samba-client-libs-4.19.8+git.435.78ced6cf30d-150600.3.21.1<>, ȉhp9|o'xW`71=;%߯XU>"6C׏e D]ڈ5Aԍ/1h)%Z3Rr|A/3oҳw%^dmA*m idWd 'NԂiº?Rm"jP& y^.bM&Go6p9G5*D1%B䮯w*}{ PTs 4T_wǭ>C?d/ = T =TZdv<v (v v v v !v#v&"v(p(v*`d(8 (9(:^(>M@MBMFOGOvHPvIRvXSDYWPZZx[Z\]$v]^v^i?biscjdjejfjljujvvldwvxvy zڌڜڠڦCsamba-client-libs4.19.8+git.435.78ced6cf30d150600.3.21.1Samba client librariesThe samba-libs package contains the libraries needed by samba client programs.hibs-power9-21xSUSE Linux Enterprise 15SUSE LLC GPL-3.0-or-laterhttps://www.suse.com/Development/Libraries/C and C++https://www.samba.org/linuxppc64le Hp y  (  8(H! px 0+`8 8!` % `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-binding.so.0.0.1libdcerpc-server-core.so.0.0.1libdcerpc.so.0.0.1libndr-krb5pac.so.0.0.1libndr-nbt.so.0.0.1libndr-standard.so.0.0.1libndr.so.3.0.1libnetapi.so.1.0.0libsamba-credentials.so.1.0.0libsamba-errors.so.1.0.0libsamba-hostconfig.so.0.0.1libsamba-passdb.so.0.28.0libsamba-util.so.0.0.1libsamdb.so.0.0.1libsmbclient.so.0.7.0libsmbconf.so.0.0.1libsmbldap.so.2.1.0libtevent-util.so.0.0.1libwbclient.so.0.16rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootsamba-4.19.8+git.435.78ced6cf30d-150600.3.21.1.src.rpmlibCHARSET3-samba4.so()(64bit)libCHARSET3-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libMESSAGING-SEND-samba4.so()(64bit)libMESSAGING-SEND-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libMESSAGING-samba4.so()(64bit)libMESSAGING-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libaddns-samba4.so()(64bit)libaddns-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libads-samba4.so()(64bit)libads-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libasn1util-samba4.so()(64bit)libasn1util-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libauth-samba4.so()(64bit)libauth-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libauthkrb5-samba4.so()(64bit)libauthkrb5-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libcli-cldap-samba4.so()(64bit)libcli-cldap-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libcli-ldap-common-samba4.so()(64bit)libcli-ldap-common-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libcli-ldap-samba4.so()(64bit)libcli-ldap-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libcli-nbt-samba4.so()(64bit)libcli-nbt-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libcli-smb-common-samba4.so()(64bit)libcli-smb-common-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libcli-spoolss-samba4.so()(64bit)libcli-spoolss-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libcliauth-samba4.so()(64bit)libcliauth-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libclidns-samba4.so()(64bit)libclidns-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libcluster-samba4.so()(64bit)libcluster-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libcmdline-contexts-samba4.so()(64bit)libcmdline-contexts-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libcmdline-samba4.so()(64bit)libcmdline-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libcommon-auth-samba4.so()(64bit)libcommon-auth-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libdbwrap-samba4.so()(64bit)libdbwrap-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libdcerpc-binding.so.0()(64bit)libdcerpc-binding.so.0(DCERPC_BINDING_0.0.1)(64bit)libdcerpc-binding0libdcerpc-pkt-auth-samba4.so()(64bit)libdcerpc-pkt-auth-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libdcerpc-samba-samba4.so()(64bit)libdcerpc-samba-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libdcerpc-samba4.so()(64bit)libdcerpc-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libdcerpc-server-core.so.0()(64bit)libdcerpc-server-core.so.0(DCERPC_SERVER_CORE_0.0.1)(64bit)libdcerpc.so.0()(64bit)libdcerpc.so.0(DCERPC_0.0.1)(64bit)libdcerpc0libevents-samba4.so()(64bit)libevents-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libflag-mapping-samba4.so()(64bit)libflag-mapping-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libgenrand-samba4.so()(64bit)libgenrand-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libgensec-samba4.so()(64bit)libgensec-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libgpo-samba4.so()(64bit)libgpo-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libgse-samba4.so()(64bit)libgse-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libhttp-samba4.so()(64bit)libhttp-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libinterfaces-samba4.so()(64bit)libinterfaces-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libiov-buf-samba4.so()(64bit)libiov-buf-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libkrb5samba-samba4.so()(64bit)libkrb5samba-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libldbsamba-samba4.so()(64bit)libldbsamba-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)liblibcli-lsa3-samba4.so()(64bit)liblibcli-lsa3-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)liblibcli-netlogon3-samba4.so()(64bit)liblibcli-netlogon3-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)liblibsmb-samba4.so()(64bit)liblibsmb-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libmessages-dgm-samba4.so()(64bit)libmessages-dgm-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libmessages-util-samba4.so()(64bit)libmessages-util-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libmscat-samba4.so()(64bit)libmscat-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libmsghdr-samba4.so()(64bit)libmsghdr-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libmsrpc3-samba4.so()(64bit)libmsrpc3-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libndr-krb5pac.so.0()(64bit)libndr-krb5pac.so.0(NDR_KRB5PAC_0.0.1)(64bit)libndr-krb5pac0libndr-nbt.so.0()(64bit)libndr-nbt.so.0(NDR_NBT_0.0.1)(64bit)libndr-nbt0libndr-samba-samba4.so()(64bit)libndr-samba-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libndr-samba4.so()(64bit)libndr-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libndr-standard.so.0()(64bit)libndr-standard.so.0(NDR_STANDARD_0.0.1)(64bit)libndr-standard0libndr.so.3()(64bit)libndr.so.3(NDR_0.0.1)(64bit)libndr.so.3(NDR_0.0.2)(64bit)libndr.so.3(NDR_0.0.3)(64bit)libndr.so.3(NDR_0.0.4)(64bit)libndr.so.3(NDR_0.0.5)(64bit)libndr.so.3(NDR_0.0.6)(64bit)libndr.so.3(NDR_0.0.7)(64bit)libndr.so.3(NDR_0.0.8)(64bit)libndr.so.3(NDR_0.0.9)(64bit)libndr.so.3(NDR_0.1.0)(64bit)libndr.so.3(NDR_0.1.1)(64bit)libndr.so.3(NDR_0.1.2)(64bit)libndr.so.3(NDR_0.2.0)(64bit)libndr.so.3(NDR_0.2.1)(64bit)libndr.so.3(NDR_1.0.0)(64bit)libndr.so.3(NDR_1.0.1)(64bit)libndr.so.3(NDR_1.0.2)(64bit)libndr.so.3(NDR_2.0.0)(64bit)libndr.so.3(NDR_3.0.0)(64bit)libndr.so.3(NDR_3.0.1)(64bit)libndr2libnet-keytab-samba4.so()(64bit)libnet-keytab-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libnetapi.so.1()(64bit)libnetapi.so.1(NETAPI_1.0.0)(64bit)libnetapi0libnetif-samba4.so()(64bit)libnetif-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libnpa-tstream-samba4.so()(64bit)libnpa-tstream-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libprinting-migrate-samba4.so()(64bit)libprinting-migrate-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libregistry-samba4.so()(64bit)libregistry-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libreplace-samba4.so()(64bit)libreplace-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsamba-cluster-support-samba4.so()(64bit)libsamba-cluster-support-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsamba-credentials.so.1()(64bit)libsamba-credentials.so.1(SAMBA_CREDENTIALS_1.0.0)(64bit)libsamba-credentials1libsamba-debug-samba4.so()(64bit)libsamba-debug-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsamba-errors.so.1()(64bit)libsamba-errors.so.1(SAMBA_ERRORS_1.0.0)(64bit)libsamba-errors0libsamba-hostconfig.so.0()(64bit)libsamba-hostconfig.so.0(SAMBA_HOSTCONFIG_0.0.1)(64bit)libsamba-hostconfig0libsamba-modules-samba4.so()(64bit)libsamba-modules-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsamba-passdb.so.0()(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.2.0)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.24.1)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.24.2)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.25.0)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.26.0)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.27.0)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.27.1)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.27.2)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.28.0)(64bit)libsamba-passdb0libsamba-security-samba4.so()(64bit)libsamba-security-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsamba-sockets-samba4.so()(64bit)libsamba-sockets-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsamba-util.so.0()(64bit)libsamba-util.so.0(SAMBA_UTIL_0.0.1)(64bit)libsamba-util0libsamba3-util-samba4.so()(64bit)libsamba3-util-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsamdb-common-samba4.so()(64bit)libsamdb-common-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsamdb.so.0()(64bit)libsamdb.so.0(SAMDB_0.0.1)(64bit)libsamdb0libsecrets3-samba4.so()(64bit)libsecrets3-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libserver-id-db-samba4.so()(64bit)libserver-id-db-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libserver-role-samba4.so()(64bit)libserver-role-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsmb-transport-samba4.so()(64bit)libsmb-transport-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsmbclient-raw-samba4.so()(64bit)libsmbclient-raw-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsmbclient.so.0()(64bit)libsmbclient.so.0(SMBCLIENT_0.1.0)(64bit)libsmbclient.so.0(SMBCLIENT_0.2.0)(64bit)libsmbclient.so.0(SMBCLIENT_0.2.1)(64bit)libsmbclient.so.0(SMBCLIENT_0.2.2)(64bit)libsmbclient.so.0(SMBCLIENT_0.2.3)(64bit)libsmbclient.so.0(SMBCLIENT_0.3.0)(64bit)libsmbclient.so.0(SMBCLIENT_0.3.1)(64bit)libsmbclient.so.0(SMBCLIENT_0.3.2)(64bit)libsmbclient.so.0(SMBCLIENT_0.3.3)(64bit)libsmbclient.so.0(SMBCLIENT_0.4.0)(64bit)libsmbclient.so.0(SMBCLIENT_0.5.0)(64bit)libsmbclient.so.0(SMBCLIENT_0.6.0)(64bit)libsmbclient.so.0(SMBCLIENT_0.7.0)(64bit)libsmbclient0libsmbconf.so.0()(64bit)libsmbconf.so.0(SMBCONF_0.0.1)(64bit)libsmbconf0libsmbd-base-samba4.so()(64bit)libsmbd-base-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsmbd-shim-samba4.so()(64bit)libsmbd-shim-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsmbldap.so.2()(64bit)libsmbldap.so.2(SMBLDAP_0)(64bit)libsmbldap.so.2(SMBLDAP_1)(64bit)libsmbldap.so.2(SMBLDAP_2)(64bit)libsmbldap.so.2(SMBLDAP_2.1.0)(64bit)libsmbldap2libsmbldaphelper-samba4.so()(64bit)libsmbldaphelper-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsocket-blocking-samba4.so()(64bit)libsocket-blocking-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libstable-sort-samba4.so()(64bit)libstable-sort-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsys-rw-samba4.so()(64bit)libsys-rw-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libtalloc-report-printf-samba4.so()(64bit)libtalloc-report-printf-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libtdb-wrap-samba4.so()(64bit)libtdb-wrap-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libtevent-util.so.0()(64bit)libtevent-util.so.0(TEVENT_UTIL_0.0.1)(64bit)libtevent-util0libtime-basic-samba4.so()(64bit)libtime-basic-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libtrusts-util-samba4.so()(64bit)libtrusts-util-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libutil-reg-samba4.so()(64bit)libutil-reg-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libutil-setid-samba4.so()(64bit)libutil-setid-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libutil-tdb-samba4.so()(64bit)libutil-tdb-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libwbclient.so.0()(64bit)libwbclient.so.0(WBCLIENT_0.10)(64bit)libwbclient.so.0(WBCLIENT_0.11)(64bit)libwbclient.so.0(WBCLIENT_0.12)(64bit)libwbclient.so.0(WBCLIENT_0.13)(64bit)libwbclient.so.0(WBCLIENT_0.14)(64bit)libwbclient.so.0(WBCLIENT_0.15)(64bit)libwbclient.so.0(WBCLIENT_0.16)(64bit)libwbclient.so.0(WBCLIENT_0.9)(64bit)libwbclient0samba-client-libssamba-client-libs(ppc-64)@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    /sbin/ldconfig/sbin/ldconfigld64.so.2()(64bit)ld64.so.2(GLIBC_2.22)(64bit)libCHARSET3-samba4.so()(64bit)libCHARSET3-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libMESSAGING-SEND-samba4.so()(64bit)libMESSAGING-SEND-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libMESSAGING-samba4.so()(64bit)libMESSAGING-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libacl.so.1()(64bit)libacl.so.1(ACL_1.0)(64bit)libaddns-samba4.so()(64bit)libaddns-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libads-samba4.so()(64bit)libads-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libasn1util-samba4.so()(64bit)libasn1util-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libauth-samba4.so()(64bit)libauth-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libauthkrb5-samba4.so()(64bit)libauthkrb5-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libavahi-client.so.3()(64bit)libavahi-common.so.3()(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libc.so.6(GLIBC_2.27)(64bit)libc.so.6(GLIBC_2.32)(64bit)libc.so.6(GLIBC_2.33)(64bit)libc.so.6(GLIBC_2.34)(64bit)libc.so.6(GLIBC_2.38)(64bit)libcli-cldap-samba4.so()(64bit)libcli-cldap-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libcli-ldap-common-samba4.so()(64bit)libcli-ldap-common-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libcli-ldap-samba4.so()(64bit)libcli-ldap-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libcli-nbt-samba4.so()(64bit)libcli-nbt-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libcli-smb-common-samba4.so()(64bit)libcli-smb-common-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libcli-spoolss-samba4.so()(64bit)libcli-spoolss-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libcliauth-samba4.so()(64bit)libcliauth-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libclidns-samba4.so()(64bit)libclidns-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libcluster-samba4.so()(64bit)libcluster-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libcom_err.so.2()(64bit)libcommon-auth-samba4.so()(64bit)libcommon-auth-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libdbwrap-samba4.so()(64bit)libdbwrap-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libdcerpc-binding.so.0()(64bit)libdcerpc-binding.so.0(DCERPC_BINDING_0.0.1)(64bit)libdcerpc-pkt-auth-samba4.so()(64bit)libdcerpc-pkt-auth-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libdcerpc-samba-samba4.so()(64bit)libdcerpc-samba-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libdcerpc.so.0()(64bit)libdcerpc.so.0(DCERPC_0.0.1)(64bit)libflag-mapping-samba4.so()(64bit)libflag-mapping-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libgenrand-samba4.so()(64bit)libgenrand-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libgensec-samba4.so()(64bit)libgensec-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libgnutls.so.30()(64bit)libgnutls.so.30(GNUTLS_3_4)(64bit)libgnutls.so.30(GNUTLS_3_6_10)(64bit)libgnutls.so.30(GNUTLS_3_6_13)(64bit)libgnutls.so.30(GNUTLS_3_6_3)(64bit)libgse-samba4.so()(64bit)libgse-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libgssapi_krb5.so.2()(64bit)libgssapi_krb5.so.2(gssapi_krb5_2_MIT)(64bit)libhttp-samba4.so()(64bit)libhttp-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libinterfaces-samba4.so()(64bit)libinterfaces-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libiov-buf-samba4.so()(64bit)libiov-buf-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libk5crypto.so.3()(64bit)libk5crypto.so.3(k5crypto_3_MIT)(64bit)libkrb5.so.3()(64bit)libkrb5.so.3(krb5_3_MIT)(64bit)libkrb5samba-samba4.so()(64bit)libkrb5samba-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)liblber-2.4.so.2()(64bit)libldap_r-2.4.so.2()(64bit)libldb.so.2()(64bit)libldb.so.2(LDB_0.9.10)(64bit)libldb.so.2(LDB_0.9.15)(64bit)libldb.so.2(LDB_0.9.16)(64bit)libldb.so.2(LDB_0.9.23)(64bit)libldb.so.2(LDB_1.1.1)(64bit)libldb.so.2(LDB_1.1.19)(64bit)libldb.so.2(LDB_1.1.30)(64bit)libldb.so.2(LDB_1.3.0)(64bit)libldb.so.2(LDB_2.6.1)(64bit)libldb.so.2(LDB_2.8.0)(64bit)libldbsamba-samba4.so()(64bit)libldbsamba-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)liblibcli-lsa3-samba4.so()(64bit)liblibcli-lsa3-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)liblibcli-netlogon3-samba4.so()(64bit)liblibcli-netlogon3-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)liblibsmb-samba4.so()(64bit)liblibsmb-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libmessages-dgm-samba4.so()(64bit)libmessages-dgm-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libmessages-util-samba4.so()(64bit)libmessages-util-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libmsghdr-samba4.so()(64bit)libmsghdr-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libmsrpc3-samba4.so()(64bit)libmsrpc3-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libndr-krb5pac.so.0()(64bit)libndr-krb5pac.so.0(NDR_KRB5PAC_0.0.1)(64bit)libndr-nbt.so.0()(64bit)libndr-nbt.so.0(NDR_NBT_0.0.1)(64bit)libndr-samba-samba4.so()(64bit)libndr-samba-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libndr-samba4.so()(64bit)libndr-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libndr-standard.so.0()(64bit)libndr-standard.so.0(NDR_STANDARD_0.0.1)(64bit)libndr.so.3()(64bit)libndr.so.3(NDR_0.0.1)(64bit)libndr.so.3(NDR_0.0.3)(64bit)libndr.so.3(NDR_0.0.4)(64bit)libndr.so.3(NDR_0.0.5)(64bit)libndr.so.3(NDR_0.0.6)(64bit)libndr.so.3(NDR_0.0.7)(64bit)libndr.so.3(NDR_0.0.8)(64bit)libndr.so.3(NDR_0.0.9)(64bit)libndr.so.3(NDR_0.1.1)(64bit)libndr.so.3(NDR_0.1.2)(64bit)libndr.so.3(NDR_0.2.0)(64bit)libndr.so.3(NDR_0.2.1)(64bit)libndr.so.3(NDR_1.0.0)(64bit)libndr.so.3(NDR_1.0.1)(64bit)libndr.so.3(NDR_1.0.2)(64bit)libndr.so.3(NDR_2.0.0)(64bit)libndr.so.3(NDR_3.0.1)(64bit)libnetif-samba4.so()(64bit)libnetif-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libnpa-tstream-samba4.so()(64bit)libnpa-tstream-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libnscd.so.1()(64bit)libnscd.so.1(LIBNSCD_1.0)(64bit)libpam.so.0()(64bit)libpam.so.0(LIBPAM_1.0)(64bit)libpopt.so.0()(64bit)libpopt.so.0(LIBPOPT_0)(64bit)libreplace-samba4.so()(64bit)libreplace-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsamba-cluster-support-samba4.so()(64bit)libsamba-cluster-support-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsamba-credentials.so.1()(64bit)libsamba-credentials.so.1(SAMBA_CREDENTIALS_1.0.0)(64bit)libsamba-debug-samba4.so()(64bit)libsamba-debug-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsamba-errors.so.1()(64bit)libsamba-errors.so.1(SAMBA_ERRORS_1.0.0)(64bit)libsamba-hostconfig.so.0()(64bit)libsamba-hostconfig.so.0(SAMBA_HOSTCONFIG_0.0.1)(64bit)libsamba-modules-samba4.so()(64bit)libsamba-modules-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsamba-passdb.so.0()(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.2.0)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.27.1)(64bit)libsamba-security-samba4.so()(64bit)libsamba-security-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsamba-sockets-samba4.so()(64bit)libsamba-sockets-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsamba-util.so.0()(64bit)libsamba-util.so.0(SAMBA_UTIL_0.0.1)(64bit)libsamba3-util-samba4.so()(64bit)libsamba3-util-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsamdb-common-samba4.so()(64bit)libsamdb-common-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsamdb.so.0()(64bit)libsamdb.so.0(SAMDB_0.0.1)(64bit)libsecrets3-samba4.so()(64bit)libsecrets3-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libserver-id-db-samba4.so()(64bit)libserver-id-db-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libserver-role-samba4.so()(64bit)libserver-role-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsmb-transport-samba4.so()(64bit)libsmb-transport-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsmbclient-raw-samba4.so()(64bit)libsmbclient-raw-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsmbconf.so.0()(64bit)libsmbconf.so.0(SMBCONF_0.0.1)(64bit)libsmbd-shim-samba4.so()(64bit)libsmbd-shim-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsmbldap.so.2()(64bit)libsmbldap.so.2(SMBLDAP_0)(64bit)libsmbldap.so.2(SMBLDAP_1)(64bit)libsmbldaphelper-samba4.so()(64bit)libsmbldaphelper-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsocket-blocking-samba4.so()(64bit)libsocket-blocking-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libstable-sort-samba4.so()(64bit)libstable-sort-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsys-rw-samba4.so()(64bit)libsys-rw-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsystemd.so.0()(64bit)libsystemd.so.0(LIBSYSTEMD_209)(64bit)libtalloc-report-printf-samba4.so()(64bit)libtalloc-report-printf-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libtalloc.so.2()(64bit)libtalloc.so.2(TALLOC_2.0.2)(64bit)libtalloc.so.2(TALLOC_2.1.0)(64bit)libtalloc.so.2(TALLOC_2.3.5)(64bit)libtasn1.so.6()(64bit)libtasn1.so.6(LIBTASN1_0_3)(64bit)libtdb-wrap-samba4.so()(64bit)libtdb-wrap-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libtdb.so.1()(64bit)libtdb.so.1(TDB_1.2.1)(64bit)libtdb.so.1(TDB_1.2.2)(64bit)libtdb.so.1(TDB_1.2.5)(64bit)libtdb.so.1(TDB_1.3.0)(64bit)libtdb.so.1(TDB_1.3.11)(64bit)libtdb.so.1(TDB_1.3.17)(64bit)libtevent-util.so.0()(64bit)libtevent-util.so.0(TEVENT_UTIL_0.0.1)(64bit)libtevent.so.0()(64bit)libtevent.so.0(TEVENT_0.11.0)(64bit)libtevent.so.0(TEVENT_0.12.0)(64bit)libtevent.so.0(TEVENT_0.13.0)(64bit)libtevent.so.0(TEVENT_0.15.0)(64bit)libtevent.so.0(TEVENT_0.9.12)(64bit)libtevent.so.0(TEVENT_0.9.13)(64bit)libtevent.so.0(TEVENT_0.9.16)(64bit)libtevent.so.0(TEVENT_0.9.20)(64bit)libtevent.so.0(TEVENT_0.9.30)(64bit)libtevent.so.0(TEVENT_0.9.31)(64bit)libtevent.so.0(TEVENT_0.9.37)(64bit)libtevent.so.0(TEVENT_0.9.9)(64bit)libtime-basic-samba4.so()(64bit)libtime-basic-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libtrusts-util-samba4.so()(64bit)libtrusts-util-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libutil-reg-samba4.so()(64bit)libutil-reg-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libutil-setid-samba4.so()(64bit)libutil-setid-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libutil-tdb-samba4.so()(64bit)libutil-tdb-samba4.so(SAMBA_4.19.9_GIT.435.78CED6CF30D150600.3.21.1SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libwbclient.so.0()(64bit)libwbclient.so.0(WBCLIENT_0.13)(64bit)libwbclient.so.0(WBCLIENT_0.9)(64bit)libz.so.1()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.3hҋhm@g`@gRgR@gMgp@fٝ@fxfteԔ@ee5@ede6`@e-%e'e%anopower@suse.comscabrero@suse.denopower@suse.comscabrero@suse.denopower@suse.comnopower@suse.comnopower@suse.comddiss@suse.comscabrero@suse.denopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comdmulder@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comscabrero@suse.descabrero@suse.descabrero@suse.denopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comscabrero@suse.dedmulder@suse.comscabrero@suse.denopower@suse.comnopower@suse.comscabrero@suse.denopower@suse.comnopower@suse.comscabrero@suse.denopower@suse.comscabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comddiss@suse.comnopower@suse.comdmulder@suse.comdmulder@suse.comnopower@suse.comscabrero@suse.descabrero@suse.dedimstar@opensuse.orgscabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comnopower@suse.comnopower@suse.comscabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comnopower@suse.comscabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.denopower@suse.comscabrero@suse.deddiss@suse.comddiss@suse.comddiss@suse.comscabrero@suse.descabrero@suse.dedmulder@suse.comnopower@suse.comscabrero@suse.descabrero@suse.dedmulder@suse.comscabrero@suse.descabrero@suse.denopower@suse.comnopower@suse.comnopower@suse.comdmulder@suse.comscabrero@suse.denopower@suse.comddiss@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comscabrero@suse.denopower@suse.comnopower@suse.comjmcdonough@suse.comnopower@suse.comscabrero@suse.denopower@suse.comnopower@suse.comddiss@suse.comddiss@suse.comnopower@suse.comnopower@suse.comddiss@suse.comnopower@suse.comdmulder@suse.comdmulder@suse.comddiss@suse.comscabrero@suse.dedmulder@suse.comddiss@suse.comnopower@suse.comjengelh@inai.dedmulder@suse.comscabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comdmulder@suse.comdmulder@suse.comjmcdonough@suse.comdmulder@suse.comscabrero@suse.dedmulder@suse.comscabrero@suse.dedmulder@suse.comdmulder@suse.comvcizek@suse.comdmulder@suse.comdmulder@suse.comnopower@suse.comscabrero@suse.dejmcdonough@suse.comscabrero@suse.deaaptel@suse.comjengelh@inai.dedimstar@opensuse.orgdmulder@suse.comjmcdonough@suse.comdavid.mulder@suse.comjmcdonough@suse.comaaptel@suse.comdmulder@suse.comscabrero@suse.comscabrero@suse.comkukuk@suse.dedavid.mulder@suse.comscabrero@suse.comrbrown@suse.comdmulder@suse.comscabrero@suse.comdimstar@opensuse.orgscabrero@suse.comaaptel@suse.comnopower@suse.comnopower@suse.comaaptel@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comddiss@suse.comnopower@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comdmulder@suse.comnopower@suse.comjmcdonough@suse.comaaptel@suse.comkukuk@suse.comkukuk@suse.denopower@suse.comaaptel@suse.comdmulder@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comddiss@suse.comjmcdonough@suse.comddiss@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comjmcdonough@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comtchvatal@suse.comlmuelle@suse.comnopower@suse.comcrrodriguez@opensuse.orglmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comnoel.power@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comnopower@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.commpluskal@suse.comlmuelle@suse.comnopower@suse.deddiss@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.denopower@suse.delmuelle@suse.comnopower@suse.deddiss@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.com- CVE-2025-9640: fix vfs_streams_xattr uninitialized memory write; (bsc#1251279);(bso#15885). - CVE-2025-10230: fix command Injection in WINS Server Hook Script; (bsc#1251280);(bso#15903).- Windows security hardening locks out schannel'ed netlogon dc calls like netr_DsRGetDCName; (bsc#1246431); (bso#15876).- Fix Samba printers reporting invalid sid during print jobs; (bsc#1234210); (bso#15792).- Fix crossing automounter mount points; (bsc#1215212); (bsc#1236803);- Update shipped /etc/samba/smb.conf to point to smb.conf man page;(bsc#1233880).- Update to 4.19.9 * libldb: performance issue with indexes (ldb 2.8.2 is already released); (bso#15590). * DH reconnect error handling can lead to stale sharemode entries; (bso#15624). * Incorrect FSCTL_QUERY_ALLOCATED_RANGES response when truncated; (bso#15699). * irpc_destructor may crash during shutdown; (bso#15280). * Compound SMB2 requests don't return NT_STATUS_NETWORK_SESSION_EXPIRED for all requests, confuses MacOSX clients; (bso#15696). * Crash when readlinkat fails; (bso#15700).- Adjust spec to split out rpcd_* binaries into a separate sub package; (bsc#1231414).- Incorrect FSCTL_QUERY_ALLOCATED_RANGES response when truncated; (bso#15699); (bsc#1229684). - Update to 4.19.8 * Invalid client warning about command line passwords; (bso#15671); * Version string is truncated in manpages; (bso#15672); * --version-* options are still not ergonomic, and they reject tilde characters; (bso#15673); * cmdline_burn does not always burn secrets; (bso#15674); * Samba doesn't parse SDDL found in defaultSecurityDescriptor in AD_DS_Classes_Windows_Server_v1903.ldf; (bso#15685); * We have added new options --vendor-name and --vendor-patch- revision arguments to ./configure to allow distributions and packagers to put their name in the Samba version string so that when debugging Samba the source of the binary is obvious; (bso#15654); * When claims enabled with heimdal kerberos, unable to log on to a Windows computer when user account need to change their own password; (bso#15655); * Fix clock skew error message and memory cache clock skew recovery; (bso#15676); * CTDB RADOS mutex helper misses namespace support; (bso#15665); * The images don't build after the git security release and CentOS 8 Stream is EOL; (bso#15660); * Fix unnecessary delays in CTDB while processing requests under high load; (bso#15678); * Dynamic DNS updates with the internal DNS are not working; (bso#13019); * s4:nbt_server: does not provide unexpected handling, so winbindd can't use nmb requests instead cldap; (bso#15620); * Panic in vfs_offload_token_db_fetch_fsp(); (bso#15664); * "client use kerberos" and --use-kerberos is ignored for the machine account; (bso#15666); * Regression DFS not working with widelinks = true; (bso#15435); * ntlm_auth make logs more consistent with length check; (bso#15677);- Fix a crash when joining offline and 'kerberos method' includes keytab; (bsc#1228732); - Fix reading the password from STDIN or environment vars if it was already given in the command line; (bsc#1228732);- Update to 4.19.7 * ldb qsort might r/w out of bounds with an intransitive compare function (ldb 2.8.1 is already released); (bso#15569). * Many qsort() comparison functions are non-transitive, which can lead to out-of-bounds access in some circumstances (ldb 2.8.1 is already released); (bso#15625). * Need to change gitlab-ci.yml tags in all branches to avoid CI bill; (bso#15638). * netr_LogonSamLogonEx returns NR_STATUS_ACCESS_DENIED with SysvolReady=0; (bso#14981). * Anonymous smb3 signing/encryption should be allowed (similar to Windows Server 2022); (bso#15412). * Panic in dreplsrv_op_pull_source_apply_changes_trigger; (bso#15573). * winbindd, net ads join and other things don't work on an ipv6 only host; (bso#15642). * Smbcacls incorrectly propagates inheritance with Inherit-Only flag; (bso#15636). * http library doesn't support 'chunked transfer encoding'; (bso#15611). - Update to 4.19.6 * fd_handle_destructor() panics within an smbd_smb2_close() if vfs_stat_fsp() fails in fd_close(); (bso#15527). * samba-gpupdate: Correctly implement site support; (bso#15588). * libgpo: Segfault in python bindings; (bso#15599). * Packet marshalling push support missing for CTDB_CONTROL_TCP_CLIENT_DISCONNECTED and CTDB_CONTROL_TCP_CLIENT_PASSED; (bso#15580).- Update to 4.19.5 * Windows 2016 fails to restore previous version of a file from a shadow_copy2 snapshot; (bso#13688). * Symlinks on AIX are broken in 4.19 (and a few version before that); (bso#15549). * Fake directory create times has no effect; (bso#12421). * ctime mixed up with mtime by smbd; (bso#15550). * samba-gpupdate --rsop fails if machine is not in a site; (bso#15548). * gpupdate: The root cert import when NDES is not available is broken; (bso#15557). * samba-gpupdate should print a useful message if cepces-submit can't be found; (bso#15552). * samba-gpupdate logging doesn't work; (bso#15558). * smbpasswd reset permissions only if not 0600; (bso#15555).- Remove -x from bash shebang update-apparmor-samba-profile; (bsc#1218431).- Update to 4.19.4 * net changesecretpw cannot set the machine account password if secrets.tdb is empty; (bso#13577). * For generating doc, take, if defined, env XML_CATALOG_FILES; (bso#15540). * Trivial C typo in nsswitch/winbind_nss_netbsd.c; (bso#15541). * vfs_linux_xfs is incorrectly named; (bso#15542). * systemd stumbled over copyright-message at smbd startup; (bso#15377). * Following intermediate abolute share-local symlinks is broken; (bso#15505). * ctdb RELEASE_IP causes a crash in release_ip if a connection to a non-public address disconnects first; (bso#15523). * shadow_copy2 broken when current fileset's directories are removed; (bso#15544). * smbd does not detect ctdb public ipv6 addresses for multichannel exclusion; (bso#15534). * 'force user = localunixuser' doesn't work if 'allow trusted domains = no' is set; (bso#15469). * smbget debug logging doesn't work; (bso#15525). * smget: username in the smburl and interactive password entry doesn't work; (bso#15532). * smbget auth function doesn't set values for password prompt correctly; (bso#15538). * Unable to copy and write files from clients to Ceph cluster via SMB Linux gateway with Ceph VFS module; (bso#15440). * Multichannel refresh network information; (bso#15547).- Update to 4.19.3 * sid_strings test broken by unix epoch > 1700000000; (bso#15520). * smbd crashes if asked to return full information on close of a stream handle with delete on close disposition set; (bso#15487). * smbd: fix close order of base_fsp and stream_fsp in smb_fname_fsp_destructor(); (bso#15521). * Improve logging for failover scenarios; (bso#15499). * Files without "read attributes" NFS4 ACL permission are not listed in directories; (bso#15093). * CVE-2018-14628 [SECURITY] Deleted Object tombstones visible in AD LDAP to normal users; (bso#13595). * Kerberos TGS-REQ with User2User does not work for normal accounts; (bso#15492). * vfs_gpfs stat calls fail due to file system permissions; (bso#15507). * Samba doesn't build with Python 3.12; (bso#15513).- packaging: samba-tool domain provision requires python3-Markdown; (bsc#1216519).- Update to 4.19.2 * Use-after-free in aio_del_req_from_fsp during smbd shutdown after failed IPC FSCTL_PIPE_TRANSCEIVE; (bso#15423). * clidfs.c do_connect() missing a "return" after a cli_shutdown() call; (bso#15426). * macOS mdfind returns only 50 results; (bso#15463). * GETREALFILENAME_CACHE can modify incoming new filename with previous cache entry value; (bso#15481). * libnss_winbind causes memory corruption since samba-4.18, impacts sendmail, zabbix, potentially more; (bso#15464). * ctdbd: setproctitle not initialized messages flooding logs; (bso#15479). * CVE-2023-5568 Heap buffer overflow with freshness tokens in the Heimdal KDC in Samba 4.19; (bso#15491). * The heimdal KDC doesn't detect s4u2self correctly when fast is in use; (bso#15477).- use systemd-logind rather than utmp for y2038 safety; (bsc#1216159).- CVE-2023-4091: samba: Client can truncate file with read-only permissions; (bsc#1215904); (bso#15439). - CVE-2023-42669: samba: rpcecho, enabled and running in AD DC, allows blocking sleep on request; (bso#1215905); (bso#15474). - CVE-2023-42670: samba: The procedure number is out of range when starting Active Directory Users and Computers; (bsc#1215906); (bso#15473). - CVE-2023-3961: samba: Unsanitized client pipe name passed to local_np_connect(); (bsc#1215907); (bso#15422). - CVE-2023-4154: samba: dirsync allows SYSTEM access with only "GUID_DRS_GET_CHANGES" right, not "GUID_DRS_GET_ALL_CHANGES; (bsc#1215908); (bso#15424).- Update to 4.19.0 * File doesn't show when user doesn't have permission if aio_pthread is loaded; (bso#15453). * ctdb_killtcp fails to work with --enable-pcap and libpcap ≥ 1.9.1; (bso#15451). * Logging to stdout/stderr with DEBUG_SYSLOG_FORMAT_ALWAYS can log to syslog; (bso#15460). * ‘samba-tool domain level raise’ fails unless given a URL; (bso#15458). * reply_sesssetup_and_X() can dereference uninitialized tmp pointer; (bso#15420). * missing return in reply_exit_done(); (bso#15430). * TREE_CONNECT without SETUP causes smbd to use uninitialized pointer; (bso#15432). * Avoid infinite loop in initial user sync with Azure AD Connect when synchronising a large Samba AD domain; (bso#15401). * Samba replication logs show (null) DN; (bso#15407). * 2-3min delays at reconnect with smb2_validate_sequence_number: bad message_id 2; (bso#15346). * DCERPC_PKT_CO_CANCEL and DCERPC_PKT_ORPHANED can't be parsed; (bso#15446). * CID 1539212 causes real issue when output contains only newlines; (bso#15438). * KDC encodes INT64 claims incorrectly; (bso#15452). * mdssvc: Do an early talloc_free() in _mdssvc_open(); (bso#15449). * Windows client join fails if a second container CN=System exists somewhere; (bso#9959). * regression DFS not working with widelinks = true; (bso#15435). * Heimdal fails to build on 32-bit FreeBSD; (bso#15443). * samba-tool ntacl get segfault if aio_pthread appended; (bso#15441). - Update to 4.18.6 * reply_sesssetup_and_X() can dereference uninitialized tmp pointer; (bso#15420); * Missing return in reply_exit_done(); (bso#15430); * post-exec password redaction for samba-tool is more reliable for fully random passwords as it no longer uses regular expressions containing the password value itself; (bso#15289); * Windows client join fails if a second container CN=System exists somewhere; (bso#9959); * Spotlight sometimes returns no results on latest macOS; (bso#15342); * Renaming results in NT_STATUS_SHARING_VIOLATION if previously attempted to remove the destination; (bso#15417); * Spotlight results return wrong date in result list; (bso#15427); * "net offlinejoin provision" does not work as non-root user; (bso#15414); * rpcserver no longer accepts double backslash in dfs pathname; (bso#15400); * cm_prepare_connection() calls close(fd) for the second time; (bso#15433); * 2-3min delays at reconnect with smb2_validate_sequence_number: bad message_id 2; (bso#15346); * samba-tool ntacl get segfault if aio_pthread appended; (bso#15441); * DCERPC_PKT_CO_CANCEL and DCERPC_PKT_ORPHANED can't be parsed; (bso#15446); * Python tarfile extraction needs change to avoid a warning (CVE-2007-4559 mitigation); (bso#15390); * Regression DFS not working with widelinks = true; (bso#15435); * mdssvc: Do an early talloc_free() in _mdssvc_open(); (bso#15449); - Update to 4.18.5 * CVE-2022-2127: lm_resp_len not checked properly in winbindd_pam_auth_crap_send; (bso#15072); (bsc#1213174). * CVE-2023-34966: Samba Spotlight mdssvc RPC Request Infinite Loop Denial-of-Service Vulnerability; (bso#15340); (bsc#1213173). * CVE-2023-34967: Samba Spotlight mdssvc RPC Request Type Confusion Denial-of-Service Vulnerability; (bso#15341); (bsc#1213172). * CVE-2023-34968: Spotlight server-side Share Path Disclosure; (bso#15388); (bsc#1213171). * CVE-2023-3347: Samba doesn't require SMB2+ signing if `server signing = mandatory` is set; (bso#15397); (bsc#1213170). * secure channel faulty since Windows 10/11 update 07/2023; (bso#15418); (bsc#1213384). - Update to 4.18.4 * Backport --pidl-developer fixes; (bso#15404). * Named crashes on DLZ zone update; (bso#14030). * smbcacls and smbcquotas do not check // before the server; (bso#2312). * cli_list loops 100% CPU against pre-lanman2 servers; (bso#15382). * smbclient leaks fds with showacls; (bso#15391). * smbd returns NOT_FOUND when creating files on a r/o filesystem; (bso#15402). * NSS_WRAPPER_HOSTNAME doesn't match NSS_WRAPPER_HOSTS entry and causes test timeouts; (bso#15355). * net ads lookup (with unspecified realm) fails; (bso#15384). * Register Samba processes with GPFS; (bso#15381). * Python tarfile extraction needs change to avoid a warning (CVE-2007-4559 mitigation); (bso#15390). * The winbind child segfaults when listing users with `winbind scan trusted domains = yes`; (bso#15398). * Remove comments about deprecated 'write cache size'; (bso#15383). * smbget memory leak if failed to download files recursively; (bso#15403). - Update to 4.18.3 * Symlinks to files can have random DOS mode information in a directory listing; (bso#15375). * vfs_fruit might cause a failing open for delete; (bso#15378). * winbind recurses into itself via rpcd_lsad; (bso#15361). * wbinfo -u fails on ad dc with >1000 users; (bso#15366). * DS ACEs might be inherited to unrelated object classes; (bso#15338). * a lot of messages: get_static_share_mode_data: get_static_share_mode_data_fn failed: NT_STATUS_NOT_FOUND; (bso#15362). * aes256 smb3 encryption algorithms are not allowed in smb3_sid_parse(); (bso#15374). * Setting veto files = /.*/ break listing directories; (bso#15360). * "samba-tool domain provision" does not run interactive mode if no arguments are given; (bso#15363). * dsgetdcname: assumes local system uses IPv4; (bso#15325). - Update to 4.18.2 * Log flood: smbd_calculate_access_mask_fsp: Access denied: message level should be lower; (bso#15302). * Floating point exception (FPE) via cli_pull_send at source3/libsmb/clireadwrite.c; (bso#15306). * test_tstream_more_tcp_user_timeout_spin fails intermittently on Rackspace GitLab runners; (bso#15328). * Reduce flapping of ridalloc test; (bso#15329). * large_ldap test is unreliable; (bso#15351). * New filename parser doesn't check veto files smb.conf parameter; (bso#15143). * mdssvc may crash when initializing; (bso#15354). * large directory optimization broken for non-lcomp path elements; (bso#15313). * streams_depot fails to create streams; (bso#15357). * shadow_copy2 and streams_depot don't play well together; (bso#15358). * Flapping tests in samba_tool_drs_show_repl.py; (bso#15316). * winbindd idmap child contacts the domain controller without a need; (bso#15317). * idmap_autorid may fail to map sids of trusted domains for the first time; (bso#15318). * idmap_hash doesn't use ID_TYPE_BOTH for reverse mappings; (bso#15319). * net ads search -P doesn't work against servers in other domains; (bso#15323). * Temporary smbXsrv_tcon_global.tdb can't be parsed; (bso#15353). * Tests use depricated and removed methods like assertRegexpMatches; (bso#15343). - Update to 4.18.1 * CVE-2023-0225: AD DC "dnsHostname" attribute can be deleted by unprivileged authenticated users. (bso#15276);(bsc#1209483). * CVE-2023-0614: Access controlled AD LDAP attributes can be discovered (bso#15270); (bsc#1209485). * CVE-2023-0922: Samba AD DC admin tool samba-tool sends passwords in cleartext(bso#15315);(bsc#1209481). * ldb wildcard matching makes excessive allocations; (bso#15331). * large_ldap test is inefficient; (bso#15332). - Update to 4.18.0 * SMB server performance improvements * More succinct samba-tool error messages * Color output with samba-tool --color The NO_COLOR environment variable will disable colour output * New samba-tool dsacl subcommand for deleting ACEs * New wbinfo option --change-secret-at * Net option to change the NT ACL default location * Azure AD / Office365 synchronization improvements- Fix DFS not working with widelinks enabled; (bsc#1213607); (bso#15435);- Move libcluster-samba4.so from samba-libs to samba-client-libs; (bsc#1213940);- net ads lookup with unspecified realm fails; (bso#15384); (bsc#1213826);- secure channel faulty since Windows 10/11 update 07/2023; (bso#15418); (bsc#1213384).- CVE-2022-2127: lm_resp_len not checked properly in winbindd_pam_auth_crap_send; (bso#15072); (bsc#1213174). - CVE-2023-34966: Samba Spotlight mdssvc RPC Request Infinite Loop Denial-of-Service Vulnerability; (bso#15340); (bsc#1213173). - CVE-2023-34967: Samba Spotlight mdssvc RPC Request Type Confusion Denial-of-Service Vulnerability; (bso#15341); (bsc#1213172). - CVE-2023-34968: Spotlight server-side Share Path Disclosure; (bso#15388); (bsc#1213171). - CVE-2023-3347: Samba doesn't require SMB2+ signing if `server signing = mandatory` is set; (bso#15397); (bsc#1213170).- Update to 4.17.9 * Backport --pidl-developer fixes; (bso#15404). * smbd_scavenger crashes when service smbd is stopped; (bso#15275). * vfs_fruit might cause a failing open for delete; (bso#15378). * named crashes on DLZ zone update; (bso#14030). * winbind recurses into itself via rpcd_lsad; (bso#15361). * cli_list loops 100% CPU against pre-lanman2 servers; (bso#15382). * smbclient leaks fds with showacls; (bso#15391). * aes256 smb3 encryption algorithms are not allowed in smb3_sid_parse(); (bso#15374). * winbindd gets stuck on NT_STATUS_RPC_SEC_PKG_ERROR; (bso#15413). * smbget memory leak if failed to download files recursively; (bso#15403).- Update to 4.17.8 * log flood: smbd_calculate_access_mask_fsp: Access denied: message level should be lower; (bso#15302). * Floating point exception (FPE) via cli_pull_send at source3/libsmb/clireadwrite.c; (bso#15306). * test_tstream_more_tcp_user_timeout_spin fails intermittently on Rackspace GitLab runners; (bso#15328). * Reduce flapping of ridalloc test; (bso#15329). * large_ldap test is unreliable; (bso#15351). * New filename parser doesn't check veto files smb.conf parameter; (bso#15143). * mdssvc may crash when initializing; (bso#15354). * Large directory optimization broken for non-lcomp path elements; (bso#15313). * streams_depot fails to create streams; (bso#15357). * shadow_copy2 and streams_depot don't play well together; (bso#15358). * wbinfo -u fails on ad dc with >1000 users; (bso#15366). * winbindd idmap child contacts the domain controller without a need; (bso#15317). * idmap_autorid may fail to map sids of trusted domains for the first time; (bso#15318). * idmap_hash doesn't use ID_TYPE_BOTH for reverse mappings; (bso#15319). * net ads search -P doesn't work against servers in other domains; (bso#15323). * DS ACEs might be inherited to unrelated object classes; (bso#15338). * Temporary smbXsrv_tcon_global.tdb can't be parsed; (bso#15353). * Setting veto files = /.*/ break listing directories; (bso#15360); (bsc#1212375). * CVE-2020-25720 [SECURITY] Create Child permission should not allow full write to all attributes (additional changes); (bso#14810). * dsgetdcname: assumes local system uses IPv4; (bso#15325).- Update to 4.17.7 * CVE-2023-0922: Samba AD DC admin tool samba-tool sends passwords in cleartext; (bso#15315); (bsc#1209481). * CVE-2023-0225: Samba AD DC "dnsHostname" attribute can be deleted by unprivileged authenticated users; (bso#15276); (bsc#1209483). * CVE-2023-0614: samba: Access controlled AD LDAP attributes can be discovered; (bso#15270); (bsc#1209485). * large_ldap test is inefficient; (bso#15332). * CVE-2020-25720 [SECURITY] Create Child permission should not allow full write to all attributes (additional changes); (bso#14810). - Update to 4.17.6 * streams_xattr is creating unexpected locks on folders; (bso#15314). * Use of the Azure AD Connect cloud sync tool is now supported for password hash synchronisation, allowing Samba AD Domains to synchronise passwords with this popular cloud environment; (bso#10635). * Spotlight doesn't work with latest macOS Ventura; (bso#15299). * New samba-dcerpc architecture does not scale gracefully; (bso#15310). * vfs_ceph incorrectly uses fsp_get_io_fd() instead of fsp_get_pathref_fd() in close and fstat; (bso#15307). * With clustering enabled samba-bgqd can core dump due to use after free; (bso#15293). * fd_load() function implicitly closes the fd where it should not; (bso#15311). - Update to 4.17.5 * smbc_getxattr() return value is incorrect; (bso#14808). * Compound SMB2 FLUSH+CLOSE requests from MacOSX are not handled correctly; (bso#15172). * synthetic_pathref AFP_AfpInfo failed errors; (bso#15210). * samba-tool gpo listall fails IPv6 only - finddcs() fails to find DC when there is only an AAAA record for the DC in DNS; (bso#15226). * smbd crashes if an FSCTL request is done on a stream handle; (bso#15236). * DFS links don't work anymore on Mac clients since 4.17; (bso#15277). * vfs_virusfilter segfault on access, directory edgecase (accessing NULL value); (bso#15283). * CVE-2022-38023 [SECURITY] Samba should refuse RC4 (aka md5) based SChannel on NETLOGON (additional changes); (bso#15240). * %U for include directive doesn't work for share listing (netshareenum); (bso#15243). * Shares missing from netshareenum response in samba 4.17.4; (bso#15266). * ctdb: use-after-free in run_proc; (bso#15269). * irpc_destructor may crash during shutdown; (bso#15280). * auth3_generate_session_info_pac leaks wbcAuthUserInfo; (bso#15286). * smbclient segfaults with use after free on an optimized build; (bso#15268). * smbstatus leaking files in msg.sock and msg.lock; (bso#15282). * Leak in wbcCtxPingDc2; (bso#15164). * Access based share enum does not work in Samba 4.16+; (bso#15265). * Crash during share enumeration; (bso#15267). * rep_listxattr on FreeBSD does not properly check for reads off end of returned buffer; (bso#15271). * Avoid relying on C89 features in a few places; (bso#15281).- Make (32bit) samba-libs conflict with old samba-ad-dc-libs package to satisfy installcheck.- Make samba-libs conflict with old samba-ad-dc-libs package to satisfy installcheck.- Remove non functioning ifup/ifdown samba-winbindd scripts; (bsc#1207414).- libdsdb-module-samba4 should be packaged as part of samba-libs and not samba-ad-dc-libs. Additionally no need for it to be removed conditionally.- Clean up logic for PAM migration settings in spec file.- Change with_dc default to 0 (for non TW builds), ADDC feature is deprecated and will no longer be included in >= SLE15-SP5; (jsc#PED-1122).- Update to 4.17.4 * CVE-2022-44640 Upstream Heimdal free of user-controlled pointer in FAST; (bsc#14929); * CVE-2021-20251 Bad password count not incremented atomically; (bsc#14611); * CVE-2022-42898 krb5_pac_parse() buffer parsing vulnerability; (bsc#15203); * CVE-2022-37966 rc4-hmac Kerberos session keys issued to modern servers; (bso#15237); * CVE-2022-37967 Kerberos constrained delegation ticket forgery possible against Samba AD DC; (bso#15231); * CVE-2022-38023 RC4/HMAC-MD5 NetLogon Secure Channel is weak and should be avoided; (bso#15240); * pam_winbind uses time_t and pointers assuming they are of the same size; (bso#15224); * Heimdal session key selection in AS-REQ examines wrong entry; (bso#15219); * filter-subunit is inefficient with large numbers of knownfails; (bso#15258); * smbd allows setting FILE_ATTRIBUTE_TEMPORARY on directories; (bso#15252); * The KDC logic arround msDs-supportedEncryptionTypes differs from Windows; (bso#13135); * libnet: change_password() doesn't work with dcerpc_samr_ChangePasswordUser4(); (bso#15206); * Heimdal session key selection in AS-REQ examines wrong entry; (bso#15219); * Memory leak in snprintf replacement functions; (bso#15230); * RODC doesn't reset badPwdCount reliable via an RWDC (CVE-2021-20251 regression); (bso#15253); * Prevent EBADF errors with vfs_glusterfs; (bso#15198); * %U for include directive doesn't work for share listing (netshareenum); (bso#15243); * Stack smashing in net offlinejoin requestodj; (bso#15257); * Windows 11 22H2 and Samba-AD 4.15 Kerberos login issue; (bso#15197); * Heimdal session key selection in AS-REQ examines wrong entry; (bso#15219); - Remove deprecated if-{down,up} scripts; (bsc#1206444); - Adjust the systemd drop-in file for named service; (bsc#1201689); * Paths are additive so do not repeat paths from named.service * Prefix the samba DLZ directory with "-" to ignore this path if it does not exists- Introduce without-smb1-server spec flag; (bsc#1205104); - Update to 4.17.3 * CVE-2022-42898: Samba buffer overflow vulnerabilities on 32-bit systems; (bsc#1205126); (bso#15203); - Replace obsolete python-gpgme with python-gpg * Upstream replaced it in v4.9.5 -- bso#13728 - Update to 4.17.2 * CVE-2022-3592 [SECURITY] samba: Wide links protection broken; (bso#15207); (bsc#1204499). * CVE-2022-3437 [SECURITY] samba: Buffer overflow in Heimdal unwrap_des3();(bso#15134); (bsc#1204254). - Update to 4.17.1 * CVE-2021-20251 [SECURITY] Bad password count not incremented atomically; (bso#14611). * smbXsrv_connection_shutdown_send result leaked; (bso#15174). * Flush on a named stream never completes; (bso#15182). * Permission denied calling SMBC_getatr when file not exists; (bso#15195). * Samba 4.5 sometimes cannot be upgraded to Samba 4.6 or later over DRS: WERROR_DS_DRA_MISSING_PARENT due to faulty GET_ANC; (bso#15189). * pytest: add file removal helpers for TestCaseInTempDir; (bso#15191). * CVE-2021-20251 [SECURITY] Bad password count not incremented atomically; (bso#14611). * Samba 4.5 sometimes cannot be upgraded to Samba 4.6 or later over DRS: WERROR_DS_DRA_MISSING_PARENT due to faulty GET_ANC; (bso#15189). * Flush on a named stream never completes; (bso#15182). * vfs_gpfs silently garbles timestamps > year 2106; (bso#15151). * CVE-2021-20251 [SECURITY] Bad password count not incremented atomically; (bso#14611). * multi-channel socket passing may hit a race if one of the involved processes already existed; (bso#15200). * memory leak on temporary of struct imessaging_post_state and struct tevent_immediate on struct imessaging_context (in rpcd_spoolss and maybe others); (bso#15201). * Since popt1.19 various use after free errors using result of poptGetArg are now exposed; (bso#15205); (boo#1204279). * Remove special case for O_CREAT in SMB_VFS_OPENAT from vfs_glusterfs; (bso#15192). * GETPWSID in memory cache grows indefinetly with each NTLM auth; (bso#15169). * CVE-2021-20251 [SECURITY] Bad password count not incremented atomically; (bso#14611). - Install a systemd drop-in file for named service to allow read/write access to the DLZ directory; (bsc#1201689); - Fix use after free errors resulting from using return of poptGetArg exposed since popt-1.19; (boo#1204279); (bso#15205). - s3: smbd: Fix memory leak in smbd_server_connection_terminate_done(); (bso#15174). - Disable SMB1 for tumbleweed builds. - Update to 4.17.0 * acl_xattr VFS module may unintentionally use filesystem permissions instead of ACL from xattr; (bso#15126). * Missing SMB2-GETINFO access checks from MS-SMB2 3.3.5.20.1; (bso#15153). * assert failed: !is_named_stream(smb_fname)") at ../../lib/util/fault.c:197; (bso#15161). * acl_xattr VFS module may unintentionally use filesystem permissions instead of ACL from xattr; (bso#15126). * assert failed: !is_named_stream(smb_fname)") at ../../lib/util/fault.c:197; (bso#15161). * Cross-node multi-channel reconnects result in SMB2 Negotiate returning NT_STATUS_NOT_SUPPORTED; (bso#15159). * winbind at info level debug can coredump when processing wb_lookupusergroups; (bso#15160). * Make use of glfs_*at() API calls in vfs_glusterfs; (bso#15157). * Possible use after free of connection_struct when iterating smbd_server_connection->connections; (bso#15128). * `net usershare add` fails with flag works with --long but fails with -l; (bso#15145). * acl_xattr VFS module may unintentionally use filesystem permissions instead of ACL from xattr; (bso#15126). * Performance regression on contended path based operations; (bso#15125). * Missing READ_LEASE break could cause data corruption; (bso#15148). * libsamba-errors uses a wrong version number; (bso#15141). * SMB1 negotiation can fail to handle connection errors; (bso#15152). * New filename parser doesn't check veto files smb.conf parameter; (bso#15143). * 4.17.rc1 still uses symlink-race prone unix_convert(); (bso#15144). * Backport fileserver related changed to 4.17.0rc2; (bso#15146). * Manpage for smbstatus json is missing; (bso#15147). * Backport fileserver related changed to 4.17.0rc2; (bso#15146). * Performance regression on contended path based operations; (bso#15125). * Backport fileserver related changed to 4.17.0rc2; (bso#15146). * Fix issues found by coverity in smbstatus json code; (bso#15140). * Backport fileserver related changed to 4.17.0rc2; (bso#15146). - Migration to /usr/etc: Saving user changed configuration files in /etc and restoring them while an RPM update. - Update to 4.16.4 * CVE-2022-2031: Samba AD users can bypass certain restrictions associated with changing passwords; (bsc#1201495); (bso#15047); * CVE-2022-32744: Samba AD users can forge password change requests for any user; (bsc#1201493); (bso#15074); * CVE-2022-32745: Samba AD users can crash the server process with an LDAP add or modify request; (bsc#1201492); (bso#15008); * CVE-2022-32746: Samba AD users can induce a use-after-free in the server process with an LDAP add or modify request; (bsc#1201490); (bso#15009); * CVE-2022-32742: Server memory information leak via SMB1; (bsc#1201496); (bso#15085); - Update to 4.16.3 * Using vfs_streams_xattr and deleting a file causes a panic; (bso#15099); * Add support for bind 9.18; (bso#14986); * logging dsdb audit to specific files does not work; (bso#15076); * Problem when winbind renews Kerberos; (bso#14979); (bsc#1196224); * Samba with new lorikeet-heimdal fails to build on gcc 12.1 in developer mode; (bso#15095); * Crash in streams_xattr because fsp->base_fsp->fsp_name is NULL; (bso#15105); * Crash in rpcd_classic - NULL pointer deference in mangle_is_mangled(); (bso#15118); * smbclient commands del & deltree fail with NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100); (bsc#1200556); * Fix check for chown when processing NFSv4 ACL; (bso#15120); * The pcap background queue process should not be stopped; (bso#15082); * testparm: Fix typo in idmap rangesize check; (bso#15097); * net ads info returns LDAP server and LDAP server name as null; (bso#15106); * ldconfig: /lib64/libsmbconf.so.0 is not a symbolic link; (bso#15108); * CTDB child process logging does not work as expected; (bso#15090); - Update spec file to fix the optional Heimdal DC build - Fix external trusts with MIT Kerberos 1.20 - Add missing samba-client requirement to samba-winbind package; (bsc#1198255); - Move pdb backends from package samba-libs to package samba-client-libs and remove samba-libs requirement from samba-winbind; (bsc#1200964); (bsc#1198255); - Add sysuser-shadow requirement for packages using systemd-sysusers - Use the canonical realm name to refresh the Kerberos tickets; (bsc#1196224); (bso#14979); - Moved logrotate files from user specific directory /etc/logrotate.d to vendor specific directory /usr/etc/logrotate.d. - Update to 4.16.2 * Use pathref fd instead of io fd in vfs_default_durable_cookie; (bso#15042); * vfs_gpfs with vfs_shadowcopy2 fail to restore file if original file had been deleted; (bso#15069); * Reintroduce netgroups support; (bso#15087); * net ads info shows LDAP Server: 0.0.0.0 depending on contacted server; (bso#14674); * Update from 4.15 to 4.16 breaks discovery of [homes] on standalone server from Win and IOS; (bso#15062); * waf produces incorrect names for python extensions with Python 3.11; (bso#15071); * smbclient -E doesn't work as advertised; (bso#15075); * The samba background daemon doesn't refresh the printcap cache on startup; (bso#15081); * Out-by-4 error in smbd read reply max_send clamp; (bso#14443); - Fix samba4.blackbox.net_ads_dns_async test with bind9 >= 9.17.7 - Support building with MIT Kerberos 1.20 - Bronze bit and S4U support with MIT Kerberos 1.20 for Samba AD DC; (CVE-2020-17049); - Resource Based Constrained Delegation (RBCD) for Samba AD DC - Support building with gcc 12.1 - Use requires_eq macro to require the libldb2 version available at samba-dsdb-modules build time; (bsc#1199362); - Update to 4.16.1 * Share and server swapped in smbget password prompt; (bso#14831); * Durable handles won't reconnect if the leased file is written to; (bso#15022); * rmdir silently fails if directory contains unreadable files and hide unreadable is yes; (bso#15023); * SMB2_CLOSE_FLAGS_FULL_INFORMATION fails to return information on renamed file handle; (bso#15038); * Need to describe --builtin-libraries= better (compare with - -bundled-libraries); (bso#8731); * vfs_shadow_copy2 breaks "smbd async dosmode" sync fallback; (bso#14957); * shadow_copy2 fails listing snapshotted dirs with shadow:fixinodes; (bso#15035); * PAM Kerberos authentication incorrectly fails with a clock skew error; (bso#15046); * Username map - samba erroneously applies unix group memberships to user account entries; (bso#15041); * KVNO off by 100000; (bso#14951); * Uninitialized litemask in variable in vfs_gpfs module; (bso#15027); * vfs_gpfs recalls=no option prevents listing files; (bso#15055); * smbd doesn't handle UPNs for looking up names; (bso#15054); - Update update-apparmor-samba-profile script, replace non-printable delimiter with more human readable separator as sed can accept separators that can appear in the input data. - Fix update-apparmor-samba-profile script, sed doesn't like multibyte separators; (bsc#1198309). - Update to 4.16.0 * New samba-dcerpcd binary to provide DCERPC in the member server setup * Certificate Auto Enrollment * Ability to add ports to dns forwarder addresses in internal DNS backend * No longer using Linux mandatory locks for sharemodes * SMB1 protocol has been deprecated, particularly older dialects * SMB1 protocol SMBCopy command removed * SMB1 server-side wildcard expansion removed - Add python3-dnspython to samba-ad-dc recommens; (bsc#1187101); - Use systemd-sysusers to create system users; (bsc#1182847);- Install a systemd drop-in file for named service to allow read/write access to the DLZ directory; (bsc#1201689);- Update to 4.15.12 * CVE-2022-42898: samba: heimdal: Samba buffer overflow vulnerabilities on 32-bit systems; (bso#15203); (bsc#1205126). - Update to 4.15.11 * Allow rebuild of Centos 8 images after move to vault for Samba 4.15; (bso#15193). * CVE-2022-3437: samba: Buffer overflow in Heimdal unwrap_des3(); (bso#15134); (bsc#1204254)- Update to 4.15.10 * Possible use after free of connection_struct when iterating smbd_server_connection->connections; (bso#15128); (bsc#1200102). * smbXsrv_connection_shutdown_send result leaked; (bso#15174). * Spotlight RPC service returns wrong response when Spotlight is disabled on a share; (bso#15086). * acl_xattr VFS module may unintentionally use filesystem permissions instead of ACL from xattr; (bso#15126). * Missing SMB2-GETINFO access checks from MS-SMB2 3.3.5.20.1; (bso#15153). * assert failed: !is_named_stream(smb_fname)") at ../../lib/util/fault.c:197; (bso#15161). * Missing READ_LEASE break could cause data corruption; (bso#15148). * rpcclient can crash using setuserinfo(2); (bso#15124). * Samba fails to build with glibc 2.36 caused by including in libreplace; (bso#15132). * SMB1 negotiation can fail to handle connection errors; (bso#15152). * samba-tool domain join segfault when joining a samba ad domain; (bso#15078). - Update to 4.15.9 * CVE-2022-32742:SMB1 code does not correct verify SMB1write, SMB1write_and_close, SMB1write_and_unlock lengths; (bso#15085); (bsc#1201496). * CVE-2022-32746: samba: Use-after-free occurring in database audit logging; (bso#15009); (bso#15096); (bsc#1201490). * CVE-2022-2031: samba, ldb: AD users can bypass certain restrictions associated with changing passwords; (bso#15047); (bsc#1201495); * CVE-2022-32745: samba: ldb: AD users can crash the server process with an LDAP add or modify request; (bso#15008); (bso#15096); (bsc#1201492). * CVE-2022-2031: samba, ldb: AD users can bypass certain restrictions associated with changing passwords; (bso#15047); (bsc#1201495); * CVE-2022-32744: samba, ldb: AD users can forge password change requests for any user; (bso#15074); (bso#15047); (bsc#1201493).- CVE-2022-1615: Do not ignore errors in random number generation; (bso#15103); (bsc#1202976); - CVE-2022-32743: Implement validated dnsHostName write rights; (bso#14833); (bsc#1202803);- Fix Use after free when iterating smbd_server_connection->connections after tree disconnect failure; (bso#15128); (bsc#1200102).- CVE-2022-32746: samba: Use-after-free occurring in database audit logging; (bso#15009); (bso#15096); (bsc#1201490). - CVE-2022-32745: samba: ldb: AD users can crash the server process with an LDAP add or modify request; (bso#15008); (bso#15096); (bsc#1201492). - CVE-2022-2031: samba, ldb: AD users can bypass certain restrictions associated with changing passwords; (bso#15047); (bsc#1201495); - CVE-2022-32742:SMB1 code does not correct verify SMB1write, SMB1write_and_close, SMB1write_and_unlock lengths; (bso#15085); (bsc#1201496). - CVE-2022-32744: samba, ldb: AD users can forge password change requests for any user; (bso#15074); (bso#15047); (bsc#1201493).- Update to 4.15.8 * Use pathref fd instead of io fd in vfs_default_durable_cookie; (bso#15042); * Setting fruit:resource = stream in vfs_fruit causes a panic; (bso#15099); * Add support for bind 9.18; (bso#14986); * logging dsdb audit to specific files does not work; (bso#15076); * vfs_gpfs with vfs_shadowcopy2 fail to restore file if original file had been deleted; (bso#15069); * netgroups support removed; (bso#15087); (bsc#1199247); * net ads info shows LDAP Server: 0.0.0.0 depending on contacted server; (bso#14674); (bsc#1199734); * waf produces incorrect names for python extensions with Python 3.11; (bso#15071); * smbclient commands del & deltree fail with NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100); (bsc#1200556); * vfs_gpfs recalls=no option prevents listing files; (bso#15055); * waf produces incorrect names for python extensions with Python 3.11; (bso#15071); * Compile error in source3/utils/regedit_hexedit.c; (bso#15091); * ldconfig: /lib64/libsmbconf.so.0 is not a symbolic link; (bso#15108); * smbd doesn't handle UPNs for looking up names; (bso#15054); * Out-by-4 error in smbd read reply max_send clamp; (bso#14443); - Move pdb backends from package samba-libs to package samba-client-libs and remove samba-libs requirement from samba-winbind; (bsc#1200964); (bsc#1198255); - Use the canonical realm name to refresh the Kerberos tickets; (bsc#1196224); (bso#14979);- Fix smbclient commands del & deltree failing with NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100); (bsc#1200556).- Revert NIS support removal; (bsc#1199247);- Use requires_eq macro to require the libldb2 version available at samba-dsdb-modules build time; (bsc#1199362);- Add missing samba-client requirement to samba-winbind package; (bsc#1198255);- Update to 4.15.7 * Share and server swapped in smbget password prompt; (bso#14831); * Durable handles won't reconnect if the leased file is written to; (bso#15022); * rmdir silently fails if directory contains unreadable files and hide unreadable is yes; (bso#15023); * SMB2_CLOSE_FLAGS_FULL_INFORMATION fails to return information on renamed file handle; (bso#15038); * vfs_shadow_copy2 breaks "smbd async dosmode" sync fallback; (bso#14957); * shadow_copy2 fails listing snapshotted dirs with shadow:fixinodes; (bso#15035); * PAM Kerberos authentication incorrectly fails with a clock skew error; (bso#15046); * username map - samba erroneously applies unix group memberships to user account entries; (bso#15041); * NT_STATUS_ACCESS_DENIED translates into EPERM instead of EACCES in SMBC_server_internal; (bso#14983); * Simple bind doesn't work against an RODC (with non-preloaded users); (bso#13879); * Crash of winbind on RODC; (bso#14641); * uncached logon on RODC always fails once; (bso#14865); * KVNO off by 100000; (bso#14951); * LDAP simple binds should honour "old password allowed period"; (bso#15001); * wbinfo -a doesn't work reliable with upn names; (bso#15003); * Simple bind doesn't work against an RODC (with non-preloaded users); (bso#13879); * Uninitialized litemask in variable in vfs_gpfs module; (bso#15027); * Regression: create krb5 conf = yes doesn't work with a single KDC; (bso#15016);- Add provides to samba-client-libs package to fix upgrades from previous versions; (bsc#1197995);- Add missing samba-libs requirement to samba-winbind package; (bsc#1198255);- Update to 4.15.6 * Renaming file on DFS root fails with NT_STATUS_OBJECT_PATH_NOT_FOUND; (bso#14169); * Samba does not response STATUS_INVALID_PARAMETER when opening 2 objects with same lease key; (bso#14737); * NT error code is not set when overwriting a file during rename in libsmbclient; (bso#14938); * Fix ldap simple bind with TLS auditing; (bso#14996); * net ads info shows LDAP Server: 0.0.0.0 depending on contacted server; (bso#14674); * Problem when winbind renews Kerberos; (bso#14979); (bsc#1196224); * pam_winbind will not allow gdm login if password about to expire; (bso#8691); * virusfilter_vfs_openat: Not scanned: Directory or special file; (bso#14971); * DFS fix for AIX broken; (bso#13631); * Solaris and AIX acl modules: wrong function arguments; (bso#14974); * Function aixacl_sys_acl_get_file not declared / coredump; (bso#7239); * Regression: Samba 4.15.2 on macOS segfaults intermittently during strcpy in tdbsam_getsampwnam; (bso#14900); * Fix a use-after-free in SMB1 server; (bso#14989); * smb2_signing_decrypt_pdu() may not decrypt with gnutls_aead_cipher_decrypt() from gnutls before 3.5.2; (bso#14968); * Changing the machine password against an RODC likely destroys the domain join; (bso#14984); * authsam_make_user_info_dc() steals memory from its struct ldb_message *msg argument; (bso#14993); * Use Heimdal 8.0 (pre) rather than an earlier snapshot; (bso#14995); * Samba autorid fails to map AD users if id rangesize fits in the id range only once; (bso#14967);- Fix mismatched version of libldb2; (bsc#1196788). - Drop obsolete SuSEfirewall2 service files.- Drop obsolete Samba fsrvp v0->v1 state upgrade functionality; (bsc#1080338).- Fix ntlm authentications with "winbind use default domain = yes"; (bso#13126); (bsc#1173429); (bsc#1196308).- Fix samba-ad-dc status warning notification message by disabling systemd notifications in bgqd; (bsc#1195896); (bso#14947).- libldb version mismatch in Samba dsdb component; (bsc#1118508);- Update to 4.15.5 * CVE-2021-44141: UNIX extensions in SMB1 disclose whether the outside target of a symlink exists; (bso#14911); (bsc#1193690). * CVE-2021-44142: Out-of-Bound Read/Write on Samba vfs_fruit module; (bso#14914); (bsc#1194859). * CVE-2022-0336: Re-adding an SPN skips subsequent SPN conflict checks; bso#14950); (bsc#1195048).- CVE-2021-44141: Information leak via symlinks of existance of files or directories outside of the exported share; (bso#14911); (bsc#1193690); - CVE-2021-44142: Out-of-bounds heap read/write vulnerability in VFS module vfs_fruit allows code execution; (bso#14914); (bsc#1194859); - CVE-2022-0336: Samba AD users with permission to write to an account can impersonate arbitrary services; (bso#14950); (bsc#1195048);- Update to 4.15.4 * Duplicate SMB file_ids leading to Windows client cache poisoning; (bso#14928); * Failed to parse NTLMv2_RESPONSE length 95 - Buffer Size Error - NT_STATUS_BUFFER_TOO_SMALL; (bso#14932); * kill_tcp_connections does not work; (bso#14934); * Can't connect to Windows shares not requiring authentication using KDE/Gnome; (bso#14935); * smbclient -L doesn't set "client max protocol" to NT1 before calling the "Reconnecting with SMB1 for workgroup listing" path; (bso#14939); * Cross device copy of the crossrename module always fails; (bso#14940); * symlinkat function from VFS cap module always fails with an error; (bso#14941); * Fix possible fsp pointer deference; (bso#14942); * Missing pop_sec_ctx() in error path inside close_directory(); (bso#14944); * "smbd --build-options" no longer works without an smb.conf file; (bso#14945);- Use pkgconfig(krb5) as dependency for the -devel package: allow OBS to pick the right flavor of krb5-devel (full vs mini). - Do not require the 'krb5' symbol by samba-client-libs: this package has an automatic dependency due to linkage on libgssapi_krb5.so.2. Automatic deps are always better. - Do not require the 'krb5' symbol from samba-libs: samba-libs requires samba-client-libs, which in turn requires krb5 libraries. Samba-libs itself has no need for krb5 (but get it indirectly anyway).- Reorganize libs packages. Split samba-libs into samba-client-libs, samba-libs, samba-winbind-libs and samba-ad-dc-libs, merging samba public libraries depending on internal samba libraries into these packages as there were dependency problems everytime one of these public libraries changed its version (bsc#1192684). The devel packages are merged into samba-devel. - Rename package samba-core-devel to samba-devel - Add python-rpm-macros to build requirements - Update the symlink create by samba-dsdb-modules to private samba ldb modules following libldb2 changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba- Update to 4.15.3 * Recursive directory delete with veto files is broken in 4.15.0; (bso#14878); * A directory containing dangling symlinks cannot be deleted by SMB2 alone when they are the only entry in the directory; (bso#14879); * SIGSEGV in rmdir_internals/synthetic_pathref - dirfsp is used uninitialized in rmdir_internals(); (bso#14892); * MaxQueryDuration not honoured in Samba AD DC LDAP; (bso#14694); * The CVE-2020-25717 username map [script] advice has undesired side effects for the local nt token; (bso#14901); (bsc#1192849); * User with multiple spaces (eg FredNurk) become un-deletable; (bso#14902); * Avoid storing NTTIME_THAW (-2) as value on disk; (bso#14127); * smbXsrv_client_global record validation leads to crash if existing record points at non-existing process; (bso#14882); * Crash in vfs_fruit asking for fsp_get_io_fd() for an XATTR call; (bso#14890); * Samba process doesn't log to logfile; (bso#14897); * set_ea_dos_attribute() fallback calling get_file_handle_for_metadata() triggers locking.tdb assert; (bso#14907); * Kerberos authentication on standalone server in MIT realm broken; (bso#14922); * Segmentation fault when joining the domain; (bso#14923); * Support for ROLE_IPA_DC is incomplete; (bso#14903); * rpcclient cannot connect to ncacn_ip_tcp services anymore; (bso#14767); * winexe crashes since 4.15.0 after popt parsing; (bso#14893); * net ads status -P broken in a clustered environment; (bso#14908); * Memory leak if ioctl(FSCTL_VALIDATE_NEGOTIATE_INFO) fails before smbd_smb2_ioctl_send; (bso#14788); * winbindd doesn't start when "allow trusted domains" is off; (bso#14899); * smbclient login without password using '-N' fails with NT_STATUS_INVALID_PARAMETER on Samba AD DC; (bso#14883); * A schannel client incorrectly detects a downgrade connecting to an AES only server; (bso#14912); * Possible null pointer dereference in winbind; (bso#14921); * Fix -k legacy option for client tools like smbclient, rpcclient, net, etc.; (bso#14846); * Add Debian 11 CI bootstrap support; (bso#14872); * Crash in recycle_unlink_internal(); (bso#14888);- Fix dependency problem upgrading from libndr0 to libndr2 and from libsamba-credentials0 to libsamba-credentials1; (bsc#1192684);- Fix regression introduced by CVE-2020-25717 patches, winbindd does not start when 'allow trusted domains' is off; (bso#14899); - Update to 4.15.2 * CVE-2016-2124: SMB1 client connections can be downgraded to plaintext authentication; (bso#12444); (bsc#1014440); * CVE-2020-25717: A user on the domain can become root on domain members; (bso#14556); (bsc#1192284); * CVE-2020-25718: Samba AD DC did not correctly sandbox Kerberos tickets issued by an RODC; (bso#14558); (bsc#1192246); * CVE-2020-25719: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets; (bso#14561); (bsc#1192247); * CVE-2020-25721: Kerberos acceptors need easy access to stable AD identifiers (eg objectSid); (bso#14557); (bsc#1192505); * CVE-2020-25722: Samba AD DC did not do suffienct access and conformance checking of data stored; (bso#14564); (bsc#1192283); * CVE-2021-3738: Use after free in Samba AD DC RPC server; (bso#14468); (bsc#1192215); * CVE-2021-23192: Subsequent DCE/RPC fragment injection vulnerability; (bso#14875); (bsc#1192214); - Update to 4.15.1 * vfs_shadow_copy2: core dump in make_relative_path; (bso#14682); * Log clutter from filename_convert_internal; (bso#14685); * MacOSX compilation fixes; (bso#14862); * rodc_rwdc test flaps; (bso#14868); * Provide a fix for MS CVE-2020-17049 in Samba [SECURITY] 'Bronze bit' S4U2Proxy Constrained Delegation bypass in Samba with embedded Heimdal; (bso#14642); * Python ldb.msg_diff() memory handling failure; (bso#14836); * "in" operator on ldb.Message is case sensitive; (bso#14845); * Release LDB 2.4.1 for Samba 4.15.1; (bso#14848); * samldb_krbtgtnumber_available() looks for incorrect string; (bso#14854); * Fix Samba support for UF_NO_AUTH_DATA_REQUIRED; (bso#14871); * Allow special chars like "@" in samAccountName when generating the salt; (bso#14874); * Correctly ignore comments in CTDB public addresses file; (bso#14826); * Fix transit path validation; (bso#12998); * Fix that child winbindd logs to log.winbindd instead of log.wb-; (bso#14852); * SMB3 cancel requests should only include the MID together with AsyncID when AES-128-GMAC is used; (bso#14855); * Prepare to operate with MIT krb5 >= 1.20; (bso#14870); * Heimdal prefers RC4 over AES for machine accounts; (bso#14864);- Enable samba-tool without ad dc.- Adjust spec to use pam macros; (bsc#1191046).- Adjust spec for size * allow some Recommends instead Requires to be configured for cifs-utils, samba-libs-python3 & samba-gpupdate; (bsc#1182847). * remove fam, undocumented and unneeded.- Add missing build dependency on bison when building with the embedded Heimdal Kerberos- Update to 4.15.0 * Removed SMB development dialects SMB2_22, SMB2_24 and SMB3_10 * VFS layer modernized. * Add the ability to set allow/deny lists for zone transfer clients in Bind DLZ plugin * Server multi-channel support no longer experimental * Improved command line user experience, unifying the options in different commands * Winbindd no longer scans trusted domains on startup and will use enterprise principals by default. * The net utility is now able to support the offline domain join feature * New options for 'samba-tool dns zoneoptions' for aging control and to mark old records as static or dynamic * DNS tombstones are now deleted as appropriate and use a consistent timestamp format * The 'samba-tool dns update' command validates and rejects now malformed IPv4 and IPv6 addresses * The 'samba-tool domain backup' command correctly takes out locks against concurrent modification during backup when using the LMDB backend * TruACL support has been removed * NIS support has been removed- Fix 'net rpc' authentication when using the machine account; (bsc#1189017); (bso#14796);- Fix dependency problem upgrading from libndr0 to libndr1; (bsc#1189875); - Fix dependency problem upgrading from libsmbldap0 to libsmbldap2; (bsc#1189875); - Fix wrong kvno exported to keytab after net ads changetrustpw due to replication delay; (bsc#1188727); - Add Certificate Auto Enrollment Policy; (jsc#SLE-18456). - Update to 4.13.10 * s3: smbd: Ensure POSIX default ACL is mapped into returned Windows ACL for directory handles; (bso#14708); * Take a copy to make sure we don't reference free'd memory; (bso#14721); * s3: lib: Fix talloc heirarcy error in parent_smb_fname(); (bso#14722); * s3: smbd: Remove erroneous TALLOC_FREE(smb_fname_parent) in change_file_owner_to_parent() error path; (bso#14736); * samba-tool: Give better error information when the 'domain backup restore' fails with a duplicate SID; (bso#14575); * smbd: Correctly initialize close timestamp fields; (bso#14714); * Spotlight RPC service doesn't work with vfs_glusterfs; (bso#14740); * ctdb: Fix a crash in run_proc_signal_handler(); (bso#14475); * gensec_krb5: Restore ipv6 support for kpasswd; (bso#14750); * smbXsrv_{open,session,tcon}: Protect smbXsrv_{open,session,tcon}_global_traverse_fn against invalid records; (bso#14752); * samba-tool domain backup offline doesn't work against bind DLZ backend; (bso#14027); * netcmd: Use next_free_rid() function to calculate a SID for restoring a backup; (bso#14669); - Update to 4.13.9 * s3: smbd: SMB1 SMBsplwr doesn't send a reply packet on success; (bso#14696); * Add documentation for dsdb_group_audit and dsdb_group_json_audit to "log level", synchronise "log level" in smb.conf with the code; (bso#14689); * Fix smbd panic when two clients open same file; (bso#14672); * Fix memory leak in the RPC server; (bso#14675); * s3: smbd: Fix deferred renames; (bso#14679); * s3-iremotewinspool: Set the per-request memory context; (bso#14675); * rpc_server3: Fix a memleak for internal pipes; (bso#14675); * third_party: Update socket_wrapper to version 1.3.2; (bso#11899); * third_party: Update socket_wrapper to version 1.3.3; (bso#14639); * idmap_rfc2307 and idmap_nss return wrong mapping for uid/gid conflict; (bso#14663); * Fix the build on OmniOS; (bso#14288); - Update to 4.13.8 * CVE-2021-20254: Fix buffer overrun in sids_to_unixids(); (bso#14571 - Update to 4.13.7 * Release with dependency on ldb version 2.2.1.- CVE-2021-20254 Buffer overrun in sids_to_unixids(); (bnc#14571); (bsc#1184677).- Fix offline domain backup not possible using lmdb version >= 0.9.26; (bso#14676); - Require libldb >= 2.2.1; (bsc#1183572); (bsc#1183574); - Update to 4.13.6 * CVE-2020-27840: samba: Unauthenticated remote heap corruption via bad DNs; (bso#14595); (bsc#1183572). * CVE-2021-20277: samba: out of bounds read in ldb_handler_fold; (bso#14655); (bsc#1183574). - Update to 4.13.5 * s3:modules:vfs_virusfilter: Recent talloc changes cause infinite start-up failure; (bso#14634); * s3: libsmb: Add missing cli_tdis() in error path if encryption setup failed on temp proxy connection; (bso#13992); * smbd: In conn_force_tdis_done() when forcing a connection closed force a full reload of services; (bso#14604); * dbcheck: Check Deleted Objects and reduce noise in reports about expired tombstones (bso#14593); * s3: Fix fcntl waf configure check; (bso#14503); * s3/auth: Implement "winbind:ignore domains"; (bso#14602); * smbd: Use fsp->conn->session_info for the initial delete-on-close token; (bso#14617); * s3: VFS: nfs4_acls. Add missing TALLOC_FREE(frame) in error path; (bso#14648); * classicupgrade: Treat old never expires value right; (bso#14624); * g_lock: Fix uninitalized variable reads; (bso#14636); * s3:pysmbd: Fix fd leak in py_smbd_create_file(); (bso#13898); * lib:util: Avoid free'ing our own pointer; (bso#14625); * HEIMDAL: krb5_storage_free(NULL) should work; (bso#12505);- Spec file fixes around systemd and requires; (bsc#1182830); - Align systemd service unit files with upstream provided ones.- Update to 4.13.4 * Work around special SMB2 IOCTL response behavior of NetApp Ontap 7.3.7; (bso#14607); * Temporary DFS share setup doesn't set case parameters in the same way as a regular share definition does; (bso#14612); * lib: Avoid declaring zero-length VLAs in various messaging functions; (bso#14605); * Do not create an empty DB when accessing a sam.ldb; (bso#14579); * vfs_fruit may close wrong backend fd; (bso#14596); * Temporary DFS share setup doesn't set case parameters in the same way as a regular share definition does; (bso#14612); * vfs_virusfilter: Allocate separate memory for config char*; (bso#14606); * vfs_fruit may close wrong backend fd; (bso#14596); * Work around special SMB2 IOCTL response behavior of NetApp Ontap 7.3.7; (bso#14607); * The cache directory for the user gencache should be created recursively; (bso#14601); * Be more flexible with repository names in CentOS 8 test environments; (bso#14594);- Uninstalling samba-client: Failed to disable unit, cifs.service does not exists; (bsc#1180388);- Update to 4.13.3 + libcli: smb2: Never print length if smb2_signing_key_valid() fails for crypto blob; (bso#14210); + s3: modules: gluster. Fix the error I made in preventing talloc leaks from a function; (bso#14486); + s3: smbd: Don't overwrite contents of fsp->aio_requests[0] with NULL via TALLOC_FREE(); (bso#14515); + s3: spoolss: Make parameters in call to user_ok_token() match all other uses; (bso#14568); + s3: smbd: Quiet log messages from usershares for an unknown share; (bso#14590); + samba process does not honor max log size; (bso#14248); + vfs_zfsacl: Add missing inherited flag on hidden "magic" everyone@ ACE; (bso#14587); + s3-libads: Pass timeout to open_socket_out in ms; (bso#13124); + s3-vfs_glusterfs: Always disable write-behind translator; (bso#14486); + smbclient: Fix recursive mget; (bso#14517); + clitar: Use do_list()'s recursion in clitar.c; (bso#14581); + manpages/vfs_glusterfs: Mention silent skipping of write-behind translator; (bso#14486); + vfs_shadow_copy2: Preserve all open flags assuming ROFS; (bso#14573); + interface: Fix if_index is not parsed correctly; (bso#14514);- Update to 4.13.2 + s3: modules: vfs_glusterfs: Fix leak of char **lines onto mem_ctx on return; (bso#14486); + RN: vfs_zfsacl: Only grant DELETE_CHILD if ACL tag is special; (bso#14471); + smb.conf.5: Add clarification how configuration changes reflected by Samba; (bso#14538); + daemons: Report status to systemd even when running in foreground; (bso#14552); + DNS Resolver: Support both dnspython before and after 2.0.0; (bso#14553); + s3-vfs_glusterfs: Refuse connection when write-behind xlator is present; (bso#14486); + provision: Add support for BIND 9.16.x; (bso#14487); + ctdb-common: Avoid aliasing errors during code optimization; (bso#14537); + libndr: Avoid assigning duplicate versions to symbols; (bso#14541); + docs: Fix default value of spoolss:architecture; (bso#14522); + winbind: Fix a memleak; (bso#14388); + s4:dsdb:acl_read: Implement "List Object" mode feature; (bso#14531); + docs-xml/manpages: Add warning about write-behind translator for vfs_glusterfs; (bso#14486); + nsswitch/nsstest.c: Avoid nss function conflicts with glibc nss.h. + vfs_shadow_copy2: Avoid closing snapsdir twice; (bso#14530); + third_party: Update resolv_wrapper to version 1.1.7; (bso#14547); + examples:auth: Do not install example plugin; (bso#14550); + ctdb-recoverd: Drop unnecessary and broken code; (bso#14513); + RN: vfs_zfsacl: Only grant DELETE_CHILD if ACL tag is special; (bso#14471);- Adjust smbcacls '--propagate-inheritance' feature to align with upstream; (bsc#1178469).- Update to samba 4.13.1 + CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with easily crafted records; (bsc#1177613); (bso#14472); + CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994); (bso#14436); + CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify; (bsc#1173902); (bso#14434); - Adjust systemd tmpfiles.d configuration, use /run/samba instead of /var/run/samba; (bsc#1177355);- Fix vfs_ceph query_directory regression; (bso#14519) - Drop liburing-devel for SLE15-SP2; (bsc#1177245)- Register CTDB recovery lock holder with ceph-mgr - Add liburing-devel dependency- Update to samba 4.13.0 + Require Python 3.6 + Move wide links functionality into VFS module + Deprecate NT4-like 'classic' Samba domain controllers + Deprecate SMBv1 only protocol options + Remove deprecated "ldap ssl ads" option + Unify asynchronous DCE-RPC server; (jsc#SES-645) + Replay multichannel lease break requests; (bso#11897); (jsc#SES-655) + Drop internal byteorder.h header from util-devel package + Remove final code for the AD DC LDAP backend + Add AD DC Group Policy Scripts + Only use gnutls_aead_cipher_encryptv2() for GnuTLS > 3.6.14; (bso#14399) + Fix %U substitutions if it contains a domain name; (bso#14467) + Fix krb5.conf creation for 'net ads join'; (bso#14479) + Fix build problem if libbsd-dev is not installed; (bso#14482) + Toggle vfs_snapper using "--with-shared-modules"; (bso#14437) + Fix idmap_ad RFC4511 response handling; (bso#14465) + Fix panic in get_lease_type(); (bso#14428)- Update to samba 4.11.13 + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2 against unencrypted passwords; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Support "server require schannel:WORKSTATION$ = no" about unsecure configurations; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): s4 torture rpc: repeated bytes in client challenge; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): libcli/auth: Reject weak client challenges in netlogon_creds_server_init() "server require schannel:WORKSTATION$ = no"; (bsc#1176579); (bso#14497); - Update to samba 4.11.12 + s3: libsmb: Fix SMB2 client rename bug to a Windows server; (bso#14403); + dsdb: Allow "password hash userPassword schemes = CryptSHA256" to work on RHEL7; (bso#14424); + dbcheck: Allow a dangling forward link outside our known NCs; (bso#14450); + lib/debug: Set the correct default backend loglevel to MAX_DEBUG_LEVEL; (bso#14426); + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428); + lib/util: do not install "test_util_paths"; (bso#14370); + lib:util: Fix smbclient -l basename dir; (bso#14345); + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428); + util: Allow symlinks in directory_create_or_exist; (bso#14166); + docs: Fix documentation for require_membership_of of pam_winbind; (bso#14358); + s3:winbind:idmap_ad: Make failure to get attrnames for schema mode fatal; (bso#14425);- Add obsoletes to libsmbldap2 package to fix upgrades from previous versions; (bsc#1172810);- Fix net command unable to negotiate SMB2; (bsc#1174120);- Update to samba 4.11.11 + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ and VLV combined; (bso#14364); (bsc#1173159] + CVE-2020-10745: invalid DNS or NBT queries containing dots use several seconds of CPU each; (bso#14378); (bsc#1173160). + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP server with paged_result or VLV; (bso#14402); (bsc#1173161) + CVE-2020-14303: Endless loop from empty UDP packet sent to AD DC nbt_server; (bso#14417); (bsc#1173359). - Update to samba 4.11.10 + Fix segfault when using SMBC_opendir_ctx() routine for share folder that contains incorrect symbols in any file name; (bso#14374). + vfs_shadow_copy2 doesn't fail case looking in snapdirseverywhere mode; (bso#14350) + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr; (bso#14413). + Malicous SMB1 server can crash libsmbclient; (bso#14366) + winbindd: Fix a use-after-free when winbind clients exit; (bso#14382) + ldb: Bump version to 2.0.11, LMDB databases can grow without bounds. (bso#14330) - Update to samba 4.11.9 + nmblib: Avoid undefined behaviour in handle_name_ptrs(); (bso#14242). + 'samba-tool group' commands do not handle group names with special chars correctly; (bso#14296). + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo is not valid; (bso#14237). + Missing check for DMAPI offline status in async DOS attributes; (bso#14293). + smbd: Ignore set NTACL requests which contain S-1-5-88 NFS ACEs; (bso#14307). + vfs_recycle: Prevent flooding the log if we're called on non-existant paths; (bso#14316) + smbd mistakenly updates a file's write-time on close; (bso#14320). + RPC handles cannot be differentiated in source3 RPC server; (bso#14359). + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313). + nsswitch: Fix use-after-free causing segfault in _pam_delete_cred; (bso#14327). + Fix fruit:time machine max size on arm; (bso#13622) + CTDB recovery corner cases can cause record resurrection and node banning; (bso#14294). + ctdb: Fix a memleak; (bso#14348). + libsmb: Don't try to find posix stat info in SMBC_getatr(). + ctdb-tcp: Move free of inbound queue to TCP restart; (bso#14295); (bsc#1162680). + s3/librpc/crypto: Fix double free with unresolved credential cache; (bso#14344); (bsc#1169095) + s3:libads: Fix ads_get_upn(); (bso#14336). + CTDB recovery corner cases can cause record resurrection and node banning; (bso#14294) + Starting ctdb node that was powered off hard before results in recovery loop; (bso#14295); (bsc#1162680). + ctdb-recoverd: Avoid dereferencing NULL rec->nodemap; (bso#14324) - Update to samba 4.11.8 + CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with ASQ; (bso#14331); (bsc#1169850); + CVE-2020-10704: LDAP Denial of Service (stack overflow) in Samba AD DC; (bso#14334); (bsc#1169851); - Update to samba 4.11.7 + s3: lib: nmblib. Clean up and harden nmb packet processing; (bso#14239). + s3: VFS: full_audit. Use system session_info if called from a temporary share definition; (bso#14283) + dsdb: Correctly handle memory in objectclass_attrs; (bso#14258). + ldb: version 2.0.9, Samba 4.11 and later give incorrect results for SCOPE_ONE searches; (bso#14270) + auth: Fix CIDs 1458418 and 1458420 Null pointer dereferences; (bso#14247). + smbd: Handle EINTR from open(2) properly; (bso#14285) + winbind member (source3) fails local SAM auth with empty domain name; (bso#14247) + winbindd: Handling missing idmap in getgrgid(); (bso#14265). + lib:util: Log mkdir error on correct debug levels; (bso#14253). + wafsamba: Do not use 'rU' as the 'U' is deprecated in Python 3.9; (bso#14266). + ctdb-tcp: Make error handling for outbound connection consistent; (bso#14274). - Update to samba 4.11.6 + pygpo: Use correct method flags; (bso#14209). + vfs_ceph_snapshots: Fix root relative path handling; (bso#14216); (bsc#1141320). + Avoiding bad call flags with python 3.8, using METH_NOARGS instead of zero; (bso#14209). + source4/utils/oLschema2ldif: Include stdint.h before cmocka.h; (bso#14218). + docs-xml/winbindnssinfo: Clarify interaction with idmap_ad etc; (bso#14122). + smbd: Fix the build with clang; (bso#14251). + upgradedns: Ensure lmdb lock files linked; (bso#14199). + s3: VFS: glusterfs: Reset nlinks for symlink entries during readdir; (bso#14182). + smbc_stat() doesn't return the correct st_mode and also the uid/gid is not filled (SMBv1) file; (bso#14101). + librpc: Fix string length checking in ndr_pull_charset_to_null(); (bso#14219). + ctdb-scripts: Strip square brackets when gathering connection info; (bso#14227).- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);- Installing: samba - samba-ad-dc.service does not exist and unit not found; (bsc#1171437);- Fix samba_winbind package is installing python3-base without python3 package; (bsc#1169521);- Require libldb2 >= 2.0.10 after security release.- CVE-2020-10704: LDAP Denial of Service (stack overflow) in Samba AD DC; (bso#14334); (bsc#1169851); - CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with ASQ; (bso#14331); (bsc#1169850);- Fix smbclient crash with double free (with unresolved krb5 credential cache); (bso#14344); (bsc#1169095).- Starting ctdb node that was powered off hard before results in recovery loop; (bso#14295); (bsc#1162680).- CTDB doesn't retry outgoing connections on bind (and some other) failures; (bso#14274); (bsc#1162680).- Revert: Allow idmap_rid to have primary group other than "Domain Users"; (bsc#1087931).- Fix nmbstatus not reporting detailed information about workgroups; (bsc#1159464); - Fix querying all names registered within broadcast area; (bso#8927);- Update to samab 4.11.5 + CVE-2019-14902: Replication of ACLs down subtree on AD Directory is not automatic; (bso#12497); (bsc#1160850). + CVE-2019-19344: Fix server crash with dns zone scavenging = yes; (bso#14050); (bsc#1160852). + CVE-2019-14907: server-side crash after charset conversion failure (eg during NTLMSSP processing); (bso#14208); (bsc#1160888). - Update to samba 4.11.4 + Ensure SMB1 cli_qpathinfo2() doesn't return an inode number; (bso#14161). + Ensure we don't call cli_RNetShareEnum() on an SMB1 connection; (bso#14174). + NT_STATUS_ACCESS_DENIED becomes EINVAL when using SMB2 in SMBC_opendir_ctx; (bso#14176). + SMB2 - Ensure we use the correct session_id if encrypting an interim response; (bso#14189). + Prevent smbd crash after invalid SMB1 negprot; (bso#14205). + printing: Fix %J substition; (bso#13745). + Remove now unneeded call to cmdline_messaging_context(); (bso#13925). + Fix incomplete conversion of former parametric options; (bso#14069). + Fix sync dosmode fallback in async dosmode codepath; (bso#14070). + vfs_fruit returns capped resource fork length; (bso#14171). + libnet_join: Add SPNs for additional-dns-hostnames entries; (bso#14116). + smbd: Increase a debug level; (bso#14211). + Prevent azure ad connect from reporting discovery errors reference-value-not-ldap-conformant; (bso#14153). + krb5_plugin: Fix developer build with newer heimdal system library; (bso#14179). + replace: Only link libnsl and libsocket if required; (bso#14168); + ctdb: Incoming queue can be orphaned causing communication; breakdown; (bso#14175). + ldb: Release ldb 2.0.8. Cross-compile will not take cross-answers or cross-execute; (bso#13846). + heimdal-build: Avoid hard-coded /usr/include/heimdal in asn1_compile-generated code; (bso#13856).- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).- Update to samba 4.11.3 + CVE-2019-14861: DNSServer RPC server crash, an authenticated user can crash the DCE/RPC DNS management server by creating records with matching the zone name; (bso#14138); (bsc#1158108). + CVE-2019-14870: DelegationNotAllowed not being enforced, the DelegationNotAllowed Kerberos feature restriction was not being applied when processing protocol transition requests (S4U2Self), in the AD DC KDC; (bso#14187); (bsc#1158109).- CVE-2019-14861: DNSServer RPC server crash, an authenticated user can crash the DCE/RPC DNS management server by creating records with matching the zone name; (bso#14138); (bsc#1158108). - CVE-2019-14870: DelegationNotAllowed not being enforced, the DelegationNotAllowed Kerberos feature restriction was not being applied when processing protocol transition requests (S4U2Self), in the AD DC KDC; (bso#14187); (bsc#1158109).- Update to samba 4.11.2 + CVE-2019-10218: Client code can return filenames containing path separators; (bsc#1144902); (bso#14071). + CVE-2019-14833: Samba AD DC check password script does not receive the full password; (bso#12438). + CVE-2019-14847: User with "get changes" permission can crash AD DC LDAP server via dirsync; (bso#14040). - Fixes from 4.11.1 + Overlinking libreplace against librt and pthread against every binary or library causes issues; (bso#14140); + kpasswd fails when built with MIT Kerberos; (bso#14155); + Fix spnego fallback from kerberos to ntlmssp in smbd server; (bso#14106); + Stale file handle error when using mkstemp on a share; (bso#14137); + non-AES schannel broken; (bso#14134); + Joining Active Directory should not use SAMR to set the password; (bso#13884); + smbclient can blunder into the SMB1 specific cli_RNetShareEnum() call on an SMB2 connection; (bso#14152); + Deleted records can be resurrected during recovery; (bso#14147); + getpwnam and getpwuid need to return data for ID_TYPE_BOTH group; (bso#14141); + winbind does not list forest trusts with additional trust attributes; (bso#14130); + fault report points to outdated documentation; (bso#14139); + pam_winbind with krb5_auth or wbinfo -K doesn't work for users of trusted domains/forests; (bso#14124); + classicupgrade results in uncaught exception - a bytes-like object is required, not 'str'; (bso#14136); + pod2man is not longer required, stop checking at build time; (bso#14131); + Exit code of ctdb nodestatus should not be influenced by deleted nodes; (bso#14129); + username/password authentication doesn't work with CUPS and smbspool; (bso#14128); + smbc_readdirplus() is incompatible with smbc_telldir() and smbc_lseekdir(); (bso#14094);- CVE-2019-14847: User with "get changes" permission can crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598); - CVE-2019-10218: Client code can return filenames containing path separators; (bso#14071); (bsc#1144902);- CVE-2019-14833: samba: Accent with "check script password" Samba AD DC check password script does not receive the full password; (bso#12438); (bsc#1154289).- Update to samba 4.11.0 + For details on all items see WHATSNEW.txt in samba-doc package + Python2 runtime support removed; python 3.4 or later required + Security improvements: - SMB1 disabled by default - lanman and plaintext authentication deprecated - winbind: PAM_AUTH and NTLM_AUTH events logged - GnuTLS 3.2 required; system FIPS mode setting honored + CephFS Snapshot integration, exposed as previous file versions + ctdb changes: - onnode -o option removed - ctdbd logs when using more than 90% of a CPU thread - CTDB_MONITOR_SWAP_USAGE variable removed + AD Domain controller improvements: - Upgrade AD databse format - BIND9_FLATFILE deprecated - default process model chagned to prefork - bind9 dns operation duration logging - Default schema updated to 2012_R2; function level is unchanged - many performance improvements + Configuration webserver support removed- Fix broken username/password authentication with CUPS and smbspool; (bsc#1152143); (bso#14128).- Fix auth problems when printing via smbspool backend with kerberos; (bnc#1148539); (bso#13832).- Update to samba 4.10.8 + CVE-2019-10197: user escape from share path definition; (bso#14035); (bsc#1141267);- Fix build on newer systems by modifying samba.spec to use consistent non-relative paths for pammodules in configure line and specification of pam_winbind.so library to package.- Update to samba 4.10.7 + Unable to create or rename file/directory inside shares configured with vfs_glusterfs_fuse module; (bso#14010). + build: Allow build when '--disable-gnutls' is set; (bso#13844) + samba-tool: Add 'import samba.drs_utils' to fsmo.py; (bso#13973). + Fix 'Error 32 determining PSOs in system' message on old DB with FL upgrade; (bso#14008). + s4/libnet: Fix joining a Windows pre-2008R2 DC; (bso#14021) + join: Use a specific attribute order for the DsAddEntry nTDSDSA object; (bso#14046). + vfs_catia: Pass stat info to synthetic_smb_fname(); (bso#14015). + lookup_name: Allow own domain lookup when flags == 0; (bso#14091). + s4 librpc rpc pyrpc: Ensure tevent_context deleted last; (bso#13932). + DEBUGC and DEBUGADDC doesn't print into a class specific log file; (bso#13915). + Request to keep deprecated option "server schannel", VMWare Quickprep requires "auto"; (bso#13949). + dbcheck: Fallback to the default tombstoneLifetime of 180 days; (bso#13967). + dnsProperty fails to decode values from older Windows versions; (bso#13969). + samba-tool: Use only one LDAP modify for dns partition fsmo role transfer; (bso#13973). + third_party: Update waf to version 2.0.17; (bso#13960). + netcmd: Allow 'drs replicate --local' to create partitions; (bso#14051). + ctdb-config: Depend on /etc/ctdb/nodes file; (bso#14017).- CVE-2019-10197: user escape from share path definition; (bso#14035); (bsc#1141267).- Prepare for use future use of kernel keyrings, modify /etc/pam.d/samba to include pam_keyinit.so; (bsc#1144059).- Update samba-winbind script to work with systemd; (bsc#1132739); - Drop samba dhcpcd hook scripts - Update to samba 4.10.6 + s3: winbind: Fix crash when invoking winbind idmap scripts; (bso#13956). + smbd does not correctly parse arguments passed to dfree and quota scripts; (bso#13964). + samba-tool dns: use bytes for inet_ntop; (bso#13965). + samba-tool domain provision: Fix --interactive module in python3; (bso#13828). + ldb_kv: Skip @ records early in a search full scan; (bso#13893). + docs: Improve documentation of "lanman auth" and "ntlm auth" connection; (bso#13981). + python/ntacls: Use correct "state directory" smb.conf option instead of "state dir"; (bso#14002). + registry: Add a missing include; (bso#13840). + Fix SMB guest authentication; (bso#13944). + AppleDouble conversion breaks Resourceforks; (bso#13958). + vfs_fruit makes direct use of syscalls like mmap() and pread(); (bso#13968). + s3:mdssvc: Fix flex compilation error; (bso#13987). + s3/vfs_glusterfs[_fuse]: Avoid using NAME_MAX directly; (bso#13872). + dsdb:samdb: schemainfo update with relax control; (bso#13799). + s3:util: Move static file_pload() function to lib/util; (bso#13964). + smbd: Fix a panic; (bso#13957). + ldap server: Generate correct referral schemes; (bso#12478). + s4 dsdb/repl_meta_data: fix use after free in dsdb_audit_add_ldb_value; (bso#13941). + s4 dsdb: Fix use after free in samldb_rename_search_base_callback; (bso#13942). + dsdb/repl: we need to replicate the whole schema before we can apply it; (bso#12204). + ldb: Release ldb 1.5.5; (bso#12478). + Schema replication fails if link crosses chunk boundary backwards; (bso#13713). + 'samba-tool domain schemaupgrade' uses relax control and skips the schemaInfo update provision; (bso#13799). + dsdb_audit: avoid printing "... remote host [Unknown] SID [(NULL SID)] ..."; (bso#13916). + python/ntacls: We only need security.SEC_STD_READ_CONTROL in order to get the ACL; (bso#13917). + s3:loadparm: Ensure to truncate FS Volume Label at multibyte boundary; (bso#13947). + Using Kerberos credentials to print using spoolss doesn't work; (bso#13939). + wafsamba: Use native waf timer; (bso#13998). + ctdb-scripts: Fix tcp_tw_recycle existence check; (bso#13984).- Update to samba-4.10.5 (including updates for 4.10.4, 4.10.3) + CVE-2019-12435 rpc/dns: Avoid NULL deference if zone not found in DnssrvOperation2; (bso#13922); (bsc#1137815). + CVE-2019-12436 dsdb/paged_results: Ignore successful results without messages; (bso#13951); (bsc#1137816). - Update to samba-4.10.4 + s3: SMB1: Don't allow recvfile on stream fsp's; (bso#13938). + py/provision: Fix for Python 2.6; (bso#13882). + netcmd: Fix 'passwordsettings --max-pwd-age' command; (bso#13873). + s3-libnet_join: 'net ads join' to child domain fails when using "-U admin@forestroot"; (bso#13861). + vfs_ceph: Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245). + vfs_ceph: Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697). + ctdb-common: Avoid race between fd and signal events; (bso#13895). + ctdb-common: Fix memory leak in run_proc; (bso#13943). + lib: Initialize getline() arguments; (bso#13892). + winbind: Fix overlapping id ranges; (bco#13903). + lib util debug: Increase format buffer to 4KiB; (bso#13902). + nsswitch pam_winbind: Fix Asan use after free; (bso#13927). + s4 lib socket: Ensure address string owned by parent struct; (bso#13929). + s3 rpc_client: Fix Asan stack use after scope; (bso#13936). + s3:smbd: Handle IO_REPARSE_TAG_DFS in SMB_FIND_FILE_FULL_DIRECTORY_INFO; (bso#10097). + smb2_tcon: Avoid STATUS_PENDING completely on tdis; (bso#10344). + smb2_sesssetup: avoid STATUS_PENDING responses for session setup; (bso#12845). + smb2_tcon: Avoid STATUS_PENDING completely on tdis; (bso#13698). + smb2_sesssetup: avoid STATUS_PENDING responses for session setup; (bso#13796). + dbcheck: Fix the err_empty_attribute() check; (bso#13843). + vfs_snapper: Drop unneeded fstat handler; (bso#13858). + vfs_default: Fix vfswrap_offload_write_send() NT_STATUS_INVALID_VIEW_SIZE check; (bso#13862). + smb2_server: Grant all 8192 credits to clients; (bso#13863). + smbd: Implement SMB_FILE_NORMALIZED_NAME_INFORMATION handling; (bso#13919). + s3/vfs_glusterfs: Dynamically determine NAME_MAX; (bso#13872). + s3: modules: ceph: Use current working directory instead of share path; (bso#13918); (bsc#1134452). + winbind: Use domain name from lsa query for sid_to_name cache entry; (bso#13831). + memcache: Increase size of default memcache to 512k; (bso#13865). + docs: Update smbclient manpage for "--max-protocol"; (bso#13857). + s3:utils: If share is NULL in smbcacls, don't print it; (bso#13937). + s3:smbspool: Fix regression printing with Kerberos credentials; (bso#13939). + ctdb-scripts: CTDB restarts failed NFS RPC services by hand, which is incompatible with systemd; (bso#13860). + ctdb-daemon: Revert "We can not assume that just because we could complete a TCP handshake"; (bso#13888). + ctdb-daemon: Never use 0 as a client ID; (bso#13930). + ctdb-common: Fix memory leak; (bso#13943). + s3:debug: Enable logging for early startup failures; (bso#13904) - Update to samba-4.10.3 + CVE-2018-16860: Heimdal KDC: Reject PA-S4U2Self with unkeyed checksum; (bso#13685); (bsc#1134024).- CVE-2019-12435: zone operations can crash rpc server; (bso#13922); (bsc#1137815).- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697). - Add ceph_snapshots VFS module; (jsc#SES-183).- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).- Update to samba-4.10.2: + CVE-2019-3870 (World writable files in Samba AD DC private/ dir); (bso#13834). + CVE-2019-3880 (Save registry file outside share as unprivileged user); (bso#13851). + py/kcc_utils: py2.6 compatibility; (bso#13837). + libcli: permit larger values of DataLength in SMB2_ENCRYPTION_CAPABILITIES of negotiate response; (bso#13869). + regfio: Improve handling of malformed registry hive files; (bso#13840). + ctdb-version: Simplify version string usage; (bso#13789). + lib: Make fd_load work for non-regular files; (bso#13859). + dbcheck: in the middle of the tombstone garbage collection causes replication failures, dbcheck: add --selftest-check-expired-tombstones cmdline option; (bso#13816). + ndr_spoolss_buf: Fix out of scope use of stack variable in NDR_SPOOLSS_PUSH_ENUM_OUT(); (bso#13818). + s4/messaging: Fix undefined reference in linking libMESSAGING-samba4.so; (bso#13854). + acl_read: Fix regression for empty lists; (bso#13836). + s4:dlz make b9_has_soa check dc=@ node; (bso#13841). + s3:client: Fix printing via smbspool backend with kerberos auth; (bso#13832). + s4:librpc: Fix installation of Samba; (bso#13847). + s3:lib: Fix the debug message for adding cache entries; (bso#13848). + s3:utils: Add 'smbstatus -L --resolve-uids' to show username; (bso#13793). + s3:lib: Fix the debug message for adding cache entries; (bso#13848). + s3:waf: Fix the detection of makdev() macro on Linux; (bso#13853). * ctdb-build: Drop creation of .distversion in tarball; (bso#13789). * ctdb-packaging: Test package requires tcpdump, ctdb package should not own system library directory; (bso#13838). - Update to samba-4.10.1: + py/kcc_utils: py2.6 compatibility; (bso#13837); + libcli: permit larger values of DataLength in SMB2_ENCRYPTION_CAPABILITIES of negotiate response; (bso#13869); + regfio: Improve handling of malformed registry hive files; (bso#13840); + ctdb-version: Simplify version string usage; (bso#13789); + lib: Make fd_load work for non-regular files; (bso#13859); + dbcheck in the middle of the tombstone garbage collection causes replication failures, dbcheck: add --selftest-check-expired-tombstones cmdline option; (bso#13816); + ndr_spoolss_buf: Fix out of scope use of stack variable in NDR_SPOOLSS_PUSH_ENUM_OUT(); (bso#13818); + s4/messaging: Fix undefined reference in linking libMESSAGING-samba4.so; (bso#13854); + acl_read: Fix regression for empty lists; (bso#13836); + s4:dlz make b9_has_soa check dc=@ node; (bso#13841); + s3:client: Fix printing via smbspool backend with kerberos auth; (bso#13832); + s4:librpc: Fix installation of Samba; (bso#13847); + s3:lib: Fix the debug message for adding cache entries; (bso#13848); + s3:utils: Add 'smbstatus -L --resolve-uids' to show username; (bso#13793); + s3:lib: Fix the debug message for adding cache entries; (bso#13848); + s3:waf: Fix the detection of makdev() macro on Linux; (bso#13853); + ctdb-build: Drop creation of .distversion in tarball; (bso#13789); + ctdb-packaging: Test package requires tcpdump, ctdb package should not own system library directory; (bso#13838); - Update to samba-4.10.0: + s4-server: Open and close a transaction on sam.ldb at startup; (bso#13760); + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812); + s4/scripting/bin: Open unicode files with utf8 encoding and write + unicode string. + sambaundoguididx: Use the right escaped oder unescaped sam ldb files; (bso#13759); + Fix idmap cache pollution with S-1-22- IDs on winbind hickup; (bso#13813); + passdb: Update ABI to 0.27.2. + lib/winbind_util: Add winbind_xid_to_sid for --without-winbind; (bso#13813); + lib:util: Move debug message for mkdir failing to log level 1; (bso#13823);- MacOS credit accounting breaks with async SESSION SETUP; (bsc#1125601); (bso#13796). - Mac OS X SMB2 implmenetation sees Input/output error or Resource temporarily unavailable and drops connection; (bso#13698)- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).- CVE-2019-3880: Save registry file outside share as unprivileged user; (bso#13851); (bsc#1131060 ).- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0); (bso#13834); (bsc#1130703);- Update to samba-4.9.5 + audit_logging: Remove debug log header and JSON Authentication: prefix; (bso#13714); + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760); + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso# CID: 1433607; (bso#11495); + smbd: uid: Don't crash if 'force group' is added to an existing share connection; (bso#13690); + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility code; (bso#13770); + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803); + s3:utils/smbget fix recursive download with empty source directories; (bso#13199); + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716); + s3:libsmb: cli_smb2_list() can sometimes fail initially on a connection; (bso#13736); + join: Throw CommandError instead of Exception for simple errors; (bso#13747); + ldb: Avoid inefficient one-level searches; (bso#13762); + s3: libsmb: use smb2cli_conn_max_trans_size() in cli_smb2_list(); (bso#13736); + tldap: Avoid use after free errors; (bso#13776); + Fix idmap xid2sid cache churn; (bso#13802); + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812); + s3-smbd: Avoid assuming fsp is always intact after close_file call; (bso#13720); + s3-vfs-fruit: Add close call; (bso#13725); + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746); + s3-vfs: add glusterfs_fuse vfs module; (bso#13774); + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766); + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS) ftruncate and fallocate; (bso#13807); + lib/audit_logging: Actually create talloc; (bso#13737); + netcmd/user: python[3]-gpgme unsupported and replaced by python[3]-gpg; (bso#13728); + dns: Changing onelevel search for wildcard to subtree; (bso#13738); + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721); + sambaundoguididx: Use the right escaped oder unescaped sam ldb files; (bso#13759); + ctdb: Print locks latency in machinereadable stats; (bso#13742); + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786); + audit_logging: auth_json_audit required auth_json; (bso#13715); + man pages: Document prefork process model; (bso#13765); + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773); + s3:auth: ignore create_builtin_guests() failing without a valid idmap configuration; (bso#13697); + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC without trusts; (bso#13722); + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd is not available; (bso#13723); + s4:server: Add support for 'smbcontrol samba shutdown' and 'smbcontrol debug/debuglevel'; (bso#13752); + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616); + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330); + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774); + notifyd: Fix SIGBUS on sparc; (bso#13704); + waf: Check for libnscd; (bso#13787); + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770); + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717); + Recovery lock bug fixes; (bso#13800); + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726); + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727); + vfs_fileid: Fix get_connectpath_ino; (bso#13741); + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).- Fix update-apparmor-samba-profile script after apparmor switched to using named profiles. The change is backwards compatible; (bsc#1126377);- LoadParm().load_default() fails with "Unable to load default file"; (bsc#1089758);- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);- Update to samba-4.9.4 + libcli/smb: Don't overwrite status code; (bso#9175). + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164). + Session setup reauth fails to sign response; (bso#13661). + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677). + vfs_shadow_copy2: Nicely deal with attempts to open previous version for writing; (bso#13688). + Restoring previous version of stream with vfs_shadow_copy2 fails with NT_STATUS_OBJECT_NAME_INVALID fsp->base_fsp->fsp_name; (bso#13455). + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571). + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708) + PEP8: fix E231: missing whitespace after ','. + winbindd: Fix crash when taking profiles;(bso#13629) + CVE-2018-14629 dns: Fix CNAME loop prevention using counter regression; (bso#13600) + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686). + CVE-2018-16853: Do not segfault if client is not set; (bso#13571). + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679) + ctdb-daemon: Exit with error if a database directory does not exist; (bso#13696). + s3:libads: Add net ads leave keep-account option; (bso#13498).- Drop more %if..%endif guards which are idempotent. - Drop requires on ldconfig which are already auto-discovered. - Do not ignore errors from useradd/groupadd.- Remove python2 build dependency from samba-libs; (bsc#1116900);- Update update-apparmor-samba-profile script to ignore the shares's paths containing substitution variables in any place, not only at the beginning of the path.- Update to samba-4.9.3 + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD Internal DNS server; (bso#13600); (bsc#1116319); + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628); (bsc#1116320); + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server; (bso#13674); (bsc#1116322); + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers; (bso#13669); (bsc#1116321); + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos configuration (unsupported); (bso#13678); (bsc#1116324); + CVE-2018-16857: Bad password count in AD DC not always effective; window; (bso#13683); (bsc#1116323);- Update to samba-4.9.2 + dsdb: Add comments explaining the limitations of our current backlink behaviour; (bso#13418); + Fix problems running domain backups (handling SMBv2, sites); (bso#13621); + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3; (bso#13465); + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642); + File saving issues with vfs_fruit on samba >= 4.8.5; (bso#13646); + Enabling vfs_fruit looses FinderInfo; (bso#13649); + Cancelling of SMB2 aio reads and writes returns wrong error NT_STATUS_INTERNAL_ERROR; (bso#13667); + Fix CTDB recovery record resurrection from inactive nodes and simplify vacuuming; (bso#13641); + examples: Fix the smb2mount build; (bso#13465); + libtevent: Fix build due to missing open_memstream on Illiumos; (bso#13629); + winbindd_cache: Fix timeout calculation for sid<->name cache; (bso#13662); + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path; (bso#13653); + Extended DN SID component missing for member after switching group membership; (bso#13418); + Return STATUS_SESSION_EXPIRED error encrypted, if the request was encrypted; (bso#13624); + python: Allow forced signing via smb.SMB(); (bso#13621); + lib:socket: If returning early, set ifaces; (bso#13665); + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8 encoded unicode; (bso#13616); + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute; (bso#13673); + waf: Add -fstack-clash-protection; (bso#13601); + winbind: Fix segfault if an invalid passdb backend is configured; (bso#13668); + Fix bugs in CTDB event handling; (bso#13659); + Misbehaving nodes are sometimes not banned; (bso#13670);- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);- winbind requires latest version of libtevent-util0 to start- Backport latest gpo code from master + Read policy from local gpt cache + Offline policy application + Make group policy extensible via register/unregister gpext + gpext's run via a process_group_policy method- Enable profiling data collection- Change samba-kdc package name to samba-ad-dc - Move samba-ad-dc.service to the samba-ad-dc package- Update to samba-4.9.1 + s3: nmbd: Stop nmbd network announce storm; (bso#13620); + s3-rpcclient: Use spoolss_init_spoolss_UserLevel1 in winspool cmds; (bso#13597); + CTDB recovery lock has some race conditions; (bso#13617); + s3-rpc_client: Advertise Windows 7 client info; (bso#13597); + ctdb-doc: Remove PIDFILE option from ctdbd_wrapper man page; (bso#13610);- Tumbleweed doesn't define the sle_version macro, so we must include a check for suse_version also. Otherwise python3 is disabled on Tumbleweed.- Update to samba-4.9.0 + samba_dnsupdate: Honor 'dns zone scavenging' option, only update if needed; (bso#13605); + wafsamba: Fix 'make -j'; (bso#13606);- Update to samba-4.9.0rc5 + s3: VFS: vfs_full_audit: Ensure smb_fname_str_do_log() only returns absolute pathnames; (bso#13565); + s3: util: Do not take over stderr when there is no log file; (bso#13578); + Durable Reconnect fails because cookie.allow_reconnect is not set; (bso#13549); + krb5-samba: Interdomain trust uses different salt principal; (bso#13539); + vfs_fruit: Don't unlink the main file; (bso#13441); + smbd: Fix a memleak in async search ask sharemode; (bso#13602); + Fix Samba GPO issue when Trust is enabled; (bso#11517); + samba-tool: Add "virtualKerberosSalt" attribute to 'user getpassword/syncpasswords'; (bso#13539); + Fix CTDB configuration issues; (bso#13589); + ctdbd logs an error until it can successfully connect to eventd; (bso#13592);- Update to samba-4.9.0rc4 + s3: smbd: Ensure get_real_filename() copes with empty pathnames; (bso#13585); + samba domain backup online/rename commands force user to specify password on CLI; (bso#13566); + wafsamba/samba_abi: Always hide ABI symbols which must be local; (bso#13579); + Fix a panic if fruit_access_check detects a locking conflict; (bso#13584); + Fix memory and resource leaks; (bso#13567); + python: Fix print in dns_invalid.py; (bso#13580); + Aliasing issue causes incorrect IPv6 checksum; (bso#13588); + Fix CTDB configuration issues; (bso#13589); + s3: vfs: time_audit: fix handling of token_blob in smb_time_audit_offload_read_recv(); (bso#13568);- Add missing zlib-devel dependency which was previously pulled in by libopenssl-devel- Update to samba-4.9.0rc3+git.22.3fff23ae36e + CVE-2018-10858: libsmb: Harden smbc_readdir_internal() against returns from malicious servers; (bso#13453); + CVE-2018-1140: ldbsearch '(distinguishedName=abc)' and DNS query with escapes crashes, ldb: Release LDB 1.3.5 for CVE-2018-1140; (bso#13374); + CVE-2018-10918: cracknames: Fix DoS (NULL pointer de-ref) when not servicePrincipalName is set on a user; (bso#13552); + CVE-2018-10919: acl_read: Fix unauthorized attribute access via searches; (bso#13434); + ctdb_mutex_ceph_rados_helper: Set SIGINT signal handler; (bso#13540); + CVE-2018-1139 libcli/auth: Do not allow ntlmv1 over SMB1 when it is disabled via "ntlm auth"; (bso#13360); + s3-tldap: do not install test_tldap; (bso#13529); + ctdb_mutex_ceph_rados_helper: Fix deadlock via lock renewals; (bso#13540); + CVE-2018-1140 Add NULL check for ldb_dn_get_casefold() in ltdb_index_dn_attr(); (bso#13374); + ctdb-eventd: Fix CID 1438155; (bso#13554); + Fix CIDs 1438243, (Unchecked return value) 1438244 (Unsigned compared against 0), 1438245 (Dereference before null check) and 1438246 (Unchecked return value); (bso#13553); + ctdb: Fix a cut&paste error; (bso#13554); + systemd: Only start smb when network interfaces are up; (bso#13559); + Fix quotas don't work with SMB2; (bso#13553); + s3/smbd: Ensure quota code is only called when quota support detected; (bso#13563); + s3/libsmb: Explicitly set delete_on_close token for rmdir; (bso#13204); + s3:waf: Install eventlogadm to /usr/sbin; (bso#13561); + Shorten description in vfs_linux_xfs_sgid manual; (bso#13562);- Update to samba-4.9.0rc2+git.21.a1069afb007 + s3: smbd: Using "sendfile = yes" with SMB2 can cause CPU spin; (bso#13537); + s3: smbd: Fix path check in smbd_smb2_create_durable_lease_check(); (bso#13535); + samba-tool trust: Support discovery via netr_GetDcName; (bso#13538); + s4-dsdb: Only build dsdb Python modules for AD DC; (bso#13542); + Fix portability issues on freebsd; (bso#13520); + DNS wildcard search does not handle multiple labels correctly; (bso#13536); + samba-tool domain trust: Fix trust compatibility to Windows Server 1709 and FreeIPA; (bso#13308); + Fix portability issues on freebsd; (bso#13520); + ctdb-protocol: Fix CTDB compilation issues; (bso#13545); + ctdb-docs: Replace obsolete reference to CTDB_DEBUG_HUNG_SCRIPT option; (bso#13546); + ctdb-doc: Provide an example script for migrating old configuration; (bso#13550); + ctdb-event: Implement event tool "script list" command; (bso#13551);- Update to samba-4.8.4+git.37.a7a861d7982; + CVE-2018-1139: Weak authentication protocol allowed; (bsc#1095048); (bsc#13360); + CVE-2018-1140: Denial of Service Attack on DNS and LDAP server; (bsc#1095056); (bso#13466); (bso#13374); + CVE-2018-10858: Insufficient input validation on client directory listing in libsmbclient; (bsc#1103411); (bso#13453); + CVE-2018-10918: Denial of Service Attack on AD DC DRSUAPI server; (bsc#1103414); (bso#13552); + CVE-2018-10919: Confidential attribute disclosure from the AD LDAP server; (bsc#1095057); (bso#13434); + s3:winbind: winbind normalize names' doesn't work for users; (bso#12851); + winbind: Fix UPN handling in canonicalize_username(); (bso#13369); + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428); + samdb: Fix building Samba with gcc 8.1; (bso#13437); + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440); + smbd: Flush dfree memcache on service reload; (bso#13446); + ldb: Save a copy of the index result before calling the + lib/util: No Backtrace given by Samba's AD DC by default; (bso#13454). + s3: smbd: printing: Re-implement delete-on-close semantics for print files missing since 3.5.x; (bso#13457). + python: Fix talloc frame use in make_simple_acl(); (bso#13474). + krb5_wrap: Fix keep_old_entries logic for older Kerberos libraries;(bso#13478). + krb5_plugin: Add winbind localauth plugin for MIT Kerberos; (bso#13480).- Add missing package descriptions; (bsc#1093864); - Fix dependency issue between samba-python and samba-kdc; (bsc#1062876); - Call update-apparmor-samba-profile when running samba-ad-dc; (bsc#1092099);- Update to 4.8.2 + After update to 4.8.0 DC failed with "Failed to find our own NTDS Settings objectGUID" (bso#13335). + fix incorrect reporting of stream dos attributes on a directory (bso#13380). + vfs_ceph: add asynchronous fsync; fake synchronous call (bso#13412). + vfs_ceph: add fake async pwrite/pread send/recv hooks; (bso#13425) + vfs_ceph: Fix memory leak; (bso#13424). + libsmbclient: Fix hard-coded connection error return of ETIMEDOUT; (bso#13419). + s4-lsa: Fix use-after-free in LSA server; (bso#13420). + winbindd: Do re-connect if the RPC call fails in the passdb case; (bso#13430). + cleanupd: Sends MSG_SMB_UNLOCK twice to interested peers; (bso#13416). + cleanupd: Use MSG_SMB_BRL_VALIDATE to signal cleanupd unclean process shutdown; (bso#13414). + ctdb-client: Remove ununsed functions from old client code; (bso#13411). + printing: Return the same error code as windows does on upload failures; (bso#13395). + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged pipe is not accessable; (bso#13400). + s4:lsa_lookup: remove TALLOC_FREE(state) after all dcesrv_lsa_Lookup{Names,Sids}_base_map() calls; (bso#13420). + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407). + s3:smbspool: Fix cmdline argument handling; (bso#13417).- Move libdfs-server-ad-samba4.so library from kdc to libs package, as it is required by some client libs; (bsc#1074135); - Update to 4.8.1; (bsc#1091179); + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error, we don't own it here; (bso#13244); + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't support fdopendir(); (bso#13270); + Round-tripping ACL get/set through vfs_fruit will increase the number of ACE entries without limit; (bso#13319); + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit issues; (bso#13347); + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without delete access; (bso#13358); + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372); + s3: smbd: Unix extensions attempts to change wrong field in fchown call; (bso#13375); + ms_schema/samba-tool visualize: Fix python2.6 incompatibility; (bso#13337); + Fix invocation of gnutls_aead_cipher_encrypt(); (bso#13352); + Windows 10 cannot logon on Samba NT4 domain; (bso#13328); + winbindd: Recover loss of netlogon secure channel in case the peer DC is rebooted; (bso#13332); + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363); + ctdb-client: Fix bugs in client code; (bso#13356); + ctdb-scripts: Drop "net serverid wipe" from 50.samba event script; (bso#13359); + s3: lib: messages: Don't use the result of sec_init() before calling sec_init(); (bso#13368); + libads: Fix the build '--without-ads'; (bso#13273); + winbind: Keep "force_reauth" in invalidate_cm_connection, add 'smbcontrol disconnect-dc'; (bso#13332); + vfs_virusfilter: Fix CIDs 1428738-1428740; (bso#13343); + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367); + rpc_server: Fix core dump in dfsgetinfo; (bso#13370); + smbclient: Fix notify; (bso#13382); + Fix smbd panic if the client-supplied channel sequence number wraps; (bso#13215); + Windows 10 cannot logon on Samba NT4 domain; (bso#13328); + lib/util: Remove unused '#include ' from tests/tfork.c; (bso#13342); + Fix build errors with cc from developerstudio 12.5 on Solaris; (bso#13343); + Fix the picky-developer build on FreeBSD 11; (bso#13344); + s3:modules: Fix the build of vfs_aixacl2.c; (bso#13345); + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338); + lib:replace: Fix linking when libtirpc-devel overwrites system headers; (bso#13341); + winbindd: 'wbinfo --name-to-sid' returns misleading result on invalid query; (bso#13312); + s3:passdb: Do not return OK if we don't have pinfo set up; (bso#13376); + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);- Use new foreground execution flags for systemd samba daemons; (bsc#1088574); (bsc#1071090); (bsc#1065551); + Add %post scriptlet to clear old sysconfig flags - Update vendor-files to commit 880b3e7. + Set samba sysconfig template variables to "" + Add required daemon flags directly to systemd unit- Specfile cleanup + Remove %if..%endif guards which don't affect the build + Remove redundant %clean section + Replace old $RPM_* shell vars with macros- BuildRequire pkgconfig(systemd) and pkgconfig(libsystemd) in place of systemd and systemd-devel: Allow OBS to optimize the workload by allowing the usage of the 'build-optimized' systemd packages.- Enable building samba with python3, and create a samba-python3 package.- Update to 4.8 + New GUID Index mode in sam.ldb for the AD DC + GPO support for samba KDC + Time machine support with vfs_fruit + Encrypted secrets + AD Replication visualization + Improved trust support - ability to not scan global trust list - AD external trusts have limited support - verbose trusted domain listing + VirusFilter VFS module + NT4-style replication removed + vfs_aio_linux removed- Disable samba-pidl package, due to the removal of dependency perl-Parse-Yapp; (bsc#1085150);- Update to 4.7.6; + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally; (bso#11343); (bsc#1081741); + CVE-2018-1057: Authenticated users can change other users' password; (bso#13272); (bsc#1081024).- Disable python until full python3 port is done; (bsc#1082139); + Remove contents of package samba-python + Remove contents of package libsamba-policy0 + Remove contents of package libsamba-policy-devel + Remove library libsamba-python-samba4.so from samba-libs package + Remove library libsamba-net-samba4.so from samba-libs package + Remove smbtorture binary and manpage from samba-test- samba fails to build with glibc2.27; (bsc#1081042);- Update to 4.7.5; (bsc#1080545); + smbd tries to release not leased oplock during oplock II downgrade; (bso#13193); + Fix copying file with empty FinderInfo from Windows client to Samba share with fruit; (bso#13181); + build: Deal with recent glibc sunrpc header removal; (bso#10976); + Make Samba work with tirpc and libnsl2; (bso#13238); + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208); (bsc#1075206); + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue; (bso#12986); + ctdb-recovery-helper: Deregister message handler in error paths; (bso#13188); + samba: Only use async signal-safe functions in signal handler; (bso#13240); + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue; (bso#12986); + repl_meta_data: Fix linked attribute corruption on databases with unsorted links on expunge. dbcheck: Add functionality to fix the corrupt database; (bso#13228); + Fix smbd panic when chdir returns error during exit; (bso#13189); + Make Samba work with tirpc and libnsl2; (bso#13238); + Fix POSIX ACL support on HPUX and possibly other big-endian OSs; (bso#13176);- Update to 4.7.4; (bsc#1080545); + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140); + s3: libsmb: Fix valgrind read-after-free error in cli_smb2_close_fnum_recv(); (bso#13171); + s3: libsmb: Fix reversing of oldname/newname paths when creating a reparse point symlink on Windows from smbclient; (bso#13172); + Build man page for vfs_zfsacl.8 with Samba; (bso#12934); + repl_meta_data: Allow delete of an object with dangling backlinks; (bso#13095); + s4:samba: Fix default to be running samba as a deamon; (bso#13129); + Performance regression in DNS server with introduction of DNS wildcard, ldb: Release 1.2.3; (bso#13191); + vfs_zfsacl: Fix compilation error; (bso#6133); + "smb encrypt" setting changes are not fully applied until full smbd restart; (bso#13051); + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052); + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155); + winbindd: Dependency on trusted-domain list in winbindd in critical auth codepath; (bso#13173); + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120); + ctdb: sock_daemon leaks memory; (bso#13153); + TCP tickles not getting synchronised on CTDB restart; (bso#13154); + winbindd: winbind parent and child share a ctdb connection; (bso#13150); + pthreadpool: Fix deadlock; (bso#13170); + pthreadpool: Fix starvation after fork; (bso#13179); + messaging: Always register the unique id; (bso#13180); + s4/smbd: set the process group; (bso#13129); + Fix broken linked attribute handling; (bso#13095); + The KDC on an RWDC doesn't send error replies in some situations; (bso#13132); + libnet_join: Fix 'net rpc oldjoin'; (bso#13149); + g_lock conflict detection broken when processing stale entries; (bso#13195); + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired sessions; (bso#13197); + s3:libads: net ads keytab list fails with "Key table name malformed"; (bso#13166); (bsc#1067700); + Fix crash in pthreadpool thread after failure from pthread_create; (bso#13170); + s4:samba: Allow samba daemon to run in foreground; (bso#13129); (bsc#1065551); + third_party: Link the aesni-intel library with "-z noexecstack"; (bso#13174); + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I" options; (bso#13125);- Re-enable usage of libnsl (did got lost with glibc change) - Use TI-RPC (sunrpc is deprecated and will be removed soon from glibc)- smbc_opendir should not return EEXIST with invalid login credentials; (bnc#1065868).- Update to 4.7.3; (bsc#1069666); + Non-smbd processes using kernel oplocks can hang smbd; (bso#13121); + python: use communicate to fix Popen deadlock; (bso#13127); + smbd on disk file corruption bug under heavy threaded load; (bso#13130); + tevent: version 0.9.34; (bso#13130); + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118); + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug; (bsc#1060427);(bso#13041); + CVE-2017-15275: s3: smbd: Chain code can return uninitialized memory when talloc buffer is grown; (bsc#1063008); (bso#13077); - Build with AD DC support only in openSUSE.- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- samba-tool requires samba-python; (bnc#1067771).- Run all daemons in the foreground and let systemd handle it; (bsc#1065551). - Update to 4.7.1; + Fix exporting subdirs with shadow_copy2; (bso#13091); + Currently if getwd() fails after a chdir(), we panic; (bso#13027); + Ensure default SMB_VFS_GETWD() call can't return a partially completed struct smb_filename; (bso#13068); + sys_getwd() can leak memory or possibly return the wrong errno on older systems; (bso#13069); + smbclient doesn't correctly canonicalize all local names before use; (bso#13093); + Fix broken linked attribute handling; (bso#13095); + Missing LDAP query escapes in DNS rpc server; (bso#12994); + Link to -lbsd when building replace.c by hand; (bso#13087); + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem; (bso#6133); + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module; (bso#7909); + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module; (bso#7933); + Missing assignment in sl_pack_float; (bso#12991); + Wrong Samba access checks when changing DOS attributes; (bso#12995); + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062); + groupmap cleanup should not delete BUILTIN mappings; (bso#13065); + Enabling vfs_fruit results in loss of Finder tags and other xattrs; (bso#13076); + man pages: Properly ident lists; (bso#9613); + smb.conf.5: Sort parameters alphabetically; (bso#13081); + Fix GUID string format on GetPrinter info; (bso#12993); + Remote serverid check doesn't check for the unique id; (bso#13042); + CTDB starts consuming memory if there are dead nodes in the cluster; (bso#13056); + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070); + libgpo doesn't sort the GPOs in the correct order; (bso#13046); + Remote serverid check doesn't check for the unique id; (bso#13042); + vfs_catia: Fix a potential memleak; (bso#13090); + Fix file change notification for renames; (bso#12903); + Samba DNS server does not honour wildcards; (bso#12952); + Can't change password in samba from a Windows client if Samba runs on IPv6 only interface; (bso#13079); + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086); + Apple client can't cope with SMB2 async replies when creating symlinks; (bso#13047); + s4:rpc_server:backupkey: Move variable into scope; (bso#12959); + Fix ntstatus_gen.h generation on 32bit; (bso#13099); + Fix a double free in vfs_gluster_getwd(); (bso#13100); + Fix resouce leaks and pointer issues; (bso#13101); + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);- Add samba-kdc to baselibs.conf. - Do not wrap samba-kdc's package definition into if/endif: the package won't be generated simply based on the fact that there is no files section for the package. Allows the source validator to ensure samba-kdc is a built package.- Update to 4.7.0; + Whole DB read locks: Improved LDAP and replication consistency; (bso#12858). + Samba AD with MIT Kerberos + Dynamic RPC port range: Default range changed from "1024-1300" to "49152-65535". + Authentication and Authorization audit support: New auth_audit debug class. + Multi-process LDAP Server: The LDAP server in the AD DC now honours the process model used for the rest of the 'samba' process. + Improved Read-Only Domain Controller (RODC) Support; (bso#12977). + Additional password hashes stored in supplementalCredentials. + Improvements to DNS during Active Directory domain join. + Significant AD performance and replication improvements. + Query record for open file or directory. + Removal of lpcfg_register_defaults_hook(). + Change of loadable module interface. + SHA256 LDAPS Certificates: The self-signed certificate generated for use on LDAPS will now be generated with a SHA256 self-signature, not a SHA1 self-signature. + CTDB no longer allows mixed minor versions in a cluster. + CTDB now ignores hints from Samba about TDB flags when attaching to databases. + New configuration variable CTDB_NFS_CHECKS_DIR. + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed. + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed. + The example NFS Ganesha call-out has been improved. + A new "replicated" database type is available.- CVE-2017-12163: Prevent client short SMB1 write from writing server memory to file; (bso#13020); (bsc#1058624).- CVE-2017-12150: Some code path don't enforce smb signing, when they should; (bso#12997); (bsc#1058622).- CVE-2017-12151: Keep required encryption across SMB3 dfs redirects; (bso#12996); (bsc#1058565).- Clean specfile assuming SUSE-only system and product >=SLE11 + %{ul_version}, %{rhel_version}, %{mandriva_version}, %{centos_version} are always undefined + %{_vendor} is "suse" and %{suse_version} is at least 1100- Update to 4.6.7; (bsc#1054017) + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392). + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937). + vfs_ceph provides inconsistent directory listings; (bso#12911). + Misused talloc context can cause a user to crash their smbd by chaining SMB1 commands.; (bso#12836). + Use-after free can crash libsmbclient code.; (bso#12927). + Server exit with active AIO can crash.; (bso#12925). + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910). + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs; (bso#12898). + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897). + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for authentication; (bso#12886). + finder sidebar showing question mark instead of icon when using ip to connect with vfs_fruit; (bso#12840). + Winbind stops obtaining the 'unixHomeDirectory' & 'loginShell' attributes from AD.; (bso#12720). + KCC run at selftest startup can fail spuriously due to a race; (bso#12869). + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for the remote change; (bso#12782). + rpc_pipe_client memory leaks due to long term memory context passed to rpc_pipe_open_interface(); (bso#12890). + CVE-2017-2619 breaks accessing previous versions of directories with snapshots in subdirectories of the share; (bso#12885). + dns_name_equal doing OOB read; (bso#12813). + replica_sync tests flap; (bso#12753). + Selftest should not call 'net cache flush' and wipe important winbind entries; (bso#12868). + Old Samba versions don't support using recent ldb versions (>=1.1.30); (bso#12859). + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490). + race starting winbindd against posixacl test; (bso#12843). + Crash in the reentrant smbd_smb2_create_send() if the something fails in the subsequent try; (bso#12832). + spnego.c passes the wrong argument order to gensec_update_ev() for the FALLBACK case; (bso#12788). + Clients with SMB3 support can't connect with "server max protocol = SMB2_02"; (bso#12772). + A log message of samb-tool user syncpasswords reverses string arguments in a debug message "Call Popen[...".; (bso#12768). + The smb tarmode tests kills the share dir contents; (bso#12867). + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862). + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860). + manpage/index.html lists links not in alphabetical order; (bso#12854). + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831). + If a record is locked in a database, then recovery does not complete; (bso#12857). + debug_locks.sh script does not log any information; (bso#12856). + SIGSEGV in cm_connect_lsa_tcp dereferencing conn->lsa_tcp_pipe->transport after error; (bso#12852). + smbclient can't parse DOMAIN+username if a different winbind separator is used; (bso#12849). + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845). + Related requests with TreeConnect fail with NETWORK_NAME_DELETED; (bso#12844). + cli->server_os not filled correctly; (bso#12779). + REGRESSION: smbclient doesn't print the session setup anymore; (bso#12824). + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808). + CTDB NFS call-out failures do not cause event failures; (bso#12837). + net command fails due to incorrectly return code; (bso#12828). + Fix building Samba with GCC 7.1; (bso#12827).- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again; (bsc#1048339).- fix cephwrap_chdir(); (bsc#1048790). - Update to 4.6.6 + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation; (bsc#1048278).- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).- Fix inconsistent ctdb socket path; (bsc#1048352). - Fix non-admin cephx authentication; (bsc#1048387).- Update to 4.6.5; (bsc#1040157) + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at startup; (bso#12814). + vfs_expand_msdfs tries to open the remote address as a file path; (bso#12687). + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type); (bso#12798). + With clustering get update_num_read_oplocks failed and PANIC: num_share_modes == 1 assertion failure; (bso#11844). + contend_level2_oplocks_begin_default oplock optimisation doesn't carry over to leases; (bso#12766). + `ctdb nodestatus` incorrectly displays status for all nodes with wrong exit code; (bso#12802). + CTDB can spin hard on revoking readonly delegations if a node becomes disconnected; (bso#12697). + Printing a share mode entry with leases can crash in the ndr code; (bso#12793). + Fix flakey unit tests for eventd; (bso#12792). + CTDB daemon crashes if built with clang; (bso#12770). + smbcacls fails if no password is specified; (bso#12765). + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757). + samba-tool user syncpasswords doesn't trigger the script when a user gets removed; (bso#12767). + systemd: fix detection of libsystemd; (bso#12764). + Notify subsystem only maps first inotify mask to Windows notify filter; (bso#12760). + Allow passing trusted domain password as plain-text to PASSDB layer; (bso#12751). + Can't case-rename files with vfs_fruit; (bso#12749). + wrong sid->uid mapping for SIDs residing in sIDHistory; (bso#12702). + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562). + Ordering of notify responses broken; (bso#12756).- s3: libsmb: Fix error where short name length was read as 2 bytes, should be 1; (bso#11822); (bsc#1042419).- Revert explicit winbind %{version}-%{release} dependency. + The ABI has stabilized since (bsc#936909), so remove to fix cross-media dependencies; (bsc#1037899).- Fix CVE-2017-7494 remote code execution from a writable share; (bso#12780); (bsc#1038231).- Update to 4.6.3; (bsc#1036011) + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots from shares with GlusterFS backend; (bso#12743). + Fix for Solaris C compiler; (bso#12559). + s3: locking: Update oplock optimization for the leases era; (bso#12628). + Make the Solaris C compiler happy; (bso#12693). + s3: libgpo: Allow skipping GPO objects that don't have the expected LDAP attributes; (bso#12695). + Fix buffer overflow caused by wrong use of getgroups; (bso#12747). + lib: debug: Avoid negative array access; (bso#12746). + cleanupdb: Fix a memory read error; (bso#12748). + streams_xattr and kernel oplocks results in NT_STATUS_NETWORK_BUSY; (bso#7537). + winbindd: idmap_autorid allocates ids for unknown SIDs from other backends; (bso#11961). + vfs_fruit: Resource fork open request with flags=O_CREAT|O_RDONLY; (bso#12565). + manpages/vfs_fruit: Document global options; (bso#12615). + lib/pthreadpool: Fix a memory leak; (bso#12624). + Lookup-domain for well-known SIDs on a DC; (bso#12727). + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728). + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729). + credentials_krb5: use gss_acquire_cred for client-side GSSAPI use case; (bso#12611). + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690). + ctdb-readonly: Avoid a tight loop waiting for revoke to complete; (bso#12697). + ctdb_event monitor command crashes if event is not specified; (bso#12723). + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733). + smbd: Fix smb1 findfirst with DFS; (bso#12558). + smbd: Do an early exit on negprot failure; (bso#12610). + winbindd: Fix substitution for 'template homedir'; (bso#12699). + s4:kdc: Disable principal based autodetected referral detection; (bso#12554). + idmap_autorid: Allocate new domain range if the callers knows the sid is valid; (bso#12613). + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724). + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for trusted domain; (bso#12725). + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731). + winbindd: Fix password policy for pam authentication; (bso#12725). + s3:gse: Correctly handle external trusts with MIT; (bso#12554). + auth/credentials: Always set the realm if we set the principal from the ccache; (bso#12611). + replace: Include sysmacros.h; (bso#12686). + s3:vfs_expand_msdfs: Do not open the remote address as a file; (bso#12687). + s3:libsmb: Only print error message if kerberos use is forced; (bso#12704). + winbindd: Child process crashes when kerberos-authenticating a user with wrong password; (bso#12708). + vfs_fruit: Office document opens as read-only on macOS due to CNID semantics; (bso#12715). + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is fragmented; (bso#12737).- Generate and update vendor-files tarball from Git + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).- Generate source tarball directly from Git using OBS tar_scm + use version string derived from parent Git tag and commit hash - remove obsolete vendor-files/tools/package-data version ID + explicitly generate ctdb manpages, needed without "make dist"- Update to 4.6.2 + remove bso#12721 patches now upstream- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622). + x86-64 and aarch64- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).- Build and install the html man pages (bsc#1021907).- Fix CVE-2017-2619 regression with "follow symlinks = no"; (bso#12721).- Update to 4.6.1 + symlink race permits opening files outside share directory; CVE-2017-2619; (bso#12496); (bsc#1027147) + testparm checks for valid idmap parameters + add new krb client encryption types + support for printer driver upload from windows 10 + inherit owner = 'unix only' for improved quota support + improved CTDB event support + new primary group support for idmap_ad + idmap_hash deprecated + mvxattr added to recursively rename extended attributes- Remove chkconfig requirements for systemd systems- Don't call insserv if systemd is used- Fix check if we need to require insserv- async_req: make async_connect_send() "reentrant"; (bso#12105); (bsc#1024416).- Force usage of ncurses6-config thru NCURSES_CONFIG env var; (bsc#1023847).- add missing patch for libnss_wins segfault; (bsc#995730).- Fix vfs_ceph builds against recent Ceph versions; (bsc#1021933).- Document "winbind: ignore domains" parameter; (bsc#1019416).- Add base Samba dependency to samba-ceph package.- Update to 4.5.3 + Heap-based Buffer Overflow Remote Code Execution Vulnerability; CVE-2016-2123; (bso#12409); (bsc#1014437). + Don't send delegated credentials to all servers; CVE-2016-2125; (bso#12445); (bsc#1014441). + denial of service due to a client triggered crash in the winbindd parent process; CVE-2016-2126; (bso#12446); (bsc#1014442). - 4.5.1 and 4.5.2 updates + various streams vfs fixes + various printing fixes + ntlm_auth: do not map explicitly empty domain + various stability fixes in smbd + match file compression ReFS behavior- Add missing ldb module directory; (bnc#1012092).- s3/client: obey 'disable netbios' smb.conf param, don't connect via NBT port; (bsc#1009085); (bso#12418).- Include vfstest in samba-test; (bsc#1001203).- s3/winbindd: using default domain with user@domain.com format fails; (bsc#997833).- Fix segfault in libnss_wins; (bso#12277); (bso#12269); (bsc#995730).- Update to 4.5.0 + NTLM1 Authentication disabled by default + SMB2.1 leases enabled by default + Support for OFD locks + ctdb tool rewritten + Added shadow copy snapshot prefix parameter- Fix illegal memory access after memory has been deleted; (bso#11836); (bsc#975299).- Prevent core, make sure response->extra_data.data is always cleared out; (bsc#993692).- Don't package man pages for VFS modules that aren't built; (boo#993707).- Fix population of ctdb sysconfig after source merge; (bsc#981566).- Enable vfs_ceph builds for Factory (x86-64) + Package as samba-ceph to avoid Ceph dependency in base package.- Update to 4.4.5 + Prevent client-side SMB2 signing downgrade; CVE-2016-2119; (bso#11860); (bsc#986869).- Remove obsolete syslog.target; (bsc#983938).- Honor smb.conf socket options in winbind; (bsc#975131).- Don't use htons() with IP_PROTO_RAW; (bso#11705); (bsc#969522).- Update to 4.4.4 + SMB3 multichannel: Add implementation of missing channel sequence number verification; (bso#11809). + smbd:close: Only remove kernel share modes if they had been taken at open; (bso#11919). + notifyd: Prevent NULL deref segfault in notifyd_peer_destructor; (bso#11930). + s3:rpcclient: Make '--pw-nt-hash' option work; (bso#10796). + Fix case sensitivity issues over SMB2 or above; (bso#11438). + s3:smbd: Fix anonymous authentication if signing is mandatory. (bso#11910) + Fix NTLM Authentication issue with squid; (bso#11914). + pdb: Fix segfault in pdb_ldap for missing gecos; (bso#11530). + Fix memory leak in share mode locking; (bso#11934).- Update to 4.4.3 + Various post-badlock regressions; (bso#11841); (bso#11850); (bso#11858); (bso#11870); (bso#11872). + Only allow idmap_hash for default idmap config (bso#11786). + smbd: Avoid large reads beyond EOF; (bso#11878). + vfs_acl_common: Avoid setting POSIX ACLs if "ignore system acls" is set; (bso#11806). + libads: Record session expiry for spnego sasl binds; (bso#11852).- Fix NTLMSSP regressions caused by previous CVE fixes; (bso#11849); (bsc#975962); (bsc#979268), (bsc#977669).- Revert shared library packaging to comply with SLPP- Update to 4.4.2 + A man-in-the-middle can downgrade NTLMSSP authentication; CVE-2016-2110; (bso#11688); (bsc#973031). + Domain controller netlogon member computer can be spoofed; CVE-2016-2111; (bso#11749); (bsc#973032). + LDAP conenctions vulnerable to downgrade and MITM attack; CVE-2016-2112; (bso#11644); (bsc#973033). + TLS certificate validation missing; CVE-2016-2113; (bso#11752); (bsc#973034). + Named pipe IPC vulnerable to MITM attacks; CVE-2016-2115; (bso#11756); (bsc#973036). + "Badlock" DCERPC impersonation of authenticated account possible; CVE-2016-2118; (bso#11804); (bsc#971965). + DCERPC server and client vulnerable to DOS and MITM attacks; CVE-2015-5370; (bso#11344); (bsc#936862).- Fix samba.tests.messaging test and prevent potential tdb corruption by removing obsolete now invalid tdb_close call; (bsc#974629).- Obsolete libsmbclient from libsmbclient0 while not providing it; (bsc#972197).- Update to 4.4.0. + Read of uninitialized memory DNS TXT handling; (bso#11128); (bso#11686); CVE-2016-0771. + Getting and setting Windows ACLs on symlinks can change permissions on link target; (bso#11648); CVE-2015-7560. + Sockets with htons(IPPROTO_RAW); (bso#11705); CVE-2015-8543. + s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystem with no ACL support; (bso#10489). + docs: Add example for domain logins to smbspool man page; (bso#11643). + smbd: Show correct disk size for different quota and dfree block sizes; (bso#11681). + docs: Add smbspool_krb5_wrapper manpage; (bso#11690). + winbindd: Return trust parameters when listing trusts; (bso#11691). + ctdb: Do not provide a useless pkgconfig file for ctdb; (bso#11696). + Crypto.Cipher.ARC4 is not available on some platforms, fallback to M2Crypto.RC4.RC4 then; (bso#11699). + s3:utils/smbget: Set default blocksize; (bso#11700). + Streamline 'smbget' options with the rest of the Samba utils; (bso#11700). + s3:clispnego: Fix confusing warning in spnego_gen_krb5_wrap(); (bso#11702). + s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703). + loadparm: Fix memory leak issue; (bso#11708). + lib/tsocket: Work around sockets not supporting FIONREAD; (bso#11714). + s3:vfs:glusterfs: Fix build after quota changes; (bso#11715). + ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ..."; (bso#11719). + lib:socket: Fix CID 1350010: Integer OVERFLOW_BEFORE_WIDEN; (bso#11723). + smbd: Fix CID 1351215 Improper use of negative value; (bso#11724). + smbd: Fix CID 1351216 Dereference null return value; (bso#11725). + s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new file; (bso#11727). + docs: Add manpage for cifsdd; (bso#11730). + param: Fix str_list_v3 to accept ; again; (bso#11732). + lib/socket: Fix improper use of default interface speed; (bso#11734). + lib:socket: Fix CID 1350009: Fix illegal memory accesses (BUFFER_SIZE_WARNING); (bso#11735). + libcli: Fix debug message, print sid string for new_ace trustee; (bso#11738). + Fix installation path of Samba helper binaries; (bso#11739). + Fix memory leak in loadparm; (bso#11740). + tevent: version 0.9.28: Fix memory leak when old signal action restored; (bso#11742). + smbd: Ignore SVHDX create context; (bso#11753). + Fix net join; (bso#11755). + s3:libads: setup the msDS-SupportedEncryptionTypes attribute on ldap_add; (bso#11755). + passdb: Add linefeed to debug message; (bso#11763). + s3:utils/smbget: Fix option parsing; (bso#11767). + libnet: Make Kerberos domain join site-aware; (bso#11769). + Reset TCP Connections during IP failover; (bso#11770). + ldb: Version 1.1.26; (bso#11772). + s3:smbd: Add negprot remote arch detection for OSX; (bso#11773). + vfs_glusterfs: Fix use after free in AIO callback; (bso#11774). + mkdir can return ACCESS_DENIED incorrectly on create race; (bso#11780). + "trustdom_list_done: Got invalid trustdom response" message should be avoided; (bso#11782). + Mismatch between local and remote attribute ids lets replication fail with custom schema; (bso#11783). + Quota is not supported on Solaris 10; (bso#11788). + Talloc: Version 2.1.6; (bso#11789). + smbd: Enable multi-channel if 'server multi channel support = yes' in the config; (bso#11796). + build: Fix build when '--without-quota' specified; (bso#11798). + lib/socket/interfaces: Fix some uninitialied bytes; (bso#11802). + Access based share enum: handle permission set in configuration files; (bso#8093). + See also WHATSNEW.txt from the samba-doc package.- Update to 4.3.6. + Getting and setting Windows ACLs on symlinks can change permissions on link target; CVE-2015-7560; (bso#11648); (bsc#968222). + Fix Out-of-bounds read in internal DNS server; CVE-2016-0771; (bso#11128); (bso#11686); (bsc#968223).- Upgrade on-disk FSRVP server state to new version; (bsc#924519).- Only obsolete but do not provide gplv2/3 package names; (bsc#968973).- Relocate existing lock files to /var/lib/samba/lock; (bsc#968963).- Obsolete no longer existing samba-32bit package; (bsc#967625).- Update to 4.3.5. + s3:utils/smbget: Fix recursive download; (bso#6482). + s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystemi with no ACL support; (bso#10489). + s3:smbd/oplock: Obey kernel oplock setting when releasing oplocks; (bso#11400). + vfs_shadow_copy2: Fix case where snapshots are outside the share; (bso#11580). + smbclient: Query disk usage relative to current directory; (bso#11662). + winbindd: Handle expired sessions correctly; (bso#11670). + smbd: Show correct disk size for different quota and dfree block sizes; (bso#11681). + smbcacls: Fix uninitialized variable; (bso#11682). + s3:smbd: Ignore initial allocation size for directory creation; (bso#11684). + s3-client: Add a KRB5 wrapper for smbspool; (bso#11690). + s3-parm: Clean up defaults when removing global parameters; (bso#11693). + Use M2Crypto.RC4.RC4 on platforms without Crypto.Cipher.ARC4; (bso#11699). + s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703). + ctdb: Remove error messages after kernel security update; CVE-2015-8543; (bso#11705). + loadparm: Fix memory leak issue; (bso#11708). + lib/tsocket: Work around sockets not supporting FIONREAD; (bso#11714). + ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ..."; (bso#11719). + s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new file; (bso#11727). + param: Fix str_list_v3 to accept ";" again; (bso#11732).- Shift samba-client sysconfig data into samba and samba-winbind; (bsc#947361).- Simplify shared library packaging; (bsc#966956).- Enable clustering (CTDB) support; (bsc#966271).- s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703); (bsc#964023).- Add quotes around path of update-apparmor-samba-profile; (bnc#962177).- Remove autoconf build-time requirement.- Update to 4.3.4. + vfs_fruit: Enable POSIX directory rename semantics; (bso#11065). + Crash: Bad talloc magic value - access after free; (bso#11394). + Copying files with vfs_fruit fails when using vfs_streams_xattr without stream prefix and type suffix; (bso#11466). + samba-tool: Fix uncaught exception if no fSMORoleOwner attribute is given; (bso#11613). + Fix a typo in the smb.conf manpage, explanation of idmap config; (bso#11619). + Correctly initialize the list head when keeping a list of primary followed by DFS connections; (bso#11624). + Reduce the memory footprint of empty string options; (bso#11625). + lib/async_req: Do not install async_connect_send_test; (bso#11639). + Fix typos in man vfs_gpfs; (bso#11641). + Make "hide dot files" option work with "store dos attributes = yes"; (bso#11645). + Fix a corner case of the symlink verification; (bso#11647); (bnc#960249). + Do not disable "store dos attributes" on-the-fly; (bso#11649). + Update lastLogon and lastLogonTimestamp; (bso#11659).- Prevent access denied if the share path is "/"; (bso#11647); (bnc#960249).- Update to 4.3.3. + Malicious request can cause Samba LDAP server to hang, spinning using CPU; CVE-2015-3223; (bso#11325); (bnc#958581). + Remote read memory exploit in LDB; CVE-2015-5330; (bso#11599); (bnc#958586). + Insufficient symlink verification (file access outside the share); CVE-2015-5252; (bso#11395); (bnc#958582). + No man in the middle protection when forcing smb encryption on the client side; CVE-2015-5296; (bso#11536); (bnc#958584). + Currently the snapshot browsing is not secure thru windows previous version (shadow_copy2); CVE-2015-5299; (bso#11529); (bnc#958583). + Fix Microsoft MS15-096 to prevent machine accounts from being changed into user accounts; CVE-2015-8467; (bso#11552); (bnc#958585).- Update to 4.3.2. + vfs_gpfs: Re-enable share modes; (bso#11243). + dcerpc.idl: Accept invalid dcerpc_bind_nak pdus; (bso#11327). + s3-smbd: Fix old DOS client doing wildcard delete - gives an attribute type of zero; (bso#11452). + Add libreplace dependency to texpect, fixes a linking error on Solaris; (bso#11511). + s4: Fix linking of 'smbtorture' on Solaris; (bso#11512). + s4:lib/messaging: Use correct path for names.tdb; (bso#11562). + Fix segfault of 'net ads (join|leave) -S INVALID' with nss_wins; (bso#11563). + async_req: Fix non-blocking connect(); (bso#11564). + auth: gensec: Fix a memory leak; (bso#11565). + lib: util: Make non-critical message a warning; (bso#11566). + Fix winbindd crashes with samlogon for trusted domain user; (bso#11569); (bnc#949022). + smbd: Send SMB2 oplock breaks unencrypted; (bso#11570). + ctdb: Open the RO tracking db with perms 0600 instead of 0000; (bso#11577). + s3:smb2_server: Make the logic of SMB2_CANCEL DLIST_REMOVE() clearer; (bso#11581). + s3-smbd: Fix use after issue in smbd_smb2_request_dispatch(); (bso#11581). + manpage: Correct small typo error; (bso#11584). + s3: smbd: If EAs are turned off on a share don't allow an SMB2 create containing them; (bso#11589). + Backport some valgrind fixes from upstream master; (bso#11597). + auth: Consistent handling of well-known alias as primary gid; (bso#11608). + winbind: Fix crash on invalid idmap configs; (bso#11612). + s3: smbd: have_file_open_below() fails to enumerate open files below an open directory handle; (bso#11615). + Changing log level of two entries to DBG_NOTICE; (bso#9912).- Ensure samlogon fallback requests are rerouted after kerberos failure; (bnc#953382); (bnc#953972).- Ensure to link with --as-needed flag by removing SUSE_ASNEEDED=0. - Always use the default optimization even on pre-9.2 systems.- Remove redundant configure options while adding with-relro.- Relocate the lockdir to the /var/lib/samba/lock directory.- Cleanup and enhance the pidl sub package.- Require renamed python-ldb-devel and python-talloc-devel at build-time. - Requires python-ldb and python-talloc from the python subpackage.- Update to 4.3.1. + s3: smbd: Fix our access-based enumeration on "hide unreadable" to match Windows; (bso#10252). + nss_winbind: Fix hang on Solaris on big groups; (bso#10365). + smbd: Fix file name buflen and padding in notify repsonse; (bso#10634). + kerberos: Make sure we only use prompter type when available; winbind: Fix 100% loop; (bso#11038). + source3/lib/msghdr.c: Fix compiling error on Solaris; (bso#11053). + s3:ctdbd_conn: make sure we destroy tevent_fd before closing the socket; (bso#11316). + s3: smbd: Fix mkdir race condition; (bso#11486). + pam_winbind: Fix a segfault if initialization fails; (bso#11502). + s3: dfs: Fix a crash when the dfs targets are disabled; (bso#11509). + s4:lib/messaging: Use 'msg.lock' and 'msg.sock' for messaging related subdirs; (bso#11515). + s3: smbd: Fix opening/creating :stream files on the root share directory; (bso#11522). + lib/param: Fix hiding of FLAG_SYNONYM values; (bso#11526). + net: Fix a crash with 'net ads keytab create'; (bso#11528). + s3: smbd: Fix a crash in unix_convert(); (bso#11535). + s3: smbd: Fix NULL pointer bug introduced by previous 'raw' stream fix (bso#11522); (bso#11535). + vfs_fruit: Return value of ad_pack in vfs_fruit.c; (bso#11543). + vfs_commit: set the fd on open before calling SMB_VFS_FSTAT; (bso#11547). + s3:locking: Initialize lease pointer in share_mode_traverse_fn(); (bso#11549). + s3:smbstatus: Add stream name to share_entry_forall(); (bso#11550). + s3:lib: Validate domain name in lookup_wellknown_name(); (bso#11555). + s3: lsa: lookup_name() logic for unqualified (no DOMAIN component) names is incorrect; (bso#11555).- Fix 100% CPU in winbindd when logging in with "user must change password on next logon"; (bso#11038).- Relocate the tmpfiles.d directory to the client package; (bnc#947552).- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf instead; (bnc#942716).- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).- Package /var/lib/samba/msg with 0755 permissions; (bso#11515); (bnc#945502).- Require to install libfam0-gamin from samba-libs on post-12.1 and pre-13.15 systems; (bnc#945013).- Update to 4.3.0. + Samba "map to guest = Bad uid" doesn't work; (bso#9862). + revert LDAP extended rule 1.2.840.113556.1.4.1941 LDAP_MATCHING_RULE_IN_CHAIN changes; (bso#10493). + No objectClass found in replPropertyMetaData on ordinary objects (non-deleted); (bso#10973). + Stream names with colon don't work with fruit:encoding = native; (bso#11278). + NetApp joined to a Samba/ADDC cannot resolve SIDs; (bso#11291). + tevent_fd needs to be destroyed before closing the fd; (bso#11316). + "force group" with local group not working; (bso#11320). + strsep is not available on Solaris; (bso#11359). + smbtorture does not build when configured --with-system-mitkrb5; (bso#11411). + Build with GPFS support is broken; (bso#11421). + Build broken with --disable-python; (bso#11424). + net share allowedusers crashes; (bso#11426). + nmbd incorrectly matches netbios names as own name; (bso#11427). + Python bindings don't check integer types; (bso#11429). + Python bindings don't check array sizes; (bso#11430). + CTDB's eventscript error handling is broken; (bso#11431). + Fix crash in nested ctdb banning; (bso#11432). + Cannot build ctdbpmda; (bso#11434). + samba-tool uncaught exception error; (bso#11436). + Crash in notify_remove caused by change notify = no; (bso#11444). + Poor SMB3 encryption performance with AES-GCM; (bso#11451). + Poor SMB3 encryption performance with AES-GCM (part1); (bso#11451). + fix recursion problem in rep_strtoll in lib/replace/replace.c; (bso#11455). + --bundled-libraries=!ldb,!pyldb,!pyldb-util doesn't disable ldb build and install; (bso#11458). + xid2sid gives inconsistent results; (bso#11464). + ctdb: Fix the build on FreeBSD 10.1; (bso#11465). + Handling of 0 byte resource fork stream; (bso#11467). + AD samr GetGroupsForUser fails for users with "()" in their name; (bso#11488).- Configure with --bundled-libraries=NONE; (bso#11458).- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).- Remove libiniparser-devel build-time requirement.- Update to 4.2.3. + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780). + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924). + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991). + Logon via MS Remote Desktop hangs; (bso#11061). + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068). + tevent: Add a note to tevent_add_fd(); (bso#11141). + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170). + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217). + smbd: Fix a use-after-free; (bso#11218); (bnc#919309). + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces; (bso#11245). + s3:smb2: Add padding to last command in compound requests; (bso#11277). + Add IPv6 support to ADS client side LDAP connects; (bso#11281). + Add IPv6 support for determining FQDN during ADS join; (bso#11282). + s3: IPv6 enabled DNS connections for ADS client; (bso#11283). + Fix invalid write in ctdb_lock_context_destructor; (bso#11293). + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295). + vfs_fruit: Add option "veto_appledouble"; (bso#11305). + tstream: Make socketpair nonblocking; (bso#11312). + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313). + Group creation: Add msSFU30Name only when --nis-domain was given; (bso#11315). + tevent_fd needs to be destroyed before closing the fd; (bso#11316). + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared"; (bso#11319). + smbd/trans2: Add a useful diagnostic for files with bad encoding; (bso#11323). + Change sharesec output back to previous format; (bso#11324). + Robust mutex support broken in 1.3.5; (bso#11326). + Kerberos auth info3 should contain resource group ids available from pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info exists in PAC; (bso#11328); (bnc#912457). + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329). + tevent: Fix CID 1035381 Unchecked return value; (bso#11330). + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331). + s3: smbd: Use separate flag to track become_root()/unbecome_root() state; (bso#11339). + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342). + pidl: Make the compilation of PIDL producing the same results if the content hasn't change; (bso#11356). + winbindd: Disconnect child process if request is cancelled at main process; (bso#11358). + vfs_fruit: Check offset and length for AFP_AfpInfo read requests; (bso#11363). + docs: Overhaul the description of "smb encrypt" to include SMB3 encryption; (bso#11366). + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server(); (bso#11367). + ncacn_http: Fix GNUism; (bso#11371).- Disable rpath usage; (bnc#902421).- Make the winbind package depend on the matching libwbclient version and vice versa; (bnc#936909).- Backport changes to use resource group sids obtained from pac logon_info; (bso#11328); (bnc#912457).- Order winbind.service Before and Want nss-user-lookup target.- Remove fam-devel build-time dependency for post-6 RHEL systems.- Update to 4.2.2. + s3:smbXsrv: refactor duplicate code into smbXsrv_session_clear_and_logoff(); (bso#11182). + gencache: don't fail gencache_stabilize if there were records to delete; (bso#11260). + s3: libsmbclient: After getting attribute server, ensure main srv pointer is still valid; (bso#11186). + s4: rpc: Refactor dcesrv_alter() function into setup and send steps; (bso#11236). + s3: smbd: Incorrect file size returned in the response of "FILE_SUPERSEDE Create"; (bso#11240). + Mangled names do not work with acl_xattr; (bso#11249). + nmbd rewrites browse.dat when not required; (bso#11254). + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff; (bso#11213). + s3:smbd: Add missing tevent_req_nterror; (bso#11224). + vfs: kernel_flock and named streams; (bso#11243). + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244). + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses are used; (bso#11284). + ctdb: check for talloc_asprintf() failure; (bso#11201). + spoolss: purge the printer name cache on name change; (bso#11210); (bnc#901813). + CTDB statd-callout does not scale; (bso#11204). + vfs_fruit: also map characters below 0x20; (bso#11221). + ctdb: Coverity fix for CID 1291643; (bso#11201). + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225). + Fix terminate connection behavior for asynchronous endpoint with PUSH notification flavors; (bso#11226). + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007). + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201). + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the directory is deleted; (bso#11257). + s3:winbindd: make sure we remove pending io requests before closing client sockets; (bso#11141); (bnc#931854). + Fix panic triggered by smbd_smb2_request_notify_done() -> smbXsrv_session_find_channel() in smbd; (bso#11182). + 'sharesec' output no longer matches input format; (bso#11237). + waf: Fix systemd detection; (bso#11200). + CTDB: Fix portability issues; (bso#11202). + CTDB: Fix some IPv6-related issues; (bso#11203). + CTDB statd-callout does not scale; (bso#11204). + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you enter invalid values; (bso#11234). + libads: record service ticket endtime for sealed ldap connections; (bso#11267). + lib/util: Include DEBUG macro in internal header files before samba_util.h; (bso#11033).- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).- Remove the independently built libraries ldb, talloc, tdn, and tevent and the post-10.3 renamed libsmbclient from baselibs.conf.- Drop redundant doc attribute from man pages.- Update to 4.2.1. + s3:winbind:grent: Don't stop group enumeration when a group has no gid; (bso#8905). + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791). + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with servers that don't send the 2 unused fields; (bso#10016). + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476). + waf: Fix the build on openbsd; (bso#10476). + s3: client: "client use spnego principal = yes" code checks wrong name; (bso#10888). + spoolss: Retrieve published printer GUID if not in registry; (bso#11018). + s3: lib: libsmbclient: If reusing a server struct, check every cli->timout miliseconds if it's still valid before use; (bso#11079). + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125). + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135). + replace: Remove superfluous check for gcrypt header; (bso#11135). + Backport subunit changes; (bso#11137). + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with implementation; (bso#11140). + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143). + talloc: Version 2.1.2; (bso#11144). + Update libwbclient version to 0.12; (bso#11149). + brlock: Use 0 instead of empty initializer list; (bso#11153). + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164). + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169); (bnc#913304). + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev fails in the SMB1 case; (bso#11173). + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174). + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175). + s3: libsmbclient: Add missing talloc stackframe; (bso#11177). + s4-process_model: Do not close random fds while forking; (bso#11180). + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).- Prevent samba package updates from disabling samba kerberos printing.- Add sparse file support for samba; (fate#318424).- Purge printer name cache on spoolss SetPrinter change; (bso#11210); (bnc#901813).- Correctly retain errno from Btrfs snapshot ioctls; (bnc#923374).- Simplify libxslt build requirement and README.SUSE install. - Remove no longer required cleanup steps while populating the build root.- Remove deprecated base_rid example from idmap_rid manpage; (bso#11169); (bnc#913304).- Update to 4.2.0. + smbd: Stop using vfs_Chdir after SMB_VFS_DISCONNECT; (bso#1115). + pam_winbind: fix warn_pwd_expire implementation; (bso#9056). + nsswitch: Fix soname of linux nss_*.so.2 modules; (bso#9299). + Make 'profiles' work again; (bso#9629). + s3:smb2_server: protect against integer wrap with "smb2 max credits = 65535"; (bso#9702). + Make validate_ldb of String(Generalized-Time) accept millisecond format ".000Z"; (bso#9810). + Use -R linker flag on Solaris, not -rpath; (bso#10112). + vfs: Add glusterfs manpage; (bso#10240). + Make 'smbclient' use cached creds; (bso#10279). + pdb: Fix build issues with shared modules; (bso#10355). + s4-dns: Add support for BIND 9.10; (bso#10620). + idmap: Return the correct id type to *id_to_sid methods; (bso#10720). + printing/cups: Pack requested-attributes with IPP_TAG_KEYWORD; (bso#10808). + Don't build vfs_snapper on FreeBSD; (bso#10834). + nss_winbind: Add getgroupmembership for FreeBSD; (bso#10835). + idmap_rfc2307: Fix a crash after connection problem to DC; (bso#10837). + s3: smb2cli: query info return length check was reversed; (bso#10848). + s3: lib, s3: modules: Fix compilation on Solaris; (bso#10849). + lib: uid_wrapper: Fix setgroups and syscall detection on a system without native uid_wrapper library; (bso#10851). + winbind3: Fix pwent variable substitution; (bso#10852). + Improve samba-regedit; (bso#10859). + registry: Don't leave dangling transactions; (bso#10860). + Fix build of socket_wrapper on systems without SO_PROTOCOL; (bso#10861). + build: Do not install 'texpect' binary anymore; (bso#10862). + Fix testparm to show hidden share defaults; (bso#10864). + libcli/smb: Fix smb2cli_validate_negotiate_info with min=PROTOCOL_NT1 max=PROTOCOL_SMB2_02; (bso#10866). + Integrate CTDB into top-level Samba build; (bso#10892). + samba-tool group add: Add option '--nis-domain' and '--gid'; (bso#10895). + s3-nmbd: Fix netbios name truncation; (bso#10896). + spoolss: Fix handling of bad EnumJobs levels; (bso#10898). + Fix smbclient loops doing a directory listing against Mac OS X 10 server with a non-wildcard path; (bso#10904). + Fix print job enumeration; (bso#10905); (bnc#898031). + samba-tool: Create NIS enabled users and unixHomeDirectory attribute; (bso#10909). + Add support for SMB2 leases; (bso#10911). + btrfs: Don't leak opened directory handle; (bso#10918). + s3: nmbd: Ensure NetBIOS names are only 15 characters stored; (bso#10920). + s3:smbd: Fix file corruption using "write cache size != 0"; (bso#10921). + pdb_tdb: Fix a TALLOC/SAFE_FREE mixup; (bso#10932). + s3-keytab: fix keytab array NULL termination; (bso#10933). + s3:passdb: fix logic in pdb_set_pw_history(); (bso#10940). + Cleanup add_string_to_array and usage; (bso#10942). + dbwrap_ctdb: Pass on mutex flags to tdb_open; (bso#10942). + Fix RootDSE search with extended dn control; (bso#10949). + Fix 'samba-tool dns serverinfo ' for IPv6; (bso#10952). + libcli/smb: only force signing of smb2 session setups when binding a new session; (bso#10958). + s3-smbclient: Return success if we listed the shares; (bso#10960). + s3-smbstatus: Fix exit code of profile output; (bso#10961). + socket_wrapper: Add missing prototype check for eventfd; (bso#10965). + libcli: SMB2: Pure SMB2-only negprot fix to make us behave as a Windows client does; (bso#10966). + vfs_streams_xattr: Check stream type; (bso#10971). + s3: smbd: Fix *allocate* calls to follow POSIX error return convention; (bso#10982). + vfs_fruit: Add support for AAPL; (bso#10983). + Fix spoolss IDL response marshalling when returning error without clearing info; (bso#10984). + dsdb-samldb: Check for extended access rights before we allow changes to userAccountControl; (bso#10993); CVE-2014-8143; (boo#914279). + Fix IPv6 support in CTDB; (bso#10996). + ctdb-daemon: Use correct tdb flags when enabling robust mutex support; (bso#11000). + vfs_streams_xattr: Add missing call to SMB_VFS_NEXT_CONNECT; (bso#11005). + s3-util: Fix authentication with long hostnames; (bso#11008). + ctdb-build: Fix build without xsltproc; (bso#11014). + packaging: Include CTDB man pages in the tarball; (bso#11014). + pdb_get_trusteddom_pw() fails with non valid UTF16 random passwords; (bso#11016). + Make Sharepoint search show user documents; (bso#11022). + nss_wrapper: check for nss.h; (bso#11026). + Enable mutexes in gencache_notrans.tdb; (bso#11032). + tdb_wrap: Make mutexes easier to use; (bso#11032). + lib/util: Avoid collision which alread defined consumer DEBUG macro; (bso#11033). + winbind: Retry after SESSION_EXPIRED error in ping-dc; (bso#11034). + s3-libads: Fix a possible segfault in kerberos_fetch_pac(); (bso#11037). + vfs_fruit: Fix base_fsp name conversion; (bso#11039). + vfs_fruit: mmap under FreeBSD needs PROT_READ; (bso#11040). + Fix authentication using Kerberos (not AD); (bso#11044). + net: Fix sam addgroupmem; (bso#11051). + vfs_snapper: Correctly handles multi-byte DBus strings; (bso#11055); (bnc#913238). + cli_connect_nb_send: Don't segfault on host == NULL; (bso#11058). + utils: Fix 'net time' segfault; (bso#11058). + libsmb: Provide authinfo domain for encrypted session referrals; (bso#11059). + s3-pam_smbpass: Fix memory leak in pam_sm_authenticate(); (bso#11066). + vfs_glusterfs: Add comments to the pipe(2) code; (bso#11069). + vfs/glusterfs: Change xattr key to match gluster key; (bso#11069). + vfs_glusterfs: Implement AIO support; (bso#11069). + s3-vfs: Fix developer build of vfs_ceph module; (bso#11070). + s3: netlogon: Ensure we don't call talloc_free on an uninitialized pointer; (bso#11077); CVE-2015-0240; (bnc#917376). + vfs: Add a brief vfs_ceph manpage; (bso#11088). + s3: smbclient: Allinfo leaves the file handle open; (bso#11094). + Fix Win8.1 Credentials Manager issue after KB2992611 on Samba domain; (bso#11097). + debug: Set close-on-exec for the main log file FD; (bso#11100). + s3: smbd: leases - losen paranoia check. Stat opens can grant leases; (bso#11102). + s3: smbd: SMB2 close. If a file has delete on close, store the return info before deleting; (bso#11104). + doc:man:vfs_glusterfs: improve the configuration section; (bso#11117). + snprintf: Try to support %j; (bso#11119). + ctdb-io: Do not use sys_write to write to client sockets; (bso#11124). + doc-xml: Add 'sharesec' reference to 'access based share enum'; (bso#11127).- Update to 4.2.0rc5. + Ensure we don't call talloc_free on an uninitialized pointer; CVE-2015-0240; (bso#11077); (bnc#917376).- Fix usage of freed memory on server exit; (bso#11218); (bnc#919309).- Fix tdb_store_flag_to_ntdb() gcc5 build failure.- Fix vfs_snapper DBus string handling; (bso#11055); (bnc#913238).- Update to 4.1.16. + dsdb-samldb: Check for extended access rights before we allow changes to userAccountControl; (bso#10993); CVE-2014-8143; (boo#914279).- Adjust baselibs.conf due to libpdb0 package rename to libsamba-passdb0.- Fix libsmbclient DFS referral handling. + Reuse connections derived from DFS referrals; (bso#10123); (fate#316512). + Set domain/workgroup based on authentication callback value; (bso#11059).- Update to 4.2.0rc4. - Add libsamba-debug, libsocket-blocking, libsamba-cluster-support, and libhttp to the libs package; (boo#913547). - Rename libpdb packages to libsamba-passdb. - Drop libsmbsharemodes packages.- Enable avahi support on post-12.2 systems.- Update to 4.1.15. + pam_winbind: Fix warn_pwd_expire implementation; (bso#9056). + nsswitch: Fix soname of linux nss_*.so.2 modules; (bso#9299). + Fix profiles tool; (bso#9629). + s3-lib: Do not require a password with --use-ccache; (bso#10279). + s4:dsdb/rootdse: Expand extended dn values with the AS_SYSTEM control; (bso#10949). + s4-rpc: dnsserver: Fix enumeration of IPv4 and IPv6 addresses; (bso#10952). + s3:smb2_server: Allow reauthentication without signing; (bso#10958). + s3-smbclient: Return success if we listed the shares; (bso#10960). + s3-smbstatus: Fix exit code of profile output; (bso#10961). + libcli: SMB2: Pure SMB2-only negprot fix to make us behave as a Windows client does; (bso#10966). + s3: smbd/modules: Fix *allocate* calls to follow POSIX error return convention; (bso#10982). + Fix 'domain join' by adding 'drsuapi.DsBindInfoFallBack' attribute 'supported_extensions'; (bso#11006). + idl:drsuapi: Manage all possible lengths of drsuapi_DsBindInfo; (bso#11006). + winbind: Retry LogonControl RPC in ping-dc after session expiration; (bso#11034).- yast2-samba-client should be able to specify osName and osVer on AD domain join; (bnc#873922).- Lookup FSRVP share snums at runtime rather than storing them persistently; (bnc#908627).- Specify soft dependency for network-online.target in Winbind systemd service file; (bnc#889175).- Fix spoolss error response marshalling; (bso#10984).- Update to 4.1.14. + pidl/wscript: Remove --with-perl-* options; revert buildtools/wafadmin/ Tools/perl.py back to upstream state; (bso#10472). + s4-dns: Add support for BIND 9.10; (bso#10620). + nmbd fails to accept "--piddir" option; (bso#10711). + nss_winbind: Add getgroupmembership for FreeBSD; (bso#10835). + S3: source3/smbd/process.c::srv_send_smb() returns true on the error path; (bso#10880). + vfs_glusterfs: Remove "integer fd" code and store the glfs pointers; (bso#10889). + s3-nmbd: Fix netbios name truncation; (bso#10896). + spoolss: Fix handling of bad EnumJobs levels; (bso#10898). + s3: libsmbclient-smb2. MacOSX 10 SMB2 server doesn't set STATUS_NO_MORE_FILES when handed a non-wildcard path; (bso#10904). + spoolss: Fix jobid in level 3 EnumJobs response; (bso#10905). + s3: nmbd: Ensure NetBIOS names are only 15 characters stored; (bso#10920). + s3:smbd: Fix file corruption using "write cache size != 0"; (bso#10921). + pdb_tdb: Fix a TALLOC/SAFE_FREE mixup; (bso#10932). + s3-keytab: Fix keytab array NULL termination; (bso#10933). + Cleanup add_string_to_array and usage; (bso#10942).- Remove and cleanup shares and registry state associated with externally deleted snaphots exposed as shadow copies; (bnc#876312).- Use the upstream tar ball, as signature verification is now able to handle compressed archives.- Fix leak when closing file descriptor returned from dirfd; (bso#10918).- Fix spoolss EnumJobs and GetJob responses; (bso#10905); (bnc#898031). + Fix handling of bad EnumJobs levels; (bso#10898).- Remove dependency on gpg-offline as signature checking is implemented in the source validator.- Update to 4.1.13. + s3-libnet: Add libnet_join_get_machine_spns(); (bso#9984). + s3-libnet: Make sure we do not overwrite precreated SPNs; (bso#9984). + s3-libads: Add all machine account principals to the keytab; (bso#9985). + s3: winbindd: Old NT Domain code sets struct winbind_domain->alt_name to be NULL. Ensure this is safe with modern AD-DCs; (bso#10717). + Fix unstrcpy; (bso#10735). + pthreadpool: Slightly serialize jobs; (bso#10779). + s3: smbd: streams - Ensure share mode validation ignores internal opens (op_mid == 0); (bso#10797). + s3: smbd:open_file: Open logic fix; Use a more natural check; (bso#10809). + vfs_media_harmony: Fix a crash bug; (bso#10813). + docs: Mention incompatibility between kernel oplocks and streams_xattr; (bso#10814). + nmbd: Send waiting status to systemd; (bso#10816). + libcli: Fix a segfault calling smbXcli_req_set_pending() on NULL; (bso#10817). + nsswitch: Skip groups we were not able to map; (bso#10824). + s3-winbindd: Use correct realm for trusted domains in idmap child; (bso#10826). + s3: nmbd: Ensure the main nmbd process doesn't create zombies; (bso#10830). + s3: lib: Signal handling - ensure smbrun and change password code save and restore existing SIGCHLD handlers; (bso#10831). + idmap_rfc2307: Fix a crash after connection problem to DC; (bso#10837). + s3-winbindd: Do not use domain SID from LookupSids for Sids2UnixIDs call; (bso#10838). + s3: smb2cli: Query info return length check was reversed; (bso#10848). + registry: Don't leave dangling transactions; (bso#10860).- Update to 4.2.0rc2./sbin/ldconfig/sbin/ldconfiglibdcerpc-binding0libdcerpc0libndr-krb5pac0libndr-nbt0libndr-standard0libndr0libndr1libndr2libnetapi0libsamba-credentials0libsamba-credentials1libsamba-errors0libsamba-hostconfig0libsamba-passdb0libsamba-util0libsamdb0libsmbclient0libsmbconf0libsmbldap0libsmbldap2libtevent-util0libwbclient0ibs-power9-21 1760090136  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuv4.19.8+git.435.78ced6cf30d4.19.8+git.435.78ced6cf30d4.19.8+git.435.78ced6cf30d4.19.8+git.435.78ced6cf30d4.19.8+git.435.78ced6cf30d4.19.8+git.435.78ced6cf30d4.19.8+git.435.78ced6cf30d4.19.8+git.435.78ced6cf30d4.19.8+git.435.78ced6cf30d4.19.8+git.435.78ced6cf30d4.19.8+git.435.78ced6cf30d4.19.8+git.435.78ced6cf30d4.19.8+git.435.78ced6cf30d4.19.8+git.435.78ced6cf30d4.19.8+git.435.78ced6cf30d4.19.8+git.435.78ced6cf30d4.19.8+git.435.78ced6cf30d4.19.8+git.435.78ced6cf30d4.19.8+git.435.78ced6cf30d-150600.3.21.14.19.8+git.435.78ced6cf30d-150600.3.21.14.19.8+git.435.78ced6cf30d4.19.8+git.435.78ced6cf30d4.19.8+git.435.78ced6cf30d4.19.8+git.435.78ced6cf30d4.19.8+git.435.78ced6cf30d4.19.8+git.435.78ced6cf30d4.19.8+git.435.78ced6cf30d4.19.8+git.435.78ced6cf30d4.19.8+git.435.78ced6cf30d4.19.8+git.435.78ced6cf30d4.19.8+git.435.78ced6cf30d4.19.8+git.435.78ced6cf30d4.19.8+git.435.78ced6cf30d4.19.8+git.435.78ced6cf30d4.19.8+git.435.78ced6cf30d4.19.8+git.435.78ced6cf30d4.19.8+git.435.78ced6cf30d4.19.8+git.435.78ced6cf30d4.19.8+git.435.78ced6cf30d4.19.8+git.435.78ced6cf30d4.19.8+git.435.78ced6cf30d4.19.8+git.435.78ced6cf30dlibdcerpc-binding.so.0libdcerpc-binding.so.0.0.1libdcerpc-server-core.so.0libdcerpc-server-core.so.0.0.1libdcerpc.so.0libdcerpc.so.0.0.1libndr-krb5pac.so.0libndr-krb5pac.so.0.0.1libndr-nbt.so.0libndr-nbt.so.0.0.1libndr-standard.so.0libndr-standard.so.0.0.1libndr.so.3libndr.so.3.0.1libnetapi.so.1libnetapi.so.1.0.0libsamba-credentials.so.1libsamba-credentials.so.1.0.0libsamba-errors.so.1libsamba-errors.so.1.0.0libsamba-hostconfig.so.0libsamba-hostconfig.so.0.0.1libsamba-passdb.so.0libsamba-passdb.so.0.28.0libsamba-util.so.0libsamba-util.so.0.0.1libsamdb.so.0libsamdb.so.0.0.1libsmbclient.so.0libsmbclient.so.0.7.0libsmbconf.so.0libsmbconf.so.0.0.1libsmbldap.so.2libsmbldap.so.2.1.0libtevent-util.so.0libtevent-util.so.0.0.1libwbclient.so.0libwbclient.so.0.16libCHARSET3-samba4.solibMESSAGING-SEND-samba4.solibMESSAGING-samba4.solibaddns-samba4.solibads-samba4.solibasn1util-samba4.solibauth-samba4.solibauthkrb5-samba4.solibcli-cldap-samba4.solibcli-ldap-common-samba4.solibcli-ldap-samba4.solibcli-nbt-samba4.solibcli-smb-common-samba4.solibcli-spoolss-samba4.solibcliauth-samba4.solibclidns-samba4.solibcluster-samba4.solibcmdline-contexts-samba4.solibcmdline-samba4.solibcommon-auth-samba4.solibdbwrap-samba4.solibdcerpc-pkt-auth-samba4.solibdcerpc-samba-samba4.solibdcerpc-samba4.solibevents-samba4.solibflag-mapping-samba4.solibgenrand-samba4.solibgensec-samba4.solibgpo-samba4.solibgse-samba4.solibhttp-samba4.solibinterfaces-samba4.solibiov-buf-samba4.solibkrb5samba-samba4.solibldbsamba-samba4.soliblibcli-lsa3-samba4.soliblibcli-netlogon3-samba4.soliblibsmb-samba4.solibmessages-dgm-samba4.solibmessages-util-samba4.solibmscat-samba4.solibmsghdr-samba4.solibmsrpc3-samba4.solibndr-samba-samba4.solibndr-samba4.solibnet-keytab-samba4.solibnetif-samba4.solibnpa-tstream-samba4.solibprinting-migrate-samba4.solibregistry-samba4.solibreplace-samba4.solibsamba-cluster-support-samba4.solibsamba-debug-samba4.solibsamba-modules-samba4.solibsamba-security-samba4.solibsamba-sockets-samba4.solibsamba3-util-samba4.solibsamdb-common-samba4.solibsecrets3-samba4.solibserver-id-db-samba4.solibserver-role-samba4.solibsmb-transport-samba4.solibsmbclient-raw-samba4.solibsmbd-base-samba4.solibsmbd-shim-samba4.solibsmbldaphelper-samba4.solibsocket-blocking-samba4.solibstable-sort-samba4.solibsys-rw-samba4.solibtalloc-report-printf-samba4.solibtdb-wrap-samba4.solibtime-basic-samba4.solibtrusts-util-samba4.solibutil-reg-samba4.solibutil-setid-samba4.solibutil-tdb-samba4.sopdbldapsam.sosmbpasswd.sotdbsam.so/usr/lib64//usr/lib64/samba//usr/lib64/samba/pdb/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:41070/SUSE_SLE-15-SP6_Update/5add5f7dce01a5b57b4b9abf50b932e5-samba.SUSE_SLE-15-SP6_Updatedrpmxz5ppc64le-suse-linux  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=d7c28e31bec5a6d8f5661ccd6c6ee10e2856bbcf, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=0ae27abc27af671d3efc2bfa4b3586f878fe0cb4, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=90e6ba962ac5d339f997317cf6c46ded0df960f8, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=d9014fd47108708f633b9212ddac0613ff676481, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=92cfe63af947078066b6bdb71801d6ae38c94986, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=615d621edd41351e3313d6ba37527c64aa28fff8, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=261b6fdbd6ca4cf27648784d339c91b988eb66b2, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=4a764351b496d57621cb107f5af938b158535dab, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=f01fa2d8ab4afe780ea617588d1fe23afec7e0e4, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=02af0a397ffa5e55c7bb1f1f34be2399d1ec7963, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=ccc3a2d2a7769c3309219e3831cfc055cdf7ca8f, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=c8a0d8e10a97aa56f87bdd33013d4e64292d5059, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=c13ba8761253f5f29767784526306d26a49b967a, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=c77af20b48f7c320a9c005859bb5b5cc4f143876, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=be55967e44264134ebd0a14f89bdbb627f526e0c, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=c36c6a0f0b3cea1880a243352636743f8e99f7e7, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=7929c52cf63906cc4c6f736cd3518f5cd7052044, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=6d0f6ad3531a54cae01c84f515fbe0f6bf8872e0, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=0a78e6d92f54106a7a48a0cd20a93c17411381c0, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=d7daf1b4154aef4ab470d1d43ce8199070eba5bc, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=9581e3c0ae2587669471dd0baca4b42c30e7f587, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=417f5d1940fe08da7d2e0ce8980aabd5da2c2d8d, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=fa8807318c1954b7b255d22370949f049eb410e9, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=cb34dcf3b19b68b716da44a141f50bc97a8faf54, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=c2acc1f91093b203b8782df4d56c07714e67de5a, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=94ac5e5492f47eae2d288da8dc0016ad2090ed2c, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=3af83439b058ba8abb1d96924ef6130927f6cf99, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=31758d1ccba88630adfdeab0a54d65e752447685, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=ecdefdf90c97cd6bcd64381bce158a3e806fa9c7, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=157732d3abf49c3195a196ba3487dfe625b3b67d, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=1ba8aad52635f4e27d0a2a84bd262e66ac20763b, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=0ecb94cb32790c6a4f3fc0edb79209c36d6cb4ae, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=983f8f4896235e96d9a988803ca6700354075a58, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=1167ae3e37d8b41e4789037ea182aeb416b52c6d, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=7a9c3796014545f90a9cf0f3c8d53d0258ed4d9a, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=29f9cfdf3b1c7efc234db292803fba4f8d1a4eee, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=bb5cc390fa7be3ca2d32011ca93b8270197f209d, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=c4cc59589dd66237c9009eaccc7f7e5f5f240088, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=2aa9441dd5c79b5af909e65f410f02cbd39af2ba, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=4944e5d1426c925a5b46185885be6bd89242bb69, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=ada96b17d3e8505d645228cfc17d1bab2fc70360, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=cc90c7e03e5933a7a5ebcd96201c36ffd5476373, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=7a900f583913b356604518cd02cac53209f1c655, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=1f4bfc96bdd11f39daa66779eb81dc8c00b6112e, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=d0c2f86482a301bcd3c1a78a1ef08de4c0095e56, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=cede21a5a328848cbffa78c178074fcb4d6dbb96, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=e53887c22bf9ccc6a5384419f34a705b890e2504, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=1824e016d4a320fd65c147184fcd22d557a5a2db, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=e208e30ef8fce431a4988765fffcfaa0534483d9, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=8465e5f0728ff6a058cbb90fee80fffc25d2a9fe, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=84476fa4d7bb5fee6146bbb960df6c7abb6b1d3f, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=de9e0e8508e509df6cfe748ad7d28af219500cd8, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=e9abc181d0fb8916207edcfae6deb8bf1e4bf0c5, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=d52a30d5f4b22af76d96918d75d76654fa5a0569, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=c02934b2ea4a72bd20e6d4789fc9db2410409b56, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=d631d371879dc326e1c9d57d19b71faa97f13819, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=62d879d06bd2c39f6822425a0033549d121ff33d, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=0c3890bf53bfa592b50391d12b200c1c33d7ad0b, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=05015179cb44dc0d211662f1706309c531fe55e5, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=0f99bf612a97ad5243a49079519f8317c0d9c41c, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=54d7edfd1dbb81331d742520b0cf2aac92286e5f, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=9da7759a7acb75acc9fd6055b233f60b7ec3ded5, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=b92386e37665338a4aa35c733500dd180d1685f8, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=a467267544ea1477bbf53253c5ef2862d66ecd4b, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=fe1a45e5fcb5ad13ed4634983a8748aa682b5e7c, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=9f2b04128552cf073dc059876261cae00241ccf5, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=5fa41810c33fc8ec673e63942c90f1af9c22f1a3, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=d2031e76d678a282d929090ca052b38577436213, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=f1e03d3fca82867bd8286199a45f2ee58b184dfd, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=14c10358a1b298e446ddeca73498ff3dcb755100, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=b49e13f009c75a5dae75e6c0287f924fe4c8590b, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=3b3f0d6f5ea9b0fdd0387ef54fc14cff8ea394a0, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=984a3b0b76d68811ea22697ddee2a2e176118eb2, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=d62109c526cf64708a7f54069639d1609b8cee67, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=1901794c4b24f538ff5a4fb99b971e9e91233ba5, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=bb12f5c5ce2a7a6eebd87b45c68432fd0b62887b, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=d8543bb8acedccbe60dac8b9616e1a234c37d316, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=3bc4d2fddf62d15a5bd696aa45310d44c0c532f2, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=f9688c627f303b4b1cd1db2e6804d92486dc6a84, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=d3c60581d71deeee76fe951d978556f59e93d572, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=324ea010fcc7917badbbe24cb3930725a515531c, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=fec84cfd9d1231cc0a3d7d2de39b894fea53bbbc, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=516915dfffd1203d4bb45545531f0a80e5396877, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=cc49e136bc2ed9d1f4bcba5a32c0c5c86314b494, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=ed0dbe2e19c521d9821250b68350d9cfd0647534, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=b62eb4a2af2fe090b0c9038055b3281efb88e0a5, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=3dcef17ea3479348ae762cb3821177cc8d5eb61e, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=10cbcba00f639f4089dd32273e0e53baed9daa8d, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=d53f5c3eb45c7e3777376b0f676ea7b7447a46d4, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=60b9422cc533846957cdeb90cd235e6b2585fe18, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=c55fa7c8c20426dedcc89eaac8bb58513ef54b10, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=5ee5d7c67541e7bdf8d0dc763b97612acc1bf25b, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=72317be706505178fe749ad52a24db78927ac708, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=bafacc03d42536ef53e0c02da2c47e0044bfcdbd, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=ea40ed05a8fb71057eee58d5bea93bbfd555b243, strippeddirectoryELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=75af93180461664dab0bad828ef8bdb23062bf3e, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=6303bde1281a3f9897788f5eba08b13b912daf7a, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=0d8529a4aa9f0ee2fdb2556b88e62793147ee6b7, stripped G=ks j$Li#G^)5=Tl5oIfl{(Cc  5 ] k q + / G K Q W ^ j n '@5B.E1J[ (=G($1)#  9&: , 9E  % 1(-} "P+P*RRARRRRRRRRRRRRRRRRRRRRRRRRR@RRRP4P3RARRRRRRRRR{R9RRRR7RCRRRRRRR8R6RRRRBRRR@RRzRRRRP6P5RRRRR{R$R,RR9RR;R RRRRCRRRRRRRRRNRyRRRRRARR7R(RR8R6RRRzRR'RRRR+RRxRRMRBR:RRRR~RR@R#RRRP_P^RRRRRRRRRRRRRRR~RRRRRRRRPbPaRRRRRRRRRRRRRRPiPhRRRRRRyRRRRRRRRRRRxRRRPlPmPmPnPnPoPoPpPpPqPqPrPrPsPsPtPtPuPuPvPvPwPwPxPxPyPyPzPzP{P{P|P|P}P}P~P~PPkRARRRRRRRRRRR@RRPPRR(RRRRiR?RERGR,RRmRJRRRRuRRR}RRRRRRRRRRkRRR;RARRjRRRRRRtRR:RRRR+RhRR>RRlRRRIR~R|R@RR'RRDRPPRRERgRRRRARRR5RRRRLR\R,RRRRXRRVRRRfR4RRRRWRRRRR+RR@RUR1RRKRDR[RPPRRRRRRPPRRRRRRRRARRRERRRRRRR@RRRDRPPPPPPPPPPPPPPPPPRARRR,RRR}RRRRRRRRRR{RRRRRRRR5RRRRRRRR+RRRR4RRR|RRRRzR@RRRRRRRPPRRRRRARRRRRRRRERRRRRR@RRRRRRDRRRRPPRRLR"R,RXRARRR0RRR5RRRRR\RRRRVRRRgRRRfRRRWRRRRRR!R+R4RR@R/RURRKR[RRPPPPPPPPPPPPPPPPPPPPPPPPPRRRR;RuRRRRRRRJRRRiRRRRRRRRmRR(RARRlRhRRtRRRRRIR'R:RRRR~RRR@RRRRPPRRRRRRARRRRRRRoRRRRRRRRPRqRRRRRRRRRRRRRRRRRRRRRRRRRR5RRRRRRRRRpRRR4RRRRRRRQRRnRORRRRRRRRRRR@RRRZRRRRYRRPPPPPPPRRARRRRRRRRRRR@RRRRRZRYRRRPPRRRRRRRRRRRRPPPPPPPPPPPPPPPRRRRRRRPPRRRARRRRR@RRPPRRRqRRRARoRRnRpRR@RRRRPPRRARqRRRRoR7RRRRRRR}RRRRRRRpRR|RRRRR6RRRR@RRnRRRPPRRLRRARRRRR.RRRRRRRRR-RRR@RRRRRKRP PRR R"RRRRRRARCR RVRyRRR}RmRRRRRRXRRRRJRRRRRlRxRRRRRWR RRRR!RRIRBRR~R|RRR@RRZRUR1RRYRP P RARRRRRRRR@RRRP P RR RRRRARRRJRkRR,RCRRRRRRRRiRRwRRRRRRR3RRRRRRRRjRR2R+RhRRRRRRRRRRRBRRRRRRIRRR@RRvRRRRRPPRRARTRRRwRR3RRRRRRLRRXRVRRERR2RRWRRRRvRRR@RURSR1RRRKRDRPPRR\RRRRRRRRRRyRRRR"RRRRRxRRRRRRRR!RR[RRRPPRRRR\RRRRRRRRRRRRRRRR[RPPRR\RRyRRRRRR RRRR"RCRR&RRRRRRRRRRR RR%RRBRR!RRRRRxRRRRRRR[RPPRRRRRRRyRRRRRRRRxRRRRRRRPPRRRRARRCRRRFRERRRRRRRRRRRRRRRRRRBRRQRRRR@RRRRRDRPPRCRRRRRRRR;RRRRRRRRBR:RRRRRRRRR~RRPPRRRRARRRER5RRRRRR{RRRRRRR4RRzRRRRRR@RRRDRPPRyRRARRRRRRRRRRRxRRRR@RRRP!P RRRRR5RRR4RRP#P"RRRRRRP%P$RRRARRRRRRRRRRRRRRR@RRRP'P&RRRRRRRRRR{RRRRRRzRRRRRRP)P(RRRRARRRRRRRRRRRRRRRRRRR@RRRRRP.P-RRR7RCRRRBR6RRRRP0P/R{RRRRRRR7RRRR6R~RzRRRRP2P1R}RRRRRRR7R|RR6RRRRP9P8RRRRRRP;P:RRRRP=PRRRR3RRRRRRRARLRRRXRRRR{RRRER,RRRRRRRRRRRRzRRRRRRR+RR2RWRRR@R1RRRKRDRRPAP@RRRRJRRmRRRRRRRRRRRRRRRRRRRRRRRRlRRIRRRRPCPBRRyRRRR RARR&RRRRR RRRRCRLRRRRXRRRRVRRRxRRRWR RRRRBRRRRRRRRRR@R%RZRUR1RRRKRPEPDRRRRRR.RRRRRRRRCRRBR-RRRRRRRRRRPGPFRRRRRRRRRPIPHRRRRPKPJRRARRRRRTRVRLRRR@RRRKRURSR1RPMPLRRARyRRRRRRRRR{RRRaR`RcReR]RbR\RRRRRRRRRRzRRRR@RRRxRRR[RPOPNRRRRRRR;RRR:RRRRRRPQPPRR(RRR,RRRARRuRRRRRRRRtRR+RRRRR~RR@R'RRPSPRRARRXRRER,RRRRRRJR}RCRRRRRRRRRRRRRRR(RRRRIRWRR'RRRBRR+RRRRRRR@RR|R1RRRDRPUPTRRRARRRRRsRRRRRRRRRRR@RrRRRRQRRRRPWPVRRRRPYPXRRRRRRERRRRRRDRP[PZRRRRQRP]P\RARRJR3RRRRR5RRRRRRRRRR,RRRRRRRCR;RmR7RRRRR{R(RRR6RlR4RRRIRzRRRR+RRRR~RBR:RRRR'RRR@RRR2RRRPePdRRRRwRRRRRyRRRRRRRRR~RxRvRRRRPgPfRRRRRwRRRRyR{RRRRRRRRRRR~RRxRvRRzRRRRPPRRARRJRRRRRVRXRWRRRIRR@RRRUR1RPPRRRRRRRPRRORRRRRRPPRRARRRRRRRRRR{RRRzRRRRRRR@RRRPPRRR{RRR*R;RRRRRRRRR)RR:RzRRRRRRRRR~RRPPRARRR=RRgRRRRRR\RRR;RRRRRfRRRRzRR!RRRRRRRRR@RRR[RRPPRRRRARR5RRRRRR}RVRRRRRRXRR4RRRWRR|RRRRRRR@RRRUR1RPPRRRRRRRRRRRRPPRRRRPPRRRRRRRRRRRRQRRRPPRRRAR,RRRRERRRRRRCRRRRyRR(RRRRRRxRRRRR'RRRBRRR+RR@RRDRRPPRR3RRmRqRR,RRRARRRRRRRRuRRRJRiRHRERRRRXRRRRR}RRRRRRRRRRRRRR RRR5R{RRRoRR(RRRRRR*RRRRRRCR;RRRpR)RlRR4RRRzRWRRnRRRRRRRRRQRtRRRRRBR:RRIR'R+RRR~R@RRRRR|RRR2RhRR R1RRRDRRRPPRRPPRRRRRRRRRRRRRRRRRRRRRZRPPRRPPRRRRPPRRRRQRPPRRRRRPPRRRRRRRRRRPPRRPPRARRRRRRRRuRR7RRRRtRRRRR6RRRR@RRPPRRRRRRPPRRPPRRRRRRRRARRRRR,RRRRRRRRRRRRRR+RRRRRRR@RRRRZRYRRRRRARRRRRRRRRRRRRR@RRRRRRRRARRRRRRRRRRRRR5RR4RRRRRRR@RRRRR*Rg@CPoT@utf-84290fbb7cdb21c4525c1cffcc11db3f6e3266ee912004690ddcff5a82147f6be?7zXZ !t/#]"k%~2_e#Ȅj((KF;&H$ׅy%WrwtGwؘkzbֺ;P4{}zݑ;Qgm$gQF։ rIk\/m=}c-z|4rY"T*.)Y&Լ5U =sbr ^b*̶h=C*C XZlLqbu3v4Uz"δyj 9;UWI,tgOtG~cr emwx 9*Pu62Hw2-2 m<ܥбa=(A)﹨8g_XF]JT% #]TU L߼WB-b DZ!cyj_5e3Rq:_Xf S ?L%S 8;)2b}# D@a/L4ؗ ʚQ=mC#dP -7`9:َuy:]9g)c1C/Y7|I93L%О譛UI9dl~ ǹMXQXWI꿬t޸}Y*Ê R\% \+ڧiu BFk )pÝT̚DUnsR'nkDbsV$IHAnC1dNs?AZ@2@e():64h(>G=5;d2dv2@bǸ6BpYp>✙FƩW)lqxpm:xACT1RdZ?/9RF <Jک YSǺ 㠕^" c.}MGQ/YW6^pw$ sJ++.M9XutF50%pc13LVq4۸>ZUO[0Zϵ O}eA2!RRBreN O7oc&ZI,ܯ|;ԪB`ʂA*vl>X%ҿoosa1U q@}rdlYX]^ٓ xs D)8eQF DgP䚫z<ǗͅwzDxCIjOY52l+sb;. LzHEOC0|^{̏zp}Rg% +<J s4 j$TokS]Y1Ǵ'7(mNJjhf <<<0h2~BL뱥AA&Sb<2{7Yo ̺aeKt?T7 'EiMMfw)JP؞.\n[C[}:NwPd+Q,7tȬEbM1яB )hw&'R臒<>|2OFi(уcz?z:4ƪEw k!GZ `ښq*44Ѷ>yi3/L>U NZV2Y '&YrѓH1O>qir~ mɽIG(2Z]ͿX.Ԡ+4iϕgyH8&v>oPy3C[s9gX??kyW=YWRlzO\y.4{pÝь~'1?_n=ϓ^W׃AB>l=lbd!߯v&o-QdYjHuiI rJ;Nlby+mÊ4$w[{jR> L)e1!d~:ua, .X y7hӾ$AR`);u\q6^KOPY?l g,iJ$'as^Q]J0|Gf,b/[Ha_n3} )d-8Mw{QUQˣV]f?є S׈NWj%dY֏68ᦅqDf8]G^-ZpexVѡPD'a7Rf=n6܋uZqRJ[$ 9T_/[eeRؿ[u JxzTȘP`(Wq׮o$C$s2*g@`2YΫ@{&,BI{τ@!mr[*y`vyb !["Q.6Tӌ~nzOUPpNI c-?~kcplm%./9ן 4  AfX#Y׾JϤP`$ߡEFX3[3 9˕) 8ܕ$f3OHQ rs\q9Gͺ{Vf!1F:+2-o^Y>EPIBGشZ/]Y#ZhrrC\|A\+RW}๐Kfu],oۯIs|l]IʥiR\siX((ZpSKXwCy1=7ٞ\/|5VB AnŐ7dMB˂Fn$Do&Gݟ?uߨhIƠd]۬t"`D?Wp'3@׏ )np`]ϯV-Xx- eC li\ e$zEe?J-ﴒfv{+jwpXSuJP72L0bf-@YϔwWL,uZ +VUBRua+\OBȰqM4Un.w̷p UarZ^ex"i rDžR{K#.#ۖ~# ;J.*LUӴ̔n_O:;#$A}/8ZY)Uqa[-g{͜^T6xs+5 0Bž4 FzDѦ 1o; ?n բ?o?mxR=->J jdgy8~5rrEE>/ Jo%p["'uoieˮ'tZ1DEE[->lrj3\Ccfۓ_Z݋,\d in6FP$rJ.?cX!z:2Ǣip6֐αo{ڕ2P/r{cOo#kKHʡP˱ژ7NW l+6;#u!2@W_ 2iߠ2aбVY!@̟izCf%2%W:tv*_"ھ-2gO~v,<v:=I9u_sW䶟~ Asx wp P{D B -4I슲y9CAy5nm|JёsOyoHl2լ/HVa m_4:>Ij6 u4пPz/mQMfwh÷Eg "dD<, |ݔsGt LBğiħ[ ^$ `= UxP8 5^`Wr>9pӓ9v;5UDv%k/jlsLhUUh  i/]O*j 0ψKT9Δ|5!gh M6[D8bIBeY`^Ids>` |̽ʁ̪w}O<^8UE^<9_d<ҠMGwI1Fz$;,n6,EEZkoA 1dO//Oظ n*j:TZ3EvtHxA-p~[Lu"m2:L'>]wis١e`XnsEB;j&3QNB&S/5AB(GI?s`ohA0l߂,iIsH6Ku [][ On[34fad/x,uZjiuAR]bދT_J6ol'I #hLzwА]R^<9-QjD{_gr{hFZ8P6֖c4fS\҇T͵ɬ_B`M}^,?:s PM/Mpg\ķJvd;Hn( "\e`]%nvDK}&d4?ڽeEsH'1[ im!9̺Wr2yɅ^G{i)=Rj/:yIr˘e_v{D{eȒ$W_O/ΤF!+ HdWAw;jkQZ_Iz^3>+:-]$<^|(b6hH \yo4<*پ*2==$kŊsz3nkMPnϰ%_e@DPjEw]_+WQ:rq+#/^~~n֘eJ]  8˞s8ag~ami1:tVyCnN4 ެ̑Lr4eYa>=2~db.pb(653p0p$-_I=jJD fzf Fg;G;=ՙq0w K 7TgWņp i~LZܒe|ɬ| D|~Q9/װ]o&I{׹N$:0 [ޣ׽rD;2n:;I4!AN,tTJ$.+AxW1谧bfHBpS5' ]ߺYgq5Q+(0dj`_qdS|Ï=F}3l05(hCP|eչΙlbACD6ɾ<Σ(l̀ŗ҉⋾`2"{jziY |idd-%*WF@߈$ f*{}MJUxnfh~A[2+6k.Ө xo>7yVz},dd,㻤AmudYuZ5KtV *k#SyƑ2cfJ@Bs:{NBi{3{ռ*\WmRLbu^Ǻ@Y*0~pԏbiUZ^V@\[;0A{d6qs RI iPjyDpb812cuӱz~֑6"xJz0vI5$!AO&4Øo#M~&_*rRΑџ%b 5g<9߲ͤZM5S,NDK2ĸ{c$m?2U09Y.Ԇ3c4?L;25I |[,V# =JͫI]sl_JƋz,h23 iSiR6y/t5҃šݞNJsfw0-g^2 32q '#E9t!Sq:{|0|д"X-.i^e-v&OGSORm~`%=^CWZ#Ҏ) 1NIg%o(K!R`=W!Zt\0ԨP5%I|872sj$c4qEj0>:pzՑ&xq"o/d3Sw#JVZNDfɡXBf&Rg T#40![Vܩu!KQ*Ѱm\ʞP<渆X%YЕTQݮ6 0됣 mf_RUhn9Cv!]U)뎀dt2 C(eɼ B>U ĦѼ_)[D;;,9R$+a~F8jP{#b= j'J7i9yc}k9J66, =21XW^lKVT_'j4T=5t(*Ȁ|QFYQk n>3^29,Q:Mk=kXpKך%r1{+5Yl-3rE%$E=x6&g^ʋ ~ZW)*^9wg0V+|-'0%C>iopֶ8U,t̚y{AhUAv7lLk S&;}\HIfs/e-՜.$u`ެUEyE؉ʜQڽm;3f+ܶ r_E"R,=Hoq徶f 9{bPY۩TqW9 b-t04q\єJ%-:E<5eZj` 4onŲ>2#"57!hc 1c^R5q(/w㥫`YŊFP⢺0N#ʗʤiA~UC8RFc$ 3H^L!G-L즡a+Am/$Ii-2B%޻L`Bs9V)x_(8xBߦ>rM:T` UNF4| y#V챓f`E.)]-oxvdNك`2zS1 H"F6|N~mBi>J4@):^l^:3kYM{b.V; q~!:gv 4]O8=Q2wP1}d8*zLKbFW{.A!U\Xѣb[ʓq{ (Q'Hו&7vews`CZ_RIBH̖Pm] v~LHGR6[…H5# tFmŪ0FTϧ *jܗ*~yPEYȐSjovϱ Pv5j{E[N\\s%H*&1a2a0~Ƙ˳V-`\fJ3ywH,kl"8y~3оSHCF ^l_jN0GC$d^Rx +kt2]]"ׁ)z >^=}PP$5Xo Eq\tuhS~F%nkfޛns<9ٸD3~*Z[]Mjb&X@2 _[02+Ĩ#F筘[*z)Z]Plh f[%Sdd"ikLG0* V;uS[Fg5m.K&h[X;@:$o~xuPx*$">UI+HlJ\a-E!1^͸_V;!v MR:c9ƃ7PӜ,g[nG0f\+ů" @a83k9Θ`xpŎCywh*0Uj1rD}}^X uٔ4Oh&z!:ӽa{e;PBf6$_st `+R ?`ѥ10}~gNw:&~{+d:ݺ4umʒ|]M@A[ꑸ%DC'_|xOgGb-<\``XG'mpmR@a }(@7:E)5sOv Õ|t2h`ց]N?b]S?%),mׂ@GUзs64mEvXת|NXIOt ~HCˬ"V֩O6x \`A+yEYS)S&B4 61;:@.Qhև3sӱ&AJsst`Xt\9"DKhr2Avt`KuG:J`K0u{yQV-7Sׅ~.(_RIe5IKיr]5'4=zD[~Ta,(EpXNE.+`v C"Yq[J)L U;}MKqtiBh4z1R``Ln36w+ZOHREOVPNYÚ 3y.I6Fඬq brVzN~slpdrҜ~h £2{P3pPCjɨ?z9cd@+Ta3c/,M\Ӗ.:%7AD`y< ߋ Bxdž\$n@61?\z[i KYf8 $7R2g.u.%WKP̐)fjzbfS۔X}Hl*F,5T8SGt]8NA>|b$ mE¦J(5`sL21R*"KPR܍>>Ԅ(o*6pOu1 u?Oj=m/<(*{gchSw|lbc:S97)!ʹk14wbY:V3Kb.AјWxUA-Kּ)-RGjtѥ:Vx6l妚fu(K0dǃ*'nŽBՅ'Ӯ:$qvLT3 ¥9 ?P7lU z P(&Dh]8NI&ٱ\'HvgH`t 1:gQg1q${'պjJv2 ]Q. +y#dž TE"Ɛ}Jrǎ4I[ʝ(?'?JHoܩ K#&9K˄$pqJm>Fb4jiOVN߸k#:xu>mG6SJ/n;&lnM0lduIyp/'.U0 M2yQA}k)xedLp)V8MÊFCS+ovi')cb~EUxp;I{,XTs_Hۖsc#e#<@##8>yǩGm9L%brME=L-5Л{6a.RALA;͌7 ;-p`[*9ܗq,] 2" _46W8V6t'G0cziz:m=nk>&#ށC^I)HRNg~fLs&66A$~ bnRY ,nCKbrDK!nOiI\hыU$}WEm^/,9Gs7'?)dMS»鷨9ݞu[+"xQ 7f g?qWڊwF ۰l`!ՏH@˷6⨺-LԦB>)#ܖctd`Q:q?复xQ/5 Iἆsg0;Ee*—o^;z 4^bØݣP;0#0BmDa s)sx Gn6U^&J k6ozJ?NY?e;45̜k=&]Q\dz]ǐ踌7LVhW֜@ʺ`XƣrE sۂHjd=HMU 3pq~Ҵ; ͊]ۏZJ$g9@p} }LQn3Orިa7/!A y/S7N F_R"sYq^^ZB0 RWQm=YAW9H`;O{ӪXӱf!o= hʃ˅e@IeޔW5 (* rt$y^šx`k)a=FӉe7( gJ ĊɸW'~ץ2h~[8ܵ3?WP^xtk+-v{^$]% eJ.~X1z(ɨ[8gp!7r+:7$#2nmّϬo!H k4%(l6,Ggs ˇ+>imM%b[#SD$`:9aO[۷{Yl!%1I.Ex~M? v?zLFѪpүZGxámʛ` G&KSM}LzYD8cPkKh #V^t0PNn1˫QBXPa{pX옼C`L܊I=n:5Z(,D7Kff6*Qr>ݍvq Ut%$V,I"7P.x++-Va鍡f\iNr>Ι[Tb-Cw RX\oniʦB%]Z.i2x---CʏWH.{@A#==- K;ٸ:Ǎj Z2EGj7 fod9l ,l,7Ĵ$pZH<潦dw%P!X63/XP6l 1f^Ģ!٬7+EyIo{jÉUg;.JѨs-t+/ 6{0E"d*j ㍗pwJ˛p؇,Rq-B3TQQGs vJ+-\2f2Xxf% 9E|W u,CNL+4JtPβP w4[1[>5`"gj?$*6kS7QHv6QN8Q3) FRb;GIeC6jڛGKGuX~;+ ,7Ҍ)vyEvdUK q6sҕǔ\\2^m{Zs\Vkt Jzo'SkS=نy_sn! ~eNa%Ks.恗NAb6KSH~g /)${Ds oBAE$܎݁5ppE\{ɘqgiP"3df!qc~]p7~mmkIۃi Ra ]b 4jϜf{$RTx7(ب A0)F_D?6yapiՙUFz*]3eU$Sf~;ZQu0pcɡ2Gl5#7 ~ 0n A*4ݑ%k a'f+h_M3ŴxWH^}"Ser[zi Pծ$)}+aN?_@ǚ@w7Txɞl.wv\w\٦ynGƭ&۾e=4TJU كɭ"e#, 3 մcŷ$^)dDƅsS~EibcH"/$=InϾIf5B,H@jQڃܒw*)@_<ͻVI).H2>(DD*i2X|e#χC~T:|z0iHك*]`h>ʮ8'&CB30HeZKWBegyw>Q"YvPdC㨚3-':x@h渷P><u3D۸2ݍB&.+摹D7]!(HA!A#~ L@@{jZ@ψƀRS8 qJ-[gN`Y1^>RTuy&N3PVJup{ `6y%NL7hp<ԟmX{ô&|Q艀w1](T/ښcKїJtNSQh$lč$aȲ O\.RU TȀ4o/C "pɎnpxe*Dۺ@(~J6&?50Z~VւM $h |JﴌL`8)c@z_s g'EoB{7ܘ,Ǝ'n'"Y-q yy˘eQRdpOMt:e+TB5%W^buKB]Jl0CV<X>%hGmz!%Q)#/|}j֙w{M/: _}/:# -P-63GCKAE X}Bg;K,<.  ^}0Q Gch` w .ν2euꨎ73+!= a Ls7*}r_o3܀?q*M/YߢV۸F% U܀ ?RС-ͼ,ooXB00زr]SyzS %jarDT-5 v(@.ڙEK/NU*\ĉZ7#) ~> eѭ#2%ҠEnFu{u? 8@%ztޞ̵-0Sc?YL?_]p#;tE VVK|SN_l9yUi2&mRΚ}lqs]x2wK^lWYHM t;֓X5>o$\y̛x|ƾIکÛYkNw%4BR r߯c~CY,ͮ #;r/ N ~ŐR}GeobT1$.M)Nm"qtb([[Gxh Ɗ6E$Z#0@K~ic9gjpSCz-`Em9s_K" ˶IbSH44i;M;ETZs?^])q8SԺK ,,j?x%h(dK)"‡G#Ù-d8ӌ'PdҟQo'\Q>[ĭRk4h{7իPchn$ȐV"E5{?ZP!?UF'ozxj@PF\:}F00V૿Pa,$+ie>ƨQ*'&LP2|}Dd:/T^fg*97;LLr ݫ׿S1&3H +`L$ߴyMV'ZKQ_vTf.ûPYhP4WE2Zkѣ'[> ĮܜBZDCvPD{,]8-zיnoIe;0Gmq߹jF 0 >z+u\.~RyBo /%_kvo,L ih3ZE%H{]}5DoTjQ}-"ZW"qn< *TgTa~ EU,nK"qfP?sp,\%*@y\J0bkeW 1lk+ĬCly!hRB88OfHE#Cd-X@k8DJ\b h?~`{oCD\,) 'z.m0  CH DBY/4ʊn`͛: Hr-ya4UZaGiGQ'3Y4*,kba"\bVaTv;͖*7t} ]ng"[V%j> %^y D?_}H\YX]gڼfĻs ]8ɮǨxCw𨌐ks+V֨eSV- z!Kr xLƹۯr$R^ N/LմX]<^VG?1w3"w?sNҙE[ND4J`WUBnϢ诒'6۴d!?BȾ$tHK62ΡLF= Q7"&0rr/ XٔUon[!Ϥ#2A?_bOO2sS.0Pt]j@1L,]`bYsyۍ@j{k WMK,5wo+IFj@G *vf.AS6`yI3]٩ɭi`dcl>**[d.;'J \uLHK8({]|~kAwQ>V=1*?W#:-JIPV_L෋1?$pt.k.xVZ:Z C~P抙h zDY<_C̈Gi>b e[r|8X܄ 9 +I!&W[̫˵29NNz!jmK{Ek?Qc`?y46R$Qnj qO({p qZ6,IPYdƓ({RwǗQٽuK=8h NEq^ʷ"J>S׀0h9E D{Q)p(\I{/OWP2 ;Z:@kwxDk #BVsyD1?Q*2yԕ&WVVS1Fc "+.PEC EdP>F2 ]hBe8L&͎ѼXadN}FvWA*cqd4uWF|k`B gatx w8{QP>'yhH lxںnLǻZ`T 'fV 5lƨZ0m>P9֯zˤJאSxbPZ1͙;^"γ<^nYAedTeݢCv,N7OA T }_ Do" ҉WtlfE|[va}kSB2ġl1W9m!hw綗6T(0+N1~6d=nB8 JLXĽD:WJ?sRz;| [W84 -u 0TnÝb&צE/Q0bdXd4-5L2&ޙ~_b33AjLSV[7L'C62Ut=qɱI>:]䭓pMf}nqX9tbרߝGhzrc CoMuU(;hbԤ)9?"jJzX% KʙdS efr)P7L `9](urFZ 9Y?FfcKrb < Nmͻ1fl^CP`;#J#i}z_C3k[&Ax^bxZ"[GHz C ?ԲtlZ]Y,Q9Dž:3S(&};iTܮ,jc2e#޾A#Wz =^GW$N*7#rא+_}0 r<,5`D2v@䇻!5t3+¼+ ?|tqaKYO,vc m"z.>ä;VՑ*f *|mh#9nkTQΘАԪZT0SʶߩD&d S}XWC58 m>6;$Yv)4X"\W+ӁۛaF#qJW?Etj}ӜK{X k~RoIř{vrK_ Lŗ 1Η\biOvp$ Ko~oJtJrS5_OQ- luCl4LցQ%{ 3v]F# T7|Um]?nuMk{ oV]1byFJ\ e\ٺJܣ?$Y]h|O.U)63-JhҊM~ veoh"#cA=&"I 0R2 K_ 4A&x#Q4mx cR:v'VFNBagY~bZ$(}Mq0'+crm`c t*7 ܠEDVH08.~$84oh 䥶P xǪ8<ƥDqzI]ϽN.6No*@mRlݺdO5&gAW: ;KNŸ&Z!km԰O9p]Y?/zT#jg>Q-܇fhzXj$li;~ ;cZpLn=̒O`DeoB*G"F9_z&x(y߻"Nz V0X'ե_D[,_t8舮{k606ê^m׳1Egª!xi 7x驠okhҳZMɇM~2^0hV })0`m84pG-ԾEI}S":[ġS(T4PBPbjDקX:`Œt}op޻AV[ёjX}]yC?{̱~Ș.5B#ޠݴQ`oG2$'údMiijY37vu%!=|`?}v.-_/#fn*p{UU'\Tόf"C%Ci6H"PMWj2 1 4W#\ert4K˾}u!$;'V~L70g70> GS G,d6G׋թp[DsC*-9ã\^mn6jPY'}X =.x"UekrF Iq·,v MCэS>0 ڶd]CgyUf #aڅ^BC|~6V~JTxB g@s/Enn' ,vY(@lP5k=TM3{.qqFnJhq 'WILb#Ol-W!gR%fДZqke4ZB*Jq m>um!] 3BvhYʾK&d v 6x@2Ą|5 f:6 tecd ^qenD|FkT‡жsdٷ2pQrBbe[C] /ÿ`97 S Ӕ`Eik]a>Iꨔ昀5k ׮7C5f[t.gYfon0J-t)ܖ. U#6h,s_m@h)Y=LET nؖ l>B٫>&WH17^Gf:3*<+5&1-=fpZ 6AK"z'f׮m/b]gyѷ_*s8t@xe7a2.z=M8f( -?j4QMLP 4G!V(vMkDB<mELVKz'8 t@tqIT25)MuLmX;fBEP*b%D}B]iz^_Lp|ӏ̅EspT}w`XӅ#-+"jlzϯnkZ/{_ 0{V< Tg H4faVBY*}gT'0liszmZ.>; S>>U898M)Fן}q S»å3!= mG-߃0j$P*n}cE wvR =jpeF,ƀj \iZ@ʷtv'6YCzSx2VZ_i>h "HxWT ۠\V&1j߉|*վm:1=3Elk)3C_2 ~1V/Zz9ʿuYě}< YyZ~0 ;%&TF(\5Zt0 w{eU hfכ4/ |qT/$9z\s0Vq忩"o"E?-,1 bT]-5ތk%U:]BϺ3ޔ 3JT0&>BaWMAtW[]KfuŤI6lIO}UX‘i9փyߖfmƉ Be5V.Y|{;̱ͣSD{"*[{OƏ^DR,FN〥8S741Ba5;r o߁5ؾ"oefk[^!Ӎs>D*=3 Ճe_T R4z.C:8U9_v8i#R& O{Ϯs>VwW5jǢe{:w-x+~7ܥ2i%pLoPq,ÞrOq~vov o~3ofz_>sC.l L!9~nTi( Ƒ^b~$;*e'Oذ0ozSZ!rJyo[ڛ|>vFrgU='5GdKJZ+Bd_4tun;zUG0?*;v=5ܮҠc'eGxaD{6?A{qy\LKgxdz- k+@I#ԒV$RYlb)H*Z>Sj.!5 p1еl&Km>gݴM-w&!N,+#ҒɸtoXҳ.FK֚g^P+Xox6-Y*!U!{]ܣ}0GNh&&Z1qN~}K5iIwpP#M7Ȟ$AMIAbsR&"sM;Ha*j0M ezeZ|~fj'qwIQg(C\0Ut;>uHܧr(o" {d.|8ڤ8Vzho&!Vt;Ibkq e5I'p U aw`&@ řw$7/ZZd&'ԯލ@}9*Jc0p㳺2_1ImnP[L׵ڐdh_ye=o6R ƴ'mfezn蜿Zt*`d2 }}Up|xی!H=A^uIi{!һ5滯" ?"qc2Qpgjzڹr=]x!R|,[scݪNYmulFr})fM(6)*kf")#=ٝǽӖc[E y'cA>WcZpWmǫ2I :B4KEM9E^i%h{6!_9\#S{| b}jQ..avF5EJ$9-#D$Os/֤e [I# 1vY)Y' AU=&@/H 5A1QOyO%;O3 aGeBDlY?oۯxJ7kP`man_I8_Ddl54rp U+A|xp[rHip%ʰy:ָ2%[LUl36S8SG^rZ%8@t% _Qj'м>Z3|Wr%$P4%V7F0>ߦСXA+t1A B^LLt*=P )@d)&Ir}I؟Kjd޸:HegG ȂCOXNYu}urˬ7Bs*{h619v+hˀ\w,Yd<1GEEVQYaHFN_f=op'cn]hu'Of"Q &V.:\q@iMQlj R #`ZG.lz c>ka% r+PnAMENBp@ 3CAǺofTO 80Y"4X8g#"&Gt>J2'j4'R({>vZ |ݷ_<$P͟/3-]>"k_T-2m*h.KtH1 ]`m| l$ D8C8W%j !I r'wr9 yMVpe'}0tz;*ivSo&6\.Gq R?xn.'^Sn){ wY(D'+w7SaGNZ yЩE([xfG)nRI1hWVH<]Y@ջܫ+e.z<=Uߤ'Y<#YW>ߌ!.k߾qKhGLrBWluV8$bi%ٳǪ9c/i`r{5FJw"q9ˆ_huȀB~PKMQ䲽D hrCxKq8Jg!|>7 SwsѨdI]Xݔn4;۳Uh˯dyl+9{[֗PZgW͜KxAgġ"dA! 9c:fek_#)9QWԼ!NШzq&F0S;ᗾq$R55ׯ`Kz<@`xw+2(oUeHz#0UEsIyovDv M..IN^`q@{#' 5V[IL9 `sP&ڑ_WnLU \->EIryT#s]>mKl)ZSrT1LL練iZ1MYF0eMaC)"ocC7C e۸S!AOVrP1cP$Ү-Tr?a5+#;2zeJpܰ3'mq;#8NqC1ކϽq,^%8 =䟌dF00Uqp1@\MzuW> ,P]qY~$:DBrZC>dzQpk\A<ο["w.ޓKŋ3EFڜۅAuN1Qc϶*05E|1V-@~CQd  Rbo+|o.\ :e^{G J|QQi[Y,FvF1rh^Yq{im/HSPo8[ r: 6}pӌWwcbċ V{K&.uA)f ն욥QS3U\;)j>lڥt&xu|#ZظM6XA@s2'mlPTD*B[{bfݳ:r*>ҶV:-dap4{hX:+T%IAt% zR-]BܸY)҉U5r:.0qE%{zM`9:! i\yEv2kLo*F1T#L|4vxC b"1ռǾr;RXGaNwD `_;;oɪ];CĹg*w bq]"s!p^;tb*y38"-IuxRog0jɚ/ #,u(U>,qOOl4, |PY*-m߀.|(S#g>g>sZ72NvfTSCw4x7y DS lҜ!a^{NT^\;H1BVܓ=)yzZw7yNty5;HDž?޳TDgn< RBvDK@.st#8QYn$)(A=S7=ċO'EoMȜ۝ [n-OKPRp)X&/~_aCQK6BJ O0z\|Iaz?J.kٽxm.1ݗh%Zqj'sO;DGbڨq\m<|yq_ $][ 8x!`nqٻaܱK}bD@6 2^|9#S}NV2^ӖqFc{WaLÙ@D~; Y$ܘsԙ-6vc|`ښM%K; *yy=:pkYEk#;NjqXΝ[^ނuedPj85]͉Y}=2 0<kClM2A8X#~I%DKˠsbm&p>\2zD JӑB5ܳ:jӆ uIt%^QsOG^cB"ITw*>QBQӮO"ǝB;RV#xcȫad'v>N! |Lo";i EbLTǑ*I˯ E6IFeli%pC9n? W Ē*[-ݣ ߠRuV=hJxLH?NDQAO{M|qx˱e;FmNgab̾Rh7|~`Hk佲!Sah+ C\]5=ʘe_ 46oznj!/2좩ig)}2~"eݮ`?!$][x~2MYwf}T}΃@`~\@M*~螲. KQD \)k4ty_ 6 (r}-? > 8[ FQmFzI8N 3!o RtNF1?޿!;w=~;%JVV |_QO#bӫ4:pkkAv2b͑}:50WCM\wNV0%*0CW9D Zl).x0kl+nqδ45[Qt"ۤr!h, 45JVoab02n%}=t.NjА{37PcBIŒ+J{5! Sf54ٷ>2 ¤aAeQ}JAq#;ٓ4_GKZ=,Rv~2i'4 s*пKQq4F hnHNKe Ί2y⾬ *ib.-b#0aߓ a;"o,n^>0Tڡ65L!a/ͳ' VȣITgNƓ{:pϷiطJB6^F%eA V_GA[VW bq7CBewqZ*EGV \߿'3J04.Ip A+l[66!V)BL! K^ ,`>LC\p9! Y-0C^WiObՆXqYwd nXD7ˬ&Cu_74\݌uRQCn)[&r)P'!~zr.qa@Ε;}- u %yӤ{DwЇbh#`jU0Y0ZNon ѻc_NNe4˭N}5w d"~_>5ybJ$Tm\B:MQ2^<V38ǫ7V,wa]W5 gF#(f`?12x>IRL.3 L /YqQ`r[eJNks avB:hp(Qm9ZTUT9OZǜkJq[jh1:$O]RWW1]}\_dY1 Tq޸ =~9kFA$M)Pd>&Sj/B-JG?m%L3#QBoϒ#ꁆj@.cgQ>x˔{{syrXhcH}]ָ$~흁~LϿ!tvNd%}^2ڕD(fZɲr-)8Jե2j9yH"iuX#fV@qϕ{D$E*ֻ Mh"h?Y}t@\zH@BgT!lM VF>⥙u)q7B[Xp5ܝi#Cn2ӂ܊ɑ^} 4UE=FAÐUnnq ˜Bs( Vd>Kwњ_װl ppڝ0ǏY4;>.f,J}AW` w_K"^0ś,gQˢQKPq^00碼TX]|!4-s!Nx_z`gC"1,e] k6nB{٢7IۦU'TڋI{8?~|)' KZu]^͔;Ni-v `twFpK e\٤C (_&r A#>b0.MzͭU>GyXܑ s'z?1B=J}6k_܏]?lKµ?, M\NR*f >^/IW,Io,W~|%X:>8l8iw/$i$)LSiEOq,bXkU<b!]vMX߬rc)P~ƋE@Ix|<@[W; ;D90@eTLݼܸZߺ-jg F;N=6{jC1(OC}xUP^jiAg-[( OÉ`'6P )-~Roq`^hd|!rcgCb85䚝( ۔1p5#^շД "KQs_;JW f[WG[C‹i$w_<$=xɽ t7cК^4-R؃5jo/oGە7QAq`~D-Г"d6Bwyzl1.Yy (& 넭y] OոIӰ T g6(A1N9y3Ǻ~>Q0Z>@[LeU_ᙫ@T@C2beז")Ε+. I` qHA$(6 XoU5&;dVov](bۜ7tZ&U:Ms~HՄ|Q[KkliWmk*j=B3kiq#y&P5?×&JLG V"3JgO}r;`jLk xyA0# ΤK([ǘ̖9)$z#\UД@f n +\,j攉lfpFˠnSeo 1nsALAk&nv1|qli|Sh_52ʈ3F|J:*aB ("xVQ0jlq7Ise"[)iՔ &0[f9NV|KYQyBK&d}j3tҪu'麠k;4TZJM4AbKBڮKSڞ`ɧ܈U,^!4Y1\3w &e>}ѡr Z(HrB{ŝ2S%g3ܹهqax<5E#|1o /sTA]^U3=0_`䐩ed oi= Vh@u`2 17\:af |/Ly=\Usځ{2|9tgo"MiqK &F=aw0X4y׮/&=of E-ʒ Ǿ3cNM̤^s'ΙS/Y>b2E@r|~:J PeS*Cj|vHgUS#|oqqy s,mVq3M[G˜9g 3Os e S a Lޱ.P4gc=!phsjT Q4-ʦbPpzH@?妌3MzUT r\WΓ@wp?RG-L!-zCy W޿Mw_=ރsc!5~8Z1}'[_M1=Ҥ9/3_ cm/wF8" jfecbp.EwVc71Rfrpu1e>`i%ʕӃ̛ 0ѮT;$>R :U Dq$P+3dbt܋@ŗ܋?6 QXL!w( [g7tD复svu-h M\(3CoLj$Ģ墄Q{ 4v!wm8]*U2di!i'|oGZ&x1F//z*X@.+fˣc,zcTo{|-qm(hԂAIR>p Ix)&ylE*J+Էkձ%x+/uYS.M_=,:9W aGʍBxY3jS&iNZzJ SpdfqugIW#Z{H=˓ 1[0S'|{ud7&0˱tk_Pu<*Y_4J o?(n|z7&ȍЄdRᤡV_ا=Ll'%w/V&t5#9FS{)hWP \ZIn{ٜƇf$6x)^kܽק%^3g+"r̰[ dit؍gR߯A&- ղK>)6ek}VT#5ٿhm  ]\T\X <r8}3vJ|уOq8Ezuڿ2o 'Q+ۯ@+4/劌v%>Oٖ}!Em{Q;ӋLeeFΘT4e}s/ [  rkL.wG д;s <H7roM7ʽz:wmG89 YNcf+҉#Əw8=It៴io2B67իoK;& A8+rFO£DR MDBa-0R!tpYEFZ"$Z;Wg_} ַ&u 1J5og%[rwx;_!|-ǟ$SQMÝ5RkkgBi+HQm'cGfۈu:r.*}~<>Q|ﰩ֮ 2._DL"sv_AVoX̘b M%E?p)VG%Uk^6 tFJm2ߺLCgP|@t %E1kzV# h󊍖g+te[Wf:d^لOD)McԺqߞT\1;w @dk)r؄tFNfS|9փv܍*H7g5v]FSA 6~VLvppC&x~"%^ȌM6!ޘ3-H- @v:PlίHh0ymA䗘ߝV1LG :C:ΐT(p-ԢqaQ3p],\' GT!:78?`p/ Yv?uaB%P/н}1 M|SM2c0ҌJu)UO#,;CF r8 6~l8٣D9~z }z,(ÂTHIC𱷁"c"\NpjL͒mR8[/J SOɑ88V1 )~s@]:?`\cS-9Ԟ`H&.4^z Η7 Prڪ(=p_/ӯ>:ȽNQl.sn؍6W%4R*.2Ŀ5SJ\u ?>Ye+NEXpj|z =x8 9s830&9g,qoXȡ֥ԁ\ *l3>'9RA_^wY?fm֚$,pّ]E@}Lf9]rɆ)y1ZfqhB+-ʼnSsNҗiNs 6v2Zޕd_+%;W5’ʍidIYjjv a-{T:ޖHfVBx4L h\Fɞ$7.oyY@r[>] #2?Ib9# h`/`sݠ_s" yTpek.7Ήy~H 'S[= cZOeo?N3H7eX]h<l.bvy)A4),y|э ?Mm㞺{Z|4ߎn+~ԧg,Ԙ+gx.Kb=* G61Ϭy/||%5XWB!lj,#ipaFECp Fظ2b\oZսu/މ|Gsǡ`"&.͉vIb s]kHXrC?V.t61K {q;H I+͂M\+^`^ĆQhcFfAOh^PE˖*EHKsZ"1 |?[ڐw^Tq%q}jL'X1szyZjO&Q53)7;b: Wi/ e@P&.t#)mχ~c7+4cfbANRwm+}׻Z(7OPOdmҎCמٿY7Ez?Z PΗ۵̅ΡY]PW ;%1㕛1K.GiIy>J^P\J=3?Ttݱۙh9r鮄v?߯rZCY%R.niY# FPl{ն}LMKgs|UNG|dn Ҭ7?SۃWTݧLibvm [wM^ŧtD} _By“8] @gW)`x/zWngmPu\q  r%_ %M-l+R0$^ywfH>-ǵm<%זЗ_z! t1:Y|f pz+9mj: F 8Jq,X{jn,h4 =Zbzgs 0|(orpV!v́en\h՛#Ss|*p6Smq?"!u3к]@GqEn/]v{Î!'o7}ۖ%ućHt(no~' KIhв58"ӸɁ[2,'Lxб1fzvC#Fp͔qL0XB㹚tbJMbP-[tWS9&_A&l_,LWF`lxXb9XK𺔆+e` <"C>'YuK(yz[}T bv">\gO7DRQBJV%< 1 C~BX&h)Ud@pVÔdp-}*jReO+BV/ Ǒ?PT# EE:,6?fl1B 6cAl*=b2҃ppBMqağ?x5:7!vybW궤ĭZ'xXs\)?͗Qjo4Ho0./Na:H)=7ᕝR@:r\WNݱ(EAwm0a2!×ck ӊ6a;?cfe]|]oZ Ca>ᙨ)mU8т[Q T~k2rS~.z4F5|SlAcn]t)!ڌ!%.<Zoų.p4MaQߡNM/0t[$@ϝ)%3дKTt+@Q*N4"XbCqldKeJ0neD1ㅊg㕿g8|7PA V|_-X+<٧g~ LG 4C҅JT?l=8j'kWuz7?p\t4Svb Q챤,"`k[Sր> UM/X{N.Hhe P<;bfpXf|N!.Q/B+LSuDzK7XQw4<+_ijʨkڢ+<&j1! 劲(' bb]@ 3)}V'DY0 ]hy4qNjSB2FW}/9-gv3%EM-iN:svj9bp8p OjLt]&G[*CR(u6{h*8`(ξī xL 1'U,@n|r"rV'.][kn; n8&ʘ,:Kr6~!AnٿwZxB7QuVPU2V3υF60tϮ6F^I"H}N jK5cy:lÆAQ.G$*$4tEp$$7HroQ1;D=Xg8jATeZ"XpWS>/|[?y`~л\'3by̺s 5Q]ԯR=E]@ld<Լ2n=Ԛq=qu;x1NL ;#bLX 1 dΓ;B />F,YlU"ɳfSD6 A,omB}-Ǧ(تXwriw,˚vg0LdZ줪1>*$ޑ41)M_9v١'vgh6~A'/f䵽M9zz t=Z5BFycQ=0Lng)ރ#:D8mD_x$8 ] 9J~)R24Lj^ar_*҄%$;K^}uύOV+P$mz]:q LbjkyAYطW9>{10Ⱦ86RiyYPx>*Mħ. >ntO n] vGaOljLTHyb>ܭE2h Zz{G,\kBcog5iW8O]8v+g'H}![Oˢ q69E{$?i:0\>6?;*9Ė, mйE|o p 13.^S\MDE~%| {X1'`<XJ# k_:5tNXWטZaƒW+Ev5@No%ffo1Yq_S;sp0jn|g4_]TS75Z'D}Jzw-c,RcAjO< xq5@ ˋXuP@CrM|Zվt ļ~%Ǐn~-;_¦qʞ++PXG Uu<- \%{G~/nj(1Y;MJ z gA 0&'4Q#KUH:=s0euD"R|l msX?< L@n+5 ~w*449Gy*5-fuVprY=?Ȋ(ƾR__jl[3oq?[5~:~M7!iԙ'rr^!O[2)uSÄ#& SR˿G)C7KGm]?[d S0YRC5JJ5HB~B_v?AF}'DApfKCꀀJ>};٤k]AW"aqRLcB4s*`RYC%"ϋcWG!,&d3 MJ /5iJ7MiϾvM@/ |^K^\,qb577=&xOv]Ū>@oBLl]p3 lyoˊyxT=HIѦ1^{z iTgoV^?x(|y<N9 *j"J^zJk,Qm<`Yv9 VWfA /sؔ~҃"V4Mͺ:TFt&q8]-<$lHUoZӐҒW/udwwmȭ-@ qޡύlL sk[{JHX+G9R~>iwPs|GmvR;J uӫ< lBK owj_YٴP Fasqh- )`WRVdpy<X4bTƙzZgwIg{ߴRq{# 4 נH=/>ǰgd ƃk4kE7oe&aB+-D -h녓-VvP=xH2eo&At't@]\bCb:nDY,AOtFJ1`ڭFn79M%T(K~M`)ڭX~ԉBX[Ȧ4(Ar0vMv!,u;\1C1U"1k )Fzq7jӊUYPq)&L}K;6gɤ d9>--!w\~$§,>|%EpbE~k2a}#X9O9SdGmD\@J"fXW =kζrM65tvkwGIB[i/[F mR!Z_Wԫ/a4f;bd+.* ]T&o/ J--(TTc`[ݷ-\;g gZGXoDJ|Y.vV2Y͐oz ;r m?|r5 i+F]ɉ[ cĭާ# N6httM2C q' ,HۏDd̡hP * M-UҦjwA3 lY 7/>Fؘ̌h0WP0?$Chyi }e'bhY^GH 7fZezm5Ot.;nz|5$/khɵ Vښ"kB:-!Q _:F;3~:Zly ™عȀh^=t4)E3١E̛maK'mRO.**- R6TD(2D/k{$ܷɳ!ȞU_B\d':"J@p;Bb,aH9#INJW&{ I0EDFkiXn窭xsu*eۈP +D ?sڈuIOAuȴℱ ,k#/9@=  W_ KVhh,'$Ў_N_1!>0oV2Ŝ@% ` b GH ~./ԁ /#_)Q$ClT80 D~|)]Q3wH>I=a$ 2/#TsVWG_.J\ٵw5NAuY[Eq%Xշv-))ba )8$sB#r /h!okfcw~Q{U_x4RɿPͤ({(u`ßf* HژpΪ)+[6*ᰌ miE&W˹)X[zܯs}(Z\5!`d]IL|jzg:\D4]"(c?ࢇWaJ Ŵ)ZBBΑLJTE,ޱUI}Zj JZз|>5y0qgENGOwb$B=&uX=,JLasKtDE &&F tX.-h %R>Ck'Eƒsv!U00Db a//<0ߗ CИ貛yWd8bЧ,X=(L޾˷N/݇952,pKwTd_" ܪNkHmCg~Ǡv |ˈI)DԁX}EvB]ȂQ!t[Ovg.ч(B (~,0n=E E[F&pؖӢ\YXR]5-h i63'i^Q-R {|7nm43pDc^^^,Z{AF;W0*.&GjwNT5җ^!)0?pqsxWϮ2iϷYEBT@C"'[Zp߲=r5kpjշ,b d1҃P% @kvVE"Z Q#~mLBwmXքb&KY l#Ύ~$nѥgQ@ 8l/rSZ?c"3z;G zWݧOE&")VY:_|bQLIN ,eCËVW܍qs1nlhڔa </.ro64A7h-k:MKx!Z$ZI"]}zFz.uչx$<- +? Iq!(DvBx}$ ? 36030S}O]%j)D4N I V-GDc130rh#Ϋ6S5kHHEԕ9.iȽPWJ~x h$Kj%u{`$4]ɒ~qF33Cjlm85E^փ=Pm9eh!D|Gqy|>0 &4斡eͫL(SvVSES݁#2aiJޓ'xlh>UM[LD%Dhbjv< fXa^]Wm^1e-y .{’͝S᠆#a3:55ݢkŰ49 ^$f*HLm0Oe $uUxh#!5Ce9 &W 3[$~OܔTD>4OqoT0MG :q>ef`܄/ kY1*DTu K"@ebl]yL5NXz o>vBJ 4y~{=E ac#?'l|@# a+=pDí Nr[ g> lC㱢{| wOtnEԍYи֒exTZKfymp)_-bR$T4;@@P B+`Uї ndA?`_ R.B3oxMĴ~؇eʹ>QWASq\3;/7+OudSabv_~6C$9I Ȟ 6 i;IjRC!GX ?P0mut$s$ɥŒEed-p~1cv^(+jVe5X 62K֕IUaLm1BY}ϭj(}2.: ~/NƟXTRq1㡣9C m5t[WqsDwmog{%' |R/Uec#h)ڱ+ A͖']:@5ejG'/gWa圅x+C/$œEzȂuY6M`A6ڭ]ϏDA־[ 2UGH9].~ѽ+|gx><@Gi=󟗃9`bdݼ3쳍k$$ub >*)(Ŵnb3,RvRuypsft7Xd> /uq[V:jru_/CMll6"(aS%aXctgm ;B7ReӹU@_o|0ࡃ =7", 3tV͈_s}]6ź#"4vWHo҃m@jax|_q!Te!vx}LY&V*d)Y``SO֜ lʿBˉ=,Z\圊ȡhQ?R4Qud ye6Xew4A#z8Qdik(E\hI b^Enɉup !܆:H39. ?#3bl/@cZi"5,N|A0yiK[X7>_?ABϢ!}'.H˭f;}2k6qeyRJ'`!:6Z{͑!-fDl%+Yw A|菻ycz>[xR_Jޭi:x۸6n}ZԙU#tU޳f(!JlPX.n^{ݞ߆XY3)_?Nx$)h_&"kl6\w 5iK\qgSAfUDdJb9uKp;cs7A_+f U!;!jWQ{8hՊGx׳K@&s+N^=Ú\Y,ѫ.y'J^m4n/ vIL e>LT_;t<{5Ncu8 z>Ԝj!qӁZHqDd^^P_26nL,8M{#9 >x鏽R{FޙA~'6?s:r#15]aRbei\Pocr[kBd* p>S&V'}+Jo15˩ ii --`#iMVͲZ#Hgկ &p^i1`![^e,[߽fL@m;.U޴jDn0?Of5[{̟NᎹKo J\Kcwk,6ceȏ ɢ0:%{*zPFNũ\_'31КkқڔؑF:ZLI9*46(bs)VqpV*`Uor]a#:ĹQwG⩌jp ,cLGaף#;x Y$_,#k5?XFݴ\ Ց)>eh)UDϼj6-0xf Nď0m|ȷM2B>[Ei0Bl)`ӅZycg d1Q5UW 䂻 2RS vLeIn5R ø2Z\q/8  pyrbO8'epF-CWR) ;FJ#-:pp}Qjbs7Z{4yӖGJ3nEx#õd}Rf,׉z>s p} J76G/Q{ȏ뀠6+qps.̱ N "r#N\)cPǑ2ϰB>w~x!81 lD== ၼ'È\ bp)qD؁j*Z=g1`1D_&pZJбOZ΋a'0q'Gx63cĪkxEMWi騴BpX0~qB-jmYM:U\R Ŕu4<۳j6`S Ja*SeXJ Saͅ2B*<KVNm,eFאbcBFL@ n=I*ۅkX,{p!>YlI ː…oo'v̽0MpDǐg^I !5%M+WCBv@Oޒf mۥ\=1N&j3`,>"L5oKM(>x /]T!QilfT_ 5m & Dq#P`p4nG`o]O𮲝_G$ύȯlyΎK~׊vAк}z3; 'M7l8G]^؊%@ 2azV9 MF?6"t8 ZHlMTc-5z<()ɿ)j9޴O zk)O1e KVG1!X/QRO6NfrX`- [4xF )?*<%;zaOXJWŹwꋊoKwaQ'yyR nOԥG9r xmk׸ b7gz[Nv1l$:_V~Ŗ_ӈF(,ҭHp̗%k:hjuƲ_\)j<$cf%6a>wMPI(x?]&W7"&>xdsưEM;`Nrm`*;guSڿ˾jVt@? 綢[XIr'I䕝3x gbǦOq__="g&f3ca v/ܖ龾^*gl}NvO4awR5[k[b6GIo!O2b(o?3Yr{C#8gFYDk-iN[Kwp U9"CZ };4[drwɦ$ \1D5Xҕ!gP Z!jrn]ׄ?9o5N`wO|{|y 'n϶2 E .oMHhѩɾ6Sy5Eΐb=DTTr >ԇ=!U`bI~>5߂-3]c-ѐjAfdb0&׶$.JFBR?'>pR Dtbtpu O8O"/i.Ose{⿂jNȾ o+ Fnյ~.q@s؅"6[EEm)oSB 0 7ЉinB[qi_ .g]~JpI!զL 5f\[z ՠ4`Ā%$$9I~:$;Nǣt !u$ k0! $6a9  !xb@N}vHK0]! &Oޡ;$oMfH$8(!$<'fƐ!$%2MI!"' N QoŢl!9rԀuR@x=1p$Nsq kā4dn>^q۠o2L6) H@ <@MT`!;YuiUF@IuIr-߿KHsL&^'QUyv].nLAA⊶)tx!hH|?)yrD'KuHn~Z V/K^ӤuP^*P(w{oSU[*zK[[Jҍ:peőjJJټ: `%ꍚdہt?F]^SVzHYJ ! jZd}cepswt)@sHfTcE=vxѺ( .j DI)M(O8[ L.`]Ue=y˰[ vѻt"7̌@CmeiRcm%Ud압QG9s6oA_mvDkrCM6,*}$9O&ꓨPڒZ[Z,& Ҵp'iI@gfpfCq= 4ޗJdq.<%O]۷mm#j^TƠBPkP`¨wZFbg. 7yR,l&vqМe(qvْTPPf"UN[8^)^Mf wj +Nh"*EZ6@l̚uǦ/榇MFa-L@\? mTk GfX˱?ӟO" WE_ثBpdNigOc_i- d0E9:ńCx/ip&F<)5kƾw*{oڵ]]qƾs%WV`R-<}%EV68%QKBC6vL難Y.hj)JRA*A@kU %":XF6j&%fk;8Se:gYg T\WՍc&<hJ4CJm[CAsv)U XA 01bkMch @ `*pfq}t=xWkB¡>`@ƂHm%BmSB?qB,ݓZR^{ٯZst4it46춰>~N^!}V Gg5)bJU6 bRSU v!CXE@F0<:2һOh"#jm]ko;;|1HIetNd s90(Dfx{Fc*kSkcқ^шTz7R^h-nN)Xm,eK!9qzV ˤ\hP(cMFC|$I# "@CONiN"ԗ2bZT(jkp75 Id@@bA#igӇ f ct7TrV@t(ф3׽%- 'qd2k. ,Ykv٘vqD iT2Y,X."{(F:V/=qnew Xͨc,qX jjwÎ9<<,K$@ZE*xPlK̩<z9{0T/ʻF+[l n͢ӸƴDm;0/"=vR)SZ. #.;2{, V@mT};U*WU8 ?Y { *#|hȸ?r758b4 'Z$Mg辣\ _5•̢RM8z &)h*z;~>hjB*BXd7T'.s'{~[Ҕ/$prpTH/83W}(W.*oHAP=]shx/o𽖶\i.2.aC&0 릝.0Ogq686N_gYU:/Ƙa2 KR4RA Mi˵CXQچK: 4g!OV!;JH R]׽6\;6u5Mi&1Fq[Uoimv֧;"8]7c/Cdq ӊb,λ$c#&9|Vh|(f| ]D>o$ęrpr)@E7®kv~>vu׶KwϦ/y[ܽN[zpnwdž'OߚЫq7K(F‹7} g 4gZĖAJ"Jq9*€ *IJM<![5_}~7ﴞN=!Izܾ~׌yvkow;j0vuJ@o$H:NDR }ir=^߿RnT(n~ju!pBgc)ڎ{fwamy~Q2}^o>}nD(",B) 0R#+&ѫ8wV t1i({\ńP@P9 bF"z[mӼr]Ο3ۃIems?s^ѳ[UcK/[m<ͥ0޴\@ _~kWvzie*q?O? >pdž81( , 4Ž!Hxys*L  O]oGaKQk/sJuJx:mM|Φ1{9KɡWwV1Uێ5#OgCMퟟ(s:1A lLi&@}![pkm=4m<\juY .fSZFܭ_>_`y]*Gp&͟xb3|{9q5:>r|/rci9K, w +oUlr~hί᷌ClNg) _Yn]E寳572# װS>YuPR) 4X%??NuBAҫ!"UQfQE?|PwQZ+ 0CWGȸ'%'vIPU`k+QAEJ"F sPOiy_>miۏB}=N3OCϾQ~%(+p/Oc}8ZAG=_8xYHS2V}VM挪Ơm3i\y$/7WJѭom SEp; mw}x]@4$F(ETTIyJ DXFB,L5WHk<֞=&&j\iBF{2պ94315BЗ+Uzo.r?hs1HT02fT|/tQs þ- Lx 4 jDAY`{18;.ۺ[5(7>Fvvj5' OO ta7 kJl{ts44 ú @ t!uA"2Ziی'بշ\m-4ғ+P8dO!2FᕑnW#tssD0O vVTìK=hi;rvV5+}-J,4߅#Щ8<fMӱ۽[6l߸Wnc^7wƄ+Ȭh{k]U,͈9׈ @۹yDAɭqrya#J4بqI$oȘT%OSE%+Ț +Veh9/[wvgY9NRhΘ*+3tKrTV[}-j@ePIؚR\:ucYzᰥ͎V\dž;K G`#M~v}3W&T3 lJ꽛 ; \fEkǩb 'z Eb!'{FR {uWFod⻵ &mu"l2~{*f{ճ>hqf8߹`8VqovZՒf,QZ=6%·N s&m+7%х9;dn{.ЊP:pĊZ{3 n%RI}ٯ>X,ťHঃzvOb" j9:c͛^AjCqTs \0&7hYi*m1) wxa5THY`<(5}4kZs\NEL(Ͷl`g:iߙhp9`ғ$4?ũ {HHE*JJ)oٳ:ߜojJ8 1*&\KrDèe3$ VD9"Hp&=Hd%򓘙q2XI10fbKIJ@r`2STn֓QfPtmBPOjnn-XB$E?G?_Ezζ=YfcVv2J޵"* O]{7ah  +!_~WXPu&\\zps^ti#w4 V! 1 j0'؄jȨ 6gHCB"AcPEKG^fC滴ԪC˅5p9vxu3n5;(1 +|kL{xjyFc9!!+P\S1(P""~,;REW=e[>~ӪںZ+V0,MJdX" p~T 4U:6$+ X!2Rۅ1I4 UiRxSpm'+`I7;l5 nj0IF = À!F@gExѾaBb7b ^"H ?N X ^cB Hw1x?E֘%rDСdP STDa8U6u9{^]/&),3"b!A.L"˒ 3U<($Iqt'GvR  H*[׿)tqձby|" w(1Շ׾4ɸ ט$~<Ĕdq@ 'gea#za%aJahȖ%òϓ. لExQ?35R@CmË׽^<0oK ~_°J|UMg[3/$HKa{$C{rE(f ~ igEÐ_SmiBx)ʖ1>oxrOg@!Ts"V/kX./).[D˗2v`vě& =A amu6NP7 hs2b>1vuǻ]ӳVD~Z_> Oe*Aƕ(%BLY;\>vq|l3gО-{.|Q@WX_b߻GI2m/N\Z[wޚ/I0fZMhytlU)p*m3/ _WO >@Ѕ^.X-K14kMfOK O:I|$d5(BE6a|EG|_Eۭzd}uW.SLmh5R{sK p#.kfF E>+Ing2u3s?~ߋg,k , iA ܥCV1iՔ氏jx O[l=p8K${H*-}ЈC8@) '3Bhk;OD_bPo[ek(BBI#rvӵ%)iV)h `]9]~x7BG_w.Ԥ)Q2xko~ k:n>U9YE@.@XAYEA@U"Ă"0SI<#ub7ePQ"(Ua@QOzv,(vL,侀?ѵJ$VHA*V31(0OR߶Cu;ɇ?wC|YJPuۭ~"v~mQuOj]Hnm)S;U9gn $*WC4^ GS_G7Pi6zݵ*G Gh 6(rC>G[ZR:7ךpo'Ydʡ Φ3%љg~^ꟷv4lK<$kXի Q=x m^ͻ[ךnw3fhCƺʻTMun^1o vsqmڭL Bc Ջ7mtWM%܎fFQWe1fҮ8Q-@3^*`Of{V/ql}~ݖQKhJE`w ]zp_zՀ0 @!c|cbְ^5 pgd)z몛Mn_:qxjOb, D@JKb<ڥH$ʗ;E(*G\ާ.n_kx #?Kq8(T*:V"+;}_Ә'](o B"YnhX|oز L;a4Rmt%`P3>7T_[?P`#OC5)+O;4ŌO4>ӾddQ ɷޘ{hLNa#ԓ$Tƥ@@A( pKЫ5ꭌdہh/*tNlv;Ik龎jf Q1t?ןo]#c].Ź&䣡Cϭi &W P, Lz#a$?&$PS%3kWIdVf{~/y~P"j[x4vScG3vKǬ5a~X?cfx?Gxs C┣˖.'B^p bĄF @$=ȫ?vkt+e4xo{U˳FrSz_(F"*vB-άh.޴2iޮT6q9g؎>{͆Ce-^YX c-d(秼p("!S,4QBXۧaߵ,>CϹ!̀G !H~% _ۋx FaD卺NP$D#5z@AjvԔu7;Zo{ 6hl-XгoXrwMtېjx{ԆOLk"NY˟"umA'Ӳ+ qWX>fGz^{LEL7g>[k{ȧkuw{!nڱ0]@@fH@AOB"OJU`"2NZPUH1)1X寨*,Qʷ$~lNu8ܑ-h1V/n% 2$"2C$<]0QGk3yGМSV[9%o#o}TzzQu^j ce&S5ۤi"w/j,/ՎݚN٭=IvݍTBt꺌aѲpZ6j^}֔.[v08#},v䫂j u^83g@q/]9 m&L}/s#UUUT6QhA2~Zruϔug(Tn_^ rߍ/9qpLxjռ#3 ._(QiųwH*㯷$S)sF`L3d b Cb%ne(U}m0sjIN9KX@!GX_Y-!%NXY(TLQIf%T,;FCPW=I2O}/[4}Zo ?O_|ju9Aʒ1ᴿ7n ˯κH w_ZsJ={ # WQt{Aej2j95#5&!{| s?UצX"( դbQ ڋbg@ƹ+,5s/{<ȪVͳEQ^:`b~!6?^ ͖y^Ktqڃb:@MA6qf`E#'={u\OJ;t!r3_W'[rؗI@ S$If@"40F2H I!Z>q+ {3OaƆIdnC_Y!fv|RBE i66J쓻6ÊbI݁'I$>?9La, ;$!'ЄāL,b-I$$@ٿ>ʨg>&63P} 3sJ_ Auw 7]7+/C6H^kG ^a ):K_PYT\ű.W׼lFY)jyvOKF`Pvz[3e0G5sſCcZ_XڿZMhK6>b7v!-U؅0ȑս4kӮf9LGYi_s8/Sl9BK0lYWk&S}2W@xr[KD;^:A9 /KZtlF[Fi F?:dz+u?_~Y,? *QHŊdOX(QQb".<aDoJR ќw% $CBѐi{e$VRQB/OvGʢ{,ߗMC&mcu>] WkumJv4׵i5juc3 8ui_S|p f H#:]59}d7gjҽtD6Zo.eҝ{ 9\po:ni^E9.X#Qe /ZSy%2v}r[msMF ĀRH$: =ܲz(Q ~*ţ.ث*mSv@NB@VZêQ30~Zg+6LfЦZ )CisN1N-1 j :c%JD%L&PTpn)Th p LMQJckepN~tW-`a|1h9] >۫2P&MqޡXSSP>]Gm~?,\8՞qi}9meMl 3@@IYjGHM(a蔄y;SO?ur}U*MA`U`pNR< `kq؆FR}s9?QZK*EQ{_O}eOt1SRڞ?Aܽ"E Xß^T,w&e'N_B_0̼W57(t@S[tKl#^`?h_ߧ 86m[jg8 })vr!_tK6KT91G'E%T7 sq]SJ_g FݕS~ D'-q q\rUE t[)v_TA M*&j<05y=:cmx 2πX]o X+@ЬH4x[&utp8i`ldX~.,# (Sbgr7B'o8.̘[KP` gGf!$sD'+Nm&G P߳a2^}OQݬNϦxvw{ܔ5W;uPi8phᤷڇo(VᯌO}S{~amZq gޙp~wjTsTBbP Sauevםw*['4oqN>>Y܀GSȵ\ ,IEU[av>01 |>4:`fIBu(~_];/%<ϼH[51 '¿P恅HR!פHg&ړ|GYݷN m\9ܻ,eMO˯qH2 2uB Bi3Y\)J;ZU*ohލ֑9$ O rx{? &߇\O^'|stylb1T&(U< R*߅=Irxg-F~W/+_hjI*|X=[܊2o~/=it#}k m]/ f n~ͬK6v[:}ZWUZRV7%W[ hs!%:~nHJѣc2<Ӱm,5;b~6l!ÊC) g ıfxӏ2$ֲ/-gqqnZHԘ >!$ r $@4& 5P}8S!6 ۜDsl;vI;PEu01n/W0dLY 0LXVcT&g4PD?~cX]R@UҶjH;Y=zx3:l ?_qOf0LS Ic7{Jy^[I$0>1u:VMf z2Cleیk\~ oJZ(\,Ԁ0a7ؘJ/1ct}4W7f;e\Y+k̎DMHnuoBս,~J4rXZ‚)ZV6E6t3H\ByUs/l1zo;yDZ^n r}_/VapzEv @Z,c&dV:AZ [`J;511{z]oHKx %e?g./h!Y~/Jx65ׇȁy$80F"7 pMK; sTOB0%&raRb~==du;6M_fsw-͘o:鷏z&&ZVӎl9w)7o1f>BZDR>'O/Wne=p*גCG}  RQvTpa۩?Pg%Sa9u+{Aθ'.d_M~ɚA=JiP?kcRױCuxbwκq>_c虽eG Xb*ɼ-Aফ }˧8*-jw6?N+M w+o}EQk=sV De]8>AnRCP@$HQ͒%İbHbSo~@8_YhGU?y#-9;)>7aG(^lkpc̡):l5U2WCW$m\8GNК8ѥ"ED5/gd+1_\^`9sr'^ãiN PՋ`8ZlԌdZݠxce-yqp~N6/w`j߆hzcڬ8e> Z)35\HwN/]f[ $!<И$o~<=\tzԢ¤ d1'_`~'CUXby <ώz'.`0Ev`啸Ibǎ@U@Ɓhfdt+[y=w}~%QUgPLI<lq~jӕ· yzFQo,&bsظ2A!t}wRﰮO;\KĹ/-m X#\HM S]VD4i.@Təe*WuC[m[5FG:DB'&IC )4Ay. iS'޽AGƕ\vH5n2Ld]r'FW;ƶ7$x"FEgJ *9D/ /c= Kgr1ih"بFB$Ŗ- . I'кrZH[3PQ.G%2B+% 2L$!0 -8b Y1kwU  HkqHDsqUL|oC<)]љuݜҎFep1ɉ1>y?w6Kzڝv&%1@% ׽2UIl.N*Hdeϱ@%*uU"0JniZ ic˔oІ⯸'|Z1dN DM%E>wx-€\ ycwR#f~@M" Q̀ƀ&J5sqg,FbOGX9@q<9VyBJ HaptҷÓj`F7‡kAMnd"SLU$HB%&s4 $T]X,:CwGf3yQgFjAS874dhһַQxie 5Ywo mnH\jy?faߦ!gzY?voO XĔ3bΆiLs{=o8$ F۶5~VQq;c,6L 0#عib&!}H!'6;j Gį]h?yM3^OɉO: P ),P C) $>  OHU) @%T ,:]RNWp Xlf"(S9P$ecu.9WyPBd\|OjO \?B+XiӇc"y]n{%'=^o4OW3>?-ʝJ ˋ𚬓xpEXM`&6}ړޑB |#ݗHuSzo|Ȱ_,|4~W-6kuS;:$@I*,RA$za$Y"/bԺ-ݵmQkN>FO=Zt۴ >+xxVo2pwqgJ}&F=RˇJ奫lq'5u۵-/NzDJ@TߖnÂ@EQ0TQ /,|^.x {  [D! 7bk(=MZ*d{ˤKnmGq".mqP.钾0@/A!/ꕘzVa>ʾcs>6oozO@ zݿN]@/.G}wk{7uA&z? D8.=+MqkZ#[*#(J Bh_ 'I/G]GYKU,fcg#VȅI@@ Qa4GLg?KlCo79n&Нb͋*)a$M\fDDՠ_b‰C(FSnu=Rhz)m oKeˁSU4XuPd.I /BNRH܃O`H7La9I׃%B@^}@0C05)w CO7;cE")<MʦN_ mZt}z?丶\Xz֭_ qxZypϵBP>"rK֍d̠kUb#4r¢ZŊ,L͔1נ=>{I*%V:;t2zΚFT2u-B6I 7ky6C2EG?C/Cշᖟi[;6M2k{T W?݅o(KBg+@6_\Ro7QEcχz?[=I.{RԚc1 UCIA,6vcIdker zMgY(7RcVAdv,WSIFLIb0*m W9TQB!faGn _|N9,F}*Z,Fi !Hޤ_J8-4 +G2aY~VLc!AE25j56*Y}o:J3y̰- {̛#Dv r# ӻ!0ZGt5sW tc|s67Ԙ7/v?~u}y̳'{۫x8V3wy…qg{>~jA>'_TM#QZƶHLaaH!JH@`Hm$۰HB@X!HP@>H0LB,5LfzgJﵻڿoJPgA΋HO" ᏚZz[N`UTSx'dԫ8n8y"B$$v{0o|<\@IwEA$Qi,dDH!c!H@XO~ RBO! OH̄%'NB!*AB6r5 k؋{*F;k'MlS2f'x{_ >D/E8uSzڔou=6맲S #\1`  5URN:SU͖UeHfZֹ+)/0=? fjOiPjk[[#l F͊3e (Y&;U,CAbkYt^%rV{==2 +3HVD(-fxw,8y[LFLڂ(0FN A=f A%㔄Kj{΋Fa:*I%I!l A~ $ BuL_iR8}=,˝<,uc/$hC%`?O9 iW;M^YL_S!z~~ǂԾ|4TEҥjQX B$DH'0!|$ y*|bS9 P+iL 3tӁ ~Ԝ8q Yֵbq6 Ncu]~.[;pQ *Vcak"EMVe\^+;~E[]]䯟 -S`fzV[nc!~0@ PtP !HH{Bu$B.BB(, &F-8S`_n*RdO p_ɧJ<7*M!CodJcQM PQ,N>uBGzROc 6^vp(8!EE,{ ﴟ,ɰth@^$Ѧ`@*qM!8>m]o=m*Ұ/`)2нwn>eVtiY&!g:R'j5_i vP%) D7p'9sH}rA gt2p99auVAp N s(xNEY;Ckk&tPTsvA?3iP!L!rHC`?E !) HE-SPͲ9Et<{FýHˁ]JR$6WxLnHPV"I.`C6d0B R {DhBxI99by @А& dEI c `*RIz@ޓע'Zk9?, e [kR @ȂgDQV ::TeqjsJ;_ݪr@ۍBnУ0ez\$ջ~D P=dCJ OkVATg^/)@1 -0EbyB_ʍ8@"w#e)s9$'=ݗy@Gy|weI0S;zoJx.bЧ@MǂV.uUW߆z\i9kgHG2娅&|ݠ$$= F]5N~N[;{V >s$ķ#ljܡ>Ӷ- y,^ |d*AE#f7'N7c4Z5Ux3Twr?d?CؒCH, Hׁlb)(:+]Fղ(]9t_k]q{=7)7IHNzNl쭲E)!uXT""'`^':\$!!$GOL.pbK m)m_*ndiO/7.L~B-CdbhĖU3Ɇ-JqQ6lɜR6q !^Ƨ^ߗ)iy4_|֠Ӓ-Ug3q\h?LJ (F~>R-JXK˛zU?Es)fr' MiP.[K Et^aH&^ڿ+y2v\ NVW|="c3\picbw,+RA1Q$1}/S>_^2L"J S ~Ѓy¤rVwTHfFj!vGU}φJ!vZQaWcwyT߂|&=Rڽciynr؟ osx=̭w x0ai;H j;9}a11&S̉V6C1g͞e׺pƔry:U~oMs¢%*V8:+LwB={i!%l f0+lNpfcZɧcO5pрye(Wܑgx3 .a'] cchu@ȏ ڢ8 8h!Dst812k$(Mg_W.Jl"RQn.enTlnzC.bAI ]w%K;i]cw<`Ѐ3` "ՠ~`$螃5OC\eBϥo-HuG9cꚬPLADus/[̗Jz`p$B!'J<*=UtB2mЕ[?df;gl˅r`otCb,֘KqZ|;Uݺi:pk:9Y6ϟHc.eF.#Cc(6SKU[ˁG6D\1%A %gSRjCg''_twgvB;J~@@q H')U#)(Y/h( b#0P?W@( Gsh(]p( ^}D ,^S&Il| ^\!BRLM}/[c[2*ÄBַ- nRg $8vH5 1ЗT54 enܶT}6ZYm4_3eG9$Ulije2S.BEAըn[!bGaȤPb|MXY}UFAcNCB34bN*Tb+ Yբ;4,?sgu`iWI Mmhu(8lQT<11FވB'(4QR- bSY aa)M cu޽d!Vt$,aO@> E+)aÕ>,\ݣKzi^JL\sz6UL2(ar\S*Pkvy sDwVjwƯF>o}3jo !lxTfh88[Ցc87a}JuQ,Ya8񒾛k Ң0Y-B*迗X\,i0$83I;#@qToٻ)2jM# 42XߩjVy '+΃Y_Z?ՖpG `_j~%KpCRq96Hg 8PԸe9|BJbmBӵ+EY2Xz__-l*cjM7(gRnyky)V*d!J.#!P YҊ9l'fPe44pͩVSlNP*=5R¾򄰒 JAI {}!e1Xr,*BQ ˎ:Iٛ_O/m3j$N M+`T!wG kfwk#ZpqRQKq$Ags< &{RN2P:ȷ^,pnn0(~oӮt|8E2=m6lZMR:4luh2,"VHnuߋ91^0^hMfvDs3u#zh,%I_ۮuˎwe2tԐJUhխ%ptFqdPwwhZ`M܇Gxyl(EJYutQ 8](fBċ&>dqUk΄1"f4rpYmڃVm `8qHo.ev5ƺ O ZSڰk U7یsN8`(\ IK779>N,:[JoA][%;a S@qp?gkR0D"!>Z=p IMS%H +8DnS{jt:2G c]39))4]sLps~\-ЗN%N ϩv/Ь@-?ɚgi|y3S):>0C-:xpGJKU]h ﴧ4 4˜dI Տh2jMUKIߴe&5dPb8^?2} !Gq~_%+cC|{A֯h cX!qf2qx5&3ƁDkc7N"+A'if:B0M==MhagܮgМhJ3ajX @_*YB]y/@0GLS%!~߯77( tCc=rg2kC@_ھgMlɖ<Ҋdب\i.ےM$99 d@k%GC$%U_-;ye?4rqJN.: s?38~WɋP! ̫56 {76LԴӼ7.z ^#gU^O~oU J k'$H BdխCXbۉ~)D9?A^ a𬿀Y+_ò(3˧v0 r/W*2/?ղ/Ji_H:ֹ@XV}%AU>|s=Ayy'۝[^kʌ $XV&F6< ]SޅH8DDA4Cǻ~yy=ګ PvԙBA{Ų9ye7fq_uFs>}d[`(8.d`Mj2t@Bg`H4:1 ȑe]j+ʖ'W2]n[r*yPMf "Jh$}i ^tEH,HAtɶO";]HI>ف(w8fM~biGRkɹ< w 5YuJf۔pzfqҨL\aU.LfxWDD9{%;69FC˼U~c펨ݽʜ7}L]_kߟZcS=[NB #(p5l@udK2rlO?}\ zPHnLu/sK%xhzmzv#Yɶ#< +!E"žf"Oks7F,gɎxZK@TIuk/f!}Bg}$[;>+|}[b,H rl>/aa:.r;L["C; N't^9R^cC5Fǣ?'䤞Fꯡ:8,g#w# FԠt/lNX6L:^6g|`2W:ے6[Z]*l%^`SPꎆeuġ+9d0TKS4CGț~r&Q6 إ`>aR\os (D@JRn g$Ymb (܎HCɧDs4T wfZi~# qېB*RֳJEyŷߕ6v'ϝ{ {fD RIƐT?j٥"2EYB$erH;nop=[h3PiPCQ2;?l͉3T)曃nU2LVgQV.)]b8GA(mPѝN3EYAE׮ƌ̸/l0i|/ROH{?f>"!FnYmE5=hҦǟfر,~+r3GK߹3߲= `""O^|meM͵nZL=Ir_4k>N/ {Zt,pطTْ/{ևCJCeK>y8+3~_7r$lYI/f6|J9p #|dA n^+)|UmFXm9mmw4F꿫h.}/!=5drJΒ#,ΐH?T8T{kvЂcGP'(&ۻmp1 ;YuP} hR[]'wc.B!8H!j7?cK :gAmQZ-K)| a_籾ۉU'Y 3K:C:dK:te|%#m΢JH=ϙvp<\+#ȞoSG2C *D9".\/hWv 8+RƟpd>ԾA_-~jLPn` fSW>Zש<5)"0D0bon-J)ͳ2*P8d/SLmʡul( YҮɕjΜ)q-m9zoP8ݎfHL~X;J}9E_ɪo·uqzW>d$E _- vNl3ӂ cbjP*Ny"b_2rADIc[mz؇e R>/. A$)R F:WxO04)r<4G JPR[qSmI4q/#s(H|fo{ S|@2RcSt3:RG3i`Qg~:>HYwJx߲.OlwQvyƝHYG8]SS2 -M&<"3y{|lh^sG/q>fleU+g'w\gC2IL%3#^!+ &ヘz笛,#. b19iDžGFQl^ U 3=Alz&̕Ħc S-G[\,[V~OyPi#lfL|jBozWl7r\:)~k+e6˜W 61*<8UlqG!,_wo;vWиNJ3M+JKNWMmO_[[M{ۆ# Oډ7nd8~+DT)f2{ ɟ*Kr5:_V/G@[/hL/BrF:\)r|?gũ`MHP\~젫wȷ&F rD[yNk,;?픮-6# 0 ZPn@?"%Dr'HoG&&f{z#}.%b 7m)D{jKOVnZ[~Cj׍Ib2?ȅnƧ̟FLjbo A M rZs=kuPgZR:n(}}SD yCZTȐp(qޕj+3]]I!''@՘IBCZ`uSZ4 @B)-/fv`V_3!Yٌj;7V d浉00dy\o eKٗY*Pĥ : Բ$l  YZ)J0boH?-WhO䮶V>C['rk}ܡեzg_UM]((!m36U}LEY$2 Hu$ϊN $vOcb |WyKW}>㤳rk>.Y*2V횄 òl4CBc"MZ kPyÔ5OCOǢ`|zEHEKK'Ļum43nkgcG2غC8Xt7IX}hkj"+ ޾uּu `#!uLC3t6`c4V G{0a$hȌ$jGbD\ MG\o8L `Xc)%]@Rl(y|U?T IƮH k@}dqTu[>RB@H:gdOȨ@dB,Rn衩;$74=E5'VB|zRr߳k?f>I$C@RI'!$ĀI5B3\,*( |͒i%(t kPb*moι~?qMRk(/MxP$L' u]$A]&?_f3-h\2]xXb@m}a6 ărAho,$ó.$@>KƭIʭypkIԒROh` THt' oO~_2r?Fퟪ>_jLn&ALXV,$ >V`Є |M\L'M?UK߹̻~$X˴bSv>ZP7E&.A,Uз_٢j't"҅ed*M6ܴQd=9:9h<T.xaXa(-}Fp8skr"WZ]$ R}uy#9,?oG*bmџOgqq׵ no*QSV.%PHC$$R"I*GIO);3`ظRFW2 E'a{/77gOv sLqCo6 &=VT H 4:,7{|\>R|/ 1w6HٰB,!\"A%h4.?{hɵXP?jF()eI!~U^! ?$!! !(TNggcȇ> bI|EAMz> MÌ(Mtqc4d>U}L@^$txL*V鷣P:͍4m t X&24ڷ{q"ĪJ?6{O>7 rh.|jL`0M%Sk?{ XwU  i F%W2H % IL}L!%ʤJ=\#dYmp_k~ FoO03RLkLn-Vd_'뿐dʞ vu:G`n+xW⵪ѢoG!SȠOZ I2NW{̶9>ZH fo'p'C:7xZ`c]CmgSVo>ꋾ7<@؆Xd Sv13/ՕOSU[j@?-! BI6ssKZYzN5 ͮ ; dVb:,)"$!&D0B{#iH0\Axc B͇RmsȳP(>Wz .P}{J/~0j2.s.7D rU.\"Q?b^7ϧS$#4MЋ֔@36ʸV)t~[-g3Q$&*Y/FgS+"eHTǀJAA,eW+y OgeFyߢ1?:#Q\) Ӌtyw8(@S Qp~O" u V}9σ)f!k6m s}\"Q oXc')LQGζ͵UUWePc2JQ8ٌ>Z43ze_hT ?XAJ_ijю];.$([1QÆ< i&/٠b4)f ZKHl`j%^D>!/vef1}H*X8ؖSX& T7?uԀDFbr0I=v^V*Om{苀Jnwe+4l@vٲuU" x,z zy+6Y4nש-Z+Nd  yTnDy~ G-F rnX9ALxW Y߹]@%R/_fH½"^= {%xbYG;.椻6ˡ (.8fS:]\ SW>SD3+ŅxS1)EtȤdnM?.;BitMgۜzx=ĕ31LP7C#3wq1WZ=# CkҷZU|h8ɔgBD(HĒ,c P",TBEXFϻ !>g()5,&/CN rkg"V5 u^JhE:BXHMyI&3tvE'䃔L5@qIyG&LGYi.Y~ܠ VIA}L"^=ea(@G{P K ƦNft#J:xO ~b֬ҭ@( +.F^dƬZD&^H01>;cjܬkV%xo\sօ쩀X[ cw؆=N5EuU15Y̊+DYU-cn%㯽3f`}mʙağީ15{7:Mj~]s5K6(t+gLf!!VwJz0dsL!_͕-j]GR߰|atc֛]ɰq)m d9ԥOܫ@ibYT|Kqr^RiL#M~INуc. eJ =["c@ŐWd -'_V}3cvpT1hb%u =.8ΣnF NĮVUpjjE?Tf+K9:/"sK6ŷfQGE^rrڸ2%mySKgGy~6Շ,#~st,#͕N5zp O-N] m&P,=9K>K* ܝo.׹5pfTg]@KpWBӫsooER&,<#u1%V ' tul0kA۝i kӊ5PX>Z~Dut!ܲ+""y"T EΣdnPSMD*)@Vs=nZBe= <6]~w~Nj:9(Ys? =*!{jnYiMΪi>U3|5&Ol ]15V?MǎAƜFH*&qvOvO3!B; g uJ|tO+|/7N̥dKSx}mç('fwf' ˄s22VVD,Zk.t TkjՕWœ5{~L>@RzS_*a i YJ^y((d:R8J=Třs#U4i'=lb6 PԪ2ޛT |a VfiPWRt:qQ*e34yžcC>"}lx]*;l^Ldٖ䘐pB̞bGڡƫvKrXf"url0e7OݧN>t܎u=Ky)Ŷn?Y4"WXmK@S+~^% "TʊnO $3.@^6%\9C aĞR@HSXy+A)WZ6+oeeh!&mRj8X^t^S\Y O U"F2d84A%`OۅZ'8Y=X*dm ,2:B.`ҼUSi] iHT D15TuBHv"]ViC5\@Yayc dJ>UF 5t,c.s j֟Z_4$,_v o* e49 :4(!$Z7(` O+<אt7gG@8nd5\<-LyGkE ~)CXxN!h D8,Z!.OJRo=;;O B߼mV?zI@H?kgYh3/Kum| Ե"u*6bDipFmEƣ~j4)-l['Ię^N _٫`/uy>>6%F6ױ3kȖzqJS]K_W[9#Q]Za˜ks`?ƪW|l먿ce֟#]r(ˈVf{q_75ebwܫ1VX ~{!$BU 'h+0Q~ `M;AwA<g!dPEXG"dJVY^}>(΅=olNH|Ozn' Ld$k|u{q/Fle MŅ)a)jǓM! 0>oO~-MLJv{LXmerjĉ "3j{#'/-$._I{fm˚q)n$FQΚ(R* p,ę;?+M|epmb%;,^޷ 1`eN5r3phtv̱U5e뾗}Oߵh\ '* b-&&H")bN 6z6HW Xs".lvQT!z*4l IT(@!5cB=hGgf  TSR؊vvoyعHeͱ("$FI<ﰨBCɰ$`ꂒ$S&\-kMf 'z*?ؠzϔmTvoK9hot ffdrF =lj `d]}`q "ZY $Z ,5Y!0$X Ug+k=WkuضLIAyZ }'?>~&/KA`[WN3>HMsFȒiͲabrJu-rgھo_K $ 2 YDQ$ !q%Gr^zp<[vTl8* (U&^HRO*? < 櫻\Bf]Kq SM *CgUY[JSy {\G {@gpޣe-Vҷg|kf֎y%'hTԭ>/W/ ަ!pU?%$됇]/dGjBݠB`U[UaYT3rԑB3#0H6GI"Rϡ_̦> Slm,t: ^/BJU\.L 4ZAXʂ50 t7;a+&f4:6Hf,t**Ra0m㙲,s,pˊa!w-,gh΂ 9tkHꊛ[>Yqx5p[J hjn뽟Ի;xI$j' Ca T6W0҉M]z@UX|vnBdH@k ,6hBC,3VLbjZ=N'7]cQɢj~*yY`|Iꁡ=)sO-eB,@OI$怇|_?U!|b'Ã0 kcJ1(o>GRid fsq^H^+I'IC0ɓp~! fHfe! fz @6*yk2԰`qގ n Jҭc[~mM?wv+P dlXap$AWn_C5i ?Cl:3KR znҨMn]S|vŹ&Ot{uE_j{G S!OIzHI qP1[qv}qZj"׬/@@@DhLrdYOJ&k41N?W`Cᷗ !o,S 7"|M\g*ѬYYRĶ*JDbJTbTUiHgh* ?P1F:(Re̕VEZ,+e2̶,(UH&-KOHFSf%,!UƜ,k~+ vٟ^m D@@@!I_Xߴ4@#"Thۻ Uwa9xqEղ?CwBL(96炉&nXbw~ʛjxŚ=d $Vi n尪iu)S^pJNs7,BbUq)JSWzvO?sАJl]bcy8FY+Kxi!7P0/ q3/uTW'3ä́RWCf+ 2]ǬvIxCڶ/jAK `F miOcuWX  hH""!{JRZ@L.mٻLLf@NM9 M~~,obq_5r֯5f฽'Z|Ciu0xWaǘ1Z ?l[Wb^=8j||11 ѽ:A8-˚n,k;u(AmѪlppdj߾~VOj3S1ݍW'bJc+3y4 *d6~/ [ʳ-%jYccεW:oe#Sq,-1*Ko˸ud3 {S]/;k[ER*L"$u3oh&@!O.pEJK|%`oV)PJȮtI)$bs? vJ' X6Crq%*nh,9.-$+ch|@7{hwPO*dU*"D.+րI'`6<Jv:xRG%lpiJ$.E'i|u+1*(/Z~xb$nVCWS/ .S] X`R܈Gh?y1qlw8T0!ah@!x9@-_\ 3X;TNgZ*(d̽. ]fxwQ(uiIsRCv?Mĭp ;z<Z%j& R^k֒VMբx #&rG9fZT:jNz]ص&PRZY:HӆsǠ1Dc,!䡙dasJC#Dh8I)(=JVԧ!;iTґYof锃N r^+U5H* z 0.*_puZM2b0X*Wm$AS!g_y# 8ckpAg% Q!^.,!C73M Vٶidt6MAőSTU*c>Ue5du%3A~b )ly1ƄC1djw繪 { 7eyAQG߉&dyɕ(oDw۴dʙOIR-#Ḵ Jֱ 0mkʝV506+%q1-*0v/=iN$mo@wb_/\Ӂ7G٢PNbS15oݬm=* ݬՐ%dIVOU8>F)C?gq$Ԣ~ΨTP?4N zDpPVBIّV/?&o^_gS2H{Pa0b~taݷ_~rݍE닶Z٠mGHr4NaL/)F3 Cg+gMd@Rh͡ҢmE aqIYc"t K LFv)}PDP<1-c3>4ϺO٧꓌XhhW,K!A uĐ.!U "wp&{Cw~ޡM(H=߫Wε]Lp?UBHwL0?+gL;BxOFctj! XHJ$ tPIZ9hMw!\`3OKLֹ6~5M ÍVP֢Շy)={7ϽܵXO!9Ն!EYP-0>QфCi5Cl@5-(TLϗAb -h^b2AB,(j.DH=$xR'zCG_>c?1ORk.~Ԯy$>$HLI~>`IwIu*ݬ \&//5>z)'/NyO BI!'ͣ=I .2jZSO۱ 6794Ɗcd!x8@6Q;g _N([H7W^?G!.l,qc Wf RXI>'}]b(5/a( LI؁lONHN`J,ZgԷY+DDQj ̮WHL3VEty{V` `m1kg@"K~nI.=A@X̊{>nL*= ߢr}J:pwY `d͘7zCBey>}IGo%hZ+Z<-z) @RIs KVLqQn&frR2Z@DDK CP'2@HRF)QTgugwb[»JҡPzt=a8o's;kM6lp8ZHTj!"M֐jn[> x;YC~oI .Oa6#dhMH @-$XJeahS+?[_&EmcݶUtL?! cdIBU@X(b 0h=+QțQD 2]3UGG lQkQDSCr(h]{t*@HRqVߜNjuSlcŷ& m0F,Y0")VEW)J4S#,d~JY8 EᨙǷ8^o4.O QPZNsy+{0"$b,X(b(DA`R&JjlATdTQ&^w7jz.;c 7>n?/`ތ`$DΫO@:WcD܂[O0=/Z&Ht33Wϔ>9L㦘&,η9Q(| s(%X,v8 +;kP>Juǰ쿯)$-^ -6ἭsF5ͫy D)pydͥc1Uv:wFGZfcѢݤ\GH޳]Wc*p_8u$AM$eepjp;lY`rGBR@!֦&w[RmkA.u^!8{- Ax@Z#" ΁Y-T_~-ә hs?hq'' Q:MA:<@E%`.lPYk%97J=(ދ yL/Xt3KA`D4Q&v+E$^pSIe/Rc@HiA> '-waюQ^Xn_Z[b "if$G06⹀_%q{V+YyX⹍*"b(`m a %/1YʬWVӕ3S=[S5x<=?;/Ӂ:ؒ5>E˭[ xS0͹uxB ӭ0sY`(>.DOKUeȿgM6Rx$|!Kȿ5Js=嶢Q[8\8b8nDg4g*;HP2k*ߵjnLJֱV]) Gc&VESOM:U2zJ8gCdVƛܘnЧ6:H 1drki (>ۓBdǀ*]U '֌3D@ c]_ŁEL;"DkY2`ѿCXO7.}m[V[Ool.9E( \Cl$[@Hz>l=g·y\.k,[g|G SgB '&˙jo.Pեΰ eDԗQKZ+,L (n]eqU$S QR>됔7l*ˏo і'k KX,c#r/؝.W]䁸g *|$&t=aL{)2 l&P̽:^^>)wv-[.e*tИGJw/Y:[u~.ysLS _xW`.aQQp]hVL"׶+EMy?=|4Ao}]v {qK.EXq;Lʯ.7aUi4T B}=ˎb<$.fk6]>o"e3hz"W(e6YOs4=uMΖ. x H kpR VRɈR7ڕSpja+qobNSﵙԫ9rv繫}}_܂k+KED'ba#3;qU,P,ߒB !8ˏ<@HI~&&-P@!P ׉%*ѧd ?߿peSf6#ݡJ]1l?" #~=?){ O!9oDlPBY2$ GɬnDSoso(aNp_| D]),[N^?d .S?O1V 8S]0p[bvBE?5$.j)afzYÏ*?"́^!X`!s j:V~:>y?=7*AO!;fXc1X =$^4&1d$,b꫟Ϻ,LP+Or̩{/E'zf%jΚK4Vۻ{ÏY1ڧk/vN)79Ɯ} lɖ9nv,p*D]w,ߤT?e _z<4cr)﫲l,,(i T_'!>M{$!=SMH]y4p/m[3;~' }x^V@ uB 4/5'&Ư)s?Oy^^9|W_4&L ;ʶZ [$/,z7,/Y,' k9=̨idwS# H0H~a|Ba& ,Ute :կ=n# m;|%};"{篇I*T`}{ĕ _g?Wa0Vb_%b!$PX({VٟI3ݭ_a\mUK4R5_ܥW߳|,j-Y+ԛf}FL[+H\37{!0Pi"HvOǁL}fP>%KhO$ՒϾkCQ]u{x+X g1#3Vb,1'хtK'gS51g4ܡ oq T~!R-Bi5A<}=:-Ҟ_AQ܊ LQ(5AC /4.xLٹ)'a =ofDp&K~քNrnLNX_8 _<\àv-*ՙA?7 0{ҠxOp1+9Įvʪ)0* '{ B8'*G< xMq-my՜H!d ̌tZZ)ճѬ)J@38ð/f3rg:55WD*ZylOb\%k)QE>_AUQv jb\S9RӝCh?2렿7{bRss{Mf:.gnj*x1TbJT( *HEA VQʔmDm UQT[U@Y0bJiUŶ)k`QVh>2@s2RGgog[w b:~H"݉w(6 Th6:LDGOMUCii5Tb韞@Ƭ8w?oӗr$vSm~񪕚| KYWi9QO0Hp:ʕ$)@AR-9`#|PяP*k!nLMtf"ʄi Rmd<.k4T_?A9p`\S/lF"$)e]A.Tv!4,ʹ^8(b ܃8nRf'7Al-\f(]B?Z4df2)uI 6JN^& @Df笡%PpexWdBz[u r}[DiL({ߞsmXBES{.+vR j<w_qft8{zg蔛EG)@D 1Q31 kjO3*PԻ;H_ǐ n ZDHOcmlHc/'iZeag{ \Ȳf 㪀T%En G }9 l75q%=i\G<5"cS 0XQ~gb|mCi>]i E\- UKBCCkZl-k9wZŁ)7x>Ť划.dԎ>C-)v5'奱iеkpt Ȱ[.̠y/ؚZqCy5Ki1w+,Z}}Np \ݍyLdW՝KLlgE|.,xхY5*C qFn*R1.O/-~ 3n_piR.W2 ثЁ uYm;&Z: c={ʟzJ an~\_(X?1-ƘnvZ,[kϣʹ̓ćsqţuGr+.?l1Qh\b]K kk":u?<wq"N3 ^,ϽuQwqg)=2b;l 1 \G,VkDu4+pd*\ɃKŅ79+{kL\$mrj$AQ0>D%mٷ"c$آI-"A>4o$]=?Kd3q}P%U~d~)ƅg:4},\ĴoL`!(&apK8^bKeGK|DKBg '1TZb@4R wA @<0{x^h DWG <Ɯ@(i2t]58, `qu~v3Q{v) ܌)018@39P"J%x}z -NP؈}{i NK*44xK)x̓c !0w"}~âkƒw%Ul(}%rEΝ ЄY˲7K59fIrm92B^L)Mn٭qupo]2mZzV+NYɨg`a{̦TqCWӜw޿$6C(}}=Xy ۟Q1#vF!߯` ^,$"{6s~8g5BKO]Y&s"$i~q? DJ^aV!B Q4r?\a5^sP3chJz h+ϔxSw/Um4|TfTp\Hc5+<BKnWd[& _eg(ud{9vHTBM 9r& ꩟x&4 =wzY:qwAjouDA΄VPq9ЬҮ.,NEڲa΄8I&vԵ=)\ "Q( TK&k]D:(ЃTT<D?P)>}hdcWQ|sELjCWc{g:Ţ»蒦ŤS bm}wx/}q3~pgaiBe'zg|W,A`վW n@ADzr+ɤ[ 1*QBu-r]>U%YMXr P(TqƸHei,̥1!b2M|5d.r:]ϖ_B5ύӁ;/m bPT O.$Ԧʷkv!jJ7?zmR{Sի\>($@jxT7FALڹ1'uu12r(B᥌6m#ϧWTf|RLFnM/WJ?MA`4eUfmܽAD>qg"u{[H ~y4g&(WPN|qJ!N硖ҋix}I߼YGƘ檾/oF I8w)PLJ9W<Y>lb,kN'nOrae˰^2&@6xۻC%xcUKO1G>sN]qmTߺ\rw..м7m?kׁJvw6\Zo⽏0R4Vst~~?ZQx3U-o}o5\;MrJW(]Q5]LeQ#&+W9.NgUJsf=W࣒=]l9:e*oMϸ}[ߝy"#^ڨ MQ Õ /1W;×v/w9ڌm7WNSq636t]7W~K$4BZc-ieyGrSѭFd$!f500*  2l!K$N:žb9 ts!셹] hg]NXɋ_ķ<[#Ř̂J2&qV3 j3n` ,N/_.BwΔ6oMѓОtך L9!?吝xgnjX]KiR;\@pXM[%'gNAaDNeiɺZd:&OT/ILT4smi m./F֫u)-S氛8@HwزgOy=f6#OLƢzwU׌{.C?|Ԙҕ4:xMͯdoRSL "wzA?O j\hA*Fjg }NWsD)7=HO1Q`%tFc#H2D8ef@͈Q"5RKt]$01纜Nwh{'*f2H Z;:\!1T0ʗؗ"X)aX( ioHrŊ{hŽe1YIX,6nSr֧}|>s@Z F"Aw9s xV\a+~uO2囼٭-iPU__ |B{hGe .:]m]]d[T 7 Hd?áIN&قk`oǵ{ Bu3$T5<?oN2co֭4Qd|[gW[lxɕ3jՁgOɞf©|^-W{[(4/φ?ٻ3 K0?cld~9;T\Q؃</_f!C0=ryC'+*$Tn VC0OLȸ% -X$C7A<\.*e_ YTsM48ibȭ0ލ9P ?#8q[6)=w?\ceL aْ. lsӫ>~CLIb BHE][݆ 0ӡApХf: 6c6%<(:BR' k&tfI?G) ae']-;Κ5- 簆VeƯf@pf/O-@@fi3k3 Wjpfbe[~gA*zH~yd)1L*Ko#T1dw Η|qX-xZE ]v܏>=]ivpCBp=`@sL,v •&>]/ʕiُZ.#.D˫/Κ[v:Sh r|LA7mh`@;ZOS|,ƂZ:[3~r:̍iKȚ/JxǁCHiEF'uj)èK.e4<&" 2|(B7s 7ģ !`>v?&}+`e X2m0|0C`:6@>lhX n3z].r)fI{!+Լ9^~!fQqxdnPZE<8CJ}^Kr9ܱA# ,Cpr7;?i{*`BdlYA+9p௝VY]}P !! dW^7]r\I'[tź)2 RŁ׍^OuKC7I}b=;Au{9kjm[gVyHPkhbvh#_h!zAƯft^7%p1=>^-5,!NO ~/¥rGg EpBpQbK2zM;Ze󁖚N,g }>'#˓m[B!iTf~bVxُ&.}.;9ע/2䏂;NWEޫ !;Hz>z[$\Oj H,, y3Z Jfx۾ۤ{,LfC"E|s`8H,=M[n@I Li];{`{WM/z顙H[aV [] T"hS w3u GG5;F#1%AK! te:5T[ߵp\⇣kv ( d  Pԏsi2<1'NA {RZ%br;HqLTJb2*z$ykNBH.Q1 +L|Y΢6 YqZoiG1 %/lk?QTיKn qvՔ \*RZAÏhlts{홴#gI<=CŖe`,aP@{M1ifq0&gmS=7Z:|x<5?0VoWx DpO. .8yv/qSp: 4ew0K:sPCRRc:RT*-h?Wi-#+ mIdyfBV>u';UR (ϰY= R" @#]8ǐBS9i䶹Rm?ZS;ߎ\g ; pM2ITbҘ8TG~i%ե %[~o"owI~^Al=뒕ˊ+0% nUaUhMƫKmΪzCNQ $e CfV`L'@ y)L#jk i+\;^rᱜmW6F+JA)$r S'«l*D >%cp+Neh A(iJJJζ 5fYUg_'W\!*t v_*0x {CJf;R/im&$pmse 4+Ro:|/1x-;'ߊ!\B&0,wu# DD, 6hcUڊu%bAF-A. w3f-9ЉHARDZ Cǘ %?8 RS黴 lgwzdi.\1Ț(e2dSwVrB` HssPQ kJLnAhЀb\-ē _ԽUUeKԗX,|e7'y0N2D\Ȧ8hdmH5]|H0Һt+9Tωb\` AQVEPd,Qb0DDD" EEUb HA@ #EPCy3ǩgfٻc)nMilE7yxSEQԺ A*S`fq7ŁXvAp .JTYwq{[˼~X5Yվv/.Z݃BE,[Ƨ k7K`2\Ĥ # %x_OY='EÉd!YAEM!)ftv="@agJfwIQ1Q>xA02epSP59#<M1hdk'%tΜ `(͛:h4PArjt s;vt8f4`g$Y=M=Bڱ@k~&a)/yWt+ҊbʙlA|7Z%Bם"q4juyӅk5ΐ&U8i U,,̰؜qƽ4m8f̾nQбzs&)qkt xKaD@TCcb[bPGݚ\hBЁ@@P +@/, ywB'zzfmV9_Efk9殈@8<lX $y,$ݭH{9Rw;;gg1%PE@D^Mq~*!Y!)^ʰb,<6`c1mv.(OTAX@+~1@h!yR =FOZYLxtI90N8nƔ q4IA>r..;U*,['ɗ8Nnmd7*ڔF$r":X`<V(AX)Vy\%Kz) q[_]nx(jQn_{ԞncرyT`CcC}UU4]zJOC 坤g>2Y1jHk7 $W(CR:|d{nF^l=#UFz0x2(r=E8@jǫA9cࠃ1ģ+H JNX<|RId&pO*`Vzbh<4 eҰ+횘BcD H hJMSrp6 G̕~IȚc)v.iuEhVfwO#^ t66uvoRKRܝH+XqBAtă}/ڪD`.lHUShG˵yN69g 3@ȒN͛.o '=_vsU4y7?ic.{|2)R}o@/B3g7?`WiQCS '}w^d sD= ۍ=r=Fa^=?=e13< ZԈB*'x-p:rt_} 0 a887C,K>BSYyJ ),ުq <;TvB$Y`L!vC#1'PMuńؙ\I}}Z ŒpO"ĐH!&DIP梊oa,uk9p2(;cmliH27Gq'a+ToSΠ{zw+\OZf%W͛YMĮqKl݃2C>I-nU*{sTV-pZxQYg0RȚFF%mյ *5)P9Z<u)iK4?!_uֹ̱7zi8y[rb6G˭^Udٖ=+-GŦb%<{ɨ zLDj/#?GEY~,uw;T3p9QUܙC?'N9xQc/g=+_[?tnZ*]ΗdJ>Z_ f}Oֻė㟑ZռfD(JQz80ZtL@" C˨2k8xn~A9J%Upd\UϺ}(EB㤁MgaR.F1 UjUF7V{aSը(0Tf!*.{ 8OB1<""d,c.nV/[_?/K*BBTÿA|T`bm+cf u3x'*9.P!5~j66#8hlR eIҶ+"OL +/7 JܨK'x9f _: nV#&}^ArewƎ.ͶT^ÐHH彤õny1cp a9P1R z30vXr7o6 9Þ$q;}vZ뱷FS l.[j45p՚*DWкe>c2ׯ656Ȑ OO@̯^ídUE9A =9Pg(>.pyKZsuVa/by uc/Np')k<+: (bdzݔKjmW\oUEӧoϴe `[V~Ob^Zf5-&fdIː!to@PˠQ1W 3!%C .li!2DD j >Y @?J\ŪӇ+xji^FCwݍRډbZ(M0Jb`eXRQԃ1P =Uv3 b6*QRdGp[%}Jdtf!HjOr-OsLOG֫9IRjG``ce$b"Rb==ZU}l[M\I}ǒ.x`, KYZ>N[3aUle9JtDB(D{ȩ-`麗siC+"Q͈PY?>'e 53UيƖ&t]!VZ Pe(n5!:?#*/X!'zKF|B3`$8$$p8bj'4v7Z?82zPjt.CFaO+F]GWvfryOf hbs'Vj$XmqWך UBHX6EsLȘU@gKH˙ u?/&`K@W;ԭYURny'x\<@Ae,}flLo/6@A>GJ;Zk//a6Y| H5#Gؾ!ٗw% !D[aFk}~bM}ōc{'dݡs&)ѻqmJ@'+1_K!d0'<ꯖٹJv?+y"l i@@E`JI\@DV ޤO^jq98mTCu%s/1RDLwu&-YDŽAol# Msd|"6U`-Z<2ִxn]?ْ+D~J5}&_/ƆpՑ*&V$&^F-*94=@9Dyr55@.GкFt =hStJ˲Ԝ&xO*^Mb1#@ 1Kz'}߇t ^,[,!7UB*s{ Z,'%1jܭ OωמQp-|܀kz~w+ bP=;DP{T٪LsK<[*!=L HЁFaG3TV@ 9fVX@ŶϺέMɼg{ !de)d/@i!kE7Q =B Jy v?9AH2EUm=$!6v*ӕS@9GOxy:ЈEp27;Ե3{ |E]7/A t9s(>]o3N(Vc3c0ܻ7i.?r DtuaGbjS[IUqI!DW"|Nҙ1cQ =696[I5̏R2@@W_!a8b ' vkXLLe3?BM0@w调kxLzb)6vP%eJ 'c敇V0N ҥU.s'LB"M'glyGfk82 29ps.qomDEb 4(bΠ65l[DՎ q2xc"a©AO s D%0M S<=|xqL)mswZeY5=T*" A$P ( **2UKɰt"s2 zEQT5NHacn鐄 /N-a&%:(R(Pjv<@i=*XZkSzG3@(^n,⨸D@*@,SwCnxst#RǔueӈtJ:0iSb.E>m/kZ]H`?1ݛi Θ>Ql^,ܵ.;p54YI {X"T@kM0 ! <۳reK 8 hӏ5$W0ZGy ηLXx%*.yoF L/R,O5/RQKRmj1ۏ8LLJ !>UMrP`We:Ѹii$4g0@PY_˦KlaĥM/C06DH~]J*8W%!*Hg<_kj`C.5(@@H$'Ub)J~4 {*Hzn#Y^_Q e1kXAL/ 5"{@ rz0$ ҀH8xVN)>;~:e.Ǿ)AEF}Go)kFdtܹSHF뚜f,_"f;@C!u[v\X5ʙ8enA=U]urϏnbg(xCJ $L س nw3&+3V{:@L); U 憷+͡w@lY.3P:(U6ŹWupd!GR isj[%_)dcfGjzMzN݋GiSypk`W}яpjŸU,'xH˱?R+c2ztmM}32k>RE@ܹop<@T6>o:S8:V9ȗrfdL@|l*"*< LAQw98@uS9cuC@Gꩈ8&.ִɗ5S Bd]y==]'K9ܹqE90ӑZϟ*\y/`ܯZWmL)/93K;[nϴ٬_uɋ+b'sE S&=yr*VÌXa!F˅5Z(%T^I='@B-ѠJRi[mԬ&7d1btQнu}Q?9&Z~h  "t{'0= h8n$yeG^8ekӸ)J-h( phǁ]8>O 1܂0٩ZG)X-WVw[M\(S_xjˍ Go$\O7*{a g?1 E=Ǧm; W"R=#K(I/عET>gg=_kkwbAZ8i%c/,âiPRNO͡Y 4ė%ՐX_~z#$,rZ&0X?RɅbZlr! SA}tqA۝Ombv @-|LOSGo7zuۏY6u!>xQD?pu0gkEd['V_yuOUl߱TXEGUF+kǰt1E&b8' CvI0r8pXZ&mPryn4_pG~g:=R>Wb6 zi`69Ma u*U/|waGrR7lfJkojEDo]~ěcN@? p7.sW[B;(DCNG$v,vٟ! 9?`Ju\77t]//s&|m'R-lEsyۀQ?퇃i$e`.p7u1Ա{?9-;}*N\6aK~F;Nx 7jh5t#gT,lemOdsЉąA}w )AByfKA63gX R:ކ D-4 S} o802.xN89Œv(St=aSn<;ZBOf f`R5*XӢħ@Oss>-=}t)@AGRG\ɍ'3-Dr_ }DSC$7Ui"J‘ߜ q k\pD9$4[u|Ȭ!!i=TJ斮bſ{[UxUq`k 1*罚I! ue=(%SwZbQz^ pl]L=o~E|EGkqXga1쌝/Rʟ= B%PjE4s"kt2}مKՋO@ئ΀ K?, pF.ۥ?/w+2A?V8R[.w?@.Ŭo봢һ3j-%f3NѦ.v<p+iȎͼi9i߹F( ,;7&my[؁;K\[Dֱ}E;oR),FB(IRa)"0 2Jd8fߙnTT[>rf5 ?w7 0Lؕ @IY &<2SH%i]&~JzWC-6XTnBSzRnj2łpł}NL%*gi?+5&"!4gEw3{^zG:J iEF[-̐wJ-)zӓ&oF du)NOhl@|Q@.91eJdF-[#xøP%+q67da[+_oc5߸~= Y <1(Tt%д_ 4uZ0$?Ձ S8cqZX&N,pKfu UaA1AXAHEJ̀"~f ypSTp7 srni}*A;5~@<3rb9I^+dN@("m^]nNmggʧyDΫ+xۢ9v(.`5E 0b}6E2 @Ϭ_ʊyW;{`׼/S Nnsbe8%F-:ڃD IG ް |_#Ka—^[mx4̽|*Ɓҟd C; jD#.JF2,µ,Np7} FɇpqkFئ͕Q(EP@)N [S@X'G]okJT#K|.R& [O>g91j09'`X1pgs~3܎J26mDo b: Ce.+zAs ؒL :oG9ڞ*T܈Pt}BIMj. fԼVfYJ. lQ91()D5 Ֆc F.]0mSfY tzGt (kTdC.v}|Y 2}i B "D# "` ,AdX`VH0Eb"B(Aaxz>( w^?cl^xExMM6.Tt>滺0Op)8vC>78'froN%@dYaYST|<&=wkJ<|,4 g3vLLf+gT=opҐ=}X.L5B0!"u}Q/ {>Y\[*XHU5~뺜0\<$m >+d3Gxli1U~:?28 >F8̦4Q/3yވ !(qTX[.i >|9;#x3NaVkvrTCaB)'2DZ.Jk;ݚSWCKe} :FЄ$^$kia O=t(|{K􊿂s=I(kfDMN*' {y o-F'[t5fM>G5P"^)$ 0(j$אwQB7:b t3;?re6f1I=(ik聂PqW:DQ|Y=uѥ.G~\o 0D6B#UС?>N_-I{Z8x`īK"Hp$4#x[yZ=mRڭ$T'×?-- q"m|o* 7x<WTV %(5(h ;:B W bNwcLa b*R%sƕ^N4Fͱw %w(2ѱG@hy@AH{4 *"1 )! 7p =(" "H :[H{QBmI>``!?_"&a]3:DX`EPUR) ZOw/w.V|\7 B 18!FW P`^rvٱR0ikzTS@2%1iwxT]Np/C߼8N6TӒ 00@1QYe|rǓHgnc¢( [lֺsEw^LVwwP(p.r CH{BDwn=o . gidzd,%0c7oF0lޢ:48&m )2PyOtNgcFBX"(k}vU%IpIB,LT1X$U@* j1kz# %dEd7YT1* _V7shN7g*d؊&K":fq՝j1_M󎰾xBu Hn:93< plD9m  o7* ~"iE"&i\q;{'<mH0D p N5.^wS vJ+b?w:\S0DPUaڮogS͖giΏ2 ִ(w䎤'Md))!٭0H@p[S_w1b.lAZwȢ}Ʒ0vxz/IZsV(q՟FdV>?:Q?+)J5½0<-,nD!5 |%&i̤. -$Q(U@+>z Tr\၊!^IS@ gUSgԨUY _px1fI\Eq Ӄ y{ |\CCI #:m`3VaGk|}s!|Bӂ=lZbͯF 2S 1q4% ,qSmJIԃlʘJZk{/+ 4z<\AD  cndk}&x^$?Ea* X2>%h[9vD17DZ2-1+]ru\& GCu ; -58)GK?h^փ{tնѷ?䗘ph]Y@.6 ~rC/-Ex%ػɳe/y֧MsVEX@r#k^PJ{LTĊT09w7GMU]TQX#sr8x`?[?MIR锉+sH ;dҳIzmpp"T}nW^f UIw#, ]Sgk/X;@>;F8y+L R*V>d#/Jj?@2eXߕ:FȒ-mzѶZZ4Xqd#w*XZ O4Wo3n *5?XɁ _f?qvP?*8rP2~-$PR3Z4vhV%D?5ۙedJcA9̇$bj}>\wZfǢ'"C=-47OR)j_yy1/r+j0:Ŵ|8 *"6-L7FMro^tL9Uhn$S!gO/cEs9ZޅU|,89Q*@@a3()^_Kn:ШP !lr'<؅2DY"$*i#m!t|jԨ[3J o Q` ~ɒ6ooEd;?o*Xyz],\oM(1+3 ׿O%83\ŋUZU=̀{\;Ѿ@µT{=ѳ[p1z j1 䔖uCe|]3rGR7 JG͠ "Ivz݃o~;1~EJ]uZJ"6_>ǟwge@"*څޅyh {%s筮/nD]J@pV91ĵ{I/aL껜ߝͿK'08InFۇ*x̹cI< %Sf-9CO{ yڍ,@dA"bPPͿwW}O=4%{s30U|z)KvdC,Dt o30O^NOa}O}g~5nwݽ?67dpPa)TOX//qt> x5]#νj͆gC (igtɬR1;ղ#jv=ͷH)5c#ܖlm% zʠW+$ ӎ}]SM>@ 7eE6ƞx U,ê4Sy|.QF|s S(h3tp5&  $MBHQwd(KtfLE뱩gVH$x/׬;!<ߘ%m>jD ŹݻltX .㴲 }V΃P&cF|~Z{74ծ!C6xXf"ebA7K lkdMT +'"uY}y9pOB VTHէ?n$a1qOJ|J@s{EE%OV@'}_ź΋dIir jYBSSVg]e3v[\ng-N%ס!CئXOk9koUY+Y@G>)1'ͬlz;-67=o?:H!<$>gt@a[ Q+Kr{[qv@z@Rِ )1 B@G!̀M,%9K6nH1%e}PS0͔mWZd((=2fw[Dy/vT*g:&c6C;>!q*iM2sh'E<})VcW^w!?ͶzԞpT$d coGe)(Grt] Eunt*]4ҫN.=Rҟ{87PņHg 5ݒ N}o5j]Σ/¡_)`^Z$l+gnȷܡJ{KCޫT@ -CA  AGi 1RjbxD7BO4cdmu ĉ&'7Z&0 2{{XJevƉdHo4>s<(Q^i`bȴ $D! 1<Ɏ{QC7˸4JL?1f~zPfg6'ufTy#$i]gV XwVh#XVR:zgn]7N=,z &0|Ӂۡl<٥;RlHo ds.9vXGO/HXi{ a`7*NK>Dȷq1m TD= uƇeA`_f~Q/Evt򟟑DE w|i> U@<\t8Tѯz{;]n; ?7M 򕕨w=R6s/@1{8۴C\s@jZ sdahJ!c.y ΂ )n}:IJ)+8jq=ۤ$w9)^74SE OJE ~sيp=Z,CUrvhHpUP}/z&݇{H{힉[}1Xc+;IVg08sPkɍCIfh6FA86v$;k<O;'Z:/GyM/MJ֏_d &R֓aׁg6(`O'NYu\>W'xAK%T9o|lt, 䁹XWRI @=D9}kYדq'C y$nO_reBW>~؋ _ܪы*EGaY`Xa5<%Mqԑ_B pT4_VR>Gr/nih8SLWYLaH@Lr옙I6ӏzn$+ pu:OE+CLYWM$ ) WYoC m{K -L.CE'=pr ]:d1[ʛ>Fg7~(f< =Q!_ynkv@5({.Owo۩ _j(|yG^_o{_G+W6 jf\mէ:TCDYЧ;~=Є n(w]%YsGh[_ّ ~ύ Y鍮5.Jamglc*T98obN5" R%U]!|ɍ\;%$PB \ {̭des8,OX;U16-Dl$mL!Qa:)xrIoagTuw+>430?M9T A Y5|Uv Iw:Fռճp_>Q$ҩ4Pm3CKHݵ{Gv>P%qM{p[wsrcXz'!B;]=p}a >RtzG(%V&-lvmPٷ!dRExIϘ0'(yAER&?Ԫk5>D r"< S%qpXxȕɬg% JV.O;KNnS@'h/W<bt;~m4.a!X*Dl/#@'פ^膙iA7ĂJskI 'F|a#Y8m@6M hI&sC8 14O">z :o1&AMeyg0) C?fk5/j|(u?}u|uy|DxϊP'm5G?1}g]KB̟F牸&(4Zo:UR6gK:qlVT:n}sEM6i0y%TAw! X2!MD`dIQ=A65C 0b̪Sr2 7b-%(*S#X4oNb5C⥋Bs֘۬@yfUY, > ៫IY9NYZZrσXҵtk9/B[u7i7c:kݸ%~oCV-^̵m%u{wO$f vMJ^ғRj-?:_nCB5^x I--e-ĥ-fH.v _eD!|c:4k\Sr\ь~njZ<, }Ռ5 B"?Vr8a\zrR%C6se1ӵMI"gdqS\bVZ8qbӞ60 mTX:} >VG;B=kF*S|~m-R`ɬD'hZϭ {s@gs';qM|בH48Y3΍ʈ]9ts0oG68xܝNOE _TzI/[ ix)RU6DZut21>*\u$qU=!7ӲExve}uh4ۇrxT@+;2a3XzyE=1!+ XP-Go5o'8Z凾[_9Lf9:H<7*z=Bg%yccZ`JMe}bFE57=3^W>Ĥ*8Ʃ2ґ~uύzֈ+ޠkkOPB=y:aJ:,k[u|d#3jl&Àƣ*)9v&Ú ފV~,(G@Lwq=AZ_ ,|W,nTȫǝg迆+MqnXc7@D\(='-{Sk'Ĕt|[IhtKX5w{BDmT$3 Fsd`]Xݘ=2: [m8XRe߾*Ib|mywW<.% XT "װ۳3O3 降T˷ĩ0Nҵɩ4xl_ZSGEK l],ID`H;UqJl氐Oc{] n1PD wL 91M≦gRi]* {)~ʑkq3z9NJ:Q$tq+guuqs:] Sxh݋nkܕ}s-3eџȯ3uk1m?%^AkWJ{\S@DlshU]N:yQ/$ sQOAIi~ 3 @l1;K([wG*er ZҀ!n{F mc{T-mKZڠObJ@RqH4Oo;O P Q?bHI9jħW0CV]a~Dj$l8Sq(K7@ +#D)rm.Ck+] #HpA7lHh<ժHJNqY+o(hcv˪tkV9Oz<)9*^pDטz]nVOtiڜ~& Rh?6ieKZ-wDžK62a~WiLYmSB-i]1$Q,usv[= e2I~U.Ǩ=QRV#&FTq$0#\ <sl} ;|\׷$\fyJ` .߭$g0 F @t\V9RqsKY}aRN[ H{ BҨy-\NߙSw Clɕs}_ 7mrRKWKn&K!ܝ/ Tؖt]Dtҭ=?xQRB7a:,DXd4ڭkXw6q =LRU-?^/I 8Y~ZBE^V' 縺޿\ }$lABr鏖<:nRg/^Up+~58}?}K?2DZO'+x9Nx'}6^%lmεw:o%K9lyLlG孓K%)W 1PXseR,)gL%}؋L !F+dJCu;84,w$ٸه=̮ vy{l}$%Rӛ1(*n8t16v2}meٔTy6eI+Uļssg:T v91w2y MuwUfܜ5͆j>!mkFN.Dbv_:V')w6:3Mx5>NZ/H1k3I C_4!*MOJe+8`T8y#xC!p7u9I%YlQswtZT "-Ml-oyC_$3ܕ̝PbɵƔH61CgN|\WBW߿W=H_l$I+K>Q\y/&("15 hp(Bh)(H䡖/v2q*eq7\ŋy;U33㳋#ePrT39=:fNc907ᬄxXd.V6UJQg'r_#id؋R[qrq7xmuc}`rwuyHd; 487M&J04AT^O J /ʉWw2V$)#~t;oO*ObN_ʯˑ7%PW{v߱T9~ߕĞ%l)*`O#k2%7C&EJoPfғKꧮr{[We2ɭN zYR}Ƶܧٌ51,SY 4pdlʠrBG Ers[?ڑbc9*cGQ'hb,FI"@$@:([2YTj|/zh U8^7NcbӎWElD34G^emm5ն7C:d8Ld=ٵnJ7zgpG .jXB@++J凧6Z%*J5X uD7JbE5:sMzF [KʅǪ2WtlaVsTVu/]TLl0L*(b^xr$n^>iz}Ӑ4D.+ =Dž$$m(vڧny]^ͧy*xV1Hсgfo6^ǭ+23Er7(P.O;CO'܋ӽaS!UuhQEAP%"KrExv ~t6% 0Fnf>Kqko {bI}fs2\[-Hr@P~% Dza'׃ЉjZVi`z96)6ЯZg \`!EI?Qt]LeP͎Z?2M9'di{Έ$%Jg r0*ػ+wG(C"EB/1M9O-.]O/apI!G[@vɌ%G)!LA((~KP<'g`y#  4ssVb z\}ƗągIb&o֤ag3l TI:P@IEFk֞k]ԥAR$jb׾ncqn>IH 5G,9 la~i߽͠Tn8?޽so i( ,X( o-N׸;r=~rJGJV@ +WQegجIu،7cST  B %f괾hCwo`p4 L8%8H|*y椡pe).ָ\t.I oSu,^TP'G< _c:x?L^U͑y9nli?k:.wI8 R< TݪOGm"3 vK۫L< @`lke<GfHpEK`Y] q ,~/\DQy+UB"L)walP$-ѐt6Ct#z 0nİrJoqKD\ !"$xm \fo^ J66s\D~8]O2#׬m+0QS̼fd7Aslc$\ԫ?UEQm F}R $ (`RjFĚ][ԫN+4$R!D].2QR- =]7w/P2+'}CNV]ՖjeL.i*zUGftOվxZB4+xTwn~p<2UߨxA#ǤAm^ i{N-/-Q͠Γn95} ~tue]Z%z&)&,;kJZyvɖ{ TPNǾYd{AwIuvÛ䅳h6MO*Lͼdͭ>{'Ԣ6;T`2]5ʠ;:'3[};FVjv )()m$t.* ߬;>4VCT>!Cz+u6)UGynAC~9.*6Mht~v$5vg+P֘kgΰ]f)$Qn{)!xAL*os:w#uu+gveKb}F}0tg-ǡ,ɞmt)%[amlL /I&@zD>Җ=v<3;ٿ?q4o6ߡgC1^E.Yo>y Q-.?W:XQFM dqjJG1y3®;]x-YO7Γmu=ᯍ-o{NVcpY]՛Ν}S3$`Ʀ a!u2US'ˍ;aanC{eġf rܺݶc畦􍵓BI&Vz9< qMa-!LuɃ*sK|%06x#hs7U@3ߟiEt>?+bE_=RUȩ z|DR)?z="$;' }o:N%’e0L$[lOhu[,l){aXutSжc?f^_{!9UGm)ou$$3B睫N{k"zqqɏFwCmu?4^upw^A+n;!EJ%0:mWps 9n5?r>8X["vn;!ۉHI%1j+`=3 5pE7ZS'M"| 4S*_*崗JgKCS]!EUw&wLudj~+Wweae q? z=G5iƕQ(@!"` kP#ųjMk},vwq_`1qwb #iB6K!O*~hIa%%ge@Iu)R'HbPL1%YP)n8oS2j_4;vbhL $?muApa~䇙h"FN3d݊Z\d.Kp)DAQ.oTCt|z6T "a~l%z :/O]/z9ց9 )3PT`C2 {2í(XO;g} 'sx % !)_.u)-5Y,Fk8ZF#))#*t‡H "̼K&Mc xdAu.|WI1{EV6CmуiX=F_{7'^̎vN/] :7x< pI& q܎/=mccŠ0W3޿3}'λd9ҪOb o2~âI2G Kv/ծ9䀐oę(0W+"ć T9pbf$H?..mѾxn, Y 4i\U>*]+NNy_"׫,$RĒrS)+_~Ti^0nߋtnQMM3"!~2eukAC.Lv拨՛-z@QՄMD.:ێg/-Md*eR< rؕl1$y&>ok8V<ZZNeX)gK׼q9֗MQe޺œ8^Qn{H0{#([ SN:s>?Gs@|\U ⺗:MMv^ߴ.Ʌ?Ǹ}\;{ȽwDQ|R L$!rRa$ : Rl9- .se_\nv/K?_ \ ]ǺKf>:Ws+`(pLklyZ$[ [~?wS( II!P$ 4s=Mvm|aӯ,3)^Hޠ|FY+oNa_]D%h um;@J>/a{X]v'׌zt4t6} bY,̞"XฟҁJJa)L*'8 Y[hgW~_he <F3o=QqsNSzPuC|zuOⵒ*͏Yz-G;4xU}$pUA;;A~c0Matv=iuswY>G?I|gS Yf?[ڎ9;ѴR9[g. (h.6TJi`Wt\{N2iiCP~:a܁w]/Y.}WKM3n &P+M-;% r8z>gnBTLx[R|uo|ɫ^6Pv,WJ3 (MkYt{|Cψ8?G0 #^o^Ct1 +T>Ɛ|oɢ$@D@DʭPZ~rfBWfn;“߾ou\G j=MlۿfI[ ^(|RB=O:u66'/{`ަf |@sGbC$z?:J;WR\U cDђY0?T4z=uISϞXU?7_$9؁ o7|KB@Up@r8O-]meS˓O:yG  XX,?Cm^<TnY/}>:AAǩ Ɋt4]oSdZޓ"  zm޳{+OfJou ,J]D kSٸ̿m12F&LJvm]W쿷<cLSjoV(B R^,$ |bT@5zTW#L*}R|zPm57_ge]y4Uj|\Du>Ө5 N$4֞ˮ6*H|'"m܊c3PXK)2̢4 B:!a蔻p]ؽP+ٮucFwJu[Nbܤ**8t:Ws@sY?6)_;T`g1M h{K ߽d;_ϴ $2ow_^כ Zˉ *TNiBr]t(ꄗ!0"/gecSZYfOu1y Ia8Yio $͛ra}WXE*ӈi3_*ŸTZ qr3γ٪UJjVXyC'edQxHdso` I'kJ(+3&Y7<mF;]]2:\~op/Utɋ͓zyMwEm_W';/F;He7xh['w}.OKQ&"'+omv.lp4O~y7{]'!K(Kz&w<FG{jMeqR)T[bsmN^sTU$S|.-!+t]}_1]S WOsv(ImhXŖh.7ZHOb> f39kTC) KnNկM]U[V'*I~V6]!D)hۮIn=߂QF5?(+nT׸3Qv(x <%h8rǤϯ>JwӚ/)moT,%' |Ӫ~Y&n!!JPb<]|3,ZSS-(= bl!A -IܨKl]7NbxS⤫P=Z 31xl|杌9zq 3[,lx#a~=2!eӾs^]=7v4V[Cd$$PD(C艭wp|~Ojb8U` ڴwc-z-!=߁{阯jbG  P@D }R@<_kХuQMWJQIYb;?&D4!v/CD|JHQ'Y+TrCIn>{6Gog9њ4`_ 746G.ԋsGJm|:yww^}L>>k$n]-l ~ٛ7oe|۲Hsb(OG|wrGiu? &5ڭ5_y.XM~]/~>GznV~9 -`nL5K/=^~Uɗ}<^A#]Us0v3򜎬oɢCGb;`Cy^xڌV;h ;EER%Mfʐ*&\M5RoW5}ǑOSnK1[ͤ`xۍՁ Jė/NM .Dh7ߪřjF {k4}ikɵOHXvlw Rй3amٮvo,-c+\Ks;AnZAwSRU=x]un:SwGcc·^<7xRGXX5ڼojVܐ|mX2RTf!FKO`H@X@{Z6\=g{~ךHا|_>7Lݓ 5j^oLMtGcgћLUlՔ$ D!$Fr0)0iE|0G=i$&Ms$<^aÝ3s[x}.ǂ;tC!O-=?%*< }O ku% B)~' uԪ 3"&oi+@41yɲ!{;Ȋh? >+8lΪώdn;7)h>)T*<݊hnUc;eiM>z\x wdVžS޸!i&۷Uͺ/.ZKRk%>ڻn.=]{ll`8bYS&7o[t=okQ[v+LnAm y~Uػ6`-x~/<;j~h=b+-Z.?؂xmiAKhhgeP0|M)ăm7{~^ }xZa}p-{x:(.AijA2^{5liwuMl/wg94t6hwgh̶ϣY_f{~8D@DDDDOТ(JؠU"#+mUEUb*QTY﮺oqy Bt?uv'5Lw[ |OܨO@\ܷٗQL—4Ҭ1J]hL?{iCvA*et^Sn(v{)LM6{ufa]T(솤҉2pҌ\"?{+7ㅵ+-۞_@fWZrs),Z4 ⽸n= Z -[iljYhe(ld#YZUnnI Vp+B-mFc26ƹ\۲Rk޻Q ̱n>qW~}7{亯".\S)ss3"`GIȉE9H@NqR,0 鼑]{X˵fu!~2ck<1[}xű]K@3iSj#^?C??'H:㥐e-mFh b bku}y O x~F_[)`n~.?9O38-Ww%7~ uT@*df|3xs/Msv&z]Sd>ӃD tKw`V()J@qLqD(JK!]#/eKKCu%Bn)K/w#ToR&$CbQcP& DHiX,!-bM!b6ЫcV'fl>7}_w4sg98 $brl߆=?@U.)c#ԿCiDEw&LaLfQ*y{3e^b9xJUBhKw=rYB6t/"BNJHx,>wG4`tRʽ6ĂQ]{+0qad,L,5R"-+ ̈@HQ ax1IZ. t*w<#RL0&\XDbd #d\IX\w޳F Р?Zd[RA kwXC/R X8Qh$0A?بxBac]}ym$AA{JwĘ ?R; wRrbOf[8fwpAH墚U ֈDCweE\RdՊ2DT]C2ا'7x\%'9蘛Oab¼=ն,!G ~GF'C1(w>n)(z'jGtt:t;kMBݱth:.x>X Co\zw3.a;Y΢WǼcaL&y`/&?.l/2ni`.=6nmw۰S^f;Ncwh6g:^>ʅ)D#KMk1CM5˂?ҼYyѭh;!.Q+MX|f}j[Q_exk.TDv2:F߆>'ۖn}̶KiffLk'.TN0P1OLj|aKc<ɫ Y _փtqբKg( 0p~qWz GH):nl>hS%] az8n &Ze}Ss"hIF3ƹӺu#aNP*dD%66967ttJy|6fi]^AX@(c[T_NAb_gʾFG$KiI)*b,8-J ),Ud,}ϷƷO?&٣>ȽUokgyAAp)WkAFzo~ˌgaW&l,kb!52,xfI81Uc{'-ꨠ! X(Ƨ_~G| gu\Y͜yQ?߹鿻oAMo0V=xWW_]/Œxm]{̥5Gt4=KeD!2B@'R,X@X#YEEKnY"0UbQS-kGWIKakCm~:. B?h{=eo\(lHӹuo'}zNYl+l|V̞ ަx<E$g7[GZwߖtoz9[TF݅Ek~GȝT€ $!IzĜ xS2* DQTRb䵈X*ŕ*)eAPY1X*MK[Ȋ*,b8X>OwإHXO4`bVB(*w/nLLt]`}WnV+x6zN;Y8h}0~װ뼺(A@TE.b]6v('j|@gs{o=>6u:dDM 6zf(ě<u$EU٢0\ˈ(YdA!ܰf 5ƦY%TJĺ)!b=)S殦0; T`QՠHw4?C,X)8i7H ^0) ɣ蛇3lrM5Uq7>w̮s53h @Щ`t0#OxVe\XEtr??3t,aDL&!>>@" ""aPȏVP}V[ 6k`"Y?(XNX^6SIٱuc;kՁQck#.؏tkk7XF҇`VSΐɈ5(=PRٳV'٩)6gvtiQٶ3})f}ҒmK/#z0#i ` Ӧ1 X֏t@*fKjp+-@JRA@%(Udnm7_. ǰt׍;6Yf۱lۨ1(SoU Ć` Aұ`l$&L q,H`:&Z^qfE÷\fJR *2i݋8 '-UVT4fB}Z3 l?+q@Ifӕ* g{su͏mV͍˰ J+JܴJq(1 |B ^èfS E jRL )e=tđޗacx ܉bv~Nwv²l-"ee3)ne61ul`TUTF+c/2`eԪ BihR$?'X_9S6m緆ԅ\H@FEuESBvlmeK,"ȓHr3UDiӐEyM^Yn:ՙ*&ƍmQRm?+f%f3ޙX ( R Bɇ 6<[=&Ư+f? (cZEÔa!L`a ֽ)kι5*&UnizRk+&0!YCX)̰1XE8{;51yszm4NZ)`=wOb/ 2p)DJq?|A1d J-[ *_.wyb|碅W}ZX5 C'YNQTk JKE d Vfn`U.'88#K%wE?|)^:Hd)k5 \3([иdˉ[H1b"Ƞ@y`ҀĚIDXAdbmɱNO&`l] mH"V2qf,Y &Dbaѩk4{ɑDdˮCفkao`K $D\)*H(&("%U &L5uf~>]3HpAZHMfR* 1C,aH:e,PXDE4щYXEդީ(|ʿ+^?tk{OOޱ"XYYޠqi; h̔(]g\ nY$f QXahX`b,c?Xz<믏퇞y ,Abm'+eP*TuM3y֥榠L \(PY Z>zX ӺOyĘY?G,)`a=A_i QT1&qx؈PB,JΙUXaB!'A aՏ@AM}``p:P##B=0~sI 4s{˴!4Myd6hXVVFHHRL֠H% m"E Pх y)A'J@5b$蕻D^U(1`1UJ'SǓ` b+ҭ_;jHWN")D.+Y! $IT˪Al_k[Md@YSЁ.rB@X,^fk^C4LX"K`˗OCVcIw|`ZX`%[ `e0 =Q@OepނK};^aj3 6ҡDdUtH姃,{:{tDZasc؂v#P' DDֳ8i7Z=v2 Y,8ȭ.wG[ *b dBTj ZՂHD>3G0eUc?bS*%gLY^}v}֪iW72}{v(( d(E!l Y?f8LNuQV*نyaՀXb,"R?ŷZ( ǗEqS)D )$( 4$oW! Ock^N? ʳv0˫0gNc%SP_E5+[IADE Y',J#e{x bihbAY;)yëHLoXEQ:Ly Qs"*:K[@`ab0Z-1$DYx'qC4i'՛J!aɤ [2w1F((#?~Yv@,`Ԩ*^o`Rz^ǁ`\?saAK2kc|+ ?L]UIڕH3ZE( sWCc뮦dN9ZL}:ׁ}63Tm%LC޶cvEϷ5vьMfфxyEjT󼱻z3Zٮ.bJ.z.:/qr^3vP>ޣT7^y^d vq[ O3ⶹP;ZCFjshhVtQ@~9 =]Up ,Q6IA E96QÂl"EJwoqo5b93G#>y=FM少qKTq_Y{M Ok7lUH!I'In9*m31j(Z?I8⥪qWls{l"߯: efKULYH  [ K T.?-CE " %:ycUVJV gjŕeV**Ҫc%EFTUY j+b,R !|ĕm)PcdX1)m(==۔#idĪP+63gi[Jos:+xjfҠũ˅dQth?E7TҠ(#Q ҸՅD`#TUY4VIG,@,+H[bc 6³j(T m`WQq* ZP)uu]e1Q!cTRQd63i.8U [bT%bVX(Yq5j.PT X bQFjVXLaYQJlEV^]e&VL+!PY_`,U Y5jTtHT\ABX,ˌZAwDcT1+%mT1 Z PTikU%BJ~V լPbYAzJՅC,?(i*DdݡSLZ_x(4ݝ~֗ӹk+Umn=N7j$s~sUy1,|ƍoKӱviRG=OcŅM[x^ZsOr46]G1mjC= [>=tRvwՓu_VsTw^n]_:'/w|j9zKQ6Tt.uOP2k/0RVJ}&[+re䯜'77v|mْuLw3g3Xe6r ꌛ%n.>i?7ҋ›] ){ mY`蜚k8\t̶~} Ri\̣w?kT8gޏBS^4ͮbvnˇp|`, ~eNdm5 i4-NeTxI=; )BAiA ͧĝ2JO ",.I?;AK^R5[K=CXq> C/G"vU-eCZ5>o}aZnP#lV׎Wu }|vx;0 A W Up>K 2neSGvN۰YZZ@4 qȥ7T( y4dE鉘h@E'yng׼=;5YwN۴rkmdN6 ۵;:ru]LA;LQCjM*NwXDV%FWd횫@tu.tw{/WwJn3Vvpnv$wCkPn\sN]ɵn"srqwq2ٶwwwn9vˬW]bZvj")}jH{̽kAJ۔}E U@E)HJ{Җ1eꪟF;4XWn]t;]G2.'UVmZevĤSBkU %Rέ)NT٤m Qxrmӧrzt=CG;wڷ&n}}=ffݰ6 uA ono37  SHxy=s;Y tyjc3fk׻S˹uʜw^;[{ﱶVޞdq׶Ev}{:@P>Q@d5#a UPKkm[8lٝ]=ѾCm+LZfVESQ@@@%PRPZVu' c5@(TV*nSg8*#LR= i턕^v;` iPGo1@;V}W kSS *c/y\ ԇwj픈}/Xw{yPq}H /WZ06ƃ7p>(mBqm(4n3s]wu\W={y>swP CE:N tH@ H@ V/nަ;+zﷻ3.Y]ϼ} #dz\q-=ppÄ Z@_]_Ӯ-cP;9Y۸g8{Ow]u2[=x-rȋUw:B.TPn |D ѣ&@F <"M44&@4FM Az2i&i4dОM 44&4&& 1`@4d&L2`=4a64ɔz!$B&F 41&&CMS2b6==4ڙ6TSF=O4PxѪ2 7{*hx&CCѩj~=MhMzM( @& & M###iSzS&L$z%?ISIi~M#1M?TOLS46Pj$ A M4iFFdL&&a2`dFѣ@ M&L4 2~hjc??Н؋|8'fG5t5i0Z5 e?EZ,YQ6x@c^[>&S׾5k62!0b.2 ~8F *^*1+aGWnաŢ|8[_#f ܠa|bқ v+ 46CNnrH5Qs&m#ߣ/~w|,XAڕ8p*8biRcM­TY5u1hUk T(wr1u3m12CR H& uX2iUYIjQNeVEF&T1~/=<[_^k͈ךIӧ]Rs,6h4M7Q߅rMc!1Bg{}Zq%@UƑb`sϖcTH׼pXE`.s)}x ݞ ZSP6ʂ(nfVE0E;'貢*(KT6]2k_䒥,0Te!e &͆E+X35=BVBM]\)j4Aki0h4,XQHn~^؊;+Cd@5ؠ?r6m5l:S, ~DD_2S0:n+l&cWQe/ha5K kgs6bFu)=kk;_#a}7gB~~ޟ \؋ŬPg8ޮ?a/3jq].q ZM娚ywAá\%ۦy*OL]1rFzɚR_&T{iW]1rh+N}jk4 }[2TnV?~)i5 E ]^FB(D^fDF9q,Ip"KN6w?}xa(g7ՙINQ3ve"?Gr2 '"N:&z$mb7Rl~Xަiet7*~WUeZ/Ҟ !T"VO#rKQXgJ4^bo꫽Gmm)hbLNn86bfgdjT>'S|]}WgR:}LwB}x" \R>.BQ9UM{5C*O`[唤Ԧ/`("S? #c7[+ʝƗpepl*oa-G]>;( >?uUv+X;cq钊g3rghբT^^diRikאO'\-ϖ{isU[um.O_zf\YXo,b?3) Pң~B8 H " gO&6V./FƔREolqw≗8 <&ȞKcv~.s/OmCvSO^Eq'{o2)D<:R!uo 磸ً)m45SIWbA*ueUrH%-/ʾѝ#Lݰ~Xi]YҚ)*A8D E|W|w][׷M[fjO}4ps͖%| {N}Rn$ tͥh,Ƅ/oRx&Qҡ23SA(cIےQy|}Yp~}K=EBn;uO|I@vsl8_Zϫ]=CDϻal7!1dd Cs!4&xlayNJy;LJ%/2Su3?kK2al 7TIYX, d@C#64%0%2vL js'^ zP;ũ$'Oގ:'Oj 뺸* AbȠ^TZ&zPcD XlinjNwo vڂwkir*)D+E8,н]M5}; q2NGc LXi|v?mf*/ mb ~j'ah̽C{xo)Hڻ?𯌜v{Ά&vdR㋦~?o 4?߸ǐa)B59YĨz"m%R@ &v*3 ,b]Ev?{6pa?t{î ЃtOaG$20˻4֯Kʇwr"TYe)b~apB,% c&Xdk:^/|9"ċ1D D1 "F" XQbC+e[TE;;TC'ʅZ%F̡$(B/RQ5Jm%Jat".XXQ*TU`9N,,Cʩh;wjpŕShDuQ=A=wS̔kof&>0%Tgnv;gIU֘-`JED]RUU3B/|HQS3QyB6oty+3f,JPKMD#%9 Dó.Cǹ q *6KP[|g?JyNƾ9Zݲ}\skb^9h*MYi^e=CСi0x"#ӴUQH+ "UEE4B2ÎJZ4lRx1cf]U@H~W m`1\RA+LHZq_p]%zjGIrxu)6~"`rVF.rFQ7~k?F9{,>EOZZ}lEjktmN%Q"WUUa mɓ *V#wsʟmt祢ᘹhZWKW%.صM"{]ZMP.͘"Jm** U8"EE l7tpl N1iB(kt"/gGV/dŃ)~HoI'%x׬h?8–Mt)/u1n2 qu2avHU- hRN8kK&p23Nf2UGvCu }O\ ҂UF)iSVk1Z X,;vHt8zHR)RSKjgvgOF;'kIe1:ÒFļYjOk(N9wH8TřeK6Y  `[z%JZ &Ɨ DWcj ue4%-B&-N94c"grst-XK\H*"HH&7+)SFQpNdk-#5_Ƿo҅O0V_gE\i!&CyŖّ5cYy@}Xqv$WechDL"Aݰ0Q |v A"QXI 2Bb5ܗVf6^d;[Ś)d*kLTnFUQ.1XSJby` S=r2C| e%kzŀɄUƕ*W):WdMwƒi 7"aETLA#*[ݥƛT$]:*G 1.!T\P҄h:`.X( +x^$PF{Ζ }ږTC q08ĸJρ( TR-v%)2Y(91Sx͂DZԳ4tu]%&pٰP 0,tZZx//=~j N`m/P+\ZsҢ'~Gɗ`m,1_.^\ʮʭ1'Kӣ^4?޲u9ꏅd"8,I՚a(n&W[ H9.w޷Յ ,rr,iLoh۲Og=!"TDvo8"EaY~ <ڌlF''ȱYE2Pep߾P'P^j娋[_Mi4#x+˛Qup]"0u6e 4U!*!X {[l8.&PJW8j-8b{lF(d j`y³\:eF|s1+kjMb.1#P.yڪUFF>¥'_eť*- ]C c*!ŧ|\~7V ,=2+X?u(MXOMX~Nfh󖡝5D}/9{yu;@2|;2uKOveur1ڟ#P#\SD;_?{C ! 4?GWdl'o9 bx:tYŎbx~/Ȳ. }̕?fTۤj)ৌ밾C$&VN1w;H??ܯL<|z?[N\vZ׽ $0c Ѯ߃'C?EZ0-" ABrч_7ҢHJgݶ *p?.5! oY|cd(n򟌈E\(BꞕlT!aq!DvSV l|]IY T8˒W8ufy(MSU_fa)b\CK$DmlzV[bGƁ%)VfsL2ߺFni@Gn&k;Giez$:ʸ#N_[a?Cl:)Ug'hPWOd՝I͉ fRA65 {z6 %I*E HIuMLxޚzƤ2?t ^cJƹH5qÒNXY߹>X`S4JtROϟ^DJQ|k7j+FrC;Sz\@$d'Υyjx3^V|&q^v?9B۫41Oo4Za1V+ڶIb Кlps4sy(,l*J([e-5㳶'}Ɵ?:?)2A(dȕ?n77x,P{t,tZM`}F>5I螦]-1~'iƳ;(P3,q~_XO=K/?4 Y"Dj~7?ҥ@B|Nq/ Ī"P k:i/y% ZoFU!@ݵy F jL|L7]*{d_Vޜgvz!F8΃vB2Ub9)<NTI6"F'%?,+1MWM^3 m㭯?𗼰ڑ'XV0?C-'Pjs`DS|x|0+{N7]*X\Vܸ)WcG}%X杙*ZmsAFV*`fq\4x]uAxN7̵zm( G~VRj6g8WY_xnJVݪS ~\gq ?=-c-bѪ Ae/ʶT` [n99_x]*s(9iE-_DLm5hW_XZaƨTs7*E^dRѯeY ܁\1OBPߒj;i-Ou=8ަ)^t0.kfX#pǹuPE'd@ObT.)힖kX}w,TR8[x~"~ʱ"o@i5DWSƢdq_@QR]w~7 9hZ^QhngWjt6py?K3nD?ñ A\;;^鶴= 9wS%aډ{ɞXo.׳8=Ockvɭ.B'1I@vmL2 3]oy*, Ŗ ^g?.6e3c x7O| OkCz$QFPRG%ETS4d-B5YjD($$?/}1M L:ؔ{ǎOeT[`7Hgjbo/TVfDjމM^ ; nljD@>SE0:7'[Cr`qp&xO[LݟFoL_;?>v2ži7Sm?.&~E1E!Yes`i6A&|D”}=&̏CRp7A&Qx]DOcSGw\l%7L2B{ojn\=M.bks6UDb"cZ #XM&C<=?="Ȯ3'{uFo.gsK)=v?i$l $Wo%s=ch֠0t"Ulb](J'J @-S ,H ^Bޥ~),`'1ao}>:8zͼ^WB*#'VbgT,#Ejoy9;۽_ZkC 1Op6YzBFQ:IgsW>_meKIl@3Φ{TCG>#lp@N:u( r=aSoxZd+ .%vS%LQZ s?0"uNs={ lç 4ӥ 1;HE}\f'D`,[eNfו6SvU[v,fHAH.jmAXCH/<Ivmt@Yj"USq4Y+FJeTSTg̰1YoṆ4zwK|?0Z{9`HPNԄXSǁJiΜzH!0:֥WV<'N8MHgQ_j4 D j-A Cmob%#(ȽnfC&=ASr=dCF\Adߦ.-yZ.- _62$/mj)FժO%=? Y>G2qm4qg0ݏnO݆{\4oB _RJE?Kbr{L0B"sʪԍ~ua`fP ?%Mhoڿ@1z1Zƚ<HVV>*Ad|,HN7Y8sfA l9t0ֵjhj &0pRuRGy4FT|>2*r*6BE.mjޡBZΜsQ"UnFc|8'5*V+E2i.| d+Uo4T9*i#0gC *~X" :!J "Ab# -=UdJG;2bJ%hE(MlXcCK}Wy<׳=Ϊ2 m҉Ef;G ϶B,4Xn6[AAEb©rU/9=biYݷa؞4N?Z !N0Yj q$(aʥ0#//sDT3ϯ 0ֿ$ozu@e>=7m 7@>7uAYa2Ts<3>Hd?< ]w'Txkͼ~ Z-#8q3Ke3 9+6yS.l鞦zrj\}LAOe+^]dK[~XyA@H;q'/Ys3j)lj"Q ^QiBHy- d2BL"Z( PRfy1ɗx "! $G8- 4gݴ56 @;t^@˭SONI-KܕYhσH- A4bQ2[W{YJ&NROK r'!ntrn^- tfLT$#8GfDhi8t :Oe{+r䝀(?u޴|(/9Sul1J_x _nlhg9Sż ޺'"DF`V-51kziP7ysj",o C#MSW- !`c3ý-uYiKR,\*Ng.2 "XZVuK.bLKıMZ1`;w*R;fS*c˅Ě qfN~t+X0w.h)V=@O1P( P0>M["Jצ8kϝzKe }>\e\Wʣ) +k$g|F\dCav` Ԑ;A/fsT4ol߳Wg٣zthJVө˝20Xq ['ȹkZ8G^9|Œ9/ug7Ԉf[L RƢ O"k 2t9]IGӏg-^G=ayԠe!?OWot\ђ^w V{j|{jPg*0z:Bve*,805bJv7fre`Ʒ51t=RzZH6Q>zHAm?2$frc5bZ$(nd8rXl4Z1[&|>5מ5%QM)8qQ=9JIJoFuQ"UpFًuRb}]"mkyD+4?'ԕIq+Dx*̞pmliҪ L֝%1%ExnǑDЋD8LpN,wUZ gs1;r\e=.ה*yI[0Nf&.O^YP?O:L%!loT+o㩊=+Tf":5/jRgA9&ѱSR)vh$qj-hIMS ۢr/hT8ѪBCPJݧ80J^ݘvKʿZ)c^U(nO#ZafvgV>M8DORT4i5`ԮEjM6 .-[%fw #^Ħk ے:lo"FȮHۘjۣ[8#D-xUHc ā%@Zϳ[/XVdXE@cHeY"rftֳiAiߟWAvh(o+)yvK?O,9q D,?,t+ei˪*@^͊Buٶ[G̎#9 8RfO>ѽ, O 6kڴG䟑8=[@̺zt1K!~,‰Z2QV᭝zo*ՋX]})Fbk,A6d]J&71뇽 {/X^me)&%027k2* %- Ϗ̋#NTo(i\NHG_#+K*+B`ŐWL  v~MW9U`,EsnZJQVjvM)wv ՙuc_mR6^cǰ[>?mw}R"Lpۊδ2}^G2wA[W#jNY!Klt" \ӌn Jm^b'}Ѷ{ɹPY'o1},w`+kxxZNR)tNmLٌ߷&.ݚCC|i*RV&S5pXo<+ʸe(|9CH<ؾ>rŁ})DjK)@0/c΋=|ׁ'F )4TbU!!-MюW-*дմPth$N&I3tQ.1eA"`2fD Gk&7^3#BR !IIi:7b;D!^+[YuIA]دi 80a RN2"x(ZרlSS3#`zwKնDݐTڐ$YB! Ba$L:?<3b;2H (puS[uYjqZ|W}q*^je }Yʶ(Σ^V4~ݯ&`ο] )~|@$Z_:F\b4@>n,@,  `,$X(VEDU"B(d@QDbTED^MK* Z)GABTb"Uk9-0_"뙹v (]]%]svgO(9~/+!ч<>;nly{}x4Йy=)%}/0 *9Kb Bi2yT/6,T Rw;Wª1m) EX؅Bufs@qC6 ZUSٵ^~ 2 ].IN7o)O#I_vPXACFTA4Vs*ȳm{,HhT)(*܄ڀ[H(,V ;,00jcҔwCbXDAYFGƦmÍ XpCenl/٢Cu-!rml5I ߤF:UܲQe-0"P;$T62XDR|f,+@Rva+ aԪT 5QD.!RمHO!t[>8єPRY[3-"V:[]P~B'n{H@Hhkކ "0ΡK74P"ȤiK츛YrpT K+Xy 3+|T^={tE7|Ixa`$x%#W<& ́!vPͶW_ ޽~(78]yf4 kM3YD P)T]YHB<Dža'J%)P ILdLNHܶ &=جJL 2L&8uR QeZ+%J k 5+;zM-ss!bR wQ\blB)IEL֔ ,"jz&%e!eR(U ]m9l4Fa‰AK#b[\ 4UDRa3fҖjA4x#X :J:0Q `5\Y.rO%ۻnٛDjGQ.^QƚAHݥUO-JI$#Z @u&$8n2T) Y44E !s<\Afx)Ħva)b( jVЊ89-r.wb-%TuJ,\YU*AtUD8ZR3 nU*LH\N)uTؓjK !R8* 5JZL")XRL0QKr"(lP-Py9eQ1pB"E!VvxaBXؑQFj*ܕvӸ`56-[(a]ĘZ)i( CH1e:i,m$ՖsR*&Qȳr&c0I@sWߎ{ݱPeV20)&]\0# pm`$@::z*2NT!$}>Yl+Xm4;ԁNF""V bE.-c"bZ>>㫄{,5oO95 `2Sb@@޾gYj"g^8<Z'W쬾=bnn?u+/ ^w W5j>?\caL/n ܐs5}1gVħ[rw#> N'Sd0AxW84J]6Bmp,A5$!Ǣ.٭EK^c^ѷ/'+Ǻ֪{{?ĿŰ2\50$<bgB g'ںcS AbYA1وΑ{W ͦҨƠ[6iEWlߐMGL/7]iBprܑf鶢3jgG#zaAH ł~McEʡ.q4 xmn 7gMZ ̃6 > XEң M &]@ L0> xߊLM#))} D0$ $7YH#.2Lə(ɡ쨈igvLZ%}^(`FtyHk( ToޚUǵ51C\h1Ǘ=>BΫ~'JNnc %?/{cҾqabE$U6^;z5>2}2vnOvSb-t88V`睁Yf &)U/XtnW:m׊2a֛5G ]]}*aU~Iʦٌe,)Vw޻j/ O2}2|'.[1ArsJ3\fJcp|6BɿqgyV՜E)[]6S ڹ 3Ɛѧ&B.%Sqi]Hߵh2=$Ufm(x)o[}6zvmuvAueDPL:,lx3r:?k_Qd5&yu /lY92coxGƭ{%FƣC*JnoT05}3Szyn(oB3ahZye<#WGnB "G3l!`"\UWx'e+q/mAPbt(_z38/ {l2ҕz;Ӯ:<^s%˥*{vNm/#mPgҸ(&)(k$"ʧPDWoqń 5^`y=Īxۦ\BjPfKj`0\iTw cKqطC#;u>UUuX5ӨK 3)% V˨J!n%U+NEOFP 0!lxSnTY|+Kѥ I= ෙ~ᘐ!W+Kiʺ,l\U-xb@vƅGU VȦpHzs+09'DLoTώƫ Mʟ/bcx0*ln\oQѰeFCtIZ v}0fKF2l5^ gܔk[. TiX؃s zOfD[l]0]^q$v . <\ɡmꛭDDмKnf–}-m-n|tTe~y(RsV_b:˪bMZf1@0ʖ)v,H@ <2]QnYMSIdDɑJLU2r6E)#BedtUz]vq4݈> U%89~lPAP9L7amK51+WVjz\{O\ᯑcfJ0)_{1v,rA\G|c|zulv" GpAQRBD/o6NTdUe60Xy@ #< Cx gR4'ꁲ)t1h!DAQ w!+ a4UӮ-penfIvF?y8: z-ˡϤi0Max کPƉ1:i.gV5ϲorC7ês^[,6KckD'0\Kۊsd+Zq:i7_Cϣ}S4q(̼0yKRQ% i9~: MP>knTDaeD 5X:?)et!l䲾&.O~Z8yaȳ4/"g\EݵR%J>ty13qL\JW*:gMU<8%N>#Z~v&g#QF喃G",FoB׫5pљՉF?933h)C 1\́p~3 -QH}Zim!Z\2Mqus;?2z/%|Jyhi@ m"9I i8x{Iج&#].E xYgH8e(NEzp0V|1uY)ל8:rƘ8VPQoƯɅaٖ B"4 dJ KB WMj"Z>{/p3&<]ԗ33O>#up|3C6rFFN.?PףblFD2{m.W+SSnR ;:og=< 2=i FCB>4ujۮQS.$Qr`kPG:"Xefkݻ] lє,79<\r`p16 @*…OX'_n }rh<]1-ܧtqdJ)LDS[?cmJn;/oO8W_ &YCk'@I0 +).]s/q ^U@ ,pmN/WûU䬮,.q{c͊E{~❓arXNdjZ}6>$e߾u^㊨QN%GȅxMTM9v7lL hn:d, HȕE*jx =E "~몘L !bu*F> ꪄ|r ߙu)TA9JyF8+{Mb9Fecf䴋w1t~gC+^{wkΝ+SU jT4JtDW ֊B4XJ!i|M26] R9$1J$nP4v@ w't0A,~u$P̨gQ@@Pddlo:zCʩ@s&Q@N6C{7Bcཞ)TĜ j Pe0TvAT>kcjCFG&d[ם;eAajVskf&F|]ܓ׎̝IZׯ@XZdYMhhԬ(×MIOɎ΀Ky|̥};ɕH#; }B<_;-:_c<)ݪMk Kn[ B뙡s6IdWS8+őb{hJNg4a)&*C LlK`ĶX$X% 0TZGl`,KhZal&M4S[r!Iq2a`[j1XdCWe6"º4[d0&UͲJ0vQ,lކXjT#KjN5VMYH%YI"hmgܾԑ2ErP,hԁ 'zMؘ FJՖYS#nA>) UDul("1p c @LG$!d;6w|M٤j# W3~SZN9K)njubo5::KeZR#^k ȝ-9kCթfԁD'*lM v)9!Z wqs׆I 9%d\Y%2 rj0̴7ld^n JgwТ\Y%RIZڭNMfEˉ2ramMTd.Ji1j]c5HGT q,&^:Cnq::"B3r"61BXi㦂D`R#"μEbTf{HcK5*B 2"4ȕ.g\?!7*GܣINy B#O|y>ɕL4-=G'18M,N+n0Tnn95&J {OzP$-#VFKDۂ ym+bDt%qEXXҖXRK sRl:{S%܈ uA:lMFdR2nOo>LCJ+i-L՞ z n] y8x%ԍX0V ^ +9v^+WuFtUax9){V4D@/ @hGqFO߆K1Vپ6z0jJB՞oI-@͝^l 3C3DmPPځfefMɡVi%Ie*,~uE\E]!O`X1ApPivn|ϞgN)IHüFЃIz8i ]ة^۶lȘ>4* 0) acUGxJ>u8Xm,P-(j2CFH`0F+b vi(R]Gwk"*TFEl.1"^) r\T8}ަR*PG?5W'Uy!h4ϑ ‡TKVI#"}ApX-D)WJe7qcv:I-.)WqvӍ%m*c tMYC "%d Q:TmH-؁YAf8TG(ڟ͙ٳqtUh5w| 7p@:uH5VhilT( dΔD(Y6{/GB!eó,$.v/Hl(4T+'^3 `%$⬹iE#W:jUT+$l F}nO[zE;?gв76^d||'n0, Ieh$dHi7:ٜ9x+V/H/'i@&T*?XS#2m>!ZRG0x9z/o|M AwlvP>L@LcWXjG %qXIu<##, D)8{|NPT'Ÿ6Ch}xqk6TѥUWSUW_s8} $BgI?W[lѸbm:3^ /#S;wN # H TV b F1*+R(eOTT\[!,kjwV'KOWQZ32v]Q*T(iv.ًٗtf oaS44i ˹ -cJzۃLafپToc톴=qkC|Z͍ 1B֥EXEDŔb:2 3-e_I>{{'ES(]qaȑ`*,F͋H%&FQGW޲NwI8~o`r<:w;fJyNAz)T'Ք9l1Ҁ)v9Sۮ{i^dc0 *f~1RF<]ؖNm7'v sbQ=]?~jҮDQQY 61b6궴.XȘ[pglj5:2wRtCYN{[:Tz^uNU0^~5=6^$2%^et j$Vxrl% = A(pmuPU(ڧ25қ"k)+nJR#I]RjL\,:&ֈVہ,ί7_nx-"]pNsm8 W+E6YSu˺oQ{1UK0Md\)s-Иa2)F’ X R(*D Պ,Huꠦ5hA&^l̚x^|J嶣AW2m- >`3f@Sd pH]5zӪ|X(ଋ_ G9%+&4c!,U\|hh!>yg; 0rBƩC~`e\=)u1gLiݻE AUEHE"2oLL1zNt'cݑK .ALm}^hZAmW-ޗIp)$*=]Q\P+(BDO.ms+)2WM.P̋*H7}UWUiG;27ï/xT* 1YX7 BJU)<:_VTQymCw3j S.> hR.XA:W8 t\ik) TP{FINtL= u%+P*n20R-9T@*ȣ IV?sN.ʸ됶҅qeQ80" )/^!8ݸͭtp p LCK5ASyD@S1^4ITY8lg)tPd)E;TF/3uʼs_nT88 ~S.!U!-iqZb(iA )9}O#CG8FaN2dD{T%Jտjeno 0rYC )u$!Q)Li"cY"cH2ܭ*˃=Ulv콦 "7Qҫ;!(LeV69kgOn?K7,- -bʞL+.q݊,զ8] NZwEt-JЃad-W!ԩT5+ȣ9fŊ5IXSiу2"wrn-m o2!W]@K  k5VP*PTIut{[\V&F©EU!OAnm;v~w',*BIk<@x/6x۰cy̏X9bb̵Y|զUaYQATs}!*)X 5UœR1kJ*oe*2EJ8 0BY-.e$ x0#jXU$ktȂ*HTi_xetH=A?N<)kBp(aT~'8,<QVXK,(F軻ű'n~k+'oݿsݷyG6րz /6W fV#fʽ"iJ*T5?#g*G*K ,YY$0b #;[^qYo6\?31e MuS[84=Y^3ȱZtt>%iї{ڴUK6ÁC0U%MTN-0Ňt_pkcPԐAQ~Yk["D"e`vР`DUX3/AxhBrwd1uQ\)55f{H0d9 /*Yi9;T;"h.ud#Uk,O.QrY'4`;uEHg0WMj ]^z Lir*m55&VY[lGT&\l$*KA1r,"afV&Sc-3@fPјYBXC'IeHUn;::vǣlh{s-r+"ָp\֯qj݂VeȢ$eLETGcsr[5q:J(5+j\/qZQoQ6qlJ֛)F p̌!0FMD-v]˵ P HCiUCiTD T'KShQ% * [CPPmEmja))=Aǻ5סLJ^fi{橞+ (jN.%VxUa\jp{^Mqn%TN;EQIۙ&n:q#KO1Ǽc< ]RPia>}^N0(H ;vႍ)opA 0>+ zvX'o9wrpm|A26 zZ*徴eegEHuYV;P͠T*{9'b읁L mN}BIT8 :BT)a S%KeTąk61-Ex 5y57Sd1za. tR5Wiq0;IbNkU:]eaJHήTJlHH;E.hZإޕ{Rm&i&AH[8dRݒ.܎}Jz0\i*Jʔ zyx/[ݽͣ r.J3ud;:\!1/w.|.*orz{qHln-|0(3JL5ډ^"0 pюu^?q]",PYF$ʛ*v[ :AJȐ !xgm)ĂN/IskHF՚^3_ܽ*hl*R:JJ.9ns0DJӧ*D^:WFevtדeÃ<2QJ (TP(`jgzɨoϣ̖T{|(PMEiQҤYf2z3n:?y;(W[XWsXn$ASCi\oZLHkuB4-̡&uBES|*)UZPPwYA(WaEj Ȟh<i0('~>Q :t*ȤwrdV;& BP9{ۜvɱʦ,oE%K ibyXD$.F9v7BhE\;-^r`NxUд;/SC!H*]#5K66B!mz.^KXG孹(q14+)6rkY'#ҭXE1A1ofmR˴*XZ2XPx(mV ]xwqV%kAun-NV&Me4~ZRjV] AܤKKdNH T-1!"ޝǁ׍Xz8Ӽ>5T|¬m8_=G&Snl8arO(d\ҙ2R `+GkGFYu6n8P#ze2oWp3$:1%d^_Äͻ2x.&R`"v8q 'z(k,Iޫ)5Wv!WPJLL[LqFMm(č|bRiN4 D%S!̷v$ЪcTV 4+-if5׮x]_=!9&*ZV_QNbNkǷ|{Xu'QUAdO?Coj,ƭenzk]Yh,*cNOp\C/M%EUguZ*U{>Ё$%mihG䎩Iy~"br8t(#spq 8Ρxڷo.X[Mm6KJuR;KP&дe'\Qb*iHw-5ͻXEfڇ(> ;hMIȥ*mx˥q빑FnKYb0@Hlk𱢯6)Wi6Wg[#* gZE߲^ۿRuYV)j(g(ݙY 8 Dbs*qtT{LQ"m  z/Nt4/;{ qpZRLo#| g]X!qM.{Rʡ.fBX_g xiM޿npCJq9e9NX)YnZڗ)W۷0)%ToKhn  SBa1HeXKG>'_TQ s`|Yf 1̱_ݪOK+ 9eUʿ ͩs-q̺qp?x~F}i`. F5V̪-KQk+$jJ\hᬬ+^6=4WvbzP9'AF״=\rdF"gɠ󾨔 Tq>::4iÎ>偆\{-Xr!JӲ|=Ӂ (+Q! * 8Xװk4RBP)(O].nDil6g-Ҽ{;mL;UޜkI*r8E7wxwR[ԍ7tΩ]1:'jˡ[S/*qMc0X RrK!W:EˑuIƹTQoTIU 6dK 3\IV궛ZNe;F-ả\∘!ZڼrMI!-B*2S,U P~y/^N) 6Yqb)jW㣐. B1k<+VEwhxN&@F;jfhknƾ!,K%S64deqTq^J+h'QdY lI4A^(*c [XW9ߗZ2E%nZ|*qi0 GYpYZp([{ @Nz_ʥTS&vdPU˰3ͷkTuWw䩊jt3EK|1%e'AH<5pM8e)E Ś02ddf*"__8*bk-[}ܵf952/%Edv!ЀK **wop6bH*vnr{.͏7-M[DEMYjJ;cbjT k\hC8 T TWG\j$ddhY\$2N^_G革p FL9{;D,^vtM)I%EZ(qQ&OlI1x?}tΕR,b;bYum^zdQfO:%Ooh K%AZ0߆m>%t$W+/.cx,;KMBTƷт8+(8 ymE%e'5k^^{!/P׉S-D+%)PMB2I$X4T2n3xoH% ͉Hm`AAqB (^ݟ+BI$<>rA*ӖUM4IMb[l3}z5&i+%rm'bp'xќ,;)gN,Ѡ tq wA#"d7yNT1C& !'ZMnj[nfhN"t++EmN9y[|ZE|\h.mw`A7|&?wx]^a;$5z{4EWr,9 Ur"%JF*#l0ޞvL~^ۃV|iNGBZ"<6* ȻG}!j MOWeMfuؔzEҩ@RHm=RAˤ|?ӶT#ab|ŦtObU^Z&V! ( RڦhL7\'6pUU ,mI-l!T^HȰBZ,e&LyjщJ⦆\e$GR M$RsSLBnjTtoUڧ>d QQ@pT6iUC܅uzpG(8~wEM [D+-{t~t6l9-Z(UT y$(<d)vA$G/|~@ϓn]`V,vҦ$fe2J 8f10\lc8, 7o0S^d 'K2>Ҭ]CUr.6*AP)K68A=GFٔYio&J,g+SkQE5'1Yl)N5?cb. CT* E+-h(}6o7dB5a\*'o襖ohUp˙,Ҳ[X%Њ;j;U.ݔq;7C$[ZXW vU"+,T%@Wf)eC`^M7 | BbY:=*Y}VwP=&;M_g{49;]l9LE1 25ᅴ4OJ(<:}kMd0;VXWM4k@$ٍM.uA IQ/V'33^]fmk0nY%yܭZqnD.A,E&"](,w{N SAN:pfJ( F$WuW\(F U{k.7&(BX51 +C_.f>u:{0UVcx«JTq]n\y{ld/4 pԶ 1g6lK Zx\a326ܿw~ag|^o=+]:0>z % jUd[Y2H%ʼnT>CsUUFe Z.\+NI,'GlMJ._1da5Jr7.\/:\k%.5ō2]A%oїu+d:P7@|PUNoYi:,wxWrPn'.4 }~?g{/R)Z}LX,/V`"oBP $"QL"B)HJ0ovm9+:cŎO46Nx3e׼痛LwIkiٜ %yrLJ*n]x=}FH){n?@,$:9lz ɒ̹x͐=*rj ÆWpV :Y1ІelJh]kJ%Zklr=w/*<F#;+&ic1qE%j8OGJ#Rz:V3dƪ@ r.g/%I6e(*ἑonsuʀ.*2-ε+ֺۉ." J%<;(7PV5񞷩 'exni3ɜ,~Zt)Fmْʡ$&o,شMXDAFE DEU\h%1&qf:y9jg/$\*THيbfʓz~rf{vn*&/ь竎4&\e,i:y^དྷ+LfۊblkSW-8.qrrUm=%5ʡrlMfrӎj4UN"E1P)ԵAaw.>O0XñN}@bi7Xhx} !bW9+H]1^ eÛfPK8|L&)8Iy1V#כrjb| A`x8!griESq['X`skiP R4 jD*|Za)o;8:K#qD6}:_uߎ/;R颏SĻbU z^ˆSg-K˷>Elw2<: DS`ñwIL+Q 8 (z£qwۤ%] g'V븱 .%!|~f QBPh:|^Qf$^/2妳L7٦iRG(Z4~,2LLn8md}.ȜT0Q\Kެ~3|qEѤW-eAsGNYQs05&/EG,݀cBF*BF8y '6eYpJٙ;7[> Z΄}jbFv^/ ^7<^ S\/`Qo= g6zt@^xxix .84-E UMn.}]Å>_‰!ȬeܴEᤍ'^$V*A3@]Ndxtن1բvs~ [ɧm`UyP; QOuh4Q!^VRV60 FJ"#$J9 c:f.Kb$V\Cb4uW=LsPE)W Yj:mۻ)#Bbv4mc~F^cïx sf2Kn7#]6d5DM6_<)nyXU! mmqb${R{jБT)^ts{q )-wqDi[] F(PCuXupKs*ߥݳkD|I L{ƖFP@)}mJVVQ&@rC #Ģ۫InI VNL̍ 6 U DlbS{#b;e%ۣ;eeIfs%q.._j (#Xo ?ܪэe"+ͤd$P#%\|iI $!p⮎&ՂDRbJ |0Yx5WUesngKt&)4:f.Ko?}6W.Wڈyqt :T;"XQӏ\B~1 RP5%A.^S;fv5_<\ƹᲫ36aƱ>ys1 T%t/ֻm&"A1d. fzW!٣ҳbwq3:XWk948y K 72s: aY vҲ$ %wgʓ1I2s@_emd՜(L0a'MޫFho"Fñ`p0^E?ڛYK wJIINa#*Ҥ'n~!:aLi蹶hYZ|6Iɑ!+W署.f*h44'#kQY.Mԧ9Q^*p~!m:32q(;{qIj}x7%_;R( #J~<7_wAN<_CLO'tBC~%H-ooxF._ف/{}gG! 0ZyF--a\Gs*ԩzObKɿz4;,iSI.g WZDPqion#ZDPT@;bDAD{ߣ*ׄp=l9*A A %6(/BU R1_I|<,y Nүv.F[)e[Q@oO6بQ#bd@9TЬHdL7 S1 BrӝD@ L( iנ-̈R'vpЄ?5w:1B5(x'/=YAD@R,ݱ3j )up\lZ`o()88S,@@M:WʼIlb?}0yusy@ FF?I{,>kx~]UԾG3Yv p?l?VNR}yjo?jh)$xC~VܜACRH_YrqSW?Y!uM=z5>wI@@H@!`7f2G!F! z3ƇI9#Af3jJyndO%YpK8BĊĒI '?@'Bf?jB6 MjbuȦJB y*ds18㠣B~T0S>ДbȮEH B@ lӜqT,ڹ݆'qP ~յѹdH !.BB n$78|'n$'@77%Ƿo_??x`a=NqY D@ KI@5nFB B>u fyvB/ K!hY~Vv@/BZ៿l^#B@}'a|s1칻OH^_~o>7I'I!}黟I$&?;ܽPC($$ u{21 Al ͸%&/!hh𶖋}#XVC2ke?=QKd! P>Ӈg$w!=.I'|u<8縞ۃohw>ʐC$j'@l_?ov;B<{OU$~zlzjHC?w$ĩpv[,zPGH@!!{ ;smfKY\H . ! s?[=S9݄GYxނ@ B JjaA=|rK 5IP<?Cx n)?+ԁ{RH@?oIP,@ 8z4ũ:"]Vm >ׅG'x_s=`H@PwNuN1g<5JSB |{]uS$?x~+3c ZW=w$ZߡFb@ Rȴ]1)  n8N4:w~_gu,'{3'y_W!I~$F]2}6Y Tb  Q>BH|CzBkC{}ؒue $?Q';{C<%C 899?}kXICgc /![B@껼m  i֫:&٭ᑝ6`(T*I.:MotO_s͡'pQ5ꓭOwkPX%/Ht LKfߨn[rtwU9]Vl51Bcg=yB:%єWsF'!{3ac9WpWev ]~e&WX||cMArNGEnߘ zNG[rUJ%+6 c1(?:CR` Ia5܏- |8dw BI>]ozN迯?"?oB@eq^](ǭ~'{;}_ HxOt$XPns@ [|R@ Oũ t }BI,a wfʇnO+=_q>O\?E!$_<\z&!j/Fqǟ$wݜKb /#CI\ I=CM:^_}T=[>AqBwYԐWyjr!`\Rtr_QD]FgE=(AN}qd?Wrec;{?-HO/>/PK%W?掳:BhIt Ω'@?11!/0!Ą =p6#X'fnW7G&ZXTv,<'kꚣina׵2}e[8jJ&Q {;뮺.=0o ]pl)N}/u)r ) $*YypN&S֓|]HҭDrtՓDUVPRwwGNK<1)9mOyj:$\4iE+HoTWث81uFBVoO xw!7B)DQӞBtw᳥q$[.cP|p ]7 /7FBbIUI45N\@ |P!qj9U͟ ,BX79NO &;ئK*L)@MX!/:`"7J6AYpiiHWz逄  k?èy)B\B79pBqVwG1ӭz>4꫄!~s߅~ iJCv}k3JKwFdXq=iC͊Nb@"4y=UfnR2=E팕ߵg^=stZ !>_OmJ}Q|{ۖI[d@2Han2^y}nLBSYM{ "!:B@~e{즓T#krDbO:*0)RV ! +ץ4" XwB謱WwMl!3.f96MnZ!ByxZ=Y:{X>sv~CpN@tY3`m7Dۭ$!<л Bܾ h(ty^mۆ%H#9_kP  p<3^*?]qե=Q) )qMC):$Ŷϒ>;!sqq⍎O9LHs,hbP+U0^9 "!r+xN @t_O ]:[,a&S:ycݥ3hΤ㟨p?VUR Hր'ogkm' ^ C]ZKegJtKn ip_:ߦ(O<By'$x/T њ(Ej6)%,P`(aOT&|v# ߨA1MAC+,_a >(afoXhǫzbH ~?V|x0!O. aiytV7nuΓ&@LS(񉁨zG% W:*~FJ$ N#( n kϨ1*Rs"~z Ⱦ_5:€1'& /G\P$u"=W#lrIPSX!A  **rHG|m'ދh 4eNy[ڱ-H$@u<'f۸@ƉXS%HG\0).b^J@wyE mA[wTuאc.9[dt >ӆJcnM TpBi?Hh=!'I͚k CزHq“^׽}?f=nFcj;lCD=D=<}ײ#oڵ]&}O{'x⻍m@a.DaQM)udM "AG:ЍH, 7[9e$KlC}9]b$PȶU&tM:yl>pKv_Oy&c XѽB/#x</88+L,}ĝh[|m>@gY0_)A\#X*֞8,5][vFl{|s'#fG0#dG=y|"]nbHsyd:LytU-fxk{iloNѓX! μhFh08 Bh0J~6ĮVʜ/G?˻o.NΏ^IRTR~oCC?:CC9q 5}_At:#/ u|ʚ$ܛO|[%bu?)gt} j_]$:aI&֗scnfI / Of=9sZhdnG <?R(_Q eAEJ+Qo5^F/w4h@$h; ]OaF 2N'@@)RLIY+*N ZwIB2VrJæ 0=c J !ROc_=Mm/浑[n rm9]BMUd&97%Seº9/tӼ[.h! yi*o. V) N6>UH+ :HBnd !!bɀRX 2=C!jIiBL2H !&!ma6Z!MkO9^$Y*)\D7:̖&$ jx$XBy8^,h4tS!:I MXH0$q$ XĐXԕ#]c9}fRtw%³YUI#Wiι6,9P5էn@!ny큽$+ld$', `mw$ , C.wچlۻU(恿4f+ "'o mS0EouU=^DwnΝM4Ґ: -BΑ!iDr@܄ ,dRC z[|+9niu|jc[DU{k }6WI$OOHM 5qjL-5r3gB@d:! :!  $$b! &B M lHcHI D!\a l$M`92@Rbe]B+,T iX$ {jNj`I:TLk{̒T^Ԅ$CBl@ ڵ2pVh-!$! !Hndt5d 62ܒMI6l4@ 6\6jԒI$ŶRhλ$&n֓T$4Y7; ֓8 :]@9qCs5Vl٦d6; \! aٞI S26Ю^S2t4f9HC] $5(m̲ހ.Ԑ9Y XnKf(pI&_nx^4wRvU*cҟmr[ҕhLo$&B@ɎtAL)êo'+1ߎ7~ *It-;땙*d۝Mc&7z$L "$`@0Ƶhͦm2e p:5!UEYO3{` p \mU2̲:Pʮ X,8ܘתBr]3Qk&f:P9 Fv[[ @uL D|%E13U$1DA1Gy * $ DɒqZ+W͍JeR1^溫EMWo MY r0$ζKҡ#|WL 5R1(`e Y -HMW~*!uf'&lA@.tb|sTT^=Y?g(" 2=Dgw6f#Xo;AH˶Fj@5YiYeSy*%gҒkI/ƺ-^O%7 N'0@D &aRS`9 ,GEI\)dJ ::ki5{M3,dY ˲uo gjE"39!![j¤FIiaV%BIzN*b@B\4@:sP+$ U"4@$$&I[ 4ze9]V&&s P7 f!4f3)RE%500^$0ܓFJ&@ *ҡ3ם87hBMHnBd !$K`maF@@ `&\ba %`@ؒo HMфRJB70xOpɒE!!  (BTL8Rl4I) fhLN@C@! $&n-![$6MIlBj]*@FI-EXJ l]ZjV"٨t%ݗCg U_]w:IQLj&S/ot~p~a.=4_Šqe__St3[&0˻W[" G6 @؈ DR$HCBev=vHB BXz|d3Nbp 83\Q&R*7cz;ױ8bwQq3=,[D\-2ڶɄ.$#]2f.C񞻚 KaD]&Tϯ'<1tX $ [E(DʨlCT^QŕlVH BtuVP!+ሙדAPPcQp WOV퍬wcU6X2ܖhDA vl2dYmvSy5yܮ2DTz`  a8u8zQ5(Զ$ K&ekwp,x5Y#' ;`=F*L^Ue1B ls]Tbb>"t Y)2HI=F6kٖq+*yDa,F݄,zS)\HAa&s !"kbj/;3VMM\tA$(B,Y`Luz}@'6:dTY=Kx-DU(ƊPSeO 6+`us'A ,g*j(݋j'|sLPy+B+B4 φqB3XFJ'<ڊIP M Ch"hB@*ʯ8 kw\XYz$ %d )DF;He5}{#k!u#,<*nn(Q[6>r?%UikW9a;vTuk{6J־z+ʬs6 YOظp,Òtv,,$DaT"=#, Duά,bص $t '"脹fWpՍ5L+yʪN9 SXP> JoG^{5gt78j.ibfF7f1I"Y'U\SRVnEq۫"-BȽX!*3 JD/hŕLqT #*rg!q[ Q9g[ut$ V/7W1{{|$9! 0 AB&ɨϣr-̓9q0omA^[[U1cSfH @ ;޷.Y|@D smsg@bo=u@ Cc'o;d{8@p꣨~l na !m62rx&2`@ ss;$Il$ނʵE74gBM<3nB@ =drkHvlBI RO2H!?quCT@rPư$ -$i  $l$>$ r2I$$@I .+ ;! @i!r) y!t,& P$$ؒ&Hu ;sX 2$Hl$dc N Ad0$d8Y0$N$XP BCפd$HCŤ!@BBI$H@$FB4$0N* H[$ dHI$D T$OLBN9@d!2!XO: &!":;I!8@氐;!!!a$ + iXT H@'餀tH۲BSݲI'١!9Y 0FI3FppԒK᠁8~^CƲ@'@?&)r $$5@J쐇? Ϸz9o%VJ"8s2 ǻ}Wե]JA㐈x<W84Y{?"yIUAf|˄@By?G45poM90DosU$ 7õ~iɔT6zT$6O5I{&Xs$~ͭƋHNy ]Q7`60"s H]of1>`(/ aeqiaeoJ@ n pmmo4@+Qy,l}9_SB'ʫV"I%%)yt4M,CiZDI I (c#;VV%g2\!|lԖ aL!~DӭIwAd=,(gD3S7)ޅ4xRI,)0:y X~z*>h*-\uq}>:m~E3DABjԣP%\ <2J NX*d^E%trY*JsC"%d>% b\90ejV\VP3kR1!H3!Yf?gKv78̱t(Xl4 .*7 b51E"g9'`92ToɁ @>DÖO kM zQZYHhϽB=ԓ5GS! aקhAHZZϵRY7_ W k ,vXYeW<"bHR 9&Z[6YD7K.χ+gonƤzJ(@ Ӳ*$q2-aĔHbԂVTˠJ$i2NٰyY ]/GN>xU\G۷ٰќ)I ! TAT p+HFnNcM N.4 .qd iqP-2&մ&nJj)bVEmEeVBX]TN}q\h2J4DDߐ(@*eQTAPf@]soc9Y:<::Yaɧ;E7Zh)VG ̪#'j/7FUq*¡Dϭ:lTeQTogFnމ VW\S<,鞄,X.lTuRSLQGrkP?)]vVR.PcB@UAؤ|/JbU)2+N*0$+,V ^YeIZ$XYB93jRkZ{oİ"(A"II;=*b"E c&"1ce$IF˻$Y`rid IwrbCVL ii86sdJ%":kTµV4,Uedp'FaQF.?Qh]m+06-l$a5JƄS5Q|9H)-|vY%7Dl"vt$ߢmNEݵ ʟ vJ:xܖz;3Su.gl]e;/kb=^7:~c۽7gp0.,2(6sh}63T%P4W} "(l ~ Yi Pp7]T5SC} !QH@cZ7SPPBs2^*i4ҨSTegGmhmߪI%NPJC{ױ~W/|7_fkCbjDj+VvA+D F9T"޽4nbHuQa.m%1P! A 'éM@g2A#R冰ڸ9y+ƞe{FxEvKsW.v6Xy<}I$UMg>k~/ΦzRFl۸%\KO?Bzww~ۤ!%FB̠A\= *[~jCg}O@apW8Fȿ\>ȻiD@* L}cJN,/RʭWniS$2)R钣E<S,d_ͧoWzJ'A[\d!a3Gvoܬzw FDdHSPU"`2", V]y/?~|_^ IU}_w^S:ѭ8o>W!7ztW(&73˺p%=-_wO{.˅uW\D) F&0P` /5"m`$Q"$y*M UCm}G}}:Sް=5/4Z1w_'׵.Ѝx4KtM;c998I˜HA! "+o˕/P* DR,Lupj goth*=g]>Rln/_vq " @ F&,nٌB)6w>*@@@O;N&a 1|a*q SKC-pjhBI0 cQ|{|o=E>U|Ag^gITkc}9cd2ջ.~7Q֯i^ @ M((3B/-e)(̡*E^U~6i? (`"rCE(YRPڿÙI3mv8>AIG+aPO&ɜb,(-jTHUFE"]qb" Rb*"L2p§B4N.ƬQҟ>_W矢E H`,*ŀ,TQQڂU"(t?C:\J@#V;p> .^s~| 夸*mS)$ERac%6"5q\ӊA*Z@ġ4d*BETQCC\9n-Kiah  9JYPS/L1+$& ji0RV2jFqJAaX)r+QBQm%bZ[BU 1ETb +" ,,Y$Y,Y#aXTTI Y*J 8-#涯cs FG-ۏ,+0eX1VZF+TRDb4cNl\{%ߎUؿ#N $ @hF8P @̬]C=NΣQREc^jKVDPRQ{,븜=m1FEH1P>i]4w)DQ h㪔OɿͭT:??ek?xJߕ^<'_SMFÂu]Q9UlI0PT8tLK;PD0soɐ?pscHmp|3"j%麜iULy^/Mр!;]u `.ҠP̛huIҼ,IA$ON;*(U#R4ZZ~+Xaͤc3Rh<ϼK8nm8|hUFujڪ 5>IRёq 9ps4:˙w`@.:-ʃ2еóz+ȴR,yd<=q3<v^pB;u5B$upl*c kl(9يbءiM,ʢ)գg){rQFVUUFtȄ"Գ*vNI 2D}m ЮL 9[k'aN84!v`\/"B@8,yK\u!j6Z5::<ܓn-Ҏ̘NhV֩f&:)!"&ٵ iF)n+UHTXTBXeS:-EQf?ʹdMP;Ұt^3\LDjzh7+D0V?n:Ӣ@܇e|Miw?:i5jvbidjTP}fYӏGpIB0Fe/S ("mVJ0 ͪxx~U4/_3#GG{$as¦2~kYJ8 )eY0X 5ʫMJvEr^!{׺-3w-bLR%kktBMe_upfsDZ8 s qjI1yc ,lV=zGl_ʛJ/C^sK эK(ӿc./6zBHB1YPSP|WOpM+ h)o*X|϶9:.ؔjgx;E+A=8L!/9[Sqٲ "*I^33/g#V6ǜ]>8>a他/'KKo57P*Q'=nFը]f TMGKpΒ"miRJf"$ О^o znÈz0H5©wrZk))-WTC p*"B_^6|K{CŔ34ftt&+BؒWƓʼNs/}7:M@('q2bN.Ux#7J66(PAd Go3D-amc\c LZ͞<7DF_NpUtaP賂X[fe%h^cuɺtPNSlj;"bpfb#a@TjԶa1(Q4 <^7}g^h*3q{E0YPpYV)[GHFjS'sRU#"QHgZ$Gu*h\(RwS,$ )R;NԼB[)^$*7mZX-f4Ʋu1~0# 2RhӜZ9a/hBF"H)Ry1;.~M%dެڃD#>?7oLctBG l17E\]-z}-WGdPPy<ߣ}.+~K)[ͼ1r*NiqMwI1 E-V6_Sv1HZs) 1V<_mykk& X6_M#y."yvP-v x+k h)( E]EJϚr'OSfRC^{QT*ޱoJqrNb%ޕЪ@` ߞRLD?&Br뚄9.r7mՂ B-;,pŜ0|2jZC7_WBȢVu >2bDU-`(Q+)+iP*tvtc)^؜k?@H;KORxҦWǘ/${lYNV)O3z_}_}/CNu'}p_PF@_|F L[(֪[Ha{iLTqzL~g{.,K0ïKe۱п1ZOvx_o- -߃~zG;C1c;o[Me[]swxj_dkZNElw!BT{٠p|x>‹M_khsq?8(×[@܍W߄޴ '[iz;_qzگNYMգzk;O|lvT5C|l_[=ތr;6ggglV ;SwqXo{)<~;a^|+Z1wqеX>kWF/GC%g65VOVK#;ZF@]2/čFbE=i笛9Bܾo+_=Y=uϷKuyju{hm"!Bd$ݡZ2$ۤmn):wGA )QOћ @ >:ahK )foMk?7x+V\T{$t)3sGYBR>|ލ7x^ݾK*-.7c}ヌ`dE]](lˆt}ã:t!b0<1 p7Pm+[#V>̠ l*k-ɝM;| *=IWxxylZ^VJۤOjlj3 Cҙf5:VM'#t믍5kio/9 gt9$uN'E#Yw) E}p#H(S8HyI4(=Xuw oK~~hx NJ`BGa( (ˆFQs.ٺ+6Vldfլ衈j͎kxݞ{n}j>5<K@Pǎg8֤-~K[Uо(ZLn'|J,7e'/Z?nU[UpDQe2KUh|W[%Fp}:\5
ph3g/e<ߝ%lK1x<7IC{LY{+]nkz]]1?*|}ݫWy#J[a{0n|o)@E-|].uc;>%cMB[./6 b߲UE5yR"slkCWyw9W^>Q~k0Iz8^$Ǘ|KY-mBb0""Ox@^'B((!Ψ>T)$m~p,Xt Ta~C  &!a$I)?a0!h[>fpGD@&⒛׺5AYl 1j8 a' > p,YX|ɨi5^:nK236.d@30@3kO_{/WUnVn&h-\ׇfcYj|SSR{&*{vzE`rY1f<2{/֭V;5Q~7-e9=fsֽ]&2_ 3S[? L\g}Mzߜ=/ 1:nu{SY6 r=M=n嬚ϺwM<֝[z2dd|@++'=⨜mXM;aBxg= @fh=V)@!*q4 !q[{]y?ͮ5#+C8%Y1#B7˱9}F|̳s?tc0Y\B.o8dSVm/15|tރl؂{RoA5묡G4 D_4Żh^ WynjxKǛV)nia*!\ /xcdmm9e[z4cPێ&+Thx7+u%цehknܿÊX\m>7oxr?dgŢøp$#W x3yӹʟf/)uVNk|Ԭ-<{4&2@zB-!D@ 3B'pofq ;fI!uRxZ `MH@ؒ@9F@BZNs'\πtf }, HDaVA@HNw/۶YQ f;qӼi^>'5uh#-mDOzϳjm|C=̓k>0b+$JP#2@|Gk| b!گ{i}%9f8U[f]h˜`t+"$2Of -E]tݯ<-K$ cg_:ѫu߹an`FabҎϵ+ViͰ% [4W<nUxPk{woHN']cx76ݼ[GC1dDrb7efW'ө,YƟ;(J0Ab+X0b QXQUb*"&Щa~<'wi/ phd|]gTȭ7m_,Kz+j%-jZ*@m?ޝyҜ?&g:<*Fa>ʤX֒:p0<9M(GX3E  ED#s4%)\~#Iq|Mf%*4a!f ^x(U t-L4FrdmLi<-K?v9[#WT8H wa!~VG<óamʪ/ q#f%@Cno,YF*o]vj|/?Op& C)ʸL@08ŲH y~>J^{UC:~/_ v2Ͱ_aAlCؿ4 s\4L1‚2{zMa|~_R~gO伯a[%W]lu]xq#\n"V8W m0YO;O^{)={ B}'T$-AdWB~0`:GzlIʲ\]X3|ߛAƳ@7υ`:B@pH(hع3lk4}/J%{HFœRb!Ă15`@ebS5"B  N , Q]&tUU_(\:ئ~1ʵ7NIOw~Շ֢Y#Q_몈?6rllBBmy(7ߖnc"m"@@4C*5_Uq~*Նʢ9?±/ӏ5u"rO7;'=YkS}{~SBoS>UbV9aPAF"1 dU`JOo%jG! HS_=Cyτ9U:[IE+)9V T%ZCRC"L=[# `n spS_E GS"&arp 1Ԯ'#j Q$LZ,%=fPQjr Mߡ:3 eVɒ,YRitjW-s/WgE h@Dio8cS45ֹ{ST'1Wj\Z!qqR-uU[90G|=-|SCSRlKz֌>cMW#.ޛ[;6~dl;?(yZTNvRW|ocq8\ZVg>k nnZg#Q@Kpyu]/Nb73:kW|q_EGx\K]?~q C  {ٟo-}cr5|˦ricew.C4{*L4fDa&Z3{-عo%]x/ݞ63GI =iN iݢa$bmW}֚kZI# (UDHB#(uލg"T|)O 0AR5탣RF-S|?[mt$! G^ZPH{]N H+D:o~ゑ;-{twA^tO/mE'\Y[R|AOnPY?"AP@jy2aHp1 v`(Vחvu@Qz+MDĝ/ز*9vLh5NqV߾-rn &(g D6,1-6l&ĔPKT!x]UC/j?{7پRNq]'+ܼS}O/ZۣK7U;'p}(&}<??gd㨗U&u_dmx[<=|lqϷ6;ޔMHR &/ԝƻdit1Z(MF{ L$PCġI C JBS$)wKdPC(NnLԜ)b,{b>y?՟gYwm^ Ok_Uu.N{!rZ $81")Nkwfy|VJԷ%܌5Y[7q s=O}Et!:,I ) by ,CfɄIi2v)mvkH|gp xUU`[y.~ `DklQ3ɼXI+'. %PE(>ʼnOa#ߏ"I ;d|fE lzR~S}F;#ݤqgi9?h@$v6"H@vI 2j`{䔒HIZI  a!TBaN'KGF^~}WgC!ҫ +-!bźbd$7f}߻r7Mq\YC'"JNJD@}&c)h._ӱa4UMʔ " $tk yȗ-h~RСk-啔:뫪SL KuG݄D0B4ieiUihguڂZy%5%5RBxXa-jaٌX%,FaqJKb(dXᤸ&a1LQ1j 4*ɬVjI #u=s8pDՉ(v% =Yө0^ _f @@Ruje _v!-VM@03{8 B zN O iKJ~ѭ+sG'a󯄋cu[~Vܸ;i}>ǘ/j@2 $(EKDTXIM9V *Xa ,PTR !P?W9ȟ>?AG\rqUX~_2J: CHʚlKh|IXm/ (nJg+@J{brT:6Nn^[|/ncz L%< M23tu^7=BTbň#𸸏,p{_[7}=2U1={m{"p ]s4] u<%ȩprr)H{LHl¹Bm;-ݐV`v_|YeC^1EY {m^*W?E _㑧FwD ݟ}1}:aXn]+ ],Ý@iĝ80SO0upԹy>k# ?e vZ&wg#0B~/NpF#KvYYCBwͨDXj:DL 5dPl ,o?]q񰠯'*IC!|rvqxfZI<Ҥ`VBIHBvD3BH🨁h搄TqHdRpXIJD5>TκO@A(ɻyK(WfBaz!fҐ3n5,#Kyuޮ+~&*/DC-CrMU{vUwjw4yn>k:k+vS#ᫌL;aQkVlSmi|/Ю) G9_x`jYҺ׮o@s7Ю䏨=`vFB@!=3>]>r)*>4)\k,yrޖv%7n_'S/?;(s.AEQ~F@$[MH N//+Gg'>R7?z_>fS۽N@s Yx]ƾ?lÜK*܅G b58nC܎@ҒfB@$H5/0YwN )NϬBu] Cu^}<̘(",VH}p|BI!6'# 2dr2?}''MIML! @Y8I%`OH~X@$A HzB֑!HHb [h@oIp;$AhBU㩀twW]IT-t 5bhH+|U?9{nE5e$I6'/}޺˯]b}&n.b]kb;"l!w}?UjNG}l"#0d Q!` 0t@HC2RԆI!THH{8Fd!$<&dX(ֲ,5l'-tlG koӻ5;kvAVBWKJGLb @KޚM =\ap&<<|%b}ϺCթDX XKK0S C tTST+3qZvXHtPTFR*X K;c6v󒾮ЛkYVߟ?{Dz=wHb+NpZ4rV-!sAAۖB3 VOOКu 12!n04f u*C&hɹx\C)5ɉk 7!h<p!@qGKzoSo;!ƣNOA?}"rmv zwkh B x񷉍)2/^L.2 }M0B.[aiJtN(EDBǢ0fczd'!tY!?] p$9MI>[ޝC޳Mɵ3XNZ$9ЊIr/i嬸IkI/a ˬ @]U#ô A^aD MéW UWGiy;.ۃvjAa&l7!%!DGH$dhIBaa RyI9ioOXM9k>@$bQBNIפ=K$&$uRHIH""I $!  X$VI@>m fD+:vJm'OU-9@5ysſ{㴰=  xA:|D842iŬ@!HMvaU)rC\9>'nm%2K(4,&3e[@ʛ{rycdۘOiQEBBCOd&x#&ъT1ddX=$0A % Q@Db̡&!HV ߨ7s-uw;”>deM*3|AR?BD4&4R2S洁qZ:3TOp'd5s+}WA~M l@0!>$Ot@KUCE/kw[;hߩ.%wzb+`ňoF:$E`2Z̈ட'"xv4>L^3L&XG6ylY$H'ݵB@ hHHOHdPcZ/h$fUަ=ˣ/\#Z^4 kёC"RޣҜw(;=?RaEL5,VV(c Q-u:&2=7]uURuce@w &PH)Y ~ LNSm,,pʖTQҀEH*/ϋ1PIFP)M/w>_c0Ky,"~[ &^,,f\<ۆUc,D!^Nj|d>}#&$YD@Q0>\cnW1:,""$nx^v=g[v,$9֘[$.ǿki~1*I!*H@$$$d!d$H !) !Z !l0JQb J_z%X tp{]Du #SGYJWva ~@°6I$ԳKYZHO)`x Ba0$HL`I I-$wXH; ,ԇ+ $9Xdcl1`b%EcnOxήcX3C!b5:[\ή6U5Էs2va,rD* s(KR:*wqF7gLE=(Ԕ'xz3R) PFoo#}p7ih5}黮zw?dNcLy&ui'Z! qte P$_G:@;C  B$bCW_,ـ W6Xn'/IL1.n OksIH]Cn/}w .$$ߘ]ԁ!9~{ZiqH@loo`u5jAM"#g 0,71>0EM&Ʌ@-q0J@!D m N0I)$$ ۡ2H leEXdrzHDEAͣ( ML^kG.o{7.nL',>Dr|*vmp@Ww[+ k48IzX.tqy|,}%^ $PjBr(+R{8SGJ%+T:c^L3ES 7- |upx1B>i(Z)cz '/Ay ѼIO-CUJibjv5>聢s)Bf)~./q8 YUX>,|W]aUVzԷ_֝Q}*ai")&I1!C:'SfA q򵁥|_˅rY;_%c "e9zLqZx 2Wf x7HT|eE",0W4CEnD28A*z9#SQWILኣ-uuS|[g7Vx¯?00DQ.ԃ (EJ7k.+Ju6 ]ׯvȘ]7qٽ1v,OMRT\"% ˈ7+((!87O_Iԁ61\0WGbJ4t\KfYse}'P)U>ߙ^wQwmT@U%eE`MAt t'P|䭞oeP_&Ý\LӛgzCphզSqjpB n-G)4CbeAwx6p# ;N,:؊B@6-Y4 ]_yW-?,s/B M_#^wEꪂqg),%#=ES+zPO}8+Юb:sYovfsÝk=Uޞ3kpñ *q%BRv?G'np9y&PKez$LJk-<^뷠?GbIߙPҕ@NX [ၻk׉rx7YӳN#;%ž$[z{y1 Qw ~5v*S a R&žs͂ηbŊ#-H)q)EҦXp^'hu & gyV*ţt'xIC/iֱZ=%tê xo~uvѲvtn-bcx^(-wOJψ瑇~s9 eLp "\.۪Q2g|^dhǢXRW w(dAqJoe^)DlCc!pD.DWI3 pkOBѿ}/K*6J ݜ--*uU>Fp" q제R[}åظ r%H źs68O8Rt)o3dRHSh6x sm|/! nm琵ɭYZKP$ߛda#l.US'Q) | L S o&k8yLZ=kѺ4 6վZϪ\Ow˭e #Ur_9J'dE)4sV)ܡ}*3{F5L`@#eX{*D\|;BZ'f}ՏKUo캬3nRV; Ƈ2޾k-}Ο9e3LaI_X[]V; "4O٠=6˕],ըK>/p"/6T~O¯ -. [v&08P %!5`*Nz_X62ȪBGeNMQ lt!.g+2庸}yhzhiКk 2'&ѫ[Ln,aocb*Ih/OVu Cd&}-cRҷ;f2m'>6_v̭6JI#3Ȗ\F@*e1u(X3-۹hn_ĝszsL%^6$i1ze+~@ҕ:S-., =n; UMx2vl) 4<'^ۧS?gwr{/d7VxE,׿rФ <=ikMj - n^t>?>LkŖociWfV+Οg$2lriԓS yC&Xdr8?lR6A:wClx-(QS׷xy}Ll%C*_#& M1)yK ][GʣU@l@ k/]l~~Gn|,<.GMfB֨ܳYG6ՙ ZL"y[uiF@}6څ=v01k{uF wp{ XQP1dYCy"@Co.ܲ9TADbN]Sqˋs?Ÿo:֡ci' K5%Jj&Me] tKESaf[R<^V~QjC@C;!ϣXyIk }~7dG,ckHXĥ |y/]2:O45j6 =o{xW}O_6nr UP:E<>7N/n6+*TׁIy5Ga)r7- Jl|(uO:~Z%5m2s`p:uFENB@ULeF{jMu ^ / .V$P j I{Wg+,*thn, ٿ'~ ?s>#oS!o'6.{Pf1i 8|/?#a"ˁagj[ cGe[1`NBxjP:Hká0>l`!ϲP۾K~'mW0x! GFUFFP_'A0ߞ?2`rV]X(rsHEW57%$ Aԁ8z sGTA+ (MDLǏD.22 H EO(vݝ +,F (ޱJB6r(?| xv} ; |CTR,1K:X0@$[meoFBYbE'"Yp0SL IK|vz3=na,X23 +S*}΢ޠ-^R׾uxlp!ﭤJ\3/sLMiGh&*=dIYME ztUa!^7A9Z'+^з[;uhAǓ"PV}ƾ掫=g2)Sm͵FR/0_ ?f+>%Kw~`=WD< \w9}lp)y˶ i54\=wxB6oQSpasf:o̴:ݭ.L4/Qž/f8kZ95|0g9ZH}T:a lfylYTa,Z!>מ^Ҥyt'G3#&xӮS3ߜtVӮjlVGסiRδ[C"Y"b}e\] %t3f,u@\jqXQ ɕN8^ Yx2=ne3!qZpµe r4=N2ﰑX~ʀwY4GIn Klwkj#|j)T˴d4Cqtm$QHJqtb`3|X,} d:KYV!_/G¼!?SP%-f/ͯ3Crj%{`  IEը 8.}|nomⴀ5i4`!l;磀 XQyck 7Km.J5ׁA)xc)`4H&q(&6J'X١V8(CHF*Uz(sbbeL4ryֶ0 M1tZ[q/.uJ9k6owM2e֌D@܂FdPU0NlD@b>t4gzŏtd%> ,]5lTSW Fu HWEb$c>D$ SsK$1'^>Ar͇6['a@(vCr8YC=r_ɤLZ:cq=]6["I7`4Oq52)an>mxX!+TSr)--EC(By귙bDnEeb=؂Q9CImNeiѾv"c9I2*^~{[YXJ1 ljeb[fzVNeH=xNEo(p"JJ((R^k^/:w WoZ S]QS'áxr a1w.g9m8ڳsߡ~x~:]GswT !=O]S& Qua]Â;l)DAˋttt9y$^tqD@X@uLG}7M3T#\ $PB_}q$Oʠ@ݮWSc!م}FJ$wyqw^ -#("(Nuq)O I@>eф@(F&mQ$_ń 7-AF( $e 0"D$sIHRRETg_Ҍ]Q=C0'& eIxUDT$CU4wÅ+L"]0:8 x7<8Q|+C;Çṳu1SLoh891i0zlh`xi$\F@H.L?_7Y֏Y ,!,'ݳڡjȠBH'~U@yM&U9;Y8W{ E]_5k┊Oj©$D$kԵ縒B*"A5JH{3DY  he2C8 iA֟4#~jj'm"q;%^NS>3&n,1,1pX]erjCh"'њꉀdgqrxsZB5 UImr„Eؤ}ߙ(O(D@AA-VsmЍH`xPM B`xZb) $2BHS*@I$|;c $7'' nnjzoGk_@x46ݽ ҇'&@@ݙtqȡ1d1$VdΟ1`G ;POrw+?u)-YLTK\ͨ ݲtf\HȆ2ԣ.L^lIf*TF{aQ WGG6Ġ.3t_:H!(Af9?YRӕr$?\!Ѡ@2aIf[렒APT1V ŏvW]/OŽ_{T*o^9&rj޾xzzSe1u Qa!ʘe2,净e|?k7cy+`$&^F'*ꬥ7RV%w̫0T]0^{*8>;_=NJۀ;?!Afarh:g"wTC?$$ v>F-cKҞCH&=쌌# 7* J"%>؇mo^eSez^G/A׿nΙ8ʐi::?5p ɐvCazH+IbB ekſ!IH:<[/kkh಴ F#rPU%Og /CZg$ záKbRA9&)KbS@T[ M᧺*noF?o~]t9tt H`AGl }Mm 1YÃ*}?yzoT/NNR S "#`X8x] !䰒{fHI1Ba J(Ψ!Nwg|Wg(q%wT,܅ vI"IBCP!>g>k$J*銡?zi~W9"bJ|++Ӄ;&J"3 )AcHALfhE݆F6R#*ʋ #Vډ9'SM&rZDFA&mC 7[*%!K{u[()%8~sl2|; os/_]a`md!N6_LHa?B«hcUY8f]'Ɯ uPu-$밐 zԁ Z첊~ݳsrݷ3NW=ȳ{ED$|nz;$a JB)$ LؿZbt)woD,{9;opʹ |Xd8J81%`}/Ar?;~v:?ڂ(%lQܕo1*H*iHd}ϑ)Q :ɡeemdz@'BI>9VH!W@+!'魏Ne@>.Y:p9*LjuHsZk${HHt%ILYZ u۶Xayo1_#ly>Zw]BLGT'iˋqN -4MǴ|Y"*=;j *O?fJH,Β.#$#FIطb-=6jx]ƛ*7CPbg@7]9B,fNS!ayX'#(@!"?D O5'2;ub5%J PE2fߗG=?zžDt:ǬWs.²I-z(03Ĕ!9>l{"PArHho1b'='LZJ%O7@ &lh\xT~IZ8|z^Dwx`keIˀK< ̮?/ٳi#iS{^w$ȈO$?p!O,jJnYncg#h.)Y螉X`Ap`_O[6ds->ɡby2qo.VU; #Z!N=.;@a,Yfiu= 9F9yuoIy~͍;K<#(* 9@j! 8e;u=!^ O7J*͐m}8vGFLU(jcf=1'?dZ\*OA!!w^KviD0"tKF$!(0[E N8u4H"+bx6,U1>g^|z}B  #5RU!2a?iv+*F(2,lj6iA.!8#P /XFE/$E/=6B"gUYkLV<7^c9n u5٩[U6%D8 ɳ##U]hD`, Gȷ]VW uv=<׺lvSr[Smw,y~`Hm5GNIABI8 +.|\i$4y.y}7aQNBLnٟSi9dmRQ-?bLg_ZE IlJm_XNF~iN'(s AnNʄ=Z|sz/"ɒSΜk9:?qk#i`je#Sv  )oRYTdpB@ϲY-L86y*ǜ}u(C-EJK!0 DL y_DD]f4vRuQJqiFOA(p2١:=kyb<|۫r}d%EGloxnw"{7J _S/~YE[՟]!U& wK%zۇmJwjryzmM B\:xm=#[,=ކPPi^SȄ#; Ạ XZp9;:l2c=VGZyt]lnJ.w08dCX`Z- n ⭖|&f,xjF n,z^T $H6ǰi)X`1.2;ADϱ;-~.UapĤ0Oec$%gZP{"{/V^q@@=+ نXWcµIo򩠏x5~:P] ƿ0*Lu\lLǸaM_|n8ZLvlDRHRH$P(!d\^L?i6v 9WmJB$,ӉS+zIV3Ԑ3s.OQ AQWaCĐUiH9A {LZX>Q_g/ S?p^ I /\jtGn)sCc ׻5%AE!HE<(f"Za R_;;۟_'Ƚr0ƮsKݥj@4loO[[SMVw$6xx7G"K]Z˗䜀s$(@Pqd77,Sbj7remv '2Gd:SW/r{ކt1)dsw(|^S$e1mf^bM|+K-]Cfl^`yhu:=;j|NeLXyն0Ft9IQ7  9ykMaV^jn\ D%Sd "ϿK B`4b 388Pc[}~]YmOsv E.{MWA|2+~cry[ -5g핓* x$ K4H1>=RMIdM؂^XgGH(B $>"^pXHFԐEx@@@Cԫh;--U7$9v ټY(#u)@3H2f7Sh/gUsdI˷rIbl {n֯86Kks Fwj;Ol/iDN)0 z- 7tAo UTjP.RIt =¥xDoaR=g%K%DwGŢ^)\-Esogx\H+R|ȞK-B1H^>jnYT}Ho$`>AbgPiY$f|Ç#9۳-u ,?W1H: $@Y9nv;%\΃|S<]U=NCxp;>#CxsQ#W b Xe+oiq)0P0%xJ)=}ϕz&qdPtLѓx+}.f{! $NmW'{voBRf[]6>2K%rɫ !" p8%6Mp`|3KACYD%הfϞ 'ALfd:vѻu<6NL#J]cط}+L 9o|6"r-u KkKGD]iV MZL&tf7"I$b/M!jԴv33ݰQ[3!d$(s-VB!{>:iXM./̇=+ @<,sfd],<{,c-C +0".Ÿ[j%OrsllVMk܄עyd¯2U[*R#!֣u]vY̦ݵq1wBرls7r-%@t'%R@PO 5RUctz:|XhttMհU:JBMQ6XkϢ‹t8@@|1K<`:D.U{f(ň0W!۽?lR sҽ8%c;ƂIjmHܵTP~~KO%G jY 1H@CH:SPTv F }fNLpjS Yhc0z-_x&Yu;]JI8mRd 6' J|"3>?? me5sIS,J9 %t\.iR"b<^4 p&4rm#Zx7l%޳(=a9GtoepyH<0N PKl2,ZI`r+ lzӓ/2XlRS{Υ> 6g/i⊶USL 'W)\ݜv7Y)%p.%/\gJB6qTB Ҳ6bBcUˡ.G5 (r59MFAR{89$9Hf`GI٭LҾߚB{زS2R^.0i&=Aۘa3; 2hJ(V QũkN۷Ch--*,8@ c,R)qO`)_~d*{kG;MZƥ 0^)*gDH ~ <HLEZ~*u O}2a8x" u3Չ<\Yp8`^ja]r4Y@krQ K |5|H981\h#O!z=5s@'!k#Rd{8X;R<V3i"GZ6wE&,0e]n8/=Y rRT6*-.UL$e#)!?u ;N~G{1OSC]ܮ"abӏ2ApM Pn3v0= 3v6syFWKcQ_0PAhSDDcN(kŀd)Mt0FKr D9Dv:p?oIrUΐޚKAK7pOt/?`ILh!_MU̶Ļ- "#B쪵vR)]#Yf2I!(Nķc,Tnf7qIBݶbKQdykLzrd0N^KU8 t0sUtʞm`mUػ %^KS?.~_637KE H8$L9Kb'CQD5@/Fm'fjm#xN>F@Vп42`"xMͼPpqfBCt"i5$A )&*YM l] N˓tc:ވi/BzG1FYZ&JCAZNEaJb"\6Jy 09]Xew;6|kBEXZLYJVHZ zr;a8.*ˑ>QSrYpcn͏! $*"?)kt6.)p);68Uf;U"xU(1U RQ>r&,o1{R)C]EqF GuccW={q6OS e!ȭmͯJ-PjVTT)6=;d3itV.>ߙƬ +oX$,b"lcctM' XťEf1B|Cal*j&t|Ǚ{ZW?aڶŊ~BGϡgL:)Lq/IϲH=$Y { $ g7YPVx763(lo$/Q#Z|(`zx8L Iŕ Ł\MǴj;6Q Mɻz 0Y̍G)@`fWMMFJI}ǭԘi{}ᴹE?pbȣ QҊ)ɞ_~ŧoÃh(ҧ+Lm  C,JT!}I$0l$ uqtJ2ZM{ۯj'`Q+ý L\t3 )I)4* DcNskwBcl-ovΕ4C&!41B)%" :cϐP"|_}?#Qka_ v&sCU2ᕑcb_ult])gƺ`: Yv e*!2CULJwAI` $?ɒL$>&N&.OPG_ȩHL^%%"TOddByjd &i@~Weh.:_Ur2M->b7HE&CЩ2=x,&evU$DQ{_|5N]\ictMVC"~z0 4omTO޸fz1Of *ꪹ@jI>$jkMb&?;>?AP PiPMʏz 6oApF|Z!b4zlV\ԣDaOsf!Z +m~ 7' ߻20EqaV]ϘUU)a ϥ]iQ?%rF )wC BC QkmFV*"*ֲ b1\JAaQ lVVBJY08lbYU,!R( UU GǯgÅlPֆe-'9'xF|ׅLD.%%e&~R3.h(2kS+fy*9|(&Xkk8߷Pj\q!yG؂KAUj]g̞`C15gEsMo"m~kS_Cj;*H?-8nk~Et+zrxޔT#& x*&D |X:ET4HI!H489.(U3!hIxҫk;~ӂE# d{vfݍ ,g]q?ܬEE#Q ,D; wO9 nqH S9>FX$` mth>Y$e:z (~ Y"@2b\\5<0Z Irxp" O (ފ  ?%ej?Y?mB{)XlHK$I*yC|X7Li@u"L:6~EQ=lK.$W`$OM.P Hb'"^7rRc=m2! &=֫K\v(Hp[_^. 45 ֵ? H4'΁/Wv/2Tl[.q a%}@E=j8Aq9T'\v~-_4Ǐ< b@bOG uq<0iX)k6 ;]j\(%>CKqP^9,*DL"!˨Tlɢ$7'<36,Hɨ&v,ALi_At: (Q J(ZˉVF#cmNV. /<֦ u.Ak5WOo>^XM[2F]Ya V"w&Z5䫵V<>Ճl\ymvwh K:[΍}?.EQ` D)U-3\y„IB G=Dgz!ǧݤiBxF5@ցr嘫תVIf. grIqg% t¡sGer-"͐FN ڢ%ɀN/5?Wt=T@XAV3k }ՙLә fG˼v[L~ouAK"A,PQQ" H؈b0'-KۃkOc::j"wVaʁ_+yVT. i S44Db?%e&>$O 80&fȚ1ȤuG@!Mow27s%oŃ : fuUӵBNj[2 Ɵ 2XX&2'aEhE±45SC:ud# @SIQ`!jyfIvE u[Ng5qҸ|ˈ^Ic2''1D6RHNŏJ(%9Td{S:QM$Ɇ6rƔb#p3=es[zͲ׹ѝ_bK:sdyMTє4" (J8!\Us݅>I IcdH y P!L@fr,]`)A<׬4Ix˂JˀPӵH@((e4VSGĥNJB,w䨩j́8rjQ~mwiLy̿-RKG~]_.?b7C!T&r֔r!W zL4[o8I6s9qoQAF؞ITDX8fEdgX=YmFP"7}Z#UQ & Bd{ ւ^*#\{qT^4}I]$WW[P 8@!x͒YμV_f1ұqR/K/_+/[z5fDv,bfJ d'vj_^UR]& n>- 1,l0Tcm""PCwk9-nh"5׼I3(>RW)N?iF:L/Lklm]<0pJ 5Jp1Q4jN@VsE ׳` BUu/}~I'VPwJAimYZ-PNXCfct3_Ӓ}!:bLA|҅1X|(N<(< 09d"| YeqS_WsFMmƗəx ߢry[V׫6jN>gG;L$ $mvEF~w8K= 6KiաK?RU J2rQ51{+%V`;`< Q{;" `aS(39մ959*at:V O q z "?ˬ=9I')D>ZBazC5Tb.k]yɾcGYjkSEa-BBLmPNjDYNnK2][X(wkOYʵ#ä[`iDZiL\J6[?-2[ع}&]96m0 @|o>ujXH6F $toI2jOLg} b%q}m.SyU}Q\!* (tȁWf]*!3Ad.Msj<{m.5`JK`;XP"O{VuNfqLUdhqƵ eU^_=ނ?1H\s_BI٣?[vtGq`3j|4\pzWnw2i9 RqhڭDՖf)ǩ !QFT4z)dxyۺ~"vqj./àHub PJ>c1JqWSXK#oZxΉ&CPawdb5nW$'lJ_aPw]뮉?:#zkSݩtk¦AےƂHʄ}-H@ABH>5U1eCd97K3,i]o@g#?/JFp]+_뺈a?}wu1~3Qv_p %CE CE.IRN*o~n@`ITEv 5rAEc2Q} xeD!?h@H~b[+vUS 418G~Dbm=!nT5e0Yv[&BC:24P|V{\;&S[C$q g8Ns } U*N޷KtH-V͞Z fxqq8Dys,_|eШ[/yFO;3Ta$=Ҳ P@.;ZO^Q5IScdvʥ%_w}cmqLOR|OCxQRǿOY~5x֤u,; 8rЂ@`6xLb< J5f5l{iA1 <ʄdU9, R P|mI=_|T0{ ݶw/zokzM {$/+,aHaCc!qXhL dԘy.Y婳U$@gGPɇO?sE {)T,0\[ et _?qJo{|Jlk.%?xOjݠE>3g <%S=FbstQd Vm%@'Z*ͭɦt<3Ж"w.U r ]$᪄l J㩞$m sWr Xޠ(.܆r@UPBN{Co[3^CTsxRɘ+r_">>,$X?d' >H($軧䑪=[FbڂEH <@I&ԅ*HT{.EPIOtLp2wwCB&A3!{fATT@+~h*Do ~V6xOA2 4]۞FӉ<;7\*jz-#:]UwwTZe:sB&Ax5/3^QjԵRQ<NsBB) "iD>1@%"RS2`>6Wī KQ^PX1IE p@ƯK5ӡ{sR0Z1HAH=$EʈSŸr3QU=v2CQ*$Qrv>Agv,WUG߻u瓫2i<^+q~6o#1>ix~ ~lꂄoxkWBQP(q$@DҤnTMg)V!)|m>𡄙?w1)VgcpxFܙ$] Q#N团EiX85O>j.dku.J4&B06!C4b WU6 @|q -e{@LW#,Nn8.%sk'֍@V תoG mF@95:=}ph B+Jnwd\gfԞ3,@5U,G3P ][Wʱ5|R}^7޳ :uTgE+﬩<Q Eqc%vUwgZ:LS+Þ`bx͔&U:~^CZ,yByzte`(av;uP㱡_@Sa%Py.k<ĎAD6&nv)jWGs?7KU~V,r9iʞP:-1}s/fUu^C3mMӿGW13H5Ē[wMڕMoGp~`vW4׼p)mNWߟsP=N&! |oRVk<&#PrjS_tVe11])\9=K 'Vvd*V/`wkq%x>[K^ pVpuJ^W9g2P5"Is`7B榣Qs0tvp4(>E r:Jq [F5ruɵo[6˟i]zs/խ'쭑a,τ4.  PseӿQH:>;'tX~w3S3,Wpxd3Ո$S8V dɐD\ 1N&~oms=1%#jAiG LH0wUǙ!'Bk``=;+_ͷ|^Q|k,9ILU_Ѽ<c|?1^C/TpHTCR( A  H1" ܘzgY.V}g̎WmQB(sx@n%mciڼ#nLwPC/UdtGev߮E=F2=v \$ 0F!xQ<ܽK%IW3Zw_3ԟg)859b\" Zt S7VИ'E@oXYs]b8qg5#:eX#o| t vy!gNъ].(NW b 1DZLY`FͷTY5I7phݱ5kKgӫLs`t`Nd(tQ>zC5Y0$7zEՊ9|K)6WòL!߰LWeTD9`NKXXrSQiɪҪw{.]^JO5^Q}j/A86ٰ^AeqJETcQU f\ujXQwQuKeü (ZRaƻD]JH/6U@N,z#M.d$Xh(&2cNZH0NJ Ï/^OYr^_wTî0i.X@/"^>lӐMu]2<ǩ5}:uɭ*\5Xyh}^A[5jê.j[hѺn$)QaLpnLʰEvKܬ$wӸJF!#NW%~\*Ga SݪTBjz\xKvlp$!QWq:A|jh={Ji7{ԃ@E vxW  jxEpm|d`DŠh⮔c]B!eeeHBeF}\+I ixhIG=B!EHp1aiʳC񞕵{nU*N~\69ɠ^J'~R֬&d)AԇՄۺˑ$y޹, v/;#v_&P>B @*q\2F`n 0|9I f}.Wxc>^CqPjZ]ElpYe$>T\_m .|j7 5+m}D*2&埴MHR7!Q)ްUyO^ߔ߿vP*%Pî 󫌛 d85 ÙUs~@@@*efX p Mԩy#64m,dK! 3&|9jY1DWtga5XW {i7lD+#4NòJ,Q¢2^fB{ijGlmL2Јl[Ɓ;n}An~wQIUHWjJbu'w"<(=@jiBut81~/i:Np1MQBH)N5 (uVHǧ+qr[eUJ{NJZ3n7Ml=+ f`֚=/db̋OEƇb; [a zNH Y]ON^e2v{ӻu `OM- 6 [VņТq^Ǽ/B\gx[JUqT.ràc; x ~v"C3|ˋN<9`UMΑK I$># FnB풯np6 jvGN6 ^k\ڪf]zԬg_ehS_;> Pj:~9kxqon5İ⫃~)mrN58orF_K"cN9ؼGɈ1߯wn4wfd*6svzG f YµS#q h`s{Ѫk=Y=S HedwllUg6o/tisW:ے~,BוWqD C*hLLC7a^:њ^=2Ek >O/D0U )u m6> `qaSw7a70+np':Vow2&F2{`^+S 1C1xo|GۮpuQKjcZm#Tk<:]{e%P$xD\:>kBYD 8V,)-J Nȼ^2zu@HE1W<୆nݦr[$a׍e̶;h*U3x~K߂({؛3x;}~^ t5qz<]wȰCSav&у9*FC Ͱ3z.S\i(8y}OS4|3_PW6B0ՌHSJZDwt62,'Htׁ߆ȴ. &s7ovsj)%$A6gIk+u(Nֲ#IQH*W#5)\A`ؠ%a YM v֕ح{XTT P]bVŮr&jbK-fP QBc,Lir()t0!RC0e5k@ –fp1uXsk&_zȨAbFGY )"+%eּJu#]`ޡ0.lvV]^ǐv8. B?&~\5bTPJH"Ӈw.7;9!<:LOѮ5FxuсJ, kD0K(gƜ*e3B 5=5nel)ڈ@UJ\ jPL6A"TV LNcdeaS 7E6քTQ]pa( 2ZC BŚpaFK d\06lD-̐:,g7O' o;-q>Zʷq@ c Aj05R<8H+g8d jl) 5%J FA)CcU7(1PBԵ湞 d!"&- wo]>_b$x>- ud4)QQRݔKҟe~a6oBWwSkVn,RUJ/ X,R!Ta,V ; q#+! .Kq* vcpEw B0ZV Zŕ ZS[lj'nJjL,G yZ=TzM,UP ~s}=>.GJhLE:XhhehRI8J#:a %ߣH1ӃwkR|)YyY"  ^9H0a ^ԽUqCc#˚dv䜒}; h xL ;U=kS^ZX Ųmm㭄J-?0غ7s䜗M *q5Ȁ$29 (T#j${S1IW`Ld8xbӪ>OA:8o ;DlR4N <."vkYSO^ҁ3ot:rw+%!Aax;1Ƹ_O>쨚~)dGcaZK *]sqU׶5 6hF$T:nVşڙ>Qҝ&am/ftݵ1^zu*=GZ]&*e2ka5.McKQȫYMH}7ǘL^`ۋݧV*Wj~[]7 Me*=?5&{3wjwMqF}/Qkܖ 蜢KtZ0m'ɇvX3…P٥2.wp3z;(ǕQAWvt-2PRCf5_ ˻y>~!Qviڐ *y71,QN$wp|Ϊ*PKYF2XWn@^E BT2xߚMgUOж&f)˭ǓoMCAE/s9zGmOW8kfylMqmqHd!B(,!W"ߨHc[v]ơ/{bM]Np 9UGaZr*?mPfʊw?eys|Ncd_gfȢu U`qqX%3, [ !=[%V^c}X 2yچ>\Rt gxU(@ +wxl8 vPmU%.ZXgPFSߺλӟ(+VGy-ce!Ƕ vo`'P=.~ HВ I90 4I$")P"CwU<9-2*%y;-_AԂ/e3@!Vy %$!ϡC 'a!7^€I P"@ΒtMLƟCK18Z{ 1r,'+@r%œM/s?Bg$:!&ij>HT5=6F}0:'{ Y$5P@$¢?WT=k ݂ޣ_oTٲ|eqӣ5ɥ=a:XsW{{EԟT0uT$˅+1UD*>9uk ©~*>9|{eԿ=;߁>n]i\חCZv? 0OIp19݃x4;NJ[c.I |I@ > (*<߃-s>޺?t{(7';}ݳ}28l-%nbU"!ҠE!C|'_TD4hKJHT @Mʒfv)q)"#,m{_u'xM¿>7fQqrIO?F4Vo!Sr^.dO-{2Cn%@JPkG~~py+씎C{ }& Xϑ)!>'} B"vj4_$2|-oko)'y+~c(r+awxv}Ps}#Wn M?UW($r4;t:£uϲl^n=οߡ+=eGu-)DT@dP1K`?|T qTg%Ks_z]vgsIn_*bia'S!HI B@]QU{ Y%S}Q]o~ Ю^a'=/DyUzJB r" PwmQpvD5( N~`8z&bʞ ?f움Ʋ(C4FWvЧ.~ϸBr8.\Na3uZ5<l)Q EʭDơ}>=Ս*@2p;uiV MipHNݥ\ܩ_>s;{\晃n5<{땦):b ){rp+࠮-6@ zHCۚe6wJ5zwa|~=-B)%nnJDn(qxly߻|̫͐8B% >9vIUH`_JQ#NI5밴F!;F`~(}.F y,cZBTRPf('CS&;{ⅰ^C3TN cJ@1'uPg-A2Bs|@el}  ?NZWF\S{R|5==թi!Sb۝P ɼa,D1h+$!_=7A Xqg(/鐄=gzK'fhlBLr@ݡ!#hx{c.k &\0S@P\FYxy3D:.>_ۯ|$0v xɑ%~~(/`7457]o7FH_Q;"mcě}E@(+ dafUMa"qǟ{!pjzGrL-fM %4Č7C+n>"^\է-^Js^~&Z'z~$Ǩ^m)9!2U <Q$Qdm<7ycv܋5r^$_?N B)WNu#v6ϰ;~:BdX E-N5vqT|p|ow?LZq5ͷ:#b"8e~v 6V4YG.E9Fx^YO,VA ޱ'b< p-,N@& [3 R^Bz?f~V]rBmQk/!RS%|M)-c@8Bù 0ǁnN;Hx0ΰ x֙}el`l!Ou$ +(nԢm zLҧc1Vv WP! >(*93w̡ pq~t lCxBO:oZvY;5P\-0]Ҟt4ߟwтyw V 60=Ϋ?:,{?*cE0fvJ:ǰ6tH΂}wecҨ\\i~eo/78< PSKu) [Ia1Eц1*uCkD@Mh ~krk8~uiܷpJA2pG>Ro exլ00ξ݅ ${&azP&9nțK.fu9 ٌnĄBAL4)9 8[sL&̊DwABclqˎ Qjȍ TV`HbNiӏEkfVTΣKJbBED }I^dzރz65A qjUaOrˋ /F.s\e.E8'4[ 8<_V.iXK#1%@(1WOh6.2Y%Op te ?ݫĝQ\ 2Q.F㦧T)tA)` ~vwߛ`ې+uOqG™* 0)SkY|t)l PNFP m0b!~ڬ?{,Tnj=7FLJ 6D7JUPGwEW$}U7&^/_D "k  N_'3C+WVijs/ާl}%`)YG|YT;3d#HC͠-"i?E!,$ÌͬutX|?#L;Cp=f  rPd.q/FㅷouL+Ja}Bc_ BY?t |ĻbOPwQ rY!93`}]*)/\(mQv/S;uʼpvYl;_ #ogy՝jNOn[J rA־p'-1:j5G)B+uSТ/D/z#ĥ3pm.VJu14?'7Z-l:S_KJNKGHalB( ɥ8]/ͻKڀŒB$ 6:掜7*`e4ѱh.j%/:F:B3]*n(a`L+3}Bh,ڝ@UTF7)!~}1+}B5==m.ۜ@ ɝbzg26em*ռ*\mVʡtqp~ WӽRKkIΪ &< L@9&4 NߺM- l GV+"I|u$)}(`9* MBS(9{Olؕ- .47P퓦yB1->t:x[bݘ<)]ϭ .[ycUZԉb?R{ p<|fQ-PeVÇ!9ت'RRH9zLY5yY$MrKCdEH| MI.O{]?~Wsui}[0[ȴ %TB&ӪrPWMr-۹"DY"Fogxo)wdUEX?^/ +: }~[ ">J[-bJI"KÎk$@pc @u!m" fm8N-ֆ *+lmNfv\uw6(u@J8HbxIpm6zjzW%P$.8ؘxqBۡz?wJʩSĬɗYljuݘdgXjJ^Ǭ :hUD [uׇc%W!,U+WtWZ( ¡^lulsev ~/MH=ߖ5gQ  zR<~j݇'"K{n2oS-?'2֧ΰou8Ϗ^mq {P˜T؞=*c5пyu7*3la$~q ɞ&(mX1kB'LZyOCq`{0Llw ^zg/GblIoD2g3g5n!R| K MqG67¥ QU;>&X,DBHJ v!eeS?d^ i,Mв+$քbI"4+Fo|{gs~*_k\SPmvP2 @XjI, _R҅a+jaE=١.>g+TAQ:TʡBXPykPՕ8Y&*ǂCI羮ˏ{v\D6'l?q9u8-߻\~͛firnqd/I >;poYㆉY4'N'yvWvn׹o<Ja!HoeoVvm*} QARiTs ۸;?]o }4I _[B!;͈QqOu Kf_X,o鏪jQR W:zSjtDX~/bjQkK{VP|,fG]{ٱI?W%='CGqWTx~}Q@, *`VM#WU|'> \"dK&@;fBx,Q(ww3;]‰UЃG]t | 6P~m 9];3Qt1]U6^W*ڬeG@]>+XSwBC0UD g.U~b]UQa;G}e@?,ݘyJYp<o+eexT|$?j V$ ÂEcL6ߏYԓZ w{oetCzUEFa-?G̦%ƇLaLc+։Hi/e0"Ȁsq«=u;&ƕ9y {$0Хf~֔)k)Sr/-*@DcW{vLda$Y8)Hڐ'c({80L%`gG0 Xif{05]onpg/;[g 4A(* -' -`^NJ[=226<N I%3T#mSpVebCxt*&{hV}>.ECqԹ+A;n1~sWό6T6id xA 8I^z6yt$ 8#fɄI4T(7gF% Sw{uX&UjӪVŰOZcѰAuݐ&F*9u;Sw&wr^>QNKg/?WsP*႑ivڵ ~L=(skkp7qw9Pc,5HB/SjDB\"|s+hL-*Qth:@ŴB5? Kt6*:.]0@#BD~8PAŜP)yjR7!tx?;v[%8(27Թo$:wDډH",YcsJ,?{2ynmXb7c At9 &D݆AG,U 0p!~-GgʍkM!9_=`V׌~ᚇlY(L:s2>%qu4-lBĮ(4 W!{Jdk.hyU1⌵ E&4mC˄/NL*n yZj2 3@&" g2a.]=sȴ]G +[jq@<|gT9?\R2R:=q-kxX0.$h8<^`PNW>VU]oGOkMY`h#9)ňQQA_̴ MVvb!K:>FPǰ\]9DnuIDJgI|rÜ@>O 7>iD㠨A #}bFc7íZ_7AWJN`b 1Rː\'})MEmaTU3nV (1z<'qTwv=pE6La&{iӻ(PMUW (/BD$*nx^72;.s0|!3haϬMQv= oZRo-KJ`҆h}6B: y]Ď`diH3AETTm-`Ts%[tMjl +hrOzq 3I#- $3_;#8Ü^Z#កy0e DY]'ɲuNQbݖK=#pysH & O C}0H<Ē %_Eb{.x.Vg'l:iߪ簏a9(N )/eѼAP,q[Ut)U (E*LB* DZ[*6@[TPBSE[T*>xrJTŠAQ,дf$rz`^li%skZ1oE0cW ' COEdtt,'0-%_ǯN.uM"pIwhLQiMaKiNv}U}>P;uD nՈM3VbC2E.* Wrg6;7]Hj._?w>wj(L\|~a"նP!IIx_Cgkgm$6CtB RV sXa9[joPƽ _\,g_&9S<:?'9TAӻWqP V\z̉LՆKjA@`):al(󱶤í`VSroƆ m- u{>`ݻ]qAJB.4ƮMΠx}'= hOc$rgK%>ƕR3t[hBJW`Uqü븢dӌܑϏ:ρ?;?4np>~UkE<(餚X{>G#^@;k'6v⏚M8eOOKUn};~~^v-wVbyq[*v ,Eao[ݲ4OF?FkVXI[Ҥe5`_nܝ0D+FA7S KIj ?>7ݱkz[d{au:Yͺ[hW>kZ햖!P P b@dkvG8 +'qSH[6yj#6QT%7FPVGFyey4.Եc.!ẟltVw<[g:q>YOG̮y~mL?㻾CwL;䳤_7YtShD1A>ǁ>!W#*+@fqKPرH!rpL:sy0GٱNǩ'KZ~6́nM. h;} B@&48ڟRg .bh-ZMYp/"xk0?Mq13吖 3}ъ  [qvըH}hR+vr-\<}?8n@ $v<ʝ^3,~#2#7O޴ mb?7%-_Gmz.EtO"z"d zVNɒS" aOip͕}̱ݿ+Q6> q,w1czǪܤe ۚc笻A3l.6`jgxYXr|SU쪋$.sylQͺ e&R ]BfPnIY#(CV@4mHO\%RU[cT`rѹݙPߛs1;jJwHϽo')=Y5[x~Gvj5G _+kl_R<"QkrVgkK5]ջMJ;L/ 7.^|mEz mǴ݃H.֮HP>n_Ъ\uJb !1:9C0jF.v'>m:a0c6j6VۡRØ ?)(Py5Ͷp&PM3WoPRԗ͟LyP"+Ҝ("& DA~q N#ʩ_iZFWm_0 HFf+XD%+MA-9;.QC/Y؏7P jS ):W2h;/u[M6Z)" z S}iU}`L#A NAv%s F*-ݡ1ؖCS+mZlBDVwZ,*ח$5{6/ABzx.j@R?[ޓC25'l̅_3ިmVctםYǗs/\؀5 &Z?xLj^;w`{^M~gsz)>|wl_s2.VowsuivaU洽ڟ \sprϩbk+FuI(TT|+CLħ&[Kutr> b>Lt v}bx(ÝZ _@!Ʈfz،m)~KЭ^K9\|޻=<.h`ԽO9rc ף>A2%~QԷ1{SYZN^?hm2 {V6@[.(DB:7^^ƈ궯y\1)"O!/A0Kv--o/K]?Iyk,6A Ì\ᝮmڨ^ɴD355\'O4Ԫ£]G 0aw@E+Eǝ*T}->⽥3sCD`86t.!WHC|+{͖6WT/x[0y1W7b^Ϗˑi6YU3v6 `uLVo@(dAk*$L,a"b"  a<[Cnk4eZ֙7[@HT8.!DVm@3\]͗\_N}SG]he6IMFu;w{^bIDˆ|$J:B2q6iund2?ʾA(me]bk V"Dd*B1Io*`=SH% lrߡ؅sD&Φp-âSλҲ D @`r h#C Q 73@dvR'x@F&t/jg[eh W>W״<k.͘[8U3=+z,Th:gBAm\HgO>H߃ $_ Hm6KV;@~~v| Oџ޲GkEQ_IϏNgħ`S "IE @OwOwo&>ή7t-P(*91|rlR@A$!$i#g0n^t`Ōx;RSVѭie:+$b0N:Τ`KF]2[|nT}P?wD%e0X\,>i8 Ô12}PW? ͏-;D^!K k/]y!KD2`pbK)2~0 =xprlV<'u7MȬKIqHlS*!KC>bo)Ĕ*[3Q*Otȋ!O\;]45tY[7׿@J f}7#0f?xhx@DDdRI+r:0jUnuY*68.g"ʱuty9MLrY擷; J# MUe<3/w6d<2 pT6agxʳ#M7=b.Utxr}xiG<f)@9RC-n} c:):ήQ:؅`HQbbVv ED R "}zK,TeW+?+,!&2h8lœa'iWi`a{j16udQ|F걺ZQW$2n_7͢byם@ҭspM^.U >@u؊.NJTM۪k]g9W0gCkm5bDm C~xԁ /S%L@v2Z$k-'%)ĔgNx=dioJ(U~h$Bjq璓 zxzCdO/uw8߷u>w{};}Km0U$|l@ wl|8݆sp>%9k?yߡ=|FU}-{SX*U~Nbw]:SCúӦz]I*̪D|0|ՙȏZԙ}3i6—*^cgsý4WZ:IGT Y?Zw=곁 &lp,UzT"ʘ""""(2]!bR"4wC udb#ͻL"&X/R:Skl)Gu5S4pxuiǕ/hTʤtJW\rb B. gbY}&сNw}evlyFPoo5 2c2ԣ:<5:[5jIjИnUȩ.b ʙ8E xʠ}u'2W޾ʠYPWsW~*v 9 )6kN6"'p%^.e)Bne 9`'?HLN2SX%}<*ƒqA\UL3bzN"z斸p~z֦gԵxZ-;3,R7WQX& T^z6`c(HHTE(r=~ s"7 Շ0}3a- am:XSZ|_yjkAKyCY"gnߟgk#Eл z^S6KpI }Wos> 0QC*"ܠPPڨ5PǏow kdo唕||4&F R2.Ȯbx Ч (4+%0/쬳:t%gpzHE~bΦ&URUTUfxK} a6H+W&&$Re U2C&C4^Z%!l)ʓIQI)a_H vU9uOT 8RћtN&q䫤kyERǔ(r1Hcl@|+ w.$Gwout@GN'c^)@''MR*a O @`yug&d/Rj? l X" #l!R"S"Qp ; s}j0I4jY|s^uJ4 ʊs.^k  ,%(!-l؊v!;W88cw8LC5RDkkh<$;%[ī+m$4GW+`G>'WK}*u3O<-_R. H{HHTjaO#ܬ)?ϭ^fYWߧ*@ǏI}~ˬCy=>РGw_ytN<ʥPa sF?~Uɘ ˔٢AQRR0cVyEdbRrxFZwDfπ׋xńzAT|*GI#7: 3Gx4P AVZd@LfC8%C'Weqk𦰃EB`Df ?S? {QHOZBm.s wF XqR74fa=95 v{bzH ;gYF& u\̭(Y`z^R]P$AuGwC^~%mk$,dw A@02,X)1C)w;ݶUItPۧ*XVvNve-]>[ŹVqTREb "#e[Kh)6zsK>PޡqA rN\00BkNrѲ O(`d扢ۤ꿠`h (YJV^Cs odY'd 6?QYh7&ch8*"`{ذt԰SFl<_{w=-Z|U̔rS! .hۑWNhX4)fQ;,?p42ӬNLAtݪuSCP5RԤ&L=<↟yxPl<ڧ'E:O6榸b|UGk8ǛuW @  _3R7hޟ 3"U'ΥE}>וR=zpx3:[(R 26=W+  hxƟe#[Lؑ!Gii1N"Kr h_2Ɂe6I 50bz(' ^SƤu[cP!:=>VO_z|ؾMx$Օ`&<@ XP)EљLvDG4vGD29x%QSBmuөi: '_3I!I..fsS ߞK+ l*+W<^&cD7k6QMO|B5,(Bn `ýFwdv:p@OQ_="}Kw8T_G6?}7n[%@ʅT p=98_ a:\4XNYǽbW'դWۢ{˚~2Ntagr V fdUgW354ij7Ud* ,!~spzL(w!y 4aPb 0H,V"Li sBvsW[eBi3}d^WKeD`'\(]2i~Ζ$LZ7uw(0tJw$o]\g>y $L.F <rޱN*2p"zC6i!<qѧ3ҸgD+L*@lhzo:ۥD)vr,alQnoVLTsKѷ?- LGfo }e_DBΛNJU \DL&+>\zF9'j* t;-EaL" {oy4$ <9ELX-D ..(*!N)@:P"=8ɅW*=A*. P`֌г40+YHu9FWNe_tD.ilS+rGcw#},Ι4;](.JGV+SV\ĈBg86xw/Z2FֵB$ $Y$)|m*7N#w\BQK`R(h<>4KIJ3g£ 7j0M/=2*bQJ6lטJ!Yٕa(phql3`~݅ Aښ ^%HQ ߫?i9:>!𾚝E1RP=yuOKߵlkOfa Zh*vr:_>T } Ư3D]^u~~"Wыn"a DHȾ0ܕͣeս;5Xa)[Vn~+e]Z, A:HוR\@ډ|*50 "•|1tgNs n_ơaE5)2HZߵEhJ jPi=N_IE]W#כì)f lx(0V F "Wˇs]Qe~f[\NI.@œU5WC3G=L9N|;VX٭>qE9RlbuƩq5/[,GtwSRS!)bUbi|:J y] ꫜbOl*Rsvu<7lB~Ef8|[|E( :Lkjg|Oi2[G|3ah!]6eou_ѕF gsΧB9Goן.Giȭ)Qr ;P >=DTm9>μj e)@- HHV`߯kut?2NsL&eÂiH#e7c:?Gvsfy IEeV'x, Xb'y=K3t\Zvo#礵nV+ mOw)7ey U`V.(sѪa/`]wd]M|V!=/XA Y?|#e HCb|@ B!\E2fݾÉ5s],+{ۡu%YR(2D^qQ#]ؼ/k\|c b-! «e5o.7 QO;R3(>^Q!Tl<{{rtMPO?qz?|(@#B8Y[PxdK>׃y&U +)jfZEm[9fHM@j3 >.)a+"䠘tOgej!-H Fwًo-닮w0Dzꩯ i$PQߕU_;yԊV Q{EW^LM`>9@q 1 S㮰=4ܢծ>DE$BvAH@@; k A|HafK e`Q7J =|26r/5!kWb^` $=qZkR{h,CAdGI 4NqCު~f.qk^ks S<{ƠvO޴yc/gpOvu[hx^vo'~f%zkU!@pT:y7ɰGHB% "bGfv+^YiPMCtɵ >[Gĝvvw,NmI@&WB8=0AJevT'Qw67T^IjVTA4q!a|(8y93^VZT#+;3 qLb2u`=Ema^OjD/hjRDyFV1!}'L \aej~4k` GJpD@2uJ9cD4$d.v&ΖXF+C]s@g(*uu(e,6!JQNo.=OVad ͡m=!%_-2"!?i2P V,Azޟc '\nm8( &n}gURVYXL:q @B,[nҀJ$]}/4J{1 X0EMj&qCTaOw_¤eWE:js1u"!Q2b5 t\_".H^_A[0e J|LZ&%T3PK-& fWJ9T'x^#bx1T|ؐE*|ʷ[7NA @YeBxRͶ>\.!?jÅ(-T{5,CdŔLLٻ˯%X@u;;>?{ʺ{&_68лh\ `<".^TaJ^$: ~nnC3γSG&byg`CǥG?7P4SHkAQx/5uْkRީ/N&c'BVՏ9Hwel4;K VC 5cBZ`qsٝ6M?Z^E٤|\%·V`w=~i5Ķ2wy;CŤUfE8  xXyM}.{kIˑ|C8oE/Q[<'!^?R;,g{}4;Yi$S9kxTџwi~V |4˿ֻoh_gP]왾4㾰 HYԝ׉  ^r(!$u@&_u!&8=EK>&YRlN^_:مct|ixfH \a SQ$NB-@'ܑ3 j[ƁF6,[(Qk^Z;1=N29&j$Oh=0Gd|Wi:.]Ҟ ;~ ;s dʽ..3˻nŻJ !\R槉N*NaakS[JLٖ*k@SQq=l= ɻ}/}w b4ZdpW7mc8[Xfjj9@,!4R&`DMUK+U嬓ke.xWͣf,!vi#],ʕɞE/UU"b)S-fy8}e͉ٷ FFm՗ފv9E,K R+@:9+9,Q̹BZlW1 %(E}S*-n(EfTڐ}.vµ93DZ=M=r HHK}͸ճ`h{ G;W!~]Byp!uaG fV@񈄯*!5B M7-D 6UMoAЭ䬔HX鄙$r.zhֻ&hg}6.6$eYtW`# 6Z'#)ẆXcYND  4vc4Š-:6VlΒ";1k@<"EbWY&U[)0 . wˌn]β*c A$2gibhCrm |lP=T* E_,^5YxbX.kHբh@-' CXAԅk[3}NBu! {3%^ŸNLw_U6ތ)vi`1gOZ!pfy $I``!4.ĂQ?vc)AE"R6]*3 "5aA)EIh^{R&}!.lrW1:-IaiENXAFr]1j/tWWO͝u3{`(h=^}}oQNi60٢߀0ۇkL0 bRuۗ8L`4Рa&GFg"0LycƶU"I&wJwKR9S˖Θ{{⦍Qɇ@&-/D>:CvvxnZ`ݟ! `0*I01 q3вt+R08 ^r~]ibi݌~Džp.Kj X,ˉd)cqPYl@8#d(y9?JͶy t\ jUx[FvK?!]ZPpH֯1MBn+}<>͌5u ̺eyn*x;TK'-6f/O@tFmuBEj E! +#n Ҹyi;CXyY[dhxAT]SoMJxŕQ#@D$L{C.$VDNjxzy]nElf0JmbXaҝ*R'N";twfeĖ T;gDp`}ZÃP(-!@hqR7T:y~7\bׂ}9z?Y_d|:bXla|G&)J-:[^>xV w`O<]G[ )<8T;p0C>vĻ(KďT5p[J0)@D/,by.4Z~]21=rui5+)Q}*Hƍ0 /cP֔C/YGoH"Q1hnbB7/qRI͐÷hX5; ԟ_[O/?sg"/ 9->!r܊ );zXCWc18Oe snv&v[s*W쳡6M5MSlm*8,R÷|o\8g@2?g/Og6L Mh3=tkzPNXȦY=<|ek=x/.X)hNjwaiTI)2R &x~.x2믅T*O^=7c[RvE՟nKOBwcoksUcɅ; .4d͋C.+oJz:}1i|_e7óЦmV,'OԩeĒ!|[:05K ͕M}+$"yvԡQtn5_T&ѷX9pSdeKz>:]z.|esd#ܼ7tS.HI;t@S*2(ֶ(>YB` eT-GcY$9PH( (eelp O۲0W@BA F*(q2(W +K*%|4D4B[ 0H#c;K[OZ(#g O0 P+ǂD, Kzo5n oK? @@VOQmLO>ỉ?d|hgoߞ}Du(k*jوb љ!d"} ?b}^//hլֻbyL7dOԴVztАIҦHWu[x DTٸ?5v Qz5@YUp̩FK|~݋{`J[FKlسv%졛ODǹVOeOO}paxѬKmm*VWWTlgd{~0yΑ g~KC̵@cOrHaUr"}$)ayb̮ӾgDUN2twcsZx}ƇSϊ<~3+h^2w-8 U?s{` V'<SXJ#27o#ЯY bIB؎PJ`sޭ/c}~lF6^)3q23TO&͹Cq=O_Mξ~b ,OJ;D*Sq$? "X. V@l .Gk|2t,&,а(hx[`[+څͳfJ] 5g.(l&I/5 3Za;JvAWFC,-SZ ΉZpzWȻ|]~' VVcsFt77,KK H>=9A#H4 G:w%K߭|/s阀a''_RRx_6tFn4bQ f/R0Gn3fr6UVNQ#` p"e;GކQzH'k/1ADj52' $bhv}c)0-*!\ )BS8Splq99(,Wwwwiğn~w?#2OV$hMtw΂P\ܞV#s_ԓ&IY!479B8p(JcsgTnq͟٭s3hѺ)Sݛ^3tT ̕I&ko)ع5KlX7)?!HL?7 ?ə4PfSq(S-w۳Wyzï?YV@=y+sG׾O.%| w[}gk8Ѭ3R1?̶g9dk(eo]D'F :yz9baξb(P[y87xsmVOm<5r>B!t? o7ITXD{?hCzVƎd6I'N;Y|>e.n?gM? UVJi.E.W|ӂA㡤y>9"ջR1&z;V޶|y|ˑ2Ђ,/ CDgMoY-bcas"@zaȒptyS&<9ODe܀=uRf0V1KUVCRRơWm )IJ?_wyUr}AZfx$0B0(F^ /.B *B Jdg2;eE9'Ӑc}Gt?םf~}.l}.@P%V3GCGeqEBnJɺD䣨4׾K|0!Ge߈1!Pd:}E:,)"'6Bѕou+q.RW Cv^E[e@lfI9GUN(A>>2S% 6y?+7N:@K"b9`il_jZ,c?؀ 1qS7D_o%f吼7D@Д Y)͂_ƪ=tTCu_q rL-] ϲҤ ?wEɆXwVe#5^ [$ -nq('}+?rjE=|9O?\)gHw|ýM[:HCQ'~t5__ܩK%?8=N,a00 )io~B*}Ѿ٧w׾[{,פ.FZKoeV?AGG!zQ{[=F DUvz[j:EۤHBi\O(qI)@Ln\bKMilӠˁo6?ͭCeoh>ZePiHlqQH` \H~jV}_פ?xİLrcڙ9H]0.y&:IB $F,3!4d_j9x{og{~.rao.$z5lzNзQez96O\˧Avg %M.СzGH~K k'z%,aYkñHfee=@Z{F̳-9;YE)c*`Yh3]Tc=]RB9PJH@ Bx(a#EG4(XY)aUaViuΠc V7C%8A72R^BY J)^4( K~BEٺ9z[qIG|&Fjf<ӑCղ<|*=~`H C7 QO0'mIZYX_ضg]v "0L"027e}=.q8êfwy:$FZË6/hpnFBLegHLwOT%}euԴ^TWm ۫[EJW\ O]NTӫvͥs>D9N<'M5C%ا ~]ZmSKx?S*M)zLe'R(""$ leBz1du zM Ui5h~osY7x I~drhçH>hsONM2%+K,!V('G- Ĭ2_VhIRY*qxRB2loe;Y\A4~DyK1TE)cpqncxv߳mfrg[®-"W7ŵY3:7 d)@ &zxKo}'I\<{^xiok+(I<  I҅M!IB{pר<#i1gt(P(Y?-\pګ Z""zi0%ڜ'{{'_|վAeS7㰂Ys׉ҎA  eiò|֤cd߂O-33"q垪Fr83DW}uHRe%&܉+:: P?XQ$f) (Q>y?Mze>!ourq_iU'ܳ=yƤ}>;&a>/B5MW+u&Kj6e?Wȧ{mYj$Νn;j<>Yu4 7+JP zD^>~==UǝezﲻE&;\ލ4W~UT OO|Ela }qk<mM'b&A_;:慄dwgܺc6J 컝?SwXF2xz]ٵ>_2г򬍬+mD7!`/>ߠLUsV;O%k~ֽdnktwyc/>vl\f!2rdZ{5__;~v_%+?Ǒg}AQ Q( ? p˹BB6x^ p/o7j338Cq A ocU=gP eR Z!p'hm(I"ט#HvsRiUwJn6 %D:je=-Fgtt2 1n+{`$琁9Wp$ip ߟOdS! f$$Y9D jT,PY:H & ,!?d9P$HYX{&J?Gn E a~ҸEl˚?9}6_ڸ[ō9ZoMٷrxn0PW~pη)r'}3q@|c9 Ύ\v7oUO};~[ @GMev_l;9سw}ÔxR!bEv;nfm6sSYrp'}"/G Gζ^WO;)"@gvhr5ڲI}㘶a:q^>gn5)?G%أYQu&dԗ7Fh^#M--+oFQA~7s}^iwg œ=Hj[&0mc{;}cxJ|o)+WQ9Ľ)w⟹}Y(\+MQ{,93y_RBܧޅƿը?p]Z=>ۺziqLfc$UQPAEt; ηCk`wtmlymE NFz'h9%iH=(܈x%VX&9߰ j7 Y 7BqqQQ"jJB"}aMdN I2AJNTR.0|++Sh#vMPe8ˍD΅BY˷Ad6FUbeө5M5>w㐉}쬘y s@.)<SZtEˢLJ"ŨTzP x xqeM1w?yab-Ng/Ecj9͋VNvf2y|O-¿'ӲyiQY.oOCUvұb?Spb:ތn_~~S@Xp }P d!c}&(_( (Jo)iE'k622"0`p<(%@\(oD{Hlrƪoە|=jԫR^Ks\'I>AǔC &-rp~bCDz5>[G5}:fִlp)iJBС:3!b AĠ@6``)C\XFڵH|S#f}F [Mv9 2X M>fv?=#_R&߭VnN'SdFy .;ݿU _%,'M;zE߿n=Sgfav0zZ07o:U^ߒ:ݡcٳaUv_lO=,֏n[])p GƉnjŪr/cfep>/if,IqSh~J1_!k4ùt  "gMpS1';_qe{I-\+<ǀaBݒA䞳Xo:nE*3' 6bR;lHb5E5"B>([ƳՆkSp9^6W+=ܡ뭈sorI%2`%C/@?q`,hѐ%zoJ~, !߫MQ/ A#$1<\s}'qniɝ&!z}VF1^#e߀Й\#O*uvva, $) $04LB2Vnf᷏@5@#I# #'K]&;Aa"Q㞐C\_|`D1pb>27D`{6ӈ*qhme€*a I2H}-B:}'ZE>_U{ Yh13iFYSe2{ (Ie(,J".#j~5Xpih'CZ*t}.5BW2[vٿC~{_W)uGjWV/|MUH꒳{mt7NQ|gYoSq_|j+H֛u;m΅ ryghL\OwcKW<rҹiR Vr2(64̿b&J] j~GẶZgl{Qe\M~ۗ=\n0 A~Gi? =Ճ9om oo3جƧuVVDZue;.ڮf]2g˥mj\}l$8H|S{[O."x}#FtMk@GِmkARvB7mSEwuA^Py3^f|  Εf$vntp /O E b"90YzE-zxosiw3G-[S5ϗ|*62_Y=8\ٚ߾]*R )eAQXO' A#$t9y\ca1JY!4sd;a~gz#e:I:j<%G\:vhAQ+PFt?o2o9#lz/?ҍ!GM?bAzj:0EO0 ~N#Qu)P, vȜ}Q$D?q-WP,b: h8ȂSԖC?TB\|b>SԢ)fcL5zms-wD 89Qž]\hW 2dCDYVy3)e**q>Z Q#UYZ3>BpL>%9qzr>rҼy@FIa1!rtu*3]Tzcj (C2С30$ p`pGe_[xJEG[GtcU,ڸ^&ЇS џt5qPٳ,2NJ d~toQy+v Uv4+31)IqNVEc7Y-_B|Ok^%'z)Aet]jxaZ\`xcvF{ױ|dxve'4M!HX$` [)¥Y[$4KV5Oto*BN*GQ$ͿƮ=~~M;7Yl\p *c?O+#?Kptcj9ۦmwU׊U66wkI=tUťi\wzi> |wD_u_JtsO_jp~Gw&c~F#Y1ˢ)x3Ww{{X}/l{^c9$zWfRo[}jpGA{tGԂ\ί-ddkK䟿KGi91W]\^#(|DWD Pmwi}^\ƚ OTgEv&@ }i9yuKpu?:V XBĝ ̂OFhȰScSFR*E`$"ԁ}k\m0X\:كj\ŢoP5lB(,6ܚ9EfeF0FbBKk4p Y.-V*8?b֚.堢D-, p`XR* 0"3k~_{50b:N{>|a_ dāFhccFu=6zTFY[p q`db[Dlyf47A(8߫ǃ4 Jy7i|}f Ǻx+U-%>f(Ș.`UX7@ <$)R,1Xf5hxdfMe^ӖLb&AA@̗:-XsVE0R C  B7˻=&wk;>ٟ;YVZB1 -e/mWa8N.̝&$JpAknKt($H(Bc3)ZZgkXXBĻѤF m@mmqfJܡ֐Y-%J8U~tdYYV'zyo1moha)ʶiF*sXaJ[=jBWEDvbL jE"1'ݑ84ZK;Er7bd z黕"~(#8մ$ ''!/jlP8Y3\ 4"!%,Z ̡[ ]+Y\,DYҗWPx.yNSFi) . (G2h*%;f6 t_uOэKMB+D(@MXdcLBTdY.XJH+_O9~Ghj}}lme{?1uk<͍UU>CI$Hr:((o5gr4RQvx|OyTRTBL!(J[X$:s=ҡ /c.ɛ.F*#;RJ0gZ3YPv;qij7 ,l(D1L4( +/qEQ߽ )`.ۊgS-rчytaKR_08&8STF08ȰO~iY-(d2ۺJ/CƐV_+>W(w%E#)Qʫ4A,۸|TNsܵ `wmxCux3],]:0bkݩ@X@7 vh2:-L쒪)v׀ehE+>"ťmY;n|!r6ۦ% naQnȿ73ì{)U I(5Y_[`R`AQnG,WfU-W=n|YjUUCj^\J[S-zEB]JF4>$膂w@(P$9 ut"2ISu^661C*L%''S#.34[nmKGezA^?;stAAdF1B>?ﳻ؏ۥ}Pf&Um;smN͡乽mGG- =]4?լWKxЏ޺(q,GZS?Ih.wWy%5bsOK>MuZy DZoޗ.>Z-\8S19Ku%}(߄qFJ6,q^]}[x-mvt}XY4I~ s؃ĺ{\V' ~9ba1ۛ.2h”pA15x1J`1Jxٱx#wjߦ[|U_ׇfSy>Eoоb9б=Me/]σq}0ja:eIRN UAnG\OLѽX]Zw%*u'YZI[bv-m<9+[|әjOZyX!Lxgw_k#^樨v'אL5'^"tzO@Ơn}38ƞƎI(t7ՄZRH-ƶ}A=g qlLS? wOJqw Abn\Ugvb(|?|n̴Wo [k2PGx,83ve/ծ (o_T\]WMţu-hBSz<6L_> sZܮ=N!G h{ I 6wAqsN_uv/i)2#("0GJЫ[_+UƮ &ב U(`B%;e PdU "@T N,gxEl0}}[4R^yvmW%Pr5K|6\ޗE*e[ǯ +e8CIQO_E2$,j[J+i-mJ!i?egWisn7>;a7O3G[Htm(o0VA3?p+?Ź;v?SnrN]Ur hHV+aŏ@u9/EK(އ˸Ų]M{ZsLW~;]쥪&[YwAX^Wk;F6M#Z6[1k?-͟s " Z&@j[\%~oqeBn zvaX PXas`T(D2dE2ed!,!XIHL a %H $Qd%d*H(,  0L1EREQ`(,"$REF$*fE@=HAHRBald+EdA+" )XaXLKhLbAjJD\3 Xc"+0U:hmH,+"F (:4 AJ+ rQdz0 $YI6°PV5PXKm~ M"Z0U-)+m^.ZaOH dUƕA2PuU(Oz6pTĪY +6lJH`T@PE`e -E(- QI+YSD\$XLYPbq0h2p-YYkXpqv M~6f+?G\|t9yƝ7o):*ʻ J"G(&նbe}Z4uQlrY$ Wp Ŭc$+2)' K jp̠l` ln̕;P]_ }HJaMuT09PQHSRF'49%)PeۮҦPC U\.?֝{eb쐐 "գuT^24g) Nz4l[lȁ FD* *Pa |'z_X"xR/Uhahl|VSs7jVTk(`B032S)xkjVr 9@] okf5R߿}XU5ㅊ'atX!fA(Q(ۜReXC*y ڍq( VԈB5"N)eӂ5͎B BiPW!R+NF+jg %* A&'@FH4z/O-24`4啒e+qzqĺ+:3S+:y9czdQF(1P` +(3aE? ]qdURqPrk fu׿7UFQ 0 Vb R*֌|e$c),`ruQgЊf*5$ %j x̂I0 ɤYt1JT-aJT[A ɽ::';cFʎQK4]$?3HY'Χ ^4ZtZuX-]L9i\&Vdi\!YLgű_9TV_Wh5b+ZVw^|zgCq#yUQQP~%KNoݣȳ+m(NfEgˀk籫b^<.%?uV5YBXNb?D4B-&Z[`Ua8)ۏ+ E5!|w$'&խ []. }~k@kÙgZV{Ia60 F!PY` +*B%q`PFM"UJ!mQ-@[<{nNG|bsU55W؜A3NS % ڪ"^cXOQyyktdBx?n~91L"iJF/nenPR˝>VXhE'U$4̋.PG JHo&M ۛy]n6.Եi+ [Ly Z" a_jDO[gċ'ȷv.I>bT(\1hn0C ކL&!a+h’|-0A !TEYvC YO#vB/Tm,,̱Î7fRPTMh*ؕqFZܶB(nRU(ӨRbu ~s/voW(GHRE [FR44 ~aײyˆ82{,R@*!G~iR-vMajX\^Z[FV}JP2H:mp'ҋC%BGMNQ\U1kk b+|nj{]+V jJ mwUFɼ8yImiD 1R!e I* @jwSjӝ88.x+"nxaҞv W_TdR<|wnhʾÞj0UuS(%I]v Ar1c; +Uhֈs0*D^?J{$!A2t61 VF2'à+N_۩\^%oR7a Ig^.M[wx2}:02ZnvE PG}5'|ru[! 6xjjEMyBA( VSpر`4JSK eU$f"a McHq\{XS$YTTwroۺ@mgy26.Wߙs7w]J D3(VΈY0/'\q&Op_+I. epj1¨eSY0 )]HK UcͲIBFAu;{< 頲~8jimܼ=>.tK=wۡjbhigO\>bH%YMя=}}.Ms, ˡ ѐ'~x2_rXvkew,@"hJ|,t}OFİW`CF6\bi ۴K\t}RS܃U$VSQ;Yq޺ʊq;1STΠ(KJAG"60QE”a IaG`E6pk& ?V{쮨^pÌew w*B">?)zJ IkޮsfQ]қձ\`>?AX5re fBD*YB2gҫJ"#pn^m ◵!`^%?[8qN62BRp݈fV- JD$vT%֕i:275V,ZD4D8ʌ.k͋URUW2Fp1pԸH`eaz$" YP;ahOpj 3Niw0]s/k&dNŠu~Zu"Q5{i"*e51Oq"R(3, Q"v1B*ol?ƾ)'Rٽ->ۡzN=>C)p[UQꐹQ YF[DۛWK"@REbەQl0ڮmKh33Vw}f' p vLVsVW-@q2૾q >E^J"G6'u'-6(WDB4{}N6$6"^aWw+۱2,Lq 0Y` hᒎ1dZ08p*QhBbch#WK=/ TF 7&E,T-h-p E_YD4{`*E+Mc-॓B"EAAAB ˶REمL5ՔEk0(Fbca i ^Wf=Y+̈TR6 M1JQPM˕0++X-"XEQp8bW!IS(gqZ*bE .hȳ aScD5@K:3u) X.S`ԆL"Z-2\1n(fmmQmPmmf(0D\ qJ) e-g]QDIV9J,XE2+bMAInl %E%dEbkY*1Z~rP\amRXZ*J%JZYEX#dU 3ZZEBah^ih9T_,H\Vmy5I5?q}9?ieItݶ4,5zk:(;ʢc{80<s_{M3I(;h۪\\4Z {<4`.~U^;;*| iI.ϊZsu J7 -ݛtw0MnO h[l8o[ik`$q6iؗca,:˝e1q%.ď1_̎lpxrl/Uùv?K!U7W[~/):~?2|qըr1tn%7?8|ͧSo?t^+pȷ~Nd<.ϞÝ9H8,^3C_ZtO\OG\+| @b-7U;nu:cWq7{?7}_:HӰBF  v<;Hn-U;¨7A+*H ܿ٬# }_ɯ|ݪu7{brXxJkߜGcCBC 2XXﵴvh$HDJTmRRuvZ3 QZeAT/x:٪ Kc)%"Lѥ5GE Q4j][7ƺ]wz}RET9I O>@ʔ'Рn!H:%PcAE^J* U+ϠjBd%Ls}oAQh{hwn[KRޏuWy}jS!44hi#C#M &S 2ʟFzM3MS)z)mSFF6B)@dh&6)dMSƛD2Lڧ3Ty4SzdMd ڃLF!2P~  56Fƚ'MMS(4hQڞ"cSAɦOPzj0Q@hm@PBdڇA&"bi11šz$=OSiDh 0!4Mhɠ Q!FS 2jfM1FGCQi =SA@zhi4  l44ѩ馦4Л@F&4m2=4`S#C $ hڟdHdh M?"? =?E>?U)B$Ih!\={I:8~@QBxeUCg?pq {ձXR >w#o}`z?7f|Ng9G9>uno8&/w1Y145L8Ƽ` >,UD%CeFAYCwn>US`Lu#T ꈯKiI& ũD$m^SF6t:Oil(<š2?h"Rd e(iXef6/.^U*Q|VB^J2!2Gg>Ekƭ-5YVPDw[_Ayd*$CpDiuQ.ksy֎SYMgYt>^UYtVxmEQ%9:DTUnJ~pѼ()rLe9hyzLNn0B,P"`,B?Rőە.첮ddk`0(8vpɷ)ﴕYy!&ּ\۶Ch02h<++tvrΧ'ZMC{'<ĶAK| COVXnaRںyK0.:,DVʔ y km5͉UV|1b\Y箉kbmMbCL,|ڙ'UiE>P2EEBRBjf1Wߧg4fCdKl !_nBw\c'IJ^XA"R?̰ND1CE:>RX3PWBbb&5EQT hLP`0$T%%%@JeУ ϝT234piZإ4aXigx6)ԟVY,{F| 0QA ,TbX c(PQ#b(X?We_ޟ,wN| 7?Q@ǘYdl9گ 7Y -y`&$(.يAfw]l}'mt>{ە Id8([5NǸ6/Í% nJF!>b0 wʎ9::&iV^HH4(El(^^_Tt d-@a?Q/*f(H,ND &&Y $6|8a2; 2ۦr>?/"JNI-QXDUDUd~]b#3QQErxæv 4Ɛ5tO ,H(H/{f֓V<&<HveOڀ*yN o__,t4m2CrLdzucJQEj^ xS* LT4| !6=_{tG514(0QR1 Aߺq[c{:roD- =)5똒V)l0O]iU+"G$eQTHĔ#FwoMM=lQ3fNh4TA@ cS7Hm"X t1T#|yL9ꪪ)aa'(L j $A S֔6S.q xɫ6gzH9TaLȱb ifs<Xf \D&Q \& ͺ, 24TE Qٻm 27bagnx ԩJꥫNI&HTQC Tj@=0dN̼XvQS.nIA6C8nd 2%@P)H`FtebjBJFNI ]( \n$cXs+UxNR:zPck.A"{,sxh+;oU(Hsw"&)K 'ke`pxb_>~/yWS$܆(Jl&[8ɎTS 73o1AY؇붜1-6B;I57#VTPZgmAKDI  ²̦IU>?w06tB۴0eSTꝕLdm;vV+M8c m r |}GȔ8n !yw@6˨ڝ1&iEc7}e R$j$- 5L͓*%t6^fz:z{b`*b (1TTYP PDdX2$H (URd2jpb-vd2 8~\퐄;7$hG_( |F~Jb MĘ|( "Z$o, GW7.v{6}hgAH%^XBαGYCLy?q~m^rP1r( q"(wah `gH XVkXٝAm%2{Tb2i ʠfAZZ[ E4eeE.(2tXj2Y(ΫC財d[i%+(YF`.E0z%3+gx]sy]Ctju^0!F7jbh O=P3 sMp9)"wx8)pʤUxs6&>qL Qr"t󤩒 z#*7m-ŬU.E6A诃"A)hJώO Ҿi켲9GFDDѢw&B8kl{~Ҫ9u,ԞMJ_eԁ`IrCZkmz{G'{Zg9y,I>X#aarL-G-\s?qhliY˩< Fo'XpCD'NhñݟFn.68h權 ErG=O: _ O1d5(SEb& :e u@!W.ndn׿ Є W43scq߭o)F(J390 ^ h M ;ABbB|o.ר% 9g{0Bo5I7]Z!h4O/I~OGo\!~[aϛPX @""" TUYYrևKH5ھc잤@FM'%SJc$5Y%`@{l:bB0Ԍ')!$ &"&PfTٛBY D4}Nw!lՃ4,njUǞ2W kT baDEY!ɌU ]iݻL5s#qQGz?`d`&HPEE3F[aqwqF &؂FhbKy80Hi$czS8qߌ FdpU P,D*(?X"(D(R.EGe_/FQPF 4\MA1HM q !/dc1>fu! ^ s2RH(@I&"wU)2Sb+f D@`GҘ(hDUYߎ[-pPJ j_[ʕ)tPn̹3s`d5$U!̆rjrUi Q­0TE@!^.[T\ /Y"xB'Yb@azV76xvPiN6N+QXH,*(7hy1M:՗i"0T M:xYHi#~`UG|^UiiU4v2ՍOQ*мC*2QJ1c#wWMT 3L%"b0 1FXPL3Q S&S V,2s?Ko3x}kfZnW τxߙ[aP9UHPUKAIR ( Xm e6„c `kc4pa nnBf>.jhd/6Fսps#J+9G7|JTUKY eoP6mH]n< XDILQV"l!-% P5tRLJ 5bݖRZ12nxr׮e,_Z7sPsbaG(Fe=>jk,kbˡ|~e #.vOzm!t4Q줣)%dHh2i jfUEIbld9j@ө5% σVn9pTRw0riEbna[N'7wqJ_AURP^X<~gI4Xr,bW,<5 h{ D,B3̼?\T!l0cRl9n0R1ET{̛w{w\ER )umUSYvTQ<J*nr*JbR/AgwH>LaDȑAۥpY8edNB#ė柪c5&2 wuUy˩9k2d)e5Cu<[t)zE%AN}CY eOw2"ü‘3ge+˵- Zdw0Yc#k̆VEL| *,b]TlRNȗ-AGC)P ʼnAhGX6eUgM~eGD9K"ŠU0Xu( XnhQf :X#͗a|).͇` {USJPdHXtnp$n7BIe%T&NܻMa;ؑ ,[=P(4qtD0J+ q,Rd7t߷rI{dfd qpRzQ/k+gsFU>T;_E֬2}WP(C(ѩAANnNEP)л;bTeSĉLw-1žF +M6 TtbA%5[w=xf$f_J[rbW_r2j}\1$1I{;{:FH*(9N`2xi"l"I&ت1B>A{yCOu%m纘CA"U٦/Vnt .QK׵sTU"J FK{'V9n}sؾY\^ B@&2ެbe{p^rAQIeqs('%KJ*B%ŬPV е3!"L>$cm"Av J캸ro󈤚GBWv-G$.0BW"NCC4JiͰ2ؑ H+{nCK.l'ڷV\#n>EBQCF2$ YAAϸx*cTGD"f+dm,n#@q|sp>Z/07Z5e{ÔԹo%!4$=x_L>򟆻Z9λH2]P!,.Y`I [•quFzdːv9w'EFB>TrԽ9y;l$E@1'Lf^B]*XQ*"Y@&㱄Xt$I"c)$&$!c ݽi'{=w+S @D(v0ȷ>ؠIΥDMsFXton>%wЁ!s HICA B!Ԑ<4 I`@ b!h@BUbv|Fws׫H~ f{k AQEh9~\ڰ:٫`O_Ǭg0|}SKym<چH%}Bjˌʄ1]P2(d%/1BGûXy|b@MoJ/UHIf>6s_*I _~$0?7$$751!LB?{o0i` k$F/K B {RHk$$V_M$IOh!#cu[$$B@q-Ёlr II$.ϐ$G[& 0% w8 I B@/KxrHA0`Y;͒h9B1s޴$f ${fFN7,3 gxiݝ-X´@m.4c! `!zt B-?CGFy=ۚy+x6h{kYvLIv KhWA%1p!|vlG$yV7)!jť1"J C_k$ i 6~gĭ?Q?C~3_KV %ǽǘ{06 kIxs| Pߞl'$:㍾>CzW+fAh1g׳{V. zbH!hϨSo.pw+U=&#}avab?**֍Ufx`7'ujg I$;,@$ewv vϢaP$ !&J$bf_;%;!CEAYnQ^%rdmη&m2 [v=]k[$G9"֛|Bs{ӜxY0UўK&~!qBfvݮK2.ӷѫRlaoә ӝmמ{=Gg{ H,RuL @ 6㺵ήvuN %Б^SrUb*FYuA-WYgR|sM7_f0 MąU~!YخbS` `6atPqKGYb?qP^`$p))NZPTr)U|9aAv|=C \1&1- V~CfidW-'[3AIl51nKX6`.LYxRu15q3Wޠvm) HDQH $A#hT6C ER!@6I}.3mW+o;~F3FラZ+ ݯlBY gYA?+[@5n|1`!X@c$_{ n1Ӥǻ@z -xJ.8O?5逅E6R0C1E̊ńBNBIbS]MуD4ZPW<:,3d6E#(t.b-Z&O W!{E}+P; OW՛+$9LCÊʱW7ex1~QuUAMpsr&jO7\WdOÛiͨ)VHG 2zm!x`>-HЄxQ@vhV}, z[?#pݡߍxP\ {Gv` zĈ6,0/yEC&fK?6X-XLٻn|j65%{ݸ <6lM8HM*3e!oXhЭS~5yҒ^ƮPi[*CR(:qG}0e¾ͣZZQ˕O/FӣT2QwPcbO`zث4qڢ9 UJ 0(@kkJ)`}aܞ%pCFJR:pg}Sk -_#t=|vǭB:ˠN]g;V0_K [VIL-m0 -SVlmajh_݅41y]_}G. #<ث3uj6݌rv3]\3Un|־랎{_~:H=Uh! 4 o+-:$9?ZV[vgvRtc„ϑn_=Z۰!ulFЯݦpHX-Yjtnkڠ7?%`:۝o7ז Ap߶o -FNMX(ޥ\3E9.Su!Q3;HdBMxbs5Z h#*i 7V /RB#4kƢ¢KW6ӥI׺h␜RvqR)?uD']W?V0vnx`Հ 0bz{(5}4\2$3,P%^{\"5 c2Gstwzܯͻ}/Sћ<'<ͺFp0GaЗ|exāf $|$2KMh%T >+Qi]PY*]RM Cv}6iI$b^+?|9m.#WǢG8%]VpqqvYdgNe$@/X!伜=|"+7& W|,T2rb2 `߰NSK,meėE`7 I gx{`*O$'gݼUe^]| 5-|F!OA^ݬ]j*I y^c]gIó +!ZJI3 I 2 Ʌqi U LE=,YkA͊eHNhOf2c0Wi[HI! zII! :Ru$@!7[B3I Hr{B @ %h_}<Lx}8BI3-P^xВH>k ~2@?z 6JI=r@&ۯa=I$YWfZ% @PA\@i im$#i Gh@R6$E_[hQyUkyZWӃ3#kgyog#Ih`c҃g#E d=c}^1¯Ɇm ɿ#]Obۇ# bB_P&\:ibe@)xsgϔ7S4?'̅ǼǏǙh~ zJ@>L5 h|w&(]ϵ44}ſN[r6K&IUag[A*Yn 7/L9CvZ؂4K ,REOIj)Ŕ|T7Ik#܅S*4QV hWEwC"n χ ^-Z@֎!41ϗ3o>EvwȘtC3q1{]0*G^+RHQ3-zLg7Grz츮Kr45OoFd\AUbPPtH}"ac/^?C2?V;={zN˄i_qԫtgp}($V܎t^a.+*0Gf@ -{m6=5pGMWΗwEΕv])ӛ(V;֚ڭZM̷\vMQJOL[ fۢ\tbL8&T>{y2~c@xի7uk%ZsSa!.Lo9`]z1]R Ve4Ň^LѴw#T.2A7N&gZVT21!u|$r A`f"n _6ΤJ lE0)އ;J2eE"Qf`!Ê5[Bb qiU񷟷YK9bjfS HV`)ɵXʜ鑤r&-"ƺ16Gڏ6g/C^dCK pB>a!eU˂F[qX[ZL1ZEoCTJZXpO!hF['lGc2*cUw_dhp ɛ"ܨR"uKMu7T?PJ0.^Z~$;>2<*庻SDnw'ɉqzNy^K}#W:mDNCI3ցd]'ړB.Pn=fЖZz2x2Bv8cP޲=3^zP$J-Fc47CWzKwXtǐH/bA+҇ t@pҭO'|"L&0Wnt4rmۮ!q?<ل%QRbGT)%R ]ERyZ}kD`ɀNRZoɄV#Z-rR3ݒlhyF-4EL\R\Fՠ$A3 C;xTrrnׂzȿz yRςwVzӪFI ~~,V}魔PD/]P I TnGm\>:-fB],O)LhvIvN/{\9n34|-+eW~&5s0>9Q0tH8l;E7F`L:]Խ[#A`1* PR /Ҹk~i*̝~h'm{=s*BMY*GcX 3$Y%v7*܄F%%CFrB ys!,+քLWBk~:ADĿ v ɻZ&nNELm8IWin>)U7oQ̳ZR4Tj dI$TFY v4P q6sTMt KK:L%4$B]N$as!Mv6ujj!ۡ#{J]HK-S5BWB_rSس~k/SA %wB!SI-C u30Ai!Q=u~YӓsQCWTx|eVGקbA[JNSLL5bxDO5"'5W& 80,a4c ޻PQ_JG|4 ׭ =57 x"NY*tLjNH@&q2_aѱajct5ș1- ̕NU K$a\s-QH9߷/ܭvw v,\xpp_j['31}<B4+杌H)Jeb/<Mp4A$:{Tiz3n&p̲S9r _+k% {?\lP2>vr}sҞG ~C nWontky/n\bHK-A4%y|$qY G-~.D9)I= ym$#z݁)H @{uUIRRU4e!$ $8=G\"Ce}v@ . <#l#Nҩl 2?}zq rVQ2S/jP #?}iCHj3^ ^؏YZ3!x@Ļ _sHGeٛD0M%\HrPCh f% d!$[` *q|^:tNȟvjU/M;0 !$[Bz <`pQe.rJdjs/*:BCNc@3Ja.A$` T@nEyN[.]ǿdsR53$s L߈]2GPon\k4[l$#xTgٱ^ 'ìښO_b1m Z|$sLy^c_.tx/݀@&9d $R Gz;dόVIMo Cb@p=/x)CرO>i( LWlê*C 盰O2i5j߃il/wҺ՛¸!dc9VMC> 3ϵ^{WZa<@G<G/K,,AAGmw&2xs@é3Bnuא3(}{/A.0=8Q5-@}C)3ÜZ5=[6-N~'3PRl~Foii-HJmw0CE(B2,!xquy63ޝ8cj0G^QWp7U8#RF‚ƭW١?sAa oM.1|"'&/N.ևS26 ʹš<$hͷxSXk<fuu?[H~sңgv8o7K|wZ6IcȲuw  w)h|p*۹\dt?t/]q0Pb"x`_58,KDA0Nk jŖW}u7\ W#2Xb<1 AdmO!?{,L^eaBSkotgpŃ_A=,6!>t0҂R޷)JzB?@!&~̸4 )}9_ol܅_*n񱀼޻N[>_t$# @i%] H]GrܬV. ]kioMѝI-Kb+ȹFE #`rt}:u!%4$E(f zM%,Ri""Djdշ0c>8㊞b?h_+9q`H;aS{Zaքo%P>KA)Z١ސ#p+j,1}{+g%ʟ{ <ç"үψPLjab7f`R|a#bi>M usR>\iBZN\pVojmRlP-C 4ώf_ +xD%Tr*$)qh%G@%fh(w4ZOh4pe$eU󄴬M'+X"#K0ʨ%.@DCN) ;C trqdf#Ɠx d8-:H@2dauD⅙RNJaixi1+P`U9Nkɉabmu7Kbڄݐ(VEk/ȕi~-7(:T'aYyޖ:Z mW!f 2eREHxF@иAwBڡY`>cCy_Պme6`,DSee_M@ RNӓ.D)Q ygJBv((4]ڽo?Ղq.Ni^8` ^"*Qb2Xx;Nwx}V$63yPulfk~(}vx ЗB2U)fN ep7-ME{"=lSn ޕfd!HJ0wAE L̇Gxǻ-iT1GTYQQXCM{mq&b GvzF͙;Z,A'k@|j!044S7EFDb V @h:qviP.RlY #؊5EJfwJ!3;tiToVjºI9j5)%X*tJFA;68̈ioZ aJP]+iHҤMb@'3_JmӅNt)ňQ™i?5Bs\BMmAB(c塐XkLF*F&Q0rV -#5r,OYy]c=s&W5&1LMF~Tl~C 2bB3L\2]B 3u U6UAlB׾N#?%Ԝ隤8! )s9;xu!?x7H,&||-̌Fo N%eE3IB&1l4ΆR]&=&s"pˎC%Tbngz9-t;0KJlU+:4 %]1BǏ_KT;T|iB>^ZH]!\C-*|ӣWB; " 1+ \I$$#=I@o Ah()_UśQ*z9ˊkfLS K ٜ`ƄL M^m̿tPP)>M=XBqzohn#D8G]{STv3 Nd #c|}Rټ#"@cd->9q!7; Iײ 8u{}>Nxu !2MB" "-]<./ n_̐7`@WFN Gf`ja'Lާf*|y*Q.9.ĭ󶅀ɧq9'>gD9u ɪ) WkWc睂0 X,*kmH;h':'yHOgkk 64q`8k s yGb9@`[! pYf癏Rɀʂuioɍho.Ӧb^ۄmo#Gf~sS6/oM8Vxsz !48F9 rG7L@qiSGu>Nk/3,]T85f߇G:TjVzdJ o52ffh褤KӭGl{%eRճvуoj2O ^=^MبamwUg)DLrL{%qִI‰q.h#Hߏ~*#X~@9CMr7TVNZ)kn%5{[;_&Ud#ʢ`ԟpWwaV AWi}90x3s;eϼF艹7PBD bI 3 &|^P69j)l+*mڪ^ʴVa\^D?9zkNjD⑚[f lp:.Hisd=x܆`^0mߞIr87mŶLm$OF;_;[+m0i-1snG&v6[DlGVܹP*oSvE̺c_^x$6A'GE-vYtn&eD mSL)sa 6G'̒d!?'.+wCjU[=׭ 1_H&t{#ģ:/(%nִ vJgLH'qmگJc$@bE) NXơsަi?dst6R0Qbar676,''<=lpJ_Hk] Df,˸WSrVh<핞e1T.#Œ~&ăS2}b%дtey]#YL/E mnm&$)TM$@x[м523HxDPcȹ3QRt5fe8֙m&lLXoaʁKmdFS~R^{XmH(fm&$O=[g,𡍄by)JQcF+kmTGP3qgͷx"wp`6N Ll[gQkJsEO!ωgg׳z}xAH(=I 㐤emyAgRlC!hZh-i( 8dQKvsշnٟ_5S(>$Cϊ2>r˞nJAn,\#%*(eU "3gI^-?F~EX(g˥2*OQ+Z7+]PV(dZVqGwkwR$^$&PΠ5/)%IW0Nr$BՋ{kϲ@cD_s6[R0l"23]M-m\1u#nqtCˊ! M~| 3Bha0I/P t f%V"557*jnuboMx[A)LJS)wVnXU<#eo}mӒI;0:3D7 #' >5$~m5 atƔ֟( ~.>JVݍjh7lJ9Ё vƤ#koGVfN .׵2&A;cY#s PN@PsGR_*̫N^MiR#vN.o#KO.tKuL$ms~n:&)P}P6hLkq=j9`_5X*aWԬbܤo_K+rܜ$ŗ)i2FI1$ *@hҾ2 ;2xYڸⳢ؜{Axth-!E Ij% lu4&4>ۚWuB]\tʰI?$m'JڛSI\ə椃.% n$:ɏCǟ0SM.S nhF}P>by'm9ٯ> )Lamt1ػwFY,_:W=UFG>wj(5(gEP<ͧn4uXKTNȺ*bn[dX[FiE[2bI>ZؐP#4ib]CFʒ?h+\YzZm]/5?zG=KƇ/rI}墨f{9Xԗ\ DB |<]_:_T`,_z2r{;9ȠXS44,?wraJ̯쎌3.9H.aM-a7ի.afwљH2o;Eڠ$~K5>8㓣 W!~EB=ΊMچ h[n %YwR" ^븈NLgOU5 3yl(sK^X9 [aQ.6FQ֜x0y=g@p%#vb 3I{dv.13N'&@CQ?lM~zq)!]h"Fߴ>9ȽcXRcl6va 1{) R3BߗnTIFy  쮴&Cmpd+(΃vJ\S4uڙ7_{ ,>: Dκz)8,-0nf`Jm몛VȚRP#9hu3U⏱qK<+l ;N]V-K^x`5gOjr*x^i!h^ #;v {h`*j%\#3hޏHN<@(dL 0 wL> gnwz7gg>SNЬbOpݐL!˦Ya4xwWR|^x9zM9V?KFvLFNilCՁ8hx_We3ZS !g.j}_/f,A iCWg~lN>;w ,Dh=;l)vjo?sU-H:8H5%tW\'ڵuXU?-{|}yC^OU3snaH1}`\߱ ;g9VӳU}kRK+QT&iܫ8}[P]0\1 Y4-=@ ,F4csp%2yl-|6٭jaٷs} ͆4Iv^'qibl67;+l65]-=A{Vݩzmf KMPˊ#ku_v?ґ?08L@Ϸ[1x,]|E Hx#Ћ`>NTb-, Mo:nJ8gy{5 l$/ڙd @ewx!ш  k dG>@qP%fuhT`E*nbc 9:ۚEX"QůY!+lf{}56l_K%rWti)Py[#RpZI>N%5 [Zv^̂=%.-{\_ܚO{ .WV{ g{ܿ9ʢyl76}$-j` vPM9rm' Y`=8#OhS9&79:;"@#X1-Ƶ&Nf+`S Ɵ;"X #Q|c&JՆw2xr*5)YE#[yU@pvqhK;U2jܳW_ #thM6p kާU{V!,kc$Ǭ2$׀OA[t13wowdxT_yg(TqP((7'b@+{/>ۄ8|/ohTZӇ&fXY IqȻHqNҢ0Kc{ZbnbDB@5i =q_*' 3>r22rT~}US6)_́=tIx u?>hH"a7PT[F#D3Aß`QQ<`k$"9I`eR sPќS*{iM)xMDXU.d6wCl;:0'GI"9 򏢗& 9 ]b@_~F\:~" .?f0M/d>"֣@׉AU C.gb{zV;;(F.QrukBg~64 F PTE b@N.2}#Rf}j]059['ɍЏDžl%EνbM`؇eA@#\YA¦g/+GY4GRpn-k/St#\] r( *ԛ;r2T˹=hr9c=zES AON,)Ae3ID=GD.hû[q@!{v0ĨN Uar@p BEK(,a@f\%|YٯM_I9 el7Xo<(_B$@P,$t_RqbUR=q{(*T_~USÖewF9r XT_mQX1UX@ߣW~&v=mg2sύaĽW SD~OPY$It}C 8:ŋmDŻE!3%[:rQN>f.MGy冲'>ИP',0ҡ{#VO_sWݷMƨuQvYEQT*{|qjʪ:tY+,R(OMn&SV JSF^>so穲W?g2  k@0W2 ZN"qxerl9::~-PM,nʕ+pJ\yר|̮:% Œ]>Z3D ߚkܛ2ލxIGh 4^9' 6Jj_|°UH^ma3)4$,ꂐA-U3(aҊ)}~&M*o{0dF\Np=֟ң H&|D*3g8g[FXV>YXb!,gD&1>ƚ ]R"H=SjO Y>w MfN}} ԠKڞFHNJe h6ŮPR)uȺȡ+y*2]}3F{zt*YT'k-7 !w/@B & K$LOф:`U+4 ?v@ghS: mjzÏHFmFj 1;hIO+xw pxRmU] Z4{ ,^KDAQ rbq;rrɅAh9^X}O#OnkMmYe@$€L3)C+obG7V̬$d{V$C;je t7d@?C?\\ƾ)p06ˬ{k9`w$&/~&y i_9E .LP&J,Kz+ɧ~'<}Vk=O6c<\Շg`MgD/ip7gi9 6+'o-gRKل5=mZ fe]BBr|\mFmFmFmFmFlFlFmFlFmFmFmFmFlFlFmFlFlFlFmFmFmFmFfO?3!/T&1{ϋ/L_i0>YƠDʔ YZ