ nJU?euNtE_Cq c [ьFI3NBN4#P_8Tw 3Ti>uY{b;"@j|ɀ<]%oȡ+= ̟Te=y>gNy~.9x>ࢸ&fU"pl \Ҡ| Ri~n#EW-8wa6j8v T:F-/4&C.4:1Υ$<o3ZZ4`({1M./~sL[>Ý[*i K"gľiCBͮi l䰿wl5YU =/nZt2c-Z`9G~Q8C@&ڦ>{Cזxk^XiFtd洚ͦgFHig =s*yp<43$;^2+`] @׶Fx8.D(j<=W,]Q?/DdZ" ofQ$8:uQ! enq?Gomj?kx)q3 JPXY>߬bPǹ 7iTrS8[o&g Fh~͟\~. IJ/x*X. #NmğIfA$(4H!nSʧFGv_lj a]x#s!uwRb4ru#{7=L~2UZȾAxt+)H:jfDCR! n} "<ț g?ĈLffA4VdSl1nuNt@pĚuw25 ӥe!P{gO%_}̝pGW $]{`a@6tL !«Qjv7|PBPŐNf8YF3Lt; m3םK݋хu3[(xA]"_"ӦG_~zxdzo @Yzڸw=2Po! e Kfڪk6qγK?{uflҠo)qB!S)=sb-?9MeB<=.O>M؎ KcNi96JZE0;Z׿IZeOSJxlC/lm2A;HՐG@/מVyvzL/U͐$\[ge Yn\ɑBXZ6$VzU"?iJ̛~T-eNQai@+q ւ1N f^O> dvEY% X Nnf8scf%xcλ,7cE+@(]K1?P!NRnj| ϳp|7~[UkUAdApRR0~d.A@/Lc"HMk!=~ %e3pD^(_%x$N>=WUj;3g kB(}1섚7u'L|]{HZEXcS9$A̤~*4M7'}2_GT">َe>AEsxfXU5]r1ɕ?&""wv5t#^̲: nArܟtHo|,!:Ir41عoEGֆٴ/M$fJoXPZۿ{53lD"I|hƲ v(]υxQv T}rZ*}+Ơ7Zvұ%fp93\a=#皿Ϭn Ԁ@hf%ERt7@q'wV\AR*1w9Kda-̶޵sڅ;Q ǙM<]pC[64;6&_-C0~C[0gS #UJ޻h[LؓTa=,'q`-F Sr׵: Y~WY= ģLWcrD`= #ѧ͠ZDxx&]hhE1jvP5`0[5FS$S[骫Vj htvA]l|Pd1@M HQPBWݎ6e:ݣ{JlحUd[i2'"z+1lI?ZF%vIDMA!,}4 $ ʎWesv8D*B0Ғ?ZT>3Ax?ч"S VQܕ=Z2SFI6l#r1+`GGho6_`S0}ũu{ d}) 0#k]4G)81iMx#\?)sgщ*4F1JwXFUbN]e^5>+ld@WbBтck1dƚ͒ rIoM1!WdzayXnB\-`G {,Ҙ?@"R^˅79kA팴.JmÈ~b`k'5RE:^ݯa']L=HE6 ;^Q;]_r~ܡ} 8ɵie 3Dا#sǣO AѪfxt$A7D$$|ѡ ${7!DmJj j>;皥ŦIsøP[,~QsbјnbќFx'z}⽦\\AULB_;TocgS{!.4T=4Jx) X c־(Dw }pc6 EI]ˤ&iyfAMAAt:[y#o 7qX琉b59?~jDzlB  ܫ+ >ƽj 3X[JW? [)bb[KE$ǕqgGQ6vjp/ l qx:ZG8S)^1J ZTH=ٓ2PCFX^\wci}Z{ʪ_!IhWe'US%+HZe$2=ObfzBE_0Q 6 DP 6fk΍\i)E/9A{.0ϦS%gaNeo00ad`w 8 B?˚@,zE~6AҊ}'$w # "zV"H&'DfҼ5NiZNRLCW+4Y;(Yuc;ªJ> GyB`b9iqX_߆-|xSuaIAf*-Gjg5zjhb뇤0 y0yc,m+Nړe՝p$bFfvpXS~ө]Lq=Dh|hVzbAy]Vb|QO母$ 2Ҵcb&"9;XY MBKm)2r϶3J4` m#lYBmp8~%q n墅=Tw7P:דf?JzGO=z빝«ږ }O M5e% haL&v~BТd E)ŖN!j,O/gbHr g$̄D;ΚiMH]Y9(*%) $J Uٱ-q%?[* X0)5Ω$SswyC=3x7SmLHBY7~#+V⏛+&%K@3+`%RCή=i«-{,q5^F=M/ U 9md1["Uk+Вe6;{~ZÌfV%wϲ tQ5M߿)pwշtDIh[3m#`L}\DT Pz[ʾ?@SbP+Z#A }C1D܎RvZbMˮ]WAe&p'4)7wѝS t\y^Pmw m@"-hTpmK4mj?iw߯Z:ޮݶC(x7uM֫g1gЈ+ RJb1J(l0%^ "oc$ aH[ R^ !Fϟ]QD~f{1i? ]0Xv< APb)P|W0ma*'Z= l #@emT?LL Z21qF=fad@P5âlf3jR.stF?͒xpfwaÍv~#ۏӼm>\ PhNXCgeZ Q2\"=$*T:z[ʛ$aNQ1p8NM-q&`#:mZV[boF\rkXA^3yͥ)ɢżڦM9Ie/pp s9ce4j\?UqwlM3ztbF}:0d*JfMmr$b@J!p,W4eeշLl͢=^2:X`<:- Ȇ3cZ}rDKIJpkۍ=@r$6q6tsg}|䕮L(P6:$ 5-S* U3tehܬz.ZvouŔdH0J&y‡}h rbAh67US Cqy`sozA5HX:_f 쯐ea x;B?@6CdLү!FqTÔ7fOŷZk+d(LjJ\J˫8ZJb--a,tI4s Z7(sf oUV⏰ eÌY/ DNZ/<vf ܲQ#.9V>V}ay6#Uo)i- (6L00Dҡ5ɡeWm̉ZGcR1n4.,?!(P4@e *Zf.I JPA)w lr7uWp|پsTL w5`BsT:ik5Z/yMVLp<Ԗ|;7;B*<1,SyO/lwDiSZ1ig|{{nAjsBU-MKT;tma9zO%gܱHL,O[eMF8n @+ȍʝ ,WBQ=\!~KmoLђOИS\?vGŤBP_08$,ѓV~UnIî1O:W\5b)aJNa\E&qv B_d*uMx9 'ak5'٭\/`g|fGB7{;hnۮey {.ޏlɦI?d . ~G$yoI%SWA~JSq7s釳ta#߆V""w}(+<<5't8=*>E}!2.xjTvpuZT{u7*thJ8EM-r5@H2ݱtEsSA|N,?V.8g FRs!O t57xOL'ݙ-!lkJ_>1XP3j1 [!b[7Խ)XОYG~?9"# M*Ql2밓uIdg&⵬Q ;GH•VpAk`FK3ow6K&UEd79͹=dϬnסChL'aƆN w/KPыUb@JU=G~9dVz%%8 PEN55f^./eNpP5½6+-V Z$CzLsXE>@ B}7 ?J"T[8G,kb/m 2 DVmlP@߃:'^gSաlمYTee 4ݪ ka1 F6;-$XrVg@@^Fm_;.ּ"o6R't'BDm=mt <;piޒ0Q7g iW7-)n0T-d[}O^- jGwvOZiLthI8Y/Hq$nd帥> 6}sH\6BV X9x7l=Uv(pd{۷Y'a){4&@6]xy2djf_D V]]:yP!y?@WYή~X^+Ojkj PiW \i:au_4J|;fɨrAC̯E6ϧeTѢ Vd;;GZ{k? [;dPоOЅ@/'x͍]"[8ί<*ɫft[mO*w)-yں m9 `XNRgx?%,XQ3K۳XnRd[u;Y=Gn 5ocA8Ug4=ήRHyW8KTx'H[idwJhǕO;G¶@n)B; IVpA cx|` F _օHpjfGNZ~[^3:j\cϤ f}AG:{䩊K'}(`}dM)U)/ͫ){oi5(máw 8WYI76Bwvdswʨq@w+{-oe{J @=%]g 4>]YSr+;W& pakn8k(rUS 6U:V )AT_7(`(0'kӣNV^ơAbi&VT9 Rʉ@%"._\0^t9 JwwQ-$gO#zg3ĀCs-̣6QAR`!Iw]1K{]f@'ʠsD HɲW') [oD1FqJ LD'bί+CqYM: '/kO&,]DЄΝrdS'N¾$cCAį3=ߺ>\'UHMm[xg)X8l vf 2>\P'ɴQ|9pr XaD"np8D{nZ1T$HBsM4\rlkrωY)K7n@H ,7%G_ @@ 1fa 6Zpe[mqԘ`'1iȶHTV܉IX0Hɬ6yxZt2 $h[SZd]qx( ACNaHf42$daHX R#8B( vxGb*0y4X+}``5=o[۩i;&6S&tq&ZeDN5c}A6R(=+)mkVVy!dq0zӆl_L_'SzkRN%sfɻ+#ζ"c+UJH(* C9? :]{gUҕ]&Mlwux`ps&uT,Y]E M4$QPl7/Ċ*RصWUԙ\Ip79c}7猸kCDDEJe%L (\5y񽃞ϔeBb'eAW ƹmbH; Svs;z]81W}!2!bH5ĉ-9fm&…%pOo$iY2mYWyx$sϖ[ꎲ$8B9uY R*a^Nmk"-hL֪+1 IJ^30Z= {[Hr={k\TPD*UQJQACj2cZ%[b,A+lɴܪČJrzn氐y|[МʍKn,b;z=bՒڵɕa ,vL!ޣilywZdB#6RDcɍ1"CwXu2M0lʌbXTAǝ<6<&n**m`8;}gIEA@s]ؕDIXII,DR$QU:WvPRK ؕ`p|'+)CÿяK3DE!hČI V*)d4dY SŰJҤ̥K,`IPLL-h RFrF wI)院=Sl#h^wnjSFO7w~y=j*ɘ5'f iV6vKiolQ)Iﲪig_ϱ-$죘Y''8-ʭ>߬{ nSeZMqqi;,iK4$Ke"Y>j.-(*₲eśfm%m`~Oy~'O<ӺUu>0wdLґSO78'd/o9l%$#LUQ1Udּn4탳fA55䄧r2I njJ+m*FK_yTJIF[XJiH92"2kotsmdlB D5XIg 5\*Bm{jqTV !ef@sP2 d]y& \qwWk*7͉Q|M9.YNlitwlS;>Y+`; 9F `c))vv]+oD]&~ LtrdM\t<3*e9v6kSd_;' E{ʠK; A7%N sǛ}2ybyʘ\i+͗41]omvtPvFtNCx~ɏiVgG"TErYgobAvTpPmF-eAˏ<3YsT8t/ELˌf➫ƩwHޠpw.  SF#k)%ĈِJBSy`JK@UuBDBtw+BMҪ(, ~]bi&x"4HsyN=M5,+yN*r|y :7λd %+`؍rl#bd/L9:nl7+z,%:U3Dաc|!ϩv$;_Ϟlʴd%!͝kax}m~'G6K S5NYuUoտNb^XץuP?4ٖ4ْ!3؏E Ê*F.4#țis-nx/W|ZZmj5h= g&cy2f v ezNSg?77LWh4ރ,W&̵ӫVXP@ )UoCy G-["gqv.[؍/SoѲAp{.]I]{J3m ͞Htp]X^D'Cf#|C} W%01q=J տFNs{w UAQS%TH:P)H% P@Ta᝿}Vn8'x@:pF'?h/5goрQCSg[ftʄ,)g$K"Q^V:wXqڔ(Ӎ-+&0*[oBΒ?z]z;5'QETdo~ 8& =L4 E5ǡ&:YiA-uou+籷CO놤UQ}_fQH9aۦsޓd)B#{ Tu1N4zb!UF[HRݐb6.! eݖFHI$?qi$#dHY!W^ P+U^'RAD*v\ `T /dg.{.2i{Ǔ7ciG*:8Ei*!1+ A<=aϫJqg~mzMr"*蠲-v­nY,P. I-RTCRPA*/>q-w=|n՛?'b*"ߟV'8',89? aV-r{}ȉZ9%ys;/y{KyN#M1{WZ T0@z s7\zP2@f KLlO8!#VbROfwwC不45Qѧ..1pˑ zϯm_=(&L˞D1,X6Y^< ⨪F#X/V;>Fړ8ݝ::p< Q̽ۈ$Ph4ަ]BNc&a DV,-xu3Ed%v51yKio&ӴLwHah0$y;J `w.]>[#1(Mc[-SEkw}г ن GEJ |.kw}Pj|bp%ƣ ÍE\܌ i)lj(NG֕rۏs*hpnlX:.mHkzkT\46c*ud ,H"7 j?ӟC5B t ZxmD5*;*C;wBnLϛK`j=]8 JK"9sbQ^!nkr/B $a J$Ty|51Q{1Ct̎WC;+poh! Q6p2NxLጀ(JBP*d H + fC-eE5UN~e8@@[Ly`%"EFbf\Db0KDf@R:'FƮ{mJske o  (g߲.XO,u׷T> $%a!nQtLÜT#~Ȣk u\S9A/Qm;\9{ lt %nOožw7*H@jI1g کŷghh3&859Ɋpnrq2 Nhʍfjd"fZ !I !) d[YSƋaї[=,mWu5947f"^4@^{y9 (ay=$ǻz艈d_e!PH(Sn7G_W[#_E,ҁ! `q]<,X+dʻk Нo3"GF}k MfY] kr"K!L3uk-DXl1z/4*E Hy~UA7B;u?<858 .M%뜻?Br-ŶUFJJ 6"_[(=IPw;=t PlfF@$`w/ޅGQUU^ZDvB)߁wk0C;/}7e; q6Vj矞Z0@JzESYI|k6ԙ"Yδ]=tT| / LEw0TR pƖfR17J$>,k^6ly?p-WZBN_P$ I[$qB +xU%oUӴggזyS$n)" xq|w|[ Q7g6(tzqy9cq&H6jEX@ҀFL< E{L\wT$ÓAP9{m]HHC]Uz_!ͷBzaaO EDL®)a334 WC^ =4a&p_K{/I۽oW7vywR ]dSb h&𪜘;R& 4VJ2$DE2 `M;߬:r}}fsI1c ra4&٣kjBY@2 @$@+`oUuܔ _]rqVKc3"beZkU+ j_(L@< $f[n |2DՍ-;5˩y.7_|i2`Y.`I$yFTEoJDBTc-*&}U<%mql_@v vmD<}})ɥF-:H" ( ,9Mkz"5.", f ȀYʗ:&XZk\I&")黝̇%R~ɾV_˪k(<ϣ\!W/˟jwi@f'7MO;’E<|=~E{D@J hnQ>G{y~!.`(>rgv,'S5j2bLff9sEw.n4/ uw ha@MH{5; Te!,{Ikk2mA0DȈ ?>>1OE?ҏŕCO~BUJgg>!ќd>sƄ:3J 瑝s|*ylFRaqH&@)@c %*h(%WqRקAq# Iy{jFiQud$!~"֨"dGg- HsL"E\rvL0C{$ f2@H.ԌEk%D*O*$aV\e$'CL&VM20k4UZriɏ{͹x%AEd*(*+iF.Mo9%jh?٦Ő;Jx`!{Da+20|(f'fFDf2|BS ٘AY5lҜ6Cԛ&ǃZ5“V؎qhs(B ^\vJw.c lhg7 8h^Fp7 x9gHݕ.'鍛}TMG#DIr!!aT" AP$ _/W!ZHyYyB '^LpK @8^u%@ܼ44aԭ}!!0C-\9$ClՓC`FTJ`)YʨXHQ\ep!DEH$xfBfgtQy<7{Op$0Q֍/ˢ[J[ŕ6`DUy*N<=^Ʋ>o"hс $om3a̅F#\ O5S"2 @*`_>zZi(~L Ja>Fn<5 z܈uL2#3GveeWqt]P!V7 \'i?};gDCm}b4z&"Vde^+Җ@]L2Qry*B&fQ5L|/dQ& dfFl͙"0 ,,695\. XVe+7KM1q.Ic(8PMJqa ?ˤ@ g$F@]韒d<@yӵOwk 夁!}>Q"#7y5kz)4>w],l4mjڢ!,>^Kgqt 1@27塏y4zuVa/NN-@!dOR"tWA 2, AY;l%P4{p6iST" $L|':@%E2@4B<9n$8\R=Q2)@y/!(^tG촙xwlBPӛ`$?/=b(6F:͕E]?ˀ<'sZH~@$=ߡuP$8|!???G$omLp2ְxq\fB>c BrFaw~BOdC>Dz2ҥE"BKJ?㻴(Z Ă(2D)"UF9 fCg&dW`V7;Z V)?_<섟[C)_RᙂA$1.Mair!BUGlHZ[+q}nRZɌ S 2,K9$ K4{hdg,p+%-RGfm[VXؒK4XkXCq=0$UƳj( mhIq6 w|{Mmm~nїdHW|s#zzG#А}zO^D_zA?/^>P=v${o. "o)Wok^zjBt9U!@t:u#IUET$HưlQ4[(K|l `, }؉kNg/n[ @9?"4!ʔiU~+cID-3"D@Rq):>S|z0Jr"hw𨪈0AQUGmDbe:d *iń 2(4`ҹlUPQUTUh")2-.ɰ,QbUtLtLX@\UUTf\ims(HKVRr IWy)3 Yi,M4$Vk`~4PDRDT;`TAS2VёAQ4ARTbM-QBFF ,VB"0DmaS*,&fTׯtșn7G 72!ZR֐F bP2D1EF${F(h)Db6’&F!̸E[oaWFAAwA"*]T{XtR,hx6 H38s*IjgK$`#㈎7pxUʪ~A97OR ~½{wf}'=yD'#0@! T 骽QhsnһIÂ*Y#19 ʏ+rSj5E$$dBȻY`F=EYO3?Y( n8EKBQaY1ETJc 8iiTb%!oH!v&̘fRLꐣf BYAWB9a]"Ɏ`509aŒBCyG'o%iYE'?נ>=P t?q'N=jsCWjp\>EKY `~ Q, b}]pݾRֶ]keDI%m۟{@fAihJBihZii h D)j>F4J, TRBED%QS-PE B4J4;BhZ'eQΓ @YF qX)hdh(ZR$i=f%#44Qc:0>tޓ˫)RV=Id誥|_Gx0)'OĀ"fIt4TR<[cY8"5ɑ@Q<$Y.dd# lԠdXNI*lHa,YI˿ 7MQ0l&_I]z/ñ y6iEUNlOŧL[Hp7K!>Fwxa҅ܽC!7]`ԟ;j@l^9RY ?g1%-~g|6F b9%b(.["rZ,*.PUYY,XIP2 rf!F"m2ZZDUH#ʌ(j!?m9ϼ|>@sF - ![V~Y4}VtNRnғ cdUG~ؽpL/ʢzdvNUCAM9oT(+dm6h[2"dSCo"@Ocmg(JLvNDžs04rI6%$f9zs$+<'{[<С1C@ѧ\mV*}hj|o(g.YujkV5AFF5IMARe봜q*M.Qdali$FsU9s.ؾ)Bwfxbea:5 ҭ8X6 Mqh~=:%OySf.<}Skհ aP)}KD\/L#" 3 ^<~[>_# ?(L-LDIH$(4!JPRB RH" E1$M1TĊREJJ+JA ** ă@4#BS@%R@RDL%%+$R!DB-T%4Ws U^;nVXF!U"hjN2+HUMU0TDHRdJD@$J(4@P"&"R*J$JJȅPH%%4-#ABJ%*ЃE* U5SPI S@1A,)5R% 4-)J@PR+CB5E(A"б@ ȡPY7ѕ?PR@D̡; 5v a Owg2Ri7K d ֭%Ԧ]$T9ُ4I!d^pHpᆺ͢a\Ҥp=/ebhqH'Ni 幹˩]t .IRܸL^.xK!pnHMَ;ܦap&p mDM7I-"*8L`XkB6NB8C2D, 2K "%Ɍ`\|9 ôsb:Fbb%I&0;MN.K̪\`.CpԥxqrHW޷i٫ ֪ŸEAa[6;-D2Kk\K%7t5.dJYNeXr ͂mqCd6CG 1ML$G7NsDZZzpBL̻w1d3+\3I)8rn31@Ct`2*7oxM!F;eX&F6Ѳ`zi2s&j1p2PPN H1(Hb@‘is/9n9`v]rIX\0Õ{ހ)np 3Z2H3/vp qJR RB#pC-6ft6`2팛 d%*2&)1SwV )D-v0ζ$/8G Sd"E `C D.H2*dȌ\ T&fWy8avA#pXɖRۋ@ )XUJ+liL3!B ,[c)1A7! Esd.HI-.R*I#Cv$TIf`Mޛ2L5&qsjNԽ.VS)DQbqM "!+EK Ab D #$QgbFrZecܶ$FEQQEdZ㒴in,.nf:RB,S#M a7`q)(xo"vҧ,PV*M68E"d5) +Νڼy1]Ks,!rȲclQ\A A) 2Ɍ&XZjnFDxqm; M$e2\KidВѫ$Cv\)]dX8X$#Ir[o&LHfNBtZRRU.PT@J"0aM;S7K$ew]6ǺA]:nBH央-9K+(U1fn`ML&H(p͓;fg&prvҍHըVTam dIYfb6ilB@8R QCD4E,& `EՒsdusp&21R"@&\!#!l[0İa@\ 6W%YѤ2d3qs PJ[I4"ց2]bR&ݛi褫HЂ@#@J B*̊(PRDdd;zhgZ4QZTBG&洛"m47u۰`%i%,7]ƫmTMwɋ93M$q%sdq[X[љε,Ԅd W3DS/94˻HMArͤl(tދmdfcTGprUs{ҶB $qEI v SF Ur1i$l`hes6HK8dK&MG l2s3n\nDHXIRȤr6i4n\2fP`Vr B,mG Bŭ&6e.xNa ֍,6rvNg\٩lt!rXյWYun%CRI5ś7+vGg(a3ƣK^28TPprݶ9LuY L\2LZMB&95#6`*Q$!8<G kD$\DnY TwaX˄p&!Y-G,,ӏ5כlKcdȈse%v颴C'HI RWFƅ*N J)h(B⒪ Eq86[rޫmBvB "wf* #V@ܑDUŲ6鹹[ ѼW8-DzlvYA-"وRl삂&&o:2UpDzB1hw MU20R* DBʩ܄,Dw 28pTL\FEȅ8dL4 $KKjFe12kj[1wIK "U[ a'Q!=$lV*RA] 01΢{͑2FmONlA!SD&?VL)?"2O n>3^D!! {`{8u= fP"(A;~gW{f x}=FiF (ηۧ=Չ۠N\ }{x#hLֱK/ImPſ''4 flSNj #+I3~/M 2, & " ߙ5Q7OgIHTbͪڄI7}JKalj.Rɒdim,`fYYV%"# -m%E4dk̙D3ʞBӽj/OC)n ]^ Mr'ّA &f3h/-H20>Uxg-^.l핈U[[ls!V\ Қ1M!'Vf1jrh͵u%~~vP!TQB2RIDPIDLTTA$ML%DL DA$EH3U4I,%%M3LEE$ RR1%+BRQQS"RM!J ФDГ4*U(RU!+RR0 J4%%!21(S;WxE*%+R DBPRFn"HC =- |+=Q&C)4P*ҩR҅#JJҎBPĈg((bjռ,6upꛐ;@T&AQ/h[A}A  dZZ.'C#Od&,ˢFGM ̩ `|B.S+^l4 a,lYLčDN"= \rEUTyR]'d0]ϓǩ})C1I$yɦE&gQ; Ffu J[I, TƸbRm2ܲGr1J2)e& R`Є% Ad73)-uw:sVؕ|=J611WŪ bT4񤬞᮵JPKU5n 0nA:D\L2diI)s7lּ5cgvX\bN>f -\ZE[8[,|zbb ~n`DվIH-6XZxڱc@o_RtC;d62#"LjR;^fGZ* %0z HxB'F'-p8\b0$bNl2(=5MwVty H 6Im*WH :$#K0pQFP H7qђOt* XoZ3]`ܜ2`~2{Hx%f b! 0_ѸҸW *zE&B)D;lPVs6"%jhtHJUR0yV(DҩO%3Vw /q<4g`f4 ?u.Ci!s(\4| 6,+2>/)|_=Gk k6g2biIOec&oOv%CZe<Q>;қq u#C0jju׉\ L]nlASKo٬'!c_Y3E?o{ OazЇLPE*_} @$Gj] AUeuy<ŵbhmu|Jy^@OUu\4bB}M*"1=BHqx1`bq) yԚ!Ĕ,E^;EXft*hu؈)OU3;Cag/6o!"ۥ(w}\zisk\)( GH PX^L wS<#C6Wc 譵3m,^IMSQ?C̻kr02\4-#/k+4_\~;{Ve@ eơ`bDcBU 4dvHy er<_~*"#qykVYfR.uhHĊFZ$ߖкzujX֭&ѶX~-*609FO%S }8Y~dGk~wϘjO9Y̾Uơ6I̓:q_jJIH, &H|zSuźhŶ=yDt#;#Z lU.ۉ1Wvk*>EWc1rr͙K(۵y7LJrac^˃ENj:zeN$'' @ D # G<"B |oN} s 26J5|UVS IJS/5C_ړ{y ף6t/[ /|u;+ɨh#& ɠ3cS3">O꺝44? =LJSq)5TD=ބk|v8rs7Kr.V'x}]&}^-}d^ 8d#Y>aT3EqW>nsğ'I*~t*q=nTbO뢌O+ߵq |5 rBs_Ѵ] E._R""'i`(30cDACAl=M::u6pVq9ntgg^=Qp.s^t5Sf73ٲݒ|Z#!h#LW2@ 6F#Yt6lu?+OH^[/.3_'C|5 )w?wQMd_]:|A[zڍSzϪtr?̎:-qX#_8nY{!ܢX_r+yv0-Zn}o*8='v\ ++r}] Sg-yKqM5dSN(37u|s&3;joOH7[ť/#4n{eֈ߷uD.;ΦNc'SVϵE4QPYϯ O3unjݟv." Wb zk}))g_b58FZ?+!}ax_vnn%t>O[ۆ޵{ufm HPC8>Fc,m#@L<'^w.$*^ek4W8B\q; 8g4zt]Ow"`{ sf#t~6V}b}XM CɬO'MwuݕL \[}d+Fhڰ6ZpOju J/e^%])9fRHna `!gn" 4?oO5ƘQC3Ըw#^Wt,U/Y3L߭!M[AA:%6"@NғGX桕: XJDj15/m+W3󁋥~n |޽j;Xc](`YִɼSגѻycd:cknӴ_jx5cw4X9 -̿~V0lyKT8닪`,\:uhYN LS$C|ז]Pz7ά|wvEݤ*H҃BBLM6bچ[ZPNƯQyAAt)d<)0+Ita(E4wPȇX,ݕ3ܚf`k"o8 Ku@@;/_83:#j|zgͫ͜aH=h E1 "rb=yrV:PSLQߟOϻ4(2c{=?Sr~H X8qAS'qT䡫0X/||5<\hKU;$/ G;ՏNnlt5hQzz>7#1DX1pf|ϰBEdIHquHZi`qm=> ` †rYvvMoi6PeҸ;{߫6}*-YFR>+ X"C !ǹ~Pt\zZ1Z]+!wTC0-IoIJӊ;#ݽvc?}@[e'(5UJy<̭zzlxjw\?5ooSgxw^u_WUUwQJ/v5}J0@QOo<8=0Zᐽ@ ނޔk6=wX(p'&1f$@B&2YS94/u~Tc9J"Ox PgZhp二t4Uy[arfX⻐HHeu9)T f`8'=$0F0?g/BrUL9 -;vߞl i@]cېŽ-Dǁ.jr8QM3z2B~jǷ;ѬSDjغE#XK1 %|p߲-:$Ɂ^ѳVSˉ6[(~[@ 4Oځ}- KRPX:6‡]d=M\y͗,ujUC*i+WDR5bv'ȀnWb_ `m( r1lg|]{K#E=Lw7ދ@5vx8" b?Ks d ;tx{:̽R^yP / WyH kKG\5fYHJ2v.O91#- sBD%!FF }QH3Lx|%F09G@?#nP7| R+]"b.9q]oq]G$Qc͛Oρg|&iMy~Bիn-~KNRpWo".tD =&b~Mބ=ea>eNMjs=_$D^&eB3lIAb0nF?[yE=G]ԩb~W*>K^O?XC\\>R"  d$6ɆF \\oU[ M׷sۋլ!k-r^[6Y&qwfES~*П0`8ݕ~DlUA}g'+WW˂eRn ͎s9@PcʾNN-EE`P?T1Qf0Sf,G1{\0%ʠh3ѓ&=CN$%Ï-jY9" Y8fX4]_ ח1=r^^{KݎH7Vg9e\OhǟɪyvWaz俔r%uՎ9cUf@F>cwL=5ۧi!.²Rh| o&9m$%"cYؤ.q@Vq@^0L޷ Ϳn^6={Rg6Y0 !SY3"ǘx/լӔrGUMowTGGݙظ!,yֵb 4zy\_ӨI|~Z",mev_d | x}ߟ-֌5;}VkïgGske}n|F"ۑat{~^q:/-O+ ~o!ȇĬj ӑNnB224PC,`D)eX`% BDX-(r DW+d~ 6>mW +P[B|XI"U~PP9d7qkR R@`]ZU@R"ROB m J  @}݂WLdQ@.8D\?_mM{^fi~I֢F`|=}1 Ow?>vӧIns֟[i r~v'UǠ+mE0c~Ӛt;.Qpևx팿Sd,Kg9t{f:tbJOq-7ɤAW>#L/tU$"rOZu@e¡MQ@k)m:[e0̔fdЧˮ^~n¶K9EܭCsD b:┕b4Ry|>){̟=7N 8O2yisKLʇơ_?i̖"h;T1goV(>$ ]Z0+@٠:CT|Ty*ṡEΫp㸛4w cۑv2hA㰟e(|@+[m,X{KK6Ĕic }x؊夹ͪuz.'CKe| F'0?N륜vsoR#C3Czg?|Q>)}bZR-R+OI<<60- ʩ/a ÀJݠ Qa,}+wiɢ:6& '"E2d?f4B19}]r2YZY߯ڏu 1 y+jh +]%Zxɜ (jE8qٔi&-5 bӕ)Q@ Fwcy%jv2LF>7|iL<n;.SJ]SFd"Ye%YV\$G=:` >0USE\VTp{mߡ4k#߸}ݏfE b^z\(,ު!Q &9"F2=:0K^IP$Y]@>irbuy v82!LlP;$#kjL.7dlo93-d!^eY;>X 2ʰ>:H\qusMO :zg'd= k! (9Mx+5&SPT k֜E)2 ͛M<=k $c{vܬ ~!!1wv0)ŠH#/+3*f [ D w75 ~m$|G`(D"vɍ\<9Caoۙ!H:ϸeљ5F;\\!mxU`f{*\(pe_q("q㽑 ԨrF G",X!ŒQã44NE9CgTKX(;{*7,9ȔpXTQ@rEBP𣝀y5KF )*L{ID Gvq8H!mP?i G_sݣ* `[oxSͣ]ŚM*N{* K `j;(amDZ 3՗os<0^r\yr8.655Bs)5Kǎ }1ݭE#ȚFA=Շ\R}*m Rn؈.Fh(!JRݦ \ & T:-泗TW% (v?ci`p&A9n9㋊ $ PuyѤWftM>Dj!N.@˄0foKD͏HH!ܚcPl39%d H vɝvK` bv,D@,2DI1Qˆ11, LUݔTɇ|P jSs]i"PyFlO[$׶ jwvܝś*2"w9'6D yuO3:=ΉóLyGʈuDMx4*"nKG>O}YYϞz۲(s%  UTAOGGm6t>z|TT:^lEDp!`;@X„8NYɬ,ƿVɣ<|WYIkmoO;J/ S @=]{É3~ ?M,v?}{gb.I*͆CU#0@ #YyJ"9!B4&2t6 HITiqq꜄ňG4eRȒãG;"_"T? p3*(|JTiiA2ZZ DR !p59)}\Rw|YD:FŅ<俑rT?JP>CRR?qxB *)Հ^0c}ĩt?'h$__€VtPj".TBU!M2.M!`/G|,g{f|/i =8a| 5nzj2 `bzs~&ҋwn Yȷ YB J$ʠC0*PK~]T6 qKj ¤Rv&-NCBwvx2wa] _1 z۾S#k q7[jۥFr\WshvEݪy kP(JچZ2=ތ>sW<:LV3݆w8yP.ޘo! O=]nnO&#(IX.((4zw3=R)zcPQ:283@ZP ktIV҃eL6?wd,}ՌA\ԅD}pE[<-,N^S|ˀSXacwn)|%  QKȡ;%P%Ԉ^Isfd zs}.G"vb%:[$/mrT![iB{+Gfl\&Nmvņ 0"!/ rs+rqnD0sջgr*T_/!b MfQ_ ;9}fl `s&#=shHMr4ƈ=Zwd7,A HboUd൛͠QhEFH"/I@$DGo``ON3!I1_Qt~ 6N\@=of;̔}`,[ȉjTZ( 0Mr8L,b*&۔&QH6 I7 )mT0U $r"c<`Sx`P%cK}NҕwV,RziiA~'< GZK/qьBk+Aƿ˛J"";ga>ETȡ(1Ƒ{ N;Ƒ"YXRU MU0apCC% QR鹯׸b訕v2bjP]Ctu%GR) \y(QU" :8,*گ&]JN=n ; Fps<{9*A*@ UOV*%`Pm_Q5>(q$@>>dB@$ 9@^~/vE v} j/Ak8 @-~V\ $@4X mzaj2jTҨZ<)@*#".$H]fv1ӋY0() )˙\4r`a=!d#PTGYKׇeA\L 5JmdȄA]aUX Bξ~l\T!2 QT I})r `o6b>᫛@`QV  <xSb6ఈIP:jgvx~N|0r c.㷹G]8XS? HU]F2\ IlIg`cp@9$)Hi{V4!@vB""1pDݲ1JUQPav],ðn7G{nuQ!S$6v,M{x T/edR ֨PE$%a^2I{MjQ ! A@HC2,)t7l"&u8WulǮFU*Y ɜ,} ܒD4uR 'F5&FiқSΐ`-rpT Pi+2fbui 6>䓝@ Ms[Ԗ ˼NJT]z%'{߁D xA/IߓbIN]Y"ABEvzo )\6e B4vE2Du\DڥB ~u%e7b[X1 ;P͡Z֥QHʈ'KX)k=:>x1\5Y;h ܞ /HAnލmUsA*-)3tG&.LT4 gqΤ&^ QR)NKXyFl(|:Az@ ɐ0M:=%čmkԀ5:{2 |, pqHG<؋ʠ Ҏ G|e't7` VHU%ڴD{Ҳꎷ(Ư :_2-,FdcբwaEkYm!%Yı<|!ݖANRˑr$B߭vܴIG)@HZqӶ4˒"yDNzgfU@ۅ4AAPTM091D,!x{{o[رlщw(FǔeA_]Y/Xqp!N&G/)]ǬُV\PdaKep׷s70>W_ټReOV4 qUuvL1_oWpwY( N\Q\?,]?Qs{ֳihL8;XAH㌉U##(BOZ*,qdgi:]S v> wWe;o ήܞS!FP=\s&$ _gH$Et>_TYhq?|_.ƾ; f,:? ov( '4ˏcZL/_)O!z}?s>{8oV\跞6"`+ ޅ&$6]Y ׶50x5l $#S'aS}K5+J99p>< ;U8ўhT\G91t7%\_E m9qVҾvX+.P)o-~Ww"~jRӂq.GPpDlHbTr\=uM Ѳ,f*(_H:C){A\= // +8OoځB?Ö3? ~5Žz'aٴ2`~l~;#*d` K3"@bOaՠ,z|/g>{y,ccR _v˅LGCMMғ'W vz7>5x;v@gyM~EDž>v ,v³7VHNl\ПĶKI3,W;S2 `C=AݔCxΙ6"N`;F|$4}}&,3N*QűmOfy|O`7 &+ZzA;8? 0kDqjBf/=*~t5W:p6R{i@jGIS_9&_`MV;֋g -Ϳ?1@$І?U@PsT<d`zeO\n2Ji <'{W]c?) ҡτ4z % L9d9!{Qx42b>~R0Xֽ65fๆ0f 8ㅹ'\nyF:b|.{O5n"16?-SOaT.~+ }No\|-]襣1~4~c/ַ?mn*ƹ@J%$CT0?o2<"0AdA!=G·Mwg8s?k<zO UA99*"HH@"Q:ТdkWMУsm(H6D)UwwPđs͑Z@Q?r?j'yU v=vOrgmm?Eޝϭ~T1@`˜tXفFK^6FCer|B[r 7؇~4NIOU ;NABi ?V2oqxxr'A[}17?< ~5q^nZtBV x=y%;0oW/  CAC>1?)gV]2ʕT*(am UV""kj~XKb2` N ,E< 132^,z0ȯk|ݝkREQJw?Iʋ v b{2ݮ׷O,!%ɫnZʢјn`)u101!HkLfMSo4`ϗqch9,gTT.>V&ulaL赼[\] p :Dߘ(DbV so!uY5 J,&8vs4M?[s&x9z 7snY&?鲩Ή30{yǁ;6yx n&û_8R*NZ1M{!>Iw8kSLSha%`iPEV%VTC CXT 35vaָ ((Q@UDr T( )M KmKEILL "N JO "i`-Riw &M!PK@j7jZM! MxA% AeCPTDu U Į2n5]C**ԪƤuIF)@Qb]Ͳ ,]M w,02!"dpd*,CVNIj) A>k'r}Goxw?r(Af=4 [ӄ3e5tut@R23 `kgy18y7mA ϣsbػ|/c v4=#彚D̂50*cS ┥dXXM/XWҟ?o߾Ĥ= -G| Ӟyr̎Ǟ:6^Y٘QHХ"!MNFʌ H@ J MH?ԄOJk26LJ@M\&J$@Uк`d*% +PðT) QD|M>AD7@<ڕ ߂`~ع"c0Ry JcIsa䔙Z@q ~8Z?@鞚"QBH+z_@/,ުZ@hc/7g9< >g^{==`">ni]GgM@OB>nrA\Ctx}Ϛ3x6>?[=voYe%gɂPcE^kV 7(Rβ wtoL9+˔o !G ^k2,2yIIR39 Pb? SCdJl^@hr[)fCpd3%K֜~DRL.4t ?ZnaíZp#+ԻBQru @ܥf`Ђ_"<Vh+nkzP5Ev`3}: PtOịd<Q CNxuLS9\1ݵ?BuΟ2Կ}Ϥ)$ɼl%[rr9&^6fr x ."'8Rmgّrه`΄ËKz2ZbmnU!ҩ^ QY̹Hx9Ge3.Fi4XkX c{7s[-6Fo2/X\>*ԨԠy@BʻM$v.r4C4zVK'Hqu6tdϦ ۽7:P]j 9ޖSWzojbLQ 4 PUQI+U***di@-ce0DIpxԌH23A(0m  ~?ӈ|CG-K3d=l|D X{ڑdmu/\[5~|Wr7`z3MZ{lVS  b*H l(}hC1zc?A"L#G !LiM.Q&C [* Mn,R~Wa->gÕJ{shX@ٌF@/J.wJ?b=(j JE< wb@HwA pX|Ĺ{8u<͗hP# v;X;?B'"(,'醈@ XLԖ x{iK1yM {eXˆբ[X+^Y|F"!nAIBJ@# ӌPV642q»?f4KB0{L !vԻSwl8_oWkyLX?mk/IsPw^lHTlg{Pą\<ѣrc7W=@(H(, (*)UP %ɨoGtvۃ}gM^>pܺR) Bj>׿ۉN>{N+ g,Ĭ ${ 1(dbcKQŅW`=ow"oqK.Gw?oݛk{aVBXmf%]{`P8CiϜkBpWPQS(k/D,舀 䧬[dmlNB|N)fӬբ^ᙁ wi.@gP< ([cmo')E<U!` #%h.AP Lᑻm'#Վy0F 069L_f{f2XG{ϳzS]TcOWUӧqCGaXk.TFDU\ͳ3 Ħ:VāBF7ϴO篗6rA V!®eߧa(/ eC8{Z$7PTnL.}i0짓W~-]vaܩ mo~F@R?CO@kT\޶x !M4iCZ$3W m)U#^I~9kڔ.tu=7fܤQ]+(Fd=oL hpnnEɠП7&@iŠ! g>D JԩیPFЫJDLVPz5b'r,iţjw7+s̑׊eau=eW-VAF*]KG㠙+r6#w4p!vrnC**Pn6 VI"p7$g[̏߷UvB1@v6#ĭfO%b)$ l1_ù*:2t_%! ]Tt?SWCػ\'mvaSWkzY.<<\4ͩc U^׽N>;1#tm 4~ryȳI]W黓9@\ux}`JD.(:蔁?&YDx{:>LWz E!Ы %\:4blIŻ@$3P)tHxl }$P>Km\\BՁQde^{&Mi2iͷeڻ)mSXm@Ȭ>`Y1NH],$|1[ASBV|4#32E:,I4(\!tT*U KQ$+'}8(U؁TU! 9nbҎَ= Gh^ͷy!E]G݅[^^"P9 zk|Kg EP0cyuL;ptZ}MLi{K^>BaSiӭ歍U=-==K0X.o-W1RD W KhJ eTճt>PLɕ[][a:f3^ߪgVb"D B H(eH҅UpΛrFL w]/)|*oEDuZu{w/ɓ9P ~n@8 fdctaol)yW"AYc%F "V[kJ%-E̞fdVceBTRd kCd*}0U8zL(M?AE7BPҊMڑG$OǷCtE§@/i(.U&iW|jĨiWR)@h${'J^?HϕWR? ROK=QN`}PPs?Y@˔`P_Wі,scWCoW}[ut)Ɍ~.3ov2sx^ʏE݋⦺/qGב} |m5Ad$hP  0?K߹~b*C\&g._ƎJ "˝.ɐ.8v9c:St*qBBr\y`90kIۗ0 s}wߏ}CD Vsoumo-'_G(v B$cH^BDwO6yY: qeD=҃ga2Ƞ2@ cS,CkR ݙ+yrwN%zQۧʽOyC}3J!*ARV|V` E7  aU#i"Ek%4Ef PEQ0{JKJ$ML㩟r{3@[6o\ N/崉~x%4#@2D=!+;8Iಸjd FD e.@.D` RkWgb3(#z lh$,O])5d%DQYeaeTDq3)Y0p>osϕOi'qУȷ~ OEm'v̔SHd ?|صJvsFaMw:*mv (xĪpA?VhQ՗A)A_ @@)( J(H &[NQ%粊 7vP 2w- ^~Pv?Wgo|)̓7o1DDEiURekqߧ'$+mTrf 6_2.)'H:l#& x 7/ Gm/'[37ujC!s~+:W|X-mmY8W@L`ca᠈hq7Op`y076,d~Ӈp>CIetZ` .:n@%˒!Ƶ(?Yg7rŘ\L0 Zuqv*t_7@Ys/eի΀Ԃ"WqȽH9H(8B{ n\퍓ڃsizR"E!$Am`<&aljpAsGQ-X[4UĄDó7@ M)n/'ƅ@h$J$K"8,Z&b+~ST#L>{b3~F7XpXs;,L'nlQPe+j8O&<$$>y $Yw;w'}lܸ'_>}rDYqzZ/.7by_g;7%T]KU?&/hˢz"HCWQWoZpwxp :c>ܻl J "i,3ƍm/y0e{7U T{pQCj@7H)go>w Ю!3,Jm;g ~?wGɴ*]dT%FAU^asTtflbYx|߂\A4yKc}v/zm\_O_97'Z^_n:?~~'lw碭ߝܠBF,X5j_`G07GJ 6̇8"3%H2530+ELf\ F<]&ro/7At7} ~JM  GS 9Q9T(bqF5 8*3 }Owp=I=m9e:t5_N,JcYvo}Rbo ń긁;.Tdf3l*ȜvEEre]L@2Q^HP zU~ ̇pxpfiAHߥf$o.&{. /c·#iA+͠ _s0\OkEROb`DJKfAP"}>I@,*0")½wl|]Ch*I%(Ox4v?{̿gSn_pwW`miȈv/~2B! c_>Z2~|8%JjΏVK)YaE|[1w3Έ=Q5Z%DRmT%/GZn8f~#Km D?(&Ђ!?G>TxB7*.@CrD~~"w`/x6pUDH:1f sx(ZTE/Ͽr\f6bWjgGLV~/хx@&~ikvpM" 'b=7Cv!@fI@t+)T˒]1sAgyu DHP-*]5PH^`ejDD83~ֳ?ye0xO[Vd>VT,`s|G}g?~/n&ݏQ李\LPx mʟiz8?֘~`e^iip(RaD>n%*w*m!]8ը5ҔR#C>P񯣑OܸO311n:`?ldu\ A{Y|57iN/a>Eܯzlh#谍= E3k@[3(#_z1>.q[ϩf&}v17'o\p [8ǭ5@ 0oUqk5>lPEX]Gvw6ю=حL #H=aS)?wf?Q Ԩy !?!22v%P ]$$LQT$f7IU2M8@zsFVxmS;_3 X%|4 %xFY2ʀ)gQhN~Kj." gûw~5CV9w;kwwNA)"4a[EP%Y8q@s&I`3 >UH=2!8D 2/=^g ɔ>lw;ݱ#ꝹzI2 En^D=~Y:!.{-C?]͇M¶#)̘ΎB0yVev8 eR!/Aݦ]+/ϩLɺQg=_W)r!c.m'erQX@ A?D0}Xw2WW'5C1#',Ml xSUوfx,אLy~f=7?M!:*J`@!W-/;QJPC_*.`>dh 7j7o׹[^Waw~IUbژ"@d)i"R~wȆ"A ,HővDF7h O%\<U@L©,Lϔ~T 7zջn cz"  ܦU"K q@ n7}O= g7sX6ZNC `DiED;DYPFuY(T|s<~|0O$Oi|?]r_<! N@~| zZR>6h/ D{/j" K=6^g=GL '$z-pz:z;H~3"Ab2~ Qq_PiɜV<87˞>ފP<w,<'$a o/鲿_?шqbg 4,q>pUtȜ5xh$ U§}BV-@_݅. ШB+}gೆ;29){k!EC!A}`D~$J^@ A 0FDTrT>$@ T `G vzP@&J!'q qv{Co?{23""g{2*[&όR_ !1Il& Bd`- R>o/]#<R>d fpEA7bQ'r4FD@}{~Yt0!|Z2? Z~}ݼT֑^@B+aDCki~$|#pw@J}(|I]͎r^ߡF[ǝPa5a]UyиY c>'L͆%9׵BWʴ'F471D5 p 'ڎ_[2BAOpe=ğ\Fݘb(7Ry63JP{z̖|H2D G~J|f(ZRi % 4' ۻY Mh1>D' 8.\QWۡΡU2١tze=X][[z+qˑ Kfv3h:4AZ[BoqFC:d H2(C}>iy~C^v-C5+ y|PAR@1T!MRZIǩ ?]̋g-5Y4"P@q`{6}>_UHFդ&Z" U,qsA5iD[#(9]Gi+]ȧRBdʒߗ ??Fxs|cvcF?4{r~Gkn,~)\BIBLҡPKlR]/hD>1+c՞fg~i8#s3$WxGB!h7?#LڎLp 2C/"MzQ9g5|AA?59<` dHt)Fv=ݛb)`}xC(?'/m2v뭰H㱩H_d<-ôߋZ4[ TJ`MoG]%fӗ(dbKQu/4k (F ;~H?QXˣL+}czͥ%KIGooJシ@ E<>+t" ?Dg\#Ux"u:q]R c|*ݦ^?#{y#x 2.v!cSK7qhS!$f,Ɉ~R6@)rhEOU ̡2B AB4G OCȗO9!(GYJ="! `@?L6VLٞo4$,!P CM{?HgmIEM2K 12P1`_E1LD{-0y80MEL$EEMMETDTLE$@SIDQ1MTRQ!)Q%5RQ7:7 :PL hcq |Oi CDkݻ#UK֫LQFfBYzA?ch:OӼHR%I,%RCHERHPT55D,PA4PDD3,DEI@C E BU 4TT,D5%34HDIEPP1?6 @#yafJ"Id%B&j "b$)R!!7yP4Z&Pb`cSHI4DBJ|?Ŭ"R ,BǻWh5?~o \{9DAbLHM4۩Z(X{* UN0Ъ*?(WX (""߉n̒"aO D *( B"!ɂ@)@$RJ%% ZDb)J Tj"V&HfH)DRI( &*"h"(iH(h*@"(B$) B&eHH (*)g0 a $h1/ptU%=_3h@63f‰*]i?n>P.^w_[~WyGoƫ #S MN|L*KHI*C(RE$1BF?ITSJQEe'*Z bbhiHhRY (bhihZ(?>bJ?PR|ޑ6P (U"hCkڙɬDHHZH֔LHOjfaXhu]WjNz[J^Ӳcz*d[ZH-HbP ! b~:B $i"h@bbfJ*(  "*bj(b I JbdJ&J$"h%"("d!jj&(F) E H*PZh bT _CoD=Pr((BZ/,?≠5``"I)3*$(J+ё1A0&"b)fb"&")"$ ((Z &(&i$nN (#B 9bFfBh&N,Ŧ#H!Ĕ]ǣJIj*ib%9}gS"K9iDE x}>zEQHϔZI6#ck+R{nƻw.wnX(i"ف2EtɪK r,EG7~E@X|-E'KK(ַksW0FL,0x@6s`0+"U㣟,6u3g_VˋP? ETmGp*rxa;ߺቓ$)JSH+$)H14CJ+AK*! 2B)R1*4( R !AT0C(P4 U!Bw&&Udx5aHf`R40D(YbB-RU4I,AD4%%PC"P)JT-3T(QMBP  P21D0ILRB-!$4I ĈB$ ,BH@D@ 0TĴ-TB%B *JK Q$T44T1T%d%C$DH` ("$ CCB! Rh©WﵿlrjtRnZPuH BAJd/cO"E^Yޥ_Fz0cU[?U)#7EX5-_6ʭy6lK$ŀDd ]Ty3m?p֟<ﱊ)< 'x4P1bB{3nٴ=7͂`lt2,DxT}OV|j;!f*o& ΊVu+KNR`BR Ӄ;8h^'X[sz[5skDHpxZL AXT:TP5ͨ8&DxVk{ }ƞ/Ӕ`oƛ6nnf!ڴO3"!'c.H0 @Imt RUVL]'2 H3WC;+ImDȰ4NOح(^}U C9 0 %AqB%*s+wK$S:m :'>;ҩ>OCfߗ P*S(DOh^5X܀$cA $}J/ASCa*Ex6x $Q@k=b>2陸D⃶U`3bAdb| yqW颊{W'حw4#-/} %xK^]#X C",GowzMv7҉%}3,@N7ܦ27a 5WM}~u Qnhu! LB[z*)CZء",IغJvi:O.wWR "1A ,4-YO_)U~ =g0g}4[mkWi'Q| *@Lc+ ^וW*?/b~޶F-X4Is* Z@[uf*2-bHL~߽37bJMdFd sC$ ҟRَ+ ò޳zYK?{S(nRZ(:d# `vHI4IoW1+`MKY1<2yR8̮3I L8P!K|͸Cd46zKR{KV}q@h: *JMЂM ='o$2I'l$&f)<o*l5F9=c0=2X-^ //~쟟򭳫&rE w H;R2X]=o1t8jne)źØ#`k'PT!(߉Xi*@I`ßfqެ%LVWhG>ϪKW#W*AP{=Ȣxx6g8A){ AyY/*(8௜0ɈQKG_. IEX,JVJ R"J"_NQԔT\О[h9 OXxy'-eBdd"@Xȁ,̉IL.>}WR)b\>tP<3 oST5)`̡{J0(=}h$zw hR]Y5-| D8:el>Oc!XNFh -+uѶX=Wx{U*W$oUEv P . 9#_mum(x#td1u宍oNӆN+F߷G\LAϫVyMûoͧw}rK48kUE eR-"K-;sD]KB4ig~]@y Jd# .U3Uu8׭9sKa%3E}xCm!o2K F>, ZuMc7f7ӯCtaR E1])@dHۦ^]!+  TE3QSLU1=]ݶ>J\'wvi sRbHid>C5dk>_۠69gڊ+b3y $2/zx(d9rW?L\t$CJ9Pb8QQٽvtXgH^"4]S6W5 = vzLDu?cM{J>QP3} k<.qjHWGǪ9\N!4<1O?c뎷`Тjv2 рuZ@ D )j0_{tYAmj.RATlfŢaZsܖ8TFc=@OJ~~kTk54PҪTά1 g(t1vEV &I i\H IY$E: 6@B0ëld_EΘZױ .弸sb'yت9~~?&A#P&9c|Dz|fўP,$0|C+x35PҡƱ,**ӗ~M:+\EOA a$a Bl"`#9C)u5T,3ᒋn5y6DR*xc֢1pSڰ8: ixLkdϚ #$%;0ps(ATJIs@{-vy۱MgZ tp*[+ T/0[{XH˥ÌU(bɱFSkR^\hFrSW3@[]9m Ao!:~)QH̱ eR2)l  +LH9p IՋht't(YѡV$@~w8[85Zmx{vzt h-,@=riӒfG_Vjd9![mWvΡP<L4Z0@=LtBȄl toM4؍,(kGAC澺Xvj]8vF{VsL(@Aҧ*La5Tgޡ!7X@@Bp!Aj ފR( d``Efoº<\ @bsIΗFYob`@ҦSפ"ʒIt9 pOMa@ %fI{*1u;9k!!(]:ZwKS iUtU_oȹauED6YR]2ݚ$coK?~ Y: /6ܥ,J)YkV!ʰ3:f˳q 7:Q}A8}~kVzF;'OVEϕ=Wև߉Dؕ%Rc¥'x(2BnJD-FZYyo;;գ\ {Fu9{oj?D E tvX6GK3s'My9Z qǴnה1** |UV1R"&ojBܕvʇwzC}b@9ڂTU9]_,Z4PKvA_2;1 \̹7h~?9`G#[s[ :0UxPw HjpT&ԲfhdO6?qIg"ׁ 2~ۣA[ccs񵷸n;ɶZ龼¡ޱLY-c̚ahQzß{|`Yc(Bãn2E]](ԈN, o) %+<=IJ|v: (ŋvqR)BAAIKLE^YM u$7J_Bې,x_;g-aƗ5xWH /c;PPTJx'FhuaU# G(ݖ}Ftd-}b,h7D #ghRwIsks$?g/ٛJ^vDk ㎝CX<8S-+rq`9RoSȄ(xXWAw4;c,@Z竂"x9 2ޅO#BSRx&#cuNQGw<%m̄Z )?_0 c]щ!d^eM'WΒm!o Av2 a[bR7SIlҪRS4ϛN[v'Qlo''l ,y\G.P2N%smب5' Nk]%C'ٱ͝ %t=\0zDVA+{Na'o7Qa;KRB.j" eu %e ٗ^`o|;k/ ōL1 DIczX$腪A s+ZDkHn5 J%BT6JP(Qi(wƶa@nQvcs1(8S7(jtB+L+ M[`H^_.`SH Y7CM`a)Q ""&a6`\7\qg. CRo;x;s4Kc8)¸% ( Z #@=:\7 UK_XГ۷Ow2,! Y{' C3xģ<$:@m@i,.\:0f捌0ё{o ݳtΓX GˣG,Sςq^Jw2T "ըT%rpQ?yɩ@W*fD.`GHb'fFnJHdM5\}&%C]URn0a;DPɃؼ6 Os`4Qs!sfrĀ@B-%àǴ2Ɯk]EgeBhF暧BH<,\Hevj l# BxآҌ\_ĥ(Te(Nҕ]:#[?̗giK9nP@pRÍ7.D(@A |GG-ЖҪQE@Lx; w 7x7rCtYSThJ]FZ̃!PrG_]<șN3n|8qܥ6Ȫ\yCNK#gHNʵ6]qꜷ6'k/+c ˃yS&st耕`U:g[A(NC a* 1]!;Ä z -N1e$% A%/˺JF֮&܀!(9P)'{rטn@胹".lVbaJ`PL˪BE<,Hx EI[1>gƵdWYxk{XD iB jp)KEXH\aB00','SþY *Xzzv9-@`[Na&q岀#RNN嬜Mb"#r$)j`|;,4:դ~e.gN! (vҔUl R fyf /,6S{‡Մ z((QlC64EF}pJqezKWRsAƎFsgFTju⚄0lxrl5]Np;I!`>]~IuDJxev ֪5 @(QTr#%$Qnl%.2U^; u(]{B(fw&6b9> FO9Y!E؝.]B(EE0E)ƇH  '-^F`XFT+Rej1_o:M.~\A]6k{<e^LS+`6^0^>$x?Zglo߷(ӋPQIRtqVkfFOE3Ņ1҂58'5TCZW"x\a8qxUՇXI?zbX B 62 BtmԷ7|Eˑ@EI P~JM ^N<@/:S -nt.7떞BAB˜\Q bie,')J=V.4\)e_p;e+C,u_5p|U w/A-_I "o Z6GErZ*3%GwKX+ѷK,Ma%"( .0RLW]"B,0kL'd1N̎KPݝW^*9o \S3)._ MtKVlmb;YW?7{Xp^(K3ؤYW>_!&-kk𼻹b~<)"ٕ%bJ#ШEUY'J,0 M+QR\ (t$H8ʠ('* ( Wp >wMK2clLF_\*@(!\ 8g~z*;]%pEm@^FzD6׌$AHG^ZBjm.b\sh" )yS7* EbMnvgn;rH56(M)D&dZ_00&jf*" f: ό֜I6m[ z4cBX<8xdY Ѵ"$ g*?w<ʐƊnp! ,]MYY8*74s:./-Yh5] ~=Opsx򝌪b;@`"j<3߾n~wD}R5DUNrCsV)H `qz`0Af5TG5"E$&b+8VF"LmNzҋb(RDkK1A͙(%Pdžmy@òA}+OmFߠy; mD7ӆ~5&3 T =j :/L5.s.w !'(uf[m:FyIb3fP)&Y!Ɠ}A{b=ɋtǐmZ1DEHUXT倓+3QsXfB F"b%N.,TqSxbkvS&` 2u!ik,]_u9#-6LGĻbK01[v [$P<̓+# ~U<R_gk-3Bb6:Vp@. _i HL'n,_~SR٨>ϲO ЕAi1!/o*'=P#\DjM[M$Ph#Oړfچr4TEƧ9t8druZ'8)gBFA(3ŅA*p!M)5>] % "IsA`n@[ǰRwۋd@iƢfom o"v`49sYJor^U%בP/qK6 C7هCU 6]gZ T,!&, . 3y:$!˺Ϗ>= :IP aU2fZeF/ 26āg5NmͿ|`sHH$hWLKs@vQGC^tg1ޖFt1۶2$ y@'"4Ku жPΉD["FS 2 hSHweMT'=%B %n5;0pk-UBv)$eA^E\ߓ}qʴ%>:wŃ"ObG@w8K2Q7 UG\I1Y5g X-o?za|;q?RE?k炋("pa}@?cŽg ? EM8"=yZ Sur @G}=f S>v?^._y.evBMkP0J|=G} B{h AyHekzC/1,PF?gObi9$,* I_V{v- "]  vVPyCǬ4D2j59@V[S >-UӳSRZU@Xp^_MVC'x{Wcv=V x`o\7QFw`G}c,%]EԜ:7E=}To3 SXSQD<}c|'~P_ '..`=l2VU"AgU>6mk_MUK=y^@*m)QBH`HF_d6mFfr|B-yə>Bj6KZK⠊?&Kp4j`!+BɁ[daC[v-{RdL6܅Y>f使 Xe֘: j\&(eegΟ朮e r=72߂,a|}h > NwheYlmWA~2!_@ vaHa b= #HyG-1BJ9"Q}&(jiPAjJ/M3T+^vֽ>?1~o}s wW]ŧ N*Zcw[B"t /R2{L.OE~>CB0eLa3\SA !qGٔw6Z lbcku)!]GTd1k)/d }7XNɇZf/۷;[X675qky L3Xƙ$)^Uy[u4ru|A "HYU_*%*T< O9d{o4]@rKL˅=]{=F% !fj5̠Ay| Q7l0[Η| %JC| ^ "d TR{V|D% }s@IfcWB]`IحZpW kxzDs%gXx}W}5i G QM}n'Xx L:4} 8WD@mF)<ߎ)9<|| Rwp;sz4 WGjR:tP ) POq U6PzA9 +C& 5P$(23,owv&0 el H_+1턬` ̟I2풤)/ѧV!3`(?T.~>d"1~7ʼ> oMm¸v6VB@"""0f ?43 `̌V_>KdnkwDzW}-@P yMP* QS"2=EXLR.=[fza|O[?GkJ͞+K\%,-j_8GΧ?oi1̞`זFL43>rwN_Di4/h2zUu}Ǒ4 Ƿm}A(NScs,p#T6 k|zFG\N~ASt9|W3K(4,mmIiegρW27D`ؔ:="HҘa|$ʒiR\mU@ATv>VIN6CL}edGCYK +/zt/E~&UU4\el?6g׵q>gkWtI!Nb:5%MKBj5.Ԡ9 A(+qLp0NLGAoϳ)EKtcƟ׺p YOJ^%f"2& tĒY90QYmBVKhfP 4HC -9ǀ]KнF#ιZM$)$dlFto~[_Y\' ȟ} '`_O0ւ9yUYH}P**8A>C_S*ZA3_jvߎ`cGH/Ab H0ZSRJckxڟa{pZYadP}]t:@\\*&wz=Orkg^NAFBԂ0a&"@1BnlQM%5,ELIE4A1STԴUQPAQ=a`DġC LCTQPD4TIDSRPRQDAA9_k_E{EM)ʪuJF6cOj9iKlY N(|#_w<6~OxrA1aJ|}tiV\{e98w?w}W{;ɊI_ߤ*G)W3 >/rûeWAZ$;?b   H!:3|^ÈrY-YD22e`VoLa }!F *aQIH.X G245 5IR.N謁6/ lN FHzoѭRbiԭ3M6Qwh0 2VNI,$utیCq͋qδ *u@7VYuQuf$?ɝmDGw'zCi^  T>8xO-`$Y TQG {oHWbvo M-<\a}h%H )kp)nH0m0e!.lAxY;s)ȿ+a1-V7f]󢇒}(E\k$&Y<:,ҙ2G]UT۠QY\,Iosx^XcP%ɻ;J_&lN %UفN^VWB|-r23)FI񲱚[62m&ˬn MO=Z.`f)`^>&s$UջRd #d !>C%‚R"m7J,=;/©w^*:5T89VT¾VeuvwZj$Q7(=a??uTyGGv2ߩ ̍:H&" %JH=jOD`gۖ|3`@O5Ǻ_;}`eC|VR+ob8v{7^z.m+ʰ]PV )$j)b*R&HO?Aڄ.@M P,RoՅO҅_ 04P[f Ϭə|(OqDlW`,g_3>OBrq쿔mj &7j{jui|vn2s;o~׭p}Dv8nO5e~ AE tS,TAA[h3?a:ьhݠ1g` #1Oxm^ R^odyZFR$uzTenD.ӛL4<ȟ+?^>OW=h}}Nw5a{'98t/]Cg:y82~`_$3osԸVq_,5@lQۮtPo _?aZۛ\ ˧@ICDZ yzݦWmʹ y0۞w;g,"Ҩ\C@ÄǦ}5ok"/7:\xQ=ٷ=~-vܚwmktR;M~\JPxgVC$k򽹱mJP7)er^a0_c# w]3_eeDjd$T g!z Sw𙇩R"@SK RA2f mU9כST [M3-oӓ/K2qϵ: 6!꽐#`6MRX-vX2aXN/P*7I1KaoI[+/cq:' HV*E YgZq*}wԐ@MK3 0uch:L8k̶ *~>]MX}8s?&5_a EO=-4Ǽ*RzGyRh fբ`q I "ArJJZn?c%L_[E+_8p=R>E-d4/t!uKu64N mj YC]Q?_"#BUIKˑO"w$醜K1Z4\ptC_ȋ)XBOI@q5xB**RCZ AM$<iYQRt)e!VQ2>5jwbڷ9lꀊP2K FK7i'Pg4]ee_zIGLX>uv7 " ,$L+=yҺb!$5 ͏Y^﵅ImoE EK<u`M?YS H@ c>fuWcChٰZܧIQ `$'B= eS ^GgD@nSqo-tZQ. -,. s餾eJy0"X=gH*$TD Li]6}lOX= vJ[TX|xMw-U e"/qA*/j kY"q. 2JAb׌iRy{%"U 9!͘,2[7a[Uu .taEB)Zb&0U| ]kNԨEn8fo%P .eDDtĉc?U9$KIRF݌R]0Ӱ1=4]R,cPlR7 }@| 'tY Z8= _DC{kh؊#A^``曘ZP'i<7rzPBxl½i *H*( b( iTxxF֬Dljm_! x8 >\@-țVLdnWGK($ [" >RF1<ŭEN^}-0U̱W0Fzg |4G*{,^[ڕOHKcVAJȆm`oۯoc`{eBGv}aÙnj ;pT.C HZ`Y; 򙻪鹻Ns9pΦZJ5 %zPz\n Цs1P|5uСJGQQubT{.Qv 'n[q(zQX *1СхU沽Mw6p۴^1@P{D{]] p1]ϮT\'lI\RnSp(,-bq[ϻLlӴ[SÌ8,eKp0IYW88ʦ|䭦*~,~3T£l5HSZ}b5*9Me ؃C,bm.2 uYW$I.&ROK(ݿqV{*9!5iʠPPVUZȯ`O,ez7 E&o5( SI|b#h immTQܩ[tA08.,+;`Yᕴt5X"\f뵰וd >F?{ ffe$<(QC_˹ towU;̔c 2AU6.HH loАvڕt"0&}}6E NJзsU2֛/5=ѝi@уģR"\ٹ&_M,Q,6aoa2f)WWiZa4ShQhH &7V(7 죴}o9kZ@ RZ8q-Myt.ߕV,.(O6j!oIq1xOW>ޒIjQ֛{wÂl808huNl3^-6=۔kfnjac:zd:iմzp_g FWsb&hj4GӆFw|xZ=>Ymwy1͵!Xe(#[rYRd!]P<) 4.]dx\TZ8;̎HNv4N%I.JpOC>OAZᇨ֗H-m m_:S Ae'\PB{ .m +Fڬr@M_n20J1}W*l9I:ťmk 2H\a3 /YuUY*(lt;-Л]6B6).E B)>uIW[6n^DOP%bLYm\h1Z)ШaR!M,٢ ^@ _ oJ;EU :=);l43|aDqHHsS>UdDq\F!HAv%Q1P@F{Bbk'DP $ :88a{g`)ʯ(/SlJ3>9ܘO8Ѕ KK= 6RRCByY'{yzk$\ibuV{+I6HM&c,u,Xa 0jTՀ g׭k I@iSڷXy@E$!(.Hx44Q`wT4j5q9c# TqG^* b A(H( ̲j@v;qGQԁl@Rtq<ԑ;NF9HB5(4BP 6[x\}z_yH ߇1a&KV= +[ ){UWgrt_1@D (}/<@@J (q2@ V܂ˆ 6%,n\%Q!LP")R ]Zہ .۳K#0l_ &doۗF@E/cfN$l/K<::Eτtd9  2b Γ 9ZG^\%$Xhu^ p.H|KA0uW*.&e@ 9۪ ^ҳptF&Qg(&bb޹є-spisgr*ZP'29\{罌>ަT"dtխQ]!g敵7!?} PzvyV g) Ct@'1OTt%5j%yX,*+b\Gg'Uho>_ݸ(qMijSW l-C?|%MpΪ4=|ٜT-9~ z>-Μ%9@1`P!]akEO3p$z8 Y/oD=_yBQ3P. ++ID7ZCyU_ۈB6 K;d\r1ZXB uuj2>OQj ,=K|R&tL-ɘ:-0jBk!J&;QC k^^].8 ōlkUJ䮑@F)ID(PUi} 3ϡOs|2Ymyuog]z<EjuoyٳwD50|jfqF;0M4Z)@ol AfJUw (d:iUXe{6ٓov"N福N]6uBynRRJ"TыBP*G,VYS LR=;shRi)Upv|}"e1:hd2"LeVA"M*^$s/!-<*I›OZ f¸Go:]$5{@zz+6jQ ";>--)+OD`hx?bPJgq]p5'Iz-rDBOC5i0di 8!J[dʄ"P ߈ [;o4<ЉKS@STT$36f'L #P\iPGf"Ef)QE(^\&;GJ *W1TPAC07;O-osH9 ysy^Ǔ,/iJǙfpQ8G<HJ;f5@Xc9JA/Uy۾y'{v-s[& 9eCL^*m"%a(] $@٫V]*?6]<^qGnJܚ{+wͲJ. \?qJk6x?S?IkHJH"U3s XN ݙ::AA⤬|/\viɗ*;h/%h{\\G9X}PR\9}S ,|n_>8df+ ADGqv0݂٨XMu^${LGW7j㋄6 6"ϕ2&qaR}Vd  'Çr#;^ŧYk7I6rEa%YY{8aCfws[ sS K1rr5Qs^G2 qi9wiQOK "D &.$0LS6$Y>_^lňAHSeE{ =+O0_ݽZUX0iŰ,`XH6@Vq+ YV~폟{J~Y!;!UK2ʪV id bٍkBv޷}V8/gAs2 X^w:pRi 5@hjSa T= Lt}}3ޮ%[f -S-ebX3rHOi)!1 W1DS!AQSU!5QD8jmÙDEL%UDVvTDTČhB4΍& (pnĂb&jbj@R}k|}Ψ1%} 6AUStONma?{?7֟Na UYo!U-;> ; M@K, ! dVVuvYPZl"<-sE>ouݵ{&Au17#0ZɿW糛CH$' N}`uԷŞZoF_MA;2*o'MR^:MD(/)RY$Dр.g6XB52W9ݢS3jѯq=}tNy-\dӠF^+͘t]#_ NN.2Ym?N>Cd9~I"-#+ KuUC3D(`Z8Lˬg;ty.lG}X"wHkܻl;20D930 \ȄcWwf2պ.~14mpBn3䲼͜ ut`B-b01p;- +1=ԥ+ D!bC(S󧗺V?=`+븠wOk@ݯ^*a/|h7x榥:~;  f. aMD{?G?B~x;u;l/7qd/Z,_ L& bu(2P(" 0Iš#z>o`Ji:?@7B(Fc}3ʖKvࢾ_%S@I0"( #>Ɠw?6H??C `!RxH!ɧc؞=ۥvl\ 9\Ęw24U~b6 6XBT?r~/O"?vXIKu$#F~M_?iIֹ$WeE.d\ rGUEZ8z}]=ð!޽%y[dEl&Ia-j(5<mQlY\*UH$9 D~++UEZ7[:mȥc5N  5t-\uy VpsgC:#kyiղA!ك@pdD@Igw˝Urw=ۙ击}Y7=" <8涞 {+}<]OF,@"Q4Kthm3ffB|,=8in9O|ױ:@+ķ.MB6KSDp ՙw*0TW Wh(]WPesDM_F*UQ0/)x8Li?4DpVP S`PWf+,E@C8@!K`-/&QEI GkQeHZIRA0fD>Ё &TA3'#fs[Z vuTzD0ZGm`7g"0*=s'%cfu[ ySNSC[1/ϩLGYHcYDADw 6NIkNBH@AmS2IHJ-C ,C9 z{1B᡹ }GX4q ^&*'#H{;Ÿ(uwgl !zuO/. cq N`@QK=C#LQ$a ض8h S=|˚w'i(& H$N ;R@Y&i0׵D 4YcGv6Ag˥AÆפ#`\DsN_eCI pȾFZ{x^x:k#_"vr\`DϜFp~,qBK M`_4Qc_lʷ,2 3>u`B6˒`aƽ eZ}j脚+AoՋ.7 `Ynٞʜ~ʎW9%)/-O`e-J A&<]B@˞2㓨ĦƧ~C_BQVC|?HQ/vSݩ (|n&֊qm(MZ #=O?.v'6vjߵDjÀn,z2H"xCw!{?wI՝q,8fNIY^l3YͶL!'d6`iovLP9C^o]i2I2sTʝB˟~%xgRNnL H)Q"i!9-}.Ma=悇zkf.m=SgcG ?lqPGZ~Gp hza7Q!ӦfԓK@caE: 暫kgZ0+)_rC!d絚gG(\D"5S5D2!!=i~}L)ߜ?pdqc٦ P0:3CtƒYFJfa~z'*EW6Ia c-W3bRFsW,*ۥalعAt)26\`yW趂(dLm{ hȯSeQSt3{Y1>!@^(JLaRv,Ctd R;haДD)`(f odjW9ך 6AMH(lRЦAHlh5- tDжq?>y((-Q(Xo\Y2#@꺉`*M-Oޏ_[zmg;:q,Ӈ'O{QU?3\|N_m#"eaeOR D6y^.pBoyb~EoB.>?gXlL~ ),ac&KGWB[םⳞ\16eA=F  ];rځ.΄J Ջ gƷyysu{m< lQ01*# |J*CH֙?ُ un ڭ _~!e/Cw+0wgxHuJ)QAN]!ekjp>&o6~ﷶi_~g` ZRRd 9CyHy ST }@Ye0ʕ- j s>;yu-;%$DgHN xw<< ₟PЅf!kWAQj, K#ExD:*:;ddڲ B9 {ﶇWGPsobVƍéQ7<[٘M02 A%j")*B*+d,AmBD.9,ڋb)I&%jp#B-# `6-V2:̡D\eVW F Z4-BXZ~J ˳rʊkJ*%VmcZ5eW!-$b[Z$d+fHIHgb*lcّ#HEql!$qp5* H,ԨFbI2D57dR,![-bXD$"H1j9$q!K bV1[* D܊VqI2 2ۍlU""`Klal1,su8G"A" fىi26D bcj+Z,ժBF*Yn[rA"dGiZ`n+ɐ#2ˆ5aR"L!+[l9 Ʉr0$\$m!RYn.HE+Q)bR%*i%N\7v))%bl)T E)-D\fp8cF{&QӸJnHp1u"9)"Ɍ³.re2 Z UD-FVJ"1cQ"AUeih˃b(E"̦Vb(*Av78X* lPF +Xr&TZSdvF+c.%eQE(ʸ,%$U!&0v䥸# K Xc,XZcm%mb84K*̗M应\L-Y#[r–̨2!q(D+s,2BL"T&A*e# 9caK+IeB0FjFQ5cqa$!"T\d\V u MA\m°\Eu裊 &hkj8)X"E" mסwo'inC/_kcEtK+M{:;0{٭6r0nτTZiA>ux7|¾@9y="ŗ8~T|+بwg-A^7)tA{Ov?IK g%d0")rDgW kn?nN\ކ{}eK#uw-o4"<\g02U$v62kRR>\稗\t߼7SpïR^V*y҄(/sG}\CZ<λh)fP7lA3JH5UX^v[ ^EH?khJ(W_=P 4|IWC,MBF6ZmR?]Cs Ţe_Itw:|*Q;T`C0:'*d[Z@JC&@cu\8:=SAId 5mYF"Zb ݻN?RHH80b Qur0)|߫o+tӽa/ɖ`^=HE A V܉e *Q-PFBC ;EUrx&FXvv]y 2z?h8}'6aI71E`a gN]ة}PRD¤߇oZn_X)UKh_(oO|}{sQBy ]9eǙ-ġgAHD/lΛ@k6ŭlA#!(Tj9n9{p2"bU0fYG o '?J X>?r_/(e<?X [ipyhĭ%4$ԫ2Y 776ܕF2s w>\{yMwc'Ғ;on^rEB`CM0YGǍτTĂC%_ `R {Dx ྘ IHїU_7oPVzM* rfy!@$\$BS1(uW2D/; ⻄gn[ ?n_aߥsYI{`Chw,CRiP U<AwqnC^Ҏ >_G7+P:r5NuA?\16ӿ[X';CX(ibN퐇 _qW|\CTO> Xj]KiD<4](5(\}ݒ%]dx'fCGh/]gw )v2 a2h<˿fNdKLމn"5̙qDd2vΧ&`ɈT:̎|КS$ Q(ѝ_VIs"t wߙ \cH彊T+e (AEgYܹ/?jATϠ'9f;`„&߰Mf,t0w\5´rÜէJWӽ}Gz;M儵Yey=}nZSԫ]zau}{NnpHlTEAh~?#4ut|cب!:YwаFTіu0YQ^)K 1✂}S&<7ۊmL~KzZT.e2DBUc.ϴ|ܑ{Y $k l" )9~`8` syWW0zIg6H`=f۷^ldF Tf K)ok:i fy2?oZvA27A$23G5u 8fYB5Q]E3!b~v5mFVaUdmuzЕPdž4uK;z5NLIHE~-l4"d>Eh 7yԩ # h;di]Q:{8U/r !pe|w:-u"hI9ɧb4jٟ#nnU-{;\~F(G|SMe<0{c4"0 <&?bJav7/ŭU~Rӈ7壟Bcqs_?o(|f39`km!'gkX JP#D%PQIHjUV(l(3tI4M+f)CUEJ(VB)ATU2@IfMU%+ATEdߚӌ DDD!1D@P4]=kTITQűgr@N:čȈE"֊X,lm2"*jb)*"&I$z4+`p&IZyEAސ'9ё! 0B1ljbsCC QTMqх  %dRlԍîpl0kqNB7%CuA7M,ud hf]_>U"~oDɕȓ 7mՅ5Bz=,A X1ݛ𸕩m5~]$ ʊjdf"+:=5'H/Oi4d8AEuTílEuk ڑeaɻ6EݑQAݸۻ.*iI\j b Wf#-JrvP&L9`s N td[hUV,ɤ7dA#ݛ"$10ǨjL ADCEQT&AHRSH& G pdH#Aȫ10 XoaBbJ16#MQ0)1-1E13S43D[! 2J(6ڐ݄! F fsLV}G7n^E6l]M&|<%AHDX<ɱ^I}N(4bu 9qvOMqћFVةM.)mBڱEV $/߱ W8*TF!,0S{ZVwYD| `Cx%EiIJHhi^Mpѫ((%vKTQae-FMڬ`gܕ1*iadS^U#'$8NY#Lsәik"4R`lM,pBG,8C?a+q7,2"f)$"u5-kxG;#%~̇׌c ȥ2VrBH(i22vTLE6b4RDTȐґNӔAT@sIݼizRFz8(iY *=a DHrEeД-'<{(5 P,(a2\ [L0aIt+4k5:D$D,n [2Q"ͮd:Zoњ.K93C]ĩL%ɁT+@ iQ`JfmCTdS66)\2LRT&ȪFt Ŋ "$Qd zoz< ɵ>S=8$7K-d*Fv!>xsGaSБ 48kvQ?WcIH/X;BgަZ;͘3lWvYI,z.Ԑ VI}^*|'<2Wǽ\Y#ia9vy 馷臗]W3ֹv/QY`b$ H;D>aVs[Vph${rq‚VEb:Vx heHPD 24bmH$Mj;uscR7B jrxޫTy$_?y^n&sO߿Om!"Lf颫=ܿbdl?zw|h:q|S9.ҬԗB `W{hY&(Y(B/mloT6,ə ,`ƒ ~?/_;膔= &ǹd,,So=hAg* %x ~+bQKmjr~K)`bE dJ. UBEupQ[w`?}~i^ ;6bB 詭Zo7O/&uGdS(o 9-Ǻq\wM;G>͒b RE8DJ{袿Ѻ0墉8R?,Pubޖ^W2N"خ&L:zi@3IuŪX a}wfכae%;O@'ýwpM|KI7M!$ p_!8TЌG U5"/cGU%0e)NyegQŠiytfX"!}y9@DEj@΄%!,sR֋MMc!Ro ?UCHt#@w9Q`T̮aZ1rQjp'!l/ϻ5~soǛBpf%6mPĬZP1+8Z,D$Ϣ qVz{+j Al2lDc U3X0aijO[IXb_g_uO'jiN_O\">YG~[|vɻcWRV"~:Ǘ~>dÈ$BvdTy\Ƀ|Ծbód} w['*j=U~X:lwy:fwgOϮ T(uфD$=K%"=\nu4"rMw\6R (\XgNRsjO۰.s|%V q?.S0LbҴk8L<9Q4#{?ezfwzJrN~_n%GFa4A/%|$ x'kR{}귔K.[O#(! E2 -o`dϭEW>k_tSAU0Q(D㹇hW jefۣ8QG gO)(_@+_ V1g-QGӡTPC$3**P^/|;ZNz4y"vD>ĚKQMobC}lK)!q,zOjr[F<~#}?Kf¦M[8 v./cyieiZ dȰb{h^}ejFNˇ#}b[у|fCOCPղU?% C`j3 3c(Wansqo'qJ/_|E`Hbգ_/f=.}_â0oK)G)U"!AH(\'-L3<ﱓTs]4BZsҎͭ7y/J8(@ `' ts"ւQ8hQ04*fF ـɴA1J?q%t׿:;>^ 9" HBfy'x*r2df@ *">GzC&!XepW]1K@'!>Q'H)Gg?֓ev!W+zPU*i}~2s|q4T8ѴIGڼv/NK9B![NQ^N9|g?{̤=>&GOow>l϶GtٸC(?ij#7KC뜫!ΪYmY>Yӕ4mժ#Ώ|a1D\$NSN޼u\BY_t~)55b2*`\gEL]QԳ8m+5=;(l&Ɯ-%vA ;Pu=hU~S>.*5M;9o\lN+G#Wj㇨GVά+OQg`B}L"QK£tr (U Ӳ닗ޅIB$ey-Epqf"k[,m0L,g(J7)' Pd`K@f?-8(_ iZNL"~0Ncy.W6|ݓ@@|p}*,.d5,F'"di Cd_(u/T*'{e|#*Q`+rD^Zg[)r,RCԼiy[Bl-w .JL%'P% %211 5ضx8>O6/|mi~pYɱMl \E⢰rIJ9/[`L *sf N[YQArk"J.RZ"S9@}DA@?*֝.`zb8[;9"Ї˪8U Q,BAVx^7s[`}o_n! ^y֠0 z L$S(*d* u ^pKŘn8_ )Oa՛b@!@*gy s' s,;szW'bdDArf]kE1t'rV?yNt 3AQK _3OZ;YX( {=XA>Hw"S$}tcPؔ/rB%i~x!?#XJ!hW =FlF^ LBӇp{dgpېG!m%vf=PUQU̽x8Χq=r;`{aO+y:Ӝ0R5! \}W# /Td5aBSIXl ] G04aBYBᣓ1ov(kإ2&̀v.חXζP62 @]hۈjcxI7JX9  o*JB(NYP׀%TղwO¶=nzRyG4F=ޟ>ahj01=1h6HEOYT!pI ꒂº2rD$!Me] ms-Y?O_C{AvB~A W8;.eiy_WCL^$̀Ubւhz;=MLH?RN -L={D-l0JGʼnR@>.+rN>*}V~J0V]&3daCC͡ &by|e\PZZ@ BIaa`v)EuT3UnK` $@s*~^=2ң:C]n0 4qxex$X1mQ@mX;fՔ+GW(S٭߀q{M1rg3,F2R %ў_FhFM'2! ]\2Ђ;A,.!J]C5 qdZ)b=9v ebH$#ީf{PkO}l;ZƱFhte`!ƺ柑*:]Uy˝ڛ#+]t0ĭuA<`k}N10U6Wf|!H_ qG5E5wB[wpд(uIxMAs]%Y.ɗ@);㲵ǥcJJ~ ]]+@B+h6̦UUA!$vL[+NWS iz0(y27z˲5?j/ wg} >` dH yy,YJ=*F>g|N=^|?VtLWgo'\ x`ݡP$@ #|e{Ɓ *X9~/SA׋ja(w~=F˦s!x{c`28bR]Wf>7$qjA.ppf xE3פn1zZWv/AF I)Ubl2m5f :Z =tL3?T`ʦbރr]A'h{w0wn^%TP#ܓOZy Vؽ !e8iʨvc-]g7θ^;SNٳ> J$ 8v7%Mga]^*<6%pyGnc6{r-^Hyal/GNSdƗY) 4J$ $K"a)3$ J(IIs*U3R)oC>46,9ݲlD鳶+[#~MZ)|ՏJz[\&PܲU5_/u5W]]F `AzV[^(Xcmд54Z.WB!GRbQIPPdYK3Uₑ9&Êuze!}UJ mjA =$#Ġq K'je;ri` {Zrh f'xx6#) As/e ԒBMqePYC@ȳcJlPA0%7=T4 U8Y;Z9 =?ɟy1A'{F !n:l\X{?16g(%ùDuaB TwUC̃ReaB^=m"в?^K$c|M6L76#O3so.ڄmMa >`hKVQ4e6pJK*R$2w~y"f?vOJ8@onD S nޜ3F$ztdޑ6 lO4M*Oײ;0زΩ*;@d6M@дAv \B]3tp1 BlbAm8̔P @F(BNa ;3fݚ>[x;^>sU`'d;sR6kժ̱VJ8`k>yȿ%O}pK\=8ٯub賷Q/{,lTG0=h ̣~`~ ;1x(D8>CC|۫aݝ >;Ƣ$Ym֧eϴŐP[os{-!Ǧ̥_{\bI#$@E*}M`]0ZPS 32-@>]-[<Sn6{ "n u^9?&bO<2ùhNTlL5eih6GRt-O2k Ok1}Z+}w>B* HV 3/&}}ر!XYUV5r:`NRlDF,"%bT/5>Y &tyF K>HH_EF("&& >!h!CnUI ]=v\9  'צ֫}|8ӉySwL$ QHPP b[MU>ㄧIDVUAQ $?D x=-a&k *‰4-!>"0*ڄ0ʨVd1]s + f$~5T UuBIYM ޑI YYW5w̐lI"5SX:xF`(f*P%MTtr.a}hx~{ڤ)H)eԘQʦVG„_5RmPʸ0ͦ5Xoyvd.vsbzs(~S5 mv>*D nf$tFtsCW>olΝ(aqJn*~;" Gh5Z"R~l{*ʇk &6yP~_YF^iʒTBDWUȤAm!Nh,6QbSZ(4b-8<ڛ;Tr1{|2hh0+(0N޺T"dhWda|=uw=+a=9kxᑘ%*L(Ph@: d@q5NР`RGcJ% &/ Bԝ= dh^>-pݢ&I|[ntHlde9 ۺVŠ ,,ckOuO۳:Kz7♩f ƴ4@1ģKffx6{O(v:3[Rfiaظ (#E\t=Kq_kxՁi9qmSrΝ/6[ɎNBbks0'k{CRT=I+?Mݓ+/(*isf7n/zʒ-]6F Y4?X9E`_ov׼G^ w S~VSЃoNOUy?U; 8a PfbUIF1՟Yq-2HP"gDZ|h-7C~Ǣܔ =Bry6ոoፕ~IPKhZmOT&/@SĂ$|QYg&_-Bb h=C0Per*q,0#~ǞPV֜~7/֗N4ꥍgKlVM*owmma۝T0SsS)hQb682IӜ\}{Sd&$EA @R YnزyRnZy/n\ oV13xqqTCS^;^)0HӔtG ;Y*b༶=yۺ3qaSvp@Y ս~|>, ZcMQ BSP*Ft1A -' ÕQ?!U.(ANac HM x((( G3YTԼDp#ZXXҕ )!l ٮYZk`x? =ܡGImmm2K#7=eez+rF_ k9૯qy"BA) ) (CxBq\;{?xm a&`BYB6`Qkӕ\EtV6gk!OmֆlB]W`P |¡foT8e|U/@e8[e80f a,sBZрNa #Tz /ɸjizKsFsmZ%aa~4G]کGn]jPpGt@Z/w+}gbx{GU̯C4xػqPK{,ﬔ]rKAcJ |U`/>CITBU(`AK}.)OŅ„ĶdĦo6ݍ% eg Sw GG1`_>1ezNוj=/k)[`)3,h8o&*첊aYv*`%  mth6 b+f~n6PWk7DzV`c&U=<(ܺxz[|m͌`nZ]gECL2+OM:&`,&(5j"yEaecvZY04-U^b.\V}kY}Oǹp%e /*&hѩ2yM@6qJP#.h&UX¯NuT,c\٫'lꫭ&_{ ј+W(ę l.=ɐCЃ(L:pWXK>^)L5<-ZDE0z,CL @{d}9"ٝ_c{2ifDEZӼ޵Ϥ: 3mdah $ 7cg-V`J!zg @j<4Ց&/4N~[p\^4s~1Tr\yZō928LcܝwΨ(HOk)(5ɐLBl4sXLVHVEV{Y'n8ZΙ*i$d28in($ I-&L\w5YJT/?Xq*H φ{rX s Z'%!&$:(J@Z 1&/?7]=5Vz= mӣcq ( f?Upqz78$ Q,hܔpbr疫eѴ +HLw'1\o[ƲNqX:n@?ȡ& G-5R@9 F+&& ¥bUpЉ V3(rKS,ؼ@grIIqؔqErϓ{|ﭥГ @mPIdB8F&ox}s6L/2fD6t5R.ZVD#3D<s\0\љ/ܳPG+s XRلpT:1Y ,RAe;"K˞ן/&gxJFswX7 UTزZ6EY1'nܛ7&沇z>^9>A> )N 0gFqX' *8sd5݇q3~yۧ96QT`b(6V-@{ Bک@!Rfp()$pLˑ60PE&VI*(ѐŒIFDA 0qB**(eJ )d]$ ˫ !p ( &#a& mR(e""YIfc (b1Zj f`* l5J28JǶgr ' b20MђK KIIM""$D;r8YQ[klŒi0I h*8ɢXFj "uS˅D5@0dXㄮ&$BtU)"")fj"QbHfUqJ f7JR@Q; Id@PJ0B2RJ,HU!QS9 TRPRCPLt,Z(VA"rtLe+VAb(^IDxSBDA S~

g8M;X?DC~TY:2HY+1#Aw9o}Xrrz$9ޕCayf0qX c |ASj&0b^hQUmqs,<$S}o) mѺV-KK3mimM8©5RlQb Q.(YTe;a=rp1p\gl>F!ͷ# S9 pd 0EOOy0:IX(I@ "/W3 |O{d=v}} pZiCMmCjpÛ72(љETRU53?gMoҕsDMA1&t`1)v gLAʚ. 9+-+Sɹ4܈>׉T=?pղrܤEFgMcP4}p&ܺOI8&)2;w!rhbv vv\I7kSJEdDpt',SZ(iX vKdAݮȺZ5hܷ l8 ƌzh9B*hl5fv.I٫a$()8jbZ AbTQtaR2hĠTTDUp*5lJd.QEJ(h$ӧR8AീW>.iŨŁ#9EH;\'wC<6ʋQpO~CLJ3o%}8uH1"+nG*D($7u5 s`Fh)7r0Z2'=!)ym2\oRٮwxJI,Pxޮ@6cM巊m' 0X2ֵ9򡠋¼LTC)ɳCIE_*lt#R#20H S[F)ԮQ&X҈:M8TXf3.[ 4 EV-ʹs *&#ST  2QT% AMAceUQVQqN]{ QHDTr9=* fJT7ꡲ*j%UhFoػP~]>-mnSɾe!oM֖ S!ddqq@c.p/5-0Fv*d  Wavdw5Z "^q %J =B4+" 3hQ"`w@ɀPe '_Úϊ6r؆e:;|;Bx ި3Ck4q4cүEjB䗵X1ыݖܡSӘQmVqOt=?$;LqHIH%_.ݘ3R9KV?I'$;u@@<y~7χχjzUFfNf$T>#LMR62g+2âAA~)52 b}牭~wy)zK*+']+yYD&p.w CTd2/c$ 1tУ~p?m\ eG얧ibEɖ5ќ@L#V&`// J)! Ҫ&;LpE"8v>i:.k0نjzʬTfn|(h tVSӜu7@%6 UGA|~VAO/_7Lnh7ɲonFf d!J *Xer2 *i50#CcTTB'qL [ 3V31μ 9#!i( 3[X4Z |jW3,!Hb`YՆd tn[)t5ZQDj.p|"0nTa9E?PH (9M$ w@ ;^T$>~38ÑA.fRjWUCU 53iJ>^ nO DŊaщu=gj@hFE2mnH,RF,*4C$)L|a$SJGhҝj=7CT6jKݰn>UF!Ji'ZbE_z~g@iH!B6Hw)#7{w "0FIܹxU]Nԇ:=A Fs??#^0zdcCw[n.7& 3 M&wd $]R`@VfцF csDߣ~Rr7嶾~K*(ewl? pX _yE\[Y̋H%eߦ͈*iV)P@/BIR@SK<ƧThd tvIi6lHFBEzI $[=S/e@DBU/hHcڲV 8|6bQ)PXa _q@\J$O:=<[:'E>KOZ}.{;LW)ٳRdBDOjQ *CBM8QSG֪YG¨ŹK=o]3|9QdԊ{&+NX \9Iሙ#f{X~#٥],.B6Y\^4TBŏ6'{oe 4Un~gi5 !9D()) __o_G7p._[-gHWh ZCؖaoKIoۅ-W$HpѼ~];jO930Wg'ko.L$7 O"J Q7$33B,A 1RkJC36­5oϝiaz]3VZokG9dN#nN߭Rտ=Ū~sDf:~'०`@X ,# {o98E$ ckDh]B5QE"Ċ F[o~?`5:|npy?>60>/}o->~CYPDA5B J ;Ky g\h jJ@"Ĩ]wwh{3f >ۋ, yzrCx 2eCӹK,̴R<ǟM ;+B8'qmV UF| <VBrulWdA&'!92K00LisR垜r==_ KDO~Q)H`L볜߷8pr!?W}e8?#w4&ñvV6DN!bI̥}WGՅTwp@{7$RDj-|\D <‰"H1"GQ嫽svm]f @ FDDAȌ2 2輶eUjl 2Q=*WX6x[tևUڅU(IKjJl!\'w+% 5pVHI3 $gi![γ6~qL-;^6}ʹ?& L ji*Í@ԪGFK fB) .^dVefS7KLZ q of1.x7z ZFS"~&S3]A7;tGj.AƋN7^z_\vGmҿkrC2 ()!JM Y~=ʱwս^^]kNXիӑ8l ȩ.$I@E,qQHDQ D UREU-0LD V I hj:瞓swyDR$=Fz~lS54S!$1PRI1TA 1C5$S UQ5%ID0U%EA(ҴI+RH.Ȉ M QIII@DMAK5  JSMI TT3ALE 3)~oS;mDARI0@PQSTQ6Ө%(!T(@U*PEiZOւD)I續b)H (b !""F bI4ДUA 10IJeE$2P4B4-LaBN`P@5rA١>/SB:[VGǣ]A,(Bpqo?Q0qݓe1*KIfI{t}쬷 o99{;֒Us+^\Oػ7ox?`V Ygͅ{WwBSGo?^UZQvdm~,Rl<,P<A:4sdH̪5:A24dc, ;%křؠ,QL*{Oc3eU4FF z5W?etCa"ǰd6Fpg<3|Rrhߦ],XxFPIS72ԤB3A re@j&4^ .1 ./rs,z}[kieaX]v/ׁF21'(mE!yv&(2Py /Rih/[_[é`}7)T6r ZF00'p#ċ((LD9dCM'LHR'tl a8NV}OV"dU&sm|3.fnq9{~ (EV-jMJpz<%\<%|8RlΫi c ]0 ,hK.РQQf xqF=C*ýVP_ L$cd@ehHֹjH5ֽmq]OQI-D@5N>"%PF#w1Q-\_;;r`auxVXYD/Cyv.:ܚ8ۚR{EBo뻌 $\6 M~nepZRkBIlCGL(5 $g zX6\H䷄_<sD?3M=)21D۹ GRŶ$ Z}H0\=Galz)&՜L?%n6Wo:UG+Eg(NV"" :GEN) '')cz {G?'c2nBA(0r;xh[U\  Om!SXEĄd~Z^xL8c;KZRBkÎݰ'md^Fצwq69p:<0n`H@9Ö5LsnSx,ݵ#* sԱ*`oD| 6L.do sÚ1Խ(Q @-,DB.Osc}Z^ĩ悅JPaWµT¢QT:kG~g)u _y뽾Hl`ކpS~0 Zm=V9^+.y:?PCm`YJT`Q叒h"pzpDMt+7:>or.]<$gЈOKpV[&vWò-r]HJh > 3Ʈԣ&" }ъ_ʢz-əLgԼ# X=Wkkm7jp֘GAH~:Sׯ75! B !& `ͧ|iNu}ƖWih9䁘jx_q'vFk ;yhw/?[\v'c}ZQlEn| dQEdAޫpD0`ho,w'V[/ee͟V'D!kjLjo]W<:y|7d\a*3_b)`ʨ <ׇ{l`?|cڒKXa~HR9$F WuPrY@dr-NDP%Kr:T@6$|>j+z*?p BNgYC&w;l](1jasu9Loyv2zO-F5؀6WdAPw *"m ٠=oal_~3V^t6C?tث ^b۟!W'ώ # 0^JgF:CJQүd?1p0'ij͚z1{X?D' ?Vb佖~cySs4W097au3Č a 2Qi<Ǜp?o3%yX8~W?2i$"32VA(ڋ8e@Q0RDl13˕K\A|Ԏ'AguG9*`Qi쾃jFo[MVt>[छ*ܩq״taڹ9W43Hnv*\:MJzOg'><*x+/r<"iG }/oz>|n:3%̵f&d*ޤD \?>tLI XN_F^񟶇 5L1?|IO&20cB *{kMrE0 d=L>-s|K>>-Ghb5AY7of7->⫶<[ ߿GSB3*6|7Wـߔr 4"!AhvkƙDhE*PW=r ?鶞p0e70NuU;WJKYD5qqvv#/5W [ ͢_;Mk>")C`Y/(^hp%?!(J?S2 N21(+ko KAGnq^[+Жzߤ6d"WtG";< =QGKPՀڨTpmwId?G-Y%{t} ܱh FL| =xۿ(CV./շ?kN*.go}_8^Xp3xe`KG8Pd6Һi>b3q\&Og f? ~b/ct_NCu{G^ld4&@v>ԉjqб5zZ>tr(r6䶫ɲ6jfP$TM k4 ?U&-I0!ʇq?σ5ۑusg| ȑFE{w~MwwǛP@(j31<P\UȄ٨dp/~52Wh#Ac">!f\2L}--9mCf~cZ +Eszo#wy9Y$}`ü7z9a2~wYZJ6J~!*(QPdke̥a B} 8.Nn{xUà4ix;tmr\7L筄l}Hm׹KU3y5xBW/SѾ'CY7?,<'C:)1!b.0VZGG˴7v=9O>nf|N_i=kSW+Fu13-(,ͳw?jcR MpH@QzDhԨd&˭{A%XwӾe+>J='k~ծuvǛʁ73mF~(oW*Z\{RZ]u_Sm_ؖ *|ݯ ()cySҥЅ{]?Rՙ2گ|?Y7ӾAMd!~Xoa"r/5Z@Dgsh EޣX0Ɛɮ cUDB/|o+Q V٬=aL'CUz2pDUNeԯ%sQ'L NuD)P5\pfxyT:0' .:cW`tywPuo길#eOOt[}6kTJS!fvo *VóA+/Z*X-y Ą.-Lx>3jJ&3 D܈~DT=X9a8zeFd.4{/syuڴ"g9̈^}7;w>] }>^ywyZyۭﯨ(rU@ОЌ|k`̩vٻ]# 4 ͢xj%ZUaܺ|Vþ]V 0=")wT = 9~k8UO+[g {N~kKﳽǞ+=_{mףM85=nzn0~/`6|zOcɏ`:k=Ggޗ}WblrCT69ս͢r'?'zϜq£S@X+DlC0攡3Bjj:/q+sy4PD  \Ϟ!}-qz'w pb4D$붎_u+BUX62ٝnzѡ((6MNxRp@ Ģ.t܊ }wV`Olj=_6~7a/9f-+h{OJߣ8~/F?2ptR!}Lꉞcڸ(Jb @U5(E $J-qBHB7/R4[SK1@U:%Tả`1!S $3F[A橙_YD7q2Cڴ VmDu`'g?]'VYu& m&_wl=$Rao2AL s,x[W3]BU#q3k|Nw<D_dZW{L8l> | Y59@ikuizFT YN@aEDJ^[\o1x6;=MESȝE^e|T3x-<#_{&z;#zܾvؾO/G}&>|F/_ߣQmrL (vKV~yQEPQ~7GߑH4f-`?o%!q@kI0:Af u~ocWzk__ϧ20D`sjdcn76t?+gpUvkCt!jN|ޕ5*3 }"%ɩ$kK%q#NؓȚBSVYs`BK>ᢚo{ŗs5EUT]$AQ9T?9۟iN:.S.?K|/+L|M|qߟWiɓ gC# /#ص~{]řa30ZeHhzq7OLsq<\`A3KžK6~nl2_G;O3U"hXҩj{;[{jmb>g1W;Ny8Uﳓ۽9&K64,a,W݉smOɨIԗbxj/ڣA}o*! 11@If 93ןp=r׬,OkǠwoAYNo0ԚpndC"`&f\[G/[󡽪?}{GʒGw0Q D#~B*^|$av& oc{\l(){CdLp?T  Q/6DE(5$4\N/[)cH6!hmMw:jw[/o#=w_4e$]sT#2"S3?}yXOKh|TFPȌA1<?g.!N;ˋxYۖ2>?1uN0s4Q}]VcRfEӎ[LYG 8wa̳;TBB]~壁 5ff>8>\uik4aXP23R;|n@x$iѰAPCaa'@J%_;- "v#zVGa1SBBGPJ=ab:/tR?]PtbUrSIx(9*0FrlF$2H)^#U3!^:IƸq*@=0d5JADQƈ7(gM;5z ^M4MJPeOeB}ꛦvS[(jcVH TIQ;F&zQUX5S-ִd`(Ēe#QhY)R) lq녟Ab=0쪂KmCO射]{( Co=eq<9ZhFgϣ'W#s3]aFT $̐ M}}>&isG `d{HQ&g,|9pWv[ '. <Cāքu(e\njB5(pe֍"²(67M#9ӗKdNߏ>氁ap( ⬄AF;([ @€x$ @㓧~:fܵLLN <|=F_ ~JG@$3/-jB^i} gŅ&7ۖ§ !Un!lmxzuEnH|W1 O(âC({oв[jg?]@ˆjmsI0s/˧3x{+?X9f ja/nNOr,Oga[|㓨I3G#&b k?ή|3XV(a3\%$YKW|u@4e_[{|r4,m-m{\ xLFV0̼-{5~Y}_5_={ uUFʂ=&}yl- bނo82sҮӽ]1;t62)b2Ze yrEz{x|7~=2"2!ƊA V⢂ˎaiR瓎A̴* IC&/֡; \T3x}{0]})0f?9!K~>שv|Zj^,V>ngnǹ9~'k::rx ;ԑ(j%B d=[;DhhdJ$~`!"z-VnM4{9$5e j~$k.M:_Y]ZnjH wywn~G$X|?u?8D[O}L<="2"!e_oκ'|LW]}4IX;Ri)MϮs*Eծ` N;@j,i7CFL.)b583RPU5vC.ۺyK]cW?A^-mM$@"!o]r: [ޕ NoYT_+9mAcBOZJ삗= :Lyz/IV9 ",&K?V G ekaz7θwW$d6 Mooybǯ1@8>Bꨨ5`{7ZKg QyCt=n6W޳"PZ;`f׫zP~S~W܇-u x3[93y FffgtJIEJC]$;GHYG +W$ S(, cn$RqxQ X ѽ_?PvVo^c1(G<-qf2}?R|>ne|wyN~m'q( N: 2$;.?>ͻi#R 9R27h/."OuygDDL&¡_xԏ ˛S_o4 d>x5e ޟc+ng3X^im(VgkL>Kk}~<TU?cWkHXljxe[~~&cEɨ1~\cxAc*@j+YFR+2B~RhVL8;L} p̃8Mz3-L30*ٰϒ-BG+ZjdHe*տ69`C)Hyxg4:ٺk?ai$ pa;<KjZw>^_Ɇ58fQ_asl=+Ιi?鳾7 )#7oԻ<Wh4:^ L}O5xc@s FW_jwbb:g3^)_ C!: |wI6hK5IY(p | `]8g*M&z+un/34t{]*om W7W/:{Jg2~?rC}8Oq˿OS>̡̰QO'o _R>ʲ`a`⥺ J[W<= QĵCjM)FOʪ v忷yKyϾ^;~\?Ewڣ`W]e~ 2OfS`1x<>@7GWuqywq}G鲴^5l[nfȀ~` }ǟ` 87Ktn op{FL,"R7)x%Sk僞U(8ROTp35ʡi%n9c\<_^߮]vbZﻀ| )߆>2tS֙%2_v[w {ԉZq~OSw#hR*vc6.vYӥ?&ќko)?"t<%eZtmN[ґ7]~gcj5,kmh>j.f(m U#fםxIxzPO(qL[jv2ŻXAkio9Z=֮^}x]L7kK9lzI5nN&s+](d@N}o'vhr.~'mV3 }?/ۺ`yz(cz=4}tQfT>^jm.~v}BzNWYQէMȈ?S?߽ !j .]WQ9.}vi;7A", Y3h?Hg0(ԃ;k 6.aa!W=:l?M@FJ<"MgԅiЯd}m%~Ai1.4-c}R|4OBC㾢nN%Gc. S]`Wǻء~R` GWV}v<ʮq}!j?$*wu8ev^ ߽ׄr2^f˺pt[1&.;MG}3b]tf+S2r}nz~g[wӱ/g{ڶu, |>K=G?4Cq=Hֹ[{/F[W{ofC{lOO{ֺ8M;,Gz T[ 2񷼺""8Ws5tMޯw)ʽ떺p8Wg1b<: Ws؍+631{usn/y;oS|uYj?Mjx+;]}.|р %┰;|+\&dQ^ ^vƲj'l4F˷^%"C)Q5]B=?OJ;Nl?QSx 1 f[f?-TR;:C (zGY~gМEjuVe !؛e%Kgzz6D}qo)OMb]+ !Ōy7WR%iZjCIY vo.=\N͠WvʚD=<+7Գ{ R)dWfUY 573@5"l !;D,P 4 ]0IۄiSYo5,㜠Bb uyRw}Th>SܹmH;msQz9HL1ZY8Z:a;ȲewFۮ*vpΛ qbh{b/㠠|`Y?Qc3KǮ@`a^R SgD $@">H;@>2o}:@@h\ DLDFICBʎV-S|WZ<<6rfxQ;)JCB΄pH@őy&N_&*\  Xԑi9'k=9A 7C#m:~:_!?>O~s\|stV>ܪcԤ9y.O1S1~׷l&ld&rmRwb a:O{rԯۘ<' %z>^l߫&{o83mb.g-0@ 2[z]q@L?v/~4>7?{0fM1iZGaaRJw ]x&ӫ &߂F?XɻiDZ͊uj[ay^~1h.xHm(AmOFYߛ}A~/ߧ_PBЈzV3!( /\!?2|APX@OHS/?= pxGw_Ctc5.d/>K.ǖr?@>r~2S6.>hkSgY3Ut% 8#?LAսhsjc9̤v7XǴ^ׁp ]@""3(nox6UWK_ EVؼ_a_S~,uLX_gQWR4X3=00[ݿK'ȷȸ <=aWIX'łMw=fۣmvwåҿ~Q 33492i*.ޟWgA#THm||v%KӬ?u1PI039l%Ġ?VZBg(uyִ\ j|X߁i˞ ӟ>rܳ s + ǻ@fdCsIJ4lh%Ȯ:46U&Qׯ6椟[ͨC'j?qO!P <3ÒJ!]ʅ6~/"X{u|Fܔ+}$ᢨaH %^Fl+SHN!l<7>M.&. ?{"V Be5Xwwww})_}^&}k,k/w mj}@Nr)ZӼk3m{[wu׍-^7r>>>Kf=ݳG,n{o:цoz{;if|= W}}7{| n9f]޽ۯ>A_}Nl5W@:׷l}>ŵjk=n^o_m)66n{ m-7sͽul(Bmw[}Mg]U+fziZuTV[X  Stղm,P4(AE}@Mt GM@P:Z9nYMiZY:җՏqz{v}vlKgVjz)[b}6T&@,%UY@esVFmM,hiclJ$Zݜ RThӷ9F[l]N5Urm*ˀvYֶS;;.P֊4Eh I%(+T}nwu{6ۼsmhm==^)xg=I=pz$[}};iƎ=jhpU|Gblj^ݡpgw|Ɲ:wuJn^Sƨ2lESn>1]iRe{1iE JuYL umlMގZ\wQxo^z6;w&ݷm|Hzj=8w_e v{wdz>ݜ99myGSڢTNLRbY5:;vmnzO{KvcܣV]ruݤ6=<{mY{ރl[o]^v\X ٤\G۫u>bVEtϗYf["UQw|w:s;{`=>73Nmɪ]iV;v[[mOB=`vSH}͙tz+{ﻳ=7pnJW=#z}LYg^R%R4ZݷJs{=8}kۋ=sZwn\l(RWo{K^r .듶uًf$PՈcl}!D(.v뻂[m5!zݻ7YZwwlŹ+.wEOO{K|@7[*{U7{y{[نY۹*mtM]ۼA}@Ap5+Kj Kaͮ/{==(hi@LLhhL4&I6FSFi?IGO&zjizCF=O6yCcE FɐicD hOҞ<4ja0i4F~z@?PIQ$4jjy'ꞑz4zI44 ڕ?3@MO'dɩ&S~mCM1=@zFzh d)"& d44M0U?jOSm4x4#QS%=5=Lz?T<zi 424&!@4hM2OL@ 3SMSJMj~<<<D򧦣OORzM=L@Pm@h4A 41{{?uZ Eth).i ewzP{{]ۄK݄YjuƬ0"rI7Hk0EOY~<me̪9LZֵ9jӃj4C 5uvekQ PRED*+['3eJ.Dh(1 ĂImC%B̂,@DPFC3+>0N:hwe1(*(?52%s C ZD݃S[o ^z>y)n[ަM}{>'N gN2d*mTepn jV ,*$1 \~ݩxe;^ .ahFN{a?_tl1P_a')>nMWGO}6 "R8uoV`6̡3D|rY0y;w<<׶glǍdj(`i+oG# A&;d>ϡIHur@+'fZgp6 R6]7TPQHU`=//-R~>ƔOg)"ia*2+1w'SfEF6h1B !XVA2;y3SatrU+%E`Z"QR"&&4;AZG#6$ddQ,bbp3)()X (R  ") h$X$1?/Y%'g%7{]̋Eb DQORo$psň0 J b")V gaBOg"+y7CTZk("t͘dG%Ѳ6.h ˗hkH,**(ya5MN{<^>\"edEJԕR*gpy GYdVv,M]m8 AJ:@pvr(_lȕtDuƖ -,FKā)NkMKB0Ő5AF=JAA$DR,SU|Bj$̊@$VP*wEv}oY֙=ḉ}d8?WNΝG EZ!gnXlIi -mXX"3PPۛYWTrWSrx&d鈊S(q^68T@*UL]>-გ$H@_ma4nMȍ( ,n| E/gui+F(9\4j|e:ּ" SY*E|LE4je(MKPV(SL&s M̚J>DthUEzx']uncP SV,H# œٕ]Sm>^&y%@P6aLU[d jg^FJ"[@s pO4VP^T;d<>D-I67[* !'iARt, ٤6LUAB@:,M `UT(\oz`Ʉ  paZaӕTj(X"$(#I/{`)K*#T6k""Vרn%3NP<7qs[b/QE*NaЁ 0\@R3&6``sLew'f+-9Ta"\\XMxA]Ȧ4Uz:?г$p31B_qE'Pe} "tvV R& _/{" DZB-s&P˖O>ħ>t(ͱD~;@lӓ8RH9oOaשإ߭$8!*T#E2N5Y9(ҡ ۡBTAHȠx.TٯШa^׵4I: YLˆD4 Q2J@뤲~JbW0}!TH q U 1OVk(|x@L:Fg9m]{1~'vC•AK$Az[V`Z}p'[>}}ovcmx$`T,95#@M}=Nۥ:rcy IF+u-&5}z~^b":gz$NP5`h(Tc*_6_oM,QvgBBRe[iNt0|Կ68~ TE([Jsi[A)DbɽVQG@P"o;|3e=Vp?.}Q΄꾠凇q`Qk \n}xw(Gqx#`@QJ" P'<^']P1wt &-;Sgjo)C^FevhRwD8wI#ΡMU:"ܡM Gg¡z[,E NaH<*+Wā/"PG,mbTװګ*Dw6`LqlP#% Фg#!<<=5޾yuҏ!X?G.q+  :_V0O\z};=T`6s[aSU+5˙>*ݒ?@b'Y% qJrK;EP4|qȨ $gV0Dd+ W~1‘6cB}njUC/,F"'Rͩ.ƊDa1tL X9KGnAKVu2xQVO'9UP.T'm#Ik 0eR-cHu]ge1Y7j#T~B0@ȴml6,CT;CRUbw;] {bTT%'zkI>y{ KƱ|KYjjUQXOύhZQu.)Jkm? (-ح6߽C75:wF0pV`K05]mJxlj>:+8Ah@;?+=_ss׾N^(%9.7FU#SQH U:sIAWǝ]pv(AdMO֜ċSǜ0P6[ݗH:%ø+1@m#w$$}zT*)"SlRvV )J")EO?W}E)}21mkyd'AW]<$YX() 9~a9jmmo޸STYA|?*{?>bbĤP_Oc5Rskg*0ٹYL !$)Gde pS)S?̨}X` *_gDz,N% v D>3T7]4{B~,aa4bHv'dsk,ƀ:YI3FCQC&vsNc"%kQh\7C}MԛlqN"@*B"/>LOAڨgHѽOZӘ+yp$NqAe|!J )"α7?HENG+WU 1M;hߖ݈j@0 5ĝf 4Өm!N6ѻxO[% )JF{# VRJfa;yrBӫTٻ)ߜMsv%SFۮeEJд`IZ` pFdžiW!I ?!pnd}):v;K2iO&_W!ge)WJe-`s$BÂ?%07 &cup+*!W)Iv<CQ g+VN)67x2|E]u(Bߏw̹/)p\Rѐ/'.zBu([ـa/>vI`r6v=%-OJ#6nү;>/ x`@pΨ !T7Vc%nŀw >?JQSE 7;"O؎A# Z#"M"H5&ɡ?_c{qjrPIPYEU`Cц^+!Q58iw!j?7Cz>;_?(fʠ>8Dk3$Y>F~T, C@u*RR,vdOgoؿ,oOQS_8uu=]"#h"wS|dN 7OI7BE')R@xXiH#2F d⠼ʔC5[6v%Q">!<`(B0RO[v3`E(xJQEpO)~ǵԵHnT7Uv}K vԂ`TJNjnIUxV`(NQ7>8'Ue9D-vT~4&ѵ$qG~`W@f{'wӃ_؁R BD+`TZhhh \\Jur]GNIR:`hpPQA<ǣP>;DT.P=ͬADeURаI$sS+0'UtC:t2=*(4}uUIP!>xaL˘%cyQ Ot}zsWy>QI@UUBQBA4E[a?yWgU9r_t~Z%a؀ + HfAKj ᐨ2)6KfLVi:)ޝf:C8ZJ&YS:MIbA=g>_S2Ҍ-+*s 4mKx xD/3O柰spiX6ĴOs)tӦIYϲ朅q*nVlʋ KJ]V\W6Ҵ4DY *d\(Fҫff]D6#öY%0*,b3pVa*1Mi hܘ%V d")(v gjfKK;]KAJ qp1J=1a,&E+*JTA92 Ac[a&y2(X@- ͨsQcVbnthPUgrȴ2C2EP[h*[dY [KqiRYR-JVL³9̩s 4(Qbv EȢŕG^1.h eEV^K99Nm0^AHև! *m'jf=R[W9mbT li6 ,US[lY(QѲrmj(9[[* $b&TEVj)Xi戒g +(1Ŋ+emJ̶Xۘ!)Ij FDک,*ZMF6VR-,0Fn2 !Q#E2W*T *JU XJ)mF* ԥ)c-*6-mYR65Qm]vAjdR0YmVQ-m@ѭEdDdML0PV"E bXԫٮʬnwD0aw6nnkX(_e-7TiD6f`,ss"*ffk"F(g5O1 EJB"2*&ʘY,btq@Z u,nЦj*(bN9mK'C͸IO V *V)M $Ta "XVr҄H4gtJKph6IуR882 (kBsֽpXuR1Ģk-)+*Wf#auU7 PB}m_0׼娊sVe'T_oOMLj*t}ǧ& !EEE 3bg1mv'#Tq T+z<> O35pA<.ldkU<G}pR3 `طթ}J/GXXt9qW޼\CBF,EXTLž>ϴ {}ϲYw8 h|^Znj;iL =QGpJ_xaAn0yg|)`P Dp5}'Ig3R+ hp3bYUUk"BإB*ZC!5S1Lj{ G$]J0>8h<#铽da݂32W Rȇ\VA0Uh@M\66s{G^s?w!0*H~? 4UR̴bw _]d(=}xTY]5Bm1?O&"??- Rޭodi)i@B2D7P @82Im7XB]sP U(iD()Usy6wen緕*AoKNo3VB# "i(Q8eO&D ) //>>j COQq_rQI (Ai8vpBO'`"i'FP7 rxx r R(EFzu $tfM0; BEF0*=g^/^,:gQYbʉ`D0IXF!.W|F 1o**AO>B^K,o7Q*~vA)><@8C q|Vd4a1fTF0|rDk^bد/~bGx<0Y!SEAw,qA|-ܩ^nOo=Clxߠx07;!םUAAEY;2EN!Ճϛ· sC!i'eT)8>@AE{^fCc3;Zdd()-C0r:+(Pa)lRL/0^ .B"J(t_ v|7Es )O+]C> uHdJ 2 u$Bt`A96С;*q(uCǧw0*(Y^BDA'QA{bG-DI$gJn?IM0W >-L r>W֖s!ŠTKÜ RJqCENxהl4`gCBb4z">lg6HH?=a{g[:].Ľ6-T.e_9L!OPn"G??NW3G-EݷXBq's-|Dw#: Vh͂3~Ë["/t'2T!m^B-w4m7=7UtRη2r4K(I}y6=<r aPh~-|Ҳ BK`8aoҦ/*t3nN~TBA%@*t/dg}NӺ94E 3=Q/DV|ZWw4{\O7ѣkV GIlOtA<-R_EKCO ! (qa)^pUߗ?.IypVm˔?}oJ Ҧ؈hqfD{"|֗Sg.þ(Ler9a͉ Z8h((t>< )+O L 0ß!}>O]{7wTaM(66A)kZq+=MC .Q^ypA\ȉ;Fv@ e6>ƶoGx 90k%d4K߃e ->~zvsZ'Q]ywVa ܌N᠖aʏJ38N$DύR)|8q|K ,\NRFJCM_' "IuÔ2z2m7+qE2p# ▣=PTBNr%W}=d?pC ?_(@xO:eAwƁeMe4j5ؿeUDD$ 'Bd9(@AaʴcɔH-MDD0@D5]I&Hb}@>7 3ԆwL 1OSr{6 XR*V-F~tg'v *(ğnO"UR=ǣ&ラ^X,Eԇڞ͎]CE}&($qx /u?g^C<>Xr 'ZcwGjQ=ߩn~cxtcQJ]h:XŢw$:9@ZRM:i|Syæ=FڵWǥ-5 Q;Y#g NoֿME;eӳTJ&*)Oy)B˩Pu ̐>6-H{a$변 +ixz{gѠ% /)bBaՔm.  M>C]j.iX c?7(*'qo58 i}@^o8IjVߓ/qxw SڐA"I)Hp_ǵ Н=Lk'(`*E/3V4#F.^Ey:s:T.ڐ 9X:n4., C%m7ۤ2v+ ED*{!Y[\`cEI DIrlCF*TLc4 (ˏ(·РV>JIv]ë{oUlPFji_!]埁#?z'K;==8D 9~V<\r#-IB6)*wReZr3,G+Ɲk9naur bQOd 144,_Ovߊ0SAJDUV"KCC+?gGlv~p>Κ&PRzmuv" y,~Z|fbzMBA $|߭>V!5=Tw> [<RF}Xc1@>炙Dm^>Ӏ{PL%MAB(+j-@ƾwVG::ntEiQS}h7":]tZ+]V1(ߗ[B~uKs[Wسf52߼[m*qKVO>n.ח 3CFMDPU0Jw` z HJ~6^?JT}OrҼc)kXN$'bg7'ǎB+,n&aa6ڻ޶E&7;.t7s͚҅osX(YN33u37lY"^Cn);aj5?].nCTX*ɷw\>wG6s犧as4%((2%HRA-R18ƹX=B(&\2 )c&¢6hTPԾ|<}J=<|]+ճ/gJG7hpgM4A|F/Rel*ba`,Y99L7M\! sf秆7Uml1Od4m4"pUZhd$9`CsIsH"%Py". !;ʁI#r:3˜\ (;]xC5$e&&&4L)}Oy;$X)=99JYX(Y26l(̙2-g?;>=̇?>Ӛ%G1SD۠wD$Wv@2b9G[ߔ@"o|m "U cR"kD]`ZQz6)d~ΤEuvoԄgȗ*S?G(ݶ^.b*TILFo#࢘Jbc>޳y枺:/X{MЩ@n6Owz nbuڅD'/:dOcRC3F)6$q1p0jElFgP:bQsW),@_"rIy$NtEyYaE Xx² y΋!`*ަ!%od4ёQV+gI?׏BJ>wU`w3 T( a*=&31U(" }<^j@TiUShPYʀ쪠|' N~}Z7I"YP*(d$-7CDڒE@&tZ]{B5cW[SOOҢS4Y֋kLQDiuwJNZqPD\iY0 &|Q86JDGvkX(-]gWDXe.$2VfSsVUQ͵Bҙ[VkR^lCksvSk*`VCaH;l"=[D+$ -Jl:֕39Rr\+ )PH؉2OP.ruָ /R|*L\AQsQ[!0~Ϲt?룱X0R1.gT{*c%z+5(V4@k[A !VE 7n8C@ԊB !Yz./v/2AM,P))|0n!Pt>eA:板bH` guTݨx)%} ѠKؒdĪ{Y&qgi*9\FQ_dxrȗqw:sosIR)}<{4O`u:xl iP`]R RϏ%)m3sFd׍Clbq.ˊ!|}8yS}d {LNҎ# G+ʖSO5k탳u5 /w;ERm[B)Ρ>A$b!HO`)C#N9ZEKG n-U"I2r8SU*w42hla+b%2ׇ& ĉ;Z_*mbΠ1¹H/ ѯlG^1w&GP 6s(|A1!;T’mNpk'T3 GzȴoYJDDeEH&Y`=i0B:L9;B.(A(~߀9tҧx//.9N&DiiKiq(+,)Fij\8lA`(P8U+z=JTUm1DԻ2) ůPO~(lV*J!m6)T@SCUT%1) DAGQ'ky߷{c!Η)%뮇p2ߊHdPQ`rT'&Etp҂: ^ԃ,)x@$6Ɇ#^J* ֮|ম ;t`<N7@ ($!J(ZRR3+0˔a(3'tPEhq_z0A m0s%>з@u*9UP#0?ń*~OL l f -P$-L!.|>nrz؜:|ch{vRۗ 'ى"́SXj >2uqک/L/Ø1pPT!炜p2ƵԱr"G9jpNK̓ai ʊWTbdS-aUJy7u rAi=)ISa!A&N<qO/ݎ g5xS}ږ}$a'HS/Ind,BCAua񲐇xzxJ0x إL0%F>B>Hh- ɄCG`e)zq+7H*Z_*Ef&AI»$.ˍbZoou?yu\_ .qX,  )WAxpDcLic$K+CzpG3+1~݊id hN5 ,٭@qO޲+ݷeq5n`Oiխ"k_`>ު.u!)F+H )dȤRt@c1uy83({ۚ +KUIseqTPim;@J 9C_2-a%6U,ݞr%PpAO%so]p:-9Wftg߯_`g''2A(~N5Ip3}=4|%Ca|{% e+[x8N8)@6E\dɦF1L-~g >w#aL8NJ?e]i)~ΆNHk9!ah)NS&r%6 ?G=IH{߫mTX 22 z,t8,\ uC9D{lqLT.^Ɵ׋MbRe܌|/J@(mn$PD6UXn#(8v,__r/*I((ݬ!TKL~k!"n ]20}zcIXA17]omR9>?chI0^yxlo{&?viN 3mWczTQ5jTR1Q q@$:>\.Wf5Iu`;t* dRrF[ApBvƥ\t)K^~IOV~lx{Os߈A-gtxG8R(j@a0FfL "79<*tZС$vJt0/El{Yl[NvgHVѦ Au80|WŊ " .?1֖U |ҰL:|˭Wl\L'AdV;tKl]YAu5:+_2U (O]!hPT/\rQY,TQZF-B8EHD1n hK/Fqp>W&ns.!PmW(P oϥpǐ螈9 I,t; (C`C;I'$f%b9g~) feWy@eI :h@h@ ﰀP yɾea'UQ8(ۗ0բn2Er_ C䷺z}ޑc#zn^&g ^Q&lP@n(5Ԭ1dV=H`qx I&ʒq^")E ~yҴϜ(q<.w>./C|zV(lM M:Y&%UA)fV!YcՅ1]o2- M#p3 꺷E8}6_xo-\t{[e{?'xNsz"1P`" 7z~/f6p60a1^5Yz7ΖHD1s*`Bc:̂ulpźɼ7kěFN1~hϗT6c6Y%vA9Y[\?f;Gto˔u8QfEZ0* sd_% *@tAQB6a{awn7i8[Yu&<:NӣZK-5K>ClD0)!]*^8Pm֩E[2q+ofۼ~NÜŋ_leR( ZB?UB@ lQL{,Xҩku#d0a6LbZFP(oqVODVtvGĖCௐd;>c^7y...Bl[ځZ''׋=;eH`bEhpދLD2 \F7`)0} )Jb Qj’9C. ˵,4S'hyc˟UPKr r@墛zn?#PB8@8S 2c٧ jP؆BvF2= ,hkTXWK/">`: wz5_8o?]goy(vHšWX4WI"<}j~~8S8K؟lU*?LFT(xA_:S/ν"e{ãqu2dz$Y~ , 1)BP0fk{SzN\]SN ^ӰHxsۄ;TLDE0ObieǍî\ݛ_n(w ~\@}~&U_**zW^|Y)̢`; JB )@J oP^ޅF)uG?aܩȳF׻Z-*Þm! ~3]sÅ_ 0.:SՎ1whJT 87W_x8( } K偀H( 5 kG>4}em}·yR,1!'"!O6AE^fj~>|zG3rdI  v * ?}/`qSYI=F&bijh(ƪe`L%)I0@TCPICAAEPTEU%TQF1TgW^tA&%Q$f܎ҙ>b(=] -Sd'@'hXBl#;9% P->t |$T(P AS*0`W[~ zgiާH6K iildba#-dlVI~0Q;й}WF]ޘ-o r:Hb%W4^LH޿X|`Ou{]&iX(6ymT@STFLh1*GbVi:|L5r[Y,'=]K{{(LǝkUUX*b3Vty+?QB-X !7J,;;~- u 3MPL_a*JW'! ets؞OQn|6D$BB ' =î@8918M]^O/=y{x##16u=]߉U3P! \siXTyo)hal-]]0ǞhѠRA蠅Vy\zy# 3'EL~_Q<lPJ.fIԴ^Oq7rnɺ  b/Vh,ku1Kk1ʌ$cՕIq ȕH$T)@@"b$k؂F =LyhA MtGOK[6-i;yF6X 1Bxdf-`DdۡH%H=E*ރ=^wI}wjj!(H|1ASʵ};$]TGwN[s5L~mT!Ga1ZՉ4ڄ@5Iѻ|}$*-a.<_['nV2_4߇,o`Xz͇7Bw>x8iK.c}~U~St=eBA参)޸QKW0$TT*sOFERF-7ݠD }{p )hMD Cԋ.^z;(cgJHQmN-HS c:9I&5?oF,Q>LQSߞLזn(Ƌkb 826eKƬ7)F/H_|elH*䥈((r3vp2e!ЙL @@h{gKu)'ðo6pl \3Wn0INQ-:M=\7u 8و "DDVr6]v7y1HOݧR 8 +G{/h'dAG_tuie#VxPn E $:,&pwGj- P;Oݼl 8s~\m~%̈آPi|/|AGleN)>RrXGx4ӸY/=Ap͚auP$7H7UMk.:KiU(Sʣ`+ '㿅?y$Ir&Enӟ?<2A+[}z ӌ6s1ٚ@1^:.|;X^Kg%|PJx:H<$ LP#;͉ad|y V"( 8v:9 0:Ÿ|X,{r)3Ųԓwek |;Vú?Rb6%측ȣ,S #)aN(\7»v֛:>3zn"ۣbqkq`sov'bQmUF߃.{c;^'FDE%KԊgQLvJi١,yMZ5TH="U ˆ52teY];ǹq;F>txuO JFYQ~;n"1 &HeQ!㐔pyz>7կj' w>]_rtv|HH7Irxixn|sGN<by3bjE(z7Gi@++)H s"έ&C7sF7oguՋ4+8 M8&ѓvִ@Y}v~E0נl8[^.|{7p7JV4]z0闉,ewyE@$_Mq??M6#D`$AV"#REUCd~^ -btj&RRH%yî27|O.`tӋOCỎ>nz42({$(:2یEcZe |"$b(H @P OГOq )͓'Cť)$D4*M}`C~D#YfrQM`ێǝlh & X*`z|73{L#!e8*(K)Sվ ޯfD׳)PYGi 3Ӈ3o>{Y2r\PLJلhpoO|DsD9tw"njf`~zuWmvpރ!(MiqX%.h [a a@ by @dC~`g Q*Yb(,;{T"D3yw0 BIصny譭)#, (H+\0zK?xr:RSמERAVq؀-9$YQe|CB'n2ӞEQP`I-sxUK) jҞPX`uR 3|fʌ%<r"(5q$n\(E AmV K -) p~:]Ghc*|!>uj*֏xc2pA+sA18͕jq&~.):kaVj>3vMT->?_-=nJ=b1rKtN "B^q$f!R &קB ˉ ٪{]hߢ<\ @J$uc]Y/ie8Z-zyAy [j\rɣQ#̎o%50SNdsݩ( =e@ G nIQw< 32+_q$ܡVȚh[tiRSJM7 j{Gt?ٯ:?3K)Ѷp; ,QXoW":ͼXeDăURe;\&~qo(~﹉Je+tȸʳePbayULD*'slʅ"~8vax|rRϲɫ'zRĹ"-_?閣\XiVQ쭸k9srsf?ROG1(MRϚ4L+3]}Sڈ`*1r΢?_L@f-C>PbO{24D@b6wOd괂P!$ȌngFt6K| k:Q`PÞfQ> I.K$3vU?96)tpX2@9H@iHU5[0Zb^Q]IϞ8`;4:u,fr\EdMZwCn^v"CdQ5yh LTqJNeUto':'"lôJK6ӓ_9sPK*u*b[Dx_qLo;1isնlI뛇]q_^ܵ} TGXCVȘYok*3=[2&@L[n89FtF7gPsږp9 *1*IP71MȐO% ]]p`:X.D1^TKOg);_w,XMOo%K+&K[Y~XUOq^N8}3x폓8䵩P@ǝ(2;v=gmׯQwׯ0NRT=8+Q\mv)hS̅5=_KaF]`a ׽]YZ 2:sYH4r"m(]O,2͊bN\~N4IH< :t/OHxz7Ks"=./ @@[pu"7dsKD:Y}ZC2EHE832cԴF&$ħx,LN#3) ſ݀.~tߪ`c#sQr!]Z 2h`}MFk%XY<-sv8}f觥9]V(Jn;{k.]d*nM@m`ễ$΁7wOZH"cj[ AIG#щ,_N/ngڭM>/;ܽUA6^٩idNk0pt6]- kc(n癌ռθkt+f:N)hDTܓΤ( ;zeeH935%*[t}{喙XX(8@Hpx8 ZpCHŲ^bfS/N~x;̄ ٻ9)̬~f?}JGi뼲Р7"'Wͪ~thъFZqeWE|@JG~u7ݫW=8 S cToi3B{e*TB >1: 7PrDAG[ـg+q@:%uɢe`7%1L'>+q徦’CYXmF֊K$wb'K0Bk E IL6 3<шbQhs(]/%2b@)~iC}_%N)YWsF1JTR%*:Q׷zƭAQ݁VlJcSBٟhbb=΅{6Lw#0epƫI{.Y) z9ikh~ ;;p 7#&IMyG${4oq;:j jWXHcDu%nI{N賍a%^TwfϕqNkƇG:`VD @AA=On*bT= lXdg#H`Cޫ&]aH(J 4v{_8Jh0!@ѣwmQWmxZg`іqiTs~5;SOwn 쓸`")_q˿Nޮ}"Rm4h(ZN,A,`w(đq g>ZI쑝qljcuqoS b \ӨRKdgrj{,:r*FiϥJQYվ}|2Rjycu&iBJ\\TVUZV*$dدP w9gjoթ«D<_HԂ`yp;X\%rdRD*-ҏǻx>n jTy>tCWdu.nº}/VXO)~0(0&O>\髙zTY[kR|e"Ir@8,qi.T M  |Sە8 Ly ogN|P&Q? GW1`<۹Q_=.ScVX8J@=z獙9T  C LV۟SUJ¼/SP6XvGP0Mm3;W$E2b|lO8O_ڣVwf_I J<^;@.WnԾg!sz7-rZ/A8MN22#[4`ejRByfsܟK{< 4ka>@L"-!GBD΃ @Oh#\o8YYTӱ@st˹ AnIء sŋΕg(5f&O@gԦ}lb^6 <:-c[$._JQ'Z~+@=#@yӌd3Fu@ /giKKoGj,ICPL=G@Ubt]WU=8xb箐4 "*R HFZ%m*du"̈́Kta]>I7\X+QFJ $:Pg,iZ&)a~GCz~n1F*(/v  dQ}>ēE!yp)ID r_? 2"BsE.a{5r)7tJI@xDTD2TB%LE&VP$PO-`Q£ RVP86DISw HhLr:%* 1:VTׄ*AQoVɰ\ tl<Ҩ*Z eOE\P%fC;܈^=c}ˆ__YceGcdtۿAE=*s)>3n}+3ȩЩwg3BÓw3m=HLnʢi6,Pj`k9Q]W5,kk/-ֽ|$J~S$wh[0Tv4k{O0GcAAz]ǐ{͇zGJ wbv)YhTb BzU D[I=R Yή!מmnjMADFюs'|aVDd6'@M>'eic=DG;mx`Wune,u)( F"}^6A eE_٣gEٝؗW%ngnI'oz#݇)OZjNw{j P `s*\/Q/+)i1:B9cwFظBe/#T23Ġ^DJQY-mΡ.$'Q*vIٷе@t<:T3AX.j 8YhQMj +#pơmEҸeVcI0U0|cR]13l[i Y0 v0#BJ/$H=<^)}tLJqL۶P*$N.¥x{<)?L]ؙB`ʸI71?* Mrx|uҖ -kgؚ\Twd5\*qr鈋OzrZB-θm%4|CcK09CV0^Fh{?A:K>tpAw9c  5[{I'ڢ 3\ cxl:{*8ac}ݩRW+ZMs+ܶp HL'Pq͂~z` ȼr( Crj{#yRغ2MuN\OB '$u/7z "SWWRL](nRRq޲~JWʯQ,D]A$F+$AwTPȗFY2.]=Thnt"h6Ewqt&ޭ..+9gOZT}q-Byȩɳ`P:ok#;Ùl;gs7!m)>(x#NFyֲu |LÑvz^XUd!zk񕠨:>ױ<6ȲʜbT&8;8mxW=GaoMF(N6]3 -[LHݸ8t+ҙCRq?˝Ջpi`mZ;MS8;8 vmyYWI6yy@z }vSUi.Gj!1<8qvE_Op]{Tv@fqEevA =_)Hӵ| SYcki1W.σr$MۿSWYyD﫹a*op#\qvȶ8ȠjRG%8yc5rL 2eyW2J]^ire^/zJuaj:KȷnP=Lأ}oݪQ4zEwI*Q}7zد.Z&zgL Q@;Њ# (=*v~AYE*R̃)xs{EcUU*.駂Qϑl#J  2"J|ATHܑLV%$HR$! bo8!$$@@B!]-$$yy6BTDaDII5(PB( $Ʉ$TS[*3RmkehT(R @ #3 b Z;g AhdRFX~`H@E)$VJiPF0ʤ)s1@.*]( OF{XnԝY) `MV !ZPŇX M K-#đ5M |'LMHؕI(.B*))Q)EIZUd)%VF"yiH*$$@tz hCqQ=hAS胧,HCˀWPPI!*4ILovJ@Sol[p\H0,0(8.'\( #xHJBD%)8dES֨ʆX"(R 2F6RhVPd =ۼe Mj|wxxxQ)`-_@F .ed"i)) Xuvqn0ؤQB*&""(fX I"j!Y%{Ǭ$z'aɄdIEA%M%$L?8 ̕2H%D̆ȬH h` ‚# s#TΜiP$_G~cZ<Ք;@/jEzDK tH\I5ǘ$'/TRRC3a ;BQ5p B! FVXPOy**o6vğ#8F@D B҅ R%% HRR- HA!%PR4) , QH%J%4+|F2B!T옡):yl+=]nnHҴ̍ RH#AJ^仒%{m!E1^~D{,({ UP!> $(!̔J@YūH\ cn iVBȢgWhk 0qi4LPB*!ix4- HSI@Ҕ!$J -14DE!LAHMA)DH" "F)hZ)B!RYzB hc$(EJ$ECC 7Ep h^-T~V;@|F&z1! tm1`jz4# !X )XaERU+x^%"}ؐH! 9В(vו `tZ6"ZXB$hR i($h @`Y YLJMTAQ b 7/UgI|qϝf0e5b*S-ViV3qDZ,;R*B|,Oi>վnjl@@}_Pz}zcn)Ha|N[m4@~ L /<d[DJ%־ehUC64Rddd*G% *R7|z[^ƞsޫɕz/ĄUU0$izP\jU$ ; 4@ۂH8&҈6NT]{_noqkNF8K@8;#Ĥ2fxY8!{NnᙢPm}(;`:3 ;+v+E}l5o]@A6ب*_ouaTzT-84-BV]Oh.n HjB PR`F$K (s yC.CD&M,u3w 3(6*@LYAӮSu9=S2nP/즀Jto0$]&!'Aؒrꮍ`r۳Šb:@фѐU|M|g|6CAE_m{67=y"kw9;@"~#QS՘? X]u{<}ː3x'\XjxMPdI_K4~FyMЌŐuF"h"$dCR '41ܻH,7Ӣy<[&j DUrIHPQY팝?),S\DmK 3DMQ DSERDP0IDRʨEs !ʀXL2yZKJ%'QH,P8!z܆sR>Dn˗nJE HW*$j3 G~XLߋIRY4wПk!|4T.߷wzr~HO $,YřJV$*6b%(v8!'tّ`ʩa"U*,# e*c<\F%k"ʼn~fZ`h;j(jJ2$j+NUC!9@iuj `}ʁ&q[^U!d894r T$ U2N[yH:ēYcd+ 겇c,z4GPAM4XWrsa҄|=_0 (A"m^6^hM٢u(oϟ"U&TƮdž5MƓ'Fl8CHR ,=VsA9f"2Rȕ;7g QLr  Ɩx̒-AaZps^X%5(#x\5 j;0EQ>K*T` jD>w1!A)$s]*"Dn-zz >|Me ,ϓT4b\k$bzGzSkl> kB!!93rPaI*fu#GTJ_]p+m0"TADe=LLLD-,E$).]Iޓ@ ޻PJ5gkr3vɟUB4;Ѽ@x@ * @1ܓ q T|0y<="tbOaRfPLf¨zE$ ZJZGѡSǽ޵=,!dڞW'$}*4@G)I.}JuUmP&{_yHZʸ" Cˣѩ>uy<mT^~j zpSLBO^*Pae(m$pf, '\\tTCʚ1r[iZ6\tZ1ZGP ϛkHj,K} \}]Djb*WUQV[-^apʵAE+bȼOEUQԯ`(C[i6e6o ,*˙DOaTjT {X(: ES@8M6"mBEʟ,ApmtK'V'հCB|+E{k~n.?O1rpŴ7fY+(\>C6_s2ax2j{}@"B,B)#-~)o<<,Yab.p;LJ1EUA $tH-9Y:?v5+?M{0 tI N5zu5V¤+PI` R-m--H16,R9>ami<|ui + I.E1#ABāTR1ZQ(}6M@KJA@f9,-PB2 D"}B(|l10970rJ)f|CnT+-:]'jPxJ'C,MkO{4zZEDTxr{ 2Nf%4w>'h ',]55F]pXPC]a8|X`Q4ۛRLmbT[d?+M#`%,~kF;# VRea(Zacׇg xG>6ה9)dNzȲQ,?-k62aIUy4*(RHz8na<ZK .NITdonme iBDR0DX( U(uDn܃Z*cZ=OxED#d!AT$hN*EJkwamUREXtf&,H)Dʨ)-Q)znti"s9i4uۭe/VNkӫy R")qcb (EՆEDm#6FTZ 4S+t`Qg!F-뵐xxsG=.SP&N/Fj1rս~ȇM"L"A`"ڈXX,c+Nv."6{wôb]'=ޝ/N|pӂ,M) aS,'Vݸ:a\O%+mL 5 B'{ !!c ]t.ڕx}}p<"")"f {&$jW'Mnhdw뙎PaMX_l='?x{RQT+_o{CouffC<mC;?Em8DyUxT3J vzS׿[%Loh#m0uh}k2' Xm(֙.G—UeAYpGzݙ,n]ӛ5˷F ۠5aV3AvhZ,(I[&)EXH9,tQѦC(fOOn1DJ,kz$cNĦ'^"":fՁB);v-̍ "(b?2R*VXw_F&0bNMb0 Äy[ KNw1 v PxV.S|el W y(YeN7pJ빹VN:at2}IyD>j}[ߝF~[o bFg(x-2]V6-PiRdPu,̷R#]R׿Ͷ*(ٓZKmϷQV@uH*HT3VI!D |"ff@rxQCVVHWY+! UER40dSR0T#QS%TE Xڈ(T")ATLS,KRJ*+(fy Ԣ2ڔZ7gXD-L2e6R֋vQO6Ι4:RH)UX)#kD(jZl~/*#l٠+'gm i4#}lJ"RE+0* &QOQHy Ş唬:ZT):[}y53(J `.DT+[S] ҂V9h>ɇ8nڔӣ]5'-]4KЙ.1(4-mJMYJJό71~lB}'OC9dś.sC4T5ZO1X>%R(p\˹yA]vE Y*!J˳冖Jo-Ke>\GU:fo*Gy;4%kF3}h]vijo8~Q77 捙ܜǕixLJ]e;yûU=᧭<:{gpe>wo 7Y%afjm-JwUF|BF8VYLA'Cq*ckhR<#SNIAHH2J^6-bc:xI0m 8nAERE>dY_jm1W1G.%\<%(VB(J @A4 ){z Y拉H@- BHʅDD=u|p eh3էzc{gُю6mĠ!FYX&~&&5'[iUDN@~9?~XkU&a$R C燿>fKu2(,eFǞТ[fj;n42p <)Srx<ü7b/ž'4dMuR~ .naY@ YfU ^yII *n§4CTSQ?v6AYIHnO t!|)!3AArT$W*ow: H*Ҿ[H $v#YaV p,`,P P}mB~>tH\k?Q'@ Z5 ªZ*5")JINrSJRLH @!1*PJD !B D @ P 2!HD(z$UúzM1DPF@" ԋ5iV0c1%?C' a .XQzƠWuHeHh yTcۆv2>\0=ki-l0m-PU$BE ЕIX.i^ D;@rJAZ-dmˈFqY2t!R%%)U&t"H2_.sH34s}ZCH#i*A !Ҡ *ӔIݖY HV"EB]Pa0I'zLTNe6@92$k &(QC$*)y͊V?gP+$\#2; 'A-Yˣ+bTǃqZTX IhBBXyE{B/8rOKlu*h+Vz"*P2 NI8fS,̓ (^2IH"2 Ҵ0UDRSQ%,$JEHQCM5UDP*R}ЅrQi UiH&(!% F("***H"AhJP "(B (i(R(bi(J(% $JJ`jSci|8J#B 먰MȉڔjBЁ2Bq'm'ԠtC|4cȈ5uݡSOPIB+`\AA _oFz1adl's-$=3I^hͣf2IU hUgV D3dX,eaD+<=zbzrjĥ)u<R@9;4c"V H>'&{e9!SPb*dE- db{L2qFU":{WUss *F<Eb)2Q8r*D.IX#2,JC&fD F!]0ATQI4HCCHVW 1X!QҡmU[bg"#KY[IYđB(QBm.Ъ 'R(dž;Ԕ WP"bOYH xMyO_F!=OE+6&YȤ+alX %a6s;hul#QAZZ+`@1Hd(-Cs@+ ݏ+ 0+lP'xV b(V# Y ֥hzi)i! '-`6,8e JZ Ydj$fX U c܄:̷ @j5"`H A B )h( PJJ&!&R&}5XTdHx,Y Z'R'YXyl bZ1gè-&E"g(X&<łAy2"h {4b3&xB[ 1-X9(E@ ީ/P]UCQ4B(IQzO&L.j,2Mi12~D M`d*g,_o<G홳q7IǭzjGHhI z=w)AZM+{=/8$?e_=˶nvn'%|5<|<׬.(>lW& (ZP>C!8Cv$L8԰MMΞf#Dق#Pwb Ą8rǢ5>{!}jP2JQBJ(#- BLާWNPU_O4\`zYVz.]Än "pC(/LI* N=d #I ]q|g}^zU//[ɗI]fvǔh(Z`)E@ &@$m+SE4Qn'VD'n%EQ7'm9dd+{\ g¢)uCVJEN8s4 cC塄~\ Y[RZ²T>QO6{sR@Q`:;YptP`iwYFFOj&-3 h3[y| VYާ=쳧B@+gZcchݒ=" )PEUg,E}{q7hO'kHb0EODwBN窄<Ғ@'0 Ő2(=H{=OByI/]>Lm"==KYle 7$q;ͧEjd'+ RJed+Qhԥ!agwBKx)ⓓ|mXP,Re ZHUijUeT(,XڢQ)AV[RlVZJ*LAb+ٶkJ)L;]ZZpmO5r%VV)㵔`ԱbdC{y@xPmC?٩79#֑.EO[: *g~/+QALc5F,KZҽ2V)&01 6u:Mhu%!d FQ8q.'jBZr)3!!# tP-$T҅"R EB-#JU3D@<$2J@"+ҥ PJ,0T4UDDȥ*U!$ Y(;&<c!f*E-h|AC2#hZMhDJ1**CMn 4B3J9;ơFF"d BPEDT R@PpyL v<-&/3 IIc 2E)%ۭ}8yE*@& Ux{a9 =dԆOj%@U=Q:)|/1$*d_q/y_6_G׼ȳ !Vȼޘb$+) dAeN^$X ȤP41U2AL@R*R҅U @.ZIKGik9Pf 5)sqIQ((HUTNUPQ rL2H4hL%KiF )mImqo, <([@P56Шr hs r0% C@RiܺwX6 SǕ.e!TlacohXE'Ñeb cIRjUТ(#j^nFW$) (ʀ+ԁS ) TG!Ma70X;rH2Cz"i<xsؿlRaEf;d@u29kZ^T^{Enف2t=dRo,CׄY'$"!X Q2dQQ5L}(}_~HR93$?{Pj(SC O] GK{ Gh$u?7I<ѽK뚑(s /DLPl+*0$HQO%)GwWfZ*2%'qC1b025|OCh8yƯwt~ :Ѫ }.dv#ppp R2^0ʩN A{L DZVF$qz},kSP:V(aq㙆iy  urgϷ[*%NɈH=8 /d9ݖa@̖uN3f"uV pDnMzp wyo08AejCl.MjYK)N_)ク959{@oOIs2rCIihRs,L%kO1BD zxt_;+|߆P'XXvia^Ț߀YfV̈́FZDDQ " ԑrjݖZlc$))_?F9*U`K,8ܨgި.qxSgnOt"RM&EZYY~C+L@DYm%]z4WsXHnț-Dx 7As#28nL5qg+Xn8HHc P='LoZ/j.H:DZCႣJGW .& dKs04H"@B c=9(zwGUTo(NA f+nL$xf.Ӕ + #*Yl(bv QQ"| 5_2'. mk폵yDFiK<0 .ցTcޝk , N"{j-'eÙ8xOs ,P'tnLCQwHx`9RL>B.'ִ؉FiAq(3 G"46tS(֠؇3 auԏi 6;k0uղ6yܒ/ː9A:rL _xס{up7l"M=Ak惈Jٕb9ѓ+̣ ;{:^FʔT۽>aC^ KZ/[6BNT$@57鴇 S 3 Hy|V-  '!!)l :r ex3-L swտWjYi\ d5WEmf%s進yWs۝Ng XT(1<2U(>2>LLƀۿWOf Ԓl]~ȊCӆ; 5P#G p 5r8PRo2+An1 l2@P`m!3hzQg !O 0ÄxҹiV  ޝY1<)Cd6vqjqxj~?tg𑶴’`2G<)Y{z0hɽg&{šJY_0s E^;L$'ՓTI?S0'9GK1|p=DG ܯvg ^d.d0V#I]e\/]r A4Y쳅v{;"ݾt;Nj;ND䱕ްF*@UczȐ*d M#1sn`feS-ɘ)^KrZfcTaTqV> -#V]?[h<П{偄o-"Aϲ*exx@ezϼ8X}Ozm{P%{t_(Ne]#R)(Ӌ뻇P尛OaP CtN ,ofa~%oP_V09paҜ&G HVsI=.ψ=;wU)'v"#JT^Z.[|@>Ǘf}OR/+ !Zg"h <]h&ì[wmHJm߁{+燻E3HFqǓ.-Ԡ xKw<Ziqc䪼dESP(>Qd:Ҥۄug 8ɧ _ce= Ni|p=1?MG]ZSf_@x⡶zor_TОͰmk(E7S_(vȮ&W{{{+uƹ^iGԽac4R22x%tze[i҃6p+TuMtCbhѢW6sn%Tn%4F0k@ok=P c| z90:@ ^s VI98=n8t&"jL$6- Q|JazA*B>.$TwZr(xGnxή^844v@x(h!H$ٴCrw7dT7i tY/2T5Y{<}5xN1KaCp=r8]B m6Vm$?r!ƀ @*o/^U@7XXe(S#Kѷ=yP6 n= I6MWOۋb<kny3Ѧl'.Şnl*t I26嶅3@$MB;v}ղ9zp^,f#-ȣttu&=xdPi⛫L+ 8m=T`6'D}(/qxx2Qˈc^}c>z˟{C>ww$["!7Gg;kIfQJ O(_Ln?0Ȅ''}l2pǚ؝y Stg݇+,ۿzU\zxQn߻o'˗ ]bq\6@ebٶҋwk-\[74չ wKxå$%OC><'m@8BUJ?KL ; |RjՔSFc,w۪d I$@@E{ٿ 7Y%d,֡F%!zkڀg{\O'4bCqQ(|N}ة\Z(;tB ryzn̕xn ʔx-)Et'N~S)!u+FA]1\]c<0Щ ΍tvg{eI]tؙNDRXa _fs6cߘrc% HVP$ V3c6D %ah .! @!BrQɽޣNŝE͜jOKv@.!Q4萀h>C ]&arCd7A5ɍ?>%!p)(T! ,J>ok=Ф~06"&XV# XI Y*BD b2E!fb!h"X*y4LT}@ La%2$$Dk OZ@vqj TT<*(B  d(.efsrx}۽PbQ鲡`  ?'fi?@ü{~¾'dP ƨ>>b<QNo}g=ҕTz.q'FJOwYo"OD߼;xWSiyuI WHUJ )c!\6 *3<FGf ȩ09T,6nKvo^N!sNYCDP:(+U\!feX$U/OJZimbW$YȤiㆩ ]'HA08>b$ bKg&ٟOja_m(Q,cp!s[gdŘA:3i ^icD)8 RA 5J<" 0:  ~G\-i_F i?BHm)UOó;#i<I}T<0C*nr` Ownt;>,Wwx% V*4zcfO˰v|ytJ!!&_ŻS_1 /,>{u9ߴj6 Ϣ}c>ȃ&U _i60Oϒ"2M"{e*.qBWRuJ:ȝ<4(@!^J#.Gje>Ģ#RۢٱHPAZh(?rUf)p1k{G=/o2P4'"ҩPd@?տ]oTYJ's'B}#MGaҖ]ɒ(~=Z)HʍWfJ;4 y+_;8 [O/=h!xiҀ]2}o J~'bdQVDükIpŊ7,5J !@8[&H?JV آ^P 3 f#ߙA׼k{#L[&aVOP'84ӒOŘJS!:+XSrNE~1?=$>_ {5JHWs.A4$OD@' A!7?)Z *gp30PR̦*1Sa^,?3 YW>`@_稦 PᆮʼnL J;V֬)>{J߶g[ ;P!R _ &^Z&dLI1$f%NN#9]D]T/1؈&T H#=gZxf1*.rCvCV:WEC{g*AG(NH,v(;VLTL0ùM  Y/ ;켩2[ "j)K]͊CDc$Z#m¤1T ȻTM@n1hH$%Kaql.MrQaceFCe #Y߫뇉NҔB7Tc ne1bꩻ JW->F|è 4#8u<٬Wt^@]YW۳b\Ѣ]=jCJYxM&PPOVƳ ?Qj7B(Påx(nʊho<#_AE=n+ZVmZ0Nv'1|=s+&>R˙-ʈf]e B80mcVK4$Qa?*0^v/Yv*ph"]]L $GэE[SK ƪ F&C ^7c<֨zg&tpM(A{vY@HqTBB CܫCg\D:m&{+gSHDy=<(ܮq6@^h(fÆaJOY jnȡʃD-ԚyNYqzS]ؓ3xh! x˓ %oPI@:_.@ )BrV^arӥ wɥrT"2Qpl@FB,R=|d`ILF#%j(]ί( !M76PaOQ,37aN\k/;kgilytiC\G[mhM"+q0Pjs}.:+ 7)@(Y^Z9w0g}YfTgZ\LZ}3g}m&c:,ғ[^$, :.ys>*_$VЀrޥښkeV Lo䆎]^Ujm"8p@vgK78X,߻\dۢ=Yl&8k~=޾yeC/o<7_h(l( ?=F_)ѾƂ YeZ=6_ePj$]!;62uo-Zl™MH\/hs,P {ƒ3.Cnfh@āW>37g6?]IXdRҡ@ (HqL]8q1f @P'ǧ lblϕӧ߈|=hW|JTb)wW#) ~d &‘"^?SCFv Q *""9QMN&gz>N5;'kuҬ ?R\'Nsf{I'4e}=6dT>?ͤ?7Kd7E=CCʞ2u"LQPP8%xN|t2M 'GET7{}GOMʝx"M ټ,OpaiW8هz"l#h)Œ\vJ wc1'~tbH=ILl grAy ЃP!$|rJx G~„$v1roTjA;`;xY.FMo=| ?:~2_λ;2ORVRh`)|@ PaR.cR:5`\|Y @ Q 'KoUp _c=% bc !"_lmCPNTA[/ <&,x/HsȺ( \ؠO6:Cu 88^cř Qz_8&8IƵG܋Hv70 _؏ qx8%+忝GXtdJدE*1p8Lӣ>כּ(^W1c s݄31w+(裃,t?dC A( OAYe] ң0 )1,{0*5w,z[b`@ xTj>M* 3aۖqmO3 6gQyGB)[>4uN]`= H)@J2m~3դyI>x9 2oYWj׹YFpTA/zK/\L쨈0}I79\XGs/Wf>ɩSony fR)ݙ`HǶ}A`phpvxQȃ6^:;×,ga`Φ2xlنnx D@ c(]"czpe&n˽oL&{{ٸTLUCCj J#vćT^LD獅Ao ^\uK-\#AjMyf\;!k>#Z8SI-3 'plEգk?l;ٶarlsfduXܭm)ԛ\q1~oVnտ s&or7%HHy @ MI=Ĺ2w>OM|@ec*Ij&w` EX*jnO79" E#.XU5O-r^L)jNm]X*9i{;]lpc$CTf]:@sR&W6C6y%9H[D,E<9flj9}ΏsbdV|J4_^-}v' [N*mϊ] Sw9aǼɗ"Wf`\kܴG <,=$$یuٗ-\Gdח-s?t"?t@eAFUZ" X?ѝYqX/F>)͑ض\euhsu.9=J/pD/T&65>gn QJD$(Z>dM\s !)J4)? WiӅQ$Q2$!k&JYa+/i* @7-\jIzL1Hyё5@ ?O# @)NIQ{&'d~ww8V7$$pAPG a_b>~=shWBQ OAHz)$..a2Y,Ťs?mT;}?!ؽ%F=Qs)rc˷aц~¾Bbʟ]4$/'IgsC8e `4CEǷWc=9><zs2 8]v6Q#VLP>jN!N1 S|z/(PNE/q@*A#ajw3_Q=/@iEl‡r@AHpUt9'M7nmDj݌QvɊKXP !Dͧv< V+14d2"Tn 9"$U6ʜD+6E :r?EKe_ݕэG-WN` ceiL>fŦ[kuUS(""m =/W;bt S@]y{QY (T Jh2X Z,W &P2ɿ/u + u;>OoslJ;M_0$~vOH\<́@A?n)krade QE~ 2*/߄? ZV|>4$(OeLMvK T6܀+m|ʋ'q0"j: ȳ1̱nPDUD1D110Q:d?7bY(d@qdsD~]m CY DP28ȅQv'DLE "(T,(@6h@#h8 ]7l0P~/sSK!筡>O{68q_WH&A\a7%r+<%J13p( /~7o"1奒n/A{nz $05QTV`m#hVߘ7X/#Fh"" "Z:0ZTsj%b X"*""iX(j)C&0rhIEJy 3h"@C,N~uQ}uc7dX%X= X'XͨHqY>D+m+x7&) $H"Lߤ.IR s&ef!noJΧG|?IRĠnaN0D&zGtJ B]%Mp 쀵ZrŚbCD`(|qR P}I0mP/K%߆g fޞIf/H2fd)| XY CQb,*N:Ώ"Jhf'|U&W7*'*ݧO\;P-Gbm_eN(CN{eKmMvI|S-U=us;* .A&Pnώ`Ύ˙ۼ:k-Jv 9 peq I޾ U[Mt{{igsnW~.=|g+U=ht/IbuDhB3uB?MrL^<E=C'9xVRU2 (b+2K@P;="Pǐܑ NWxE1AF0*"HlRq*d'Rh@2SĶY24؆!>_&>OC]: 9AXA1HPhP%SUQcDE4@RL_2$]#"I_ S@DDA fa$m6A4IKCC3%(3г>T XUBdX(F% ȺT[7 sq5 }}y5AD1%QCS PTDUDTD%A R.<K,Pv&*C`C^`1@` Hd)2M (5s4iIE4J pp4X w[(m LÄR'"H*"xj(Hh")ws 1'= +HhDbJP0c"j2aF" "Xj4}}*UL[b5*#-,UAkPKKKTiKY heҍ .,ˣA (b=eR_!:]"m؈?oѴ6-$oh^GD ۳ȝiMxW t\ ,"ǃuoAma>^*X !<"":!T08Y`s#$cHkXc]x"`k^oEjItOߚxv^ ,>9J<̝8Bf9a.J$^RoO7Svto>.(&n! kXbu9!neMͬ̓9gUb̜rs3MD^l3(-F% m/Gۤj$"JO'D.~ ~ }_{ɀjU (P  N^†a>޿Z\`PL:(ȸK @?Zj#M,p_<k[GG̝N*-ipQAG;hu%eœZZDbjD2]=@"i4>:7'龌1˹<>ZLNGUW i)r=[=t&yQY$ DhJ  1c'?T{a* hd X'U$/N$xf$ZDiҋ궏yG2=7 } U:8~پDaȟpj1 'k"#bdzp`BN m6LX )R], .IDD@:'7G5L {sQ oĽ aGCT)U mTQ$9=/"k)6fP VEn_0 2iaKsUңcxD""lA %;@H ѻ pʆ GR!Jq"sW3&FfbDN˗a,]xY-?II rxk䢺_Uz}ӉBy 7 WN'ʔb΂Q>G\:cfcN%&ޏo^08Q&0MKI|0`0T?|#" I!:4q?ghBQ<Jpg R$ ޔܖ5k[^?ţZ" ^~jVJÜPGSh Lg3xgYe#.-(ZszNkf6'2Լrqkَ.7DNhi ^22" Y$U w<" _ShհX+B 'mK2?کy7 쟳aA6rppn$SxMPfgA" N"_* Ac՚yQ^=9قH(Tw:(0+N9;$O@B srݣ.y v4DOi`\OŨC%767݇"sǮ9٫DL5>VDJ6j~ x¬5߫6qcD0q*}HPNOr;qJ ,@!ÚAj 2 1%x07q Nۓ%hr[?`䯓H@`S5YXӿNI@qV:(Fݎ9BTq쟃z;2>m]mT Br:,?r*$^g'bIザBixC2o*AKa 6GҢ 355* nz[85&,U"w?yzCO-pBpՃ>%+ @{*WHWa0 HnءKTI</bQQ0R4 @b#lW5ś_q8֢W)ҵ|M}?m9p;O~ 9=GYwqc0E&)D0̾e˻|~XoGa)<8n}&YwuY}_,F Pyj (>l4.mT~۪&43>ٴ4|$!s=}/VkS}09o~=}!$'( "pl$+pq Cl+"k\Lxvmué6W``oǐ wJgz f>" X D@]}Ơ6I9:P3Ab(g @I)v:1iDՓ.p^F@ yN\ "sٲ9E =P Rz|]|Ú" vQwHp`i4 ~#STf2]Y0=[h yzn7ׯDK)) lx8\$jrN! ̼B[:$xArq H"[Ƞ"d(/L0qX27Zꋞ p„t(^֜w1fGp퓸RҌ1n.A^9y|$3*'$ D6RPED$..9ZSN*_ڜ4#w,;RI<ω#ό[u__F^֦c CE0@<YQ Y0z+"(ՒAiZ; N:;=Ee}D:GP7iw p?Ƭ&wQ|jWyj)WSwpDH@ddpX :/3Eq듁qGl@4`X ljoVu^mտ9b-8 C"I" s%]sO*O99qUJ12"B.Y(@>pᛓ>Ύg_Cii=ٚyBg yEoY |_ݳP"A*ɓ#}R"("'ӖO@s16&~Q dnlƁrX8l/$hB )6#x&RsuACh0k@kRc\|C!!4AOI׷I r?ԑ9*@@eEea?2"F!2Rۓ~s٪A002{nXo@fT&ia]Z/P䟰cȇK-at{`O&m\u?]ـpO۟=ﳀU2P8rNx>34n lPum8 $O<٘ kID:]_:Fۈ(={'x4< d8h@j 5>RċϿwumsIg8\:J_)WOTz`A~a u6>d=wDhɯ>x\`@j$:G7 {(K! n{2O_#7%m1C?MzZI "R~jx@,sJ| jl\45,4c;Ca94E@Fj ^}(bIQ$F#Ӆiz嗹6q THp=$P>g줣˫?1};>3!ՠT03O=hߝN]۲ N8VKC,\ E)}d9>zвVx\!Cˮijݨ`vd5C #_:ӢWIKrG^NMaB_%acj`T L袓o]z:P3LVCV6 `Cgjk'C1 tpvAj2)@ O}|O?8beBbڿ𳈈@~#E~t' D9S鐿}/IrcKw"jYu4,LW-yO_2R-)Jc&<8vOl1)Hj. ~z R5I sW@ͤQ4Ut2>I?A+2'="1|$y驐<ؤ|^ZOg(a\0!I?]Ϣ}\&//?(W?Wp(Gw1dO-o,DB:wh ̉NN $@T Ig">1` _lM8U<eDI* fAP3f~I8dN/8z UE I UHDhsU>\#u Q)@{r?Ɖ-Wq~Ƥ|>I@?e=%"* Gu#"D'bqe?ugMC=F۠5{@:*a/ ɔ*pA$ptdByry5ߍE:$? yȀ'dzs`@>尿;" n}⛈po]L?=J\Bb *D@Lrt;z}~m(vW=Y֡hD9WvQFn}v0z|k;HݒKBC<o]}YiA )gv)ZhMPYJa0q?@At  fL$r^ ET'˅cxFT#^Uw$ DICWBmrY<o5 zG߹VHs޸%kDKg(e?Ox !wLQ~Ot\^>~w(8 @>w.,9 V ҭf[pݻ d 7lmW<#n7$I׵1y( =7]%9Y\S}= gO% ,ZP2D}'#GDi_) G2T' >HFTOuΪ~=<}2b_zS017UFĐ1~& sH d "@ ّ,D@eO}? U(֫VRĆ({wDI UQfYlP}=is="R)c@P|<"p{8_}U{n'8~##m1>0=һI;L|ܸ( "]I?3=J! U9`G&@ȍ,7-Bz֏6)/[:}G|rPQ"mΫwmQwo_O,%@Ps="*DAZ {ؿګp-zmBX|`[0 v="]"j2Ti(v0@ ɛdA  *PjaPD TY~Jcu _O"kw"9H@xDZG3a2HDbZQ)է<,rm:8-λ2"?PKs(^V{9!5 6]#AR DbIb9L~,vy zm#w.h(t۔ 'v^DFmbq\[]sRD~}X"P'L(:ua2hvS&9Oy CntN{'y1vgv~DI"d.Ӡ|Jx5M O ewH0S(u9:͠phC=vRuR[8GL:D' Igˇ(TMo'ЯnL3+ǃzۧRUo{Pa8pJ5l*[o/_ [b ~q"%Yhǻ>oޘj쾃c[ឡэ?F;΅1N m5;R Q{@,zƽMtl]:L捙-~+ u  مtX#h n d^_4 \aJ̯I~Bb 8Xʐ.Hq jPk~BKin@eNd,OX]D"c:*)*`Q&nag!9ap3˩GaMai%lY C,1OG)Z&G@"t^jf;wf]J3ILVѧ5; P @Ym+شd s_aÔ|8ӝD9ZS5,Iy6H@Y&5j<ˮ V4@!!(A@FD_65G'O$=a(~ݙd cmb?Y Jǚ_A_+.+բL_rZ>վKS+n(̨ByvpOi8G~ti +{ ǫiPy@А41Fs_; ӊN mH(&Ѡ)8rLq4763IHp箻4]t$z ~Ӡ ,yzZȮ_?٦+9Sb| f7 6ѓB:%N߫1LPHT{+Q(@'rT4T/w]V 3(ppK;W*֐  PL$OW,w\ո~v@#.eҶ,!41N@d޳d/~~1dO<(]:^%_O s3[G!8_U|sH6M=0e Ÿٴ@t%l!$?S|g>ן9ttbE&#AB(,~\J:MB[UUȾq?H' 3QsCK,3ִt$ @bI?S$ ̷ %PͲݺS!`Ø ?# "` XJ)*Po~m"v珚ٓs ryAJ/T\LC"_ȀIrC >"B?< EGɱAG^?+4G_PۢlwFnםa??לgV$@h*&CB fy[,[J+ˆ`%+JES)l;O/(*'&S&kz!@oK؈Cz ?sO&؇-k8Gw^rɞ ?}G1$("X *AAzAG&Ȣªb",TB;Ѿ<ϿjEa?ddfk-^~ ONs7jh5sZ~o]Cm8J,iP3u JEMչ֯ !d[hb50hPacƆ-8%0ֱU5"jn5i. c5A}֠_Dwu!Á_G㜆 7ykADO@ r* zeeU瞻X4! BO딸$VE8(]M0_yXUvn82>G۬$8G5sG#3Ҟ.tNx^~ߚZ(Y >ӿ|MuuryrĆ~^)3CH/ M6Cȇ0D(iF40"tr%v Rr)b}|m8 7)ejyv$?.%K1!,~o`~RgV5cpt˧whe3.'"~y@ˠNXvnZ̽R ˷:1O8Z{^ VFR@*$;Sk==2&CEꢭ/Ӯ"2c?67a!Q <%>/fF.fMYdF~sh|_z~δb=8 #& !c BC* d*:x-OO bQ"MʡB#| h*nn;>D!= @9 i 6?r9<+Bˤ*wDs:Nur$>ȳ_`3$DP(}(Qſлa&֓i>GĊbbh &? ATCh@hkOivTivWN!ݚ~a+xܕ"U+EPJBD5TQLIAHQUPLy(AAIT~naP;v̈F,!Zf)`%"(%&HIR;ip~՟'F fŠ8Eh!22yU}޽]P0 uΒ&QALkՂ6=` b(T~ ~cQN=,0^9u]4: ȏjgV EEe&Dd]%1HkS5^ǶPdX" DLEU LDHJQDRQML g_cwmd!Ⴚғ0#)S VŒFUƊv wp3(Dٙ?F /~i3MW4X>% b^T IjɛM`w/ ̯b;|H tb?;^;Q?{ 2С$?M~k3n˟H@?INuk?!.e-w ,msW+ XD`xW ϻ@_J_w|߉K'EP֥mKWãϊ}‹;S|_cZV_A ҏ>5?G3{3|=ĉ4:G(2x$Dq s@J0_¨}Os^!?x'KS4ݒJ?7//Y] H-t^>:HNՌ@ICL @o7( cQ{IB,S8w2ѫRi_UK3%h׏-Adz ٘:$%)W / D!BB3K 6XyU8g`)eh{\'jPޔAO5-9)Me`{ gޝoX+@]Gq#|L3 _*dpDdoD__?qꟳow% C*#:HuI>2i|}g/>lr3’?d Y+tLo?]t:1TD?͌E**G'È}gw1+=?#G$ H35r ߗj Q I3#)>>?xO ok|/ |o ZDp z@N,h`GPy;NUNZd%v&hd@P`@$0!iDlHfΡBH%锥JBik|I1B2j Hjݴ0(xjy@zնQ˲EBvI}x04*- BP &i- 4if G#h.V%;WjRm(1C^eqE٧] AQQ% ԛT 5-51Uj޺|}ݡN:Jh6*MoMa?*OnoRhK)-,"%Lƚ!d!=S !/|) _UIy!v4C0n7)QGW5̸q"(û. v[{?>D4EmJ^S!ARM䝲))tTaH",JW:Ex!H.!2nkݻHt9tLovl"||.<;ZenDž]`0Ξ} ml3VnfP jQb΃)nzD/69cڐ0R$IK:I ֯7)Z̡y쭩 ^)fz`=o3p^:/@9fKQUC@R(T*&H.λDφ[~'@U|aWN]8x$Gun,h0 XI_y>jU}+0\8r7 e\WG2 < ;Ȕ#yBH! J }F$$)*bH  G^Gx4wKorU5g愧]2czzֻ.cq) ҏkABI-;%N~Y; ۉx>vQ<vtq/Vf;J&o_OFM;I }wyg=0ʱ?~6Ӕ g^I%}?kW佱T R4qSj ( QɥMi -kV-Rwb2Q;y~1EjI '|Kœvh##d7Wu7_X=$E jKow?aZ()KޓM=ΓN5(=<7R*h0㨨3ldeTFex"橡4X1 ~Vy袁^$,G܂ c`Z}z58V49h`ѳ1י `#bZ*2tLm+>WqqP!8pii@%]=ƹ-D3B$_7s> дQ+KEnu=j㏰AbA5Q A8˚2RY* 1Pwgɯ]ty!:> qhQþ}ή1 Ez6B<*_dU*s3L_Fov\( `|(8&I%# ]-"jc2.$#~-iS {CI$8uCNx<.& (E.˝$Hzݷ=р1J @(`"@QGN_o wLi{ĚfFw*Je iQFP7-tC=Оd K@6 !֒):R;u7&Ꮗ?B{$肅u @$8zO=_%0-~؜X|ɮ$k!.>*J"UV Νukyw)B+gf w'+,AB w(ݼݜཐ ɮ 1aNa$H^oPjZQ+1ȃODŕQTGTѯo#l,4Ӧ'Y"4I`"-(HB@;&.`%4H zr7΀$ 0Z!Siw+s$SbCH "$ y%6.$_D.8뽾I䈪.%ᾘƈv#" T""4o UEK-\nnr6@U!vӈLO ݇S:8@BŀK*9C-fO+EJ $U"UĹ4ukk䓇 ,йc)*E@@:Ӿ3aT@p=0wίJh"yɡw0jI*{UhC&*9S5Z&mBWOPWlhRrz~IL2߽`̪m@/g(?rTn;l*FyDv d# f )ۭME EjmR&%G ûeX#ԡ@s]vo Qڳ7:|.>G g*ppn(XF0fC[rH@'SLLa}EU$;2 40 (JB/6[cQ `@$& 5ydzU7 1iCX(ʀF8n\s{T;"33ڐq_0+r~>lIlrͅIUD@(HB=βNIN`(HojR;we%?>=Rq z0K"r@|T?BfA|K()* z6=^}JG}7rDjMWmI !UT1vV%S{{BWQXt!0 !a)C0\ \"u`30 =v\8m:?a8$%x[ߚ_]mhZt0EV,L FE kZ](+۵.&rb3jnTD  &eFc^D6aB\&;pKŜoUTJW8 7&^fi~2&JpcuUp*$f`_X~yMlFPbhp]V>7,Y .V eR=" A A'aN-i3XYds(g,ҢS ?vnhLu2K~m?ɱXZ>(0 Q'2emMZ]D613 AT3R$s*8.b(ZoSPBPj,X /S/MF[Vt^8Y9`-})2X!2ܒMaw{wY&t/_Ԫ jJ+(@:HS${!pxy$3e,u%?.] ͝W,>⪱wXnjuyZ6SQd8YZ6US8t0!j8'/H 4̃ ;Ղy|Mڬ@NW;ǶO"gϼ~d2@>2-}'w;r ~ŷ}<f%r}j=$.A fš.VCCB bj7߸^ɮAƔ\wtW묜$]%ֽW!uOQ8xIv.?Yr 9*n^+ ɐA1-U}Rqa^[5^wbqB9E^e=)eiSZ#H(IE D`镒+1U@zqϜ>B{{ u/\^It2@  AP܂%cרqH,VU!^298;Α% %[2ȓѭ}d<=}~W뗤 drk" (Ac܉CԀACJe33kg_92 j E'W֓mKR8z Pc12 ,8R!410@ \? fN0LQ5Ѡe gTXloZ{( w-(Xa]TmMףN3{x~$ն|_OA^$ңVng iܱ jjeQظ,wwH@Kv>.o$rqHvO0v̀MШHEJE"ܷCBGڒth"+r)!*<<䓈<-lF8rA@2+ticֻSb=|"R?Iqju^ҧZC4wqE< tgj'`R߷P&_UieR;xFQT@. ^d4oΉ+KŐQȐÞEF$TOP#*d؃f:#+ To%DvZcg" !Nȥ*MHS~4,C:q׫i!@1Ab<19GD$6- `02&p1[4:jM}bұbӧ/_l6CT #/5]sxǯ&T0k5jO(욐plb}xo!(g-&/:b^ʓ CA+4D D,@ ^ tȻiE#%pQLpd30Q$Bqqk*ls *رF@:o]l6GXuc?oMRQP:hcNp4;a3=Dr$(\OH)@3A#xۗX&$ˇVOwLuC :i @'U(礄߹D|yTߡ=7M"Ö:۸؜v:\Fs  iB3 /7ҢTʏ1@17y>   4I/RRII& =l  IgIv~ ec3t> ]£.틜WFmkrE*T`URVl.8, ,OaBRN_"|X' "{8^wgDhb*_^e TP|”#x bFp"β{N\h 6|t; Tx[)0>Z%f  P<)ph\^ O0RW2޴5w}Y )٣Eu40_WOeU<6\Wn3(p}m梇q.-NJP#9̝1Gk'%H v>JT7өdr V )NLGAD ゐ19 7d ]Sd8.Wh<5${D- dæ٦8g ^0f6)vɠrj$;:y ;)9;2 0`=P [kq<*C {q>']Rg) rxYv{!~3տ;L&MfS- . 4TYG 2R7dF* {xsĐ8iv TdaB۬C]v:ơSvϊDOt^fyR´}` Dqc׬4;C& hj,i)YZ[DT E|CS%Kj9k*MƩឪt$v$M(| =f2XWՀ&ԫ&AC!QGpgYD^P{ nsLWZPtv AyH7=A܋ '#uQVDfi*a `?ӾٵKIJ)Ai ݓUN:Pn W%Rn *\/qMD7KS63QEXH]jsH4 -9tUI J#mrEK^GVd{5$}.^n=Zpg^HWKEguI,>v1`+N0yX4jnj$sF eUh@rHG{jk!G @oFfvfaY*}w&W0+h(3)5DDGڶ8b)Tdj`L䣫VygflU; J-E<2ztKʌۮ9x%/E/ϲ A}nB1J׋Ct\c\=ͳA'g=. GRtaj} c:hֿfyV:tqDw˭udQAE%aV,b0gRNlwܺlddR ؄]}]tCݟ6}0/Z÷ ynfM~˞.|&$;) VKM>N.E~x0[YÌO6HКe @RK&\:@(\z,hPCiWffQTZT¹sN^@5 0C QkLt(~,w|ѨPAB!Qofl[Z"y~( :J㞶J FdFh Q \hdfY7]{ (+dڨi@)X۝&q" Ո!?k: $=ܨ7V+! @9;Hyl%v9 7njz+J*.G]w_l:.2F,\bBevK=Dž6N#$@ X9 zZ[S-٭#qP;8C{Or9Vy<ڐZ>.lU7q >J0suejGgm[Έ D@{.J9{pyPUZʝ~`G I V'K;RwL=|ܶ]|~Ra>=BD@oc6Z 3$cb 1ȪNB3ƝɃ0$<(Qnsޢpx}9A^Zs9\%\<ݴ NITT8Ї&aIM^"H^9$R'ڠ0)a($2-5"!q"jB ^eϯuj.NS Mbf+l+}E/S4_tB ;W?&tQSEKǸfّs gl1W\ٸ2{18wDxe\(]!g&ku:z=?]E)plL4^*3fމAFG֐T78o"9(8; מ^O򾀌 Ue_HqIGm7yFYAp %\ol92,FgWk8fT';[}]Z82;b"Ȫ½&O9ڌt:"hTVX8QP1#<5qBeVq$x?~ȉTN |n x'fJǼn!mP5lC)Io uRՔ3 h #z~V}(j_]c" ]WJ;?/vsҊdeC"JZB Ť,gJk#\|:]*eb20 h` FⱵE2yXZ*t^`S @@-<(-ұB_'` 1gzHN# _~9D1yD7 rEZ Rֽd@QBEp$-`EGA,E٘6;e7*dYn\+ŠvZm*~M7Ծ6QX"- xV ? {/sX]lu1տrS[[28(}XY/eG2Z2E9U @H.3)|Y%قH&j?Tat0b x:A$0YVoU;W@!¢"HzfI͋w)ET5;!+x\>:mOT&0OƪPۘ)p>tPUhYj F@Kjē%AsNf `.H; n?g0TQ5ཻ407g(DȳSAXҽc݆Kn '|I;n_de I!B+0:Z0{]\*@EuO_#_OeJk3kK iĐ@ hqDJ;؛#S`+ dc/|lɰ? +gtO/wvXHQ@(O\@˫8ΡVI,Hu_o{m(lyC'84oTA `% Coo^ ibФi} ܦk4X7xg .Mh ǃ(U\Pw}kè)Tᜥ W:whP^P*AœJZ+/ :/!U0ȩ0%5D EART6_w? B_"}wp:yϺ3(J"놽|ʊY+|>(mR~RHw ע_(ՕϡX$(Jʠ)v1}CUó#_=D@a9 VF"9CK([`â"q CE|2_ϣ HRK2S*L` j s;CUrpR$oՏ}OPÎzTN>c[nɑʶGWp\u2+N0L m]m $GiJ: *Y2-= 4pA{bJ{ 'UC fPUn> ݕl/{{x'X吔SH#4>+Um:zfד 1Zae8z/T2P \f.E)ͮ9X$*T6,T 0"FC`؄CTB,1;W{ g1դKעǨϕhu׷B*E;  HH$A ()xf/eўuOVҡI;&}^Yi9i?ݻ3T!{Í01RdԲ,VzIЎlL"\M^*$)(6&" R"BhS eh"B%dbBEdUHRPDP(PRP&B<*w~/).ˮ^W?7D> j\Hc"E)V+Ł(b]1'2n@.MeQw2xA|dK@q\D ld飊(M W hj*Tee­n .: E}=+՘eEu**?e.oxC~}Q8D Y+ ;mbua})oUu( 0ݨRL+rw\3UëһO.|[C}~dQ//Oa }fy,8JcqgC98u}ӈHJaJ#пZ2r>5]pKyIpDjZ|d %dG8ܠTWz6[N\N\xHzvl.u =e3 9eD 8 pnGXfmVt!hcvH; l; lM*(:|QCGge(4lT'`G%Flz!Jٿ4[P% bnIM\-JgBGJ! { "lٸG򮛪nL(` 4:*r0g ST 0WXcjz۪PvġXIOdžݻ1N~2}loQ'2z)E.gY+qE$Wc÷iUPɓ~^.D>lJ۹ <%5P wZQ)A0eآI(.@Q ̗q%!H}º zvPSNVs=m\3>@I8Ǔ6S*,-蝘SX ^n⪃zT"R ;=gvaskm~ Tv-8( )H:Ao\Ϳ-uBgc95dV~o'o_nH$p PdRa2C"E1ZrTeL P)6d a *s6Ğ;xc'^kp+̀ľdG q(@&$u#$R5,:y(W3_/:_6g?yγ?^>|,ͼA4Dnp⡡=pн+6ҩ6/83ɵDGװ]ڳ$)Ez說^:(% /7dN۫{ ; сXJV M%$ԣb֬ WCT؃}*n!Q'.ɝ(R+L|;xwteCu+a՞nߝz|GI;ҕIYw\~ѣ/ж!1e_AILz&W[LWUٔH I;n6د?7-~6LHè-&&]@*~ڧ+&B"Jz|{/wMh =lʻGP=؟lhC\` @4 ϏHr-ouhޭJH (Ak0Q/yf_s)& cɏGւ-=k5)] F B ǗL6pnKpc5$!)R|gh[xQ!o7WSHFFyM:sEXEcdM:VѶ*r.r9R .Kt:"AB!sRϾM*0G3lfB *YTp8鼺渧VW:v0P`> eC1lLf*ey Wӹ՜; 1цPGԢmKvdISxp:B=Gް)ʍfya4N h;> J&3r (:vd>fۖs"_A9Nr 1glW4lIñ 0Qumצd)s0Hb-\y6*rĚQuGoZpxKi6~'s/MHPE^PRuԼ((lY8~FMxi4u&T;eV[ݸN&AKBL$YYܐ4@P3EDHX2cCdXQEՇX*lqB<^J+90w7s@@!gڅ.Cd6 v )("^39\ UZBy#!+i^ՐVNn0P<|'/jّ@Mt5I ͜3+!A*=3xUbax2SP~}ȫ+3Se()S{ZŀNDI*L4haXL+,)lNJ2)Jǚd<^8℆CGSvJ;IA{2k mPRWqp2BP@1D6XW'%UUR- XQm0 [hSmKh5YBX?NљM2VEb̙l)h:.w iVڃl(`ĤJ JXpLe3 , ڊ@/RL01 š ѧ6<673:Q}Y$(V F0'&wڧ4h2 m B0Ng kC3'0'6#dIb*NXa RT92@ RX -֬d =ҭoZ\]~ir}k ifVk֋y2v:pYHfǕN޶;7G$uRڂ!C2%0J(:0V7V#|f(r0T}:Xm4kX+P#Zd)̀vUw[ )1` Xv&Di"KYh|AylWv"VRVI Tv+UV.exlƝIK4\'a'd,bXC`|߷ۢТ(J5 ]@4"P{L``I%C9,8$Mbܙ-S߫6nB@`4U T+Ijd.a nLa(,^L<O,WKB0a2e XmRE /ޅB,#q0U6 d`,+iY-.S@F|ϝO4|@ t'_O+uF[f4S$yi,eC+yoX(TM(&ζMY}ԓ|=%BFue^ 2Q`t5fWϰ,JSA=.DU0F1KF6Zطϛ'ahkKmNRN^x '~s/Gxtb_$׷bb{,]S Pcd@QBx&GH D^GnWoˀD`~(?~{u9 D_[?Lu:K?5/p9?d糭_N۫6?J}['FP(Ff5G(g |x?^,2\5#]?S#g^^mOKՉ$;~?{Є$!S*9?;}?GU=/\I/9otzXT%!~2c6 T+2<5ҼPȒR봨ʽ{-JjFH -"+G;9O%?(].?[LV=ӴĄ7QGIp.  r"ksnd4Z2=9M}Je7u͝Q \RX"|Dr0w tߟ}v6?V dBgӅGj N &~;%tP-P'(7w د?VnWѿi.D =U/'fFG"H*0QnUqi$yR[ J;҃g|H̤%(G@(rq䏺zs5KJDbYK7fַ,E@?mDMST/k$}:@< XMCYkIpIb}ʸ-@&8ݻߦhI7lu?$}853לRK5PJ~y% kp՝SRi kT3_.<#m`Fbۏ&^)>}Z$wLj\6i\r{Y0oТ{X%59F{5L.G˾dtR͔{A_IcwL}$';L?Wf.WW>*kz/k.L?-<-Vq q<' ""%0kܕ_2;ůӶ=5p^z jCWu{N>.mXL,YX +OgFdS%*:p!>ڙx俽 HO&@ .*=c}KDB哠Hۦ^f'}_nC|r̤1,C6O$=KPH0Wxq(sN͌Pyf3i|@"' So80:>Ws56Ȱ-@sV+*id^p0<j8lvX5KOb-6 M%I |"#k \H]Ek19#}I5WT'ǩO z3﫫)dOwB.Fqg8|QOq˯*MТ{s}z_OK@~%0Vae|mCAp6}ZA)w{^W=ҪKN"&">ahJyqY Y;&}I~É;zXfW&6L zō,7n0k8GK˦J@sdV AE2l(OD`@ǹTGO+ )笇Yӥs/]HA&vOP/6G8sIշW|*('@#+wL_ƅDU=<I}ף_e =jln#gj}Y k̬8L;;}9Nr|K1YפovRfzuVII}3 +] +-Vu$~v5(nKV/wI'(5A !vyN3*NV}a!yC)gx('- {0 M6Y3&v}}^Gϣ>]Op{ Ua5>}h-aPhPT9 ۞عv$a,hI$Tkjܢ\ @r?oqD`nDrT;38yK[@6҆A-{7. :R-H@H$7|K$rU^uz)SQ\,INjZtSZW]?txoTVx o<hpnn OϤ\tm`6 0f 33W$e(4:ƦM>Ɠ:ir1QSrr5~W U2nX<=NNw@'l$n:Hbܷ<#BVD~:B{Atd7cr"? %OBiͣVFvPP6۩lgN x2uv$VQ'>]Cp^kU+V =*#CCLMQ~8 Xj `2u}ui8_ 2~oFc5C|avVY}dTU>_V/h@eOYۼs*rz< "_-*xp!(P%H!iPt*P(>'.c/&n8>~smA7?|eO~ZPg>Ϸȸ(LԪ} C\Qː<=|pvk”3eCit]6x7EHLxE ]a\ X @2H$^ p0we)M"?I V!MG5^ _*J=JJeEM毿ib;HKu I^MψGv1OC^s4t.jQ{~quQB^RtG_A컱?cw,{n|>q"33 q :[T;F0@{_NE,{5%N$P 8:h D;Ҿ~[nNH=" SNd!ɑ˘1'`۳FHΖ71v@1ü,L ~xU,uн^]M4͑v6BjY{:ae#B,C_.xXG^wLZ&_!2{G F^2舚HO,z?tOs8pI|dZ9;F|C0}cb\FAߕsJj7W gE.(F3Fy^-.}x!6\zB:L&\a>!Tsc.vD@B J>mdI "x!x߱f[2e)IeT啮,*Y!2Tpʢ \vaS(#D"3=Wrх]YmUmtqpV6ƍy|hk<`0O #[mQs̱q )w'k'b]sI֝ʍ] ?;x4G[t6]7us;'?=]zq/\ʵ 8)is>㳊3Fl%t`l9KuW543Bdޓ:Q8,b(X:hUOvߎ@$P%m(=2HjY[5#TfHlsQ Hrbt]޶F-%P @bxwTH^β__ P-ZYv,nIכ$Ė(A( mH:] Q 2ӧ!S rݽZ=㔧}t9 Bi3-ȃwYV?Qe3 ‡nցmخ@ܗmbGNHDxkPU6]x{rx*J+ժpC×6% CGm_n"QEHv1ƺE7ODwJv06<gK|^߻e1pן(%38}f %(Vrm'YY"(y{:Мb(w1n# }y#Fʸ"0BP0H68:$l)[)}a/Zqv OX FZɒϮt__MBE T%j8EVS΄)Q9=-"k(w.ezxHIV D X"*ZD@>WKqߎTDURa*EPą ܣ{G Nt` @ } s^9PR jr(*3,E bl%PQYpWt+5땐:eX@Y IQ*!#sUX:.UexsjfAqð=-7r5ؾrUcLTHJ'.Snat9Q\fC"UyJX8ry Sk- a_$_& 07WnBUT6oKVQp:hęg8Cej u#  <Ձ(4v7M򻻕޺B{WS+Ơh:R -xP~;EQ-ЁƷmi/pzNt{pfDA-[s"p`!hBv. E>CArN4u%["j=()۷|'8! AN A1 &OjEAʭy!!Hc<2)jH`HXTA Mf(BWЏ&Kh'"jPnHzO>~Vy0kK= (P7G5w\[}TSj}M B GP‐;Ū߅TyuWDQLui7(F /x{4en;D,B : KӏN5̀vC:4@NUd#;==#5(mV@*P2"B8'd UGx<<6OWųC@U61A{B{/_Bmnز {CGƣl<ױyM]w@ۀ݊5b c0D|(j;`+bcȥJ B j!A[뢮ZwDҮ _|J˄ Iˏ:ذcI*{Cّ2l_-gM`A}6IY~cHfsҿў2< tBB\LsʨUY I@.'9 @,ݷ=щ޶%KbU|7*5L!+jOmvw+T<33@A$eX\B_=K*K5L}iKg? _2"]GߒPS~_[N^_#&1 v7PZXf͍LNѼQo YF7 n}..Y@݅wR sbkd lVB ǃSon7HrLJ9C鲯T7e5 6gghBJh6}T ʨKwP6ex3- +i_.0G "Ȳ2$q"oF?:<~dON ˓8l)v\H ,\iꞏErcP$" XAkf#:yw .vL_w-WC2@ǩtciI`yi=9=$fK$lkN+Yu WeBx͒Oq; |8j%f܀}=(_Q׵S9J A'<e}[.(Cwڴ-{h;B}+;}/yyrBukͭ oڱږ"Q='+ͭƌSZ͇4"TEI7nݰF W$* /W%M\Q@\)q7u-L #BàjxiH)NMK\T*fVUe * YABGE[Xm3qѝg`L2 ;)m!B Q\&Cц k^wP[k~Kǒ.Ts[Y[Y̌R]E)rTY >m\,E]D;\gƞM#B@7u].,$m̒ZV6|ys%!%T8\q о yR֬D=Tz†U+O.]*%pe utH0ƕ}V3cӽUB̑j5h<C|#W4<}W7GTs! uy$@nRJIMb;?/A:{-\>sS6UemXbda2ei9(-i&oNX,p ".C@nTxHkTQړ/h"si<i"C@}+st@eNiuÿ$A]}rA4ӽ́QHp*,w]ӌךԦiYU$8^N+V)լupyڍBq:FA1UD҈ː/yՠhY&`Q[@QryiԢ5O-O9%n l [Yn,7[ࣖyE  %LIɘqPh=y"餞JSa'c f m)\/cJiP0dz>JACwks<1M8N{}HrIiͦ;բ DQfD`vMN5 X߯N6=Іb+[d `@uOW[>V$D-I=χ ‘EOs_%-ШZ&*T"3nC1_VEQ6𮀼1kl )' RTYNiJQ+ds0(/kV'X|<\Li Yci+LYg4<0&nXhf4|z}:A"b$ C^֓u#`'CGS3Ǡ{dMHGfXA>xph$ܢ$aIVB\) `A6jw IʍPʑGEo9ekj4q]0E]%KlP%ݳ35 ޶Wa9Ar5IR.ff6uMWu#[ow,U:D@x/ɂX+ϩ (b t87(sp0}i>@Qb+˰pcc_$UTXZH$P BCgJId ]I) w1ښ!pN\4ݤ{TF03wGӹ D sY6lɀֈ?`8+_rxi7bL6׊)Y /GbHfA}F\&)M/=`I׃  ɸ[ߍXǥSpZelckv*63Li e V= 0Rʰwn!lv{+a(1` @EtU ;QyNlũ)x)#"yq S-OT8o4RӐ&MZWQ|­u7Bgly4)_)l:3c=0*D*U,@*e^}̻9uxnebxD8- -xW5{ifU-$B0@X$|nbӎMuI sj=K$ `"`_/,2aؼU4ٜc&Err @pUDxy9RR(`JNF-] Kt@zB^o݈ukg~D\]h&Jm<ؠ @{oΘBl 팁*D tr෼+gI(P_}˜wgW6z8rK:;agXy)z]V]E &TTGFٚ0âA& ]* Y[&s\Y@{.E$Ìs:I Ju%ӕiSN5mQh](*DbW DB]r*Jɻ:+E/;uZrD !.ͮ砬˗ Gn6ף;%<+QEUIrYּ+s>O['pzJT!\(? 1率k`y!…XaKM貭R荍`hmgDž=PM&U)Z L%=^[ӕn]jJ/1`ud..1WdNW3Vjqqi߯-\˓Իlږ9UEȕ zۥQ wH#1hn3##}C!4ogU{MbV,?*3+ uK4}96,6:Ӳ(݁;F7#aLP}sһY8*QT zoƶZDOej6#֜01"*K@ LQWVBB"kX i"YOsl6[{WraܐPœ.00X *8BPn@P`nf]ae($:(r ASPR}ܨHٓ><ߵ{ipT6+FL\m:"/+ 9X:+If2B!$" (7YH\*gϬ:il]=~C;/)7T fBסph"Hp% PB&D*d M_8FڵZjrOfߒMyrI-iQF*;e+Bƨ6 TCdѕq?qn7z  Y+ >U,W|-H(!asmXTF#lE3+P̨)@ū"ǚTXftՍ5Hp}5 0h7iNHM#&>~O*yz* \HIQ eA :4ن.Hda (i$QÏ/֯Br=`,l R0 _ogo@!i*Hp@ԭ~Bll AЎ!wӺ8c Mdr^vIWmub:y$ bϼhucom8;\7 =Œ_ nZ95~o{{*o "߀0$@>W{;P2dxE8~6i4fAYuOLfw7[ߙ[elJ2֋!qIr^`QPkR\obo65kfDž2;T11X@۱^CV|-0e`գジ$P se_}fMu_vFTOR|1ruGyI?:ǍW1v=ԜuZ?U/Gdǟ54\]?_.z4v}XZ/FڈuF,1ys7nj]] 1!*S3) "7HKܺa! (C/T=?{X_/f+iEJJd2(ƚk-2#.gA|q8Dm7#JkgF0bEC1>7tҝ0mځJ`(lzY;-@Ep|~ĶM'-6ܠaQ7L)%ZE+S)sA"eTP L䲠lkTV1MB _lHX)([(ɵ[PKjXȡY+=l6yQסR)kQ ZR Z8U=͊"ڹqӺ]FTUϖڥˋ.i3Uq0)gˋ !5CG X&E.S. A>U1(X[aPmg‰iNVND4I5RKPUPDFEkDPY*BR Z"]+eQcZѡYDB dXV ^9(#,ǵ6̬FREeRPUAIJJ W$%@$VqDPo4ͪьֲ5!Q%gT1b%h Ղ8udl lR'=֊>yNAk"6jU4IOǘUbĩV_MR]v Rҕc~()Y|+Q+KTYm,@]vd_αʞ7ԙaF/ѢW**&Ǻy[k?Aۓk|ԺRs&s T~|o㹇+( 1",ER V*"Uq=̷O=рQdhJ(䬊z䋢 UiYm|CDHF&R/ZWz@[*Xv"1V1zjXX,a5-Q"-vr0W!Nab[e7ll֢,[u yhU`jƴP`޴:ZAjil3R 4H u*ϻ M2mPhV2X*7K"Yq1Sϵ {S}]g+Zk#뀧ToB*֕i-%mQa,9@DTV*DRE ae deE(BX2jR,D|Ց=шr“R :/NHxyBa1LKZe "kbR¤FWci!PmcD[hb)Z"AeJ]eYy`TY )#2&@+G˜)Nmm XZ;40,RJ$U9U)l:ߝ=gmׁT5%eYLDu9*j eFĄΊYE#\qriFکJkYRi4NGnئhFLi@2( )fhڕRj4/dQc#h,5= [S5Ԡ-gP`faQdUֵ]n+3emDHvJ9ۺyw"sNœwM".eaLlVX,_a)QPE|~x lɀHX8K$L_6Ʉ.0A Rmk\bfI)!}l\7+"ʰA!i{du2gbnɭCp8XA2(F3cG֣EK]6҈ !r](㭱!w#G"N5wUv9ٕ SnC[l"e玢4߆oϥigFu8XБ&`To~&ڢT(c)`"UkUaxpk=@AM rh}Vڸ\XZpY);t镯e”4P"pN@%zu\W{qדJQ"1lYlT !@ EǢ96)i\JX &DПDHl)|uˬC:!,$ǿ?o]b1׋>{]F1bfN ΐpőHG^l~e/v\7\ ~„Rrj3U)%?eãS'Ayleobt(&ڂ" Ϸv7[C: e `Y= fi< [RΌ4^(Ζ19Tоyң6s;r-xV7{ҨLYi(aٚz;O Y6[ЍJtTChγ8ktl!.wZgdI `VYzR%מa6Ͷ*tNIKII BNW9^ͪN'99YYY!PcTED' PQB*BPD$Q,CGvbL4JͶׁOo,e* ,r1FgY N,|UT;͎vD<;|T  xprx* a`r 8!ʝHn8LwS!+r"!P [yrP9ΝyהyBNIM2e'jWK<:7ix-5 E$ ;'Şg8m6=|Tsqݢ4뜥x; 6ӓn ˙Zg.VOgh%B%CX j"di9HaNd>FadUA1U.Y,WТzNJSyiY(~>}񡄋f"2S!2UD%]ʊG2Mj,"Y 9 )$'XzQDMjˇV ,>ѐ$qc14aER1 YXj74,,A l4 $m<,,'J2<ՄJP Y!cZ~/+B%A !Y'}ww{Kdm&ι<: pqޡ߮3Z2`2DJC0 j!儖F*uĈU!dAHf|m᥵R2ɽr}&Y=ô,A3KŚX'fL(C(,!ۋ;Z (Hߘ9 q6R=e< CSE gi)zf*(` ) ambE|wO;)CrNJ\hiN*#bg8Vg1Oڷ>|<~YP{7{Ȣ}2W%C뭅{vYY!TSZYDNPݧ5vG*p:!yPk9&i3o]:8Y*pV!eD< l4v{5qc_0RqmC-BUJ֡0ѥX7coOAJF00a-)j&ĝJ6Mq@3ntC|QF¥MfYï32`V"@XcpsqƢj]raSXBZ\mE*J|NIw{/} XȢHL!Nִ9E*!1D m#jr2AdvFU!8dU2IB/6:ܝ=Me}C&1g^VJɼ(OByTCBcYs8NLb:ez\pt $ K!_Sp%4;lYhßb:̬↵@XVL'o XCxS_9$.SVC]d)|i:w`ddySP"d| œxqiHugQgv<31Z\H/MW pټXɹ)*(E9'4yPFj{A~Q)*RBRHEC/}m<f":,s,䊒;P4b3X)1u(^źCI*E7hVb0EH,D'/Gr"e~XKPd|V3 Kk 1IdCt% J0hJ#gLe3ECfN'Tf@-/n(7ِ0fH#]F@$,i^zĜttgp6<:7G0jBa(ڜb@-7TN 09* @,budk)hAr 9:_ )x O8问AD?#`o($7Ug<=@3&BN)C'3lg]$xO<g}n݉*rXu1{i4f$H R&`!1DE#C:d% I)*k@de@* ڐE` )DUcj!cEUPɧQEAbaT{;~v@h $U\g,a˅ &Y[3ʦ`^h*N jHBh3<wqޓWg(P"=3$kAa%4P>|>}E]ms\y\?f: mղ?QL2֭/"$"δ0v|ġ;Tj8z00jIU 9d8Bݘ7[lq.N{90ȧ;Cc5/ЇT %ICVJU0+l-iX0223 Z)XFdB(RBvjWi[rT|,$h W4k (77% DCs(p%ϥ3 q"/1d)CUKT&e0Q?U(qեRSPAKeCRm d;U ǭ`,KHj(ZFՊ=z ogb!BrI/X~0jLGIA0#|P LJԴE UKEW2bIJi%))hF*. D5AV]Z TRM%DQs) hb$9DE} EH#Xc QGF#LLMSVC)BITj;kjɳTɿ滫*v4>`kfvP(C՚nY6ʋR5%WJdPYȚbFu!IUFl & |jQƒ+{[Vsf#L%zT&E)]ua &h7T!JThZAGPՑLԬ9 75yld/{/CB 5[ÑtP:JŌXB^s;ܨ`erdb+{t9G NorI!Po쫺w!5[MvfPt]:yyyh✬̕ӇXS!] *23X5ƸR]+3M5 bU۳ ES,"ABY-TX N71lېgͤ'_XN~6S9hR"*8Nn8fGES&tò,sF [iXQbF1iH(Q>|=ZkNTc"&Dcӕlg.ǗXa'tdriMR(ӹ׭= lfpŇ6ɈÓu3d hPdA$72J eJ&!Ez(,hs3 ț?&]ZOT2RR6֗$ R$MFT @X64ai`l>N'ΩsЈ}6(3%S5PW6&FYx <tINv7ԙ:]FYt:!#X"(Z+X$lvʠDL `̇;uXl6o󗶅$QEJý@ءSȇy5#n}3+#'|" (yQ(rbL(qf.# d;z}s]==Z'.k|z_@ʔ(x7*Ih׆ϴ(r6kGͥhϺf7k_$)Q[Ԥ!-qYE(Qyj}P+<@jZiɳGۻ JB*@O" @j3^e@lQI8CL*$x:@BJ*xwZͪ˞:r?#D-!/Ѕ4e4;JYAl궚A7|g<,foջ^SSqQazkԝ_עZ?7ɪKɯ;p9#Y M[n,AlSIטKdɞY_!#&(l0 b')Qfo^Sh=dqaiY5rLaז6ؿ>Z~X@r9 TH.&m@W(ul#<$B@/ y҄PGW_ qB39TJIAE3UfY%6?$P!pF̝P-@ XBdQ"eя'_y79s{4S7.-~O?& j)B@$߻|ooB)5e aqުK;E!"!A!B<\F l]w_~JFlCFkCi.`1tiT۲Rj3-Ȥ̧d 3{}L<^1f.NVpb1W>J 9[;SқrB?m)353c4JOJ>l^^uIּThyu UjUE*DUZX1T%{:Zȋ^XAKU<߿~突p`!'ݬ0Z,t$#ԫh1i4H77HHVsI+Yv I*Y"!G9gظzٹ7,5r;/5KoI ! i(a)bj 1܏|AoQDQA8a`j0I?udtz4;Z{p|iP-zbUX;p׻%bIJkF٘'_4Ϧ Ɯyu6pR_dǭ m~rZSe;ԸPXh)oHB ]B}T߬8=%zHIY0b멀(/ͻP B,QK*wOd'fv ee|/>4p4kJX%kYqO|c)hxR0 (d!c"M2}A穧n[}1: `ߗv Ei89dG1*wb78xuw &RS1IS5[^E5ԈH`rK\R鲖 UW[Gv?k/oaTܪ&5Z#K/J[kB/TU.novx}7+mOwb] Pl+w.U4,6YG_n]+~yr!$TIӒ8۶kHb>p W zdz6!}{{3ј':@&?vN*D u*{lSb?p!J ~d(||&@2QA s) ;(A;bpAh*>:GמAym3(?dD|D\dFE<TmҵZ+ B4(C(D}x.z 9*BMC Jpq{bJmXPӖh1zWX{-5'_6wﰐ~Wچh E0XO ۠ZpbD8+ڔۜ* nd:ڕg "{RB ;ۛ*x  7.Y&L !sQ *SJ^DdC{of||BHV) V\gZ. 4{O/J?n:vau9X5 ч DUU!I2\ƹ"Ic[#γT2(9.l~MQ7B|1OOSheC%W~Ր5N0ۼt[hLpC3WiC]Ԁ(rxs6gA4XdZ;|(Q^]lp _E7yvU!7axQ3θ6I;T@33v'}}DrKꨍ 0ͯK}[|VuMp۝gi<5s?#aC?'$2f0DdxS/kU<>a߄{$`'H`Sx<]N .(>@]!j|W%Df^8?sq 0p6dzz&' ,!$[|ggFGQr m KТ"q ,j6h'53I!Tq֏6&( Gj= 'J{D~e[$_ݼw Eq)ѕ6ib|P9th諨diuS)vےFT13č>؂yIŒ !축r})6+/_Q=&?z1D/B΂c_` ,Μ2vl;DCS=WWuB?Qp|iAha;ٵ$e!?Iem#ռ׀uv "۽i`( 4wvRCWF<)g@+O'-7^er,K-6Hq w+ (2f^G_B;;)k?zͅj S[;k_-~r7^΂  oC&ƬU[v5ډ^wy unI\^ٵ-gj6GCMVV/SQ1uݺƍ h{E9(8 -VZC}ZmKrba si麃b[*ޡ@g>r77 +WpwKp-Q@b i7u/̬Qa䀓 5)F9tkIK_tI"1sV('a XTпav*.w1 zUT %$%m$SItll 5TT}Ӱa ۶y2߸6]Ak.VWk<tɒY,((}N0kۯGVi͚CT˭>ճy=ܗL /&9sG'9}ܨjL|?gQў>PĶa |4C8_=<O/Uh}MF^~^_hşwP'* zK1 p%<JryyX/4>fE=gUH?]u5d/cw gMY/J&esX*0.䧪јOEÊ(`'1{ۖz?`!?6RG Vԡo7-4/d?l2~u+?͢ȉ?ŁBv0V&@%2{w( }Ewx_&_Нcʼ ݏJő{;"Dzeۯ/lrALyYb|yh_U4*]_t/Յ2Ոl)V(shZ|_S\h+l j3T4j*0˽e&Urh T]lHET-C]P! < —?&e VFȐ ;7URT*1MC5F`Wq{.j6i{99Ne{{lv@ՂGL*<};# "/ݐ 3=?H)Oi>_p=RAj_4cfW+_<'/s߁)|Q~4&D:|}aG>@`*sKB~ !1 <8xRi_%Hy9[ u8WJPxnT?Ƀ:"|byj WPBJb%ѯ?K?cor҃fJVPU}9RR?j3'GE~)_ïX IC~WFO]g($ FFTj Xqpadb.eHx+*G쨧`Lt-r߬85:Sl%K\k2b#}5qx>#ÁͩsbAv>Π:W=/"T4Tm "Qd{SwAx*G;=Jx6 lygnÂ)Rۓ0x E@,òk4mӴ(<<$V$u dүZ.VE8Os௢68GCb>1Y[G=+/1^tOap3\|BH}lLmzi2g>JTZR; U C.]/²@i%`G;BI'hf2N@Čy?rNB> kM#棫 0SSڢShlJTpΪ bTOQ6PT{À#v|0rt_6`(W(P?b˽͓DvX1$ӆyd҃$;:y~U㎻E"ۯ=" RQ[O4%:T* 40U 7rWlT~8E cQY?/y܀{mq Y,)eP5/t&#5O&XK*$vWV_%L27Q3TSTmonQV0޾j;76@;RniH,ywVN9GCFM OubL8|s Y-vKPFf У*EUb,\;n/@FQiW"A6/ S;J5T?|X4٣mN}CWP~6̛8b=S֪GVMd"8t!1

L1N?2 gCBiuj!Q:U%Tb(wWMҤ>r*k[Q# mm%!AwW5-H*H 16֑xLX |LX> ^߂Pfq'KJW>=տ9fւJ{|]R7C?;bUQrjۯ37+R}6y#oeHCIfhd>9gNϛӕ6i9&RLEܒ5YX[ ,:o&;?'Jl@-SG+$?K@ %rj,_T~3䂩?z XO' It܁5F&C<rd1qP!;k-܁hhT&?q`:5r?Z=n4k9ߟ<͊A>i~H]_c>QEci#,!j5FXY}q@?;ܾےHsw;;eB2K C4NDze?ar#9Y*?Ɨֳͧ9TJ\Ŧ(#lϋgvo$)r2@lekE0ɏbWoU$+U$2+ {h4ŀ!OmC]rDLrnhC*-)qQUm53n ٵ{kQٚkiU=m[W&3Hơ3\4_8lPV-Mz-cfMۘQ)4fU?jutL#=,#f|P֎/]ֆK5ߍz#UCBB_(i'4ϛL0ׯ4} IIh > %e1G3nSnPj}=RoD|?8w#qנ2 E|8z򂈉ӹE  # <@$;umfY }Aٜ>ga١֢jbVfX Rr(#Mf"MK"?6P|OZ䁐.*5ʖ&`>8w|9:~,Fй)P-m,j 0g&43ЏCT'G,&T v+K^GyOz|{^o˘*'{TLtZ!9q>ݞ됟&3?G\B=u3>&v EokDd HS`eAhVDUdިM[iQDaq#e XЁ?!~/gc>s3 PBؿ" "wE4%TRQE%"n"JgGn3tC ~O蚚ip6BiP/_ ]_7)Z?ڹ3-6w@0o2m2'0ٶ!=0x* NAW$j{T4N.`aɭY#3(Y}.J@Hn= H$=zVFyr=9h ݒr>I9%j dľ&e@;  IŰI}ieDO@?A?PVInw8AIg_yG/W_g|{ޏgzl(tԇ(Cth{gx(lZ֒}znz}e4(OA}篽}7ww{|}uTiﻼ=@@$R+([DLTNP ǒ5ح{]ƇnhwmiZQTs#>,mCk9&fUu3 mݪstWA8i͇!ݕmݓwuW{y7 @gT=Ͼ=7=ϞG3VhkndU- &lvm tTF C@tms}+#נ Ww^w7۴GM Ӌk{9YSm ٽ}ׁԑTu1G}ÈnRïUz^p:]ppBww}Z9Qn@Am:TBc% {(0PcJϜ}ǵϔVw>t w_}nmTnw}ow}}#Fס} *Wwn1нv(Q PT}73@}wlB+QZcrgf^`[ O4PΡ}oh/H(P>m}⦅{/}TN@>}Mw{\n}޹nm;go\k[{oݻ k5 TwSmtu;wv^NH&AFwٶ5 |vur붏{47Vϔ4^^}{o=n/H.wϫGnzhZAwxBP=8|Â~,3j0(mN[YB;5o,`@#HbF/qiZ%dy ֪3"ixJkkNWHt'v]R?ѳ 0 P  q6ހa05"=y_IqhH)"n5 NtR T:P`!(X75|9q!QB ܦ novGzb)JRˠw^m@;H'TQ!| G Nni@U7Ӂ`hPk2մRD N(C!G̖vVtziW*5ǻi=:us'D[Ab&xQMSk:L[W?̽<@,Yhʾf%F#@3%D4)uj I2T TXȢ%gQrU dʪUIhPe9qi$9C*A( eS\!TGqNo7Z2eC"ŏE5h pp*  @ Dfpr ;xF{:ë„ВHHu>9rroXyw:;PddLd$h`g\PH(X{ǹ4J,2iViŽbj"ӷ!;e븭O6^W69a﻽lt]"5մ4-~ZuiZ*F`.<C@cpG1xٽG xm^vj4\x%XєyŞ~7׳v*5߽o?z@D@n+/تgNAdQb(¤:#@b$E̒Z%+(!NYQT- PPm$ѱ `EX31ILEQAHaA4PV ("^1Ub"$:\ u+ar^#֭IiaY+Gj$X[I6kc kuNN$TDE"DI{B, *U$YJ$T]a5ESDF(wrL Bji,1)Q߹p_պ}ZH7Y^بum} 1Z!UP}db2';ydž-Ƿ䭺ۆ&v&Վ<%h@Q;L+du2.…*=AȽ[OG b'8>H|`( -q4Fт?Ovv|}辭Key-DQiJ n3j, =ΘC?'rs~?Ps؛Q ^$EM ASTTDDE5DQ-ĕ@Q0PS |7?7GSK'俳WHnubKڀ)('.,yjp0JwoDpfW'g[} oyÐI `,yBJPx$_4wٞyyMH E ~s(%r#<Y' 9^ꈂU SA'1h QҗޖEw!E% BH-3EQE(DPR,cu] ,Eȵ險0ҍ(X(t"XUz2;'prfdL &"ο~믮Gc>BhW].J3KJ&VȰJ"޳Jw_=lې&Z;.z_x\n ;ۄa6ҰΘt&rņ "y爂'jzEz!sgŸ40z:ʸt}|_1}  1{vGBD1kI.ۙcÛ KA :x{Ce6gFA^$-+-Y0ڥQTi]_Êp޴-wF:ƹȩ|.'onml<I*Yn6kWvm63 3 ._D"K7'ڃJ Jx7 *1 w65T/B85`I3ݍ"&!"Ļ5eٓ}Fg= DO|qC$eI+m/3BFPA Ɛw:†!aDz~}6W O܇Q4ʑJG'pɁ#Ѥ!kMpO3IJpj``E75wH#هv5;w£d$hͺ8OQgkZ&As'Zh|Y* n :ezt|KW%ߓ><[WKsE7b &ކHѸc/ *fhL]?'1χ#^TSL0bXbb7Dž5ٳU"=5f UU!a/OqzxCEՈn&2((Pltd 0vßy^ֆA6q&|1B@$@Lr !PC{øJFp}~fCkEDD*CD^)qPgQn 80\Q+1"KJ亓/*`"h`V*"HBHBXBJr=soUX\t>6=LPTL@(H$j1N -WeOB\Rh0)AdK5^_kҵ^4N4D*6mмDXe}糭`՚ZK<Z m*RP 'qr5F?8`͘7W ҝ^ 'JTA|2;<:HՆz,`,5K>.|_V[J4`HK3O~Oɧg_.e{1ߟk󇹋HLEjR-6+{;:疜3R?ele\\ŘqZJ8*֐SF 90P :wwaڍ$E *XL,.YC~1H"EP $I4 t'ќ2Sĩnm0~U8cb]-3!mASd1 ڴAUK5(Vm2% 1@ )YhCxBIdQ{]I/+ deKW%՝_V 3cx px~t-NcL&m [piu[qXTE$5h6=`v6 )0>'󏿖9DDNJb4H%~fwx6𐧿z[H?FIbUTzk>#(ض7&h=;Qt\)¥pJO%mZᄨj:5hG<J4!X#1 Etn=|4mUNN|Dz~@LH!4Pj!8:dW<&@@T`d@yVCWq5bbn΁Kͳj{Y bfD  9p)[ +C]S(#I3P' sPJ4_? /:yaSo*A[~{k!mCH fɐGqY=cxs!vf:mQ o poFw~tc-3guDžrP1r8%2@RH lfGJ,($(hsB*FِQb4lI]eEs 2-+@P51[ȅ5JPd4Ҫ[QP)+%fTVE wJR &,IC`) J"($v0+c!J@–HX76YmDK`T%&T.E}`ђdd('89:`mUՁhWT0YvcC'PMqhš d(jDl]E,R*P(J5a TFREǩA [%Hl(O3)9):Jy6WOqDuɦ߼-[booF)OVJ12KJ--aƱ Te5(.TŻwCVԹ5s?=tUnCRT ;09SkS=4C>hpJGE8Ohqsإq#(c*z^0k{o{0A8i-10i8!"_FbpuvyuaQ 4J|>ol]miE^'Y;iE{lzLaxG%,woݭ.B({(X_lDdQvB)J7[迉0$M&NJp9wPi"P=pZΚN%Ehb ʢ V (ȢUN Qg-Z(-,PM-A L 4DPYAQ@SK %jUJTXc*%A@BXlpELp|-I.3)^Lnw19>o7@63MKU@ꆜEk(#%[:UR TS⣄DmugysZ۾xq!0uf㿪J|/v!Qhnsk+N؟9ܪu)H@;Ձ_d ?;$ƛ9Ҵ'Gĝ @݈;vf8t<ε vTڠ۠R[\ !`\(Z=JuaOF1jdn1Vd<܃ ?B-;(: E קw͞\mM6`:sY`2YpxL@1M_?>浫գ2Y*?f?]~U=5S,gt,*ߕŨLD!heA)d^EhRhwE"wrgfͤvgd=oqF2u )% 92"Jf*b&!8xV80ᚑl@QPoD8jm-;zƙr S|dD$ $2ub@vB,Cz/g? 񕷚{hZ"22IWq\%,͆0{ v>'~Dۃf5 ~B:H(<}14wE6Ϣ)TMxڒ̀HovH`YLW>^ )@$ud< vGC,U}W$juҪLH6*S6;rL$)? ^Rw# "7ɼl6%Qm#&gNgJY(uO2jV;ne!xDivb}YDIlkti4; u[bR^=u0J%f9^\r)zP̉*oUTq&/ 6olDS 09Wӥ N5j$2Lə0$ppk{zFt֯#U-âے#gcDXqdHlyoO cfhCѭ '(Ia*I=#Vehs+ux+}YGYeg"*B`KGuҒ+.̫SM̐Qfo?Ǟ͍Ž)++*{iFt=D&ߡ].73ٛ*H{>Ƽ8߱>G֫~M.[^Tjm?pﷲ%_yHj+3{8Ӈ:x='b%IHKI(ƹxHDC ,"1Mdk+ Q')ZQ!x$IZ,}/DLJ'ta9Tt!1Ȏ9(^p(^.$ j4 {־CTB̉d7u&)[y|ץg016PNNBP,ghtJB{GCo h`1(@I@B$$ 3\Mh(wCQE6;[R(a҄L5!fh2*tb c:TwhM LϦG_3wP8 =>5mMdb;T|:R|r1\tu3fY؞m8, LpZXy4jз\szgB$ hpyQ?-=\%ݸ(IA}ΗarwOg 䃐OWǘL#M">@b Q59ʀ$BJRL߿o{-`V>34l!1 10/8仲r%"r#;^J^Q:nI 'M9?ZWtԖmگi[Wp:>G;η=fPDJS5*cv-ؽzt~xcm"Hj*Rqe_#tE85d]MN} ɦ_个'ϐU8pW2Um /-h"d! ?e ӌQf kUt8@H9U.33j-ڲUmy= gׯlc)ב Uu}Apq%nwwCEֽ`` 4 0Jbku}ءa*'i$@Ǭ626mtEN:Q &vN8&}dy@ @=/kD0>N#LJ;pP4yhab`V0Td1_D,ysM5TLR*k*!K;C`#kR?24oYC~4#ȞI1 X-53&z_($OԄNo7t93ౡCŽC # (ur( llnxvq N:wGȶvݟM ~eQ@Y>:a'Lp1}ϗw !P2At""a Ђ*jd@W"J4HЁB Lla*l;*8k&B *2 nf`kdYЕ2@ 䆎ex\KBD[,SpuDmD{LsXZi@efVJ5dHeS,FeaBaåc%]6cDAz|/ȓ!OD?WYGUSYS&QL5**kf *4@k|*VĈD$TUeÛ>Ӳp^5c }^{rSI<УWZ*jǍ; 3/>̊%5XUMbL*"XoKzGhdbE>H*ȢޝRz!蓐1 WX;TVy0n>s\fxtI f/7"lِ6`ʍ&F ϕi 708ҾNʵl6Pf*YMBGb읞d @_bd=ԅƁ^X@R@D吀Q @RB=}3/M WQG{N` $PHkvmUŴ N&WB'Db@ +KXw uxf0n؂RJ%k]TywktZ}[wY,~*QtB2ݒa1%Lqww< µ`3 j${'#&p-rT[U?PJz(kVH4N =$̰XSZ('IrOW 3X⽊{:s<}Z8&ηg wZ4#-q`hFźdZ}ݵjk|&"09L4 |Y+'?RROu?~6/:O:zcU焈E48,0#qL7SD)BGkC(>|ԃ=iM~OkI2eEM;C??MJCY^Y:)!qĄDzr'FMc:ҾM[Q}nUj} @Ʃ#|IM'KgSǣ٫RI qF}Zi xQh6e}"k{7T|/*+JtN{ڨWq>2߽σ146")2a[= -QHA {&FjO=—[xܺ|Bl ёq iqY$L>xPX>X%V͛^@*,W 10 y^fp;7!OL> !H اz{=d{40 vo "! V>g0vxKc䧯Cgb 绗6^ޖ ԟ63T8 +;;3EhjXcھnB! -H‚* |R#B=8Q>7%"kNgwe88Nkg!wwFl ,Dp]V3S[<aTͧD?}b'*',,̢' FGCH@.+K n~QYA:]wT9EӶl ' g؜G~)UsA²~P`b)SL' >AZr=Ua`pkhZ XRwGiTbxy{Ο:jrq5g 2aP AgvoVc?[|ᝃ*em^\)l:dI)=5wOZ=OGb[ּ!! Bd}g2]|AGU_'q&Ac{./aɑ~zpnh}s ;j.Y1Itoz4 ތ ác YyA׷wshצ6V;S V-m ~MtϡnEM#rFY(tx\S\:Ҍ BZ#?bcYeg 5)&,;tzY#:Dxmj/4ŋT5c$1Zx)T7mՊPG_c-\y]'xB/]k{5ǡ1J"C4_U[-af9G X$("69$9=6<)ǮJ*.a, )C3EEO 5&Lx3XV yt)jR{~m" t?|n\.Z$@d<}ܦQŸ́6&i@L++}# fnA*Kf;^:Kw6.ݛ4D= q1?:^ȹq|KNÕ\puy^ʩ|vۂfv%j ԈNnvl_~7˖p!nT$$rhPd uS{PF 'HJw%a<-F5p LD@ɢD<:'vh)| E% G=3\wJ.N5r2vY^DhG_{FYj|P _-\ ӳ WJ%$\5?P/cxv; aJǕ;īcu,ڱn07ڙ?L5iVIyLw8 5ZJB@?sL+97Oػ}pi*if:GmqH˜pi9VIHIKe獳7wC}l19\H,$}Mc 򽮼R@2ZGК"0n9zRMt(R#g­xx]fޏ/wÎ! $ H(C|D\ +Vո>+3%C+yq/˝5؁/M$PK#.XMj7 "?MY!xCmY+Ci3p N60=n>o/&o}bl[c_E<Jg\ ?Pc@b\RAG'ߴRxb)~>I9BUimot de|顤rhnEz㦚gq_X7;ιr9#ti]J[^s0у+(NV0-!lVc(oׇ5M\ty.wzL'U]:[66/BRa:A4MShFZ]-rsP?>iyJ- ~?YK 1 ( [wURDu -#A:jŠ%dqp3'%lc/}hZAN4rsP[vH֒n*cb4 Ets"9H[7}@Ps27mR"U$$&@4"(~%[f>NLOi\ mVR9dSSU9qT^h^x6~a! ҂0A9m`i}$`٬{vJ۝D<'NpAGvZ+,A2Wvq^o(!;xh1|\_dPdSH*OV;u`< `1%طYkΚS1Ca W00R<ے:>[\__RyYeYڵoz^lwxO}1RI=IDžIȉΈx`l;g?{7ۉdn l)PZB&JK>͕'"pZSY=k ©Dt$N@,W1CT>g8.(=PWUt3<zD)N1Yunʐ띄[Iqiڷ(72ȮmCeʽ}/mۺtcT$ġ:fmʩKC R7VfޱpmD¹;H[ |ײ+kKknoYeT>4ё(^'Oqqs3kuUB ks>59=n {&OMZo/ȜUHjs?OV]k /_-AN!B",O3bZxv zB{-?7\mTӍ[+*-_$hL&a?BݣWC5dTC= lFR/N87Cko}`62H׷4y \~G&A=bGvH(1Cuka>0܎7С*@G<-SAԡj#.JpREDP<|H` hdZ:U :ZxF)IwO Ǐ?W(gʊ|YN*$>ND/II67?cʍzOnCPz1tƠBC8v4 3mQt*r͛K$9GfeXAeOGY%$]3{QʙnN(',*'JTΖ88}&$q3+O+gǦH‚S!VXHs3`ʞ T_O[:H_dI^pDDu9GᰈJm*̠X[ ]A2k zt(2 Pv` ZIxWΒIn0 d+sf^ƪeH;H?dp<$t3 h?sxWWD - w$=Nq( "-k1spwm،&}&Iȫ $Т ĒQua5oΣgBqIٰV1y5Pb @5 I0`o7}%K /:aB^V;=vgڼL[|HBҩ0Rҁoo@ADRHn‰9:.`[Fzq%ІJk-!4@UqرGP_xpŰ&dYkWMI]YfoU!7=IdV1ڏ(. )ˆ7.RvNkԪ2) $@Q(*YP^66vGaN')8QTL7ݤ}bzG"D=PRx 7mh]k9z yRyp-%vouIfXZkO.L k|B \QPcL/d;(1yS~8qU?c __o xL +mv{ 3* 1&3;JD*%EPw ;B!HWH% :?Fb-yZ$᳧ahB3{R_pJ跈$%Wyhҟ FbLML{0դ*~CV^ (nYz:oBvq% oCXFC2ӰWb"JU{A!#2xc P C 7jxP  #zLN!6$fWaמ-@=UMKt"˶휈Bg„A.bP@-޸3k;C,=tNE|}-;.GdJG3I Ϻ!UG;&!.N"#U:RP VK)`K-g<ǫ=Y.kKUؘ̯0lAB{}}pDO)m[ DQjUeVVv HMrU ԥ6ɕi alaTUQwV .[xGü2$@G˓PhHg.#xj4w;#z*/OLPQ}@" Ԥ7pѴPwsg_e1{ L]A֬8T E_s~ r5, Kj[]@@#X\r ɍ2V( ԝkF05uht|:HOY& 72[|&# WRI&>м*GVf1`?7n戜()a "(xh*Sij B"Y?؞P<.#J=W1z+"` *hGHEPs‪N1llSsBw"(> $X#l &\ʶgXUQ_`MaM~Pj@F;( M U4{+No/Rc0U5TЉB@$H+`@|􅝄[Ie !w`Dh@2t "IACRR\X\Ȋʆ{]g-Pu?@ Ҳ*A9-(K$Ƣ@sΜ̷xYG20v}j.L'q2dfm] z0nDcmtvw{CxTDEPE]H 9 ^ p26T7=-28kF$!,z2/6A4 I{h&/&g¡l{ߌTsDN@FRB~H cDBe eɒ_FuQ:i 2|HW.,xU2,gh-jm0h! IjL^ Kǚ՟OOmOrI"h4uW͠5!t_?E4PME:S~w)|mu&gVy/ JлE R@=àaz{ߘmǂEF2uֲbLt G[GŌXQ3ӯ)$XʧhWsJXGUZ욤HA@) 9Ĕc] J_NՂ+ ,AŸQAzcC /G-`1~ GR` zzq>ۓĢ3I$./BN"nN,˘S]ŎO12IQEZu{ޏ#}QQT1{}P' pT&:F&)JbbƧnşiz0 i*Po=Lw';ټ琓DKd9Ge$2! B$%3"{ZHpm9St4ieD !"I$P,!8)I$ֱ~t© '緰xMADo w= C&>@+m6G:V)<0AG\(5ɿ|Jdt6Ey֙>~ޘGT-z¾s&c+}ʉ8P%8!9l$XJK>%AXA ע(P$ b i)KBN .}PTPCo&5툪NW}?uxQDFU_Lz0ۨ TxEQ t"_\x=~5k6߫r*] B 1m]l") M>zbRv?7ny鯶ZGxw4: sxT"DJuCOFC1ɃE_9'4](7&wxH*:)G0 ;"{(k Ъ!אM 6T4 _oBR t+LUE5Q P@Ǩ N``ٻs QDIB K01MEcAG:i3xAGD_Q$CT TCW{t=޿>(>T@GHD:aVh" ☪DCA?L*#/à* m'Di`XV4!(HJ% U@C%2љ$wpH)b .Ta*!zYQ>!N m%B;J7> aa "dZ BDZus3 H*)|eT2E)U(qdž&-4 Zh Vm eTh 00!Kݲ%Ăm0K*30ʚJ32)mEbw/aifZgYt(,=pbʐM |G2;p1; J('"NV{N#^tfj)D&ghWB)b1hy➚ێaf &^V &YQR*) VxPE1ACM- ̋R-%$Bv#s& ȊoJ3iZ q E抦!@)Tji)E(ZDPQRJJ iiZJJR"HJiVZAhD( T)DD_9QABR8`@g. uh*@>m@)seN"v_Y^qPUI&Qvl:YEzo Q>A"X`ji }-Y RRDD1CH!11/HaE4@Reyz2/̵WSD$ #@0MC% bVDbQ)C1ˋ޴>\M8"ӠD=-T ::4Kƨ9Ыxqؤ{K×QNj@q({cǷ%!Di~b N|8N{쾷@S.0 !C>; lHPص757Gm8xIP/4Cw`i4ԝ\5 o2 !7HiCgɫIز"T[@%$(*14d! ̪ RPJ"J(&B:./F`vq"ӳ0>=ůe=D׷\`9wQIt vkǯBqɠnBBQ|}͝D[!4(0*jC00Wչ%{",8 A䗃C`!`X(X%Hp"ZD2`E@I2rw);{>|pdyi8!H,, }3[*۪i*RRĔox]y{^Cjb j+so~Si0FE!f(Jh "(X)*fh)))(J" " !" ("hY!C0 "f)b2) zF*(ZR&`)"ؔHTR kplr߅B$JhjlpL 2@$! cBA@" J TL]'UI qVY^p=zBz4DTK>lyxnyT9TRP2ABx˄#R'tWFbTۧÇ(O?>rk0|Ah7 J"ƭ)h>'w5Fob=`%I/ۖBf.d-B= a(0X ZT-jJ RK(ȠVh,k\W R<&hY(VbVQ2(Q%!WaRRDr1hzy҉C813 9~&fPb&Np8l\IuwYV FC9UDamDg4 E%XbG&E!CZAbܓ%I iZU %ab@DW%`FeL`2FMJ(("Bj " hh"$) db ((8P ]'dwn6`*52Il*bj ME\,1xQ-ߙ~varCѿ(Ҋ)#"|A)( "B$*$Ռ=QTQ%IE!0UEI2RUU U1)M #g(wawZ(@+0'[0H@(1Iӟs Pҧ,js,޹u 3]{7`3tx3N\d\;hw.'w;۷4QFT y|zU娧{,l+ xx=hҊB*0{&Q;Nk<ewLQU4~葩kǧcLjdPU[YSMc$~sPxt{W_vKi{NT,x0UB%nu*p P^% ɹ4~ ;aG|ϱgs5"J.~ZQ~אTGsI*!&!)(iD%h@ VȌ0JD) \DBR*&Dd J*X*!H$ X!ff x`;ݹ0ޞ4-'.f㠉9l$Q-ٔ#&x9CCsQ"k:%;{ѯbeڎ $x+7KLk_>iY8ﳽٿ aVd*;"jh0 -^J8[c[Uع\bٲ_$dvI,JHJiUqgp_T=ُ><+ޅPM/%t9&=[:P n1$d峍j BIJ('TX@k+ՠda:>e^凜yTb/˜{j啃A«x=%.򽇯\Y=#fݖ30+ `Tkz=qO-ZV gՌO5Tw5gPN© |L)Ru/ƪq>-0>7=y'vV jԻF2;4yNZkf&OcUT|OVxu9̊zj&hYwvKjFO0ѣ`7ϻj_Al{,/9=thTFAݧf,w;^tY66 [&n^ xjPNp̘tA,^ʎ?OW Z, C3r7 2W5)_ \}0b)l-Lhx"őbSRQEPM1oPQI'\fF+%df]V( 4Nҍ(ld@U2IKPPUk* d4C,PXENZvSF@ $%m(X^s/)p2Y+*dy#bAR *"o G XQb(2fQUDk`T* Ym "&VC&JUT5HS/9t<@XԞ&g,T2TF UQbvڜ2Nsb~/Â#yx{_Mow8J> h Ji(@п~a!Q0CD0JSKM#pI(YR$XaId Y! iyxz7d~wɽܼy\ |UPME2z `iWD*;LB=œgeH+e_3q K"V^g-\#*>=l XyO/~y<;KC{ EAA͵A{wT)hB-B YR]ͳWm6R2}X`c۽NԊ g#LӈoK^YHa@,KjlmsXбRҕ*,W7m,R +Z"1jȱ~q{^]A[ޱdIdk!PRZp |0OX)+.P0h("uȫd#$c&h]Zrh][U&-Mc*"1F")TFX  krVɇ1M%b8VrKUF # UEf0UbDʅbB2%mEV1Tamcҭ PDQdXT!]K#hZPbP06ZUTF0Zm("]ʼnj&kQe59NY]V%DԣJu(:0Umib"AV]T*ѭBdAԶ jJ2G- nqw:f>&qh4eH&UXl1 mm%J#bpͅG ReъJVɲ1m(+P2u hXf\[k%VJU-kZ.F1Kֱ[J5 KbZQ[dTLQfaRL[MJn- 2 Ed+%VҤhbXdD&hlce벨JިÍKyo uhe#>|[#{O^^]J{{y|\r|/`hauƥ{Ttg)O)SKе#^(0H&j : {GsgGwg#\],8 (TTE $E cÂd ( ݻ5iJ* 9AIBZn>R5u04l@2&2]RoH 4 *"ɬ#<`6T?QS!T@M Hk(k} (A]gtO1[-LA:IUS QW&F!bUL 733@]u$h"DV 309@/_K4_\nV%^)z`u #01Sj(i*F ** P J*BݕB6x۪% (Ap| aq\!e\zͱs7D)A %!@*^HP(@bJJ"D"(/h؉I˨UL 84B R"7sF:F֯iC Fi.V&" &`d)@Lv<>yv;ҏ2yv(sJcq.cUSBTV =cYᙇgU`h&ag quNN VE 9;reTCl:<F" Y)զ=}*  mFóWREBԯ5$GOSYa/ӜH!Gbٔ=d;+gӛˆK$S~~wyy,!qQTmFHƢm0#]߿YJ&F@c?,y4 KDW,+"@ ZV**̤,DA֡LR"1Qb*0ҁQb[l Z Mt -FQKbV"іVʅ- PJV`j܌!ej r  *`j9N4LVVV+eJ,#+=-d6+!$X*%VQP_6Uإ&-%(,-*B T%I B1IE0g4 ˛ tHB}}/u:>.l.(*7蛶wrn|v @@[U=bbuP--JU=xcݢXX{υ+UQv_k]J+Yx+ANt6\/.K}Y~\=!?dsMto'Z{O Sٜ1*H?ʨyIC\Ql:mBL>g A+ٷHfĬX6q;zssZԬj6d| o8;B'IAI:pD B6Ag0hy3^yTPytb(.PEg<1ay:-")BEa C5E=o,Wt[~AZ^4 MHQ4GVG7ѭM&х^}Öy5bfJaQ2Pj l| PDJPHT1 C$Q,̤@ !% LRD5B@Ҵ!B-*R-%ID D$AIJ*B4Afn0G@{Bxf~f)gͲ9"tuiy@c~^ ų@똩4~7W='/\`D[x"} Nwd< {{ȉwt}?] ))+5J "bɬ;X IRޢȠz1$AIPSmIs]>nk ^ia} iK8c ZD3M\ʢBBm\0rd@S".o9Y/q/.ѡVGί4Nl[sK|mfCZ~4*͚Ϸh~FDbg M30jqW=4"-($JҔ@"4,@"R@JJD 0R҄B"E ozoPАvy@9kA#b"(FafjZ "*&ThJIfZ ) R$J((("(IJhJJ$J FJbd"B$&*" Jhh&)YdZF(`R!)"fH)D] DD!$!A E T3EJAL+E ALD2faOAʈ"Ra()MA%ġM4SHRPPT1+BP$AB%*LIT-AJEA0DD*TB%JDEATQAA2P#0I#IUґ"v$S|W%@6vvvT9;rrB ;42P U!UPIE)R0UQDTHD$IQKH- DT+EW-#@4 .BIЀ1I[7d*Vu+% 8D!:2V#;V9VƖ4P 0Xsxz9vz]0A'BM9uV>[t#IC  bED*8Smjݐ"mvXka?@\3b!G!#2u"1wѶߢmJث\Kb%rA6=ۊDxT^]9 i6RlBWH%/[N' 3*$F XA)sUh81ˇDyT)BS1A눈P`F_a/W_jF J!ʤaV,|*?}Ů;Re,{8Hٛ9FޛWkIQN&@\hg(r{ec` k%9O3w`(bP|qWs&M#\6w۟[!ުU\la6 čN;9;L<8E)=)pP#=X <8]y{Փ/k@6*!&k@Uj87̕r|=)YGaP'^߉9{]߁CrwI|Iɘ`l8Fcݾ4DDIzm,\E`7(*"r^HX_fj T d_Qg8Ƿ#cj|D.=z]Ͻy)"Oܝ};0>??/u@Ao\.ţӀ v`nf7#BJdcz\rLR*`3 ;g}}ֱXYzvgEJi s&Ephj7;ي_ r8O`P("T pEJrd%7;SxBT9AT0b[V<\e{NdX!˝llNA#yvEX@:VfbkF>t9Ͼv:Rv#'עYw Vys􊈙xiNiD oRjD@'/C`rz1P;uM=-<]bCC;y a;JiinJ/&?*WH$a1Ci^ZY(F=i߂tJ스?XaZD8P @|չڐ{T b[4'?89 (:}M{ =,q LɉdQ84YAW$i`@?=_fi3\ ,5`cǕF̩{ B*G*{aڪY2t&,V_{́36ᙜDԨ++wrmQ^ 蝝]'5;db ~! H  ^?6GQv(* *zO "noiGJF|K zbU?=˜Oz~ysʂ݊OOnP09VZLe%QH7\%8sZcL9$'BR7{L0z^~^5fVyg4̂ШQ,0Xʿp7z߸ ϝ=W{D$'=TcH;5E5iiXi,]/G(R2(UXSO9,Za'oɵ^MVNxĈU+T7=|Z xp"jݺ*.317ʮ=76ɽBCߚFmֈb֒6*?׫s9X>[~8~^glt:4۩NS8{!yW/vj'ڷ+2Ƕ̈́Û~՞aa܆ _ؕ#[3&ז ڏsvPQژ"uP3ڍn XPaeQyYx奈$DwYjP{" AiUۦr?J_i|€OTt=?#ϧ>zX 9_-Xl A ޻N>ڵӔ@,LS#P hv>_U;0}5&Y| i^{9kt@d(A`Eagi.2cѿWWo 4LГQ0iLف,]7n!15-ϔ_GݻNn8p8 GqD4'ؖF} Xuj|btaƾS}Wv?'{ut-p@#^dL {{f nyfBV=Yg\y0-IFpҸ#tB"tsbrZ_uV]4L| J8,*-fT4%Ud*YkJQ>Z)[<|Zk$P7dߍה i D$4C)A(wz[{%3(,\RGkR k9Teg?Gv|_*TQ @W]p}=(0A?T?s{& "1|<{ x͊86:g*#j"^+9P|}Oi4v hq71-3z?ar˥8Ur >zo KDMwއ@" oH;>qX<  4885Շ}wTE~=i`$ ދ-Y(mvCp)10"T!3XL'OB9Gp36@k1l3?/(5σJz?B'm+cx܉bi~s~p;r8h>xkad.>n kr7nF*$Ǝ* h[eYMF=.{FXH$T.{{wI5޼߆`!Ysc(G4V9v <,0;nk>RKyu!?TAJ\ |29#wEbWi~qho]- ̴;8yW$hrf! *T`,ߎykM4i6hC?bHCm ;vvAȞN4przޔkvz?x%%@C S! ~3 tvE ~/  {!O#x'y*>d^AD o iAgJw>&"py_vv?*3'Pp ^V}a =LQܢ)U! Jmf[ =ZE|d"^T v[,4fJSЀ!!{<:qFm2?qfvAk\@lwc3!&bxa?H9A4vu(jYr&z'/Qkw;c{т5óu #2Q. R4u#6zW9,vҙa ;xCnb?kӿulYn^zeے\x;/D 򥑢Y{E-V_ݰ@JgJF^!y_ڼ"V3g;:d OlW]^y*|48Y*n NW, ?[矆Ogk>'#TbPGz8=m.7yVCaGo~Rbs bP8cʓ{ёvT۶b8V<^ay PV>UzkW.7JWe3zg3X}q8 x;9x͛&I@!TUA$(ML(XE(dy"--91# ѸDbLۨJnLj7?A=L0+ugTS2ĐA4&$MniK,d}/~!'.;%q@S=)GP{HJ Rc Ư`ճc%#VCͺ 0,is? S N;ޛ%Nm&4 O߭[6yA٬O.4 <{v乐cl`cx!C6+A tL ϬH#@}8_F3~|oA[=.'H^n}p 36KP*t?I 3b+_IL3BwoTVʲJ~klQ!I'/!YZ$PY>ro$d >P>T E ]'DD`YBiLgy7|Nu7UEeQKʨk`T|K$L凄#uJNR{뿇| ˩GFHo08mx׹dv;"6! ˆZ|mo3\A{M)H bqZh7Pb&r H D\Tw5QE+ؒ hOP<B a"VAJulH\D<"ߓQ:QP8Fz 1&`I$<{'=[4["Q0pH8=mfCH4PETk);3T>HjZX_oŬ՗t!"aOgL5E8$BTڐƍ,M\F !(S*TAXfh:}{_7muxn4SMI:/ D=ʏtcY?,04S rrXlE˹==Q'eŢ1h1u+cËzJ5 . {>an{ef` @m{ P_e7QrX\,d:j }d:uAߙwgZ@c܉c$fٚ]e{4 ncPiI<KL<ՕXѹQB㯼Is*5"{j3܉3\y G@P qtܿe3wUF*E6}F5Z#Ș_Q@r||z@52i"dM,s OldDʜ"r6HcC|P߱ '*iWh,vi_=w=9Ƚ1]K ˱){Enkޡw>Hy®}u\NWċ0:acU::\|pq{R5(_sh WKvo^tʡ#%6m5I*Ma,//u/I4 \QPƴ=.@^Zk[Dvm|"żHڷ2"?ŴkYÒnId-2ls}i"`t/Ai._ɠxSHf4^mnQ6!3x PReyH^ |!R9*^&i9ZP KagИrjhl"BԽr ђ?cԕ6 ;N`> CL\%L5Xީ"@ Q\Ɲߣw959`xaJĭQ_Ƕ{:>"!n`&O):ױ:ʥT.Z597I '2'XϣA<迾P'<+J`6e=3v:5sH[=Aq0Vn,seae~Wn8DDlp|R pf'p~Zm*kc%Ưz;<[z7}un 4JH2^ sEkSc4WOU~Avy/+& Ӎjekh3xҤLM'icwCm6Bc"X݉:pn [%{>E_'хV%2y~ڻ8[tr&mnVh8WۖkvIڞj- }Ӡ C_F8ʹKٮ=IZ|pJ{Rs[0/yx7ME4zRjg{J9)wckM$fr.5@4XвYQO6M%M!NBIՁY+"SuЯfmR2pﺳ&"FEdylJxIw([TK~ O\WQvuAZѶNh3+{uV اҘiՄR|D4\40 LT.rf2oZpUH2ӄB|"(4J~6f:4I<D,6}j֋.2( ?CkEK#4&ml238fիFBwI$F)-SRð[ `4J𬆬d-X kG漈ːH/ *=͔ QIݶmcW/_v?)ڋmdX,èPhP)~( v}]%Ȇa*! Hdb֝=(e,qs[ 2աY9"w(e+C4#$u4y]_Aտ~M>G(NEy|q^qO+(0L2 p0<jx!W.GoM۔GKTpK':gCYt y-μN Ү_WZ@N^R_PU!Ԓ! XqGttI5BKjच:Wo֡ Ys!} Yk-aTf*.;mW@FAe!֣zZ\ߧv]ڵH<] m$9ގށ;x6;eY=otL3 fYp>y(+Mٜ hg'\; lu 7MLu95 JKΐ4a%皶PbH9MWd3Jn\S?ՀxKŝ:! }aB1@?Ub& 1DPᾯ@Py577̔:o,E5*eq֑GMXrhޡw: ",B<~ľ4"sI8X*.lNM喾GafCm"‘;?N_ji9+8 a=>1t.8]lN/ꅷKJGNn*_B!ދK-W$}L8uw#O/wVzJW|cjo )P7] H->%NZaD f` p0y \ב ?%*Ybh#KZZFR:`32;t,R~,#\Q4v!tE1T,ǖUhjY#LQ_ bECX)akF1GKǠU ת0uaig(CMPXd l$yC:`;6xIcrmE20yZ1)7qܱ:U,Rsa: $=Z~-2RJ]@S'yʜcc!\!=>7 :߉ MN}CA  Q>X?Oo`V^"ʛvh&JjҐыnAÈ"$AN.3Co0r>A/ TV a3jf;cAwFbܤL~g4;@|m^/a#j] "Cڭab.<7[qWPFMO. 7h47Q{؂s%q?L&tֿ0cgB?qI'KЈ]ƀwB:{dk5DiZ`ѩHk/ :3Gqʑq˻9`_+/zw4"-s}7nPcCi'RVv+OdmsF<~Ep_c'|39 D*EuU?k)alռSТdM:߹plд-fcn➃+WEH-ק&2-S.MM\HI*xJˆjBQ=fOWL$q,;xi83 JBY5ν¯D'}Rh}^Bt &6Ud4d4 1 7 K{jHgo"¸I1n۰VKw~LܷP-=ˤiz34;Lwt 1 apYgCB^((pg(ڕÕ .wo@!?WEF"uj5Y0gK٪B$mST GtOQ!W?"l@Xg?P<;i +uuBJ.@oz<.1=vm&7u?ƂHZ'f֟@ I+( ypTZҜ!Wt \tVPn*"EtQvY}K'nZx]tʤc_p R'Ɏz꒨wNŜ|uiA+ca,I)0A@L3|0؍[ܽ 2*sbڵZS+aϾG@8-VJǛt1vv )R'")lDm&ǡz3/UߕOݕ3Ǽ GD"wTAm%;Ua j7XkL^ҳ#5N"(&3Orܳ #ĕ20i**Qi"Xl q5 %+$)},BCD\ԕ]#dش^t\BQ 9l`ůקGF^X0];`f |Ԋ[$M djs?[֠'jy +3Asi/浪z`|;K 2lLJ~cWqFL5JhG. 7'@oX[í_ ^7Vʘh0wizO)CT;XR-ݻjѰ^+^&V^9=#h5;,ChXxI ɼ'jz;Eӂ bdg#~΃cW Jdp+{u_^>>z?9i*Ⅶ-s!_C[IW {gDnJlńfsV:k͝`NK(68_e&zl(rWGi qZf[pKyZ J#k@z,'4"g++𴫪BۣՖm#ٻ3뻹5Q =z-<C26=!ŮW>C sig({'*3RD5h9g:⩷?~L=қ\4(q{eoYDN[ ZW}I6 ?3+́6.BQٷ+Rм{!ݖKw{ꟹ @ebĹJtvuoCG}*qq;tQ Cj+LmJay}9g.G\BAt '$}RNc1MtnRR<;]m' DI$H79vQÃ5j9tFeb%GON|Ȳj358oPYZ1`ATD:FǦHad">,Hv)dƂYźFo@<p#{n9 <Q}WS Zx}A[,f.'s%pzM: _`ڃ¿o% {q%wvu5%'YF\ pG]W|*l:#VL'*tII e+J ?~agFiٰ)!`AwB/9O1ÖĽ)::st1xwլv' ӒbhTSD1)0ཹHWKP-]RԒI^dw,~ᆭ '|].EX]QdKJ2|~»}cTF!क0!VD7ckI뫻~3M) B 'u2 *Z'Awp [(µ4?3u?ۛM% 嬍?g$@sҺjG v1T4de3z~ZERO5^Tj;KlCv[&eTNbΟMh^q ؛ԆXNoGybgYU-iu?F'Wl)7&LƢL7^2V{aP^_R<2Y Cln q8]+) 8?~ BާeL'AoȨ.B6K V]~:ʑ1("Q(WIǑDyۖZ?$wy.m%CaXNoåFilWNvߩ~u^%RSҬ!Jan BftW4.&*.~ݮζdn/ݶ 9yX|Q:d[D$_7Edr (|+.(K@I.~H-@JΨf2^(6PFc:wh-F}R0~q;{Ӭz9Y8U[&]!N}-Jp}="w¨2&P|{vY-,㏶n2(I),6&פsye%xU2G~a ސXB-ڬgJ(ڧ 3oBzվBY) $4^sSurzجm`w 2D߸z?{A!_|g„P㧙xXk0?u,MwAAF+C]8F )6m:Nu] 'vpqxa;]tZ#gr $KP-|HrK;U8=Hq̚5|u"|K%ug4ҀIEn*@sq-d|nǹ@< n1eQ0zٯ !J^}%kW FC//Ř1\^pD܁﷔hѻc3AngU5D9naiS̞)CS0=’b*/G[Dm|GftSA.x '#Q3o܄[T]ZcyYb&_ D1POc7 i[WqM%A<W2Ɛ8/^?bu~RZ%qɆr+5kCVbgMaBd"ڻ -7B#ǖYq1w9)[ `9468^%2'c@A |WdxYV&Hݚ@s)-H iGJZmmaOPЎ%r&+sΈF zbqܾxUAf""H%g3y2x|?Dz3Mo$԰\&C>wCL y7# >B|,s EZAQ@L:FBԙr\aB{S  W(I9YԼ{'a[αoN'Joe6$^-+P87[B.{*@cfa>\H0{c${LsC` )W/5)ҷ:hI?Q6`崏4`̢"au]'\ը]7TSWAyvaqGn49&!Hx2RxM.4M/ox%EJIiqSJ"FpKvARXxGDZ%GIS sij8It3Iț dE~G!Е%!>6r]Ȼo]ݶ2߉z+X7ej~=Ȇ)q> >8gaFNL0X{e‚5+ #EgtV|ੑT'l_^} xԜ]^f[s/))b+f !*_ro=8ˌGׁ] 8FnXx:ܯ:')'p=fK lB1B hňKWC,GWa& cIU[',jޕ| 'wd/6*W":x{F ړt?~Q`p%e4{Wd'IHJb4;lhCC!ޯ sy5Vk\I}LaޟhtkM%0]|DW՗yƽ#l: p|dK}TSgDIV.!OY&e|"&RWDv_b]%5ʒUI׎5O*nܪ%O{P^S,099kkEHNI=8C56A Ntraac8/K4#g?#4dV{le, QkQ'W:]  0ހq瘘eH0&@ѽBPk> pπ֕4kʡ-C?r%KaXij+"Gh׭ IšKzq.:Rw|e4|[LQƍa ӓx[ur~;E49T1ܡ&x[3 Vap{zm/ru,%t!Gϱ4{S} )9 'Dc }`+9CUhc(hQ,-OzO"CPZ8{EHf^9[{5z)S %t7(P|7 =30yZEy:%NK%NWCQK,pQL $vS~EѻR{P ./vQgF4K9Ա2L/?lo*ګD_A˵)lC+Z5VLƜ4~A8a܅VZ^E2tRowez~[J(5Z5vxzR&F"xн 9Jߤ%}"Ձ嵧:^sLcۄCR[^A H̻$t>m }om:q[9 U4hS唋 $TgWO|8/x=Bkjq:雌UXOB|e` Ņ ^| "eㄪ!}G[j)TY{ɖ rq6y}n jyҙ&wP>@{/1u2Tm^:ߕ%"Rynك4ЧcR qvLVt4UI"X _8N4(r}[Ch|0}޴\[:K78M?Bqo 3r]dQnM0F8ıЮXf]_a++KNvCWh- بab8_LK+ikl:&s/x !v_S⧡Fы綶>F <%([a6_(HB} @Y} {}h`hfR$ ;QHlc9[iG}eV0E{>-9#w!ƒFٌ05[hF^H69~I0EFoRk9Qai>ygf#*"OvK9D~6g}Œ욏C? v9~ISQU;m{:lqi^CXȻ}Y"BjK^ /Em3s ON (m$KADg46~>`ܚf5({V=uh+5]h˟$6|Lbn\$yEM5n,#~n^r]4%4=+v+6?eÉ= $ ,e%4?ZiQ,RIon|[ fw H0XGs8RkWr㭶1֯qot?ִ;,^j}Ϝ̞ڌH!z ?q)1>}n+zt!ЙQ1y XNOpB)q=ZIB/g 5@dY'؆4e4}o}8s'e G/DrJ:Sk7Pn:?ͦkAU ןx:,tnN( +=ZNYGn>63A80ue|c()8kmHX7(r@"Oze ;y9RoW3/R AM[۝H<&MD\ѪGacnsp|onvAgBnًN#Y MR-i.{HKַM,!*`5?{222qi~bu<| =JVdUrK/LcK K@&/rIibg֕Zv {#QQ@>g8WҴ0аÍ1:rBX*TKivBwLWc[@r`qӮhAvs6XMcŭj]_"vK*]=,Ti4HP4{jWMpuGX2?'GoCCl bK{t@D*hDWFeڒ愰7sd]1oO{)VR p"5'纒CcVF˺PdLq?JYؽ%rR7Lc<m$*}0q97>k? "c~dG&<0A~wZѝi$o7Tq<&6-F6k=+|gŞ 59;g1'f b'XLyWEye+ #Β&`pW+`{Z7"sdr$DoMQPf ESc7]L:Y%j_`v~{[Ǭ o4Q[*B6o w`o |"2= 9T*U&=n`sUQoǿCPMOP žza fmQ 5$xaWt+j#AUybI2Vgta"'3Zru̻cU;80Rst@yp0=*Jb3y gwPqNt&BTGD-|//M"&>7SLhսNG ¸g'Pzjh1Q_bf;8Ԙ( {H_@XQ{8A"9JeHg$W櫌Z XIy$U8u9+Z$t[8(5^tvv\D:~Rϫ&KFC ̾}]FCo m e"-i|-ӟ넇/^v#\0{ O ϴè% 귃ݕaHB.no54)L 5#f dwbS q)|c]Zi=$3L.NXmf"8Y}JAhxUs9MJYs-a2-V NĴvP)#NH!Kg0;d-iݾ >{WhDwk1H 7 n>b?$Fؓ[y[T:.3MՍS™[~m%YYbǎw;xJu^D o F7z# %_usf04V*YZU:iϋ4B`:އޔ@5'fkO@ zE) k'}RRŽx($R ׈Hq3eFWS8۪lY-M]HI=8*^(Cu`~nqֲ10\H.o[G7RU~$LbaV2u+uE3p0Žy驪bWiXmxMS#TBĤ wNUjj߽=bHL =!clsgYBO^吐WջRT,|$"s!#PoMbr\U,w\Gª4:[ma>iZ<pvQ;r(1fq!;HLFg?)=Ijp.:m;429e?!^jdd-.ԯI=§3Ah4 jyEXL᾽'/6ߴԥ桡:KOZY*EۖjMӌ^<7~u!p}MOVFKuZZl{8=-3n 5 $ 7hyݲ)rH"5̲ ,+ N]u ~6{0>< '_ءrw2r8@-! 6@iP{ol+1e I"'(K"9t(7%EW ϟ{zJ|1a=ȴfmmS:W*ٹj"ϲ],XFYD)ٽN@Uy 2}RxR;)%\fU]|R𵈳h\LЈ@ΌaQ}nb|q[ft_L|qUBZaBրds6xg$ۀuM'2cPg~i?ĥ|W@kk#I䗨vXoxO} -٫Fō,ajq"c坈wjY.8h$DQRO} P&P_ӊHD*("x$霝^Z⮞Ȣ=C(S!”r@d(`mŏ CbdHZ4=1\"ǃwl$6OѤ(uԋj/5K f aZd62Y2Q٩-w/Ëf( %<94`.(J3ڝ qZW%9=JƆg3 *(F_6Q#5JNyKH&QCU=q~n Jїwh6,ck 1LB\k@n5$*AgNQߊe״0$ (_rRg6I*QBf9T>1vBbRU9یo)wt05k$لq^7:tк6zj7$-g$[83Y\pa\d &CZ)sY[P1izy^.LC,~ͦ4B:*:?@&"WjI*/K]\nރ̒7dRxfj!y[I${tk<Ҏgz*hnF.ZeWLk=q^ ӑ^jb_mk2\.Y0[AW*Lx ;.C$=]cA^~'[Xvh&oχ`֊}E4WR8< ^[HќE~*LNxgT4\aׂОI1g΁&/SRɘv"9XJ%oɤZ̸j1Yɐ'd|F [6J:5̞#;&lVOTjmmK-갦a#I2)>0!2gV^#u!:#'hZe-9݂ )g*+<]gW\tx A}^< 9Q'*ԗԑPGf^) ny/GHLMY~pp3nUq$<,x Q _Y!h~a`VSYfdk=Xu L א$ V3'M<#2VKg2I&qZȷX&皀>\n<Ї0_lyT4#t“kc3U&4hݰO꤮l>7Ud uwy<{v{o;`^7rc`)kGڙ߉y=qTqhğ?&]*@1! q1 rpf.D`BZbNz`|7º=F44/,rH%r#P(3=˻BŌ]c# }(HM A$qNC{'+8rI`ylܫ`t~ Qx 󟤣umw!C>M v/yIxHʞ2,#P}Z4uNT"s#Įs~Wa2I8/, RYY'p87gN хpoÃzmi쇛 [fEޖhÆ=pH%  ,Nݴ@娐6"7@5p[9n@'\Ec Us)UK@MRcITDi$jZyŸ3|)[b/a;唛I}l0&缐׍!kEi$cDǠEOӲ9>sv[sbm0*|q4ЛkSr1_g%rNwΌ//p<|@jotD0a ?`΋1H$!p=(s-Eir"^8U\NaqZa38^,/]%"[rq?7u@ ~%wBBUza{J\m(xod7,133W *  }sQDm.)mAy#/P:ni[P]Z:J:SziU)ǃk?**mv5#snSo HFԫaT!.Vvi-@ϳj=*̐+QթXUOL %{T}E'=󪖂n)y!0f͑|XSqw L}<S,C&&%=m ш56G%ܩSAE_3Svy,Eb_G]J>c|y1Ecf!ٛ5ֹB="~aCyQHC74̑-4p A~JٵΛ@-BuP\#_4OKetw-<]DiKq:Vy-e)1^>u>Zp`uoƙ*.?ÐV:־, 겶q`Vx“&RWr2׊ۤ bBv7 hDa({t˫A28 2K(LZJP80cxGm|Y, ,E3J8[UT̻{RFiBqh `'ӔxZN'eJA'r^x#ֲIx]2D-܏ bb0qr@]fQ- 37irrem)Ur6 +޳O&~;6c5,KJ6"m_v_8c>]?mPBaK)ag/?VQ^` J 3fn?Od&m7_{6f/x&Ο3z6DYje4Z@}{oV<&¥y7LH˦0Z+5Ql#;H$IBG5) Y^~Q$Iz-Q'U 'G*I&%WKŬΨG# e{ᛠv\ĥ!ec}S5|q,\ab@PK :+ADс' Uiǻ9E'C{8VX["fI2ՍnT9?yv'1߳[;Fj9 Q:< aX tÂohh/uh*DT+.h)5D~&NzJX u·ӛYj> mg5VvUT?R?G|ܡ 2Qt0܈hO ̵) 6yGh'`v .@ u~!kZlJxd1 PP`Н+G[k`dSn\7`dc"C:|ݬV-BaЖxi>^Q/9ע643.B[в:0hb$^:  t/_&n%uRxᑪ('x%iBғvIrs0-U-zq Ԉ` UZ-ԧ\ Lta+ b}f-c9 &4zY-\9=S:AQ4]f?S2*XlWn?a*3 yGu$E)LRʊ{ ؞1LYu~"t>ͩ.'BX#&TƓ<V[%9Z5( ڀ=xI ZqJLY)V 1U_+[}Y] 7@6J<5J ANjb4anUk4WBhzA鵅)J=O|.$\ w&Xdg6\;dhD|j-h5)9e]Z?q;8ueZLqTt> MRoyzlzP yG@v::܅g  'J=0L M*! aJtu , ~*P ץM%Jl>F83 nDx9cQU SrS#@a`%c2Q#RZj-X!Aء9nf$7"f>ehV_ otgNV\W"1y (ꂍu|w%7ޖc/3+Θ;g-4ÅCu^aDm,t$!*RtA v &~( bPr~fvtEˎ+5e3m䗤E_]Ŋ'$㷆٨Bfc;b@^Ӂ}:#h解aJD *f1*pPl@F`C!xp?m+ԕc*kNj=:xpBSTٚ)a$;Hb:w#5"}-sP@k[mAU(gjGs{vbH" &ϊJWM 8`^㮠P_4[7 &Bq7avGAOBB4ja?^܍rO-'d?5_H4L$t8%J_Gcim**KU׎.ϩJ\ uh_[ F4&'NҐ7NV>mDC\hBHo97M K2;=u@z184]V;GZH1&F{8\a臇] btf.Q]BP =)ik6LJn/2mxpXf?Ӑ-+Ɛ0P PT!tBLдxߺGkr8$fD9ekꦚo<-_Χ|yL4J@C/P7 $n e{yGUثW6nHZs4$o-7J*,5W著2[~tY(Tj0;0߰.^@TV-@pǾ7[1uX ™fƽgri6䊠j+C>1?n8"Z,;@C=&r gI >WA m\(!~,]1Tgw0ޠ@7Q>|"SBz ]3{ܞq?nJ#[Z[-NAP?>Uo 5xR9qU?!o{["ĎZӵR0ZXM-+ j =/²7=0k|8~T.%˷Jԫb7|Ul2x 95Q ^֥0AH[GqyK6RJ7oH.Vz1N@s6^{Mj$z9w5y}1T5 Z$+b(ˢ^jWՓX72,WI?cEzt(y|DBtc,ȮKA??͐҈BJE%Tzp K_N8..Ng=˭v>`` pl/HC3ĻY !, lu0ìh OQ8zge L[J]|Uq p5e߳b) ڶK|Xʉ8R2do3p5)PD.µu‡,b%f.ӞGU~;/兾=Q !]+8O32ry+iz{Mc|<D Ĉ$#lEXYh<`, o,+_ȟu5(yQK:ibѸ}¼ğL::@!v[iUS_:.+n܌f&<3{]Lcm>V'ݿxΨ˿?D JE5DU ]'zz~D5,N{YBnЬ<^(W͟0gő!j$Aٗ9cf>dK})q4Z/.]i"X|ʎAA]a>}wvɯS/r8`P%Tl*<$PNUØFa#ؐ=D!Ƒ-uZ `&ߘl]M-.6g"8oNh.GyV![ Rlj\Oe0<QF1dw:LjNjВ񄪳잩D.c֙URJyb\k[]qH\Fwjk?u7{-IAMYo$鸿y;Ij5_N;'`Y5QE/ x -_IE~Gu,l!zgUΜT$V^fSxGz0R֠~W/-5_(5n=0 o<-!#ZqiTY&u. \t,JƕnNt_En.uf5Y d`𾃥 PtŜSCxHXZ`DI+>؋4nWF3_/@bo˥{lDUD{z>6B5?!?PS:hx|)w5!@Yǯݔ z_S./]R|Z $@ƒe0è?:|]J.s{ɶJyoyٓ*i+Y'&~>DJ/<9TobpHO2?bóTbK`vN˝sMh}4,_+k֢MIYKЄYjNI ,Ō̊4$ wJ50¥>E$z+h d(Kr8`OAK)Q hXU\}LҼN7T4,䅋{ Y\*y_۫RaHW.AH geC P}ťO##0b&`33 xF^\Ѝn:ίN2}|B^}[T:6UJN)Fx=h in֒;ʍ(|}]?=HKvΧ uQRA-^E<H `2_G$D;l<7 WWqX#Ob5qfy*ey " uopz;cZU*DmGrQ]0\(B0qq6L$Y)e4X\ʄEpw?…tuwPm6s}*M!n *fDAY+ӏfҫ2|blFF%3 (02(hPl>1q'P;MOO!{dyj%ꇘ߅iZGי9Pg]ޕS Gވ@j(Ѫ~ʖ72z<~b^8]$e530ls’ZLRKTNn2io6't\6|B{n_BGx+rlQw]?5`ʳ$Q``֦zfp=֫OLĂ+[zrMsr2-lEޥ,PV 7R3 ƩMowQ))B)a:b)~IZc Cal!{ .ڦĪ|6%&+{]pqyQv9u3R}lԺ/ʟ -VINE ]~K5z~cv3jGU[>(= yG9u]Nb5C >7=>0U 6F\],Aջ@Μgo{= ͌qt0ZORR'j^#-jm6I[h7#sq<AR{NtU cqhKjMU~qRyQ}R l*a!QQul˒xWfypVznxz5$r|mcw~aψ ^f 6Edq"JڛSyu8a׌~:xz[%r]@_3N[cs"W.ɜ~74r;=ccJ3~Og4KYjER_gäI>}iC@Mc{I')BqnWnSS w62ʔfCGF9^#ϱb3,Kj.O{c"{*}Z~ oVb#D3s),b`fnK@@ 7AalEv)< l$HJ=O%ԾX4AQ2V <$F&5i>"\h@2qWe-xh6}+Č] hSN'/\[1 uDpx\`^4 ~U'wxYpdFYأIͬjևŲ;b%]B7Io)P}W.]=i)W@ @0~{}T%QAghH8^#bҘ530o25QȹENSY ^[X+bi_w\,fzPZAf_MzApWnGN7ԥ=#=[AJb'ʢG:O(qn0+IcX)B.X4zI3l ]%V`4q|.JbҊ0n+S~dj6pjOfL#T8M NN,U:?s6mo OEKyJϵ!ǡ?,MR[cҎ"l=|oC%*a m=85ϤQNrţ5S8mOѥ{ E$2O6 lNylz+pu/glzM =Idy$k!Yܶ775z+9R_xhБ N\u Z ca׿Ӗjfp~qooz7_IJ3% +/ f:M:။h [n:=-iK3 Cj n37T h< (6п-1Z>D95 2#nPiK[i'YK Ӫ_Za~A7EJ>UlM#23lЌMOfL6fv-r>fY#107&7)o@af=f~Q{bW)n 3l~k U0 r(\=*ϖH-w+c$,7]q_U>/6W@JVo{+&)2R;ywrC!- 0hOlK+2"Vi2/xqFA~ nEZS87޵ ^4W[:KqmdNг›l`YduXgE)YgfF]u7`7n'(0pdܗt)+i"Hgf05e]4 "`ʾ7M!'P;k xSV^dܼ3dOCK_E.Ccn X'8SIi,bAu{eߍV~jΝaʿ=7pm8]\:*`_iRY?!H"Q?$sXV!p-15\P:^:^G?b>p4tKsQ)=LrD~+ i,c/ f4@#?F&Lo.T(+BJR`A_S.)32mCgIpm9u;W~i5MƮݢպ`O2 ߾hHz+Ln%Y"Rձ^Zq4jD;.[uW6UL ֐խ]:F68N}>NJ a'G"[ړh8B aKˠ:IO`v?S.J#NyS0AۋqtܙK hG,?"~H0l=;#ǫ޺J!MU~0h빿?`{i2ui [@dU맒&N\@֞g'D$3d|5Őz?oό 36S=X@ueV S'Td4ټUS ݃V/ܺ.k*5gJv\=O|U;tc3K6dfƕ \iSy#reiK_/KUTʝwL:^7,c'Uk{Tcldk}x `#}ظ H!wTCc-t! dmO|mh&4sM ";qK&ŴV|8:@LAlr4% 73*͌]b;mL" u?8i`|U{զJXe[hvH^(26sx#OX16K1PrakUpυ˿`Yhw B PL""CȾgP^P29Zrd<)9̽5o^\Kasڜf 4x&S}(3-ԉfaՅ!<ƄLK|[E^8Ёbd nڼ~n_-_F`l3Ҏ5ӛ&PY>BY_9^zi.4](g'+ZlS+#( i;ɲq\-*Ĺ? M{!ؕոIak퇳(3&_N8cҶyT, 2f a;&ETu{0F # T^V`?wR(RvJku8!Ľ@Ns, 4c; UwovQj#9K_vh_(~ #QKb^)^<ܯ&%>CZe%w@{RʽH{j<( jo]JSbuΗOpZ&erqՑ&6jgpeO2R|xFg*,y}cXȏ"*tghHפ@~? j>-hqV$ğüVrwDOqA;5#OnU8~mV]WAAx ]u0ZukhPj>+! JX`~|,[X+|axǣ%Q.` uYX-R'2<m w\z"UÃ8Ra)=3:OX Q[`C*{\o\f _Й L:Ui]<$Mi8儍zTh,ccuԶ=@4k1<07r(ⳛD\+E]C4DhgWS)-߆>`4 ]0Ii8J'UcwUZ.ԝ>w“7F>H%r AE{6SLdÊ{?jpVi>B^Y'a(4O.ຼrJvFHԏD͆"Ӻg/>̲T8n'~jD}:"[(4&Q+㼉0i@H gϫ=Er^@Y4EEghsBGP*6tSv鿍r6$.C{?pI; V$5?dc!t{ZD6TvZ\xQX\za_}.3CƉQ·RdI+*Ykr%LNmFPӻ%zB^ĉ#b;(ڲl{&1Ě+' i]Ɍ [Ŋ%-:NQvV5HvʤZj&=Tkny\b>[t@7,r0f.)%e<=2uet;;X :I)DÑV%}PѴ)nIix^j-.YfG H""QjD|^ucqQܣ5a2R|k083'2J+e2yW͜(FϠQk ,_P6 Lw5~ {*pmZ˧CS^/Đ׽6"O飱\6.1VU0|-&vZ`L% cW=؍ɽMޙ B-@ ?m[N{xe}XZZI9p CCqVUZLHR?`]*XX*ȿ8t܂a(ңz)! DVpc4aRjV&YkQOw6|oRZ- ;&ٻWkrƉۖIu75CS$h޼'50B%7JdtQFj?eVh,W ɍu7N"BvתD&Suנr+M`ڥ۶j _/2}I;0fv1GU8Q4s7 ,Jؖc}4Հpd)y83e.[f"&^/"̝Q)' peX2dLN Kھlv lY!BZU1/U:8SQ'm vT9441 eѬ/Z[oHxeTK#O@8-.ߧhq-O1SaE:tvfjqe ڼC00`E[uM',6+`"wh}n>L5&$mlR(pIPXM.Q.heW`NcuTk8ȃC=ہň,k`g zvq-P&:*7O۔j`4+yeB~J"ьE{nI(h6I؝"!FObv9jZ#:YyݞB|`1fmS;`4ў괽E3b>*N_Ѵd+&Dlgmմ42'!nˤ|;Sh^Ie"Ru %#iǞNIWmNJ鍿z3c=ݯ 3? /Jdt+@9~aYˈa=kŚ~f!\]l7̒K*eO2 BIh=°I0XC'}fOkiҭ)ĭb(5KLu(2YPG.&X${_)~{# ;%HEE\5WFّJj6QaɝAMhYܼgƆ+D. ҥm6(P11LAjs4sjQPis6bSగ'4kSQpcA Gwِ7 ?_ѐ-jKnM q/IKއ]p[G[́򰀠G_H)U:vYt!H4 E1˖|TMOJ/3<7ހ.;`=2MŁɏ' hDԇdrm]1'_zm| 4 u;T+U@e%<+LvQe!OSN.coG\M ?9ohY(zf`%t@C9+lERm\hΧFrܪ\])/:B߸8:}@w(}Kcqg9e"[]<c+vԄo.tP{OJu\HD* L#=!LXGNOCx[aײ2ۢ\/Ղ,yTpb[?H"M7BC+(`jSߘuh K.\u,dZaUۚjnmmf̊6_f Ry¿&!.b;C?dZ2= J{%.}F@`m}q3AnPOB RmSlFohWzWDR~%kZٍOBn;Vk 73CDoQnE܋X46z8ιѷdYAmس9&զ,eE8 SDr$>IOR:H ה+{ӎكwah2,@irhl3ӱLB8;֋>|}2֥,'mUZGIV*tnX6!#O;( oYT)լw!Ix$M}: žhVQgKIL}jtq< o >*W򥻀c>ח8@gx㜓# H>U:1:p$΄)^BV;EX^Fk>%w0;_VL"HWA0vISia7_bAU4cqjm2lB˕-ρaeA7E{7gUf;3 uV*k>7$F6%PRG 7k_90q:wTk+Îh"E*MhQ>ŖN;g)~3' 67?Bw8ǘbZZTU %;.dC0v;T{\R +3XX󘌞sZgL=\U=f |mF'ːb#ޮSV$M$:p+0#\]t'fiOFs%tB*Ǭzl1izg0Zn bBOoP5M南4qn\ug10(KuU|!Ԏvp=%XH.R~ @˪R*DEs$%C,5l>G-h[ \̀z"+vMB,##!Ŗ K,fJ =dW, _sȍ\6%o݉=-{E~V4Ū7ٷl^SIJA~}E3sl2( ӼeያPnTr^@'NWnjP!lC_P _" )guĔ\Q~rS95"l e~rQif#E;?gl15:ڈ:P>gX6CzK&E?VA"Λa:L1.X~av\vPɞV_E=rS;(Z7@]J1>i>W#LX%J!qsل|F>T[  93Ĭ"\/-F2HcNz1%Kt 6T9%6CK;YyhBI[wY oPᵹw!QQ`Z~oQ#ؗCrvBz~_=;<G/sj7Zw!m0[XL %0 Wʥɩg9nr\'7L3oѸf+^U۠2yAb(;YJF 1Q̥ s~ Q*N[s%|)2e;nYE1̜1LuV˝˂kֱFlgyD \K:JN!|hP;_B 0[%uU'BZ/帅śmq̱̖l+Ŗs̨!eގdF\"qh 7*ݞe%_bDʯRpڀSWJ̸ ʥsƜUdgsUʁu_܊c)B+K`v4bI܃& _p|-K&FWh/&Tonh:Ir. "OO36e9tT?.;5TF;襒>Y;y; DY0ү5p]j[e%Ƽ !.ڂ'Wlտ57.c3_Y~lci""Y|@ t/;a}GeFSj96L$1K%l6rK\y:}vvdK Em8Q0ŷRN'W)W|%{lR\P _u 7h='\!U,v 9*+VM'`x3+.8 ~,v"} &g /qEl?M)jAY w/ZQ.DC$Bm#hXnz?/ aw|*$p)sT fVg᧜, %Rdِ?I5T$e\7{}n{W_^2:QbFrA {J3"KE,iơqCa->RZ}"#v; { $vdž'Mcu.TcL;8j=W \z^ݐ>*RlZc%3ydXVjqDq#^^hԐ.j7o3\Xi:j)L>wi1u1MĚ6${mW׹EJIlx ?U}[Pk5"V~`e 9'q$ZøPvXiX@*-qIGHp{Ɋ<VEq-Bq* >p+uzQ;W Ŕp;Ǹs-9WFǚmL-C/c~Xx unn@L45jHhҮMf "zf0+aRǣu<VLzM4gL6+ߌS͐eIZ-w}ve!(^;c=ϓO,wLәL/NQK,+n&TrC@KlT䳗e͚ͰK$$}څ" ]Y  k$Q >yBec+[xb >]׫8:m: 43t 5TTIU?(|[ j\Dfե POV(nTy،ϲagNhAHm))$x-k^PH+6mAH!U %IYT0h0NV۱VSu9[txYJ#x)2 p}NQ(&]'㡻lYXe곊w ҀŖv¤up7LOAálpX/Whdp`÷ѹ0Էٖ >@uLJ%UN}>G˾ lvbX' fUM_>˄ݧ6$:sP}7 F݂Vp/e !{ܫTdlZUYbkexADOCzO@YNҢqA jKg ^gI"tٖxv~nLnk)e '`ofKh|ہ[<Wcܡ,T #ⁱ+ gһF`Xňo;'% )V!e~c *]a9*\KCeO`U5<#ZBL.ԮNIsVfxr[W-J PN+:Rv6J0ݞg4~Jbѿ:S󩬒zuȤ96T‘ߨWɲԃ9<<|'Iռچ,7qҹ7IIyhTWR P@02]*-·q>*WOfvU8}.R*Kx:TE s*.Vx+TA %9j]fFQzηtIIֲ`<%`C)h;N'^rO~#3lʾU0t>ұ@Ds5ʠ8_Q\)T& SL& >,RY$spe"J3eZv12t2:rϵd*.g@Ol$r*3bfvP͙PqƤtgnug[-c G\ ğR& q"†HNlv7Om]KeQ2C}p)Ne-ł2|flώX-tٱ N~WbRNxF#U\It/g/Y}x8Rd󙎧Op̎3X LE4Fvyb\Ito(02tZYA ܍zMxݵ@hx+"-Av` py|Bo(fޤ6ƺ#Sg*R{+.Jo8x`=Zy /|,1!d> g!H*,=/qc-쏅ZC#I f-$;ɖPFWƘu#>/> V&Ks u}Zy}f9ĿV::%Veq) ZؠE<Įw͆Y[+ۈ!*u\yR-hm.KGmP+ZR;~H%a?$L^zh Be۳sc{ ,m4p;ٌꢤϊrܿʧf-:npc= {X10B\S=/V6N?l i0Z!McY<8 i8{Q]3)TX&%]s«(4;P2R6 `U.]m H 1]{0IB i?ݡoJmX8Hnm" Hpr wKM 73^SqfP.kㆁL3hԩ3D꼂az,TiA*M!M6w/EwEhNቡS='S " Ҟ9WOƮmh0omsR'G J r$YY<ׂ{92K(d;!`%u+aQS5")0L7TF+hO \zfbk5:\å ?oІaka(:D 52 !Fd&F eu꒤>ӤuxIBFKXuU=]gˁMi(ʙ#|˽e BymW)ެ/~X{ 5'=27$,>(¥zMriCmȄi6X^<@# Gi4"s1]ɥQw* +Qa x[)U 6SvxP Tt+Btm"ۚ6U=Мg. yr2Fl8l}u;m3,=<PR!+[2RQRj|>c)_B.~RYB1݁%Lgb%3z x ^ s%L ǂ}0z+wD&c%!^y$~KU=u %ٓ[J 5Ú0+19;8VH9 &L]b0$l֫`Hйqϒtc&O| ?p5|L_8>Ӟ9A`Щ)F+Ak3g7U83 A+OB؝E C8r$xg73tkHȮ u"CN4%4SV cW _ Opav&R\ॶ^YNn"TZH[H3NOXʬAVY}M$8dp!]l]eS~)+Lf<`!̻*A5;}8f N*T|X`cBFD]w*j_j▔imu+ߨY-^A+7esl̵6[ClE1#_iu2]u0kx ;rO۽y|KLƞI+D_o{bٙDkud.ײ_H QE>9FủP//Y^s^BoգrOՄRZ CH #3g!߾~/(jea;.~Aw> 7q3^a*ݵ8 <KXֲ1Ŧԋ=C$dq5ojW0НS}6s݀fYF>0{-A+?mfp*nt^ *ܯ+9rY߶j@p;cg~ւaȹgFeڊA]Ŋ],{<;&)pq&gIlVzr.t q!,ƞdlHp ZlF'ŻꃽH}G:ƻ.Z/dߑzA*+ge`ЛNG̎It\_̭'>Mܽn߻K E]C=hه_A z !ʹyj|SN)w>կ v{Nb-e{ԷAl-x[O +i3* ,Lh u\i}Jp$ܚ>݉L郆Jk51%'*lpM"Q}`;YXK17up6څ>ȘZZYOQYv@#\L%Sa΀}l?KkYn,1 *aw54;*aF r{ʯ0btKdq{bL5dmA+0yC&]oY򧯏.M"E8گ*xSjε|ǔyf6Ag"k \#6YO  c7[0 TP.ӽd+L8Ӏ 2ڵd~lF+ .jBM7@Sk7??b8LA*C%Cy驔B/BI8nKѸ۟[Q\+tO=y+~LkN|vnٓoJZ`\%~NU)$׃! uybV:>BLZDcW-u(zT!i{PO9ӆs6{[-vr|pל1OeAJT |FAavV`b6z#-JeA- *?OWޟ PykE@=\m Kum2/EK΢K/Rny#?܇bO7jlWd)MLjUTr.hU c^'(iGp¬ L"jŮ`Cn&(%ü@N-zISeޔ !ΕׁR<Hsӟ{y07ѭ9RB7Edt2gmw>dǪ᳥fta<i=hſ &6((rF aXb̟{3$Ef0}I k0.NLއV)ZA?`@7UO۶E5&5zX"ɸx2i#o&}@N-UWcNQ?9c{M~UX" oUTݬkD~nRrEW|i}mt}ls~^NFDHu% 6R?͎3C&2xLAP١X=8T4E[~xжiwwKD2ҫB>PߋNQo %PG)LJ{RWka%Nk#uWSdH eT5ކSXAcȁ"ЅSlnSv(ޅ e qF~@W_BHWr:й1(0jxgF0ע 4"W;2=.)+>+dZd+îby$iqUD.wm/MrUl7WR~{*IgoJsDhqzNFn2ح /7M (sxokHLRw2Љ7oFF L z)oQa̖LV%Tn"@tz^>Rp*SRVrtmsz泛Y K.vvH۫〒hSY9&(jb@>HBb֦PA5Ѓ)/6kAsw56 j(DG*9YJK@c\7V;tԛ>JL.y=8n#sJ~㊀h1%akx,#x|Jg/ C^n?Vꊎέk~Ko)TH0n`7Xjg|Ѫ]֣4LYdf*u >ph__[5)DvmW үoG)9港83]hIoi0"|SqQO*q >Iuܪ M"0JM/{u4r!Il/K!y;}Cˎv2{ $Qde4hPmxcDC:i*yv.4M=^‚4c$ {={>_&De烐}x]xdGwq1b Y|]Դ@QV   xh -Javkh3}e2RHBͷ~;l鴌fcOy,j6d-_)RKCXePt"%b eTbkrfpF Ts|A wZMƁ&({ {#EʕlݎcayRr3!n"CeC ϯ8#GUYR|MZ"}' [+;L'xUǠcJP@0@uP?~ ׎dw.4|oxa_q[ӑrN &k;2؆W3(ؗ$JU'L%M1##EPQhP'Z('-MO9F|htP+K!n}:l@f+Tߡ[;e&Lk$>Av[Sqb$J6cWxhn=:{xOVg.  ҩz=\rHU(wa36]ԼSR2OboDcwNfV;\63 ucZ /Rưrm b˞",2fo 簵`DŽ7nwC5 >tSc':RTfXFߑa-<;Zp/T tng eV~piG6 =*|FE9Hrů.1,oe[2z9rCh S]ZЅjưus-~Izd Ít_Q`l= L]7k.:e  0’4%} @ m=^F\GÄ 3V! 0UY@VLMs/s1Le2>iʭ(}YxU_OڗVz&#h9$X UzV-n2 kV#M*Sd\-}"~9>:m"u`cT`8.2fS/h| ރ@H$l}&jX؝ɜ{i~S)\z 暬Qw@-<݃ y_={#qW*UX=e0Ř45j?JenR {xd<蓜u#'{9F -@&Ex W~!dI ki1L8a^F) @|XWn,#`*W1Rff`ӽ]b#鷪c=-/"D.UX!نD=Xh$ /($*f84wdH?+~ù0Ivˆ4瘼BocH3PIC"}E:"+hOɰSVWX,Qy᫯Ts|gr3y#hοXٮLIl\@9@d/ c L<[OpmKvR'8f5 aЛLRӋ^}mNj5["h?uSa}5͘6/Eh"_iNN"Q= [e0rU9 {t.dЧsC8?pggÛ߾U- _Jz˘s5~6]LOtBN NF[Zt;u|̃wE&z pҔD`k~l#. lhT/=h /YȸE2Q k(IEuv Ӡs-uϼO=GX:) nE渘r̡u imHG6p0kEBlq=,emcV\Ľm& &XFT션b֋ka=iq^#o!9^!ؐw+!/8Q*zLf1cVbh`_BJKPl XQ OP1ȎCE2\ ]`XƇQ>(M SpM%zY31)*wEI;ަ{ Q(ɵ6-x=Ӽ2eC_`]BsKDK@j3[UaH<JH0twBS-w2VGmgHpȡ?nj8#psh ;`z68wO]N\c<6Pi w9N"Fi'Ӄ4W"Z*/sGO #3 9eꆋiZj'3',WVi؍ūɆ*LtFz^s t.&@u %he؂f$ƩnRjjq6 #APÃ]{`:ک%(YlK WPt(-=ո[ >HH]qlݠ zW^*V!fW-Y፭O:(ePǍN4X)h.6-  L??8~K< 2#gZ[hWֲj܅?wڂ)$3 {~uG WIHÝ|$#dWHUN*уͅL;Pk"{4a pTQ9GJWҥwL(5996;>^Qf%\&BP"dڂ=i?{"Zi<F^0@]mN%z64QaXHhR\j7=c$8Ā wT^8mak,mXH[mߒ'SdބFh+yr'B<RJ&,PRUG_8㖖9n˗ui@!uE7f+#l1nAŘC5Y%f2ӫ3@NYsR ܘwJp 6*Jhd}>7&`!#& 11^ 5eY ;4?`%]`+Ĵi_a "EᲑW:_0n`EsƏ_AU%.0{߫,_)MRIÛ_O3ln/WaɤZ;7:dz](U-qڪ܊,F)W:(iH9s*$ҢX k1^rI{LY0!BKd,FnYQ&1 }Br"@ffӹQm| ګi382o>Dĺ&Ue7fֿWvAwzNjD6֭gR,e7av%z"h~)nMDeRr5l&z1e|kd6Ki2kHmNpn(.3mUj鋊`TpQJ 큆]*1~wN$6PfUj\yTS)32hį3͑ mژI1sUujrU dJDt.S&98 lcD&%^ 5  3||[D ]w)8ud@7!v4=_ESonMRmW""/(|,.rzN!^-ُ5UTuQcqذQ:_<&ZGmc֖Ãߋ.i"FCw1,&|]4[֊l]Xo / %mYm)h$TI嶂k?­K$hoD#~>M{p֨혋< ffZyۯd۩E#Pd7#GRTB?"߷ci㺨b[pO)<.N=7~SZAF#U'9T麋gn4kdi(vYxj+[C,h! tih0i ,6ӐHIeT B~d% ]*ɻ$"bU5-[6l:+ueݨ?'v,x.|=) ̐5f*,Y4VL]ռ: $oA{&d.yxe N6jYoU뻹ph]hE Ht.%2-xU{Qqq.:/N[Qnէ Cl#4au[SY<;Pjw<(툑.e=ZHQ#cP#oBwg4Z+{rM[+>n[oV 1e =>Sw@?&e|gq+w ;UUVr$'dF`e:1AuEŎzinj^.ɚ DSx7UVuf3NF%" Hך\#TvƉ0"w(ïh2\5Hy)wKU.̄{(]|XwքEػ[wpRA2[06kwpzhe1g$h3i ILx?]>Qz^xǦ)`iE7PdX]4b+<a%s hU^LNϬGde-30KQ\w{9=&tg~ۮ#zm0<9/q,tl\,[T7ݵDZT䫃*MFq]b=䶐-ܿ:ie56 ,o0 Om &~ɳJ-UȅYtFzXqxW.6?%#Ty*4YfFbyHjlRr{m oٲ-MPbՈ˦87ڥzӄI=necfr`=" ExbJ '3P !D7-vS>j>?X_ } =bg9/3*ٙi{}4*n"m2藭awĿs{mƟ5;q0w_Bi4oD!@oд20(Qw27ڃڛ0'rI5;,C$l_ ra.SDe6q92de2]l5"j]Ip#z}$\5}yڊ-pXұ6W@Oܹȑ*oLc[vP Z10h=ET%`JcwdN!|rNNi5 @gs$okm(%&W黤synt\YY/gQ"\OX%,OJ3Hv䀺byO(87tc]+8V#Or'@VaFc',~O[B/9/A<8 "ΗHZ{鞔'7'LKҔ1Vw$S1lxҩϬF[=C0ޗ+A׸ \>Q+K 7PEWJ9#XvmNd~IZsdH!\ nbd>&aAHiա|g-hhU@v"&[|UēEMPW+ g`^y3< 6\D:֞8-c4_)~^XD?VRa{&{M9z#dӱUNIkXvŖM*]"={,w4ydGL^Q>0ne4C?W? LH%)1+R+] TǤI92vX*PG'gŽ|A͡`[%X1)+?7A29x;Mhn`,_R|J7G8, <&hEs!]&#K.dF[2EѾb)S nbNhCH-1q0ۏ~-ѮU._@h׆XШq Rrz[R&ۆ~4L[VR}63<Ӗ , c?- 8P(x ܾm `i_FRLi&I^u[yI* {SW 9̾Shpf;?/!gf0_!״Lskl1uUPF͋'LXpkM0##xUA,`[B"A8 3 ٨,/#yH@:i?BTGU(?).vq :>TO95l Yn,O#\Oa~%d|-TM^6Ɵ2۸8~,e)SfOKnOu;#So6mÉ0 Jf&A` W {y[dXk6I.5K@u H}^ ,ewb;嗺)uЁOҧ ʛ{ (XH;(c*I–D;:ŊhzҧE$Gd/X rboPb A|2.a)k;wY+@EeɌfm+}ZTl\zڦxľZ7G&ͯ|lN9*,#! ҩYyՄe=jr$U a)qHkցE po ֝fAemL {pVMUsfG.ItgN8@.ݨXa/ʿ0]28{gI,pm#G5QgY9`Ɓ1]s/gY3h%r&<5PܖV8YP!?ְ __8?}o;pn'Aƣ*R oAmFlj+ IvbCk'[<ą4˞ܑ [>6xpX|@ 7^;LqOC:\gB ;щXMz?ǯJҿiCoH]󮕥?I Q3yWrlt=`9Г$!rF^[-H{dO&`:TsZ=[Ln[wA,wD|(3@b'6WvHo[pf-vJFy'gX;C [j-0E:;LfOpj,GbZa>"dShhƜ!=,r ^TR>DN[d 1ĘI0̼9FaHN`NEf"mq gjH'Vhz3XnGgС4s6Ϭ]?@ߴ,;%v3s r GrL]L_4RT[x+&LM+R"ܾ (&w!-}|Rז"Kn(;m*-NdwIK %0OLBbZOצ6ަ>~~norԷZyMLDo6hx?ؔDٗ|4DAe0Mօ 䙐TJC9zYz )l N3Ͼ_ȵކX"߁M{L_'kQ#'6h9MYO.{,hKYʹ<Û_X>Ă xxt+2RssO'UwIb}?{͊CւQF8DjM4m]:OKdPg*s1{lxdJ[RK3wpƞtc\k ՛tuO@h'SAB6 czL/.ǻ8fk翌 L>Ar)$=8٥:-!>;V-2bE\+&l&wgevAou_cuZB8G'[ dkVәZt]>0Vw3;UY*Xߙ昬CmQlCr  T`c65We !xmZe/LBA|-P?aBF۴ ^CΣuD1oBC>qKKw\ -2_Y>=)~b!6\n^i?٤qtJr{WJgIH SƯ9A#%ڥI0ebRD}C`{95Z!aZű\^%`3!8!epDѭ,%zDG2=T+?30WO%i '?.s2c[`"JpN9'"j x6!ܼ(T}Ezroi_?)'7_Eq7}ɲ~;tDr0JMV< 3n}]Z0oxC*P^PtG(׃SvLc7@< b% 0*g8칫S}dV X@ I1̫I}O҄qͳ /h>+ҏ 눶qb;X3]u W`.Wmt ?E$iZLk;Pm;QK:t1B*TŠ 3Gl QtbO eZ7ބr\0h%O΄ZkU0=v|X~ mIkWG#}^dz8yDHi(jC+jϑU$ և{7.$uPX(7[E⍁JhJ:uGNe8|S,8!}-0٨ 6a/ڸ sBi47Ŭfpò@Uu7Y/%ᄳW'Y;p{δ,Mx$ySn,] x܍2K]id/i 4og~`3oD{zhL=njefjdRV2 q7ȗ26S'!h5>DZ\ <@4.r?x6Ǎ}0$H`y)!$4Q[O+D']vP  VgAU=eR*?e(#>e{߷b]f3"'~nیbCEetEgwop|3k\ r0D5 ƛ*xN25*NFwxv~Ѱtrd5Ztd.Q e+јGnQ" r zf֓7yv446̔& `ZqZ<#; (0)L U~1 -lYHޡh>:JDv.8r{o5U% X_Aj r8dRʔ|\+l`J $>$^ScЪxl+זĆwY2,=~F{>Ж<I!MBkRbVhnb |ZwoN}Ia/v"Q`BkL .C%0IP4]84HHߤ` 'M_`)*^"F%JP*C3Wx@|f"*]C .P|#?m^A4cW9ItT׆xyхEY~3α <9T᫸<}1==.ܖ㻩l"aΦ+w78h˝$Ф*DEא܈@r_2!Vф݇Leҁ 㶵uzTL#0 {ܺ^NVp`SՎ"SH|Lf %T7m)_SGn稑JHQ+,}{&'vc(R^Q/6R^%dD'gR+Ur1o64cz _0b)XyIx9B2JivΞ'P)H=;<ğgny9#! \~#UrvxxT_2bM.pv~IڱgD+|b2\3_[չ/O4Y#?[ Mn]|Ma!\tE#Z}TxP%0fK92*\hJ;6aءLWh`9RGqǸP 2[W/G%t=0 oչHO%G;̉ɹFAZGXHcUA7a6GWQ]{Э.Lsa=x S&6$~ _.Lpc#ר[(&2wqAm6?#ӨНzU,\mE2<năR}$)6F}LCOtnR.VĦk77R5fnuwQpkA+Ɗlhιl;Sm9̐E2kW ի(1LRi%d_}&&IBK7W{͞]e!D"aPv^hޑ3hDXopck;O0sôRV^TTIփ3EpDP[\y/)Q8 GI ?.RtTf$A^@tprGGYѪ1;[ zw2a%MԤ:HvYՠZ.~[j`U{Ń? 9J'$ xLw&ގ eB0ޖmB:;Wp8Rli ."•.8+5j` B3z߮G(L䬾u0PSrZ8g'.gWQ͈XW(#7Dä9延דF-dgROQ=ؔġ%x0V(u!QT RC 9;u LtASr E١&prnM[c;e􎫲jb]yAxϷw&\ȁYJutnt< jn!;}8 }H+DŽ~*[8jp\j2AVP>\-;R+׷Xmؿw}[*{JK'MlBSVBE ĕD?Zwp ~Y%RD4yՋ054Do50FiMiːg;8 (I{K aAPe5=0KF\iHF(bk)uRK =%xNՂ0•Xʌ@f]ri:0aJyѤ/K,ۅ6KʫWQv*2N\!uGDPȵ=ޚiODZnbeP2)#-OcJ>5q 3FU &J] =neUA6` Uy!j: P",,yi2֯?unOg7Q8J@P3Zts:\~ۮ Z!e`P*? aSх~^>N:M!&6iyNLY%֢I|&b=g 3Q_ZѾ@0B3osrp DO܎Y%ގƜh/ȾAl0M:6UmS!pme")MrE\R {4?Z/v`KfhNA`l?v&}þG܂ˇ?H.6 `1 O#%=I__|TOw{Nϝ3ske{INӧ DRAiay;z=m8*xyJe闊_D%Ͻ-<[=Ry }Kl^ǵЩۊ-?9}JhԶJzhW'tMp]`#ZZ٨ |>tH׶V*4ҾQն*=pX "l2U"܏-+=sRҠjӘs_~|ȸh2HIՐ'#96zOQI/Ѷ mx9uOYO[7Mw&XDי;-ڈ GљnW>*1 'Vǰ*N`HEzk.AzʠȬ| (yhr7L;5GS٘nBRϰTێE-:`NJ&}-n@||, [p$[4sȌ@0N×ulC$º@+DȶɿtRSv VuM'n1WH%d2͇φ(pgTk@\GSmW1sBnL]*˝rhx\bPQ7#7zG;Pj)_ɋ%7iug,wVˆKJeX %88n Dͥ\`A 3O*#%jy n.(w~4dhkZN(M^6h4!;yMluz UL+ϳaV%Uan6H$…P9JQ4}\,3rhF{*]+8Z@l9G<#MrwMْc]uQXT}?O~Z6+QUfkK7̖ǽp#mq0WI%{͙ Mz|k2kdKOX$! BO zU2P׊0^vj[b)OPR*rB>n]Q̅Kξ:n*ȍm/i` nh93`h3O@Ƴ ls<&F̕qkGg εjIj`PĂz|g^cmI^!b;B0qSNlKXW*qLGVv1oM[k8DJY?V#^ ?.YZ'`WB_tNG(hLdp*4?~oFU  2m Q%HoÉj*cћ"[\N䏘O%U> 125PQl.QS.kk*$Ѳ_Ǣ$G6wǜw V~anGz.MB+}Dw +y5fXJ Yh@b]zE㢙}*.+=ROeY+ԸyAGRpMV}؏up{dש3zq˨ |y4>ocoZIx05 GϚ#b)>}xӥ71F`"M):AZdZ/[b42?RXblkDld_ #WN}~$f-!%6ZHF%qx2J+9=\aBl[6lyԠ?I4:MwL9 z8©Bd &5L|Fs¿KS;(7qfTN[Uﻼ"Łx+opBpQ]`V1q7 85P3׻eNYݦmxGuV!S.ػr9rIHZ[ bTA]8ă|:aa+!WB 4Ӈ^5KijXqӂFs.1(zE94u*óښ1;̪%\KB!ğz|t9km>hRiѭF@&w]zMؕ6?dWPh?&Y#d6'z  -TgJv,+!4tHуx_Up;[M3ڼU>mM4~@z+1&m,w3#\F2MMhve!E 6di7uA:Hǯd0^NJ~\ 3W>? yI ERL&狍'bڄ*P] 'M>)y1pe`lauHNpn{B9b,TiiyU.5A &[`9%M|f$Aeב @ޏ4=E(vt6.2]{ ⵔϥuA81.^G`&y]/}37i9-IҖp/ecky?93ĪuiݱU=VS(0u5B;6֬ҘuU!uO[e6ra:'/Zǭ(7 #M9LҤzBJ42xӎ_ArtRx |Y|Lm/I\}fI1C z@06K`a}.wvXk2b]Ҍ;Don2Wqm(Y$#['P|`CE)ToV]F&k5B)vہ1q D>Ś>Ōϒ|Kì XqN]r$.9xԞ5$O|vٿWV,RܴM8m/4)V+d E+]xZeۏ';&Tx+N. _,;{M">A.θr/j;bnA`7nUG.T-0&̈'vu"_hYN8a χoh!G}u18hr]K r7[fMmX9jKڏ17Z[dN3bջV.NKiW$*g4}"$ |V䝌?􀽱咤!pTEdҎm XaM9p'2Y' 듇l`ү!ϩqbFj \*Q:3je_k,9#y2RW2J3PVw0E}PQŨ޸?b%2RQvm ^M]0NA}zϕ,R#%$&(SK;v"_A=9Oi ò~2ij U^CVe}+o\D흘c#/ezahiģb2͝ض7&rhH v(  g5T&a23E}ͽ7O{'J@ʃowFtNZQKQ gyZF:eNL@D/G/Ee&*0`bՇzke'!uYY}_CcNo :kشM+,*U;$i12Qs2n [oXm{+s*Got=c֖E_#zX¿)|#B(3f9I}ry;ҽɕաU g>y$'&Ozczc765V쩮d|^N0 gX5MY? H;| ?BaË 1^`U{Cb @ALae>'(;wSh* U5cQX'^S2Т5gV$/]]-)kK?CsB h;+d+]p4R+2w!jG@_%7Bqu3.) )-;e3A1⏃^5BT)Q_0ilvu>v*4ESS *M䁜=y峲5ŗuƉ0IWTݼ\+Ia,g3L:w#m`Y.k~oͽej.‡*}ڄ(/;st7̱ib*{zrP-gTh9ki9D17 'F~۠9YO}Xڽ u=fZs2&- Ufp4Q!vHWdq4CJ> Ϸd˲T~! 7ܢ(3[" 4ff' t~d@2NTY[[ɚ rx"klrV~%gap:e W10XyqvW *'.I|Ȗ[L-uWHȒHDJE' j8RYki-Zh-n\]dv %(^A_4ז ]iQ []Ip5سA.) 90o{לÄRF"g,C02nVEDoK7XcMFaø/8+ơđMc"WYC80Şdz*XыFx f]h^IS9h]/0G՚]x:p0/nx>3'Jd0dgLMuHّ\=9( ˢ8WyZ7=]". L>>'tqX+L+Ry,"Q(@e@M6HΩ B92NT1R^wFfQ^f;f:nx˘'3xڲql'O}zP}QVm/oq~2X}^Z|J 8SIj(ܕZK^Gm[!,︮Xʈ?zKT-hyp(Yuj Q{Üv+($ʹ2Qo %3WHSoTfHsDJ\ uԍ=A4xi} e߆dq{!F!3Fؼ0LUGZ4r#٪Q?D*ԧ koSo%ߡW>Vԭ-^HN\ԯEY#Y~cAp@^3ߩIicd*MGrCwe^F>d*7MgihȡМg1Bz7BB\=d&.e)}LW4wL4DyCX`&:Siv0Vϥk$kwaj5mW}~@w~Ol@shr;8zd?llQr 2N(hW[]* f4Ho+czusMQ{a Dj m5>KwH&^'w[qNaڡY4wiH(;piIo0 O]eӳP c$ OJR)6<,' G:)xhg^Z9Kd8^!t.S(D䷳v74eBjq57ǎ̍ OS( u6=E 6x83mn&hԽEO9}zfHdluadǼ=dl-HXc;3TtQo[5IQ8E摸{-_ꡐG/h nY9(ħ$ļB!40< ʹS :jrvO:g㵷)x92M~ҫ Zg IʺT`\幒gODf ç)k+'iAhY Pݓ.DB8d3K$ФP]zӅn> %pHҴ0zqWF˂=lXԋ1A 4{R4Xg(ҨZwcU}QRBrr*c1!Iqy#G+~`Ak7H#$ۊ" 8"%H1P];? v)qN  퐫)[nn`{^2:{MY @I%]3=Ÿ4!gZ.Xv ">uQU:t^ugr*@MZ3IMo`)nBwSS5&ȶrW )ly0COLe#JM믲+ 7 -`DXf9Gm9VW6$eTl_]k*& tggrY^̥ρ ctaTGT1)M )0<3- j/DC8ɔ~0<:Z ;K2Ǎf_T9QqϽV4 'ſB8[C+?A!%`"&E.&FSrI\=-NءXJP|6^峄X?"gT Ki.6ܮ1c(TKB\-*CL#],avl,cTU' 髫uhߙ[,4G䈚㨧{VVi/YgL4Y5Tahx¿4^pUYb&?;蒃MM 9 ÈU)fjVX|&-=ow0!ԯ5ͦӋ4GE7hxL%ٙbb;Fْ$ NX)=n<@_OߑqvSK5L g-A0\s0oFA9tZ:m༼q=<=/g_V+ ލ(A-l 0SWN˒e;u#M:u|7=lҤϷ [E[ ?Gn&kL#8"]W?H==qTdk)+QfwuZMAm%pq҃u-+5z[;Ya/aOAŠHjZ|R|8%N6v| ˈm\s)`H=I ]Ys Nׯog]4ҼA;-"\@-[(Цp#CXWGŞn,"l ?9nYG=R4!`zn7TsQl % T8r{Y~؃l)GP<2;*x`$G/+4>rUqw>KQ@B[RR Ujǘ#Kߔg, q=wB+ṁN"u%wHt?k t|$12fCj/k}hA$qS a)-Q5JќwĆoR^%11GYZlz20aԅ}l+|]'1F7M}:<#NNmRXx_Y|؍E$|x !lNZ76%`8.2ɬZUȬhZ[[V<Y>+ε7,]*ro:az jeaIKBCaQbbBvYrOM}R̙wu巋-ظx% huλvD+ ~"؎=Dᰣz1S0O J< p'X__n7:NYch|]=h +gcv:sJmWR0 O؂LhK,9)`9hs(8H0:}j8:G2e[Ռz(/梈˅? `/~q @ "-+Q|ɓז`k9U1ZµIF?w^(O܃wU/3\݇ 9~u1>Ax4 (wʔ1>CР=[KN|SDA\=ڣSࣱQe*QG*hSVMA_R.oTs|;A.PФkBsVH 9NpYFOuT@w7R\7zh; 8`Wz0$6hOӿ4Spi Ybk tm^2oMcXUDg)˓TA$ْĥ)+#2 xWԗ=|}yEK/HF/r)8Vu6Xrʌcuw;$Δ#9lA:Q!h!|}u+6$r /nT%;(ȅGAkOLHIe,o\f~^g&5,=m־&y)>߇?7š<!\:N1x4~ kS;ߧc0~_#kٶ$݂uۻğ}[!MdtS"U ߺ?DB]R&wfCu9݇7I D߬Ea'\Ϯ3$A}#]{{O"h( NVj{Ph ֠.&pV2;PH;>ehD|(UDM`A/la9 1X(,ALttK 'w\L=twhHg׋Fk|'N0VcMUE5+/A9oMd" -m]H>2T0+#Yrͤ ܏' 4հaIZ+ *}#^g85۶η1 U @>쨅aڅQqXӛeo%bR񾹐\׸wʽzjLTΰ¥wlZPJϪ(G+\[^Ua_J7\\W֚W1gݐد69b[ޟ!KBZRvбe3kSnk$HP7<%$]n'`~̱whO+=(lRh WŠ}G./`压xzm%>hX$<*m*:^U6&(ERhP@ci^y1)pte{C^_w(+i܏ F.e㝺 6pzwj,! Z3wk L3K-@ثF} /ieɀǧŽLs>l55٧0ZM?ſ @+sg0{Vwa }P)v߯jcd9sUҮ꼅*f"!ɻgO$(mNCv#hx7Vy3NW5꒨`7Cy qo (1`E ,}8[zի 6'gXF 0#)J7<(mO]L:-R=cԱj4}׈|cf^3C~3t!Suq̕W'Ąõmq-e M~ "dž\riN*Er 8,{Ry ]@lJ3ϼmGpޚLi#!caHȼw4|!Rpb/qg-xy efJB6+.˖~ K27ME&-\:MրY n3O(PII+Fy_Ҭ”M:*taucݥwXsk^`3zZpMI|XQ?I¬9k@g8s!ڪ=zpHIoNd>alV]QL& 1/*4;]򖷫.O5)/l ?j}SiHqH#DՓo'2/"R֟mxZ^>{ VI:Ypn^]̕ :(2f%~k-]ٌW U:d=gK EV{(M(ͬz4,;ft<'U4@۲Y4e 4(ȟN $>*VgYַY}4jx,(XvD|i_h%e,R%bl(-ߓ^$5}{H5a3zn`J" _}.ޅu*)'vYB oOָuWV xְ#aФ@;}"ObHx5I2)]ڞSE劮I}y,c0Ůɾ 69*bK/}ڗܯlxj(3M~'1ˬt\mܷ2O>i /0ʨYTYF;a8~;/:n~F YQAh/]O75[""h`6h\ˀCTe܂^LC[p7 KUJ 0`W ԇ4r8ePNZ.ꫲ -!:ǯF)5Ǝ@|za`47|1ߺ$7U8yĽ6\D31;:;@#j-c~{#KK"c(xRI"`)z Y*E 0߸F{ EٌG&{|d7#9F_Q&V!e(Et-F(:K/@=M/RJ|QEI0΅bK8W?tpgw"?CQecwp2?n\n#3I QBl M0z*gܦV:ϑvaU#6mJ&lc+ŸBEmJ:HV{ZϚe_OL5#%MK֩7mޣ1kWIϋCUq@/=hg]RwIj3qW"1%Օp5h%U<Ȝv Rp/ G ƕqv:3N56w+ >wG94xCȔpۨQw5HO}ȕG#=}{)RqpYD|7懪8y8 >keGfx>/Enkyj*O ^3,*O~<"\+МدN|RH2bus5.ǃ *(ƒ/H!4#׮.0tU%Kwe#4"x[AIXPN}D+C:k }G&/XWn(&f ]$f@CDjA0oI+p $%3 *C7@|L?f/DʎKcZ `2j8a8K1 7(Y.NTB-v_@Ks&u)b2dN;ZǰEү^AN_V T@v~0HbTHmX+-k҂1!VA{y7``8_3H/+Xye T~M x@t.K >g-%Q$2^/tUEɺ[;cNYƿ\mikO,DIe R~pR 33.Do=l6 1dҰ%SIH7D3\vK%,a ƁȲ慜߽yڹen컮q* м%M}Pd55(\~3֮ vvFIsb/?! 1|A<)S?>{Tۻ"0`P7HӝS_zk|Os~zCܪ`Y+dPIHicsv$;\8c"ڼC8{Q/ ,9Yg+Ld/~mXP+j _V~"/B^8K9#LtT~߷?PɼNV#8Bp!MiUf-7GZT "6u} 6f8 !BAAD{—t-{ |dز*%uȿ(a dNO^fMޤpVV;|f?%RE%ow~a#EfR-yF{* кYw>I$M4@0{7 SgPۦ 5z&K&x=@>R ULQ:wR!4nG8 j'k6rߔlśY<g{90Y,diW@mM+GGGY[ Z[|xnϓX9i0gtq\U̴3 f*h@';BzDyE{F<3I؜a]hA^Ȕn5x.EP`1U!iTPfKy s0Ie%4i*~>-ZF1 x`8| }΀d 4PmƔеNѬfS$=s B Q;f(r[\>Hy,M'vrSV(qV`❀?&$-vЬ)XxI+DޞK&_=d4JZm7 Fu>S-?֖dFG3A;Ԋi*_v"FFUP!>j.jٶ%4v= xNP͔%D܆Z\%b2fz̃J8b! NHg%\P;04$ېN&a1tFfBn#+$ҧo[ EMFEq53Nq4Bٌy[-x~){}y=ZOm١  *^9T4M&ѸLNrWxȈ?J"N 1lXr}#Þ:oAQz+]yٷvϜԜòb3tڼ^^x҈t'{5}r>P,7J cRZcή.3LI8*{Rg6 C~SǤJ u lŢb\*Q^nny)Ƨu+rk#BIP\lإ[8+oW\I|Z `u蜩BLQb:3GX1+2 nM]4YoM2dr{ #ǹkE)jP+;5F前S^U C敌[Sa8^xHyKRvcd,tr"vퟞN3$'ì+N-7,6D$ᵖv0һzD j Ujh"VOfnY |<}x[BHtxjLVtd1.P5zgt޸ݽ5Taaͅ H@LN8}  C.*ޣ^cK㯥U \1沂Ihw-I$g. +'k5?' d ߆RA<8iϱٜGxIY-IwVy"ww쨡V%)I!Y2765̏ ?:NKck0Z.¬F8sN|D  A>Vpѧ9N; X.kQ> )uLf0#0br_7-Dpv@\gtD&+NNiV!"eٝ1^wYwm-{l3wpVX7Wjlӎk>où/*Q,KZç)涏ˮYkf֙}qW#@Kz/yRN/cPK$<35hK?ԛjBj-6ZQjuaU7Ȃleڭ!2/͕7n_-*v_U`J"Vk%EKK> _xBZ"lPH| >m2B!BɎ>К_̅T$jr T | iOƆ''〙6p 6G4;KUCn*.wڴ)V\c2m '7 T#=/ 5'" r`77 )4X]$M2h,V \iUrg-!&w AwoG̸ SV)5%%sr:PZ>ɽlC P->yA -C=`K/1|NgB'2jfSdz8(jpu( }x_u߁Z=ݸJhרORIVܪQ՟'cV. DZC:, >KE;9ǾE9^%6M u?WpXc+M)4<<0 }!hL)sdY\LupC[ L^.QhƉl;K5CyA=_l U <"%}r6pzW !ˌ`lB‚쌔_"U~;g(!24YV|l%zـNƵ4~#b%jGE5w%g̫\GCvU@(0Gۄ6J&0qK0o_k yM6_6y mJ&ųx0 #~(1.U}Y'/0"&vQ&^8ֳ6̙@&[4 !A, W!}ܨ9 H3 R0O87(\nc ޚ35鏸OR=(([4')YߎyEV!⁠;og_/SͣkڿR/;)+eЦb߹h* o M#2ԓp. h|O`=~耄V$ta 'LJS"/[WG㢼K)A*S%`/1UK>ЊLZeQĉV>ΔI8PIGz!)onWhh!_~uX^ĊT*+ G\1E:hi! !fx#s,קn)Bwqmn$  yqqtt<gclb" N3.Ӟ(@9)I+}VӼ8@[p7.-*  HY>6 $\|h{C٣  3lx G_Ko?G0SDJ发535 @xf FA_ny2r.RڽKkbpǥ/\@T)bz,w& [wl@pjm߹N J ͔8O̎X ., pkc4:&cK^اuDB#!\Eoh|E1Uߓ``CTb[$fp;2πBHmJ5:栔P 8z)" $eђMJjL& a٘0ܯٹjL=/zdֳ FTD8T3j/ߩSڇN"|O2^ 0?l/rX!Ͱvt2: S0-,ɗ\XtscA?F2-Nbpù(h(= ~U=B4]%or"P0oQ3AZS4!gG^5S^ T۱)ێVvp? yP 0?2B8xqfr_=F@HkM BWPeBud;A]GJ?bKM\q94L|Ehzsk:.jĨI!E'zӜ,mfnrfo(a`ّwQ35#yOs(xm=oQ8N.&rV'w f0UǎyCП;(D-?;S*%)[iy|`]ti9.Z$:`a^JB2°ހqg_HT[/ԋKD֗=F.Heyӄ)Ӫ^N+&)Sy\3EY²ORiH0tx慞E;|@< :/ &cBH?$y}.P .uLcn)t#g6*W @JoH޹G"&G{ P7#n9* "0zBsϥwEb̌0Hn-]4K(47+p q];jUb`w?h$ya n=}7m";iJ_9J{F]Mp([9*rLDn P,y2$VX; E1H"tYFtTٝO ';hW#2D|>qFpf[RHG)IS)AI>q&pN)7'|Єu$3Sh4@P+,5b;58vZ`BV!@/`w҉]&{Ċp@E*Mor>*#FpZ>_ZZ4Trdwt[EPhƂC^&ZXoYH<[-PSy%V?q{o2ᬒ!q둪qJc!.y!F8\Z?s_'ׇ hEk}ǿ.b|:`gz =FF/.h/'1,5羹1V)kD=;MaN <מqZW4\TXPǎN%YQ`\ռ)MLNmQj ءg0orQ̖$`>Ƶ5"ras}&F|^W N!d z[ MKv0^`S/U7-uGurb6ϜG􂆀'# ssyj-T1*@vC$ؾD5"BưseNûnK@+m2c ̈́hUlC0c-o#!FoR+65Cúng3 ԕ`~,/& "E؋!Bd_H7k 4x%` 1FiI0/Bgf{REnL=l@i7ig kHj {ů{(]NgɖJ+"bqFp? dA>U֡ \֎H%,dڅhkyaܨ 5Omګ5P5E&{a`Isw~ARpJ9pJb` fϩYXW)_ӧ3r_F*^]"Lt( av*$"/B8^UG(H ČXڣpFn3Q ${4*ٓ1.dffADCXRp1dp+"d[w.uBͨfsEL(L5nKpƯ̛-3)D`X܎יB6u>i+ZwxE:)3_q1%/;cu["Y+3^#F"Mۏ|tƏF\wQ\* ΏLǔV"dilinPd5w ܷ8bŞw8`7Ru&bNZBam3k9Ee! FA1ڻv2 abEAm`}»E ]q񘍀 z7W82#n[}gWjSYUhkf1kEV =x}LaN#`7J>wH'XO.ӏ*RBܷAaۄu'?ga~"y.]SqM&6Դ33a&F{C9@8Q+3)Sqt3p(< Bl~еmM68!mDw2RuyݯHVeɣl"VULuc@a?HS5uȅ(ڐ`m.\! A|[N*w/"g簰y=> &%TNRB*(mJB}9Sv:#!4 (_p\Ef\_dŋ,j;hV3tz,ST"ՉF !޽/9f v K6 0h9RnؽyZ'#%VzM= Xoth4|6-?9FTe#Cwy5U@/x r)| d!g0*% BUH2`kF*l~csQܷ[ OozhѸaszrTYZbyvpzwdaX1=#hc< px{ByѪ,)r7]3SI[!"ҋ-Oǫ$ޔ֕0}IȀ&Hꔁb(| >F[5 'ZdUFhAxj#Ӷ>C "{}i:ܷ&]6 g eBhtb!W'%YʵD J"]0.I8gRlI  %¾>m^ͻ~󰁊3C?]}mXNH:XL>);mp_ܼLՀnz?n m.e xt.EyZuVaռAk1 `spSbƲ.JlT(lJfzȽy"KÛ l6nzwP"!4 :)._!4d}m`֏~qONԨl@'R,#'eJ-e k_ SFq*dvQ6\`̏AqˁOK.ƒ3J=swbٛюlyfg>5{ J$ìsh1H$_ -* qT*N)uiv6SQyviC@XvZz7Ob?A[_:Fӆ,xe1)ݠ݂NZ0PX}!)+ 'k.V1K$=P]E#Vi.OK߄8 j׍̚WNɝ$73wvEb2H ړaԤ#űn{G,%oQX(UR; /^;th7qim\?Bmovoxѩ=>F P$ |c^l4Z$l]IQoa|+,ۚكXvG)gOBB\6|lMM۸ v2CRl%ҚG  3 DZml?zbT;qM8J#uzÞ.YbG-GOyO!k~cPLr:DȰ@sLq=Yt#QÔPJ#}1rf0_wv9/E)1`C0z򢽇Uk*bJ~A(ĀB¦ǢjqH!;ëXAjm*(.zrF XF`_ MIn%C2Q\ "ev˫b`)Ɠ`)%s?3AE/,,!rkj QXAP۱46Ĵ[wDs/ߨDpAz.>k:b #T1 &`TіʢHEyלRlYtc8W"բ<ɳcCtF7sB(88~ǓC2͛mweSflJn.cgm9bHї8dq<5Yp& B' :J͙tf|Mo z[69urZ%[<2X( Az-7+FaҫFIv O@ lj px5j` B2kE_-9HB+qWa1XA!H`wwz3΂kdQ҃n<ɻ|NxSZ-Bv?z 6iP]Ǣ <E'`VoᄂH|N6 Zzdq\$bZfXui";0GFY|]&7aev;Liv)S,kޥtA n~앮λf|\۹BUoTa)Q&u8WaE[_\eG?Nw,N>?Bx~BoDя!PKpc&S#3 8>"\)25p7!Ԅ9<׏aޤMPqRfOuooy\89#d.]7 N_g譆Dm/oiVCyh7/x X8z4]XHEOg/eZ2 $W}m/s$yhBtl|%;ef^hM9w#4xG%]u:D$F\乏ܢIKw<gh)VGP+,%zeca>[O(bj[L7se4B[Cu2K6ÆfTDq]U2flre "?ֲ<;3T7;9,F]BVU=IBm"Rd:bXȪ/١qEA Uxᣎv%y^8h%¥lNyO!1!9 ߭~ߓ9"-Y9vY77Rley/܏v8){W"Iᨤ6< ,˜X[!@Uv h&GUuMmB< ie-N-١Uˌ"Q mlN>M$u62'>Ŏݯ*$PNx?K$3kiI"rtx A$6y7}ߏz|yXJAd{)|$~&& IK >Rlꈯ R_K2TM,FXEö?q]t<,Lp:阺O*oRH=e5 ~Cmryˆqc\3VOL7OL0[B9ǓHѾHA[`D^+Xi22["VH:ȿi6i^8,֋G+CPD'. 3OXDn"ґ~ayJ7>,O@[JY{XhM%'0 KT2,V2t6R\bɋUlAjI& l½!x\p|h4Uq٤F%AuҔN:4۬Z{i~@!d*^)\%-G,?pTUGN9>R.?u zh"Tn>py G۬&唊Ёc) l#W*g,>y~WvvﴂY5`eݲa5d)c}TZ"[|ɛ%謑mXS`"U "Ry\p%q.[I+gA2V0 I Ie"H[Ϳ΍ Q"]sӖ H-{Ii745z ᯔ($te)yW$_Q'~^CVFCItQ}>(=d aӬ)%\+X؁;P*oEnK$v"c/9xw[z0Yտ1kS*nP(鋁鵤/b`EҋBf^MƄ3+ \ꠥU롓\PHZ}3[RNPoى$hKPL$ր)lkB=W̔;Y#@+U'cyTW2 xF8+$뇶Q3FBvM $5FέCǿkq%B} 3Wp^'PqhѠI嶙](P17n{j9tT8ch|稧_,Ȝ8[ƕhӼL2:L +yCFñ$+V"s(vc`8 Jq/jdt^rAXn,[V}Lz\VWR.Bwe<-]zDE&h b. ۚz,\#\04 6ɲ.%z `7 \0'f\3k L E.4n29 !cIfDݍ7B8SQPok+"aIT1f~Rz}H c ZVEL Jv5ՇCD|c_P]-bW (Zòxd Q dIdG#|2lږ!p#2{7abf;d`>8|#8]0X;YZAV~*?zqӖmTbz-U{=30Z<81fjvMNLU0d*|ze繿HTċI6E^3V6XyMx6;I$ ^f⮫(-zYQ@eMybR+1K9HQ)~xAH ,H씒$׎p tWk'v*Қ"me'#hw!gI*/R{ω9@5Jr 1)nkSEjyCNΫ !i+U1?c?aw]|F҃z U8RE7ȲpϡCb4@ Y [,.T_e hxuzaGU ~P'6 pk>78V|xn C.b ۈݚ#6rۑWvc$nS *How ,w˕{:gω *_ ͆`L ~)>۫b}}n?p"3kOo8XKa]ws7/9VOV8Ok/׽Z !%ޥ!9ϫ5^ E]/s;"(axttm'!Qu'$N)M3gdl;Yux!<?*"KENSqV񗶸[ ˆOܨ \KrկbeE)d#_,9AvAN WE $J."-<֯M 7,)T6=7uo'q9:mٻR_tܟ|D899"3*u>ņ_%X;*&B VZDv aC Ä_Hd#Ƌ!^W6P S7"Yx# wC6|Pjc>W) ɶanRaZ=Q}E $q?YsT6p{ȩ$ ]8/5b`T,O9_KĹ--;shO^KT}X@^0QLBYY6J9 ~vk9HRv{F(4l O,V<ތNfCs1̯n9d ]|30#% VS#3u&ʙMC?;9iݫkuP4fj@$ ?e+D,nͫ_Q?]ӊbia~xiRhWz{p1Z\?M ^ ˈ$$ 6G`'h|"@|v! Qrz@>OCٽb ,ս^mo7`B ~k Z?ћɪl7,rDSՔ,M4bf75?hԬ0ӲD9)Qv/%4"phY9g&w^JuE›:/x_IrTAyEeW]"=JGW"KJ OHǾbh{!?#i~tIz mNEXI ZJ$3XrztKmoE\ݑK}gT4[xg8-5AFi ?! 1۬ݓ8hT]hNcu%O;[ ?#Ŭlއ54lB{NqCa:>"PޔTJ+qK1BK׉@K^[!6("9QG7D|A첺.årĢaOogov\hRl9%<(<H|-Gk~g=~`Z5UqRކD 8;k 6hN9S5~`/ ż #P@J2:E2 @އPDK~rG\ԽlDNuh2{YȽ@&*H1o WrO6G/jxu.\7^tl4_JG-e$[A+ҽa8*j{G"aYֳ8Mt@`6Ν̇= +:nTQb3רed>qp|$-PfDJ=);XZ]&&F 69rjC(_噣^[MtgV'Y-fVdk:Ӯ)݄.ej#@wx[[ׅ{^> joէ8H0̐N&M/-RG\ܚtBzACHDþ{|ƼC6,BZ"&|t=)Ue?  pK zV5ӭaĖ%Rޠۊ!^k2y^= _0rD'VԠ9R%~nm/po B')Yj%&3E)޳7}|I8MDffj(7`6Bo=#H>ȕAT?ߍ`]]Ӄ>#N.X PQ~<: 9>˶!?H1X+-dB fy#k!uhsn5:f0⦜.3ga7w_7#=9٫flcܗJBx0׼zEf8ypŊPS@N"M]e];LocC=,_4>#U'*yȮ9EvdHVLCٍ;v\Ń*?6?R5PJP/ظ`u/j7O S c֎P踻$J̝ݦTod]rJ$/xrAx 6:y icrZ /GjܖQ"Aس=wJ(SHɂ\b{PuCw `_f)+˂+%N _#H+)\".o#c i\MT2Wte'~ӏT~W wVLroɦE J TEkMxs@U6d;\F^ZH~ Aԗަr~y̘IIvհ' ^Ӡ0=ҷa50JWɡ;JTDh524ױOE|N)D'OMYI$WMop.֏ @W/7Q21.G1o57itL}g-*$ٱ]1lLrQ3ĶAC0P)kx*u+>B}I|1F]zR}єÅrsWm< 8Ӌ@nC omet} 7IjS|(MlJFx=ՃMٯ~lDO\@#S@&M'90ɓ8ae)Ĥ=''$s nĶ"RnSA-V&,[#~dqD/G]KWUtu{SP&#f;&!4 M3M@*n|_hzֈhcB2_0wP'%cE"] o!O#PȭGa[Iy-= A!J7v$OדOczd:mpleaiX`Va{U}eMX\ 6 M]h-((ek# 7% 3ݐ$ɒRAal1&9ļóX| b|u0o>ZVWxGfbSW,`|)jlNj`mT-#sz"}έ8Mj4XT(RSHV[LZ#U /ʹcPn[b Pf+eMM^W(8mO,F x:O\GB:oMvB]]^vNp~u[­I%&I7@x$M%W-pǢ23riTqcSr!x*v-+.uOsbWQ⊀pqoEa N , U_ X?d”l7&s#8]),]Mb/4҄0% ; )MCh_EB=*TYX+u}Z|hyYw^R>~kE+P}p|g!YwḯLFO)?+Y2|ET2Tkf8x[Ks1hEkV.ϗA2*?!:-DlB G\|b&uyf9rvss4X2F7/KEҤ3~. d YsJvFw`Td_r#\U]0T_~Yq곦 dU_e?sᔗ5 ~aL{H`vI>Ս*A99O 1zy1ChWBXPF|o2 d{6RV;A@9/p ;̀Nȝiyl. y{6QSTZo^V#)k?.ZKy\“NNTrK) AoW_ .FrW.&F/q A,q 0][H1f@byi}Q`?Q35-/hDl7}-ψoهBeF&~Zx-6J6 <*]5-)+]?L:Q,,Uk7Me!O§1Pe F*T=]a}i 8!}#GW #kÉ0֓@o_bu r6"_X}i4B6s'ۦLRNX5{&p9f}ևؓCW,S3+ B\1,vwZpJK$(emE5; \(0@"B VvVB dltd9>W:#_C#5@3%-ZS%ruZڪ iqk0T818Xi$TJBeWVD&>ȅ$!,]J]+00dN2 ny& IAϫPGHvvM}5z\/]ĸ$