samba-client-libs-4.19.8+git.430.a10fe64854c-150600.3.18.2<>, hvVp9|;08W>"#70Dz깕Y"!+N:^HըuSI80c,XTgxx :A>vj+1RgK‚F̐aS ca8T` HpNʄjmZ;0`&st[?D,ͦY1\Cwt0Z`]N"ܑ9f-}U.Y.ʄT%$ݥrq6gXw?50W`DKjbQ#Rf%#,h>C ?d/ = T 9PV`v8v $v v v v !v#v&v(l(v*|`d(8'9':E'>L@LBLFN)GN@vHPvIQvXRhYVtZY[Y\\Hv]^ v^hcbhci@dieifiliuivvkdw,vxvy zٰ Csamba-client-libs4.19.8+git.430.a10fe64854c150600.3.18.2Samba client librariesThe samba-libs package contains the libraries needed by samba client programs.hvVxinomavroxSUSE Linux Enterprise 15SUSE LLC GPL-3.0-or-laterhttps://www.suse.com/Development/Libraries/C and C++https://www.samba.org/linuxppc64le Hp y  (  8(H! px 0+`8 8!` % `AhvUhvVYhvUhvVYhvUhvVYhvUhvVYhvUhvVYhvUhvVZhvUhvVYhvUhvVZhvUhvVYhvUhvVYhvUhvVYhvUhvVZhvUhvVZhvUhvVZhvUhvVZhvUhvVZhvUhvVZhvUhvVZhvUhvVZhvV\hvV\hvV\hvV\hvV\hvV\hvV\hvV\hvV\hvV\hvV\hvV\hvV\hvV\hvV\hvV\hvV\hvV\hvV\hvV]hvV]hvV]hvV]hvV]hvV]hvV]hvV]hvV]hvV]hvV]hvV]hvV]hvV]hvV]hvV]hvV]hvV]hvV]hvV]hvV]hvV]hvV]hvV]hvV^hvV^hvV]hvV]hvV]hvV]hvV]hvV]hvV]hvV]hvV]hvV^hvV^hvV^hvV^hvV^hvV^hvV^hvV^hvV^hvV`hvV^hvV^hvV^hvV^hvV^hvV^hvV^hvV^hvV^hvV^hvV^hvV^hvV^hvV^hvV^hvV^3e36245f201fac5f49e01e8ed0bb0c1f4b829378b0f73c1abaac144d52081a0710e45072a301c0bf73376b7dab2ed47580c43a365b7ea42809b67da3792717b9277964608a0680fb5c811bbc8ffb4503b804668763c60a59d004579ed4a990a46f86e50602a8a17aa97fe41c067439f8e8f1abbcf51dfae4e92cbae7941b4b83393f066bba75e63e8c504eb707791fb350c0e2dbc70b037b48872640d958acc96e9d65398c7d9ed58a2b2882a3dcd4adcf5983265b146040639db0d41e4cd80e4f447d680316c4c2d1ed7c84a0388edc23653bda15e4a7e7c96c1b31f370bb635b2ce1cad3ae4428ac80422c9f2258b1d2a3a8a7f4a3f2095338f035290ee15d53018f4e6b7da5c2df4e400eeedb9d38d696a5392f17e454c7e29af1faa76a6227322b48533f6596d7d0896ddd00cf8757ad6f401119ce6fb397a386aa8fdefcc509cc2ea4966926b4f71668d58e5c5d8ba19817e6398e94418178b177dd590e735d72ecd11c428f1b1dcc39d088af61098d3608bb73b0234441f8a84f904aab49fa2e6f99ac0cc9d68f352fb5c5f0614eab16e6a24c27e6c619d7de0b7c34d945fa20e04c8aa81d16d84a651d6b8824882b674df46649e14f7c33da26f7a2ccd0f58b2ed759a5ed93837516c50843644e6bb8ddf60744a0394241af81f59279e9a1f0f11427bba4db8ae2467b7b31abbe9eda0b95d8ba4e7e50f0f6e9a93a29ea4cfd2a42a994ceb075b71b178b6237fb8c610419a357fbaa1525556350d607aa27db681c83a9db45206a814b5b75da2f9f1bdf42f5440dc253824392c004ac180ff89bbfd8cd7a452537598e03978a3d72657e2df17d62aecf7583684ebfd36ece8e40f0bef430994caa3cee55d6fdbcc8755118df0821cdba2d54c1101418555c60a2b5c45f82c39abc2fba3638c9df86a8e07137b497c4ba4228198c98065b77b013f7854d0aaf54f7f7c404b92f4c4e2d906da0c8d48c1975c8d356e23d959e89937cf6e74f50ac3595db3a0c49b3cf0f0294515bfbb50fc29273accf1ac998ab84d1dbe44b61ff5c9047165f2fec32920a60bf65d4d0b2a4111020b89745bc43abce6ec3950a2790c88a96d0201efb8ed5fdb57fee8156d41472732f52020e9e9f8425c2f8fb8b7435092b328b375c3b096d781d65fff67c7ed0be8b1a0681655d291625eee7e10445560859c46e14218495e8e9cf2b09c9bcf596e7d3f82a3724fccaf80e72ce4f182ca7df123771c4dbaa1dc2f47a285ed2e83278b51765748b2ba2500e858cfeed1e3ba942458cdf6ceaee1a037222c16612fa11c640f1d3cc56c1ef41cf4f69d98b8d3e4e75f990ee9d3ee46e49fb140445a0e3e2190a22d4247eb5ec928a6877784af54805b5394dec3335a3b7607d3d8bae5619d4b135625220cbf3396fb023ae4ffdb249ffc10b8dd2f68e467f77285f1ae0bbb13877355c90b01c33b6a52833cdd3ff945ac0e53dde8548bb9463dc26835b8626b245e0f3fae2a9857c0e1859174037f62b2dbe09fd124d33674e69e758f8c3f2b80b5e531eb734753e404b9b804a51a7898e44ae455c0d186d54933b6eb949a3c4f34eed7e3c3bd915b6cd2a5873684ab7ccd312a3667ef5aaa7b472cdee84cb53e972ea60ef776d38b8e8f80f4efab465c0a4394615a2fb6709eda2c9697dd2dd64c7b22c994cc54cdb11e00024f9822d438ec48b08112fb04543891ef29d664ae45d283475b7fd2192eabfdeac38d4d586cda66981370aa82e35575cc92cd5795e13a622919547cda73a06663886487eff1ea3fb4ee5c6c345afcb8175d672a2c7b35bbe2ef8bca8bec281b1a08be68630cb173758cc2c1e0ce022e003ddbf5119dd6c523e613ba8ed8d46c497ffafe8a49436d76d1336a83914bc26679d6a5a123b3d507c0f1b68529661540755087ae27c436f1703e18c665f275e1eeed484d8e834b9c5e6631452ec008fb1d9a7f9875ada9588406447f7926fe862a85472df50522bcb2b193fd57473155c958d90d384369fcd66cf45679bb54bc9f21863f14b35b6fa980ac9160079390d77a38f7463b9222adf62de87578c2a063461442083616afb899739e7d01f51a420d3a6c409ebe8c31329e246dae8f3d2eaa5da109369937a78c73763e27e9cca07b4980deeb179e59583ca2a98301df16c8f5a231909dc7322dae1f25ed67c12a6e8f433d63d3459e42f82b402655e00b0bfbf5aa2b792954248a9f3a4626ef2c5e0bd56b9a897e1c7558f653dca5f88cd56fcd080155d0c35f04a19e1100a2c8b190078a299d301353e216c1a73c727ca086f93002a5d63d72c2a606233e1a1812c71c64aa82f0da21fc81e807dfcbc036b1bb6e31542bf1deb3c2c19b82d85c1324460f1c45fd18c67a1c18ffc1b5ecc6a3ad39b0ee09c5ac9c2648dbdbc8c4336f3e2f838f76fc86be68930c070fd8b2ffe420a00a4d58ea88f54c74da0d66eb680958d9ab1ec4871071762da5496b2b9d2396d531cdac5f004ff9619634b372dec5937cc98f573c614461d949ad76ec6017bb72de57f1a21eea8d7e309be0d9bb34084f3f7598151b46f3e7af122c971e149814bbd9a76a22c75437c93dc200f76b61a5c3dfff014c0549f2c999b91bbc605907934cafb5bada6ebde58448811d8b37f7e56ffff4fbf47cf49dd247521f0701dbc5b94bedacd730307f80edf1b80bb04a8509baec1cd81dd868c2f49bd17f1048e4a179857a527b56f46b37833a5b7a3c980b417e7f54a0360432a4f5379e3dd0c6f5e79784f1b2ebfea219ebd86fc2e60e0b43ba19899a5fce6287c177ebb1469f501649bb5559ccf2d7252ff837ca208f7466ee290219e332a252897d456fabcac35bd03af2cd023a5bfdb773a8246b8d0c2e9a8cdb8ee01160754c082ed04718654af0c4f955da55d57008ba5f35c0598fcd5d03af8b63dd68841fa16361028ad5beae86164aceea5e65d37cb20c35ac505c3ed06f5f56fccb9a8acb00dea1fa4f07527be34dd40053851d1f9fa9c6c9a7e2f5f415ad2bd79c4f24e3d9153ef254c57e3aea4d70ff06b37ab7154374b326509d884726f1675fe077087f39222f270822cbeb0f09d09ba83720b0ab47f9ddc91a75eb0f65a3989320c0b97f488a87635286c55a9f356c612f62cea1458d03c344f9662be30cc81467053ae4f5f7e3d9f47a848e4a984d15d15a8b49bad3112216ed1143bcb95fa0000fbea2e6211acb3bf276025efa09f71125e5d214b05a3dc9343c6663dbf6288e50a4a51992ff89173f838d7df5b025b06b89e734d5b0e52b07495eb823abcaadc26fce6c93bcdd5423056604fe924efc74ccceed19b1671baeef88cc5191076fba202f51d9d344df3edbf3db9014ba170b20c7069746e405d1100b85e3433207812d24edd669956cb230b8ff0c29fd6f12f2b9b587764e0a8136e09348ce62be5796b52891d5c0a688b9414d2fd00a970a9db717836869fe71c4ac250ae3eeae9a2d82e4a899e1ec1741a7f8a99638ae02b0f1c21695098842f1efcdc644e8b5aca4ef93b930cfab5ade166a54913d53664d598c2b3f32010d05453f2d8eddcce0d887fe2b1e13af46e982de0c3173ef5289e33d5effe486972a70a2b7712b659b37b60fe31b36d20293b6c416a552d407cb9cfe1f751465f22004a10c13a198a5081565e05bc0712c41f25ff88f138861beb1f5a3632776de868a1d2d47f6e86f151e6c0dc4cbdfbe3bd032e270eb94e1cf7922ec67a12797026d5ed60d6fd0e7723389d16e06aab4af4628f8af786e8a640d876eaa400052216264b762517fc4d52d0bca53d94d8e9987fd05a2057df436e2151f3e3b18873828ef8ffa7f6a7c6e5c3924411bc6b00ddaf18379e08bb0b30e952d1060955a50d172a1fd6695129bc1bab0bed3ff882ce30f0903661a028adfcabc1a9626e561f024a056481068c4bc6da03b0999af16c5242420a0abee6f2d4008c5dcfd5b607993e185859df8477c7bcc30e8d9d32c97ff0a100ca44d2ffe65992044c0a153eaeef40b6b9e24bb284add41a6b4c54f5916596d6bdc288b7549768b902f8ac6192eead753df3386836d0a3698693ba84c82999924f1e44eecd5ef6af6b8c70f3baf174ccd37f39c3ba38f1c166548c5e75d7044681c4c8e25d55898b0e777130be0b26176d38253fde2f5439ccd1af1587ff9c4879857924886bbc739d589406f60273f42b48dfdf91bdb8a691d659ae887dba49cccdd1eb52d50daba864ff9882b6c1712acaa69c12ece34e4d749d1b2930fc8fc5310a93820403395cf7e5698c96f72e061e833ba9412b6d35e618fd39a473e9f0e1e68efe9de3162b5ff00ecb5361b55ea7cc7af3e7f8e3128e2b3ab34d84802f933d49e2f2823fb5fa37613ebbd2c606c8d83412dce495b51c30c609111595fc9f55a44d9764abd73736afac530208b6libdcerpc-binding.so.0.0.1libdcerpc-server-core.so.0.0.1libdcerpc.so.0.0.1libndr-krb5pac.so.0.0.1libndr-nbt.so.0.0.1libndr-standard.so.0.0.1libndr.so.3.0.1libnetapi.so.1.0.0libsamba-credentials.so.1.0.0libsamba-errors.so.1.0.0libsamba-hostconfig.so.0.0.1libsamba-passdb.so.0.28.0libsamba-util.so.0.0.1libsamdb.so.0.0.1libsmbclient.so.0.7.0libsmbconf.so.0.0.1libsmbldap.so.2.1.0libtevent-util.so.0.0.1libwbclient.so.0.16rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootsamba-4.19.8+git.430.a10fe64854c-150600.3.18.2.src.rpmlibCHARSET3-samba4.so()(64bit)libCHARSET3-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libMESSAGING-SEND-samba4.so()(64bit)libMESSAGING-SEND-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libMESSAGING-samba4.so()(64bit)libMESSAGING-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libaddns-samba4.so()(64bit)libaddns-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libads-samba4.so()(64bit)libads-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libasn1util-samba4.so()(64bit)libasn1util-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libauth-samba4.so()(64bit)libauth-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libauthkrb5-samba4.so()(64bit)libauthkrb5-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libcli-cldap-samba4.so()(64bit)libcli-cldap-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libcli-ldap-common-samba4.so()(64bit)libcli-ldap-common-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libcli-ldap-samba4.so()(64bit)libcli-ldap-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libcli-nbt-samba4.so()(64bit)libcli-nbt-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libcli-smb-common-samba4.so()(64bit)libcli-smb-common-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libcli-spoolss-samba4.so()(64bit)libcli-spoolss-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libcliauth-samba4.so()(64bit)libcliauth-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libclidns-samba4.so()(64bit)libclidns-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libcluster-samba4.so()(64bit)libcluster-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libcmdline-contexts-samba4.so()(64bit)libcmdline-contexts-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libcmdline-samba4.so()(64bit)libcmdline-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libcommon-auth-samba4.so()(64bit)libcommon-auth-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libdbwrap-samba4.so()(64bit)libdbwrap-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libdcerpc-binding.so.0()(64bit)libdcerpc-binding.so.0(DCERPC_BINDING_0.0.1)(64bit)libdcerpc-binding0libdcerpc-pkt-auth-samba4.so()(64bit)libdcerpc-pkt-auth-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libdcerpc-samba-samba4.so()(64bit)libdcerpc-samba-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libdcerpc-samba4.so()(64bit)libdcerpc-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libdcerpc-server-core.so.0()(64bit)libdcerpc-server-core.so.0(DCERPC_SERVER_CORE_0.0.1)(64bit)libdcerpc.so.0()(64bit)libdcerpc.so.0(DCERPC_0.0.1)(64bit)libdcerpc0libevents-samba4.so()(64bit)libevents-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libflag-mapping-samba4.so()(64bit)libflag-mapping-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libgenrand-samba4.so()(64bit)libgenrand-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libgensec-samba4.so()(64bit)libgensec-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libgpo-samba4.so()(64bit)libgpo-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libgse-samba4.so()(64bit)libgse-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libhttp-samba4.so()(64bit)libhttp-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libinterfaces-samba4.so()(64bit)libinterfaces-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libiov-buf-samba4.so()(64bit)libiov-buf-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libkrb5samba-samba4.so()(64bit)libkrb5samba-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libldbsamba-samba4.so()(64bit)libldbsamba-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)liblibcli-lsa3-samba4.so()(64bit)liblibcli-lsa3-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)liblibcli-netlogon3-samba4.so()(64bit)liblibcli-netlogon3-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)liblibsmb-samba4.so()(64bit)liblibsmb-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libmessages-dgm-samba4.so()(64bit)libmessages-dgm-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libmessages-util-samba4.so()(64bit)libmessages-util-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libmscat-samba4.so()(64bit)libmscat-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libmsghdr-samba4.so()(64bit)libmsghdr-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libmsrpc3-samba4.so()(64bit)libmsrpc3-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libndr-krb5pac.so.0()(64bit)libndr-krb5pac.so.0(NDR_KRB5PAC_0.0.1)(64bit)libndr-krb5pac0libndr-nbt.so.0()(64bit)libndr-nbt.so.0(NDR_NBT_0.0.1)(64bit)libndr-nbt0libndr-samba-samba4.so()(64bit)libndr-samba-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libndr-samba4.so()(64bit)libndr-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libndr-standard.so.0()(64bit)libndr-standard.so.0(NDR_STANDARD_0.0.1)(64bit)libndr-standard0libndr.so.3()(64bit)libndr.so.3(NDR_0.0.1)(64bit)libndr.so.3(NDR_0.0.2)(64bit)libndr.so.3(NDR_0.0.3)(64bit)libndr.so.3(NDR_0.0.4)(64bit)libndr.so.3(NDR_0.0.5)(64bit)libndr.so.3(NDR_0.0.6)(64bit)libndr.so.3(NDR_0.0.7)(64bit)libndr.so.3(NDR_0.0.8)(64bit)libndr.so.3(NDR_0.0.9)(64bit)libndr.so.3(NDR_0.1.0)(64bit)libndr.so.3(NDR_0.1.1)(64bit)libndr.so.3(NDR_0.1.2)(64bit)libndr.so.3(NDR_0.2.0)(64bit)libndr.so.3(NDR_0.2.1)(64bit)libndr.so.3(NDR_1.0.0)(64bit)libndr.so.3(NDR_1.0.1)(64bit)libndr.so.3(NDR_1.0.2)(64bit)libndr.so.3(NDR_2.0.0)(64bit)libndr.so.3(NDR_3.0.0)(64bit)libndr.so.3(NDR_3.0.1)(64bit)libndr2libnet-keytab-samba4.so()(64bit)libnet-keytab-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libnetapi.so.1()(64bit)libnetapi.so.1(NETAPI_1.0.0)(64bit)libnetapi0libnetif-samba4.so()(64bit)libnetif-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libnpa-tstream-samba4.so()(64bit)libnpa-tstream-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libprinting-migrate-samba4.so()(64bit)libprinting-migrate-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libregistry-samba4.so()(64bit)libregistry-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libreplace-samba4.so()(64bit)libreplace-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsamba-cluster-support-samba4.so()(64bit)libsamba-cluster-support-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsamba-credentials.so.1()(64bit)libsamba-credentials.so.1(SAMBA_CREDENTIALS_1.0.0)(64bit)libsamba-credentials1libsamba-debug-samba4.so()(64bit)libsamba-debug-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsamba-errors.so.1()(64bit)libsamba-errors.so.1(SAMBA_ERRORS_1.0.0)(64bit)libsamba-errors0libsamba-hostconfig.so.0()(64bit)libsamba-hostconfig.so.0(SAMBA_HOSTCONFIG_0.0.1)(64bit)libsamba-hostconfig0libsamba-modules-samba4.so()(64bit)libsamba-modules-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsamba-passdb.so.0()(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.2.0)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.24.1)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.24.2)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.25.0)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.26.0)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.27.0)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.27.1)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.27.2)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.28.0)(64bit)libsamba-passdb0libsamba-security-samba4.so()(64bit)libsamba-security-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsamba-sockets-samba4.so()(64bit)libsamba-sockets-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsamba-util.so.0()(64bit)libsamba-util.so.0(SAMBA_UTIL_0.0.1)(64bit)libsamba-util0libsamba3-util-samba4.so()(64bit)libsamba3-util-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsamdb-common-samba4.so()(64bit)libsamdb-common-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsamdb.so.0()(64bit)libsamdb.so.0(SAMDB_0.0.1)(64bit)libsamdb0libsecrets3-samba4.so()(64bit)libsecrets3-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libserver-id-db-samba4.so()(64bit)libserver-id-db-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libserver-role-samba4.so()(64bit)libserver-role-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsmb-transport-samba4.so()(64bit)libsmb-transport-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsmbclient-raw-samba4.so()(64bit)libsmbclient-raw-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsmbclient.so.0()(64bit)libsmbclient.so.0(SMBCLIENT_0.1.0)(64bit)libsmbclient.so.0(SMBCLIENT_0.2.0)(64bit)libsmbclient.so.0(SMBCLIENT_0.2.1)(64bit)libsmbclient.so.0(SMBCLIENT_0.2.2)(64bit)libsmbclient.so.0(SMBCLIENT_0.2.3)(64bit)libsmbclient.so.0(SMBCLIENT_0.3.0)(64bit)libsmbclient.so.0(SMBCLIENT_0.3.1)(64bit)libsmbclient.so.0(SMBCLIENT_0.3.2)(64bit)libsmbclient.so.0(SMBCLIENT_0.3.3)(64bit)libsmbclient.so.0(SMBCLIENT_0.4.0)(64bit)libsmbclient.so.0(SMBCLIENT_0.5.0)(64bit)libsmbclient.so.0(SMBCLIENT_0.6.0)(64bit)libsmbclient.so.0(SMBCLIENT_0.7.0)(64bit)libsmbclient0libsmbconf.so.0()(64bit)libsmbconf.so.0(SMBCONF_0.0.1)(64bit)libsmbconf0libsmbd-base-samba4.so()(64bit)libsmbd-base-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsmbd-shim-samba4.so()(64bit)libsmbd-shim-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsmbldap.so.2()(64bit)libsmbldap.so.2(SMBLDAP_0)(64bit)libsmbldap.so.2(SMBLDAP_1)(64bit)libsmbldap.so.2(SMBLDAP_2)(64bit)libsmbldap.so.2(SMBLDAP_2.1.0)(64bit)libsmbldap2libsmbldaphelper-samba4.so()(64bit)libsmbldaphelper-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsocket-blocking-samba4.so()(64bit)libsocket-blocking-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libstable-sort-samba4.so()(64bit)libstable-sort-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsys-rw-samba4.so()(64bit)libsys-rw-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libtalloc-report-printf-samba4.so()(64bit)libtalloc-report-printf-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libtdb-wrap-samba4.so()(64bit)libtdb-wrap-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libtevent-util.so.0()(64bit)libtevent-util.so.0(TEVENT_UTIL_0.0.1)(64bit)libtevent-util0libtime-basic-samba4.so()(64bit)libtime-basic-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libtrusts-util-samba4.so()(64bit)libtrusts-util-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libutil-reg-samba4.so()(64bit)libutil-reg-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libutil-setid-samba4.so()(64bit)libutil-setid-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libutil-tdb-samba4.so()(64bit)libutil-tdb-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libwbclient.so.0()(64bit)libwbclient.so.0(WBCLIENT_0.10)(64bit)libwbclient.so.0(WBCLIENT_0.11)(64bit)libwbclient.so.0(WBCLIENT_0.12)(64bit)libwbclient.so.0(WBCLIENT_0.13)(64bit)libwbclient.so.0(WBCLIENT_0.14)(64bit)libwbclient.so.0(WBCLIENT_0.15)(64bit)libwbclient.so.0(WBCLIENT_0.16)(64bit)libwbclient.so.0(WBCLIENT_0.9)(64bit)libwbclient0samba-client-libssamba-client-libs(ppc-64)@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    /sbin/ldconfig/sbin/ldconfigld64.so.2()(64bit)ld64.so.2(GLIBC_2.22)(64bit)libCHARSET3-samba4.so()(64bit)libCHARSET3-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libMESSAGING-SEND-samba4.so()(64bit)libMESSAGING-SEND-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libMESSAGING-samba4.so()(64bit)libMESSAGING-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libacl.so.1()(64bit)libacl.so.1(ACL_1.0)(64bit)libaddns-samba4.so()(64bit)libaddns-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libads-samba4.so()(64bit)libads-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libasn1util-samba4.so()(64bit)libasn1util-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libauth-samba4.so()(64bit)libauth-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libauthkrb5-samba4.so()(64bit)libauthkrb5-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libavahi-client.so.3()(64bit)libavahi-common.so.3()(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libc.so.6(GLIBC_2.27)(64bit)libc.so.6(GLIBC_2.32)(64bit)libc.so.6(GLIBC_2.33)(64bit)libc.so.6(GLIBC_2.34)(64bit)libc.so.6(GLIBC_2.38)(64bit)libcli-cldap-samba4.so()(64bit)libcli-cldap-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libcli-ldap-common-samba4.so()(64bit)libcli-ldap-common-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libcli-ldap-samba4.so()(64bit)libcli-ldap-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libcli-nbt-samba4.so()(64bit)libcli-nbt-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libcli-smb-common-samba4.so()(64bit)libcli-smb-common-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libcli-spoolss-samba4.so()(64bit)libcli-spoolss-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libcliauth-samba4.so()(64bit)libcliauth-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libclidns-samba4.so()(64bit)libclidns-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libcluster-samba4.so()(64bit)libcluster-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libcom_err.so.2()(64bit)libcommon-auth-samba4.so()(64bit)libcommon-auth-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libdbwrap-samba4.so()(64bit)libdbwrap-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libdcerpc-binding.so.0()(64bit)libdcerpc-binding.so.0(DCERPC_BINDING_0.0.1)(64bit)libdcerpc-pkt-auth-samba4.so()(64bit)libdcerpc-pkt-auth-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libdcerpc-samba-samba4.so()(64bit)libdcerpc-samba-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libdcerpc.so.0()(64bit)libdcerpc.so.0(DCERPC_0.0.1)(64bit)libflag-mapping-samba4.so()(64bit)libflag-mapping-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libgenrand-samba4.so()(64bit)libgenrand-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libgensec-samba4.so()(64bit)libgensec-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libgnutls.so.30()(64bit)libgnutls.so.30(GNUTLS_3_4)(64bit)libgnutls.so.30(GNUTLS_3_6_10)(64bit)libgnutls.so.30(GNUTLS_3_6_13)(64bit)libgnutls.so.30(GNUTLS_3_6_3)(64bit)libgse-samba4.so()(64bit)libgse-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libgssapi_krb5.so.2()(64bit)libgssapi_krb5.so.2(gssapi_krb5_2_MIT)(64bit)libhttp-samba4.so()(64bit)libhttp-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libinterfaces-samba4.so()(64bit)libinterfaces-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libiov-buf-samba4.so()(64bit)libiov-buf-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libk5crypto.so.3()(64bit)libk5crypto.so.3(k5crypto_3_MIT)(64bit)libkrb5.so.3()(64bit)libkrb5.so.3(krb5_3_MIT)(64bit)libkrb5samba-samba4.so()(64bit)libkrb5samba-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)liblber-2.4.so.2()(64bit)libldap_r-2.4.so.2()(64bit)libldb.so.2()(64bit)libldb.so.2(LDB_0.9.10)(64bit)libldb.so.2(LDB_0.9.15)(64bit)libldb.so.2(LDB_0.9.16)(64bit)libldb.so.2(LDB_0.9.23)(64bit)libldb.so.2(LDB_1.1.1)(64bit)libldb.so.2(LDB_1.1.19)(64bit)libldb.so.2(LDB_1.1.30)(64bit)libldb.so.2(LDB_1.3.0)(64bit)libldb.so.2(LDB_2.6.1)(64bit)libldb.so.2(LDB_2.8.0)(64bit)libldbsamba-samba4.so()(64bit)libldbsamba-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)liblibcli-lsa3-samba4.so()(64bit)liblibcli-lsa3-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)liblibcli-netlogon3-samba4.so()(64bit)liblibcli-netlogon3-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)liblibsmb-samba4.so()(64bit)liblibsmb-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libmessages-dgm-samba4.so()(64bit)libmessages-dgm-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libmessages-util-samba4.so()(64bit)libmessages-util-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libmsghdr-samba4.so()(64bit)libmsghdr-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libmsrpc3-samba4.so()(64bit)libmsrpc3-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libndr-krb5pac.so.0()(64bit)libndr-krb5pac.so.0(NDR_KRB5PAC_0.0.1)(64bit)libndr-nbt.so.0()(64bit)libndr-nbt.so.0(NDR_NBT_0.0.1)(64bit)libndr-samba-samba4.so()(64bit)libndr-samba-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libndr-samba4.so()(64bit)libndr-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libndr-standard.so.0()(64bit)libndr-standard.so.0(NDR_STANDARD_0.0.1)(64bit)libndr.so.3()(64bit)libndr.so.3(NDR_0.0.1)(64bit)libndr.so.3(NDR_0.0.3)(64bit)libndr.so.3(NDR_0.0.4)(64bit)libndr.so.3(NDR_0.0.5)(64bit)libndr.so.3(NDR_0.0.6)(64bit)libndr.so.3(NDR_0.0.7)(64bit)libndr.so.3(NDR_0.0.8)(64bit)libndr.so.3(NDR_0.0.9)(64bit)libndr.so.3(NDR_0.1.1)(64bit)libndr.so.3(NDR_0.1.2)(64bit)libndr.so.3(NDR_0.2.0)(64bit)libndr.so.3(NDR_0.2.1)(64bit)libndr.so.3(NDR_1.0.0)(64bit)libndr.so.3(NDR_1.0.1)(64bit)libndr.so.3(NDR_1.0.2)(64bit)libndr.so.3(NDR_2.0.0)(64bit)libndr.so.3(NDR_3.0.1)(64bit)libnetif-samba4.so()(64bit)libnetif-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libnpa-tstream-samba4.so()(64bit)libnpa-tstream-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libnscd.so.1()(64bit)libnscd.so.1(LIBNSCD_1.0)(64bit)libpam.so.0()(64bit)libpam.so.0(LIBPAM_1.0)(64bit)libpopt.so.0()(64bit)libpopt.so.0(LIBPOPT_0)(64bit)libreplace-samba4.so()(64bit)libreplace-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsamba-cluster-support-samba4.so()(64bit)libsamba-cluster-support-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsamba-credentials.so.1()(64bit)libsamba-credentials.so.1(SAMBA_CREDENTIALS_1.0.0)(64bit)libsamba-debug-samba4.so()(64bit)libsamba-debug-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsamba-errors.so.1()(64bit)libsamba-errors.so.1(SAMBA_ERRORS_1.0.0)(64bit)libsamba-hostconfig.so.0()(64bit)libsamba-hostconfig.so.0(SAMBA_HOSTCONFIG_0.0.1)(64bit)libsamba-modules-samba4.so()(64bit)libsamba-modules-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsamba-passdb.so.0()(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.2.0)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.27.1)(64bit)libsamba-security-samba4.so()(64bit)libsamba-security-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsamba-sockets-samba4.so()(64bit)libsamba-sockets-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsamba-util.so.0()(64bit)libsamba-util.so.0(SAMBA_UTIL_0.0.1)(64bit)libsamba3-util-samba4.so()(64bit)libsamba3-util-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsamdb-common-samba4.so()(64bit)libsamdb-common-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsamdb.so.0()(64bit)libsamdb.so.0(SAMDB_0.0.1)(64bit)libsecrets3-samba4.so()(64bit)libsecrets3-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libserver-id-db-samba4.so()(64bit)libserver-id-db-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libserver-role-samba4.so()(64bit)libserver-role-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsmb-transport-samba4.so()(64bit)libsmb-transport-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsmbclient-raw-samba4.so()(64bit)libsmbclient-raw-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsmbconf.so.0()(64bit)libsmbconf.so.0(SMBCONF_0.0.1)(64bit)libsmbd-shim-samba4.so()(64bit)libsmbd-shim-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsmbldap.so.2()(64bit)libsmbldap.so.2(SMBLDAP_0)(64bit)libsmbldap.so.2(SMBLDAP_1)(64bit)libsmbldaphelper-samba4.so()(64bit)libsmbldaphelper-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsocket-blocking-samba4.so()(64bit)libsocket-blocking-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libstable-sort-samba4.so()(64bit)libstable-sort-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsys-rw-samba4.so()(64bit)libsys-rw-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsystemd.so.0()(64bit)libsystemd.so.0(LIBSYSTEMD_209)(64bit)libtalloc-report-printf-samba4.so()(64bit)libtalloc-report-printf-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libtalloc.so.2()(64bit)libtalloc.so.2(TALLOC_2.0.2)(64bit)libtalloc.so.2(TALLOC_2.1.0)(64bit)libtalloc.so.2(TALLOC_2.3.5)(64bit)libtasn1.so.6()(64bit)libtasn1.so.6(LIBTASN1_0_3)(64bit)libtdb-wrap-samba4.so()(64bit)libtdb-wrap-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libtdb.so.1()(64bit)libtdb.so.1(TDB_1.2.1)(64bit)libtdb.so.1(TDB_1.2.2)(64bit)libtdb.so.1(TDB_1.2.5)(64bit)libtdb.so.1(TDB_1.3.0)(64bit)libtdb.so.1(TDB_1.3.11)(64bit)libtdb.so.1(TDB_1.3.17)(64bit)libtevent-util.so.0()(64bit)libtevent-util.so.0(TEVENT_UTIL_0.0.1)(64bit)libtevent.so.0()(64bit)libtevent.so.0(TEVENT_0.11.0)(64bit)libtevent.so.0(TEVENT_0.12.0)(64bit)libtevent.so.0(TEVENT_0.13.0)(64bit)libtevent.so.0(TEVENT_0.15.0)(64bit)libtevent.so.0(TEVENT_0.9.12)(64bit)libtevent.so.0(TEVENT_0.9.13)(64bit)libtevent.so.0(TEVENT_0.9.16)(64bit)libtevent.so.0(TEVENT_0.9.20)(64bit)libtevent.so.0(TEVENT_0.9.30)(64bit)libtevent.so.0(TEVENT_0.9.31)(64bit)libtevent.so.0(TEVENT_0.9.37)(64bit)libtevent.so.0(TEVENT_0.9.9)(64bit)libtime-basic-samba4.so()(64bit)libtime-basic-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libtrusts-util-samba4.so()(64bit)libtrusts-util-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libutil-reg-samba4.so()(64bit)libutil-reg-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libutil-setid-samba4.so()(64bit)libutil-setid-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libutil-tdb-samba4.so()(64bit)libutil-tdb-samba4.so(SAMBA_4.19.9_GIT.430.A10FE64854C150600.3.18.2SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libwbclient.so.0()(64bit)libwbclient.so.0(WBCLIENT_0.13)(64bit)libwbclient.so.0(WBCLIENT_0.9)(64bit)libz.so.1()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.3hm@g`@gRgR@gMgp@fٝ@fxfteԔ@ee5@ede6`@e-%e'e%ascabrero@suse.denopower@suse.comscabrero@suse.denopower@suse.comnopower@suse.comnopower@suse.comddiss@suse.comscabrero@suse.denopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comdmulder@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comscabrero@suse.descabrero@suse.descabrero@suse.denopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comscabrero@suse.dedmulder@suse.comscabrero@suse.denopower@suse.comnopower@suse.comscabrero@suse.denopower@suse.comnopower@suse.comscabrero@suse.denopower@suse.comscabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comddiss@suse.comnopower@suse.comdmulder@suse.comdmulder@suse.comnopower@suse.comscabrero@suse.descabrero@suse.dedimstar@opensuse.orgscabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comnopower@suse.comnopower@suse.comscabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comnopower@suse.comscabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.denopower@suse.comscabrero@suse.deddiss@suse.comddiss@suse.comddiss@suse.comscabrero@suse.descabrero@suse.dedmulder@suse.comnopower@suse.comscabrero@suse.descabrero@suse.dedmulder@suse.comscabrero@suse.descabrero@suse.denopower@suse.comnopower@suse.comnopower@suse.comdmulder@suse.comscabrero@suse.denopower@suse.comddiss@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comscabrero@suse.denopower@suse.comnopower@suse.comjmcdonough@suse.comnopower@suse.comscabrero@suse.denopower@suse.comnopower@suse.comddiss@suse.comddiss@suse.comnopower@suse.comnopower@suse.comddiss@suse.comnopower@suse.comdmulder@suse.comdmulder@suse.comddiss@suse.comscabrero@suse.dedmulder@suse.comddiss@suse.comnopower@suse.comjengelh@inai.dedmulder@suse.comscabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comdmulder@suse.comdmulder@suse.comjmcdonough@suse.comdmulder@suse.comscabrero@suse.dedmulder@suse.comscabrero@suse.dedmulder@suse.comdmulder@suse.comvcizek@suse.comdmulder@suse.comdmulder@suse.comnopower@suse.comscabrero@suse.dejmcdonough@suse.comscabrero@suse.deaaptel@suse.comjengelh@inai.dedimstar@opensuse.orgdmulder@suse.comjmcdonough@suse.comdavid.mulder@suse.comjmcdonough@suse.comaaptel@suse.comdmulder@suse.comscabrero@suse.comscabrero@suse.comkukuk@suse.dedavid.mulder@suse.comscabrero@suse.comrbrown@suse.comdmulder@suse.comscabrero@suse.comdimstar@opensuse.orgscabrero@suse.comaaptel@suse.comnopower@suse.comnopower@suse.comaaptel@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comddiss@suse.comnopower@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comdmulder@suse.comnopower@suse.comjmcdonough@suse.comaaptel@suse.comkukuk@suse.comkukuk@suse.denopower@suse.comaaptel@suse.comdmulder@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comddiss@suse.comjmcdonough@suse.comddiss@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comjmcdonough@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comtchvatal@suse.comlmuelle@suse.comnopower@suse.comcrrodriguez@opensuse.orglmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comnoel.power@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comnopower@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.commpluskal@suse.comlmuelle@suse.comnopower@suse.deddiss@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.denopower@suse.delmuelle@suse.comnopower@suse.deddiss@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.com- Windows security hardening locks out schannel'ed netlogon dc calls like netr_DsRGetDCName; (bsc#1246431); (bso#15876).- Fix Samba printers reporting invalid sid during print jobs; (bsc#1234210); (bso#15792).- Fix crossing automounter mount points; (bsc#1215212); (bsc#1236803);- Update shipped /etc/samba/smb.conf to point to smb.conf man page;(bsc#1233880).- Update to 4.19.9 * libldb: performance issue with indexes (ldb 2.8.2 is already released); (bso#15590). * DH reconnect error handling can lead to stale sharemode entries; (bso#15624). * Incorrect FSCTL_QUERY_ALLOCATED_RANGES response when truncated; (bso#15699). * irpc_destructor may crash during shutdown; (bso#15280). * Compound SMB2 requests don't return NT_STATUS_NETWORK_SESSION_EXPIRED for all requests, confuses MacOSX clients; (bso#15696). * Crash when readlinkat fails; (bso#15700).- Adjust spec to split out rpcd_* binaries into a separate sub package; (bsc#1231414).- Incorrect FSCTL_QUERY_ALLOCATED_RANGES response when truncated; (bso#15699); (bsc#1229684). - Update to 4.19.8 * Invalid client warning about command line passwords; (bso#15671); * Version string is truncated in manpages; (bso#15672); * --version-* options are still not ergonomic, and they reject tilde characters; (bso#15673); * cmdline_burn does not always burn secrets; (bso#15674); * Samba doesn't parse SDDL found in defaultSecurityDescriptor in AD_DS_Classes_Windows_Server_v1903.ldf; (bso#15685); * We have added new options --vendor-name and --vendor-patch- revision arguments to ./configure to allow distributions and packagers to put their name in the Samba version string so that when debugging Samba the source of the binary is obvious; (bso#15654); * When claims enabled with heimdal kerberos, unable to log on to a Windows computer when user account need to change their own password; (bso#15655); * Fix clock skew error message and memory cache clock skew recovery; (bso#15676); * CTDB RADOS mutex helper misses namespace support; (bso#15665); * The images don't build after the git security release and CentOS 8 Stream is EOL; (bso#15660); * Fix unnecessary delays in CTDB while processing requests under high load; (bso#15678); * Dynamic DNS updates with the internal DNS are not working; (bso#13019); * s4:nbt_server: does not provide unexpected handling, so winbindd can't use nmb requests instead cldap; (bso#15620); * Panic in vfs_offload_token_db_fetch_fsp(); (bso#15664); * "client use kerberos" and --use-kerberos is ignored for the machine account; (bso#15666); * Regression DFS not working with widelinks = true; (bso#15435); * ntlm_auth make logs more consistent with length check; (bso#15677);- Fix a crash when joining offline and 'kerberos method' includes keytab; (bsc#1228732); - Fix reading the password from STDIN or environment vars if it was already given in the command line; (bsc#1228732);- Update to 4.19.7 * ldb qsort might r/w out of bounds with an intransitive compare function (ldb 2.8.1 is already released); (bso#15569). * Many qsort() comparison functions are non-transitive, which can lead to out-of-bounds access in some circumstances (ldb 2.8.1 is already released); (bso#15625). * Need to change gitlab-ci.yml tags in all branches to avoid CI bill; (bso#15638). * netr_LogonSamLogonEx returns NR_STATUS_ACCESS_DENIED with SysvolReady=0; (bso#14981). * Anonymous smb3 signing/encryption should be allowed (similar to Windows Server 2022); (bso#15412). * Panic in dreplsrv_op_pull_source_apply_changes_trigger; (bso#15573). * winbindd, net ads join and other things don't work on an ipv6 only host; (bso#15642). * Smbcacls incorrectly propagates inheritance with Inherit-Only flag; (bso#15636). * http library doesn't support 'chunked transfer encoding'; (bso#15611). - Update to 4.19.6 * fd_handle_destructor() panics within an smbd_smb2_close() if vfs_stat_fsp() fails in fd_close(); (bso#15527). * samba-gpupdate: Correctly implement site support; (bso#15588). * libgpo: Segfault in python bindings; (bso#15599). * Packet marshalling push support missing for CTDB_CONTROL_TCP_CLIENT_DISCONNECTED and CTDB_CONTROL_TCP_CLIENT_PASSED; (bso#15580).- Update to 4.19.5 * Windows 2016 fails to restore previous version of a file from a shadow_copy2 snapshot; (bso#13688). * Symlinks on AIX are broken in 4.19 (and a few version before that); (bso#15549). * Fake directory create times has no effect; (bso#12421). * ctime mixed up with mtime by smbd; (bso#15550). * samba-gpupdate --rsop fails if machine is not in a site; (bso#15548). * gpupdate: The root cert import when NDES is not available is broken; (bso#15557). * samba-gpupdate should print a useful message if cepces-submit can't be found; (bso#15552). * samba-gpupdate logging doesn't work; (bso#15558). * smbpasswd reset permissions only if not 0600; (bso#15555).- Remove -x from bash shebang update-apparmor-samba-profile; (bsc#1218431).- Update to 4.19.4 * net changesecretpw cannot set the machine account password if secrets.tdb is empty; (bso#13577). * For generating doc, take, if defined, env XML_CATALOG_FILES; (bso#15540). * Trivial C typo in nsswitch/winbind_nss_netbsd.c; (bso#15541). * vfs_linux_xfs is incorrectly named; (bso#15542). * systemd stumbled over copyright-message at smbd startup; (bso#15377). * Following intermediate abolute share-local symlinks is broken; (bso#15505). * ctdb RELEASE_IP causes a crash in release_ip if a connection to a non-public address disconnects first; (bso#15523). * shadow_copy2 broken when current fileset's directories are removed; (bso#15544). * smbd does not detect ctdb public ipv6 addresses for multichannel exclusion; (bso#15534). * 'force user = localunixuser' doesn't work if 'allow trusted domains = no' is set; (bso#15469). * smbget debug logging doesn't work; (bso#15525). * smget: username in the smburl and interactive password entry doesn't work; (bso#15532). * smbget auth function doesn't set values for password prompt correctly; (bso#15538). * Unable to copy and write files from clients to Ceph cluster via SMB Linux gateway with Ceph VFS module; (bso#15440). * Multichannel refresh network information; (bso#15547).- Update to 4.19.3 * sid_strings test broken by unix epoch > 1700000000; (bso#15520). * smbd crashes if asked to return full information on close of a stream handle with delete on close disposition set; (bso#15487). * smbd: fix close order of base_fsp and stream_fsp in smb_fname_fsp_destructor(); (bso#15521). * Improve logging for failover scenarios; (bso#15499). * Files without "read attributes" NFS4 ACL permission are not listed in directories; (bso#15093). * CVE-2018-14628 [SECURITY] Deleted Object tombstones visible in AD LDAP to normal users; (bso#13595). * Kerberos TGS-REQ with User2User does not work for normal accounts; (bso#15492). * vfs_gpfs stat calls fail due to file system permissions; (bso#15507). * Samba doesn't build with Python 3.12; (bso#15513).- packaging: samba-tool domain provision requires python3-Markdown; (bsc#1216519).- Update to 4.19.2 * Use-after-free in aio_del_req_from_fsp during smbd shutdown after failed IPC FSCTL_PIPE_TRANSCEIVE; (bso#15423). * clidfs.c do_connect() missing a "return" after a cli_shutdown() call; (bso#15426). * macOS mdfind returns only 50 results; (bso#15463). * GETREALFILENAME_CACHE can modify incoming new filename with previous cache entry value; (bso#15481). * libnss_winbind causes memory corruption since samba-4.18, impacts sendmail, zabbix, potentially more; (bso#15464). * ctdbd: setproctitle not initialized messages flooding logs; (bso#15479). * CVE-2023-5568 Heap buffer overflow with freshness tokens in the Heimdal KDC in Samba 4.19; (bso#15491). * The heimdal KDC doesn't detect s4u2self correctly when fast is in use; (bso#15477).- use systemd-logind rather than utmp for y2038 safety; (bsc#1216159).- CVE-2023-4091: samba: Client can truncate file with read-only permissions; (bsc#1215904); (bso#15439). - CVE-2023-42669: samba: rpcecho, enabled and running in AD DC, allows blocking sleep on request; (bso#1215905); (bso#15474). - CVE-2023-42670: samba: The procedure number is out of range when starting Active Directory Users and Computers; (bsc#1215906); (bso#15473). - CVE-2023-3961: samba: Unsanitized client pipe name passed to local_np_connect(); (bsc#1215907); (bso#15422). - CVE-2023-4154: samba: dirsync allows SYSTEM access with only "GUID_DRS_GET_CHANGES" right, not "GUID_DRS_GET_ALL_CHANGES; (bsc#1215908); (bso#15424).- Update to 4.19.0 * File doesn't show when user doesn't have permission if aio_pthread is loaded; (bso#15453). * ctdb_killtcp fails to work with --enable-pcap and libpcap ≥ 1.9.1; (bso#15451). * Logging to stdout/stderr with DEBUG_SYSLOG_FORMAT_ALWAYS can log to syslog; (bso#15460). * ‘samba-tool domain level raise’ fails unless given a URL; (bso#15458). * reply_sesssetup_and_X() can dereference uninitialized tmp pointer; (bso#15420). * missing return in reply_exit_done(); (bso#15430). * TREE_CONNECT without SETUP causes smbd to use uninitialized pointer; (bso#15432). * Avoid infinite loop in initial user sync with Azure AD Connect when synchronising a large Samba AD domain; (bso#15401). * Samba replication logs show (null) DN; (bso#15407). * 2-3min delays at reconnect with smb2_validate_sequence_number: bad message_id 2; (bso#15346). * DCERPC_PKT_CO_CANCEL and DCERPC_PKT_ORPHANED can't be parsed; (bso#15446). * CID 1539212 causes real issue when output contains only newlines; (bso#15438). * KDC encodes INT64 claims incorrectly; (bso#15452). * mdssvc: Do an early talloc_free() in _mdssvc_open(); (bso#15449). * Windows client join fails if a second container CN=System exists somewhere; (bso#9959). * regression DFS not working with widelinks = true; (bso#15435). * Heimdal fails to build on 32-bit FreeBSD; (bso#15443). * samba-tool ntacl get segfault if aio_pthread appended; (bso#15441). - Update to 4.18.6 * reply_sesssetup_and_X() can dereference uninitialized tmp pointer; (bso#15420); * Missing return in reply_exit_done(); (bso#15430); * post-exec password redaction for samba-tool is more reliable for fully random passwords as it no longer uses regular expressions containing the password value itself; (bso#15289); * Windows client join fails if a second container CN=System exists somewhere; (bso#9959); * Spotlight sometimes returns no results on latest macOS; (bso#15342); * Renaming results in NT_STATUS_SHARING_VIOLATION if previously attempted to remove the destination; (bso#15417); * Spotlight results return wrong date in result list; (bso#15427); * "net offlinejoin provision" does not work as non-root user; (bso#15414); * rpcserver no longer accepts double backslash in dfs pathname; (bso#15400); * cm_prepare_connection() calls close(fd) for the second time; (bso#15433); * 2-3min delays at reconnect with smb2_validate_sequence_number: bad message_id 2; (bso#15346); * samba-tool ntacl get segfault if aio_pthread appended; (bso#15441); * DCERPC_PKT_CO_CANCEL and DCERPC_PKT_ORPHANED can't be parsed; (bso#15446); * Python tarfile extraction needs change to avoid a warning (CVE-2007-4559 mitigation); (bso#15390); * Regression DFS not working with widelinks = true; (bso#15435); * mdssvc: Do an early talloc_free() in _mdssvc_open(); (bso#15449); - Update to 4.18.5 * CVE-2022-2127: lm_resp_len not checked properly in winbindd_pam_auth_crap_send; (bso#15072); (bsc#1213174). * CVE-2023-34966: Samba Spotlight mdssvc RPC Request Infinite Loop Denial-of-Service Vulnerability; (bso#15340); (bsc#1213173). * CVE-2023-34967: Samba Spotlight mdssvc RPC Request Type Confusion Denial-of-Service Vulnerability; (bso#15341); (bsc#1213172). * CVE-2023-34968: Spotlight server-side Share Path Disclosure; (bso#15388); (bsc#1213171). * CVE-2023-3347: Samba doesn't require SMB2+ signing if `server signing = mandatory` is set; (bso#15397); (bsc#1213170). * secure channel faulty since Windows 10/11 update 07/2023; (bso#15418); (bsc#1213384). - Update to 4.18.4 * Backport --pidl-developer fixes; (bso#15404). * Named crashes on DLZ zone update; (bso#14030). * smbcacls and smbcquotas do not check // before the server; (bso#2312). * cli_list loops 100% CPU against pre-lanman2 servers; (bso#15382). * smbclient leaks fds with showacls; (bso#15391). * smbd returns NOT_FOUND when creating files on a r/o filesystem; (bso#15402). * NSS_WRAPPER_HOSTNAME doesn't match NSS_WRAPPER_HOSTS entry and causes test timeouts; (bso#15355). * net ads lookup (with unspecified realm) fails; (bso#15384). * Register Samba processes with GPFS; (bso#15381). * Python tarfile extraction needs change to avoid a warning (CVE-2007-4559 mitigation); (bso#15390). * The winbind child segfaults when listing users with `winbind scan trusted domains = yes`; (bso#15398). * Remove comments about deprecated 'write cache size'; (bso#15383). * smbget memory leak if failed to download files recursively; (bso#15403). - Update to 4.18.3 * Symlinks to files can have random DOS mode information in a directory listing; (bso#15375). * vfs_fruit might cause a failing open for delete; (bso#15378). * winbind recurses into itself via rpcd_lsad; (bso#15361). * wbinfo -u fails on ad dc with >1000 users; (bso#15366). * DS ACEs might be inherited to unrelated object classes; (bso#15338). * a lot of messages: get_static_share_mode_data: get_static_share_mode_data_fn failed: NT_STATUS_NOT_FOUND; (bso#15362). * aes256 smb3 encryption algorithms are not allowed in smb3_sid_parse(); (bso#15374). * Setting veto files = /.*/ break listing directories; (bso#15360). * "samba-tool domain provision" does not run interactive mode if no arguments are given; (bso#15363). * dsgetdcname: assumes local system uses IPv4; (bso#15325). - Update to 4.18.2 * Log flood: smbd_calculate_access_mask_fsp: Access denied: message level should be lower; (bso#15302). * Floating point exception (FPE) via cli_pull_send at source3/libsmb/clireadwrite.c; (bso#15306). * test_tstream_more_tcp_user_timeout_spin fails intermittently on Rackspace GitLab runners; (bso#15328). * Reduce flapping of ridalloc test; (bso#15329). * large_ldap test is unreliable; (bso#15351). * New filename parser doesn't check veto files smb.conf parameter; (bso#15143). * mdssvc may crash when initializing; (bso#15354). * large directory optimization broken for non-lcomp path elements; (bso#15313). * streams_depot fails to create streams; (bso#15357). * shadow_copy2 and streams_depot don't play well together; (bso#15358). * Flapping tests in samba_tool_drs_show_repl.py; (bso#15316). * winbindd idmap child contacts the domain controller without a need; (bso#15317). * idmap_autorid may fail to map sids of trusted domains for the first time; (bso#15318). * idmap_hash doesn't use ID_TYPE_BOTH for reverse mappings; (bso#15319). * net ads search -P doesn't work against servers in other domains; (bso#15323). * Temporary smbXsrv_tcon_global.tdb can't be parsed; (bso#15353). * Tests use depricated and removed methods like assertRegexpMatches; (bso#15343). - Update to 4.18.1 * CVE-2023-0225: AD DC "dnsHostname" attribute can be deleted by unprivileged authenticated users. (bso#15276);(bsc#1209483). * CVE-2023-0614: Access controlled AD LDAP attributes can be discovered (bso#15270); (bsc#1209485). * CVE-2023-0922: Samba AD DC admin tool samba-tool sends passwords in cleartext(bso#15315);(bsc#1209481). * ldb wildcard matching makes excessive allocations; (bso#15331). * large_ldap test is inefficient; (bso#15332). - Update to 4.18.0 * SMB server performance improvements * More succinct samba-tool error messages * Color output with samba-tool --color The NO_COLOR environment variable will disable colour output * New samba-tool dsacl subcommand for deleting ACEs * New wbinfo option --change-secret-at * Net option to change the NT ACL default location * Azure AD / Office365 synchronization improvements- Fix DFS not working with widelinks enabled; (bsc#1213607); (bso#15435);- Move libcluster-samba4.so from samba-libs to samba-client-libs; (bsc#1213940);- net ads lookup with unspecified realm fails; (bso#15384); (bsc#1213826);- secure channel faulty since Windows 10/11 update 07/2023; (bso#15418); (bsc#1213384).- CVE-2022-2127: lm_resp_len not checked properly in winbindd_pam_auth_crap_send; (bso#15072); (bsc#1213174). - CVE-2023-34966: Samba Spotlight mdssvc RPC Request Infinite Loop Denial-of-Service Vulnerability; (bso#15340); (bsc#1213173). - CVE-2023-34967: Samba Spotlight mdssvc RPC Request Type Confusion Denial-of-Service Vulnerability; (bso#15341); (bsc#1213172). - CVE-2023-34968: Spotlight server-side Share Path Disclosure; (bso#15388); (bsc#1213171). - CVE-2023-3347: Samba doesn't require SMB2+ signing if `server signing = mandatory` is set; (bso#15397); (bsc#1213170).- Update to 4.17.9 * Backport --pidl-developer fixes; (bso#15404). * smbd_scavenger crashes when service smbd is stopped; (bso#15275). * vfs_fruit might cause a failing open for delete; (bso#15378). * named crashes on DLZ zone update; (bso#14030). * winbind recurses into itself via rpcd_lsad; (bso#15361). * cli_list loops 100% CPU against pre-lanman2 servers; (bso#15382). * smbclient leaks fds with showacls; (bso#15391). * aes256 smb3 encryption algorithms are not allowed in smb3_sid_parse(); (bso#15374). * winbindd gets stuck on NT_STATUS_RPC_SEC_PKG_ERROR; (bso#15413). * smbget memory leak if failed to download files recursively; (bso#15403).- Update to 4.17.8 * log flood: smbd_calculate_access_mask_fsp: Access denied: message level should be lower; (bso#15302). * Floating point exception (FPE) via cli_pull_send at source3/libsmb/clireadwrite.c; (bso#15306). * test_tstream_more_tcp_user_timeout_spin fails intermittently on Rackspace GitLab runners; (bso#15328). * Reduce flapping of ridalloc test; (bso#15329). * large_ldap test is unreliable; (bso#15351). * New filename parser doesn't check veto files smb.conf parameter; (bso#15143). * mdssvc may crash when initializing; (bso#15354). * Large directory optimization broken for non-lcomp path elements; (bso#15313). * streams_depot fails to create streams; (bso#15357). * shadow_copy2 and streams_depot don't play well together; (bso#15358). * wbinfo -u fails on ad dc with >1000 users; (bso#15366). * winbindd idmap child contacts the domain controller without a need; (bso#15317). * idmap_autorid may fail to map sids of trusted domains for the first time; (bso#15318). * idmap_hash doesn't use ID_TYPE_BOTH for reverse mappings; (bso#15319). * net ads search -P doesn't work against servers in other domains; (bso#15323). * DS ACEs might be inherited to unrelated object classes; (bso#15338). * Temporary smbXsrv_tcon_global.tdb can't be parsed; (bso#15353). * Setting veto files = /.*/ break listing directories; (bso#15360); (bsc#1212375). * CVE-2020-25720 [SECURITY] Create Child permission should not allow full write to all attributes (additional changes); (bso#14810). * dsgetdcname: assumes local system uses IPv4; (bso#15325).- Update to 4.17.7 * CVE-2023-0922: Samba AD DC admin tool samba-tool sends passwords in cleartext; (bso#15315); (bsc#1209481). * CVE-2023-0225: Samba AD DC "dnsHostname" attribute can be deleted by unprivileged authenticated users; (bso#15276); (bsc#1209483). * CVE-2023-0614: samba: Access controlled AD LDAP attributes can be discovered; (bso#15270); (bsc#1209485). * large_ldap test is inefficient; (bso#15332). * CVE-2020-25720 [SECURITY] Create Child permission should not allow full write to all attributes (additional changes); (bso#14810). - Update to 4.17.6 * streams_xattr is creating unexpected locks on folders; (bso#15314). * Use of the Azure AD Connect cloud sync tool is now supported for password hash synchronisation, allowing Samba AD Domains to synchronise passwords with this popular cloud environment; (bso#10635). * Spotlight doesn't work with latest macOS Ventura; (bso#15299). * New samba-dcerpc architecture does not scale gracefully; (bso#15310). * vfs_ceph incorrectly uses fsp_get_io_fd() instead of fsp_get_pathref_fd() in close and fstat; (bso#15307). * With clustering enabled samba-bgqd can core dump due to use after free; (bso#15293). * fd_load() function implicitly closes the fd where it should not; (bso#15311). - Update to 4.17.5 * smbc_getxattr() return value is incorrect; (bso#14808). * Compound SMB2 FLUSH+CLOSE requests from MacOSX are not handled correctly; (bso#15172). * synthetic_pathref AFP_AfpInfo failed errors; (bso#15210). * samba-tool gpo listall fails IPv6 only - finddcs() fails to find DC when there is only an AAAA record for the DC in DNS; (bso#15226). * smbd crashes if an FSCTL request is done on a stream handle; (bso#15236). * DFS links don't work anymore on Mac clients since 4.17; (bso#15277). * vfs_virusfilter segfault on access, directory edgecase (accessing NULL value); (bso#15283). * CVE-2022-38023 [SECURITY] Samba should refuse RC4 (aka md5) based SChannel on NETLOGON (additional changes); (bso#15240). * %U for include directive doesn't work for share listing (netshareenum); (bso#15243). * Shares missing from netshareenum response in samba 4.17.4; (bso#15266). * ctdb: use-after-free in run_proc; (bso#15269). * irpc_destructor may crash during shutdown; (bso#15280). * auth3_generate_session_info_pac leaks wbcAuthUserInfo; (bso#15286). * smbclient segfaults with use after free on an optimized build; (bso#15268). * smbstatus leaking files in msg.sock and msg.lock; (bso#15282). * Leak in wbcCtxPingDc2; (bso#15164). * Access based share enum does not work in Samba 4.16+; (bso#15265). * Crash during share enumeration; (bso#15267). * rep_listxattr on FreeBSD does not properly check for reads off end of returned buffer; (bso#15271). * Avoid relying on C89 features in a few places; (bso#15281).- Make (32bit) samba-libs conflict with old samba-ad-dc-libs package to satisfy installcheck.- Make samba-libs conflict with old samba-ad-dc-libs package to satisfy installcheck.- Remove non functioning ifup/ifdown samba-winbindd scripts; (bsc#1207414).- libdsdb-module-samba4 should be packaged as part of samba-libs and not samba-ad-dc-libs. Additionally no need for it to be removed conditionally.- Clean up logic for PAM migration settings in spec file.- Change with_dc default to 0 (for non TW builds), ADDC feature is deprecated and will no longer be included in >= SLE15-SP5; (jsc#PED-1122).- Update to 4.17.4 * CVE-2022-44640 Upstream Heimdal free of user-controlled pointer in FAST; (bsc#14929); * CVE-2021-20251 Bad password count not incremented atomically; (bsc#14611); * CVE-2022-42898 krb5_pac_parse() buffer parsing vulnerability; (bsc#15203); * CVE-2022-37966 rc4-hmac Kerberos session keys issued to modern servers; (bso#15237); * CVE-2022-37967 Kerberos constrained delegation ticket forgery possible against Samba AD DC; (bso#15231); * CVE-2022-38023 RC4/HMAC-MD5 NetLogon Secure Channel is weak and should be avoided; (bso#15240); * pam_winbind uses time_t and pointers assuming they are of the same size; (bso#15224); * Heimdal session key selection in AS-REQ examines wrong entry; (bso#15219); * filter-subunit is inefficient with large numbers of knownfails; (bso#15258); * smbd allows setting FILE_ATTRIBUTE_TEMPORARY on directories; (bso#15252); * The KDC logic arround msDs-supportedEncryptionTypes differs from Windows; (bso#13135); * libnet: change_password() doesn't work with dcerpc_samr_ChangePasswordUser4(); (bso#15206); * Heimdal session key selection in AS-REQ examines wrong entry; (bso#15219); * Memory leak in snprintf replacement functions; (bso#15230); * RODC doesn't reset badPwdCount reliable via an RWDC (CVE-2021-20251 regression); (bso#15253); * Prevent EBADF errors with vfs_glusterfs; (bso#15198); * %U for include directive doesn't work for share listing (netshareenum); (bso#15243); * Stack smashing in net offlinejoin requestodj; (bso#15257); * Windows 11 22H2 and Samba-AD 4.15 Kerberos login issue; (bso#15197); * Heimdal session key selection in AS-REQ examines wrong entry; (bso#15219); - Remove deprecated if-{down,up} scripts; (bsc#1206444); - Adjust the systemd drop-in file for named service; (bsc#1201689); * Paths are additive so do not repeat paths from named.service * Prefix the samba DLZ directory with "-" to ignore this path if it does not exists- Introduce without-smb1-server spec flag; (bsc#1205104); - Update to 4.17.3 * CVE-2022-42898: Samba buffer overflow vulnerabilities on 32-bit systems; (bsc#1205126); (bso#15203); - Replace obsolete python-gpgme with python-gpg * Upstream replaced it in v4.9.5 -- bso#13728 - Update to 4.17.2 * CVE-2022-3592 [SECURITY] samba: Wide links protection broken; (bso#15207); (bsc#1204499). * CVE-2022-3437 [SECURITY] samba: Buffer overflow in Heimdal unwrap_des3();(bso#15134); (bsc#1204254). - Update to 4.17.1 * CVE-2021-20251 [SECURITY] Bad password count not incremented atomically; (bso#14611). * smbXsrv_connection_shutdown_send result leaked; (bso#15174). * Flush on a named stream never completes; (bso#15182). * Permission denied calling SMBC_getatr when file not exists; (bso#15195). * Samba 4.5 sometimes cannot be upgraded to Samba 4.6 or later over DRS: WERROR_DS_DRA_MISSING_PARENT due to faulty GET_ANC; (bso#15189). * pytest: add file removal helpers for TestCaseInTempDir; (bso#15191). * CVE-2021-20251 [SECURITY] Bad password count not incremented atomically; (bso#14611). * Samba 4.5 sometimes cannot be upgraded to Samba 4.6 or later over DRS: WERROR_DS_DRA_MISSING_PARENT due to faulty GET_ANC; (bso#15189). * Flush on a named stream never completes; (bso#15182). * vfs_gpfs silently garbles timestamps > year 2106; (bso#15151). * CVE-2021-20251 [SECURITY] Bad password count not incremented atomically; (bso#14611). * multi-channel socket passing may hit a race if one of the involved processes already existed; (bso#15200). * memory leak on temporary of struct imessaging_post_state and struct tevent_immediate on struct imessaging_context (in rpcd_spoolss and maybe others); (bso#15201). * Since popt1.19 various use after free errors using result of poptGetArg are now exposed; (bso#15205); (boo#1204279). * Remove special case for O_CREAT in SMB_VFS_OPENAT from vfs_glusterfs; (bso#15192). * GETPWSID in memory cache grows indefinetly with each NTLM auth; (bso#15169). * CVE-2021-20251 [SECURITY] Bad password count not incremented atomically; (bso#14611). - Install a systemd drop-in file for named service to allow read/write access to the DLZ directory; (bsc#1201689); - Fix use after free errors resulting from using return of poptGetArg exposed since popt-1.19; (boo#1204279); (bso#15205). - s3: smbd: Fix memory leak in smbd_server_connection_terminate_done(); (bso#15174). - Disable SMB1 for tumbleweed builds. - Update to 4.17.0 * acl_xattr VFS module may unintentionally use filesystem permissions instead of ACL from xattr; (bso#15126). * Missing SMB2-GETINFO access checks from MS-SMB2 3.3.5.20.1; (bso#15153). * assert failed: !is_named_stream(smb_fname)") at ../../lib/util/fault.c:197; (bso#15161). * acl_xattr VFS module may unintentionally use filesystem permissions instead of ACL from xattr; (bso#15126). * assert failed: !is_named_stream(smb_fname)") at ../../lib/util/fault.c:197; (bso#15161). * Cross-node multi-channel reconnects result in SMB2 Negotiate returning NT_STATUS_NOT_SUPPORTED; (bso#15159). * winbind at info level debug can coredump when processing wb_lookupusergroups; (bso#15160). * Make use of glfs_*at() API calls in vfs_glusterfs; (bso#15157). * Possible use after free of connection_struct when iterating smbd_server_connection->connections; (bso#15128). * `net usershare add` fails with flag works with --long but fails with -l; (bso#15145). * acl_xattr VFS module may unintentionally use filesystem permissions instead of ACL from xattr; (bso#15126). * Performance regression on contended path based operations; (bso#15125). * Missing READ_LEASE break could cause data corruption; (bso#15148). * libsamba-errors uses a wrong version number; (bso#15141). * SMB1 negotiation can fail to handle connection errors; (bso#15152). * New filename parser doesn't check veto files smb.conf parameter; (bso#15143). * 4.17.rc1 still uses symlink-race prone unix_convert(); (bso#15144). * Backport fileserver related changed to 4.17.0rc2; (bso#15146). * Manpage for smbstatus json is missing; (bso#15147). * Backport fileserver related changed to 4.17.0rc2; (bso#15146). * Performance regression on contended path based operations; (bso#15125). * Backport fileserver related changed to 4.17.0rc2; (bso#15146). * Fix issues found by coverity in smbstatus json code; (bso#15140). * Backport fileserver related changed to 4.17.0rc2; (bso#15146). - Migration to /usr/etc: Saving user changed configuration files in /etc and restoring them while an RPM update. - Update to 4.16.4 * CVE-2022-2031: Samba AD users can bypass certain restrictions associated with changing passwords; (bsc#1201495); (bso#15047); * CVE-2022-32744: Samba AD users can forge password change requests for any user; (bsc#1201493); (bso#15074); * CVE-2022-32745: Samba AD users can crash the server process with an LDAP add or modify request; (bsc#1201492); (bso#15008); * CVE-2022-32746: Samba AD users can induce a use-after-free in the server process with an LDAP add or modify request; (bsc#1201490); (bso#15009); * CVE-2022-32742: Server memory information leak via SMB1; (bsc#1201496); (bso#15085); - Update to 4.16.3 * Using vfs_streams_xattr and deleting a file causes a panic; (bso#15099); * Add support for bind 9.18; (bso#14986); * logging dsdb audit to specific files does not work; (bso#15076); * Problem when winbind renews Kerberos; (bso#14979); (bsc#1196224); * Samba with new lorikeet-heimdal fails to build on gcc 12.1 in developer mode; (bso#15095); * Crash in streams_xattr because fsp->base_fsp->fsp_name is NULL; (bso#15105); * Crash in rpcd_classic - NULL pointer deference in mangle_is_mangled(); (bso#15118); * smbclient commands del & deltree fail with NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100); (bsc#1200556); * Fix check for chown when processing NFSv4 ACL; (bso#15120); * The pcap background queue process should not be stopped; (bso#15082); * testparm: Fix typo in idmap rangesize check; (bso#15097); * net ads info returns LDAP server and LDAP server name as null; (bso#15106); * ldconfig: /lib64/libsmbconf.so.0 is not a symbolic link; (bso#15108); * CTDB child process logging does not work as expected; (bso#15090); - Update spec file to fix the optional Heimdal DC build - Fix external trusts with MIT Kerberos 1.20 - Add missing samba-client requirement to samba-winbind package; (bsc#1198255); - Move pdb backends from package samba-libs to package samba-client-libs and remove samba-libs requirement from samba-winbind; (bsc#1200964); (bsc#1198255); - Add sysuser-shadow requirement for packages using systemd-sysusers - Use the canonical realm name to refresh the Kerberos tickets; (bsc#1196224); (bso#14979); - Moved logrotate files from user specific directory /etc/logrotate.d to vendor specific directory /usr/etc/logrotate.d. - Update to 4.16.2 * Use pathref fd instead of io fd in vfs_default_durable_cookie; (bso#15042); * vfs_gpfs with vfs_shadowcopy2 fail to restore file if original file had been deleted; (bso#15069); * Reintroduce netgroups support; (bso#15087); * net ads info shows LDAP Server: 0.0.0.0 depending on contacted server; (bso#14674); * Update from 4.15 to 4.16 breaks discovery of [homes] on standalone server from Win and IOS; (bso#15062); * waf produces incorrect names for python extensions with Python 3.11; (bso#15071); * smbclient -E doesn't work as advertised; (bso#15075); * The samba background daemon doesn't refresh the printcap cache on startup; (bso#15081); * Out-by-4 error in smbd read reply max_send clamp; (bso#14443); - Fix samba4.blackbox.net_ads_dns_async test with bind9 >= 9.17.7 - Support building with MIT Kerberos 1.20 - Bronze bit and S4U support with MIT Kerberos 1.20 for Samba AD DC; (CVE-2020-17049); - Resource Based Constrained Delegation (RBCD) for Samba AD DC - Support building with gcc 12.1 - Use requires_eq macro to require the libldb2 version available at samba-dsdb-modules build time; (bsc#1199362); - Update to 4.16.1 * Share and server swapped in smbget password prompt; (bso#14831); * Durable handles won't reconnect if the leased file is written to; (bso#15022); * rmdir silently fails if directory contains unreadable files and hide unreadable is yes; (bso#15023); * SMB2_CLOSE_FLAGS_FULL_INFORMATION fails to return information on renamed file handle; (bso#15038); * Need to describe --builtin-libraries= better (compare with - -bundled-libraries); (bso#8731); * vfs_shadow_copy2 breaks "smbd async dosmode" sync fallback; (bso#14957); * shadow_copy2 fails listing snapshotted dirs with shadow:fixinodes; (bso#15035); * PAM Kerberos authentication incorrectly fails with a clock skew error; (bso#15046); * Username map - samba erroneously applies unix group memberships to user account entries; (bso#15041); * KVNO off by 100000; (bso#14951); * Uninitialized litemask in variable in vfs_gpfs module; (bso#15027); * vfs_gpfs recalls=no option prevents listing files; (bso#15055); * smbd doesn't handle UPNs for looking up names; (bso#15054); - Update update-apparmor-samba-profile script, replace non-printable delimiter with more human readable separator as sed can accept separators that can appear in the input data. - Fix update-apparmor-samba-profile script, sed doesn't like multibyte separators; (bsc#1198309). - Update to 4.16.0 * New samba-dcerpcd binary to provide DCERPC in the member server setup * Certificate Auto Enrollment * Ability to add ports to dns forwarder addresses in internal DNS backend * No longer using Linux mandatory locks for sharemodes * SMB1 protocol has been deprecated, particularly older dialects * SMB1 protocol SMBCopy command removed * SMB1 server-side wildcard expansion removed - Add python3-dnspython to samba-ad-dc recommens; (bsc#1187101); - Use systemd-sysusers to create system users; (bsc#1182847);- Install a systemd drop-in file for named service to allow read/write access to the DLZ directory; (bsc#1201689);- Update to 4.15.12 * CVE-2022-42898: samba: heimdal: Samba buffer overflow vulnerabilities on 32-bit systems; (bso#15203); (bsc#1205126). - Update to 4.15.11 * Allow rebuild of Centos 8 images after move to vault for Samba 4.15; (bso#15193). * CVE-2022-3437: samba: Buffer overflow in Heimdal unwrap_des3(); (bso#15134); (bsc#1204254)- Update to 4.15.10 * Possible use after free of connection_struct when iterating smbd_server_connection->connections; (bso#15128); (bsc#1200102). * smbXsrv_connection_shutdown_send result leaked; (bso#15174). * Spotlight RPC service returns wrong response when Spotlight is disabled on a share; (bso#15086). * acl_xattr VFS module may unintentionally use filesystem permissions instead of ACL from xattr; (bso#15126). * Missing SMB2-GETINFO access checks from MS-SMB2 3.3.5.20.1; (bso#15153). * assert failed: !is_named_stream(smb_fname)") at ../../lib/util/fault.c:197; (bso#15161). * Missing READ_LEASE break could cause data corruption; (bso#15148). * rpcclient can crash using setuserinfo(2); (bso#15124). * Samba fails to build with glibc 2.36 caused by including in libreplace; (bso#15132). * SMB1 negotiation can fail to handle connection errors; (bso#15152). * samba-tool domain join segfault when joining a samba ad domain; (bso#15078). - Update to 4.15.9 * CVE-2022-32742:SMB1 code does not correct verify SMB1write, SMB1write_and_close, SMB1write_and_unlock lengths; (bso#15085); (bsc#1201496). * CVE-2022-32746: samba: Use-after-free occurring in database audit logging; (bso#15009); (bso#15096); (bsc#1201490). * CVE-2022-2031: samba, ldb: AD users can bypass certain restrictions associated with changing passwords; (bso#15047); (bsc#1201495); * CVE-2022-32745: samba: ldb: AD users can crash the server process with an LDAP add or modify request; (bso#15008); (bso#15096); (bsc#1201492). * CVE-2022-2031: samba, ldb: AD users can bypass certain restrictions associated with changing passwords; (bso#15047); (bsc#1201495); * CVE-2022-32744: samba, ldb: AD users can forge password change requests for any user; (bso#15074); (bso#15047); (bsc#1201493).- CVE-2022-1615: Do not ignore errors in random number generation; (bso#15103); (bsc#1202976); - CVE-2022-32743: Implement validated dnsHostName write rights; (bso#14833); (bsc#1202803);- Fix Use after free when iterating smbd_server_connection->connections after tree disconnect failure; (bso#15128); (bsc#1200102).- CVE-2022-32746: samba: Use-after-free occurring in database audit logging; (bso#15009); (bso#15096); (bsc#1201490). - CVE-2022-32745: samba: ldb: AD users can crash the server process with an LDAP add or modify request; (bso#15008); (bso#15096); (bsc#1201492). - CVE-2022-2031: samba, ldb: AD users can bypass certain restrictions associated with changing passwords; (bso#15047); (bsc#1201495); - CVE-2022-32742:SMB1 code does not correct verify SMB1write, SMB1write_and_close, SMB1write_and_unlock lengths; (bso#15085); (bsc#1201496). - CVE-2022-32744: samba, ldb: AD users can forge password change requests for any user; (bso#15074); (bso#15047); (bsc#1201493).- Update to 4.15.8 * Use pathref fd instead of io fd in vfs_default_durable_cookie; (bso#15042); * Setting fruit:resource = stream in vfs_fruit causes a panic; (bso#15099); * Add support for bind 9.18; (bso#14986); * logging dsdb audit to specific files does not work; (bso#15076); * vfs_gpfs with vfs_shadowcopy2 fail to restore file if original file had been deleted; (bso#15069); * netgroups support removed; (bso#15087); (bsc#1199247); * net ads info shows LDAP Server: 0.0.0.0 depending on contacted server; (bso#14674); (bsc#1199734); * waf produces incorrect names for python extensions with Python 3.11; (bso#15071); * smbclient commands del & deltree fail with NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100); (bsc#1200556); * vfs_gpfs recalls=no option prevents listing files; (bso#15055); * waf produces incorrect names for python extensions with Python 3.11; (bso#15071); * Compile error in source3/utils/regedit_hexedit.c; (bso#15091); * ldconfig: /lib64/libsmbconf.so.0 is not a symbolic link; (bso#15108); * smbd doesn't handle UPNs for looking up names; (bso#15054); * Out-by-4 error in smbd read reply max_send clamp; (bso#14443); - Move pdb backends from package samba-libs to package samba-client-libs and remove samba-libs requirement from samba-winbind; (bsc#1200964); (bsc#1198255); - Use the canonical realm name to refresh the Kerberos tickets; (bsc#1196224); (bso#14979);- Fix smbclient commands del & deltree failing with NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100); (bsc#1200556).- Revert NIS support removal; (bsc#1199247);- Use requires_eq macro to require the libldb2 version available at samba-dsdb-modules build time; (bsc#1199362);- Add missing samba-client requirement to samba-winbind package; (bsc#1198255);- Update to 4.15.7 * Share and server swapped in smbget password prompt; (bso#14831); * Durable handles won't reconnect if the leased file is written to; (bso#15022); * rmdir silently fails if directory contains unreadable files and hide unreadable is yes; (bso#15023); * SMB2_CLOSE_FLAGS_FULL_INFORMATION fails to return information on renamed file handle; (bso#15038); * vfs_shadow_copy2 breaks "smbd async dosmode" sync fallback; (bso#14957); * shadow_copy2 fails listing snapshotted dirs with shadow:fixinodes; (bso#15035); * PAM Kerberos authentication incorrectly fails with a clock skew error; (bso#15046); * username map - samba erroneously applies unix group memberships to user account entries; (bso#15041); * NT_STATUS_ACCESS_DENIED translates into EPERM instead of EACCES in SMBC_server_internal; (bso#14983); * Simple bind doesn't work against an RODC (with non-preloaded users); (bso#13879); * Crash of winbind on RODC; (bso#14641); * uncached logon on RODC always fails once; (bso#14865); * KVNO off by 100000; (bso#14951); * LDAP simple binds should honour "old password allowed period"; (bso#15001); * wbinfo -a doesn't work reliable with upn names; (bso#15003); * Simple bind doesn't work against an RODC (with non-preloaded users); (bso#13879); * Uninitialized litemask in variable in vfs_gpfs module; (bso#15027); * Regression: create krb5 conf = yes doesn't work with a single KDC; (bso#15016);- Add provides to samba-client-libs package to fix upgrades from previous versions; (bsc#1197995);- Add missing samba-libs requirement to samba-winbind package; (bsc#1198255);- Update to 4.15.6 * Renaming file on DFS root fails with NT_STATUS_OBJECT_PATH_NOT_FOUND; (bso#14169); * Samba does not response STATUS_INVALID_PARAMETER when opening 2 objects with same lease key; (bso#14737); * NT error code is not set when overwriting a file during rename in libsmbclient; (bso#14938); * Fix ldap simple bind with TLS auditing; (bso#14996); * net ads info shows LDAP Server: 0.0.0.0 depending on contacted server; (bso#14674); * Problem when winbind renews Kerberos; (bso#14979); (bsc#1196224); * pam_winbind will not allow gdm login if password about to expire; (bso#8691); * virusfilter_vfs_openat: Not scanned: Directory or special file; (bso#14971); * DFS fix for AIX broken; (bso#13631); * Solaris and AIX acl modules: wrong function arguments; (bso#14974); * Function aixacl_sys_acl_get_file not declared / coredump; (bso#7239); * Regression: Samba 4.15.2 on macOS segfaults intermittently during strcpy in tdbsam_getsampwnam; (bso#14900); * Fix a use-after-free in SMB1 server; (bso#14989); * smb2_signing_decrypt_pdu() may not decrypt with gnutls_aead_cipher_decrypt() from gnutls before 3.5.2; (bso#14968); * Changing the machine password against an RODC likely destroys the domain join; (bso#14984); * authsam_make_user_info_dc() steals memory from its struct ldb_message *msg argument; (bso#14993); * Use Heimdal 8.0 (pre) rather than an earlier snapshot; (bso#14995); * Samba autorid fails to map AD users if id rangesize fits in the id range only once; (bso#14967);- Fix mismatched version of libldb2; (bsc#1196788). - Drop obsolete SuSEfirewall2 service files.- Drop obsolete Samba fsrvp v0->v1 state upgrade functionality; (bsc#1080338).- Fix ntlm authentications with "winbind use default domain = yes"; (bso#13126); (bsc#1173429); (bsc#1196308).- Fix samba-ad-dc status warning notification message by disabling systemd notifications in bgqd; (bsc#1195896); (bso#14947).- libldb version mismatch in Samba dsdb component; (bsc#1118508);- Update to 4.15.5 * CVE-2021-44141: UNIX extensions in SMB1 disclose whether the outside target of a symlink exists; (bso#14911); (bsc#1193690). * CVE-2021-44142: Out-of-Bound Read/Write on Samba vfs_fruit module; (bso#14914); (bsc#1194859). * CVE-2022-0336: Re-adding an SPN skips subsequent SPN conflict checks; bso#14950); (bsc#1195048).- CVE-2021-44141: Information leak via symlinks of existance of files or directories outside of the exported share; (bso#14911); (bsc#1193690); - CVE-2021-44142: Out-of-bounds heap read/write vulnerability in VFS module vfs_fruit allows code execution; (bso#14914); (bsc#1194859); - CVE-2022-0336: Samba AD users with permission to write to an account can impersonate arbitrary services; (bso#14950); (bsc#1195048);- Update to 4.15.4 * Duplicate SMB file_ids leading to Windows client cache poisoning; (bso#14928); * Failed to parse NTLMv2_RESPONSE length 95 - Buffer Size Error - NT_STATUS_BUFFER_TOO_SMALL; (bso#14932); * kill_tcp_connections does not work; (bso#14934); * Can't connect to Windows shares not requiring authentication using KDE/Gnome; (bso#14935); * smbclient -L doesn't set "client max protocol" to NT1 before calling the "Reconnecting with SMB1 for workgroup listing" path; (bso#14939); * Cross device copy of the crossrename module always fails; (bso#14940); * symlinkat function from VFS cap module always fails with an error; (bso#14941); * Fix possible fsp pointer deference; (bso#14942); * Missing pop_sec_ctx() in error path inside close_directory(); (bso#14944); * "smbd --build-options" no longer works without an smb.conf file; (bso#14945);- Use pkgconfig(krb5) as dependency for the -devel package: allow OBS to pick the right flavor of krb5-devel (full vs mini). - Do not require the 'krb5' symbol by samba-client-libs: this package has an automatic dependency due to linkage on libgssapi_krb5.so.2. Automatic deps are always better. - Do not require the 'krb5' symbol from samba-libs: samba-libs requires samba-client-libs, which in turn requires krb5 libraries. Samba-libs itself has no need for krb5 (but get it indirectly anyway).- Reorganize libs packages. Split samba-libs into samba-client-libs, samba-libs, samba-winbind-libs and samba-ad-dc-libs, merging samba public libraries depending on internal samba libraries into these packages as there were dependency problems everytime one of these public libraries changed its version (bsc#1192684). The devel packages are merged into samba-devel. - Rename package samba-core-devel to samba-devel - Add python-rpm-macros to build requirements - Update the symlink create by samba-dsdb-modules to private samba ldb modules following libldb2 changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba- Update to 4.15.3 * Recursive directory delete with veto files is broken in 4.15.0; (bso#14878); * A directory containing dangling symlinks cannot be deleted by SMB2 alone when they are the only entry in the directory; (bso#14879); * SIGSEGV in rmdir_internals/synthetic_pathref - dirfsp is used uninitialized in rmdir_internals(); (bso#14892); * MaxQueryDuration not honoured in Samba AD DC LDAP; (bso#14694); * The CVE-2020-25717 username map [script] advice has undesired side effects for the local nt token; (bso#14901); (bsc#1192849); * User with multiple spaces (eg FredNurk) become un-deletable; (bso#14902); * Avoid storing NTTIME_THAW (-2) as value on disk; (bso#14127); * smbXsrv_client_global record validation leads to crash if existing record points at non-existing process; (bso#14882); * Crash in vfs_fruit asking for fsp_get_io_fd() for an XATTR call; (bso#14890); * Samba process doesn't log to logfile; (bso#14897); * set_ea_dos_attribute() fallback calling get_file_handle_for_metadata() triggers locking.tdb assert; (bso#14907); * Kerberos authentication on standalone server in MIT realm broken; (bso#14922); * Segmentation fault when joining the domain; (bso#14923); * Support for ROLE_IPA_DC is incomplete; (bso#14903); * rpcclient cannot connect to ncacn_ip_tcp services anymore; (bso#14767); * winexe crashes since 4.15.0 after popt parsing; (bso#14893); * net ads status -P broken in a clustered environment; (bso#14908); * Memory leak if ioctl(FSCTL_VALIDATE_NEGOTIATE_INFO) fails before smbd_smb2_ioctl_send; (bso#14788); * winbindd doesn't start when "allow trusted domains" is off; (bso#14899); * smbclient login without password using '-N' fails with NT_STATUS_INVALID_PARAMETER on Samba AD DC; (bso#14883); * A schannel client incorrectly detects a downgrade connecting to an AES only server; (bso#14912); * Possible null pointer dereference in winbind; (bso#14921); * Fix -k legacy option for client tools like smbclient, rpcclient, net, etc.; (bso#14846); * Add Debian 11 CI bootstrap support; (bso#14872); * Crash in recycle_unlink_internal(); (bso#14888);- Fix dependency problem upgrading from libndr0 to libndr2 and from libsamba-credentials0 to libsamba-credentials1; (bsc#1192684);- Fix regression introduced by CVE-2020-25717 patches, winbindd does not start when 'allow trusted domains' is off; (bso#14899); - Update to 4.15.2 * CVE-2016-2124: SMB1 client connections can be downgraded to plaintext authentication; (bso#12444); (bsc#1014440); * CVE-2020-25717: A user on the domain can become root on domain members; (bso#14556); (bsc#1192284); * CVE-2020-25718: Samba AD DC did not correctly sandbox Kerberos tickets issued by an RODC; (bso#14558); (bsc#1192246); * CVE-2020-25719: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets; (bso#14561); (bsc#1192247); * CVE-2020-25721: Kerberos acceptors need easy access to stable AD identifiers (eg objectSid); (bso#14557); (bsc#1192505); * CVE-2020-25722: Samba AD DC did not do suffienct access and conformance checking of data stored; (bso#14564); (bsc#1192283); * CVE-2021-3738: Use after free in Samba AD DC RPC server; (bso#14468); (bsc#1192215); * CVE-2021-23192: Subsequent DCE/RPC fragment injection vulnerability; (bso#14875); (bsc#1192214); - Update to 4.15.1 * vfs_shadow_copy2: core dump in make_relative_path; (bso#14682); * Log clutter from filename_convert_internal; (bso#14685); * MacOSX compilation fixes; (bso#14862); * rodc_rwdc test flaps; (bso#14868); * Provide a fix for MS CVE-2020-17049 in Samba [SECURITY] 'Bronze bit' S4U2Proxy Constrained Delegation bypass in Samba with embedded Heimdal; (bso#14642); * Python ldb.msg_diff() memory handling failure; (bso#14836); * "in" operator on ldb.Message is case sensitive; (bso#14845); * Release LDB 2.4.1 for Samba 4.15.1; (bso#14848); * samldb_krbtgtnumber_available() looks for incorrect string; (bso#14854); * Fix Samba support for UF_NO_AUTH_DATA_REQUIRED; (bso#14871); * Allow special chars like "@" in samAccountName when generating the salt; (bso#14874); * Correctly ignore comments in CTDB public addresses file; (bso#14826); * Fix transit path validation; (bso#12998); * Fix that child winbindd logs to log.winbindd instead of log.wb-; (bso#14852); * SMB3 cancel requests should only include the MID together with AsyncID when AES-128-GMAC is used; (bso#14855); * Prepare to operate with MIT krb5 >= 1.20; (bso#14870); * Heimdal prefers RC4 over AES for machine accounts; (bso#14864);- Enable samba-tool without ad dc.- Adjust spec to use pam macros; (bsc#1191046).- Adjust spec for size * allow some Recommends instead Requires to be configured for cifs-utils, samba-libs-python3 & samba-gpupdate; (bsc#1182847). * remove fam, undocumented and unneeded.- Add missing build dependency on bison when building with the embedded Heimdal Kerberos- Update to 4.15.0 * Removed SMB development dialects SMB2_22, SMB2_24 and SMB3_10 * VFS layer modernized. * Add the ability to set allow/deny lists for zone transfer clients in Bind DLZ plugin * Server multi-channel support no longer experimental * Improved command line user experience, unifying the options in different commands * Winbindd no longer scans trusted domains on startup and will use enterprise principals by default. * The net utility is now able to support the offline domain join feature * New options for 'samba-tool dns zoneoptions' for aging control and to mark old records as static or dynamic * DNS tombstones are now deleted as appropriate and use a consistent timestamp format * The 'samba-tool dns update' command validates and rejects now malformed IPv4 and IPv6 addresses * The 'samba-tool domain backup' command correctly takes out locks against concurrent modification during backup when using the LMDB backend * TruACL support has been removed * NIS support has been removed- Fix 'net rpc' authentication when using the machine account; (bsc#1189017); (bso#14796);- Fix dependency problem upgrading from libndr0 to libndr1; (bsc#1189875); - Fix dependency problem upgrading from libsmbldap0 to libsmbldap2; (bsc#1189875); - Fix wrong kvno exported to keytab after net ads changetrustpw due to replication delay; (bsc#1188727); - Add Certificate Auto Enrollment Policy; (jsc#SLE-18456). - Update to 4.13.10 * s3: smbd: Ensure POSIX default ACL is mapped into returned Windows ACL for directory handles; (bso#14708); * Take a copy to make sure we don't reference free'd memory; (bso#14721); * s3: lib: Fix talloc heirarcy error in parent_smb_fname(); (bso#14722); * s3: smbd: Remove erroneous TALLOC_FREE(smb_fname_parent) in change_file_owner_to_parent() error path; (bso#14736); * samba-tool: Give better error information when the 'domain backup restore' fails with a duplicate SID; (bso#14575); * smbd: Correctly initialize close timestamp fields; (bso#14714); * Spotlight RPC service doesn't work with vfs_glusterfs; (bso#14740); * ctdb: Fix a crash in run_proc_signal_handler(); (bso#14475); * gensec_krb5: Restore ipv6 support for kpasswd; (bso#14750); * smbXsrv_{open,session,tcon}: Protect smbXsrv_{open,session,tcon}_global_traverse_fn against invalid records; (bso#14752); * samba-tool domain backup offline doesn't work against bind DLZ backend; (bso#14027); * netcmd: Use next_free_rid() function to calculate a SID for restoring a backup; (bso#14669); - Update to 4.13.9 * s3: smbd: SMB1 SMBsplwr doesn't send a reply packet on success; (bso#14696); * Add documentation for dsdb_group_audit and dsdb_group_json_audit to "log level", synchronise "log level" in smb.conf with the code; (bso#14689); * Fix smbd panic when two clients open same file; (bso#14672); * Fix memory leak in the RPC server; (bso#14675); * s3: smbd: Fix deferred renames; (bso#14679); * s3-iremotewinspool: Set the per-request memory context; (bso#14675); * rpc_server3: Fix a memleak for internal pipes; (bso#14675); * third_party: Update socket_wrapper to version 1.3.2; (bso#11899); * third_party: Update socket_wrapper to version 1.3.3; (bso#14639); * idmap_rfc2307 and idmap_nss return wrong mapping for uid/gid conflict; (bso#14663); * Fix the build on OmniOS; (bso#14288); - Update to 4.13.8 * CVE-2021-20254: Fix buffer overrun in sids_to_unixids(); (bso#14571 - Update to 4.13.7 * Release with dependency on ldb version 2.2.1.- CVE-2021-20254 Buffer overrun in sids_to_unixids(); (bnc#14571); (bsc#1184677).- Fix offline domain backup not possible using lmdb version >= 0.9.26; (bso#14676); - Require libldb >= 2.2.1; (bsc#1183572); (bsc#1183574); - Update to 4.13.6 * CVE-2020-27840: samba: Unauthenticated remote heap corruption via bad DNs; (bso#14595); (bsc#1183572). * CVE-2021-20277: samba: out of bounds read in ldb_handler_fold; (bso#14655); (bsc#1183574). - Update to 4.13.5 * s3:modules:vfs_virusfilter: Recent talloc changes cause infinite start-up failure; (bso#14634); * s3: libsmb: Add missing cli_tdis() in error path if encryption setup failed on temp proxy connection; (bso#13992); * smbd: In conn_force_tdis_done() when forcing a connection closed force a full reload of services; (bso#14604); * dbcheck: Check Deleted Objects and reduce noise in reports about expired tombstones (bso#14593); * s3: Fix fcntl waf configure check; (bso#14503); * s3/auth: Implement "winbind:ignore domains"; (bso#14602); * smbd: Use fsp->conn->session_info for the initial delete-on-close token; (bso#14617); * s3: VFS: nfs4_acls. Add missing TALLOC_FREE(frame) in error path; (bso#14648); * classicupgrade: Treat old never expires value right; (bso#14624); * g_lock: Fix uninitalized variable reads; (bso#14636); * s3:pysmbd: Fix fd leak in py_smbd_create_file(); (bso#13898); * lib:util: Avoid free'ing our own pointer; (bso#14625); * HEIMDAL: krb5_storage_free(NULL) should work; (bso#12505);- Spec file fixes around systemd and requires; (bsc#1182830); - Align systemd service unit files with upstream provided ones.- Update to 4.13.4 * Work around special SMB2 IOCTL response behavior of NetApp Ontap 7.3.7; (bso#14607); * Temporary DFS share setup doesn't set case parameters in the same way as a regular share definition does; (bso#14612); * lib: Avoid declaring zero-length VLAs in various messaging functions; (bso#14605); * Do not create an empty DB when accessing a sam.ldb; (bso#14579); * vfs_fruit may close wrong backend fd; (bso#14596); * Temporary DFS share setup doesn't set case parameters in the same way as a regular share definition does; (bso#14612); * vfs_virusfilter: Allocate separate memory for config char*; (bso#14606); * vfs_fruit may close wrong backend fd; (bso#14596); * Work around special SMB2 IOCTL response behavior of NetApp Ontap 7.3.7; (bso#14607); * The cache directory for the user gencache should be created recursively; (bso#14601); * Be more flexible with repository names in CentOS 8 test environments; (bso#14594);- Uninstalling samba-client: Failed to disable unit, cifs.service does not exists; (bsc#1180388);- Update to 4.13.3 + libcli: smb2: Never print length if smb2_signing_key_valid() fails for crypto blob; (bso#14210); + s3: modules: gluster. Fix the error I made in preventing talloc leaks from a function; (bso#14486); + s3: smbd: Don't overwrite contents of fsp->aio_requests[0] with NULL via TALLOC_FREE(); (bso#14515); + s3: spoolss: Make parameters in call to user_ok_token() match all other uses; (bso#14568); + s3: smbd: Quiet log messages from usershares for an unknown share; (bso#14590); + samba process does not honor max log size; (bso#14248); + vfs_zfsacl: Add missing inherited flag on hidden "magic" everyone@ ACE; (bso#14587); + s3-libads: Pass timeout to open_socket_out in ms; (bso#13124); + s3-vfs_glusterfs: Always disable write-behind translator; (bso#14486); + smbclient: Fix recursive mget; (bso#14517); + clitar: Use do_list()'s recursion in clitar.c; (bso#14581); + manpages/vfs_glusterfs: Mention silent skipping of write-behind translator; (bso#14486); + vfs_shadow_copy2: Preserve all open flags assuming ROFS; (bso#14573); + interface: Fix if_index is not parsed correctly; (bso#14514);- Update to 4.13.2 + s3: modules: vfs_glusterfs: Fix leak of char **lines onto mem_ctx on return; (bso#14486); + RN: vfs_zfsacl: Only grant DELETE_CHILD if ACL tag is special; (bso#14471); + smb.conf.5: Add clarification how configuration changes reflected by Samba; (bso#14538); + daemons: Report status to systemd even when running in foreground; (bso#14552); + DNS Resolver: Support both dnspython before and after 2.0.0; (bso#14553); + s3-vfs_glusterfs: Refuse connection when write-behind xlator is present; (bso#14486); + provision: Add support for BIND 9.16.x; (bso#14487); + ctdb-common: Avoid aliasing errors during code optimization; (bso#14537); + libndr: Avoid assigning duplicate versions to symbols; (bso#14541); + docs: Fix default value of spoolss:architecture; (bso#14522); + winbind: Fix a memleak; (bso#14388); + s4:dsdb:acl_read: Implement "List Object" mode feature; (bso#14531); + docs-xml/manpages: Add warning about write-behind translator for vfs_glusterfs; (bso#14486); + nsswitch/nsstest.c: Avoid nss function conflicts with glibc nss.h. + vfs_shadow_copy2: Avoid closing snapsdir twice; (bso#14530); + third_party: Update resolv_wrapper to version 1.1.7; (bso#14547); + examples:auth: Do not install example plugin; (bso#14550); + ctdb-recoverd: Drop unnecessary and broken code; (bso#14513); + RN: vfs_zfsacl: Only grant DELETE_CHILD if ACL tag is special; (bso#14471);- Adjust smbcacls '--propagate-inheritance' feature to align with upstream; (bsc#1178469).- Update to samba 4.13.1 + CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with easily crafted records; (bsc#1177613); (bso#14472); + CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994); (bso#14436); + CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify; (bsc#1173902); (bso#14434); - Adjust systemd tmpfiles.d configuration, use /run/samba instead of /var/run/samba; (bsc#1177355);- Fix vfs_ceph query_directory regression; (bso#14519) - Drop liburing-devel for SLE15-SP2; (bsc#1177245)- Register CTDB recovery lock holder with ceph-mgr - Add liburing-devel dependency- Update to samba 4.13.0 + Require Python 3.6 + Move wide links functionality into VFS module + Deprecate NT4-like 'classic' Samba domain controllers + Deprecate SMBv1 only protocol options + Remove deprecated "ldap ssl ads" option + Unify asynchronous DCE-RPC server; (jsc#SES-645) + Replay multichannel lease break requests; (bso#11897); (jsc#SES-655) + Drop internal byteorder.h header from util-devel package + Remove final code for the AD DC LDAP backend + Add AD DC Group Policy Scripts + Only use gnutls_aead_cipher_encryptv2() for GnuTLS > 3.6.14; (bso#14399) + Fix %U substitutions if it contains a domain name; (bso#14467) + Fix krb5.conf creation for 'net ads join'; (bso#14479) + Fix build problem if libbsd-dev is not installed; (bso#14482) + Toggle vfs_snapper using "--with-shared-modules"; (bso#14437) + Fix idmap_ad RFC4511 response handling; (bso#14465) + Fix panic in get_lease_type(); (bso#14428)- Update to samba 4.11.13 + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2 against unencrypted passwords; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Support "server require schannel:WORKSTATION$ = no" about unsecure configurations; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): s4 torture rpc: repeated bytes in client challenge; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): libcli/auth: Reject weak client challenges in netlogon_creds_server_init() "server require schannel:WORKSTATION$ = no"; (bsc#1176579); (bso#14497); - Update to samba 4.11.12 + s3: libsmb: Fix SMB2 client rename bug to a Windows server; (bso#14403); + dsdb: Allow "password hash userPassword schemes = CryptSHA256" to work on RHEL7; (bso#14424); + dbcheck: Allow a dangling forward link outside our known NCs; (bso#14450); + lib/debug: Set the correct default backend loglevel to MAX_DEBUG_LEVEL; (bso#14426); + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428); + lib/util: do not install "test_util_paths"; (bso#14370); + lib:util: Fix smbclient -l basename dir; (bso#14345); + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428); + util: Allow symlinks in directory_create_or_exist; (bso#14166); + docs: Fix documentation for require_membership_of of pam_winbind; (bso#14358); + s3:winbind:idmap_ad: Make failure to get attrnames for schema mode fatal; (bso#14425);- Add obsoletes to libsmbldap2 package to fix upgrades from previous versions; (bsc#1172810);- Fix net command unable to negotiate SMB2; (bsc#1174120);- Update to samba 4.11.11 + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ and VLV combined; (bso#14364); (bsc#1173159] + CVE-2020-10745: invalid DNS or NBT queries containing dots use several seconds of CPU each; (bso#14378); (bsc#1173160). + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP server with paged_result or VLV; (bso#14402); (bsc#1173161) + CVE-2020-14303: Endless loop from empty UDP packet sent to AD DC nbt_server; (bso#14417); (bsc#1173359). - Update to samba 4.11.10 + Fix segfault when using SMBC_opendir_ctx() routine for share folder that contains incorrect symbols in any file name; (bso#14374). + vfs_shadow_copy2 doesn't fail case looking in snapdirseverywhere mode; (bso#14350) + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr; (bso#14413). + Malicous SMB1 server can crash libsmbclient; (bso#14366) + winbindd: Fix a use-after-free when winbind clients exit; (bso#14382) + ldb: Bump version to 2.0.11, LMDB databases can grow without bounds. (bso#14330) - Update to samba 4.11.9 + nmblib: Avoid undefined behaviour in handle_name_ptrs(); (bso#14242). + 'samba-tool group' commands do not handle group names with special chars correctly; (bso#14296). + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo is not valid; (bso#14237). + Missing check for DMAPI offline status in async DOS attributes; (bso#14293). + smbd: Ignore set NTACL requests which contain S-1-5-88 NFS ACEs; (bso#14307). + vfs_recycle: Prevent flooding the log if we're called on non-existant paths; (bso#14316) + smbd mistakenly updates a file's write-time on close; (bso#14320). + RPC handles cannot be differentiated in source3 RPC server; (bso#14359). + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313). + nsswitch: Fix use-after-free causing segfault in _pam_delete_cred; (bso#14327). + Fix fruit:time machine max size on arm; (bso#13622) + CTDB recovery corner cases can cause record resurrection and node banning; (bso#14294). + ctdb: Fix a memleak; (bso#14348). + libsmb: Don't try to find posix stat info in SMBC_getatr(). + ctdb-tcp: Move free of inbound queue to TCP restart; (bso#14295); (bsc#1162680). + s3/librpc/crypto: Fix double free with unresolved credential cache; (bso#14344); (bsc#1169095) + s3:libads: Fix ads_get_upn(); (bso#14336). + CTDB recovery corner cases can cause record resurrection and node banning; (bso#14294) + Starting ctdb node that was powered off hard before results in recovery loop; (bso#14295); (bsc#1162680). + ctdb-recoverd: Avoid dereferencing NULL rec->nodemap; (bso#14324) - Update to samba 4.11.8 + CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with ASQ; (bso#14331); (bsc#1169850); + CVE-2020-10704: LDAP Denial of Service (stack overflow) in Samba AD DC; (bso#14334); (bsc#1169851); - Update to samba 4.11.7 + s3: lib: nmblib. Clean up and harden nmb packet processing; (bso#14239). + s3: VFS: full_audit. Use system session_info if called from a temporary share definition; (bso#14283) + dsdb: Correctly handle memory in objectclass_attrs; (bso#14258). + ldb: version 2.0.9, Samba 4.11 and later give incorrect results for SCOPE_ONE searches; (bso#14270) + auth: Fix CIDs 1458418 and 1458420 Null pointer dereferences; (bso#14247). + smbd: Handle EINTR from open(2) properly; (bso#14285) + winbind member (source3) fails local SAM auth with empty domain name; (bso#14247) + winbindd: Handling missing idmap in getgrgid(); (bso#14265). + lib:util: Log mkdir error on correct debug levels; (bso#14253). + wafsamba: Do not use 'rU' as the 'U' is deprecated in Python 3.9; (bso#14266). + ctdb-tcp: Make error handling for outbound connection consistent; (bso#14274). - Update to samba 4.11.6 + pygpo: Use correct method flags; (bso#14209). + vfs_ceph_snapshots: Fix root relative path handling; (bso#14216); (bsc#1141320). + Avoiding bad call flags with python 3.8, using METH_NOARGS instead of zero; (bso#14209). + source4/utils/oLschema2ldif: Include stdint.h before cmocka.h; (bso#14218). + docs-xml/winbindnssinfo: Clarify interaction with idmap_ad etc; (bso#14122). + smbd: Fix the build with clang; (bso#14251). + upgradedns: Ensure lmdb lock files linked; (bso#14199). + s3: VFS: glusterfs: Reset nlinks for symlink entries during readdir; (bso#14182). + smbc_stat() doesn't return the correct st_mode and also the uid/gid is not filled (SMBv1) file; (bso#14101). + librpc: Fix string length checking in ndr_pull_charset_to_null(); (bso#14219). + ctdb-scripts: Strip square brackets when gathering connection info; (bso#14227).- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);- Installing: samba - samba-ad-dc.service does not exist and unit not found; (bsc#1171437);- Fix samba_winbind package is installing python3-base without python3 package; (bsc#1169521);- Require libldb2 >= 2.0.10 after security release.- CVE-2020-10704: LDAP Denial of Service (stack overflow) in Samba AD DC; (bso#14334); (bsc#1169851); - CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with ASQ; (bso#14331); (bsc#1169850);- Fix smbclient crash with double free (with unresolved krb5 credential cache); (bso#14344); (bsc#1169095).- Starting ctdb node that was powered off hard before results in recovery loop; (bso#14295); (bsc#1162680).- CTDB doesn't retry outgoing connections on bind (and some other) failures; (bso#14274); (bsc#1162680).- Revert: Allow idmap_rid to have primary group other than "Domain Users"; (bsc#1087931).- Fix nmbstatus not reporting detailed information about workgroups; (bsc#1159464); - Fix querying all names registered within broadcast area; (bso#8927);- Update to samab 4.11.5 + CVE-2019-14902: Replication of ACLs down subtree on AD Directory is not automatic; (bso#12497); (bsc#1160850). + CVE-2019-19344: Fix server crash with dns zone scavenging = yes; (bso#14050); (bsc#1160852). + CVE-2019-14907: server-side crash after charset conversion failure (eg during NTLMSSP processing); (bso#14208); (bsc#1160888). - Update to samba 4.11.4 + Ensure SMB1 cli_qpathinfo2() doesn't return an inode number; (bso#14161). + Ensure we don't call cli_RNetShareEnum() on an SMB1 connection; (bso#14174). + NT_STATUS_ACCESS_DENIED becomes EINVAL when using SMB2 in SMBC_opendir_ctx; (bso#14176). + SMB2 - Ensure we use the correct session_id if encrypting an interim response; (bso#14189). + Prevent smbd crash after invalid SMB1 negprot; (bso#14205). + printing: Fix %J substition; (bso#13745). + Remove now unneeded call to cmdline_messaging_context(); (bso#13925). + Fix incomplete conversion of former parametric options; (bso#14069). + Fix sync dosmode fallback in async dosmode codepath; (bso#14070). + vfs_fruit returns capped resource fork length; (bso#14171). + libnet_join: Add SPNs for additional-dns-hostnames entries; (bso#14116). + smbd: Increase a debug level; (bso#14211). + Prevent azure ad connect from reporting discovery errors reference-value-not-ldap-conformant; (bso#14153). + krb5_plugin: Fix developer build with newer heimdal system library; (bso#14179). + replace: Only link libnsl and libsocket if required; (bso#14168); + ctdb: Incoming queue can be orphaned causing communication; breakdown; (bso#14175). + ldb: Release ldb 2.0.8. Cross-compile will not take cross-answers or cross-execute; (bso#13846). + heimdal-build: Avoid hard-coded /usr/include/heimdal in asn1_compile-generated code; (bso#13856).- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).- Update to samba 4.11.3 + CVE-2019-14861: DNSServer RPC server crash, an authenticated user can crash the DCE/RPC DNS management server by creating records with matching the zone name; (bso#14138); (bsc#1158108). + CVE-2019-14870: DelegationNotAllowed not being enforced, the DelegationNotAllowed Kerberos feature restriction was not being applied when processing protocol transition requests (S4U2Self), in the AD DC KDC; (bso#14187); (bsc#1158109).- CVE-2019-14861: DNSServer RPC server crash, an authenticated user can crash the DCE/RPC DNS management server by creating records with matching the zone name; (bso#14138); (bsc#1158108). - CVE-2019-14870: DelegationNotAllowed not being enforced, the DelegationNotAllowed Kerberos feature restriction was not being applied when processing protocol transition requests (S4U2Self), in the AD DC KDC; (bso#14187); (bsc#1158109).- Update to samba 4.11.2 + CVE-2019-10218: Client code can return filenames containing path separators; (bsc#1144902); (bso#14071). + CVE-2019-14833: Samba AD DC check password script does not receive the full password; (bso#12438). + CVE-2019-14847: User with "get changes" permission can crash AD DC LDAP server via dirsync; (bso#14040). - Fixes from 4.11.1 + Overlinking libreplace against librt and pthread against every binary or library causes issues; (bso#14140); + kpasswd fails when built with MIT Kerberos; (bso#14155); + Fix spnego fallback from kerberos to ntlmssp in smbd server; (bso#14106); + Stale file handle error when using mkstemp on a share; (bso#14137); + non-AES schannel broken; (bso#14134); + Joining Active Directory should not use SAMR to set the password; (bso#13884); + smbclient can blunder into the SMB1 specific cli_RNetShareEnum() call on an SMB2 connection; (bso#14152); + Deleted records can be resurrected during recovery; (bso#14147); + getpwnam and getpwuid need to return data for ID_TYPE_BOTH group; (bso#14141); + winbind does not list forest trusts with additional trust attributes; (bso#14130); + fault report points to outdated documentation; (bso#14139); + pam_winbind with krb5_auth or wbinfo -K doesn't work for users of trusted domains/forests; (bso#14124); + classicupgrade results in uncaught exception - a bytes-like object is required, not 'str'; (bso#14136); + pod2man is not longer required, stop checking at build time; (bso#14131); + Exit code of ctdb nodestatus should not be influenced by deleted nodes; (bso#14129); + username/password authentication doesn't work with CUPS and smbspool; (bso#14128); + smbc_readdirplus() is incompatible with smbc_telldir() and smbc_lseekdir(); (bso#14094);- CVE-2019-14847: User with "get changes" permission can crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598); - CVE-2019-10218: Client code can return filenames containing path separators; (bso#14071); (bsc#1144902);- CVE-2019-14833: samba: Accent with "check script password" Samba AD DC check password script does not receive the full password; (bso#12438); (bsc#1154289).- Update to samba 4.11.0 + For details on all items see WHATSNEW.txt in samba-doc package + Python2 runtime support removed; python 3.4 or later required + Security improvements: - SMB1 disabled by default - lanman and plaintext authentication deprecated - winbind: PAM_AUTH and NTLM_AUTH events logged - GnuTLS 3.2 required; system FIPS mode setting honored + CephFS Snapshot integration, exposed as previous file versions + ctdb changes: - onnode -o option removed - ctdbd logs when using more than 90% of a CPU thread - CTDB_MONITOR_SWAP_USAGE variable removed + AD Domain controller improvements: - Upgrade AD databse format - BIND9_FLATFILE deprecated - default process model chagned to prefork - bind9 dns operation duration logging - Default schema updated to 2012_R2; function level is unchanged - many performance improvements + Configuration webserver support removed- Fix broken username/password authentication with CUPS and smbspool; (bsc#1152143); (bso#14128).- Fix auth problems when printing via smbspool backend with kerberos; (bnc#1148539); (bso#13832).- Update to samba 4.10.8 + CVE-2019-10197: user escape from share path definition; (bso#14035); (bsc#1141267);- Fix build on newer systems by modifying samba.spec to use consistent non-relative paths for pammodules in configure line and specification of pam_winbind.so library to package.- Update to samba 4.10.7 + Unable to create or rename file/directory inside shares configured with vfs_glusterfs_fuse module; (bso#14010). + build: Allow build when '--disable-gnutls' is set; (bso#13844) + samba-tool: Add 'import samba.drs_utils' to fsmo.py; (bso#13973). + Fix 'Error 32 determining PSOs in system' message on old DB with FL upgrade; (bso#14008). + s4/libnet: Fix joining a Windows pre-2008R2 DC; (bso#14021) + join: Use a specific attribute order for the DsAddEntry nTDSDSA object; (bso#14046). + vfs_catia: Pass stat info to synthetic_smb_fname(); (bso#14015). + lookup_name: Allow own domain lookup when flags == 0; (bso#14091). + s4 librpc rpc pyrpc: Ensure tevent_context deleted last; (bso#13932). + DEBUGC and DEBUGADDC doesn't print into a class specific log file; (bso#13915). + Request to keep deprecated option "server schannel", VMWare Quickprep requires "auto"; (bso#13949). + dbcheck: Fallback to the default tombstoneLifetime of 180 days; (bso#13967). + dnsProperty fails to decode values from older Windows versions; (bso#13969). + samba-tool: Use only one LDAP modify for dns partition fsmo role transfer; (bso#13973). + third_party: Update waf to version 2.0.17; (bso#13960). + netcmd: Allow 'drs replicate --local' to create partitions; (bso#14051). + ctdb-config: Depend on /etc/ctdb/nodes file; (bso#14017).- CVE-2019-10197: user escape from share path definition; (bso#14035); (bsc#1141267).- Prepare for use future use of kernel keyrings, modify /etc/pam.d/samba to include pam_keyinit.so; (bsc#1144059).- Update samba-winbind script to work with systemd; (bsc#1132739); - Drop samba dhcpcd hook scripts - Update to samba 4.10.6 + s3: winbind: Fix crash when invoking winbind idmap scripts; (bso#13956). + smbd does not correctly parse arguments passed to dfree and quota scripts; (bso#13964). + samba-tool dns: use bytes for inet_ntop; (bso#13965). + samba-tool domain provision: Fix --interactive module in python3; (bso#13828). + ldb_kv: Skip @ records early in a search full scan; (bso#13893). + docs: Improve documentation of "lanman auth" and "ntlm auth" connection; (bso#13981). + python/ntacls: Use correct "state directory" smb.conf option instead of "state dir"; (bso#14002). + registry: Add a missing include; (bso#13840). + Fix SMB guest authentication; (bso#13944). + AppleDouble conversion breaks Resourceforks; (bso#13958). + vfs_fruit makes direct use of syscalls like mmap() and pread(); (bso#13968). + s3:mdssvc: Fix flex compilation error; (bso#13987). + s3/vfs_glusterfs[_fuse]: Avoid using NAME_MAX directly; (bso#13872). + dsdb:samdb: schemainfo update with relax control; (bso#13799). + s3:util: Move static file_pload() function to lib/util; (bso#13964). + smbd: Fix a panic; (bso#13957). + ldap server: Generate correct referral schemes; (bso#12478). + s4 dsdb/repl_meta_data: fix use after free in dsdb_audit_add_ldb_value; (bso#13941). + s4 dsdb: Fix use after free in samldb_rename_search_base_callback; (bso#13942). + dsdb/repl: we need to replicate the whole schema before we can apply it; (bso#12204). + ldb: Release ldb 1.5.5; (bso#12478). + Schema replication fails if link crosses chunk boundary backwards; (bso#13713). + 'samba-tool domain schemaupgrade' uses relax control and skips the schemaInfo update provision; (bso#13799). + dsdb_audit: avoid printing "... remote host [Unknown] SID [(NULL SID)] ..."; (bso#13916). + python/ntacls: We only need security.SEC_STD_READ_CONTROL in order to get the ACL; (bso#13917). + s3:loadparm: Ensure to truncate FS Volume Label at multibyte boundary; (bso#13947). + Using Kerberos credentials to print using spoolss doesn't work; (bso#13939). + wafsamba: Use native waf timer; (bso#13998). + ctdb-scripts: Fix tcp_tw_recycle existence check; (bso#13984).- Update to samba-4.10.5 (including updates for 4.10.4, 4.10.3) + CVE-2019-12435 rpc/dns: Avoid NULL deference if zone not found in DnssrvOperation2; (bso#13922); (bsc#1137815). + CVE-2019-12436 dsdb/paged_results: Ignore successful results without messages; (bso#13951); (bsc#1137816). - Update to samba-4.10.4 + s3: SMB1: Don't allow recvfile on stream fsp's; (bso#13938). + py/provision: Fix for Python 2.6; (bso#13882). + netcmd: Fix 'passwordsettings --max-pwd-age' command; (bso#13873). + s3-libnet_join: 'net ads join' to child domain fails when using "-U admin@forestroot"; (bso#13861). + vfs_ceph: Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245). + vfs_ceph: Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697). + ctdb-common: Avoid race between fd and signal events; (bso#13895). + ctdb-common: Fix memory leak in run_proc; (bso#13943). + lib: Initialize getline() arguments; (bso#13892). + winbind: Fix overlapping id ranges; (bco#13903). + lib util debug: Increase format buffer to 4KiB; (bso#13902). + nsswitch pam_winbind: Fix Asan use after free; (bso#13927). + s4 lib socket: Ensure address string owned by parent struct; (bso#13929). + s3 rpc_client: Fix Asan stack use after scope; (bso#13936). + s3:smbd: Handle IO_REPARSE_TAG_DFS in SMB_FIND_FILE_FULL_DIRECTORY_INFO; (bso#10097). + smb2_tcon: Avoid STATUS_PENDING completely on tdis; (bso#10344). + smb2_sesssetup: avoid STATUS_PENDING responses for session setup; (bso#12845). + smb2_tcon: Avoid STATUS_PENDING completely on tdis; (bso#13698). + smb2_sesssetup: avoid STATUS_PENDING responses for session setup; (bso#13796). + dbcheck: Fix the err_empty_attribute() check; (bso#13843). + vfs_snapper: Drop unneeded fstat handler; (bso#13858). + vfs_default: Fix vfswrap_offload_write_send() NT_STATUS_INVALID_VIEW_SIZE check; (bso#13862). + smb2_server: Grant all 8192 credits to clients; (bso#13863). + smbd: Implement SMB_FILE_NORMALIZED_NAME_INFORMATION handling; (bso#13919). + s3/vfs_glusterfs: Dynamically determine NAME_MAX; (bso#13872). + s3: modules: ceph: Use current working directory instead of share path; (bso#13918); (bsc#1134452). + winbind: Use domain name from lsa query for sid_to_name cache entry; (bso#13831). + memcache: Increase size of default memcache to 512k; (bso#13865). + docs: Update smbclient manpage for "--max-protocol"; (bso#13857). + s3:utils: If share is NULL in smbcacls, don't print it; (bso#13937). + s3:smbspool: Fix regression printing with Kerberos credentials; (bso#13939). + ctdb-scripts: CTDB restarts failed NFS RPC services by hand, which is incompatible with systemd; (bso#13860). + ctdb-daemon: Revert "We can not assume that just because we could complete a TCP handshake"; (bso#13888). + ctdb-daemon: Never use 0 as a client ID; (bso#13930). + ctdb-common: Fix memory leak; (bso#13943). + s3:debug: Enable logging for early startup failures; (bso#13904) - Update to samba-4.10.3 + CVE-2018-16860: Heimdal KDC: Reject PA-S4U2Self with unkeyed checksum; (bso#13685); (bsc#1134024).- CVE-2019-12435: zone operations can crash rpc server; (bso#13922); (bsc#1137815).- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697). - Add ceph_snapshots VFS module; (jsc#SES-183).- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).- Update to samba-4.10.2: + CVE-2019-3870 (World writable files in Samba AD DC private/ dir); (bso#13834). + CVE-2019-3880 (Save registry file outside share as unprivileged user); (bso#13851). + py/kcc_utils: py2.6 compatibility; (bso#13837). + libcli: permit larger values of DataLength in SMB2_ENCRYPTION_CAPABILITIES of negotiate response; (bso#13869). + regfio: Improve handling of malformed registry hive files; (bso#13840). + ctdb-version: Simplify version string usage; (bso#13789). + lib: Make fd_load work for non-regular files; (bso#13859). + dbcheck: in the middle of the tombstone garbage collection causes replication failures, dbcheck: add --selftest-check-expired-tombstones cmdline option; (bso#13816). + ndr_spoolss_buf: Fix out of scope use of stack variable in NDR_SPOOLSS_PUSH_ENUM_OUT(); (bso#13818). + s4/messaging: Fix undefined reference in linking libMESSAGING-samba4.so; (bso#13854). + acl_read: Fix regression for empty lists; (bso#13836). + s4:dlz make b9_has_soa check dc=@ node; (bso#13841). + s3:client: Fix printing via smbspool backend with kerberos auth; (bso#13832). + s4:librpc: Fix installation of Samba; (bso#13847). + s3:lib: Fix the debug message for adding cache entries; (bso#13848). + s3:utils: Add 'smbstatus -L --resolve-uids' to show username; (bso#13793). + s3:lib: Fix the debug message for adding cache entries; (bso#13848). + s3:waf: Fix the detection of makdev() macro on Linux; (bso#13853). * ctdb-build: Drop creation of .distversion in tarball; (bso#13789). * ctdb-packaging: Test package requires tcpdump, ctdb package should not own system library directory; (bso#13838). - Update to samba-4.10.1: + py/kcc_utils: py2.6 compatibility; (bso#13837); + libcli: permit larger values of DataLength in SMB2_ENCRYPTION_CAPABILITIES of negotiate response; (bso#13869); + regfio: Improve handling of malformed registry hive files; (bso#13840); + ctdb-version: Simplify version string usage; (bso#13789); + lib: Make fd_load work for non-regular files; (bso#13859); + dbcheck in the middle of the tombstone garbage collection causes replication failures, dbcheck: add --selftest-check-expired-tombstones cmdline option; (bso#13816); + ndr_spoolss_buf: Fix out of scope use of stack variable in NDR_SPOOLSS_PUSH_ENUM_OUT(); (bso#13818); + s4/messaging: Fix undefined reference in linking libMESSAGING-samba4.so; (bso#13854); + acl_read: Fix regression for empty lists; (bso#13836); + s4:dlz make b9_has_soa check dc=@ node; (bso#13841); + s3:client: Fix printing via smbspool backend with kerberos auth; (bso#13832); + s4:librpc: Fix installation of Samba; (bso#13847); + s3:lib: Fix the debug message for adding cache entries; (bso#13848); + s3:utils: Add 'smbstatus -L --resolve-uids' to show username; (bso#13793); + s3:lib: Fix the debug message for adding cache entries; (bso#13848); + s3:waf: Fix the detection of makdev() macro on Linux; (bso#13853); + ctdb-build: Drop creation of .distversion in tarball; (bso#13789); + ctdb-packaging: Test package requires tcpdump, ctdb package should not own system library directory; (bso#13838); - Update to samba-4.10.0: + s4-server: Open and close a transaction on sam.ldb at startup; (bso#13760); + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812); + s4/scripting/bin: Open unicode files with utf8 encoding and write + unicode string. + sambaundoguididx: Use the right escaped oder unescaped sam ldb files; (bso#13759); + Fix idmap cache pollution with S-1-22- IDs on winbind hickup; (bso#13813); + passdb: Update ABI to 0.27.2. + lib/winbind_util: Add winbind_xid_to_sid for --without-winbind; (bso#13813); + lib:util: Move debug message for mkdir failing to log level 1; (bso#13823);- MacOS credit accounting breaks with async SESSION SETUP; (bsc#1125601); (bso#13796). - Mac OS X SMB2 implmenetation sees Input/output error or Resource temporarily unavailable and drops connection; (bso#13698)- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).- CVE-2019-3880: Save registry file outside share as unprivileged user; (bso#13851); (bsc#1131060 ).- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0); (bso#13834); (bsc#1130703);- Update to samba-4.9.5 + audit_logging: Remove debug log header and JSON Authentication: prefix; (bso#13714); + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760); + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso# CID: 1433607; (bso#11495); + smbd: uid: Don't crash if 'force group' is added to an existing share connection; (bso#13690); + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility code; (bso#13770); + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803); + s3:utils/smbget fix recursive download with empty source directories; (bso#13199); + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716); + s3:libsmb: cli_smb2_list() can sometimes fail initially on a connection; (bso#13736); + join: Throw CommandError instead of Exception for simple errors; (bso#13747); + ldb: Avoid inefficient one-level searches; (bso#13762); + s3: libsmb: use smb2cli_conn_max_trans_size() in cli_smb2_list(); (bso#13736); + tldap: Avoid use after free errors; (bso#13776); + Fix idmap xid2sid cache churn; (bso#13802); + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812); + s3-smbd: Avoid assuming fsp is always intact after close_file call; (bso#13720); + s3-vfs-fruit: Add close call; (bso#13725); + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746); + s3-vfs: add glusterfs_fuse vfs module; (bso#13774); + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766); + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS) ftruncate and fallocate; (bso#13807); + lib/audit_logging: Actually create talloc; (bso#13737); + netcmd/user: python[3]-gpgme unsupported and replaced by python[3]-gpg; (bso#13728); + dns: Changing onelevel search for wildcard to subtree; (bso#13738); + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721); + sambaundoguididx: Use the right escaped oder unescaped sam ldb files; (bso#13759); + ctdb: Print locks latency in machinereadable stats; (bso#13742); + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786); + audit_logging: auth_json_audit required auth_json; (bso#13715); + man pages: Document prefork process model; (bso#13765); + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773); + s3:auth: ignore create_builtin_guests() failing without a valid idmap configuration; (bso#13697); + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC without trusts; (bso#13722); + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd is not available; (bso#13723); + s4:server: Add support for 'smbcontrol samba shutdown' and 'smbcontrol debug/debuglevel'; (bso#13752); + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616); + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330); + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774); + notifyd: Fix SIGBUS on sparc; (bso#13704); + waf: Check for libnscd; (bso#13787); + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770); + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717); + Recovery lock bug fixes; (bso#13800); + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726); + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727); + vfs_fileid: Fix get_connectpath_ino; (bso#13741); + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).- Fix update-apparmor-samba-profile script after apparmor switched to using named profiles. The change is backwards compatible; (bsc#1126377);- LoadParm().load_default() fails with "Unable to load default file"; (bsc#1089758);- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);- Update to samba-4.9.4 + libcli/smb: Don't overwrite status code; (bso#9175). + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164). + Session setup reauth fails to sign response; (bso#13661). + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677). + vfs_shadow_copy2: Nicely deal with attempts to open previous version for writing; (bso#13688). + Restoring previous version of stream with vfs_shadow_copy2 fails with NT_STATUS_OBJECT_NAME_INVALID fsp->base_fsp->fsp_name; (bso#13455). + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571). + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708) + PEP8: fix E231: missing whitespace after ','. + winbindd: Fix crash when taking profiles;(bso#13629) + CVE-2018-14629 dns: Fix CNAME loop prevention using counter regression; (bso#13600) + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686). + CVE-2018-16853: Do not segfault if client is not set; (bso#13571). + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679) + ctdb-daemon: Exit with error if a database directory does not exist; (bso#13696). + s3:libads: Add net ads leave keep-account option; (bso#13498).- Drop more %if..%endif guards which are idempotent. - Drop requires on ldconfig which are already auto-discovered. - Do not ignore errors from useradd/groupadd.- Remove python2 build dependency from samba-libs; (bsc#1116900);- Update update-apparmor-samba-profile script to ignore the shares's paths containing substitution variables in any place, not only at the beginning of the path.- Update to samba-4.9.3 + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD Internal DNS server; (bso#13600); (bsc#1116319); + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628); (bsc#1116320); + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server; (bso#13674); (bsc#1116322); + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers; (bso#13669); (bsc#1116321); + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos configuration (unsupported); (bso#13678); (bsc#1116324); + CVE-2018-16857: Bad password count in AD DC not always effective; window; (bso#13683); (bsc#1116323);- Update to samba-4.9.2 + dsdb: Add comments explaining the limitations of our current backlink behaviour; (bso#13418); + Fix problems running domain backups (handling SMBv2, sites); (bso#13621); + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3; (bso#13465); + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642); + File saving issues with vfs_fruit on samba >= 4.8.5; (bso#13646); + Enabling vfs_fruit looses FinderInfo; (bso#13649); + Cancelling of SMB2 aio reads and writes returns wrong error NT_STATUS_INTERNAL_ERROR; (bso#13667); + Fix CTDB recovery record resurrection from inactive nodes and simplify vacuuming; (bso#13641); + examples: Fix the smb2mount build; (bso#13465); + libtevent: Fix build due to missing open_memstream on Illiumos; (bso#13629); + winbindd_cache: Fix timeout calculation for sid<->name cache; (bso#13662); + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path; (bso#13653); + Extended DN SID component missing for member after switching group membership; (bso#13418); + Return STATUS_SESSION_EXPIRED error encrypted, if the request was encrypted; (bso#13624); + python: Allow forced signing via smb.SMB(); (bso#13621); + lib:socket: If returning early, set ifaces; (bso#13665); + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8 encoded unicode; (bso#13616); + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute; (bso#13673); + waf: Add -fstack-clash-protection; (bso#13601); + winbind: Fix segfault if an invalid passdb backend is configured; (bso#13668); + Fix bugs in CTDB event handling; (bso#13659); + Misbehaving nodes are sometimes not banned; (bso#13670);- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);- winbind requires latest version of libtevent-util0 to start- Backport latest gpo code from master + Read policy from local gpt cache + Offline policy application + Make group policy extensible via register/unregister gpext + gpext's run via a process_group_policy method- Enable profiling data collection- Change samba-kdc package name to samba-ad-dc - Move samba-ad-dc.service to the samba-ad-dc package- Update to samba-4.9.1 + s3: nmbd: Stop nmbd network announce storm; (bso#13620); + s3-rpcclient: Use spoolss_init_spoolss_UserLevel1 in winspool cmds; (bso#13597); + CTDB recovery lock has some race conditions; (bso#13617); + s3-rpc_client: Advertise Windows 7 client info; (bso#13597); + ctdb-doc: Remove PIDFILE option from ctdbd_wrapper man page; (bso#13610);- Tumbleweed doesn't define the sle_version macro, so we must include a check for suse_version also. Otherwise python3 is disabled on Tumbleweed.- Update to samba-4.9.0 + samba_dnsupdate: Honor 'dns zone scavenging' option, only update if needed; (bso#13605); + wafsamba: Fix 'make -j'; (bso#13606);- Update to samba-4.9.0rc5 + s3: VFS: vfs_full_audit: Ensure smb_fname_str_do_log() only returns absolute pathnames; (bso#13565); + s3: util: Do not take over stderr when there is no log file; (bso#13578); + Durable Reconnect fails because cookie.allow_reconnect is not set; (bso#13549); + krb5-samba: Interdomain trust uses different salt principal; (bso#13539); + vfs_fruit: Don't unlink the main file; (bso#13441); + smbd: Fix a memleak in async search ask sharemode; (bso#13602); + Fix Samba GPO issue when Trust is enabled; (bso#11517); + samba-tool: Add "virtualKerberosSalt" attribute to 'user getpassword/syncpasswords'; (bso#13539); + Fix CTDB configuration issues; (bso#13589); + ctdbd logs an error until it can successfully connect to eventd; (bso#13592);- Update to samba-4.9.0rc4 + s3: smbd: Ensure get_real_filename() copes with empty pathnames; (bso#13585); + samba domain backup online/rename commands force user to specify password on CLI; (bso#13566); + wafsamba/samba_abi: Always hide ABI symbols which must be local; (bso#13579); + Fix a panic if fruit_access_check detects a locking conflict; (bso#13584); + Fix memory and resource leaks; (bso#13567); + python: Fix print in dns_invalid.py; (bso#13580); + Aliasing issue causes incorrect IPv6 checksum; (bso#13588); + Fix CTDB configuration issues; (bso#13589); + s3: vfs: time_audit: fix handling of token_blob in smb_time_audit_offload_read_recv(); (bso#13568);- Add missing zlib-devel dependency which was previously pulled in by libopenssl-devel- Update to samba-4.9.0rc3+git.22.3fff23ae36e + CVE-2018-10858: libsmb: Harden smbc_readdir_internal() against returns from malicious servers; (bso#13453); + CVE-2018-1140: ldbsearch '(distinguishedName=abc)' and DNS query with escapes crashes, ldb: Release LDB 1.3.5 for CVE-2018-1140; (bso#13374); + CVE-2018-10918: cracknames: Fix DoS (NULL pointer de-ref) when not servicePrincipalName is set on a user; (bso#13552); + CVE-2018-10919: acl_read: Fix unauthorized attribute access via searches; (bso#13434); + ctdb_mutex_ceph_rados_helper: Set SIGINT signal handler; (bso#13540); + CVE-2018-1139 libcli/auth: Do not allow ntlmv1 over SMB1 when it is disabled via "ntlm auth"; (bso#13360); + s3-tldap: do not install test_tldap; (bso#13529); + ctdb_mutex_ceph_rados_helper: Fix deadlock via lock renewals; (bso#13540); + CVE-2018-1140 Add NULL check for ldb_dn_get_casefold() in ltdb_index_dn_attr(); (bso#13374); + ctdb-eventd: Fix CID 1438155; (bso#13554); + Fix CIDs 1438243, (Unchecked return value) 1438244 (Unsigned compared against 0), 1438245 (Dereference before null check) and 1438246 (Unchecked return value); (bso#13553); + ctdb: Fix a cut&paste error; (bso#13554); + systemd: Only start smb when network interfaces are up; (bso#13559); + Fix quotas don't work with SMB2; (bso#13553); + s3/smbd: Ensure quota code is only called when quota support detected; (bso#13563); + s3/libsmb: Explicitly set delete_on_close token for rmdir; (bso#13204); + s3:waf: Install eventlogadm to /usr/sbin; (bso#13561); + Shorten description in vfs_linux_xfs_sgid manual; (bso#13562);- Update to samba-4.9.0rc2+git.21.a1069afb007 + s3: smbd: Using "sendfile = yes" with SMB2 can cause CPU spin; (bso#13537); + s3: smbd: Fix path check in smbd_smb2_create_durable_lease_check(); (bso#13535); + samba-tool trust: Support discovery via netr_GetDcName; (bso#13538); + s4-dsdb: Only build dsdb Python modules for AD DC; (bso#13542); + Fix portability issues on freebsd; (bso#13520); + DNS wildcard search does not handle multiple labels correctly; (bso#13536); + samba-tool domain trust: Fix trust compatibility to Windows Server 1709 and FreeIPA; (bso#13308); + Fix portability issues on freebsd; (bso#13520); + ctdb-protocol: Fix CTDB compilation issues; (bso#13545); + ctdb-docs: Replace obsolete reference to CTDB_DEBUG_HUNG_SCRIPT option; (bso#13546); + ctdb-doc: Provide an example script for migrating old configuration; (bso#13550); + ctdb-event: Implement event tool "script list" command; (bso#13551);- Update to samba-4.8.4+git.37.a7a861d7982; + CVE-2018-1139: Weak authentication protocol allowed; (bsc#1095048); (bsc#13360); + CVE-2018-1140: Denial of Service Attack on DNS and LDAP server; (bsc#1095056); (bso#13466); (bso#13374); + CVE-2018-10858: Insufficient input validation on client directory listing in libsmbclient; (bsc#1103411); (bso#13453); + CVE-2018-10918: Denial of Service Attack on AD DC DRSUAPI server; (bsc#1103414); (bso#13552); + CVE-2018-10919: Confidential attribute disclosure from the AD LDAP server; (bsc#1095057); (bso#13434); + s3:winbind: winbind normalize names' doesn't work for users; (bso#12851); + winbind: Fix UPN handling in canonicalize_username(); (bso#13369); + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428); + samdb: Fix building Samba with gcc 8.1; (bso#13437); + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440); + smbd: Flush dfree memcache on service reload; (bso#13446); + ldb: Save a copy of the index result before calling the + lib/util: No Backtrace given by Samba's AD DC by default; (bso#13454). + s3: smbd: printing: Re-implement delete-on-close semantics for print files missing since 3.5.x; (bso#13457). + python: Fix talloc frame use in make_simple_acl(); (bso#13474). + krb5_wrap: Fix keep_old_entries logic for older Kerberos libraries;(bso#13478). + krb5_plugin: Add winbind localauth plugin for MIT Kerberos; (bso#13480).- Add missing package descriptions; (bsc#1093864); - Fix dependency issue between samba-python and samba-kdc; (bsc#1062876); - Call update-apparmor-samba-profile when running samba-ad-dc; (bsc#1092099);- Update to 4.8.2 + After update to 4.8.0 DC failed with "Failed to find our own NTDS Settings objectGUID" (bso#13335). + fix incorrect reporting of stream dos attributes on a directory (bso#13380). + vfs_ceph: add asynchronous fsync; fake synchronous call (bso#13412). + vfs_ceph: add fake async pwrite/pread send/recv hooks; (bso#13425) + vfs_ceph: Fix memory leak; (bso#13424). + libsmbclient: Fix hard-coded connection error return of ETIMEDOUT; (bso#13419). + s4-lsa: Fix use-after-free in LSA server; (bso#13420). + winbindd: Do re-connect if the RPC call fails in the passdb case; (bso#13430). + cleanupd: Sends MSG_SMB_UNLOCK twice to interested peers; (bso#13416). + cleanupd: Use MSG_SMB_BRL_VALIDATE to signal cleanupd unclean process shutdown; (bso#13414). + ctdb-client: Remove ununsed functions from old client code; (bso#13411). + printing: Return the same error code as windows does on upload failures; (bso#13395). + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged pipe is not accessable; (bso#13400). + s4:lsa_lookup: remove TALLOC_FREE(state) after all dcesrv_lsa_Lookup{Names,Sids}_base_map() calls; (bso#13420). + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407). + s3:smbspool: Fix cmdline argument handling; (bso#13417).- Move libdfs-server-ad-samba4.so library from kdc to libs package, as it is required by some client libs; (bsc#1074135); - Update to 4.8.1; (bsc#1091179); + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error, we don't own it here; (bso#13244); + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't support fdopendir(); (bso#13270); + Round-tripping ACL get/set through vfs_fruit will increase the number of ACE entries without limit; (bso#13319); + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit issues; (bso#13347); + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without delete access; (bso#13358); + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372); + s3: smbd: Unix extensions attempts to change wrong field in fchown call; (bso#13375); + ms_schema/samba-tool visualize: Fix python2.6 incompatibility; (bso#13337); + Fix invocation of gnutls_aead_cipher_encrypt(); (bso#13352); + Windows 10 cannot logon on Samba NT4 domain; (bso#13328); + winbindd: Recover loss of netlogon secure channel in case the peer DC is rebooted; (bso#13332); + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363); + ctdb-client: Fix bugs in client code; (bso#13356); + ctdb-scripts: Drop "net serverid wipe" from 50.samba event script; (bso#13359); + s3: lib: messages: Don't use the result of sec_init() before calling sec_init(); (bso#13368); + libads: Fix the build '--without-ads'; (bso#13273); + winbind: Keep "force_reauth" in invalidate_cm_connection, add 'smbcontrol disconnect-dc'; (bso#13332); + vfs_virusfilter: Fix CIDs 1428738-1428740; (bso#13343); + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367); + rpc_server: Fix core dump in dfsgetinfo; (bso#13370); + smbclient: Fix notify; (bso#13382); + Fix smbd panic if the client-supplied channel sequence number wraps; (bso#13215); + Windows 10 cannot logon on Samba NT4 domain; (bso#13328); + lib/util: Remove unused '#include ' from tests/tfork.c; (bso#13342); + Fix build errors with cc from developerstudio 12.5 on Solaris; (bso#13343); + Fix the picky-developer build on FreeBSD 11; (bso#13344); + s3:modules: Fix the build of vfs_aixacl2.c; (bso#13345); + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338); + lib:replace: Fix linking when libtirpc-devel overwrites system headers; (bso#13341); + winbindd: 'wbinfo --name-to-sid' returns misleading result on invalid query; (bso#13312); + s3:passdb: Do not return OK if we don't have pinfo set up; (bso#13376); + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);- Use new foreground execution flags for systemd samba daemons; (bsc#1088574); (bsc#1071090); (bsc#1065551); + Add %post scriptlet to clear old sysconfig flags - Update vendor-files to commit 880b3e7. + Set samba sysconfig template variables to "" + Add required daemon flags directly to systemd unit- Specfile cleanup + Remove %if..%endif guards which don't affect the build + Remove redundant %clean section + Replace old $RPM_* shell vars with macros- BuildRequire pkgconfig(systemd) and pkgconfig(libsystemd) in place of systemd and systemd-devel: Allow OBS to optimize the workload by allowing the usage of the 'build-optimized' systemd packages.- Enable building samba with python3, and create a samba-python3 package.- Update to 4.8 + New GUID Index mode in sam.ldb for the AD DC + GPO support for samba KDC + Time machine support with vfs_fruit + Encrypted secrets + AD Replication visualization + Improved trust support - ability to not scan global trust list - AD external trusts have limited support - verbose trusted domain listing + VirusFilter VFS module + NT4-style replication removed + vfs_aio_linux removed- Disable samba-pidl package, due to the removal of dependency perl-Parse-Yapp; (bsc#1085150);- Update to 4.7.6; + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally; (bso#11343); (bsc#1081741); + CVE-2018-1057: Authenticated users can change other users' password; (bso#13272); (bsc#1081024).- Disable python until full python3 port is done; (bsc#1082139); + Remove contents of package samba-python + Remove contents of package libsamba-policy0 + Remove contents of package libsamba-policy-devel + Remove library libsamba-python-samba4.so from samba-libs package + Remove library libsamba-net-samba4.so from samba-libs package + Remove smbtorture binary and manpage from samba-test- samba fails to build with glibc2.27; (bsc#1081042);- Update to 4.7.5; (bsc#1080545); + smbd tries to release not leased oplock during oplock II downgrade; (bso#13193); + Fix copying file with empty FinderInfo from Windows client to Samba share with fruit; (bso#13181); + build: Deal with recent glibc sunrpc header removal; (bso#10976); + Make Samba work with tirpc and libnsl2; (bso#13238); + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208); (bsc#1075206); + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue; (bso#12986); + ctdb-recovery-helper: Deregister message handler in error paths; (bso#13188); + samba: Only use async signal-safe functions in signal handler; (bso#13240); + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue; (bso#12986); + repl_meta_data: Fix linked attribute corruption on databases with unsorted links on expunge. dbcheck: Add functionality to fix the corrupt database; (bso#13228); + Fix smbd panic when chdir returns error during exit; (bso#13189); + Make Samba work with tirpc and libnsl2; (bso#13238); + Fix POSIX ACL support on HPUX and possibly other big-endian OSs; (bso#13176);- Update to 4.7.4; (bsc#1080545); + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140); + s3: libsmb: Fix valgrind read-after-free error in cli_smb2_close_fnum_recv(); (bso#13171); + s3: libsmb: Fix reversing of oldname/newname paths when creating a reparse point symlink on Windows from smbclient; (bso#13172); + Build man page for vfs_zfsacl.8 with Samba; (bso#12934); + repl_meta_data: Allow delete of an object with dangling backlinks; (bso#13095); + s4:samba: Fix default to be running samba as a deamon; (bso#13129); + Performance regression in DNS server with introduction of DNS wildcard, ldb: Release 1.2.3; (bso#13191); + vfs_zfsacl: Fix compilation error; (bso#6133); + "smb encrypt" setting changes are not fully applied until full smbd restart; (bso#13051); + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052); + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155); + winbindd: Dependency on trusted-domain list in winbindd in critical auth codepath; (bso#13173); + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120); + ctdb: sock_daemon leaks memory; (bso#13153); + TCP tickles not getting synchronised on CTDB restart; (bso#13154); + winbindd: winbind parent and child share a ctdb connection; (bso#13150); + pthreadpool: Fix deadlock; (bso#13170); + pthreadpool: Fix starvation after fork; (bso#13179); + messaging: Always register the unique id; (bso#13180); + s4/smbd: set the process group; (bso#13129); + Fix broken linked attribute handling; (bso#13095); + The KDC on an RWDC doesn't send error replies in some situations; (bso#13132); + libnet_join: Fix 'net rpc oldjoin'; (bso#13149); + g_lock conflict detection broken when processing stale entries; (bso#13195); + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired sessions; (bso#13197); + s3:libads: net ads keytab list fails with "Key table name malformed"; (bso#13166); (bsc#1067700); + Fix crash in pthreadpool thread after failure from pthread_create; (bso#13170); + s4:samba: Allow samba daemon to run in foreground; (bso#13129); (bsc#1065551); + third_party: Link the aesni-intel library with "-z noexecstack"; (bso#13174); + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I" options; (bso#13125);- Re-enable usage of libnsl (did got lost with glibc change) - Use TI-RPC (sunrpc is deprecated and will be removed soon from glibc)- smbc_opendir should not return EEXIST with invalid login credentials; (bnc#1065868).- Update to 4.7.3; (bsc#1069666); + Non-smbd processes using kernel oplocks can hang smbd; (bso#13121); + python: use communicate to fix Popen deadlock; (bso#13127); + smbd on disk file corruption bug under heavy threaded load; (bso#13130); + tevent: version 0.9.34; (bso#13130); + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118); + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug; (bsc#1060427);(bso#13041); + CVE-2017-15275: s3: smbd: Chain code can return uninitialized memory when talloc buffer is grown; (bsc#1063008); (bso#13077); - Build with AD DC support only in openSUSE.- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- samba-tool requires samba-python; (bnc#1067771).- Run all daemons in the foreground and let systemd handle it; (bsc#1065551). - Update to 4.7.1; + Fix exporting subdirs with shadow_copy2; (bso#13091); + Currently if getwd() fails after a chdir(), we panic; (bso#13027); + Ensure default SMB_VFS_GETWD() call can't return a partially completed struct smb_filename; (bso#13068); + sys_getwd() can leak memory or possibly return the wrong errno on older systems; (bso#13069); + smbclient doesn't correctly canonicalize all local names before use; (bso#13093); + Fix broken linked attribute handling; (bso#13095); + Missing LDAP query escapes in DNS rpc server; (bso#12994); + Link to -lbsd when building replace.c by hand; (bso#13087); + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem; (bso#6133); + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module; (bso#7909); + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module; (bso#7933); + Missing assignment in sl_pack_float; (bso#12991); + Wrong Samba access checks when changing DOS attributes; (bso#12995); + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062); + groupmap cleanup should not delete BUILTIN mappings; (bso#13065); + Enabling vfs_fruit results in loss of Finder tags and other xattrs; (bso#13076); + man pages: Properly ident lists; (bso#9613); + smb.conf.5: Sort parameters alphabetically; (bso#13081); + Fix GUID string format on GetPrinter info; (bso#12993); + Remote serverid check doesn't check for the unique id; (bso#13042); + CTDB starts consuming memory if there are dead nodes in the cluster; (bso#13056); + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070); + libgpo doesn't sort the GPOs in the correct order; (bso#13046); + Remote serverid check doesn't check for the unique id; (bso#13042); + vfs_catia: Fix a potential memleak; (bso#13090); + Fix file change notification for renames; (bso#12903); + Samba DNS server does not honour wildcards; (bso#12952); + Can't change password in samba from a Windows client if Samba runs on IPv6 only interface; (bso#13079); + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086); + Apple client can't cope with SMB2 async replies when creating symlinks; (bso#13047); + s4:rpc_server:backupkey: Move variable into scope; (bso#12959); + Fix ntstatus_gen.h generation on 32bit; (bso#13099); + Fix a double free in vfs_gluster_getwd(); (bso#13100); + Fix resouce leaks and pointer issues; (bso#13101); + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);- Add samba-kdc to baselibs.conf. - Do not wrap samba-kdc's package definition into if/endif: the package won't be generated simply based on the fact that there is no files section for the package. Allows the source validator to ensure samba-kdc is a built package.- Update to 4.7.0; + Whole DB read locks: Improved LDAP and replication consistency; (bso#12858). + Samba AD with MIT Kerberos + Dynamic RPC port range: Default range changed from "1024-1300" to "49152-65535". + Authentication and Authorization audit support: New auth_audit debug class. + Multi-process LDAP Server: The LDAP server in the AD DC now honours the process model used for the rest of the 'samba' process. + Improved Read-Only Domain Controller (RODC) Support; (bso#12977). + Additional password hashes stored in supplementalCredentials. + Improvements to DNS during Active Directory domain join. + Significant AD performance and replication improvements. + Query record for open file or directory. + Removal of lpcfg_register_defaults_hook(). + Change of loadable module interface. + SHA256 LDAPS Certificates: The self-signed certificate generated for use on LDAPS will now be generated with a SHA256 self-signature, not a SHA1 self-signature. + CTDB no longer allows mixed minor versions in a cluster. + CTDB now ignores hints from Samba about TDB flags when attaching to databases. + New configuration variable CTDB_NFS_CHECKS_DIR. + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed. + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed. + The example NFS Ganesha call-out has been improved. + A new "replicated" database type is available.- CVE-2017-12163: Prevent client short SMB1 write from writing server memory to file; (bso#13020); (bsc#1058624).- CVE-2017-12150: Some code path don't enforce smb signing, when they should; (bso#12997); (bsc#1058622).- CVE-2017-12151: Keep required encryption across SMB3 dfs redirects; (bso#12996); (bsc#1058565).- Clean specfile assuming SUSE-only system and product >=SLE11 + %{ul_version}, %{rhel_version}, %{mandriva_version}, %{centos_version} are always undefined + %{_vendor} is "suse" and %{suse_version} is at least 1100- Update to 4.6.7; (bsc#1054017) + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392). + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937). + vfs_ceph provides inconsistent directory listings; (bso#12911). + Misused talloc context can cause a user to crash their smbd by chaining SMB1 commands.; (bso#12836). + Use-after free can crash libsmbclient code.; (bso#12927). + Server exit with active AIO can crash.; (bso#12925). + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910). + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs; (bso#12898). + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897). + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for authentication; (bso#12886). + finder sidebar showing question mark instead of icon when using ip to connect with vfs_fruit; (bso#12840). + Winbind stops obtaining the 'unixHomeDirectory' & 'loginShell' attributes from AD.; (bso#12720). + KCC run at selftest startup can fail spuriously due to a race; (bso#12869). + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for the remote change; (bso#12782). + rpc_pipe_client memory leaks due to long term memory context passed to rpc_pipe_open_interface(); (bso#12890). + CVE-2017-2619 breaks accessing previous versions of directories with snapshots in subdirectories of the share; (bso#12885). + dns_name_equal doing OOB read; (bso#12813). + replica_sync tests flap; (bso#12753). + Selftest should not call 'net cache flush' and wipe important winbind entries; (bso#12868). + Old Samba versions don't support using recent ldb versions (>=1.1.30); (bso#12859). + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490). + race starting winbindd against posixacl test; (bso#12843). + Crash in the reentrant smbd_smb2_create_send() if the something fails in the subsequent try; (bso#12832). + spnego.c passes the wrong argument order to gensec_update_ev() for the FALLBACK case; (bso#12788). + Clients with SMB3 support can't connect with "server max protocol = SMB2_02"; (bso#12772). + A log message of samb-tool user syncpasswords reverses string arguments in a debug message "Call Popen[...".; (bso#12768). + The smb tarmode tests kills the share dir contents; (bso#12867). + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862). + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860). + manpage/index.html lists links not in alphabetical order; (bso#12854). + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831). + If a record is locked in a database, then recovery does not complete; (bso#12857). + debug_locks.sh script does not log any information; (bso#12856). + SIGSEGV in cm_connect_lsa_tcp dereferencing conn->lsa_tcp_pipe->transport after error; (bso#12852). + smbclient can't parse DOMAIN+username if a different winbind separator is used; (bso#12849). + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845). + Related requests with TreeConnect fail with NETWORK_NAME_DELETED; (bso#12844). + cli->server_os not filled correctly; (bso#12779). + REGRESSION: smbclient doesn't print the session setup anymore; (bso#12824). + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808). + CTDB NFS call-out failures do not cause event failures; (bso#12837). + net command fails due to incorrectly return code; (bso#12828). + Fix building Samba with GCC 7.1; (bso#12827).- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again; (bsc#1048339).- fix cephwrap_chdir(); (bsc#1048790). - Update to 4.6.6 + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation; (bsc#1048278).- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).- Fix inconsistent ctdb socket path; (bsc#1048352). - Fix non-admin cephx authentication; (bsc#1048387).- Update to 4.6.5; (bsc#1040157) + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at startup; (bso#12814). + vfs_expand_msdfs tries to open the remote address as a file path; (bso#12687). + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type); (bso#12798). + With clustering get update_num_read_oplocks failed and PANIC: num_share_modes == 1 assertion failure; (bso#11844). + contend_level2_oplocks_begin_default oplock optimisation doesn't carry over to leases; (bso#12766). + `ctdb nodestatus` incorrectly displays status for all nodes with wrong exit code; (bso#12802). + CTDB can spin hard on revoking readonly delegations if a node becomes disconnected; (bso#12697). + Printing a share mode entry with leases can crash in the ndr code; (bso#12793). + Fix flakey unit tests for eventd; (bso#12792). + CTDB daemon crashes if built with clang; (bso#12770). + smbcacls fails if no password is specified; (bso#12765). + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757). + samba-tool user syncpasswords doesn't trigger the script when a user gets removed; (bso#12767). + systemd: fix detection of libsystemd; (bso#12764). + Notify subsystem only maps first inotify mask to Windows notify filter; (bso#12760). + Allow passing trusted domain password as plain-text to PASSDB layer; (bso#12751). + Can't case-rename files with vfs_fruit; (bso#12749). + wrong sid->uid mapping for SIDs residing in sIDHistory; (bso#12702). + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562). + Ordering of notify responses broken; (bso#12756).- s3: libsmb: Fix error where short name length was read as 2 bytes, should be 1; (bso#11822); (bsc#1042419).- Revert explicit winbind %{version}-%{release} dependency. + The ABI has stabilized since (bsc#936909), so remove to fix cross-media dependencies; (bsc#1037899).- Fix CVE-2017-7494 remote code execution from a writable share; (bso#12780); (bsc#1038231).- Update to 4.6.3; (bsc#1036011) + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots from shares with GlusterFS backend; (bso#12743). + Fix for Solaris C compiler; (bso#12559). + s3: locking: Update oplock optimization for the leases era; (bso#12628). + Make the Solaris C compiler happy; (bso#12693). + s3: libgpo: Allow skipping GPO objects that don't have the expected LDAP attributes; (bso#12695). + Fix buffer overflow caused by wrong use of getgroups; (bso#12747). + lib: debug: Avoid negative array access; (bso#12746). + cleanupdb: Fix a memory read error; (bso#12748). + streams_xattr and kernel oplocks results in NT_STATUS_NETWORK_BUSY; (bso#7537). + winbindd: idmap_autorid allocates ids for unknown SIDs from other backends; (bso#11961). + vfs_fruit: Resource fork open request with flags=O_CREAT|O_RDONLY; (bso#12565). + manpages/vfs_fruit: Document global options; (bso#12615). + lib/pthreadpool: Fix a memory leak; (bso#12624). + Lookup-domain for well-known SIDs on a DC; (bso#12727). + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728). + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729). + credentials_krb5: use gss_acquire_cred for client-side GSSAPI use case; (bso#12611). + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690). + ctdb-readonly: Avoid a tight loop waiting for revoke to complete; (bso#12697). + ctdb_event monitor command crashes if event is not specified; (bso#12723). + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733). + smbd: Fix smb1 findfirst with DFS; (bso#12558). + smbd: Do an early exit on negprot failure; (bso#12610). + winbindd: Fix substitution for 'template homedir'; (bso#12699). + s4:kdc: Disable principal based autodetected referral detection; (bso#12554). + idmap_autorid: Allocate new domain range if the callers knows the sid is valid; (bso#12613). + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724). + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for trusted domain; (bso#12725). + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731). + winbindd: Fix password policy for pam authentication; (bso#12725). + s3:gse: Correctly handle external trusts with MIT; (bso#12554). + auth/credentials: Always set the realm if we set the principal from the ccache; (bso#12611). + replace: Include sysmacros.h; (bso#12686). + s3:vfs_expand_msdfs: Do not open the remote address as a file; (bso#12687). + s3:libsmb: Only print error message if kerberos use is forced; (bso#12704). + winbindd: Child process crashes when kerberos-authenticating a user with wrong password; (bso#12708). + vfs_fruit: Office document opens as read-only on macOS due to CNID semantics; (bso#12715). + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is fragmented; (bso#12737).- Generate and update vendor-files tarball from Git + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).- Generate source tarball directly from Git using OBS tar_scm + use version string derived from parent Git tag and commit hash - remove obsolete vendor-files/tools/package-data version ID + explicitly generate ctdb manpages, needed without "make dist"- Update to 4.6.2 + remove bso#12721 patches now upstream- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622). + x86-64 and aarch64- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).- Build and install the html man pages (bsc#1021907).- Fix CVE-2017-2619 regression with "follow symlinks = no"; (bso#12721).- Update to 4.6.1 + symlink race permits opening files outside share directory; CVE-2017-2619; (bso#12496); (bsc#1027147) + testparm checks for valid idmap parameters + add new krb client encryption types + support for printer driver upload from windows 10 + inherit owner = 'unix only' for improved quota support + improved CTDB event support + new primary group support for idmap_ad + idmap_hash deprecated + mvxattr added to recursively rename extended attributes- Remove chkconfig requirements for systemd systems- Don't call insserv if systemd is used- Fix check if we need to require insserv- async_req: make async_connect_send() "reentrant"; (bso#12105); (bsc#1024416).- Force usage of ncurses6-config thru NCURSES_CONFIG env var; (bsc#1023847).- add missing patch for libnss_wins segfault; (bsc#995730).- Fix vfs_ceph builds against recent Ceph versions; (bsc#1021933).- Document "winbind: ignore domains" parameter; (bsc#1019416).- Add base Samba dependency to samba-ceph package.- Update to 4.5.3 + Heap-based Buffer Overflow Remote Code Execution Vulnerability; CVE-2016-2123; (bso#12409); (bsc#1014437). + Don't send delegated credentials to all servers; CVE-2016-2125; (bso#12445); (bsc#1014441). + denial of service due to a client triggered crash in the winbindd parent process; CVE-2016-2126; (bso#12446); (bsc#1014442). - 4.5.1 and 4.5.2 updates + various streams vfs fixes + various printing fixes + ntlm_auth: do not map explicitly empty domain + various stability fixes in smbd + match file compression ReFS behavior- Add missing ldb module directory; (bnc#1012092).- s3/client: obey 'disable netbios' smb.conf param, don't connect via NBT port; (bsc#1009085); (bso#12418).- Include vfstest in samba-test; (bsc#1001203).- s3/winbindd: using default domain with user@domain.com format fails; (bsc#997833).- Fix segfault in libnss_wins; (bso#12277); (bso#12269); (bsc#995730).- Update to 4.5.0 + NTLM1 Authentication disabled by default + SMB2.1 leases enabled by default + Support for OFD locks + ctdb tool rewritten + Added shadow copy snapshot prefix parameter- Fix illegal memory access after memory has been deleted; (bso#11836); (bsc#975299).- Prevent core, make sure response->extra_data.data is always cleared out; (bsc#993692).- Don't package man pages for VFS modules that aren't built; (boo#993707).- Fix population of ctdb sysconfig after source merge; (bsc#981566).- Enable vfs_ceph builds for Factory (x86-64) + Package as samba-ceph to avoid Ceph dependency in base package.- Update to 4.4.5 + Prevent client-side SMB2 signing downgrade; CVE-2016-2119; (bso#11860); (bsc#986869).- Remove obsolete syslog.target; (bsc#983938).- Honor smb.conf socket options in winbind; (bsc#975131).- Don't use htons() with IP_PROTO_RAW; (bso#11705); (bsc#969522).- Update to 4.4.4 + SMB3 multichannel: Add implementation of missing channel sequence number verification; (bso#11809). + smbd:close: Only remove kernel share modes if they had been taken at open; (bso#11919). + notifyd: Prevent NULL deref segfault in notifyd_peer_destructor; (bso#11930). + s3:rpcclient: Make '--pw-nt-hash' option work; (bso#10796). + Fix case sensitivity issues over SMB2 or above; (bso#11438). + s3:smbd: Fix anonymous authentication if signing is mandatory. (bso#11910) + Fix NTLM Authentication issue with squid; (bso#11914). + pdb: Fix segfault in pdb_ldap for missing gecos; (bso#11530). + Fix memory leak in share mode locking; (bso#11934).- Update to 4.4.3 + Various post-badlock regressions; (bso#11841); (bso#11850); (bso#11858); (bso#11870); (bso#11872). + Only allow idmap_hash for default idmap config (bso#11786). + smbd: Avoid large reads beyond EOF; (bso#11878). + vfs_acl_common: Avoid setting POSIX ACLs if "ignore system acls" is set; (bso#11806). + libads: Record session expiry for spnego sasl binds; (bso#11852).- Fix NTLMSSP regressions caused by previous CVE fixes; (bso#11849); (bsc#975962); (bsc#979268), (bsc#977669).- Revert shared library packaging to comply with SLPP- Update to 4.4.2 + A man-in-the-middle can downgrade NTLMSSP authentication; CVE-2016-2110; (bso#11688); (bsc#973031). + Domain controller netlogon member computer can be spoofed; CVE-2016-2111; (bso#11749); (bsc#973032). + LDAP conenctions vulnerable to downgrade and MITM attack; CVE-2016-2112; (bso#11644); (bsc#973033). + TLS certificate validation missing; CVE-2016-2113; (bso#11752); (bsc#973034). + Named pipe IPC vulnerable to MITM attacks; CVE-2016-2115; (bso#11756); (bsc#973036). + "Badlock" DCERPC impersonation of authenticated account possible; CVE-2016-2118; (bso#11804); (bsc#971965). + DCERPC server and client vulnerable to DOS and MITM attacks; CVE-2015-5370; (bso#11344); (bsc#936862).- Fix samba.tests.messaging test and prevent potential tdb corruption by removing obsolete now invalid tdb_close call; (bsc#974629).- Obsolete libsmbclient from libsmbclient0 while not providing it; (bsc#972197).- Update to 4.4.0. + Read of uninitialized memory DNS TXT handling; (bso#11128); (bso#11686); CVE-2016-0771. + Getting and setting Windows ACLs on symlinks can change permissions on link target; (bso#11648); CVE-2015-7560. + Sockets with htons(IPPROTO_RAW); (bso#11705); CVE-2015-8543. + s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystem with no ACL support; (bso#10489). + docs: Add example for domain logins to smbspool man page; (bso#11643). + smbd: Show correct disk size for different quota and dfree block sizes; (bso#11681). + docs: Add smbspool_krb5_wrapper manpage; (bso#11690). + winbindd: Return trust parameters when listing trusts; (bso#11691). + ctdb: Do not provide a useless pkgconfig file for ctdb; (bso#11696). + Crypto.Cipher.ARC4 is not available on some platforms, fallback to M2Crypto.RC4.RC4 then; (bso#11699). + s3:utils/smbget: Set default blocksize; (bso#11700). + Streamline 'smbget' options with the rest of the Samba utils; (bso#11700). + s3:clispnego: Fix confusing warning in spnego_gen_krb5_wrap(); (bso#11702). + s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703). + loadparm: Fix memory leak issue; (bso#11708). + lib/tsocket: Work around sockets not supporting FIONREAD; (bso#11714). + s3:vfs:glusterfs: Fix build after quota changes; (bso#11715). + ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ..."; (bso#11719). + lib:socket: Fix CID 1350010: Integer OVERFLOW_BEFORE_WIDEN; (bso#11723). + smbd: Fix CID 1351215 Improper use of negative value; (bso#11724). + smbd: Fix CID 1351216 Dereference null return value; (bso#11725). + s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new file; (bso#11727). + docs: Add manpage for cifsdd; (bso#11730). + param: Fix str_list_v3 to accept ; again; (bso#11732). + lib/socket: Fix improper use of default interface speed; (bso#11734). + lib:socket: Fix CID 1350009: Fix illegal memory accesses (BUFFER_SIZE_WARNING); (bso#11735). + libcli: Fix debug message, print sid string for new_ace trustee; (bso#11738). + Fix installation path of Samba helper binaries; (bso#11739). + Fix memory leak in loadparm; (bso#11740). + tevent: version 0.9.28: Fix memory leak when old signal action restored; (bso#11742). + smbd: Ignore SVHDX create context; (bso#11753). + Fix net join; (bso#11755). + s3:libads: setup the msDS-SupportedEncryptionTypes attribute on ldap_add; (bso#11755). + passdb: Add linefeed to debug message; (bso#11763). + s3:utils/smbget: Fix option parsing; (bso#11767). + libnet: Make Kerberos domain join site-aware; (bso#11769). + Reset TCP Connections during IP failover; (bso#11770). + ldb: Version 1.1.26; (bso#11772). + s3:smbd: Add negprot remote arch detection for OSX; (bso#11773). + vfs_glusterfs: Fix use after free in AIO callback; (bso#11774). + mkdir can return ACCESS_DENIED incorrectly on create race; (bso#11780). + "trustdom_list_done: Got invalid trustdom response" message should be avoided; (bso#11782). + Mismatch between local and remote attribute ids lets replication fail with custom schema; (bso#11783). + Quota is not supported on Solaris 10; (bso#11788). + Talloc: Version 2.1.6; (bso#11789). + smbd: Enable multi-channel if 'server multi channel support = yes' in the config; (bso#11796). + build: Fix build when '--without-quota' specified; (bso#11798). + lib/socket/interfaces: Fix some uninitialied bytes; (bso#11802). + Access based share enum: handle permission set in configuration files; (bso#8093). + See also WHATSNEW.txt from the samba-doc package.- Update to 4.3.6. + Getting and setting Windows ACLs on symlinks can change permissions on link target; CVE-2015-7560; (bso#11648); (bsc#968222). + Fix Out-of-bounds read in internal DNS server; CVE-2016-0771; (bso#11128); (bso#11686); (bsc#968223).- Upgrade on-disk FSRVP server state to new version; (bsc#924519).- Only obsolete but do not provide gplv2/3 package names; (bsc#968973).- Relocate existing lock files to /var/lib/samba/lock; (bsc#968963).- Obsolete no longer existing samba-32bit package; (bsc#967625).- Update to 4.3.5. + s3:utils/smbget: Fix recursive download; (bso#6482). + s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystemi with no ACL support; (bso#10489). + s3:smbd/oplock: Obey kernel oplock setting when releasing oplocks; (bso#11400). + vfs_shadow_copy2: Fix case where snapshots are outside the share; (bso#11580). + smbclient: Query disk usage relative to current directory; (bso#11662). + winbindd: Handle expired sessions correctly; (bso#11670). + smbd: Show correct disk size for different quota and dfree block sizes; (bso#11681). + smbcacls: Fix uninitialized variable; (bso#11682). + s3:smbd: Ignore initial allocation size for directory creation; (bso#11684). + s3-client: Add a KRB5 wrapper for smbspool; (bso#11690). + s3-parm: Clean up defaults when removing global parameters; (bso#11693). + Use M2Crypto.RC4.RC4 on platforms without Crypto.Cipher.ARC4; (bso#11699). + s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703). + ctdb: Remove error messages after kernel security update; CVE-2015-8543; (bso#11705). + loadparm: Fix memory leak issue; (bso#11708). + lib/tsocket: Work around sockets not supporting FIONREAD; (bso#11714). + ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ..."; (bso#11719). + s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new file; (bso#11727). + param: Fix str_list_v3 to accept ";" again; (bso#11732).- Shift samba-client sysconfig data into samba and samba-winbind; (bsc#947361).- Simplify shared library packaging; (bsc#966956).- Enable clustering (CTDB) support; (bsc#966271).- s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703); (bsc#964023).- Add quotes around path of update-apparmor-samba-profile; (bnc#962177).- Remove autoconf build-time requirement.- Update to 4.3.4. + vfs_fruit: Enable POSIX directory rename semantics; (bso#11065). + Crash: Bad talloc magic value - access after free; (bso#11394). + Copying files with vfs_fruit fails when using vfs_streams_xattr without stream prefix and type suffix; (bso#11466). + samba-tool: Fix uncaught exception if no fSMORoleOwner attribute is given; (bso#11613). + Fix a typo in the smb.conf manpage, explanation of idmap config; (bso#11619). + Correctly initialize the list head when keeping a list of primary followed by DFS connections; (bso#11624). + Reduce the memory footprint of empty string options; (bso#11625). + lib/async_req: Do not install async_connect_send_test; (bso#11639). + Fix typos in man vfs_gpfs; (bso#11641). + Make "hide dot files" option work with "store dos attributes = yes"; (bso#11645). + Fix a corner case of the symlink verification; (bso#11647); (bnc#960249). + Do not disable "store dos attributes" on-the-fly; (bso#11649). + Update lastLogon and lastLogonTimestamp; (bso#11659).- Prevent access denied if the share path is "/"; (bso#11647); (bnc#960249).- Update to 4.3.3. + Malicious request can cause Samba LDAP server to hang, spinning using CPU; CVE-2015-3223; (bso#11325); (bnc#958581). + Remote read memory exploit in LDB; CVE-2015-5330; (bso#11599); (bnc#958586). + Insufficient symlink verification (file access outside the share); CVE-2015-5252; (bso#11395); (bnc#958582). + No man in the middle protection when forcing smb encryption on the client side; CVE-2015-5296; (bso#11536); (bnc#958584). + Currently the snapshot browsing is not secure thru windows previous version (shadow_copy2); CVE-2015-5299; (bso#11529); (bnc#958583). + Fix Microsoft MS15-096 to prevent machine accounts from being changed into user accounts; CVE-2015-8467; (bso#11552); (bnc#958585).- Update to 4.3.2. + vfs_gpfs: Re-enable share modes; (bso#11243). + dcerpc.idl: Accept invalid dcerpc_bind_nak pdus; (bso#11327). + s3-smbd: Fix old DOS client doing wildcard delete - gives an attribute type of zero; (bso#11452). + Add libreplace dependency to texpect, fixes a linking error on Solaris; (bso#11511). + s4: Fix linking of 'smbtorture' on Solaris; (bso#11512). + s4:lib/messaging: Use correct path for names.tdb; (bso#11562). + Fix segfault of 'net ads (join|leave) -S INVALID' with nss_wins; (bso#11563). + async_req: Fix non-blocking connect(); (bso#11564). + auth: gensec: Fix a memory leak; (bso#11565). + lib: util: Make non-critical message a warning; (bso#11566). + Fix winbindd crashes with samlogon for trusted domain user; (bso#11569); (bnc#949022). + smbd: Send SMB2 oplock breaks unencrypted; (bso#11570). + ctdb: Open the RO tracking db with perms 0600 instead of 0000; (bso#11577). + s3:smb2_server: Make the logic of SMB2_CANCEL DLIST_REMOVE() clearer; (bso#11581). + s3-smbd: Fix use after issue in smbd_smb2_request_dispatch(); (bso#11581). + manpage: Correct small typo error; (bso#11584). + s3: smbd: If EAs are turned off on a share don't allow an SMB2 create containing them; (bso#11589). + Backport some valgrind fixes from upstream master; (bso#11597). + auth: Consistent handling of well-known alias as primary gid; (bso#11608). + winbind: Fix crash on invalid idmap configs; (bso#11612). + s3: smbd: have_file_open_below() fails to enumerate open files below an open directory handle; (bso#11615). + Changing log level of two entries to DBG_NOTICE; (bso#9912).- Ensure samlogon fallback requests are rerouted after kerberos failure; (bnc#953382); (bnc#953972).- Ensure to link with --as-needed flag by removing SUSE_ASNEEDED=0. - Always use the default optimization even on pre-9.2 systems.- Remove redundant configure options while adding with-relro.- Relocate the lockdir to the /var/lib/samba/lock directory.- Cleanup and enhance the pidl sub package.- Require renamed python-ldb-devel and python-talloc-devel at build-time. - Requires python-ldb and python-talloc from the python subpackage.- Update to 4.3.1. + s3: smbd: Fix our access-based enumeration on "hide unreadable" to match Windows; (bso#10252). + nss_winbind: Fix hang on Solaris on big groups; (bso#10365). + smbd: Fix file name buflen and padding in notify repsonse; (bso#10634). + kerberos: Make sure we only use prompter type when available; winbind: Fix 100% loop; (bso#11038). + source3/lib/msghdr.c: Fix compiling error on Solaris; (bso#11053). + s3:ctdbd_conn: make sure we destroy tevent_fd before closing the socket; (bso#11316). + s3: smbd: Fix mkdir race condition; (bso#11486). + pam_winbind: Fix a segfault if initialization fails; (bso#11502). + s3: dfs: Fix a crash when the dfs targets are disabled; (bso#11509). + s4:lib/messaging: Use 'msg.lock' and 'msg.sock' for messaging related subdirs; (bso#11515). + s3: smbd: Fix opening/creating :stream files on the root share directory; (bso#11522). + lib/param: Fix hiding of FLAG_SYNONYM values; (bso#11526). + net: Fix a crash with 'net ads keytab create'; (bso#11528). + s3: smbd: Fix a crash in unix_convert(); (bso#11535). + s3: smbd: Fix NULL pointer bug introduced by previous 'raw' stream fix (bso#11522); (bso#11535). + vfs_fruit: Return value of ad_pack in vfs_fruit.c; (bso#11543). + vfs_commit: set the fd on open before calling SMB_VFS_FSTAT; (bso#11547). + s3:locking: Initialize lease pointer in share_mode_traverse_fn(); (bso#11549). + s3:smbstatus: Add stream name to share_entry_forall(); (bso#11550). + s3:lib: Validate domain name in lookup_wellknown_name(); (bso#11555). + s3: lsa: lookup_name() logic for unqualified (no DOMAIN component) names is incorrect; (bso#11555).- Fix 100% CPU in winbindd when logging in with "user must change password on next logon"; (bso#11038).- Relocate the tmpfiles.d directory to the client package; (bnc#947552).- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf instead; (bnc#942716).- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).- Package /var/lib/samba/msg with 0755 permissions; (bso#11515); (bnc#945502).- Require to install libfam0-gamin from samba-libs on post-12.1 and pre-13.15 systems; (bnc#945013).- Update to 4.3.0. + Samba "map to guest = Bad uid" doesn't work; (bso#9862). + revert LDAP extended rule 1.2.840.113556.1.4.1941 LDAP_MATCHING_RULE_IN_CHAIN changes; (bso#10493). + No objectClass found in replPropertyMetaData on ordinary objects (non-deleted); (bso#10973). + Stream names with colon don't work with fruit:encoding = native; (bso#11278). + NetApp joined to a Samba/ADDC cannot resolve SIDs; (bso#11291). + tevent_fd needs to be destroyed before closing the fd; (bso#11316). + "force group" with local group not working; (bso#11320). + strsep is not available on Solaris; (bso#11359). + smbtorture does not build when configured --with-system-mitkrb5; (bso#11411). + Build with GPFS support is broken; (bso#11421). + Build broken with --disable-python; (bso#11424). + net share allowedusers crashes; (bso#11426). + nmbd incorrectly matches netbios names as own name; (bso#11427). + Python bindings don't check integer types; (bso#11429). + Python bindings don't check array sizes; (bso#11430). + CTDB's eventscript error handling is broken; (bso#11431). + Fix crash in nested ctdb banning; (bso#11432). + Cannot build ctdbpmda; (bso#11434). + samba-tool uncaught exception error; (bso#11436). + Crash in notify_remove caused by change notify = no; (bso#11444). + Poor SMB3 encryption performance with AES-GCM; (bso#11451). + Poor SMB3 encryption performance with AES-GCM (part1); (bso#11451). + fix recursion problem in rep_strtoll in lib/replace/replace.c; (bso#11455). + --bundled-libraries=!ldb,!pyldb,!pyldb-util doesn't disable ldb build and install; (bso#11458). + xid2sid gives inconsistent results; (bso#11464). + ctdb: Fix the build on FreeBSD 10.1; (bso#11465). + Handling of 0 byte resource fork stream; (bso#11467). + AD samr GetGroupsForUser fails for users with "()" in their name; (bso#11488).- Configure with --bundled-libraries=NONE; (bso#11458).- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).- Remove libiniparser-devel build-time requirement.- Update to 4.2.3. + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780). + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924). + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991). + Logon via MS Remote Desktop hangs; (bso#11061). + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068). + tevent: Add a note to tevent_add_fd(); (bso#11141). + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170). + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217). + smbd: Fix a use-after-free; (bso#11218); (bnc#919309). + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces; (bso#11245). + s3:smb2: Add padding to last command in compound requests; (bso#11277). + Add IPv6 support to ADS client side LDAP connects; (bso#11281). + Add IPv6 support for determining FQDN during ADS join; (bso#11282). + s3: IPv6 enabled DNS connections for ADS client; (bso#11283). + Fix invalid write in ctdb_lock_context_destructor; (bso#11293). + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295). + vfs_fruit: Add option "veto_appledouble"; (bso#11305). + tstream: Make socketpair nonblocking; (bso#11312). + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313). + Group creation: Add msSFU30Name only when --nis-domain was given; (bso#11315). + tevent_fd needs to be destroyed before closing the fd; (bso#11316). + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared"; (bso#11319). + smbd/trans2: Add a useful diagnostic for files with bad encoding; (bso#11323). + Change sharesec output back to previous format; (bso#11324). + Robust mutex support broken in 1.3.5; (bso#11326). + Kerberos auth info3 should contain resource group ids available from pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info exists in PAC; (bso#11328); (bnc#912457). + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329). + tevent: Fix CID 1035381 Unchecked return value; (bso#11330). + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331). + s3: smbd: Use separate flag to track become_root()/unbecome_root() state; (bso#11339). + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342). + pidl: Make the compilation of PIDL producing the same results if the content hasn't change; (bso#11356). + winbindd: Disconnect child process if request is cancelled at main process; (bso#11358). + vfs_fruit: Check offset and length for AFP_AfpInfo read requests; (bso#11363). + docs: Overhaul the description of "smb encrypt" to include SMB3 encryption; (bso#11366). + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server(); (bso#11367). + ncacn_http: Fix GNUism; (bso#11371).- Disable rpath usage; (bnc#902421).- Make the winbind package depend on the matching libwbclient version and vice versa; (bnc#936909).- Backport changes to use resource group sids obtained from pac logon_info; (bso#11328); (bnc#912457).- Order winbind.service Before and Want nss-user-lookup target.- Remove fam-devel build-time dependency for post-6 RHEL systems.- Update to 4.2.2. + s3:smbXsrv: refactor duplicate code into smbXsrv_session_clear_and_logoff(); (bso#11182). + gencache: don't fail gencache_stabilize if there were records to delete; (bso#11260). + s3: libsmbclient: After getting attribute server, ensure main srv pointer is still valid; (bso#11186). + s4: rpc: Refactor dcesrv_alter() function into setup and send steps; (bso#11236). + s3: smbd: Incorrect file size returned in the response of "FILE_SUPERSEDE Create"; (bso#11240). + Mangled names do not work with acl_xattr; (bso#11249). + nmbd rewrites browse.dat when not required; (bso#11254). + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff; (bso#11213). + s3:smbd: Add missing tevent_req_nterror; (bso#11224). + vfs: kernel_flock and named streams; (bso#11243). + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244). + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses are used; (bso#11284). + ctdb: check for talloc_asprintf() failure; (bso#11201). + spoolss: purge the printer name cache on name change; (bso#11210); (bnc#901813). + CTDB statd-callout does not scale; (bso#11204). + vfs_fruit: also map characters below 0x20; (bso#11221). + ctdb: Coverity fix for CID 1291643; (bso#11201). + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225). + Fix terminate connection behavior for asynchronous endpoint with PUSH notification flavors; (bso#11226). + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007). + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201). + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the directory is deleted; (bso#11257). + s3:winbindd: make sure we remove pending io requests before closing client sockets; (bso#11141); (bnc#931854). + Fix panic triggered by smbd_smb2_request_notify_done() -> smbXsrv_session_find_channel() in smbd; (bso#11182). + 'sharesec' output no longer matches input format; (bso#11237). + waf: Fix systemd detection; (bso#11200). + CTDB: Fix portability issues; (bso#11202). + CTDB: Fix some IPv6-related issues; (bso#11203). + CTDB statd-callout does not scale; (bso#11204). + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you enter invalid values; (bso#11234). + libads: record service ticket endtime for sealed ldap connections; (bso#11267). + lib/util: Include DEBUG macro in internal header files before samba_util.h; (bso#11033).- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).- Remove the independently built libraries ldb, talloc, tdn, and tevent and the post-10.3 renamed libsmbclient from baselibs.conf.- Drop redundant doc attribute from man pages.- Update to 4.2.1. + s3:winbind:grent: Don't stop group enumeration when a group has no gid; (bso#8905). + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791). + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with servers that don't send the 2 unused fields; (bso#10016). + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476). + waf: Fix the build on openbsd; (bso#10476). + s3: client: "client use spnego principal = yes" code checks wrong name; (bso#10888). + spoolss: Retrieve published printer GUID if not in registry; (bso#11018). + s3: lib: libsmbclient: If reusing a server struct, check every cli->timout miliseconds if it's still valid before use; (bso#11079). + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125). + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135). + replace: Remove superfluous check for gcrypt header; (bso#11135). + Backport subunit changes; (bso#11137). + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with implementation; (bso#11140). + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143). + talloc: Version 2.1.2; (bso#11144). + Update libwbclient version to 0.12; (bso#11149). + brlock: Use 0 instead of empty initializer list; (bso#11153). + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164). + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169); (bnc#913304). + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev fails in the SMB1 case; (bso#11173). + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174). + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175). + s3: libsmbclient: Add missing talloc stackframe; (bso#11177). + s4-process_model: Do not close random fds while forking; (bso#11180). + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).- Prevent samba package updates from disabling samba kerberos printing.- Add sparse file support for samba; (fate#318424).- Purge printer name cache on spoolss SetPrinter change; (bso#11210); (bnc#901813).- Correctly retain errno from Btrfs snapshot ioctls; (bnc#923374).- Simplify libxslt build requirement and README.SUSE install. - Remove no longer required cleanup steps while populating the build root.- Remove deprecated base_rid example from idmap_rid manpage; (bso#11169); (bnc#913304).- Update to 4.2.0. + smbd: Stop using vfs_Chdir after SMB_VFS_DISCONNECT; (bso#1115). + pam_winbind: fix warn_pwd_expire implementation; (bso#9056). + nsswitch: Fix soname of linux nss_*.so.2 modules; (bso#9299). + Make 'profiles' work again; (bso#9629). + s3:smb2_server: protect against integer wrap with "smb2 max credits = 65535"; (bso#9702). + Make validate_ldb of String(Generalized-Time) accept millisecond format ".000Z"; (bso#9810). + Use -R linker flag on Solaris, not -rpath; (bso#10112). + vfs: Add glusterfs manpage; (bso#10240). + Make 'smbclient' use cached creds; (bso#10279). + pdb: Fix build issues with shared modules; (bso#10355). + s4-dns: Add support for BIND 9.10; (bso#10620). + idmap: Return the correct id type to *id_to_sid methods; (bso#10720). + printing/cups: Pack requested-attributes with IPP_TAG_KEYWORD; (bso#10808). + Don't build vfs_snapper on FreeBSD; (bso#10834). + nss_winbind: Add getgroupmembership for FreeBSD; (bso#10835). + idmap_rfc2307: Fix a crash after connection problem to DC; (bso#10837). + s3: smb2cli: query info return length check was reversed; (bso#10848). + s3: lib, s3: modules: Fix compilation on Solaris; (bso#10849). + lib: uid_wrapper: Fix setgroups and syscall detection on a system without native uid_wrapper library; (bso#10851). + winbind3: Fix pwent variable substitution; (bso#10852). + Improve samba-regedit; (bso#10859). + registry: Don't leave dangling transactions; (bso#10860). + Fix build of socket_wrapper on systems without SO_PROTOCOL; (bso#10861). + build: Do not install 'texpect' binary anymore; (bso#10862). + Fix testparm to show hidden share defaults; (bso#10864). + libcli/smb: Fix smb2cli_validate_negotiate_info with min=PROTOCOL_NT1 max=PROTOCOL_SMB2_02; (bso#10866). + Integrate CTDB into top-level Samba build; (bso#10892). + samba-tool group add: Add option '--nis-domain' and '--gid'; (bso#10895). + s3-nmbd: Fix netbios name truncation; (bso#10896). + spoolss: Fix handling of bad EnumJobs levels; (bso#10898). + Fix smbclient loops doing a directory listing against Mac OS X 10 server with a non-wildcard path; (bso#10904). + Fix print job enumeration; (bso#10905); (bnc#898031). + samba-tool: Create NIS enabled users and unixHomeDirectory attribute; (bso#10909). + Add support for SMB2 leases; (bso#10911). + btrfs: Don't leak opened directory handle; (bso#10918). + s3: nmbd: Ensure NetBIOS names are only 15 characters stored; (bso#10920). + s3:smbd: Fix file corruption using "write cache size != 0"; (bso#10921). + pdb_tdb: Fix a TALLOC/SAFE_FREE mixup; (bso#10932). + s3-keytab: fix keytab array NULL termination; (bso#10933). + s3:passdb: fix logic in pdb_set_pw_history(); (bso#10940). + Cleanup add_string_to_array and usage; (bso#10942). + dbwrap_ctdb: Pass on mutex flags to tdb_open; (bso#10942). + Fix RootDSE search with extended dn control; (bso#10949). + Fix 'samba-tool dns serverinfo ' for IPv6; (bso#10952). + libcli/smb: only force signing of smb2 session setups when binding a new session; (bso#10958). + s3-smbclient: Return success if we listed the shares; (bso#10960). + s3-smbstatus: Fix exit code of profile output; (bso#10961). + socket_wrapper: Add missing prototype check for eventfd; (bso#10965). + libcli: SMB2: Pure SMB2-only negprot fix to make us behave as a Windows client does; (bso#10966). + vfs_streams_xattr: Check stream type; (bso#10971). + s3: smbd: Fix *allocate* calls to follow POSIX error return convention; (bso#10982). + vfs_fruit: Add support for AAPL; (bso#10983). + Fix spoolss IDL response marshalling when returning error without clearing info; (bso#10984). + dsdb-samldb: Check for extended access rights before we allow changes to userAccountControl; (bso#10993); CVE-2014-8143; (boo#914279). + Fix IPv6 support in CTDB; (bso#10996). + ctdb-daemon: Use correct tdb flags when enabling robust mutex support; (bso#11000). + vfs_streams_xattr: Add missing call to SMB_VFS_NEXT_CONNECT; (bso#11005). + s3-util: Fix authentication with long hostnames; (bso#11008). + ctdb-build: Fix build without xsltproc; (bso#11014). + packaging: Include CTDB man pages in the tarball; (bso#11014). + pdb_get_trusteddom_pw() fails with non valid UTF16 random passwords; (bso#11016). + Make Sharepoint search show user documents; (bso#11022). + nss_wrapper: check for nss.h; (bso#11026). + Enable mutexes in gencache_notrans.tdb; (bso#11032). + tdb_wrap: Make mutexes easier to use; (bso#11032). + lib/util: Avoid collision which alread defined consumer DEBUG macro; (bso#11033). + winbind: Retry after SESSION_EXPIRED error in ping-dc; (bso#11034). + s3-libads: Fix a possible segfault in kerberos_fetch_pac(); (bso#11037). + vfs_fruit: Fix base_fsp name conversion; (bso#11039). + vfs_fruit: mmap under FreeBSD needs PROT_READ; (bso#11040). + Fix authentication using Kerberos (not AD); (bso#11044). + net: Fix sam addgroupmem; (bso#11051). + vfs_snapper: Correctly handles multi-byte DBus strings; (bso#11055); (bnc#913238). + cli_connect_nb_send: Don't segfault on host == NULL; (bso#11058). + utils: Fix 'net time' segfault; (bso#11058). + libsmb: Provide authinfo domain for encrypted session referrals; (bso#11059). + s3-pam_smbpass: Fix memory leak in pam_sm_authenticate(); (bso#11066). + vfs_glusterfs: Add comments to the pipe(2) code; (bso#11069). + vfs/glusterfs: Change xattr key to match gluster key; (bso#11069). + vfs_glusterfs: Implement AIO support; (bso#11069). + s3-vfs: Fix developer build of vfs_ceph module; (bso#11070). + s3: netlogon: Ensure we don't call talloc_free on an uninitialized pointer; (bso#11077); CVE-2015-0240; (bnc#917376). + vfs: Add a brief vfs_ceph manpage; (bso#11088). + s3: smbclient: Allinfo leaves the file handle open; (bso#11094). + Fix Win8.1 Credentials Manager issue after KB2992611 on Samba domain; (bso#11097). + debug: Set close-on-exec for the main log file FD; (bso#11100). + s3: smbd: leases - losen paranoia check. Stat opens can grant leases; (bso#11102). + s3: smbd: SMB2 close. If a file has delete on close, store the return info before deleting; (bso#11104). + doc:man:vfs_glusterfs: improve the configuration section; (bso#11117). + snprintf: Try to support %j; (bso#11119). + ctdb-io: Do not use sys_write to write to client sockets; (bso#11124). + doc-xml: Add 'sharesec' reference to 'access based share enum'; (bso#11127).- Update to 4.2.0rc5. + Ensure we don't call talloc_free on an uninitialized pointer; CVE-2015-0240; (bso#11077); (bnc#917376).- Fix usage of freed memory on server exit; (bso#11218); (bnc#919309).- Fix tdb_store_flag_to_ntdb() gcc5 build failure.- Fix vfs_snapper DBus string handling; (bso#11055); (bnc#913238).- Update to 4.1.16. + dsdb-samldb: Check for extended access rights before we allow changes to userAccountControl; (bso#10993); CVE-2014-8143; (boo#914279).- Adjust baselibs.conf due to libpdb0 package rename to libsamba-passdb0.- Fix libsmbclient DFS referral handling. + Reuse connections derived from DFS referrals; (bso#10123); (fate#316512). + Set domain/workgroup based on authentication callback value; (bso#11059).- Update to 4.2.0rc4. - Add libsamba-debug, libsocket-blocking, libsamba-cluster-support, and libhttp to the libs package; (boo#913547). - Rename libpdb packages to libsamba-passdb. - Drop libsmbsharemodes packages.- Enable avahi support on post-12.2 systems.- Update to 4.1.15. + pam_winbind: Fix warn_pwd_expire implementation; (bso#9056). + nsswitch: Fix soname of linux nss_*.so.2 modules; (bso#9299). + Fix profiles tool; (bso#9629). + s3-lib: Do not require a password with --use-ccache; (bso#10279). + s4:dsdb/rootdse: Expand extended dn values with the AS_SYSTEM control; (bso#10949). + s4-rpc: dnsserver: Fix enumeration of IPv4 and IPv6 addresses; (bso#10952). + s3:smb2_server: Allow reauthentication without signing; (bso#10958). + s3-smbclient: Return success if we listed the shares; (bso#10960). + s3-smbstatus: Fix exit code of profile output; (bso#10961). + libcli: SMB2: Pure SMB2-only negprot fix to make us behave as a Windows client does; (bso#10966). + s3: smbd/modules: Fix *allocate* calls to follow POSIX error return convention; (bso#10982). + Fix 'domain join' by adding 'drsuapi.DsBindInfoFallBack' attribute 'supported_extensions'; (bso#11006). + idl:drsuapi: Manage all possible lengths of drsuapi_DsBindInfo; (bso#11006). + winbind: Retry LogonControl RPC in ping-dc after session expiration; (bso#11034).- yast2-samba-client should be able to specify osName and osVer on AD domain join; (bnc#873922).- Lookup FSRVP share snums at runtime rather than storing them persistently; (bnc#908627).- Specify soft dependency for network-online.target in Winbind systemd service file; (bnc#889175).- Fix spoolss error response marshalling; (bso#10984).- Update to 4.1.14. + pidl/wscript: Remove --with-perl-* options; revert buildtools/wafadmin/ Tools/perl.py back to upstream state; (bso#10472). + s4-dns: Add support for BIND 9.10; (bso#10620). + nmbd fails to accept "--piddir" option; (bso#10711). + nss_winbind: Add getgroupmembership for FreeBSD; (bso#10835). + S3: source3/smbd/process.c::srv_send_smb() returns true on the error path; (bso#10880). + vfs_glusterfs: Remove "integer fd" code and store the glfs pointers; (bso#10889). + s3-nmbd: Fix netbios name truncation; (bso#10896). + spoolss: Fix handling of bad EnumJobs levels; (bso#10898). + s3: libsmbclient-smb2. MacOSX 10 SMB2 server doesn't set STATUS_NO_MORE_FILES when handed a non-wildcard path; (bso#10904). + spoolss: Fix jobid in level 3 EnumJobs response; (bso#10905). + s3: nmbd: Ensure NetBIOS names are only 15 characters stored; (bso#10920). + s3:smbd: Fix file corruption using "write cache size != 0"; (bso#10921). + pdb_tdb: Fix a TALLOC/SAFE_FREE mixup; (bso#10932). + s3-keytab: Fix keytab array NULL termination; (bso#10933). + Cleanup add_string_to_array and usage; (bso#10942).- Remove and cleanup shares and registry state associated with externally deleted snaphots exposed as shadow copies; (bnc#876312).- Use the upstream tar ball, as signature verification is now able to handle compressed archives.- Fix leak when closing file descriptor returned from dirfd; (bso#10918).- Fix spoolss EnumJobs and GetJob responses; (bso#10905); (bnc#898031). + Fix handling of bad EnumJobs levels; (bso#10898).- Remove dependency on gpg-offline as signature checking is implemented in the source validator.- Update to 4.1.13. + s3-libnet: Add libnet_join_get_machine_spns(); (bso#9984). + s3-libnet: Make sure we do not overwrite precreated SPNs; (bso#9984). + s3-libads: Add all machine account principals to the keytab; (bso#9985). + s3: winbindd: Old NT Domain code sets struct winbind_domain->alt_name to be NULL. Ensure this is safe with modern AD-DCs; (bso#10717). + Fix unstrcpy; (bso#10735). + pthreadpool: Slightly serialize jobs; (bso#10779). + s3: smbd: streams - Ensure share mode validation ignores internal opens (op_mid == 0); (bso#10797). + s3: smbd:open_file: Open logic fix; Use a more natural check; (bso#10809). + vfs_media_harmony: Fix a crash bug; (bso#10813). + docs: Mention incompatibility between kernel oplocks and streams_xattr; (bso#10814). + nmbd: Send waiting status to systemd; (bso#10816). + libcli: Fix a segfault calling smbXcli_req_set_pending() on NULL; (bso#10817). + nsswitch: Skip groups we were not able to map; (bso#10824). + s3-winbindd: Use correct realm for trusted domains in idmap child; (bso#10826). + s3: nmbd: Ensure the main nmbd process doesn't create zombies; (bso#10830). + s3: lib: Signal handling - ensure smbrun and change password code save and restore existing SIGCHLD handlers; (bso#10831). + idmap_rfc2307: Fix a crash after connection problem to DC; (bso#10837). + s3-winbindd: Do not use domain SID from LookupSids for Sids2UnixIDs call; (bso#10838). + s3: smb2cli: Query info return length check was reversed; (bso#10848). + registry: Don't leave dangling transactions; (bso#10860).- Update to 4.2.0rc2./sbin/ldconfig/sbin/ldconfiglibdcerpc-binding0libdcerpc0libndr-krb5pac0libndr-nbt0libndr-standard0libndr0libndr1libndr2libnetapi0libsamba-credentials0libsamba-credentials1libsamba-errors0libsamba-hostconfig0libsamba-passdb0libsamba-util0libsamdb0libsmbclient0libsmbconf0libsmbldap0libsmbldap2libtevent-util0libwbclient0xinomavro 1752585872  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuv4.19.8+git.430.a10fe64854c4.19.8+git.430.a10fe64854c4.19.8+git.430.a10fe64854c4.19.8+git.430.a10fe64854c4.19.8+git.430.a10fe64854c4.19.8+git.430.a10fe64854c4.19.8+git.430.a10fe64854c4.19.8+git.430.a10fe64854c4.19.8+git.430.a10fe64854c4.19.8+git.430.a10fe64854c4.19.8+git.430.a10fe64854c4.19.8+git.430.a10fe64854c4.19.8+git.430.a10fe64854c4.19.8+git.430.a10fe64854c4.19.8+git.430.a10fe64854c4.19.8+git.430.a10fe64854c4.19.8+git.430.a10fe64854c4.19.8+git.430.a10fe64854c4.19.8+git.430.a10fe64854c-150600.3.18.24.19.8+git.430.a10fe64854c-150600.3.18.24.19.8+git.430.a10fe64854c4.19.8+git.430.a10fe64854c4.19.8+git.430.a10fe64854c4.19.8+git.430.a10fe64854c4.19.8+git.430.a10fe64854c4.19.8+git.430.a10fe64854c4.19.8+git.430.a10fe64854c4.19.8+git.430.a10fe64854c4.19.8+git.430.a10fe64854c4.19.8+git.430.a10fe64854c4.19.8+git.430.a10fe64854c4.19.8+git.430.a10fe64854c4.19.8+git.430.a10fe64854c4.19.8+git.430.a10fe64854c4.19.8+git.430.a10fe64854c4.19.8+git.430.a10fe64854c4.19.8+git.430.a10fe64854c4.19.8+git.430.a10fe64854c4.19.8+git.430.a10fe64854c4.19.8+git.430.a10fe64854c4.19.8+git.430.a10fe64854c4.19.8+git.430.a10fe64854clibdcerpc-binding.so.0libdcerpc-binding.so.0.0.1libdcerpc-server-core.so.0libdcerpc-server-core.so.0.0.1libdcerpc.so.0libdcerpc.so.0.0.1libndr-krb5pac.so.0libndr-krb5pac.so.0.0.1libndr-nbt.so.0libndr-nbt.so.0.0.1libndr-standard.so.0libndr-standard.so.0.0.1libndr.so.3libndr.so.3.0.1libnetapi.so.1libnetapi.so.1.0.0libsamba-credentials.so.1libsamba-credentials.so.1.0.0libsamba-errors.so.1libsamba-errors.so.1.0.0libsamba-hostconfig.so.0libsamba-hostconfig.so.0.0.1libsamba-passdb.so.0libsamba-passdb.so.0.28.0libsamba-util.so.0libsamba-util.so.0.0.1libsamdb.so.0libsamdb.so.0.0.1libsmbclient.so.0libsmbclient.so.0.7.0libsmbconf.so.0libsmbconf.so.0.0.1libsmbldap.so.2libsmbldap.so.2.1.0libtevent-util.so.0libtevent-util.so.0.0.1libwbclient.so.0libwbclient.so.0.16libCHARSET3-samba4.solibMESSAGING-SEND-samba4.solibMESSAGING-samba4.solibaddns-samba4.solibads-samba4.solibasn1util-samba4.solibauth-samba4.solibauthkrb5-samba4.solibcli-cldap-samba4.solibcli-ldap-common-samba4.solibcli-ldap-samba4.solibcli-nbt-samba4.solibcli-smb-common-samba4.solibcli-spoolss-samba4.solibcliauth-samba4.solibclidns-samba4.solibcluster-samba4.solibcmdline-contexts-samba4.solibcmdline-samba4.solibcommon-auth-samba4.solibdbwrap-samba4.solibdcerpc-pkt-auth-samba4.solibdcerpc-samba-samba4.solibdcerpc-samba4.solibevents-samba4.solibflag-mapping-samba4.solibgenrand-samba4.solibgensec-samba4.solibgpo-samba4.solibgse-samba4.solibhttp-samba4.solibinterfaces-samba4.solibiov-buf-samba4.solibkrb5samba-samba4.solibldbsamba-samba4.soliblibcli-lsa3-samba4.soliblibcli-netlogon3-samba4.soliblibsmb-samba4.solibmessages-dgm-samba4.solibmessages-util-samba4.solibmscat-samba4.solibmsghdr-samba4.solibmsrpc3-samba4.solibndr-samba-samba4.solibndr-samba4.solibnet-keytab-samba4.solibnetif-samba4.solibnpa-tstream-samba4.solibprinting-migrate-samba4.solibregistry-samba4.solibreplace-samba4.solibsamba-cluster-support-samba4.solibsamba-debug-samba4.solibsamba-modules-samba4.solibsamba-security-samba4.solibsamba-sockets-samba4.solibsamba3-util-samba4.solibsamdb-common-samba4.solibsecrets3-samba4.solibserver-id-db-samba4.solibserver-role-samba4.solibsmb-transport-samba4.solibsmbclient-raw-samba4.solibsmbd-base-samba4.solibsmbd-shim-samba4.solibsmbldaphelper-samba4.solibsocket-blocking-samba4.solibstable-sort-samba4.solibsys-rw-samba4.solibtalloc-report-printf-samba4.solibtdb-wrap-samba4.solibtime-basic-samba4.solibtrusts-util-samba4.solibutil-reg-samba4.solibutil-setid-samba4.solibutil-tdb-samba4.sopdbldapsam.sosmbpasswd.sotdbsam.so/usr/lib64//usr/lib64/samba//usr/lib64/samba/pdb/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:39674/SUSE_SLE-15-SP6_Update/aeeab13b449b36a000127e6292fbe0fc-samba.SUSE_SLE-15-SP6_Updatedrpmxz5ppc64le-suse-linux  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=0c913f71dbf5c79ebd1b3cca3dbd7ce5c5ac311e, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=7ab26697ab6e9c47f893d3169f25519671a07961, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=b7eda7ae1b0c049e6b40b483cc80575b663f2954, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=5d8e30a5684c60001af2c82f9d876c4d0580631a, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=eff9ee2bf051052993177a75a45be44d242d0f99, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=0583dd802dbf9f57a767173132641ee97a00050d, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=bead63e5048610bfc678ec4927c7235e4ba2e6f6, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=145570ce47d2763a966907a9993933c47d355464, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=fd57682d649597fb8400ef5e98796bd11eed0014, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=066eb3330a7eba91584c922eff3fd064d4116df5, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=0153af58f36526653de2aedc66035c010aecc129, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=c9550f1365efe1bcb4bd0903768f7427d8c3bc75, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=f39ba8b67c43de7500bba71f304d9a107cbd1f17, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=18f3176dba26a68f5b318c12a6a5f26e7acf64d2, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=4132b04a94cbad7964ee15dfa4ef9a841a9f2588, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=51349d50eb4da89543a4b9dd6caa3b1516b075eb, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=3a4f2b3403a04fe0671ef09936ec9318a48c4145, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=1594c16ae21ad14e2f319f78eea94cab240e7b4a, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=efbe7a227b91e2ea3bf283177fa8ea532641e131, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=76d2066e5e723ff009f2dc394993e140146aa573, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=63603cc1779b34d38a29afbe29fd47d2339543e2, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=1a15fd071db7675234b631139ddaae1f7bb2d903, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=9e2aac75ccf2fae47bb3ba78544084e79f860516, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=88cdbd6c64b894dbf541d544bf59b76667d1d720, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=3a52d50e441711ea725a49ea019dea0fd508ce90, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=d22091a84692cb9f3f089cae96d8f10a840655b6, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=aef6086409c87974e7b03cc296844ac34b5b4732, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=fdd36ffbc19b1d042750caea84f338f499529a8f, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=bf70fa53cfe68b0711090ea143c3d3c70b23884e, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=9c5c16a85758909f2023b7c9f0921094cd3bbeab, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=394d3648ccbabd9ba1389c50fc13776eb45164c0, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=44ab43ebf16f743c351c6250c5d3a0115c6d27cb, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=9f34bd22626392421cd7df4a588ae0dd9bbb4fd6, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=ae3bed69753d836302c5a9292f47e2fd8c472df0, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=885e15ee11a163ac4be1c6946f5754270ae56270, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=c99ffbdaedcd0f350cd98dad088b23d8031f8bde, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=a9b9bb4b708924f8b17c38d6645ed169771ecbdb, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=76845b6323e35a0f8a2b36ef312c323e0f4cf1a8, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=af8552c1739c1cb99a4265152dc00e2703fc1b28, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=bb67c2a66b3f1b773b203c5cfeec2e313406e355, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=9e069e1d4b34e8a33afac2d10029a98f22d60205, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=2b78c1ea8365055eb417d14ee963dc5e91ced111, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=7e440d29a15aad8362eda1021496e66a8c80b302, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=86e994c6ddfcab7208352c68dc1fcd2bc7fdeb01, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=cb142fbe66b00d8cd1eedc5c51ae4fff59a83b7b, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=fa4c03d81b10ab230da6692fe5003f6f6b27f9c6, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=520a61eb6c5e4877f0d203be2fbab1b3462a78d9, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=ddf478a50bc492b15b0b7daf4e3c613fcf17fe8b, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=1d13bd658bae63318111823b3ba9dd614421f8f9, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=7ec408c9a89de259ddbf7c4f7cfeca7257ecea80, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=76b495177d44e7c76f564ca29e4dba98b7b67736, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=02cdf3a927047b3eb2e7525b51da351f9de366a6, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=90d4d75ac7280cc7bd89829073daf770f80aa87c, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=b68ab484028fc98f9bd1dc91a29562faf05c48ee, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=b8788615ed47ce112d6bdbbbff978c89792192c0, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=671a5cf8f7d75ec224d7ecd028fe31f9f00a8e6a, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=bdbb50428c54421aa73d35288adba63a14043d4b, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=0ea00f2480460ffeea6e61a94e18552e0b911509, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=02597eaa454c252ac463f7f8c54f4e1f656055b2, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=cb1ed8f6deb0726a60f8c53f49d30a7b771bd5bb, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=8e585ede001eba026f9cf1ddf4c43d088b10d56a, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=325ca41a69179005abc0fbd14b78395298e954c2, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=8908c0f6133a443de9f1f46a9da40af8aea899d1, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=7bb65c8c7f126a696463805673c718913aff50ce, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=42f0f227645e454f8fe21bed94828b41860805a0, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=34f14304532e80e8f9af6cb8d8bac246564bb455, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=f1e45886e3344b543e3c181673a787ef1190c4a4, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=f038ab47e995589cbe04a21b0addc910a328029a, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=23538141659d4a1f3c957839f35b268b7dfdc15d, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=e6a4d2f17ba44c5d24989bf417118002697a28d4, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=4d3039f0c56c25f28593788bade035ed4d6a016a, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=65303903e998f261d50884c5f7fa2a2b4d8eb247, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=537d4d1ce097b63e610b97258e834c090f4c9f63, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=35cff36db645c0350a9be53e3c5456005a9491f8, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=b1192bcc61f7454a8ac8c563629e646bd7fe8947, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=2865b002a83cd90c14c09807eaab8ddacd3e9238, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=8a762d4063f266028a195f2e6e491ccd6b4f5775, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=01e88fe2edc0d8fb5fafea15a306167a3bd523d6, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=75c277f0be3adc8c6569bd4b62240d90c52696a7, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=a2141ca3efc264ce1ed26b8e4b64d2cc295afcc2, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=82ea7a69504e611aa06f4fcf8d017c349672fb0a, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=601a7b6e92381742855b0999e363cfae95b1da97, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=8c436acf462e38de5b1630816071472b19821b64, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=c36557e5a6f682e48808b5bdd56cc8d8cd89f843, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=7210fb06a46f8c12df0801508b24f85fa6f02e15, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=c26937bada3bdb779192005dd2a059229cf4b341, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=a6e3c042151214395d8d180d20ad49586f8714b6, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=5ffd959979144971a8171df1ad580f6db7b7bb98, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=0dbe0ee79a215485b5a9085a1141122708c8aefe, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=b2dc8edb1675230a14dd876f58ee6e896026b500, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=22e9a955cfb15aa3e22b868d4b0c9a253d13d7a0, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=6e52b791b42a1dbe83cbfda89044708135b1c6b8, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=7bf315024a5d94db4c55c1c2976cb91c3c459b49, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=c2b6b9172edc9165bd777027150685ab7210e969, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=f2538112dbd5c2980ff284ee28398896bf4a6c07, strippeddirectoryELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=08c016f0571da37fe9953b6d5e8e956ce8f69967, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=8faac9b827e11d0658111f4e30cf08f8baae9ed9, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=d4b163b70f978f59397e6b732398f76ac1e9b97e, stripped G=ks j$Li#G^)5=Tl5oIfl{(Cc  5 ] k q + / G K Q W ^ j n '@5B.E1J[ (=G($1)#  9&: , 9E  % 1(-} "P+P*RARRRRRRRRRRRRRRRRRRRRRRRRRR@RRRP4P3RARR{RRRRRRR9RRRRR7RRRRCRRRR8R6RRRRBRRR@RRzRRRRP6P5RR{RR,RRARRR9RRNRRRRR;RRR(R$RR RRRRRyRRRRRR7RCRR8R6RRRzRR'RRRR+RRxRRMRBR:RRRR~RR@R#RRRP_P^RRRRRRRRRRRRRRR~RRRRRRRRPbPaRRRRRRRRRRRRRRPiPhRRRRRRyRRRRRRRRRRRxRRRPlPmPmPnPnPoPoPpPpPqPqPrPrPsPsPtPtPuPuPvPvPwPwPxPxPyPyPzPzP{P{P|P|P}P}P~P~PPkRRARRRRRRRRRR@RRPPRR(RiRmRRAR?RRERGRRkRR,RuRRJRRRRRR}RRR;RRRRRRRRRRjRRRRRRtRR:RRRR+RhRR>RRlRRRIR~R|R@RR'RRDRPPRARRgRRERRRRRRRRR5RLR\RR,RRRXRVRRRfR4RRRRWRRRRR+RR@RUR1RRKRDR[RPPRRRRRRPPRRARRRRRRRRRERRRRRRR@RRRDRPPPPPPPPPPPPPPPPPRAR{R,RRRRRR}RRRRRRRRRRRR5RRRRRRRRRRRR+RRRR4RRR|RRRRzR@RRRRRRRPPRRRRRRRARRRRRRERRRRRR@RRRRRRDRRRRPPRARR0R,RLRRRRRRR5RR\R"RRRRRVRgRRRXRRRfRRRWRRRRRR!R+R4RR@R/RURRKR[RRPPPPPPPPPPPPPPPPPPPPPPPPPR;RRRRuRiRARRRRRRRJRRRRmRR(RRRRRRRRlRhRRtRRRRRIR'R:RRRR~RRR@RRRRPPRRRRRRqRRRRRRRRPRRRARoRRRRRRRRRRRRRRRRRRRRRRRR5RRRRRRRRRRRRRRRpRRR4RRRRRRRQRRnRORRRRRRRRRRR@RRRZRRRRYRRPPPPPPPRRRRARRRRRRRRR@RRRRRZRYRRRPPRRRRRRRRRRRRPPPPPPPPPPPPPPPRRRRRRRPPRRARRRRRR@RRPPRoRRARRRRRqRnRpRR@RRRRPPRARRoRRRqR}R7RRRRRRRRRRRRRRpRR|RRRRR6RRRR@RRnRRRPPRARRLRRRRRR.RRRRRRRRR-RRR@RRRRRKRP PRRRARRRRR"R R RRJRVRyRRR}RmRRRRRRRRRCRXRRRRlRxRRRRRWR RRRR!RRIRBRR~R|RRR@RRZRUR1RRYRP P RRARRRRRRR@RRRP P RARRRRR RRRRRRRJRiRRRRRRRRwRRR,RCRRkRRR3RRRRRRRjRR2R+RhRRRRRRRRRRRBRRRRRRIRRR@RRvRRRRRPPRARRTRRRR3RwRRRRRRRLRRVRXRERR2RRWRRRRvRRR@RURSR1RRRKRDRPPRR\RRRRRRRRRRRyRRRRRR"RRxRRRRRRRR!RR[RRRPPRRRRR\RRRRRRRRRRRRRRR[RPPRRR\RyRRRRRRCRRR RRRRRRRRRRR"R&RRR RR%RRBRR!RRRRRxRRRRRRR[RPPRRRRRRRyRRRRRRRRxRRRRRRRPPRRRRRRRRRRARRFRERRRRRRRRCRRRRRRRBRRQRRRR@RRRRRDRPPRCRRRRRRRRRR;RRRRRRBR:RRRRRRRRR~RRPPRARRRRRRRRER5RRRRRRR{RRRR4RRzRRRRRR@RRRDRPPRARyRRRRRRRRRRRRxRRRR@RRRP!P RRRR5RRRR4RRP#P"RRRRRRP%P$RRRARRRRRRRRRRRRRRR@RRRP'P&RR{RRRRRRRRRRRRRRzRRRRRRP)P(RRRRARRRRRRRRRRRRRRRRRRR@RRRRRP.P-RCRRR7RRRBR6RRRRP0P/R{RRRRRRR7RRRR6R~RzRRRRP2P1RR}RRRRRR7R|RR6RRRRP9P8RRRRRRP;P:RRRRP=PRXR3RRRARRRRRRRRLRRRR{RRRRRRER,RRRRRRRRRRRzRRRRRRR+RR2RWRRR@R1RRRKRDRRPAP@RRRRRRRRmRRRRRRRRRRRJRRRRRRRRRRRlRRIRRRRPCPBRARRRyRRRR RRRRRRXRCRLRRRRRRRR RRRVR&RRxRRRWR RRRRBRRRRRRRRRR@R%RZRUR1RRRKRPEPDRRRRRCR.RRRRRRRRRRBR-RRRRRRRRRRPGPFRRRRRRRRRPIPHRRRRPKPJRARRRRRRTRVRLRRR@RRRKRURSR1RPMPLRARRyRRRRRRRRRR{RRRRaR`RcReR]RbR\RRRRRRRRzRRRR@RRRxRRR[RPOPNRRRRRRR;RRR:RRRRRRPQPPR(RRRARRRR,RuRRRRRRRRRtRR+RRRRR~RR@R'RRPSPRRXRARRERRRRRR,RRRRRJRR}RRRRRRRRRRR(RCRRRRIRWRR'RRRBRR+RRRRRRR@RR|R1RRRDRPUPTRRRARRRRRsRRRRRRRRRRR@RrRRRRQRRRRPWPVRRRRPYPXRRRRRRERRRRRRDRP[PZRRRRQRP]P\RARJRRRRR5RRR{RR3RRRR,RRRRR(RRRmRRRRRR;R7RRRRCRRR6RlR4RRRIRzRRRR+RRRR~RBR:RRRR'RRR@RRR2RRRPePdRRRRwRRRRRyRRRRRRRRR~RxRvRRRRPgPfRRRRRwRRRRyRRRRRRRRRR{RR~RRxRvRRzRRRRPPRARRRJRRRRXRRVRWRRRIRR@RRRUR1RPPRRRRRRPRRRORRRRRRPPRARRRRRRRRR{RRRRRzRRRRRRR@RRRPPRRRRRR*RRR;RRRRRR{R)RR:RzRRRRRRRRR~RRPPR=RARgRRRRR;RRRRRR\RRRRRRfRRRRzRR!RRRRRRRRR@RRR[RRPPRARRRRRRR}RRRRRVRRRRR5RXRR4RRRWRR|RRRRRRR@RRRUR1RPPRRRRRRRRRRRRPPRRRRPPRRRRRRRRRRRRQRRRPPRRARR,RRRRCRRERRRRRRRRyRRR(RRRRRxRRRRR'RRRBRRR+RR@RRDRRPPRR3RRRmRRRRiRRRRoRRRRARRR,RqRHRERRR*RRRRRRRRXR}RRRRRRRRR5RRRRR RJR(RuRRRRRRRRRRR;RCRR{RRRRRRpR)RlRR4RRRzRWRRnRRRRRRRRRQRtRRRRRBR:RRIR'R+RRR~R@RRRRR|RRR2RhRR R1RRRDRRRPPRRPPRRRRRRRRRRRRRRRRRRRRRZRPPRRPPRRRRPPRRRRQRPPRRRRRPPRRRRRRRRRRPPRRPPRARRRRRRRRRRuR7RRRtRRRRR6RRRR@RRPPRRRRRRPPRRPPRRRRRRRRARRRRR,RRRRRRRRRRRRRR+RRRRRRR@RRRRZRYRRRRRRARRRRRRRRRRRRR@RRRRRRRARRRRRRRRRRRRRR5RR4RRRRRRR@RRRRR.SAutf-8179b7e22490aeec36c757a982d7d230e1330d1c1f6470066ab9f2d1143894452?7zXZ !t/]"k%~2_e#Ȅj((KytG1 @6InIv}%xOG[վ\;_9óH oEW+uܽSS>/z U5;@D"')cQ[֌_dQ&3>ʡIu~qi?^_ye&/ =@ Whַ%AR񆉝UvRʛ@o.=ʛw[;rONEr=hbYeڰ! y5(/DnD 'LݷMaYق`MŸ"Iv4CLjbfEYR!J 7ZAr }ˇ?b|# ZPZbZıL ŶSs d_q5rPN+f^@A?hKUUyj-!s0rzu ݉vͤ [5AnG/.M ^?I{xQLcT` xT W-wjGb[KKIh 󕁴!\Awy{E7)qT#b<~M .Jĕ3&JegQȮG,FI|W+E9𮾐un8~C#3NkJrckO1d45;f?<ƻJ VHTJ[t2xo,stx II !`VɸR``xm.T.sAb߹rtc@<މW -l/TODOQXup㌠59#a=/mW%' nafҬL _wD"H 'Ă2Tm-Pa~xu4(! 9,a2ñYKWP"/u(q~;j؛w\0A/!Ps+3Dm`km]Y:2ǚtnF̉2,B) SlMA`8}vRfY3n떦hW%Dk 6[?åTH[`%mgyֲ9UJR)݅H,k,|PM{L(~[GO-:3;GGdS-(5$ܦTer]KBLHZu? :ѝR]`n.o#Q>[+]Wg7 IPH6rƺ/i]2=DgÓX7Pf(=lQ:; Pj+IlK:ov-˜!#'>oda4Fluy+o帇Y9X>:,.gwKq&,E %Pjo fTTB}˟3ۑ0~Qn5lRT`U6N&$7Y\)5<.9I{ Әzzsf09  r G-zJp+7Eydz''/NcmOY&qXNH}K1Oض& I"ɷw;S/ M2 7x5EYFV0[Ym&T3$EW~EY$h^ѐquh (S)̼j8KW_`p(ٴY nQHݼ,E !$VG)&h:yZn4ϑ^oOԚ29*Rt?a[m3~⬞ H@9 ^KmҎk1ft'{&81dXF "%xΌ/3<8/͚1wN (HK$ǷMi;K7,!jjX($id6XG^8m{e0v kɅ@l=t @Lv8׹mu*DU, c`'šbI615l'hu_J]]3A'vB2tˣΒ'14'^3;M6|:!467  ˚;f˓\P7堼BJ m@(NӨa >D5"GnZ45-rئ!FfjKvg'3u4iH^]\UڞiS3 PPc<4f#ND;?}'1pE{PkbMz20kWb6X2?+z;zv.-jᓟEp&@3=j!ڿmF& !Ǔ+QE]nY+ \"FŠC n$4PjIB7܋hV|C;bifo͕ؗ-}iɰrjfc#p嗿}^ճ`tV,s[ɷ~$?m-9&%=㒰-G67WͺS1L4375z t`O()|wm @h,&+ܰ.`Ce\͈FI5~,&$W  )I_^,aH٦6>1Gٮ G=׫i&*GG CrzkZoxӳ9̂$q(~)6L 봵գ FQY\ !t$@HiUr<I  KHtɢ-b!~-923YY("մ>X,$k筓/5(39t}L #Lfv1VAhhac #MnF [8d-T8)A3CS+Q]$S*/j>wH^lI.# Iدwa4́ Ԝ}Ts')ocQt&Eu0@ZEMg%W.6ZP[t:Tt]GUKXS*LѸ@gi*vUn,޼U؛-)ױPK7O#~;õF^Ε{hn<=|mf*Ӗ"O:Ϩ(Ti7(x :O T8^\!)8:TBR̀cޛ72(Iݽ2Տ(>p1ˮ-QzVV or5jpz߇6!YraGZFK4]j_K(}ugH79#qw߀,7#+O WnRP ubN%ç١(O47S4bh7c?x_vjT}ztTYWcNQàگۀw/Y<3b3탿oHb $_m'CwKA."Gގ",+C#o²V"-b@;^3fHrN ʛuluBt[Pj.c;B"'8huXiw0Kۗ5pPC?FR`WQ*qC/3;C"7|Co_B$Nț |ā/J6+kdR!vzw"Zu+8Pb[1?t2m?n#%8+"aS~"LB@wU4:1u^masNohBU [[6'H| Zu"Vn_T}Inb7M<ÕDbrUY]?no['`<;6^ :zYp-z3 a\g#_vQƩF>$ai8'NOMG:ng}N(kL`o9r[=@S-~ 3|m@?LoJɠ&DpF(4mY:[=r9f~z87 "bI#0uǒh00xŖK)}Ua( 3T LlePu~l4Jgp!H yE`>č*^Ǐ~hr(fWfRFqrx %X8`_f ~?@~eWxt(pc}?r8<Ý.Жt%LQ"yH 9d}WИ sKӗcz/^^rG+M|@;wŌOx\a}j/W1BغSRs.0˲70WjZVq$f`8+~ 4 {RA%ӎX o,Jg To ed8-uՋn޻G{fh(`W]&wx%=ѬK T}삚 kj=I6>[v W P,x(aޡϦ,c7Cn@I b4q&vaPO.X= v ZOpO![6]9B׷:{AB^M-}oV]W̭4@;L&g#u9Fp7Byr+ tc}rZѐx1N~{/5{gt#_%*?9py:e(qIO?I1oNuyNrzBà 揣MsƱ 7@g7 ixȖ*,{񛈠]41Fo1{k|Rm(; l d|/?.rTC TwDb{ -7{L{ n~\(3ZOφ݀S%C`F$n`[/,֭g003ؑwc:PqjQCj 6&JJ m- 󆆯X|*(p.Kzňw'.ۻqKҢ` ?+rvbϷ9hvOjrլ4'"224?S}Ϧ>#DLsON+Ô89Uct㍲Zgn& fsiiJb]QWthPT=?G%PC)fߩpsywcLA=Ktr2V*1(|kGݧɐeL,~5lK޺AO67f<Fzmة} fOr;IPPD$@"h4~b ." _L6@Ьd;?@{s*t,ng?ceIs>֊yY( (JV3CUuάG Î&Tq7&E0[ni;H*@*+s hiXܜz1\ ϡ c3 d NB3y| S|;[4b{`FVS4)P5ΠM5 QU]oyVKm ,vKpBs2d,W@=d{ Le; k9.#*\>67=Ymm֨mC}N7FL{W~6:iZ16Qrgtz:jt3I3Ma4-jփFsܮ]?"sCy#Xj%.ow TP8w69?әb`|L >u]pćjyr9cY%1zÆo;Hݦ X1ra~s|q>L8Qr<}P}xF TG fByY[o?yV?+N&Z-S|)hM(~0fHh*.kNz'1F8Q~lט/6A͒s)PgS9D$]# `t!:rѤK7MWp'q~S}3KEb>D-ӻ)VGmJ-D`r?ZʭHx"xF QC%R ynnY6=v*}ӥkbxt] 2|CCOap#VSeFznF|Iz 8 / v~UVh!}@~_WP~2̭Uu z`^gvҐVq_ lXӞ~[﵏2 @Ylk}TѝE<)W8|)cOD;Wfypj}~"[3a_WM*!(ng#mC۵W#{wWG6v["bE?6k8OHJP!.˗ VFCFl&A8zcPS?9ͣOruySXQw3N CPxNG(unsO>82)ĥc?:#VQX,.3ʇ:|(Z|\miYjB]"6ܴ(4TAisLyIṖN\p:W| [Aϑ%fSf -v3ոcREúQYkh :Zm2]@-  wsI:IrR{)zd[ 6;+( Bfd=;(0R47[B{x7I%j}wn"aAQ-N&Y2<}iH]Zv uf6Z^Jc?2_M18 E%,X0}PJp=e` q_UO@Q/𤇂oUXt+P=YMUD=2(oFddQ.{)ZpӒ>Ҽ6-pX%|}3 gX|_2jL:J{arHltϓߪ1Dh3 %.xkF";RÖWZo`goq{Yk[)ȏvxOvpq6d^ MUʫ?t;xG鳬85l۾-5a1V(%gEz<˂Z~\JZdA8O&Qkb j ([F鐹Sl;W6"BӋT<,[}R=:=7% JG ͟Osp5 譲Q7N%w@?ur 4CV{j}At.tg~D>WBUzT D|`>u:弳x7nbrI+E(b_~ %C@)=劝oBH )1,$3>̧| _E\TL2^Ge0"1٪' 13W-Y|EίO 4l1iboG߄>@ԃD`M42˞uBLCp/79X_0ipe\ j~ ^YYGĎR?7voE+B9fa50::zǁm;9M! VèLYKEDB˗ |8Z׶t(/!2m9+kE vWMK6Bff I_0ku5A89n5QZ[jaQZgXYɾ1:`_TqљfQYk*T+jB2m\F1W i1G%¿TXE/C+;N6%paZpqzϻXq}IgC ? *Z፫K˓Rȧ["yىts/[-?8B/-"XnƏ3u#UE('nN'uRoBJ;pl5+ɯ7W`LIn{SƋf?☍4y>P^:i S(eI5+״sXH^>H?.!@xMc_]5&YmaG듘ݳ#HBkގEL{u]O@ǽ^FZ$L$u^j@b+Ѣ7mX.&Gf)WD);; l%k:K`Pewz"ڀ[7zL @ct.Xm=Qk GCǿ}{%u$ͻdӊ#t/*Cd'=z21zv2Qw˷x mq8k=[FhcVL(N旹Pt1Ny\YxߜbEKl aZQ @UosYWb 7_"[ˆp52F̺['$ қWN-ٹIcx>,Xy l'p@ZZ6T ּt>aM?OMb : -w5g!`.VF _ZÖTk,{+_EvJ[D0sq2xF$+bDͣ4z`d>ીd("ୁ($fB淣H,[",qNDscFg+ R$t mO"CS R.]ц1Mڎ4 R0پa$kQQ,a435䶴O#/gb0jy0娓٪ ƅӹړbbe{F]&"d%9bI"6]_I[ԡaL7#y6IHz@d*ZJ3-9ȝ6yמ\[ &Z Y07LC15n m\qi€ Ҍ"t{[MaPyM/2T]Ac_T]~Up5&{Yar XA'"Sool[J8  dl(F:t`Kُ/{XFs^P2mv[rtP2@֩3oŜJ;N<-`ҡKO }o>\E/]{ܱț KR*}D"K' ڮ6eP\n.>W&zgc;2fVnѻj&u8 ,/O8_ %X x n`gCC\@)Ug J"D8*yLq9;xɐ9 CǦj?AHcuUu4inF߾2ѻ< :J@3 o Ms0L[3^=6Ujc' *$&l,WxͿ'x"'fpq`ڸ‘tO e&aG^E')D]H| {1cJɐ3nЖ$8 X!89e3ȷȆnvȽ Ģ+)UO+(O% kJuލlȶj |/Jy.,hL9f̥D(˞'ǛސGMBYjK+ICgh f\9EV&j i@&1ї"l럔۱E TM'(Eh~I};F:ΟA<=Ŷ!ZG˹pPp:k=@ȧ0@ftXQ66wkܿ,h6Uqn: YdWG֘42$f*˿q2]:@4M{L2OjGPӅ˯8oT_YZIS`n?,qVZ3se /%K&j"*o lqiqTJ }vH wjdE/̓z 59j-^MlLsj.e}+ëoNўhKxʀpÎ01mB+qn.쿠37ҷxxDRd / ®>z20`?AKED%pne}_(dn ۼK b~zDAX4߾vY19AhBb8R eK! e}.%u]nަ6Kw\_;R\곿 IFo{ a;ji!IW5-)ڞӝF0YφƦz$o]rIKs"ckD4,DmHYе~{X T8hQ@?9hΨs*ɮ5ZPaLؓqYPzJ-|f+._.̌tI .Ǹ2y*+%/x[ hC8· NN4wf-z<.EA—n~kfQ[tM e\D?T#o"!~0\Y8& D|3;Y DŽf^ry(MuK!!s$l6^!Iίz0ϘܵU$|} 9ssWpaµז/uB]i%~%hp*$U#aj6=qwލ0OpG nnܣf@ZPԒG)ET+h!S\{WЋf6L]U^j4!El̠=y嘗 U8a>Q[[NKŅ@_.,Fzd1#Yvk2j9vR鉺3*D̖`fI lv+[-ECQ8m ƽ $'qIд):m /p*بIUy㱨0#~PpӶ eے׳xk(v##xg8Q3%vfAK.z6UNeR`{bc-9+F9j~ b}ZhUS%4dDB,2QŬf0U=}U/$ 7uuɧ몠\JP-`jnb>qϬqZIfigTpJfk[OM2[Ȯ$pi z8R&$Rj|-xB+9lG3<-^X;v 8f?,JzrgDS%Ů<,mt(gkRZE>5L봁ZS(n6\+.2> WN7L&pS:S|H#"u)5Pq9:" Pu Hn"A'` ?5Y³83UMt)gDc~5|,@*>(S/Eqڅ8#8Yqsãj3yC&P֌QAdZR #TQ!u?K4\޽yjIVϸVZSKԞku;"9+ ; h4Wcc_ŭީ`W{\RPm 'G' Ty}P~#"h1YHC 糨[շ&.ðp0n1]0:͎aQt1~+8EGGsg}…!:r"p $NjШ@³')PkeK!f uV1QLw*~~nhY K@fQCQ FB0R%]?68__cBA/9u->Z[(]3ngx?yLDܨ&X+UA#[r&!6',a0J_k R@ҘDف5H`rYV28YUX)Gx]ot7X~$^(qN 3FSL zNRuH)!moXNʉzh?FJ䎁~%C)#fs$bsГX+\C+ɵbDmz)'|^䥹jkM:zsie=VL ɘ?o8,͆]3`D߱^;ģc<98tޯ\O }/9I2,ܖڠLچ#g"8j~'۔[vBd[8H%e+4fgPaBEI',^WEuM|e-:hB# ]x*@7҈T~am-WD"c.x`s0 C9W^5l d HZ \: 2*)\f ;| ӀTuN%30I/#6EGRྲྀ^u}04BFQ1R#X펳*rma`7aO["PPNh~S3'>?L5L^ˍEQ(n|S$J:E I@'Wњ~SSUq-U_bz8撳Ps}S]u[y{G ;͒樢Vՠř rř-=j+V$ΛL!5 QuNw-JSAUF-&|B3e!|bX_~YJdafSP9:"ź|WعS{h3=֐/X #OLveTU F$tXPFݒBoS,`e -5}DEtNH&ɮKDuSĕ!+ 7 $K;gSxSE ,L>r{/>A{kKsKGQ1DeVt휊|J}Mk7؆k>:NT\Ewيr54=6W9HrQvF>'p0YʌrQ.0^L.LT4LKWrtdK\ri7UƽzDo@$˓b")jG~ ]J~1(?z߳"iA q!F~ґP19{J"zݡ]yC̦/Rܺ#tMEջ0%lB--20S3I#u [L(yp~4`nwx6:>r]٥E0'$>E-5d4!(tm,*"Bb5oMWm`(x'ŋ=ԛKnX>@zEhm/WnHڢQX w1yS]ZOue`;jO?uI/5OgD}I=aէ|yýxKX㚇YOټ"!AOGM|^b}}P^_=צ|eQA3:)JRū-C%2zDpV9i"dKc^s[iaI@|6OX|XGɵ  [$I͗+!#s΃P&7*Liy}<PlHh Z]Xy9 N =*L," Qᰐ "ZvE>};U߉2rpv˺^`4,U˵5QPְr'{T%Ts'WO";Eht܇]EMd53)x%1QFχ%/SzFޣmp}^4|# oɴ!VktP~u(3cn2V˷N~Ճt!VNaC4 c^.2dèҞ [kxl Ӝ刹d4cL:%T+MNyO(H3G?j(z񗀉\~+dF,N2?5C/UcNl#"v` E}W@A#6~YG6'pEKCڸׁre9EP-P&< 6.0#LMh_ag+Ga- gW/pv?hO>'2y}9EUG8gm&#PwsE-!OY݌k<^FŋdtjQO[:[b!,(#nzatYQ)(L Q7ȬO2$=t,33"FF2NPI?0@^2Ԟu]WǁsƁxN nגAhYK-ޑQp$9?[1xv~ %+jj$F:Ϊv!@X}ȣx u% ׂp`~Ar~QN6-`~-f9Ec*+ \63!$sXame( )mF X:Z3WiBBU`1;nSɧmӈ$FX$g|iݲ@g)~˔ l:@D[_jNXLfĵykc{6#>$tW[Qm bu`<$zAȅJL ^̺Dl[򧀿U!Si/ogju%?EnGx4' G8n?bGY p]h>[iUMsA 4lM psb$֢jZ}DbZEa> ʧ?5`ՋM/$utQf͗iWya).&0.rQCqOpWE1ȼV4\I,;!'1eHQxtQqDzp"PG׾ܧ;~>Rwp[+A,ԡn7DAp~o@xBNEX9R"X9N3'"8ed:-OD7>/,?iweMMcC#L$Sn!+A?6GɢJKlx8EWcy\?ϖ*9Oҗlmn6kAhG)=D˺4;;H>aa  Z𐆅]ykVtԴ3[R$(Rː=60 9̈+(7|_U͐l 9Wv\۔/W֛wU"ᴻko0a!0+p=Wf:3n_ͱ4.QކPQJ$f;Vd Mfgiݖ:tVmdk QUNe96FlGm1E{h>[c&=:% ʠ0qnPtY)(aXSpҜ{' ܦz} :ejpbo2+xI ~:p?Y͑ -\v`r/_ۯ *hߖ)ٟچ$nm! l9ͤ,iՈd '%*31-~_+Vtj1gU 7^U/)%ߌ={ vR{T(ҵ |ơGdy0zv[TJ{>P< c/sb$э߇Ρ;M8 DLf}G yo>!/F}9]{(L2fvDT3P|pTqjvQB(EDKE;k9JofF[M֪ ovwzw_;1v (,1ڋ/>ZJ#Ð =KxfΙTbwiq GYFP1ąiy9Ԗ06hBQNWMH+A%HqI4@& Az!F8Ţ~O܌ms nWI|}iMD3YRItyw`Ld;r 'cxʼnr8YSR[`@΁ܐt?a%E_(&l;q! rx(rN5 Wphws|#޲A&tKZ!*De nHQԼ[#%k_6:ah`+o; Tԥ-堿'n: +):"ZK͜94Myp#G/K#vy+7STLZmx";~ڋo> ٷU4wsq otuPUC/ ;1} 2yb؊P "? !`;mlqGEDU`q+|VbȄR#a[8{/2,hIS<1qs Y&qukۮ^q 4>T΅2\,o\Anpۂ58澉%N`G!Lac:V4/Qe!N;( о%SԪhHچ@aghpbq:N(V$5~AOUWB`cOrInh߾qmqHZ[2̑$^^ >ITL$w~F7 j(,=қ ̅x%= $㾠VxіLzpfc%{Nkp7>,&y*Ʌ4(y'U/Wy>ڬ--% ܟºϭ:$8!\y=D7 dP|2i"̮^Ύuo+PXuf&[""nѺP4|[Je0_ӷ˜\XLb~-m83gL0BOOLݝ*MV-ZJ W=t]8Wc^0 f)\}j<f{DuBZ!Y~} ;D:NU*LrCX,)MBVQ^cl x')iVtH|B8\2ސ#`(m{k??s?f4fOty1'PJHH92$vҷf CC:fq*SYk''Ͷ&2ԩ e?\Igy̞<$HS% |-%4k,!B@&veib ~W74F/'@f_~w$_[02GQFiAv\OQ =m xz^i&rZ >ȍ"RL?q\rPY6$"&~*_OE TIΞLa2ROF7M-ϳe:Hm<Q: Cv,ܬSPS J̚ ieB$F-% +Ȋ;&#۲xҺ='qP;=i4j/HS5MeR(FGMnHb@kHM'}(TIڰB [9 +Qk]{φok2zRlJY4xH}O0]:3fG m|ۢ.0F3U 95jw^sQ89 ͼuϪG'"O;z?qw\<@}yYaޙ``Z] yһ><BLc "T$\qi,K?p nin {ti QrG䴝>-xTEo3GGh}8_<<2@%Rxx ?nwN,q9o&Z$JJI++R W:ѢiG΍x\bW>WS!h"fOMRV V.?)68R|!ܳ#mI@5N#/jMÄbCSǣugD3نT,|%փVSjWw(;dp_ CU ]@!+'2T*p&;koleA=bNH}b1ArTl=b?y): 3LY13j &VoMGWR/VyVL@n/_-q_D'@l7k}]j$ඨ(r;Vj WM6Bجpj٣ ǺQTdņW[ȼtv [^o8ʜb' gImB EڦXr&HzFEYJD1<9_-S­C$tIqU{p>2?43.gfG@}/6HAUZs_OdT}G'bGс߸xVELVhiRN0/>%qbm.ZN{!J$4+焃}|N >pKS}#fEܕ^Y)D`M*Q_dH84007]]O.5rDDEK][J^P!c\{.Ey^8g^1:3D~8KF>>p}vb5k;s{,_4{1mhL-m&;'sBO&0uVg@= ߴ/PW7G'CK,`}tk6UK|6'Rr9~] !^\ "]ۦo8=sFMBBAMgo!ЉJ٠쮭=j~"};fڠSZΫ/S~!&rQ^ 3GUxUmLmlgz6 KAE.vBFpyG*@.w_~r@^Jano@ F/| :lnFn-Uۙ͛w4l>q%PR)"TիcE_U@&zz|ÙSGnS8h~)y]5m([BrtqWvsfƀ>34ch]UVyJ*Qxk:RpW?WXcMѠY[!0+*Bo/1}1DaY\mI\bb%˯jQ&`weh;ڕa N.{!J}ypD4׊їH]gĪ c0 RFOxN7Z1PVS"J 2SJ.~neKͻv\ix*5KǭϷ&tԮ]5ژ S[ nտ99e\&,bSgx_L5yzIa =I1+. Q& ΄ 8GVwp_Ѿ8$felE+Op*(v `;q4|;64&l:.?s?U.Us[cNtkC?$id >lpN0}E!IdԼihT8#I0 %0f=8[QܙN؂>p/ؤC{mGgEݦF)#B'w5r|VsB+eoId 㞚eIajܕA}0/Z))fcrzXTtҋl:u?8rr AK5ӿ6xW^GEb 5X:@FZ2c> z:S8PMPqpۗJmOc^IMK+|ʛ ڤ~R/o c%2F*|P@+{`_&x燀z"9NUª!K<0f4YA#-vIṢ́&kq_L42 Xw?t/0d|o4L&Ty˰9쑿s9+cvim%6Ҽ70.[6'Ã?NtM[efn檺?ˉzѤF*tsNb?oOءdllOa~Kk̍~2 pɾgs%]ǪkRGR~δ>O.$<^e% oH=C@X1<q.&~@=*OAJ>*V*|d*|+MR%v8Z}њ"-}[ <(>ZnNvYPƴW)E2/7 6n?gR6" "_U_<ATP AݡA ɐ<2Km,k^1jLv,1&dGul+N=҅f6h;# KmdGoY͜2r7=N9MKߏ/LLN=A4|`|++g WL@\_ C3Ze'CՀs&R(']64t/Hqi\FԮ88[g:GGO"^)e1 Rn{0ȕb߱!G5ʟECDO"V:@EN!_[Ul^ޝݟ#FmpFw6N!2 _uk/W'Q^a8ivY>[j3 |[*Ror TnFgv վ5嫹F \q]<̉䮿Kfel.<ٓVjBWsAQܟzyKf>f}cJX#'o }#:yj|:|Q'S@͌D@ ˜60+@Cgps1f6b~7! Q? p1n3S]ՃBVSGZҼ'ZqU4Db;[( `ɏZx\mk?yPp?VcHDܩz%u6dE/קāI3&v=&j^J=%'Ǫ:z jhpw/ᚱ+*Q1-|X,tQn;X * - v7+ՕA٨U|W6dIdhsWm<(.(NbԹS:n(T !-1F율EuC ВrɗL 'jr;,տaT0ԻKh@ˮgÆ6kx<dL`~8c[Qs zzx &K*>\2ZO 6]Q 싻 h靜1[9&ԶzYq^m&b/%n:*dk&#ȫGWZS2tTTW߁l0#ڪNs F"ϔ:yߴE2u)R]h5h|Cf蚗Q~!Y+!HJ&V& ۑLCEkcx[6"M%+2e'sζǷtL!p~`# !Zԇ퍞8g8ZYD|"pT(Gj2TLf6=ٳ#_~dPrei`4腏GXP0 o9cS"p=~tΧ4iYO{ !\d(v֤Uc6H :P-g'ʓbXkwP u#Q=cV,'ʟtze@=ښJ.U"@EH *5($nvU *ǜzfMO)`{(;xFtԥ'Hjt-S|l{V( nޥVIQg$: q!&/۠9z4АѶ$it?^_mO%+hTN]/NyH,_3K]ǵzb6 Q95=8U! cž戜qcvn1ihOdYl0;)-bcߢ`u&YWL.]t->h@Й̋6k6g)fZVdKwρ9q̓[c?˾`N-?ENαpp6]{p}yzy(}ڝL{@끵 ?Z-ʥ.dZ%i="J _nYZK!-?: Fiەԟ \>T &riQ\e'8"(x ZeȀU1V=m:@s>/%'x2 Y`vq5kvH:ʌgj/oGH Oҵސ0 !VO`85]~ݼdPL**ax IF@]RJTy: 8 @ "qO[Lw-N@N=VCe:%̀QĆo! Y.8{IUg*g([Z,eWф~$iyպg="WIO?㙹Mgv=1EGx1[-c~pjeY\WOӂꆫHq:Ӽ+T3l pɰLTj;,PHbYWrm#`LVRS+uwSWHwdCJ`2 '?(V QCojBxF']J:dkG8Gj䊪~!iez|Ȥ+Z=R@Q{ Uz6zU %r؉9v}l׵w>7|>CRߖ9>{o¶ $x^WDNC@7TQv`BqBV0 9DRrɄVªi0gjBc}TVrqÍS@r taBVx1ӂEb]N;Fȧ{2CN>f9 kؒ o?3?ѝo7t,ݹ,WmpA5KbՁp-Le1A$þE `(BJ|}LiH>3y;S;9e@vpo Sp+y־vicrldAܙgڄ0%<3CCX+Hu G"9JG\wcL!Dv0M|uB3[xQo2ˀ|SSSJJڽy5h @HuN[$cr8x7I7l;F2.a% E,ꊙ&g[~{kQBФW&ߜp̓ݡ$Yjvt9sҦLh|=R[XS9g¢g"LkSnmD.Wjv%c tKQ{o̵0tT|K/7!DC`XU[~- -H)^l=ߋV䟾yC|xR"fUvOd3FBCE Eze$m:QTx0*[I)1s{-!o)mJ. qRr%R+.'vQ,"N&Pabuz$Z.u^75aT7[)Ξj6ιSW\m)i\IyГ:xS½vpN'q eF:bN(%}ڢmYA紐iںOXPg-Aڙ!?oebݚ sK@-KEIR){]$|vD#uY"e8E{[8-uƍUj:V/2rP)& 2ҥRSzݙuEnnc%,6(GJX5L% <dc& 36tDɥ  \sTlؐTA%첚b:Cv(v9 /-hvqFNrrD&&kf_yIA?O]%=K}1>l^VyqǺe(!za|9 _ڄ6# K$sȓB$/}SxM[9َm[*1хW]D MF9w&-HgvO><8;ASҎx 6d0KmٽF9e ,xԞ6F8JKG#GrZ8YOFRukءln%X[3?eu8- FFԪr?`>vo٥bѵ\iJ/JtR&>ҹce14Ka|Xvlۋ'h$;וiݘЫb[03"֊qo<74<$C:=kɅ }ౚҾbNza8WʐۖrHo4&#^qK|;2+xoz"ϱQ&T OZFo$ޘ?g$\p;V2;R>"@0Lcff5{b:z3v@-i^ӻtIRlblx.ypqCxjzzHMAv7U Gy]< 3kqj;κ i;nwlY%Tluh BlN+UM_)5~n." ' ޘR[d!,8!~=E(ߕ⟺="ҍ;+a&`cPv`+؇ip菠YCZ J G0Do?Ya4l=t~h'-aꈚYE930R`!AĕhB@1=MTF\5pQ6tY0T(qڕͺD+=&4 nVRN(VZʪまOǤ̃$)$ow_٪O2nʙ3+-i#甔  < j!t(l=ЅĢ!61/co𻬵'"4v[T4< 3MkޗYj}ºMRbo:éJo֚Y~_a@( GӺFIgW٩iG-fS*kן۾^8r:oUbC p*vŽZ7vY3mXƔmë1 a!Q֓F{pNI b_BTϨ>NՖw"^t0x2OfQBSڈ^Ɲ3}~{"kAn]6 !C{ﭦe8?*}@U+5n "S(][䄥Džˠl~NPKD~̀SQpQx(PyaR \y=ǜC=*)DD!2#BS"ML`U7"%( s>ʋ-Pu7,n $ʩŽYi_;P}"9L&3ܛXb_ ԠL\ygO4ǝ \2,U bRm!@~[9ے.&;v}^&ˤga`tF??&OR9jnU(^[-^pR-$el|6OyٷZA;6] pn=bK&aֆ|ր@kVKӱg& A|HvCiaY cIeVn³='%&Ȅ=Ek;0\lP; wmKotDB^0D:Ah Af`}< 8ˁ 67m%e1FSӪ y7zfLk""`\Aiv CCtkhp#(9ܩ?O;pГ 5c\ T|G4{(g\w-DxNV㌛=J>>RI{&\*>.oFb^l>O,ZϘa[e 1t1!Ѣt:w?kp@f zB1O$_eq4"FVcER;Wʠe9[*iڋPл7[,~=KS@,R}S%\V!c(ݖ=JI٪jّfTc_ 2M1v'tXΫzTa.* TQa^ާ}6GѠ[@_p,qpj\SjBdd>ڡZDcJb2WpPp޿  kRaJ8%R± )OnʷSwfAF 顸Dra2(T" ?c }ky$L$j@o-om%O@KApԐ8s+Ǐ2S˸m-a: -{9`8;Vv3Ait@̽$Dx,ϕvH[KL?AI;z>MG=jPU z]C7ԎBh3(`1A& 3K{Vhm/\oq:%խ}l(!kE@]~p CӴpǐXFu'.Zao GsXVk!Jn HF5ɤ<]S%0͉0:SZx|QjHQ%oM}G#딨,%uXD#4#$-eٔ+I[ai_5>o󲐺kg'ڣcMVt@ԳDqMTƉy!iq4@ĕMW>t]6syM{f>u KF[)0老FPoLUZ~FSj3 mV)֤D8lsd$Tv?f5qi̫Dg㎭q3󌏠W7rS~BWo%vҀ"6Rc˪ {۲i^.r`@Oi2 $ #g\g 3&-opilo[)|'$c#U[;$2ZyZqDH!o O좔*X% Wx9?tes `Dm.Ouxƾv\Cm]t8ޖ304\ַNZ=Tuq 9vwLv\4"wlk&>ٓ [F!X2& a27"oCrFTw . k&ʱcW& 0Xt&G%.)'eNH6U;~ svT2`Cͣ8 0]rP݂w!+(WG"(K^, $&kx^ȝa+-eW}۷m) چ$xX`/zDn7O8woyJqt: l֨I+Kle*ĐM6no\3¹:x2Liےϗ"Wոvj^__kTQ+*ٌ`:R1Aľa5-Td,wfbԃdQ:-QRqrtBHz9G1}3!x8M̧uNz$3U!ge{Cޛ%]=VI!_miuGĢ.baӴ] 3zR+hOs^m Ti<&DsWHgʞ[:d֩E0‹st[ހUèU~[P]Zz4^mrX4cFkB^A %/%#ũz@~b9_.1C5LƸ[r# q @&Nr¡nFKLfܿwYDSG1M#=ZUqنp(-x&7k4["Ƿ[ۅ`z|mN Ͳ8ۓMҢډ: L H*˞,=K "x1syt$D􄰐@tc /~U Т)U{5c^L`xnPP؜*Dr3AfvSȗ1m<)ΥOy*xR"D)&?b_g 8X5z2bOG_儔`lķ};Ii5}/đH5(r7 gtEMōz?[ p2G)UKViyCC6@7ZNpGEɦk[CXW}NNNig܎)bzك#}~o9Sjo cQ,w fɃ}q2*9]aKObomcRڂb>%@'G}*T{%!>2PU!05xHcGz"CNa\#**UIA?ӑ9kw8;K[jcl۽x*_ 4 6MA f)_D8nPA9g <+R3k{FNus%)qsύ ;ڳ-PJ_|oz)B^D!qoJEvj7i2u|(areE n%x46$:r..?#>[=ĤwP{T LRHt"g/ey K ALjɿkHڬyH%¶ 8FH%i[EVB6%uC'8XQrՋExU@`Tx:W6;\ʫot[nr`vC2M5B@pn$h SdI[ZD&O}?BR{VYPf.7PRVv}l6yQ0젶ט4!LnMfrol ;Vb=2=K %OL`f A0e?3Q:^$Hͼ!p fp.n¥s0YȊz{+Wjt!ՙ\9}"4qOE hPO #BOrI'GN꾎'B vY(=`шH:|9?iГN^,ЮOŠ(z jjzpkuqu3XjhУwnB v2ӓ;=`c8Ȋ s'4<yS.Q B^T#d'&QwGe5}En9/.9k- ,E;vَ@Ј}&W@Y ؑ>*\ J噗ZQ?n1_zyU ԤխMחte+WЯ*w9^<8,X/ ug#^*+z'>Nkki5"x-(o \l6/l"e+U2d X ̠nPh9əH:iT3ė3P xo76u. rQ+±_.WSF^Úf<#陋«g)=")Fe C}CJOAh+Q࠮8Jg4$Lq㏳)C}?ZKInR$FDVbeۧL[l Sܾuy|ܧ>9S7`hKKCV7ڽYP#` qlk2zR=0ى?j`v9wo#"lu2Z ;$ YV6ׅ<I͠J"~b:"ϠfjI3xB(9)V7onw G OzotVhKykie#>#b/rC-WMgt䖥z R9Qp!Q>bA,)6F",< i AFcnm>'hqB'RT6zyMbbu@$tγ$.힎XF:X}?",;2F. !e vMdWs[={|6YKCCi"‚\IEAca %2r 9[ ̩ԩ.!cTn"t)Gӥ|63ɻY'"TT- =6e@Ho]1vF[cRfiv1gG"L{N&h `h,ZѫE]ʍb"21J JBg*FO_QIɐ\OzSvdd eEW}]Hz\o, g()aj'h>S=@LXv6.m*V&|c%Np4z 6- 7Z Q^G<(T!HW s7՘!C짨Yg  !U':oꂡ}ϻݽr osTfvNĩh SEFdwdw%1͘AHs[Vw8!3q0m_ [)Umʞ=(ڭGFwxDt0]Z! "// xh$jf~Skp_s)+xa2CJ ?{`3rHH R-}Wb0kͬɸh:ʇJ'[/jRy_}yWYbS%l8Q"+cR`n2%pH faN>]PܔI_8MKIwⴥ7^QSizEu8j3rzֿ3S/sQE0K' '$p̞5ou$ܽʔ ߶ֵ ⨟O(q&X>xX'yiV{4l a4m۱AUs'T*5-fL9N9Z>wG="Udxyq.5ʒgȺɗ~ ʣ  {c?OOg/Ο~J Kf=8hg"$bSll ~KdE(n1C硔ުHVqkmWC+jJ3Nxw.)XlSA^#n4m_ >,)|֏[nJ[cyO3!5^S+w̞cwGp:a9JӴ9suԲrM':ZԤY g=}mu ?B*@pyqZjq8hd l "ga}-G#b{юc4CҰWs{̟ A9}5m@vVpQhuJ S36֥[ JgI[EK:NuJf*R ^ 3-R"q7VVֲ T|b=},PSIa%Vq7ɰ\;R=V61##!JbDf AiA-H5rou\)hXcM(LpkWe;S: 16TS;ދ*D."m̕&K%Mm,}cF0[(W\5+ڭx5ii> U񗺾y;+C8kZyae(!  n'$sj38>NXVPɱỷ:b|nJP2!تp[9 @n&4.4 |/ܻM37(M"d@'>cJSA=4.q%ϩCdFr+#zt6׀^ncο5ޠntx76F$}1/hl[iXڿc@Rϵg܏iy]@S՟]o){L_H80e\f|tނx iH:<wdwvíN46ʹ3dg݅3!^Ð-Gzq'Sbp7)[& F>hC<ҹHRb6Z%T`g/ isg߅Hb"^0ϡPvQy E =◓P8IquE˷|]ۘj!nϨ4e2 Ijij̶nJkAhb^]?vkZPPn~[#=q 1;MY jXpU7PxLrܜk!?̣T%Wro-ݲaw~ jc( ~۞gtAR/wu=`d ^"$WeEcLg(` MJg^94$,V9uu$;/1U -:3\I;S=*\ʠQ9a^JYkm9="MنQ!*|XMHs0 sGmI9quJؚ+.֯F\ؖ?y~_`9QcS5龾-%y9ޜoG]>@* @.^nTň}hvֲE:&V~KMo:)^Owxy5Ȑy-nrTd:cJ˒9ʘ9.Akp%Cwq?fi=3dansNpP縝s`?snI8˼KDQX,|:NC]ft^1GD~ȸ^yk3m+|[c\7.x/C,p9z &91){+9j{Am&k򄱦שsQ;z8<XIiߘUΌGMh(syZs6P/prgvJXcxlªbsPwo<{uPZbL2vC1sZ?WQ匢d7OdY#'F2:0P*=C>OX-z+w `F1)wRC(84n f\pQi"< Cl(UL.ρ9Aߺ/ubb40?qZx(p4*TV{kQ$Ar7Z̐JH3e)N^.zۓLǣp >%wwWp{"u~xqI9"Ly3$r0ţ hKLy "k( 肋u5fxgXG-)@?ɥ{EODC!Azߍwsu\զQ3)p+׎ pYιJӰvR2*b*Ė͒40=L2NB8Fi1.U( 0 =k}PH"l[hUSy^9BKFb'M.rݱ$:4i|Mڼ3ДW؎i>ʆw+ e0kX3m)MuW\8ޖUm7C}ilM2*oX}s{ɄVXpzPp6e\Yhٻջ |q8oAb5ԝ(XfAKkDqWyg^~zJ];mzȗ_2Y#<9GJSJ @\%D/Y͡WTMXn+}ΰXaښ wcGblQrLp>LW9w6ϵ0nU{Ltqj;f=<5ZYЭ'(u Kw7̀j[NRH˭ZSYuUIblLz6IP@Րs"cv- >!:zD,y.: L\Sp/ n6\7EVQʇ,bY>![(ӅP hDl\}C.KgVlY 5CŸҕcDl9]7!ǬtuhCNli!5Й}BF#hd=*"NZ"rw1y=у"ܣ% ZEtB! 'ֺ棄nuߪn M4@rTg6sAolw`0,a"H2x8cJaqJNHuDU] |̒'߂* YjꩽAxxde$*;•ufZAGZg8 'Jls%VV'V+Zv̽YgaؕAljFsof-UH "Ⱦd 1j11fLv~pZrlhmνz<%'dҤq"-@M@p$DJÃʽa9}C=V$ anQXqW V11jd}+,>l+GPE{RsLm3ﰳ"@{rMrj䡱p ެ)h?aZUb(7u ;;C{9Q3{&_ SPp|xmx,Y`+8s}TO}hEҧ O,xqQDTXjUVi0`TԀ!W=t1ϙ`~w3o_#Pܰ;79$Npl<`6- SLqtZB'n{;;h@A%elD &F-S*=JR{_NwI(I-dS+eMp~Uo=;T;rV~أ"t(H;~ZCJWBDWAU8_$+c3߁{r/iWd 1l>[dUf%lAP~:PENێ<&7Eڗ2[}u}eS~bskeZ\WSAFlA3ZZI{(p1lEF@V%Bo3 %O?%;5Y Z;ܳ1bIxw!>}0vdnbξ׃;p{9uD?x~\k x@55qVR)՛4)+%^Z 7׶)y(po' 4݊:9spXfȏ'q6QU=ďO`1Y_YclRη{1V"M|*$Ɖ*kmlYg[P. zŒ~ڪilΰϼ,nIKэ6zE#}!&~SȘuij?\۩#+Swrb.:xZqУSQr<ٸ0SZ.в1z6RxNJX;|.7DZ-=>T4WNԗb]ؔ@ɛFfqRY)9_.TVizCowfVds&mHo=!=(>3-S`0dVB#5*]eb&n)3 [c9tj,h܃'Kop0*o˹uJöٻ?]vڌ#*hz@}lr-UN*D ŸUS|hD~,5| '*Yfk `5ZLogM:~x%Ēy[4=- c{Vb1V$%uG䦒9D(I}^brگtS2'cs/>/RV!osZɂ>m[w|I5bfK"2+Nep:"ɹ^Q3X"l#9 e&~ \?-X/6t~agg%!@,`.#z!GQd2!V?ɿgtZHb~jb |H*I3/ wSԠK|M6pY_~XYHV4Iljڻ?{yo &Yp&czezoQM FxGBnx$xL{ZlIU^ :HS'}'+4 f;O!BbW"6,DWvb&J+̓[O-5ɔB7Q+ 3J; 6m٘Ο r0˩NtEC|)PiXj@@BüsY0]~=Cd4P/|_ud{qG!W;:Aqzz^IA`̅S+;ODDx2hK_WgZ,xi| Ѭ$\5R:A|A=Z ƻSY\O(/ R_?j)tf B*ͥ~mW}?/$6]wWcq5I$FI"qDa{d YțV*T.LpԐB\aVes#k}@{=79NfbjNM+?s,_s8?u& M9`V5:C8w8vvnh$@RBnȂN:19 TA(@ !6pkp餀$q5Z!]$QY 3#%_ X'VG9;qz̥n(,Y.r{(S gӍ׍"3B%_ݟ(*C}PъBEY>~bu G;TvKZ9kptk;T6j禍dj& '{>9sC*rYLV!mSN2& ẙ҅d w5d}|@mފ&`8MɄ "$ZE3NleJ^ mۥ3W0mqteMI7pD~5{ 2caSLt1&Zy2,KvȤS8;~6o*m&_'`Nb:d#Z*^$lѵ,u{1\Mx"J1j#qXe(2 "0i]]ćRЄVXzm)X U;؊,щ$1KīaTBW=cK##[\$ Qzq z7ۂɵlr=EZ;,RD`IwICȐ=g{եx-1%|eA_ LI%_v80d#=a TIRL)ÌK~JmTXwaj2V ho@Li4i55=""AOey]Y |gﳓ|]N-z NX1)⎪~lo+$7Z˳Y[͕_:.`TIkK]x4O"a15]{7Σٳ jQ|"GD{wˢW%2(ewTd4dzV@X*_H@Fj¹7=?כ]+kY𩤊%NLY*TGܳ}/c]d%@Syޡ\Z}ϟtPt!& VV%DF n1T,J Vb H$)cR6WMb=N3.@ȁ\4)P#V}0{KӞc4xcz 2C>-'Y= I08n^?c@#i ?y@١W1 P{|#Y籿"d$^緔/fQKerC`"/ V Mۦx@k0[ĶgHr&UNZv*8Wr'6@^{03(49u㋙.g%7p!Ga"1*NS/Q=uΑI UTH13ב8UHg1]I*?B_Ć%1BJLD}&LZ,@]LLMbì <br >!wvEUd-lF00ɧA bގ#be&$ j$(VU5sR$_ȋ,""#9vIAky6V #grw d_*O;<xn]OPZ2"/y 03癧J.&hURS^j*d TwY`TAPV=g 2PM|w2')gY0?_ 5ZsbS#:g[3 YaWeP FLrw+&]4iO|vȀ`4_! QaMWD\YLe@ӥ*IŅ@Bl"Q@/H fJN!Ԓ8f?ߧ?QO_wo)c9@ U B .|GSxLTep)nu4/nB; !XB_sD)ł̨cVBg_F<1J%0d \Q!-Ֆ3D^$!)554iev۞qЖI 1*G(qhŚÓ8(LCh^!V=e" Q9{;`'cշUTY/T7bYqq_-e5:쾷+F!Bf]0}$Tpj@D'ls ` D€yPNx"f2">_ku 9G4ժh6Wd1"} K( hU!@=Z&\ ِdDKIjIBt*tQ5XIngrP9xA,HȒ w!Öhۧ1 CH\)*` ܉Cw[\ y\ >gz=>,y~N9+yknr8j * N,yN2ʵu:Cd>aj-F|+&-CGQiX,r+B,bAM7V\+N1(Tϧ6 q/./ X"@[$h':Qvh'DfhPȰ6qkG[!df@2`A_ȓ}T)fTԧBy=_o笓G?oChoEoCi -$ 0L}E %TBV!DWܷB@j4mJu2B8(YulM VgƠcns*Vi?3M@ԹŒ'yO%86|*0 Os}f1#!ug!'*i?Sñ|%a8dcPsJ,A&⚲vv4d`5!:pq~%~?&O;F5N 'u) uTŦ4<̝;ukPLć'F͆5Y^5v6-Y!|JޛyȇC!$]qc"1՛S:hM Y#$)‘4’|] zIk}RMg8Usq:۪X~Sڭ馆dE!xnfC ٦GcZ |ʺ"&APz:#QuK{:$Ү๹D'IPwf3B~ol(ЖgMΒ f?G͵߿52eKr "Qz|"cdX-4lrVeyn >z{-ہܷJN#3AҔZ.5 |}k&ŝwU갇3&x8_ F63 髼 #-[&'CIa#'X>zp]"}Ũ/LH#R;,YgnBKS#$DHe??5J2. ƇreWyK|@X?V9sI' t> .Z>T&rNd2e*V%:$]D]ˇ}_y}t͆&(VQDlHC'ѕ|wjNRw~ P* ׭JNg^'7Y.[[_f /{v}{_#=ߧ>l&5_|BS>6wq/ku_]x}_ݟڰ0 cu{\'ZvH03|3GoUae6G] 7nO q-:}kQUq\;c?++[6_/p{loŘZ3e,xJ z3Z~_Ϡnj Hdqz}-L`>EIxf%;3i7>ɆgDm DȌy"E}H+Ξ'ʴ,Tz"Oq7>~d[Mq+M>#]-s~[*U8ɟMO{[27g0|'xO*C/DZh^`܋H"bO(3Q?|'et..cXg'? E;' q874S#' Q[Yk=iB|,oz(A%z-fH1J$ RC@n'MTd%8;RT|ɹ_i&=$ѩiq 䊑AC]YϣCHsKVOvE~ag!>7|@ǾmgFGM[P7*~M2>#0t6vai,Q֜&`H(Y<Sa[$D'@rB4ݟy#y[{ߟmZ-nsnZ37a|bS 0PsQ ko I#MF[|.hoNt_TX l9JY\2AR!w4dU0eTsҭ~gK9{7?g='fcM)6@  bOk{vr]aS<~_-D3p;#3 HL i0@`@&@1)kt,dck/INQSg=W}[#@``oHzCs?S6FgW3n8tיKy}xυ?>NUuaHzoSy+vcӵu1rjuS[A$LQ +hoki8WS;w8[Ywݟ w?lrzwrVoS5U_G5s{WU?SR"}XiE[H,1P0I$@Ь$rg\GMT>VN"(r\ЪEM`EQPYUN?VEGg/w9xɾ!IFBp`c%-F0ѯ✹!?w?5e^&ɺQkĩ=C9Ki4HiQH,"m!1!9xP|X(`WSZzȮ ITFtrMO Xʹ zAsvM[%O ee޽5!7&Yp<bur΍ ^;!@cQJ r&D-d# (dJ"N+U0{yqNOjs#GoC !Q鷐V\iŧ/>-;ku^זcz--?ߏP{Txii}ϕһݶKw}wZ&_Ffp k؂1D`F0D|SOJKR/'4_  8\r|XoL⸼jj0H4pG%ecFqGHȯOυg APD{bPp TPah;[*o>'LB@ L??Eq $WgjEbzS4&QJhb deVԅ}-7\M 9z[9|ꏯ 嶚>Y_?;iU)[vx 237jaNQOmgg̣{~,d-L[W0wuױf|yUvLvO. kozO|Z n)WǻKE ljP71h2_ͧCH ҿ.&yHa6:JA\ԁSOG!=`@:j6w>bj 6 wc$IIC 6}K4a.YzjIDbOR}Kq R>uwy,)-5~?.ok]1O7e_QA~ iL, `j j?1 ^F1Bř6Pz% q-d]>:FEЉDJj`%A bzPyȾHF P2 "B1`j1@t` $FDVGþq?A!sޒH: %7i¸kꙏG{6[jzu>͗vXG4:?b>a]o!eyp{ٞ;^8{^_ƭGJֽ<+u}+դN՟o'5Sez8ZXٛu/kͮ;~e=7XM=F\q[Nf Qf52" Rҡt! !<[o?Cmy;]vL?lv|2~0dt7VO~(qE˕)s;Io@BN#;T0d ڕ܅0E6 ]R>CM3iV0=KXbQzb]Nlv]Jn]</'Ę-n9˲Qf0`]Iη}9SpKt %@*V_`mr4Xj& "0PZ 2$c$I!1@fWD2ز>i/ϥ^9|z{OD\0ם ԦVm eW*.q73lh{}NAsOS{|G:O>N 6_#{.5u>^wlf.+WӇnk<#WZ=>4W_eKsuټ>(pnm]Jj@(r@ oqF Id3y'y,ߒ⮘r$UZ!%%_'ٰtŹcSˏ+876~)u{>ͯ*#:XLf/]+ ـwpKpݽ$V^$Qޒ~xV'b\T.8^q~H"Uz7D䪦\:sw _ ':֪P;/O?+Џ񡒣OaH8Qt E}}0TfѠOQ7z/!\=/7yM:ߩ?B XM-Os S`fo,'PW/aFB]^=g+dŕk22pwPvFXZ lU78,:2C4__>s4^&w~\D]EP{4ۉ,'y9~ֽ>1=Eb=kv/AEYkw7XͅZ?;{8?/ӏ~dο_Y/kJB{zs=~ A /(EOsbs}ce"ucXxWJ6dR},T:}uo~kz!xh`D7ޮZrӾiSmKEx]5 :Rؠ?׹V Ҩnަa6g(r#| J;߾NUmCTo"Ww_gl߶t~o|O/B0>{ PR?sY\HYoO+̙2?c|\CSVfl $a :@ 8Cܽ+쪙j"-i>5-T !~$!E$_iKDD0I PG"Q(`A+9~~էo<7qX="8-mb<]}|U9.AZ~X>.g_ 1bw%U_㱂r=OWgwEzo^՚ē#C=ʄpӧ Si()kŊ}ݍ/V/ /0dr*F5$B Ɛ52@ AR1Q5c<2Q; -M骾 jr 0 =s;" |fYuq0b6\yS (x@G~9ycZ&Lccc1B)+9'z3D0hJ҂,y$ym‰">AX1x +?47Ӄ8-.kz]_ЃwnGbȒ-=t{ƈE D?f;ʤ1F0d7U݃=3̜3*64㴊^c7j KIs=9``nBbc~s7{6m>B ˹$w_zW@<&oGĔO{xFRD516  ytPLa~U?8̔}GUxi=7;ӧP[DHl˂=uQ~X.ӕ73G*BjD;&'P!99.+pf*gΆo0kJ`6,Yɩ3q)C,єB #@ @K0*6fM^cnu~ "@ Qwh k&vO{N"$BzL5x owHcfW.ǁm^eK;B=/';ȸ|99/}bm40K1HD7!`X%W)R^_|djx<a8|) = JiE"UVٙ݃Ԧ`st7r 5)\sLTGAhZ 稩|ˎY.@OL2"w A? WnӰWa"H2nW{,v |ۏvp_XX_b}aCde0K}{x.`j@esX P=Ʈ嗝\V喞' `(W"SSWºk<}9óFN@PRZh>$|rV_mTB Io6Pս5 lƜ" D2(#/@3P`lm!<04j\s>0IwسDLkrI?} ?Gw>v F pU_TUHRAyQ?$hZ( 6+q@@* >, fT¼V=x# 3 -3(BT9q;xȎw pggnuMZOyfFuGdU2 W\Gacby}:fP.WpO|ݍدC#in:oûh>>՛qpy7kڿX ;?CW8,0wJ>/ iXi&ֲm{(,jl,@-sԃ>D`Y#rty讧cUw|BIvmOX`" vG?O6WcSU/&j'z$Λ# A 5SBeip_J+1/)L:+F=#椛&uItrڢ7.,?gW4y Ϭ:֖ 0TIfwvrpEBs7@# @7Òv=|}3i~ ` {?m\ݾL~[V>F`Zi[υg` gT3SSg$HRF!<@vpR@c\}tr٩8?02e}K3,c0ξ.TGrs4[9LqxLG:tt}@ )vct`s'*8㳐8 a͑+j, ;cY<[=Idbޠ "FAcM^˗*(eV=ԯHPo!PIQȊ6L&NDTZl^zNba81Jl-VA_ީY!E ADͳ\]W[\WLײm$datѢɠnB.^BYb }% rp1Vs[wӀi7O'0Lϻơ N2Iá!6CN#5J@Y1"Yt[ijYd~X1$$Kyxe}}Miٵ 9W8ЦA RBF2\NӤ|-/G\;t@B9"#@qbR\I&KX4&4e|b {0_MIP6ukAS`wW'IΘ@5, FLKƁ'wa`=Lr'3)" ̂MFi}G@y0h6+f7eܝdX:6}G䩥JKo';iot7 TrEܫScdTu6nT,@j6+PT@d$dU@E@APЀ]AB"" " ЂTDDR**%Dg Qiln.,d۷K|wp{1h=6-L1gaY啊˦hYU%~Pn 'QíT_%|liffbSkY5``gAwRsx#/s<Gp|HW(\*T#pFyfCl&ZnZqGmU?I}izu"[.PNr6O雡P[EN8OO Ȉ "*(EC@QAMr2JW'dr gPՒdCO^ ^Zd1[Z[u.T?_|ңĎ"­?? ,*okB2 ( >$@XPS%])3:^h 7#~gb6BGI2D&$deD"XA]q`"D@B@;OZ b=ͤU07GϪ{L/SXzW:ƅʇ@.._t|v3?n(eX^QF-&\@zbk^}KoۤP|fv?/W=|SN0ߦ-6JHZ JICZiɿCR=bR߲sƿ4dAi!f{Ud ( q譩51![*8Gv2;POlދ\oz]ra}71;T62m y1ećnETYrOjVFo6Tb_zDjv=m/~~}UҩbA :N|"+)!|[2&j"-a$@ Bߗz>\۶}3{ȯ&i 3W_]$X,cSMX~^y7- }E_"7.xξ ‰YKc&p .&Z8ٶxِU Uc|,1 Y Yhʀ,K/{:X ٳ38AKUzp;o5;q%/r۲p?&"Df)ՙQABsN2~A='uVy{Y%b#cIfSH\bvFlizAJZ} 7϶aeY/gopRukBH$ۘ0jPJD(;>߲,UWd"D-Iyb|$ Yl͈$ZsF@ǔfHIQd Jd2#Ghvn|tngwmLM5!wr_BlWf :~>Gmj( LB!dA&Nd|x>NF^T$sP@,$R "58=Ev,75p*5ҼNގT)Ofg@/SL7Pv`y0R1\^C#{fxu׷}sX FgyGMo!8.}JCмὋ" .VC9acm]zV/!bmN6 &JΎus LE:m+u.":.Awۋn2뻃iN^lUX=Cpx/ã[D2E!B")R 2̗# @+acU!YsYBafeJ紗ت)q4;[VZAGpc'Pp)ubJ\)2X,A?l 0k}*=1ui@S0LZy…j0{7qjD/K迨Q--[ѪQ= d^)̃ k%+DjXPE51coBC_o'"Gݻ?|D^~^pJ><{,]6T]MVUJ۠ h%5ii{Vl@7~)nڏ}>sˬN29ca]CI;7ۦX/Ӑa*|%;Bc7q )aݳxq#R6fܣmHͦj&, *jIc^d\;qO菐Pe1"*2__Omoj~'𦲈$':-e:Jd‘JT- 6bfga.1炐ցuNml+CfZ hR e8su>2mKVU\bZpBT≬zivo[1CiyWsggLl;z/ F~FOOu|Rp? 9E#[pw7Ø /!D$ A"Ɍ2*8S 'vKg&# 6A^^r猁<#;XYT"p)ʡJwpcx3̾ { !x~ʽmV}*͗߅,:"ζfQ4D ҧ#3IY 3r@SdfM0K5Bk5*pQ偛f#|,*L(y| P?ۍ_DDㆩ3yfK7.6ٛyLd^ Y<>\7a$ɑ@e0.}^W.~[G R6SU>/NV+cM:%:Uq /heI=q>@|ƭ_18) *2fEfN7s{kXu_u>=ѷ?>ief oCgٍ;6᷑'g ´)s?O'!Y9{0?ŐƦiK}i&qq-k͛="Kv eK{+7tGyٽwj^no-zXrh][7;?VwD :"*n{ytw=-<-z]&&ވaݗޛOKCk94ntxqQv G)7+pV IL$a6:xGvxQv:yI<;0!0D 7aSJPp&꬛3Zu~ 41ιt5eܺ%NפMjG" IF6ifV`O#Sw|L;e[H:zBpqk 9Ru:ilaKFHXE]9l=tpyuuaԻ%Y1w5/ ϥܽyO uྗ`YP.n]Kx; 5?m*[i/;殽)2ʌ`Wd&߮ VB#a>sg5NztX3>h;k"İ# _I +)XV#3d`4Qp!u~!+`p.+wvVp{k3.P>gQj:5p%9$ņ~W p=8ڜ+ % #L&Ѫjc6wPQZsI@AS~G̓I #EIHC?*(If?nAmկqoMrm"BeșxL}e҄66C~a\Y'"M|սXNɶaS|f Y%O̊7}y,ߦG"04$Cwg^SC{-:%t68s@p"Ǔ䲵KqѺ$Hi~gcW$TX1BNRg#1 I{Kì o^55aOQ̠Nm ҷi 0|%Oe{ؚBJ$_;NκYZ$I]%n;N5// Nź[iu*#9}S2*V/-) "`>/.缾 FdK9?ND_ct;b`BuA( 3-*I "5+(ߟ ¿*}a%mذ) H>R ,š!!>ܷP8R"tu>.4peq,R{="'aR TQ\T݉~sm D$ڒɭ~ $!]{|7٧2Ap0[_o^Fg7h6A[09#B;i.`umXľ^oEV|w&XZW:j!y*v7-}3..e ZpO7Tz$ v~7|zqdCC]hy߽ȱ4"G3j6~>q\?etR.l\ғƩyxK0WM'L3v~n+NxaPOTo^o.%a.rU#V}.ywij}ٹ^is3//=W"ypi)%ޮ&=R {3V dt%HA"s=/w@x<*8#xT7#Z4!cpRbPsR PR/ xHt'$J鿦"S>olel/X^}xLšRN Ӧ#^5872 K>3R1H:rW9 z]C/ZBٔYcU݌uY"|?G\zE _!PMSZ4U[z[V#" F=.#39~M#oJ50z9MR;QWBBÝ #Uuݻ\{ywg9ĔL|(P[V6$^T EAP堢 n&p&+2DT=}Fw+.j432!!?TvMWRiQ&-Qe.TZ$qKi% Y-AbFQL/]&za`< 0!$ :𤬬ċ &II$ƅC ^SY =~:/ܽGӟpch|@a##6%C)@ΈXG'ܶԃ@\ B c"D !hxe i_B7JvV3ύÏ5E$>;sfK$?^yw* :P2H"V ,":zvral_mNL4 ZH pUGAwHQWKH (XEz۵C]Dў֝)'~ޅ*" a0I$Tn.g}rM+372PS/p)#W_(%hgXB3S!$_p.A[ O/t)aKȀuS3"aAj((k|~v}ȗd\'cWɀ`cҬђS`@ߤL"C҈"H*ZQ !%^0{@~<8>-UE Cl|ivt;_ l.-UBGԉd;r*V3%GG_fGZ 4pըʏd>ҡfvpjB]+;3᱃CcB4nP^#'x;{[q6󖛕D G0l` t 3&@X.bHE^^G d8jA"YXk7. Ym4 WT!TEA @S[sg$ϰlzHu؀U:y ["hT{.(B" )HXCn)mH -!KPT 1ɄV-bViy&G?FFff:۴m(:yC5Tnqi,l9!dU|ԙu~;F*\]0f  "'sJns/*E/ ;AFU'ãۼ%rh[w:_OA;P\5StQ∃~!#"PKM0GUGj&A4r|v2L') a9\khKFQ5+$R,:$:YgVp{ d4^(I |>R9LeǬ{X,A_ "bYA·R1R/jA4 +$@!>s 8t@ ;J>]-b--i Io+Çi^M$ᗕ ӤcdB ~@E3Ou/1!{bÃ?SGaT~͂"H 7% 7#H =wP"uk+ĦKsSzgW)chVPO؈4kvj|O6hJS |{" `ajJGXQk~5@aAGVIvSL ygn0W)W7Ŝy*Ӳd?&ZtI&;/,ōi2P!Fv}?eWuR}Mk꘺eh?jSN9꺙@ zxQ:+ tn s\Zo͙tdrgEPujV7䯉 5H8B|bU Q.aӼYi eYvo@T Pwuk8fh2 $i fx^ʱxmOqC]).[X`I()wyOg[CM}?YT ySv5%a#x Cw?T"7S }gxA  c$`a&3zCj"i'@ pLg-}dY!l,vOx} 9hr/2.B^9v 69ߧuٍors9eHmY?#P]Ãu5,]9_k R* AXdp~B?Ad@ #SVX aTJ eBCۥ@V:=z¹;rBbk*5SPZ 5JKGCc\˼5hT V\MVaJ&u*%%u͂?TI$i`t;#eiƾv٤$gPL^Z2lտ>1ltk JXVn4Q~[*pHAPhPth+s Q2:8*}3z L1y#-erT;P+qoQ[ ]+h¹PK3'}V{0u. }GAKɚeD" FS/ZW{!=SenuN N@+1 ÑCs㖎_ " ^=#[3 0!!*ωr2/[G m[aNM˖0!'wRb([o9ex{;f3 4Ak&-Lo ὅU3B0ba]<{_UK]m*(́hBBc2;\ꬪb\SbF^d# BC;!χt?s'ss"22q$YA7]W@z=4!w +81'3$0"a4@3B T`Y.\9WY:syH-A`(fQ(cyr b"#57 KB)'G9KALZJl!Tû(S(K߅ ; X- P{ 6>]IF{RaNxi6xy-D@V ,CZHHRS^:c9.<NLTQ\~z62@b )wkP|4db=Ⱦ*_7;=?w^{1/Mdžun0A]{Db DW$bD@'nWAQ(ePN+aFmQ=1ŶQ^f}IGNqu7\@h $(ro#Vhg1یz;=踹+_%~_yCr\(/f~=D*|Z?;3uU\JoخIi4uz@qf7zjX Xf}q٦tȖ6_YyCc*ܙ,Li.wŇf8}2 AQp?b[|Gc->'Jk4;|UXL^)n/ lt!)!ǚ}-X-H$ |Ga KESmo[G=ӟ)ľHW!2[lΫtf#A`OKRweRtͅzUF.xb$3 |#Y f8("Gp񐷫X WՖ"֖2Snq'U#'~c%ei~e{nZU,cMR|rv>]?kV]܅''v>6e!E_aԲenly'O[ r oY"E.WL;Sʘn9|d KQBUJR{'#pt@1y{Xe^Jlٵ5hL,IvI's"9g[r~)Cx6mQ4wiV~F9_͚5Jlw6s C Kk={*OҀ1ިhB";*jZC\VTV]ɏ ŧxWT{u9B5uɎAWh%-x.1ةRMy#.f5L11 A#ۿ'j aȧ%J4 D`D|5AlBiIW E~r]Uɘ@CdJz73>Vϓ#Fr|LrҔN.РP$[͜p'[k|y{mNAI raB(AV :Q|fN ahM&_|x`G\ !,#;4F3#2C6kEUmD_mAqUֽEçPcLg{}K@Rqb XՊ 4N}=P9,&OcoDB%cR݋^[蝯Bjp1 S&ul=oJ;G_s#~l%vv7K%a 嗲Ll'w.A_قf8ƴ.|/^88cp) V+q8NKZ?R" # @l{gXy=v˥34(#ĥEb#K<]{p=Z?k˯%gFs1|~G_@>^\ ` >Hq!T5^X\[4>d:ARϩH>m᫢o/WWs?@#%y/R`<bG#p=ǠA%R c2FCMxS+4IXSXWCsN<ѥ@WR: ϐ_E'ҸGRB;cOoi1ȟJhLSI^&|Wd^깊k[LSf.y%D{wkPD0DrM;X>_8P,$o?|3 [;Oh)]IIwWϳ]Mb8nk~OR>\`z%']rQ;ſmq|ꑻWGouNJņII9%"o0M$t{}Ře g^F+GAT~,-; Ide[g2l Mb1}DwM7"bJ,MQ]];_I3=R<A;&I`vikBfm#RpA*GJ爵$x{f=@L- o(Acާ1($N [=+Ȝ=g瓲 `m @' GɞĄؐ߬SP, Gs4:W'9܀!B  IWI(ځa~@4-Ǧ)8rnDƒɌxoFulj8ʀ1,M8ipwh`79-@)B13xqƧ&ӣuv ^u=.pˮ`aOIp}]b9 Mv%"أ^[{gyȑ6"M0?DxRLq2I!Ԋ|?rEb`"-~)*4 GDY@ݖTA 3f1VԜVLKknwkIy/r9ymb#2kZV.سkmI;GMitk_X*}bF6c<܍Em<椤l/OM/E$5×J}O~ 1~^Ľ3בּu aWI:/ 'Y:WUTs2)hLJW_ZT3Iz쾠WҖ] ڂ(c`_d\gw**O+1X1g%Z`FF`7q~aar4l]}|T}6yTyunL[vywtSzTrtUApT?C4eۻbC H2鹅{׸ؼF#{T :ŋOE^σJeY! k$K Gg3ɘЛHD$">LK ^8by=suW ?P9'Q57H ̓39@eA(byz9)[{鱣aa(VSB%" i-V=ZqP @IhxdDqi]4[*-MZ{׺]2C>Znݬl1ҞL\}fA< < P3\W9$cBH-A @:'6}XHMie'׏WA` 4.n;F=օ?vUڸ.% 4$7 bUC|u&N~6N8#)bTŜAW |D5&?}""?G˨|tOh;.8_P M)NE8 PV") idr0@A%@IbZ؏ U ̈s!9#I$| .dt StI TgaT(H>He-pG<22 8/LJ M6*A U5"DW1bv؎SfOr$ _RАEЧLUA5]EJ1IM@P7ފ_o%q6C2$m)(afᕋ6a/.!2泶0cGҷ7%Z6Yڲ;[ʟnFO՗ט,1r} |DAJa$8ڨk2y\ӭ SLdkM ʢxR qL+"1! 4B-?93M7%Wʖk"S$a01́VD21 x5maK+#DT$IA!9}"M^\d1 ~;5x"T}}:g]$Id1Ӕ1 ”bTϱ~]JuL҂ Т*A2E!D?SS|S`$ ־P;m9 ~+X㞣b_O -o=2]+?!Ru2ޗrpM(OR7H9q!I?׹&AYR=h U05m&D=.ִEA LhQ0#;z^pK'gZ)okYdYkDd342XcR[g 68IՀ~c*b=4>FmY엁@?G-9SRB8h?cɇ5(i|O 3G?L^Ƨn&ja{$I@8@'!Pm&*LhM'noZV@"ASѷBQ*R?/i+D"ZD`09 ⺢igOςwx#ܷ?J"gT ɴ6$}‰4!|8L^(qXa ֺ̍B;:s@޻>WE Ia]]1\??`NON40ǪA ,[$ٛW2Ra@*"cL&to[c{'k"1{QW|ECoX $U;m<鹟e~?ǽɔK>5^{C$8F,ˀz;sF0Fϝ>kJx|_YoKd"x"}.HmŽ$:si%۹11۽KEjZ4PET/Gi2z܅:lk?sxA~i ɹ`yJ:I~)f%084vD;haDJK.owմQQ-/9~椣iNh'HĬlJ*ilU+DE Z.LBЈXVQ[Q+RbYPXVUZjDm "ȈY(6XpPAHR!75ՠNy$(4`{E NpIϼWM+yÕl]]tEoIjx A;O BG:{n) T(Z Pg;ODcm>`?O]GԾ=UJ u8Ln;T;U"C?d?<Ɏd>23d|?ŻW^GL-.>~n絗hR?w^E(6d$k>9 )un?(a_;OkA3W ʦ&A#s}:F:/"$-. d80i1^G?ɐ%yCi)?^cl m PVQ)>:>躷vx(|k\H֐xe$N2 ճUR,52<Y_04,3F@ /`[Mzs<\\yËgȫ*~L' =r).D;9^{z4<3Lz^ G~nOE]³Y0v_ɇ*{tf%vf^5n}k[ц"M<=qk| B \jOAc'`QHB^|g]|3m;oP]=IY sXw ^: LwD铽wC2SDt ۹B?]e]goAbW2ĵH3S"ujxfĹqEaQ$8T%co7܇s n8 dDKXw vIf~d17vbxj~]^_ 5$c4)=%jGgh\hH-G-c^t68!Pv)^BI}xs'97h$|m$DNh4$}wHxVM0?J^+$a$5kҐ:HG$$@ Dqtc5LbnA+JaLtREq_6([_{]FI 1uj2dңj Q.SG!]}s: ܚ݂ݹכ߾.OsKcmz6=h+$jb>[`@\?p*Xu|&8yp> @!l/Kfc 3Jw%A'!s2Xyob$$- !?F,V"?B ;a^9 d%?*Dd7Vyo&j; `/o'q ,ulvHH=)i6lmEuba\<s_r G 59)|L72#X'/[m~څ¿AwsͺaFr=cqqV|oќJOL ۼڲzVY5\.~ηCl|[ӾDD :?cPVƵ{;$$ ).f`T,$=gHb,Uh𐴨i+ðZ&|e*I  CI2iq D]_sv!qb1X$S޽L,'.^@v̅ԟ\1Hdur9q; -IV aD()UQEX C^}Z=xc010@e=Ɯ'!4H %Yh|?ᅪYo[!@& d_*J뗪 5K+$ b7J5A E7{9ҫS5c}tSLp;7(rC LR@=Zv6;^yn.0 OFf';&՜wTM /OQ y po~e1fFKX((Ep^)U\/hoQE۟\?DGH,bnԾj 6H $ z{>RYk [Zef׃{szu>\AREKi@}j=&w,IP1fvܺΎ-[ڋ?hYK/<_N3e/~]u6~=4m #ƲUB6Ӝ}4pP+i&B.Q)DZs;C>wVfgokTPgIrglP¨_L:Sjb@^S~*V1KL } Q$}r  TIM,4:_{͸_F1>aB.²^;oڒ-WN?͊JX4!\oFˊYU1AnUwO;}53-OM4Q=^ cw6L=W5_okh&JSq;+QSަ#oœ6%u"rCI{t1#lŷppAG}xזL/ [^7ٚzuoWs?>uxI_b7ϷJ4cW7{N{r=nΪdfP"jŤ 6-̐H4 " ǢבdB_qWO` Ƙri,*/(R>_73 Kw r6&Qa]EAc٩~l1 UCbĕpdo~W %ɝܵLx,ͅ{g[A0tUGNυ6<;?{,QYXJ;/PFxa\*̮&feGF_!9lc e hԫ;S9y&1?&ysZ~#>7aže>ҕH+0G{7нl(mV>DNܓoJ ~QqBGJkoqķ.0偌"]p?0G(K-%s}{431pQlE.&OtF1n3xĥ TV >r}x/L*ldS{+Nq@桍S\Zc]^5B#RP0j[NY*ҲۋṖ}'r.>)vxF @]VNȒ,H0Iڸܳl ޶u'n}@^XAF "6D҉!mst}omόčA^քX rSY Ƅ!_Q^Raɫd3'idg5sA)C f:jHY"@`yZ! i'Q5%@@V&A9;xjIgNR?Kխ\_?6/\v2=2Z+d4?aaF DJf?P HjwDP8"6$!_o ƧWUk DZ X[j]ӿDj(@ hW^L>1aj!P-(10eV@?}kXTT`Ph6L#1c7!_APlhJqL̡ ]ō  E]'^ ^#2KmLaf$eQ2·YDZ`xQpgZx2va[9ֆwAJiբZT'n/q+ZVWy}\@c@4`:,Mv2kT׀N(c0hRغ"\·}".bV(@  aA- <2e޼ "}TLKYCL`,-(l / a+ a^ XoE??`scg#@}ӛMBrŝx~?׈>c΢j6hYoP)?7}I<WGbl"N=GCC+ZJ0N7{Y<;r wB3 V<`a׳争Ӧ~'KhĄ0;oN Cֺk~.W2kAzzt (^:2 x5-HzX2(R!_5r'i{P\Xc/S>MvpCp|yzuα4}L5n?/0-: UX~T'Tr )LR_MRAC H"1ۗOtr"2ES5}Nx9;,& u*6>n_Ch~$"-V^N+-o7'PxYJq"> C}4$sg|JeXFwf  Ow=^V B #GL<.N-~Y.I8fIFoT!lGq"!;3fgU'f kOف~gwo JFkt%Pwd`#(,U`E`T(1U bHȱA@vX1Bx84i|@8zTv9?/.W&P|S0ߜ1 $'>ʪ? TUb*=PգŻVkԮ# !h![6H,(Bšk{[%tF GX&fgGQL8(KH[ו!u-^9+vt/? uJ{ǷWxA:B(Ona.eTiPê*Dʲ'qC4ZP7ySE@ďc)X21!mGGG Vx*@&4-I'@e'wK/4%Z jΗh- `(UJ1QX աZtZ.z^fw?Bj_DH4A!,rJ_ 0Bw+EbQH1 hkchizuHNtgK^lbgk˳͝"|N}e$(wH5m)uu{ox 6ݿc~Fvxu-\JVqiz#_?,D0\='Y?o]Ƅ$Y7DH6R}Pf5]3fqMVpec3xqOveQI^/9)u,83z 2o8sVA)h}$rR"$$d;`OCh6@"m'ְ0 Ft^ |vx.NO\3QA.`J#haDE*!@+*iuxiЄ'Ò]mC. T$H#L?4\G6~{R LnmmO='< E [)`&3u2 @LWg  PhV2jcfo xR{霳=N8c}]&Io'[^@[abr$5ԍJR48:<qLD @!.j4Hv)ϸvYT"\G ϾwҢ4sӗE0%U=+qtIԼ1I.y?_ xoSߟQ{V{˶Œ]s582> uu^ٸXN'on~ FkW1߇1xHl9'؅d=! '/f61 !gpu_}[b ctӼ^ig횵6;y/=ˋհ/\^\Xe<9iYQDF K*̶@ALq >TʿaLF ?X:4w<}m;r^aPޡӆ6 EϟAzib\g?G'Ϋ{gX-%zח׫amnKb.ְr_Jߥ2ey rm: wWАb>D%4 RMeV(HsjP$qSd! ԇDk# |{jl&KmoG.ā B8I8F EIeUHg]> Ӗ u%ӻy BM/F_GWԁ9i^ iĨ.ښ)SXVٶVB1k-FKvtJTiI$>D5H~^}\NKXCWs#6CI7/R,7b/$Hr<𐕘"4 h40qY#WtΚgn]ӹ< Tac„1•tW- J:$ܣYAQjjvj<]ee Kb5^  u7)J~; hcV֑qѸjN2Þ Z>hNJn6hh.}q>,vE P;W^&vT[YSL̺lBŴ >?ľ]?LT$1$j A>Gg8ZoȄC#!̀>?kmũn|O+n ,M-c`!@%3Y !\-\qx~"JB5L{5\0[I1lk'GFp |4]ħ" 9h4\Lr{$"Aw}?D|P}BL \t5 |MZcm6k%ъh&>&"Kw聾 Gj@9KZqښzLK>l)UDH8A_$|uil哘.ڊsUkfxsT )J6[7{VI :. G|K 9y2ImoP+D;S^ `H j_7"Ӫg =q_Vob$EINo ߯IcّY j6Z[Rk1}eEˑwnQ$(Ʈ[(RL[عi])]n;]@M-/7[_.EyuRUlAޟ{Wm^t$ÖʨR%gՒwj{Ը 1rx};пNWO󸨂F8Ε,;). Y%Ӄ]w0a 9aZ~O85?Tk=IؖeZpiZD"{~kx]Ι~-7r Qu^̄" @HZHH 5=<^T14pJX:Owii8!("$ RJEv0 GMRw2\둍 ~($FMfѱm\͋C8Մ&Q{Q"MHIkߏ,q)orV(o}M[W )?v@@s,gye݈{PD&;&iiT#t(=.! DB,RHI& w[Fg8'lySS'MTŖ >deEW}3t4ʸ0k5  as7t޾VQËAd蔨{y+<|܏IWzw_7ム}|Uůě`VtQ&Jcߚpڤl7g^QJƦ:;qLV$z26xשQ0$a)4ף%G]뒺O4vm;P=zgp޹,q/t>|Z۝cTC::}L͓ͮ/ܽ`y͉Vt&(pVDp=n}["͍gBд7?c<.H F0"ƕ8hg+FaH▉cdދ^٣:JDA -bH ţANI$!ih|*õe"0S+ m3~&z cq/=:8;K)νW33+R#o~{G<f!638zptm1$.h6$i@H\d!kʙq3C h8 @?s>6J@MSݡMk žCƄCϨc[ԾkG)/=/~t[lmվr@W30SΤ>vp:ɺ18-nzZ>|KOwZ]o_1BH Xb >} F8^h-GfsH؎S~:ػ2a_DI<}]x^ Sl#`:;b8gwll-^J2W*yU0Hy݌4J V1Xc_Ư7#įʺ_"gmP' s|)li3zvyߖJX~yLr|Z>9s;;Z>n|^ҧڹ UkU,o6:<զy2Ʃ&:|mY2m]K5 '2OVtI"IxoBKw>oσBЬOTBQX5qpM[J7r3m0K\ _3Q@2_&*wݲWTyH̖ޛBd^T~S/Fؿnu+o[OnԤ;$ 5ԋ[ӵub\lCu$`B3{Ng~ ] 0Cs? `Wtv g=O<yt w2!I4 %']XAc4ݥIY/P};J(Hjsٮ"%yOVQx!is|jBD;dwwz5?<[7}oΓg?v+jj 8gzLL͍gp2>Q)O.q}^-1+tBD x bIG.c{}zñ}3&"-L8X8 riMf?~Ǡ-%o/%H Z tk5l,EgNk{jC06Mɧ  x,%HcA;A d96ޙLW*nagͽRFHy$vP ƠpEO EȈ Yp}[&*4gQPU!ԙ-,ZB%Xjn-o&($ >㦹qrl݌jQ ]ǃR2 S^6-(DP oHQdHN= ku(!@m zRx rD4F*Wnr+M,l}qFUq}_ }vU4zش8ip{༎2oLB@pG #ԉޙO}_,Qӥ󫮥v+4r;6̼X  `I7)6=4jKSʇWj:B'QGߘ}ϫIP(\~k^BE/5`鞄i1x.?ԸɄ2D:lHP!όo}z٬Jvw |_7ϵۻ2"R|ĩ )9A4z0dQTzƦT .]ԽjW*5"Ê/<:o2?k4Ui3c$w?5JƼfç_1YQG~Ϝ4:|zoY((ў20c.ٕ~QN)VHEU.ʹt7==3ݱ[ۗUʘD0;tY~??7%;I(rRT(2C8}FV98BSqz~D#V\ y'D/'1BN`_J_izĈ {FZ˃>vmDDWՋ}pa2CS55;O?V'$2 Ki*?SɅ0ŋKZ)g&ANF&bFSŮ*/Qx'ڐ1SCBv@b`pg3 :O7Eğ| o$c "@pEtF=GkOKNN2ԗ "wJA38ro|!njtp=B[EŪ;֢ ׇKK&iRp?(Kux&aL C\luI[D>f5n#xק:˶;jjH%J"""d Tܕl[[TY ȯ7UT;=ɑ,2" )!v z_B`d1;xz5" XPĜ*o6Voհ$lQuAm] _#ػMȯm)SHY'1d0 <v`msJi EK_{Խ0R PR:iF9EbƳDE 5Υ;"[障KTMͽ)d €` ]1< Icc7L( rb/[ jSYgc|o=͊·qluqpÄއJ RR[Q3 i r !W&<ۼˆ5-kEPqoڥ(` snT.cv]$䋊;D*[X_Pz*o0Hs:)f3`/&^v^$0sZR&|1`)XG TLmPIBs%;(5JYO5[OlUlr|DH^˳\TbƝѫq G#~ޚjx \0?hf//ŵעqޣClt1m#SPD}¦?A ?g#&TY֣w,ٜ:lGß皐EB@lӣ^_?ˎ/qxiF*3["aD㼹/EY5s0"])?FfAOr4>ɡYɻ8d41MLJmIX 12Q XeLMz(}{hh.T$=urDc@8ԡR< r  AyPCwGϓDPc!P$$$mOP~AMo ЏRc0ē=xēɟჅb̓d j|PHTQ;`/ŀ~,>bE 32{3(1ΟCGù U E+X:: wz>1ȸHMOwgf4KX2k#x;}&*ťD{nvkdqhD-5Tef]j_]D L2 c&V1?e~ aidTX}P`ORj"x_ޑvCJwAUb,QUW '[vOvvmD5G{)V5*c-_&iF6!M+{g=BiٿQXAeR(&ԐF+1 J2Q*#n`o@.L=2GL_m#y)k`eC&N=HF.{ml+_DZǓE$u%,j?TU9[R;0|~|gYŕeHJΧ?U~=/?eW&VCEfW??cDv]ՙaxϙ'.IѽC r{l&uT:og%R]/p.=n8$U~|4@j~E"H[=DCڳD=Yˡ~-cKs9XJ2L@YGA{qgS c' X|@ds1|cMuN#B> Oyy {Kp,oe=+ B{Q8~߇xC υ>~b dџ /?ǘ?͐rz}FW>aQf\ո8AM 9bT|~t#b0Li@e\K?~x(D}o2҂'F¦z׶YzW[A-'.fzyҩ\ J)AcIM?jeٵqr&um7w`NՌMÿ;Ȥ,ܳcL=(X8蝲zX;iph4́ob9cFȉUrU!YU 1ĩZUj֑*UւȌ*-AZF*61KT!Ź?3Tha>=Jw 4c琼1m4+ukpǖ!90.> Y#&P=D%Jay^]]+:yaw{~'=*dPT'i$QW^%ԨאABA0CC%IY?vQ@IiL=zY;9&qcOx Z_!w_k'Ɗ{+}sl7!%61>5ś" 5▷}݇ ),d9`V)B̗ BAnLVpuhk_Y]\Ou"Y Qd6jCy?G:37  [~eRW_qou$‘`v£P 5.DW##ɨYBv3NJa:Y瞜=c;}8N1 u$jnJh޵1=vDQʠZuЩ$"lL$K~#~]ӑc*p: 4ɧU0YߟBռgFL7Fp,AdQ<4.,_- I@::BtVZܵ^kZG|phA#07yqXR@#1Z,m?LќezMCR>|3p&/s_\XOX t[WvS5m$_O J(QZDұ iP ֮|$<{$ސm{ #Xux޵(DTJX|0^`A{wP$L1h;LM9t"XS sH"#G"<3A;R[M25ujzku3fỉ\*3{*}g"GaPGue {)aI=6O =bc}Cm ޴=1sg]81%Izmؐ8}2>s1T3|F]aRT7-ҝ6hTпW/^5cUN,Gz ڎd2dQ_D/a4r*O$*05<55#SuXa46I$3m5T!]=Z@R޻Bm|5ww2g>$o%)#EvUwK Ù$F&8= #Sf y~ᰁy3H2]X V*u$erx5t1ĥS9'd"{B@nc:x b 3RɵVܚpєR P^T@7en/$HBOŁa H g3uۯijò6b YR{/+7H'T+\j]j!ahbLǏtalxF3U&9ze!3C&MG"aXM!!' 'z Sg{I@leoH՜.Jcz}$SGDR4!f;7{I/ek|B8L~~=tQ,>D`^dܸn~!ϡ`?<\DŽɍf:som14|9ܭBxn=θ"@ژdN@1<[( <ؐUsO{tg+'ާ3,'G'>8? `[3a*XmN/33~$ۤt$UYHЭmti 1Iɑǟ 6HȍDo6PY@1]s^"U(IJ 9˖ a^ br#2FղMx3usDåҠH'QHm֣Ũwc0 GˤDZ**.ۆO 0k&Mh%nɆmЬ9JX#t)Wʈ0bZh(˶]$Tu*:9Djh۪)U=nkusH]{@%{ʃ=mՆk&>G2?֩X#ZĴî`X%[hK|C/<;IS⠟QCh:6ܮ<"ɑve jLS X4@(ڐ \Ir@˂p=+䄃4?$gg ALКFVGŗWH'L?\ok7 %,7lJ)o<9n!J߉YXF,@vdҲ\Wb'eF?~ `Ǹ'A>01C|o/' X3#L6 8DWvBAOA~R!$S, _jDfOΠڎ;ᕙRwu>W]hb*{s~c— vx b5>Vr<}_W7p Ow4 U0Ɵ1bmIXfK$H*{Yw|R%/ߖ!ؗ7 8 Gbh )˟M|h6y@D#7Gf?>HLnRG} cBpv8Eg1ZOS[Nv# ɳLMA(,7s~[e$}ck== ~}q% H3`x F~һbQV23$LȢhzHGփ~w#~m˙$O#K9$;MLI$d ~$80 kjZޥPNKi}kzHRV(7;;<_=h[Dsg#0~/\z4[B{HFZmUd0€ FBw%.?p!I0=xL+$1) Ag԰zЇ,43;Od=G|5UudԔ1_mN60מ"/yΈz`u@ۅ ,$]zчU :Z>hm=鞴/I@IyP rb8 1nmSb1 (NZyX|pNȽFmꮢ@ܯb& lB}υ0.K=(Rf$&vMc dixa^SC:Εk=WzcKx -F{3v3&]KxK덌T -gfSCY6ȥͳ+.jsa{"Pv4Ty(/:ډ`["ۊA^CMj *heOR -#3'N&{)Gŷx-G3^h¨5K|%N$D~i20g| w2?6Z`jKHlr/5PpdyU(FH u-PdK>6-ղvf"ZP̪ R6-4jo7UY˰EWgvL7s*Fmam"LjeHID#fd>n Y3!a%[I9x|Zٓqyه[ɫԩywq;Nci3toh8@z:'wv*=6:޵JZ2%fU+|6X-f f`q*pM$IMͨB8z ~߽t&d-}a턗l;,Q?!I})0Su:RՌk_zwz8/ԧ\!Hu[slط}oJpzq߆%җyW-|ARa!RJC`xнB!|0r,7g7>t. Y#Me%#-<\ WotFQI*=G%;_]"Xc;=ND{zuf6z╮>*Nuԋc3rqoi >Xn"zTd,\UxJ"y L{ ғ+z炯vu]frO6;9JSG9)뚳0]y2hyck7=ro,Gutqh$d Vng9Փ}"!Į(7)NT;%DyWZ:O| ^H̥<ߝm/[>q5i_3uΔ'AA@hW,_p+1jg"YGè'Hb1_ͻFǚݲ'I VoaS+DDDypf0T x7N͞[@i !y*KƤ((# 3[1,rAK640Tp5Qkk6m{]/Qאr"lwJȘ1zk 1Rҧ rΗdL|v +Z̠|V{_{ɳ'O 1֢Uuh!hx&56$ԥcVEat}QSHêF+7ĬTbh^dg%E3$薥Yf`PXR0%1%,CkFG^" =^myl2szvD*i2{HQxRܰ =|Q%@5r1@.jI!'${L (&!d S6 ULI$;Oeq2oR uؗ:MMDں g$=쵅Deo}KJWKA>O nK^i$]slVT *(v1g xX첆[^>g,a_I=DD۩~!r1bIw1v+F`BH #2ОA1$ \fTEwO/Di'F.vݽ/rVfSٯf&#zf@>px4c면yʧ^{zL=X-o;iI1}VF`.|ơ;v4$uW( AGzDo=;ϻH/\8P5$kZy}|_:VSKDbo0zmbj۬1Q| l $40L@Y+^U;LCi jcJ3$ _&½gp/J`FB(/?ŋ)؁/LԸ&sO.s$`,:=T>CR!xuR$l2K{ShfLMB=i(P+H#tFe{WPp 9Dul)-Svտ#p? |.4ȥRTpP$NI#KC}{|U<-5܏yڨcuo2jT#W)68f뢰'h;OKə/lHotZ}̑nSR/P"NSȦx@)a50+% KB: b 3Y6¬2`f30}z(I̠bWGC=` "/zъ)͐*Ic[Ww1:e`#*y*FiVthƫMKQ'Xr|np_: "tUe_ mzB$\^-gJFYfi_#Rȯ%xZ64*P^V=vߊ'0Ac") I«DbB m@I%0tf+>k/JRikc|uԤ雵-ZbNNG%yg6D gZ9__Y_~g1  O";itzWN 40?$$ک< >6I|`$HCln`vjkᆜ<^!E-E @@SN@ 8Wg1$V\.Q~m괬B!X/PmD1Y + X,X^uvΟ Voit"R ߺm;B`#A#*U7aCO㇇PetOH4,{ѵr3#qb0iqQ Cۀ&SڔɪJA5ीn:Fl!XOс@&қK(\79y.L${HFwWQ)Ff.)g1Uy셎Q(dHSlA{SӉϋ%oAKa0;7Q^|oV&IUԅJʷ7¾8c)He)K se/Aj*Y3O=?@7ȹimvEpdE!R W$4i5taBTBs"NhP'v(*a`Gk@'>HhjL\hM4ze@,t7%ZHN[ 2ճ^~ײߥ#,[d-/c2kɪ!j$ =í,rW؇WRM̅۟H='?ЄlB4}{@T AYAͭ;0KAD$hm7RP7;l1eDQҴ{דfKWEj5ej5>}Yr\=)d롢=فG+LasS SWoz4с}2R Wn⍬5y 5#({CQ^Dն9Ŧ`c3/bJRl1i%fDFY29]] 㼒BULn-[hiWON:"5 ^E\m<0;ϭԃk*AXDgxq-R #!U Bp *DX! +UoKCbjiDťUYӭqF ]D<8o=y>cq P#a"Ee?"c~~?Fot.z4IG>I۳fkV'X6P5p LR; :e>{$suө>"ai%LBPB<7&ϡb٨d9εفs6b&<{>=EdpJ K^ ?w\oj~/L?Րa:^{1OOi7Iu{d-yIE L} ٫1_Z,' ˆ3A@L,sxi9Ɲ'CK󏜈ȤD]<: wA H~ At1}_&5)c u&T/#;涊"2ΉxmOeYiKfZ}Ca빿żTqǀ+p#Os?:P dՖ>|C3IUgߠc 35D!/U$~ ) ,x2.5OѓD msPާ.Y#T̒M#%rU7N#BƄ0o9=>\c04siL2I~?5&yQE+5:p`T^ǻ< )N}99 pcˡ?&k7u+cz׵l}nN*e\4ܽ<0*k1_>HM0y;U/u0 6ppuHUYsX>:_|j[7B^'ˇM8jojni#c٣k9a&D6?HZk? #@Bg&vq`eyVC(LɆbZW53og )N.v_Cp[  ;h|ySΦXt4g EqNτ>$>˗Y @Yb(>ldZADZC"aL|*z&HC6pI*!LAN<(>[aHJ\V֠W2Du$?^#+@y/qٿWA "*"+$>dĢ%gcZҝRbE Ւ]|$U$άsb=]@nْG`8g+Fa9HQUH_d&xq%yڣU@KEQ%,ALbg󟬠I+~p @?Z7 [72嵑`J=eIVS|hdZGt-B#[4 BpB-5bf9z8d 8vDnE>OSv3FիXE:.yw%Ym]:Q:RFCavux erSƣ'l Ēn-zq<\I&&]P &3E ,c2Hv)nA7#6d dH5p&HqhWYRtKki[A u38(MԶ5!IN08,>puma:mJMϧ\n)M<%?®Mlۛ> RЩaWƂ2R} NQؙ0Hh#|o\eO'`dύ?ϑa@|M]Ŵ2ˑ4dMŠցi#&hKYx|Ҡ׋(cC"{5 H$hL`", _AF` {O._Z@$4t)I9&4F[i{0/E ;L#_O#H֎LܓE4`7$ O$4!3 1x~'ĤP5ldo"EcJ9AݺDDJ… jeܓSfe"!$ *'ե jX@X1M3oV}NN W7oAi՝ |D<;Wc)})PF ,ԿRa<6'}hBUNdm kIX o.oy~/מ-FwDN̚V\q;##P_vfm~m5&I#]$-Z.`y44DkDž oK5 DK&jf\ F%yqMdZЩl#a9DL$.eM`Nl0iV0QnB3{&b#"#<=bI@%X`g$ T^TTГ}ol=?>e,hi6B:zBbLkf3E-]y2vhWh̅#1v10ebȉ!#_Sg2zϣǸ5wOIϜSڤ[D WVgX}6PaBݗ5H8vX3gͲmaѢ\Rɖ|K@R8k\Db'r&4Čy&X!7-c8DCIE? 80 :N$*P DI95~7OXt-d!'.4-̲mg_ӀMMxʗ% '{5]iD{lZFȈ HGեjR p8;m}u6D;8^Jz.)<Eq@uq9 e`cgIhK^<NwG/µ$GX̯gj~iNhߦXbF.C:;g Y p4%XDڳB=Uxx$JXI`bZۿ 6XGo#ORPD#@L#14Y# A'KJ3ۡ((L4>.ܶZ b6"!+@dγ7A=*bbQc3ǠC𫃒lEF!(CKuvwڧ/4QЬ3)f< ]Sci>8_7c:ȭY|Eg@Gpx XT '2R@+XE&z/V(k%\ va_g9啬ZJS1&jM*tEo; ߏ[U AA!ml$TC:LݛD C!ic\Qpp~tpwKtA F,K][ZN\.](9pRSu5c6ʠ?t2 }ybERӨ]<*yb\{'_HRTH)ʭoTRC>wy#[ʷ9ֱվ^'Â|A.TJE0l/*2>46"b:V#BDZˉgU/P"H0BZE?xu HP^^_4!zQzi^\݃> ^ v"ԣ / fX5 1b&<.{l^tilT|ڲtbxmt'u`KVͧmOLi"`D)n߻H=8zjT=ӈBYL4 RYɂ1, e/hXN[BVD6p ![C%2x9Bef'xRt3d#-%dtVx#7 5Cu$\蘹ukן7/}Cw0 %&w@S18Jd' (b!q/ Y&`Y/*)aLW+`ouą'b"Di"&w6cGn+W Uz֚Yx0 +gЃfY$mW&bb1+dDb-3B#/X]gU^"g%`^"@mc+^$D,r20u;NႂPAi<9S{7O::}%'3ђ@oE8  [F+R .;QC6'Bz)nƝ!vg,i7E:'|*$A5mxϳ|GT؉ )]؅)<E Ccɔ}ccY?yQ<>a!85"-tE_E{1L81Olb濵o`$GJ9Mԕe F$sS\XPGKPƞ˺x >Œ}-$Ap05$6rKa(6P#ri%3 euYN73Uw\Iup&(Amf P @7 ~}$ఔɟ½’^m u ;̗m~yVԁу74_si]!uퟃc jQEDQUe{ D(LQhCY><Mշdw}eRkUFռLjj9X)`1Tgaj#^BhEڟ}W|M2ҥ \ T7m B pjA-KܷRqpK&l{@;gzz d7/A>5 183_#?#XM%Ý []˛FtQ#\[ #m'|mwCSy#ӎJt^Ch9%isɉ@fXĹEH4zu65v h#@$E!r\0nb6Zy!~c<*)3'G:^d0t.W}, gmAWDjR',ioS5'J*֑>t:1_CXfЄ)MF-2squ |$F.viy5oy0oW2%§k(0@S3RmyBiNp&$i"Ҫ/Ƚtƕ6/bzۺ/?G ai NbiϠ[Ձ6so5!a VnLb>9:#})A;I 7osvYW%UtZ`N%u*'$IlNt>Da!X=,{y7(칼dݝnػ^_BPbce%$mWuYB9~'otmAS=* #h yyR(sZlplMx~H#2DAsI oiD eEFoЎO9Q4l#1]N@U¥eV~ȍƀ܂~(nng&5 ʠ3Ȟ%.@^RfrKͳIwލÏwK6 Vzz_kۋu/e̸9~OYs "{ɂN˵*}'d?,\tyDHyF,sH0@` a+.GX?B :Yզiw&4@D;Ch,`]-/ǂ٣7ůbuCӋAtlףhb2^+aA@  #]g-|ZZ7m;6u4hP* /?.3e(pږ5}Ur ꯕt9^PqpmmNZ1!PKY 0\[=]d!]@{nýӒ{}øpom^z$b0;#szp1%0T`\1wSiM~* @`3XOؿM7=iޢAҥ9ksyRo_VK1ƍx{=wvb} zY6) "H3C?vYd,Se.J} 4W,ZV>C^,7_)ggdA^kt2O͟%݁@.;o\e^+Zf>OV93^oV5{|7kGӳj,WҀI>8'XOLSVhj- O!ajԣN)K|&^Qo?j&|?޷ʒF{3Y';g{ $*AbXcɯ $`f5'8eRϵEn}q9swdvog:UqX$)N>9g?sK!+-Zwָ~| K R x?wʮxv:g6_>":ˆI=-ЃǓ IYFڊHPa_lªT ~%02LN61U_unjK<̠Y1JL&ʃZRFCCg7jA}h/}FD:n>5h4uzfG3{^TT<uJ鯒֟rLm;9 *qLSV@fz&݉8;!2s`ƽY]Ӯ&79?^ykvaDaSM|^||۫-w:u -Ю_GVil:yu\#;i`(Ǖ~Ò*$)V )k:ģg҆w,\ٷ`eex7efRGQX7)zVY^gƵ|?bʚTEmV;{W$U hO!;r܃ N I5 ȳV+x;?%n*7Aj[ (8DQIf3YzJ*lgjثPfa N7m!,b4A!^|=Eɷ.\+`^\oˊKgw#Hb!yx/j,r'F&ukrU>{Kn\TPA0H|!.! DޔMŢ᤻*g62]0?c! yD{^0}MOڇwݾ\Lg8E_ȏZA3]r`O͋LsS%YV"nt¯dmz__isWqtJe;q;rVnI{>u=LFh1+6*?bGa?RK*k;|Y"}w]Y#MQVlìȸ}/ܣ^q崊3J#ɡO.7|n=;ȡyWfZ0 sK֜;yqiQ)H.ݵ9#PG~s\g~+g֫~)~+ gE/J}Pldfyug{^Han*xsD&Z_RV)Kʘm6 5mn r"",D0"1".E)OgaC8xO@%UQ ^I_ve?}w3*MTKl,)+ܕ\fب i0*wW(d}PG3"BL<|k~G"#: װ"#$\u+vM&PP+yf6t!c2aٗL {pPP$rMj9ٯcW%Aիv+4$Ò{m\0<-'sݠ(yKys߮W#!9_w[#w/#"" @LP#Kb-m-kgճ@Fo245G(zNR")|m)\e2JI_؀Snxs΂NOpB%3ثe8x xcBa[QiŊj£&dc~ARpa"#_ft;V]͌N_GU)dwe kUI[wHS̿o==ºeZ&M~belUK#-z`҃ @DBf3if4< Y{ ./%X1O[,AHJdj0dp0hfqLjz#|+x5cgK M[$ee2L:>D@53ZWqzsgrM5jY}|@ɻ6a˽&tkA_SӚ+ȁl\9!Jo):@&'ݒ4>s! ?K>ꈐ)J"L0oQ#[SY$D{YX9Mc'.Ro6L]>r\}jnĘ91[x;|J<1 rUQƢ<#0e "V"x2&R&c "F+l@3{Oa0zDfB+nz17Ԋ89tTϕg:GQ"Rj,zV.Qў"5}JbK#JY n+^p \!ΝߢGmO6YlBNܰ8Y` ˰H!(NQ;|!nP41H0 QMt K?_k3/D,qNDvRDT@ѬGjy"#7` gظ `Qf3T5Fdj{Hڦ*!@hT)†)D˜L!fu4ٳڂ Z^mIi2sͩi/<1^tC!C=(zD2G}>!ғƙ1 uC\.?Bi `cH\q]t]@]r%kZ٪ڢTY.88&P\1WqSB5{Dv)3ɷ8QR_N;njfUQH$oAخζ{f^Fμ`.":~dGHŸĶkh"/?-6ZS㺲;&5;ө ,tƵ| *""[z.1a㻹S0rz=ڴBJ Ѻ3|Yѹ\ IÝA項N٫̟3&şn=kAď)7<2.sqn23X+qzTP:u3oR"/V H^Gf/~4_Wxj%w QXMꮫoL1EFJ2V5z6qļrWn7/n=uXoʼ鍜l#h:}IOC>6pdejy6s\aVe%d. pNIAdd~^fn?>rةKIMv"OeܷVm\'X^˳x0E k;ڱha/[/wP@=+nC zZ9*,n}8oGr$ˏMۣ/N z0훢 c/mOb*̍mp]xs?,S&[7 ?t]¤Ņ %6U3m]{Yy\ɦtrg3ԨhԯٽmS&xIvG1/]"L1?sUǜВUޜ!d^>?s$U΃uV/%.fR0#|!U0a42f Z.K1B9OHAG}~e0eFnַT &L_nS#N_kB!#uA"sF|IEWӓi9NBeޫ4E?l]/zϏAxJL_b$H֦:07[:N7"#OHe=|u޵vƌ&Z`cDuk-~~]aaAuε_<>Zc٦?= X+UzO{V`:7C{@G%XM>, tZy;# Hbic&ĨggJ-?~ 3oQRTDH*Ћg8 "M3Y2J;c|Opp@,A{#s0=ӷX2$gD8N d5kXCT~s?^C.E}A 17n_ʦG ^Wx:N5> H*1Sm,FЅ -~Ӄ_Ż$cw3^ّwĻ PR) U{+_v/:3{}*a&MSbkly_y DR-yiY`-Y=tߪ')|ڸKJt> GC>Fx:37B!z?,R,$FѼ6y oT Eԑ"pA*xe1".v8fgS3i$r&ѱ&q/y ~g۞i]fL֩0.Zf&\RCrb<xͼ?'QӊU$O3zIpE'+$w϶ģG~GΩ馃 ?<8׫ MNR@oiڐ"|f.T"l+ug-:## 헌e&/v.i2)Q6gZ[m*n HQYoq3 Ag-"9zϕYT &(E0HQ:4Y0\vb7Gi)a'1M$VqsIN}VƮT G󙐜qN!U#][~ىk>ҖqJVdGWhYѧFθ'$xۛ{J8ԻVG7~Nhik]% >_[Mɻ}O))c#͚Y + 9ؘ=OQn z=/̯h6iiW>f)o>]; a6A4jo՞B Dm-JD_+l&F7ĺ?gh@tYJF7 h{h_u؊d!"ZVp@ϫ9(Ff`]!7t ba].<ڷ2t#pcϧ.(eZqRX'+Ԙ_^J'kGez/U9hVѹ0W>֠/籓u{:0ln۳&;R54d҃Rc/\:.}S?L8͆nOB$>IZ)y<]}S]KjCr,uT:DpT宀bC$wwW=9/JpPR[fTDa$-. IvzU""iQddt~CB !B@580 !=`@9I\[gی8kq\_va w
FṠ`4~?lF(bZS+Z6뻶r' RdVye4;p,MzqPFDK_fHo=AލVoGfy6<|^wRkI`kI zIL>bHlQ}-?N|:Wi]NZ& (5v 2UO+jj"n8<#?y{r6'F֔dIVABL˨@ɤ "_{r7z p?!QQD@76İGyLZZ>ܼ{D)R|JMc:kYۯb™9;YaƭAGySKmpT[g\^(כOg|͕ŏ΁?.H*oiV,uWj]A/nJ-yO5χݏ˞+y~YZ.~NEuh{m6v'Nq@ϵ͒wս/ݠkx§ #aY1Kf9%#D/95c\Z-QU<Ӽ]\ݟwe?j$)~qQ" ^'0O +SߛlЭ{`v’g=(L\.?mw.7ydF+ (cQ #9BU09ԁA"n$S̈́7ټoWkܟЛҗS؏nM \Hg&sF{.~)&M {C{{F'b HzH?q lRu"F 'p4-S ;wo];2)KRVH6xG`# {즦s_[z07بJBO0۰Ǚ{?q#emi}|<G<Ȫ#$4 xSY%=ǟ9p>jWLf ;`!Xxh)~Ry[l:gk/ezu}_m_^~ړŚ ?:;D1RN[ȡN)E^Ua٠pON{qiSs!'Y=}g_wsu2H+^u%άIi. )(Rƍ|ĥbGy\vTܝcS൮7oq20`l+GV-C9{YۘM2a-m&[NU(ZxCzuSZH|mdS6]UGp.Vk|L/~Y։pk]tY[IICΧ'yŇ^ibaӻ—cZě%΃5މ΢HRc%V3=\QtP cPşH = V%LqeҰ=-BŞ"UVM,mg),*_gXE$ :gVry%{ƿs׸VmFOh-hA!ʂ:t(ᕔFby1Jn<6SOK*UatMX#.g84܃7xt09{R "04d9 ~L&$.J{ q_fS#"ih֣[94̺Az],kޫv}]u0.^f[Hs|Y*|J d=RZ\оN 01<;t)(=;tv-Lm4Sg-=GSñtzyNe{0m`j3a\,_ ?MYBL7c*]BC0E])Wk݋ݎOýW)ʄqPhGU}yj/g]e,O[a^Tؘ_E4"Sardvb֗Ҥ%@ H "x^xuzRG)Hjh\$xbÉ$ 0%0KɸlJA YR~o|(M~ /J{^vW5q-M9p oSؽ#ΩȊaa{ߪB*b"VPaY"co'l (wipz)""|8%d 7dK#[݄Av[KLGRZ\Hz͌wu}ɒ4:2 w3 Q-w6rJ>) \!{ q~^[)Ni+AFYHԅ{0O~G'@| 3_j#[yXf``q_BTMILB&eUu3$ko__*O.98&@G̸uC:2%1ִI,& >33N?Ȥb3x=|];̐BWQ/B#fd}Fyա`H(o[,nGNR1v󻬊C| g 薤ג'~h48{i%_gdX6%Rm2\ L$JQ bDC}_&NGE,]J*VTpɷ^5)d@R$w':7dV?ZkOizNTfنn3. YZaOR! D(YͫY@ <,ͳ8bH& `nW/} ۘ>:tYo[earN I>C WlL䅨H< /wNxn`4|E=5\#wXɼerH^6AD1z;CnB/ R`RH 00:zn.y94`g$%횛Z2x.l 8uQ6? M(uѮ֍ QU8wv1ů%xl!oN}I͓̎鿽(K?ʍ TCH}fNI@N_[ նVL%IIO%{)ppGFiCrA*fcU#b2A:_t77\Ҽ[6|gȔlP8I(.H/^-n"dXsjq_'A~6\H. aubϲ㾑dRLGcZֈ^Ռj]%-uz(4`"1"1rsDdf m-GqC~i.eeWs~z~owJgݔKÃ^<%jb{VtxnBlB NjezR$hChSJK3JùҤZ/if檎b88)OEaL7#`V15 DּA G4$&]JR3cr]k !sViۇN.r:z\IH9ǚiulksK#uBWweTϴ^O/Y7Z8a4Eds VC9OB滿Us O#qf}ś`F]VVHP"'&}<=2 S{?{RSvF8bA8|B#" ?eջ(G1-A3~*Vx ϖg`"Fx%i\?T=}KpA Yb2;UEWBT\uVMTB6>ש%)_?%Lx@#0&P() {$g46y4GpObpA 19P&2y&_KҺO5~u׆n&ݒxR!\q=߳'g {0F͑d.GۤE;WI!$L6 jӍe|=Nc+;W$XӅ.RD13[T1; _Ɍ2 }k4lkH#s[Ty 3uOt̋PɔSΌt8P5 w_vcEZ{&b?^x!gwh&OiIQK~ F DB#^2] QM#4>mH ֤<(۸)H ,5,zJ o<PIʳYJ(͎Y{7Slkp n3_"yQ q)TC(WhIS^I]'Lks } AzwyM@8T\çbдH8k oa[5YUt-ICx^Qλ, u)h\!R]rbǔRcWƅIb~%3;$R.IR2X?hvSJVZn3s;TiAuM8]75.G|风d+@c-HW蒷^mNzgA77jUsB#&Bn6U*"pxst7瑵U>T`L='M7xx18Hvpz j09v5 \Rd䁹U'|F&(cTJK]5RtЀsc`0>/b0"#"5J( uh2 ;[qPKgyх`hrLCf`d*0+ۯ2=-Lvon^L8޾^NB1#oqtVFkkư gg vaQmKx&RZ\Iv|58N cv$n4fNg`-$ۯ~?Ck9s9 SvXvUd1)Q!zfT-As+ 0RE~$ :͔jPc@x_qa!ܴ֤&1оEwaobfm|}7~p ZFF%:;֗˙bE7Kn\QX # D#x%M<>`!y]l@~4WurD-)x;y Hdu?T%Q ỿp\,Gqˬ[pgR5^|Hf9ІpV[[ WEm1oft4*Τz rC&mcyf ["0f5]ƈ-DEm(꘩AƜ!'7 ;a NgzTQ [ 5cn 83,.21ǫ cbͦu|x~AY Xኲ"'M){~yۄ6~LDiuYiM1"6vQ?fwm!~Id4VMf-b΃<;]FdC:_ wdD@RjD0Ka&vɼc[u~;fԟZ7(A帍:vv:2K鷜 1|0le;|,.Gtٮ&8E[FOjA9j:k<~DrZRnWxD+ `` 98䐁p8zq!w+kn>2znE+m%޹"}䷔q~:eudZNpy|ݚ/;9<ƫ?=|s`z 64+us?F9ʘGŞ[ *Wn^1嬍}.c("WQ[wV+tҨ>ܟ֒L̘U鏽\Q}Cݩ2o5qnGTV$?KPW'3L^eULYE5.?y,7Gkd҇x2ux]KBw(>˷cBiOolᐏcvM>ξғJP>R>56gtV+Z>n:u=[NE>761ӄ>G; flCYtKӛPN!wgmNfP2rKŌ5^Zkkʷ0DmbGJ\sx=C/r Ϻiy̋û&fgLRڪ9&eU3l{>g2YNNyH:119֕5D"k o{V:>$K8*jxSlݼZzbKxC l̓lFC Ffe1׷0C 2&Ap˯00q=_'_j' ' /gQ7|A30k!f`O8</SaC0K40~i?<~ݐܩGפm ֲ{s~b5֢PZ%nܰʳxܛWGˋ 0:VAI,[?E !:+_w u~FH LW>5yɆC.yZ〄o$lIa$$>EcQgبNwsVP,}On0T {٤䕦Kh7݃-ݣo+hm72&AXndȰ}gv6'#1ˠF;vǶryzȱ_,̀0'f *n7@VNhBJ9Y/Ԙ<4J_Y@"h ]f}cК ,Z%fktk>"bhhg$m wWCuNwl_#`w@߶Wd{ 6 akVRiu.Ƀw,D›u6G&?'3lr'Tü+Nw_e ɚf].-XB 9V%eeO/MYn§u0xOm~G ц\30Pck׾:߁y"qp? ,W`O[)l%SD!QG(ǂ SgϬaDiJТV]f0ajYVG6eԋôvXTIm590*ST;NJx52_Zib3^?Hu[,gݖ}QBx otz?y q  Y쭅"^N'P=/@djb1' =<7>¦w!N2H7$N8vb"Ȥbϟp/!}ypݑM D  ]@)1%aUĘiRrO~_€J R~V8ryB ȹh}v)t䘟g5K! ~ފ gSA2~;%A`f[f9E&Km|9B$ގ_ƚUMz+*Z~¸r*f8*hUE 6j >n miB4!(rBkkFA(Z+m@ {# &~[.\?}I! rkndD~Y?{SIjz7t0X@"\΀tig}'ls2UӜPe =2M \Sܐ幚?io~]x;h Lbc:("JlrXu݊`ho$}~bc@.[% ,ޭ_Xq-3(E-gr[Bo-1 H`;_Eh[</\ \u߂WPת0$4ry wYS?NZ;C/%A*2'wC[ @ԏ^<| ţ`^Ε Ƣs }O?owzDވ~kT;m*<}$+ 5ʗeg}ixp ;]01h@£=Et{vTyt8o9W;Oa:y97<{ĥ5Sot{wѽ[ܪSy|ϱy˓6BwF3XK6>mOou?z I?l55kN2!oT Oirg3WfOu &;vٙk)`u%'}0pЂ=Sw42eծ0dd)q֦ 0loSidxdɒ ߆(ejX)Ș˧mm }韞\s ̻HD⻒-7q\ߋ ,7 1V(S`6Lޠ `aPvuCdI%!( Z4夲B1PknPbJbAD*(H !x &xASAv"'"gQTD߈H$a9X#؋AX:9hVg87vv>7a?qL-' ^P7xw1} z>mi1ld|OpDb$߳HH{:>zJVxY|`/&W^sBA`pzKV<\\010z\(C1kvu4׳{i|lw^#|~Ƣ/^nl9odz6>gb>TSh:'Qs'pif~OvKыq=6 MS7yڦ=΂֣ҹW>-/XߧyϐoiOucj=c^'UN?Nv\?mS?? ôrbx[ Db{<\b$@t4Ս+3`(TK@ěcFԙ?mrA/ dc֖gަ|vRDVmg;]ckS pWoL~w_֩1QRN7?֏n>8qKe>{=ig9YD? <Dq[Z?Yy<4JV9(0yC%?Wz'Ȱ^w/pd}+$KI|ڐϪ~,|wS'jRL';_bgss4d߆a@FFg#GHU{,<Ր"K$=8pc PXL{׸7]B ρ̛22pt$es;⿫YJydv-t=:=.i_C;_'{OikiGay]DW/6?/3{';YEpNg(rOc1}Οpdp4~SK[#[o۬4=6"o۾aęu8/# .qyPL<]赹}?-{?`?@g;o'I>?Ff!S{}_&㴻zI͏1O'|g/39P zߧ}n]wQj>W/|o'\vq1EbGN*DEUXV F;iq2;ˇبԕZT%EPUEb>J YH$qCV6nGSrqJ:a뽵h\lȶor|;^ub*V J2f3>_W_u32y+ɻl!##y7"tFjRoob\ ˂5^7TxoukMn6<g8_I[;nݾ$8-k'K/M2 sM~_O\!1J;!˼~R]DSUvK/?`XR)2+s Jnc~)z@(ױ\|WuTUn2i z*)FUpbFT`n#Evj'ˎ^XuMw Ƥa0y#^Ti[n|vK*"w m3VxR+$|~՚ ʟph-hY_UpG$pHA!N.*F$L-3jYI"07Ԑ,>O *S6Գ>K8W[x]9%+v\ύa7i ($YQV mLџ}3&X+uʧ_Q@7;Xb{jL4ڲɶ' ᎀ:|‡MEQ53}) d0${q<~rib`X4*!#AK%|*VOv2a5_ p,̸L2Q/VBJIZ(j&A4ˬ3D b?G˥B9-<35v$W٤f]`m$" d#3n$Ņb-"=#!PD*g< Sg!B!1,O%)V鍷k jwm`-`)R#6;.eWs ysK̝ugaq= oڻg%Y~G?x\~I}o#>M_OI|^Fo3G#%@*Ŋ¥bFG0OT+ Xc`@e0-Q$JY3pJ c;kck7X>{NCyXur+{~^qGCKH|V'r:,rJ?[t@* c $Tb(L B}C r0 D`:Wq>}Y]) {G̣}]aa{l/Ryv^ {+:vg͗y(@Hd# 5~%frG5^ 'KolۇFchH@A lg;yՇ3$fZ?/cj=kw5ۅ $ T-JH ֖)\q J6Ꜿ9'7}oph3UĴo֮[o=&js&]m|@G?->O͘p% (%`TYV >lBYQ[&3^ W6@a@vA"I|7ӾpL_߿QLN{[Se~[pf-E(¤ C? -E!F JcmL }`yvHfdVIm( Reo?s{=+sr1\O@%=nyo7wpi{?IWLNM t"sR.$H(=ogv":X$E{birJfUOf>UGz4"z&h6!(0ۆQ ^5^+.˹:+'nE]bxwOopBUY١9IaYa\rQEW0̰ɉAZ6h42Yph7OGy#9/ ܸ*[~G|-iwL* Nr*aZB eBPQ1oF`f0}2jm"6%IF[B" RB%Y5I2$Bs]E@1@^6G$^ QRJG/ݝ_u߄|tf9=$"kXzT) RȰVB(EF(|lEưE'){MRZhT-("JXHvBa@@@::->i?Eڻ;1bI%IJBBSh8hb#* f.`z:ʚ a6ubH% H]1[rՐS*B Rlq"Ź37rLcGYJ\jHc  ZS*L P-ZE[V#@2;kѵeE>񣎳g@<#?=1r1C& BA(}wORK6R+%JVQf11z_'z$PdUVvӯrZQ,J@BD+AVF ʑŘS(BYUDV32G1 PqwVҭ .o[+cJuc6BKd|"$H2VK PT+%R؈E RYFT1 hŖŰjDB|2Oy1K i DXmh(TFZ6S*J2b4b 0 DDmV 3SPfHvi_g8CON֜XVXd[KBXf[[ifZHURAS aL\*1;?S_uϐ5 [TFʸ)R%KKJ(R1hҕ^r aA!YӒ(@}7;tۚ5 *UTDJKmX $*610nh흞i`Ɵ=rdӤhRR+O,FET.ѦrNrQ6W/_w> Z\C ^sZ3*SV  H``ڐՠZܧ-f6?)EAeIK9`\ l݄`Kk_[u9_EhX[B),30w7?W U}4TDi\|dT)MbAIe–k5*HoKlU!ZAT‚ ml ?#Mfἲ+iEcUm?+[<kyui{.T"ZE $WAxZ v;Xi *6Ҧ?V1)a!~mTR,wY8 1fOS]=7Se)Q{stXfx󤘙!aO$";8s>6mQR <3Eة׏ýnxX.4\+5j, ufFڥAFXL(q&kKR|;Y[q[c?9Aȱ~oӄT9s,9x.hj*AڙLotӧx偊qXt_Ȧ:`²Aǣ u溞vӌGPedtM6A !&PA09S.-T $pؾSd>r9~}d4kۤIc؛$rTH2276oxfL ?^~N= zf$ )4?0/|Շ"~#ȎyGmBޗx3HE5@ ` ]7]'{1o08cp~E:{?7yro:Bt~olozw죸O5=F*{>6?mlg|Vqv%:[*cai򲭜=m{yfgCJcUJ%e=C:'ud-=X2 `Ggx;|zt >Ff^{| shnӷi_>^3o=G6s#.?۔8_yyP _ vP\1MTbH2<0k\A$B\o|\/މeY?}y+fm-Q[#e5x۝ d*urV0>m|N cnwgݠ+OwRzk3]N%HN}OfӽWExν7J}X y_ xzH{ u6Tǯ}#Z eVXKjaꢔ!(v5$*OJ$$E)AIJEs2RW袕؛ܴALm»mNks7BڹBQ+MT$umʦD= +yՖwUS xIRe+J\ `N n:w.rv3uv:(vu·zOpNN2*:p Ʀj KMwN 2N洢BviVM$۹Kmٗ2ӴlڣGJ\[ %EQn}`RsnzER DQ Q@ SB@}^݄\ڤBvن6ҵ6+ekgJhP`Ut(vQ7qI26sΨAD#FV(@:JR]cA (꘎%@Jaӹ v Ó{:SOf;xtNz*I`Pʧpnkl#-J)s@JHp o|h^o}>޹Qwrk{1%u-}Ept wިG@)k7\T/}T  tSr*ִܾRj\vBE P$*z4JUQH_-\/{=l/VjSfZtk﯀:3ֽkvO<@7>+x"}(wR>{o3R\e6TUthP+֊J )޺ݸUkCEXrP;n* ( {pk}tiBmK[}f:^V|zv[{np^BU4t@vPJ)=4(=4PSq}O_Aӻ7w+m9;}׽k}q9w`퇽(: |Tz@'Z\Y_]_]ng}sN׽뉷;Mvk+;+A^o^V[_{-o0|o'^xwtl텏JbwEA\o^wsd7lwvwXZBRk}`/"i &L@h@ih @h Mib4`L&dѣF04L d'ѣM4dMA&& h1 TLM2h 4A2ML##50L2 SSi=#j(4BI# @2騞) 4G=54zj2ɐMF4jhj dhhhi"D hd4FS44ɤ1&4ʞSF#Fi&4z~zhzoJ~T6O&"iiR"L&2h@4L0ia&!M&&L$2b1Q6?l5u?f%Pc@YA"(R&*18?Ȣ1!錫ou>/wepopi;[mQmr7&w_Vyr$8(Lqן5CpQ]WyG3OSYoM[w;>8E-1HF1E[k߯JrtQq]ҟmйi+mJNX6 ݊;\xo !1|j.m<E/o/Z?s=1QOݺAJ1 PD ^:C+X:nm-o-s\(b%Z[LNdrfk*F  x9-Ԕa3u)IDβI&/kR۶ .nU3̪O7!LĂssXO1Eh)ݛs~PUX>CI<ڙT({ո҅˻fPۯ76_CUv;5Ve yϽO{R(F  k8 "~O0[ imwƳs Y=Ҷ)pwX3W$~e>-ö/YKcu KzA,[~#k^&i6q/Æ+slqq(RV? uǥ΋`)U^f=#|;&UcrW(lqٿ VA4/!>r7rF_n}}۸Ғ[s3%#M(hW6LyWUE{}$5ݴ rNCLj%a ET_OɊO3l4S?}P6rs cQjn%͝ _ͦ夁ĝڶoo.`8o+p~Kv(ǑY:$N֦F~21`\G(X;Bl>n)zG13U &4 `E`7v7oŴJ"BDg)+S2NRLx{f\ csԛ^"֥UYp~ $w?:ýV%"E“5BYݗI?k~y mb7ןX8Ht2v`5JqI:2=yL4˃P9+P_S0+h@}9 J9ť>iuer@Z@FƍaHR &JyĪMb]P=~3uu%&l!FŤBpt|ePP@XUIvVi !+| ^GeOw4Iɝ=^:iԦԊ:ȌLF 'c)Ce;^a$ %AIn"$B; huvdq`^r^e+OEU4|gԂA H0  ɔ> '(?s~Aod$[m5YLZzt8-'q%[#8HXVP|K2 1L?ջsc7oofockRql!&U[swHgcͦNrb'9V_!H}2V@~a CHCL`2L[}R-k=W׶o%F GwAj=/׵/0ZwYj :>, R \L!dS{50ҼHb׶WVVad,,NAMBWc\i}*,4ِy;4a:2j1\dWn4_7ҝn!Jkzj4o}NU|n2!m?Z2B5FMbaH/E~d~ 'C=|r.bٰ1`,uAfUdzKIa<^;W ܫ7a ݚ}Vsz|4v>UNi> Zc)}LR*bLbla8Jb;_B#)޻!/lU7׌žr-hX5wq)/?Hz؉HHWaq@@-Y08zf#T;ڍBϾ-?'W\ٽ E ͫאn L5O a!!HaD 0DcDMzdvg8۵ ͑';tO #^;vv۟=>D iHa4s1[RW-x3DQavyM9O&lo]@;!0CDFҔ!9I)CL(,f2míA}3psڅ2Y]\tcdnm6I+Ŷ'mj{_3l{=+bH0XY[ß%No+ɻ[:IZe( DIՔ¡8]4\e˽諢?B>3]už{ԇ+eǥc43; OV2>5Nd,;n&*$#2%V-`J鼿/ׇQ}9+SXuϲ)vu;0}wʌ!jo3pUBlzGG1[2E?VVjM?|۵FsWSi%z3|Nezn3cp/I%.TPMH{?ưlPgfU]o7鷩ͽWї>ZETDo9N[T)ѐvdb<3 ~%dدa䶯澭\qwl}Vp vpќӾ4o07}3TJQ{RC/fPU zX~ïK\bb=ɵ.XSfQDo?-_C %BTNz'ðp@1J~s/>^XG>xK< B[A  >ŇͲ&T(4ێQ 2 hu-FuT9l*" P 18`y+tX { YZc0\b镥qt !D,;=cty B% (@WJ)qDRBs8e^ҾM4sL@bgt]SmnܝCQAY͈G\0Dc*$J>=3ddmKz=Z@΁E;4ٺa}1Asiٺ$b T{Zo1]]}0W> bS qFݣ*m(c;) “9L"RȠTYP uTD)dqb(UJlvNPKųos) -O.=YI2Ve1 Dҳ  0gs%PR^14s3۴kY F Da\k [hTK71GVnߖUϧi q]uC)QSy9/3 :~|\ \nŘdeehiʹuu(,LWਘ8`JADX@fQ)+ᷨZu逢*wya'#V N8 'ԝ?c{,{Gwȥ#1b^gYx8 0 0N"G56 <ݽ ū   !2qM6• ߵ6k_F<q6wIp\p֟?Rp]\M@!G6x9R5}?#ko|qUp>v514|C{o+cZ\]N *JV(e<:v3ϊ[F-ގP93( @R,`( kS]Woz!˨AEmm }w]3ȼҳ Ŭ=,bDQDXQb"ŋ43E2xc ,UAy| QԈ 0 M)_ό7o|NFKc0 CBf$…!+>Fӧ9w o8 f@Iv|>B)o6q"EM[ӕ{&uΪ35`~r^3ڛQC_cWlN+$njMPw*1Nμ0ATEDF @E(ssc' I}dͬSZR DI]QH[k#ZBՌ(G/]/k׷‡{Nh{nVNf)cD }\*Ztv5oR<&6#H[ۦ(ƙ~@-:@! f$CMѴzqW\gnOƕuz]$e^qO" RDOGuBC2ӤNucAksU V]4q,;&)e@*P,>x0r36_mS_tO'S3bݷP"6DV*dQc,bEUᨈ 1_mODebg*xZ ehtDLV((2"& 4si$?xw7;$4ec3@0:f |EV̵eH\kj ",O b ǭ̛ZC#"{Rj&By=} J{ uA6 vW$rnj`Eٳ"w1(ت_[p'n0:\e@43eGλ͊]Cu<좮ڬUP^QEAQԨ(+KmTM+ĄuIti=#}3z"ph@Nn:CuU$Bnu)Tso]ٮG=^ᄴoN]>|_ TQE4DXbUԙ S,Uc"fZo9j>ݨ!ńH=x B^`!nPkiWeYr,`Q~:UL;sO{%A[Ts'^5hNtQDJ?@Sq6L}AfbI(ݱ bPFoU15lUQb+Ҡq jLlrt G*]7OA+_?%0͑40)?2v9j7][o~:WTgTK4MܯCf]S(T-Ff"ӷ}[{ǖX@n[b())ͬSc\db "S.Sukl("є"jj@'wȪmA,LŶ3梎Fe q/pn߸O?lji*7,1#2AHP쨁% ǎXH*V'D5^ށUK7)^1٫sqdv;:Wt|L3*Ab XdSvnlcd5 v$D $ diT* )F雕(u!A.bpyF+ibŗ&: ɌyPXEĈ"]7|vq2j95A*mcHFY9Q1z|C)u.򪻧{-WZRKU+ZܬiIV 63e1_.&-yCh)o\&rjIRK~wfQK,W]f^-YCm8lro3 B3 4BZK1pE Y O}u78WWR78( ?Cc(9ptz ח]^7 [#l9FS$=-p)1`S``@ !"F{kT$i@@9тeB"P'E`ȣ"q@%ӎ((P=Ysm꯳bmbmZ =970}ihR[iLjg3)*zۤ)).,aVlYMS4sh8T$Uف>m05pK<07H )"5ds( MYi !,+Aoh`?y$4p2E,,pw4y1UX{37y>$σ[㵈}ymJ04:mC*KDnz=_{`j raS@d1YWU}佁8FM"&?B 8'^¨H r[%`-=7{O-_6ehS2쪨Y-֒u6Q䰷zq\E֜qX3#3OvpX(B[9Q~Ӭ讶d(VcQSN EC_wF@,ʹ67zoY& ʮ[/ixa63D8Sjjv!/k A7sXbvTjafd~.JS PXbF$p!G tՕ>ﰿuEE/ljE/)KljvE(EuqW=|='-|u 9]wih+8}lw WK[n1VOflJn(-U?k/_?<`Q'R09,<>oح 8X.r1Wlu#ҿ Y\֭>Fq#[?[v% >eT<=tnvoserr%?h{6Z2[ Dt~dOR|zt{.Wqy?  ?@&"AP_ak>'rY[5V# DPUyH2~3)d`V$Ha9!ϧg_$Ш々I1@%If.2M*}J!B^7L*f#\KGX=,Nh՘PfWfTG!ٌ U2̷;@BcYIU4;w]t-PfPwY\E% u?n ي"7}>T)]zi?n'Cf00kA ^mLQ\%fa \ w/W]ggl > nF͞]xD Ҁ|υD+X .A(P3*EJ'+!ձ<_ĦVO}Y0 k!օ 73S?]8  ;1J Uw;c4kQZk7 pQt畁NOn JJG̮Uu,X {4Y%k}7*!,ZUd{,h=Ԇ8j)EX)RSV|=קtb&$Stz.W,2ZuJU)3\\q&0'S~śW|0fX+:w9?_vQm_źQ~KAl=˔۠q!('\/ciu% Ay@}MAP9s2sɘoӜNǖp`) ޅ 3J9rwbWa[ӡ&A 2V:EYG,k=,>*J>U˅)8i] 4<??m75>i P/a=֕-kGeOXZĜ )An]7ޛz:,^E" m/e *Vi_'?=ʌ)KZ8e^Y%jwj&SleVi=?h2+`,$3Ȋ Wsx!{ _9E P  ~ dd9Fq iOWmVIA HUf'Ms7aKˀ~~_j,]n4}qx$ }IgSS8Xn* .͹xvUXimNje6)aH UT[ߵ5?!읿QMV["ΦiJ7gsyaETHA@VcrjCLKfP9ogm0/A*LJc&y~dD'l̴mÈ z8ڦj1B~M] ATT޺~tdx1b|ʨxqm6}uP Z֜·6r@҅2بǀ.z.'f '0lj~ArPyJ=%qRtlsEr/0︜ ǷC4=jՂ +km]?G : WX<S(W,Ip񾢠aWƻ5NӭeS6Q~RK|OOY$&o},P<;9 OSܤ1їJ,$ƌF*2bL: gÐy8Ѽv0h5MDPQUa%4u1quB&CL1roy> o]~ ތ3 !sI[f}4Fwj2KB Âa_m׼ITc﮿qŒL%?B7ڿlZR,}_{?WV~+iOm;N6Iv'W_jnlpadmܾbwD_y?y4mGJP/"^:"?IuWV:y;Eoq4@u {_IfYp4Y⮕1A ɱ$'=0|3)KWA2-iDA!78߫RX*=dێi;XF*)ƩQ2W;z<)Wu8 .:q̄#xx~w_}Ks2Sfm_q?l[v 8 I` !$U· @ gNaB`tPV*+m:ķ2(My"m"0* "}bV'I]?7_Dh 38ev3CyicVTT$$i8^ƣ0؅B˜UX JwGs /]7|TTT %gY02+K(;c4B͖SƏetx=敦 i4+,  _{PJ(SxN7, hب:{3xS %TКc |&5!qz@`l >i}z>vn7h^?_ڤ Hb#Sj;TRUf u7¨M q *U*q ti S*Fӊ{* z)@A5bdAMj)5I_̝RJ̺as8qJ9EΚa?u[,_-@RrZ-:̍(4c UpOk_W}跏^MEL ʖ%kS2˴E$J2VvNL V"Ra.:h)[Jg}?eڱ9+l\N BVxL>r2 Nc$0 џ? JTFLkiuiD.eIV= q+\ YސRce:-!q@nztsOmƵ0eyE9.ҏW\DNaWv7dvA0oFC}xTyQ33gp(wVsZFRR)CmrT:_i4w]U}f:gA!2$mI*!XB/="%\@,Pn:Ոwy&: %^C7dȉnG-TT /7/mS+[~'s_{ЫuN fs!&@ةu'jmU}C\IsE *A u噡_~wok:c>O4|ƃ9Ӈ<gR{"E.4:NS8f_׉e>dBU52MͥXpT /c>J,ac˴^i|l-kE=o"+ 8V0(^˾9#e538U/H;n߃&j`X^y/aC?SZ 倦9~}]"Z+r]K O?mȘnx3ѶŁy?G\8 bqbV#1Zjx\(nݱة0%Tw:>/;޲hFAiU}6ԿשM=~.>ZoQ")?[;}\r ,X]p)-D5.wC P!QZ\IK&$#r\s% ?~7S!!VPS\sfk~7L̸!ABհ]+7)Om]K^xh?v*̄9y0Iewqѣ'VD>4#ujJ],#a*Z[J*\4V/ͷVUκ7J~54и$fS2c ºR??S?9NGxӂ{wϟܓ"ڜɧ|c`Ze>cwڂESW HjR<0@s'SK ;yN"y7_*ppo8ɗĠIɇ{= 9XkVcv*+UΩU2<I,Y8wi] XH@b2:iv;P´Ʀ7PNJ/>SDz@[#(F XF_5"L "ȭaDRrR,Tc?}1iq*4.L5;Xp ׇ~nLΠxvQaLؒ nBOYؖoU,n#!"cSF|~vY|B7y۹Z" nIrRSUe,+vMFJ3R ldV@$!̰˷g|Oԇ"@ h`Jd$+&}D̐ Ǐ3)'S C aPS̾CO+vwUv#7bC?)qXC5.^[1FzۡBcվmCz PƦ!elMw%B33ʰV e#Ns$}8JGJIU&_kdk̎`-0dH[JEՉB U] ˉ2v*Ժr"Wf8WQq(|֖Xxz9J Ă[eDԷuPr[)hF2D[B!j'I /+v܀u5"fME@K`ZipX,b"@P0C_ޛYMVQ 1*1'bN/ھvVgcNp /~2 1;BA]b,V$AN%LaˮIWc[9_`S[S* }%Ȧ.پ+J tVw/ȫޔ4p~q$nR+2 ͏ )Ό*^ MT|ӼDP0#G_jGHk)/L"'M`!fߞ;ޛ]>>`OZH)v̎MW T$*i+%`jFm-?q "/+2h*~ CIX# XiK 4(eV0ķni$NWR$RІIb+"3NR_6;HImeGV4R'hl#|h A#g5ݖ%X"[›EQ\o9%M.^Zn2+O߰g"y=.'$>{=Ƃ5vF.K?VsY3$y¤073 ԯ016p@hYF̡oN|)DO}RIud'ou"SDGM%)oS2WW~ Oᨵ$$'4ܝ>T*ڎK~a&l/{X Y>hyxz1J& Ku #y I7Hv!]빅Ec ]UUYm & `̰P.VP%)ߚUђEG͢wৠT2OoYwީv?VԱPE\5ؚJE- 0M3*'L[ M0e, IWى".APl6ʵ XZF;NU T (/z \V˦ajdN\Q?QyeJYDb'qP-A5гoe=W6Z^>bdT̻6uuڜ[ZUJ&;~%7 0riC@o/ ݌9!{GrJeXT]y7PQptYn\6WZ.HGķ5T4[ e孳5D578DoW:Hp) 4CM,ҩ(g'?χSZ3R?Kq,<4M-tN"q|0Sb󻇇)~5C}\ W_ 'KYj&sI^* svòsԪ1R*CR-fsy*i߹ ܿI("̮RVGMߔԲ>B󸨡ODK[:ɸK<?${SM;SvUeKp^zM}/?  kp9EI }QYXXo~0.u-Vk_rID'ZPc;q>O^$r[(нMĥИ ^CMC(Y_r _}8PtA~h.LBYBTAᇖR3M\R_k jG,eaU;avS3$g蹈4HY گE_¤џ̤m,rjV&xyYI(?BTɝ{gGd3envNHc꣺3 Lنai-U. I/d-@p\A $hd=φ!5$­S$#i0Bm®~đ++*B'R 1[[ V(M_s:tȩV r9nh+E+& lc xLFڋT)EkTH"E3XMRgLg7 nIj GI/&բ!Ѓ]:VHS-XQZ2Aw"J˷b yhk8 ӡrZmT[1@&wkua.[Vo~ RQ30X$1_dY, ˒|tX(9M:O(q9~/q:nB#<%eu3;ͰPJcD/k]bN[P-'tslUsA.hJ}5^X' Fq /8K~z߮:])k$@+sT9Pp.\ܻn-~|}/Z5T!x&zv߂~MbsfʾQe@@ ?^D?Eq6r!AΧC1+] ᫽'=J~}Mw߱oQP )I8Z/O5d+貹vZ=zgݿjs xl:? +X5IIS[y\mtijeD0@ B)Cv2|wz=x佥t*H$~sZJ>cM`>Dio1T{oRB~3?شE~kkxϞu5_ft۠=~:, ~O3ta \qMl5+)jGeȕDX}MMVuJ3()/\lH!L d+u4#j v ?1c{t\.{ wgq0zT%PI>$А̔=qLTo|(*ET y`c #n_-Lɭ;ĚC9?JCN5=޵P9={2orw|5 p%%$ UPuxG4r@_yٲLO\6;O2DX~ YU-5:տkÇ,~>rOQ?g[M;3 VhM/}FM&PX⩇Ao]FBpfuTsKlYUXnb(n{L4֘eD!UD%?^8?"N;hya:YiTp6 ^MOܾώ^#.XD20FQ2Dm`eڠJ.ȣrq-b%!l3*! "TڱjF3F1NgDT1OHת͸E6|N G 'IADKt$0('[gE,C$>EA剒IT =掃]KP;ZɈE XZaM"RFJ}-c~%$`oDMd 1W(7d-HCY1n~1cNw[[͋,q]@3۾#%)}Շ-(ʵ2#| םRj[o.wW8\(=w6y7OfLWBT* F &6}0A*')U{ZEb@XCIS3 Ob\ A|_BW.hXd\Hq\Dta*Eb[B]*F%;E&l15ա!#`iӥaw.ФubmdLXd^5UYF)e.Uijd12 ˢ=BUBKGm $qm*|LM*;R̻͖jƅ0dh`Ld̉ i$"[VA(Qzy_w6U "!d"3U(mhֲ;ͦ M3bi8 eAb$p X3JBoE2Uݥ](KQ,Yj2,.%H^tS2c_;l]٨ Z&Vv!b! rYnA Jf94(&`6eX6Q,WHS(Oe8 :N曌UFjL`n-i4k1㌐!ۧni pVn rDcF!loC&ٶN- 2i.BF:eР baA#Bff&'RJtPUKP+jJ d#&*<)]H()JZP;7dmfń˔ LkXb54%VV ` Y$4 $`Xb#uiLM$MtT 1!!*bVRa.1bD݄Љ*rK DVCp!(F&K2J ֤e9%C؀wʢ mVe)Ym˪`@&52VQwi:.] 78LL$bVH.}X<1pB6m[&k'aHG%U4ǟi;;59tVSWW)W; Q{)ViT(syZ5l<_8,]}!HK۠qWmo8Vkj|<Ŭ,T 2Aa: IJ#M\ +b esf*ovܕG>JB."z6^^ ErPf.!IXD_+=^ln]6oS*@uHw*ir2aդ Kֶ\u/_4Ԋ5P9)*ï~ݱ#oz’K^J?+G13KYNH8lxљ^,fau,E+g0沐d>ၻ'y?;vƶn\rn=K,q0DC 3<5xDX"ΝB$fW[F-9B[`̷jA=2ݗJUE*DcTX6;I~F| 8XNڋUwd+JBN(;!Mm 8$qÑљ3P#2Z!"4^خտEizjJ3-2(Ih Ne;[9s퇧wCH])94dei0 mWaA ^ -9+aYyx/[ 9vGzt FѮ<24,Ge@n3O4%W57Vt?oZʔH+dP75[S&Q4ǫ<`!K FjWqplL-iLhssZt3V&R*07ö&V[D!TR£ǦVr؝&^v_ZUY0ߦgtovV |vTŘRѦ3iv׉M3uߓNip(7Xs|)*QTHgj/^N ƈ$4H n(dV]ųUu朅=%→El3\oJJX 2tREJYE"g-@Һ8Zaxf:{6}RttB yc ؇~8hvhH%WaY{WbM W~Pc_t]^#nxOc ;E.{pG ,'ѯeN,(T8 u%L2fwa/gMpS,W/xi&њEǍc#[FIgXjɭ-hÁRJݬrG'{d"kv֧Y`vRW k ۿU]T- jxUF8R#׉+[U+# ɳIl١ T] UɧbS~Qʶ%̳62׎!)ʱ(V@@` VJVzn* GLn;zf*7LZaDd^632C*#K0y2w~Ʊ*&yZCLla+EÂ9X1WLdh*S2D]ВK.(Π^)bus_%x3\jم 3UqNp͂?~/ô%cRtYzkؑzƆrz:7(ouzә=- 0uX!nG$YYTyH'c99yJ>o U2μgavMJx_uNR6 j57 R҂ u *dL =jcgQ n#sM>3"4+Y;cnKxEՒ}aQRtXp +,KL(z;R7TQio5D]`d/Q2F P#㔩=۱ |dًXXYCk\۠BB0M8K^38LWK Op\caqHjz4wB'IQYfEg XJ/;DۃBCJ.W PlD\Y>yrQ}Z qwVڶX(vp)}kE<>]90Л׀ j_ox βֶgl@1ËpYVI9SX-:qm/ҫΑ.\rlh71b~#=y,+] )LP 1Й|.ĆK%YQIxm`ɟ!x72K7%d!d%cЋIXQoP , ):'HO#YO t3ΝH8"eKRi<`G,b]Krrh1G)ѦgrP:q}o/f{&wv|v6y٥v]5+Tr)lekZХ:R"Rs" 9D'G~aK7{CZkVm]gIz(QȁDv]ևyPӢmyd(,mLy+_i'cV 8TʂI%qbso%ߊUhИ`T ˦L2[$sy&v ; JpXl!W(ݙkaXv \y/L9?:ͣZCh3 :Nqc@oɅDD3x"l+U8Mp1;6M @[ &թuZ6q=KqhvJ$\<-$ӓ +"RntA ׯl\{5xaU$6E@̤k*׬r+* 7MH*CEVRE* Vx_\uDIY yS䋐A2cOmOWU~4BFns:;vxX{i%{@kj 7L|y%.ޖLxS-rAF B,aȽ#c7> c~l̚, vLD)<+kaMP_Uy/̬PHMV%3J 0%a"3(9HF"RTN_Xl߽^;0,{V 8v7)AV)Fo0F];i.F hpr;h& Cr%Y.2+1ki@ҥ"|ct%^Iz ŵ;0AXrH0΢L&@*0AfbSV _ Hҭ#j!xGV6'fՉxe0aEVu?JѢuiVYXd &gjyP1;nv]ǫg3xK# @Do,˻jӋIYְwV) TL̎q-Lscsgߞ:i[\%vER$ \ӾM-Z>i}}Iѥ^\evEZ p c%Rs (62aE>Fy΀-sx@LKIJLU\OݞêK^%K8P "bFY[Mp-dV`Q MX-9'Beګ{vuVE:m4V-5dibӔ)=7л>0AfR / b $Tjzb!-]\!':sWM۞SÛNԊR³ֺZ%˿ؗގ -i3f< 6Ae+Dv,A^{LYF&`JT &;g#e"atVUS ˃3͚s,sV\s.D]Kc6[NF3:"MUhJ ZW2)~)|_)B142ZvbW'}D`QFNp$2=$J, خȃ@+$t\ $a xqp&.i$4T̊eY %AmKk&!7a5%x-+=uQC}KޖSnN:d[v,)$#堪vtXAzi,W7C* *Acx!/9džCk~)$!3LkOP"M'VPf,HcPJĀ midN 2^FlnuuӳJDI;3=Zbņ%N \sgp!#jȋs@GԀAiPU@igMHlLa RNtnm 1DFpBՏ-g,HeWm` @Ph(X:n̹6rJE $bm)~'4ŋtoNegA]pj&*PY%w 3te²\ NEX I$7N;)m,}&I\k)Pw^@_b(`R, T\wcn3ђai]:m܍-#ݯ8M5ۿW.5QApl WQ#ӻ mcwi:c|qcN`VAd*X' 9" NRι"-(}ňz~-ivpP|u۝8ǍYt{7NKOiyHqt7Q-e-M IO>ru|ݾM&{z:۸ ]J;''TaX2́`[3k +K/t/6ԛGiu=N^շgGEbƪE'諱vy99 XET'-E [[/Gj7]H.sJ_Ew* Cx`cj0vV BtF9%&0\+- ){˨\4Os4 `2r5e29w"_W0Z5s*;}Sl bHF>Gw0iEaF  "tO9Kk "z0z;ETY9OQ(jGګ3cTk7Z&2gعBDݬpP C#ٿ#^"E)<"MDAVJh6*erZ94e"#'j^5{"VPPuUK757Tåg%:?5kmN^⵳{ QFh$KW^EC6 X2=Cs(H Ta^x}ݨ3Er/ #p9e]&!wV] 62YSqM$dzuI3a#ki"BThX)N0I@0I#[2*u,(TC"e<TDaj dR21]ZdQvbRȼ0(4 8$ıdf-v$l ilԜUMcHR.S<t[.P՛ry,IR}H6}^sUB$='w/#gXv( e1+|]#yRD19PplhǶ7xJ]tdCjwެDu@{Lt[m1a)Z-/ݦL֍j3*?#h-ɖK[ )AB'dQ( Jqʕ[zBQ98X&2D - 2 ;N`j^o jb4yhXђLiۉ4$аJZz`],7aS*\ L7i\˂I)̛9ŘȮY|ne ˸.T F ȱ 5 T 55IZ+{|wkbIe+mimtSEGMq*ixd#LQd B ',+4]h֪,d+&!Yv+  H .uJZ]ȡa+WF4ӛ- dXrQ3b;[:abqIbRƠiKs.f1pثPRHiɦY*'7M!8pf$-f m >_CίFjRCeŕ yneRbZS{4~]yw}tuU~ZW2UwBھHuIY08s:ski?@zqِLa"w,w, )aUȊOSýx,G"NnIBT#,QQA`-!H qFahޤHX).XnƢW5jXjM b%LMi.P@uE5@clG5`Rm؜DSPOcMj:wwM2Q]XV@ֱJb * R󳞴 jnQdPiWw(&hzYXۗх4z8yh'c7O;mJ *L>GG$4BfV&"rj*#*{@~8`+Y=n+t%*&G{{ti[M5!de& F1ڵ`Dج vx$YӥenS2-T{B9维P{DDX6aEH9"b2Yd.픍[3}j Qmţm\c@Mۖ+ne s"cT RM3].ҢT-#V;n1T@I,HcDɥaQ-'"VG\rX8 9{EVb,pa7c! m3\$66E8Eĵ8("#QTa8lAB$ e+%DIb8e+\Dm5QE-Yx"jf 2ʲƩ`Vn8dEFVT I@pӟF#VDr}ߥ` ͐e B@q .4,,2w[3w N"U}7d:Ka^`m[~ W}mbuE%8($RM$b nH LK@T.RBe19SXXDM2̈FjErN\ZӜ KBŖ&`Ԕjb%鋣Cyd4[9F`JIBN+mTH;b%#8BHcmzaLuMj%FUvjkdtkLt$I,)-(΢+BUE-Z #N:UtVHxut;ubd5ȸ>"IȜB#*i ۪,<~^oCXzY|͘Pؕ̍sswء(V3qm@Ib1 7U[!ZlmQ'N.mTw}^S5O{O'*Ct(ݪjqhZ[)kA׽ER|rXJ]|9. =6yrض9+6]ptA$ 27v̸-c }]7^-cʙ`Uq,"D#D`*:bAA@.ۺ%Q ;)-1@ȐYP6XfJՄtZi8]٪-5GYF::X]PpV,1*T4[i6ɱ13t(1!DL8Hc 2Ŝ< ,LamF22Yf>ǖu55"&j Wcޞ :d)%T/<G$8+b.ie:!O!}TQER \Y6p^?Bvig!s&^_ɳm?ƐNO~iU tD_&8gQQl lTxk. _FD~Dg^Uh `fY 2~8. O z| D@R{i*uŏ9&ћ䗵n6:^_.@ 8H,d0uvsEU\Ա&- t" W#.>?5ww'K^z^[_`bO}g_gMBɑ [Y*)4%{2U=[|ԏͽ!bWv2E֊L5- & T6il;JWKuI,TIf6(4PVg6m+-Dn>ge|/+%Hdz45Hݴ"Ԧ(YAh)Wc ⦊1+(2XʗbG0.Awġ|zvL-,W~_c{jbw"?ꡉ&܌XZBˀv}PLU/Rۜ"*Az=iCEvg3?JJPLUP1PJTsXDsΓ,+*ݭkT+=jLv!.:VHvqh,Ȃ`@|tl^a,|w}Ǻ}k_sbkV\)AvZrմ0.[)L e%D.0G(`!whVIG;PV̀-[eE/mH5pzi3]90U&ȰX1Ak$@U`T m"jҙIX PCW5L&4Q%v$VZ4p90Y14Jw%2ى tyvdVSyGl"H$Q-TG!P$mJ(Bbhw jc*kfZZU.m̮3\8Eje(HTWWQM OxWJtJޡłPĺDL塝7~6"]C$P5ws{lLe0ƢVgJQXMNQ1EMC(-i!ż{O"f ,m* _B14YIdRV  qiX +>q{ILXc/]S-n&md:mQBĠ@mw6Fe6ŀcWیyܮMQіJj $ABnXC2nj[\"[SE\tXL:/vT>1$},{@+$;0g/-A%%!X~yȔswomDy% ǞyG(O5W(4̼Scd5&ue݌sI!"x̬' FLUֶГSs83&F)4[-jQ4XR@&݅r\6Pj!t @CmQ]Ntqnk1H,1i&cNv[ei] D_4HE=9zbH C>\mb Q#p1^QAgIB%<ݵ0MEr>3P?( =],{;zzz}jhυMY/Vkknθi2cM.]X^m9I YYv4 Zqt\ج;f`E F&XHq"E.a18t!` i4򶁤fqBCO &UKyALm1/2t:VgO3xf*94VJEuX HrDže)9y{)`œ^MHbӔ/ wXրURhk(tbweaWHiiDiejT.!aaqH(bqMMeZ$IF) i,AP V $X4,[_̣["]ùԅl*訷[ـP0XT(I ۣ>/\uݛL^*4USYb?I{bTXK^0{gVq*eP TWSEF5ҶкC%KO1`c#mz]RhJwjBdXQ14jj#/Q)uK,kL֊Jqy]A+'+.*B(97 AK\%jo<˓F*Tunﯸb{4&X!qȯùWnBG3vS·Uu:3Hv@:c~GM+_}c-e- %=g $\B %:Ԃ^}p/6O}X`PZV?E[8Rfq|ɖ̐9(FYv<ήjq*OR+CV1.*j2qaV+-T`3fu4YM-TW}gC8:Cz}N*{ c*~w^G2Lį2%$~UOECǹ&* e"в}{$HTWo϶K_l> q2$'›tyk@4\ v썽EIJ!JGQHY$w,Ġ]XJMVh\4e$[)@ e[jc $CR4ri/FtUT PN)?pYu<>N4|ľ#GWmĘy%ny~-?hUB{* /*w<9[,KJt !n!𹎶IIs(lG.2-q:MDa[tmXLjkIh*<֩iiJC=˓.@4 (9T+ߪZ%9{<#ZEUiP/խ1:>4Q[!GzV)Y-,e7x.VZ[v-2n9Nݦ[ق:EyHn ã93\4 15PVUx,Z,[N۹.v{>jAADV*y/pN^lNQMA{/X!Oos*D1%F%FZ͊.RF.@enƚiv") ZfQ͵3,SV%Jc FIL)EIHL8D@Įa)06ڲD|ba},ȫ}M*. #Md*+C ռQ*3F9ztݧ噉Zx3@{_Sv1{BG{2)* VuԊk c].4]}KyT\WJiX%3Vkh`&Ucqe+9ZdoWro 5h;v&r R% Tf ptDGalqR̈gLуAG#s|  ˊr?'i6z4#?JutVH!NK)ҩH19ǫZ_ {}*\7.A/6t2d97=s@SM4{|;xc^eU=UD>yE+7i˼ֻ~/>+Q=0)QZ2G.nS^4({) (Aq-7`&t愋%c6زr(&\mէJzMh/Zzx}^u"'EGJ-J\_#ߞCbGO*_2[֦zё܏NMWY7iZEƥ5JJmKp sV'IJSjH#ÊIAg)4 =cYbq_M5b"ŋ'/KQtݶӺޮVjZzG$ 7n(޴rP1*hThIqJqbhdNGzu1 ⧩}xB] Y=vHyb,z~6w<>XԺ_xq TyIBZݗDH"+ B:`mBM* 5%*) IOvﮐYs0KXB.'3\y`H =s&"g<!1XaǖzaAL.)mB˜; UN0T4Y.pOWA ̅8cF|_sOM\pOK\=bp}KDybWg e̬tL^I ̥)(I\bRf|߲?kwvvVUukZ_vÄ Rv%bлputޟ> [wnbs^fOҊz}*QN~#ba\m#Ѥl"ȠR)ZV" k\oɂ 3.OwZ{t4a('sg{.2$A ^I:9I89%ʂuN(YJ(n$kǃ$0N"vT_R[̧W[ؽn3ř[ܽ۷nʫm+RCaH\y ơdNiYhM tvP뽙_Q#>oVw^>>E^T ‡<_Wz@w9yƭ"Bt`M,8jxm㸫fR:͖K +9@ө{. yJ#3*|&ݻuI avNͶو]$݊kVdx. J۵uX`!ڤa,AꏕDKo|8dR(qi0|)݋v )7ge'XO1,J AT38pH(ܕe-o]B 13ק۹iR 75zNmkvֱٻdr3.EՂG5.(*2]ӪT/zSRqˋh?(h͘,֛ia-KRQ5/M&#gŲ`989fun^Dŷ趜 LhTGSz_5E3uuўgei1֕PSI$W-IT`^Y$+G[\#,R X,* IJhŹ+XW;w|/z+|J<.ɔP,En=i- spA?ac" *{eMK\SX &vy.`d6sL*R˻7ɱWCh557Զ%){E /Cɟs?/c VWy^q،z4"AdZ1&`I'Dv7g\;1 ;"5>pY]u; ;&|Ⱥj]B 喂/ aN7.3G Ka"5C[?#y02f5jkJ rB61Xpf: )JOt뮮,d.&l(vSg/uUkSl0FDxd`۪ >-4'U;<<V40LR~5 \ ԁxZ 6P/.*+,ZUb$YEtQ]SsJ'gg%UzMFV.RrF `9>նI41*,l+"G*&A*:18)>WI, iT)`[P1U>& 1 575Wv֎h#;aUR:ObM0G^jNT d(1 B?Rjc;Xyݷ_,Uq{˕zm~ @Kٝ4PC_M@05kCl<\Bv8Nlܴe/v0CS|\CLBd_[VʩvCYv[94KڦD Aai˰ d D'! D%&GRL섺bICBIFI ƾ{́$ey 2Y!>c]&v@7, ;g7)6Xo3lxSK˶t 87w&(Sd.\ɻ0$bsiN$!̠w;3$o'AגkM)sx) @" bNq42I O ̓!`bL$OvBCa)I<[$vĐBH!! @*B z HbÍ vv2!u $$I %`HH$ $@&@"'&B$HHTHdI Y$BB$d`t2c$rI!$$XB)vM$)B2eIH(I$'u`= !CHJ`H @@a !$f@$$lvxbT责.9\ts fz]Rhmw7C 18!ܺݴMoAP !'/TN %I}b+K: 4!%2BPԀfa!0d|(PUUE3=-2uk\Oc#u1 __ FXE'mŹ.38N&QfO(3KpÚH4ĬY'y90C:М 0T1$@L?.Ub|d4ȸ-1իH\;6-PtC"<HI$jU %l 98a;l@%Aq1!I%$ddRO0! 2j) #ר$ͶI3 $'6I$1&!>*LO7P}#Lz]5JsS6fKӧ,U sdrЗT)+-3Gǣq',wyӉAʍ-U'".czmJPtB0BP Qp"1P59[_)+=]vB{5%%qjGL,qk>Aw:S3&&gl<p>c쮗\z= jz=sr_p" g*@;B~9m|UmOi^[4Z1iwgؠʘ8@zbs͚jw.\uu5r/$f!%$$&SwovvG# I"٣O' oS^vj+VFR pN+ym!PrMMGnFI|܂Ks7[<k{r!V8x:2*"`H$ !%GL]8N N Z`;''\49"OHẈQ HnOgkd|3!sEo"}ʬ.(?syDR cB€>rntU1@xbXT5ܪfizs+Z6J'#SP=@Cp}>Ap $!%CHr=uxp }A$o+>߳?9$i3@!HDDu45,H ;hudo /Km&D M^o8ƿn଄)@ }!Y޶[=z.s2_^U`@@B>>[5Mm>896ں15ٰJaN#4fq4i㕂 '~o|uI;oc>#0HS$xW^>gy.ouI'*dI>=?;[ھ>MbMI;Gt($UI]wHPq2۴kHB1?jt@IUxj񺤄$$`};~)}̯LÈF!VJB:l@ gkzchB&?;c<?o@4nm~'vl$qL9}Bk+ݩ57 pB $ =QߊM! )n9BH`_Oa-n΃F0w&f|~YݟS^RlohBq{U`ayRWę87@&B-@f7ߚ5r@J! N;47|DHB@Qu8?3z<B_> bߧY>&>E2~gP(! ŋ jF#4dD D񬝂L|ُ9n_,7BO1~{/sIz4@  ZgQD:!+Z*rW+Ɯ7ѡ$"f{&? A$ -f [+o}~dH@%%lVĩh bFv@=<נC2$/G +wޒQHLVJZy"S;S  mIL E!>Gw @'S3EK7~ۆHBxHN}z;A;pP LP.Z@ iLj<4=d:HLw7=oz=9GS__O]c';q&\9z/Їc?ֽvK$g6y) 6! k ?c=RCXm;fuktd ,6ȣe"BmeEÂ,rQv.C,ՉBJ癞u6bn55~Gڛx_/e3'Dƺ5K*%rYD|ɻnZ "P6MNǖ{o6S!ΝRZˋ(۠mg ѓXg錣.61e/<{AX~ P;8|m*.BT/xV{4;uyƕX^-}lW']MLlv,̍~|f{W>Ξʴ~c_vh./AqpK'z4;L7 DLft=2EKLK?FSKVM #>%Q^R@gD"(du8].>PC݋YvOJ ѦOc ɀBO>yQs$w?_׃$ hk@@ <0B@#xl^v-e&C$\v>|-Ⱥ"N !'tjr=7xߦޟ0)_wNv.wu]f@Bpk{O9I$Dˢlt0ŋ@pHM:]^uSn} {և}LyE@`VoK]ig 6Rc(!BPuIr7@ RWɪOKI50vN\ ?h_c~o豀H[zowp0C$IRwKqGMݐ-6`#DWnTyIa gڛsҤ)H@ ߄&@$9Ӝ=$/a֧oL{$ c GP7€mh:@~@J/ OhH vtYI #Ԟ9B% >Q& 4^K@_/jp%9p$Q(&$ĀB:\>*ߺqL}!>o?Q" B2_ mB&#( 0:\!T:| 1& ~i'{<sBC&tmjrOpT?<^trcK[X >G>'?hB7PLwS%)aXB{Xkm@P#*]ee3D!m>M2HfgzՍԴ ZV>?]+m=K@81MbWlKAFb6F,Z}6BA&*?.ɚWAӤڟewX6*L58:8GzrsmWVUWމ.^v>dF+]~4.OX}~NbއVuVfJkkY[[z/8!EH]7x?+sx;53?rvSͨ)3kVH}᚞ʝ{0.n:|% I,n9U]% 9mH74gxjѼ/rxx@-q1r@'dgՐ4L}F~h|Fs7 F1f[R(32$m|@Nܔ͟f{Rjr H=tWա!@O[vCp*RI׸x8X[ݷ*Ѥ]8'Hx)u$w>'* Ki-r $ lB3V큟¡qHql Hɽri@ &﹗<ZϚ7h-JLwّo/[P!>7QET{1@{쐊>AqW޽K՗KP-B-16é9 LzRmsٽW羠  5֮թP ~.s/߈﷽@nӨOy8LE+C+LB GUEv %Cċ*?@O\u* ̡<{yQ yvpD)~0% +0B) d- mJ#%ɠ܅КgB>{ MHl)~tLB@ :/~oOSR g~T=mu]Xr\jblY||ԱSc$ } @5\gcN J*]Ħӽ./~/@c^2X?C)Z2镁O<: ه0L#x)@4>uAkf[x'r[8`G^vPx']kB3?$ F:E?->PHB|@bZc}׏Aat]pgbmZP[y F^⺟MF׆RhNq#a7i4 E rKݭʅF˄. #D= lfKD /{콭MRdp@aR=0񒈭_;`&>`q\ܴ^ɵX{ !%DڔXg )C4;ɺ!FcԪ2rREO&Ń$ ?og2׆H(= ~ZstʅHs퓯$MfMhf !"V &9kitz94IIzc0 R!KI$&$edLL3PKm $a&I+v@+ BHf&&ēcBCCaHNH,3{Bi;-ClagngeӖfBu0L93h@ P 205IdŒY&!vw 8@}}]=k؜:?NOBB]6ge0mB@}ZZzO?~)XVNu))B V?%aiyXOI@XOI$k۪1HK oI2s("$6e#|i(ci}H!5[ͤ>y*(Rx+}º}E;/Tg!6!$}t~T=G+ 'a*p EHqʒ@8Y! ђHK!$!$Luo$$L`BcT40$ I!  , !!3$f @ 1i}K$˯YQe6aZPX@j1hܢDD'р@YHvٯ F $ jm!i0@`!3E&іO {}JvB&Y`;r4I)Rm! I  l;Si#3e{Yc=ʉ" >i%b"cH6%*f#Xd}}$I {$N~·O P:}Zf(B4mT,<.{n`6hdhjbq(Q@ x(NTxj6Jۙ uv^9TWWy{C|@ƃK ,0Q!&Y̦! w@ԪCYd| d(<_~/4q{ HXъh֚Dٸ3Vr2̤!*p @!ZKFPDB -*ԜU⑽(ٶ̌32^Cb2Lc(2)"҂FU2L rH6Tud2^@űdPJoIE yϛ%%jpeLw @8zךI,ܲx(H%e\ bˆTCa3lI6$2 Z"fʊX F``F@&7['b :\%d!șH9)d-( DjGN_QfYB  V5RRj]pIvde2jBg$ ki_| RdrKbmR'XP&6Vt/XRwQ9'N b$T:;ʢXhaz1!AKTadr Iw ч9} 3 <ƞCW@kORK?'=AzniϿ$!˽Ь7B$S<@I%m, ͤV؏!\ R8_d@RqT. <@"L-~ 9KXFa+l*֌X%P\BPnX][."/kD֗8 X\BD" (b0W-*ȖZEL!;WzM0P1&T3i9vNlKqFsBHU)hQN"f64aG\S#}Kl[W>2jUfJU5@ ueb[UF ifXS),A2d\\_l$QA)&A5UFH( \T&\E0UEBh4DLQLdB Hhp@oP \/khru-cq)m5OGA**A&L"pyF `ˠDfmΒm*%ZP{kgJ,."1,@l%d lm J2C5n3aJuѕgƵ5Hu*PEgmlLJ Vr®7Mt]GYDBd@ 0@H q@ZBL)fԲ# T9)[mf V veE3dɋX#+T0] 6ҼXaqt2B@$P DD X O-⛄Ym#xJ&4rpIQp5U:@.fozt6Kkf+4YP A)c6P3;3IXΩp=nhAݶȉ#C+N h*I@ ϋR"^|''= dxZUE$",AETiP H DD^^DMX[.h5 񹩒*Y-*Q1 862F$.̪0˓NMsht^r=߅JV|,،ltNX\1@$fٛHM]|\ 4lPkB%PooؾɚfN^SoZ̾3Ra G6#Xt .4kK hUK l,$Şs`Im??DPtzラ! {/{ ,+'K:G9]c%'R@ɚE%&Ubfհf@@7 7B J0F2a@/d㩂 B!-($R T̠IgUDf\Lӯ1C"he%dBaSZ2iHbL(0fplzE&01+' $:YH@i XS35²\dՠ YQ&'bS!`M*HmZ 7ϣH(]20!(N(gPfZP<1Vdڎ ! Q49h!1ti!І 0a5Y`TЛ|Z.g@ E :BpB1$&dIj ) WF\4r]eԪZ o=TYUJZz^][%T0S\Juz)sr[F'fIElMnV&$O=ŧJH6jff{ 2Cg mE%ªJPhyڶae/^n@R Q2ٳ)!@mV%gC9XBӞ+lnئI<̪*A[i@MI!(K^# rK:-,` ˡYF xJ 9T FkVxϛ -,U467%ZCr64 a¹).lnŮQ~yf-rk͍_GnE DOvQ  2 (8*Պm1*QB8!k{r_kqA\ 7 [5m.~mP|1聻"<+&aPY*/-ٝ\"ʮ!Q#x00,Je`]=C3͉i20 ĦC Ɂ>A\1JY}yY-㰁uwM6}cz62LbIէha3,Mm UPGM #WqdQl@"&,쓲ŧXݕ±Y `xleh#]eQPo+]joY %skVŠ..[}F>&I,.0rP՛Zf;( &ؗW?S(n4g>*g \ةBwX=uMO* dֲ%WZ aq\*v̽UӍv}"7Fp٫OfnOܵ4F^ܒɓZXvaY"B DaBA( CmFTaXm\2p.i9mFAeʡvQU)UT@`XYc:b]Y[@K81q]l^5JuJ׸՝xf8Ήm"Jcpu;yX u|iT Ђ5xKJC j ME%֪* FX|cM9r[U8'ܿ|.Vn!^XT]1(&\bYw!] <ʰǁJĻpC+g[NÓF]ՃÙåɷkM:@M> [sQjB8B*9<҈6+=G~Z ;7 jd{9Ψrg 6˙>Q^bQi@ D !' tS*\ D@Ngw[HnP$guv6@Y6! m!! NaI'I',!!$I .:I,HIäQ q)s$&f4$$< xl@!'ѲIC2HM)6Pq!0LX@"@$',3!$!B@ ia H~N*7lIū @le6$7)$ jߠw:a529BNykZH YHaŰHr(@$I25RBUqNdBH@d %$$aLMfxBHO6C# AByCL!Iz &$K I6Cpa & tL7ha(BNY Ϡ !BpMHt Z$%$!!I)9&B Iٙ @D%!ǡ& xɌyJX 9${d8Bt=D oYL$$۠7S I!' LT5kdBM,"d nJٙ! 2I!`Iɺ r Isvj]rLQ CQ 'B۫ISR䁧A!ڠp5;7$@=lP@Q94ۡ"ˑa$&K .I5hHP\b8H7G$9>MZ@ 4-jA! g3=~nS՞'j@$>x@Ѓ#bQVuQ8$]5ۚ:'& m=7ނ^O]M`=6"1AY{QD!7) 'Je(B_#0l1^l0nE(!I |-+zZ55 .~@D2Dj^mE">z5Ygy޷^mݼژo\ ,$!2.O"#U6"8WVBJPLG~<H2R2#wjWO#^.|v :j_ _ͻ@(@$r'!J.i~zuJPUr]!LFT)ҡXðy\qcŬnI^IlMd(lPehͦ{.YΐPT ,(T ˼نZeן*4qa*/l^sd1 f c$J=6] *R31JvsO}VJL ""A=nmƷ;xv}z5XlZm0ѭFkډ nVa-թkVY1:hˎ;'|c&3Ne)<M0o+O[A0-cLRhڧ,V #MwF.<$\\bV}7e& hÓ$`4dHQ`@1J w ҹ\ 5! S Uϸ-Bݷ 7m[- Ok(dp-a3L7ўn6h<-'.~|qku8Ys*TIq7+.Pm]2&CXOb X#6,(eV_^V%QyV8ceV=nx]֘Y2&ܭ,l1AAH]39rc,hBdDŽ+30Tfz)IAJ4)%f:[ RPT2#%u[E%G GΰmwuP&+$ٞ5 S0W=M6RZ 2Ke-ns-n) NJQu19-d˨d<(@x&4zX%ŨPTs;Ъb> ^ml[VZEҍ}SmҚ!<\/Gsl brm3pnNTli3rta=8FӲxd`%TP ']@nI;6(XR8\EKsGvY-h-kR窰+9)(ȆLhrozJя9k3h )ц+l. 䰖OM8S2L$zi~P-N4;#2K1{Bҫ(aZ[ >/#*@v#) ϔ* X̧:B4I'*A0JY PEJE|ze:>@ x2[96'ZbkP+2,qDwtj))1i8 \YY;(Tths^-UZUAK $L+̵ !>GCTPfI`cVag.;~1ccwyNJv0GtSdfqBOD?JCxu7][ի׉qVQFBd8Mk,[-|>ne%!00VdX7wWiŢړM: RJ>j'vȁk;rS]4}/68*C5-\L+V΍J:-"űdUFYQLd1Ĭ0++4fjÒi1Ei7L1/!Za@aga: 0m{"D݈)w }#7ݎDz^vkܥRC'b>#?N05nN[Vkw`=AȡY\YJ1b4@D `iRD):dwujڲɍ9CN'dS$_)Ma@MR)o61qm?T,uW顨@JQ`jzMOdP"IK]0ӻu ;N^t^ kǷ]_re8q-4%]"Vkݗ RJ@Ģ,')b0ހ@< ~?9=)kjC-J ?S9ëSŬ] LB>W)Wm-6 w^m;u5M5f7HSo7i>6(y'Ð 7>Rn7c2%eQ(qpT$2"j?@u*/UP=]v߳Wlwai|?{f;zdXTߏf%E(8'&5qx^-xh0q?_ae$"?)O|K[g4&^|Ħd{{sw[4%Sl!/CʊG,>3~I="QDv5< @ 5fJuOJW0g]!v㵽sy֛%qh_^9z Wn0_j}޷ʦj>#j6͈CꔒOC႘d~Uu&/vc}aq/~e:"}_Q UѤ:w3!IqAC:FfCٗijz7ex m<=\:KnsOKVjnr F|m{(mG* qf%j뜩P~u)`bhPZ4iv}vvch9A$WPTS ߰]WssO%$MH{F_(02phs AYx~z +hǀE0Ӭ:*-/< DՉܦeS-C|XXFHPʪ_+'.ybÄסE b>~,\zZ[Tő AZEhZ 1;ʸGI֔>oD+9YQOUA4(u CT"&byA5h#̨-n6mPQ9RӏEdyUG}y, KXuU.HAon[ie NFh² EZY[lnOq$CEO,1x!Q.9#0PzS,7-BOfWyLE={/g)"yҪG ب4jl[ڊ4{켗.lD,w+JOM"`R,n- L-Jb­4em)2m7Mv]{,TPkv} J_=u .&SqX-c2/TX%XDsS$-5q|@RD@ SFVtxB+7Q=U8)vjJڪD3,ch$!z~R:۳b30 -%~*M!e2-?a[CS\({5X1IlP)X$oE $O6&92C}NfŮ5rBb+ȌsH [%% 'GU< dX(((1^ lYa3/RT)k1@J8U%E e " q MxviE* gC L"~ [~ QPNXl#a}4pvReeq$Ui~;O{<NS^~xzْor- kmD (*oc̵bqP2jƢqV5{XID>+*w>p}eqәIpߊ.4]U)uw|.8{8**'n:d ud /o2\V5&+R^+H(BǫGo)(^,R1'޲H#Fch.~Tp* x54se$X`ާM]oL d>gk];D{ R? :AzUn ^V VYˆQiZƑv R*J p_$&aqhy5dilD`` t}ôeb3ZFrׯޏyvX.HvSw Wrwm7|U_ OMԴ:|'Eh =4EΚqK>ˬq]`oC#c7 E@;jK_6b߈۞<MoN+kz^\ZO{wn+y3M;\1;w/x OVGƷC{8OOsk0Mlv_ҋ{:rs0Kd_.3c߻֯R_5]._NV?fߦ;ѱsOdn}{ [^)u0{R9 zZ~#AGW/o_;x=_&hy;| 1[r.7S\g(Zl]&_ku">(n\ujvt:Wޮ>O-WTz8KZ^aڬՙ{fgjwmlq2Yڌg`} ;}dRn7[|)f@ !%0C`B$ zԤVI?+0d2$$(HS4k S>$#HXlo£޿~.X)z'~aχŐSDfVYő+F׫{Sػ(&gTJ}rZТ~v{{%?Z:6>Ko~vGGIc/: 4~a'ý~~lϩWV)"RX>OU8IsE N4!k|׭?a'+-pA&eJ'˞vo ݜؤbom۴&l'85w?V+mPSS ` )DE_@rWYENw9t8pygDobBqJ$7P (1HS,DGu0&Z5%R3tS D^{|~Y!0R/m-siRҜaC *sOŀ.e=+{n, ytPs<L=/ jrY}7x{nMc# ݪwP{'-79 %-kpD2w,?γz伹O3\f8e}?E(Q-UFt.8xU͞d%{=,}֖(MmZt"~(P\4;@1{./hv[y6 #MHm_( le֖W @!'">sVkp5<7Wvug6pr4Sz8gw.^/]?n=-?e AJKhDGo+9X9]f`~n:<9sX[3F u{Qdw=ђ $0D*rœmlLiRFՙ}g*=NSw"~np֮g5z~/[kr=3,~mSҬ~_5_5Н PcE*\DXrWl7,=@wONʣ$.ALZ0 ×u+QO'J4$=*yeZ<~B!@ 68DDC065匼/#`MzY>(-?eכ럭vT۹Fɶ1ۭg })}%;*ٵc<]FOMz8~'تza2Mft,|/Z ,[{zڍ|2?!_<չa=?׶@a~C {<.% i:xvڞs@of[~G2;]G>݊bivV:s OB~+C|\J.3{]Ċq,}ލSOwca58,Cgb:ׅρϤM{6<߾7uqM>i9hP>+}OwO ) {c254y7>J{jB|T|Ǽ۴0 ̽ 5fə@m? I*<'yd'N$,v@)!@!$ICQ 32M'w!tY;ONBd +Z?!$&/0ד{]-Ih`~mvֺFkJ[b:N Rվ}QnnF׌%I0H] EY)0D@@@ q\~[;σh@? V˜46> w]yr 7$,~5AmOQSо(nV7PE9m̕^`(N!S)DW@Lkl *7;G9GWI&I?ersjzo{neOrniͣ' MQxu; ݵԯhw_,/yo1MTW{ gi?)3~z%‡qdS=Bͼo}_x;(IܣSmKXm̀ Dyq_j7Cf_{8}j4[QwH8x2 r\,pQ_uйIq{[߫` Q![6`Y֌>yߎR:hjjZz)+q_B@IA7~ZL}h1Ƕ,hKc=t$01ihAc)ϕ*l>ηN}aNsYλvk8rOi_ٕߋC#+}YiC&hlqJ,fejp9!,ςKSc3(4HHXW8}C^N$ %NB"ۡ!d d naXB@> "lY ! I w դd AId:nXP2*(,9I '}$~B@I $a)M!$ ؠ I$7eB%>M᫵|zE7wgUOt5O n,C^Cqw,v27BԗtiM!Bp5 !ywĕv׀XB_"Ɏ3Y.ͱ ІU4trHa](pkc0ŜH.VR`8M(cwnH>F] z-:m]:>?§_7w>8sfRSCOe4ߙ:N1 (yGfccR>ᘿ;sw'2eS[fA䞬K$xV@ @ ӚOpbm ||ݔǏg^'|~{anrax_@vkd} :ø2*s#0ڌwNspq> ́]+>|.> dQN=XDO_|ag~"nZ 'zN,.JLhF$T*VPNyjUO}A{e~S@KK+t,J'U*ET)PѴ Qq4(Q s+EJtۊpH* tFԑhJ TѢqQDr7VF`UGHSh6TbjUTZb`gUWQI[8رMzw}"Z@ la/0 ȔJŸôVj"kI7w+dĦ V)у|=lF0xCi ~ɕDtJcWAcSݽ{'xCHA1Llڪ-]zc-5euSn+GCsWFEAdf\\ߟLӗ:=}~,f'[bk|]%뎘s϶o6}T~2C;%a?&C) x kB ]tp~Ưe-^}6oɾW!`N 2H[QP͢H_mRV݉sWs=MǾGZ1ރ9IZxZMKWiQRy:sQaULY;_Q;3~'[ur[ϖ$qQSMŽop8I.c߄qYpJ6! A':զDžл} Bj_ RE=u>.xkXq~7 $rKR++ydqTFr̹AwNO5u MZŝ h\g`# 5SG;mա_Zj*^y!b݆Fc,6"É:fizO֎6EJgd k5֦m 2:Oo[lU @\70 W9D݇Wy;:ֶ}EU{"s8Br`>_I6W$tLOe 9 W}橾Y'7pH@(MۉJ4:njS';}{po ҿq_Mg7c87,3_?sx'̓ݲ5m]nߙt5CC?7 GԿf; nms_n4R)g^%ݨ;)T]^ h/`@H&8Hd8OBOt쬦p?&| pQ.rL\={[z qsCݶ-^Ro^AC.\ː*^Zqr4Jh7GWثɗub׉O$kRq>ʯ7}`hh}xLh)5@jBg';e8vMUt)Wp죛zz<_lWX+OngSDv_N U xصfZn]דi =[Sݥw.6(w O-PSe.v:滪wiw_"7]l-|xjm =~aMDQ KnXص0(-teii@Հ@H AJP@'=Urcol[~?;h?Gy2U/fEYw:9FGo-):TTHJuh\:ʲ &AaYq:)Nc,CGWnBS2M caQ]?ۏ[<ڔW|kh@?mTXUWh傒?K%|/yw8)znkYk!{=lv |3e]>x[b,o_mrhv}UvekQgK;tvZ}y?eYo_I d5 H|?ϐ@hT+ IR %``鰄 `S , PR#'G_b-_ߜi29_'Um[?a@'Dƞ6T˟xBtFv,\9t@ WB{S;apFx )WM!آ "#tEɛնQ8ajNy?|%ʕlvmb$2%s( 1D? ]tqol@'ף}L;l۲\~5ycN7zX[&债٩;%?I5$ @ @H 5cbKoIm?[2x떀 wf6bVX+9mfCB6"B*)&JD3(I!f=驵f`Qߵ,KQlgWT+g.BF)GCai)9Dr'wh$XBd<$ "'|^vۓ1z˦Zgd9oۉ[jJ7 TAD1 )${7?ІMV) k5m >f:oH@o(,$(FHhs$#*2VB,H/!$@ $ENI|BC*Hxr塴y@$aC BNQ>?p}Wb}>>P'oU6Ovm%XlWq,vSU^{9_BH*H@g tnаrNưl?խ+-^iIP'v{y0?uϨ|縤!iVE^b%gai-g?ʫ&Wb#Źy`RJ/uMaJih8*IžFop/ }CL7KWEO.Rz@Q.HS(xR_ќ\j?m0捅WE:DS w$'e`<@d$c.s{E`p+nϨKKe#,Lx<6ϲYh]! L=G0 4LJIxkY(I@1L41{ax2uw?tr~y93 Ca ( DD'γ^vv^MIp=;6'rGsyXz)\9$GkX NjY/|'KZj,4.H)\Zsdzx"SDn`3%N[5yºzA@H" F6a?o+3$bKZ,ĤHus}?MtCIҎ?ÈȤxǸk1q>\,zt ;im6{e?Su!קkhV726A r@_P6WwL5KAJ!ѤU (Cu~OB( ~*bV4^*4rHX LMXd1;@TS v S\G~_}%x_Gkr.٫plB|̈d BX7x:*Y40#t^9 FC1)>xspmnM+h6 8J陯48[/x4I%nС&HI'4&ovBTs3L%I8a$'gJ$;'L$NR?c XNNgXT1j#_9bQ~_'fh`h@ YݔSI3g7{}f@DR EQV,J/7|~zM6(Xzgʜf^Z$Ԑ&qef Ey<_꺌͛gYH,D@GUۅy:=؃0W;@rL#߾/>=0P B\ʫq3L/i4"C-5h@(E}_1mOͥ]EbRǴk8JWeI!P+<@6c B$ N 9~!.)pb E?c$;aLB@xD hڢoҞ>mmкf#1+iULnE(_#K x^է/e_DH>Ar9=X8=e-+P+*_ ,Χn޽H  P@@ LfG%2{uϺs;/%@́~~w߹&䶊71K:kRysou۴ɔBui5,|~n~ZB 9IdPRPj &I~|F:YiD ?.\w&iro?K<)Z-}GOwvIy;ⱈf%DwWdDAۼ,;g]jz^>qV&==w\B@Dt4jD0~dE-,1kb([UQ=hv}9C~r/}g)i2. Cx9tAIhgHOIՐ&/I I!1a,@$$$a@ k@L@ָq' #o4qRhspYcx /Wɰ>'"ЎRN=T2RnK*eT‰ehK:n@T 4 (3PRDCpzκZݓ~sF[[j=_=pt$>K I<>   č2ZlH&1 I$&H$'ZH@:@$Ei!LR:*I`1M Lt BcDm}%m]VӾb-cc_lxvV3P@t| Y!N?E/fռi ( T)?zWMe6ȵ_)=5h6"Oް gwt9s?/% LiMyM]LXcWƮ]Z9 ѳaawhdSڨbLR|C۪Np|OjO`NO,)d` Ⱥ"IRmҏĠjLGo*ϢU !Y ߭w/^Ns~_RI7;:BhܟtN(*@#lK\p $Ű1MEͷNI'u=a彧_W@!;b%Cxc-*r`'[.\~LŐ'CEfnBҪo쯇@8E;~e-A/`ok}uKR-ճ-kgyb@ vA 8o.0kѣ X_*~K,QesKg1\+컥j%ߝ-$^YS _$&c$ RHHL dC$'&|;! w [,,$63e !%0b⺾@3lL.ߗx7jNDކ X$UP/C%$pmIY$R@!Ѿ1Iވ=I$!^HSZL9]HL)ٴU a?}}7U^&k#KHdpq&pL |dof]0 X@H"*1A0TA\y$=Ȇ}^njƎ):4}wk&Q9d=wXVI>N3js`Fjr0LuNT纠wXr_FH*}Jxx_QIxJ*TU2դc/~iBI!H⍽VgM}q?SpVUJ$Bfݬ}n7Ow$wpCkEW'PKRl34vOpQYy/+) jJ,E_>ťZ@K˴rm}b)|OK/b'y42 @}sH|B) z{ %2@$@ Cl)I;: K,˝#;8{'JEƾ-iI(K" ":d(I=E~jk*O,Ƅ$|%IREH;Dń$YaHHdd$bba)@ECdƐ*V|L! bPi29;gN$R :[c}YMm? .o*|FC=SeUrީ9Z?&Uc?Cg!ja5Y?^̓ ~ZCtڪڪO_*xjrĞ[msC)> ~OsJMPOGD}UyoǾw*8RKtu:㭶a}Un>>hjܤ7, FRpRI!IH)$}.RB}LH!6z͋:IJR BԛL_`&8pIeoͫcn? ~5d{;7q ))D S$1XHPO_ۭPy(y ~Uz=cPMDN^ :u.Hgry{CSч嫉2,[r"2HE<90ZST}Lk+Mf 6ԉm7FW79hn o}-i,2*:h2 !M]?X#cDc͔:YջK[%_x? TSY5rT5P`$ 9<"QYJi;mp"ʷ sx,[=LaG7D}3@j`D]j\@" Eq!gf+`*OM/ұxU:sD&@ JesK]HWcg-lFȒQ~#1f 97..5ҝ"KW[T?{ vcF 'aӻK7Í"u3.%! 2GE|\"hB˺v1yu6G@"KSVr0dM@ rX( `pAuo^CM")nDCqPP8QRP 3hF96 J|jC< v6~-[az+q7cyncw塕ȶw,w2΄'N3PCpB`n 5KE)"L7Q'.&ߘɷq߱`m:e*޵C&v.*>k|BQϠAAꊾ eX{b4QԮVtBj@B" I#\P q!i%Xf]Bt_%Ϯݕl NMn[!eњ:jTķrP5)д9[&Kc.M;"y5;Cg7VpLOKDqv=w{s0xz_ةs$wW/ WY yQP4^`@g|)?Ei{:hgU.f걙Q$^opLURXМ$db* EX1",'BTR,T E")/ҡlՋ 0XʿxC~/D?V5M#Bi wqVzZS8|tΆ;M" }lY | -'Q 왃 o T)+Z@HQ׽ލ0sVS>C\7r7̈́)jҏ[h+ڐ#SFP %z8_V]Zt;[!/ts]IUwW/̈́L Y\?^9]S%g=}.DE9˞O!yĬox%qIem~_~ێ9mPka.{_9ޕT"l7`غ8>o"O|W,{P|= VP.13y{Tu*,aվ!H1uuSU:<jY ET|:CC_WQF9Xv%]zo"%LIdH🻽x  F,nei ,k.(lg|ڋsh- 5*u[lYT.!~|QvHv݌#ě )B@PVo ;?ËqzmXt2_.R:SIzU}[h#'ęej #zst8W`Ul2mv;3HgثP; < [2XP$. t!] ,*h1@1CbaU95e+bWmU/!M=u)'T7]f䵪S3Xf(Rft^(YƦQHB+1 YBxbZh!Y,YJs6"cihx>`Z/WTۏ؈^u١vo_ ')mU~LtP?K>PR>4[{Ce']|dž^ [Vݺ=ޟ{aQH* wz}FMpz3uVq6ܻZ" wݷxC;e"aLF'Yzk)b}UŘحpA7^Z\i` Â: $XҷOAQlC dJ'PS46`} 2.ܬgѩR TlTW}Ya_{ڒAHGͼ"w)h 5^cG=@r$0>=.w̩̣3Y@2k`8!ӛ s;]|[o"Fݦ\4|۸64ZI =k%r{TneyVN3{d\6" rۦp(nK< N!fq@vfK3]*h?={stSy}\.AW(:V p?, iғB[KS^mNku::R *w.c~1flN:0(pek:(jίeN4AD15g~ Hx>eYP9\/O]\~ܭ!qwp;^\ M|bvT٠㯎Sw^̠ʹY%̢5-I/.x)c!oRgQntY۶\2y,է緭ר#`Q*W$:9|WXֿRvί̤ʑ}5ޏ>Nd)PnW]%9Lm9׫ԗ7,JRdRpo^hbbs9颠Vu<,z\- ϐvBb{֍)ڿ͠m ;~}j9(HOþ}}KKML(٫c u ;%Yq~ø5Ӥ~vzϷ.۽<4z -H)x|zi<PlEg=9`6fRyquSpR I4^sJs/\Y1|8U6T1>>lS{0qվH6WӍt;+x2<˜?to93gSso|MM*m}a(8 Ex\ױAʒuP9N;WY^sp9osq<u[X73)EDZoS8J›KϡiT* yVW ik/, 91ܟomյ&+{eOʯaɜkT8Y^2:ڠV%pv{s8r0ŎNkN3էw95zfW&YjJlڛSOQelTL!PBэ.{O3<Ef} 8֗)zJ-;{]mCxY#\6oj#U4r$v\t]yTX贌ٵo&;1tek;s _n.ڧ1?N>sl|4㛸 yKuka^lt  22^ks @gʚJJiHLcI`ZȤ#0Ȥ`0Ò?BP$PUȯ!n ~u-fY/ t<0msLEj\r914'Ҷl'ʬK`0ٳM^3\x9 |J CgzL}yN>`GKvGUuCB&ԻTJἸyf+\.-[-nVQfz 0=Z !wTlW)ypPH\#}l\-/"fCK<Be \-o;ב6>Xuy}qbls 0ָj9CetHzŮTUng;nYmj:QtcwӨ6fy ͻ?KYvg˳-jW>yoEy u؀6uuSj6rȥ-Gvs7U٦O.PԩtR(ږ_]7*QN6sh[qD6UtX&8y%oeO!_cQZ94=OِmS mײj60@-̍oT>m{Vt0?7uUh=9Nw8\?&ߍ~kmN kOcClkB0Sd~p?!s}D ƙy1\,>?[_UO䡋ioNKsj_MFR;fxL.Jv} kxYT~j6;ӵ%d.a]︭_y4x4RWV@eZ.w 1`(ʝUGʆ]qy 9P9#$`97-0ąoֻ菽z^LNLKY 9XF44GX;_whS RA`{~6da"Loj 3 @/1F&P)w_a) ͋mX\J,)??I hr"dUH;^nmR#q9DT1 To@9q {OB8%תk̋iy!w?-AD E<2ΌBt@;v˱bcš/1e39dacnyQ^Y|kP^GKMzPBUkcR3`[zny';YkOދ :vVrMqƘ0`BV[i$_uIًG)8Kk-4mLv0 Ijw 8m@~t+:AlxpVK'>ͦ,ͭ@ٌmnn~)CnVIFt{*xx(ߍjM>0hNZ=f%VCBj1+ϢerR74OVtW. %mR*~I_>y[h{X3MR:|.:uPFgUoJ!J TK}RU M 7y}X/dv}#c)!lo7PT0774ܖtjPP8 y@~y# LwxOךlC0 T@Yi@ 萁#"B'a--lxj3m`BT^.?x>i!ǒUe ``X&+[>aOjrs0g7}4I0UQMeH aT!,r}\$B$$sQ0<\B^ƻ#7^b+J E (L!N5ACHf~vv_uU/C-`#+$ɍ#yI$ a'$ٟ)O`2S q ĮxJIYn2}[{Iy۫CU#bU-8EC=?l(Ꮻ*ѡ.ƂX[JxM<ׯV!lNng!]-O$~7z^m_/#.'sk%Oo4`ȟ] VBB)!(Cc8i_]:fR5?[+)`'wz#purCWRBD*1zOzG  r@c! $&]QeNFOmF.ɠ9>kc'7֩uL<*$TUF3SQByNrgMhaڃyBȦ( ւ>]kDQMC! 9dnPȮ\&Reb|M!F&?]_dd< FPs!!ƒii TsqaHqɋ2~@F>fEw6[WO j YLsyQ(ojuHdįPآ$.x%ɡesG E>/]mHp̡UQ`@8eP<$ oD[ '7'3>ݹ0x(q6<){chMd[?۽.0;*ǞZZzŋrΪ ];d~Qair|!P^2_xD.Ҷǡ9n20І#2_eEHW$Y{aR }I$'Y3}Rvl/{^{?s6qw_:9-S'C;=eR#q8CL'wL (v$2‰H[ڧŽ!z(e*o+m2^/{O?}[C fW-[-5_2+(P2%uS +ZłR01NYy߻!Ob_ZE>l_` x~F?T1te2,0*4wneu+riBӢ65n(lE}ښۿYP3JKV# S_I`LyfijE}ٽg lZ8cS39_OBu4Ա DF@~HHv(ByQߛoư.*u) EmRZغݸv7"nnl\A`,2Bbŗp*YVK!_Pu5n'ް4RaK;rpVWrk/goac`Xۣ{^N)6^U:T;548)Ov&Q%&R$wŚ{s7ݵT2:7{q<Q5 ݥܚ 6 B@U~*U^݇5:jJyN9t&iMT1dXL!%Wo7`$R@?B[B@)=Q "10?#__.9:&v)X6wjg+cY߾d k_5(?2hOXOt*f>ٔpClת??;1)EVg]!{ z|ʟjGA~ĊWpOEvVe#זּ~ BXHG}մi 53X!&^#QhcB;Ňs".&H?5}KbЅ4nW w:u{fBAzBKyƠ?Q#5(bHFPZySGTV+a (z<9@Țo힧}ZN&>X] O1ۗﵞl4rs=UOpf]\{"*ML@Pd,b/>e(@9 >4FGg,{_q d]J㴢hA-FAHT,G˟ UJucm6 87̪:ELb[kw0'.f h,PPeEE)f[#kܐKHz/[dGKQ`An!g-7 CLg\ h l ڱ ^Ɩ#fr-j?ϕQշ?2ph5D] +2a^f9KLs~rձqiOPAſj|D>J$$n0qG~HH5(YN9sCB#]- 6yE`uh@јJxڭt eP*SY~zW~r?Pxsh+iQNI8 )%EPq$XKuUnmWHH(XgRYa,Pmг:!O B(/R@/rF%Qy0 >xNXs( Ws5D[PX"Q:fNJRZhhɾv 0܀ݺLW\i9 xeB-jAHX< u-@tͣT&|ms2Ux`*}TiyRaR=`1 z4 .'&i^@HHF')nebu)@3Qq" e1 󒐭E@(@nP5Usv TufJFo _x]P.(꾅T☶dENFclx1T*"#2ѩg,;EeWd龑5_r11>+;Z`Ay[ 鍼yk9bjyfB("%ēБayCsol̻ʓhU5RK̮Lwo1dT߼݀0@7"D3_[v(˼j'񔯔tLkO=ћ14#wﹰo%@oXR>-+a1s%KO5 ^]$:[sgdi9ՁMSnm?lr}z=\;2t=]k+ߩ܎XDu˯1BM8**8 KYNJ)[ѱy!,_\[Nuʣylv2;s^c!r\P )e[!Yu¼hr>#vGD)y'`6%PLa/gJ PXiFr " ]ں/_o>N |}O ٗSt gW4ʽXWNZt<apq@80p{_tƙN(n̽=0LmFXRwq*F$=^tv>tXxKk\}2{ef]ormՑo ?O,`G&~i][A_0)s!Cg[c'V) 0q_&!^4C>"_-'#8%`a9YדݥYԻY:pex6d\Z p "hVk<՚ty:ּs峓V&K8}~t ʏSZGte`Pq;f/W=ѵdA|{Z"8zE.y)&YIyorIX'>2I XW9̕cu8"}oiƖK%eXz"y?9@쫫' x+ʵWbKj] WE]/K (, /S["F lmeYi3#a2ig'V`f38#(SO H6-hA(O{6Jr ov۽RAQˆ68#5L\(,v}>bZ k{qfTUU/}p^q0>`ETvEY`.3 :tށ`f ] "(DLke /RQ߼*5Ye+RTᔂ,v%yJ2? y/-(6p%{O)-juv71&.Ѭo 6MU9Ao*J)%y~_TjVʙJd+CU1o}} |l>k}T8%W[iKiJQ "aJA]y~/k M]SZfɵ\q*^og!N%IAK~9paΡS҃ͯmfe(N@d=ZPn(eMJrM' R wIyXp#>f{^Ek8٤J8YW}*x |dm!= ‘0pL̷d&HذkyksfDllG?? wmGת sA^/V<.l:C^5~hF_6W|~Ti+f7BNm͛HpبM-&D-6nlBט66g7b|s}IZqFR !LYT*dWt18 ,>O(6 |',J@S'M XS6GWbVL/I`1an4j=u8/nmq1؇ #i51Mس6}O& g ' "$K/K׼#j3i020 \掳(AW{hG0 ]R.S%,h&C0(Sυ6ǟ߄p3͏>ώO;DyU3_mh/#3 'v:9UT#i=2 5Ng/wbWm(BKקh]RFL(_ȿϱ:[ c(IPy X83.=$+)BCTƠ=%w_zXwh`Qx/)a(bEmZL#&Q%h^)_olԽRHSO(qOg_^mN\tr<0MAF7s_1uQ|$yU6>N7*80G;G,ʂb.imq0 woFԡhK}Ϥ yzݶX_ִM$i7')"RЀ+Vmۘ`㗅m#ﲖdiT0.jh{UjL}S  O=#ZU F?d,lgwvqM2(jR/d)+{!(@_v#o`O,.B!\+#|S_ۆI~[⒳hT"Ԯ6#$XBo!=+,dꐀM6Ǝ^|6W,Fz9WEޯQ!{.eAH-k$1$ 3{X;V JDmha+xK~15G +ً6iK)/yl©>^t1@ jQd[zY\4?pyc=F̬}7OOʱ `INe=,|2@>P!NY @?r_C"w(\ee P7Ү?W9|u#3GJfb6Q!lPQ!!sE|j텪)QQQmb]DcM"}}Ni,T3XAĺ`9iېLO?ְ_󯢊`vtnQ eJp`jܰ[g-qx? }AЏaPBGs>u<(ZUq}T]:QuU(=k;oql gػIȹr~-PS76$ I?$0j[Q'pN|tw)֔M:+;D&25Ba Ly $Ց27O9p jWnGKJ'~_ﬨ @,*p\H.K3.uz3/Ud>?oZ}L(c?l'TZOY^I(WLU]׼۪?iAԿvWQ,bXt Y$!ԪRHx굽~d¡ O]-餧06tq2:0Ӧ (oE+]oETQ'@>vKHg@zZuO JZ~yϕ`Um\4M[Q~ɿvoi"oS3BK F8$Dh bS?T@Z5\2ƩZMu:jdJJ8IybCW^s|ChKYTw帱_.qx3~yBfQF ([j'?y;tZKɪO H ?Tv@ ~4oͳZӫ30gܽ,|UT Ka}F$+2EW!;2I!%[}Ze#URŠC=|<%o\;&kخ=[՝mN5KjQXcZ˴`z}2jV4=ͫQuB^O_uL/W\ˋm\A_Z/Կ|(K(}Q{Z$J*tmRB椐(S j%ke+5f^C`jܡI9elY BN+T'@MP$ ڨe8 b`%ePu bo蟼:4'&pRx "n *p=BAC~J&'eq-(uu`ŏ> vZUŶ)ivwc?hȨK`6X-`T*Q (T -jU-DTR-EUڂ)j-6d[l+>jĵVT*mEeVږ)R{s` ?|D}c&o7h01Hdd^$f,zZfe\CKG\Ϫdr=df:XLYgR *al$R6$W:G BM} VVwGQVU Lebx@])D@[)A@dwhJJ5:5@,bPMDӼ؇.-}CW].#0H *ȢB" F"PAbT`mEMq_KmvVx (" Z(]έo3Wc .?s hOM~+C# GY_ ! =!dPYm{?by5bT- y-o}~^\dӺ$;?lW+ע# $.G5Q$'()- OFCHq׈η8S`"#tHї%mvdZu6qxbTO#oai f!UX:key6 ަ,&1$Bw(=8K[R: B.QQ&2H@Q~u_$*4PITT y P_ۮ‰a5 M]ޠqy"%T xtq?A!86'$WᇀO]6  JLlWS?%(0fbQEIN(U; ߮Uؔ OgY ).(݂Bܼx ZQ?>/6 Ifk8^\k΃kWY̆ТsҋIb`"C(^ZFYNG[BWB|{JR~㠽9e}ͽѐ.oߴOdi8p,dX!SOx^r Zȷ/-A4,cFϒ3yW[^lO6:{sHWPQFRҹ9W81ywvJ)1WEHgEt.Řr)Z+?>o[_Y6\κ*61NZLhsi"VŇH Q]X6#Tph} qgx:qCC46N+@r9%%B :DŮukC#ZUքE䏃us>R] 'QA w.9nGŰ%O?gPQk~{*i[{S'(SQ+!~Q9c^e1c{`D}@VԚ0/ӹ΋ l^f{5u~)G5;e^ױMTS坶ssΖNΣzƂeN[bszѲ_%wF1 02چ'%/]{J7 2C`w8ܹEHʐ7nP'*Q P9CPCT5#,7ȸ[\ w8`ǥGL|ÈZ\bY@DDE8 Mu@flYP!QԽk;.~.1O ~laԣ2R kYX-lLׁp!Q(9l%=اe f|@Q_$[n%55zG~M_[4mYs?+i?]Bm ]])KVs5^>;6xM/lU[JGS5/a+aލe~avX_n1)E2'c|ωii]S3qv }-J0e]' f1cMq>DP*zGܴ]ogvxNV9Q8AqbI9|~]o33oXtAz{6tWmH95dz͇jPД>(({ p){4EŃ^cdՇ=,*PBԬES9zmJ߬OgV%@_7;Ip2XqMcpԩxPVN/-p_@УBtyK{m7uChDD[hO;PN";7^2+:>^ 'PXyJ66$x[^~(DА5r[y'އL϶gmЀKC- @ʊ"*f;NLzjNovs{B,}2M~|Olg$!B$hɠrGcl=A;*_zbx_re$D`"(/QTɐWd+ڶ*sO;33kGX׻=څjEy1 0THIpWc::qnӻ 1O˕ e!2/@9۵.=黱x㩯 QƢI|y^Z;'jnu*dو-ߋ1z{wm7ЖӈSي?gi*qYD&FP5a}x\iQ&M'@J|{.jrWLh14%! DBQ88r$!)6vVS1qq~E﬇GT/ãJ&*zD$!A$$Tbk`<"_mv#t|z=n!.CHgK5K~e^fAb*5oyz2m0H_/:,ǨgKeXcd.g.ebDdƆnfvI َ7*s_!͝#8Pe6)-ɁxhӥHTc'35!̶owK[G^V<%λNV]B ף?v~T7r[\Xf׫\}/j!kp_Nvaq f#nK-.oi*CMURâo?(_(f^\̟܉1i +|^SN&}kiQ OA%/VuT[ޥe::u.޿ q୛kScu8ɇLȣhBmleB+[LYhpN"*HAtRVu{r.Y b+ClɝTF"Akr=Q@)vmeVqaT98{Q+S +]ܫDB4T׸tғu_UÀϣ3 Ī"DU;lK(ZsiC=L$*&$AR6슊WkX%Jn jRf.W|2Vu!2(U%|3ReNGIS{n+kG^c;g-P\D*i⶚.ōI03> j*[hgt%E~h2YQ 9@"-AuϭxI*>դsf'ٽR$yM_Ec"$Ie*Tm9~J{^xvjmovzd3o:{k'{]m֦N[}4\kHa"T<,q5+䭑r-Tz"qzǖ/*Ev"ȭKoWn sf~ijh 9z )i W9nߩ|Oy3 q0"[A ).BXV ].O #l8*HݖG.h744۽V, ؐPJ3w4 J̠Z0Rv / tOCF)rc̥ "_+O}BayFoFz3L挡gϋTHx׮299*dUc4]yQѹ@(;|\|X 3$DtDGJcW*U3۫UWy{.SctkL$^}gi\B~C-`IꊴVaCܱc^ۑ;jQ9yTHP%aǽAo݀-$H% GX;:>:̯߈Ufx~ +$V_O uHy~ԛH{lf9k'pnwүmv;үRXhFXh`-$QhUzȢǡ\cKkpFI+`+Gp{y701ÉTf z& %ҁme58_Y"J0۸k>a~Cs*7[@*.AbCj |#wRI`Gkȏ#Slk>X12eF3ySz,hw?{h$GSBp0" D9eQ Aomk>s_Sv^9_\QO8hAC6PuqPԐ;0scP ;$5nc-tNQS1.bxW췐4d (  Ƙf{%}7NgvSz]|ُ}o/[ (mx7xB?':Y*m\Soן@LNۍpR >.5Q*i@,>QD`afF5}v`J٣vv>>l݉q-z-Şj7h8FㄨH?פ!uB0nav19zO4HW':x0;jmc9jOSe87Hjx{OTl*(t,IMk/uTK͟SAWs5AB/Y`UkSUA)(fUPCg)X}W6QFyʠ5k'~7VOy}S o3\"93lt05( o`?H̡ _>ƥ-Vpcci~q2s9'gMjPʬ>HT!NYH~qռ,Th[s8Bsy-zYwjp,Ν)Nj(ED6k+j VGpO )ૃ>c9{Hq"1]*>XT>?!=܇M+5 mƙ"}zJ{JfNgn\^B?IK 'RJu/bWit/|tj^*_D$.mHOI'< H}$OBDEUC-B'Ѥ_wTx{[T:G3152E3 {h-;D@>ON3NY}K72z7 F\5E vP̈́!}2ͱ,b#VuQlpTJp^ˇ8k2~ӶEP^TK,b" @QXl*T $U\vS'sxO=x&HABHW]{]i%S_w>̕\9ӾD_}GqT|5oU+. c%f9LDV~?W?_J>dZB,9Y:x q 7_c$ve}^ Zq~L_?Ȱ:q/<Ƃwz>_GML)I@k6̄ >/'5d m 'ɮ̯<%&  ~W{~N7XLK4k2>`P񭄃~H a%e, W<8SaP΁͔Y2PDkLnS Ѡ4 ͤG'ۘ競|ڜV}浬&Y >2])g޶~T[I e $6ۻߝ^v v0rPcJ(R44SG>[oë \*Tef,h>B=9VҤ{K/%{s7X܁!$BJ¿` ;zYx?52w\L6I'ְ?|LƤ$ ƀAcYlY˛]<'bۅEs]6ª+V{7*ކ?aW2(&0Q,A`Chu: f1;.=Z`r-I"$8SnvI*0Br,X!&=K&Yi(:0`m!B +(*VESwz./b%/qP@ޒS+z|"<恶Aӕ3X@gDQCC<{ooY sGR@F3?u?AD0VT.~[Wh-^)='  $# ^qYHe4?{ ;8L?`W b@o7(O٩oc B2(LHsO2x0p~gs]@Jf❎Rg'.*WX͠(PV3BJHayΧO71եʫb-*P뇷:ͅ>fVC5@l썍h8t.Njͮ\-rWZFfI"5׵?4;蕧jwo{yCtVw¿#9U^DY[1^п/~g "Wˏq`-S]lY^gwJk!/[m[zѱU :m{<4$տNEk ` s 92;XO7Mg] /^03m{N@ kE!_`%W(84ܧtۆ|OSW!OTވE#Z{kֻ|Ϩ$ptLZk0gCد =.zw}ɯ(oz/&%f DmVd7! !XB7ni+`xo#*#d\ syG_g 7z#q,4tJq NvyaMpIPbc[62tegԙ^xԻ*bNHwY~/IXMOC:͵h:<+zn7&lS M^ˠڌTpyÇd+n,fեU83j~; N |?0r8Hpjtyn^,Ğ9 NQ=DK1@Gzޗ4|oodW;\Kgx 1&SP/zD"a➏YS~( _ml1-VtG@PI0t+Y Hٴ| Uo/W MWF{c]/oBnƶVO|~ l1;$`rPBBq6C<\ ytE+zPm$~Hp ߈ZlX$i̖2]R.Uo`(p@F|e\2#լ%3rՇMVGa]cA{GT2m[v^'~E)V?Mj@Ub} %>WKίc |\ tv {y@)nJ8qs:>ps"8XcE۫%񒃐 &vsٽu6p63fSp8mtP@ħ#{Qb8Uב Kk)mti(1UNB TR (!B*; }EݐeGπ.)du4SB^|bSvNqƄY4hpJ\':$/Qv;^[1&´f(\e6$mT0aРHN ze)8ݧŽgg.TƷ3\ ]RKrbo"16Py#.87avt!Svj/j 's/&e ?uEܗdr=h1iW.å0O?zm.ٝEœi΀p l֠o ۚ[lv] X @LvOe۪wb܈JH:G(ak_RS,vйF .Rv(7A6OuZ go]8:NՓ|whۙnM}$L\° ,G L_tt ݎ,1H5)׶ʺr+`*s_>S'G &<>ytx L}vP"RhhRaޅ5MES<%a\°%ǐBx̻9xVx Ys  =W|3mqg6G`e$/ V!RaI{qJs [U( .ѭ^5}FWNjcB:]qTewj!j}hQLd>oqjJS!kzk(sMY'nF5U8bSQ!NE;% 5 w%+ݜ:S\)g)bU 'Zy:@l~NvNu(&eK:788(3f2ا,A 7UY6i(3I%9S@D3ijۦW  AjLO. S$M2(yU@/{կn _o:$NfVLc΄E Zem[abLC\m"g 6@DDz!}@?jcwY+jw{`[唖J" 5B\,⼒$3/|$.qX$Th ML ݐQ[_Z}.u^#)lp/LD7K4aB ̶.ߕ:mP~:`9>$"!J (B0[6y$}w["P @ (D񨪻A2 Ǘ!#~|h7 cG>TfD+WvGPATɕ-Si蛞.~J ϢƝ80IP~NFK`Aj`^ A W-~nӇ%} l#K?.;gAGD >ݶUd(5R< *{\Y )ѥm$ð{kW I=K0W0W•tou}'3~=cNYBZ埗}5u'g}ki,'֡JoȭC03.(A60v&b :sy~[o*΀cop^~٫ܵy5b H~Uo$VCz*;^1kImvlc j_UY*cH |_ky|}\ H^5zK-o?˃!ټHxբ__ Mcjv+6X*H*L`bVJ_6`_-/asf?VYj!D0`i Xv1z &r{&q@!Vdc7fis=cr֧#@Sx[߿>?LoQThضO1GuTvS5e6epnijJ$hNϧC5}G<"q#=nڍmm6JwNZ~ۋd`?iY$2v8M,?ࣽOaw^c4N! mZM[vX?~~#KԮe &|@mhy0fejoٯ DYD{w^YX,6CöVRNo>cH78L[Hr;OA`I$'` KWQV7MΏx qu-/4m?GBO@ ZBs_S$$k.I(uD-[5AtiS}>N<%R**"zNOs5gfRNΫkXwˍoVc XS!ym=_?㬞j05M5G&!{29eVR-~ w} HV" *! N⳯nU f/\Z!d 21$aDG=KT* ea,Ґ!+V4-um}|ú9$=g \U 2⽭I HBH4Fd v*q^C}&!U9S C iBV8C@ o6:Ce0>N} eGz(z\igLm ZMշl>7Ӫ~nocb+e,yˆ_ɓi\Uz4|wO\/En}u-:}~7Oj͝|˿lW Tb&SP$ON`Ov4%`tm9|/rRURf[nbJb31aN=*xmtuel)S?W/̜KhFl ?֤%Wd2%!|ܖeU#"}5orXcxb,p")ljZKm>ۂlek6jQ5OGuL3哤gnmb"63ZG/fS}MUo3}uoA|ߎ6j(>U|Zͪ@'o;i$-Op{%YwP+<ޛJХ9$'5HMf{j_Y$d<l($.wp[_a/W̠ͮNUKa,C}ꔂw*jJp ٫Ri җd?PQBL+G[>Y/a!$ Eg\YrE+J d̥iZӎ*aQAA11"T X L2,)m(VKhbcJYm&! CATTJ±ܡUJbʅeA ( Qw_ 3jЩ?N mpCݓyՔC|T+T()(Ws#E1DÔf!.&Ut\ D(.臺dK.[/@=S'@#Dco箜B@ P;i}Zw7p8HljwB¸e+53oTXJ{FZUe-eQk}k_[&Ar"Bޯ7yn;?xDI݀cݕ?$}fxty1I)P󛹚ꅟ$M'aexss#?l`9&q<@ .4A4a t$%<>UMG C*KKyS b6 :+ jJK9=ZfD9#X!ةfxBL@*]̯@C=6:0Կ/ *z]y~Xrw4e2&G͇s[b9vT뭡N!ѩ@; 9iV0ׂ֭}6>PHJ!~VKo=N`Px< yEJz`7J}화穯Oo`.|H'*R˳y\0AsѨ neI"K?M84zx%G_8пTK@A :k/.@#GGQs."/sohg{-@any x*;zcp?>Cs*2_?WپdCOm-*\ lޥ:u+"K s5׏cGݴ]l5?;=h#T]n^g?EJp;l<يd?= 3ٶ&=/zS䆙_ y^e7TYc n܂gJ#pt^/+s9J &t#r>g643P8w]QNWE/ YcueX**m]7 VVRF[8xcNkI1SQfVJQr5C)Y1,fS9,5 M+bZZAgn貼c8q?v Jt3aA7N׺xgJaE'}'CHy#p.+saPI4َղ'?Vl0k[X֝# tz؋UI+Y"ւhEp#w@ 8ԤW,Qa%է/_'D9<j^YYȼy{#–zWl<8v?X_O2[q(lSh"e2iAڝ] nxKfFǍfU`ߤfP4PTk'O?w"@Lg4QHBE}8Ady{IE x~Ϯ\u o+C|_lԃ=';5 >-2Vf*,<',.(-Q)&VF\Zn6 *IH9ߏ+DYHUEPSp1ʾڸu!pC9_$!پr6V\cF@pS$GVZ&fglC%f;i(΁$Pܗ@P!-<͵dE"e\{"S0bQ1ekJ%no\,!{4B .iO7=sm.j]It@$2WK[,mXLj:‰$'ʣ]}UPEx.1Z,r#p嘹</ѹ yKvq^)XeIʂ(ly*bBm$0(4-v`3Oq}qV1{hI(Tp{׾C?]7Ҿ+pA;eI Avz.(w?eܷyH|IlP(Iσb~_uPM<#gI3.LL (A9/X.֯s\[L$E#`y=t]j>ZEU=͗wv[YGfiX߯۾۪XȜ#P+-- HOWurLHBvJE2AR@SGGoxɆlDooSݿ_25ŝ|49|D@k[N\k?ӧpwaݥN. 0.כq?kw ?UԄ߂/Ok,Rz74ݿjҺ67IeU}eSpʆT&Bc@mi2Ǥ>K1I! XxkWfLe Cm^szY9/L*a)rfu︻#+tYn zv"!;< M{Y \{q(Un'Qzɲ C"(*ʪ z0H*1O3]|%pBxTeō_2q PҲ3*.wZH?Ipw@Ml׹QG_taF=`CHy$ Ns_btYzrm~n2WoEUDUG55I\VgPQbU˜ɍ`S3$d)`}} `k/J=WZ[A*CVJdRw"r8a,eAHeߵY8jJ.G/]mϑڋLB2|꽯xo`:QoɖTGT<im (M~r|5ttwV/60^9_)~(HeC!go.'Ԓ"vO?3dĐ<5@CEn[DQR<> ^[!}U6"$f-M*֞M/O:rừa[R4or~w.QS$vz*}\);wfbg?]Xv[ ,tس<4$c~ɹf*7H HZGy2I㶅!DCd2_:5!v:ÑW}>m ? K¬VK e5 -ƴmEZs~E_y}tyҰQ`giRT4{љ\B1&4ZfdQbuJgusO'8zN}5p-R8ϛHH%N{~%T)^N戊gnl]e8CÒi3pGc)?I #fՆ*XqL0@ Nvn뗀tQ<$R":.SJ(L flTLjE!p%CnDww Pȣ"G5|Y$#azr]rEXf2$$9vMА=y0&GSYj39{mwvÔ5RTF[-v]W.ۇe2!S+^Qgëasn G WBA$BQ Vʂ:*:4KkÃm6sny>\>{qyCAJ*DbK'Ѵ Bx>/ȡ.8+/._se;{8_5>o(y6Wjc!S_%R:@SRڂdVၸoO$*>T3䦇Stjdx&L[~ 63H^uLP_u@z`bo/`P-c cۿg{3g"abGGаJu3O|_{/pL8 SNHOī,O9˷g%_O/5~<y0)'x;%ijj"y[ pkhۆR\̪(AxN.H>-FR&)&qW_y q(]qBQDϽX.늕Xo+B[joFKcdr'gYx5Q@")Dź &uOM8si_<%k`U:Lsdsz`ݧS1b"5𠽧>v5:dy>Be9Qf#fy~$<#b\Sq9nj֖v|ڇ&Iz}N/(C5 HRo\?^=wdr Ȃ a,[^_9BRXYtw)g`:60rUHf#AIX4݃&ROLb +ڛϚ;5Ly$L(|Pm/Pp"UWoL8 "b>#xޚ7UO:h8ߜX"!ps#T.oYbJ \{}oDVljw0 M]U>UίFT5=rj.zq5 8bu6\"ۉ0GVi?k0 $L3 )A^>֚r6{o'-5R$U_~[3,2Oq?XnKaWyok&GS}]9hK93[atSdp(iW \8qL׫vhQP`z= 73ܸK Eצ3WU|}ձ[9| l;rE(-q2} 7߽ om+?h!Y}%y(65q0 0e~A Ps  (Gm\lM3!hHps1Owщa;.Ld>ЕPr3SMW%V%M!lTaLѴX)v{62 psF~^'?2 ջ`]zϐ&+ʆqP U$1y,HϕE@{\|'IJP1?R=ɦ 5T{&f&ZRKlQSm?ᖱ:;sv\G^O8?NETY] Ky7k?5 U3 ar&RGyr7ƃlw<#ol2Z(N@UA(UXSѤnNW3_rrSom")N]"Zi.Pc쬡5gv( ?AW'\WAػ,jh?ϐ5f0@h$,!QL X=vNX3nhq!i]%]$- (@9R\|W%>}êjp4%uE9o׷O8#[6IK3_DQT7+QZ2M$D@b"sɮq^QaQg`RzƾRwuVؓe8]VNفA$$"B+C+JSכE ) !\_*!^Ob1Ta˙8m (FY $x@@ ֧T_)Mi cmӛ(Xˋ8wjIhضB^e[|cMջѵMGwQí $CBme|:`8klX~@ZaH*|LFJOQmUAdlP)=WZkrt_z// PP-mCMyH}=ûρ쁀m>F^@] 0Y!X/v(T."jeTo\ݞ.~/ j]{'G<B a ;鿇69<8d9v7PXS.@ciI mZ-AV-NԠ@ Y7LYU_Qk#%eg7!Uy=P Ph"HZ({e@~R=XǴ p4 ӁE [ymUO:\8eoW3[7ˁ'/'F D*9.po[xBLh^S$4W0{vPl^9e;82/da_˵+D}׺3[oB Lj (QJkA55ɖ h oO4 IڋzqK04Z.ϰӀ }*"V e3!RB*jIfG(GBe̿2FC[/"צ94r٪ p#pQk|>%mF-K+P2ٛ59[U(\N]VDyVC򔐪圍fl;jwTpÀC%Qm(NѺ%2 VE\sk>J<_٠3Ɉ5ySx?~`N}x7fcx%HU!rp'Sm움fuBm6kGLKsw)DDھTAEh r@{bz:ǨBbcp?E1LL)?2s5;)}įox'wO'm8@BޕMaM,ej AKJ%Nʠ/cJB;(gO`v=k wpf.OchGzq5L}.Z4y]'Xbs ) g$o}N7mvs1Ɓy' !ZT!e o<I\o=/y~s \̀1d˜&ѲN =7KEbOc$rq8'8w<t98ֺr䟊1eu@,&i{T"A-NI-rӽ /k=VaW{'[6j#Tq:Cߝձ4\_{b:W)ukz:?63h2@%5M<g3 GEbD/rKü1s[ؔۼk|Ui>K C>@ f|u䭆 n-S## )k_ /- .Wr&SBjw?½U^腺TK3|؏Gc:m/K]қ:M|1wnCKc]o?[&)SZ|{~IDIx&إ NTkb B %WoNr JҰp$])noK[e6VAhH()ǝ̩=DM=@ &1bB9ߌrO^kOZ BI1CMuU8eAP(lE 9)*kջuRߧ/oNbZM7BtXv!ֵr)7Ys6qdQ]^^%5 {ـ>g8/e?r&Y *qE`UӘpM>N楍SRJI.ˡ$DNK;\X[PJ)7A5v063d"qqjKmR"JV,6yg}Bm0Qͭ$L+Ů~畅U-\4ߞB5WجU-^`HboV!.pv%N|qL:ުB%/Vi}[tgn9?-Bh[6:O[^hP[{.s4|c!:[ǬyR Xeh\].~ [[DڪcMu;Xc.=}֯aY)=-1nZ_6Ju/lTo4ϩgt_kV,ukA E5/Kv'PؾH z: H@@*|9ESvQ ސDd#9d )]Ԕ_zw@$R`^-GiGj!2UØs s|n(^+3i|֗U[l[V)IFŕxf zp h{ yE?H9~e݆%_</YdE=DzaV05IM/k4q!N`zP~_/.F^8E<"< *Mq/ lUޞ۷5ׅ +@v_S!sWh)NQM&8@ ;glB|=Jn|!{;Q s%I.@ b5Ck_)ωM4ۧzGeb*FH@bȣ9ط_i( OFF  F|o[0 K +ngkzdj3 _P\VuM]#3qBPpx2݇L:à 0W7A=_q@tGո~Wv m{!f P{n8K26&'H;#=B!q;*$SWrb9(6/Vm7JzAut_Mt>f\=碋@)Bȉљ@1R2D\U*?ZԔ~ ]KЅC7k viދb(u*$!4[\d呖ahjIY4H}8Ub⅚2 4ĊQ#9xs$PdP"rUKkyL"?3AM|&kms…} AV=kv0mh`T Yir دv:kV d`V/B_7{@ _v2sDz/yݕN< NbHBw7h PP1`S1rev.L:͘-qcnV$ `5!p9-ĺ7gsa•b /uddז>D? מ%H_J\w~nނ4/'Щ5PNDq:ҷgQ@̎8m&'C\x^co/ Q֟-Qe;8w1r Irn?;ޑ4waa_>j.뎀7! Ӑ;¸#5#"! +idJ툂1+Β*z!;S[b8zu\R{*eg,ڋR! ]Y=t?!P\U?&`XKo{/r8JΎG=nO_yv.8 IkIbcY;:ؾ4-ٳ }:n̞o;ʦJM&W drO@o4blTNb x;7;tEz܈bePE]_H?p-V'A{I>;/?޵4fTfDž=l%a[?^& ^ ~f{.vSC&juCTK og"j9`jwM!; !a}b|VJ5k}Z|[SLt[)39 ${JU2U}yWseS;(sP( 4}QwƿXYnqTϘ37Gr֬U~ſ~\Lf-~nߑsy_a* au'jU{(ڴ#{n"^UYyO+%A9-q8QNl79".uҤ,1PP*VP.(\~պ_͝ *<(S))l˱֥!'٭v]|td1eKJ|#w? QwsTTJN~ŋUv+ ϯ~џB;vy]iv;Rto_#}羽Mz*6v܇fI4۳UA{&.L:.YKG|æ d=i*q H^!P^´3TX. Qsz˻ѮlѢ% [_z0N NoD~<3+3X|NPnC5 pv2E)E8oMQ _/ EPa`qg0 shќ (5) 9|] x1c{$9̃mݔҘҚJC$q7ĬI4Ry}M!]i{;( L *6{*[kbG-}֙}$(uIJm(冀檓)Mi9 隳QR[| Li#Iq 9p/ 8?63 Vhaj7CN 7lrՊos|WWG'7O9ND X#|eTB& V*ϥso՞s_mUMRw*]zf=wvgw|ƴ2d B/l0(40BL>r V \!d4_Ti>ϰjRQMSQb kWv$AuOAqPՀH?^o.ٵ᪉d:Č 6M-o}/mAFl=}'NK ba:yO'-{:l <^kn*QqL- HU6}}i5Kzo~9ʌOE+oh ĕ<_c,&]D겮!( fl)B!!ٿ^FRyFЦ\y2YB jo7ڞKhڃBȐ(`P Ss1w[:nO6Ѱ6 -e)|N:+}XZNhfc" JRm;{}{7f>ѳ[ d~D@e@ʐ]u[7~36lj4T55lP k`VC.v%~Q`:fE7,1+`b6T_+\s|U})`k[IT^~%a9ύ^_EWvmr*a@? jTa%NT78`5^ĺu^ZoSj !d=xߐVC@_p*YD$CyX~iJVڗ.Z\_ɠ |>!$;oIzs^=}V){&53w?7jtsߋsH0"(H)Zk0VXJB,ZWm-_ߛq3;9޶g/i]z-Ɲx4:SY x]|n&؜+Dy*94P@!4֧cqrNiqPP4jDM(z`W߮[9@ᶾaWAZ${0&Lm҆,7fJ(t0Jɣv~Z\f7׏~ݤ/ew(^(B<:D \zߔqGeтR%H19AU/otAnr&^M8>y; r.fNf{N XqxeTmsy% +:z?2Xfsp9>U/X-\{"r8)g+/#b3O( G2J?{ Bz~iƐdlCs 1I6 ag` ݀*w#Tu"DĬun)T$t$)7elv}z/s<&dƫ29qih~77ڰR24 Ŋ4{3|6̓/OV1L2e BT#நVׯvUEHgE )]vfIf*~DGzrafyRu`jG֭$Ŕ6Wb{d'>"x-Q7r7Kg=݆! C2&0l9?9CTHyxM&(_j.;cO ~ID^6UZ l@XߤN-&GǵDde864l!2G_(=eDA߄GhߒbIûW_+-OL!QAIUXA%%YN[cO399ؑ R ("4lr22fEt5 {sΘRMZas:ozv(>//7J)'YH =kqlYtn/%6CW:qquC⡗TEoln- 6wc>R} HO}9 $^Btlw" !4q=kPUChUJIӺ3?z@ɩ*jZ3oVbaD#QL@U"l N7w,pPFDH 9D|>QI{΄var06 xQR('L|8akM\ =$A9Jq(OaP%y`G:ôQ=Vf%,-[.U{>}4aH3M]"0_md6v{Ze }B\-+2Э145$eFZk .pT1_\tUUuj!V* #~yl#kfPtUяdGCnD)g™:o 2UG$ b8ADSβ*z: DZl |k&3LhIdD-~U̒;֘W9ΠS+~FuPRp9L(  * 9Zw #GHS*P-Oͩ$|@|9 ꆦFnJ2f* Е)Ah1o3ӫʻ`JLW UbwF|1xiV|izF|}J[H|>ߓQ:  SOC?] &# M,wT܈MtAS YҐ%x,ˌ!$$䊾u7gWr!_sggsgpN+.D#- qïںuǘ7A$e)֕#2 A|K"|'KK}B["#w+.Dl1HQt{LCuN=悎|në`H i@k ` /Gryy-ԟ5M`HQtK%_"X:uĀ`2!ǬR/DRrn3uO7`_,FUbM@XTҭ}8IF$79(Ïo!f|zlwGnf@IjFɾEYM&8#U WĔvaJMvr=JZ^OƅNkć6zCHd N̐,lryu(Ϭ4@+%Xay]5@TholLv; j.dn)VM.K;,\Y.0 e(2KMZXJ(]|d ,.(Sx=jԤ;'(0¿6kd?| 4]QvUc.DnnuQs>E;K6<Bwk4.S1ԧ :v}jZV΍&*as`Tzex:0~_fކ%. C"ת=zjEe zK"TGf'%LH̄{㡉($'@vRTdLoMg˘Y2R`ٝ:/v|~ ""=Z$}kf/Un{:H]tv~h$Ry5tuXz{چ4P)dP;ևu>~ 1WR(@ؖYp;ڭh, ʘ!hC|Ѳ ~ Dtr#OXyŒT$\r&_r7rV'5Ǭ~Yl筊 Kݡlou2x5w6cT60wHeeJT )k5LibY($oBi#1:,5IP<~BlU;R_҇P2+i/ݭ`iD + vTP\FtXM @SS0>9D`"OmBnP .`&[wux_mG/d/R^U): !ŕy}H h9-mS լx&mM Z*aU*p޷B /ξaSKkX rĂ&;K;)mVgGY ēzWg}?2eS + *1I뽫yFdWI|s[~=aէx~YAXJׇ˧шDH"@ǺKN!@C,?)5*ɍOb39ÀN;]V]Ak(y]v'GW g9QƖKrC}Ry~5xuin);N<߮,(k\gɧ]~,7g ,2RAƞJCp9|ozJ hk&ܴΝ3X*Mkwl4qԏ9y#=Q%Q7c&|#T^t4w)0RvbL:pe^{ Pf [ٙn" 9I8=&և#BcyE%4yp&S{%syu&?q_xp_ǷgmN͜컱λWSP2kJ-&6 ]$JPe:{>ASVzX &UDwzÊ%<$1@۲,~q{M~{~#}8ߙJG!^gqy,X[V^%aNQm\_G~!2j!̻z@"t-A)swoi/O,Oo] 6lq}.5DV 7ط`^mfz1A @`XͼꝀzr;r)`si"}>i'{9N71By8On,Ȱq0Рư- PL`(Iwoz:*Pr7T翙+(^(t o~ kqWs+zbqsIM" OJz+gi%|y|Y˭t|w4(D   =ݑ7no;i뺳V`;Za@$` ̓C̲&u{RU,6*h|υT D3_h3[֜ɚU˼®aV%F{ >1|$Fm iT 6uO@Gee`IА,WR(UrMqSa`.4͋!{Nܬ?ř _R7|K t[nnGLD@VtOk/BILa*CZ0]%PQ$(s6:žV[*">7HsYњNJ,ժ#B]W vUky7sƤ2&?VCO3CRw/Mֵ7}Eh?ֱ9e3b|>nmYk}XXw]#Ug#$:ݐd6×HڼNkKǵfM ?3;jqa'#=2r̸jf/;,$p4gk! Q5&UT Xh`ʹ yc,Uj9d; _md,6'/M?עFuˣs/]SgeEwUjǵ+.sGKL]+[ܖV8t48 ˪I+`q`KZ<\~3ƾMe8}z>LRiա֮>Wm݂ܰXy!Kw'm@%&;ar: ax* AW3XP,=|91JOR3?Jok<6?[,HL\rB2࿊ӔqYbvfoXg" " 㢒¦󟤴cEfGySBTW7"/W: lU-nh~M!އf~Ys=_eɱ"f1Ͼ% WfIq[CH{sP onr\UgG_Z*!5"[gVmMTZ-o[-Dt#c#\]ߕ̟sG,'slQrqt)GCM8'UO7"(5*',?.@p%uU0vQ;(=~ѝyc^5Z֟1>1-tl]r[Rt.zYQG b2 ΑHJV !&bS1Yeb1g4ddKypbu;'?}T YbԻFHq)sgG37KE^Br/ gAÑ7@\~1ȳ'sOvR;]M ^{be@mܩL1Zaݙ ߞo1?Bm[O oQP%#{o2^s@o75tU:!*he`!65( qzX0Jf9k5^-*(1F[ 2N,kZ@.pN|y mZ^WeP bf3^,!y̦ g|c-vec66wa4EvEU;f3IS(<ٽk~;ԥlz]t ͽyD~|K&^#̂pi[WanO1n~Pg zܱ !v`)w2*@֩#)Uoyi˿ɫWqi˟LJ9 e޷L仐\<>fyYg]"x$)4~8)erv1(%*̦rUطR-wfD~GFl{zm6ig[ϝ-ҩϡLkBxf]q;S3F^A[*-+<xnzjsʯ_iS:5wzʭuEi!av}[ /_5X~9r[u'}Pl,2r+ _Xupߊ{1򹺟et./Ϯu +[_?c^Zu>y2eտ? A|RSٿBI,u式O]T]F0h@ i:"p&F "ف{px|Cǿۈz WrOԊ߽o)@D&z5h[ HַGN-7v Znc~c'?fNЀgfkHuL|#Ui8!2(5tplp0pX<7vƍ`q5 JFYgna[4QBڋ{>tfUQv[F:z B sX2/+*-_UnVA!B !!PAyp"0MLGOi)l+ZQ.##krs2X~h0s;U1ߗ\htC.}z!E$ ~Ggg4^Җs>.gmw5t_LNWor;f{!Og+$zrq ID&1'OR +e<QLW& kxkOCzI]?հʤޡ^ }s~ -L(*9-Ay7!ÝXlb d?+{1؃WXcJqu(/л⿧'Z9fLӵzMa8h,r`5l^l4} w PYgU?Ol:H/A)]%_ l~Hṁ3)vm_KuuC]bQlcLl2Z"q]8KHr1MneIՌ678Hp1jIM>gqxny῀BR )qʟy\.qY򯶮#> n۷?sί>kPnH#erkV=*>>q8<˙`Wv>mI3\oRu_O}ڲទ%bPfpW ZYu{} 3|QMDkb֝Q ;?zV~&؅H‘5.|N:jާK:lw|4nSw:)S Wz=7 /nˮ*'tېM(@9駡-X7kk䭣85Pޗ2^ʃYc+_)ލt0 O3sdx^+[,IiW=Sܫb]'ޣu_4S/?s곢,7N +drj]UM+!=ki)oM(dK3%=F޲zE{=1=  MTrj78|27c y B3 8ibTi.D k)wC}齥oCN0CGþ[4ʹҰW5"z#X}AKU`t~nN} k^WZZe,g>c.:-5P(=UZm][b׏O+_r -!G7!\j].h⟸NukJTՎ'9JC~=-nv,yĮ[fA)t>) 4ʏqRJ\5Mqbz-i9#ܯ;pڛv6CGz,tS?]k]6ޤfDpQkXS<ʵ##4oxH?n~O 'QBKtb jڏej4FWpr“At?&/M A4%*zz}n&H++칬Sf;vJ媷S3f3S\n!OgVUFF]RtSnq PQ)l]~6uʩ 8X YڭSv]YY8+u?.gy}TЮO ,3 ;8p:ͣͽEƒ?%pp^;+ݬ"n+6ZܖOd>9Y[ϸٷ}/]>H:]t1w(Uc*9#'0DHMov@9|:=|M./1}VS,NG&+GEHd| Qm%6Pp"rTĀ B SF&*2BȿTwy${t,%~ed sMʖn$d䉯[w p68 %fC[zw:Ԏ,jBPI@1eҨbݫFG\٠W yUer(f) ^`A͋ɟ)Kd.+hd^LbbOW9M] 嬫ir+d}c#i!\~tՋNAdNj:x[0DncƧ\Uw? ƍ_`2XТ23ښk B#<#e쭖u%% D9ܧhCĂ$_ #)!t19IJPQh(ݷD*=?R]1:S23+xEj@QC3-2 Z- ^w'W&О];l7jwe2ۺ(i6:\~W@Y f%SMC|0h=i6&,nUB dNȖ=V&ޫWQū ՖCu XXv[M}/޳WPvׇw}N#!k{Jc;8O<m{VB|dIFX HЀYL Jq`~Iݼ^xP5gRdlO*=¨Ulӹ(Hw@ٱSr]2x4d$Yc蹲t:Y\(˺Fs;Ky\mxk-J·X /khd>D}mQR]:C(|`ޡ][#zh8CRy FtظC 4'b"$vDžn(,Dy `uQ/+†d)@usK Hu)m~3ĕֹ߮&Pi&TqͶd1oDT/}۷RjU6԰T+ŇT ȯϮvTQcƌ"j_*1LCG*Z8ҴUZ F}`S_ܨ`Qq㒡=䞘.|`m'j}_[?HRcdn@AԬfalUh&ڹKĸrcQl߉OM&7*O`aw7Zz.SP#Y+L. ނ˘ZPԍuGWAR !7PXG;4eTh`/nqOR(?-cQB>B'}}s'ՉPW#;ǭ㍭S&*|t@ 6IiltXoۼ-A>,=}GmjQi!\,:&v5RG7!u"bɰeT%N@M?Ҁk6xۂ|n+j~T\56N-d K㩕?y^aFT£3TFN̠Ă«gCKӬ!/5o@ Akʨ9 i<\Pz]u`Fr;Jd0e'˞j$HV` + |W^Io뾜'!xNTԻ=|k̘2;x ^O9܎_d$Sjۖd*/#,oaj=Muǀ k޼H]r\;VXw841#\4*8C4?zckHv t<,!3-W%BJpfqfNװ\C'$׆^OdTpMBRЍրC&[t%aM%R=_"b,jsLj@`C>,D$SWI %l ;Yj|)}Ur^ѽQ[zq%i&ϾQ  `[L bŠÚJTl*q+ 9R\2gYãsV\ 4 [ضdro4(+l"~|T ѪVFΞb&v9ӥw rjX6 7TzkwtVEf}[t3^m]ZI1!c((:juYQ$ΘGd7jl/u<<mj,>W82 ۘ|1 !fjTî,eMS<:ɮٌZP_tW!uj>t-8TaepT4c9X/wPԌNUR }dfy+N\rX+oqxps4ۨIMi 0=Ψ5ֶ#,)͗S+lq*1|ͼ.?EMbYҿB sО~pJڈ9$P$@Ac֩""Lή]cr {Ae:e/7G[!/٣;)Zv,ìh_5=a.+չ*CxKO!ͥm-<^K/޺f>)cyqVo}$2^uZ2j,f`̜Y| x-%kg2Cb6"#S!|xUaMqpVECD\ Srϧ!e@$/t$ՠs~v܃ztj]!Kd<5DCF9Vm0{iU6 5}O\H~|c^O |֥/ƒۜ4-^;=Sz5? ޴oO K _%\{ai!qЍ97SwJj(?o#{ Ϸck-.:Uv(rbvދ]]^&=,%J*Λ (KZ8=׳ԭ_'$ /Rc>cxKml]e2$?ϰh8,n\\cv-_]8 hǚV%%^G<хټe ?p]Ϣ'uyޏp< DW&3(iKiƐLˈcxmxfV B-k+l6AfOc`H|0 "fjhjxv ~oC!^Uwۯ10wx:뜷_}E Ko }Gw)̠~)5A=~jF2WYOi?f/Xi!TT$5a a԰!=[^UT0U,p.7h3uz%ߋKn6uؔ}҄yz',\YU"EpvM{}~vߛ Z@N 7\fv R!@`h@1q G*YmSֵ xn!щD3QUӷU&L0-(eCv„CDY4y/WF{|xvɦ61uŭP%+}+j#k>Ax)Q1~<]1b c}`٦D7F70% qDiƺJ/5 Q0c=AFwƤMCRF!h>ko3tmϼgXumg=R9@`4%b-@ѽA8V OC&54 NRi4ruTrb|xfl(4~Ko4T7 R h40y/)s5*L9bXK3iԅ ?ED.hU4!@EL4CĀ!Ywy;mf9,}_$%qt^尚d`~'eJH> 7FLDI>gy4ߘ3H@,)p4Tg- {f\ً1TO#K骥V"[@#X^Vfy,+9F~K"- MV+ƶ4u`2aj9>fϰ| y:1:$ٵ~z5MyL69C Uz@( UpvՖ*<\?_~rCZ?^mQWwb; @ѳ8!%=*ff&(>lJ4=@O~DDAtpzgM^T>d8COBX4i) r\ ౻ۿecYdX#To[PЭ` Z/% 1Ϝ>:G>c\f댱/e5b9R|nv_?'"8L= !`+XjҶ 5DSLAh]gyUx mL>_{ kRdcOP~hJ# 3'~Gy;`|JdLo:Q`̠]aB%VRQ ,tVIږa*5V1-6Y qkBMJԕϰkE+*g3m'BE%jgS?Gq:~ҟ*a 3ۺ\)Y+=Ǧu*~[Tk @E֋h_ aZ|m2~ny_]kM NIT d{mÈ=\EMqlkRإJ 7$;{zj +믉>{d8 8;9"Z:+(=H$HG3rNvt-;eoiZ~H$`nn" 0!9"<'Q<8Rjy+sž9uzQzD(1R/V=`2RM8JTޙ~Qb 9&+܌QBhty(!ZsjbD uq46spP-nIJ&ࠦSDүN]6?t{2qZBHiUo8<84, u) TnuE|yyWefLkz)$^'Ҿ!)Ih1\1TnrՊkkjDz)tɞ;s3B}/E"5-kyY钷-$q=]={MGhUPg[1)_Tws8<Å8xtf/ OyryD<sU῿c{^FS_.htm͖N u^5s~suʯez(``q{TeC Bq4Ldg¡v\Q2=Y锢%R#"CCCZۀ(TTDE bK`R e~c!>E1R{T)L9%F \iNl?|CF, )FZS) ouk޺czZ3뚸\nWcR?Z̭nlUu:_FYeo|ؠ!@gHd1`y"OB3~M$ Y>0?Nw:Ɇ@ YJh(D忒\#B0ׄS&թvYw׸aXswo>y?Ȳd4i;ԷwV???QfH3rN-~U8tv6<"x+]NJ˺L4˒bAN "*hH+z7`;Pwfq\QN"@ HLi]$s'LWMhF2LU)Hُ[xDCF?kmAj*]cYkX˵m#n_ٷ~m~HcbTKeQEb|VdX#7*ΗHcuj. edP(FEY-im W4Ht%X[aHio*oHt;*,%! FXOyիgdmvX1Ϋ܊kEGGLm)ԥ-Jj~X3WOr]._o; uRA QC0TB|' V9OjQO)u lt[|ai+EQ q~f$ Xa3L6V) 뉹<=_Ųܽ{֬Cu}?)9,m'/ ՟'wajwwaz_Wwd!@8Ġ"BR Dٟi gHa, ˽d}Pb&d)0IGa F$JH~p¶q`-A}[e {Sb[EYHAX*>4%@"( bђ4gx W]pr;[3nrPD )l0 +?6j E Yp#JhX 7{kwY!hn&䕐27N uZX,vh[(L{O,Rr;?[{x[w޺3g{6gλp˰u"ڪs;Rt=w{ɛm^kA3kf E⍾…mKFUO fr7zOt ej RIMQ׍ѽ X2 z |_g,6鏋.SuVqpf&_j2gi:V(Jz]P|Q A@T@(ו}7kTq}+;ì`o>v=+=DG}7*P[e'"}O֗+S+"q6.܎M#5Aم]㥺jr;,g-ĩPo~\z=E_Ex2$im )ܷ/l ep=w=Q0TTZ)dw4@R1µQwӑ@0ڬ>1ԼixNǮ1eڎ?/W#Eqqc*y}u$׮g#+ə+_}EPKmt<%B7۟/l8R4vGwS(_~<+ʇO'n*tyd:_ !  AP (@@^``)p DE?TYyH|3,Wf x+q[`o:F"w_TS™2j83OMDb,K )rBz`][eQl@S}ڈ|dsBKJVy 8"5 3i 9@$ )%9@%>x4_sk}(QbjWOUx}bSouL˧׭ =#dR/{U#p6@Dk0tw~8oW,At ,6v|˜gx>zyIEv+j~k:Bي9@qZlZoNyau%x||O~?O6DBIeyw͖Ѝ~j\u9ϥkrqRCMT!X@! $!dyn=ֿյ_3J'W? p.ۿX)sIVnoXd=V=?O'W Gt5~&GAnYIt^8!X+;P6oxCv^Ì֊ˡXz?O-]{MZF>rYwH ) P DbԪYJ֑%UQX?=Qq زxhW|x]N!A0 ֐ X2j)U.-}Ѥ5w{99ć~dafzk?s,88 > /\I672 wtmbbB{ v4@$$35C2K:-$75D'N[$dݒ_o#BC)$2a66jq(r)EI>rCI 0!I$%$팒t BHBr>!͡Of)е`Hމp?q8~ޥgVs='}Y;6JԖ`zk۞cVFq`YUs|۪fۯI>F}\FCe 6T79uG!VǍ5#zm7 6IB$XCB|?CW-RyOOޅ 66,orؾE%<o7׿p?C;3k1W'VDBDewVY㥊550.#@[zHKBs8ø{ׅl1r䁝$&im^^TKffF\$γN^ffkoS@^UFvFW]DYq6~g҅y;Q=N[x>GtxMACk*'bia{ϗ1=OEh@iK+ZEÇY۷_eN~kxW923Uyah!Xv75U,d1w`AۙY IlkgjDxF_޻Z&=t}>8 >*`F*,TV+U"1APC:=TwrS[ 2Mwݶq]èi,GZ+ʚ_JeG'9imJJт3,DGtJN7ٜ"Ufc*V-M"18N=Ez!}FiE""0c/ 7՜59^Qз2Z_LJn7Z5wZŎ^ޣy~3$Mc0 c9 99K PSyHj˘>'oА%ugPN8Hqޣ2h?ST((~#AM7X&Zo/$ޣFUAnS"> 2@=YR[*TA!UQQ).ϵb#M#J!ȣmj:kkh֊^q;CCzޖ7LXLV?'y%lnܹ-eP>י}a兒kyy%Y-&_IQlzf.W{1 zj4w}>mw IExwG7gs=/kq\V08؃,Vh]7YV'W=xrw>'+8ZY\%H&5d[vS_j ^)eZ5M,G|wnyx mpY9Kf47\m-ۜQe՗?IbcD 0DڦH.<gk0_Yɵ_mȼZ8 kνwf͗EgvSd77l9Y$&A0L sb:).M1߭F Vx,w s<&Ôy{#ƵO]c mlnf.F ô!%:S/>պ,~v4&UE`RpQ[J5Ԕ7/=u5kmm]ݯB5s4_T3^|=.wtM)^Oz95 ;"g@ꏃ"-U ")X*  `X}%XPTR">EaC0Bk~ʲ CN^h<{;'/@4DDN!1M2I`\S>ԭWTɓtT(̚xq̐5.m ߧn֘_e%ƛr0vF$q3?3E5:N֦RSYzh 몙[YgYZe*ӎ%qVbvd L ]jfV EBV#MFG)BBQH++4jN)6).)6rTd- VPt],Ua~7'dg8v dЁ`Ȉ1%,/|Ϟu9 pDPC $q{֏; sR1–euq3Ӹ8ٓb`y 5YLJ^܊ƈ ьh*I;eV ~TFWv)z(uC%jj~*.gL+ AAS?O X(A#-24nCHdaƥO}?;Rx5\x4ઔ(ke 5LJ3gpMa8*m(6Z]/WeW=x8y'c^^9zLChKî G4m(MEv |_o;hYu5٣יiL{|{piȽr~pas?"侘]幚orr³|̗n27ۨ*Z1\կ]n^ݭPgfs|b_ E\_',g[*=?wq>\K;c!IZI "Y$'Qi>_~@!ngMRUUa$®sqJ~YYpD1DTtRڊaeT LJa>iYxNuLqWyr7Vcljms|l~辑2k& 㱆qL NC2GP!.}<}=w{҃9SF!qk}qwwXO0~1n|iކP(Oia~xk`6vś?m{/I"yoǡO]Ԯ=$;wkW?oݖK7l;ٶ%clzn?6YYi'|4t?mE'ٜ*.@": "SN7Hm:ociѸlm*$&]w)mKJ! \~ZKUǯZ ߵK6iJSU⧺"n^Gݝ%7)+a89TnU_qLaf|MI&Xᨠ__90a)lWE:/Fcim~Mŧ->9Pm1v+9a9~!]F SiPUDUAV,dEV(ruQ?" * "* )(b2x)XzvTL@|4=&Mf^'ibkoFK}UY3 BzUWOO_ՅfUPb{k1PƦ'3Jő`+vˆwDDGNvS|Wm[<7k\*87)꒟8I^.EӍg 11(q>_m_->΃ %xIrD<0tOOpw_v1o7(gFZWruI\ΗSmxw!R=Z@k WG2; ݈~IO !}3el~/P bzkvwMAN[u.ńwى[lRx>t|K|J9}uYqnnL+aۺ7~_ 5`5~Ç5ZnA8r}?{gٽ-v>)cǘfiK]k+]awit:g4n &GR%Wi짆6xZտ\9xŐVd%HU~,Y}_'RI<:I/$"k 4J dd% `Sx׺0!{|wgƊ^''x$4š ޵e}XR<&lB sMYF/gY9t¿k#~N~/[M UW6 x<r7G}nS52:|ۿx|5ћ*7x\sr=L ͦSZl0\Oi\bMZȯ%k簳l%B" raʙf 3QQlwv_nխׇu5SJF paߧt&GbAc݂oe7sIZ8Tf&TT,Eakro Rڔ2WۧO{V~v86ۍWsoɉ fϽb; #u_= ڷ蘀:$Dcb}i܃ad?N( '( r p|]"qVf!9)qq+awˈ%6 RI[Xԭ _=+6%x{ 2F_\PP;I+;joURT~ „@C2aW00Ģ# .Iڡ$N䁟aݲߗr 5vk~+ꇳW+et(9{GM8}M{=vk<+/XWsCϵ8p huE.ǃ}.zTTF9ZOT?r?wݳ!,d)$L0,0!HqD7P0S<΂SXے\x?=^N°a~WMϻߣcm\FA]DgLI'_K~O1/2$!dTk(ŵѽ"-(y8~@ #}OJ3|6i`پs:fYjǩZ .徰o!ux-y~i+ٶo w\Ĭ.IL0@@&̕JX3'UXBZWn֡?vj߯e>otcsgr.Sڸv _Sx04t}v%@\lڧTuBy)3JhC a@(jC4@ m*0)7~/%b5Vg_n.+ /3ˇ8fռ2+Sc/vc<-ֳw>:&.VxNXRYNRT0#D 0 )GP=AҘi) J;;~C?JuYƇk4w_MtzͬX߁'񯲝n`68O]wυ`2b3\ ywUI:HhJa`xB "D'5gC7SaӖfMVv7(9l+WP2YM<=CVGà_m+9F;j g姽SL)F}~]&8arݚJnI6%'F#=έIzb*)::\W0 U:u?yW~/\j6;nf7F_}rK~ {`v0f)uFGG񅗼ycFXd;s?Ӌ|Ϩ5Pd?xN(2PTm߮Eٛ#3pm53#,{|Q@.AҊ1P/E9kE,XUbm?d+P4˶=M֓ZrkcxaM@}]X"BwI:_@Y"y"< pעΗg2]5S=Nװ7RrdISW}|f`>O{[kCi1զVܧ"cwcӍ:QB(H$7#zL,[`Yj'.L+IZCD@n l!aE!YZfB8B*TnbJ1; .6 IAdI^41ҘXwdYX K3T iIbYƖZ#.XCl "^.\1c 9 {evF6ʥ5C3Yb}ѾOy+H.uRx5?吪з Ia47JWmXB@5`B4u]mٽ WޕV5Hfa]GE=S&2_~ m Ƭ^f򚱨Cͅ)e4M%yY K!2 tGVͬ3_j͗{-VC 3lpٷXmA 2dT_GɲpbXut!88y29,@BmxwA 8_XCô; yus*%AbT9ȩ&kG$ 5+SyXfy *e@+D.T9C%|2J´@)-aP[U`-|?EECѨT=[||K=s3SӍˊ$ W'93##VnPm3Wax{1%Fn!M# 66RX(aFa+a>uͷ۟' mWZ:TPRP6]"P&dS7up;4nw^K=j5`bҌm4*Ȳtj+ d&iϞb绂eo BK"Tdr! y' C3CER*k}lV%cWՋm@hBDe緛JVB!bDenqW'ȸa~$0Eɱɝ=jbt2^]aW:L Pf 6qxD}_)XI%PaV@L1&e4b%)CuTX~,tN2K7_ &&qXְ{cAx0GK~IYӋ7/WҺ4\IOӆikz]x1+ c̞PWrͤaoי `Y[nKAYL"ŤWQb`*(Wq?ǑWl_uGYӨN83ƓbZAI4L40a@DoC8fcQ>-e"(U!j^zP4owdMC;d\_.䄷ǿa;ޭ+\ P ~7sݰmNfoxisoy% 0qxސbxh;+El#gp? )0?^#m">||;[a:~/FnQw9-%Cg]hXϽӉSY4gt8{>a}\;|''MYn~K[/5$r5UvܮS5{5ޠ+8FX~W>M3\%gz{ꔛ⨵.o o~rϭZbl4펅TS~g$zI1~_fk+.&ʮlqܫoQn8:=s}k.52z?-yhn=Cϑq:_K6V? 'f>I Ῠ~ٍFcM}q|If|e}XdHBHcgO|(̸ֲ0)Ȭ{䒒@YYt$:;c v6=u}ڟ1?0HH=|IULjy!5f ϗj;lj ,1AY&SY@2uĄP2 f@<Vnn/;A|/(Pz0n>4{6CZ*>sSAZ *CmElڔgI+;uӖwqf`할ZQmJP%hРvP0n66wۇaj&`(6ٶj({*Q"zd @ĝJ)XS( J+sQ FŴ($!7<2UD)E*w: "v`! %I*WX(8:;UEER*I RBQUQ* ۍpm)TnD*T(()լYE.HP-sn7%)]+ZvHBL M4M4) IIML d&SD )4lMT"@4L14 LM4M24jm%Bl@К2J~6ziz5=AH 5 A@Ū4'\H`P SH^:]/ /U0k.?Fm#t4s}p4Yg{"x?׶y1QfˡU7nC;XJWaXHe}9?_OWWt3mlj }=US'{W)9y̿Gkp-h/ScX f%Jbܒ%#zv.a> dL Qt%k%. =Ԥ |V_~X~-(4. w\J4`vD(0neH^K**bŠ5k"-bLB]K]Σ\{H7mQP}֝BwˇUOz<^?;y5ecoR^}U|v64$I56WI~qp;}bǍ~IsFψo`& @(d>0]7 nR6o|{P ,UAxgŸBds@&x ^5y2iDOTי*}W4w~`lmFl(s052fZ(*VӹjhQk-u,(h^5՛bkߡ:urk*M9Υ!DTHPya:F)]ō Y)WSu ]wwJA/~/?ѿ[TDUT`0TAPQR*شQ),6 '=Ǧttpj&4z㴓ZQ-&$MEF7Nqr2\g< ( M<||MYϪSC\T52;V PS϶DƁA|Mn:blcAT:ECa!N~AA[ENrA.bƲRs*(#V[Vga[}zl&& %UT)E)hQJڊ5LXڊYW>Υ.rL ^kBͷjkvPPB $oB C1rRNޣSbu,b _ PGc>b[B5h%XUIc Wbb{^b\C1\GA? ݇7" +[;PG:q@6Ou+x#'-Ĺ-q+&DEs_|)_z5lmw_ie{kH(F2P`=u5 բ7_i!D4Jj %駃ѱ!ۙ".`qi-CA{k"xJWwT|wfRb83ihLHPL5SXս-h\JT+Z-.=\2DWjC"I`\Zz1ۓ dHxB,'s!f:+85 Ym!DHjU-#c/XD]JE!Dʍݗ=aoܜ%:߲4ݵ$Ҍ0d FՀ,-bi2̔T Hʒ6(-i v]G]C='K]jq4;#r[`8zߪ'T vwS?9i%\]4g[,|X5vH҃b&)>m>P8ei1V&7nW!KB1 [Ŕܹ)Kj.ĬZ@WUqͫf Q:sYQu,mė" [wRI@)(&S%UU))E($m@!~'򽷫w^^J;PwϒC4D24hU\!p25a*QAQ()IVRa#qH eqVgvD-chp+e6MP*aBw;5zf<լcZk%ݨ7a*f^MOЬj8H֭^O1ق OzkMBGtGXiom;ۈ1LiK+i )PZ)+)$,&fݳŌrf2fi[mq*PlTE%) TثME 6dJ(M1BFڬɬ*@$$#/b+LVu/Do^1'`4f^,_0 .A_y6 Ƕ5LT ;,3!Gpʡg1VAby;ao"ЂV *[1!F22PH==b39p<θmIlPQQ$@!UӏskʼnkxLAH*c4Q/)tƟBq&8uTti/B4,nlW݊ڝ,z`R(]"ޙM*vѵS4& +JvYZoe`n H<'nKRG&Ֆ}!/u䍎{txZdsGHT>#uqIƢL_XJdV\VFDQhNk֚5Q]LnA=DcBw8$m ~6+VO oItTE:*6 Y aF ն@@%q5_w*/_Eg].>Ÿ3rP¨Ƈ !Ɠ'A, "4E&^`lWvݚyKEəEc&N0p\Wi"'(=44 M&Ё>cxPтc.TtwY^eҼ,M>LM*ﮛI'd xX3֒Zj7(EP(AH,U.{TL}̯Z}e4)\m.ۜsYbkXV->[h;d=QeO9,b+ ܬ {B& [!{F\B̃vA4d-cj;%zwe1)SfpT?rǞ?O.)@KnwɆ[ &eVjfGz+ճX53i0Hg fjkY5%FSu{MڽkuhլtTM`0Ja.\Cu.qU]#i|?KTn=qtCIٰtniB%'|+^OMV%UI,X , }, DN'I3DϭmҲzu'CcsRtr3ai j{z:]Rާ Wjm2,I6bFReZRfIdd ijy{9}msk]NWڋyJnۻAk_fxΨ>bL_~霧'Efk8++C駱pZZRrdUT/7 1c-L_=Uw|$>)]llWv]}VKk.x)bZ@ _r(.T&g;d+bROQWe'F|;X ~ۿﷆ.0GFa zWC+C% eSN-X@r3?u%) ,m+)˕X$2?9ģM&[o/|>\W!#kf_|e?vK{.̊n:Bnp%DA|@ ሂww 64_MMl? G_ݸ#BtF Eĭmy:yW'Idh M--$+|~; &n2+qq5 ITqز**'Mۡc4Ȕ4"B?$an(j}N%)D$B^AN$@i8F7r] إ Wi/j*йgS 4"uW+S߼)h4#jX+QwMzyi^^b34ZN% Ƣm8I$Ƈ#-^@0f44'.TykdFXSXUc-f=ǜޑvӱe19j[X=F[։p14PBőKyjWdDռ5jL˼VdA ǴV6A"Lz0QpnADZ@i% fDA@+i &dbi*j?gFl|av_ǞfH mߓ{LgB%M/ғx8jxT`K䨂dZ\ MwT4vG&Wϑ,x`<na9?ÝuǠ#+侓řu+eCs{qµ7g7Do R5McA{ܤº4j6aP(bţܾ?VΏg{ӄ~~fݽ.N΄;YF(rNTP! "2T IB7%_"r2M1 PAي#eˠr2bq81y+'GWsũ64[$.&^l-0\-0es'M(e)_3A*]~ 7 únQ` ]X(vV/> Š4#.N~rΎ!'բ{5S l\;wyx w2!IE8W瑿ujfeOڹZy_ZYi毆xu`C]s3nZr"YG>ujm^aΪ*SCε>ꖟKfſF{_iMFK>V1Qf1Dq y9\ i? %_GeS^kۙz+yNkHz[/o=?V{TӟF옦WN] tcCpK gf56|H $3B( 8!PO"/Lqs%qăhv)%E8yv[#pRP7>B\Q1-!0L6zw<]Ty-37bΑ %,n=M*iNlnu;8vT ۺQ.s5L)ve^C P *-zmO8=CM4͸4*i8r𭫮ltFGN\ O6ʖpj*Y筥{z bI['p '2őWY!5 7^ϽGVzURe9jL][BqH@&x# YONlmw/}λW]MӇJWI/ [qZgwJ,m;Û ~jL^i:ɝFc`pxy6WsҴ%>!->Č+s^[;Wg ]9o2Urku d8[ۍgoūREK&ԇ.<*c k :ٳlkPfIn!H ? ꉒJI18x J9Ɉȼl%R2n;Nv. 6ЀxUx@~,˪cUI*,&?[K59'Hk# T058 ӺUGE=UI[pFl2N&CmjSLܻDL=}498b?,R$x2e]fL]@e ˹,ޕ}c~[ѺVإbg6RNZ,o c^]uܱGwfhm,,eSX+;jBQU~㘄URnzƻ/v "گoW\܅-'u”~Rº7jĦH^BֺkF'CxesgP\x߉G!8T˕Sj֯"h WʍZxV~g@5̟>JXʈ@HR`M?uX+ZNY33D 1ogɻ[gڝ<;@:ͫMID"Pc(8P2deÈKmM덣}Few՗?vV5\cEP@Y24WL.a9% 5yykÛ}{w.<nՋ6E]#tpF*940J|xLw%8&y]|%p͚=JbXA A4Fp")DG:;=][q`GD\e*}Xmqx%c9,QcRxhkREyA̝{;=K+;x$g𱐋!IlIDd6VJ k3Rb42sq)(BUGyk;OmOf-^DVR$T:Hb/Qg:|&kݧc= 5C1YNx梅f۾:<~eVQ~^E)bEJρ-:;t\*Ru|L,OJҪYN)l^`_UJE {_&4G$y1r4/P` iv[y6Y"efjiEq=5^y\qf( ߛήjz5s/*-4ۓ5edy+#hXM($j-e&am+@!AډRT'8<-Cf( h26G$1Ŭ|_0g\7arMXt[U4WVQY+uۏ9F//w}B51,BQh1\Ȝh"3Js{Rw1%]z4kU2WAZ*y8ƶiH'YD ;WC:-[,ҽ57xjk2Յ 5@n-4n aCTW{ 72fJFd(2U3kliE܍YE-ZKzLj^q bHrW?`~Oƭ&8Sw%ԭ}.\}lٽ!URDw{(Dxfh=;O[5!B]5@ NlMIcI#ԲNjdqU-4[h=r/7޾eM3_{jՍXɓo\sŲnIWwjO~D![[ˋ9dv6PU3ӹI];9e֜3"J|SyYcE1.8N^IT-kɫZ׼ӵؾI1۸0YUH30k2Юv* !Q۹}4m3u?xCfH8(ȳC3ӋIٌtEpkN^ڼdM5%]SzZQ8۫XX ȶYt5nkhKcu{)L KLTPIMEYv뛾> ՚d q-D͐bܗxtDaMTO_B j9(dXuݲYĕ E:={~t|"__LB,O#'~cy_l|{k G3\l67i-1[X˒ g p"Z85)ixbyh{nMZCMoona]9! &54&25Zxr'K W~)D]ك8(c6Dm|!Aū~ a~Ր@i\|dj)M"SH4χU{Q yuD5.]g|ĉ}JM&)I&W*Rdd aeYjiﺔ=NpGlZefI\j2@Er𖴅˼g\kZ쩻+@P,ݷN۸[31!-DMF-ؤ0<<ݻ¹w|zlr0FI.w$*4 vy&X{ܥ#PD-` džl󕰄%@3n^w`BYXlU5f 5|a38AOK2a^cFV#Q/4Qv)[uB$q7 4q%e.07,q _AS3+]vƇ޹GJ϶f,^p#@D-V鸵qyAMͻZSEa{ꈩN, PAPnk0)jL ɬ,"(j:[JʼqI%Ĭ}c!۠_C$Kxp/mVH> d9!Zez-E%Pd ׺d—NUIjqT^|:A|^yvNEuB8k2M WqS,H@w0vBt6  14"&b)j(0C-,Oh{!Si"ycGIL=^o}|۹Q>H)68Hdb|-!^SRBt3w@HBc MFPa$bQ!PRLKђ>Dߨ  H*A[̘?57g0 BH  ͤ=Dzre^a$^m&ޥ :$P֡1\B-!]˹;pC f^ٺyEv#WK{f븗}/e#GpZ5XoPOnout5yXdӸ+m7iZ`FNȺf b"`#3ԌXJKI!$9iC^'|znRvC4YJ=J5Hg6~45^YN@ÌiVbPp]z :Ȭv)O|^Kʭk\UIv_mΤi!J*YcWdR#ZH0AQ˶:stWPͥ!Rn@؝X?{󾵭v' )ߗ..8 (d귋aqX-j*~ɧivyw\ M2Um&Wuo0t5ϧwkpala:$ (jdǛ΍fk"E C"3dƔJqz OF]R M!MaseXuKH_{Aڍ` ZO %ϧUS|-}t{xЁ?uzghHHx|ۚn&$"ğ+Ǐz v7 f?|޾2B@ o8{Bu̾WTv7=B}H@{\@6Y@;iA 쨁!|6B ]T! t M{6@OA! ={Baڒ K,@^Ν9$? I'`}n]$Ԁ@5Pg OCdϰ J0! ^OtI8!XH:!$ wvi$Ԑv7ܾmms&lٱ0m !$ =I0d&$= j2NI$ ~>̠Q @xHpclȏ#Z!I"M&.Me3w& Og N;^BJB[%@6ML+gR ,y4+ egeyϙ}*1jz "\;V00  *zNg )]kpU^C"u^w~w5Ha.D9ҋgXg4cW XXGc2ʔ~ D5f0kVWr1v ڮHn}Ǻrn`t,^ Gr?{?/@9(hd:dHoe|ۧXh|"Pb) 6U_XӎE4aPBm'`cM#V[UbX0QSC* _C~kz߫9}տ=jaʸHn TH7L[b *cJQV?Ϗ'J[@)e'_U;k-BvI;+V䟾̐U"Y~nx76)eCq^g%Gl";Z>WyepzV^X|LVMZ4U235,Xb1h9w,QV/롭a˳X;كFEzO} @%M_MD@ ʦLO 0>ݫPlșs=Z[ZY1YTN+@@iQ U9o&qA~e]̨BT Ⱦe! X)'.[zwWj[nj(p<βF=iXB^iGQzv6`B_4Ȩosum4z&{c~\[PX*3Q0/gb>SZl>kןk6]^+.ք=[u1{=3tz{uս)VV zzs BwU͏->:]R)y̹ŽٞZw jEߺ&?^ :Jj&GncGVa&'38-aQ _u?x0BuwLKEz{WqgV51 Vu ;a`Hq> e{kOifQewAT[4tzE!`@mQlKVxTRe'쥭l1r|ZqÁX&by]h DǮƖ4<4y 瀨""MzΒFΕcYw |d54+vw  'ni $mtX CSYֺ4lWW Bd6sY$&N>lx|*T2bnxry6>\tK0`0D"CK_:9ɞQhD^`;ݛ!~*]mZ+ 5ͤk]T,PQ`he`qPd;twz"@.qu;L0uT9q)P @H7hYr xMPM GًYbԨOpc߶X uw+-E|F2NĠ^;[/0+ve#Riczxknj @"/i:4]<׺ֽgdmqE眣㦻;D@*t$szkeVA_2*4)b|r$zBxfٌA;Ĵ̖iiVpEoJ=@ I9kKE_z=J. PCtUA.Z2;x_+\(٪c2.T˵X ~\̖Et$4IL4) ]5y o}-UmZGi_QfSSA2,GKA@9"j*#._o {ijlUAᵘX~P}SftX\ 2:NԒ}{$=es;+E0ۺz~(u H= ) M5 IW[>$Pj{øAlGN%4\&#|k.Nk7ƬJZF_ڕIw;$f'$deF"fdT?!,ae4j p 1xb~۾ P Юir{!bzλ@./-m2yǍ7dfʼkVt|Mj9a/ƭ,q/oq _`ɼK3<6Wk}zF5VL߫/Ɨ$ffi8v7یZtwDhFa~'V Eb^}m2iB)@If&ݓѮ]ժJ (E"d -~^J[^_K޺}@iK粇d~U)IP%CʈT.],ާ$9pRؒBBXTdKas9 E&Z6b) Rۑ *S-Sj &RQU}^-{]:aQq5Jԥ2,Ec-mJ2m+DeQhB`)q\\Mn2ˎ8RLE%SiR+|{}dGšx 3honEdisj TeOL:%P}/$4Ri#jtU\K_xO^~FbȠGfwNTƅM6I2@4ȂCrI[e*"*JTbdm:r,Y"` ~ѩYX[˜TbAKBK5T,EFbhm) oz?<-OӺ N;^AfH$kaU+ۅ7/awGV"A?mvi֏2e "@DN /u2{vK(s_CW;bb(fC %2PLLAz˿t:Ҫk` @4@@h>Oܵ]~ $/* '|Hb)e;8I;U9!2yXȃ`$UQXE1tuXѳFVlE4$V*̊+Bғ ~tSUv@1B^ƙag .!j\{Y6kW%+E;vJ,n3飪M]5qhkF>*PZmV&thR7M.B:XW'KrJQl^\Kww`V$4Rŗe8Ǡ-|~㏖KϻCv Y4s6GhdCmlj]uVͭkHBUd'Iv!,hy~on5KC#s;j`l~oq`  ALXGva#+##tbW  %!ڣq0^w1ͦdH(v{l$Ny&^cM'odfVB)v6X "wjoT{^g? dž>;G H vP@׿4 6LD:<ֱ6h9jW ރܼY P(|b S>[Q:A7Ȼ]xxMyݳ޺ ?7xTN_Gox'>W'uudxSKEWaYdbT-^?23O8O,HItה7| 9LC+tt$Txs/Ѯe&QU$6 PLxG.2M)N`5}XdO! B~ςBc=d7I5䖒#:LʕMU6m‘ /=?PJ@!$& GlUԄ9@ Z K{y\:S7VG**VV;:Br5_ObLwݔI=]Cm c}BrRm{=eyl]f 62:]Fu!e ] 0@ ! !h St-[܈metl4eV!c6@$<mAc1 sr,hDXTWH1#S` .+q, ,Xe\Hkc빋b=ZUo{],GUsM  9f7c׎ʐ4*Ir! @H}IBKw#vΦ+7nߓkyrćD$$IHII;HHeʛ D;4tu85ZY!XtLᢐ;?M,ɵ]nKVMk4`O,ՈBO55tyshldٷ!ܲ?K{EsS i a$zNyҩdn)}<fǰ8v_{dTeڬS@WMS;?dh, @vA(!?6 꿁TRdPl@{;9o~iC8OA0WƥmSSQj'ȃZ2lcChZNK%V#,<o ud%|ɷOUgpa4oƚU%Rbd)R9OFV!Җ`T|!ie˛v8̾R`-J5.ٔ⪛`rҽKsZqROw]Pl_5fCF}њ (#~Fj,Gkd/ǔe{pv8;wn%d T@ՓK*?:n Ɣ}|:seICQe?,tэ66fTܾRulj+n,i[ վzȺpn$r%;l9~ó|ĽOr̿ç:5#xIJ¢K,#&jFYBT=eGסv/FXfJG MXVovw\|ʜq9#$s{dG`=O*qИ-t+]b8gdi!Z&Erdh`76wx2<""<>Xgi㒰;z*{+Z@ X0HHF9+TL==.]LK̠umqzKmԭ_hv;x+U#dFO1_/^{~c?أ>շ6gşʙWws%Dr3\ |I #bcă ޮC]6fm)T|/Yq\B˥f nƍ3,%g/[UYH-gƟg^M(6է[V tĈD23hj ax[S9 QGtg/10>xL`^ŭwT.{=3|Ph%Af ]/5sw~ȳ{bSQw->O)|eNh?s}9J.T]EpUs[Y8 ` 9MHSx1=n.޻px) /(<+&*nA#B|/(0SyvIXwNn2R hR2 d#VcTDE/>wA7.,~ߝ}bhe2>}}oz+x9pwTnA캕MG 4fz),h}WjFAͪV,2 qSCv f- lM3@ oכxH#MlX)(.њ ,H, wgz{%n%dZmɋ-t}ez4cm7Bm^|BH]ɢ|0n9BJIq=tS¥dq( X"sp6&jȶ,zi8:RSA͋d/xn]nQ7)s@&.Fg4uV$tCs}%dOMO}R/v%)ɝ9ڌHyJ}[^P@ciiv_{~m+3jg$'ByL_?6w[ 宅|IL߆P" AEߓ!̠ LنjA٤ f_UAn&Ɵf 4FB K}dL$ʇt;ϿЯ>2h\:JHGbF9ي@`sd$><}Z !NlWG?[u~HK$`z !˫pW =؃MqB`=I$΀2lhbRBO@Bos̸繜CPɀʺEx-!,%, œ߁|0?IR@;hxn.$ < &9^Gb2@)=;^#4\6Ϟ6ޮe <' {!>`$;}0'f8; ~f/H{v{}T3soQZqCEHS)2 =#xr;kjqks$&X^Ek%d/^-ܠI3;F;X5 jCA9q|!> @:KRo; G:Y~S?}~K:A,H@ hDH D m48=GG_c/AyOlSoO=> s_`ni1yN('  }|)rx 1`~@ǃ{_9WJ+? ͆}w{n@zD< mQH =>uȌlLrX7JW]ךÝ_l#-blم3~Ho}/@I 'OPf}p"[*hn6'&1fp1nNΜ T=/g(mi.Lqi>ŋ '-qco),,4l;/%E?c?/ˊ?r s~ ugt{*pC5\Cd?Zͩ`nVu[KPKDD{L0 P'`( S4m7D 0"c?zw X{]\y#Qa T1tZ쫢,IT 5rk5qkaޕ 4/dFOr [3?2营y9&2Y˚no-|55pHX3pn i<:2tKD5q/EYxqWޭ>s_Q;NN> V+ Zijly!tQjѧ#~ݨ͚Q`N q#KrSvyG_*iAem\EG &htM8H١&uP]}AY}M &_ad/Ar'V8+hdcvW]C)q1>)tsen\XП/:~ٟ}~C(<I HS,cvΜiS0pjdsAb/575jJkv`:#s\Jb hJT.}Hq }w>NUK{v8?==}߿.9Lz+0Dv )f]z.Γ̻Sa2)xO'Bwf&Wq1UjxuK9J׃/] xgm5qtR:W+mw_#Y{F4<.z*"9xPkpa6䠨+瘦XGGmGX!O1i%Ӗ=.䜯?ە 2F&<EqAіd)oysmP7Ƈ}\Fd6kVsz@gG:p2Bݗ^#;OH]0C.3A?F\3HqTC}H|SOOO'!5T!L3{?-V\d|Vb N;KwS 1n,9<<\h"nHS7qAIXKGڻ Zq'=%QεE|v׉Vay71=ȢZ/z(u9ϡ tYưYcD7 "smSG@] ʪx} "XszܰwW{lq57^dKLFoi"#GAs98I>_rdhh=0(lK)e0H/l @@$SCT8oQ:Q]­5P(Vz j3&Iz|uC[h53/p+b{3VV`K&+ZxhGYBWW^2J"sL}A6mJ=~~T1^EOiM-[w6&f $KLhZL1oMs؉{% _LlɪĪ>Z}r}.YsRYi]YáI\L׵nԴ{R:~7i mλGpFwMݍk䯂1(U #{Uܵ/ @xPf$zoK$$Jd7 VGZ~lXWK2d Z6;\ a-&Jyu`$aŐhrmTÜI -J˝$ЗI$󨾥Sl,?yD2`ё:'>N.x.fF'/gz{ ֮lb$R|W <̖$)$ %0j/&W)N`lvM砟9`ׅS:]FW%[2"2y䦍;.+t pv%fϖcnŔʱqv'k~X@D $j}3J J SvU F}˩p{x]wO :қG糧qheoYKygLUP@rzvQv[$K([OSoDBƭZrsfL2&4S.7>(Tr*7zu'Bluna)&+Y-dY`Z*҇fHs.RIy! .d,\^x0os.cYe :`?g3od*vRf F?5~OwP.?Dq޷= /LGܣrhC|bά:V0hrӎuGbH>2sil'r4/]|[WO {b H^)($QR,qamj_c*@"z.FsE3F߄&b+Ģ^ ^wuΣaIݞIf2Z 8[^Bb;X-OUׁpңRB^h!#ʛqWU9χ2nO d"YZܵ9Eؿ*,ylv3 p7tN^dJV?bjp%,}~tWCI$5mId bBP:VUﮦk[CJͩGq fb͸= CCҩ8YIq-oif8rK"5T7l>֋  p^%6aM|#?Oeo} ep[oK rvSbKb@vT Υcp\l_&Zp].Sn.?VV6;>$U#,e/> {=H2k31΅彆3|BѦ^'}#fj6//fh`w#[tΜ8q tn0oAa M!J}NeÃ-on ̹W $:JǮWח*7A P̊ddža֣Գv@J+CXEh:@rki =kR^7r>XSiSLQ5ǥԸW%r& $HlaEYhѦ AOWf]^eakteq 0(`YEɥ` \xCHقyBKzH7 "8Yd@]J^cj.ڊj:),$(I;Kۑ#UJ܇|T$.>Mc E⽸ۡ45:D5n+]ѪGx"g7hû~!g▟eOMWxY =YN2EE*0%_Pf7p؍"$7Zܻ+2OQGQx]QG]6}]Dђ`Ix)^詖w JW/ " ˣ,jXNNu%O2-.O^asEq{2۱c|Arڒ/gYzUF =Hv`ފFl𿊎(@QSaō> =BJC# Y:ΛF6f{@zC\'(U(lmDt!Gշ-jA&!J-bal+'DՕM`.(ldl &RnϗMt& "5v}=~V~ٷ@A[n3;@|^)윺")\8Eִ̡fPxJ<сw0sLO=a \^i1n;4O;D~#qR"F$VE J:Y=4fnq N{[&^?+O})o9G%37D-8hJ) NFNsڀ*6[*!vT&T` d ))pƜPK܅<]KU2)FDe@&S<6: (wrﺌ,7tqOYe'8aE W;t_ /-5YD1y2$j5 ?0W>m+6uox|}}.T ЍY5##W!][0 sᦅe1KnѶ&hS@!44qWZ<"C/u uq :PurcO±^.9p+0jmfȠ^Hz$ G$ci %?!pБp:R!@@ iW ܢq9I5yms7=`煗+Ev( j\6hוS7+Zʉu!b[UC[\KMF dKCDn) p3m4;/Zv森ÑKV&n޵Ծ^DX:=b{#ʯL[hq8ސt_ ivWY誺>[h9ӈv? B;#ñ޵9ϜQjDWw^ 0`gCMWyB7GBZ}kII 6|:wo, ,C- 6>5-F.$ dC]:ԅu$r 'Y9p}|ә/jX3jgʼn#b<{uϧ706c: $TXibP^BYuܖҞߙ`XU=bva+6,`tJn ./*~c+&i8tos/mݘFPyK}*+~ B \NP z`I.:0<~O&" e ƈ, n+'6€dȔ!?(T:M/M F\!BҳoܺU? U?UŅ)\h\ ‰hqnOXLhityMw')vyX$6+u ,U#/X=tHH-tїl>UKIo%`E#OJWFj@%aDFU-V˽0u|IO8A? c%9ǬaC'l9&(i'[)DܖINe>0&ܭjG)tj@@ @fHBbILLBh$d$&BCR9dHڒrY!w|j}45lpO&ɢqr} !ܤ!7.!Bd3al%RJ]ʴ.d"Z߳yxUI!>ܶ>@R mH{[ύW:<Ύ 2]ݗ*2W̰@}BN!&|VܯDs.O7P :c嘆 \ZS= qIY MaXrY8 HX@̒B<ē2Cd' !h%nɊ巛VzvZՠ}'=JM zTo{]._# BQE K`u'}vl$8I԰% x/P0/ɾO4uLŊAd,sUn/a/K |BXa 2\ IO3$ʒ̓w }@uvΫQYlTynv[wq 9Pb?ǭnW29<2-a J"Uʞ{U^UV.Q|LYT`>kߜbWsYwॿ{ӄ;!<}94M{yl"N] @#^%׿7!Y-à""$nvoQKD@PWoʕ^V|y P{q] <_3Ι?p@xX>U(-{B2՚}^H~FEك5Z me= h>x^?d8ir,IﳐStTI0ڎUhA͐vl`к/c7l2u0,]pg+tu'kk\/`T\r-\黁oi]ӭ\ -&_|͞I㬻㱲xkpU\ZޣVcxSf.ku+dQd+l]ԉ+]cF;z j& w]NXAӍ].g@XIe! u]4Zj\7xf_GotX$y'%}^z׏ϳ4Tm׏C[k("/DYn"?I$:gI[h L RPkD֋mNiǝ']5WX:̂@]ߗw0 ofL%0C^_(/(]]q^E* YA^R`d{I(D:JwvB7-)?d*b7qxyKZ17L>s%b;vLAFd= Pژ2A-k&^b%I6#<#}KAާ9u*OX/H, bsrbCp#HL"=$TQz>6/`FwBDhTadt4>}jM4 WK7:rg[dy\g!.VjMӃuUNfսM{A ?FҨ#|g/n'YWQ]uMBQk륆$F f ^|^m\W|.mmӛos}C`RJDy̼XW~gf2»`>hn TXG^dnжDz6j %Js5Ti5>]bΖ\"*s5ׅ//ǵ uW|`GQB@xe[FaqMngOy;V~8|?_[&M$ֻaBf G-3x A[}t2 7  /E߼xm|8﮲=;d%Q:{Z"JxuH| qLgdin'΀@G bWz˽ՖOP  b{2pe&*a ߪAi&nͻ'-+AV4o]u*[1+dD 7 M20 K"juuSz$i;]%`sիJMyÍoH*sKJ ά\qh% F<j.ožu`Gȹ7oEQ {d2 );T}OƤN3!N#GVNwE1@hMF fX+rTC4e9Gv&ߔ M\z FwQ,& :R~` )Յ!֭p`"G 9N]Ӽ|v{~^W!Nk+yv`ʑ=tT^Yx8tLVK췵rNN0Q=keU~O/C'db CK0d. ~!(Ҿj@ TiI}+&O0N C2q>=rOnuZ 'n?̺) CKz*t}U%7$0f#KRN"ȭΓ"GK>!ϛQjKp[g!d& & 0RU_'i ޛֻI?&wtaٴIxCקXqakJ7tϗdBK5"wMUBi zSݦ.<[3a]ijur߭pO82zpٵ])b O R0"(ɼ!ύ`8Bh˵4&8N-~qAH:JN>wpGiD{n ap&a.c֐4;泚/R\(s zzw :D $ 3 5돹~z:um07GqYl3f>/2vw ?D>=Za5˗y &Rm^t `zؗk9ivY9g/i3DB*ۗKup*Y2@i̕=0/[9QŁhR\#|経 e [ؙ^s z ál..qulӌު|ɒE|}"o&~ :?͗sz+p]Y ߁>M'o3ܻרh.6!@o>OAj Rm *uCA|ڈp$`WjGo8KOj9FnG{4juac':a,tU5ll V:^ǣQ^2(}-o\6=畄x CJjݞڒ.O4u%68K;i0X-BE>lW#XL{KuwcH_ʍ鹗8?OYZw4S=*W-/C'7a+ɂ{5㸁"%nRQ5.'(n*?*-snD)!gbx'JjC;= |[LFwU:Kq|)n]nx(N68+kF{B >] 3)X=N'^YAQz@')}X@EjG,[ 7 JY曢^N\wsEP ݜ-Lj1v07zfy"T p1]hZBKU.Q |+7U?X:4Ĥ˵. ,cë4 x%щyT=WferHx /Yd.`[xU m2vv'ʴ]eR-ɈTA>\}0Z8-7͞s? q6;,h˖҂!m vU(ӕHM&80=||{%(G'+V/WbV@/ ⸝(Phd]L<)]m)4v_QpFXJ{;7`ҁhȽRSˈ1Y]DZk6 ^oxWOWYz>\.`u@xmrf|lNf]"&h4Q(wUIxe }1ir6@I'v؎  ah&;wyv"y=WqXKOQYǶ]6hQӖUr*W xۜt/ n=@WjZa̯{)M0ON{DgՁi$5e@c3*̹u ii2TԴI<\4۝q}}8.Žn$Ev$Ƭ!?&e˲j2ɕhO7/\hkH_ cǠn)-uJTAuԥ\޲5H S+F'9X8_Yee[9Q\z3_YDog;1{&߸5k]㫎RJcU؝:c\=W5yIrX_&&zY~"ABԙq#صu^>_CrliiMڨQdrZz;½̆Jj'EXW@(1sz׺ 1a,׃o*GnZgS#;f\|qklRJxԹ{VٚGOPk5{|ES˗Nx77R:! DQ?\U}k1vPBh}I;9^ 0Z#iGkyƫӭ*81s";xlC0W;iH)b57M̖{ M4106 q䷽pd8t>;]U( mt&CWp$7M41$L*Lu1im ,- 2N$DfGu#1ѥApj݆1]ʹezT:K%Մuwy uO* a#hUu&;s`mB&Fs8[בqXl('3&G;UG Nuz)k\Nqw7K`:f~xc]mVɲ:qgnjٺ?㉅qu5 b Dnoz"WfVZR?E1TK s[oPaERJvC)Ѵ sIPI~L)D!p!U&eB;-oM\[i8 \*򮮒re^s9/RDuZdk=x[4 >-q8(ez~hKeRۦ&V#U/>k⏟A f{&Bɯs\ ]Wu]2$"ŀ_& ;%z(@HWܱ?fK#Vkr5 Ok西KZ\np<[MѨfE0=d*;xX:-!yRrԲW.^9n2쬺oL5 WՃ76gc̪p76'|9lbY޺k\1y^Ѫ6Rm:sO:J;l$=&Lyȅi`y|4,TdEȓБ(َ궺j?ábŪz~Px:`֕Q'i4~#C@sՃL:J~$t9vP'(^!9 B;ŷ&]S>=.'6 n2yӷ޺J[UpSӆ*S(/ƔPX{FL |RhA|Y3t#L<,tnz|ޒ»6)_bV%nRilȕ-vq"3i8aߠ[veDQ8B)\aCEZ|i5}I뿜#*sP ~x-ڦFIλk6/%~ZƝ-raGdJFM%a wͰEE@HRP2_ sb/q`'Im*IG=?CåD|J_jV;\;b1@> m>% ._E%3 N30@(l/9{7p?1&ݻdI"ziT㙎|oC$rcvxFgB{?Xa?skf߱ ذ8T ?}B[G5;b͚WݍF6"GI<-i7{E3ֿ7}!ڷAO7Uĕ!۸7CƔH,IaŀE?ؙᔋ0\DSאʽ!n9|Chr` <8}l3틶KIK%!o3҄?M`?%E8yBŅLsUI*R'Y 7cH͙MaQ):6|(6DA6èEYӊO wL?a壓_bjL{f1DbcXγ5e{ϧ_ X3 sк (Q A B SbݓʀLtUU*FbL^0K%/ѠoGy`iE b%q0$jSm!+cиWxa!WgDyb@X%@Pg Y_v5iցܽIkq (eο&̥Z^zQ^toa9=792YZPvWGc*nUȫ-3ȧP~B=|6[ԙO+uͩdm:)Y!U~w Fuf݇]`=.͊k[g{HL4 0qP!h]RE& h>*ڊ}&n$CbrrN1Hn/͍[&̮dd:~|?Pt A\Yc>V%0*s驤l Z*$뻗kMj]xTOᨄla|yᣐkkEܨ (0-TL@7nTq,Wv }Ɓ]*"*E}##)1wCdsL5M+?.,8l b~=7Sbנ2!!4Ȳ( vKj۵uDZ˒B;%Ei&a uO\Q{ KK&u2e=@mM.rR%gPL,Gm'To;}jYy-ظ\(HB{ʊ*kT$ @H@%zF5$`hA|Ǝ!1`.Sn2d-m7Fase*EFzL$ӷOՊI;X{ {UM {3ro.[P`S+<۫MOT"e+I`%vD:W0r6Ue}!&OJx.bO rr!.w@6*Q@rQ`s 3̀WN4M!,@?8@,ǣm!`o喗[I8kuVP[zo.P=!j=gOil 0=kx(p;_A_W3([_4j)@Б@2T]R!_d y0n<_6PmwyCA;""$!@F0h8r齡 gh64㎧ !Ymh%|ԇwL;. ȺԼl)! &?#ϻzD-q C.v$ V=-BB#̌ E>{tFiMԒ̳'d,]PYɊ`Wv /uc{ȇ6i}ʷ"vgXB'Z{$XSD"߰4~=:䚜4\5aae +!yԅ:!K [!`4EZY0il|߷6{$'}﻾py7;nhu@xs&>r toSC4%]wUԓ(T:Oτ2uض.fa_c]>~< F/~HxÝF{62lkK%S$kԶ<rhrw/Ijv՛<٭ImXf2& [7R_L?ؚ֌j}/SVz[j=X*U]ؚ,hIfFE?˸5 6oc;#n<^ l3bfM>;$T [|N2<'M [nG/Lr>ږ_|ɬZN*@Yi5##3=Sԃr"EktCПy 2 JlUTUz0~\{wS&1pӁay|dm&M}pP 1o9(lZνȽ s<zO='Ӵav|D,頧w^\) a<׊c-N6:'ƺxU<0E__9x;I$]BRQeI4cT%m܃q֣N]lc:yE$g?bN>?ˏ|(l-$OK'/0"VogQ6^-J!E"0K! ihN~TTň1g.j\"@ӶV$<.@* 81&7ܽ2g)N8il.d78~kIv(k|9l' icsb^ͪ Z/*3v0Q y;epaկkLiPϼ;8uTT齖bSH`#”.XJ ° 5U#za߳r :anؐ`ХеF?//:iuxZVJkl . ",Plk9# j L ([] @>2ǭs< &Wc[F{XNY̊t>S6&ʀt~=r v`r6ItCA`*,mEнSR&6BȂCPѮ򃞣:L:&@AFOQ GhT4ZH).TAH! wKXB Qr 5(6d[xY.S_.徵^}kSvLiNTڵ* U㿩%c6awTY "RyHlՠ'C"O=ܫs44r>ԆLRػS91/8Du AXI"OBר2,B”Ο՚= Y7΂Zl2ع> oai/f4ah[jrquKտ .gkeQ.:~#:pߪVh`龢j O#呞? 6^C19SWƂHv_i 3ٵawU|"L C%Nш;Ŝy}#ؿԌ5fd'u]ѿׂql{Ozr_ ժ\m.]j--(4Dm/Zq}€ut{.t7 W. uy'gZeunY-95GE3:wϬa5 C~\yL( θ[b-̤A2zyI@$AM2p? &gM.FZzs@΁8NOhl. Ws$ Xk=9YNn5Nqv U.p72L "a:xUwFUw#U{9{Y7c볭^-[ΰ;N4q^US:h:ZGQAlYc8cl.Ykl0˓g,wݛ'ZEᤊzGm5ՠ&1!BR <"S;ŕwKZeV#hmkBhl^2쯔94a:KQH`7Q)R~)/¹ r/+3䯣c,U7{Ǯ>*6?刋Dt̢pf- R\,3&lC';' 2]ΓꦔC "b8W7|#`fo|-~km O1hXq7kթDo}l|w#z](أ k`b-eAȖqK7"y5>NT#𾢁 mth;;mCa6$:&m*Gpq^YHB qHPRDW96I>I"MgϯxA0b-/4b#It|7\ IJT}&'01B2 ۨIHz[Fo+]|Z*iP*'h6찥tTzP~l$7lֵ c*y`A. :Da?$3>ƃ- ;d3*AO|{WLֈy$X_-+ Z̚A1;'m~Q,5d4 :N#͌`&O""Iv #)<o0OJR/NB=R`6Qv /͘] +,ۄ_HPuo5B@i=uT'Ji!? B,VMc'_^nÒ.yu>iB'3J<߉;,O?Un*W.qԪu.V>sxcuqM| BД!gՅei]hV;!{1W` wm$՗y`K |RƭNd \Kv*<\3\?\mv]=̔#.G襠iE mV[ X灦m2goUN]j-^)W*ōncpG-^TLxb!6 $xwt5 4~-q[7:|)2`!B*̓Lw艎AJMvj/'Q8E@hL5 $FG+&zpSk㙲 8:QlP7V m'-i#S| .(!5 h  &[CE$QI)9= ȯy}vʸ%γ?&<~㓿VoE ͠20G4v> ؜lU {==Hȋ r\i'!_!6Ny1[boXa B$pq )\}Rc(V3 A`[g8|HK-^ڶ阵9tőڱ4]Dh.or׊vŀ%m`=Sa0H~mZyre|Q;G p?!L@BKEJ!W1.&EbW8HBM'Odp;$ -JFC\G'- U 6؈Y<=b ϝ# v6l L8T6qT+&q=bKӇ%`1c+CtYV{L8r+UOBX -F48`0f-0(Y#*p:Ho8Nk0R#6Ƭ3,Mٷ-`XDc~l yK׮RRU"_3})Y [-NŖQ_ 8< _vO[/*<7Uu[\#b&N<Œe$ඉTHaNAL\pÑP'7#qE NkV"iqCܑ \Pk1f&[+BRa^ȿ3İGwEM.EmKEyƔ@ IdAeŅcnigg40r8@.ڨGRo1'O'Efuk\o9ҟ=q."]&mL6L; m3% ,"!0IVt01j JB ߨhE{PxlۦP!h/B #,z(9lJKG3)'\v[evve/Bض7sa,ZK؛phlqtR JՁ2ƙU+%iE•1(ST6%&6R&eZ+v}omɅ(FeqoŵY;N*kcD`s7k~؂׃$T3ڛ*@(V;oKUs-ձɏM3 MUmۙI)E' ⴗL>z!P&Dى/_:}cٸs. L)R-M1Rg7fP'/.A2@~,?R@-ɫ kZ3Cm‰KDǵd!s~+SရgT&TO٪onYs燱($}BoPWmAr:o`d=XKtD \B 8!1 '} f+YЄZ39A?҇ }i5)R@YS*aU\~#$Bۚ˳@H;]* 1qd[6XvwHA>GCy~DA Iy:O>02$*m]$0e~$5>Q̜ep=H'~,Y}~j{ڛ)y\mi6/z`li<5MCP|CU=O'(u^D6J`S Kp5{do{o0gX_9$9ĞkD]\Rxlܤ+tUuH_#H 0efБlͱFZ,[+I+!:sHI^ՏI]rSl.CvΈrq! oRٗLo} )M. S_:xB=kwk]"s`,oʊu[7WΣ^@?wN0Sv/KZw4u\_^;{>~G=>'>a,C k d#e7X i 5iȊ enc\ U@cy  8A;>79X,IԒ}ӾI0uF|-\?q[L1H"$8dtz{>?K{-ͨÀѿ:za?yt*]%Σy`˝Nӎ$;~;v3yj;rw'zg̡ևyPnikdh@*Z´zUa-Uaj(,խMe/~W? q5o?7,'aD)>K\nSuazg=h%"+.nnԲ}}G3nkgspyE ,h}MD7{4+hFz ^ rl H9X.Nn)6`>7A|ngh6sTEĈW 1b-Z7"hh aEԥ4'X @JLӋE :Ƌ1yE I2e24l2ZT+Kiq( `M,wήoƮVdYPI* NÌ.'Y=[ < fw[W{tw(,t4VR _ -$mT_ڞ2j)!qUfKۇXA>'~[⸚uWo:#}VQVB HI>Oqձh﫪QCqзHh9rzS|/ t=MWϲj=R,P2ZvS%FJbvQqXbiYTɦD+Zs54yZ-bWatbXh@_"?R3[=LqlM"x4VNhc|`Lm!!8g*z{sv^wմU\Ƽ2}UE_R6kFm^^fyr"7<_9$hþ0iu\k -"4a2vyERf)@źr.@) !˝{t\ïԚq יUp^U;8w(@ACj֋et" "C 1un&̊@Lκ"nvyrP7BDŽFF/:#y]{ ; h@"((cԢ}`RbsK7VWgi]0]5l0RP$w$fKC-1fJ;~R٤XFp=MI-?;S>K@+:"1p:\F.}&w0jy2,)sZZ}QMʩ(ct1QCEϡuXiru((*4T )z;**fReQ+3,^нUU kE G-pzZ!(T*tR?ˋ rM _tYW.\4rl X;rmVSIh)"Bg-H)rY]ÂM^LUc]\4q(  44Q_cP\A/~r@kpRA 2='5 e ԩ!OQ2h p@~bzPE}Ѩ(?{ظ­ HckjaʹIs! n!~?~|£/#T=6 tBS ܑN$,|/@9x3|x;|4;x~;xa;$!MyR)}@9x@!8!A| Naha/A<@8A6KAp!`88Kha/A<8 6KA`<c``KB`ilx~|%/AoA/@?3c {`85KA /AxK?<8 `8H;x8xDKA/ @Kb