libsamba-errors0-4.9.5+git.149.9593f64a5c3-lp151.1.3 >  A \}/=„[j@2X8ܲŁkBKQ-瘶`?vuAM!"I6.ꆧ iy8u[{y9MI5w~ͺՊSY$ٛ1*JgܔFO~ĐC{VS3t`V TjE7E7jIJ\R*GHS@9*9O:ŌPܖBRtHb395ec4fe4496357c69870a667f64b487fa433a236860bb99397a0e6a2fd8a165b0092c05d5b8a85b05bce5b2847e0ce904b1da0P\}/=„vOۊ͍ͻEvo'?7t*Q F@QEc).% {\11 %ԇKD-AomiX^@FAGfnȶ_tGfynK#]KQ<:(]"lPՠq&9tsq{(M ۦZ2Z"6fqsWܞ~ACPV i*pIEeS)rK%Ϙ &+ o@Gb ؛ӯhZ@ ;?/A d\>p@T?Tpd- 7 U %,0 2 4 8 y |4 ` l (89\:>Qw@QFQGQHQIQXQYQ\R]R^R)bR5cRdS:eS?fSBlSDuSXvS\wSxSySzTT T$T*TlClibsamba-errors04.9.5+git.149.9593f64a5c3lp151.1.3Samba errors handling libraryThis subpackage contains libraries to handle and translate NT error codes.\[sheep83PopenSUSE Leap 15.1openSUSEGPL-3.0-or-laterhttps://bugs.opensuse.orgSystem/Librarieshttps://www.samba.org/linuxx86_64P\"a7bc74507dd05b6415c9a0e7bcf53eee1c0be49a31d134c9572febdb3de8f39crootrootsamba-4.9.5+git.149.9593f64a5c3-lp151.1.3.src.rpmlibsamba-errors.so.1()(64bit)libsamba-errors.so.1(SAMBA_ERRORS_1)(64bit)libsamba-errors0libsamba-errors0(x86-64)@@@@@    /sbin/ldconfig/sbin/ldconfiglibc.so.6()(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libtalloc.so.2()(64bit)libtalloc.so.2(TALLOC_2.0.2)(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.1\N\e\e\}@\o@\\\\\4\ @[[@[[%@[@[ @[[t[#@[[Q@[Q@[\[[[{[z@[r@[ @[WZZZZZZ`@Z@Z@ZZ@ZZ}@Z'Z@ZOZ@Z ,@Z@YY@Yo@Yo@Yo@Y@Y3YYu@Yg`Yf@Y7Y7Y, @Y"X:@X:@XXsX@X9@X@X@Xg@X,XƉX@XYXe@XX@X@X@XWXAb@X-W Wv@W$W;Wu@W#WW W@W~D@Wj}W_WYZ@WYZ@W=W(W!@WW@V3V3VV'@VՄ@VՄ@VVIV@V`Vl@V@V@V<@V<@V@VjV]VI@VG"@VG"@VG"@VG"@V(V'~@V V7@VBUYU@U@UUAUĝU@UU@Uy@UUrUq@UhTU_@USanpower David Mulder David Mulder David Disseldorp Samuel Cabrero David Mulder ddiss@suse.comnopower@suse.comJan Engelhardt David Mulder Samuel Cabrero Samuel Cabrero Samuel Cabrero dmulder@suse.comdmulder@suse.comdmulder@suse.comjmcdonough@suse.comdmulder@suse.comSamuel Cabrero dmulder@suse.comSamuel Cabrero dmulder@suse.comdmulder@suse.comvcizek@suse.comdmulder@suse.comdmulder@suse.comnopower@suse.comscabrero@suse.dejmcdonough@suse.comscabrero@suse.deaaptel@suse.comjengelh@inai.dedimstar@opensuse.orgdmulder@suse.comjmcdonough@suse.comdavid.mulder@suse.comjmcdonough@suse.comaaptel@suse.comdmulder@suse.comscabrero@suse.comscabrero@suse.comkukuk@suse.dedavid.mulder@suse.comscabrero@suse.comrbrown@suse.comdmulder@suse.comscabrero@suse.comdimstar@opensuse.orgscabrero@suse.comaaptel@suse.comnopower@suse.comnopower@suse.comaaptel@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comddiss@suse.comnopower@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comdmulder@suse.comnopower@suse.comjmcdonough@suse.comaaptel@suse.comkukuk@suse.comkukuk@suse.denopower@suse.comaaptel@suse.comdmulder@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comddiss@suse.comjmcdonough@suse.comddiss@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comjmcdonough@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comtchvatal@suse.comlmuelle@suse.comnopower@suse.comcrrodriguez@opensuse.orglmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comnoel.power@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comnopower@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.commpluskal@suse.comlmuelle@suse.comnopower@suse.deddiss@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.denopower@suse.delmuelle@suse.comnopower@suse.deddiss@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.com- CVE-2019-3880: Save registry file outside share as unprivileged user; (bso#13851); (bsc#1131060 ).- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0); (bso#13834); (bsc#1130703);- Update to samba-4.9.5 + audit_logging: Remove debug log header and JSON Authentication: prefix; (bso#13714); + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760); + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso# CID: 1433607; (bso#11495); + smbd: uid: Don't crash if 'force group' is added to an existing share connection; (bso#13690); + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility code; (bso#13770); + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803); + s3:utils/smbget fix recursive download with empty source directories; (bso#13199); + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716); + s3:libsmb: cli_smb2_list() can sometimes fail initially on a connection; (bso#13736); + join: Throw CommandError instead of Exception for simple errors; (bso#13747); + ldb: Avoid inefficient one-level searches; (bso#13762); + s3: libsmb: use smb2cli_conn_max_trans_size() in cli_smb2_list(); (bso#13736); + tldap: Avoid use after free errors; (bso#13776); + Fix idmap xid2sid cache churn; (bso#13802); + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812); + s3-smbd: Avoid assuming fsp is always intact after close_file call; (bso#13720); + s3-vfs-fruit: Add close call; (bso#13725); + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746); + s3-vfs: add glusterfs_fuse vfs module; (bso#13774); + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766); + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS) ftruncate and fallocate; (bso#13807); + lib/audit_logging: Actually create talloc; (bso#13737); + netcmd/user: python[3]-gpgme unsupported and replaced by python[3]-gpg; (bso#13728); + dns: Changing onelevel search for wildcard to subtree; (bso#13738); + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721); + sambaundoguididx: Use the right escaped oder unescaped sam ldb files; (bso#13759); + ctdb: Print locks latency in machinereadable stats; (bso#13742); + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786); + audit_logging: auth_json_audit required auth_json; (bso#13715); + man pages: Document prefork process model; (bso#13765); + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773); + s3:auth: ignore create_builtin_guests() failing without a valid idmap configuration; (bso#13697); + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC without trusts; (bso#13722); + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd is not available; (bso#13723); + s4:server: Add support for 'smbcontrol samba shutdown' and 'smbcontrol debug/debuglevel'; (bso#13752); + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616); + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330); + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774); + notifyd: Fix SIGBUS on sparc; (bso#13704); + waf: Check for libnscd; (bso#13787); + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770); + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717); + Recovery lock bug fixes; (bso#13800); + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726); + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727); + vfs_fileid: Fix get_connectpath_ino; (bso#13741); + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).- Fix update-apparmor-samba-profile script after apparmor switched to using named profiles. The change is backwards compatible; (bsc#1126377);- LoadParm().load_default() fails with "Unable to load default file"; (bsc#1089758);- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);- Update to samba-4.9.4 + libcli/smb: Don't overwrite status code; (bso#9175). + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164). + Session setup reauth fails to sign response; (bso#13661). + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677). + vfs_shadow_copy2: Nicely deal with attempts to open previous version for writing; (bso#13688). + Restoring previous version of stream with vfs_shadow_copy2 fails with NT_STATUS_OBJECT_NAME_INVALID fsp->base_fsp->fsp_name; (bso#13455). + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571). + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708) + PEP8: fix E231: missing whitespace after ','. + winbindd: Fix crash when taking profiles;(bso#13629) + CVE-2018-14629 dns: Fix CNAME loop prevention using counter regression; (bso#13600) + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686). + CVE-2018-16853: Do not segfault if client is not set; (bso#13571). + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679) + ctdb-daemon: Exit with error if a database directory does not exist; (bso#13696). + s3:libads: Add net ads leave keep-account option; (bso#13498).- Drop more %if..%endif guards which are idempotent. - Drop requires on ldconfig which are already auto-discovered. - Do not ignore errors from useradd/groupadd.- Remove python2 build dependency from samba-libs; (bsc#1116900);- Update update-apparmor-samba-profile script to ignore the shares's paths containing substitution variables in any place, not only at the beginning of the path.- Update to samba-4.9.3 + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD Internal DNS server; (bso#13600); (bsc#1116319); + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628); (bsc#1116320); + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server; (bso#13674); (bsc#1116322); + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers; (bso#13669); (bsc#1116321); + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos configuration (unsupported); (bso#13678); (bsc#1116324); + CVE-2018-16857: Bad password count in AD DC not always effective; window; (bso#13683); (bsc#1116323);- Update to samba-4.9.2 + dsdb: Add comments explaining the limitations of our current backlink behaviour; (bso#13418); + Fix problems running domain backups (handling SMBv2, sites); (bso#13621); + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3; (bso#13465); + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642); + File saving issues with vfs_fruit on samba >= 4.8.5; (bso#13646); + Enabling vfs_fruit looses FinderInfo; (bso#13649); + Cancelling of SMB2 aio reads and writes returns wrong error NT_STATUS_INTERNAL_ERROR; (bso#13667); + Fix CTDB recovery record resurrection from inactive nodes and simplify vacuuming; (bso#13641); + examples: Fix the smb2mount build; (bso#13465); + libtevent: Fix build due to missing open_memstream on Illiumos; (bso#13629); + winbindd_cache: Fix timeout calculation for sid<->name cache; (bso#13662); + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path; (bso#13653); + Extended DN SID component missing for member after switching group membership; (bso#13418); + Return STATUS_SESSION_EXPIRED error encrypted, if the request was encrypted; (bso#13624); + python: Allow forced signing via smb.SMB(); (bso#13621); + lib:socket: If returning early, set ifaces; (bso#13665); + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8 encoded unicode; (bso#13616); + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute; (bso#13673); + waf: Add -fstack-clash-protection; (bso#13601); + winbind: Fix segfault if an invalid passdb backend is configured; (bso#13668); + Fix bugs in CTDB event handling; (bso#13659); + Misbehaving nodes are sometimes not banned; (bso#13670);- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);- winbind requires latest version of libtevent-util0 to start- Backport latest gpo code from master + Read policy from local gpt cache + Offline policy application + Make group policy extensible via register/unregister gpext + gpext's run via a process_group_policy method- Enable profiling data collection- Change samba-kdc package name to samba-ad-dc - Move samba-ad-dc.service to the samba-ad-dc package- Update to samba-4.9.1 + s3: nmbd: Stop nmbd network announce storm; (bso#13620); + s3-rpcclient: Use spoolss_init_spoolss_UserLevel1 in winspool cmds; (bso#13597); + CTDB recovery lock has some race conditions; (bso#13617); + s3-rpc_client: Advertise Windows 7 client info; (bso#13597); + ctdb-doc: Remove PIDFILE option from ctdbd_wrapper man page; (bso#13610);- Tumbleweed doesn't define the sle_version macro, so we must include a check for suse_version also. Otherwise python3 is disabled on Tumbleweed.- Update to samba-4.9.0 + samba_dnsupdate: Honor 'dns zone scavenging' option, only update if needed; (bso#13605); + wafsamba: Fix 'make -j'; (bso#13606);- Update to samba-4.9.0rc5 + s3: VFS: vfs_full_audit: Ensure smb_fname_str_do_log() only returns absolute pathnames; (bso#13565); + s3: util: Do not take over stderr when there is no log file; (bso#13578); + Durable Reconnect fails because cookie.allow_reconnect is not set; (bso#13549); + krb5-samba: Interdomain trust uses different salt principal; (bso#13539); + vfs_fruit: Don't unlink the main file; (bso#13441); + smbd: Fix a memleak in async search ask sharemode; (bso#13602); + Fix Samba GPO issue when Trust is enabled; (bso#11517); + samba-tool: Add "virtualKerberosSalt" attribute to 'user getpassword/syncpasswords'; (bso#13539); + Fix CTDB configuration issues; (bso#13589); + ctdbd logs an error until it can successfully connect to eventd; (bso#13592);- Update to samba-4.9.0rc4 + s3: smbd: Ensure get_real_filename() copes with empty pathnames; (bso#13585); + samba domain backup online/rename commands force user to specify password on CLI; (bso#13566); + wafsamba/samba_abi: Always hide ABI symbols which must be local; (bso#13579); + Fix a panic if fruit_access_check detects a locking conflict; (bso#13584); + Fix memory and resource leaks; (bso#13567); + python: Fix print in dns_invalid.py; (bso#13580); + Aliasing issue causes incorrect IPv6 checksum; (bso#13588); + Fix CTDB configuration issues; (bso#13589); + s3: vfs: time_audit: fix handling of token_blob in smb_time_audit_offload_read_recv(); (bso#13568);- Add missing zlib-devel dependency which was previously pulled in by libopenssl-devel- Update to samba-4.9.0rc3+git.22.3fff23ae36e + CVE-2018-10858: libsmb: Harden smbc_readdir_internal() against returns from malicious servers; (bso#13453); + CVE-2018-1140: ldbsearch '(distinguishedName=abc)' and DNS query with escapes crashes, ldb: Release LDB 1.3.5 for CVE-2018-1140; (bso#13374); + CVE-2018-10918: cracknames: Fix DoS (NULL pointer de-ref) when not servicePrincipalName is set on a user; (bso#13552); + CVE-2018-10919: acl_read: Fix unauthorized attribute access via searches; (bso#13434); + ctdb_mutex_ceph_rados_helper: Set SIGINT signal handler; (bso#13540); + CVE-2018-1139 libcli/auth: Do not allow ntlmv1 over SMB1 when it is disabled via "ntlm auth"; (bso#13360); + s3-tldap: do not install test_tldap; (bso#13529); + ctdb_mutex_ceph_rados_helper: Fix deadlock via lock renewals; (bso#13540); + CVE-2018-1140 Add NULL check for ldb_dn_get_casefold() in ltdb_index_dn_attr(); (bso#13374); + ctdb-eventd: Fix CID 1438155; (bso#13554); + Fix CIDs 1438243, (Unchecked return value) 1438244 (Unsigned compared against 0), 1438245 (Dereference before null check) and 1438246 (Unchecked return value); (bso#13553); + ctdb: Fix a cut&paste error; (bso#13554); + systemd: Only start smb when network interfaces are up; (bso#13559); + Fix quotas don't work with SMB2; (bso#13553); + s3/smbd: Ensure quota code is only called when quota support detected; (bso#13563); + s3/libsmb: Explicitly set delete_on_close token for rmdir; (bso#13204); + s3:waf: Install eventlogadm to /usr/sbin; (bso#13561); + Shorten description in vfs_linux_xfs_sgid manual; (bso#13562);- Update to samba-4.9.0rc2+git.21.a1069afb007 + s3: smbd: Using "sendfile = yes" with SMB2 can cause CPU spin; (bso#13537); + s3: smbd: Fix path check in smbd_smb2_create_durable_lease_check(); (bso#13535); + samba-tool trust: Support discovery via netr_GetDcName; (bso#13538); + s4-dsdb: Only build dsdb Python modules for AD DC; (bso#13542); + Fix portability issues on freebsd; (bso#13520); + DNS wildcard search does not handle multiple labels correctly; (bso#13536); + samba-tool domain trust: Fix trust compatibility to Windows Server 1709 and FreeIPA; (bso#13308); + Fix portability issues on freebsd; (bso#13520); + ctdb-protocol: Fix CTDB compilation issues; (bso#13545); + ctdb-docs: Replace obsolete reference to CTDB_DEBUG_HUNG_SCRIPT option; (bso#13546); + ctdb-doc: Provide an example script for migrating old configuration; (bso#13550); + ctdb-event: Implement event tool "script list" command; (bso#13551);- Update to samba-4.8.4+git.37.a7a861d7982; + CVE-2018-1139: Weak authentication protocol allowed; (bsc#1095048); (bsc#13360); + CVE-2018-1140: Denial of Service Attack on DNS and LDAP server; (bsc#1095056); (bso#13466); (bso#13374); + CVE-2018-10858: Insufficient input validation on client directory listing in libsmbclient; (bsc#1103411); (bso#13453); + CVE-2018-10918: Denial of Service Attack on AD DC DRSUAPI server; (bsc#1103414); (bso#13552); + CVE-2018-10919: Confidential attribute disclosure from the AD LDAP server; (bsc#1095057); (bso#13434); + s3:winbind: winbind normalize names' doesn't work for users; (bso#12851); + winbind: Fix UPN handling in canonicalize_username(); (bso#13369); + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428); + samdb: Fix building Samba with gcc 8.1; (bso#13437); + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440); + smbd: Flush dfree memcache on service reload; (bso#13446); + ldb: Save a copy of the index result before calling the + lib/util: No Backtrace given by Samba's AD DC by default; (bso#13454). + s3: smbd: printing: Re-implement delete-on-close semantics for print files missing since 3.5.x; (bso#13457). + python: Fix talloc frame use in make_simple_acl(); (bso#13474). + krb5_wrap: Fix keep_old_entries logic for older Kerberos libraries;(bso#13478). + krb5_plugin: Add winbind localauth plugin for MIT Kerberos; (bso#13480).- Add missing package descriptions; (bsc#1093864); - Fix dependency issue between samba-python and samba-kdc; (bsc#1062876); - Call update-apparmor-samba-profile when running samba-ad-dc; (bsc#1092099);- Update to 4.8.2 + After update to 4.8.0 DC failed with "Failed to find our own NTDS Settings objectGUID" (bso#13335). + fix incorrect reporting of stream dos attributes on a directory (bso#13380). + vfs_ceph: add asynchronous fsync; fake synchronous call (bso#13412). + vfs_ceph: add fake async pwrite/pread send/recv hooks; (bso#13425) + vfs_ceph: Fix memory leak; (bso#13424). + libsmbclient: Fix hard-coded connection error return of ETIMEDOUT; (bso#13419). + s4-lsa: Fix use-after-free in LSA server; (bso#13420). + winbindd: Do re-connect if the RPC call fails in the passdb case; (bso#13430). + cleanupd: Sends MSG_SMB_UNLOCK twice to interested peers; (bso#13416). + cleanupd: Use MSG_SMB_BRL_VALIDATE to signal cleanupd unclean process shutdown; (bso#13414). + ctdb-client: Remove ununsed functions from old client code; (bso#13411). + printing: Return the same error code as windows does on upload failures; (bso#13395). + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged pipe is not accessable; (bso#13400). + s4:lsa_lookup: remove TALLOC_FREE(state) after all dcesrv_lsa_Lookup{Names,Sids}_base_map() calls; (bso#13420). + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407). + s3:smbspool: Fix cmdline argument handling; (bso#13417).- Move libdfs-server-ad-samba4.so library from kdc to libs package, as it is required by some client libs; (bsc#1074135); - Update to 4.8.1; (bsc#1091179); + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error, we don't own it here; (bso#13244); + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't support fdopendir(); (bso#13270); + Round-tripping ACL get/set through vfs_fruit will increase the number of ACE entries without limit; (bso#13319); + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit issues; (bso#13347); + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without delete access; (bso#13358); + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372); + s3: smbd: Unix extensions attempts to change wrong field in fchown call; (bso#13375); + ms_schema/samba-tool visualize: Fix python2.6 incompatibility; (bso#13337); + Fix invocation of gnutls_aead_cipher_encrypt(); (bso#13352); + Windows 10 cannot logon on Samba NT4 domain; (bso#13328); + winbindd: Recover loss of netlogon secure channel in case the peer DC is rebooted; (bso#13332); + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363); + ctdb-client: Fix bugs in client code; (bso#13356); + ctdb-scripts: Drop "net serverid wipe" from 50.samba event script; (bso#13359); + s3: lib: messages: Don't use the result of sec_init() before calling sec_init(); (bso#13368); + libads: Fix the build '--without-ads'; (bso#13273); + winbind: Keep "force_reauth" in invalidate_cm_connection, add 'smbcontrol disconnect-dc'; (bso#13332); + vfs_virusfilter: Fix CIDs 1428738-1428740; (bso#13343); + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367); + rpc_server: Fix core dump in dfsgetinfo; (bso#13370); + smbclient: Fix notify; (bso#13382); + Fix smbd panic if the client-supplied channel sequence number wraps; (bso#13215); + Windows 10 cannot logon on Samba NT4 domain; (bso#13328); + lib/util: Remove unused '#include ' from tests/tfork.c; (bso#13342); + Fix build errors with cc from developerstudio 12.5 on Solaris; (bso#13343); + Fix the picky-developer build on FreeBSD 11; (bso#13344); + s3:modules: Fix the build of vfs_aixacl2.c; (bso#13345); + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338); + lib:replace: Fix linking when libtirpc-devel overwrites system headers; (bso#13341); + winbindd: 'wbinfo --name-to-sid' returns misleading result on invalid query; (bso#13312); + s3:passdb: Do not return OK if we don't have pinfo set up; (bso#13376); + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);- Use new foreground execution flags for systemd samba daemons; (bsc#1088574); (bsc#1071090); (bsc#1065551); + Add %post scriptlet to clear old sysconfig flags - Update vendor-files to commit 880b3e7. + Set samba sysconfig template variables to "" + Add required daemon flags directly to systemd unit- Specfile cleanup + Remove %if..%endif guards which don't affect the build + Remove redundant %clean section + Replace old $RPM_* shell vars with macros- BuildRequire pkgconfig(systemd) and pkgconfig(libsystemd) in place of systemd and systemd-devel: Allow OBS to optimize the workload by allowing the usage of the 'build-optimized' systemd packages.- Enable building samba with python3, and create a samba-python3 package.- Update to 4.8 + New GUID Index mode in sam.ldb for the AD DC + GPO support for samba KDC + Time machine support with vfs_fruit + Encrypted secrets + AD Replication visualization + Improved trust support - ability to not scan global trust list - AD external trusts have limited support - verbose trusted domain listing + VirusFilter VFS module + NT4-style replication removed + vfs_aio_linux removed- Disable samba-pidl package, due to the removal of dependency perl-Parse-Yapp; (bsc#1085150);- Update to 4.7.6; + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally; (bso#11343); (bsc#1081741); + CVE-2018-1057: Authenticated users can change other users' password; (bso#13272); (bsc#1081024).- Disable python until full python3 port is done; (bsc#1082139); + Remove contents of package samba-python + Remove contents of package libsamba-policy0 + Remove contents of package libsamba-policy-devel + Remove library libsamba-python-samba4.so from samba-libs package + Remove library libsamba-net-samba4.so from samba-libs package + Remove smbtorture binary and manpage from samba-test- samba fails to build with glibc2.27; (bsc#1081042);- Update to 4.7.5; (bsc#1080545); + smbd tries to release not leased oplock during oplock II downgrade; (bso#13193); + Fix copying file with empty FinderInfo from Windows client to Samba share with fruit; (bso#13181); + build: Deal with recent glibc sunrpc header removal; (bso#10976); + Make Samba work with tirpc and libnsl2; (bso#13238); + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208); (bsc#1075206); + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue; (bso#12986); + ctdb-recovery-helper: Deregister message handler in error paths; (bso#13188); + samba: Only use async signal-safe functions in signal handler; (bso#13240); + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue; (bso#12986); + repl_meta_data: Fix linked attribute corruption on databases with unsorted links on expunge. dbcheck: Add functionality to fix the corrupt database; (bso#13228); + Fix smbd panic when chdir returns error during exit; (bso#13189); + Make Samba work with tirpc and libnsl2; (bso#13238); + Fix POSIX ACL support on HPUX and possibly other big-endian OSs; (bso#13176);- Update to 4.7.4; (bsc#1080545); + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140); + s3: libsmb: Fix valgrind read-after-free error in cli_smb2_close_fnum_recv(); (bso#13171); + s3: libsmb: Fix reversing of oldname/newname paths when creating a reparse point symlink on Windows from smbclient; (bso#13172); + Build man page for vfs_zfsacl.8 with Samba; (bso#12934); + repl_meta_data: Allow delete of an object with dangling backlinks; (bso#13095); + s4:samba: Fix default to be running samba as a deamon; (bso#13129); + Performance regression in DNS server with introduction of DNS wildcard, ldb: Release 1.2.3; (bso#13191); + vfs_zfsacl: Fix compilation error; (bso#6133); + "smb encrypt" setting changes are not fully applied until full smbd restart; (bso#13051); + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052); + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155); + winbindd: Dependency on trusted-domain list in winbindd in critical auth codepath; (bso#13173); + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120); + ctdb: sock_daemon leaks memory; (bso#13153); + TCP tickles not getting synchronised on CTDB restart; (bso#13154); + winbindd: winbind parent and child share a ctdb connection; (bso#13150); + pthreadpool: Fix deadlock; (bso#13170); + pthreadpool: Fix starvation after fork; (bso#13179); + messaging: Always register the unique id; (bso#13180); + s4/smbd: set the process group; (bso#13129); + Fix broken linked attribute handling; (bso#13095); + The KDC on an RWDC doesn't send error replies in some situations; (bso#13132); + libnet_join: Fix 'net rpc oldjoin'; (bso#13149); + g_lock conflict detection broken when processing stale entries; (bso#13195); + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired sessions; (bso#13197); + s3:libads: net ads keytab list fails with "Key table name malformed"; (bso#13166); (bsc#1067700); + Fix crash in pthreadpool thread after failure from pthread_create; (bso#13170); + s4:samba: Allow samba daemon to run in foreground; (bso#13129); (bsc#1065551); + third_party: Link the aesni-intel library with "-z noexecstack"; (bso#13174); + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I" options; (bso#13125);- Re-enable usage of libnsl (did got lost with glibc change) - Use TI-RPC (sunrpc is deprecated and will be removed soon from glibc)- smbc_opendir should not return EEXIST with invalid login credentials; (bnc#1065868).- Update to 4.7.3; (bsc#1069666); + Non-smbd processes using kernel oplocks can hang smbd; (bso#13121); + python: use communicate to fix Popen deadlock; (bso#13127); + smbd on disk file corruption bug under heavy threaded load; (bso#13130); + tevent: version 0.9.34; (bso#13130); + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118); + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug; (bsc#1060427);(bso#13041); + CVE-2017-15275: s3: smbd: Chain code can return uninitialized memory when talloc buffer is grown; (bsc#1063008); (bso#13077); - Build with AD DC support only in openSUSE.- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- samba-tool requires samba-python; (bnc#1067771).- Run all daemons in the foreground and let systemd handle it; (bsc#1065551). - Update to 4.7.1; + Fix exporting subdirs with shadow_copy2; (bso#13091); + Currently if getwd() fails after a chdir(), we panic; (bso#13027); + Ensure default SMB_VFS_GETWD() call can't return a partially completed struct smb_filename; (bso#13068); + sys_getwd() can leak memory or possibly return the wrong errno on older systems; (bso#13069); + smbclient doesn't correctly canonicalize all local names before use; (bso#13093); + Fix broken linked attribute handling; (bso#13095); + Missing LDAP query escapes in DNS rpc server; (bso#12994); + Link to -lbsd when building replace.c by hand; (bso#13087); + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem; (bso#6133); + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module; (bso#7909); + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module; (bso#7933); + Missing assignment in sl_pack_float; (bso#12991); + Wrong Samba access checks when changing DOS attributes; (bso#12995); + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062); + groupmap cleanup should not delete BUILTIN mappings; (bso#13065); + Enabling vfs_fruit results in loss of Finder tags and other xattrs; (bso#13076); + man pages: Properly ident lists; (bso#9613); + smb.conf.5: Sort parameters alphabetically; (bso#13081); + Fix GUID string format on GetPrinter info; (bso#12993); + Remote serverid check doesn't check for the unique id; (bso#13042); + CTDB starts consuming memory if there are dead nodes in the cluster; (bso#13056); + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070); + libgpo doesn't sort the GPOs in the correct order; (bso#13046); + Remote serverid check doesn't check for the unique id; (bso#13042); + vfs_catia: Fix a potential memleak; (bso#13090); + Fix file change notification for renames; (bso#12903); + Samba DNS server does not honour wildcards; (bso#12952); + Can't change password in samba from a Windows client if Samba runs on IPv6 only interface; (bso#13079); + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086); + Apple client can't cope with SMB2 async replies when creating symlinks; (bso#13047); + s4:rpc_server:backupkey: Move variable into scope; (bso#12959); + Fix ntstatus_gen.h generation on 32bit; (bso#13099); + Fix a double free in vfs_gluster_getwd(); (bso#13100); + Fix resouce leaks and pointer issues; (bso#13101); + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);- Add samba-kdc to baselibs.conf. - Do not wrap samba-kdc's package definition into if/endif: the package won't be generated simply based on the fact that there is no files section for the package. Allows the source validator to ensure samba-kdc is a built package.- Update to 4.7.0; + Whole DB read locks: Improved LDAP and replication consistency; (bso#12858). + Samba AD with MIT Kerberos + Dynamic RPC port range: Default range changed from "1024-1300" to "49152-65535". + Authentication and Authorization audit support: New auth_audit debug class. + Multi-process LDAP Server: The LDAP server in the AD DC now honours the process model used for the rest of the 'samba' process. + Improved Read-Only Domain Controller (RODC) Support; (bso#12977). + Additional password hashes stored in supplementalCredentials. + Improvements to DNS during Active Directory domain join. + Significant AD performance and replication improvements. + Query record for open file or directory. + Removal of lpcfg_register_defaults_hook(). + Change of loadable module interface. + SHA256 LDAPS Certificates: The self-signed certificate generated for use on LDAPS will now be generated with a SHA256 self-signature, not a SHA1 self-signature. + CTDB no longer allows mixed minor versions in a cluster. + CTDB now ignores hints from Samba about TDB flags when attaching to databases. + New configuration variable CTDB_NFS_CHECKS_DIR. + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed. + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed. + The example NFS Ganesha call-out has been improved. + A new "replicated" database type is available.- CVE-2017-12163: Prevent client short SMB1 write from writing server memory to file; (bso#13020); (bsc#1058624).- CVE-2017-12150: Some code path don't enforce smb signing, when they should; (bso#12997); (bsc#1058622).- CVE-2017-12151: Keep required encryption across SMB3 dfs redirects; (bso#12996); (bsc#1058565).- Clean specfile assuming SUSE-only system and product >=SLE11 + %{ul_version}, %{rhel_version}, %{mandriva_version}, %{centos_version} are always undefined + %{_vendor} is "suse" and %{suse_version} is at least 1100- Update to 4.6.7; (bsc#1054017) + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392). + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937). + vfs_ceph provides inconsistent directory listings; (bso#12911). + Misused talloc context can cause a user to crash their smbd by chaining SMB1 commands.; (bso#12836). + Use-after free can crash libsmbclient code.; (bso#12927). + Server exit with active AIO can crash.; (bso#12925). + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910). + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs; (bso#12898). + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897). + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for authentication; (bso#12886). + finder sidebar showing question mark instead of icon when using ip to connect with vfs_fruit; (bso#12840). + Winbind stops obtaining the 'unixHomeDirectory' & 'loginShell' attributes from AD.; (bso#12720). + KCC run at selftest startup can fail spuriously due to a race; (bso#12869). + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for the remote change; (bso#12782). + rpc_pipe_client memory leaks due to long term memory context passed to rpc_pipe_open_interface(); (bso#12890). + CVE-2017-2619 breaks accessing previous versions of directories with snapshots in subdirectories of the share; (bso#12885). + dns_name_equal doing OOB read; (bso#12813). + replica_sync tests flap; (bso#12753). + Selftest should not call 'net cache flush' and wipe important winbind entries; (bso#12868). + Old Samba versions don't support using recent ldb versions (>=1.1.30); (bso#12859). + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490). + race starting winbindd against posixacl test; (bso#12843). + Crash in the reentrant smbd_smb2_create_send() if the something fails in the subsequent try; (bso#12832). + spnego.c passes the wrong argument order to gensec_update_ev() for the FALLBACK case; (bso#12788). + Clients with SMB3 support can't connect with "server max protocol = SMB2_02"; (bso#12772). + A log message of samb-tool user syncpasswords reverses string arguments in a debug message "Call Popen[...".; (bso#12768). + The smb tarmode tests kills the share dir contents; (bso#12867). + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862). + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860). + manpage/index.html lists links not in alphabetical order; (bso#12854). + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831). + If a record is locked in a database, then recovery does not complete; (bso#12857). + debug_locks.sh script does not log any information; (bso#12856). + SIGSEGV in cm_connect_lsa_tcp dereferencing conn->lsa_tcp_pipe->transport after error; (bso#12852). + smbclient can't parse DOMAIN+username if a different winbind separator is used; (bso#12849). + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845). + Related requests with TreeConnect fail with NETWORK_NAME_DELETED; (bso#12844). + cli->server_os not filled correctly; (bso#12779). + REGRESSION: smbclient doesn't print the session setup anymore; (bso#12824). + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808). + CTDB NFS call-out failures do not cause event failures; (bso#12837). + net command fails due to incorrectly return code; (bso#12828). + Fix building Samba with GCC 7.1; (bso#12827).- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again; (bsc#1048339).- fix cephwrap_chdir(); (bsc#1048790). - Update to 4.6.6 + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation; (bsc#1048278).- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).- Fix inconsistent ctdb socket path; (bsc#1048352). - Fix non-admin cephx authentication; (bsc#1048387).- Update to 4.6.5; (bsc#1040157) + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at startup; (bso#12814). + vfs_expand_msdfs tries to open the remote address as a file path; (bso#12687). + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type); (bso#12798). + With clustering get update_num_read_oplocks failed and PANIC: num_share_modes == 1 assertion failure; (bso#11844). + contend_level2_oplocks_begin_default oplock optimisation doesn't carry over to leases; (bso#12766). + `ctdb nodestatus` incorrectly displays status for all nodes with wrong exit code; (bso#12802). + CTDB can spin hard on revoking readonly delegations if a node becomes disconnected; (bso#12697). + Printing a share mode entry with leases can crash in the ndr code; (bso#12793). + Fix flakey unit tests for eventd; (bso#12792). + CTDB daemon crashes if built with clang; (bso#12770). + smbcacls fails if no password is specified; (bso#12765). + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757). + samba-tool user syncpasswords doesn't trigger the script when a user gets removed; (bso#12767). + systemd: fix detection of libsystemd; (bso#12764). + Notify subsystem only maps first inotify mask to Windows notify filter; (bso#12760). + Allow passing trusted domain password as plain-text to PASSDB layer; (bso#12751). + Can't case-rename files with vfs_fruit; (bso#12749). + wrong sid->uid mapping for SIDs residing in sIDHistory; (bso#12702). + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562). + Ordering of notify responses broken; (bso#12756).- s3: libsmb: Fix error where short name length was read as 2 bytes, should be 1; (bso#11822); (bsc#1042419).- Revert explicit winbind %{version}-%{release} dependency. + The ABI has stabilized since (bsc#936909), so remove to fix cross-media dependencies; (bsc#1037899).- Fix CVE-2017-7494 remote code execution from a writable share; (bso#12780); (bsc#1038231).- Update to 4.6.3; (bsc#1036011) + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots from shares with GlusterFS backend; (bso#12743). + Fix for Solaris C compiler; (bso#12559). + s3: locking: Update oplock optimization for the leases era; (bso#12628). + Make the Solaris C compiler happy; (bso#12693). + s3: libgpo: Allow skipping GPO objects that don't have the expected LDAP attributes; (bso#12695). + Fix buffer overflow caused by wrong use of getgroups; (bso#12747). + lib: debug: Avoid negative array access; (bso#12746). + cleanupdb: Fix a memory read error; (bso#12748). + streams_xattr and kernel oplocks results in NT_STATUS_NETWORK_BUSY; (bso#7537). + winbindd: idmap_autorid allocates ids for unknown SIDs from other backends; (bso#11961). + vfs_fruit: Resource fork open request with flags=O_CREAT|O_RDONLY; (bso#12565). + manpages/vfs_fruit: Document global options; (bso#12615). + lib/pthreadpool: Fix a memory leak; (bso#12624). + Lookup-domain for well-known SIDs on a DC; (bso#12727). + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728). + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729). + credentials_krb5: use gss_acquire_cred for client-side GSSAPI use case; (bso#12611). + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690). + ctdb-readonly: Avoid a tight loop waiting for revoke to complete; (bso#12697). + ctdb_event monitor command crashes if event is not specified; (bso#12723). + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733). + smbd: Fix smb1 findfirst with DFS; (bso#12558). + smbd: Do an early exit on negprot failure; (bso#12610). + winbindd: Fix substitution for 'template homedir'; (bso#12699). + s4:kdc: Disable principal based autodetected referral detection; (bso#12554). + idmap_autorid: Allocate new domain range if the callers knows the sid is valid; (bso#12613). + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724). + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for trusted domain; (bso#12725). + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731). + winbindd: Fix password policy for pam authentication; (bso#12725). + s3:gse: Correctly handle external trusts with MIT; (bso#12554). + auth/credentials: Always set the realm if we set the principal from the ccache; (bso#12611). + replace: Include sysmacros.h; (bso#12686). + s3:vfs_expand_msdfs: Do not open the remote address as a file; (bso#12687). + s3:libsmb: Only print error message if kerberos use is forced; (bso#12704). + winbindd: Child process crashes when kerberos-authenticating a user with wrong password; (bso#12708). + vfs_fruit: Office document opens as read-only on macOS due to CNID semantics; (bso#12715). + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is fragmented; (bso#12737).- Generate and update vendor-files tarball from Git + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).- Generate source tarball directly from Git using OBS tar_scm + use version string derived from parent Git tag and commit hash - remove obsolete vendor-files/tools/package-data version ID + explicitly generate ctdb manpages, needed without "make dist"- Update to 4.6.2 + remove bso#12721 patches now upstream- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622). + x86-64 and aarch64- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).- Build and install the html man pages (bsc#1021907).- Fix CVE-2017-2619 regression with "follow symlinks = no"; (bso#12721).- Update to 4.6.1 + symlink race permits opening files outside share directory; CVE-2017-2619; (bso#12496); (bsc#1027147) + testparm checks for valid idmap parameters + add new krb client encryption types + support for printer driver upload from windows 10 + inherit owner = 'unix only' for improved quota support + improved CTDB event support + new primary group support for idmap_ad + idmap_hash deprecated + mvxattr added to recursively rename extended attributes- Remove chkconfig requirements for systemd systems- Don't call insserv if systemd is used- Fix check if we need to require insserv- async_req: make async_connect_send() "reentrant"; (bso#12105); (bsc#1024416).- Force usage of ncurses6-config thru NCURSES_CONFIG env var; (bsc#1023847).- add missing patch for libnss_wins segfault; (bsc#995730).- Fix vfs_ceph builds against recent Ceph versions; (bsc#1021933).- Document "winbind: ignore domains" parameter; (bsc#1019416).- Add base Samba dependency to samba-ceph package.- Update to 4.5.3 + Heap-based Buffer Overflow Remote Code Execution Vulnerability; CVE-2016-2123; (bso#12409); (bsc#1014437). + Don't send delegated credentials to all servers; CVE-2016-2125; (bso#12445); (bsc#1014441). + denial of service due to a client triggered crash in the winbindd parent process; CVE-2016-2126; (bso#12446); (bsc#1014442). - 4.5.1 and 4.5.2 updates + various streams vfs fixes + various printing fixes + ntlm_auth: do not map explicitly empty domain + various stability fixes in smbd + match file compression ReFS behavior- Add missing ldb module directory; (bnc#1012092).- s3/client: obey 'disable netbios' smb.conf param, don't connect via NBT port; (bsc#1009085); (bso#12418).- Include vfstest in samba-test; (bsc#1001203).- s3/winbindd: using default domain with user@domain.com format fails; (bsc#997833).- Fix segfault in libnss_wins; (bso#12277); (bso#12269); (bsc#995730).- Update to 4.5.0 + NTLM1 Authentication disabled by default + SMB2.1 leases enabled by default + Support for OFD locks + ctdb tool rewritten + Added shadow copy snapshot prefix parameter- Fix illegal memory access after memory has been deleted; (bso#11836); (bsc#975299).- Prevent core, make sure response->extra_data.data is always cleared out; (bsc#993692).- Don't package man pages for VFS modules that aren't built; (boo#993707).- Fix population of ctdb sysconfig after source merge; (bsc#981566).- Enable vfs_ceph builds for Factory (x86-64) + Package as samba-ceph to avoid Ceph dependency in base package.- Update to 4.4.5 + Prevent client-side SMB2 signing downgrade; CVE-2016-2119; (bso#11860); (bsc#986869).- Remove obsolete syslog.target; (bsc#983938).- Honor smb.conf socket options in winbind; (bsc#975131).- Don't use htons() with IP_PROTO_RAW; (bso#11705); (bsc#969522).- Update to 4.4.4 + SMB3 multichannel: Add implementation of missing channel sequence number verification; (bso#11809). + smbd:close: Only remove kernel share modes if they had been taken at open; (bso#11919). + notifyd: Prevent NULL deref segfault in notifyd_peer_destructor; (bso#11930). + s3:rpcclient: Make '--pw-nt-hash' option work; (bso#10796). + Fix case sensitivity issues over SMB2 or above; (bso#11438). + s3:smbd: Fix anonymous authentication if signing is mandatory. (bso#11910) + Fix NTLM Authentication issue with squid; (bso#11914). + pdb: Fix segfault in pdb_ldap for missing gecos; (bso#11530). + Fix memory leak in share mode locking; (bso#11934).- Update to 4.4.3 + Various post-badlock regressions; (bso#11841); (bso#11850); (bso#11858); (bso#11870); (bso#11872). + Only allow idmap_hash for default idmap config (bso#11786). + smbd: Avoid large reads beyond EOF; (bso#11878). + vfs_acl_common: Avoid setting POSIX ACLs if "ignore system acls" is set; (bso#11806). + libads: Record session expiry for spnego sasl binds; (bso#11852).- Fix NTLMSSP regressions caused by previous CVE fixes; (bso#11849); (bsc#975962); (bsc#979268), (bsc#977669).- Revert shared library packaging to comply with SLPP- Update to 4.4.2 + A man-in-the-middle can downgrade NTLMSSP authentication; CVE-2016-2110; (bso#11688); (bsc#973031). + Domain controller netlogon member computer can be spoofed; CVE-2016-2111; (bso#11749); (bsc#973032). + LDAP conenctions vulnerable to downgrade and MITM attack; CVE-2016-2112; (bso#11644); (bsc#973033). + TLS certificate validation missing; CVE-2016-2113; (bso#11752); (bsc#973034). + Named pipe IPC vulnerable to MITM attacks; CVE-2016-2115; (bso#11756); (bsc#973036). + "Badlock" DCERPC impersonation of authenticated account possible; CVE-2016-2118; (bso#11804); (bsc#971965). + DCERPC server and client vulnerable to DOS and MITM attacks; CVE-2015-5370; (bso#11344); (bsc#936862).- Fix samba.tests.messaging test and prevent potential tdb corruption by removing obsolete now invalid tdb_close call; (bsc#974629).- Obsolete libsmbclient from libsmbclient0 while not providing it; (bsc#972197).- Update to 4.4.0. + Read of uninitialized memory DNS TXT handling; (bso#11128); (bso#11686); CVE-2016-0771. + Getting and setting Windows ACLs on symlinks can change permissions on link target; (bso#11648); CVE-2015-7560. + Sockets with htons(IPPROTO_RAW); (bso#11705); CVE-2015-8543. + s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystem with no ACL support; (bso#10489). + docs: Add example for domain logins to smbspool man page; (bso#11643). + smbd: Show correct disk size for different quota and dfree block sizes; (bso#11681). + docs: Add smbspool_krb5_wrapper manpage; (bso#11690). + winbindd: Return trust parameters when listing trusts; (bso#11691). + ctdb: Do not provide a useless pkgconfig file for ctdb; (bso#11696). + Crypto.Cipher.ARC4 is not available on some platforms, fallback to M2Crypto.RC4.RC4 then; (bso#11699). + s3:utils/smbget: Set default blocksize; (bso#11700). + Streamline 'smbget' options with the rest of the Samba utils; (bso#11700). + s3:clispnego: Fix confusing warning in spnego_gen_krb5_wrap(); (bso#11702). + s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703). + loadparm: Fix memory leak issue; (bso#11708). + lib/tsocket: Work around sockets not supporting FIONREAD; (bso#11714). + s3:vfs:glusterfs: Fix build after quota changes; (bso#11715). + ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ..."; (bso#11719). + lib:socket: Fix CID 1350010: Integer OVERFLOW_BEFORE_WIDEN; (bso#11723). + smbd: Fix CID 1351215 Improper use of negative value; (bso#11724). + smbd: Fix CID 1351216 Dereference null return value; (bso#11725). + s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new file; (bso#11727). + docs: Add manpage for cifsdd; (bso#11730). + param: Fix str_list_v3 to accept ; again; (bso#11732). + lib/socket: Fix improper use of default interface speed; (bso#11734). + lib:socket: Fix CID 1350009: Fix illegal memory accesses (BUFFER_SIZE_WARNING); (bso#11735). + libcli: Fix debug message, print sid string for new_ace trustee; (bso#11738). + Fix installation path of Samba helper binaries; (bso#11739). + Fix memory leak in loadparm; (bso#11740). + tevent: version 0.9.28: Fix memory leak when old signal action restored; (bso#11742). + smbd: Ignore SVHDX create context; (bso#11753). + Fix net join; (bso#11755). + s3:libads: setup the msDS-SupportedEncryptionTypes attribute on ldap_add; (bso#11755). + passdb: Add linefeed to debug message; (bso#11763). + s3:utils/smbget: Fix option parsing; (bso#11767). + libnet: Make Kerberos domain join site-aware; (bso#11769). + Reset TCP Connections during IP failover; (bso#11770). + ldb: Version 1.1.26; (bso#11772). + s3:smbd: Add negprot remote arch detection for OSX; (bso#11773). + vfs_glusterfs: Fix use after free in AIO callback; (bso#11774). + mkdir can return ACCESS_DENIED incorrectly on create race; (bso#11780). + "trustdom_list_done: Got invalid trustdom response" message should be avoided; (bso#11782). + Mismatch between local and remote attribute ids lets replication fail with custom schema; (bso#11783). + Quota is not supported on Solaris 10; (bso#11788). + Talloc: Version 2.1.6; (bso#11789). + smbd: Enable multi-channel if 'server multi channel support = yes' in the config; (bso#11796). + build: Fix build when '--without-quota' specified; (bso#11798). + lib/socket/interfaces: Fix some uninitialied bytes; (bso#11802). + Access based share enum: handle permission set in configuration files; (bso#8093). + See also WHATSNEW.txt from the samba-doc package.- Update to 4.3.6. + Getting and setting Windows ACLs on symlinks can change permissions on link target; CVE-2015-7560; (bso#11648); (bsc#968222). + Fix Out-of-bounds read in internal DNS server; CVE-2016-0771; (bso#11128); (bso#11686); (bsc#968223).- Upgrade on-disk FSRVP server state to new version; (bsc#924519).- Only obsolete but do not provide gplv2/3 package names; (bsc#968973).- Relocate existing lock files to /var/lib/samba/lock; (bsc#968963).- Obsolete no longer existing samba-32bit package; (bsc#967625).- Update to 4.3.5. + s3:utils/smbget: Fix recursive download; (bso#6482). + s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystemi with no ACL support; (bso#10489). + s3:smbd/oplock: Obey kernel oplock setting when releasing oplocks; (bso#11400). + vfs_shadow_copy2: Fix case where snapshots are outside the share; (bso#11580). + smbclient: Query disk usage relative to current directory; (bso#11662). + winbindd: Handle expired sessions correctly; (bso#11670). + smbd: Show correct disk size for different quota and dfree block sizes; (bso#11681). + smbcacls: Fix uninitialized variable; (bso#11682). + s3:smbd: Ignore initial allocation size for directory creation; (bso#11684). + s3-client: Add a KRB5 wrapper for smbspool; (bso#11690). + s3-parm: Clean up defaults when removing global parameters; (bso#11693). + Use M2Crypto.RC4.RC4 on platforms without Crypto.Cipher.ARC4; (bso#11699). + s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703). + ctdb: Remove error messages after kernel security update; CVE-2015-8543; (bso#11705). + loadparm: Fix memory leak issue; (bso#11708). + lib/tsocket: Work around sockets not supporting FIONREAD; (bso#11714). + ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ..."; (bso#11719). + s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new file; (bso#11727). + param: Fix str_list_v3 to accept ";" again; (bso#11732).- Shift samba-client sysconfig data into samba and samba-winbind; (bsc#947361).- Simplify shared library packaging; (bsc#966956).- Enable clustering (CTDB) support; (bsc#966271).- s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703); (bsc#964023).- Add quotes around path of update-apparmor-samba-profile; (bnc#962177).- Remove autoconf build-time requirement.- Update to 4.3.4. + vfs_fruit: Enable POSIX directory rename semantics; (bso#11065). + Crash: Bad talloc magic value - access after free; (bso#11394). + Copying files with vfs_fruit fails when using vfs_streams_xattr without stream prefix and type suffix; (bso#11466). + samba-tool: Fix uncaught exception if no fSMORoleOwner attribute is given; (bso#11613). + Fix a typo in the smb.conf manpage, explanation of idmap config; (bso#11619). + Correctly initialize the list head when keeping a list of primary followed by DFS connections; (bso#11624). + Reduce the memory footprint of empty string options; (bso#11625). + lib/async_req: Do not install async_connect_send_test; (bso#11639). + Fix typos in man vfs_gpfs; (bso#11641). + Make "hide dot files" option work with "store dos attributes = yes"; (bso#11645). + Fix a corner case of the symlink verification; (bso#11647); (bnc#960249). + Do not disable "store dos attributes" on-the-fly; (bso#11649). + Update lastLogon and lastLogonTimestamp; (bso#11659).- Prevent access denied if the share path is "/"; (bso#11647); (bnc#960249).- Update to 4.3.3. + Malicious request can cause Samba LDAP server to hang, spinning using CPU; CVE-2015-3223; (bso#11325); (bnc#958581). + Remote read memory exploit in LDB; CVE-2015-5330; (bso#11599); (bnc#958586). + Insufficient symlink verification (file access outside the share); CVE-2015-5252; (bso#11395); (bnc#958582). + No man in the middle protection when forcing smb encryption on the client side; CVE-2015-5296; (bso#11536); (bnc#958584). + Currently the snapshot browsing is not secure thru windows previous version (shadow_copy2); CVE-2015-5299; (bso#11529); (bnc#958583). + Fix Microsoft MS15-096 to prevent machine accounts from being changed into user accounts; CVE-2015-8467; (bso#11552); (bnc#958585).- Update to 4.3.2. + vfs_gpfs: Re-enable share modes; (bso#11243). + dcerpc.idl: Accept invalid dcerpc_bind_nak pdus; (bso#11327). + s3-smbd: Fix old DOS client doing wildcard delete - gives an attribute type of zero; (bso#11452). + Add libreplace dependency to texpect, fixes a linking error on Solaris; (bso#11511). + s4: Fix linking of 'smbtorture' on Solaris; (bso#11512). + s4:lib/messaging: Use correct path for names.tdb; (bso#11562). + Fix segfault of 'net ads (join|leave) -S INVALID' with nss_wins; (bso#11563). + async_req: Fix non-blocking connect(); (bso#11564). + auth: gensec: Fix a memory leak; (bso#11565). + lib: util: Make non-critical message a warning; (bso#11566). + Fix winbindd crashes with samlogon for trusted domain user; (bso#11569); (bnc#949022). + smbd: Send SMB2 oplock breaks unencrypted; (bso#11570). + ctdb: Open the RO tracking db with perms 0600 instead of 0000; (bso#11577). + s3:smb2_server: Make the logic of SMB2_CANCEL DLIST_REMOVE() clearer; (bso#11581). + s3-smbd: Fix use after issue in smbd_smb2_request_dispatch(); (bso#11581). + manpage: Correct small typo error; (bso#11584). + s3: smbd: If EAs are turned off on a share don't allow an SMB2 create containing them; (bso#11589). + Backport some valgrind fixes from upstream master; (bso#11597). + auth: Consistent handling of well-known alias as primary gid; (bso#11608). + winbind: Fix crash on invalid idmap configs; (bso#11612). + s3: smbd: have_file_open_below() fails to enumerate open files below an open directory handle; (bso#11615). + Changing log level of two entries to DBG_NOTICE; (bso#9912).- Ensure samlogon fallback requests are rerouted after kerberos failure; (bnc#953382); (bnc#953972).- Ensure to link with --as-needed flag by removing SUSE_ASNEEDED=0. - Always use the default optimization even on pre-9.2 systems.- Remove redundant configure options while adding with-relro.- Relocate the lockdir to the /var/lib/samba/lock directory.- Cleanup and enhance the pidl sub package.- Require renamed python-ldb-devel and python-talloc-devel at build-time. - Requires python-ldb and python-talloc from the python subpackage.- Update to 4.3.1. + s3: smbd: Fix our access-based enumeration on "hide unreadable" to match Windows; (bso#10252). + nss_winbind: Fix hang on Solaris on big groups; (bso#10365). + smbd: Fix file name buflen and padding in notify repsonse; (bso#10634). + kerberos: Make sure we only use prompter type when available; winbind: Fix 100% loop; (bso#11038). + source3/lib/msghdr.c: Fix compiling error on Solaris; (bso#11053). + s3:ctdbd_conn: make sure we destroy tevent_fd before closing the socket; (bso#11316). + s3: smbd: Fix mkdir race condition; (bso#11486). + pam_winbind: Fix a segfault if initialization fails; (bso#11502). + s3: dfs: Fix a crash when the dfs targets are disabled; (bso#11509). + s4:lib/messaging: Use 'msg.lock' and 'msg.sock' for messaging related subdirs; (bso#11515). + s3: smbd: Fix opening/creating :stream files on the root share directory; (bso#11522). + lib/param: Fix hiding of FLAG_SYNONYM values; (bso#11526). + net: Fix a crash with 'net ads keytab create'; (bso#11528). + s3: smbd: Fix a crash in unix_convert(); (bso#11535). + s3: smbd: Fix NULL pointer bug introduced by previous 'raw' stream fix (bso#11522); (bso#11535). + vfs_fruit: Return value of ad_pack in vfs_fruit.c; (bso#11543). + vfs_commit: set the fd on open before calling SMB_VFS_FSTAT; (bso#11547). + s3:locking: Initialize lease pointer in share_mode_traverse_fn(); (bso#11549). + s3:smbstatus: Add stream name to share_entry_forall(); (bso#11550). + s3:lib: Validate domain name in lookup_wellknown_name(); (bso#11555). + s3: lsa: lookup_name() logic for unqualified (no DOMAIN component) names is incorrect; (bso#11555).- Fix 100% CPU in winbindd when logging in with "user must change password on next logon"; (bso#11038).- Relocate the tmpfiles.d directory to the client package; (bnc#947552).- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf instead; (bnc#942716).- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).- Package /var/lib/samba/msg with 0755 permissions; (bso#11515); (bnc#945502).- Require to install libfam0-gamin from samba-libs on post-12.1 and pre-13.15 systems; (bnc#945013).- Update to 4.3.0. + Samba "map to guest = Bad uid" doesn't work; (bso#9862). + revert LDAP extended rule 1.2.840.113556.1.4.1941 LDAP_MATCHING_RULE_IN_CHAIN changes; (bso#10493). + No objectClass found in replPropertyMetaData on ordinary objects (non-deleted); (bso#10973). + Stream names with colon don't work with fruit:encoding = native; (bso#11278). + NetApp joined to a Samba/ADDC cannot resolve SIDs; (bso#11291). + tevent_fd needs to be destroyed before closing the fd; (bso#11316). + "force group" with local group not working; (bso#11320). + strsep is not available on Solaris; (bso#11359). + smbtorture does not build when configured --with-system-mitkrb5; (bso#11411). + Build with GPFS support is broken; (bso#11421). + Build broken with --disable-python; (bso#11424). + net share allowedusers crashes; (bso#11426). + nmbd incorrectly matches netbios names as own name; (bso#11427). + Python bindings don't check integer types; (bso#11429). + Python bindings don't check array sizes; (bso#11430). + CTDB's eventscript error handling is broken; (bso#11431). + Fix crash in nested ctdb banning; (bso#11432). + Cannot build ctdbpmda; (bso#11434). + samba-tool uncaught exception error; (bso#11436). + Crash in notify_remove caused by change notify = no; (bso#11444). + Poor SMB3 encryption performance with AES-GCM; (bso#11451). + Poor SMB3 encryption performance with AES-GCM (part1); (bso#11451). + fix recursion problem in rep_strtoll in lib/replace/replace.c; (bso#11455). + --bundled-libraries=!ldb,!pyldb,!pyldb-util doesn't disable ldb build and install; (bso#11458). + xid2sid gives inconsistent results; (bso#11464). + ctdb: Fix the build on FreeBSD 10.1; (bso#11465). + Handling of 0 byte resource fork stream; (bso#11467). + AD samr GetGroupsForUser fails for users with "()" in their name; (bso#11488).- Configure with --bundled-libraries=NONE; (bso#11458).- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).- Remove libiniparser-devel build-time requirement.- Update to 4.2.3. + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780). + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924). + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991). + Logon via MS Remote Desktop hangs; (bso#11061). + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068). + tevent: Add a note to tevent_add_fd(); (bso#11141). + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170). + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217). + smbd: Fix a use-after-free; (bso#11218); (bnc#919309). + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces; (bso#11245). + s3:smb2: Add padding to last command in compound requests; (bso#11277). + Add IPv6 support to ADS client side LDAP connects; (bso#11281). + Add IPv6 support for determining FQDN during ADS join; (bso#11282). + s3: IPv6 enabled DNS connections for ADS client; (bso#11283). + Fix invalid write in ctdb_lock_context_destructor; (bso#11293). + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295). + vfs_fruit: Add option "veto_appledouble"; (bso#11305). + tstream: Make socketpair nonblocking; (bso#11312). + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313). + Group creation: Add msSFU30Name only when --nis-domain was given; (bso#11315). + tevent_fd needs to be destroyed before closing the fd; (bso#11316). + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared"; (bso#11319). + smbd/trans2: Add a useful diagnostic for files with bad encoding; (bso#11323). + Change sharesec output back to previous format; (bso#11324). + Robust mutex support broken in 1.3.5; (bso#11326). + Kerberos auth info3 should contain resource group ids available from pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info exists in PAC; (bso#11328); (bnc#912457). + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329). + tevent: Fix CID 1035381 Unchecked return value; (bso#11330). + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331). + s3: smbd: Use separate flag to track become_root()/unbecome_root() state; (bso#11339). + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342). + pidl: Make the compilation of PIDL producing the same results if the content hasn't change; (bso#11356). + winbindd: Disconnect child process if request is cancelled at main process; (bso#11358). + vfs_fruit: Check offset and length for AFP_AfpInfo read requests; (bso#11363). + docs: Overhaul the description of "smb encrypt" to include SMB3 encryption; (bso#11366). + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server(); (bso#11367). + ncacn_http: Fix GNUism; (bso#11371).- Disable rpath usage; (bnc#902421).- Make the winbind package depend on the matching libwbclient version and vice versa; (bnc#936909).- Backport changes to use resource group sids obtained from pac logon_info; (bso#11328); (bnc#912457).- Order winbind.service Before and Want nss-user-lookup target.- Remove fam-devel build-time dependency for post-6 RHEL systems.- Update to 4.2.2. + s3:smbXsrv: refactor duplicate code into smbXsrv_session_clear_and_logoff(); (bso#11182). + gencache: don't fail gencache_stabilize if there were records to delete; (bso#11260). + s3: libsmbclient: After getting attribute server, ensure main srv pointer is still valid; (bso#11186). + s4: rpc: Refactor dcesrv_alter() function into setup and send steps; (bso#11236). + s3: smbd: Incorrect file size returned in the response of "FILE_SUPERSEDE Create"; (bso#11240). + Mangled names do not work with acl_xattr; (bso#11249). + nmbd rewrites browse.dat when not required; (bso#11254). + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff; (bso#11213). + s3:smbd: Add missing tevent_req_nterror; (bso#11224). + vfs: kernel_flock and named streams; (bso#11243). + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244). + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses are used; (bso#11284). + ctdb: check for talloc_asprintf() failure; (bso#11201). + spoolss: purge the printer name cache on name change; (bso#11210); (bnc#901813). + CTDB statd-callout does not scale; (bso#11204). + vfs_fruit: also map characters below 0x20; (bso#11221). + ctdb: Coverity fix for CID 1291643; (bso#11201). + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225). + Fix terminate connection behavior for asynchronous endpoint with PUSH notification flavors; (bso#11226). + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007). + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201). + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the directory is deleted; (bso#11257). + s3:winbindd: make sure we remove pending io requests before closing client sockets; (bso#11141); (bnc#931854). + Fix panic triggered by smbd_smb2_request_notify_done() -> smbXsrv_session_find_channel() in smbd; (bso#11182). + 'sharesec' output no longer matches input format; (bso#11237). + waf: Fix systemd detection; (bso#11200). + CTDB: Fix portability issues; (bso#11202). + CTDB: Fix some IPv6-related issues; (bso#11203). + CTDB statd-callout does not scale; (bso#11204). + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you enter invalid values; (bso#11234). + libads: record service ticket endtime for sealed ldap connections; (bso#11267). + lib/util: Include DEBUG macro in internal header files before samba_util.h; (bso#11033).- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).- Remove the independently built libraries ldb, talloc, tdn, and tevent and the post-10.3 renamed libsmbclient from baselibs.conf.- Drop redundant doc attribute from man pages.- Update to 4.2.1. + s3:winbind:grent: Don't stop group enumeration when a group has no gid; (bso#8905). + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791). + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with servers that don't send the 2 unused fields; (bso#10016). + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476). + waf: Fix the build on openbsd; (bso#10476). + s3: client: "client use spnego principal = yes" code checks wrong name; (bso#10888). + spoolss: Retrieve published printer GUID if not in registry; (bso#11018). + s3: lib: libsmbclient: If reusing a server struct, check every cli->timout miliseconds if it's still valid before use; (bso#11079). + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125). + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135). + replace: Remove superfluous check for gcrypt header; (bso#11135). + Backport subunit changes; (bso#11137). + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with implementation; (bso#11140). + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143). + talloc: Version 2.1.2; (bso#11144). + Update libwbclient version to 0.12; (bso#11149). + brlock: Use 0 instead of empty initializer list; (bso#11153). + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164). + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169); (bnc#913304). + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev fails in the SMB1 case; (bso#11173). + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174). + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175). + s3: libsmbclient: Add missing talloc stackframe; (bso#11177). + s4-process_model: Do not close random fds while forking; (bso#11180). + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).- Prevent samba package updates from disabling samba kerberos printing.- Add sparse file support for samba; (fate#318424).- Purge printer name cache on spoolss SetPrinter change; (bso#11210); (bnc#901813).- Correctly retain errno from Btrfs snapshot ioctls; (bnc#923374).- Simplify libxslt build requirement and README.SUSE install. - Remove no longer required cleanup steps while populating the build root.- Remove deprecated base_rid example from idmap_rid manpage; (bso#11169); (bnc#913304).- Update to 4.2.0. + smbd: Stop using vfs_Chdir after SMB_VFS_DISCONNECT; (bso#1115). + pam_winbind: fix warn_pwd_expire implementation; (bso#9056). + nsswitch: Fix soname of linux nss_*.so.2 modules; (bso#9299). + Make 'profiles' work again; (bso#9629). + s3:smb2_server: protect against integer wrap with "smb2 max credits = 65535"; (bso#9702). + Make validate_ldb of String(Generalized-Time) accept millisecond format ".000Z"; (bso#9810). + Use -R linker flag on Solaris, not -rpath; (bso#10112). + vfs: Add glusterfs manpage; (bso#10240). + Make 'smbclient' use cached creds; (bso#10279). + pdb: Fix build issues with shared modules; (bso#10355). + s4-dns: Add support for BIND 9.10; (bso#10620). + idmap: Return the correct id type to *id_to_sid methods; (bso#10720). + printing/cups: Pack requested-attributes with IPP_TAG_KEYWORD; (bso#10808). + Don't build vfs_snapper on FreeBSD; (bso#10834). + nss_winbind: Add getgroupmembership for FreeBSD; (bso#10835). + idmap_rfc2307: Fix a crash after connection problem to DC; (bso#10837). + s3: smb2cli: query info return length check was reversed; (bso#10848). + s3: lib, s3: modules: Fix compilation on Solaris; (bso#10849). + lib: uid_wrapper: Fix setgroups and syscall detection on a system without native uid_wrapper library; (bso#10851). + winbind3: Fix pwent variable substitution; (bso#10852). + Improve samba-regedit; (bso#10859). + registry: Don't leave dangling transactions; (bso#10860). + Fix build of socket_wrapper on systems without SO_PROTOCOL; (bso#10861). + build: Do not install 'texpect' binary anymore; (bso#10862). + Fix testparm to show hidden share defaults; (bso#10864). + libcli/smb: Fix smb2cli_validate_negotiate_info with min=PROTOCOL_NT1 max=PROTOCOL_SMB2_02; (bso#10866). + Integrate CTDB into top-level Samba build; (bso#10892). + samba-tool group add: Add option '--nis-domain' and '--gid'; (bso#10895). + s3-nmbd: Fix netbios name truncation; (bso#10896). + spoolss: Fix handling of bad EnumJobs levels; (bso#10898). + Fix smbclient loops doing a directory listing against Mac OS X 10 server with a non-wildcard path; (bso#10904). + Fix print job enumeration; (bso#10905); (bnc#898031). + samba-tool: Create NIS enabled users and unixHomeDirectory attribute; (bso#10909). + Add support for SMB2 leases; (bso#10911). + btrfs: Don't leak opened directory handle; (bso#10918). + s3: nmbd: Ensure NetBIOS names are only 15 characters stored; (bso#10920). + s3:smbd: Fix file corruption using "write cache size != 0"; (bso#10921). + pdb_tdb: Fix a TALLOC/SAFE_FREE mixup; (bso#10932). + s3-keytab: fix keytab array NULL termination; (bso#10933). + s3:passdb: fix logic in pdb_set_pw_history(); (bso#10940). + Cleanup add_string_to_array and usage; (bso#10942). + dbwrap_ctdb: Pass on mutex flags to tdb_open; (bso#10942). + Fix RootDSE search with extended dn control; (bso#10949). + Fix 'samba-tool dns serverinfo ' for IPv6; (bso#10952). + libcli/smb: only force signing of smb2 session setups when binding a new session; (bso#10958). + s3-smbclient: Return success if we listed the shares; (bso#10960). + s3-smbstatus: Fix exit code of profile output; (bso#10961). + socket_wrapper: Add missing prototype check for eventfd; (bso#10965). + libcli: SMB2: Pure SMB2-only negprot fix to make us behave as a Windows client does; (bso#10966). + vfs_streams_xattr: Check stream type; (bso#10971). + s3: smbd: Fix *allocate* calls to follow POSIX error return convention; (bso#10982). + vfs_fruit: Add support for AAPL; (bso#10983). + Fix spoolss IDL response marshalling when returning error without clearing info; (bso#10984). + dsdb-samldb: Check for extended access rights before we allow changes to userAccountControl; (bso#10993); CVE-2014-8143; (boo#914279). + Fix IPv6 support in CTDB; (bso#10996). + ctdb-daemon: Use correct tdb flags when enabling robust mutex support; (bso#11000). + vfs_streams_xattr: Add missing call to SMB_VFS_NEXT_CONNECT; (bso#11005). + s3-util: Fix authentication with long hostnames; (bso#11008). + ctdb-build: Fix build without xsltproc; (bso#11014). + packaging: Include CTDB man pages in the tarball; (bso#11014). + pdb_get_trusteddom_pw() fails with non valid UTF16 random passwords; (bso#11016). + Make Sharepoint search show user documents; (bso#11022). + nss_wrapper: check for nss.h; (bso#11026). + Enable mutexes in gencache_notrans.tdb; (bso#11032). + tdb_wrap: Make mutexes easier to use; (bso#11032). + lib/util: Avoid collision which alread defined consumer DEBUG macro; (bso#11033). + winbind: Retry after SESSION_EXPIRED error in ping-dc; (bso#11034). + s3-libads: Fix a possible segfault in kerberos_fetch_pac(); (bso#11037). + vfs_fruit: Fix base_fsp name conversion; (bso#11039). + vfs_fruit: mmap under FreeBSD needs PROT_READ; (bso#11040). + Fix authentication using Kerberos (not AD); (bso#11044). + net: Fix sam addgroupmem; (bso#11051). + vfs_snapper: Correctly handles multi-byte DBus strings; (bso#11055); (bnc#913238). + cli_connect_nb_send: Don't segfault on host == NULL; (bso#11058). + utils: Fix 'net time' segfault; (bso#11058). + libsmb: Provide authinfo domain for encrypted session referrals; (bso#11059). + s3-pam_smbpass: Fix memory leak in pam_sm_authenticate(); (bso#11066). + vfs_glusterfs: Add comments to the pipe(2) code; (bso#11069). + vfs/glusterfs: Change xattr key to match gluster key; (bso#11069). + vfs_glusterfs: Implement AIO support; (bso#11069). + s3-vfs: Fix developer build of vfs_ceph module; (bso#11070). + s3: netlogon: Ensure we don't call talloc_free on an uninitialized pointer; (bso#11077); CVE-2015-0240; (bnc#917376). + vfs: Add a brief vfs_ceph manpage; (bso#11088). + s3: smbclient: Allinfo leaves the file handle open; (bso#11094). + Fix Win8.1 Credentials Manager issue after KB2992611 on Samba domain; (bso#11097). + debug: Set close-on-exec for the main log file FD; (bso#11100). + s3: smbd: leases - losen paranoia check. Stat opens can grant leases; (bso#11102). + s3: smbd: SMB2 close. If a file has delete on close, store the return info before deleting; (bso#11104). + doc:man:vfs_glusterfs: improve the configuration section; (bso#11117). + snprintf: Try to support %j; (bso#11119). + ctdb-io: Do not use sys_write to write to client sockets; (bso#11124). + doc-xml: Add 'sharesec' reference to 'access based share enum'; (bso#11127).- Update to 4.2.0rc5. + Ensure we don't call talloc_free on an uninitialized pointer; CVE-2015-0240; (bso#11077); (bnc#917376).- Fix usage of freed memory on server exit; (bso#11218); (bnc#919309).- Fix tdb_store_flag_to_ntdb() gcc5 build failure.- Fix vfs_snapper DBus string handling; (bso#11055); (bnc#913238).- Update to 4.1.16. + dsdb-samldb: Check for extended access rights before we allow changes to userAccountControl; (bso#10993); CVE-2014-8143; (boo#914279).- Adjust baselibs.conf due to libpdb0 package rename to libsamba-passdb0.- Fix libsmbclient DFS referral handling. + Reuse connections derived from DFS referrals; (bso#10123); (fate#316512). + Set domain/workgroup based on authentication callback value; (bso#11059).- Update to 4.2.0rc4. - Add libsamba-debug, libsocket-blocking, libsamba-cluster-support, and libhttp to the libs package; (boo#913547). - Rename libpdb packages to libsamba-passdb. - Drop libsmbsharemodes packages.- Enable avahi support on post-12.2 systems.- Update to 4.1.15. + pam_winbind: Fix warn_pwd_expire implementation; (bso#9056). + nsswitch: Fix soname of linux nss_*.so.2 modules; (bso#9299). + Fix profiles tool; (bso#9629). + s3-lib: Do not require a password with --use-ccache; (bso#10279). + s4:dsdb/rootdse: Expand extended dn values with the AS_SYSTEM control; (bso#10949). + s4-rpc: dnsserver: Fix enumeration of IPv4 and IPv6 addresses; (bso#10952). + s3:smb2_server: Allow reauthentication without signing; (bso#10958). + s3-smbclient: Return success if we listed the shares; (bso#10960). + s3-smbstatus: Fix exit code of profile output; (bso#10961). + libcli: SMB2: Pure SMB2-only negprot fix to make us behave as a Windows client does; (bso#10966). + s3: smbd/modules: Fix *allocate* calls to follow POSIX error return convention; (bso#10982). + Fix 'domain join' by adding 'drsuapi.DsBindInfoFallBack' attribute 'supported_extensions'; (bso#11006). + idl:drsuapi: Manage all possible lengths of drsuapi_DsBindInfo; (bso#11006). + winbind: Retry LogonControl RPC in ping-dc after session expiration; (bso#11034).- yast2-samba-client should be able to specify osName and osVer on AD domain join; (bnc#873922).- Lookup FSRVP share snums at runtime rather than storing them persistently; (bnc#908627).- Specify soft dependency for network-online.target in Winbind systemd service file; (bnc#889175).- Fix spoolss error response marshalling; (bso#10984).- Update to 4.1.14. + pidl/wscript: Remove --with-perl-* options; revert buildtools/wafadmin/ Tools/perl.py back to upstream state; (bso#10472). + s4-dns: Add support for BIND 9.10; (bso#10620). + nmbd fails to accept "--piddir" option; (bso#10711). + nss_winbind: Add getgroupmembership for FreeBSD; (bso#10835). + S3: source3/smbd/process.c::srv_send_smb() returns true on the error path; (bso#10880). + vfs_glusterfs: Remove "integer fd" code and store the glfs pointers; (bso#10889). + s3-nmbd: Fix netbios name truncation; (bso#10896). + spoolss: Fix handling of bad EnumJobs levels; (bso#10898). + s3: libsmbclient-smb2. MacOSX 10 SMB2 server doesn't set STATUS_NO_MORE_FILES when handed a non-wildcard path; (bso#10904). + spoolss: Fix jobid in level 3 EnumJobs response; (bso#10905). + s3: nmbd: Ensure NetBIOS names are only 15 characters stored; (bso#10920). + s3:smbd: Fix file corruption using "write cache size != 0"; (bso#10921). + pdb_tdb: Fix a TALLOC/SAFE_FREE mixup; (bso#10932). + s3-keytab: Fix keytab array NULL termination; (bso#10933). + Cleanup add_string_to_array and usage; (bso#10942).- Remove and cleanup shares and registry state associated with externally deleted snaphots exposed as shadow copies; (bnc#876312).- Use the upstream tar ball, as signature verification is now able to handle compressed archives.- Fix leak when closing file descriptor returned from dirfd; (bso#10918).- Fix spoolss EnumJobs and GetJob responses; (bso#10905); (bnc#898031). + Fix handling of bad EnumJobs levels; (bso#10898).- Remove dependency on gpg-offline as signature checking is implemented in the source validator.- Update to 4.1.13. + s3-libnet: Add libnet_join_get_machine_spns(); (bso#9984). + s3-libnet: Make sure we do not overwrite precreated SPNs; (bso#9984). + s3-libads: Add all machine account principals to the keytab; (bso#9985). + s3: winbindd: Old NT Domain code sets struct winbind_domain->alt_name to be NULL. Ensure this is safe with modern AD-DCs; (bso#10717). + Fix unstrcpy; (bso#10735). + pthreadpool: Slightly serialize jobs; (bso#10779). + s3: smbd: streams - Ensure share mode validation ignores internal opens (op_mid == 0); (bso#10797). + s3: smbd:open_file: Open logic fix; Use a more natural check; (bso#10809). + vfs_media_harmony: Fix a crash bug; (bso#10813). + docs: Mention incompatibility between kernel oplocks and streams_xattr; (bso#10814). + nmbd: Send waiting status to systemd; (bso#10816). + libcli: Fix a segfault calling smbXcli_req_set_pending() on NULL; (bso#10817). + nsswitch: Skip groups we were not able to map; (bso#10824). + s3-winbindd: Use correct realm for trusted domains in idmap child; (bso#10826). + s3: nmbd: Ensure the main nmbd process doesn't create zombies; (bso#10830). + s3: lib: Signal handling - ensure smbrun and change password code save and restore existing SIGCHLD handlers; (bso#10831). + idmap_rfc2307: Fix a crash after connection problem to DC; (bso#10837). + s3-winbindd: Do not use domain SID from LookupSids for Sids2UnixIDs call; (bso#10838). + s3: smb2cli: Query info return length check was reversed; (bso#10848). + registry: Don't leave dangling transactions; (bso#10860).- Update to 4.2.0rc2./sbin/ldconfig/sbin/ldconfigsheep83 15569334674.9.5+git.149.9593f64a5c3-lp151.1.34.9.5+git.149.9593f64a5c3-lp151.1.3libsamba-errors.so.1/usr/lib64/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Leap:15.1/standard/f8490f6d0334c3a4fa732b71fd01beb3-sambacpioxz5x86_64-suse-linuxELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=750076bca49db88c9b080de78633f4b1df6bac96, strippedPPRRRRR"|P3/ utf-8936990cd23eee15353cb5a56ea2041fc37e788cbc76d669344437707d50d9df3?7zXZ !t/!] crv9u>uL $LG~z B -}2~ ^Ȧ*D}Tr8@d c2Ȼ2ȺbIQI̵$9zN 8Q]%V;I0)YIV OS٘1`z5LP4Pl.=d;4hǴQgL π?S#ic@\Q ?qs^yzTQ /'-ymf&UWH aRYo3_]Pv(baͥ_9TTȇi-SҾ)@j0] /Ot.mݓ5!8,k\z8,* fD/9I@^Lh(o<#;X [ jYH-!aц(}2_}Dy,`e 2wDD3S}{˯ԓ]5Xqkԉt |? A׋8^5/? g n@E @^5Vz_z_EpZZ?l4ۋ]2\D,7[}ZElIJ﹐.i덶H'X'?~G$\5NCk;j*[X>39^#-RM9Y*೎' U_њU:.4B}07e>B7¨3[tgcXb5^n᎗ y:: dZn5QSV OPN: :L1{jRơau_tmPyZ]l9V$ȟWtdH. ]LtݲU*jaXHrlVsh[aIѼe qxI wwpm @ g(qw\rQUnl]Uب &Rm" Ij|D]}r.- cKI˷' J{ەi BD2%>ij.Vo͝^ V|PHEeC&=NXrCO/\{.{'3VtT<fw_6g $"H$Tndܠ8 W݀AN;jع^hAxF( Oq6eI9FA0 8:$ !+t\[9䳐P%u&um ;p*¡rV~g՟e2cɭy\ *OD9 SK!E:p YI͢wI6sK8P B T*_YVuլMÐ+KrR|f;ρ.5RzBe/ۓ%pۡd";}Wz 4I%N'zuL4-Zn* #óɌB&!&qJ]y\yãqԎB&Ib`<L^ەBwo B#9moz%$F"dkagk/.Ykެa}Jg +BF.A9|,b(qY{kxCTi8!׌7gS^=$] W7,2Yw!-^!Ά3%s~0 ͠Jd2L "!I>hFXW#+\fʟdN9u;%'ʲYK KuY0kZαs?EllhFn's:,Xe&hGat{\1Mͣ_WظO(Z#[O>&3ۅ=c!Hcsqg>;S1JC3g |4##e'dZpIb+4ǁ=rlYV@/Y4:5ؖ$$TY]h7?$FwGKYmpV),^:V`sY>vzp1$]Ft|MgSi5CW+V>)L}s+eΖU /h|0?+ͼbOk=FkP  y7$m'_n\>6'*9a7'K;njƑȯ4~[pa!FHVFmtUM@@kMSzE27ɝyQQ s1:?^ݠ_8_i@G޵*#7=\Vye歆fIli ǣαO6 5#L'uY3cA0Mʌ/Z9ܔqsJo8J!ek㗫J+jzԔ9Zvwom MB/f4W&v0^H%#"Rѿ8z[:gfHp۷-,"RJlFerY:~5U@yo;jVV-wG2K?QV*Un >J3h{v'p2JNgS9Zɞq%*і8J*'c 84zڕ$'%'AO7HDNt5DSdikHCQ+b 94ΰl\dƢ є[,9`K"Iɹ@d]ȗ(;UWLh%Bgr#JNzno?^)BEd8rIQ4z8"BJ$q$D-|I~1T*"߱_O6wAbzx O0FQh+;HgX9#sUG!P\gH5d "+3N;Z|6zu8}:h#ޜy Kg/YUkO[pCU*$~? ᥱvP.[W=Uc! B\g䶋Pe{(>oG0F|{2m\-cH2x_LR$ʞM)c#QhO^,M5웫R!4 Vex`\-X -U yr.lvs-z]~x}v $Z'j,XȒh+5ӛ9ʫ jj]3\`!1{e;lO-L4`d:/ ?R[! E╜[ؽr3uԁ U_hNBNv #7;^y:J`aXrA@l,"3ַ"R(`B&PR3pp/Bx#uYR˖c-P/_g؍բ WUn?4߾SAn }nq;S$=UK;.[~cx e]paFtF8U. 0H{eҽ (N8oq\ĭ^eB^~ZR{:7ZnD|QjY0>@-,.U0Ƽ;Y*4x`cBTdEnK!_^f2;wD00f]d 0ێ*Qx=Ȉ~~Ki 1EFr6>Fp#t`Odʖq"D|veUWT2@?#~#]tkYoڶ2l#{Q^%'zޘ6j;-=].·#WMI{wIVͩd$2?=+#/*k1KOFMY,H|]Poܜ\+e@vt![H]Q4k7?G~`LutȢ˄n[6f$/liE&V!S5&@ J\5'&zH.n/_ZcxR)R!8&2tRq`0KDk 1̇Uk,}V:F5k hր Rܓ?CCUǬ+3KUB3JT)_n$Br ;LmC2 -"i EfpPe;S\|RPf5 s1F ǁߺym1k>Х@#mNH%2gTg2 4u8H!-EQF2[ߓ쀼^Yx]>n>+Bv"#&u VrE)JI.\\y2=ʐ+M[Ic "t-;J,8wxXŞR|44{؏-]$Lߏҷ4@ u!=U[Lw.}x^~3=E5ڷ0-9^؞-~>q š>G/)GlC]S 7h P ٷSNE9o 7s̃9.X}UCrw%P,&sAjtvH'#IPl ~Yix#:Ȯ-L.b)NM9׷]=(}0\Z"+o_1ޭ;rl0_I= 46ԇOӚ{lk٘|L?;j?y$XR2[Pc䗢( t3o,̦Lť dELC a|[Th!eCFgp3ufh P"ݡ `oDm4  }bOKz?4G߫Ѵ1q酎&)c^3V#9t\OXnV[np=>:']MBđ;C(V;=v+Zpnd:@Fpn&j#y0UT16w )s&e`R&o)'K.nge\V>d6\Zj*/5?Lڲa`$2gDhvfїY.LN`pGs]F*#YQ-wT.꫍(5mw]^[AW&̗ed ?3-sY6q%ժ,m7f3T-yTvHF<`Dȿnh8*g7xO=9#UlN,n!1 pI'020giV*a'{OH$Y9 %(2q ENٞ]|Ae]֌Uz cHC*`)91h 0MB:V;Ԕ,^[8@#F32X`MhuRεU%],\& W5m~<>炡/e iӣ?$'yrn5S:S [.U:^®c1ݐݨqKJGKa T(9C:We~(I"C"気 9CM=6jV{J:DQ+q_6,yE;ja-%!=?5F>NҼei _X_(ƚ~!?,( Gͬ)Mb%u.@eR4kX8!-q52in[K b/߁rT~:8l/7W<*mHKODhy/t~:;.V m "QSXpKCvh3zB_cY%xt5P{4`}FtR12[2!&O?Tn௞}@}GI[i3Ny2to#s`Fsru\֏ks%ef\J9>$*PL] '+CT*8ї{ %S9Te'&ƿ}E'qwQQ ^at+"2ER҉w_]W\x#¾; f66rt>/!OskAaؤr'. K × o|ZZ8L!]L0w}1z# \0 rL$*g:c}ixB? k5Ȏ{bQʠ?ZZܗAa}t2W ͭ\ne Ȫ~vr*Ϧ4Mv\/~;.B+2/h5^c4X背hL>M4nhXˬ}>z,OT2&͍ Ti} ROL[!dRrkWQbii!':T [wuWwғGHjxմIq"&%  2F}ֵڠ^JLq q+9XײQK  ,ym%i\hclM TaVt_ r\TM-x-=~d:C(5F82Jb O's3{6k/ƶ1qFoRF_ ?aZYLO {,GeCI'ѱA8, +CGNE>PeH+]"+I:2CG8S]T{֍ÿ J@u$~%!te9i56ӊd0~B; kOX_Bœ;{KAa/=&)7QݓR4<]2+[r5R B`\柦fugF>nRt^չ!f9ϣf0M99Cv~ :݃d3zS5sw"@@boHTHLRGajZcc+s\410Y)҆̄̒0CCfπhy.b" -*ܾo]%rII8tJcY@Ȑ zǮ*3?N[.{x䑀p3DC8I){ƞǑ^?If5ƈy #_,3/y\8I֖袀Vd=#mH݉cFiKl569c;r -P ZзOZ@})ˉ&MZz P%"`0":h5Ò9o%2et?g)չ__D[QH$hyUjtNd8s usӓs!9bDnڤB2+~gQ8C^@yڋnp57n3a;f`Bq X:GV <NP{RXOO=MP'7>?cY2qпY,)llR>>~?2=OXi1Ne_T|#q1ЮeN{GDs;e\E|r+_iɑ*F EZHՈ`ۏP z\YMմ-["#Ov_01cxu#^I/XhKSzf&ǝQMNOo?V.a5u0eeis37נw1+.g"떅vrYK_~wqgNTźm:JHBA"RldC캯F!< TdE@2`Ib pّsAEM]6PbY eij2xJPyF2uUP?:K'}53Ap^ ."5[ŇOؒh8@anOF7 vd[hCqƅN%$EDk,X8 &xJ-vaDL920jTaQv^o,MM[yvM  a6A51!p kZ̠ՠR{ܟUjL L('xNN :s[,R}xuɇ`I/ѫ0v~z V՞C[# Be/p8^G&Z,Pp%y>uYE6<䑚|i6p2:Q lScFΛ=9"nQxL`ǂdj5Jup#Cq!83v)*ct!ՂhtҙQ"TȜ*xKD%AcS1:^ȀsGG!s|jߞn$$I]NsVn+ܬ"B%DT Pd!$9e6RFuߔG[?N=PKZ7N&@,MWëO$ : @Irk9Y,?_K9A4;8(WbCy OhE5XHouy-Z=C}7Iy[!N8!-JMOr' uF7biW߱[ o-WI7{YJj喰yE|I.}I9t!Yx:+JC* ʒ!d6$L+5QNJR1V[e:2;e/[IP Zt=2'wq0&rm&Y\,;j%}eYqErDFUwXҊ6}&&!c<WgQ@ R)\ĻrcޛC7&6^-O Ta"u8/ p?7Pͷ0 8{S;q]s&0mrOU6U+ y:*0.4KJw%#?YIŬfa*j.уǣ5ɱ_<.sm4(7,ޑ#M2ft)`}UZ౺ <9-2Y~y37OFfc6 VcZ;)%pJN DB Mݳ]Ƽ}z$O7=dNV8hٗ^'WhS !41ֈ;DlÒDP\f ^g1@qw~-ӆnOw-ԨҪloqHp96F<<4:VAWg(^~|` =B@qtى68J~s|3S\o_<[i(v+#ЭY:)ȺQ|}E >E&=-H5/." &ZߜASp_=ۘ~oe[Ҹ >"FVkpLj.44>n,7`>ӰE߬r`B|mg!'(Mkp 4C] ~x*dA[3rdڣAwQD-Q9h1=q͋ZY(s큨R"Qg o2s7_ s?N"X4d7˂]#U9M/#ygˢ@_S[ChC[Ju!eYvNə`K?CelI QVȒdAK`OsJU!:? = B 쁞sVR49S}R#(*pU3[sD]YǨɁ UH,铢IEA'IU\wEµ 0;uKao&t@p4j Z-m(RjsgZGϐ-waab,㡢yS+X.׬G`@K/ddQqwbqJ.> ,51m2nB{edّszz 1߈a7+c+Jo8^d-#giCBϓ*/YC&3.3zc*pl@Os!f x.d =bK:_= "{1ŤE{.obKZ n\O'3 HxB ]帚{(Ps3s\1O&.P8Dn#gqZlj˂%C o{ٷ悳жd2L=^XTLl <9R3/AK*^(֨8pO4R{LSi(ۻn{n G$`,]Ca{<6#G* 7MV 3Qˤ4x4pQa,Ag Wu8!=QbW.g>{/̀ӴO7l왾/4FE>#5 p~Mq]jU+RҮܤLOw"-ڴȲd+X3S?| ͵09tq!%.˂u$4,煲M5FG q|PRR-2$'یd֪&'J7˕:a|=F@ߤPw"J vip+igl8_o .7Δ<ֽ6"7?`OSic` &, ;s% YH1fcЫ, nۥtH,V@t{3 50:DF 60 1IFzMΒ4h5rAi~jSHWnۊ$D'70jžݐuAgxziG}`9TlLF*7˪F1\q#4('A3%Ʋ{%oNă[009,bLw8wC 8e;B9:R$aj'N#,6ʥ!%3jXx[%mIvvacV"( ]Ū57Ώ e~qXe +r ('W&k^U=Θc\?S$=۲wfPn/?]e5W&zՖH"dJIdƎG哛5!I9:kV=,> y DbK N{]Y.f;wKQ!' rmNj9?Hjq k eQ#M1Hk _e} #Z5=n>뼠,.T?*1{` nBdOpJ0tr> 4]v䛊䅠J=w9oǬ(q>v7RwdMf=8Vc N-v=?<3lF3@ʟi SXj&[${Sٴ } ˲u,LԦ*Af+= f,עePAlY,/g3#P8|*k݋eFF DW1,>鱏6% ٗ}&teIsD =鼠`'">Hڵ62wt$⥢/su=iK.t]tX#%1jzN?,I6[ c )*cEZ10 m-֨ٶ"񯦓.S2eovƍ֚rF(cXjE)X[)^*W HˉB͎w,s, [ܖ-d9nf N#-"(_CBLs0G-.{<h \Mr0?Ư2ҸR둵",{Y0:&J5N4NT0ޔDb` 4EuMG Mx )R>Vc,jrˁe' $ZgD>p7#Pĭ%q fu{VѬƭzS,6! !*hpZ?,4>mQMcEwitK8! Arщzs77}». bR$5M\])] $\!w#aF\zk*2 |kjT>긣8_{qlPDH|]v*Iz] ՛ ]1ְ2솑t??t- <>۽|QmzeV)Z,UN/tƿ_\zXCtyd>Ĝ 0C3*F;^ wyҎLp)]lMU<_u֥K0PU܏[k[iJ#Σr~l͏T3Q[kAd0S[F:#S/hШ hY/rujɭn_g/I(U]Թgp?jLfb;/tCE> ߲)YOєߺAx ߬d ql)j&l;J#\s_\wxtfTj*1vJ Ojvx+[E- ,v3harf0hshuZ:A58. Z?C%J+/!m74ڎzv>I/J7&J}/RR3{VPБrVY>_ٟﭺ' 32>0*<\㋰e 䤜-AO`%y25WHPޤ$ֶd! g÷a2vKC~s63Φ4wSOydbc7LN&-~kqĵX3@]ɽΪ"tFy]x"!7{O|A0RMXE WS.Rn{~HJ^aZ&F!W|'zG(|V^ΔwXĠ2+X!{i&[;[ 5[F5mj˫B5z_3r4ÜVʠ"W<=C!v,hbN8Unw˲* )nd /))/\n%XsUG Oe+O.=tu6b6@J]dL2Og AۡBʜd` uz[2iS2C9/]4ϰЗ>ҪsqCsF.CrNӍDǜ2a.n,X:~Ԟpv -FHq5 QGDN?%bNۼw6-QK V"RĆD 4r#oyޙ#]sƏ\ޠi>6dp)ڣZcK_Up`*IJJ#y֑[%J;{wRUlj;]F2&x"2,>^ٮJUZ)_[7 MfLv/m0r9UedG€b[ڧLCbwmL6ccW[#B&1322a+)e͚5eI+ j"}~¶lG.J:W-p~m0k,0S";{so~F;mIGnWzԔ4:{8\&6v5>c`Wژ|N1v@|ꚓ u&8cȈH\)CߏQE L` ˵F_1Y f߿{&5S5j_" ) ?Åj O3_M!L?Gt/N(+!y!Vru$8x\'E}tOo+88\?Ɂ-wW q*_Pc@/ʶQ6''䜜5׌@E~[1]5i{NO< XggH}LNMy'Fr|`Igq!oC#H.@Z`+ {hjU塹*2*?U Bc8&Dm'_b]h>8V/0Dӄuy;Q{>!?"TS^k\7]b,rS#X8iKOȻi7πU̼~]4+@*Krj}AFehc YS|lpbZ(tpF{ 6xCE ?Ds\[(>s(>``4Nz­hFL=-ysB.jQ= g,wVJls0.u׾J`\!Oƹ6'ȥ= Qnzwp{DVʳv,k Os at/Fl42P.Lusʗi\tZ`rAj/ڌG~}c])0k [.3-ai;$I=5J쓜3L+)@bUkCb~YHf x_1&E(4YH{)I8Lo@RiX`n] =?(.2ç]4Z\mX Dt$8苺L3lmv-%9]L;'oS9#1deCI)< c7jKŶo5xMtrb0*lSqbZcEbc"@Wu_Wfsu*=(2li)C٣m;ϏxJ4~9<//g/3_KuFwvG9N,3S>Uj},K-Q=/Z0^@8 kE=~Kω#[-ԡ5a˭2<@&e0bE'Jd&2&yl] 2타_?u~~ќusET$4`],&TC ;uwO3* P$hn do sShBJJ,%fp{J>k=&KMa%rdxXzy& O񶥚|sG)b:,IbhsVs}j}\t!ₔDg S c/clS, 6mHՏ41-4AG(z#%vLe)_7} QwE17=DY4[x}Rʧ i.@;T@"frtnNT~-22X{!|Di i2Gw0?J̶)a˸ )5<;"I,uG[>͂6dE~K4ITZV[z [(H7tΊ5̘mP]k ӄ7u447k[=d"6Z Ѐ}P4@|kz^:`l+zaC޳HY5.yCA393پ:XC?Y~8ŞڕLq%$C  I) yɭv$O?+p2Wo9mԶ "/υ8oc{ǟs"~~ۣGɰ/rL͕ZJ;`F+y):@g&4e},ZnVWce6*F~0i\N }mN~p8KꨖP3S[{ e٢6^3l8Jk MeRbe5}ruO`H&G4]@@ 1ʼn5GYQt|) {O2 C/-l⦜PwMT|gEaʀE|EwA:ݚR ݗ6H cC M#i*o<NܚH&7Hmބb`#&&Pr̛?E|zaCf]*NI)te>Eo%]yK40w!UhfDxȲgfV{"Ta`z0 V ~ &b(P2hV}MblXTK,ATxSZ[o@qv&Rqn GW_Ӏjp2Gj#z 0f.GX94swbu~R?f&OdXiP"J, ܳ9/Ea#1vʽcMBM-w3ϊY*Umw#=U}.$HiJ#߼ MbC7ps"KԨ$Ⴋ@v5|C%cqA[bȡ> 2G8Gw8jYͶ!ƻ9`2yR 8HPuٚvW\7: *^-?/O'l z}o,B'}* \PMU3_Nj9)qJǫ|)~%Z)nQ8=yEe!w/ϒY7cpS %9gOB_IJϥ|s" M\2oS!֧> 1c%ގ A-6邂~Ë8DZ$SOHnkԿCcִd63UQe^4 U\aȔ_7;L`I@q,L%if1u NtT QWhEַXv(2[;C:X @ x q]?;#Q 6x.jئb*kǥMz.w HkNe j$^N5ccm)?Z~f(isb+x~V_LT#?IxwEJ*>X B쭶|U[1RRGWjݫRF+ Oe zQmTVC=A+O)[Xر]ٖDZ͑r6 MK*2(H vk]RۂZ_C|D>`IJTUȊ~:*E p ]vxGz1ͣR~Cҩ? .TO„X™,rb ;o̝UJr.*Ӆ4PrbFPl28So}͝)']' aCrV筋]vyL,{(o3>6Yc be+\ <{o4]9aW tZKξ jB44?[;s!JYsDG!<^{ % !W"LmD;wj[Q6:=;'/5X%2Q:%*+lyÅN5- -='}`x#ڥ Z.C#e~79FмLn)6tJ.#~K!'!*f,!@_|NmGM\xg5}$X+d 44;/Q'J= # Iʾ8Z3Y5qDwET&&w˶,+,Et' C-7'GPv51wg2GPHqA- K| j_jbA}GH:ıBug%\$h_@u>,7|t7mdhe]IB A1cD|()@l*4bv I&03@㾝X&54G!rK`w{ޮ QynQm˸_jjR ꊔz@)@Ն*I Ǭ#Ei\=QJU‘)3g:̟'Ɣj( 3nVO;Qxn⎹Jϵ.Y#́rA=߉'swuj}^nTG]ZlW"y? XviheDsb.CY5D=y*8Iqݒ椄CErj?®Cy{\=;?eNu޴>tʆy@٫^O1^' OuJ,JYzd4ų|ed< AJ0T*lP2A K?@:C$S|Zw>A槥ڞP{aE.iXF<堫^.|$n0 Mg #?=oR0,;# 9rE ¸Z}q5ZC}M B AMAh<ʭoU`D ͍ =]bN.q@tekŨe)Ӆ1r{~:*ɍb+{afYtV ?OMD֣U/ oY6`V|dڮɝϊQ8d$;Dv' 34Qȝfb[Hgm|{?-iS&Xi%Ѱ *S߉M٘tww%;c>#̂i^گ_Z>Z2SsuEZmÀ{8}Gˑ[[am2?̅HOB%:_Jw~YYwaC6*zN")("wGSInaJڊfֻ+dq΅v""u .]ѯvؠ& h~h/b4;Y6P=-_nmPg!P`!3 /4ZuS.P㢸ˋLI|>m#6 ϡi֓P̪HKv̕^?|ʣ::;HV"OY:FU3k_zrqI 7(_9΀Hal{-A ({=#o9/qbGߵBCE'"a}z)@e<Ԟf!O^\TO (P^*&-`dz:HԙEsqt/ T[D 9 P?~BUV ]erE ʿLS?/m7c]bg#{Z;wg1JCK NmKIE1 8j\IA3(TT ++ 1%&u#͐Z631V?9Л;Ԏ>&<B>vs ~MqQ5`󭁢J?FVI$&077cs: Q#+3"/\ű2QvEl{I+63] Qː"#(q#hB#pu$#0-A&p/. ORL_ S;:/jn_"qnŠ;*z558:928c~8Gę,3,n?+q~T(fiHbCls_ϝw]'01j xL>t!7Q['I*?Kw_BȋY9>9I]vP R@pxJP wg!8 ;S6S԰4PO#e?OHH͈`qrX[CRVLI8C{jy/(a `R+ao49$ދC1X#רٜ 9ynqn(cVrUWG Vqc I+Of=l"Er`dzfs|uY%F, +fu6V4S!{C pݡwb;#ϵʲX&:>(ѿX, T8'e5lMeTt~xPprkmjZqWZ ߊke`6;B~f^MiЃjT}'v l#74:щ|G"GBŎy5n(nCic'&W&cX37J>sPd*K6p$#gD/Jݬ]6L:VP#ń*$f*^0Q(s&ъ[+UT鎻gP >gK*( BK|nŁɫ[*t,[<Zt}[S;)3psYth{)Y 烟4@ϕ(zι2";ƻhe\xtK\H NZ@-vr( FfcO5r;@;i8ahlz=!8jsbWS— :i;owJ>rXh=VhMA}ȓ wg5BG\ɸO!e룗(eChզ5}Cn|֟%SZi(zSk.ʘQŊ b<'+ W`Oh F>n~w0Dˇ. +rSp]WP3 )A$H§}/RU5#Θ>V'ѽ~ο>+B{H[6+é䪧nj`z-gŘ%0%Dv8= zMS ߝR T{{S浊 5- P71gJ?(vCxj+8,ml!!i@<Lr"/1ZLs*sH^Ug74-;ɻeƤLƌS2CX9w[b7ޡ. NV!6O_A;VtҢ־[RDh=?aUm>m|Y} ^*Ynt*,kr%Lj>)u#ŶoPE%E:[zoUqU#"'cqig3L)lTWE3kh,՝'QC>;.͕ӥ ڻEV ]1>KFc(W#^vCN^YZ+"Yq%cjUcD9spt<(˒ׄ]x grdl> :8A!p#]KX|BAk%g,Qiy *|Tx _>9Pp`YɷG8xy \AgIX!O[E).KVEv/'Ud$A(fxp%wQޓ:kJ^JEEdPX\&'O/hDa`)tmMS>_ޫZ 2wmcrő #/4nVri;`F/MN_;!sPDѐ Y]=.Ǵ;rAu,ǚgbڝH,?2zZ&s*toz튚ɂ'K. |VR8d&Zf7ze@[`1$߈lG-<,*ABrշ'(*$;nVL-q[ }MjqXUTcI;fZS%牰 eD)K]=.,n;7D`Znki'`̜?`Y&4wKe 5x U^?笠nzņkAdyqR3nXBLfZˤVtYrNVqTp'h孔^%=w>UWl ZNZkCxDPVEQwO;($m="OH(O8Xe3/uICc$;jVD%FC=;5^aEwٽ>f#׈m}/M@4`Tq .Z-Ijdt-`P!z9Q[[z{{];s'Q@Wni$qP3 j䗻[{fEFJ9b͚PJkݫÊ[E7Rs6ꢩ2ULgo&\AWi$ryQ:\ncs[&V+AYZbQTqL-~EN Kb1煌p7~=0}6^\~duI 2ݰRƭ?}!~g7Jh1I֣Zy@K!Hz 3:b,,օEWf3/)Ul(\4<_#R&^.PW҇|OGs;X'Gq2Z=O I2^ +GOrb0_!zW608r-+|rLpEÎgQCY"1R`X鑬{M7sIA[b5@6ٲ` nhTWK}O2Yz^ cgfXeHI"e8<&Jf4]o?b2$K^Pi9L2f2a,#VDdy w{Û-tըbѺLJkQ-TqPF ti+x,*t03`3E9krg(rϹ]ݵ۟Cuc|U6Eل9!Z>C2pJogd%x.`pWZX3 (yZi=Eϯ$ 麔6ߐGէ)p)?2< !FF"Cçb[yO)/xp[< 2:v>rEק*ʌ2|hԆU[!c`sB.A#CĻ1/hE葛{~%R͐7?Ѭg]?j$.c_GH2qbbHy~$2 )C,_\ JSJBP"v8(|~e'85 't`f:@@˥ؚqQe5;'hGc-@IV<[dWrh9O:Ѣ<#uGh٪@j<48dRɂ|m71QbC;Vi"FE:u pLN{rOź9|ɇ!s~j'Qt,KO+ĝ_o ȝ >0etPs]^b"Άr,阻ejMkZB~+ɡ U9izoz1`*sH H ._+&>bADYiNYW`= drCRb07HKuںUPb>5ҙWUH(sR c 5Bq(Po dBW ^a2+2W|X`rj*y+i]L(Xyg5Zwޡge!KT < 'H?ܴ/w4-w M5>"k W9GmS (}gʨ"'F%{5Afз9#r!Ɍ =Q[|=ͱ Z6؛8V9[4.I|;?OX,qA[K94yvc&ʠ\~?r,G6ɂtf)D7xs vΪ \nS:Ef:9vGM7.E[u}7fs۴Yu1 0pz1]);#}Q)&ؒA5_hcF XWIq=/{HAO KO+%%amA6Lsl)cE `CW.UP4fi$^x! rU\2^kؚgnQ@{Ϗ#d3CCnUt=%y_,npODvz c ~Ao׋XrE=3RX R@!P;}ƺ œn$KӠ 'Ѯ"7i^}^T ncv $7 /BoDΰʊG*Dž)١dkuQ&2vg%>%͋:j<{E^UyICh8usfݦVJCIR8绿݋\NI;t7"Ap q7"TOe&Y<yC*

;㚳G~cPWf5mS^~(M}?)} 8~uFa9 Bq-kХje%[Riā*Pl.J%b/jA!bfUTvH;_J5 Q GqU O2KO'puRq! | k",Xl(JٕSBe? g Y1Ǣ V*Uħek[pӀ_kn΀ǃa_*j]P*dkV1Ky۹+ p U!99,8#2qؕڹ+w^Y^ag%iXSt\Vl,sxR Avf}t"r3/uZĽгЧ㦧cF-:~uo1=(>=Si.6&YΏtRZ p 'Wֽ\/h+=*avb|WZȪO7Ϛ+{myFel[@ ͏hPic:`fVp~dž  PNJu,JmD22EawW!ĂnZ QpaD>Š{dv-a$7z0 \1uA-'< $g:1vuc6ԟ5RdiO58_42ˡ* h(BB$﹠,poQ6`o~VӃxjKv*AV>"pOR!LLQ#B`YՕY)K31$j["`4:G0 vO@WM}GR6t&6w4ۉ L-1Ei` \Nrڣ0'x!b'gH?'Nʰ'E6\ Y/p&yTh0b济N4%ڛ|*I.,{ 'd+4z9u` vpx2X؀bZW%ۋbtF\lfG/fh@FE˫v࿤O}eeit6w |; ,4N+d1L4jg mg☋j&:#O҂Ԕ3P2Sq[s!{(wUI#Mc7lWVZL@NJ-ЖԢ,e4m 0Y`vk 8@qַ=X5;`⡃2 :cpG'`sq8\ܖ( @(*`dp`U9V+o1WM]>Ly~AЧ 91x I7C#>+̆ katTlHsfU),-[{͙I8+\q8~DELqˁj! p•"r{Kl>/7"qkz'ʣ\bQ8iՀX[A *U ]R'\y:r 4&{᫆V4gA/KULVz=%Ҝג!ib# w:ty.՜Oboo`xg4歕H,q^ `dǬX;FrQ}dAc~+¸ ^PbFJAF sDiU׆y(d޽nOn:Y[GOp6 ^FA%#I' s&ѥ052bGHb{`Dss.L6MOhv-a[SxظWwW 9+_٧o΢P-4$p?FCx%DǦ}dSŘl¢13-y^T-&O3X>{(Dn0B&ECD r0έC"<^Lָ `k2ޔEK̨eI2Vܰ6E84U"+S߿hsf¤V/Z2 V6{3'dp}9gEX** ܡ(ug7 5M+t8|7}SKvBL8*sn"r7R<Vڲ1#aT^~or7@>nbuY:@(9;-,Xm,6).0Qǩ@Z\kӋ(ɝR.ׇ HCI.rz;HZöY=r}VI3ǹCy Ĺ"ld ޛt5_VǨd<'̉6 Yfs̮_YcFwbV# Nc2&$%tlo(c{I;&ly;9,jyO@fŖx7 7PFںa]"ebfq-Fۚsc-a|3iAn~/$X::uE]c;8yp>"F~'TrBVc\lqC2 ĵ%zF0hnvF*; , ;p.eUW㔆@2<oy&+f-cmֿH= Ga}WMƜ-WG{0/)]'H)+@5zmG/{I{o\}):` V.=H8OΕ n~)j1'(a5ת#HEP9QF-i p:$&M:^kҤͨUGiXRm{G ܐo R7j NdM)T;`of3S?څ>g#ܜWV$Xt.Q2 Q|R)-U:WPE>-U r}_OpnCOcUS[,4'Rabeʆ98WoUtt sNO,tdԴZg",U- Lr#gkNOq]an^>ʋp$Sߣs狧L!+*, Z^| b5.CCd'ST8hsCGಽ|F_'7dDW.eNj ]#?BZ LÄ3zsƔi'ɤmGJu5']x4-2MVjwJM2y!fs&zs;jkw&|,ΔrsġB4Q]r= Z 4G@Al[o>AcâM)kA{HgATvo3W:hrHba7% Φs*XJӋ~BMOOREid+vGS[['h5{mN c{5fnbٲ &( dsgלvB,#"%@w_O-3k<6͙6?G =)#CvePeUr[PWȡ퍼igҶxhMK&IJ}B@0bK(|#q'bKXs+3W*!acV$3]2n͍T%$Э7j:oc<pqúќ |szT?;R [vؙCc'%r]I;g/"Bm T:۞g9鞒|Y+47?*TTBP=؀_G^=X ;ԕwpueqhTyAS Z]{`z=[8COReM@ k|E_Ĩ?!2ws}X=.htZ^r- A4#!IjU?ёW[oةE),xYAF65O} v{1dj,yBp`H?gMm6wζ`;lm#xX,~3$P-@BD m,oNZ VI)`&嘭/>-Wc$+lT4{cYjl]!7aE;C I=c{yxYnDqv2/ZYq.^IA\RX1[04&)h11gYCReVynZg'"&Y.u]qh4Bոs #TG^L-U7ER< 9b\ Lp)@x6ru̓MAG)B> >F#LI>Ca&ݼcW_F'C^- yBNjqMN/㋌fc禬W+- 4w.rr2jUZh 9FgJ1{;Mpg0"Y"Y[6fq`Z:tԔLC~ퟻliu\ܹ?3H=w`t:`' aa&dϳ~6 *B^!L>~ϸ"AhκR:%~: m'l]nQRL1aMxB[ s(޷|t­|}ksm4#Y?EM5Vw6*q3.<7(+Ib^Gi NҞswHsA1P{Ӟߑfq2,.Qע11zc%XFWS79H.٭2'WTtHp!ِjXA9Ypjۈg[11@K䟛`'f (sK9? E+,b-6b mQ}x^W_j︇[7,W\=Y%W`j-oM6:7?3 g/jce !r[b (2_C wgkzf7e1Rk6oy~qj{N%C7 J1ֽV;%^9Lh+/wfM=rYjs;gB(AQgcUs?O?H=MZWiV{ )OTNn<8X}:/ @PwBm# ru%e# "ҟ/fݟOOeT+-ůԹg8:Wf7d%Xq1Dk63|ɛ9y;b}1R](|F=oru7;؂)Ƥigeʬڵ-\l,3{. *`xdx?ʋ2֭C'N4$%xhR|:ޞž'#V8쬣\KHqS)A4b&~PG8JF~{-%/Z#wr!1C V25~mrPG MzG:+ +ΖO}L j-~+RHB ; >@ +*`3ZJFa+; ¾9,F[E؋3EBZ 8UOGM ڶ/Pu hB|+09؃ǞXo7=H:Lo)cvjx"R_4?]<74IȐ5ꈢ"!Il4H<ĊZU.Y*$P+CbN̘m!8Bp߰1,VQYQ!ȓ1v<5(w^q!6>NE vl#;]ml (P2-\79)-=P|3~=9ɛ'~< @={ih mSX7ӲvdfMyH[SXR@6ч0 EsmǛN;C ;K2HQ´[Ҍ+Ԫpq;k_5 IԸOWQlrxphT:7C",d]>zG "aR,8d]!ְsNڐ`. & o*otrGA[V U5ר-t$߬22jlz/ɠLneVTHbv sZHj5U_I5uׂTffg9hUATQ;O F*z(?VXQ~;"6;!2<{лh|7ƞ+N GE[Rr)6&Wo2{#r0 W)x3E N 'YP_W=6RW.Iyژ'BZK$Ixwցv5h ?p@; Oq޶%RblP?H63rl(̃y 4ӊsi 1 "$%e~Xl`ݦC' fPXH`ԇVx> C#?>1 P"o|*ޞg}H7*Cp1WBF{ke-ifWxcK\wqtcm5%kKc$!>`Fm-n_~߶O\RUBiF~[)=_U16o}M/I-Nm9`vknGrbcbs#Ժ46`Y`WӖ=<#;k78cݜit53#e0Z>q9 1uI[O5M0 I5E`*Lix_?J0*JLgw54F]>}yn9e¯}BX,*TLkXSr%. 33W?N\kd _ȮӿN7VndC%L vm0.*Dӎ(t)M ;G!vbyi)ꋴe'm[=7iH[NXo|ydmZ5H? n]a A{5ϼBw[}xeMRkq$Р9 ~ǡG(e8$@Pr?Ǝw_T-GQ?M$r{/EC#UQď|q^;9"fv/f3EnyLjx>@tyWJ@BsAR7Q91VmS&k8?U2[bn!Z;$Dmx~3x$SSR%ʙxh}3Йw+DMQ £|r){'4a9gy6ah4b,:RW i jRiY7{Coi`78_ q+DO)bKΕB{Ȥ,YHk)@Rͬ}T7&桄^  ꦨ: Y |=3Dge-\2¸GM|yŅx!C/WM3v,VI d#ҽ&,Eu~BIFH8S) {.Ywj`;O>E|u!*iL%pW͗ݒ8Ue(nbRRNByB :Pr B| G6+iPQPOj AT_iZ`Q4,H &@HqN=Q  $$1?Ʀu𭔔 aׇyif4)CZd>PCSJE@݊0Q1&QJ{i0 []VhceEBχLQ?(3k_%t)_FN6E3j)uB4D ?-ϣ,hbǁ;aL2VXd229QQl y MM=|¢:YI2_U b_/5c 6QviNNlij EK!ypkQm2)MklYjOF|SNzm%xMHTɚq+Fq\6neF/?)}x Op(ݎV6A*\ #c_D1R/zBsխ)'gtǮav@>O)^ޝgTrAY[뉾, 2}TB9K"<w~3ao^J^959TF ʵ3[ڏuP3*;{]ލP%~MdAX`|$ۻDin-;Z_Ҽ9laSXfaqKKJ+Kk_GHdF`/0!odY&NNW37]x Escm9Vtڪgn6H4Nm-;˜*^YQ:lȯ/[G{+T:'nۢ{5u?kfet9zY143P__$Hj N.RT]R +hcƹihi9nެPk3贶hby]^촓Yn`TkSK)E|%0vî҄n;5ku^`DǃҀS9yEj6ܳט+ UcfxN^|S%&lXiZ.X%D. 3jʴq{GCOLÜ eS pJy~bmt}*Ko]85æ?]DR3ALn0oI-_}-hpY+K?C X$;ě۲ E[ g]|qI"j,6!Bmw ƌd0:` \縠BFꤎW:+б~;E>ԠTnffrPsJ%4`!lR"G"Sľ}"3S0E5pdm4?r:lc 1#-P WxUmAwUDg/9]!]8#$Lv~"\G=9S[SXÞ}j]R oKɛr1 6 Bgԗ-sA|'u@|D)ߌGc_WOXEn_<3'bf>Z#|Q$*K<&mV|1 Y!RcG˛d&;Ih (P?*_+ZSV3{;|Ђ5ùuP@q0TH5gf˴'o(7Uk ~?HAn'24A 5F\b.ն}'ȨB.Vc_BhȋIJq=fll"s1%om+YnԻ|'-A+bRҩSg,Vb_UhCG&A87y'Ri]>aW1tsǖiFQ͓UC)\wd!Njdz^oW B+ttk<15ym)0VYgNdGk/rRZ55z%{.p"a"'HY܉olVt jLkG8|Kѵ˶H,蜪ݜrT/o㪠<1C 6y0zBN$Np;OFOͤOi4ꭈL9,sfzJh!7-.$=Llu!o?%y%89(@Bkl$slWb:HW^*pԐA{\oɮ8Dcls%kRF 2`NE,5tV>Cq0.OxNjtڠRDCpξM6g S[j}2QmҒv `HF&alsXgK҉'ﵘaf"C;=)-/6y>%krZKkҷ2K$ fh-nLD~!u0 Rdw5C,דֽR_<3|0WړJ+>t]pAW.9zzcYcĖ*ڦͫ6Z1QQ=d_F`w;m+P!q9?+_,P$pRGwMH=~}Km`6?\g6Z ,\{#Fڶr4qɬ+,SĶp=@[[2]4~^JNM)O)8f:h,\Ɲq/GYr;'bA5U#\UMKvr8#5~UGf*l~IJľf#4L~Y;W.bo;ГcvG^<>Zd箮aX$I>m3[rXPCs1`L8B`[~GAobgɏ'%E ܟ)4G=SNg-3vhGuATՁ4sظlK"3h}Dv&m&Zɒݎj?VvcCTrtckߏܕ"H4K|_\ ) 0=|+s:{c`\IDDޯx.~;w'ѐ]֓uHehٙXƵs\+>($ce0|@vFouK-{ԯn|Ce*9}I4MYo xܮ#={c=a/%nE/!ˀ,z7`7 ި?zd7B7L ; kR' Ѵ񭴝Ѥ-neg`QUaڢTdA_ }qPnɗ})x cնƬA?ΉL$^Ty=#WuNMx?CL\bea^ R ڶ|)&~ARX/ 7%FaA7A1 E8'kRps'T@WxaeF *",}B1ܽL.W;bB2\ ))psʞ ,ȏj0 c[W4eN5`k{]k?X7#*{ax8. KQ55CG|K3y|so:+^\#+N4P߹Zx?t-쿎ԭ<.ۮ@v' :J吜ϔI5_{#*Ty Mx/_ M'澱7|[wmma=A^@~a歾Be7,"A7٤niy kU2@B!oy$JCHطGXk ]Y!рz?V1hYwӪ>3PABf3^4B=zƓ(Y8U7~| ٭/`3H0t6tQsk8~[_[?I`ś%وa>5C\g{1 4X2yń Hi*nB5(tW0UkS8ۺ`Ji'K"D-͡M&aѼ}\53zT%8JkV6H9\.93HYp2 r$@`M]) iqrc_Z+.` r4;M=qMIRp~Hcx+;$<_'nӆ~ေZ|&ʦ SuM;X-F&nt/ Ň`SxZovؒb2ɗs|{D09M)WɛPO jDQnƫShNF!XIBj@RYQEUoMz'[2X zrGX(K&BPK,+Ln]9-z0n#38ʛ4VyM?~Pms-qhBd F$W&/H >dc}`Y{kb8.#kfaVR+S^V!c8故$SܩH,q'ｍ3sJgKPQ3XԴs?gx_>˿[0u/1 +R%hz4935qb!`ОyФH?Let%Y=k׋ Jy}`B0ʁPV[A8Aۮ\RClN%d̥ڋa5jI1T!"u܌%q=g[2D].و\ձ]/n#чuL"c߻AUm0m]~Q\槝V:i_WDy {4#kipnBdFP=r5 z/Nm:$,*Yohh@_S7ΕCL\h5]>pwgt׶UN!HNZ<hMۨM BPͯW~a\=hva9^5 1$-9t^>:+B*~OCrݚ ̲nk ΰK$iI@a]ql QHJ$9MHJ#X {) ʕIJ)3!ybbZ(};rv1zy>Bubbl94"`o/f:7u#$OȒ0ڻxx'̯lcy֚|FˇA*Ncj,v2!"3k6ϱR%'M4-U=<\j3/.2Hք_ډ MeSYΜNsj!aJ%Z% r_*Yr"+wcj4>O-a_+-d#B dz;oYP J_F3rܸzz7B/>6ti& s*:4,i1r:XwcϪIYdW1^. s}v!ξYrĉO= N.ES/of+BM ə옷*wKh3v1M*: J.=%>_U>В7Z#sh}qܭؔFVA.{8=>̷BycRjP E1Jv! JI:Ͷ[3g ͹ 2EBtB+T*xBܬYguS#Rez[U(n0~VU]WϬdA{55 0%N;cE8ǒhWy߸ܫ< u;k <90:gVa n'+p˳*Fn%t-~ | CLT.gd|&3rT׻5YAld;"C!7o>2;cgxsr}ȳ»4eQRb5n>*cR ڣQY Dݳ #pX3-3VT|}Q#yБ Lop5 vէOxâ7P&4~d}>#_U%xqm=b7a|h:=rl;#" bdfX랓K>=JAĉx$SjJZZ?6k0-vOsE*b pG=vw!]6Xa.̠VBH=*鿑1#xhϊ 3g M38<9)I6¿Osx1b˖P`N}{!jҧ,x]m{9Vy(Zo4GcpKmCkU8g (.v Bx}$$xŨa n~Xfj#V[EP[7gqi>_!hȴݯJm[(>̶7-Q!P^wL^W -BρX7 Emk:GU7vN:?T4 {w:}ߙkQGAx&q)f(sêlЃ]*1UqTѺQxX fJI8xA[anAs\Mm) Bf 3n격I鴛ׂQ !MH?< "ZJz( $+d҇W KŪuK֐ͶUQl/Nj^0)봕s*#"v),e?ZA\;*,?SzsbDv:h*)e M0u3A^y2;6`95(u?_okp5tUG-X5s6WJpkIKsڿ]0K*EAuUcp.&^2G()sxjr8.ljG~ ( .;Y*T6 EWH#D`N>K{C?f!S`vaK yQ٪RPU/.hc}|29X-aX9B|{Hi6ٲ J1kի:C![f&ui a+gxfh IG5N>6 8lcLC 1y݈ !mȇTL [YX^T*NL] ?H=c0oFHh]XS:׼THE~wTF2fe " `d"]`tLjz2> 0HqmmE_,fZxG;Vn{峌Th(]_ :T,[q6o8 At!{ߢJ ; 0-[ IeEU$1H9;:9㱰R`t13@W"D6 u Q_֬g|bulfsq{&';:~AOA%/yEŋxfR"תck!ײEKӂ3z$P ޓbk"3 o\]ʐMmٺzb'p:lp&LPDVHT4-I"'Ɍܱ~yՇ;D`@Ox%d$NS\ Qpp`=RX%Ĕ[s L+hȼ C;O+]dӚ} kI]k@G^j Od:>F[.rdxOdP{ME Tެ2YdP7ीc|<,U|+0<P R9VL)Y!aV-8炗E! ) r,t.$$D0B\S)!w|]Y|{3X[a8~+=B'_|t~ ` "xAUMN:*3$v&R|rŽ6;Fl_Ju(v3{JWF5WPZa+BBs.j\@kg="فz\sBX%0i6>+Q"Xԑ.Iԟ6w JLBg;JBhXu Xӏ{c[e*/ocچS0>CCэb*O/w{|%!i<c>]AHv$HM1qojiT)-rhbkJFg P;쩞O NE9?~ ogL9 :3`nG`bC-S+j*w9JgMDƔ4X(;bWOR(!;>ӴykxmC4kT3b'i]!H;-](P[ƋI?|~9h W%R]cGZQI[7pؓ9:O)_]2ԃM IHHX[[2yl Y獱$KNi9M):6,0p8\! @ vg;owZW?$xay#Wqb\ M>prh .?i+"/Մ7 bGco3$DqZsŃsoU\$wWR7Y{0pWg fChlיLy eFg@eޛT!-%FTY/ KOɌsؗ/:Z2i>#4qmIX̽:Y_"%e+ Ú=Ӹ_Ϟ 'U/ϳR 0u!k7b-Wxn]}r>ɔJ$$bCOxo1u ,@`7`᪳Aq \[jCPuP(6ϡ H;C?ؓέr9L<Asb'!C]2}L#$r( ɍUm& e-:bU=: QF9ߤ<=E9EvQ09bu!Lf!ŊLږ_ݫO&CQk{i{L: (VyexBG2&pHt}(剖+4oNiڿ֒ÊVhd}h|g쀌L5BIO4P9 G`:2q7ppze:-rqKMWP]>>B)H90Bۆ!X8?rYt&\*`rҳ (Si? #Y$+7arг]`CI[!k&y yQyw9S8\)Ξ Uuwqr9pa[R* aItX.NcPYbi%%^ŗZqʺgPz8=_7C×AJVn$*A<94N.)2,@Dt;-ETMN'"#+bFl׽`st $kedLF%0fxxG9bN Ć^d";l}- BzgjK>06;~/y4Mj5TsN> [ _D vŵ ]2|Ss=j"$"Y^1V^xS̖V1_v俔=(,B؎EV^38D\ጦhwF*,on!]Kϣ<>ؙ$nmMċO$EoÁuVNAb]ӱ82 -)f)g1aFs:8I(&؅ OGy,+@33Ai^Ƒmꆸ7H cg4 c1kkI5s^*)Bvhbm'ܦ'1Gd>z&!~n.87 'rĆ?ӏk?ZX9hABb+,̡pRB_`6͢ӎ3Y%7^.kq$TthRd7Bq*M4.PwF3=$yD/jTŖ3Zr;.:/T FҰz_+Voј[arb!$]GmI5pi I,v 漃_V-o̶}yxxTN.NMVzer6Y0Jz03hޙ;X=|+(h{!0ɍφ_o7=د"ݍ峭t{.hY/"1h] !R'uy^XJ/c~UrG:S~I_kwb)@=#0bZdȿt:HʐSbt=i3d^Vh)7+%͚_g 8@Q1=U? kl|@,A wf>*Xiytqh5-ʰ!Vq~lx*T/8^D2Lt4ϑ+1J}m4wל,Ebu' ]'= gSó'#Iݴ-h;{mZN3GQ4B#E'h˲y'Xt=w]Fhػ y8 2>m8 df~Br? ǁw2Ԛdn÷Q7&e0|y6>-ğ3s(,l}pdO -fOY3ϣ^RQxFB}!M* EqkPzkƒ'%.Ls1 v^C#O80#4 >hAdoRT:c`k+ńkP[3+pU>UG5E9dE<A:ai &Nwt9- sLLh}Ce N_"c~IY 6@5^[<K[;NOxJX@G {8T &Fv KSeVN ]E ŕ%T}q1֯?讫Ѵ]jGy;Ż53K$ Lin8-|`=zfsp}Qr>)ɃIpD~wFp4wb ;5^-s&Q_R^~f q3pkG 'C`BuzaŊEE3gc{:'- Շ9~`,qWw m!,Yߨhhʭ7&as:mKm~CwH&Hwp^w> V͇.)|Oɸn[ing3t֨#v@2yERtKsTFM* `Kvx/h/q󵂐N+,@A~OUpql)(Pڲ_h$d#?zp/kiWmKS(Nh`)g#.bc@k{HD~h[g.(QCx~&>iP!{FJYu ܜQg==y'eEp ?[Pv~|ӽ^zD<)k95B6KqJ1ZIE!jRލ Ee[{1QR¥ύZ9[4$RC$.Qʽm2 LO)5n%P6h4t0IZVlZ*^*fsw]ՀH B9et$rS)pů8a V<Jދ_ ,%/ vhV%Ѐ(>3o*g ZMK=<Ѻ7/# )|M;NeM"n*üEP>6Å() @V|xw9sg7=D>H%I+k7G1;D.] tq3XBw|w}}n.)DXhp(D }l&0 ȍ[fM\kDV'd8p g ,`OW_kЙ`6ߛOHؔ5\DdChSen9Ƶ K>Eal>yU$'g!t?q䧢ZjG?:]i\(sIa(kpMC>iMW59OHf2_jDiFoPHh/Rt<#Xi?-NUFO֔2r{UWϓTݞxG}Gd~EZK?ۧ2ϗO_[L3Ac)AD5Wٗ3u"Of 7d~NhIu0pɰrA-0t܍Fj \Tr=?i3K|Ү] E^Z7hJ>jWͷVFaRk_`~dH੄_8kHթLSH>oR*icj#LJ|n 8{n8^q ĻRl&sl2Ep<^B\>8iې5ޗk(/,:M1`d`0̋)kk° c> E(C%-*6zk=9!h)DrXxqٜy,9DnDžǎxPpCXw ҚL-sq1rX4HNNhIڣAOeg{x+] <~S]xC;|>3a% ߻9 50L=VW|IbU"PO4f}FӥT'/V&m$fJVzyAȧ<)Մn, 0*`rGs Am#S=Oa3H*QUL{KQ; 1H-A΄j_d @wY :%mA7W<*vL$^@=nGLB`L?;t[yKEM?hʝX0zGU(n:ƬZ4+$m+!᫘aY9 !9sRƛ:]8 ={"d_se~T\EP)&z/yq|A5]t>+bd|$x17]TnqHe>Œ47X<*JUZW.A`z[2_hyО9V:ajJOXUYksZݬ1E)h{Ao w6`c#gVLu6h:V^?s #֦=6VMn5P;Rf4@2>Wa I*SPGG'nި<oO'qpup)0~#mH޽Ԅ WvhA7`}XF:R}8gQX2wZ5 8gJuIE̙Dp-pU=Q;5QB<%?lث$1+9*;!8 黝I? E,c ؛1#3쎒,hnx}mp3>IV=›qER~U?O)`߶N(WF_.ML+~ڬl`giꇾ~n=<"-MM8k]nKTd~nR”U A<0S~D/JtqSvq+ĤI`1rd!|#Q0ߛyI#9!&0vqŠV[{ [=^ ~Y0T)x/|4o$*Ja7\YvZzTzV:GYzfg(s"v=p"NeG4JpRO[,̋Gt* r氻s+ 9ŐݯZoCp0 $P7S*1҇2<;/SQ*VʳPݛ 6Eh!V&O86ŧ){x(Uݻ]zuBƮ#ť7qLsh Y) nf<@'<6\`kmf=DAr2X2uQ" hW>VYB߷hQE++{3Efy+ ZihĂOA tpP{WA鳴&oFU|pT Vs[wxϕʮ7ZU)F 8J!V/M3?Тꥵ|b|!ld/t"nZAdV"FE{/g K@ =T= *G3A6<1 U Hyz82{5CHE<ٹHÿ$DS!D螲ݖE-OΡÙ cQ,G5)-o)@D {Y\#2Q Qw::H%iI "YY@v iH< W:Xi(]="\ysz,pٹ8 $,E<(Q&F8.[d=/jy["CKQTG9ΙtTT*j)0F#" E\-;G EG@Ca4 yRxÖ|8' k˫BNpy,bQLfT(s6g )Lk" K:9F*[JB#@GR -YA/4fCO`]F'Gd  %_#ra&bJ~_`""GRX.MC$p#'+JK{Flɍ\Rq\ol8'ޞ[sdgHy9d }jA. sB}ν'ε3N"g^vI$h`N G9; +q#RǐhĻ#>zIT YM戾uhT =I80W+N'n#x\0k+u鰊!Z2I;X4tT@oVRv8FE4'|%鎚me+{XL*n 4*ʘIw_15&sMasڧ\lIÃ.ҭr4ʱ瘝 2^wez1/X<㵡3'M~;wi+u\oэE>SR`I?@L?1gtzoHfSvjgse_e鍰.˘fc"o;L̒hy>֌,5K^G"GxULY}l<6Ą GQ>+@AøGrޟA FSC7 ]@B ٩BanPkcRtJe3}\-DpQ +4Le /9l/ݬhPEXxL^bմhL]#MAklxegi6KJzZĒ,$77 ?(3[\ݯ&e :OK7x\ʍM3z/O'o'7A85g#s/Bㄖjgv* s1AiO8MzZvxU`"q¼Z7q<@ܜh [2xVY]0P3ppBzhI+| Jr[v&~(T3ajЏK׍|$[N0a)!& 3W$HLИMf!Phn-x{G+N0nf'[ȕ>>Uї!*ʉK;`uG҃0,fr`%-JWJHp[Q{IKķDۏ)9OV'A@쑄jFj[P#~˒]C4J.ͳm=\oYV[q½cZO(V`CDaé{ycS @8+RnP"KŸn8CJ.ݫLB1oi0\4MbA`dž:3&!1{Q,ֳ~K'E^5? ?-vk.'{>$m+c~y-MT?!Mӄ eJ8Q};?y9v#̘5CR;T1YQwM] ֮ c}{|GlDFi)]dw>Q@%W _r6C$U7|: C'ʷM1&?PM!}}GIY&(vGFa:a6mOlY/1 [ɿ9m,`e+9W=[[[e=IP.'2އMj6|$jv 1{/IϤDq :l\C3oAIZbuj*/@)2>vwkΑyQ喅wT;j\/]-uVYDm}:1ҹ'uG.g NT#Gi.vkR㯀'X0URtCϲ\oMBIJ tqOݩ3)^~eTPM3y_$zVe]ugyKi e' W@'~7;݇qĥfh K~Y&C`D{yK\HRx*^ ey_*I:~S^1{rCV{;~;ZMi6*VJZ;nVyQJD\]zfqk4YP9s8uMTkƀț=+|qǯHzgb-K+ThTbi˯7eKS tx)or^bQJ #a,ڏ.M&3 ɀAx 0>sUPP 岀iIA fŰ٘CC[^, J#lH[\Z`wҩ܈0}!qmPi:D2gIsw.k jBt`:dJ'xe 0{Z-y8zįlB-ZbRa>9鬌7I@|%ݷl~'.Tujz\z? \ a}rz> m۾R{c,~ "Dx>\+HrD" #l\8'i=2^ukčd'Iagam'IR@gCf=GHKkB,[Ld¡(H X@ ,6PӨv,c~ 1^ |E 3 =L6RwC=췣φOb=@({%`NmhE5HsuԑĽw^3)-/tnߛM;HFqAԉ4S yiz|M:]b&@^\b^& %,;{]0[몛]wܥ` 2 Z^@A]CߓR>bA$G2g.!؟W@.nT\.UʲJ(3>8^<(çOi\'K0bOfxފ` %jEۃ>>brs0kpr1RKxY{)& ( @/Z3I!mÏx+:IH-L˚ vuD3ֿ%T׃ Ew#.xWJ.|ƛvYx GZ2&AdD[[3e,caony$uY;$Rxg'h!9Yr$07 MJBLUi/Ěf 9kcD*aA*X~|ڡWV^ Ii ]u-.GWǀ4wl[FiAzWu{\ƬaDrW ɰqDdGObWG-b[d#jF)̨rXxz3n7nxpJ#n _OS;0j : EBJbaZe֝@(_#;npf98.JZINw=Kth$9pwjeUgF) sEnCYDPￅ"+Ikhd͟+ӽ} + -mp5`O p f3s73)SgvZd{&9htt3U@-^%Maաj -vUC%q k7G[ Ex`x LγkYv >b/>bZpmtAѯAB/,)loTї#XU丈OZ7X>l~0~5du) q( \{@i%`6g&#odO] .{l oF0FY#/`P!L 9ch3B ڤݸZ9{QGZhDZ1_12$ͺu.H]Љ#-+i!TVub&݌WEk7N{Z0jo4"*<S/O*x&kӵa7%^7۶7hת.af#?x-4X{lA%tLX֢*QXS\Rg9ci&Ӌt++h\1WC3s^Y :iɡ_s^5E{~VDx e[Ζ`l<32~\_8㛈mH<"r6,FZ;5?Q@B^e Kݝ T%p5og,T~4aYW寧s>Z5`NېFE 2y'$q&ESngc"v؝ͭO!zyLH+jy}2(0DZn+ElV7L˦܉zmTm|ߙXvG8#ɔh"؃!1҄2oyDUnyg1Q4Qh3/flOKwi&Mk%6߅7&BǜZٸ*qP=#0ݯ )Z0M n$ g/ >U0`i0?K>ZF^ 4 uwSugfQ!C4lx ŧYx\8wL-K2C;UۈR$I? w|Ud||Ns.)ͳ>C!ۋr J ˘_=ac{@JefF֩0_ƫ'/nY cQC YTD9NU~RN]:F4gT:^jpVRTNNYvQ!q#q;3+=NL:%!p9Mӛ*kvhoÂ轤,*-O\=cw ]0b+w'667w*y;nK 4l~PF`CϚQ}ȼݩg~&[ח̏٩c|pDu[Ԣ-B g>D :$!*bS@P΀ބ0rL%{ܴw-@HcmDk@ӧe6B(8Kf@.N&'v}cߺ٢ iƸ1c*8;iB)]GumBUzH!T[s.Ǎ:#휮+SW*nZNM-/c5՞k'\V_ꀠuӶ9\#ѽj5Č٨J _v%7!#M4XuˤPF0*,r{}7aj><*mx8ֳӯpm 6SyQ)[y]ғҲN,ҁS!Kiןl*Ts䑾>M?6pή<݀o&QˍiwɠoGZ")Ѝ Am=bXPd`OPJ~,^k5/ Tb<` jx]t}$|'` =J'ȿX)6^{!KIJUD}}k,Rx29_n•#~wsGIk_'x3:ww~w 1=P diCRp ,˻y)iɐiir&ͧM'jpO5H]"-N }PCij(A"our'LZ~4U*l%OS%A'v_0ؚ["̚Cp-gR$57wH/I)o__lwURfR*A S°{m8}j4r7lWB.#0M#`ibPN_FO"UL|@6Ϫ\x7 i67ƎNk2: \IuSda"tYe9JJAKi YM/0G^{Vw8'66H\_q'Ǟq\Amҙ~sǵ4WI&_O\4iGЉo6foݼU}\; aBaOij a8Fpye(`"ܾu>7d)~ cڈduY~}B,IoLܮhXRa@&00atzD4ްg;c89hû\R |öKl>% $ I|t MSVB Gn8i_3'Ckm( 5An8Qye:;5AſI ȴ^-wrʛc,EHle\^Dy}Rи B5oA ~]Ls}Vj[n:*rz3iTk rs6"ul ʢ:P8Q7=h̴C6XIU)Ffl׷Ky)K7X&33IeP_)LA-˛HEy™~215DX탊އ viը$C5"B !)KK"'/6 ՄmYJͧZÄslHC 9~(Mb#5`#otbű*h!4GB ;?"'EJVy9=q3_ywSe}cZ?kyv#_\y s=痡د|Kp^ !ebݞ@K}׋_x;pG>é5 _1yăn%\t_ޘ< "܊6F #Lh#l3zU-Cqppzkk"2~g]|NXk; Ad2ooۊBj"Gb]/ה8oEE"Dc9|xSCcE{SUpfQcQpĝc9r_41iul.$'^ƥ]K0Fɘbw˵ըm|Cߎ#Nz%'MN!l| tB.Th&o$'_'$&LokQxDdUȾlP t:s3oqW UgBPδz/Qg{/:)7&y8ܞ8nC@@Y @]c.aޒyz)mlt MS58 Z4-̈́"v]}L"NpbRӽjEI}sdžpXZ}G~:g*c#rLJuH\;TU*)ojF/AC8W #'bT+H[ѕmWbJL )v= B'>5ſL0yT Jg85o6>sH5FB3xZLxM:ʇVN6g2dLk?S%jvO (U 7%CA}QG 7317%x\sHkuWH"ƿ^UN Fd\}=7XKw ِS j_F%~5|F0KDF>ݍr ЄIAę"+Ъr3GJ8j e YgROw+'#^1=~π[v[o8ϙt&,k `D9]CQWGPkeA]ċ_N|raE<ֿ$"h+2}#%mvFA _o6>K N*= c$gR Mj}˙C'}^!G X ep qaD# ]5Y(ϲv GX6N-ׇI: ϨSxFmߏhĬ'Dy#Sb"yM2,3:h>T'Ua#B|C24qAs'`+=A}1Z%rT5dhIp2b$Ǔ5dzLYՎ_+q&vS}86Hf j 6(zG}otч^h kklH JJO#6WI}POgVjҐ:dn^i96^KA WhVNL@UB?k5[Hђ Qg55Im3yS_YE?HrIGF-K+=rVR){S`H0~BTq׳Mi *_ VXl3r*{D'J8O8ӸaBLygjd.Z|K cFl M ;e(GzNԮjc>dm7ͭ ^.kzý@F _"gN_1d6*@nt846Xh Xi*LaNr&M,ԎjhIq\nAbcOaytsK^Z*@`(J.a0Q|:A3^!b0k';▩+\ZTsM_h ӅS_ hbL<=#@ڶ~-i/e'9#d{7oU;IDŽk<8kߓAЂSRC"_}Br1B[.l&+itOq&GPNڇMt'boˎ4 Iqܬ}% \nxg_7Zo=zVb5bh[;ڭvkmœKBP3+wmDRC➶5 ç_4`5J9eueݣ0A(l-n ; %yq㓓qb繆=%X'E8߃JfᑺhLdXO3Y+M?qH`QآS<.O .-P|_ >ca.mu2 sƮa!G?+UZb-Enޞlj"1Q 酧$f\>c=]鮉%"ẢM^L P{_/zS}J*Znd۶ i؝2ZߤU| uR]0 x^w!{t4/۵fx.9DpMt-^!կ<`Cx=>8ΐFBk?r[F\P:aCe17*Gt\( Y,iTt>n]UD[ৢ P L_d g}m]OgN3Sg/s:i,bj Zn05\iY't7L4tfJMUavB똥 ^xi'v7`H˃OHӮlMsM(Ǜ'D=פKjᶝWƦ IGZF6a tr2x_Z*aIJ଒ڣlF<Z|P,hx< 80 UbvV6~pgHg_uBi{HR2C,:;2%h_RǾ՗-9/*d #iU(zxRn\>f8¡Q߿ik2>H9V"{\+5yxUXN$,7̆KMXԂCubG xb'Z9)o#gR68ػ}Ky~7EEm28Z 3.Z7 bj[cU𔷨՜ļc!YXD*SD;~L/+:1,9MPCD$kY z$S&R!`Y!I^Aʹ=PuUie__,XfEX"&аq B% p6!`{sY+yuR/3_J \O+roLHD+o<bQ[{[8&JۨT/zq|Sc/:e1 ̨x(*%|yBqfWw&]YmYݦyF*:WSm\Dk͵[*6X<\Hi2\  1Bo!0rhkn["03eqO1.{@rz5' tkMcBE̖8""W,J=We]81S+q }BUx=YppS^0nq:NZoԅh8CZj#³FA+` $a=ۑ`kozK Ȍ-~%y;p@3 U/]:5?A{_/ܟ*\p2?וW'hwK1q*:}*&)ɳ;h]M|6k; /S&"ܱZx}|rg8M@/L6AAجd |\!^f!WdJ84pU܈`D<]8bT]!~~8܃Co%;G^\e+W/[e,)%/u7zJg:Y!ļ!m/^YKҝ@Tt7;> .1>{x/hJ/hTC8yɄs=Ma>K~!芨6Uv퍱0hϦmn>185{&a ⌹+bEPtܓjy>0Q]B`'T3=3uGkS6׍0`/*} Nm50#oS;K)v+} C C/чى2g{x< h 9`3X9UDm\xySe')w>W@a9NT\^HMU햠1 &Ƶ^Ŗ~V +ԗ3+[թQ_xa9yDY4ԗ0"Ma;+ g-s!enRJ풸-ٗnڭk,|?>xxd_By{Ng@c(tGɿ.w̝OVɵ1$sX'F^{RT֜Z, ๠=!$%H㷿!$stnf́I M%3Go]Bſ{wT'9C?59.Rkraڄ ɺd9 T"O83ǭ.bj*)|D>x@ QN1 v?c253b LcC rT( ؅_AC臿rf 0ںq˲i%$F>lցgS4`EX&S_I0Ol˝zm=:VJF6MPAiæ/j&!Cwi;>b1\-/hFuyTiT(hYkJT&^!]+#χ;h$(U@O&sh j).ptu`ŭ8қB1m5<Omܝ[t Wӵ{'sB(1[I>A:eUu:OelZlUB2-30Dn^>O?Kwr$ز,x XH2FNu͏U<}k ׃IVZH6 侲K[Tm)OxO G*hA! &6I´o&sM""ZhT-M(/'ME|ܽ(yVic& k) 08p: `s7Uaؿb<(b4Q'm=Yn4AD~m}(PܬlݹTFє"ÛggT_4uU9R3XSCS>koN\4+-gu;xy= fJ E+Ny$ƌb(ER#ɃMS:ezoa.uj1 t{" F~/Ug{['p,O#sTp+1ܢ"m~hQױDBZх74DqFiQ,>AGM zEP}m\9@lZ {iED$B[OjN}NF }I}9[_(,IQe]|WS{  \ a7a5[_DJ-%}ɁXL+Vu3-r9Ȯ 3Β& cs̈$&!Q#z+D!klŖqN[<^<1#>5|3ӄ~*ɧ[EAicE> d']S ΠFP/ 40%?y\ |4iOٮ|xc[v4%_g {qU`rT,Ao+p$.Iś)waN PA ZJ\p[ԕvt͌:%L}fxjU:8A '16vVDgj*]j}[H<)Uۈ3{T協o^=+yp8-(dخثN*PtQI#1Huec)nf+UH%#v33VMy%zLyh@{ HY+lz¹jdCW'>*d+?HךL it)&]jmU'$?)OzN%4Ric~7KEm.,?w6'd1M!. .^"é*;P̯rk$,k{ Lڍ~zHw{őz]-Ic+̍Ȭx߁;ns+qFp2nDۨ9' ׌H/D^F= AJxy<$73R.XS;+ݹ;:UXTp&"M[h#4.N7'eq`T 󾸧9핔mq쫲h3@Vkh'/sg9/C5\1VrlG1Wcq':uf~wa]M1 x]gzycM-h͹qσV0AkԽ6cnVMs$* Sγ+$Bi{r3{QO @,L.hHVfxKպǦF~m;Ʃ9\%h׺jvPJi@]d'Ào:WM]zl.k|bB+`MN (Hp{JE( Oesa':^c-]Kw1:h0>MQI" Bd >[`<8{CG+=!|HYA*wOANg2IhĮTg294 |1xD~~qiuW0(]#1e6oZd#ۼ06pd W-RYɻ{҇_'G$!W"0]EljydIugBxcwڙjb/z4;ҡtŖib Ǒ-C҂g-9,!&$Ko7 -|j0i}Me- Jy 'g"Q{BP=m^m"iõ+q e<]1˜(Za•#]fd*"(g·q=-d0_pg4Xnh1'.nUÐ?#jX5$?uU43ѦS(`d+7!O{>EGz_w?#udYj`)h3N)R!v9}ۂ`0 mӫ%磕B@j`/)Ҩ۠ʠ,SpY"gIv,a- W0l{ԢnRP׈$E8ۥEݴ!$/>VIw@EQ?'bڈ:T,mQt{5A1#n 퀭և/F@JLO\v~tέH搷&!WUaS A@>VB >q[2 h$K:Eb:M.6IOP|OȈеQ\e%y"DTҖ姉^FiJ5(ϙY*^E.c&.P%Jǐ1Cf .{bѬ&U(@-fYBqN*`1FPm6%ƿ7lOx R**ǝ%}MXr+̱LYHW%#c^0yYe_ѵʴ LdVie 8'MDL9A*(ݦ-,ܴHJ&^rVà[^l)X'`sg0{p*s!^d!f^f<|GL F!A45j#LF"%Y9mJ&zςgJxɺ e0:-I3CV BC\CALu 6myN~?Ǿ#7s=:RIO%*ri,9P,v ߦ@Mx_`@)le=dlGQ0[Bu lN~prX aY,#@ii z>7bfycCF54w_n8 :̥Z;&PW;uz|V u Grό .kfQ)^7%yRO@0Uqfb>V,ȩ̮$-aPdυ3deȗcȄLF1/7荖&mvho%7剤f{Dئ̞Aw)\(5< bԖIx|^%WDTBT4.#.:Le>7//aDe++&*Bys?)iZN-+Ф6'q~.sʅqJiN Z7 mQ-QwŢAT vl2gv0˟r 1"ܹ@[I)(CX2d]q^TJJVgkQ3ћE~z«))Jc.5U "IZ UQkC3 Mh&+}5)1Zߢly0W)Ć>X7zh/)6I:c( f=N.F_boR:OJ(\:T_1-%G^ZFkH\,x>AOZY <H!P AO fGϕC2Q,Bَ>hGDMX U:î f Մ5c.@ p+eR!qBZ(bo@Q: qE Jی$oLJTf pDo;6c'3A3kx17RrX)*?\_PVXV8 " \ %bgo-I]ѶR}Pq]]*Z,"u\`X N#=͖ng.܆A|+1Zce9o9"Ϩ* .)BY>*'PzSPk(fCpދ"Z)soSNPG/J^/u@'_G]|&FOO~!&׻4pQncbMH(i(7pH m-dw]jړ)LxgI S6rf5"Pȶeޘy$ކ|.uܟ٪St1}#HrSy f:q6udž%(HCSrHNa,JeY^:%E=tXz0"yxY!ZW_07F.]Cl'\{´ORyv&=Qpƹ4A, "i-bVxgH`8Ĭ˨ +{S;[7 Džu iS{n^+j| -05'*U?eYۢ@qgnÕ^q/e$Ἧ)u=HF}pg_UG|Jͯ/;4A yI]QUA Sfį̋5q:j!hTVy,i10:s_q~@HiUz_1J/߳mT;|o|ӹ Q!%9w'} hԦO75ヿ} "F#J݁*B tTFccL|)񉂚6vLtw!Nx'؈MySjl) >N grkD†CO2h  P3%uE%cD`L]<ܠ6Oi Ԡ)Ghs$L+mQ t9>hRjhNQŃ.pcrpz[~ _Cv@h|YeLiȰ5}\ﾨki֬f7$ p2"_Ntzٵ"`~~x ~-_8>(3|5s[7Z!%dLG)m;A.uPW3)$@"IYCөSNJbiZ塨oN c5Lm6c*6p̩2yL=xhsC=wr V`?/tSOۓA{'r"itCCvZA2 S/JP7T^Se7\ )[Qz_@Y2#5\Qx@p&WT׼Gϵ}*(D;:]rA胃63=k`~Ϳ&dV{p4'N;:_3HŃcuȭ 9ø1$Xb`mW=™ ͵ YB}]v :ɵZŠO>9!%o6 =L)b 9mB.yn|~h*#gdի$^Mvv$iBۯj  ҕVYYZbY [Q&ɐqoˮ1*PBWBS4)vGq~uq 4t(}+ =Nu6MvT+/Uo !]qx7Vn,C>iª 4D;78T,H~&BKRUۉx~̑L0~e.'akR>?~XY?QZV)ҤI%ddM&7N$fksıIؗVN#ZI]})E b t_:i,kC.U/\j0*4.)Ʈ-7a{8Nb]ij6H,,˛B%VZ'M{~6;.D. O^X'"?^gne ]=EVRNhhb(b I ߅(;{:4 1/ݖN죠izGpc\Á}OS힚rC- ;$B^]'7ד, E@\kpcRmO' [`F8j 쭏9ϡB7MƖCk~vNqC;%GhY y]=9&DUJ".-tKf&_r?vX\L.`q 2UE>n~w[$ k\ 7e>A᳌^+_Vf1.[, Z#ly@iD!p15fH?%xLXV>}r/p]z]hkgb Oϲf_+s ⴪k(v\3()BW&FVpTz1MUDTkҁ9gw-\㟛ZpmfKNDWS1.%ǟN9ՁiB1|\ "wjPఛ :2U YH T lHo2B#WyТ8)@T W_Ŀ`QtB5~9Gݾu }Fb>>/  4r unQ0`koګUh >Ss"Û Of>A2#>Ii7 ̈́qf*R_SЇboQ#,!ψDZm:ReIH='jl_%J'YBp047K޾@ hh97_V>LR@F""˳:꣉}p@F*v *%݈utй"~R~mȼ}ܣQ^I-L(0 AP&SU@⴨n鄮JªLa>JhN*m2@M3?u[uB7H٦鎇:O3lu8L 1@ bWSN}[YI^S؀KqTЈh Kf@6G,dq&O8z ښ0hDք`X,dd$n6#|$n5@j*d* ۨVDnL@\NGZj  r%aY;m3DVɉL!J* 1S%]F۔m}RWYܰtJ+.uM?@cQPyCLYs FL4r;ոy dL D*z/\;d_cQg8حҩqaa-Ӧ'y YƼx0<&ae͖Bf|d>__8»ȲUt+4CUF6@/!rQ8se+ Ejqz<{ս6aM6jdg~6Lڪ1W*vϖ$ ?޿)r~A1}@b[ Z`%?.['|'ٵ&OSì@*P'J;B\4PBsxΰu"~zEa%Nje#5@fL{>V-̹MV tXzpK$̻ gK>m04|w |ieu%L7)_ ͽ1xYy´RK Izbbݺ|-K -tL@rkntWw+h!:\vٕ<^=H,vQɄ=[[a})i 4DIo*;mdv0 L 9 Uaet$tCˠf5Ązc`)"Gհaѐfoz9dUChN`COH$e;YR(8pTtWۖj,F1Ҫ)k?M&#, i.vƘC2p<%pI={b ;_0G9-ɑ4z !#?&*e} FޡQ07\(xxxUV?shN~XY+ٻ `-@\o% ,[$9^!VHEĻv ӸE!S)gj`OtX$%Kp[!ef ^c+U_/EPUcqCf!taΚI BGܕ&~zqj^שܽ=5 (BGSP T'=pd{"5:ϥq*⎁= ^`ꏽ\UP}5{2MRz 1F\cP\.hH0IIoIܜ(o|TރzSD!j Q*[׌L/f=23Aԍe4~X) #[no*\f/dgɍa5R!G!I3(dN,kX3XF㈯?RxzJvʺ;-tE7nfb!UF;u "0X0gbcQ6gJT-1!=V0o$̒}TﲞQIT:r1#~lʢLJ<Ͳݣ]CйӔ#R;\(%:PuQ" qgJr}`*;GKqot-QO|>Ώ0x.<ض:qWqiS|s1QL{KrE % ȕ0[ M^|To6Q-tG.r&5i =l3U8[[/(;ͧ\ 9Pܝ =Vblk*3M򬷘%~Lk W[KH!/߀. REl}B U1`Ds)Z|*%4 OOuI6hya?g{ex2/4!٥oֲ:% ٣9EѠlP" Pi3Y\CyVp f/OO8Y|XW&w׷r ) Gqے5#FئOf.g?5?Ȍ!|q@>`NJmHDP_`| ߆u;uJ| {XC?Ֆ'Osݏ/F!41%,QZk fB#s*9"v-RRFxR:tVp'NJZ94| ngK?Dwá^$^ ʧTһl?CD9 gkȽH `bԢ}sZul3?#Cвl4\:Is2W:xsAoV-U $ބ_s 5߄b.'Ր%7p *`W8bϧ=z,T<; Dp>kLm}.gHiٝ&|36'ÛT6RMqt_Aک#5(i O=g1Ȉ6Hȿ}mq w9MȏxEqʕz>_7p^A+n͏iє驎5tj$cg_f 8=G0hb-udcYtV@RQB-A#}=9~/}IJҲm.1whF5^1)BO ulߺz̨#"tURƤ h[8+QS֏>U*#QZqAd#=P!ݔL'>3 a`o|m%Ow"]ᇧ!Ce&P$܅RJ)vp$HSخ}gw[-5Zḧ͚c& 8T56)ΝsaƲXK#F'@)^.ߝjLOg`^ č6j,s6j00pLlM5Gs>"tP[a0shu31NgF44M l/U6DQ.0k?]M̲^5׌HdA+ xo]D˳WwH_FC|!857bbyY~`R+93 <(LJDž5D+!*m9Pn+<2'Es`Gj'4uc6 w_ɟMW^"ꏚ~ĕH2djՠc[ݤ ].P!jJ$L>zk&Jw8;B5,ֻ)X+G#I-c 6l6zyEnG1蝵`ZJQu~dLqo<b8 +_wO0,n$}alSA톖w<ǏV8 {N1n1# r!V~SO^THT';\]sA>,vLԊdoR[B dCyF9JH̜YqZ]Ljs*]NJ8XdʊC5@|E6J,SXj * ZnȤOn8%5Pf::^iZt*nkn4aajGw);ct_b{v3(Xe #&9%B0." #R?1(0BSX\nH,fS]+F:%pK4xWH$0\#$]/)gJv+7 ֕1,/eY2)]c)teysK.sl >ոpn}Y׬wLe!ILT`[ v&HÐd=M*^b[2ZDm^h;Dk!|;胜1e)uT@J &Roh@2@[wDSq"e`1TF/8$c{;s BiͯݲU?]bX0) XK%cjS749OՍzpuZm\HŒ{|$&6'uc2{fb$wջT2B_ϯfa]8jzST8C!iP.\)^`pF:wUpO̅:]%L.0Tf85FP̱L8G Y%m,ƕe* 7PnHP܆[IFGf4s 76H[2lmv.,fo,Ux$.@E ?,ת}_&ΔZd WGk>/g1l 4#H c:m`AP ņ9JN.p'5"-FZ_F#:0(5)o66…Ma=(jE~L&oG/H7"?cUn1 %P4%Y<GYXW,LFZ!rNww0oL1e5`ΫJ1i]"@tDrӁ(N:N"5 @Tc b94ML։} +9/iD&i\X0 1z+b]Mo<}w~n3?zޟ~kE n#F( @R Km⾀] 4®cgm_Aź==-3ե+qN=+p7_7΁y^DuZ 4Hs=5k5S~]z="@0 ,=ޭɳ 8vyEwF}WX%bɢ/̻`gċ+ݴ?&VN0,ix 40< _^ݸ7~UziKBYjIG cYAW`{)\3Cݥp 9I!^L4r -NשߑMUR\?*8z*oTR"]a'׵̿o\ױJzvH]z4Je {O5`f5^mFHUx9{F+I88BGj g(l]7:>t%g6J9H7P1|VG7̊@O1*mI@yi&n8E.|!P()IV)?]~_ϗ"E0REl@چ/ls zhh+\ZևxxDڭ m sRG }kj}'t"s_d'xV䴇Y_+\ f+҃Pps~f^c*秡:>9"4`Ai\svH8x EQ0aJF'7KuSwZr! :ʯZWvFGH+ SԈpE֌Y4ܙ#v W)Ba4|x]hB;*QVY52 WXM ;]Xhx7[t$<"tY&њ" !@#Gb-= &ݍf$4N >bb888Sf4FC}98;;*JoGH &jpx~IEAܘ]`P=63I2_Gb3H @Z,l@}>/yAUv"ڦ죚Zj#4t9m9ql}BL[].l ٔD9ϾYt9"(;RȥًϟD N 0(Pq2L"9!7L3'{Q&XqqF͛9.F?b Z.+7֊QqqzT8ߖbO%7'fLmZ7RUg,=RtzpًWljz@r> rFT'/P!xarr}8c]OY qcDP0N\dGmNd;9췟Hu:mziav9;L5&ȣ}ӳN Re,PuA 4;qJrI7x !v, =PVnKl3͉ *]oUqG[~P,Ȏ:O'Uۃok urQp*Opn+}у4RJki; ڈ2m,wΛ s4~ňHkxd#Ha%Ԇ~eJjT]f1B7kd>D66{*`c^DH *̪̄nʙZ2 mƯ+4Wc=u_4mV~˜Nµ p`K@Z&=FʏS{v I756\Ukp.?ܛ1]K 0Kg_D|v9^T(~etĭD'Kق/b+=P:r_BFC +d+8ˮd:dxd4PGGo<Ϥ \&8vw^ǭGt&ek"ο K+]ۻ:rKѭx;yB7HgƢvexW4D >6L.mN '4aS*cܙrŏc^^C'863Y'rz2&3zCi{S.ָ7tFnM렔l' Sd*._9Vn=^iӯf*V8p)P7-]gAs&ħ$Ur,b R/!MW`"N ܪ\:5fRVX;[>B1/IO6?OYdl){T*Q'RDq<츄ned%3p4pNt!S\x MA9I[PMbIUwf& ,>q$/c_Y.5:"c'" &`gMδރ6羪y ߵ.FDps貦% L B|i"P+3x8GRҼ[V]$fh\|pds1RD,!ᢹfֹk~.hKVb=%*t\k8FS)4έVvw _A2IГ%8E{y2Spھ?5R&s9f;m+Ae"BmWGo.@Il= Z| ~ed[JQ*55l&jsΜ>NY>`.{c8̭4Ē`mw͐x",pοs((=x>&2C׎R8 x;`\3˛kpxSݬNĻ8^a~Cd^bx,?tCV#¢^d4A iPci~(by+#a1fL4G mH@/ՍloyaγLVd:qԅMo+(/TOC$M e7^Gѩ?,#->dT)J\ژrN K`b&gkO26#AKO>p ϔ9;wqF#Ϋ``vK0SAs65=!VkS|F[k߄BBMFK{+S("=UtE{4:94 eٳ0D**U4bxT JiET=QQMz,;+S!JTAy9DbvS; KD[gKD=z ˨9KpSo_ jzaxOApqDuߕ9:߹ZsY4D`Wb,ޣUvX(Pͩ9 5(`Ȁo2TPn`J$fz1}BtWpcG9ޣq%9:vBt~ /Xm;R#kOK &2]z#!'?f Kdq.>5=Ɓb< LKZ+/G5OsەhQFs)Nr:YhA[ b_0l2Ϊ*[OY奏z6C $.A㸚U41pKy+k-E tZ;V#cS ⸺:M&&Ž_T^om֝ +S^"]jkiI}Rƒ _)N9 0]v`Lqd2iG)ΆŦ,VY=4Pn> fTA%ykx5ح=Ba!E4L߫>QO$! ݯE?@;cLzGd/*T;U?}3ϋ V4K&]N[]}b5ߙ{.Cl 䥄i)YlՈ6iڼ{{{;g-z\2_ TYX~?VqRåa(a"P4.2uc'D8`OjsEUD;?#~N.u#fFCzB-E .թ2z"IB(AX! 2pHvuބ oT- M0 I UE\x.^I& Q:. 9CD(%'ɎA4J1# )5VJs.0PB\4o2\xW9^0!YR!=3/R3 }/)Dd4"ͭcw]5.).섎֞ ŘU>%}9˕DКf+Zh0c;1;D/:P%'*mf/+t<+t%0DBÈL7KGA t/?s#-G=:UaNqqy7TSgznb{Yjs{ـuj S;jXʱv,wzڻPq4y-#Rʳ_buo}[!;:!b]$M\o2Up%b^e+ptbB>m- æ XV }[f~Ehήږ `|ZSվıU1ܞ.KR+wUefݷ?O0(ewLčJ&Ɍ{eG4\^\΋}VC/æP,X cQ:}]ʘR|`3ґkZ^?;Ssi9(f{N6]J?Y OeB. H(].W<gA(XT0"úq(*E9m#?cG5ȍ!2SVpr$u$I8zPu)cx|:`K 8TuL宻49cb%xy@GtqFs_!(qOPEY6 <wLUzD' ۰~Z=¤98M/4E) ĝħ25Q 6'eB~RB:#m#w:޷,ا+/r7I-)R }.},qX;c9@8QD#4&̰yڛ6%6>=;S~uс)f t4prH!qpi^Ysݹ< K䄏 , 0H HWrYQ*rnNysnlcfC%5Vz$RE< 8{1t\_N,x%k5JWUN|Oٕ?9&?Bg~/qʨzxF;\G<L ~ߣ45N6HXl+,}+3D5ps0>ÜY]-ڊX]ΓpTvU E6*٫|NᄦUIR@6|F+Mx۰!yCL6Wo@m6s߬< =8Mk9֭[fϴ#M䏲y^u-أFT \/{'6؈3_&wLEъ%n/N-c;vVˇp M7Ere⧄#a= ఖj79td TTR-$iuEc%'gT'!1|d}I2GeO"tg~\wIMT׽506a`$C5}L6"pe-F0%`h\v~{P. WP[Kp;QnϓϣNMh1 m p36:縭yiôZld%H.Е#CDۇJX0vBR;2%7eK{]^0trK:חPW7^d'r@_2~ oKd' .XQU:k(HD99N»?rA7iw* vz/!#a"F\ iG%9wqq D~yұ$؏`Jzm8a}-=7 =b-$\Lg3ݱA)Ha=>2m)/iK_B-29Nd4a:oW_?:׸a jg気Qa#m5ܟ=eTC"Hab@=_(x+G Ƀ$Jvܮ&S2_|Ž]b*E[j踎4$/VT;z,1wE}/+F Au~A/簯Rm~Ft|t(nhw3";:(id5Ǫp0(L 9G1ϫ%pd*KjǚTo@)?Б7KRbG %ƪ\"7ۣԆ鐟i }Lbx$_-Ԝ@ 2OӲJ;>5oBL=jA/)ڶQ4xD3eX}g +788,|ܨUԿQC JqCм}s%0puPn G>!o<P4iҙŦ0 wBt}uQOJL +nPl DJhL%ֳ6f0sn,ʊxK1ПȑރK0[ t7gºU'9$~$N5)tf)#cxraI U_rs+^xOc!>"+ ܠ⽻E?0fM h>V*GF-[_ؾC] laK,횬[hBvcM*z5pMF@3$%y S=[ K1T$̱HtJjoB}2x8,/е @%dXc2^ ? a(tҘ s_h@l) tPwQw%WWoUsZ9G.\oSۧ*x5q~dc⑻-)s)%j.@+Kyng72mfr$)&dȢ`$ 2GTyړS3/5B36cJrcm~{-his]bMocd|ĵN!tgI44njxNGk}/[ʓPE6u2X 8N ^:F>]s60^"ۄLI]\}nrc9-1 4LKTZu{OBc9ՑaIoA_a2 +f kZ^A_4%$V|-oHX~2y &^P;U@|bj P` k^VqSOG%ȴ~HgyVh-Qθrb?À/W>bt+opc 1{̔j޳JE?~rU햦m;L+3an "l k}C*+eY J:Pv#r \>2'1)eﯧyS/[Z>Aq%aR{]ʨWGD1Jɵ/-&!}P+E%u0ġNډ˰_! _='p0 ¾}3b)Sp;9^QRT35xw5TOdg6ܺ]3Iużh<-}xZe=JQC;zD~Uq5KݗfG,,LйfbQ4!h|k(WmҺB;F { pnqVt[]Wr~(xԒq]ft^ kN\yv8ؼŒ]`TvM}TI{j f㋽^ߚu,d1k!з9nYqHUO΢ }x.z ;̖Z)<sTWSv pj $,dJC|  @ᖑJ:LBG܅x * xgKp@h' v9[iyipE? \P`\zbaUDfE#vT3ʋBvb!|{ג,YZyP[*ooun-oA0n( HQ˷V۠т.&Lt,Ȣ@6VlZp'6dT&VX0 ]\XY~̙@#Ӿm^K('FEFQ=U |#r˸4uJ*D2ɬgVm9/'\urxp!S#mڌ<>I?:KIs2\%Y> O6K=;p ^y0]U^WK7 ?:ع bh^'K؂#W W.ʞDɫ,* |H"'BUFZA % )e";ɓ{8ip:HTV 7nx:8/xe- "Kz4}]%!ѓJ_s٦‘}צw8JOx8oC-eȒBĹF bQi1Zzu ;}: :K ?Ox#f >Uc^ .D:8en>O`^^0wP)u݈(KlyaES0U Y4f2\ZrIdGףl5:"hЙZ 8.EV8'||LW$(iܛ\oCB>G叻_UF CZXE=,V*R7 v!@ ;߮*kʴ:}+ț6@c?:\LV.qx t@17Ȼu M gmSڽu~ W?e7gU>Z݊P{'<5ukDe(Kj;P" +`J g`d['<)L12`]it۬oE"G`)[؎ oB*B4-_YkFcԾ g/ztM.Fs&4 H2 ̕En ^1UNA=4p {jV%SYaN' T1kPIj_uTm.`$2-4ú&{ mzeeǜ~19;yP]؛.3EKNo_A-t,*!=?x=~+0p-vۖz{IvFA@;9vQYVNIfR8A7Dc`ŲU\edyTwcFUZz #zYXx" `ѬHf뺴,~xx6\261ц;='和ui%׸5oyUQIr?~A_A8l|@[?eѨ4J&$  _%"dPT5}fb> iP:sʁq %vLbd?mxWgYq0s3ms-CPX*p`Ý}Bc*[}:rv< Ee\C{}%xˏءe?qr[ g=8&,̞7\ֈ\XGFLUZj1T ߜpA:g䵉&Gh,2 8b6RDQ1#Ke%! — 'JU.`6@ ^?[qƙGI=?Vkzڤ، a(xxc^E^#8VJ)5;N&l ,1!<{OxR*dI<4 #ȩ>潰0ݹ}I(;>1oU-6 .iVgʵ%Cհ0rTgsl2s ԓ]1\/ d?Ep[՗-|Q,ĸ]pqzP,\P CA:r+i}k/:D|HRuOpo(?x6jEm"q(t bPEHH hB^%֢,`Ab˧2xbf S8j;Z=~u+;ڋsPonO6;E)K-jx7,dJ5W@vVU.;y‰jz, Z{+}7Y )iAR"03>=^>liwcd욦ƀzxOFVmjK;>gc On7ѿ kQچIe Mܳ2 *M6:_]_ס0X Bݴ f hIR2þ0|TUDQ_-BbDRHadَ]ҡ Q0uRQWTs2hAaҸV@!BDN8=6:j\˾w|lWm"QKwl6hkc8.i=ޖC^I =ɿΝ]+z~~?4Mq}j хY$8}*'}2_P/kWUҰ', MS?]\G,qQAY:Sipc|*I-C?Q# 30X\EKV{ bc{]X˭u]|cB|Uo'+Rw=k_ÐԽI3`d0F ۗЃb׷K"Odst&Dq /=M#'VH(gEք؅P<" 2#h.jޖ f)B!;_= KMxAiL1ME4ȧR.#C$xڦ 0jXG\Je^ll5Wdܥъ<$6Rgs7_PY g]xo .ߏfnkp iB84,>VKc̞W*((L&Vʥſ|V4mѾ4 Ȕ++sfTy ; zx\T. }8:gmNj{g!$v&Km,"m7;Ko$-6:z{95=NւAΩsuM.21 _"Oc)]2x)f6UX,:}WDEOyJB qTfzԬ wwXΌ(!{I샮Cv B6$0,U;LJUў7A.D@#zofGVN\\-V>Xٗ?|'ZvuSM!u7#s~Rc-߂BskzUHgvm&/xտyNYFunYd.YlCi޽ $}wUYK b'\ٶ=JBGqKD[g!x z7e1}J7X}6!C|? ,24_lzV'aZ\fmx"}!Ĕg!$! =Hn9oI 1j{zH6ɫdt fF[iP͐B.qСɇ"O}[ғEMF5RS%p4z䛗5l$4˜6,"fr#JAJ-uJu`I퇜GS I&V8//.H P BR Lg=4ԝ kC*lxtc΂ɤNy% [o}.S^.$kn92.T|&258Mꫣ./e@3m_X ғg$dO hemP;[p`71' Q׵8a]f%s Oz@vS8޷e p $A\:TdiL&}Rz cjT!^>{ 2G ~.(|plC#rNeU;.VAE*dCE!cGoL:jB )Z+fF[՜rIg}Hس@C>vSas'Ǔ/%,oSvg";]IA$eykX?~9D:-3h"I ( gQÒ_)G eVc~{ Ahk PNbv%IWm7![mǪ?D F{I:n^AC9!?L]*w(TKG JU毙Ă0p2Zn qr?_T[yiwJ?.a}}eo p~oީlM$Ʒ-a-BmZ-0ة+* 76:Z=%BS$a .G`K7QzAC袱-s{Q{i/2id`Khf?ҊIk۴HCd;ǹU2,%á*D3QMRA%՘>^A^oa:ND<'Xp/S_ˊG x9ziva k׎'(o[ (Ho[pӚ\'Wzo]B :B- k RE =~%v#^x6Ny ,+)`` & VpSwD =>-~Q®ኦ6gt"g5 LM8:-v fȉyMZgk4]2QlEΨdZvy7~caS8(ie}|M/1 KXXc8+l,Kp_p$EG%z˴,4 V+WF_5}Xxz]t!XwvVGH-ӴL|8u0]).O=$œ>$']꿺wm{hHC \IdbQ%`Ki͕EԽ#{ X$Zd! +Kw 6LX$T #DLTW]FӐتc, ?@+a]],w~(xak+봅@}H\[=gi: صA,0-;0ͮ`;2 6w`C2P II(T"VW ^cT=Tt#UNVK3:HPlt<890ܥקlv +%3C*V,ɋ:T-DT(Bb!#L$.7MޥEQ[1[?ldgw~j6S{<"a ]3J#\ᘩ1-]9T.}ӿS` H*l f[TK U'x=IX(3X5Ieq%- =TaD]+]ρ8c%~Ύ$Kݯ?mhV{0u_[(`,w.v-ccSdTYKk@nM%ǧŸj"ФHA}f$X~/v}L9LH~GYdGzQ-}dYI`%I^| ɵB|Txj#M"Rv&|z8 Ca c%Wo۟JxB}ZZ[eLҲܡgކ*sfsV=dv; oe=;2Z !nsײ=%.f~615 }Zg_P<ܥ]nB,}t3c W@,  (n+poIEf_T$=~3{OzYWbb84`HwFzP\ N0zX V|CNa? k_N!+VC c%(=gpưQrVַO&',bc^K-G5Vu6: lV[gE>MX0I7h+n_3x}bhN}7G+)(rUv+ d.%uĜp,zPGmN\;ptYE'_Ư\s Hn7ELݫ)rx/Q}H^n5uΌ_'5 e*J&c}%dS #!4t_ |ɯQM vޱh]u>gRb˼LŧC;퇎ǸG 2G-~=vUHfZ O& F <&;Ȥ%7 7 kra۟=ßaW~t\S/a6oٷO~Z6d33ul[7)֛$55Ș<,dFFXdc Dl1}f4e,1]cX`*a\; 妐e%!.%O-JGNbQ!sU2V@MdR&Cj9Yg_&璣qQ 7ckNքdT!FP6IԚSZ䂉F7]1@|#;\}x{$>%ZG*E;lFah>0n/͊]8&mfLn`l)A )\/ҝU4-?8be[¼k u/px˱m-YzmZ s% IZM`Kt gX\s>ZaEٷ+~7W)&pԐNS}#ބ ~"a&f)k8W/xLMͭd Zc̫{wQm,ZN$OEڿyiG8ETP>PHxg$e2UCbb +9ѵx, T5kHh3͝]5 8XJ.̪@%V]szwXd Iп ؤfՁpipICUɈAX\dŌYрd4^E !`El*ی&kP*%^zrFqێ(AO ʗB( ?|5:\(! Ehn5)h'+%8?7`L #{l$kym\ ۏݠc;c>r5!zD3Ъjth>Ns7(`]VXFEXd[#7NXwNLޑu%t𬪦z[+rp'i͘X_!}zQL`tL1%}3T"42Ѓd$冒Ng۲aF {(_..괞=FR|?X:=khkزGY[7A8 #Am z6Hvٯ)(ͮ')IX}2KXE461S9MVV&p=e9/WV g6@^:qN[ ndMsm jx)b=խ!s4_ ';.Jcj08)֟mk}xsv0{} {Vdn$P1T Sh.9܀of6| Wmwa_ ȷ%q6F,)rx%ṝ(~S;R:"]VaX<ַĪC aۨK6AdE#Z aP+J >(RKI8vuf%GI;z_}َYr2-k@+WҘמ>p[l7Ked|I P"7rff؛gpL|#$Z`N;P6{Y3'G3wk'99I͖~q&"ݽ٨+JcVѧt/;Oo ;" f!C&.BU$61rh &˺qL.k2Yk XM<g>[~h!YO[w-{nŊKϱqIC&%Yoo܈Snś Lb0!hyzHs(MϫJiَrP{(|@B7o4Be>ʢb8qef305AW¢Fx]$Ho}Vf>\Ѳ.bO[ͦgtɣT/r1Pc{H?xY`i[_<}q?(aECeM j^.FZ ׅnƦTZK|פcnbßX%2I@"YJH>I, OG| 6o*3Sl> thM8[ ׇF`^Lѥ BQnymϷv*dߌWOy{IqZ$;߭(r"b$nY,. *ib薺:oTUAӖ1ۀ7`/!9ޑ& )Cj+^c^X7~RʎBO++{Zy=ihXH*!J\&PkfmA*9^x:RT|/RD~o'鳸#C3Y#ʳW$=>{$7^M^SX=MEX1.LSɇX-AmNi^d{b_lGTM^y.W.%~w5BJ+85l VЩV",V(B Q cf/RLi9]cTG ub&]ҕW#t.ï\*iN~xgKdT@uS``4FFZyY1N"JlbR]PHռmãuGSUy `<}1~.{CEV:V7)5 7 h#8F,wM r7W[WIᓮTQk)M4X S#ZE-\%=%z~ZME@zoXycNx{d?A ='}kD+;G2ZdE- :OH).Sre`[+`D@4X*1",\_Ws (͒wKϵ!UbN-4{ NKUvb>6//H^QFQB4B 16;0I4>(鷛:"ĵ] K:HLؓcQ]3}s:JG ^|2,t0ޚ(" * 6U,\~{mKhMG2lɘv}m 6ejbBfb;:p)m5C ne2PpRZk5۩($+:sRRm5P+R"Bx=Ed`GM ėH1Pt%;XkVFK;RF=YYw½cc@|gfWu8)>a;7HϱI\=` $2 Þs ˓|MgSXNYKʔ H#Krw&S!йZB;zMPdr#])2$`hj2I-؂# $r&r֘[sP (:w<JtPNܮFOM:io~y.mr[/d;Pō|EiՎDėpy禳usa](֟ f&;A!ݖm< @ {*q4ĸolɶ><&k4(KBF!+nxU =ό&$¢nEk28$AS}:@ l( M:]䫐)@SH*iFA#Me*o ~G +XJ9]%8<[9\to I6n(M:(6OҠOY^=ēBb򇺻'*n Һb@m÷n# vR˄.I{ﳌr>3Z cP"#1Jm8XM.A&\:w˴G^ċuwmZb^OnVH~xXkauպQg V\X>p wCcC :Pl K^M$*Tzv+{SR?PWٶT$۸^pw\pf}pmHkV}١7cԞZ3@6 aјr12m+GpO1kVvb9<<(M#{!HCڋ1s&j, )7iwTOJrvFN#;:p>5)@xXJ>3ΞAX4}䮤7wiC#̊`]7.{7^"]\rE/1%Nɥ`"ί;W녜+"XC GX(F&ء`eѫӏ@^Mpm4?FMD~R?[͖V!x>*n F`޼*.ї  aK@=j}bEh+ABͺZ>5D@ q*fv'=]8i4wqBL}qW=- 3G zڎ"R%+=*7{ɟ}x8"g1hi01V ?R ⊞4*:._z⫱FrU?uo..sSk>)8{xTE?S&+"6ڕ5 _CЄOX`)g3Dda5{E׮?"jOL)Roa-7 t{l4BWȗw23YN a55az.=(mN@nV]j6?Rˮy2ঊd~͞ShPW?A,=Nڣ Ԡ$kړы:S;x!Wd&F$K; (ՓRsa[E3fхK2xNbOOrtǺy3p(.Lq21pRKUΥn!Mm!qp` R~Mm8XJ04;9n7 399 7KA)G8T)`bViҺpcĥαdW`?:[Z|2N6g",4o9 zK=g3_>k lOH/捯nfu5nc\'őNl̈́TEϼN0Fɡ0ebiTꃹ DT(X4nmFzx I>_!iGQHD Sk3I^H`tf/1{',s+!U̳x3tf\_RR HgYb`׬Y- t g nh\.41Nx9c,JHpFtA薶.mk(zx܇0qJ:,u-<jR0 SWVU yN$h-Р;@?Bh& %Z9d՟\B+Ԛ:4ܡP]dQKЮg1`}}ЩSda<ݽqI՘\9c]29CN\bNLS^ЍNcJh6lgkPa109f˔ܘ4_(o{aV9w*KPvJBvnIL/8IBƁmK˩ ]sᩱpA/elҪVPC 4Y2AbKW49B3@;.bbMDUNz4Hgs #|N $4 p.- ڴSv׵U#b2E QaFe\[":<9SQ XS`Jr`ĮELv8KUCvR^\Z]kVg~$WR=4-ؗxIYLI?~dWex>zh$otdu״wgE%l!dI%:|0]룰jUALm 42w 0+t@.Rb7ܭI@A_hit9X<ʓ+'\״Cąlx li^u3ߦHwtB|bc>0+ZojWZ%k 5o!c ث_Uh4L2oUB{J[uY{&O#oP Ւ.z^xf%?vzEcݱ,'f#*W'NC:^F(-EnU$7_]c9cD""ՈW%EϼmE m)뛌̕_ dd"_g}U>3vuJu;P6]Cq bLsUXn~﫡e08Tdd{4u\$[ܶ-XB1X?GyWɄT(NNY-rv\2JrZɮ5w3;[Qnu#)^OǩயͪZ ueI3+ %Km7t5)#hPSaEy )~;-U({:"dw>9d:{xiD\d y TH'P d0KڧO4 +oxnڸVߖሯME{I˜dEr:̉-ɹL؃F4w->s*fvڭ;ٝIf(Z3nxWE$z~z!Q$W ʾDp7d#vs&m=Ryޓwu@ #Azp"S'x岤>cbT,+(9qf6b%Uq; ~<@0H#TN#sR X%".QTs$!PWp^I/jb:pe3ǎc)<m`s)hmiCcVk $TC.y&hP E+0/Q V:-Rq^,BwE@Iӽ!b1A/ J?k@ ) d!Kނ [cA+eCn,k{ ]S\gFf CüwP E,w?v\v5CЅ p{i|/ kAZl]!l Rzw <{y#r5%QZ}Zn8PZNcf)u#\~PJ_i#E1tpP!)2-7S 0vozS]DaIetMydXLޜ7j ߠBp׾rWK#GpliM|SC $;\9aUl3hDڌ_Go7!]o؄ʫ_]4ίdѣAT+ǘ^ʝ29^?02KQe Z;},.N7URҸS%JͤɟSĜo?œxkK4;êCnq i69 !MJouN̉lGoW%Oe !UB 'vp"}\c>NؾƌרV{_0CGu\cbֱı#Ey)d-l1d7q:.~GJ_C \|_Lgx9?Q}}6%! qr*I>Ao7 #sϓ/܊X%7\+EVnfeDz8 {@J*[giLw Eo;=]8( :kjdl:|>ձ ݇~Hk-$(9'}ŵJ\4A .D BtBR]I_9t.H7r7%ȂdOEq 48%F(8Zq{IJi; jc7x|e.a5WL&Mts RfG{`3^ˋy^Sj[1lX{ ,kfafdW~L ̅3XoOy okWjQ>$ݺv"# e\Ș "Thbd9($ko(FBlhMHBmmM$þm  ~~Of{~4w\Vws>W 3C))ߢg ̍͵ {'!kp{䲥95cdPjDžD K@י&oP;F#*YU}"Ϥ4\mxs'6uj>3@ #3uuwOf?eg[zX?%6 78q]ps9M*{` nɩmPcm\L`;AS'~]1U`坰iځ"4198j}Cy |5?fy}5 1fl?25)=\y ivG_8 0,S{m C=})M|kOk ezxKL% f+TIcS?~9 %DWЄj>y);mGNk#۩ߔ(HM 0Y#ifdߞO7&o {v]ip:hZSgPR.B;zܴs'.zg \FZӆ0`طeWHha&Ӫ! y,9$cjO of0/=&$}!`5@!)EXG<̲(bgK5\˒4gD26ܝ:l?5r| @-|m$Z sqؒ &4ki8 4=nұ$0}Э#XIy+:,^2QUʹɒZBPc|tJnR߆6[ -qzl)5&+sCoTY lDPIS!@"io^OC ckhv>3+.u/e[XOy3wgJٯ|9ǚ;ZיCtߝ|F/l ,ZJ\\f椘zRݯu5k$ ]{L%^j<%NsCnNU|6ÙˡAOT\`> %"}_q7J}VȊWJzy"*ܰϼ˝ΡX^8}[O;9XKyoa)AxejP-z|pRṭ-̓B<^e^,'7\²0z$3YګdxI3 u g)CL >a9^<7rԈuБsnHO2/[;~"C4{?ub~MZ8 MJۭWUO=) _z?C0NF5=6 ΅w޺H |:d`4[I'z"t+~bx2)voQ*6` Z nP^.[{Fk\mOo.!.n+iȑkB[H"bXA.;_@;p 5m̌0*9t2a\[)64#oYkMEMN7l7G֗ {7zT$E3ydv>I%2+w7 YārZi_dV^'D,m6ECI2|)yLp_RrƭNSf2#-&Q4j-l ք@yeVBݰgv'e\^ߙnȤ4mq6˟Ûf j092 6DqTU;܀jʨ}tEF$D}m\E^|ȳ<܄'M \AzMc1o`Zw@qBNBvA ;q݌]k;jFHfI׏ƼgefɅwP_Rݚ$Ri CPb̋UhI.=M 5-GsUa ?on1{L1qOv_g|Ϩڠ{lvF92/_N&Rd+5ѣ(3IK9 Dk0' PVWJ,+Guo|Cg]){'y~E%߶6r beI~hi:ֳdrn#&*Q (z;&6Pb@!%j:$b5 Rwhm/qGϓ=RIsIG5[j9*Z3U yR)xk _2 Cu_f6"?%Z+Y0 0a&0ЮO"S  VduG9`s6vMld$!(fw<-5edܮ/yo.?w ME(|Q?h čI<I#;nИa(fN 6ʤp'aJ[7ט^]M>lHI6:d0W]b}+.[~7ɩ 5`+!gSɷo=%{0f9O)@ϮPkILЕÎѣ:+$bx2+0?뛻+҈y# 6cmJIP[e%MQX3R+cǾ`NjVea0!NE]7g_I.&4Px1saD^#)P<JWA`,.0$S;lPǰp8u1Ojen=yC`FJEIh j2n ČPà)|,J2>SMvft7aVDV𚢡KxF5cΉZzKDQc%v _E'NK)Rl Fմje:;-6t_uG2UWO@<>(] Fvx*yc_S>p] ['S; x=)dJj p.g %`e\㽞sBUG !,lV5KH-9"&k7<<; Px EWF2"~Z:5PBwX=ۺu3A]gيLaR˹ tBq(B#%<ƨ¤=o _dlV#I/h 3msbK<4sԇvbLO}}X`Ь{IH$1YWS ):.6R$?Ѽevoged{NW2\X8LWc7p:̮-"|z Xw} Ɠ8e*On֥=5YTDc%,e_sk,NNǦ~6" 2ϹoZ*7qiCk$<-iMsG382ao H'GKHOqW*aX,?6" 0KV(Jmo6TBQM@+X#iSchQXgnO/(q>v^P淽!cJ}(T6O{ҋ?vc0ԅPeWYqac2Dý.|n-ΎRM94geŇlA"vLC-3r1 e& !T\ʢY&ҁ j7Q|/VR+=ϩOmIT;TNR+p:c fcL'7/­7j9`2z SA^֛# ni ~1.QU({?N5Ϩ=l+)k@$&/E]̵g- $)|Z.a @#H$ h&#A_l!)wX\T"NlИUm<1ir\Z3P0+@6JX'_Hpwa lB6$ TKs#Y14E2#@+&AB m&m/{:!Ezg}H^aoįP=uxȜ_E9_Y3g>9% X[ϏA9 *2Wr!}')ڳwtڎ~Yo"&/]Ap H~U5!P3@hZz#>j%L9x-/kU.H$j=}F>kJ5T"BG93$N&g;KeP諬/7m)3.h%:2nd~mvIel;hۗkbPD}rV?Wꝷduځ#'4t4uA>9V;P͛cp-1>劕GNLkF涅.A疑 ZI|-RW?Q6_}Cnze鱚 1c&y.D&}=_Y=1)[`/ ͷ2 O9r|Y EHw*MYpCEٖp|D*in~@Ns8:fz/9knH>yl(K@"NMqZ?zRʜ ݋ܗ0@Nеq 8ifgJ^KLULHh=K{Oٰ-Kz.EKh+p5jXӄj |CNDn;%wѽ!mntC~~ݔ8Q;j\q t%6 ,{cPE?ydM,cl|RڟiC 1ͤ=9%v&niQ{rR-ML`hIQ[5D/CTRivc`i2l{$npG7"9'&p_@6VwNj y_եpH?ďMfL81\R3LXnh} 1MPy\;n7'«zh(ޛx`VěϲMEOJWXff=puu{KRInR*!CzW#ߑeLhbKimcRI uHjw}++ه@# E/ۑ5˞䛊@6HA+h8h>-!G<F_{ev*YS9ώ.zI!;q a M  yqq@MUkUr}Ӫ &8J`D>7 luT0&i̹޹r+Z_ 'у S[[ 9 Ǧ=rv| J2Krp {xԵ;:=UiVIo)lla?ENbm+RHz,ͤ>4cdg6}仗`3~=_wR \ AjHR8phɏ+SyWMQ`t> y P@ktvs k-rkώ1LWs:~M6"{Y\C_mH2:b𕬆鼄Rik~lo#ڂj uc Z:ʁ9ۭ*Z#.d&6 $Nť,+]k*[w5W8%DZIwܜ nèϼi4ܢH43? EB-fea\ }':o4?rHcφK ]:#WtD#!b2[];j01f,vvJDu| O8* H{U#"+HZss[t^~L>=9`t6uuKЀu/8+WNǺ2O8 FbK?:z,~)s鎺2DQxpԬ)kPSLƻgN^ (LTq,q.f200bp ki=unX(o:,1I"d']>q03N+3ʠz[E_!ʽ5/=W9Lާha"MjÈu OFf3pmdp7 զ YI&,sc6j&],|BwzSk0zWZ#fl] }cӃ&?Wûjam]0 9*wf`rLa: n4 8h!A(1(a6]l=`VD+v⿈eep0 J}Tŀ i4tU!]X5 tx{f)1$X}S-fzK~ؗ⃵jġu+E>i(! )L2؍b4WpJ*w23GTbV0T}aEJY,b5W/snX MJP @ bl3(WsBӋ} VF.> ϩaźEqY*$ fNn[H a"!AWUݝ)\O~<ֻ۸7Q6MKa+?T1>wp-"x뺌F$ZV&y.QwLrX<6sY_z Vx{v;FV(eVa=Vfl{]o(tP.-Dh!<IQ[ϩ5oN@,| >se^;d,q,'TYމ#nQo /pũV#d3H~;m7ÉVkW%Ä PүD Rp*@2X4.N(A16MUtbKTǶP^i#4#2hk@il( du s:B)E5Y mBISazB-(N Ixs4]%kLf*BB0r<1@9 DL^!I\ df˺E<Ѿ! D#0JAr~@to;nW Wؓؽ; p}:_ G/M+9%2dy)JĔk/~Gmυ3{ 6'7Kt/?CfaX+'(ďn"x{i3!:}J?Euh"§c[b8Q= ʾm?|ء0⛍.̈́)$sJ2|PPfxru?Xw(vN.RU(1VP? 5՗7+zΟʪ6_ 5d3jz/[N#(Wr²V g`vˮ)Zh6DavI+Xj%aI[۬Y]KH#[ qvSt,8SǜӾN_gv) zmj/PkD%fea?+BY.ʥ%MNuKNG!Z}2U%&;G.]F::ʷFO#0;M)f'c K](Ã?Z4djULZ9X*yqkҚ88+ft_T!}Il{;ADϾ.r>+fMeԽP/tZuP~" 3q*lj>Lg9 Xc)0],!I]{ ^g%|7߫ƫlrDžɶlB"j 1 $LٻMSANKvfz_K-;ckKV~ 1լWC02eYߑ($ ", 4ȿ v'!|jA/@d+ @1cR:Us-59y}N-4N %7=WG1DP1hBIt@vw^L= @[? ܄rj\}Y#k{1#8Q04j! Gc?4 |ˏת袺eE߇<6n0>H7cTV^XՏhEֹ• Qj~,+BhM ]X&7UBwmvŭQZKDlXl8@XJމ\3(*WsqoHȨ\G<=.{ hS@:)8BWL</uUb5/<C@(6zo2^#umO5 \\OFi /EKercaΥd$Ӆ,Af5:T72jA@_Q0mJBU}Blpsg_9߃ɱ^P꣱ )Hݼ$ZBrk#Բ"89Im|!4&1)L2).f@[Em^̺T<^nݥ;y\3aiU$Z-[`[~٥oǔCӕ8u&Y< Kn'xW+:w-Oe5ziis l.%R(+yr,2։JA Ђ %xH|(d/hs.@'(}JF˲}.۽/lšL.͚qŌGwn!mDt[d%_8hv'd+ ]wňray\@e&, INR hl8ySv5=MYJ$aPcQX;ϯ'iUۣ.FIN1mZa4J\蚣 I}Eտ+ؠyᩂ*?GmPQDt~õľmEOf(Na)JD]٤N)$?yp}JէN g'Jl$g[~rjܳ=n?q+7K|,WԀ%my\7> @tW!ѥ,{y0:%A]F9P6TmY "bҗ"w'i$ݗ߈bZiw^f{:?<>eS070=ѯyVI؟u%{1cJWG#%-o dmPѿٷMkv}ΉK~Z獆d/7G;)c[r'>7{!O]l̳<Ș .;v=-U4뾘hJ%q:e[xA0.ClOuʀbAIg+Y[@nBu-j#cw2|!DiPVvca'.QދgnH?Ow30{zOn yByv$0%՚cٕQ0GtO^[R'rAp5~Eʐɞ|Tiz{q]i8y_9aY1ܚϴId  W>3\}NDn8ӻ0"v!r )U (JʽeAa>hλ:Cng-0Y4|sYJ3'P6O^;Af'ᔉ.#Z~}5Ujr{q1Ϭi_ZZʷZ˒ȣDBg?.khN )11؞}?l1;?Y݇C:q}&nr<>PSI%r0[נpDHk U#=du:o%I]PWJ@}xeL=IU$% (79\/YU+*?5ⴭ"ԟAd_uyj2-:$uĖuNd㰪ה\.uН)۶0ӵ,F颋,3Vؒ@s=mv9Zlֺ)V_B`WpiSR3|)ePwURH-_\4ҋd]=ynt7Y] #=6E`k0V]/${%@2sN(LC2ǝsR&h 90kzL^~`6+j]{n-@SwffN$x~#Ե C/`0;qg? 'dJ6m\0FMi^F}#{Y7VYa-B —o7!8<0D؊̻oϕ?? )D^Ԗķcp@Ւtv..Ng9C 뿼ul[HFqI`p 33xq#yBImBUva."jqtP)]&oF-=j7q˦4$&Ǖ}1arJ0=Τg@]SMBӴ.X[Nܩ:_mDXw(QV qx$Pă m&]B'#8S{ 7$lh,`82з`i1D'Py~?8L•>ljB⓵A*1S<(q J7l kdJtC *jZ:dlXf׏ÙNzSEy ہǘ"43xj3C3|YߗMÈa/̢2?f[u禡ˌȟ&Us`;V#m"bEJڇh/Cc8]#hpN(v3_=G~[ݕX翺o^M@$; (Y!)#H˃bЛEnFyW?},:' Bѣ壳K8s>2)>u5$x3XPk֐$ǠY׼.sK)%@9UE.m[Iai7=?J ]M7@L=A8GYZaMw:i0E-Ot'JN6H,]|B9sg6uE<,WeՔŷu7'x45}TŽV=v$}>À:SFrg^2!< uEj4|,S&הajo7XscOz~wZ̓3=&#~@zVwJȤZCs/;}m#9ܲ77u nO 2LA#N՝'I?ų0ha|0> ^c˼/E\TwF^1i1}p ]1Q;\0%y-k5]tj{<_q* {>Mo<,ù HD*ZyCZҷnN?G,6л!p!2_nPmUo,WyRvvƶԩ$%́\Dw78( b1,I/`ϘEЬִI:ːEVeL8)%˧Dulq_U֨v/Ͽ?ZB' LOu-J',(Sʃ:R z4u w@$zw>O!2Wt sdjqMME[KiH1ұ[!-Hϲ=vX&#(%ZQh/&>hdBƚ(v;0UnR!3|| QLo rߘ |e" ]UJ7-frrpNٴ :xcz)O˾L1cm|^IFIUReK=K/^ 86TDYH%vϡ+#$kFmZϡ1KU*ϒP*EyP ;3!iƏo CӼzf5rp qwЅus형R#2u#E6l٘ 8WOT/J09gߥ(r:9,;= ެt !::4Zc!~f$^2>~+{uKX\TTU8lG&-zm7 /\\M}oܐAM{Lf6SdAIԯdǘF$u".os~Yj@!PYY*wbi8])ۄt;o=g-SA;<;0+je`i[RTWFVbʳ:'}[i&k#@ i}&N>aln|Qz +FYԚӖ&RF^P (^TCRkv)@n҈ N5uHLhZ@=6q0֭lQ|= Kt}4Ol^Usch?F{6H KP/EmBQ"e˝4]lcLoꮪ>*ɧwN JQ{exbps(oJe  *RUT]5I Q" ,;J\CZ_Hkc~agRm|3UWϕrH #RdQC2pFw;ɨ7MJl,wr\'Q&R̡FHr7b5£Hz$Vz&@̆ H$#0gdJ5A[5 |Q:n=O jM*/YQV$\!կs<4_wv˯P&P f4$C ǫ ;RLJky<΅cN'E#٬$2x*}~LĂPMʝqc~ck$$Qj_0ב]h"&*)*mKF0u:kc/oM搀;^jVmkX7(69|RHٔ\3dU*aƮ2Z=/(U#./Sֳ.JБͶD.T>%O7 q1]saj_Zמ(Ǒ'Mp|=k +Y|v櫸KCu#e#AZ>f4ÄngSafyCr~Hޚ1{11HFn :J3wpcO7J7RA+_^7RjX!MM6^#H+*S_ k5sN'jVk U3#ix%XZ+<$=0|븛xgGc2*mOkEpP½:rlr$Yt߫ Np6̹ u4[+ֽd*k8d}@t,ǙGښ`zij|+q`[P5rV]ihSMcYOgNpt. %}SszʦE/MI$Ɛ25IXd+WQf4hhT9?ȫQKUU4{ ;u0`?[Lв.N<nj|.ZyG.(& 2$8_נƃpob;Se܈8/XͿZITav~0 MQ}}/L4($qLV`BxKw;?F$Қel|N6J8itby!h:S+W 7{&qs^FbǪȱ&dL5xU!04ه=\f_I~Pg (>&KkaN"U =,AaM^w=+lks_AtkmƾاR'MYv {>-U![zqO1T`]Zs|ig&db!N#/MwI-ŹtN_~wVO3u倎3?@ hm8دڀ9I \2W0\͚{Hj!-ж٘nYZ?սͶſo 3#UJ5w^7Y}_Os ig :RrY N rd]׊HM IuSH8 6D cDj3`\;6wa&WBB^.@$_9j6yRaH*&(`81)BrAp?=(Rf/b'Y}c|8cm%y[0.CwQ<:"@(0y:6:f2M׭ڝj*c,Qv75a;6),z r eΰS]R#-B+l8_? d)lyR )8_/Ө٥r)y PFٷYΧ \J6YrXޮ||*+A‹2 p525mlp(œN"D,c%<{|5+OOدKwwjݗ%dGa!{|. π^* s߽@ P7̊M/. ,\,\dF хN$0%̿.<3tyɄe9`C@ŅVO`tmVw,QT mm>U;q- (K)FKHeFH _$>՘Z7vAIwt>FlrZSޅHouZQʧԃd '!AdOw|y/Hǘo&k _qtv?-4 o"?==8}g6`n-"CbfDBL _~Y}?~hB6F$nŰt}-~^0&׭AA7'p6&2kWc5 xs7k?׮O;{0;!!TG1ᑡF+243FE&y&co?@uZ5f%(Q$u<37y.KOLg"o=481Gb. !)P*}Wv۔XY"#3!LGgN_\.,s< =rtnte}L L{Mis? z~% vb=v8iih]a[~D7Nvj-i=ɍق[Ĥv3]xqe^·K<@)y|C!"SB5𬓽׃F&gPU%`ޛ wSΧ#Ǜ .p2W]\hˋdzpz.!z(&76P \jsy@u^.j B^g=1%r 1Tyĥ9mD05b»FDj@KJ F z0D%2JrkM< paXM:r5R+r#kI\rp3j::D䉇*sf|0(<#۱wRÈt#,6$nL 5;|YVIXL#!)I LRP-$X$%,+|> fo,c/N*|ѤQj@úӪT @C=jwNmUx`#,] P K,gLn-|R Iف{UT{ԄŮ1PH`4CVV]t7H0LUߩSGaɵ8;\n xA܏FJF=@Aj47a DFK(c.<lX2S55z-fAR*EvN\ϙ9uPbN(܅yk),<` *oSmY};q1W7 *ՍN2Sެ>}Mw/x]OnPg:ۛ(%63)`+4+!}ViD$(ljVF&*nv@)~Q5z-BJˬuwgRv#w-J~مL]+E-M9{-` ͈r30fJX GJ`ʸ۰MzNe$_3}<nj4&n1S v庑+uUOV;Y,ߧx)dܓ=`LE!ji{U6R HƘL$sZÄC)s9R ᇙ%P؈-1תE>iMmmH6X&Kcj@/4ۿƶx/8p$ ~Zqxd5̾c-}aznGx)2TZG5I,BhZDQPV!`p\ի?vR_M;"MCɺod2Eה*2^,WS8D٭}Op30<9 ms! ^$Ы<,MZR}X%rg_`1LIS0xhTF{<*LߎכK"ް|6~n[Dzn/RT!߮DiϪdӻhkXɳ]Dٮ(J:?B%mozP;yOr$p,Ul*rRɠlp*ͫ򲆟D|K[6;Q]h H],5_(bݶ=c ?8~w[9cˤAļȓY~Ӹyﵣ*-avq&qzy E?HC4wY: 6fe) `S(Vksu]1$lX2?󉧏͔Bx JJϱ$þ3ɗKj!Z4i,N[@  xl #!(7%4?R-{` arll|עKڥv=Jy>UCƫGpJJxҟvl; !*R0b1EBk("k{ZUmҶڌt.=Zz2h";b_$Ы.YZuCr4QKҺ-T{#A:B_3.~HS:+)<ha:rb֑1aVt^ WWи[O\ZUR#Hqz7WL(ңc:0?w8+;B'+t}&|HeS9H,m cO+V6sQXKieCJvxg7f%Ľ--8a,*QVXٌ֛._0 +p}(&Xu|zU%({CT#*V4@(WZD@YvFRwc7@왥N ,q˥`ed*@EHl[h{5mT3p;Mu%Odd| $$s?cXD*#~(b 㾼uHA{0[~˅ohcKՙD7}Y%LWy*Ha̚0‡F[*!EtݹݔhP)y?s| $W wڽ{Yez2nHBT{`f:&D7}J8ҔGh0W])̭2@y WQcĿ"{X;->[:lΉC㔹TuK5cY)hdEД85EߴAI^> $&vjjmZg(gIi|붏_i 5O}n[ZEb`E~i$`;N=/q4a9! 4JlR*W=`1eV_݊*QnI)훞‘JK&l$hMے(Z{~`K[=5qR@d>۱f~7-TߢEP/_6$P|25iZ XfH)fS3^&T6K4e/*!m@(ӓ* y){6辒.}ctfmu}L8s=čL:I;TjdQ+=>Il؝) 3U01KzҞ2n@i B/~,_ue~LNWy@:=ZWcՒE~EeQ$N>hN*"E^lF\z>g\4”-ܴE[n_6XM{#$Vt?qm@RJ+z XiVDrU2lFzagZkdFuZMfI?BLi*QPq9vffǦ*8Kr 82YӑV[qPG\LV )S,ՃNo2 e"Q4MkLԝ{Wg} vI8} 2DGuYC张LpĽop }N"o{Jvi{Z^?kJ qvtvj">@Z~r]`DΪpcJ$հ]6sXE6lkcw30Ik%dPc/kj0v`ԍP37Do[/ kvSW~ z:I2u ć8΁%s:q<@Uye! ٕDF\Jr&;WiBoXkxh}^-^ #"ΜqӷmlN޼/as%I IEmO9z5e>hFfԤ0^T5vxGJ" Gwgȁ+*LY۪w4ȏhI;՜R!Emi& Q vkg ?I $\4&d\㋄1!ᛮyɑ[r{ZTu!7#Zc҆k $-Hmk9)&{> g9ϓ8ESJ^ 9K,N„{<wT)S oKҊ QT<؛a.[J<[y*zɦH]d|Œ` ^~eZ~^or]X,\|G^Z/y*"h"JPWF݉2\]%}Vn}fzxD's!p[:n}{`D3:" ;8qHn:rz0Vж6zsOz<G0LX/%~0T{<2ty;Gn>[)FTxO@lkkIכҜ8?1%:*ƶ6Dirʑ͔/s#DP@nq2Mu>z 嘃tYHH{$+¤noaޥ|=\3w[;PW2#K›"$m{O26^:n Į3EvʶuY" $rVi/ͬG#SR=oͺy0nn_i24OR/fy2WZBc[<^n|:q+kY{ve, }zqg/|K9v0:J>B+{5tm dԁj~F-pdef u  KMWS)dDF#v#' *=W7&[eY Rg /D1wDMi[ƙtef>"w uSy6pR0yf} HWӴh) $>|[trO®}\UW>^d\&O@v :L8_<gJ/IH¡Vs ;MMbp࠶+*am儈>{r'*~?ΫZfI49vs+S{~ ;_*6[xn Nr<(=Y_sh8E`ze{0zs|uߊcRG|k^*Iay*1^h~w R4t_+o9![fEG $3ID;c˫Qaa}fKF3V-r MFEzzɛZ7'*z.TH@*n(5ѿpBMYؐ"LȤ9ŋ5za3ʇ0LW1(!ya]10>A䢺3PV ، {MU]J0Er-4K"nsH%&Sr(_Ѓ2\#vmj3( }BFfI]hqdn,`]~bT}z}ciLVd7*[wъ}ÏwZ6)ͱFQygzEP|0m'[h+;~p JKğ!vku慶bN|"jqܵvN|R 6?"k=c+̙ YyG(-VQm4^@vw TFfc OJs0:$}Wyxw+PcSZI&ٮ9p*8 a{Nb+!QSq]Cr/j5',8]'mH.!6^mD_9ҝ=,۾{~ʆLt+$kUis6o7@AnX5aY7 % k2"NO}KXg$-'z&ÐqmFԁY#zHWKܮn)TDshϊX.?Ãfv`bee,Qwq/4yeיj957,6,JԅKp$lR8!4 !g .ZZ/hc-m'.:viA*nH3"$HQe8JA>;';2$<ƪL Hy>n3ߟ[ឩ ::PʩB PIO6O}6HfM0q+G\ NPzf©0Ղo}w RSKI]Ʈչf\4JL㭾Fq UG +uK"i{Z -i"bs 'Y)jR)|̯(i(!A1H,g]( W'U 5.j'S$Um4~%e(%5 .{PEUCw5'ɚ{B)Syϰ+<2+PYJ{nA-wcYG1mVfR䈳 ݕ|Ҋ79z,`buLPC5Xp(Rt邞uR~s>[ZR|7"ptfm߯gIm~s{j) @Öpe[@~v6Y'Vwm>;R ؔg@4ɴ- ;iixX': HA G M!9:qu0+A\2$-ݤVp9[NnZPŵaw0sF1Q#Bz v)9|oh2Rݒ%PAOB`G=xg=)(Z Iߐ#>, #>{@ 0LֹOrGy@:{fYU9hwC_Omk| ^ z B E5\(b3'sSoગa=N ړEs575+ܼ-s`Ӊ1m,J&ɀa.dLPLU =}J9y1\&SxOI Oȕ A㽦_-= LA3.A[Ěu'Q br 2fb"l$kxA lg:<iTn^p@U 6bJ1yHJѮ{tn z@LB$ϔkmm3r]T_UZǦuB3gCUHUDy} ;nxd` 'J4 dgB"È1ܾSTN擳vIԝH(vBh*5HaUTm]\r[Wm+h&$Vw'lT]lc RW.[m\Ll. UWٙ=S݋zYXyK揂u/{\TOpG[H̋fnxB1ssF !^@3gXqG"k(LtKJ{%? [oBLS/dW Xo_*o62փQb^ҭ;SP 3D ӻPQa*x@lO,iws(ڋR"7ó,6q@yh^٣;=M v`ATvO[!ODM^M"}n$I"7KT+ Z-6Ğݽ4R] =w/Af/t܂+"]x4t7IgfvR<v`8 R [+-V[|Bز.}~LMbU)6D)uNH%IJwNm9oG}qhHfű;nd*}sz=ݘ*#]CFaIf4UXZR| L40n"b~U#&$y#W AWX&L1Xώ>-P>1rhԳbAA t"a·} {0|!t2ROLV#Em/:D$MOYky{e`!BvM'ٵYm=Ina(VyC!iJ TtļN~i@SͰl 3XQ9 ;՝c8duY@[D[y3H]o;IxN3cgP9-cOJ^V"^_nwfM NFW@mtyOQ!Ivۍ&{ϖPx{r`N.F4|<)PpZV'Ug.TJ2j&_AWAURT٨vri{y(q!W_Wt3sZ xj2 H?(z3Eb2Mf9Qh)餴| \j8+3> yܗԭszs5bʑ{kP6Drplݥ܃mǑiGw' ~oQ⶞Yó|t2@dJj?4gK "Y?1N 7ӵ\vgPMd Qā=;!_LHG즁O.yXJ9hS,lg(W?IE:ߘ'21rte-{YCCfxRР$T(mC(F:9%*ƚVw"q[%\˱<REnQ4 `(^b-yyJc20§ܿY^!R`ŝ{)ظqm఻ J44܈ I]}R 8^t,å`EA]ⴀ$z׹T.Υ0]S{]epU_vq,<{ KrGerGK2?%ĊZT D5džt@HH-[ #B׫xuVt7.Ė$I갇cA ³)ΗV8Oh8;2vYy&]7j9 lO&=n6imlIϝ gur50I#6ga<`IxW_W`z=k<ʷ9:W`Ic.X2|:br숑G/U )[||-EJ1R0U3m"; X௓=sRF$C')I9&I5&nat5D*@5܃3]Vpߨ6wfLjA"d>~mbPA^1m/d9)`6UƝl<)әvk˲lret{>d:ZQ%=`Kݭ/3xlhݣ̝ܩuu#n֝9Ss[`?E'UDMn.@?R'"&\T=cZ<92,AEOHdxAgԃ]Df5A+,} ]3L1,w_c;b$M9,V=WY&~m=O3-W̔Op 2%H`dڿ 'p,b&He~BњGf` 5Ė cI_Lk1 8Er fW\[7#"6+m$o7IUZ!ų9Lmˬ3:Y]5J7%X:CxKA[@ai[N-H$aScr E?0n_*A LKrZ?fjQ1%aVu1V}w(dZӖ o'>pŒd=Ÿ-:?_w_ מK=?HN‰mUpy?M-(ʿX:E 61P9, 8C!,B u3_zm4 0hD/8WUkF]v@݂c+E mrJ/e ! W.f Hj-et w{׫RX5q)3~gwO7?W8:>&"3kZF!+#e?UCp,K%8 {x}ѪqyM%JAS'_uy^Iom&]M+$ݲsΝj8 sw[zSؐnpBq" aw(kh8h:*6BʾɃ]nUJ` KS$`ȫX2=KlJb?fb'mkMDeq"Bbݭ_ u 5ʸsG*bݽZ2u4 9@WWQ @.'vN[ ZL236yƵg;s?>;h[(0& 6k>ŲM@?)ZaGZJ)o8=?;)z*n(E~K Zz_o2^XnvU<93 is,Ջcv\?U=H%a90|G>{t_&M.fG+RԿ Tmn0iY΢ JL1 ֩q@XJqIֵNk^ QTDO9}B}_+I#YiV@RiPMx,[G){H@("KOcPnG1ܜ6DQd@9-Ã7!Wh DxMJHZOf)sEm!>' JTE'j;l(e'z7^7^WO9#@aR;bA4wfxYR g& 5![oGKGCJq= '4c>"vVu3ӳ0n}r*>sLJ6̵^wIe@WGf9Ѭ 1RWHӦ bԣdBFe!ш2ؘ}nų`f0'?xOXD/H*uӔ4kD}1UtsmU. 貵[AG;TR,Wc2 mj$9Z8-XB"r??+ bJ@A&1RhS7^Wf8.,y[v&aWDXIM~x_2[.x]Aق_ w?TƜv W4qE`9pgi@܇(;(F,ΣjA" Eo%EƣҚ 7CfmT 5dڀU#3Ok)kkT3{:&Y !C[y'xv@Ms/vM*MsP `Lh_{!1vƉ 7;B疢-<#J$v䕩zOw*'sX6Ub@jÄniİs*~n3PCAlj*3pЅ(j˰W엶Uܛ6Yl!]JXGK?[^TgtkۍojӍI@]{0!Fa#שr6W4Wuo E,ސMԏ`QBcSe-#)OWt;v~z( fY Њl-(Ԫy%Vp)Y_WK6_,6%A$Zm dJwM">Ug #3ILrDFVZB]Ulɏ^,>  4FJV2na+JA_AOU rU᳠4.8]0/m7W0|N?C oҰ ^6  S9-T ;)V &XWg ͒گ4( ]aWM>m 8%+h]!zy`W#s̡i~h$y?o |DݛշJnRti=&T^Y]LXozXD8Qm0y<n"S}xWmL2޻%1"'c. $6'aKGw8"F iU({K`&[n-ޞZ_%?)<: 8n[NšJmr*ep}bј ̵' yJ`tR4r^ݧQ"=tyG9y>Uln_*dDĆR8\z50](ŶyN3j~es*S[Cp*6w\ģ+ 7K%Wd|ِXU Âryؖ"![o,vjTuXRU;bȎ)m7"a L6r'b.}K̹!FLu 0hp.ĝͥ;Ў]40|NUixG2$]8实 4ߌ 12(r]3oxT Tr~4<嵮IFgޝ tGnHOWwFՃwM)ܴn ;vo;W<$2 MFKrVYNX!ɤ"٧̀fϧF O!YM`Zqȍt:3ȜH-%*(+?V|; \+͖o_nUr)45~kaLsiUF &WlEt }S85'k:, B@+8b43} y!z`+q[z'kVל]6.& %Τ(a[n穡I.oV\vR-'2B[^b<-So862xΖ^עW9xbHk2AwXi؏ddq- %uT:~\țhJ c~Մ 17w+V(HfJe<^|0MB]yMZpt{}Sc#}34hX+-٘ﭔxSh ?l9cu[.#:NRnoSK)3E_o..)dV.A%Ö7цr4H 7k|;4l@3@_Ea#6#-le*7*MXZAmqοEipL"9b0ȝI9F>M./~}cGgug.LȜ>Z߅<|r@fDJ7un8z1IZ1s: [r\y84V=G*p;8ÁfQį$T?/Pk8t6_d9-[ɴhm>Dim.y~,7WV.Z\c_@*?uTŭ7_iȰ/".VlUܷS7 U;b m#z,׷V-8a m j <9rqP#]zM鄰3 ܰY*VJ%Ig>PeRR_[cԂ%/ 9XP1-{'?8__uAYC+й],\) ̒Q4H f,9K9A3Gy$=;E\?um ZuקOU&bMA$) reS"s"U?`T6'`I>~- [H.(U?VjU0 /gi 0:Vq?PU8PP)plaZ oEf1 f721¦ .fCb>+c}ԣ cEa"*XȮ(Rvvčӕ`^c9=8-3U~B"H8>zn)>a(l&),d9u}y(E_g o-ҕ\WW[h<7!!7/zO*}׌思H6~$O YϦ߉fW(eN^P[my ê5h _n-Czor,#'_ӵ%aW\lyl^@X`o0G5s}5|O%qVbN!{L.0HhC,<sckT2zݨ&dHR*+Y!^0em:E{qrPrũbJ I,Ƹ S9bF'EW\`dnťjRمmr]Lae}''D\YFW7ߘzͦAŒ4k辳M.|~"thA]7w-R-N`!hxpȍuaHl^LS{WQ\pZ{ܪn҅P𠝄8sB>P!jju+xY]jY"Ȕ0Dh~-cF}}t\q0܋+׏=3Mm6,)8^ ?u;mū=Yh鑉tl[ l& S>FC`=_=6MmֻJ2~n`6U`(l B'@Kd\6s|^1/Ý޺rt7pe[ԴfY-*bc"TNf "1xhmP{ҔHbC<#>;{VçyX|x'&eϪl`ξ_·3ZI =.`BFt~hۭ#{]pB;ZdU `Mk9L Vl91?B#vVg{`Ux-oyHƃ!` Y̖HњhnOj0+rP(a /cClu7?dw 䟒`Nj[pbwQc"/J&Wٔϗi\:WJ%e( 4_7 ( }x̥ѡ7-H* 9c/8?$?r1.l9IZg]]8\պc٬cMR?XSmMq%Xh9;WG4Nc4DzK1td:w|xkSMKv?kG61Uf/Rن'Ők+/VUQ=dH^U^0;5Po|PU&,0!!pݏ 33Ap-)u @)kxb5)jK$f7_a`EglpU&-jҤiG8^Ҙa ?Dv['4Kh+r+ʟhf ?`oպ2Z4%*gȃ꯻m9Ÿ,e`g7/xiEwfiY]$=dJ?Ү:$ ONĖ(A@~Q^kf~+!Z9 i}f1vh~޹N]E ۂoaDҧt}?i <[39<$6$,%1G2yxY+R pqS櫑ZvFk.;%+5ѕo`եj+|iRc6GѬg~mpWik|,kZ6qJl很 ̌Ia=/X|n;BbmY|ҳɺM|T*XASD Q=2mFp~EDۗİ++HivSח^-|\Zo~|uE/ /=ǜD?O{ |mdɴeGg̰^cǂU_砿F6K3}4I\xX!޾6!vAZLjl֩])ð%..;6 ᫀA9#4Lbe`[?l!Ƹ@\7*$|Gv;vknvAX^:MW?ïv[F;Ɍ¿9Nj4w3c׈EViwj#6Log~tȟ2RH_Rx]1*FV!k"UBgb( t&Z\t5\Zv***Y`&d xw=d2̋$6VkB\d Q䯩^Pb7$mPXv[7laHcέ֕SXZhZӒ)fRGY; ?9i+wB_Nԧ_+ȯW{IFQ6WTa14R;=)ѕ?EH"_?9#{ Zm52K-N.$ꢽ_1i 1jupߘ捠Dl]IB~xx=(Vs7s->H•ۜM3K9/OZǘ'ߥ‡p s`JX_SH z‹i#bo1@(,}oGW֋y2^_Ki!)Bf1ZY]jK%?]MR`DXIs"/5M剽o )}MSZ;xィQ`ȂGr = +7['*<"ӺE lMQ*V,R(Ȱz9֧M}Hs*k jn~nnHpY3N])`ȚpAӵi x. ч 1Xhe]S./ǝri  UNwdqj6;~i^ɦ]$rC #'訕}S5 mxB>F7X""OkNO jG4cnZ'lViaq&bՋ@01Albo4d3;6 Il>[^ޏ$dWןʉNd:u} puلFEanWN5Z*`l!0έH+"w5ؾdLŊ#,>$BA1 Xw#<&S0i曋ux?q(E앭kXZa"WĥLJ29&&/ 2ܕh(yKHıS8V{ +c|v[3%t@4Q1@DyWRX-]lDB~g:`H+2,)gEbI[2:Oֵ ̔Zie)sGZCR6}YzHP|r&>9(Ƀ6=A%0V4ԮН9٩OF>X,-42 WzDzWQCcH165P?ΧY^A}fn54B_ <}U?^b/KULK-TM40RNN2JǪCba|6I*\yKvYĥ&kTCX_FP`%<'A8~}V'EtUs@ լ=FcK#?֨wj[w~j.s^oߖ5DS,,<4:;mɌV]3.;\ǚyq D/uRWCq}Vkl%tPuժ ::)<,T~byc}T2Ґ7*-TΪi G?qc0?}2b SrXR>o3PJ: ]:AoSD*5%k.1re]'tcPټJ8Hw9Pm<-$"k(:%N;ȈjөXqz;OGfDqRW1܏ JtY[vh:<;0-V>;j4:OבU=|s#N&7Y$fA6<΢}b8 !1 uǷ( <0(|+sȒ_vEIm=fM9Ga\naK2TJg#ɃԱdRK )y7@oMb48} P׈Uco/Ʌ[jC 3f ߲̿}}c&p GP6T Q@ f%3jTl4 bD60oƺo.VnnZ \ꄗvxn™ Ŕ5CkѰhW`=ZwL VY۰|7S/I" |lCq68pjtdE5;@Gii< q}Z#gk>m{]Iҍ8ޡSU}7M6x]4oI-F%,r6#BvEf#<,g/e<ɠQk^|Jn9H}ۍCͨ Pl2Q+G72vn)解zKS %VNO)AA]3$嶂@X\UiF4|s5)f5J%!*|欯&S 8|=&Q.lpeXi}!Y:O$ɝ@y679~y ,͔vB$8k2L#ZCP<_I;HB"x-QƒEL1,E1/)ζ)qc1y3bgazpENVWZ'wQ( QA 4q€zLS<9H#u;҆]YeP\1d3h $A:ko_,x ..[ S/,X$u2l3/m$,E]>1s8-g_\;K H@\Jnp9- :7¶+Qf5V}'G싽s:y

nNiؚ3?*z,$L`֛ q γG%_Yv$:{vZlG2cf:=2Kh9O#;j?T8(y #2P57ZM;VWԑga5WvOp#Rʼn©Dztc䠱'SF?2#U?)甯I,!!1ݭ["Qy,ۑ[ cT6ȭ0з}fG|]"2^w6㧪;&6k1 Vkf1.8. KǐFN6\Nfn 93Q 6:Rs -aČԊb`g_ GϮQs碶Q(hM]5XTp"W_MNK]x{Jp(TZʄŀB Oa5!|m;!B/N2~7߃X͙KmG7|KS?P.~b77 ] B1&v4-tR-(+jQʴ[ʊrw& rBC[Β$8nzO*U0\sp쨹(AP25ȫޣH]qߨs]eYbw;}Qr8HmdmQ AB7zPlsPNx#~P۬@$NḡڸʶkiduFoiAwFݕ* +.HV[I&x>w ~P abnm5^䗙Fk|gO}+ bP^QV '::!u P" Do;m &hJ)#G\V XJK{4xͮ1&Ou3!iԱ~vb /%lmӿ+4ݣ;YTn:>;ہN+ Rp%(o_c`;ܢu7>0,8]!XXh-r'M3'$y23+)'¨İXC_r~\ƞ:~bLxҭ}e_t6TLol$W@M,5q6ew";쮈HiU%_,ӷ!>\/z&KNJbP Ȼ(f]bw7 >ԼttVg'h[OJC!a+9:{ 5)9j#;8_pzK 7FB BPB /Xş@Z0껚ˇxN߆!:/}X3k0z%bTDO]t%@rT)P[ÒuC#M*f AGjk{ʔod3u_c܏u|Y$ChJނ:d/qWvJTbQ$3Ȇ4 ΅?d!INDׁѢ24ݓsx|ДǀY"b72zT[YnyܾTşۖټWK@?vix䱽m5|y_m@d<i/=.'̳ǟފ3tTH#c <)nݡ1'߳MųW|^ľIſVo#x Â&OYUg?T);!>1ӵX借'{zi LT?C{Q5>'\,@IMT` PM0|uD- +nƇ h`1 QMA S[ImzŢ)[F$[nof5BWp<1BIb@p.J p`S ܡ HęmFlwcD% d́񮨂NX& yyj<Ruj+ ~_TY$ %)Bg"2@<:_7}PzN)s]V>agN EDz'o[.R;8H2OH9i/5\meF#znjѕ 3t=mh?+ yqՉSA&3P=`} /K.ٳ}*u+o F!u55DyP E0E=+NȜ+?&ͲW!wJYV=Fp~P"0d,5͹4ʵU~k{W3e}1˒__( 䩐$T! oLP&qƖ#jCig/{ߝ~*7rl#0eS$TFⱲPш|{άnU` \Tc tY#xP~K[U@*( CFEGIVT3eȲ?+ 7v5nྎ$p|)0uUhZ|ɮE=9y SzX"C ؙǚer?nrAyͲVsREŐ-:hl pW^fjD`w/e 2~q=te\,~`K:IH,Us;-q.ܢ;?C 5\|[R YАCy:f܆ ;_wc\W~"~CEhUsF-c\+ci ҫDm MA$*hdQT3?Wt dM;q Olj 'Gb,3; p}=V12(㔝ޮn"-&O ֛Rx6x5z++5}B̬RwzR-5iyHSf3 3Y.3U|AE6Mwtyξ ۯbSeVsRaCb;lTv2Z'jtJA6A$is˖;Ґ~YN$uy+膼>a&h(ps#-dA?n"]#1bډUFCԜ_&%!% E'1/`$ԑwܡIQ_QR}k̊"7QY8 >I/Cy soP֣ \KiVffzJ]a&WH"MtvO8aHN [lͲ֊mSwv4"|QMs3qL-zm/ dz{d r|d؛!pC m;HTi'52[ٕC;4X!+Bn ͓bp?əqdM#0W=_b$ly(l6Uz]OH=s'.mF%yhx}KTT>PWyN}K$DT[Iΰ\h>.;KPPk&Gз<TFds2! G % iE.p'K*gFfJ+d%aJm|\aBjSkF7%Yj"uTi0סfa5mM|gq$9)ؖM$ѷ^!!̒pRyGΑ2zd^Ⱥ'+k{Cw15rX uWNX `"@C&^^rS/ `Ze<3iLI[fa>??o;x~y pNiυ]7<{ A?қK Bsh VfjRPn!>_"(\-ʺv/G޲X[m,Z\޹)^Gwyؗ`(8.[knpk|m.(/| ϭC*Mo\F*`{q1&eT?k w C t]y՞JM] SН'Aqv0x1qiM{0nazq i}8W_L_j*-f( F$30S!CI+ t*=#Pv 1Q+B^Αy%Fu874q㷴Ϣ@NUpZOEqܣϝQ68m Ğ×2a"[dy`k6m=\OcJsJB/u. |2̶$Z39Ok,K`f׌'qA:ӗ(\߿]'tHP_n,V#K 3ɯiI = vƧ :‡Sn.y<>2e&83cH.^(d,=q*B<'zdɅ3=/j``?jCB9:]2%"` T~(L'R#¥VXlc By4D'Li՗X_nX؊DfL?Gr)#܎\ iK$dk^`Wm b ZeIjڵV'=! K7ՄtFv?jbֱX3Mg*OlH)@WXc!ٛt~ȡJRE C$_.ZWs)T_89sr3WN8V hX%ѥz_ ӭ8WںƟOF!nH1,WE@8%dx7FpѬ QtuVbQ٧ (#@2 ?2*UH{M"|Zx^<OhK24q(9C by̽pYZɊwzkH'PmIj'& Xݴ5s6mB 0v {^}//RܩnFs5 b^=*[[ڹ߼f!< 9M+*q G2}7.b4"s:]XVѼL#x13nڅIj|XdH M.lPE1GHgA.QpYU qG4&|@O@$f\'-$R@{He)X *[saYA[dp7@ݙu}E=+2_Pk1[`BOJ /KoW+F5Uyq l@X9ӯX3ɚt^=aw}DiS;K{4AQ\>=?-fB E!1_UaZJd* ?Il8kvԌ쨿߹?Khc Q?oO; נYe_P+)7(-Qԋs5Ǻros-yk?pO'G>z?eO kujN!G>*a宻x'wR;x£6M { K(ύ:0lm`Ui'RXYs#|#KT`Nc3i+2e=;')YzG=a :}UyKve$qrً߷i@?{>Mnb6z=  4.N{ӳdM55FͰx Ӥ7F7_KO6/$WTY(@>&!{Eй 2޳lRl,ZQ))~\+|/qgM(hV<'qւA7nWnN0a|]M}tѾ;-*#bqPEUf*G.yAQȩ%A..W`hS -wVo6Jrg l949:3K̖*Ζɡ 8Mb2HһDKaF܅U"膎} Ѫ;Qh}Dm撁|=,% %*#珧ۓm|5Z,eEֲ) d0s,[Ueʔ _O+I + 58kw *fۥeE[*4 Ȱ%07QFn.͇򏓃sFk_xkPwVt+31O̯ 5 }])Y A`/Ӟ쪣hZ ݥ`h,?,K[vZ>۩;W#.I2o;ꞎ1Cf[wNF&i (mp!t=w*rUJF zdd $X#X&iu65M.c:بD{c]g[t6jYҟ2!ZeʍXQ%rڿgmgiq|ўXA#\ 4F;N22_#~5U=ַ9Q1;- < [UHZ mB; ;D >S(oM<?×&8(x G1Vz=VdaAI|h0r,~R9ʛRy} ƆH%[,ow:~!˛=SQN23 l2"s^Z.N,ܿp|dj_+4y!S?Z$"y.]v*-q4:"X4zDs;77e2[b ̂EI4ػn`wKO(BKnkݥWņ.[2S6 bi o^vV M*GlCk]cSU6jˀm3 P6X#jٙxr4rVQS\&?Dy;'xaD:\aW6(7žOZO3ٙ&-[}w L8B2olg$}QN*3mY8YdF T ( zBŔ?soK,愢V6>S\$ajH%7Iþ9(+J,-[p0Ь\QA:ah;w!w֏c#I+dh@cG.P2DMGv9L^^Sa4rMO]5#M#GFk\#*!YY&z ._f/(JOROA?Pzid<ŀ?Y1J*|5Cu\u+{0 y U jt 2&R ꝩwVO׵5( "AN&&4<_4QlBxOC'ÓE8bn ѐzdd?`[Zp$c9Zu&V%ؑ̐|ɖA2Mj ~6`UܰBV4fTx@Wa[T ?RBecX0g$s',|nnJ{uE|Rtb2K?}QdZ]nĤTㅐ03 Lđ+e7Wvš(kw)Ai$/=_z b:ҷPMu yL4ԭqJxi$>e o.ӷm9~; PK-~)?)q-E܊>etGbgf ݵYPk1Z'@ҲV)z 8ϵwoiH:t$!Wƛ5cxT(g,ʩ#f}E jDf6pjVTtR 42,޺ف<>u={@Iof3С:O\ tۛ;|1 Z%, < Oo}~-wgڒMi77͕xŊn: 4MFJڟ \b)o(V1=y #hzN/V)v } b)ps)= r&5ۄtTر1#ꔆ,rZ"Svv*|jt 9r$z;{k d#--ĻTPDҏvإx5k{[0سwcMG)EpQPOPչDnZN^S=Si^jĐ-m?.M!b|>RVsoʩ #lI,EF-HԇиJv*j:3C@Hmθ n@r2b't* wG- 'ۺw"Qi)$yߟҾ1Ss Zv6 &+4F;jgEu4sBiovŅ`ZB\Vxl ޳%YeuQrN] S"V?ӝ)~PQU6w)!er [ik|IB:cu3!/5@JfwqiAhW6q9V[c q=[ b ^k=QeBKD_U Ҳ$PdNDud9C$ᄔ+ #=+Ez[^IC7wSOcV "#8Wm[O3!MV$1҅ȭy 7Uf)8 93ݸ2X𡤹 ]ǭpbyA‚td.hTLOٜ&Nn ܩW,@)#F++p b`iE*={Au؁_=c$.2{"!u LJp;Ʒ2!gt޲RUA{j6 ৏L) տ^:~QqylȒ$u-#۪|t-jXn4b;eՔ?7,Q9 y]T!K 4d_B;'-CF7*ĘFtFIGh2e"\Gs-uE_+R 8]EhVѨ@&o,@/ }B+dk:8hUaP{;#&nkH LjL$YF>!Ccƻ.DNjS϶SW!ٗ._)̏$smΨ70mh0˜h ѓNX=Jez @VIW כI]#Y,qI"F,HN%'.t7Qd {IZO5No*aylgk(Kذ-AW{í(>! І%n:˲iPa&(M(p|{_@jn| 2%Xu+gEչ#a~84 S~{RwNYc~PC z&1MKrXK:OM/ ݗ2;VrU"iu,kJ$<CduJt%?d)QKl>i_7~FHS:;B9vDPDF5m ]{ AWio=̀ iy.s-/Jq:>ӭ*U-3'|Re9Y(BN~Z~RL.I^mvg04T,J+NA-/A?S BDX٫ngtdGr«߳-{Iҷ1S7Tas_ey@(EeҵhZ%P]DuCX`SnvM_9SWJ$l ,QWŀZϥA,r y\^TrEd al$]8q'NOEtNx&]֏}K^] jx#!j{P]t^"d]Df'mӽHW̷S/{fMòvIQ E`9N'נ~NS%;닂oՋGuCbޮZwTk`!A)x7۫UV*bAJ'ќ239 R|.|fn>7&3ϟ9od9w[~L-|;ç;,>l;'coI T! QFTt*M'0#ݛ4~յC,Nٿk>;JR2̄ h{vuA̬U՝6=J f6e-e>v6!ڽjb{[u]<=Z;!(#KQF?&'H 6_U]y'틃vs{kQ:2LߡQ^$3Xj-SáK !#*a<]y,Y|pm-8xrq%^Zi%ɺƍ!G($x+Zy^{ @OG篂r<WY$MӧJ) <:8R.P 2=ƛt/|5F7oC.˸ʀ_n~ s+$ lBY|-}veTm j>z P4-ĨZy,f *-SNŨ&UUE/gK&!F yz3/̻DOv\ԫϊoJ՞ZqS]_%RzB>P_p_'l%&;6Jj /?r#4gq\dU1_30]\oH^ɏ; i=b_c03P9~T]1.(<-kI1exƒ]QVc~,DU{fu0ھf풔!,S RƢ݉~qԽO EYC~#Ш04$d\H>@@y,,P}|! %5]4o 9*0qGBC5nCa> lʆV}0H*u!AZ<@ed{lI"D(Eа~MӷQݵF^0蚖' Tz7u|q6K٭aG[ 4͙ QQ7o"sGvOBP,j:|šFkPwB(_v++>wsg /M ysQ+o?)m?sd?ib3".b),;p˴xJ9U0|U? 8ywh?߂zW_]yA|ZL_AAlA{!nٷ9hv#kF 8 Ȓf~I5WmrHO@xeқA0og0^ SlxjIcvkp&=n4@NhxRgz_l0<-("ڍع :༉kE>Up;yPG5:^؟2%BW)sa}[ȤԩfDVpljl{ ϡ~(PעW3cs{12M'Kd懾2oCVU 1O-i7m˴cŰau=:BȐyCF( +>rnϖ/G /XPoS ΍iW ]q/I,/%8u?s8XK ij+!Eyݿ#k*ϔ|Kc]+)!b/VBhxkg+Z^P5CW>ъ4Ywf-(~r[nT7(&fvBULx5UԔvp}چ_ /@c-grً,Ky*l q_E NؘXE.8+P: 4L)OjZ/\ۦ9AQ˂.b5nƎ{whz_{X(^'Y /I8^P=!%B)"b^ o0y[vx&# CS6[0e t{a l6}!@֫AXHdf)k7fxNPӎXe,B=C >D)"PWCG]nv  8笙YDW|P<\^!6 B"ֲ?LN?wڴ=RQシ;dê]ylHn;vѠ=htW3>ƚ:B[n\`|I 8 ,nAU#=?;vI"] Ab5㌜r7+ ;CrW8ڙ@SNlxʿ1JV=Rl^Z#Vt1s$L2f]Qv 2.f@PMH|#Aio!o(y ,H8i:Wvz|6I1 alU4BՙC( v\s6$| 4"l]H2iHՉgZl1Zhsۤ-~!:lm~K2DMW%[qpH; PX,[500^/}UQ\an?Seȫ:7jFe4ziCPי%}ikͱkJV8IFV6-&0qt k)V؊N ?;PX`EM~r.t;|ǽ*Wv 2%`mC|X?LJP 3߬HmB!l /xM~q:>>if,k̥M@BՌ^ pCTN2NSe[zptlI~"fpbr_v%;a p7FR՗A.~3JTQK ݎ ,O%8%nhJrZ i.k6&Kb}[S2b>Mi-R>UFћ!sA^!кDjD Qb?0y28VʃX15ogeT^!IIO|_L1ӾNy7t3og&aiex0o@i]qwx![ZXFY +IgZ mK,8vrjw[Pb ֌[~vЁNI ~ y̵WKrjq岿=Zl?;#TsKZjH FVoy7%=$E*[%NR lbB$82 {峯:N]Юh\Relj_̼W,e],xBf a>K/6|}K61`t U?K"ǕӀ ܺF O;.-]Kf}w%v-ʙBkCsRsme/=I;Y(oBC?xm9^=Xcs[:_Y ݼL#_D=08FzmނC Q{ih tE1:_FơGK1ܿ'i~uq?z\.c$OMgW6)L÷/w脜}W΃R{J?$ۂ'\8^82P,DGnl`1LZxzH!ađ7ń9W:_`Z랆#$'JREGz&_Ȅr%6^`L #̲"*]2\Kѫ:ɮ_B.9H\[Ěib`.*n+Z+7JM0@B:q:v?9]McYSd3lO帡\Uw&?khr"M=AaHH>v*$ bƛkV%# ^1pxב=;ܙġ5*r1{&f -4%LfEr *+`w[UOea5v!RS7paK»,VO%C1 dl,-ar[CSm' 0`S׼vnVOР =w=309Ѿ9s`Lr_AK`DD eayLqR.B&vǚ/=F t=WZ/SukN[4گYؖ&詃N@=~<߯9$* + &SK7$jvAցXlnpg%"lF.K+ mɖD.6BRMpVk YNG)MH@C$ ϹezRۘVz o1-5x_6q m:vrkFvU;$<0wfQZ}3`J.K>ឣ|6-UE?!)9TҸSbA)m, J^k"d;OHe*A'ZzN(dc&"Wi3\OܾvnXW+z W}cbNI 3iE{-G׾K Hs5ńa1؄LABlאjس?$ԍcc,:)6 mQ˼NE jX?|Un#"E/]KYpZh]ݼ YJ/Sfyt{d%\$^}xғB<Ѽl 4FGUg.۶sߍV8kCcl4 S=xtp0xkEAaQ}(AY׽ԥ́Q-ޜFV'fjbǝݦlQȘdm. Pmj04ϕXoyr8evO(1/Zf6@.uV6575X ϙn\$CѬNqЛk3FHA??LP` YK!xӱKĢCz1!nEN&I a9fGx; 7aTaQe)][@QfQg@oZ~uP\ݥ|hsf?f`9D& ?٩9:=;3GI8)~)곩:Դ@ʑzy mۆN¿eФ?!+^ވP#^GQa,٨_'h6p:kvۤߣa,m/2z,1LVgbɢv mHp'Au ٴp?Bq!7Ld07hM!`>鋞l-~ͭ"jʋkz3)v? VruS 7SC(6͌~^ AZd*+ۋQ 0KZ0D8-2E58 ĂcS#]_鱈D՜^3l7&!t#=Eߌp5,׌=ޓ\&(h]0 ,QFWs:)w-A**`70mj o G>y`Y:_-RnS!R/JZPڌlE _j`'4ҥ.hvԴ%k#.( ;hVHL ?cu{!#/ݐWKdYc%0 KJa 1/|'X(EWG_¨ĐK#cSeWB.{yņar./0V7(jŗo2AyZz4>kƖ_P܅W 5)2{KT X洦݁v gYp[~[u_|&25e捞(eMœ^xC*ozM6-DÌUD"rF:bX_T!;6'c-5|^PT ضB~b3]_Ԇs*1+]u|Vx_(o͕\9{gLxg.XYx(tBpC̫0d@ x&{KdG7UL5| R0$5*c `$6eY=o,b| k< ?Ty0ՉmQZR brb]i4 u֯^+q)YLy`u)Fx3W6OSf:Ob7a,$u~ $өK+|qRεPM ,=mieE ک{; 7$rz2Bl0f79 ҽ1eAVN-X,A8l*ø$c'D\CbR^%1*:{@.Z@oYDTN1oS.Wr3&ۭjfjg6 C-g.$A0nb@}Õ$ (&% ?-Uf?=(f:R>wᣎdZ ߀T-[xaJͽW piU̟;V_GRP~ VVRAe}P,J$x;jnbuA+|DrKu# my/Z@0KG1F6i0-Ckp EKkM"B01%ON4sD?\$錾)0|uୂ!T@4]sdx+0 A]&:"!k.+MAco,(ݻC? 4/y1;h-('" 'sbըk/4]8dm f}iu/KjbhMޛ M:To%D]`d`/^?y[!2;f{2e#zEq||.}/kQgP+V3@OD~vs|zY+}:9 q_(b3}{gؘw4%)V8Be{: k-SۄH%q?&~e>-7=v*STF+! 2"w;wh4DEkQ58:k{FZ]ޞ_EC7# ${kƗl'()rWS =M=K$ּ%eF (R_X4Yp sMcٮd{4<ө$D|͜H%\r8?'uJ$̔>|"-,t1_)PnS8W!K n(Wmd|qY <TNvBݴ$= 2D57MOdk>+"9>Q+)*5[Wq>[ J:5N%A ~TNv g~fN UAĞ.̩S!nʞJ |D ÂA ڞ`nR ^o${Խ67+4GK+Y(=ei[c}vtݑ+YQK$ܘ2Tq?u'@Q̷;=;=2ԎrmiW9aāC2A#4{މ*hQA̡P 4AAI] i1QcQA9ͻ@f1) G$_0\Ŋķ o须Y`v>ceB!lp&08qԾU> }(0vQW{8) q&/Vno|kP󻇶ooIL4ڤnT-XtvT%,Vyev Y ö1Lɤ mr7) ;} (`M:ݽG:J9_Uu8Q lI.yWB~nտE !4g\A{ㇶ$Qh/޸o?$?>C4wTd  ƕa>30b}!ZM;[|l1~ٳ[hcQy6ktS<v`I Qk=d3ipB.m ,4?mj5eFq &m ZA Ps91"GiHH2ٯ F`HseA4wP)ɵFܳʸAT&dx;7p,Uk-[c@P%yz;ybo~ͷ0e3 O^Ճ89鋏`1SU`-_؜ %B^Un2POu$ y. aReHIbN`dp[XV:vсNΐްmn1z$*=ax!WF]Q:5s^]7#{Ƹ7Hׯx6t[͢cKNR7W%^H{ߧ"1^_{loIRvatp*s*4vJd8]$+UCdoH 6q`cˋ|тkVy7iNf- {>&!? (>H!A"?X0fr$&ƏLS@r+c Ө;q\hj:Z5md, >U3 "@r@ߙ-%ǵq"S3^.[5ߛ-IrT6xDDsM+ѐedjw@ZB>ㆲR2xV'9|ȼ4J\|i@}R!;|:; xqsg2dS& WDK9 r !unA"RkV0!)n3kd^ڕ5~g1s|a̻~[Kjxei-F3auan1)Q|4l./@}߈,}]f :>~^r36Tb#A?Z) (Jo8{z܂ƤHpga^p6Oz^iޒT q 蘄&_|SAl ΀$X`hf'V"7f-bӰ撐^4 !q{# {7EHa> a*D#~X-JB?pDxw vaej|'w.),K.sشI-!%O'2jҲ2]ʶ[+h@$"qmD#t%^?$Aǻh78:m \fZAJ_YUZݳl_?eBX#]mP+cj:cu0wW< ]?1j"[Mgєz6io,HXrh麩i[y\j< Mx`Vm*TmKNԔ˫q]xeyfiRUkQ-5UH7같{vJ2VAݸ̈́"7B e d6|T ~㒲<phzT3bf[vǰ'-?H~QZ.dE?@3a>ۗٙuPmŊ0?c, |W_#> :;'O tJuH2޾<4be~ڔOW3SYV d&Y{z'e)8]FrsЕV ]1>Zv`* AW)﻾a ߙ(c{dM;I<`v[^8Oa6=VrJo7&k&LRKd7: C6* LD@O#ӕ맡߾W Z.G .jDIs<I5A,xYFvx^Kg B˿3. >$_M\+S b߉[`UϽ AIЀy<]ѥe=w*&ļԔ~Jw$l=&4gUƿAuy4z(#r*1p~ }Ӝ`a?U`_z|6!sCsHl#,\4 A?Vc#R-ju: w~kiy%X xwuG~]_1 oun-e$sm Rdlۍ+lN?z2MbUZ uZD&-%B E Hi;݌']aSv}Kdnbׯo~r) 6 0m\Y>0j8m~Bu*NtW*f&s{!+B9$/;  g}Y`ἼvVYc8:31Ҧmk:ʈeX-NSwvu>(mSLxK~7-NdNa7 3(!Guih;< \+tj|ڭ 9̉6R#ߍ?L 6Ar6'RڿE ;+Fi2Xa~6$9z_tjxL=bf6;2A7ϏmnչuC!P/#=b ]ϭkbNJtA2{nK(J1$,2oXZExK)Al>(n jP,4qb Ћ^\Mw~ЌWxMd#r2Cyr^R뀌"d.H.D:(u 3b85 Hdd>kCMjDAl++<]5NN X֙U8̯l[ǹ9#H|腨mH-E}=`x=eh|Ȍ}.q;A!cG}Y҂nty%(+GVE-.je7a\ĘL;/h)t$)\>Ldh7&_ Laz㎐n;> .;M8h)J[LBf7Sk>| _PdhczM!ݲ5Z GKr$XTLodnΠZFE8 )2*bÅ9ل(K:0p;1`E6ݼ4aoڣ,ɱgiWP1gx90ć~BGNT!R)'7Jj7.%Sg:† 1M|@ߝAqn/R{U` MHS,uǨvlY;"AK2:tQ-3|2&ΎP$`o (D^pm sɋ>֦odKBJ'JY ŖCV:a4.Ÿq|Smqf 3mU[6,{H7;5 XKT⅁%WY30y(?yZ>O5ԭ}wc}̳¯A[tL*k{1L03Y옳 õj0H:*&ndS#.6&nwA&.nnuӭ<~џM`gXu!Ll=|0&wq9d㞠3_F#6Kd.C7mHWWXJ tuL*@'hi,> H֝RFY$ FۏO-tU`-GS- cocJ3@2.=uGf/hָE;ލvk(I6^.b| e,w'Ы{V{#' JLd@P( BǑ\6eCs%]od(Fx1"/;f*J,OM(yHnVBMu4\sE,9uѿ{im<bţBNb[ѓdqNm7LЗ$zA֒ VXzl I-O) M3Y&P V=:203lQ7'#R3#QL)Sspw~%qȵ Ӣ`Hb[x_՟S/AW#*mq/ ȥbVviz7qGmn|cN7jr6ebTE:1Pxi먤> ˤ_ ?C2]h:œ&qLzxc!kF.`F^TccaP{lea-u HIF\Zths,&H$"WNsԹ1*dk[oewc;0dĴ!=04Tۻ &TK^G.s۽LICg7lk5\;k9i?Qyؚܭ_'Qz YY[z~%RnON=aw@dg {!u5u1F_豍N"||9Z6~RFWp5{#}t1%ZmБ9SEń{ "x*8"˜)6b{F4|_": a_:HA>&Pٜ۟DXŞlTձAd[v2_'7stbX& rpo]Хux?G=Wr,6j#%m,sCCX&tf ҃Z9ѬQFMR=;=Նi 7/NA?5%܏Σ;q7SvP=ks8wSgx=:ק* gLUqhƣ̆CQj 2 Yd_8xt2)zLfhB5w`#.[e'Ojͧj!.jkXsK!?D%qK^>; >F~g<Nt/]D[YpA~&sQf:2Jxd5`=Ԭܴuw_O!u~eOA~K#O^4])xIv԰Gu086ǾplLrodvW(pyy4% C=!'<й[ʢdBھhIӜ5V,8yfGuVy(!<9L.eE_F:Y#8Ĝ} {}8`*q 7O Ņ7^jr^ M K^Kb΋pd$DVڔ< D5y܂lDjOfgqu :isJ=cot*dUGuNUɻs4%.wRm af2t;a_y\x3R 0J0ӫQ X"TDc`+Xl߂vc\SǘMa>i_+bnLw ~6o΃?lO=R]"jX:k**G!nHKS/0apK68@WUtt<$Wf 拯:)Niwbl7sb^7G_CI Öb(WYxϨ0#\/VR=ènMwx&W3jk6s3ΤG>|< {6xobB \ڸ- @~/̫hlwAIlGRz_}%>贌)`6mTܟv6~n}F@#Ё8\ff计+290jfs8x2Su 9t=!X[򽞇֗/\FmVYnWan , $poj`,v(0qO:DbHBAN3w+"Ef"ԝΤ-)?˳On|tۥDܹGj}-): ʸV XwG%!Ů`&i\I2 '|0=ƽ׍k僅JPᴾJy[ӄۿB/vP^. E?c6Cn3Լ$S榒)'tU9vA(f{$@ӹb?U(r~,(f:>_AK#raa?7ʃT68bYx BN0^B8 ' ;xȸTL20KGa3@_*؁bӀw޵=ƺ`.b$3miFC1sX2N/ ?"&) aoj|fэL9`~4 } pPn{,g :f˗ε Z*z;3{2M}D:ڧixIҩ< L1YV.Z> An Dΐs7KK8ke2RuCH̤.rz+%caYdy09wM=+FTl5IsЍNP:0 LT^+8U;~Sc`I7mFD{%ud%NGJLj౯|8.چ< ;Y) i{z;6;lhI_Pl/쇁ʥn0a~͓|/&z,M_F|Ugڳ$tD-ck -TQrM<ڊ=mN ẕs3yXI^ySL!RkYt r_wA#2äeudAgsGQwv?5E(Tn)>5b@:D܏`oQRQ3#`nc.!EX`Ϫ&BKhHsL/әЈVDFj?l^ %x ӓR%%Sp8ejqS= +h2OQg&9Wy}=}$YT6a"+9uߍ7 0'7r@h)JM{};]oPTz.^W8=,,ikIy]NV^0lZr;5a^vay:nb16[=Q 橗l?(P At\^^FAhCd-Q)̍flR4rd} t3 |v9T_>N ""4)\"d:_w@#oQ6iZs1 L^[bo>hH٧Bs}bX hD`v227{Rx]֢)!|aa5bVTq_wAiFsO!~&ЧExmz 3_ц|{–f»P8 .A`AU+NAH,i7Aj%}{Tx^Kegq .2vTD>7gųR. E,vULZR6A<<,S:6`El oK[΁X jGB1\'K{wӛ%;&Bf ĺjdQM=Ɠ*pWJ0ep6L:^ ls]1T WX9G7_A@h]=t~70~B BH8mvBLsژHtJ>Fs ^wqTetI;-YG Paax'tlq~JapwkqFJh:;eWn:xJ{_o:~B*@u鴒k_* ^i{-f<C;4kp&m\+p)2-wl>>UV*I8X՜%~}L\I@"xF$ˈDzy;s;̮z <6X0]*ؕ uѥv3jS)@c}/(}1g[#`$'{&eځ_՟D|^`lv&5t'ܴKVw{BBҽb&qnWMf(IR'Vo/\N Kת=1Z|z׬ZL+l(Zh8֏l -1hޝpڕQQUyA8F+ 9vH $yYB@doj8w8~F~M3lﱐ$3`DY fM]&XnIɥqm $MF ;;'@CzG l$0*FS`7d3E{X]F΁~KeoLw=R3f-j~SC>kk=!mmoDk6tOk+VObD*qϗc&(A5Q+KJHS٨=ۿq 8 kʩv/A9+}T&źoĈL0 `2[eW. ȮkWuFj0yzVS =h#!"Ob-M 6" xhl&}_ GѨ8Jpa[;v{܍scy`Qٶ0Z2R!XXb M6es1H~ |*da)adxDcrL(í 4 ~:4ʄbȂkU_n›{iCnˁE)[Τt[)ԉ, U<MX1 H&‹18pL!wEl8yѾ#+? O/rITo25^[?n|yꪹGkSA)Ԟ+4:ok9!@aI\pU-=~WeR9>㊧p6Y#׼9W4Kt^5YjE6\HdkzlTC6E|fVvx}k[_St}'.7khfdSiIu[bJ|ƴ ?zH%%YQ+: Zh҄ $]~Ofƪ cZO$ĎrzGÌ1!Խ]:qm ׷hTx :-oB:Ā^TȺ[/ݍzٜL~:tk(^Zu+,5TR".9gxo_zitNf >gve|~Y\?W~jr٪'[ T{چ=.IHͳ5ÉF?ݨI"sE*6L-N)XM[eAǞA/9PsՍBJY+l(m]0<=%dmq)3fhzĝY+跚)*B1J2Kk e}r^Raz"%TF*"X(G0knh.TpdZp|5 QZUG0;o`~C[oMsIm%swT}erQaK>>UNUDUU42OӴDUwᦣr@$v_c}g^O$Ik*ˍ>#z'WKf3d(`ns;{cVxٺb{Eytf[5yZ7&=wx^45D<$i άbS%<̎hA1IvbnnWqUFq$UJSdϤn `[Ϥib< j EPG`B~ro;5$#ZPs[d#\ATSJ+\?:~|ܴ>q[#S/e_QrqÄXKucB kǘFȝ|4_%,D*c6V"3mۏ6]fu~k~-d4 bNӴ7߾q=siT̴ wػ7Z1KZ+Lzi[X?1£M^Bj4Z뭀OUPpGr bՔ`(zAdT2#mɴmYfz "4Uxj1-p$N pQLմ.Z"ɞ*٘{0(ޝ$A@_UIK^KL?p&ݙXօV`"|p0Pӂ>h5j~ fT~D82In(#vL͎b!MTRs_NT$SlUzQJзy˼x?.vbUd[u nϜkDsaF oz5,L5i3EZuy3{L|9 h٬g' _"+Rh4f3;AL'5-&V2ෛ=&ZjU/'%^ ;^EPS~d "-f˲9F"C$'wb%\uPￗ"jhM2p@pߞGcB ĝ1I5GS.;>!{LUp9$լ=dܿd]nbĠFYr`Et)G/ZȰRf\I`d?~Ь3+Sx;lVFsn:!-7ՠg׫pLwD5r"7V_sVR*Tݏr ,/& AہY>5yWx Kq(('=CT(+gLPMG΂ˡs^*lM+ a 6 u4:Fx\ZSwO3h"O G^bLRt,Fѽ(I(!>FHXֺf)qJao3֞E$5)L1I( ߖLo xW+>eU{p)"W `? Myϑ^V3f,Q$-+O#M7:Uт[䠼|S@JyrTW( yǐCEЛM >>?g="? &S ܲR>y. YZ