samba-test-4.19.8+git.435.78ced6cf30d-150600.3.21.1<>, xhRp9|kZXl0"| J ڭ)xG|֐-ׯ^>]n@qz˥wɩ\9 K  >t6fQ# &h+Zi^WqwwcsiYf Kde3_'g-Htbruɚ>s|Drbj *ZHm|5IAvOl^AtƀSW:'77ۦ^P_(F-1 Z(}͝[d<{LO/& :D_b5Ԁ ֍Er<>@0? d ( 6 b -AX^h     *p 9"(:S8:\(9>(:R(>@ FG4HlIXY\]H^b/cdXe]f`lbuxvwXxyzCsamba-test4.19.8+git.435.78ced6cf30d150600.3.21.1Testing tools for Samba servers and clientssamba-test provides testing tools for both the server and client packages of Samba.hRh02-armsrv1|WSUSE Linux Enterprise 15SUSE LLC GPL-3.0-or-laterhttps://www.suse.com/Applications/Systemhttps://www.samba.org/linuxaarch64  AH TӁ큤h4h4h4h4h4h5hhhhhhhhcb99fb34eb6cc95367e913885fce1cdbd2a84d4ffff901a6e3c86b32b9cc2f6e38bb5f7352a5f6f79416728fb80aaeee853a1fff4418da103d739b729819fa53c43ccf806d1c8d2af63938a00ff24ba0a28aeeefbf04dd19e32f734daf8d962d7725913040f0a9caa2ec1a9eef1f94654926725915562202c1f56f38137dbbd010da9da541be7bb8350c2c5b750eaade93119c59cbcb2576fde3ea003188ace217b7442c7f322f45971e70572b6d578e5eda25390f1c9014dadb04b90d68b9bb99edb6394f7f0d1953f7f1ed46a26e7407640affb4fbe5a52c71c77e88cf254fceea340e463849b14ce72b3a4b32b3ae756cf981d490ddd69f8eb17b3414ac8e435405eca06f4a24358cc1b3641c15f9a5bd5268f631bfad264bccc8a05b8688334f5d784c4cf5c56851f41bf7de868cf56eba1a6abdddb0895629eaff36f6efd19f9937cd854c08ce90ab4b5c4dcc7df1ce5bbd26596f042e10e78a0782a8d5d4bc12ef27d3a49ab1371242832e20cc50c9f4afa6efd321f05cab57e5feeed9685532cf52d22a48f969107fcdd2e148b9cf932c7eca73f96034e52fb6bee3e8156e2d68cd5cb6bca720a0f6e3fe45401ab54723d3c44b54c0b6496f3e73f993rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootsamba-4.19.8+git.435.78ced6cf30d-150600.3.21.1.src.rpmsamba-testsamba-test(aarch-64)@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    /sbin/ldconfig/sbin/ldconfigld-linux-aarch64.so.1()(64bit)ld-linux-aarch64.so.1(GLIBC_2.17)(64bit)libLIBWBCLIENT-OLD-samba4.so()(64bit)libLIBWBCLIENT-OLD-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libMESSAGING-SEND-samba4.so()(64bit)libMESSAGING-SEND-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libMESSAGING-samba4.so()(64bit)libMESSAGING-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libRPC-SERVER-LOOP-samba4.so()(64bit)libRPC-SERVER-LOOP-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libads-samba4.so()(64bit)libads-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libasn1util-samba4.so()(64bit)libasn1util-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libauth-samba4.so()(64bit)libauth-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libauthkrb5-samba4.so()(64bit)libauthkrb5-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libc.so.6(GLIBC_2.32)(64bit)libc.so.6(GLIBC_2.33)(64bit)libc.so.6(GLIBC_2.34)(64bit)libc.so.6(GLIBC_2.38)(64bit)libcli-cldap-samba4.so()(64bit)libcli-cldap-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libcli-ldap-common-samba4.so()(64bit)libcli-ldap-common-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libcli-ldap-samba4.so()(64bit)libcli-ldap-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libcli-nbt-samba4.so()(64bit)libcli-nbt-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libcli-smb-common-samba4.so()(64bit)libcli-smb-common-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libcliauth-samba4.so()(64bit)libcliauth-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libcluster-samba4.so()(64bit)libcluster-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libcmdline-contexts-samba4.so()(64bit)libcmdline-contexts-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libcmdline-samba4.so()(64bit)libcmdline-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libcom_err.so.2()(64bit)libcommon-auth-samba4.so()(64bit)libcommon-auth-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libdbwrap-samba4.so()(64bit)libdbwrap-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libdcerpc-binding.so.0()(64bit)libdcerpc-binding.so.0(DCERPC_BINDING_0.0.1)(64bit)libdcerpc-samba-samba4.so()(64bit)libdcerpc-samba-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libdcerpc-samba4.so()(64bit)libdcerpc-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libdcerpc-server-core.so.0()(64bit)libdcerpc-server-core.so.0(DCERPC_SERVER_CORE_0.0.1)(64bit)libdcerpc.so.0()(64bit)libdcerpc.so.0(DCERPC_0.0.1)(64bit)libdsdb-module-samba4.so()(64bit)libdsdb-module-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libevents-samba4.so()(64bit)libevents-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libflag-mapping-samba4.so()(64bit)libflag-mapping-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libgenrand-samba4.so()(64bit)libgenrand-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libgensec-samba4.so()(64bit)libgensec-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libgnutls.so.30()(64bit)libgnutls.so.30(GNUTLS_3_4)(64bit)libgnutls.so.30(GNUTLS_3_6_13)(64bit)libgnutls.so.30(GNUTLS_3_6_3)(64bit)libgse-samba4.so()(64bit)libgse-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libidmap-samba4.so()(64bit)libidmap-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libk5crypto.so.3()(64bit)libk5crypto.so.3(k5crypto_3_MIT)(64bit)libkrb5.so.3()(64bit)libkrb5.so.3(krb5_3_MIT)(64bit)libkrb5samba-samba4.so()(64bit)libkrb5samba-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libldb.so.2()(64bit)libldb.so.2(LDB_0.9.10)(64bit)libldb.so.2(LDB_0.9.15)(64bit)libldb.so.2(LDB_0.9.16)(64bit)libldb.so.2(LDB_1.1.14)(64bit)libldb.so.2(LDB_2.0.1)(64bit)libldb.so.2(LDB_2.8.0)(64bit)libldbsamba-samba4.so()(64bit)libldbsamba-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_AARCH64_SAMBA4)(64bit)liblibcli-lsa3-samba4.so()(64bit)liblibcli-lsa3-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_AARCH64_SAMBA4)(64bit)liblibcli-netlogon3-samba4.so()(64bit)liblibcli-netlogon3-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_AARCH64_SAMBA4)(64bit)liblibsmb-samba4.so()(64bit)liblibsmb-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libmsrpc3-samba4.so()(64bit)libmsrpc3-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libndr-krb5pac.so.0()(64bit)libndr-krb5pac.so.0(NDR_KRB5PAC_0.0.1)(64bit)libndr-nbt.so.0()(64bit)libndr-nbt.so.0(NDR_NBT_0.0.1)(64bit)libndr-samba-samba4.so()(64bit)libndr-samba-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libndr-samba4.so()(64bit)libndr-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libndr-standard.so.0()(64bit)libndr-standard.so.0(NDR_STANDARD_0.0.1)(64bit)libndr.so.3()(64bit)libndr.so.3(NDR_0.0.1)(64bit)libndr.so.3(NDR_0.0.3)(64bit)libndr.so.3(NDR_0.0.4)(64bit)libndr.so.3(NDR_0.0.8)(64bit)libndr.so.3(NDR_0.0.9)(64bit)libndr.so.3(NDR_0.2.0)(64bit)libndr.so.3(NDR_1.0.0)(64bit)libnetapi.so.1()(64bit)libnetapi.so.1(NETAPI_1.0.0)(64bit)libnetif-samba4.so()(64bit)libnetif-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libnss-info-samba4.so()(64bit)libnss-info-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libpopt.so.0()(64bit)libpopt.so.0(LIBPOPT_0)(64bit)libprinter-driver-samba4.so()(64bit)libprinter-driver-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libreadline.so.7()(64bit)libregistry-samba4.so()(64bit)libregistry-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libreplace-samba4.so()(64bit)libreplace-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsamba-credentials.so.1()(64bit)libsamba-credentials.so.1(SAMBA_CREDENTIALS_1.0.0)(64bit)libsamba-debug-samba4.so()(64bit)libsamba-debug-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsamba-errors.so.1()(64bit)libsamba-errors.so.1(SAMBA_ERRORS_1.0.0)(64bit)libsamba-hostconfig.so.0()(64bit)libsamba-hostconfig.so.0(SAMBA_HOSTCONFIG_0.0.1)(64bit)libsamba-modules-samba4.so()(64bit)libsamba-modules-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsamba-net.cpython-36m-aarch64-linux-gnu-samba4.so()(64bit)libsamba-net.cpython-36m-aarch64-linux-gnu-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsamba-passdb.so.0()(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.2.0)(64bit)libsamba-security-samba4.so()(64bit)libsamba-security-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsamba-sockets-samba4.so()(64bit)libsamba-sockets-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsamba-util.so.0()(64bit)libsamba-util.so.0(SAMBA_UTIL_0.0.1)(64bit)libsamba3-util-samba4.so()(64bit)libsamba3-util-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsamdb-common-samba4.so()(64bit)libsamdb-common-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsamdb.so.0()(64bit)libsamdb.so.0(SAMDB_0.0.1)(64bit)libsecrets3-samba4.so()(64bit)libsecrets3-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libserver-id-db-samba4.so()(64bit)libserver-id-db-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libshares-samba4.so()(64bit)libshares-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsmbclient-raw-samba4.so()(64bit)libsmbclient-raw-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsmbclient.so.0()(64bit)libsmbclient.so.0(SMBCLIENT_0.1.0)(64bit)libsmbclient.so.0(SMBCLIENT_0.3.1)(64bit)libsmbclient.so.0(SMBCLIENT_0.3.2)(64bit)libsmbclient.so.0(SMBCLIENT_0.3.3)(64bit)libsmbclient.so.0(SMBCLIENT_0.5.0)(64bit)libsmbclient.so.0(SMBCLIENT_0.6.0)(64bit)libsmbconf.so.0()(64bit)libsmbconf.so.0(SMBCONF_0.0.1)(64bit)libsmbd-shim-samba4.so()(64bit)libsmbd-shim-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsmbpasswdparser-samba4.so()(64bit)libsmbpasswdparser-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsocket-blocking-samba4.so()(64bit)libsocket-blocking-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libsys-rw-samba4.so()(64bit)libsys-rw-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libtalloc.so.2()(64bit)libtalloc.so.2(TALLOC_2.0.2)(64bit)libtalloc.so.2(TALLOC_2.0.8)(64bit)libtalloc.so.2(TALLOC_2.1.0)(64bit)libtalloc.so.2(TALLOC_2.3.5)(64bit)libtdb-wrap-samba4.so()(64bit)libtdb-wrap-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libtdb.so.1()(64bit)libtdb.so.1(TDB_1.2.1)(64bit)libtevent-util.so.0()(64bit)libtevent-util.so.0(TEVENT_UTIL_0.0.1)(64bit)libtevent.so.0()(64bit)libtevent.so.0(TEVENT_0.11.0)(64bit)libtevent.so.0(TEVENT_0.12.0)(64bit)libtevent.so.0(TEVENT_0.13.0)(64bit)libtevent.so.0(TEVENT_0.15.0)(64bit)libtevent.so.0(TEVENT_0.9.12)(64bit)libtevent.so.0(TEVENT_0.9.13)(64bit)libtevent.so.0(TEVENT_0.9.16)(64bit)libtevent.so.0(TEVENT_0.9.20)(64bit)libtevent.so.0(TEVENT_0.9.26)(64bit)libtevent.so.0(TEVENT_0.9.30)(64bit)libtevent.so.0(TEVENT_0.9.31)(64bit)libtevent.so.0(TEVENT_0.9.36)(64bit)libtevent.so.0(TEVENT_0.9.37)(64bit)libtevent.so.0(TEVENT_0.9.9)(64bit)libtime-basic-samba4.so()(64bit)libtime-basic-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libtorture-samba4.so()(64bit)libtorture-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libtrusts-util-samba4.so()(64bit)libtrusts-util-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libutil-reg-samba4.so()(64bit)libutil-reg-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libutil-tdb-samba4.so()(64bit)libutil-tdb-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_AARCH64_SAMBA4)(64bit)libwbclient.so.0()(64bit)libwbclient.so.0(WBCLIENT_0.10)(64bit)libwbclient.so.0(WBCLIENT_0.9)(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)sambasamba-winbind3.0.4-14.6.0-14.0-15.2-14.19.8+git.435.78ced6cf30d4.19.8+git.435.78ced6cf30d4.14.3hҋhm@g`@gRgR@gMgp@fٝ@fxfteԔ@ee5@ede6`@e-%e'e%anopower@suse.comscabrero@suse.denopower@suse.comscabrero@suse.denopower@suse.comnopower@suse.comnopower@suse.comddiss@suse.comscabrero@suse.denopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comdmulder@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comscabrero@suse.descabrero@suse.descabrero@suse.denopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comscabrero@suse.dedmulder@suse.comscabrero@suse.denopower@suse.comnopower@suse.comscabrero@suse.denopower@suse.comnopower@suse.comscabrero@suse.denopower@suse.comscabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comddiss@suse.comnopower@suse.comdmulder@suse.comdmulder@suse.comnopower@suse.comscabrero@suse.descabrero@suse.dedimstar@opensuse.orgscabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comnopower@suse.comnopower@suse.comscabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comnopower@suse.comscabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.denopower@suse.comscabrero@suse.deddiss@suse.comddiss@suse.comddiss@suse.comscabrero@suse.descabrero@suse.dedmulder@suse.comnopower@suse.comscabrero@suse.descabrero@suse.dedmulder@suse.comscabrero@suse.descabrero@suse.denopower@suse.comnopower@suse.comnopower@suse.comdmulder@suse.comscabrero@suse.denopower@suse.comddiss@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comscabrero@suse.denopower@suse.comnopower@suse.comjmcdonough@suse.comnopower@suse.comscabrero@suse.denopower@suse.comnopower@suse.comddiss@suse.comddiss@suse.comnopower@suse.comnopower@suse.comddiss@suse.comnopower@suse.comdmulder@suse.comdmulder@suse.comddiss@suse.comscabrero@suse.dedmulder@suse.comddiss@suse.comnopower@suse.comjengelh@inai.dedmulder@suse.comscabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comdmulder@suse.comdmulder@suse.comjmcdonough@suse.comdmulder@suse.comscabrero@suse.dedmulder@suse.comscabrero@suse.dedmulder@suse.comdmulder@suse.comvcizek@suse.comdmulder@suse.comdmulder@suse.comnopower@suse.comscabrero@suse.dejmcdonough@suse.comscabrero@suse.deaaptel@suse.comjengelh@inai.dedimstar@opensuse.orgdmulder@suse.comjmcdonough@suse.comdavid.mulder@suse.comjmcdonough@suse.comaaptel@suse.comdmulder@suse.comscabrero@suse.comscabrero@suse.comkukuk@suse.dedavid.mulder@suse.comscabrero@suse.comrbrown@suse.comdmulder@suse.comscabrero@suse.comdimstar@opensuse.orgscabrero@suse.comaaptel@suse.comnopower@suse.comnopower@suse.comaaptel@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comddiss@suse.comnopower@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comdmulder@suse.comnopower@suse.comjmcdonough@suse.comaaptel@suse.comkukuk@suse.comkukuk@suse.denopower@suse.comaaptel@suse.comdmulder@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comddiss@suse.comjmcdonough@suse.comddiss@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comjmcdonough@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comtchvatal@suse.comlmuelle@suse.comnopower@suse.comcrrodriguez@opensuse.orglmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comnoel.power@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comnopower@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.commpluskal@suse.comlmuelle@suse.comnopower@suse.deddiss@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.denopower@suse.delmuelle@suse.comnopower@suse.deddiss@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.com- CVE-2025-9640: fix vfs_streams_xattr uninitialized memory write; (bsc#1251279);(bso#15885). - CVE-2025-10230: fix command Injection in WINS Server Hook Script; (bsc#1251280);(bso#15903).- Windows security hardening locks out schannel'ed netlogon dc calls like netr_DsRGetDCName; (bsc#1246431); (bso#15876).- Fix Samba printers reporting invalid sid during print jobs; (bsc#1234210); (bso#15792).- Fix crossing automounter mount points; (bsc#1215212); (bsc#1236803);- Update shipped /etc/samba/smb.conf to point to smb.conf man page;(bsc#1233880).- Update to 4.19.9 * libldb: performance issue with indexes (ldb 2.8.2 is already released); (bso#15590). * DH reconnect error handling can lead to stale sharemode entries; (bso#15624). * Incorrect FSCTL_QUERY_ALLOCATED_RANGES response when truncated; (bso#15699). * irpc_destructor may crash during shutdown; (bso#15280). * Compound SMB2 requests don't return NT_STATUS_NETWORK_SESSION_EXPIRED for all requests, confuses MacOSX clients; (bso#15696). * Crash when readlinkat fails; (bso#15700).- Adjust spec to split out rpcd_* binaries into a separate sub package; (bsc#1231414).- Incorrect FSCTL_QUERY_ALLOCATED_RANGES response when truncated; (bso#15699); (bsc#1229684). - Update to 4.19.8 * Invalid client warning about command line passwords; (bso#15671); * Version string is truncated in manpages; (bso#15672); * --version-* options are still not ergonomic, and they reject tilde characters; (bso#15673); * cmdline_burn does not always burn secrets; (bso#15674); * Samba doesn't parse SDDL found in defaultSecurityDescriptor in AD_DS_Classes_Windows_Server_v1903.ldf; (bso#15685); * We have added new options --vendor-name and --vendor-patch- revision arguments to ./configure to allow distributions and packagers to put their name in the Samba version string so that when debugging Samba the source of the binary is obvious; (bso#15654); * When claims enabled with heimdal kerberos, unable to log on to a Windows computer when user account need to change their own password; (bso#15655); * Fix clock skew error message and memory cache clock skew recovery; (bso#15676); * CTDB RADOS mutex helper misses namespace support; (bso#15665); * The images don't build after the git security release and CentOS 8 Stream is EOL; (bso#15660); * Fix unnecessary delays in CTDB while processing requests under high load; (bso#15678); * Dynamic DNS updates with the internal DNS are not working; (bso#13019); * s4:nbt_server: does not provide unexpected handling, so winbindd can't use nmb requests instead cldap; (bso#15620); * Panic in vfs_offload_token_db_fetch_fsp(); (bso#15664); * "client use kerberos" and --use-kerberos is ignored for the machine account; (bso#15666); * Regression DFS not working with widelinks = true; (bso#15435); * ntlm_auth make logs more consistent with length check; (bso#15677);- Fix a crash when joining offline and 'kerberos method' includes keytab; (bsc#1228732); - Fix reading the password from STDIN or environment vars if it was already given in the command line; (bsc#1228732);- Update to 4.19.7 * ldb qsort might r/w out of bounds with an intransitive compare function (ldb 2.8.1 is already released); (bso#15569). * Many qsort() comparison functions are non-transitive, which can lead to out-of-bounds access in some circumstances (ldb 2.8.1 is already released); (bso#15625). * Need to change gitlab-ci.yml tags in all branches to avoid CI bill; (bso#15638). * netr_LogonSamLogonEx returns NR_STATUS_ACCESS_DENIED with SysvolReady=0; (bso#14981). * Anonymous smb3 signing/encryption should be allowed (similar to Windows Server 2022); (bso#15412). * Panic in dreplsrv_op_pull_source_apply_changes_trigger; (bso#15573). * winbindd, net ads join and other things don't work on an ipv6 only host; (bso#15642). * Smbcacls incorrectly propagates inheritance with Inherit-Only flag; (bso#15636). * http library doesn't support 'chunked transfer encoding'; (bso#15611). - Update to 4.19.6 * fd_handle_destructor() panics within an smbd_smb2_close() if vfs_stat_fsp() fails in fd_close(); (bso#15527). * samba-gpupdate: Correctly implement site support; (bso#15588). * libgpo: Segfault in python bindings; (bso#15599). * Packet marshalling push support missing for CTDB_CONTROL_TCP_CLIENT_DISCONNECTED and CTDB_CONTROL_TCP_CLIENT_PASSED; (bso#15580).- Update to 4.19.5 * Windows 2016 fails to restore previous version of a file from a shadow_copy2 snapshot; (bso#13688). * Symlinks on AIX are broken in 4.19 (and a few version before that); (bso#15549). * Fake directory create times has no effect; (bso#12421). * ctime mixed up with mtime by smbd; (bso#15550). * samba-gpupdate --rsop fails if machine is not in a site; (bso#15548). * gpupdate: The root cert import when NDES is not available is broken; (bso#15557). * samba-gpupdate should print a useful message if cepces-submit can't be found; (bso#15552). * samba-gpupdate logging doesn't work; (bso#15558). * smbpasswd reset permissions only if not 0600; (bso#15555).- Remove -x from bash shebang update-apparmor-samba-profile; (bsc#1218431).- Update to 4.19.4 * net changesecretpw cannot set the machine account password if secrets.tdb is empty; (bso#13577). * For generating doc, take, if defined, env XML_CATALOG_FILES; (bso#15540). * Trivial C typo in nsswitch/winbind_nss_netbsd.c; (bso#15541). * vfs_linux_xfs is incorrectly named; (bso#15542). * systemd stumbled over copyright-message at smbd startup; (bso#15377). * Following intermediate abolute share-local symlinks is broken; (bso#15505). * ctdb RELEASE_IP causes a crash in release_ip if a connection to a non-public address disconnects first; (bso#15523). * shadow_copy2 broken when current fileset's directories are removed; (bso#15544). * smbd does not detect ctdb public ipv6 addresses for multichannel exclusion; (bso#15534). * 'force user = localunixuser' doesn't work if 'allow trusted domains = no' is set; (bso#15469). * smbget debug logging doesn't work; (bso#15525). * smget: username in the smburl and interactive password entry doesn't work; (bso#15532). * smbget auth function doesn't set values for password prompt correctly; (bso#15538). * Unable to copy and write files from clients to Ceph cluster via SMB Linux gateway with Ceph VFS module; (bso#15440). * Multichannel refresh network information; (bso#15547).- Update to 4.19.3 * sid_strings test broken by unix epoch > 1700000000; (bso#15520). * smbd crashes if asked to return full information on close of a stream handle with delete on close disposition set; (bso#15487). * smbd: fix close order of base_fsp and stream_fsp in smb_fname_fsp_destructor(); (bso#15521). * Improve logging for failover scenarios; (bso#15499). * Files without "read attributes" NFS4 ACL permission are not listed in directories; (bso#15093). * CVE-2018-14628 [SECURITY] Deleted Object tombstones visible in AD LDAP to normal users; (bso#13595). * Kerberos TGS-REQ with User2User does not work for normal accounts; (bso#15492). * vfs_gpfs stat calls fail due to file system permissions; (bso#15507). * Samba doesn't build with Python 3.12; (bso#15513).- packaging: samba-tool domain provision requires python3-Markdown; (bsc#1216519).- Update to 4.19.2 * Use-after-free in aio_del_req_from_fsp during smbd shutdown after failed IPC FSCTL_PIPE_TRANSCEIVE; (bso#15423). * clidfs.c do_connect() missing a "return" after a cli_shutdown() call; (bso#15426). * macOS mdfind returns only 50 results; (bso#15463). * GETREALFILENAME_CACHE can modify incoming new filename with previous cache entry value; (bso#15481). * libnss_winbind causes memory corruption since samba-4.18, impacts sendmail, zabbix, potentially more; (bso#15464). * ctdbd: setproctitle not initialized messages flooding logs; (bso#15479). * CVE-2023-5568 Heap buffer overflow with freshness tokens in the Heimdal KDC in Samba 4.19; (bso#15491). * The heimdal KDC doesn't detect s4u2self correctly when fast is in use; (bso#15477).- use systemd-logind rather than utmp for y2038 safety; (bsc#1216159).- CVE-2023-4091: samba: Client can truncate file with read-only permissions; (bsc#1215904); (bso#15439). - CVE-2023-42669: samba: rpcecho, enabled and running in AD DC, allows blocking sleep on request; (bso#1215905); (bso#15474). - CVE-2023-42670: samba: The procedure number is out of range when starting Active Directory Users and Computers; (bsc#1215906); (bso#15473). - CVE-2023-3961: samba: Unsanitized client pipe name passed to local_np_connect(); (bsc#1215907); (bso#15422). - CVE-2023-4154: samba: dirsync allows SYSTEM access with only "GUID_DRS_GET_CHANGES" right, not "GUID_DRS_GET_ALL_CHANGES; (bsc#1215908); (bso#15424).- Update to 4.19.0 * File doesn't show when user doesn't have permission if aio_pthread is loaded; (bso#15453). * ctdb_killtcp fails to work with --enable-pcap and libpcap ≥ 1.9.1; (bso#15451). * Logging to stdout/stderr with DEBUG_SYSLOG_FORMAT_ALWAYS can log to syslog; (bso#15460). * ‘samba-tool domain level raise’ fails unless given a URL; (bso#15458). * reply_sesssetup_and_X() can dereference uninitialized tmp pointer; (bso#15420). * missing return in reply_exit_done(); (bso#15430). * TREE_CONNECT without SETUP causes smbd to use uninitialized pointer; (bso#15432). * Avoid infinite loop in initial user sync with Azure AD Connect when synchronising a large Samba AD domain; (bso#15401). * Samba replication logs show (null) DN; (bso#15407). * 2-3min delays at reconnect with smb2_validate_sequence_number: bad message_id 2; (bso#15346). * DCERPC_PKT_CO_CANCEL and DCERPC_PKT_ORPHANED can't be parsed; (bso#15446). * CID 1539212 causes real issue when output contains only newlines; (bso#15438). * KDC encodes INT64 claims incorrectly; (bso#15452). * mdssvc: Do an early talloc_free() in _mdssvc_open(); (bso#15449). * Windows client join fails if a second container CN=System exists somewhere; (bso#9959). * regression DFS not working with widelinks = true; (bso#15435). * Heimdal fails to build on 32-bit FreeBSD; (bso#15443). * samba-tool ntacl get segfault if aio_pthread appended; (bso#15441). - Update to 4.18.6 * reply_sesssetup_and_X() can dereference uninitialized tmp pointer; (bso#15420); * Missing return in reply_exit_done(); (bso#15430); * post-exec password redaction for samba-tool is more reliable for fully random passwords as it no longer uses regular expressions containing the password value itself; (bso#15289); * Windows client join fails if a second container CN=System exists somewhere; (bso#9959); * Spotlight sometimes returns no results on latest macOS; (bso#15342); * Renaming results in NT_STATUS_SHARING_VIOLATION if previously attempted to remove the destination; (bso#15417); * Spotlight results return wrong date in result list; (bso#15427); * "net offlinejoin provision" does not work as non-root user; (bso#15414); * rpcserver no longer accepts double backslash in dfs pathname; (bso#15400); * cm_prepare_connection() calls close(fd) for the second time; (bso#15433); * 2-3min delays at reconnect with smb2_validate_sequence_number: bad message_id 2; (bso#15346); * samba-tool ntacl get segfault if aio_pthread appended; (bso#15441); * DCERPC_PKT_CO_CANCEL and DCERPC_PKT_ORPHANED can't be parsed; (bso#15446); * Python tarfile extraction needs change to avoid a warning (CVE-2007-4559 mitigation); (bso#15390); * Regression DFS not working with widelinks = true; (bso#15435); * mdssvc: Do an early talloc_free() in _mdssvc_open(); (bso#15449); - Update to 4.18.5 * CVE-2022-2127: lm_resp_len not checked properly in winbindd_pam_auth_crap_send; (bso#15072); (bsc#1213174). * CVE-2023-34966: Samba Spotlight mdssvc RPC Request Infinite Loop Denial-of-Service Vulnerability; (bso#15340); (bsc#1213173). * CVE-2023-34967: Samba Spotlight mdssvc RPC Request Type Confusion Denial-of-Service Vulnerability; (bso#15341); (bsc#1213172). * CVE-2023-34968: Spotlight server-side Share Path Disclosure; (bso#15388); (bsc#1213171). * CVE-2023-3347: Samba doesn't require SMB2+ signing if `server signing = mandatory` is set; (bso#15397); (bsc#1213170). * secure channel faulty since Windows 10/11 update 07/2023; (bso#15418); (bsc#1213384). - Update to 4.18.4 * Backport --pidl-developer fixes; (bso#15404). * Named crashes on DLZ zone update; (bso#14030). * smbcacls and smbcquotas do not check // before the server; (bso#2312). * cli_list loops 100% CPU against pre-lanman2 servers; (bso#15382). * smbclient leaks fds with showacls; (bso#15391). * smbd returns NOT_FOUND when creating files on a r/o filesystem; (bso#15402). * NSS_WRAPPER_HOSTNAME doesn't match NSS_WRAPPER_HOSTS entry and causes test timeouts; (bso#15355). * net ads lookup (with unspecified realm) fails; (bso#15384). * Register Samba processes with GPFS; (bso#15381). * Python tarfile extraction needs change to avoid a warning (CVE-2007-4559 mitigation); (bso#15390). * The winbind child segfaults when listing users with `winbind scan trusted domains = yes`; (bso#15398). * Remove comments about deprecated 'write cache size'; (bso#15383). * smbget memory leak if failed to download files recursively; (bso#15403). - Update to 4.18.3 * Symlinks to files can have random DOS mode information in a directory listing; (bso#15375). * vfs_fruit might cause a failing open for delete; (bso#15378). * winbind recurses into itself via rpcd_lsad; (bso#15361). * wbinfo -u fails on ad dc with >1000 users; (bso#15366). * DS ACEs might be inherited to unrelated object classes; (bso#15338). * a lot of messages: get_static_share_mode_data: get_static_share_mode_data_fn failed: NT_STATUS_NOT_FOUND; (bso#15362). * aes256 smb3 encryption algorithms are not allowed in smb3_sid_parse(); (bso#15374). * Setting veto files = /.*/ break listing directories; (bso#15360). * "samba-tool domain provision" does not run interactive mode if no arguments are given; (bso#15363). * dsgetdcname: assumes local system uses IPv4; (bso#15325). - Update to 4.18.2 * Log flood: smbd_calculate_access_mask_fsp: Access denied: message level should be lower; (bso#15302). * Floating point exception (FPE) via cli_pull_send at source3/libsmb/clireadwrite.c; (bso#15306). * test_tstream_more_tcp_user_timeout_spin fails intermittently on Rackspace GitLab runners; (bso#15328). * Reduce flapping of ridalloc test; (bso#15329). * large_ldap test is unreliable; (bso#15351). * New filename parser doesn't check veto files smb.conf parameter; (bso#15143). * mdssvc may crash when initializing; (bso#15354). * large directory optimization broken for non-lcomp path elements; (bso#15313). * streams_depot fails to create streams; (bso#15357). * shadow_copy2 and streams_depot don't play well together; (bso#15358). * Flapping tests in samba_tool_drs_show_repl.py; (bso#15316). * winbindd idmap child contacts the domain controller without a need; (bso#15317). * idmap_autorid may fail to map sids of trusted domains for the first time; (bso#15318). * idmap_hash doesn't use ID_TYPE_BOTH for reverse mappings; (bso#15319). * net ads search -P doesn't work against servers in other domains; (bso#15323). * Temporary smbXsrv_tcon_global.tdb can't be parsed; (bso#15353). * Tests use depricated and removed methods like assertRegexpMatches; (bso#15343). - Update to 4.18.1 * CVE-2023-0225: AD DC "dnsHostname" attribute can be deleted by unprivileged authenticated users. (bso#15276);(bsc#1209483). * CVE-2023-0614: Access controlled AD LDAP attributes can be discovered (bso#15270); (bsc#1209485). * CVE-2023-0922: Samba AD DC admin tool samba-tool sends passwords in cleartext(bso#15315);(bsc#1209481). * ldb wildcard matching makes excessive allocations; (bso#15331). * large_ldap test is inefficient; (bso#15332). - Update to 4.18.0 * SMB server performance improvements * More succinct samba-tool error messages * Color output with samba-tool --color The NO_COLOR environment variable will disable colour output * New samba-tool dsacl subcommand for deleting ACEs * New wbinfo option --change-secret-at * Net option to change the NT ACL default location * Azure AD / Office365 synchronization improvements- Fix DFS not working with widelinks enabled; (bsc#1213607); (bso#15435);- Move libcluster-samba4.so from samba-libs to samba-client-libs; (bsc#1213940);- net ads lookup with unspecified realm fails; (bso#15384); (bsc#1213826);- secure channel faulty since Windows 10/11 update 07/2023; (bso#15418); (bsc#1213384).- CVE-2022-2127: lm_resp_len not checked properly in winbindd_pam_auth_crap_send; (bso#15072); (bsc#1213174). - CVE-2023-34966: Samba Spotlight mdssvc RPC Request Infinite Loop Denial-of-Service Vulnerability; (bso#15340); (bsc#1213173). - CVE-2023-34967: Samba Spotlight mdssvc RPC Request Type Confusion Denial-of-Service Vulnerability; (bso#15341); (bsc#1213172). - CVE-2023-34968: Spotlight server-side Share Path Disclosure; (bso#15388); (bsc#1213171). - CVE-2023-3347: Samba doesn't require SMB2+ signing if `server signing = mandatory` is set; (bso#15397); (bsc#1213170).- Update to 4.17.9 * Backport --pidl-developer fixes; (bso#15404). * smbd_scavenger crashes when service smbd is stopped; (bso#15275). * vfs_fruit might cause a failing open for delete; (bso#15378). * named crashes on DLZ zone update; (bso#14030). * winbind recurses into itself via rpcd_lsad; (bso#15361). * cli_list loops 100% CPU against pre-lanman2 servers; (bso#15382). * smbclient leaks fds with showacls; (bso#15391). * aes256 smb3 encryption algorithms are not allowed in smb3_sid_parse(); (bso#15374). * winbindd gets stuck on NT_STATUS_RPC_SEC_PKG_ERROR; (bso#15413). * smbget memory leak if failed to download files recursively; (bso#15403).- Update to 4.17.8 * log flood: smbd_calculate_access_mask_fsp: Access denied: message level should be lower; (bso#15302). * Floating point exception (FPE) via cli_pull_send at source3/libsmb/clireadwrite.c; (bso#15306). * test_tstream_more_tcp_user_timeout_spin fails intermittently on Rackspace GitLab runners; (bso#15328). * Reduce flapping of ridalloc test; (bso#15329). * large_ldap test is unreliable; (bso#15351). * New filename parser doesn't check veto files smb.conf parameter; (bso#15143). * mdssvc may crash when initializing; (bso#15354). * Large directory optimization broken for non-lcomp path elements; (bso#15313). * streams_depot fails to create streams; (bso#15357). * shadow_copy2 and streams_depot don't play well together; (bso#15358). * wbinfo -u fails on ad dc with >1000 users; (bso#15366). * winbindd idmap child contacts the domain controller without a need; (bso#15317). * idmap_autorid may fail to map sids of trusted domains for the first time; (bso#15318). * idmap_hash doesn't use ID_TYPE_BOTH for reverse mappings; (bso#15319). * net ads search -P doesn't work against servers in other domains; (bso#15323). * DS ACEs might be inherited to unrelated object classes; (bso#15338). * Temporary smbXsrv_tcon_global.tdb can't be parsed; (bso#15353). * Setting veto files = /.*/ break listing directories; (bso#15360); (bsc#1212375). * CVE-2020-25720 [SECURITY] Create Child permission should not allow full write to all attributes (additional changes); (bso#14810). * dsgetdcname: assumes local system uses IPv4; (bso#15325).- Update to 4.17.7 * CVE-2023-0922: Samba AD DC admin tool samba-tool sends passwords in cleartext; (bso#15315); (bsc#1209481). * CVE-2023-0225: Samba AD DC "dnsHostname" attribute can be deleted by unprivileged authenticated users; (bso#15276); (bsc#1209483). * CVE-2023-0614: samba: Access controlled AD LDAP attributes can be discovered; (bso#15270); (bsc#1209485). * large_ldap test is inefficient; (bso#15332). * CVE-2020-25720 [SECURITY] Create Child permission should not allow full write to all attributes (additional changes); (bso#14810). - Update to 4.17.6 * streams_xattr is creating unexpected locks on folders; (bso#15314). * Use of the Azure AD Connect cloud sync tool is now supported for password hash synchronisation, allowing Samba AD Domains to synchronise passwords with this popular cloud environment; (bso#10635). * Spotlight doesn't work with latest macOS Ventura; (bso#15299). * New samba-dcerpc architecture does not scale gracefully; (bso#15310). * vfs_ceph incorrectly uses fsp_get_io_fd() instead of fsp_get_pathref_fd() in close and fstat; (bso#15307). * With clustering enabled samba-bgqd can core dump due to use after free; (bso#15293). * fd_load() function implicitly closes the fd where it should not; (bso#15311). - Update to 4.17.5 * smbc_getxattr() return value is incorrect; (bso#14808). * Compound SMB2 FLUSH+CLOSE requests from MacOSX are not handled correctly; (bso#15172). * synthetic_pathref AFP_AfpInfo failed errors; (bso#15210). * samba-tool gpo listall fails IPv6 only - finddcs() fails to find DC when there is only an AAAA record for the DC in DNS; (bso#15226). * smbd crashes if an FSCTL request is done on a stream handle; (bso#15236). * DFS links don't work anymore on Mac clients since 4.17; (bso#15277). * vfs_virusfilter segfault on access, directory edgecase (accessing NULL value); (bso#15283). * CVE-2022-38023 [SECURITY] Samba should refuse RC4 (aka md5) based SChannel on NETLOGON (additional changes); (bso#15240). * %U for include directive doesn't work for share listing (netshareenum); (bso#15243). * Shares missing from netshareenum response in samba 4.17.4; (bso#15266). * ctdb: use-after-free in run_proc; (bso#15269). * irpc_destructor may crash during shutdown; (bso#15280). * auth3_generate_session_info_pac leaks wbcAuthUserInfo; (bso#15286). * smbclient segfaults with use after free on an optimized build; (bso#15268). * smbstatus leaking files in msg.sock and msg.lock; (bso#15282). * Leak in wbcCtxPingDc2; (bso#15164). * Access based share enum does not work in Samba 4.16+; (bso#15265). * Crash during share enumeration; (bso#15267). * rep_listxattr on FreeBSD does not properly check for reads off end of returned buffer; (bso#15271). * Avoid relying on C89 features in a few places; (bso#15281).- Make (32bit) samba-libs conflict with old samba-ad-dc-libs package to satisfy installcheck.- Make samba-libs conflict with old samba-ad-dc-libs package to satisfy installcheck.- Remove non functioning ifup/ifdown samba-winbindd scripts; (bsc#1207414).- libdsdb-module-samba4 should be packaged as part of samba-libs and not samba-ad-dc-libs. Additionally no need for it to be removed conditionally.- Clean up logic for PAM migration settings in spec file.- Change with_dc default to 0 (for non TW builds), ADDC feature is deprecated and will no longer be included in >= SLE15-SP5; (jsc#PED-1122).- Update to 4.17.4 * CVE-2022-44640 Upstream Heimdal free of user-controlled pointer in FAST; (bsc#14929); * CVE-2021-20251 Bad password count not incremented atomically; (bsc#14611); * CVE-2022-42898 krb5_pac_parse() buffer parsing vulnerability; (bsc#15203); * CVE-2022-37966 rc4-hmac Kerberos session keys issued to modern servers; (bso#15237); * CVE-2022-37967 Kerberos constrained delegation ticket forgery possible against Samba AD DC; (bso#15231); * CVE-2022-38023 RC4/HMAC-MD5 NetLogon Secure Channel is weak and should be avoided; (bso#15240); * pam_winbind uses time_t and pointers assuming they are of the same size; (bso#15224); * Heimdal session key selection in AS-REQ examines wrong entry; (bso#15219); * filter-subunit is inefficient with large numbers of knownfails; (bso#15258); * smbd allows setting FILE_ATTRIBUTE_TEMPORARY on directories; (bso#15252); * The KDC logic arround msDs-supportedEncryptionTypes differs from Windows; (bso#13135); * libnet: change_password() doesn't work with dcerpc_samr_ChangePasswordUser4(); (bso#15206); * Heimdal session key selection in AS-REQ examines wrong entry; (bso#15219); * Memory leak in snprintf replacement functions; (bso#15230); * RODC doesn't reset badPwdCount reliable via an RWDC (CVE-2021-20251 regression); (bso#15253); * Prevent EBADF errors with vfs_glusterfs; (bso#15198); * %U for include directive doesn't work for share listing (netshareenum); (bso#15243); * Stack smashing in net offlinejoin requestodj; (bso#15257); * Windows 11 22H2 and Samba-AD 4.15 Kerberos login issue; (bso#15197); * Heimdal session key selection in AS-REQ examines wrong entry; (bso#15219); - Remove deprecated if-{down,up} scripts; (bsc#1206444); - Adjust the systemd drop-in file for named service; (bsc#1201689); * Paths are additive so do not repeat paths from named.service * Prefix the samba DLZ directory with "-" to ignore this path if it does not exists- Introduce without-smb1-server spec flag; (bsc#1205104); - Update to 4.17.3 * CVE-2022-42898: Samba buffer overflow vulnerabilities on 32-bit systems; (bsc#1205126); (bso#15203); - Replace obsolete python-gpgme with python-gpg * Upstream replaced it in v4.9.5 -- bso#13728 - Update to 4.17.2 * CVE-2022-3592 [SECURITY] samba: Wide links protection broken; (bso#15207); (bsc#1204499). * CVE-2022-3437 [SECURITY] samba: Buffer overflow in Heimdal unwrap_des3();(bso#15134); (bsc#1204254). - Update to 4.17.1 * CVE-2021-20251 [SECURITY] Bad password count not incremented atomically; (bso#14611). * smbXsrv_connection_shutdown_send result leaked; (bso#15174). * Flush on a named stream never completes; (bso#15182). * Permission denied calling SMBC_getatr when file not exists; (bso#15195). * Samba 4.5 sometimes cannot be upgraded to Samba 4.6 or later over DRS: WERROR_DS_DRA_MISSING_PARENT due to faulty GET_ANC; (bso#15189). * pytest: add file removal helpers for TestCaseInTempDir; (bso#15191). * CVE-2021-20251 [SECURITY] Bad password count not incremented atomically; (bso#14611). * Samba 4.5 sometimes cannot be upgraded to Samba 4.6 or later over DRS: WERROR_DS_DRA_MISSING_PARENT due to faulty GET_ANC; (bso#15189). * Flush on a named stream never completes; (bso#15182). * vfs_gpfs silently garbles timestamps > year 2106; (bso#15151). * CVE-2021-20251 [SECURITY] Bad password count not incremented atomically; (bso#14611). * multi-channel socket passing may hit a race if one of the involved processes already existed; (bso#15200). * memory leak on temporary of struct imessaging_post_state and struct tevent_immediate on struct imessaging_context (in rpcd_spoolss and maybe others); (bso#15201). * Since popt1.19 various use after free errors using result of poptGetArg are now exposed; (bso#15205); (boo#1204279). * Remove special case for O_CREAT in SMB_VFS_OPENAT from vfs_glusterfs; (bso#15192). * GETPWSID in memory cache grows indefinetly with each NTLM auth; (bso#15169). * CVE-2021-20251 [SECURITY] Bad password count not incremented atomically; (bso#14611). - Install a systemd drop-in file for named service to allow read/write access to the DLZ directory; (bsc#1201689); - Fix use after free errors resulting from using return of poptGetArg exposed since popt-1.19; (boo#1204279); (bso#15205). - s3: smbd: Fix memory leak in smbd_server_connection_terminate_done(); (bso#15174). - Disable SMB1 for tumbleweed builds. - Update to 4.17.0 * acl_xattr VFS module may unintentionally use filesystem permissions instead of ACL from xattr; (bso#15126). * Missing SMB2-GETINFO access checks from MS-SMB2 3.3.5.20.1; (bso#15153). * assert failed: !is_named_stream(smb_fname)") at ../../lib/util/fault.c:197; (bso#15161). * acl_xattr VFS module may unintentionally use filesystem permissions instead of ACL from xattr; (bso#15126). * assert failed: !is_named_stream(smb_fname)") at ../../lib/util/fault.c:197; (bso#15161). * Cross-node multi-channel reconnects result in SMB2 Negotiate returning NT_STATUS_NOT_SUPPORTED; (bso#15159). * winbind at info level debug can coredump when processing wb_lookupusergroups; (bso#15160). * Make use of glfs_*at() API calls in vfs_glusterfs; (bso#15157). * Possible use after free of connection_struct when iterating smbd_server_connection->connections; (bso#15128). * `net usershare add` fails with flag works with --long but fails with -l; (bso#15145). * acl_xattr VFS module may unintentionally use filesystem permissions instead of ACL from xattr; (bso#15126). * Performance regression on contended path based operations; (bso#15125). * Missing READ_LEASE break could cause data corruption; (bso#15148). * libsamba-errors uses a wrong version number; (bso#15141). * SMB1 negotiation can fail to handle connection errors; (bso#15152). * New filename parser doesn't check veto files smb.conf parameter; (bso#15143). * 4.17.rc1 still uses symlink-race prone unix_convert(); (bso#15144). * Backport fileserver related changed to 4.17.0rc2; (bso#15146). * Manpage for smbstatus json is missing; (bso#15147). * Backport fileserver related changed to 4.17.0rc2; (bso#15146). * Performance regression on contended path based operations; (bso#15125). * Backport fileserver related changed to 4.17.0rc2; (bso#15146). * Fix issues found by coverity in smbstatus json code; (bso#15140). * Backport fileserver related changed to 4.17.0rc2; (bso#15146). - Migration to /usr/etc: Saving user changed configuration files in /etc and restoring them while an RPM update. - Update to 4.16.4 * CVE-2022-2031: Samba AD users can bypass certain restrictions associated with changing passwords; (bsc#1201495); (bso#15047); * CVE-2022-32744: Samba AD users can forge password change requests for any user; (bsc#1201493); (bso#15074); * CVE-2022-32745: Samba AD users can crash the server process with an LDAP add or modify request; (bsc#1201492); (bso#15008); * CVE-2022-32746: Samba AD users can induce a use-after-free in the server process with an LDAP add or modify request; (bsc#1201490); (bso#15009); * CVE-2022-32742: Server memory information leak via SMB1; (bsc#1201496); (bso#15085); - Update to 4.16.3 * Using vfs_streams_xattr and deleting a file causes a panic; (bso#15099); * Add support for bind 9.18; (bso#14986); * logging dsdb audit to specific files does not work; (bso#15076); * Problem when winbind renews Kerberos; (bso#14979); (bsc#1196224); * Samba with new lorikeet-heimdal fails to build on gcc 12.1 in developer mode; (bso#15095); * Crash in streams_xattr because fsp->base_fsp->fsp_name is NULL; (bso#15105); * Crash in rpcd_classic - NULL pointer deference in mangle_is_mangled(); (bso#15118); * smbclient commands del & deltree fail with NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100); (bsc#1200556); * Fix check for chown when processing NFSv4 ACL; (bso#15120); * The pcap background queue process should not be stopped; (bso#15082); * testparm: Fix typo in idmap rangesize check; (bso#15097); * net ads info returns LDAP server and LDAP server name as null; (bso#15106); * ldconfig: /lib64/libsmbconf.so.0 is not a symbolic link; (bso#15108); * CTDB child process logging does not work as expected; (bso#15090); - Update spec file to fix the optional Heimdal DC build - Fix external trusts with MIT Kerberos 1.20 - Add missing samba-client requirement to samba-winbind package; (bsc#1198255); - Move pdb backends from package samba-libs to package samba-client-libs and remove samba-libs requirement from samba-winbind; (bsc#1200964); (bsc#1198255); - Add sysuser-shadow requirement for packages using systemd-sysusers - Use the canonical realm name to refresh the Kerberos tickets; (bsc#1196224); (bso#14979); - Moved logrotate files from user specific directory /etc/logrotate.d to vendor specific directory /usr/etc/logrotate.d. - Update to 4.16.2 * Use pathref fd instead of io fd in vfs_default_durable_cookie; (bso#15042); * vfs_gpfs with vfs_shadowcopy2 fail to restore file if original file had been deleted; (bso#15069); * Reintroduce netgroups support; (bso#15087); * net ads info shows LDAP Server: 0.0.0.0 depending on contacted server; (bso#14674); * Update from 4.15 to 4.16 breaks discovery of [homes] on standalone server from Win and IOS; (bso#15062); * waf produces incorrect names for python extensions with Python 3.11; (bso#15071); * smbclient -E doesn't work as advertised; (bso#15075); * The samba background daemon doesn't refresh the printcap cache on startup; (bso#15081); * Out-by-4 error in smbd read reply max_send clamp; (bso#14443); - Fix samba4.blackbox.net_ads_dns_async test with bind9 >= 9.17.7 - Support building with MIT Kerberos 1.20 - Bronze bit and S4U support with MIT Kerberos 1.20 for Samba AD DC; (CVE-2020-17049); - Resource Based Constrained Delegation (RBCD) for Samba AD DC - Support building with gcc 12.1 - Use requires_eq macro to require the libldb2 version available at samba-dsdb-modules build time; (bsc#1199362); - Update to 4.16.1 * Share and server swapped in smbget password prompt; (bso#14831); * Durable handles won't reconnect if the leased file is written to; (bso#15022); * rmdir silently fails if directory contains unreadable files and hide unreadable is yes; (bso#15023); * SMB2_CLOSE_FLAGS_FULL_INFORMATION fails to return information on renamed file handle; (bso#15038); * Need to describe --builtin-libraries= better (compare with - -bundled-libraries); (bso#8731); * vfs_shadow_copy2 breaks "smbd async dosmode" sync fallback; (bso#14957); * shadow_copy2 fails listing snapshotted dirs with shadow:fixinodes; (bso#15035); * PAM Kerberos authentication incorrectly fails with a clock skew error; (bso#15046); * Username map - samba erroneously applies unix group memberships to user account entries; (bso#15041); * KVNO off by 100000; (bso#14951); * Uninitialized litemask in variable in vfs_gpfs module; (bso#15027); * vfs_gpfs recalls=no option prevents listing files; (bso#15055); * smbd doesn't handle UPNs for looking up names; (bso#15054); - Update update-apparmor-samba-profile script, replace non-printable delimiter with more human readable separator as sed can accept separators that can appear in the input data. - Fix update-apparmor-samba-profile script, sed doesn't like multibyte separators; (bsc#1198309). - Update to 4.16.0 * New samba-dcerpcd binary to provide DCERPC in the member server setup * Certificate Auto Enrollment * Ability to add ports to dns forwarder addresses in internal DNS backend * No longer using Linux mandatory locks for sharemodes * SMB1 protocol has been deprecated, particularly older dialects * SMB1 protocol SMBCopy command removed * SMB1 server-side wildcard expansion removed - Add python3-dnspython to samba-ad-dc recommens; (bsc#1187101); - Use systemd-sysusers to create system users; (bsc#1182847);- Install a systemd drop-in file for named service to allow read/write access to the DLZ directory; (bsc#1201689);- Update to 4.15.12 * CVE-2022-42898: samba: heimdal: Samba buffer overflow vulnerabilities on 32-bit systems; (bso#15203); (bsc#1205126). - Update to 4.15.11 * Allow rebuild of Centos 8 images after move to vault for Samba 4.15; (bso#15193). * CVE-2022-3437: samba: Buffer overflow in Heimdal unwrap_des3(); (bso#15134); (bsc#1204254)- Update to 4.15.10 * Possible use after free of connection_struct when iterating smbd_server_connection->connections; (bso#15128); (bsc#1200102). * smbXsrv_connection_shutdown_send result leaked; (bso#15174). * Spotlight RPC service returns wrong response when Spotlight is disabled on a share; (bso#15086). * acl_xattr VFS module may unintentionally use filesystem permissions instead of ACL from xattr; (bso#15126). * Missing SMB2-GETINFO access checks from MS-SMB2 3.3.5.20.1; (bso#15153). * assert failed: !is_named_stream(smb_fname)") at ../../lib/util/fault.c:197; (bso#15161). * Missing READ_LEASE break could cause data corruption; (bso#15148). * rpcclient can crash using setuserinfo(2); (bso#15124). * Samba fails to build with glibc 2.36 caused by including in libreplace; (bso#15132). * SMB1 negotiation can fail to handle connection errors; (bso#15152). * samba-tool domain join segfault when joining a samba ad domain; (bso#15078). - Update to 4.15.9 * CVE-2022-32742:SMB1 code does not correct verify SMB1write, SMB1write_and_close, SMB1write_and_unlock lengths; (bso#15085); (bsc#1201496). * CVE-2022-32746: samba: Use-after-free occurring in database audit logging; (bso#15009); (bso#15096); (bsc#1201490). * CVE-2022-2031: samba, ldb: AD users can bypass certain restrictions associated with changing passwords; (bso#15047); (bsc#1201495); * CVE-2022-32745: samba: ldb: AD users can crash the server process with an LDAP add or modify request; (bso#15008); (bso#15096); (bsc#1201492). * CVE-2022-2031: samba, ldb: AD users can bypass certain restrictions associated with changing passwords; (bso#15047); (bsc#1201495); * CVE-2022-32744: samba, ldb: AD users can forge password change requests for any user; (bso#15074); (bso#15047); (bsc#1201493).- CVE-2022-1615: Do not ignore errors in random number generation; (bso#15103); (bsc#1202976); - CVE-2022-32743: Implement validated dnsHostName write rights; (bso#14833); (bsc#1202803);- Fix Use after free when iterating smbd_server_connection->connections after tree disconnect failure; (bso#15128); (bsc#1200102).- CVE-2022-32746: samba: Use-after-free occurring in database audit logging; (bso#15009); (bso#15096); (bsc#1201490). - CVE-2022-32745: samba: ldb: AD users can crash the server process with an LDAP add or modify request; (bso#15008); (bso#15096); (bsc#1201492). - CVE-2022-2031: samba, ldb: AD users can bypass certain restrictions associated with changing passwords; (bso#15047); (bsc#1201495); - CVE-2022-32742:SMB1 code does not correct verify SMB1write, SMB1write_and_close, SMB1write_and_unlock lengths; (bso#15085); (bsc#1201496). - CVE-2022-32744: samba, ldb: AD users can forge password change requests for any user; (bso#15074); (bso#15047); (bsc#1201493).- Update to 4.15.8 * Use pathref fd instead of io fd in vfs_default_durable_cookie; (bso#15042); * Setting fruit:resource = stream in vfs_fruit causes a panic; (bso#15099); * Add support for bind 9.18; (bso#14986); * logging dsdb audit to specific files does not work; (bso#15076); * vfs_gpfs with vfs_shadowcopy2 fail to restore file if original file had been deleted; (bso#15069); * netgroups support removed; (bso#15087); (bsc#1199247); * net ads info shows LDAP Server: 0.0.0.0 depending on contacted server; (bso#14674); (bsc#1199734); * waf produces incorrect names for python extensions with Python 3.11; (bso#15071); * smbclient commands del & deltree fail with NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100); (bsc#1200556); * vfs_gpfs recalls=no option prevents listing files; (bso#15055); * waf produces incorrect names for python extensions with Python 3.11; (bso#15071); * Compile error in source3/utils/regedit_hexedit.c; (bso#15091); * ldconfig: /lib64/libsmbconf.so.0 is not a symbolic link; (bso#15108); * smbd doesn't handle UPNs for looking up names; (bso#15054); * Out-by-4 error in smbd read reply max_send clamp; (bso#14443); - Move pdb backends from package samba-libs to package samba-client-libs and remove samba-libs requirement from samba-winbind; (bsc#1200964); (bsc#1198255); - Use the canonical realm name to refresh the Kerberos tickets; (bsc#1196224); (bso#14979);- Fix smbclient commands del & deltree failing with NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100); (bsc#1200556).- Revert NIS support removal; (bsc#1199247);- Use requires_eq macro to require the libldb2 version available at samba-dsdb-modules build time; (bsc#1199362);- Add missing samba-client requirement to samba-winbind package; (bsc#1198255);- Update to 4.15.7 * Share and server swapped in smbget password prompt; (bso#14831); * Durable handles won't reconnect if the leased file is written to; (bso#15022); * rmdir silently fails if directory contains unreadable files and hide unreadable is yes; (bso#15023); * SMB2_CLOSE_FLAGS_FULL_INFORMATION fails to return information on renamed file handle; (bso#15038); * vfs_shadow_copy2 breaks "smbd async dosmode" sync fallback; (bso#14957); * shadow_copy2 fails listing snapshotted dirs with shadow:fixinodes; (bso#15035); * PAM Kerberos authentication incorrectly fails with a clock skew error; (bso#15046); * username map - samba erroneously applies unix group memberships to user account entries; (bso#15041); * NT_STATUS_ACCESS_DENIED translates into EPERM instead of EACCES in SMBC_server_internal; (bso#14983); * Simple bind doesn't work against an RODC (with non-preloaded users); (bso#13879); * Crash of winbind on RODC; (bso#14641); * uncached logon on RODC always fails once; (bso#14865); * KVNO off by 100000; (bso#14951); * LDAP simple binds should honour "old password allowed period"; (bso#15001); * wbinfo -a doesn't work reliable with upn names; (bso#15003); * Simple bind doesn't work against an RODC (with non-preloaded users); (bso#13879); * Uninitialized litemask in variable in vfs_gpfs module; (bso#15027); * Regression: create krb5 conf = yes doesn't work with a single KDC; (bso#15016);- Add provides to samba-client-libs package to fix upgrades from previous versions; (bsc#1197995);- Add missing samba-libs requirement to samba-winbind package; (bsc#1198255);- Update to 4.15.6 * Renaming file on DFS root fails with NT_STATUS_OBJECT_PATH_NOT_FOUND; (bso#14169); * Samba does not response STATUS_INVALID_PARAMETER when opening 2 objects with same lease key; (bso#14737); * NT error code is not set when overwriting a file during rename in libsmbclient; (bso#14938); * Fix ldap simple bind with TLS auditing; (bso#14996); * net ads info shows LDAP Server: 0.0.0.0 depending on contacted server; (bso#14674); * Problem when winbind renews Kerberos; (bso#14979); (bsc#1196224); * pam_winbind will not allow gdm login if password about to expire; (bso#8691); * virusfilter_vfs_openat: Not scanned: Directory or special file; (bso#14971); * DFS fix for AIX broken; (bso#13631); * Solaris and AIX acl modules: wrong function arguments; (bso#14974); * Function aixacl_sys_acl_get_file not declared / coredump; (bso#7239); * Regression: Samba 4.15.2 on macOS segfaults intermittently during strcpy in tdbsam_getsampwnam; (bso#14900); * Fix a use-after-free in SMB1 server; (bso#14989); * smb2_signing_decrypt_pdu() may not decrypt with gnutls_aead_cipher_decrypt() from gnutls before 3.5.2; (bso#14968); * Changing the machine password against an RODC likely destroys the domain join; (bso#14984); * authsam_make_user_info_dc() steals memory from its struct ldb_message *msg argument; (bso#14993); * Use Heimdal 8.0 (pre) rather than an earlier snapshot; (bso#14995); * Samba autorid fails to map AD users if id rangesize fits in the id range only once; (bso#14967);- Fix mismatched version of libldb2; (bsc#1196788). - Drop obsolete SuSEfirewall2 service files.- Drop obsolete Samba fsrvp v0->v1 state upgrade functionality; (bsc#1080338).- Fix ntlm authentications with "winbind use default domain = yes"; (bso#13126); (bsc#1173429); (bsc#1196308).- Fix samba-ad-dc status warning notification message by disabling systemd notifications in bgqd; (bsc#1195896); (bso#14947).- libldb version mismatch in Samba dsdb component; (bsc#1118508);- Update to 4.15.5 * CVE-2021-44141: UNIX extensions in SMB1 disclose whether the outside target of a symlink exists; (bso#14911); (bsc#1193690). * CVE-2021-44142: Out-of-Bound Read/Write on Samba vfs_fruit module; (bso#14914); (bsc#1194859). * CVE-2022-0336: Re-adding an SPN skips subsequent SPN conflict checks; bso#14950); (bsc#1195048).- CVE-2021-44141: Information leak via symlinks of existance of files or directories outside of the exported share; (bso#14911); (bsc#1193690); - CVE-2021-44142: Out-of-bounds heap read/write vulnerability in VFS module vfs_fruit allows code execution; (bso#14914); (bsc#1194859); - CVE-2022-0336: Samba AD users with permission to write to an account can impersonate arbitrary services; (bso#14950); (bsc#1195048);- Update to 4.15.4 * Duplicate SMB file_ids leading to Windows client cache poisoning; (bso#14928); * Failed to parse NTLMv2_RESPONSE length 95 - Buffer Size Error - NT_STATUS_BUFFER_TOO_SMALL; (bso#14932); * kill_tcp_connections does not work; (bso#14934); * Can't connect to Windows shares not requiring authentication using KDE/Gnome; (bso#14935); * smbclient -L doesn't set "client max protocol" to NT1 before calling the "Reconnecting with SMB1 for workgroup listing" path; (bso#14939); * Cross device copy of the crossrename module always fails; (bso#14940); * symlinkat function from VFS cap module always fails with an error; (bso#14941); * Fix possible fsp pointer deference; (bso#14942); * Missing pop_sec_ctx() in error path inside close_directory(); (bso#14944); * "smbd --build-options" no longer works without an smb.conf file; (bso#14945);- Use pkgconfig(krb5) as dependency for the -devel package: allow OBS to pick the right flavor of krb5-devel (full vs mini). - Do not require the 'krb5' symbol by samba-client-libs: this package has an automatic dependency due to linkage on libgssapi_krb5.so.2. Automatic deps are always better. - Do not require the 'krb5' symbol from samba-libs: samba-libs requires samba-client-libs, which in turn requires krb5 libraries. Samba-libs itself has no need for krb5 (but get it indirectly anyway).- Reorganize libs packages. Split samba-libs into samba-client-libs, samba-libs, samba-winbind-libs and samba-ad-dc-libs, merging samba public libraries depending on internal samba libraries into these packages as there were dependency problems everytime one of these public libraries changed its version (bsc#1192684). The devel packages are merged into samba-devel. - Rename package samba-core-devel to samba-devel - Add python-rpm-macros to build requirements - Update the symlink create by samba-dsdb-modules to private samba ldb modules following libldb2 changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba- Update to 4.15.3 * Recursive directory delete with veto files is broken in 4.15.0; (bso#14878); * A directory containing dangling symlinks cannot be deleted by SMB2 alone when they are the only entry in the directory; (bso#14879); * SIGSEGV in rmdir_internals/synthetic_pathref - dirfsp is used uninitialized in rmdir_internals(); (bso#14892); * MaxQueryDuration not honoured in Samba AD DC LDAP; (bso#14694); * The CVE-2020-25717 username map [script] advice has undesired side effects for the local nt token; (bso#14901); (bsc#1192849); * User with multiple spaces (eg FredNurk) become un-deletable; (bso#14902); * Avoid storing NTTIME_THAW (-2) as value on disk; (bso#14127); * smbXsrv_client_global record validation leads to crash if existing record points at non-existing process; (bso#14882); * Crash in vfs_fruit asking for fsp_get_io_fd() for an XATTR call; (bso#14890); * Samba process doesn't log to logfile; (bso#14897); * set_ea_dos_attribute() fallback calling get_file_handle_for_metadata() triggers locking.tdb assert; (bso#14907); * Kerberos authentication on standalone server in MIT realm broken; (bso#14922); * Segmentation fault when joining the domain; (bso#14923); * Support for ROLE_IPA_DC is incomplete; (bso#14903); * rpcclient cannot connect to ncacn_ip_tcp services anymore; (bso#14767); * winexe crashes since 4.15.0 after popt parsing; (bso#14893); * net ads status -P broken in a clustered environment; (bso#14908); * Memory leak if ioctl(FSCTL_VALIDATE_NEGOTIATE_INFO) fails before smbd_smb2_ioctl_send; (bso#14788); * winbindd doesn't start when "allow trusted domains" is off; (bso#14899); * smbclient login without password using '-N' fails with NT_STATUS_INVALID_PARAMETER on Samba AD DC; (bso#14883); * A schannel client incorrectly detects a downgrade connecting to an AES only server; (bso#14912); * Possible null pointer dereference in winbind; (bso#14921); * Fix -k legacy option for client tools like smbclient, rpcclient, net, etc.; (bso#14846); * Add Debian 11 CI bootstrap support; (bso#14872); * Crash in recycle_unlink_internal(); (bso#14888);- Fix dependency problem upgrading from libndr0 to libndr2 and from libsamba-credentials0 to libsamba-credentials1; (bsc#1192684);- Fix regression introduced by CVE-2020-25717 patches, winbindd does not start when 'allow trusted domains' is off; (bso#14899); - Update to 4.15.2 * CVE-2016-2124: SMB1 client connections can be downgraded to plaintext authentication; (bso#12444); (bsc#1014440); * CVE-2020-25717: A user on the domain can become root on domain members; (bso#14556); (bsc#1192284); * CVE-2020-25718: Samba AD DC did not correctly sandbox Kerberos tickets issued by an RODC; (bso#14558); (bsc#1192246); * CVE-2020-25719: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets; (bso#14561); (bsc#1192247); * CVE-2020-25721: Kerberos acceptors need easy access to stable AD identifiers (eg objectSid); (bso#14557); (bsc#1192505); * CVE-2020-25722: Samba AD DC did not do suffienct access and conformance checking of data stored; (bso#14564); (bsc#1192283); * CVE-2021-3738: Use after free in Samba AD DC RPC server; (bso#14468); (bsc#1192215); * CVE-2021-23192: Subsequent DCE/RPC fragment injection vulnerability; (bso#14875); (bsc#1192214); - Update to 4.15.1 * vfs_shadow_copy2: core dump in make_relative_path; (bso#14682); * Log clutter from filename_convert_internal; (bso#14685); * MacOSX compilation fixes; (bso#14862); * rodc_rwdc test flaps; (bso#14868); * Provide a fix for MS CVE-2020-17049 in Samba [SECURITY] 'Bronze bit' S4U2Proxy Constrained Delegation bypass in Samba with embedded Heimdal; (bso#14642); * Python ldb.msg_diff() memory handling failure; (bso#14836); * "in" operator on ldb.Message is case sensitive; (bso#14845); * Release LDB 2.4.1 for Samba 4.15.1; (bso#14848); * samldb_krbtgtnumber_available() looks for incorrect string; (bso#14854); * Fix Samba support for UF_NO_AUTH_DATA_REQUIRED; (bso#14871); * Allow special chars like "@" in samAccountName when generating the salt; (bso#14874); * Correctly ignore comments in CTDB public addresses file; (bso#14826); * Fix transit path validation; (bso#12998); * Fix that child winbindd logs to log.winbindd instead of log.wb-; (bso#14852); * SMB3 cancel requests should only include the MID together with AsyncID when AES-128-GMAC is used; (bso#14855); * Prepare to operate with MIT krb5 >= 1.20; (bso#14870); * Heimdal prefers RC4 over AES for machine accounts; (bso#14864);- Enable samba-tool without ad dc.- Adjust spec to use pam macros; (bsc#1191046).- Adjust spec for size * allow some Recommends instead Requires to be configured for cifs-utils, samba-libs-python3 & samba-gpupdate; (bsc#1182847). * remove fam, undocumented and unneeded.- Add missing build dependency on bison when building with the embedded Heimdal Kerberos- Update to 4.15.0 * Removed SMB development dialects SMB2_22, SMB2_24 and SMB3_10 * VFS layer modernized. * Add the ability to set allow/deny lists for zone transfer clients in Bind DLZ plugin * Server multi-channel support no longer experimental * Improved command line user experience, unifying the options in different commands * Winbindd no longer scans trusted domains on startup and will use enterprise principals by default. * The net utility is now able to support the offline domain join feature * New options for 'samba-tool dns zoneoptions' for aging control and to mark old records as static or dynamic * DNS tombstones are now deleted as appropriate and use a consistent timestamp format * The 'samba-tool dns update' command validates and rejects now malformed IPv4 and IPv6 addresses * The 'samba-tool domain backup' command correctly takes out locks against concurrent modification during backup when using the LMDB backend * TruACL support has been removed * NIS support has been removed- Fix 'net rpc' authentication when using the machine account; (bsc#1189017); (bso#14796);- Fix dependency problem upgrading from libndr0 to libndr1; (bsc#1189875); - Fix dependency problem upgrading from libsmbldap0 to libsmbldap2; (bsc#1189875); - Fix wrong kvno exported to keytab after net ads changetrustpw due to replication delay; (bsc#1188727); - Add Certificate Auto Enrollment Policy; (jsc#SLE-18456). - Update to 4.13.10 * s3: smbd: Ensure POSIX default ACL is mapped into returned Windows ACL for directory handles; (bso#14708); * Take a copy to make sure we don't reference free'd memory; (bso#14721); * s3: lib: Fix talloc heirarcy error in parent_smb_fname(); (bso#14722); * s3: smbd: Remove erroneous TALLOC_FREE(smb_fname_parent) in change_file_owner_to_parent() error path; (bso#14736); * samba-tool: Give better error information when the 'domain backup restore' fails with a duplicate SID; (bso#14575); * smbd: Correctly initialize close timestamp fields; (bso#14714); * Spotlight RPC service doesn't work with vfs_glusterfs; (bso#14740); * ctdb: Fix a crash in run_proc_signal_handler(); (bso#14475); * gensec_krb5: Restore ipv6 support for kpasswd; (bso#14750); * smbXsrv_{open,session,tcon}: Protect smbXsrv_{open,session,tcon}_global_traverse_fn against invalid records; (bso#14752); * samba-tool domain backup offline doesn't work against bind DLZ backend; (bso#14027); * netcmd: Use next_free_rid() function to calculate a SID for restoring a backup; (bso#14669); - Update to 4.13.9 * s3: smbd: SMB1 SMBsplwr doesn't send a reply packet on success; (bso#14696); * Add documentation for dsdb_group_audit and dsdb_group_json_audit to "log level", synchronise "log level" in smb.conf with the code; (bso#14689); * Fix smbd panic when two clients open same file; (bso#14672); * Fix memory leak in the RPC server; (bso#14675); * s3: smbd: Fix deferred renames; (bso#14679); * s3-iremotewinspool: Set the per-request memory context; (bso#14675); * rpc_server3: Fix a memleak for internal pipes; (bso#14675); * third_party: Update socket_wrapper to version 1.3.2; (bso#11899); * third_party: Update socket_wrapper to version 1.3.3; (bso#14639); * idmap_rfc2307 and idmap_nss return wrong mapping for uid/gid conflict; (bso#14663); * Fix the build on OmniOS; (bso#14288); - Update to 4.13.8 * CVE-2021-20254: Fix buffer overrun in sids_to_unixids(); (bso#14571 - Update to 4.13.7 * Release with dependency on ldb version 2.2.1.- CVE-2021-20254 Buffer overrun in sids_to_unixids(); (bnc#14571); (bsc#1184677).- Fix offline domain backup not possible using lmdb version >= 0.9.26; (bso#14676); - Require libldb >= 2.2.1; (bsc#1183572); (bsc#1183574); - Update to 4.13.6 * CVE-2020-27840: samba: Unauthenticated remote heap corruption via bad DNs; (bso#14595); (bsc#1183572). * CVE-2021-20277: samba: out of bounds read in ldb_handler_fold; (bso#14655); (bsc#1183574). - Update to 4.13.5 * s3:modules:vfs_virusfilter: Recent talloc changes cause infinite start-up failure; (bso#14634); * s3: libsmb: Add missing cli_tdis() in error path if encryption setup failed on temp proxy connection; (bso#13992); * smbd: In conn_force_tdis_done() when forcing a connection closed force a full reload of services; (bso#14604); * dbcheck: Check Deleted Objects and reduce noise in reports about expired tombstones (bso#14593); * s3: Fix fcntl waf configure check; (bso#14503); * s3/auth: Implement "winbind:ignore domains"; (bso#14602); * smbd: Use fsp->conn->session_info for the initial delete-on-close token; (bso#14617); * s3: VFS: nfs4_acls. Add missing TALLOC_FREE(frame) in error path; (bso#14648); * classicupgrade: Treat old never expires value right; (bso#14624); * g_lock: Fix uninitalized variable reads; (bso#14636); * s3:pysmbd: Fix fd leak in py_smbd_create_file(); (bso#13898); * lib:util: Avoid free'ing our own pointer; (bso#14625); * HEIMDAL: krb5_storage_free(NULL) should work; (bso#12505);- Spec file fixes around systemd and requires; (bsc#1182830); - Align systemd service unit files with upstream provided ones.- Update to 4.13.4 * Work around special SMB2 IOCTL response behavior of NetApp Ontap 7.3.7; (bso#14607); * Temporary DFS share setup doesn't set case parameters in the same way as a regular share definition does; (bso#14612); * lib: Avoid declaring zero-length VLAs in various messaging functions; (bso#14605); * Do not create an empty DB when accessing a sam.ldb; (bso#14579); * vfs_fruit may close wrong backend fd; (bso#14596); * Temporary DFS share setup doesn't set case parameters in the same way as a regular share definition does; (bso#14612); * vfs_virusfilter: Allocate separate memory for config char*; (bso#14606); * vfs_fruit may close wrong backend fd; (bso#14596); * Work around special SMB2 IOCTL response behavior of NetApp Ontap 7.3.7; (bso#14607); * The cache directory for the user gencache should be created recursively; (bso#14601); * Be more flexible with repository names in CentOS 8 test environments; (bso#14594);- Uninstalling samba-client: Failed to disable unit, cifs.service does not exists; (bsc#1180388);- Update to 4.13.3 + libcli: smb2: Never print length if smb2_signing_key_valid() fails for crypto blob; (bso#14210); + s3: modules: gluster. Fix the error I made in preventing talloc leaks from a function; (bso#14486); + s3: smbd: Don't overwrite contents of fsp->aio_requests[0] with NULL via TALLOC_FREE(); (bso#14515); + s3: spoolss: Make parameters in call to user_ok_token() match all other uses; (bso#14568); + s3: smbd: Quiet log messages from usershares for an unknown share; (bso#14590); + samba process does not honor max log size; (bso#14248); + vfs_zfsacl: Add missing inherited flag on hidden "magic" everyone@ ACE; (bso#14587); + s3-libads: Pass timeout to open_socket_out in ms; (bso#13124); + s3-vfs_glusterfs: Always disable write-behind translator; (bso#14486); + smbclient: Fix recursive mget; (bso#14517); + clitar: Use do_list()'s recursion in clitar.c; (bso#14581); + manpages/vfs_glusterfs: Mention silent skipping of write-behind translator; (bso#14486); + vfs_shadow_copy2: Preserve all open flags assuming ROFS; (bso#14573); + interface: Fix if_index is not parsed correctly; (bso#14514);- Update to 4.13.2 + s3: modules: vfs_glusterfs: Fix leak of char **lines onto mem_ctx on return; (bso#14486); + RN: vfs_zfsacl: Only grant DELETE_CHILD if ACL tag is special; (bso#14471); + smb.conf.5: Add clarification how configuration changes reflected by Samba; (bso#14538); + daemons: Report status to systemd even when running in foreground; (bso#14552); + DNS Resolver: Support both dnspython before and after 2.0.0; (bso#14553); + s3-vfs_glusterfs: Refuse connection when write-behind xlator is present; (bso#14486); + provision: Add support for BIND 9.16.x; (bso#14487); + ctdb-common: Avoid aliasing errors during code optimization; (bso#14537); + libndr: Avoid assigning duplicate versions to symbols; (bso#14541); + docs: Fix default value of spoolss:architecture; (bso#14522); + winbind: Fix a memleak; (bso#14388); + s4:dsdb:acl_read: Implement "List Object" mode feature; (bso#14531); + docs-xml/manpages: Add warning about write-behind translator for vfs_glusterfs; (bso#14486); + nsswitch/nsstest.c: Avoid nss function conflicts with glibc nss.h. + vfs_shadow_copy2: Avoid closing snapsdir twice; (bso#14530); + third_party: Update resolv_wrapper to version 1.1.7; (bso#14547); + examples:auth: Do not install example plugin; (bso#14550); + ctdb-recoverd: Drop unnecessary and broken code; (bso#14513); + RN: vfs_zfsacl: Only grant DELETE_CHILD if ACL tag is special; (bso#14471);- Adjust smbcacls '--propagate-inheritance' feature to align with upstream; (bsc#1178469).- Update to samba 4.13.1 + CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with easily crafted records; (bsc#1177613); (bso#14472); + CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994); (bso#14436); + CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify; (bsc#1173902); (bso#14434); - Adjust systemd tmpfiles.d configuration, use /run/samba instead of /var/run/samba; (bsc#1177355);- Fix vfs_ceph query_directory regression; (bso#14519) - Drop liburing-devel for SLE15-SP2; (bsc#1177245)- Register CTDB recovery lock holder with ceph-mgr - Add liburing-devel dependency- Update to samba 4.13.0 + Require Python 3.6 + Move wide links functionality into VFS module + Deprecate NT4-like 'classic' Samba domain controllers + Deprecate SMBv1 only protocol options + Remove deprecated "ldap ssl ads" option + Unify asynchronous DCE-RPC server; (jsc#SES-645) + Replay multichannel lease break requests; (bso#11897); (jsc#SES-655) + Drop internal byteorder.h header from util-devel package + Remove final code for the AD DC LDAP backend + Add AD DC Group Policy Scripts + Only use gnutls_aead_cipher_encryptv2() for GnuTLS > 3.6.14; (bso#14399) + Fix %U substitutions if it contains a domain name; (bso#14467) + Fix krb5.conf creation for 'net ads join'; (bso#14479) + Fix build problem if libbsd-dev is not installed; (bso#14482) + Toggle vfs_snapper using "--with-shared-modules"; (bso#14437) + Fix idmap_ad RFC4511 response handling; (bso#14465) + Fix panic in get_lease_type(); (bso#14428)- Update to samba 4.11.13 + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2 against unencrypted passwords; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Support "server require schannel:WORKSTATION$ = no" about unsecure configurations; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): s4 torture rpc: repeated bytes in client challenge; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): libcli/auth: Reject weak client challenges in netlogon_creds_server_init() "server require schannel:WORKSTATION$ = no"; (bsc#1176579); (bso#14497); - Update to samba 4.11.12 + s3: libsmb: Fix SMB2 client rename bug to a Windows server; (bso#14403); + dsdb: Allow "password hash userPassword schemes = CryptSHA256" to work on RHEL7; (bso#14424); + dbcheck: Allow a dangling forward link outside our known NCs; (bso#14450); + lib/debug: Set the correct default backend loglevel to MAX_DEBUG_LEVEL; (bso#14426); + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428); + lib/util: do not install "test_util_paths"; (bso#14370); + lib:util: Fix smbclient -l basename dir; (bso#14345); + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428); + util: Allow symlinks in directory_create_or_exist; (bso#14166); + docs: Fix documentation for require_membership_of of pam_winbind; (bso#14358); + s3:winbind:idmap_ad: Make failure to get attrnames for schema mode fatal; (bso#14425);- Add obsoletes to libsmbldap2 package to fix upgrades from previous versions; (bsc#1172810);- Fix net command unable to negotiate SMB2; (bsc#1174120);- Update to samba 4.11.11 + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ and VLV combined; (bso#14364); (bsc#1173159] + CVE-2020-10745: invalid DNS or NBT queries containing dots use several seconds of CPU each; (bso#14378); (bsc#1173160). + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP server with paged_result or VLV; (bso#14402); (bsc#1173161) + CVE-2020-14303: Endless loop from empty UDP packet sent to AD DC nbt_server; (bso#14417); (bsc#1173359). - Update to samba 4.11.10 + Fix segfault when using SMBC_opendir_ctx() routine for share folder that contains incorrect symbols in any file name; (bso#14374). + vfs_shadow_copy2 doesn't fail case looking in snapdirseverywhere mode; (bso#14350) + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr; (bso#14413). + Malicous SMB1 server can crash libsmbclient; (bso#14366) + winbindd: Fix a use-after-free when winbind clients exit; (bso#14382) + ldb: Bump version to 2.0.11, LMDB databases can grow without bounds. (bso#14330) - Update to samba 4.11.9 + nmblib: Avoid undefined behaviour in handle_name_ptrs(); (bso#14242). + 'samba-tool group' commands do not handle group names with special chars correctly; (bso#14296). + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo is not valid; (bso#14237). + Missing check for DMAPI offline status in async DOS attributes; (bso#14293). + smbd: Ignore set NTACL requests which contain S-1-5-88 NFS ACEs; (bso#14307). + vfs_recycle: Prevent flooding the log if we're called on non-existant paths; (bso#14316) + smbd mistakenly updates a file's write-time on close; (bso#14320). + RPC handles cannot be differentiated in source3 RPC server; (bso#14359). + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313). + nsswitch: Fix use-after-free causing segfault in _pam_delete_cred; (bso#14327). + Fix fruit:time machine max size on arm; (bso#13622) + CTDB recovery corner cases can cause record resurrection and node banning; (bso#14294). + ctdb: Fix a memleak; (bso#14348). + libsmb: Don't try to find posix stat info in SMBC_getatr(). + ctdb-tcp: Move free of inbound queue to TCP restart; (bso#14295); (bsc#1162680). + s3/librpc/crypto: Fix double free with unresolved credential cache; (bso#14344); (bsc#1169095) + s3:libads: Fix ads_get_upn(); (bso#14336). + CTDB recovery corner cases can cause record resurrection and node banning; (bso#14294) + Starting ctdb node that was powered off hard before results in recovery loop; (bso#14295); (bsc#1162680). + ctdb-recoverd: Avoid dereferencing NULL rec->nodemap; (bso#14324) - Update to samba 4.11.8 + CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with ASQ; (bso#14331); (bsc#1169850); + CVE-2020-10704: LDAP Denial of Service (stack overflow) in Samba AD DC; (bso#14334); (bsc#1169851); - Update to samba 4.11.7 + s3: lib: nmblib. Clean up and harden nmb packet processing; (bso#14239). + s3: VFS: full_audit. Use system session_info if called from a temporary share definition; (bso#14283) + dsdb: Correctly handle memory in objectclass_attrs; (bso#14258). + ldb: version 2.0.9, Samba 4.11 and later give incorrect results for SCOPE_ONE searches; (bso#14270) + auth: Fix CIDs 1458418 and 1458420 Null pointer dereferences; (bso#14247). + smbd: Handle EINTR from open(2) properly; (bso#14285) + winbind member (source3) fails local SAM auth with empty domain name; (bso#14247) + winbindd: Handling missing idmap in getgrgid(); (bso#14265). + lib:util: Log mkdir error on correct debug levels; (bso#14253). + wafsamba: Do not use 'rU' as the 'U' is deprecated in Python 3.9; (bso#14266). + ctdb-tcp: Make error handling for outbound connection consistent; (bso#14274). - Update to samba 4.11.6 + pygpo: Use correct method flags; (bso#14209). + vfs_ceph_snapshots: Fix root relative path handling; (bso#14216); (bsc#1141320). + Avoiding bad call flags with python 3.8, using METH_NOARGS instead of zero; (bso#14209). + source4/utils/oLschema2ldif: Include stdint.h before cmocka.h; (bso#14218). + docs-xml/winbindnssinfo: Clarify interaction with idmap_ad etc; (bso#14122). + smbd: Fix the build with clang; (bso#14251). + upgradedns: Ensure lmdb lock files linked; (bso#14199). + s3: VFS: glusterfs: Reset nlinks for symlink entries during readdir; (bso#14182). + smbc_stat() doesn't return the correct st_mode and also the uid/gid is not filled (SMBv1) file; (bso#14101). + librpc: Fix string length checking in ndr_pull_charset_to_null(); (bso#14219). + ctdb-scripts: Strip square brackets when gathering connection info; (bso#14227).- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);- Installing: samba - samba-ad-dc.service does not exist and unit not found; (bsc#1171437);- Fix samba_winbind package is installing python3-base without python3 package; (bsc#1169521);- Require libldb2 >= 2.0.10 after security release.- CVE-2020-10704: LDAP Denial of Service (stack overflow) in Samba AD DC; (bso#14334); (bsc#1169851); - CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with ASQ; (bso#14331); (bsc#1169850);- Fix smbclient crash with double free (with unresolved krb5 credential cache); (bso#14344); (bsc#1169095).- Starting ctdb node that was powered off hard before results in recovery loop; (bso#14295); (bsc#1162680).- CTDB doesn't retry outgoing connections on bind (and some other) failures; (bso#14274); (bsc#1162680).- Revert: Allow idmap_rid to have primary group other than "Domain Users"; (bsc#1087931).- Fix nmbstatus not reporting detailed information about workgroups; (bsc#1159464); - Fix querying all names registered within broadcast area; (bso#8927);- Update to samab 4.11.5 + CVE-2019-14902: Replication of ACLs down subtree on AD Directory is not automatic; (bso#12497); (bsc#1160850). + CVE-2019-19344: Fix server crash with dns zone scavenging = yes; (bso#14050); (bsc#1160852). + CVE-2019-14907: server-side crash after charset conversion failure (eg during NTLMSSP processing); (bso#14208); (bsc#1160888). - Update to samba 4.11.4 + Ensure SMB1 cli_qpathinfo2() doesn't return an inode number; (bso#14161). + Ensure we don't call cli_RNetShareEnum() on an SMB1 connection; (bso#14174). + NT_STATUS_ACCESS_DENIED becomes EINVAL when using SMB2 in SMBC_opendir_ctx; (bso#14176). + SMB2 - Ensure we use the correct session_id if encrypting an interim response; (bso#14189). + Prevent smbd crash after invalid SMB1 negprot; (bso#14205). + printing: Fix %J substition; (bso#13745). + Remove now unneeded call to cmdline_messaging_context(); (bso#13925). + Fix incomplete conversion of former parametric options; (bso#14069). + Fix sync dosmode fallback in async dosmode codepath; (bso#14070). + vfs_fruit returns capped resource fork length; (bso#14171). + libnet_join: Add SPNs for additional-dns-hostnames entries; (bso#14116). + smbd: Increase a debug level; (bso#14211). + Prevent azure ad connect from reporting discovery errors reference-value-not-ldap-conformant; (bso#14153). + krb5_plugin: Fix developer build with newer heimdal system library; (bso#14179). + replace: Only link libnsl and libsocket if required; (bso#14168); + ctdb: Incoming queue can be orphaned causing communication; breakdown; (bso#14175). + ldb: Release ldb 2.0.8. Cross-compile will not take cross-answers or cross-execute; (bso#13846). + heimdal-build: Avoid hard-coded /usr/include/heimdal in asn1_compile-generated code; (bso#13856).- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).- Update to samba 4.11.3 + CVE-2019-14861: DNSServer RPC server crash, an authenticated user can crash the DCE/RPC DNS management server by creating records with matching the zone name; (bso#14138); (bsc#1158108). + CVE-2019-14870: DelegationNotAllowed not being enforced, the DelegationNotAllowed Kerberos feature restriction was not being applied when processing protocol transition requests (S4U2Self), in the AD DC KDC; (bso#14187); (bsc#1158109).- CVE-2019-14861: DNSServer RPC server crash, an authenticated user can crash the DCE/RPC DNS management server by creating records with matching the zone name; (bso#14138); (bsc#1158108). - CVE-2019-14870: DelegationNotAllowed not being enforced, the DelegationNotAllowed Kerberos feature restriction was not being applied when processing protocol transition requests (S4U2Self), in the AD DC KDC; (bso#14187); (bsc#1158109).- Update to samba 4.11.2 + CVE-2019-10218: Client code can return filenames containing path separators; (bsc#1144902); (bso#14071). + CVE-2019-14833: Samba AD DC check password script does not receive the full password; (bso#12438). + CVE-2019-14847: User with "get changes" permission can crash AD DC LDAP server via dirsync; (bso#14040). - Fixes from 4.11.1 + Overlinking libreplace against librt and pthread against every binary or library causes issues; (bso#14140); + kpasswd fails when built with MIT Kerberos; (bso#14155); + Fix spnego fallback from kerberos to ntlmssp in smbd server; (bso#14106); + Stale file handle error when using mkstemp on a share; (bso#14137); + non-AES schannel broken; (bso#14134); + Joining Active Directory should not use SAMR to set the password; (bso#13884); + smbclient can blunder into the SMB1 specific cli_RNetShareEnum() call on an SMB2 connection; (bso#14152); + Deleted records can be resurrected during recovery; (bso#14147); + getpwnam and getpwuid need to return data for ID_TYPE_BOTH group; (bso#14141); + winbind does not list forest trusts with additional trust attributes; (bso#14130); + fault report points to outdated documentation; (bso#14139); + pam_winbind with krb5_auth or wbinfo -K doesn't work for users of trusted domains/forests; (bso#14124); + classicupgrade results in uncaught exception - a bytes-like object is required, not 'str'; (bso#14136); + pod2man is not longer required, stop checking at build time; (bso#14131); + Exit code of ctdb nodestatus should not be influenced by deleted nodes; (bso#14129); + username/password authentication doesn't work with CUPS and smbspool; (bso#14128); + smbc_readdirplus() is incompatible with smbc_telldir() and smbc_lseekdir(); (bso#14094);- CVE-2019-14847: User with "get changes" permission can crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598); - CVE-2019-10218: Client code can return filenames containing path separators; (bso#14071); (bsc#1144902);- CVE-2019-14833: samba: Accent with "check script password" Samba AD DC check password script does not receive the full password; (bso#12438); (bsc#1154289).- Update to samba 4.11.0 + For details on all items see WHATSNEW.txt in samba-doc package + Python2 runtime support removed; python 3.4 or later required + Security improvements: - SMB1 disabled by default - lanman and plaintext authentication deprecated - winbind: PAM_AUTH and NTLM_AUTH events logged - GnuTLS 3.2 required; system FIPS mode setting honored + CephFS Snapshot integration, exposed as previous file versions + ctdb changes: - onnode -o option removed - ctdbd logs when using more than 90% of a CPU thread - CTDB_MONITOR_SWAP_USAGE variable removed + AD Domain controller improvements: - Upgrade AD databse format - BIND9_FLATFILE deprecated - default process model chagned to prefork - bind9 dns operation duration logging - Default schema updated to 2012_R2; function level is unchanged - many performance improvements + Configuration webserver support removed- Fix broken username/password authentication with CUPS and smbspool; (bsc#1152143); (bso#14128).- Fix auth problems when printing via smbspool backend with kerberos; (bnc#1148539); (bso#13832).- Update to samba 4.10.8 + CVE-2019-10197: user escape from share path definition; (bso#14035); (bsc#1141267);- Fix build on newer systems by modifying samba.spec to use consistent non-relative paths for pammodules in configure line and specification of pam_winbind.so library to package.- Update to samba 4.10.7 + Unable to create or rename file/directory inside shares configured with vfs_glusterfs_fuse module; (bso#14010). + build: Allow build when '--disable-gnutls' is set; (bso#13844) + samba-tool: Add 'import samba.drs_utils' to fsmo.py; (bso#13973). + Fix 'Error 32 determining PSOs in system' message on old DB with FL upgrade; (bso#14008). + s4/libnet: Fix joining a Windows pre-2008R2 DC; (bso#14021) + join: Use a specific attribute order for the DsAddEntry nTDSDSA object; (bso#14046). + vfs_catia: Pass stat info to synthetic_smb_fname(); (bso#14015). + lookup_name: Allow own domain lookup when flags == 0; (bso#14091). + s4 librpc rpc pyrpc: Ensure tevent_context deleted last; (bso#13932). + DEBUGC and DEBUGADDC doesn't print into a class specific log file; (bso#13915). + Request to keep deprecated option "server schannel", VMWare Quickprep requires "auto"; (bso#13949). + dbcheck: Fallback to the default tombstoneLifetime of 180 days; (bso#13967). + dnsProperty fails to decode values from older Windows versions; (bso#13969). + samba-tool: Use only one LDAP modify for dns partition fsmo role transfer; (bso#13973). + third_party: Update waf to version 2.0.17; (bso#13960). + netcmd: Allow 'drs replicate --local' to create partitions; (bso#14051). + ctdb-config: Depend on /etc/ctdb/nodes file; (bso#14017).- CVE-2019-10197: user escape from share path definition; (bso#14035); (bsc#1141267).- Prepare for use future use of kernel keyrings, modify /etc/pam.d/samba to include pam_keyinit.so; (bsc#1144059).- Update samba-winbind script to work with systemd; (bsc#1132739); - Drop samba dhcpcd hook scripts - Update to samba 4.10.6 + s3: winbind: Fix crash when invoking winbind idmap scripts; (bso#13956). + smbd does not correctly parse arguments passed to dfree and quota scripts; (bso#13964). + samba-tool dns: use bytes for inet_ntop; (bso#13965). + samba-tool domain provision: Fix --interactive module in python3; (bso#13828). + ldb_kv: Skip @ records early in a search full scan; (bso#13893). + docs: Improve documentation of "lanman auth" and "ntlm auth" connection; (bso#13981). + python/ntacls: Use correct "state directory" smb.conf option instead of "state dir"; (bso#14002). + registry: Add a missing include; (bso#13840). + Fix SMB guest authentication; (bso#13944). + AppleDouble conversion breaks Resourceforks; (bso#13958). + vfs_fruit makes direct use of syscalls like mmap() and pread(); (bso#13968). + s3:mdssvc: Fix flex compilation error; (bso#13987). + s3/vfs_glusterfs[_fuse]: Avoid using NAME_MAX directly; (bso#13872). + dsdb:samdb: schemainfo update with relax control; (bso#13799). + s3:util: Move static file_pload() function to lib/util; (bso#13964). + smbd: Fix a panic; (bso#13957). + ldap server: Generate correct referral schemes; (bso#12478). + s4 dsdb/repl_meta_data: fix use after free in dsdb_audit_add_ldb_value; (bso#13941). + s4 dsdb: Fix use after free in samldb_rename_search_base_callback; (bso#13942). + dsdb/repl: we need to replicate the whole schema before we can apply it; (bso#12204). + ldb: Release ldb 1.5.5; (bso#12478). + Schema replication fails if link crosses chunk boundary backwards; (bso#13713). + 'samba-tool domain schemaupgrade' uses relax control and skips the schemaInfo update provision; (bso#13799). + dsdb_audit: avoid printing "... remote host [Unknown] SID [(NULL SID)] ..."; (bso#13916). + python/ntacls: We only need security.SEC_STD_READ_CONTROL in order to get the ACL; (bso#13917). + s3:loadparm: Ensure to truncate FS Volume Label at multibyte boundary; (bso#13947). + Using Kerberos credentials to print using spoolss doesn't work; (bso#13939). + wafsamba: Use native waf timer; (bso#13998). + ctdb-scripts: Fix tcp_tw_recycle existence check; (bso#13984).- Update to samba-4.10.5 (including updates for 4.10.4, 4.10.3) + CVE-2019-12435 rpc/dns: Avoid NULL deference if zone not found in DnssrvOperation2; (bso#13922); (bsc#1137815). + CVE-2019-12436 dsdb/paged_results: Ignore successful results without messages; (bso#13951); (bsc#1137816). - Update to samba-4.10.4 + s3: SMB1: Don't allow recvfile on stream fsp's; (bso#13938). + py/provision: Fix for Python 2.6; (bso#13882). + netcmd: Fix 'passwordsettings --max-pwd-age' command; (bso#13873). + s3-libnet_join: 'net ads join' to child domain fails when using "-U admin@forestroot"; (bso#13861). + vfs_ceph: Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245). + vfs_ceph: Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697). + ctdb-common: Avoid race between fd and signal events; (bso#13895). + ctdb-common: Fix memory leak in run_proc; (bso#13943). + lib: Initialize getline() arguments; (bso#13892). + winbind: Fix overlapping id ranges; (bco#13903). + lib util debug: Increase format buffer to 4KiB; (bso#13902). + nsswitch pam_winbind: Fix Asan use after free; (bso#13927). + s4 lib socket: Ensure address string owned by parent struct; (bso#13929). + s3 rpc_client: Fix Asan stack use after scope; (bso#13936). + s3:smbd: Handle IO_REPARSE_TAG_DFS in SMB_FIND_FILE_FULL_DIRECTORY_INFO; (bso#10097). + smb2_tcon: Avoid STATUS_PENDING completely on tdis; (bso#10344). + smb2_sesssetup: avoid STATUS_PENDING responses for session setup; (bso#12845). + smb2_tcon: Avoid STATUS_PENDING completely on tdis; (bso#13698). + smb2_sesssetup: avoid STATUS_PENDING responses for session setup; (bso#13796). + dbcheck: Fix the err_empty_attribute() check; (bso#13843). + vfs_snapper: Drop unneeded fstat handler; (bso#13858). + vfs_default: Fix vfswrap_offload_write_send() NT_STATUS_INVALID_VIEW_SIZE check; (bso#13862). + smb2_server: Grant all 8192 credits to clients; (bso#13863). + smbd: Implement SMB_FILE_NORMALIZED_NAME_INFORMATION handling; (bso#13919). + s3/vfs_glusterfs: Dynamically determine NAME_MAX; (bso#13872). + s3: modules: ceph: Use current working directory instead of share path; (bso#13918); (bsc#1134452). + winbind: Use domain name from lsa query for sid_to_name cache entry; (bso#13831). + memcache: Increase size of default memcache to 512k; (bso#13865). + docs: Update smbclient manpage for "--max-protocol"; (bso#13857). + s3:utils: If share is NULL in smbcacls, don't print it; (bso#13937). + s3:smbspool: Fix regression printing with Kerberos credentials; (bso#13939). + ctdb-scripts: CTDB restarts failed NFS RPC services by hand, which is incompatible with systemd; (bso#13860). + ctdb-daemon: Revert "We can not assume that just because we could complete a TCP handshake"; (bso#13888). + ctdb-daemon: Never use 0 as a client ID; (bso#13930). + ctdb-common: Fix memory leak; (bso#13943). + s3:debug: Enable logging for early startup failures; (bso#13904) - Update to samba-4.10.3 + CVE-2018-16860: Heimdal KDC: Reject PA-S4U2Self with unkeyed checksum; (bso#13685); (bsc#1134024).- CVE-2019-12435: zone operations can crash rpc server; (bso#13922); (bsc#1137815).- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697). - Add ceph_snapshots VFS module; (jsc#SES-183).- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).- Update to samba-4.10.2: + CVE-2019-3870 (World writable files in Samba AD DC private/ dir); (bso#13834). + CVE-2019-3880 (Save registry file outside share as unprivileged user); (bso#13851). + py/kcc_utils: py2.6 compatibility; (bso#13837). + libcli: permit larger values of DataLength in SMB2_ENCRYPTION_CAPABILITIES of negotiate response; (bso#13869). + regfio: Improve handling of malformed registry hive files; (bso#13840). + ctdb-version: Simplify version string usage; (bso#13789). + lib: Make fd_load work for non-regular files; (bso#13859). + dbcheck: in the middle of the tombstone garbage collection causes replication failures, dbcheck: add --selftest-check-expired-tombstones cmdline option; (bso#13816). + ndr_spoolss_buf: Fix out of scope use of stack variable in NDR_SPOOLSS_PUSH_ENUM_OUT(); (bso#13818). + s4/messaging: Fix undefined reference in linking libMESSAGING-samba4.so; (bso#13854). + acl_read: Fix regression for empty lists; (bso#13836). + s4:dlz make b9_has_soa check dc=@ node; (bso#13841). + s3:client: Fix printing via smbspool backend with kerberos auth; (bso#13832). + s4:librpc: Fix installation of Samba; (bso#13847). + s3:lib: Fix the debug message for adding cache entries; (bso#13848). + s3:utils: Add 'smbstatus -L --resolve-uids' to show username; (bso#13793). + s3:lib: Fix the debug message for adding cache entries; (bso#13848). + s3:waf: Fix the detection of makdev() macro on Linux; (bso#13853). * ctdb-build: Drop creation of .distversion in tarball; (bso#13789). * ctdb-packaging: Test package requires tcpdump, ctdb package should not own system library directory; (bso#13838). - Update to samba-4.10.1: + py/kcc_utils: py2.6 compatibility; (bso#13837); + libcli: permit larger values of DataLength in SMB2_ENCRYPTION_CAPABILITIES of negotiate response; (bso#13869); + regfio: Improve handling of malformed registry hive files; (bso#13840); + ctdb-version: Simplify version string usage; (bso#13789); + lib: Make fd_load work for non-regular files; (bso#13859); + dbcheck in the middle of the tombstone garbage collection causes replication failures, dbcheck: add --selftest-check-expired-tombstones cmdline option; (bso#13816); + ndr_spoolss_buf: Fix out of scope use of stack variable in NDR_SPOOLSS_PUSH_ENUM_OUT(); (bso#13818); + s4/messaging: Fix undefined reference in linking libMESSAGING-samba4.so; (bso#13854); + acl_read: Fix regression for empty lists; (bso#13836); + s4:dlz make b9_has_soa check dc=@ node; (bso#13841); + s3:client: Fix printing via smbspool backend with kerberos auth; (bso#13832); + s4:librpc: Fix installation of Samba; (bso#13847); + s3:lib: Fix the debug message for adding cache entries; (bso#13848); + s3:utils: Add 'smbstatus -L --resolve-uids' to show username; (bso#13793); + s3:lib: Fix the debug message for adding cache entries; (bso#13848); + s3:waf: Fix the detection of makdev() macro on Linux; (bso#13853); + ctdb-build: Drop creation of .distversion in tarball; (bso#13789); + ctdb-packaging: Test package requires tcpdump, ctdb package should not own system library directory; (bso#13838); - Update to samba-4.10.0: + s4-server: Open and close a transaction on sam.ldb at startup; (bso#13760); + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812); + s4/scripting/bin: Open unicode files with utf8 encoding and write + unicode string. + sambaundoguididx: Use the right escaped oder unescaped sam ldb files; (bso#13759); + Fix idmap cache pollution with S-1-22- IDs on winbind hickup; (bso#13813); + passdb: Update ABI to 0.27.2. + lib/winbind_util: Add winbind_xid_to_sid for --without-winbind; (bso#13813); + lib:util: Move debug message for mkdir failing to log level 1; (bso#13823);- MacOS credit accounting breaks with async SESSION SETUP; (bsc#1125601); (bso#13796). - Mac OS X SMB2 implmenetation sees Input/output error or Resource temporarily unavailable and drops connection; (bso#13698)- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).- CVE-2019-3880: Save registry file outside share as unprivileged user; (bso#13851); (bsc#1131060 ).- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0); (bso#13834); (bsc#1130703);- Update to samba-4.9.5 + audit_logging: Remove debug log header and JSON Authentication: prefix; (bso#13714); + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760); + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso# CID: 1433607; (bso#11495); + smbd: uid: Don't crash if 'force group' is added to an existing share connection; (bso#13690); + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility code; (bso#13770); + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803); + s3:utils/smbget fix recursive download with empty source directories; (bso#13199); + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716); + s3:libsmb: cli_smb2_list() can sometimes fail initially on a connection; (bso#13736); + join: Throw CommandError instead of Exception for simple errors; (bso#13747); + ldb: Avoid inefficient one-level searches; (bso#13762); + s3: libsmb: use smb2cli_conn_max_trans_size() in cli_smb2_list(); (bso#13736); + tldap: Avoid use after free errors; (bso#13776); + Fix idmap xid2sid cache churn; (bso#13802); + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812); + s3-smbd: Avoid assuming fsp is always intact after close_file call; (bso#13720); + s3-vfs-fruit: Add close call; (bso#13725); + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746); + s3-vfs: add glusterfs_fuse vfs module; (bso#13774); + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766); + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS) ftruncate and fallocate; (bso#13807); + lib/audit_logging: Actually create talloc; (bso#13737); + netcmd/user: python[3]-gpgme unsupported and replaced by python[3]-gpg; (bso#13728); + dns: Changing onelevel search for wildcard to subtree; (bso#13738); + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721); + sambaundoguididx: Use the right escaped oder unescaped sam ldb files; (bso#13759); + ctdb: Print locks latency in machinereadable stats; (bso#13742); + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786); + audit_logging: auth_json_audit required auth_json; (bso#13715); + man pages: Document prefork process model; (bso#13765); + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773); + s3:auth: ignore create_builtin_guests() failing without a valid idmap configuration; (bso#13697); + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC without trusts; (bso#13722); + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd is not available; (bso#13723); + s4:server: Add support for 'smbcontrol samba shutdown' and 'smbcontrol debug/debuglevel'; (bso#13752); + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616); + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330); + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774); + notifyd: Fix SIGBUS on sparc; (bso#13704); + waf: Check for libnscd; (bso#13787); + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770); + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717); + Recovery lock bug fixes; (bso#13800); + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726); + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727); + vfs_fileid: Fix get_connectpath_ino; (bso#13741); + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).- Fix update-apparmor-samba-profile script after apparmor switched to using named profiles. The change is backwards compatible; (bsc#1126377);- LoadParm().load_default() fails with "Unable to load default file"; (bsc#1089758);- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);- Update to samba-4.9.4 + libcli/smb: Don't overwrite status code; (bso#9175). + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164). + Session setup reauth fails to sign response; (bso#13661). + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677). + vfs_shadow_copy2: Nicely deal with attempts to open previous version for writing; (bso#13688). + Restoring previous version of stream with vfs_shadow_copy2 fails with NT_STATUS_OBJECT_NAME_INVALID fsp->base_fsp->fsp_name; (bso#13455). + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571). + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708) + PEP8: fix E231: missing whitespace after ','. + winbindd: Fix crash when taking profiles;(bso#13629) + CVE-2018-14629 dns: Fix CNAME loop prevention using counter regression; (bso#13600) + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686). + CVE-2018-16853: Do not segfault if client is not set; (bso#13571). + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679) + ctdb-daemon: Exit with error if a database directory does not exist; (bso#13696). + s3:libads: Add net ads leave keep-account option; (bso#13498).- Drop more %if..%endif guards which are idempotent. - Drop requires on ldconfig which are already auto-discovered. - Do not ignore errors from useradd/groupadd.- Remove python2 build dependency from samba-libs; (bsc#1116900);- Update update-apparmor-samba-profile script to ignore the shares's paths containing substitution variables in any place, not only at the beginning of the path.- Update to samba-4.9.3 + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD Internal DNS server; (bso#13600); (bsc#1116319); + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628); (bsc#1116320); + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server; (bso#13674); (bsc#1116322); + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers; (bso#13669); (bsc#1116321); + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos configuration (unsupported); (bso#13678); (bsc#1116324); + CVE-2018-16857: Bad password count in AD DC not always effective; window; (bso#13683); (bsc#1116323);- Update to samba-4.9.2 + dsdb: Add comments explaining the limitations of our current backlink behaviour; (bso#13418); + Fix problems running domain backups (handling SMBv2, sites); (bso#13621); + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3; (bso#13465); + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642); + File saving issues with vfs_fruit on samba >= 4.8.5; (bso#13646); + Enabling vfs_fruit looses FinderInfo; (bso#13649); + Cancelling of SMB2 aio reads and writes returns wrong error NT_STATUS_INTERNAL_ERROR; (bso#13667); + Fix CTDB recovery record resurrection from inactive nodes and simplify vacuuming; (bso#13641); + examples: Fix the smb2mount build; (bso#13465); + libtevent: Fix build due to missing open_memstream on Illiumos; (bso#13629); + winbindd_cache: Fix timeout calculation for sid<->name cache; (bso#13662); + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path; (bso#13653); + Extended DN SID component missing for member after switching group membership; (bso#13418); + Return STATUS_SESSION_EXPIRED error encrypted, if the request was encrypted; (bso#13624); + python: Allow forced signing via smb.SMB(); (bso#13621); + lib:socket: If returning early, set ifaces; (bso#13665); + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8 encoded unicode; (bso#13616); + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute; (bso#13673); + waf: Add -fstack-clash-protection; (bso#13601); + winbind: Fix segfault if an invalid passdb backend is configured; (bso#13668); + Fix bugs in CTDB event handling; (bso#13659); + Misbehaving nodes are sometimes not banned; (bso#13670);- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);- winbind requires latest version of libtevent-util0 to start- Backport latest gpo code from master + Read policy from local gpt cache + Offline policy application + Make group policy extensible via register/unregister gpext + gpext's run via a process_group_policy method- Enable profiling data collection- Change samba-kdc package name to samba-ad-dc - Move samba-ad-dc.service to the samba-ad-dc package- Update to samba-4.9.1 + s3: nmbd: Stop nmbd network announce storm; (bso#13620); + s3-rpcclient: Use spoolss_init_spoolss_UserLevel1 in winspool cmds; (bso#13597); + CTDB recovery lock has some race conditions; (bso#13617); + s3-rpc_client: Advertise Windows 7 client info; (bso#13597); + ctdb-doc: Remove PIDFILE option from ctdbd_wrapper man page; (bso#13610);- Tumbleweed doesn't define the sle_version macro, so we must include a check for suse_version also. Otherwise python3 is disabled on Tumbleweed.- Update to samba-4.9.0 + samba_dnsupdate: Honor 'dns zone scavenging' option, only update if needed; (bso#13605); + wafsamba: Fix 'make -j'; (bso#13606);- Update to samba-4.9.0rc5 + s3: VFS: vfs_full_audit: Ensure smb_fname_str_do_log() only returns absolute pathnames; (bso#13565); + s3: util: Do not take over stderr when there is no log file; (bso#13578); + Durable Reconnect fails because cookie.allow_reconnect is not set; (bso#13549); + krb5-samba: Interdomain trust uses different salt principal; (bso#13539); + vfs_fruit: Don't unlink the main file; (bso#13441); + smbd: Fix a memleak in async search ask sharemode; (bso#13602); + Fix Samba GPO issue when Trust is enabled; (bso#11517); + samba-tool: Add "virtualKerberosSalt" attribute to 'user getpassword/syncpasswords'; (bso#13539); + Fix CTDB configuration issues; (bso#13589); + ctdbd logs an error until it can successfully connect to eventd; (bso#13592);- Update to samba-4.9.0rc4 + s3: smbd: Ensure get_real_filename() copes with empty pathnames; (bso#13585); + samba domain backup online/rename commands force user to specify password on CLI; (bso#13566); + wafsamba/samba_abi: Always hide ABI symbols which must be local; (bso#13579); + Fix a panic if fruit_access_check detects a locking conflict; (bso#13584); + Fix memory and resource leaks; (bso#13567); + python: Fix print in dns_invalid.py; (bso#13580); + Aliasing issue causes incorrect IPv6 checksum; (bso#13588); + Fix CTDB configuration issues; (bso#13589); + s3: vfs: time_audit: fix handling of token_blob in smb_time_audit_offload_read_recv(); (bso#13568);- Add missing zlib-devel dependency which was previously pulled in by libopenssl-devel- Update to samba-4.9.0rc3+git.22.3fff23ae36e + CVE-2018-10858: libsmb: Harden smbc_readdir_internal() against returns from malicious servers; (bso#13453); + CVE-2018-1140: ldbsearch '(distinguishedName=abc)' and DNS query with escapes crashes, ldb: Release LDB 1.3.5 for CVE-2018-1140; (bso#13374); + CVE-2018-10918: cracknames: Fix DoS (NULL pointer de-ref) when not servicePrincipalName is set on a user; (bso#13552); + CVE-2018-10919: acl_read: Fix unauthorized attribute access via searches; (bso#13434); + ctdb_mutex_ceph_rados_helper: Set SIGINT signal handler; (bso#13540); + CVE-2018-1139 libcli/auth: Do not allow ntlmv1 over SMB1 when it is disabled via "ntlm auth"; (bso#13360); + s3-tldap: do not install test_tldap; (bso#13529); + ctdb_mutex_ceph_rados_helper: Fix deadlock via lock renewals; (bso#13540); + CVE-2018-1140 Add NULL check for ldb_dn_get_casefold() in ltdb_index_dn_attr(); (bso#13374); + ctdb-eventd: Fix CID 1438155; (bso#13554); + Fix CIDs 1438243, (Unchecked return value) 1438244 (Unsigned compared against 0), 1438245 (Dereference before null check) and 1438246 (Unchecked return value); (bso#13553); + ctdb: Fix a cut&paste error; (bso#13554); + systemd: Only start smb when network interfaces are up; (bso#13559); + Fix quotas don't work with SMB2; (bso#13553); + s3/smbd: Ensure quota code is only called when quota support detected; (bso#13563); + s3/libsmb: Explicitly set delete_on_close token for rmdir; (bso#13204); + s3:waf: Install eventlogadm to /usr/sbin; (bso#13561); + Shorten description in vfs_linux_xfs_sgid manual; (bso#13562);- Update to samba-4.9.0rc2+git.21.a1069afb007 + s3: smbd: Using "sendfile = yes" with SMB2 can cause CPU spin; (bso#13537); + s3: smbd: Fix path check in smbd_smb2_create_durable_lease_check(); (bso#13535); + samba-tool trust: Support discovery via netr_GetDcName; (bso#13538); + s4-dsdb: Only build dsdb Python modules for AD DC; (bso#13542); + Fix portability issues on freebsd; (bso#13520); + DNS wildcard search does not handle multiple labels correctly; (bso#13536); + samba-tool domain trust: Fix trust compatibility to Windows Server 1709 and FreeIPA; (bso#13308); + Fix portability issues on freebsd; (bso#13520); + ctdb-protocol: Fix CTDB compilation issues; (bso#13545); + ctdb-docs: Replace obsolete reference to CTDB_DEBUG_HUNG_SCRIPT option; (bso#13546); + ctdb-doc: Provide an example script for migrating old configuration; (bso#13550); + ctdb-event: Implement event tool "script list" command; (bso#13551);- Update to samba-4.8.4+git.37.a7a861d7982; + CVE-2018-1139: Weak authentication protocol allowed; (bsc#1095048); (bsc#13360); + CVE-2018-1140: Denial of Service Attack on DNS and LDAP server; (bsc#1095056); (bso#13466); (bso#13374); + CVE-2018-10858: Insufficient input validation on client directory listing in libsmbclient; (bsc#1103411); (bso#13453); + CVE-2018-10918: Denial of Service Attack on AD DC DRSUAPI server; (bsc#1103414); (bso#13552); + CVE-2018-10919: Confidential attribute disclosure from the AD LDAP server; (bsc#1095057); (bso#13434); + s3:winbind: winbind normalize names' doesn't work for users; (bso#12851); + winbind: Fix UPN handling in canonicalize_username(); (bso#13369); + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428); + samdb: Fix building Samba with gcc 8.1; (bso#13437); + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440); + smbd: Flush dfree memcache on service reload; (bso#13446); + ldb: Save a copy of the index result before calling the + lib/util: No Backtrace given by Samba's AD DC by default; (bso#13454). + s3: smbd: printing: Re-implement delete-on-close semantics for print files missing since 3.5.x; (bso#13457). + python: Fix talloc frame use in make_simple_acl(); (bso#13474). + krb5_wrap: Fix keep_old_entries logic for older Kerberos libraries;(bso#13478). + krb5_plugin: Add winbind localauth plugin for MIT Kerberos; (bso#13480).- Add missing package descriptions; (bsc#1093864); - Fix dependency issue between samba-python and samba-kdc; (bsc#1062876); - Call update-apparmor-samba-profile when running samba-ad-dc; (bsc#1092099);- Update to 4.8.2 + After update to 4.8.0 DC failed with "Failed to find our own NTDS Settings objectGUID" (bso#13335). + fix incorrect reporting of stream dos attributes on a directory (bso#13380). + vfs_ceph: add asynchronous fsync; fake synchronous call (bso#13412). + vfs_ceph: add fake async pwrite/pread send/recv hooks; (bso#13425) + vfs_ceph: Fix memory leak; (bso#13424). + libsmbclient: Fix hard-coded connection error return of ETIMEDOUT; (bso#13419). + s4-lsa: Fix use-after-free in LSA server; (bso#13420). + winbindd: Do re-connect if the RPC call fails in the passdb case; (bso#13430). + cleanupd: Sends MSG_SMB_UNLOCK twice to interested peers; (bso#13416). + cleanupd: Use MSG_SMB_BRL_VALIDATE to signal cleanupd unclean process shutdown; (bso#13414). + ctdb-client: Remove ununsed functions from old client code; (bso#13411). + printing: Return the same error code as windows does on upload failures; (bso#13395). + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged pipe is not accessable; (bso#13400). + s4:lsa_lookup: remove TALLOC_FREE(state) after all dcesrv_lsa_Lookup{Names,Sids}_base_map() calls; (bso#13420). + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407). + s3:smbspool: Fix cmdline argument handling; (bso#13417).- Move libdfs-server-ad-samba4.so library from kdc to libs package, as it is required by some client libs; (bsc#1074135); - Update to 4.8.1; (bsc#1091179); + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error, we don't own it here; (bso#13244); + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't support fdopendir(); (bso#13270); + Round-tripping ACL get/set through vfs_fruit will increase the number of ACE entries without limit; (bso#13319); + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit issues; (bso#13347); + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without delete access; (bso#13358); + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372); + s3: smbd: Unix extensions attempts to change wrong field in fchown call; (bso#13375); + ms_schema/samba-tool visualize: Fix python2.6 incompatibility; (bso#13337); + Fix invocation of gnutls_aead_cipher_encrypt(); (bso#13352); + Windows 10 cannot logon on Samba NT4 domain; (bso#13328); + winbindd: Recover loss of netlogon secure channel in case the peer DC is rebooted; (bso#13332); + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363); + ctdb-client: Fix bugs in client code; (bso#13356); + ctdb-scripts: Drop "net serverid wipe" from 50.samba event script; (bso#13359); + s3: lib: messages: Don't use the result of sec_init() before calling sec_init(); (bso#13368); + libads: Fix the build '--without-ads'; (bso#13273); + winbind: Keep "force_reauth" in invalidate_cm_connection, add 'smbcontrol disconnect-dc'; (bso#13332); + vfs_virusfilter: Fix CIDs 1428738-1428740; (bso#13343); + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367); + rpc_server: Fix core dump in dfsgetinfo; (bso#13370); + smbclient: Fix notify; (bso#13382); + Fix smbd panic if the client-supplied channel sequence number wraps; (bso#13215); + Windows 10 cannot logon on Samba NT4 domain; (bso#13328); + lib/util: Remove unused '#include ' from tests/tfork.c; (bso#13342); + Fix build errors with cc from developerstudio 12.5 on Solaris; (bso#13343); + Fix the picky-developer build on FreeBSD 11; (bso#13344); + s3:modules: Fix the build of vfs_aixacl2.c; (bso#13345); + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338); + lib:replace: Fix linking when libtirpc-devel overwrites system headers; (bso#13341); + winbindd: 'wbinfo --name-to-sid' returns misleading result on invalid query; (bso#13312); + s3:passdb: Do not return OK if we don't have pinfo set up; (bso#13376); + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);- Use new foreground execution flags for systemd samba daemons; (bsc#1088574); (bsc#1071090); (bsc#1065551); + Add %post scriptlet to clear old sysconfig flags - Update vendor-files to commit 880b3e7. + Set samba sysconfig template variables to "" + Add required daemon flags directly to systemd unit- Specfile cleanup + Remove %if..%endif guards which don't affect the build + Remove redundant %clean section + Replace old $RPM_* shell vars with macros- BuildRequire pkgconfig(systemd) and pkgconfig(libsystemd) in place of systemd and systemd-devel: Allow OBS to optimize the workload by allowing the usage of the 'build-optimized' systemd packages.- Enable building samba with python3, and create a samba-python3 package.- Update to 4.8 + New GUID Index mode in sam.ldb for the AD DC + GPO support for samba KDC + Time machine support with vfs_fruit + Encrypted secrets + AD Replication visualization + Improved trust support - ability to not scan global trust list - AD external trusts have limited support - verbose trusted domain listing + VirusFilter VFS module + NT4-style replication removed + vfs_aio_linux removed- Disable samba-pidl package, due to the removal of dependency perl-Parse-Yapp; (bsc#1085150);- Update to 4.7.6; + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally; (bso#11343); (bsc#1081741); + CVE-2018-1057: Authenticated users can change other users' password; (bso#13272); (bsc#1081024).- Disable python until full python3 port is done; (bsc#1082139); + Remove contents of package samba-python + Remove contents of package libsamba-policy0 + Remove contents of package libsamba-policy-devel + Remove library libsamba-python-samba4.so from samba-libs package + Remove library libsamba-net-samba4.so from samba-libs package + Remove smbtorture binary and manpage from samba-test- samba fails to build with glibc2.27; (bsc#1081042);- Update to 4.7.5; (bsc#1080545); + smbd tries to release not leased oplock during oplock II downgrade; (bso#13193); + Fix copying file with empty FinderInfo from Windows client to Samba share with fruit; (bso#13181); + build: Deal with recent glibc sunrpc header removal; (bso#10976); + Make Samba work with tirpc and libnsl2; (bso#13238); + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208); (bsc#1075206); + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue; (bso#12986); + ctdb-recovery-helper: Deregister message handler in error paths; (bso#13188); + samba: Only use async signal-safe functions in signal handler; (bso#13240); + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue; (bso#12986); + repl_meta_data: Fix linked attribute corruption on databases with unsorted links on expunge. dbcheck: Add functionality to fix the corrupt database; (bso#13228); + Fix smbd panic when chdir returns error during exit; (bso#13189); + Make Samba work with tirpc and libnsl2; (bso#13238); + Fix POSIX ACL support on HPUX and possibly other big-endian OSs; (bso#13176);- Update to 4.7.4; (bsc#1080545); + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140); + s3: libsmb: Fix valgrind read-after-free error in cli_smb2_close_fnum_recv(); (bso#13171); + s3: libsmb: Fix reversing of oldname/newname paths when creating a reparse point symlink on Windows from smbclient; (bso#13172); + Build man page for vfs_zfsacl.8 with Samba; (bso#12934); + repl_meta_data: Allow delete of an object with dangling backlinks; (bso#13095); + s4:samba: Fix default to be running samba as a deamon; (bso#13129); + Performance regression in DNS server with introduction of DNS wildcard, ldb: Release 1.2.3; (bso#13191); + vfs_zfsacl: Fix compilation error; (bso#6133); + "smb encrypt" setting changes are not fully applied until full smbd restart; (bso#13051); + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052); + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155); + winbindd: Dependency on trusted-domain list in winbindd in critical auth codepath; (bso#13173); + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120); + ctdb: sock_daemon leaks memory; (bso#13153); + TCP tickles not getting synchronised on CTDB restart; (bso#13154); + winbindd: winbind parent and child share a ctdb connection; (bso#13150); + pthreadpool: Fix deadlock; (bso#13170); + pthreadpool: Fix starvation after fork; (bso#13179); + messaging: Always register the unique id; (bso#13180); + s4/smbd: set the process group; (bso#13129); + Fix broken linked attribute handling; (bso#13095); + The KDC on an RWDC doesn't send error replies in some situations; (bso#13132); + libnet_join: Fix 'net rpc oldjoin'; (bso#13149); + g_lock conflict detection broken when processing stale entries; (bso#13195); + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired sessions; (bso#13197); + s3:libads: net ads keytab list fails with "Key table name malformed"; (bso#13166); (bsc#1067700); + Fix crash in pthreadpool thread after failure from pthread_create; (bso#13170); + s4:samba: Allow samba daemon to run in foreground; (bso#13129); (bsc#1065551); + third_party: Link the aesni-intel library with "-z noexecstack"; (bso#13174); + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I" options; (bso#13125);- Re-enable usage of libnsl (did got lost with glibc change) - Use TI-RPC (sunrpc is deprecated and will be removed soon from glibc)- smbc_opendir should not return EEXIST with invalid login credentials; (bnc#1065868).- Update to 4.7.3; (bsc#1069666); + Non-smbd processes using kernel oplocks can hang smbd; (bso#13121); + python: use communicate to fix Popen deadlock; (bso#13127); + smbd on disk file corruption bug under heavy threaded load; (bso#13130); + tevent: version 0.9.34; (bso#13130); + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118); + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug; (bsc#1060427);(bso#13041); + CVE-2017-15275: s3: smbd: Chain code can return uninitialized memory when talloc buffer is grown; (bsc#1063008); (bso#13077); - Build with AD DC support only in openSUSE.- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- samba-tool requires samba-python; (bnc#1067771).- Run all daemons in the foreground and let systemd handle it; (bsc#1065551). - Update to 4.7.1; + Fix exporting subdirs with shadow_copy2; (bso#13091); + Currently if getwd() fails after a chdir(), we panic; (bso#13027); + Ensure default SMB_VFS_GETWD() call can't return a partially completed struct smb_filename; (bso#13068); + sys_getwd() can leak memory or possibly return the wrong errno on older systems; (bso#13069); + smbclient doesn't correctly canonicalize all local names before use; (bso#13093); + Fix broken linked attribute handling; (bso#13095); + Missing LDAP query escapes in DNS rpc server; (bso#12994); + Link to -lbsd when building replace.c by hand; (bso#13087); + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem; (bso#6133); + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module; (bso#7909); + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module; (bso#7933); + Missing assignment in sl_pack_float; (bso#12991); + Wrong Samba access checks when changing DOS attributes; (bso#12995); + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062); + groupmap cleanup should not delete BUILTIN mappings; (bso#13065); + Enabling vfs_fruit results in loss of Finder tags and other xattrs; (bso#13076); + man pages: Properly ident lists; (bso#9613); + smb.conf.5: Sort parameters alphabetically; (bso#13081); + Fix GUID string format on GetPrinter info; (bso#12993); + Remote serverid check doesn't check for the unique id; (bso#13042); + CTDB starts consuming memory if there are dead nodes in the cluster; (bso#13056); + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070); + libgpo doesn't sort the GPOs in the correct order; (bso#13046); + Remote serverid check doesn't check for the unique id; (bso#13042); + vfs_catia: Fix a potential memleak; (bso#13090); + Fix file change notification for renames; (bso#12903); + Samba DNS server does not honour wildcards; (bso#12952); + Can't change password in samba from a Windows client if Samba runs on IPv6 only interface; (bso#13079); + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086); + Apple client can't cope with SMB2 async replies when creating symlinks; (bso#13047); + s4:rpc_server:backupkey: Move variable into scope; (bso#12959); + Fix ntstatus_gen.h generation on 32bit; (bso#13099); + Fix a double free in vfs_gluster_getwd(); (bso#13100); + Fix resouce leaks and pointer issues; (bso#13101); + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);- Add samba-kdc to baselibs.conf. - Do not wrap samba-kdc's package definition into if/endif: the package won't be generated simply based on the fact that there is no files section for the package. Allows the source validator to ensure samba-kdc is a built package.- Update to 4.7.0; + Whole DB read locks: Improved LDAP and replication consistency; (bso#12858). + Samba AD with MIT Kerberos + Dynamic RPC port range: Default range changed from "1024-1300" to "49152-65535". + Authentication and Authorization audit support: New auth_audit debug class. + Multi-process LDAP Server: The LDAP server in the AD DC now honours the process model used for the rest of the 'samba' process. + Improved Read-Only Domain Controller (RODC) Support; (bso#12977). + Additional password hashes stored in supplementalCredentials. + Improvements to DNS during Active Directory domain join. + Significant AD performance and replication improvements. + Query record for open file or directory. + Removal of lpcfg_register_defaults_hook(). + Change of loadable module interface. + SHA256 LDAPS Certificates: The self-signed certificate generated for use on LDAPS will now be generated with a SHA256 self-signature, not a SHA1 self-signature. + CTDB no longer allows mixed minor versions in a cluster. + CTDB now ignores hints from Samba about TDB flags when attaching to databases. + New configuration variable CTDB_NFS_CHECKS_DIR. + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed. + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed. + The example NFS Ganesha call-out has been improved. + A new "replicated" database type is available.- CVE-2017-12163: Prevent client short SMB1 write from writing server memory to file; (bso#13020); (bsc#1058624).- CVE-2017-12150: Some code path don't enforce smb signing, when they should; (bso#12997); (bsc#1058622).- CVE-2017-12151: Keep required encryption across SMB3 dfs redirects; (bso#12996); (bsc#1058565).- Clean specfile assuming SUSE-only system and product >=SLE11 + %{ul_version}, %{rhel_version}, %{mandriva_version}, %{centos_version} are always undefined + %{_vendor} is "suse" and %{suse_version} is at least 1100- Update to 4.6.7; (bsc#1054017) + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392). + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937). + vfs_ceph provides inconsistent directory listings; (bso#12911). + Misused talloc context can cause a user to crash their smbd by chaining SMB1 commands.; (bso#12836). + Use-after free can crash libsmbclient code.; (bso#12927). + Server exit with active AIO can crash.; (bso#12925). + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910). + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs; (bso#12898). + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897). + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for authentication; (bso#12886). + finder sidebar showing question mark instead of icon when using ip to connect with vfs_fruit; (bso#12840). + Winbind stops obtaining the 'unixHomeDirectory' & 'loginShell' attributes from AD.; (bso#12720). + KCC run at selftest startup can fail spuriously due to a race; (bso#12869). + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for the remote change; (bso#12782). + rpc_pipe_client memory leaks due to long term memory context passed to rpc_pipe_open_interface(); (bso#12890). + CVE-2017-2619 breaks accessing previous versions of directories with snapshots in subdirectories of the share; (bso#12885). + dns_name_equal doing OOB read; (bso#12813). + replica_sync tests flap; (bso#12753). + Selftest should not call 'net cache flush' and wipe important winbind entries; (bso#12868). + Old Samba versions don't support using recent ldb versions (>=1.1.30); (bso#12859). + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490). + race starting winbindd against posixacl test; (bso#12843). + Crash in the reentrant smbd_smb2_create_send() if the something fails in the subsequent try; (bso#12832). + spnego.c passes the wrong argument order to gensec_update_ev() for the FALLBACK case; (bso#12788). + Clients with SMB3 support can't connect with "server max protocol = SMB2_02"; (bso#12772). + A log message of samb-tool user syncpasswords reverses string arguments in a debug message "Call Popen[...".; (bso#12768). + The smb tarmode tests kills the share dir contents; (bso#12867). + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862). + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860). + manpage/index.html lists links not in alphabetical order; (bso#12854). + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831). + If a record is locked in a database, then recovery does not complete; (bso#12857). + debug_locks.sh script does not log any information; (bso#12856). + SIGSEGV in cm_connect_lsa_tcp dereferencing conn->lsa_tcp_pipe->transport after error; (bso#12852). + smbclient can't parse DOMAIN+username if a different winbind separator is used; (bso#12849). + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845). + Related requests with TreeConnect fail with NETWORK_NAME_DELETED; (bso#12844). + cli->server_os not filled correctly; (bso#12779). + REGRESSION: smbclient doesn't print the session setup anymore; (bso#12824). + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808). + CTDB NFS call-out failures do not cause event failures; (bso#12837). + net command fails due to incorrectly return code; (bso#12828). + Fix building Samba with GCC 7.1; (bso#12827).- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again; (bsc#1048339).- fix cephwrap_chdir(); (bsc#1048790). - Update to 4.6.6 + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation; (bsc#1048278).- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).- Fix inconsistent ctdb socket path; (bsc#1048352). - Fix non-admin cephx authentication; (bsc#1048387).- Update to 4.6.5; (bsc#1040157) + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at startup; (bso#12814). + vfs_expand_msdfs tries to open the remote address as a file path; (bso#12687). + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type); (bso#12798). + With clustering get update_num_read_oplocks failed and PANIC: num_share_modes == 1 assertion failure; (bso#11844). + contend_level2_oplocks_begin_default oplock optimisation doesn't carry over to leases; (bso#12766). + `ctdb nodestatus` incorrectly displays status for all nodes with wrong exit code; (bso#12802). + CTDB can spin hard on revoking readonly delegations if a node becomes disconnected; (bso#12697). + Printing a share mode entry with leases can crash in the ndr code; (bso#12793). + Fix flakey unit tests for eventd; (bso#12792). + CTDB daemon crashes if built with clang; (bso#12770). + smbcacls fails if no password is specified; (bso#12765). + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757). + samba-tool user syncpasswords doesn't trigger the script when a user gets removed; (bso#12767). + systemd: fix detection of libsystemd; (bso#12764). + Notify subsystem only maps first inotify mask to Windows notify filter; (bso#12760). + Allow passing trusted domain password as plain-text to PASSDB layer; (bso#12751). + Can't case-rename files with vfs_fruit; (bso#12749). + wrong sid->uid mapping for SIDs residing in sIDHistory; (bso#12702). + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562). + Ordering of notify responses broken; (bso#12756).- s3: libsmb: Fix error where short name length was read as 2 bytes, should be 1; (bso#11822); (bsc#1042419).- Revert explicit winbind %{version}-%{release} dependency. + The ABI has stabilized since (bsc#936909), so remove to fix cross-media dependencies; (bsc#1037899).- Fix CVE-2017-7494 remote code execution from a writable share; (bso#12780); (bsc#1038231).- Update to 4.6.3; (bsc#1036011) + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots from shares with GlusterFS backend; (bso#12743). + Fix for Solaris C compiler; (bso#12559). + s3: locking: Update oplock optimization for the leases era; (bso#12628). + Make the Solaris C compiler happy; (bso#12693). + s3: libgpo: Allow skipping GPO objects that don't have the expected LDAP attributes; (bso#12695). + Fix buffer overflow caused by wrong use of getgroups; (bso#12747). + lib: debug: Avoid negative array access; (bso#12746). + cleanupdb: Fix a memory read error; (bso#12748). + streams_xattr and kernel oplocks results in NT_STATUS_NETWORK_BUSY; (bso#7537). + winbindd: idmap_autorid allocates ids for unknown SIDs from other backends; (bso#11961). + vfs_fruit: Resource fork open request with flags=O_CREAT|O_RDONLY; (bso#12565). + manpages/vfs_fruit: Document global options; (bso#12615). + lib/pthreadpool: Fix a memory leak; (bso#12624). + Lookup-domain for well-known SIDs on a DC; (bso#12727). + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728). + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729). + credentials_krb5: use gss_acquire_cred for client-side GSSAPI use case; (bso#12611). + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690). + ctdb-readonly: Avoid a tight loop waiting for revoke to complete; (bso#12697). + ctdb_event monitor command crashes if event is not specified; (bso#12723). + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733). + smbd: Fix smb1 findfirst with DFS; (bso#12558). + smbd: Do an early exit on negprot failure; (bso#12610). + winbindd: Fix substitution for 'template homedir'; (bso#12699). + s4:kdc: Disable principal based autodetected referral detection; (bso#12554). + idmap_autorid: Allocate new domain range if the callers knows the sid is valid; (bso#12613). + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724). + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for trusted domain; (bso#12725). + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731). + winbindd: Fix password policy for pam authentication; (bso#12725). + s3:gse: Correctly handle external trusts with MIT; (bso#12554). + auth/credentials: Always set the realm if we set the principal from the ccache; (bso#12611). + replace: Include sysmacros.h; (bso#12686). + s3:vfs_expand_msdfs: Do not open the remote address as a file; (bso#12687). + s3:libsmb: Only print error message if kerberos use is forced; (bso#12704). + winbindd: Child process crashes when kerberos-authenticating a user with wrong password; (bso#12708). + vfs_fruit: Office document opens as read-only on macOS due to CNID semantics; (bso#12715). + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is fragmented; (bso#12737).- Generate and update vendor-files tarball from Git + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).- Generate source tarball directly from Git using OBS tar_scm + use version string derived from parent Git tag and commit hash - remove obsolete vendor-files/tools/package-data version ID + explicitly generate ctdb manpages, needed without "make dist"- Update to 4.6.2 + remove bso#12721 patches now upstream- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622). + x86-64 and aarch64- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).- Build and install the html man pages (bsc#1021907).- Fix CVE-2017-2619 regression with "follow symlinks = no"; (bso#12721).- Update to 4.6.1 + symlink race permits opening files outside share directory; CVE-2017-2619; (bso#12496); (bsc#1027147) + testparm checks for valid idmap parameters + add new krb client encryption types + support for printer driver upload from windows 10 + inherit owner = 'unix only' for improved quota support + improved CTDB event support + new primary group support for idmap_ad + idmap_hash deprecated + mvxattr added to recursively rename extended attributes- Remove chkconfig requirements for systemd systems- Don't call insserv if systemd is used- Fix check if we need to require insserv- async_req: make async_connect_send() "reentrant"; (bso#12105); (bsc#1024416).- Force usage of ncurses6-config thru NCURSES_CONFIG env var; (bsc#1023847).- add missing patch for libnss_wins segfault; (bsc#995730).- Fix vfs_ceph builds against recent Ceph versions; (bsc#1021933).- Document "winbind: ignore domains" parameter; (bsc#1019416).- Add base Samba dependency to samba-ceph package.- Update to 4.5.3 + Heap-based Buffer Overflow Remote Code Execution Vulnerability; CVE-2016-2123; (bso#12409); (bsc#1014437). + Don't send delegated credentials to all servers; CVE-2016-2125; (bso#12445); (bsc#1014441). + denial of service due to a client triggered crash in the winbindd parent process; CVE-2016-2126; (bso#12446); (bsc#1014442). - 4.5.1 and 4.5.2 updates + various streams vfs fixes + various printing fixes + ntlm_auth: do not map explicitly empty domain + various stability fixes in smbd + match file compression ReFS behavior- Add missing ldb module directory; (bnc#1012092).- s3/client: obey 'disable netbios' smb.conf param, don't connect via NBT port; (bsc#1009085); (bso#12418).- Include vfstest in samba-test; (bsc#1001203).- s3/winbindd: using default domain with user@domain.com format fails; (bsc#997833).- Fix segfault in libnss_wins; (bso#12277); (bso#12269); (bsc#995730).- Update to 4.5.0 + NTLM1 Authentication disabled by default + SMB2.1 leases enabled by default + Support for OFD locks + ctdb tool rewritten + Added shadow copy snapshot prefix parameter- Fix illegal memory access after memory has been deleted; (bso#11836); (bsc#975299).- Prevent core, make sure response->extra_data.data is always cleared out; (bsc#993692).- Don't package man pages for VFS modules that aren't built; (boo#993707).- Fix population of ctdb sysconfig after source merge; (bsc#981566).- Enable vfs_ceph builds for Factory (x86-64) + Package as samba-ceph to avoid Ceph dependency in base package.- Update to 4.4.5 + Prevent client-side SMB2 signing downgrade; CVE-2016-2119; (bso#11860); (bsc#986869).- Remove obsolete syslog.target; (bsc#983938).- Honor smb.conf socket options in winbind; (bsc#975131).- Don't use htons() with IP_PROTO_RAW; (bso#11705); (bsc#969522).- Update to 4.4.4 + SMB3 multichannel: Add implementation of missing channel sequence number verification; (bso#11809). + smbd:close: Only remove kernel share modes if they had been taken at open; (bso#11919). + notifyd: Prevent NULL deref segfault in notifyd_peer_destructor; (bso#11930). + s3:rpcclient: Make '--pw-nt-hash' option work; (bso#10796). + Fix case sensitivity issues over SMB2 or above; (bso#11438). + s3:smbd: Fix anonymous authentication if signing is mandatory. (bso#11910) + Fix NTLM Authentication issue with squid; (bso#11914). + pdb: Fix segfault in pdb_ldap for missing gecos; (bso#11530). + Fix memory leak in share mode locking; (bso#11934).- Update to 4.4.3 + Various post-badlock regressions; (bso#11841); (bso#11850); (bso#11858); (bso#11870); (bso#11872). + Only allow idmap_hash for default idmap config (bso#11786). + smbd: Avoid large reads beyond EOF; (bso#11878). + vfs_acl_common: Avoid setting POSIX ACLs if "ignore system acls" is set; (bso#11806). + libads: Record session expiry for spnego sasl binds; (bso#11852).- Fix NTLMSSP regressions caused by previous CVE fixes; (bso#11849); (bsc#975962); (bsc#979268), (bsc#977669).- Revert shared library packaging to comply with SLPP- Update to 4.4.2 + A man-in-the-middle can downgrade NTLMSSP authentication; CVE-2016-2110; (bso#11688); (bsc#973031). + Domain controller netlogon member computer can be spoofed; CVE-2016-2111; (bso#11749); (bsc#973032). + LDAP conenctions vulnerable to downgrade and MITM attack; CVE-2016-2112; (bso#11644); (bsc#973033). + TLS certificate validation missing; CVE-2016-2113; (bso#11752); (bsc#973034). + Named pipe IPC vulnerable to MITM attacks; CVE-2016-2115; (bso#11756); (bsc#973036). + "Badlock" DCERPC impersonation of authenticated account possible; CVE-2016-2118; (bso#11804); (bsc#971965). + DCERPC server and client vulnerable to DOS and MITM attacks; CVE-2015-5370; (bso#11344); (bsc#936862).- Fix samba.tests.messaging test and prevent potential tdb corruption by removing obsolete now invalid tdb_close call; (bsc#974629).- Obsolete libsmbclient from libsmbclient0 while not providing it; (bsc#972197).- Update to 4.4.0. + Read of uninitialized memory DNS TXT handling; (bso#11128); (bso#11686); CVE-2016-0771. + Getting and setting Windows ACLs on symlinks can change permissions on link target; (bso#11648); CVE-2015-7560. + Sockets with htons(IPPROTO_RAW); (bso#11705); CVE-2015-8543. + s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystem with no ACL support; (bso#10489). + docs: Add example for domain logins to smbspool man page; (bso#11643). + smbd: Show correct disk size for different quota and dfree block sizes; (bso#11681). + docs: Add smbspool_krb5_wrapper manpage; (bso#11690). + winbindd: Return trust parameters when listing trusts; (bso#11691). + ctdb: Do not provide a useless pkgconfig file for ctdb; (bso#11696). + Crypto.Cipher.ARC4 is not available on some platforms, fallback to M2Crypto.RC4.RC4 then; (bso#11699). + s3:utils/smbget: Set default blocksize; (bso#11700). + Streamline 'smbget' options with the rest of the Samba utils; (bso#11700). + s3:clispnego: Fix confusing warning in spnego_gen_krb5_wrap(); (bso#11702). + s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703). + loadparm: Fix memory leak issue; (bso#11708). + lib/tsocket: Work around sockets not supporting FIONREAD; (bso#11714). + s3:vfs:glusterfs: Fix build after quota changes; (bso#11715). + ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ..."; (bso#11719). + lib:socket: Fix CID 1350010: Integer OVERFLOW_BEFORE_WIDEN; (bso#11723). + smbd: Fix CID 1351215 Improper use of negative value; (bso#11724). + smbd: Fix CID 1351216 Dereference null return value; (bso#11725). + s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new file; (bso#11727). + docs: Add manpage for cifsdd; (bso#11730). + param: Fix str_list_v3 to accept ; again; (bso#11732). + lib/socket: Fix improper use of default interface speed; (bso#11734). + lib:socket: Fix CID 1350009: Fix illegal memory accesses (BUFFER_SIZE_WARNING); (bso#11735). + libcli: Fix debug message, print sid string for new_ace trustee; (bso#11738). + Fix installation path of Samba helper binaries; (bso#11739). + Fix memory leak in loadparm; (bso#11740). + tevent: version 0.9.28: Fix memory leak when old signal action restored; (bso#11742). + smbd: Ignore SVHDX create context; (bso#11753). + Fix net join; (bso#11755). + s3:libads: setup the msDS-SupportedEncryptionTypes attribute on ldap_add; (bso#11755). + passdb: Add linefeed to debug message; (bso#11763). + s3:utils/smbget: Fix option parsing; (bso#11767). + libnet: Make Kerberos domain join site-aware; (bso#11769). + Reset TCP Connections during IP failover; (bso#11770). + ldb: Version 1.1.26; (bso#11772). + s3:smbd: Add negprot remote arch detection for OSX; (bso#11773). + vfs_glusterfs: Fix use after free in AIO callback; (bso#11774). + mkdir can return ACCESS_DENIED incorrectly on create race; (bso#11780). + "trustdom_list_done: Got invalid trustdom response" message should be avoided; (bso#11782). + Mismatch between local and remote attribute ids lets replication fail with custom schema; (bso#11783). + Quota is not supported on Solaris 10; (bso#11788). + Talloc: Version 2.1.6; (bso#11789). + smbd: Enable multi-channel if 'server multi channel support = yes' in the config; (bso#11796). + build: Fix build when '--without-quota' specified; (bso#11798). + lib/socket/interfaces: Fix some uninitialied bytes; (bso#11802). + Access based share enum: handle permission set in configuration files; (bso#8093). + See also WHATSNEW.txt from the samba-doc package.- Update to 4.3.6. + Getting and setting Windows ACLs on symlinks can change permissions on link target; CVE-2015-7560; (bso#11648); (bsc#968222). + Fix Out-of-bounds read in internal DNS server; CVE-2016-0771; (bso#11128); (bso#11686); (bsc#968223).- Upgrade on-disk FSRVP server state to new version; (bsc#924519).- Only obsolete but do not provide gplv2/3 package names; (bsc#968973).- Relocate existing lock files to /var/lib/samba/lock; (bsc#968963).- Obsolete no longer existing samba-32bit package; (bsc#967625).- Update to 4.3.5. + s3:utils/smbget: Fix recursive download; (bso#6482). + s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystemi with no ACL support; (bso#10489). + s3:smbd/oplock: Obey kernel oplock setting when releasing oplocks; (bso#11400). + vfs_shadow_copy2: Fix case where snapshots are outside the share; (bso#11580). + smbclient: Query disk usage relative to current directory; (bso#11662). + winbindd: Handle expired sessions correctly; (bso#11670). + smbd: Show correct disk size for different quota and dfree block sizes; (bso#11681). + smbcacls: Fix uninitialized variable; (bso#11682). + s3:smbd: Ignore initial allocation size for directory creation; (bso#11684). + s3-client: Add a KRB5 wrapper for smbspool; (bso#11690). + s3-parm: Clean up defaults when removing global parameters; (bso#11693). + Use M2Crypto.RC4.RC4 on platforms without Crypto.Cipher.ARC4; (bso#11699). + s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703). + ctdb: Remove error messages after kernel security update; CVE-2015-8543; (bso#11705). + loadparm: Fix memory leak issue; (bso#11708). + lib/tsocket: Work around sockets not supporting FIONREAD; (bso#11714). + ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ..."; (bso#11719). + s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new file; (bso#11727). + param: Fix str_list_v3 to accept ";" again; (bso#11732).- Shift samba-client sysconfig data into samba and samba-winbind; (bsc#947361).- Simplify shared library packaging; (bsc#966956).- Enable clustering (CTDB) support; (bsc#966271).- s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703); (bsc#964023).- Add quotes around path of update-apparmor-samba-profile; (bnc#962177).- Remove autoconf build-time requirement.- Update to 4.3.4. + vfs_fruit: Enable POSIX directory rename semantics; (bso#11065). + Crash: Bad talloc magic value - access after free; (bso#11394). + Copying files with vfs_fruit fails when using vfs_streams_xattr without stream prefix and type suffix; (bso#11466). + samba-tool: Fix uncaught exception if no fSMORoleOwner attribute is given; (bso#11613). + Fix a typo in the smb.conf manpage, explanation of idmap config; (bso#11619). + Correctly initialize the list head when keeping a list of primary followed by DFS connections; (bso#11624). + Reduce the memory footprint of empty string options; (bso#11625). + lib/async_req: Do not install async_connect_send_test; (bso#11639). + Fix typos in man vfs_gpfs; (bso#11641). + Make "hide dot files" option work with "store dos attributes = yes"; (bso#11645). + Fix a corner case of the symlink verification; (bso#11647); (bnc#960249). + Do not disable "store dos attributes" on-the-fly; (bso#11649). + Update lastLogon and lastLogonTimestamp; (bso#11659).- Prevent access denied if the share path is "/"; (bso#11647); (bnc#960249).- Update to 4.3.3. + Malicious request can cause Samba LDAP server to hang, spinning using CPU; CVE-2015-3223; (bso#11325); (bnc#958581). + Remote read memory exploit in LDB; CVE-2015-5330; (bso#11599); (bnc#958586). + Insufficient symlink verification (file access outside the share); CVE-2015-5252; (bso#11395); (bnc#958582). + No man in the middle protection when forcing smb encryption on the client side; CVE-2015-5296; (bso#11536); (bnc#958584). + Currently the snapshot browsing is not secure thru windows previous version (shadow_copy2); CVE-2015-5299; (bso#11529); (bnc#958583). + Fix Microsoft MS15-096 to prevent machine accounts from being changed into user accounts; CVE-2015-8467; (bso#11552); (bnc#958585).- Update to 4.3.2. + vfs_gpfs: Re-enable share modes; (bso#11243). + dcerpc.idl: Accept invalid dcerpc_bind_nak pdus; (bso#11327). + s3-smbd: Fix old DOS client doing wildcard delete - gives an attribute type of zero; (bso#11452). + Add libreplace dependency to texpect, fixes a linking error on Solaris; (bso#11511). + s4: Fix linking of 'smbtorture' on Solaris; (bso#11512). + s4:lib/messaging: Use correct path for names.tdb; (bso#11562). + Fix segfault of 'net ads (join|leave) -S INVALID' with nss_wins; (bso#11563). + async_req: Fix non-blocking connect(); (bso#11564). + auth: gensec: Fix a memory leak; (bso#11565). + lib: util: Make non-critical message a warning; (bso#11566). + Fix winbindd crashes with samlogon for trusted domain user; (bso#11569); (bnc#949022). + smbd: Send SMB2 oplock breaks unencrypted; (bso#11570). + ctdb: Open the RO tracking db with perms 0600 instead of 0000; (bso#11577). + s3:smb2_server: Make the logic of SMB2_CANCEL DLIST_REMOVE() clearer; (bso#11581). + s3-smbd: Fix use after issue in smbd_smb2_request_dispatch(); (bso#11581). + manpage: Correct small typo error; (bso#11584). + s3: smbd: If EAs are turned off on a share don't allow an SMB2 create containing them; (bso#11589). + Backport some valgrind fixes from upstream master; (bso#11597). + auth: Consistent handling of well-known alias as primary gid; (bso#11608). + winbind: Fix crash on invalid idmap configs; (bso#11612). + s3: smbd: have_file_open_below() fails to enumerate open files below an open directory handle; (bso#11615). + Changing log level of two entries to DBG_NOTICE; (bso#9912).- Ensure samlogon fallback requests are rerouted after kerberos failure; (bnc#953382); (bnc#953972).- Ensure to link with --as-needed flag by removing SUSE_ASNEEDED=0. - Always use the default optimization even on pre-9.2 systems.- Remove redundant configure options while adding with-relro.- Relocate the lockdir to the /var/lib/samba/lock directory.- Cleanup and enhance the pidl sub package.- Require renamed python-ldb-devel and python-talloc-devel at build-time. - Requires python-ldb and python-talloc from the python subpackage.- Update to 4.3.1. + s3: smbd: Fix our access-based enumeration on "hide unreadable" to match Windows; (bso#10252). + nss_winbind: Fix hang on Solaris on big groups; (bso#10365). + smbd: Fix file name buflen and padding in notify repsonse; (bso#10634). + kerberos: Make sure we only use prompter type when available; winbind: Fix 100% loop; (bso#11038). + source3/lib/msghdr.c: Fix compiling error on Solaris; (bso#11053). + s3:ctdbd_conn: make sure we destroy tevent_fd before closing the socket; (bso#11316). + s3: smbd: Fix mkdir race condition; (bso#11486). + pam_winbind: Fix a segfault if initialization fails; (bso#11502). + s3: dfs: Fix a crash when the dfs targets are disabled; (bso#11509). + s4:lib/messaging: Use 'msg.lock' and 'msg.sock' for messaging related subdirs; (bso#11515). + s3: smbd: Fix opening/creating :stream files on the root share directory; (bso#11522). + lib/param: Fix hiding of FLAG_SYNONYM values; (bso#11526). + net: Fix a crash with 'net ads keytab create'; (bso#11528). + s3: smbd: Fix a crash in unix_convert(); (bso#11535). + s3: smbd: Fix NULL pointer bug introduced by previous 'raw' stream fix (bso#11522); (bso#11535). + vfs_fruit: Return value of ad_pack in vfs_fruit.c; (bso#11543). + vfs_commit: set the fd on open before calling SMB_VFS_FSTAT; (bso#11547). + s3:locking: Initialize lease pointer in share_mode_traverse_fn(); (bso#11549). + s3:smbstatus: Add stream name to share_entry_forall(); (bso#11550). + s3:lib: Validate domain name in lookup_wellknown_name(); (bso#11555). + s3: lsa: lookup_name() logic for unqualified (no DOMAIN component) names is incorrect; (bso#11555).- Fix 100% CPU in winbindd when logging in with "user must change password on next logon"; (bso#11038).- Relocate the tmpfiles.d directory to the client package; (bnc#947552).- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf instead; (bnc#942716).- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).- Package /var/lib/samba/msg with 0755 permissions; (bso#11515); (bnc#945502).- Require to install libfam0-gamin from samba-libs on post-12.1 and pre-13.15 systems; (bnc#945013).- Update to 4.3.0. + Samba "map to guest = Bad uid" doesn't work; (bso#9862). + revert LDAP extended rule 1.2.840.113556.1.4.1941 LDAP_MATCHING_RULE_IN_CHAIN changes; (bso#10493). + No objectClass found in replPropertyMetaData on ordinary objects (non-deleted); (bso#10973). + Stream names with colon don't work with fruit:encoding = native; (bso#11278). + NetApp joined to a Samba/ADDC cannot resolve SIDs; (bso#11291). + tevent_fd needs to be destroyed before closing the fd; (bso#11316). + "force group" with local group not working; (bso#11320). + strsep is not available on Solaris; (bso#11359). + smbtorture does not build when configured --with-system-mitkrb5; (bso#11411). + Build with GPFS support is broken; (bso#11421). + Build broken with --disable-python; (bso#11424). + net share allowedusers crashes; (bso#11426). + nmbd incorrectly matches netbios names as own name; (bso#11427). + Python bindings don't check integer types; (bso#11429). + Python bindings don't check array sizes; (bso#11430). + CTDB's eventscript error handling is broken; (bso#11431). + Fix crash in nested ctdb banning; (bso#11432). + Cannot build ctdbpmda; (bso#11434). + samba-tool uncaught exception error; (bso#11436). + Crash in notify_remove caused by change notify = no; (bso#11444). + Poor SMB3 encryption performance with AES-GCM; (bso#11451). + Poor SMB3 encryption performance with AES-GCM (part1); (bso#11451). + fix recursion problem in rep_strtoll in lib/replace/replace.c; (bso#11455). + --bundled-libraries=!ldb,!pyldb,!pyldb-util doesn't disable ldb build and install; (bso#11458). + xid2sid gives inconsistent results; (bso#11464). + ctdb: Fix the build on FreeBSD 10.1; (bso#11465). + Handling of 0 byte resource fork stream; (bso#11467). + AD samr GetGroupsForUser fails for users with "()" in their name; (bso#11488).- Configure with --bundled-libraries=NONE; (bso#11458).- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).- Remove libiniparser-devel build-time requirement.- Update to 4.2.3. + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780). + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924). + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991). + Logon via MS Remote Desktop hangs; (bso#11061). + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068). + tevent: Add a note to tevent_add_fd(); (bso#11141). + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170). + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217). + smbd: Fix a use-after-free; (bso#11218); (bnc#919309). + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces; (bso#11245). + s3:smb2: Add padding to last command in compound requests; (bso#11277). + Add IPv6 support to ADS client side LDAP connects; (bso#11281). + Add IPv6 support for determining FQDN during ADS join; (bso#11282). + s3: IPv6 enabled DNS connections for ADS client; (bso#11283). + Fix invalid write in ctdb_lock_context_destructor; (bso#11293). + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295). + vfs_fruit: Add option "veto_appledouble"; (bso#11305). + tstream: Make socketpair nonblocking; (bso#11312). + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313). + Group creation: Add msSFU30Name only when --nis-domain was given; (bso#11315). + tevent_fd needs to be destroyed before closing the fd; (bso#11316). + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared"; (bso#11319). + smbd/trans2: Add a useful diagnostic for files with bad encoding; (bso#11323). + Change sharesec output back to previous format; (bso#11324). + Robust mutex support broken in 1.3.5; (bso#11326). + Kerberos auth info3 should contain resource group ids available from pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info exists in PAC; (bso#11328); (bnc#912457). + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329). + tevent: Fix CID 1035381 Unchecked return value; (bso#11330). + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331). + s3: smbd: Use separate flag to track become_root()/unbecome_root() state; (bso#11339). + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342). + pidl: Make the compilation of PIDL producing the same results if the content hasn't change; (bso#11356). + winbindd: Disconnect child process if request is cancelled at main process; (bso#11358). + vfs_fruit: Check offset and length for AFP_AfpInfo read requests; (bso#11363). + docs: Overhaul the description of "smb encrypt" to include SMB3 encryption; (bso#11366). + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server(); (bso#11367). + ncacn_http: Fix GNUism; (bso#11371).- Disable rpath usage; (bnc#902421).- Make the winbind package depend on the matching libwbclient version and vice versa; (bnc#936909).- Backport changes to use resource group sids obtained from pac logon_info; (bso#11328); (bnc#912457).- Order winbind.service Before and Want nss-user-lookup target.- Remove fam-devel build-time dependency for post-6 RHEL systems.- Update to 4.2.2. + s3:smbXsrv: refactor duplicate code into smbXsrv_session_clear_and_logoff(); (bso#11182). + gencache: don't fail gencache_stabilize if there were records to delete; (bso#11260). + s3: libsmbclient: After getting attribute server, ensure main srv pointer is still valid; (bso#11186). + s4: rpc: Refactor dcesrv_alter() function into setup and send steps; (bso#11236). + s3: smbd: Incorrect file size returned in the response of "FILE_SUPERSEDE Create"; (bso#11240). + Mangled names do not work with acl_xattr; (bso#11249). + nmbd rewrites browse.dat when not required; (bso#11254). + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff; (bso#11213). + s3:smbd: Add missing tevent_req_nterror; (bso#11224). + vfs: kernel_flock and named streams; (bso#11243). + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244). + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses are used; (bso#11284). + ctdb: check for talloc_asprintf() failure; (bso#11201). + spoolss: purge the printer name cache on name change; (bso#11210); (bnc#901813). + CTDB statd-callout does not scale; (bso#11204). + vfs_fruit: also map characters below 0x20; (bso#11221). + ctdb: Coverity fix for CID 1291643; (bso#11201). + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225). + Fix terminate connection behavior for asynchronous endpoint with PUSH notification flavors; (bso#11226). + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007). + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201). + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the directory is deleted; (bso#11257). + s3:winbindd: make sure we remove pending io requests before closing client sockets; (bso#11141); (bnc#931854). + Fix panic triggered by smbd_smb2_request_notify_done() -> smbXsrv_session_find_channel() in smbd; (bso#11182). + 'sharesec' output no longer matches input format; (bso#11237). + waf: Fix systemd detection; (bso#11200). + CTDB: Fix portability issues; (bso#11202). + CTDB: Fix some IPv6-related issues; (bso#11203). + CTDB statd-callout does not scale; (bso#11204). + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you enter invalid values; (bso#11234). + libads: record service ticket endtime for sealed ldap connections; (bso#11267). + lib/util: Include DEBUG macro in internal header files before samba_util.h; (bso#11033).- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).- Remove the independently built libraries ldb, talloc, tdn, and tevent and the post-10.3 renamed libsmbclient from baselibs.conf.- Drop redundant doc attribute from man pages.- Update to 4.2.1. + s3:winbind:grent: Don't stop group enumeration when a group has no gid; (bso#8905). + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791). + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with servers that don't send the 2 unused fields; (bso#10016). + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476). + waf: Fix the build on openbsd; (bso#10476). + s3: client: "client use spnego principal = yes" code checks wrong name; (bso#10888). + spoolss: Retrieve published printer GUID if not in registry; (bso#11018). + s3: lib: libsmbclient: If reusing a server struct, check every cli->timout miliseconds if it's still valid before use; (bso#11079). + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125). + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135). + replace: Remove superfluous check for gcrypt header; (bso#11135). + Backport subunit changes; (bso#11137). + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with implementation; (bso#11140). + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143). + talloc: Version 2.1.2; (bso#11144). + Update libwbclient version to 0.12; (bso#11149). + brlock: Use 0 instead of empty initializer list; (bso#11153). + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164). + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169); (bnc#913304). + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev fails in the SMB1 case; (bso#11173). + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174). + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175). + s3: libsmbclient: Add missing talloc stackframe; (bso#11177). + s4-process_model: Do not close random fds while forking; (bso#11180). + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).- Prevent samba package updates from disabling samba kerberos printing.- Add sparse file support for samba; (fate#318424).- Purge printer name cache on spoolss SetPrinter change; (bso#11210); (bnc#901813).- Correctly retain errno from Btrfs snapshot ioctls; (bnc#923374).- Simplify libxslt build requirement and README.SUSE install. - Remove no longer required cleanup steps while populating the build root.- Remove deprecated base_rid example from idmap_rid manpage; (bso#11169); (bnc#913304).- Update to 4.2.0. + smbd: Stop using vfs_Chdir after SMB_VFS_DISCONNECT; (bso#1115). + pam_winbind: fix warn_pwd_expire implementation; (bso#9056). + nsswitch: Fix soname of linux nss_*.so.2 modules; (bso#9299). + Make 'profiles' work again; (bso#9629). + s3:smb2_server: protect against integer wrap with "smb2 max credits = 65535"; (bso#9702). + Make validate_ldb of String(Generalized-Time) accept millisecond format ".000Z"; (bso#9810). + Use -R linker flag on Solaris, not -rpath; (bso#10112). + vfs: Add glusterfs manpage; (bso#10240). + Make 'smbclient' use cached creds; (bso#10279). + pdb: Fix build issues with shared modules; (bso#10355). + s4-dns: Add support for BIND 9.10; (bso#10620). + idmap: Return the correct id type to *id_to_sid methods; (bso#10720). + printing/cups: Pack requested-attributes with IPP_TAG_KEYWORD; (bso#10808). + Don't build vfs_snapper on FreeBSD; (bso#10834). + nss_winbind: Add getgroupmembership for FreeBSD; (bso#10835). + idmap_rfc2307: Fix a crash after connection problem to DC; (bso#10837). + s3: smb2cli: query info return length check was reversed; (bso#10848). + s3: lib, s3: modules: Fix compilation on Solaris; (bso#10849). + lib: uid_wrapper: Fix setgroups and syscall detection on a system without native uid_wrapper library; (bso#10851). + winbind3: Fix pwent variable substitution; (bso#10852). + Improve samba-regedit; (bso#10859). + registry: Don't leave dangling transactions; (bso#10860). + Fix build of socket_wrapper on systems without SO_PROTOCOL; (bso#10861). + build: Do not install 'texpect' binary anymore; (bso#10862). + Fix testparm to show hidden share defaults; (bso#10864). + libcli/smb: Fix smb2cli_validate_negotiate_info with min=PROTOCOL_NT1 max=PROTOCOL_SMB2_02; (bso#10866). + Integrate CTDB into top-level Samba build; (bso#10892). + samba-tool group add: Add option '--nis-domain' and '--gid'; (bso#10895). + s3-nmbd: Fix netbios name truncation; (bso#10896). + spoolss: Fix handling of bad EnumJobs levels; (bso#10898). + Fix smbclient loops doing a directory listing against Mac OS X 10 server with a non-wildcard path; (bso#10904). + Fix print job enumeration; (bso#10905); (bnc#898031). + samba-tool: Create NIS enabled users and unixHomeDirectory attribute; (bso#10909). + Add support for SMB2 leases; (bso#10911). + btrfs: Don't leak opened directory handle; (bso#10918). + s3: nmbd: Ensure NetBIOS names are only 15 characters stored; (bso#10920). + s3:smbd: Fix file corruption using "write cache size != 0"; (bso#10921). + pdb_tdb: Fix a TALLOC/SAFE_FREE mixup; (bso#10932). + s3-keytab: fix keytab array NULL termination; (bso#10933). + s3:passdb: fix logic in pdb_set_pw_history(); (bso#10940). + Cleanup add_string_to_array and usage; (bso#10942). + dbwrap_ctdb: Pass on mutex flags to tdb_open; (bso#10942). + Fix RootDSE search with extended dn control; (bso#10949). + Fix 'samba-tool dns serverinfo ' for IPv6; (bso#10952). + libcli/smb: only force signing of smb2 session setups when binding a new session; (bso#10958). + s3-smbclient: Return success if we listed the shares; (bso#10960). + s3-smbstatus: Fix exit code of profile output; (bso#10961). + socket_wrapper: Add missing prototype check for eventfd; (bso#10965). + libcli: SMB2: Pure SMB2-only negprot fix to make us behave as a Windows client does; (bso#10966). + vfs_streams_xattr: Check stream type; (bso#10971). + s3: smbd: Fix *allocate* calls to follow POSIX error return convention; (bso#10982). + vfs_fruit: Add support for AAPL; (bso#10983). + Fix spoolss IDL response marshalling when returning error without clearing info; (bso#10984). + dsdb-samldb: Check for extended access rights before we allow changes to userAccountControl; (bso#10993); CVE-2014-8143; (boo#914279). + Fix IPv6 support in CTDB; (bso#10996). + ctdb-daemon: Use correct tdb flags when enabling robust mutex support; (bso#11000). + vfs_streams_xattr: Add missing call to SMB_VFS_NEXT_CONNECT; (bso#11005). + s3-util: Fix authentication with long hostnames; (bso#11008). + ctdb-build: Fix build without xsltproc; (bso#11014). + packaging: Include CTDB man pages in the tarball; (bso#11014). + pdb_get_trusteddom_pw() fails with non valid UTF16 random passwords; (bso#11016). + Make Sharepoint search show user documents; (bso#11022). + nss_wrapper: check for nss.h; (bso#11026). + Enable mutexes in gencache_notrans.tdb; (bso#11032). + tdb_wrap: Make mutexes easier to use; (bso#11032). + lib/util: Avoid collision which alread defined consumer DEBUG macro; (bso#11033). + winbind: Retry after SESSION_EXPIRED error in ping-dc; (bso#11034). + s3-libads: Fix a possible segfault in kerberos_fetch_pac(); (bso#11037). + vfs_fruit: Fix base_fsp name conversion; (bso#11039). + vfs_fruit: mmap under FreeBSD needs PROT_READ; (bso#11040). + Fix authentication using Kerberos (not AD); (bso#11044). + net: Fix sam addgroupmem; (bso#11051). + vfs_snapper: Correctly handles multi-byte DBus strings; (bso#11055); (bnc#913238). + cli_connect_nb_send: Don't segfault on host == NULL; (bso#11058). + utils: Fix 'net time' segfault; (bso#11058). + libsmb: Provide authinfo domain for encrypted session referrals; (bso#11059). + s3-pam_smbpass: Fix memory leak in pam_sm_authenticate(); (bso#11066). + vfs_glusterfs: Add comments to the pipe(2) code; (bso#11069). + vfs/glusterfs: Change xattr key to match gluster key; (bso#11069). + vfs_glusterfs: Implement AIO support; (bso#11069). + s3-vfs: Fix developer build of vfs_ceph module; (bso#11070). + s3: netlogon: Ensure we don't call talloc_free on an uninitialized pointer; (bso#11077); CVE-2015-0240; (bnc#917376). + vfs: Add a brief vfs_ceph manpage; (bso#11088). + s3: smbclient: Allinfo leaves the file handle open; (bso#11094). + Fix Win8.1 Credentials Manager issue after KB2992611 on Samba domain; (bso#11097). + debug: Set close-on-exec for the main log file FD; (bso#11100). + s3: smbd: leases - losen paranoia check. Stat opens can grant leases; (bso#11102). + s3: smbd: SMB2 close. If a file has delete on close, store the return info before deleting; (bso#11104). + doc:man:vfs_glusterfs: improve the configuration section; (bso#11117). + snprintf: Try to support %j; (bso#11119). + ctdb-io: Do not use sys_write to write to client sockets; (bso#11124). + doc-xml: Add 'sharesec' reference to 'access based share enum'; (bso#11127).- Update to 4.2.0rc5. + Ensure we don't call talloc_free on an uninitialized pointer; CVE-2015-0240; (bso#11077); (bnc#917376).- Fix usage of freed memory on server exit; (bso#11218); (bnc#919309).- Fix tdb_store_flag_to_ntdb() gcc5 build failure.- Fix vfs_snapper DBus string handling; (bso#11055); (bnc#913238).- Update to 4.1.16. + dsdb-samldb: Check for extended access rights before we allow changes to userAccountControl; (bso#10993); CVE-2014-8143; (boo#914279).- Adjust baselibs.conf due to libpdb0 package rename to libsamba-passdb0.- Fix libsmbclient DFS referral handling. + Reuse connections derived from DFS referrals; (bso#10123); (fate#316512). + Set domain/workgroup based on authentication callback value; (bso#11059).- Update to 4.2.0rc4. - Add libsamba-debug, libsocket-blocking, libsamba-cluster-support, and libhttp to the libs package; (boo#913547). - Rename libpdb packages to libsamba-passdb. - Drop libsmbsharemodes packages.- Enable avahi support on post-12.2 systems.- Update to 4.1.15. + pam_winbind: Fix warn_pwd_expire implementation; (bso#9056). + nsswitch: Fix soname of linux nss_*.so.2 modules; (bso#9299). + Fix profiles tool; (bso#9629). + s3-lib: Do not require a password with --use-ccache; (bso#10279). + s4:dsdb/rootdse: Expand extended dn values with the AS_SYSTEM control; (bso#10949). + s4-rpc: dnsserver: Fix enumeration of IPv4 and IPv6 addresses; (bso#10952). + s3:smb2_server: Allow reauthentication without signing; (bso#10958). + s3-smbclient: Return success if we listed the shares; (bso#10960). + s3-smbstatus: Fix exit code of profile output; (bso#10961). + libcli: SMB2: Pure SMB2-only negprot fix to make us behave as a Windows client does; (bso#10966). + s3: smbd/modules: Fix *allocate* calls to follow POSIX error return convention; (bso#10982). + Fix 'domain join' by adding 'drsuapi.DsBindInfoFallBack' attribute 'supported_extensions'; (bso#11006). + idl:drsuapi: Manage all possible lengths of drsuapi_DsBindInfo; (bso#11006). + winbind: Retry LogonControl RPC in ping-dc after session expiration; (bso#11034).- yast2-samba-client should be able to specify osName and osVer on AD domain join; (bnc#873922).- Lookup FSRVP share snums at runtime rather than storing them persistently; (bnc#908627).- Specify soft dependency for network-online.target in Winbind systemd service file; (bnc#889175).- Fix spoolss error response marshalling; (bso#10984).- Update to 4.1.14. + pidl/wscript: Remove --with-perl-* options; revert buildtools/wafadmin/ Tools/perl.py back to upstream state; (bso#10472). + s4-dns: Add support for BIND 9.10; (bso#10620). + nmbd fails to accept "--piddir" option; (bso#10711). + nss_winbind: Add getgroupmembership for FreeBSD; (bso#10835). + S3: source3/smbd/process.c::srv_send_smb() returns true on the error path; (bso#10880). + vfs_glusterfs: Remove "integer fd" code and store the glfs pointers; (bso#10889). + s3-nmbd: Fix netbios name truncation; (bso#10896). + spoolss: Fix handling of bad EnumJobs levels; (bso#10898). + s3: libsmbclient-smb2. MacOSX 10 SMB2 server doesn't set STATUS_NO_MORE_FILES when handed a non-wildcard path; (bso#10904). + spoolss: Fix jobid in level 3 EnumJobs response; (bso#10905). + s3: nmbd: Ensure NetBIOS names are only 15 characters stored; (bso#10920). + s3:smbd: Fix file corruption using "write cache size != 0"; (bso#10921). + pdb_tdb: Fix a TALLOC/SAFE_FREE mixup; (bso#10932). + s3-keytab: Fix keytab array NULL termination; (bso#10933). + Cleanup add_string_to_array and usage; (bso#10942).- Remove and cleanup shares and registry state associated with externally deleted snaphots exposed as shadow copies; (bnc#876312).- Use the upstream tar ball, as signature verification is now able to handle compressed archives.- Fix leak when closing file descriptor returned from dirfd; (bso#10918).- Fix spoolss EnumJobs and GetJob responses; (bso#10905); (bnc#898031). + Fix handling of bad EnumJobs levels; (bso#10898).- Remove dependency on gpg-offline as signature checking is implemented in the source validator.- Update to 4.1.13. + s3-libnet: Add libnet_join_get_machine_spns(); (bso#9984). + s3-libnet: Make sure we do not overwrite precreated SPNs; (bso#9984). + s3-libads: Add all machine account principals to the keytab; (bso#9985). + s3: winbindd: Old NT Domain code sets struct winbind_domain->alt_name to be NULL. Ensure this is safe with modern AD-DCs; (bso#10717). + Fix unstrcpy; (bso#10735). + pthreadpool: Slightly serialize jobs; (bso#10779). + s3: smbd: streams - Ensure share mode validation ignores internal opens (op_mid == 0); (bso#10797). + s3: smbd:open_file: Open logic fix; Use a more natural check; (bso#10809). + vfs_media_harmony: Fix a crash bug; (bso#10813). + docs: Mention incompatibility between kernel oplocks and streams_xattr; (bso#10814). + nmbd: Send waiting status to systemd; (bso#10816). + libcli: Fix a segfault calling smbXcli_req_set_pending() on NULL; (bso#10817). + nsswitch: Skip groups we were not able to map; (bso#10824). + s3-winbindd: Use correct realm for trusted domains in idmap child; (bso#10826). + s3: nmbd: Ensure the main nmbd process doesn't create zombies; (bso#10830). + s3: lib: Signal handling - ensure smbrun and change password code save and restore existing SIGCHLD handlers; (bso#10831). + idmap_rfc2307: Fix a crash after connection problem to DC; (bso#10837). + s3-winbindd: Do not use domain SID from LookupSids for Sids2UnixIDs call; (bso#10838). + s3: smb2cli: Query info return length check was reversed; (bso#10848). + registry: Don't leave dangling transactions; (bso#10860).- Update to 4.2.0rc2./sbin/ldconfig/sbin/ldconfigh02-armsrv1 1760090194 4.19.8+git.435.78ced6cf30d-150600.3.21.14.19.8+git.435.78ced6cf30d-150600.3.21.1gentestlocktestmasktestmdsearchndrdumpsmbtorturegentest.1.gzlocktest.1.gzmasktest.1.gzmdsearch.1.gzndrdump.1.gzsmbtorture.1.gztraffic_learner.7.gztraffic_replay.7.gz/usr/bin//usr/share/man/man1//usr/share/man/man7/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:41070/SUSE_SLE-15-SP6_Update/5add5f7dce01a5b57b4b9abf50b932e5-samba.SUSE_SLE-15-SP6_Updatedrpmxz5aarch64-suse-linuxELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, for GNU/Linux 4.3.0, BuildID[sha1]=2ed379068bf2d0f7f70d28b11eeb73f394c0df75, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, for GNU/Linux 4.3.0, BuildID[sha1]=23abff5cb6161e0275012023bea3b4e77115f5a9, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, for GNU/Linux 4.3.0, BuildID[sha1]=9361b8a0524167ba1fa3af40a23cf017916ceb23, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, for GNU/Linux 4.3.0, BuildID[sha1]=dc4bb294004a445d71397cfc614a541ef3dc2574, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, for GNU/Linux 4.3.0, BuildID[sha1]=d40154b04309853ae0a77aa5e2c02391f09dc44e, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, for GNU/Linux 4.3.0, BuildID[sha1]=050e71d2f9d4735a71328041da5423c9860c6a57, strippedtroff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)troff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix)5g523-RRR%R#R}RoRBRDRRRgRR+R>RRRRRRRRRRRRRRRnR=R$RfRRRR*RRR"RRRCRRRRRARR|RRRRRRR%R#R}RoRDRRRgRR+R>RRRRRRRRRRRRRRnR=R$RfRRRR*RRR"RRRCRRRRRR|RRRRRRR%R#R}RoRDRRRgRRR+R>RRRRRRRRRRRRRRnR=R$RfRRRR*RRR"RRRCRRRRRR|RRRRRcRRRtRoRRiRR}R)RaR2RRRRRRRRR+RRRR(RbRR1R`RR*RhRRnRRRRRRRR|RRRRRRRR}RoRkRR+RRRRRRRnR*RjRRRRRRRR|RRRRRRNRRR RRRRRRRDRRRcR8RRRR[RRR R6RRJReRRRRRRRRgRRRRYRXRWRVRTRURRPR#R+R!R}RRRRRRRRRRRRRRRRRRRRRRGRHRFR4RRRRRRmRRiRuRsRrRpRtRqRoRkRyR%RRaRRRR2RnR;RR/RRR*R5R7R"R RR9RRRRRRRZRRRRzRRRxR RRbRvRRCRRRR1RRRhRQRRRRRRdR$RR=R RfRRRKRRjR3R~RRRR`R\RAR-RRR?RRRIRlR^RRRR&RRSRRORMR,RRR|RERRR^ utf-8739f8441bdf70c7c501d594a9c06ef17cb91bf9e4c1c48acfbb4e3406ed1cbc6?7zXZ !t/k]"k%42_fR6mH> nBh]3JiBO!i4=ru!>T*^T3Z6lc$b]~ݪR3ң2i>˩ {HmY+1KRjzuoXJH{zk^ hˉpx: &$F)WcA̯ :$Zn.$av `ӄIG/A>˿W:̓'/=*!NȳhPa-*qX B$,K>5-#^4R~ύ_>kY[)-ZJtg@5Q4DyLL3K2cYyԱJaGo!?aT>(Iy}69Iy33B)HE d/s{ٗ'g3g`{'Tv5+BU\WegoCi(ƫ2-RG|ܨ/7h,<|()Y$"t,0j9JKм3lq5D8SCM=Ƞ۠̓=[b\0oX$Q &pdɀ ynl^}NǶ^ȇj3k M(}9rT eWWspfs` (G{?("K,>%~?UG82y!(k(5#K"NQP-ȁ.3֐'#l#e!ZB`Gj"ݪV|ΐw|Z# F7Ǫ+91n.v_d+Nm4<~HG>OֽәP ԯJ4xbdy}V6@ÎBxRtko o>R;BR\lwfW 2uF1UCuȨ[tjPD/AhSbMLh[W΍|%[$4fPIgvHg .f1" M7UrGƥF/X-r,Z"=pLLi҂P]dQ"\r5վ]ݡ Z}ڔs.+gօ]j Lɒ1\H{9a^dP1ݤق9\+N?KAı]\-]q}HDFZ -@r}m98wb253(ʂZJ5)fYK[Hǝ%/gI%6uu(PdEr+!nE~@ӱA -JՄ+ 1If8lL'sۖ ?Ir`; Ԡ=+V:" , <"CDĹ8,=9Lѡ _nfzӣp}GZ/F p simm&ngƕ%5~>4%J0K+Wν1hl`)-,}hSAY~F8(UgLIzd:}G-uv5P<WniCΘ1߹t84 C6O\9X2Zu:|PFpxlUkmʟCKz >`[TDmɨ3/ H1iZܾb$7$T≢5:xcIFB mNf9QWʫФx8sM74o3Z爩8e8) Sq,0T[ YEh)a5n5KKBe|5қIx.m2$sC%za, YuޗTG`ۉC]]r >Hɭ0*>z]}lK?b#ߟ ֵ7qЖf`Ma]l [1M'j]7cϭOqA8v+mnۯx>tE2 # j]`iES#iqhu@L 6ʰ=ҨOⷢ;",e`iy'MǗM~h7<9a;LU`qJk;pXS6teb׾mINSm={ȉ%AW4 0g(j̾25AxZ\(AmH" %LT}-W{97[ik͸咘S1;K *-Zr8Yѥ{O1 pkW'_@SIVXndZT vŝ)ɑ0Ւ;NcoPSFb Ft.na*A*3%iS`J9,1f^9әh5g6MJ6>re;XIXIS7 y&ׯa~/T1Kȶ)R-RAI#={/γy)wwWc@l2BOώ;m瓀~8/LlmL^*1eo>eb,:dB'V0g,x/99OcAςul "xxk2/37Rq?aW#4-[/^3ޔVM7u*uOA6`h$O=>.Q EW!7L :qS-P HQ qEH51}O]-kQ"@YCkjL-E?04HOrRlw_%٩ Qf| }qjGRC2[悸Η3qG"Gg%h3mi haXQf7ؑiSKS8OÌ>yw4 (<"RԞb!`L׺:G@3?z N/2Z$h6 a1U_7ףNEV:0{67/(\Tjc!zJ[%t4sKV ղUMvoMu(Uf"+`81#3Sz `a+eg/36"QOuq? |)5j-֔Nl=$`%ٞV K~8+֦EFvj. ]Qw +XfZO0k݌,:Z&]W>@y^LĦV,|0BMtff CYDنmτp5.l?,wègw{Z F{v^L&svL3)d3ljV_Sų+gaMt9z".WLj$7 ~!׾ߩp#*Md3=kMrwKєø#_*`>)7 jXI@ծ9įNH%;ūGS_M_ uQʄSBX =bx&dz Gt'1,;+aq(ʔ/+C]FJDk;iKە(w=''Vՙ_zlU(AuL#YN#_dı:-@ecC| O꾟b8?u7*T TTfV+ғC[9&)vL5EZE9s""SE'^xdEa^/9"qCMܣ0)`j\8ߙH/'`? qtB| ѳ~ _;l)E2 ^< G`;#bsFQP sC,zE)|l8!Yj@0c{ s,j7c\f eWXux陙,\dPWQDeJȺo,.)N=;=ժ:C,i x>aVVqOJ53k!7BoKxDoxLz.eLQM C_B是еkZx.&Bc7bZ5昖n)j(TyMp~bffQ:S5sc1=6K>㮁˲-QL.wÚ% ~aIN6;FE&O&6 QdKH05ȸ#GؠM*M{54_㩡HġuY&iVw}~sM[ȍjv (D"s>]fa^Ao86Ӂm{A.duϠR*md™! oe'(@]Is$gX|{B7B0~Մu}$`I#bFLM'{5{ݎrVDž y[w[%CKN?-6YN Tʻ0ՂlQaYSOpZCN n8e9#>%cÔk j#jdϤy>!h(}aӀ&1!Uz^gwoWd@J ,0: gju3jph2ر< Ujb[lE0jb[Աx97X(FyHE)q~9ΞiFQG*;Ū:l2Ƿqki&sg98NUї>vR@Q &\m C 5 @о(kR?2U?f_{]"wpStm`ϝ Ƅʐzk`|Twj*#=?…&:IQ $&Z$-J__ܑ1-DwU@tQJb5N|^ǁ0Caɇ##02`74]29G<.W1sl]LV \Hg.Ud9Jڻ,y#$v sI=WI-u$4 hk`tys"n*hA|6 \c$Tj]s (F7Qٖ#}{YHuݗ{<_h>8級s#q5OoEMiɔ]/$ Sdjij>30*PZWaaw$r̳E ohL 3Ő}E1)Pfw4ӗ;|4µ O鬩 Ш_iwuz%>,c5_ xyQ 4q-RnXYLHoX-d'A֑?7N7cZ("FjT@2yF)7^?H%T"Ź s|;C88Ϟ0vWsGK{k$AMYL(q`o^m36ۧ=, {ŇԨBiXYj!u \ u$_F]~${ƃH#P>/Ӫ5y}>{`iv( 7=Mch+Kټwbx=#47O'M(RDa8BA$)t ݏh `1g֚*GI+uG74{GO?ۜ(k1EU O1^yS֤G΍6)Dz26@6vjFx'hbE"@HmP7'+4JY9ƑOY6ԞEA:H>*x 7gl%DvhW<plu[ly#K"$oo'H2#z;Fppc3N/P)L&ųiƩpܩO3$!-_Oz.WD )}ýrہBĆtGр4#Q0q!_;ohӫRGaQ48[Il #Y0#~ tR+-_QuWN*7žm0ڌ8u2 q8z@6P@פҎ?h>JXopؚ¦N_,ueELM_Ur2pG%U7O_-[d=+xK4jU)eUd~O > 6䱁͞CY5Db7}Y]R.68V#mMc\@*$kA[0 y^ڤ 2;&cx#ȷr:x9x;upÄ`kvט  3m멙'}~Z[0'+|=9B+J/2u~L̮2xz<'C) 7XBchc2K}x]j6LIVpcWQ9ӟ5HSVjWy^b=i"2Zla;8PyfZDKmþV\_p ˎi8?D%a/~ȇ0OoV(Qlu(c^ԩvL*'SfF]y_jd G\Lǁʊ>Nqە% (ĺVe;+4D1Яe!9%UG0:s8{ Vn Od )Σ!|iǜf{<|UE?`t;.cXk$;#0]~_P\WiCsoSdיpnBbC/6,X+HȬ sdh/ b۽g鑟hxpvgʼUkk ݪ10Bke3װm\tRi~vy1 fe<@\7P.# >Z,!W{rg>~W22x][5nzע==@лnT^[h kFq]b_ Yu@W=vUܙLź<䃆^/脹)pVE#|N&C"Ǔ/jWa-4ҵzX6{m'C\au*238)^St##2]/,hmr*ֆ7iT`.c ,v"2.;,+Nz^'0I0j2mFWp|TeEh? 8tƚ) {_/X> Qy*;>D?*raSHdKNY3xcwFzZwn Zw7umڱ)@~„xcC}S']#*Qhuʴ }u0Z9 h)V Y&`VLUivFՕL?qbBIxaOl&LPT0ܱY?"R~|h;Ʀ1ƯgOsk}<>e`utv_eX0BIQ|q~GRql-A'dW]HKvNAE"熑ޅ'LZw*tf4Qck p6?`4-P?7 _SCnU! ʹέ`<"ˊ4rF]P3o [j8۱! vn0!?& o*x^ac)20=4Gx)?k 0FfĤ>G XǴBsss.L4F>i`D v9vWGctDsz*WAui؝Ji(> Ll\Nca1']Hk?ftw7_"h LAz}<u8rū`nAP2/:W@.{_==YLzqKW./3DPiF̯Sڐp 8`9?| mn5݇v\_лD@._#i^= Q,&f'L?"&c(\9B4 QSRf{g-I\E(a/n㰹 ȝir(% -ㄥaS3#4 ~lZ_]I2ZA!oH؜h[:,V,э/5z-VVX("3]֦oz ,0Scz ig9]؏2fcs:kGrfNBgj{OC^-'I䓡L\[ ,WD԰[˙~ fRs%~8ݮ:a቙aC>S Rt6 }X n3.aǡ_XM&aČ)b@J<6{lHl T \.C:RɞRIA(O%8V߉ B૬N7ɔ fݥsY]rjp4nTtñl2+ñoA*L}|oLH$'I˲ 6G:x paTLd}=wRl%4{%ڪ@ԜەtY)]pTQ+G5cGbIJbۙ$wq >6'.,&gf`TN||lDHxj&X`_QfOV!pl  XO 9YmeXoXϨy(pP Yg J216އ9_F=ƵH[T1[L'Աx٦|s6#_{BZ|T& Ϸ =†U\{=v&.n<4naXaZ;@ 8~UfjN#@>WV$`Osιl@_$ `:OpUt.ɨAP=u]V p&#Fzպ~/aiCEZh"KMiSŧڎkG9e&$2T'w0Ņ8LpȚkxmdtI,w@J;(?>S3!DaҧeU٦QyiBKx%`ۙWEKG[z/ե~tK(:SH`U1?Dvރ7 pVJ%1*_m#aN尦l/FnHvx`L0k;7qAA?Ajc G>x͞A*A@t8{8ů.Z} 5_aaTB d&VMM*5>9xN\;_`![6ؔU_ʌ㥳 3nr>g0~%3`y  *so&3^:}2'YBAP?T%!_lMj;T UJWZ zhpfΐ$#q_: M<A* zQ&yWF5ʻЀ7.sY/L./XeS4! +rAIdUC`ݘMw*>{ÆȄއs%pJDC&o]")k/QhؿrDfY/xزq%}p蘿оe`)ur@1 ,P(۪#'*u9g~a>ɹA lԵY4̱i 8eFLٮ-5']Q-"Y<}IUh`8&?)A;-0ԫpĬYBA-3e!ٴv˹b[\,+TE >?|P$7L*Ĺ//N 6Sio &Ϥ.% &նj=0}`4/(4@ϴ3 sII]NIgCok &зhD)O IJaGS  T(r;Y2D5Wײڣz$Ys&ʝIgJO"vQAfmJ}1ȵK9r{ituCtۅg>p/r씅19)o]AN;LF4;@kw@@ ,qvWR ~D-Λ. g T[\]8=*$ ()E+hS-mnԟUug`% [񜓿A> `J9=uX+H) :.)QP.Yu{-[rArH#+]@'+V@BYש&m8TLw h#!qqEM,o-E4Z5]@i, ?:J21fV|{S$Hl #eq )2sLsX :02 t.Fص~~cI"96ZE9ue=C+ ;S </ ј E`U0F!1TuCrD>n\rn=1lcKg5Dt%pWliMXM33h)#(FM^Y DSط>)cCz4ݕl`Ͷ 2a`g.oGy͝F !az&='WtAtaA$xpCV%fc6B8~zڵi81+:E0QG4Ć6Ò k0'>);|fϔy j50!RӪxGG pO8^&pLD'i+fBh:8Hpyy1/PMCI0%C)&Gwfѽ'xް9%Ø b=zA#|_dϕaKd8`\A  ;UVJ0{X5M3PZc8vyr5 8Ķ^Hu҈<{u= Rʷ0ӸQTу|;O'Un(y0\܁PRnTM7z'EWN qV &<$7PI鄥lTaMb Ocړҧs8&%:l:f(8]Z>R'w tOҕ`KzQEuV2I-j`ಁLI<,і?>qc 1|a.Y,OZH(/xteGV .j"<ԓG"ly}%axu/6>[G L)ѵPrūP22FL9CQvВjDj xdm TƑ\ULxH6NjW,T[#xb40ݺUt Yc_[v.|#Ȭ^mneڏ8e@ q3\-麾)G#JUgL9;ET$<}, H\UH t?_^Awo9Ӧ(ƄϏÌE-Ɲrƽ e&N%’U:sdm(cb|hXE^8~b'Rz` 2?~i)XiFM;G.\,zqKt3a4[RHF.1A m:@lzΗ4*֕XJD^ȚeꠇЊb *}6F T!nJM*iWzu l@F.&;^ lĀ\EԊ)d7>E8=9Hvp1BPJ/xDZ0MO3ce U[ X"g{F?e:N'|Lԭ[T+4yrvhV NYZ WP3 fg_Ӕ.}xLqMC;Ph;p ap"rw6hQY ]{s!H{S1ޥU]qMƧEIZ=hUGߊfl81/2*YR;]U cRdYBirp;w6 #O$}/[l2䋠fH")n"\NQ@Bv,c[{ >R#:'xyIZ䝢pZi DW9]f{Mu'(]2܍E{ 8K^}}G(<3Lv-6T&f]n"څI樄_&rfLF:?nɎ^/ WF&ϛ\aCYXĥWBXQlaa*˄Y85 y {̾W ځAx;sZ| dNJEN$w[,_y+ i Q܈z V9=|4:EazRa#0 ?хcײK5hHTZf:CVӰ8Mj|[Z*dԟ, 7J(J}ʬ:wg$ru$c9ݍ!&St l6VOn> ХVV$mHc}n>+&)#KtK5V 9]Ѻ}1 l{8HSu4UqUF|-hzKs$5\jon8V$r؎v$xӃX ڋ.D⽡aW+в4p&!W9V,maj-d^@28=+8~ʗ $xw*ab7(tj{i1Ʃ#·>/ϐ+I+ԙmނq%:\xLgaD,k4N?`'3tRiD+5~$9p\*m'%w(pCS3[pqYA>60橖\z:OZ.+YlKKz?dcs)FaBrD @=iQʃ 󗠦y _(zfQd+y7d'))!js+d0Zl$(8lҤ(ݹf@E>J+J+ʕױ)=o?i IQuŽyz̳m =߲? ٷy+tlڢ2q$=S}]_&5nd]~.+R>3 mq޴^x8i/&h|LP|ܣhak9 WOdZW8g>:̗=ZkxL:ڠ')twď oJ]P' o|6iP.Ihp4RV+7@Vy,rB8@0y^u?>5XՑV  L/dQ)ؐIa4OK}{ZQ_bBƑ.DhF L*񣨜MzLq Ja/OU}u >HU?袛΍r,pϖ"uDu3(g]D6 fWAe6sY#o p;!x=&Ĝ;s\dЎbA*='vQSqk0eP(:ntȁ7R4y+ԱD]oSFo85Jؙ REQ%Qlg CW w2Ȇ+MyXM0ըk1o_dRSZ-HT:9 ٖ,rxpʃSWfi5uu9uϮ[Pp9@/ZY>>n>85'3)C)<ߴj_q:AY<+gPN%E,|c$sV/ctȸpsTVqыޤԵMO}ךFK.f7=hxCi"wJ4?OO]MxgK܍q̿$T2'ɡ4;sl^NDujb[dPOn2+[ɋ;Уf/35uk?vo+<7@^d$rgʳYрW( Jj`1Ro֓U 4 Mi:g=^Ȩ F.@XR= DZY,p03ɍ2dO/}Gɐ(x_替ECaenO7vdj:>qQg7 5m_QIĿxH!#*#YvǸ-4+vXmIA}ou'@n̙Q R$r ʱ/wyynDykLQ1{ւnUaw ?՘OF$Jy0 Md`#Ib!$oB .\Խ`P78/*+yC9yWmw<`op&/V RОzhOlI4e g!q;@h;p^BT_#N 'RX=2*d8@S^4<1h ]x/Q`'=Rޙgzu/Xlx}pL;Gš$YQ01q?ѡ]0DSL?&K=JV79z{_D32E!Wf: 6|MU #vQCGYzTw0fƌ#JqZo>"H]$`>{pɎgv/{WCCf]&\>g*>3Lv@G fS|>2?Q!m'\c&K!ra/ i^'a KXap0.PyR!Zt dR*7H}!4j=1zV(]" H@v¿F"Cw!wW ;RgNyw*N<[3mI|.Ѥ\L})& < #<-f "N- DBhrPyu}75NYoeF-5Uk)WVo1rexO4ǩc>'f'~|jiT 3Ft_i 2ACUl=qmih1?|=Փc3H 8Iap*bz8BCf1~ߡ'z^0G.BbY?4N Ԇhjмhe`#X~pΓޚ mUjK췇7i@xתgh6&bhe.Ltl`5TJLdMѦEP O<m{UUO!̮Zh4Nmι9NU.D΁oO } Qm`HǺ<6[T4b D9oFr099nOdĝ@YʠP5d7RkvNة14$qvx\mV dm}D^*]L]((ldyfp)pI'f èDxB8{5!DrN{̪@[tL_࡟^4[,Y-b]=IyP-dli`eeӦk-@ 3i3eV8xov0ld?*Wl;.?䇓ܩSt+=Mg8LU~Lk!O3lg9G0+0g#G$k-Dв3 Mw :s瞽׻'7ծה+!ƿ$9 в0=H9Ϙc+/4j _[ÛAĠ=%E09E伳R'MQ~s2CpɌT5Aɖru@2+s~ЧWflH`}]Xsiho?ϧmWЅ(O7Gu:@i)׶r>#,2) )))]oꨜrM5D&pȆׄ`fA.0``zѝ_\e(GA*f:w, y1%G\%=EZG&q%yP)u6z/5 3peYŅqTQ {w!@ j&R?~|ݺV (b_]>I,{qxM2~~^ʝ";p*L,@ Q9#MAeNJ#H/vlEaoʧ.m WՇԣHya[R=ϩH΢=H*[]H)ߵ7]85* ,cI`HWq},p k.GVȶ?t8YO 50O=4*^+f=4 F\5Bь[%ƌ{m"Xstj*u@ڇJi#k*b$BAGpN#Y4fKcK2[-g@^|orܓ5 -F:v] }pN|sqٰ"3\U7D>)d>{hN)u,sQu:g;2*nAX.F*ֆuuq1L'`M!EB LKBPǯi1K\Tẘu;mkYFNrQmr J:yN97a͒T#K 30ڍh%.e׸-xItY`$P`;9ޙo;7L=d-N:$4ٻ0p.԰ [fS9R%(1d{gxbkJTGS[*;Sep:]bV }Zl/nŗ@?PlFU %PWc2\nseQoȥ~2uvؔd =6Zn+mB-4@ws1 ;'Aq_ T$}ŵ}pyl @Kb57vƮ ثʸmdX~zHgMG߉}9fd?!&o6 -$Wo:XzN\-PJs,2=.5Ҿv4O=V?9wE!UiQ:OLR o~F8F{}2*pK<5L8]t?8eKaյ'+K%]YOIRkҕO8?'`⻉@R9&@K< ;f8WFSKj@Mț'}cOվ~u Q lȷT/juOr; N&BU%~ڊ'J$ӷ=uaم$[\r/3/O|36R'"u;3@HH˿bĠNuro/̫tmiÚbH#eLeK|&rм| \ֈ=a2^#/ 9"%YF](:|ן& Xfu]5N`,pZ"r)r-hP d!eJǝ2(W)tc* Wт "9ZִsJ&df$hy]a2f*>5x6rc,^ECStra~Gt&g {9:g(:!zmiMI㓾YKW(IMJkm`qn H>x}aרRq2wq0OY4ky" xQYm! )F?zk/ڲBL!ǫ2]$S2f2Y4d:hw*ql)3zTc+O7oM -){b`/RW%vdcG+v/\h*9f~7J2? Aqw`&gM<Χa`DwJt͏:\-ʄbsnhY֊ZIwn\bݻO '*\T󄊭|2ZeVpe6ߖ =6u;Ȩ$,3~Qkڂ'ŽjTQdUO;3!ajc)y*Ҥܻ4f5;\iMGU&-ӌh 6@R_Lv?͕ٟ#\\e?KMQzrDщ.*e|*I6)HvcjZz掂t%EeLDϭX1Mϊ$RvWl$ y@f ED9PNbS$yhשڜb[QCh2waK *)IF$,]򜹋M=_znMId#VK/bw@V扗dx}dp{P2+Ux? w 7",[e#U @,4ʔjЭVJY% )r?T71,CO_ҸHG92YP[sC' [$# J!aR: b#*ёIW$F3t6j:uVAVmFx3hx)]@U V: RZyPhI]r^' 8~cGI.'(tI;4jH8fC\TL< ;ZTD2] .xͶ-gHnLd-Aus,!E@e}>l&-X[|}琳ѳ;/1ichq B]h˞6s^RvglBXa7踆PA…4HUoGq鲱"joHҊŢ bx䤄W/ p0׮MU6뜯 NsSx_Vpy<Ϝ(n:'B0duhk e ZA&x #\зk+dmxpDS2|_OY}e{ΧH;sG]p KbOD8~>|d}R~yaU̷Ҥ竟J8œ9f{ۚS.QUr徕œv|ƎrVGT>MD{8EBtdj"Axwt siz:bH٩ctfӝvd˱ B^$We 䴪㻛C Wbu4G=2u1l*5LJ4SUp42͂(v.Q /3~.moQKk<)zbڹlF V߇k.d9r:"'!9h_.瘻jk uΑMya \jK{2%v`Yp{!@& W_$4{~iq|*֌& `u? Wӧf!i90l̲$mHDȆB1EvLޑwJ!tcQE1ZS:ӗrTmM{I@\ѓqCv2g<)b N4R.<" w,wPO@N, ۰-&-JeIӑ@LG謙~nf+[]!S^f¾;-osv?t;,pZ0MZ+rJ1Bb`bu,S7fu$X  ٸǜ$ԊH Xԝ[(=nEI#>2ctOrr+ ӱήHKZ D%K$G%:ElŘ ܮ-.$XDz3,2Ki#.4Do(ŗl .$kJeO8Ykx'{rsCN3Fn r*]vNSF%}ājle|I!`[YmM2jP'&P:Za^C087TkbmXpcG@=ߺ"E.u{3]tT Ο7܈`wkqI@^rko,"NxDSs k c}puN j0G:PGCj(8q”jRx])[{A>24$(T,Cf{ؼ˩DZM|OntpT8ơiB}tܟ(A:\MX&v3;)m݇v&?|sG'N!h;T PMf: 7u?a.[ _CA:}hz_x CCqOM%N֭o dZIDAGrRO-6t͠GbE4ggϷvnܴf~J>BXk}ĨXXfOܣ9%]Ӊ})B_s5}m'&L<6r-ߗ&RH% Z}FCFw1=f𚑅~JW\׷jf(E0=>l 3}RYP)g-tFMcuz}M2%Y3޳ ^B=HI/W\p9d^BŐ}5b.Ϝ-r}{p0h ii k| "+ԴD3y^0yvV/sQU#ͼj ]Ҥ™Lu10ٕ_[ (_: 8pŊ'j bnA+h|EЗ͗QUe93+7p=) SqAާ3h\o$2UF-"4mFUtۢ Ysqk}v(F-ndGhv3OW[Dt]S\ފuvq{k" ²beJj;J^f.!`Xv ѵ=̵Aqh5O?z! k "doE2[QMbMXR0'[Giũw{:G@у`Qw;ְ6[LR\>qw8å4#D$\u^gj޽Zw`EtRk"v! YC7TO<oqYS˖5o  7(,bjm8ʘf.!sPЈ]{L%PekZh&\FS#'+؛Г\wD;J3ꆧO-ع9 IBP6b!֞A;a)&f䁫_)`#VMAԓ{^ZrOE^`?4vhNʮ-5voHQ#kq*cd1cJvv09o.~S!x f5ꓕ5uM McIW0lMe)6J<*xWbK+Xy0PCASmm#`nMս)f3?[']N9CK%@6 NZTњ}\y 2C:b}6#JG 2t fIkGa1ӮYT95pk=!gU;,ȜV#|9mDď#1\ygCCR2ɳg \ &|#!G7'QktrHI@n%\SxPx `Jbް%έXZm'm` Wɫ1-7(_l88. ̏}OaN$qlHS' Mu2+K<:]IL LZ~%ǞzD3(К:ʛoE~ƣQXEߟ. T: }5ÊSvan,%c N"[S di?!"3O1|]N!\o9 hn|wf;L12[?ܫ*V8e8Mq/}gG``Kl?^ $$;FIͩhuGZk+fkT9&7ljƟ'1+WdE= ˡm`^ː4N׎?m̳-fFLcz%=.O_/C4L|&W%Aۏ"L?ϝJ*+AELCJOźGv*^1ྡ UT"}UewqSPaswi>z^tZĂw{A+ukA*%2qBgbC/{*.DA01, A-/ٴ nz৞K͏|{ߐ2KKhp[T/xd7^C*7;(Wkᧆ[S;ՏtO8IoN Թ@Vjn*gE<O)o'{jx⒭ז}Ψm öAx駃nuv2Pawoxy_FSهg3Q?V\_h<bh pEFa}_=˛DgnD29c:n#;"4q7Uf(`R(*:j*fcUX5Ф;(Qt&BpkhH}gilnx+Mue)+D*߅(mý:o)A z#̓[Zzӈq(ʩH`Z[@j¨o?=qg&M%bꜹzsS$kwҰέq2zjǷ! Ro}C:/ev/;;=p'MJݜrܩL;dԽEh{NQb^k^m;:B. 9i],,GT'c Qg9H I;YrWw~y>:dulɀg*,^;=[5{Rt!PF7#}X6gAƴU.p|+$ېS#\G{&:-`pISzj ʜ.NP(:C`9ҟmT߫ǡ.fщM`?P묧OÏ&B^dJt ɟ$*~ <' (z7A'e3{j֣`֕@Y8SVۺ}x:}9TAAMKQAdG(d/H>UBX;LPbM3/ppK4[ZXNXWN6bJIy^~$Iq=gŻp in<%5HYG FI:rea=nzYG~&<Ξ$(,z5 X#tnʉhMAߖb^%\Y?\vI<0v4?qD@.ŧRL*1%pҊz>r_@wx~KfL?s~A =h߰*T㦧;As;D;V^;Q M*ZUЁJLdI÷n/, > TH9Y;؜o&ךps;i9rّG}QS?o$v4ֻ+)A`L^n -uQ̋tGYT|kôu6~D!FM3%}8ռXv/?t!8(?bh]?ĘTܭIhu.{GUK E>Zt_DSU">+60|[bN +򡓖]UCQ#˼%͵"x0ғ:!IM]Ֆ@#k݋bp}?{'33R) !3K?ҨC]kinooZ-1Ȅh+<{BrMh8c9C~fظ2{3F,Ptf Ajt#.gG΁HECv :L z磴̕#d~CZZm(2 ф BJ_Ϩ*|B{8Uc:&$ O0 ﱯtM\|k xS ޵DC^! d +N&ݛGȷ $ ˳ƻwi-yƞ1h\إyf2"bcpɨPF#+"رyvy`VMzXԾD%.߲) Gܮ<[oxּ~nn̶^R\!x̌ߛQȼŸ!nɝ<.O.`uNеO5enHt0Pkc^2%|yX#XkN Fj\zAX4/JD2%Mjl{g3E{ X-q̯ͭXQ<. HXHL!*5:a5ɉjbA]ND6te8*P2`o t!) db\C? l? cZV.BV1fLjREvdT2{[1U;1VXVz[lch ^\G8exW݌=4>Qɕ #SY%-ĉ!c/jT[.<ߚ@wS[Je0yzOlXpe TL)v4A>V;M[Dڟ&QXX=Xo;Eo!s\ћ ;8CG#%[) pHSU9 &mFeؕaF5\)}a!&<#N#]N,e{CT۷K 5Ӭ a=HZI .7$gw}2h ./Λy)xEac}g1`|ͨZ ̮-iR!E'f0;!.~%nA??o*L$[  e{[7cڊ]}PuJQT,lŦSg1Ȇ֘/gk!ڎG,ݣl[1#$-0H1:"U4H{oE˿01_?u 8-ٌۧD^'lK &SS$MN G)LOu_L %/ɴݩoInB/j&7uY#̭c^wK\dq[Bx ceݣr@ʭkoebP%Y"C"8։h@ T KX:ϴsy\/^ʁhO%vwޡ^;仨6sA=YX}3`:56=E=%vk"P},|Q;lZOS%r-spt@IvS(a naUC`AЍ{"0WrIퟸ ǓZ+Չfkx^ 0WMǖF6DX`cr0ϐ ML&Q;qoooG^ ߶vQ&̬Аz0,e1/z>X!,vY5}֮Bm|ay U@RsXg ,%X Jz!Zv*hoR>Zbp;u2,ZsاNx]ÿsɒ('=mD8k/q56 cP%F/Y)("sMD㾍Ā6,SOF!_,H* CH0B S߈46ab!C5XZ߁N&#ڬi'N0`h&C"yj/ !zz^ʄ5S3z1Pd+9 P6M W!D<9YFLAeL4|`wEĽx޼7o 1 3S N}&P6IldG8 Zs\fott񴈷qV) wajbˊ |ڼ[ٝ;n4m3E 0}Bdh>0*3hBy^7뇆auL687u{S"r' +e&%k4Ujv&pweL\O40yr}sK;[`'-,J}# ȑ*x:QЫlGh<̐7Lq:h:ncئ6 )Y-O Ji6lf &4'gkaCF6' 7cO~"s^ek,xm# ނϼidBxԹv?nJ>Rl1W-WvA^ISڈ}3YF CD1_+=n^Խ l%[ LmG(.GN@$gn`("-qD93:u %jxՄ:x Y&C> D~ّԏ&YFGpLQ0gDu7*]}ˁ/`ΪkW$1QpZ1rIhH_/iIO[a0;*LW{cA 2|fDaʠ-4)U.IO,m{9`n"$^O(QsTUH}Ef5 pۍ4=?yם5W >V~>GjbmҜN)g 3H`6r3YRk WL$-seUdg4{U7dk'hn(ˉI}P|n8͑뎱0DMO}A_:KCz Mu$ᬦTF5/da[.pwc})9@+I7E㗻<{|@$% M<]6ͮOQm=4נ>7Utޥ@b *'dp ॓eV&01'$h+/*uo}!u}&;.!kT^%&o%y}Ğ[{!ޭ} )Epc|A^8.Q_c?C._}ޅ~|X I42|)ggqZ;DSuw(^lC) OARwӾ[:`D;-G;0j=&(Q=H_4H6jcK$@Vns'vFM]<(^]͙Ƕ2n29aB25Bai>YJC JFQaC\pS, iY%>&@@ c8.G|+5FF|L\'Gx&.E (?J9\JQ _Ri8Np2L=o:os3z%!&ߡ5xWֺ`10X+Gr2hyt$+MZ{Zj;u3CƏ57䐷/Z'A$%xЮ!3LHօ+/scൂ#7bO;(HՙcȄyq:>yߣP_gk!qvtP}KJ%}~F/ Jvrv,'J(uZ9U*a"(Yn|^ )i(zjǬkZpbF+OdQ'P|BJcXTt}f˨]bA bPZN՞ սܙ&X-jXY]{|1I٠e\ecеJ|Bp;&N+o=X`4؀~ͨ [NQN~6<5҆wPO'ҳzz&M:`ݕ%:ͦdlX$DCmk4$UϪO6n簬~(}~3T}pcӕ]\K596Ѿj&I:ຨS}=?_$ t˯ OhS Uxn4&VOC-rM[f`t}9t4Ře%2n &CqoV t)F510! 'T ƹ X@Kd($!z=wo9mYt,~ b^IΊoHߏ fXyg%.XL lܐ[GooIӕ cfn"$;+iC_ b -xƇPu˔@QRAM),J-zr>$ʭv'P#OH̐ЗAA]ANV2cUTa١؝.O-JXH/Fu2*n yNp3j)IZ_yT:ȅjGŁaDN @F LcBznR^sy!%@X$,4m9>I ˻aCMZnbEwTsmZѵ{o\J.12$yq΀3h0=?4lLFk"US6F>m VHʷ׌؍]]٘7wao:pg9gN1D1N&ayY0L Zfoߋ s37 闬 z8V:yTS7q:,}"w c4#P,3%tBJݘh"5ؒQ?SELm|pzZe>s eX?Tg9^Fj8Ag'wD{Zv&ٖ\Z3ts6sV' -~$$ժ0hnȂlPx^+*vҰ^ fL Xs$'`qn[I*kO23h=G/d?Vkx4m8>dZoʏF8Y'43F/O;#`Jf꒚Cl'iEH G%>s/#RW?K'ݞ 1': &XW+W$9qА4Oˮ Pp.Ln$­Sg"`-}]!2FK@꡹i^A<6domq>;j;Szu8zg6Q eW 1F6)}86kbF$m2wȳv.;ϕf-0Ve,ޒQ'oǥcQ qhۗ9hdwԪ5?jl:^DS}1)3 =JcS%|A:=eSX+Rv&n@9#|&|M$b<)KN78:Hϝ!M'1*[#8 6##"Erj<7g+6f]%K1_3Oi k0%LU- {iNJɬYm)>~Bl ݟbl3ܦ#d~@~.)ذ!UGEwx_[ø]3y 5Y4mwLGw&h-Q53 G 8M'yXXV`'='AS0PNw>u)w -0{+Ӝg,W[{A5w,Ow_vƊlTy͕MxW,jָ{k#$%$5;+}! Y5BP?#`h˲BG;bLxXvKݒZ,VA jIOn T8d"Oǎ-=]pbW+5(Onު(ڼӚ\?"; 9Oq =#;\BG65s"?z oĿ錭W:laoޣ_\Ik'fg LLsWrhTn挍 j=`gR3;ŵ>܅Q}D>aתit%jߡcia,&颤?H8O+mB:7YpQ4Ղ qPl7uow/@$yKh}&: Cari7'N0uR@ʗnH~^=*5E~i Lo ;s>}C@ [~ؿ#f]:k }8?A<iA~GxDJۏ^뮄sqhUZ:fܶ'*Sd,۽S_Vئ}-zEe ?_#hJm lU-W0T<|!%(^'{H>/IW{2Ot?^v[㬕l |?ХynZ΅,o$%[Bn0n$[?^+[b:nn,8̥QP^TZpWǀziu:2#0|%Y>>]ı߼}1lM  V*&@R34L%)r$;kEFZ^ր+DR}*,P\Uo&a\qjn;JѵȔK7$|ǧ^U<^3ܸy}+\2e$HzgHf+*$X%s Hq $<#;}^hFآmD݆M4,69I_R}CKiA;矋ټ*bYD5Pb|+R[*3J++ 5٣bQV7+ܙ!&ھ@pϚe͗Iqu5> $Hě*ljf Unጶϳ̣<]:@ jeL'46~9c #k:Yq ;+ڀ/CAiI#^2˷ft4fL`b:y^u;Y}jA qqK ܞ2~z{N4Q$dn@{! % PUΛK2j0hs%.;c[KM,΄KMqդM51E6jG3 2%i|`G# wWc^.> X/8^LS0nӲ//)7drZv>"]GE}q/ aq9Յ1e M7^3TxEg\ɍ ~oDZCI+7'I_k)l|GˇV6cp1OEM?N,YRtcՕIC=̪ ttۖ$6!9͋Y~ll%T ΪUC *>ߓFKDf`t5𔄫l@`B$Zb49GEH*'h6FݤTU Iy;Ӹk,]uCo WHlYOhSmu_u:4:LRBC2&8>8Ljzcy!ǒ)d9_ ?DOG v|fMZ)Фz ݫ ]w˼S\K ` 9#=j)R])1;Ա0},TDNziCJӪ㗦zEyct狮+B9Ư@7_- *|[i6iT~ "uD,fT,`g ]tgM;B(Df0V&q~E8]8t̯pj(OHd1  ѱXݏ-BIB+bG_.DZ,q^4 0,! A[p@GZ+YƝ4RatȢި 8-'&CrĺgOYCa t[Ϥf3n16}1"|Ѷ^CY`XXk .쐟vC :fdtb>MMk}tT".1;({; XFa}TT 0;A5Ip_O{Mp$ @BʷƊBm)817=)Ԏɻ|M%;k2 q@Zj :_W=G3-Rq$F6@ŋSé&a2{Nŷ՞OoAxz/tz-es  Pnmmi+wÆ#`+xo@)c3t,4dm%MCP/?_:KTE5Vg7*WO\}#.f*㒍7_]"VЎ4֣PZY C4psԫ,p'C^&ӹ⥆ܧhB_&ԅbJS?G] 6&ulɱ<$#̒@%Sߍ)jZӄ,PZ'.MXMr:9/F蓗\`b[< N^BK]Ԩᚱ^WC/{J9>~=j>2fX.ͮqFoT#M=4Ό| )ڍ5>Bzj^ӈ5# {n')dDbH[i(l>}:Pmj=/KƑG!|$K:VVϼ); >ju[%bW,wv~Pseqj Wl`픁 lt(Vuo+eD,v5\2 'ѫ|k=EwcսJ8BB]ޤ.ī]'VS( 7++f8f|*Dke!, wXyT#W@V$*$s̠ &LYޭhsul@3MtAtC)LUaB*c؀eMHֺtѐ`N[iz@&jq*Jldm>xAAsIC"`:șF++agM( CnKK. OBVGY)(Gd&!FKKm2j)lm,mB1;뻰7|sЧP_\M#~0."pU#4͸_d3Sr|u ~rzڟ~̒I~,JVycߕ1 #GplV6xLq۵i뭸{.dz55 Zg3.LTgN[+= sZ#F]ԊzvQa@S o' 0y7f僸8=HcmsYq06ٮE9%սFhz:ebk3fRvg;E6?Y:6ŻI8/*_ͧ{@<,G[#]$tI0 y,U#%rI {/8|S_2$h5^x>>C6ZJ{PNLA3'(A6X}NTp[^mAls% nDZ fd.jKZt#QGZ%ՃeGA 'LqkmtEq 4RXŮ.25l-Ynr4+4F7RZNXr3VHUP~׀JN&Ij\24wIHƀ):jehs#$.L +``Ms.,Yn|8s&'ԃ\> ]`1_WI/]e  =H*R xcHC/filj*{lvr:1n(10>-K aIJۣ[ЬG@34G0Ha@/U/#sjqcUngj x(^y=˲cSDv_yƵ#) 3%& "iܖ >ȩ8<'9si%T5ha(a9(Wj&bIA IU2ּ|psniaӉvKgC> -1B6MR=PwK.SPVn폄nF ֩u Rކ,Pbl0.Zc`E89i/W:ImZl\hp~1H h|)zZQY;C"בn4yFUmq ͷ9/YNC Nny5Ih_[;KҘc@=[qbhα㱼Zq /jؘr9 QdÜ/~{+'ixc֐mXFh*)7tő"aGG Urx%V}qw˽IJQWldPi`0U::nxH~\˖:‰te@fihqr3t(3U,AX2gS|gN#hH#i?BYa\'Y]Jg8#8d7Q9".F2Wzۭ/ ԙAP>-ĺW~a[>V]bX%~oBA^:Jm2CTRoUEI? K)j}{s*њ2?[?х-?E2E<9/[;4^`\Λ^!921h_2*!tI V{Mun2XFKEPQk{ | ,{`@ց{π~zכSz} U{mڢݴ5?3d4< uPC:s #珬3QlSC?z?124߈͒)^\3tGR؏%MePd°ܐ`%ifzHYVG,IU;PinW͎1ov%@H%NSe ׊q0w 5ύ>2Ae`jIlǴZQA=Ko ߚ}CGBsvbRN6^QŰ3\Jl qgYx3趫9^Mz$=I/-ӏq@d}};7Bth-m27 6VFLAB `(`{Z^*np 8dS'$^~u.+jHDM3'nnjJ$ o>J )uzs!Fv 0}_iƼ.ܤԧ4mFV=tڜ4d?Yu.GU&%lvŬ_'mid<>ϫ \uC(0Ŭe S>"@^^$t-HӅ&0cO 8 tG )7MYP+4Gv, Oӯ =Fq2DXZtAOā9c@^D_ )Z|0~P?'j݀WyʲGb|Ԇwv9\xk$$.rB"a M@]SWV֬l RxHH}ZW~-bV?&{ Euћů];i #vEgX1J #XG^LVk/٭c8-(<%\Z Kps+xDN !FI͒bqIqw&7[䀋B {pj{hpyg3iV^B+Y[ `sدiz=B^Π1fyl)HFQ:{('4CEZ_%TK- aMފ /n _ ؽGV˴u d}ӫwX'',.J?J,&>^SƉhf>q/Q|`b|z ~Cr#0"ja/a z:qO!aLYQ>Kg:SQcZ&zj 1PSt@jA Y{%Vd3"j[Za6^{/LntF\Oc層K/ V",U|1 _Z. P+d& wC|C7╵зmy$#%q륋 #la|e \ڱ?" v@TRC [n̮3!RkQsSܶURk$ƫSFBCr,BR 8RP@]L%a,Hc/kJ/T3Un3o!%WFh5vo6FI8[uи^m}f0Y6qB$1"֘:W6͒mB3hg61vϔƠ ËHe:3=۳z-UsY_E^bUPS懶Pl}be_f-H,>T4` CKk;NQ5ѵ>Q-*N I ckcwEL{?vX3,5vS'}pֶT Fb. (8ٲVw(zDЅd&Rd?Oӣ%j,}Η^ x.=Un%:_پ!P21ٛndu8 ӑh5TEW X]323a$Df߃(izSг^!;݁ Fzt / B{z 3:;> M j܏/J 28$ks l}O * yr1jhHt oakmkr)qJ(!~w]x>׊3t>:r1,ڀq)>ҷ5T>mS c ̫7|*TWD!OP;w.;YTA  ͣ~U!R2ŷZ9$XfAިP/l~͕0<%zs-Z!HJ$w87q#v7щ.b]N6x̋ m?hz53\9*_nʮQjw!䈗HsWMݳ#zd%Qş &u^B$<*mc@}@M<w4g(*?X=wH8Ȭψ2" ;@%^3Ӵ{g|rR :!V'F%HPh;OS,'E*@!u&  C+ lbcU3 oGn=NJuv!`c锾?9㍁V4;3^ma_m}> &sF&2͹dޥsg"oy0'o]`W{0siJ2%6p?>.{Ĺ[cNPͤ#<ˁVCdyW%ŵN4lfzLcT&%_Rw]Σ$óWWeI|{MN_bn ]?;9$ vӖ6Hᙇ`TTt.]]e\q\j (]+Qc}gGS#Ҽ1_0 ,2>5;rJJ_^#eȬ2Ԏ,++ZO 6jf&*͡X#@]rZw^+pBdl>r;TCt#žgSۜJEN16xpE0\% >롛dCy,?0vZM> UA8eS'bӡ 4M\)?=ꊮ)|l˥3C_wY/GA#b pdPH [`uNCQ/_7 T˗8\BOZÞ,>^|nP%ԔuK_biAZr:wѫ<_t6w6$+$ -@pinuN:.J`?fêϖyI3\\ eaȫt R!jg)?Ngr>Sg|;^r\8YӬ{]j@q{VFlD*s~w<ښP Izx}ȿA4nv=65&- A"?t5 EfͫcKhEm,#{'h+LCC5Eȫ~GPK0 :Ƃ]Տr7p7+}^?ȻkJ2А&^maF>yWxĤFz&(80amt`Kllrʽq2<|(Y6& f.i/$-6_qثc kѳ'(X?\2PGǜ#t.i뤸.ieM20kN;UO9=4wUlRdjjnT=RU% !|#ĞȚۙʈ/?oDJ W\^ܜ0W.TW 6t8i}9zw jJU@hk71/lr]^/G48@ `L7WIY mQ[Nn|f䡔 i!y__9;hJ,nvKKDć8Uɔɝ\hꨋD tFDa>KVoײ7릷Wch  F }x`ƺ!sq\B'D))惬䡦%[!^ZzohY0. LIـ+ #5| zW )٭;<[ekY[/ZIvU2![ ѥ/q~!zʓ⥈7?X̕>_73zF pw!_T1XFR}.S -q(}˯7 `2QD3*qr ~ůE7"jy.2/CxXAgT[{LsmրV/Q[-4NMk3' !rEWFWjk|D?>0.˩A&jmEPFxiջW%FgkAY/(wT,:`Bc?Yϳ%px:TlGxذHzӀD!.ۏ7BiЄ)ͅ–G^}f2o!YURc [> Kp\rsp2?cu ~sׯWe Ch{W'_Tɾ&]b}QDSFb䩖X"hB$Ffe;\"C FyIi@D B1u^ZEGU^E_Fyq ?E(Zӯ8 8r\9LxI?HTh@1t ;e @3< ];uiUs#өB1}qi95At!d9,׫SpM`)XE؟Xㆻkk>|~.͊R; pc$;ݱiIcj sw2[-tdЋȯzBw0xS*Bf 4P1J=ACae5!['Ks0d3..fVZhMN$1I%u+OZ0*6[g ؂{wܧeK럣 ll_E-aH|Wמ%TuR ӡU A jY90[S.y WVԺ4RtvXϖ^k^i NʁQ0b&©FH;2Gq>J7؈/^ eUظCD|Y4+V,<~OC[&{/UMt%dzԘϲ{čS !FpG9Zp9*SҨD onjiD[sW6L|H/5אܬY޼C+zJ>9՘3' _kHà@9cи zH^w+!8ŦkI-|?'hH3~!1e71hӘ֜hg '(S0?[T4`B'xmA` (iDݛqJ~Uߔk'(1H,W_*q/0W>s/ZKET0oVB]L\8nUa>fY4Z>8Ju`߇^ 7?~QJծOQJN٫&4$_$hd+{ߌaW`d?1Шh \C^!'_U3` m|s;: Q,sm^¼,WEb3` >fiGSie^򠔊E +NQC/Xy$.J3~&s͘Ck 'u\ a.p5:[81-뵖- }'[]js!aKb̡)SWНزu-+L$ipV8f? G9ĝ]e3 ^fk^GI,b F}QTb;4ώt+޼BG??{GZs/wk\9 xi(ZѠRXN^v̚ "q0/!aR6JF@F t$Fg( ŞgL9U P1wB.B)=S\]''"o AH D߮wX% Ւ[ۨ-ŰW]ZZr@BÜSvyW;S62>h66٫/!9"#Oot=~[ӑРnE |Hbѩ_v&E+!h$;ISw'Jҝer_҆(k|Z(=%fǔݟh^U Ϟ!7i:2 kdS} W&@{Gұ+i2:Arsvu.-EizU&w[y, =DtSi_1e& a"b{xߡ`Kn g!B]DnSµ/:36\A{[ъC$ Piw:}7]}qs*XkJ"qNl& |9H][`)a0$A1BP3Rn\0kGr"BIG]PaLYbل[DQ\a~K1!Ѥ/ι!7VF ȸQd_wQK=Ϯǣ߫O!a5V8FGd*kJFoEa:b.k #R&;3%43N/3xd+Ṯ`Nψ^S/5*EХO3 H:?̱% k:p)nm~Y֥ܺp5܍:v[$0:JRb@nFGn?6k)WP7;]V9q\-3<fF):̢iRIЏbIӹ^䆧`&!` h`83cɜq'ݘO#SM& 6`i֒X-07c'ȺȢ7k1/5p[Trf!?etL J9'2$ u?BAjOג+?BH:'[$L5;yځd8jjn{N+90}\5!I>з!9/;{Qﾈ-J [`K߅l"H)myμ+c 0F)C3~O' *tm/=LH'u3]QAFPLFҳkgnImˬ l(.7.v[Wy31\8pB"A:FIK#~Qd,,S8uOljU[/<ϵ _o\<4TiQLr43“^%|뇄N?EljI .ucE5.muEW>b-..;Piai^OE]җyiß̅D8/la49wp0h .[fB S>ti[**%R\)nacG:ClnG&[Jy$9 ^z@O7+.VHj9e{b:{d3ńweǹY̏w{^I ؄a|E槪-A}k+ȮڌR 3{|G!%ȑg Gkòx OLZ/ ,(/hF0{w|/MN) T)TtQ3モsݸXMs*`7#J`ԱJMMNkcʪU&3.ڐ m;9лlf\ʋD2zc 2zGkڽp$ ]]gW׻[&\]c)X} XoFo1y>:D H"(m /ӓDYA;׀7]|*,?xCο= 3zȡ1vZt2*m"$~uLl7q+% ZF 7WН`ڵX. |ZC^о9n*ުd䌘&h!ƗjtRۦ +d+ץ%lw5ػ%-`s67lfu*i@ϰfv߳SQjg>wII8fJ?N:BbTb0C~"bd7S-ܡSDBq .Jj!HCưG{ۻkZX8'XGvSF[l4qL#ñb!x Cݳ .ܤ3Qx~Utej_ts.9MZ"3E"9aTªу˝)] GrD=7]/ &,xxmOUOT+ 3n4&dmv\GW==(}?!~csEh8b7  a<^!R#=ͿH;x&J&A{eܕ`xو5Q /t;9{eo (X[hF~ =I^0jۤ:^B*uHie̎53>Dt5Q&ݟI ,qqd>i ^ ﶏz{[xWV+D:S*i[EJZgS޻b'#A#GttaC iN )# S/vmוLʤ^ C fKJ) P%=tl)u2.n7;d 6ƗfR%ՀV;)URM瘫z%jc2%azV5'1"/{ݒ-_%_ԔDt(=϶ebo|cv0kݽ)\%%6b]C-bl][{Y3c.)Xڜ0Fr4XW9D@ގ;C5ⲏsvmhGJ!k#th N-n];L;Нh{WAPx,u:vEzMK͍s^FP01 -kTv*c~@>P*"p׃I:5O݁P JToJͥ!@F/t#ʒ dDT6cn䧉p૓67AC[/)˞z Ę=Xn͐m9h5/&==9P| {{eJ\no2qdsPdC @yU&A8`%LĒ;TbOi`[E"´ZXsHB=NCb(Ɣ (DIzn˒aLȢ%X @%*k% dB(zb3 ]joٹ3ͽup-"""%_ظ뀌Ҕ =d^U`Q@b2VTXjeDXԊb[jX1=_v'&`}DPbimJkBf"q2,cPd4@"@d `$ 1'z3֢B!_aܭh>yZچ`4JI̐Q;OwDOEA)(H Ą~jxփ2&CS3âW9;>oV}Z=Va$8O1OH}wXM77+`ǻ=tUZ HE(kP+ "[qWLC}xc̆ŞVkeBHBBfr*-̈́Tʐv ^:؆rbh޺f-/URr )X0)%NZ:׍T yhz8F)"'N G̵Aǔo,^82$<+s=g<r0*,HӸOylEWzaT} ҥ#+TYlJŭPV~9Bfz{AYJ"hX}x/|ԤX( ڑ AJ0Y61EZڍcYT5(%sXE*_=W͡l(1m{bE1FҢ(*1ũQAB2mAOMNT`TX0Q`UETbFeEQDzX E"Ƞ,O(1Eb"EXʅ`c(+b)@cE:JEAA(*UVEXSdDbU((UQDUAXHED /'sPv_?E+E>8E:y/Q(, '<4DQ#!v-UD!8V,.~K5I9;uvީi‰Ib+{ ;WtfǺz;Rʘ½SE v 8W iK.`!&!!jd"ɗRu? BklWmeqA5y%,A:B"O..g"mrƵ0A26uLV7?K Eu0TsAQ-jfT#lZzջ$rdQ7ʢFٵg_7bDMDVs[4`Q&e(68Uj#]jfb -!3͵Kr*#X0F~DD(63r0lP jTZ{:3>2L4ɑ n7bS|uS}E)&l_L ;\*MUAm7n1`;UZm`ؕPDɴ.8&b l1bk*@ςP"PDDA:D߱o q'}, ++)1` ɍ; EʀwwPv,:' d CmSzD㾮s0Sqj]8,PZa^pH(jZ l<$5|A0YōPro߷>I75cT/Y:xsful yjDaF)?ob|㚷V WcDt0bLmlj@EE54K&6%Sd) iqupes坁"^HPEdl*QKN^zt&hI =u{kYռi4'˪! !6pBQ, \]HnuAV˲"i5u+r"=lj~mA_SVZ֣_ b4|7'Qnrag0[ fu+2`x$ZzҞǜDHҌb WlF$Zp#N:C_0496H@iE.8;T_-̓n}1W(&^>9n{e>=yņPU"+:ql {/RԬmZŏ REamG#inHdbV4QbFX焥ĵ07:%Pyd!`WrWocC/9Fe<+XEYKDeE" ȱPV SOu،#`cl^7{S#U%p뫨SQsEX9϶e>FUQl TFl9i֣nG]Vc!rƯʬ8ZM{4uŒUQUԧNTKGW|3 8M(BqN9$$ Ġdgk),kC9^qLSB`f$k#6eTIbr!!]b޽yκP`)% z5锶Ov 66rdUJHTClU+oFCPՅk(lKWg ;?@󜢬jԵ%/s #+X^u1K(JƉ弿VNqESQP9‹TiԘZc([)E\o%2&j91jX[m7%Lu^^|mQ--DSjE2h2V#c ^x&6)%-qx5fs 85lD峩ߢTN.rfx 5o1*l'K{۬5LJ ` JQ DZY,Q Oe4I$ j@m4>`e,0T HZv,2AJAYA <\z)ipgX7.R@%x67xm44\P#N|\9swDi4JVuV!|4`$f3w-יxV5p(B6G+ !r^ԫGWS%whh-b1B)Try~7sX_VK~=翳{pGl?DM1 4{ VU/ 5T)bߒc)<kl_V04?֜ÊjUxŰR%9#6-P!)WPuax6x}wP̓R=d@8 )CPlGyXo4x ,6({J]g: O^ؠڻvFb;0!nmߎ|uAF64P-aMhHܸW\  CC'ʩ+)_1K *m?ЀSHB[/uwdܮ=b%0TJT%4ѝNkb}e%nzc7K";2AOW0SW*3r%vzync=xey~'+|Flxkb;…T.!r"hz34En-n6\+7:]iPvJb#fUu)X.[rAQKhWPE[fZQcB&.3R6䡨X*kdf;,k]3!Tt"ő:Dg1rYLcqdUb`0[e+9ądRHrGJ.ص r  */'/_o[(m=zamB^  Ns{Vu㍏r^iuee{EED ^ " EPd@[L: h}UE閖5 )k $0JUY8[s69$Xͪqx7#[W~_gS>#C;*#n@@`B{ vZz\ޣ2܌c?S#,ȗ -}]^C,X*A!q I 1?EeoC_7??DV`&AE8=* )aD L[ϤۣբVϛ÷?aU~ j&eRѨ' Z`.U˱@J2r`)BmK& GkQISu%:Z.(V0a0MI`'75^d Hm4:E2$ݝol!غ_UM-? dX Ax'9iKW%ahbt2vȀ|BQxfiJ˒^BD I'hA` ^sqj>on[gxwN&0@4^Y x{c)o^Win[ $o2Ri$$|d(i({T04o5!K^\7tP/#聻v/9x'DW"HM*$` h{(_6em:ŀj'f cPd[Bؙk=0g67,]ůy$YJ/`^duݦj΀J k]ə>3(rb61INIDEEPeDl[-|] R# `Oܣؕ"Du3>0rϧ6Ϋ+ZJR7Z. B#\Qo۶|DgDJr&w?|yeD]{UrEQNmti>We|N^?"CRwx}<cg 3<B'c>2Y=E3,ԉ ^J*; N-Xcp JqN6Z}i>48/u"r_QO7X<[@$P}rW7XDH-! .N}yB^,w(L$0Aƌ$̒/D$Y~B]xA0RXayj:s0y;˃v"DCg5~g}wC= sf*BUQJ UXIU$F 1EcdImD5DfqMvbRJe)3K}(A n>ƎnFTP#"Ni }>ۻr6@^SOo10ZTE_&)e1!RbĊ1Jˣҁ^ksVu;[{^΀~?Oۛ뺢t/eZS_os7_)+Xc5MEG:j($#(᥍EԶ$US1kB5*ƅhwSCBsd][@ HH-DPhY- J0DD(d{RXE *EF#YVHL~) ъ1=V"8bjs`CWC6am<,48G_OhU[*C)k R v`q7)bТ(EC"EԱ2ZQEDA;)W&]UPL{z>3ML\CjBB^cA(cAA$BBA麮F`'7 kK ;}uZRh ٚI moy ~8a!`rzCO֪}ؓn]sP qvHQ‚wuzc "T;U5_+沮 Pn[Ķ5vmܩ*ZXUH1cJ7ucrЦV [W:銔XĶ1YZS] VܗmW7/,UnnhքWR.ۏUSSe0;PEmriQgCJZT,)kӷk;DS`[sE0|rHT)DX,Q(sX|2#9@ZVJv9uC #Ĥl_?{H0@l?u!gW{h)!-9T\%1!KW-NyJZqLaFTC7m:L"\8ʩUKKY_oX)pB}T>_RB\@yQP;Hv C{'EV"lP}X>hU?5TQDTǺQS-X@$ef60o6ABsEp.9)"cU^u~)@!Hx U-#nF#"*´UAڶVTh\fVvT }M#! r굂45{|C=ItLl_B: m$}]\Tibd'́_t |c@8}=tz 9(ƋaxXA~d%KV_~R4F dK'&'sSQ*#pG;^|x:r\Ih EX)#E"dR(I DE!1V@X(b,!@,, @Q`uBPZ 2 "ŀF$?iݝ , @R B)RAAPA# ;0K20SbHH )$)RAd,IH"AA`AdPa),$""` $ " e;zڵңнnmtQj;6FP^!YY{q:r^cSpM7]Ӫg&-VwW8&sXq;{HR՗X]뙺:{-;a΢zNtsꜛ&7wpm/`Դȍ7|ax19xPإCYyFNsҢ 5m lsyּh hgc vU&̺]P 9IҼ]lJSC9'M\Rq a b沊1/%9\YXEc"ņyrЕn]JiK*:z3L Ki%jӋ/FV5!b53iY*;i] 17s Enn[P d, iCGQQ"%P=34r倴"@*ޒA?VxraXЈwU\ʮ6H2E9#Bf?5/6$\9='ʇ?"8Y2 J@u s?FA= c;+ ߺ6بct_!ho4w`7Qڶ:R)Z흓:Hop032 # T``c R%!Q"2HID'e9 P;{\N?|h bä9zX0dk{_a4 +-3k`4%#J]rXr@O:[Iߙ#B$#HFD"1TDR(EQ!@$bl(r4e_}>#,CO$20 H~_c[u{nNQE$$$"c"TDDd d@"EP(  $$XDH)$R,dPd`!$P`H(RE"a"!"B)Y(F+""HԈPN\5R H ! FAHEPHA@I+QAbB BQUIE YB, "Dd`  ()b(RH@ *bQX#F TEA$$ (*  Y"EHaR@PXH`AXD$BEYAOb2TH Tb0$"(Ȋ "1"""$#"PX"|o>P&1Ѵ''G zAN޴=RB TdBITd` 1I?d'A@)Mj,YNEjwA0Ո2Eb"YQTT``ł,,b"RE5JaeANc[%ֻrb68%n1|y6KPDݴ2o==-&DT=̙Nd7Y؁c'AwڽHqEQQءPb&pn-z}{ s?/@\驣1PкTǾYSM۳P,)/!<v.F#+ b8]P(Y@%ê2ƷҴQRك5i]Kt)]H1,)\̈V 6w Mv&jXǾ֔ӄQO4(#@@I86tsg^E m^51^s;a` Ng=P\蹬Z  \hHĮ~YwD-GF9bu{rGO.Mc^`e/IJyNL33!#@1eWig_qU^.Yw}Nһehq3*0 H u_jSeCa9>O  HqZ_YKCݴ5f&v/7ǥ%Gxv =M 5 HdX)&u]:dR";ПD-t홽6KVU`OǕOt_tv{<7ˊ/7粆w8% r7%[sJ(BA $ 8!z_K NߊJ4u؈mK;$obRza& dZY}x|aV:j÷Y?eOJʠ2. (/glo$i kұ(f&`hA"R&o"g0YNuS CgTOFA !"`p`4 ;vF $5>Y^bZ %]CBFeQ?-ڡa @$,Ʋ}Xhqa;PR5(jɣ{e61P%+|x4VpV==,^\^iz\5~_E~~/ޘiaT; f1*s~,2CzWW.m|!8AUT*01]:D ;*;?Zpx9sulc)j{8wp+=e(pSl,ҐvW"ŒGfS1w̥c{d׿Դй^\EiyBP" KS8(|ll}I!z%1TYVOY)Mfw;} &^.6I۷ ŭk6OԸd &TNB꛵ʪ: 0 Aj\vℭ vѬ{v>m:xDݬX~&-ύ Zu ^`}+[/'C?y,5Ypٟweav^6}YףxkKB4>քD >\y8f멬Q'#˿gJ]ã]wiswT0*R[F{YOj,<(yP!&n[**,:LKѿ2">^ibeP|B+7 PC(Y՚}>_Z"Da1@DA;rI-Q kB L&c %]L9C/]SAxq-[2J_)Ӄx4d UQ[xe˘mU9]%#+,0V-^nR{DEL@@3ϘI53F|ZAAYoߺ/L>pkżUx`{q2'7vv?*?bmNПσz,]ov* A+ UZ( lu`%^c&C ֮#i;Q[ ? /I.>]۽x?}'Hg6!ݖ.]~V<'c޺u`*~W;~,?~ON|[򇜮>9V}ó&^k'¶e?#uB7 VK*|Vf˶va00-ՆČmre9&=?켺d:0UV=.?\:DžkUc&>^͇E*jߪcaሲkz~a߭u[=1w_c/4'B;Me o,yu%KnHO2ۋm5z5~XT`DDVM7 N+w?;0~<dzr|\xsm}mX:_k);\oz-kCIZoJ0\qh,9ٚ- 1ŕ q0EU su7.*/dcX^wv>[a>O~_-kE.HVVJa>(L?*6*4UBof%mnw珷u^>Uu=}oWŘ{r=w},V㐵FGY5zтEM8r=ǟ>ہ=LOTja:a{~H, C! Tyr><:'`H]zgL!-ϫ{OOm[,6oXe6]v+h^ .:)n"_,UUoDznB0,K^yT Ă Ȅ0$* _ăQ,l3 (:_tRbe/r 1G;9|YD }럒O>"K_e˝d{KżT%q^bĪdR$M?9O蹜Sr6=㾗"NczgV +͒gҿʯxV4bz(-g{KCE^(Qro)V/@TWvmtɵ~sd{,Dw/7 V\ ?GR-|i )M 5VhX蟟de^5n^81e+NHH{sX+3쭠Y.ՅU; +C}[I/PByI&o$jXȩ꨽ w %5/Reufdl/R)-tc՛K N2puFM+?7Y*VYu 2EHvb%ň;{,_5Svgq; eё\g>UD!<bg1rAKepfK|U_>:sx%RۀSGW^cv 4{揘tKaӑ2_mE.9C2m`] QMtlSk8_,[@O#u*6xPOglZgHӹ5 fl 3 OpPD)>΄ Y9K3#bw=]Gp[Vsу`BQn=SCw,N|9$YYH}D % ,l6t)e9>o$?Rr~#4<D HQ@$a%%<-w 4aUOS)'ba*S(@DbhHvXy~|oSBxsSDue83nGpog a}>> ʁc%NZ;"Gq@E( Kv uPvvm Q&ǷKhP6{(Q/?EF1Zp+V^āb ƶˏ#T"P^TTN+5f*JEt H@33E]j)cvfaMDҒ}~ t Qxk+&շoߌ> 'b׬z&LO ;gd}oGSy%3LyA Ր |7(5dԤHCp\u+_D ߎa5$ FhN}yz^2]ق$VL'<7.,r][asB߽n 9v! v2b 9^]$=/&C .'CpgZF9fjz\` HJ-U@-5iQ?k#*ʢm3(ɜbҲ^Ն 7Ɣ4 Rqnݱmxr%t[ڹ;nSU=\,`< e2{6@kt*1ZAA'OI2"U&~]gp/FOstH4?# 5E;Nb͑?C4^ʟ 5TgL1m`z)􄁀.w%YV}gN퍧 ah+_/|!7;^{7 K*& riH"5g]:;y9dD0C3lLJag _} tD,ۡK.cV〄!qe[=MOSو~\PWI>f06mڪ[௘ܶZM4 6%tF⾗QY=:Z\%m ohټNdF_ iz@|fuĖTWNkn]v^'խW=Vwr qKå0[?`׏^IA ~ĪLm`8V2I5g^±]!ҵ*p.2*-' Qg F:د3օxjG%cs  GwL@noeB~-wv4c&+`ɋ4s+W5DtbH9xgSp12"F D"E (3EeALj " 0g`*4tS u;t?C o1}{`3(b"#1Sv"p 0QUWD(J"@K4* DUDAG5$W _@dQA$AJ"QUTADn({mEtwtߠ# 5EF8.\@GJ *)#|<iP!!*q=Os+>;V ;.AO1f;M 8p=ŠHH ؞UGV@[ʅ&-WˢלXX^Osu_ֻ A5kI/=[a:\Ԑ"&~ˬH+6yv!~[De{Y9[oM}G{L_3oڂSԍB l]-gɤo,&ovNs Ep rƔ-vtʸXV!`~s\+&Ao+豩~23p"#>1i`3mT= Bw8LI$&%f"$PnX$Z}+DzJw hJBg RhYn0\$ u25K C ^&8h73# SI2@0f34^2ڇcLWu0|?g^+ wwz]f3 XRWKE)fFMP"޿sV!f_5@cdDMW悊nz;ܣ ;hX G^͞󴢢 Xn+^0n_/ Ú\~!@D=6QtW˫}q5P@ۥKWVl*6{gD 1ag9G^2|ϵN,dUo(5 XM\M>",C2!^R I9mgg"uF F!&E;D (POmD'~wDke VsyCի|[}g$@;0è-`$!雇cV\_5ڵӼ9[Rq4w9A;c BK+(A8~Puwwc{e Fzj.:_5T@'u7WSP "**{ cB"M>LP$Hfn7 Hj05fth!yAI⻏^e:5z8/bd3,c^ T y@'"Nز8E@CzrnFi =; g;+Jg9qZ;N?q鶃NlU cw k Y Φ Z>9(rc$pJf$E>!D懧 GѦ?Ox|C\:cZ ?zKM,NW;6QImu->k( .kR>)ֱ KHH_8%-JBӰ)@O 8|Ӧt߄e%¨3ޛ Qp-Ȏp'wT2-B{8MU/%B) fM N-Cן[hc?{Gk[lǏ}VF.OZ"2jKh!uy-yt%! %QmƸ6 UNa+fPY sݐi:s1yfJX[)@$@ Rvݿo[G <[]f b[{ ^y|1*ҨHTgO7Ef@E9OV; "Π*ÏWzߏRP'RD T^Ͼ0Gy]Ѻ9pMVC52vSn˄0YUPAgbO\bXSDVlbnyL7l⚲MiizgOz,0 T+Ŀ_yxI1ݢj?P$=i%>65tc]ˡP/OI28!b${paVX%=7Ɔ,pgīSlᰰw:f!#h"cF-xi*WCx46w_WaYXAq8pOȊ3EVxy3ʬ^Fd'ڈAoSVds9ab&4U=8V'@̭jd!ϋ!]<8R(r,\2~h$=0V-;C4x'48j]"{ysK1[Xa@CAoS2ӷWPYn Sֶb_;),(^H7>f&"ZMG>j {tk^N>lί!3Οgъc d###$c"0XB1E`"#"2( .\5٣4p1:8125&^ӪrAE =8^M{RYZbǀyMI>:(N\s=$~m@4ohn(qX dflCG>4jGT`P70D#n< t.ތ6NR-^̱< 59Pj搝 mǃ `a0!Zuߝn~sk5o'g^!zhz#ԃԁz9p_H4WԽz S7iCۉrPzet'Ճq &UPOqPH9 7 u$GaNWﲗ,yOѹmʾ1ӯɒUvvSG-ζS\:7s6HW+CLa]`EkX?usqܾ P^~NXփ >t J08'dBR2Ed ۉǎY/զH*y5i8ktd531]}Wo6~|u{nPW }I51:Gs8جG>_vaJ~O]囕} v?U<BuT;9[^M΃ۍܼ>ٰ շfӌf"ol팾w6D༃t5 W:Db.3+/j,a4rpr`[$D:"FakX J¼R%7ITr ͼʶWƺrἵM{TdRF6_Â9+V[{Dۇ5讞AV1 b$pr #Msl' ½]ֻ}fLY[Ey m*yB'-jd_MHJ2MjVy0Q Ke5r-| ;3k'  `Kaj!^XD! \CXPWۿߠ BIÍ[u"$p!P+ ,`-IjKzkGO`_$Mo/bޗ][q| {Ls^ akCZ\ (Mfp1^l>TT[x8lCMQuJCM|Ex=|'呋M 4U߆~jQy+9oqy ~WxsH Zh ! 79I`V1X85W7{W/tOMBxSfeM4@呵UGs`PCxU瓯0dY,H$$}l=.U{4CW63ϛ5s&6Û1VOp^+{raw訡8 q A2L KaVD8|+ɬt=񐁠~ Ȝ.sRe=/yd{g# 󚉰B!tQ:Z]/vl3q4-Pgyisy!Av;b5wBO{4jhF䟹#21*<2|ػoC&a^Ş8;j7;ڼN!ntpQv?Gv8woӏ>ϏU9ں|0x5E<_O{Nƽybv"ӘH%k?6MH@|`0vBTVɔzoFBnN V3r̕6:zw^HJ"RNbz,5yZ!Eq|r%P,ڒ񢑜'{vqqWlhh"q 0t9[]twAR dD;{m.ѳkjJI`j}d>?k1yobh e|\pM44**eHY !5-鹴"ˈeW}^Z "="#`/RFD)֨ DL9\j#O'|?KGɮEJÁ{PX>~1H?f[4Qӥq)]bd*W`A)Q( 1`R!vVAh]87ZJD5HDRL@{_3Zy mY>Ghk嶣 q~c3ij_"&y M.nwJE)\<˽7->;0CF 'CѬ2Yj/wɳJ[;sij/^O |WyMS5XRn`q~.O ?fIHwY3<BW5O1I%UU{E,ߡEWfR\,>f(%4s#[b }xp"E;޺#hJBEdCA0OGqAN(HqU$EM gP !.(1Z$"|*q:HlE=Pn n"  ֪ @Vl{д$-dj%C %h|Ab\K[ԠXNۋ{{2T>'~M\2+ϓ&oί㺊t4L(źo*?fp^1FQkm|%JlQ8s_t"lHXVlaà-xnظ62,2 %0+^Iq=qya1C%lb'ϯ_U}̈'qmS2"8d(BVrfܙ!&A f-}’֛2lː[&Y"I=V FtM)&.KO|@,g+%G~:x  DAC6moƓ^Osw|ϋ*.wuRh4z'd!uAҨ媠_@>ntx:g"*>ZzɟޏtFAF@u2s6j1) &a:!"0BGCˆuc{N/`gl!c_'.3f_ڱ#OTr(~A;TE8\2$IEF51fíHt&1/ʜxQ 8|{n q[쏐Plwb$yX Jś?t'I vEmhn#P&繳gcxw\ nb)@&E (P m2[mh\zW'؂%XE6_?/2ѓ1IS   QnM 7O@'h/.|ҀLV@tLpC_vc ߯3dN")Wۯj9zR$]Vdqs5gu)}ȸRW -֩4֥'xQi ,zj>`AMatd+NÂgd8hw+z${@!/!c#sڃ=v7vЃ8PMZ[ؠ;KW 70BT̊`OqxL \ǭtwM/.RNN|ݮV[ Vx2 PF;=ҥ@$;e\d溘wm$q%e{F7/c5eO!$Gm7xB2)+vg뮈AV+Ao}NAwć\r]lg0<7xt6t:DaA 8?4b^xߥ9>Y_8">j81+QxӾࠑ)_c`Ff r < >WSzjbx>XE;8>OkhOLtH> ox"͋s}n =qM uw2"ByeseE+kE?;|xgwauVُCfKB9NUkٜHΞp dVv=_Kl6Ohx~7eX\˦C[ &&:[aSUKWx{V}uyiʹff0V7bfϮw/¯:THҊd=93"yid'~XAVΙTmyNR?Vۧle-|h;q~ KIY(A47Jʨ@I8^{ryqNg&wyɾ/SI=-H `bqFp|:k#(6>-Bت%#=+$l =\p4z]5vCM/s ;f\xsSqXi]7)߳7e a9:@Jj+?]e'iIf7Ew~ӥ^B<1`2" sz[S7k5qX(΅d2A|sE>%b5屽߭wfkOEAfwcD>@2R\2Y?H)yjBE|I!]qj!bVߋh>K"y_;cȧK3csha:,kR<;uy^pw:5ś2'nxؐD@VF ןk$Ρuv,@4!,5g u. 6zu -{݃u1:7_td%C3IEE,B3~=&RaJ/dh.^[$FY.SP:[=']c/fT*Kpm] b2;a,O%'wG]rd*pƪ`31!/oTAE=Vî @) #b6p-8DD:Ya +B#GN" %Ӻ"t={,%d{r(Vw!>䧆] "i8tw9Im&M!k~}4;xgNg9K- ,&+){&!}SX$&`M!ʉYrɸ[>~75Q~^F.%AeCID%._|R=q){W[G`z;mw0r:T_7{zu#_RJmto7r]gч찜ozaD#b1 A eQ^:Kd`D>nS)y-n.AyWCS @]? 8xow+3蛟>!zxn㲯ˊ(># Nr QQ= vQ\) H*HhTI+h*A Qb(&qrׂDoz/~7[aeQwvτKȐ6-LP>:da\t.xZօ9g` Dq^{ 8;67ku |>>ϑ#2#O?i2>3-އY 0Xjx[|X=vzaZ{mH B@eW³tBHK妲BEPQs*(am)U:VV q%x9}t?*uPa(Vbq%UJ:pƍi/ žG'_}?hK9ɉYZTRC3{-V8 s&p8$G*Yp!{_,+PF0΢Lj1I?TptK\A5O9,xǞBFӞ$:="* ZN$ EQnR[*WؔF<U[݌"H2É۹l6>ץ@Z:[  F{s&B=ş%w6@zra=f8bhTeD(lK7<r㰩?3 L#y%4D7&7  tg 餁Cݡidg~w^~;,KK-HmwkIk)iAkEb|T ?N0)a?j3"YF*HO,#+02.Ȍ $?EQQdX((( #0#*@U̙2kpYY"T3%jY`,5bȺ, N2V|CX #"fE|YRq:I_ 8-=0ڨZ)ݤ*h~'NE2Ε>|QzIRm!VN x#b7@3|t]-oǪy7;FV@ %sh686eQ!Di.H(#bDS#ևWW,1zcn×ESeo"u/E*`iRJ|A5jy9QA0XZc4A/ERE>NFX"LbDA ]T%@C_O"v1DCڱUHe^:&(?(qP{EAWˆ|2EU@d*h (@ (Q1xyM8c"poy>,pMG:/|U#°a!u]-'剨@xW7߲qL\+k^R O(cN` .v. وJr@&'j"f=ؿ,k Zxu/z@ K@u-µ]nx|>J^㿲^!.(-c[R"3 33Ho `?7|VP4 %W n#@HeܧQE&Kg]u`,3!Y5P\V~{Ԣ ypw@"&7wWA=Ey:߀21oUTW{pp4>3~%`_;VyO$ ` dev6gKa6` ?Ǧ@7)+|ɇyuu^_ގv5]M.ڥz~Oc_67M"^ biFi .VF7iV@ nQ) Tc)QD" DCor?@)'q_FoDCEG8# @S PȢ Pׂ PAEPD- D(I"UEDA,A5(8)" 2k (/1v /yG'S5ozzovy~]k 5_ rn =9JUrYAQqwzy`v6ͩ^LFKJ9U:;){ +="]pϮQj;`>c1'E v?k7A+4W?2BO*u;q}D2zvYI^CiHXxSt̚,G#c l6 clO5~݇#z\ ENMnDsX[2$&@cP`NUig`O-m;e@WKY?cO}Y3Pt$U*_HGжn> 0gGf063֠0p;WK+F0zf2S>t?3ӆB mX#?|z@*.%ҀIwCV(3ɧؾ,1/ XX@/*IP,F%PjU*HV$T/(O7kDAtDք22'HH xm̀W{\VvszL>:ń@a]kkďpyV|^^G< 6"BHB!%5$ "OĴO>#2*np2x:兦q,MuقԨJ!KvOִDL@@%k4B#TA 7(1<~=\^4ESdK@MHF`3 "TK=]]rŤ# R&>TABdf$KY PXX0K^m8?[o>S>ڮbw.iq6˩oۿ'"30 Ycf3KF"̚B 0{ʦDekn3|:a2y @0Fd!1֓o!w:ln{~euh<%K]h]әT2#2+ 鰳=;ݸ|[_*Ѵ; o{J'_z4_ZmĮc-2DDW -(R ,Kѡ>(ܠev9ksqP?*` [䅢.QEV ` / EI7xF@%@УFtD,-#}6ͧ| [slu.VCleJ@}'8ߋtϭ7Grɏ Ɇ ÍYR/yb ` D!$1f0|}GuNo>"z"#!UBm%9֙9`,2Um/_'WHu~2xdtxK'WOҜ"^M'nCv#9 W@' Ym,L`s0*b LGQ,@ |P1س~.0Ul$}NbD1O qF 1]xc\"^oz嫥J@S.#JO ^?ys7X`6&VpGP!Api0smSlZF@G Pq@EQ. @TjtH(D EqA @aR 4DCxnir^I$bΗ1Rt?CGW|C2Kk[Z'Ƽ/p_-W.~*Ƕr3>}Jػ wix[Eە1.tơO4\ߏVϻ xn~?5Vd'l2*N@K'v^% tPDXdFwm2}`@6Jt

nw-å$ړm)?^ߎP 9w$HDR@g=?z-d[SyйÀ 1-Ч(zys9-yx^ _4ߝ>tMÛ @=Ru 9v;[(A1l1Y߁sl쾟߿Xt/osq,0?a"`F5D_j(Ս l}s@C=PO 6 m-\ƪޟXpPDH(4C(~TpD:jPѪI&ι*nq&mwen)~cb,dBPI:!@AI OI p@>/YHTeNLw>1vL5DPJBD*@YU-P"a$TzDĵ~WfĸDec!kRI@mh_Cu%J¾BП;S]abGiSa{ " 9}N^eѹ{?ƈHB1(Q6P-b#(JB`h@Jhe)V'kYȻ ]7Ɂ,;ftй\NB[ _] R5b+nl07ZO=jP DGA$+">L1#w_?\Gk&}fonFۀg5.( P"@>9{xi F3uBPG?Jy>)YXm Lg>Zz:Xk(Si݆aȣo,aݟϤlՅW;} ?i*# =I$ ӹ.&D @٬-wb~y@u-@ތ3n`u)<h!p Np; .pp`G=Q=6$4e+^O!`Hl3;cݍ:U?zSdF1W kJBfwaEܩwashZ|ўSp  A0ß3ez%sn0ߴ5B ʼnR?h.l䩠K`Bw-oH DLp|ru(:R ‵j@ Y$VN/3t{!Akw2~ hp^^vsEF+0{ebPE,Nkެ$ˡq:A=u-iVd.p~ƴ1i2^( E'gLE[@؊UBH b CʶI'{~ "t9rlM ._fF.C.9{umiÃ>l;Wu\(QҌF<י:??4 CiI/yilu ZnM]a0 4t>@5"IrO'@.=;e\wy[G?+My\o^, SjZ5ڂ@Np~_}˸'8qzeQŶdsW@ѧY_dy9 2,Cז`|s 0eҖ50S"`b{q8 $N!2 -}DR_r]NWĴ6kfvW݀{|f4˵a?fI?zk#/w}9~[e*d(,@*R ?n;Y``9bI@636;rڭ"q7^wZn㮸(4Rւ@DE3 NĿ_hLpe?_~'] WK!ouU7ύO r:DBJl3 -ΫGnEBGuKU@⊣2'uyx;lwoæÙ ĖUӇ (p)wy~^yX$H0FDdIIyx3ޥ{kA޹{$gm.=n࿿Ǹr BABAQ\o0UI+ؑTx~y>+k|4h!}Me Z`YT]GpT@BHU >\km'_mБ,2eެ5[wi|W;z[{Kj"## Sd kW^><7ѕ!QMDsX9 I!De<,L V~!8^&E-9?1sI"@u(}'J\eZ2GSku7ҩl56[{!i@hJ"M.* Jx,LkDϵgm,T~$p*'b L-l0c0ƒ^6|2-ahvCbRl5'p6 XR140a rF͒rϫO+ v뺁S~[{!nA,}nc8ذ@lll2c[&DBË] %nk?+fư 46vh>;LP1Qsl D|l U &0VEx hTTYOKKF^v҇if*tb~2${ҁ 90D ŚDT!*dA)QX4_7~q39$ư*ġu2|Uoqq_a<3K]8ף| րMYT" _oZ)Jb[n4 8/§<ձ};k$=M&Q⎙.?ݒ=ݣ۴.-h^p~?ӪqUYd^ۮCS-Dő-l$&5Ι+#='/Qq络5AؐBpw TD$**UG"h7AY$BF(SU <"{S1I2JCY|_.jE=A~?;Ճ0XK^Ld@ F9s .}Z阺wڏYg<z V^$Ј뢖&KO>^'<& Cn? 5 "TBDbQ]B1A}?:yEGj&z3 j;ra1z7^h0ݻw0/*rC0KT7㠀^ plj^LfyΆz=y +qYePWr:c*wtv9O"G :MRWA!ozQN ِ pxqh۸Eip^n3 D=Ud RW;2>9#[trv8OKwz?nd~괼5{ڭ_GkϜ.79@S`Q_ Qtij?ٴF m=ܫƳR8OT %!Ƅ'HCDNJLQB$U{M3I! Ǘy 0(T5Mku 7α9 @8aCGx]"nhvrb={Nx;>7ܧDA(O^s\.MA줘LWÚD #pc:鸓(;'qWy|M -D0/>,ɘ3Jg'pQ!'o m-dN|.hu--$ }jd8 "EPS>cN˶Tfx=6 \U`vmn<֗y%P9㗑 sEH2eaalFi]9&rחZ:Dx)"n LPE "Z TD[Qh*H"Q_=U.! (w1.(ゃB+Py;/x2}wEoO| KWz/xζ;f@cg4*h5{ uuhdFjMk 70XDcJ w"DRYtO,<>;lN=y5Nc=144BpL&J/%=rt.I7gGcd D&A 4h\dž܃XTIt0,E0$!adeM9c,z/<n;aCRCǡ]3M7D{4eMV;zt``9P zX '17%t/[Hq tQ4KļQp቎ c1Dm0Ry([AǕXE@33BA ( "~IRnDSDboK{PQ( @&f`&d./0@8saC$I ЀR)o:}jSQ|!휴1n+*3;<Ŀ~ףSEqif# 8S;!""0 !*QUŊP*BU"iVDdVV,$Kd DA  = XUwT7 V+PwI"fAB $3TX"y3pNw/ɓS~<*6ukY I!PP;E0UsX yys;Q5<6Ngk2qDZ;Lj]KqwGe:"GzZ3 |8#ٽki?:)TdEYY$V1X@`#/u7h[KZ籁*@s"HA$>ǖ.7cn#'_u n D]mj}*uz7Bj ,Z`n4! A/< !PY<2II n|(Q }o]cw\Zu~w8 "}g XTjAxY` B TBS*CʐEAb1UձO!Q ѲG_~U"?xDkn_ImsZEU I3"H T*I"X B@Qb! 1dX  dHP=u4l .I@Kn+Z"(TE~TW(rhǤWLbz+S)jP.*lrq4lr"ſ%=Jȭ kH5m,?N21,dҲE_?xCh 0$6#8Iv!X  UD# *tnzK|^:ͩdǹVΑ~L${= !S݂J޽~_c^3؍Њ_}O-`oo:;::Kyg?W_[`Ȳz)Bㅄ$ G/QVmvXKe wYVϙ_oob2H2'}L._sa8Ͽ&T ZyG]<`[ 203 Կe>ZՔC}*0yH=\SI\R;H8lro9]̴)-|Ķ&1ҝ:ϣH|D!0Lx[V#4;@3q=ؗW|&X0Sjx{ǰLT0"yjCqEa7}NȁM 8`:6jem F_EICNKLW!aɒ4NH|&5w?-Q ׵pc;\S3x&EB)娀^|QziXpUG+G4z8-w"'+QںEEOuD76jTPR;6B Ccx'/7R ;y*mym1$"!m8 h`-Գj3 !c_4B $hǥaw?qYd5~>FM,F/عDU) 6|>az@4%M 1IpRޣ ;Rs'@;a$w\qA :se٧#LcVR$FutSR1"1 d aOZ,lELQtD**AC^~+Qʡh/ժ=0Z t9LoW\q֒9}e_Չ,I o[eo )UE?x-+FI ā tL $ Dyuz #'|j:感ZImBH%sb{ڔ%ɘ0~<V%͝wrbU5zHf`֚! դ%_1gnvG`W'9¾:>UgU Y)i6?{2JH_w@[K U = Rīp ¼̄*ƻޝ"<͇Ww3ok8ޏ3ynЅאJ X(]#$X{ٯY*iu:edu'l":5䷺[rݶ{J6SJ=fwB 9i&w$ RH0 p J⇚9QpR >/ JʜTay/_Mi6)0"<^ pq>Mt<GwIق޷vh&fs <!( Q*%|ek Ll{V!֯c BՒdb`[)X'+ٿe`u pP>YF51;:u?BQFzq(eˁNF?.qT8P"W("X/R:ނroO=h "<i+CV7޷}T}~wc^7lxK9Cۅ,0+0d2~6oճx" ۍz($]ɔ ;ʒ)s?xmuM 6ƟhA L]DAÅ_#wNAL#fW~y{)C1W6fh%dR2~<fXk},o!y fw{D(!u[s#t_+y$הDEHz~M>>:VsX*ka$3U~ 8 vX.!6e4hLД[468{bƒQMiDhV+a _Pcw'o"]_lOg+͓ -o_ -ů.W0rKJLbQٙ,dwMzֆvPL0 &0@ D#!7q3~46eXe Jh?2iTSDFKI ."!mj<%]9;FCݾB9%O120N>5H"EBBȃ##5牨)ks\CT>#cxbZOb)AcD8!Ex׏_fݝ$< ]no2wWWvA$! # ~e=aX2F@`Hߣ_|pMbpX/%P& -`Ƨ#XU"Ӎ(Ah"&u( 8pg ]NX}AJ0JTP OVebkCC4?Ry%kիV.A4Bt6a(ޠ<Ȅ~nZD$ۓl9_ PMf\Bh4!`\̭@E1,)sˮ-)<\HӮe΍<"IOn t$%+ 6N\E3Xs|$U0"!/5)$| Nv?/j:$"  ZhvoЂ睼7ѕ4^J$%dW`)C&4x ?sPsphoPHTk @AQ>.&^*wŻvN)&̱q4C%\kz3'!9dr;;]uO8h? _^ޠ)`6C,2$eVFXw1:[$HR(a43I5`A5APm Y*.VcnlETUL.:ص:x4pτh \ mPN@ķsjov9s`3t+4Q9MSD9Vj5_@6dqZ@IP@mC,Q"ə}UXBB2L""ټ -TpմUL&k]YS"PPJVlߞY]M]OíT^Emc2{L sǡa-\blZJxDY[(F)Q!C16l{f8D"he0a ʣH1/;m7|=I<;廓">$+eU{F(Q[DW\eU^tH]~DAU"(Ke߱[ͬ1 M_z<t" ׊w>u;v3+9ec%A͈߁iY*i tv&׳wL 8; 6lmcMUTd@*ϬuuH5OGi-^׈taibV`?@dXI0VGlsgK5 LZA$!:륷x{ A(&*41 &gD Ț#7YH$I)dͪdL2B79]ld'xzv f `>ﷷ(y|'=Qbr ˕\/K]P7glIALV\0[Mu\&}oP6+2nj0mbDaw-ù/mbV \Jr-dꢕ axxX"|/tbI̐R*Q v*O*k1hh=sNJ&*^M/J?pWI*C,˝SMFpÞH@$2Lk|\:;B)cfs>LeHf'Kҿe5o-H a!39Ua(AB139;kn9$qR*U"*'+࿂AG8Ӿ@F%97'rig0LUVV/Ze3!1ښeSƤ:&P$$F@Gl|ڷ8I8 -{3̍je01P$_Us09% V.o,|+ds5j $HB_FW CAk.]7{ E9[gv#eZqk> GoN1hj0v6h,. Z``N.:q'N jhICEb6EY|"j1T@E4R1l^0 .z@CX{.܃&Mֵ42Cۮ$Ʌ/ھ A,%6v4,XюA4q(cT9lUb%y VEŎp?C$odcjaq$6FrWb5-a%V^ eVxgFId ^t€YBH%2bQՍ ar[u@Fh4abS"i4lEwmFU (xpBs1ON6'0(smm(&C{FB,fi IN#d] :4B{^Ѧ-I 9|v/v ں0<2Ou͸%T]t 0GPN ęL_@Œ*pe4 Ʒ?q2Wab 3hYU)YFӣxSpWY j!1Fp;z}ٲZ*E!lkxboBc_0rI&]p&+Wf7BkkSa݊ Ns5(gbk  ;I~,0۳buT5N)f,-rPBޫf;ӰTA0 N{m@p ޫceY"ن*SUEkR@ƪv= 75 UƵXZEyQ`$o {;7J1{tljfkx9\PՁM.vizʴk7FZd$" Fj}b!ʩ0F@1b =Ϲr-Nӆ2HHK7roRdFPI% I!%{R昮# aZHe:)>Á:yND,$A/@2ʱʸz3UtiŦǃm814f{_,UU0O2 ƀO:aKZ [1a{]}@-Dϔʷ2"(C#H ,Թ6YnkYfHEkaYG$Y6Z~ؓ$b(ٓAv|R|whW wm_Fge.h<R0Uƙȁ:gpIՈ0-oq$i-rm6irycFOiРWKW#1f1`2NZv^Z vѮl*lc1@XF!'ExnYaر.V0"6 ,^[^0(8.&I bX@b-e#ۛ I%fV* lI2\]^yK 8ۍ77Cc/p@4=cvwW1nOxBe--NFBDIduj1l[9 (@DP+$ 잜[ʋZ; 2:"TюZdq9VOVTٜffm'Qdַvx; H$VYaeȪ[<9ruc@.RouRB,)NBa f*C* y)cbZXI %Z6iR`1i*,Eaʙyak']hhs}S~+X2 ;ͯ$T&vvpdlrh$D >ѧߌ=5| J=kX攂'<`ʒT!D %s FFPSpWkiLalG8VQKz3<(0ԁ!͘%iӆ`) p՘}X`FP.A6Xci`|,l2}.[^TYڏ( a05&/fsHũ4q61bJbчF8t"] kQ7h5>ɰiH Vy('hX>ԩX[9F#*BH=6^l(U=$n34N9=G3$ljبEk 8${xe;sg.8.YI\WS}O7> `HK573FDb @ &"H`@#. s痩 ܄RIO*O- 5@PPk Wy84lc31SdG|B 2ο1ɛ1ƭ gp0^aB@ dhm:-x18TQā#N0I4$VaV0&~0H ̱D;'g\qϑ/`nǭLfU VDqBlor%@?;&{ e@)oaQ*::2?~"= ZW/^)z"|G)Xr-!١FT|NP©#0`mlRA$`B" }[*=ϻ$:.:ʼn$dFA$dM(}<Sq誨}|>E$]RToO&9&, ES LCEh-l9Сw,[,,/5CxnrZ&]/Ba ,>XR&'dLLD(I$AV()K>3t@{!32+r8^xƾKM 3TL6“ ᐠ (0}*gϏM3]lVJ5 d(wMҢ(~EPD1AIЀ#HA}ANZq1_cSB%C_Cc3 -W剈,*7k.`('ơ_I>rqAuZmwy ߹f4EA\x>[w%Dʌb1A6TMe`]f C|p圳26K \@VPBl{y>{ Myy{ݳ Tͥ‹hͻOG V!@chRhOw?s|6{O8bl DOB!sjP cpWchv%BM^BFDm}N 3=8o[z^REj?;tX~٣^`nSbd%E)[ӟW eDD?cKO8gX)߻OI~پ* H q=@k]I4xőFN-Ot'dJ|^-) 3@q]ua,?=9(|}R;z=_}f&O+&;݉[א|2-޻ȗv}N8Yjv_<<ꜨZ%DR:!P?d?sŠCÙ.:/N6>{bj51m7]~"yX)ePD,px(p]LDnEgosF$ !`-a )߭#6c[`MXQ~ڽ콙unXىjۨVX(Eod: ਝ~L(QPj@@r 9}:̻{n+m27DGUzٛn=QBv[_ A#U!|KMaЇ _g3=5ߵI=~q4;HeH6/+wP%tӷkp&93F_y<>λƖ2תdM{k\BuG;  U//N 'gSqWYc}lwJď U#A\1o6k aB(XZ~^E: FHάK"ޣnm""X{T TO[z2L1X]˶Iи17Z] YN4xg0ĵ&y晁M h 41@V oAFA!0Qj Xdo۷D4aUXE={>{\v~ vQ(Mf0ik?a_ 92r.u%C0l(B5*a+E}-x*+~?YJ_G*L^~[P"+{](vgUed-MUBO؉,m jd}k\͇-'@lYTYwtT02Y `Ӥίжٞ,@!JV0\xɋg@ m[njƀX6tl23Gbf%ǃmHqp2L^L sW!Bo\b I8r}xYӅU\16壓6=ZMY3EC }&eTuJ2AgYzj(OCՁҮܦY6,FS^T뎢6$B2Ft4 js  nHh01Ǒ}dEh-PI)nlM֐7SS^s`ݤ{ɮ (" D`j(ƣ6{)K6@$wzW^hBq~sJ??}@ScrH * H"IIIEU'\*:M;mwڗOós|kswrN kNfO5. ,A#f`XOqu h$7ظ#T|GH0%qLk^ĕWa(qm.~|P>d31[jkq'؂ %(4hhބ؎y>>'Ok0* R>=6Լ_W[ ~k½c.͑2H`+̠Xgn k?ݯii̡_c-8=r0Vcܾ//n϶6Đ%p>@!dX{rf.dvNq?n ހz)A JW{mNcC\<Nd_ ]Gxqr9!H+1?|+8>Lѯ\ FL00$]wrkN]%̍ 5ʠʹFnQEG_Spghp,DzXQ%RA$gr1MD&V85 ;ya?տZP!rW32LDnzP*pku祿 ikUX׭2|ZZڄ3? +W%fצ)V Wb|DU$@;KAނ0~_{bŔk~ox@2( B}(v,|v K+κ`}]a/_5/[WzIqe!@ Bh  i/Z._;y{T$ap7)|3Uʶy!k~+ ?S$)3Ā"*P_2;M1휓@10E1@pE(p(⛻?0qmLa~\78ooUaq-o}ܠ՟9.)lZq *;Ԛdbd837NZ*{S%ZMI~ J .$c_XFLt@5ǭ>q=hf|\mW=kjE2Ir5- T !3L%6,- fkϯ;ř3wS'gδ _(*('kqډ%/4BiOSL,54i34#w`!)~{l6A-]4"0K.bME`, MYHLW@Z hu<5vĉ*FfF$ކeqkڟ?KɌ߶gןz&N?5|OrzHנ g"-_ړIRb"R ,5oc<ohV0;iuܨ *+$_2\M]p\ )f^~fNzЀ & ]-x=Bj?FsZf/ެt ~ [ f7X`aT ͥPBt?HCt *7&d$2P+Rˊi fo#UQ;mW~\..kk4N9(%jduc_P%ȣR@A;q|gSyW$*/;#t$ 3%@* Yle!th+qml_Od kMhߵg+=̓}\kdٚ(-I% o3j8`h[ӊn!=OWJ?Iw8NN =c\<ە/ kՇJ ,)6$T0MDZ{|_Ί %9 ӛ ҃0 r^T80 Ii2IQ>7޳8_շr/=P~o:^?B`!*A@Iᯇo$ / @4'h%Xs?O#j,1IX3J+]qGXgg7WMNs=NK{;pJ"HXio PCՂZԿbq<3"k50Jf1fBH(B?m#N { O͉D, K0@DXH$j 51@JĀBҀl5Ygk ,jBtDx.MiDTvߨFQgI@Ss7D"V۸zUaho\ S~x ~Vu K;7yzofQ/͆,m`FעȊ8/B3uۨ0Xt{|>|yv:,2t%qHL 0WWpv۠>ɠ6]*ZzN,u9~7iq|Hrˡ$Q猴m0y-|:1!J:N^{U 2r*FBFnx/z'YCxXp&.6 5xW#c:̀@"HH$a) adBi` ׮!^N~&Z]*ʚe," 9 !7L$rEdpH岚&kH$A50ʀDdoz B (,>?_DTAV $#$ã-jlK7hd{ Bzu.oC5YD_Lf_HVs}iˎUdl\L V^\Cn7~ A_Q2O|S# i3 =vhWB3qH% :p]j ;S8bdZ9pM%혒~=:vc>c~J#~SUEHqqQU=loC\lt^%~O(ăS"&62v"Q_K*8% IlqugaݪsbXKQG$0d 54 :52*'OVBa{LXGj7q vz<խ6~_@m{S2'ɯ5>7FRj;KP kwbL2CCZPEZ9 .d֠ hKXY*H@$S̃%MnWٷSa?±~f2x{P雎:ig#UUH!kW93^e^W;lȾT2,,W0YuS-pqV׹# 6AvDP^@-dШIo W+,Zz,l;&lߓƑ w+0&=lۑZ`@vѨ:{) Jm8lǰ!_-N]j@)^Amgv)QPYׯC8@cP߁aVСUZ2*&C&ǀ KGhsV/YN.ٽ[hsƠ\oSԸs.>AmbuEM[=kr3M܋ng1?J!P8&V na'tva{}l3FY*\BE1AS$X"c 4Nܵ>|Q_3׳K]3R:X2PW@S2O<T&FLO Hͳq[v_k1.ᐟQ-"RǗ8` a٦ qPr, CP5McDN\.53ETIհѕ`}V<:Cu7u ( 縋^"re b3DyšFuPr8*Hx!' (ZGP+pHo+UjqC@4foC#s\HiW"Mz6Ļ,w$Tn'Jpe#okQbA!cC|vt:8wrX< m2ݜ%B SrWh[ {R[jIrljNQPk?-k<*ԯ o+*ТWxt6 @D"NI 'SPz&psb P>я^Bs ԝLj9`/ЈJ`(#Wz4 2ZE5ڀ;&`x|rp'.yys23'S~4$Bg %Ļҿyݎ7]*}( #.PGMF z5QʽUƆ\6./ "W :I h2f'#uV[f:,|:=H}$G@s\ǷNF:ȿ&4U0())3l@ŸlI'>eJ /y S|n5spPdBO.#I7B@H"f $6 EEBBƋZH((8S[^EcǦblg4 uO9w5d_I I 2g6_Hu< `b[f4 ]}S3fcݧhTm iJ'YIZSaTDhz,kv@m29eDT`D>{BNbt=lTK+{  0S2M1U~pRU6*f3\UZW "')j2 ,ѡ4[\>D=`DIe֬НSZ>l-ӷːYMcE- >!A2bY^66ŐW@9lԽp1 Qr$ =SV47Fr1#C4"FԶPų&?L$+;shø*,("a5z׹G@n UVZXғ)ĠlC)}.mhL4<E\ ˛3`Jm4FbPS(q 69(" @wQ#jI|v*VaQR{Yw=@*X5ZsCk{aNR̝r-{k{&Pu4sqTςi3"A( ۣ=rpdQ~뗔lz%a>1VkN%!2xŀvE t$ԗN%,ȐB{6XvQ0KYf"L%&z PpZاd_xhLb-UxAԅX >fLe󽭬AH BCܯ㚁< &- c(g֐HK44:ih>'X #aB ? "*ZIW8:MT i2NDǍF!5glJ I@suQxlR=j1QQ<#D{,lmk8ӷЧ5@b{H(kb]w8xLx B18cɦJ+ ؈º[_P ye3 Em5dSf{m(epf"&%Q&bܒ @@W..*ikD6֒aowyu<5YGzP I`T"؂ üp᪦2IwJա1) [8ӅH*XA@ =9r Ux" xbL(uj\wB#{ F169V0ޠhrv+Z>W Snwd^x< <7.u._>:R BfO0>ȧ^(!`3;F&ب2@adL`nP^fڪ%): c<$amN &Pwf\TkE1K`I-5ݛ{dvGJgo۱DT+1oǒ x;l CՂ*-,єGzv.0YI[S䙔5<{8L^qwR %Ey@XcO{k zN-,DSTBq[s_3, Rjz5=D୉n9Zx}'ɷfDZevj-T06ޛt@1"%CC~1)HD[eӲȏ.[ أ9ՀsrIsHQT8z-J6U[@q :IBHcw1_/n~q 5 &{ _TP$dFF +O-s{MŰJ kv[<&OC\R| b[$|}xHUQH)ѐU3+ c1Gd sx uk?ZM_W+2YͧyOЎbǽ_^cG3fr˃ *GF_mb_!v|rj WB@NF(ZmPo٠$i ?-Lnq˷ben1ki[gwá}_u3֠cȥvB"0>L@yog38s~=~Owj#"|4`'qߣm:`2L{ ة|p&W'X/V;`VA>`#JX.F] @1QY0o*ӷ5-hg^^=cu`qlCà<!쾢;SWi۸ k1JSQxwO(x}/zhn|y cb{z$0H%pw{_ 1CtdHKZpQcq=SB3lI7@Z cp7'|~=#ڢojKƪCZ^ WS#-o5,Hn+2^3ާ8$,S){n峱vq^6y3V$_O;.Fv[DC,- zu:GcpF{*P#fq :\-yH/_om33ӴЭ{ByDQj,)SUKvT<jFaX_0 غ7'1`Syo[T "" Mjœi ^ط G}>]^#@""A(arp (Đ<]̰ @,MYlX,DZӡC|Y |U470t ^r: ]ʶG~-^ !,!Q]DkUX. ?MUT:E 31Y_X$m֢R6֍I|"HHrqAKEsGv7`X20p *6mטj,T$ZZH }tۭKNG%$V8p6/otُJ5?m=ƪH>Ұ L ĉQs&As#>ʄ@;mp jٝLK／y+%~8nIr7?msb Ŋ;~' u%BMD}<:>ᠱס변1f,4O$J` !A3SYaeԐQ==G.)qVQjdJ6ƻ h~9Vt7u^Q4]0Q3-0o/)|#gzxbJ=~V?3I% ﹮sX*N葪^ک{q'ڢUT\WL[H\)N+}9y2ӤFmG;Ky0'#2֘52[ud؁)?e-bt>Yҕ=!$<**E>v[سw<أv ZP`J P.'E(-b*걵(F/3"cPUU-,S+m[b% 2DXMt,SR39" ( AEzp =%e Y[ KI', حjW5¦sEEXgM,mY˙ǚAT0SdC:*!͏±EDZ͊*v.2 ZWSa.-2ɑ6 6,rU3e-BWXmg-&aӈғLZ ",D2)JQiI[&Z!cm 1[J %ȉkE(ѭKiQ+QhnG YuMn _maIh^:N7֕C!+PV,C5PTq,kPJ"lBE MkfU`"e[AWZn;mⲼbAB,VWjRYQKe-,,qsAƃv-1)5lm50QnȌfɳFZ,5m-J\\]eRkYc-h).WRe ukgʵ*4ZXZQx# (S9yVN'_jHT_Y/TZӸr`Ծ Zț%Cb  "m 5X>-YTqy G[B0d1"BdNj!LMwK,Tj+jb8e_CиX0ăž:̋RA-*Xu2J& NK T˫ .jBԃb!#tq)U ,}(~c2]"!1l\*HE<&Ubi*!HKп)7|]u߷cjI>8 O~ӈ )v=h\ jF-~wF'yCJx?77>2CbOރ330fF  ڤ1d\$ En9="%=!vxUԸ:'30&,zf }a* ꊍ@F8/AYokÀ)wNiDƊ%i$h}Q#:P3 b/IEZߧDJY^~IM >ywo Zo"nj0 X>;iuIg;c ﭅oX! cB0 R:SQ߬~vYw۹aO|gM!!7ӚlVzd2\пrF"'[j蜤)%M{oxr]ox``Ӎ=|V+cu{tRpՍ&Y:qs25 +?k )89fL'.^J9ԘֵL@ؕ2^p?XyRɂwJhJY@d) b:6D8|rexp럋zO5xZ i~OW/fd})0S24{ w`]X3r}U+Dt\kW1l|}-u&xB>.3kvӭ`N-lr$tCy4,"HqƌVQdyid+Lʀ%=%9A(@(e-ѵ#QiBJjVcOѕ\heR7(C^$Cnwi 5Wν!H vDֽSaY f H1YݱN)!)Y'V, ּ哦TX[@Fdk"GUDҪIdV6 N]j%"Q<˛de9HO9U*euܥK,H)Os'Ջf`w NTJIOcI5 z|Fs^G_tz(ejT{oM TI?9(C0qDPԌ$Dǂ_6.aCmޜxZE7Z`"A P$P>QKHF$YZ0%@~5$D 尽II!My3^Qň 8(0Q" 0DH)!"`V :#L`"L]L!ݭ2L9(ZGQT/ .uWS3wWӦ}7@ ?d( @ BJS R9gCU؋ ha3( T 4RW|VA?t-/:NIDDc %x,wGW!7|[DS znXflm ?V$$cH2EC?܋ʹX+j}kkXĵj1" g)}@T@{l&Uvm5=E?;m\7 ?{jafaS-1lk@g% %BccW<s/p ~jcJͯ "t5v6:"v<~.vOșyM?zWkBQ)dC ,"ȌZ RIBH&ITy1S q J@B1aAb)(bQdwlņ/;nhVo8,D9!PbU(H*WieͻF> Sejh)9,_Em 9E!T*-EY0RJ(Ԫ%hDib Qd*U"+EUETcAEQF}鹦|bU ( )Z[;ZOmC%eA% !("1gF F,DQV#"hUECS\*T%`qAA$Rys#ijRVVKh2ڈ1`##ʉ/=smgwuOV¶6hTb EUH)CSGJ{PYR נO.T YKڃN57B^~zF9b ̈́\t:ciZfґ6<̞L[͘LdzbrxSx><:Â)R~]*1DA@DEXeu B~pHTdPi1TI2ک,Q S^h9`oqsHrCjIE: {XY Q[蜺 L3ܣ(/* Ydkۗ>]:iƭU!C*lʃH_'ˎ7as UH2D(P-nA\de⃜m^&3-2g QocUacAG,L~4GF}^27ҌSE2@뇙%.UU@@@OЪC;jn2b/T"̉Chp`"Dl:f#" /g]I=zX(I2FQnAV k(@i@_GΤ'}9, gD X((V!f#"Y,!` k9pQA "CLIFq<^γ(X`brAn W,`ҚA;L;>C}߬QHnH`UV E Pa"Œ*m RIY`X^EwhѡܱQU@!I$ VڐU, hVJ-IF@Of(\Dm *\h0N%@E`•0{'*} Z~{Hxj [})T $"z2U%BJHUzR)DXH)"X1"[ "0` &( fƋ`?=NuV9-2p^`!a~UH@!U@0Z`_)~%C~g??z=0LjyHZ˲"*f1vrf3\Ue*1˚ 3݇vBFAw~>&d)$DD ~FRAd*q |?* ~TY,0>c˿0 T_ꉙQ>R$.mao;O]+_ǘmUcKzkOԋ`.A,^%`t19TAy˥ֶ .BhaySof!ȍM{+>٭ǂI s*y9d  jj$T  a K(?C0;$>ץiB5Y3V+AZ&"edqԃ =-4(Wh /fysϽGQZ/>YՔ `xqvMJf`EQkx4$*5)e0ky0 ?;/9EQxq-SZwhe^{4/gK}Ղ'"3B@|\nr]q. %V%'F NmcZE>p֥iCDH}]խ4_ѝy:j|kS bic(im mb(1@g0V$?1#jHLbXY@j5,%30 #Mh>>]=0pe`VYq N!C}z./& |{{s]>4G?bK S_:o;nCe_ \+ al.?F Vfm>L.} N5i# IB?q]D|'3xa[1wЦ keD{(-LcaK"ij!\iQA-Dq}KpD0a HUJrJ{@7jC\>PТdZo@zGo#Hs*wԹEB?{*HYBYA*ư=ݒTk2'. axK10brh n/Smɱ8 itP aMLp6 @# O6y%?bĖoIG4{SKҍ4T`\' <F7|[ukTT>B&13ު'úp0u(@rڮ<*y.<^Y,:]=F2 U5e:d/""y,}kΠt*.bN.wcuaT1ǔ (#zޛ03B$d%4w\υF48ߡ*0~ة?W4 VA[-A_T:ΎdC7'^?"WK z3* %2bçM6ҢGwy:W3+WWWX$[t>{O&hU=7adsp`, $&Ff 0a|8w_ W=\/n>”G&!~L̒D8$ eB&P4ˬ ˝ҾJe&8*]\-2q/7=7+26)5>+Kqk% IdDHqfT@뽯JC6;|.>&2g'.-L!"%vƂ&FKZ뫀鵝Ά RnHdI㷂<_=9g%OtwKOgdceTT*Ec@I?WՑͤqBZ¥`.׃U8FؐL|)QG&`T 1M})&Z/C&舭$o?T0+"M8+;  ;K2% n^D7VF0rv2;(6kD5ThC ;T(=qSGCpc @cnϵ7bXRN' tZl&a\f%d*>o?g|wn .F](\ObZ$8ŐRi&&PAr*7$p0&'ԚeM?Oze D@0h/C:M)!9P(@V֢/>cyX?e2zR1Fd Aa0e]d[cT%ac"*pa>Mj+|. W~9!'y"'r֍h k,gw?e~ӭ LymZ(@f2BB)6J8\Bo#{Mu 3r ]Ab#-1YK1T{62hz( 1߸^pY2= ce\a؁EiuN ͩ IDCPQ^"5^ȀeX ^/KBFwiNlYٜc㌣D#'`dqR$kVq3P5'xfy~4p==9&71wnz譣[nƥA5Ff8t~{+>qQ$x`$()0* ~VmցZ{o*PbbWXS^i:0\ۨ0&o6G4%o?FFFNc0).&{kɄ&} ]:=UAW sTFvLF00oꫫD~WiZa{aMX}_w.ٱP0;sp~ey0O2o[ɾzؖt蚈؞MLvBn.stUO'A6$()`W*-K̥6AH }{Kv=n_~=:[_tvB{E2HJU^o7f]{Nϯ™d[Oxt2nf7VS!I<FX$E3SCY!N9`z=tzmWk%+dPYdS!am57/µŌ_%˒3YmM]c7;\T(RB_e؛d'˸jīZӒL# P/^-?&Um}?ţReAYU2sg Deoa]CXftM9& 31P':퓡&Y{%5bskoOg6J'Kz-ٙ.-Cܶ5SW#"f.߃v8>,Zskܾ{ud2EHy40%vM0iCz+B/ΪD2n퓽̘B;61Ah/gٽ8AQJd-nW(u?n38${ɇ =U)׳`* 4-Yc9xuבP +:`K! |W}$"H@PXAA@P"E:$קp}ut9ʢZ^3&pZ4)r17s}Z1OOJ oަt9ΫuWw#q{sɆjmGbŜOt;j/ v?q2'Eڸ{{GS^,TF1>z]40bV &4 j@6(Tp*dgB( kw_;w_߰ 4<4/ Z*BaMeZX xsj [O(m_s2]87eA J0qdהb QٟȈ%"mH?R6Vd(H Ul+@~f8,+SYϻ~[7Wb1et*=o¶MLLqj،^,FEL3Ӏb\Um:if1L 8mez1ϓ?O:f\HBjN/;nWWʼt5˫iZ,ľPz%9w7=&G];"T/ ɴsGZkx\iuiDeVԦ8 @ٽ~/UBi6n G0DorG?;+d}{?W fmɂHgk^jދ 3ϮxJy@OD9Ozs0>''c {Lp3D Jmd=Ӄ2o_Ӭ IC )zӼqyyR=\??J4/0 .|;ǟ5'CpUg=I)p[;@ GsADžzJK"kᵥEW?yfǣڻK-σƇd(}yd $ :by A: -\յ^Әm>&7XfsKܜbh*ʧ XB'Op:)K)!P$4Q>ỿK:*yʔrjUZ ׍"AW1r})mfR+1sc '6 WHCM\Ta_#mIDLBiB JCj:|eLq14cSM,R>~Vb'ITNB!a&VCfYT",WúġanB&'Gv{W~'6FG50<'òtPIfB, ,F-I ;9ųM,uJ4cXwK{?vj^Ϊ?ߍTK~Ú3 !8 Z~TEu}&[Sjs ~ Pk}xQr9 'xxLYAW8Hȡ ȃ(2,b B 8c",$R,( @̑@_݊B$TAʹ8ӧZBt[dz e FxH\Pm}Hxp;^'3(o?crmmagmOae;{ l$£.-H$2DzHchI/ҷPEq0R/n~;Vn~ie@Kqnκ V֬Mqb@IȔf. 7O'3܈Sd&A#2o\|-A8MvF[}zFjB502YZa#H[KLr 5Xp 2<.f44ps{;0Ujd%!YT$BDAZe'm j(2 G.FZn% CmA Y'ވ}pE|wmNԟ"Ǝ˱$fm{}ݓ2Y |e]&P +d·P[юQ0l4|;GC7%A뫟~c &uH u]sR4{n?MVh1/rWx Z͊`==~ bN~{W?p_LL+@~1?>L^.yt9ل>S)̢Gy>2lnp_^?&(u%Jfd'OLfeoUz|g4hͻ]䃿iD 5XLm^sFf*]6jF_K#z$lk E\40" ]av,R H]!H%eЖDDM:e0{U,e &l],ؤiٮb*{(2IzfT=)gϾ3ŋf٨A&]P_tˤȾJ)]pIӇ0"ΥgGAgXʼRn.SϞ,$$3ԏlJ+C#G/rIWR {,$mc{ru:0Z X!'uC{RzrLlx<ZHx<1oX&}ߺbQA ^[s9jֳ,V5g\j70 p"QTh _QƩs連z䂽*`+mw/S%lZJ^wZD[=z[| BD %+LƩl}מ~~gMHQ{=ug\Wi+7l5wcъ#&f@qWt6gEo||ۘrqxv U=_VYwd^[HGWXkQ"4 bwN`K0D& #7T$P518=+߼|͓ྮOe_o㹉3jx25cc%l#Cж&T-F?]+s4r? }_fu"Fwݾ.#xS(*'⫏V_6Ǥ`"|/H ~=mm~Pmxh/p]~`Z)|WD:q1}AC-`"ەST*5Q|e}BNͪ1KpJD8wKƇO??6&}˰ !U 2XWZkwϛh?.fCCbAe:m-Iʹb/AZ"PbI*{0]An߈]:reJ"0, b a1#Bxx8sXZ !Åp*Uj,X(\TrV1##׍?y꾧zޫ43B4 hER@D2#cU4`J%D!c%1!Ԫa{" hy|}_6wܒ7⾣F# bQR@1MN`EGy`FPA$b w,e0֝2pCAHd5T/m'\uq`|ANp?a24* pWcKNVஞR-$.?A`IA镇R)E$8|ѝ'# X:`ftD K-h\~.]l\^F2DDL$"PDOJ?9u=w9_bn1/]LV("I{$l6lD1Fw:^ Ҝ|B^$(^wllrN BVVG!1yM8)qǑyx-gNWM3B\ yƚη0}Yι;ATs^[wx\c b_?s\(2)=Ȫ1(U*@1Xc,pz򇞶(ÎHqŇ|:L(m{^ВQ= a X@UR (x(|5!"P1I8 $.]!rO4' 'kY*WyJN\d][8H9 XIB8$^öһվ=Xx`6gj"1yTY<ϯ$EiT6wNkjp.b0 :z,SQu3rS;VwOo`gJgǍ8(O}>ZW?ZC؁UVAE-I+ pQ<ۋk*5m<8,fI ru;*`n 'p~4b @{w\MN2ܗxt#=2;xǗu9:<<^<A@+',DAu'ΎR;F]^Lkxv:" lTMӚד9V+[bS\9r Yseۓx^'#:u Ŗ^rp*rӊlʒ'YDBSX`Jj4q~K&bG`22@̀Qm:FzZa 'L*VĺSYkjQi%`@RFTd*0*I2Sz^jPvx[\ C0HĢF QHQFQVHNElN5"EUo8G.kn&hoRޅ7~V8ł';r+;B#$bE ^RōV tJ7 `"W1+MU|I ꝲ,{Ӓ%s*WRLA*Te SxUܤJD\ 9̙ э(d<^g$$B bH" 0/Զ#:~VN7‡"jVdKY!edE!R*Hd 4 pDyJi'Ss~Du-a^_w{EM{)e&bŤ%dǭm7:kn836TD(l!Y=m 'T!m/^s Ĩ#+٪,?יV:t%`*u׷׎6vΐ ޟ"V`g@*{R=0$L}ȞX^؈ֳKd8P-$SUd#JщDL+RDl @+$ eR2RŌKix +j+a#H ZRHR (*Zd([l`ek"E (qjMݣ!%ed`ł m  @Y Y~2(fAdXUGuŒVD:Ж*)#QdR{ @AǷmd TdV 21ԬlD5ƍkBE=)^$IC NT5;Na7\ b)DY4y+R QP  µ`URDU| l@R,F P =tP+(I$W i/y4Pt׽j)dxI9'Ó}^$4h$dZXiC=0gwޔHX|,^_n|7<> 7(-"#dw[(4R7!|uI-,PdМ ! @UbI~ly@ IUa5^q UmۗJms9fn+rRգa.H RV,\*={4B,u!}]e/ƞT],XXxjݴR*rӻ D-B2*P3YaPbq$'PUG؊da JhTT,E(O@! "d|%cKܤR`H  ʣJ( [eD'OD"0*E|PR`YTd)HB/bI^&xCLAw2Z>-ǁ& q8RM {W0$CdGZQDB`$t 'ZS~ڗ`yƆ@p|$H|VE1j6xDžXS>c#'S?1# u?)LO%Zˮ4.JD+hEh+q v<8_JV̥^S]T2 >.ÿX*R7Ũ 2OpTKױ! w+~!; -QُkeMgA2]@~52wST=bESdG=rJ{p?|T4gTzۭ1Wn.(gM^[3f A&Fd`0DFX"_~OfGЗ H;(`Xhh"RdJ%Pc"bEH"H!F 11 !WBr;ISՇJ#8H؊ bDb4,X(XZJ! Tyc]XNYa7*B=F56tDz_-Du65 Ez($+xvfI9/3a\!ј3PqwQiًfĐX;P挚L&ZF,GQG'R^ܛc]"~r= Ŋ ۢR ۟eMQ=AԧȗdB ْ IKn8oNӺb5 (G枓@{3JY:$A$&&=ڢ{;v/qXI$L W&;GL_Cl5zׯzYb& Ս~Q R['F Ls~Wzˆ렃= rfY1Ad4AZ^\٧eZ\H@HJԣnmYX8Aӝb(rPCʡpYNz-Z"Ɋp o[ 4%2f[0# .{CJTBYVJS%9>kn6#N,7K&7SO8B}7`{ vk0\t,ί[w^)Z Erh0@!9$P0(79@" z,KN"XG:5bhˢ#F^@|)bh#!j _llKt|xO Q|,]]&v~RaA-v>[Sɤ3 XCO7Y/S~ZHĽrWON|j!_[OS;t|r>5Ca+(+YÙ?V?Jʚ劖c^tr7j!  'g yf' V)* CmwYjW}5XO[Foؔ{ C>|.[C._;x3)xUY5acO .F b1iZe>Z ʬ]=zzݥJ 00 Dt6%#퀇纗{v=yIO #ɟH^wMm{lOiChkQa9U\LiƮ&֕Iz8NYSާb-ҷG b ?ĉ uv˛w 9Oo؋Q~Gqߦ'?SЦzWV$C"戲B &L( tJ;?[ !6W$]7$(n#ˑ 0I$"I_=l"xH '" @HdL{enE=D@M1讨@$Lmkz=/4" {mSк)|(wC0 d(A 3ưwl(|nܞ5'{x2oկ(DP"wpߥ6ާmx_ĆMr?S5p;:yAHʬ16A.@L$MK[ķ»n?> mt(\G~ e1c` A^`QHZk\,;Ԙt`d4}ߛlGtzMۘ^=sܽCs7l";H2LF81 T坑:{Iuzkt0$ہ2 ]J1㷭rje ]dvnR{7NGCU.ͤ,Ḓt./>@++ ,;VFU<*jɢd0X7`U?&͌& jveO^JͻAb8N/r*pÑ*1ѨΫ4;oQf8yOFB9p{ĮfaI_ W3ݤ* "MzQ: dExyx (R`+rF~ ȋ>Ang'ƦA% f~M{T(or٤}ƨܙvr;|m\}Kry39ߦL#[*3ݵ\3Pͷ^K^̣LR%At;aDaC\!3Lzs~ pgJOF+oi݅{d O& 峾eŽuuNTK+xq8Rǖ %(*UaOTJYP 3㋚:$a RqcvFif~|nixb7 A9UUerA!% zI(+艌UU8qNHntTJ|&nUK_ ^'\algfŰFFA@%ELAШ4Շ"}kѸJڿq :JqKz{N3HE YAF5:8{ho.cdOO4i& - RuIwa|X%&T k $2 4L¤?A6>?jU^"n~q?)օ* Ua'Ã:&i3/Zags_YzO+U /MZЭ nXFr 2>G:2WyNTH!ܚfq|u+y֏8GP9+ř:]VjAEB[%*bPjo59&, QcR&@ ȄhV5l);rtЯ3v Gd^[Kyxr-3+XwyʜLs ǖqԪ]{Uod2DəD8s,xNjirQ6R?R PmT2."h,r9)^bbWIUg>") Ⱡq@bvQpTP?; 's:%Yzk)XMzXOV`g/4[ԆUb,5OI 8慡q$&tm59>n>ye8]NJ*#%u}Y&fO*/xI,:*.<ԡCj{{)jB#l1˾ $H:?qػ~'BߎUc#'V|DD §Hdi\Na[-995J:5=O?ky\|'KZ m>(!bGu﹜̚h JRRF9?gGgב>?]h'n5LPA. 64Pn2'kct '5a9+]&²"~_rtt?q?ɵ8FCG^tT4`$F -#R(0!AP bdPU"1UA,F@E@X*EH R(1EVdzF(DD*"$V#Fw2%3,ړOkius~/zTu,f@HYHzX Qdh^/6<=3s-.}5(M{- q1)'.d bT*t/qyVJr< Bf&jXRPQLg3-*,B8.TѪG e$"*ڼoQ"QPXB_Ώdb+ X"c,DD" " YꠠX(b4kIɅT TKzkosoq5;߾nO[ٴ܉a,y8s-JF0QAQS7qA=B8 epv`?Rc}f։Ja bi{ҜOuvBzݡ`ՆV}x]̦ʷ JƨgƇ^d==D_4Oac#вsɊd^f_wv?,'S±|W+9|G#d}Aq>Y?a!M$C !WiJIym)vU[Зϛ?׀`p̷/.!FrSڇ'ϑd\LCݜw|LU7P% C@So\(^A-kźRAW~e"2.% 5MɀASˉDӴ?NG\bD B_3R4=)?F*zo>_-rn!X0kꅇr򦕩cMw@u4ݶtƭ+\:ݵϾ\bHj@"gHcO/?nO}ף"uͲx0g>]Rc־ j$xvCBwKN'eA)s5 k%y~|D0^v?}Sw!aO/-Ȥ<bh@oqpa4XIEX[u?K@7"=zS;E_GgBKS |RtK_b⻫~=쿻2 A4tB&Sa+JZaE@+$*H,R4d* F%a%Q(IQ"2c?C泝5c%9P Dy(u,8q8;UéT3;anވR0]C:ҭU^ʜqp5đ35Q CUC5 A%ϧ4T֏z_téuUߛewb-n<}ɹN%Aӂ)Cϥg}D-50 OvxAE䧸 # \UJӃ}O7?n$D7}A| I3*B,*1VJ!HJ%I)*A!"BA@+!O;3v,hQЃ$ҹ7 <$. g1nn?Ϻ"ٷ?F+kKnUp~o}R(b# Cmt~O75d% ["}oBԀqb(APb*""* ((t`bjUΩP& $bKX ^È{>ۡek I=s> C1JRTNa%WIWp߸)\Mӽ7Fc__E,ͷ̫a6uJ.0`N$ "Ē "K4t/_h$7j$8Ц PWOhl\ ,TVY O{{WC;'$hbjɗBSJA'}.agX>_|Yy\jY`_o̴ߗ32P χ_EN87J+ 2!AJQKIf'WKZD>πEv+a|`{&9 XG; l}T Y.v3|>UDB„B FF `bGwuK-r([S8WX`vr޹H0muK#1҆$*0Z=-oEZb6駈tv 7bb !qy<֏M=]9o0Xx.$/<tA(vDɊryZ R>߳X0 S"SQB@=JF)TdX$Ia6AmO5g)uFNMQӗI8 _ ޘ102MgE锪^槮U4*# >9 ۞S+Pd<"%Sj,`RN0!Kv|;\?jcgS:IEsϮ|p 8:MB;/첱** G :ʸM溎:#IW0cv8|w #*0-%ք(bIbI2B)lI#W֕ڵsZr^&g!Su|\Ǟ{)4Rjk[4x`W@0_J$ӮvhΧ+uX:)#Ԃ u! "_m* *nӜ?[UQz7OοxP*Q_ų“!k0%V/2$c"3R ϡ/c6f$u?齅@Y BYcI:ЁS9޲l{QEd3bJGAtYP~p'H+(B *G֗%fs[FF@ԛx v.0բ *y:fU_C|{v,]2QF|<"EBvPSMӑCo y<\md" /huWubf-ADbn8tUXt*v|ܨ/LJ|{"m{syB6FyClb$2ҽLs[A5D?R @e)҅i?:rۧn|~W\C_[W`2b! i׏'֨aﺗђL:"F%f,lb0Y$ЪuTv] xw4V)u H@9D(5!eHω!%Rb?̼ 2BÒ2r͡*E 6`" 4-aA,R(4q|f~U_ֺ8w:*8>\Qҋ.5B& Q 0W'W %{O4K`evHcz\f[I攙 AB"&ՙ,25̹ }z8^(kj՗Ԕ+*[ݙVӍ(AEdhr,͛m!БvB䛚@0PGba**t]}4gbV4: [} 8ak)RoӾ-X?Ȯ/y(ռk'c3 O(ԄYê0@YҤKxSBzCA'xcT`5+6Ԗ惄Z"';`J"" P7d,\xPPCHcU ܋{ů}q* !_w:|@UPQ X7VUw+q5u{ZG?lsUDщro/yuP:@@mеWD oRHAPUa>I! ) :F3OߢcB|}ko'{VOfO_o^0A0 HVW-Z-" }*b)=DkHnUU:RFXYxAT:PGFD@/%9ܓ{ΎY/;y/R 7yn*ޡ/$![޵sKApZA:A9ZU)48~1!%BAm=LR={ 銓(c9/ٝ5O:& P H*#3iމ1L,YLJU?>uG{Zexd~('No9q{nu2Z),A0xI ZAr|˅<Ήȓj\qP "J//|;;#d?gޥxYIɂalG'a(3&'C*H!Ne-C PDHf",ī9E5KgKwک8BQ<+櫪w%`KZ}}Ťj#=K}G}~4!ĈBT Am-TޞRI/a\@GT\8" { C`3hA:#S _&/?|Hε uDAM>s1z(潱O{I W+ZB ҍ8Cv ϟ3s*Jбԧ{UpY  `"Ҭ(0e5)Gṫ’uu9Ȱ hE9ȩT0iy>͏1^Tx׿7n(>k&+.`ԣLKB ۩>@%PMf'&hƯi*0{FO?3 B5j_7sA,q rҁCbHou'"PzenW򇻺_`?Cn p_0pŢy-~s:=m]nN<GnsD<ţh">@!wm7wcfNdlu_+>f׫~ݩ|5gFlm{Vܻo=9^oիڷ>y:^e= `g6xNk{J`z)I][l$E0@Lll}NlHY@JL[(Xv=U"sPK 4Py#\c(>4r׵TAǤ&іO)^3Q~5kmي(}K"^2.6's_}1FX*I0ea#'D8v=4`r_ӵ $`B\oOg<׆zMp܊WpE/n:uT`aܦ@$@A|FuXFkdWW`m(1 H~qeٹ5u*͔>- mN"Rd^D=DpJ0ID,a(V Ļ'Kkis&L'ZnM7HL65ȄPkH 4g~Yqw}W݆l|Wˎ$u㰙 ؼ$j2/'>Ӷb t wh~ ~Βac]gi>,eDUdDdSFZz`>_nދ-b-g4H%2,d|!4vWPQ5|Oy8}|=+h~뚺Qp8\Uyݸ*q+n dVQg9%sw7!={20R˕qK]9ݿ{qIl8>]a?:}wy\i2!F=n  H#܌tP}ɘZ;w; Kw SXR 1A9Di C"BAZ\-36 ѵb26'2q;~']_lE7`}tOKʺrdflwe0:fc\HC MȓڠQKR գVunq70 O^'itQ;$鈐A6 eJm}U2g̭QN gtJf0C({0ACb٢=fmPLpN~VZTnШLUX-ኦ/B!%\9!DD/q{H~k1w>Ä]m=[ k@੾Z}Go(0m :?_翟+|uWZ*7ǒ[wYḼh}MdOp[A+ˢI^JXITLZ^o & ? &0X[Hf%h%[t?rHup!h|F#%9Tرoݱ|w+I:*$B@,Y$`֓6b5SV!jxJ,b2x>rR͟T 3hf&rfFnNˍyh=x_0Vm=YY0nsoz5W-g"ެUT$вb@ h6$!~dMi)|vo')41iQ>I?[OJyb:49, Oa %CIwZs42 w&`:,X{c-}ǻܡ-GH `bu$$Ȉ`̀25GKI{ݜw}]F 5d6W5u\KWr)y+κh=)Q2`:Oiu=Ȁ|DKpTu&GU׭ۡobT>g_^ Ok߽02ô}Pd`Go SGߺg(9=[b0_joYW|.{wwk>xAaxɛ DxI[20z=}4v7 `j5_r$/Pz=f/j޽a->ڿeo . s PKв_yN.M16R,vdG{s|>n D #ߗ;c=Glg"oe~Xiz+Jc.U))#JBF cC:Y0bd] ՠn8x>E{\w+S|_K{X~XCo2vQ?b[qQwoyf=mr9>O p`?gvF@},_r._~9,7р~xMNRs5O苚]@vc&(mlaVQK}|0+#pG1DlxsM ,Xh$K7Y^k9z^L|&=L:Їc;a5[j,((mL%, y>@FI#DyDOxAn)JJ) (])ՍHEK ʅ 0@uUjvol I `0=xyĂ 7'ҏf3+rbpi}0j^x϶r+u(_q}Q& 55"Qhr _hRN٤ϫ[ߡǬD\]EMth_>Nqʭ[_͐7bU~=t"2"Ȑň=+w8{Zyz[x\?t{u֡ =!]`)Φ0W9z^0MEh:W]./]~4'SCs n$0@`_[-e^ѳ]8 s@5J7Уּ*y z5Yb¦Nt|WNe2׫>oz{[\xG &fI_:t cT:)nŒ}fz_ Zf.)p-v+f5@  I&aԅM}qa@yvOy'8nVD!ڏV~1n߮$/癗Sco~ݟl(>;tM!x3-z@smPZky$YmS (SIG WM(k+/t5Yfxi   #Ҿd'\)ezbcxZsy#xs>LF Lx>w{vLKao~osM>֔ r!ncUv&C-OZgrsH*b7_k*$ Y 3ڽ ϼ3+(Z%ש>þw8,zlP$:Z4<Na%~爬zm'r؏& }~K_4nglaL0 A?%YUvI?Fr+Ǜsi"}!M1`K>%QwĘL34=mp r˖Fzn؈Ș*Z+v{>k>QCsS 0̽Gxy( !rU3Kkc`1M.kv.F=Yw>̀}gc&3 f0D#K!l=͂RR'AOsp>`@@n 7ß, !?Em NOXDzT"Q rQu JXͶ0e(h.ݪ;k!=FsԒe!T7N'ףҔ?=L:_m] 'bV&qߵx߽ZNw!-Fz:VӫFؔxK}I뺮1lu+~ if Q%  Kݒ۶y8|ʼn-ş%gr-Ze`>{vo mm'9__ \Vp Ԅu` `@q^_cgЍP\[ Ht$sېڳ3Ghz ^6?p1hǀ NP9Tl 1Bp뮽MwS;'{2\7z> mی>Vv7ų~921 O"/ Nr7y쒎tuƾ^;I\.<0`zWS9wi? A[~8J[۲[3;]{}Ϣ[X>_UOa %0X)3_r=x{գ97:2y :f?yHZ(G!n&w頡hf33%7%2 'vO?rX/f(,7DV_za= HNιNEXȑA`,ADV1DTQQDX1X X"dȑb$QdF,TAX#b  21H+H1T"b EU ,($M ,`"t7 HX2C[eagilO}Y]7Uok;x?E7XÖ!)%kL gbZ>RY`}e3;T γSku#OWcI3ڻ7IH3DF@hg'{*KJOb߳_uMm7׫aGF\s~#tcV~+?gSкO{*"Fb;녻m` VA{LYѐ7}PyS=\u_ۄZ͚7A(OƟyK^TIOW%k4 ݸA"lYY)Mg"wx> (R!Ȕ $Ȅ&Z5Y|G5j-VoֲverY$_hWwu5}>/ޠoӴ^T"!}0AR{|Oe @mMWyѐGkgM;=,:q=SsiA -@"wSuM @C$5ӊ_؟2q^TܦuNΊD7P불34A1$`F$X"!$QX@(OmuTP6u$,X ǟP\y_^hx+Ɓpvׁ`᫳mR^JA`])W|̿Uf [\v&K!)ů6bduclFIB؂½8x I 01(!b6}d6;!d$QPQQI@>Qu%M5A)`Lh;UQu9(q>eW /+;~7߇ "t*~KܬO(Fp0'|n#P QQ4G+@!?_#krn?־Qqx ^{Kҳdxi;l$ov+ڳ]o߉Wp\hyU@7ﻵ{˝ op _s=_m~):@# e X$X1- QC._u= ƒE=ZM! δz4(O5;w7ea`jUc0F)Z|syD*, Pj>hf}c޾.D%@{RTCxm?HY}M^sG޵<ոhfh9]͋h5UGV;`"!4A| A#Zo =G5/!Oኟ[<.Il9=eB~_!c+S{-=з+ aeu_T{O^^/yľxo\uVov[߂Kx]Lyܿq Ge;x[4 )ԓxa؛c}d'.;EkT3??(61edNnMB˞7rčN^BQd̿j) ;2SXG1gMuE ۳_}/Y!6Ƴm&86c>!2YQ'旚 T}l:_V;-3/O{Y{KzaՂvqVAOz'U$_EFI' n39WmsOM~wY|0<٤rXn+p_ϝO`u_1|g:Q>W*Z IJ;n,b*UQDn0!E<_-i%zVِzXIfvw]gGg/< S1w^{ުM#\Wm*+]CoиF{Yw?_' ꤹw %*}SvW?h~dإ^_,w/ߔy rI-7e6nWsc|µ".qz( |$[FK0u>8y-!fWPDճYJ 85gl]Dj$$w?ȜI!AJAT ,mY2Z4m2G(>'dd=%.SlJ^L&^xt|&+2"2#0WXBNee%tKllG=G v$ WPT<akUR"Gz 0W7ѩt_ ȓ+;Uv0H!Jz9<>[p=zWK=9S= څȴM Y%sXeXs³$v&{Cb|RIzOެcTyTz*:죓9mc>,w/f :E=/Ӂ9ywEt39l?H{K._.RIۗDn_DvjӻY?)v;ϟq{߆{?Q3!1"󾆺n|#n(ݟ%?+"mH}Qc¬ٳh #Oo $bѫnd,l*α ޔOm W'ڐH9æ)PG*Y.jot~{Wa kgpCm`@_w©u}(]'Vmo;z~3DOrQ x̾V.dlO7]t铷".R>;Kq5a;?y( cAsGyi*?>N&C͓xSbmS+)iv^׬纾Oe7lT3n ^k#/ld9RmGFֽ~o@S~}oM zc޶C:)|; u}s=/WJO[:y[-n)^ߢcsMs'3m6_33Jz.^OQfSY?G`q}&.gnvm>Vl{]] zXH;[f cɾp:+{Ew>n}<)MoiZ>,)}K$VRA%a}wb3ri :?" 2$%~p_-xo?uiKF-=̾)ͫH6g᱖e17|0Cmm5<ũޤzdON)ydF2=jwY,eEilS42q 'uQE*)TR(bf'X<{uN A^0ݜO']3N}*Fn{77%#Lr %Y=o)5?`J.yXYd)W.~?HwvJ @hm)ai`.Nvd@4 ׺ -5 +P秤!#ixkvzz- +Z@CtKKIrxro'^)U|ӰYzv[ ; =d"'o.{8|QW-yaԺ/d$x,uhHi'57x} 1m,.$2̘ӻh.QwEM6i'_nk0skRCղ2  ύ:>ww}ooqm;Ex삃!Xw aύyXz"?DP*N% l2ȃ""+ @XW>({"z_T{3?Z@jL5M#;Guo%2 /C:ߋu]oߵ7z(O3=_g~tL>?Xb?舂a@"B#3KcB X/xwf5ggj x2z!' c1u_ MDPhӽCʇ7c)ט_J>alU m#'LfQ sA%4AINTV=ٿ ߘCAZ;\Cb4pr- _V?@2PR"'|}@3'/WѢ/}K<+=’&?A~84 !#ӱ.ܒGU#C"OgqA/$R(0GW:U2{ Ӡ!OVwX'S(AtjͿGb2a@jP{s5:aPZZQ1u*H/KIM>BHk6#~4O@  l2"~e>3@:#:Aל7N^ɻb`=G6Pj,bi)e2f_wiu>qy~ruyoi<62 b`d$[Ƿs11d2f(dEbpP@ w\&;7ZE;JgLKKy#X Z/&#&2R(˯JI*J;XqƉ0MK%31}z"3>_Qń{R A5 6hSmB  y0it(Z΀xZC"^ݠޠ LJ]r4cab o ,]EM՜K@(R`ӝ CPGr-Ɣfx8 LZ#Ơ!v7'Ǎ|?9g(nM6M[F0rNʉ\/8"[<;wĩ6OL`+ aWLi2!H (D <܏7x5spu}Kd=E]FKz)0ˤv i*P-,ZG$>(^Yd^^ZGg)iݬVyD꾟ە!Y+_dy;yPLI$VMFfe1dQMiC3XͶ5j.xN/i]crn1pdaF$Vk;t/ٰuu٥w?20jCd,-ysnH  gۂs&77;Gٚ 9R`eiA X^rfYu[$-xf* f"Ӏ؈"' :! ȁ Y˽͵ӗ*u1j<=ek 2_4!8`߯mX?s1&ǜk$>/:=/fw·UVym_kat rn'>/s:KU*я…cwx9M` >d m~ž^t?:,5E?{dZ{'3cV+'jw^R}7c7=qLJ|kGċkg>+)TYhһmQsy9E>íipo\t{j苓I6` ;{uֺ]B4w]٦qٛF٧@=qFͨMlEݝ6URݹ@QCkQM$ٲ1)viԷ`9PE+$Q@T Ͼz>ynDfXDFwOsK]ѥ3ao7P{NWG.v*}(vڷݛ0zJѠ|4=@Sth:Ɖ%; ^([-fNR}`^І5v\pj͖M1kX`[j}p=  ؐ 4P 43i\7]{ӧzu϶s3J.Z{;3 *eݬR@7ڷ|7ygn-C@H}h{gS{xwkdTs݁WYJ [i[awwW/DUQ!Tw۸3>6j(im5kzWϼ}t{熬KIT6 'L1sڶz7;vu1^K=z+)]Tgvmrh+f7uWݕs<Ufvs{彳)wr޻vYru%No{=w=]ǝ1v.5)775 ;G(E۵v/[ӮACAC.۾tl^{`=\oY3}= ;7MݗhPIlޮw{FsMY(z;Ͼw7_y}>,sg6 n[v}2h 1{R9ckmDMQ@ }`HP)Gw=_ (mP[hd֊zb.H;FI@Z TT 9khM)YHHz9с@O;):uדZ{5-6li$5JHTvukݾ+%{ɲoy^/aQSY6|A_3}Zg+wg];3l/}ѭc}=vsoDm55潼@twjHq%Gm!M0 z:kWa ]P{cs@44M d1& dOMM6Sy4jlS z)4 AhM 3Hi"m54ɉFIf$OD$Ѥ=!#hdh4ѡ$!&d I ɦT5OdFM=?S6~FDGij@h@@&h LeOiaO ړba2&hdh=OLi橡 mFA#&L11MHA MɣF›57z2zSS ъ z=My'چh 6A='?P}'1!A>?ƒ}u")(OayVL;wu4Dz՚Ɛjq1X xev ' ăm8I^偤j;j?{L%BTpF_s7Ԧ&+y h"s\DZحX9)bKXPPMļkxp'^9kr޺QO݇I?; >;Zahs"^gNx{p,`DN" 'E iCJdT4 (g%Pyz |8^c3tCZ ,Ll䀄Mv:3z{ՠǨp-wcDk,C3Kb(5EZUHrHN4߈\iuad\6{NP'Gh罕s+=/ٕ{8QU0R4{R9`Tbu $ S~x6:[/c?_ւƟr RS+p?|}Q@o_Eg)$AF*8$ F= A% /f0qL="fӤG{ηuU9ulEV$REe~Sbi^ Bp6VQ_օ1EG&Oo8s6i*1rZzX=RDg;LJ.Qjk(-ӻtnQP/˔ENE' T@V"  QEFY*-* [l 5*V% YmQ!f''~6+HPl3S?ݩ`7w^(D2Ѳ((UJ-ûOlkaKxO/Ųm㳇/" E9TW4IlA9(^US_[[uue`5f}% }tEjCb0Q0lhE2=QCfҘ1v P+]4d`ۿ*މ2udum{6d."x>amPT=!+dIgClS:~(Q1|#nT,Z [B=_d0+H{ xG3cd+a73ԓG3-;k~>Sl beĪo33?B0?ѽoUd1B>yӛ7׬ɽY*Y}u>2waA((81PKhx*ǚ*^EX #\ ͚Kjh#KJSZ[`3;uM *5@PAѕ۟ۇ*P~zB6HEPDD+U'Yb#~EC3)n.h"PSx: $/r4sI~Y_ $MQFPAszE:&ˑY Cxf!S*>{ga>)3>.I!!4B ʤP `)nmߪE!¥A"pӠqkU*5/pI$԰s,P~2mh'!*E/CI- RTiZb mVWY&,6ZʎkvZ]Tޘ֍nM᭘'S:aIj%r&Lֶm؊DMnFuu5Ƭ-ns%hUvZ[psv~{E%v*aѦV+a$Qif\l R6ݵGT3nmVaÍr\eTZbV"+U*V ;eZji5O+>;UDbe̹xNY9nљ{c 4{ߎQGk'rV#)ek>+J|T[Fеrdq ecݗ1TTaf:(S%EŴ%0棛QK DℵQڻ48h m*[LۦZ8X]-3j2]+#*Gj-- ԣ+W,ȬcRpkVɜQKδ[J[&b\eZXSuFu[f\iDe6լեXK ڬDs ]0Y+!q&i*3%#%L+[sU"k[n-Komku]nj"&auS%a2WR֢dqk 4]M7kevŪxi,KzL;cƴrᩕ˲Km\ԩ2]hQ kfN&, UkGl\0ZE.F0(ֱIkjқZl:JJ:]b5,.F̙1iV27ةɮ[U[v8AJ4if0ȪmqvUv& ZٶqQn46%Lu]L\;fK(m0AE6Y.6^WQީ&i\醚ҥ ܊Unj:Zd,[.Gj[\zSgS`QJf Z++QEP|tENUhR[yq%iܰڈXeT̢YaWZ)UMcZ[%݆iL`̪ie\W3+hDImbQ- ҭFPnƌ*Zb[R 4ƮmLj&]̥E0PCf LeL-k6*h]R.6Sa]je+=hX4i"P*WDfL+9+Mӎx=QV'j,+"}~5caZ#mAWe$O6E\m0BɕJd# "$b-BTcd2-E)y"wc%DKe}=2DAEܯuJ݌ PEDcRVCdA JcJR#}adXR5ʻ6f[vo2p(7yan,O]/IΊrM4׵k횊U"0AuD"QHtڭU:QuNݤRkS'MlIvطG_%bߟ",lpsU\>fy1`? ^75G7xtˑoC8=&Py{[h v9RR;e>.e/asz=+{|m/Uk=No{%^`Q6mCy/Oکf-r;PT쎢۲ac%2o߸nS>ZfO)4m/\6`͟jcQKVki$ʀ6)=,qC^8'UET.}*5MYRԲu(MhVY0mΘ1 R4.,ay]3 x(Cc3_#r>=eeJDDVDIiJ,Ԗ(bRLs - g9z"<"Poux9"E"2"vhl JaQJ+ۏ!:NevG !)ْ'A٪hwSb:n{rˊ_ƻeMo ]g~M9vh8H +'xAޠyRV&|/4[5V3l&X8c;pb k8xQKhAk|tojlm!FR.ZPTNĞ!VEB)&J$6Q&֒!Nu&4:s}}yOq99RXK۴°Smn8\p$MKŲ-,=Ĥ)h) !5#@Ouw?0_j +b֣CI<;5HԔp {\ N;޵(R! "e y_0'Bs֠6˦EF*y+>''oMV]ǭௌAy3N7P5f6 d.ti)T$ 꽅hYI"ZOk R#Hr; -#}\@$7^IrBK "f-7K"lk`a<̂9z4w ÄHNxN@d y.{a0]]4k=[8fNwQĆ\)h5V-}ѻ'.!븱(C ս$:ܢ,Us͚g?wzP%N:gt;u=/d'&~\{oU/jw n:r\2Ct (^ڦ5lý LgebUYYiveM  )Tٗ~qm0Oj}@NJ)$bfjp3M:/ZT\bȐDh?tzwQӵ>ˏV%XNeDʘ_JHo/2UF,vS\,*v!{vrtяss^wGd TdP)r"( "i?rW+gK$05_a?oslG+-eJ7}.( tz%lP kP2]`T0M%O\ ǦZ̄(>~1&[\5 D(PS˙.l-vܴ΢Tj!PW*$S#adz+r gI;!8.c5lQ%D. AJm^ PGB9f4]Kq2‰ڟ;qIvG6J ڑ1pQ>Tەp R[MV-%\ȓ @$n3b+Dk}]}n;g*AHP̲싺QLH6@PRk獚w? pU94Ńk1s2a iQrɽC;EN0r2mޕ?S Y&N}d(+ͅ&Pg#`ӓ;3"]CŐ5+}?wA?CLQ ݼdP3NC!nTda+ IluQ[!]fVD1!z{=`Dn x,g);ϧ4p'ʟ^fOXR[5.M̕ʭSXh~Rme‰P_`IQOMրy^}2!H> ǿ[$x-_*.uh[ءJ'wH/ndE<=-wS"٤EӍ1ΦREJb %+hg %B##YmmpBi Q&M9Op_viN}{t|]xWn2 +e1YB LD{ 0hg7e}}QelPn=JZgYS"3 \%'P,ϱYDj$X0eY f{1ȪEۻL]lnt`z͛dy:-څJDV(qDWK=Jf_>גXR`V4AQ"GkVbji=Yv]LwǬh53AHO'8*qS堢nxo42gv֢cML{ \0zJhՆGV)_~#b/N$~MDiD ~Q¢̲jFFӄ1 3-a1Rt]a^zSD_һpkUE~$Q[*]U[iǾ )X44?$?}}@UVtf ~3mT]9E)zH(ZnzO_ӫ}p(*sAkceqH0*hvWEAlJB|fP|f>.JETxKx"='wv>38iT׊ 8`H"LKW_ϞZaBȠ7 .̮,U2P;K;`38Q\[f2:͝[ar  C#+&AX`5E(N֪?{g[Ai]=o٪2D,EdL8&.T8I9K[*L}9_g0@*"%G:) #)9bXP,  Pw_N?X9EO OOEշ3t_8:zTC! /t=S!r82J8O lsjw*TS"x tTT_=! #A+I5%Xx\=^48乘LTKpsi(ɅEb Ґ E9BPS<6{|1OǷ< DX  <.s2&$X!ٰ3i4]T+QIjF Eq4RzONdM3ۗ)>8L:8mJ'>q$ ypd9︗ !r){XSj?bx ;KlҭSYŒw<#z\~J•p8OCjYf)LYtKg*UQ3$;X`)L@ :`KTcEXvТfOd9(4[wy7w~{g Ɩq':-w٧)N&\ȇ@K6w|=t Iwɿ}s8{'!@PHěXoQ6|2YBT QEj~]MRwBI{c ~}FV9BDFyLxeO[">9M+mdPk@\~3{?ɳ]2/-AƠEIK@w}>F\g$>r $I1>x]U8{`BD ^ޮ`x@|^"=Du|: Ŧ]\k{?I.f}~57~m rB 'ƶ@]U8D93ͭXlS! uaaƝq|QClG T7êNIeṴB<1Xm ~ak䅽(Oч̓ƓߵǀV~5^H\9 qԊ|yvLY1/E i0ru GrsFᰣD[ t;ẓxz[ rֱD믏N]GK*[BUU$ai+R!(hEBuθh*S˔G?-@)@)hx0*xwܘ0" &6AN׮UW-RUT''/\#VomP][b6"&tx?QPxoXJS(ŌMlmW봫m<}PsE}yQUOWvdLs(dY.bd/AAjaUj̘k K*B ͈eyRh4(2i~Qdz B7PF+l"N.R*#Z>a(ZXA "E0 }j+UQO 5 _wtIjC1Pm,QR,VZ^%Tv0֍,ECX-UADkcIh*E}lZimQQTY֜+KB-C yFd(~l[t*ʴZu͊Ji)iC񲒶K6oڞ;+;J'n̝h ww,^#V;{{5n9˛@X ĭP۷gtXkEep٘A2L*h5&Sn;fvh~~l(&|"#ԦTF,X" S&(*u&0Yʰ[r1-j"1EҺk-soҦ>N[^Uqd 1k?ODت ;zzѪ"c.ەtx(7(0b1"QMQ]TY՚0$*fbQDd}3 aljD!FM`)̓d{ QǝS'T~~ھeM[M~0O[t^@ b 4 RWRu+4{\ eVlLvb^&Y;* 'qư@AO;O[tvHN'ؤW `"%'eD@ OޠQ8-q1ӰnƪkS6JI21|W^<ֶX=YͫLmez1 ƺhkBLRdك TY/t'4H#.@*|.!o& mÿ`-E0ѫ:XGz&"y,82L(Q]|Yp9֝?p& 1P'd> LLzH'_Q+ڭS w~q [Bփ l7ƂYX k4Qs^$=rB2Www) שֽGݳٻ#/[nR*,= x~k٢n Pf6Ԃ_l8{0yC ʡ\l<#,4=_{ J(ZXn"Ŏ/ur~J('.ʠv_%G_ dwl=T\i ,m&NP|x mӃW28S^"T2rADMxowF: @E;yj34(%hw Ceih\@1`3_ e(D%0}K|xmװ ׾G8) wCw=.`3j5'7ʏtymAVl9s|>Gv\x\Fޙ*P)8~?&Zi 'B9Zc&L4 3.u 3+$0\-{ݨ{mi5AW'A ;.)^f"02pE BF>0$e>7>p=G^%F$[JXM>$~#zA~Zsn"VL{: _YO~ Keo3Ҷrt.ESm;~f`Oj*PT' 97ǍQH ۝5?64td#AĤc_J Q'Sk?[Z7M7q($ Ǻq4f&PrDw^ wj? /j,)s7T42gt:؉~!zQg_U=W6-sҪʈTTW_?< "*@Y4 n~ny \5)+\WEVhm'?PP/W RiGi=I^{!rd@|Zᬕ(x㊊5ghʒj_`xz Ǧ>'B.ҍ:`M7dwޅ ="`%oF2>ND))ԯmP@8z~2SƖ5U[2 蔞 ,&"^%d> 7Zv2!B(DGB`ikGϊbXgvۚ *Jkgo|46Xa9◚ >0u,&&QzN}WKIQ k鴬>~mJ1ea]]fC3ZeEn +K[Ofs\FZ/bkrN Il3cM*aTg:Z8ɛ\I4`]MFh_+w<hvEV,a&k[&[6OF]!=Tܿn<Bأ` aYAw.ae{ Ij ݹ|:3\*2 վ6,ZʎjosKKڈoS {pd,**?Zi60E :<9uRAv`Poí+EA:1&R7Dfپ/"bɊN\ Sۜ]eM(#9A쥎 =6aJ¶E< \+ڐ{`^5+FpYCFu(h hH#{)8zWb a5z'i S~<`uDcd,K^p~ P72"!(c㟩;<~ \׊5_֥6_$]_PsŮ*u Xy_Ĉ ry}&b mD0EQV!A*?} 6x)I}|;!Ai1Ҁ::{M*K 8"^n6v̸ p#"ANy`Ljp[ŠF"1rΉK(PU\lLIWaqitsw/:*"7='>mȃs?I0>ltKA"gP;}gM7^Co p8 Lik_ 4y_@ $wU$ı՛T6?} 1gQ0%n5 T@NVҦC0)Aph{k. ~$IQ-P5HSC,%%P xHp|!{ bU9f9FoMnE~6EyF玸fnpHHp@'GE;eC)PSI:˛[xbo ΍.~J&M DV^?t]-GNð6]\nx%E ct^YCCh% Q=o2T)mG ~r֤V-kt'x> ~[^"q旽Z*F7zc}d\V_>k}zAD+뷊rmP&A3SH=ޓGOx_~M%E=8X?c_x:q("2Sc__ahdzɲ]2շ47bXt/|٤\6j5yà`6Ij8 } P=훇٣oәIh u3t:Bm)ΐ 7ggOo/Tb(O^b)uwT#„<bZ4?%Sz=޺ l?CJJQ.oUa nqt)0q={^L#kfbk)4+)H\\khzZ"(A":Z?c5-k#,}i"uXj8;r0ܶџ!3kդ֥K=6lÿdceREx}~ ̩Yh\bDxsJUV֘ԬT""D(1AV.sɄDËr)k JkuV[IARݤYͥy].QHB\DUWRRb3u۰1Q* Hd#2,PUQJaQS6[F X"yaVҨŝɋ)paX!)-h2ˢ]Ib5ml "Ŗgk5j6QF*Df+QmbrdTڙb6Ǽ(wYF"ṼZX65"=[jQcEFuֱm6YUCR:(1X dTQ^{vpLu&uo00*hHF EUXmC!AIQ S5*#0ԦU䵕UV `Fu:RmбX*.@yd*`gjDMh(GZDY᭠Ѧ#mMlW!\1c[l-_cQ>CG|M d0̳v'"hQآ;> ~ju6N:Zy~y{uڢU1Ε(Yd66D(f5,*`ETe j܈6"Kj´Bd)iv%k.[n;ZMa#1(A Z4ًGdW7 __9zm+:ha<[E&j%b6ѭƪ8@0<Ɓ&*Co'M#>FE ~.HӜÃrb~֓! 0P)NJ=*ΌV$@];z1^2 $K(/KgW^#('(Jaw. ګ;lD6G(bDD jr;M8M6zGnWzDN+>yz" 4 0wOleŒ1'ԃ0 [Kf}v2(SxwmM'o'C~`xoAm5KwoheMEHxS[_5 O[=EU^:iAڷ_U3F#%\ "Vg] @'~mu>B {WD($( ^xGdfi#=l6vEQB T$9U: \ BdCtp&5MXHFBW&'&y`y4LAFZ">:n;֩̇rV[lEܙR\SnTxcM 1O M xcmےm6X.Sgm%~δrDɊ"HzWyvFJ9~ZxqJGƬ2>È5 !{p={?T>n‹9 p ݵ0Mro՛u,|jؑ'c"/N.U 0VĜ7-rdOEFsA]zxP`:WWkT`&78{kޖ|93zx睆+·h;mLrJT=$urcF'45ČnF"bF(.xG)fd2ܚu W6oa.^0; e(@(A$0`QZRZ {ZVO<~μH8F)5WBe>R ؆"$(tΛj^} L2q}$7AJvǂӫ pk 7OBŋb*(60m?@F"B?5?H[7&LSX4]Sr;?@Z@&1Jc{?f@oȞqMЦ[An5NI$A(y3 -nB=\UID=w20Yz/'[(Z)XQeC!X"-f-ݿLhW?햓\_mUvuhgU2:uFa& [oej150V+edzQE,zPZ)kTKF"Sǃ4-µ*,0鯃C!eYڹ<ޕo>Ep8$(.$.ncdtBG4a.gSE8#XW;]|yXbϲֲUFͦ6rby1PeVR+#h.Tϣl7.'(*(W#*F40ujiߪ[@ FA%,T^ӥ%"0 L/r-C}b}-}rujz,Cb"QE0d:{8aqgOV:{nDc9IPxGypʜDLuA I$֪@}Jo-F P ؚZ}df|]*WT..Za!GH6;_2XvMwl-,k:ku}`>|eɊ'Es>% :ם(*z8H;}cXv|M^ O6u9~Lwg zyO=E5E47H1QLUַXh*Wpٿҧ+A qoMCʁ&x#ʭ')BBUP2[ _Oc)IR117u?vܯ ofr[e`fSRr{)TTV((lPAwKy ݍ& M~l`1""Dڒ-;~aYqlѱm #q_q  a e{q-S 4w[EB%$\\v0 kVU H\N_9 2IQ̾,+CQ͜+oiӎ4i-j=U᨟G@A2mO$sz1t@hZERo.gPJ R_{>Z"$W+XʪH$)jaIFkFBC.U bιx/n,e~SZX OBcl&\bbǹ0x*N 撸l^zF=E6#R0>uC Ee s<8\ēz\zϿ>/Άo'(<{?(t C-(pc-&)G6w=3LJ,Wa=OCub {Xh6F .<3\ \Il3+S )2}TF'>NG>;"@7^s j# U4r=5}_"?M]C0Q3~dF ,n7Y`N0zjR%5AGW({Y 9" vq0::vf_OIWݵ[N "hq_~M6M=<3y:s_~?FK3u;oR:;PPK#Ys #uU!ɗ8n {oZ@>+L?K?@(8 ̳_g~<|w7f&&adABw^rc}pr]ݾ۞-|}n*%ފKb4Dر^<@őG~:KQ e:d #mX1eD@= qj *En9HU{CV5Fֻc#"5&D!vOcLO}=Ԓ>^8K9|#uikLTdY+#8}@:eiгDp>=Xn2$P8$L!!4#[O*df!R@!A(wʛ~4?eoA{1`@麨U,R֣`uFEFذYܝNr;I`ё*L3L4P15s['lO?M"r&IFbFFϏ1%=is")AD:H'ZP=\Pay@>iGF)rws`CבNZfF:`j#u0d/FQ621AJF+[W캥l԰ƒ;/Ὗ@I`M/}ֹ (hT lLMۏ  oM9wu tH+;UDD7WAl#NźhuJ[3%kEۢoG Lc'(O9=2~Jс#{<2a ۽\Jku65,`5RJWQ HC I@H})xBA)[Z,zqx Sv-Pr_UQHӯ?ŒrPzDzU6Õ }ζI\|ѡgVzӝZxP]M.XRrl)&"N{H̾o? `aыR,{U A±Rr(<1; V:Ix\E725D-j[R[ăVU/D(ke)YU hm6=$FX(t`Tl_ݚ^1U\sNP*!zߊ0Y]"=qE.pH# ( "{~lTBIUP@y28a\M}s<(A_ϑA(юK۷RP:e}΋|q+Y6,Zx1'AkgUFNW4ԩf5>2z'Ql E~Sc16DG fm޺L0񥧦B냈=XH@bhSN׷D8%ڶ,oύI#09vQ&f !+Ьi,h ީ=21V-@+@8(JQ9χ?o}O~gQjF蔂L/O6P()( )(/6! PY$FSj۟ ȩ{6%gTCz7׏Mi=!ރvH;׉tW{y<Y}KqOKvefoIk=.LAY(?qN GaiqO61gDL}\ SzULH":y5tH, {AomMK~O'f4o+2Z2p NM ұ?mCP^7Uط7y߿c,<$[ٯ?,mOΜiP 7>)ЇxeWd\Z4{=//lي{ALlaت 8͵zD oM;4UL"N..ƌjIe$'$@uD:rLϯ4f?ugL6DHė2zL®x& V[upݷIvTQ'L6`9Fz5x!E2ǔIqƢW,BwMXs? vJC)Bɓ N: ҿ%]3,=GaX ׃$’#kUBKHi/5T<;Md)bf*^ޡ7kn-TfH'aJ}u:Y[0EC167,S4P>.Zhu>&ȋ::p¼s@H6BE=6+߫`j.?cKk}!JѠiuҔL2}b䚜*&sĎ"NmCltYۂwC0rT{3e2 f~ju6mLR@(2$v ~%b 5 /52muیZһ50T#6݆5Ǣ6WkZ ,-,AQTU9BsQp9ANI}0bTyh *e'"5L$bR=>5W<+(˃r<"Lzi }b T)~?/_Mz]1P`m@^y{7id8%Ø(W.TX SC ׾>Q*ET*SU U8U"">c~A|?:>N6AE/՘%H( "JAJʬRofM _fTE%HA^B􌚆FD 8v'h~'Mq|цYLX`xc_`1vQSK'oEw;E_nVLunTCEk=~ea1l =/oдDA80lXC@\:k4]xTpcU/\eu"b=њVEĒ,/c M"0+P9 Ny| #m,ǫ(-3m'mwDAĵ%$ a懰vO,q":^}W>^LD%wl&KFֳ A2L &hb,$VW W w/a*ku_'ER$tQ-!i韱"3 CAY,^o'sP@0Akd}]CΔ.~V~~0s+1yrE5Ku )Eddw F&E 4`MWUdf&JF~(.P"D@~ޒ^Zgv*vJy#D@(Bs ]u;͝I!ʨ.P␐v^b! ) :u Gϖ,xhQ ;D:Ps"C2vY<ݼ6Ho5_p.oqڐoiѓՅ(φxv[  JQAG@Jt֢p" e;<>f1+́R0` X#xGw5(ӌg "\AӋnM|Q-UXk%Olԉʣfgcw+7t (u<\Ҫu:ٕ1f4xe}š2B~Ie [,"hd{2A*]o_ny'OLlLp{ѫ\*m( A.*!ZJ}hX0 G23=<0&RJG䩆 41#΂1 2Am͸ۊ ae{u^Y h֊S 7՘2 X]{h9Gv o "t~J^F)u|eyz[| |)P! lHV2y-ˆgFHdx5r:xe#ffԋ: .y^D'{uYuHb!9J4_}khz4P1ٲ8u>$@} jbIP2w YelS%LG'$-.R럢ֽ;LJ%/?)Ǝ(wVzj9b% OVZ |^:`:qexyv&ܯS[]sI4XdYo:2v83@@LbtBESTT3ݿ91 jhpIazX^>^$yBç֑j˵SZ^UɌnlr_t6p'Oz=:cxԗZm&^в×p8{42#bPc)R2-Zbs.Ұnu8/DCݟgl^=U'Sa\YaqN akc#ОEoq{7{f"L@@48fiX-=BS1V1PlDr`R}_moB@g#À4{hf̾C'k`Bְ& }޽v$g"`tE @MM񷎉\eE Tjm(*Pb{y;sc⼫wzH F*TŖ<W'C?k#w2؂G~l H(3hzqu}X5}.A^@paM8I0֝D$~R3t]K{ceO-#mny;~Qrp]8ba;)bJļ|{$Ԉ2Pl|+ {P䣋dwC|"$pw6E pmLH2{ͰIiutؘu %칱z# ǟ6(|9]?3y)˗>wȋp e{Q٧fM@`x <'KMw[J%4Œb| IU%(wkoi#OUn ?X xRAQdG Gnp=Ýjj5 JWdts(4K0ǖ!z`t^u;+'Naت¼km/. {n?>){0lZv Ϩ)IXv6"' f[pXk~cT&/߳qIb3m&Gc^=3ݢLNb)F/5>n᙭ [dABc=2ߕQkFݧ{&> 1b|5B-TNjg=aN80+ѿW=^c>"Է:8y{c$A12qtih^ ڱ$\{EDMտ"Q8ZUsM2^i4?:ՖuRݔNf{GKH"fу_9^ <-xkBPH$(DP=M}_؝}6HP5QH"kųz+ieT{}, /C)}unI׫F:V]d:*Ж+$;Go1Z UQ$MGLM;ٞ\g+]$̱~=wҠ'K Pyt=sy@D(BI%`*ݷpzg%;ImACǮrќ-VvRFUKs#15 [R[fYzISU.% jNf "P7 ^;|0ZK {oWe:%rpdۤur4sl,G}>xZ5 kNPC Z|V?h[0'4[OTQv$JQq|r d8*FpIQZDGPR cgCLJ@(Q> >FU1&Q撚.=8ZHe`%! }^tݝ#_?qXpQqv6j6?]Ufh` (\AwR}J# %pyIoBW%Y(D@3-n'W9h/ϷDMK2a,L5>M;6&B5KÚcN|Ym{~UUR1VIcpJ^FGkr?T"VH S:>eib$XVj"2J; I$Kspj)#a͕ " u^ʔȎ-w2 $$\; DDd_RꁸfU1M6aּdz%H6Y7鳦iv}B܇ۃ"r0z D@Plj$+cV~{XƜ9s+&Q焴ROǵIrOO3aQ7vFh/><dh5|sAXx+1섣1 ˩C2l'(3aWQpW[wS!Ieռ;H3{a聃9uz1$Aal={Q[loo5dtzQ*å@aCl- ɛ*AoV{]^sn UU=TR1") z[vlƝ?VxOa=`~m)?Y,>{('b;#cnn(iǟ?opQPw_[724?" @H.~>XŨw (fYy\#xg==nv>L?+T!K=-}K@L'oRW}5 H[. W mpm@_朜a6_'羔\a(+gՕȠFgW9 (( DSu vpp&`랹FmeGjVV$Ø(fm} ~҇&]نm3@@zCj=Q)[E2tA$FU6Ȥe8><yQ_ Ht$5ߋ?/ϻd V|u#QgJh.X"U|rIk =l~7:%GbHX*NMoWw#z ~:;-! ltVȎ aq)ş/v!{-5>89m, $g!% YE\˳\g=Jޯ8km%u='YcNj3 CXx٨RN>;$̯eSS7p\1LY)C3T-^ˌ+G>r2r qQ}sYm}F+(^N(II!IQe;`'Lf6f4مxVvQ6fp$H%R??FN+ e6)R#KQL.P$},2 vvY@D-+f^oKOW}lͯxݧPnU]b}.pS{=b(_"~Ye%-A=6O>/ kGԢ{2hf}'б>QpψV&V{LG<оyaa9ad5!QSDFala  y{]%kz"!Eޭpy-8nwUvI PwZQ/u '2ymC RDGorLdUԎ̒/r-}2a5\M8kl5%Etg-P f [=$$ *Iba/akgU_"h|t׺IИn\aM$aIz(uK& UdE鱿\ J>ZÙ{P@hcrAkq* $H0^vو[T*/b$|Rv:w>vI/O4d|1HW_6A wL!#̣zZadoR gseB .=*>ažXd7(`بX|1H/\@& =L$^b)=#ԲlSWn,}ِL0 ) h>\Az@YFYN)#P a""ZX^:#lj>)| Lj0jZztB*Ϳۻd!'AQ`bDz9웨#c7*F¤0Ft CV2$|&*A7 i`>ldma:} 0}nLʣEQS^r7kMզ$ȭ,pkP}afiBl`zk&p.7ϐ#p3rD *}P6#Ѫ2$)O#pF%[bog %<=˘9U,6S#d| ԓw XP%~3#a3klB|5`harN';&› m򾲕 lWyOm쪯?}@%_ Wosy+m}6T̢=+ DϪK'9f}O>5tj A/3y +h*89'TPZLi4:Q bl%&+z ߷R$&,vk-ì-x\%J4a))DmU.PxCev?XhJcc9Y@iV/ Nn]k->g޲lg ݯx^UuΰBD잙Hd :`GGRI324{b  \!g?}x֠A+tJW݋ dK M>n,'JB虃qK,UL K bۇ! vh͘Ý1 o *P,Y4֮+/XyZՈ4ׁDS9!rmQC*E׮AfV;mxv]Kgw(h/:ۨj8Vjʝz9vIry:7_jZ۫W,js|a{٥P'eTE_L7pDp`ք!Rˍ} v9Fp HNGmUQCtq=W̃*2lzmeAѢэ!Io.Y=[5 3>;Y.C,f# K'$ѻ5P4 ``!qgBlj{vS\fѷ]d)NշlO [_ܿGFb8b;p`@oLx\yz lRN3"To8f$ ^)I<Wzqo0Af( %rsYDj;j TbDDԴʷrL݅"~s.[w%74' { Q !`}av\}>}'r!4[e]kvNvu.sDL'c>zv[,} +ccC6u5@<]iE IJQ?'{ ki%ono{ɱ'dHX"?ї3CeƤ0"5FΪ9z ە^Necދhαo{I!fU. DНF_IW~NSԄ?ѷ;-eGZ;w__A8WvK ާ4N1$lS]Gg}Rm7» 'u>"*VHn~)m&vkok3w pᜭ/ I+(tW5oޢ"la$KzF*t"ܽЩ)cCDgW ܼ"^%b. ~ 3^U(in} _gk{ڵ6<b1{D5W8|O3|Uk_&""=M )O˻Wݙ8^Ρrr!햽9zrmͬ;w|EPrQ D€ّP33+B1~SuNbCFЛ@4mP=V}Т8Ӫ@;g(RQMI\9ԉ0V^9m<2{g~Ci?OhTôv,"3`ayTY++ɺAASn9EQ.¨(G1(v&P)qH96sR%*(Gx6ZQ.JpPv/v(rT͹< oXn(AR ҳqϟ-mj[WǷ$&sPa&sĮQ-- qgT Ċ W M QܴWQ (]a\XYBYTq镭 mCAj!! ABoDDU L(*?}?T R) D |ZZHe ̠J04.Qx1Dx 6/|#3& 6d[oKCm2f"`R%BB'!V%Mp7[tkp?$.҆8!ѥ)}"Zfӈ$1~\I 4K12 JF !~niHQQ+BPRI;LR[K!.'Xw!)*)f"M.Zp0% ϺjkL}jmJ쓄 :$?b$>@O }<<[HDaqa 9ANATRԽJ&BTI4lqC,8 *Tx 9YQ35AXJedQUE`*UR(J(F%*`*TH cX RcĘ,ߏx¿M:Z1b0|`XY:d"Ot'-0V  (5Juɖ."!&qgQ;("=@L0N$#46eK 2QKyejT@FYv}: " ŞA#P/cwؗWN}4Qޛ2 7$P(ZXR )> 3!0 u!D{%2$R3D~t*Eř5wj ( XCI6 sTD)b `"J8E)2  µe 3DQ^:"(QP>fu ""CAUBp(** *"&$&ՂB23}LZ'ϘN%H &y^D(Nr =dpQ!]DwtRB;iPJ$?Y9{x?cfX9?c,ܿ@C7LQIpC LL VpqKIc2t8M0e,@X +uyhތA  IAXq#{m#4]xsq&0ݙ~ڠm ޛ~IّPe HДAT:鹰\b*:o+٧f V34j ͬ&yoi"S'7,+B!ED^}*r 'CHi@P%RSADAM PETRғ+0D@'h'_s'B,Uur( I]ٯ;1H@ c Ӥhrv߃`E|w#QI`g}uKt!B0䇵A΢(JR L0RaD*RbiٴK"d$E7=@q"+@ٕU CI`*:& daؚb+?Jt/kBb}a1 @_y%ǻ;-"ÐYju w~ڃRk RvױM쐸>a(D7y̓Rnl!:!>~u'N yشF@'7}FOs]kX_߾ᮓoˏΟNgF;qa[ָ^E}-GV:w'ߎ0hIDD5RURdY\֢:騙7q;Y 93KLϚKalNqNM/[if[??9sy8le@4cz#n")BJ_J*[FĝEk\H#ɄY47fTz-X: Im+FI;l֘D--) .6H%Zc0#,1"DK|P^Nnt2{:˭ߞSc>(uvQ$ qy=pJzCض~:y* R+ЭA!We>?ZŞemN^V`ȋ\c vZa[T>=:ØR ڼaY-+Y NBۂn5$d [`lMYIdjyeNhPN%bLb)ŭɠfQ\ onD)!*Eathzb}y ȫ߭"jA4b50J&f@+?j (@PP(" AvIU;XH!'|I}j^ `(V$,bZ\Q)BBWDl@ĭ1h+M0bH]у;}2@(x]ǧ@(;/^HPMWɓ!/ 7L !*L;@a=?F"- x^1zл0V,)\t_6?G'|yXv(x&SGntf p!Cy2M1L):^Vlb[4ޏ<ЊDM ;/67]Ugye?|Q+)@*bM2x&:5}z7/i"1ENPQ6N\I&xWʉ 80g9-jnޢLUAR.k(,V$W໧_QгMuGD*` 1][.:1r" # gkz2GL :*|1_]ބ_ $P :ap P$3?M!wnA444DQ&?hyGjWV'M5A9ݨ4}LI$ag:fjY,qHt1;i&`,"2^'+~ p?4x:+`Q5Qb11~3ׯt@OwXQPK8) 5{01EB 5-G.ˊm$Iٮ2G!% *WkGaM%" &zo5$--k5FB5hbXjjwn{ETG76:K*T4m. ~ixE߫l<9AMbyFR ccUɶ)~ZBvΉ8zGy= ͑fcXJ(Nʴ| K7[h dF}R`0R+T4HSA0RD BƇSLǠ',mff-}ʰS#{励r2(((FH#q͌PU II j&*X "HB.9j]" 66v _ RlFbFmwϸݍꨙU,DQ9;$PBDJ( ? v(+F #0z^=lUbHZ%T#Z(!u=} Q#(:[TILE43U5 zBX PC]lċ=;s]DeS01¦ -\IJpqF*JK&RMTm'Db}CTLD8+qv!He<0brdf%Ogsӹ8*1'i*  *wP>xԀ!`߁_{hӈ 8nZ( G?,6QT ;HDMUeEM(jExcIH00B+'"zٵ5J|r#k("8]e5( ?rQ䪌XeJUTb p wqu׻}zwg6$qE's%`Eڊ%]rn<ʰ2IrԐX Ā}m B CRG!pPS;D.z*XSQz!\?SR8S4=nݻ߫_k2ʑ4>E߮TseBO %?gSP!Y,oвՇIF1?;PC2mفG=:ަYXh+d2케@SF*{?) F%!JU\$ U-""v CL3F'۪'ߪ }ʲj%QۢꊤFtP9ph> WՖ~CZ:?NX#y;ԪˉPfwחTɔyR'jFNQ;Р+>IV g"[* tIROSn3F NB6T+c=ll:qk+I)4yx2jLd_[Yֵu(a_Kқ(ǧ^; 8 AnsB?pqɑpUTfe888r'N21opSU*n*(1%j7mv^͈eƨ ۊ ETYakr]T~ZֿO=eS1#Dk QPƵ]K+*Q\KVslY4m,ATGwP5iG񱅥*"4YXت<ŬJ]Iq`ɉ>=le:FdĥN7ĉzwzNFP:-e5J[5a]5{Pm*((>kMuE[J[6+uDV =Z9rJ`i;jPYYݽ-NYAQSI]%CKAۦm[D-[hM*tz38Bo/V`CL~e\:[|PNU2\ ٔ!Zp ֙REe.z fbꊷgUu+SeQGRA5<4ҡ.mrfZf5z7̽2qjꕑˍ$n1AzQ` .S'/M Q()ϦvOI [at^LBw\V -`ya˜zZE֕b bDb%cl Ƈm2ΘU4NF516P3fidodc1:\LT* .w-* U6񲠊,Q;Qb AUQTQTwh]+76 u9)2yk WžwbMD]$م^L`" DKi,E+튢QW7e-M5jPV vʡkBDVZ+hQG5t;ݣ ڗcz([IL;S7֝<yV!^ZcHxe))bJ{7%>,4{*,Y4SQE1ȄTld/lWQWXx-r<;Npyq^1Cf7TZ@4a[jc:7/8ny6[뒬بd|7L~~.(3KHǛ 0'c ZX8<D2Ơ5gtKOuZڕ+- e*(ŏI>VeQER+EP9fEt/ -<걎R)(YZajĥx2o߾7T)Y{ӍRs mX;4_ΖM]RYBICAh-er܋7smwL-;g\4*W}4+3\ԛMEaӶWTE벍H&\fK8iYr4/jQNNͫn,AEJPW㺈ֆ✌Hۃf7N\Oiñs:a3+~{px쁶MVUG ';.Zz:7F&[SLm1gI☆۬ZߛGekco>[ ·#+TgO49:3$ݺ׎k矖PbAz*E5 68/Bu]g;hƊ)mNC +P;gl=%»švũºf[}Ƴ5?xaN^Za/^m3lI6j2kx{Sp޹xkMwjV**ݹ\q?n?קغ=2.evaKGfM"?L*mY8]X0S{T焑VLiny+!3jl>'vPZ"(<00r6~x!Ҁx:`=a`)r`!UO`E]Bxi AMM7׆T @DY9D)$C@1@A  h;'twv0RaeHeB5Xݦ@@ڪX%̯0;BTR,J EQAZha\X79{( H K -6ܟ9F|[k*'vznN,;['?G&~ަ%Ǝ^^)2 j%"uqŞ8aKkMZ,>Ҙ,u~Kt W ~ c5D8ܲZ̠ę- ZUB6RYBČQ,mFk;F%!$~Y.bӤ m# %BQ(2@Q$D1( @PDJV@) ?}caCj,"G! @BDHBTzo9kX(uօűV"%a&<$3_֎-Sߋ5>4M2_I!Y, )R^+[ w`Du͙{҅#)pI`Ŕ&a\ 4m\th&*(&(*e.>JbP{, O ^0 083EP GhCĂx_[S=Ylx vN={{UǑ ]o/r XƟDeC`T}P}"8(*e9R ω! O)OOg<;g<4*Ђd(d9&A,J*!duHi'R_- 0 yl"((|0 /:S͠A`'ř} k b 9%BVͮ`m!)\D5(nJ ,Ca'Hf5"J ,2a)>Hy+@>O);O0PX{v>|nn5nؾ~tjTH i9 xF a(o1R<#a%UMT:@@ڄ9H@$OLaG3X5PLI=p8"J=%XPT%qQt! +@RRd*BܑJp^XfV~ @H6sdQUu GVBb2Y͂R @=N  %r;ќLaͲ7sY6$<` W+&H";vLnB+ޔc:uc0}=7v K@~ft346 * - FJ@OrP{ ~UT,pr1AI7$@.1A&,J͂; )E1mAY6$F:$nma[2oЁ $z& >aBe"`HzN!4Є )(u'\e4+9X2́pN bqZQ.X8aZQ:k< ]DfN[ Ce(PʑgCHm6)+w=d)cL! |lږ 9up&)7!̒k%;OOO$ySOFu dkITA#C6-59 $+@i*T%.H0! v U5RvA@@;oLiv;!D(& R4DlA. (A0mX%̼8>AcsZTҴذ bBdbq$^weܕH!! > A2YtGwYsHf.kbR»gǶ4ʟ z@)p(<ŋG*ɣU!  "AOQfi(GMYyeOֱAk#aԸN"R$ENVL52E3df` -*mb4K?UiE%n æD$y.r(D+QgrFPGPTVE]b "ATdehf)Vb;d܍|Rw-#~jI9mZDgս#Al;1Tj"K-/g"J˸!j6HCӯgjykXca,qDWG9膚]hX=\bTZVVCچdS,a͒՝ TP\juqUSˈ`]=$vH:#iz` 0@ةGԓw{Ҝ`;aP4B BDۿɣ s`TNeWף2ͲmZzd'$ s! ̕iBa $(yQLjjTnY˂IW !9y|3ۙN&m %5 +F AP!@PD3c w@ɪ ꤁dɨ]J((xgz~;h?\D@5)SaJZ˔ȍIZPDW*?P t*t>$N,E>N2~>>f&|q1!'㟏Sށ;NjxǡXqT.#9޾p8 !{>TE+$Y`,P[1;m"XHV㻧~j= pڦ8Ì;OC]4U>x1~/pO][hVsN{M# kaV/gi_4:^ZS1*orQESʳ-'z5LHb/c ds%"u5/Klon`f'Nж~Q~ͼ>A?w+!_s]Zb޹͂9&f3יhr3u.͠\XFZi^9,ԺrmCvN"L 둥W*a2T^;5W Ppθi]Lqfc)J1*""Rs4fJ65Fiefp8vQR&SR(.IBEl,F6]kUg*D\@BpVV2"Rz돯kPAA|_u2axB3 }̆_[l'R/wac l-p8J*J(u9 ^*Bж{OWYV[tfըj^?=4) uD@}amrNvݻ}dF&ЂfX+ km'eEڅ݌zzthWJ"Ϊhus<*|BZ9}u=x{" v&sXd L'[הGSB3w8b:8TS_aBmX%o&/^ۭi]<>4}}V{g]mgi[^밖v;FnE6}p{G ;)nhC+BC 6J$l`aYYui;qu,a%ǻXcs֗r(' 8׎8K=yk;=JiMSbڌ-Y,=aױwg a]y9WgMo5sTmmu.hIżc. : zl.`-n/gBAJETE6)o:*[gsM:硭`T'Y˻8Z;nS[] 7g8g[,(w^K1qG9ûwG4o!Ҩ^5,1^iS':v۔f<՜GE*swkکG:0ۮqznFVDzXeۻ(kv[YD\LnrrLfH"(iVIb&Gԋ-QXV+C3U Q7Ӌ ≠`X6sTa"MKVs. 9or];!(Ӟg^/J P%)S)ؽs6:-8!202 L8-4u,֊V*Weݯ^{x[}(8vN fcsZұZ֕vŻ)eͨ-*W^5:sMr!P9ruFTs2m;q:'6rV0ꪼEl3e-fneJ܎2.x˖D )a03'pZԁt$1K9,jI@d >F߼ؾ8&뒠 DD~NyNRi,D9K!22gYR;R h^^seuǭ_H&B.z9 pMw=铱j۸6{w<:P5J%S+v3.gajssVs.F`f)WVD=/OT*Iamm++[+aqsŬJCFL'ȌfAOz yXu[8ӥ2TuƀOt7z_ [Dnb`K° uzXJ Ӈ @ !cúY{n"/3nʀ^z(sqt!Ȯu h}i5*w.ëLѶYZ gYk3-6Rqɭ"2JȂMhNXtTWD u x֤vwzXԧ>ͽB}d2?6_:{_&=*6Y ÐJbeы[:TwZC:0F(@x߫pN)f2I\fȭ/VTRSVSR96u*q{w1^JK]duC#d6B݇eJޕEp]ZcPXBHFYe2 `WuҕإBGRK:J̚׶0\.ą&-yN4S^װՔSL8y!Rof &mN#l#dJs\g QcVRl9Wk]g },uFhybLYP[b+U!*n,rWh(l1Dmw&GM]J̧jqs.Ωbrê0m]9uȷ5ȻQL bceAC:1^w\:.ְ(LHETS-96ˆf4W¥뵕/RcJuɆWmTzY/R&lL^ov)ѫ [vڪ8ZF*7/'m(x+m{/6X#/6;{h=ij[ ۛÑZabQ"[ZZYZj)lUtХq{v&J({[v R&f9;qmǬ^Z;Mܮږ#|&HȉHl2a #ĥk!֣֩#tpXZm PAWѣQbFVZ-Rԧ識{񢜂 TY;gIC2N%%-.)@ ) #"hHCuLnZ˜pmQ/u&eBem^E;tc64-2Jsz6^u!ų d^m\kA ZY]춭+ k[mԦƭ-#nv+{8TmP^ëRSLbM]rSjJ-2r3VKl)"ݓ[mID ֊)uU+F5bъss`ָ3y-]eE+PiUAܶNDաDVYٴ-e]mlinmieAnRA60'qEZ.S53f6G55$_:EUU"F#ݩZDg%QDE|]eDMҰll49L&DEu~@o_'e/ ?PExj#ќk8eɜ1Dt1 !7EaVR*$`RTbp6FMK9Cp>ġa}zء^\rTJZ |O3 "Fd2(y-"Nuu:E>fκ׵vhS)nociAb/5dZcVwsDAE5j`-h, DKk |uȧ)9 u}cױ&| cٴEp1q^.g(}&g> 瞋CWD@V3OVKPRJDDBҳ($J L-5@4%U  @MJҴ- L)L@ELD#2DT(P* J2A% HS*D(PPD,RJP T@%"R!HD-"44)T3*PRKPĠMMHHB4!H%J@ACM"0P% 431MSDRDA"KJ5IE* )2D«KPD@PQ SADHPTHDRC@P@ʍ E TSBD4CBS@EBTK1PR$@J4(C4!@(U%,E*TAHСK5 HQAAISAL1EQ PI@UIER1)S% *U(PM%D4)@PUER-P% "S@5HP1PD @CM2P "P CA#B4++ PCHC0,E4@J$@2UH Pʒ 0 CP!{ $ }ZBXQU%X$D) iJH!iJD"(BJV$J( ij "ZJ  TJdb)h"Rb""&FJ ZIX)P"Q%(H (j@X*(i Zh`)h @fTfjZZQ hJ&T(JV B($ Jh)D)J)bh"T)Ra " JUiF) hb)b )bb bB$fhiPabi)*bjj T"R((((ifBX )i""BF*B%Z(X"  &i)f *H(X`QBhhF( " ">t05 ֌XdGDpɁej3$=`BakU-*(*" SU(#jhF6(@YAE$ 2^samYKhz xBȞ ICq'C "D{#"(O__;R0=<)5nC0O S9F[xyt]s|z_RY9XpP$P=w&0Qz*wy]weԬQšլe+R?١~N]̎amQKl+YRJJ趗q n+W jOe=cm8i: hhHPԆI@gۇT=M|L@n}REM l˷ ;6'h~Ոb(Qr707 |׹_ޫoGeaU*IwH+=&ADTGMTD2,'͟_g:}AKs=n@?,?-CkyޅCΖ`"͆ ̀V@ A'T <^:\*=_t5'~~ !PcEaϯ˸{: y@6rb{ oFKPYh$:}*a=^jG(R;a!"Q̤L7o1 mcx<@EXi%6<=Bs;D}֗ PFYi J5E-$YK8YvaN?OX`)~K"r'ƨF= >3qD"2rG/hH%lݵg{irN^B/%"0Tۤ`S&II8gD ?b!vߑ&ŕbfA+Gҷ5UJ䂵 "ν>z,Gx >wNὈ R'Hw"FX8"yʒ@q:$@9Vf@ z < T:G?#C>oL(P;Il$>XAU0Mb ȗDOmRpa"Hhֈ &*lȨ EBR$PX|{ XJ "H 9(^o>\9D(`!O:t7I ȇT0qxdLTT)}hi'?/KZU>RsH:8HdК;"NߔN]pqG?+`XAC;A03E!3pHC;Iĉ,sA_BHIuCak+Oh' BjմBiI&RL9-d"uCN31 @t Y2Cޗ?lra/|,+g~/ }4ʗ| PKItH((}hn?yz=oϯ1'dYٿ_:?[ts<1v-HPk&}>ךyϝ:Roy1 $?+t z<2k?hO]>~ [?%潉?`>RրDrB~^~LcbV&R4.)D@T~~K4FT>H=>CnUEGg^{OWPa(%G\M۠n~ FG{y\?sY8Q|=-X$M[G;U.\tJoso%J( K}A˂ƞ_z,/ {T$/0cJ?Ͻ 9Qim9Ӈ*~!=I, IQo&𐟏zzON&\Ye̜q/GrVCrf3bLHOdޏ03(ڥ@?>^dJ>Eh6uTܷ1& 65='#/Д.7S(yK3# 菸6r ~f7 Wǻi00`A2<"slÛ%B Mj.D; ̂ƨprio7?ïv$h)Z: Otx𰦊B*tRI`۔@2(귀Cr֢%g# ]/hCbi=z=-5f]?\7ݷWc jEܼ",4[m˵,M|ɹ$=m=όU ?OS/۲Mc6H7vjk̽Xdz$G[?~QԎ 4>p ;0,Ž侯O-KDx雛͗:p}2;!9@?H}2#"eNvhNKXyqhsggjAG>AQ9<%xK9fz˖=0~9}Z)JD/cˮ4JIAIJ1C!s[TIM%SIU=a3Z+}C9a1]G~?[5lՖ̥:21-4)" 5 7KO8fjA~C8ŝ ]4˾ɜ'?IU{xҊjƏKއ>>>V1n[]AuEFߕTYe,Bs5+YYS.&r2}5eQ$i]'AR T9rύu7ul ^'T|I.1?G+*2ONEnwԗ,]*X(+GAv~( G=NϟW l`Zʃy Ay/P[Y€I}QL}5 y U"_A=$aO.6zrDZRi@9S\ETQ@H-w+d!lw̢A+pE'ŋ+xP)BNǾOF홡uY7ޝvnm𚅋_r x*?=z<|bՔ} xY[:%|։{((d4 +Վۤm%kO:2&`hP:<R%`ߔGXt W~݆b-B-߂Xrm=ȀOJ9U[,/a4'!$Xqyhjoa0Lb/JDQ-|ȀPERRP)##׻jW@"<Pg7m//2vnhww\|ˣr.,;>D=R)3sGWCW Qۃ<+[o/Nķ a=V] bg:=+}f'C儤߉j ^ԙMI3[Í4LVMVщS+VE#Y[kwLx 9(ݣP}ԏN!\U>~ VzUIz @$u ,Q"mzy[ñƿS` ꫻_ \遑0'$%[ "|))୧~Oˠ  ,XgGDzޥȁ:G*)rB5"Dz=oE~vnlo>_TxDz3Kc`t)`YAOM{=~*~^}v>J˼kd*1J\ =i^, 1n2xN=)"xA #,; ĕދ;%.|~bn*lX m2, @ /G>lx,4u;Z} ~?8̄VSl8A meD;5 @_dFю| M`bh|Z3פzIBukp ;mJa;u0 e)VNSZ hrl?ËpHҺ4{*D4FBrsR-BX@H%(V+3ػ;2L>0_ڗ|(#20,^zW}Վ1Dh\S˲,E-ױ!ط'k=ݹ4WSi92 vT B@<y2~_rWLFIКi:Z1Ph+A1(cU)'/LA 9^OB7?_=p9|AG$?9N^R1A8 dR>]"P9Lҧ jp$psu(#!`F= h 95 +C(; #G&߷F a_=H߷O O-thOIC%vl=t^~ye#q,vFKbcJnM le 2EzCV֙nڟBI@njʊIeƔ݅;qa!s/nrdInDmZ?Oe:/Wco [-Z SB8 /DWPJA)|aՍ.ۤ^N/f0̺~,q&G>1|&8E~ *G0?btuU|VcF1v.8?~=Zws̛Yp|עBr5@ǗXpb!w3Oiy?gKsxvު\X;şi7ًڞ&bF{4^LѤW8jwZОb;vo0Kr|j~FUnGasb{Xr",@E(1q R34!HY tfֶEERB*,%O/j$dz2S8WO(b@rͺ\TBB]Eй*p. JZ > Q@C\c9Ӝέy|7iݿUE jI;2U8:e`@D|;N9\;/c#M&E=b`*NpN6q룍-65x "J!r;P|UBHK;6๿(7矩sþ~Ɏb8#Zb?Q^pⷯ>z'rqa*D>! J|bTdd ̠A@O>h`. t*͋@03w'H .x.s7?S~p=AG|X&*DZzKNj;b/@#2ʹ=<6V2].pJy#]o AuU)(BA&P I" ΕEO'a]>CɔQD3 ffz"zsz?"Ts̆9z3_۸^nA:G8Txx t;ʢy.AЯ"u0{~?i!3ho!FbKHORHlJaϒ5(~'Z̖k2. 2wp>x}n.9)P8º'};|iʘ;h$4BLv9qKЄHo@>DГx-ޢAj˹)_1MHw""u_.򡿃EDedw'w}b'߆H@=zߔVB@߀ i\rD)YR7CZ4)X«֚6mTTf2/|2'ͮSSCRt-MEH$; g"BPvfYU!yh@u{xߍa+dP!DDÕFH}-ȯΈw6*рEE!(̠)a@SP A(AQCR  >?,of-`Kz$@y5s}ΎpdT(w(@x|%.#|ticD&oH@P?ǜ@!#܃g; { ׻C2M6Xs] ~ =yt_抏8L OLlT"%;TI3*)\ $QW`iuӲ@ǹ~z_\x+Hd:rߞl6?;Pr Ha0D]fH;fԍCݐ>iCgس?;@(G?[}>Gv1> `HvNpT2$9LQ~~1kjy@gϞ˯&; g+*Dr}B nS,=$>!=4@]V f-%c]j::g;SkP\!".f$>ȃ#DLwݭlxGxuaD@\)}!/w~?Ϝ!IH((B˽(.\ܹ7@7y`5ORrtfDqmV(px|<[1b~^w߹bA~(\0&B] Y\~n!} BڥvN1Ol@I2d,/ rMRC!RIƐ>G!8Hu04/_ߡlCoɆCGT(Q$)aSpk9P$)GD|牫! V%yS)֜"Y p G6?D<uRiAGg;$%0IIymo$QBHN:O *JEiE2EQ  @@|~Vsp Q>)5 9$&ɶ $mau RgWIhPI yd??{x@Ш$^_{|o6:OdGZNi Zõ0I@@ȂR@ w_в(Õ `"HAὂjI[y){n Y%x0I2mvBcuE= VwfȩP8lO`0퉆5F_UU1HJPQc#J<m A5" CŇ#u1 B/T\ș薛ZKt;F(/K lvn$q'mȣ0FnI:y9Kxz6 ۱ =ۃH;Ư@tD=cqC _y #|rBqw'}0}!=-Ƙ:J@_{yoȝ Hlt,M͖D kqpgܦ [}iHM}e5Zs\ zL?ד-0iΑDB$pr6)F]T(![{! zstl|A@/ʢ> O/:U;6LPǜqw0z"NM2H`F6Ү=luGpU4>C$գrkNHJ n&Ĭ=JY@W.?[~c/ F&"'˹(-sF.~T{"c^{$ '{n:x49u8hCwh6@r! oP_Ov'n"1щiv?4 9~.=Mr yh'@:KfwpCدPiɒ "ddD( @._#QtqP(D. r|uegW8wͷ~0\yJ/6x%1.eؖٱ˜O_U1%؈R\Fo$Pҽ%RoVԐl<iT z8~mzgef`zx?]? P. 6{ tHeB#B% !, n墉q[7KMIR"#(Ivjv̽YΞj(༢h[9\>s*'Hvi@#VOzsYgs㼛3Bߧԇi$vGQh4qgpزmע._bDD~gΞ '6gAErD iq-54YQ QK.xa:" a)RS@(9D =ɤSUC> 0աeIZz=ȵ8kc .pVMjzb^twGbn| 8 $xL>2(v,IP(&&W oVPD?@O xb7S?7Rbi~<8KA(b8ʋ0tlfgg If`fyσKLyeLƙeS4eOT /΁ i!FNTp0˒ik>Z6,# 1Wpq{&Մ DFJ-T*T]M~ӻÃ<En 0{|x4T)\}^4'E?C)ֻUz,zU y{?O J4w[s ҨW@Pb/oiu[L[K עLj   xt:ɗusW4 Zo=*9k#QAhP`l ?uCbhAk/sHZ.)n/ϯn^ix; 6 ,8pv G{Z4^@ &kxgǍqX{pϹ&ge}(t?" toNABo'cj_:սI3)f{L&s'λ"3XpWgM'Gkx tXYpg'wEkܴP˥n ^m A ⨿~3& Rm dPNJytR@RûgmEE|@z=ލVOꞋBX?xyHAFmཝeLMa>h 2DA=KMbXFzust{{X KaP.rUDFF3ͱTCF kHՎalFsdphSgpah$IT "p.UO{ 0cEex߼hPv1sCTUԫa3sʝoL!bJ/,{Ү~ #2*=fQj>ih(1ܑ_f7 #mU>dkav}x|xV\]F*LHr;w3B IdѬF:*>ooQˆ\1DOӣ:9C HOW d~ע, ݸ~:ڒԁګI$:ł& MG"Hwh@\K?1q%Ƥ4! K*1 ]/L<w]GB H">p1xDZ}plZUcJ %zwHw~ie}o iks /zVDxR&`dfD9G3 =܃>% <~׹4Zѹ B X'BA!ya9bm@PAU= &ңiGU,HP57X< X? [ l=}t5O]rqT&JRZ$].*Qo2h}Vf(:X@5=3,J-2%kNQ J'Y w=vO*eʐL][;Gg*gTzxpQ`[E`z6͍c$y4Sju u* >n4*T*uc6b+ʵבŝD>Ń?g?oPJ:ljVSi}JLO{n.J*}02F4d=Z&|WF>fgqBUӇۏ $}d#Ӣj1G;lw$WgMs.vq9St n)Ik>-k6RbhF/\naRl½e<`ۇK܋z{OPGd*={켻bJ "1}}5Ñ{/F cr"` ( ~^lM&ꍸi?ײ0JH)~ ' ;A-*(;DT>C+viXoˋ\:==Aų^EZ^ Z?t7Ɗ'?O cc Q"'ԡY[X Jy4G΂xSi2bb/4Br.Bqv ?%h~|.7HDzQ!xHӁ\/FW| ICxBPH9x?8$>⤝(bVD 1@0K' pW"{Knw `5S"EdI*'vNMnɺKGjCͤ(1@M)`}!f7lJa\bOZ:c.<{acW ':%CF< "`7 &>\ ƻqUCh`Db(NPmKI-`Y1$) Th{z~'z|XR|}4K GJP|^bvA`3 T]0eXDlKV$5l}[@j H)}*j C6h˞cH)Q*U׵ `EF:~n]8nߢu)pUv͘ӏ3/&Ҁ9,Rd;)y(W2P`3FYṅ 4AC RA @B HAw^+W@zզ1"2fZ0'4-(%C[b >66`T0o/''mC9B` IP?9Vk4{LAs9) U9h^<^nu&UNt.͵gkې%tz-EA&GWh ?yS[veN? lԿnX Q.@?ӣs2_8۫T.BzC?}&d׷|ȔHj3̐5az̆ڗ+ZܴX=4g dBjvNj jL^hD hg  ADp7N`62EuzUBy.ei W3/}Z$ ֦!Ԕst6}r pp#vlA8Uå_@H`Ϥ iœ*W/yRY/{F?N- "ϑ wgcB},~_ɔ?@e [ָ8nQ:#_= PR  z^OT}2Dv/L@=yHD?`ŽpT@% f e瑐H /V%/i?ۥ@k%/":#RLqp0`in?kApGe.?ӡ4_&{Sܪ^tuf?r`x! '6I S16WT.0Hmc@ .eN7U?]0+$e}vZ,̞\ BFD2LqᏵN:>^O*'@@: _PPfTU#!>+e Q7J &*6dj)0/Ĺۜknܛ`3XT 'm0\afRiydzzDݦi':&u< Zu瞺 ]ZbRdg]J)^ܪBZ i%gƔ\Qno󆱇ζc:d} aaA6X33 %4Xf3hy/ݫ jј-+/}ËCÈT9`#181Iz_bsjg=ϭ>$>V ?U&Q[6R'>">}ȃ%6??r$0\oa#5T KލLF%U/EOokAS޿]yE1n7$GEf,U2JB/4ENTLA)`xo2;ּ E>g_ FlG/{xHxyE+?D"[,yOz3+OWN {}dۯQ) teSPRS2*ll_2$ W=C]߃?{"ȄfF{3>.$08Q>žqy~4UL*([Pl&`\ywe[bX sT==DD0D `L??ٹe)R#CJPTۋگfv'>ν ,LMBer,~i~F5wF~  "FZ;V;iᐹ4-uZ\Б_-;, s}Ί jQKhӅb`4"aɭv&?F7Dt!z/d8,ee|Ƴ)ޭǣ&I$QV V }֪ j7=׬|orADEӹ+Y/S9ٹ9(DždhN-YbFHV"QdrG2MhO"(PwΎTo8> }zf!(h#*`#=X'!;I V*)cQܿ\tTk>D+d$9? IŒ nE KVʠΡ$ԧC=e` Үo{z#Q Zm%Z%bC/u&Y$Z)?vUF,!U٫sj0Q67vZ@qtLҵ*[BTFvV/SRʊ*En뎍a<3j+MjVA n0aW S|רwpV <1IA@PC<`.=Cvc-y~isK|i0=G@=F`~nbR5k=09J˭@ R2^mYfB$ <߿fQчqc-6-8rĊqbKwp&tl  2Ђ Hۍmeh\iP%e$QD`f^An ]tÂ,.%AT+2Ku)~L=NukfHh8:^ r{v3߽*w}oP5T=1F{ lo]菒(I/^4$*;j&j{[Cdfi@nnqs3$~d:^nG,39_k7vM= cHH4ʼo\H ҁҮA]q*&=ĄK\z+ђf'G_ :rXQD7* B{J=]]5"6~ "IZ~c'+)A:{Asa.&$6=QeiCġZ ⓿:d/WFӒ>[Ie/@HDQ(όeI)yj*ٺmEY4_Adn[R(n,wуQI,ƈ) =z\:Vj(9@s Iew^GYjߎA)^؄f3T@ ?P۳Ɣ9Wً֨ޕyoo*ZF, ͘` eSb=SjSYL}y/iӮhM169i^^3 P 0| DA^[o 'Od+%6,@ i- f̍HpI ‰9 lA^eRJb*yZ._ 52w:q" o.lvۤJ@ !jDz)͢nᦜ-*⍼qD+\_ uM͝6sR DC}-SNa@@׾9t_+9c6uުL瓅(-{?~-غd,KXa'n11ӎtYucsC*IDEbP(Hoׅ0W(T}w%5 oS.qib7gR$n BB Z F3{b_o6dwMH !]?f΃V82dtl-qD gN`3C>΀*K|E$PIp'kOtub %$ HE;_mvQA%'_D.A@-Y -+k8V6 'oqMW$1Q0ʉ@Ul䩒S x(7US9QcsFǑ9 Yy :C4Ե;rQev);q#=55pJr#N$c׫C\A U`9Wӗv(r_O]zMjѱi̙-D5p /rkw$J3 ${bXsߖ Q;8j$]!Yۯmcm%H3t5mj5l^RGB *E`)c]7cf&aY#`Vȧ KErGD!cE!,¡=?@[%uʪ܇W,̘ Nv@*q=J|&N ꢌsWcЎ;<6_t[K**[ɍ2hY,TR0S;0f3}N֏gß o 7]vrCV 0N>a9 29^`=n;|$jSBHSi* ~e8C& &E}+vp WPAV{s-"GF?dz4׺x BX MBN:9@1|qIcٴQ/Г2 "i~/dуU)i2 ^T(ipL-@~ b"c.Ѿ(~S&$Zb} b3tp~\'ǛL9ФˡJbT@H x! @ PFȘ$R9{ypÞ {n=F.饅6⽎},`Қ',)-\ e4x:%r26 }EvIX6KXA5#C }ƊUQ˹f.‰l"&, JYn!(Ы,xj('ʍD `EV4#sԲ9duֽlI"H~miT,W*>ⷔvվNM-?ȸT;ԎP2u-$)dKy~4k}fU0 @$ݰ#5<9d 4fyKkWrNo̳@DkjyyF+^ZNHAP#rŮJPCq/v/[QnM#ID=W)~O.[a\0!!!p:m0>U"sj x$ EM Ӏ]F1KgaDOfG\ (f`aUT)ZwgPk,)W I,gp %8A:N:bHOFˍ]Dh>~|st@TqXx,.[z`I3nŮYnݻ'gDI24* #udJ` EY$@P=GP7h̀U {hP =v *&q>lO#622pC5}ӒyI^!?p9SBñoB_>ĬYWV L©uht$-]bϵh"R\ !!$ pB:)(ʈQH4OsoǾ<ࣣemq}cb*`@TS>[F0r[d́! H2 z,,ND{Rp{1m2_1*F4npnZĂI NgKUq%5 nɤ7scbΦ zF0RŅP8"8 %F؁uPBN}*g.3SLHΠ\tu8sָutFKp6[إ*PN4IB$V4QۆgBe Rǔ S)RӚɻ{bEmlNt57X;i߮8+]jxfI9>BHwYG.9(.zj"Q2.JhA Nj]1Վ/w^,7s." ""bRH)*J&jph 2V=,U -n$2coF(=O|)yO;&LF$  i@h(5-ҤYAϥ?;ёZ!X]9*;RégHH!@LI |ۧ+VБ~ب((@':_ ס` BIЂP)$Sx=0@y6Q77V)B HRD< 1*S*ڗGsnOwcTv++P+!%OZ+/Nw 0-lx%A`APJP`0PLe).cﾽ!AT% )ĺ.vҟ ٓL|l +:pc޲t&ّWpZ+Ib/G&tm7y(D2ʚ\U/Yn ηGb6PX5Y:j3GT[Zn| u9*~mStq{dH%BZmÎ-ه,j׍b F Ff;0` 梄5#K**$)(j">4&a4!Jb9 JU**( pZ(6N TPUQƆ̓y:ংo>'E'BHd!apj6iO =1*i+3n/}ԉ%)Zxҡɑݹo2ZG*fg͸@g^;8ȏ~Z2"T]uUnXF˸N.8V'GUQk=1kwR NOWE{vxw;t65hxŸ5RD ^C&l}J,nHÕ0r^_zslz+9MW rg;f.&4)=tD$V  f+Nܠrg $(ΠLJ5v*42(/Fj(GO H   >ntM9PT}Wtk IU-4a`\ֆ,+ qb444.z[`iPI-4k1ǴN?'}oSNEAb jF 5E!GLJ^~ߡfa7$\.Y\& =5$fnu(afHSΞN I2D!р%YR@`QŒՊDY=gCzF`!Cᅾ@ IP00۪ z b>H Gvk܌68 ( 1A߷ua I\*/۪Aqόo4ᒖҨQDk5詞5"(J oO"NUQLS~ =s5+e:u^0Nd+߽0md7#* =b GP5L9TID/ sOt%]20L!y&<5}l64d8Kl$I/ ݦ}c[}N41AFdB+JA|rg 1#ч 8Tis<OZ4,6 r(h18W)xRCј*aEӛ^,-o+7OqńvLts0+ HϽeՙ;\CeD"0@ s LDk̨ك0_l^)0d)/ƪV4h 0g ^c'XkvK!ʫِF5uEJ)XIs*& >=2Rm¹$Ut3wMsυpH|wzN=e_iіsZN=Ry$Tq݀-6sg΅kwvNne{OsE/:yyxu%zT_i~>D7 FݝSm7;JR` AnpP f`d},gߺ]z YJ1R`K $B)I!H@~Zמ_J} ABobXF-@Jz~$;P8tFudPU\#⃬ךԘo Ej.K ,捜[W5ʥqYA E!\a Lڌ4ǥW䑊.+ć {*|;{'pr|x<2BC2i#z 63e z T j&BOWxSv>΂FE (A7'UFANPwE6l(uaӨ%8*Kśr ̪!vl-Y֎V,5˩DTEިCa tuԱ ;y8sfKz(|Ao7 AH'6C^wR'j.M*iNiqs\nQǁR.SuM fЂ4Y@֯58 ; Atig5Sf=\6$Cۋb)0`f+\עjTCx9*Be$J.M!A#ۚ8-RD#ӴnA;㖙bât&@ 0([ 魻G1F.Q b|  '[=_&y߸ zb(R6o q3Ngl @#SbZ!Z0r0_N,Mbw=DB@:4i(㥜7_x19HҴ>o/ 윸_/р1j8jN@Ip(??cks)guaw&`ta+uâe砱]p@KIBt I!ސ_H;ݷ-JQ>5!] DE}F݂hzT%%YĈ貂9,&yLvíyן|GlŐ2A'uw8 !ȐQb Xyta,0=@p,N:_sgsr⓵Q  E/}.DnmM`CEnj]lfrB $s r¬=lRs逰)oEG vς \P嫤+*yeZ` * (h#ǂy]2D10CSc5I'> ":KRXWX #J7XlyH\+| NGYA Sa`pa{hC3U@@4р6LfaNI[uO d=[k;M ml78x)?mGG%!<D D*@1;{*&\&Ji^әsBXЛq5ks2T5vD 'CD)d)]Q)JTTEL*#$`7 |R@=çS$u%QA(0tB9Agt?Zրl*MYE!o{,2Z!9%g1ND;.3K*)EW ޔ]nI<'@ITBY^V@*^Ok,F* u Mܺ8"Mw%V {4ze{j;cD5~~0d2*nV4BKߋ*eңO7|WIL[5bzB*N8 A@sp. ^]V>K1- rE^ MMHaU j40 e}C!drËYTa-Il9oa-bd?2< 2G+ QVRr<|x=X&N~{~CS&x;Ƿi'3y!TO&]x ~&xxgd k0)gRmYbJhuOC`;1ARJ -obs#KVcO4_\5 H H MHa?xA QQ NQhr*|?sQ2tDmT*JV~kVm+mAJѥ}GӭIY\"gb ` 6ڭWL%V{=6~eOfZ$:'G[45WkEnKa5?z̨SjB2>xT glJ2{t!dK,ndDW`+ExR d;"@uG)>wsM-e ա|wzw-q JLkR ]R'լf?2)™J,Nug]g߷_R| " ~4)q_PYږv>3B\,6o@#K2&dSZdמf 93/2H%`Z =(+`N$?#v*p˒CL1ڕn+FUd)Vut™=$m#0IZU!yHmB֪im6 4c3!*ܙC*[&@]96) |96-lAd Y  9i5dm++ژ*}7m6Qz6F#(ټ ERx>TzkYr[mJSl~( CMNf(#ŖR mߩ;q*,W|.4!`["kHˋiFFZJZ5UEmk]sl1;V[EQ5RPUTsvvQʍŵں%իMAMhU6Z]Ͷԥ87mQeJ˜ JvʕjriYR۫UAV.4Gu!&ϩyeUSyrԠ AZ>T0CLVzRmOws '"+iw~SoLEԼ+$&!VhS |ǃ3HՊFEfRE*(n5D,Q[].?ن:T|W p]ZLמ9oWi@ @!bq:螤R"=npi?.Kkd[sԣxNr`7@N{a}=]ou҈(p0KR)kW%"]F =uc6XDf\FhE6H%N%T=5{i¬/n Ј~ =!lm}2! ZI"]+jĸ; +d:gwȍQȞ듭s# qU-ۉ,3>&rm9ozKO"(O %"(J!}|xR)Ofۊ3`RD) 9\:?Ꮞ%Oɾ7']" Jf>ϗ!뿪nI)Q~Yurx5(T{B/I[qCΞ3eO,N8",Gw>+a;$-66Պܱ! w+< ZZ_6_IB vԙ!fw6ġ P6R.Ҽ%wd,.7?IDh.l\:ʙ<3'/'ahfv Ea]8+qjս^JY*d061O.'BU0=(›0V3.ZIvsC  DI+oK*G%ꮸE*!)Щ1LĆ"! VVr6FNETN`XJp.9ٝ'Q:yOj J{UH-Zt;rC/Ĵ!ɳ7=a ϥRpBp|3ak:-hf%v "!$C#4RRD%DqB%[T[!n9ޙrTpt,XzG7]]>zEDN`!Gb\-qz|]yHoN&X !|J\/_ `6:qZ\tbg:k-0mIp-%;Ǣ"Gڶt9l?f(LpKy,bFF먜v T~0U7K w鷻vꛏ?)Q[L&\U4U l+#怲E5s[qذVՌutdh`X+/ܴ`q@¬F:(3|+HUDJQ?_gΎ_uX h=<$Fg~/"۝2liQJj xAE*QD=}+WNx|Z[guTд,L6b7Hb($ Q_CBWFt` HfeH% 9*8c ۖʿچpݣk_ kznN>?AԈDETQ9SiŲr㨶GY~_q@\OU17zj2h4²Vr7hc鳣pVɷQ(V`{g*f }W3+ SiX}AbFp֫yM"Չz8t(([op RN_tV+]7^FUO㓕dN*8(@A U?dT>ק'ai+Eޤ_gހ]E&aʎ׆}Ɵ91c0ni*.X. &#'!U9҄Y*wwMtΊ}!&WPͽt}̃ BIuۈըV(ωŊg^#I.Ɲl zW5j;u*I_F:29jj## Mk=Mۻ:s̱P1^ogs禃$U\;RL!J 2d~NCMDԒT)·\W(&qp.S8`,ZY9&#kcų19߅% FS}7[r 'QYE70t]akY B9:@)$YA 21&hB{-_UI"O~䂁Dp0EZdPmC'+\)>Ǜ._}=ukK+&v[HDe^BSB,9ёh*$إ 1Or.(@L6zFDgq/(\I7g$c>N.uxzOqV=$?k0t 6֭1i<oʎd^^oۇV۟G<@B'3HՀcb3˹t{7_O|&ͻeIxPV zɺ@Ȫu./'v jo4پ8&;6,L SF-]W~VoVFm2Ӷrev'?wѯ6lG7mnz,0Q+n,j|dSAUތg5q[rgIԔy&C<@`MtۻM3#.ʚy`em373|ҭc;5jP0l1F (*}Xԅ/4v9d)/:9NdHJmŌ0ʤJQȋ[R7/5F% r-L AܡdCP(+n|*Q9V7 UsSY:>L! 4xEފegl/,lJpp$dJh㤥c,[A%H`_% (  1'a>>[)߅QCt/|cg;cȳ/ ʊ3nP?j ^ڠ(MщUsD%+*^!QYH#CviC% B&3a▕}ԈWPVV }K \. N qh`]0w_4PFl14fE#c)ގʵ4D B>Ngߞ}^͎s2ēmApfJ БGz>DTz4rdG=7^gvxu@(*)$CpGݵ 4%8j%ABAy阊@P&j,'ݙ>}D!BHR$dXٿdVU{DZZ#m_OlK|M3wvTvR~}OhXHoz_UL$։u(B$ű-"OOO5L3Q@LQ N4=ZvNٜfnwaE}Z Դ\}IFƽz ALxYP|+ȂI#a>Od#6KQPϲo?z;ȣ p(DE=yؼ>ͅG; Pzr %FQ~~Yuhq)pV tet>j.4|ky:(Ux*<U6ŖgJztÕs*[%>gOl#v @TnH3uC !9 TYBc =YbO*:>ltuM#uǿ@!HeX`\1;~]~>5a?Wo6>d;6kǂ]UDLeV=_eVxrp`+c@$RE, f"nYd{) 2hJ9 nT@>m]]< [ȺֱaWtCek߆f V.\U6˸ IA)UB`QD*E+T@I(n:27Pi!$Dd@(@FPJ!Äϱo@<äNX}'T:2Dm5 \H+DʧFaF{ŝPcf̜ڠ(Pr^l(ɞ[B@g`;ȉP^2875]=^5zyBtP`6RvsPogMrt1EP'D($,婞aB'Af-o#ic)\,IOېܐqp_[p2ۏՙ% -Q D[~G jVdpQlb+{K.~:C]Z\ԓtTjRٕT|ȅ>}wm-"M3:&=Q3q6qi=ۗM]|fU >H*5[[*b*ौ@#K;J0"aٟbeYDqfeRs`Hq]ա $Pov0 rz؜.[?Gx(/i=(I\{Ehٗv8M(O^L%&Ź *$lwZxָ Pmd4)TU?;^-2hzFF鯩ۖk]zk~mkzߩiu" DDri[.i5 ?5 |i_ۭ02\^͸'T J0奵R+"1@1>8 AE[ P|[l)J*IpsH!پQⴸ:/|l{-戁 ~osf)̻Ϊqg;. Hl,RS{g7oQ,@PQuekKkA+_z=\eb=5u=߷פ+PJ9KW ~(&8 +=oǷ/ N.|4ɛ3R&)!vBD?bओXfTx?e?gԶFJ#!vc'iy=K| bj[dB*% ѷoǍVT%vWNX宐Tl*2mü/DP,\X%Žp(CT/(ѹ t8d!C"yY@Zcؗx&N;Ж6 qrPRHl7W.mk,7F(zۇ :NN/EuNd u jIP.X0g\@ fm誛 @0'T3sGqP١a+ #GpH=L`(0<~^sdBJz:=VhؿxŒ4xbr(+r]UlBZks/>! 0Wi4 tLolSG-Zk5F` ~.^OMyý}N!;!Mt`={mT}._4C'YܶO8Sː俘2Sl4ٶjoZ8z^?S\^ =xy`m_9_ɶUtx՜&敏r}Z䥔_k'3s|wXت:xҚʁMʀsFjTUm %aY2yɐ*>aESg<5Yɇn,ڋZǺJAdu:DUj"nڈ%ʧ+k:ܨecqa&ZBż(d򦳷C!YQcZW'ϞhsS6;&bcDV1c':e ]ȫh6$rS٥+d2P`w[(T*M!,A7F* h%d*,I r;8&*SFwŞl=Yus4Nώ8RBZX!(^Xp> UOej(DP9Az$peH?KѼP) 8]DP쯳|ĵ~}W  xxfp]o7bߙCURU6(Ȋ }"_ x*Tx[Q9#Ni ؈o۫Y`7wV{` p*;s0RIau#z'ZSNJP`{AFgMKo]qK3ΉZ{J^ 0FXvҔa[Tѵ{!QV&nWѣ,6 *^gr*4Ǘ^4])ף>vQIԶCzr-3dz(~qwn=S4bzCl]zabvgsM0ƅ99CY[=d3OȄ97-7w|94 +Tr{9[EK$n:oz|yÿ[N ZFFk&kO]ݙ檗tSЇ/&!Nt0*JL{:`Bxr508)j]A * tc?C"!Kblj6R&]k{GF A yr@/ز×a*Bṷ䊳tF"$+<~ˉfJ^nJ]Ҁ*rAg氾[MBmxbӻ3ou*[J{&u,XћКm,2I'2V;%'dd'  P{R}LZ$Ӻd5CN2qfr T {J0eWj] MLy;lb[N)c5wc}7Х0eC26qߖƨ)`﹇eQ& Mʡ$6f!q&ykZ6X/yڏl-J4/睥o5"YHjbnmw6QC'f1o]',_Mz^13[4f)M:$rh8̓1#g\[Q%hH$CTb\G"#}[H=?O )-Zլ±Sb9$gvXz)<;u!Yh\bX>QATgM`9"wm+6ⅮDo=Vy" ο;m 4M&R{SL7cgW[!b@.Zu:'n`f_0CExfVF2ryN8jILxp< WGkag_c!".WxQ*2նRGm">߅ԅo[ݪT6貂sLT)ݬ:5yvy۾RJe ;%c8Q &#ҢKRvQnkj}SIֱfk*X*7atݿ>ƂL`gXᱡɶZ I(#nDj񦰥ԣ̼^}eEAovȥ.C A4< ~B U>)T.NvDK@uςA0=bۢ%3t׭N t*=wA$?3 s`N_F&͔c P874zJ=~o;N1=ԂpfR#mכ0T{& Q@;p802h2*hu0{IH^y's5@[iHQN[kN^84WVq bnD 9=U#j(>}֤>284ef!aH(ـ Qyot5ERD|:fX5B$@c)LZXxܸeT#4b "`l h2 Qbh( r"b5g6CPTDɽŀQ ۷(÷'{nzM 8(0 UeTGȊ2ᣲ^L \ jF"KmNOY Ӌ8LL :^4ҙ8\æhWO˓,S^2"]vuFLƮYoS45+TW77~|Qj;LR(B"o8$_zzs*p_NJbNI&0K+>=_#p?15u;g8-!C5`jO`QYq<,Ph!0w~B&~t/Q&E, x)ńIU4T*4FV JV̸x+ Ҙ-TX,4" v!ŰᾹiCj-,{Z9z+(Fs!N!1VzSh5AhqyV 8H/0(-^BH5RT뒹VxBg.:РyT J4Bs lvFYsDdR&j7y# Wܷ=q-ۻ~Q8GL f(Kt`֦O/)@@\' ޮ:.yy0_R#I#C"^=qߔTB9Prx/7 M-s߯ ^yt `jh}ʗ^kvٖeIS!e YU2#K `qjo4݇,Q9. .=g7g/6_O *i%NjV85oܗr߮#{tz"^Lg9!`"s0M1#a6zT IrRHHI4)Eη;1&_e҄0^Dem}ҁݪb%8@ڢ3p( 'hg lڰ(ȂxBVy%ZFMPQ2P" 1ջև܆dHu%W]HtrBUV< ڎ\Z\3 W04aA+љZ w4ԅf`6FRaY@GzJ}Y}(mNhj3CQY WFY/RAuQcfO/RIԐ:>.;H7:"o IS6g Ӫw~|w3[P{[1^2r€;]@!-l烢 |kLԽ:b(CGJ]B|cJB,PH';yېJł!k=zIMv?nbUv\ h,bFrHbFDLHdT lSC0"TIX*X~TU"7l *5=v!6Vrq)rkDb` {~_/0 B$A~4XXOD`'J#D"Sf!BI=RR/^L f#agi;LZ4U9T@XE" k0%P DEM34SA?GqvY *0QNh]9KZgᔌR#5mWfڻZ^yw%L{VZs 0?$I)fnqG֩])a!W?q>󻰨[hNYi ֖28 CLZapT<| G@~`BQBWnˋAN_jA k(_I#ceOjZqZG! O %f_,JH.'B8M2N*b1gaK&_މ5I\"$B>x*D; '!vqlM'c=GAxfݪ b8F0V2RQ||u#71A T{ʦ/y Y$3Ep P7-`$J #$e L\q\J2nk1."DZ$r/<+k%;6!I$8&mCɆو =L`jz"o 麡h!L;ߗݾN~mFNFx ""jˌ?i{,&Lo2] Z,ť~_`" jFdNx}QjBϑߎ0!"R#!QRAH'0~nKuOЁL3wRM #tVǚ_;=ۦL]_g>F,(Y y}C~e 0L2Lp8Ã!495:l'wqnAa!_v$Քt`ͤ=o^zT7"aEqnč?:Fvw[Dx;[l!w Vr]d +H4"ԿG3E{.\os$EX1{G#@@1G %P=Ҹ1cn#9Z0ʽ*{⦅qlS~qju,9iV<^f??k8/Ȃ JxwV`Ī(U/PjtJFXQHRL?suUdOh]ַ}?qNEW:wԨ?xkYTe(-4A/ni2q37Qvz9x5NZ&;{I\K>#kbT\vq y-NjY (о{(̍bU aR0H.x.}HGwP@Pдe=H#2hq*|l4KoRNw1Q곝@ :yxZ_rutrNx N^7HHm]Oh{iϪaOiG*;XVr;_1| KM2ڂr 8OL$&O]gMt_:t:Z{uv$B=9 (ߪy>aL |nWD,Fi/6t-u5[f1I88PJ& C_,XC+$ 9?+Oj.\gD4hᇂvABQ% 3jyK:jfgQJ_k}evַQA9mOLq2?,bU }uFڲ w`߽kt,ݺCA+7\ɻ*ўպBTe̿wlӚЌB9Ϭ6Dn0& c⵶i>OB5,D?{b%](8Fi̗MwԀ梻W6&l:ZZ^.ŋa2ߋJo*\>E-t ԬPDVE&` R=[N5w 4"GVc =ܲ?-~|@KvU[$JfÎߊLk-KJic>syg_SҀS!EJx}{r.Z6R5` ;Di]ܖMy]EMuܓaJν=$ʅ#vqR`3í:Q[]1a;|OG\ASTVʦ$$l$2265mٓ)e!DA jo mX.Uz[ilѢ7R}f.z9""CcGf>|4:xETiU3 MF4HK}gdnݐ>۹u~o2 E , JS!'9@U|?cia0eO%iŦg<^$hV"T'Mu^*YA]'qfADW2a~\/gnMchZу I+hAJB…#A&XKI.Q)hPl8]&-1c , D|{ )^S4hmh=||ϊikW {?z8`rɮkr_wgƛlQbQi1bzY$)&DP3JoJ1Z^j9]D8=n_؄b. Gr<;xveYY֬gV{WeL2lqXo˓u0N=<6P*wE)FnPԇ brbN;$͂X-1w$P:!Wjx9DCɊγ5O?e.\9{P䨇2c÷-'{ ۃ MXK̯("ꡊ12ٯ<˖SW&Ǎs?ns">wڭQ|:QɊ|y#rfd,&~K[mt G0,/O}|TN{'꺜ܲCM@esOMQt,ʖ{\E@pؚgViMFe)3ސu*ݸ__85ƾw\Rq޳~FArODW5NPF 0Q:]&:xc)ڛvmWP@ka'ҏNVjC&K2Yk \HwݶWv(qu%o!_ ~HP` ~+F~bt\[lPkDuJQDVPP0S-2 Zve Eb )֟Ym&0g(*:d R^?Bi5(4ŇC#a.Be)[D聧$П_~>nϞgW[0yTa*f RKbD.Rĺ R P {x2ӏ-K{)&l!!5!߻=wgͩ>*k*jTt}'΂vc8p9i.t/`-Z*=:cTMF^P4F1F29x]N9Yes>qz]۫? _| f[xjйJM8QwC4pWa01m!\wenM|TJ S-59S*0l@+4Pzf+̝Ruߥ}>f@rNj6lu0ov"6ʃ>%v8WoOޕn>c^ okt}gs|66TnFeC@e4PZqI=@nLVߤB uOiٯ)޽~ÂqXeQ@ULl @@l-+g[j$[3`,]vD<;ƚV}p;>80YZvb^7*0  RVFv^` ]K;6̵QY&Y]3W;~ݦF[SEk>̊9Unu׽M~Zp-3˛d~sw]v|[(Cp%f$/n=>׎{Gd~7:E8'ü"4}9"9&TzG^vzȪZ6^NzYinQUTud)^+5Zheݰ;#~uUv oSǴ}l;-(.9XM2HR[1oiEF5qMBpɕ%n6K(!^<%4-&^}:E쁁y2Sj^n) p,Z*Q(bS \9FOҲ.6ʸKNN@ևE8!TI4ٱ% ս*#*6M CZz̥4"ʴ},kU7_t/)?,uP=QI)gUo{g~",1rnt&*4bj⺺BBDho!aEzqW[:z\K/~~dXGuJiZ9XTV3socNg9!oFއUSV7Ye,ѹї wzLlI9{_"1BaGǦWmxO9#4,{}j:*'G"ɲ\ (bf'I8Y 6˯24F--u.6Xx)(QŋbߪΉᵣ-/F/[EiN(́@9?,& oە9:tZYD"pKE~sYU[S̞kHH" %"^ 2)H"E{YFD@U /fQAtF@XDRg\DI i ;E;=@d%V[mAh!#yCe* KJVĽ+A$ؓdPQǥ:ﳞ{0D& YbVX" +KAm<ݺ<^LoDsXjV4)Dxeb 1𡈨/4'vJSXkɽ9=@E,%mlF0o;??Im an40d,bk% G "ŭ+{oXrƗlcUzs$|F0uAEK>ЉNn EX/Nϒ ? u*a?,ذ!Y'Q>e+Yz[޺mv{Qo):/3_Im |6`=m Korz { Aр )"a QO#h[DDHDSADDUBT@U I!S DRE'(2QĚ /dQPQcX|5FvMj嘒e ŇI/opy PSӀ4$SS(&k0',P%RKTD"P{@R"[ASa(%-dPQS,EUQE M4DCA<AAAADUbMATTP0ERSEQTw JZG%"H26)"  %(j(Ղ$#~+`w{6,bD`s Tա@z= PT $)(@<ȌfԜeuU ^Y}>"}>Dí3a1@|u]M,EQ:(ԙJRL UQ2SPPU @Y*-"Ykef`JPDUDadRg 54KDJtkRXp[Oގe ݓ9Vi&0A~<(e3iF|՘+ tLReژ'JTi&F+Flj M!weٓ!Rm$z nXT`'.3Ui5lbtְ1ғz8()(WX6㽡>r6`e8By?_~+ ~=>ilzx{Zbj|y~B` C/wkY5$ %9+RƳ$Ñed:}fdQ)vgVݶ_Oh>/*wo=w='f4vRQY}@1XXDޤjq?UHr49Ac޹*kHrwߝ '(ZaFCZa1ՇUt /d`)>zՔKj=g6k{ ޒ@Pp!77iHa7層ށHCFEem"m$R/@<}4l=@EAPlZη]ѕzoO'()[QQnY.&Rp}hr3H =AA@iX`$:F,ҽ1,E Vt񢦄U+ߝWħG}.C-XRޱAXa+ϟ<%: %Q l3*5jn}BqC*XJ V@D:c_k$.,0s!au%ArL!6PSRֲ K 2_S6(RVC%AC?^SC7m C$Lqy D9sO P2`T, k#l((j3|5o Hc:/T%aEfVܨ ) RdZ솎SvtyƓ[`]8B ߛ6PF4]$42HTE0AQHg{!)Ck*KTy+&q'@>G,1~Š#ɷn$ 's8\ T a$ BNrBk޴lըH ն=5'*+QUg6)4xRxzЂU)&Mb`XiQ4'<}C;<ĝ\P,ayfP6J ݯ|M+e`rމ%H"qcMn)T٧=Ft۳74T`xjHQ[ U!?#\u~1L%Ië|Q5W>4#TU=hcJ8y[%OqY˧[uOgקߍv]^Rc,fPE'J_G}XL1=D8+͔ȟɟ'yۈr^PrmmYw>-i8DXRZօhtL-aFbf*c""" RRTQEqfU+e(,HfHPp3-) 61B&Ȝ$L(3) eʁ)i%#%%$b""u Q_+¦2h(*" $)pJ]xAV1~`\}~o} iLr@(l,UPRPǽղդˉA[l @,a4(JP9%WȶKaRrAڋ)h`F$HnN(h\3Z2 * )!P ֢A!X* (rBL HUF"!+ {U! k`VܡUrUrј'#-+[Y)9&@ JLR*jMAZQ3$4~g;*6 BH AZV2,ru@f!'(HE' v!Jh@l\CL Y"TR9$4VQFC xw{289(scr⧆LP'VapZ )h`)xE Kʊ#RmA=4ȦsH - Po)!ST D%"B))" 谚l)R%6!B@*tXDTQLjc"eUKQ +DHaaӓ E-QDQ-6E APDk^Q"ABb`K@105WSbKKKTÍCpユiX*"`BZ ǘE)54TDĵHCa i6%#aEUTDA6*&)J"hR(j!"9ʇFn=:T5t%f5F[FJZFgtڭGղ ^ X"U+c'33tWr¢ȧFQ[d68E2"|~$¡-) @JU| cfLO~0lQJ?lzGsBelS}r!2u*a)zmP?:h%dg:{>Z99<㔟KxřPk -T_Zh)ֽYen]~Eו+XQQ2u"ҋ.*1~e0)k§uN#lM&2= с\Io^C.sXvdc ?)4^gZ}qX̲il.Q{UHG]cHx]' c"ȢY!SʸAf&!<' rmC7Lq3LX⢘w >oO\OR*okObT4 z?5B57!ooGSl.jR>]0f.sdXz(XcElKެ0`̏ڴAQP^ ReCFɹ-jkONv:&c]}7w4mnFqqv'I1T{RlpsPcݔ}Nq mN;YBh?hwf!_o9;?*|%.!`ÈC%Uo>2t} 3JEL1pUū()}(&e4q0gD=fh!M0$*H2}'_^IkgQ87EdDXC[ai(`&/.M_R!"Rp$ " Jiq!Oʶ7O ߘPUP}M[eL탆ՕV:tOpX)~,_#)U k")vu}̱g-~墔=S$~U*ÂTU~Jԃlb;%9*>o PDC'xbQb!dd=}X2;jVY/TR(u%胕J tޟ=~22 DDI " MxP']ztk*5GMYg4/ڲo Ne]KԾ&;i?S7dݟ]؝7n7"XكK품.ƔAedy!ތBI4;!{*-rLFY)Wu-1,G[R,9F:cdo;\f̀D2dX,!e̻dKIف56|hrω[jx kE",̠&0%R ,䢁m!X ')&Y/8 P;0^ViU _d/ PQ`RC&hyNY_=.tM~}.CiٌPKV PT/U" =;9{f%ݹd޷Llk߮gR':]H5pbDaQ`|X}vt<֐wnfB\9^LDF:.i4C% 0.yl5 )nB_~yujN9I=n_GKH ca:]z6311ß2KHo)L@j\%5bQ^L:%2(LnQ96o抛{W2φVRafxSLnR~@FVR@ 1TN %5d% d*J0AsR7˴sPA|<3Kwi0m&Nb=/nң"J oi ,OXaµiDF-V[RХZ"0/c-,TM$>0i**0TI!M h¸G>]Dq(plcuˆփl6 WţD y*mgaz(% ER\`9Mo'[dۄ *ڢrJ_ڱNm-> 3g4K~v)o  $X}A~'ˆ9vOQyQyٵTkQ<ō>\uoPkI^_|^:8A;! ?e E+s;ozݳJFdp;)ĔK#rU;=(dTDm\ LYqڷ$$@~11<UE":X%E p}2: uȫrMCdߡy#)^a۰":5ѹf|!bQ `Q))ɓ3;z<8o/? ZϽ4$߱^|YSCc\Nd`GAGr2F6!&2)^w*2'HżULXpBJ@^p_6n-F6W RfV 1 }l!WLrj xuӍy%_-}*$ 7:jU@ccKr#=wQoG <^ɐ|'=TcCm"؇FS4\*,t5mTUGXōP1$wW h$ȶGvGvo-kVp?2L 8^qܵp_EmR:VwY>h*T%9]\av*(;d^y 'J:/$Bi7:H9bhɎauMf;[b4"KtQUQѽ*Ӷ|z oh]g-LYIQ^zy,la"͝0Я3.zzoLD\R6z6_K4B;i8~@/b>L8^pf6x/ޫ>a,("MlҠyJmҴbv@)AQ VFLH Fgɲc$궆LH{XДȕ@Ux6qX4 ?eTP%z\*ۤ1*i+$@͙4%'LK;"ޜL۠<@*GGI>{ln,%[=랢Y$ p"1tk^IYJT󢢪 [6;.2}V KHʮQ{ jPA!myIwx|.G Z+^ŜwօG:fi (/Xɩs VTp큦kg}_rY5:==qNTf'o.rn8bGy, Ue<`LA~ 'a ^އnB)@U @=~-kl/l;P;Rt+saeLj u5g_F([^r(8V}Ssu],3PU1*sA|klGqZu_1Kʇi I2pŮv:?ִ>( Yw I4LFŰB#>rk bkǃyeEtll-9jZW{&>ĀPbnKi?&U`Q>WfBWP"4eqqQFQC}Jp/Z-2GK)Eo04e[v'm?KqiX*G1J-)ҰiL8icUė tgG5eAߗppw^rT_ 8eaAkwLIg53E9fSqtOa:HI43@dVr9]21ZvFg1K|@[!,7yN8~=&.VGz,Ν=yIQcMJ. Nœ?5T~W1{o[OkwN2aL9ny75'YEΉrж}HdR'e.,WC ͥ Q~(dP!Q< f`H&.r9) =RA1._T>wlOi9݄ 0P:.02V[x:[{g=:_~AE؉STmw< -FsgaIBP)X BJ" @OCR"%<]#g>=LH|rgɷuxgoѯGT@Zo[͎_zi4WN~(c؍~"9 yȯ\SY1* bC~ې1?,U@2"ϔۋ(cL @ =fwފm NS8Ζ`)4g]m/'[n9LưɊ ȭ uA BnW2PV[W2ȠK((y@ jF^R^cf6ɘZ7 G-Tkj."k;Ó;)oV+_wZaK)+{qM¾3V%Iw.[ߏmk(⎷1o8o!>8քZQԺ3}Sz{<>`䪷_~Χ{LE1`Vo@ZӃٌ}o'k$urE=yЦٳEcD 1} ֿR:4 %g窙DWf[`Ϝb^x&eei;,<}P&cklDBwrXŹQ2) {yH/=oqmr;p;ϗ {$˂+nx7N"qʕzlxQ~Z~P:0>f QD<~͜ !`צmcjNh089" Pu ĶCib`" z a9Һk:d{!Wze|w'Jzu'q' ѷ si){"|(Wh@G@G{,l}_WEʔky 6AokeK r*QH ň[tu͙yJ)1ՆwZI2}OP?vb F'u:%TL Ϗ!J}i}ִ_B,Cd,W1 0*B‡NW{d{ XKW!LN* FZiԋC[[.#?YǝT\:8/Ӟ1Ci@X 8\ĐA,UP*[1% *aoPڊ>??6_IFzXTM &rF5#f4t} U~Le}[J9Ԁv0. H^ص'2Mw!xb)?^vITm^mYՙUbTQpF(%D`opJUp}Қv z[pK0=;]1URC.뤯^?KխOV[mӥn2BzNf@J}t#ϧui㠍YH\ -5bk=F$3N{l_cr\0'^~~#/㋽ί<`EW糂]V`HE2Ȇ_dQME}= 1 `%&K@( pk]A<<]"{&j*Yb"uXan>4bߙaRPFX:3b jQ]{tI'ٲVM͉! sDw1pty4z+nR.7/m{z ts.ܸCh3[MQHv/? 3 g|K~$͔ٓ۶Z 6{POn PGeP92ͬ26۪u:<ՀNSFn3)!'DB. PXMEQG}S¡סćv!'l8ujc2 F|+Z\: PzD"qP ?T)BpKO~X\:qNRmﱶӴ]j&۳"`q0Rx8-M@0SDﬓO `UT"A D90dO=QHq DA#:M HX2y?ZbQ!b `9%LZPhBa BXuā 3,!7!f=νngDU!ЄsL8}bo_CT 5 &𢁴*% BSҔK1ف'Jq`ڲN;$t1,AMGFؽ2G'!~; 淊BʕGt%P0V9n䟍јb?鞮-jKヤ=pGw$ $ &8 V!*(+2b݀QE(]j p? >?cpZ02(9HhPr!}(SF8 8E]"D%V!CɭOӅy7Dl,tPðBk&rHڣK 9Y0A] נ d ]D&ija<^MΓbZ(șAB tڅb)Mk,2E]NY29X/hCq憄POV֬[GU/kV23hZ S2 NS$Et8'']u qm`1Ё&ݻr+A?5TW{R]"/#_ V"rڻ1K[ǽ^=tg\!/Ӟ9wL7L PF-{ PAץלM^K*hu~G~і(-gݻV[:a/x<}+Vի+[BUwbu| :asuQq6QT6}0ZS]׻B/Pe_HnDq2u )G9nRr߼bgrFї]/kX|Ϸ*cJ8aj{iM[Lbۗ߳6/4}>w_bNm3(/79h.O9ɿk8ex_@VN{t^M+;꣺KQm2B4(h:uD6sbJrG`ȧCʃ3xb恇?~!)#(mqfu' $xEPS6Yb\.|?'[ 0bH4ob1ǓٰXP( ZZݯ?|dt L,57CFs,Qk V&6?ią$^M,Vu?Wkoxaa4&ΣdTrObPCAdtF!2qHrSP?Bzn'ҙBTCܩCԝO6i _ ՙaC LlBҚci&y9?҃@x d]hƙC$0fI7&?GG:?şu@=S5_]x;I}L-TrAUվ~;֓(?tPϩ'>-}?ed5[EK'R5K?0c~ A/ݭ(8d?6dL9ܰ\C/}Rx [ Q9iYTnpkdkNweTNARW#͛npq QEUQ"UKUx|O~i8+j]6k@l7is iۈȉm2! 4"W4ea6g(qTx_oEk8Րu;kqY/z7`UC?Z} 0"n 5ə4wVahG63*opJnp٪S?6=Nee?bGx sⱓ]KZ`n 2 oC!c.@DA!Ć#(g*6#"_]^3wRqWva@:F=V^Kۑ1듕bs8z #C9$tYJ XC{4ۦ?n@epΟ/k/w)Ewò+~^|pP&A \@(m ru֪ys=:d0#ÉQ:_# M.c2ʩvjGS4gEo+:łw6y00A61~U(G'z.9n Iʶn)ocr7}'T'l ng -FGAnk"j)P +YuANvoטݳ)dk|'m$F A Y'f8jٷ>vIF"Ė_'@)k2QDK9\g A8l-(te i,-#qN0݌@mVue$@M>{?3s7wۑ`0UA"AeO"'7TCJdOBOC`prrC|j?' &ډ҉ZeA,>KpS˸n#v!SCO#ZF!2s.>f eϟfbiXA`B3((^#'kJyzdԶmI5!7hzo|ʼnd:b0r+4HT聿۳]<%.DodXFZ)8sk?D܂V])E5ަoG0y+˿ 翰,"i&YG`(/ǂh@D’I!PGc- cx6hy[υ{׾)"CV)]*Jc O,ٴHEik#4n/2dk&>BQA-HB<%dOE>8M؁Z'܎??;\ o ^d܍2Gh!uZ?'+?= H1EtI hZ?'< |)ڋn)/OPS?5*Tfԍ!ߧeҍfNoՀ?]wJ%|uGv"y8pC$Oy>åsi?O &<&]ÊRWmDef5m|mdN 9m-#/ 4ϙ"q<ҡm`k7"*Ę,sYa0M^-;ETs,U]Td޸) |/W[<B߭Z><u ig>\^lVBWBB'z$9+l4 f#_@y*URtiK:;> GXF$yщq,_y?먭Ě ?-gK5_W][^quQzv+N iQ9B)#g=S?>Jȭ$~a~msalE@D "g(3OG?@yv?e_K~8}mz?σve<4a!uIvI؀_ΑP;RP-d @|1+fhaT)V n 80iV;RN {>o^>!{HѤ&S.&d'_uoRM_@i!}O k?e=}*tSgx+9~o%.h|EӇN؇6k7ZSg CWz+DS R)d]Yb7,$ aH~g%{p?cuNF?(`@: ϑuQ<O@[in+ė.P}sLg5sSӨ-? /K$<1FfyrH1B#a0x7cmTA H! eX.K>NxGR5@1a-伯A+M_ugW$;n|݋-ˢZ14I~cM;⳿L=dS}~>Z9?C'{`;kχހ_ߥyv7_̥|fN}Xٞ?B('[KP=}yxj O7Oc[,49>a/7Zȡtia$Hxa)?(~bp7Fz{U.}IG//Ͻ6+g<*>?]Eϩ}y헣S?b ڪ9SW/5mԿ$QzAMҿڕ.2iDl܌e{Uҹs3Ə$:Y9QE@tA:P:?w3IXCF LW|;&7!j;rzhnJ8OWEFi2ik*]4T59Z˳$XkݐHFuQENN"-J5GR+CCWnvVNVPKХPa&eUwD94IlD3ڧ7,Og0ɐPN%FN*d3˺q^HcP'o~]!وpX^Lj_0vEl[bҴ<}**(F횇,T^jՏcײA\|Iʁ?pH Jid(?qGHv/>@@BCT @>`}(8DK|OˎyI`'0GۓJG)_̡TKfSG=ͱBS34vbWOnX8NIߐ, tf rY:԰Aj-l@VaQS&" Sݦe*SW~ԣEH'rJ$zLJ#t⤈"ۭ2?P)*VZy(}ZjPf* qlS]]6P"9] . jHq"'%0 dLK!6T^>< H$R bkQB/vwr#Nb~A%UYG8Y+Q͎%KKߗWY!IF"z/DF#,ʬ?6'z0xI1 IA3߽w A{~`pY2Z jHS@aeT0k_J-Ի4lGݦ<5睃wnv#]Ҏ#Z.Lމ5!6sP I!pD4Y_4 f͌rtnW4#yBT_E㮷6XknǮb P,+q=A@ @A>M6-mu|&[}Dj@(^mfn(Oñ7\ V˔ mI^4&×g({ml2-h> qϮ|pL3҈!4uP`2,K;bTrZB@'ZNR'ҵˈ1 MMO& 7rӳѯ~uzidmGyO,ta8{΋N9[=c8J r^ʣ|{5m`snt( C?1oq rp>("; 5MU0Y!ʂFkrC\Žkl{R:ՓHg|*&VsjSx~Ћ񣻔j_dѠ9+|B=1*I,N() CPz"95LKm״=Qg{b]pAOcId(;T4DDL^v @&[6Weʚ&k0m@ sVg<\Id=Kz^Vg|J׻pE=H^04I+Z'/-Ltt S.ʐD?p:8z?kd۲A%P<ɵ>g +-z@I0 ߃{X'd!\`u m` /y=59ISG#)NzvX[rf^r —ye*#)&hK*슓A&B "(u]la2U)ECS!T{ w;.mvi ^{mϣ_FC B y#A"P@HǭYvFOc9 UX&Mt D_)r:43 `pMoq#YnI2L8{nӁظ`HU6zByq!AbYH]<c;=A{X6$Ʉ(GS!v_y:d!SA`I;I U\}F,y57<ōE]V u& s|zɶ@l\y& ǔ‹ $)Ir$"N7B75:f٬"zgn:zu?_޼1uVO>&}B_Y4Ҹ LipҘ2-'I} тhjbU-"QK<}nlu7:wT5a wΐgNWRupBdC~=ewɄo!I2K!{w WoN<ګ&4gLP6JI̷cKrL#k8 !74hw0B0UE:(a)mny,swwOGd("~w6*rHe6.6SZj%b~=jUE{!@UsU|EO>\/cW uc/0w.ג{WMQ d{?DU@&P@d-qW{sw;G˦69RY}n$:hWA(D $Jv.L,`{<|W]> !ͻ~>J &q{[οqZHCtat|PN>{ C\7<4*X$*T\e9\k ⏗~| Uè:IXg|\[O^Y+ Q~Sꍮ[K"8.|6Jp|{v|^f >Afܑޔ^yejDy!|$8.IcPF*˰kqti\ʕA\:H=)t4i<=fH:7ݵO7&[n?m.*z) yׅ}{yzHa9݄;$/"YϛqHm˿pM[`d;Po9FDջn+^yrde1ȓNhXlVG}UBRn;>hblD.ĖD(DZŢG(&_tˊuݡlϱe\gtHlٽF.]7H~aOsO=N|U)8R(ϊ+jMyP amId-b.Z$IQXA4ao2j6J,1))|ǁ~-3u9Te dgn =*76GKnH$O0Faӽ0el7pteX`0nk6}ĉ[ٖYӺI݊`9إqzQ7[~`>8,nI6Ÿ-d|Ԍ 5J1܈fnmٳxmj3iLBbß>J30}mNM ]R9]6r<(sۧ=0pD"!so[TW?0=PjRRqK?yL"};'b>]K֌1F@m* ^^cXWd]Jdhtng`|E4fwL=~jZFi־D0 .#N:kbb'Քj3`X/اj.s]!ןxJ_'&ٔV@pS{6-^aBi6㛊yqɛF޳z4u5q[5X ' %o^2hGfUjǗ8LŨcGOkTXcjDe˸⫣{M~=nҔijw3X‘FrOaP$6FfPW&]]bsGfG7[ŹԝrH"Mv:sWq˥*}3i Xq+bCr1LƭJ^pvBQ/85u")B@`(fIj=>.>F,ʄly@B1l"pTU>>n;`}3X陓RVA@}ZDՠ2mz `\_6X; E,SVHAD~ãI c_-LAJ%uI4vJjy08%{)# M61fj1SQA}l*? Er(<yukz䝮$I1ϲ4 #/!B𝧉܇L@H}A Or;>^p}ϡfA$M\n?)z?/'{ @R1D=<ҁ~/h;:(+$k=R q?=Ǯ;O= k>Azt;tvH  usr(&`sn잆X@,[UP r`=:f¢{ˣ.{۞[aox:{nvm}anJe{OĘPVem4P[U67-Rb &Q6fM #+x۵i{֔owbVJ$ziZA8)gPC2MSYtus9L'QE׼o,n(5M!ց(=(%0^] oFWm׬rvru  v@Pj i V)@su@PpԀ/[S ] ׶|i]Ͷ1y:x L8إm@w- LghMgXgaonu֬Kϲƕk ޾ mc͸mg8]zѠ nTP|0]o}\e}=}go'w{}痫>wsgZM+Id_fdŵ2sYP= (y/wop YEW_zڝ[8>7j]Ulrow׾MVr:q ́v` /AAywZ%/@ @P{zyW5yzw}wU{]ޕݸ۫5BoYSFinw' (k @{@}۶}w(nwszo; Y@Hm}B6ּGm,{5.;s9|^M>_#h;q}A M=h8Gٞ'>(J{t@tݻ{}}`6;98}}VoCvg@ h@ &#&h4L&ѦO=A&&Mɤ'2b'ҟ=ODxL{S&#(=GllQꇦ$hCFGzGi&$H!4ѪMOSe=F'G4i6)SOP MC@ HB`IzLSi=4ѦڧhiHzhP424ѣC@ѣ@ڃ@hѠ &M # S di`)bzL2OMC$H4O4HКz)&==SIɧꙨj2yM$Ԅ &42&z MLjfSjdOf?I#ڣ=dd#C542Qi:azo?Co[2qbf~CTPg2~G> a0\yVsYl|V s^9JV@Z8^srRhwY:+wgX¢Lwb0?8gA_g _]9ܞc D7AN:LLUU7@: 9;_cǻ@TP@b 789ޒC) [ ZO/Ңi8&$M27?M<>ݺ;s~X&-&u|@|!($~պRr"q9?+B|ո"{ߛo+){DUAEABX +HߔR~/&=Llm?=~gs}3`V IR,YWF4>?s;>SDMO7_Y)Wl) '; li=@55?VdA1@ HL'> /Bu˜9X;{K$q1mQ6QGv9/ف=o6Z_⋅ D"BDޒr5%Ɲz)/ͱpȿAPO8u "FjBSLQƥ[ukmYmf ۏF%^nմU8[F9h,Bʺm;2APv|P\$JhNSn1t٦]*ݨuy͒/J>:F8{z(?PK Z:xh%<(y+8a BNNq-tߧT*'̊O-,d> ii0򄧄_kgڣ(@T-_#3b TS{+~JL~Tً} )v8-Z-c5M,w<u%&pI^)7,L'#Q`1UE?bs`yCVw4tF`>+'/%qȒab[woyP7B\Olv>%Nf'+cI!X!b -^(p4lX8h<#w`>:/">($*gLi=-oTŏ" DR`]y-3s`%kz;6P{yJ86.'T|SrGCT9,x>.^wU5pIp7^( 4!JeF 70S:=.{_ݹM=1Bl j]l[{ft8GT4ܞeƀ ,dj0pprƯo3y7{pzq+_757SčaJ?w2֑RGe'DE?VoE2 (?RK-"ͪ #kcĜEDPF F"-6ƅTEY0b7Dw4bP"((gȩ# ģZxV8SPXATpPDE*i6Emg%r3a]iuY FQ MK0%lj̆H8THX)QQ3\PA]Wp)q^pd,QhRPZ$*Hݰ8Sd Z5\eԥE fZ8S$yWE rm-u7B]+S]s[ײW?@WZl5[A123a88NqgFc /zK紦ht~{|ݤLߡ4>gZina\baCwu.у07ǩ%g ǽ]^ 4ǠW_ iAc9@}K-bm,̭V5\wσk58x (`(*8><<<>sZ2>MA$8;ݪ sJz/8O8?ҵWAv3b5ܼj3u4DEQAdUBP4!3QVr7F ;P)$ .7d( niMNP:04VQ5:&TR1{)o!ץDqv{>-{zTPM3USMPTQPLRLM%TDQTATU ¾dMMea_La*w_chb* ^TH-"(J]. afjTN՚@Ì08|Irip;|s*3AT6s?b18I`Gf32{wݲWl\տvo-tyب8J O8[ݴ4!l`_0V?xY!rdHk:ن'l-j?u$IdoD<1`;H|q{NrŨVANDx4K6zhbN7o{0*{]yIʼ7|ZD@z4h㽫S@|tGv}5⺍!L!rJ!TJʮB֭.a((+ q1U2{*intݎqcǹ~O:Nܗ۬@ x>7g҃o7㖽+^;klxU7HAD DF. EP c 5!fHWəXJ*(,P0B O_%=}+Y'G}dS/{sP(4PK\) SEWj8.Y/0鱐eRE_4kspd]7U~> l,׬?j̲Jh o{sZZ8{cx:U_3~LRQ.spvLJӗ&4kl>ުm(c/+Oֲ^f5ݖJ*^F 1Q{ja[ k01b,e*R/{fQU2?ˍE>/D, CM*Oh{93F:NtĚY31?l>>FMz8LP$B gዱen٢wx68UQO˸$H)H$")lQQH*"` i5Q-e He)/kwÔXtDUn0X*1nKEXy7@ P((,D TAdkvJ*5}~Tp҂CXXRwWKUKW^.>*l{,7hv9._W>-dv.2>xDþw#9%\9Po!*)\rJX"kCL uZ@;C(d#`1\qztaoMT!oX432"MD~^Y3C+~Eқq>& J*QTiV_K晌.ZNӫWd>;l Sh~`A*eQv"*Du 6Zй3;BNu_S9bwoXgiwG6ٳM&}b4; o_1ݳBUXl||@X&Լj4kY|,zyh+eF;|LP1jU1ߴ,VXeC ūLРL$YCMk;La<C`~V>d䚎3F+W- ; ` p KfZw;ǟb<6rtoJA~0+2B e9*o=B ЬvY߇W?5~?;b ᓑ n#:"r6YEwkgK3-h7/*Sg=3]'2`6^H5@skt/_(S^݃@̑b:SJDp~};t3he:#+[d5,WO#I„C1H.0Tg1pA,X ABvõP NNN?0$lg$ K<60g)[_8̈́Id*G{tcmu f)Uz̉x<ǷvBo`ACy qX&ω@ UE0O[: Q/a[\!k[e;m93q:DDK\~pNzR`D8s$J>~G>/{TI]]gc H1@u;.v``"~g-6)2w }t()^tv=ԩŒƿɏjWI]錣T*+OԣjGܼ .-J6(~VE,DHQ &X|[@FpUh]cGX?5|lT<7ŵOB3|uUd\l) ;ngDkkBi acXT1du65ڢ #YGԨ@eE(ZfP8)% Kyx`x;#l=sEb -  >n%I'nRT]wCx9Q}n ҽӂQW3kFgG}yz ٿ*vJ;r1,`Q;H"Ucz4jMQzV 4*yZ7Wp Trbƛ4><;x[Bچf[^6Do8T5$G )l w(1{N 2nʝq! e`V `)LmVBTI[Qۼ\b/ R+Q§}Yk5Wrw\\BS8 Tfȥ4Nsgsͪa vh7W$;¯I xBd#cǁ3*x&J ;`}|pt9jK.Jur!su1ėZsSfs6=FeQo`M#{'>B Al(ٮ2WVkrDSH(*e36]8=7G0dڞ=")=aAs7MK36}"ǷKO+dn_0KN4/aAS!j2K#`t*l:\ e g&='P49]kAѬn]>+.[lNDMjNG:(Qڑ;'&iMPjfJFK6zYp_yG6_Q yg J:~l_goE6!P 뜃 lm8gN^[pb6*Cs(Y ''Et-|9x(,wk0 `* +G8,8W]s5 .9T [A9xCZb nW_hG#IB->~ Av&k)$o2W]5f5PGZq s߾dXoy7|m+ew2*&}zl'w7;(TQ<N x+'ow%CEY$X§ *ZZwҹPXmzT-FPcDe`%6*` {;~wZ^Jߏ"ytBBq6J!38 CY954mo &`s U@DH߿\C(*{%WAV[ǻt4TtBj]9| ̐XbK0 Sn!fb&J2v NR@Ik +5ŒuX6HkLSXT3+"F `eFZr6q6e\ӰbQYfQl9VQVJU2i4+dlX @ [E8KmfN8YP2 T*(T%͑Q P 8&I3 T" meKZ [AkP\NjfQ [ddR[lBT-*IJГad 1ԃkoa,$F2,* @X4 sstp[XptN6sAJZ5j+:ɵu*lʝ 5jPYTV;<$h[,*+љnУ*JLW78U-Ҳ$kV@q[Tc"*;hֵ79jU)f'~3Mє{0jjP+\pˮf Q-.Yı9MlV ;ѥV:л'-+VJ+^\lG By|XiE(NEX={[=+cqdpTN;ϩےaT=\{.M"B:*uR-%5}_WgH4mR,[Ks /?35{痧9ug^mQg/^gYDS%~IoUS/.\(h9=tAL@0hu X jêE^ABN/:g3ie\"81d^%@8uiD{cΊ1LbRل[8׆N'9wC93x%/sT;kGvIywY׶w]FdJJz6GC:UK ڡWrŠ/g[xgk牵lps +UEk$ڇKER5ULMB$[relT׋ZY#-,š(OndcTt QU<-~"٨RĔ̐qU--O"qUδtx$79^)^lhx7ۑ^a&Q /i"ꚍO CSM-%V#ɏ+NQ,٢RktSYu])^Tkb% pT>"}oR))`)qq7֘#z 2@J~~MIin 3Ƅ^~ٸN3HA)n*)G dAr WU]ވ@( uq q2 g !|v\3ܩr`&$$d|,w??T$4&iǹixu 'Dg=~ݤl3:)=4FaxՑ ptW=MИfyKKO@d'_`}YclA# !%ąBPI*xN-ڹHo=Qhց(xPr.H]#.Ro5, bظ"ue(GD0ffҖ99&L@ڶ"B@ ]('0LuĒb@b(/!Qav5}繀aﯗ4@;}aqz9{6ξv[ s-4q(]*/1j y2`"L(nRTh#{L0 S((&%n 1檀cpbMPN)4et%(9͎ls:hML-M$ SEUS65e3@BvLis4J3&k؆TJtIOwfcY!%[i%1S1T) %EUXD,Xe&RH%4־iVb*H2 Yy> ЇG xE}LX/˛N9C A?Js[l&XV5lcؖ̚sw2>GZZlY0Dji=qTwO1 x[g(V`:`l!JAIi~4w_QRAB HЕ" yMZl`6.ᨖ10~@B(y:7mz^>M u2B R"+9B(?Z;^(|9| =iy2kb޶rnAǵ@BP_F[ (S?1QG}\ݶʜU Dc T8J!z\8@ xkP?3[aIU@@B#P f F^|,Gl2 @0o7#PkBGb)lZ``lpA5 "}I†@NɁ{x'}l2m x`圸#{=Er R osF,/&9LHZYU5\ ]*oѱeHBw>Q>xF~\5ZF!{_`c}$gDӠ*t* F2R2Z{DuΘURiX/-ͳ9$=;ؽl;UDK,k^I4E#(UF`0UC( dߺ?q'GܜqB*:b=8[R\[A "{YU@hl@f+/q Fr *BV :u:YLj9D .NWQjh< ܅sĐlʈ7"PW`E1;'DX `Ř&NÈY/$̸ވ>Yi~Gie*2@ti%ḵv} Ֆ^$0R|C7%Sc wM)ABJ[X[#X "ȥk1lQ(`T* @ T(8q0!Bu1*Ag 4YKg5ư+3KAHN5s8nŽyӆmm2ķU.*Mlc;^o8hд7Ȩibq0VUN6 7A tE{xڝo8/ya)VpiR,eT+1*X) A,m]}lYUl}XP\.6WsZ+D8Nd9)6xqRdgHeD;ޣuˢ'\VJQڞB£T+ *}(fIh"@8Vrٟ=X~)I?ʻ*[ݼV,H\Q8ז\RҡnXoߧv:uz:iٿl*H!.ȄɅnӲwcUK n@$j=4]w*0EiAfK@w4S蒌IARڼr4EY̺˻u0jsk "$b֑dЖ(xT0ƢYahIrKm~v9>vz-j5[/ϯYnߛPz+0S;<_n) %QY׺P&ND^JsH;+:eе0 k$E%ݬBn dE>?_/}tw(ڣgIO{Ҽ ޔ%V tta0X *SHH&M[=}\@2Lp/4^\zC'N154AUPHb)R,-Ӎ-I`,& &%aסg\i4ɑ=ӧ(5OZZ XQ'"ij- jCbTY$1L#va!J (ݝ%, a`\DAwK( HHQ$ q6O6Fqd.' %q8U\leb*kmeQiʢOiUPD^ƬvM\m^"1I~ѝɞ"j,ot$3,煞S 'cBidDtv]~'5*z8ꦜ0=-WP$ D\ÃUCԖT(Pf3pAt.H?k[8L1(( Љٲq6:{ zQEE6KzlU3qƧR{s ^R3,gӭ5 {f j_EC09ȇ$'91-+>\k ^ <\* Վ`x1.‚0H6GhC2wwJ PGu/2~9৩Ӣb]Y{2vI+)w* V:&˾" ^@hz)ױQe 2V7aN8 !*Dg{g$dd!P2fkWWWhjKs#,k!b6HwF<:^uvΜPPQCkI4ڄn Tc:2T2I Yjֈn#aDPya_԰ʂ}sr30CkOCwy}CI!-R^wV IcDjF!u %’Z -j[3XmUQͯ˿vk”Xp]>0ſ?"9g(D as:y;%UH-@kb")+od{4.VzgF>Jbyd߆G@PQM KQJ&}5Ov=V_te4J;v2G 'T3Ę %zgGWoÀV@ ige TJ"#BbcKȩmuDlZPQ$;xo8pzO8! j(.xV򽨊D8Q",[et28QWgnJT DfG(&MxԨWgL lW5X5Kƅ7mA)%z:yUD4LQC[7p%AcԖ%tDсt/0o@ (؁ 栘3d@` P[ -`ݤ}B.TI6Hbfˉ4yrIz+egNGڼ I|]u()$HdF5yґE:!7f$,u`J#{Ǒf.%`doPOldsxE~b]`T󑊏C)U*d˔yb6) c>.M`u dZQc0ekлTu[ZTlW͈ ^)R UAp /#>*nS,$'PB( (0Jϙ4NTaܐ%H%r`CF"A͙Ǩ'kb|n|$!9e Z$T}h8pxE!g(|ҸO5aPNRoN=}7 l#%"*% <ٙEK"bg+),banPl Q?!B@)XC A6z2U x^Ia5_Ԟ(6+P3/ۗU`y*X0j spSf]6Mܣn<*`R%Yrا~@1)wPR̺ HP!B7)<1 fHc\$F*s/DNLݑwan+aArIE{2eǎ;>^mRr@UU [ ݛFeZE=Yf% (@$̗rPX" H5ipŖ3Ks %A1*Ylի}9Pǒr_|tr˸wG7}AF2MV:zKTQgnir^,r;Q̬uE(%Yꆋָ y8$).zyWugbc>A"J%2+fB,6"0L@-% 1WL~2$YĴkWkp1{|z3 ͜@J˱ w lќYQ$, $G5^+UYQiP40̭(!G%+aP<S( 슢îM&XpiNB ͒u/kÏL Q[!V*iu@־ʨ((TBΪI&s=_imnP2 A'?W-<\jwQݍ1vDŴO<ꓸ.d|Q$C}/jIǙZѕ~I9-rB$I9T&d]%8[`Ԩ&lҦؚSSr ӳz9PheMr @auvYQ~[㭉k*ڊB:ܲ%ߏim9hF4P^yZD=S^q<>}(o߆hikTclP(cf>}!ϑ_!T2UFϠqo3l+U9h sDR>Ar ä_[%gtqH,qL`NܰtmKLȩC),"^ڋ] V;;xh`J+0Xj1J-;N>`kDK;$|W+13йӎgzu$H$q#ab5$$0%9rYVKB-XAWUG}cڗq]#$qS)$*H,*LWH$g IPT =5ݣzOc+- I}s9 Y-QdlG-2kO7БDd eN!'Ha*"(s)3uQE2Yd =y(;|ePv~PAA- &e[d ƿ?<`sN@Uv$:ׇ8|Rh1) _f߹8rn Q`"( T J e!'nD8utKNuш4<}mYd6 V#Ķh) Z'FF:h_ӫƅP_C|;7n}kBNG>NHxI"4uOBr^ "[Fu)!`*dԖ2owize: '~U#R9Dy*BCj 'dWlǬiH?+u<6ޑ0K)|d+v0TsT tE(bUQ͢)I΋R` #~)FfG%- nZ./"XU Ġ))m@c-8@Rݾs?QB&ڤb_}{Y;&-qӳϥçw8atF7iA3 ݖ/͊xJsUUG)vh5퇃fkpS†eF׳1GdQ|gƔ:PJ꾁q ݈jUsZ~/<ߎ2@%03QoK- ^E;. AnjpЅN({RPEZujeJ *aT4 I|6:C`aIY*Y$!Ҟ=a8cvdM9b'io5QHh@x뗵^q;f/߅I N;T`t Ru!Z ++\§*~:p (2Oz]/ ̠3mDž8] %%{FdY"?fU-^N0eSezoTQ=3jRƛzUQLWO>9vjTDZI_[7;TzH]ԝ|+tٽhS CxRj?=m5_{2O1TJam /g%X9R {TwNFj1IP bAхlPӢ5Lܶ#]#ga08 ** ?v&Aiӫ֢,_Gߧck6`:idz-YY$!wR0Y ΗICDRjkNL%)9Q|@' pz+FUs1/@g*"^a{x8#Y $,YM3uX?sLn 9XDTHl(§]W(ww+2hȭ PD$z~e5A4D\>#?b*SW`NFݧ.>x|^Z-im]+WX.T(ib}ڬ<0Kb< nDLefhNLA "3i5U"Q**+l7tEXz X %ٱ^L]7.xˍP!h'n2 l N[-mDlŘrArz( ƪ֔Lxo+WTlϙ{QgS' < :.)K5r6Wrx%@IK('К?yg$ڢA(-|ff$ G$qIAȞ{>G(= {7z}:)Kgj'wUn8B!(AQ(G%,Bf2d^BrF.nrI1^L j+30%0v\@T1BN~(=Dh׆ H;pܫ(^*ƌ7C!@ANa$?U#A*@R7 r0, 1c̀ة|\5:L]0 ֎hTXֻr࿯yֆb.`=ܪbWnoQ;Wc^/-\ؔV|*|icRLfiMJ.7Ga@QA6 &N2LtS,H)OSPdPIp!`lPmo%{%;pT6|dc!Fl&ɪSxmVJ 0D$4UR ~9A!9xJ4)aZwPuVt|Ywtg;K#M o9 uB"Jl9%Ncىdon})" pŐ1_9 Hw:߫!ut~{,{KP4 '3^j|^|D,@pQd{Wvā d+bŝ†Sbl51OPdGVoa[P #9IHP-u)(ڈA#W<*ϊRda9LWe 'oyF1 JTJ\[)jx>na/[Z͛t\dNF|] Gqu">f/%? *FyZlog_|wϯj;,Anp2 CSXI;}?{VK _4IJߕJ})Ez*/kTETI}^ea_x$n,U&3)e[Crr]n7hHUAH- !1vl\̻btiR<>J*$*h`PA(I JMns!Zz;ن;;u_pՀkqE*(IKAI( ~483X8Wdu18CH5to{):@|fR;-Z@qx3@N0HZ6 iTDvɸhM_}ߘAxrv}q*M7ioܢijۥkι:OZMPaX>*-"/^{'k9yB%"+d96o~hq lD:_%tBTK Ɣ% I~@1A!I$ ټ}%zepoϦ"V+Mz.FlMTUPPS2P0#TQDNo6}*0-dw{)%XJR,R(Gv6=R9,|yDIdI:]h~FVӦ[:g"D 0aܣ9J>\ _I7"a$YV.lԁ/~<;G3yZ{ZEJ:_ɇVVj88kt[9gˁ9ߘ9sã>9UYPA}GQ[TTRDQU/q|7gpwEj=ͯk`B**&(&"i(dX //7N8Ysx~}!I3ƀ5Q$DI4DE$AA059v^/ Aw" B4ezU.k1vygf_t&'{ 9 yT')B]:`pci *B5P:dzKCL/73Ct/LpMگ'r`3~XI (`{ >iz` /*PT.ʌw38>qVSg΍Z*#>@PRUgcx;sw;6۾)"fG='WxI1D; ~>؜? krTKtpsn.ӸC!D&ǣb9rl靴3,(a}ENҨA"1E xıkzYoXq KFE~I H $YzN\/2>,k]C0Bb0ch;8 FE UABA&(frj A(LS5U0/Z9\7 $M,!>jd {kNlCzqU>p`Cߺ6b>Xe~bff$+0PeA0+8 rkȹ;!"Z%)j" iJJ(Z& x|]p(q\@DUPTWxn9>9t&{<<6UE-|LGz@v1ѥ{prl7in5$K'96ₚ)fj )ѠhUAU%&f @PXW|CӰtVpHƀSkdڣb474TA4#PTI7{$A$φO_. ]\?N fm;gs 4'FR_''=*Rܨ7(3Ky{)x9C3j;Vh%$@ADUѼq,v ؒLR"1H( 1"z\\`yσ MU4#4 A60 Zv T@]kg7BڦD]:=U5>@vlrfSU_G$53Q DϥѰzO!]Rީꂩ=Sԓ~ߍنMY{)_xH ,Zmk|ͤ*!.VW.>N 3V,QTGL˳b=ZUy&% Arwg1z>xk~Ns̰ 3;##Uw"+.K[}*FቕF4MmDvs[O 2/šRHg;D όlt]H`[PX ߢŋ[ -6D)c@ %ޱ/҇ć_P?eg7F ,QA,q_Wlvv!nÑLb9$I>A|5b0:ԧl;HжawxӁG`@ 8뭰+=f:7u%uP#.nmzR[% .<+ekA?؆9X. Pf02RMVr=p*ŧoMبPlG XHt4paP{{FX* oz^)wes9 ;";aR =OJdJfҴ jG (H:6QA$e3loH'4NcVLbX#9`u9&JuIDf5uI$,SBEUR"Eodgg;PmTTU1 MAv4hKY,BAMt)IZ#U-I(J nKrfTk)XxLLMf*D#"\/P[V]8/~,JjC~T`mʣ<]^^{>W|X?g}Wd_õ^cF8wtjA2r =@|__bʔ'gXPzP:XB <վ +kT^?Red*w j5T* V͐Fc ո7l *A %85,D)^N XVA:JT]Z)U8/twd$N5Z2eqUvdTLx8vzz}q繠1y>kWO4ɫT zł. $P XC[Q)Rzyy!}-hU0R]F͜=ZŠPܬ@c-z>P8iRKP S O5D*Tb:A d.Uϴm#cN"oWxoUN>!{ $|ܻ럁ڢcjKY"*a27jSS3.Ty\aTuvj[[3JO.:-3w³{M0Ci+ E|m "`'iPAAngf9 0 J ( Ld"̽AqNM*-Z}m=vn/=bx!Yա"<88|4M5z\ɢV}EٜR"] QFp7n" rSgnm{d CH9ވQ<\)D):;HsqkzNlR9?K_ y8꾝|\jM:xe!FܴcjwXb>\ QIhg%40~{|&9Ϥ8y,.etkDZ|G>J`WJ]:ձ)* |l=3bf*EU]봻a 3{g2 oID ѐCf4L +DR&슼]!@p 4(@D<< "@36@܅AL0~N#A $J!Y&`%C !eHH* ef W(!@!%(`(B !Ң %=9(B%xxkHP *IDЍ%R"d rstms;(dB"|yR3c TWR!--R? KPG2#^TR\=0;TURM%IQ@QA?$Tl(y>[ej PRDDC ,Pg[5)hY|BH%EfrA\|wd!J"ENŐ(Q$q$!scM簿brb|xA@/772E}U1A3ҐM Q5QL1DX`UTTUDE1USMS-A`mEU+<2yOZ5;ڂ<~v ڨ zjm˱ ,0)DJPBP$ PPĀR3)TU\t!,P~(ޯN',NBбxERAJE2ezN*RIC - iZ E4ri˟Ϗ屜>Ck͘i889p|pH*GU5RTъfTM4cB0Q@3NMen#)M P OD(:i=P?G_}[ybq-+lq")}Ũr^ʄ}Z|2|sCYHWB|x ) WHU;@:g#d- 8ՐQzD[U%tLDR|| u>@yHӤqA*b C鐛d}_GP%UMJ*"L@}wG RY)o`"m0O+9dƹHTdѤqh|;U2H2%_Y>7J!FQ\\ YAs gA}P~(T@Ta~ >\(zKTO (* < ̀6ь uD43srI;t XEe-Zۃ)ߐK}c984Yk0$(NHP^wcˈ)(2QI& "fb*jc c NˑO僃H:Sz1"* 1d;<Đ!I H$dDY`J-ŵ,+**IӁ fD~~9Wdp*UMP_("}q)(ᙏ;cn&A& Ay2H2RmބUA<ܰgS4}#7sDؠLܨ &cY ;C + OAHTCc1QH!D"P IάM CrL6a M؈='<'tgEۍx9u>3=.g5[nu-(R,*1 {)E1@*]+6NõkVI@Tp16FO擦Aco !H dӅ6!r:GU;}eӸB신PFN`Ra\mGE0<Q (B;C3C- iRHHZbZ>[fGF,tt@$GG@ssk uKKOȍ&wyuUAv:9>1D:A:a_9F&dSVYvıIތ`NfXي @<>>6oT*C<ժtE;Y:spû0 VH)H" (P^D!9F(Tc,i,N#Im2()Ze*0>;`e%۵@ˑN0$3(wǰxUl,R@) ٽTN뭎i$:Y0i4W\3uxȇ ?XQ\CqA95^4;͒rkŐJFdtO>*DQDB@HDA,HAHĒCHPP4Ei X$h Zi(`L--n{p8$”*E9u&8 V0ng"ԪJ fP 2W%FEHBXi @FbdЕ*YJ!'ngНF(C&a!: YaKת[;n1፣A2bQ+!a !'" 78Q$p&BRp"){;d Y@J QQ_vs1LhT ITi@T @* D 66DWfE:D6@Qvr2(B0.\Q2TKx'VY@6OlܸT?͝"H "GօMI8G(ͩ~ =@q VKZ=bVdp|&`jvh7&8QmBoVr<轶mQ;(a7`(ER$3@FmaKj%9!`- + jݖ1qP97ԅ@b@ȅXϋ`P:hP;6L@_iQ< n-7Xr):R͎ę^EӷȀ D R:Fq~~GRXe01M/Gmnlzڋ;ZQ!Q$]u!A&u@NYaZM_)|Z)4UE*cNlfv"q+##Z(;nN.^zZW LR}ߨ;n=IX!$Ni>n~kUo8ŒnTѡMq^3s>TQ^ ߐU0(egm  nv4*it3SKCLDKLATHSDD4CIMPIL@PPMC5RIT ACLKDURQJĔPQJDTDT)%%)15QEQHR DCCL!EDQ4QKJTUI %-DD%DRSMUPĔP4EKHRU5RLIT44QERD 4 4,AJ!HTą 4 DACUAK@QTRD1IA@M- RSLE)0QCTMUji " 蒡S<'Oi yP@ܗi r"$YM#}Dߖ߁be"45Pi*yߥLnIذ}?WٹkpUg;i?b1Si]=rXZZ jzQNR~9s201#,aDDY8; K=\zi)j"aMoYvu~itsK{3 0lG')jPJ]}vf#1 Rl_dJ{d.ջzzJ_Tw6sTGk+#Ru/w^qm9ך|~O_Q*QUkI!Ф>k(wEF,_c;S,U_{N$e˭k'WABW56#¨^H|k'-;ΙOmq|9FgK8|^ƃ -YU=79;|ڻ@夗͌h7]%H%YB7 4T2AhYPeUQH*5 4Ę EE14X եFi(ȌQQWmJ J)vrZr2ZB34bd`nC (mR,X*6#mlZ P) |(#D[ 0nj\7,5)bT]ml)BqձHd\/k:g_&++YQ 35cTQ+TTCӉUx5Vy,SFAA ''%*zH0x$ẋk& [ z2ѴS(JԵݼJNq7ɭ/9Ŧ/T.'"ݼy3ŢXI>>jYȑ\9ugu2'Z:S@Pb c|j>.!Z%_" =q;sǾ~=E͛sp\/W UxP qq Ț&"$*&*")b*&)J%I$hh( "d$*JiDU A50qed,}1Ea VhWYST/Ll B2KD SMB H$ABT IM,JD$2DE0(C,̤$$%QA),DPJ4S$AS 0BPADBPBR.7'bhB8P&@@4>ߢ?}^-CSWGxǚGVo!B(vc; Z-CPJDpHV P86Sn~.NԹv6O}<'_I=p^m6++Mg`Ě$2L-|/suѽĢLDC E 5 L Ē4!3 9`BB@@ $ȨA>nnrؗz4wʽ ,VA tR3?Nnf'! K,>ܱb FYb ziO8yb ENH BXCL DyP5bz<#@z~W=Z`+P<;e$%TELTRRKH%)H2Ĕ4DMP 04S0EPL)T(RH̬Kĭ "D#BxrNJ4)*@6v'MhJQiW2bcDU0AE"Y*]`EV,"ԩAp@v(`h%" "j "*Z*)hEZ*JG}DEڨh !a)0H c(֔ y4Rb[4Za =)Xh y` DFi@R'RN0P_!6Ԩ([ Dސ( @ m!4I_UBN&8 S_VI?UAՀqsT}w(" lC QB! G05%(MTr̯=i$tnn^CN$}z0@PEP0 27ps315 = iA/iS!Qovpmek\;ph!EA VPV*Vl¼XB[3Q;xlr|# FXw)QT(SA0ą1L5M  )H-+ D4H QBIT!)3M4A2SE$E%UTTRQ$TTLDJRE44JA$J1D4P4+U)BDPS"H- PIE2 U4ITB:_32*"SHx$J![@m"+Hda۶54JMS+@A%HEP ERPC2 RELIDMDTQIE@ULH!MQ$PA!CQ4PL0ID0UQL%E5CUIK@ELHS@RQU!TUUMQE!MTHSI@U-5ETQ(LE%@JRP% UP$HPEI@HR(-BL(IT@52AQA)440aHZPhi`& B% D B* i%(J&h (aJ"(JTt12g if" BdXQ,py;ΟWa;/9_ <2ࠉSqA<A>XW TW}+a8[O8=`5EE="x2QEF44Y>AnPy8pe VJr؋hdNqI@_+ˆ^[둅@ lbbS$9dcISEaĂĶQ{hGt P`Z(@)Z (bB`X-7H9 \L: Y>ԕ:kMMv r()HBeiFzL@;^߇*bC1"!*Z B" b bQ(P)E>@Cgۄ^&Xല?L_~zrwlp8q(ťrT˛-@QE4Qƙ– dUJ3\!?4)f )!)b("hZB P(W ( $EO4  B JTX2HU@F1QmZ&bl&,E2+8K>563v<=%PA !' X@\XhˀD@7q(1hlޚpDlvôшKiѾUڊSu?Yngj"dt~)ODb o׆&3kLҦh-rvNwqQ ?v(>Q6ڂkS>|wq[VoctJ._V%,d~GO{Oon|Ruy`*!IIXVq[Qd8zC%[a ~"?eq{ Q}w7WޑWV$hQ` hA(E)TZTD(R"TJP((a!(h)B)R!TցEJ T3 EOk42=! ;q32xI61S(w&W3x^j[(AcYV*®יO8Cؕ|**31ɥ`V؉RTXX1«z+%38^qphv-mB)_y}{rʉ4'u{JS~ /;rcWF/.ʉ|2I?ei({oK&Ig4+j#sjY[]&2/.]xeihj>8_%it@|)iHerBGRHxG;fhY8#Nw9̓VNǝeTfdIfLY2OǼ^:fxr>n*Q!S !lN0!8Ƞ `3 CŒ+Z:=pYNY%mXuJ"+ D|aXq <,d3^u.h5KmJK>6[j QUڊLyý{F*k^UmFc& @E\xQSAAII8C5 2bhQ""_iآ`*vHlWV֏/ݠyqsKJTNa",<Ą2Dot"/d/p N@))LS) RP "-P(P) !Pvz{Hl8VP_,2Bfue:8y uA*:98`tuyKKN;ds n#mE]Yǔ yIi8DMhǧ u,Qn.įzYs"wQlpLxH@y:8\Tb ZTJ^H:=+&4Y .e#4[q2`h P\[j)5$U߁F@Ngqq=+"g]m[$Πf#ntr" 4P)7wבZ"p' *=!^aF(57mцyډ *jHRP+CMEPESD13E4AQJRCU4E1(RJJJ4CUQ P5BL%P350)BDPPЀ́@PJR*U TQ1P!A4UDDEDAURHLDLB!H4%-!PBn v/a++ϛ 5`jT^!.^[:(u81fMsp]q/6YwnrR.pRU$]L y'˫11 $Q A6Ua ;\BdLТ JrN[PSMPPEf(&I;q-X,ws^Y"pǢsLxu5aUNlkoP݉^xw)^13LSpFsR3gyb36Q8 phmyZ8ǂssY²(uͼ%B:ԇD wo]o^F)$P;XIqދ*@z9;E{L3H"N("[éʕn]S񶭜Ɯ78Qz49'" EAKP@D$P0L4PPPTE-4)@- R(4A*Q0QLԐ6 @$0+HQ#R4D, 5Y( `Z=aCQF%P+ L%iJfaTY5 (u z;XV,F&L?2sX,Yc֣2Vx qDI-eA@Q~ek2NaX#+ ȥEs\g~c+lp,E2& lw#JIj\U5fj9a pgnQdMʪڇ{!:% д0SQJP T1DAH URM1PL -44L E%1 LQ+C@QA"PEKHRPP1P҃C%PI QD%Sd{D@PQCT@P,´ĵT5IJ4Q4 DҤ*DD#MT1(P4T!Ht²c?1C0;eJ"V*csÓj&8ᣉ!{Lu儵d`4Z0]̆P*rN CJRZXm`C$s$'&aƉ‚a2h,BQF6ntxB-+ERRC@U(I$ !AP"E89DȂ" HoΑNN4ܺ6T*G*ZR8, L8'ZS`ߚdn(Cha&V-V4ɳe@f=m>}KluZӳyՈ4Qye,9~EYTaإ*eP9P={:2A醎 :(:44hՒ*QQ#5 CbBg>?: aw}f_A]ҒlO"i|q*=0P굾_潕6AŌ3g@BY/΅TK>i,05 Q (]%*@plh\% h )M'7psȈ,oxu fx`zy '@QȨ^;Gzi@7=^Gw2pˁmShj, %0 FdkF3'unp \06" ȅb>A107N2&1V m:`65r~F ~pNSrl 'lI5&rM4`zs~T$& BV7׌0/I mH[uIH@JP`o1 FDU9]C39gNi.Nd>y^I,KR1| Xk G)2TIgP%&+K0s2;71P"u`D.#4M93i*ke.HAH5l%{=5m;rx5ad;"|zR2( ko[#^g]7 `rd"@έ5)ȑw;KO-rd_U1=;? = 𦀂 [^MfBU)vd7b6rSQݲB@qKC>soΝ9sɓO[\/(8GYY7R?#` rH[W%*Yf<\ǶS7+d'{ gKR#$|U}A1NiRXwᖦ.sΰ# QPBs3ghGv;qW!5PWՏR q7d=(SFHHk~ΊU|G$!Cy[`:& OA.7hSʏL:r"Ų:R$i.+~>ͅ, S Qk:cYTn >@1Ĩv*[BN'B`Ȑ8C I7 艢Щ1"(!%̕skeyorh=TuA.| 8~!p=}f7J2 U,+߽_,1o>?5Hp nZ$5_ ~)^vR(]ij-ҖQQƷyģMɒGv )0& LMXh8X|,p`!Q&c>uu\'Wج=V\JĉH{ _f/ E5ΡGj/FA,woO,qoIV8vkktp$I}$(dCmVpm1U"~w>6hLcs$U`aUD>wP>u]h$N̄y `9 XIl=)QSx=Z*yi^+ut#鵿bLfĎ><Qsazߪ) -M!Wb}A)^╱Rc,>6Dlؒ҅LD2B%;mld1DsLPE “(- AGPPR! 4h]1j) XKN"c~(l1% { @{\cЕ_  dq`y4ŲXz)hc1ϐQq)vetƹ#ѦQ X.U97kGɂbwp9F&}8_J%l1 «!*Ha3۞;>}tCQeUijX=Uw2dM"P˕ gP4FD"Z3ƋVΗFGyQ +t7`1ܮ0VMsՐS˦ILO|/t%֏t`9jڇLiz*t9#о&+M(MVl}[~<Ӯ 1 Lib$-q0 UW rHKF|# Sr+|ԩU#}8 "r栘J'~Gx7vx Q%g +ZOBlV#יDyrsu:Nڶh S%wҗk'\D'rߓV]i⥚yv61z|9z!+Ž' ' FeoVIߝ({#ϠdQSCdp~lX&9!hG1zRm+}9*8H3\q*|)lm%6m1 sI 5 **+β7/U`z6ɘ~@ /s4FSo~ZB@!$1OIPdؽs%xBsy6"f3N_+'Z-:+PB[]+ 1t|P.?"ZkKm\~LdD'V*v'^2QZԘn@L RіMoB)GlQm{rCO}hdΜ~+T)|_9Sq*s{|@&J2h2x ۫By?5\cYh{D dֱOȉCKlZ7Kjܒ4#fr,ġ-Yb{'HYP]po ;u.uA(ao1<&X,KeĔRJKyul,X^u9i !C;!IJ_ڰJ4roY=ğyCNͤ36&愻PQ-w_S}#GV~mt@>xnuw&P93˨ ^4NQ&,fAoyfPtlоi̺Oa0H.YcsE:<Esr2 QJ:r'駭=R>WDΎ;IèC(T*7jucY>FlyQC8hKŨlTƀ X{yGDD9+R'h3| {N6[S$5QUa1{[1h&4խ(1 ofB<`vtCw/2 `t"֗MДG}G,d17e5 <2 n aҖ_5/ r5Cӭh41eIW`L"ӄ#<^-[.NgPˉ(+) AA Ae\BՍ~1!cUctP~ɎR2Zջ'f6|e7/FYA EbT3?xRA6Oq9GRG.l͔4dNdR,m`׳+q*`3^wCj`-p|SqZ{B)Dv@GóLYVx *%w$WTM"eO5ƝR>dҙw6{z}n+D{n9*%?*0߉.V'i#^v" c[Elhq|2lB %&svе.N"EJ`URg媕|~?ѥNX%!|#vE6i:h~ bA(OD{`YmGkQ/`S%V?x;"&2`X H3=(zi[#l]?eOqzZqg¯|FOv̵[58usnٮA.S Sp/}>Wz1CTj~4f [x(NNE@H)Uւ֏/nL+*taVi,l5rH|Kwe8Vj=ʾ w۳|ˆ9?ӕmKŔЙhb Éq?sK)eP.i8ju h]qH̺~p}gתމYU@A&maTn":#)u(8\}/ƪ4sɋqr>2>k>.SGS@tIn=oiOM8!ja8Pw<`o^є7$<%Gtd1 O)(RɆ[&- /ΊP!ȌRv:Y\ϳvyY檓@nTt5rjhVyěb(prľXUb2/yg(–qC h EtU{0+4}SMZHּ8r&X>E*|YxYlwJF5L3αRZWDjK>~@gs< NMc)O *5u J@JA-k0.ڻ^T5/^)!Rg>hMJ>mjѦqç'pD*OeH+r}EàDfM+5 35J Yv定&!8&a<бN7zYM\طLL4[y]t.M4Qё<6 DJnB1h<`IȟZ8]9rv%ך0OwٯwKWFRu4x&=F"6C!#ԩ~9f ľj (#fwɆQA\*W{K( )x?O i&g} }TAYj'Ē Μ>O.ֿOfOq++zR]})d)F? xl$cH㱓0Hx.8 "pq3hmŬz.uҼ64; ĒK&#YǼV_Ń% D,.LoSZg&W w9bZyɱ엧_Pibug5hs> BP0ldzg uMώI 7nB[ګkgx6Ɋ0!<|,YS|*\ `o0!hTxORR;iNˑjm>{(𗣹ll~3^woOu|.8*H-}Tc1F;Q_ޜCXeMBec&<4vOjl|ɡb戁}_z{LO>VZd4|.^DVmrdm+*~h"Ll $ ):z[*-xd I'mNƣ+SZ9CQW/6`2bY#{26M"lTjHtQ"߹k5U|\pȵZ1#ǷN+`,dT\d[j˿6m;1[ t/UjF-jU*L:otn~I#%YŁ 6SD~wgrQĄ{N̹K{~l7+ْm Ɩ4شa*Ns@D0+-{? ~=>F3 |U(9TÙ!~l 6|2c h@1WwI/ GEXE=vD 3Bw^}Ǥ31A}Q#k6*9|ʊW gGuF`?RrՎ.0@ig!BRQɞO{ 0u7dVWxCHA/Z|w~qP,JٰQvKs8 Zix!N ?ӹP}@kw]F>Fm8hX!<샄m(ha3`]iV'>wc;p=-strEK]![?r_\\l3ӳ;7.-.j&<.M:tǖ C'L\r @wYrz+Qn[ax$f2R8 `2 eq3q8*Z$V[gh-R7 4{71ÝM<6N`Tx EAC˟Lj \ōu$=EX+K7S(]}A͌[$:6Uu.A PIykӍs nt&#oՄվxkҔ=D !w =:4w]: M ^ Tok^Is }ɮAW_X!cv_4Yq #j<*7?N #_-Ou8뽒Xnqo#Ľz-j E&cR .S b,͓}4`AU>u-Զ&d/ 9msb :>%Cwߵ󈻃[pf Kh \nnL9{[e:vr4wL mf;e7Ҷz'H>]RF%.¨.QJI #k|B# *-]Q$ʼn*Cޭ^iRlO@.r}ղpm⯫ ZP1c^E8UU=^'(ƺ +b&em|4Yf Ɠzԥ74~ $Ig=-1=:J`{ ^qz둦 gqTu&Ʋ펬+g(v$՗e&43ےݐP"cp:J}=-O QSC}L[9H1rxEn0 ^%cfBzI4,9b c )_ 밇l V8ďGx!Ӎ4Nڣhn6); z`ݠA"s}P8q{.P<~0R@ Wg#TunqپF̻rXް0X]eă+3\bKm,Y pc+z7oi2.ť$ij1>S'Wd 8G~SSn99"UTQ?X ,oSm؟jee@9։)?Ÿ@yě415Q6ۭK l_kwGDi'GMNA[)m $,`)IvXTT֞i`J uz1q8Ԅ uiEc*>Md DK)LĖބL".ha#@Zp;֣g_Y򛐟dɮ_FVC,հIuY) D_%U'X!\o Rͩ}0fRoh~DziFlD :XbfV ՖZy@)iVl]|t-J:'}ߦ?Hxe OiJ^,꓊1yxRKEp 6Ok8\u/Eu10v,ٳ7cZ3ՋzV?)O~ZS& B9(0n56-BBA-A5Q0)ə\4>~5֭ &}R~13M8qģʃ{jI֣$-#<4iTrYS#Y}oY iU*(+ Jg}6tS;Nrw%<2tKZonܗ_t)ğfk vg6bIf %k:;Y4[r#TNT 6p{?2+%1mՙ*d LyE YI/Ï 7LPTU"<<0H+ځ%NhvZY5fF8Єt↻5 ȳ9My_3|zVuPyGoc>Ojէ>@.|4vK\?n#s~gS|iD*}(oh[_z'/]w[ލ֤׳7O[ydb#"ltc~ߣ0vWd}v x+W䵲H$T4!1QKXoSddF0g#DZ5. S'ْ tVf*W^< d۳4nGxG44u :y D! ְ-?T+^vGhHfJ? ál%g:]t?I-ҥtt RcT0DZ_ْ?R_{܆f*͉Ј* ma4K}5P|0`ܭ!:5]# .f6R+FI*% u} Z:bD>d ȫ2H.>F>L(͒(}Ѧ0"f(irJ&os 2||qWÓHI'U~18MOG~,ȓ 4++)?-/ѱr5Y4B+W'pv\. A")12F"aS4gR3~P5uC|q\4 Zf9p隯nF0$GtzxL=ܾ~ !^ U'v#'d܅fB&(kBӆ {%{J+.̂"GS}շJU'jF_TYmo]C꺖q 7t?>x/M^ Pl0C[RږƧ@gb"񈐧fL=}!dlcөIbl^v |FC<5.\-v᳾𛕃 GS;/3؆Dh+! .$sz@sGA@~\Q~j\>o:"“aɏs5;L#a%0ԍ& e-cU'Ӈ_uiz;t7r$hy:Km/@ ϋJжA2(H J1KY DW55L7lD-? kFɓHV%v>8u8t y6\p^ߡ$dN;?_$ʉx~6f᪻Tc]mMW >0 ɼ GMRm>t}"[uP*d"lwa=ڙeYXb® @H`r|J&(gȨbc̼<9`E-  rG, 3<-и0Ƚ>_9# WGtC R-( 3j =A5ĩnOk0f`2U~fN~:Lo$ Yp^[ D"ret!tR.d:t5ճ-{g_Ɠ*rLkr(`4Vl>u޵;ǁ/$FB$%9ÌYJ󯱞7>ʵI(9*Z?لDx#q &_&y6P D\ww&n*)Źı-,mre}XNխK^+8G"`72 X g_ *'yyJ |}m}h[XF\ő#u`Bn g*xHyk87jZ獶?YpA{$YpɮZ1ꂰc8OjbEu::A4%77tEQsi吹6HЖAEzg&]:;VqY$lT5xrs?H/ 3 k,K/|/`3}hB/Z5)h'ݻ~<t8ǴQ!>ur1 e>eB !PJ0}쌤$JHJsSIV\`g(nnUjrX6JP"b8@L#Ծ|Ꝗ&GZ<(PRq~C/?~Eȣ"45FHDMЈeJᕙs7q;>M~[:sVAS j봓QCayzIR<-kؑ1!Pm\Ԓ?3$QbFgѽc[ 7% GpfBR'"3KX PUYS3"zXVy[Sړa;I/oɐj1v8VZ ϯ6;y'G:ChMcYAܮ3,b9&!&"Գ;) AaeRPնVʯeww`Qa!9a2dB-G}d7K__>hԿ=&'P˻Sf8;ht,'1'4H2,nJ,qa k=r TM\0+zDQG}2N r z q+9I(Cpfs!Y̚Byڡm;'Ŋ0fgngO 4@3'ggWuN 5'H.Osfa"ckq$N긞$oF/*$M`? ɱ)az NQ2L30[<T%V߻6Nr.ϣo7/Hup4M+RΐOZqr#{E `Y#iOM?$wNc;~E #E`l(0N}{ f APTLRddD;tz;r66qMpUXeXa~jm\w𐆕ZV+J$AY'K!*@zjCեLp~<7$ 7M=ؘ?srsb )'FOi"*mELṢܠ=M8?hƞW+p^,N],?'lB/ њCu%bծл>4%._v+J?[!ҕ0 Op28246GܔHPOn_䪲!9!ʸ ?νHH pmxzBPb9ܘOrU@Ms칣ƭ{F*G=5xkjgxlfehA\$ ׫돺!C(6e_#bQcPm!eE3K/i@yp{At(!Hj̘wzM~lM"%ɪA/S'/WG̡9&&;) Б,tC=ҴI. Av~R)]+SXiQsMGR$Mq#p$<Ϧ3zd.1 x Y{)q3S*Ȩd4-cnycizyRq8'/{\ݯrOd!!$~ƄbV U ?M'BoR!Mj_ 3ԍAAe$]=% 9י*P+TTusCsGȶXz?mxZ6պeAQi'9Z 7ۈ{ևW5 pfgT(qcz'0/gD8g_6/ZIz7HG]1l,zm{ ^)}*O7,WwRrFJ:[nE ah6d@D2n !CFlHmZ]U ;r6%Ml$R HlVMP& -:B]oKE=V&lO)hi!ϤՠZ4pŌGYd//Աv v=EMlۛݳ5\Tvۋ`33~f/̚Rtf\8;blaoMV^(_jP]r~;͡#W9^Y`^hsra>"lز+C|ʘ("ҁL'_xrqtIG&3虺9~Ͱx2P^yL>{7W2LbкIzETA`Iv_,(_T,vGBʥŦҬdތG.:Y/p,7LӑOiE>%LRߗ;q?uNj&Tx@P~:Rz _)Tы;w]x |@|ťFdjݚ%Tw1@`g]_8%6 搘H.@=c oQH I*:}Ƿ%ۡ9 8 8A/&DYA-I`MYdRYګ$JVȧ׬l|*H%{7_M8^+G'\J$ Sب2F &b-\g0bko1V[䉈 QutQ*ZS(]u[N(mKX[|K΃޻cւ)d3Xeَ^j#Wqu>*, (bWǡsМm;ؐ'횐DI]cVޱ}_tϒz)]; K1`6O$5b7S73~m&e \q ٍ ϻ:x?gZɿbGˢ8)P."F[\1W]b=SxpQER!!оJP4WTDIibbߌ՘1^ˬԇK,(QmFnC2uΣueUmM>݈1ey_y F׹SI ;LDGCPK_n 8,dQorQ1 ]<7O `O3V2qO. ĜR_0:(((4+Y,J> -OV7BIzS+?!#onX =m| :9H۸Gހ`=:J$i@|us;͂!YG۲R}ɘ`KG܄Ŀs$ukm=ٶdm<}/t-}\dNYMpV.8_3d;UI~kZ@DoũE(-GWajs8TGŻw|NMγtogK0jeoX fG(2twXnx9-#-q7[15Cuʩ@=ai؍sX0%io>hZqE| c&:m>xPrKS]gS!! ;tTDVͳӈ& `a32ok ȭ\ ir!N\,8[ {NV'L,ħՙMAn:vaڝn1tʄ 7ʔ#%32$OkʙRVYHܱCxg6t.\i"Ҩ< pz4?UU 0q|;)lJX㛫v f}!(3PHBs7Tp MT㓓x)b]"`9O#U@K*NS`$mv/ҺcQ5cGm]oBmxڸtdֵD(@.Zqxq/H {UrT2t%X%p|-a+D~WcN<:,:Sm(b!DYpk)!?%(3]PHd]"%9 f ^aVceWQ'x;+Bn?D7rePf_C/~ @K~1"[we3 8i9(u~k/(nݞs<ߡ3 q.'zS?r,\*_1MLy%&sXv9f"BoTe۲( ]A4ZvZmp0g{wH(>9su¸AB,C؛ w虿&MC@_(0 sJ}%5 l<2]U՝ U+ނL̘xSf-}I+ rKxi~蛝a%͙1UoC~fY\sЖEtQQ*j}$QTQ7^*غ`SjbO HxOXӈGq]ͫtEZ5:(M\ ZSO(wLV:1H[%&j\c%Lv }bza/ s!,пЭYy<P)&AeQaTz bk lB]HoHt>dEpHq}^cG _r_ev$sYW mz^' (SBT$\i|r]%dxCYLZCps|wwy>DFHEupr;X`Bp|A$rLL%H#|SS"u p }%C%HV~U(gr%Gij߭w+*^0+蜰pW"OD+&;FxGbU&?Me?pzSCf37!Ҍ׾BRM1PΔvDqj_T9ӓĤnGKԍg\)z]nzImӶM)ne<=.sxQK\|qD#_ٸKk|R'}ݒW>ٳ)V=U=)&#I"F~QS$sn ils ;"/A&WX 9Y*;4$]mиp꣺4o(C}4 o${JXI?jNW5+.I%Fڢ ?l eyC:27bOBG`\ حos)j@:4 j@_XR($4q⺤ rb?t)_.Gwsv" sZ%Uȣfy%gˋgp=2j#FJ3u).DCG li[B8v'鐐}w%s~y`@<}PjÇ9SR"GtB .x >&/fRliՉk`q:6U&9 sj[غ=֖28ՒᷡT7}%+zgK-b-̚6͘׽ѧ;"`A@@&^}lnoq[T+C0ԯG](]i4IQ>>J4v23q"K>ɰ_ƫewzԋxY8"vgWr[tCL&DR9o 5FWj<1x>4x[5yjŚ) ,ZuIx\Y)jFd)b0CA~ivydupsDg`HoԡL߃/ѡyjॏ^oBnI=AԆL/T-a\9&(1 {ɉ}O@|9@U.zgK V mm M ֘Kj q_aH'{80y60,0e~}NzgV+]:vn|Ll4>*yKʟ ؇ PXd!z^oR%ZvqϙaZL* dfFtw10,,̋vA@Yl%0ݱ:?![0/hqA #'v`)u1{ɓJlxLbEv=ڄxQPoyifEČu _Lu$zÛ_ Mbx *{`tì _Q 0HA4! {Ix^"" 1~<>9-*Þ ON>'Ϻ+h],=a>Ws7K/*:17^WzWUH+nGof`./^%NAЋ<SM=YGjR7^=3]QFh]o2bg ccn 0.U*n &F.}0'VE|w&(l#md ."z&Zvq7y=27=+Ѐ*_/; ]hA­K;4wX%y(!&koƔWUNvٷ:#9k;@$ ||h+2`qt 5jW8P9%G PcoE JRI1VT;Q.7Ku\P__ܬdN{&Q&(OVͅk&1aP]g509 2G QAW|Yrz㰟πH3 5 Q9` emh'[[is Ʀ7P L-7p GinK&8WAӬ/<7h 4w蝏!|8 ^Qb. b Jkݹkooa"WŔKSX(a $x@ KLP|䅟ii ٞ#r2lZ Sh$yA.\Ǒ[g|-лx&S~wI{1zx8LNpcEb+SJLtzfwW2Kwܨ ,_ժ{SZopoGPF9`o,\0z],;@YUnYMqIw{ZΨAc[ "ґYfeUL 9{I;HVҘ^~9]xjO;1Bvt1S{ZE["sJIlUr=]dCgI.סH(mܹk֎7Tm H I^*8*/nкb 6X0MZY]Hq9o@'Sc,fnk`13GOq(ڃ"9D*ٹss(.#04eֵ.+zZ>2_Ppך9gJG@a. Nd]Oev<1MoR?Uk|,:?S&[4{Zg)ud KEen2^z: 1-UȅlwAMrr xo4jlS:KJeF n8*Z:1^Ẽ&JLXlв0}ȼ0qTj7,2e7 zثi N[<ļj4EhP^,p#"~jGooD tV}*sPmA zXh[":eg5G%%ehkf-&U#_- I*/x+ "dePe> ׏Wz_K<6!%+aA~{1faS ((f< aZ|$z 6?e"uAi[WHю&o)X~2b2Uu {4eqPY2+˓ Kob} <8os⏳TJ/361)Mp/I<;K>AdGlh )7xKl)0T/oª±i d/$~8%KZNX$jxqK&(p~2PRkOkA^ ~(Vred\9Ųb 5?F1±P%dA4T4BdIU>Fg W31[ґB$4ό0 q?+u&_|c +<܅`jhkfs/S=UY F,77M0M$ i(<'@+$g[1RQ^h t)G-슂!Q:<@ZBskŷD ymgԻL4b0+b.y%)M<;K脌}jO#"Y}7eFBτ:tRts]toG!s雏/[RhE*iRbtUϮ>~܋΢Srq51n\̟jR;_7$ϴ3|RrCEiVknX]ś'B=jI3ˇY)N8r~*4N׽M 0JT [\[rx0Uf.T1/4J,܏z05 X EyɀɈ͢{񷛛ifT^A\[cU0ځ`C^/qb r*қrPs5Tu9Jg4224V)Q)74Ep|m̽gÃ"]>v>24]a؎|pU-Y>v *G)fRgq. ϸDjL k q^Oy;v;Oa΍uPf?ǯ3sV9O ^w$b,Bɾplb7s#P"@L荕]\$rZB-|?uM̙,ƊWktP:17T3jor}\8:}8IjOH66>3"] +|q©:iؿm}wm!Eч[6%˷VGilROr*":6ּXg|s8kɔCWݒNvW 7 9".IBupa# 1ւ J߆\ ~]-NS 6d2o. D,`b! ^Wp5EDEqěq^$rPd?Tfe ja`c|@_}U 5QqcO @amkwqX4ikQ$52'%wU,E9$'4&Trz0B1ӕ!#%} t:"%$s<@tgW'sxCD|0" ab$TN8X-"X|3c7]&zM! ߑ\_1)/z?`sDuyjF"Sx*o8Krf-׉ClԵE'?'?a@G7? ĭPxE9 l|Շ6B%Mmz`QX.f_r&C#vT\9Ԕ- , [GiS~}qnMx>0C~!{][_`|JJFܝF@mͦ=0B޾ENXFÏ(5>h!-s3~ެejmE$i)_( |TO^4jEBG.{~( e9:avRX K LȈ%5m#'ш[_83 WoW{8D.%_9bBAI*Jz+-ƻ3Yt{a.OIYJXhL4(˙T|.3xpa_ S7S m[ 7>j7|c|Ը~J&jhPSf +6cf~n?mz{] 7 iX)߹\*|;X C|#{I$}?T^'ܥ?J7>*ȧc K$ % wm[je3{*e|0G9fAm:؇"J" 3BݭNVҩCqմYM/IxQ$v(j␠8pCCzJH/XܚO9?"cc@КK!eAg+7:1-2p˦!@C@^ dw> 1,k9 }KJ1zaة 8yU!a.*_\f+iEBt&V)Zߊ" DߠWڵ Oaľ v a^:qqvsenS] Ltu,#Gӓh_N)߬ķF.T+vx t\[A,4G(3{̒_"~g&`HΑɥ /;9XV"ň^O[ Bk^KWȈ`n5 7Èel΁r~|_?1ggxo#hiD~G)j\ ]㋖vacj/?+=uV߰i\QYzI:[|hj{d%m9zE%nlh扰[պyLb?f--K4~}b$Qt/"eΨt RacfL7a )zLvH@>2;4ri)cs_<kpdmA~c6\>en=VH/vC `6Kg3o'xʦ9n&2\93&Q_Nng ղ QALT93w,oAB&;+5ڀ+/ %zqc)#f"d"HΉD#x-Bf8,o!A i*Mm5JbLE)çA@.dsݵY=> x|H:~P.}i$x֊|kV[\]BZ Yf੹<T'rMah6:ʼshJ}F$)j3%y;IocY"?16'K@VgqB9kk"1IqJ].==cs@NA=E4nɭ+~V?Dvryj{7$n /«$ j&aC!4C&]+:i~%1= .6m?[ NK/]?-f {p* 4[5~)Ij+ҨAcN:[=d>Xg 3ɒ޿d8HL3SlW ),cqV2c1A13̛*~Itl,(Ha$2=ڏ*Tջ2Jx0b*S8*,o^^Sp̋힡,+:o[YKN꩙sLFܛ>A-a+SEbIm<$)ώ#U)-1tpD{!&['M޳tǠ/j[A[GP x9hl}$^M"H JkeM@cn&Al۱n40yr|r𼘐&Ǧ*nSrm>E&Yު扣QzF ΍%BF"rb=<кz;7-l+g+i{=YK'N 3TX.O╳6]ȢQ$Tp,)}Jl:T,_3\ s^>|ػ:ea h;7o&(Kz;Uvr9*DžV)gƿ?V@+Y#]LB,8qm] uV$ĥ1j1󶠳ZHl- H[S.UU@:((G eDq>F[!" }R+/DDkyC#ԛ{"8AX&(Fk@$J $]Yx;ۓNU[*ݮQ2N/Au`Tm=g y)3i(ˉtG7 ;  o:e|&j{SLfF;T&@_f9ݎ (weáK$}\;iq?)ٕmҡWŅBep 2,~NqࠊS}t CAODVIØla%azxGxpVbndYשT(+du 8jJ2/3GsA%E5u߰=ʝE,7֠2>5c~P*u[|i=?=`0j=K?2&z$] ɃF^Q&d%.>.B,n}PHk%s$+`lQ$Бpe$' 79Yo>ln #QS4k"6@ ^jteCt[RDž1KeH>)AeAP@ ,![ oٽ7r82%Eq\$Bb05M@$_Z;'bV{oqQLfFʁ ݒ)Y. ;6hT1ݥ(ξ ܄Jz$ZPSbVۻa .g);-'O+(V1rȣ-]Kz FBǂ P ^KJRO]^{ Y9nFD#W5u2镗ZVZc=AS _? k162׽|2ѱV\a^J+؇_|y*M[ڠF&0Ia]. |8%cڻ%.^@Q]1yr\nREiPl!7p"3L$| ;uIyQd^k Z1dVGHt'&`ѧT$S6EJLfρr6R)"Egk6V#բȣw}#8i$X M}TDaHB[̏x"aiB2=_f4٧d&稸#zQN{J"Ub]1Q Yvha e$KV8qk~V>]Ġt _Biʻ ZcaOG<'V{} X1|>n`hs0 A2 Z 8\z6+C6T}HGpiS%7F'9᰾;zeNTNπxW[bElxH3~4$EmhWp-jL摕3ѢvuMCεyj!TIZђaXac_s> uFXWULкwg3W;b/VD|PxmbL38"ˆn eM`4C$(1Vnl=&~RkvjMq3RnITi`؃/]-څGto4g$ ^~S`kbb^::)xb6?kJW Qѥ` |CC6&6y(a\=b< P֚:0znz.VR4 /D+ӃixwA7cNB06Yicۡ1_rԀQfCav9ʦJO1M_d[ S]ء✦ 8OBA9g/t6W43Lg&'}֨iRwXCKEGL%&)Q怢HӶGfٰ/ " R 薓0 wFK$- N6ZlXML}VE/,ܧ,y @<ƍPvmo5syUf@DznHSr7piQ+)@Gdh w5ct`cWJ>adEщ*l>fc,$PvڝCcᳮҰH٭Өyo2YUEŔejcKn7,c˽n}piOÄW2y[q<+?0dzg5(ge馟|%V=S`.~(%!&`F7~P}QlFB4>]S'g5H&(UIOP=!A b\`ߍbu"h'lɅYowӜ2ܐ9L󯌎$@^=6}4 FVaLBvLw΅K,0-|:* DgN0'9iZco﵃iG; k[`UK:|~(݄ӱ ]᭤Ӊ*>+]5v*NO}z,ifgmRV˝-Z$n̯ޘ.yR/ > 󧽜[IV62 L=r=]# ?Ѳ4{( m) -^Gbς囕RgEjRO.γCF su@餂$hO3)cN5N„|N7 .I]OR_AUMPlY0#ZC4݇$Ldz<#s5$T/>nnbwEob(rhAZ{R h:qb5qmCLɓ.4 9d<7yt"|wh5 4K;ќ=5A xĦHhARF'g1iL~4mG˾Dq_5HcXOq KO51Zu{"f}=|G3.}u.ajdoΓ7m?@46 0ۊHv/-n¼52~X^*&,4*=+' g u%}ܳ|7hOs#c-ޒZu8wb2YM8` +-+~š׈-:[lc)͜;P&S(@D5c)z('hyVgoVQHR=_L0QXI[`z%ZT >&G47I.C {q, bD'BC.tM]2٦Zr>Ke"I@Ԉ{z9ft+&d0 %k ϧ0P k g;, G֙O? P/zmJAl.72ed잴(r7[U[Ȍ7$. Ā@*&.ørCҿu~-Q9Ot/я+V\ u^yTlQF.>ݧ #a`H#WIfI^UΨ/Nޣ I7ϋ9`4XKKhҫ!/6;9'Ք{Y_x0psIKZIl&3k.ǃv~6E||Tl! Q0"XaBrnolHq̦<"BBߐ^Š H瑻`,U01} -xe"bٞ!a̹uL0ǡ>QI4ǁ" "Ӎ O00Ֆ>qGt5+5Lڵm^hZH/LAL}RDx >ְY sKCa[!]'m3Z˗ꂊxƍkayiAg[% Sǥ CFtX؃D&/tC!>;+@q?tv0Ǹ [D Ô)?}fh|z/"yrɓ;t Ma&HIR 尗mzRAb0>10\(" q{XZ*[av۽kgkn{:v#8[)4/KnNƟ ?_N:1k|8(@?Ǟ}Z##'B 2Q!>s8"1o;gUzcJC>vM, ;EK[ !R<]DȔ= Ruc&~ ~2MJV!|f!ۚ[(=jdۡFZٴwr7ԪCv()\H4QM]nz8zJH;LՍI$O9;JcYU<([_X5v}#GԈN(١Hh Po&Kd/A&Jr;du[1P">( BQK`d/3J"sL~d}TEjWf>#6m&e*C8+g%![JͭהA}20aPEbWl]ս<vXv$cE(FߖGUɩ`WKI6!!2_AxnEE49QBHMBԊY',#sJgq}T4[!qf ݞVٯ:흢N;x̶Yإg䠾?yDӱfu@3YTjEH'#ozݏ)X,o|襃+!O0qr#YW>,? F۬e%/W~g SGDim;0ݨY,i}U pG9.yasD &48삱g<USCeEJd|rQ+OHǪG)3! 4|KpÄ*Q>+SzF|^pApz(Hc[ca5}Q=ÏpzWěi 0L_96,pzQ N70ph'z?2h d8^pMkrˌ #qQvp!Ul AI S5dr3 M{v!^N, !7#W Jp6:T>^0"唞cjfy+n%ԱgEm!0HF9ނj²=$(8U/CHWƧ6諫; n#ϫK߯M䕱C3`޾@Vbs,8YX]qD5Au[?сZ)U!wk+xj-ah8ղ $.pp$vU憹_x)@:B%gm,fIȢkNPW8Λ @2Λv(Jxt!4Z f_\ կN(#K➍Y{llGM h905e1NĈHt-z3΢GSs'j#SN$b#e;.ļ٠<"dIaqa9I|< |,&S˧}t9B[y?rhg RF9rLTT/ih(נB@тTiՙ˚YӁ+KϕӢY/R{:t8Kˠb(@#2Vƌ ^\lnr>+%_ׇ߾O6h[C_QQȀ`^QG̹kYAǍ}/JhրPŷd Z(5P~BX% %2FVhyu&bz'$!)19 d`SPMex"=?SZ2DJld٦6b+c=͡!$*) B) 19>H"v%r, wg2izEI5SXLYu.AY2˙628xA9l^ /4NK1kKkJd[o'!*flڱܨsw猶9_9s[T2Ol=U:|'k30>'0eEe#qlLt V-IꀟcEOq 衅}N{F5:^eʀJPR nlj pMq(Q#E P!/C5.A>< KY0]q+N(_a y6qR#;?FJAy PiI?dn[/=Y W] ?G41>u7VI>vJ=:4WޚsȮȥаH=%#Y's7򡑠o( mM]Q#Χi,~2hVE$,Fk䢛?ݱ/y622 :eJ19KT[UlsIn5A>0r3OY SC+F\Mjt%d w;5ӧ#]'pK  \={%5O 2ճXp2%5b0 <]4b*鑈E|d'=\QikQk(9Q>MjI>1 .zO\]Fz9G=j8dF_Sx1bHW=2ţ%ȑi4Ϧyo\a1Dž7@tTL䘋Gj4dĐmG`1$YT6:6EAŰlt*v?ywf^6,]4`W3d#r!$*)5䁓zn͉U:%AeT6b_+H  Zwn5n t\^T(+8WCffA/Qfn!NDԛ},b\W1.|,I.q.fȃ,O ~6VŹg_F$zOP55CG>!ԐU~RcٝBo0L4b^P~|s 4 JE7Yμu^%0U4"{6صd-Y <; $[)1c ЎKg}}&/eA" rȉ_ƣ++B\}~3/n0*]o?qRŔㅯy˞`rfkLiHqyَ"B~UTk9Ȑ974ݎAft[ [-m1+ޔ Om^:]+{xHckqb5? B}!0ccg/U\ kk jC*'rQiñ߁iu1ݑs K;j;'X1&eAHIr}0$?8ŸQ)FxԴN/Q*n?Tsȏ-68]Q.4eI\\R9ɹѧ-)夜1:LW͚lBȣdݹg [֒"}AgN'} s8yob&1> 1UO\YN9u񿚦3[g{o,LjcWᮁ DZ2K Ӄ%zޮm+@U>CIJ5*DcNsWsƔa23^a z0A3l<)>NXJy"ʛWP=hWvuحe5]U өm%IX> YJ!`Q"WGe֪iOa3^3mvW5ÿ [|6JF~Z3dmN]źM"+FbIy+ZK R h |Xrdm9! (/{y{Nn>BF /}{yg;=-_:͈S#vd ]=f^қ@'WH0( h`j$XDJpwx(3V s!hOBMSٱACWpH0X8RP[\sjMC0H4pȻ0tzu󰵛pa # n1C: 'b~#i\,@HI,u]ZR=Wda-%ya2 GHe`MIleE8ŶQ=Y?sz>c848 b x c?KV|PZ֍ޫ~! [2|;Ktbs_ P]M/;6'WBf ;m5KX2ʃ;ygndaж'fUAZىFV(lہ -b.?đ4>ʡLg ‹ΰٌEB'ӇM7v\?͜j Q&n}ekˎm>zo4;0o#+ڹ ls1ݗlΪ6@n\TUz—qtsǸ6B=s3 2ci@K@ T}?_fqAp[<@vbfj̸-_3j@:BfƮBh\/pѠ7LK~BeTa tbqX HyŋaX7JjOs+:/Wo$ VFO{sT4!gpZ Y"tŤtU#=7{5Vs癶 mWFnU }EhQ/"gȭ^g,zJ,hpDN݌?;)resӣ / ̱,B!Rޱ_Z]8(V -̦_Öc#n!9^qt;}P ȃ{=0<I|OVWB ۲ 5+l,2 cP'\i:҈j@sĖ [%Ug(iN(aLL`P*0Nن 1)8VJ?є7 ԭRX-Ur\~c/רou_RnkFƇIPXiWy ^j9_m t\9!w\+!Lu~$Cm^lu7 \|}K[~.")OABab̃0 he+?ͅVޒP}ʲX4St,wt8\b.9YPM2'TCo Tg0meТ(/th'G( v\X`@]Xi + Ѵ<" +?G9%$Qy/݄=A{^_kf[HZ h-wB݀G>H &fTAFJӾ;Ӂ}X k96ĨY+އgXf'jrS'M?5Í! in&Jr>[0Jg%"be?I kvKT3&,ץ?fN;EQ;wyj{u8z/ wL)3u ADe_$#K=QvG/tv⣽gg=*@[{uygrrͭO__Jξ}'|ኩ5`z5ӌ4PSXbuuGWXjQ{o~4aw &ߺ}N"!Lu1 | *pb(wZ`ncO螋",vz/iB-t#ܤaSBGU}+Y5GF3|6`.44#2]D/wQ'l9iǭ){y; (Bz3@eLGl 4Xv;üJO#K]wh;iK>rϛ_2ArV@ ܐ N2&ޢQk6btlll[5Ehpب%?*{Ae8*z8pbƤ57FA/T:K<.lVD"4x%K;TD ֪i7pVmCҚݯ:K1fʎ1#bCOydy &6]<~ "7b5 T ?م d3vfMjZHJL HobbB+LMbs90ix-0a*9+w/b5bܴn\)#iʛ7>RB:٪)*~y~Gxaߔ^W|-\:N6<17p"Zd ÿ1/Ԏ'o\y }|qX[!Ld+_I='rJ ?F eQ[.fe [Cu #610!1` crU 펌Ez4LʉKofۺU+gav4G{Zt٭fe# wyjsn%v- ʹB7~4Rv6Z\>5СK?25ޘߐD7 ]6*gesj FR`b}(&ah{G۝caoq=T9!t[;uqva]?V1 qjA~3A"Bc~8oZ֙]8[,iކ#.ŭ*9fƔ]hU1< W5msp7gAjp>䙿-;YS# 5MT9 ͖J+Y_"Jj9a>[;L8# xMRz rϊ$T# k|`> M`Xw+^ѳ|dH \]4XbaZՊTױ=fȴJ&,P:=4_2~0  4#ũ.?7FVgu)v!ޔ `&66>l[xX7ѱ$Πѐ}P( HfpPLoA,gi!J)> I4(B OvPg$@R#lJy<;}KqxPH m*9pݠیk4rgFA̟}O0 &ec9mEvE-w0a8'663[ E( aggR9G8EXYY|whNU8糧,-Ŝ7k"c}@m#ߴks7䪊9r?Dwɨ8O8vnpP}M 1]x,"|%+63S2jtllv+uTm+ UzVQ)bufy$},pB'L|#RS͂ؒ5,0\ %&O9#{tzH`Vzw6Z5*m$6ӄvHX~k J;z(?-ۙSާU}u$ͬ75e$K*k%%nZDJ_m'\%Zd>m6X-9#h[4 v(M҂6veF;0q6)* ?|I3ͱ7R@G;")D*To L `9&p4c^;sUy5 ?JÛNVF }\ȮA.Ht:g*jSUv|o:H5@ W_jܷ"Q5p%c. ١xNBR=)GZ׃^z~s@6w{k/<[-yD6O^1:\S$vdAyWrQ r4OH׉o>*[fO᦬Pz2@Y" DPc>uv`W^Brxn3̴~v,W:%ls"kr-w NU"Ձnu!EwΊ<ju/G@cZ@0\hOY>+8IĀ GQd29nlRLtԩ킮 .}? n&N0EZ Z-= ͫ ʶdJЭOx' n4R7v? Vn-ȳҒP ! Ľ# -;́ըԼU{]ޱvQ/c׋GΤ~~dFuFE^<4Veߗl/K c9,d,+3vS~ҍ*Ifv m~C$5#2:6|xf2_Wt3PV tKrB ؆_fm859`n9b!Ɣ ,ک QX 1P^Tv@F]b%u>-6ˀey l^='|5~nTle@-|p23.Vgm(4=M d/*$ ܦo"l0)&Դ3Γ%8ۉnǸ^D4\ƮX^T>r2q9٤,/w1ĿG-0(~ERBAzzPe}=XMYd#xnj/"U6}M)// ;d(AL+S2i3rKyeo_ͶJ\odV]5D;Z۳0}ehJ[ jesw(L2ds&Yfxs538B"ըG[TA's}IĆr,;uĽ(=p'Rd/$bFƜ+18S W T-w(`$6ܒ@%^g+&^202Em[ϜdӠ׌>0^Wt GĺTf V;7%! 1V2Ml_Vo }^pbl2De"ƖC&>~_2Yj#R¯ ,SMp=^/vzU T#f/~ϛCjrՕFuU1|a65OPx߶PkY+\k ]VAy5KȠsO(S=̢XKjQFGP1nqgP8VIdl^k4y;C$բ ăƑi_&tª7hSa*Lj{_y %/Z!l v/KmX;WAѢy˝ bvAynkreepEs5CVxb Z|@ Y4~}r645Y:\lPبe}BEq:ވg?eŒajj9iKgRnY= HM!E [<6m'=qE^7!.h!vv7"mǟЭ GGm";:-,!f vW\:PS;e\Hl Rqΰ|-b7Avh1r0LYC2!;EBTԕI2O&Gh~JDSBѰҧEӗ0|Bc._HKՀwB{7gVA!WW#:TҠ"z2)·, W 9>vixWgua1AgJrTz:wfggHiāX5/+/LŃ{u}<#Oso +Vr,)*Ypw܌]Iv[C ke@KL,z#uB=.t o=F9D7ЄLF^̓2rUB,ucӞ5\f2 |&Š@[t&CO}Dsh!m]G{߿^>̂wM[:1[+ 6й32w8@J'5^kC ݫIk5!tf^*Q'M*G̵6屫qR%{yg2bytW_eO1?qrIy/vB !)jYx@/A5DOXIٵ1'ֹf S 77Gns^Nj׋QE{@堔oЅ?ٛ PZZ`<WfzOh)0/წv`^زDUR,ߣgi}U4jc/{&.w| ~&K-yŀWB¼S.Cl~D%DBiS -TGw=" & 3.5DgV$,>;z^.uӻ}y(#Yfrj\!sWGz^Wd9qkA /a3kaǹnؘڗFǗkiL /̃dZQYcof֩WץK|ea3s~JH%}Ty'nJ&/.^%^ 7C,0d }$ (CzMo;宼S8XX k" mޔV[9]3ҲP͛ zqu'Q%_xeVWg0]Ő-lSݏhC,KhG⛦U*C{ PVyz6KNqK9c( h6"}F]K`pŤNi}&yXG˦*bDSI*ChHd=,ej<]^ P] [Y{ &6$EY }x:rq ғd) j#N}_ ޭ-%7$˘YbY".YcŸl9_TҖpRb׮n2eA|H@$LR[qeKvAu\%=FiF]Ah3RD!bl'tFo?2|넽NӇvpQ>d38ˍ{@Y;`Is3 cX5ۥ7Ęf_ţܛ{8tMҰI@9DORɽ @` eZ)Lǣ7R-wey23|y|6O5܋;AjrYؙdy7Lkc0o O@BoQn$4x~++\0eMYiv}P-[X9_S2 )(Be*ZA`+lu>sU 0>(+CoFڀ&$i>5/5ȇ5v"0_¥@?xx! znlO)GۅtYtOxD013v!^KacK&-I4:2܅"vl9dWk=oၹvdW{^`WόΗeR4:I6i5CymS&0vi0l{5җ>+5_6a. Q bev,y9p_ p}$<] k&g Pj+7N}BՔX5)rƒQ SZaT_U U$?` M 7ecI  ]j͢<3Ľ7?H;XNwH'13våƝ42iP/! ?9)1wS(fqMиnǾPhݰy%?/oDs~#PG5&Wy@,JɉQ/N *cY-o"#=S̶H%Tv> Gh>̞I[96Dpy8l J (AQ[~GCG2T頗m؆HC8yV?Fm'"R!AAtQ"^~q(tFpÐ˧d̓/. ;L@TΉehhRؼ鷾}Č"I|7t|9V`#U#pDXIH W'<te+yHF!u >t2D$ҽ'*XMޜqejRh\4g&z{ cT?IX]@$vtn=Ȕ8UBs̄>i֛Ttf_ڹ_p:2ox q'(Z63o C{o\G#q8Q\dqU߳W; h63f3~C+ o7X3u kp>O#t^1b^`-}8*u H(0uUXZl^b}K tG}wS8,˃=|P `n䀺AjtI**Bɕf٢$C\+iV4UF~H0|ϫLxx[JxnL,Kf.i,.=PҺDΘ:Z&耕bTddl&v w晙 zpj`]m 7\o '~F)xo/߷z ߵ?45x.̔ /6 8I{ /OD¡`w^z+jhr0xu\z$YKT ژW jt "XPrڒ?[j 3ǩ*@I$}NjHEwmjY.V@pٕZ3W-'6c_L I٤pXNv e}kOxof;mc8tkeĞ7,D <E8<76<|XcDb&I[F8%ޔfs!o5viX̨ EGW)xA4Y; 0d`cKF;G"xt<(XpFDfnF#vim) pv]2L`kbx[}xk[K]@J.{gtn\1Ú%c}G!yXb)v|~Q͝lwKL3ؙqaaKx$$U,T(#dm5DiC4 ;Դ>m=1`n  ?%}Z3Q3 ]wiLtu4;4iP|P>7ʽ=ʕ[n1J\;8x!yr`w"KIqO۾qv?,KQr}/l ϔ6^UsbuS,&~"fLRF_0%b03۳nzJ,}m# u1Ji`\zs5k&Yd+JL`æ' xj ЂqVdWaP*TOwR7mû_[iA4sD 8L%'w \R[4oo62^֡Wľ"rcfR 圧ِx?)N@~4 z&K2d=`PI>Jcc6)M0 ƑϩKl9V!e _~{2+PSC7t2|f'PoB$LZi@&ꎹ.YVUyUw ~10O.So'ЭXyTq*,$qr3'%q~?Pӻ7cj6UOkrVj!] . z K6:jpq\|EP]yB~gJHL#kWc8.] O*¶+#ȳ䌻==r Ɨ.x) W D +W<_`۷~6y.ᴑ )eK,42H@(E8]rKK L$Q2 l!=qVڒ9$ S픝ϙEE޹v߶ۜ'@Cm dJӫ%yh NUT:UŽY:%ZNn2ORbx*T8Ǝ:h paP ZR(z_ KV26q_hT%r &K(oWSM#uRF=Rs~%:e\z?ǁ{_'~M˨w^Kt$ I`/Qvot~zA!>icUe_tn\љ!m|_0+!°h5h*(PkU1րegF%ecȘ Gܭ,C+Ysprnbɵ9U7$IT2;a(L+MWU?47(^WGF}^T@tc|2-Du3]¾MTu:QXǁ8(dPYk^fhe.+@D067p=jL[p}ax0RNYko'F2.]'x/mhF0_w1M|쮽mI5t= APn@':,V7-;ď+-34ٷ(`痢(eNicv:S捀Y䮧/3gƓMtt:khy|ѴL~eIt.?TDLD;ARm#t-3Dp汸$C.o-*M}!v1YA,˭GU;4J,Dv|LK0a}g +6YNը@cnP 䌳ȁ"bnrܕ*l ģdrY?SW_>ZNbɾ6#2>iXj^ঝk=*{LdqQ& r$ԐQRyZɲ"3< 8N҅BSszlvuN2ZOĭ »eS2+&qɠԙY&wia;fx(+ wʔI=]k1zl޽5bjR\7"=#CNdM`-b=F Uݐ1$|AfEʱ$qVxp鸩w7r5w^[\O :o2@mIg)-W[oNt 7ܩljfK㚢#Pgn mæWß;Ug'a i5i@vb+̊–`EN6֍|s(ԥyQ (<Իs|6&ˌ`Tfz,WO^qU0iӕ7 jP"Wli#VK2zxƷ^&_t6bB\lbzsYXԀMK6m*5QaO7P&eKVbomJ'C%Ҽ;4}ۺC!Kj2=o&(aVkƝa). (+}u$iwC&6sc d@}/8y)˞sl>N&`qU/ uw8Dol8!3,ܬV+KwRyꝂz<+ nYȲF+o(]888Re)cc\3}%ZX/GӺ]d,ҋcS6^ronojK@q4'qllVsvN99эm: _}8@c)8FRַHL<*.WӶ'VЫ]Zg>:v%lOZ *7,U5_:lAg!}Ȇ|3AXb{gxt.ǟ)Y%^5ڗO޼!POwy`܀-XlpQE2ݑ}?`=*ƯUكTqمs{:J:rR FP?!"p~Lmzi y$/ n[Ntsף$݉)˷rfiQ*}&{XټvR?6tZT( 3MiMe[7~7Aṉ2p_JCfTع!)WS^Rih dJ)sztCR!DcY{$x!?ᱱEyb]c-SĴ|4V)"jd7/^S86 0ҹ̀F 6OheQ7 )5#ZX֧]3چ`D2Oz xc'@g ^g`S2]JZ]ҫ@>n8Ϧ%liΡz*I2ґ8F.}$&NvF7DIȴ}NG o0ʟswn)𕖾-Yu."J(2GfѩuBǖ6-Sr!D+sJOs)4g?Vx:74z0jDwi #@ x=_%{_dWi#t˜yQfU ] GxĠI:@33c.]4!˿NGsF?='e.Y7/)su;m&]/3\WV2*GG7Gtw;ʑU$P^KCΐu]H (\j'aSGٌ Jq(te4B1ˆhnnDb:;-9g{g;AJ>Wj]e=+hH&=rCB,劕ҿ}gt*"Pۭr1+_/IHuĞ j>o8ߎ/o\z8םHWs{vF);FV`e_ xuqT~R~3"02loZ] -]-uיԾsxyDcӂw}K(0[D(*rUQgdc?9U+/)@-ܵA9E,*}omB: ]T``QSz5ﻅ^ZDDhڸ5Q4xNޡAc2 ȶ-JRQdq؂Z+#yLE*ƒVl7= T/}5c` ;[BGtl86}ç;*ҁpl5WӤX^G&6Zjc~B~[]NgO5ŨlrRR?VtV)Ŵ63GUy[&(qQ~6tk:1&6|ML VriB&Tf3x+uB8͏]1IӒ5Ji+\rZ^ [o/i׊GJ%WLG;=㱁4}؎b_!EX'H#IJ1#x qz*m)v~= 5?^ÑT@(@]Ig4s'lS+:,؈ *9gbt'!kH2Ջ8/`N`R[ E)!E[g %ɢ dp]BALaw %;̓q`+pU8AW@st&LO ah}?=G zH o(VC:J2;9Lˢl"׶pB0+hf?ez+.ܬ쩓2-͡tj?0^uLy@Y:ZE̬WweCKJ Яǯz-;V5* jcA.EZIs~NsEGɘB(PtLKc*Jr*PZ30*/jDQv{2c{4XvQdaTfzqu-GZQњ671= AC@4yȱX;pF? SQ^k6]|Y;< KN765clm"iyW>ʹiMeMJ '1ݷ|&T"ع5sV,Tך]1Jaј#3B4ptYkQ_[FԶ=PdD 3TFj䷧BB`g 1dvk~z5@uUܽrKN9$ UTK&)O@?H̹%I ";poW8irf儗u`zOz+Ry6i؊>-1)C9)qj $#"U}ӚW /U ڼVisnY e(}W⑬o} B4!&pㄟwG2$KmDx-x N)ap^Tv95&7A?fwtƐl2oA9ưl:8;_e#DEalp>+rA"* l|9szĮIv2s<[Q}NNTZefNL,[? ]۶e {NG#§]~odi^~6S)ޭIv:$FOEc95^>4vA$a|b.̬钍zⅣY.g)rJ"2ݥ$/ED fD۳[oOm\B ^ʼn7ct,">#e[F ɸsB0Is A`4n7S5ȋ;g^+eK&mgNr\J6i 'H-\(Xz43$ ]Ɋ>^+kRm DjRuUmW7^dp0FQ?{̭ɰ`4d;DLve*qi]4-߯W%dBu{yp[ r4˦`+=CIR!JhڈJMrg_7Odqv+2%CNrSծCWQ{X48j[(1,ޫ^Q R+r<^js sӑ9M7 "[~C[ Et(M"2^0 vSwl=Y B {}dCߝ Vv~y ܪYdi D:n!拨UʬrT/z;G-Ӽ]u yA&IQ,^pH4e+h'wɪ`-Je;`y<:97P { q7MϴK݇S)};vNE4&lĠ\DJ*9rfE>E&}3]%Hjs3Qߵ֙ :7N ~o:?)*hs[KFOϒ4Kʍ$wJL@d+{!,.a M`,^oܟh tILmKg"/ϑG'VNW^C͙s"&VsMiM4p XJp\g!4}=z%mhrو `[PNENKfoűE}vJ{$xts T'!:Uȍp;q\t*VLv M^w̘-}XO"gyt8e@X[H@qVc. *ljYtbCDۏt Yj-.F{o{)fso#EǗ ~p/kܓrUq4f=54^R>z['i=*ؖ;YX0t Ddq}{ޓes<bv p ~DOk/Rk z?c"xN+a+"<:.I}(%*j8[IBppv(6P7g;om8R成Qܽjo/ՙU9fsǭmm..xNeK#62V4Α[C̔Y.<ۗL:v -@(8B.qA-)?kۘd#H;!ȸ-z9.^UOp _mǢ&DԽc'7H0|ŷI7F/׿ +j RtQU#]w2y4/ˊrE('We,:#,#C{7%5?|;7ńi(cGo0YcnފeSFKayKYp\;Oe9`6t}tq}KxO%aZRԁ$QwiA&?-$my \wjOG9O RF7m󞖝9ZĔZtb3aeۜsYu@ϔr%x|SE.^мsuHݳ67MƕN !e⼼kC <[AIޮ>(ZpK1Rs㋁KJ5#nu+AH|TYGoF蘳Z8uOm=0B6LճF3'eG*)a]7!U&Jۍ"TY~zn9%x-PaQeࣩQD[z4pӎ0 ̵}Lne.Kv0ksHP0xl` J= wt4Ȼ `+,NX^̅(ݿ SKV>I4o=d Qu~O+2/VA Ve< ,1ǔ}oK^d̽wq dB6V,u:E|CBS~۪0[ N0ݎQ8O[7G mv!+)K%DM{վ`N 0( `a1#`k^]X )oO9 ־w**#C!x39x{NԀuYYwFMpm/<&#Hx']f"x X§M" ":\>D9R:\8aË!ї_=Dzh)lzOpHԼ)߸@ѸP^/ހpl[Cpg> vju4x:Waw%yQ"f|A)}Fl>o (tm!r 홷!g++VHpɋRu6c2 ! OouW i<߃OkU Z%]m ,uAOKS WI2s<@uNvLG-tގ)^)ͳ3> Q&o1A;cM?OJUJrv1-R3l/|CTڊȞ^Jo ߻"XX ./ 7:dm,@s7}}D ȥ3uu[*>9X ZgqQ`^e@sƪ*`n 0ڔfZXͿi|O`dBuܞo d'WB26X\_uJ/n~[SzyZyּUHoR'crʧͨ7GѶzR8T JBx_ -jRC~gx$y 8 u89馓 d"<ljj^tE(PL^;J)]nQAu.S+~ǘ1ti6 ~kXVȕ;&AO*^\9< U)*n&nC,*)(޹Av'@}+kÖZcܻFFlexVBxts*궻_.YqFL)/="&FV *ⷢBG *şCL2X2tt&O>-Ma>F`b0O%|RjWl%͔&ֺؓ*In9{d~daݸ{pJ*nfdyVOe߾/EW5{`KcVmYZ UtE2aTą!>uR7fyU BlY845n_hu$pHz5<#σbr2?+2fZ9c.̈glL+2(^]Q'\ێ,_j 1p &ӱLDvBF9~*34Ҿ42(~,RȻFZjM뱾@1LLfbVOR"3쐏4lw\ePVRv*j谊s'ing GBLjSTĻ}0 +:ĊJz)Qjr3= ĉUѩGv: վP+=IulhҎ4BPwn{Vr!{`E1m;-GCp!g<{PpW LOt])٥C9;1];KRԜ jjb<|ˣ_$zm}o@kUޔk2pe"w±`njDdԻCg[Ru3/ \D˦n gO2V7O_gF;qSkxvXĜI={\ քm(]犌1.N$#K,90=B??gt8 ćR<:.B)v_ Z]I=M%3+Z"*;nʇD[@':]l9{  c% &aD6B"P*J0J/]VUȆ"D uiÒ쐁80 W ?B%.V)]ϱ":Ċ 8H0OKqbG}m-.]v$v+B6tjiU%Gfu-~vo9jS[>*o`3T\m<8AK8|8r*ߎ/z4"И 5G?̿ql[Bx'ՆZL%KL&sN}v}]C;|iF刂MtPyldR*)oDs!4Lydr8Lv}2;go7t"X!ݪ`|7^U[Wle88{M^7iㄡ3[6k i5"=Q>HnMg Re;)E̦^Qsv?$6ִ )I̵hE _'.=2 .˺[YAe@!?0Sf?s\18ӺN}O(QqQ,J&Vyz4 +k ʜ\El_٪~ BDm@-MQQ4s73) ~R۳;enYp . xMSh}B<,|Y*m2&}=G?R8ZvM2܊Y MȩĜd~W~!RB:b )m`Ujp85 3`6>ĝf)%ʵ .u df077'ɆK;z5XIܱqf% 3S{\9PnܴR$ɵEț(fnv9g*^LsV"aGb` /}*s!{F'W'<1E046HhNM^FjB@He Dt49qൕėVZ Hyc_Ex官X ~rRǝҸ_4g8@Զz.g2-;y=itĨz`wwȐjҦ]3g q7X>6xolp:卻ߦc6+Ȩ}\laS0pRP$K7S:>u_uat >A<5ۙX-zӡT,Zh="_j6y) ǿ=^0]h+j I;?tsLjR{Zd X{紮^#$⿞1+A0H$miUvcRBrY Rd>Z!i${Xx]B5qx+5[S%4w_ Ji=|i0EM Y7;"8R@ r`)=}u! 4c=ZE)}#J%jf<,me*g_n91 wxm EHdڗwObw۴3t$88Syx*CwģM< YK tHg5$;Y}*-Qal*A$a8xAuR'2j4&mO&V6aɆ Ӎ? JMZp/qOn{*Vp[@5ɺK 瞏 f ,z_Ne&4)Mmϟ5#UJfmb#p%6F¡`o

"W" +;#;+Zl,zLCѪ ~_IohN_:N\ܹ {p^bٌ^6mU@Qأ4zg ~WO[1kZ\3/7xt;Wo\ u>#!6w#CP߉Meqv~'}*yee #Fri)_% ELD _T9 ύ%Xp2M]t3wZ~4ͷ2 zǴΌ_sۭۻyEΞ΃l͸;+S-|R] }{vDrH'̟#ƃ>H% +frlt ' z'Eg~[zbuZS6[ [cFG&c)2Ug"|SȎA܎(d֝~e! -?Rj T'7*aA2BeeΝ$PW(HA.4gH4"Rra86KIu9!;J/@hR̾?|{&M^B3I ĩ%i5@ @fXd;5h: #ek)Vt&_7n3\;Wl^X|+ki7a X^;QΊYABQZH0]4EIXxD툹6R Yƞ 5%PcPƿҥ?gҹ`=B.S,tA`, Td{!8knFVLdϒh4[]:FF-*FB\ P&d8죜9'#"Gw=EmLpH`F:EX0c5;dʤ[ JMpn^Lۊ2bim1c'Uh@Yb޿uD*ݰ׵;YbYg4\{lͼgFS([C,|X͗zOY•ˆ$MV=X)@>uTDSk/p8E=C]oX^8تtp19F9*21DiԜD|I:7lehRˣJTq0+'l4܏HKڶ2S?)nĬ"TQrlbA8etn}ƔDo~tHmk b_R*v!U[Pn90 4#(̐nRxR!j[BIBt5[x$O.Snr FWrʩ,4IHKffN} OlX#]Lury6 ?iX 7أj!(Es 9Vշ>'2 |efEKLiD&pN`cey^1 'iV/F[&]eM3Ӑ_c8B#QTBygaND:!Pa)̸} /Xꨎ{{!|L0aoӕn@_ 9kHAظM^s yvz+AI5?cqj ]IDi^k_yQOӤs{G^[늤N)ɭ%,F !a)5#> j>kgb>rxS`:YåHG1z@jc.ΣpyQg XKwtۤbkAAnl˶+g7 A-o]/}غhyhw0Qo Pe>N2,z tUqzXH@OxcB^`,1 mhFd淰+rGCxb{ԓؗj?vIP$ 8G%  N_cj=ǑC̴,팈% |{IuVs{ίȁ4 qb Z,KfH-/`Mݏ.dFu] 뛪 g3/K"ߨ*7ey6Tksn>'9]'`OIB'o4qǷ cii4aN b֢rω`4oʃ9 u~al` WztߗNV$KKW[M1~Z_T/Xq>]>hXGP̌hAK[^AqDL R@g<7c,ǿ-mU0[ƒ˶b@l0AE:T2Qnxv"і Oc-* =9L\4o|[CC i׃/DO5J)roSv=B=+07 ,m9wrl9(X~ ?uSa`geFٵ֩0Q"Q$Z# 1RjmSFܑU!:E8^1Xd-C <4 4;W"Myw3 u4`e&@LY`>Yp`oY^q؍6%%".<-rrWPꥂXl'=eb0ΒjHr|Y=$ev SzP(q`R8z 8WeKZY9W5lAKqQhgᥛz3 ^=q#~KDCT#?x[B4~zkj-b/Q@Qq`O&}f96ZM6l䔑ib7cSz+sg-Y1C-|,z*RLXѵ_HG]Dh➓ 0%);Ro" QOTr]s0ljRNW@LE &Kn:b >b^cFpk ` bge`+wѐx7H BƜŨ(C!-(!4Aש'l P9ݬb@4`BMUs]:J؅"T#Fj,w%! 4fTbބy!A{cmcHݱDPvX`Y/N X6ov(ưy`0֨R%w T%OʒLsrPVEw_r wຎs7fF!x#;Qh >d9 =ܕVM8btҬ&YAnhe;*(_f 0|7ZZG -Y.P;>bPC{[ Qun|nF3&m3wa!HVQR{mA! :E? X2@*}\24m'uہv-RR8RЙeZ3 =XAåQ|ʱ[y@Y+@}9jet-l^_0dwɬ^iz72b _n5~;^C5 S ~"YD9l2U\|h%%ـl'EBN7D·&Z!1i W`dAY,~cGULOK8&BpSC&ID$- ۳8Om-s \"L4&;-f8lc:ҙ$I~.,G1Uʅ)}s#çD}н4)ϔre0yq-S}6υ|nqjS#epdFqnhd7pQ4x` R=x<'Nz  u6?^b:H\!ؓcR$IWG-"L\4;eKt>T#]\LϣDwEpm̼1J@YFZzv೧dhH1t5&ŃXfjm|=`rpH8ñC=#QLi|H}a($@S5IWj 6m%q9\&l7V r$D|XP;v V+h.DxG(,~?a]o#G¸<-8u0T1\_U댈,20J UڃݸV R]\ W}.jOx+D >4z˯? 5YPCAБ?rK.Mo(R&ch̕Dǥt5AEX)L+,H2Agޜ фRR3 Ztӂ'kf EdW^_6MUQ13U^R6E!DN `M!"@x)QC@oP8&HepUz@D &J{ 4rciv]h e5-u7֘|'IodM`hg|{I.pq}f1d("㭤kQc%gsXdut>l) Y*bdU/$RuʓekQ rmD ;5c<<{`"M#) E6]>3Ul`_`:^ml*%lL%`ދDh%tù5/ 5?qC ">%IVYsK $J?xt#)ވot,+uAdR HByg˰qFʊKh1NgNmjw() HzBo➑:ErKed;f/S@*mqz[NOtg.J#,qq槽 'C[7@mBy<;apR?dl ~l|ϝK<'Tb).8Rp M%-Yg\vx5I|!-hQQC7ݳ^R74U6Ju\LS%) 3y׬ǎ?Wwddq>Yn<% @Cm̅ŸORЗ,a݌M3k /W@3ss]ZJ#uRnJqmx"q&\n )?Qcg3E]/@L-%VN &Όdd^H+v; Yცu}3^>oCVG䊠F'b@}㉬CpkƩT83)dwG XςK xsls{Ik ș1m:YsQY}ۂ3I~Ú`lGlAΜE `7j)h ۖ=ꝿČwgt\-"fB]U/%oLP7JlApN=P ҡ kȤI0`wAGDzJn*QoM__ھBm$-~sXٗ{FbWwz)6~ 2 L1ZI4!<զS廰G9d~B4[Y\qC7ՙ@K&@]CxhM!Xft3VW#b$F3"}?t@{Ηb8+B\UTeSr4|ZšBrtNYy奐k8t0 | ϸ0ng;`G9`NT m Szڅ8'ۙ a!A-tfjAl k!p6>C<Es<gT\umm n-ѷU@b:,t&)X~gD<AKc&eX">z |?Ch) purEj>yҼ,, aeJoa%e}(NrR xdBp, ZIg8T& )Rt5:r32Hx/n[6+?ެ$5 ]{q6.AtPu;2.y4hfU Ĭ.?{' Lv#=hTH֚2ݯ!DZQdZ! K6jWQoBm?#'@c27{N fFXK-l/v].̄m߉_RAC^ivMf kBUVLqל|%f:W^!L+r؃,~϶uEUHM/,OwuWl*6#iAyrЮv_d^s)@9uѤCl՗ U Lx7 !ąܖoz5޽C,^}|2`dØFH!G52o~OINO)b坜#w6aJ>S*7Q#-2B r˒ܨzN5 os,T7)[> ϸ7dYrjpP ՍC f7(Nu;gTœy좺Hb5# Oٷɲ\ndE M @BOU֭%.sD^an?HP7D{LhYS~Cư }8gIE'\|t:tՙL0ȐS?4`yd 1єh40%n:[`{ݭx/#T=oQ4\ǖs|\[7+k@p n뵢Wjh8@߻!HEJz7gZJHe5&// ywwZ E ރq cǹ-XZSE+$|[ŕYJA7~?ik8y\+vzmYC: X\yD0hgvfi+N9v&Ըa8As9+%3q=L@fKQ.6;_!P0vU0vYG(Ee.e,E HzUZ,} _A!.4% QK}T?XpYo%KUKO_ [JVR$s@}k>}8rSﶜΓ$`t~p]X2`B~!HC-*ױт$4KVa1{Q i]x 6UZ& wBj*u2/iCz揮A[1΢N|D!v%w}^1Z7__h6R~yI5!Fh+%Dr1g7];(AǪhϝm/u[,T'U-[%p̴f`5%%[}wc=3וlW}QC @Ҡ@8ڋzCm%.}\Y:cMoJ {nikz0z⏛lS_Hv1QϦ7CWf;\73e--ӒPkOCG&4iO& (EZ& ߘԈ\9P?U! gaaM> l+XV}YN}cK2j2?bQf^A{@A-zoqID]cI'yVw)t9 fwɥ]<`'ޫ '!_\TZ):9n#g ]SM3mY&pB)3䌱w f7,KW.C*v<7GNj٤\<. hyewNŠHT%h\W% }>SW8'J< Yp *[G~35Q!  N=WDBU1~sR[C싹8ȳ F&&ol_`0@$V"pr䠣 ,P^ ȋYK͵KWFK=< Q  N]EW#V ݍwN>¦# 0mZ&gjYW?V IKE*kc=+2OAȜL3MÅR ;Ѐm&-eSъgn LYJ6$~d)o+eT7CیbU/CX?3+]vl¾BJJ{fi#>oxc@pƯWbxtí|?z~g:2FA oqI8ie7I~ Cge.q5;*yM&=( q$B?AFonjaΤ"Qhm% g#_;3sxh"V8ۦR_ɉ Ѳv"gzܳvrU[L{y>2nT( G/)qm5d)eWX5YL;%^RH[ /T9U[tgu`e6(kt%u 2kPơl4 [7\;ȇ^O]*ݓ $&ZFTp,YaOÕB#q'o$OJ6͈6j#QmaJOcM`m4ށbCw{?2mAs+SMZ+U\?ʒo´Ow5L݌픥ۏJrL/2zq>AΨxΤ[B.btqImCAbKP&GvGfRí- :1Dç"I=o/r`wl/2Y.iq=,ꩰ]=,a%>?_CUM,IC۠;9~On[y>* !Q6*nZ3yVf@_(n61StF+{IS+ŮH E{АC+RfZf jP׭_X9㫈8!FY;s>lƬYˢ{r떥53¿UmGߓeFDjDzvFRJ5&#,vRXmB+D]ڛpa;ҊQQpYHj_&' XFm\JOӲ5E2ү{ 5K`R)3QmH Y'$-K}NQfM{V3QKn,+_ʩ#"p?гךn,jG$K]][S^*ؿf_iev*xJ[&EٓhB `Pe$j@L4U%rHT]8^_B۸}5rbs\JˈMɴ(Y8%\p:8WGȈ”|1T <(|8F%3LB[p=sFSžW#Vt0?>|jGlA}'Ib/TNJp*AU_#`'jG 3sRX|Z+)ΚEh^_V2<%BQD1z4P_]"Vh u"MwǯD=ez ,`Ty>頵8VdF]e"?%{ZU~:Go"Ql M/~0@9q[ HyY5U>g1w5v-:#Q/}_ 5) rY@~̍&=/ ɻ),)m\7Gvl*5eH%=@+ӂ8JCn =եUCF~w-d)QMjXA݃7B ܮVt0n"!!N"͵?fYY%E}j5Ou$ܚS@S[>(~PAKfgcU_}-Geܜu n!0C4畭!Xyk*LjTu:Wi\"]hdkeY͉~䗩25p٥P*n#0Zǩ$jSll.te p y҂ro\m nEhID*q]$o}0 G{0iVM> t6lM@r'J\2ܰj^jk! ύogmN|^Aa2DeqXIiř 5+ܻ4\7Q<vH.yHZnƌ*~- ~Ihە68)?A:m堵ZB 7q`^*g=[O>6@34Sݢ.+mPe?a׻>6_>, Xs>vǎQl4TaM+-p\í]HH^U& _1Oed M.,~.p\)hMa6" s"|KUnvxr $Cnƚ6y@LpQ  `Wx,?ڮ v?!۞(_"(EFXFh[SKi iBfӠQH纹=SҦ\4\~3gk|n:)cɎ 5Br4˗Ĥ2ft j!^i+#A8f}&])m˴U}1O*CDg 6!$,X؎j2홴]{}IĊь- }H{у cr/5g2m (՝ ^ӈm۶P)2#=\tN8?^yqv. V3lXoo(V99l Æcj IUT6X6mZ}GnAE,d`S' [8&}jW/(o+۸{xd oED09GW2Tػ"C_[USTv LzY؞* !W/^lddjah] ۢ{Gu{D;ޘ8{gRDsHI\l6x5 ʟáߌ*(-ڡDT&TDCJPh2)Q?Q#jQ6o?t>e2t)rbuoI6d80cR,sC+H ZorhEm2 Tx=Q;ڼY:ni,jnlbUxI?8*7sh*u1m3F_O}(_՗ICG;>v#`@yc]Mi{#cD =0!tx%#j‘ENIMjDkA^,VW]=08w )M~K@$a8 T~/@"xzWsDtƹ_p+dĈW3AZڈʪ[䅍2PmVj TX&ZTbGF?ln"$G1N"7Lqx_Цr_4HSayl# Q:͓=$7.ah$а=*Pw:>MdF{!'?a`f}Ʊ[B!4+E=%42&p =lNZ$`Yts;L.ƺ4`ajoɴ>BMŘL-N;eۗyjQz'~t+AZ5Zz N!e-Z{`73:3k޺ρqܧ"X(w]xag8 b bede殿]5k Z֜ X)Mwh9T>l'~+2*cM,bG2 ڔdd)1L%5 M1 k秋-k$4m"ˎJ]kaֈ24ʽ!^cy$A؞(qI. 3g-Fs*83(7{lӃC_L v )}-D{}H~z>wi;V6U {㦎f3S/*[C+>Gs}!">pn>r_ܲL)lokI`ț_qpNa{qCňg读$rgZئZLwpsRxx =G]oU6]v @? }LA|rUSMbo&P.W{Bڲ GbU'ؔ'iAh}|Lŷbj+o4B>)y1\A~MΌw36_t<|{1 `Kg/M;34s';?j%a,Ѥ%5"qR@LjO>~[SnYsqF0K+RE» Bk?;- "o2FC 奀ɥM5 YJAhT'+\YP ];3<#a0\Xý;B{¢_s``*pFRR$$Ë@m^݀؎i0رHEНZ€WJ>AA2+u'Kw`DnJf;xV-2Otbr2Ͻq6Ⱘ{#fȻ ub-17MCP+!W#2"evT"h^& ^ufG#> oH` a)F,ՠݑEp4E'G(Br2!̀̀#9yDqf"B+،^?~QP M،{kzG'l8O(ͻtHͰΣDN/28),L]Wuש2ܢU"%OnF4nF(uҟ8HxbHp#Dm248/),-bc}r9Jϙ?<{Vj}Ds`U:&:NJ5x8bu Ox c :}k $}0]j>Y(PB嬩euQ OuΜ4Gj`slNYu*UvjW>w"~L3Pm0hRJ~I$ވPqaMSf;4aHfbsѐNPfXivx8z;}wlhO4Z=1꾦 +!Y-_[[λrvCjO kEq M"5> Hjzdv?-v蕁&;P&K`LL! \$1vM.25$M"]|CRh8IVwkvz?e;.d"19GܖOptLDy)/2w`YYK4ѿ8!Qdn b(5bSǘL `8XԎw)KP.^IƇ\gQhoi:g0] ,sıσ ^U;q5зgYG+)0Xu{KMٖ7J%b [:clpaGnNM9дpd[f2D{1?)BM@x@^fnfK-3:0e m^Q-zPq|r7 0#>#!(iz_H|>p%[eg}MLV FOjAs\p~bxJh޳ux'r,)Du!jbW"-P>U=Z0pkml=bo 6ް?^4q('_RYw~s傡9'*(*׮%I*LeZ@t"(BN%?Mũi2BjZ=O%y6Oyel,sU,ځ18w-y7S[W%P ,w[󿼝Ў;Unޏs73d_;Cd`m@_ WHhSDDz2|Z߭0eig( LYRYe)߲;зV:-hJeg6s i@e>3R+)g(CXGG< TEν'ܱ7ZoҮ # }&bf% g[S1&C3D/AS)R}?_#.%n=HD F%2Z˅OÌV+(rםbbw}[M$dV55]w]aKRT+lOgK O0;'}_?B'Q?4-ȑϨ:_imm$uASC8L JA_Rx }ݘm$A3 @Ϊќ➢q.0B!Vd? SP!c| UM \iQ?2i hFSfzRfHmsQ;sP/\0۬.jվI XX//'(c,Ow20dj+k3VVƒ{ o7k=SManłAp?e8a3`NB1YHp7<.,ky~g4Rxn -TA:+| Am'Him'`ab{cq`3cRZD9:?z4|ͭy;)WlJR6֕(hbG0XOR(5X7%>zVܩi,R€- 9Q[\.b+>R_صz b-~RGH碒}Φ]{SB? Tn ZI+DIs@y YG7Ye$[S DD/a<KX "8fJ~$O hw&^piFi;>£ s%m.fDEϙT3?Mj!8;[H}Y°Sq %"Љ-E!G tpM s&LxIr7F*D&BUL~bh2a󘤭J;z1J|={te<_mT:+DUy-Pk!Ifj➈*l痑-Z7wؙV4ao<O Q$wX-G-]H`UM|3uv€T "<TT-򐑳@"6|ݥS``Qt]p_+& _y1Z4BzOFp ];C scro}IFu{!Z``G`׮-|WP %EIdR\g|ګ0-bY#/:+h.kioJԐZ-q]$:C[4L: G/8aLX8FQ??lHdt 4h*L.^c#sQ7 )՟`iAam~N8: '~j(! \*U&öwxx'l2(DAY쑤-u\nDug8SC_zYoRN(]XnRT"cȦB[wz",-iX~=1BUxiAMĻkFpvh9uVGO1lvuFM5?x qc.pkraW+ז)2mF4&EdD}`]zHhd3%$w#JXg[nFM)i{:f ;p^m^duGr ѩA>?{ tȲ%[1յZj5?A]`yKiSa 1j`̳c$ B帤0]RvےO7fwLf,LPrtzj`(cDI-}]6QJSSc7VFCF;)a]z=2]m\V7xqqe _r&~8C~qI+xdLv1#,52@BEO0²-dK[A|(װI6,gurK+9̤^^QL@ 6v_sme=1C)$$R;!WD%HNɺ~rկ"ξz]ˌ!L;%J/Cy%Ǩ,^UX=P*G>F˙q%rk/MAW$YgcLFŕUywaR%SX'YΠP9zOhԱ):VXsK=%PMy/)PORMrddE/ȓZxc(E DD+HW (?oٗ#{v css_Hk&'/$ >xk!& /Ylf.?bY,3'l0,Ó#isۋ2!V? D :1bn\ևoL&lHg?C/&UNk1*֚|WKyl?'zW+w:oFb۷חl!Fw9 ţi|܍ێ߀Tѧ!Z=&'vh.~|S@q0,xn7Jp*-j@l~*5ij+-6^z{$?7ڇӥqV~~z'qt +סJ}V|32fLoQ;Sph'6ɗwf #&/ е:Yrb[.ňzXcD|UK= ٯ "8w;s΍ S^ͮ%&t(-3 L0,؏3VJ,<)x""Gdpt4 {rvUr=t )‹oq^c;JEU xbbޏ,,7 ˗Ηt,52ɓYo:+xR W8cM=WF$Ug f ePN~6/8r@@=pfZ皡Ռ3χ2hU1]_oW+;| 7Ks<JGOO r4L6BOMftQF'Y@z< k,NtYU>W'>L7)Z(5Ga >G2CPe%Kt8" ijܶ&OAèlMa|$Lu'WsbJm,27[*_q:)AL-ccn Cى?Ɓ*ZMNp B-D:Nae HTbFHYEED4tslFIĄ-gEsvU'DuB? 8Qka!{&#jlB--"zz@h&Ҫ Š)9KItI@'~^|,;\5bţ<% Ӷ鋦Aw"i}C;O? ;~ih#(q1RQ߫D@{<$\< Mͬz@MzuV)TF˧.7C)w'x~J <y ڵ]zOOJ{,73pzSiq`FY+N`TF4Zexv *ʁ[ZpME8 *m]"] \T1_Q#;V4J80%ƗZR2_= m"WȬ::]VM٨OFBdUWMEY#U'qK3>c͑aX&ޢ+[v"Y{Nzw3Y F.ԡV5VyAT =v 9 )aѺ3`( &v^JoN&}FKlVڐwksO*,GbMѹD+KpYQx %[htT.C"}m]1f;ji+*y#SvᅾmpFlZ@0[5 *!Y<2/WRT]!3~&,d4BOH(;MU< d)9k+|JWeu\|{_5RxT&sY/LB*vN,1C_m q^)@O4_\J2ٹ|)=GFG|{k(;eKvtܒ+ ?vH VjJ0~UIC';[Ѿ,oI#6|J/TLop\ki08`6-u ɸV[y"aQcLjU/\:=hcwJ4Ռe?JV `iX zyN*ln>Ѕ;D5H-doE)#%ʉ#^g1 8!ԟYiZEW,[y^=|$=˂0hY&?jP~9U*q mfʩ_ªs\j,ttc:Y]z/ >p 22:˾5,, %^^Rt97EK#Q{^ީQ7k?H W0Upkq>2K(ҝr|܅p/a< 0. 8Кu0Ǭ`T$bD6|isZ>pQAS{gqiwrnu2scz0h3 Ͼ iYmw>1 1d&)ɿ2  +L|>gspWDŽMƋT K%Uc!t|vn'$#0Ӥ6VZLdJNM{  rDXi:5qyU NҖ+o{P5ȥ[wG;}Pah|ã-zo.'oW<W}?>oI؜Zl~Qin<"gD82?[hQ5iOp |C5w((*&cXm[jRIcPbre=ɘ ]Ž+j:"硸o_Wv'^ %9V8ryeUۼ$7QØscbEyBOa0vczW AcHH }Oހ]A-ک9䈝 -aYm \f84¼fs}oBpeJZYGȔt#ro[> G--G~5U 'G`-Kmt* )ﾍԦv R q ;G0 ,ϱ SÔ+Z/!HCeD^nXhG]qc:@dKjB߼(5 1ѼjVHh|3;<ឳoS`ӜgKBMP+z ?@ _FWTfA#!AR`rÌR_,5osĽրLU۳~\fZ=P Nx4$4@6+w/cGΕ g˲\zќBh}X@C2u>2HwZ4`PS ~GQg&4eCe,y@~`kJR$(I}AIE1VAPWu`<-K@eUó$!(?Lь&HGЍo)-'JcjֵR?{ĕ *H7Wo΍t0;gh Hݯ2t|F]VײZhy0$n(24k':p";QvnR4<'ݼrtr:17ĆU41weQ<`4C MB9 i3KA-Tגr?ѿB+/(uCs%Nh)8ԺU~*eQ" 2^;:V`'9+bW٤$ݒ-!f+"CEw|:~ ^bq%.\FX9ʹj 2 YP=_]&z+ؼ֖wG6+ pRȨASQD?vwC^dBJR4at2 &Txh)}D%jId? v ^'FFXq$PFdɛZlbTFvUq{uIr+1{5'zK~JHiJ.yrҎ/1 3oUh (I{&&;5Tӷ*7eU|S ^rnu1U/2g)7Zqb-:A3gms@p_a=d_ bXm `1LQ.=T&4kwLйB=vQIQ|Gl4"s%Z 3a`t +.,Kbn:UŒzxf:FJ5>*kYLvqHL w=q0[L. ;(o ɔl 1P|DXøLy?65]f):$E̓ 3UOUvtŽ 1+ ! Q"]7qDmɃ!jҶW\Is M "z;Y=&5zwKxa!+G-G BVh}x2G2xA__כ/*(Ii?m?Kæj3WII%tpñE{`(\{MS/:dv{RK:-ݽ/.d$v,)#f*3?~ o+lpt/Ъy8r!ziȴ&9`F JHRCl3:؋SQ0>M.Κn1p^@Gxԑ b18җ8a ?wktԽ(uFga0p" ÜmQ3xl ojͱ=VQ سT b(\)?c]H^P87_lgn_m*}0p0^cځhDYu$Г;/KDܖ]UrXFp9)-stرdջ|%Cn]@h Kg^SGWoN“ڣq[W('ŎkT&6?QOIj'dV }ПC. rztnchx𳪶D*گ[Tcm铧/}\6”eh;b]FBX\c&w46qtujv%͜q kR{Rk˄4WNX2)UxEl@Q~0ՙK1Ml5O}`lweF3@Ol"ΰ"prmN݉Nl~ 㞭.SK셭}`| f}46Ϭ+ TF0#E8zY ,S4&U\' ¤dp'VPASQ @z_4=幔6BB/M)B}f36rx,8o&OcNH4pYlVi5}<Dy5z&ZIҖZd5yGEig}y١,^}qr==l-tn?.7?=,g2mà q/,qn^Ee0Bhဃdx #7gWETx/tvmIZb9 Q# * )a..j8lIBLVEС!Dy( aݢ:$Hx aZ+ZNjA1{ܾ[C* `אiҟ- ]JԒD.z?[iê~c($C߳=$ }: 1/?o۸ {A)J8mA#3KR0Bۂ%w9:Brn3^.m=@nD2fN3i4jzՆzB3 [Tń*%~hXCi\! `R|QGvN*1tdr%40옦hمX^f=1i;&Xn+uZU0@=C(o_ E.l'O!qW{u=vDhYцh/$<UD%H ٺ rLs1PedE@y("t P@KK%+|j4̘tɶMwR\dݙך!nl r2 D1 17sӒ~gM՟ |z7 ,71ѸHBḣdK*6`;_qlnG޼q}1iP/ma"S@Y?18,8h|y*R tG0dFCahTY."Xd1bGIF& Z>Iק3:&r}"COooM! D)yAg4^;/!tk oYdg@#KAX$- ͙݄@W5OzZ}!:_b`OK]s'`9v\$f?4Ii'$q KC`oz)Bk-EP ~,bBȷ|9sa Q92ԝSQ9j] J8@biOLu2žw#eMTDo7\tIvV&׿~II͠"PPx.(iItl?[h DSr419&ظ;S/7' Tg G^fNhw\-a{j,`o_oj?UduY 4hWlXK! yZ++4 1:8%'1߭}Ojh}D'm_@*Xj}`1sgn5P)7ʋf/zg%!er9gA'ZB4 q;t@*Հ)Frէ>uǩ!3cxj96qC{, ^-`;^(+Q !׊} 8VD%*(*l i#54+(~gyI[G+ȊTqN b8#WQ&&%vfN;Vc$Nv{Ԛt!5DK?=> ;q0y2D%/#[hAj0ge <߲th5Z4!5 $KF;5ӄ>tưܹ5S>t'J7Ml=J~׾WQ9m(Boܐ|x=$?\ԑ;6@"Mx$^ʍo;ZKXȑTŘehh5NSf/g2:+m MzT D8y s!ΌCj6.a @Ż5X>AWD=L!q92ˬH| ǩI~o4*i" :ɻ tׁDػ9%/JSGui1i1ٿ  UXGFho$sŚgi+ӞnmW&y  KXlKVQZ4 S0^~ zAF? =w+ 0DxAaŠ5ܣC"rUBJwݳm巏R Yefg^/$} 2H4> z9npJL<Ϣ4)Zu ;DN EqȚ 8% 8f~<@iyHؿ3f.';{^7(7I;DUQŽ$MZ,#3{Ghx N'葁XSKd}E\ U BA+Rμ}M+ Khg8p 37BN@xcgmRM .껕5A%dC ~-aCAےbF Sb0vM\֕;LL :nRԓ+37 ly1Ub vSE,[ryPZT8gR5MZtIh-T`` \gwu4z'B5t\?W_ [aX׶NgxO'IO8m:`9REo4tMP4Cm/M5Xz1"Ӄ01kr(w 7Ph9QvΌ#>nJ3P0</gn ĕ]}*bb~fʰxVмZ:T3]>7b?@:r<Ƚ/ʬPG]$ԄH4)xJ&!xR!%˰^\=AxhE΋l73?lh!,q .t[-t\!S=c7Az2xy*8rZՃBVJ/\ZM4 0ؿ7VZ0}G8"P50Q )Pa._aCčQ~.~o!mɿн|56̤`$0.ɐ֞Ψ,KU&k+,yBWx;x'(rq 9eE/ziHhl0Xi'1RuCƲЇR|e|;iksj50f:byٹ__E:V|+1(PupP%VHYHͫ9uX3$N_W6% on80(D:wv/bXxae%S"Vn|Cr2e 6"*>3A5ZMuQS.ǼFQ\8,"շXXt][r \R56̽s0{2pi>Vxci'KH&>626/L<@$Y[ϦVd6C \7ZXd֊鎑cLW$K1zX(.#h$*!z'9%2f:Lkc "KEBjO 2 ߾&x"w HA07(#î;o Z<)\Q P2A)uPAMnU/ P/}[P8q:x!0ݎu6D&s'7F*^tau sTMf'kPE["X?֬S]ԠHQ$%**%+ 1b3PO.5y c)6:>wN@F5Mܤ!Or -D.r B2!'e I'^$Kf\P sURTrX-(d9v:^)ݐgE‡Y Ӿg0:^×!rWrLX'0 7y$q,g53fմR}l0e #x|'8С|t+*r|]=1o$̪7 xB[.uz q*Bn$pH0HDᴱ !# s8}; fMt$};rYhnhRRL'y%U'‚԰!>Ɵ+D>%0[2B؀%ʟ3ىr.mz }ڇFF)v䟃4\@\LeBs*Y؋ndT}Ŧ4^Kpa@طԧ/ny$G[s۱^7!eԲEt4 "NqTc:}c<>O b1N6 (*8P-I<=<ރ)!e) IBٔ%$^\4t@";=xۢj]I\g!k2ȃ6 =.I | n1/@}40q?cqFĴ-{`U.4}]L!- *$6)}u~/Iutlx@7!,Tȳ-Ѧj SfB%(vQwksQ[Ymhm)1YU[9tN!<2^ Nzz,7,~׊u4k9oSV`e“2X (\RU7\lZJ⭓68|WK׌w8 - "X8EmBFK%3*˽d9Mݽ 7eoe[|~w!q~[^cϼRrXfpڿ|Խ:6zm: Ɂ>'ܓvBEHl[0@߶ Ю&̕+?.4e9]hZE_~87ƍo |ҾG;<*Cݛr; Z\4sS]s0ȿc8D[DUy*B?P; {(HmPV fmJDWSΣf8uyebW<)ӤA沛w(sU<yaڒk!b2jf}@C&H5`?}++tJ鵆n|၁ו*{L8'0,jDV\k^]|ݵAiU+lX⛔tؕ` ]-HnH.(isvn;O \s9fIԤ=IP1Ė;lNԩB(PP̲. ڂU_ ~fclD<'R2s=:% <g_vucݔأP@>h2mPl-GOg~,:~ʆ'!"V;^=Vg2N4.4R<>tu ([G#8|VRqbO=zW9s LňLvq HPmCu[L&_4}CǷBl+KBp fF}:Lsί"0՝o+pP fIܠNc x dG|uZ|,\l<](FGkFJeOw8 e|c0Uh0fnԏd*qJsȇIP WtDɊB҇=2n)YTMV gY~hҬ*oҟgӀݕOnH˫lٰwO~ ޾$'zƙ#yh@Ip<7ECT }UmNGXi- \V.>8x 3M[^lVHYslR$+s vyi셾C;4b.}$.ٺ$j> ==VDA?9%3:]u9'(Zcl dPIcbbTHN/r{S''1[S04]dR0i]"&s^e +M9_W*WkrOKQOaȒĊYFG<` .Lb!"\PSc͗3%{%'D\ sLW-8&,ELmϯ!0~ 68FW@{B9v$94VWuf.\Faj *;#zaiSc*CҖ+| ?Û`SAo50iѩIp 9FFeE4(bwlu-{!bKc>Gjr >LKζ'sQճ|@# <0.:6sP~?X`6hO"$ol @_.JՇKs(5d*M6I>hˊ vc*25ƳXfhߊ* k?h%n>Hi{n4KIu_l5ՅhidyR=_@t٥OǿpOՎ,̬:+Q.ղS1U}Z.L9du@ka"fଁqZJb˜}4|Fse:j@HY_7Ql]=z )}"?>~咗ڻ#GEgNه<ٍX9's!k4~uZ3 WCK6挺]8;\]m %kgƐ+ۙn <nŝ%`D&2L"m ^fpG^?"H.*c 쬇K@W. ˲RgM+syjJLRHNON(}-5s'K=HVS P+)noz-y+o,K(~|} s*nyeNҸ1-­Ғp%H77,܇ٶWG{gA`:f.}levEuh2u-K;ݶx6\O;9Œ\__OqVu &dc(?ܻa|EZAZ P@HTsS&$S?,}ALul_O:s7w=r(Wh[e,;0=ûqZHT Xlmk=6BGJ {{ͼVW ,PGiH;exBI q&"6a>|L`!U˄^-T{QqoGO~zԊ/h$@2 Φ9Lxq8Pk0͠\ -Sk-^&,pkR&Qg4F+0/doA1q5'͹]+sȖϭ=P _$v[cS_bDb\چ@lR6[-ueWLCs?S1(B[[+)^M2OQL~riswk>vHk2iwL.aÛ[#QSx)Āy, qHRFƻ /s]=SK:EEyU` ḵDu$=;ќMv){)8 d%Eh0o;C'ʽGuc :17"H04| ? {Ԃҹ0H+ʠҴB#wpInž_7Jlyx%V RE6׳'BggQ60aX0- 5) "21)hĀMBLK'[\ՀҘI3>~m'SzjNёJabR̷::}ӭu+x]sH rmm٨KfM#㟨|?>7lb `޹:cR#`sA=Qfoi2dQdH?(ziYyZr*?1)ߚUg,MˏJq>˱! o>>Lb-1ML nmVr+~~MFUr9zrUqv %r[:Af͏Lŀg,1).Yn mtACR݌W^}j8e:zHwL¡!L=ؿL,6&Ȧ! ?ㇼ)ɬd'`Q{}9TT0De7b 2/2 kL XoAܜRx]嫾-b @e?%K|~Dٷ(bBzɩ۹oJ NsM\yAWFyq]N^ݮa/9d~)'C8 TS+aX{TB V5!}6KpB]he Eg7n4AG3kHGԀѭn6h{B-p꿎Wxvu~te6LA4(gbs7w%'~=wE ğR2kk#4r˱Mz/(ZUtުBMA]4Y ȧ;w\saA[ӳxlKuzvG4$r9;a͉Ub%["ֲ;2?t= %m|ϯ4FR[wg{9ǞnaȀ# (Mh^*k%Y@9 ]bĢ:bҨccM4l GoVGg L/./'-DɮƊ tv ,9B[BVא3O_7_[癱19weV=Rة ]ȸ. KZp"kdߛ8ɴ>3xqf[EmbkOkI?+&;1n4t4\\3Yl+\OkE/A}T^!]ǾŠ.{_fhb{D@}y ]E@{k=L ]- "#Xx*SM*TI Hjՙ=>m^jQé80܀\.if7ù_}eȧuYčL[0yYOYm"Dh;W-( :}\@-qQո['5 u]f(ƯY 4wk[/q.;)#A@";[2]cA/o_z}7v̌'ZL!f E/dq#rA\Gŕ]8Mp,h>N(,S4u #Hd*,f9Azۘ(PA˿" &ȋ@TI"=KV8='=8X~/nKlZЋP 2}D֞ TSO b}hk[f46bvkVjM_DIx? j$8UwdF/)٦-{iaWwZ0TN*+1nyC J' )1(C)G7׮%ٝ5)M5Wc-$'(_%!и")ck8^}SIS tꥅˬ(pc3ì$A9`4r<5y2ך]$烧S /]&X8(WM]/$e")k3F h uWpb`NTK[F'lbgJItv$oHG/?::uLn#4}/'ǐƭCdq9ԓA,c6ӕPU.4/gfd>< w&0^$.'bɧ6Jx-+`y&r3+NBj^Ń=ZryXS,fŇuD YȻaCm33fNaưt{I2 lg:Q9';bW+'!cJ$ǃ׳X[`k}="42 y1E,~YLNi w8ОWU\݄Ò=m7'Ȗȥ}+6 m5 g!'ڪMh pyVC@r7hxqT QަՉreS׍.b T~KB#x 4d fd 6+T,vC*bӦ^ik[.augïEpBa)Z&@W~IJbLA& >H;AB/\4'_IdLy լքp:5C~]XFg2AE\#\u[Vf'?(M)%v,GASH]fS;g)` 5qe*,1HpT-V&] tj< ͶQo_'KfX,G{;DwQ 娯onm'0%lGiUR1V/+wT#pw5mZQx"2A_tWiNxCcwgi[ <&V򟖆ˮ^gu,tJQ_JU1$H&y'~G 3N.ZeplvhZᏓU{ %z)e~vB7>AG6(~j*>{w|:cNSg"ч op>l5#急2Je[oZ^3/fb'tyW"ɋ!pjN`%BzF8}ĩyqUw9*S%UK͖^R@VMl ]̵N3ʛ_C][@\+[4qY9WyÍZR~{z[2O0RK顩1id7Us=w#DKUbIctÍ5GN?\(`kܕ m61| qGr(]ɻ3 Z[hM\2]%E 5Z8]Ɉdc.wau0=YLwld5@gD^#i` hSc)^@&Tsqjp͉N=oQ[RO/_9V;F^ڋ@@ʠp5SHAX՘Äqqn/9d[5SgDr?9N= w+wE8[7p +TT4>6nD=Ww>qd}cl4d_'J`9M͝Tސ-75v\/xn*M+'Y;C<2|` 9Q$2r0A 8T@SY5d֋c\hГ X?/}e3HP!@ U<uv{)m_`4 Z|"(S֪x:Iʪ8ܦJ}A` ;r+G<֞52=1GA|Ss>RR-m#tX8˔\OoB;38ɷP7 Yc!~לMmi%BȬj$ox~$Yk[s#8T%zٶ]9kjiW@<4N54쩒ˎ;D#g&tሇd}9ElW]{Y_\;6EK~]dȰ=@c?>Ѿiw@W~ @,wWH~p6v4ߕl9h>j7k/C}ѵ{vRœ49OTڈ4Vbݷ&< s_#a5chf 9IoMo{$ ڦQgCcI:xɋ1ǷNXg O)0g L%Èu1CUhvbًa| ;Rv& 1zIL) XD#/+_) OR ?1.unԦrXD뫇Ͻ fs򄒾ᕈLMyˎ( A(}g1$TV7TPdFng^?||зsg)nZ!H?YۆAۡ / )8d|ϲe =bVu;>VTCN+\lئtҕ!{Laa;Rsu8uK = YkMBm#;˛ H%[Af 4Rq_U1QMpmTA Ւfy7 pS MfC(g/Si]IC+!]#AC荒yp5Fq|s7;q$~YϘ+%K-N J?UKȘL16TެI*#Y\8NN}he>aNh.!T ,d+65ȟq\ 8d8fBN))~9AI > 4,s1‰dA5% P**45+9Db ͌ 7,pNtڮ?9wA3k"[+a[rũ# >HS[1?<r; qx"?"B-~6O D#Ġ,Fp[-Իdlm9|^,~^ B ww`7Mݷ&LKK,mw_8a'AkrRA}.82֖t ?@<]F}9qc*.ZbU2/eBt<1 I{,PƁ_3c|N8X6xP\\49gmWŒ.N/UXH=BMpC~Md󛕸Uup\V 2SU]+-QɳｼA P{VՈۙiaAlJK[p8`F[/ Z}.QGŪoY T3^U0r6t' }?!s-ף9SIb8'25MY'  [1;Ϣ7/*̙T٘,YdЌxjvyL{R6MTm=89WHQ[cPfx?. Wշg =[!&o7iW`vqٰɢ@,o!q+ɐCKe4i+:dXar>1,F>Ro t?Z|WX8ߙr.KUժUpx);WMi s7|Ε);_f6QB|+@_7m+jC4M˾w:z"yEcm6'J<[:ʃϱYy)K.~]Sw{9y>,zr3,xB:8Ҭ-E pFӂT:# N(E X$z1I-k}XM-6i9Y_L.%ro.UNi1Z_U#*Hķ …=A-Mg]EێC`5 eE뢧ps`&̜P*=gZRc $MEoᕆ%2™˶4WyRaGRZx2 ᙹDk2Ǫ*mr8$ɠVQ;mQSݔr9 e 8rKv,Ӡ_d#i6 ehcW)?>ad`pV oD0gI纥E"Rf ` ֤ͥčr|*-) & R~(J47HQnl"X ь13 ` {1"22 "8^ rǩ(D=;H.V) cx3x޽E\ky5iïcQh5:I6`QI@w͡w@ L6B2 8J "l鬗d;L|2Ȝ!49F/,ۜ۬]+}m)Pl| ۏZG3XفKp)b9@42RM#S/vCϾ/(c җ4s+b9jVY^^fgׅ (oÔ^x/ i"潏=:vr5RW$is2!끆ַCk̎ekՋcuE /־u9WsN%xdp?A ͡]4Ԛs9%fK<0 b?g7 q~ (ԏqS`8ϕ)6^ݡ]sQ)LoUO̰gKQ3ÆԂoCϱM82ٍ"黒~ D^cicLUi?ݤ\VYm |h3/)93ZA9l E5s/Ws춳(?/7 #xBD>²fTDeaT9^¯ԣdpn)oqz~*D:zi6 S4俲}e u1ӬAf7aUq&/j Mۗw;%ZV <퇜-0D,{,Sw16\ߎXi0U60k'ܟоOytNGZ{sһQ7~Wi JDLM\3s9b "SN9)o^.@Hb)%i-/ #lh c*QEQ t il++=ii| Bг2Ii53ܥǥm)M0ot9xfAku#A^80C¶~Qy<>^!?(_ #;-.aB;,p Kښ2 8rWB Gڱ};Z0mugМl]6MfB}GŅ6>d#؎pIzW!?=r d|ˑF^f\ҷCr_{}:l2L_ldq}ه2nEW5Gt6*I~!Vcފ3ߑQIBj6܍CQs_J>hCt~7!y|9s@2X6e7}S4csL 73L4썻&ZًćrY*HYE7/>> BrRf?^E;-C41o͟Q1Ua> rXoC[e7% ? IGHgUiUf'[4g?We!'5h5H$&K keB1Q7tJӔ \YBgjB̫61BU`֯`kᴻuhc0]mmB;Z}2Ѐ!~pMgjXIoj}1( P>ap&qߴw 졓V|(L?䬦Oc\<6ɩOiwVP؉ܵnl/yLMmKzv@ɩQFbƏxˢbA݂L!$knܑP~`̒Ȝ3fjv;9G3p(BV]kUeؚ6#eo;9D =Cr2$+<{|ġx_Mt VZhc9e~n]7Xަ*.3Bɕ\N<|# 8vb@ PVWgM{irS_ >tk#gk3ĞBQsSR>5kVUN}٣p3OQ?_dsrYA{6GM2ǐ+K0p.$ +7ur^oM߹E9 Ga220PAR[.=`9q8XZ.UٵҗgўoxR 0k\[M6dZV #w< 9lW"Ⱥb%@?` fB[V6! cF•edl;ڸvid6Mf}ex@SyFugG!ݐre\~XE*d9XIpHLC7\a&46Хo"tl YZ