samba-client-libs-32bit-4.19.8+git.368.51d32c069f-150600.3.6.11<>, Tg p9|^ ib@ S,1:D\]~Tq%#"W`ZqP#j f?/F?/`3x\*O\)9RMO_Cyd) \_Ї(9ID,{YfJB= 9Uc/f*,p*>{3db.Ω63P"N59д9_J/\>AQߡ"OlGE/m>D;Y;i<͕Nus*>AŠ?Őd4 B Y =TZapwLw :w (w w w "w#w&Gw((w*X]0(E8L!9!: !>9B9G;wH=\wI?8wX?YCZF[G(\Idw]K@w^UbUcVudVeVfVlVuWwvXdwwxwy *@DJŌCsamba-client-libs-32bit4.19.8+git.368.51d32c069f150600.3.6.11Samba client librariesThe samba-libs package contains the libraries needed by samba client programs.g h01-ch3a^:dSUSE Linux Enterprise 15SUSE LLC GPL-3.0-or-laterhttps://www.suse.com/Development/Libraries/C and C++https://www.samba.org/linuxx86_64/sbin/ldconfigU5C %eΤv Px YtEx55x%|6Text|5textUt%mXxt%| |ett%|5tW85t5xtxExt|LD&%ExEtմDe$%|FհEx5|U|$HHL%x%t%xxexH5xlllAAg g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g g 5f3200432efcf6526e7c621038d7c3ac6b8acb9d2ed7b07145ee7c1d91a1467763d6725ac75d1772070b91502790693475a708263bdd6e027c78602eaabbd1ceae70397045df74448c4f89a58c9e911191bbc8ff8df68d0bb3a6446c5fc6e3a03c4111fc5f487560ba66ba627bf38b93f95fed0b1f107dbdc3fa721ad9bb9e3ba3b527c725e1eff21b229017cff8486d52c1ea2ac702d2a2bc499dbe8a95e92b445dff86d3b539af1de33a25e1ebad038fa68e4980d9ffa4b2b31de8c710e477bb516a048db9389f2b8de8038888db4682551e9d337327bdc3d194e3cca5538ef8ca660466b0f962438ac2860ba07d9e35e291bca0e2310a67f768042a39a08c51688311eca9e361667e00fb2f6490797d28c4723cdcea56bf8a2422c974b6bc02b4ba2e783def24da8e1c9ba6b32d01e7bf98c73f5f263e1ad064cef4a617b4a5e46956c72b4c20e2044dd7ab2cf77afe7487f29d46064c0d7d705bf3902b96d848d363e15cc86a09043ce2a142f686fa665c807741e7808a47bbcfc659de1366d7341b0c664f97c991a16ef23ecc8b77c583a1b083ad8bb6a5bf6ac0cf05a0a35d4d9ce1069d9f1d8e9c096844fdacd281da99a3123829d39f4b0de6fb1b010ef3b3c0afd66040dddc423f798def558684a3fc14452cba437d9b77238aae706b2207ed82041507ab30a7b6ec71304c0fcf8291495e7a65508d73e919830f5b0802f673c2159b9f1abddd8b8fd974354dbaf7695bb182442ba3da65af05434ae3ed68aacdfc3fcf94614aebaeab44a15043f1719e4944b32712ff7a4364f95d3aedd2ab0abc52d936b5d7887d8bc8997e2754a075a0c92b632c881ac733c4ed5fabbbbdc4c22251a4f70ead41b3b4c5a4eb718fe9cb2690d8be82fe6df9a96aba418a50c0a78880f6893921ebeaa84fca70e89cbd5d3f73aa34621bbc96d744d38ba602d50850677a0a9783df3c1516dcbf7b3b55b49f5d8038039c6cfefa4cbfb733ea45900e77af87e6dc847746761727eb9abffb20d0ce8a0637f323be77539cede18bdf68fbd480f8db189293454c0a335dda2d78e57a0207f39b325343ada870f1e42fce157cba22e3ae7248e3700dfb5b4ae9a14d672a1836e7495b3c60676ddcfc343035a900378d4402ce7217ed3efb1d2c72a4adc37fc5830dbdb1186971746d671f15567d52363bfef9e20b273b22654e4a1ae26d8ec0c8b74108790f93c4795f445e1c16525f9dc62a401ed17a3df35688eff2a26aa53f81a2114413ccf3ebd383ab08766e96f14d7de4ed40bfed20030328a758a38ba4eafea0ec24e6561e1cdd0cd3726fd58f3208d726e8c528baac073e3f9910100c481d60db7478f890b40e270868dd311e70950ad4f851d75d0735fd3b466ad18e09aae5860a88882c700c2858d96d938ed2206d244466dcbc78e126b328e0959a8975227a55f96a64bc2720c524da7a96a924a0f7f2e8448aa2ff59f1920c88cb48b52d977c1b16178f5a65faa53fc0fddc67eff3c9d10de28aa8326f190b31bea5d85c94e66db78a484e1f4852ed9d49420555daf386d82cad60f192ec7465c25da867e58a210c34b45a3aea01b5353002ffaae8433a65aeb655f1de0c202ca212231f92d6490cb2fda77b35551448b07cab66a2f175ec00fbf6ec71435a5f6b75193baec7af99adb95a14bfd96b923743d16556503706c3f577ca4d0dc94ae2c8d27e56c657d95fa692e8b9bd5b66fe82ab527fb017962dadf15ffca8343ea6974852745d6aae66c51991107591df860a5bfe860a8545e0b2bfa1002d1eb2e740c84a9fc4a0ead36ecfb8c18a6a5dd3777db69c3db9ccf39e64e2a0b01b482d0e7c317cd3cbb09953bd84fb3ca6bbb3887620e53d9354d3bbc1ae22f318577af1fcf3d692f1d075ba7ddcc4ef2ef9fc8730488133ef7fddf121f0cc28cd8b2e323b92bf8bac0699641b508dcaa20ae610a89f21979a4d7d43973c78e0c0f1212ee504599ae215e7feb721eb57f68edf598f9bc63029a6ee5ca641f2fea0e9085ebd02e97f9bcf0e69d85f757a415dd0f529cf084a5d27a79a8248f61fd548cffb67cf9082405311ec1c4c1a0edb0f8e934c3feba61584f52c0fbb87daaca7ad07f262662f899f5773bde2e742ac453e94caf2c64b44af57f219d99ee401cfcd536581db516591b96adcef08dc168717528453c15a221ad56abb49313a1fb53f94e0468bca1d9d5fd18ca06370145e1fbb36319b0afce48313be4042f8ef25f2b53cb93d63e95bf35dd18f5cad1b174c98b63a38a0a31af86b03639acdde5dd174f2c18e99b3a667ae259128e2661850c6bf4b6b78ebbe6e24b177dfca5df43d8079896952de2e58cf3a48d246982b68fa6e09f58d03555a668db38eb153e4948e23c1e4367e08da7f87e47f2c50c31881bbad498d0e53d7265d4f9406762b646e24724cb87a00f40e7649374faa77d7a8d3881da6c9e0e7b837ae491d7480e95d5da83f09e6512eb284b1b145db0e8f361f1f7f7c7a113157e16afc6efba6f48e703e632b7475cbbd596e54d18f6d6618a64f497b932cf36fe4ad47397447fb97e2c7d8aa5c24acacaff8346e309886dd6f60d47ffebc310e675b005022dc3f9dd176a64758c8b4faebb485a84d05856240af75636cb5905214d1d41bc5b1b28588545fb817655a7f784f9275381dd571ac3d0b88008b84eca49a583d439ba5ce9a7f7241e36a7f5190ec83bd834d028aa70e327d74a6e12ebce66b0ac4bc23e6b120e19a0e1c0f7c9292a207eb61f3870cb26a710b6f60993dd4cd910c2cfb08abd5622d919fc3f4ae27eaca3033e5318ddbcc73c09516cc96b553d8789703b05f9b955dab6d4ee573ba61d7c99142a00e149c05ea37e04bd3878084f32e41dfaa2198107b43b8a8052daaff629c7737b9b2de29fda7eee5c1c71b1a484f85abdd83d33c005b2c6cafeb3d73d22dee26cbabbe3e61fd1739e50b0f217675b27dbe6d389daae48788af83abc831a171dafa7ba6015e03ea9ea5ecf5670e851fc49a7eab9b9cf6b33d457d5e355d4a11eccd66220311b5fc8fb965c7f180b529020ca93cae1b939c6edb601f80416c9dbb979aaa25e4d6a21c20a220a4b8724a4f50979e1cc102d0daa25fa2546d99c6b1437f5aea976bec0a7c746546d2ad301888daeaeb0918bd0811ff8410032cff1bfaf10ca92db951e3ea734194b2a8657c7981b2c47e920e52c0d1fd6fd700d1378c6151a8a44fe8c7a8576f15beb302c630a7747365dcdccbc5ffb7b83cb65dc201c42494942ea87fb87f8c1fc537d2ca3ee321b7f785d2ce94421815c59972ebcba5c4ab3059d345ab986c9b7341ded4a2254cb79304fc38948525908de61589a3a7f3c1923df03a0107d59fd65025cbb2d47a0b28ed4eb02ff50c8f69f6b508a6179e2d5ab12c0f758e8430ba6bce30a81e8d3db8e21c494794e4df4ef2411efa4c9f214099dacb0729d4b335c99719a472e209ecd8534006f44c082ddc189fc7dc5202b8a112539d7fd767c281fd4642cd5809febbdfa5828c96b8fee6ce2f3e42ae99f6e70f6aed018942367a578249f4b7492c8f0e103de7e59feadbb7b77d5c1930d0af2b17733f26aa6b168288d039f6c4d4594e48c02d047ee780892201269789043e654b4af5816e7a2baa59bf7c0d5105575b5010dc0fb6c688fd227ae1839d7f27b80fccd1a186b07c79fc6d360294bc4cffd4ae4e3643023102f93281b515fe5aa42c0ce1f09bcaf91c7fafdf874c34f8257e2d90dd69616d0b784c8ac7fdfa8a1682f4db6cdb7394fa93292b2cb46a09613ffbed24cf98fc893870eea5da52e397bd6958a663fbad456fe361e9ddd533afab8d712414ae595f5e7fca0db1d60e7b0e3000029d257a7dbbea7f89e89340cc53480557b016a4d6fe8019f89fd9df73b7242a9df7966246c0f3e6059ad42e1d2d62c9a02d57c46ac842b5a33f2cfd596d9de4ba6dafc9d9cc20008f753b192f253a56d5a6bbf33eebc190d5271b719e288ee828d3a8bdbf481d984619dc84fa6457682ca6d89df7ad162e0b7cd41c052487f02d273d7707c5504e405fcb34efa7928d9db1c6847376572e3f7fa50948a9803e2d6017738dce31e407c76a994c700b99242cf1fc1de26f835f2f204b9461127589c24a16c68ed6ef99c00596924d20f8928b694c9acc242542e91b7da91f597f339f6d16b7397d5512c3f4b0cb6364e2f087dfcdc3019a086e306ee920e554b0e8735056197cf615c5a02c356cdfa05b3254be3f5f9b100a7564a1f711cd785b66b6c7b57f92ab02e4114d55dd3ea2fca282b36b78fd6d572a8352242ce1570e003d9792ac117c90d7bf5e550bf65a553c63fe35d530d32491001e1aa52ed4d974aedf3999dc747ad4c889f9984c5c217f99f8abcef0867c41b065cabcb9c2ccbdbd5e25da4af563libdcerpc-binding.so.0.0.1libdcerpc-server-core.so.0.0.1libdcerpc.so.0.0.1libndr-krb5pac.so.0.0.1libndr-nbt.so.0.0.1libndr-standard.so.0.0.1libndr.so.3.0.1libnetapi.so.1.0.0libsamba-credentials.so.1.0.0libsamba-errors.so.1.0.0libsamba-hostconfig.so.0.0.1libsamba-passdb.so.0.28.0libsamba-util.so.0.0.1libsamdb.so.0.0.1libsmbclient.so.0.7.0libsmbconf.so.0.0.1libsmbldap.so.2.1.0libtevent-util.so.0.0.1libwbclient.so.0.16rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootsamba-4.19.8+git.368.51d32c069f-150600.3.6.11.src.rpmlibCHARSET3-samba4.solibCHARSET3-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libMESSAGING-SEND-samba4.solibMESSAGING-SEND-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libMESSAGING-samba4.solibMESSAGING-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libaddns-samba4.solibaddns-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libads-samba4.solibads-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libasn1util-samba4.solibasn1util-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libauth-samba4.solibauth-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libauthkrb5-samba4.solibauthkrb5-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libcli-cldap-samba4.solibcli-cldap-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libcli-ldap-common-samba4.solibcli-ldap-common-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libcli-ldap-samba4.solibcli-ldap-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libcli-nbt-samba4.solibcli-nbt-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libcli-smb-common-samba4.solibcli-smb-common-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libcli-spoolss-samba4.solibcli-spoolss-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libcliauth-samba4.solibcliauth-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libclidns-samba4.solibclidns-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libcluster-samba4.solibcluster-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libcmdline-contexts-samba4.solibcmdline-contexts-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libcmdline-samba4.solibcmdline-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libcommon-auth-samba4.solibcommon-auth-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libdbwrap-samba4.solibdbwrap-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libdcerpc-binding.so.0libdcerpc-binding.so.0(DCERPC_BINDING_0.0.1)libdcerpc-binding0-32bitlibdcerpc-pkt-auth-samba4.solibdcerpc-pkt-auth-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libdcerpc-samba-samba4.solibdcerpc-samba-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libdcerpc-samba4.solibdcerpc-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libdcerpc-server-core.so.0libdcerpc-server-core.so.0(DCERPC_SERVER_CORE_0.0.1)libdcerpc.so.0libdcerpc.so.0(DCERPC_0.0.1)libdcerpc0-32bitlibevents-samba4.solibevents-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libflag-mapping-samba4.solibflag-mapping-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libgenrand-samba4.solibgenrand-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libgensec-samba4.solibgensec-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libgpo-samba4.solibgpo-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libgse-samba4.solibgse-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libhttp-samba4.solibhttp-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libinterfaces-samba4.solibinterfaces-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libiov-buf-samba4.solibiov-buf-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libkrb5samba-samba4.solibkrb5samba-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libldbsamba-samba4.solibldbsamba-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)liblibcli-lsa3-samba4.soliblibcli-lsa3-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)liblibcli-netlogon3-samba4.soliblibcli-netlogon3-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)liblibsmb-samba4.soliblibsmb-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libmessages-dgm-samba4.solibmessages-dgm-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libmessages-util-samba4.solibmessages-util-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libmscat-samba4.solibmscat-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libmsghdr-samba4.solibmsghdr-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libmsrpc3-samba4.solibmsrpc3-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libndr-krb5pac.so.0libndr-krb5pac.so.0(NDR_KRB5PAC_0.0.1)libndr-krb5pac0-32bitlibndr-nbt.so.0libndr-nbt.so.0(NDR_NBT_0.0.1)libndr-nbt0-32bitlibndr-samba-samba4.solibndr-samba-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libndr-samba4.solibndr-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libndr-standard.so.0libndr-standard.so.0(NDR_STANDARD_0.0.1)libndr-standard0-32bitlibndr.so.3libndr.so.3(NDR_0.0.1)libndr.so.3(NDR_0.0.2)libndr.so.3(NDR_0.0.3)libndr.so.3(NDR_0.0.4)libndr.so.3(NDR_0.0.5)libndr.so.3(NDR_0.0.6)libndr.so.3(NDR_0.0.7)libndr.so.3(NDR_0.0.8)libndr.so.3(NDR_0.0.9)libndr.so.3(NDR_0.1.0)libndr.so.3(NDR_0.1.1)libndr.so.3(NDR_0.1.2)libndr.so.3(NDR_0.2.0)libndr.so.3(NDR_0.2.1)libndr.so.3(NDR_1.0.0)libndr.so.3(NDR_1.0.1)libndr.so.3(NDR_1.0.2)libndr.so.3(NDR_2.0.0)libndr.so.3(NDR_3.0.0)libndr.so.3(NDR_3.0.1)libndr2-32bitlibnet-keytab-samba4.solibnet-keytab-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libnetapi.so.1libnetapi.so.1(NETAPI_1.0.0)libnetapi0-32bitlibnetif-samba4.solibnetif-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libnpa-tstream-samba4.solibnpa-tstream-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libprinting-migrate-samba4.solibprinting-migrate-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libregistry-samba4.solibregistry-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libreplace-samba4.solibreplace-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libsamba-cluster-support-samba4.solibsamba-cluster-support-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libsamba-credentials.so.1libsamba-credentials.so.1(SAMBA_CREDENTIALS_1.0.0)libsamba-credentials1-32bitlibsamba-debug-samba4.solibsamba-debug-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libsamba-errors.so.1libsamba-errors.so.1(SAMBA_ERRORS_1.0.0)libsamba-errors0-32bitlibsamba-hostconfig.so.0libsamba-hostconfig.so.0(SAMBA_HOSTCONFIG_0.0.1)libsamba-hostconfig0-32bitlibsamba-modules-samba4.solibsamba-modules-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libsamba-passdb.so.0libsamba-passdb.so.0(SAMBA_PASSDB_0.2.0)libsamba-passdb.so.0(SAMBA_PASSDB_0.24.1)libsamba-passdb.so.0(SAMBA_PASSDB_0.24.2)libsamba-passdb.so.0(SAMBA_PASSDB_0.25.0)libsamba-passdb.so.0(SAMBA_PASSDB_0.26.0)libsamba-passdb.so.0(SAMBA_PASSDB_0.27.0)libsamba-passdb.so.0(SAMBA_PASSDB_0.27.1)libsamba-passdb.so.0(SAMBA_PASSDB_0.27.2)libsamba-passdb.so.0(SAMBA_PASSDB_0.28.0)libsamba-passdb0-32bitlibsamba-security-samba4.solibsamba-security-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libsamba-sockets-samba4.solibsamba-sockets-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libsamba-util.so.0libsamba-util.so.0(SAMBA_UTIL_0.0.1)libsamba-util0-32bitlibsamba3-util-samba4.solibsamba3-util-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libsamdb-common-samba4.solibsamdb-common-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libsamdb.so.0libsamdb.so.0(SAMDB_0.0.1)libsamdb0-32bitlibsecrets3-samba4.solibsecrets3-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libserver-id-db-samba4.solibserver-id-db-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libserver-role-samba4.solibserver-role-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libsmb-transport-samba4.solibsmb-transport-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libsmbclient-raw-samba4.solibsmbclient-raw-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libsmbclient.so.0libsmbclient.so.0(SMBCLIENT_0.1.0)libsmbclient.so.0(SMBCLIENT_0.2.0)libsmbclient.so.0(SMBCLIENT_0.2.1)libsmbclient.so.0(SMBCLIENT_0.2.2)libsmbclient.so.0(SMBCLIENT_0.2.3)libsmbclient.so.0(SMBCLIENT_0.3.0)libsmbclient.so.0(SMBCLIENT_0.3.1)libsmbclient.so.0(SMBCLIENT_0.3.2)libsmbclient.so.0(SMBCLIENT_0.3.3)libsmbclient.so.0(SMBCLIENT_0.4.0)libsmbclient.so.0(SMBCLIENT_0.5.0)libsmbclient.so.0(SMBCLIENT_0.6.0)libsmbclient.so.0(SMBCLIENT_0.7.0)libsmbclient0-32bitlibsmbconf.so.0libsmbconf.so.0(SMBCONF_0.0.1)libsmbconf0-32bitlibsmbd-base-samba4.solibsmbd-base-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libsmbd-shim-samba4.solibsmbd-shim-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libsmbldap.so.2libsmbldap.so.2(SMBLDAP_0)libsmbldap.so.2(SMBLDAP_1)libsmbldap.so.2(SMBLDAP_2)libsmbldap.so.2(SMBLDAP_2.1.0)libsmbldap2-32bitlibsmbldaphelper-samba4.solibsmbldaphelper-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libsocket-blocking-samba4.solibsocket-blocking-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libstable-sort-samba4.solibstable-sort-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libsys-rw-samba4.solibsys-rw-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libtalloc-report-printf-samba4.solibtalloc-report-printf-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libtdb-wrap-samba4.solibtdb-wrap-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libtevent-util.so.0libtevent-util.so.0(TEVENT_UTIL_0.0.1)libtevent-util0-32bitlibtime-basic-samba4.solibtime-basic-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libtrusts-util-samba4.solibtrusts-util-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libutil-reg-samba4.solibutil-reg-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libutil-setid-samba4.solibutil-setid-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libutil-tdb-samba4.solibutil-tdb-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libwbclient.so.0libwbclient.so.0(WBCLIENT_0.10)libwbclient.so.0(WBCLIENT_0.11)libwbclient.so.0(WBCLIENT_0.12)libwbclient.so.0(WBCLIENT_0.13)libwbclient.so.0(WBCLIENT_0.14)libwbclient.so.0(WBCLIENT_0.15)libwbclient.so.0(WBCLIENT_0.16)libwbclient.so.0(WBCLIENT_0.9)libwbclient0-32bitsamba-client-libs-32bitsamba-client-libs-32bit(x86-32)@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    /bin/shld-linux.so.2ld-linux.so.2(GLIBC_2.3)libCHARSET3-samba4.solibCHARSET3-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libMESSAGING-SEND-samba4.solibMESSAGING-SEND-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libMESSAGING-samba4.solibMESSAGING-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libacl.so.1libacl.so.1(ACL_1.0)libaddns-samba4.solibaddns-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libads-samba4.solibads-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libasn1util-samba4.solibasn1util-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libauth-samba4.solibauth-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libauthkrb5-samba4.solibauthkrb5-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libavahi-client.so.3libavahi-common.so.3libc.so.6libc.so.6(GLIBC_2.0)libc.so.6(GLIBC_2.1)libc.so.6(GLIBC_2.1.1)libc.so.6(GLIBC_2.1.2)libc.so.6(GLIBC_2.1.3)libc.so.6(GLIBC_2.11)libc.so.6(GLIBC_2.15)libc.so.6(GLIBC_2.17)libc.so.6(GLIBC_2.2)libc.so.6(GLIBC_2.2.3)libc.so.6(GLIBC_2.2.4)libc.so.6(GLIBC_2.27)libc.so.6(GLIBC_2.28)libc.so.6(GLIBC_2.3)libc.so.6(GLIBC_2.3.2)libc.so.6(GLIBC_2.3.3)libc.so.6(GLIBC_2.3.4)libc.so.6(GLIBC_2.32)libc.so.6(GLIBC_2.33)libc.so.6(GLIBC_2.34)libc.so.6(GLIBC_2.38)libc.so.6(GLIBC_2.4)libc.so.6(GLIBC_2.5)libc.so.6(GLIBC_2.6)libc.so.6(GLIBC_2.8)libcli-cldap-samba4.solibcli-cldap-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libcli-ldap-common-samba4.solibcli-ldap-common-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libcli-ldap-samba4.solibcli-ldap-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libcli-nbt-samba4.solibcli-nbt-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libcli-smb-common-samba4.solibcli-smb-common-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libcli-spoolss-samba4.solibcli-spoolss-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libcliauth-samba4.solibcliauth-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libclidns-samba4.solibclidns-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libcluster-samba4.solibcluster-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libcom_err.so.2libcommon-auth-samba4.solibcommon-auth-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libdbwrap-samba4.solibdbwrap-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libdcerpc-binding.so.0libdcerpc-binding.so.0(DCERPC_BINDING_0.0.1)libdcerpc-pkt-auth-samba4.solibdcerpc-pkt-auth-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libdcerpc-samba-samba4.solibdcerpc-samba-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libdcerpc.so.0libdcerpc.so.0(DCERPC_0.0.1)libflag-mapping-samba4.solibflag-mapping-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libgenrand-samba4.solibgenrand-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libgensec-samba4.solibgensec-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libgnutls.so.30libgnutls.so.30(GNUTLS_3_4)libgnutls.so.30(GNUTLS_3_6_10)libgnutls.so.30(GNUTLS_3_6_13)libgnutls.so.30(GNUTLS_3_6_3)libgse-samba4.solibgse-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libgssapi_krb5.so.2libgssapi_krb5.so.2(gssapi_krb5_2_MIT)libhttp-samba4.solibhttp-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libinterfaces-samba4.solibinterfaces-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libiov-buf-samba4.solibiov-buf-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libk5crypto.so.3libk5crypto.so.3(k5crypto_3_MIT)libkrb5.so.3libkrb5.so.3(krb5_3_MIT)libkrb5samba-samba4.solibkrb5samba-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)liblber-2.4.so.2libldap_r-2.4.so.2libldb.so.2libldb.so.2(LDB_0.9.10)libldb.so.2(LDB_0.9.15)libldb.so.2(LDB_0.9.16)libldb.so.2(LDB_0.9.23)libldb.so.2(LDB_1.1.1)libldb.so.2(LDB_1.1.19)libldb.so.2(LDB_1.1.30)libldb.so.2(LDB_1.3.0)libldb.so.2(LDB_2.6.1)libldb.so.2(LDB_2.8.0)libldbsamba-samba4.solibldbsamba-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)liblibcli-lsa3-samba4.soliblibcli-lsa3-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)liblibcli-netlogon3-samba4.soliblibcli-netlogon3-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)liblibsmb-samba4.soliblibsmb-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libmessages-dgm-samba4.solibmessages-dgm-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libmessages-util-samba4.solibmessages-util-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libmsghdr-samba4.solibmsghdr-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libmsrpc3-samba4.solibmsrpc3-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libndr-krb5pac.so.0libndr-krb5pac.so.0(NDR_KRB5PAC_0.0.1)libndr-nbt.so.0libndr-nbt.so.0(NDR_NBT_0.0.1)libndr-samba-samba4.solibndr-samba-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libndr-samba4.solibndr-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libndr-standard.so.0libndr-standard.so.0(NDR_STANDARD_0.0.1)libndr.so.3libndr.so.3(NDR_0.0.1)libndr.so.3(NDR_0.0.3)libndr.so.3(NDR_0.0.4)libndr.so.3(NDR_0.0.5)libndr.so.3(NDR_0.0.6)libndr.so.3(NDR_0.0.7)libndr.so.3(NDR_0.0.8)libndr.so.3(NDR_0.0.9)libndr.so.3(NDR_0.1.1)libndr.so.3(NDR_0.1.2)libndr.so.3(NDR_0.2.0)libndr.so.3(NDR_0.2.1)libndr.so.3(NDR_1.0.0)libndr.so.3(NDR_1.0.1)libndr.so.3(NDR_1.0.2)libndr.so.3(NDR_2.0.0)libndr.so.3(NDR_3.0.1)libnetif-samba4.solibnetif-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libnpa-tstream-samba4.solibnpa-tstream-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libnscd.so.1libnscd.so.1(LIBNSCD_1.0)libpam.so.0libpam.so.0(LIBPAM_1.0)libpopt.so.0libpopt.so.0(LIBPOPT_0)libreplace-samba4.solibreplace-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libsamba-cluster-support-samba4.solibsamba-cluster-support-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libsamba-credentials.so.1libsamba-credentials.so.1(SAMBA_CREDENTIALS_1.0.0)libsamba-debug-samba4.solibsamba-debug-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libsamba-errors.so.1libsamba-errors.so.1(SAMBA_ERRORS_1.0.0)libsamba-hostconfig.so.0libsamba-hostconfig.so.0(SAMBA_HOSTCONFIG_0.0.1)libsamba-modules-samba4.solibsamba-modules-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libsamba-passdb.so.0libsamba-passdb.so.0(SAMBA_PASSDB_0.2.0)libsamba-passdb.so.0(SAMBA_PASSDB_0.27.1)libsamba-security-samba4.solibsamba-security-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libsamba-sockets-samba4.solibsamba-sockets-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libsamba-util.so.0libsamba-util.so.0(SAMBA_UTIL_0.0.1)libsamba3-util-samba4.solibsamba3-util-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libsamdb-common-samba4.solibsamdb-common-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libsamdb.so.0libsamdb.so.0(SAMDB_0.0.1)libsecrets3-samba4.solibsecrets3-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libserver-id-db-samba4.solibserver-id-db-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libserver-role-samba4.solibserver-role-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libsmb-transport-samba4.solibsmb-transport-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libsmbclient-raw-samba4.solibsmbclient-raw-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libsmbconf.so.0libsmbconf.so.0(SMBCONF_0.0.1)libsmbd-shim-samba4.solibsmbd-shim-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libsmbldap.so.2libsmbldap.so.2(SMBLDAP_0)libsmbldap.so.2(SMBLDAP_1)libsmbldaphelper-samba4.solibsmbldaphelper-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libsocket-blocking-samba4.solibsocket-blocking-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libstable-sort-samba4.solibstable-sort-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libsys-rw-samba4.solibsys-rw-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libsystemd.so.0libsystemd.so.0(LIBSYSTEMD_209)libtalloc-report-printf-samba4.solibtalloc-report-printf-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libtalloc.so.2libtalloc.so.2(TALLOC_2.0.2)libtalloc.so.2(TALLOC_2.1.0)libtalloc.so.2(TALLOC_2.3.5)libtasn1.so.6libtasn1.so.6(LIBTASN1_0_3)libtdb-wrap-samba4.solibtdb-wrap-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libtdb.so.1libtdb.so.1(TDB_1.2.1)libtdb.so.1(TDB_1.2.2)libtdb.so.1(TDB_1.2.5)libtdb.so.1(TDB_1.3.0)libtdb.so.1(TDB_1.3.11)libtdb.so.1(TDB_1.3.17)libtevent-util.so.0libtevent-util.so.0(TEVENT_UTIL_0.0.1)libtevent.so.0libtevent.so.0(TEVENT_0.11.0)libtevent.so.0(TEVENT_0.12.0)libtevent.so.0(TEVENT_0.13.0)libtevent.so.0(TEVENT_0.15.0)libtevent.so.0(TEVENT_0.9.12)libtevent.so.0(TEVENT_0.9.13)libtevent.so.0(TEVENT_0.9.16)libtevent.so.0(TEVENT_0.9.20)libtevent.so.0(TEVENT_0.9.30)libtevent.so.0(TEVENT_0.9.31)libtevent.so.0(TEVENT_0.9.37)libtevent.so.0(TEVENT_0.9.9)libtime-basic-samba4.solibtime-basic-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libtrusts-util-samba4.solibtrusts-util-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libutil-reg-samba4.solibutil-reg-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libutil-setid-samba4.solibutil-setid-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libutil-tdb-samba4.solibutil-tdb-samba4.so(SAMBA_4.19.8_GIT.368.51D32C069F150600.3.6.11SUSE_OS15.0_I386_SAMBA4)libwbclient.so.0libwbclient.so.0(WBCLIENT_0.13)libwbclient.so.0(WBCLIENT_0.9)libz.so.1rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.3fٝ@fxfteԔ@ee5@ede6`@e-%e'e%addiss@suse.comscabrero@suse.denopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comdmulder@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comscabrero@suse.descabrero@suse.descabrero@suse.denopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comscabrero@suse.dedmulder@suse.comscabrero@suse.denopower@suse.comnopower@suse.comscabrero@suse.denopower@suse.comnopower@suse.comscabrero@suse.denopower@suse.comscabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comddiss@suse.comnopower@suse.comdmulder@suse.comdmulder@suse.comnopower@suse.comscabrero@suse.descabrero@suse.dedimstar@opensuse.orgscabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comnopower@suse.comnopower@suse.comscabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comnopower@suse.comscabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.denopower@suse.comscabrero@suse.deddiss@suse.comddiss@suse.comddiss@suse.comscabrero@suse.descabrero@suse.dedmulder@suse.comnopower@suse.comscabrero@suse.descabrero@suse.dedmulder@suse.comscabrero@suse.descabrero@suse.denopower@suse.comnopower@suse.comnopower@suse.comdmulder@suse.comscabrero@suse.denopower@suse.comddiss@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comscabrero@suse.denopower@suse.comnopower@suse.comjmcdonough@suse.comnopower@suse.comscabrero@suse.denopower@suse.comnopower@suse.comddiss@suse.comddiss@suse.comnopower@suse.comnopower@suse.comddiss@suse.comnopower@suse.comdmulder@suse.comdmulder@suse.comddiss@suse.comscabrero@suse.dedmulder@suse.comddiss@suse.comnopower@suse.comjengelh@inai.dedmulder@suse.comscabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comdmulder@suse.comdmulder@suse.comjmcdonough@suse.comdmulder@suse.comscabrero@suse.dedmulder@suse.comscabrero@suse.dedmulder@suse.comdmulder@suse.comvcizek@suse.comdmulder@suse.comdmulder@suse.comnopower@suse.comscabrero@suse.dejmcdonough@suse.comscabrero@suse.deaaptel@suse.comjengelh@inai.dedimstar@opensuse.orgdmulder@suse.comjmcdonough@suse.comdavid.mulder@suse.comjmcdonough@suse.comaaptel@suse.comdmulder@suse.comscabrero@suse.comscabrero@suse.comkukuk@suse.dedavid.mulder@suse.comscabrero@suse.comrbrown@suse.comdmulder@suse.comscabrero@suse.comdimstar@opensuse.orgscabrero@suse.comaaptel@suse.comnopower@suse.comnopower@suse.comaaptel@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comddiss@suse.comnopower@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comdmulder@suse.comnopower@suse.comjmcdonough@suse.comaaptel@suse.comkukuk@suse.comkukuk@suse.denopower@suse.comaaptel@suse.comdmulder@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comddiss@suse.comjmcdonough@suse.comddiss@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comjmcdonough@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comtchvatal@suse.comlmuelle@suse.comnopower@suse.comcrrodriguez@opensuse.orglmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comnoel.power@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comnopower@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.commpluskal@suse.comlmuelle@suse.comnopower@suse.deddiss@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.denopower@suse.delmuelle@suse.comnopower@suse.deddiss@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.com- Incorrect FSCTL_QUERY_ALLOCATED_RANGES response when truncated; (bso#15699); (bsc#1229684). - Update to 4.19.8 * Invalid client warning about command line passwords; (bso#15671); * Version string is truncated in manpages; (bso#15672); * --version-* options are still not ergonomic, and they reject tilde characters; (bso#15673); * cmdline_burn does not always burn secrets; (bso#15674); * Samba doesn't parse SDDL found in defaultSecurityDescriptor in AD_DS_Classes_Windows_Server_v1903.ldf; (bso#15685); * We have added new options --vendor-name and --vendor-patch- revision arguments to ./configure to allow distributions and packagers to put their name in the Samba version string so that when debugging Samba the source of the binary is obvious; (bso#15654); * When claims enabled with heimdal kerberos, unable to log on to a Windows computer when user account need to change their own password; (bso#15655); * Fix clock skew error message and memory cache clock skew recovery; (bso#15676); * CTDB RADOS mutex helper misses namespace support; (bso#15665); * The images don't build after the git security release and CentOS 8 Stream is EOL; (bso#15660); * Fix unnecessary delays in CTDB while processing requests under high load; (bso#15678); * Dynamic DNS updates with the internal DNS are not working; (bso#13019); * s4:nbt_server: does not provide unexpected handling, so winbindd can't use nmb requests instead cldap; (bso#15620); * Panic in vfs_offload_token_db_fetch_fsp(); (bso#15664); * "client use kerberos" and --use-kerberos is ignored for the machine account; (bso#15666); * Regression DFS not working with widelinks = true; (bso#15435); * ntlm_auth make logs more consistent with length check; (bso#15677);- Fix a crash when joining offline and 'kerberos method' includes keytab; (bsc#1228732); - Fix reading the password from STDIN or environment vars if it was already given in the command line; (bsc#1228732);- Update to 4.19.7 * ldb qsort might r/w out of bounds with an intransitive compare function (ldb 2.8.1 is already released); (bso#15569). * Many qsort() comparison functions are non-transitive, which can lead to out-of-bounds access in some circumstances (ldb 2.8.1 is already released); (bso#15625). * Need to change gitlab-ci.yml tags in all branches to avoid CI bill; (bso#15638). * netr_LogonSamLogonEx returns NR_STATUS_ACCESS_DENIED with SysvolReady=0; (bso#14981). * Anonymous smb3 signing/encryption should be allowed (similar to Windows Server 2022); (bso#15412). * Panic in dreplsrv_op_pull_source_apply_changes_trigger; (bso#15573). * winbindd, net ads join and other things don't work on an ipv6 only host; (bso#15642). * Smbcacls incorrectly propagates inheritance with Inherit-Only flag; (bso#15636). * http library doesn't support 'chunked transfer encoding'; (bso#15611). - Update to 4.19.6 * fd_handle_destructor() panics within an smbd_smb2_close() if vfs_stat_fsp() fails in fd_close(); (bso#15527). * samba-gpupdate: Correctly implement site support; (bso#15588). * libgpo: Segfault in python bindings; (bso#15599). * Packet marshalling push support missing for CTDB_CONTROL_TCP_CLIENT_DISCONNECTED and CTDB_CONTROL_TCP_CLIENT_PASSED; (bso#15580).- Update to 4.19.5 * Windows 2016 fails to restore previous version of a file from a shadow_copy2 snapshot; (bso#13688). * Symlinks on AIX are broken in 4.19 (and a few version before that); (bso#15549). * Fake directory create times has no effect; (bso#12421). * ctime mixed up with mtime by smbd; (bso#15550). * samba-gpupdate --rsop fails if machine is not in a site; (bso#15548). * gpupdate: The root cert import when NDES is not available is broken; (bso#15557). * samba-gpupdate should print a useful message if cepces-submit can't be found; (bso#15552). * samba-gpupdate logging doesn't work; (bso#15558). * smbpasswd reset permissions only if not 0600; (bso#15555).- Remove -x from bash shebang update-apparmor-samba-profile; (bsc#1218431).- Update to 4.19.4 * net changesecretpw cannot set the machine account password if secrets.tdb is empty; (bso#13577). * For generating doc, take, if defined, env XML_CATALOG_FILES; (bso#15540). * Trivial C typo in nsswitch/winbind_nss_netbsd.c; (bso#15541). * vfs_linux_xfs is incorrectly named; (bso#15542). * systemd stumbled over copyright-message at smbd startup; (bso#15377). * Following intermediate abolute share-local symlinks is broken; (bso#15505). * ctdb RELEASE_IP causes a crash in release_ip if a connection to a non-public address disconnects first; (bso#15523). * shadow_copy2 broken when current fileset's directories are removed; (bso#15544). * smbd does not detect ctdb public ipv6 addresses for multichannel exclusion; (bso#15534). * 'force user = localunixuser' doesn't work if 'allow trusted domains = no' is set; (bso#15469). * smbget debug logging doesn't work; (bso#15525). * smget: username in the smburl and interactive password entry doesn't work; (bso#15532). * smbget auth function doesn't set values for password prompt correctly; (bso#15538). * Unable to copy and write files from clients to Ceph cluster via SMB Linux gateway with Ceph VFS module; (bso#15440). * Multichannel refresh network information; (bso#15547).- Update to 4.19.3 * sid_strings test broken by unix epoch > 1700000000; (bso#15520). * smbd crashes if asked to return full information on close of a stream handle with delete on close disposition set; (bso#15487). * smbd: fix close order of base_fsp and stream_fsp in smb_fname_fsp_destructor(); (bso#15521). * Improve logging for failover scenarios; (bso#15499). * Files without "read attributes" NFS4 ACL permission are not listed in directories; (bso#15093). * CVE-2018-14628 [SECURITY] Deleted Object tombstones visible in AD LDAP to normal users; (bso#13595). * Kerberos TGS-REQ with User2User does not work for normal accounts; (bso#15492). * vfs_gpfs stat calls fail due to file system permissions; (bso#15507). * Samba doesn't build with Python 3.12; (bso#15513).- packaging: samba-tool domain provision requires python3-Markdown; (bsc#1216519).- Update to 4.19.2 * Use-after-free in aio_del_req_from_fsp during smbd shutdown after failed IPC FSCTL_PIPE_TRANSCEIVE; (bso#15423). * clidfs.c do_connect() missing a "return" after a cli_shutdown() call; (bso#15426). * macOS mdfind returns only 50 results; (bso#15463). * GETREALFILENAME_CACHE can modify incoming new filename with previous cache entry value; (bso#15481). * libnss_winbind causes memory corruption since samba-4.18, impacts sendmail, zabbix, potentially more; (bso#15464). * ctdbd: setproctitle not initialized messages flooding logs; (bso#15479). * CVE-2023-5568 Heap buffer overflow with freshness tokens in the Heimdal KDC in Samba 4.19; (bso#15491). * The heimdal KDC doesn't detect s4u2self correctly when fast is in use; (bso#15477).- use systemd-logind rather than utmp for y2038 safety; (bsc#1216159).- CVE-2023-4091: samba: Client can truncate file with read-only permissions; (bsc#1215904); (bso#15439). - CVE-2023-42669: samba: rpcecho, enabled and running in AD DC, allows blocking sleep on request; (bso#1215905); (bso#15474). - CVE-2023-42670: samba: The procedure number is out of range when starting Active Directory Users and Computers; (bsc#1215906); (bso#15473). - CVE-2023-3961: samba: Unsanitized client pipe name passed to local_np_connect(); (bsc#1215907); (bso#15422). - CVE-2023-4154: samba: dirsync allows SYSTEM access with only "GUID_DRS_GET_CHANGES" right, not "GUID_DRS_GET_ALL_CHANGES; (bsc#1215908); (bso#15424).- Update to 4.19.0 * File doesn't show when user doesn't have permission if aio_pthread is loaded; (bso#15453). * ctdb_killtcp fails to work with --enable-pcap and libpcap ≥ 1.9.1; (bso#15451). * Logging to stdout/stderr with DEBUG_SYSLOG_FORMAT_ALWAYS can log to syslog; (bso#15460). * ‘samba-tool domain level raise’ fails unless given a URL; (bso#15458). * reply_sesssetup_and_X() can dereference uninitialized tmp pointer; (bso#15420). * missing return in reply_exit_done(); (bso#15430). * TREE_CONNECT without SETUP causes smbd to use uninitialized pointer; (bso#15432). * Avoid infinite loop in initial user sync with Azure AD Connect when synchronising a large Samba AD domain; (bso#15401). * Samba replication logs show (null) DN; (bso#15407). * 2-3min delays at reconnect with smb2_validate_sequence_number: bad message_id 2; (bso#15346). * DCERPC_PKT_CO_CANCEL and DCERPC_PKT_ORPHANED can't be parsed; (bso#15446). * CID 1539212 causes real issue when output contains only newlines; (bso#15438). * KDC encodes INT64 claims incorrectly; (bso#15452). * mdssvc: Do an early talloc_free() in _mdssvc_open(); (bso#15449). * Windows client join fails if a second container CN=System exists somewhere; (bso#9959). * regression DFS not working with widelinks = true; (bso#15435). * Heimdal fails to build on 32-bit FreeBSD; (bso#15443). * samba-tool ntacl get segfault if aio_pthread appended; (bso#15441). - Update to 4.18.6 * reply_sesssetup_and_X() can dereference uninitialized tmp pointer; (bso#15420); * Missing return in reply_exit_done(); (bso#15430); * post-exec password redaction for samba-tool is more reliable for fully random passwords as it no longer uses regular expressions containing the password value itself; (bso#15289); * Windows client join fails if a second container CN=System exists somewhere; (bso#9959); * Spotlight sometimes returns no results on latest macOS; (bso#15342); * Renaming results in NT_STATUS_SHARING_VIOLATION if previously attempted to remove the destination; (bso#15417); * Spotlight results return wrong date in result list; (bso#15427); * "net offlinejoin provision" does not work as non-root user; (bso#15414); * rpcserver no longer accepts double backslash in dfs pathname; (bso#15400); * cm_prepare_connection() calls close(fd) for the second time; (bso#15433); * 2-3min delays at reconnect with smb2_validate_sequence_number: bad message_id 2; (bso#15346); * samba-tool ntacl get segfault if aio_pthread appended; (bso#15441); * DCERPC_PKT_CO_CANCEL and DCERPC_PKT_ORPHANED can't be parsed; (bso#15446); * Python tarfile extraction needs change to avoid a warning (CVE-2007-4559 mitigation); (bso#15390); * Regression DFS not working with widelinks = true; (bso#15435); * mdssvc: Do an early talloc_free() in _mdssvc_open(); (bso#15449); - Update to 4.18.5 * CVE-2022-2127: lm_resp_len not checked properly in winbindd_pam_auth_crap_send; (bso#15072); (bsc#1213174). * CVE-2023-34966: Samba Spotlight mdssvc RPC Request Infinite Loop Denial-of-Service Vulnerability; (bso#15340); (bsc#1213173). * CVE-2023-34967: Samba Spotlight mdssvc RPC Request Type Confusion Denial-of-Service Vulnerability; (bso#15341); (bsc#1213172). * CVE-2023-34968: Spotlight server-side Share Path Disclosure; (bso#15388); (bsc#1213171). * CVE-2023-3347: Samba doesn't require SMB2+ signing if `server signing = mandatory` is set; (bso#15397); (bsc#1213170). * secure channel faulty since Windows 10/11 update 07/2023; (bso#15418); (bsc#1213384). - Update to 4.18.4 * Backport --pidl-developer fixes; (bso#15404). * Named crashes on DLZ zone update; (bso#14030). * smbcacls and smbcquotas do not check // before the server; (bso#2312). * cli_list loops 100% CPU against pre-lanman2 servers; (bso#15382). * smbclient leaks fds with showacls; (bso#15391). * smbd returns NOT_FOUND when creating files on a r/o filesystem; (bso#15402). * NSS_WRAPPER_HOSTNAME doesn't match NSS_WRAPPER_HOSTS entry and causes test timeouts; (bso#15355). * net ads lookup (with unspecified realm) fails; (bso#15384). * Register Samba processes with GPFS; (bso#15381). * Python tarfile extraction needs change to avoid a warning (CVE-2007-4559 mitigation); (bso#15390). * The winbind child segfaults when listing users with `winbind scan trusted domains = yes`; (bso#15398). * Remove comments about deprecated 'write cache size'; (bso#15383). * smbget memory leak if failed to download files recursively; (bso#15403). - Update to 4.18.3 * Symlinks to files can have random DOS mode information in a directory listing; (bso#15375). * vfs_fruit might cause a failing open for delete; (bso#15378). * winbind recurses into itself via rpcd_lsad; (bso#15361). * wbinfo -u fails on ad dc with >1000 users; (bso#15366). * DS ACEs might be inherited to unrelated object classes; (bso#15338). * a lot of messages: get_static_share_mode_data: get_static_share_mode_data_fn failed: NT_STATUS_NOT_FOUND; (bso#15362). * aes256 smb3 encryption algorithms are not allowed in smb3_sid_parse(); (bso#15374). * Setting veto files = /.*/ break listing directories; (bso#15360). * "samba-tool domain provision" does not run interactive mode if no arguments are given; (bso#15363). * dsgetdcname: assumes local system uses IPv4; (bso#15325). - Update to 4.18.2 * Log flood: smbd_calculate_access_mask_fsp: Access denied: message level should be lower; (bso#15302). * Floating point exception (FPE) via cli_pull_send at source3/libsmb/clireadwrite.c; (bso#15306). * test_tstream_more_tcp_user_timeout_spin fails intermittently on Rackspace GitLab runners; (bso#15328). * Reduce flapping of ridalloc test; (bso#15329). * large_ldap test is unreliable; (bso#15351). * New filename parser doesn't check veto files smb.conf parameter; (bso#15143). * mdssvc may crash when initializing; (bso#15354). * large directory optimization broken for non-lcomp path elements; (bso#15313). * streams_depot fails to create streams; (bso#15357). * shadow_copy2 and streams_depot don't play well together; (bso#15358). * Flapping tests in samba_tool_drs_show_repl.py; (bso#15316). * winbindd idmap child contacts the domain controller without a need; (bso#15317). * idmap_autorid may fail to map sids of trusted domains for the first time; (bso#15318). * idmap_hash doesn't use ID_TYPE_BOTH for reverse mappings; (bso#15319). * net ads search -P doesn't work against servers in other domains; (bso#15323). * Temporary smbXsrv_tcon_global.tdb can't be parsed; (bso#15353). * Tests use depricated and removed methods like assertRegexpMatches; (bso#15343). - Update to 4.18.1 * CVE-2023-0225: AD DC "dnsHostname" attribute can be deleted by unprivileged authenticated users. (bso#15276);(bsc#1209483). * CVE-2023-0614: Access controlled AD LDAP attributes can be discovered (bso#15270); (bsc#1209485). * CVE-2023-0922: Samba AD DC admin tool samba-tool sends passwords in cleartext(bso#15315);(bsc#1209481). * ldb wildcard matching makes excessive allocations; (bso#15331). * large_ldap test is inefficient; (bso#15332). - Update to 4.18.0 * SMB server performance improvements * More succinct samba-tool error messages * Color output with samba-tool --color The NO_COLOR environment variable will disable colour output * New samba-tool dsacl subcommand for deleting ACEs * New wbinfo option --change-secret-at * Net option to change the NT ACL default location * Azure AD / Office365 synchronization improvements- Fix DFS not working with widelinks enabled; (bsc#1213607); (bso#15435);- Move libcluster-samba4.so from samba-libs to samba-client-libs; (bsc#1213940);- net ads lookup with unspecified realm fails; (bso#15384); (bsc#1213826);- secure channel faulty since Windows 10/11 update 07/2023; (bso#15418); (bsc#1213384).- CVE-2022-2127: lm_resp_len not checked properly in winbindd_pam_auth_crap_send; (bso#15072); (bsc#1213174). - CVE-2023-34966: Samba Spotlight mdssvc RPC Request Infinite Loop Denial-of-Service Vulnerability; (bso#15340); (bsc#1213173). - CVE-2023-34967: Samba Spotlight mdssvc RPC Request Type Confusion Denial-of-Service Vulnerability; (bso#15341); (bsc#1213172). - CVE-2023-34968: Spotlight server-side Share Path Disclosure; (bso#15388); (bsc#1213171). - CVE-2023-3347: Samba doesn't require SMB2+ signing if `server signing = mandatory` is set; (bso#15397); (bsc#1213170).- Update to 4.17.9 * Backport --pidl-developer fixes; (bso#15404). * smbd_scavenger crashes when service smbd is stopped; (bso#15275). * vfs_fruit might cause a failing open for delete; (bso#15378). * named crashes on DLZ zone update; (bso#14030). * winbind recurses into itself via rpcd_lsad; (bso#15361). * cli_list loops 100% CPU against pre-lanman2 servers; (bso#15382). * smbclient leaks fds with showacls; (bso#15391). * aes256 smb3 encryption algorithms are not allowed in smb3_sid_parse(); (bso#15374). * winbindd gets stuck on NT_STATUS_RPC_SEC_PKG_ERROR; (bso#15413). * smbget memory leak if failed to download files recursively; (bso#15403).- Update to 4.17.8 * log flood: smbd_calculate_access_mask_fsp: Access denied: message level should be lower; (bso#15302). * Floating point exception (FPE) via cli_pull_send at source3/libsmb/clireadwrite.c; (bso#15306). * test_tstream_more_tcp_user_timeout_spin fails intermittently on Rackspace GitLab runners; (bso#15328). * Reduce flapping of ridalloc test; (bso#15329). * large_ldap test is unreliable; (bso#15351). * New filename parser doesn't check veto files smb.conf parameter; (bso#15143). * mdssvc may crash when initializing; (bso#15354). * Large directory optimization broken for non-lcomp path elements; (bso#15313). * streams_depot fails to create streams; (bso#15357). * shadow_copy2 and streams_depot don't play well together; (bso#15358). * wbinfo -u fails on ad dc with >1000 users; (bso#15366). * winbindd idmap child contacts the domain controller without a need; (bso#15317). * idmap_autorid may fail to map sids of trusted domains for the first time; (bso#15318). * idmap_hash doesn't use ID_TYPE_BOTH for reverse mappings; (bso#15319). * net ads search -P doesn't work against servers in other domains; (bso#15323). * DS ACEs might be inherited to unrelated object classes; (bso#15338). * Temporary smbXsrv_tcon_global.tdb can't be parsed; (bso#15353). * Setting veto files = /.*/ break listing directories; (bso#15360); (bsc#1212375). * CVE-2020-25720 [SECURITY] Create Child permission should not allow full write to all attributes (additional changes); (bso#14810). * dsgetdcname: assumes local system uses IPv4; (bso#15325).- Update to 4.17.7 * CVE-2023-0922: Samba AD DC admin tool samba-tool sends passwords in cleartext; (bso#15315); (bsc#1209481). * CVE-2023-0225: Samba AD DC "dnsHostname" attribute can be deleted by unprivileged authenticated users; (bso#15276); (bsc#1209483). * CVE-2023-0614: samba: Access controlled AD LDAP attributes can be discovered; (bso#15270); (bsc#1209485). * large_ldap test is inefficient; (bso#15332). * CVE-2020-25720 [SECURITY] Create Child permission should not allow full write to all attributes (additional changes); (bso#14810). - Update to 4.17.6 * streams_xattr is creating unexpected locks on folders; (bso#15314). * Use of the Azure AD Connect cloud sync tool is now supported for password hash synchronisation, allowing Samba AD Domains to synchronise passwords with this popular cloud environment; (bso#10635). * Spotlight doesn't work with latest macOS Ventura; (bso#15299). * New samba-dcerpc architecture does not scale gracefully; (bso#15310). * vfs_ceph incorrectly uses fsp_get_io_fd() instead of fsp_get_pathref_fd() in close and fstat; (bso#15307). * With clustering enabled samba-bgqd can core dump due to use after free; (bso#15293). * fd_load() function implicitly closes the fd where it should not; (bso#15311). - Update to 4.17.5 * smbc_getxattr() return value is incorrect; (bso#14808). * Compound SMB2 FLUSH+CLOSE requests from MacOSX are not handled correctly; (bso#15172). * synthetic_pathref AFP_AfpInfo failed errors; (bso#15210). * samba-tool gpo listall fails IPv6 only - finddcs() fails to find DC when there is only an AAAA record for the DC in DNS; (bso#15226). * smbd crashes if an FSCTL request is done on a stream handle; (bso#15236). * DFS links don't work anymore on Mac clients since 4.17; (bso#15277). * vfs_virusfilter segfault on access, directory edgecase (accessing NULL value); (bso#15283). * CVE-2022-38023 [SECURITY] Samba should refuse RC4 (aka md5) based SChannel on NETLOGON (additional changes); (bso#15240). * %U for include directive doesn't work for share listing (netshareenum); (bso#15243). * Shares missing from netshareenum response in samba 4.17.4; (bso#15266). * ctdb: use-after-free in run_proc; (bso#15269). * irpc_destructor may crash during shutdown; (bso#15280). * auth3_generate_session_info_pac leaks wbcAuthUserInfo; (bso#15286). * smbclient segfaults with use after free on an optimized build; (bso#15268). * smbstatus leaking files in msg.sock and msg.lock; (bso#15282). * Leak in wbcCtxPingDc2; (bso#15164). * Access based share enum does not work in Samba 4.16+; (bso#15265). * Crash during share enumeration; (bso#15267). * rep_listxattr on FreeBSD does not properly check for reads off end of returned buffer; (bso#15271). * Avoid relying on C89 features in a few places; (bso#15281).- Make (32bit) samba-libs conflict with old samba-ad-dc-libs package to satisfy installcheck.- Make samba-libs conflict with old samba-ad-dc-libs package to satisfy installcheck.- Remove non functioning ifup/ifdown samba-winbindd scripts; (bsc#1207414).- libdsdb-module-samba4 should be packaged as part of samba-libs and not samba-ad-dc-libs. Additionally no need for it to be removed conditionally.- Clean up logic for PAM migration settings in spec file.- Change with_dc default to 0 (for non TW builds), ADDC feature is deprecated and will no longer be included in >= SLE15-SP5; (jsc#PED-1122).- Update to 4.17.4 * CVE-2022-44640 Upstream Heimdal free of user-controlled pointer in FAST; (bsc#14929); * CVE-2021-20251 Bad password count not incremented atomically; (bsc#14611); * CVE-2022-42898 krb5_pac_parse() buffer parsing vulnerability; (bsc#15203); * CVE-2022-37966 rc4-hmac Kerberos session keys issued to modern servers; (bso#15237); * CVE-2022-37967 Kerberos constrained delegation ticket forgery possible against Samba AD DC; (bso#15231); * CVE-2022-38023 RC4/HMAC-MD5 NetLogon Secure Channel is weak and should be avoided; (bso#15240); * pam_winbind uses time_t and pointers assuming they are of the same size; (bso#15224); * Heimdal session key selection in AS-REQ examines wrong entry; (bso#15219); * filter-subunit is inefficient with large numbers of knownfails; (bso#15258); * smbd allows setting FILE_ATTRIBUTE_TEMPORARY on directories; (bso#15252); * The KDC logic arround msDs-supportedEncryptionTypes differs from Windows; (bso#13135); * libnet: change_password() doesn't work with dcerpc_samr_ChangePasswordUser4(); (bso#15206); * Heimdal session key selection in AS-REQ examines wrong entry; (bso#15219); * Memory leak in snprintf replacement functions; (bso#15230); * RODC doesn't reset badPwdCount reliable via an RWDC (CVE-2021-20251 regression); (bso#15253); * Prevent EBADF errors with vfs_glusterfs; (bso#15198); * %U for include directive doesn't work for share listing (netshareenum); (bso#15243); * Stack smashing in net offlinejoin requestodj; (bso#15257); * Windows 11 22H2 and Samba-AD 4.15 Kerberos login issue; (bso#15197); * Heimdal session key selection in AS-REQ examines wrong entry; (bso#15219); - Remove deprecated if-{down,up} scripts; (bsc#1206444); - Adjust the systemd drop-in file for named service; (bsc#1201689); * Paths are additive so do not repeat paths from named.service * Prefix the samba DLZ directory with "-" to ignore this path if it does not exists- Introduce without-smb1-server spec flag; (bsc#1205104); - Update to 4.17.3 * CVE-2022-42898: Samba buffer overflow vulnerabilities on 32-bit systems; (bsc#1205126); (bso#15203); - Replace obsolete python-gpgme with python-gpg * Upstream replaced it in v4.9.5 -- bso#13728 - Update to 4.17.2 * CVE-2022-3592 [SECURITY] samba: Wide links protection broken; (bso#15207); (bsc#1204499). * CVE-2022-3437 [SECURITY] samba: Buffer overflow in Heimdal unwrap_des3();(bso#15134); (bsc#1204254). - Update to 4.17.1 * CVE-2021-20251 [SECURITY] Bad password count not incremented atomically; (bso#14611). * smbXsrv_connection_shutdown_send result leaked; (bso#15174). * Flush on a named stream never completes; (bso#15182). * Permission denied calling SMBC_getatr when file not exists; (bso#15195). * Samba 4.5 sometimes cannot be upgraded to Samba 4.6 or later over DRS: WERROR_DS_DRA_MISSING_PARENT due to faulty GET_ANC; (bso#15189). * pytest: add file removal helpers for TestCaseInTempDir; (bso#15191). * CVE-2021-20251 [SECURITY] Bad password count not incremented atomically; (bso#14611). * Samba 4.5 sometimes cannot be upgraded to Samba 4.6 or later over DRS: WERROR_DS_DRA_MISSING_PARENT due to faulty GET_ANC; (bso#15189). * Flush on a named stream never completes; (bso#15182). * vfs_gpfs silently garbles timestamps > year 2106; (bso#15151). * CVE-2021-20251 [SECURITY] Bad password count not incremented atomically; (bso#14611). * multi-channel socket passing may hit a race if one of the involved processes already existed; (bso#15200). * memory leak on temporary of struct imessaging_post_state and struct tevent_immediate on struct imessaging_context (in rpcd_spoolss and maybe others); (bso#15201). * Since popt1.19 various use after free errors using result of poptGetArg are now exposed; (bso#15205); (boo#1204279). * Remove special case for O_CREAT in SMB_VFS_OPENAT from vfs_glusterfs; (bso#15192). * GETPWSID in memory cache grows indefinetly with each NTLM auth; (bso#15169). * CVE-2021-20251 [SECURITY] Bad password count not incremented atomically; (bso#14611). - Install a systemd drop-in file for named service to allow read/write access to the DLZ directory; (bsc#1201689); - Fix use after free errors resulting from using return of poptGetArg exposed since popt-1.19; (boo#1204279); (bso#15205). - s3: smbd: Fix memory leak in smbd_server_connection_terminate_done(); (bso#15174). - Disable SMB1 for tumbleweed builds. - Update to 4.17.0 * acl_xattr VFS module may unintentionally use filesystem permissions instead of ACL from xattr; (bso#15126). * Missing SMB2-GETINFO access checks from MS-SMB2 3.3.5.20.1; (bso#15153). * assert failed: !is_named_stream(smb_fname)") at ../../lib/util/fault.c:197; (bso#15161). * acl_xattr VFS module may unintentionally use filesystem permissions instead of ACL from xattr; (bso#15126). * assert failed: !is_named_stream(smb_fname)") at ../../lib/util/fault.c:197; (bso#15161). * Cross-node multi-channel reconnects result in SMB2 Negotiate returning NT_STATUS_NOT_SUPPORTED; (bso#15159). * winbind at info level debug can coredump when processing wb_lookupusergroups; (bso#15160). * Make use of glfs_*at() API calls in vfs_glusterfs; (bso#15157). * Possible use after free of connection_struct when iterating smbd_server_connection->connections; (bso#15128). * `net usershare add` fails with flag works with --long but fails with -l; (bso#15145). * acl_xattr VFS module may unintentionally use filesystem permissions instead of ACL from xattr; (bso#15126). * Performance regression on contended path based operations; (bso#15125). * Missing READ_LEASE break could cause data corruption; (bso#15148). * libsamba-errors uses a wrong version number; (bso#15141). * SMB1 negotiation can fail to handle connection errors; (bso#15152). * New filename parser doesn't check veto files smb.conf parameter; (bso#15143). * 4.17.rc1 still uses symlink-race prone unix_convert(); (bso#15144). * Backport fileserver related changed to 4.17.0rc2; (bso#15146). * Manpage for smbstatus json is missing; (bso#15147). * Backport fileserver related changed to 4.17.0rc2; (bso#15146). * Performance regression on contended path based operations; (bso#15125). * Backport fileserver related changed to 4.17.0rc2; (bso#15146). * Fix issues found by coverity in smbstatus json code; (bso#15140). * Backport fileserver related changed to 4.17.0rc2; (bso#15146). - Migration to /usr/etc: Saving user changed configuration files in /etc and restoring them while an RPM update. - Update to 4.16.4 * CVE-2022-2031: Samba AD users can bypass certain restrictions associated with changing passwords; (bsc#1201495); (bso#15047); * CVE-2022-32744: Samba AD users can forge password change requests for any user; (bsc#1201493); (bso#15074); * CVE-2022-32745: Samba AD users can crash the server process with an LDAP add or modify request; (bsc#1201492); (bso#15008); * CVE-2022-32746: Samba AD users can induce a use-after-free in the server process with an LDAP add or modify request; (bsc#1201490); (bso#15009); * CVE-2022-32742: Server memory information leak via SMB1; (bsc#1201496); (bso#15085); - Update to 4.16.3 * Using vfs_streams_xattr and deleting a file causes a panic; (bso#15099); * Add support for bind 9.18; (bso#14986); * logging dsdb audit to specific files does not work; (bso#15076); * Problem when winbind renews Kerberos; (bso#14979); (bsc#1196224); * Samba with new lorikeet-heimdal fails to build on gcc 12.1 in developer mode; (bso#15095); * Crash in streams_xattr because fsp->base_fsp->fsp_name is NULL; (bso#15105); * Crash in rpcd_classic - NULL pointer deference in mangle_is_mangled(); (bso#15118); * smbclient commands del & deltree fail with NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100); (bsc#1200556); * Fix check for chown when processing NFSv4 ACL; (bso#15120); * The pcap background queue process should not be stopped; (bso#15082); * testparm: Fix typo in idmap rangesize check; (bso#15097); * net ads info returns LDAP server and LDAP server name as null; (bso#15106); * ldconfig: /lib64/libsmbconf.so.0 is not a symbolic link; (bso#15108); * CTDB child process logging does not work as expected; (bso#15090); - Update spec file to fix the optional Heimdal DC build - Fix external trusts with MIT Kerberos 1.20 - Add missing samba-client requirement to samba-winbind package; (bsc#1198255); - Move pdb backends from package samba-libs to package samba-client-libs and remove samba-libs requirement from samba-winbind; (bsc#1200964); (bsc#1198255); - Add sysuser-shadow requirement for packages using systemd-sysusers - Use the canonical realm name to refresh the Kerberos tickets; (bsc#1196224); (bso#14979); - Moved logrotate files from user specific directory /etc/logrotate.d to vendor specific directory /usr/etc/logrotate.d. - Update to 4.16.2 * Use pathref fd instead of io fd in vfs_default_durable_cookie; (bso#15042); * vfs_gpfs with vfs_shadowcopy2 fail to restore file if original file had been deleted; (bso#15069); * Reintroduce netgroups support; (bso#15087); * net ads info shows LDAP Server: 0.0.0.0 depending on contacted server; (bso#14674); * Update from 4.15 to 4.16 breaks discovery of [homes] on standalone server from Win and IOS; (bso#15062); * waf produces incorrect names for python extensions with Python 3.11; (bso#15071); * smbclient -E doesn't work as advertised; (bso#15075); * The samba background daemon doesn't refresh the printcap cache on startup; (bso#15081); * Out-by-4 error in smbd read reply max_send clamp; (bso#14443); - Fix samba4.blackbox.net_ads_dns_async test with bind9 >= 9.17.7 - Support building with MIT Kerberos 1.20 - Bronze bit and S4U support with MIT Kerberos 1.20 for Samba AD DC; (CVE-2020-17049); - Resource Based Constrained Delegation (RBCD) for Samba AD DC - Support building with gcc 12.1 - Use requires_eq macro to require the libldb2 version available at samba-dsdb-modules build time; (bsc#1199362); - Update to 4.16.1 * Share and server swapped in smbget password prompt; (bso#14831); * Durable handles won't reconnect if the leased file is written to; (bso#15022); * rmdir silently fails if directory contains unreadable files and hide unreadable is yes; (bso#15023); * SMB2_CLOSE_FLAGS_FULL_INFORMATION fails to return information on renamed file handle; (bso#15038); * Need to describe --builtin-libraries= better (compare with - -bundled-libraries); (bso#8731); * vfs_shadow_copy2 breaks "smbd async dosmode" sync fallback; (bso#14957); * shadow_copy2 fails listing snapshotted dirs with shadow:fixinodes; (bso#15035); * PAM Kerberos authentication incorrectly fails with a clock skew error; (bso#15046); * Username map - samba erroneously applies unix group memberships to user account entries; (bso#15041); * KVNO off by 100000; (bso#14951); * Uninitialized litemask in variable in vfs_gpfs module; (bso#15027); * vfs_gpfs recalls=no option prevents listing files; (bso#15055); * smbd doesn't handle UPNs for looking up names; (bso#15054); - Update update-apparmor-samba-profile script, replace non-printable delimiter with more human readable separator as sed can accept separators that can appear in the input data. - Fix update-apparmor-samba-profile script, sed doesn't like multibyte separators; (bsc#1198309). - Update to 4.16.0 * New samba-dcerpcd binary to provide DCERPC in the member server setup * Certificate Auto Enrollment * Ability to add ports to dns forwarder addresses in internal DNS backend * No longer using Linux mandatory locks for sharemodes * SMB1 protocol has been deprecated, particularly older dialects * SMB1 protocol SMBCopy command removed * SMB1 server-side wildcard expansion removed - Add python3-dnspython to samba-ad-dc recommens; (bsc#1187101); - Use systemd-sysusers to create system users; (bsc#1182847);- Install a systemd drop-in file for named service to allow read/write access to the DLZ directory; (bsc#1201689);- Update to 4.15.12 * CVE-2022-42898: samba: heimdal: Samba buffer overflow vulnerabilities on 32-bit systems; (bso#15203); (bsc#1205126). - Update to 4.15.11 * Allow rebuild of Centos 8 images after move to vault for Samba 4.15; (bso#15193). * CVE-2022-3437: samba: Buffer overflow in Heimdal unwrap_des3(); (bso#15134); (bsc#1204254)- Update to 4.15.10 * Possible use after free of connection_struct when iterating smbd_server_connection->connections; (bso#15128); (bsc#1200102). * smbXsrv_connection_shutdown_send result leaked; (bso#15174). * Spotlight RPC service returns wrong response when Spotlight is disabled on a share; (bso#15086). * acl_xattr VFS module may unintentionally use filesystem permissions instead of ACL from xattr; (bso#15126). * Missing SMB2-GETINFO access checks from MS-SMB2 3.3.5.20.1; (bso#15153). * assert failed: !is_named_stream(smb_fname)") at ../../lib/util/fault.c:197; (bso#15161). * Missing READ_LEASE break could cause data corruption; (bso#15148). * rpcclient can crash using setuserinfo(2); (bso#15124). * Samba fails to build with glibc 2.36 caused by including in libreplace; (bso#15132). * SMB1 negotiation can fail to handle connection errors; (bso#15152). * samba-tool domain join segfault when joining a samba ad domain; (bso#15078). - Update to 4.15.9 * CVE-2022-32742:SMB1 code does not correct verify SMB1write, SMB1write_and_close, SMB1write_and_unlock lengths; (bso#15085); (bsc#1201496). * CVE-2022-32746: samba: Use-after-free occurring in database audit logging; (bso#15009); (bso#15096); (bsc#1201490). * CVE-2022-2031: samba, ldb: AD users can bypass certain restrictions associated with changing passwords; (bso#15047); (bsc#1201495); * CVE-2022-32745: samba: ldb: AD users can crash the server process with an LDAP add or modify request; (bso#15008); (bso#15096); (bsc#1201492). * CVE-2022-2031: samba, ldb: AD users can bypass certain restrictions associated with changing passwords; (bso#15047); (bsc#1201495); * CVE-2022-32744: samba, ldb: AD users can forge password change requests for any user; (bso#15074); (bso#15047); (bsc#1201493).- CVE-2022-1615: Do not ignore errors in random number generation; (bso#15103); (bsc#1202976); - CVE-2022-32743: Implement validated dnsHostName write rights; (bso#14833); (bsc#1202803);- Fix Use after free when iterating smbd_server_connection->connections after tree disconnect failure; (bso#15128); (bsc#1200102).- CVE-2022-32746: samba: Use-after-free occurring in database audit logging; (bso#15009); (bso#15096); (bsc#1201490). - CVE-2022-32745: samba: ldb: AD users can crash the server process with an LDAP add or modify request; (bso#15008); (bso#15096); (bsc#1201492). - CVE-2022-2031: samba, ldb: AD users can bypass certain restrictions associated with changing passwords; (bso#15047); (bsc#1201495); - CVE-2022-32742:SMB1 code does not correct verify SMB1write, SMB1write_and_close, SMB1write_and_unlock lengths; (bso#15085); (bsc#1201496). - CVE-2022-32744: samba, ldb: AD users can forge password change requests for any user; (bso#15074); (bso#15047); (bsc#1201493).- Update to 4.15.8 * Use pathref fd instead of io fd in vfs_default_durable_cookie; (bso#15042); * Setting fruit:resource = stream in vfs_fruit causes a panic; (bso#15099); * Add support for bind 9.18; (bso#14986); * logging dsdb audit to specific files does not work; (bso#15076); * vfs_gpfs with vfs_shadowcopy2 fail to restore file if original file had been deleted; (bso#15069); * netgroups support removed; (bso#15087); (bsc#1199247); * net ads info shows LDAP Server: 0.0.0.0 depending on contacted server; (bso#14674); (bsc#1199734); * waf produces incorrect names for python extensions with Python 3.11; (bso#15071); * smbclient commands del & deltree fail with NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100); (bsc#1200556); * vfs_gpfs recalls=no option prevents listing files; (bso#15055); * waf produces incorrect names for python extensions with Python 3.11; (bso#15071); * Compile error in source3/utils/regedit_hexedit.c; (bso#15091); * ldconfig: /lib64/libsmbconf.so.0 is not a symbolic link; (bso#15108); * smbd doesn't handle UPNs for looking up names; (bso#15054); * Out-by-4 error in smbd read reply max_send clamp; (bso#14443); - Move pdb backends from package samba-libs to package samba-client-libs and remove samba-libs requirement from samba-winbind; (bsc#1200964); (bsc#1198255); - Use the canonical realm name to refresh the Kerberos tickets; (bsc#1196224); (bso#14979);- Fix smbclient commands del & deltree failing with NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100); (bsc#1200556).- Revert NIS support removal; (bsc#1199247);- Use requires_eq macro to require the libldb2 version available at samba-dsdb-modules build time; (bsc#1199362);- Add missing samba-client requirement to samba-winbind package; (bsc#1198255);- Update to 4.15.7 * Share and server swapped in smbget password prompt; (bso#14831); * Durable handles won't reconnect if the leased file is written to; (bso#15022); * rmdir silently fails if directory contains unreadable files and hide unreadable is yes; (bso#15023); * SMB2_CLOSE_FLAGS_FULL_INFORMATION fails to return information on renamed file handle; (bso#15038); * vfs_shadow_copy2 breaks "smbd async dosmode" sync fallback; (bso#14957); * shadow_copy2 fails listing snapshotted dirs with shadow:fixinodes; (bso#15035); * PAM Kerberos authentication incorrectly fails with a clock skew error; (bso#15046); * username map - samba erroneously applies unix group memberships to user account entries; (bso#15041); * NT_STATUS_ACCESS_DENIED translates into EPERM instead of EACCES in SMBC_server_internal; (bso#14983); * Simple bind doesn't work against an RODC (with non-preloaded users); (bso#13879); * Crash of winbind on RODC; (bso#14641); * uncached logon on RODC always fails once; (bso#14865); * KVNO off by 100000; (bso#14951); * LDAP simple binds should honour "old password allowed period"; (bso#15001); * wbinfo -a doesn't work reliable with upn names; (bso#15003); * Simple bind doesn't work against an RODC (with non-preloaded users); (bso#13879); * Uninitialized litemask in variable in vfs_gpfs module; (bso#15027); * Regression: create krb5 conf = yes doesn't work with a single KDC; (bso#15016);- Add provides to samba-client-libs package to fix upgrades from previous versions; (bsc#1197995);- Add missing samba-libs requirement to samba-winbind package; (bsc#1198255);- Update to 4.15.6 * Renaming file on DFS root fails with NT_STATUS_OBJECT_PATH_NOT_FOUND; (bso#14169); * Samba does not response STATUS_INVALID_PARAMETER when opening 2 objects with same lease key; (bso#14737); * NT error code is not set when overwriting a file during rename in libsmbclient; (bso#14938); * Fix ldap simple bind with TLS auditing; (bso#14996); * net ads info shows LDAP Server: 0.0.0.0 depending on contacted server; (bso#14674); * Problem when winbind renews Kerberos; (bso#14979); (bsc#1196224); * pam_winbind will not allow gdm login if password about to expire; (bso#8691); * virusfilter_vfs_openat: Not scanned: Directory or special file; (bso#14971); * DFS fix for AIX broken; (bso#13631); * Solaris and AIX acl modules: wrong function arguments; (bso#14974); * Function aixacl_sys_acl_get_file not declared / coredump; (bso#7239); * Regression: Samba 4.15.2 on macOS segfaults intermittently during strcpy in tdbsam_getsampwnam; (bso#14900); * Fix a use-after-free in SMB1 server; (bso#14989); * smb2_signing_decrypt_pdu() may not decrypt with gnutls_aead_cipher_decrypt() from gnutls before 3.5.2; (bso#14968); * Changing the machine password against an RODC likely destroys the domain join; (bso#14984); * authsam_make_user_info_dc() steals memory from its struct ldb_message *msg argument; (bso#14993); * Use Heimdal 8.0 (pre) rather than an earlier snapshot; (bso#14995); * Samba autorid fails to map AD users if id rangesize fits in the id range only once; (bso#14967);- Fix mismatched version of libldb2; (bsc#1196788). - Drop obsolete SuSEfirewall2 service files.- Drop obsolete Samba fsrvp v0->v1 state upgrade functionality; (bsc#1080338).- Fix ntlm authentications with "winbind use default domain = yes"; (bso#13126); (bsc#1173429); (bsc#1196308).- Fix samba-ad-dc status warning notification message by disabling systemd notifications in bgqd; (bsc#1195896); (bso#14947).- libldb version mismatch in Samba dsdb component; (bsc#1118508);- Update to 4.15.5 * CVE-2021-44141: UNIX extensions in SMB1 disclose whether the outside target of a symlink exists; (bso#14911); (bsc#1193690). * CVE-2021-44142: Out-of-Bound Read/Write on Samba vfs_fruit module; (bso#14914); (bsc#1194859). * CVE-2022-0336: Re-adding an SPN skips subsequent SPN conflict checks; bso#14950); (bsc#1195048).- CVE-2021-44141: Information leak via symlinks of existance of files or directories outside of the exported share; (bso#14911); (bsc#1193690); - CVE-2021-44142: Out-of-bounds heap read/write vulnerability in VFS module vfs_fruit allows code execution; (bso#14914); (bsc#1194859); - CVE-2022-0336: Samba AD users with permission to write to an account can impersonate arbitrary services; (bso#14950); (bsc#1195048);- Update to 4.15.4 * Duplicate SMB file_ids leading to Windows client cache poisoning; (bso#14928); * Failed to parse NTLMv2_RESPONSE length 95 - Buffer Size Error - NT_STATUS_BUFFER_TOO_SMALL; (bso#14932); * kill_tcp_connections does not work; (bso#14934); * Can't connect to Windows shares not requiring authentication using KDE/Gnome; (bso#14935); * smbclient -L doesn't set "client max protocol" to NT1 before calling the "Reconnecting with SMB1 for workgroup listing" path; (bso#14939); * Cross device copy of the crossrename module always fails; (bso#14940); * symlinkat function from VFS cap module always fails with an error; (bso#14941); * Fix possible fsp pointer deference; (bso#14942); * Missing pop_sec_ctx() in error path inside close_directory(); (bso#14944); * "smbd --build-options" no longer works without an smb.conf file; (bso#14945);- Use pkgconfig(krb5) as dependency for the -devel package: allow OBS to pick the right flavor of krb5-devel (full vs mini). - Do not require the 'krb5' symbol by samba-client-libs: this package has an automatic dependency due to linkage on libgssapi_krb5.so.2. Automatic deps are always better. - Do not require the 'krb5' symbol from samba-libs: samba-libs requires samba-client-libs, which in turn requires krb5 libraries. Samba-libs itself has no need for krb5 (but get it indirectly anyway).- Reorganize libs packages. Split samba-libs into samba-client-libs, samba-libs, samba-winbind-libs and samba-ad-dc-libs, merging samba public libraries depending on internal samba libraries into these packages as there were dependency problems everytime one of these public libraries changed its version (bsc#1192684). The devel packages are merged into samba-devel. - Rename package samba-core-devel to samba-devel - Add python-rpm-macros to build requirements - Update the symlink create by samba-dsdb-modules to private samba ldb modules following libldb2 changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba- Update to 4.15.3 * Recursive directory delete with veto files is broken in 4.15.0; (bso#14878); * A directory containing dangling symlinks cannot be deleted by SMB2 alone when they are the only entry in the directory; (bso#14879); * SIGSEGV in rmdir_internals/synthetic_pathref - dirfsp is used uninitialized in rmdir_internals(); (bso#14892); * MaxQueryDuration not honoured in Samba AD DC LDAP; (bso#14694); * The CVE-2020-25717 username map [script] advice has undesired side effects for the local nt token; (bso#14901); (bsc#1192849); * User with multiple spaces (eg FredNurk) become un-deletable; (bso#14902); * Avoid storing NTTIME_THAW (-2) as value on disk; (bso#14127); * smbXsrv_client_global record validation leads to crash if existing record points at non-existing process; (bso#14882); * Crash in vfs_fruit asking for fsp_get_io_fd() for an XATTR call; (bso#14890); * Samba process doesn't log to logfile; (bso#14897); * set_ea_dos_attribute() fallback calling get_file_handle_for_metadata() triggers locking.tdb assert; (bso#14907); * Kerberos authentication on standalone server in MIT realm broken; (bso#14922); * Segmentation fault when joining the domain; (bso#14923); * Support for ROLE_IPA_DC is incomplete; (bso#14903); * rpcclient cannot connect to ncacn_ip_tcp services anymore; (bso#14767); * winexe crashes since 4.15.0 after popt parsing; (bso#14893); * net ads status -P broken in a clustered environment; (bso#14908); * Memory leak if ioctl(FSCTL_VALIDATE_NEGOTIATE_INFO) fails before smbd_smb2_ioctl_send; (bso#14788); * winbindd doesn't start when "allow trusted domains" is off; (bso#14899); * smbclient login without password using '-N' fails with NT_STATUS_INVALID_PARAMETER on Samba AD DC; (bso#14883); * A schannel client incorrectly detects a downgrade connecting to an AES only server; (bso#14912); * Possible null pointer dereference in winbind; (bso#14921); * Fix -k legacy option for client tools like smbclient, rpcclient, net, etc.; (bso#14846); * Add Debian 11 CI bootstrap support; (bso#14872); * Crash in recycle_unlink_internal(); (bso#14888);- Fix dependency problem upgrading from libndr0 to libndr2 and from libsamba-credentials0 to libsamba-credentials1; (bsc#1192684);- Fix regression introduced by CVE-2020-25717 patches, winbindd does not start when 'allow trusted domains' is off; (bso#14899); - Update to 4.15.2 * CVE-2016-2124: SMB1 client connections can be downgraded to plaintext authentication; (bso#12444); (bsc#1014440); * CVE-2020-25717: A user on the domain can become root on domain members; (bso#14556); (bsc#1192284); * CVE-2020-25718: Samba AD DC did not correctly sandbox Kerberos tickets issued by an RODC; (bso#14558); (bsc#1192246); * CVE-2020-25719: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets; (bso#14561); (bsc#1192247); * CVE-2020-25721: Kerberos acceptors need easy access to stable AD identifiers (eg objectSid); (bso#14557); (bsc#1192505); * CVE-2020-25722: Samba AD DC did not do suffienct access and conformance checking of data stored; (bso#14564); (bsc#1192283); * CVE-2021-3738: Use after free in Samba AD DC RPC server; (bso#14468); (bsc#1192215); * CVE-2021-23192: Subsequent DCE/RPC fragment injection vulnerability; (bso#14875); (bsc#1192214); - Update to 4.15.1 * vfs_shadow_copy2: core dump in make_relative_path; (bso#14682); * Log clutter from filename_convert_internal; (bso#14685); * MacOSX compilation fixes; (bso#14862); * rodc_rwdc test flaps; (bso#14868); * Provide a fix for MS CVE-2020-17049 in Samba [SECURITY] 'Bronze bit' S4U2Proxy Constrained Delegation bypass in Samba with embedded Heimdal; (bso#14642); * Python ldb.msg_diff() memory handling failure; (bso#14836); * "in" operator on ldb.Message is case sensitive; (bso#14845); * Release LDB 2.4.1 for Samba 4.15.1; (bso#14848); * samldb_krbtgtnumber_available() looks for incorrect string; (bso#14854); * Fix Samba support for UF_NO_AUTH_DATA_REQUIRED; (bso#14871); * Allow special chars like "@" in samAccountName when generating the salt; (bso#14874); * Correctly ignore comments in CTDB public addresses file; (bso#14826); * Fix transit path validation; (bso#12998); * Fix that child winbindd logs to log.winbindd instead of log.wb-; (bso#14852); * SMB3 cancel requests should only include the MID together with AsyncID when AES-128-GMAC is used; (bso#14855); * Prepare to operate with MIT krb5 >= 1.20; (bso#14870); * Heimdal prefers RC4 over AES for machine accounts; (bso#14864);- Enable samba-tool without ad dc.- Adjust spec to use pam macros; (bsc#1191046).- Adjust spec for size * allow some Recommends instead Requires to be configured for cifs-utils, samba-libs-python3 & samba-gpupdate; (bsc#1182847). * remove fam, undocumented and unneeded.- Add missing build dependency on bison when building with the embedded Heimdal Kerberos- Update to 4.15.0 * Removed SMB development dialects SMB2_22, SMB2_24 and SMB3_10 * VFS layer modernized. * Add the ability to set allow/deny lists for zone transfer clients in Bind DLZ plugin * Server multi-channel support no longer experimental * Improved command line user experience, unifying the options in different commands * Winbindd no longer scans trusted domains on startup and will use enterprise principals by default. * The net utility is now able to support the offline domain join feature * New options for 'samba-tool dns zoneoptions' for aging control and to mark old records as static or dynamic * DNS tombstones are now deleted as appropriate and use a consistent timestamp format * The 'samba-tool dns update' command validates and rejects now malformed IPv4 and IPv6 addresses * The 'samba-tool domain backup' command correctly takes out locks against concurrent modification during backup when using the LMDB backend * TruACL support has been removed * NIS support has been removed- Fix 'net rpc' authentication when using the machine account; (bsc#1189017); (bso#14796);- Fix dependency problem upgrading from libndr0 to libndr1; (bsc#1189875); - Fix dependency problem upgrading from libsmbldap0 to libsmbldap2; (bsc#1189875); - Fix wrong kvno exported to keytab after net ads changetrustpw due to replication delay; (bsc#1188727); - Add Certificate Auto Enrollment Policy; (jsc#SLE-18456). - Update to 4.13.10 * s3: smbd: Ensure POSIX default ACL is mapped into returned Windows ACL for directory handles; (bso#14708); * Take a copy to make sure we don't reference free'd memory; (bso#14721); * s3: lib: Fix talloc heirarcy error in parent_smb_fname(); (bso#14722); * s3: smbd: Remove erroneous TALLOC_FREE(smb_fname_parent) in change_file_owner_to_parent() error path; (bso#14736); * samba-tool: Give better error information when the 'domain backup restore' fails with a duplicate SID; (bso#14575); * smbd: Correctly initialize close timestamp fields; (bso#14714); * Spotlight RPC service doesn't work with vfs_glusterfs; (bso#14740); * ctdb: Fix a crash in run_proc_signal_handler(); (bso#14475); * gensec_krb5: Restore ipv6 support for kpasswd; (bso#14750); * smbXsrv_{open,session,tcon}: Protect smbXsrv_{open,session,tcon}_global_traverse_fn against invalid records; (bso#14752); * samba-tool domain backup offline doesn't work against bind DLZ backend; (bso#14027); * netcmd: Use next_free_rid() function to calculate a SID for restoring a backup; (bso#14669); - Update to 4.13.9 * s3: smbd: SMB1 SMBsplwr doesn't send a reply packet on success; (bso#14696); * Add documentation for dsdb_group_audit and dsdb_group_json_audit to "log level", synchronise "log level" in smb.conf with the code; (bso#14689); * Fix smbd panic when two clients open same file; (bso#14672); * Fix memory leak in the RPC server; (bso#14675); * s3: smbd: Fix deferred renames; (bso#14679); * s3-iremotewinspool: Set the per-request memory context; (bso#14675); * rpc_server3: Fix a memleak for internal pipes; (bso#14675); * third_party: Update socket_wrapper to version 1.3.2; (bso#11899); * third_party: Update socket_wrapper to version 1.3.3; (bso#14639); * idmap_rfc2307 and idmap_nss return wrong mapping for uid/gid conflict; (bso#14663); * Fix the build on OmniOS; (bso#14288); - Update to 4.13.8 * CVE-2021-20254: Fix buffer overrun in sids_to_unixids(); (bso#14571 - Update to 4.13.7 * Release with dependency on ldb version 2.2.1.- CVE-2021-20254 Buffer overrun in sids_to_unixids(); (bnc#14571); (bsc#1184677).- Fix offline domain backup not possible using lmdb version >= 0.9.26; (bso#14676); - Require libldb >= 2.2.1; (bsc#1183572); (bsc#1183574); - Update to 4.13.6 * CVE-2020-27840: samba: Unauthenticated remote heap corruption via bad DNs; (bso#14595); (bsc#1183572). * CVE-2021-20277: samba: out of bounds read in ldb_handler_fold; (bso#14655); (bsc#1183574). - Update to 4.13.5 * s3:modules:vfs_virusfilter: Recent talloc changes cause infinite start-up failure; (bso#14634); * s3: libsmb: Add missing cli_tdis() in error path if encryption setup failed on temp proxy connection; (bso#13992); * smbd: In conn_force_tdis_done() when forcing a connection closed force a full reload of services; (bso#14604); * dbcheck: Check Deleted Objects and reduce noise in reports about expired tombstones (bso#14593); * s3: Fix fcntl waf configure check; (bso#14503); * s3/auth: Implement "winbind:ignore domains"; (bso#14602); * smbd: Use fsp->conn->session_info for the initial delete-on-close token; (bso#14617); * s3: VFS: nfs4_acls. Add missing TALLOC_FREE(frame) in error path; (bso#14648); * classicupgrade: Treat old never expires value right; (bso#14624); * g_lock: Fix uninitalized variable reads; (bso#14636); * s3:pysmbd: Fix fd leak in py_smbd_create_file(); (bso#13898); * lib:util: Avoid free'ing our own pointer; (bso#14625); * HEIMDAL: krb5_storage_free(NULL) should work; (bso#12505);- Spec file fixes around systemd and requires; (bsc#1182830); - Align systemd service unit files with upstream provided ones.- Update to 4.13.4 * Work around special SMB2 IOCTL response behavior of NetApp Ontap 7.3.7; (bso#14607); * Temporary DFS share setup doesn't set case parameters in the same way as a regular share definition does; (bso#14612); * lib: Avoid declaring zero-length VLAs in various messaging functions; (bso#14605); * Do not create an empty DB when accessing a sam.ldb; (bso#14579); * vfs_fruit may close wrong backend fd; (bso#14596); * Temporary DFS share setup doesn't set case parameters in the same way as a regular share definition does; (bso#14612); * vfs_virusfilter: Allocate separate memory for config char*; (bso#14606); * vfs_fruit may close wrong backend fd; (bso#14596); * Work around special SMB2 IOCTL response behavior of NetApp Ontap 7.3.7; (bso#14607); * The cache directory for the user gencache should be created recursively; (bso#14601); * Be more flexible with repository names in CentOS 8 test environments; (bso#14594);- Uninstalling samba-client: Failed to disable unit, cifs.service does not exists; (bsc#1180388);- Update to 4.13.3 + libcli: smb2: Never print length if smb2_signing_key_valid() fails for crypto blob; (bso#14210); + s3: modules: gluster. Fix the error I made in preventing talloc leaks from a function; (bso#14486); + s3: smbd: Don't overwrite contents of fsp->aio_requests[0] with NULL via TALLOC_FREE(); (bso#14515); + s3: spoolss: Make parameters in call to user_ok_token() match all other uses; (bso#14568); + s3: smbd: Quiet log messages from usershares for an unknown share; (bso#14590); + samba process does not honor max log size; (bso#14248); + vfs_zfsacl: Add missing inherited flag on hidden "magic" everyone@ ACE; (bso#14587); + s3-libads: Pass timeout to open_socket_out in ms; (bso#13124); + s3-vfs_glusterfs: Always disable write-behind translator; (bso#14486); + smbclient: Fix recursive mget; (bso#14517); + clitar: Use do_list()'s recursion in clitar.c; (bso#14581); + manpages/vfs_glusterfs: Mention silent skipping of write-behind translator; (bso#14486); + vfs_shadow_copy2: Preserve all open flags assuming ROFS; (bso#14573); + interface: Fix if_index is not parsed correctly; (bso#14514);- Update to 4.13.2 + s3: modules: vfs_glusterfs: Fix leak of char **lines onto mem_ctx on return; (bso#14486); + RN: vfs_zfsacl: Only grant DELETE_CHILD if ACL tag is special; (bso#14471); + smb.conf.5: Add clarification how configuration changes reflected by Samba; (bso#14538); + daemons: Report status to systemd even when running in foreground; (bso#14552); + DNS Resolver: Support both dnspython before and after 2.0.0; (bso#14553); + s3-vfs_glusterfs: Refuse connection when write-behind xlator is present; (bso#14486); + provision: Add support for BIND 9.16.x; (bso#14487); + ctdb-common: Avoid aliasing errors during code optimization; (bso#14537); + libndr: Avoid assigning duplicate versions to symbols; (bso#14541); + docs: Fix default value of spoolss:architecture; (bso#14522); + winbind: Fix a memleak; (bso#14388); + s4:dsdb:acl_read: Implement "List Object" mode feature; (bso#14531); + docs-xml/manpages: Add warning about write-behind translator for vfs_glusterfs; (bso#14486); + nsswitch/nsstest.c: Avoid nss function conflicts with glibc nss.h. + vfs_shadow_copy2: Avoid closing snapsdir twice; (bso#14530); + third_party: Update resolv_wrapper to version 1.1.7; (bso#14547); + examples:auth: Do not install example plugin; (bso#14550); + ctdb-recoverd: Drop unnecessary and broken code; (bso#14513); + RN: vfs_zfsacl: Only grant DELETE_CHILD if ACL tag is special; (bso#14471);- Adjust smbcacls '--propagate-inheritance' feature to align with upstream; (bsc#1178469).- Update to samba 4.13.1 + CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with easily crafted records; (bsc#1177613); (bso#14472); + CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994); (bso#14436); + CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify; (bsc#1173902); (bso#14434); - Adjust systemd tmpfiles.d configuration, use /run/samba instead of /var/run/samba; (bsc#1177355);- Fix vfs_ceph query_directory regression; (bso#14519) - Drop liburing-devel for SLE15-SP2; (bsc#1177245)- Register CTDB recovery lock holder with ceph-mgr - Add liburing-devel dependency- Update to samba 4.13.0 + Require Python 3.6 + Move wide links functionality into VFS module + Deprecate NT4-like 'classic' Samba domain controllers + Deprecate SMBv1 only protocol options + Remove deprecated "ldap ssl ads" option + Unify asynchronous DCE-RPC server; (jsc#SES-645) + Replay multichannel lease break requests; (bso#11897); (jsc#SES-655) + Drop internal byteorder.h header from util-devel package + Remove final code for the AD DC LDAP backend + Add AD DC Group Policy Scripts + Only use gnutls_aead_cipher_encryptv2() for GnuTLS > 3.6.14; (bso#14399) + Fix %U substitutions if it contains a domain name; (bso#14467) + Fix krb5.conf creation for 'net ads join'; (bso#14479) + Fix build problem if libbsd-dev is not installed; (bso#14482) + Toggle vfs_snapper using "--with-shared-modules"; (bso#14437) + Fix idmap_ad RFC4511 response handling; (bso#14465) + Fix panic in get_lease_type(); (bso#14428)- Update to samba 4.11.13 + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2 against unencrypted passwords; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Support "server require schannel:WORKSTATION$ = no" about unsecure configurations; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): s4 torture rpc: repeated bytes in client challenge; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): libcli/auth: Reject weak client challenges in netlogon_creds_server_init() "server require schannel:WORKSTATION$ = no"; (bsc#1176579); (bso#14497); - Update to samba 4.11.12 + s3: libsmb: Fix SMB2 client rename bug to a Windows server; (bso#14403); + dsdb: Allow "password hash userPassword schemes = CryptSHA256" to work on RHEL7; (bso#14424); + dbcheck: Allow a dangling forward link outside our known NCs; (bso#14450); + lib/debug: Set the correct default backend loglevel to MAX_DEBUG_LEVEL; (bso#14426); + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428); + lib/util: do not install "test_util_paths"; (bso#14370); + lib:util: Fix smbclient -l basename dir; (bso#14345); + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428); + util: Allow symlinks in directory_create_or_exist; (bso#14166); + docs: Fix documentation for require_membership_of of pam_winbind; (bso#14358); + s3:winbind:idmap_ad: Make failure to get attrnames for schema mode fatal; (bso#14425);- Add obsoletes to libsmbldap2 package to fix upgrades from previous versions; (bsc#1172810);- Fix net command unable to negotiate SMB2; (bsc#1174120);- Update to samba 4.11.11 + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ and VLV combined; (bso#14364); (bsc#1173159] + CVE-2020-10745: invalid DNS or NBT queries containing dots use several seconds of CPU each; (bso#14378); (bsc#1173160). + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP server with paged_result or VLV; (bso#14402); (bsc#1173161) + CVE-2020-14303: Endless loop from empty UDP packet sent to AD DC nbt_server; (bso#14417); (bsc#1173359). - Update to samba 4.11.10 + Fix segfault when using SMBC_opendir_ctx() routine for share folder that contains incorrect symbols in any file name; (bso#14374). + vfs_shadow_copy2 doesn't fail case looking in snapdirseverywhere mode; (bso#14350) + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr; (bso#14413). + Malicous SMB1 server can crash libsmbclient; (bso#14366) + winbindd: Fix a use-after-free when winbind clients exit; (bso#14382) + ldb: Bump version to 2.0.11, LMDB databases can grow without bounds. (bso#14330) - Update to samba 4.11.9 + nmblib: Avoid undefined behaviour in handle_name_ptrs(); (bso#14242). + 'samba-tool group' commands do not handle group names with special chars correctly; (bso#14296). + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo is not valid; (bso#14237). + Missing check for DMAPI offline status in async DOS attributes; (bso#14293). + smbd: Ignore set NTACL requests which contain S-1-5-88 NFS ACEs; (bso#14307). + vfs_recycle: Prevent flooding the log if we're called on non-existant paths; (bso#14316) + smbd mistakenly updates a file's write-time on close; (bso#14320). + RPC handles cannot be differentiated in source3 RPC server; (bso#14359). + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313). + nsswitch: Fix use-after-free causing segfault in _pam_delete_cred; (bso#14327). + Fix fruit:time machine max size on arm; (bso#13622) + CTDB recovery corner cases can cause record resurrection and node banning; (bso#14294). + ctdb: Fix a memleak; (bso#14348). + libsmb: Don't try to find posix stat info in SMBC_getatr(). + ctdb-tcp: Move free of inbound queue to TCP restart; (bso#14295); (bsc#1162680). + s3/librpc/crypto: Fix double free with unresolved credential cache; (bso#14344); (bsc#1169095) + s3:libads: Fix ads_get_upn(); (bso#14336). + CTDB recovery corner cases can cause record resurrection and node banning; (bso#14294) + Starting ctdb node that was powered off hard before results in recovery loop; (bso#14295); (bsc#1162680). + ctdb-recoverd: Avoid dereferencing NULL rec->nodemap; (bso#14324) - Update to samba 4.11.8 + CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with ASQ; (bso#14331); (bsc#1169850); + CVE-2020-10704: LDAP Denial of Service (stack overflow) in Samba AD DC; (bso#14334); (bsc#1169851); - Update to samba 4.11.7 + s3: lib: nmblib. Clean up and harden nmb packet processing; (bso#14239). + s3: VFS: full_audit. Use system session_info if called from a temporary share definition; (bso#14283) + dsdb: Correctly handle memory in objectclass_attrs; (bso#14258). + ldb: version 2.0.9, Samba 4.11 and later give incorrect results for SCOPE_ONE searches; (bso#14270) + auth: Fix CIDs 1458418 and 1458420 Null pointer dereferences; (bso#14247). + smbd: Handle EINTR from open(2) properly; (bso#14285) + winbind member (source3) fails local SAM auth with empty domain name; (bso#14247) + winbindd: Handling missing idmap in getgrgid(); (bso#14265). + lib:util: Log mkdir error on correct debug levels; (bso#14253). + wafsamba: Do not use 'rU' as the 'U' is deprecated in Python 3.9; (bso#14266). + ctdb-tcp: Make error handling for outbound connection consistent; (bso#14274). - Update to samba 4.11.6 + pygpo: Use correct method flags; (bso#14209). + vfs_ceph_snapshots: Fix root relative path handling; (bso#14216); (bsc#1141320). + Avoiding bad call flags with python 3.8, using METH_NOARGS instead of zero; (bso#14209). + source4/utils/oLschema2ldif: Include stdint.h before cmocka.h; (bso#14218). + docs-xml/winbindnssinfo: Clarify interaction with idmap_ad etc; (bso#14122). + smbd: Fix the build with clang; (bso#14251). + upgradedns: Ensure lmdb lock files linked; (bso#14199). + s3: VFS: glusterfs: Reset nlinks for symlink entries during readdir; (bso#14182). + smbc_stat() doesn't return the correct st_mode and also the uid/gid is not filled (SMBv1) file; (bso#14101). + librpc: Fix string length checking in ndr_pull_charset_to_null(); (bso#14219). + ctdb-scripts: Strip square brackets when gathering connection info; (bso#14227).- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);- Installing: samba - samba-ad-dc.service does not exist and unit not found; (bsc#1171437);- Fix samba_winbind package is installing python3-base without python3 package; (bsc#1169521);- Require libldb2 >= 2.0.10 after security release.- CVE-2020-10704: LDAP Denial of Service (stack overflow) in Samba AD DC; (bso#14334); (bsc#1169851); - CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with ASQ; (bso#14331); (bsc#1169850);- Fix smbclient crash with double free (with unresolved krb5 credential cache); (bso#14344); (bsc#1169095).- Starting ctdb node that was powered off hard before results in recovery loop; (bso#14295); (bsc#1162680).- CTDB doesn't retry outgoing connections on bind (and some other) failures; (bso#14274); (bsc#1162680).- Revert: Allow idmap_rid to have primary group other than "Domain Users"; (bsc#1087931).- Fix nmbstatus not reporting detailed information about workgroups; (bsc#1159464); - Fix querying all names registered within broadcast area; (bso#8927);- Update to samab 4.11.5 + CVE-2019-14902: Replication of ACLs down subtree on AD Directory is not automatic; (bso#12497); (bsc#1160850). + CVE-2019-19344: Fix server crash with dns zone scavenging = yes; (bso#14050); (bsc#1160852). + CVE-2019-14907: server-side crash after charset conversion failure (eg during NTLMSSP processing); (bso#14208); (bsc#1160888). - Update to samba 4.11.4 + Ensure SMB1 cli_qpathinfo2() doesn't return an inode number; (bso#14161). + Ensure we don't call cli_RNetShareEnum() on an SMB1 connection; (bso#14174). + NT_STATUS_ACCESS_DENIED becomes EINVAL when using SMB2 in SMBC_opendir_ctx; (bso#14176). + SMB2 - Ensure we use the correct session_id if encrypting an interim response; (bso#14189). + Prevent smbd crash after invalid SMB1 negprot; (bso#14205). + printing: Fix %J substition; (bso#13745). + Remove now unneeded call to cmdline_messaging_context(); (bso#13925). + Fix incomplete conversion of former parametric options; (bso#14069). + Fix sync dosmode fallback in async dosmode codepath; (bso#14070). + vfs_fruit returns capped resource fork length; (bso#14171). + libnet_join: Add SPNs for additional-dns-hostnames entries; (bso#14116). + smbd: Increase a debug level; (bso#14211). + Prevent azure ad connect from reporting discovery errors reference-value-not-ldap-conformant; (bso#14153). + krb5_plugin: Fix developer build with newer heimdal system library; (bso#14179). + replace: Only link libnsl and libsocket if required; (bso#14168); + ctdb: Incoming queue can be orphaned causing communication; breakdown; (bso#14175). + ldb: Release ldb 2.0.8. Cross-compile will not take cross-answers or cross-execute; (bso#13846). + heimdal-build: Avoid hard-coded /usr/include/heimdal in asn1_compile-generated code; (bso#13856).- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).- Update to samba 4.11.3 + CVE-2019-14861: DNSServer RPC server crash, an authenticated user can crash the DCE/RPC DNS management server by creating records with matching the zone name; (bso#14138); (bsc#1158108). + CVE-2019-14870: DelegationNotAllowed not being enforced, the DelegationNotAllowed Kerberos feature restriction was not being applied when processing protocol transition requests (S4U2Self), in the AD DC KDC; (bso#14187); (bsc#1158109).- CVE-2019-14861: DNSServer RPC server crash, an authenticated user can crash the DCE/RPC DNS management server by creating records with matching the zone name; (bso#14138); (bsc#1158108). - CVE-2019-14870: DelegationNotAllowed not being enforced, the DelegationNotAllowed Kerberos feature restriction was not being applied when processing protocol transition requests (S4U2Self), in the AD DC KDC; (bso#14187); (bsc#1158109).- Update to samba 4.11.2 + CVE-2019-10218: Client code can return filenames containing path separators; (bsc#1144902); (bso#14071). + CVE-2019-14833: Samba AD DC check password script does not receive the full password; (bso#12438). + CVE-2019-14847: User with "get changes" permission can crash AD DC LDAP server via dirsync; (bso#14040). - Fixes from 4.11.1 + Overlinking libreplace against librt and pthread against every binary or library causes issues; (bso#14140); + kpasswd fails when built with MIT Kerberos; (bso#14155); + Fix spnego fallback from kerberos to ntlmssp in smbd server; (bso#14106); + Stale file handle error when using mkstemp on a share; (bso#14137); + non-AES schannel broken; (bso#14134); + Joining Active Directory should not use SAMR to set the password; (bso#13884); + smbclient can blunder into the SMB1 specific cli_RNetShareEnum() call on an SMB2 connection; (bso#14152); + Deleted records can be resurrected during recovery; (bso#14147); + getpwnam and getpwuid need to return data for ID_TYPE_BOTH group; (bso#14141); + winbind does not list forest trusts with additional trust attributes; (bso#14130); + fault report points to outdated documentation; (bso#14139); + pam_winbind with krb5_auth or wbinfo -K doesn't work for users of trusted domains/forests; (bso#14124); + classicupgrade results in uncaught exception - a bytes-like object is required, not 'str'; (bso#14136); + pod2man is not longer required, stop checking at build time; (bso#14131); + Exit code of ctdb nodestatus should not be influenced by deleted nodes; (bso#14129); + username/password authentication doesn't work with CUPS and smbspool; (bso#14128); + smbc_readdirplus() is incompatible with smbc_telldir() and smbc_lseekdir(); (bso#14094);- CVE-2019-14847: User with "get changes" permission can crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598); - CVE-2019-10218: Client code can return filenames containing path separators; (bso#14071); (bsc#1144902);- CVE-2019-14833: samba: Accent with "check script password" Samba AD DC check password script does not receive the full password; (bso#12438); (bsc#1154289).- Update to samba 4.11.0 + For details on all items see WHATSNEW.txt in samba-doc package + Python2 runtime support removed; python 3.4 or later required + Security improvements: - SMB1 disabled by default - lanman and plaintext authentication deprecated - winbind: PAM_AUTH and NTLM_AUTH events logged - GnuTLS 3.2 required; system FIPS mode setting honored + CephFS Snapshot integration, exposed as previous file versions + ctdb changes: - onnode -o option removed - ctdbd logs when using more than 90% of a CPU thread - CTDB_MONITOR_SWAP_USAGE variable removed + AD Domain controller improvements: - Upgrade AD databse format - BIND9_FLATFILE deprecated - default process model chagned to prefork - bind9 dns operation duration logging - Default schema updated to 2012_R2; function level is unchanged - many performance improvements + Configuration webserver support removed- Fix broken username/password authentication with CUPS and smbspool; (bsc#1152143); (bso#14128).- Fix auth problems when printing via smbspool backend with kerberos; (bnc#1148539); (bso#13832).- Update to samba 4.10.8 + CVE-2019-10197: user escape from share path definition; (bso#14035); (bsc#1141267);- Fix build on newer systems by modifying samba.spec to use consistent non-relative paths for pammodules in configure line and specification of pam_winbind.so library to package.- Update to samba 4.10.7 + Unable to create or rename file/directory inside shares configured with vfs_glusterfs_fuse module; (bso#14010). + build: Allow build when '--disable-gnutls' is set; (bso#13844) + samba-tool: Add 'import samba.drs_utils' to fsmo.py; (bso#13973). + Fix 'Error 32 determining PSOs in system' message on old DB with FL upgrade; (bso#14008). + s4/libnet: Fix joining a Windows pre-2008R2 DC; (bso#14021) + join: Use a specific attribute order for the DsAddEntry nTDSDSA object; (bso#14046). + vfs_catia: Pass stat info to synthetic_smb_fname(); (bso#14015). + lookup_name: Allow own domain lookup when flags == 0; (bso#14091). + s4 librpc rpc pyrpc: Ensure tevent_context deleted last; (bso#13932). + DEBUGC and DEBUGADDC doesn't print into a class specific log file; (bso#13915). + Request to keep deprecated option "server schannel", VMWare Quickprep requires "auto"; (bso#13949). + dbcheck: Fallback to the default tombstoneLifetime of 180 days; (bso#13967). + dnsProperty fails to decode values from older Windows versions; (bso#13969). + samba-tool: Use only one LDAP modify for dns partition fsmo role transfer; (bso#13973). + third_party: Update waf to version 2.0.17; (bso#13960). + netcmd: Allow 'drs replicate --local' to create partitions; (bso#14051). + ctdb-config: Depend on /etc/ctdb/nodes file; (bso#14017).- CVE-2019-10197: user escape from share path definition; (bso#14035); (bsc#1141267).- Prepare for use future use of kernel keyrings, modify /etc/pam.d/samba to include pam_keyinit.so; (bsc#1144059).- Update samba-winbind script to work with systemd; (bsc#1132739); - Drop samba dhcpcd hook scripts - Update to samba 4.10.6 + s3: winbind: Fix crash when invoking winbind idmap scripts; (bso#13956). + smbd does not correctly parse arguments passed to dfree and quota scripts; (bso#13964). + samba-tool dns: use bytes for inet_ntop; (bso#13965). + samba-tool domain provision: Fix --interactive module in python3; (bso#13828). + ldb_kv: Skip @ records early in a search full scan; (bso#13893). + docs: Improve documentation of "lanman auth" and "ntlm auth" connection; (bso#13981). + python/ntacls: Use correct "state directory" smb.conf option instead of "state dir"; (bso#14002). + registry: Add a missing include; (bso#13840). + Fix SMB guest authentication; (bso#13944). + AppleDouble conversion breaks Resourceforks; (bso#13958). + vfs_fruit makes direct use of syscalls like mmap() and pread(); (bso#13968). + s3:mdssvc: Fix flex compilation error; (bso#13987). + s3/vfs_glusterfs[_fuse]: Avoid using NAME_MAX directly; (bso#13872). + dsdb:samdb: schemainfo update with relax control; (bso#13799). + s3:util: Move static file_pload() function to lib/util; (bso#13964). + smbd: Fix a panic; (bso#13957). + ldap server: Generate correct referral schemes; (bso#12478). + s4 dsdb/repl_meta_data: fix use after free in dsdb_audit_add_ldb_value; (bso#13941). + s4 dsdb: Fix use after free in samldb_rename_search_base_callback; (bso#13942). + dsdb/repl: we need to replicate the whole schema before we can apply it; (bso#12204). + ldb: Release ldb 1.5.5; (bso#12478). + Schema replication fails if link crosses chunk boundary backwards; (bso#13713). + 'samba-tool domain schemaupgrade' uses relax control and skips the schemaInfo update provision; (bso#13799). + dsdb_audit: avoid printing "... remote host [Unknown] SID [(NULL SID)] ..."; (bso#13916). + python/ntacls: We only need security.SEC_STD_READ_CONTROL in order to get the ACL; (bso#13917). + s3:loadparm: Ensure to truncate FS Volume Label at multibyte boundary; (bso#13947). + Using Kerberos credentials to print using spoolss doesn't work; (bso#13939). + wafsamba: Use native waf timer; (bso#13998). + ctdb-scripts: Fix tcp_tw_recycle existence check; (bso#13984).- Update to samba-4.10.5 (including updates for 4.10.4, 4.10.3) + CVE-2019-12435 rpc/dns: Avoid NULL deference if zone not found in DnssrvOperation2; (bso#13922); (bsc#1137815). + CVE-2019-12436 dsdb/paged_results: Ignore successful results without messages; (bso#13951); (bsc#1137816). - Update to samba-4.10.4 + s3: SMB1: Don't allow recvfile on stream fsp's; (bso#13938). + py/provision: Fix for Python 2.6; (bso#13882). + netcmd: Fix 'passwordsettings --max-pwd-age' command; (bso#13873). + s3-libnet_join: 'net ads join' to child domain fails when using "-U admin@forestroot"; (bso#13861). + vfs_ceph: Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245). + vfs_ceph: Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697). + ctdb-common: Avoid race between fd and signal events; (bso#13895). + ctdb-common: Fix memory leak in run_proc; (bso#13943). + lib: Initialize getline() arguments; (bso#13892). + winbind: Fix overlapping id ranges; (bco#13903). + lib util debug: Increase format buffer to 4KiB; (bso#13902). + nsswitch pam_winbind: Fix Asan use after free; (bso#13927). + s4 lib socket: Ensure address string owned by parent struct; (bso#13929). + s3 rpc_client: Fix Asan stack use after scope; (bso#13936). + s3:smbd: Handle IO_REPARSE_TAG_DFS in SMB_FIND_FILE_FULL_DIRECTORY_INFO; (bso#10097). + smb2_tcon: Avoid STATUS_PENDING completely on tdis; (bso#10344). + smb2_sesssetup: avoid STATUS_PENDING responses for session setup; (bso#12845). + smb2_tcon: Avoid STATUS_PENDING completely on tdis; (bso#13698). + smb2_sesssetup: avoid STATUS_PENDING responses for session setup; (bso#13796). + dbcheck: Fix the err_empty_attribute() check; (bso#13843). + vfs_snapper: Drop unneeded fstat handler; (bso#13858). + vfs_default: Fix vfswrap_offload_write_send() NT_STATUS_INVALID_VIEW_SIZE check; (bso#13862). + smb2_server: Grant all 8192 credits to clients; (bso#13863). + smbd: Implement SMB_FILE_NORMALIZED_NAME_INFORMATION handling; (bso#13919). + s3/vfs_glusterfs: Dynamically determine NAME_MAX; (bso#13872). + s3: modules: ceph: Use current working directory instead of share path; (bso#13918); (bsc#1134452). + winbind: Use domain name from lsa query for sid_to_name cache entry; (bso#13831). + memcache: Increase size of default memcache to 512k; (bso#13865). + docs: Update smbclient manpage for "--max-protocol"; (bso#13857). + s3:utils: If share is NULL in smbcacls, don't print it; (bso#13937). + s3:smbspool: Fix regression printing with Kerberos credentials; (bso#13939). + ctdb-scripts: CTDB restarts failed NFS RPC services by hand, which is incompatible with systemd; (bso#13860). + ctdb-daemon: Revert "We can not assume that just because we could complete a TCP handshake"; (bso#13888). + ctdb-daemon: Never use 0 as a client ID; (bso#13930). + ctdb-common: Fix memory leak; (bso#13943). + s3:debug: Enable logging for early startup failures; (bso#13904) - Update to samba-4.10.3 + CVE-2018-16860: Heimdal KDC: Reject PA-S4U2Self with unkeyed checksum; (bso#13685); (bsc#1134024).- CVE-2019-12435: zone operations can crash rpc server; (bso#13922); (bsc#1137815).- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697). - Add ceph_snapshots VFS module; (jsc#SES-183).- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).- Update to samba-4.10.2: + CVE-2019-3870 (World writable files in Samba AD DC private/ dir); (bso#13834). + CVE-2019-3880 (Save registry file outside share as unprivileged user); (bso#13851). + py/kcc_utils: py2.6 compatibility; (bso#13837). + libcli: permit larger values of DataLength in SMB2_ENCRYPTION_CAPABILITIES of negotiate response; (bso#13869). + regfio: Improve handling of malformed registry hive files; (bso#13840). + ctdb-version: Simplify version string usage; (bso#13789). + lib: Make fd_load work for non-regular files; (bso#13859). + dbcheck: in the middle of the tombstone garbage collection causes replication failures, dbcheck: add --selftest-check-expired-tombstones cmdline option; (bso#13816). + ndr_spoolss_buf: Fix out of scope use of stack variable in NDR_SPOOLSS_PUSH_ENUM_OUT(); (bso#13818). + s4/messaging: Fix undefined reference in linking libMESSAGING-samba4.so; (bso#13854). + acl_read: Fix regression for empty lists; (bso#13836). + s4:dlz make b9_has_soa check dc=@ node; (bso#13841). + s3:client: Fix printing via smbspool backend with kerberos auth; (bso#13832). + s4:librpc: Fix installation of Samba; (bso#13847). + s3:lib: Fix the debug message for adding cache entries; (bso#13848). + s3:utils: Add 'smbstatus -L --resolve-uids' to show username; (bso#13793). + s3:lib: Fix the debug message for adding cache entries; (bso#13848). + s3:waf: Fix the detection of makdev() macro on Linux; (bso#13853). * ctdb-build: Drop creation of .distversion in tarball; (bso#13789). * ctdb-packaging: Test package requires tcpdump, ctdb package should not own system library directory; (bso#13838). - Update to samba-4.10.1: + py/kcc_utils: py2.6 compatibility; (bso#13837); + libcli: permit larger values of DataLength in SMB2_ENCRYPTION_CAPABILITIES of negotiate response; (bso#13869); + regfio: Improve handling of malformed registry hive files; (bso#13840); + ctdb-version: Simplify version string usage; (bso#13789); + lib: Make fd_load work for non-regular files; (bso#13859); + dbcheck in the middle of the tombstone garbage collection causes replication failures, dbcheck: add --selftest-check-expired-tombstones cmdline option; (bso#13816); + ndr_spoolss_buf: Fix out of scope use of stack variable in NDR_SPOOLSS_PUSH_ENUM_OUT(); (bso#13818); + s4/messaging: Fix undefined reference in linking libMESSAGING-samba4.so; (bso#13854); + acl_read: Fix regression for empty lists; (bso#13836); + s4:dlz make b9_has_soa check dc=@ node; (bso#13841); + s3:client: Fix printing via smbspool backend with kerberos auth; (bso#13832); + s4:librpc: Fix installation of Samba; (bso#13847); + s3:lib: Fix the debug message for adding cache entries; (bso#13848); + s3:utils: Add 'smbstatus -L --resolve-uids' to show username; (bso#13793); + s3:lib: Fix the debug message for adding cache entries; (bso#13848); + s3:waf: Fix the detection of makdev() macro on Linux; (bso#13853); + ctdb-build: Drop creation of .distversion in tarball; (bso#13789); + ctdb-packaging: Test package requires tcpdump, ctdb package should not own system library directory; (bso#13838); - Update to samba-4.10.0: + s4-server: Open and close a transaction on sam.ldb at startup; (bso#13760); + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812); + s4/scripting/bin: Open unicode files with utf8 encoding and write + unicode string. + sambaundoguididx: Use the right escaped oder unescaped sam ldb files; (bso#13759); + Fix idmap cache pollution with S-1-22- IDs on winbind hickup; (bso#13813); + passdb: Update ABI to 0.27.2. + lib/winbind_util: Add winbind_xid_to_sid for --without-winbind; (bso#13813); + lib:util: Move debug message for mkdir failing to log level 1; (bso#13823);- MacOS credit accounting breaks with async SESSION SETUP; (bsc#1125601); (bso#13796). - Mac OS X SMB2 implmenetation sees Input/output error or Resource temporarily unavailable and drops connection; (bso#13698)- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).- CVE-2019-3880: Save registry file outside share as unprivileged user; (bso#13851); (bsc#1131060 ).- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0); (bso#13834); (bsc#1130703);- Update to samba-4.9.5 + audit_logging: Remove debug log header and JSON Authentication: prefix; (bso#13714); + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760); + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso# CID: 1433607; (bso#11495); + smbd: uid: Don't crash if 'force group' is added to an existing share connection; (bso#13690); + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility code; (bso#13770); + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803); + s3:utils/smbget fix recursive download with empty source directories; (bso#13199); + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716); + s3:libsmb: cli_smb2_list() can sometimes fail initially on a connection; (bso#13736); + join: Throw CommandError instead of Exception for simple errors; (bso#13747); + ldb: Avoid inefficient one-level searches; (bso#13762); + s3: libsmb: use smb2cli_conn_max_trans_size() in cli_smb2_list(); (bso#13736); + tldap: Avoid use after free errors; (bso#13776); + Fix idmap xid2sid cache churn; (bso#13802); + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812); + s3-smbd: Avoid assuming fsp is always intact after close_file call; (bso#13720); + s3-vfs-fruit: Add close call; (bso#13725); + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746); + s3-vfs: add glusterfs_fuse vfs module; (bso#13774); + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766); + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS) ftruncate and fallocate; (bso#13807); + lib/audit_logging: Actually create talloc; (bso#13737); + netcmd/user: python[3]-gpgme unsupported and replaced by python[3]-gpg; (bso#13728); + dns: Changing onelevel search for wildcard to subtree; (bso#13738); + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721); + sambaundoguididx: Use the right escaped oder unescaped sam ldb files; (bso#13759); + ctdb: Print locks latency in machinereadable stats; (bso#13742); + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786); + audit_logging: auth_json_audit required auth_json; (bso#13715); + man pages: Document prefork process model; (bso#13765); + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773); + s3:auth: ignore create_builtin_guests() failing without a valid idmap configuration; (bso#13697); + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC without trusts; (bso#13722); + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd is not available; (bso#13723); + s4:server: Add support for 'smbcontrol samba shutdown' and 'smbcontrol debug/debuglevel'; (bso#13752); + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616); + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330); + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774); + notifyd: Fix SIGBUS on sparc; (bso#13704); + waf: Check for libnscd; (bso#13787); + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770); + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717); + Recovery lock bug fixes; (bso#13800); + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726); + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727); + vfs_fileid: Fix get_connectpath_ino; (bso#13741); + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).- Fix update-apparmor-samba-profile script after apparmor switched to using named profiles. The change is backwards compatible; (bsc#1126377);- LoadParm().load_default() fails with "Unable to load default file"; (bsc#1089758);- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);- Update to samba-4.9.4 + libcli/smb: Don't overwrite status code; (bso#9175). + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164). + Session setup reauth fails to sign response; (bso#13661). + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677). + vfs_shadow_copy2: Nicely deal with attempts to open previous version for writing; (bso#13688). + Restoring previous version of stream with vfs_shadow_copy2 fails with NT_STATUS_OBJECT_NAME_INVALID fsp->base_fsp->fsp_name; (bso#13455). + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571). + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708) + PEP8: fix E231: missing whitespace after ','. + winbindd: Fix crash when taking profiles;(bso#13629) + CVE-2018-14629 dns: Fix CNAME loop prevention using counter regression; (bso#13600) + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686). + CVE-2018-16853: Do not segfault if client is not set; (bso#13571). + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679) + ctdb-daemon: Exit with error if a database directory does not exist; (bso#13696). + s3:libads: Add net ads leave keep-account option; (bso#13498).- Drop more %if..%endif guards which are idempotent. - Drop requires on ldconfig which are already auto-discovered. - Do not ignore errors from useradd/groupadd.- Remove python2 build dependency from samba-libs; (bsc#1116900);- Update update-apparmor-samba-profile script to ignore the shares's paths containing substitution variables in any place, not only at the beginning of the path.- Update to samba-4.9.3 + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD Internal DNS server; (bso#13600); (bsc#1116319); + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628); (bsc#1116320); + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server; (bso#13674); (bsc#1116322); + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers; (bso#13669); (bsc#1116321); + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos configuration (unsupported); (bso#13678); (bsc#1116324); + CVE-2018-16857: Bad password count in AD DC not always effective; window; (bso#13683); (bsc#1116323);- Update to samba-4.9.2 + dsdb: Add comments explaining the limitations of our current backlink behaviour; (bso#13418); + Fix problems running domain backups (handling SMBv2, sites); (bso#13621); + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3; (bso#13465); + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642); + File saving issues with vfs_fruit on samba >= 4.8.5; (bso#13646); + Enabling vfs_fruit looses FinderInfo; (bso#13649); + Cancelling of SMB2 aio reads and writes returns wrong error NT_STATUS_INTERNAL_ERROR; (bso#13667); + Fix CTDB recovery record resurrection from inactive nodes and simplify vacuuming; (bso#13641); + examples: Fix the smb2mount build; (bso#13465); + libtevent: Fix build due to missing open_memstream on Illiumos; (bso#13629); + winbindd_cache: Fix timeout calculation for sid<->name cache; (bso#13662); + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path; (bso#13653); + Extended DN SID component missing for member after switching group membership; (bso#13418); + Return STATUS_SESSION_EXPIRED error encrypted, if the request was encrypted; (bso#13624); + python: Allow forced signing via smb.SMB(); (bso#13621); + lib:socket: If returning early, set ifaces; (bso#13665); + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8 encoded unicode; (bso#13616); + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute; (bso#13673); + waf: Add -fstack-clash-protection; (bso#13601); + winbind: Fix segfault if an invalid passdb backend is configured; (bso#13668); + Fix bugs in CTDB event handling; (bso#13659); + Misbehaving nodes are sometimes not banned; (bso#13670);- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);- winbind requires latest version of libtevent-util0 to start- Backport latest gpo code from master + Read policy from local gpt cache + Offline policy application + Make group policy extensible via register/unregister gpext + gpext's run via a process_group_policy method- Enable profiling data collection- Change samba-kdc package name to samba-ad-dc - Move samba-ad-dc.service to the samba-ad-dc package- Update to samba-4.9.1 + s3: nmbd: Stop nmbd network announce storm; (bso#13620); + s3-rpcclient: Use spoolss_init_spoolss_UserLevel1 in winspool cmds; (bso#13597); + CTDB recovery lock has some race conditions; (bso#13617); + s3-rpc_client: Advertise Windows 7 client info; (bso#13597); + ctdb-doc: Remove PIDFILE option from ctdbd_wrapper man page; (bso#13610);- Tumbleweed doesn't define the sle_version macro, so we must include a check for suse_version also. Otherwise python3 is disabled on Tumbleweed.- Update to samba-4.9.0 + samba_dnsupdate: Honor 'dns zone scavenging' option, only update if needed; (bso#13605); + wafsamba: Fix 'make -j'; (bso#13606);- Update to samba-4.9.0rc5 + s3: VFS: vfs_full_audit: Ensure smb_fname_str_do_log() only returns absolute pathnames; (bso#13565); + s3: util: Do not take over stderr when there is no log file; (bso#13578); + Durable Reconnect fails because cookie.allow_reconnect is not set; (bso#13549); + krb5-samba: Interdomain trust uses different salt principal; (bso#13539); + vfs_fruit: Don't unlink the main file; (bso#13441); + smbd: Fix a memleak in async search ask sharemode; (bso#13602); + Fix Samba GPO issue when Trust is enabled; (bso#11517); + samba-tool: Add "virtualKerberosSalt" attribute to 'user getpassword/syncpasswords'; (bso#13539); + Fix CTDB configuration issues; (bso#13589); + ctdbd logs an error until it can successfully connect to eventd; (bso#13592);- Update to samba-4.9.0rc4 + s3: smbd: Ensure get_real_filename() copes with empty pathnames; (bso#13585); + samba domain backup online/rename commands force user to specify password on CLI; (bso#13566); + wafsamba/samba_abi: Always hide ABI symbols which must be local; (bso#13579); + Fix a panic if fruit_access_check detects a locking conflict; (bso#13584); + Fix memory and resource leaks; (bso#13567); + python: Fix print in dns_invalid.py; (bso#13580); + Aliasing issue causes incorrect IPv6 checksum; (bso#13588); + Fix CTDB configuration issues; (bso#13589); + s3: vfs: time_audit: fix handling of token_blob in smb_time_audit_offload_read_recv(); (bso#13568);- Add missing zlib-devel dependency which was previously pulled in by libopenssl-devel- Update to samba-4.9.0rc3+git.22.3fff23ae36e + CVE-2018-10858: libsmb: Harden smbc_readdir_internal() against returns from malicious servers; (bso#13453); + CVE-2018-1140: ldbsearch '(distinguishedName=abc)' and DNS query with escapes crashes, ldb: Release LDB 1.3.5 for CVE-2018-1140; (bso#13374); + CVE-2018-10918: cracknames: Fix DoS (NULL pointer de-ref) when not servicePrincipalName is set on a user; (bso#13552); + CVE-2018-10919: acl_read: Fix unauthorized attribute access via searches; (bso#13434); + ctdb_mutex_ceph_rados_helper: Set SIGINT signal handler; (bso#13540); + CVE-2018-1139 libcli/auth: Do not allow ntlmv1 over SMB1 when it is disabled via "ntlm auth"; (bso#13360); + s3-tldap: do not install test_tldap; (bso#13529); + ctdb_mutex_ceph_rados_helper: Fix deadlock via lock renewals; (bso#13540); + CVE-2018-1140 Add NULL check for ldb_dn_get_casefold() in ltdb_index_dn_attr(); (bso#13374); + ctdb-eventd: Fix CID 1438155; (bso#13554); + Fix CIDs 1438243, (Unchecked return value) 1438244 (Unsigned compared against 0), 1438245 (Dereference before null check) and 1438246 (Unchecked return value); (bso#13553); + ctdb: Fix a cut&paste error; (bso#13554); + systemd: Only start smb when network interfaces are up; (bso#13559); + Fix quotas don't work with SMB2; (bso#13553); + s3/smbd: Ensure quota code is only called when quota support detected; (bso#13563); + s3/libsmb: Explicitly set delete_on_close token for rmdir; (bso#13204); + s3:waf: Install eventlogadm to /usr/sbin; (bso#13561); + Shorten description in vfs_linux_xfs_sgid manual; (bso#13562);- Update to samba-4.9.0rc2+git.21.a1069afb007 + s3: smbd: Using "sendfile = yes" with SMB2 can cause CPU spin; (bso#13537); + s3: smbd: Fix path check in smbd_smb2_create_durable_lease_check(); (bso#13535); + samba-tool trust: Support discovery via netr_GetDcName; (bso#13538); + s4-dsdb: Only build dsdb Python modules for AD DC; (bso#13542); + Fix portability issues on freebsd; (bso#13520); + DNS wildcard search does not handle multiple labels correctly; (bso#13536); + samba-tool domain trust: Fix trust compatibility to Windows Server 1709 and FreeIPA; (bso#13308); + Fix portability issues on freebsd; (bso#13520); + ctdb-protocol: Fix CTDB compilation issues; (bso#13545); + ctdb-docs: Replace obsolete reference to CTDB_DEBUG_HUNG_SCRIPT option; (bso#13546); + ctdb-doc: Provide an example script for migrating old configuration; (bso#13550); + ctdb-event: Implement event tool "script list" command; (bso#13551);- Update to samba-4.8.4+git.37.a7a861d7982; + CVE-2018-1139: Weak authentication protocol allowed; (bsc#1095048); (bsc#13360); + CVE-2018-1140: Denial of Service Attack on DNS and LDAP server; (bsc#1095056); (bso#13466); (bso#13374); + CVE-2018-10858: Insufficient input validation on client directory listing in libsmbclient; (bsc#1103411); (bso#13453); + CVE-2018-10918: Denial of Service Attack on AD DC DRSUAPI server; (bsc#1103414); (bso#13552); + CVE-2018-10919: Confidential attribute disclosure from the AD LDAP server; (bsc#1095057); (bso#13434); + s3:winbind: winbind normalize names' doesn't work for users; (bso#12851); + winbind: Fix UPN handling in canonicalize_username(); (bso#13369); + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428); + samdb: Fix building Samba with gcc 8.1; (bso#13437); + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440); + smbd: Flush dfree memcache on service reload; (bso#13446); + ldb: Save a copy of the index result before calling the + lib/util: No Backtrace given by Samba's AD DC by default; (bso#13454). + s3: smbd: printing: Re-implement delete-on-close semantics for print files missing since 3.5.x; (bso#13457). + python: Fix talloc frame use in make_simple_acl(); (bso#13474). + krb5_wrap: Fix keep_old_entries logic for older Kerberos libraries;(bso#13478). + krb5_plugin: Add winbind localauth plugin for MIT Kerberos; (bso#13480).- Add missing package descriptions; (bsc#1093864); - Fix dependency issue between samba-python and samba-kdc; (bsc#1062876); - Call update-apparmor-samba-profile when running samba-ad-dc; (bsc#1092099);- Update to 4.8.2 + After update to 4.8.0 DC failed with "Failed to find our own NTDS Settings objectGUID" (bso#13335). + fix incorrect reporting of stream dos attributes on a directory (bso#13380). + vfs_ceph: add asynchronous fsync; fake synchronous call (bso#13412). + vfs_ceph: add fake async pwrite/pread send/recv hooks; (bso#13425) + vfs_ceph: Fix memory leak; (bso#13424). + libsmbclient: Fix hard-coded connection error return of ETIMEDOUT; (bso#13419). + s4-lsa: Fix use-after-free in LSA server; (bso#13420). + winbindd: Do re-connect if the RPC call fails in the passdb case; (bso#13430). + cleanupd: Sends MSG_SMB_UNLOCK twice to interested peers; (bso#13416). + cleanupd: Use MSG_SMB_BRL_VALIDATE to signal cleanupd unclean process shutdown; (bso#13414). + ctdb-client: Remove ununsed functions from old client code; (bso#13411). + printing: Return the same error code as windows does on upload failures; (bso#13395). + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged pipe is not accessable; (bso#13400). + s4:lsa_lookup: remove TALLOC_FREE(state) after all dcesrv_lsa_Lookup{Names,Sids}_base_map() calls; (bso#13420). + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407). + s3:smbspool: Fix cmdline argument handling; (bso#13417).- Move libdfs-server-ad-samba4.so library from kdc to libs package, as it is required by some client libs; (bsc#1074135); - Update to 4.8.1; (bsc#1091179); + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error, we don't own it here; (bso#13244); + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't support fdopendir(); (bso#13270); + Round-tripping ACL get/set through vfs_fruit will increase the number of ACE entries without limit; (bso#13319); + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit issues; (bso#13347); + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without delete access; (bso#13358); + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372); + s3: smbd: Unix extensions attempts to change wrong field in fchown call; (bso#13375); + ms_schema/samba-tool visualize: Fix python2.6 incompatibility; (bso#13337); + Fix invocation of gnutls_aead_cipher_encrypt(); (bso#13352); + Windows 10 cannot logon on Samba NT4 domain; (bso#13328); + winbindd: Recover loss of netlogon secure channel in case the peer DC is rebooted; (bso#13332); + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363); + ctdb-client: Fix bugs in client code; (bso#13356); + ctdb-scripts: Drop "net serverid wipe" from 50.samba event script; (bso#13359); + s3: lib: messages: Don't use the result of sec_init() before calling sec_init(); (bso#13368); + libads: Fix the build '--without-ads'; (bso#13273); + winbind: Keep "force_reauth" in invalidate_cm_connection, add 'smbcontrol disconnect-dc'; (bso#13332); + vfs_virusfilter: Fix CIDs 1428738-1428740; (bso#13343); + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367); + rpc_server: Fix core dump in dfsgetinfo; (bso#13370); + smbclient: Fix notify; (bso#13382); + Fix smbd panic if the client-supplied channel sequence number wraps; (bso#13215); + Windows 10 cannot logon on Samba NT4 domain; (bso#13328); + lib/util: Remove unused '#include ' from tests/tfork.c; (bso#13342); + Fix build errors with cc from developerstudio 12.5 on Solaris; (bso#13343); + Fix the picky-developer build on FreeBSD 11; (bso#13344); + s3:modules: Fix the build of vfs_aixacl2.c; (bso#13345); + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338); + lib:replace: Fix linking when libtirpc-devel overwrites system headers; (bso#13341); + winbindd: 'wbinfo --name-to-sid' returns misleading result on invalid query; (bso#13312); + s3:passdb: Do not return OK if we don't have pinfo set up; (bso#13376); + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);- Use new foreground execution flags for systemd samba daemons; (bsc#1088574); (bsc#1071090); (bsc#1065551); + Add %post scriptlet to clear old sysconfig flags - Update vendor-files to commit 880b3e7. + Set samba sysconfig template variables to "" + Add required daemon flags directly to systemd unit- Specfile cleanup + Remove %if..%endif guards which don't affect the build + Remove redundant %clean section + Replace old $RPM_* shell vars with macros- BuildRequire pkgconfig(systemd) and pkgconfig(libsystemd) in place of systemd and systemd-devel: Allow OBS to optimize the workload by allowing the usage of the 'build-optimized' systemd packages.- Enable building samba with python3, and create a samba-python3 package.- Update to 4.8 + New GUID Index mode in sam.ldb for the AD DC + GPO support for samba KDC + Time machine support with vfs_fruit + Encrypted secrets + AD Replication visualization + Improved trust support - ability to not scan global trust list - AD external trusts have limited support - verbose trusted domain listing + VirusFilter VFS module + NT4-style replication removed + vfs_aio_linux removed- Disable samba-pidl package, due to the removal of dependency perl-Parse-Yapp; (bsc#1085150);- Update to 4.7.6; + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally; (bso#11343); (bsc#1081741); + CVE-2018-1057: Authenticated users can change other users' password; (bso#13272); (bsc#1081024).- Disable python until full python3 port is done; (bsc#1082139); + Remove contents of package samba-python + Remove contents of package libsamba-policy0 + Remove contents of package libsamba-policy-devel + Remove library libsamba-python-samba4.so from samba-libs package + Remove library libsamba-net-samba4.so from samba-libs package + Remove smbtorture binary and manpage from samba-test- samba fails to build with glibc2.27; (bsc#1081042);- Update to 4.7.5; (bsc#1080545); + smbd tries to release not leased oplock during oplock II downgrade; (bso#13193); + Fix copying file with empty FinderInfo from Windows client to Samba share with fruit; (bso#13181); + build: Deal with recent glibc sunrpc header removal; (bso#10976); + Make Samba work with tirpc and libnsl2; (bso#13238); + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208); (bsc#1075206); + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue; (bso#12986); + ctdb-recovery-helper: Deregister message handler in error paths; (bso#13188); + samba: Only use async signal-safe functions in signal handler; (bso#13240); + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue; (bso#12986); + repl_meta_data: Fix linked attribute corruption on databases with unsorted links on expunge. dbcheck: Add functionality to fix the corrupt database; (bso#13228); + Fix smbd panic when chdir returns error during exit; (bso#13189); + Make Samba work with tirpc and libnsl2; (bso#13238); + Fix POSIX ACL support on HPUX and possibly other big-endian OSs; (bso#13176);- Update to 4.7.4; (bsc#1080545); + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140); + s3: libsmb: Fix valgrind read-after-free error in cli_smb2_close_fnum_recv(); (bso#13171); + s3: libsmb: Fix reversing of oldname/newname paths when creating a reparse point symlink on Windows from smbclient; (bso#13172); + Build man page for vfs_zfsacl.8 with Samba; (bso#12934); + repl_meta_data: Allow delete of an object with dangling backlinks; (bso#13095); + s4:samba: Fix default to be running samba as a deamon; (bso#13129); + Performance regression in DNS server with introduction of DNS wildcard, ldb: Release 1.2.3; (bso#13191); + vfs_zfsacl: Fix compilation error; (bso#6133); + "smb encrypt" setting changes are not fully applied until full smbd restart; (bso#13051); + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052); + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155); + winbindd: Dependency on trusted-domain list in winbindd in critical auth codepath; (bso#13173); + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120); + ctdb: sock_daemon leaks memory; (bso#13153); + TCP tickles not getting synchronised on CTDB restart; (bso#13154); + winbindd: winbind parent and child share a ctdb connection; (bso#13150); + pthreadpool: Fix deadlock; (bso#13170); + pthreadpool: Fix starvation after fork; (bso#13179); + messaging: Always register the unique id; (bso#13180); + s4/smbd: set the process group; (bso#13129); + Fix broken linked attribute handling; (bso#13095); + The KDC on an RWDC doesn't send error replies in some situations; (bso#13132); + libnet_join: Fix 'net rpc oldjoin'; (bso#13149); + g_lock conflict detection broken when processing stale entries; (bso#13195); + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired sessions; (bso#13197); + s3:libads: net ads keytab list fails with "Key table name malformed"; (bso#13166); (bsc#1067700); + Fix crash in pthreadpool thread after failure from pthread_create; (bso#13170); + s4:samba: Allow samba daemon to run in foreground; (bso#13129); (bsc#1065551); + third_party: Link the aesni-intel library with "-z noexecstack"; (bso#13174); + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I" options; (bso#13125);- Re-enable usage of libnsl (did got lost with glibc change) - Use TI-RPC (sunrpc is deprecated and will be removed soon from glibc)- smbc_opendir should not return EEXIST with invalid login credentials; (bnc#1065868).- Update to 4.7.3; (bsc#1069666); + Non-smbd processes using kernel oplocks can hang smbd; (bso#13121); + python: use communicate to fix Popen deadlock; (bso#13127); + smbd on disk file corruption bug under heavy threaded load; (bso#13130); + tevent: version 0.9.34; (bso#13130); + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118); + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug; (bsc#1060427);(bso#13041); + CVE-2017-15275: s3: smbd: Chain code can return uninitialized memory when talloc buffer is grown; (bsc#1063008); (bso#13077); - Build with AD DC support only in openSUSE.- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- samba-tool requires samba-python; (bnc#1067771).- Run all daemons in the foreground and let systemd handle it; (bsc#1065551). - Update to 4.7.1; + Fix exporting subdirs with shadow_copy2; (bso#13091); + Currently if getwd() fails after a chdir(), we panic; (bso#13027); + Ensure default SMB_VFS_GETWD() call can't return a partially completed struct smb_filename; (bso#13068); + sys_getwd() can leak memory or possibly return the wrong errno on older systems; (bso#13069); + smbclient doesn't correctly canonicalize all local names before use; (bso#13093); + Fix broken linked attribute handling; (bso#13095); + Missing LDAP query escapes in DNS rpc server; (bso#12994); + Link to -lbsd when building replace.c by hand; (bso#13087); + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem; (bso#6133); + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module; (bso#7909); + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module; (bso#7933); + Missing assignment in sl_pack_float; (bso#12991); + Wrong Samba access checks when changing DOS attributes; (bso#12995); + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062); + groupmap cleanup should not delete BUILTIN mappings; (bso#13065); + Enabling vfs_fruit results in loss of Finder tags and other xattrs; (bso#13076); + man pages: Properly ident lists; (bso#9613); + smb.conf.5: Sort parameters alphabetically; (bso#13081); + Fix GUID string format on GetPrinter info; (bso#12993); + Remote serverid check doesn't check for the unique id; (bso#13042); + CTDB starts consuming memory if there are dead nodes in the cluster; (bso#13056); + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070); + libgpo doesn't sort the GPOs in the correct order; (bso#13046); + Remote serverid check doesn't check for the unique id; (bso#13042); + vfs_catia: Fix a potential memleak; (bso#13090); + Fix file change notification for renames; (bso#12903); + Samba DNS server does not honour wildcards; (bso#12952); + Can't change password in samba from a Windows client if Samba runs on IPv6 only interface; (bso#13079); + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086); + Apple client can't cope with SMB2 async replies when creating symlinks; (bso#13047); + s4:rpc_server:backupkey: Move variable into scope; (bso#12959); + Fix ntstatus_gen.h generation on 32bit; (bso#13099); + Fix a double free in vfs_gluster_getwd(); (bso#13100); + Fix resouce leaks and pointer issues; (bso#13101); + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);- Add samba-kdc to baselibs.conf. - Do not wrap samba-kdc's package definition into if/endif: the package won't be generated simply based on the fact that there is no files section for the package. Allows the source validator to ensure samba-kdc is a built package.- Update to 4.7.0; + Whole DB read locks: Improved LDAP and replication consistency; (bso#12858). + Samba AD with MIT Kerberos + Dynamic RPC port range: Default range changed from "1024-1300" to "49152-65535". + Authentication and Authorization audit support: New auth_audit debug class. + Multi-process LDAP Server: The LDAP server in the AD DC now honours the process model used for the rest of the 'samba' process. + Improved Read-Only Domain Controller (RODC) Support; (bso#12977). + Additional password hashes stored in supplementalCredentials. + Improvements to DNS during Active Directory domain join. + Significant AD performance and replication improvements. + Query record for open file or directory. + Removal of lpcfg_register_defaults_hook(). + Change of loadable module interface. + SHA256 LDAPS Certificates: The self-signed certificate generated for use on LDAPS will now be generated with a SHA256 self-signature, not a SHA1 self-signature. + CTDB no longer allows mixed minor versions in a cluster. + CTDB now ignores hints from Samba about TDB flags when attaching to databases. + New configuration variable CTDB_NFS_CHECKS_DIR. + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed. + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed. + The example NFS Ganesha call-out has been improved. + A new "replicated" database type is available.- CVE-2017-12163: Prevent client short SMB1 write from writing server memory to file; (bso#13020); (bsc#1058624).- CVE-2017-12150: Some code path don't enforce smb signing, when they should; (bso#12997); (bsc#1058622).- CVE-2017-12151: Keep required encryption across SMB3 dfs redirects; (bso#12996); (bsc#1058565).- Clean specfile assuming SUSE-only system and product >=SLE11 + %{ul_version}, %{rhel_version}, %{mandriva_version}, %{centos_version} are always undefined + %{_vendor} is "suse" and %{suse_version} is at least 1100- Update to 4.6.7; (bsc#1054017) + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392). + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937). + vfs_ceph provides inconsistent directory listings; (bso#12911). + Misused talloc context can cause a user to crash their smbd by chaining SMB1 commands.; (bso#12836). + Use-after free can crash libsmbclient code.; (bso#12927). + Server exit with active AIO can crash.; (bso#12925). + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910). + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs; (bso#12898). + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897). + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for authentication; (bso#12886). + finder sidebar showing question mark instead of icon when using ip to connect with vfs_fruit; (bso#12840). + Winbind stops obtaining the 'unixHomeDirectory' & 'loginShell' attributes from AD.; (bso#12720). + KCC run at selftest startup can fail spuriously due to a race; (bso#12869). + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for the remote change; (bso#12782). + rpc_pipe_client memory leaks due to long term memory context passed to rpc_pipe_open_interface(); (bso#12890). + CVE-2017-2619 breaks accessing previous versions of directories with snapshots in subdirectories of the share; (bso#12885). + dns_name_equal doing OOB read; (bso#12813). + replica_sync tests flap; (bso#12753). + Selftest should not call 'net cache flush' and wipe important winbind entries; (bso#12868). + Old Samba versions don't support using recent ldb versions (>=1.1.30); (bso#12859). + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490). + race starting winbindd against posixacl test; (bso#12843). + Crash in the reentrant smbd_smb2_create_send() if the something fails in the subsequent try; (bso#12832). + spnego.c passes the wrong argument order to gensec_update_ev() for the FALLBACK case; (bso#12788). + Clients with SMB3 support can't connect with "server max protocol = SMB2_02"; (bso#12772). + A log message of samb-tool user syncpasswords reverses string arguments in a debug message "Call Popen[...".; (bso#12768). + The smb tarmode tests kills the share dir contents; (bso#12867). + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862). + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860). + manpage/index.html lists links not in alphabetical order; (bso#12854). + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831). + If a record is locked in a database, then recovery does not complete; (bso#12857). + debug_locks.sh script does not log any information; (bso#12856). + SIGSEGV in cm_connect_lsa_tcp dereferencing conn->lsa_tcp_pipe->transport after error; (bso#12852). + smbclient can't parse DOMAIN+username if a different winbind separator is used; (bso#12849). + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845). + Related requests with TreeConnect fail with NETWORK_NAME_DELETED; (bso#12844). + cli->server_os not filled correctly; (bso#12779). + REGRESSION: smbclient doesn't print the session setup anymore; (bso#12824). + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808). + CTDB NFS call-out failures do not cause event failures; (bso#12837). + net command fails due to incorrectly return code; (bso#12828). + Fix building Samba with GCC 7.1; (bso#12827).- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again; (bsc#1048339).- fix cephwrap_chdir(); (bsc#1048790). - Update to 4.6.6 + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation; (bsc#1048278).- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).- Fix inconsistent ctdb socket path; (bsc#1048352). - Fix non-admin cephx authentication; (bsc#1048387).- Update to 4.6.5; (bsc#1040157) + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at startup; (bso#12814). + vfs_expand_msdfs tries to open the remote address as a file path; (bso#12687). + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type); (bso#12798). + With clustering get update_num_read_oplocks failed and PANIC: num_share_modes == 1 assertion failure; (bso#11844). + contend_level2_oplocks_begin_default oplock optimisation doesn't carry over to leases; (bso#12766). + `ctdb nodestatus` incorrectly displays status for all nodes with wrong exit code; (bso#12802). + CTDB can spin hard on revoking readonly delegations if a node becomes disconnected; (bso#12697). + Printing a share mode entry with leases can crash in the ndr code; (bso#12793). + Fix flakey unit tests for eventd; (bso#12792). + CTDB daemon crashes if built with clang; (bso#12770). + smbcacls fails if no password is specified; (bso#12765). + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757). + samba-tool user syncpasswords doesn't trigger the script when a user gets removed; (bso#12767). + systemd: fix detection of libsystemd; (bso#12764). + Notify subsystem only maps first inotify mask to Windows notify filter; (bso#12760). + Allow passing trusted domain password as plain-text to PASSDB layer; (bso#12751). + Can't case-rename files with vfs_fruit; (bso#12749). + wrong sid->uid mapping for SIDs residing in sIDHistory; (bso#12702). + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562). + Ordering of notify responses broken; (bso#12756).- s3: libsmb: Fix error where short name length was read as 2 bytes, should be 1; (bso#11822); (bsc#1042419).- Revert explicit winbind %{version}-%{release} dependency. + The ABI has stabilized since (bsc#936909), so remove to fix cross-media dependencies; (bsc#1037899).- Fix CVE-2017-7494 remote code execution from a writable share; (bso#12780); (bsc#1038231).- Update to 4.6.3; (bsc#1036011) + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots from shares with GlusterFS backend; (bso#12743). + Fix for Solaris C compiler; (bso#12559). + s3: locking: Update oplock optimization for the leases era; (bso#12628). + Make the Solaris C compiler happy; (bso#12693). + s3: libgpo: Allow skipping GPO objects that don't have the expected LDAP attributes; (bso#12695). + Fix buffer overflow caused by wrong use of getgroups; (bso#12747). + lib: debug: Avoid negative array access; (bso#12746). + cleanupdb: Fix a memory read error; (bso#12748). + streams_xattr and kernel oplocks results in NT_STATUS_NETWORK_BUSY; (bso#7537). + winbindd: idmap_autorid allocates ids for unknown SIDs from other backends; (bso#11961). + vfs_fruit: Resource fork open request with flags=O_CREAT|O_RDONLY; (bso#12565). + manpages/vfs_fruit: Document global options; (bso#12615). + lib/pthreadpool: Fix a memory leak; (bso#12624). + Lookup-domain for well-known SIDs on a DC; (bso#12727). + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728). + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729). + credentials_krb5: use gss_acquire_cred for client-side GSSAPI use case; (bso#12611). + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690). + ctdb-readonly: Avoid a tight loop waiting for revoke to complete; (bso#12697). + ctdb_event monitor command crashes if event is not specified; (bso#12723). + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733). + smbd: Fix smb1 findfirst with DFS; (bso#12558). + smbd: Do an early exit on negprot failure; (bso#12610). + winbindd: Fix substitution for 'template homedir'; (bso#12699). + s4:kdc: Disable principal based autodetected referral detection; (bso#12554). + idmap_autorid: Allocate new domain range if the callers knows the sid is valid; (bso#12613). + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724). + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for trusted domain; (bso#12725). + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731). + winbindd: Fix password policy for pam authentication; (bso#12725). + s3:gse: Correctly handle external trusts with MIT; (bso#12554). + auth/credentials: Always set the realm if we set the principal from the ccache; (bso#12611). + replace: Include sysmacros.h; (bso#12686). + s3:vfs_expand_msdfs: Do not open the remote address as a file; (bso#12687). + s3:libsmb: Only print error message if kerberos use is forced; (bso#12704). + winbindd: Child process crashes when kerberos-authenticating a user with wrong password; (bso#12708). + vfs_fruit: Office document opens as read-only on macOS due to CNID semantics; (bso#12715). + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is fragmented; (bso#12737).- Generate and update vendor-files tarball from Git + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).- Generate source tarball directly from Git using OBS tar_scm + use version string derived from parent Git tag and commit hash - remove obsolete vendor-files/tools/package-data version ID + explicitly generate ctdb manpages, needed without "make dist"- Update to 4.6.2 + remove bso#12721 patches now upstream- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622). + x86-64 and aarch64- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).- Build and install the html man pages (bsc#1021907).- Fix CVE-2017-2619 regression with "follow symlinks = no"; (bso#12721).- Update to 4.6.1 + symlink race permits opening files outside share directory; CVE-2017-2619; (bso#12496); (bsc#1027147) + testparm checks for valid idmap parameters + add new krb client encryption types + support for printer driver upload from windows 10 + inherit owner = 'unix only' for improved quota support + improved CTDB event support + new primary group support for idmap_ad + idmap_hash deprecated + mvxattr added to recursively rename extended attributes- Remove chkconfig requirements for systemd systems- Don't call insserv if systemd is used- Fix check if we need to require insserv- async_req: make async_connect_send() "reentrant"; (bso#12105); (bsc#1024416).- Force usage of ncurses6-config thru NCURSES_CONFIG env var; (bsc#1023847).- add missing patch for libnss_wins segfault; (bsc#995730).- Fix vfs_ceph builds against recent Ceph versions; (bsc#1021933).- Document "winbind: ignore domains" parameter; (bsc#1019416).- Add base Samba dependency to samba-ceph package.- Update to 4.5.3 + Heap-based Buffer Overflow Remote Code Execution Vulnerability; CVE-2016-2123; (bso#12409); (bsc#1014437). + Don't send delegated credentials to all servers; CVE-2016-2125; (bso#12445); (bsc#1014441). + denial of service due to a client triggered crash in the winbindd parent process; CVE-2016-2126; (bso#12446); (bsc#1014442). - 4.5.1 and 4.5.2 updates + various streams vfs fixes + various printing fixes + ntlm_auth: do not map explicitly empty domain + various stability fixes in smbd + match file compression ReFS behavior- Add missing ldb module directory; (bnc#1012092).- s3/client: obey 'disable netbios' smb.conf param, don't connect via NBT port; (bsc#1009085); (bso#12418).- Include vfstest in samba-test; (bsc#1001203).- s3/winbindd: using default domain with user@domain.com format fails; (bsc#997833).- Fix segfault in libnss_wins; (bso#12277); (bso#12269); (bsc#995730).- Update to 4.5.0 + NTLM1 Authentication disabled by default + SMB2.1 leases enabled by default + Support for OFD locks + ctdb tool rewritten + Added shadow copy snapshot prefix parameter- Fix illegal memory access after memory has been deleted; (bso#11836); (bsc#975299).- Prevent core, make sure response->extra_data.data is always cleared out; (bsc#993692).- Don't package man pages for VFS modules that aren't built; (boo#993707).- Fix population of ctdb sysconfig after source merge; (bsc#981566).- Enable vfs_ceph builds for Factory (x86-64) + Package as samba-ceph to avoid Ceph dependency in base package.- Update to 4.4.5 + Prevent client-side SMB2 signing downgrade; CVE-2016-2119; (bso#11860); (bsc#986869).- Remove obsolete syslog.target; (bsc#983938).- Honor smb.conf socket options in winbind; (bsc#975131).- Don't use htons() with IP_PROTO_RAW; (bso#11705); (bsc#969522).- Update to 4.4.4 + SMB3 multichannel: Add implementation of missing channel sequence number verification; (bso#11809). + smbd:close: Only remove kernel share modes if they had been taken at open; (bso#11919). + notifyd: Prevent NULL deref segfault in notifyd_peer_destructor; (bso#11930). + s3:rpcclient: Make '--pw-nt-hash' option work; (bso#10796). + Fix case sensitivity issues over SMB2 or above; (bso#11438). + s3:smbd: Fix anonymous authentication if signing is mandatory. (bso#11910) + Fix NTLM Authentication issue with squid; (bso#11914). + pdb: Fix segfault in pdb_ldap for missing gecos; (bso#11530). + Fix memory leak in share mode locking; (bso#11934).- Update to 4.4.3 + Various post-badlock regressions; (bso#11841); (bso#11850); (bso#11858); (bso#11870); (bso#11872). + Only allow idmap_hash for default idmap config (bso#11786). + smbd: Avoid large reads beyond EOF; (bso#11878). + vfs_acl_common: Avoid setting POSIX ACLs if "ignore system acls" is set; (bso#11806). + libads: Record session expiry for spnego sasl binds; (bso#11852).- Fix NTLMSSP regressions caused by previous CVE fixes; (bso#11849); (bsc#975962); (bsc#979268), (bsc#977669).- Revert shared library packaging to comply with SLPP- Update to 4.4.2 + A man-in-the-middle can downgrade NTLMSSP authentication; CVE-2016-2110; (bso#11688); (bsc#973031). + Domain controller netlogon member computer can be spoofed; CVE-2016-2111; (bso#11749); (bsc#973032). + LDAP conenctions vulnerable to downgrade and MITM attack; CVE-2016-2112; (bso#11644); (bsc#973033). + TLS certificate validation missing; CVE-2016-2113; (bso#11752); (bsc#973034). + Named pipe IPC vulnerable to MITM attacks; CVE-2016-2115; (bso#11756); (bsc#973036). + "Badlock" DCERPC impersonation of authenticated account possible; CVE-2016-2118; (bso#11804); (bsc#971965). + DCERPC server and client vulnerable to DOS and MITM attacks; CVE-2015-5370; (bso#11344); (bsc#936862).- Fix samba.tests.messaging test and prevent potential tdb corruption by removing obsolete now invalid tdb_close call; (bsc#974629).- Obsolete libsmbclient from libsmbclient0 while not providing it; (bsc#972197).- Update to 4.4.0. + Read of uninitialized memory DNS TXT handling; (bso#11128); (bso#11686); CVE-2016-0771. + Getting and setting Windows ACLs on symlinks can change permissions on link target; (bso#11648); CVE-2015-7560. + Sockets with htons(IPPROTO_RAW); (bso#11705); CVE-2015-8543. + s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystem with no ACL support; (bso#10489). + docs: Add example for domain logins to smbspool man page; (bso#11643). + smbd: Show correct disk size for different quota and dfree block sizes; (bso#11681). + docs: Add smbspool_krb5_wrapper manpage; (bso#11690). + winbindd: Return trust parameters when listing trusts; (bso#11691). + ctdb: Do not provide a useless pkgconfig file for ctdb; (bso#11696). + Crypto.Cipher.ARC4 is not available on some platforms, fallback to M2Crypto.RC4.RC4 then; (bso#11699). + s3:utils/smbget: Set default blocksize; (bso#11700). + Streamline 'smbget' options with the rest of the Samba utils; (bso#11700). + s3:clispnego: Fix confusing warning in spnego_gen_krb5_wrap(); (bso#11702). + s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703). + loadparm: Fix memory leak issue; (bso#11708). + lib/tsocket: Work around sockets not supporting FIONREAD; (bso#11714). + s3:vfs:glusterfs: Fix build after quota changes; (bso#11715). + ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ..."; (bso#11719). + lib:socket: Fix CID 1350010: Integer OVERFLOW_BEFORE_WIDEN; (bso#11723). + smbd: Fix CID 1351215 Improper use of negative value; (bso#11724). + smbd: Fix CID 1351216 Dereference null return value; (bso#11725). + s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new file; (bso#11727). + docs: Add manpage for cifsdd; (bso#11730). + param: Fix str_list_v3 to accept ; again; (bso#11732). + lib/socket: Fix improper use of default interface speed; (bso#11734). + lib:socket: Fix CID 1350009: Fix illegal memory accesses (BUFFER_SIZE_WARNING); (bso#11735). + libcli: Fix debug message, print sid string for new_ace trustee; (bso#11738). + Fix installation path of Samba helper binaries; (bso#11739). + Fix memory leak in loadparm; (bso#11740). + tevent: version 0.9.28: Fix memory leak when old signal action restored; (bso#11742). + smbd: Ignore SVHDX create context; (bso#11753). + Fix net join; (bso#11755). + s3:libads: setup the msDS-SupportedEncryptionTypes attribute on ldap_add; (bso#11755). + passdb: Add linefeed to debug message; (bso#11763). + s3:utils/smbget: Fix option parsing; (bso#11767). + libnet: Make Kerberos domain join site-aware; (bso#11769). + Reset TCP Connections during IP failover; (bso#11770). + ldb: Version 1.1.26; (bso#11772). + s3:smbd: Add negprot remote arch detection for OSX; (bso#11773). + vfs_glusterfs: Fix use after free in AIO callback; (bso#11774). + mkdir can return ACCESS_DENIED incorrectly on create race; (bso#11780). + "trustdom_list_done: Got invalid trustdom response" message should be avoided; (bso#11782). + Mismatch between local and remote attribute ids lets replication fail with custom schema; (bso#11783). + Quota is not supported on Solaris 10; (bso#11788). + Talloc: Version 2.1.6; (bso#11789). + smbd: Enable multi-channel if 'server multi channel support = yes' in the config; (bso#11796). + build: Fix build when '--without-quota' specified; (bso#11798). + lib/socket/interfaces: Fix some uninitialied bytes; (bso#11802). + Access based share enum: handle permission set in configuration files; (bso#8093). + See also WHATSNEW.txt from the samba-doc package.- Update to 4.3.6. + Getting and setting Windows ACLs on symlinks can change permissions on link target; CVE-2015-7560; (bso#11648); (bsc#968222). + Fix Out-of-bounds read in internal DNS server; CVE-2016-0771; (bso#11128); (bso#11686); (bsc#968223).- Upgrade on-disk FSRVP server state to new version; (bsc#924519).- Only obsolete but do not provide gplv2/3 package names; (bsc#968973).- Relocate existing lock files to /var/lib/samba/lock; (bsc#968963).- Obsolete no longer existing samba-32bit package; (bsc#967625).- Update to 4.3.5. + s3:utils/smbget: Fix recursive download; (bso#6482). + s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystemi with no ACL support; (bso#10489). + s3:smbd/oplock: Obey kernel oplock setting when releasing oplocks; (bso#11400). + vfs_shadow_copy2: Fix case where snapshots are outside the share; (bso#11580). + smbclient: Query disk usage relative to current directory; (bso#11662). + winbindd: Handle expired sessions correctly; (bso#11670). + smbd: Show correct disk size for different quota and dfree block sizes; (bso#11681). + smbcacls: Fix uninitialized variable; (bso#11682). + s3:smbd: Ignore initial allocation size for directory creation; (bso#11684). + s3-client: Add a KRB5 wrapper for smbspool; (bso#11690). + s3-parm: Clean up defaults when removing global parameters; (bso#11693). + Use M2Crypto.RC4.RC4 on platforms without Crypto.Cipher.ARC4; (bso#11699). + s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703). + ctdb: Remove error messages after kernel security update; CVE-2015-8543; (bso#11705). + loadparm: Fix memory leak issue; (bso#11708). + lib/tsocket: Work around sockets not supporting FIONREAD; (bso#11714). + ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ..."; (bso#11719). + s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new file; (bso#11727). + param: Fix str_list_v3 to accept ";" again; (bso#11732).- Shift samba-client sysconfig data into samba and samba-winbind; (bsc#947361).- Simplify shared library packaging; (bsc#966956).- Enable clustering (CTDB) support; (bsc#966271).- s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703); (bsc#964023).- Add quotes around path of update-apparmor-samba-profile; (bnc#962177).- Remove autoconf build-time requirement.- Update to 4.3.4. + vfs_fruit: Enable POSIX directory rename semantics; (bso#11065). + Crash: Bad talloc magic value - access after free; (bso#11394). + Copying files with vfs_fruit fails when using vfs_streams_xattr without stream prefix and type suffix; (bso#11466). + samba-tool: Fix uncaught exception if no fSMORoleOwner attribute is given; (bso#11613). + Fix a typo in the smb.conf manpage, explanation of idmap config; (bso#11619). + Correctly initialize the list head when keeping a list of primary followed by DFS connections; (bso#11624). + Reduce the memory footprint of empty string options; (bso#11625). + lib/async_req: Do not install async_connect_send_test; (bso#11639). + Fix typos in man vfs_gpfs; (bso#11641). + Make "hide dot files" option work with "store dos attributes = yes"; (bso#11645). + Fix a corner case of the symlink verification; (bso#11647); (bnc#960249). + Do not disable "store dos attributes" on-the-fly; (bso#11649). + Update lastLogon and lastLogonTimestamp; (bso#11659).- Prevent access denied if the share path is "/"; (bso#11647); (bnc#960249).- Update to 4.3.3. + Malicious request can cause Samba LDAP server to hang, spinning using CPU; CVE-2015-3223; (bso#11325); (bnc#958581). + Remote read memory exploit in LDB; CVE-2015-5330; (bso#11599); (bnc#958586). + Insufficient symlink verification (file access outside the share); CVE-2015-5252; (bso#11395); (bnc#958582). + No man in the middle protection when forcing smb encryption on the client side; CVE-2015-5296; (bso#11536); (bnc#958584). + Currently the snapshot browsing is not secure thru windows previous version (shadow_copy2); CVE-2015-5299; (bso#11529); (bnc#958583). + Fix Microsoft MS15-096 to prevent machine accounts from being changed into user accounts; CVE-2015-8467; (bso#11552); (bnc#958585).- Update to 4.3.2. + vfs_gpfs: Re-enable share modes; (bso#11243). + dcerpc.idl: Accept invalid dcerpc_bind_nak pdus; (bso#11327). + s3-smbd: Fix old DOS client doing wildcard delete - gives an attribute type of zero; (bso#11452). + Add libreplace dependency to texpect, fixes a linking error on Solaris; (bso#11511). + s4: Fix linking of 'smbtorture' on Solaris; (bso#11512). + s4:lib/messaging: Use correct path for names.tdb; (bso#11562). + Fix segfault of 'net ads (join|leave) -S INVALID' with nss_wins; (bso#11563). + async_req: Fix non-blocking connect(); (bso#11564). + auth: gensec: Fix a memory leak; (bso#11565). + lib: util: Make non-critical message a warning; (bso#11566). + Fix winbindd crashes with samlogon for trusted domain user; (bso#11569); (bnc#949022). + smbd: Send SMB2 oplock breaks unencrypted; (bso#11570). + ctdb: Open the RO tracking db with perms 0600 instead of 0000; (bso#11577). + s3:smb2_server: Make the logic of SMB2_CANCEL DLIST_REMOVE() clearer; (bso#11581). + s3-smbd: Fix use after issue in smbd_smb2_request_dispatch(); (bso#11581). + manpage: Correct small typo error; (bso#11584). + s3: smbd: If EAs are turned off on a share don't allow an SMB2 create containing them; (bso#11589). + Backport some valgrind fixes from upstream master; (bso#11597). + auth: Consistent handling of well-known alias as primary gid; (bso#11608). + winbind: Fix crash on invalid idmap configs; (bso#11612). + s3: smbd: have_file_open_below() fails to enumerate open files below an open directory handle; (bso#11615). + Changing log level of two entries to DBG_NOTICE; (bso#9912).- Ensure samlogon fallback requests are rerouted after kerberos failure; (bnc#953382); (bnc#953972).- Ensure to link with --as-needed flag by removing SUSE_ASNEEDED=0. - Always use the default optimization even on pre-9.2 systems.- Remove redundant configure options while adding with-relro.- Relocate the lockdir to the /var/lib/samba/lock directory.- Cleanup and enhance the pidl sub package.- Require renamed python-ldb-devel and python-talloc-devel at build-time. - Requires python-ldb and python-talloc from the python subpackage.- Update to 4.3.1. + s3: smbd: Fix our access-based enumeration on "hide unreadable" to match Windows; (bso#10252). + nss_winbind: Fix hang on Solaris on big groups; (bso#10365). + smbd: Fix file name buflen and padding in notify repsonse; (bso#10634). + kerberos: Make sure we only use prompter type when available; winbind: Fix 100% loop; (bso#11038). + source3/lib/msghdr.c: Fix compiling error on Solaris; (bso#11053). + s3:ctdbd_conn: make sure we destroy tevent_fd before closing the socket; (bso#11316). + s3: smbd: Fix mkdir race condition; (bso#11486). + pam_winbind: Fix a segfault if initialization fails; (bso#11502). + s3: dfs: Fix a crash when the dfs targets are disabled; (bso#11509). + s4:lib/messaging: Use 'msg.lock' and 'msg.sock' for messaging related subdirs; (bso#11515). + s3: smbd: Fix opening/creating :stream files on the root share directory; (bso#11522). + lib/param: Fix hiding of FLAG_SYNONYM values; (bso#11526). + net: Fix a crash with 'net ads keytab create'; (bso#11528). + s3: smbd: Fix a crash in unix_convert(); (bso#11535). + s3: smbd: Fix NULL pointer bug introduced by previous 'raw' stream fix (bso#11522); (bso#11535). + vfs_fruit: Return value of ad_pack in vfs_fruit.c; (bso#11543). + vfs_commit: set the fd on open before calling SMB_VFS_FSTAT; (bso#11547). + s3:locking: Initialize lease pointer in share_mode_traverse_fn(); (bso#11549). + s3:smbstatus: Add stream name to share_entry_forall(); (bso#11550). + s3:lib: Validate domain name in lookup_wellknown_name(); (bso#11555). + s3: lsa: lookup_name() logic for unqualified (no DOMAIN component) names is incorrect; (bso#11555).- Fix 100% CPU in winbindd when logging in with "user must change password on next logon"; (bso#11038).- Relocate the tmpfiles.d directory to the client package; (bnc#947552).- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf instead; (bnc#942716).- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).- Package /var/lib/samba/msg with 0755 permissions; (bso#11515); (bnc#945502).- Require to install libfam0-gamin from samba-libs on post-12.1 and pre-13.15 systems; (bnc#945013).- Update to 4.3.0. + Samba "map to guest = Bad uid" doesn't work; (bso#9862). + revert LDAP extended rule 1.2.840.113556.1.4.1941 LDAP_MATCHING_RULE_IN_CHAIN changes; (bso#10493). + No objectClass found in replPropertyMetaData on ordinary objects (non-deleted); (bso#10973). + Stream names with colon don't work with fruit:encoding = native; (bso#11278). + NetApp joined to a Samba/ADDC cannot resolve SIDs; (bso#11291). + tevent_fd needs to be destroyed before closing the fd; (bso#11316). + "force group" with local group not working; (bso#11320). + strsep is not available on Solaris; (bso#11359). + smbtorture does not build when configured --with-system-mitkrb5; (bso#11411). + Build with GPFS support is broken; (bso#11421). + Build broken with --disable-python; (bso#11424). + net share allowedusers crashes; (bso#11426). + nmbd incorrectly matches netbios names as own name; (bso#11427). + Python bindings don't check integer types; (bso#11429). + Python bindings don't check array sizes; (bso#11430). + CTDB's eventscript error handling is broken; (bso#11431). + Fix crash in nested ctdb banning; (bso#11432). + Cannot build ctdbpmda; (bso#11434). + samba-tool uncaught exception error; (bso#11436). + Crash in notify_remove caused by change notify = no; (bso#11444). + Poor SMB3 encryption performance with AES-GCM; (bso#11451). + Poor SMB3 encryption performance with AES-GCM (part1); (bso#11451). + fix recursion problem in rep_strtoll in lib/replace/replace.c; (bso#11455). + --bundled-libraries=!ldb,!pyldb,!pyldb-util doesn't disable ldb build and install; (bso#11458). + xid2sid gives inconsistent results; (bso#11464). + ctdb: Fix the build on FreeBSD 10.1; (bso#11465). + Handling of 0 byte resource fork stream; (bso#11467). + AD samr GetGroupsForUser fails for users with "()" in their name; (bso#11488).- Configure with --bundled-libraries=NONE; (bso#11458).- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).- Remove libiniparser-devel build-time requirement.- Update to 4.2.3. + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780). + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924). + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991). + Logon via MS Remote Desktop hangs; (bso#11061). + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068). + tevent: Add a note to tevent_add_fd(); (bso#11141). + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170). + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217). + smbd: Fix a use-after-free; (bso#11218); (bnc#919309). + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces; (bso#11245). + s3:smb2: Add padding to last command in compound requests; (bso#11277). + Add IPv6 support to ADS client side LDAP connects; (bso#11281). + Add IPv6 support for determining FQDN during ADS join; (bso#11282). + s3: IPv6 enabled DNS connections for ADS client; (bso#11283). + Fix invalid write in ctdb_lock_context_destructor; (bso#11293). + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295). + vfs_fruit: Add option "veto_appledouble"; (bso#11305). + tstream: Make socketpair nonblocking; (bso#11312). + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313). + Group creation: Add msSFU30Name only when --nis-domain was given; (bso#11315). + tevent_fd needs to be destroyed before closing the fd; (bso#11316). + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared"; (bso#11319). + smbd/trans2: Add a useful diagnostic for files with bad encoding; (bso#11323). + Change sharesec output back to previous format; (bso#11324). + Robust mutex support broken in 1.3.5; (bso#11326). + Kerberos auth info3 should contain resource group ids available from pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info exists in PAC; (bso#11328); (bnc#912457). + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329). + tevent: Fix CID 1035381 Unchecked return value; (bso#11330). + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331). + s3: smbd: Use separate flag to track become_root()/unbecome_root() state; (bso#11339). + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342). + pidl: Make the compilation of PIDL producing the same results if the content hasn't change; (bso#11356). + winbindd: Disconnect child process if request is cancelled at main process; (bso#11358). + vfs_fruit: Check offset and length for AFP_AfpInfo read requests; (bso#11363). + docs: Overhaul the description of "smb encrypt" to include SMB3 encryption; (bso#11366). + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server(); (bso#11367). + ncacn_http: Fix GNUism; (bso#11371).- Disable rpath usage; (bnc#902421).- Make the winbind package depend on the matching libwbclient version and vice versa; (bnc#936909).- Backport changes to use resource group sids obtained from pac logon_info; (bso#11328); (bnc#912457).- Order winbind.service Before and Want nss-user-lookup target.- Remove fam-devel build-time dependency for post-6 RHEL systems.- Update to 4.2.2. + s3:smbXsrv: refactor duplicate code into smbXsrv_session_clear_and_logoff(); (bso#11182). + gencache: don't fail gencache_stabilize if there were records to delete; (bso#11260). + s3: libsmbclient: After getting attribute server, ensure main srv pointer is still valid; (bso#11186). + s4: rpc: Refactor dcesrv_alter() function into setup and send steps; (bso#11236). + s3: smbd: Incorrect file size returned in the response of "FILE_SUPERSEDE Create"; (bso#11240). + Mangled names do not work with acl_xattr; (bso#11249). + nmbd rewrites browse.dat when not required; (bso#11254). + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff; (bso#11213). + s3:smbd: Add missing tevent_req_nterror; (bso#11224). + vfs: kernel_flock and named streams; (bso#11243). + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244). + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses are used; (bso#11284). + ctdb: check for talloc_asprintf() failure; (bso#11201). + spoolss: purge the printer name cache on name change; (bso#11210); (bnc#901813). + CTDB statd-callout does not scale; (bso#11204). + vfs_fruit: also map characters below 0x20; (bso#11221). + ctdb: Coverity fix for CID 1291643; (bso#11201). + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225). + Fix terminate connection behavior for asynchronous endpoint with PUSH notification flavors; (bso#11226). + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007). + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201). + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the directory is deleted; (bso#11257). + s3:winbindd: make sure we remove pending io requests before closing client sockets; (bso#11141); (bnc#931854). + Fix panic triggered by smbd_smb2_request_notify_done() -> smbXsrv_session_find_channel() in smbd; (bso#11182). + 'sharesec' output no longer matches input format; (bso#11237). + waf: Fix systemd detection; (bso#11200). + CTDB: Fix portability issues; (bso#11202). + CTDB: Fix some IPv6-related issues; (bso#11203). + CTDB statd-callout does not scale; (bso#11204). + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you enter invalid values; (bso#11234). + libads: record service ticket endtime for sealed ldap connections; (bso#11267). + lib/util: Include DEBUG macro in internal header files before samba_util.h; (bso#11033).- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).- Remove the independently built libraries ldb, talloc, tdn, and tevent and the post-10.3 renamed libsmbclient from baselibs.conf.- Drop redundant doc attribute from man pages.- Update to 4.2.1. + s3:winbind:grent: Don't stop group enumeration when a group has no gid; (bso#8905). + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791). + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with servers that don't send the 2 unused fields; (bso#10016). + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476). + waf: Fix the build on openbsd; (bso#10476). + s3: client: "client use spnego principal = yes" code checks wrong name; (bso#10888). + spoolss: Retrieve published printer GUID if not in registry; (bso#11018). + s3: lib: libsmbclient: If reusing a server struct, check every cli->timout miliseconds if it's still valid before use; (bso#11079). + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125). + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135). + replace: Remove superfluous check for gcrypt header; (bso#11135). + Backport subunit changes; (bso#11137). + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with implementation; (bso#11140). + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143). + talloc: Version 2.1.2; (bso#11144). + Update libwbclient version to 0.12; (bso#11149). + brlock: Use 0 instead of empty initializer list; (bso#11153). + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164). + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169); (bnc#913304). + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev fails in the SMB1 case; (bso#11173). + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174). + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175). + s3: libsmbclient: Add missing talloc stackframe; (bso#11177). + s4-process_model: Do not close random fds while forking; (bso#11180). + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).- Prevent samba package updates from disabling samba kerberos printing.- Add sparse file support for samba; (fate#318424).- Purge printer name cache on spoolss SetPrinter change; (bso#11210); (bnc#901813).- Correctly retain errno from Btrfs snapshot ioctls; (bnc#923374).- Simplify libxslt build requirement and README.SUSE install. - Remove no longer required cleanup steps while populating the build root.- Remove deprecated base_rid example from idmap_rid manpage; (bso#11169); (bnc#913304).- Update to 4.2.0. + smbd: Stop using vfs_Chdir after SMB_VFS_DISCONNECT; (bso#1115). + pam_winbind: fix warn_pwd_expire implementation; (bso#9056). + nsswitch: Fix soname of linux nss_*.so.2 modules; (bso#9299). + Make 'profiles' work again; (bso#9629). + s3:smb2_server: protect against integer wrap with "smb2 max credits = 65535"; (bso#9702). + Make validate_ldb of String(Generalized-Time) accept millisecond format ".000Z"; (bso#9810). + Use -R linker flag on Solaris, not -rpath; (bso#10112). + vfs: Add glusterfs manpage; (bso#10240). + Make 'smbclient' use cached creds; (bso#10279). + pdb: Fix build issues with shared modules; (bso#10355). + s4-dns: Add support for BIND 9.10; (bso#10620). + idmap: Return the correct id type to *id_to_sid methods; (bso#10720). + printing/cups: Pack requested-attributes with IPP_TAG_KEYWORD; (bso#10808). + Don't build vfs_snapper on FreeBSD; (bso#10834). + nss_winbind: Add getgroupmembership for FreeBSD; (bso#10835). + idmap_rfc2307: Fix a crash after connection problem to DC; (bso#10837). + s3: smb2cli: query info return length check was reversed; (bso#10848). + s3: lib, s3: modules: Fix compilation on Solaris; (bso#10849). + lib: uid_wrapper: Fix setgroups and syscall detection on a system without native uid_wrapper library; (bso#10851). + winbind3: Fix pwent variable substitution; (bso#10852). + Improve samba-regedit; (bso#10859). + registry: Don't leave dangling transactions; (bso#10860). + Fix build of socket_wrapper on systems without SO_PROTOCOL; (bso#10861). + build: Do not install 'texpect' binary anymore; (bso#10862). + Fix testparm to show hidden share defaults; (bso#10864). + libcli/smb: Fix smb2cli_validate_negotiate_info with min=PROTOCOL_NT1 max=PROTOCOL_SMB2_02; (bso#10866). + Integrate CTDB into top-level Samba build; (bso#10892). + samba-tool group add: Add option '--nis-domain' and '--gid'; (bso#10895). + s3-nmbd: Fix netbios name truncation; (bso#10896). + spoolss: Fix handling of bad EnumJobs levels; (bso#10898). + Fix smbclient loops doing a directory listing against Mac OS X 10 server with a non-wildcard path; (bso#10904). + Fix print job enumeration; (bso#10905); (bnc#898031). + samba-tool: Create NIS enabled users and unixHomeDirectory attribute; (bso#10909). + Add support for SMB2 leases; (bso#10911). + btrfs: Don't leak opened directory handle; (bso#10918). + s3: nmbd: Ensure NetBIOS names are only 15 characters stored; (bso#10920). + s3:smbd: Fix file corruption using "write cache size != 0"; (bso#10921). + pdb_tdb: Fix a TALLOC/SAFE_FREE mixup; (bso#10932). + s3-keytab: fix keytab array NULL termination; (bso#10933). + s3:passdb: fix logic in pdb_set_pw_history(); (bso#10940). + Cleanup add_string_to_array and usage; (bso#10942). + dbwrap_ctdb: Pass on mutex flags to tdb_open; (bso#10942). + Fix RootDSE search with extended dn control; (bso#10949). + Fix 'samba-tool dns serverinfo ' for IPv6; (bso#10952). + libcli/smb: only force signing of smb2 session setups when binding a new session; (bso#10958). + s3-smbclient: Return success if we listed the shares; (bso#10960). + s3-smbstatus: Fix exit code of profile output; (bso#10961). + socket_wrapper: Add missing prototype check for eventfd; (bso#10965). + libcli: SMB2: Pure SMB2-only negprot fix to make us behave as a Windows client does; (bso#10966). + vfs_streams_xattr: Check stream type; (bso#10971). + s3: smbd: Fix *allocate* calls to follow POSIX error return convention; (bso#10982). + vfs_fruit: Add support for AAPL; (bso#10983). + Fix spoolss IDL response marshalling when returning error without clearing info; (bso#10984). + dsdb-samldb: Check for extended access rights before we allow changes to userAccountControl; (bso#10993); CVE-2014-8143; (boo#914279). + Fix IPv6 support in CTDB; (bso#10996). + ctdb-daemon: Use correct tdb flags when enabling robust mutex support; (bso#11000). + vfs_streams_xattr: Add missing call to SMB_VFS_NEXT_CONNECT; (bso#11005). + s3-util: Fix authentication with long hostnames; (bso#11008). + ctdb-build: Fix build without xsltproc; (bso#11014). + packaging: Include CTDB man pages in the tarball; (bso#11014). + pdb_get_trusteddom_pw() fails with non valid UTF16 random passwords; (bso#11016). + Make Sharepoint search show user documents; (bso#11022). + nss_wrapper: check for nss.h; (bso#11026). + Enable mutexes in gencache_notrans.tdb; (bso#11032). + tdb_wrap: Make mutexes easier to use; (bso#11032). + lib/util: Avoid collision which alread defined consumer DEBUG macro; (bso#11033). + winbind: Retry after SESSION_EXPIRED error in ping-dc; (bso#11034). + s3-libads: Fix a possible segfault in kerberos_fetch_pac(); (bso#11037). + vfs_fruit: Fix base_fsp name conversion; (bso#11039). + vfs_fruit: mmap under FreeBSD needs PROT_READ; (bso#11040). + Fix authentication using Kerberos (not AD); (bso#11044). + net: Fix sam addgroupmem; (bso#11051). + vfs_snapper: Correctly handles multi-byte DBus strings; (bso#11055); (bnc#913238). + cli_connect_nb_send: Don't segfault on host == NULL; (bso#11058). + utils: Fix 'net time' segfault; (bso#11058). + libsmb: Provide authinfo domain for encrypted session referrals; (bso#11059). + s3-pam_smbpass: Fix memory leak in pam_sm_authenticate(); (bso#11066). + vfs_glusterfs: Add comments to the pipe(2) code; (bso#11069). + vfs/glusterfs: Change xattr key to match gluster key; (bso#11069). + vfs_glusterfs: Implement AIO support; (bso#11069). + s3-vfs: Fix developer build of vfs_ceph module; (bso#11070). + s3: netlogon: Ensure we don't call talloc_free on an uninitialized pointer; (bso#11077); CVE-2015-0240; (bnc#917376). + vfs: Add a brief vfs_ceph manpage; (bso#11088). + s3: smbclient: Allinfo leaves the file handle open; (bso#11094). + Fix Win8.1 Credentials Manager issue after KB2992611 on Samba domain; (bso#11097). + debug: Set close-on-exec for the main log file FD; (bso#11100). + s3: smbd: leases - losen paranoia check. Stat opens can grant leases; (bso#11102). + s3: smbd: SMB2 close. If a file has delete on close, store the return info before deleting; (bso#11104). + doc:man:vfs_glusterfs: improve the configuration section; (bso#11117). + snprintf: Try to support %j; (bso#11119). + ctdb-io: Do not use sys_write to write to client sockets; (bso#11124). + doc-xml: Add 'sharesec' reference to 'access based share enum'; (bso#11127).- Update to 4.2.0rc5. + Ensure we don't call talloc_free on an uninitialized pointer; CVE-2015-0240; (bso#11077); (bnc#917376).- Fix usage of freed memory on server exit; (bso#11218); (bnc#919309).- Fix tdb_store_flag_to_ntdb() gcc5 build failure.- Fix vfs_snapper DBus string handling; (bso#11055); (bnc#913238).- Update to 4.1.16. + dsdb-samldb: Check for extended access rights before we allow changes to userAccountControl; (bso#10993); CVE-2014-8143; (boo#914279).- Adjust baselibs.conf due to libpdb0 package rename to libsamba-passdb0.- Fix libsmbclient DFS referral handling. + Reuse connections derived from DFS referrals; (bso#10123); (fate#316512). + Set domain/workgroup based on authentication callback value; (bso#11059).- Update to 4.2.0rc4. - Add libsamba-debug, libsocket-blocking, libsamba-cluster-support, and libhttp to the libs package; (boo#913547). - Rename libpdb packages to libsamba-passdb. - Drop libsmbsharemodes packages.- Enable avahi support on post-12.2 systems.- Update to 4.1.15. + pam_winbind: Fix warn_pwd_expire implementation; (bso#9056). + nsswitch: Fix soname of linux nss_*.so.2 modules; (bso#9299). + Fix profiles tool; (bso#9629). + s3-lib: Do not require a password with --use-ccache; (bso#10279). + s4:dsdb/rootdse: Expand extended dn values with the AS_SYSTEM control; (bso#10949). + s4-rpc: dnsserver: Fix enumeration of IPv4 and IPv6 addresses; (bso#10952). + s3:smb2_server: Allow reauthentication without signing; (bso#10958). + s3-smbclient: Return success if we listed the shares; (bso#10960). + s3-smbstatus: Fix exit code of profile output; (bso#10961). + libcli: SMB2: Pure SMB2-only negprot fix to make us behave as a Windows client does; (bso#10966). + s3: smbd/modules: Fix *allocate* calls to follow POSIX error return convention; (bso#10982). + Fix 'domain join' by adding 'drsuapi.DsBindInfoFallBack' attribute 'supported_extensions'; (bso#11006). + idl:drsuapi: Manage all possible lengths of drsuapi_DsBindInfo; (bso#11006). + winbind: Retry LogonControl RPC in ping-dc after session expiration; (bso#11034).- yast2-samba-client should be able to specify osName and osVer on AD domain join; (bnc#873922).- Lookup FSRVP share snums at runtime rather than storing them persistently; (bnc#908627).- Specify soft dependency for network-online.target in Winbind systemd service file; (bnc#889175).- Fix spoolss error response marshalling; (bso#10984).- Update to 4.1.14. + pidl/wscript: Remove --with-perl-* options; revert buildtools/wafadmin/ Tools/perl.py back to upstream state; (bso#10472). + s4-dns: Add support for BIND 9.10; (bso#10620). + nmbd fails to accept "--piddir" option; (bso#10711). + nss_winbind: Add getgroupmembership for FreeBSD; (bso#10835). + S3: source3/smbd/process.c::srv_send_smb() returns true on the error path; (bso#10880). + vfs_glusterfs: Remove "integer fd" code and store the glfs pointers; (bso#10889). + s3-nmbd: Fix netbios name truncation; (bso#10896). + spoolss: Fix handling of bad EnumJobs levels; (bso#10898). + s3: libsmbclient-smb2. MacOSX 10 SMB2 server doesn't set STATUS_NO_MORE_FILES when handed a non-wildcard path; (bso#10904). + spoolss: Fix jobid in level 3 EnumJobs response; (bso#10905). + s3: nmbd: Ensure NetBIOS names are only 15 characters stored; (bso#10920). + s3:smbd: Fix file corruption using "write cache size != 0"; (bso#10921). + pdb_tdb: Fix a TALLOC/SAFE_FREE mixup; (bso#10932). + s3-keytab: Fix keytab array NULL termination; (bso#10933). + Cleanup add_string_to_array and usage; (bso#10942).- Remove and cleanup shares and registry state associated with externally deleted snaphots exposed as shadow copies; (bnc#876312).- Use the upstream tar ball, as signature verification is now able to handle compressed archives.- Fix leak when closing file descriptor returned from dirfd; (bso#10918).- Fix spoolss EnumJobs and GetJob responses; (bso#10905); (bnc#898031). + Fix handling of bad EnumJobs levels; (bso#10898).- Remove dependency on gpg-offline as signature checking is implemented in the source validator.- Update to 4.1.13. + s3-libnet: Add libnet_join_get_machine_spns(); (bso#9984). + s3-libnet: Make sure we do not overwrite precreated SPNs; (bso#9984). + s3-libads: Add all machine account principals to the keytab; (bso#9985). + s3: winbindd: Old NT Domain code sets struct winbind_domain->alt_name to be NULL. Ensure this is safe with modern AD-DCs; (bso#10717). + Fix unstrcpy; (bso#10735). + pthreadpool: Slightly serialize jobs; (bso#10779). + s3: smbd: streams - Ensure share mode validation ignores internal opens (op_mid == 0); (bso#10797). + s3: smbd:open_file: Open logic fix; Use a more natural check; (bso#10809). + vfs_media_harmony: Fix a crash bug; (bso#10813). + docs: Mention incompatibility between kernel oplocks and streams_xattr; (bso#10814). + nmbd: Send waiting status to systemd; (bso#10816). + libcli: Fix a segfault calling smbXcli_req_set_pending() on NULL; (bso#10817). + nsswitch: Skip groups we were not able to map; (bso#10824). + s3-winbindd: Use correct realm for trusted domains in idmap child; (bso#10826). + s3: nmbd: Ensure the main nmbd process doesn't create zombies; (bso#10830). + s3: lib: Signal handling - ensure smbrun and change password code save and restore existing SIGCHLD handlers; (bso#10831). + idmap_rfc2307: Fix a crash after connection problem to DC; (bso#10837). + s3-winbindd: Do not use domain SID from LookupSids for Sids2UnixIDs call; (bso#10838). + s3: smb2cli: Query info return length check was reversed; (bso#10848). + registry: Don't leave dangling transactions; (bso#10860).- Update to 4.2.0rc2./bin/shlibdcerpc-binding0-32bitlibdcerpc0-32bitlibndr-krb5pac0-32bitlibndr-nbt0-32bitlibndr-standard0-32bitlibndr0-32bitlibndr1-32bitlibndr2-32bitlibnetapi0-32bitlibsamba-credentials0-32bitlibsamba-credentials1-32bitlibsamba-errors0-32bitlibsamba-hostconfig0-32bitlibsamba-passdb0-32bitlibsamba-util0-32bitlibsamdb0-32bitlibsmbclient0-32bitlibsmbconf0-32bitlibsmbldap0-32bitlibsmbldap2-32bitlibtevent-util0-32bitlibwbclient0-32bit  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvw4.19.8+git.368.51d32c069f4.19.8+git.368.51d32c069f4.19.8+git.368.51d32c069f4.19.8+git.368.51d32c069f4.19.8+git.368.51d32c069f4.19.8+git.368.51d32c069f4.19.8+git.368.51d32c069f4.19.8+git.368.51d32c069f4.19.8+git.368.51d32c069f4.19.8+git.368.51d32c069f4.19.8+git.368.51d32c069f4.19.8+git.368.51d32c069f4.19.8+git.368.51d32c069f4.19.8+git.368.51d32c069f4.19.8+git.368.51d32c069f4.19.8+git.368.51d32c069f4.19.8+git.368.51d32c069f4.19.8+git.368.51d32c069f4.19.8+git.368.51d32c069f-150600.3.6.114.19.8+git.368.51d32c069f-150600.3.6.114.19.8+git.368.51d32c069f4.19.8+git.368.51d32c069f4.19.8+git.368.51d32c069f4.19.8+git.368.51d32c069f4.19.8+git.368.51d32c069f4.19.8+git.368.51d32c069f4.19.8+git.368.51d32c069f4.19.8+git.368.51d32c069f4.19.8+git.368.51d32c069f4.19.8+git.368.51d32c069f4.19.8+git.368.51d32c069f4.19.8+git.368.51d32c069f4.19.8+git.368.51d32c069f4.19.8+git.368.51d32c069f4.19.8+git.368.51d32c069f4.19.8+git.368.51d32c069f4.19.8+git.368.51d32c069f4.19.8+git.368.51d32c069f4.19.8+git.368.51d32c069f4.19.8+git.368.51d32c069f4.19.8+git.368.51d32c069f4.19.8+git.368.51d32c069flibdcerpc-binding.so.0libdcerpc-binding.so.0.0.1libdcerpc-server-core.so.0libdcerpc-server-core.so.0.0.1libdcerpc.so.0libdcerpc.so.0.0.1libndr-krb5pac.so.0libndr-krb5pac.so.0.0.1libndr-nbt.so.0libndr-nbt.so.0.0.1libndr-standard.so.0libndr-standard.so.0.0.1libndr.so.3libndr.so.3.0.1libnetapi.so.1libnetapi.so.1.0.0libsamba-credentials.so.1libsamba-credentials.so.1.0.0libsamba-errors.so.1libsamba-errors.so.1.0.0libsamba-hostconfig.so.0libsamba-hostconfig.so.0.0.1libsamba-passdb.so.0libsamba-passdb.so.0.28.0libsamba-util.so.0libsamba-util.so.0.0.1libsamdb.so.0libsamdb.so.0.0.1libsmbclient.so.0libsmbclient.so.0.7.0libsmbconf.so.0libsmbconf.so.0.0.1libsmbldap.so.2libsmbldap.so.2.1.0libtevent-util.so.0libtevent-util.so.0.0.1libwbclient.so.0libwbclient.so.0.16sambalibCHARSET3-samba4.solibMESSAGING-SEND-samba4.solibMESSAGING-samba4.solibaddns-samba4.solibads-samba4.solibasn1util-samba4.solibauth-samba4.solibauthkrb5-samba4.solibcli-cldap-samba4.solibcli-ldap-common-samba4.solibcli-ldap-samba4.solibcli-nbt-samba4.solibcli-smb-common-samba4.solibcli-spoolss-samba4.solibcliauth-samba4.solibclidns-samba4.solibcluster-samba4.solibcmdline-contexts-samba4.solibcmdline-samba4.solibcommon-auth-samba4.solibdbwrap-samba4.solibdcerpc-pkt-auth-samba4.solibdcerpc-samba-samba4.solibdcerpc-samba4.solibevents-samba4.solibflag-mapping-samba4.solibgenrand-samba4.solibgensec-samba4.solibgpo-samba4.solibgse-samba4.solibhttp-samba4.solibinterfaces-samba4.solibiov-buf-samba4.solibkrb5samba-samba4.solibldbsamba-samba4.soliblibcli-lsa3-samba4.soliblibcli-netlogon3-samba4.soliblibsmb-samba4.solibmessages-dgm-samba4.solibmessages-util-samba4.solibmscat-samba4.solibmsghdr-samba4.solibmsrpc3-samba4.solibndr-samba-samba4.solibndr-samba4.solibnet-keytab-samba4.solibnetif-samba4.solibnpa-tstream-samba4.solibprinting-migrate-samba4.solibregistry-samba4.solibreplace-samba4.solibsamba-cluster-support-samba4.solibsamba-debug-samba4.solibsamba-modules-samba4.solibsamba-security-samba4.solibsamba-sockets-samba4.solibsamba3-util-samba4.solibsamdb-common-samba4.solibsecrets3-samba4.solibserver-id-db-samba4.solibserver-role-samba4.solibsmb-transport-samba4.solibsmbclient-raw-samba4.solibsmbd-base-samba4.solibsmbd-shim-samba4.solibsmbldaphelper-samba4.solibsocket-blocking-samba4.solibstable-sort-samba4.solibsys-rw-samba4.solibtalloc-report-printf-samba4.solibtdb-wrap-samba4.solibtime-basic-samba4.solibtrusts-util-samba4.solibutil-reg-samba4.solibutil-setid-samba4.solibutil-tdb-samba4.sopdbldapsam.sosmbpasswd.sotdbsam.so/usr/lib//usr/lib/samba//usr/lib/samba/pdb/-fomit-frame-pointer -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:35710/SUSE_SLE-15-SP6_Update/fd6a16112c77dce8d78e7ff93aabbd9b-samba.SUSE_SLE-15-SP6_Updatedrpmxz5x86_64-suse-linux  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=79ce5b5c628d9ec2489c1e4ba8012bbec3633a30, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=1040ec7959cd8fc1dff0942e59613fcfbdde4251, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=b0136983973045257b1e11bd370e44a03067da18, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=46bb40eaab881ab42d576a32f4f8d2b433bfce08, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=2d166b999bebfa142b7a4a8275bab24bc433b849, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=adc281246accf68bcc0e9194aa296293595099e0, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=02b26d24c8a96194ff6834351fa2cbeb412b2abb, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=fb5d358e73729abbf3edf70de924532a9fd8c404, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=30f727419df035d39d100e6dd1da373285ece8e9, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=d33bb100e3200ae62fd202325f817e1c708b6092, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=3e835fad7b17d4fd666cc9aad301563c81a7ba61, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=1596eb100e42d543ad0bd351f83e291345aaf27e, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=8fd51a66aaa14cf7c5bbc3adf812215b93254c6c, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=20fcbc21128dfa172f481799e6aa34a86fa4b484, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=ba5cd7f1f64f1f9448e1da833b1e750546fe5db5, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=07209027b1f62ed3136ec2674892d80b4d70cb35, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=aaeaee356d4ed187d3c03a92253bda73b5d90eea, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=17fb2ed52a6055f686833b3a0105eeb69f59d853, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=c8ce6a9749b0e60564eaf9ee28078c2e295e60f8, strippeddirectoryELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=32ebfff511f8f4efa4b437892110285344bb49f0, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=2ef8c4dbde7dbaa76a15056ac738f570e8a5bab9, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=d5d41141702da79c69b2c92692536d29f86f7f7d, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=034ca460e8c99f32df2c4015a9904954cc2120c4, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=3342f47687747df6aa7f2071cb0cfc4b59cdce9b, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=84d2eb520d111d9a252469e700ea4c8e94c5e1c1, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=30dcf025e9b553d01f97ab8db224e5bdcb2c0c03, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=e79d8335d5e31f03f48f6e5e8e6de622e7379588, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=9a5077e1130a788bdd1e0aa889419d6cf437ebc2, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=9d4125ea4c5aa69f125917ea7bb81c51fbee54f9, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=b14638caadc555a6e7af1ded42a57591f6dddf09, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=47fbba90ba60806f2013282ba311dc05f2bc12c4, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=b56348ded7ec67634ea15462d14f210a901a627b, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=baf6e1156b230c6b33b577c27022564960610a15, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=16bc48ad95f461e53c23194385ba668b4c28ebe9, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=259c2f8908593b6e125445a4103dfb26a4f4f67f, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=17a7545d050702c59726c0a7ac54d06d029e9035, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=7534d68ac052a129db2a1fe1ff4dfa6adf066da3, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=d5acd03d4c93392d09c96588f70ff4069c4386b3, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=a8d5b2a2ca0f3247f3402c4a781d9ae17d2a6c7a, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=68a08a6c5ccb5685bb81f1798096f2897a50f2df, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=e619949642f34e65643ed0e2e7773606f04fed3d, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=86fcf7db14ddadc9b48a8e3e350517009c28696b, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=0832c1057494ffe48882ba99906f31669b209ba7, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=aa814ac0e0739dd0c1877821b4c052fa3b0d6a2b, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=caebb41151bac996e8ad8393478f9f6d30870aa3, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=8202f3b5b062e8246fdcb4703edc2a06d416e143, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=f0d181b21ebffd4df157a4d9dbf261833d8a7898, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=74b23bf446602d85df591aed8093dd5d1ad91f15, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=3c1bc3b0fb9ed37096a95734794dc8d80d8010e0, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=d24ce0401d5ab447635bef2864eab424c8b95db3, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=51a09cab8a2936d575a39ba21fceb65a391a77e7, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=06a5be9e41d036ae46eab38b24bd9b639bfd2882, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=3eeb2d732e75633dc5a88bb87433d80e432c1c28, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=6390a636f74540403470f8d2e2ada1ed4c5f2a07, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=572128af5846bfe281db310257353a218bbfc0b2, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=f7dd32888ee656d9bc4d18db6f550286711ebd5a, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=6f63af13c1ccce607c37c5a3c312f904ba465fff, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=64c1b6c2f64b0f21bf7874ff2a88a7e80982d22d, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=134561b30ef0263e7f931271cc694ec9a173991f, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=bc912f67e42ff80a774e756a1b5d0bd37ab9867b, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=d66629d4f51ed272654bc09c406a6a396d878203, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=293edd4134cf4253f7848f4edf248e210c1917c6, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=8043ac31d6c4d3056cfd9d4e146a23c16c7df2d6, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=5a3033821a0bfac021141af16248c5674c891cb1, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=af18f2bf24bafbc464b1ff789d450e0473438793, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=99adc154dc2e1c362a963b79949e52f93ef6a345, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=14779d05c03ba4c0147c00c3e72301540deb41f6, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=510cdd0e66eb92bb2bd8692a5cd793117c508ba9, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=71d9ef38770a456a1c46121be4056b15649946cf, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=3d83cc4f1765d90be5be943b719db9ec826a75ce, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=676a7192ad9953ae670b3be5915108c0593e3d6d, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=bd3c2b42409fe38b3b0d5c97aff1edbe44004a09, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=bdad3bacc9bdbf86ec8865e83f670cb218d49840, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=37c5907c52b8875cbb0f759d3ad09423281830d0, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=3327afe21cd256db690b185b264bb49707c82277, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=60996550ea99d2ec489c65968ebc3a092a2fab0c, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=977043b1c268ba799c4a8fdccf7f125bfdeebb5d, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=e62badda8b844cedb74587f5c13b13f7b3fb3fb5, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=763750fe48963e6ebf5879822c92d7739db419e6, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=e34d459b64b199482ce76d26aca9eddc3c94f538, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=628f92c79a71a6be4312c8046fade4be809573a9, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=aa1b2295eda64e284cd666062ac16d619f46c90d, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=d7b655eb990f43779528f6989344d11c7592ab6f, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=49f23ad7a6fc779810adf66aa627ea5363bd3f19, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=dff1e5667e2c25866333bfb1fbd28b717532d3aa, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=23b2b0494c24bbebf32ccfec3f4e7f3f3e205c14, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=72ddec730a4e7070ee7f2b7403ef5aefd5ba54d9, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=dbbbd2a6a60c16b09b4c6b263b48121d86326e67, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=f76becfe8a463a3485d95aebb176b129fd1e54e6, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=9de7aa9e2922cb45c582a9c4db31dea22a74b184, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=2207cc2e9f3699d3eda10ad5b95eccab138d5caf, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=40ef95f711340f79c2dc91dba35f62f1734e8bea, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=22625fe059c1082421677ae13b65102039fc1f32, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=b0739754d333cea95938019e756cf76f07ade685, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=3bec19ba0b815f6e5aed820825d080e8a060ae6f, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=171201ab68dfde10d8cf483094a80c8e68f98b9a, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=d27bf0b42ba1851eccb1db47c8c9c093f3c46078, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=1b0fff0abd8f66a4db632d856695a9a7430bfbc0, stripped$NW#W ,=XfzdGh#9LTZi0?F^#);B  7 b i  - Y j p ; @ \ a h q z $*C9E2 I*4Nh+"AK*&3,!&  <+@ 1!;%I##+!5,0   & P+P*RRRRRRRRRRSRRR(R-R,R0RRRRRRRRRRRRRRRRRRRP4P3RRRKRURRRRRRR+R(R-RRRRRSRIRRRRRRRJRHRRRRTRRRRRRRRRRP6P5RSRR>RKRRRR2R6RRRRRRR:RRRRRMRR`RRRRRRRURR,R0R-RRRIRRJRHRRRRR9RRRR=RRRR_RTRLRR1RRRRRR5RRRP_P^RRRRR-RR(RRRRRRRRRRRRRRRRRRRPbPaRRR(R-R%RRRRRRRRRRRRRPiPhRRRR-RRRRRRRRRRRRRRRRRRPlPmPmPnPnPoPoPpPpPqPqPrPrPsPsPtPtPuPuPvPvPwPwPxPxPyPyPzPzP{P{P|P|P}P}P~P~PPkRSRRRR0RR-RR(RRRRRRRRRRPPRQR:RSRWRYRRRRRR R>RRRRR\R}RRRRRR,R(R-RRRRRRRRRR{RMRR|RRRR RRRRLRRRR=RzRRPRR~RRR[RRRRRR9RRVRPPRRRWRRGRRRSRRyRRR^RnRRRR>RjRR,R-R(RRRhRRRxRFRRRRiRRRRR=RRRRgRCRR]RVRmRPPRRRRR-R(RRRPPRRRRRRRRSRWRRR-R,R%R(RRRRRRRRRRRVRPPPPPPPPPPPPPPPPPRSRRRRRRRRRRRR>RRRRRGRRR0R,R-R(RRRRRRRRRRRRR=RRRRFRRRRRRRRRRRRRRRRPPRRRRRRRRSRRRRRWRRR-R$R,R R%R0R*R&RR+R(R)RRRRRRRRRRVRRRRPPRRBR^RGRSRRR>RRRR(R-RRR4RjRRRnRRRRhRRRyRRRxRRRiRRRRRR3R=RFRRRRARgRR]RmRRPPPPPPPPPPPPPPPPPPPPPPPPPRMRSRRRRRRRRRRR:RR\RRRRR0R-R(R,RRRRRRR{RR~RzRRRRRRR[R9RLRRRRRRRRRRRRPPRR RRRRRRRRRRRRRRRRRRRSRR RRRRRRRRRRRRdRRRRRbRRGRRRR+RR!R'R-R$R,R R0R%R*R"R(R.RRRRRRRRR RRRRFRRRRRRRcRRRaRRRRRRRRRRRRR RRlRRRRkRRPPPPPPPRRRRRRRRRSRR-RRRRRRRRRRlRkRRRPPRRRRR,RR-RR(RRRRRRPPPPPPPPPPPPPPPRR$R&RR-R*R+R(R,RRRPPRRRR-RRRSRRRRRRPPRRRR RRRRR-RSRRRRRRR RRPPRRRRRIRRRRRRRRSRRRRRRRR-RRRRRRRRRRRHRRRRRRRRRRPPR^RSRRR@RRRRRRRRRRR(R-R%RRRRR?RRRRRRRRR]RP PRSR4RRRRRRR RRR RhRRRR2RjRRURRRRRR\RR0R-R,RRR(RR1R~RRRRRRiR RRRR3RR[RTRRRRRRRRRlRgRCRRkRP P RRRR%RR-RRSRRRRRRRRP P RRRR}R\RRRURRRER{RRRRRRRRRRSRRR>RRRRRRR,RR-R%RRRRRRR|RRDR=RzRRRRRRRRRRRTRRRRRR[RRRRRRRRRRRPPRfRRRRRRRjRRSRERRR^RRRhRR-RRWRRDRRiRRRRRRRRRgReRCRRR]RVRPPRRnRRRRRRRRRRRRR4RRRRR-RRRRRRRRRRR3RRmRRRPPRRR-RRRRnRRRRRRRRRRRRRRRmRPPRnRRRRRRRR R8RRURRRRR4RRRRRRR-R,R+RRRR RR7RRTRR3RRRRRRRRRRRRmRPPRRRRRRRRRRRR,R-RRRRRRRRRRRRPPRRRRRRRURRXRWRRSRRRRRRdRRRRR-R(RRRRRRTRRcRRRRRRRRRRVRPPRRRRRRRRRRURR-RR,RRRMRRTRLRRRRRRRRRRRPPRRRRRRRWRRRRSRRRGR,RR(R-RRRRRRFRRRRRRRRRRRRVRPPRRSRRRRRRRRRR-RRRRRRRRRRRRRP!P RGRRRR-RRRRFRRP#P"RRRRRRRP%P$RRRRRRRRSRR+RR-R(RRRRRRRRRRRRP'P&RRRRRRRRRRRR(R-RRRRRRRRRRRRP)P(RRRRRR*RR-RRRRRRRRRRSRRRRRRRRRRRRRP.P-RR-RRRIRRURRTRHRRRRP0P/RRR-RRRRRRRIRRRRHRRRRRRP2P1RRRR-RRRRRRIRRRHRRRRP9P8RRRRRRP;P:RRRRP=PRRRSRRRRRRRERRR^R>RRRRRRRRWRR(R-RRRjRRRRRRRRRRRRRRRRR=RRDRiRRRRRCRRR]RVRRPAP@RRRR\RRRRRRRRR RRRRR,R-R R*R(RRRRRRR RRRRRR~RR[R RRRPCPBRRR8RRRRRRRRRRjRR^RRRRSR2RR RRURRR-R R,RR0R(RRhRRRRRiR RRRRTRR1RRRRRRRRRR7RlRgRCRRR]RPEPDRURRR@RRRRRRRRRRR-R,RRRTR?RRRRRRRRRRPGPFRRR,R%RRR-RRRRRRPIPHRRRRRPKPJRRRRSRRfRR-R(RRhR^RRRRRRR]RgReRCRPMPLRRRRRRRRRSRRRRRsRrRuRwRoRtRnRRRR0RR-R,R%R(RRRRRRRRRRRRRRRRRRmRPOPNRR-RRRRRRMRRRLRRRRRRPQPPRSRR:RRRRRR>RRRR-RRRRRRRR=RRRRRRRRR9RRPSPRRSRjRWRR>RRRRRRRRRR\RR:RURR,R-RRRRRRRRRRRRRR[RiRR9RRRTRR=RRRRRRRRRRRCRRRVRPUPTRRSRRRRRRdRRRRRR R$R+R)R,RR-RR&RR(RRRRRRRRcRRRRPWPVRRRRPYPXRRRRWRRR-R*RRRRRRRVRP[PZRdRRRcRP]P\RSRERRR\RRRRRRRRRRR:RMRRRRRRRRRRRUR,R-R(RRRR>RGRIRRRRRHR~RFRRR[RRRRR=RRRRRTRLRRRR9RRRRRRRDRRRPePdRRR-R,R0RRRRRRRRRRRRRRRRRRRRRRPgPfRRR(R-RRRRRRRRRRRRRRRRRRRRRRRRRRRRRPPRR\RRRR-RRjRRRSRhRiRRR[RRRRRRgRCRPPRRR,RR-RRRRRbRaRRRRRRPPRRRRRRRRRRSRRRR-RRRRRRRRRRRRRRPPRRRRRRRRURRWRRRRRSRRRR:RR,R-R(RRRRRRRRRRRR9RRRTRRR=RRRRRVRRPPRRR RERR{RR>RRRURMRjRRRZRWRRRSRRRRRR\RRRRRRRRRRRRRRRSRRRRR(R,R-R0RRRRRR=RRRRRRRRRRRRlRkRRSRRRRRRRRRR,R-R$R*R%RR(RRRRRRRRRRRRRRRRRRRRRRRRSRRRGR,RR-R0RRRFRRRRRRRRRRRRRutf-8f1c89e2b44cefceef0f3106665ec73a684d98aec45deee015d30d6ce2fb3ed59?7zXZ !t/,]"k&Vhv,y4e ݹՌ?&qBSV.Z(?&Zua^OS YIJR~OxaD6r &j;ElVt|WJ"\,]UH\!|{@Bޟht |!qFtrfPُ#Br[%{i D1f >5{yP[|KJ" ~ӽ62IY@&&<ot?J8aZ[cJz'V/VKZbь.,ԙAk.uӒVS 5žD?79=t_NQnMe=k`0dOQP `Qx0 Q}<1Ɗ'27ʟE=:#tĆƢ zE|u]yO@nrSjCˉVO^ s>vXb7fHcH|̞% {%]\KZX;]lqj;CE@ZO7HIm,=K%Pf#dז'),AlJPרxB^pQkm{R0[u!%pO@'hi5d#M52jP9Ϥi,a,0MMЌM7;*Bk =(jQ'G sP,bEg1K##$;䌞 P 9Zq,L Ǵ=@\¾z0f9֧["QrGwZ6}+u e⿒8|6 l@@(ڍDŽ ҈7KyzU·T 3͋E@;w9Y,F1 !I{@#Qހ%aԐ\oũ]0hf-o.eO#H{q q'|?(|(j چ[H=)} Op0{ؘk)/~\|9oMV(äDTݯ%:''{~`rb~l0o6 t8nkJ.;v#|0di8׸&zjDPfio-N1*&. `[h/T"&CyMLp}\ ޼S|)&n 12L).E4 + oBbMt~7b m@+լWRnL(2^Z=P ⍣)Du}}6?' Uj׬T3?ZUxwh5"=z}1NrVv 5%+T.&(( o(< E5zl$r]JdV#Sz}vx)AQ3Ju2_L6u4T\æ`jl0q&zG5]OUi mu,*ˢ&@m~.?=8^#RiFcHlêO<$D"mSRŅ8ؕjQN}gk.{4i {xX%#k;yl%A'̆s- 41Di8QX)$ Һٕo}mU1J":~-抇a ~ɨ!edڪu,##ȎZ~yDoU-Qo9_S?\51tDi ~=,_hSbK8! cG;^3Gz,{dTTɈE>0i1y>Wꔿ׮ ))wP|G3SZ E8}A:~~lk.}N:|jjVa>܃O6>k{R[}{.+T)3UK&'pU6͝!JFAO^(3( -1"ki ܣHއჾ܍N )H'TNxik%Qؠ6qh*ړn562 ˑB;܎@Ms y"7o;Hjm?&a2d|(kY[iKGr^҃*la$ftw J}xYPZc # q , /8&`&EyNNdDgqg1!u$qw#Ex7 ﰻe[T,Yyx{ {.B "F{9P0 ? s[6 ~P􂆺|&]˰Ȯ=PfbR*H3XoO.T VG'ȏ-}Mo $Ht8uEgKc2hb.s azH6ҾbwS_pOkhp8(Yar^+!G-S"mxQ#;1+aAzp&x&*򨕦V:7fߪ\eX_#pB~B/Ga5Ac?gC`!$ XU`hCIQ9a>:MŴx#LsW׹_w STOJ-38d | LudUkMˣoUY#gx|؂gHiYTW!B|Kl@psxW"#\%)-8_jc)%ZH+Nts8rXB7iC .-qK^(%}z>wniXʊ+cjuErB"gG)B~Bzh,YZGwWB`qصYdXЛS#)٠0BcM hrhӬ9$& 5yc%"U +/ G#R>i8?2H43Q*yK.짲.QHxc1z‰\Oȃ m@R v?p#}I W71AuXȦM{=dx(9Qvi(\eTxj0/MDJ[^6Zhhq7) o2ʼnLJ;4T$^F7AW~yq1wxCHOk,ZGs`co4~9zvQͷYZ= (p~1 XԽۏX48#ƚ'^ߤ-FR=v!iV=w 9J_Ϊt2┠WT9ac.[0<}1EjV\ٴ*g'K`Cb{y(I` )~UlԖ;OT&kcӵ t™/HUiU&bů6g~RrYeOM|_[I'$% fOKKW',zR19ʉ^0_fV$-ł/>ϕ4҄1}`tpm`Hs8 ԭ<ҭ1+0KY Kp'nW=J/oHL yfƙ׮GaT<[!E8rxn7 Q8 &β,&A= HNT%\xa۩16&gaZѐsGw1-9!wt7Ѧ8اhrԍY_/&³mD VC玱iQ3"[}uL4]`̽ۅˢH? M~a> ! Ez=̒Gcb,rK͢Hp3z*_6 /KSPj >'i̥ UHctY35n vsFZ49RoNU/|mӻgRb-N_RY]aaC fKϪ#<Ƒ&-D/2;[iT}QeXBBh ;1!ۘ,ϒ4a"jwZ<7׻!rl?:L˜QY {'u!{ =RN)#,bE Ukh67&z\#NrmO@KYp`r0 5+58+Pbg}ǫMӲf5˺ @;`qRBN7$<$7$Lt%n@߀]h /Qn-,WFQb 5v]iQL|H<T6eҚ- rJ&Öվ]=8tMܺA,΍Z̆vi s4rZ;b]'hgwVߐّj*R~C,wIRV5,w؂ۂ5~ݛE1bťtN3OC=j6MNk}ePYմ\1Ruϡ@8ŴBGWr\&v@YhC%O۫׃0wF$'x4E|?G"QU$XI1/k}3h F~z%GBv"MB܃"'%| )Tȝ,#"# Ic *N9|:IvhcOhD#oˏ:M/47A#\E] Ʌw i5ƧOTS8SND0F2hlYC‘o̾7b/=Ќ/J<#m:Qxi7a8ZSٿHB~RFLez xC"6S݋ybJb%Rg4T(znjodGh{G-/T,h|*9-Gmԭ<>B0H>eYfڂp b =4]Ŏَ޻4$\X}Д @X(ܙ 1v,g]ц51x.Kb8K 8^Fd2B)jMD "`g =rV3օErdQ;Bv% {0hATbR.Dhy q==Ѻ&E.. k^ЅWT :6PN|ehZo$7fPDMGm*.ި ̠ \_&Bki+¡t;2&7c$%h]Gk7O=,3.~Sq[| eWVXUᰌᄧWE)gbS2~&: f_YB,$jMWH+P5'bHrc*!RĸhH4fۂ&7A~-6oDzd^oFan Q!DoJD+;Mo.2W1N΅O:z#$@&9xbff"/N:2шJ dZY̥RG/ۑ_O]Q(vww'l"+$w?2Р#Z*p:UfL|C yMF M&OA}…9RX]x فB" (xjDpa~sۻaD>oAR}+;t*;ږSs]kKP`?SR52DX:d|RS[\"ThXlT oW'^46bgūBG z3HWs[F?eW1qNc0EzԲJ*̡%a r"șb8|4u4=r򤷞ɪ8J" Rh Z?*b]Ō^Nz*Ol/|̣ͭ`|G:7rejuLܾ05.LCaV{/\n.M)/]иIOԺD7h QYxŋTԾ@5~Ǒ|!\W -FχQE)Q*@OWwyy%I8Uq9ڌJdqgB9줝ڂ2xT:F\>y`TV)^}va06? &r)ǝbá _`2g7F8FnYw9~Q^$P5T?Ԝ߮N3)pεy F):` !}];kژ L:f)ܓ `̦/u:L^1+͊N~B;^VGόϮ'}Y\ҪV5N+:Za!lhppڅn\tƱI cfgFDb& _űǢѠ;8~*ʵE*gcʩxnI5b/HE®|6JN[„ʥ;6+k*w՛b6Jtp_HhC,[I;r%G*, 9k2l(q ܰ!(bE *Us] <σ pɔUz8_%ږ/J' 5+X5?t禎a^VJ8՜^~kEE@S_tkLB2TX҈ .7<%o~a  .joʜo2'-%QpvplI/\!|jutwV5S287%ReYI&v>{I(ZG/ci :ꉇY{tAlx 0ȱyVuāx[{lHZ%^ե\Rob^[czOуu[`+P !Eli^?X0CWeJ? d#8`+f6x0dEkX%`vmma/@[7: pi`ACΠbԨlZB4r l|e4V9 T2Kqcq0 O+ ;,'83M~(ȌpZF:55+AذY kMsq67ړQP)pjxL$> ^cGLV۱Ś~+ϔAV0M7Ox\`5 ,*Tw&ۜJSAAuX,Nm Qd_;7Ĭuﬗ}B6rDU K[Ņv',b:^Tx_B?i 28.h&_2AYfDݼh~ kff9AãLq&-GQzq?l|~*SoxY'KiڽkPnڣ&XG(P:K{hgXt^| ycK)={YZKuit'.D=2ή#8}AQ0a EosV)HxǨGe>Oq3Q*ﻸѵ!g-+vIK4Qa[&`!)w'!,)˘6h#Q53H[QqX ՠڢLSQ㝽%m1 TSȀ'jv\`A-^ Re#<+[+qoAa[Qr9sy$p͟$iby-Xc :x@K8WD0!+X0|=y<~ 9Ɣ>(ơ/84=l٨z7θkpd OXQ&=_W՛/hţyw"=ܟ%oDF;'C^TAš@ ԐQj%W 3ð$4x>&E}߶+<Ț.±-=ҽG9J"3u{ᗡXYbϫoXwcaj]`R; td/$w GI;Ab.5(^ >_ŶΧ b'UP66˘G#3݄׷sI}Ͻ=w*Ǹ`O^')4nZ*ȗV.]CjLdJOCk**.Ũ!h`o'=.vg1 4˚,WI [q} `0ntۖ5B҉e]AVL|9Sc6䄸MHpڶy6_C Z *~՝ '&iҞ]{ f5/fRbe KRh3Bh AXˏUh&k\HptP ̏@IQ_ե$paGڬ]% #lYi{y|24} Z CS vaa\idZ{$Gw;[3L?RyvY4C0{ma4p50ׂK|q^lҭ6a]E!(Y [Q?h{vX ͣcJI?g(AA si Ju*H! #<鴡8h};(9Sjr@umr  طIދmt!,Zވ&/ O55^fO/]$80gg|oRtwAG)U:Ɖ Gw4mW$ﮒP w{4T*0EzF c'e &!](=㴅n惀vK#Xo/azOWrcg3Ev1' D<'Tfg?8:v1*(E8ɽE'37cV3 Lk[e܀uGx٥(zc7fcpx>;}ev0D^_Z;ҵxk 2^*q Kf#]϶1ͤ^Fi>&>.&ʕ|xpUkӌ{&2 Nnhmxz74 Q{1"ߦGT?7)St18B_0lvSx[WTH6ǃq5xǵ nibW^l+dY-O?o]8+(\qކ/+|zqGvYI_mTkrCkOI]rU4{./i{Hlnj 3L"\rK~ֆš㐆u|Uŀ;^h7W|EM_>nLtmaX XO=D` q+K4tmß4/9{ 8$*|tlDi >C_O 뤄17&&:KeMxQVw-<<ޱruoz2'vNw8ɫQ#@׺P~)] sKXϞ7G\3!b &w'nj}܏GN .C4گ$tr5'~`ɰI~ڕ;_ǐmxE$Pxekq Ctydx}K~<#z<@R_a0zæ?uԸ$w,d&.,i.+Ʌu=1lO=XgwbT*B9q?{HCGQypx["ɼSqXDєUYwO2Sqg)]hZב]p[7^ospr,)u{9>W@E^JW0YXFs)\Ƃ\nӺÇevCyUl$|:D-"U8Tү{ik' i(47ՠऑfO臭Nw.! hˬ%JigqQlxS|%c@{/TgH |^FTe !ޑSP[)ZZCŇ#x+Ь[P\ SJO(vj.a#RdxE]y+6Ƞ.u]3'M-/"-(o¦0s1N< Ј$,Cǎc40]TCgm_"vslh[:V\#7 {5/Vt<8e;Xc jT~V8xg6@6]o"p!Ưa5l S){_*x H0^gP&'vJ|$c`'W{N, GƊ`!|@O{ b3S7[S qycI.ˀBIJ'($uw{8`6r ~V DCE&O ;,ߴں@B >o1ν ov%ͦ:8ѕ k?G:C;I+M dt<|)=*.Bu,00L+2p1tҽkARHӠ5VDv\ KƧiWW^ǢlЌ [<4Z ߱UPFe"^(jZ7iw@Vk:%.13b:%i_S<վ d4cb_y2 UGﬤ}RGjuwWW*df 3%h]P@" =cھ U=l6p:ZgX3rEn'ay񚫈ZssCD`}!>Ÿ(D}틒l'5Ƴ38J~B+SEUEg_ٜbe:=k~ɺ R:` uPAcZ~ch6]Y? ;^jRH|ynVj 8h@ #S,:'ヌA=X\/[W_l`7+I6I,z{qM'%{5w_07N9 A 6`^nZL3F(g.+$[ D9 6j< 2 \0 ؽk<&gzyPO$_taĈH&?}Arx*[|%8;Ă)CbV;Տ^p.!ۅwY c'U?蜱j^FٻZ vq5ک@^b~SxWVXP[eoNh73/-~yeԾ ͝l>\.9Ă)mN~K`> U T P2ჯ,MZ ]Bĩ2>&kw@BolpU9e9 *MQ/um+a K6P`f|*-ꀟoFkN[j5Χ^ň*W-p3JĐI.lK(2)AkB=v{xɬRBoX;jZG(¯zǙV>q\"q0y_L[iTN2)b'0‘wo^u$9@LDIG a@ff'ژ[f!Ď FĬЩ<"Ufyg57xXGuήt{d:&5hiH =ݓǟ.w;5y戏d ;3u'jޢW,`&eDq? -(̏L1g`y^ Brq2| 幆F|2" >Wt5,I*>.i|7K]~Z5`*9fh$d.=})vC tݚdfz߃ v3>[ќ%H\Et r?Z?jxߗn! R9&.m8@H{ż*m[U=e7]Z/-Buá2Zoa#10E)a(?`sU/b$GKh%ԋHrMFa{/~ODޝ86_s0QGlmŕ4km[0_}8N^;BuY!Zm1?dJ׀΃ڥ.uV<'VkilIL c&t^TK o68Gڀ*dL=F!{)'G- =QzJ(R$lzNZ.Qju$C;&T2w)[+"j )HΦ@JN^昫Xp. Y xF~)wi) sTCUs֙N ӕW|/ǀmG̃ٯoK˜z 9Lj2"N @[ͼl@5 ڢ$Lkd5N9z +Mcd5S.Zȟf4NkT[hƠ1O&df1Dk}tq|BOA:!U BbWͬ3a_V#S*Sv*gU?^HמP"ҥVuP?Ql'?β]$n=Rq|{TSp\82}r^ ۵NLY?`6E8hf . G$X[o̔.ra ̇Q#(GMD]Zvu64)9Va8, T@r ?Gf%߾l>ipʍWy"Qa!&{op&OlI# ܏L"1 4JhK6Н2R ӵmM⠈A4}&(1|? o8)樐HY1u-2^ihB.v5|WWyuN#h\Оo$, d}{3582勬bCfQf{2j"+dE' k,8m2d=p4_C"IjQyHu NUC̢rb5HEEdzɕ+ ԫ]su Ӽ ’wDSF"rU7em ²nöo,EL@ԜKX{Va#:6ΝP<sّSUp{Ceԋ[Qa3SݏT_M|r]GȕH,aj ϙeBQ8Pد! >3[LQ7"!8-D: ;{OlB| ~Qr OXxO`3\)ck]vW~[JM")>"2#,SJ&ެ[uQ8'wFфLdjb.\0z,e=f߮QO E?d a$ғf sd(ںwi\D~źcyݑ)0nN^1gpߍKt Å{Yx9, +GZ !.l%#DM ` d#-} |O(Pb0D=qՌ&|H/)x3Ky&⒘o BbC X$ 3*v*0>󙤗,3EA}>Rs۰Y.}%U mBLawh,1R dw 6-ږ-W}Bul_+p݂e}y0y#Av4D$4WvK̰}n>J7MQ {ۯ$U? MAm&Y" ͇$XxrXl0I2FQqZ.W%lPr51#Wls&8oj(lɈEyF=vLXNjG Ac|.j8.s,F}Snە YmY#ЕV8X{c(ZLCvfBZ^Jj2&m}/[.3hlRwLUB.HcHmfU$VyfgJ]cOB( @=0=͛ 9Ĉr|FFp?g QQ0n*Ft 'TߩJYR s߼HIfGC [yqP,&Qb|>~cX*pozV8-|"O;[52ݜ*[,nI[t&cb0V_obZ5KvnAV.n艭l&jdGgdjDh,Qr-eYP-`K"'KWM+cSXt:.IHt)D6[gWSuH$zbG4#B68}!4a|@󓳫=56DBoJCG}$u)[89Q؇;<@0CfU6BiڇuZ{WorMfF ]@\ƴ.\0QES-1gp*[Zut/M/Y`=`])Ue|gP\mT⋧ 1젿[4m5^PҫWe{""Q^bjߌ(GAF-eB+qsEr89:b̎㦿"z !{c}X*Ǝǝ+R1r9IRH`q>aԭFQEXG$񁷾ʞC s,v 9%KRe-+SG@F)pJC@_]Rc;O4ZW ҙps˫r O!Q4CRߛ]`߰L"5~7rxU!mP`mr AT YH.0K(OdlO0H*ԷE>zVI?mI  J<>G5ͬG=wf1%2]F]w#e 'B5^Eg{pN=xrfw4ޔ*E84?uY ie^aXYk f+\ <҃ˎxKg~mg2zP끥9i]"$yyB(_53ε}HcJ$E<"xP "r8>aSo]jbyq +kƤCiZL3&*=z)Hzj5޴~9,AxA1W/NHE5>hx!CZܕTeiKQ@?'@27-ɍ nm_hYX@?&X Eʋ8H ^\kAx{B1?KjjIc#wD@IcZߡ׹I]A\[Ev1rW<T,1D gM$ +Xt EF/FG*yMSԡ/^KDU]*4\ʥ`~hLaN.kJ>PIӐ~a!Oau_wTx8v+ DUj|W:) 1ET\&Z4 =Hs آ6RW о&+ܔތ&3 %^OiSg w(Ltt ncL ͞N&&]g@>$oSԭAzUWVAxvk0L8f7+]̗R)RAR9GBVdVhd%D*gR!Ըǖ!kL2JPo̖KM񟬌m}ҭlzC-Zt] LFoq@YʭmSK/F-0 5W7pn6tX/vG;ӷI!?V#c83RqK}+GAKxkUlGBG1/"pYV%ڡz|ĵ-R8yXcƯkMhrWIFgPabYtٲo <}P숂R=T(y4B1J1L>r,nu5]3|[: #iC.Y-R: a)LB@&`.1{v[]Vay"*YpG8C|:gzp*$ ;7{ԭd~-B|5es:OW83Z6s}a7.oY%m ur|/}EnNj*K]b5O#@J?H53gTۉ9ZHn5ռs]DNSވnADZ:Sb#n WGd݄צ2nÙgxg+t-iW{6d34XwYyo<>(BC TG6G_$>! ndE%@a}kծ`lח Mx_x^b5h}#HA~)acZ.,8Ϥ2SAFR\KȪt2{NhpHFyzbk()'O1oA0PtxkR5)Y̦z'(y,Br7kZ O7g:DK($8|2AnA^Sas0ݰ&\4!p{iF AJ Pf^ã]Snӏl0fk;BLs-wA:`np1 v)&~է'r'n”FQ9Y !?O|\҄$Xk8bfJEnFY7Wz(ʿ1ڪZf~Q,vWJ~+P_ů |׫d&k0Sї _FѤ:׳FS7n*8B5> +/3rM zrbbM+!Uya&;B^HǔZ|%> 7:GPu Ogc-{ ت[8;kfj Ib;MiB&) 5͛|7^=A'mBm/58Ig{4{-Frʗea<ù';hi^Z}l."P"j8;lZN|yS^(N#+j3iDd3uaZiprO(Rt –%V{_Mwe\ :%ho .3幎Kt<탖XwFHޏe@h2JCLхS~(끮茖!S2w5jz؋ώg&%2 D%Z<{Bxr=Rm,l7/c n&qEc$oqݑiV+%?g\ ^L]FDDGaȜ/%W-8]킇4%SBvh,*>Ƌq͑e6xIeޡVH>$t*rV!򼺑5l}K)K0E:y~!&GuY:#lJ(һ_"e=e5I9<9#ɚsbj Ly8[`Z[~C{-f+!F519v6:~&xeuRAc,qIHL ~Ry외*!HF̩,T| ?]: 'Po8#]adžz k&ݞO쬿N/Q/hcV`EBٻE;7:{^){E1)ȳUxͳzJj3_pIY0~8[iY fGR}gcвHI|o !c ϲ mF66_SZ-6w#"M`DwVE=‘NH} L=e8}2g#WY;ǂ]޼}^n%Bz%۲<jFv)YnzU-ńIomV"ixA7bCeKG̙a0Lz??m5|#~[q?4-&7a-s߭KU}7d Ѧ9_ڧ~Q"k몖rbzG鍷WW.@Pw Psz +sVD$h{iKTAWn) l2^d(̦?/lnN \C$!:n/e:C .c-y~̒~BQgw {yh?c}2}] @u8tM9 CR :ˌȽIDl*Ǻ:&"2~D $"+%R2Af}H6vUb6JxQvF'Y}䦚)8vHaSC Qa1PA$9NAnG.iQwZvҘdC0ϥltK? Ž;`7t"wMxO2nMኛ#a(Q"ܰ8=ܘ7c\yf}:edn9̢ZB8DZYt ~c6!$?';5`AT5ZMYtH `ⶰ*Q)0bosAa=b䬩{YzRG X[JiώthoO_(KXu ڼ482PrXASYsJ4:ɞ0q[GQ.v5j`^iiĥB>0d (mG0pVM6;KN6P-x(ٶzۋ4wAV ݺV$Da0$B=Au&k+k)nSB "]_W-~W4","o jtً@D_K_AT/C`gG pkVdju \ M'7np #~=2};]"hnq*J}^)>!.cWPqeFAd`xP}q*L '6RBCp _ԷƋMKhj1sBQT a (q[tѼYb ):{h8j$(Sd{-4˾1 .L7SY*6nTI?aij|]L _>.MeLeM({3/wuZ,y>S\)o} i_îf_iqe^[.י.=i$;="jTH:جkWUbL -²iS=.*3 d1Y/*uؘ?aM&c4hNt ajܧv , @5TnQC=Gɾe&mAd)caqq~Y:+wN{G>:wx6 UQit*O/+pղ;wR:QTG_pvj,L$j@ ]T3 bu?Gz1rC1nf7RoKevV,F.rKg6 'ӯ'UitueMRL|JRnLUIExT^OBRwثR7`8O'֤x$B3q9ʓ= ":(cw fskr<@(;B^sBR%mFW$!u])К=mOSv)8٨FR_ ba5Z}`' ܴ%^K O{9R!B$JkٜBWa?ʩ@"db ]Xru(PqSI+6 ,CHp`E, DEK+ %o1"cI1j=j~̏o t0v)~|cܽ2m޶y? jg"QqH< |LOWH"4бk<{!;|V=+gޑ,.Ѕw#˜Vņ //(.Mae`o1UeV=$[_a*ĦߩɝS{I6u4int>CfCv(XS:gÂm<{L`8Bqs=E&:/+/"4',:60w|`;kq%}E fzH S4T G~}u^q~&vdibmWg@Êc.uDg0\8Q5N hU&`5Aqr}xtpJQ=nrB*[%ULjrnl&b#+ttdj׊\2. |plS' 1&C_h7RHR)7(oL\:Iשm V=Kث̒VW(ϝ³bZ]63Ċ7\6Qr?m`eW4## FC 4}Zn6k=ƅl- TnႮ\!3)a PbCs-*Ft rTF/ȏ!J1>F.3NuR$?f!pz,xun~N&xb=Ǚɧ(up.5xFUiu OffoLBoȣ0PA,]-fuAA%Wæhvok;vj?/jYK6< Wl7f?^tv5mJܼE=Rvfh ԩc琽nAIz#b&2fSJmy:wWY<[_uRfn˼/s %ElM"[v3#l+n;;AuA+"יaR{YUρ]Fר,=[ɷ6nAE Aot2dk,Jq?D= qk44$d@2 )x>'{Gܽo>۟zI-@ s%akI'/hY:qPhZZzw}h-b4WV0{F[ֺXu`ZC ohd<'{XWwt` A>Ni7g(b6ΕɫB"u4G ;j)=d͏$0t*Sl_8polFO`:С$ҁ1zHBIA|@hpވWYUYWPKBU!$lw0OT& N{5UEq23Z -,l%W֘;(0oS>:  -4G@*č ˒OWvFԠIu2Vẘl%򠑤 .53hhhzo_0qsؒ}>cIp^&Ee\7Yogi%$'don]C;tʲu"(*-pdn< 6s7ӽ:?ǡGkݳ[&B?6ºLkca7^^י9 u#yT)#sD P1jF+&-?*K>.(oCf{;{In|UjUH{!0hB͒@u\F Ljm~ ɢN$5^ly{m@,rzH TUUȸt}S%\OfzωcԀhTKL!dԥf"HZ3sфdZb'ƀ ~vBLdd^hPhq_P#x7`FX{tvP0>s#.hn)h!^ ">4sXcZ+x8wN gPVXԠ}PIQ[&m/c!i$!D^FK|**1XӠ`<ܔj24 jiW1!2;r(ܣ~AY{9+~fUґ#O@ˊ"_f ׁ9Do5TpbEUzb)^r;[֙m\-j($ܱgHNP_x ъs.(CAZ Pݤ JK/yͦG!SԢE<'L 2(ވ@J;l_)gru>nsۏDzÃFƷ Z&iՁU+S1ߡ|ՙ*+R ^aq(G^Mbh :}sgVKQ+e5d8ۡ&&kRGz-A#˸V<w$b +/hrde&=+ LB,=Bn9?nȉi#FLÂ}|Sa~7MD_pDA[䧕-[|,~/CE$TCQ1n7 L$lKEh_gNYvF"ȍ7 l}v )wNAkxhJR!lB+-+\E^x(BV`%FF&{pRBi)K>/E;=6mx_aҤMz93" lapg tY8*l2i#R2MLBP`\Z($k5a WCAF &H~>! N炦:HHӮ1wOn@MMiF1>5s!klşM ](DҴ+L4;nnҪ47?vM"&xٱjG(ژ̀m('d􃋍C;}#^^<r/n>¢6f]xŁ߇oc DS!3gxjD\ol;혟O06PH(+sfV3joc. #26ddzUDWVg%A]f,;ܷa7S;70~[Dܽ;5cפm_R$dmT+L%Nh%nY{)l>qLATǗ?e'1g:vΤ.d/"vjs,?w:ŽgBŠOck%+nhF4;k>?߱ o!䱢,cNC^oےO=Q`ѯ\E+g0 QCU ~+ ӝb55o$rY/W2 Hʶi%}y_*4=jV%>@wuKo^ K'X@u8h`KFUnиDqY-Q2[cx5-n~b^l7E {\& lT%Y{ ]EP|]9t ȌE,]^/G>q㔄5ڸw5< 1m)<V}zٴ2IS1(E(It'.> hYY)}#7Fc _d|[_w9lA1 c< xn5^Fg1<>.ME@Jf"*f%dOhl')dig5+ qkvBoX2u6ր@]LҦ^((W5^މ~58S~»_a;, [ދ{G=Rz{cfyazP|74U|Db1YbjǷR#ňŪ* fhsK3Ks6wO{MPo ũDNl&eo@ 3mOx^7.ƪT'81L.< A量ѽ%ۃBkTJ]Ej qտ}5SqI]3o&߿Gو`OO==fI;Eo9qA2{Rƙ/HฯU*3}Wߊ6F)<؂mN4+2 pe%%sCP+RPx/3@B茙#N卨82QGZaO0 _0Vi`ϒgG$CXuNv9($'' ?,.\1|c,л3VaF%{4",.N ۅNл^.\Ժ+Ղ;K(y[x]H;1xTYh94}z?֬r{78vZ9gI:n%}Q~jѺ'ᦲ0?K\#B6o}F ` (&xX\QXvFX:w{"j6Iב>uB ]JO8\0dm򊐗/0Wڣ[ s_pIѺmPŖIDa)cHngˤΤQR'.[2/{= La ݑQˣ.Eg!\(=p:TH9O+!"Œn^ B)ᩂ OC eT' 2SZKW_ C:w8 S?l D+5Y܎XUJ eM czT4EO(!/% _{=P0Q4-ݍΠ>lB3{ BکxRw [J8E~`Ydf.uGlčBԄYcdr5zg{D0I 7^3ÌlA]I~pj>fa*+< ^^%aT٪6_6PREJ_35B+2bfk95S!⯽28a_wEfŕ•YbYAicP);ľ@Ukj?NU{?/H5dJ'Gner1V4[6EwFT:e\ݕ]ҽuKa藪}6!sJPz?;GKWx۳/dt -Bw9> /~@sV ecN|g#@[5H m˵ 2*'g@ '|eʪ"<rsLRi0f5]뫠+ /gR]i+0n1Mf7sোG2[)u#_:vz?_Ɓ[ܯ%ѨYx1u6͍ܸ6$bc)qv_$n@EWsCRf;Mikbt-F _(@{֩OC)e[9L+Ua "=c+qi@Y];9j:䄸A9˵C@@%DzI<'BV DP@I }_!|.D۱U+P PԒiSD>%;+uo/$5L} 9 =zZotL~׹V*+,U^-J$b\.XlpĔDl̩3󕅮S]"TrxA>,FqҦn% ͦԱ-dJ"zm Ksh_g0 p-R̚r^V{$uO\*DK#L9I!5GM`I,DUB CMl >;xR[7' m"EF5CuhBw>O𭷽Cj$<QOAnsv bgkk~)6UMR=iʏO.w̰j) }yAy :pQ?Mɹ?QgxYD~OT@ǃ5yx%]HU~]ѨM K /aB o]OZ4tO,bпygoh(,Ƿ{;j̝jXC+]ȿ9D%bCZS=^ͼ\ث(a| a G? ѩu]0 L:Ja{`0o87J:^FE8w۠6E`0] ,4Hw2ɚfvݡ\k~~2}T97{Zj}Eh-#ӎ .ڈJ'}3Mǝv4$==F1WtŠB8P|udYG',,Nc±bl8cvի CJyaÎq) yec׷^@+"4Ѻ" u'W^zU?eWQ6 \q`A&PQ]o*^b3E8ippЗ)'dLm#u_*Ҩh^;EX7UP⣫6tAT]6 ONO&?0H :~SSϏUHOk yﮯF<& w؍Gg}LW H6[,k؇ևňB4L,zN,ձ.k^+g߲XoH:CCW%.){T7g3%vAo] `>C_M ]lyZ bQ45b)(1Tu *ϣ SD*rByz{65/0s׍Dy2Iz?x&`嗊꫽POyr~0ͧ@Z7 uhfdׁt#q96bHKYcQzMw4dOX!3xCa/h(:l3ቔ .#vcK(evg7D N9uhr$`2t _CoX)KZq/ pKSRTCtYd@yt _:sXn2Y)!dBf߂cO郳+Epyj7ĢVGWq5wC,d@?o oc&OyOU5T w*L!Vmܸ) )Z$΍0Lq n_%VQ>@At^ޞ5/vXOW"gpѤR>~fXFj :Y4liP[\*2G,$4wP6 #G0Xu"[` S FXId7+MuYgF"+6!t3L>('bR*VOfXA;!׼- `W|w,(˩)ju, 9l^yg D[A6 *t>ڪ[Qz@%^.xHg>cFb_¼2"k.68(ֳ4 om'%qo&@]S"=`c (gjrP(5:pm6PLgVeqv~)O߻Eޥ%~q4Z<(z9oq'mD5N0 s) T0TGP^Xǟ)ϓ+ЄmD Iw,cD ]+ToV{.;1ԭ U`!7".nM]zE/~muTUO`WdLrr< V h5sCU:ջr# S/{3[$ń.@玿a*Wgk1;'ʠwu62c\LRAǺF>>M@v㪳ֽ8+^6pOd^.zk1;골+f 87CIDE-V< MuvGFR}Cӕz''oqG|`gaȦH n6G-y_\@#@ɠVRdU"/3MoBt㛏'Ks1QP0o 5_#szXKC'nb b֍?7n:8iҭX\FL(gl8ȼv&8kl) wTbT!w?ELBkAtQ| t5sٴ~>gSO].m%]-3zuva-(vzpU.p鞈n!Aזp]2_KqDp?/ٽpA{X0JNٿ٠r=*gIJKqboҧ`%;ػiu>MhTn*]ncao6 ԵNM㹕`Em1Gw%BQJAjXJmI.1Sj2yÍnTV-}6Jxߺ[{PCt_bZ^XŒakX((H '>dI!IHS+z?2U80;1-hFHȕk!Ʌ%`H^f - 0hTD(9Z+F2"B,i_|X7ќw<۹$_Gւivi#kb=8~fΕ"0}Ti{Cjeaoڗcmai^v6xm$L4A܈=]any^[bıގ=.do#=^xT0p3;M !DU2z2T Yx]K;!ƱuG.|Ɏ׃U2E2+hl:NZ$6H'>?vӛ֭(W=݀ZE3s_;uFgr`5)p;磹%8Ioz*[Ot̽b⧾ʈdO|Sk5~O$lXm,DNd#9#c9;l5f^9Ws[RDŽ aXdܗ݆2UƞiOHy)AFi~ Dh^ OcFjf$ Zq(mtJAo^Q&'6Dؐ+!n@Hx^mAȽa2O{֝ˬoIMMPՍUh7%&y-!vif >­fxOíNrGx"F>8r}+p3t\gN ͮt`%%>qg;}s'}\$vzq0~Vb1=%ps6?Q&'BLgx~ݡFww"x2k.ZwCĕ%98>^+p2+s.9̉AJ&+Yѓd 1 ՐŰ;`Y I3I{E^X4XaM=7U]Xg~ke%м5Lab'1J vkZ # ax[ZcW_8;Wp%3sQ|˼f/z3雮^/(s9=5BES)`S3vo9~(< s,|x~z03c^l"VnUfWZ8StR2@*"r{fK>ƌ^9%:  ݃aPA]|¹J.Lx?ZM-+8[c[L7AjA&DS2@-Sl QpjPCU0SP}"thġhӐ| .N<=#¼^qn}6n )t6L*$x턚(>Ӄi:=BDg([F[ҙ49^JuٞUDrq!]U[] fJA.wANTؽ DM -w9O>V<!*qu Ǒ=kfQHyUWijc7nX#p 8ȧ5YRF٤x3+W oGVk^pqCV(}R4LO렺mq ;W lmbI|:s >f1:˛ʉva_uvASy7߾9 l9$ Lhr:~:E", l"W t z`,56gc朄(ϫr軝68-ZY$ <,AIc܉`Z5u z,BIPuo);qn;%j_ǔwXa(u+5;W/yS{#RLTbA$;Aš 98OhlaHȃ[Ŋi$2#H>~2'n3j\Ńq΍|mX @'ByA*73p}ju퟈~qtM.fi^ih5U4AϒQ>Xob <;3z! NsFZ I=\x[wo{)ʘ|H@3BG{ σEic]&v'~rJǗB3>bY t t*eo~זiVX$ôׄl0YDkm-8y 7YF)}h(.+7yD\01е R$r%0pS8}.ѫP-ns~htCH$5NO?yY6ӎt{] e۶bcQtLKɬvRS$gyڸ:܆u,yݔgZ=,9"6A*o!F+Vb#HI&(#RW5 3I]ZWR=M*sN,gp+Qj8jf+#F lK (W'7ѰUǹV1>!豻\?TD-kO?;[L4]ufɍ=ZRUQQж-Biۿ }|$IG}|Q3el ?Mr>%VU|G?hA{H=`=?=nXa yjNXzwdx|X:G4sO{!Uպ+\uO"6}E:?իJsFhTa 2pwU'9Zu縊ŀݪ?No,*:,/ m )gM~|Aw@y&\=0B ѩ`x]Drur5U%,@C,f"N2$;o 4m9yQ [^ýrjhJZr5"- Fc4_R:OQ@>4rڇJ=EmbM8(Jdu`*)񾽈|ba}є;E*\,efśdӵ@}ůop^p+A DeHo (cif䰼u^{(B$4f98+y^+l5Ć7Kޥ^7Kx鵃Y%+RMN4."{m8y,^Er89iAq/4Y<!FM1!]P63fLcȄ I,y7q>Y/\Ldxc{~ 'ocKe@96LdhMjS?/qVw~ D`]; Ple B$Yt[ @YɅ/'H~N!'$F,F"1 R4>5Y#Wԅ /ej'qtRWpzsNVѳ|Ί<Ӕdt؞ldPKMzSh UqPsYyDi(F+ů GcCh} y/3 %%4/AqLd,F#[\42׸.b( $,`xi}SڭRn^Q)KgaFQ%/z$|)Q(><ߢc7镞:Kybguto.HDZM@MLo^6EP5EVwx#Ѫl؏Vpu 1r8_y #K$pYJ\6wRibuN޾V^\vI(..|]z LQ,Nn^m=Y ip :ߜnj L*41"c/w)}s c fyr'ha1ElPy;[I ٬5ރrY$#Ndn⍔ٖ At (i >23~ɩ\#6" ,zV/tU:/2J9T<\jҎ#Ru7>{@_hZ(kHxGL+uGXU`o@@3Y`*GLu"iOZ` ރƢbnXht޿%'~ L'_ܨ9o缼yhB='DNz9zmx+!Hry aOpkkr3 fܶd@YcUat.֣@&dO'F ".صSrM [+=|o;o{gJD>'t^{aZ\)#Ti)#'"8!<_JBݧc3DΆs02|O8]>Q1{5P-N#P~W_j9vJL5a4&^S^u- %(BSGijrh<%.; A仠"gt%M%4ӂ}첾K6)BSڿ˶L9z-nC237Z΃pd5 n|Rn>RY,t"0 .gR>>J$,~]=Wjuy|X?ʀj,)wbكaOw0 2ysp7'XQage<mľlU5?ߪq9^ئh_G 3Ugț^7&e7?N PjnZÂШ$QD+C!S:,`bes='BU)"Th=m0կUĆfNJ3I߾scpģ=bPV&,ӋIKF>;MK߬. P.H1\i?9 J~N~LneQTsb}W9BWXl!AIDRYoD_eg1=H󠖡*rVY<4уR;Gl|12~0M'^5DrGpPǓW>&I1) ^fD ?M#3 A[WYBgX= ;iAm&89`W̑ȱ}R{[ty,j1n̒Hust EfS?"(F& @:T4J"@fMEt9֘W(,;̗'EHɤބdٻz!*D '\xdo)}\x\糴6CHN 2CԅhE4WC+$bn Zv:ƽ̀ghF+ sWËxgt"M+WmV .X{/h*R8 Xp7FY_Ujh>&rMR.ww+J! `Xm  {2s̊;Vfݼ|@9Hk!濬gʖ! 6j{QʅNj,x;gOgܫyIE(Wkm 5d4.za@~:eX_fAZ0&6FǬJUC_[f\g76D@ʸ7#9CYD;+x֨ϯGZhqZ?S'X~X|/HLߴCHW1<53ӽ +ڽ 04^#MQЄ;T&BPkn¦|x-I~@˰ْFf{sܻՖJt/ S|!}o!َܳE$kӍ"G=j;| 6O6)Sw0y ɖ̩,n|&K6h#A͈pwR. }xKڨ=3TU6V߹*T{0ɐsyhRN:$mkL׎.wFcWL n=7h@5)u}0D")6־pql =7|Ѩw:oΰ8qOM a0J9BAׂ}O{H⇭rƬ7[iuv0{'H8(3e{,^GN irFԃYHiiN9q?*@/ǛR#Mj<}jRJNp8pQ+ __XOQh&Z4aH]U݄>(9""DRa] 4cDQZ;,$!lצX,B6 T542;V@ 4mHg9I KfB(a%9ן{4zg,P}^+XY^9jX=AeVEa8ԫbpe({ZwSą~ZDO`t񶏉nךUJOW%'kzN)Ы(~pƁ7Tۑ ȊR\;׈G͸>$o(TcBb|xQ/a힍'j_L{ufċs"+ Yf 4Kl}Z#+H$Gk@v/Ÿz 8T_ +sZxvMh٣42v4r}ّt Xkp"nazWdr'Z"y4;2>L+HH0pZԿϋ:'T4SC+u٩Wk 2v<S,h#A‚kUL5|%xO-s3f^AoݕddMЫK, e50cOy*Gv\_-œ>VU # NER+Uekp{#<Η,wJ(vGBм5H_G -CbAij [ouT [26&tZ<,YpJC4lHajuu7`X rlb+ο\f<[nm J<wr䚴qtkJn$++ʼnUMlZoiosz'];(?~[;{һ ;8w^%] 6ne!*Pde0 י HN/T>`qb4 tw,0y)a%@f:Ew(r.9U%c}u0|=T/2P1CC}d5pUo U- Ū3έ<5(j@ ǏRK7kLRL_~y;aWܜOJstɴ}quAV2tV.Dpr5q17Un]fJ $9A׿f#'cocZF6p!h{÷\ nSG-]b׬?Cff>LHSĵn3 G-kId?vЍP"m(+ϭ`l9R>l46M!6#Vw5ф-y@G1uD 5#ZWK=wǨ]ɻ]$zP4ĄӷH67ݰ% R|xmں2f(@{'Y$ (n 6.=QH%z.bBgNdD!HdJ.6՝#JR&0fp s.aWAOT;đ^~|`ܣvѪU;$3~ ڞ+?Մ1:u:IʨKT+r{DU[C1sŀIh'Zգ=~8țkLezs[DO/(aj5eWY7ׯU_A& 6kox>eW8Stg,9̆P` d8'WwE20#bH% <⤱Qm[\">y B.t|Z!VL}Sh+&M$}ci79*Azֳuv &{D۝{Djt 94A",X噭AF58W'L9G'7"vWrg)qL66ҷǸ#)bN*X9AM"8z! KP9z*\Z!w^K8$^yINbqź<'dT\p'%]֏[b|q2G@7W-B2$Wgvy+M=/1#r, vN,C@eW{8D4  뽛C)M`m 84 (WX A;4Λ`z ۇ5aN"П" Qn:<yo__2CF$֒f_fw߼Lz"WkrrchIb`b{BljA#K(⍏C6gsΡQHhHT*JP8*[ߊ`>Lhu)WDvi4jq}Exe |V߰tND)|oqW@i3+)%'y]' OC}pņF^(>4O7rAT N5^xx8n~P K V7(@&t՞RZFgU'`cI|weqd2/@!F;@j+"{Ĝ}YLc`%-6ݩm\f ]";}^+  "Jq':wCK?5ê% ^:4 4뇮%{ 1҅ڲ9x0g 07g7Y&2{_2v*]XifR)u4ݳJ 9&NҊq|K-/[sU`?]`VGm A!Uܠ:OEjYo(b#77NQƬW7?Y1'pDhθ z*%%8[> ׽nTcYמ;l-1 {ńLǩ}:U90d_; N]AsiQ'Tf~Cy'܀ljs{$2ā?nw8r6pHhAyd{'ɀ3Ud3#aL G&5%SO D. PZ23Q)1aLDDh%紩( fa-<./’7V0f%`yhgO2`Ȟ[xJosNAsnZz1::dftqP2tmB+޽ikh@G&L=ɓIe%[ɨBZLX |8!: `bC|3HTL'o@vOuJj;h G^FG8g~%/,,VJ5VXr7 A^/>)2m,kʖKJɀ.$G$<~׳h>(v~a5&]aK#} C•KSZe>0q֩e~LZPRZiIeuV"Ҷ]lr$Xk5FkKqNMU0_FA64^$; y?ئ꥝t5j^VB?Bz4-N5 h޳2,Ido4%~6 Sr`)5Kp)PCj$89., RK.9@ĕ# ZfXcb]E>FPZJLs"qMǑD$eB.P@((-y؍we"1^^$.ݩyyVb ĂQ,XWAH [ޛsqnJ r 2|DroakZƣs')1vW(ҁRZ6g{9Ax&}$\#EFs1q%a^~TPA+Ah+WȞ?~ٸrNV6Q[e"wl1M)!KGhh;XEFxDETeIWDWHVr1Ol ;41ݸ}3hq&N8'>S@T)2OEM գ/]OͧSI G:e5l1;uYuoh bU *ݕ}ۆ~.ބڀ`17GqP=ؤ-%߃~Q5p;.,ĥ2oN6Blz/p1[bѾsB 2z2u뀊D<֝$.A\v@if &ǗUMjzsnnFLEM\#4=7fil&D,;ڟ?~rivl,puf1*{Y(:=Q3vb1fDg7I 3auUg,]Lsʧ㉉Xx-AНl|r[$Re&et rO44"Mc.YM8լ~-I$q @f&5fBU@m?f^~kpRVl7f܎˴h(WM@-{ڃ@1Rrh% 0Ʌ'V눸Ӎv$fn !m4b!}+iBљhBE9 (<~J0 ^ϡ%KZh>6Ј%cUYS'.&-}Zџǎk*+ rЫFĻ| Dh[UDA6>t&gse UOpK"7t/A3R]4>x7Ő*8ǼnNxiO%Ԡѯ ް24ț fjd,Gȉ@15Qs{)W3=S{;"b2{Qnwx"щI$E`B8"u㪇=C[O%cMSD\-nE\4ꭊ'Vvlxܶ_x(ʏI%*Α/U:3Yf (dck.]Efܩ?Vxh~A]:t {P`y͍#+Y\Bƙ.e^te<3?h CMߝAp#]~Z"yY.vxSe~=\Hɠ?y)r pw7]V{engn{+twqkb`MG95X`ůDHu'&$坧i< :N)ǯO2/s罯qU/[a#?6kD`e2(v۽\xGA3: ߓ[/f=n|R_k^*%G7 (bMiY `O4Dƚq PudV3W?jo=S,NrYk^3jH{Rҩ 77~#L0vx!20Gnٵ|щ+LX-y0z-f']fFޙ|>J{hdj#vUHj5mȞ/_""C!1-R%ycoscy{Ih-KVZV R=,o|5ݖHLyppDpס^w);Ծ1+ذժ8_}~;p:G[o;ݷU({/K@yч)~~ߗĮiK_W66L%+$/\c'YEg8ʛ__~ ?gs=y|{.s|Q.jjcMW}gYPBv7Z+[y_x\gIKCKo|ٿK@0=?4 zw^;._X}yS= =?+>EEUɯu<[k^o=_zߛ1Yv=O3 m|>.e&힇㸙{#ulCu"% i!l_,40F" Ons ?ƕ𰨈(Pd4Ϸeѳ57'CTSu:h^;~zӆa{yf4_2>ng #æ׼?'4Vo0q!>[JߖYӟS325JokĸpȻZww*⮌(!pҌҏU KJXu3YgAȊ& BvO\!/hyy\>; 4RԠQldc@ץ 5CVXPUPPK gY}ήk66Yz-rLkJԹMc čR (_r d^˱y: k2&)ϼpdۑȈY.eCqyKƗZ[1]G!#+[Pl/&D4~5_iD9ъ" tX)K]V-*Vry?gou)ի?:ہ:/AƠ'CKXHH1f0|>UqOGyc8Nj@182;^ewǗgd Fr4=N[emoO?^꿪l@s8>GdaS}(@g/ēȇt7#asiɠeYFҿnt9qy( ѿgs<.Xo㉹6T?Q7ZF"䣤 ̑ԡ%BAbe_gg]Pjal6͘\@B_\-G!kH%=HdNITX Ja#EE3PNm(rSWO륟Dטa99?;BlRggUf<ϥDa$aBR]vyh'B|~iqL RSd@qӤpķtdB;ߍ5uPnb4~}tP'?v◁r4^4JS[lzi C`A~6R*b ^8Ad7 vޣo^0O^t\@̩N}^ uR"| w2Q{׊!JdVΆ!UպAxj"LLh9?kv3P I"+6 ! ٶlaI_+!@°eDTUG fp퉣]b4m5}9dڬe Z0IebLb$8Nv޷m=DZa˳J\-BB __o85շքCL]kXoq[l|Kq<ʼp?!iFb!1tQ$T5!ƆWK-,@(+0RsMӷ}{Qt~I,Q Gcd2KUJ1L'8yD]}T8JSdCquBwy5 1#̘''0rbG껄p@?.J'⪐?LBkjgp(4ü2 y?{_'!(`D%6gJPYV0xߕNܵpLat)3^4w`ʀ)eC߷(,V^DL N<2`2 ͞gBYC.eǹ5L *9ЈJة!B Dȡq" tJ%^Oʣ:`h2^8*{mmUy K~Vm@> }  O*x9GW*$Q̕e0FU!zE?Q|^JQ2;KT9 BCί#b4Pa5f޳$ oa{M:L&l!F*pC0S ŸѦHQL@PuQ(s51& mR7VũoQ7StrmwaHĽ[(u+h׉\׬ZJ!֒7g_]0 ˁ*2k-@em:5|]`,m~(iӅ0 !Š=1o'9wRULDR(ژ/j6 4968QUE #D:wr[F  $5*>4W;^Lji}ZTj aBj +¢(R[+$gYwW\ٿu} gy*y;Ӎ4̠,)1 lsI5zN2s~э1?yrƗ86cVS/dl$2M@H`ӛ.ԥ.JSl TPXUɾF@Sd(׃1^]RMSW-ƈDpհ9C}ӫ̮z3-lWrg*"cph.(^ ruI|@OYnWƸDODt6{D@@EHqOWqwͰ)F%p?)oEHb *&=!bXd*AH@$\Ŧנ]#0v<}^˫\G&@@# b #-kO-V^ ?ag=k=ry%e+do}d :ޏw}]S}gyɭ빌z>A~[~{>v_v}xtj>(Kn\]J{tUӬ xwjOݯyH?/q;תvz"<fAE"HrlIj0+e$Aeđ!.E$Oay뛎Z%=O 6N Ps6m.={N^BEn4. zY<}??+v9f-黙y_VUtZI_?v[=e#gc3Uzi75`ll./?{o3XCڢ/,(+}].Hr"1s.|VUns _Ʒas;1JGg<~{߳ORw7eqotO1^=O5e=ϓ|-_g#iL|?l x??~uAL1c^bjݓR.] \߳۰ m4wU/.Oj<(;/i^نLPCbOSŠP13- rA8X" ztHy5WyϩvmsP2?Yk{sLykK ĢyMq03wȠw$苽yx)hȚ}7FE1Чf=$ QO@t;*@W4WU*>$_, "*3 (s1B "!DHhx́TIL-~#!e}vv=wװy>Ow/m/iݭok46?uX;+e߁(#m1)[R}R=߻>ӯ9^ ,|UUٵ]_;n9 b sFpC *6qSmsc#AƷilPfciC2qⱴϦ_y^&'>,Gg /EZ9kUK]qټwv}j?}'ݗ!,0;/r901y-I2۟f}bbbdn`R\?+3p4lϘ: zS?_>34?ܵ }l,Mcs#j }K'/u:(s}eq]KY*U#1vFXd ä׹G[\>c(~ftUcr3N%~rZ8apu G͑}Kn~Xdg/ j'o*Z#Q<8 ^=EIRa ڡA7XT7#3qe9>G[ּ<؟weU[~:}& &_8߃]ueD%8^gUn܌cIk9,TZ7)Yh|nwocss])mPk;?w\?ً{>6yz^W%vC7߉3>/[^|W/@t P}n{  fr>hwݯ[|#:޻-54]=9]c^u>kjs=/lk.'a,,3 qwר~mRѳa` `.d}0e: DDiv5~Ap<=__E_'|uຝL"TzqO} -kJQpE." 8.@G΢;2I UǢD7e线5?Bƣmeleb!!DD;R 1B+SDF0@|['>z?4=oߐۿ ǬK|`evS}9?#tJ?(#B,X ܩgBux2Kؠ&A.xJ G89p1"SIr.nָ ^;?LDy7xDE[D ih"`"i؈^Ed*aj1~`%Teg<,宺%f/J1CL>(ds[l{rYk'Q}5SzøuTFֳ޺C=nlڊCMgc*%C2S\Kvn۴mm{}VpOR"y:!h!=#\.t UӀUA}GdDAJu>@c@!&)}<H[Ұ\0#=eHH"&Sq>m?ɞun/_8655oQQ5>Nw =_GΠVtVd zKT\ͱFWdLX$H ^\-h`GE%{J3oE @F0Wi@!"lD ~*Z7e,F#.,,?NM9o9҇xFPJtsԬD'axԧQ3>swO7u^:wSʉ5S:޻i|7{L曒zgg[{&;rlo1Ci(tn"9;%" ʧ19w- LE-nW`J?7?Jx1.S[>%Yf}\2%e\-D-Vб~7 ǩ9> [Oaǂ|۟?>ORjDJ-x "$QU7|jVg$~x*C0م2>m,|9ٵgz$z?7W?e߿n] ;jłTr8#l @!YQV߀yDnG6[@vKH?n6Jx=Hn{}F9sbɚIr|$@Gɢ E9*K@ P+(P`OJ"-=|΢Huu>x!~%?mV;@+SλKܼ͋{ t0So5d5pw넯Ը)>oY|D=nȳ(9aS쓲,_JXBV`Y+ Y͈. QYSnWP A9HH]7qu_*^z ggmZsU]_߭Qsj3]Q&[g? _mgD$55}o}lϮCY2!4NwwͻnFZqw+Q=*py]SDx^m:; TԈ}*H"۔bEhB2by?]Yq9J%fa `PFc spsQ J4,e_zpdYvy]gI?hQ>iXKz]FuƉomq?Nư:! G(ʤq\OZT9;ns:Jw&ktn6KAѲR ]HZ<,-qhk^ҔLPsp+ 8U :̩o#\Ֆ \xi>Kxc/꼮 7A P0 i\q|C­`c۪4Rӫ]ϐǏ"rtMk"U\ĢbYug=kG`rRl lZ\;n-+FZgiSGh A0hWq9Xve4?qӷ57|vYiq8#kAC #Փ >S@Lr-M䄠E qZ2bƃy.6󔧰ZzMݷԹkc?@ 2o0uHR܂Ѭ2VU7Iba0Z>M"޴1UF5;6fϷ=(cܾy]YɃ2 eBp.c:2^Ϩu/M5&=hYg悛h@@ASBs ]K8P)x[5b>_?wjQ^14jzr!V}/twjO92%o8ƚ X!"DX`Bx ڒoD"FH %c}bE^1 l»ft^ KJQj|ci~:hYf,mlNBÞș;E6LPQ|Z0rv+h3n0hD]l)@ @dkIA:XZ6Ys:"AE 5ڡrcʡA-b=5|ZčU, {2L;|{⡀GdJ4EVd*ڲB::ֿ[jZngd9r9~2hegOa]mtyPi2t7;ŊkGSicE?-c Ac;] o( %TlqQlSis4/^ܸq XZBPu`H20M]ƻ2v̄0e*8q(&C-r{b=&r0?$vIDw;lNK2zGy'n{fi!("vm+FRTȳrLV 6Qʬ8RRZC{"v@@g K(6-" д4t\!hzŭL oeAva duщI_[0uN53{fHb d Bo3/8pgYh jN mW,Qgs`rTs9m4I$2zi;6xF㠬-r㹥Q^"YUHz)]g[T@-А br%&My]rP,1AsrndQP'0D,10Y5U"CU,bry@52JX' C*HZFOW+?*Bt CՉB o$\g&d;^٢/uQERfyQev\4zIGt+dPv3Ai0 cd܆0njNpxw}Aĥˆ+*|s%N9MC gj)9Z:XR6tIO$ F"89i]o6wZFᶪj.9 zPѼvs P Gc&6ZQ֎Pl99kڨ^0@w_U黎ZnGKл|q[RT($DY'P*͕ 6 EȠEG#$o1ɪN ~t/a>GSF1)H`Aߪ=Ug[=eV04턝 1m_~!\d 8@֓&qCGǽU t0È'O_;T\Vj84.hٌӺFƿl8oxc%wUEG@ g;qY!۰93 IHj*Y Ni~*Zt''2X)yPnZ3hK:$OH),rЧtm/d VҤ6Z87HFS06@-d1.G]X^-VMOGoP^AV,V؊, )P>6*5vx 6L7Wh&)Q~'b <#[ iyu]g06+`k}erW 5;R9]ƢaCL{pjagu1mh ^pms y<+trriutW%%V N3'HemW$lR s 06v?1!0kΦ.ّ/vB3UܜeguFviv8v{qǗ2Fib]:`$ЋرEW}MGS~rgX D@ (3IUFy+keZV-WK1p﮳8mP`2HwR+|u<_\l"W릺˯EPYM[2=\y%T$Dc" r0İn H8[ڟ=s+7`PGN0kF9j::L+ 5naZ<ėY>c"wLlwݦFO+SE3|{}뺦s:7DƹiWjucYn17 7r&Lk7Iv⹜K(,(գsOJڢ*f=QR[&[-^>Uy 5b.|Ƅt?(zD)S+yݔ޲Og?K,v8|RtWYr_ݨ9WRyl,% L24+ sCPI[quIkp.U@#p^Qㄵzl CMSi{6|-U:C"dh5YUx[:IӁ9@:F60CfDm%E(v!VAd$@ J:;Ԛpt6P*p 4Ur[ 3*(~o:<2gqo LO&FA Ĩb+1GR0_3AmqӠn6Ȣ34w4I !ɀ $Wm0-=!YМB]P ے1 b/ΓΜ0KZEֱWsKYX6cJvSKX[jE٨$$wПZܻ޽u>*8I NKl8Ycx{|{+q6D!m$ 5><[(pOugC?Ԋ}U.:om=iqd"dߎAxYȒ g5mU# m#fo;͠NPJqV뮠`mͻ`$2$#0u (nƾֶd94ڧX}5iAJ/ @ 9iPZNr4KVxݵxs,Ku7;Lkz>C2 [c9"/\áI)Os- ozF [牮ǬKO~NeqQ3lca7%tF0D7=OQs&`jA6,'職ͥkZceVJFm7-d**D$-5[Aj̡So"EIsE;G~j9Ɗzd zsHAvW8"8/9:Qcq̝[][ bɣSbKE@yjݦس]:uwD@ok(|XH8r7 oɆcq=qqQ:Ġk5mk2M!(yKt{2HE ZLI*3<&+c.xksN,5DA' y8wu祥᫚ڈSh(f׳ `OBj-&Nh2"" NJg:(: _5[. e'qPQlJ(`q$qǧ(\T_ކr K06f\!:;1['JuN!P]o)gkHn'uq3n.]5_O{YeT1WNP[T:7>YȬV*PC!ʒrq}Zd;^iT T&_ȥb%i(Һx{ ޲kMvNjfݽ(,2&,=RH]WiP,֎/=# ,aRhni°n+- .nAwlV(0Un~tI! 7/!?LSh_d[)AM=s]@ju!!ljv@kzO ugOS9sw!UcfEdQ}ըE^2 .R qD!@q$4P@uw0.'OR4R~sk߶; FؤSWF#8V5Mǹm#`cL|Œt2ֹ=#@X>U"'; zYE2DȌa8P%}3?黍{E#Oi+X[κ]~C[e܇1 ܨLp@ hl# (&(T$ ("`r$H(lcj".DHIv ?zЋϞmkI5?^a.%BF81 S߄oG._O5s hǫUE!!GOb^?AEqPb Q>=Zuyre-NV| xIGeuϠ74^POz:DF*Js}m rh/iR APPC P.爂b䫉DD^wݿw|$-[/clw(qyMF]lAF Č {z븜Ě*_i-u_* ^T@C@tUQCE[LQ^ǃ]ClKZ[#{S?]|#{e8zEKf93^7's^ϕDQ5K3iRDDP0PSي7H) 20&N97VE@Y_t? }d+r9sJAx] )9EIXky񽟆ϪYNc/DsQ!p?X NLH#Eb %@DYY@O")RFmk˃HmߖnGLgWDsԭnS ep oVX/""BC˂$IQUdI#dA`H*!bbDX,$"E"`*FH,DH` X(@,` YE#X 1` $HAAdU,X",!" A@"#"EV + ,Y * ","YR ,((DAT( X*X`((`,(E""2Eb`,b$dFB""1EATb(0b(( P "2$,bb1AA)QR Xb XEb XEPUDbdQER QbEb",ITU"((E "FDUP)A@YI  d,0@EVDTQ݂D*k3rdq\}qnaI/!A<(W5pI%MJ- :f+%~x-^( 2Ð <QFHc,FfcuD9t8~ڳTQ!* | ULHyZZj?S}O^t=w|o=jhz? j)JH QƨUEDH H eRuf1ؾ|D4#n1|g|@8# E(֥C &ѥTEװ '+2 "F;0_wQt~Bs?$8^AΝĂ! "z1EJTpnd cB: \snMf|V퓉 nhIb4Q< T^M"=lG 􊖂t\AT?ř){-}~9/Uny ͂[z 8)4Spv|}Y 3=* ,FFWQEW1Ӷj$ˁVYP=ówIJz 4xң"8!7azUqfjVsr+1_SwΏc]> "F{Ox'n!\UfS@ǘ#X]֖FJ6)v»*-"C"1x=|{ w!S-aAdBBttt6f?s??R IIN!QAKzoʈ/ e" ckU|eaŘ`hpeIT(g$?c"G#=jp(*ޝ% %JOcam4w;2 s#LbA1w3[|*U/@o[YHZtc<,bC4?~<5PhlwpoYo,vuüs2)k0&@? 8>s#1Pw,PW\& ;Ň9hb#5 CS/U*- zǴWQagJkk~Y1!V±aEfkjiz?|O#OUMmϤ7ȉF qѐaQ6nMm n89`E8L8G2z9^o׿՚6uv c)bHFYU~Ucv,-db"DE!:j{qsFqRƳOSs{z|Kׇpn3) &yОv X˞eŐh!AAϫ}hVFV%:Hq27$x) ,tf=t:SbtDZWw'=lu/_$]Fմxsļ:xfs s4$#̞fɭkA풗]gQm-JII)\c&ݽ[  $uuL6jPDMQ&63gQMd"-@Í3mW{FYdj+ذ|{%qU8p /k4ʷN8;\'3roZI3Y9ZjjXJRg~"$$϶gIXo"5[[bQ290A@ St"kjmU_0 <]9^w/WZ-hzOzÿ "$;sGنR}˓{ܘ|dm >q RS2> S)6;DßBK7XVvУnzw8k;zMѺ\3F!#($~1"GA!¼QfT@H\ '/Fɰa }vyո+7KS 踩;]bxe뺋qj=DNV3g9O`9Jd7~rDsqUe(JzŌF=V75-4T;Jna8>A.{9^n& [/iLDgEk59^ƮK||;z"/0 (42?w{6W!>x=QוUIW6'Z:f\vad8c؁̰\q9J8Hޡ+.J VmFMhẸ;FRꤴC&$5f pZLrZ7vf-ҵ%W|Di^ ڤnINҧZLSL3CX3ղORp9B) 0LRlh E®)GyxP[ͨy9(*H#RY3ܵgN޳p4Zڟ^ 8VmE][?yc\ [O}{oO8N"8$t%õM"ma>s^`hdYr|lH83H =<.'WHFgw6p]ZNW5WZ#+])!#{iW~U&fy [{]3R=O4P@>Ν?bt2&eP'/ԁŤmEzH cg|'ʍäia {y$=LDE ^ևM;` t):げiQs}3^AU8u[32gtse="t#OSnyC߈ LW/|~ZJ#0EgQH& AaX.#cVD}\d࿚>׏ʗ++ߟ?ͽI&a^dZ*ɟ*g4`|!mTQj>w`I-?v@?w[J]_w;?9&U@X1*sߩ>'OI8##V/ l:D!0D=(Ԡ vEhɱ~ԧ Cʂ!@#x>F@5 `"d *oP;lk8ڷbSq~R~(R+Uo!CYj!i}j.Y-J ]y9rOT%O8bW7Gl(a4d#CDTDR DuqRbH :$ֽlDZ>y]oe|F7+b7@ A` 1(" _JEC{( a7qI$2>vv(MeS\u7n] $ A~OoZ'tԽ6=w y?+sݿi=OqzVO^Ƙi$$!Æa*"cRmZGu+~tCKHfS2Q T'ߥ^&s|= 4C~[斺 Aw w%Eo{My7U^T7'@Qե+D$C1}~u4еj"*5zE]NsyɈ_U9G/-;)eDRp2B!F$_Z(T תUS ]Eu֫Vg>w~y#htڮ/(eUI$,f~c/g;hmv Tr0#9RJo14vr-~~2s{N幪<5yOv ^W6qP "1:魘rWSJfKt( !hRP[㗳t]7lf"%qds\&<3@1A%"BAn͜0wRi'M,)ltTmd3ޯPXpa'' dc1(,gbHQB*:Z6*$2TծB[:I5/!['zܤ_^c(ǹ}GAl, d'wkۓ{Uv&so4X !Gʠ,ԁ7Db%UNmE$q. V7sܮy{u=E)e2_#._I̜`e=1YʓHUmRC>gTR=vr1'<=,3m4Ύ{D8?d'jY,[H!p->%@>^=v03ů \JN̎Q*7)NMa&'f ̢"(վ)^#3>96g6 c(h  /aiGȐ9W)1\nFcrfu>U"á"cyjz5Σ'3+w䜞~s =|>3=n34pTUr~?ش? P%d"N,*go.`y/= i @;!Q^gQ!/]ۼH{-!1pJ]z$H=<ϴJ+\Gw4,;88..I6#_N.ULXL)][pڼNm³`oT`f?/7Bҫ7m w"{q$V *>]n{=Gsi9/ V9T?4b&0 ,Y2L1jY`7v-qM+.0nl9bXWD oGYY+ YTaV0d7#(nL2(kRn0 L")):Շb=$F9 lK9u8)~t/2鷬(Sy氵c{puYe̵`U'vH㭴\]ACI4a}yo97ڠ=yTżfG=2yT揣ރ7P[oW4;}Cۯ7swno9bC}VBv u"FɚG(jǤ<*gԮ)笠~>=v[v4c7v]g{05 %2{}S7ʟP^hfVbVD.M&DdB.u;1|Ogzhuk89)"r" C9T3)]n.ν"~V®B$F:gd.ckY2/taW= ij!ޏv~A=*V=EeDGv[<$g) rӶHs|K՘* s.UF(ǎעf ]ªi۲ǥbKfW0;V QXd/,Pˁq̯9)չ]&Et^>cG[1ҹk7oilUZ-[7S~ DK?yh@s9.tf&uY埤#9޲ hsאgk 0L9EUxƹNd%`v,+O>o0I,Fsv~,i11"NoOKp5m2)AR‡DaA 4 sR>]<]z50(w:{AAguAj^Q,>jDK8VU-55>cg?wۖ6`_o, ev|:ìHqgq60$跳yQy1kEƽ$ה;d7PǕ[2:ͩ<f-[baTDܢhR>j>M.~ |\r ?Ncm !L | GI"zپ<4 Pu_ǾuY٣Տ"պ0Ē3D0upB>Z;C?7Z/aH_0A|ȊT" Ɂ2q0kFߑU5vQȿ ӆ Pt a**'@gB%JF)%ӦQ"x{w+ysW>e5LԀr@1_TE 9ܘ Ȁ "4r !Ueݦ/+|mZ+cϸb"B(DpEA2*bLi ?L+cXR?_'gˡa=YvT̕Q?B)x e\uݯ;!NT{fg7D$@DCI #Yioi>TMkbsq*;iL$$H!8| "2faT|S}!<^__v8˳I =f@%?aXF ً(=5?>: =< 1J;+B{( h!$Oϋ(t՛cUĸ+ }뷃k~'~ӌݜm%BFEWw)@ޤ;\{[?oo\_= ;Zĵa O۠'И`"b9@Rj$-ݜ3p?Vi4ئHi-֒ՊM7g}bT$@R 6q:Ϲ tx,7Yna~ פ $c>E?FgMO}I/[ĵFƛxNNKǷBfY킘_λ@: :f(ϽKƢ@Pmj<+_誴-7TlN5ÓoFdSUn6p+Ò9t4K7p:TBz#7GhEZUUW;x-5W:ƞ.5O Օ_+N;ϾP6 !PHcB !")NRD 5jgܵg)W52^Ӣk;_Y,F oڸwDzGTBFuyp\jPg7*?p*la_Y#[ aeaT}^V@ϻW8_躟[QL (ӥ`qv {p+{c"0JjTdZ>fYK3p|a˨YSiKFAOSp>5rr1'3Vf` rƟ1K|J|ZS  zN(!*.BW9Ӳ#DߋE 4f0(?!3Ƒ!2~⅝{ocZ3{1wSy0;D ͜i<w8yiɉGfWrԺ̲Bc%N?*!^8.|dnTDkwLܳN,vМX diO>ִ4My*>mn} n߁]OnG??S~'fEصX3~T?ˇ)GJƣJm^9}Q;1})u} d*LKUM Z%پ2ޣ)ش df)gɏ^NT(Ƶ 1'>q*= ) XՁA uͯ^\Jơb h;ՖZ]q"p(pVξw=_.cESʦRR<ˈ`,Q|Ϳ;/-{lyhqDOx6C Psnꒁ@PFsw{bgJ&3w g\_ٰ䣆JVqvw͆Hiͬ ڐK C@f͑ , Hiei?蒛Gfߑm!c}1nHq40iXMXZ+:Y0 pzʆ JڒZĂ}=cdгH)ӽ,VHMh&7IƅlЅ-pXi.,F@5^8vƑ"f[_ nX󳶋PR Foh򦹍OV.^1[%ݴs CyUft : YLs*ilp h#0`Dޞq  k&) hx|խ橖`.x&=w4V@Fbԯ {|:.aLc+29#nyjvz ?;qv<8W'Z~yCC{)Φ"' 0XC9+wgBCgkarxv`I  kά1OT&I6AuI& jQ6Ze~*v8wEYRhޕFMb,9%ϷL(|8f$Qs*D7,_8p~>o9i%w#( D˧|+fL ]^#}v_=:RK~Tu}v99z?,VѪhN"3mb:ûOV8 [l vC*ga7V?Uv1:BX&xe0d|:|d{yZwO JGSH3_fV]6]Yp9R0 2Hַ~†tL4+7a/z5 \ҏcZX.+z}G+eӢPLWaB+z#[2 颃T@VLXu~o.6E2WsaͶď~UG~{$M3Z>0[ā: ޡ Cko\o lG]Բ(| f_6x2:ޣ^eӎΝ 5ż56/EU]UG?/Gohm$yE`K6 ekHЃqa+ G W6U<5nA\=ěd*H~ư I׼C2;>L?yRޠ{Jن  ;R| ro1V'mhT3KGMT lA=Dp2u 4f#qdNC dOޭ=;ZHhuA4V#ҳw=PKaz{攔X&,,BdgE kWmWyAZ¼5{)&\ť= %?A[3ie9;ly DxM-~,!)̙xq }qX.8q_bZb@ZPI*)?JKSqm`ۈ q6IR{~` E 5B!#hF>URXwR>D>t^^I$U.Z>5y[ߏupsƾOWmaq /dQPAGAZ}X|b"jȨuճXccoF !P z>ZWuCS0pv:/ߵ{s.TJdpkt&mc.MmCmun?gs=4)Qq̻$DŊ{4Kd(IU5|cE"S@ֆ}tF#( $!32KH@ 'syLYt[iWPJ :_Ċ T 3eH X6U* Bd^W5 !6.BL209ȍTwyCKBuOp2H MzB~oa Ë8y1#0M7!5AkY` z`sXJFe}1T ʬJڹplmzh4&A]3h'XwY/.= ҿ;T8 …$n2:}!h:U]v:| f*NM7'mEMSWV|Ȝ_}(9$XNG{x/||[h-77*e*DaKyͯ. } F+ވ}9Q`:` 4ǵr춀dajj OolnN~~;Jx1Lf-:uC~޳=Kknb <]SlOi1MT"!(X24wN OXxoH#9N1BX=Yho/"A[L agG@xg㥇'B<='7|'S࿪`|?UTW[ۣh;m"jCdx ^p˔({OcdžQ'7'jGz⧷Î@*ZtғvW i+[}?E<>K qi9JJłNr{ViVCygJۧAކhcaN.!9Qs) rgWʲC9wZKL^h2i.0K%1XC0@,nD:*:6Ӊm6L-a'/bpv$7$mzVKCa4Y1_Y>D30S%>fQw7.@9p3L6< zM'kGnw;l&ȰDA~Ԥ43OE[NbVS ?DRDܶQywMo9mҲC@դ|+ųF Ok%ЊP T{ jE#ļp$pOR kIA+/K̾?T_9:>˝sa}D癋d # ~]k_O76> o\Zb $!*ID NYy͆vJIԠ5=y^}2QpfZoG.`DepSlwlS{̡[ڂ=@OoUm1, JK:e툄8oGDB2BԂ}}_U|̺*3V.^M0$۝ʀHo\T]ۺaQ[wk5\Xx/qn2} @ۦD΋^9 4D&vή~6zTJ8Ȭ`EMu ٱBPԗz>X#zm Sganï:;R?؊Q B||~-—[C֟rH5MP@Gm >&; s"jZK6xwVi\l8j5qb)PvܒDYSpny [ul[eFֲ'@]kB]˷;O/SZt@Tr 0.$ >>]gH /LyA7Ლܐp=L պ&$FQ DfwXmaڿ0e;`yɵţGɰ%yUng LVK<*Ũa^P"]]'{>gFHM߃f,In&g65?GG9ܣ%~ ۧx5Ù|-}Tg"Z_]ZIv=T*#oMKSʓ(,$>()&/aq/Q=pv[h&57)W5B(VNՋqGk,ŽU.k%ĉntšK}Y:xΛ5WFUZVX{Yw'Q-~2erOOq:U*طE*VZm;jUrk -}nt *W޳O])/G K:8*;;T ЩPO vbvASab*7U2#EMC;hVMIU,dJߝ$N]P<]"8 $,qS9e==yXx'UYǼn9Ez hKuFf5;i븕Xmy4nҮ_lȟ#!8HTGGkvE!iWTv6VXW8Hޅ{.TTAUPO=6Mcx?ٝ y‡X!W D!1851&2uHl\zSf%Svz 6s.VyU=ҸlLP/goƾ[6DEЗ$6}rL$͒ƘM66Vqk11**G"bU8Ts73 baRe^#hO'u> qDaHKc̫پ^=[rxձWʾx+>_/Ñ^5ȹ^jl?HmϪD LU^L*6$.wX:nen+_k{_94`v2Q_C}ca[ $@ PSkZaj!)(b@XM`a>6X@K !:ܥ"0OlYC) #9<;֬ UUQN6gGGcm'Q"'krΗzZVH?)<!}zH+huwO\3W~&%X"4^'Cg4}‘XHX(EDU UX1EF** A1DXX"EPXET** *Kh DDDEQES($ Rb#"b FAU" F "E2XQ _6E I2*쒪*CmႬU"QEUg%Q_`{("Eǻ-+DVH)D@ @"ȱ`1RE"!AVDXb( VEX`VEcYHb1dU`,Dl_$ UK}``EXvi D")ݠ" *2t=pE(c"EUXA$UQ" *"DX Ȳ*D|oZë:?^I{UTE#w,E) I*I?UM"* ɥ$" F H1 R1QB=X bGvDXYPDI9Ɍ Abh1 AEAA"4?g䒬E ?rآChA)`bw\dQF#Ot<h(" 6N*#f **a"" "0EDKf,DDUEb #(" ( ((/lҪ򳽅(b'h S-( 9!'=m* UA=dX"/u"R"*-yC= b$"2X *p(X|a  #DTU(D@Q"`F.`8RbH*1B1Tb^:׷d(0ET*W{},4Ȣ*EgeŒP:)ghDg#M EO ,Yy,V Eb{t)&+;EVOq̉h(,XȠ H/paU20 DQ*U=]V*AA **,PXQY *0X!X(PRd,A@PXEV*HDAUDTb<)$DձEU*[J*DdaQ #6E;ys&ED@X0H]+"J(Fz] H(*D"HyfIob*yQ= O;." OCT/zc%b"*dUPX "ȡX,V,:>QX v<p#cΰux;av`1{ooM B *6'3=͗O#t5>6v^~O9xzumO UdvвqKtk֓jˎZpiSk!Id7il՛*M~=+S?.zdI )aG W*-Z^Pb;6-w~%q\foR2QB?f7/oߋc&Vכ_UrՏ5HGѓEm |Ic]uVjv}E{x]SP(֭zm.vzUT18uXh. Hv0<„@^1j@eu~o~$4~ý*"(0ӲԞmgY =2M .E)J|3묵~՜D͡;La}ieÖ>^8(R'B(֥0buS /v}yq<1bxhS&FewYӌ~X8 h%7N GNTМ,_;QL:%mi+*eIw)eu©c}-ܪY:C>XŢt4bVʹ$~2=ih5<|9q0şc~}fYyG[ Ul݂NkyZV)CSֶqf0xA}i ߍ:-MN%ˉj)yuLGAGu}lFn=RlROoF6289cK͸5 1|u{ ݁ڗ)C%.dHOD`( T @cuh4kxe08d?ه{̀nX!_Z{q̗]BxeFYa*ɉi-fZdX:@Y5Oy}9'S/|:$K~}L%ߕ/uo?s(H>g7۠S2&,c3*ɪ8V0[%DIHvRL9P(추{ x~OB uOx$K'(ƋM^b-hRXm4kH /2!ORpd՞|ۆpZߺ3wM|K"ɛГ{@7dH#+5vL pI^\fz%xlzsadӠo! rRCVxIX`:wuX-sJO'_h)xp+6ewh8#|TW+{ӌğ^ȋ e/Fdz{h~*HaΣiCrdS[жb3Ȼl:za.T4_ÒNMO]}GIZDu,Q syUԸńr?Si6vR5RW1j ЫʁHѾ@}KϺ{ROjZv9m%fq澡đ?  :zJEnPnVA 0 /{l]0=57xPYQ hNUuF>nIk>iM13o $8r(q,(x̤o^ciE j-{U׀'JgGĭo WܞqMn~##_'Xd~[;FYuz޿>a(H.^. PRsX nv9 (0`Oqmq%^ fO3Oмw]6Dx0}zE> 3S8zvpI#j?Vz?A)f*s>aR4HkE!C%7 :jv&~tmLX& ~.T4Bx,PR6G^m  1$lx֜̂z#2(r|;6V/5v a"|cX#198ո+0;uW]l;M5qp-G `|NuѯvS +OM4lٗOŤ?S=4`vA 냗v_Ccq'iy|1ztͧ좛|@Ug忱`VńQgiΆy;[Y&it N>7:6/㵄6dY?M"'kx}& )%l&8Mga\5t?9y۟*E #5VT~~o%{ᔋ;;)'H^@CĴax9Wl3[XA頊J'[^VYî}/,.HUQPE?΃y(.B@$^}yЩ\Ȩ 'sG,׆?ntoH!ɂ8""þd@N}~rM9U"*p?;{E7YBek'B/Z$2Fvg^i_ro6 Ԙ|TdK1P(4o $L(iH`kU?Q6ĀuTe)Up-pt%Y'(^l+g@3dJ~5PP3B91#Tze}o=C"JGR-eTT`+şo}/i{1m MlOdخm| +C6 6o&#Hx5 znOM׃gUȁωt'Mvƭg#[\Qx;܂Y y^P'śm juº)19\!i{*dG5|_\8ۇOwσ"9T2[v/.mn(~`<t|4KۓyZ}R g^/"9{Il8~%z߮l`%a'ƽz,@<˃jWq*Ba{ڿ}e._۶NNh@־0(luf;qCΰ19_^Y~ufmU;Úx-qut{'Qݟcowď~m Oc;oM,_>l|K(|?h>/kl[oJ:Oҹ2 qR(3>DD'ǵ-Oxh+_wNv`|bM?_Qw{173_Vc:)QLT"* avD >A,""]|hbFHS%Y)a#Y0)f'ÿYaEYDb*}+Z-`XEwlDgV2,ETjPEQŰDDc j!ȿ֨A9rz=];F0HԒstʊ7ԍ (1"6Uʞŏl; %g"D (b[k#8xTHk6+2jc֮I/1*SgLto<5}rUz+ V8ILfxq]'SI3G(MtZԋL˹s n2 dJ|Q}a4QwSp{|h!ϰd Qt;:[.t-AS/{t@Vdt~!hkvD4e~% Z!T|_;u8<0cc\(6XÊq 9tZ"i0zXUe5#z[>Oƕ{k[wP(aC50g#+os{p73c:[q0Q9U^|<ӼvUÁGΝ/'{o?/;UđaD* 1E?\bd|yߵ}q/>Q@7Qve0iZWR"B1FYiNHpY2WI\se_z9ʧ~KO#[7%Z6XuaIWaFj1 ɅC^cIK^YzLJ]}rkkP'*5X Ĺ2tK>hZ;;/v£}lsYز{B z(3iye*SRl0qF֌ļ/!Vf"l %g1}5VRpA0CQq5 H;HV@c7,wT?57Lċ k1>>ڒ ^,eKJݰ*Uz6ji>o7&?C!Om>0YI?WbɈns__gO ;e-d})Cv 8 (ARxX(5KPzh0_]mkJ:ч6&~Y'C4qfk_UόYX8TocՇ!(W< n jm$_GlU軿i? 3qQCAy {2UuQ{Z=μ7O>:Is%D९ο5eZ9kwZ;I/CCG/4q6cAioo-/j$a6|n#+n:z$E@۴}b=p"SeHoVYDcN"y5xC󧺮Ke'LLhA?QcdX߯vLb*)v|?xsڃ$|*i Bl`sM'nuu9Wr ח(5ΩLN׺=&T©]OCdVa NG܅C qix"{p4pׇUI+bMBܬqjI$Xqvju{oԽY 5( H7e8/Py moc- PlBkWBodl󼨕w = ] RPgJuo f._us˥;CASaT|J|}+o"ZAl)XB­DhV5P;ւD&ujw=2e8+ߢJ(Ъ}jFc P3~sϛv[  ePD>T1.ϔ[| 5sqg 2B՘J2mq*QRXY,Djh<,CtmmP馆6˥kίG$Qך~ n! ͗U倵%Nʼh^7.u[Aj> y o+:ɾe•AQ lfuL㬵 rlXi܍[mI481J<>9Y`br?\ug(JaϢfśdA0"ϕvMˁOa^;w9 ^Ng?kn siI/(a;V^\D%8nͤݚ@϶TvQoo$DhVss;vi<2(y{}8ژ wbnIu# ?'|pn7+fKh $xF %FyY7iį}Xw춴Q`N+Wcgq⑤K]\t\o["`zfkE A]#M!:ZACy6 8&Th-j9.gwջW3V^Ѣ\^f 8.m# XDE鵽 OBFDmW׾H4rgLtSÖIu3;mf5Cb00K5~ tUX(lH,yBgAMٰVl]X*QT5c 5+VO>=Υ6`_Sd1-o 7{S?mɕ\꽻o O7?Zx+!;"6Mk:+*B,Mm39҉B+ݕq!=^;mpwcJ$K*ӡ(%>4\Xԡdc ƾ_ 2CYY| yoT~ F"50v$&\L{Ji%Zc>_*̲r gקc 7q>*lgtTM'V J 9[qxRV0GDEEڃQ صRq(,2Ui%>\AUө& vrتtN v@a%JFa#YO%^? b0&$*>k-6"WSԆvۻPImgԺ&dTͣUsgϾ LmBnzn#Ps$pDY}Yj.9a T8阬z Vfg^FMX4sCB|uXp͆y\ Y#ai@a8-T/ |0obsÆÎuf/WRIe|M?`Ngm1G]N[gպ3D½s:*TÜwY]g8*4ԾRzb "1tG0 DDATB vOVI-swۭ-_%>% chiK~ĉ1$0(kP!DZz o{o zDjCk`@YHHyWZ""Fxv cs޺C7]˳2eB_O 0YT8xYXt_yj(e[ovX@#(Im^I{r@ƞK͸W!p9d 4M9ckF!'_/{d:2Yi!>AN GJAU4X+ $s+rR0LNMiR'rJÕW[)bxL/l3p G Ay>+!.k[!b5b},rF${hȤC^feNbNm- DykxdhX31*YD`DjE(Jq2q#] 53(ś{=FL0z۲kW *k825RNקzBmu~ɍӣi*j4aYtDt6nOQe=5H/(g=~\-ZJ2`U:1V\5S)0%!<QوkKSci6}uZ72w%~eO븖2s,{Vx a3сqjzq4ߔGA*"f(^Nm]Z௙;N%ZwF֯67O4naӎgVM;:w (SmZ|RBms SMi9KLtUjZIt`F , moV̝/[qU[a c VJVI,Ncz Bg`QL7ƱuUhuE+rݢvL= 3KJZ^~%L]C [HƜS[sSz<3nGD;ё^db @\J,K\|eW+&;: [X!/ .>m gkoԪ{^e"(5DK^:,ܵYIPnZWYiioi_=R* 76J9trڟ>:̍ A8^}Ab60 00l<<ohG!T0?)Xr NqZ Ž󵃟j)|6nt*X q j\5-D&s\uS.N!ohQd7R2nɃR $ &7v~Amr81d'i20 _XNf3zM_eUDQBLrq{h>`@jATYh!r7kT^%h5̤>k*]gOtgQܖq/Â|5-&D^ 1o4tDz(j`;{˶զ ϛJ&e2D_A))d͹оH r 𩪜^,%[`zՋ /]Iig!34xw^^$C> ebCz' 02D}8)n߻qv&B1l3|6yf LJڋGSM,緗M|颽k,; drWۓH[;(v=%E)S'x2J&uqZYL yWWrQɱ 0PԟϥX'C+b8 o]+wЅǁd Ob nj(+̘=[.SYkiYiiՓDDcRܳM U%^ N2Y`հedo=_g_҇[iJk7mB Cئj+֐ vP}J}:&f*yq-:?3WL*3%ENdRGaLu IMhiv lEղgiOՔ8jQb1iB y5q'  W|:|Ӳܦ[c=YVsG .jA4LX)Z-%h?I>.siUG7Ÿ́iB\kvͳo2VYOYXVfTI}bNChLDRߍ,Z?/}%nD+.o>ego`_ ##d·>祊9:(_aΏ+^GW2zojG޲j?s8$1Q>g}n >k.]4nס ˅Hdzp>ϱ+Ÿ}yc]NPAʄ<JnpϮaC|jKĂō]RO@(NiofӲVsX?A.Yf;hxV s\ _PDIA-1\Vh%&ۤ|(t.4KU<.G&3eVɌ)+3+Yz \ eMrӗ Wyǥ|O+8kz|acXj}DnZ{}e5_E?K/I|}0bvY?;.yVm7X(x|9|,VR,fDaE x0Ec$ԅMطh[4F!VWOe/ >˸l15u\~KkfP65z  &F8 SWY[/f\Y,ԩ|KP Z"<odpb@xh|7TZީW+q"aur5&sZFG )Md40ҧˆY VApvU+ME BJfV!N$b>#Sy Z>=]ݧ"4QQHI3K7 qkK7$uC3 \vjPS˼CmQ5JYDh"wy#ye=gC"ܭ(:X6VI . 7ghaU!iW[E!urNPq3C/Mh۬ÜaEG֩'viw5q*9 =xށ1%i_v۫fcR1L$h ,ˁL2"hb)*Ha7l&Tuy?C~^>[/s"fhBM[Xu~nqB2sV4(/!HF$i[Фɤ1uI8 )'N3$l6=SUK %@T37d$[5)BTS;5m&*v$HUX"QoiZݴ} B]~SKs uoٌ-q4X^h*?I;JjkqX?dʑ:jBHz\u`D, *V^K%cYj^-*h0@Ky궩8fgM|q6,{m-Z~=MS`g۔zgl(D~A7iD~8|'/VG FL!=-uC4m>4hBedjsi9Ӳ۬!$WU]/wq{I $Wj]o_ Ub(9G5:iHs`|Ws7Rhct.A-]y~BNV>~(k=*T*bJsq^̻>OdQ !ey?쏱GҎ/*꜖G~T-h-h97 wwM@׍wv{><^ .#|f޶-d:ы(5ѳv(Ή:Ww.)d+B'&>fΎJf 7آ=s&r/N{˼HΆ{DҍŅK3^,@g Appb#d$%#TH:hA +."X"N,a/j#@* 4G1#ۼ Nc-ͅe'~]lEA1DeLz3G|OLaOZ*=yaTQx:Jvn;oP1MVgaŀ[,yW臈ֶE~͸ynWA{=v6 $"ӷ*;`$hM7>yp+Fo=תߣ즦R==Ѩ Nm kGbT2P慗#!'o$AȬo08W,&:!8을z^XK \ymγ/]1oGڰ}ǸfQYcѭI='q%"4psW$LPeL9p-Kלu3xDGA56 4/UτQsұl *81^2(an&7sKf_\ Ձ, ś]ŞH;ğ#߲eYY@y~R&p֞ %pZ`8%:)|r*эE D" g{6R,zE%oh%f6fiVwz$\ݒ>AwQ)S;,<<ĥJ09XV4{E=zJRUӷm%(MmKHKv7Hr-tHʮ|y }2qB}dlKF-%ϊa0+Wk>3ˤ[-Uq7=}eF]ŷ i8q⮓6JBS)w!"50 @ CIȖ k*ov)b/>>;4%*}{>Tzvޥ1{5754=P M c;# !?BK AXWDD* MrvX:x*3ak6 U;b. ]S=~|>]ՔBm l͛/#Ŧؖrt:H̰4UG#&6S=N-K6dQ2y,L2[ UӤߑޛae"!?BkնtD>u:! f]@`r=M+-YiUcM a5*[7BY›#zOFpsnУ5FeҏLTc&6G3a>Mߒ 84`g0;};-ZN껋2ri ;HHhe@Cƻh3{? _0N$~ZhȈŘFu#'4i1+^c9Lpa>0Pyќ=eE;Tnϗ>h;y fp| X`#?c5}Cbg(;,~1jQ"!嘉%rL<욮ʣ7\ɹ!#'6ŇcO7F Q&hRȲuLN3t|4VC/) hodH0 `7?q_A!`(;w/zm3+V`|P  e_Nήv {3{X,)< ,Q586aOfR Љ Gv=c%ƐaisKX4q^`Ɂ q~{ 'W>Acysd0iCC㆟Տ',m:Ƀà=~4⎑ZE&$N#I>{kiOE幚 9ݩ*Ԣ fIa?QV3DtgtDn7YEƁpؾ;l,YJAh4Z˓|q2ʖ=ޕ&+<1' Vlf"Ʒ~"6 >JsO 9!&?'I,7 ɛ杯vG-+7A8R$AUEe|fMELg!-T9Hu1_Ɛ_pH2&m3+όb靸 16+=rnٯn3p%sY2 EC6zէ~^6 E_v:''}oa T#v.3g:DhC(fx+j j P1RzL1e vwfRDր{w ysURF,˜]0~]! 6N:_6FSuנoYmZBmKB&m^ 篣N퉽8L%^۱54?>C6Q @hY֮iom۷ȼڡ2[b_٧wzWP'&tˇ5LSTLX_l:yi][Uc2?W!k?2$ɞOx҂ oWl/Dt˅}F\F$@OzԐFA ߑĄzBT3 /i'ҡٙ7ƍ!3ֳ\V<+^ʩ a84*r 嗬|-Yt !RYgQ5Lo FJ\J;]2ΊFɧf ySY5ڰ3~F 1nO JoPhCkw J.kn,x&=EI`i,)q6X#c>O=mvURl6jM#+pX4(!SV@RAs3Ø2CcRK{J f$:pkdeHl>yޮ3m-)1ظm&ms& Xq;Ѡc㦆6f\!*[RbY*S98YlFL\`F^Zqp %zhn|c l'G51'%M.~6k4޵:~dU1LrfgY9]& \Y8VGMh¼B5l/r뢍qU mUraN-Н x(rԻ-N]8_Ȑ,@FG<45Ӄy(_u5`rgo#PdZ_;a Xxp#lud b\iAކ1hTr.k'Lʴ4-RKRVukݯ5Scxw$/nЬ;}mSɷ|Rwxkgj8#vV-yȪNjqiImNP$E"~'cs_R4${Tzb(Zr v{%?{!)K\QI #!Mua|~vwMCiN×s,TQ`;9i5khKYE&*EA 1 F#И [ӟw5v-)8`xvM<_pjl·lvPT1/ޮA{[}7aEǙ7n; $g<[y,)7z!k32#ܻOJV e+`ESդgꌑTj]?.Q6GIߋAjk<HcKKm6TdCwnvuk.MpΣiE{ O%=FLE#Ͳ#~Nר~0$O< ٻuLZ\Fˉb^ůJl_b|x+ژ݊eKv6"&SRƞņ6OGϵ|ؾ9T3w~8Rs1y{6X?}unx}H~,3bC O@|1`##!N⑅pì64 8S!ym\rW;<=,O(8-as*QA㠮:Qh$MM9ħ/f+6u "S?9JJ x BUC]CN EiiP5t$.T>T̀Rs3fА"R]B[VfaQXa?U%\71q@,.ԶQ=[;~W8D$F'^%y ElFss7 xJݥynp>R $yŽEeSBDb DdF~_}>yl{(^y<50,D 8/}G|Nvk^ VjE-j bXF+ A`(T" *VI?Ypcf2c!S׉* E EX+C15'_Wk}GLXNJMx\|~2DXbyoA# QDD%óaXBNh0+cAz gF&EV'j7S0gR9O|`Ҟ~zEDIK˼j2;Yz[jfF Cy Y{S]SY;W2XjƸt+3wv*u9P"(-uU29VAY%&ϕ`R_ȫY!=Oc'վ‘O2룋GM cDmcgOU'5 ;`,!gqoXwOF5ϜK JL7*Ɏ9X%D%~yIL>=2UDsճ/ TXmS輳\/J`G̉{RiiYNƲQM: %?J4T"2<+`#]Mve塌B\]>Ǜ43hO}22?w)6 TE8Xf'GBϥ#o>QHS+a#D_Qjcl<>SJ l3 & 3Qn +9 Ì, 1Y#b\GB 1@R ص{0<>Z @㍌b涖y@xTkҩQáڪbuh\ylGHV֝#3O@T6Ah=ax ܫs,$|v xwcU>3,.5F8+e pk䎪m<2Ur\m\ۣi'#8"Fȅkt(~gw̜=DJo `~wM$w,yZ2VA 5Nn(ZMv|;x{6اN f96fMG ě~xLU- e\iLW}jZ^9Zbw"#jUt ftb(nh' K,Db<(DuJU/|3(Lc9ЃU{l8 *y$غnrMY?2 0;}dv[V7v}jnSͤPMfjAm<9Y0ߩ{H?>xgBgf 90ڷqCO+?fc.63}z7"N^{ E(8[WC35R_vl 3nuv]EZjZ@0y_t?‘t5\ʈ[O#tZ1T$8jgR+s28,^"s~#lFˁ66^.l}^{A"j1+Cuk?cMN0Ͽyxklk#/qiq'mc4C9X+ӳs!Rab,K-,g/ty7]0 A'1" S%4cΆ̃:.y|10` 3Fݎ-8RobzK9wm[ 'Qe'%$*QP9_g޾ǖy=75iٺ*Z+."†~6XPN]9M8l]v^etosO7&}>=Zo.dǧ\" s4?wI_80mcGr%& wKQ=ABz>݆7;?TW0;޽Rp1|!Vf?Ooiuj7<ćVk;}߻guߘ9E>,}0?ͦ\N4|c1hgmvֺ`cUT~L;яЍ_ `~6?;sV50{?~vM%7BX/aMn`OcȾ.ֆra8G>~sA^' 8F eo. u*i:~ T־.4?NϙZ("tӉ~>G#D:1g^Sh7K1 y8v쟅g9%hH\3Ӈd\xzG YI$9 =AURBdG.tRGCZt̋Ia3%+ +΃Fw+e(bߝ(4Fű =8/N$hPGVAuU 7C=;5!W_kyݾ߈1 [!PRAJ%D}1}.~KWf6ݷS`5P(DF L;-fRq>yY~mShE( (hRg.^ w.]^^t9Q@OD "\EhA>>Cɶ+VM:6/i-Qe :FΟ#ofy`p[--euQ.NYѿ{5Y"hɐ,¾W&HqZӜn43ucbAp2Qsg·@状Y!R`G~i+?Nt9렀TC$ͣo OVN}T])Â!JYƫ~գ>3|8r3KΗ-YѾ(mݪR_'v!ɧ^_TLȪz޿N rqnQD`5 ّ-kZY O~CW3gAۨw~ ?ra"膿n߮ʰc.ʵm-0Q3r\P>9 5e5oّ?vj0nDr#Xqwh81:9eCfOFuM@ ARICAn~g=_5gV`UbQB(`(@v;Zʓ|5͑ûbN˥줄3Om-MRy:w}1 "0f&I}4y2 =}<-PIHg,-㥘ÙbW7q!0~4Vf, eѻp]۸1wuD6\0b.|a؛sڞy}b%wNP}P2~[>A <>~8Ḣa}0n3i爅14_ 5 5s=nŹ7#$rLNT?ŗ㐟|, , ()AHbXY )",,AH)#$"((b@A`*"ȩ*( `2(, cYcY`E)b(aFU"EH)#V((#$QdAA"$X`"DDQXŊ1D`U"0QER !" AF((b(XAXȨ"*bEEYR,PX "B,cETHQ`EA`A1T`(E" P QQE EA`EX "aDATXH,2k"\G  }_O xQ R˩d+u]bάը'Cp66)(,t!<*.<>3WiCzr C{G_kj;d#dWLd}|iQ$:[9*nS9+0E@[mr֥ f&V}ETB3*"@حjt/n{Zg;_b0 ɰUeʞ_wt옣~gwUNm03ޖO֜CV_ RoAX Nb$h9hHoz(H D Own"x7:<'6N*8tM0ѫ|n<9ugqgQzo4gyDi" 0IU2NYig CQR@O}?f0}Cm4}^L[LCspr^=_COdC gͻ#'+[Olx*mZZX.H!9.^12$Rɸ]9L&&읤;Wl5uw Ѝ fX9ς>_;|: %@5<߾>CʝM=._ӵ):v~g_j-ulHCnk\{Os7iir$!B$"o"qM IY:SʧhBȌDW*',e;5V'!䧢ͻ=j)XA 1?Ԙ,n9~&űk#04Ny|nb."ݦ:6bm0$j^9{w^3?XH _ ;!Պtut A jS~ 98` P7D-9a]fK.uɉh q'_V,`?:ttzꋣC<0}7/~֚-9׫5xeDHF<6@ Ls;3lrfkY̌?cW-~}s.-Ӎ1njG]HÞ~hy 3=~\TזX ediTjĝՅ-f8&l2y('NVsl~+j&YԿ6-ly6nW$XZޘ+FIKDRѡŁK;Ef2# = !4$NiGކE,-:7(p%\PCJ*@j'Fv\jD~H2yM,GoGij!A>!#畺>gRiAi 0L)5``!-qosfu7Go`a/95i/WCy^ED0*,N!=8rr ; *%r+9=ynuGΟ똷 ekRŶCʨ6w+fȅa/cc ZƝՃʂ(:֣ 't6 J ^g@buwõ:=NPZlFvXէ *I4 &6I=[.?'Ouj5$ug (&},|`*F5m<[M/Lt)jneF4X"jH{Hgbo`3xkڐ ˆXAɈQCLAUdz9oS>3Yq> #&buR.YQ)p{ҟy~Y+6VD%c""e\U6XdmYy>J6HItg:Qɏi& HrC4K;g^^3> B:4L8 P,}uF.Dz`d$4- r\HvyCђ3R͇Sd,4LPN6R0F)$b :||-/ Tv?\7XPSCGiT"Ӱ^mAɂ,/~Z07jMf{os[pTcI@#-T9|ugT/ X'㊷* ܃Ș.7'Wm=GfgeNGlFj3ʁ-l 8l-T8b31n7?̫v8baËs۱Z9qqcg@FҺzw}6 F?NS jNM ǕIU3`4B47 q"Sɴl2dςV4ҝTLݞ w>M~׮hyCp O95y(dե֛9q]'>CqOt§=8N#f}\ŽwO.m~[f40  Ym@a{3ʈz:-7gdLY_!*Oԓ[~rlMr>l1>3G2#0r![Nı+>Isyv.K`wMon㥲do9f%Ap5#G2CӕaC6ox>Dm"g=Rn>jNKc'xGV>lח*(C?~R?V- [0eðaWxoOk{>z9u\4Z aE?b6ds>#V8o1oѷv1 *=}}-،i%ktl{}8w6 75}=1+ӱCqba#A2NX`K>P220ǔz@=:SURe݊5G= "ͽj7Վk64}&H*޺+ fv%h 45&T4JTMtVz u:wjP|Ʀ[+F c]*HDvgAVFӃPϭa-0T>O" czΌ) & M޾ VJb/")}L"b P&uox3Ij ڠmG+4{8i P*+g)'漦+}qaY 4:`I K[)r7l!'}TxȢJx3lA]DET4sΦGWf3ENF}^&uч}QFK̸ŷ%q:x5]g?KQʫʩF+]u 3opR-Um^.%.BLϚ9:!LZjt{#HLcg&@q :\xl QGIW ır{|.o`@c~:2׷B9+pCR>uOu::wYU] K&)B`" 0tf8XmP\[ Oq  VG-|Nh])P!j1r)Ω6蹯x6/b9ǿ$߱*Z7tëa785CZ"@5\"#c0F.+D~_f)&~y4wYJ65Eѓ)49VIƱJfXrRSOD'9m". 1-]6m}Ċ}}3'@VE f^>S9jDlk \wu yțWvڇ P8ˎp&:چH8;V3wl:#giC r'ȻL>1 ɔ-Jf36| uYx\JJ#`MMv(Ka41$&89bu/sf 4ɿ.*q+w)"uMI䊭Pƈv. Z:{ #[7Mgo'S8=*<nUP{:]]L䕙C^3Rشx$fcs5tF ClG^Sa+DlkɹV5`X^;2xS̟<nW_SH342-r-q+ TR#JP}#=[}@F(YIJ,hg,hNJXհM-Ua8"=?~Tδp6w0Wj068\I 뉠;Qpп!~ @";~~KAKz1ԻW&e<`Ep  uWfܵ5]O{<:]/Zbމ<5[ N],ADȐGs8emf򝵾/O>O ȸoB[B%NxJXlmoIo9$v06UbiYb)d!$+͎hB+lL|Sog+n(Fy?}:j C.mHad)^1FO7=߯gm=~VB}( )5[=nF|2*6'7ao iW8S}}]h㟣{,$FuXm `V߷?(GAǔo=ȩVV<~ ^~6j)4!fdAncY0wsTW\B#"M߁B.,Zo0|D@L ^w| =;Z}ܜv{[{LW̌FZڍ%DGQ jڸQeyMikA3qJOy,ޞ@Y#{gM1+v-`bq?OqyeZ6!h:]4,n{=K w;jNd°ow& KYs}77駿?a}#:tU$%H$RBG2o̟|C[Av3 F|g $=Ɛ~5@\+4$i#_۟FH etF&lZRk)%w;: zCm~M{-R^p*y78 ʯ?Ӵ_&Eog]3KC[|8}u0I&Ϟ/4H+& nv^o=w2auov9G:E DF@t+O ?>zv?b#}$(1A$@/ߢr/tړ!>Yko:Η3㣯Hw6>QCŁC===jΏ˵pn {h;jj2ZQ8Nn5ZKy7[:߇)GAGmUMA`""<@‰ᯘl^4%jcL$#Zsׯ w_'c,I:pȐ0H'ޤq|@ȏB5(lrt 5h"21V:}u5敢f)~ńW2 ?hWY|yMoQ8؂n3";^gU"t\W>~_?+ `bRt3 슀2fdff>aǍw^E6"`  `":Cp C*B%U LwxA.s75+F|^_Iσ~Gt޿-1B #Cǡ517kl2?AqxYOL|"9+RAUzm6_uaX5@XiKm;>I}i5yI>D HAr!Y ˵hzEMF`oc bf-suu r)+n#{皸x-}Ÿ?@v]voZ-$xO62>w!@Z Σf.av[mnPky&r~Fk~/Gvn3b~"1wD!-,j2"A)S$f9;řʂZ7z8a`Tx̯}7sD|]jQ a.KB`E~OO3Ɠm2ܥ2P&/mWOa7}!,pnF@ 45UG̶nJUCk ̥*GE%q{YwaCA8HA PJ.秺v5 ՔNf[Ȁ>LWAK ks̻w4EE}U`#Gwa$l?:gV׎g3DjVO`:)r6I#p b^Rd-0q*+ +`=ZP jc{.rt\*o,3c>>Œ\<8_>l cJd:pXO#ox'\I§Nu{Mnhؿ RQ(B2[+C|.uCVʑaڠJ][8qZtG ;u_=pҕmauH WvSpu<=g;vFo$1 `Dsƞb3^c:uQ4L-Ncd)u!4B|[Bل-߉$=x5-ʚiW\c̴:<՞y̏fVl~pz6'9 " 2༸oQ% bFWuۍl{ءUU.SWLVb74GvprI#?Y}1Yo)qPc|'R䒡&ydyr ާ5=`& Fd }aSy7v*Bq Xiۇ1Ctr6!()pDSd;IR}sF î5{IY$φ3-Ǭ`A.`z1$WʩEo_K(%R).!7"Rz__I z,Xլ>t<H%DJK&sjw[ojśqf3Zyj3.a|zьFCm&Y]8-w` ēt da Pv0uc52z9T UoCHTwSEs!srSۧ񷱰YP|y@Lpy 'Y(P0RyAAU`T=WgF\Qݲ*P4W;0nfQ hO҂WspRRa9R~$RT_Y3#;=yR.21ԣdRY}>}Z"3wQ P8d8ks6٧6Av2!&edZu?E pSNl/3u:b0 O~O`kIҢED",QJMS,U9\CVE ހ(>P _'i/U> zBw_fxk$yE"h`8ߎ|Jk̵b돇do n=4|6t>}94_'d Vti`ME"BDWxuxf'bMܼFu@_:#ЂXA*z$ԟHI6"h!hΖ0!McX(Hglb=BR6XUM G&ɴb#sPY4%7PĄuYZm+un 64q0՜q a^OB6Mp&4]({ЪoWO#NhۣӕI1+!nXBI5=U>F}>>i[?(u n}:;Z%hdL)> V[B}0פT7M] !٥lJ>csFFϚytኰ !'D9\KQHϜR}OoE lQ+ior03HkU2,A(V!ѯ}i> kȗ12p|B&9)h}e'g(h5SjZj+a Vg:YM ph2*)[pJPkJעB,9^DU D46y *{˷O=s^{ r0 oP^:^Zw{m+HfEҪTA@RFF L1 ~dZggWOEۜܭ Ȁ`1$X@qoF=еRdIl @s(dQJ[Ǩj3S(bhR+;`__5VQ;MX#%5^ #*PԮJuiod[`+=*!" ,Hݲ(Ξ,lc 3\ $Q]nq=Z>gdYdӈ;ZhZH6y{aRIynMںP*H#pGcU+(4E=:z7v% s 41ʒiz0da8=6dA hћ%h0H-3_SO]b35!͢l}jDqn]F\,:9;K,|mI-0s@d˜r!E%M;? Rsm솝 bs4_YkEBe/6#, }_?~|O>V{cy B hq.uC2,M\o42+3"+X&;{[_e9Qvs{&P9yLTE0R{aQdbkGs$(n>m}LJ*Ұ`[} Hw,{6`DơyWy/*NW>G *D =6Bu+O)H\jy;8F?,dUOo_yA&eH8c2$ږWn-| v˄/R~ Z1Bޓ)jVd2 W > 5h4%ÊtjВ*Qc(@!B'T=)J!&=[QD V4!OMmR 9ۚҢp2#+Y.t+ 8qZѓ%}t=3'pgf QEJB_G6{S*0\x[j6 fD! ~DbgW[6u|Z:IO Y,⥘+n˛e:wL,aa%2g(zl0xFStHJE&M)bPFߥ@zuS({,C-d\t¡c'r»;FB,W ٽFvkkhzJG,a]rdtL@A[Aetᤀ_e/i-QԾE`flin5R#LiV`9uj7 {,9䝊t+X\9MgC{9KL;.1W n 11B n#@¸l{ȃ=x1nfM+Q̿O&fH- $ 1ȆTTO>gdMukѽozUڗ#tF_:Fa"{;ٕߌpݫʁWڮka Sj]Rh N"&:dI:hQVw9 B=)h=prsk2r`غSN *Gde \4t*U@ŭLJ) 7ȧx^ǜv?^]Ls.{iԙnZIk }0 7~N;%CS.Y<|Uxb?s_kKNM!H@ZX0 S- 2˘ouw'c8  101$cOܭE96OQkU}ǾyL\ <(mc& )9ۈT s'pl<4vǵüuΪ\FeSՂ,e rǷ&fЫd0g-܊ ]f>e:iWF)V 96z҈<}Ťk<7ΥHTv+}{9O޷1<gy8#ܨ̈́x]E_a+j&ZwcSà u|T;%J!|^Y~ k2>eE|,X_T?\KcQԭZ1^Y~1٩)URq5V43` j\&jB&VVN,xꅃ=$ ,Mb#}Pv3䳃y{*&W;m8=2#{MBړwa{:&ըŒՔ|cu{/RQɯ GZr]\tkLցBwR&J٧lFcޯ짿/uLk, G1kK' y(6Hl1qٕLa(7#طtR )jKN}:*"&iTݧiup{ 17I}Kz;?O1ȋL'b~>VʧR yCgiZ0*Ns8JFA#_{?U^קmG)>狸=mI >{A XD#Zy{[ף)=I-^pDɂDj){ r+o=nS_ NDοd͑6 O2IB۽h8 9zS9 ? >_>4 XQHSUy-\.(Zڟ g[`@ČEerX~A4A&<~W޼/'d`c/`HI68F̏8_n u~}U%Qc v.(ж 3qNɗ_Ey"7w~_/qOs6( +5@)Xh $K5.94П`ƥu2noYm[u&ø+.2ǎy %[ iJm͹Vam.S&?f) <ʆp{Ty4 I z5M&[ҝgjp49Q&`w:S8AW> x&Dktu5 = Us>_m\ 1Z;){Q\c"+pCuВ]ǽxx)=&ʌU$Yv=sт{Ke)sKHg]kӞm[ӈN1kofR6vpqSčR~N=O: 7fcQۣ!;Hӝn'QDzWʃ5t̩&m*e8K*6#֩*#dJtZkNu-􃁵 (m㤆:5Ι4*Tt_Y;7݉ҰpO[S|hj6'R( *Frq]n ?1#fR,!كc"} ?2겺?& 0^lT3`$#yff~₢_?;GPBA !p$ډ H0}/ӢP|{\ٟb?֩k/vX~fz|nY= {۹U[i7O+>71>7/;i$ aG{a{Z%C(jk )!([ڷTi?々D@Q YF(VX~'IXLj'LL'3m9v:5V X( ;r0LlV0\&z(4 ]6y\isj#' :8 A,!Ͱm}=%dclzV7żMz<s]Ӳsgǿ"}}v#7y}ϯɅ|I9ȈE)>ЩSZ^X*17o,DIM$4B9ܷC6l8@ DY@t91ϙ?>Gty4٩-&k}͚P  Q Ǘ??f4\܅<:Sŵ[뇺2`*mss5ӽ=g]u4`@j F#Y,f d oFsTtGV#njRlP| ȔCrY M "$|ҨOC)JPy G2VcQ5o| Hu! wiLslɳF;YMMR58\Ɔks.x{|M9mSׂ5!^TG;;hG )ΓABnN0+DI&^q>zWgwwf._G617u(gBwo  WN= ^3hxy@_#& ٗ_3Ϥx)b4Vs %[xHgb4tҏTcs6}_oWmWݏbs"14_.cv*PQ7qߝo4AiB0 2Mti{՟&uDw$ ;+v?/S?f8ӽPP2GdVQU 'x5;{X쾖/IڣKT=l?'.;6?ڞ oH:>s9ӍjxUEXCm=={ZOze{+X cQB4TӀi }ZXqF*^ #tU͗w*5 ],VVDw<Oh7R̄&Q̩>CT]T )5ΪYHt( r %hձZU2A h"h4bFyhABBQ` * ?eZ4NlW pt; C$VM-B(TbHuSv;!T-΁K RQޅ!,u*/*Jb,كA?R Qi]L7AȬPTRQ Pɑ8(8wMc::l6fsÞيN 806fڤ+Y '&l}rq8B ŒVCk@+?;zwXa^Vs} ʧIU݋e=|OpHketke9>%gc2x|wKگc#{t]y.Bz3Z=3H|޼۩>`Fc/x]0iy`gȈs#L)boῤ~k6Wr-&24 AMf! ﶹih+`m ZHgG_z+?7yW*S|i=_z]cЫo1{Z O YH6v{G=M7@p3Z^[UFw_?kХ`V01-PɆW^*t !;c\tm&[fJF L$G + Ѡ%%͡: nM? 4VVo8V*x@ ^Fxš$%er ]xUWRY#A#HTR*,J<0pkˈ6݋n#SV0j"PB`x;6b!g{dkO_̋=CPNMݳ㚔Ȫ%F9UD*> ƼɺTKkD{wW3<>ʋtժtU1`Z80"SL89N# >S﹏Wq@K?Ac$U]ʺ^H@zkI۾}=?_w4O8ǟoh8ߞf=PqGjUk4>Ci{L}lvm5[e^}#뮿?h2s$g V$D"P4~I"hZ mŕ1qơ4d&@S.xleDgoTPqQJ\B~ڻJ6;gڈ@K,E ƛ?ၑDݎ:i 7 Me(9. 5mu=/ߡmm[oJ/S@\SOAK{~KWctt]]ȩ|@;[P~`&M/AD;.FbA @uRR@_GI'~9[xit]Ëik^ǝ%rfym[#L4yQͫ{Kn+O&|ʓyK}nK~Is9b5;?:WAZ/wRoaI~g|]vGCWǩyN w7nx7e>il.|_wx{ov= {}_E~iL[ ߃wqg}ﰼ{l|kz^/Ϻ5=zֹ͟J;}]ު7wqםf?]\S; QNj1ݳj< Z5}W_~ tt%W%0]zb _–{~a@sS/QH=<ߗfqy?+c~ױ)<'Cm/Gx|  0*.2݆^=zǩ4Q7aw^Þ?u]?vw~纭/? J_T^{;.Cka8u^g\wo%΃?߳Ք]>Ӣ7Nqy1gy6ϒNnλzjilncR9dfб$}7yG||0xa 1[}>EX-HmO~vr#'p*Cj c$*? 8JB_s?WǗK:@CQdPPDQ38dQf1TUQb!9xn^x̼=Jj\g-{m "  _mdy:1 斉c-1#ZcZ5m`#C@uڃ?OwWUG3:|EmJw== |}UGޫbb};!V$MJI BuqlMW!+i|ϧGI"v1t٫Pϗ]6dc~\O}4h'}odx)C Xأ]LΩ$QG斞rvw=GMrN<A?˜i}[ praU=T~$Fth>+s[JR:r@7JF\m Jfsrޱd@1k/HͰ uXmE4+ <72 ޲\P9\k\fUDd#1G1!DeP=%)c7ڝDtf ': ~)n`8bAJ>Հ?ce>g ;mͽbQt6ḑY]͸jrl%l%>]s8MX eGIptaRꉻe B0aP@BQ 1V esX^虫ʛx$FM3ױߢ$6h`$EIS{ # A~5bvm۷jTef/tr 'H(2 )kg~i#~0`%&DZ CJ`,( w967{iU椐PWYbFAJ~1;N}Zu[AP မ9& T ?277(8k5V@XBUd %1WG}z'GA/5\G &U{ˎW3DuG@V])% k3ͯ[|(SԊCeAo7@) 8ѫ1bA\f.DRQ&rKȗTz àxg+sUy{V* &?m%DH_(InWLt̙_|Q,h0P>=HC0("q@>Uf9R&:-ׇGM^vCʬ rclҊv-pd`z_uIŷ8A%vh!ލp=a*#^9Suŧe̫)T}sY#Q@K[2+|_lhУ }PkK8 6Yv[* ҸD܃'XeEPrɍϞg=fRTJxDf@MZWkЀrP+Aą6-s3D"5u tODDa˹`Կ$g]sIl.LϜV?vdO'W" T+8P MhW8V|rq|%:JE ^`)uhs\Nm~+?\UgiJsf?PB~8+R[J-ͨ0f-@ ̹7!Q@_Y7a}hy#i\_嫏ElRFgҡP^2Q\ 7S[Mzt) d *OGOM mѓ;.PeY޵ޮJz߅u\ɵ>q_]rGy>d &"'Lo!}J{l6X~d^_{S6Ɔ2T3l&S^/ojðy-Xȏ5'9"2e⑽yVv3omL:o 2GQskRCJ{ o袍NČ$#qΰ=Xp#ȼБx` 2iT%Aqw;I%UC *}. `E۰} ]=[bmM=/o^p𠽀4u^J (* vۅWOCRۏw9wc[tn8c%5 N9 ;"۶7vv() ۳q]{m"tS{v*ij&w:*BֶPfhZ^֛mpQg-8͚&HKJ^v(QӮ)v iPQ(4)Qh(4Z@WAȤCmQ@}PS}v'a";j@P(U 5EPLڡ^{z}4Gzh,֊mSV[e@mjkZӐOwϊd#AM$AI%I}mЯ 4 {0xAPS1Y}h#})i{SB/b%IbUm,T=]h +ZFZVi%݇NP z0{ E 74faERX@T)5O-4;6yhPPrcR Iz{@(7e^=>;ԕ&wΨ((pDH(@s=t }94#)Eny`<@փ:=SuIs`;ԑE$PO{ƳH ]ލ h;褰u@ mJWT(-(  ҍѷvdujT a ֩AuYȨb:әu^ֲ*#Zf>m]2H= *JT*TQr:M>ڻe%B*g]Ь2&ڳj)D*ݻy>>Ϋmػ=ݽ9Gpwݻݙ49^0z";v.};}4w|u"g(Tm^n󳴡!/u5M%N(:G[ 4h0 LLddhddѠ jh & M F hL0MO!P|‰=1>g[ΆCJHR`>?Ѕς\pK439;8H,cɄ#cqr:J#_",`;*-ҵ%4m2 L~c7< (CNϊd)al|(~/3֐& '][$m+=kGG|!\V1UH 6HQDq!w`lPFIRhk!!Y*u-Q,o> Y壟L2kJ"}s TH ]@)Dr<ܝ鑗Dbk Xalut`$ U{-mgD$JIUbDi5ku&-(1ųںH#۹H$K'Ҫlڝ`e%z+H.8*5eqKVs;M_,G&dmvycu",V$n#]C02iN?X@$`5;Ơ`L X+BJ|ɘ5YL;u ܒI@ZrFdrВGW=;k4δn;&shipbeJy'?eX1BCYM@BF*Y_dF#*Buqj}j0 " l%-Rv$nI ':x|%\W\ ͉JRݯ?% C*d8vޭ&GڡIt d3F/shƿhxzhK0f]IٴBE ?$! VUc^??T׊붻+ﰭ~-L50Rk!O۪dN؁fY!L A)G!Qj'd~ӊR?[Cd(?}kswR?#tͰBP$7sf,ujgkmmg-&.QEy'OW?$Tj(ىEXZ.8T b(2#OQR*Rzs_ܒՃ2IfZB)>pSV`.[$g=8J)`)õ;L͠#0MLj ΡUd~њJoΤ~?2᠀nqײ-RGxG/U1tsjE[@ea O\y\8[ 9i҅uzl.r`c|#Ӣ O+MzH1@>*ԫ:Fµ>'>$ #ư?hixt02aT>NuF*#CzNtB!2P.[Ǩ1)Dk{L (Nd Jtr i|m3SBm'dSIR5io- W՚UAӥrBZ?֓Jo;h( cѢF'O֤|%/0O?},X[4L!&aIfYofB4@Tx\&;tYݪ)!w8X8@EmN6QA}#qU,6a*x5k~I[Xn3{,ɬI+2;\w LL;blMg%vB{k("#4AB3 qn 8 ._zס9L~8MJEfw8 v&*gG6/O9?6Wa(suHF3 Nv}&  &TÙ8[KG-RQYaS94f S~I߫Nr3r؄z<y(ؤ|]&{ҹ̰\6t=Om\dvI"܇jaɸF$N9CAZG2 :Xx+6XޓZ>kK8a|Z wUI]P:z(\l,y8V@& 9w93-wd<ř_W$/H{yԪB@pzx q[~H:4GLw~.%D30H}bx Ez[9nfigGO_4Q^'`/D\Q"_70" xwoVʹ 72!cM 6Iz -W},].2Z(™||c6`Hc = ͭ/~-Ӕl `yӚk}+A$@Xp}LW2lzoZxm9Ĥ IRD#tZ%ʈvy+3}1=vS{bPn$H/xOviea,9koHwNl#W^oU V)~c|* ƥsق[!;,i M2{ .l𙻈Sqsy:3\V?yKO|ՌQ_BfZ JǢ3yI}jZO}(I~obuYڿ)ۃ1a08AF Ώ˞IJ^JtRԑ9l%IɽeEMWC^lq3oڜ:j4 z T9">ñ=ܔWrg)eRa됾)1sFzU |~RUTܞ|۫Agsd3?#5Rk9LĤHQ>ndY@(5RD3s?CHE%xth)=B q&O- ,JWGj\ab.-G/ƎV9ު4y$Kt4 fsOy`g7G>) 'GvԹf@g$ VV$p!Z _0iz5iAqaSX(~Ϥ,eƾ*ZOh{'̶4qה*,z6ӓֱyo~23yZ21~օE͚_{99Y gIðgzm9&NmLO}:|uӸwմ3Vm WINUг*LP/LC$nک2|ĸE  WP)YCd), HP!>1dIqkz]ȐO e`,3 R@ɼm`nI'C.J5RȲCfavk|qo&[W6ݙjԥ-X.˸'zKE&\ , .96:3$Ս $%2~sfٳqU&|4&nӌn͔.\ DR+߱\k^{Ceٙrm2'8TIwݿ,P d2ʀZB$uc2g֨f$$;BxF@ '\y/>alEshz 7ֽ@X]?ygoÖ(U>OD}SԄGDMˏ <!">BLAe !*:,w32 !\ID`"TH:ﯠyn0?V)GBMH3!J@elFܡ*k,;͢`1ȝf^12fS"T&!A (,M4#$'f0D"hAe$ Dh$m۱k:d(ZTR,UJ"SR&FK"^' ө[@f䂈ULS\xNǞӀD zX}A_:(+r+pٖS ,{&մUp#@% v" $%Ӎ[-~ ҅t Β:()|9U8W t!K ؐW]דg$` {ngmHۦ뤫¤>T(̡TY6Hz-*y}?T.gRhQ!ͷD3XI (.>e,czֈfad`1RN.:/ӛ#ɭDA?cب8] CaIF0w\r!qAFdGsCMorrIF [ $dD~$$P5#Q|K @ BXQH+^ hIMbuα5D Zd10G؛NFRw?_J=Vu_9hSc w#c|֕(l}bi߯KЃ@߿<ή zn4 d G@.,HJgNy/违+C`Pc?X\,^ao%9hB7SPuەێƯ JH s#"kA$.~(8̾ "#A"LnRݷmnn4dЕ\ 'u},1(!1ᕉ2\X*QϕEk YK%W?7̽aBSTIIA!Q0 B^儜 w ?O=QN2Abv8.a;^݁QP,M2 6ٕP$Ȇ^cMDJFN;qvAy y'q1 $BDUG_]3L $8Qh.l' o4.UŢVH$'@B4 f|%SG!8yȇB@vjkeӅҙ10K( a n"u^6Zƻ1lb/Y8r:axiBUq'<6!`L+a1P-qDjt+Fsq#gDkP8r7qBGOo\nP@f_Lp&|߸ QuPCRH@8(e_?_@(̯ O@82)!dmFjJA;)|%F蔶Oɵ]CV湛X<\>s[=*i54 琠 ÉP<>#K_ln.dpVK)m#wRECb`"%LFz+OLtjwFCA7^lOb @ 㦯CP 5 `?a*Ҁhd @&GYqS(&L[BMQLz@,5VjQdd8ǡ#/uJK+OoH 4G@\-޾D>֫2Ua,Zqi^E͇c{  &^MZ64DX|qƔ j[ӎ :7W$RHEBg'ς{jFCN1X̅N.'7 Tԗ{#`JP(sS?jH+wLZ~܌VAN$I8'*XD@~BfSBF "U?w/]ꗇm;%`AX2-@IHSZ$nzm1Y.d)_=wxyTqQ%o\#p?>@`""pB·gq 0*+l0LڷWONPwNG'{Kp<'QM &YYQΥc2릒(`H>S$ |ILEWcF!k&ms[edCeb=T/e j !DXK\>mn`nUj2B6KNh%cR@eD@#/W4]^sT,i"o0y ki˗ܴ'T(T ӕ$J)3Kԟ-[;a}A@.BG0eeXfDAI""alx/4ofX,*aB0i2^Z(%ڋ+#YaH7 H *̸F  "LS`LLB(1-.]$J$t}cq~7SJuVo[Xݱ>Jo.TjPD$EbH%ēV׬*0mOP(R(v*/oUp^1"Bb ECb"8p<"IW3{Ã! zP2gI~Q+3)h.OgVްʹ޿r<!Ċn qdLWYIF p${8}8_>?#C:IVzO?wr|t HDpJs1ȌlwUH@iG 2[:jbO4(]䷀@y QJ=wmwGW TY)d5˸6 & m^ó;":ǣ0_yni jܾ:1DSQ `׺ ڸ!N,DM','˞%*(mՖGz*U){ٙYȰM$Bn~.)/|}(PwrV-X4  A)xX^U A6 tyAYDYvsd2LrQ Po.fTܹsR< ?]D0(?Wͥ.V+In2`%k;၍y Fwl&C{Qjt?Q}ʚf~MSvh؁q@~kuwMNl/ԕɏo*"T_4nN-w0bۊ ;{4u~21ġd`o5iEԼfԠ-X -X4Q\( < 8d{i`5ߣt=׆^>%lhaְMCf2]'$d=}hM;gKJnS`v@ Ŏ!KMY!mǻ{n*GqRb/0OY L`n4fU#(?"aj:KJ%ssI-6*m jN0Cz.Y FBw%q+mvĕvbjv''1Dž>w<e߯#b|?Fd]JۻE;{UQ9?5zRypDb}ocy;5e,BY&7m=W~Se:0U&EVp*A^!vz]o⃲r/GI~nnRY[9qLȍ7 IXv=x;^`91u$ 0(":PG=ɄL)%2Gk=(eUK|]S)[!ݥD.yĖ_IwL꜎P2{ӫZiPn9s/㏶E'7sU~if`vZ)<4eL9lA5Y۔idj2,y'nJ<Emx%!F) M4|S4̘yƇt "1邋7S4|w2t/nґ<nXKJVz kqt]`s7XYR:r&SSWwP msNS{o'౩$NNߝ)[f^kvqU_Z:6\{Яq̘gS` a`%o'Ωs&O3ʌԁUCbM܌ `Q37J>ٯqnz9?Aju o:ԡ4n,s$̶'IIƗ5DLZx iW( AZy7F=}G-}wӅmR<|V5/ |J1z$}>jA6VT仾8;@"^CNMU Ք= _(7Q9Wn[3VF+_S:5wW9Ak0gkҊY oZ #4*@̀n)7^F #RMmKK,+*gӆ]jKgo?>3o1c1y~~tk%:}X+*Q>4e}96/wE+Gcn{sbRt#r-HSsJ|N7_`F?S#J>Rcl[ys_h &0X⭂ՎTFp|iPܕ3`_HOǓsw]yhoGL;:|1v?+o)tӆAZ%Apl ᜳl2.}wD_# j[u"P@I)Rp0kN5$ 7ۊs^F!Ea( 0ĉV缋ˆor[ϔ `T%2VHj$L%nnOlF ^9Ӄ*:ZwQCx J40X; X`ḇ[a؊#iO;i}۰?SXTw:AScV2ᢤ565"f^Y!t[% rY1ELWQ4A` _QEί4t&mfg+*̓pxGv,w޺,7"0Z4q'RĪI[[Ģ܊̍iϜYk.6b igHFIXZ~Ȳ /+i92iCLL1)7rׄ&׽!C*Rٛa3+92: :aKv ]ʻoBGzԶe}T4oĘ>G |]][Lt=d2"u|Y3%(R/[KUK ?m@58ts76%\_6HuWWȟ=SV%IB԰pjIW *ٳJ$2.Zb )~݄n=(E7p?#UŹԊΩ6VgJ]|U3bOG'c}c h(?\wl+7Z=531eOz(VSg:t?[in3r }gy:ͷa:2k9n7sWE=Mm+9,@zAy˸OSrߍ`Ǟ~e1ӷErq}Y:mMyAE"fJ.*2B\x;/G/{HNNt[!]R٪f6v Zdҍ[w~tIfP#RDJ&(" Tf'Nm3U䭯ւᏺ@[1`L{W{vm>c{e[=T/ḃ'wnW nGgҽmnﲞO/BK`?ǫ3Qz-=~Lgk{c.m2u4Cεnqޝ=*c 7i%H9H[Z'rVL aײg5avq&;sGTsl;uLS۔9/]e4URV6k74y TY٣yg_8q8/+Yj~N}XbD]0\pµӞXIΰ aw&t1ELfHb'B]UDI)z}c?qcit?_P9I}xA<Ý:sBטL(Fw&"0AC00u aJ$l'/r4"Fb1Ll4gx8ԼƩ#y?ԮRy㘃:X#T,]}x<+'СmavHgs͡uIwR'dkm桕$OwvE".8bgdG9HR9@I;38GOA{A?TF&2qǵ}wRa"N P{E$=%N`Jm;PK #^{޽6Q?RC} |yէ;J1EEF#oX||>;緤A,x*\{~GAߥO_xԅ1HAqt9!E#RITUZyz"2 QZ-ol_j_j~#u|r"4K/<Ti?i%m(GyFfsN·WS^ ʉ9C}6=d,;o7UXA9 + 4Β\iH~o>C?{ UY1l[%FҰ/xme(ưgXRh% o<.1}sopiPtX~WN1t"8PX3 / ]+??}rFd,"c P(dZLL਌R]xS^ڼϒK7lރtiD"Tb&Np%dgR?S韥0r>=AUU.VNхx9gYiWϜ XXo6EO=9Bi|ؙ*zHO*sHh.@h,1]*_T^Fepz46I$*b{BY}D-eՙqH,O'ۼ=z&)R,b$|$ Y/NqM|lɡ 8y6L֮W;HSVH.QvK F \᪵jz6 X }RS,_Lb={mrHccȋֶxл6˺'Bj$P ptH×C|͑fФT_H~x3649]3~p[\gG\ O}_S;^< oF))BEQ)8.e)J&MdzHo0f}dDtu)q9} >OJZC~ ]ypoq`;b7 r~v߭ӶBP;锣viKd`.Ti 6y2F^Qt^3EJIL H1gou<&$U.KٟTk?R2 )@Ip{htieα}1pRxyx~|y S+fPͱFRu g?o^opН*wKOd#Rь=0P;z "e1cU쾳_CodKRD%+*U"6K(l-- T}*Hd4 rnG~{Ӝ{GeDh &G <ĎYY VbHEj+R˩2]pJu@j+-+iBy?1'!*"310˗ ǠVw6cm\B7){АDRF{5`!C}e؁' *K,b`J94y, ԉc4Ns$H ` ${{>J-S5l&U tQ %0UYH`* H!H "6f)"Y$0EVm)"e)9(f씬bKRu=qnsq%띸b߮3KeM<⑚ T (bNphN'S.J mReY峯j Hda JbB,(KˬWv,=]Lyn+@S60Uń;[k޸;5ۖH?sq^% p(z8f^l;aH^hν>z/Kai 8psikA>eJ6_.1 e%Vg-U| n&`nYx‡8}΂SCa!PlhB] (JP9f:VkbJ]jnZ)PMgILM|&᷷ٹ26rcZ2lܥB$ .&#]T2X$šq{GOm.BPav4{rѕ)c|lEͤ?bk9atW:2IX)FxȡVPDJ¯}~kw#7M&9gBY CYS,L j2eG5^%/ $@{i?%5n$H"ZK@vDZPGKV,щpH=F%`D$m{l < oT'`Aeģ:pk pBWTJIR BY<].+fU~Gb9ZE EIL3|=ށ(3DDJ;2{> 9*ED`!@}N&ГSP*9$2)YbUFɕ&D~odR喨O @ !>?Ꜿf!Bzybn!x$K (Nv |KkU(P[4hfiDAƙU$.u"$($c}"Ks%a+u4[=ZL"Ha'CӂA Gosj|ܓ1g""Z^igr4 aTV ×*q?xrfOek)Z^&1dcU*cGxpf. .th9)1HAv/[ (7x|UZ4}OEx֯0Cu W0/ >n"R8n -ohmM,4^8& !`Xȹ3#-zlfl bBJE}%Óc8 잮C.+ jGA L_R wiiLeW;LejjBuG$pu\PG6xnD~ W4r{puظ@*H ZFISC1gaW ml[)%gt[Lq#uu(ˠN`ez2p@@FDF = _c #l)5&7^֦0/c/D^`"IbNh۪;7ಪv#e-mT+4;QTzbS9"wMϛ$!)y2IA+F$W 2 ƂR>,0E@D=yPċUR@ v>$gE$T FS)dK`0Òwr]W>bhgRdY^E1|MK4A2H pL8Ǝ&R"hNCD4 G D1&pR+(6u(2ημ#o.JypO-*vV`"B 83i%<,Vc^Ѱ,~KՈ Ol(EW )|#kSȑbH#Ggwha)Q:xq2jV;1c҇\OP5 p(2 SqJL2zOWcycw$nUK[>4'蛐.2WZ&,yd%UuV9AAQ-V(bnQNH S*qFA<#*gk_K%fWA2a7jS} >`(1u8Ă`c+Xň Y;$9>Ή 0R!)bD m:M|0wnԷS! P!!Lc+RKן?G"߉Ǣ"TtxjJ~Ȼ(CP L29;з)~^yRO"0**bF 1"rx?w( ZYR@͵ @]FVƊ3d@P ԅR2Bn A!T0FT' *׫nF0)x.ZH6j  # Ha@D04Tf׿\|OC~ȉ#QTˇoĢ`;BIBvB{eV)ɡl{\ hӜᬅOA"8n^~ Ps_hB@@d?C)v`7dUJc@)b Fȫl -5.&4Vm0n%,7b(" %HRUk32p/p@5{c[ YnYzPy0T}^cp( )p>LJ7g.8MFl31d1άeή}O_9[ȏov8"n^zSҳ0 YCX*ذ/bAAU .l>X!Caϔ8pgŰץG{8C+! BURSŷAdYWx us;cf a$THp ]ߡ\.7Z0k}IQa=mG5s0BKJHD%P9YCӗceX)wVᦲ"rhDgpyFZv 6]#lUmR3A PM&PHz 2$f(o0gLyP⒪^P ֫Uۢ0!nj/tn6RԴ-5)*(lPWpT(08۫@ M:@VA!!D$5Jhj1I.(Jd2r֦J7uWrb17^҆nXR 8衁r"ZِF* \ DsRIJ VBaF/q|,WW5}hg{@4 +s b 7QF"R.+ ިP\$0bxAۦsC&\ܼ6A)P<րxN[FaON2;l('黠_eyI@q6aZ 쨚PHƔw$G*Ei# ,qRPݎסW+_ȦIԳdfd`ȱd lotL3)P | ZDT5t"6]RP 7g(q WuUu\BQT^u캫kiƩ|ErpuS{&En+ r<: )jn|ݵk.{*}%*4Mp؝/ч#c=:3 .-o%h?@{ݛA=&(0LaG'QG]l|;," ӰQw,գ( /BP@$Q3g`p` DÇV:`(c}'u#{]y0OPIk=5O}8,1DW"Q;) J~Y ̕F(GBzwdG*s>H 'ࢍ^~CA*Jw6*" "1U9 6}Z[(&\H2)i[3#DƩK"far^3tf"oA# T%W8ߜ;LpJ Jr$VjDAbҳs1~~q Qxo͌ҠwAb9s~ U(2?RzEۢZ0K4U5nzboH+ɽvR|gXb| L &1A!d&@lr Hb6jABxp( +80mIR\CL`H? Uz1ה9}r4)s;b=__sSܣw_R_ ͒~=!*^'CYyk iDb}L3 6'6-ju!q6_vg:ZQV`&*SI JyQ>_ r֮WZemC,г~%˝9vw)06Ա%rDO i+6“e51KvܺfB< QDFkc+ѣLiާwm X?O7J=:S  B))F}j$h7۶vNe٠QMGt9 fvNg^d3ѳPAjb׊rP1"J-{sNe҂ Ìۡ egg+e1YA?9n|EM[tl:_*t<}^ebLl&~7wn7'At=0 6k s0 5@bKl Qb\ #b^z`i SHѮj\rABbVV&$хVGBbdpZ`" ل& 7`D()D:D6$`3BL6UTXHfUK! !ğ1fQY[* H+*X^+ǿ_Cu1vc|~b`TzNlX3\ikidB13J:ZUNz+JÄ쟙T_[ƹc sS@1?}Bn81%8R7X۫dkN& AeAUV  cVL:-n 1(KЫaMȊ9ҰHCxy pIj$){-F+}aI#;U*_lN*B{6 zxU,T7߅7;a$u7lqywкL<^='Q^뒰'?4rTL7˜a㿔Gh;y%'!BBTSwst?8=2p>,[0ߦ14pk=yǭZ)]Nqѷ?g䍀Pǟj }dPz;p.@N$*OUPC|ϊ=7䰷U}o!ȡ;UVJ#/w{4}B ;@#ޜ> udr>I}-ݽ<)5>*"G'"0T6mnKə/C(9CF)%C/#=@&?8{}˧b!dcD2i 1)t3Cخr*DB{szo=]`ZP]!✗*WfjvmQj5wE7Z& R[q!V)d0nlNw)Q-lM-wf-|R 7$E,-$澛\¶ml׈0-VJRkrG mL/ iDEą 8Vsέ@Ѳ0T@:QޏrR G*@9.LvP% RꖿI2\ɍ08NJQh22(JĐloW pIeCe+Fho B+$<Ջ# `(9vNvVgQ AlT#lFEB0p\HyՐXjd#_NJbsY^UCvU5dA.uA4~o $1J@W 3  C!VDҭ4om/,i,` %eYܡy\#H %L01J}" XzMHo3f%>=6bQ"Pީ-$ٷFFr<T9>;Gj9Ҫсv,/Gl<ޝz8 4is8@.Sk2YAo $1:- ;Jw |)>TJ\ЎP:RaܠPrJ|T㎦[i_;Obo'X}0C^%;s>'<%Hk@c1KTbk_xy*|-Z =2믧uZ0忭C2]` Pj+}8<(rgl@JPoL#,~ǎ 1l=қX6O-P? &+Tn +sHσ#_DXRc1$1##@q0H2ܘ&6Jw1zJGE`" b2A(GHd ZjEDM zW@^((=`C#/Z05D l9(tb :W20ՔM测ج~7bE{=M° t8ebFHxX9De; -!}Q^6(jī5)d.5\ՠ 4r/QkY!1QH P2bQ\vNt|VJ+Z_r͑f1^֟S-0>@YcAs *9Sd uyG_`,ՐЏ9zdB<ΘהO@($AH %ZM%G \}*&5跘lDddŢ T$]ŒufB7%R  bCjږ*2LcW.T d!T%fY Lx۹b׽0`ݕ S[C,Gox][J96\0 Q*}O!͋-U0)uGK4C}#lJD̼ Ӓr 5orUΔ:%3Ou oZ'KO>-*ٯu/CƸSVMgZc~g DRxvnB`=l tľ^7:-#̛4s GRo`bPt"*Nǃr T`*lBӇmʱZЋT :cK=Y~+"G׉ՒUe!oǿ>Ӟ?@(U& ̜E`,CsԾ\5xEYZmlD o٣eJ -s.l %DaWpA/`Ϲ}w#(7 EŮ̀.ꅶPFRJ1%rZŬI(ً fU1cRX#2)()L :ԸF01>'Uڸnܱ{AW잤mV@7ORWQ3O)eC=%NSԉΫD 5]lim={Ъ琌ASG(PVC 4 [S<1 $MߟYG297 2c[gnvwͣ˜+X$)PBPGf koUr?Ӝ#?%lJ0>T[4ӲȀ9;R(&Bl*/A~K,v]2i xI~'/T # |m_P݆JѼ& >JF`khu7W.[ (a(T ,s#F.jr3 Z *֏_J! $eLv j}JvxolUsCIl N\=ջz`DeC )չ[])G+\f㧞T%~',@k ̖pBL@Յb Q$ U\;݀@g+ݩ{;66`4# :"(*gEE2CT*hΐ %(fv]X(Ѥ"b>{Ƣ2_ m -)˷¼uM"5\ΈW2ovx ozzdcP7#neFj۩Rx ^ Py#b= l<Ǥ|'$0 #h0S>5nKfq|iiA4rrg0[00N*/C"Rw+E/ڗz߄>ZOho_g>z,OOC#Tw B Z-s >g7 Wnԉ1gڣtR 49Srm)BXsKaU{=!6>_ Sqw>U >sx}"4(QZ In= ddTI ښ73;6^5 <:؆&!e9`17UF]hxH PA !A]ʰU ^լ@>׆ iG-ѕAzOmMSEcOQy$ eա(]2"5%߇|:˷ypGV˵Rv%tehl$/8|c'Aql˔@qN k^.A &@ QPJ"fcf~)n)TqL<곩m6" ;Ў}ߏnDywE>J*H#Ƅ63:}Y3A:¨PRx":e꫸X xj\z;oQR=Vk1R+^|+Q`w}OU]]T!v.Ĝ^uuxv~{2wMѐ|M&&jj{!V qXɁy^2R55ȦC"yYO0l|҄HSHc쵭_6ʾtP@Fm/0~Bħ2ό7d @/zFa6'~0@ΟKS<,)^s읉KY宣#SP>oy Lс*6V*;5y &ES.Mp{` &[}sˆcsq{,6n``T/S8H9QjcUnC3C_%VYP\1N6ZQ-QهAlmNwms9"zIR:w5LsV]_=ԓ͛/3 ՘xufyFp T\^<>  ecr8*[9cQA|AZlr#B טLF3!0o8Ld Tֳj%0 =.bBpm#p'.l1N\ eZQ'" uB=?$V*e~+(kV۶'sqp2yE $—U6~'Rxft4;+U4R[EW:>騔T󝍞2[m`֔=׃@鐥ӷmݿ޹x8u^8vz䲌N5ZxO+ ZL*z2M'}*K7kćnI'XFW MW5O  E∞"@{"TQ@6eOo&w ˞kp;P (3XuOH J%.%*qxgi@ݞ],kh`B!(p4IR}`7%_{7Qض"(%0LbbJ7|@n;Z717{/`a˹`1"(" jzSMM(Zֵ&A$2PYQVg"d~]첺f xJ$kb,l!&eǻ4URڨ@<%,Y/1B,rs}ҝzs}y9HkjֺW{B-wցOűĠ,wqW@9LCw=EϾz"Kl>~D|t3B<z]+TL) D/O LrOJvDC;U\] 1g Ͱ)JjK 7L N)"Dϴ|Wc_O꽉0H! # $;Mwv!S$`z",u 0 c2 H/F pPUy!dT īoSdqy[jkC tgܸ4J L!Y,/9 x&40sTtoKG0so?'Öuu 5r ?F&;?&}k9 sk4CzxvL<+s3Y3J9+ޥZ9Z6υ(JL*`&0T!&=]$DUKr (Mۗ/ykc@ 1P9ƥy |C5X_q)p7φ`, >tfG *(LRU|%iBbh5^wAYxlog,YjLzU?aT`=93]P6)@*C=LuMĔ] t@ZCr} (M[lb#4Ѐ 9(2)d-dAHc8{L6"0 `TrvT@ T,?UpZ]޿ov Xz2&ߦk}z P<).#߻.s뷧 ޓuQXsͻ>TKqca&vP)7|6اC+ᐡ1zy D & bSA [!VrYUàp!Z! Tၢk8@P2fu) R0}mK|^[CB-Fxi7y`Ka?O,D|8ew(B|+Ev!2* qͤi@6Wn־LUf0//?Wɯx -(=͑nE@BE ދ-*f{2ǫD;K:ɚ-,_K|c:a=1lA9X[o(?wm P8ْy1ջjeHLB/6m(0WPEcP.E~K0CbmVv 9G;5lA ψe4URoIaxϛoPl2QIZreL,-px-)xέ[seuT3g(F(06ebcGb4΃Dآ1j@EȨCEȀ62$=!N_^:SL@^]υ>\#xRD><&}[9k. /7V54z ] CVRlTf$'!BT@z?~d@YhÎ}=~?ebZ$S\o6MO{ѐw}}|XSi0u_& ͶbG*pA-.A"^k8Rxv6Rs^JEPMto8kR`f_ d00ܔ,-_٥pN^X=xR~$./vZ1tf2F ƌ.JRbLۻHZH;R k2M}4R*kX9DO   qq8h6lfnʜaGyjGf˨,BB4"v8@l%qĴf Enpܻ9m>(@t* hhP@%) B#3a֍!V Sj(!#o .vxU!"զMIpaS\Yg8Xz˹D,:< DHEDJZ]4|f(H̪U*B BMQ+IZ * D@3O:,e!` T*:%g?Ax( >Qڰ{ y(qz}. rI`B>7w?<= xֲe]]Ia٦XC"s֬r:鏤\E“%M~aм.duW'֍l#_GٛY(-nmn\llj0%0"UAi 1aFMbJֹ,zV[pŽg9Kէ e `ݎ=(UP4MtbOH^I"Qi%>!v0JN#ywrQN,%抁dRzpٟ,3 ޭg젙N߽Tj//~gc< Xۖj,`( $I @((Qħ,'G{PĪC̊`(V Ef Dʦd9/ op~?pN=Lݙ-Xy$NlЌx7TU zY&j筫102䬱)O "ɶs$ͅFHePlF\Up NϿLA5~~'?o9}n* BroӅ;}_gP9C'j״ GP!PЄ-K,tA X@I(M"l n~(ARQ 6$h¸r#PC#hy{ +0 U\E%zWsK٥QZ蓄%Ad*A4OoowviMp(F3V'>=^7Y? նqeNoZm9c:y=owUbł{Dăptx(i$zM(b)75BBۛ3I W+cZbzU%=Q%C({q D9~ BXb^|#E+EfC) 2q"%u8Zyů,w1_noJobGكƾYcҿ-uj{mj4 'C2Nb?p,󸌘R~pn!۰hof|W} r?eIapL8P&͇3ckYgƁ!M)v{qlenT5>oX.[Nla-j6N(N1l"U+WSUۗ㉄L{427;EM8~,bDZ}!Q,xg[J6@X>e,ADwc85gXwxhe϶ܟ_ U[am-ڄڔ qc6#y 1( Ս4XjPˆcPyOAȞ\_kmsKGAEP&!em0bld)RR[n6i]zӵ}o~/d?fîExϤoKZLގ~\(¼1oq|7"S.Wbp1OкQ{B#>*@Ncx4ÿC9 GL H;.o]qdQDA1XvXr-SiD"V=O\aAw_!s[>:' eeaZJ=|{J4zgʜ uMݡS:De?Cc#hz . fb9tC"Ak$ݾ X@1=I·l/65> .7i4j :Y7Uw%G,^ AQ${U8C~˘)N=KH#ad^5Hno-lE{4R\hN#{VDŽ zDk<\cTYS&\JХbTL#D$B) VFF-_K:ۻ),OM/(8J)6 W]r>r1ڥ߯:° ”p Eq瀃rS`ϛ"KP5mkh*(Tiz^ {ZcLqIșIhFVc:#Q͠689r]8WːzajJrSҁսu_#ڬ˪Ѱ/hVMz5UJxWT{GU!#,T[yx34\E"%a8}Ξj) 0 1QW›*:4qp(tdoGI[q9 L9I=rSԈ<ndCGtwU{VT|2|loUw=WQ}QZjDVJ q>co prt2$D8(f T@{,ơfY)UfF涰ˢfX̊" kcNDZ I0YC*Z+|~#Ihbj (fABa$n"!P% *ϊ}-r:s6}w_ǫiwrwsuqQ_Vqg@k>۠#zL^{<%o9S“J 8 a$[ Ba]f 1#s*Q 񨯕_Oܘ=F`[-mjۛX2N5"ǯ(7nV&yU*No1ˢW:@2qȊL/' ")k ZgOݟw;<貍+#:3ŀYUWXKC4! ǃuœpTwXKK H`F- N_߷W"1kn,i,^VCy/J抇d9ޒTS (u0˼&xM@fS@4&ߓB(#T!2Y|)n&^"gUFVQm z|V3%hUF*4*gqQcxm$B"̆V}K,snqHEBܟЭk+Æý>}T麔}U[ɑv>V*\,&ˉ l~v{NL%,i F)(x.W1GR=`U@ JȨ]-' }O|Q`Ň {FxVV]cK 3~=ͭ95bӑzo۬m~ Ģ8!'f+ bԪX)THXDR{3~,"JYpUDE;=7AH )!,:YN$xq+H+ CN2]keFAmOG=,88quPłq,Q1A) n@ɀ2vp@ t;ELI1mYc!\B#wZh`W^[vMVi YajyjdvbfYE7Nrɘ |M_n=7ov[klDJz|Ǟ**Pqaa', &wp.ZYi49{`RicY_!?^*= a[.'N,+xq,h/m(8f߄uA݅Ųo&>vu4=/8|ZMTȪY`BE](MF+J'YV9؍dlXXASA]0 JCwkhoߙC͐9E)(NPD)/DHt}沒k43ogvf<=[yAP|J_{0@HV18󌟨%eIp69PO胢vRӃYhc! YȎ]/B;gme6ezs]%9w L''{BNp6Z8k|8:zv9}lk-Zl0PP8UE~ '7۹OT)RaZls"%Za1p]ؐ*M]ĈH,J <+ `24@yw|w\j)ȣUHwMNҝVUuJ2}cfNqSeh2rXG5rrxl:14⧴7Z { -{e[`ԢL$Ծc"7P ^49abЛrd`_ y+rcDd]F2߹! j4o0p,Jrx ]ʈBȹHwɚJ)g8>m)%ngVY41@b b*K2.X.[r~hD ԣZL{Y` sP PS/e )! %Y*gO!,cnj F+|sv . jai'}('KCW ЬV=xwts[]vD 0dPOj+%\Wz DFtMȵBk'Ъ*VDa I߿!}0,aU *1i>:.r!eHF8Sv{˥}GǦ0'CEc eSA QT̃PU}y-b$Y@0EtD^4.#ki!4hb0D$"0*SA0GAN4ɫx@Fq\D9jҬ+VRuv=96^"nfWYMarW˶^ BwM5ꭅ͙CEG/F0'M˧8N|*.@lApX'zd(6*ʼ~1YCGJCǀUܐ09*&/~c`F_,!LO<" z\FS!Kvnr a̅3 +ֺ]&ǁJlo_\❛zm<#3[$BfCFo 墍HB .𒰔UN D`KcXR67HD "΍fB{-JzrXb=}wX(9lZAYV\Ƙ`!Vr^=xnLIb\0T3AIrH2K Ɋ!KAB≬bDH$:U0r)MU!Eo!+AIYC8Ʉԧ s-txUO1A01 )8),y^PyL`ŘlMdF:k;L*Kiی4=< Dz7r(H% 9wTD@BѠ͗O5`VjV Z!a$& c~JgN1LCS(0 /u\ S%ϳ-,^"}Tz')ܲM[S9t_B hU3"r<AICᢸdeB +@T:7y$/4R:yP$wqm$/;+p޸^ֈ M$ x oȤ1U(c6ijZ'8(TG(-UJ"P31)A) L(nk0Txb.'aay8,Q$=ybhrPvy'W1)zzsJ!MM5)HF(M|L$aB0g(X2~#AkzN.)sŲF!)ABD&0(o0l/auF>O q? C DETL:DV|(:(Ewz#oL(zhMy.N% H1UCiKs rӵ+Z4TSHy|u(v2U:JP,m`wGWD8)X%KaJs1κam3tR'5bhYQ&2 BÌ4rvM ^]_csᔇ 9q'~VLE$_E2^X ͋I1R!Va /?d0 ڵ,G< ugUot]_,okmFTrCS|m976"#J*lDK F*r ! `Nլ!HJ\qde}Y,RlYeb-l l̹ :fry35& 5|Y%̘GfpUXdn&I '~9#o^~mL^{.b{\0Ga T,<#)- x1V4jN9jVTZ-԰FrYwRP[:sAǝ͎U @9~ݽX(-#50Q<‰ ׋AzT@i6A ݰ?~u`ĮyOxyi' FYpjT<¡(.5nD٨'IunG1=MePVDH1F廥~$pZU_N=* T)]YTʌۥe,ifLUg~!љqw=KۥuBȀ{Q<;Wz+HA\tU @$2rq}JS24HQF\,8)rLQmv?BP1(Y.$γky}\fjFWD %,ī wx4iLP$!ÀBs#oԣu@119sLpݽq!`KFUvwȏ&&7A:ޝiIV"YC1QR]J@LuǢ߯=3fX.0/{X5t28DT!h$\d8Z&:( UXB^u*pQg$ 0nyv: }s%OɷaB2A,"X$B@ɁխA۹ZTvĘBMj-T aq ceO' >jJf"3՛GwX:h0N5dG(5 Wk*k =*h@ifE0*,'PH c%`Jb#8(dE8k냮-)Pq~dUiRQQB%2yeNY6S2Ωs~ 3SxD$*$uݬ&PdJMBZ&fS"1EF!!ſA> {[>ShY 20 hyYyfۦ0[vef1lEd z*2ŐO~ZA0,8ۡvwfc5}ۀu\20\&xjI7 "1pefrgpt# ЀpFqu B@7uEc3񦖂4&w-1@rVc F<#b%"*<0bNZq 蠔i{i# 3Kbj*nUe5rs0UUH),Z`3wp 'W +)"m=͍;mړKc`&|9D`"_ʒx0͕k9S.Gg3,$7Msu+~GXpkQ\|a!] +ucUUY )ZV@+8$ P[iTtV+B0ްڐ@ aT4pAwWP+`+@ 84:L *A]o'ea u>MKyglLD}G:çKW Ϻ!nhOҵvNsg>S.6 Jp B@1XGI\3^[=1>VZUڹ5Q9p3cFt2UcµhPo_ JYK\g8<ʜ*.ln I$ (!m&3RZa8g\HH%ү9WHE ώ^$o6DDb(W!/*\-0JR3R Ӽ=ϣB]DK@cJ1]~xCǒT߄nO60& ,:.t<pН/ M/eS129UIM  6D5\&(\t:Д=!qHQre[vCÅg=`}FaQk)TU*7ڟf&@U2z,l׵&._(tZi)ugCôN" 7R1KyĄpSrR&{XELD,ZfAAP#ahƲ2Ex*:g*D.ɺ3gj+(^`+[QP@00P 8C݄xJp$nR2|0F m'\& "r"X3c9Bsnpa7珮" Ms묌W`f"fl8@F6QlR†8鳌煯cr\1\YPaHU" U6rLu1Q 0=R_cl*&"ఈ/6WlTPJ J%eH5aa ! d`34rH^ tga Ur{},I{@ )$ه0X3bb T aeaY]$ PmBeq,@\EfAYҪ@%Òn%UP{c3Vg箋6LLJ6(BA$ 2@'cŲŧ,sⅲxРgAAxp7VфDjXQ鴣8Gڙ28\ T:3kDjuI" qHŐ) Ůb\! giP.d2v՘xM NZ^_yJ_w}Ԥ໸8gdђ5`ŊQA"1hH Xdɗ1.J͖}8 @+/ӋN 5hDT"X(9DFV"K"gME"]|i6*zO+s&jSͧDv0[hb8otVH7?^M gH;"S;ַ.| > QܸWHeN)ĸ8;oхGa#BsjP'D#3iXIx|m,.]yvfJu?!JRBdsKb uQu"+@@~JI6HtG("cx{/VzpZ`6cg9㞜尙_ &bW`!μn31pqdFDJF$𺒕׌52%w8@p&R[Onx '&jdF%oJ:""8 n"ŋyYj$D@Jd;Z 8Mljl!9hϝE!I)!P`_FPaBDGT5Dt̬`5p.Z1@:Zꢘ0XY$/5hĭL&\HVÃbg1^2&g"(պXR^j7}]W|wRT46w;@tޝ(9qHVQ T@B b5 _ G6RB`A " J宐>RB`H 36I$s ڭ` ֠i@b t`TĖGS93X2 ;5V,5lQ BLsV5zIABR²PUDP#t`@EٕшT4PT$E.pjE233tf*Q@pI55j}`ͩSc,:(d2"NK Д61 UMQH$-hXC#z26t-7 "1hY-%ɑ] J d$;>5 (fIK0खa RI D0CYY Dm%MekpHm^SY$ aLd5O侥97:!u/~<.c?Vud_Kp Q#!~7|SHvE@9f?D 0 ,Cm! CaI 20܄22'Jj)&)20fBj2gdd)w]$ wk3I0d M(I=K0T]k$6 Bedʁl]VMzZkFbjޚsxmVlm[ŵsZ͵] !I pRdZs !0I B XY IvBn@ ѭzUWjL$ f@ P 2@%HL0BIL42`y@ IvHCeIvB)@3'ka$RM 8,0HHIv@.5P$!LIt@̄kVmUZkkU $!I$UV9 0c +F&M;ߝπgHфH0=I~ [H^tla8ϭnJqv_=? `qjby9Q"ʔUcI6LghvO"ٰLYBcWl@OMdM)G䴟^VqKH2ԛ͞?.zBu)>e c$A*OV!|ϳ[Mr>xߑStW7O/?'ֶsI d:Bz`I @x2z|~W/Yc;KqjHBE$]1@!,OuI:ٳt\޿e3hWmsvX!="HIܳ$ۘ@t{%gg]QTYR "L7ۿ 7kg9o9d @Y$N=ޛc7ޝN_9l&!!;4BI%I aC@0~<7 ؞~钂A?b$;VH \>t-_r Lc~= v{E8tƀ nCrI$  r$ ]q@C0M w !hi@>Ȁg*.K-M _ 4  U!0`>us['LzxoA/ݮ3m z2HvWͧo]dG9vos`w!͖;#%_`/zjnpM?Bj*@O5 nR5G7pyph>H6R!Bc]iV?gfsՀs Ih @$k^unϧ28#oϷu&`!CS^]`R ZO8!T;w_ Hv^oh@vHBwܳ|~?~G0$!:+xZ<߆-|PD!{?{?z ;Y:G@RHH~yAg c 01I?:޾ʛ@ Q6?/F@3ǂS{_qy!!$ Xz>罞/o bbFoïmtSwX8H@  :%"&ն!$ЀJ#!Oqz軯q79<|էB$$_x3}~MV@T,>Ncz? 垥HYq! &xo}s$$Mo;~-=37yD!!(~$;ޯ}'_0$? O#L2B{ʠ!d!<~_ޗh2I! G! ,N$!@ \< Ao?0Hf>v71!wVyַ?syr7ň&H)W8rBC{y짞yHBCO!ܒBCa E7!!!;OO d>/kI z&!ݜv>G' w;_[=a;bؤÒydꏿoܽdWL{K8I$:Y:@Zj^x{o4O &˺Erx/R \#=Ε7JJ @!Zmg<,Lڵ}՗}()@2vO%/eݧgI!&ץ7EBd$=~_#~oz} mBGh9wH@;'v !d!Wp9@?7@'2BCy- B 'e !abۛ[?3ôd>+!!%z"b)O B Kg1G,v$!\3a$i$ q}rMBHk|owYI!mQ~W{GNsy"i N/m{=Ξa|?D)hYI'//qھN\4S_<܀O5Gd __/{fca8 9f8Cdްې٬>y') ?Cdž{}=}A3)!?aux G0L$F٤4wN'$b@ ?۩p}?/W~O?ێ:C]G{}7-7 $= ;MWtnB{cylp6H}&@ BK}O_|2!,(23B wХx7ؠ<_`wJM"G01W 4dyxT> ynHߩq|_ Ё^m&7:I=?w~1I=߅oĄHҤ>r$$'d? 䤇O *Ha?^[CpHE8cIzo@8=|V AI "I!D?QR!Ѱ&zLnv7*b@ 8.k,<* /STK o;'$ 5{+5 7R.w_qy2gwvCSH@zѿ}[s[7M>ҏ$ XWrݟ65_sFoo{ra dhd%$ePդ<ׇb$-?[699o];G9!.70@6^2hXRY=/vCv`$_-o;SyCBt]@2rr9=ϼìy&  aEz{^~{^&V$uOzOYxIX=cΣI)@kDm*$AcP 7iBLNt=W:4iƆ8G6 9-5DϺ9yI ;1weP";^{d/ɛ|h[e98CI ;#-;bBKw[O-/ zeBCS`B?[T5ӧ#]wRy/3 Ԍw[HrQB#^KJ“)BrEYmư3@7Oc7=%!^v?3]cQHkʘ@ t _3Y Hcy9m;Ef*vM+?RION-| !o[h$;2@ɪSn@/;uNIr)ORy!I *;aBY{ Q@@%1!Hy@qbw[wt@ {Y.WAn +Ol=I=pB PKꑁ Dq%ܔ?>OY\{0 \ R J@h/s=U1+@ޮ#=HJI,dn7k|5ٯD `$ZU@B=F$+_UvQ^`"!OGaPʤ <@ni6> I;m4Nyd~\\'*Jn[( D[8B8+̎oKHHk|r; yo< W_vZ 1,$y3z6vv4ȳ?lyqmbT$ }yCB^kqw/ӛf<=;񿛙r|ƛ;tyhDc<4ePID@>!kDBp?C{Sh$"Q!c~a(LA(5v?; !lmdj3E#@@ ^ >ucR?wV[P "ov~O&N Dn"}kuVZ!BV ELo"=5ܬPxL !7I:LXMmThZ\NBcMX im$ $٩_UC(BlXxD :;_wmvCauYC9|C/:=⫭|k-`Pi wt?`,H9Lݹ=\ y#o;/ð#Rty aׂ-oӁN1Uff_++3Ȝ%Zm7|gҜ4ͩjBHB"PĄo}-~@,YWEU[bL&D+'=$ǔĄ{JSbu&'${ ѿWm:w0TY^i>,zC`|  )K,j@ǣNCL@ SMWON Oco_ce/D%A]!oz{_>·?$h'!~<$,*Nߢ?MU,D'Nu/e^-(*s{ҽ}+IaVF<, vPqp6yGn7OauTvp7>c*5ՈI"R?y}n{ks KC zSfߏ7'J?כW={I?rZ<2"ucI..Ht >f(iaO֥,37`].3BY1ghI%jPa u}&%ι%"3gZGyB*BdBjY܍oƩ] ;[3{y 53+ ,7l5S,&“2ջdt$,/K~3fя r}㦠q/f;ˮ48PKwB ֡=?:Hx=QHA^b%bdhWNgnIK-?+֬]|/:3z8>e,yrt+3ޱԠ fΦlJBm HLHbșR!d x8e`pMFH n dB#k IU[Zxp{Z_MޔTIB1s;OC`rC@XS$vD+_vջikXcZ r,mPUEPlX4I:gi(sM=Ú.G=iU ha !3atlf\ma! dB ftK;JoY>Jv6 $`ҐBY TTմe Lj2 @0@ iH Yt֮?&}@YM릨 !ӻI d&LP7 0Ͷ8Zo-IB(iB̓6je iP5BI!2:욃 !&VH]$Y&@rיT"E$H`BI0I-@vߝSY]edgI! pYf!%IHHB&C3 jJ@)!z bgMLE$, x6)׽I'dA׵ 2giI X-))! Ϝ+*ONt֢aTҗ v~ "!ޢS _}s!n;+}tjè{N%SY!G" m;5 uű OCQ6R$BY%'wH|KY ҇/*I$4e^Um2@L sT# I.a2$ܦ*"E1 s ! T"B*$YL*hd_>LV:,CC̐Y1``RM[Q j 2NCu{4TI$ z4TdI.# Hbt꺝$Y⨁2ɒ(ll !!Ф5Xhԩ3Z'#0M|+@!̃@)mJY.P` I$i$ɞ;a撼CЙp+ Hk .7hHMd,$I6j2R@8 4AhbV|ɍ!mѳh sRbj$|C#B3TTnٱS . 1d3cSu*SPPb ;U7k-D4ںVN $%U&)5D!/M݈fLNblj81? ⮠{r "1@E5p$x90f,řYHkxV7n 0Q8$ܙmzajC$ Dev*R@4:2ڜ'T#jDDDD ~$`a-z!!5Hd梥:$W)DL7d gMo"a45wQrSĀz`j&m,W1 ,id>0(6Mέb@geC+!&GUh֠6@jdfcʤSdK'%0rd%$;652 Y5rRْZ0h#PɾaU$qXY< R4AfAZr!.Lu×5;}t73B0ejU$%c Z2cF%H,ɡ1a ;M5YB`3שef,ɭYP!ŭD&D C#$%#JEjj;&1߫( @?=GS25 &9,Q)* 7_l5l`TL1۵!C p, I$ /at1ON7C $S&8w틩 섙-BV7oPV&:qʬS*c $!ѲI* )y-XU4v 5 RKZj̍V 8蝓 Y,RCq7CZ,B(9*@S@$1"I9!pgCpb Z_34HxLbRqiףemTT4[ g4LX vY3TL0ipd8Z] R [ 9L L kP}g3YcڐDm4V:ML7hK&`pҘ5Lp4@@,,8#.¡8L7cC#.Sh0,ԓwm!mju^mC80a mQơq&e&kX3u R٪<&2%==UNòTeCF{}E$䦯nkхE03_siP phd`,33@/K&ADYw~.`32qЄl~攖tFIZ.ai,.&)1c:6mtft5e!mdV&|oAutm`qeW.!d,2쀸8bȲlvI i`RpP 3l?RIԜQҸrJuώ ћ6mn[qyP̆V!ѤϏ`j䱙$S3chIaŐ.ruaͤ -u%(9YV+))B8Y(k!0K{U (hs0$2ٳ\r K)M2ɲ?uq,P% l 5 LqR, v5/kbo}$ vBI B ml2] ;%gjRF&)ҁS!PY& \_6fedVv@kn1X" d dˆ)ٯ{h(ʀD R%0 CmK.]!RZAA LRΛxjƵ|[Tmlj^Ƶn-sZj[j*4kW5a,,HR36BBS d [j Y.T^+mTE-$X)$I295L.LbL "p0@a:vCqrr-{֣(G"#C 9Vլ] @b:QBY2%fU'r|$&(&g>|u "28B_찤[c=oz^Kȳ`ܖW64{Kv%?wxD-C:-s@L~#叆:ѭxwK)sazi#_4NV YuTVnxw Ҏ5lͯ.f;ٙ߭ƿ-TSݻ.6$I$ n BL78*Hm$s.>{i FMZ֮Ƀϥ Ulܚ:փ=*&W8WyPe?X=LBQ._8Y2QLp٩Nf_]KOΉ3Vj$aͻ|+|1ϝ2=[vH@A$NB,&ߵqQ Yl%+}8Z:njg^Vħn=_ \m^<>ZM] \æTa(*qr1}I1d PdMԢlQEK%˗+'X:M2/%~kQ<% hi¶ UvsJ/β}]B~2 D@# ME7xϡQ7=~5@d!5vH!$9 N$22r *Hs)4@9$O=ԇ ?3  C] i`O) %w'$! !C+-I $$P6=m{2@ 24$~f@;I& xtc $$:C!sn@ ThɊN OPw`Ceh@)5XI4!$9$0$A&kߠHOI  HN1Ja (IOwz9&@$6$a!d:L )03&VlY@ 'RbjS] d!Cr& ’Ia`Z8Lm29mza= n+7r-xKOY@B ӻ9@ $rj=If [?^)h)L/Xn}/}Wo~\mYk=cR1k9)F޾g$0QˣCϜ=^ih+븅͇J;4@B,BcF]57X ;L8T `'zC2)߸VJ}&ڭ8-)־-rMzwWJ[|qgdRj Gi3=)A)Uxb27sY|>+)vc5?xѯxCchz6V  UCBk.v$(PT HdHdr!V50 ĠDC qvF*˔%Xt$phֺJͮ8]|6q}#txwIIn99/Y~NnOs\I{^1i \3U^Qu#N q4?=Gs)~/!7XDž]7y RT}$|џ^^n{sLZ-GU:Ƶw}{ l/A}e:umdf b65{xU~ܾk巺~L1oӸi͞+Kfz ƫed277گ& ^z4߻wDž+<-OFJ'йt$΃&4q^wΥ-[mʗk[jb1܏_wm1[]&emQ}\}b{=wt0:~>֫>ۖZwr3<4x b bw?'jF*1' d*l /1Oiea87֯ݯ5 $IA2Y00$W,a1t%23Xt0m}tM,1RĒ`-2P-ƚ2ڬz Mb$1v%Z,HMVu4E,ۇebzeRuʍQL3zR`g̛J9HTuᰊANiJD2~Rðx`mɋRDTa椓$$&G.T}Ie$$ iOLJ@^*H4RC&5MT)RmIdBsw/o7y$_H&M r|~[ƑYH~#Q CC"|ӕW*ۣ~s*=w(aOc*6Y\- 9Es'zTZ78qoWK#ff- U/K u>m2f|Sol*g`ԗjs:`IK̄c<Ҍ3y DA8(# 3OEhm 0}$QO>*ل {LMH\\Gπm@ u7eAȈvP$D}?=UAO-{ BJN\j1gF$M ]<'CH iV*x'916礟ON<:M|f_9emDTNe8j<7 F9v\<|ۜz;YE5s/t1x6_^;l,cx-;cJ&2mtR?1^OC=ն;?Niވ6CW{NGLp,!aۇw7oloOwX_7iŅɷӼH׽?e#2Z(ӕ9ȁaR^;[:ǸF$'L"\>JfT-B楑'4](F!ɕ8bc2(&.Y~!U3sOlǐ[7$ [d73Y`zQ!IwLUOUU}QZr ]UfQJ3v%C|򣔫0:/?gil=%p}[%^x]|iB 耹{K#]ٻ2%xZ|Սm۫gByz-tHґr@c)V52gP=G9d_z>GIak<ϯob"+=|fRIek(E 8?tDIl թ!~O8!BA4WuYiZ ,d>&Ë Wby]\<qOFwA_/ksy]pT.)w_mf!nc\@|a4E$#siӪX6ĐׅeX9m 7ꂶiڰbvjyr͝7W&ʷ t1e}y iHI\bbP/ *[` L%jAi{{ Q2eLKm^+CW߶AP{1fr6 IӝڮիR|H>:.Oql]Tomʐ;f(WS4`XppV%@1C7]Ь%b n R!CѸ~{^@X]ҧ[ws*Ūr7x3ךKZ*,Qcc7IEte}{bWb@ ,R.0ႪQ~7sUd0y0w=5٢WvJCa_B/'%åbGj;9or_5fn!0?y]]e+u}'[8MT&s)r3Y6٢!`@T6izGzʜ&=7Te)>|#v8X;w?sY#_b3?9 3!a;Rf㠟E"#@Gi;V6h>f:_R9P˒i% >F_\t|ésptgsw؝Dv{%' ⣺Ř>[wn}_cⲄH(&{]A߰˳DD?q?NSCl}irRO ,'BEI3Ϝat1 wҭa|)10f"<d` @| C047vCOdq̒HyPNQ=i Ƶ6~=j2 <èmş<@3Gfx!ҧ2P̐,s?hX{ tM?aٿkտͼ\]Qy7% 0s jSɦ)$!SZp#(2,$e-Tk- T~f_:v#0:r o²_{o/O܏YϦN*c 3ܹ=Oc{#?~c`緟#+8! 3HӰ45pD=*GKȩZ|8i%2_wU\j#ۑWÛ5_PE!RDɫ`ҥ \F)EH'~Ų@:Bl^UmAFykP&md~,`f@F+[/@D?ayٜ=bY_vcU3wmOG$ DRJ\q`"7.sɂ`b#j('qvYotm?mI~S[H.Oav#!¼Limf*u{oxv*S?v`K3̐Ubfn<䖰{:QX߂,Kҿr/{=ȯA,OMq5)ufzMe#ܜ7A$=gu9-~+lP _KHd/Kj$'0I$"$0|̮$\ݒ4p88ծ LDay5jK"), *X|`bh b FOoWțQixNcQ D0eIґ}ůXǢn|i53^ ["uw4#/k^ν6k|,*dbaf͐jSGZggꆨ.(Ȕ\lPqjZ^V`gnݻa^BEE[Z0sQ>'pml3809_֟>} D{>/i/<쟳i7j?Nُo{̟Jڻ"SNm {Mw ˟>w Yi!lÍC#7A!XPֲvREdY Z=scXvO4Cl'@gH B0d %@$ a2BC$<O$iBO'!:HH|D  )C0 ? aqteI)ICO{=ĮO?L; 6_y޿oW*+=\b6j/mZ9։>/;YoSݥ4q:MYj?Ev" .$a0^~oJl3o ~gUR-) Y TE{n]ɄjV~e=ER'q}l6)Pa0>>.ˢbJR@ 4]hr"}s{XDZ&kgs0:;Tx݈]_^ˆvסE~L ݼ*lr+i}I'†њ'SE8qt+d]} 5/=74_CO݂B!O}D &.!=Ch şp̴ɀ_ig9TE[ 3sW#b>԰K!xٓHPXL_0v 0"B] {+MxtzHg #zqbRF,57_&_MMr z&f>\mMeҿWaٲTPBwUnO--^.υTI]gM+ώp8n[I hd mkAbŢ3 zf@q?F>lhc#!(ѤHA=I`oǻe%Vh|~ZjB먛桼ۧ_Mc{=)?}^,|. ܯFL/ff=_ҔRz{Ĕ7* 0( ؉ & i u1?<#yצZ UXxwl̉ŝ~^SdHrow~G3n&i3< 5DNKasݜ{ov>^ ʣo娠<˦ƿ);/ ]O,{DDB`p/`tT䱱vwvLLMM wb;#ґ Lv-4L*4(y4=S0ce`M`9$H Ui DL ]ACk.Ve2zhc!HƃXH#)sߩ0ж5Y"Q}2CvT4c(0C5U.|H. ]6-~]v1CU L9]-VՒ~uOOg8\{/M3b5WCo"7$d~j~FŝaTSf9.{McyQ>ƥ1 *w3OzGl9D[:OzynR\Ό_ƽGҭ~\M-c>,GΣ B+V!m2Ol!!:'cPnXqh՟z 3k.[Ikvp` "lBBW 7H@>R$;ؒR>!I )@Nfu䪬cqw9,$<=M[vk˾ӿ`6{_(NX-6P-1Do]*Xx߮۞_V~*R Q3B==W1=ha}k5 )0uVo:ξƠ1 oE<h> r¹t?u*ep3lq btT`&(s}ʧC}ԅNw $ 0َ 9v|% ( ()j)& "_"s8:77(çgzGKjJ݆" xR~Y.{ڽ4,tÿ!hpEw])k/wvNUQFIΥ=R`Ň (C2`ǙN|n|<=э.śH͇sjn5@ @ (1gPJ 6+pU]}iOZzC{?3T{5N߇rރsRVоrU^ ҆ơa ~MJMvM! ܔ=k/^,*kz/"6XނW?DnX-ށgUmi}F"[xHqfZd&m%9rx " \IzjBLĂC&zz!P eЦ=m& < c[BW=vq}վrn4]>6Ԋ2_ܢï $M,1ϲjP=6r),nN wmﳱ~|4ߟwg}Oiُ2(]RCЇ5ր`;v t'_Exk~aPZݵѪHH0)40H丧^$I0g`ROd {OOwH-nVOjQ${R}qfz/h^PX "f2p%J">3BXй;O.'+PSо=H9Z+_o]? 9hF4Ih(yc}Qx;>}=U~1f읐0af4u.ks?/ KOvOVI{':y *n8"B7c{}ohl`}O=$)HYT H`Hxt!I˰!@!&CiI@5H~@h CU, {Cm,B2z?/W{""@ݡ 6fV6Rtɏ9dk)~k7H5bxMÃ]pt_=# =3gRikɉgdOm>%{—+u) V 0 B/\F!"u ʏncjwH 2^!÷!\2֫y+iY=)W1D B100e64A[뵷?5rߟ$6@~"f:'y\#VliΏ&O[R@>kjn TY$$:$ ΀AY!?*rv==CͿD-'|%? /bW_WM7 fWe)_ʛaNjr_OK}u wo=S5OyL X#2ar`(d>#2+anw~'_w.hڥLtx`经K,)v(:شVhc%X*w}It=@!<"]fwʫJjp+Qs߱~LDIa/|Kv_M7&:_S ~I;>elTQ}RsmkR5$~Bv8g;^%Otg5}N: ޝBI$8Ēf!tBm EI2l}Hw! zp'a!'a/i`]zT,'S)'Ƌ>BN%U"2,qiGhh# `H1X&koF[ueFwǮO~c"A7+$`u{J d(3̏aS2!lTRIdL jK?Nx)~Rgah @kǢBs$!+(؈Qz̢]d2H{vBC! HZ!!>H{<-$ B5WclSr5@ &-?d55QK=ndpcNvB.`}gK # Ę<',sԔÜEB@=n<e"H{2!ta5@S$ (B;t"RG5] GBq~\M6HN+K#!p^@L˘(:D9- 8mb96D)Zb˜в : mZ_g}nՄ! #G[jG-e>4Y@aU! L$a! $6$Q=>RB{dgYL@ 픀0bg19IL4J$#8 c$A33V~zI@̙!Y A.@l"NfDwYhNM'@ŀH͡j:VzW#ګrگ6$uI!BNB{v ݺ Hr )$威xvȍ YnoP(&SqĵX"f~[VQjzP.A2JfQǭ>7f?*t`Jr# 1hi{ *-7ɢț`7̔ۡpuCup3:8H9 |^! 7r|>[g"F*)xb0Vc>yDK?yR;E $NVfV"MőՇ6aI8Ȯȵ"Z֣rPp|*l-KS,{}Pp#ZL`PDB Jӭgj.2uH{lZdq4>I gЫ~Ñ<;a[ȩj˹96'Vgǜ"G? uKf-_X T v4, "m*AOz٤5 > mKIUA5V0F^b7u7N3$(1[ !j~)Ij}5$xd)5O/D{9҄3T-פH VSi1R)!AZDitWeR}k] <יkspxG7L,Վg rX S) :HT33u4tǷu!jVCYEe:Ns&aȤt#u1=D9&s{ 0"1+ 9gXy), ւ(HJAis$1ą` D8^3c( "4NEa!Q#R$.c4Da])Yp$߰$24:({-5j#{{ 6u>ҞQdDM砒VqHcR1|޽)a# yVG4.c7jZ8EgixNn4# r $:sZ3/mK>@ՠBq.B"X=~ܶW>q؟G%΍>Otl[\_g4I 6k'fAtma44h~3!cyi}NLXe0z>z b uqD3ҘH׳r0M<8ȗn͠5 R"?=l=j;#IDOeHE0cDBFl2?Kfij,ԷRЈY_P4nmɾ6lA0BH qON05-%Yݜf1NDژ`0J 2r+̳{+٪n]bkU=os>k[ D kq8̖t|cy%_ t}`s/,,F:1˔Ri`(ō?ԱʧvWCtѩD~v_>.OU٪4mB5pVrF0#; U0mHt0AKq{Q_M0w~nc?r5eZbdTp&^d̠=c#{gzqN1U n{a7cr_="ÙĬ 0 PyK.Gw%ڄcƯmo((4`ɔxA'd{]L̾ЭomDY,2l'`dj t𪐸F}T+s1y8ޗjSb ͔JR#w-ahV,j3hx^$^j0)5s99m9LF~o=K P{].ӟ5ʾ᥹}[a4G* ]qQDQ .ۨ٩xB,{g\o!J p-LƟ#ק=DnKam0C:nw}OpUsJ+@ dY6pIK,^7ѽ ed!\îةP @n?HgɱK&ׁeZd͵υ |h-[r5s!iA!"BK pk JҿVԷ+#?\U⎚m(k j0cmzѼ~^Zr-ʆ(z[ɱ^dq7(kL(y+#7H5~ҎP\S%79`^B;6'?Rs%_F-5DtA B'$dqD@IqoREXPG!yL'E5rIߏ2ju-wߌTb`*nYzv-%MrLrw0~ze h1odu ܤ~ M+ՙ*^gf]u `2լ-rL< }3hc+/8t~Q@/`}B0tPij_.} d/|͝O%CML9^;;*E8)%0(1(,Hu}4/wy:Jÿ_X5[=!8ZU R*pokLO&Nm.80i`S6ʼng9$x?6-#P\qAHa8d]+doփ,ѐr_S҅}fp"@8?9MX+D)`Nw-{=mͷ\^x>&="}ÁjKX9;=S! NQՂbG |F-eDXMJ, zAh\ՕdջG :6Q&kԓkncڃ:Yƍ۴ V>,RV\W^j]fvFh qWGR,_8z.'gOãp0lWVe+dagjtԉx%MkNζ uN@'5 Bn&`@6V<ص.U\S?^ )2Qvul)K H @4Oll,(xe ' \pH.:,}j@%e鑌B4 1Ϳx\ Еl5rWQeN}hԎH'8C^PZJ$x͕p|iW:J79ƯH xdQaQpRty27 C[JRcݪ,m#,tʪ`^< )gl@")E0kRZ9s鉟/aFڙKg?hp U e<}>%}D Hcơ,_!kX{7Y`,nzmEh~juwg l6v1=oI4鎚!{-DT)y>Q6MCNE.N ͶuIX-]GW(m~qc"9%r_1icnb8ré~J3{58=هS5$U)_he3.F33sR *G;#4G!%&ڡƫ qN:  f$8%(2+ѝ Pu1~؃MKg  79 )2FkSRJFvYV'퐷iȺ:%ϪY3`ez9ÿOZ/Zʤ4Yu!gS-rqJ(ƫr5I^7ZДUĆWrLsmhlliцĘ"JY8U&dn \7JIXMLfb 0̕/_[E[~[\]ow57Dzwc20%=?kznG4bFH GX} i.fIR JĥӰ+Y *!R!ɡ \&Dz-E_'8}GYt/;\;m;P !]|KK!o  aziFnu,ݡz@Rzw7c`J:R\頚71>k9rտ})@%+:t95cbV};b=*? oaK"ksA.j);T%$h(ށ@ C`PZNӦ%O-TļG[*mfa*`y_{[}ϴL잽ztr86r}ްCFLq]eHGcvݪЀfbBgDWu4^{}wfp"%j:qL$lԪG^Ÿ-$MInv ;Iկm5Vv, $,ZχU"e0IUvȝږNsfN>q,C>0T5=JWEYlmA`p~)We"&=kfsڹͲ"UYb|N$̾ 9#i+(.a, TVdLm&!ѭYN.f| .O>8u0$5`qpqk~G}E| @Eڌ % f~AlZA9X[řQC©D8 w 2`OZ5 )S8VL,O`fj*1W RASmw &䵱Kqma 6D2x+}r.Z`HB)e]omg}alwmBF%Xˮl&8 uwKFW@+ eiD@%ET<)X0ohvTB!OHK٭ˀ"9Ҽ:KKz]cL |`S4I&|j4QNLZ=ۈbVMֆR;0KRJF6A!Q%}tsSH k~cDi3RޯV>v:B)pudF `%K*u ,42Qe?lUs0hKҩE08[ kG"a4޵ҩj3yڥ{qJ#> &8o~!Gb+︲1.s5`D`R [f93. LZv>ޝFw,חHQ2m# qudwE%6G(VrȤ3|t|L>u2 ibL-ߺH{2ЇN{v 0q.pte6ca.=5V2w,Y$m1Y#1 )VϰMss1G`O-vxԯi ~G6OZUjiˮ`Y汈dg(];ӄFkmzdjTac"fzykdAB)c!SJ3?3N#΅$jI-v:n|^ ţj2^B Ԫ.'t%QD"4kS~i+ &sQL%!P+5' dzfGA5K&#fdV`]l@WL *}H2(̍}B7 V0(œk T$q⒅q&@6MNt| %]nw =Yx//]Ή'^ރ@ϵ6Mϙr> r{(ߏ,C:cOt<LI9-m3o3nP(&MyYoz^6V jUȕOZƭ goƬAt<}<2sy`Ő:kP֥SF6}cqD4gM VFU$ͣƙ^0E|_bojc=AӬr"959OFy&4EjmȀ+SGLn09Z D zGvI:%kʔksȍ;%m/í~-XVB`gh!~ R0P]H5* eA! @B@@N-䐧Sṵ6ȷMndPڱ;60u1g"Fk dKT~Va X#D M0(woԥ"x(|T:PH@!nԴ:o}kr8efUnco*TXV9qʏ(騵 "c,vx+*b)*91]rהlU܅[?11#4ku<āg_û I!zDCڀHI$RNNu;W_R''K]?Sur-WOIm[ft1d} 4ZˑD,y20]+&T Gт85;F.Pa̢ߍl3h1qaӈWhOԜPL@3%3ki$;n/X̃UbjĔ( 2JJځzfqvn^%Y ׬]pqneY׫ޥ/Q<*m9H?̃c.exZ8 pgr=Ҕ%1̉!j7δ͆Dh% d$l3$ 9*L H31Yh3HE3ky_a3Aח/uWM*$+Zt#:w/LU=+_~򘕪=˱(G IKWwG#w[R_.;:'Jq *|I˖$c %6{!XeaLqpF 9A$%A@ddh!ZJO8MkY>F}ut}J 0!/tb][X6ArBAKJݝY-2}MVJZoiy0/!8  K4b!ޤ, H$<@ ?5? OA!;g)@;ZLw:LjS )%c##z bpV Z$ L>[UyfP* !>fr:^jJWܿO~bh2|mMc$qɆ.[h;dlnq~zR&9IXC?xv 4k@FMSZH%ܡaDP7# Q##~i>X (ZL--B)/Md8 14%%,o\cdDb.Z>re!"[H7 W%PА'$2{O5A'  ᤁoa(0{%KkOcrPTdl1AP###( az;ͯ}DY\m+I$7ig=J LĄ @> $gd$"~v"vծcoFL~G:_[^ 혤^VMatסBHBIIdifkj+hkZVZرkƨL[(c[ZZeFTmR*M6RU [-a6flȋ)hƃhJQl)l[jUmVIXرfEbɤFFVj,Z2IFQ%22dL$cd60d25Jdd% 4%#R!"Ll&DfhQ2eQl ieL4iLMd4"Kb2RcI[`dZ! &H6j0lLIfbL%F*ecH)-IKdFѶC%[k T&mQƵh֫֍Vb[ɶJkڨ٭-́9O[$M'`FOdyk bj +ڷt[;7^s_XfMZhL tLH5X!^>)UO@ $r@C@9@CBUQA7%ucw>/[h(Nb PCŖrU)5[޵;$5.BuIfEC$аuyVHBy$?Y{r"m,!ܢIyOCy;w[߻/9W2)L(/D@F(K"<"|w'piɫ!?H! !$ BeHBxQִν6Os<&m$>$:Z;K;?I&JGXT$I!'{2+Lx7Hu{NśmXH!{Ms{qr|²9M:5YvԐ'Ixv~$a}'@i'^mVR"^R']k{NXDwA}o.ZتP͘m [{koB# 0"P$$$e?ILv(S~}=WcVDي.(Ũ0!WOmsHf(]S'J ڑL6W|kI~PһUfM?F4 qhߖY9Pu]Uz E_?[V{^Tb2RAecD[Eyk` ζa/  8N"I2BT _Z GEO5ɥϧf2@M F\|~rϵ%%xZjOZaeVY7-z ܇9R*QXS:J]?M1r-*䚾\lvfqMpq|]8 k9 AN$a SXuuq3G2ۍvӚԮs UZX̴\lA[ c^W%I1xޮD!jM*-kw<~K(h'"dQe?I7bnWhgfD`]Ezّ uqQj]E5$a#7L5ZBdBA/J8 : hQW2SVKX$\kAC=D0e$`V#oiuCyşshMD_?}?(pA {S<$UZF"h_)^D.(OOsٶj`%/knxLky$>;,6J"dzU'Y3f l3{Ş϶7JmL $̅oet6[CЯcm\oڅ%jYlUve0FM:Ž84 -f]w*m"6-9!g1 8rkJ qV Fıȟ]eht]V42}IƑ fR~t!g"$XY"@D'EHХ~sc}@VA5Yk}()JT'1sSUW'.争N Zwm٬anco D1H1 jZ =f<btGq=F-u[O(8KAi( i+:f A($8s0=gNčCq2.#{_Auve/OJ~''C?8 ( `b57G:2%kIQc#V+x>vo􋔊:6cU/|U9gzG(a6m!cWf89wu(4wP1E(̧Xy`TgEEP=='[c"XX׌C80s.V?-YnviR/'(lJxw9Ѹ)h.~s)7;8W\+a,'zq3Γ }Ƨs| V?/j~Feƌ?%CH8N.O*5WD`ЯLѠO89u88JEt8,0O1f o+(dh/URV~|} XK‚/1[lt^wOCHxxTʻ`_yQ\{HT+W`[-Ff0#'*5caZm,2p Jiof5nރN=jȏh~cIE ~,ijYH6}GG̓83 a8*jHXKah=-J' ?4b\>p4|?uh0(m.^pr+EsWcQY@6O\L g2,Y]uRzî#)đ`*-S͘cvCLEWA QQ>v$ C0 =3$)$F69cxnBG=_ڷO-;ĕrhU[FY֒αKįer)p+~t ә5k;dI925ї=LL@OITafSxQV-8bH&t!a~3R.ЎsZOaTDmi_D^wyڪJЊrcz_qM©ӿUr;yW1o,Y\@=NdEّQ6sȪwd˞QP r'o,*Љ02RR{4ں.e5&V_܀Usn{&1# SIf*^E_@Ke+HY6}HLjm ]q5)>\y ?a? M}A# 2@) K$ LHZ):Ա5Z5Zܾ^o^OR5~ZX,l^6jBO`C:C~I1@?Xd!ډ$) $nwpU QηBK%M^ {?kZņ rY,.Z,HI=K OBHxtB?1 nY bPIHI%׽8'gS?A'wѢQF lw @݁1ZHu -ߪjI$' 䠑1] 3sU.66irdxV6V*5kxk\J# +$!F_P{oѕ?T۷}^Z(J!'d;y} !iڇցt(@: HPir:S{O,6[?]<&&}#'{ٯCPI=4o$nj$yL̄$Yrou6wC\;Qd!oP~5[WڹU@ϑiK%[7mA[{i 2Ek)eWB4ذ~vd.꤀dHO6!@'d).L8[^ʩO|{ڢ}tx-QBMsC5)bzi?T;$ E$NUhvhdiUd9[f$ Z$qPC< aþ6ja`#a\X4Y įW4Cx@`P mg,PU) Oì;C{*I2f[TզmrNK7139U=[g+6MK`%UQa$oY99@{!k LBF7X2(@UI<ŽGr88h{$ڪV'(euMUK:!Bh/gNo2 •[~O=%m̪|SFecũO}*n^abh4lWj3Xxu)ق>mԮ%ȜG)}+.n Di I~$;{P=+} Jk(TjS {G7ԥZK_hz^'?+Jzsy#AXK1J͕  u[t6{rhlq6Dr}294%NshHMf|RY8I2)bYUM;CCH1TCf!dÉJؗA% | ~,mF>T-YoЃ?^ =iV*g&iop)~:Ī}:Z1Nh519W wrӢPD/I&U`FwןRb$fzWF\L!ذX{eTL۲ĦXd_pLT2mvL<]K\F2q:c#5z4` hJ-1BLU#ͯd1^>z[4S58|?˥Seu:#UE'G\9ȵ+R"[M?̔f|v|)#aAp 1HQɔ3KSd 㘘J 2k.f^ߵ~]:q\{ N" ns54y]ʷI+6O뺛JL=xslO9:y<_ r5ʯK+B R{ɹSߢ "x,dr:j=%-G]Kއ8:vӧ.ZPpW-7~|T Zn҅6w=WK#]I,h1P`Ҙ$W4$57eI=d @1HL}l{e{i[Bg$mW 8q>`i䅽Rm|~&~Eу8U>É yIm^s_Vm 5 v; u&ܐK]F'wu/؇e\זWQa&mYím=M%19v/R[e:3r>KMd/6Ϧќ @m{. \7?.\I9|Zb,]H?Ys%a8ypo'*tЊL<1Mx^RKYXa0W -H(bw9[8ϊco[{&TNk{͆(ͪ0֍#o?]WI{SQK>.ֆiN"p`mؿPSX"kRe`,2y| "Vmtbn/Bp9Xw-Ylo2,eTͧ%\Ię]r_A_5˚U ]z2)IOKox*sZCwg8&q$G2q Zu;5I? >"Bd!q>ZQǺGUg~79K$#SBRWC-j(4@>s '$!d2]$9̐\9k(/߯˽2*Rs6n W=bH@[r)'Bw!tC\-@] ħXII< sE#Jk?ܽ `k6%V{dbY Iym$!fefQbrba:%X浭0\>`;ɢCͰ$&ju|݀€5H4(w( ȞũA2WEήn #gJH@00$9I{?p";LֵkثyʎsE^cN>By?`}MZO݄@>'al$1E=P:N6/b~r|zjR*@=2HjHՠz|?xfHBL:leဤ "0{oAXL, {}[:<=>CLP g@1HKojS5(,VZǰE?n=`Ľ}ǜ-K][nNꑾ)N/`k4ѥꤴ@ߝI]{CQ!fCٺLo1g*ۓFAiJJHZnwCb-3e+W[cz("<$W|ܻ0_(؇SQ]BeQl(lhag1>8"~ZSE E@ 10Vrr?EŃDv=N-j >LrM+j34oϪLpOW@rHw- v}T5D?1F3|coK}V/Xdly +ItI5g@J,D9\%yFrt )0 T(DMM‡ zVS"iҟ0F<10{N*v>yhͺ ū-TbH+dÚ#Tӯ#^wőtRf 穭iӚ۾R*:q@0Jo/:"^R;B3PC]li35`y~ 3g68TiPHݞereg,9) 0e&(2l=ԸQ%h UD[l&9';R%n܉.d{G s=vdWYsu$VoKH\|4(V[n4fQpך]F'5w/gWomsδl}L]*0s'S0!s\3yy-\yHibw%bp8˭Cin/V73-,)z:uoaGjĎ CatN4AiăZ͢&P S O-[3U)z/vح-l|:9 b3 ); uZ.ڳQ)$sqksr$eʨxcun.bҌ˔9,څ)dJf!s^6?T{: yASḒAI- Q(W; B!KP;#AuJՀŔ @ il:Jŋ8ݕ |Zk,]b]6e[8x^sXU(invϯ5m*TtdØ]gehwe-%M ގAc&xul*=dd>M$-D J}0%N@`L+sc0lV=c峃3PiYn~R)z5GCs^hi;e[JZ'0`"4ƢLLnܺysfK)N"tm5 Uإ f@ގ2lneg&yD`y Ra}|Y eۡSA~}ƅ O*1ڄeQ[6櫸roJN?֖䘚wqGDZGLJHMM#~R@;[bzmHZ0?)%ixQ:Gjy%m,I"1d,ZNQ̿FD vOrq[D0 +qS\[c0;{W֡w_  M*-0r[|t ɭg=>uӡq9훘a:,VWY*Zq}NLNetD\󻓭 lSKbc |rK9 Yչ^4VyܒĸS?ᝳoh*Q))BW Gc8um7a8EgbI0{MﱉPɌDh=!--@TIͤPDw Ȧg2 7JP3NV-p1$Ybl:Y.6NʰenR;A푑I^uL{ܐelss$hH"_złk~<=jl9}ٸݔ7ێ"Txaԫ`LokͧϠʹW%뻂lȰDrk_ s {8"vР!m |C2C缷'PPw8P^ATc/ =[YP,6ZլZV@?T ?y eH`N+! ZV{JeC{MR @!dFO@']B}I!F:+],C۷8,Y[W|#xMfm@Ou@_\& IRIIp٥]Wruu {:]$?Ǩ>}P{Uga CܰߧP7rڻk o4t`[v$MΎSڤ! eVHHonF׵2~yCf,s},c~jR s8i!B( d/h~`'3USQXxzYX2`Z䙷|Ok/-ץx7 I0{! 0d =fhee?%{X[B@X$@,Ҟѐd@ @U!&yf">{ )R~x)Z/E$=C;W֞!'B}q!$YhXQ?=z]'򾗅SOe3}/~Y V֮UGXX* !wÖI|C{: t@s^rkȃs T6C@. l3tҏ@U)``l$@ƷK?)JщsY.Ӕ5Utxד4i/;xQSuT 3//UiW!h86\7Ӓx_Dըd>#]#eytyu?fχ_70V.fkThU*'5s=B);2OTbik98]QY ^3{7L3 #"j-ܷoa7KS H]WoWiU6x|䇷H̶/0(#e FC"?C㏲rn(=$]j=a:W-#|G"&ퟧ)=fiL?}^ ܡAUvu2xq?WWk7}ԜJ'Y*1&\^eOdd~B{6"֫^x>6O1 .-aC˘VYbԧeyRz[mfy%lȺuofžs7бy)J磘RWfttƳKGZHvߙ>Ykf}Oĕg {}!!y\=5qM)a`S6UΥ)O ApRH+^Ǣ T乑TZgf7~^-H;}Zuu^e_m'{{ZrJB@j22,ꞣ i-VluW2^1DmR 54 sHY-OY]ҕ\QghnȱPrӛV9\;"JgyӨB1|H*̴""/-'9^Y*) ˣ\Z, _7){{j1Ѯ W"jYb< Ǎr-## ũsKZ<Qr6JթpP`ռԗRj&b翆 taET?'!D.ƶgC4dV  _S!搗`DBOgz :͓ ~yw eNI-dRB~Q=BBRv}J!Y{iL9/ 3s9 6%y\΅٠ #ͪ-ifGw:G0Ej*5]sR>,W1OD2P$ a&I ('ځ<@ifoT'Yb!!6I=*h'g DΒuDyCCp. Jiղ=ʱWqrU{xCYR:O-Tz2@m-UY~?to&JJZ]fmAdTBTIѤT=dd %;8hO^^;-%U^4Y[TI鐇O#EI7L u7{=jSXl[v#!T; l9Bߑ70 >?󽿃qk+*-dD&v} ~:b$!7ulNitkqr̝&Hoǒ#TϟH X$ E ?2+2R%nYxAdӵz0IyJKDWNkZգj}VIpRqi~L-E@ܵB^{X(s6inWUhЧ为 'jwہLYNIp  E{ sy_%Hhpp9 O=iTpۊR;15XV3ʚ5v-'ZIZc6HZ@.;pq))^4SuF弣 z> 489P5OM2/FmVQҰ.u0ioV~DP}\H{QZõ-,ii</"XޯN݀_;KeD^ƕ)cL_|cpZcG{gpQt@F6;~UЧ9W (}:395,jeȻ&nKr/[ggg~&tݙΕP6["QUq`mk)|l{SA ]#Zij'ј`Q G03i(4وaO k.!I8|ԳƝSggh4L]ƶ1[c#m9][3|YF067_<\i2k1OZ SSgMN&9.pԥRu-J$` GiIJP AfMbC=-˽^'zE:I'Oa.7`\zkaiCC\DV㱢ERf3*5p H)!8AKf !lONaLJ+l/5Itd lsgkm ](=2eT6L2pzEHpN⻪o hc JbNzv-Z6̈́ C6ղ/;5cEm!Y鬳liFaOGK+5!4>ik-`9l9{0a8)`&JnOGd1-z G 68&)kXޑTkaqDƺIs8ߑ(`ݤ4g},cCMgX=R;M#)LmZ}" FI(DZEPj[''𬠟'dM1=DaXN'-A4:ʣMQ9[]O{o{AI8{HfMkI;2ʩ$m_כl5Pո9=׉ADUnۑ "\z#Pm!!,Z0 fC R1TEX*چѫT2*10Y",#[R_v$"61H5O._r cF{qw|WگjV"&bc>ծ4ԉoCW~+זMbE%QDFPA\^H=Ђ"]6Pس!{vcߎqLIܬߑ6lZ˽j sGF昱Q wYQDEQ&6M$/3}_fY"oq bg{\(DwL~)]w}WB`D#햷5mbk,X]2)m!L)?|= -%#&_U1zשJJ {G5 U?#{9i|~1XIaQ(fl.っkw_^\MdfJ>}?]y$\M@r~}఍a^@(ﻍPņWq/\c+ddDv%/n]Ԑnj Db RtTqCC HNݰB/n;s!֤"$cde I(`&w~_˛f v%2vZkRcufJnthi4쯪0ɀ`1#n3I,h6%߿|\33dѱL &ݥ{u+:p|iHQc&($naCrHpa%4j ܊[뺺I2̩FoGa%w#ۢe("MHRBldѪJߓ{/-T8ءQfȐQM$"ۋ}ͿHܦLkI F)4 @C*-VV$X!AV&604i>|+ՍhۅU5oNL-XߒKFM[w[tTֵR!Mͫ ʢ!,1 *Y,M +KMIRL6j6P؛+Fن1k6SbDVڊmVl"5e[hijYk* JčMKM5 (ҍlmDj4"E2_W7I-__15}WFɦdDF z1@c/d2hOcoc֗PS)[\ R ):_bIjL}% aoKOqfuNʟwF .RU\$\x;k|(p@9>M&ݿϖtd"yΑXؤp!Mc},)I8 m]ѹ" YxaEPUǫ]௣C ؛'x;ܷE&pShlUa]Z\uA(E|xQ\cuNm0v4 OxMLELU\)8V X h g944QKhg2gb !2;?'+mMShY-ש;,c"#ko#7/WcZ4';j5 (p2EG)X-0^WZF9[p221i.j]WG_dFܯsa6L&Tp. {CG5.P3MnڶnezjܰդDgtꯁ첬I (@ 99Q)VrN6/ ^\qwg… }s|7euWXT\yJD=Up>c+VveER,^_.& ;I1BsGR(IS_moxw{-4jkr,mH, I$j+Gڢ Yg5cC:HI;n cQ{dEu߶3"b=5bߩRCǹ: *IaU ƊKk1T8c1aW™g~6/@O T: +=SBRw2,#^;pYcOEMCV2 H+;?`t*B<{9ŞC.^L]E{լW_P>D ҏ\cw#x&/7L< 2 vQ 9"8,: Ȍ]T L2ot[Y(ӕ-h\(2)EULJjE}\bu HPmA."Pá͌[y͉J ws<ӟ4Z4tνvؘEkMǪv/"R $UpxB#JPfiظv]!6|ĘNzTKv,s|;vpU!Yq" (&N7ElpZ㮳zg/Q3w+ v! |rnm|Ҭ1H| EƇbI\,:3<Ƭ[E5N+PPBDM p%H=Z&HS,oTVC$fƦ0+ja0WR#Mce0Rs:1} 6Ä8}~H$&Y:j { E1ǎ(bl8?$ $E (,czcR!DɯN4H$q!*_6)Wo^>3g|Nj 2Pl@9FBw&/MM:"%9v緮 Auch=Ƹ1J`,vNQGl4# >)ntK62' ڔ;/nS%2̄smdcb(VDMr9_5x_3¸Y[APȆ[Oa=;wP+RJr)mZWVZa12Id7<Մ c;U>AS7j!eߓgefkv<t^XwAޗM>h'M!ks'|cѥ7oɅ{|^I|xF{ǒ{o`@Vu. l;"?IF ݰRZ;r읆5 S^ =ؿ7(?^%alSӳrO^G|M "@ @#;BҪsr8 U gQ:߱,5Of(D|3Gwwgs<,t2AzpL?R0N^j'usO}u l4 nA f6E3#⧶=G 3,xllbEJC!LT"N`2fVh葯k"3CqX/r׫ WV1ރ_8/߆P4Eehc~h}3y5q5UiUڱdH1ޛ.JZP34{{N6~-|m, K0 ε,g]"~IlN2/~U9K-.(ZjJ0Mu2:!J+l+GHk:iLnI_ ikD د1rN ^6'cx p?ylw-Oi!1\宊MN|:o79pT?n/>dcvǑ0"FBK5uvk!bҙ^ *^(@z[NUpOG ^V\w]Ԗ=Ul BRz%@7i @869#tJw4;E=hPVi D(.Nzr㠎9w< zLۮdRk4ADރ ԋO*_!d#DX~1#(Î9 `::Ȳ X>%Q2B%V~׾H8<X X&¥Rlu](Z_8b?˿2BjIN!Ŗ2[-"G2FkNS#eM'ʹAN[Pֱ} d%!^$5YPBB=Ӄ{8ƾ|UGuy9 ė>A> N_z=+:m֭)K_ ްD|-UZ 6~#0 V;UQJI#U6lms[{%̊Wt,@ܨz0MÑK`?֯R9;7ڼ:ci:z8 :h.6Zy7"o2p5]Os1:et8r}a@m H 'hkMMww+6rVT8U~T'BzT) ;c""(FAf]O='F.Ev}?p"?9u>z/kᖩE8UUO26A5ɂcڏo\Dk!=D L{ӭ403 Ogvhf?|^jņ Uo-c'}5T&ɉ ~m#on*~IJ?y{I>?56jSamTG']1zY.U(i,$+k@%d9n G 7wD{|b> I$$OhXi}ze٫jTC11U85d[xi'aׯXIa*h3C t7A frHYLftNLNd TL5$CcE@v,ggq5 m ꝿgDHCljΚJD6Sixب]2yh)?Gt|uBz6ٟ{GCpr,82im|s%jt'p%7.I}cS rSH֛e3Z8l`&ͼ~V BBK:wo8%v]-m(IZg ͘'x6馼򡕷)SS<_M7&#lUN?%raree8({jNuļSϯyoځ ; =# ?%xT{;JqIFĨ"@(B @wQڐs/2ϔt *YahN_+"l2 &tÆr|sSZRAC;wh}tL j ժ?u,EHj:nbi#!L@?EԣMV@ƈCf,)$I ) IR$ yt1 zTIom>պDtqel+Ui-oqYTYתՉ;7cD<0R w-U&aFLs@OIU__>y؂xU{Q߽|l:MyS[L' '}{'S2Pm8^GG~7z .wW~?ݰB8-xOpA>?qM6Z05h~WZ w!:.Ea)jyْ7Wjf [Ν(kO|43[-R ?wo=N_=D×8p--7Qm_[m˙ VW'O60Bzj2Q$c-T kLïVm㞁?R]A+CE˿o>/ *zETa,W[,d8 R)4F|P VT9&Rgzo V LSd fB/)~*9|ܠrIswfyٗf/ÛmmY .)y1! N'92Sy5,SNW.p;Q+tءm7myv jk e0' NLG]$_ٱ} 7r͘ ga{ȓY ʶ|Mßk| $DŊMWOsntpt&9v~IП, +x{9,v:p9$xy.n/uTj^a[e4OH~VYTPc- x8FK8|rG[[fS"nsw3LCcXW7]ј'"xˤR+o_56' hw9Jb'G,(L-gA.AJc( ack5o4f)\wЍyÏ$ Y' zi̜hwɱJģHHP qnL:UI`!EKmz td $Aa(R3lI"(46H)̐&LMJY~.~σ:].G>㬲 {s7L{9Xh#XCu8 lZZbFZԍ5b<\}ѳdlieGAMqICi&@o=]uf| pcMq:VӼpKXoOv9`A͉Nm[&0uF^' !N3E3~B]foѧial-@A rp]aا >p6k~chx7Ud۪eAWš-1WYAe(Ni[m3ڃL7uE`!u>bY,|1QGM7]伈!*R xx<,fY@s7! `2O(."8dY9QYopZG>ew7Eh|?RhwH/<=6qٟz1oK#i?02`c \iV[f?)VsE*ʍ1_!ݽ4q #hfB a'[2OQG`@LniGb3Җbҭcp&55շ,YT0܂q:vo,-]\bΒT`*Xsr:{r$䷸h f(Gr,´2S9B C!H(Ij7&r~ӌ!s7PxtIJ~g<a!H0D?EJFk 2ݮqnb_kXxSagWrėkrԝA#A F)1:)`n7AvA文5.rV9qC$z$ֿgzQ!5&ؼ)HqB*~rTxHm_,`F֒iLFq/. {__yN?h 쎡Sט x~&c$"A:<8'r~,jY#loTh3tCn!^7a)Ͷ1 YDX50 0Uf`dO3K95-%\W>|@bkRaWgajOG\Y1> .BvY {+a:#U#3q&(NEi!}λH;pͩi%pGiJE[,tꜸmg)tQaA)3H&n{dSI7p>ƍZm;ZR]/KGC"GU,|v,ջ#h=w0@twҠ֒3֋Z%9a pK/0G#(G۫H2E%X,FVqBtXK@Q) Ib#|"bp8ʕ)*J`&^z<AB~:46Mj-ǾTX_fqN"1x?_f뽗m)-R*jq(Nɻ8QرcwY߾?Mw_Eu%;|'4ήX0ۡn@})s`ڎ$'<^<B/uWاYi\=Iee~\OW>NE:B07Va/#`MЀBJ / ,0LJeog34xäe~YzNo ƚN"k%vfC'!Dap#u%Q^rOW|hdb{A^NB} Q˦ABDrEdhd߭Q@ !$jZ<* RDZ28*uF]PfY.5p3Kj7zx57{]|\W9,{v ۲afo! d՝bqf:'. ;@6doZ8(1 ӓ%o%у$G)T <{ "s) @%[{-z=M‚)nᮬ,N5AS\,zT:Nu8I(֗$b)eDDH쁚w?M=P h8H7{m&~/GænN%ԟk'?7aW^}eU䳩WVL=35Q/ݶ?]4#)Ӌ <@ֿ.#NGf̿QFhd9;qz8^9J(PUTBN+%쓝IanYDLE&őh^S(F=Wρ8:ur3 `Zϧ綧*GI{ho0uko}.}E @`DA=u]Y;u-Kye+^B[`[-S&c K[3pbW)+.l%̓Pv,jC_<5L;10[rLj"(аEO LS3b],$|d׮+D:ԪnfuDRUusQW&"[=ː,K-W]gT1]i%~MfكPޫ娀0}.Rr*sMmCJ:\3[@=+J`bFh ρ&PϭVD!* OV2+*ʐ]2&:~)s擐84x'" #8R\YyTp(" ƀ"g:u[6X\Yn_X R]O=]DaYG!lJ"a V#[ +"Dв~,84r$G `>BVYS ٦ð0" -Q~2ׁ=8lb[(~XwҖgCO"'葷 P8 N^VT:H:fƲ7M^舥J1l\D~#Aot;[l ~b948o4٢I&ZּTR[Cbtn:gnt_–?3r7\\@Xo -_,fY'\Ihbc`cGU0 k#a&~\,}.=D ( W4rEKrVz#/ RJókѸf҉Z`__Z˱7Y؋UcAbv6a}b2z^X%`ƞy5g ]sa ̭n˖ |X1rw010FDzmתkNt\kkXAqkFmAq핻Xt$Y4ma} ^^똺%.&q3o}^cw:kJD3%s2b}YϬJ4ឯA<E{C ZࣚnARIY{:]h=ڵ\U4⑐¸$ =!|Նڎ9&}dKLfsV~(hcGs4 ~Au I vUs^aw۩=~G9g[%NmnFrFRUh1FyF6%/4)x^a6rhx=8-Zkۨ<'g$*iNC[",ZɶԖ~+2gH 7B1fr>Tj_}r쟐Lg\`\(Q%|-\I5WjƄVDD5(o `W:xW _ dNī!ף{>qQ$9ăV9i0]sȈ [\CB APVId{rhÜsqSeeyK/&k ܙkqE+ ;{w4vf4R'XC"RF!n 3xC@RuHqP&j)|_к^Q:T1qJC|nTva$ @!˓^ĎH;1} oS yOڹ ./rtԧ\BBb>wQ.sFoq D%jf;DS2h{g_&Iԣ|=gSa2qvTKݎbO f9@ºB{GՊp*G،;4".Db.19T?R_q,o-PqK M[̂L˫]ӇRiԊ* imkJ|tv޲[<9g8. 8"ޜb8w'©ј=,jTXP DX/.lTV>*֙)` %iV@aq jشNȬc)&^V3s>4$@Z r)\+ )8Pfyp ?tKqy!S*7NC z/:޶|V5zT$mgښҷݲiekS:? Ϭ䦶$ w?< ݦ4IܩB_&6PTũםn-z7;wN.4ʗ7Jx!lDq@=rHN(Q3<-1>(M<xYKLs}vT=-Ήq9N LYlIX$Gw!W^N>8QTb1ztف7>:9rӭUnT:=z<@< 0I =W *ʄy>XreE[;z0cK8/,BVRS)P9%CږjLac("&őRz[O͛m]YTlb٨^$ˉ?m$ n/ Q\눝 š7ι`)XNI7 K=q?ƥK0G%8,:{qA&mZjY;\ m5r7aU+bp ZEFmsiDه#1u?cleU[~FdJymFS>jVM )}# `LE9vQ?@1g))0t|}X26 U *RH4R-,镟*R(μ}/*Ke]e=Gg'ir2[э< I/s*S,-{;7x.Wi} ;j͢TnCgh=M5~ۯ`h4["@]xfMuS]a)85'Xo>:PpUorQP‡˽zf(BYYXWo`\^yXا6VcX>@i<ߦFf'#VMN&'* etM(cR+6do7h}̙=t]%e򫿝79P_d, ַV5:vb4`6glq,6<ݛܩ(LcJ~#hw(֍yC7J~S\ŽB G89;…ob5T71|i@3_o(-emg\H;jmx awmFEQ]#7e~˝,ma9(0#v.-=ok=rǑR'_RxM6" RcnIm/򳳖w~ a G9Gtwqb{7: b!ObX7:wE \6 T-[AeT,(0U`S2+ψpZB|,Q$Κvj3x6~H|xv+ +D%F-֑-YEd|i% " #m~a/_TSR']v|/_\EbPΧ~N9r,OGf{F'eyߣ:>#\5>{tGev++H9H'&cVssܢ~ŵS4g4y yΌkgVQǢ Ar!Rr{aX2p :zUrݥ)i&`JFi"OF(۝eb'[RW'ps.nglyw KлXB (E2&2yJ)U(E:XPy6TkK2e+( APVa*|-&WV3uG03D w""ewPp8G/[4٪U(;PB3PR"gI%>d?0vL!v/'?Ӛ 䆘k֫-PjhG/n&vRUcDf+3Bj4UY̢^'w6K*k:16Z^;:o,`A$`DpCn)'Y1٢XO!եe"69hY dlAYéٝhmqlH@9cIzw*bƒ<͚;qgyme5ǒoWskJHGtA4[,Glvkt0[.3FqC4]*߉08cTdY@pw@^#e6mIpF#_8#5jOD@.-zv;0c;3l9L ë(i᫥%ElS{A$04Xڐx  o91@!HBvA\ 4ZKD㵩y3PM#DNvs֖Mm,qX:>R+Ix0`8QÃF:Md6 $T˂&yqw-5h:w966;~漟/dv8NA{(<8 l8z8ToCs׵(VϴXo{p3[V4@ș4&M ۜ56уR*8016 ayK>nZD}NC:f~]ry ēw[I\be Qg6 !^oUF:@wD|#ey[tK;BŮpex@F# s}iŧϧSnՏ n\aY[z,6u5*"`.dQ T,x:E+A[IƁIa5$eʃsAcIƹv>|x tx-,mA~|O׵{ض^$2MƩ·墥^a:Gyw/sS+6UWAڬl9_nM{ljyI{=j'#_vx:+-k_UډɎǟzZY.wՑʭ3͘pȲ*#ie3ipD_jUHG-"[w* ,h$4Ic}jSj@xZ/{~xL>t%Ih>4dX@Ęm~/NWidG#蕈₰bu@YtoK]?n_wE+KD'.P&fD}>m&Jt ȅ?BWj9uZ|xw mvWX|07ÁiJIArI0ySt灣Q7O [<, OYO%xl>]Q!{=ATrc|jrLJIt0qUBUQmW=\ }m&X.rLsW=Q(l7A3Q!aZPhf@Fi $js;lsq\ MS&w~*XIz%SӰg4ĉm yQ``ɕ8J&k vLôk)OZ?NH¶$^J*Ӯs}-[I}>ާ\mW0(}MyadGjzfy3bV ieCpv6?TW75A3f/4h$Eb{O>x&TT!L * ^P(a}ާNjR1֟h~ݨ=庿%i:rr@! =SBx )5.]5 &JW:¡r*hnn_z8y4~JSTN$4_ų2w4,%=e?F/Q*^KrwzotoA': Zl)vmzqڬXQ>Igλ >CL՞ԺN?U5?˞x~!G^;-"3=["t>,r3Ecӏ48qF\fQ=oY8BH_Tի)H?"TXi]U(vb5k%40%΋O￪CףFW;wtapψF5}n?d_T&s^L38Q%8+񧘛WALJy 9@|(dB|OZRҮm><rV}v@#AHmg?B2`a/-nƴ+҂9IbsNatT I?g]3E,RI%] h%rtTe,\+:n֔\Nw䥇mVu/VOԆO-%DSXb"#MFOPnJňS~ZWg{N([8PF6 -Z?;{r+n:*i,1vYu蛽+j3Vp=+G'̒F2 ڎ Qu=pdu}>I" BkS~eDE .%UUA7YG$JFL=#F荊Nֶߙ!2[6*ETW@G4?ލpaMEzӨ_: }?y|+qͯJV= ~HO9`8Hud)n֥[&o_߹h5CRq15'1[3U:iK%44&j[.Jǖn>2R}TN֮$a _T/fu˶Ng3qִ2*&~*uwQL›@Xoiݙ&{|7+ 4,!Et.JuΌNDN9`;E%QZ<_,`*?hBK #23,[hu󵖕zz;+›z,U\? i*Fgm*z8Xc`қMO(҉k6^-K#זuZRn,N]~sx ^[xXX|dK,?n@4R@@-L\ u+Ǥ6sjƭ9&n/[YgI/6m|~{b^8N(<.9e-q߁ä$*(ґ"J Z{]`E;+XU 7^giǷ~kt@ڐ<_M&4Jc]Gi3ZϞ%iDF1j- |0j,5 vv@L+N 0{z`F0gִ.qI#x[֝^gEsؖ_yhU1Zj0_jX*8̀pr # V6'U_ԋi~w*"PcYxPbK2nNrGGgI R9 i[Ea\`d-jy}'wV7~6H*t;6dDizt:,OJ ovۊ }"`KRI*c?O #nǧ'l׹z{QH16bTV=WgvA=;&Je˸G!-=Vam^s;vۆ^CSqW~$$.z~G`awW 0 ?4JG!BQ;L'qMP~5䞩NяMbjjɻlCW! 0R+~~J A5*u>5d@Pj zVֶCvKc/q7"7*ArXU'6Qذ1ޟ0y|`,=ǙZwB}z޻Ukie n-xOs!Ӣk1H D?Ѻ ۶=8'_lb"Av_b _n8 [Z;2K\Lg\`>>bl-/'Lܯ귴SQ_66~hj(6&\xGyKjᨈ^ ~؀>q6A1OlV a@% O6•23|9$vvi;3^j`a(^,}Eݗr:ysu\߸'w@b\/YK%TЕTFG1{nWDk&f3'T ! .ضAHc57sRF+P/W_sp?&x܈ " ]+$%_sZiMPηycZ;03S%]W֎G>G:a jJP 7Lm~XS57}ڊpgNa(_i<_7@e`E 16#'sBӻ47b* )w6۱Y~}Fp3~#5R[S6W/)TpѮz1MJkS2/\.blςoP5,UR:y$/d喍{l)󰝨zme)T'd#ͅη= wVB~Ǣ{`xr2-Q'T$Of,mK%B)Mvf\QrTd6 $sKv(@@)n-R1n4Ӄf̗t0u+B“$'QnXe(/[`NLB=Rñh;gYr3!4r@D [$xFrUHd@=p_Ks"9:h[P#`}#n7\&mu}㋁EMS$c%r着#ajuSY\ jcc]*:tA+rݬb/OW7<ٷVx}qy nu5#tc,0P",4}Uw0m8UEf ?)MLX H.2 wnQ SH|aIctlxj뚖zH@?=w#deà&)$\3\ 5$1ꝜS惓Qu|@)J ̸2{^,xhL+Y=z:ex_D'.B)RL^- "OJ@6ZL!AlJ5 s8[.iwټw7%ez&gs/5sPkպS ۀtXqfnQ.**3 6 aǏSyw2y|./ܳM_ rU+|[V<}JiWu'E&)}I*潩Yr0~uW{#EX|KK7tD=* @ژ€Me a! a5Bi/m9}}ۉ6ORdi&ܰBf>Cp(nN1ڐ:}V) _ /P B(ޤ?d?^ YF <\b]oa۱wb9rɓ˗}92mYQ~ ~`nՑ|~ϚJPG S)eW&8/qyVgmd/ ߧA a=tkm!U O^ןÉ벶RG|dcL(Kgf.HlyϷcwo1 ADj[[AzlHZtW#v[_^֣'_iߐ=>hls}&RP(%  wIF m.!izx8Y L4x/\:H@`5S @TTm{#jM4|]odЎWU]-5[md8=98.!pF]RU$ޥx&{Tp˄` a~Rt%F\{9*B1(vw-e:G::-!68{W|;DjM|v18\mx'#3" A)R 914\EDpYYX^e'9&Ex<758Xèt *B"eAd IY8g4ac9w&=?]]˧q;{}>7[U`@\ayR R&N TE(HYtnMdEun9>hѺ41DN!TDXaM)H[I;#rmu:[e4KqAb,*C_L"K1s0.UR#/eNi؊}\=Czfx8fGrd7r}U@6cQ<1WX7]GYij3+(_:Sn-4*bEU ]-jU z=ӘAHM?7/5mru).jUԧL AtlOs c0\h1SVͦQ:—_Cl4|>:s.OR~ =xy9iPNSK#!vc=CGX~+S&00+JPHS[,r|R4FSO= ||^DFRԶk.ݶWVd{4[HSYI`jLSa??y3i/z~4C,NDIEa6l(߂zz>g #$r)9Yfˎޙdpa:J"qGLRymӫ1iRvuLd<*k'h5o 8waQ2KVzþ{Nc8FnF ho\;n7k_aƚr~uݽEA-ec+C!$,!ۓ0ʜI-zȕ:Zܝ ;nF ٭Qk[cub5j)'(k=XY0El9ذZ˱|-uK>Sq-/)SUhƤJcROhE0>0G f^fp1fb,jGeͯ?qrqG՟ü\1}gõdE'U4.~0ۯcW^:V*3VOGTr~kV{H_͓b@\!(j8twq6s6 ԰gk"Bfw_!LT:ٳk/W4IVW5P,Q?{iC 2 =&L@h6$3ʻ`$ҌhǼS&<ʁ"fLjN&-h1kfJMS"~zp'DO}߷τ"jwJ y_!9|)f4;,"[ XګmmQRjE[mPDF6#b0[IE1DSMicXkcV(֢͔dh$FU-IQj6XڒY-BhF؋d@cEPi(0UFXeEAa4EaLa4Rj2RLmQ HLdԭ(-6#LkYMf[ҚI6jɴLPѨMIaJ lVhڵU5m6jemXЖ)%R[V[kmŸZCJ-~~^`faId;1}uz2O QQ_Fr_wc:'q{0ڏqJ QL:sNE"pcRܿf46*n_3V6]ۣ|UHc:ޒdhs$?^C걯Mh:Ow _XCvFǶ7σ8zBlIdKS^yi,h~G#}]}nb֣/6ρXH>gN}6u%wwaf7d)/eK_IY ֭V+nr{;,3x ]gn "A@VFp+^`R(+}C@W54GhU|}G~pKyG2-($c}t8[)JsE Heb˒oN6'ɖz\xҀk  rNn,t*c,~>'vt1qI@}DF @, 7<,݄x{3)_ĸBZE(:cawF OE#X RZ^7@ Ğ2? F}r\ ]ƪհa:PzZ΅DK-DNqlEK/E7OY#!JcW%<1-pG_'g83a=Mmj"1LD!NLb&*yFerM[c"$W[7 gV6 kub fZ JT1gQ?]Eѫ^]"V{/.ڍ(nM,إL^[͖ Dxȶ7(wQʷ2€X`OϳLP &ytl㸳haLB8gV7H1F 녽O};~/EYȚ|rY&V, F#rc~YJ)D 9iM&7UgˑW@YGϸ e1Dͪ`Xu8J*C]+7^$y₩$ c̫dw)l׈DFB s# $zV e2 39w+Ra0jnCu&Xf>$J.FQ{9̓*fu<=chR"]J.,RXOo5mzKgQ bPDkG\26l@ckrzyTw6TYpU$ݯjJG;?149FH^Ԥs"O|"Ym=$2""1PfOuc9)^\G2d0X8rPhDi~*z֝0W=.d #8k5+C=3s{=z7~9NB0SC'o}ey? ҥ#IeBL{mI+8o\P.h"Zfn i=sݚU` @DFu,g oāQa>~~ñ@Adqξj|Һ@Q[ m ]_>oLo9z/܎iǥp,Ʌƚ5}v`ct_ە#kgȢh+xGeN_udP@6f|翿'߈%,<ʪxqġ4κ M4f}Kd6VE#QM69Lج(+&H0ĩИ\U(fy)tdVUѭ joBq5b5,@$$['Nc95RcE\+>YQp`tJ`V( VjgeИ35qmQYtnTJl ~}+f9E:3]ankH!xFbXI- kE@ ƘD`Sk lQMw}6,*>PGr$ @9FjYmd]uljcw(uX%jg̹HTBcaY[Ii#%j[aב)5J1(#%Q"8ZKp=wՆl(58Cԣ!u7YfnuCGmw$eTю] QAނ-!d.eg0wz²ItTz5o3,<%(bֲ'"sUVKƌz~tGC2螁";,a{D$uNٹa-F[ 8Ir]+ .LNS_j- v۲OV@#sX,!% `FkY)Si GIU32<HȉeEF1%W75GW>xen0lG? EY)$:h$wrIz'dԫ=O}2j4JM`kh*'e/jCB桙S8(Qj9 \խ,V6%f# EmGWAGh} ս]#nW+g5B顯KAӌ^3Q7Yw F* >zyv]]vj/N@Aq6ܴ >  {Vn'1Uk^h;3̦:l9 IU\tLr(VdEf+#ن|Z[]U$:ĪPYs8_AF<$vbɩPFOˠ3oJ#_j @ØzfHіup_VеM}XQrP+:Em]< T.,hЎcŭc\رw7{P*G++*h"ߞ:+G7D-QJk y)#'.4uryNml2;fϘ|mEuPv32ZxbjsqHhRXr~_*^RըP"_^yϱ{nգn}=v90~TVD k76,zmJX֨&,(o->bWA KHG3DF>V9`!6)'B\  dF1/;u(@H"1B&r)DOyղeNɄ0Q啳xeH "שR%egܠ㇐U$Î&+&Ց XjJuJXދR[X6'RHX1˪v cd43tۆɛdח)@`\f4u|5rFAh ZK ^epLcM!S9>E,&Svb+0PEVF;NEkg뻿G|9QQ RWE+tBQ\kĎ'JrƷ^??[-( 6ҥmӾ}ѐ;99]^Vg0,I&t`$A|N 5r̰MT<{Ayu!癖5|qlTO*䭌=K:cm;߯9!}~%bm[k4^̉Ǘ޵!(YdaB=F;m6{j}Ǭjk Z=}!& ' /%8}i pZNyȈ"xf1Ť :5M#eUϚz C6˩^ ]6+83At&+X>DXGPIJb&)+@ ܼ1ϼ=u♚7Y " y,As~ntjwvNW a6,2acJ|qe3 ftK$N4Y{^Q~J -U;ZḌmMr񿍷4 L 'V1˸Nda2[5m`4#qϪ¹p!N[22){qHb_0tI[?0ϧ?l˿`vapǯaY~,\{zC {+y*Ha-,<@(0+o,,Q\:Rڷ6;Nf%rsρPF7ɂYbN^ɖR{yOükv㑫%8/;}v'#cck#DL$X884Ƌ[õzs72?+^ZX?0j7Gry'k*KhrߒsrAw"8k<jqx7ՔOê(C?>YA9a-YM0/[)Waޑ? ik!{ڷO7<8-^o}»ssb[<3OrSC:}MD^2EiMo;Ds/&  FNs5] Y}yῈ<*`oua~I20Hz~ﳤv5DB%=9Yu7bZv;;ar)lݔ eLX0eʫ0 *mj&,>OoeKo~W gnR ,zZBLM@M~GLsE%T!N]_AJU:VGցrU.Tsmʞ[,l>\ō K*j#i}œq)tlp 6GTíXݥÙ_1,Y$QᗠG0rM+x=nQS  <!f['m%lJ5osQ-jٰE1Ί8O3ґK! _6cs˵f1^IKXUwQ@clYyjژ"/# O[u\68F'^R?M1;QE[fF&Zc93$Ԥv }|}<=Ds8#/uW )ƾo:136@ (lx]̕.u| $GVjPC`Bg> `n$vx i6(lHK}ro]GVM!?3\MYZTʨ}x z&O( మTj, .ck=(A; ,hEdDm\*Ty;|xm`dOVajƔc䕞kJ<"!t^,fEw`DXk&ffiZ wJ=28R|Ҳ$$Dn/Wnv)m$ܫ0\iϑx(m<lƜHEu2tp[~0ս:h|DRMfpOjh'ma/L2>&l$GP?`C^MĘNj@w<W 9ivSfHN\ BT%Aq6`)Sm~2iJe˻~t9P><ٯE~ Zp¦pFճ9T 𝃓(}+L ?li%4g4`{07rvQ0J[J<+j\GK'$*p cA)՘cΜX }cuA@;ç⒘ZD-d?ɍ̉ݻXD4Ug}E>=Nj֤t1HYY)8;Ae8]Ymfq1ޝc!ؠz.^yG].a\; bk 9ĒL!c?@R1+rx8qx{hTt2؊r<7F,Aq@FG--رeŞ=lJ_݋SZ(&Y3,wV87ٳώ0^id-̅ZT}Sq:4p~p,wћsȽ GMSn8Fo Q*-vVu'b2Rr(hfBܫM3Yy j zȊ8xȴ|\?}er0AwyWF>i|}Vߟ+$w<}UnWD1oXWz8н ,|7ӑUG/mG)޽_sI%bJkn^n^d|%Ƒ+NZ+qt~O>5nWLWJqt(hJuPs8?`% xczL"T 룺 :%p ٱnp-svRl *3b291&GtxŶKdPn $ވ\̵$Qj$tۤ K7#׍ =;g^?~DR|&;w)Gd{-]9buGɑ5j/JƏ9W 2vӥ]r V㰕e@Y s3Os|D[bU51??,}Nd Z|$k(B(JiH\Z&KÝW~PGoϪW/!Cqu+aМR &N2V[#[I9SsF$N5$'H$>̯P=G_zo~fMƧULdq\QഀCwYgԻU%rZyݻY|?>xk:{0d.t~LB_o VŚmkͷ\w^{^N_%,H`0 IA6-M "=s\~}vjgkQ+qV8rGY'Y:\0"R2Dz-_Ks]/,L~lZ@&HŰW BxhWvEO)RVzZP)FT9~_>>{֯Y7LYqY ړ#-pҒ7cGϟtlNIrw$a<7L6?ĭ+aj,E˺omDwu%=У;d/6%kf \OxyjY$n(DD.% )Ab(sC58uG¾Z1s7,l>>kh1o5REfodϸ50H gE3_|*߿8vX3Y@IfFV՜ ~?7aơwX,Csidg*yDhjs[FqE,PC@W/) d BJ_ۍ/A;SU7H6.aJ)z$|{ GPqy]@C*0$KC  &0;Un[bX;}toH"괴-<|Fui2̥efE+޿S^HeAYpV@DhUqL@M[ϥ\c_mnށt߲vh֬S"q3K7nFI1Eտ=ٰyФB )JRDpPۢȉ "nBlRfZ*ӻgI+ gE}bL 0IEAuTQT*5u0.7` |^[w] DkÝjz9狽71VYJml,zYuo=SgC^\,)?CUw;7vG=_.'|G [X D,S23Xܚ>;Np WA#_21~9k֤kmNWu\wncEf^~AxAEGyo 84V@I,HlQOCQЄ07$@ζtcDɘ4ˮ}}Vp qۗCo멾P)JA % ALyX'DlYE-GACjpRі;Dk'< iAAP"ϪW-jpYE bLjtܩx3Z-XIwlδ~b c(f%=gkEteR>%Y㴴*픲I.luc|)Rsh*frA %#K4/ Lқqn= .^en\ IY(We qPX"#u"%D\KʁAKgd؎oP!$#JBy)\Nѷ>!R1FԄ[9v6-/A%cv"9,]?o9nx̪t-v~{d.Fg/OʕG7.ޠ0lb-"2b 4.a;Jgj< fܙIv8.MSӛ(&!kW)F<ɪ^/n;#=$`>ZlGٝW .W^68'\)̋Ji;N٢b)jĈw0-5])܆Uͼ @Cq6\q@xlv*9FŃz p1~IFy*< Dܜ8鬀‹dFۣ IGQqK 2]"`Beo>y1ڽt)@‡_ yXT5%tILpy8vLP#jJ2p"`Ui5˲EX 7B|{D2S:@Qpbuѫ[-ZiA@UM̤n >_ӫע*OJ7o\fN\GԱa̺,rLxW;HK QzUjN:~ F!^ i%AÚpP4 G  gRxQI'RhM^.Aud>B5a~4CguA}7!̎_V@֊MbvMSTp*_ǯڃ D;quvr32從(og/^zή%&MHAjae'rx}4Q!Humd}_MOP2(zm 18qkNMd| <)YpR*tzw[ܿ;6¼t5ZCP"uI"+ Z`n2.|T,zE',c ,[xQƙ̎}JKfPAEs}?%#A<Yw>2U˲ oW4f RF+B2uJ(m7eB3qJlbo1^4CMI@ 쟙8F'aE#%Нf Z|O 8]Mp:˫ޜt^gݷ[g'VkP5v<tr[zo+6 W rkb$UQ7d62O߃+kadc b*C=Zʔ̸?ů+ iIr"||fc;NI\RxM׆[$yΞ;Bl:#s$z@G^:^Y=v|l S: %ݯȹE'goC5fJ!dBUb}_eM(F$N,_L\"5@"#"0`p`F. #\zeJ]k9AkOΰ 299Ld57֣۩{kg uI#<$6?e=[t Nw#Yae pU58Z8`*svwvU2/$emKeϠRddκh%S#>YqR_lq* q4@OumgjDiJg ]D.wGٰi39NQ=PeοKF}zG"nLgu Ɯ8 [ "5xØN[ɍ$ңdt"raaVt )dbZE u%y+Ȩݡj#+ } Kt!?]77>i9t.rk- ̎mAKn/.7})~ۆ3>Gnz\Yx)A#199?²L!x#l:gN(/J,UTia{ۘvX$ P5{z^@.rC),/>M8L]ٜg]3}# 4$amh0 H18?l}FcN||X&k6.t {|W ݧ] (Gj˚qL2 ,@{%H :_]d]m)w6 ğc~ڥϜSH:I5{{GxJ lu,233(o-f khE8氳oB9V,7FAi63KG1q)dy]֕\hJgM14pJju_" ۬4F_Z_s油D49D+qw#8y Ա$]{%srۙ;=U主]/~,Ē{۲ *G~ﻰpLD}Kʥ_ ЪKȴ#< 0RG|zlHgS[s=lFv!?{i叼Sq`(#@P{7>! Q49=`4e *!R~L\}d'r@7pi6+<.7ϩd(xef=5Uqg`(L' i kZB9]֙&z=m[-3hN_OٟsߥᲿtIvG$Fkϱk%o2ԇod:$t}=JWcfܟ9'v)QmH?p>8i ]o/{w2r9߷<{x3qc|W^./a(>}*~eWHeL]˝Wܘ;;jO aAӰ@%L?_Dьb8Fqp3sGk,YiL:Vm$lw^.{wԁXfx*/z2?~}|>uZBumc.@b3 }A0aܦ{¿9J~vE9S"qCU*RVC=Qz*&'i4i`Lhg@%(R@!JSn]O;[`|G>oTnرm\k>۴#}Ū'-F8:G߰zɿH "jE1xLiikY&"!jIo/qw;?K[ϝv#=Oq9Qm^^2 *#aI%^qO#t0s LcTaIT9W).*!j(T!9l^D{o=&uj.<ȩX Qj{CĢTO|m9*RhVD`BzZeQBKZQj{eVƮT4S+S/szJRfX+UwЊO !vCJCןZq /_<˚Bh՚` 3Kǣ?3o<``OdT$Y rKY=scg9n3@aA.g7sw6`gg2d @`*³zw'MN@wxg[pPX߳ЛooMVr\}?//H3ƁD XǕJ~'rdQ BNXO1XT(u>lM:*bʓix"  P{*c=6> !˕0#4`ck9娧 c?ٔD)W_.l҇}IҘ$Okf;nU5n#Fyօ8r*P+~VhP/~Cu }LJO!BYR+s/kMkO%qֱ!ue#H9 / >d8ɹׯObOW]$qSܒ^ JMQ1=Tw7݃ާsMɉ)۔[_ESQ8, zOy4Hؤ;?./ĨO'MV-ϫqJtNѭx/>CVﴑ jqd8[7i ǁ }7 ]|,pB2sT$?}\ r9Ȕ-vEr~#XqC\$Y:J* 0 BS%̺底pPS/yCtΆ`$f%2IY%]~fP@_أD,R? ۫Wvh.cϖm#Sxnsn ~J5! ߼m?fKKbn)8nsq~@Rl"[B;p2n.bֆ "Y&5|h;.{HiKS%?Рj*-åG-#R@@Ua1@P"&ZΘB**lDH}Ax0$CVHYsb\(`6sikdw 2Mm6C\-I( Fo 6sjAF3*6.l`bpYl0E#Fޥw"eDOm/E +!be zI-l>y}b 従ѶD)@(jp(qȼ?&"gm?Ϸoh_i;juw Yjjyg͑! b'Y$H{9٨|k?A\ߩw jp׺s(X>QDm8Hosjg2˹|Pg~GYcZnLCG16ܽ ~^ӓJNnyJܸJ+|niʵLC@o%0D?=NH`0@D kImj=ej!F"Y`W[X?~=jaU mdcC9 Eg;r8i{\ 6ʨ&Y$u$GIK Q1Q FpKUEGD7 qR~2s4r^,dV" ,8O2}^A^ q(IE'c*`Y* F )$PH0&Sd^A@ VEgWb 2y  W5VZBY"&ذ"".10!7]f@h@j *:AN.0F'@w"B)P0͢ADeK[,21l\ g4&#~]e32 13jEO?8rYVy gXjj{i3 /X s xU@)̶5Fղ/b-@nnёrcf IN5SIjj7.70ƁHgH 0CxLMdtWH N1MbB`[aEp*xhRM d˧Cjʘgh;U 2L]t \C"cTB5P d )[EI!vK ,#.!dI$ʐВh 2!&VIVڪ6֭xx I$ >ÿIbwfa<3K0|774ީAIjk?4O=7?]O=>\9.Ww[m {|LH_m/+o茰dI:T?吤$::b@~6¾! KQWwxţ'4 TkVt>ˡݞu!T ڝ`DGm*:uq3I\i\Foa><6C?h<w-ۧ}۸Z sMQn?})L@ "dʩNj("&M&1vf7,dFsڼYw4pH_@oXBP 4T_L(HyB6{~$I5+ )^^ H:_Gò;%d;⽒==cWp|Ip+YS}_ mٿ/ʩev%>@?w˱o;CdqlWrM1مSz

Ѫ¨F }S6I1oZHU)A`"GW|bK`>=?K A$xj@#o$DBXҠ'?cqL'4ͱ :7(/|<$"5d(8WCԲ`j_]G&127 iVy p"dWv4.5|-yX"9?<0Mζ [EH؀Itbax߲.>"FڒIM KX'i@b!ыG;g9q҆5iB`,:j)ṔڔB'MV]]a?zZk̯K_Uv={Ɨl}zVsR]w^wsf}Q6ޡ^w8X.3p_i;V~:!Cç~@,?Fe ?Ϊ=iSv}{~yHuCjE$s `,Ǜ޶Ոn{!*kWd?qYy3Ͻptf)inu ҫQ\k]ȭ1Pd~gѬMh2_2gQ<\vyva[7W}]]NEG.aEt6V]'(P(vS~jieTdN xY}K DrOxM@X1j-taQ4 WISPc>{>sKV״~9ϥvM咊jZ9ğ#J-JX(Ha@ˣp=ɑk_S\}QP>nncu_fq}Wi0^&Á E+Sg-?`װ>0 QR0f ~YD< ٿm:Lm $֓`l\sWɆ&{xpB`PZX Ќ5ّYf39A}E}˝$fـ?^X>w7lqiiO46DȊ5`hP>~m0f-VC꾒/B<+ +}P&QtU4 M.'^DJhR$),BW]̄tw~`EH6tW8Xɩł&]\og38NUAZJ`X!2J,Rհ#b $}΀½gW ׿?\ejz5/םBcU4,*ɢuI嶱c}崌p5VyPg,ە\^NSұ(F437e 2lgtXVX<~fOE#29WVbu9~Iư{Ej`EY[k#Ցb@B(=k ]C]/T#ʟz ` |C\7oe@+su=_%f!&bc?˴F_}ܯSq9߿ 9m&qһծWw5]"7#C!+}!}$>xTXS'rГLvdvw^b7CT=ɠz֘axeIGDp >e ko+~K+j:o&<|ߝ U#䕊Egw*oY&my? 7Oq_zFs=ڴSI#Wj=wZYifÑYut~WeAIFA4Sf]>Y)i_O+Cƶ#mQmťvیG_rvUYY}VǢVgZx`p\O;z}S=9^P]O@xveWڼ(QUEBŽz~͏]N~v?Pk}Y;g:=S;PpP S/GWS7Y"[ 0$q""d%&=4jj53 *_SbewC-y';7-wz>v>7Թ*͏m{yģzOӜ>brNWc"^?{R{ĉ~=S5>m头nL܆J%Mk=:WE3GvTaƓA*SV8Qv?(]DPN%hY˧{Vf+hdMÁgy2`oAS9x7i q<[$1HyM~Ѯtik$GМ_QN7N#?kk俈"j-Oi1Xg":K9sǽz.Oҋo;>sL[)-veGYڬ>o:iwYaWM[64/zfqg}c U5ly/=Ydz.uk8uѸOۛ??s]Wᑼ/ԙ@ӈHa6&J`N-,­PvzY7; ,`BߐؕR$,{?CdۓfJԈZlxYO=}'^7j@ܐ>#L_,5my)lbՌcj2D;5fv0R_ǯ:n!Ì%:>ʼnFNU9uYe+Z!?|w їΪk֔~-DCe<OK]c:P u{pGTvnsrːuRAgm?g7=X$̞ޜVRHCMȄOa>@?;c5js&m!j>!*2<)^8 ʗۮ?i0}ua#ʤCJ jNJ)B(L 7^^9cT4qE#_2kv-;ÍDŕ~ĘڀM1 Q媕#iuCV%T1{) .%$$`CJJ*0%#ZnlQM%ɻ-LHWaES `oXr)E =ZQ߱Hv`̹`墸mG/|*Gx˧vrnVѭq1Ư&5&wkѽ7'w f^#Es7Wc"Дcui#zF.ՊRVUPRɋ&[g)z;tl_ oke/{he|) )THS z-m Q KTYsZYbK&341W 1*B],U+6⨋* |K-ww3;9.7IvYFSf1ivX^zy,G5I*9rk^潈PɞXܦ(* R-ҚH5RJ B>lb} /Z ˘߫|RÎ*^mDMmk^,dU#e/MP(R7SUu^vv󓋦u:L@W0;w KW/1itLQN16o |vJtB m=q6oH~3Č %03sǥ5;yiNqR_RZ1"6bh.)Jb"FiTK!sCYv52M^&UXlQCzvyړr|zt7xD#l~#;"r@| hö_qdZ+G7HƸL}Q(ݴ*@! :Eb!w` J{t8E"aCXMFeˀ~߲;sIZ64p>M@RG42{)g #X#9f 2#Z)x͂e("R+ * QFR!t@(5kF r7Z㹽 TX֛_N12v2 G0"5Ѩ/ߟMFPL]0`^dDG^afs앻3ɽzrDAr8c;Q FRu􋐳Artn,cI<(&5A~U4 iJK$NsMw֖ 4L Ej,=Ӗ Q˩k 63Q@;5c6{l4xkt+-z*Zp2~Y֕l[ %oH$E/$Nb:7&b`ZLeASsBa0ֻ79P<@N 2"R*x! v1-]4 t;O[V|&iȄ􌗐֪a">m^s]lj-saBm@Y]c;i IvbCK56a YpDr4SUZ/2Lvjz;/d%!kS** $4"<7qq]0%fA0 ؚvUL!pPÇTlHiu{7\eS JJ ky[ M賻 p(3'8Z™ `3D1x sdO?gw9q 6;W1+|q|tL`ē|T@$"TJbQاw;o(u}>jϩ؝o=&^]V! @b(;zR7C\?uq5;Jon[Z<~,Y=`Nw$\zWc6+qZOSQ{%(FqXxJ@D+'P 0 BAD_`) 11|U;ѡ\75o *8xtrVƂSH6 -̀h'VAJit5?SnyI$pZ2*s gK((?? ,֦bn ΑV`3?$ 6Ϋ+``wk8kqqW$q6k8 -q<@lCX%o'L13Ԑ( J)%ۼIaps T;l V{wIqӕa*nA#c5e Jd4Qd*Lav/q U@(@- Kڭ^B n1 `HL4kpp, ?ȵ%w,#YV_e4"<5%ggrq˛NlvLF2gT22tPV8&,il&wsU_6KoZF_;?n۫b2! .N]=[ gEczbXj@OLU vS5rRzHն[4< " `m5|ZLCoV&^5` 1خ-)#'YloQ81X,@CnG%"Ia&ddEGPjNĔI JXl" 2$H*N^6PV1A Lp[1& d@ՄȒRIJUHR ̦f~lQyuw$ӆKξ7MQ3!Q{c IYw4~$Y8m.ǭWҺɭ#a W_ѭzy@ᰱqSmh#UO{[Կ+}E0{{L=ɹ|_ o!0lߩ7> M2/]#3@ֵj?v<ꯥHH.>#Aw},xv;bIͭ_?skz~!tn Hm~_D!0ggX>c:4󏴷dꝻsR{//TQ{ns'=VjO>0C#mM?[62ֲsES\<3LHM>=s\`)    wh J4mY9|ў3jr[tG ̟0@8{NPJ-k[﷽34uܮ-};>{1,f|Z˦ -]3{_W`}w@M[mڼ>@HcšZOvrMFFP*z>JvkF5ĭ"L dԨK&M PZjYR>`UT} % R %J*(QU@  *(;fQ H Gv E Z`ƋLf'$X`@w9vggw[h:w|PZHPQEhЩP{y ;`/yAկ}qw[TW`fhh727@܂F*a"Ez`}cԧQBB 5k+-_mHP9`g4T€w^Q@G}j</5=+ͺӠa#%`-SP 8.{Z괪 BH:jFK`a,{vTTP*.fZN}}z5]TJ$٘= E$@H$픷8].N@]v-=YzDjSWfei4i hh{u٪>(Qf1>Rat6>6 =wsQ*E۪@ݑپZވю^.cllwIv6}^ڋ*wQP(PRw}=Sek"@4%Q(%QDURI(ITREwxXޒyO髂ް {`PP 4 d&&4L4OA@4Fihd 50L2h#I3Lɤie .?Er8LSM+_F>=k)usm?~ŨV,RfK"@0Qb`ЉT)AbZ hҕ()J $ةQE!b=;wwwt0 d ddadI"̽e׻"AB9^Wi QEE6Ԅb,h$1DTTFb,cdѲk,HlFѲTkAdjhߏW}]Ddr 7%~B\j ^ _^9srݲ# 2 s\cTdL?92 e-z:0})~9R/袬 #*(3AZMHQ"F(QRi2=4Fup^% /[HvsH`,t63rd`YZ Ђdl fP,m1"Aึs-@lh+FCFDb śq0m8$H0i( ,P) ;&AQZ%l"خW]v16IR "4X79TZ6( X kFBЪ–aupܺlͳ5„R,?qLRG3 ", oKݩeߝצ46;M˭hگ.d4gnߐ!`JA:PJyݛhVb"!0QU&M(FM )2b,Xa F$B$$Q EL$EʊLMDM<Tyn/o <֎Űwz-*^_$FEb*H@!4FD1"i0S%RfAai3Q4e##iDhLH $,bRLF!&"T`Q~]tֺ5:W:y%#&AVnMC@,<ǵ uM't `YxΦa h-a1 =eO-bH,UՂƽv^I>dށ^9ϤKBWG-1` !$?az77fnO?^K#ez@׋t}=gd3`AAfdm̛vH@ Re yMtp(9ΰ/ %?Ek>+[Q7F)FM-Je:p5k2[hGHSw[)X GwSw\NHIYt)8N!}IX $t ;|<37gHU̕idQS<,'sԓ7g!w \dn8'g69@ńJj n7PP'y$Y)s oNI5>? zxzrVȂGz(z?FRbw=iC՗䦙W~PJ֓ǔ@"TPy]ᆥoJݮ6B$dp4bZ`6Sp5๥oBU$~k7},`}km]NtS7z0/V[)r Q͢\]Tp`QQ#,U+$SW*Y^5t_?խs0%A`H'ngw_.^; s\{[ξE (Y b@ ijC X^'"1 BB uGpa#-5S=;M>`a3@?qWhros^l0R=-I@ɊNQ9<^Ɨcog+N3kV:bƱKRz9ƚe#Z£]\w_/YSa!S?OE@>gT^ }eF4ѹ1R4qlcZ)Q6"HUH gV UEC]ֵ'tdpYm{܃bm24ʋMV9S.U'wۅ4W2Hpo!E⃜)Q;:bm4-I ;{{֨ c&aL<h;|ׯ5^iPQ`!UUPbE[d?%6C9wݣ2m:jqGŷNDs`Cs*@6 F+GOZXvzV Afz#p\V ~.G;mS+g&}qPO&1,1lYbͬ2wG Z0F5Q+sg]r-9F /`jdLg=ZӅ8W ȈvYOg^벸⃘l$v)cQƊYR<$h,].zIfi% sq$Pen3^GuIO3*EZJ0F-psdo+VB9k{WXuU'+mZЮ66YVԒNY)n~4~~Az; pf'f*LkGBiX5^k>巫9Ъ F" +7m`LQXF X6*[[)+hI^;sѪ QØvUigI[SlAGV''~V!Nh7=-ݶ~D6K`巇Cwum٧3ke9K\V4YDDFdDKhVDզVI[Q"v:!&QHGCdə'lmEBM2ke@ZJADJQP J Vfnq:k&^Ĥz4\\Cɘp Lյ}SY^r](}Ԧ42/b/KEn229eSXl, bz9ڔ,cA3:,ktW=]LU+:+/[]-U=umbsmiCE5ks?>21nuE$.ʂRi|_Wj>ڹ_&r;8]DiC+[Aaajl+BafU Ҥ>Y*SJ *RQ"5`){.|ԕ }:wo uWL>=Mގi=5Xc)6(~ɘA\%0^"N!#o}DQEץ g(6#M훧e@O@}2 8} q' ? 03@Ybg^$#3 p!<&bPRd]hV0pPao {2tARIdKt,(((ݤtHQ)Y d` {mp-Af  N!7͞ "Q*FO|`(R*/lY~9 T] Z/^cUx!WE+*e(E"ӸkDsʋjAḤdA9匤D@IYy3~_i]'{z69 m"/O'Xc>sEPs/M}ٿi*P\c x 78c,W'7'Nf`6QR"+ Z9E`HQZ#+fƃ![8gzU5t=PJGcƂK>[ӌE-525t_B6("&tQ@0!qDe3|mYLfK޲=U3QiIkO1VG#K> `D,ZƎBةIS})'&48@hy1?۞m(T0,X)wYE$!TβAҞZWzǀ>K0\:(2fMNe~=,z?<3z~]Ǘŏ>."V[mR[^TQ +4Z1Q( + (m.7W2u{t"GUL߆T넇[zs };?$w^9cןXpRfP%Tea$QV,kQEqV5Eۊ(ú= q(؆+D^s}u%.Ø0t>`R^K" X?ȵmx"i[䭿"t{Js[VY2>_ښvbUކ^MTYm nt4HN;5wJꂐ b*bqH%"̒5qSbAf6mB &5+Fۨ 4W4e^_Ft?f~2ҒZN2O?>8=M|y~Z[lI(&3|bS ޴i#S]&X41CO>k7 k Lh-$=չ2~%4OYUƂyp,̒g6 ӊOYŨҘ&Wɦ 8he-QLgdu$T(QO,G yMXl#әDpp/0z)J,_3H wְa Ȯ>[FU6)H""AcAHb)2RY$ىx(QD1}7ye=qjv?_ƭvaKNc:>gwNџoYFġW)yM`d= KQ}#U=.q 'g CO ć*?~"R",)k:zoךs4RNCs:]NaP" G SHs聶01J%Tj')r|+8RS2t}*S 0+B*}&*&T&/A)|,2|ťz*`U%Hx:]oĬnB{30rnH:4 |ʔ?O@\sCH w.[RƋD䥑5@9j[,#TF2m6ٌښ$Mv>w!Ǐs1 a6+xvXeMe^rhJ_Up"%-/-JVv)}[P=cpber1^wLmcz%a8E,i\j4O?TIO*M\[y%8SCO1_`P83VH&`%DE(CZ`EDTݣ5ݝnD*RQ *kk @"C2(vl(4 ѰX(a me+,P-k.*-h |-> Pa S8魟o2>ӭÃ5ӊ>'_#}L6a^gY/W_lI~~c?|'N@\߉5pg,CdئRW-蘛ڴ>|?ʓjn8 3f-@4Hyryzc tN>n2<' 6+M&9;bhKw >嬢NDxқpXb9NlqT|ʸV#nʗJ ֦2ˇj$ "O$JAsy0U} T(:m:znK lX%%IВFSFF4X4IF ")A|fiw8V"P~]_Vek!##b+"i6x̪YC\ёL|ߡy5bPm1EEKآ+vks)(!4-q O`s˵ 0%.Y˓Kr@\D,jU:cw\FQH Jkķ qfDB#%.ͲzrPּ^y :3 Fd0nؙAF UQ!i10T@ &HdBŒ&ҦDD,f%(6ۗ%F0"IIPQ#op,͹)%U,b(_hDuZUl$4&qqR3aChFfHɞ>\461F"3 @9 3sZ(,SRYk~Sw'](ݼɓHz5TqHJ׉[o"qZMF$*6f*_9f]DN*]iI\nYf"Rm e34mnW(B ͭ ښ'$O')U"a{#=ꮽ"Hn P'UM-3MHIR+B 4$Wi M1 nܮ[R A`, H H[+Vk~G#uxS66ٌPUY Qjѭ̊6m%lJE#Wm1Wx`oס]'9e퉽5e_=Y۽S&)",Hzya|Kڜ<׸,5-9Fނ$IBne!tnΑgjk' t.O=[jfKg$kiMMioM}3k81P%x{ 8f VŢ ֕o7A_o\f[ (bU!܁$U 49v"sgy٥sc\:iEU_Jػ^e *)^lEUcsq˶iͺC ~5d2wb-"H3>s׿^ony{7P22xTYXr"ѓSh-.Yk6L<&ND,E0諪h;d='kj+[wӉI&20./4`L#:J|T%1X4ύZ!.#xbC';=\!M iQڐzuh2V:jMboYw~ڰ,iu9nD;:rl&@Лwfs# Qgaiq޿d>46Y^EóG$L'z4YWp}(P/h͐90I  ]G5Z Es%| L.`,"P*^ ʗGOPsf$"~W~o3}k*wNN1!XVdE\ 򀐁 LJ;ևݡSqv}3TzQꪘ%|_,^|UdJZ;~og4nSl Um󟮷Uw bͰ96j"ή|O1X5͙Az+Πlv % % d9K! !2.`\sJ( ]Ӻ-N%0$|#n3ge9߻zt/6;͹ws'؄* JAL!-4D]y9?rcE>';x~nD2?ٝ _uꯉ<}y) OzED!U1sp2TK!.\huP } Z KgZ>_O.6N8}5īT"? oC.>OsaoGes(Tfn$ )E=`Es/ߜ^@=iI ֺ_2-R ,:ݣ>uwb[8,&BbxQQwhmhp^Qf ['=oާtۑσJ']1uWV ޫn6l҂ *yOI`E)UWkӆ~ns}L[R@-|9a,֍NE(aLEֵbJRP*K8u3Ru &sdt@,wNOCG 7?1Hfp*DۼE tS$/Ņw=4=SQO X#PP-]~_ﳟ/Q˫ۘƑ-a(,DHFd!ٽl=΅7kZlfisYJLiXv2fllכ%mJKKaMtVmYgI~&*A6zh2aDpK:bvumHqz!RT=e^+Pb*5օ0Wg[JDŽ]7H V|~ƶw sd{DImlOul5rftvӢ"misamD{-jW"`o:×<ϖ;~C/Ȥ,|1Dq*H܀Ym*b D)-geF3Y sI{-ήYo3(iQMk (U[2 e/hn*#KW\4rWd{+ E> BZ(N҂q>᣿ N2v]e+DDL/A.%''l";#EN?{~"誄B| 'gny܀5R? ǿ;~FPەäbPd-bAbٕe݄H,vtsPW( 0-7׸m.w1~kEM)B2i2RLtSUBo#Au{tmBXCdOwJJr~/h}d[D͚t@.gYWNG&D0|?~>s57306泖(dOt꿗_f|w]WE*% &N%dl>5Baqkg}>1$ԥD.2Yz |YdDJ3oHQ%|^zY}f2I3I?l.hP:6Y6_}*˥W =K >?CC%]kvpx1{?Wy- L5^v;+R,I\]kA^2d[%VYR>F:/!P|39Y@7\sQ`\9s(HJZJBbԬRʋ"XrCYeX* R,+ܮPνqp<4GI OpG+j?EA5o{jyLX[%WBB)EN[!9"R} M`/ĀX2@VVh4&MeݾWQz~zI:73;_gv2ZbGoet٤; ŪdP}v&GMϖl }*ՍNWanOd>-1oY) @yVyIn>nfL붹/t+o>vs=t[,K"@I@j>~vo} ~?νvPd꼫>C99lm5Z2ٝLBpNьOݫSWWͷ H3IH:Ebp^0Dޒp)cO<ߖ|n;<_Mhӗ%Y)&<65UktVA%,?LWq"oe#2*=7eAz±-OfUO6y0U#* ]R)D1" DD)nLh_T *oUb'3Ç0plc#;sfB@B@@DA{^<[4T!;.fc-==43[zGgOMTG[kr6^իk-O&ssve}s!Q}AC"2Y_:#As8gG۠tu2~Xzemo̡{WxdcJ?%Ѻ߃%kg9!QV\@0B'm\pHҸ[?hvu޾_%,m1C(A_b[-.W2¸ڄj_ʹiP.}?)V6귉 Dį)_B1@" $L8⒘q.s\UU HSEAbȢml qqF\\Eh,bԭ@X-|^{|gP\(, rEODF6fl<__udqGJڭ/N)|4soy[nfa렮{ u&({Wݸ~ fsH%u;ov{zES#n8k߯)ٽ.ժ ־e* &%@6f*qH P$=%:u<_I~/np`ʶ0.wg, gqAg[nKwh௡/BGy{)x6W1Yev^A=Uu {/G eBϐ]G. (aBʆFצٷia|+XyPw.Γ*OЬyZ{,",W8ǥݑi H"PGBԄiq6o?WzpYVfM S7ְUCv]xvʼ:ws:]:,ZN*fjd[ 4B}K\yp@LL #T~r0HP_EDR)K; @`0N;7pcw*u "%nRJSQ҂O( / \{mU\{4CJfCx( E@v?ނID_?ϺnG`۴J?nzF[MW3DOKoH9DLVtP]]3K3ptTYֽ0 [,^bS` &=LֳHvm+"*1Q"J)^ņ1""*%JK(נ/a~?*K8Gc5n9 DJ.ݵdd72@7?_UHup=~4)!|P $t=̢>gA9H'm64Pl$J''#f}a Ccm_2a.|qێ('c;~+&"A"rESyLR& 6{;)@ĢR]ހO%tiv\ܙA@ڦPz2JiPO}uރl7%0'^ .}/\?w?|wP=_uT+CD#,=D D.DQFh@Qgْwx\a Sb m"r=8/dqG_=+b!$Єg-Z.\XpofQMFM,yʔVpu{!N uQ/UWcQnS(W\bEˌ+!((9C 'W.]'EEq7ڱ(ZTa{w:{\5b\c).\qd+mjʂÛC2)w Ä Y!rdw$0в<:4\T v1p.r! 2Nnrir$EȌUHF+Ά=a77% .Wsm41Udh9EЬ6g?Nn\MsJ* cD3T"0b %G.ad1PYsމȓXRH8TdF\'3ͷyf{cy  V$v<~J)Hv͙! 2c2!ܟʵS%ɉֈLr{A}V!P/6 ;}mG>7 fQMNrA,EH6J;Y_f^d}tt^|/qwkQ(+x1""%@/¸\fvyfzDQ=DC4̑p1I1[oJf{%p\ޙeJPQ".2܆ &M@J"y 7Y ڵ ]UnDJ"y;`ujKSC2P^z7URRARמSb_{d8$XA9ti-XfGF?['rL*dC3..&WjjV/m*+%OH2LvCl Y9-(j5Z6 K,tTȭh %&!DR%)wqWCYB32!D̯cb PT]0,7pK7&f?&T)^j%\UIUkp%&h!A3^})5Τi@0"Kb4\l*{t4ʤRU.%H!U< "ww6qNˉ1m:J֟ Qy|A#i̪}BK#ʹtNXnE 0t9Q5^xg'K8DHD>E(CuVYP5xMAg7W *D? mAήw,3QG}z_ӰSOhiY/.$.ԣff]8S'u'yE[yFeDwW^~mvb6KqmJt@.P=85[8 ڸn^F<@-u:0E4$uyԚs%Kca( \0`$ت] zLl-7HGy`8=)@={4-PE8>yl"K7K0 ,Yef%ar"r\Oı#<Ԅ́IAz= m֞E"- APMc#.j8|gQ27K#ʎSۧ~nϨtFJ$Gڑ4)*rX6۟F z\wO;2 *b%Z- Ʈ{ P[K7&@·S{&tyo2-lo2 I3i'<#AiVC z8(]_vY=ňF 0 4 [{Vԧ.ۏ F#?ZSORA"R0Pdm6_Ud $D]ehǽN:/N{jQQA-vfM^]_-˙Eds]axw4E*-;qsvD1.bqp'Ҹ܆,` |]1@G!$(yx@?˪~7( Lɧi*ʊ/ As7Çk쨩gjf M]xm#ୄCSJ:w$B1¶Xtmr;;F|~Wڽ(PȈ# ?;Wm)_)Ԅ EmB!+pA).[2jY+t$?8ҹ%m"o ll?6g9D{^b?H].A-ah@5蕊y)dYuvov|;FDC LMy<;mY( !i|cQmu$(fT lX4i4a6 22t#H4Z(D>i@7-q#R0ޛ Pt?Kըh@eB$.?I#m}#<^}qAZo2%e]'/'[t1Tz4=2__O=B"ZwD8%m:ݜP2Q]@"HC~xXYX*tM ( Cqm.x-~F5ADۃAuE1Vc՞ J[ʭ=t{%}}\+\Ja0%w/oX`CnW͐{c3;dxUT쾏|'ϹW`WAH@* ʼݑDX^ŕbݝ: e Il?wӗ GvUtօ9i^g znAq|Nw!8"CN0d~Z܄JzTۮCFyMJH-\73T`Z5k0sP)H^L2"5[ ~P@ $ wX'b `35K\[(˧KN I)$'@I '-NFNxB,hC~Eư1c) 95N1VΠV+#TKӅZYzU+Qg´SCCҿ˫0#i{yI#R1?{z3 mò V2 éV:(64:* ίƾ|mOͱaK(UK!I!z=b<.,m /{2m^zb,*_p=,r,s$l{lU}S[W񔝟?>GZPdYW'~Ӎ}̫Z grúee¥jo&~Q*ӷa Tƒȩ ;zOpK}YP$) ԑÈN${A-'ҵ^0GJ. QmQ$j(4Jgvm?D' Q?6?7cdzRdzHtrT8V-Gq|r/Λ.>8;OTsir DZo#hSs#Exe[*჆J=f!AЅ)Z7NXYg03Uyܾ_2gv%&z": ]wZ}ElHZG /6҄cx3MNsoZ{ $/ܚ ~P'HRJqwmwsH JiÇ6?cPGGjAǖ`jΤ*U(U2\`j|. Dg5#f#_hu,}STvKFiH!j?tsj=7C|o}xU /-!w{K=%5RM2DUvsj;{KqƫϫfQ4;.B,2K!ԉ͝d;sH152wd!_suw@rOO};D|N1}wwO (i$+Ta;:VK0bIwL$0[sÏxiAbVo,c$|ۧ *!aR.hŮ T+,IgdzETU3JC!RaXS?$\Al.숣ۿ362D sg$hKK9%#ng&ӡSqY3:Ǭ3^ 8.Gl2mcV\S' UDKvDW*&RlU`y)/q&TSAK+52ËWg7+>˸C|c"1`X͞tʢabG8嘑 :ޱ%Q8rD֝jr9M  \BA6$HQ8&/I}RMh#.|ꮀNo5ɵo H}ӑU7Lڈ`tJ@HJ}q s< n{ˆW&Qf[tD=`gbH23p|5zA67E.0#ڰ(i5GX?r:Q~> _ 1S7 d\nTL7ӆj#bYZSY-iV1nw5amԧd,e̱F7h.oaM9+ .3[궄 Зi\Zv8Gg6)<O氉&0XNrwfs_}˛PI|{ㅼlO'PDR gщ{$?jyN` TYK~=MJ$$* O{pUdWs-.CӂǪqv#5 IkK˷N,seJ;S.*1$Z9g/3`yﷷk { }md:ZJﾞ~9!CXs8:@XJD~RK՞u}^p~r晢 yrі]ۦ9$H"='cAN68Cev a/LN?Z@,;7\ &ա(bAӗe"{QooVf!EgK 5cyaDe [*&MA "6pÑ+mF|Nk$dW7"X Qr?;/5,B5(-* c%f# ьn_nuiXu$"ő N ?{n= M` q/6p~.Z2|'>݉{ʜiW3|&o78ZRrV7A%UwQ}#:t= Fyx/sCq v;wϝ{4NT,:[1Ef]fp!IAAƭ=c-4c8Hf/<n(X"Z [:NW7Ժ|zJ=D 3m{ӯ\f=PMIYwQj <^N;HȇIYg^sd_JlIdXMYqRzBhvA,Ho ,Hq仗`B s#[Hw!ܠGTތRYnCR}b 0E 2!ɹf޾}jz @GS߬2P 7!"t#n̄{*:W̹5 A$ ,J$Y~`nh2>Ӗ+CzRD<85erTa%j`<0JZők+2kN;7vv ^<}ہu-HD ({%ϳmJnPovUlG,H"Zg}O{;Nv y64єUx~[ECLbFO}ӷ~g4x3> =&g"e^k D9C6Ghγ]yB#:<-ng__U+~Ũ!(( -04怒;kA8vAƽZ֜^ܨBgvcy\!&-~6WM)').3 X oulGH[87`|xyJqC ΣJho(5,s 4뢣R2ƢꮱI e69OG+Fhd@@lmÅUaLQKДɲ' Ea.?/t0,M]=Ƌv;pӯL{(m%p0/lw jW/jmZғB:9"Z+ Uy`zҜLb8䱑gf=.ʝ$`U Q"tSB!&^[ţ(u45-ޡwk{fL^C v\_SNI(1~@[LP {ɇً>ȱ@е/d+xx*QjEDP };nmJ (?5i*%E-X"G(~p_dJЈ\vZ0D:BHd^Wvؒ( >ѓ)__ۦG6ȶc1 R}m?{|mp\]0 bdC[z "`M 70ْ&&pW u =à1$ àfm>zQ0.nkW"1 w8( [TÌw"(+3yG7#a iJQ3%]SK}E۸k4c9sO]1-Q8/#,nz< 9kJynJ2 \E:VWQRqxbI s*qI0y;v2.{w֯Pe4R6qJLf-[~z[TXE'/>q%8 M+`Us < F a $h}-TUA%lDA݋N{0k:ɽqz+nNtomk{^qL84Y FI/f[D+ )%J Z a&:~?ܛ,}>vh@"+FstK؝ŻD y( eR4LehBAjwg|t εѽ "pt24(yF|m'Sgqx;̏1A "@mD`i#M3Q㧽R:Q3$ A >W [Wu .T;نU͘3aI`| њEYI{;yn4/uf[qRWޠ%qUn;r,1'<uAA}g@bv`G>ԏ k|-wR(0Sr jvݾq#=u֓c\WuI\8ȵRsu_^n]{;_Pvtf˿Ay0tDN<& mݿcYJ: NUEΑss2ڻ%I=庈"synhԬBӔ+{+R -B!$cbp_} ߢ%MWUmxY[hx9S1 qE3#Ӯ`WV${pbY{%zl"-=]b X:3EpF* OGۨhx辇ı@ڌ7Kb9?`НǞhB2>O\*wTW32EQ7WD' oF:?|3R ξ `q X%2u̓ͬSQ \g, (4&;)hɹn8pDSnZ)Roʞ~1M͈mȡ+fÃCs V˯| [MƣIWE&}l^ \}w)t+mDʹqks1݀mP/wv<$hG?ݑ[l ^? I4/ tve^ Z4M]1|2eVbM.u4"jճW!\lmߓv> J k5T\#34*Væİ[HὙ2s/^vјm\Ūb" AgcZFՕjRQB_ge@O]M| _}ҍ$^PĆapuH>ZpgƞD%+zBEz@#b_CAǽȱTz*uoJ mMKCoο A4rfdx|H$HbAv OF4ު~g9SA"KFQ:= M:dAJ J7xW?E: s| Q İReMn 6-*IP!r : Љr,%چZ,PjbF3^cH# 6OV ﮿ֺW܁q”GԦ5knSONr-sDJ,?jAϵ& "a:BE((YRigٲ (јȁO7Gs C:JCC:Ai$m;3tUF@Vua`gAMۺ^F8!.s^pv/_ٺbcth?NcNŮ≨ZJ V=fbztj3xri>^;UJ"LJ΍$ \ KB.E"#c̽A(Nl43nN(]A5FDe%|0 QY ŵ'mקEt=c㎵!j_J(S}G,OJ\<0Pv~mt>ks2N%T~/Bw,E(@5#$ՙk^ގuan~ja`JGԋuˍ26q5#Tu\4Ò3% ̙B˅Y(zOXg&Vai#og&\^ }sC-֤ZuHhc_ՓhA+A\Ż10o/(;+Q ʉYrC \VAyG00p^7Oc[ necq* *Jʛ :j\8DwƸ!;:+bI Ʊc W.v;,~nS.⋶mv{K uo&ve8wl%m; &s/ J+^uqcmM=XI@<Ū+y]y8"y۲ːBBF(2.Xz܏}/U^#\gX4sRu=t) -sf|(h(YI:8{gӯDD(鵄D61Q(4pY-~5ap"7gZ\,Zhv1;҇>`V{6sk䮖p jui|\"ɘ]䲘WbJȯ3Nh]`tpa2v(鉣}J <[ԃ $n6b8ݜ -zz(zEwsهT]S 4 ٽM\#e1i)D%R7ۭ!P뵗JEFÆS0n$-~LEB}i`ӢY.4{y[~>Qʀ8m0e7%QƮ՛5~2ڽi̳0$#7`SҫzueMzf32ݔY=^N5Ph-# a+kUVl#C'Q7>]r!z# M]FU1g SaM :ڍ'Y˛8X3Z[19~U}R/5d, o.\6sOexPնY+N!t%hpf,m)@XDJ'f(-'!h#{liNP ]v`u&v]U;,L6c$ Z jjc]%qTN{t}epUJ`m:W 7칉|| l,L#76 7"Mۉ݉5h <4Kŷ$$ס~9Ƴݹ ;ӛt4ae0<^ :?[UF ^$ yݱ qsʁL:jJxZZΤFF6ב%qQ&G3\m%;>{`-msܺR`lEEcь[hՠ1yVpo_N9Bkw֯ Gņi6@ZM%:XW5 U4[]:9}wupeOi4fj/+/5k?Bi2h=0#T%<#oqۘf `/S7AsBY$Q\_pˢ{*Ӛ~d62t<ݼ|y\ ?gX _niDpկthvEnR]Hj5BR~,lBP!<^pܧsG\ d)YRlY10 )e8ytC^K]:eId]>.M*'nm"[523+]o1P,8' ` rϥAO9_ι,zb\Ql1K^ u tҏ"_6dY9 xFȟ)>fh*9DJΦڂ 30ٱM; &2_s5jq?T)2ĔD3xw<.>,X30b9dAFw܀ķF{21䍁 ZNvuC[r$$>Qn4%;]v\O.Ľ)zemk* EG;r;&z7:TP(Ř2 DE5|@1uO`n=|6]VZ5JD EadM.塷+'*U }OYؘO[(P G/ǡV¬ 6dჀX`0h&&97 8mg& $t/룊pfz4y~q!=,sUAq 7 Auf*I/"%"5(spWذajҺ+O7hu^D_mo捰IN-/Qy.2.|kKvAENMЯ| @xV $@r })1>FFV7.wݞ`Q^s$jqjPn g ig:FUUƌA`ݕ^)Fs߮)݌pS GG3ͪ+ȠHhuR(!c-Q`*2;/+3q" mؓtgH@~^ W46.fr)dKjͅV]*:Bo 4CfueF|(u<^uaEءD XĂ4^k;ŏz( 7Lc_\r|L, UQ(bA([qh"f ^Ëi.P8̯tPIT9k9q6͖xt2 `" x[B2㲊IM*ud=DNIt]@г_= R2Uez#D?5j0KC,F/_3۴WlB,XR}.5Źm|xw_Ӆ6p{jvW]`VI,X&l^{\RE?_hP keISvHJT% (`o k*,8<R^wa0)wdT8 eC/ 9^#"vBϐtvݞ۵! Pfm\;\A I6aNzo~W,@< tr6-enÖ꤇-%VCeEA2 IӘPG Pf-Xfw`.̓CƽJb&BQ AjTrqM=M%TxdAױ0e. Py vpEĄ^X·̑8:Ԕ'_[/=‚"L9G'ϴq $Eb&ul>3X u}/b5?XO8{ss$cﵽjRe>ΔEaQ(JQ$JWrYL83GpiLXXuc'oX6l7< Y30`%[WS[}VLEarj-:$w\:ˑwA?8ɊzuI.6x5NÑńceTM\M &M#}M]}h[Mvp.B.@z8*`thǝwkZS54l&n/Kݵpd63w6_QF8{hg_ك q0@u>[YgylUUGDp?2/'{(;k;%-u=.w pdPPU8Hy/G ET.'ROx/lxn3w|n?Sj #bH)WcY }ۢ!C[JDOCYSs[}_ATl 1{{gxн9ȪM(88L"~ t?ՊwG5""3\yھ+`w7H~Lxzq? bZ+ux>>0_T9"tFEC@OS8ȢCK\ϊ -b{揶'Kz8>Pq ?'3v:B*ʏW.MHJ&a@C>R*nE .p/ tn08?H+~\:fS@9=Q)V ȉ=m: |W.w( % C6b>29/[?Xbd]@$, י@۲ֻ6hEN(аA$P5KO5@Z:X{woe6%y Ёݼa n(rc ~C}8s\l;(}8;8(EC! a" ^um<yeu*\W63OwX@1 U Sn:|TLp-Q}P WsЗ;(v!wO?{¡5c؂gEkTPirE"0FH?/񲏁k_ˎLNP6Ӧ}.+ PsBl |ȇWOޣ|,6?Y7i۶8}vCanL0P]*Ǩ|'S[3 gCyN m  &;wszPWkr_;}~?~݅C|@D>oD(?GoPL?}.v_9})mcco+kɦEV -D$!$D}7ۨ Y ;BzqaC rd@M|EQxOƌt~oxGea).__oC8p& bc{/1^\<21?|bm |+v]EH*Rl*8!\ur r D16 UE |s~xǴ/CVPPnKR'#wKOk>O5`8I|gbwp~f '1_1+X8M2W9pr\O7/r?K]p){]מ(2NDZ{`Y29|ƚ)5c"ü7bCo {-Wvwb@j]xፎg{(t^$Ӫoy׳k2*xmEx1xkyX͊RїlZUVqKN@+Huw׏S]% `w?52w|(O;пV܇~Q>i'?$ ˟@O~ R @lX9׵:_ģ4N?R;n]H3 Vvrâ;jݨBؤ TITS^05>%Wꟻhq{|,2mmh4kbƍo=jmƋVɢ:rh1B @)3R3QO?Ux؄ʴ0` dS Vr! H$ }HVrן2,_T&]y<LH ;K㟂Jy JJo*dZn5IXrV;om ET{HTŻ` F: +ND,JU3gЂ#E.t4}(!m~aPt*y0 ̥58 As @¶4;D,L%Bɾ!T:I4mhI Yp$%c[hHLlGz,)EuM&8. 11QKDl$H=՞oe/ZjJDvKZgQ~ֻ?D#*JJ&iN5]l[߈r00UDt^ LNru`~1lk`~nOw5`/X1옼 <}/U}uNયS}m_ad"YۡVi%ZO+PĄEcCJ%KA-E  Y,j>DE P@l)ѽww6a I3I! B"׼X-ħ81(Ou<Р|k,P F8aX "")"*8(*9 " "")) 2qA E $L0JVLPs ;؎ @L9`)mBX"% U@PE X8T$A#"y*@9`4`I IL!S[HsbDG$;l-qD>*]ΠqDDŒD $PB%0K_U5"*Z rRBl  C|+qPװ'qam:5э 式J"Qne0fuNw-.TCԡ@uWV(Ptc$dFL$f$MHB(HdE @L0$0)3 `Ō`ЌdBPJIZ2IJddQ%!Li(dbL`-o^ga8Hpp@1AGEEMAAHDIdd 5(ob+i' *7@qMl6wS&lPDnJQ% Cys-̈X.t S "r&usr T3%xm:Q1p*#QЀ( !$F"-`苊 D$'`|柫5g_0EFЬb*,TZB1im-Fe (jWھYJנCbЏ4bb<D k)PFL0S76v6QTD1@)jUC3 lD 袉|$Qr0C.J\0pL芭LD]u) A2>AnN BvLYDE(-^jry嶸lZƱcTZE FSk =6ޗ~^*Hk:PՉP]$>7`%J ;Ie6p 8)QMZ(nbtL1E8˂DEbbhI4heQdQ@ jD$65҈H42k2,IF"1djQ +4X, I$ؐCF PAssVa܄8II [{Y ^@sq p˫ ~!y]+)}?4dCO[;t4Y d :6:تjISo aYxd6&K !˕BC$Wr!͇[=7 bXYd C!lIh̘<=i;âW. o?ROuPm x!*I* I.nvԤ&߿5Ѐc9 p+?,`@EA̘P $JJDH̒l&I$( BQ$$l4`L`hL^@ec#LD2LH1 # XaPąIII\sm]:ĒξI'Do 䊩t4fpvc!4`N~XyRl)nF*X :D]E6QBNP V{/@{Fp$M$$mYˊC:^!39DwE a{E29ۿd?M>{G@5U":CeDvݔݏՄQG`GIύp$zB각{ 14mbj-4m͘ڢ+ETXōkT!8Pe*: h@53̪!pz삈{sP<5&?ޱ~U?#5MFեvWڐM҃m ;H'], 9q(&q. &.qz,齐^OZH;2ݞ?TZ4rqZ$q;˲y0 几/E%ڱ& qh \b0--ۊ6^F\k^~c"J @bI$B`04 lV"6&Y)-AFAS!1EAJ,(&f12lARY2b!P)A,"00-F$ȬX` 5~yQVHx3v=/_MݙʐHzׅ!ٜgV|YF&X"тfQ!11#CB$M) A#MTbf""A1$IL$Hb24"%%RbEBhȊNH;$$4CeC- .@7ULnriV9Zw|N rs)¶pTIHYR`ͣ8jX74!ͮ lPV@%?Z ~E~׺~FƻiB:@v97F&Lf]d JI$N-EHTi%TJ;]K6υ4Za͠Q}]e]t>򽿶o_%Ҁ뜳p|lup=ԝf@́TS-BdW_)hWv3o=o{wk&dQ_Ad$T "ƭmBbAַA= Yvg1 wx@8L=saY=چK6x (@DLKG REt&XFٺw- 0`Yx5ð^HSa@@HI(LsT?'$ B{^ 3<@^*@oD υS?-UzE֥=Td>]-p U>ђ"Z0+:Z($6 *V8ckQFъs9s6M[Wi\7'4pnQF"AaQXKiP&Ƌz_UHN#]}XPn]/ۡiJ} .㷁l4A/((+I)J+i(J V/Mi> \2{N.U3ƙJ䖉Mpñ((6I.~hk_hd2gbm @{@]XM缔 1hyZCEW_3{v'&,8t Hp[־"ֲwec>#˵IU <3 +3pitxGW(ƯPZa1gGzX<.dW6J((! Q( _ffcz6_mvyw?co6oed5'"!DDD%wH;1AS:ݎc/yԀ+2gE@̀`]V6Vwl]ξ3 u-mpcgM<Ͷs~Jt@@W7鱋t3M->٧ko_>-y)@((C+;lytzX9 ~QT@ik_]2}qsZͻWZ5VED 9)AJPRu``*@YyH&Ycml65n9x0ATS/s5(FKe6[ɉPEîk@DEno{aP]]1u@D !")K@OB8f4u !W%DqP)(<Ʒ|XEs@]l3kp,*"K(x1aW .Vch\qU4):8/x (^4"7 Yg_x b!-kqqtynA] fZ]2h̅q9_xh(qQP0P4pЂ?v(0ʵhƄ@on(y{o`[p #4`zX<@|xtȨ;"wJfz+=1C{먫02(%A6AuCuGR&=lD3QpPG@Ў.WS_ ÓiTNo2.]S EGx8cHS>)AE-Q!V{/.<&!sHHԂiA@3wT*fڸE("v݅ c!F.dE`kb[EUQjKOmdsTII5j.tPԊDd$5&`h9"cor P2Nc;wqe3͈f-V^V h" @jTs*9Hz.6س_** W>].8/*oςWf$< ȥ4o.^#؈}~ء?UllF={ⱪ AZJV=V, v%d.*U:7涒t.pvTϱ# B3Qc,*5?JJ)TE(Sۿ㏇u7 ~{l~6ATO7:(&퍧|źݲi%1r f,t6 %;k| 񠶊vyx'?ʵ* "\9r ~>}_dzƲjZ\>s IBY3*m J=YoUKtAyp[!U{5Cnާɲ~B­c0u~ΆRy(?BC羟a-~/#Eiu~1\`]p_t'_Tk %ow;~Vl+W{} gHPLxؙBMuZ:e^)k֧{-F9u|N|ҝGxcC~!HDL)D@@AW=M`фdm>y4AF{{`@!,HfR %OIb8]S ޸O۱l\`^Kr"!{zuR@XBnU@@@$!8/EBMݼ.SMA]B UE &Թ Z=rYipobmUr\PXCVlύ'JFNNXdAb[a?ɏw/z) &!.nE] cM+oj#_NɨN. '=icpKٹփP2!)ӥX>{Wn+1Uj CJj6{V s ﾼZQ(5xrϰVº/c? EWP](ru8;wJE]rQG"'& _&o |pd4*TKO2z]yXVF>8_#SH#hoS+|"G,tj-sp(JV( :T׽w_5KQ]Uo3Pijc-$֕M{Շɋ <ȼ+1+飫p(t !CI֑RO `尶c?IY>$&}`b(c)Gnҋ{XS[joD1kJ#TJ +KMyJ&Gwl c6V#0t%y ,&~m̋ZTmxLv-SsfNpčFmbk yȼ4 ۛWD}g&||A0k5 CY7M~p@$N]y}SgeO.;j;ylҢvpm}A_d0ǣi"_Giit݅ SfIeNz٢ @Xo＞k?e?WdH;*ߗ lI]U.-O$aNr{}Z!K[ʮg~':M^{yy." y|_XMvldUWOoFG?/~p}j_b_`s~ o軫]x>wKoh{Nwĥ瘴췚.?/1>cow7{Zy8n?mt>fx}[%I﫝tQ"hEM(.(qkC'YC3ÍAvo-G,tpmG 50** NքGe? )=PD *AqD;srXV'$/4!?eyo!%攘Z#`Yyk):촾/g[L`4g k@(9(Ur&Of "t7PKOÆL'qB^仮S`ݽ#q;-껟ӗbOoP.3 ߬.{pSZX") _o#uN@np6DIՇf#BH~*X"ғH.4e㫳P瑳d?C^w^lcEDk}Z}#x75,QE62M}W*nzIC?aܼpK3s" .?Cc7EHQ#j~QhVKLM",&ѤHVrH(!gtHbI61h i=rEHU};|.WV!f5b5O,?9t8ړhkZx=[DyJDٕۛ;$Tc5R&{cKO(`eUGE! $KDL LQQq03XGh u(zKA" Ih#lF4L*H 3Vk 6HED,Q`b&d#!2B@ KbD L3,IKA+IVѺM Y*\8GSgz\[ iSZ R?~¥9* 22v&Ug$^]nk_e>9PQ%4)-I^_J&Xxb` +y}G;מH=!,EdUYW~lM2ss4$TU肋)DʾV+٣&ڣÕtiwe=$9V$,;UZqH;{Jֻ+S0{< .8z8 t#'nc&(%G;OP*PW&v#o{sآQɫĒEMUvTb1J@ zoivik< P'ᓆMyJPR@YIFC3%炓&}0 j[_O}0_֒DѨZY;>޵GC,o`[fyo>e/`Ot$g|erit?.[ZCō 62bq $XD2T_CGܷP4A P)}¼v6 :=WpH:MHHr#];em() %]Sdd`b5E$Xd ,&2I Vu~hQ-mk1X ˫|ͨ0$1?9yb UD eD20i+%E"T3 +(lL< {%ǔ+i`^¥ bQimI$IE&k5%J E dJ2kԅ0WEAbѤmmx^_a"Zm{~_!ޅlm[j$Ѩu9,K" FedB54zz0N^* qEZXzkJ6HmVmb+QbQo.*ѹ$JfII\Ra0[$iMΈ]CBT`VKK (#iB`d+. _3]v()ֈεB$յ*nqhȕ &Uhfk][~ure5P[zImC[LѤbi_rD@̓cP>*_j.k^?[߻WdkMt%L""Bk )MMLTP2T0fHA |8T'h)u.sՌHi 4JI*'綰9%b߽BI4:eI @E TNC𰠊16| 9HirIYRJ%d+*KlH$>Őσ˖ۍъi*/<ˋ`o4k{{NWPxyg0]8a&^3c\XHA ؖ 4m>}!b*EuO4wfAWR*O![ݵrn\REL>5 /Dd<u@0V=J C3|.+H/ϥ!8gB9 zڄ`)m Yk}Ȑ(ա!w7t"S? zfsuSYv4îf,'f  gogؐ@+$XAT,Aٚ~Ot'iuZɭP9g3v4=vhJpOM&ϒk%No1`ivuf$DsXBu'?,^ǁo9_)P8aZkͩN1M#?f7UJ0 #F,3R4DwR]$6ԢbO}^xƻw3.j4z+Kq_ͬs"ͧH *Ā"N~b?pe};<1fG0!O?S빹zGCD;o)9.GWmښFXr,S65uVmbl>n*>` *OQCC6 (. zb|T|GAT/ DR4Bʪ$lk#%{|NB3Iؘ|~/?]MA^~;~ ѱx^s{2|iow"]os.K@; ?CAKi6}^v~[ٷyM5,tY.dG@ Qayh'1)ɠ!?o;XɯE耻|'gs_C~sQ#Z8P<[zQ]@?t B ! #>@vH=nT9@}+n=ʤ{^UΠ岊  UN/^*$ 9",RSAgTٞe˵Td0.Ϗ;v}_M bB~^ȡ[e_#J} Ƚ,zy㯟S>yu>}x.l@N @TP(TQKx^~8U[s=O{ֳm{RKqM~>ḝeQ, ,:^*]:͒[n"}MN|o3\S00L.t .J!uT&(kΫs=k Y k5r:TD"CzѲn3C3>X?ޅw9m|&4B$2T(E!O[doM`vME޹ jb0PޠaiTц" cT)mA qjM1Q:!V0ꑎuy2~%x]^  EVCOqOn (4Xvү0Σnӱ?c}+?fWaQpn5>9GHy{_ANO_y2~^{?Up"T&~_ xQQonݖKZw8\[@PWYD0WmE.Pb=u4$wԾ0!6Z?ճSy ޛN?{&}Ϋk_l?r~GӽkvG!]%ŗyGõ (uk0߄HEHǯ$ eg>C[vwͣ:޻'|?ṭ[U7\xpíD"$T!U6ٶ[5ˤF4A# AJ>)=Qʮ-5,iw*J4|¹(IMDτ$UqFĮ5\&"UMn,Joیh /yҹpDle/t>*+مEAOOCCY%% {ㄓE2esg^m4Fۜpc!-Oߵ`Od)𠨬z+R}z/ѺR{+R!vwfCLMwq?`CzYћ}kc1XˑG5Z0ZEB,K! ~!9/xsQ)$mUVPv]bU@TmַW*,]@LrN{k}HʂELpdA88"Z2t1F9t."Ԝ>|>{Ow%oSejQw9RgvU_KQgf mٓyIE7@ 萙bH2%*Um3-?c~ߏ˛Wxo5Ny{Swc(4;Zh'[j`xh ՎEy/-L~ieu~&'6ȤR*!u}D'M~7:?xܿT: ?sɴ}|C~7OوL< LNSqQ6^`=AeEU;'4" ]U$DTC$ U"O ^A Q@kc&u>7{>5\'^:.$ʠl%]kD__S:<- |RO-NEj#Q k$ pA Imr[v\%,?;~aĬYS#P8jqC 4Sa/T@XZ@ ڶⲼGqN.B5; eî~p[(G~8c䨸f ǰPE9B@w u UKv!4&P[W#gV>G('Qx =Q*P ec70msGm;r9nwOY~ݽO~?+VҜ<$Eb!t*Ƞ(=(QϊTPPkeePUyTS%TÕ>ѥyW(T (-^`9X|mcy/]Ǚ7F"vQZ)#QQ@ ZIOCP+kA"P@ 5)1 (q'&?]5T~I~_׼S*}w7ҏK[~yt;JTT$ *J`'x">z* @( >hѸ/NFoKz;w^g}ޒf@!J~ǎdxLς&Z)P|G5B"8#h*xL#"r *A[^kuη} |Fp>FO)~tyn~{ &(~ @6j8_JoUR";)qm#;Γf{Yq~K~B;O_4@GW-9g$7>~1ӮJo͐yO57FRGfs/ ޭ ԽXhx3NCb8akɺ F^p U} r>5GgߥUw//$ʔV#%rIVj>:eSj7Zb^ 6We]zB6J@c3R ;9 kJ^gG13L kyDR݃TS=eeP(Z홁tPX $߲w}]GΙf B,^! rmke#f ]|䑨 E2Jwm8ϭpzQ^9>52@l $T*i[K}zztUy\F(߶L|.mmiP!Jk TH @8EdE$C7='#m 9v(>Ck*dS{o"'7zݷSPߤ47T;_&`!Ahڷ?)dCهKiYzχkI}躎70;ӛvehh0VDR4=ͮ2=|p#i^YֲyYx[?ϧrB0SI DN!z,*f`oKWL>!VpT#$Ǜ~Se? FE80㟫lNZuUD OU%k k ׆q#m,r*X=0T: r}=ڽwTBp/Ttg\Y}|w8 1$&{v~.n D'96ܫFHG |u[z/>kϒI2T9U M+4 m)ӱN;)JZA5SK2Ҡ-\[yȴlR~Hy|q7' PB7OYڹOI#Q;vIk 犥} 3(2K/\Ӻ8+’PF}P)$L9|O{ڜ*7H@;,N E$V`~,  $g?!g W&ϸp?[?pڭu8xVUBd4uCxI"[ Lceg k}I!wc4f;%B c;)]lE.B$v* LrڀYRB:eCcZTTww,O \. P@*!Iw6t0PpzDȩ@"B"(!a>d-t"-ggrI<Ȗ`YD qG )ZD L;E$iLhARC~/f #ƱRR ЄC'T2.JC_h2SY %JEbdॽDy ,4VPK8=Ilq3ZMRyyRQ`<}8*͊*wh q0T6>( .OQ6P.d4癡ZO4؆NNL e., UUS>S^?} @e*TɈM$-&\5oL t)A!$x LYd7&/r$CuHl A@T_ T* ŷ8rob3f} 2ej 빫D$Qֈͨ d+[HƬSZ*Vk[$kRjEm%a+kH22fZ4li(iJEcTh"IDL1тl3[0aZYmdVJ 3mՍ!jp}s)u;~6=CqNk-CY Q'% Rq訛;Ƈ]GQmdO֧5m{'\`9JR:5oN\a]3I\Qf C8?tअxB T@]AOa5 ( Gq[|}}wy|s3m?wtI# @VPj{'ڀ`𔀟`$愀,!X u֞{mų#ߏ?__OEСU%'Ju;h ӈ/`It {y @@DI޷ 5*NM^|VVĪfL(lYUa-O̿UK&RdӭMhT b6!_ݗn{@'D&{8~zA",( l"4! [ඹ{zP@9x`;!sR4_Nk=bϺP,T 0ĢSIo{|iA[I@g׍GRH)0;+GD֔h]#2݃|عbZdzPXv;$w5\ZP-9lwsn Mvw4RaI7~k7S! a BVwDqٛVBRf1^&6]IW|wwǀo&׸0A|7$ʖvTgn1UT ߤ'$7ۧ۷|6iWCM.ReԢ+y`@ε4 >C謈~ʘk37aZ޵M'?ʽ-7t[Qb#͝~\zl4eFp%,or$˾1;mZW"%J<9}jÚwEb8zw˪^343R;ӚÁϴ80]Zi0;R!xuDaQB{ݜL<ZP):+(̑BLTxP}/K2mq{R)xڃoʘYEzSGw)mPjX43Ar3 h HHK4tqxqCjZ'DQ2 3R)J!NVQNYvG͎(4s\ Dtзw>I1O>Y9Z]Q5}: {_}Ӹ 5D~!Q˻'(iZ ز%l~Ƶwء2#1ֳ&Oc '@bR7CgQ!?~.mQtK͎ԙ \)AL4,lNA:l6yħ;/vy5EU~NV l['Dh2aw?3?"=z(|G?D]sBЀ?r\L=gvؔ6/a DhYl#wY[4:_=/ۗ0*Н}ö?;>B ZJѡz<߭=$ 'Ʊrb]P V|¦+hRFnS7FcYL5k3N5H5-)e@C@$ (b9J,VC'mVX=e6Zƍ?Z]|Woif2myfgM<'OhUen8GUY|`^i#[\msac"DQSUEWnp#*c&[[0'u{״iXdI[y6Ĺ dvxM֫3ޫý(1ڼ$&dXV Z<)K1PU4"S tYbǬ_e? `O|+=cͽi"=Q"BXZem骛 LS1p Eڹ9' H7\FE!c8 - X&ub"w8%@REC }1^2ͰZZƳ @A${ZrmG,COutx,CJhX)|A-OMT*(sp_0DP!h "掟+^EMn Z4 X86bAtTJUKg@DNz eJ!SuB>&tMYз}zZts2ME(] Om.2(x<;SMhr4|o 6;XKR+~S؂Qi z-V+h$Ad@0 R? %_33s&~>,rk`pr7+5 Lڔ E @Ii %U>!]]]Wa-ac)'-0'~;k`(S[URTAܽ#y$D#~+)UA=op6X>Fy;ƾ]#0A$;RJZQEYOuK8嫢Ȏ:E&nef~]AȬRtdG^Z!\*]x}𡵆(k-363X?ƌ =0i M/gN6!yvnr,J]eUP^ (BPTgqaqP9m =A1JW:>BAS%} /;p 7'J9cds뼵& 1fRsG^=U#|y-+Iu.gFH bZ wIrm|O{N?f)JA8E#nXW>KdY\dLrSRQN;-gys ^q|ϣS'e/1pP-LBiһ*]\ W]omqϝ2wȭ}!4l3.TN+Łީ+ čIabNN¾ڛ,Lq) <\ C]N{ CRN T]嶞.JVfSb3MܻV9`"'-iɋ}n̬ǯW~| }fKC I lDҝ&@Z敽 wuA㘸n|ً#er/[|pFa y2;TYZ$[K5cAAЯZ\h(g'2CW·TW;|-.B؏fM‚>^;y~ߋn)m6ԔUg 3kC je CpE$TC$j僷p)H;̘~c=WmV!E2!!Pj 2((XT*1Cm}Б ݖߊvݔ ~oU| ]}ո)K Ruk=erg~ _~>،2iz$A3_~3bߠGCa[zVZMxg2 : 1]Dn57K6+`⣲4ii&Mj/FI/]su 0@ƍ%הiY!*Q"oA'`.z{7.50t?qG&oOXSljɓ7* MCA6MP@6T$Rrl@!f{&`𙞃?!sz+}un` Efz#+ ћHKMއ8\*g6,9MfU:tvp+GF#쉌=,-H *iō:~j {8[x /j(ȨYwZET":=bQ(ʡ¦[euA'N*SlXn_oݖKK7kV{Qy| $\V΁9Bс2 )vTXn((4,UBN szf۽V*ֻպJ.ql>pԤ_6QwZ`fi(Ɇ( ʨ)~P0/*!PCSĩg\O]={%if~6dTG` JxhiK6k[Ok?sqY|do`/|}"̅s?=k*KYH$\-qXr5떲N.gKJ*OI Zkt-k1c-TG>fD頭1BNΕ;@wt&X(I Ky A(5yWöFJ[.+*4rCd<6q&N-`?CxZHT¢*ae[uuw\_D2({HiEJ{!_eӅ~W}V0SLVy_@d Tdm"û>zƞ:/:9JhpE9XT@Hxvϋ -I<1Zns3J7tEQ^~0O%iW[$W[_w]grVԫZ]~ȡt\ȿ(Wc` D  n_kwCƝ q r][G A A/7W?WHF{D1J׳:*0AM)n9z@%Id- n@ax3:hw{ `;u͛ŊU'L%)j 4X'$Hյ jыMn ~6u͏7Iˬ[n+Ykw:0qtnYs:(aawg`'Quq:z/WLAWmh=no7|UaoCI^N=2CD򔱻FMpiTi JM*FwPoiL-qI.nbD'mh·PJvNn8zsӜn;a9z^wxP8994Y%Y4f\v)&HҨ~hZ肎R b\Q|dKWkLySc]YT%=FXsǚb@:Desn0qA}}w,BvxrfѓA,j_lxO"zHo7/]00n3thppE<"S3 9wjYE7)o儕[sAۚpYo^FE07PؑZɳ o,֊ud"\Ȱ u# +uk+Z6hcl@fʋ*LET*ϰa$ .( "j鲅|shieKD $~#f<"Q p^R#bqΊ.8p\l[CiIWHEPW1eنDj_gfaP{;d3\$IDY !4+#O F%Ձv.)G|lM)Bbלpg](D=nDW]&'%0=BDoZQ[wp& 'H|2x"`y. ova'Unut8BJ)$, sR>SwmY׿LJκEeuAι{gY85.Smfaɍ):=Q(8D:z .+RF+ e.awϹVz|­~1ioz5 ؊>P_u"69$|"?.kK)SBG#hBE#EC^L @=Ba$PPX 5o hY6NŻ,HR! ;LJ,}Z8b߰6.g昧ßG,=d ;[{4{ S0)rbD&X=v'4[yڹ~jxPyYrѓ6fV`V(0SFŭxp!Ɖy=t[F<Q6E5lD7.M>[Km'W|$y%]QbM(~8W,RsbjOo%Cē>x\#uRpܳҙnTȉp x+,M^2@Izz`(%oZwo1p/ ::B] 9n[WEH,edjdN'o !7z?DgBEl0g 'Ѳ.I1Nbg5; ݎ >edrC>:]ݧN&jުۑ@PJbh'uqIu;]u}td KU((9]']dM!(fgdOCuvn ~7G1ŝ&:nqԿztЂ`HoTP¾?1y8:{ [?Nb5+F2W3w/Ó33D^流窝axRv<;u&&/Ci<ӈ_ ">q G$$/.qcnxkf)|ٵ'3~7@ْF Q("ܷ0a5 <1+rF{Ka܀CӖd복~Ɠ-B ]Ӷv m!Hjse,Iĥ2D2PRą/Ju&L,8,UjJ_a6aƉ6ddVx]g%Mcsg˩% Q~E_||BJ;|Ç ?F˵ՙp[\J~၂t(;{d_iGK6dȡ\F>;&?|''@EχtQړ! 0,[@s{t2QU\;O]y}N/W`B@Q>,'r %QAW9G7,pQ-{v Nh!yݮV(|jB_͚Cg $`ag'O,}tvRz~m*):WD xD]#巢@p'W6Ant-e9e|쇙jp"rqPy&c=KƖj 1{6Q"j ';@-_ -ҎVq[LjPʼnQ5Kj!=]ߡ^2D!ָUd讱2+HyMSkHtjo:y ]>&;$a 9T* v}^3 HbfeRR-,B^ɝe"Z Dv/}9VFP P0Eރ2h&اh#ܔ\Zr!z`4 Lu˃z TɨD4 l?AM_3ԫQP-6xMDƈ%7JM}}|Zԋ^ f5ZSm0zfVرkyج9u" WT=F{:5០rrNIȃ .- ™QU^#ngT`ƢC }>>Ϭ*MքB]iH"Nϝ0=@xh%@ Q,"@Gwy"B3x ˞vpvfuyRW>uM>CO>g㾧x~=uX"boKxk\@K BT)G:)%l], OCuamwl?H"pG4`_INCY rJCY:"A'QdEbݶKI2Dݻn)Nh`~.#p`BcN#G柞pzY?F/Lo[ܿ|Miލ2.N 6y}{eΚ&*Ҷ73ekF/]Gul{0W/aQ+(m/jU&VRnLuЀ)t]K((,9 9?G7eHVUJNM>;l)=K@xV@ޮb$edKuV͖,DPU~7G125TeYȜYײO:z$@kbhD[vu^;sewbF0lcɷ0@ $dq=YwIX5K %bVAODžj+OVoo"eeF]JnZj-~~*DkW{-1!gE4aAXL[GsnΛqiAϹ~G[SX(p<І?Q+Xw>Rۊ![,8 KBw4t6\':$JYagiuѽ(vH1< yagAL<<\pM2tT7C~3fo?¾~^l.~< !`0^axdP똺e- N2-=d21wyukfOH3Z ,TAᄴ}7(ͨ:כQ8kN7R<p n-r>⃼Y HՌ>i V >X7SD% a;W̵t[3dbL%s޺fA i ;;uK#4?< Muo%Md<V~(:Vm&V%@ROyN Xi'Ϝ4 } cuX,@͇ȡ $ P=۪|aCz.ePl,O ~*Id\J3A6&Fۑ1Rc5JƯTcݧGA>.M'ȕ ǐ蕲oe&u~)ֺd5 sJeЪ{MX\¨ӥi+%Ior߮seUJIGݖb wӡs 4+dKr1qҾC#z4;zܙ=Kۍv8[wYe!ز}Vh3=/(= O']oI<"J0=t +y]Uw!񹎏kEFQyI %"#CF;̭R#M z,UUnECIֵoyyܵkN#̽ZVw:< $ݶ]T1 <k.ףMH&8[A|KUiwEfg.Ev[jBί'!D nn `|)(Q$oU>.US \xo^s pMWKW. yIV3k<.(a=.lնn|Q^fG,NFb7h1\݉1x3yC9xh iKhxP{6|w 7JgHi٦'d6VTvyCmLm`v " +m~="sΚo?>߬[76.6݅_4`s1W|.yD:u/YmosO_l5Wt۵BR<7g|<97\wz)] d(9ėӥU_^TrMAӘI:qPXRblm9MQch1VXh9>Eh/$9Vn]5.ǝ|D=fѢ9.`W-zuWVc]uY˻,MދY|ܴ0/o]?_\jX+ځ657SpW;fo\;G_E%U8r?#곭UkbЗ]ڜ(ƨSݻ/"EїnJ5YVU7  rUv9i Rʤ/9U$#\('.f(?^{N9~ J_ j_hvr 0nvs}BhSgFldM[՝yrmgW,]]ƙURUspzc甸(զfjvUNUNllزtx؆:ૃH,lh /CxHkĈw̓ȾPaUXg;m=fߓ$=@qq"VIisn2"TBG>%wq.֮ u/x^!"v돡g^fbrfN U?{p7>C^Y׵Vm,T&};zK7. ې>}:Kbz~w Bte#CčCK~98VNj\J|{*ß:c\7[3՛}m Ŧɺ[!Mόr'KV6kc,6uUL=`iDWtT[=5F$ 3[LboⴍT>OMx.-F5+"1b=_I.F#0,ϖ¼<2u: ه~݅]cǧ=4 E!0rv&_JN9Ɍ+v2:-8R!MҕbJ9,a(P\&UC2meor{:v9}XV)1].f׸}p4fMkMm)-+ЖȧhS 5>E^3r{ >M՚91'~̴Ue[Y]!aVr3+>I uq("̨?Z3FJH( )+;ŧ;24ե ?tXǣ7ĢF Kic=x1W;*~΄?VqTPahWGGB _d9&me:ˍ\ qMo\8z&.׀Q+Y5nVwOaTP((J4b ]'7n꘸vMh9347WpBJ!MF-L,IE0J?>YTmKr,op3#~qׅ0鹱{xSME v߸۟c‹JG-uVoF8r*YXwzٿXه0aĽ$r5[(tJ~e$edJz@PFPOm؝?󢜪Ŀ{$AmC+ #ÿ`'P+욺Q:}@IQ wРaZĵG<5W *<&Q]֖ĸn gtl, fKr-dInԻ@o*5̀^f5g׻]ïfUx<{6-eڵWT{aD9-"#k8:[8HAJH C>[UKFۛ?5h44Z}C&;D& tE޼A_>6Ӳ0Ogs CoZ,oltx࿋l,KC)WIk M/1I|gY6ol48BbF&A~өris̐ J^e/JxWhJJFЖ2Qj㸴[Y1AuEjݲ(mX/ZYF&\5&՛Y9L~1Iz2`XL+A]7>ms;f-+W*)"{`k#ʷZ˛4fFf%bt A!&T] ^e +|Ez[f)XΓ.=Vn a|v=Zz tc3h ]~q~=luջr, {@A xS^g1.Z3kAZ1&Yڭc8歃7m.)yh>Fe4Bo+'~ ?AF|U!bqP3T@ϸWxMou\,6j T<WfaBHq?W}u&l]ή7~@'Tdr:One} B/u 5e{}x`~]mbw0;{^˄ #_Nd 2"=kW}ǛөS[xsć)n2SiHgh7`w$BQɉdaI2, Q$D4%6! f,BIS6 h)!4YC24Ww8P̑IS1e @ɆIg_)5>_|ۑNo#bH49JGĦ*HKHh1$lFy_˔={('nhFNr!$H?j|~VwBva~ViDX~S fQ_J'%D\b1zӄx JJH(CHF7W$k)+'9;5OtSys"y>1U럍QC7pESO<'a/ opYESN}V('!aEQUV(1Q7*c2PX% `PQsf"#$eNKi&.{o'Kb )֕T<S<)zڪ3ȕ[|YQV#= ώ")6H$]ܸH^,‡[[,UbslQby1Ϲ=Qb|&яž[*[ڞ]5h+]o6Nga?f(TYŽ3 BaXD 4RRHɒ IIb!0FHƍDi 5!&$lcXFزlP !ɢ(u6PFhJjt 5>(ҩ H}ŜS#ˡp ^7m$*Ϸi]/l&3~t2-W_X.,TiZTI~ >V^JHȆ}e=uCf]W>T@///bCCru$ʍ*ԭZ֐;ؐ 3\z;Ia6MruXtࡍ'-KPD!B]V2󵮙W@(m|m}GɒA g{P'-" #e2D:VJ)B龫+&?MZd$O7~Ua\dS] ;ޜyw–ׄ ԛ݇{n:8dywLB;!Yu`$p]='!lٌˑ~-} ,) ./v_%j&8qZ WIykAi/Lwַfzh%|22sI60CQ,@@l]GdS<ぞ!zhޢkW-)ɔ:(`o࿿x]o\.+?B9Y;kJEXR.UatTQV;Jũm,ad &LC*iܔb]hoB5, n6 YԔxv~q l\rt?ti yv&[ɑXZ٫uڬNADsg?R{/3X;R"rpH(Ff@F.0Ypt6 O8 lh|U6-s xgH-$h tſY^# H}@^hjr%b,\6Tߔ[fAP$e>Uܼc忠&Wѐ֭ui^y'5hwxA&$‡ o\P+}ط G+ =- A\:ݍbw؊z.hg<{> iDUTxPC7URHm3BqqGLb;WlμKsg`lSRB2O ̮ʤT f`s<+Zd48g($W cNնN!.C" xaq^gFhGD FҬCdPεi7h/A5.X@rvWx'JP.j/gGvK}[2 =JkUuZ]=W1l{ ts ԑ˞6R %@_#/GgKP-8rk.]}4s-:is meË[R&4Dw7vXO+ah @$N*{]xѠ~Qp?Nf.||-dܷQ|?~{0H*uid2wxLJz 5vZB6 w <tarBedV$+ \QUsN"!pVhƝ=?]%U(.p,!gLeEJ2`+G$r\NUzx+bjtrtLXJߏ?ZXΙvXkfWɅ8&+8 먺Z#:ZY -h~w?ypQمO=Kz$tQ񦷿! p#5G~eB_f2h} y1,zWh+({y>9P#]J]Pc}7/|9?K긍WC;뛟G?Bwz:P@-i~@D֫[}2e*.-yݽSGsi.ɣjޱym@t\Ayx^Qpȱi繑Ki@}mbUj Oo#fMALs°@DC@9$r#CH :&>BNYp>hMDBp4o!oJ\s߿+8.ܽ!֖_:~o1k\?쾳 K(V~; `OLP GiF(RǛǧM1 Sɞ\^[, JN {巚;E@<{cN+ϝ.z⯬Wu-LN(`;F\-hATso/QYdzl稬KOEm/JqoZ9-ztH d ĚRH&t܀ H itʙA=>%TLehN2LAFD 6"@cK*ӨHcK~9CD4bjP{|ܼ)mSnי\VnfuRqؽ(*z594ĕ57< G!2:zmy^O3Y}?9oBx\^)~U I#Sݖs+^Khڧ~JedzLxVzY>MRTbX PϕܜVzIUv^No SSNYa}u4SrmZɒڔz)tj8{"r3.Y֮ bm`Ru5x7rژX,D;ٹTF%nH77IN6UW+,|`CBJeA^mnn_l*q.iA02 IR |S*2. w%N9 ".Z$x:ݝELpKyN.KIEJi oKN lZYf[z(#FtTQ;zdq5TĿɆ6({rQ2ue.Sn˃9R;\ouMmBk58`2@Q ȇh M\䗖`Tmzhk聝SF9-9\ȫ>Ǖ9 rڭZ[֯4Y2˖fb˫e}N8o"d ۾L|Jb--^oVkМ 8+.4gE.(VqC|2{<9s;:骓r`n%șvx1Ch.(fpJCJ6.,YӲ]vSmb| q1-Z)jž}q v%y4o&c*i\ʦ.X-ỳe^0:d(YlߕB+|YAKx4Tb$[,T֖oͪR\@)80u#+U5"e+,W-^T`%ʹ<+V,}T [+lȓ- 0&WnDNLc=h0&f7,.8 )!FkX+6`ddh,YWi]ݚ➅T5#+SjM,DY^zm+W`+Kp =-H'KZ%fʽfZ2Vg;ރٖo;f_:`UF7hs8Y+%YwA?N~ۛl^=bf<,2 XӤ:WNʌ8 "Gs :_9+\C;ʄ ܨD:>dְOBRzMs5??0ÄEz繚9xA'ȼ=n&c灞cM+>e^W%Vu.ghdawF}iWkBt9|D rH2.\ })b Fg 93lԁ>O`#F(TKgZlr&k}ɟmɂ U '' '6\_v<бh=wx_;&Xg۞wb*ubD/&GdM Qh)Jrk r]b54Z֮g{V?JzS#գ (Z;&LFn >m CI~U4/6}'P~78=5/Q-fl$J;^Ɋ!r(fFd+c1cFdۼ] LDIܽWao YeUUǵ?߮\OW2O2Uk&wB5gNP8T_tU4|OƝ&mW0gᇋ*ค ([:nM1ZK )4hhÛqt[GO3qHJ_qj մ"?0<神*YgUm=Jl]fF:1FCEV~ҝo,ыb{S:O` fE3=G_<1E__ECt}d>K40%ӮJ4R'ޗ3xpI(\kW$@2mYV0dS7I˫]źXP좥0dIT7Rھ*Oo1ʔ@>>Wp?hvbJz}v"7]dD٭M䏣Mb) Tr-„W M~ 'O+9Yk'g/l"Puddfd}$Umc@jnN2ɬ,Nk(;cuP T OO!jz\P{l+f `b21I|^H4ݬjoIwQPKaDw4n}9 B>I~$"& !H+DCIic5+p6d?ٜrlT3g6wnc4XAS~;"Ht$AKyYGe>/8t6* The槙k-BMYM܋[3 Kri.K]'=ޟ*#CwР0B(mT:x V9CwF&o;""ܳh7l*^cIP$!R+4AW YX@fMPp7Wp0 k+FiSPnF,iಜĥ (wͮ\ZӁ U:kU;K}"/!1H;\0¼"P}5GR_eэ@,9jH`-h4]l(y$AT Pti+eE&dh̍.mJiMGSгwy3l]E~m?;3S#KWfA6٤2㓼ѺNdU_)v@i4A6VxQ0p5N .$gF+Yi:Ʉ #%*XȌÁfӛZ1 ìr@<1o M:H윞_csgه v :ϵ Y@F%"5 o:2珉Q t`wfpp? IwT<: :+ՎreǃEra8Ǘ⊺rH:<~ݣ}j" AM$oVe5 fv D_LM q ur8ߕB:e.v_gvk[OaWRڕYmzsn;$gߣa# ?}wP}Rz `)MVCJgqWs?D뭩h!P0F:.c0P=Io]\4ݸA7TA*?}P%v{ǁ+1!\8۝:a~d{Uxɳ φ#F~A PWJˬ SІF#@/ dc#GC56˪gii]M0ҳ}+i(5Ɩyqn #^bS( D@J^Ss\Z}NśEWwApQ|3\y5|%,"'H;#!A߷]\[BtvӛPtk/W.{ڭ97ºa厽eX&^YNIOS2BE*S$ 1NW{[Cm.gFy)QN&r&J`(w?mKM/fȦtp[|=T l 慻6"Joޚc /9 hVHMjFR\pUp:\IÊ\(No.\!:>έ29ojR;f<X p1enI${xdU[薴vZUSL5~ Fkn\WS7UP|9N>4Iv'ȘL[[ (rlDkaӷ=:N7 w1YsXeYUԂnқrJVARzA{n|g_ږ{V9}kd(wwPo^zSj_--S& %oQ^E #{ݗ3+䐧.qx}Q V}_ϧl_G/m"[g̬Yk8-]**Arfwl۲2yt0h:] cm&p]Yz W۞gnQm1] =md4y}A6o`)'\\F Aȋ UhRV'ӥY@TqΜ& ب9)`6Ks䌍f{]@@7x;|Qa=@#b05pКZj '0I@=m2%-'ο_ݾ(^8~f "m\t%JS%-HG>V>ZdؗP%[BJ\5ܚ)=q>/Zw}lW`\_Bm鷃NsSI9Ғs"DM3*ۮ4 ф˓d]ơ;g[W^^AC(%U[Qqq y k:lYV xk]EE\ [[6$g:K||'K7:T33 ysTL|1l]I @Bjt;C K*n䤄,%鷩?]zJ'x[0amzQAǤMD?wJcYJ3\8_FPŢ#V&ld^aU2<&i9z;?)mgQ%kTvR]OUxKG'*ptFaXj~_mރ'xIjWכq짅^aǗ2V@/]S]>58c_9tfU9 ¡'I*ԪūXVX&O]2kMv>lZ(υUwiy//__ g7MC!̊D̼rP9wtD.곳~5S(?` mV|bhc!B,WVA`#DxѿlQWTüiKd><ֳ#߳'nCڶ٣T $%V59af9&n%J\'-%PDgA%8߸q8 {4?7X`@{Z JY}k?7McFp)Pd]CEBXs$pkZ x#u4|j,(Uѵ~4Pifjrtum*OZk͗a*mUGoguA e!a|Uf#:ִQΔ-X{a&JڛFp6#GqcSdLc^ 0< (5xJAԎījOT{6T ͺg]JhV~]T_~oSZ4E<-^dsV|*/5C5['Eb'QtWL84镎d]>5T!25ʚgR)Uʐ](} YF ms8M)l9?{{FuS^#oۗOo2_J1fc !dy(8J L 4&+C&9&ɸgB G$d&RS >9 W"hdN8Io*-[JR3W3aIRUY+|eB>@F*MР;8ｖhÝ(|Цb+7*U^jHcf ֒g< &VCAw!AX$ꥮ޲ήt* /JȮX쳛|i3b^ر:J8r[7\eV֌zm>̪Mck݋ xnZ)4Vx')86m~6u&=o-BqjςLXYGI+2C*rKCcAҌ+3 pZ jɌ4!3zbxPiUë.)337#L*& h"0fd WE=hh!Xьeb) s-|+D H#zo@W==QM|>Rg!k4|A`>~Ω a;0thl:(=k͋6JI*U>qžA&ՎMBjĹd#kNMa6| K9k-sE#Tn|/X*BTGrK}Lݮc%QBC[=Hn]Ҵg`@E<3$ e*Mxǧp{.ML."`ڤ~?.عU,۟{(1G,KǢRFsz-Ts0K[܈*QΪ0Lsj`.lŅHmSUҍ]N4-^nBDLHvyV293'V;*5W.n0uҮlt $Yk3\V`b-E7faΈYbG6.\.2R .6Waת8,&+E""cE<{DgP WEt涢YQ3ZՒTڜOJ#rJ؎`Kht9vh$?D]kMUVϛzzVr`7jAu^:E{UHkn_V1Y텥ѡxsnY"B']tz%4 ;YP~8MWpVQ|K5.^>v h8b̠00*&4e $:5Y PtoټQW^dN60mFaVCYC)e3x-CR ^mwlIhBdMZ "ޑ?uYMӤE UN:ق:.Y"DIгs-H;6xP#ʺp0V]`7Hlo}aB>eIq4 ڍ(w6ɷɎ$l[uhSEeAL1v-ZJ]PPZ0..qvu]ҷlQ>d)Gf+ʭlLlynuJQPDA6i%n*A6X(d6YbV[٤LISOI0gf8SxfਗGy.X厤՗hДR}Y}G~ԼY:cgsC4z1٧N uQY䗘j P} N`ՠ>8Qž oowQ%W#{lu~ Wۏ$snz Z6y(? 165yIC6/p{%fb;5}mG(#>W vy3t?֒Sd#fsȸ߰;,ӣr`D(e@(*xÊ)8ZZ;MaRh2M7T靀hC(Kɢcodj(xLj p1JzjxIǁMSy-$Ne~-:̵G}"#lUը 1Ukf2hNP0[!doTzgO2 ah_fӣUW\.6ۣntмC^hryz!M;0,I%c~{˴) @Al~P=L;ݺZ]yN6z/l?b5I?%kḠ:9'n9WbOk 7BƳϓ*߱Y@bFD >pwvџws֗+FInjQjj>:"??DAUDV@p-g}a+nP [ʒF ls7C/o d"UՏϭOu-JPCJ I!(]1sw\HP4(&.g QT.PѬ 0Z%CaC紵7nc!n=O.+ (88M{ UGǮ1]\v"+$L`* TaOuI <̑Օ5mLLLBM@S^7B3NoD/}}ͅ+)EBBBNd8q'Ok=&Hv)goSc'[EX^,9JƲ\릉ݪzv֍i☊:D"CH,EZT {oFg&Jl["{֧=-2Czw?'b}K % L׶kE.[T1*/bkVk,^瓭TlMEJ&4{:(yE ct&flL !ܦեX*CeA3 ŷ$]݄é(1tD1O^;[Ep:q ៫,8m4E5߷B0p^[,,Jjwx:=e2F \Cy~\@?E!g (D6AHn yF?fG@v^ p'OA˹mMt!z>Z/"7dN5jB@n+ yG6 X#'gp(s" F^#b]-Z3lPm>hOa1s.ᶍb,.śFԙz-F{b;KTVEx/NO4P@'+3B@⃮lb 4f?N=>d(F@A/L!haxEojRU{ jt'qV;0aRCӄRm^駊)X/CWޥ7\/b̋/ ib[`[9` ^+ke5ѳ|w{)PUOӦ#n_JF :v sHvsk wrF*it K_&Nsҩ}Iù7P]Ql/ipxYEj88(r:gh\Ŋ!
k$U7w]Cv6*c̸+Cvȸ6>iȩ$*C5HK>@!IG#1WV,Zژa@@Rd+DfMV SyUS$}?r\GLߣ]Wo61 $ VEh.-/[@{?ק"Z0Rd&?1zf/`piޜ@4 =fLvlמ`v։DΡ‰r! dǡ8F& IN DF-0SԮ~6bԺtt>'Ge}1p7~.?ޏ?ׁOݦ?A*]k{# 8p2OswT(7bx?YMǟڙi UBݕS -uvi37^O2;Is%wʣ,=ۨͿl**{Mמ?+G~4׽2LhQtAKm9ȍM"RRdRJ^L)w"#UvSÈtzASrM(e: rjL5_AhRv^P8X93XȌ\"oQX*G *@ה>]u+\ejnƍu> 5?#?%aNoC)a=.OSMˇS8.6w|#'_K'Țta܏=MJE}fiw,z-qojvOѯS[Mu- T\6[0kJ9!%{S;Po97[w v9r5^lB'gt\@ ji%R-Y4Hҡv~I uF`{ibl^PASdi,SJ 8N]}m^Zf2z鯬|%kLxG1CMz,BDl7i7OlŠ%Gc9*ξ;ГWzkc7z츼lZt skzisupQ"{:PZ3a+}ƒXS{ܱQDƔXN}%0'g^7>U`.y?W/ǍF{(j]n坕ԴȪ:*k5Gc7CW4,nC#oԣ@?Ȣ;a#G^W^ƿ6m4b D,nb\9;`/訢;@D2@J#SMݵM;.!mt>*w!b6ۋ9]Y%y):=MZ,9կ R$D $a1Ǭ̱ۏc_z\ h =P|8 LO'4_~x0'MAOUށx2W9:4 2>&+z)5eM '~!gU>o<+~ty05ذj8$@ubOkW"d[׋}WwsxƆL-6Xl{de+k!Dx!hONu~uȻmв qޘkȩ!!_|uN4PNoNiNYB_a+ѝs O+"5ZИU<qt!,un8 :i|޾ ]b<N,|%ֆR-5CBʖsbnegyQuS6jArƌ* /yrc29D!7i XA:,ן 」XSh1*P@Euqd5sAM)SMIBĪ,^LNj0~}k/FX wFZJTdN5jD{U\7 Iת$/˯wq!׋(aE2B݆,)n |rl,^&cu[7D1 7Tv lZ/{ӲO1e (nR[{q8[8ɹx{'0C߀aE 6t6H %=hVqUk9,˼3z<2]ز@񻔳oL^#)E; M s݋r ;k3񒾱Epྐ 1OSc>'ުhGUHl3m&2;+OF~wޟ+]:y˯ΨKyE,@6Ґ ƧB@Ӄ!%RSR.\NgԖ9i;kV, S3/!]+#Ůt%#ٞYz԰#nh=r܍3t4kڧ)ģ"@§7 /^%Iaē:Wޣ5~3E/ MrUj& YU~ٜ%n;[%7cHTiOGYM eV]PCul,N,Ukڷ }\2GbݛdY!#V=!?^Q !uqmm82$qTy1O.0I!!ڽCc@>12`L2 r (3ث&yBDI J/ܬ<gJ d߮AQ J{SBLhK:d.hJO@U"5{T:Au2NڨFx~8%w7O-]=g\h/eHg 9I{'m^6 vMM y:5UYF2S)YA_ @޽\u6{#dk-oi{[,I!Y71UTʜ9)K2=bfw#a"K09IՅ4؅|)J~0pX4<@{>wc Opf"kQXLM,q}[t]?~.6.mλj\ c2.&,'@ {T TT*#y.}lS2~[bi?-YN>k?~ˊ/2P,͵$XOÔ+RZZ,J#d@?b#Dt%|4-kf~{?Ӭ/y/ADSAURׁlSx\oN:m,.xj'|/ˑZ})n.LwM^h9* 2g?nKuZfAØO.IsMNP&f6û8BM(N7"I.,OD+n=EiL!B3.PMjE7偪4S!{i<*O]W5 _vk|d&CYTA%U^VdyZ#7 ^&DEɿgt U~kY ^*.U'IGoJ"Yjhq J%X3T!+.w˱i _Z@)G;>pq^Nҧe-] x:Y'5hQ9sD%}/t[uV퀋 Ǘ:jW54gA6(a+3(|v|Oza7Ir'V,/7Y; {w|k!ZwگEEh]&DNQ-A{={mZ.*Z4]\2K0C?,Ɉ/C~PB1vnFme~d{kJ`A_KIo20P0nrnG^*3?̕Yp1Xe0,a]B􀰓c%A7kō9`~'G; i )c U-[fgҡT8fm* h EW8L~Y4e*Lxa%r {:ރ=:>p}X&EV ۂa x!Tƾzp D}Yv{c58ݼ?ϘreH\m ;⟬HVQrC< ʍ•?ɴRc3O Z߼Gc%;*d,: 75# JdxB}E>@;XopaPG-'^b %šE.,PɃl~zs'w!Lm !ԋ&Xd<"P{ *tPHD]W}&T$s"ɸi^}ghSe܈/^<<qz-^.;d'Ϗ)k?tEpC^@y'8R2ͨvz" Fݜ\+c-MFm11%H+aT$J`%$9~dtd oDt? fd<-yxwb\P*dI;jj!\5\4;qy*K"R+~lFgq##jRyTn] 狲\=Ȯ-( l[a;B׌}*9>P1{-DNyR0krԚQͨ;K~C>zKƒ7'L\H.ReYL~Ju:Xέy* =ޙMl2 M_e9嘉hܨLfFr Fg^kfHT:3ňNIJ oK8U51cG3KKgb&^d& v`4ሶhMzbL t Glw$Ƭ&M콛3^ jX4񰚓;i}BGǑ8 M"6,N Q= 0[ rW.k6A87(.A2uX:V {aSQf AMqM>wQF0 wo?bRkfVa[>]D W #|IZ?*oD̛0=`^y_C0ce"O4c["Nau` 6{˸Ta~oC#M'a!iJvlw(=|2񱼀npb1#n:xY9rݰPok<I9W "yvHTG B+t=0r^{RŪ^//JImGf$ۑoyHco#GUmL?6Kr>.p. WI;%XL;?95ڼ^ lvK'ݿ;T+YAŗr= t-"vm:ܠ,P@<XX4STL(1pOݜ/Kơ Ԟθ ŔA 3J1=aဤ;׌Au^Ūsx w@uvS[2'mP,R]Uh_',NiNNSb1Y`vwOnY/43'|V*S ;,?zuH{<ۈ+C-r&j+9vm}藝Tx,K4q%^xjbO]POk@1ЩŻ%t;rk\2KJCMV oBĺHkcf=M>$3pN*BI_#Arl]ʞ úki3H暠_f \nTbp3{io 6HIYh| @_fN*ͪIh?(ԿD|V+,n dA3+G%֡~"'KJƂԵ!326,U#bL&щe)fY'./iEL'}gY/D豃!JDUAƹ ՉFKP5x~hz-;~ǰd)ލW09~n~y-6ZB\ƌ>[P`FY*e.-v1 v,U:I5NR2,,i2_r cIш^F&4*$K$23?g7\\Pf6gތY| ƣVlYPOx*P&gwmكy-h+}Ѫr% y1Gx Z)?(b&*œLBPݫ #U+Irx$4Tsf,iR4 l9-C;4V~h"[#LQ/Szu:SU1ow$!ZCuyX5Q4pnEXޗ腧kQ΍x7!Ȩ[A"`wQT8@QE}(2g`"rdcϢa!PzfcMDxZ&e ԕɧ?M"8sCla1NnsIHaK˴薎;kAsn]d_fcz%_PĖlC?zʌ9ٖ}d VK༈_PknÈ!mtSekH,u\!E>AM=7vGp+ N!‡c2dej |FlbJuX:;;h lD;mٺQZӜ㸐jO=A8GN8R<+RRjڝ7EH_B9`6MiJ6K |LRYz[pc> FP4hzޟd 3{;{uQ YG1^*j" C =g"+CRdk{eHSņӖ JZԿ&LK И7W+bq(~cݪCkvd!]coglsk0BRشЅ\P+/Xw"qǘl@i-:s~ܼ R?5}غ&!N]4aЦBrFy;hr##ra-?ƾmS '`ȀEFvfnZL #(F{!Om0 9p,n//CJ %vf' `zXҔ;=COKj9FQcK! +K{8FYSeQjE Th>E"h0JB}V;>RM e3 DD)gǁH(UjXf./PI'GkI%k$NQ>mxy֗i|ʷƿYlZ c u.SĠ/l@ߣkkBV8_>RBC|'Pf}.kñ93L Hm*zhu?]dNVu)F + /QI}hީȑ6%H9*"RDv iyCZiPOLr}&ґpϓO@*z_"B~ nke ^: k9 ?&Șap+b9/7oYse(&F2$) 1Q7}YY;.{. O #5]ɲg;L!OQfKs|go5eb~II?-rV)q(\c&JQޮd(D< +Ԛ*)G7Gj6D% zTJyB5ljgx!V ΄Ox7y 4͊{_,KlKnw+^Q^ZDsfk|{L&lh|' @hZ#n_ {kuH`;E0Jǩ$IV95,2"`XNza%uJ݉\&_..¼ &n  ԖdFÀ̓@[wd‡{wZ) <=&Ψ=qK.Px;8qOXo-VM aѫ d/NHOkPs0n2 )[)UtdPHLh.G_iŷR_{kEGA*;-R^r.p} MeG/u\l rL'R0(+T v8<K 3q!ц3PFފjxD:Ka4ab5R@.VR:324oLet`V+MrPVGF,tVu]_|, 5tHKWО[Di@Dzw+ha8;=E4`Dp|XW@A  {Pp~}}aePt;"5sp0/`S ~ad(ڼ"tM {0p1M =;bpF8tK1X-O$J5 76v$/_|jIS  NѤ}8 yO3JD*k4O*!뽐6qe v~[KDBSz"|G"{8Aw47hs)|sb7DWΓ' 6/- *#|D&ժ_=5L%%fp[ N`va:'pkfi[lw~@/g l,;.li keCKS{gV(_VYs8 ;՝-,|͍h!r)x m^A5Ś:ԲJy4xsY^jFoDAL Og ɐ$Q)8I6XÄkʂ雁A_C^ŪBSQ9f >#Y#Um X LQZ<Ыm$lB0n\n#G;.fAıoG+_ANj.큓@7pUfJg_GxwD3!|L.ַf^6C}Ju x…ݐ)P)Uka4KʤZǷ1haF*.ZM}|*WJ媔> w^ Ժ]?!Kn#8cAX|"-m7ʜңR_mm^Hfg*_ tn+7T.kэnBFVp&2r4Q7﯆o&\h+00@;9ظH&mӽ/%5M39WvrUu>Ά~J ͨʶs1 Zb Iz<J7馀%!ESZG3GXڲKVWဇg+޴"p(f=ܜ4Η9 ^O21qJZͮ% "d*TUɏabH8ܑ<գ≃泓euԒ& "I[h2800tCFE Vl=!1.gWR:g$]0jeO{R%F'G,`i] ii`]x+hќ{jԥ6âhJz搣X-]T_'}>*l rH9hB3.  f9DnTv,ˈ1lIuHk14'&&~WX-m (_SR٢fg&6̑܌S]7W3IsM:v #}";0yb5&łigA5GD3Yvi{n yF^bAgt6ň9;R̓Ay &ރ)6MM@u6Zf _2?jvVrЖb< L`dq uVήxf$Ǚ'd{m9X>m/'ƕ`iS28Nphzi/&3e|{Wu<\3 r1:zMUP1sTZJ;2#U+Y5uL:.,+1[j!ybfvq*/QDĘH(8hȪ^ ēz=ȋ#Ib^&:(H55N~ 2thYB|F^6ʗ_E~҂݆,`s+1]s/Q8sLG^o^ش==j=-0(d@7#}ʃ#"K,b 6WN~&-su]}qd+kD_f>ɉ#]k7BBV֖-Ca(~ː^b<ӡc9r<-]h% kl5+Wםj;4g βA>%ԖIkJI یNosgWQC`<\Bemsx^ŏl%^JV':b o-!|>:Ҕ3DWb+TYuPpPPk[skLN Zޯ`9v".03%6ar}H=xĨПp3R 5F[/d+akMDo/``ldufP]wS7H0-peV CfA/ ?|t8 n@Z1393YDt:h2]%{BhX]6Ga L75UG< 1 -LjQc)FOB69.(jɾ%+ff p?/ Bang\Ar%I__ J&ݐ>X`a6E]Un]߆7LDtyB=j0(i)<v, ~A0 " Վ0]T3ۯN$rX^Q }}7ly2r`AGk\xACjfU1^NxOy9^$Sn0Kb*pbOjLoX74DhWDoU.=;M?[o:D %iÏM;}2oQم=Be9l`M ry:&Ǯl{LT/q&A%iN/"A"BO$f^t(xP)J]"|['B/{LYN+Hy>g b=7!ϋkb8a:ޓ2꽸я3W2 -bܾX1g 䞻#XB?<"|Q 94# \ψz:;U7Yq'v3VE3ɃIȭ$J($!938-IV@ccnwGmiCu"6ڧSp>4DG!:#r:v6{0I*I_lkr#11NsgfWzJb"޸i|j#qLNj-Q=Oꎕ|/\0?6\e锇4q5+Y9pCW+Xag_ppZW@.$/,G$$GI[$aNeURli\SJ+\3ۜ,W@8:"BaE~XJʬoD~EW$Xf& =V"vVmPJz͠CjdD\K_6mFɼ|DmlHed+eAumq HRҁ8 -౾հ ty{gËM(Rśn6\zc =C"쵪2#奠R>re*r* @ιb#RQ>piV0kr gΎ Tpp#GP%%z.mD:A|R:Y67s @OYoE9BFli Ȳ Ӑ Vک¢%5͟(iPq$'XH oO.~t\\W);=}׏ D0U6gnCT LRqwq,wěF%kqiQaPK(`bi-1\|,țƶmy-N> % +qwQAS!Mwѕel4^~#wXQ։cl^7]X@P]0ypf#rd(@hV7㧹:P25ڕ8J^0b00 ā7.O[,aoqG:Yv[3o@<ݽ= 4dfAXD-teRVIƾR ?g(j҄BFIkt{his?yŌ6u_bg;n\v '׭T? WwK6YcZ4l `C-bC#UP5.5ᇀbq6S7CJ /dô^52W?(WܑD YTL;RP8Rp ]`6_-0)wUrԫoYh`IޒM8 yv|]Xݦ}\+loQge1|QcQtPOa]V.7@%\+mH|/εEǽ]fE@L4[5 WLi#]d9-;I\ ۞Sz}XAk|e: zrJWMz=I`&Ih/TѢN_zVL8 )&Dyfc;/ Bp>޽M5)q GO]XV.4Zs|o'h'ʓF|-Q%I -&x漘o+vrRIS>Y G1tHm$/)|Nd3ϔq+Ҭ)Ǻ'V0H#s5VCD* 0pHݕnv Kc.)[gWG18.yӲ/rh_XȞ[Va) w)TS+Z}";="s$+-. 1#hQdIPm`lxvstmͿgwk䵬G(<=4 S0PkX Te~nh墔EmФH_ZqukpGwʘTKM EO !T{(L6 m+v޻@ Hm4MJpMTrT~D{16ytlD }./gZI -CkU;cXa 1y68͘ R1'g TMgѨg:) P{i,9y.$~z[1{h!C`+Ei=E q6xF7;ΰqE@q:7Jꌵ=y=]RمW X~"'o~Y/X}e9ކ JSr$v?kynhfҟ|]3yu|@'l)sE8-g. 0Z0 I@dMajHr_إy3f?`ݟ p-""8+N ~NZlvl߉*cQ!kg#XNJiWnYw'b))GX;xPVxk'j03N|~/itAuMհN4OC` aҝm )7k%at"'Kt5=*4tHM-e'NvDh^hbWfx3~T{: k皞RoL"kԋPt j?WvOɁL*ngiu,ז!*Ǒ+}Q=qf$YͰ.8+tH;JVys+F7*oہwvcAB>tlߖZ[;ldv+\ QtF럭(.6\>V{Q=͏O\f̻cΎ%oc%XcwJ" - >T`ec#쵼~]B:f1-H!Ql򡆵ln%>2 pn},3&z{yDN(bd?(#'PlJ%[%;FLF$c0B0\B'<>WS<ж0 oAO\E9ĵVx*f/:g \wbspԹu0MN2Vξ/p?y-ߜveȌu׭Bׁe:[_0&cNP ~D+Ŭ^96*MRrj5޸D˳ 5RL.'fO<[d,`6v(CRw ^ y.m50rԘRBU&cUls֕ã..3Tq7{XIpޓ g/Iۛ`olCjtlY zԘ7YL({&ķKEl[\ oUe+:`2S):GPSm_&Ғ{sA% 4xz:"ߙpӣ@3A:(`.Ju((G63>dGא13 rVF{+EZ\,"Â#7lfӞx.J' "QCCF>rD[v#,=2e8)N 3)eUya1?`sYh"~R,̐xi27 } aԀS`VWt3Z$?:c漵.6b#JuMQNG%k2޻lyrSsO䔝8jЀL'x]< a@'泔g{8V瞟ks0-珳0o m!e&H 7S2Z?^DK׆G&Q Z1{&RpHq<&dg9C*F-cEF<:w낤XB%,'%I kn h!I7e ijG%t7LJƵg5 dMwgo`jbr)W̙T9z51DS5?3 w23O',}z2k(Yg]߈3l@ 3诹.|.;W'aőClxh?1Le4}MB|WP `>EߞT1:Ƃ%6v/@ѵ1yMuCMAa\apI:GmP.Nj1Y,U $&Jgv^CHl[zz;*z|;UN[PDP֡u+m@e`MCn+1W̴v}yAB?+ [f׼B53ݩ\Fa@QFUņоSFɁTKWER}Ӵ{CJ$Jh 2zbٻ{ΆvY$&0L!w~@.+)>w(#BJSȢx@ځ1\(XrSK'Ҿ, 0}N/D<-`Kǐdu8yA/R gl\ lM1b#$2I]Ό-?pP^eԧ ec,ȕmcSw .ѝI}Nğa]D&; (7mCL! ǔpV-f=ڐSeǪea24ظ۹,_5@@(LX+Q QulI!FiTӖE?E{'vw^?EYgǸK|282L' ( U @ѼJ[#[6!.l_4HӷA>x4]ȸ[•6rVDb!^K-ρ,^\!bcwi+xGݳ!VgI*PM藹*D;^g))EA@e V(-yr^MM0xoi?Ի}o|xi-Eڵ'PYʯ!g(s/H>!&WTm=pmӈdӊOLa #HSdYSc-Ao(h0q-((-:멧 G}g[VLF!#Uo偹1b C8 XU`vkٵɉ9CE1nyY|ZqY0Qx6'NڕvV݇v {./<90 S?|n]ɞQw!Q)B gQcQ tt`T;߼V1:o$˝uwJUftJ &t:Gђm+;BTuYKL{~SoFo E1?N$*@EMJ7_+C+*p@@[ֶhu]΃lVtT\߬jg{F(1ƃ_9ڥRKZOZ'\pu (#9f,l1{{e;EHʴ_ + cy.n}N`wROtiNp7>SݗKg,!Y;AcL7HI\,EsKS6{g$LoXy(ϋTOmOqH7 iuY]{a , XHѮvVL '}O!G>5N2N"6v8ɕ!adԶ(+ud5d'ַ^ΈXaԶo3*4ِ A>~fD 3Gөlw Q*9Y\U: q_aQew^4'\/Bk~܊oRğwgE](aR80-6|8hnq~ *P`+cRf*E}{iM.`E_#+0>5rdE cU_5w s!إu=EOQ=f8XB_ƕ'!eZkSp ̽]/:e6".Ԍbf* Bk]9&9i ѴɆ> T/R S^y|?+u+m U,sh>tMr>[wur367̟+]IcjO>K1VW7qWNgtPx:V:w?QQX etcVf1~&cR} zj< mUmz%Xu~uX1r=fB|E9+Q'O >W"xE5MyDϰlݟ+s60 wm/և@8w : qo J}E[hyg.fayXcLOJD AJ %MZ ڂt4ڙxgΔ_mЊ4Ry& Ekb#qL7mD,c8o(¨DD {0d&G:)u8366A{׌]p/?PFEeWqD3I"~l)Z qlKhu1(rBIpf:e*QJI뾸rԹZq҅lun,| $V?-(Z&^eVr6 ,~!+OF!e uib$[¨jx"=+>NЖ5:63wuTDU?Һ4"bQȏP^v v1?gRy TLA.0!hJBvUBEG ^@koykBl *zM(ZZbiS%8P^I*ZW]\YI)h  [\+5NEKbșXR@'᳏Tb:]BYKySD_OGP Zņ\h an@{V`:GhØw6|?)+3x:KN]jw7j )p6gCm|WLD$4zeym6g rү\M|B?H<3Y"6ҥ/NrL' r:g3Y\'e!t{l4ڴȲAUq/ 2g{ApMBF|N?'aQ9;dRx87GN%FGWeB P駜37Jgr$/`OU1zjU@9v#vb7+(^X$'xPK߹zf^-\k{H23/`jRn+XSk\O9eG94t47݁+;籔mZ΋F =RQ$I?P11ԕ:LP RgiHzZvGC _;wYl"\ AI\8 `Q ~NoڸMI͸}]\ű} >Cȸ&GYjvV6Ɇ1i,zsUO漫 (#/NV9.~ -8I1\vt]:MR3] 䶡0R0&C=|wUݟFez o6W#9a?m n{3v#ly?nfA%EE B{#ʎܒ_(1Kw}.R;hڄ5I8t־5_&̌ЍK[L5;PlmJM7u?ȍ?Q°^#wãI4Ba? H-j0%ԙ8VD-9 NXǨF0re ^㌿o-_6ɸeh@CEW^Gr~R8о2fVDd@^AQ 8JV6߫hHņS;mt poĸZ=p .T.z W.Gx4q2WB0_-j-\ekr {sLZs~={5g Rk:JlmeCⳕ=]|Pشؼ-I,dLr2?sQ{3nX0|~_66c X<;%׫c/v+s8SGrT4Qn4:y.wW=jbWelZjU"t(3@\=i? 0 x14:!ݑHdS~&ِwl, nڼJ̷{$ OUU˳:#y_L_.64%mIJmީGw|"']iԍ `9Ir fAe[br[<pfQo`©SupN(bjāmoT# p<8]GX3̂h$սfn&(?w =4$nTN(<Ǭ w"(W/خUdέ uL <a=rte#Tsd i' ^ ME jc4%TٚU%/'MPV0!Bq)Ȃ()#W݄>t%W E}鏼vI\H-zT^3x`35B+WRX3Ogk3 x7YQҡt-:U824zNm7]%CHj{YfNJlW\QlOFSm1=:7l2V Z6Rld7fsm!pc2)~e@WnO8&9=Xv4PfcTG'r@v玢Sd"-hH^wq:$ zvn_*Ss\tj gڅ5i=3v3UAY#XŚㄍBrKEc>Z.C,҉'Xh"U`xg zRcozT.6`Sݽ4LUyVG؉e" ٶ/>ujb;-LޒVtװ> d5Ha- f*IQ!/!SUܽ-@T閲ZM'gQ<5*@W9Y$cF7 OW2C4W0-k'L皡v6OxS勣@j{K9aO|O=PKkzzr%3,߰2ɥ^FD+',PF+q烚&)k|EϐQ1;UΖJ'IRDwiӱo v( j~(,Q! Rp7Y5A W&@*e*r[ 7ȣ0{]']'ԐsXr%(OˍzOE1Q&:8 td%{`l2djdi#I,J"3qs0Z%A)2-'˚ҎT?ko__Hhsd?{Z=?-3篭ٽ<#)eiUK]?F"{b(*㏓W?x K&G`ړ5jjlONͷKXlVB ~dzpoEMD /Qzǎ!%07\5:ԁO#6qm"K/Vm~=jjGcnumא yxJb-V +uZvs۾h➴hi4X蝏uO1`gMP& i!VxPk̛ j(bu6F|`Pm4c4[l,% _. ̑ 9br9pNoBA.~䕣\aNGDrumA%Zfx*wvL5K  s癭ݳyX6W&#˂w|Yq,"5zJ2c&3k˪:ziW'2'vzF}z-R_$;mzee3'&Fhb@/4,鵳8M ܠDX[+S2 ʼnKV.ay<|ؗ`"|zbR~?'+Ge8F}Q5}"[z?^cƕ#ҨkX/Oe@'ZmTAyi*?!ƉK%{ʶ|x$ f}!`胘у&TA e.+DZ߾zT"Y>oYw937io5},Gv8Ē_Y$ zG+쾧T<-Gr ~bbA$r3YNNcuYfVZ7O3O}kR_JTY_IJbzSlLp)1Y%MRtG ʚ^a;dႰ1Cl)2si+NΘ>$$(^:RM}~r>OEw(,R^UN1FMW1;&(@tx@!ׁaFpw#hIw+P,`bMs!Gl!߳E %\wO:<5\xӳhʠ,Gja'1rF1 !$ѱ⢨u/u:uR[Aidqp Z #@0A*ve͚ߊhʹm@plNݹM-6cC8@z ywчS,A֒;cѱ%w߅Yjt4N`kpn"*sӋ}GE/NH/ޤ&z; Y:T@sa\TCEhLBX7㥂cNq;HXG ;R&i_V@xz6r G k@)̑z'ĵnՕp~ zT\aὄpR0ҷaCR9MԓܕtIaS>w}ٞ<u%#⬧]īCtIv.@|G4T  {"uIŲD7(•]XHc~9EUUˇ3ŹQB/! =w O4 {KK='@ܺx/,h'-*x&+8(d }eBj6/o0KFS&a?ׄYZפ:IA-2" '9 pkWk' P<5\b(H'o1$P5UNSx_j _&Քm''`|wR/v`xrpIX kRݭu[*D T':_RF\GWLä(n:1\%f| ;lIǤr}l)NN%kH扭דB0l;͂SD}9ґgv{vȠ߶nHޡ1+g(IjUt1-V织lo$2b=Qig 7)Y;m)x[XQRPN>跬Y(Uvzv%Qv \者)GCRݎu7"u )m  9\\HZhL[ |QI-@/v8. XѮ3g}z9b6  &Cz᝘*OQӧK "V&Nz͕-dzzIg'e26wع̳N;!heUYcwgWʂЬ#y %,Ca=@JxeYym0r]٥CBu=; # W-c|:Ej7+m>7׍sU;WƖ~֠k5 z tM;G]H,пMP![Z}'|ψF73\i +نMd(]7&[v1Uvx v;}r'ϲ8䵑:m/g$%L߀Oҥ_G>-j%d=Oqq[o-%c<5lٲ49xPp'5 +:׭T/;nLuq[VB"XWk{-^)uz -/+Cldk(hKWjNPAgddЂrJdx(v$Տc+BOLt{RpkIkN3)~S%p曀 S`@ ܂ o +nB'% & DرJxtH-a2]xj~Bt'ۑe'yzkA}!ܾ^љn  =M7s&-@I5h&;ژy|DET(ZKn=:>QHf/<ȥ~ǣ@u: sKUT%;[ )5ƻz hnNJ3yzf!lED7]0md2okި.hIw!Q\iY_l5 Ug+PK$ MUJa@K/Q\iiFɿVj:24zz=sLD>"O"/3:CQAmS`6r'av$Δ/@Es场 ~G{$yj _t|/Eqh%0NJe&:**.kj50BWU 7Hzhڄ^"^vx G/]ج548S=Q:'"M>BM$a~D qMW@aqp3i]哯د~UiD݈y,ag&j"znR#uVTV13R5Zb޴F |gѨ/#TidX`LG8h^M?Aw,ɴ'9KkHBSX'İ,Nϝ7W$NڻQ(>6Oݮ%R3Z$V/Z\7}7o:Z&琁xu84kp3>UUn b4# 1dr0nD3k~Tu)d泾y`:{ڌ"i+Wf*6F)@ϚҠq-l`c맳/1h-"{#aLĮlm5Er pY%URMa^a`|Nnxݮ۬skY4 jR#y\r3#(Q/sɎZAA"5q}ldScW.Dx{Hg`!Bn2S2bNdɕ"gmbW ȿIG725+VfpOd" B:GV^IEOD`&1DJbYEdO50˶);/$y1.0R(a˨/wQXY˨Xj;^C:+N#ƆO8O,z~-b _*۠ǻ NX,Uڢ8. v1|c;j &3 sdC=)j>s;*g>~yo p(9B$`dۏ=(֑QtҊΞ*88Wx/MwNQA/a \8 ʙNRhhG /WPۮ:ZہfuL&B|6)2$a J% ݟ1K\8|\9 *Kx^-4^TfND:q9wB9>_Y2 zah+ˤZ(AW4o?vΈ45ϰH:6ҷ&(Ry| RܷVÊ=d3=»xkJ,:k%|tZkn զF'A,q tO ;HN]ðCޠ"~HQ: /{^>.|b̜/${U( Jk׌|hb(R9{&ZhGɏsJ4Up`{V"˙(as1RDlcQ DƌՕ+)W d#6 dFrP w8obΨ]ȾHpɍd’őSSF/BŚ_o.UWł}#ъ\jhp )Ȏ h;pSȜ@ɢ?% ߃( oj>{ tT^5ZXJăEJQ`5j|r܂)$cK)uSPb_ gz(G4q ᪻>d s|4}hTvwP֔.mY^2"w lmMW"bЍ 9TZ֭X 8/P"[$F 4RbRMQe;Kڷfof l~9֝A~E9]4 QQ7o.ŲOhvYu9z>P"[pV{1$:8Znd]3$?`$AK2ȼumAlAV FAG"Gg)l! @Z] ɺg(g8oy~NPAɧjm/_UG'&ߔ ?m~^̽UC ɔ|OG6$‹=!jQ`? do^r3j~-P4[)l>1&ZBsUuZ %oK^I(qڇ\w;8 3W_&ؐJ9!٥pՕ/*!Sξz逐e]$ EK{h[Ji*&Ǟ}i-؊k IڎgS KX\1H9[fS %O'RXr^K ^w  R|A kr%[fκiaqa>r]NwWT?P߁\s L]6{iճu| ,{x ,?p&1BQΦ [ziT Y[߀X;贑 1J_Q_0Aԝ'EˆS1jjL49@ 5$3zm2TwQ0jѽ2ø'Nͨ/3)Vw=W  zL&} k8sԫC9ˁ)og[ , r+P@[:JYNT9>#؇hE ?۱t!w5=6dvS+;>' W\n7Y 5CaSqѝ s~8FsE;]\_Q0|:.1Mpu?@XðB.gLiɠB)J<l͓)p/+3}57 6h,:lOkϢ3TtMxrjDѭo X_]o %/#訧"FCX?I鵙ut5Xs HV:8{6Y11mflF~.~CDrHe wŰ9w&o@;\rR/94u!oT8/Cf_5ɯ/1`6S:̥ `w/q'[;:=5hxaA;Pdq,y2DERK<@~z+Y&?K6.+6%GoGv {Z4fH>w -eS2| X1r}}qtH\-U%)nU9hRh7S bB ΊGH39ж}PaQwZPIflgxQ!ӋsL3µB?&ۭÉ K-nC[Ҷ

JWY1=!I­x|9(z)~ŭ$o-8 ״nCDBg&pK, 7.&mZLSzL*X#XU\{Ҡ*:zI\aعJ,6YIUO_4*#tn_\di_f2{-;Y.er1ՠ[f8$J1YAAt9 nROo~5]"n 믔q`B$੏20˜y ︓F/YQ1bJ0ɂvChc #D+ MvsGtچP(ZUx]dUrPYIkG 憩䡉6R6֎ F~5㹘:&((WT*$ö YZ