samba-client-libs-4.17.12+git.462.df636292e62-150500.3.23.7<>, mԉf p9|s"Pĸ[hW%,a 奈; K֭ }69T'bܴ^Lh`w/@J]NJǩ.]a#A;TbYd,k)_RL(LNDp%0oBG$s%uclְNivRabYw%l&(azxQr@o_Ysn„d 8P-BaJ-XWT]5KnG5/#e '< jjz~>CT?Dd0 > U 9PV\u0u u u u u !u#|u%u((Hu*_(cx(89H:>\@kBzFGuHuIpuXYZ"["t\$u]&u^0b1c1d27e2<f2?l2Au2Tuv4(cwjuxluynl z@Csamba-client-libs4.17.12+git.462.df636292e62150500.3.23.7Samba client librariesThe samba-libs package contains the libraries needed by samba client programs.f s390zp37H SUSE Linux Enterprise 15SUSE LLC GPL-3.0-or-laterhttps://www.suse.com/Development/Libraries/C and C++https://www.samba.org/linuxs390xH 8X8I( G7'gx0X wW''w7')7HKpx7G'$xhGG0'Wx7H`Y@7(W]`7''g('7HAf f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f f 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-binding.so.0.0.1libdcerpc-server-core.so.0.0.1libdcerpc.so.0.0.1libndr-krb5pac.so.0.0.1libndr-nbt.so.0.0.1libndr-standard.so.0.0.1libndr.so.3.0.0libnetapi.so.1.0.0libsamba-credentials.so.1.0.0libsamba-errors.so.1.0.0libsamba-hostconfig.so.0.0.1libsamba-passdb.so.0.28.0libsamba-util.so.0.0.1libsamdb.so.0.0.1libsmbclient.so.0.7.0libsmbconf.so.0.0.1libsmbldap.so.2.1.0libtevent-util.so.0.0.1libwbclient.so.0.15rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootsamba-4.17.12+git.462.df636292e62-150500.3.23.7.src.rpmlibCHARSET3-samba4.so()(64bit)libCHARSET3-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libMESSAGING-SEND-samba4.so()(64bit)libMESSAGING-SEND-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libMESSAGING-samba4.so()(64bit)libMESSAGING-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libaddns-samba4.so()(64bit)libaddns-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libads-samba4.so()(64bit)libads-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libasn1util-samba4.so()(64bit)libasn1util-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libauth-samba4.so()(64bit)libauth-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libauthkrb5-samba4.so()(64bit)libauthkrb5-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libcli-cldap-samba4.so()(64bit)libcli-cldap-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libcli-ldap-common-samba4.so()(64bit)libcli-ldap-common-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libcli-ldap-samba4.so()(64bit)libcli-ldap-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libcli-nbt-samba4.so()(64bit)libcli-nbt-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libcli-smb-common-samba4.so()(64bit)libcli-smb-common-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libcli-spoolss-samba4.so()(64bit)libcli-spoolss-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libcliauth-samba4.so()(64bit)libcliauth-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libclidns-samba4.so()(64bit)libclidns-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libcluster-samba4.so()(64bit)libcluster-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libcmdline-contexts-samba4.so()(64bit)libcmdline-contexts-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libcmdline-samba4.so()(64bit)libcmdline-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libcommon-auth-samba4.so()(64bit)libcommon-auth-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libdbwrap-samba4.so()(64bit)libdbwrap-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libdcerpc-binding.so.0()(64bit)libdcerpc-binding.so.0(DCERPC_BINDING_0.0.1)(64bit)libdcerpc-binding0libdcerpc-pkt-auth-samba4.so()(64bit)libdcerpc-pkt-auth-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libdcerpc-samba-samba4.so()(64bit)libdcerpc-samba-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libdcerpc-samba4.so()(64bit)libdcerpc-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libdcerpc-server-core.so.0()(64bit)libdcerpc-server-core.so.0(DCERPC_SERVER_CORE_0.0.1)(64bit)libdcerpc.so.0()(64bit)libdcerpc.so.0(DCERPC_0.0.1)(64bit)libdcerpc0libevents-samba4.so()(64bit)libevents-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libflag-mapping-samba4.so()(64bit)libflag-mapping-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libgenrand-samba4.so()(64bit)libgenrand-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libgensec-samba4.so()(64bit)libgensec-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libgpo-samba4.so()(64bit)libgpo-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libgse-samba4.so()(64bit)libgse-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libhttp-samba4.so()(64bit)libhttp-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libinterfaces-samba4.so()(64bit)libinterfaces-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libiov-buf-samba4.so()(64bit)libiov-buf-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libkrb5samba-samba4.so()(64bit)libkrb5samba-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libldbsamba-samba4.so()(64bit)libldbsamba-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)liblibcli-lsa3-samba4.so()(64bit)liblibcli-lsa3-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)liblibcli-netlogon3-samba4.so()(64bit)liblibcli-netlogon3-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)liblibsmb-samba4.so()(64bit)liblibsmb-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libmessages-dgm-samba4.so()(64bit)libmessages-dgm-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libmessages-util-samba4.so()(64bit)libmessages-util-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libmscat-samba4.so()(64bit)libmscat-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libmsghdr-samba4.so()(64bit)libmsghdr-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libmsrpc3-samba4.so()(64bit)libmsrpc3-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libndr-krb5pac.so.0()(64bit)libndr-krb5pac.so.0(NDR_KRB5PAC_0.0.1)(64bit)libndr-krb5pac0libndr-nbt.so.0()(64bit)libndr-nbt.so.0(NDR_NBT_0.0.1)(64bit)libndr-nbt0libndr-samba-samba4.so()(64bit)libndr-samba-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libndr-samba4.so()(64bit)libndr-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libndr-standard.so.0()(64bit)libndr-standard.so.0(NDR_STANDARD_0.0.1)(64bit)libndr-standard0libndr.so.3()(64bit)libndr.so.3(NDR_0.0.1)(64bit)libndr.so.3(NDR_0.0.2)(64bit)libndr.so.3(NDR_0.0.3)(64bit)libndr.so.3(NDR_0.0.4)(64bit)libndr.so.3(NDR_0.0.5)(64bit)libndr.so.3(NDR_0.0.6)(64bit)libndr.so.3(NDR_0.0.7)(64bit)libndr.so.3(NDR_0.0.8)(64bit)libndr.so.3(NDR_0.0.9)(64bit)libndr.so.3(NDR_0.1.0)(64bit)libndr.so.3(NDR_0.1.1)(64bit)libndr.so.3(NDR_0.1.2)(64bit)libndr.so.3(NDR_0.2.0)(64bit)libndr.so.3(NDR_0.2.1)(64bit)libndr.so.3(NDR_1.0.0)(64bit)libndr.so.3(NDR_1.0.1)(64bit)libndr.so.3(NDR_1.0.2)(64bit)libndr.so.3(NDR_2.0.0)(64bit)libndr.so.3(NDR_3.0.0)(64bit)libndr2libnet-keytab-samba4.so()(64bit)libnet-keytab-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libnetapi.so.1()(64bit)libnetapi.so.1(NETAPI_1.0.0)(64bit)libnetapi0libnetif-samba4.so()(64bit)libnetif-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libnpa-tstream-samba4.so()(64bit)libnpa-tstream-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libprinting-migrate-samba4.so()(64bit)libprinting-migrate-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libregistry-samba4.so()(64bit)libregistry-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libreplace-samba4.so()(64bit)libreplace-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libsamba-cluster-support-samba4.so()(64bit)libsamba-cluster-support-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libsamba-credentials.so.1()(64bit)libsamba-credentials.so.1(SAMBA_CREDENTIALS_1.0.0)(64bit)libsamba-credentials1libsamba-debug-samba4.so()(64bit)libsamba-debug-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libsamba-errors.so.1()(64bit)libsamba-errors.so.1(SAMBA_ERRORS_1.0.0)(64bit)libsamba-errors0libsamba-hostconfig.so.0()(64bit)libsamba-hostconfig.so.0(SAMBA_HOSTCONFIG_0.0.1)(64bit)libsamba-hostconfig0libsamba-modules-samba4.so()(64bit)libsamba-modules-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libsamba-passdb.so.0()(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.2.0)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.24.1)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.24.2)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.25.0)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.26.0)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.27.0)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.27.1)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.27.2)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.28.0)(64bit)libsamba-passdb0libsamba-security-samba4.so()(64bit)libsamba-security-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libsamba-sockets-samba4.so()(64bit)libsamba-sockets-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libsamba-util.so.0()(64bit)libsamba-util.so.0(SAMBA_UTIL_0.0.1)(64bit)libsamba-util0libsamba3-util-samba4.so()(64bit)libsamba3-util-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libsamdb-common-samba4.so()(64bit)libsamdb-common-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libsamdb.so.0()(64bit)libsamdb.so.0(SAMDB_0.0.1)(64bit)libsamdb0libsecrets3-samba4.so()(64bit)libsecrets3-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libserver-id-db-samba4.so()(64bit)libserver-id-db-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libserver-role-samba4.so()(64bit)libserver-role-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libsmb-transport-samba4.so()(64bit)libsmb-transport-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libsmbclient-raw-samba4.so()(64bit)libsmbclient-raw-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libsmbclient.so.0()(64bit)libsmbclient.so.0(SMBCLIENT_0.1.0)(64bit)libsmbclient.so.0(SMBCLIENT_0.2.0)(64bit)libsmbclient.so.0(SMBCLIENT_0.2.1)(64bit)libsmbclient.so.0(SMBCLIENT_0.2.2)(64bit)libsmbclient.so.0(SMBCLIENT_0.2.3)(64bit)libsmbclient.so.0(SMBCLIENT_0.3.0)(64bit)libsmbclient.so.0(SMBCLIENT_0.3.1)(64bit)libsmbclient.so.0(SMBCLIENT_0.3.2)(64bit)libsmbclient.so.0(SMBCLIENT_0.3.3)(64bit)libsmbclient.so.0(SMBCLIENT_0.4.0)(64bit)libsmbclient.so.0(SMBCLIENT_0.5.0)(64bit)libsmbclient.so.0(SMBCLIENT_0.6.0)(64bit)libsmbclient.so.0(SMBCLIENT_0.7.0)(64bit)libsmbclient0libsmbconf.so.0()(64bit)libsmbconf.so.0(SMBCONF_0.0.1)(64bit)libsmbconf0libsmbd-base-samba4.so()(64bit)libsmbd-base-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libsmbd-shim-samba4.so()(64bit)libsmbd-shim-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libsmbldap.so.2()(64bit)libsmbldap.so.2(SMBLDAP_0)(64bit)libsmbldap.so.2(SMBLDAP_1)(64bit)libsmbldap.so.2(SMBLDAP_2)(64bit)libsmbldap.so.2(SMBLDAP_2.1.0)(64bit)libsmbldap2libsmbldaphelper-samba4.so()(64bit)libsmbldaphelper-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libsocket-blocking-samba4.so()(64bit)libsocket-blocking-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libsys-rw-samba4.so()(64bit)libsys-rw-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libtalloc-report-printf-samba4.so()(64bit)libtalloc-report-printf-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libtdb-wrap-samba4.so()(64bit)libtdb-wrap-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libtevent-util.so.0()(64bit)libtevent-util.so.0(TEVENT_UTIL_0.0.1)(64bit)libtevent-util0libtime-basic-samba4.so()(64bit)libtime-basic-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libtrusts-util-samba4.so()(64bit)libtrusts-util-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libutil-reg-samba4.so()(64bit)libutil-reg-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libutil-setid-samba4.so()(64bit)libutil-setid-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libutil-tdb-samba4.so()(64bit)libutil-tdb-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libwbclient.so.0()(64bit)libwbclient.so.0(WBCLIENT_0.10)(64bit)libwbclient.so.0(WBCLIENT_0.11)(64bit)libwbclient.so.0(WBCLIENT_0.12)(64bit)libwbclient.so.0(WBCLIENT_0.13)(64bit)libwbclient.so.0(WBCLIENT_0.14)(64bit)libwbclient.so.0(WBCLIENT_0.15)(64bit)libwbclient.so.0(WBCLIENT_0.9)(64bit)libwbclient0samba-client-libssamba-client-libs(s390-64)@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    /sbin/ldconfig/sbin/ldconfigld64.so.1()(64bit)ld64.so.1(GLIBC_2.3)(64bit)libCHARSET3-samba4.so()(64bit)libCHARSET3-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libMESSAGING-SEND-samba4.so()(64bit)libMESSAGING-SEND-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libMESSAGING-samba4.so()(64bit)libMESSAGING-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libacl.so.1()(64bit)libacl.so.1(ACL_1.0)(64bit)libaddns-samba4.so()(64bit)libaddns-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libads-samba4.so()(64bit)libads-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libasn1util-samba4.so()(64bit)libasn1util-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libauth-samba4.so()(64bit)libauth-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libauthkrb5-samba4.so()(64bit)libauthkrb5-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libavahi-client.so.3()(64bit)libavahi-common.so.3()(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.10)(64bit)libc.so.6(GLIBC_2.15)(64bit)libc.so.6(GLIBC_2.17)(64bit)libc.so.6(GLIBC_2.2)(64bit)libc.so.6(GLIBC_2.2.3)(64bit)libc.so.6(GLIBC_2.2.4)(64bit)libc.so.6(GLIBC_2.27)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.2)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libc.so.6(GLIBC_2.5)(64bit)libc.so.6(GLIBC_2.6)(64bit)libc.so.6(GLIBC_2.7)(64bit)libc.so.6(GLIBC_2.8)(64bit)libcli-cldap-samba4.so()(64bit)libcli-cldap-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libcli-ldap-common-samba4.so()(64bit)libcli-ldap-common-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libcli-ldap-samba4.so()(64bit)libcli-ldap-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libcli-nbt-samba4.so()(64bit)libcli-nbt-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libcli-smb-common-samba4.so()(64bit)libcli-smb-common-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libcli-spoolss-samba4.so()(64bit)libcli-spoolss-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libcliauth-samba4.so()(64bit)libcliauth-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libclidns-samba4.so()(64bit)libclidns-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libcluster-samba4.so()(64bit)libcluster-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libcom_err.so.2()(64bit)libcommon-auth-samba4.so()(64bit)libcommon-auth-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libdbwrap-samba4.so()(64bit)libdbwrap-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libdcerpc-binding.so.0()(64bit)libdcerpc-binding.so.0(DCERPC_BINDING_0.0.1)(64bit)libdcerpc-pkt-auth-samba4.so()(64bit)libdcerpc-pkt-auth-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libdcerpc-samba-samba4.so()(64bit)libdcerpc-samba-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libdcerpc.so.0()(64bit)libdcerpc.so.0(DCERPC_0.0.1)(64bit)libdl.so.2()(64bit)libdl.so.2(GLIBC_2.2)(64bit)libflag-mapping-samba4.so()(64bit)libflag-mapping-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libgenrand-samba4.so()(64bit)libgenrand-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libgensec-samba4.so()(64bit)libgensec-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libgnutls.so.30()(64bit)libgnutls.so.30(GNUTLS_3_4)(64bit)libgnutls.so.30(GNUTLS_3_6_10)(64bit)libgnutls.so.30(GNUTLS_3_6_13)(64bit)libgnutls.so.30(GNUTLS_3_6_3)(64bit)libgse-samba4.so()(64bit)libgse-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libgssapi_krb5.so.2()(64bit)libgssapi_krb5.so.2(gssapi_krb5_2_MIT)(64bit)libhttp-samba4.so()(64bit)libhttp-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libinterfaces-samba4.so()(64bit)libinterfaces-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libiov-buf-samba4.so()(64bit)libiov-buf-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libk5crypto.so.3()(64bit)libk5crypto.so.3(k5crypto_3_MIT)(64bit)libkrb5.so.3()(64bit)libkrb5.so.3(krb5_3_MIT)(64bit)libkrb5samba-samba4.so()(64bit)libkrb5samba-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)liblber-2.4.so.2()(64bit)libldap_r-2.4.so.2()(64bit)libldb.so.2()(64bit)libldb.so.2(LDB_0.9.10)(64bit)libldb.so.2(LDB_0.9.15)(64bit)libldb.so.2(LDB_0.9.16)(64bit)libldb.so.2(LDB_0.9.23)(64bit)libldb.so.2(LDB_1.1.1)(64bit)libldb.so.2(LDB_1.1.19)(64bit)libldb.so.2(LDB_1.1.30)(64bit)libldb.so.2(LDB_1.3.0)(64bit)libldb.so.2(LDB_2.6.1)(64bit)libldb.so.2(LDB_2.6.2)(64bit)libldbsamba-samba4.so()(64bit)libldbsamba-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)liblibcli-lsa3-samba4.so()(64bit)liblibcli-lsa3-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)liblibcli-netlogon3-samba4.so()(64bit)liblibcli-netlogon3-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)liblibsmb-samba4.so()(64bit)liblibsmb-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libmessages-dgm-samba4.so()(64bit)libmessages-dgm-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libmessages-util-samba4.so()(64bit)libmessages-util-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libmsghdr-samba4.so()(64bit)libmsghdr-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libmsrpc3-samba4.so()(64bit)libmsrpc3-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libndr-krb5pac.so.0()(64bit)libndr-krb5pac.so.0(NDR_KRB5PAC_0.0.1)(64bit)libndr-nbt.so.0()(64bit)libndr-nbt.so.0(NDR_NBT_0.0.1)(64bit)libndr-samba-samba4.so()(64bit)libndr-samba-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libndr-samba4.so()(64bit)libndr-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libndr-standard.so.0()(64bit)libndr-standard.so.0(NDR_STANDARD_0.0.1)(64bit)libndr.so.3()(64bit)libndr.so.3(NDR_0.0.1)(64bit)libndr.so.3(NDR_0.0.3)(64bit)libndr.so.3(NDR_0.0.4)(64bit)libndr.so.3(NDR_0.0.5)(64bit)libndr.so.3(NDR_0.0.6)(64bit)libndr.so.3(NDR_0.0.7)(64bit)libndr.so.3(NDR_0.0.8)(64bit)libndr.so.3(NDR_0.0.9)(64bit)libndr.so.3(NDR_0.1.1)(64bit)libndr.so.3(NDR_0.1.2)(64bit)libndr.so.3(NDR_0.2.0)(64bit)libndr.so.3(NDR_0.2.1)(64bit)libndr.so.3(NDR_1.0.0)(64bit)libndr.so.3(NDR_1.0.1)(64bit)libndr.so.3(NDR_1.0.2)(64bit)libndr.so.3(NDR_2.0.0)(64bit)libnetif-samba4.so()(64bit)libnetif-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libnpa-tstream-samba4.so()(64bit)libnpa-tstream-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libnscd.so.1()(64bit)libnscd.so.1(LIBNSCD_1.0)(64bit)libpam.so.0()(64bit)libpam.so.0(LIBPAM_1.0)(64bit)libpopt.so.0()(64bit)libpopt.so.0(LIBPOPT_0)(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.12)(64bit)libpthread.so.0(GLIBC_2.2)(64bit)libpthread.so.0(GLIBC_2.3.2)(64bit)libreplace-samba4.so()(64bit)libreplace-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libresolv.so.2()(64bit)libresolv.so.2(GLIBC_2.2)(64bit)libsamba-cluster-support-samba4.so()(64bit)libsamba-cluster-support-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libsamba-credentials.so.1()(64bit)libsamba-credentials.so.1(SAMBA_CREDENTIALS_1.0.0)(64bit)libsamba-debug-samba4.so()(64bit)libsamba-debug-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libsamba-errors.so.1()(64bit)libsamba-errors.so.1(SAMBA_ERRORS_1.0.0)(64bit)libsamba-hostconfig.so.0()(64bit)libsamba-hostconfig.so.0(SAMBA_HOSTCONFIG_0.0.1)(64bit)libsamba-modules-samba4.so()(64bit)libsamba-modules-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libsamba-passdb.so.0()(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.2.0)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.27.1)(64bit)libsamba-security-samba4.so()(64bit)libsamba-security-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libsamba-sockets-samba4.so()(64bit)libsamba-sockets-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libsamba-util.so.0()(64bit)libsamba-util.so.0(SAMBA_UTIL_0.0.1)(64bit)libsamba3-util-samba4.so()(64bit)libsamba3-util-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libsamdb-common-samba4.so()(64bit)libsamdb-common-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libsamdb.so.0()(64bit)libsamdb.so.0(SAMDB_0.0.1)(64bit)libsecrets3-samba4.so()(64bit)libsecrets3-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libserver-id-db-samba4.so()(64bit)libserver-id-db-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libserver-role-samba4.so()(64bit)libserver-role-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libsmb-transport-samba4.so()(64bit)libsmb-transport-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libsmbclient-raw-samba4.so()(64bit)libsmbclient-raw-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libsmbconf.so.0()(64bit)libsmbconf.so.0(SMBCONF_0.0.1)(64bit)libsmbd-shim-samba4.so()(64bit)libsmbd-shim-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libsmbldap.so.2()(64bit)libsmbldap.so.2(SMBLDAP_0)(64bit)libsmbldap.so.2(SMBLDAP_1)(64bit)libsmbldaphelper-samba4.so()(64bit)libsmbldaphelper-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libsocket-blocking-samba4.so()(64bit)libsocket-blocking-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libsys-rw-samba4.so()(64bit)libsys-rw-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libsystemd.so.0()(64bit)libsystemd.so.0(LIBSYSTEMD_209)(64bit)libtalloc-report-printf-samba4.so()(64bit)libtalloc-report-printf-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libtalloc.so.2()(64bit)libtalloc.so.2(TALLOC_2.0.2)(64bit)libtalloc.so.2(TALLOC_2.1.0)(64bit)libtasn1.so.6()(64bit)libtasn1.so.6(LIBTASN1_0_3)(64bit)libtdb-wrap-samba4.so()(64bit)libtdb-wrap-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libtdb.so.1()(64bit)libtdb.so.1(TDB_1.2.1)(64bit)libtdb.so.1(TDB_1.2.2)(64bit)libtdb.so.1(TDB_1.2.5)(64bit)libtdb.so.1(TDB_1.3.0)(64bit)libtdb.so.1(TDB_1.3.11)(64bit)libtdb.so.1(TDB_1.3.17)(64bit)libtevent-util.so.0()(64bit)libtevent-util.so.0(TEVENT_UTIL_0.0.1)(64bit)libtevent.so.0()(64bit)libtevent.so.0(TEVENT_0.11.0)(64bit)libtevent.so.0(TEVENT_0.12.0)(64bit)libtevent.so.0(TEVENT_0.13.0)(64bit)libtevent.so.0(TEVENT_0.9.12)(64bit)libtevent.so.0(TEVENT_0.9.13)(64bit)libtevent.so.0(TEVENT_0.9.14)(64bit)libtevent.so.0(TEVENT_0.9.16)(64bit)libtevent.so.0(TEVENT_0.9.20)(64bit)libtevent.so.0(TEVENT_0.9.21)(64bit)libtevent.so.0(TEVENT_0.9.30)(64bit)libtevent.so.0(TEVENT_0.9.31)(64bit)libtevent.so.0(TEVENT_0.9.37)(64bit)libtevent.so.0(TEVENT_0.9.9)(64bit)libtime-basic-samba4.so()(64bit)libtime-basic-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libtrusts-util-samba4.so()(64bit)libtrusts-util-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libutil-reg-samba4.so()(64bit)libutil-reg-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libutil-setid-samba4.so()(64bit)libutil-setid-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libutil-tdb-samba4.so()(64bit)libutil-tdb-samba4.so(SAMBA_4.17.12_GIT.462.DF636292E62150500.3.23.7SUSE_OS15.0_S390X_SAMBA4)(64bit)libwbclient.so.0()(64bit)libwbclient.so.0(WBCLIENT_0.13)(64bit)libwbclient.so.0(WBCLIENT_0.9)(64bit)libz.so.1()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.3ee@ez@e[J@e6`@eSd@d.@dd-@d@dd@d6@d@d @cvcvc@c@c @c@cctc5cM@b@b@b@ba@banopower@suse.comnopower@suse.comscabrero@suse.descabrero@suse.descabrero@suse.denopower@suse.comscabrero@suse.descabrero@suse.descabrero@suse.denopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comscabrero@suse.dedmulder@suse.comscabrero@suse.denopower@suse.comnopower@suse.comscabrero@suse.denopower@suse.comnopower@suse.comscabrero@suse.denopower@suse.comscabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comddiss@suse.comnopower@suse.comdmulder@suse.comdmulder@suse.comnopower@suse.comscabrero@suse.descabrero@suse.dedimstar@opensuse.orgscabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comnopower@suse.comnopower@suse.comscabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comnopower@suse.comscabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.denopower@suse.comscabrero@suse.deddiss@suse.comddiss@suse.comddiss@suse.comscabrero@suse.descabrero@suse.dedmulder@suse.comnopower@suse.comscabrero@suse.descabrero@suse.dedmulder@suse.comscabrero@suse.descabrero@suse.denopower@suse.comnopower@suse.comnopower@suse.comdmulder@suse.comscabrero@suse.denopower@suse.comddiss@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comscabrero@suse.denopower@suse.comnopower@suse.comjmcdonough@suse.comnopower@suse.comscabrero@suse.denopower@suse.comnopower@suse.comddiss@suse.comddiss@suse.comnopower@suse.comnopower@suse.comddiss@suse.comnopower@suse.comdmulder@suse.comdmulder@suse.comddiss@suse.comscabrero@suse.dedmulder@suse.comddiss@suse.comnopower@suse.comjengelh@inai.dedmulder@suse.comscabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comdmulder@suse.comdmulder@suse.comjmcdonough@suse.comdmulder@suse.comscabrero@suse.dedmulder@suse.comscabrero@suse.dedmulder@suse.comdmulder@suse.comvcizek@suse.comdmulder@suse.comdmulder@suse.comnopower@suse.comscabrero@suse.dejmcdonough@suse.comscabrero@suse.deaaptel@suse.comjengelh@inai.dedimstar@opensuse.orgdmulder@suse.comjmcdonough@suse.comdavid.mulder@suse.comjmcdonough@suse.comaaptel@suse.comdmulder@suse.comscabrero@suse.comscabrero@suse.comkukuk@suse.dedavid.mulder@suse.comscabrero@suse.comrbrown@suse.comdmulder@suse.comscabrero@suse.comdimstar@opensuse.orgscabrero@suse.comaaptel@suse.comnopower@suse.comnopower@suse.comaaptel@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comddiss@suse.comnopower@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comdmulder@suse.comnopower@suse.comjmcdonough@suse.comaaptel@suse.comkukuk@suse.comkukuk@suse.denopower@suse.comaaptel@suse.comdmulder@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comddiss@suse.comjmcdonough@suse.comddiss@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comjmcdonough@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comtchvatal@suse.comlmuelle@suse.comnopower@suse.comcrrodriguez@opensuse.orglmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comnoel.power@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comnopower@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.commpluskal@suse.comlmuelle@suse.comnopower@suse.deddiss@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.denopower@suse.delmuelle@suse.comnopower@suse.deddiss@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.com- fd_handle_destructor() panics within an smbd_smb2_close() if vfs_stat_fsp() fails in fd_close(); (bso#15527); (bsc#1219937).- Remove -x from bash shebang update-apparmor-samba-profile; (bsc#1218431).- Add new idmap_nss option 'use_upn' for those NSS modules able to handle UPNs or DOMAIN/user name format; (bsc#1215369); - Avoid unnecessary locking in idmap parent setup; (bsc#1215369);- Add "net offlinejoin composeodj" command; (bsc#1214076);- Update to samba 4.17.12 * Weird filename can cause assert to fail in openat_pathref_fsp_nosymlink(); (bso#15419); * reply_sesssetup_and_X() can dereference uninitialized tmp pointer; (bso#15420); * Missing return in reply_exit_done(); (bso#15430); * TREE_CONNECT without SETUP causes smbd to use uninitialized pointer; (bso#15432); * Improve GetNChanges to address some (but not all "Azure AD Connect") syncronisation tool looping during the initial user sync phase; (bso#15401); * Samba replication logs show (null) DN; (bso#15407); * Spotlight sometimes returns no results on latest macOS; (bso#15342); * Renaming results in NT_STATUS_SHARING_VIOLATION if previously attempted to remove the destination; (bso#15417); * Spotlight results return wrong date in result list; (bso#15427); * macOS mdfind returns only 50 results; (bso#15463); * 2-3min delays at reconnect with smb2_validate_sequence_number: bad message_id 2; (bso#15346); * samba-tool ntacl get segfault if aio_pthread appended; (bso#15441); * DCERPC_PKT_CO_CANCEL and DCERPC_PKT_ORPHANED can't be parsed; (bso#15446); * File doesn't show when user doesn't have permission if aio_pthread is loaded; (bso#15453); * net ads lookup (with unspecified realm) fails; (bso#15384); (bsc#1213826); * Regression DFS not working with widelinks = true; (bso#15435); (bsc#1213607); * ctdb_killtcp fails to work with --enable-pcap and libpcap 1.9.1; (bso#15451); * mdssvc: Do an early talloc_free() in _mdssvc_open(); (bso#15449); * Windows client join fails if a second container CN=System exists somewhere; (bso#9959); - Fix crossing automounter mount points; (bsc#1215212);- CVE-2023-4091: samba: Client can truncate file with read-only permissions; (bsc#1215904); (bso#15439). - CVE-2023-42669: samba: rpcecho, enabled and running in AD DC, allows blocking sleep on request; (bso#1215905); (bso#15474). - CVE-2023-42670: samba: The procedure number is out of range when starting Active Directory Users and Computers; (bsc#1215906); (bso#15473). - CVE-2023-3961: samba: Unsanitized client pipe name passed to local_np_connect(); (bsc#1215907); (bso#15422). - CVE-2023-4154: samba: dirsync allows SYSTEM access with only "GUID_DRS_GET_CHANGES" right, not "GUID_DRS_GET_ALL_CHANGES; (bsc#1215908); (bso#15424).- Fix DFS not working with widelinks enabled; (bsc#1213607); (bso#15435);- Move libcluster-samba4.so from samba-libs to samba-client-libs; (bsc#1213940);- net ads lookup with unspecified realm fails; (bso#15384); (bsc#1213826);- secure channel faulty since Windows 10/11 update 07/2023; (bso#15418); (bsc#1213384).- CVE-2022-2127: lm_resp_len not checked properly in winbindd_pam_auth_crap_send; (bso#15072); (bsc#1213174). - CVE-2023-34966: Samba Spotlight mdssvc RPC Request Infinite Loop Denial-of-Service Vulnerability; (bso#15340); (bsc#1213173). - CVE-2023-34967: Samba Spotlight mdssvc RPC Request Type Confusion Denial-of-Service Vulnerability; (bso#15341); (bsc#1213172). - CVE-2023-34968: Spotlight server-side Share Path Disclosure; (bso#15388); (bsc#1213171). - CVE-2023-3347: Samba doesn't require SMB2+ signing if `server signing = mandatory` is set; (bso#15397); (bsc#1213170).- Update to 4.17.9 * Backport --pidl-developer fixes; (bso#15404). * smbd_scavenger crashes when service smbd is stopped; (bso#15275). * vfs_fruit might cause a failing open for delete; (bso#15378). * named crashes on DLZ zone update; (bso#14030). * winbind recurses into itself via rpcd_lsad; (bso#15361). * cli_list loops 100% CPU against pre-lanman2 servers; (bso#15382). * smbclient leaks fds with showacls; (bso#15391). * aes256 smb3 encryption algorithms are not allowed in smb3_sid_parse(); (bso#15374). * winbindd gets stuck on NT_STATUS_RPC_SEC_PKG_ERROR; (bso#15413). * smbget memory leak if failed to download files recursively; (bso#15403).- Update to 4.17.8 * log flood: smbd_calculate_access_mask_fsp: Access denied: message level should be lower; (bso#15302). * Floating point exception (FPE) via cli_pull_send at source3/libsmb/clireadwrite.c; (bso#15306). * test_tstream_more_tcp_user_timeout_spin fails intermittently on Rackspace GitLab runners; (bso#15328). * Reduce flapping of ridalloc test; (bso#15329). * large_ldap test is unreliable; (bso#15351). * New filename parser doesn't check veto files smb.conf parameter; (bso#15143). * mdssvc may crash when initializing; (bso#15354). * Large directory optimization broken for non-lcomp path elements; (bso#15313). * streams_depot fails to create streams; (bso#15357). * shadow_copy2 and streams_depot don't play well together; (bso#15358). * wbinfo -u fails on ad dc with >1000 users; (bso#15366). * winbindd idmap child contacts the domain controller without a need; (bso#15317). * idmap_autorid may fail to map sids of trusted domains for the first time; (bso#15318). * idmap_hash doesn't use ID_TYPE_BOTH for reverse mappings; (bso#15319). * net ads search -P doesn't work against servers in other domains; (bso#15323). * DS ACEs might be inherited to unrelated object classes; (bso#15338). * Temporary smbXsrv_tcon_global.tdb can't be parsed; (bso#15353). * Setting veto files = /.*/ break listing directories; (bso#15360); (bsc#1212375). * CVE-2020-25720 [SECURITY] Create Child permission should not allow full write to all attributes (additional changes); (bso#14810). * dsgetdcname: assumes local system uses IPv4; (bso#15325).- Update to 4.17.7 * CVE-2023-0922: Samba AD DC admin tool samba-tool sends passwords in cleartext; (bso#15315); (bsc#1209481). * CVE-2023-0225: Samba AD DC "dnsHostname" attribute can be deleted by unprivileged authenticated users; (bso#15276); (bsc#1209483). * CVE-2023-0614: samba: Access controlled AD LDAP attributes can be discovered; (bso#15270); (bsc#1209485). * large_ldap test is inefficient; (bso#15332). * CVE-2020-25720 [SECURITY] Create Child permission should not allow full write to all attributes (additional changes); (bso#14810). - Update to 4.17.6 * streams_xattr is creating unexpected locks on folders; (bso#15314). * Use of the Azure AD Connect cloud sync tool is now supported for password hash synchronisation, allowing Samba AD Domains to synchronise passwords with this popular cloud environment; (bso#10635). * Spotlight doesn't work with latest macOS Ventura; (bso#15299). * New samba-dcerpc architecture does not scale gracefully; (bso#15310). * vfs_ceph incorrectly uses fsp_get_io_fd() instead of fsp_get_pathref_fd() in close and fstat; (bso#15307). * With clustering enabled samba-bgqd can core dump due to use after free; (bso#15293). * fd_load() function implicitly closes the fd where it should not; (bso#15311). - Update to 4.17.5 * smbc_getxattr() return value is incorrect; (bso#14808). * Compound SMB2 FLUSH+CLOSE requests from MacOSX are not handled correctly; (bso#15172). * synthetic_pathref AFP_AfpInfo failed errors; (bso#15210). * samba-tool gpo listall fails IPv6 only - finddcs() fails to find DC when there is only an AAAA record for the DC in DNS; (bso#15226). * smbd crashes if an FSCTL request is done on a stream handle; (bso#15236). * DFS links don't work anymore on Mac clients since 4.17; (bso#15277). * vfs_virusfilter segfault on access, directory edgecase (accessing NULL value); (bso#15283). * CVE-2022-38023 [SECURITY] Samba should refuse RC4 (aka md5) based SChannel on NETLOGON (additional changes); (bso#15240). * %U for include directive doesn't work for share listing (netshareenum); (bso#15243). * Shares missing from netshareenum response in samba 4.17.4; (bso#15266). * ctdb: use-after-free in run_proc; (bso#15269). * irpc_destructor may crash during shutdown; (bso#15280). * auth3_generate_session_info_pac leaks wbcAuthUserInfo; (bso#15286). * smbclient segfaults with use after free on an optimized build; (bso#15268). * smbstatus leaking files in msg.sock and msg.lock; (bso#15282). * Leak in wbcCtxPingDc2; (bso#15164). * Access based share enum does not work in Samba 4.16+; (bso#15265). * Crash during share enumeration; (bso#15267). * rep_listxattr on FreeBSD does not properly check for reads off end of returned buffer; (bso#15271). * Avoid relying on C89 features in a few places; (bso#15281).- Make (32bit) samba-libs conflict with old samba-ad-dc-libs package to satisfy installcheck.- Make samba-libs conflict with old samba-ad-dc-libs package to satisfy installcheck.- Remove non functioning ifup/ifdown samba-winbindd scripts; (bsc#1207414).- libdsdb-module-samba4 should be packaged as part of samba-libs and not samba-ad-dc-libs. Additionally no need for it to be removed conditionally.- Clean up logic for PAM migration settings in spec file.- Change with_dc default to 0 (for non TW builds), ADDC feature is deprecated and will no longer be included in >= SLE15-SP5; (jsc#PED-1122).- Update to 4.17.4 * CVE-2022-44640 Upstream Heimdal free of user-controlled pointer in FAST; (bsc#14929); * CVE-2021-20251 Bad password count not incremented atomically; (bsc#14611); * CVE-2022-42898 krb5_pac_parse() buffer parsing vulnerability; (bsc#15203); * CVE-2022-37966 rc4-hmac Kerberos session keys issued to modern servers; (bso#15237); * CVE-2022-37967 Kerberos constrained delegation ticket forgery possible against Samba AD DC; (bso#15231); * CVE-2022-38023 RC4/HMAC-MD5 NetLogon Secure Channel is weak and should be avoided; (bso#15240); * pam_winbind uses time_t and pointers assuming they are of the same size; (bso#15224); * Heimdal session key selection in AS-REQ examines wrong entry; (bso#15219); * filter-subunit is inefficient with large numbers of knownfails; (bso#15258); * smbd allows setting FILE_ATTRIBUTE_TEMPORARY on directories; (bso#15252); * The KDC logic arround msDs-supportedEncryptionTypes differs from Windows; (bso#13135); * libnet: change_password() doesn't work with dcerpc_samr_ChangePasswordUser4(); (bso#15206); * Heimdal session key selection in AS-REQ examines wrong entry; (bso#15219); * Memory leak in snprintf replacement functions; (bso#15230); * RODC doesn't reset badPwdCount reliable via an RWDC (CVE-2021-20251 regression); (bso#15253); * Prevent EBADF errors with vfs_glusterfs; (bso#15198); * %U for include directive doesn't work for share listing (netshareenum); (bso#15243); * Stack smashing in net offlinejoin requestodj; (bso#15257); * Windows 11 22H2 and Samba-AD 4.15 Kerberos login issue; (bso#15197); * Heimdal session key selection in AS-REQ examines wrong entry; (bso#15219); - Remove deprecated if-{down,up} scripts; (bsc#1206444); - Adjust the systemd drop-in file for named service; (bsc#1201689); * Paths are additive so do not repeat paths from named.service * Prefix the samba DLZ directory with "-" to ignore this path if it does not exists- Introduce without-smb1-server spec flag; (bsc#1205104); - Update to 4.17.3 * CVE-2022-42898: Samba buffer overflow vulnerabilities on 32-bit systems; (bsc#1205126); (bso#15203); - Replace obsolete python-gpgme with python-gpg * Upstream replaced it in v4.9.5 -- bso#13728 - Update to 4.17.2 * CVE-2022-3592 [SECURITY] samba: Wide links protection broken; (bso#15207); (bsc#1204499). * CVE-2022-3437 [SECURITY] samba: Buffer overflow in Heimdal unwrap_des3();(bso#15134); (bsc#1204254). - Update to 4.17.1 * CVE-2021-20251 [SECURITY] Bad password count not incremented atomically; (bso#14611). * smbXsrv_connection_shutdown_send result leaked; (bso#15174). * Flush on a named stream never completes; (bso#15182). * Permission denied calling SMBC_getatr when file not exists; (bso#15195). * Samba 4.5 sometimes cannot be upgraded to Samba 4.6 or later over DRS: WERROR_DS_DRA_MISSING_PARENT due to faulty GET_ANC; (bso#15189). * pytest: add file removal helpers for TestCaseInTempDir; (bso#15191). * CVE-2021-20251 [SECURITY] Bad password count not incremented atomically; (bso#14611). * Samba 4.5 sometimes cannot be upgraded to Samba 4.6 or later over DRS: WERROR_DS_DRA_MISSING_PARENT due to faulty GET_ANC; (bso#15189). * Flush on a named stream never completes; (bso#15182). * vfs_gpfs silently garbles timestamps > year 2106; (bso#15151). * CVE-2021-20251 [SECURITY] Bad password count not incremented atomically; (bso#14611). * multi-channel socket passing may hit a race if one of the involved processes already existed; (bso#15200). * memory leak on temporary of struct imessaging_post_state and struct tevent_immediate on struct imessaging_context (in rpcd_spoolss and maybe others); (bso#15201). * Since popt1.19 various use after free errors using result of poptGetArg are now exposed; (bso#15205); (boo#1204279). * Remove special case for O_CREAT in SMB_VFS_OPENAT from vfs_glusterfs; (bso#15192). * GETPWSID in memory cache grows indefinetly with each NTLM auth; (bso#15169). * CVE-2021-20251 [SECURITY] Bad password count not incremented atomically; (bso#14611). - Install a systemd drop-in file for named service to allow read/write access to the DLZ directory; (bsc#1201689); - Fix use after free errors resulting from using return of poptGetArg exposed since popt-1.19; (boo#1204279); (bso#15205). - s3: smbd: Fix memory leak in smbd_server_connection_terminate_done(); (bso#15174). - Disable SMB1 for tumbleweed builds. - Update to 4.17.0 * acl_xattr VFS module may unintentionally use filesystem permissions instead of ACL from xattr; (bso#15126). * Missing SMB2-GETINFO access checks from MS-SMB2 3.3.5.20.1; (bso#15153). * assert failed: !is_named_stream(smb_fname)") at ../../lib/util/fault.c:197; (bso#15161). * acl_xattr VFS module may unintentionally use filesystem permissions instead of ACL from xattr; (bso#15126). * assert failed: !is_named_stream(smb_fname)") at ../../lib/util/fault.c:197; (bso#15161). * Cross-node multi-channel reconnects result in SMB2 Negotiate returning NT_STATUS_NOT_SUPPORTED; (bso#15159). * winbind at info level debug can coredump when processing wb_lookupusergroups; (bso#15160). * Make use of glfs_*at() API calls in vfs_glusterfs; (bso#15157). * Possible use after free of connection_struct when iterating smbd_server_connection->connections; (bso#15128). * `net usershare add` fails with flag works with --long but fails with -l; (bso#15145). * acl_xattr VFS module may unintentionally use filesystem permissions instead of ACL from xattr; (bso#15126). * Performance regression on contended path based operations; (bso#15125). * Missing READ_LEASE break could cause data corruption; (bso#15148). * libsamba-errors uses a wrong version number; (bso#15141). * SMB1 negotiation can fail to handle connection errors; (bso#15152). * New filename parser doesn't check veto files smb.conf parameter; (bso#15143). * 4.17.rc1 still uses symlink-race prone unix_convert(); (bso#15144). * Backport fileserver related changed to 4.17.0rc2; (bso#15146). * Manpage for smbstatus json is missing; (bso#15147). * Backport fileserver related changed to 4.17.0rc2; (bso#15146). * Performance regression on contended path based operations; (bso#15125). * Backport fileserver related changed to 4.17.0rc2; (bso#15146). * Fix issues found by coverity in smbstatus json code; (bso#15140). * Backport fileserver related changed to 4.17.0rc2; (bso#15146). - Migration to /usr/etc: Saving user changed configuration files in /etc and restoring them while an RPM update. - Update to 4.16.4 * CVE-2022-2031: Samba AD users can bypass certain restrictions associated with changing passwords; (bsc#1201495); (bso#15047); * CVE-2022-32744: Samba AD users can forge password change requests for any user; (bsc#1201493); (bso#15074); * CVE-2022-32745: Samba AD users can crash the server process with an LDAP add or modify request; (bsc#1201492); (bso#15008); * CVE-2022-32746: Samba AD users can induce a use-after-free in the server process with an LDAP add or modify request; (bsc#1201490); (bso#15009); * CVE-2022-32742: Server memory information leak via SMB1; (bsc#1201496); (bso#15085); - Update to 4.16.3 * Using vfs_streams_xattr and deleting a file causes a panic; (bso#15099); * Add support for bind 9.18; (bso#14986); * logging dsdb audit to specific files does not work; (bso#15076); * Problem when winbind renews Kerberos; (bso#14979); (bsc#1196224); * Samba with new lorikeet-heimdal fails to build on gcc 12.1 in developer mode; (bso#15095); * Crash in streams_xattr because fsp->base_fsp->fsp_name is NULL; (bso#15105); * Crash in rpcd_classic - NULL pointer deference in mangle_is_mangled(); (bso#15118); * smbclient commands del & deltree fail with NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100); (bsc#1200556); * Fix check for chown when processing NFSv4 ACL; (bso#15120); * The pcap background queue process should not be stopped; (bso#15082); * testparm: Fix typo in idmap rangesize check; (bso#15097); * net ads info returns LDAP server and LDAP server name as null; (bso#15106); * ldconfig: /lib64/libsmbconf.so.0 is not a symbolic link; (bso#15108); * CTDB child process logging does not work as expected; (bso#15090); - Update spec file to fix the optional Heimdal DC build - Fix external trusts with MIT Kerberos 1.20 - Add missing samba-client requirement to samba-winbind package; (bsc#1198255); - Move pdb backends from package samba-libs to package samba-client-libs and remove samba-libs requirement from samba-winbind; (bsc#1200964); (bsc#1198255); - Add sysuser-shadow requirement for packages using systemd-sysusers - Use the canonical realm name to refresh the Kerberos tickets; (bsc#1196224); (bso#14979); - Moved logrotate files from user specific directory /etc/logrotate.d to vendor specific directory /usr/etc/logrotate.d. - Update to 4.16.2 * Use pathref fd instead of io fd in vfs_default_durable_cookie; (bso#15042); * vfs_gpfs with vfs_shadowcopy2 fail to restore file if original file had been deleted; (bso#15069); * Reintroduce netgroups support; (bso#15087); * net ads info shows LDAP Server: 0.0.0.0 depending on contacted server; (bso#14674); * Update from 4.15 to 4.16 breaks discovery of [homes] on standalone server from Win and IOS; (bso#15062); * waf produces incorrect names for python extensions with Python 3.11; (bso#15071); * smbclient -E doesn't work as advertised; (bso#15075); * The samba background daemon doesn't refresh the printcap cache on startup; (bso#15081); * Out-by-4 error in smbd read reply max_send clamp; (bso#14443); - Fix samba4.blackbox.net_ads_dns_async test with bind9 >= 9.17.7 - Support building with MIT Kerberos 1.20 - Bronze bit and S4U support with MIT Kerberos 1.20 for Samba AD DC; (CVE-2020-17049); - Resource Based Constrained Delegation (RBCD) for Samba AD DC - Support building with gcc 12.1 - Use requires_eq macro to require the libldb2 version available at samba-dsdb-modules build time; (bsc#1199362); - Update to 4.16.1 * Share and server swapped in smbget password prompt; (bso#14831); * Durable handles won't reconnect if the leased file is written to; (bso#15022); * rmdir silently fails if directory contains unreadable files and hide unreadable is yes; (bso#15023); * SMB2_CLOSE_FLAGS_FULL_INFORMATION fails to return information on renamed file handle; (bso#15038); * Need to describe --builtin-libraries= better (compare with - -bundled-libraries); (bso#8731); * vfs_shadow_copy2 breaks "smbd async dosmode" sync fallback; (bso#14957); * shadow_copy2 fails listing snapshotted dirs with shadow:fixinodes; (bso#15035); * PAM Kerberos authentication incorrectly fails with a clock skew error; (bso#15046); * Username map - samba erroneously applies unix group memberships to user account entries; (bso#15041); * KVNO off by 100000; (bso#14951); * Uninitialized litemask in variable in vfs_gpfs module; (bso#15027); * vfs_gpfs recalls=no option prevents listing files; (bso#15055); * smbd doesn't handle UPNs for looking up names; (bso#15054); - Update update-apparmor-samba-profile script, replace non-printable delimiter with more human readable separator as sed can accept separators that can appear in the input data. - Fix update-apparmor-samba-profile script, sed doesn't like multibyte separators; (bsc#1198309). - Update to 4.16.0 * New samba-dcerpcd binary to provide DCERPC in the member server setup * Certificate Auto Enrollment * Ability to add ports to dns forwarder addresses in internal DNS backend * No longer using Linux mandatory locks for sharemodes * SMB1 protocol has been deprecated, particularly older dialects * SMB1 protocol SMBCopy command removed * SMB1 server-side wildcard expansion removed - Add python3-dnspython to samba-ad-dc recommens; (bsc#1187101); - Use systemd-sysusers to create system users; (bsc#1182847);- Install a systemd drop-in file for named service to allow read/write access to the DLZ directory; (bsc#1201689);- Update to 4.15.12 * CVE-2022-42898: samba: heimdal: Samba buffer overflow vulnerabilities on 32-bit systems; (bso#15203); (bsc#1205126). - Update to 4.15.11 * Allow rebuild of Centos 8 images after move to vault for Samba 4.15; (bso#15193). * CVE-2022-3437: samba: Buffer overflow in Heimdal unwrap_des3(); (bso#15134); (bsc#1204254)- Update to 4.15.10 * Possible use after free of connection_struct when iterating smbd_server_connection->connections; (bso#15128); (bsc#1200102). * smbXsrv_connection_shutdown_send result leaked; (bso#15174). * Spotlight RPC service returns wrong response when Spotlight is disabled on a share; (bso#15086). * acl_xattr VFS module may unintentionally use filesystem permissions instead of ACL from xattr; (bso#15126). * Missing SMB2-GETINFO access checks from MS-SMB2 3.3.5.20.1; (bso#15153). * assert failed: !is_named_stream(smb_fname)") at ../../lib/util/fault.c:197; (bso#15161). * Missing READ_LEASE break could cause data corruption; (bso#15148). * rpcclient can crash using setuserinfo(2); (bso#15124). * Samba fails to build with glibc 2.36 caused by including in libreplace; (bso#15132). * SMB1 negotiation can fail to handle connection errors; (bso#15152). * samba-tool domain join segfault when joining a samba ad domain; (bso#15078). - Update to 4.15.9 * CVE-2022-32742:SMB1 code does not correct verify SMB1write, SMB1write_and_close, SMB1write_and_unlock lengths; (bso#15085); (bsc#1201496). * CVE-2022-32746: samba: Use-after-free occurring in database audit logging; (bso#15009); (bso#15096); (bsc#1201490). * CVE-2022-2031: samba, ldb: AD users can bypass certain restrictions associated with changing passwords; (bso#15047); (bsc#1201495); * CVE-2022-32745: samba: ldb: AD users can crash the server process with an LDAP add or modify request; (bso#15008); (bso#15096); (bsc#1201492). * CVE-2022-2031: samba, ldb: AD users can bypass certain restrictions associated with changing passwords; (bso#15047); (bsc#1201495); * CVE-2022-32744: samba, ldb: AD users can forge password change requests for any user; (bso#15074); (bso#15047); (bsc#1201493).- CVE-2022-1615: Do not ignore errors in random number generation; (bso#15103); (bsc#1202976); - CVE-2022-32743: Implement validated dnsHostName write rights; (bso#14833); (bsc#1202803);- Fix Use after free when iterating smbd_server_connection->connections after tree disconnect failure; (bso#15128); (bsc#1200102).- CVE-2022-32746: samba: Use-after-free occurring in database audit logging; (bso#15009); (bso#15096); (bsc#1201490). - CVE-2022-32745: samba: ldb: AD users can crash the server process with an LDAP add or modify request; (bso#15008); (bso#15096); (bsc#1201492). - CVE-2022-2031: samba, ldb: AD users can bypass certain restrictions associated with changing passwords; (bso#15047); (bsc#1201495); - CVE-2022-32742:SMB1 code does not correct verify SMB1write, SMB1write_and_close, SMB1write_and_unlock lengths; (bso#15085); (bsc#1201496). - CVE-2022-32744: samba, ldb: AD users can forge password change requests for any user; (bso#15074); (bso#15047); (bsc#1201493).- Update to 4.15.8 * Use pathref fd instead of io fd in vfs_default_durable_cookie; (bso#15042); * Setting fruit:resource = stream in vfs_fruit causes a panic; (bso#15099); * Add support for bind 9.18; (bso#14986); * logging dsdb audit to specific files does not work; (bso#15076); * vfs_gpfs with vfs_shadowcopy2 fail to restore file if original file had been deleted; (bso#15069); * netgroups support removed; (bso#15087); (bsc#1199247); * net ads info shows LDAP Server: 0.0.0.0 depending on contacted server; (bso#14674); (bsc#1199734); * waf produces incorrect names for python extensions with Python 3.11; (bso#15071); * smbclient commands del & deltree fail with NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100); (bsc#1200556); * vfs_gpfs recalls=no option prevents listing files; (bso#15055); * waf produces incorrect names for python extensions with Python 3.11; (bso#15071); * Compile error in source3/utils/regedit_hexedit.c; (bso#15091); * ldconfig: /lib64/libsmbconf.so.0 is not a symbolic link; (bso#15108); * smbd doesn't handle UPNs for looking up names; (bso#15054); * Out-by-4 error in smbd read reply max_send clamp; (bso#14443); - Move pdb backends from package samba-libs to package samba-client-libs and remove samba-libs requirement from samba-winbind; (bsc#1200964); (bsc#1198255); - Use the canonical realm name to refresh the Kerberos tickets; (bsc#1196224); (bso#14979);- Fix smbclient commands del & deltree failing with NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100); (bsc#1200556).- Revert NIS support removal; (bsc#1199247);- Use requires_eq macro to require the libldb2 version available at samba-dsdb-modules build time; (bsc#1199362);- Add missing samba-client requirement to samba-winbind package; (bsc#1198255);- Update to 4.15.7 * Share and server swapped in smbget password prompt; (bso#14831); * Durable handles won't reconnect if the leased file is written to; (bso#15022); * rmdir silently fails if directory contains unreadable files and hide unreadable is yes; (bso#15023); * SMB2_CLOSE_FLAGS_FULL_INFORMATION fails to return information on renamed file handle; (bso#15038); * vfs_shadow_copy2 breaks "smbd async dosmode" sync fallback; (bso#14957); * shadow_copy2 fails listing snapshotted dirs with shadow:fixinodes; (bso#15035); * PAM Kerberos authentication incorrectly fails with a clock skew error; (bso#15046); * username map - samba erroneously applies unix group memberships to user account entries; (bso#15041); * NT_STATUS_ACCESS_DENIED translates into EPERM instead of EACCES in SMBC_server_internal; (bso#14983); * Simple bind doesn't work against an RODC (with non-preloaded users); (bso#13879); * Crash of winbind on RODC; (bso#14641); * uncached logon on RODC always fails once; (bso#14865); * KVNO off by 100000; (bso#14951); * LDAP simple binds should honour "old password allowed period"; (bso#15001); * wbinfo -a doesn't work reliable with upn names; (bso#15003); * Simple bind doesn't work against an RODC (with non-preloaded users); (bso#13879); * Uninitialized litemask in variable in vfs_gpfs module; (bso#15027); * Regression: create krb5 conf = yes doesn't work with a single KDC; (bso#15016);- Add provides to samba-client-libs package to fix upgrades from previous versions; (bsc#1197995);- Add missing samba-libs requirement to samba-winbind package; (bsc#1198255);- Update to 4.15.6 * Renaming file on DFS root fails with NT_STATUS_OBJECT_PATH_NOT_FOUND; (bso#14169); * Samba does not response STATUS_INVALID_PARAMETER when opening 2 objects with same lease key; (bso#14737); * NT error code is not set when overwriting a file during rename in libsmbclient; (bso#14938); * Fix ldap simple bind with TLS auditing; (bso#14996); * net ads info shows LDAP Server: 0.0.0.0 depending on contacted server; (bso#14674); * Problem when winbind renews Kerberos; (bso#14979); (bsc#1196224); * pam_winbind will not allow gdm login if password about to expire; (bso#8691); * virusfilter_vfs_openat: Not scanned: Directory or special file; (bso#14971); * DFS fix for AIX broken; (bso#13631); * Solaris and AIX acl modules: wrong function arguments; (bso#14974); * Function aixacl_sys_acl_get_file not declared / coredump; (bso#7239); * Regression: Samba 4.15.2 on macOS segfaults intermittently during strcpy in tdbsam_getsampwnam; (bso#14900); * Fix a use-after-free in SMB1 server; (bso#14989); * smb2_signing_decrypt_pdu() may not decrypt with gnutls_aead_cipher_decrypt() from gnutls before 3.5.2; (bso#14968); * Changing the machine password against an RODC likely destroys the domain join; (bso#14984); * authsam_make_user_info_dc() steals memory from its struct ldb_message *msg argument; (bso#14993); * Use Heimdal 8.0 (pre) rather than an earlier snapshot; (bso#14995); * Samba autorid fails to map AD users if id rangesize fits in the id range only once; (bso#14967);- Fix mismatched version of libldb2; (bsc#1196788). - Drop obsolete SuSEfirewall2 service files.- Drop obsolete Samba fsrvp v0->v1 state upgrade functionality; (bsc#1080338).- Fix ntlm authentications with "winbind use default domain = yes"; (bso#13126); (bsc#1173429); (bsc#1196308).- Fix samba-ad-dc status warning notification message by disabling systemd notifications in bgqd; (bsc#1195896); (bso#14947).- libldb version mismatch in Samba dsdb component; (bsc#1118508);- Update to 4.15.5 * CVE-2021-44141: UNIX extensions in SMB1 disclose whether the outside target of a symlink exists; (bso#14911); (bsc#1193690). * CVE-2021-44142: Out-of-Bound Read/Write on Samba vfs_fruit module; (bso#14914); (bsc#1194859). * CVE-2022-0336: Re-adding an SPN skips subsequent SPN conflict checks; bso#14950); (bsc#1195048).- CVE-2021-44141: Information leak via symlinks of existance of files or directories outside of the exported share; (bso#14911); (bsc#1193690); - CVE-2021-44142: Out-of-bounds heap read/write vulnerability in VFS module vfs_fruit allows code execution; (bso#14914); (bsc#1194859); - CVE-2022-0336: Samba AD users with permission to write to an account can impersonate arbitrary services; (bso#14950); (bsc#1195048);- Update to 4.15.4 * Duplicate SMB file_ids leading to Windows client cache poisoning; (bso#14928); * Failed to parse NTLMv2_RESPONSE length 95 - Buffer Size Error - NT_STATUS_BUFFER_TOO_SMALL; (bso#14932); * kill_tcp_connections does not work; (bso#14934); * Can't connect to Windows shares not requiring authentication using KDE/Gnome; (bso#14935); * smbclient -L doesn't set "client max protocol" to NT1 before calling the "Reconnecting with SMB1 for workgroup listing" path; (bso#14939); * Cross device copy of the crossrename module always fails; (bso#14940); * symlinkat function from VFS cap module always fails with an error; (bso#14941); * Fix possible fsp pointer deference; (bso#14942); * Missing pop_sec_ctx() in error path inside close_directory(); (bso#14944); * "smbd --build-options" no longer works without an smb.conf file; (bso#14945);- Use pkgconfig(krb5) as dependency for the -devel package: allow OBS to pick the right flavor of krb5-devel (full vs mini). - Do not require the 'krb5' symbol by samba-client-libs: this package has an automatic dependency due to linkage on libgssapi_krb5.so.2. Automatic deps are always better. - Do not require the 'krb5' symbol from samba-libs: samba-libs requires samba-client-libs, which in turn requires krb5 libraries. Samba-libs itself has no need for krb5 (but get it indirectly anyway).- Reorganize libs packages. Split samba-libs into samba-client-libs, samba-libs, samba-winbind-libs and samba-ad-dc-libs, merging samba public libraries depending on internal samba libraries into these packages as there were dependency problems everytime one of these public libraries changed its version (bsc#1192684). The devel packages are merged into samba-devel. - Rename package samba-core-devel to samba-devel - Add python-rpm-macros to build requirements - Update the symlink create by samba-dsdb-modules to private samba ldb modules following libldb2 changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba- Update to 4.15.3 * Recursive directory delete with veto files is broken in 4.15.0; (bso#14878); * A directory containing dangling symlinks cannot be deleted by SMB2 alone when they are the only entry in the directory; (bso#14879); * SIGSEGV in rmdir_internals/synthetic_pathref - dirfsp is used uninitialized in rmdir_internals(); (bso#14892); * MaxQueryDuration not honoured in Samba AD DC LDAP; (bso#14694); * The CVE-2020-25717 username map [script] advice has undesired side effects for the local nt token; (bso#14901); (bsc#1192849); * User with multiple spaces (eg FredNurk) become un-deletable; (bso#14902); * Avoid storing NTTIME_THAW (-2) as value on disk; (bso#14127); * smbXsrv_client_global record validation leads to crash if existing record points at non-existing process; (bso#14882); * Crash in vfs_fruit asking for fsp_get_io_fd() for an XATTR call; (bso#14890); * Samba process doesn't log to logfile; (bso#14897); * set_ea_dos_attribute() fallback calling get_file_handle_for_metadata() triggers locking.tdb assert; (bso#14907); * Kerberos authentication on standalone server in MIT realm broken; (bso#14922); * Segmentation fault when joining the domain; (bso#14923); * Support for ROLE_IPA_DC is incomplete; (bso#14903); * rpcclient cannot connect to ncacn_ip_tcp services anymore; (bso#14767); * winexe crashes since 4.15.0 after popt parsing; (bso#14893); * net ads status -P broken in a clustered environment; (bso#14908); * Memory leak if ioctl(FSCTL_VALIDATE_NEGOTIATE_INFO) fails before smbd_smb2_ioctl_send; (bso#14788); * winbindd doesn't start when "allow trusted domains" is off; (bso#14899); * smbclient login without password using '-N' fails with NT_STATUS_INVALID_PARAMETER on Samba AD DC; (bso#14883); * A schannel client incorrectly detects a downgrade connecting to an AES only server; (bso#14912); * Possible null pointer dereference in winbind; (bso#14921); * Fix -k legacy option for client tools like smbclient, rpcclient, net, etc.; (bso#14846); * Add Debian 11 CI bootstrap support; (bso#14872); * Crash in recycle_unlink_internal(); (bso#14888);- Fix dependency problem upgrading from libndr0 to libndr2 and from libsamba-credentials0 to libsamba-credentials1; (bsc#1192684);- Fix regression introduced by CVE-2020-25717 patches, winbindd does not start when 'allow trusted domains' is off; (bso#14899); - Update to 4.15.2 * CVE-2016-2124: SMB1 client connections can be downgraded to plaintext authentication; (bso#12444); (bsc#1014440); * CVE-2020-25717: A user on the domain can become root on domain members; (bso#14556); (bsc#1192284); * CVE-2020-25718: Samba AD DC did not correctly sandbox Kerberos tickets issued by an RODC; (bso#14558); (bsc#1192246); * CVE-2020-25719: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets; (bso#14561); (bsc#1192247); * CVE-2020-25721: Kerberos acceptors need easy access to stable AD identifiers (eg objectSid); (bso#14557); (bsc#1192505); * CVE-2020-25722: Samba AD DC did not do suffienct access and conformance checking of data stored; (bso#14564); (bsc#1192283); * CVE-2021-3738: Use after free in Samba AD DC RPC server; (bso#14468); (bsc#1192215); * CVE-2021-23192: Subsequent DCE/RPC fragment injection vulnerability; (bso#14875); (bsc#1192214); - Update to 4.15.1 * vfs_shadow_copy2: core dump in make_relative_path; (bso#14682); * Log clutter from filename_convert_internal; (bso#14685); * MacOSX compilation fixes; (bso#14862); * rodc_rwdc test flaps; (bso#14868); * Provide a fix for MS CVE-2020-17049 in Samba [SECURITY] 'Bronze bit' S4U2Proxy Constrained Delegation bypass in Samba with embedded Heimdal; (bso#14642); * Python ldb.msg_diff() memory handling failure; (bso#14836); * "in" operator on ldb.Message is case sensitive; (bso#14845); * Release LDB 2.4.1 for Samba 4.15.1; (bso#14848); * samldb_krbtgtnumber_available() looks for incorrect string; (bso#14854); * Fix Samba support for UF_NO_AUTH_DATA_REQUIRED; (bso#14871); * Allow special chars like "@" in samAccountName when generating the salt; (bso#14874); * Correctly ignore comments in CTDB public addresses file; (bso#14826); * Fix transit path validation; (bso#12998); * Fix that child winbindd logs to log.winbindd instead of log.wb-; (bso#14852); * SMB3 cancel requests should only include the MID together with AsyncID when AES-128-GMAC is used; (bso#14855); * Prepare to operate with MIT krb5 >= 1.20; (bso#14870); * Heimdal prefers RC4 over AES for machine accounts; (bso#14864);- Enable samba-tool without ad dc.- Adjust spec to use pam macros; (bsc#1191046).- Adjust spec for size * allow some Recommends instead Requires to be configured for cifs-utils, samba-libs-python3 & samba-gpupdate; (bsc#1182847). * remove fam, undocumented and unneeded.- Add missing build dependency on bison when building with the embedded Heimdal Kerberos- Update to 4.15.0 * Removed SMB development dialects SMB2_22, SMB2_24 and SMB3_10 * VFS layer modernized. * Add the ability to set allow/deny lists for zone transfer clients in Bind DLZ plugin * Server multi-channel support no longer experimental * Improved command line user experience, unifying the options in different commands * Winbindd no longer scans trusted domains on startup and will use enterprise principals by default. * The net utility is now able to support the offline domain join feature * New options for 'samba-tool dns zoneoptions' for aging control and to mark old records as static or dynamic * DNS tombstones are now deleted as appropriate and use a consistent timestamp format * The 'samba-tool dns update' command validates and rejects now malformed IPv4 and IPv6 addresses * The 'samba-tool domain backup' command correctly takes out locks against concurrent modification during backup when using the LMDB backend * TruACL support has been removed * NIS support has been removed- Fix 'net rpc' authentication when using the machine account; (bsc#1189017); (bso#14796);- Fix dependency problem upgrading from libndr0 to libndr1; (bsc#1189875); - Fix dependency problem upgrading from libsmbldap0 to libsmbldap2; (bsc#1189875); - Fix wrong kvno exported to keytab after net ads changetrustpw due to replication delay; (bsc#1188727); - Add Certificate Auto Enrollment Policy; (jsc#SLE-18456). - Update to 4.13.10 * s3: smbd: Ensure POSIX default ACL is mapped into returned Windows ACL for directory handles; (bso#14708); * Take a copy to make sure we don't reference free'd memory; (bso#14721); * s3: lib: Fix talloc heirarcy error in parent_smb_fname(); (bso#14722); * s3: smbd: Remove erroneous TALLOC_FREE(smb_fname_parent) in change_file_owner_to_parent() error path; (bso#14736); * samba-tool: Give better error information when the 'domain backup restore' fails with a duplicate SID; (bso#14575); * smbd: Correctly initialize close timestamp fields; (bso#14714); * Spotlight RPC service doesn't work with vfs_glusterfs; (bso#14740); * ctdb: Fix a crash in run_proc_signal_handler(); (bso#14475); * gensec_krb5: Restore ipv6 support for kpasswd; (bso#14750); * smbXsrv_{open,session,tcon}: Protect smbXsrv_{open,session,tcon}_global_traverse_fn against invalid records; (bso#14752); * samba-tool domain backup offline doesn't work against bind DLZ backend; (bso#14027); * netcmd: Use next_free_rid() function to calculate a SID for restoring a backup; (bso#14669); - Update to 4.13.9 * s3: smbd: SMB1 SMBsplwr doesn't send a reply packet on success; (bso#14696); * Add documentation for dsdb_group_audit and dsdb_group_json_audit to "log level", synchronise "log level" in smb.conf with the code; (bso#14689); * Fix smbd panic when two clients open same file; (bso#14672); * Fix memory leak in the RPC server; (bso#14675); * s3: smbd: Fix deferred renames; (bso#14679); * s3-iremotewinspool: Set the per-request memory context; (bso#14675); * rpc_server3: Fix a memleak for internal pipes; (bso#14675); * third_party: Update socket_wrapper to version 1.3.2; (bso#11899); * third_party: Update socket_wrapper to version 1.3.3; (bso#14639); * idmap_rfc2307 and idmap_nss return wrong mapping for uid/gid conflict; (bso#14663); * Fix the build on OmniOS; (bso#14288); - Update to 4.13.8 * CVE-2021-20254: Fix buffer overrun in sids_to_unixids(); (bso#14571 - Update to 4.13.7 * Release with dependency on ldb version 2.2.1.- CVE-2021-20254 Buffer overrun in sids_to_unixids(); (bnc#14571); (bsc#1184677).- Fix offline domain backup not possible using lmdb version >= 0.9.26; (bso#14676); - Require libldb >= 2.2.1; (bsc#1183572); (bsc#1183574); - Update to 4.13.6 * CVE-2020-27840: samba: Unauthenticated remote heap corruption via bad DNs; (bso#14595); (bsc#1183572). * CVE-2021-20277: samba: out of bounds read in ldb_handler_fold; (bso#14655); (bsc#1183574). - Update to 4.13.5 * s3:modules:vfs_virusfilter: Recent talloc changes cause infinite start-up failure; (bso#14634); * s3: libsmb: Add missing cli_tdis() in error path if encryption setup failed on temp proxy connection; (bso#13992); * smbd: In conn_force_tdis_done() when forcing a connection closed force a full reload of services; (bso#14604); * dbcheck: Check Deleted Objects and reduce noise in reports about expired tombstones (bso#14593); * s3: Fix fcntl waf configure check; (bso#14503); * s3/auth: Implement "winbind:ignore domains"; (bso#14602); * smbd: Use fsp->conn->session_info for the initial delete-on-close token; (bso#14617); * s3: VFS: nfs4_acls. Add missing TALLOC_FREE(frame) in error path; (bso#14648); * classicupgrade: Treat old never expires value right; (bso#14624); * g_lock: Fix uninitalized variable reads; (bso#14636); * s3:pysmbd: Fix fd leak in py_smbd_create_file(); (bso#13898); * lib:util: Avoid free'ing our own pointer; (bso#14625); * HEIMDAL: krb5_storage_free(NULL) should work; (bso#12505);- Spec file fixes around systemd and requires; (bsc#1182830); - Align systemd service unit files with upstream provided ones.- Update to 4.13.4 * Work around special SMB2 IOCTL response behavior of NetApp Ontap 7.3.7; (bso#14607); * Temporary DFS share setup doesn't set case parameters in the same way as a regular share definition does; (bso#14612); * lib: Avoid declaring zero-length VLAs in various messaging functions; (bso#14605); * Do not create an empty DB when accessing a sam.ldb; (bso#14579); * vfs_fruit may close wrong backend fd; (bso#14596); * Temporary DFS share setup doesn't set case parameters in the same way as a regular share definition does; (bso#14612); * vfs_virusfilter: Allocate separate memory for config char*; (bso#14606); * vfs_fruit may close wrong backend fd; (bso#14596); * Work around special SMB2 IOCTL response behavior of NetApp Ontap 7.3.7; (bso#14607); * The cache directory for the user gencache should be created recursively; (bso#14601); * Be more flexible with repository names in CentOS 8 test environments; (bso#14594);- Uninstalling samba-client: Failed to disable unit, cifs.service does not exists; (bsc#1180388);- Update to 4.13.3 + libcli: smb2: Never print length if smb2_signing_key_valid() fails for crypto blob; (bso#14210); + s3: modules: gluster. Fix the error I made in preventing talloc leaks from a function; (bso#14486); + s3: smbd: Don't overwrite contents of fsp->aio_requests[0] with NULL via TALLOC_FREE(); (bso#14515); + s3: spoolss: Make parameters in call to user_ok_token() match all other uses; (bso#14568); + s3: smbd: Quiet log messages from usershares for an unknown share; (bso#14590); + samba process does not honor max log size; (bso#14248); + vfs_zfsacl: Add missing inherited flag on hidden "magic" everyone@ ACE; (bso#14587); + s3-libads: Pass timeout to open_socket_out in ms; (bso#13124); + s3-vfs_glusterfs: Always disable write-behind translator; (bso#14486); + smbclient: Fix recursive mget; (bso#14517); + clitar: Use do_list()'s recursion in clitar.c; (bso#14581); + manpages/vfs_glusterfs: Mention silent skipping of write-behind translator; (bso#14486); + vfs_shadow_copy2: Preserve all open flags assuming ROFS; (bso#14573); + interface: Fix if_index is not parsed correctly; (bso#14514);- Update to 4.13.2 + s3: modules: vfs_glusterfs: Fix leak of char **lines onto mem_ctx on return; (bso#14486); + RN: vfs_zfsacl: Only grant DELETE_CHILD if ACL tag is special; (bso#14471); + smb.conf.5: Add clarification how configuration changes reflected by Samba; (bso#14538); + daemons: Report status to systemd even when running in foreground; (bso#14552); + DNS Resolver: Support both dnspython before and after 2.0.0; (bso#14553); + s3-vfs_glusterfs: Refuse connection when write-behind xlator is present; (bso#14486); + provision: Add support for BIND 9.16.x; (bso#14487); + ctdb-common: Avoid aliasing errors during code optimization; (bso#14537); + libndr: Avoid assigning duplicate versions to symbols; (bso#14541); + docs: Fix default value of spoolss:architecture; (bso#14522); + winbind: Fix a memleak; (bso#14388); + s4:dsdb:acl_read: Implement "List Object" mode feature; (bso#14531); + docs-xml/manpages: Add warning about write-behind translator for vfs_glusterfs; (bso#14486); + nsswitch/nsstest.c: Avoid nss function conflicts with glibc nss.h. + vfs_shadow_copy2: Avoid closing snapsdir twice; (bso#14530); + third_party: Update resolv_wrapper to version 1.1.7; (bso#14547); + examples:auth: Do not install example plugin; (bso#14550); + ctdb-recoverd: Drop unnecessary and broken code; (bso#14513); + RN: vfs_zfsacl: Only grant DELETE_CHILD if ACL tag is special; (bso#14471);- Adjust smbcacls '--propagate-inheritance' feature to align with upstream; (bsc#1178469).- Update to samba 4.13.1 + CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with easily crafted records; (bsc#1177613); (bso#14472); + CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994); (bso#14436); + CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify; (bsc#1173902); (bso#14434); - Adjust systemd tmpfiles.d configuration, use /run/samba instead of /var/run/samba; (bsc#1177355);- Fix vfs_ceph query_directory regression; (bso#14519) - Drop liburing-devel for SLE15-SP2; (bsc#1177245)- Register CTDB recovery lock holder with ceph-mgr - Add liburing-devel dependency- Update to samba 4.13.0 + Require Python 3.6 + Move wide links functionality into VFS module + Deprecate NT4-like 'classic' Samba domain controllers + Deprecate SMBv1 only protocol options + Remove deprecated "ldap ssl ads" option + Unify asynchronous DCE-RPC server; (jsc#SES-645) + Replay multichannel lease break requests; (bso#11897); (jsc#SES-655) + Drop internal byteorder.h header from util-devel package + Remove final code for the AD DC LDAP backend + Add AD DC Group Policy Scripts + Only use gnutls_aead_cipher_encryptv2() for GnuTLS > 3.6.14; (bso#14399) + Fix %U substitutions if it contains a domain name; (bso#14467) + Fix krb5.conf creation for 'net ads join'; (bso#14479) + Fix build problem if libbsd-dev is not installed; (bso#14482) + Toggle vfs_snapper using "--with-shared-modules"; (bso#14437) + Fix idmap_ad RFC4511 response handling; (bso#14465) + Fix panic in get_lease_type(); (bso#14428)- Update to samba 4.11.13 + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2 against unencrypted passwords; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Support "server require schannel:WORKSTATION$ = no" about unsecure configurations; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): s4 torture rpc: repeated bytes in client challenge; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): libcli/auth: Reject weak client challenges in netlogon_creds_server_init() "server require schannel:WORKSTATION$ = no"; (bsc#1176579); (bso#14497); - Update to samba 4.11.12 + s3: libsmb: Fix SMB2 client rename bug to a Windows server; (bso#14403); + dsdb: Allow "password hash userPassword schemes = CryptSHA256" to work on RHEL7; (bso#14424); + dbcheck: Allow a dangling forward link outside our known NCs; (bso#14450); + lib/debug: Set the correct default backend loglevel to MAX_DEBUG_LEVEL; (bso#14426); + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428); + lib/util: do not install "test_util_paths"; (bso#14370); + lib:util: Fix smbclient -l basename dir; (bso#14345); + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428); + util: Allow symlinks in directory_create_or_exist; (bso#14166); + docs: Fix documentation for require_membership_of of pam_winbind; (bso#14358); + s3:winbind:idmap_ad: Make failure to get attrnames for schema mode fatal; (bso#14425);- Add obsoletes to libsmbldap2 package to fix upgrades from previous versions; (bsc#1172810);- Fix net command unable to negotiate SMB2; (bsc#1174120);- Update to samba 4.11.11 + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ and VLV combined; (bso#14364); (bsc#1173159] + CVE-2020-10745: invalid DNS or NBT queries containing dots use several seconds of CPU each; (bso#14378); (bsc#1173160). + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP server with paged_result or VLV; (bso#14402); (bsc#1173161) + CVE-2020-14303: Endless loop from empty UDP packet sent to AD DC nbt_server; (bso#14417); (bsc#1173359). - Update to samba 4.11.10 + Fix segfault when using SMBC_opendir_ctx() routine for share folder that contains incorrect symbols in any file name; (bso#14374). + vfs_shadow_copy2 doesn't fail case looking in snapdirseverywhere mode; (bso#14350) + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr; (bso#14413). + Malicous SMB1 server can crash libsmbclient; (bso#14366) + winbindd: Fix a use-after-free when winbind clients exit; (bso#14382) + ldb: Bump version to 2.0.11, LMDB databases can grow without bounds. (bso#14330) - Update to samba 4.11.9 + nmblib: Avoid undefined behaviour in handle_name_ptrs(); (bso#14242). + 'samba-tool group' commands do not handle group names with special chars correctly; (bso#14296). + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo is not valid; (bso#14237). + Missing check for DMAPI offline status in async DOS attributes; (bso#14293). + smbd: Ignore set NTACL requests which contain S-1-5-88 NFS ACEs; (bso#14307). + vfs_recycle: Prevent flooding the log if we're called on non-existant paths; (bso#14316) + smbd mistakenly updates a file's write-time on close; (bso#14320). + RPC handles cannot be differentiated in source3 RPC server; (bso#14359). + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313). + nsswitch: Fix use-after-free causing segfault in _pam_delete_cred; (bso#14327). + Fix fruit:time machine max size on arm; (bso#13622) + CTDB recovery corner cases can cause record resurrection and node banning; (bso#14294). + ctdb: Fix a memleak; (bso#14348). + libsmb: Don't try to find posix stat info in SMBC_getatr(). + ctdb-tcp: Move free of inbound queue to TCP restart; (bso#14295); (bsc#1162680). + s3/librpc/crypto: Fix double free with unresolved credential cache; (bso#14344); (bsc#1169095) + s3:libads: Fix ads_get_upn(); (bso#14336). + CTDB recovery corner cases can cause record resurrection and node banning; (bso#14294) + Starting ctdb node that was powered off hard before results in recovery loop; (bso#14295); (bsc#1162680). + ctdb-recoverd: Avoid dereferencing NULL rec->nodemap; (bso#14324) - Update to samba 4.11.8 + CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with ASQ; (bso#14331); (bsc#1169850); + CVE-2020-10704: LDAP Denial of Service (stack overflow) in Samba AD DC; (bso#14334); (bsc#1169851); - Update to samba 4.11.7 + s3: lib: nmblib. Clean up and harden nmb packet processing; (bso#14239). + s3: VFS: full_audit. Use system session_info if called from a temporary share definition; (bso#14283) + dsdb: Correctly handle memory in objectclass_attrs; (bso#14258). + ldb: version 2.0.9, Samba 4.11 and later give incorrect results for SCOPE_ONE searches; (bso#14270) + auth: Fix CIDs 1458418 and 1458420 Null pointer dereferences; (bso#14247). + smbd: Handle EINTR from open(2) properly; (bso#14285) + winbind member (source3) fails local SAM auth with empty domain name; (bso#14247) + winbindd: Handling missing idmap in getgrgid(); (bso#14265). + lib:util: Log mkdir error on correct debug levels; (bso#14253). + wafsamba: Do not use 'rU' as the 'U' is deprecated in Python 3.9; (bso#14266). + ctdb-tcp: Make error handling for outbound connection consistent; (bso#14274). - Update to samba 4.11.6 + pygpo: Use correct method flags; (bso#14209). + vfs_ceph_snapshots: Fix root relative path handling; (bso#14216); (bsc#1141320). + Avoiding bad call flags with python 3.8, using METH_NOARGS instead of zero; (bso#14209). + source4/utils/oLschema2ldif: Include stdint.h before cmocka.h; (bso#14218). + docs-xml/winbindnssinfo: Clarify interaction with idmap_ad etc; (bso#14122). + smbd: Fix the build with clang; (bso#14251). + upgradedns: Ensure lmdb lock files linked; (bso#14199). + s3: VFS: glusterfs: Reset nlinks for symlink entries during readdir; (bso#14182). + smbc_stat() doesn't return the correct st_mode and also the uid/gid is not filled (SMBv1) file; (bso#14101). + librpc: Fix string length checking in ndr_pull_charset_to_null(); (bso#14219). + ctdb-scripts: Strip square brackets when gathering connection info; (bso#14227).- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);- Installing: samba - samba-ad-dc.service does not exist and unit not found; (bsc#1171437);- Fix samba_winbind package is installing python3-base without python3 package; (bsc#1169521);- Require libldb2 >= 2.0.10 after security release.- CVE-2020-10704: LDAP Denial of Service (stack overflow) in Samba AD DC; (bso#14334); (bsc#1169851); - CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with ASQ; (bso#14331); (bsc#1169850);- Fix smbclient crash with double free (with unresolved krb5 credential cache); (bso#14344); (bsc#1169095).- Starting ctdb node that was powered off hard before results in recovery loop; (bso#14295); (bsc#1162680).- CTDB doesn't retry outgoing connections on bind (and some other) failures; (bso#14274); (bsc#1162680).- Revert: Allow idmap_rid to have primary group other than "Domain Users"; (bsc#1087931).- Fix nmbstatus not reporting detailed information about workgroups; (bsc#1159464); - Fix querying all names registered within broadcast area; (bso#8927);- Update to samab 4.11.5 + CVE-2019-14902: Replication of ACLs down subtree on AD Directory is not automatic; (bso#12497); (bsc#1160850). + CVE-2019-19344: Fix server crash with dns zone scavenging = yes; (bso#14050); (bsc#1160852). + CVE-2019-14907: server-side crash after charset conversion failure (eg during NTLMSSP processing); (bso#14208); (bsc#1160888). - Update to samba 4.11.4 + Ensure SMB1 cli_qpathinfo2() doesn't return an inode number; (bso#14161). + Ensure we don't call cli_RNetShareEnum() on an SMB1 connection; (bso#14174). + NT_STATUS_ACCESS_DENIED becomes EINVAL when using SMB2 in SMBC_opendir_ctx; (bso#14176). + SMB2 - Ensure we use the correct session_id if encrypting an interim response; (bso#14189). + Prevent smbd crash after invalid SMB1 negprot; (bso#14205). + printing: Fix %J substition; (bso#13745). + Remove now unneeded call to cmdline_messaging_context(); (bso#13925). + Fix incomplete conversion of former parametric options; (bso#14069). + Fix sync dosmode fallback in async dosmode codepath; (bso#14070). + vfs_fruit returns capped resource fork length; (bso#14171). + libnet_join: Add SPNs for additional-dns-hostnames entries; (bso#14116). + smbd: Increase a debug level; (bso#14211). + Prevent azure ad connect from reporting discovery errors reference-value-not-ldap-conformant; (bso#14153). + krb5_plugin: Fix developer build with newer heimdal system library; (bso#14179). + replace: Only link libnsl and libsocket if required; (bso#14168); + ctdb: Incoming queue can be orphaned causing communication; breakdown; (bso#14175). + ldb: Release ldb 2.0.8. Cross-compile will not take cross-answers or cross-execute; (bso#13846). + heimdal-build: Avoid hard-coded /usr/include/heimdal in asn1_compile-generated code; (bso#13856).- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).- Update to samba 4.11.3 + CVE-2019-14861: DNSServer RPC server crash, an authenticated user can crash the DCE/RPC DNS management server by creating records with matching the zone name; (bso#14138); (bsc#1158108). + CVE-2019-14870: DelegationNotAllowed not being enforced, the DelegationNotAllowed Kerberos feature restriction was not being applied when processing protocol transition requests (S4U2Self), in the AD DC KDC; (bso#14187); (bsc#1158109).- CVE-2019-14861: DNSServer RPC server crash, an authenticated user can crash the DCE/RPC DNS management server by creating records with matching the zone name; (bso#14138); (bsc#1158108). - CVE-2019-14870: DelegationNotAllowed not being enforced, the DelegationNotAllowed Kerberos feature restriction was not being applied when processing protocol transition requests (S4U2Self), in the AD DC KDC; (bso#14187); (bsc#1158109).- Update to samba 4.11.2 + CVE-2019-10218: Client code can return filenames containing path separators; (bsc#1144902); (bso#14071). + CVE-2019-14833: Samba AD DC check password script does not receive the full password; (bso#12438). + CVE-2019-14847: User with "get changes" permission can crash AD DC LDAP server via dirsync; (bso#14040). - Fixes from 4.11.1 + Overlinking libreplace against librt and pthread against every binary or library causes issues; (bso#14140); + kpasswd fails when built with MIT Kerberos; (bso#14155); + Fix spnego fallback from kerberos to ntlmssp in smbd server; (bso#14106); + Stale file handle error when using mkstemp on a share; (bso#14137); + non-AES schannel broken; (bso#14134); + Joining Active Directory should not use SAMR to set the password; (bso#13884); + smbclient can blunder into the SMB1 specific cli_RNetShareEnum() call on an SMB2 connection; (bso#14152); + Deleted records can be resurrected during recovery; (bso#14147); + getpwnam and getpwuid need to return data for ID_TYPE_BOTH group; (bso#14141); + winbind does not list forest trusts with additional trust attributes; (bso#14130); + fault report points to outdated documentation; (bso#14139); + pam_winbind with krb5_auth or wbinfo -K doesn't work for users of trusted domains/forests; (bso#14124); + classicupgrade results in uncaught exception - a bytes-like object is required, not 'str'; (bso#14136); + pod2man is not longer required, stop checking at build time; (bso#14131); + Exit code of ctdb nodestatus should not be influenced by deleted nodes; (bso#14129); + username/password authentication doesn't work with CUPS and smbspool; (bso#14128); + smbc_readdirplus() is incompatible with smbc_telldir() and smbc_lseekdir(); (bso#14094);- CVE-2019-14847: User with "get changes" permission can crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598); - CVE-2019-10218: Client code can return filenames containing path separators; (bso#14071); (bsc#1144902);- CVE-2019-14833: samba: Accent with "check script password" Samba AD DC check password script does not receive the full password; (bso#12438); (bsc#1154289).- Update to samba 4.11.0 + For details on all items see WHATSNEW.txt in samba-doc package + Python2 runtime support removed; python 3.4 or later required + Security improvements: - SMB1 disabled by default - lanman and plaintext authentication deprecated - winbind: PAM_AUTH and NTLM_AUTH events logged - GnuTLS 3.2 required; system FIPS mode setting honored + CephFS Snapshot integration, exposed as previous file versions + ctdb changes: - onnode -o option removed - ctdbd logs when using more than 90% of a CPU thread - CTDB_MONITOR_SWAP_USAGE variable removed + AD Domain controller improvements: - Upgrade AD databse format - BIND9_FLATFILE deprecated - default process model chagned to prefork - bind9 dns operation duration logging - Default schema updated to 2012_R2; function level is unchanged - many performance improvements + Configuration webserver support removed- Fix broken username/password authentication with CUPS and smbspool; (bsc#1152143); (bso#14128).- Fix auth problems when printing via smbspool backend with kerberos; (bnc#1148539); (bso#13832).- Update to samba 4.10.8 + CVE-2019-10197: user escape from share path definition; (bso#14035); (bsc#1141267);- Fix build on newer systems by modifying samba.spec to use consistent non-relative paths for pammodules in configure line and specification of pam_winbind.so library to package.- Update to samba 4.10.7 + Unable to create or rename file/directory inside shares configured with vfs_glusterfs_fuse module; (bso#14010). + build: Allow build when '--disable-gnutls' is set; (bso#13844) + samba-tool: Add 'import samba.drs_utils' to fsmo.py; (bso#13973). + Fix 'Error 32 determining PSOs in system' message on old DB with FL upgrade; (bso#14008). + s4/libnet: Fix joining a Windows pre-2008R2 DC; (bso#14021) + join: Use a specific attribute order for the DsAddEntry nTDSDSA object; (bso#14046). + vfs_catia: Pass stat info to synthetic_smb_fname(); (bso#14015). + lookup_name: Allow own domain lookup when flags == 0; (bso#14091). + s4 librpc rpc pyrpc: Ensure tevent_context deleted last; (bso#13932). + DEBUGC and DEBUGADDC doesn't print into a class specific log file; (bso#13915). + Request to keep deprecated option "server schannel", VMWare Quickprep requires "auto"; (bso#13949). + dbcheck: Fallback to the default tombstoneLifetime of 180 days; (bso#13967). + dnsProperty fails to decode values from older Windows versions; (bso#13969). + samba-tool: Use only one LDAP modify for dns partition fsmo role transfer; (bso#13973). + third_party: Update waf to version 2.0.17; (bso#13960). + netcmd: Allow 'drs replicate --local' to create partitions; (bso#14051). + ctdb-config: Depend on /etc/ctdb/nodes file; (bso#14017).- CVE-2019-10197: user escape from share path definition; (bso#14035); (bsc#1141267).- Prepare for use future use of kernel keyrings, modify /etc/pam.d/samba to include pam_keyinit.so; (bsc#1144059).- Update samba-winbind script to work with systemd; (bsc#1132739); - Drop samba dhcpcd hook scripts - Update to samba 4.10.6 + s3: winbind: Fix crash when invoking winbind idmap scripts; (bso#13956). + smbd does not correctly parse arguments passed to dfree and quota scripts; (bso#13964). + samba-tool dns: use bytes for inet_ntop; (bso#13965). + samba-tool domain provision: Fix --interactive module in python3; (bso#13828). + ldb_kv: Skip @ records early in a search full scan; (bso#13893). + docs: Improve documentation of "lanman auth" and "ntlm auth" connection; (bso#13981). + python/ntacls: Use correct "state directory" smb.conf option instead of "state dir"; (bso#14002). + registry: Add a missing include; (bso#13840). + Fix SMB guest authentication; (bso#13944). + AppleDouble conversion breaks Resourceforks; (bso#13958). + vfs_fruit makes direct use of syscalls like mmap() and pread(); (bso#13968). + s3:mdssvc: Fix flex compilation error; (bso#13987). + s3/vfs_glusterfs[_fuse]: Avoid using NAME_MAX directly; (bso#13872). + dsdb:samdb: schemainfo update with relax control; (bso#13799). + s3:util: Move static file_pload() function to lib/util; (bso#13964). + smbd: Fix a panic; (bso#13957). + ldap server: Generate correct referral schemes; (bso#12478). + s4 dsdb/repl_meta_data: fix use after free in dsdb_audit_add_ldb_value; (bso#13941). + s4 dsdb: Fix use after free in samldb_rename_search_base_callback; (bso#13942). + dsdb/repl: we need to replicate the whole schema before we can apply it; (bso#12204). + ldb: Release ldb 1.5.5; (bso#12478). + Schema replication fails if link crosses chunk boundary backwards; (bso#13713). + 'samba-tool domain schemaupgrade' uses relax control and skips the schemaInfo update provision; (bso#13799). + dsdb_audit: avoid printing "... remote host [Unknown] SID [(NULL SID)] ..."; (bso#13916). + python/ntacls: We only need security.SEC_STD_READ_CONTROL in order to get the ACL; (bso#13917). + s3:loadparm: Ensure to truncate FS Volume Label at multibyte boundary; (bso#13947). + Using Kerberos credentials to print using spoolss doesn't work; (bso#13939). + wafsamba: Use native waf timer; (bso#13998). + ctdb-scripts: Fix tcp_tw_recycle existence check; (bso#13984).- Update to samba-4.10.5 (including updates for 4.10.4, 4.10.3) + CVE-2019-12435 rpc/dns: Avoid NULL deference if zone not found in DnssrvOperation2; (bso#13922); (bsc#1137815). + CVE-2019-12436 dsdb/paged_results: Ignore successful results without messages; (bso#13951); (bsc#1137816). - Update to samba-4.10.4 + s3: SMB1: Don't allow recvfile on stream fsp's; (bso#13938). + py/provision: Fix for Python 2.6; (bso#13882). + netcmd: Fix 'passwordsettings --max-pwd-age' command; (bso#13873). + s3-libnet_join: 'net ads join' to child domain fails when using "-U admin@forestroot"; (bso#13861). + vfs_ceph: Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245). + vfs_ceph: Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697). + ctdb-common: Avoid race between fd and signal events; (bso#13895). + ctdb-common: Fix memory leak in run_proc; (bso#13943). + lib: Initialize getline() arguments; (bso#13892). + winbind: Fix overlapping id ranges; (bco#13903). + lib util debug: Increase format buffer to 4KiB; (bso#13902). + nsswitch pam_winbind: Fix Asan use after free; (bso#13927). + s4 lib socket: Ensure address string owned by parent struct; (bso#13929). + s3 rpc_client: Fix Asan stack use after scope; (bso#13936). + s3:smbd: Handle IO_REPARSE_TAG_DFS in SMB_FIND_FILE_FULL_DIRECTORY_INFO; (bso#10097). + smb2_tcon: Avoid STATUS_PENDING completely on tdis; (bso#10344). + smb2_sesssetup: avoid STATUS_PENDING responses for session setup; (bso#12845). + smb2_tcon: Avoid STATUS_PENDING completely on tdis; (bso#13698). + smb2_sesssetup: avoid STATUS_PENDING responses for session setup; (bso#13796). + dbcheck: Fix the err_empty_attribute() check; (bso#13843). + vfs_snapper: Drop unneeded fstat handler; (bso#13858). + vfs_default: Fix vfswrap_offload_write_send() NT_STATUS_INVALID_VIEW_SIZE check; (bso#13862). + smb2_server: Grant all 8192 credits to clients; (bso#13863). + smbd: Implement SMB_FILE_NORMALIZED_NAME_INFORMATION handling; (bso#13919). + s3/vfs_glusterfs: Dynamically determine NAME_MAX; (bso#13872). + s3: modules: ceph: Use current working directory instead of share path; (bso#13918); (bsc#1134452). + winbind: Use domain name from lsa query for sid_to_name cache entry; (bso#13831). + memcache: Increase size of default memcache to 512k; (bso#13865). + docs: Update smbclient manpage for "--max-protocol"; (bso#13857). + s3:utils: If share is NULL in smbcacls, don't print it; (bso#13937). + s3:smbspool: Fix regression printing with Kerberos credentials; (bso#13939). + ctdb-scripts: CTDB restarts failed NFS RPC services by hand, which is incompatible with systemd; (bso#13860). + ctdb-daemon: Revert "We can not assume that just because we could complete a TCP handshake"; (bso#13888). + ctdb-daemon: Never use 0 as a client ID; (bso#13930). + ctdb-common: Fix memory leak; (bso#13943). + s3:debug: Enable logging for early startup failures; (bso#13904) - Update to samba-4.10.3 + CVE-2018-16860: Heimdal KDC: Reject PA-S4U2Self with unkeyed checksum; (bso#13685); (bsc#1134024).- CVE-2019-12435: zone operations can crash rpc server; (bso#13922); (bsc#1137815).- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697). - Add ceph_snapshots VFS module; (jsc#SES-183).- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).- Update to samba-4.10.2: + CVE-2019-3870 (World writable files in Samba AD DC private/ dir); (bso#13834). + CVE-2019-3880 (Save registry file outside share as unprivileged user); (bso#13851). + py/kcc_utils: py2.6 compatibility; (bso#13837). + libcli: permit larger values of DataLength in SMB2_ENCRYPTION_CAPABILITIES of negotiate response; (bso#13869). + regfio: Improve handling of malformed registry hive files; (bso#13840). + ctdb-version: Simplify version string usage; (bso#13789). + lib: Make fd_load work for non-regular files; (bso#13859). + dbcheck: in the middle of the tombstone garbage collection causes replication failures, dbcheck: add --selftest-check-expired-tombstones cmdline option; (bso#13816). + ndr_spoolss_buf: Fix out of scope use of stack variable in NDR_SPOOLSS_PUSH_ENUM_OUT(); (bso#13818). + s4/messaging: Fix undefined reference in linking libMESSAGING-samba4.so; (bso#13854). + acl_read: Fix regression for empty lists; (bso#13836). + s4:dlz make b9_has_soa check dc=@ node; (bso#13841). + s3:client: Fix printing via smbspool backend with kerberos auth; (bso#13832). + s4:librpc: Fix installation of Samba; (bso#13847). + s3:lib: Fix the debug message for adding cache entries; (bso#13848). + s3:utils: Add 'smbstatus -L --resolve-uids' to show username; (bso#13793). + s3:lib: Fix the debug message for adding cache entries; (bso#13848). + s3:waf: Fix the detection of makdev() macro on Linux; (bso#13853). * ctdb-build: Drop creation of .distversion in tarball; (bso#13789). * ctdb-packaging: Test package requires tcpdump, ctdb package should not own system library directory; (bso#13838). - Update to samba-4.10.1: + py/kcc_utils: py2.6 compatibility; (bso#13837); + libcli: permit larger values of DataLength in SMB2_ENCRYPTION_CAPABILITIES of negotiate response; (bso#13869); + regfio: Improve handling of malformed registry hive files; (bso#13840); + ctdb-version: Simplify version string usage; (bso#13789); + lib: Make fd_load work for non-regular files; (bso#13859); + dbcheck in the middle of the tombstone garbage collection causes replication failures, dbcheck: add --selftest-check-expired-tombstones cmdline option; (bso#13816); + ndr_spoolss_buf: Fix out of scope use of stack variable in NDR_SPOOLSS_PUSH_ENUM_OUT(); (bso#13818); + s4/messaging: Fix undefined reference in linking libMESSAGING-samba4.so; (bso#13854); + acl_read: Fix regression for empty lists; (bso#13836); + s4:dlz make b9_has_soa check dc=@ node; (bso#13841); + s3:client: Fix printing via smbspool backend with kerberos auth; (bso#13832); + s4:librpc: Fix installation of Samba; (bso#13847); + s3:lib: Fix the debug message for adding cache entries; (bso#13848); + s3:utils: Add 'smbstatus -L --resolve-uids' to show username; (bso#13793); + s3:lib: Fix the debug message for adding cache entries; (bso#13848); + s3:waf: Fix the detection of makdev() macro on Linux; (bso#13853); + ctdb-build: Drop creation of .distversion in tarball; (bso#13789); + ctdb-packaging: Test package requires tcpdump, ctdb package should not own system library directory; (bso#13838); - Update to samba-4.10.0: + s4-server: Open and close a transaction on sam.ldb at startup; (bso#13760); + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812); + s4/scripting/bin: Open unicode files with utf8 encoding and write + unicode string. + sambaundoguididx: Use the right escaped oder unescaped sam ldb files; (bso#13759); + Fix idmap cache pollution with S-1-22- IDs on winbind hickup; (bso#13813); + passdb: Update ABI to 0.27.2. + lib/winbind_util: Add winbind_xid_to_sid for --without-winbind; (bso#13813); + lib:util: Move debug message for mkdir failing to log level 1; (bso#13823);- MacOS credit accounting breaks with async SESSION SETUP; (bsc#1125601); (bso#13796). - Mac OS X SMB2 implmenetation sees Input/output error or Resource temporarily unavailable and drops connection; (bso#13698)- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).- CVE-2019-3880: Save registry file outside share as unprivileged user; (bso#13851); (bsc#1131060 ).- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0); (bso#13834); (bsc#1130703);- Update to samba-4.9.5 + audit_logging: Remove debug log header and JSON Authentication: prefix; (bso#13714); + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760); + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso# CID: 1433607; (bso#11495); + smbd: uid: Don't crash if 'force group' is added to an existing share connection; (bso#13690); + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility code; (bso#13770); + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803); + s3:utils/smbget fix recursive download with empty source directories; (bso#13199); + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716); + s3:libsmb: cli_smb2_list() can sometimes fail initially on a connection; (bso#13736); + join: Throw CommandError instead of Exception for simple errors; (bso#13747); + ldb: Avoid inefficient one-level searches; (bso#13762); + s3: libsmb: use smb2cli_conn_max_trans_size() in cli_smb2_list(); (bso#13736); + tldap: Avoid use after free errors; (bso#13776); + Fix idmap xid2sid cache churn; (bso#13802); + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812); + s3-smbd: Avoid assuming fsp is always intact after close_file call; (bso#13720); + s3-vfs-fruit: Add close call; (bso#13725); + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746); + s3-vfs: add glusterfs_fuse vfs module; (bso#13774); + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766); + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS) ftruncate and fallocate; (bso#13807); + lib/audit_logging: Actually create talloc; (bso#13737); + netcmd/user: python[3]-gpgme unsupported and replaced by python[3]-gpg; (bso#13728); + dns: Changing onelevel search for wildcard to subtree; (bso#13738); + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721); + sambaundoguididx: Use the right escaped oder unescaped sam ldb files; (bso#13759); + ctdb: Print locks latency in machinereadable stats; (bso#13742); + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786); + audit_logging: auth_json_audit required auth_json; (bso#13715); + man pages: Document prefork process model; (bso#13765); + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773); + s3:auth: ignore create_builtin_guests() failing without a valid idmap configuration; (bso#13697); + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC without trusts; (bso#13722); + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd is not available; (bso#13723); + s4:server: Add support for 'smbcontrol samba shutdown' and 'smbcontrol debug/debuglevel'; (bso#13752); + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616); + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330); + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774); + notifyd: Fix SIGBUS on sparc; (bso#13704); + waf: Check for libnscd; (bso#13787); + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770); + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717); + Recovery lock bug fixes; (bso#13800); + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726); + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727); + vfs_fileid: Fix get_connectpath_ino; (bso#13741); + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).- Fix update-apparmor-samba-profile script after apparmor switched to using named profiles. The change is backwards compatible; (bsc#1126377);- LoadParm().load_default() fails with "Unable to load default file"; (bsc#1089758);- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);- Update to samba-4.9.4 + libcli/smb: Don't overwrite status code; (bso#9175). + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164). + Session setup reauth fails to sign response; (bso#13661). + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677). + vfs_shadow_copy2: Nicely deal with attempts to open previous version for writing; (bso#13688). + Restoring previous version of stream with vfs_shadow_copy2 fails with NT_STATUS_OBJECT_NAME_INVALID fsp->base_fsp->fsp_name; (bso#13455). + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571). + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708) + PEP8: fix E231: missing whitespace after ','. + winbindd: Fix crash when taking profiles;(bso#13629) + CVE-2018-14629 dns: Fix CNAME loop prevention using counter regression; (bso#13600) + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686). + CVE-2018-16853: Do not segfault if client is not set; (bso#13571). + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679) + ctdb-daemon: Exit with error if a database directory does not exist; (bso#13696). + s3:libads: Add net ads leave keep-account option; (bso#13498).- Drop more %if..%endif guards which are idempotent. - Drop requires on ldconfig which are already auto-discovered. - Do not ignore errors from useradd/groupadd.- Remove python2 build dependency from samba-libs; (bsc#1116900);- Update update-apparmor-samba-profile script to ignore the shares's paths containing substitution variables in any place, not only at the beginning of the path.- Update to samba-4.9.3 + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD Internal DNS server; (bso#13600); (bsc#1116319); + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628); (bsc#1116320); + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server; (bso#13674); (bsc#1116322); + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers; (bso#13669); (bsc#1116321); + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos configuration (unsupported); (bso#13678); (bsc#1116324); + CVE-2018-16857: Bad password count in AD DC not always effective; window; (bso#13683); (bsc#1116323);- Update to samba-4.9.2 + dsdb: Add comments explaining the limitations of our current backlink behaviour; (bso#13418); + Fix problems running domain backups (handling SMBv2, sites); (bso#13621); + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3; (bso#13465); + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642); + File saving issues with vfs_fruit on samba >= 4.8.5; (bso#13646); + Enabling vfs_fruit looses FinderInfo; (bso#13649); + Cancelling of SMB2 aio reads and writes returns wrong error NT_STATUS_INTERNAL_ERROR; (bso#13667); + Fix CTDB recovery record resurrection from inactive nodes and simplify vacuuming; (bso#13641); + examples: Fix the smb2mount build; (bso#13465); + libtevent: Fix build due to missing open_memstream on Illiumos; (bso#13629); + winbindd_cache: Fix timeout calculation for sid<->name cache; (bso#13662); + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path; (bso#13653); + Extended DN SID component missing for member after switching group membership; (bso#13418); + Return STATUS_SESSION_EXPIRED error encrypted, if the request was encrypted; (bso#13624); + python: Allow forced signing via smb.SMB(); (bso#13621); + lib:socket: If returning early, set ifaces; (bso#13665); + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8 encoded unicode; (bso#13616); + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute; (bso#13673); + waf: Add -fstack-clash-protection; (bso#13601); + winbind: Fix segfault if an invalid passdb backend is configured; (bso#13668); + Fix bugs in CTDB event handling; (bso#13659); + Misbehaving nodes are sometimes not banned; (bso#13670);- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);- winbind requires latest version of libtevent-util0 to start- Backport latest gpo code from master + Read policy from local gpt cache + Offline policy application + Make group policy extensible via register/unregister gpext + gpext's run via a process_group_policy method- Enable profiling data collection- Change samba-kdc package name to samba-ad-dc - Move samba-ad-dc.service to the samba-ad-dc package- Update to samba-4.9.1 + s3: nmbd: Stop nmbd network announce storm; (bso#13620); + s3-rpcclient: Use spoolss_init_spoolss_UserLevel1 in winspool cmds; (bso#13597); + CTDB recovery lock has some race conditions; (bso#13617); + s3-rpc_client: Advertise Windows 7 client info; (bso#13597); + ctdb-doc: Remove PIDFILE option from ctdbd_wrapper man page; (bso#13610);- Tumbleweed doesn't define the sle_version macro, so we must include a check for suse_version also. Otherwise python3 is disabled on Tumbleweed.- Update to samba-4.9.0 + samba_dnsupdate: Honor 'dns zone scavenging' option, only update if needed; (bso#13605); + wafsamba: Fix 'make -j'; (bso#13606);- Update to samba-4.9.0rc5 + s3: VFS: vfs_full_audit: Ensure smb_fname_str_do_log() only returns absolute pathnames; (bso#13565); + s3: util: Do not take over stderr when there is no log file; (bso#13578); + Durable Reconnect fails because cookie.allow_reconnect is not set; (bso#13549); + krb5-samba: Interdomain trust uses different salt principal; (bso#13539); + vfs_fruit: Don't unlink the main file; (bso#13441); + smbd: Fix a memleak in async search ask sharemode; (bso#13602); + Fix Samba GPO issue when Trust is enabled; (bso#11517); + samba-tool: Add "virtualKerberosSalt" attribute to 'user getpassword/syncpasswords'; (bso#13539); + Fix CTDB configuration issues; (bso#13589); + ctdbd logs an error until it can successfully connect to eventd; (bso#13592);- Update to samba-4.9.0rc4 + s3: smbd: Ensure get_real_filename() copes with empty pathnames; (bso#13585); + samba domain backup online/rename commands force user to specify password on CLI; (bso#13566); + wafsamba/samba_abi: Always hide ABI symbols which must be local; (bso#13579); + Fix a panic if fruit_access_check detects a locking conflict; (bso#13584); + Fix memory and resource leaks; (bso#13567); + python: Fix print in dns_invalid.py; (bso#13580); + Aliasing issue causes incorrect IPv6 checksum; (bso#13588); + Fix CTDB configuration issues; (bso#13589); + s3: vfs: time_audit: fix handling of token_blob in smb_time_audit_offload_read_recv(); (bso#13568);- Add missing zlib-devel dependency which was previously pulled in by libopenssl-devel- Update to samba-4.9.0rc3+git.22.3fff23ae36e + CVE-2018-10858: libsmb: Harden smbc_readdir_internal() against returns from malicious servers; (bso#13453); + CVE-2018-1140: ldbsearch '(distinguishedName=abc)' and DNS query with escapes crashes, ldb: Release LDB 1.3.5 for CVE-2018-1140; (bso#13374); + CVE-2018-10918: cracknames: Fix DoS (NULL pointer de-ref) when not servicePrincipalName is set on a user; (bso#13552); + CVE-2018-10919: acl_read: Fix unauthorized attribute access via searches; (bso#13434); + ctdb_mutex_ceph_rados_helper: Set SIGINT signal handler; (bso#13540); + CVE-2018-1139 libcli/auth: Do not allow ntlmv1 over SMB1 when it is disabled via "ntlm auth"; (bso#13360); + s3-tldap: do not install test_tldap; (bso#13529); + ctdb_mutex_ceph_rados_helper: Fix deadlock via lock renewals; (bso#13540); + CVE-2018-1140 Add NULL check for ldb_dn_get_casefold() in ltdb_index_dn_attr(); (bso#13374); + ctdb-eventd: Fix CID 1438155; (bso#13554); + Fix CIDs 1438243, (Unchecked return value) 1438244 (Unsigned compared against 0), 1438245 (Dereference before null check) and 1438246 (Unchecked return value); (bso#13553); + ctdb: Fix a cut&paste error; (bso#13554); + systemd: Only start smb when network interfaces are up; (bso#13559); + Fix quotas don't work with SMB2; (bso#13553); + s3/smbd: Ensure quota code is only called when quota support detected; (bso#13563); + s3/libsmb: Explicitly set delete_on_close token for rmdir; (bso#13204); + s3:waf: Install eventlogadm to /usr/sbin; (bso#13561); + Shorten description in vfs_linux_xfs_sgid manual; (bso#13562);- Update to samba-4.9.0rc2+git.21.a1069afb007 + s3: smbd: Using "sendfile = yes" with SMB2 can cause CPU spin; (bso#13537); + s3: smbd: Fix path check in smbd_smb2_create_durable_lease_check(); (bso#13535); + samba-tool trust: Support discovery via netr_GetDcName; (bso#13538); + s4-dsdb: Only build dsdb Python modules for AD DC; (bso#13542); + Fix portability issues on freebsd; (bso#13520); + DNS wildcard search does not handle multiple labels correctly; (bso#13536); + samba-tool domain trust: Fix trust compatibility to Windows Server 1709 and FreeIPA; (bso#13308); + Fix portability issues on freebsd; (bso#13520); + ctdb-protocol: Fix CTDB compilation issues; (bso#13545); + ctdb-docs: Replace obsolete reference to CTDB_DEBUG_HUNG_SCRIPT option; (bso#13546); + ctdb-doc: Provide an example script for migrating old configuration; (bso#13550); + ctdb-event: Implement event tool "script list" command; (bso#13551);- Update to samba-4.8.4+git.37.a7a861d7982; + CVE-2018-1139: Weak authentication protocol allowed; (bsc#1095048); (bsc#13360); + CVE-2018-1140: Denial of Service Attack on DNS and LDAP server; (bsc#1095056); (bso#13466); (bso#13374); + CVE-2018-10858: Insufficient input validation on client directory listing in libsmbclient; (bsc#1103411); (bso#13453); + CVE-2018-10918: Denial of Service Attack on AD DC DRSUAPI server; (bsc#1103414); (bso#13552); + CVE-2018-10919: Confidential attribute disclosure from the AD LDAP server; (bsc#1095057); (bso#13434); + s3:winbind: winbind normalize names' doesn't work for users; (bso#12851); + winbind: Fix UPN handling in canonicalize_username(); (bso#13369); + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428); + samdb: Fix building Samba with gcc 8.1; (bso#13437); + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440); + smbd: Flush dfree memcache on service reload; (bso#13446); + ldb: Save a copy of the index result before calling the + lib/util: No Backtrace given by Samba's AD DC by default; (bso#13454). + s3: smbd: printing: Re-implement delete-on-close semantics for print files missing since 3.5.x; (bso#13457). + python: Fix talloc frame use in make_simple_acl(); (bso#13474). + krb5_wrap: Fix keep_old_entries logic for older Kerberos libraries;(bso#13478). + krb5_plugin: Add winbind localauth plugin for MIT Kerberos; (bso#13480).- Add missing package descriptions; (bsc#1093864); - Fix dependency issue between samba-python and samba-kdc; (bsc#1062876); - Call update-apparmor-samba-profile when running samba-ad-dc; (bsc#1092099);- Update to 4.8.2 + After update to 4.8.0 DC failed with "Failed to find our own NTDS Settings objectGUID" (bso#13335). + fix incorrect reporting of stream dos attributes on a directory (bso#13380). + vfs_ceph: add asynchronous fsync; fake synchronous call (bso#13412). + vfs_ceph: add fake async pwrite/pread send/recv hooks; (bso#13425) + vfs_ceph: Fix memory leak; (bso#13424). + libsmbclient: Fix hard-coded connection error return of ETIMEDOUT; (bso#13419). + s4-lsa: Fix use-after-free in LSA server; (bso#13420). + winbindd: Do re-connect if the RPC call fails in the passdb case; (bso#13430). + cleanupd: Sends MSG_SMB_UNLOCK twice to interested peers; (bso#13416). + cleanupd: Use MSG_SMB_BRL_VALIDATE to signal cleanupd unclean process shutdown; (bso#13414). + ctdb-client: Remove ununsed functions from old client code; (bso#13411). + printing: Return the same error code as windows does on upload failures; (bso#13395). + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged pipe is not accessable; (bso#13400). + s4:lsa_lookup: remove TALLOC_FREE(state) after all dcesrv_lsa_Lookup{Names,Sids}_base_map() calls; (bso#13420). + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407). + s3:smbspool: Fix cmdline argument handling; (bso#13417).- Move libdfs-server-ad-samba4.so library from kdc to libs package, as it is required by some client libs; (bsc#1074135); - Update to 4.8.1; (bsc#1091179); + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error, we don't own it here; (bso#13244); + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't support fdopendir(); (bso#13270); + Round-tripping ACL get/set through vfs_fruit will increase the number of ACE entries without limit; (bso#13319); + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit issues; (bso#13347); + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without delete access; (bso#13358); + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372); + s3: smbd: Unix extensions attempts to change wrong field in fchown call; (bso#13375); + ms_schema/samba-tool visualize: Fix python2.6 incompatibility; (bso#13337); + Fix invocation of gnutls_aead_cipher_encrypt(); (bso#13352); + Windows 10 cannot logon on Samba NT4 domain; (bso#13328); + winbindd: Recover loss of netlogon secure channel in case the peer DC is rebooted; (bso#13332); + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363); + ctdb-client: Fix bugs in client code; (bso#13356); + ctdb-scripts: Drop "net serverid wipe" from 50.samba event script; (bso#13359); + s3: lib: messages: Don't use the result of sec_init() before calling sec_init(); (bso#13368); + libads: Fix the build '--without-ads'; (bso#13273); + winbind: Keep "force_reauth" in invalidate_cm_connection, add 'smbcontrol disconnect-dc'; (bso#13332); + vfs_virusfilter: Fix CIDs 1428738-1428740; (bso#13343); + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367); + rpc_server: Fix core dump in dfsgetinfo; (bso#13370); + smbclient: Fix notify; (bso#13382); + Fix smbd panic if the client-supplied channel sequence number wraps; (bso#13215); + Windows 10 cannot logon on Samba NT4 domain; (bso#13328); + lib/util: Remove unused '#include ' from tests/tfork.c; (bso#13342); + Fix build errors with cc from developerstudio 12.5 on Solaris; (bso#13343); + Fix the picky-developer build on FreeBSD 11; (bso#13344); + s3:modules: Fix the build of vfs_aixacl2.c; (bso#13345); + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338); + lib:replace: Fix linking when libtirpc-devel overwrites system headers; (bso#13341); + winbindd: 'wbinfo --name-to-sid' returns misleading result on invalid query; (bso#13312); + s3:passdb: Do not return OK if we don't have pinfo set up; (bso#13376); + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);- Use new foreground execution flags for systemd samba daemons; (bsc#1088574); (bsc#1071090); (bsc#1065551); + Add %post scriptlet to clear old sysconfig flags - Update vendor-files to commit 880b3e7. + Set samba sysconfig template variables to "" + Add required daemon flags directly to systemd unit- Specfile cleanup + Remove %if..%endif guards which don't affect the build + Remove redundant %clean section + Replace old $RPM_* shell vars with macros- BuildRequire pkgconfig(systemd) and pkgconfig(libsystemd) in place of systemd and systemd-devel: Allow OBS to optimize the workload by allowing the usage of the 'build-optimized' systemd packages.- Enable building samba with python3, and create a samba-python3 package.- Update to 4.8 + New GUID Index mode in sam.ldb for the AD DC + GPO support for samba KDC + Time machine support with vfs_fruit + Encrypted secrets + AD Replication visualization + Improved trust support - ability to not scan global trust list - AD external trusts have limited support - verbose trusted domain listing + VirusFilter VFS module + NT4-style replication removed + vfs_aio_linux removed- Disable samba-pidl package, due to the removal of dependency perl-Parse-Yapp; (bsc#1085150);- Update to 4.7.6; + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally; (bso#11343); (bsc#1081741); + CVE-2018-1057: Authenticated users can change other users' password; (bso#13272); (bsc#1081024).- Disable python until full python3 port is done; (bsc#1082139); + Remove contents of package samba-python + Remove contents of package libsamba-policy0 + Remove contents of package libsamba-policy-devel + Remove library libsamba-python-samba4.so from samba-libs package + Remove library libsamba-net-samba4.so from samba-libs package + Remove smbtorture binary and manpage from samba-test- samba fails to build with glibc2.27; (bsc#1081042);- Update to 4.7.5; (bsc#1080545); + smbd tries to release not leased oplock during oplock II downgrade; (bso#13193); + Fix copying file with empty FinderInfo from Windows client to Samba share with fruit; (bso#13181); + build: Deal with recent glibc sunrpc header removal; (bso#10976); + Make Samba work with tirpc and libnsl2; (bso#13238); + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208); (bsc#1075206); + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue; (bso#12986); + ctdb-recovery-helper: Deregister message handler in error paths; (bso#13188); + samba: Only use async signal-safe functions in signal handler; (bso#13240); + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue; (bso#12986); + repl_meta_data: Fix linked attribute corruption on databases with unsorted links on expunge. dbcheck: Add functionality to fix the corrupt database; (bso#13228); + Fix smbd panic when chdir returns error during exit; (bso#13189); + Make Samba work with tirpc and libnsl2; (bso#13238); + Fix POSIX ACL support on HPUX and possibly other big-endian OSs; (bso#13176);- Update to 4.7.4; (bsc#1080545); + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140); + s3: libsmb: Fix valgrind read-after-free error in cli_smb2_close_fnum_recv(); (bso#13171); + s3: libsmb: Fix reversing of oldname/newname paths when creating a reparse point symlink on Windows from smbclient; (bso#13172); + Build man page for vfs_zfsacl.8 with Samba; (bso#12934); + repl_meta_data: Allow delete of an object with dangling backlinks; (bso#13095); + s4:samba: Fix default to be running samba as a deamon; (bso#13129); + Performance regression in DNS server with introduction of DNS wildcard, ldb: Release 1.2.3; (bso#13191); + vfs_zfsacl: Fix compilation error; (bso#6133); + "smb encrypt" setting changes are not fully applied until full smbd restart; (bso#13051); + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052); + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155); + winbindd: Dependency on trusted-domain list in winbindd in critical auth codepath; (bso#13173); + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120); + ctdb: sock_daemon leaks memory; (bso#13153); + TCP tickles not getting synchronised on CTDB restart; (bso#13154); + winbindd: winbind parent and child share a ctdb connection; (bso#13150); + pthreadpool: Fix deadlock; (bso#13170); + pthreadpool: Fix starvation after fork; (bso#13179); + messaging: Always register the unique id; (bso#13180); + s4/smbd: set the process group; (bso#13129); + Fix broken linked attribute handling; (bso#13095); + The KDC on an RWDC doesn't send error replies in some situations; (bso#13132); + libnet_join: Fix 'net rpc oldjoin'; (bso#13149); + g_lock conflict detection broken when processing stale entries; (bso#13195); + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired sessions; (bso#13197); + s3:libads: net ads keytab list fails with "Key table name malformed"; (bso#13166); (bsc#1067700); + Fix crash in pthreadpool thread after failure from pthread_create; (bso#13170); + s4:samba: Allow samba daemon to run in foreground; (bso#13129); (bsc#1065551); + third_party: Link the aesni-intel library with "-z noexecstack"; (bso#13174); + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I" options; (bso#13125);- Re-enable usage of libnsl (did got lost with glibc change) - Use TI-RPC (sunrpc is deprecated and will be removed soon from glibc)- smbc_opendir should not return EEXIST with invalid login credentials; (bnc#1065868).- Update to 4.7.3; (bsc#1069666); + Non-smbd processes using kernel oplocks can hang smbd; (bso#13121); + python: use communicate to fix Popen deadlock; (bso#13127); + smbd on disk file corruption bug under heavy threaded load; (bso#13130); + tevent: version 0.9.34; (bso#13130); + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118); + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug; (bsc#1060427);(bso#13041); + CVE-2017-15275: s3: smbd: Chain code can return uninitialized memory when talloc buffer is grown; (bsc#1063008); (bso#13077); - Build with AD DC support only in openSUSE.- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- samba-tool requires samba-python; (bnc#1067771).- Run all daemons in the foreground and let systemd handle it; (bsc#1065551). - Update to 4.7.1; + Fix exporting subdirs with shadow_copy2; (bso#13091); + Currently if getwd() fails after a chdir(), we panic; (bso#13027); + Ensure default SMB_VFS_GETWD() call can't return a partially completed struct smb_filename; (bso#13068); + sys_getwd() can leak memory or possibly return the wrong errno on older systems; (bso#13069); + smbclient doesn't correctly canonicalize all local names before use; (bso#13093); + Fix broken linked attribute handling; (bso#13095); + Missing LDAP query escapes in DNS rpc server; (bso#12994); + Link to -lbsd when building replace.c by hand; (bso#13087); + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem; (bso#6133); + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module; (bso#7909); + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module; (bso#7933); + Missing assignment in sl_pack_float; (bso#12991); + Wrong Samba access checks when changing DOS attributes; (bso#12995); + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062); + groupmap cleanup should not delete BUILTIN mappings; (bso#13065); + Enabling vfs_fruit results in loss of Finder tags and other xattrs; (bso#13076); + man pages: Properly ident lists; (bso#9613); + smb.conf.5: Sort parameters alphabetically; (bso#13081); + Fix GUID string format on GetPrinter info; (bso#12993); + Remote serverid check doesn't check for the unique id; (bso#13042); + CTDB starts consuming memory if there are dead nodes in the cluster; (bso#13056); + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070); + libgpo doesn't sort the GPOs in the correct order; (bso#13046); + Remote serverid check doesn't check for the unique id; (bso#13042); + vfs_catia: Fix a potential memleak; (bso#13090); + Fix file change notification for renames; (bso#12903); + Samba DNS server does not honour wildcards; (bso#12952); + Can't change password in samba from a Windows client if Samba runs on IPv6 only interface; (bso#13079); + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086); + Apple client can't cope with SMB2 async replies when creating symlinks; (bso#13047); + s4:rpc_server:backupkey: Move variable into scope; (bso#12959); + Fix ntstatus_gen.h generation on 32bit; (bso#13099); + Fix a double free in vfs_gluster_getwd(); (bso#13100); + Fix resouce leaks and pointer issues; (bso#13101); + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);- Add samba-kdc to baselibs.conf. - Do not wrap samba-kdc's package definition into if/endif: the package won't be generated simply based on the fact that there is no files section for the package. Allows the source validator to ensure samba-kdc is a built package.- Update to 4.7.0; + Whole DB read locks: Improved LDAP and replication consistency; (bso#12858). + Samba AD with MIT Kerberos + Dynamic RPC port range: Default range changed from "1024-1300" to "49152-65535". + Authentication and Authorization audit support: New auth_audit debug class. + Multi-process LDAP Server: The LDAP server in the AD DC now honours the process model used for the rest of the 'samba' process. + Improved Read-Only Domain Controller (RODC) Support; (bso#12977). + Additional password hashes stored in supplementalCredentials. + Improvements to DNS during Active Directory domain join. + Significant AD performance and replication improvements. + Query record for open file or directory. + Removal of lpcfg_register_defaults_hook(). + Change of loadable module interface. + SHA256 LDAPS Certificates: The self-signed certificate generated for use on LDAPS will now be generated with a SHA256 self-signature, not a SHA1 self-signature. + CTDB no longer allows mixed minor versions in a cluster. + CTDB now ignores hints from Samba about TDB flags when attaching to databases. + New configuration variable CTDB_NFS_CHECKS_DIR. + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed. + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed. + The example NFS Ganesha call-out has been improved. + A new "replicated" database type is available.- CVE-2017-12163: Prevent client short SMB1 write from writing server memory to file; (bso#13020); (bsc#1058624).- CVE-2017-12150: Some code path don't enforce smb signing, when they should; (bso#12997); (bsc#1058622).- CVE-2017-12151: Keep required encryption across SMB3 dfs redirects; (bso#12996); (bsc#1058565).- Clean specfile assuming SUSE-only system and product >=SLE11 + %{ul_version}, %{rhel_version}, %{mandriva_version}, %{centos_version} are always undefined + %{_vendor} is "suse" and %{suse_version} is at least 1100- Update to 4.6.7; (bsc#1054017) + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392). + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937). + vfs_ceph provides inconsistent directory listings; (bso#12911). + Misused talloc context can cause a user to crash their smbd by chaining SMB1 commands.; (bso#12836). + Use-after free can crash libsmbclient code.; (bso#12927). + Server exit with active AIO can crash.; (bso#12925). + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910). + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs; (bso#12898). + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897). + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for authentication; (bso#12886). + finder sidebar showing question mark instead of icon when using ip to connect with vfs_fruit; (bso#12840). + Winbind stops obtaining the 'unixHomeDirectory' & 'loginShell' attributes from AD.; (bso#12720). + KCC run at selftest startup can fail spuriously due to a race; (bso#12869). + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for the remote change; (bso#12782). + rpc_pipe_client memory leaks due to long term memory context passed to rpc_pipe_open_interface(); (bso#12890). + CVE-2017-2619 breaks accessing previous versions of directories with snapshots in subdirectories of the share; (bso#12885). + dns_name_equal doing OOB read; (bso#12813). + replica_sync tests flap; (bso#12753). + Selftest should not call 'net cache flush' and wipe important winbind entries; (bso#12868). + Old Samba versions don't support using recent ldb versions (>=1.1.30); (bso#12859). + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490). + race starting winbindd against posixacl test; (bso#12843). + Crash in the reentrant smbd_smb2_create_send() if the something fails in the subsequent try; (bso#12832). + spnego.c passes the wrong argument order to gensec_update_ev() for the FALLBACK case; (bso#12788). + Clients with SMB3 support can't connect with "server max protocol = SMB2_02"; (bso#12772). + A log message of samb-tool user syncpasswords reverses string arguments in a debug message "Call Popen[...".; (bso#12768). + The smb tarmode tests kills the share dir contents; (bso#12867). + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862). + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860). + manpage/index.html lists links not in alphabetical order; (bso#12854). + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831). + If a record is locked in a database, then recovery does not complete; (bso#12857). + debug_locks.sh script does not log any information; (bso#12856). + SIGSEGV in cm_connect_lsa_tcp dereferencing conn->lsa_tcp_pipe->transport after error; (bso#12852). + smbclient can't parse DOMAIN+username if a different winbind separator is used; (bso#12849). + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845). + Related requests with TreeConnect fail with NETWORK_NAME_DELETED; (bso#12844). + cli->server_os not filled correctly; (bso#12779). + REGRESSION: smbclient doesn't print the session setup anymore; (bso#12824). + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808). + CTDB NFS call-out failures do not cause event failures; (bso#12837). + net command fails due to incorrectly return code; (bso#12828). + Fix building Samba with GCC 7.1; (bso#12827).- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again; (bsc#1048339).- fix cephwrap_chdir(); (bsc#1048790). - Update to 4.6.6 + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation; (bsc#1048278).- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).- Fix inconsistent ctdb socket path; (bsc#1048352). - Fix non-admin cephx authentication; (bsc#1048387).- Update to 4.6.5; (bsc#1040157) + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at startup; (bso#12814). + vfs_expand_msdfs tries to open the remote address as a file path; (bso#12687). + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type); (bso#12798). + With clustering get update_num_read_oplocks failed and PANIC: num_share_modes == 1 assertion failure; (bso#11844). + contend_level2_oplocks_begin_default oplock optimisation doesn't carry over to leases; (bso#12766). + `ctdb nodestatus` incorrectly displays status for all nodes with wrong exit code; (bso#12802). + CTDB can spin hard on revoking readonly delegations if a node becomes disconnected; (bso#12697). + Printing a share mode entry with leases can crash in the ndr code; (bso#12793). + Fix flakey unit tests for eventd; (bso#12792). + CTDB daemon crashes if built with clang; (bso#12770). + smbcacls fails if no password is specified; (bso#12765). + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757). + samba-tool user syncpasswords doesn't trigger the script when a user gets removed; (bso#12767). + systemd: fix detection of libsystemd; (bso#12764). + Notify subsystem only maps first inotify mask to Windows notify filter; (bso#12760). + Allow passing trusted domain password as plain-text to PASSDB layer; (bso#12751). + Can't case-rename files with vfs_fruit; (bso#12749). + wrong sid->uid mapping for SIDs residing in sIDHistory; (bso#12702). + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562). + Ordering of notify responses broken; (bso#12756).- s3: libsmb: Fix error where short name length was read as 2 bytes, should be 1; (bso#11822); (bsc#1042419).- Revert explicit winbind %{version}-%{release} dependency. + The ABI has stabilized since (bsc#936909), so remove to fix cross-media dependencies; (bsc#1037899).- Fix CVE-2017-7494 remote code execution from a writable share; (bso#12780); (bsc#1038231).- Update to 4.6.3; (bsc#1036011) + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots from shares with GlusterFS backend; (bso#12743). + Fix for Solaris C compiler; (bso#12559). + s3: locking: Update oplock optimization for the leases era; (bso#12628). + Make the Solaris C compiler happy; (bso#12693). + s3: libgpo: Allow skipping GPO objects that don't have the expected LDAP attributes; (bso#12695). + Fix buffer overflow caused by wrong use of getgroups; (bso#12747). + lib: debug: Avoid negative array access; (bso#12746). + cleanupdb: Fix a memory read error; (bso#12748). + streams_xattr and kernel oplocks results in NT_STATUS_NETWORK_BUSY; (bso#7537). + winbindd: idmap_autorid allocates ids for unknown SIDs from other backends; (bso#11961). + vfs_fruit: Resource fork open request with flags=O_CREAT|O_RDONLY; (bso#12565). + manpages/vfs_fruit: Document global options; (bso#12615). + lib/pthreadpool: Fix a memory leak; (bso#12624). + Lookup-domain for well-known SIDs on a DC; (bso#12727). + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728). + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729). + credentials_krb5: use gss_acquire_cred for client-side GSSAPI use case; (bso#12611). + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690). + ctdb-readonly: Avoid a tight loop waiting for revoke to complete; (bso#12697). + ctdb_event monitor command crashes if event is not specified; (bso#12723). + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733). + smbd: Fix smb1 findfirst with DFS; (bso#12558). + smbd: Do an early exit on negprot failure; (bso#12610). + winbindd: Fix substitution for 'template homedir'; (bso#12699). + s4:kdc: Disable principal based autodetected referral detection; (bso#12554). + idmap_autorid: Allocate new domain range if the callers knows the sid is valid; (bso#12613). + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724). + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for trusted domain; (bso#12725). + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731). + winbindd: Fix password policy for pam authentication; (bso#12725). + s3:gse: Correctly handle external trusts with MIT; (bso#12554). + auth/credentials: Always set the realm if we set the principal from the ccache; (bso#12611). + replace: Include sysmacros.h; (bso#12686). + s3:vfs_expand_msdfs: Do not open the remote address as a file; (bso#12687). + s3:libsmb: Only print error message if kerberos use is forced; (bso#12704). + winbindd: Child process crashes when kerberos-authenticating a user with wrong password; (bso#12708). + vfs_fruit: Office document opens as read-only on macOS due to CNID semantics; (bso#12715). + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is fragmented; (bso#12737).- Generate and update vendor-files tarball from Git + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).- Generate source tarball directly from Git using OBS tar_scm + use version string derived from parent Git tag and commit hash - remove obsolete vendor-files/tools/package-data version ID + explicitly generate ctdb manpages, needed without "make dist"- Update to 4.6.2 + remove bso#12721 patches now upstream- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622). + x86-64 and aarch64- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).- Build and install the html man pages (bsc#1021907).- Fix CVE-2017-2619 regression with "follow symlinks = no"; (bso#12721).- Update to 4.6.1 + symlink race permits opening files outside share directory; CVE-2017-2619; (bso#12496); (bsc#1027147) + testparm checks for valid idmap parameters + add new krb client encryption types + support for printer driver upload from windows 10 + inherit owner = 'unix only' for improved quota support + improved CTDB event support + new primary group support for idmap_ad + idmap_hash deprecated + mvxattr added to recursively rename extended attributes- Remove chkconfig requirements for systemd systems- Don't call insserv if systemd is used- Fix check if we need to require insserv- async_req: make async_connect_send() "reentrant"; (bso#12105); (bsc#1024416).- Force usage of ncurses6-config thru NCURSES_CONFIG env var; (bsc#1023847).- add missing patch for libnss_wins segfault; (bsc#995730).- Fix vfs_ceph builds against recent Ceph versions; (bsc#1021933).- Document "winbind: ignore domains" parameter; (bsc#1019416).- Add base Samba dependency to samba-ceph package.- Update to 4.5.3 + Heap-based Buffer Overflow Remote Code Execution Vulnerability; CVE-2016-2123; (bso#12409); (bsc#1014437). + Don't send delegated credentials to all servers; CVE-2016-2125; (bso#12445); (bsc#1014441). + denial of service due to a client triggered crash in the winbindd parent process; CVE-2016-2126; (bso#12446); (bsc#1014442). - 4.5.1 and 4.5.2 updates + various streams vfs fixes + various printing fixes + ntlm_auth: do not map explicitly empty domain + various stability fixes in smbd + match file compression ReFS behavior- Add missing ldb module directory; (bnc#1012092).- s3/client: obey 'disable netbios' smb.conf param, don't connect via NBT port; (bsc#1009085); (bso#12418).- Include vfstest in samba-test; (bsc#1001203).- s3/winbindd: using default domain with user@domain.com format fails; (bsc#997833).- Fix segfault in libnss_wins; (bso#12277); (bso#12269); (bsc#995730).- Update to 4.5.0 + NTLM1 Authentication disabled by default + SMB2.1 leases enabled by default + Support for OFD locks + ctdb tool rewritten + Added shadow copy snapshot prefix parameter- Fix illegal memory access after memory has been deleted; (bso#11836); (bsc#975299).- Prevent core, make sure response->extra_data.data is always cleared out; (bsc#993692).- Don't package man pages for VFS modules that aren't built; (boo#993707).- Fix population of ctdb sysconfig after source merge; (bsc#981566).- Enable vfs_ceph builds for Factory (x86-64) + Package as samba-ceph to avoid Ceph dependency in base package.- Update to 4.4.5 + Prevent client-side SMB2 signing downgrade; CVE-2016-2119; (bso#11860); (bsc#986869).- Remove obsolete syslog.target; (bsc#983938).- Honor smb.conf socket options in winbind; (bsc#975131).- Don't use htons() with IP_PROTO_RAW; (bso#11705); (bsc#969522).- Update to 4.4.4 + SMB3 multichannel: Add implementation of missing channel sequence number verification; (bso#11809). + smbd:close: Only remove kernel share modes if they had been taken at open; (bso#11919). + notifyd: Prevent NULL deref segfault in notifyd_peer_destructor; (bso#11930). + s3:rpcclient: Make '--pw-nt-hash' option work; (bso#10796). + Fix case sensitivity issues over SMB2 or above; (bso#11438). + s3:smbd: Fix anonymous authentication if signing is mandatory. (bso#11910) + Fix NTLM Authentication issue with squid; (bso#11914). + pdb: Fix segfault in pdb_ldap for missing gecos; (bso#11530). + Fix memory leak in share mode locking; (bso#11934).- Update to 4.4.3 + Various post-badlock regressions; (bso#11841); (bso#11850); (bso#11858); (bso#11870); (bso#11872). + Only allow idmap_hash for default idmap config (bso#11786). + smbd: Avoid large reads beyond EOF; (bso#11878). + vfs_acl_common: Avoid setting POSIX ACLs if "ignore system acls" is set; (bso#11806). + libads: Record session expiry for spnego sasl binds; (bso#11852).- Fix NTLMSSP regressions caused by previous CVE fixes; (bso#11849); (bsc#975962); (bsc#979268), (bsc#977669).- Revert shared library packaging to comply with SLPP- Update to 4.4.2 + A man-in-the-middle can downgrade NTLMSSP authentication; CVE-2016-2110; (bso#11688); (bsc#973031). + Domain controller netlogon member computer can be spoofed; CVE-2016-2111; (bso#11749); (bsc#973032). + LDAP conenctions vulnerable to downgrade and MITM attack; CVE-2016-2112; (bso#11644); (bsc#973033). + TLS certificate validation missing; CVE-2016-2113; (bso#11752); (bsc#973034). + Named pipe IPC vulnerable to MITM attacks; CVE-2016-2115; (bso#11756); (bsc#973036). + "Badlock" DCERPC impersonation of authenticated account possible; CVE-2016-2118; (bso#11804); (bsc#971965). + DCERPC server and client vulnerable to DOS and MITM attacks; CVE-2015-5370; (bso#11344); (bsc#936862).- Fix samba.tests.messaging test and prevent potential tdb corruption by removing obsolete now invalid tdb_close call; (bsc#974629).- Obsolete libsmbclient from libsmbclient0 while not providing it; (bsc#972197).- Update to 4.4.0. + Read of uninitialized memory DNS TXT handling; (bso#11128); (bso#11686); CVE-2016-0771. + Getting and setting Windows ACLs on symlinks can change permissions on link target; (bso#11648); CVE-2015-7560. + Sockets with htons(IPPROTO_RAW); (bso#11705); CVE-2015-8543. + s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystem with no ACL support; (bso#10489). + docs: Add example for domain logins to smbspool man page; (bso#11643). + smbd: Show correct disk size for different quota and dfree block sizes; (bso#11681). + docs: Add smbspool_krb5_wrapper manpage; (bso#11690). + winbindd: Return trust parameters when listing trusts; (bso#11691). + ctdb: Do not provide a useless pkgconfig file for ctdb; (bso#11696). + Crypto.Cipher.ARC4 is not available on some platforms, fallback to M2Crypto.RC4.RC4 then; (bso#11699). + s3:utils/smbget: Set default blocksize; (bso#11700). + Streamline 'smbget' options with the rest of the Samba utils; (bso#11700). + s3:clispnego: Fix confusing warning in spnego_gen_krb5_wrap(); (bso#11702). + s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703). + loadparm: Fix memory leak issue; (bso#11708). + lib/tsocket: Work around sockets not supporting FIONREAD; (bso#11714). + s3:vfs:glusterfs: Fix build after quota changes; (bso#11715). + ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ..."; (bso#11719). + lib:socket: Fix CID 1350010: Integer OVERFLOW_BEFORE_WIDEN; (bso#11723). + smbd: Fix CID 1351215 Improper use of negative value; (bso#11724). + smbd: Fix CID 1351216 Dereference null return value; (bso#11725). + s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new file; (bso#11727). + docs: Add manpage for cifsdd; (bso#11730). + param: Fix str_list_v3 to accept ; again; (bso#11732). + lib/socket: Fix improper use of default interface speed; (bso#11734). + lib:socket: Fix CID 1350009: Fix illegal memory accesses (BUFFER_SIZE_WARNING); (bso#11735). + libcli: Fix debug message, print sid string for new_ace trustee; (bso#11738). + Fix installation path of Samba helper binaries; (bso#11739). + Fix memory leak in loadparm; (bso#11740). + tevent: version 0.9.28: Fix memory leak when old signal action restored; (bso#11742). + smbd: Ignore SVHDX create context; (bso#11753). + Fix net join; (bso#11755). + s3:libads: setup the msDS-SupportedEncryptionTypes attribute on ldap_add; (bso#11755). + passdb: Add linefeed to debug message; (bso#11763). + s3:utils/smbget: Fix option parsing; (bso#11767). + libnet: Make Kerberos domain join site-aware; (bso#11769). + Reset TCP Connections during IP failover; (bso#11770). + ldb: Version 1.1.26; (bso#11772). + s3:smbd: Add negprot remote arch detection for OSX; (bso#11773). + vfs_glusterfs: Fix use after free in AIO callback; (bso#11774). + mkdir can return ACCESS_DENIED incorrectly on create race; (bso#11780). + "trustdom_list_done: Got invalid trustdom response" message should be avoided; (bso#11782). + Mismatch between local and remote attribute ids lets replication fail with custom schema; (bso#11783). + Quota is not supported on Solaris 10; (bso#11788). + Talloc: Version 2.1.6; (bso#11789). + smbd: Enable multi-channel if 'server multi channel support = yes' in the config; (bso#11796). + build: Fix build when '--without-quota' specified; (bso#11798). + lib/socket/interfaces: Fix some uninitialied bytes; (bso#11802). + Access based share enum: handle permission set in configuration files; (bso#8093). + See also WHATSNEW.txt from the samba-doc package.- Update to 4.3.6. + Getting and setting Windows ACLs on symlinks can change permissions on link target; CVE-2015-7560; (bso#11648); (bsc#968222). + Fix Out-of-bounds read in internal DNS server; CVE-2016-0771; (bso#11128); (bso#11686); (bsc#968223).- Upgrade on-disk FSRVP server state to new version; (bsc#924519).- Only obsolete but do not provide gplv2/3 package names; (bsc#968973).- Relocate existing lock files to /var/lib/samba/lock; (bsc#968963).- Obsolete no longer existing samba-32bit package; (bsc#967625).- Update to 4.3.5. + s3:utils/smbget: Fix recursive download; (bso#6482). + s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystemi with no ACL support; (bso#10489). + s3:smbd/oplock: Obey kernel oplock setting when releasing oplocks; (bso#11400). + vfs_shadow_copy2: Fix case where snapshots are outside the share; (bso#11580). + smbclient: Query disk usage relative to current directory; (bso#11662). + winbindd: Handle expired sessions correctly; (bso#11670). + smbd: Show correct disk size for different quota and dfree block sizes; (bso#11681). + smbcacls: Fix uninitialized variable; (bso#11682). + s3:smbd: Ignore initial allocation size for directory creation; (bso#11684). + s3-client: Add a KRB5 wrapper for smbspool; (bso#11690). + s3-parm: Clean up defaults when removing global parameters; (bso#11693). + Use M2Crypto.RC4.RC4 on platforms without Crypto.Cipher.ARC4; (bso#11699). + s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703). + ctdb: Remove error messages after kernel security update; CVE-2015-8543; (bso#11705). + loadparm: Fix memory leak issue; (bso#11708). + lib/tsocket: Work around sockets not supporting FIONREAD; (bso#11714). + ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ..."; (bso#11719). + s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new file; (bso#11727). + param: Fix str_list_v3 to accept ";" again; (bso#11732).- Shift samba-client sysconfig data into samba and samba-winbind; (bsc#947361).- Simplify shared library packaging; (bsc#966956).- Enable clustering (CTDB) support; (bsc#966271).- s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703); (bsc#964023).- Add quotes around path of update-apparmor-samba-profile; (bnc#962177).- Remove autoconf build-time requirement.- Update to 4.3.4. + vfs_fruit: Enable POSIX directory rename semantics; (bso#11065). + Crash: Bad talloc magic value - access after free; (bso#11394). + Copying files with vfs_fruit fails when using vfs_streams_xattr without stream prefix and type suffix; (bso#11466). + samba-tool: Fix uncaught exception if no fSMORoleOwner attribute is given; (bso#11613). + Fix a typo in the smb.conf manpage, explanation of idmap config; (bso#11619). + Correctly initialize the list head when keeping a list of primary followed by DFS connections; (bso#11624). + Reduce the memory footprint of empty string options; (bso#11625). + lib/async_req: Do not install async_connect_send_test; (bso#11639). + Fix typos in man vfs_gpfs; (bso#11641). + Make "hide dot files" option work with "store dos attributes = yes"; (bso#11645). + Fix a corner case of the symlink verification; (bso#11647); (bnc#960249). + Do not disable "store dos attributes" on-the-fly; (bso#11649). + Update lastLogon and lastLogonTimestamp; (bso#11659).- Prevent access denied if the share path is "/"; (bso#11647); (bnc#960249).- Update to 4.3.3. + Malicious request can cause Samba LDAP server to hang, spinning using CPU; CVE-2015-3223; (bso#11325); (bnc#958581). + Remote read memory exploit in LDB; CVE-2015-5330; (bso#11599); (bnc#958586). + Insufficient symlink verification (file access outside the share); CVE-2015-5252; (bso#11395); (bnc#958582). + No man in the middle protection when forcing smb encryption on the client side; CVE-2015-5296; (bso#11536); (bnc#958584). + Currently the snapshot browsing is not secure thru windows previous version (shadow_copy2); CVE-2015-5299; (bso#11529); (bnc#958583). + Fix Microsoft MS15-096 to prevent machine accounts from being changed into user accounts; CVE-2015-8467; (bso#11552); (bnc#958585).- Update to 4.3.2. + vfs_gpfs: Re-enable share modes; (bso#11243). + dcerpc.idl: Accept invalid dcerpc_bind_nak pdus; (bso#11327). + s3-smbd: Fix old DOS client doing wildcard delete - gives an attribute type of zero; (bso#11452). + Add libreplace dependency to texpect, fixes a linking error on Solaris; (bso#11511). + s4: Fix linking of 'smbtorture' on Solaris; (bso#11512). + s4:lib/messaging: Use correct path for names.tdb; (bso#11562). + Fix segfault of 'net ads (join|leave) -S INVALID' with nss_wins; (bso#11563). + async_req: Fix non-blocking connect(); (bso#11564). + auth: gensec: Fix a memory leak; (bso#11565). + lib: util: Make non-critical message a warning; (bso#11566). + Fix winbindd crashes with samlogon for trusted domain user; (bso#11569); (bnc#949022). + smbd: Send SMB2 oplock breaks unencrypted; (bso#11570). + ctdb: Open the RO tracking db with perms 0600 instead of 0000; (bso#11577). + s3:smb2_server: Make the logic of SMB2_CANCEL DLIST_REMOVE() clearer; (bso#11581). + s3-smbd: Fix use after issue in smbd_smb2_request_dispatch(); (bso#11581). + manpage: Correct small typo error; (bso#11584). + s3: smbd: If EAs are turned off on a share don't allow an SMB2 create containing them; (bso#11589). + Backport some valgrind fixes from upstream master; (bso#11597). + auth: Consistent handling of well-known alias as primary gid; (bso#11608). + winbind: Fix crash on invalid idmap configs; (bso#11612). + s3: smbd: have_file_open_below() fails to enumerate open files below an open directory handle; (bso#11615). + Changing log level of two entries to DBG_NOTICE; (bso#9912).- Ensure samlogon fallback requests are rerouted after kerberos failure; (bnc#953382); (bnc#953972).- Ensure to link with --as-needed flag by removing SUSE_ASNEEDED=0. - Always use the default optimization even on pre-9.2 systems.- Remove redundant configure options while adding with-relro.- Relocate the lockdir to the /var/lib/samba/lock directory.- Cleanup and enhance the pidl sub package.- Require renamed python-ldb-devel and python-talloc-devel at build-time. - Requires python-ldb and python-talloc from the python subpackage.- Update to 4.3.1. + s3: smbd: Fix our access-based enumeration on "hide unreadable" to match Windows; (bso#10252). + nss_winbind: Fix hang on Solaris on big groups; (bso#10365). + smbd: Fix file name buflen and padding in notify repsonse; (bso#10634). + kerberos: Make sure we only use prompter type when available; winbind: Fix 100% loop; (bso#11038). + source3/lib/msghdr.c: Fix compiling error on Solaris; (bso#11053). + s3:ctdbd_conn: make sure we destroy tevent_fd before closing the socket; (bso#11316). + s3: smbd: Fix mkdir race condition; (bso#11486). + pam_winbind: Fix a segfault if initialization fails; (bso#11502). + s3: dfs: Fix a crash when the dfs targets are disabled; (bso#11509). + s4:lib/messaging: Use 'msg.lock' and 'msg.sock' for messaging related subdirs; (bso#11515). + s3: smbd: Fix opening/creating :stream files on the root share directory; (bso#11522). + lib/param: Fix hiding of FLAG_SYNONYM values; (bso#11526). + net: Fix a crash with 'net ads keytab create'; (bso#11528). + s3: smbd: Fix a crash in unix_convert(); (bso#11535). + s3: smbd: Fix NULL pointer bug introduced by previous 'raw' stream fix (bso#11522); (bso#11535). + vfs_fruit: Return value of ad_pack in vfs_fruit.c; (bso#11543). + vfs_commit: set the fd on open before calling SMB_VFS_FSTAT; (bso#11547). + s3:locking: Initialize lease pointer in share_mode_traverse_fn(); (bso#11549). + s3:smbstatus: Add stream name to share_entry_forall(); (bso#11550). + s3:lib: Validate domain name in lookup_wellknown_name(); (bso#11555). + s3: lsa: lookup_name() logic for unqualified (no DOMAIN component) names is incorrect; (bso#11555).- Fix 100% CPU in winbindd when logging in with "user must change password on next logon"; (bso#11038).- Relocate the tmpfiles.d directory to the client package; (bnc#947552).- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf instead; (bnc#942716).- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).- Package /var/lib/samba/msg with 0755 permissions; (bso#11515); (bnc#945502).- Require to install libfam0-gamin from samba-libs on post-12.1 and pre-13.15 systems; (bnc#945013).- Update to 4.3.0. + Samba "map to guest = Bad uid" doesn't work; (bso#9862). + revert LDAP extended rule 1.2.840.113556.1.4.1941 LDAP_MATCHING_RULE_IN_CHAIN changes; (bso#10493). + No objectClass found in replPropertyMetaData on ordinary objects (non-deleted); (bso#10973). + Stream names with colon don't work with fruit:encoding = native; (bso#11278). + NetApp joined to a Samba/ADDC cannot resolve SIDs; (bso#11291). + tevent_fd needs to be destroyed before closing the fd; (bso#11316). + "force group" with local group not working; (bso#11320). + strsep is not available on Solaris; (bso#11359). + smbtorture does not build when configured --with-system-mitkrb5; (bso#11411). + Build with GPFS support is broken; (bso#11421). + Build broken with --disable-python; (bso#11424). + net share allowedusers crashes; (bso#11426). + nmbd incorrectly matches netbios names as own name; (bso#11427). + Python bindings don't check integer types; (bso#11429). + Python bindings don't check array sizes; (bso#11430). + CTDB's eventscript error handling is broken; (bso#11431). + Fix crash in nested ctdb banning; (bso#11432). + Cannot build ctdbpmda; (bso#11434). + samba-tool uncaught exception error; (bso#11436). + Crash in notify_remove caused by change notify = no; (bso#11444). + Poor SMB3 encryption performance with AES-GCM; (bso#11451). + Poor SMB3 encryption performance with AES-GCM (part1); (bso#11451). + fix recursion problem in rep_strtoll in lib/replace/replace.c; (bso#11455). + --bundled-libraries=!ldb,!pyldb,!pyldb-util doesn't disable ldb build and install; (bso#11458). + xid2sid gives inconsistent results; (bso#11464). + ctdb: Fix the build on FreeBSD 10.1; (bso#11465). + Handling of 0 byte resource fork stream; (bso#11467). + AD samr GetGroupsForUser fails for users with "()" in their name; (bso#11488).- Configure with --bundled-libraries=NONE; (bso#11458).- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).- Remove libiniparser-devel build-time requirement.- Update to 4.2.3. + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780). + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924). + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991). + Logon via MS Remote Desktop hangs; (bso#11061). + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068). + tevent: Add a note to tevent_add_fd(); (bso#11141). + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170). + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217). + smbd: Fix a use-after-free; (bso#11218); (bnc#919309). + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces; (bso#11245). + s3:smb2: Add padding to last command in compound requests; (bso#11277). + Add IPv6 support to ADS client side LDAP connects; (bso#11281). + Add IPv6 support for determining FQDN during ADS join; (bso#11282). + s3: IPv6 enabled DNS connections for ADS client; (bso#11283). + Fix invalid write in ctdb_lock_context_destructor; (bso#11293). + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295). + vfs_fruit: Add option "veto_appledouble"; (bso#11305). + tstream: Make socketpair nonblocking; (bso#11312). + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313). + Group creation: Add msSFU30Name only when --nis-domain was given; (bso#11315). + tevent_fd needs to be destroyed before closing the fd; (bso#11316). + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared"; (bso#11319). + smbd/trans2: Add a useful diagnostic for files with bad encoding; (bso#11323). + Change sharesec output back to previous format; (bso#11324). + Robust mutex support broken in 1.3.5; (bso#11326). + Kerberos auth info3 should contain resource group ids available from pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info exists in PAC; (bso#11328); (bnc#912457). + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329). + tevent: Fix CID 1035381 Unchecked return value; (bso#11330). + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331). + s3: smbd: Use separate flag to track become_root()/unbecome_root() state; (bso#11339). + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342). + pidl: Make the compilation of PIDL producing the same results if the content hasn't change; (bso#11356). + winbindd: Disconnect child process if request is cancelled at main process; (bso#11358). + vfs_fruit: Check offset and length for AFP_AfpInfo read requests; (bso#11363). + docs: Overhaul the description of "smb encrypt" to include SMB3 encryption; (bso#11366). + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server(); (bso#11367). + ncacn_http: Fix GNUism; (bso#11371).- Disable rpath usage; (bnc#902421).- Make the winbind package depend on the matching libwbclient version and vice versa; (bnc#936909).- Backport changes to use resource group sids obtained from pac logon_info; (bso#11328); (bnc#912457).- Order winbind.service Before and Want nss-user-lookup target.- Remove fam-devel build-time dependency for post-6 RHEL systems.- Update to 4.2.2. + s3:smbXsrv: refactor duplicate code into smbXsrv_session_clear_and_logoff(); (bso#11182). + gencache: don't fail gencache_stabilize if there were records to delete; (bso#11260). + s3: libsmbclient: After getting attribute server, ensure main srv pointer is still valid; (bso#11186). + s4: rpc: Refactor dcesrv_alter() function into setup and send steps; (bso#11236). + s3: smbd: Incorrect file size returned in the response of "FILE_SUPERSEDE Create"; (bso#11240). + Mangled names do not work with acl_xattr; (bso#11249). + nmbd rewrites browse.dat when not required; (bso#11254). + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff; (bso#11213). + s3:smbd: Add missing tevent_req_nterror; (bso#11224). + vfs: kernel_flock and named streams; (bso#11243). + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244). + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses are used; (bso#11284). + ctdb: check for talloc_asprintf() failure; (bso#11201). + spoolss: purge the printer name cache on name change; (bso#11210); (bnc#901813). + CTDB statd-callout does not scale; (bso#11204). + vfs_fruit: also map characters below 0x20; (bso#11221). + ctdb: Coverity fix for CID 1291643; (bso#11201). + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225). + Fix terminate connection behavior for asynchronous endpoint with PUSH notification flavors; (bso#11226). + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007). + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201). + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the directory is deleted; (bso#11257). + s3:winbindd: make sure we remove pending io requests before closing client sockets; (bso#11141); (bnc#931854). + Fix panic triggered by smbd_smb2_request_notify_done() -> smbXsrv_session_find_channel() in smbd; (bso#11182). + 'sharesec' output no longer matches input format; (bso#11237). + waf: Fix systemd detection; (bso#11200). + CTDB: Fix portability issues; (bso#11202). + CTDB: Fix some IPv6-related issues; (bso#11203). + CTDB statd-callout does not scale; (bso#11204). + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you enter invalid values; (bso#11234). + libads: record service ticket endtime for sealed ldap connections; (bso#11267). + lib/util: Include DEBUG macro in internal header files before samba_util.h; (bso#11033).- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).- Remove the independently built libraries ldb, talloc, tdn, and tevent and the post-10.3 renamed libsmbclient from baselibs.conf.- Drop redundant doc attribute from man pages.- Update to 4.2.1. + s3:winbind:grent: Don't stop group enumeration when a group has no gid; (bso#8905). + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791). + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with servers that don't send the 2 unused fields; (bso#10016). + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476). + waf: Fix the build on openbsd; (bso#10476). + s3: client: "client use spnego principal = yes" code checks wrong name; (bso#10888). + spoolss: Retrieve published printer GUID if not in registry; (bso#11018). + s3: lib: libsmbclient: If reusing a server struct, check every cli->timout miliseconds if it's still valid before use; (bso#11079). + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125). + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135). + replace: Remove superfluous check for gcrypt header; (bso#11135). + Backport subunit changes; (bso#11137). + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with implementation; (bso#11140). + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143). + talloc: Version 2.1.2; (bso#11144). + Update libwbclient version to 0.12; (bso#11149). + brlock: Use 0 instead of empty initializer list; (bso#11153). + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164). + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169); (bnc#913304). + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev fails in the SMB1 case; (bso#11173). + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174). + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175). + s3: libsmbclient: Add missing talloc stackframe; (bso#11177). + s4-process_model: Do not close random fds while forking; (bso#11180). + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).- Prevent samba package updates from disabling samba kerberos printing.- Add sparse file support for samba; (fate#318424).- Purge printer name cache on spoolss SetPrinter change; (bso#11210); (bnc#901813).- Correctly retain errno from Btrfs snapshot ioctls; (bnc#923374).- Simplify libxslt build requirement and README.SUSE install. - Remove no longer required cleanup steps while populating the build root.- Remove deprecated base_rid example from idmap_rid manpage; (bso#11169); (bnc#913304).- Update to 4.2.0. + smbd: Stop using vfs_Chdir after SMB_VFS_DISCONNECT; (bso#1115). + pam_winbind: fix warn_pwd_expire implementation; (bso#9056). + nsswitch: Fix soname of linux nss_*.so.2 modules; (bso#9299). + Make 'profiles' work again; (bso#9629). + s3:smb2_server: protect against integer wrap with "smb2 max credits = 65535"; (bso#9702). + Make validate_ldb of String(Generalized-Time) accept millisecond format ".000Z"; (bso#9810). + Use -R linker flag on Solaris, not -rpath; (bso#10112). + vfs: Add glusterfs manpage; (bso#10240). + Make 'smbclient' use cached creds; (bso#10279). + pdb: Fix build issues with shared modules; (bso#10355). + s4-dns: Add support for BIND 9.10; (bso#10620). + idmap: Return the correct id type to *id_to_sid methods; (bso#10720). + printing/cups: Pack requested-attributes with IPP_TAG_KEYWORD; (bso#10808). + Don't build vfs_snapper on FreeBSD; (bso#10834). + nss_winbind: Add getgroupmembership for FreeBSD; (bso#10835). + idmap_rfc2307: Fix a crash after connection problem to DC; (bso#10837). + s3: smb2cli: query info return length check was reversed; (bso#10848). + s3: lib, s3: modules: Fix compilation on Solaris; (bso#10849). + lib: uid_wrapper: Fix setgroups and syscall detection on a system without native uid_wrapper library; (bso#10851). + winbind3: Fix pwent variable substitution; (bso#10852). + Improve samba-regedit; (bso#10859). + registry: Don't leave dangling transactions; (bso#10860). + Fix build of socket_wrapper on systems without SO_PROTOCOL; (bso#10861). + build: Do not install 'texpect' binary anymore; (bso#10862). + Fix testparm to show hidden share defaults; (bso#10864). + libcli/smb: Fix smb2cli_validate_negotiate_info with min=PROTOCOL_NT1 max=PROTOCOL_SMB2_02; (bso#10866). + Integrate CTDB into top-level Samba build; (bso#10892). + samba-tool group add: Add option '--nis-domain' and '--gid'; (bso#10895). + s3-nmbd: Fix netbios name truncation; (bso#10896). + spoolss: Fix handling of bad EnumJobs levels; (bso#10898). + Fix smbclient loops doing a directory listing against Mac OS X 10 server with a non-wildcard path; (bso#10904). + Fix print job enumeration; (bso#10905); (bnc#898031). + samba-tool: Create NIS enabled users and unixHomeDirectory attribute; (bso#10909). + Add support for SMB2 leases; (bso#10911). + btrfs: Don't leak opened directory handle; (bso#10918). + s3: nmbd: Ensure NetBIOS names are only 15 characters stored; (bso#10920). + s3:smbd: Fix file corruption using "write cache size != 0"; (bso#10921). + pdb_tdb: Fix a TALLOC/SAFE_FREE mixup; (bso#10932). + s3-keytab: fix keytab array NULL termination; (bso#10933). + s3:passdb: fix logic in pdb_set_pw_history(); (bso#10940). + Cleanup add_string_to_array and usage; (bso#10942). + dbwrap_ctdb: Pass on mutex flags to tdb_open; (bso#10942). + Fix RootDSE search with extended dn control; (bso#10949). + Fix 'samba-tool dns serverinfo ' for IPv6; (bso#10952). + libcli/smb: only force signing of smb2 session setups when binding a new session; (bso#10958). + s3-smbclient: Return success if we listed the shares; (bso#10960). + s3-smbstatus: Fix exit code of profile output; (bso#10961). + socket_wrapper: Add missing prototype check for eventfd; (bso#10965). + libcli: SMB2: Pure SMB2-only negprot fix to make us behave as a Windows client does; (bso#10966). + vfs_streams_xattr: Check stream type; (bso#10971). + s3: smbd: Fix *allocate* calls to follow POSIX error return convention; (bso#10982). + vfs_fruit: Add support for AAPL; (bso#10983). + Fix spoolss IDL response marshalling when returning error without clearing info; (bso#10984). + dsdb-samldb: Check for extended access rights before we allow changes to userAccountControl; (bso#10993); CVE-2014-8143; (boo#914279). + Fix IPv6 support in CTDB; (bso#10996). + ctdb-daemon: Use correct tdb flags when enabling robust mutex support; (bso#11000). + vfs_streams_xattr: Add missing call to SMB_VFS_NEXT_CONNECT; (bso#11005). + s3-util: Fix authentication with long hostnames; (bso#11008). + ctdb-build: Fix build without xsltproc; (bso#11014). + packaging: Include CTDB man pages in the tarball; (bso#11014). + pdb_get_trusteddom_pw() fails with non valid UTF16 random passwords; (bso#11016). + Make Sharepoint search show user documents; (bso#11022). + nss_wrapper: check for nss.h; (bso#11026). + Enable mutexes in gencache_notrans.tdb; (bso#11032). + tdb_wrap: Make mutexes easier to use; (bso#11032). + lib/util: Avoid collision which alread defined consumer DEBUG macro; (bso#11033). + winbind: Retry after SESSION_EXPIRED error in ping-dc; (bso#11034). + s3-libads: Fix a possible segfault in kerberos_fetch_pac(); (bso#11037). + vfs_fruit: Fix base_fsp name conversion; (bso#11039). + vfs_fruit: mmap under FreeBSD needs PROT_READ; (bso#11040). + Fix authentication using Kerberos (not AD); (bso#11044). + net: Fix sam addgroupmem; (bso#11051). + vfs_snapper: Correctly handles multi-byte DBus strings; (bso#11055); (bnc#913238). + cli_connect_nb_send: Don't segfault on host == NULL; (bso#11058). + utils: Fix 'net time' segfault; (bso#11058). + libsmb: Provide authinfo domain for encrypted session referrals; (bso#11059). + s3-pam_smbpass: Fix memory leak in pam_sm_authenticate(); (bso#11066). + vfs_glusterfs: Add comments to the pipe(2) code; (bso#11069). + vfs/glusterfs: Change xattr key to match gluster key; (bso#11069). + vfs_glusterfs: Implement AIO support; (bso#11069). + s3-vfs: Fix developer build of vfs_ceph module; (bso#11070). + s3: netlogon: Ensure we don't call talloc_free on an uninitialized pointer; (bso#11077); CVE-2015-0240; (bnc#917376). + vfs: Add a brief vfs_ceph manpage; (bso#11088). + s3: smbclient: Allinfo leaves the file handle open; (bso#11094). + Fix Win8.1 Credentials Manager issue after KB2992611 on Samba domain; (bso#11097). + debug: Set close-on-exec for the main log file FD; (bso#11100). + s3: smbd: leases - losen paranoia check. Stat opens can grant leases; (bso#11102). + s3: smbd: SMB2 close. If a file has delete on close, store the return info before deleting; (bso#11104). + doc:man:vfs_glusterfs: improve the configuration section; (bso#11117). + snprintf: Try to support %j; (bso#11119). + ctdb-io: Do not use sys_write to write to client sockets; (bso#11124). + doc-xml: Add 'sharesec' reference to 'access based share enum'; (bso#11127).- Update to 4.2.0rc5. + Ensure we don't call talloc_free on an uninitialized pointer; CVE-2015-0240; (bso#11077); (bnc#917376).- Fix usage of freed memory on server exit; (bso#11218); (bnc#919309).- Fix tdb_store_flag_to_ntdb() gcc5 build failure.- Fix vfs_snapper DBus string handling; (bso#11055); (bnc#913238).- Update to 4.1.16. + dsdb-samldb: Check for extended access rights before we allow changes to userAccountControl; (bso#10993); CVE-2014-8143; (boo#914279).- Adjust baselibs.conf due to libpdb0 package rename to libsamba-passdb0.- Fix libsmbclient DFS referral handling. + Reuse connections derived from DFS referrals; (bso#10123); (fate#316512). + Set domain/workgroup based on authentication callback value; (bso#11059).- Update to 4.2.0rc4. - Add libsamba-debug, libsocket-blocking, libsamba-cluster-support, and libhttp to the libs package; (boo#913547). - Rename libpdb packages to libsamba-passdb. - Drop libsmbsharemodes packages.- Enable avahi support on post-12.2 systems.- Update to 4.1.15. + pam_winbind: Fix warn_pwd_expire implementation; (bso#9056). + nsswitch: Fix soname of linux nss_*.so.2 modules; (bso#9299). + Fix profiles tool; (bso#9629). + s3-lib: Do not require a password with --use-ccache; (bso#10279). + s4:dsdb/rootdse: Expand extended dn values with the AS_SYSTEM control; (bso#10949). + s4-rpc: dnsserver: Fix enumeration of IPv4 and IPv6 addresses; (bso#10952). + s3:smb2_server: Allow reauthentication without signing; (bso#10958). + s3-smbclient: Return success if we listed the shares; (bso#10960). + s3-smbstatus: Fix exit code of profile output; (bso#10961). + libcli: SMB2: Pure SMB2-only negprot fix to make us behave as a Windows client does; (bso#10966). + s3: smbd/modules: Fix *allocate* calls to follow POSIX error return convention; (bso#10982). + Fix 'domain join' by adding 'drsuapi.DsBindInfoFallBack' attribute 'supported_extensions'; (bso#11006). + idl:drsuapi: Manage all possible lengths of drsuapi_DsBindInfo; (bso#11006). + winbind: Retry LogonControl RPC in ping-dc after session expiration; (bso#11034).- yast2-samba-client should be able to specify osName and osVer on AD domain join; (bnc#873922).- Lookup FSRVP share snums at runtime rather than storing them persistently; (bnc#908627).- Specify soft dependency for network-online.target in Winbind systemd service file; (bnc#889175).- Fix spoolss error response marshalling; (bso#10984).- Update to 4.1.14. + pidl/wscript: Remove --with-perl-* options; revert buildtools/wafadmin/ Tools/perl.py back to upstream state; (bso#10472). + s4-dns: Add support for BIND 9.10; (bso#10620). + nmbd fails to accept "--piddir" option; (bso#10711). + nss_winbind: Add getgroupmembership for FreeBSD; (bso#10835). + S3: source3/smbd/process.c::srv_send_smb() returns true on the error path; (bso#10880). + vfs_glusterfs: Remove "integer fd" code and store the glfs pointers; (bso#10889). + s3-nmbd: Fix netbios name truncation; (bso#10896). + spoolss: Fix handling of bad EnumJobs levels; (bso#10898). + s3: libsmbclient-smb2. MacOSX 10 SMB2 server doesn't set STATUS_NO_MORE_FILES when handed a non-wildcard path; (bso#10904). + spoolss: Fix jobid in level 3 EnumJobs response; (bso#10905). + s3: nmbd: Ensure NetBIOS names are only 15 characters stored; (bso#10920). + s3:smbd: Fix file corruption using "write cache size != 0"; (bso#10921). + pdb_tdb: Fix a TALLOC/SAFE_FREE mixup; (bso#10932). + s3-keytab: Fix keytab array NULL termination; (bso#10933). + Cleanup add_string_to_array and usage; (bso#10942).- Remove and cleanup shares and registry state associated with externally deleted snaphots exposed as shadow copies; (bnc#876312).- Use the upstream tar ball, as signature verification is now able to handle compressed archives.- Fix leak when closing file descriptor returned from dirfd; (bso#10918).- Fix spoolss EnumJobs and GetJob responses; (bso#10905); (bnc#898031). + Fix handling of bad EnumJobs levels; (bso#10898).- Remove dependency on gpg-offline as signature checking is implemented in the source validator.- Update to 4.1.13. + s3-libnet: Add libnet_join_get_machine_spns(); (bso#9984). + s3-libnet: Make sure we do not overwrite precreated SPNs; (bso#9984). + s3-libads: Add all machine account principals to the keytab; (bso#9985). + s3: winbindd: Old NT Domain code sets struct winbind_domain->alt_name to be NULL. Ensure this is safe with modern AD-DCs; (bso#10717). + Fix unstrcpy; (bso#10735). + pthreadpool: Slightly serialize jobs; (bso#10779). + s3: smbd: streams - Ensure share mode validation ignores internal opens (op_mid == 0); (bso#10797). + s3: smbd:open_file: Open logic fix; Use a more natural check; (bso#10809). + vfs_media_harmony: Fix a crash bug; (bso#10813). + docs: Mention incompatibility between kernel oplocks and streams_xattr; (bso#10814). + nmbd: Send waiting status to systemd; (bso#10816). + libcli: Fix a segfault calling smbXcli_req_set_pending() on NULL; (bso#10817). + nsswitch: Skip groups we were not able to map; (bso#10824). + s3-winbindd: Use correct realm for trusted domains in idmap child; (bso#10826). + s3: nmbd: Ensure the main nmbd process doesn't create zombies; (bso#10830). + s3: lib: Signal handling - ensure smbrun and change password code save and restore existing SIGCHLD handlers; (bso#10831). + idmap_rfc2307: Fix a crash after connection problem to DC; (bso#10837). + s3-winbindd: Do not use domain SID from LookupSids for Sids2UnixIDs call; (bso#10838). + s3: smb2cli: Query info return length check was reversed; (bso#10848). + registry: Don't leave dangling transactions; (bso#10860).- Update to 4.2.0rc2./sbin/ldconfig/sbin/ldconfiglibdcerpc-binding0libdcerpc0libndr-krb5pac0libndr-nbt0libndr-standard0libndr0libndr1libndr2libnetapi0libsamba-credentials0libsamba-credentials1libsamba-errors0libsamba-hostconfig0libsamba-passdb0libsamba-util0libsamdb0libsmbclient0libsmbconf0libsmbldap0libsmbldap2libtevent-util0libwbclient0s390zp37 1712055807  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstu4.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e62-150500.3.23.74.17.12+git.462.df636292e62-150500.3.23.74.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e624.17.12+git.462.df636292e62libdcerpc-binding.so.0libdcerpc-binding.so.0.0.1libdcerpc-server-core.so.0libdcerpc-server-core.so.0.0.1libdcerpc.so.0libdcerpc.so.0.0.1libndr-krb5pac.so.0libndr-krb5pac.so.0.0.1libndr-nbt.so.0libndr-nbt.so.0.0.1libndr-standard.so.0libndr-standard.so.0.0.1libndr.so.3libndr.so.3.0.0libnetapi.so.1libnetapi.so.1.0.0libsamba-credentials.so.1libsamba-credentials.so.1.0.0libsamba-errors.so.1libsamba-errors.so.1.0.0libsamba-hostconfig.so.0libsamba-hostconfig.so.0.0.1libsamba-passdb.so.0libsamba-passdb.so.0.28.0libsamba-util.so.0libsamba-util.so.0.0.1libsamdb.so.0libsamdb.so.0.0.1libsmbclient.so.0libsmbclient.so.0.7.0libsmbconf.so.0libsmbconf.so.0.0.1libsmbldap.so.2libsmbldap.so.2.1.0libtevent-util.so.0libtevent-util.so.0.0.1libwbclient.so.0libwbclient.so.0.15libCHARSET3-samba4.solibMESSAGING-SEND-samba4.solibMESSAGING-samba4.solibaddns-samba4.solibads-samba4.solibasn1util-samba4.solibauth-samba4.solibauthkrb5-samba4.solibcli-cldap-samba4.solibcli-ldap-common-samba4.solibcli-ldap-samba4.solibcli-nbt-samba4.solibcli-smb-common-samba4.solibcli-spoolss-samba4.solibcliauth-samba4.solibclidns-samba4.solibcluster-samba4.solibcmdline-contexts-samba4.solibcmdline-samba4.solibcommon-auth-samba4.solibdbwrap-samba4.solibdcerpc-pkt-auth-samba4.solibdcerpc-samba-samba4.solibdcerpc-samba4.solibevents-samba4.solibflag-mapping-samba4.solibgenrand-samba4.solibgensec-samba4.solibgpo-samba4.solibgse-samba4.solibhttp-samba4.solibinterfaces-samba4.solibiov-buf-samba4.solibkrb5samba-samba4.solibldbsamba-samba4.soliblibcli-lsa3-samba4.soliblibcli-netlogon3-samba4.soliblibsmb-samba4.solibmessages-dgm-samba4.solibmessages-util-samba4.solibmscat-samba4.solibmsghdr-samba4.solibmsrpc3-samba4.solibndr-samba-samba4.solibndr-samba4.solibnet-keytab-samba4.solibnetif-samba4.solibnpa-tstream-samba4.solibprinting-migrate-samba4.solibregistry-samba4.solibreplace-samba4.solibsamba-cluster-support-samba4.solibsamba-debug-samba4.solibsamba-modules-samba4.solibsamba-security-samba4.solibsamba-sockets-samba4.solibsamba3-util-samba4.solibsamdb-common-samba4.solibsecrets3-samba4.solibserver-id-db-samba4.solibserver-role-samba4.solibsmb-transport-samba4.solibsmbclient-raw-samba4.solibsmbd-base-samba4.solibsmbd-shim-samba4.solibsmbldaphelper-samba4.solibsocket-blocking-samba4.solibsys-rw-samba4.solibtalloc-report-printf-samba4.solibtdb-wrap-samba4.solibtime-basic-samba4.solibtrusts-util-samba4.solibutil-reg-samba4.solibutil-setid-samba4.solibutil-tdb-samba4.sopdbldapsam.sosmbpasswd.sotdbsam.so/usr/lib64//usr/lib64/samba//usr/lib64/samba/pdb/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:33120/SUSE_SLE-15-SP5_Update/9fb38d651a0568fadf222f60409c3f15-samba.SUSE_SLE-15-SP5_Updatedrpmxz5s390x-suse-linux  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=99b7b98fcc08bd9128e17ddb68793671fcc8d9ed, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=de9054ed7befb5c432d24df4dea56f125cfe5cae, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=94b792a810f1ebcf2ceea0e3fc61704ce11ca0b8, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=aa71ce82a2619701ee57c596770f9e2ebf9a5128, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=a6d0d9eeebdc93b38e9e26c9b44f5381107cddff, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=3ac7f837328cdb990c8ff05e3a360536ee0fba67, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=2dac6d4528f1f258ebde4c5fd887f5748485d8a0, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=528d42a41b93a1d2c014e0b2e579064da5f69565, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=6f3722a84c2ab8e9a74a8814f436e1e43eb38426, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=7edca474eaa282bf2de912bb9e01740426ab93af, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=474634c8ca61e178c75d68f83f5386383d417bb6, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=cbd60e1532774e09ca6f3973b6698c0739a1f351, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=cc2f6fdf4eb0087e13013893d963c15d3d087c3f, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=65471905e94899cdae60c986f84846eef56f7c05, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=e79c0cf99d180a45a78ce6d1c28ad72c5e15c8ae, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=2bcce5416a79b405d93f623c781792dbbee3d6dd, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=d673c45788de4b7a738d599c988fc3557a0a6ecb, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=25c65bed521a50b83ff1de1d67c8232c6a328d4d, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=3d9d948cdd854f6460aaf4b08f33baefeb4020d6, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=1b2ce320642af7e43082f5d08a55bd2ea33f99cb, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=53a36901cb411531797c3aef1de1ba8e2705c3e2, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=fbd31f8e00bb180f554a288f12b0d7a84227b9e0, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=232e024f3d3dc049de0e46ea7e7b348f4f87aa12, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=9d27205022ad68bacc2ea572c86bae6c8f531316, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=3cb2385824151543aeeb1445ec32360079921348, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=def20240647dccd561d1f70cc42bb3292efb2213, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=4284495a67a63ff3550aa15f019dbfd3e328d193, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=da32a6b84db4d471649c42ed7829c7c6ba045e3c, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=d67be82e6ba461274ae10cc39775334478c175eb, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=65c68bcc1fc37d1580c17a35d83cba82209333ef, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=3795c0f9fdeaaf27f6bdd6d9696a8a17edfde102, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=c99e7086c1102d91212edba12cf356169c58cc01, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=3e2f11fe8fcda6755f372058334bd8b7dcc379e2, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=34a5dd78bf98c5eaaaf4e2e9bd82b30ccf384230, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=2fd0101fea8141e222ab30520f9e946a1781e0d9, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=fbf276052c69d9a7c3656e46ed8620dd05527216, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=43e1d07c0f1a245f6dd77edb86d86fdcf8611475, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=a14760aa635ed70b90cc2cfdad121db6dccaf49b, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=52a1caef2ac21dca9ed4f0a9c22b83998454a309, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=694778aeaf89846a33ae73896052286c42946f77, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=57d21caa45362629e0baf93f0ff3f00deea29e25, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=7543f2cbe1e96609fab9cbdbed23c08adb989a73, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=4e6bf5bd90611c267b6426ec41e63f6f70b3af5a, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=093ed907caef66756458fe9eac7461bd97634256, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=ac07af331b0318ccdbb610d2a6dd81127bb28724, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=bc045e9d177e89fb52b811c23adb95f483659739, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=0e3a593290948864cab246a1d445a1fe8e41cddb, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=d683432928d0fb8289ef722bb189b06196c00697, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=157a038b04a5b111508a01ec5a725137e2f0d643, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=cf3a9bdd371682895b495cac510e36797c0b2e62, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=fff4e9fe068ff6ed27bed4b01e59713fef2842d0, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=fedd75b0e3d5d59768da95bf48e4f8327703501d, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=055ade0ffcc14d0e07095bb74a71161d27cf7f24, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=db1418cb8f3b392c9c9eba280aa74541ae95deda, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=9e58dd45aa315b48d638f5080ef6aaca7304b6e7, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=96a8239662a750cc09e479e831ce5c8bc9e372c1, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=f84aa52bb5ba00c19ce32ea3ab1c6ffb709c8e6d, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=5a21720ee863c36a61cd0e0ccf9ff26af1c5dcc5, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=3459e8abad1d6fd6ee6c63f53604e78999722e39, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=84345ae0850c95fe11c65a3654b08b47c4086a53, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=8b21eae4b3260aa57d17d30057d6d40f6a2ea33d, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=5f726b019f83bff56b26f10db1cb0a2ee7cb6b20, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=fa14c9760a7ea31a399d92fe4b20acb3b60c78d7, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=199776c48dc7e162a8fac89cde4f4cb6d9479ff5, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=3966b69ed5fb102a200a483e79e2b19186af924d, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=f7c11122b55c72e1ebae03f5d470baec81f3de1f, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=d7bbf15ec7066e443c296094d74b0ebd9aa9f8b4, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=a5ecc82e52e518d4966392c8d721e151aa8fdeef, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=617544154e87f2b3a890ffcbf7b6cc3f29553b58, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=1e3fdbd971cc902b5cd1944e9b0903fbf16e2e84, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=8a0abb6e8f401b2d152cacd1a4ba5a7f65b53a9c, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=5dcf3371c70ba2c35f2f93be292602d052d99bb4, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=022d75c5ea2e88fd6a931ff1e2482422bd9f7a18, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=98978282f90849b481a1e5b0ac7fa48452ce597d, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=28b62f84debe9ad6d219d8de66a8ff969ab6f1b0, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=c193af9061ad2befe7dd5c7523ac97dfd3693aa1, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=21f8a6d1e0b7ff0fdafe47d895e396fd2e262570, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=3d4b08dcc3bb4a5c81c360b6b29c93534380b8f2, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=487c42d66d033c0b6b65b66df174a4c274014c19, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=0fa275832164476ff804cdda42baa73019491323, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=c9e05653240774aa690c379a8e136caab8d0e886, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=9378d7e184c0eff1732506e97493e622d423c7c7, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=3b118c98f878eb0351ea2501345332c8c52d664c, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=cee72ffce2414c5ed9b70c448bb4fde68c283a68, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=dd3884ae1ed1c6405897c3d2eb96ef707cd08618, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=40e68ee204f0079b75254547a8cecc5ac32f11d2, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=3779fc11cd1c5669a37c31997158e0bc67c8b450, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=dc75a34cffdcac49673d7c1981bf4767711f1019, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=907104aa87cd66b48a04aadcc7a0992460397223, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=e6a6ad4a38f3d4c97ee963db77ae6f89d07806ce, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=dede8b5c8ac1f7291296507c076d0a162c0c2542, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=cd5ec6fcb27b660d995d5f9858383104e299c323, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=50700323812bc99d81942362e93a073c7d785646, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=a01f3b3b2686ce87295204fff96bdf54dc31bb76, strippeddirectoryELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=4fe933c8c5e077ec7af48527327be477da8a4cf9, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=f5badb9cc81aac413c83adf2bda699aba1d823ca, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=27be9d6778f97fd118bb9f53d3e85d0fc487de68, stripped"J>ox0}"/Bl!Kp"G`mu Ry2Ef)Hi   ) 8 N m  @   & / 3 < a |"(B5D1 F%1Me * <I*%4- %  ='>1!;#H!$*40/  %"P+P*RRRLRRRRRRRR&R'R#RRRRRRRRRRRRRRRKRRRRP4P3RLRBRRHRRRRRRRR#RRRR@RRRNRRRRAR?RRRRMRRRKRRRRRGRRP6P5RR-RRRDRRR)RBR'R#RRRRRRRR5RRRRRRRNRRLRR1RRRYRR@RRAR?RRRRR0RRRR4RRRRXRMRCRR(RRRRKR,RRRRP_P^RR#RRRRRRRRRRRRRRPbPaRRRR R#RRRRRRRRRRRPiPhRR#RRRRRRRRRRRRRRRRRPlPmPmPnPnPoPoPpPpPqPqPrPrPsPsPtPtPuPuPvPvPwPwPxPxPyPyPzPzP{P{P|P|P}P}P~PkRLRRRR'R#RRRRRRRRKRRPPRRR1RJRxRtRPRRRRRvRRRRRRRR#RRRRR5RRLRRRRRDRURRRRRuRRRRRRRRCRRRR4RsRRIRRwRRRTRRRKRR0RRRORPPR RLRrRRPRRR>RRRRcRRRWRgRR5RRR#R"RRaRRRqR=RRRRbRRRR R4RRKRR`R:RRVRORfRPPRRR#RRRRPPRLRRRRRRR#R R&RRRRPRRRRRRRKRRRRORPPPPPPPPPPPPPPPPPRLRRRRRRR RR5RRRRR RRRRR>RR#R'RRRRRRR RRRR4RRRR=RRR RRRRKRRRRRRRRPPRRRHRRRRLRRRR#R R'R!R&RR"RRRRRPRKRRRRRRRRRGRORRPPR9R5RLRWRRRRRRcRRR>R#RRrRR+RgRRRaRRRRRqRRRbRRRRRR*R4R=RRKR8R`RRVRfRRPPPPPPPPPPPPPPPPPPPPPPPPPRRRRRRRRRRRRtR'R&R#RRRDRR1RURLRRxRRRRRRwRsRRRRRRRTR0RCRRRRRRRKRRRRRPPRR RR]RRLRRHR|RRzRR RRRRRRRRRRRRRRR[RRRRRRRRRRRRRR>RRRRRR'R R"RR#R$R&RRRRRRRRRR{RRR=RRRRRRR\RRyRZRRRRRRR RRRRKRRReRRRRRdRGRRPPPPPPPRRLRRRRRRRR#RRRRKRRRRReRdRRRPPRRRRR#RRRRRRRPPPPPPPPPPPPPRHR&R"R#RRGRPPRRRLR#RRRRRKRRPPR RR|RzRLRRR#RRyR{RRKRRRRPPRLR|RRRzRRRRRRR@R#RRRRRRRRRR{RRRRRRR?RRRKRRRyRRRRPPRLRRRRRR7RRRRRRRWR#RR RRR6RRRKRRRRRRVRP PR R+RRLRR)RRRNRRRRR'R#R&RRaRRRRxRcRRURRRRRR(RwRRRRRRbR RRR*RRTRMRRRRRKRReRR`R:RRdRP P RLRRRR R#RRRRRKRRRP P RRLRvRRURRtRRR RRR#RRRRRRRRR RR=RRRRRRRRKRRRRORPPRRLRRRRRRRR#RRRRRRRRRKRRRRP!P RR>RRR#RRRR=RRP#P"RRRRRRP%P$RRRLRRRRRR#RRRRRRRRRRKRRRRP'P&RRRRR#RRRRRRRRRRRRRRRRRRRRP)P(RRRRLRRRRRRR R#RRRRRRRRR RRKRRRRRRP.P-RRRR#RR@RNRMR?RRRRP0P/RR#RRRRRR@RRRR?RRRRRRP2P1RRRR#RRRR@RRR?RRRRP9P8RRRRRRP;P:RRRRP=PRRRRRRRRRNRR#RRRRRRRRRRRxRDR@R1RRRRR?RwR=RRRTRRRRR4RRRRRMRCR RR0RRRKRRR;RRRRRPePdRRR#RR'R&RRRRRRRRRRRRRRRRRRRRRRRPgPfRRRRR#RRRRRRRRRRRRRRRRRRRRRRRRRRPPRRLRRRURRR#RRaRcRbRRRTRRKRRR`R:RPPRR[RRRR#RRRZRRRRRRPPRLRRRRRR#RRRRRRRRRRRRRRRRKRRRRPPRRRRRR#R RRRRDRRRRRR3RR2RRCRRRRRRRRRRRRRPPRRFRRRrRRRLRRRR'R#R&RR RRRgRRDRRRqRRERCRRRRRRKRRRRRRfRPPR#RRPPRRRRRRRR#RRRRRRRRRRPPRRRRHRRR R'R#RRRRRGRRRPPRRHRRRR#RRRRRGRRPPRLRRRR R#RRRRRRRRRRRRKRRPPRR]RLR[RRRRRRRRRR R#RRRRZRRRR\RRKRRRRPPRHRRR RLRRRR R&R#RRRRRRKRRRRGRRPPRLRRJRRRRRRRRRRR+RR#R RRiRjRoRhRgRRRRRRRRIRRRR*RRRRRRRRKRRRRRfRRPPR RRRRaRLRRRR'R#RRRR5RR>RRcRRRRRRRR=RRRbRRR R4RRRRRKRRRRR`R:RPPRRR RR#RRRRR RRRPPRRRRPPR]RRRRRRRR#RRRR\RRRPPRRLRRRPRRR#R5RRRRRRNRRRRRRRRR1RRRRRRRR0RRRMRRR4RRKRRRORRPPR RRRRRRRR RR'R"RR%R R#R&RRRR{R2RwRR=RRRRbRRyRRRRRRRRR\RRRRR RMRCRRTR0R4RRRRKRRRRRRRR;RsRR:RRRR RRORRPPRRPPRRRR#RR'RRRRRRRRRRRRRRRRReRPPRRPPR]R#RR\RPPR#RRRRPPRRRR'R#RRRRRRRPPR#RRPPRLRRR#RRRR RRRRR@RRRRRRRR R?RRRRKRRRPPRR#RRRRRPPRRPPRR#RRRRRRRRRLRRR#R'RRR5RRRRRRRRRRRR4RRRRRRRKRRRRReRdRRRLRRRRRRRRR#R R"RRRRRRRKRRRRRRRRLRRRRRR#R'RR RRRRRRRR>RR=RRRRR RRRKRRRRRR@Tg%WZ utf-8d8d6149d28c3fa01591e264b7ba16e6980da3fb7fbbadec5ca241cc0eaeab1b7?7zXZ !t/ ]"k%~2_e#ȄjkElnCӕdueY5SdC"I!GEid>ĝ@98 +pKb N9$Z$:s("kdzYXB-+vfѿ_ޢ*|?=U^?5/ {r@r O6x|"[װ+*Ǔ3s?A{bM]d4!(|uEUI+/\ÆһjoAElP|CK>̜Jbm^K. ^AwLPʊ/ENA豙OADxG ø1FAтf|Bao8WXRgm^ z1a2 [7(A7vrC0c^DLu诲p2{/¾ޕu!l[|cJi+Rm6 0e}4w <ߚ]AͥR\J@7 6a\C8DZeV=gj%@(b(wD+L^HO]\Pnx&~{|ϞF&l*Y^- tms -'th}n-o^N[å#?7]YoRwgǾï顏$ɣd Dz,bܞ*i)?9ly_HvNӕZ*8Sf%nj TضzA[b&官C Z+Q0.l]9`Kq"Ṏ3(S7 JOawxL]jrJCoQ`A2|^1Kzpwb4&aܜ :pUs/^82Advp4E{EB_t5:''Kۨ6xvca:`9~c$>Gd/o/#L}_S#آ\](8_mPP1|b2 h&ܶm,n8n[rsT{Upr(84QO\R/5VY`{zWP+k4? N{/NNu5v')joN{2sfSpϢQ!16L_7nMgVLf ""(M{b7^os>kIgkzd{X%tL7 |*X7]l\a.iڊFaqe{k"B Eg:eQv /B%sC$ϩMB-lncR&0蕟d~ɀKO2G62gaRBSƳ%c% }vEY&xaq-YAЦ-x"Mko(q I)&LAS0>{')e"2Dnnۛ%I]B@#c߿LP 6ebOQ읷cx1n'/[H+RU<dɋJ7n<% Zզ(Z)t-e?s,M&>NէoB\v[j"4I3PVwa3/ tDљ#"U!p%ys#;7LsuqO_]ʆUc3Z_Di!h )0 QCKzi ߒ{< nRvC *%W~@F:kGuv@SK7o3G<*\jNOZ8}\ht=e%[d񲀪bhcc4"Q]ndĠs$`(4F|S_8R(FZr{[M7w1*ٔ;gI/(ъ6(#c~(}N]Zd6>A#bU7px-3J)1Tay͗Xb0.}PԒ`57'kNl;HoKۆfԩ|T|glD: ?V_UFYe[s* EQ7?Y!7sS0o4Eqѣ FYvfrox҉/ݟĐIFö՚\gY 5&xi~~Z3joТGyMyGl`Sʨe ^\O9K<84~E&,+q-!(K~O$Au5)(hH4;:ͧ]1~2>o. e'>b+χE#X+fߔzzk۟dXu)jrzJZ<(f ԸA`yK]+qH2Yz??&7v4A{t4\z^( , Zm2섍 Jw݄eL!R8\%wSIﲟi)w>(`p{%*t:;,޹ٝjaC?Or.Ka@coeaaCsET&4UP p gi & 6TՋ FB/k0V(fE3^[937b ^z[j/B,Q[m Z}]F9ngߎq0}3p(wڿ~ y e7;")m15x6Zm;OimWWu a"\. 5ڽ<˛3]lG 3 6X ͵i*{~h CbƩMF MR.~NCP-\W_==J3r1X=LeQx2I͢{-K,4 '?M@R[tI?"X:5$#\+}V⍃*3o3]#ȗmv"-EÕ]IW[AQ9]s4PT%VuQ#,Ƃ A_^>I&F^@eC/bXk8SR ceE}zڡ)BM~' C-o݁[0,X# r\<p1TS;¦2ѕ_$al"0ZNb98ZˁOO'#ۥ<=(pdB`s);VAL~WD=(WXpBf兴%^ћYSldZ]r!w)9A> 5g<[z/YD)e]Y]n'-J%IMURZ'ޏgp zFɖ;'1ʠXqV|ݦ{>ooRc rr S.-VDhZ}̸+;hjS*Q`y gI#=(CAZz?oDI=Xxl,Z>~%YA`)č(+Jzzm]#k^`!wO~S3Ԧ'J`~7MI.*@c&؟˩3S:)׈հl|+qNu+:?7Nxy/j]AS=x-`g~vVI%O3 ,=Td6AȫW-k<`SBe H /$^Lܠ&ǿb  4+p24iSStbq@5sۂlHB06" e̺\1E83oqEOΩ,y-OO08{+5;BB7)c`XX{9 )!Bmɒ Q4h.%o|O k$Sū J=eC1Zv!#* Ǒ(]xKz8Sɾ^M]MxժES(RU$C@# `Hҥ5O)TjtpעiHjL/'_90<snx3s?ޠx.Z.L(F {L؏@ˌ:,TR)m|t{F/ { = 0O檉Uo &׵Rȥ ,n<':.alw@ ZaTI)UǦtt"ݙ;ECE5h MwFǨ#Ҏ4 y'mY#Exj~ .O%^iEh9^@ I2Jo+jڽv};WraϕsUbFni`_ 5[$xm9M=fTNS38<Ƨw@3sLXl8!CbB!`K6P BCFC`8 xgTA~!m6LU8C8>lrs+qGXaJ#IGModNzڿp:򲑔' J傞q>:*_ C<Bh7v\Ɵ=^C"nSJ s+[kbĘq{v3eI,+ ]TXƠFO4Ƌiw"m M4CxELE}YOyKmOD])~yk"/%|KKZ>selfpZ}} _R[SK,mO7p02_n15BprIQo!O8`L`.p 8v] dT P_4F33s]]6>NieÍ3TM.V"7jѐ33#'>> 4kgC6s;eiKj){i-cms6A􉔻\Ҽ=Vjc* 4hʭ3غ>pZN=@Pe5>B$L[}W+p3d_TlJIy.YC. ,W@ 6Ճ9 Td=p&ܕ5fR7:7sݡ0D=ͽP/ԥc5Maӗ)n؄ g \:qb?"QpDP}-y7>*~X~ĢQ}ѝbȋ֤p0bM82wAm-W20f×m*js.h-xPmgec+_OJ'˾9\ri25w 4mikOXA~ò۫kx_(yƷC+kB8Qa\q9pؽH.6cRcnmՈ 1v@{s p 6?*)7"*yZVݰ~]Cݶgc_)?"Rwh`2 *N[d2s-!ee F !a17+"4lo^f{\㶵],ꤗ9t:˅#ޤ')h _!DT_fA.Xa9dϩd6rJ \Orct*8]1)[r)xg+^🈣RTCfGģ(42o5Ig;EIEi2h|Ƨ]|KW]ƞh??Qŏ6N&qfkc`,C9lJr+?8W{Su"RWF&G0 VgۀY#OP0A0_{GW^y?D_8y3P¢]Euݒt['?ȥ~?f'E[O*⩡0gI{qVs4#?mR؃ذ9u,X5 AJ\;Ɍ6eTX]ھrA@uRM/1č%(n U,a`ȧ&k2d&H"Ir]Hy0є.v#t\|麁1=Z&G$H^te$r>;Y1Jpt,c3FN蟎_$A]!>9+F7~B݉ IBEWYL{Q^PfSD'C^|Ri_ xi|sAfXy4}I[$ݝm,"(T<%uKfрr2 fC\J"j"lв~Rm2F0P刂߻@ y;P4uuD-K1mZŊV|Yk\jR]%:gAD\kӞV0(yL-/R=adFчڠq,.&U^<Go @/]Bd3`=BTCnzS1E"W53 qca$G#EF+nEZ^8y%3s0) .M5t=DVT%f/U^n})#ӻycwoPlQr# }[йwZn޶$#J%kRصj25 t1FISmƔ:?osKo>6(7}X/MĒH/Ͼ@S,fݯETy J&Jh2qa !s*~hJrWf6%" a yHaLj'/_EDg)PPISUq ͮ E{Xą7%^k,]R bku{.&2=G-FdL,s+ԫ2j^K\,7Z)s.6~Ji avkrr_Q :h~Շ#=E$KZ0+ hVng9 0>(Ӹ0+mQ#0#hnpn:jq) {7&ІaRiH Kn#;BN1R m?X\<•55*pd_Zq$H9Qnm*aa25G72j$lH_l(VQ\g/3Jd)~BǢS޾01.pJI+=K6*S-k*w~]c]sX%ݬ]-HWM`w2cl]p7T6 (Rg ]OWlGmb$ ؞v)UA\ Sjxo; ),D}ߛ,·j A㧭"G:z8L&M?q"e#ֲ sULq`(LD ts-$Ϻ$ZI<83; gLJ\xE.HaZ,lQisZ@Is*bq&p˦E̬N/+qJ9ij GQ1$^ u "a}|dWX8SJQ@$}L =@R;e82[nЍh-T/ӭ}?& +&|jfwOu #%\YYw-^L(S4^wnOUgid[1vŎQH_&5ה}57SOsz+ PK-aސnя/Y+9n]Zb[rHY*n"d5]yˍP'cƾ(!\1yTkr<- 2!W #I.=ff*H`D:pZ&Sڦ%M~E4WUb%rsJ'Nqi[){|V g_~0_bb^ }5*X=bz/H %-㘈L#-VRĜq7h5TދQȀzwG"|7s*,0i(ߖWB.b"I-rjm1ڀQfFvC(  ACFVr@]C߽cLdB@v{YB)dzEmK Ȼ=Pt1&/.NvƎ褿7dS 77 #h_zKrpU?1j1 P/yQCDBRr7r|x4P>"w˛.<YH\q9DTgE?r%H4D"Խ"_M&פfIzfIF3bc5`AZ kyϻkbdYFƍ5%rUYUZuI-TWs m¬o]kqB0!/|ΪO9`5"ZZRPp~hOX1XzL!(M?kLe!ndP[;ڙ6wŷ s+4 buϤ#r !w",Fӱ(KMH I ۉy]߱ h\x㼝AHtR:Cj=KJH$V6%*T3&Z'!m[; h:0odwUodzb~y9Fh5AZ6TJ0 nש`^.A3BPd_5mz \; G 48CŘUMdcfFۦ9>em7@\qo@;=*<dD-ĸFGk!EXkg;^ al샄s!d +@;ƭ^CpIg%!=۲F"v ߢ5i0/f<ع6=&RD#Ppdȱޕ3wׄGaZ˃yI;e]_-:\C&r5$DsV ']E3( Fܩ 6zدOKiiYVaN# $%,6+-eN`+ )P٨Sŵ;W@߄:jq`gAEt?ꄥ^JV[}yB™[nA?HΦjUN1EW3pz>oy(A9"8}WU$Z}O_sC$Eo@&@pX5'JB / F \j<ܭrj=:^Mmd o\o\ L5X)W?ĩ0 Bwצuए6-6=)XAl6ǀ~_Uuٗ i/,Ʒ3e5%rk!/@(PD&?}H(i#֒$V!  FJN-@l^80mO{IV cgO~3ԞްJ`,U -0ڳ~]7%NzT0E*v@*ERnQN86La~FN7%'Ȼ*;BQdOZ'p\ׅ‰Q9(Mad~iq o96Nbltp4\1ex:LM4<@QH5iŶQ:uٰg+vDCǘj NStzi:/15'ٲu,:p:sC>"T .s"81Mu P-*0|{4PCŦkP\: r cr"OnDI߶r/r @ݣY83[R*gHݿޘ)wWs~k>c>G WTVÌp(/pf05d`~H/ɻTpi.) c Z#@HT'K׬w)9 "yH藓Dx#'.=,|8fO2;] qGg/`Kw=L<0xڍnAaY'BvR $h6n*w? 5C{3+6aeqOsK* +ԻAzP(߼npD%} zGP~hB2>tL/6Ԡ6QqOcނ^"!LBQ{Sl&hy=V甧Y܌8W TPb.7skD%y|I11Q?aLV2}D`cXy } J>bdlPbCzֿ5ujB=$"0<ɜۦ(U]t,juy 1MEG*=Ppa,C0L:TF!1},=;m[ /VEgMzYGY0o@ZUX|$_5"CD\W"4!_&]Vdz*wƣ88tU:%C;bl;Lf(yYEhuĉ IR %ڰNR 2q5xO9eQN }l0a<-O xmdx Rsm "6jH`a`85 -ȷ?n ]WuG%"UКjޢN\LԦ%az.A地MeӉP,kz`Ft鲋!:B85b"5:a{eE f3IBymC*: %$+}x˖2AdN$+ReN`x6tPC'H6J62tx! A5-ˁ un&T$WAQw٥3g>Y.Mh2LXK#)H-Y-6xbѶC5W<ܐ[Xj; A΍ڱHE.6zۮ6̓іGR<@pNo</2K)#ƱCp ]ѕ摻+c_($v{Q'=}x&2Cd D$ ɮ#h ` 6 -.伅d lR#@{U_MGP 0k.i:z1U7rLRnbgx=[:t&& 0t ϓ<+]#x { 濭x`tuje =w - "=D5ٶ aß,m*.sO<,"r`$FXbh-X,WOq+8,vl]xD׺ik k[; i$6"^V$pQ|2Fey6YJP}OEٱ}%1mR_ed'cD~vN%Ѳ_صD=.O@F*`/ t?d%3OYiڂZ|J1K"dl42$lП1Rx*VƼ[ie]֞ +}wH]Jָhi^T~}|{[BŸ߆ތ8`M,`i=u)N-l^| b#DG5E/y_*D3Bde/xg̭@-䭭R2Pwu%?t&"$K5e0!+W%t#&ўzqz el>k$*ߌ!:l( :p8'%OdgEr{C:Δ6gE;UPT]h[C5|@e3x%ZI8@Ԗ^97&NbE0_FPOr93p.&k]㩼S+h6J,!R4#nWT3"x[g54嫩Š\yf}a%F2GA֕S Ƶ>d 3uCLlWJ*0yC'Ptd9P}󅱰2ΟEӨ#, rYF"LJh~(#3$X1o %aB!ТDBQZlY:;u%HS=wdT|ITrN8+5ۼM$Yk9at~ fh  Oe_LlCi T*\レg?L! ".Q~?'n8^IP=% ?jCSLo>Nbr7Ǜ[.4V M ^`y]Ѻ&@l#A}9y$ASCvֿ}Tؠ/|,`*Hpxmw㥐0C ^OءfqF[ 5 ȮE0*cr7IůZwT0 jlbb3Z  chAm5@Kp(c>/zz,=š6<*Qń~<=7Qbr. (N&Ka)0)g<0Uf`,.YfD0tf$}r-',B7^D& I·i,yEΘRC`RrJKSbq c6+Q{*rb&uZyPrs>b&2əK|.o ]hZcox"a,c$svIϾ'WtSUKwp+ZEI]YnP~3e3^6DDhRēuiֺsQt^NȠt iͷQ?e"Le;l&;N~I(@9 p.t7u*L-XMQsgt, =+e>Lsx(%ki3s/4 ^!T؆Y?#sSLA;> `pmaq0WMPs5Q$ʤeH'z'nPqF5ui `?Hғtܲ~G1Ii'8e_T *]_ж,^%9(lݩj-!Xp`!u{ؽ z:t}NlPΏ7,8D&))X `8qγnKƬMc_LK{ANfv6$vHUziE~Gb%45_ݹ]1UآNy (+!%x*ߝ'K+sK0su8u Q+@45# ! CPsfbkYQ\+i4ϯ.\0]зL$-Q8W0D:q+rE_`Tg]g.r{Po*X5PFMr*怷yQ<ȞoץU7 ;Q%rWnˑgP6N6_ŗfb>$DԲLmɰ.^d*G6vZ(xAM{]=c4EJ(q)ڦk@٤onTCe5_">ahD_$!:{ :6.9CmmJyìXࣸb: sŇs3|&LKE7kh {Wb =Д̋/R \m!ƑYz-1ެdw֝6iX z)|}0Q; u?EECW!+5ˍeGtG[ HbEVȬ+@o?NOO}MRIwZ܉2ĖN:F:X֞!.{Z:S\hэhJF2_মvU=7@+5tq nE?Iqo B)j'Uznj;֘H~}YH]JHâr[[>,H-cōOt%la[eo%=3cEsҦalޔс|R?ʰDž*Y`A l#Eu>I% Ck)_7_OfQU~^px @%_X1ƧoՖ\[x(3lg(ɤZA^Cv:ex;V6ȢUHŁ\ !C_!F3MJ3<:W m鄍WJC" D`lG" ϙdlBZ*0̵-* U!՞>(7Dzu)&b| o1mF_ñMdd!ʕR | t6Xǫ:RI?hiݝ X0Z}`2Kc$ٖ{gt9I;`~{ ,.iPa:jp-?{3 ?__ǻHKT:IRHyN@6.Z SՍܑ1i#'@#2_#/ 4ۭ͂}b?y@L~UO \ԛ&Rj,~|kL7Qa6]-ֲ\DRW ߤaj4Fy5Z|n@ƤEuHA<ͫTت?+n\`{CCAy"fE,QNܪ&jZ`2l76FTouaE&6 4ݨObԬi*zҢ+T"PKrԭ^1#ީWz(3up}K)uĚŞ;<3m-Mpim0 @.vbtX@6݆"8FQ}k>$5?Y+_hZr^dhW@I|xPΕ˛g.ƞ*]faݬjOХt^ڍuq[x. pAv ڻx61O }rkTy1M8(to4m :τ[9P'c1 )U<;@ (T ]I{oZ`Vv O& y. hrb Og݇]P&6p{_55=HZNP̻ߡu@O:) 6`i (Lg YShyve`X t ^ߺذY5`#w) YTgOv'rFwk}P˽⚶<HMJ%ӟz=:|aW/gwz'F](n_YKCu6zW .79Pj|W9^J͝-s@m+rЪ*>+"vv5N#H {j# GY 0K)A&@;0TK@&0)P,V缯Շl$xZ#-;%*t !yt&5ܙ?h3-ḵ ʣHdrX+SFpqɢe6庰#ST*kYPW[LټG2m_)A#p&S/A>cpzzFȡ⚱{6vOo(koI;AfBACEllJa]*rESanjy j'&3X=06/Sk?p{Xp&o&+*Qd$J-U sϮJ%6w+ Ѭ{Ps;6WװjJj*+k0غxs"޽8h yHHrpbg.G6x&t}XE`#ݳ3=#/a6( XtǹX:%S?+AIHfXQNaĨtɇSxqX}Hc)RUbX~gATR <戚z2疘{(xZ\DJSѕw11ڒr .kWmЂ i]_2'jb܈"Ѳz٭TTzBJe,5GoYMpQ+#Վ +mAHb(ƺ؏%Sɐ8Zi iD3tYB4.$Te3Ʃ3q^7| ~t3!5#~b,b6@Hm*cY*Y:H=];j & N[eh~e0#ս9&QUB6A%e暺a my$Mnn(9a2J( A|ZR`ڷR?;EMEdpXn'ƸőȋrH$u20rp 07M1l񚕇8B:0YOExN!zLDKr΍v1Е⨝m+bi&Ly䛒viW xvW2/B*g|# i<&'f^htzٍCe~q>Glf&onY+(HTl`QlCW3m2)(nv/D|VڊRX f+$'[^Dŗ\?:t/FPX3ҹPiM_q1܍*`=7y)D@!JZjY_g7[|R4DsTw^.a1YH`Ƶ,IMԲBm^/ lO7X;!gEY9Zr j+= ^Ҽ^E {7}ht T^\k1#?"d/} rJ頍?m,Yt:ڠY}7٩]Tp|d#S^ll 4m[S+eʖ>+2qAj(q]n̎oU+X1f < J+.mJcN$x:D %܋3q;8q1W >?nr%TBmf́ eW5_P᣶ň'K^ʄ6ݭPRĕ+(R20!Ϸp,IZ{p"@\Mb}bӮa-(xRj=-u>?Qo N2:m*T r(^Z'- 13@åф[+xkɿx`nI~  BpuhU$ӛV|Eh+(w5e/m&/#N D&Io2Ү,| sBZΤlHO="3q3ئGKn[1 !2IJG!H JdF|m~ɚ¶y]Qjkfs]c^T2Zza\?3Z *1Te pSz[`oR\>H%0{҈af.VܕZ9;n# AɉI?PdB W}E^* Bbb}j7k6Pr_ٽLφ3&OGR oDxCajЂ1q%&ʫko{~v,(o3E <)onwmڻbӥt!G< 1]VPyT5B6-!WkփT!(#D2+Nch~pN6"LMuL|&̈c;*Dq-Tjk05gj-tWIeUJ"uWɟF|31qo4\"C.b[E"V=zXf0d%e*о'|T;!0Cap=@2s=;~Funw2Qi)֫oJa[?SS(gh$.Qe/?O[Qhܷ1~)9Qczȩdiˠ~G{ժeآ7Z8d"6JaLf4C.'PK Tw5;Evv[$.C(RxXՑ&{7K0O|)ie$t{X;ŝ!, )V\v,v6эVJebPw^}%8yrK,gA!SgW{W/jp]'rn+-Rc@NnNBNJx;P&z̊rZY"'GPm:F1õtkUɔQEolvItZ )ҀI!pyznM R9.M1,𵲭!k *ԥl(Cg.8 xm^W,*uj@,[/B4o g˶7\vPnzs]q<2|O4)b'{{ rqN@ Wh?{HWh7zkoa(J Aqƪ.z-l,*d}Wm{H,o[%5"Foͧ66`H؊ێ 1+ eϘG;*2OV\:SDʽ'tY h$9NџNu{M4NRmsH\ˤ",>$Ήf^܂jpGޗ^Z/6$Z{yqC Ǩs C8~LkgrsnWTr5oa9Juc.BޭB@kn߹93&Z9}5_ ª.<ڵ]_!<obiZ!$yr0$}AVQ':!Kմ{Wo>7A;?by =cYpz87]GMݎ_S*4\N~1hQ vzc j9:\I0( \L`+ ;\~I$D SGpxb7Om*,}gZZ{&-x$EE> #+4鬚5ۤT:4Z2eAGuWD*<}TqpLk񎮲^%x(h!4U.o;yoXlG"{%`U}+.s;;s,{ )vfFy:L*ޤb -N_6\Bny#s]{*| !Ew}x܊Rcu_DŽa.Us|JPLwŽ줽T sݝuU~8mXׂ(4Y6hĒkxd`.{K],wĵc"ُ2Θ=Zg6iO9\[h&UI  [D +0#rt2_u+f'q`I/TiѺe͍-/eWzUgؚcZ_B;4C^s9=2zi-W(lSyMO$̗YAh9k9tR :XKFAN5A!Y _Vyj2ƫ>>hb~[v?>>dgv|i[}hX6r,r am{%ԧjCqS7S~phQ~i$kD 3-jGouK-k_k;w) sRy#ZawY\8(\6@pגt~>2[hZ歑Gxf`aLkH/J4 >^hrDIMHϙN?50f;y,i:}MY.v:M4sXM`_TsAg{< BStEsr*-FJZ$_U!+Ж t>9eqmF0K3ts=%%<:Ǚ|Mi|@,OK`x ]XXhApCxwV_cĂT(R_ ;nN,0P``f0)nit~  ̾ƒH|5=I%yn{Pβș|q?K\8/J,2eu8qeR0j[bu5 ϳ[ޓ*rhDxG0#Hpq>ctFxNx%k!_@uJP.3uϺd<,dUL05m|I*M`7fpM:wmofu~i\6T~]OƎvr0 IsEO]PCIڽ;%[C uw4xSk13vFR:6 (AԟV)(-<\PՐ 7SBW>Oe:~&G;zd_:lv>VܗP:$kUŎHDroSCEHW&?1%7Y&B|i"~Uvc!l*?ӾQxg@61vh⨐H n۾ h鎉>T)>-=&ER蹇ky\;N8,@CJ͟\g(3(|0bvWL-L ::B XמHFOғIf41w[xᡟ (R u-=Y"T`E+oL7 ajוJnc_CPVE^Qb2mt˺Rc⾎nzvS!$8.O~WfH3\O}`X.wR=@G祭-;k bӲwʿiPtxfƋ=u;bGP c) ++J~մ ~p $4+hf¯_ XڷGtk߻;ABlUפ9|͈M7J3|5 H~Z\iD?vΈ<3[KT/^ T*zpg)'2b_|&*I~rj~*c3vx){mi?@C{E ~wQ|&_GUQn]Ow&$X}|i*V e^Gū=v]H#=N|FO5gfjmZm2ҁeh4z00l ~~OHOdMPĪb)'/a[﮻щX#ޝ^.*A?:&KrIr?%#YMN"LIxi#&l[_no:qܓ0d: hB͢b1t bt`3 bI+YK$h8(kvhe4TQB{ 9 J=N"VsUKReep$"Q0i8pffZBò)!|pnaeBQ)Ax3<B8me|2-&̫% Uͦ wΤh У #-*7\~;ݏgߥ`'/ UBɔJU~3_oU'zi$zcV;–K$`ԑT#3⨐O!.un~hf&YYK:?$JJElC1XXt[{="U Q:fCޞ?u)v?u 0wZ7-] ٣ێ;9J}jeHYa6ձȋZMcp؋$R7R92Լ5j%- Bw_ܹ&H&])PL3bu6TZ 8 Mz}I}FzPZ1ޖ/JTA/zn\ ] hl~$]H4CY7 }yξV$'{P7'@Mb@B}\()7Eca=#YX`Z G>z\#J6 &&uY0GkWPmJ@A .thT~fn=^ Ѱ.KyI&kr ~Vb\ ( ] %UV $-$J&^t^߂@}bph@8`;i>wņq`9NJBZ. AnI#HSan/RK Iz!t =-=mm(0 LvHM9\j e ɍVhI)ocX!2U WK'' (Ŭw%x^9_:ET\1ɟY緆d7(6lz,4 L\#D6{+Y)èlS`;XKٱta_6Lܬ=azt>񷍛0gmhV=12xKx ɪ|7d޴Kz= <:$px[<4z6{޾CuȦ i V%@*UR hqA޼Q37߈f[vJ~.Tx!0]lk4P{ezj;:IGScKo*f،_?| V)F[-/P31<jbY؃68DCrtYД\C.]ݨBӆ4 +ʫ ?@]jq%V_ 4jīq]$fc/*5ƽm/C Riеma hL*F$i{E)#C٭DPݛJ˗th;-BB#J.huuS'-+11x8C)uRxmk~xl?V{y⾅Tn_kt[CtT[.{Cl,2ob6:,tx(\̊N'q`o<٧I#hk36"*AG* Jpu?8GL /P% {- <աB(gc~l&ez&/P ]_8;̿4Kj\{P/9Cpx?u9lVCc 翩a!>a(VO?F@q[ VwN,/GW捰ahYoyOuW9/Njda6ʒ1Zb!ςi1?2xyQO"lѼy6Z\A5 Vpݪ?)@4s %:k7*Z7HUHً;Bb1ӃG<3^fwqVחLSY}7c$=$qKft:M{?r$oaO58kҔ1(6Y4.ÚIj,Kvl_#$ٟ)-`cmqGV&ȣ!ȅ" 3n7*e-mݲtZ1z߶,:}Śt!dIaJ;?){ 8tߒYt/*8 _-"hƒN,8'qnI~֑` Ιq(֛y{Y%I=~6an}m]v~zvpBkaTqÌ,K~ogyزJf2Q[ءGw9Y 18=( dү)4K1\(WH29Tz!Rq 鲙&M>MJۓ s#AݮNđ AV!%T/]>7ts6`_XJ x{2 <Sʸwxi<3Lf2K&cNB|R1\=Uo?D@DPشg@ԦB߬.a>=0ٞb6RեXh&y”q\GSZqÔ!lj9IQ&Jm3!GdT|b*)]s8<-8 X+bk"@N4_#|㌅[vRD vbrav qs27Lqv[\˳[J4$+Iǎxe%cL!-H`.6i s^s9xJNr)!1ݏc(̗z'dtC}/QͧD,&@Ǟ'*8)F<ƴ&İ3 Ҝ̅w\x^#gCӀ~J ׃h'P V:<-ydkEMr /nqs$Wޕ O_?5>ҼТв _Nf?|C[PSCb&7Gз0~Az(,xxh!2SҔRozgOƜi[i ͨ 1\ 10yQjPO3;rc&76DrC KN M19QIQuWB J|^x@5 Ƕ68yږn gG h45JCL~"a׈o.5M%DJOWcIX"M1x3:^`k5&$` 2v̘ p*o朲;Zg.DkI吝W >QK:E};(&1*jN>4h<1+UYBEwPfKAdedB?B"ˆTmzJ:QE@H(c狩$vunw;m*a72-EpqQ|&U&"E~:O`^ɐـzƒDSeg7sGFVJ 8*eD"︶mj+@嚞ecDf_E3zw#|{oRYnN4 ARHDsrX- *ŜS˖2˻࣏+++﹁=l C0?fFt` #>fL44rŨcqqO'U_ EA\[jrv'Eճj^1݅$ %sByQbL#b&1fd409W8nZѦ{H-V.x4IIuW^ ㏠lC a2yzpƢxSbĊE=c],ܞ!C =x-Y?Ra}+lAUʨ;OQxkF'k\lKifg՜2XF*Pe-`˺ '65ɛ⤑6JѼBLІ#[`¿sųQ߼AX7?"&rVtZ|X(P92%rbz3=S_)] J3CwQ}6'|L(wya vJ+ \6`kS$M_8S2 |.l Se>#9(aO2-G HxiuUK -?x:Φix"Y6dXz|)+=dn99q 3.mi? gw:J8V4V)hi M%#ARtЭa殁0iXjl#%Yj@?:vUNcJ:@>Lܸ5 "{p^wQeHr̓"]xD}m8B6IE7{<.NAZJ ;7oFU~m¢JV\ZUM >-@k)ry }L Ts0;-"TܲxH):ϛڭj_5a/nӗq麻Y%'W عYQAW&?t.$k#'a]uxNn)ҞN:Bj r/0g.F)5DcT"^/ nV]`c_}>uwQmL̑g(=V 34l!)L. Fk8g:8vbcF1fs~(uLZՐ-!,hS5ΰ{l)y񘠨4R>z25ˡyjwPEŀ[3"bCpU+3{,R"~%'Veq R}/m_fA(VqC^T8 '|'ufFMa"myev>> L7+Z*G;VJl~^˪{`YMsH|غ_VPE8 rZͯYT_w=)ɜ ]P?b}4sx *[eQu""<.7+Z]"Tp᣻9,uT-5-fPjF[ptul}%./uIft~:)lkjL`{zlR p|`mzNtto?Kث= ta6Yöi#bqI {VD_R9](7z^V+A*۴y$Nq?ǒ/`dty $wK M!bES`SkX >VyQק(^,GQlo c!k&AA{(aW=š1 ?=g 5kxÌ$ .lOf,{w!oNz-Q^54?k n_y`.iZcPH)<6Afjae4S2~l8f|-VmY{wT9(K?19 D`>|{ ?Ʋ#& K<%M\mK,uVUH~gLu$5K[_1g&ǧwMiƉ #E#cl3?X;op( =w#.L7cv୘Ȇķ r if&>RLRiȚ.owd{rқ> hfbX\\%i6-S_-ddgu=n)Cd+ǫa0icM6[攜mz:نv8M>M'+B+X`A[V-cq}Ǥ;qϹ$IJ1sk h#<7ưEW|[9qy6,%_W>*=/WR Bv6e.:*Xmv.FF1ҕS4eXk{Roҧf_w :b_LCwʊv|*%715Yig:OmT @goȲj<][jKwQePMh[Qa`VR mr};thq6{bڊM_6 N:Uڧݍr99̇ CQߏxT KٵmL  ? pgONbڷ7;Ͷxǿ,k&ˊEq)4?z ;V~Va3 Gm`;јq&(}7dab$5^ 0-gp hF6doMmDےM5uƸ̬GR~y d &ԣ G{n-TXJ*^Y/F AHutJ!Ne8< 竞r/o}X olK ?H0l751CX8ט13}AL-$pL’Z~^+V3*<^`YcVZD+'QD6 !ʔ_'}6z%[TuhgɌrX9(tu": &C[)L?뫯R1@6hJFGUF/9A;=뻧Xw?nw ^b\BAL0j.)>ߓᆶ7X~4R8"Au@X0Lb+!ncrG}G;`}{%1<4vݺ_3_Fӭr$1wPGOFITDπ*%7 6\ǡTS=k͛%?-ãt䰴QS"̴#Hs~7i(l?W@#tkBl9 2C Hഷ !kL-¦m4f|)<+"ѕME(1@ǀ5)ueQ9 MS]Ӝ#6<>R;ؒfHK@DF+*I NhX)Vk+*Ƒ_c>z1ҡ»:/\ h45L K4Doe`lj^KjDXmG|ܽWxȡ|B,W;qaam }@gϡV7b;$c\!e<?K xU>C𽄩NKM0wtNJϱ>7H[Jq$lÄЎQ3[8«Z-+w&ޟ6t2kC5uICCΨqVoCo&-1'rXgpJN6Xm{Je :pM!qc[svVwQ 14?ͽD4cZY SJơVNPbek.Ljrbkz0q{fITY{ߴRuP`f'zjp sRbXxtfD༈#0~[ ê;$t4&/),9CT uG xNJ9 )9a$:x[D9P[j)5hcv4b)ڶFHtvtYy[ЋSeQݔ<ːD™[5 ~EgT6U\eޥR!i$ Ry;7X*Gǣ5ȁ¥A?)kޒuX`Z5܄?m эQw<==Rx%0REeh 5'Fp: @IՓyr?Zy5\H!(8^\s] ɲAL+(+ X2Nhh{H^ʳ3!{ZTS)ï c~ĤU񈌤hү3؜y0rQ T2 g]0lhU\`tLcgnpt Isig:B?"^l759/"mi4,1/` ,CkR0pFdKmI0;2!dHB7m"\6rj8Wf;72zDõ8PP%04Gɇj1i.zQBnDW W n_!b8טGªU`>Fsiԫ#ƹĊMMu[xǵm@㏏.ȹO,v?LFm4 ȟ9Gn TD9kT{Xz5 Dy\f6*iM"y[׫O]xv9,ׅs(kݯ^.l% *``Ô 549"{FoJRB#^Fu:*u2LoXD-4ɶq3haZ`9.Ҡ!rXr`f6aۺ&X!nHͺD`C-&ݵJ &`|1>hdrxq06F'as#n FIgSz9lpQWIZ,玁?D %[\эuv,[Z4EK#EngGG&6 =)i&S>4p~=wY@O.h$/J[j~+NH:uytwrEO|5M%6 ,._fz^-M샕[\eVs)ty \(6r"oHH N8[}",^Mx+*_z;%u!?=NKX"tSeAVoC0H 4EdMJy^|*f.KUҙgB momWzsAT݄kZ_g~*B,!'r7#x&(ώ(!Vnd~-U}5гkyY2xL%Ҟl˜ /t=Vq(4DҼSJX)x̚1#|JZ| 3' 0+\9v)$1yrݚuqhJe!Gm@ \Kg^glNƼ}; \&~ۧ .$%B|Zsh#j+DڅO_6e 5dN UY \1YIޗhc`s "0c@[̣A);*l#ueNZW qG΁ c1E;P!ﳈBFɫfZ`xf2W6DʗihD4b32.g+]zY26#,ÓN+&deI wm6Ӊ[]d3KȾu6+w#세qSO"%3Ӧ+{j'D=?Y謢u>*4FOSI ` di;/;'5L`)T6g(2=\DMtCõ__:]SRQ#$Rk[[* Q%Flgo` )NFjKƧI&<8`:;zZGR1UV_]s!?>-Q(nuoy)H d ZVjzC?M$pn;;siE(B(oM nT"sqXPC?*xNS!諹6~W?/^8q+H]4jG7D--H;m{{%;>T3A{fU COp"w1q.'CQW= wP328czYF;Es^"`{nl:'0m# 3[ P;ϬTNGr*"=:9h7sJb`5w8G#u-$QB>\qjŤPXbsB63qB4E!%+O%ģi2tU25{8 b~<} Nά"VKj<)(m~\BkKƠźzևZueq|>^oդ~$?;KmBGϦ5֤$m 7DK2N>R,k7<y9->Eh'ڻuVNI(rیFagKƕƟ!,71Ep-N\\e0Pȓ;K5{V`LZwrR2"EvC58yPWۉ UڱGep{'wH+-)T ^9~hQ\i7%7:28p7T1Z tJ78[_?;ޤâUT\Z#q 0FAFk !*<)O(d2{Nٚs \<"Y`jT+4 4`7\"B3ߏs?&c4q&֍XtI|LD!ɨij<ٽx[dYFXzǑ#Dp2 ڏthn\IT_baKVƄ9p 2iQ=x$~ x5lqS&\fgu]|7lrb=(P7^*>;A1+.>̗g1>kW/f,˹ R=4@xP~k^75cwS;+UEza(R62Hvx.N -דWӛIS(U‰H p8;7k 7 n)Gvj],k!Y)! QUIes ؅Fre.%9}z] NK/JFK}!-6HQ ^b;sMJ7.bۘvݻ<4+][yzol^1^gG3.[nJ{Q= 895=dȤ޴y^B0ǵ9ϟ GJuSg?*&63\I Q'Gz#pb0i+4Fw- OvTۙO&oTlc&"JYnm\lyC'78GЙ/RƣRjbӔf -g~ 1K5SNfiLS Xm{x9?W X7^܅:},r3gXp"LܬN[m/_'pfΓ !ƫ-;Jeu@]vEy9X!2Z[Aj#683D8>)'FߖS ez?('$a *ԲM?ż,]0t4g(nTB{憽MλYtԁAN[7܊ڥ33FV-3s9Ec .9Zg4F &wWH-W4K1Q@IF`Xt|iZ[ ;;7W@ 炶*R]eph7E˭*.Z{qƌ)Z]jjwd !i>^SzZtwa{kّ,Q]rU&˜XxU[-*u (Bhr*˸V uxB? ~\ʉa<v,_F֜޸&˷v?7G/3oD)ih~2a:y'7α"uD FEPtk9|HQf\ZO$_1YFuQeD qrjhCDpXPg͛{5 Y/[)Y$|Ռ$4sJg}X2nҳ0쓑^'%|#ĭ1f_!IeaI|,ZmO?J?>C ӛd;(8S!;jp*1;sdYQV|}i$>絤8?PY7mLcr_^B,(~jn#^Vo닣7BIgH9B:)Pk3uT#e̺(lx9H160Q0_Dw$\X7{VW4R'%<ߎf7MSȮ#K֛ݛGNz)K'mf̑d5>9IXi̟'}ƣu`ݹCL5O (?u_NYa4Z#4[ FK"G![qX^[sd?ItޓЦ#ΔyȡڔnNK^I/AM*PO X."I-M ;m 4?C%8rfƭ37~-6*ӓ@s6.YcM3k ٕ4~DoSBXkqeyO̭$'i`9"9N_A4rnp6DMRHO6f3o#j/+\@b`⹌:B|lUi g*|2iHRWp;D2ڍs_ƙ EYx~Lܝ.d Su/rCdfH wB 6T(S 3n+fS)A9M]ՊW&QNvz~uW\2 /[Yt{ :}hk:U.G' P xě+k$f.o)~[9B!!uGG3de/¿jձIOx/D6r+O?Qvh !+;' s1qΌ6p92%m ,.q5q0'Ԏ#<sL^8ԙEp᜶֌d,~[jF˷窾)5pcD,WWGB LϤh-Ws  xxIoX@%2[->0 "~{NజdR:e͆ǫRj|N/AIK;h`f%fO>t42}.*'yf^M$L-zZ+ H]C]IŰ+r,2Ln^-I!]r ]1M:`ZwΧqoe@6tD*Sd#Ok;,bs^gJE QKaIB Z86,1z)ZtXsLè("Sͱ3x-@$  ld"l$YH"egBOѼ|ApfAM 3| 'uL3@qqZ|z)=Nkm2Y *kHꠤMs$J=%!{s#ўg3gF~tؼ']N@ސpf>Vkqpe28O୥0#>A ԗ=$ӎ_z /Bu$%=#ڜ:e: Y'UK_ 7_T@*Nrt]!o0S;[^|ha5= a-\#VSgJ#zs)(} ye2t=Șr ,|k8(m & o6%/HT7eH );wi}>h}AѼ )6uGx+0dRP.<̅^~5{nOڥd ]%T<,q1k>.VG mqYQ߲+0+9XzU)w8.v.*cM'fA 9O];sr!ht`a7yĬuNob5MFa@[EڮDsCqPݪ`bn*;Ў%8䯀hl8+5CDyk;5gO ms;.vb=aH9D'm2Du:ғ/q^k@hUG4\ʿ)v=l~`4ùn{ntGRJf{}wȋ(VRԁݺpiXV5mnX5;x(ji{ͫq295,SHvd{%xyLS06 r@Ke'jDfy9}rfzIONgaCfuˮhfW,2c15(_w1( ' f:BC 8obP=AR1'o6J墹DiBINߍk?_@2}GG{bb9a3Ks&ȟ~o s@'T㒜qF߉ǵIjp7l*}rVlCr4bʮ9XҘ"lK"' 㵶 8ur6z]CfۺGbU94{lQMI~fԩb&!,ckghdckal=vG;GB+Yy4 t(ObI=(o|pͫr"( L'Uw:f̷] [qꁧwH eoߕgP6Vms{{שI/$T oCW{;7 V^ۤ+i5M<[b:(P7nHD>ҦX 26hmC$fء *<;$!2/J}(.V)1i&9 M^:x(=~+M9Tg3ru2rҖL×bTqSO6#~n./rWF]5řԮ2`-t@w#xg*I]#{{^VaRYhyv;͟`1a!һ2s:3Xu_ߎ tʹ9;.s(xxpr6uU չS|$fn% Kv +SeB%X!w!Ws QyL!r^~萝Tɝ $i_օ۽̹<lCe`hXp$,iO>x1ZKwb,x&_ԑz'*zD+\dpZㅂ繪9`})(*@gI\?fz薈<+;Μ!L(8n;r 1J[`kKqQY)nxB7ac `$Wն ƭ҅y0o+^ Ŕ?#27& Tj(pRhq1 Yt0XlM'`~,)<$lAa _Ff{a֮!qc<~$KC"x8r1/[7r-q[@t 鶷aƟ;ci˩kUThDVE8dO*/aU9ٶ? 7쓵QoldK;ʆyַz0‘b26qEq5%kxV?x3f8|]M}X&P+^\wU %VjZ2w%"񨘴iq`NSlyfE( BN֗p!|@Q_ɹe5쩧0UD=(%r͇$s-\~ yĉ,p/YDr&?|гWGHyds)#3<,]nS9(_ 3@p&,g[?8|[bB@wa*1؂5F1~vR;-|({;~1mN oA~@XVtKxKUju]pzR& -9KNg!NҬ9{k-vOFY] sm|9z'KRX_L$.Ob>'AQ9.x_YɱiJyx8RyF)ѫu,8+y+ݯ#t99'd7Я2FK<XR+gQoo @Z 𤶗UMl :VӆDr;kOvPVY un+F{>j=DB1ba冣TI2mO-<߹ryt%+J46wNy/EpF{)E8R"k!~e{+dVYlJ{J pd[Ah"+GO2ʵOrYv sUwF7ZAPJOOf*RNsVa6*$d0_mHWkNvl ,lO`R|W&o!c^ց \[S2模.uLL҉ 7fǘ^ ));50@@Eb?IIk:w" 2jTɴGT;(ks:O uR6yɫ?~}am::v w!PB )᠏kIMH'F o$ =T4\Ę3_Tn.mFIxFf(ę! @Pc@{G[떎aek73*ab'sTFq}NPv{_^2 "ŴP5R\"O56n-[$D.O~"[ɿl6)Q4lrM[t$ϼ[G̣.]۩ԙ3\?&dv1!K KtGՊɅnLFLS=fuq ։k=q)KAMLᴪst߆56Fq0IRC4 \*ytУt%rZ{k<ԚHZ +F|,]MЗ~.mL mL'vy#tE}f~[B~yc [?ϠU'YcPb5vjtlUct?@Ifl**ѷjH^e?\&Q~{"bGnU{#kap*1% ;spi͍,-SQzb8Tו*ZK(-ax9SȧNkG8W?a^?2 u KvGz&yZ1;#҇(ˑ (yo85\@4s @,O-JnV-&KLRp ^EEi ]3wk(ӻ`d/Ld⊚CUaəQH73 p@L#Mv*bZ-G/ :|=CqAPl..) l!KٜIiՂT:<4|N0G|0HdZ &BaP,qUO`v=ysIA#%"ccyVk_ +QҎbG{#-l(bx~qֳA-+8U f5#:PN\vɛu:_6N$!j"_Ff.@~%Tb{MmC} kf\{ [u4fw0:xYcv]S| èDˍQɥ,Q{0GCp*qOD G-p lUpX)[H V:C '"g*^eX4c@H$M=*"Kˋ-;P;W*N"}FJū|6~`fϯ9¶iRTp5@:'I 4 IIv= iZ<Q7'f6`g@|t*r)KgУ5_9Л[GP ͸`m(^v<=B`7TSN倯s/{ ,Ȥ*5?5xޛ=lPMK@9F%W8z̼ՕCđ\ $]aVΟ B2Wp A%ڊe5NQ 4RE3antU\ Ƒ0opDC\:H5MSX i|JE.3+h/{7wS0kfFSWA| xƋhT<2 Xgt ZܵcoLG懲)hEcM&Uϑ *fKcF2!g_dy^27cWjI%y 7go&U"0ĩ3D} X}Op%z`Q:jwMK2+!_7k#$t^H̏uX< $xAD6NM┛Z*[wggh+Ǔ/)JLxy:I i ⴚ!b72]'UW_daE2VX7kSt jAjq\ H*V\Uۈ_[: $L*^r b2k qԵ.Zl :wCcb\ܠ`.g\) &Pܰ׀ຯNҮwIx 1F - (M 6Iԇ2(LJ斋/_} Dh<$oD2%^cO*a}L=7ŽW1HC;#-9 YH3"1\mSڋeb4Tl Թ]mMDe2$XBHJg\?P:6v=P',Cl%_gPUJhc,GW8?RnD˗EQo0 :pMY6?Àgx'ӔԽK2jCHh!6u{~7YsG3PpTEc5wq9dCJ{a|Ad\M%l.ɋ+?X5c ཉҏQ0p5,/%X45+j_ɻ1 uRťP?'[z|ݶ"pamAZw@qIh ^bXz ɷ:s&Iv"@B@MU M6~OtNѲ)~:YeS~;^֖W Kʥ4p}¥ə}1i0»%)뼦8훶ٓ2h+I:bM+tB)a"aiI;TGdV\TG^2Vώی "Nv7t Ѿަ` f%ϋ U 5aZj5mU 4= tjhע[M;ݒH$ףTL-sf8ǓpU̹jegw{<-z~xz"9")C5\eJϩiOҊ㮒К@![3V}ayD@̀!F?&Re9 v_)H Y5z?m`*O"ڱXq~W;.pqhܧ0I BKrӕV @2f|8ܯK9uqs8w-[K<{.@:q7i@:?m߬@'tI! j{FX!-G+mY,Br`ic$C{g*B@& BHn(vzI$+B@m$ CBBB@:OHzI !8 !$΄d!!$ bHH$$,BCdH@@!$B)!$)@I!@P ! &SR L bBI)@S!!,;vmͼwKF]v9WsR1/vNa?épvZNrvZ}\Mr]J@ PcfN( C\ *uo (>ugL;{j\t $!(5h]7;8݊vӹqd!oOJQ^=^||cG/kggz]Z7 d1UMҁ S4#m54?w15yǝ`RVhC War4趦`훘T X9tTq2rIT)r*-уE,U]86vS*tW\Ia&i\~֪KךzΜvmn?k꽯sqjof!pɅŻ*A ¤pN{αS&/w\am8*}@g9,#96nWm:Y~]'ᧃ)GoBCf&'wR-BT=ݛO^숈6d>k Dr%F7]ZA0~>DxP @FH@#xSFJ~K'5PMyjuU~E&:Y4ߒ {3 >Q.Q6pz֫%YUyÂ쒇9"uܲ$$9eV֔AElБ:@zń8vD_'fԻf$OSha?{\i*%fEꋓa^ݱdwR';_').U2 AELP)$@͠Huc4\HTyZlVjx|}w zQgT='4@*Rĕ"ߍ#Ѷ L7`ɡ0HYA7 ^e+e76dI,G.@ҁ!" û\ TJ &n_Q:hsr|׼JH zdKMJA"e'9DفBOgmB_.ϞBinE6Dʌ:E eb뺠Žnc!}ZjAѣ;+pƪC?qFK._06 IC0[f2h Thc=FU͝EPl 5ǯ:w+Mt+' )[4suZVZ@Id̈́I8JCȰ0~{~}NhbR6bH 5'Q$} GE?F˗'f9'CCCʩ!sw.%_TbhV-hvIJ_Ztz'Ғrk֙wÀq}_.a+7FP(Jȑ;; #f}^]"/c4[:X~zJc){UcM+mXr@"f7XCc0˝f.F|I~>ʛ s( }u"S+%4sbDX"A!TjñsP,$ W>ъJ*ҩf*שW*|yH{6ʗ)R'm5N"&C $`BH,((ęΛA'ig  nTd$dbԃyoVi3T4 XEKGu](LYtPl,rJߵo)ܰ+DeV=5 ReI*\vB L: u:yASt8ǞMp޼aq^ǖ@BaRScZab̒, (ᇄ[mSz7zLoX 0Y1Y-kHEZk tQ ]pacv@(!v"A -\, b`=Mvxx $Y!̵={vlkwt5]nI<.Ϧ?~/vh9o UkۋɀC̞efv{ڍ?'?s:O)z1`(P[ñ$(k\w7{xj0HN&?yNŔ::<d,pb@VZ=OnYJR]uy!HX<޶JKgyk@c=raD 墳'}YܜZ?פs#V~  MZգS"~?'z;cKF~t .㱇 ^9Pns!w8z;_3DPY~^kɵJ|KRe5Ҫ@wu֮4w{LE?DQgwe7rpSlmy&k@ahi(gҏ*=x*u蛢:l{y9MPyFxRܳҴnS.3I5g~>}'lrҽm{7 c]\mu|;6RFAf9ܹIi~k5b&^-@AgcVh8< 4C(ZNb:i4Ґ)@ Lndy{| ӦN:dDT$VaەR)h?`J,?&5u@(xqn>a79EdXB׻ܮ=|o9n?y'0;vƫ/ӷޝ> +z %%wh{4tP*ijZ,1)P%4EwwcL347UFZ%f]N xdl nǂI }s]ʩ&[8H ,e9Pb@Ka?5{5 zLڼ(l95p/շk ~.]}2rˏwp?Nm`qx8r\v?q{! 5}v!o0ϙU{ i }VLA0Qٟ׏Av: t{|z<9\j2j7 ,`'%Nj@HDxb^4eZ%N=z&qyt'6^\9٬Ӥ'. \dq۳C1BkD1T{ιBT߇9YddܤFϰꭤ *iJk\1dz:l]l:DKb_S3a UuH]V7; '\U $ܕA-3L~&_tˁ:똵 T3Ԇߣh!V6Tٻ x?ҚaMBIMK< }R!>z8`+\fsE.o(oO{ 0}Y2;gJ+M$,l#*l|wzP.c[Hh 8^*L\,z%F]8 [qkJ}bJoſE]uL1o}آ#QyH'-,uw&()Dh[jL|󻎝.:daXqqfN nt|=1x4v+. (r{ eac̘b|Ԡ!Ě.|(+|QQ+ř&m #W>wK=K}ӓa;=ͼ㒪Kxi)t0Ĺ Å+[Ydb~ݩ7yTvGf5BOzj]lrT гgo+0{IVK}/1A_7 4:gQ"p1wό^FWZw5J|ŷ?s>! A,H jLM?/HQD 1c DrHt~i=7@r! bSY.q8h% IJG;Zԧ%9 ۊ֫⹷vqX~wWUtaY 4q!K5C81SB(>8,E, f<9Oa*WƋ޷vc$Z{,o/`}uMyt;A  AmlǬÇ#-'{(b" Jsl^DN;e2\}])/kx %DԘDN^E<+-" @IL& RhoI(\=iPLiWf^X:p{W.ygVMyPz5hLyGC0I @BJ09L 69K֭:rBi0@+=pUf7fYi,;v`^ :z%/zsNz u[uTr$~aYJ-T?(b;ipyhl :뎚q{߀Ȥd]<`;S:JE(>#" ki(.!^Sb>5tj뫪/˛ػGԜɽ²1&UeYe#%I!'U^Mc!8$/P-lF0\$(e5 #e $5N 调тӑAP,B, Q|}WשyhkWx[[öa~׆&H ik ̾̐eƺDM/oso q`qΎ>EoGTZ _w"ӧZ rHs?XGO?r"jnRf-#QƧRIVfsIIv]T.Xd7Y}'/vTHlBn!9I) 9fH9<*iLGhAd iP)Mt* uͮk<ߡ̽&k}؏' ?-sjY)JKgֽĂe "Ombj̲!3KRFZ҇fy_'$6D%cgv>]`[3Kɓ~œ& .`6iP; ^h1E_CԡLݝG3̼9+֒'!tP#Py@, Y@jz:(o){|^p`F(0;'Ip?їo/?Ð`&_5ƸuZ>^< Q2|n^s]X[I>Mg7Yt%m=,grawpo` C ={")P\#`DEhI`uqɐD@%SѩN!vlI_86@oEes$H$#+ntyVoRD#HgIf@%0I*JdВ3VI Bb2̐<J=῁oNh_WkSw.:.jg:{}2CD(DE# l$A~$Y t,@ok0Zw[,LY uRR0",d)tҐ`5S`R" `zMF_Ҷ֓SfY4ޤ:V,hDQ^ĆUS͵Eϑ 8̤[AY2 H3z->]BE%0XEPP 5ZپxIHȠ8X)Œ%T'^ µhsϛѹבUˇ${ Xލ,w=@2C2̂, (,Jx" T0{{}z_m1sVf*UP),Mrz5x5}(چ"dEm$B;э!.T}0KH0yf$fQ[ӆSv`]hE*Di]gP @RjF^+E5}TQ?%4ni ;XciCe%2j B"I 6laI\1@3ʡ•S~7p@ /w]Ĉ7b^"/( :)=\S:ys|}c}ǰ-0(Di9 -^BB5n6c6[pb!'! ;PP $*m5AWd5!03 9HInXYqYѹc`&C]hȉvUH kB`BY*Iu5p8`mga (H" I$R Y,4OmA~X BTOd岉L0_k{?D\4(JJ9v# |y_T6dw>";XfiܚOM3v4=/I?aƛ[ͯRкsԁꐏM(IQi2I/~̘Is?'ڽ,F,%J}%"l_1*Ѹޥ Xq$h}(Bu}WJx;N*MZo׈sl)tPvĭGI5P5h#{|0f=R0p Pai!-[1ï篕'$_5`'|]:?Ok__`uPjN0RI=cY RC*IA@=?qzw^ǎy upKycltܨ{|#0b/h,LkhqaE}:u Sw~}Vb !3"3 ܬD  G n읈A@τnz)4LS$9:aH{PgmOܳ'~o%O! )vC!ݝQI,=-8L=K<!R"ɍQSF,Qсw?+~m4[^I0$1@ip R١T y:GS0" rA匷')k#/7ibD Fn4jX/w o_v-t)Ba#F= 8HkUU) 8,Bj@o6E-n:yf( Ch K@b&lֳb̺ ;KX2 R5 Ć"rѵeK")vx|t (o1hU7Rct(SQ!$a i(H>}2I!ꤐ97IУy  :.)|O*IKyc~"9=jfQĿ;c0̜M yU\}{(鰳6dCP9:$ZqRr|λ ww&;$]Wyl)s]/Ån\Paurh(3tײ4!J=?.%(GWaT'{6@CES8: "/L{G}Su=\y_KW?hiwQ|Y_peAR4HvR/vպajߤOu 2Bp0lyŀz.L v-Wu> ]*+'`bﵨ( PG?QUl8) ާf #~W ] 666kh}UR-6ٽΩ Tz A_abM С-P B@<|/x#Nmm!C@ zPߏU4j}>fh>H)Jy 'fT D |?d ciPpS. C;xIڣ>%䪚FBwT.q޽wRm d !!faN69dXDDN[ @q2I)HxpH<]@Gf"~mV~&@uȠ,~H8`1JswcV8BC2HnyY 5^̝?`x8lO+MB;&Ӓ OpKG`хC8n֛P1I4)%0ei36qI;n22HzZ!TzEǰEOw3$."|mڡpqx"u(SG#G ];zdOynԇ-$xHB*yTऺ IJ)!=I* lIgI& ǼJI L{e{頻8{כ$ A la;fŠs&&Oi- >#!ߣUif<~nj!>I@H_WJBv+^LG7o/Y 0P;y GNr0HH8^W bNpI_- J`!S}.eu{p8Epc_3]#[9^XD@da:lRXV]٨oՠ0}4 `|ŇcHT;/CJx,GI: K#L\(p. 5 JCz+ۭ|vDR !(a Y9L!BBd$깠` $x(bRN  M 9,)!d̈́> Ȱ% 'd47Mh)/ H!I`<Y_aIHZHd,{fC&( D jPd%!%=IL'@@~`XVfnT[ȍ= [vۚZmjY-uJue{ [0ɽm؋;"}EÆlGKKjN1]Hk;Mjh.Zz:J'-lr^Q"PB@ o`^&A.5(XG@+$f?hңkB8$*y,5qv"} I2FЃF+E`XhnM;!q[ XC^hSk)&A@"I!!:sjþ]MSf^n\Ǐ/)sY +]t9gsdO] ="귓|=W)I#8tDA _ |( ..Gʙ%OeP`~r6޸߀9 ޺zIO)ϗ9-sB!VYv86TD!J'.Wg;c˴u$ ,CI0d #;Bx^--E+?Tt-@adLOUmt_ou]9onWm\XXK*6T| -g~sJ@&J "yz뇿L!ٶ"L!@LGgܱo?_0 !X$VUo[f҅i_7oAxe߇@~:o:M~Ah0ܠW_}(QA\~*P,~X!5E!b?"Ё"8 >pfjT7X8́/C<qiL6}r7}fD{kC9_Y]\@!!L+?/y߮֝1<+Ayp\3 ՓmU^ﻮHL A.KqR@-f_ةdD>ӽϚ/̞}5F/tocoOx!ă8{.+$;庸Gg@O9jጉrf#2#ꯇHTh! ݆+w3ftM:0L) ! I ݀ KPQPȠ \1uKHp$v1T>k nbd j d &(,`I_P<#? n|NM`K͝ &Qg:]ȟ-LfN-mш=ɳr/qY^uYJ̹ݹNGJ/r b4~>Bj@_эH))ۓp}ّoIDCLYS!!^Rwwݑ5/S:k;_6bRzsVS^![2W?*ڜ:O}U-RОܤUxRgU`N ?V9~w?5P 9s(^X Dj͍Rp ?R!2P4LL! 0I!u?+Ϻ|/M(NIۂޅUNқA'pj>Wp]@l΍@  !OksDr|C{VѕܲMkFGj@sbA iTMSٜ8a\MU';:RmoPZvJ-t:6e.%n 2 N%HoɣIy^?@W(AU/Iڮ0IP>Xe$IKp9-E_.vm'=<,+L[+nu-'>-FYIYq}KNZE1P3hC3tM킹z:h%ʠA,Յ}'v.?'?t\!)@FaFg1|=05o]cɝ ':w)$P} !,.7))B:\ R:b*,OhInGH[ju i㾚yUB trXE4_Et$ EC }mk57FtJ*Uo}mvWvXQ&S Q@#.G(&[eQQ Vl+]zH Yiw5׃ lHdיJy'yXoެûT`5@>`O%Klcr^u{ic TtOQf_Qk,z|Ujk/ށbG:jCxwuUh@ T=W̻RZsϾzd.muWu1oHRg^~ˇÒYE ! 1Uyͺ R$ՉPQb/TևH}0An8@ŝ<1.`D H"Mnw!Hƽ|?8D\E% !]o9֐ ?׸ʫS*ngx c^#H3wĺ UCya^x$i-i .ke+P9:חːz=KZ b$ɋfgH÷˖h5$I,0i_j|TfBG3uyqvJÉlDa\-R 2R=YZVił7WՀ7@3ԍI%QyG_7i $:l􎏉fGn֑9=qMF]U= cS+eƄ P ks׶'<{W<C[ru nI0 ka6UT"Wֈ4Gci ^y q3X^Pz+wCX}ßKoŨx8Em4>;"@ Z-!,1Q$xLCţ~@t}ܝ$`xw$ q-Rtwȥq>d+T8m.Ι5+v;\(W*"5ab߳Ł܇[%Ő/adVw2?߶)L bõEqLty¶f@&ղ9PjhT>YNM9rTpN/ji@ KscӁ29ٮذͼXtR] sLg+[o90Fx FrAy"q&rQqW@k@uoj%5v,ZIwJɋ/(hkF|5 j,D; EHT%-RHl}"՚I8P/w' ײ)R4/9_WsPJJ@?#bi c" A( IMћF鼛Ruўu̒]+1v&%#]쥧+ ʋ&)υU! 3H .6IF"4^q;ZpcӲӺ<[ŇHuj3ث\q$/yyhk绗E,`Y1J.DbK?˔3.94G%Mxo#Sx~Ӌmsm2lYx?Sdq""DbBj7;Q6[nvsnM@nm򫽄ᢦ\>vdNb <H&H0s$yc]{\g^s\2s_Tpw*L6G+;C^|j օ DHHOvVƤo-{^!) N+1٩A>@V4q8o$[Omr~$9\#ZM( =>gy0977q[.峣v*;t8Za<}Y;ljT1o9-gN$PsbHW,57@.boe' wP!`fJ |r}KYxEW3@t|$S4e 6z?UO{u¶BlAMPHJgugqsd$e/|L芽:Y3^U*~l23#(m@bjmxV3&UZz|L F0tҍN3y}Oy$TD2Vs.RU lgKǏp҃;wǾfIyRoMҿzGSSk&c{aTn2!8~a/~7'K>+U3h8 :X+;~L@Rӯ2nXڰEeun8.3Ǘ,+fSV e#9纻%IYqFBK8үWā<138Uk?v[ M7䫖 :y3&O*9^gߡSf6~L_}heޯ-w+8ժgzo!˹]}\WObK3?ѦhW:rz|vz:]vl@ٗV:f~)'2e] Vui*u~f8}`+Aa>/l,S#i(D!0n ]h,@U,c#VED!!PAd S "OMҁ(p B3bB+Wbó$8Ѣ t-._ǵ~_tjHss_T-L?Y0 Ϯ>Cf Đ7Dٴ~auڴXjYNg,D@P:IJ,s9V>@FI s&ӻbF̖`.L%A).+$'ci RI3bE.Jd1HB, cR!0e$dY"!Y~TI ($Jʶ)X0?<w޷D9׷/iHOD9Ls(tP$ABH" $ Y Ǵv'O `ˋG_>|vwV_:iIڈ칗B>fO-Xw?|u<!?-$Bqw*ԧ!!XqM$`##P%0:HC$`xOU8Vxt֪|jQuX ;d"$R!dB9n%K;%%Eu+tʽk͟?G=m=6[xz7= }HrX@9)a$P@ X*aI&`9l 0!d$>i2A`2BhB3 R@. `H!.I2BEPQ a!$Q $w98eɻvu~WL\܂sZwǃ~߼ٞ9W{Gpߌ}j!!a6Yvۅ#n?KG0mzbsѭz+dZbdO2EEЀ'ĩByHʺ}2EBV|/9#n2e"P,WV~4I s {VBs$$'G$uE0Og6{1<{@@ f@$ cXB$gLQWd~FCƱv2栫!NQ%xX'_ 8;-.}{6gBY,*{K c@!zJI 9#QyGrb]xG}SohWeHH@9@Wf |'I}Sj?F8a  $ ! 9?hɜV2HVp$,́5u3^Y0C'H! HGh,9qj]8d>7/ W7 ׵6GW}WzbS 3VhBp+P5?}N<_I?lSU !(H}Ǵ 9_z&ym*]QF𪜭 IiH!7I* ObÔ (`"H BH,I!|BBɁ593rZo^S񳾎W?py:旿ueWa.s??ɒHC$2(QA% 2P $L $/ۮu.pQry/rܺu1r_ڰ'_2O KH-3Ŕ!BHlFI BE$a_*հ<ܢ$) !$P4!Br#@ T MD!aATsOVVlOm$rГMQ>q),}2=!"a 8y+4n6ºROXzر'”+; @D@ ${ B6H,`Jd$PII I'M>rp0իL/ u|˞eQ_3-fD  c-4}/\yٷ~K(3tym] xR* у0<+')P*08+ @$нn^T5T}+>[?WE +\&y4giW}N[uH r4Ct0g\M#Gr+Pğ3`f^p~bz۾3oJ+GW) eOkJGkWz qQSؽY3en8QъsMrH4:{νnYδy׭>p.^~v.4 [B"d@upuy|݆ݥo5j5i4nw*f/C*=74cRHV׎; >#tmg#F#47 JY>l=ʶ9S3]D7"9o$(s{N5u0VqmLUn+G딕&-v5^7U;+GC&O 8P:1[bf}|?zPlګN1MJoZiĞ'-iPZ:È Q$FH)%v@ý]̅ύGSBOu3:Qg|$Kj:H:TaZ zhHt$טd/-(t7I48DC̫m6ݢW5 }g{~3jZwc2vj$NV rIĞ=Yp$0#;DFA04%ETМ0&.4Y7!0dd %L 7( }$ rA9<*cc vGUHm B:9簲4f8Fn)Rd)C*JJb"!4_*ӼvnپҚ;_\w?͇WrAs @ #@Uq Y%Ho5oɗ`$XE`,@U'+F*$'\SRˮ;BNX! I !Iċ$jrQKxYHsC-뽨(wJzm辝+l D@~i@"U A@c,KV֜:}((PU R[bN^\v)l 8r]&DY"ڨ4Y*YxL9uI :qNR/R'"}u4SKXxz&x6t:˸}EQQ;)B}{RR+;]g W*CH 0 HD½tTȮ'/4C[TYv r%ͫaG]ym"9Dt\r w#ڽj&X9P'r͙V$ $ ,7ZTOvG "J zaW=%|͙]܏298߆QFYLk?uA`6']ŕ2]."YIoORA@$ @7( GP 4Pi"$N:e_RuiITB́B;ݝ-͉1'NyD[Q -RR;NW UԙL4fk YtP5.hkh h$RS4Gdf9!^Oΐ;4m>u8 C^ KwyCM𷫐TeR+^>ͻOlim?l][Vs 1 x5 ),!IQG`p9Ը=kDNٌ)^(`dy_'t<=/c{00"Wz.tHLBu(iR#ZgVgH>VZw,_K\_xEeffoK9xnF~ |v4$ug_̾㝘+E {\Gnx}Q0T'h0(vɋv >/QŮ[2uם [ U=өEVb+=wn; !$ }:+;M%8pQAfI7t^@ČB W[B}+wȌۦbK]U`uz_zwY>:c)}n SH8E: AZ(j gkQʹMoֱQv|˺Nd1Ti)b$!-2ܓ}ypz' "lN0YA $gTGiX=u]Bo߇룱S֔Z 1r\5P$пF8s(Ynm'DEaRyֆuSTɓ`\rNH@ f< @flKI!ڪLo^eϜؤHdP 7|]-Fǎ/K)E#ԑzU6x3A6a f#w]SP,HRSI:|ڙ, Y([RBY{/ϾYVupfI0hkƾvƣb=!G6|k- ALA >Tcݖ'\U AN4\HIpBSD8%Qq"XEHYiXRJs!9e*'[ \[V,fBpoB*Q_~Bz#x.CcMh2:;^6C{@Fbe]H:44R\Z;dp¢n+ ᑼ¨*Ĵi CƔ>.H5PvKآ ۡFREǡ JEl4fy7|(DGژ hٻm aʪ7+V朤q!@/ ` L# wZrCɱ*?)WXRPVa}.[ALMJD3[ R5՚ֳҹ}(v2XٮɊY;5^eZ52>t'}zB!\ +6$MVd޽|f⠯EBm{h <>ҺuljNvJ%gz'A7B8nMnG Ս2gϯ Wk $[O‹&=-@u[J(R7`Yh-RTJA]%oI]kmc. 䨈:2l#2@ap8@kVeeP*Qòl+ }==գ׾As[- P"EYT0hY[AÚ O [z%if2yRiuԥIyćҊ3CґDTviyy]8\")"N$HR@ $Ľ̐~WNsVĸڜFǙw9¤"Z=U"!="~u;$>']zI@1@xe85sl¶⡆H[/3ER鰁% 40&L Mi iHb('eR8M|Yz79wﰾ1Q*.];.b#| 5$QB !g)0>O{G&^mB/IHY$$F zޠY Ni$s L !骉!<!'I ${pW% >9 aqʹasgIɻ>~aBGsmRZRrBIA 9ĥ{mdj?W˶w}:Q_j(OZ?C cGiHvvA`>Bx=@ Ŋ ?}&%9$/ A&W'is#a.6dwyy{6H~Ru~rⵉBMuen jB˓Ag|'Mq{̻gkSťnj*Pe_ZWz@'6 C[  ST>H b<PH@} ÈCZ.=w?t7c?] j,+_M>q@9?u@:)!I%^ǻlH<HsgtH)pG?'_#dvRtx"LRI$ :;K&2=0v2I٠$$3jKX)( uT_whŖ7=|=~}(/r@#'@02>aq~)oXQU$ xYi+avk^esxvElo[?q@ Ͻܨ H{D?2=B`0 vZ9B~>olqrDbnŨH+'%90=wz]P ;TkR\Z=5 _z8sxxQKt%( b6ŦWqUg~S4AC__.fakI<.~woUJ3 5V4$4 O'm/\- z~˯'tWv1&g ?c/ޟ@f(+sn ZA9 Άwj|OkO[%s=*&!-#6|Wn1d`BCMA9M:B2Vu$EHai꺘`U<> ^w K`}9S9Qʀvb` P`T-\k1yJ!M'Mޤ+9lBeS͐Aȶ1f̩H2Mn3&>ֺxc"/?Kc8IΓPY FR\>ν49GO [Xe^7|KA`$ȑ?PaP]Bɍ]2ckGSm5Uba\v׎lN\XXURR?zGm;![p疧U~.e%p=E[6_"4vIF!7ڑ ^崘ARuȩa56XMGLyZi@BT|\뗫lh<33@?+ӤI)+p5 84/rUTf ׈ ^#:)π(KKʚQT[@˷:nY 83f$ w5aC `$r*>39A:p'j=֛i'yނqV!~>s@VJqOJ҃,oʕVv,•6oϳ`G]k&\.rp"?ֶ;'2\=srNR_lL$i[<]-3q/[ֳ?͇[N7T[T٘${qѻu_nNr}}Bs2xߨC'̗F-l[BoeAz,h5{VV'>$"eZs51oKa8tQ=GGe?Ц|ҜMQAW #vΎMlW:u?I:G9i2u qV6W^&HZ miAze@ZG[R~/=G=wc~xEx[뺻O=Ku &@$^  "E0j; ɢosϘWWC ?>gZk Cmhwcz<g.KѨh^CP(DB) 'O']`Ч]&h59o>ܯg3>fģ]~_IITEJ`J~C41B &`_5N*s~ R{"F$23%" }ȩ HuI^Iz'RI$ ƀd @6|ݢR~+ef_05wsuKb@bZ$i-Ѣ~7|H{T @}$7=uoG+a|0[t/{k^S=eu ,*E?CCiXCC!H|XKB̒u^ZYr]W8sT TvV'Rzľ0oj5D]n0s)' I! 4.'hoVCy6%?S&IKN^5zdtR~Nw j$}N5Uϝ@P!!9oz:8s[8xw?ΆW y7,ڳMW&I\_PX_&+wo{v]-5a+MotrzCAGgWwO9) H򤄳 "8d_9.BfO`x$Nw<.Jݙqg{$mM TI /e/?)=B&6n;e\g=:jSj~crI=3}{PA@$BB{M^UXZsV-{>?qWi{^ .V@-AGf'BC!8l As$} d2@$ ?(EGp˔YJv\]m˹Vx g}A}uiʩʯqVlEIjRTekjC}i{_'fׇv.L5Х 篩M$@=фJC3Cv|?]i , ?p:AגD@X'Ev~LjfOHBn̞nd~ L-U3s4 ,%Sܐ8$cp>dIrThqn|f0GVĐ9* WKSv!`""հa/b Kd,CHӘ̣ZeMP|'/Wr'. !۴ "ѲQǔOti_:|nM}S™yW787mܩ"@ H$ kƜ(>X׽4nNFur♑A`ƪd`b/NYXGE(l )"AAd(,Ͳ2F&clV`6oLk`V?Q=>ًLW  [Pb2 SSMUj%O؀IJ̈́DHD@#g"ў)u֭|?tY8H~ \o4b5̃}44ʉyY՜XYrөi.f,!U*3bwl@Q ci2gk_O@O}">qRMJ:: 1J}hؤ{xm^vNoaR""y`lF֌3c@Bhˏ!sϭRZF-icsxf«9d$O)j-Z,MO=[/c@d P%zsB3Hn  .gB0;7Eq>]3 'ȒK."M Gz'>vH#=ƌ{VGK{ T^o;ޑ`54 ^ 鲬0B,Qq 䴾a·WMK.]!}&sm:Q@ $mM4fb3 438I,2D qb@ՅGM+q$XB%ؖ`} v  \H]vf񷹾'<(,`DNEUzOC1{u#BHy} Jx;Yv$IXغ|:F֐ /ȋ_vV~,2=NVzD-KB;ӟ8\)~I%5$cPRe !8# ы!ΰ]ײlWy`=vdvkUʚ:`KRVxe`N5 e7'S|8/&}>j-k$=;&δ<\8?j=Σ .w]w/ ]qvec_ uuqMē$I5 ECbG~W\ץ{ h~t=IOI Y$;OުqY"{OuSOmqc1|w]M.c^|ߥZ<$'Sp9>yHC@MjLOٻ}p$0]˪I^ !'C$70Zd&/No$w˵윹آ! _#pFJP &,rW*у}K.&t>-+3nz*?}^!DDꐞ~tJd-GsvYW_r"4 `L$ <7Rq{Q]Beo{&M]7?ܛ2@$roF:.^oci_fCb |"8+;;$!K9 2zz @ԃXCI\_vREoY"u z XTa<~ tPOB_HN.ئRZ mUҴ+vGc]H`EĘ=7B==BhD,(Q7e)m2`qVs&c]sYI$B~', 9 ! OYo%ksͷs|<sE6õ㹥Kcv?es?;v]\&D_ T? It頥}UW~2 q%+u5a`$ $hpAU> D,Z蓳hp凈BfR4 H4`-_ea׭bł"(V񊨱PԞS88:ٻK]Oե_;׾=TC°񬡜f!kh(0!FSS~F<=c\\$f0{>g\n\nXc;8ɵ[o}Nha7v/wUQNv aQ=mS߂I HbH =-\v}AŶC\eR |ũ*"(Ƽ?Z+%+ 7gXo}^A(J4#7mG$$`lV9i$H0R# <8s":LjJpgrtbH"iѳ@UUHtE8Є#U3( "J ȀHdM(-FVg<(&B1QS`|96@yJr#04 _Ϧ;ֵQkK`!>rjps#0H*t*\}&Za'ΪS{=L,&BF"ٙ 'G>pWUVU݂iWv%KO:3gwf9d^~ڱ\;ŷcrpnAA"D F{<sqsMѸ}CHCo_=T~:4,hO4jb&՛^/}T+p`MScj_HJXyIy-2qNiqF_C$|TW.=fyO#Kb>n5v>Up`"YȯJɂpC%,o#WhTf8iD{\pnZJ0!g5},,U+|]/!@*?'\ %RRbR8uѸ }dyNwjIR[/Sxch$[!=3JqDF:6ص zj5Ӣ@ ϵGKˡ!dkvY:I XHjӇ86ԖNr9qm%e7Qԓj)z+O$ ~4S q^muui9w( @C- l:ϣ5]}/ŷ8+1=9ʻkf^?6P!"WP=H|>ɡ@C2!$7:<jw5cS u=? ?JxEaRq8ȚH !@@@:OI R`̀>Of핵^3+h2ʯrɇs?Zmf감E"8u{!Z˖IA iCS$!XH{> pв {d)ax*vƓ&~Wjz21|C0%;'W?4$^nΖ}k#3/Ư}_7jP}Vb"# P%yB' 9 xkgǹܓq1{w7;ۅq+EZ8Ux΁?BF 6-٩C'fA_zΧ}pɍ#"Kh~|b@!>+${M5zލxVlkj}=:hSOj O>jq*QV/þwPjMl-[;Ekz/Mz?6X@VZR V;cI Ͻd/X( /gaV7 ȳF< >ǮM=]S^k /Hi6 -|]?e$Um)3ge^$;W.>O^5i4(1E)j>jUz[ù޲aN0А^__ {Ŏ[s̳r/~$5bD #X wM);_+iFҰE>lrHTERX#D &e>B=øk'?/}1x:NUݯfoqowUc*QB"{^Nb*2(1}7{}[Qrw/n5iS,|}0d'pXrDוuD{z& 8q=޼7 nWٹJ18blDh󦕃1t!ZO-v0NZ$"A=Ϫӳѿ9B.nro~nL0Qc1U$9(9+RȈ7.oPD`!O_2KӼ5&lUdсFKV'*QD# QڃbnY"{}Ï'Cp\Jcd/[ j&7IHJp & ձҾ_~55,ϕJ7O> ˶ /,jF8e|s#ZPln\!OA uʈ_j|aOefxe;9ZX]=V>'"]",o}FVu ;ogo @$Q"C e_˕5߯zɈ&tK*۠JVL7#**uH2&Bcbg8yP.¥]QL{,.\땨N:0T~N 99P, ۧ[_OpJS1[IW=132<ѫ}93+~a!D GSv+dn{,#~z_+#1,H;BC3F$1.˞רԯMJSўz߁9 WR>$xZ %&W9[ h-<9-〨Y̠{Q{kpM#a?%>OWCZ̈́4f9җ!gib(YȀ5Q&o!>3RI8'ԆEmv^([!In{~vB2d}WvRH$쮔bEmL3Z'Uc3y<-&&3ç$l=Fd`ƭݣ[M.cmhiېА>5IHB@6߷#ʕ9^Ț]:} pWK+>aɕ%4q(,@ߜCe4DHCBM9 8If]4'2tB-uݾ=0~?` >oQr@")-Z vv®vpogz~CAVL6u>spn$$ؾ+̀@ݨtq 4O>; YN-ʌ*MHw H~@@27 v1JbӚj@7B6 @BHFI XX6Ƒ902 nbUmeM!@%}`N VsʍpjԎP7+kse0B/?QD|a`W9fm7g:o2H. a?2ݰ}Y5H9c=A NgXS,K 9x` ]Hcԅ{TSbdƯŜ)s9iHq@ b> / yĩD;=s (G e$0lE*IzqI!ᘀBCb}VQ@ iR@yFL ;!Ȧ%ֻ.p`*K^Ҡ&7]Cx,-6GjnIW)RνX}DD r,!髎Te+C ]$L&NXSUj1go3*]9uj+7 a,CǬ]녴r=Mu~g 79^o{1Ft7t0\Ǡ͛UbDnv17,&.$"!d"Xd"R$Ar9wh}n Ke֥~m𽌨>䏺7~\.@D/멠P\8.CgtSOTϞ6T3pP3}Σ%#A Wӧ^k<ͫs2aJJ֡*5%(ÙMP{sB)HRFIrwrADXVˮԍFqe[ R I@+wg- wmEQ2 b6q9{]Nmmiy/aW2D9@睁J l-5oco*i݊ʘUX匤W8SL@Q PccXpﴔbIb7N5ɬIeDMDU'<$ JAc>-tk0p Ai "׀ƒHg.=_EpIs9Kto9azޯcwx)$zq$z*eRjRJQYR\{.6gAtK7+yqߐ~]g;|>׭ssiA.F)OQ׵^cs7=Cyɿ6)]ֽnd$c9l$0ߓyD6@;Cq\o䜼p-|Mw=K(8'&O]43ё%@<5I$I60JSi{ϗS}8{ ާĮusOP柳 @]|⹾Tb2Fy֯PrNbn6GĔ%4t hg*BDI%T=v ڭMU~uao<ޞ!V?-$ΆUL!Gu|~iY]"';DM:,Q'qxf%",mԱ{+7:/QQD4&C!| x> ga$4ٴ"B@>bw ? C.V#/WT'KB {t3d$Z孎8kxřӕvM!5b]KEB(2OܰvNja{oC׻W3uR"Io7@C*=(c=()jߥ.g&^i_XT.Hft|>ӝRuNI>~v 'b>Ά<aS}B2v2SfТ8Q:K>$ӼpprN: i=gV=;bmx{E?-HO3l% @j@Ō?qmMS˱(<(8耠W$ς#ި }G"ٌHM!3q/ N؜k?$=u ǹTAvDRaӥ]O mt:A-˝a-*d5!YeZW ꮤ5ݓJT@J{d]W =:XNG:ϩ!+5 7O>) RiY ār*} LIa# ,U)vTAhs2X>8_>,7÷]wp$(K \TVxI K-zҀY[R} 'قJL|@_"An591[w@#%RZTɧuPD_A.~Z@u=nR>Kg[~эpTYv#q?vnW\fi}L{#\ G \C# vVFrLB?$2*[aYΈ|xV`ryD"1io~P>'Ӳ~U>$q%0im] e;|/^ f qH|w| M[{J~ƊE؞ܬhxryr̯]AMRCHMo=dIDTS 9S&IsCӯ;OxbNK =ת8wD*HM'+ޢJ9QHdtEh} `>  03j0b\l0|~Ke#u ?#rK%BΠ#=O7>,|yW-̈́1Si2DS$-eib/.$.S)G9CD"Q(?p\#'%@)M) gph=xţk(ԣL$*G*RB))PmZ!e`eI+cSM bImBAeYOaX x, 0>.+(H.0g5 N F1uk9zTd(Ia3|$?𑷘npMa r0a"/,~:0_0!5fim]%.Gc=K_7=y |*M# 4ɮF}6ͤ@Ntz*҂?G?i7vs( zum|>sWv={8 3-i~5Y6{@t|=q>kY=L;3,&gXW*uQWgZ~}_" Msb$ړR Y\3IWO߬( &۝_|YiBI!yM-.Fdi9ѷ(HJ̍Bq.ۯiR~س!$`ޣwQh dh@4@#4oVJEJLӺXKY>7M*aɏvgcK܁;?3V Pm) t<ٹ/fKw9B- |u9 EvD#@ 3g~I~V?][si<ϟ[Wu_ճ,pnTOIT*yv=7l4g`o,ĄOQM6SJzi̸I@2u|NrY $ kaG"$ %9Jwy^]OY|(9I;G=spY,^1У/pWeЦ#4D'53aEL[>;e%1ĒOF $BH}zl?bp$'Ê~cWVA E4U ȓ{Wlr~;akk- R,a 5JbiλFly =?EdP3>oGg1cȣfxm$Q˸]}dDZM3h)[ˇ |!|D7# 0jkλ[5_~35}90Osvf_KDӇNi=M}9 uMQ+:MTVuP,6Y gA:dшSJn;BTHiz' :FsAveKQr*;P93]35cl V#"Ȱ zT)(HJd@nUCG64;|p]=fnkI3+EPS$B(E$I.R](d)$ DsfVM֬%c{@GdDD ޯ rƭ&fK]Œ֠v0+2={6$BIn^II 7E KhN "ҵp1:a aDefpѢǸVPfM4A&(6ybf1j,X)fPZRSB#HSU TEUPDJq"+{N*g[g/̳20Ăv΋n{J#FB8f @W\~<kڎ̞aF7۝w&A!UK Iߥ&AR4+XHSK+0ٟɎuW_yx+f\݃@tm ڱ返IEEB("(**)$QWWܿ#0}7uo1E1UHQw)4E#TCgV"؅eWxЎߪF́KQ7Rs |i%y#s8$ Di&BbXC;ZvS__guvޣuyb \I_1Aһ̶;&칠" &ܙ3># z>.ƃvs`H },_{Տ]͡DGz#H_| 8)h^*hKUQMʢA-RAX%)5)NH[E Hj㴅ʡdVJJBɬpDlQGkAA $7GoM.>(R=$򔟙&Y2[XÀ%4;f{3'}W-w?K8W:ul{(JPH$=ˏX_ի# 2(@<`CF;G%z1y,@-a殻<\|F"G"PZ;ttU8F%Ϊ# "S]C@j0  G Bjcr($!IČ'U"b/mk],IBw@H!a:&QNXa%#HÏccn f2U.ض6-u9>b]zI؝`JI<(ec^f(cAyܬf=g2ǔp}}1b%fgzOVyϩX(R3O;\g[QUqfׁSD);1ZuKi Zo9 $1 4_(THqq/8(K㰩SbG@kn޳PA tT-NjԚݻ7 Aj}E@bO')HI"҉*09)c2|kzג(ȉ A j_PrϷi?zWD pmEA }_RXwS=*e Qy(@+} W A!)V0˞?/۾Dd0Z_ly|Ma䝲~{œV|dPJ'*!х &GϷowg52] QB Sin߱@>" G t?mȞiޓ8599egmpB4V@I-wڈskkj-yŽ=H38+ JVL@X*(41J݋xL>|n^íxHi)OMSQ83ȗ\9!PҀ ySPb+s-.|&#ueg~7H٨[Xc`$ O"qHUzVfr=wL~_p DgLht_mxGg&*JffV*6bG!-gcŕ 9s败YsRի>}pqdtpRZ04$jExOI+ՄAiǞja}#$kg<ԟ+:ݿ_?Q~/_aK%Ut|hGxl@9Pr)!&j<_^n@D`l&/Ԁ_@@_* ǜk):YP5zHt=嘱cХG(?] ~o`Dl-P+`s,n]KIcbB^4^cﲬ #4ZP7 V/~o:$=jI!IsB1ANr#O-3%|dTЁB OR>sUE)C1p;CC  FOaɓ?XdD|*.n77x;s1ݢaa2V(JϿ,QbwvYL`ČN hݦϓ'[ÍA?2֪̔`ҚTȒ |raKWH@hߵ*-J $ *îNxgOk!DSO#]B{"U EߨɁL*2hߐH!iT[$8[JƎkZpUeU$ZY52䐔$uritلB 8-S/rަ% jK T"|G9ʶ~O#{VI۳ŷzngWTbUXE+3jGG;cs:F<5:|ExŬ=fƮ,5Z{XD0Wҙ襘YZ)(2@g#uL"ra‚}%xE"Dx^Oj/b,H@X R AB ,4Ka%$ DjUa#Hz/陒?3 O[~Շ?oc@A" ADB1PUAH"DHAb""TukO0T0 Y$ (e=M{uV>"2hBF*YbxO1}NWMף[Af"EETFY vK&9(Y R"{ ީ;t&~-X*ܣ平8P%^4S%$ܽR7R]C&Kd0mj *Y")UPASBʅղJ2BeR.S >*z>_wy#H58h]ʌE.8~,9[hI'?olSKAmmW>&!j"A!ЙlH*Br p#;Y\H={<60ѯѓs)3 C:)wPڗ-j*,? %#܂BAWL:9W\[@ @L{!SS\(-oɚ,Y _~J:j-lj P"N%zWn;\ թ"kQ ,R(8Au| TAQf_#t%S#É FkB ނ19ܴ|fN(neN8*,t{9QQGm`p`;EcK\ݛ.!t1fÙsSc.^֑d7j?p^1W~B F1 4FH"aN9أ)2OnQ K, F49 s}h,KT`Kf*Yr$$*k6uD!zrau?GeZC @—IAJH$b;`ys{w\ N0HC*KQ`9:@r,;]=טF0ZhI?]rg8L$G6ԫD_M`4$:뾐ܶ!!/ 柂Q+d KCâ=vG[⌚ r(8xUmlHDX+''si>wm>D=Gִ2Q;qyghGaDI1K&CEw2 xjH ͳ:yq&^6d+3mRAhrtLEGyW@ m{ƀ*s ^3BHjS'd%E#>P76_kA@9Y(xOQM[ sg"L }<t^2  $,4HfH8y.N1R!?#Yʦio*ttې"BWeq1&EBx5Jj O#ӱ"c嬧x7. Y[`R_KVIb$:ؽ!4@׹UnD3]ԄuJk 쀄C>J)ӭJyrf_gedr63Ouv?UA6/縝]ar{^M(/9 R "pIk [?%"4 :RAZPvLq|D0gct%k"ҝRT!+ "IBS5ʙ3ϸn_ϩ0I*lw{<\Y.uC*䴒 re Ϩk]m9S\[%JZNeze_^ΨG?g2"`<)Vܛ ~dz3v#*PJӋapL>߽mTa?sYҩ(h^Weh|k gUDa@~oh `(Av D)خ>.r_m9&pRTk 0f!-@C.9US;^iu=`W*|B$4GZrF@{=,Ӛ.Mxg}/(U0DDDB5΄a?8ĀJh.BFH226 [U~:?ؽv})+ʄv Ҩqwz@( x^&weAʅ 6&̂&}.oeDΤz?0'g=mi pQNv XCx} D'k6+ EVov9[a(-+m#%7J7uhxܴK;<G1vWx:uР& "ʉG\,>]ח&EO $=i`: H2s3JM[z)~q[9ns}_&^ލfjE!v9F˨J duQ̽BsfM+ߴK78fCӯwv"c'4%͉M']Hu-?Ňc.l1E"(+½ߍE#B2W@ H@"^x%(Ԟ';¼DPDŤDq!#1Н;(+ > yāKN"b3{{Wuz^T Du/_e8:R>#4ś guG?-PĠ dr1ᡤ|L`t7?DQiHd500(IL$׼ ܆^DE;Gsr뗏2*-jI" 4M3nvJbK#)2I)(fK¸~\`˗eZw_x EnN p"!Po][;ؗxμ/*HÂnnG`lv$~# U^wQ.aPߌ>1~wŭDk7>GCYph¡s42*PlNstlMfv\ q$1[<׷YJ;ݫuy#($DUY"O4A^VBtߑ 5W=Q;_[vDvݵ7{8yT֝tz9yՅ,.&/ 78[ gN~% ~'m;A2*9%tⳒ-4+`I~ i .퇆Z󓇟Ѥ_lsޟ殫ê 2We(wXl )"g=D@~gBI>P$T&xVceD_Z'M/2SuR.ox{ JBi:>^\}LVKla4UD<^Ȏ$LG\},Zu=4G:\T%ͤw'0֊%웆P HO"(r3<y(MYt^=*gipx3& (d*N4~=;ypMh(ٮh4JBKbPh 6ݚ `O8Rq32.yA`{_ؕr)wU6"C<Q(_ޏGq*͠AhYAP!f(τmOR x iwolBŭC{&i2: <[pi:;'7G=QuAQ(;ڛ^OTg$mwb\M7$H ~jֿ- ]{eH4K>E\1lFzF#7K)s|&|n;ew+Xu\qxo<WA<wG5" ( d{bˎ=eE!FT$\c:C;|5x~~+髣ÄL?^UG,-%AXpИ~&k g)F$sZ놅YZc.Y7;f{mJ69Y9ԡ V" BvZnu\ZM˹g" +v|WzAĭ, E<K$DBahPD3rV_ cSۘi-b@'S9x ,H" XF DAb~E䗈*zv=ݸpx꼎*#Y ;mRݙMz'.U$@Ȼ| ˔Ek/ />wg0Cp0D9J|RXѧ(""Ղ:]70gIwFWdkRA$p*(] D$۞U=$ IH%d 0f2R^B-TT7vwxmطȆ͜(nsM ʕѰ$\ca1Lxo~OuߧƬ7 ]. wݧ 'Q\sH0+|<ywf&(?UF5%<$[OIBU6Vw/\:'3фou\KaEB՘H}3cu(:|/ewv"mQ5<"0'*AQrgeR Dz8r֒g`VGɛźes_ f=kjgٴdd*UQ̈DV1V,eze+}t ш>7X;`N&Q)$Q`Ds4KY=o۫R= $<|SGF>4IZtpKii33!W_ggIG"yȂkKănv~YC2C$\[.R@] !2hABEӧ\]}]UEq>z/ӈsjжp1T֗_f1"\rsW)7Fa-~Jaj^tpOGvzTC0h!|壴KNjUʼ׸9:}!pKOҳf0y L=7۸BiE_IxMΛwQmwmHΘudzB`.Fnu WupM'n]λÂK58]O2Fjŕ7r3 >ºrsNozEA`{^UwpIRPw[|$eiPf*u1{`7%U=_W[z+VόJiTԬKMlNgwY sr. =+ Aʳ| v{ h '(aJ?eu^m1I٧2WI9T@/E(>$1%DDY3>-zTGu;-Uv]BR|>:J`:}H,Bha#Iws-VR^[?n?>qpʛImƧܴ#@" TWx H3BD[u;yqb=)ª:6X̟BMgKa}ZUWE :4D$)(h0tr>$"wG3^W?w\pǡ2l};'H@˂OQ i i1<{43=ɘ"*Y"X[VR` Rww 'Ri8At]%O㟉͹o2kѡ8&Κ9&ql*ɚ]?E (] ?F@t4EO+LQܽ{='x=>6NΝG~0wKk;C]p ʩH_~rZ24yUJ)Pyv {WJJ)'"OU$ Xm?I`m_a0W]/v5jmzRs-dn?i8NB yןu_~eCGbH) QՔ1 T#՞YK/qZBZ]ok|[6sQH*YAiHyw8*V~q]]ƨ:Ӑ&GTx#iKZM8C":,̆8w?,:?}S}ү&oi/u dJBAS$$)$`RmpBfaqe1oc$4 =ylem~# h )K%U5I~%Zr瀗}ݲ)4#D@ja"VrZ\q>jJH$lY Fl0[3nýHIׁP@+!8 ! &[^Kek Aˑ&C6i7|B:d߃4B+BSMq2i2$'0\y|azsG 5ȋ`E3X\#RPz/'&q7ϼ !`"̸R]P "/.1*xy\馇/=>nJF 9j^g]gǩS4EE"7nPZ0,,]@8@"n*#RLdbuteVfr[Gbv6Bڅ$ G"d $un]iGo>F;4 ,(߄ސ{*]IO*ɋv" $0ڂQh%B*3TPDB8"t=!MϽM0 ր5.Y z%ZμVRMLSF:~y-oxWc 5ڴ2.ẀF8$.;D`Tt,y< Y+vɫosnŌ DQrŗõ*}[bW:,U,Fjv躌މo[g|]e% X+i3'q| B@!$]_LJ^IF~{IR wcf<>b^o1L)) iI˻4%y: O]*ܨ3xZ&.ַ\kY [}*" =M7B2$$\wK=w?> ;_ M}1 |=qp;P4v9+n 0qP.ֻ¤ekëG3fSxFHNŋ5GMWKB[yRdٷ>:z|P:MEҝ_RO35VeD)kozqո}~>^e;QC*+̍c`PF+ETt.{4NYo黷ZHOodž.l/M4#U^~P^Eɳ? =>ytQuI9^3C-Sv/;0g}Fi< ru+bCCf3L8^u?W4y1(s.*# lJ=K$J"Ha7݅#ʦ^T4[쐁dN c߶JbBY_pvfe]عL:ܱC9՝[W]/ hRf'[q"< 8K{[peC!bkHy^5'mB;Ǣ53jo}߾2tT`KQ'.Aa::y'3B<]{/K;eHԫokc{$`X.z57Rw-jX ؏OSK) RGQkJ5~EnoxpDFg~OO]qn}bA}N[ѧ{EU]h!S_ZӚ{yCHO'^D'RꐑF@ ѣT{g[^a^?3aʒ HI/GX`:zSO%ah/NGÑ"g\Є eO~,-=6){74Qc?!x4]dzCtepH?a{yH,S9;Zi'4۳n/N6}2$="T@\|ھoy,+HtȐLYϭ$ʷblSfFptj΋9E !gGۺl}œB)eDΥZad)}e:IKlѤKĆ_zN[~RuJ&^یh8?̬e sOVkK%##/zHb-8*HkrMhҪU~ݤ|v1sxzu3?p_a!)BZ"uWþR?MUf*Te1 L+\NP!v L3_ýHciZنH~mٖ娩-_&U+mcbKl_0ͻ$/TV_AdgzHPE=HV=[Tl0G)M7Y&.(}fxFV"$R/f_l`T'2?v^hG7sOgZ❁〷]z"[7 ">J jI@gZ/MR@6Ycwү=zH"Z MUgryrW\ ,g1˫!@667x !xw7g`=qlq M4w`>Р!E sgWyqPOM\4VA L@goGVD/ d=i`W'#/r7ZOlAc;?_v??6VZAuuULm~MJzT͑X>j" KU&~)OKSR3M*nV3 ~\FP3 J1~VGSaަff6++u-.1:%dG>871[5,,_6#Un\g8$v-[ JOftH&\="t;_8)ۙբ tk9"NMWԱ)D/!p0nUp^;OMbltouA"a@ u:԰ښb *X˝w'Cf.@y89-j!7S$au>B#&\_mji8;ks@9 vefmXU\ ۶0qKUӲ v;+k\`~ǏBwhW|kMok`)`:xYU@7~o`9jF8 rmzCacX[f#TbLζm'SvQ*BH^J9BHX&ŘQSR<ѝtnQ> ʗeeGkXBgfQO`{n'EԬ̙59]:Ь|E8 ݹo<榀!%7k/RÂ{ɃުxH?6y h2IX}m# jWwBmYfȋV_ (߁pJ?%Hd6}v)iv$1H |^7=@gh%lZU?E񪖙a.ߣUi ?fs_YwU.NrnCT(]2-I%w1$)0>} 9׏BZpN!K9"Xġ9"تr\.@neeKWpM8;{p) ,. U:A'pIp $|dWB%'3 }bY)dⱜSLH#BX;\kj{zot/e"oCߙRdzvYMAЄ}'4C0`28_ _7j `PJB 9_}ZBH!dB轠Lm )0u+)+!tvFfwܿ}8h~ڨ>۬ebP\vKpcڭ-lo< B ے+q=_X-qq\(ڨy~Oꢲj$**H*pC A8p SL.ATlҨ4N`Gm(j'J,ܠKIُ ˰^%}9AOSoaOɵ׏k 6ay&6Go9`yΚ ]w:fhm7N7+>u ;MAȘ>p>`U @=.yypk܅O?b댍h# /0jUƆM>8qAX@_΅MQEfMNƃ7AM#{+l`&CgAl6q~EL*`j^i0i/Z}5%J JZIƄ:̃}rMxi$:D97\);+h]=۲N&) YIRzd50Eyot;U p"Ar$܍`y- ]V9zw2>q}6ϻv| qjLQ4PS"bPPeK1%!k\ =PM)6a7am\"G@\  &&:c1PwUOy7,½% BCQ\$XIMO2eg<*ޚie!,@23In87kXK #^R3?ew> Gql0~)kc^q` ,Upց _(wĦOн)UsmD24wxfi`=d HOT,,3 {#r΃7/yQ4QI25Mz[-btyۛI$֐iAb B $$T#Ad؅^6f4'#E9buK\R^ K=CIT8n4`MU%QB`b@DiR* Nfwʃ7n̰5JK׭ 0=x $(DžiźHFQ}G>YӸ-կ=1 MI|)uS $?W(5p%P MHM|J2@!Q()DşWML }S̡Ypɦ.-DoO#$ި  b移 ~FR  7(G[?G/~p?ztj6xaneK> b8vEi-i(:Lmt%MỶK˪1(Hn!ϸ[p[=6g=z_tWMbÀ: 0D gUq lC bD;Y0eFHRU :g ~6<]+($ {OA 3\׸셆^,Ф8" WG#-Zh^Yi'&h r&uVck_̼#]JA|ю^Y5|`Dž0,+l 0VHX(*" HPUTH(  H(D,,FH+"B(,F@X,"*AD`)#jWxU]&@ D2iC5~O9ktBT3gܻ5ΐi[֞74|t9V>"ZFGP" (&9((D"t@,(w$@ betN!:\h(7i!纯,8ڞ `׈5)Uߚ15Zp VD핿 W9NHRA!Fnd'rB. lA<5;6=eCK,Վ?瓋D`̂( ^ii쿦?nz8={'Lϙt7ް6%ꈒ_߬ad#zS`zX.eOia!( "BAri(|KwWZCL?QC"S]#?knpgu9៴ALӺ|T>U6cJ  gFR.RELBr 4<U2Su%X`䖸uI ץGs+,p(5982n;&,IqPH^J:@!XvJjWsq>cl7|pbBRAflIa iU+o 1,9~fl&$"X8{&")"(b88H!-5Ne'zS2!k_5rKLSAJ)7 E® ,vNg&d߾].OTo{)HYl)M rJN\(AD .] @pA C @.q_ |b!$]ߥ-V{}m ozf[;UTo)b oMɆ" c g7*u-F~olU)kA`W2g *o0RփWJY.ڡ9TGkf}.پ’nq^\=SǁZeڢb˲с]<]Oʽ5eG AgI9ۺ)0M,@"XÖA ^d AE1VA1B,TTQV(,m'xlcIwj;XT7.e^qK0 XD l/ʵz}=K[ëPK9۵t!ϕ$I!30UQb $YBdXEDX,$Y U"@PY`("œj~ޭYɛ]y;TwTD-EDdq7l߶.fe^)lҨ-J KhV8}W" ùjVK=E9{3{ EqHC]I 46,C`kLpej60K}P@膻 tb+|0ʋn /0m6i,pwF"j󼬋G> Nv5Gf hnW]V͎qw/ֽm".P)+7TTm Uq+$am^`yE4Jdvz+7jȪu;LΥm ;4P@^AZ(Xʻ' !K7],ԜRh eP^SpWR21m2((ؖ.[V 0y"j(G> BzEWz&!h?ѢwHYej_}K|7[@Jbc0$XHcX#e'1|h4}, 8VS$_.,rQ$@}xkQ'ʲ۸7BC|J5,rlUSCr1(uH\[iuPDrI%_b_|>Gԛ#Sӗ%$! zЊa@m0)*G*!L6'7^g5eh`3 ^9;dwǁK5tt1a]Mfk]so3fMȯ׃0:>JRKdIҒMEk%2֟*JHjK~gb_b TUg˪՛F%Nݽl"Lv݊;oK+BٛJ+:_Ooc|Ɲ>Év;gd21A-W(A: ?dU2rra[gcJ)ò(Y (Mq:=ř*d7/Jl-]e@J` PjBaS %Y BRf Ӯh3/l𴀢ԽJW*UUxy%*'Ğ.`h,U!ĘIRR]GC*% GwVc} \<@Vrןyvĭ3dL ,؛<>"9#_\`Ww>usT@ix3+n]ۣy3 &IyPD <޾~WC~+'"s5u m~ñ [$"Zl67,7-͞VA3N5L5M!g8g*圁goi@zN5 g4;F~K|//ct*KU iˡq&W5bsG =maጠbDvq>>e @;$r$& &ó֝K]XYv*OF'p?!HaҔ$$RSxXk#Zy-޺Yl=Y9`fV A<]ß7 Ԗ)#%=yIOƼ,I/˔D@_{OZwCxǴG:~p= qcH~//43)8br2nd>6Gߩ0K 6D() *QQ\vl&[vM mlӱ>Z-, ZmPL&X3-eHHA ӽUPVHM'ŘIwV6O!N$`J,1Hg.K 396:R&_q7.-;$[Zmf_6K$ņ.J’)_RK0edP-j)$^JD'=˼+Y}(HeW;DazkNHkg8нnNsyfke#ʞTe)z>_g;ylzʰڎe5JḽIV3v-JmVk^ sVω:T{kKYr͠Ԏ3KcηƁ^%7jnAMv#^}f fctQizY^ r&UW;i)qԗjD4l)~^}U3k+d8 q]06 dMZ{%G#}kL҂9G|mK9eJN鞟qlR^),@>;ȗ|Bwk7S2N:d}xwќ i7]qP;!8b_Bnm|Y^'Nj˥. `zP^8i._υ (~'arK6 MTmȢxPN6ٳgj5FAX{̦;bsLt2VXs#&9Xh@8ܼdAOem;XgK!egZuO."NG+ƺObX漚=B&.zz9Mdە_G<~{;~oW?\1c&A3N)4\DFRv]UC“HxY7TWA3f/0_7=(\?`27_8HܘpWr, ļC\l [t?W=&'JR2A~4w0/&B#{COhXT *Um~{O]W.V=ċ7zb32 3uyW=~`7{Dh ޤRcrӏ!' طǓ7YOʥCuKg -lS@BrbS}Md(2,( &d՟qX0S*E? kઋ.QA )>p<vR[ܮH[ HIc8a^}Ϻ~:|ee]{7Ad> W4 ?ST1F(Z !Wi҅s?' Ko2 ? P a:_~ I8Ǵ@Bp;>S;q4D(Ml^JF?6 8Db@$`g) `IɍueXNrG&#ߛ;VJa4] )09K~by_=?&qVެ*CܙMȩQ0O;kPnG4]Ѳ H+鷷+FC =zP/y|-0UA+mf&62&q,ܑbH \}_s_2eG)})Q 17庽A[75S,Yh\/؊J$NYsϥT ͱ @d1#D9H+ڝ@߄{fOR@$Mx^9c_S;,83zc5x9Meq0JnfbY^_\_%E]wt:~f:o{_bjnk-G=봶]B3~Q ˥ E GdkM\ĖFd61}jXXotXP^MIMdRZ#8?1ƙAru>>g&zd |zuާP/Jգ"AݹEF5*>+6 /aP=qeGu>ݜ\*UR˭ q;c?giQ";_<ŻUHP5ot< ll gAXRZY)Ӕی@ZO1h34ۣ&?Ù k̽ 0~~sfd ``:y|Q/#Y?Q91%$ՠBuMO #.sFB4M*aN7?*m]ݱ5a9ZOE7>Qh]@!><\^lC)dl2CXYH<77ZP#dudp>vG/GU(iL/?gOC[Ez~9W%H~)鯕{AԴ|\:۲ţ˳-8,)θlK5Q#]l=%?$eDTz$f+PĂ!4럘ޞ氞w<6HHPw+k9Iӭ4]8,)g`fy:~6ۻ#pl;\q\v^C0JUr#rh7ԚIڜXt!]I]4;iH P_ymzT*Nbr8N+D",@?>ˆ"϶nީ"%U-5Y$''G\ 䈘Q l0m8pht7L}E.^ĶNk1"<΂1&K3D+'ߧ0`F#~^WMd$CF9di VvyW N0Q f'M㐒be=jPbugD_3nyzvF9t=UeRЎ-4 .ՔS/?S:~Su&^PA $ rTSJgSjn_M8̙r mhD5הzycBk';.CmIܰ$`xdbY0 ïMToԎNJ-oJl0gwH :Ɣr )zR#!`">Rw[];O%'uZ !zl";A~W@p4m0DWTH@N`uHȺjS%n:[=rH ^q Z.+'-YjL^O:תGt]Rs[O~8nV2w!G[$ B"LY"!(`(X FABL(i& I $jldK VK,!L(e$( NB!KU0dPR(ҢD)P% *ԵT,5PV |ʖpWQ}RaT͖]/: MCF&eo.@.V>~e鳱,4XAY";2[q\ﹾ'0@oxU9ifjQ{V)8D;"1Ƶ:LX+;U^!L4~Y6٨d,Mm:&CZdjO1ᭌDPdb+_2x:;_&INHLsف# "e|:!=@_AJRzt",\SP?X~xޓ?}'umdq`="@U+S/`!xշ~;,a5j_k&,Hj&; }&(0{i1<e@ykDtdjЗ˓e ,ڧ#Y+RT7R*$HR ;T_ "Zk8tX9$]ܑBt'&{z]ISD, R)v-B:CA-|2SwAZHu P /umlg'VGS3`fDR^#GR~|h)HYt*S Y#Y?`͵l3V4WU0O0bȌ!diQHI   ,b,,q ntҁk Ѐ $'Qשk8ڸC# fK2"(=g}c,r|π6b cs9e׹nFHi`Y Y)ŋ֋В@2kiҥSrxg\'`v'ݸMmY hfH43 YU _K'3˸enU\b1)ӽ=N6: FUXy4-eܷGDMHRaO2$džxzTEmY0]M]NL9;$ŗ`S,CZ!fwנ a1@)3|46%*nN5KRk,41@`` 7{Fd%V/U  `)NHP NJJd0B, Q  "X0eٽkX}!‰gi zdW֩qC3*IK0'a95n,7<a(u?SV-ژoGK&oV:rZ'<϶w Z'%%O:GpDj@u9$E9=bhx|ݿXz Hd!3c=WQs!H|mP# jMŗ< #oG1yvkIiՑltT@iՄ4>>t אzbinNnbdHU4S҂dNE:"JNOvd %D*׀aL1"b{DzC{&EUXZ飼Zxm1cZTo]_X*\EAyNzg-إ~w!t|p&@I/mg;O_C%@頓@wP^\!XCB#W~(aʢÎNUA?K*RdŻH.f͗wMD y}<5UA.aJ!@ \q`I!htbPDE_ELsc3&A5$ "p 57SNBhn`q x_ތw\"4JX1[44cJ$5/kJ}>۷T2Zbw9Vp'ld `I 3{wa*2d4! xmkkZ=C+4zq81Z53yJ @'Ns7xv7j "; " Ī4JC 0_4<rNդ(${뿈od=IJQ `HCU9!OgTOD)Vq䝊/Ҝ)Psұeaa8ZaPRLq76/qg=Kw*PzZL?Ŷg<7 }/]e٘{5g֩a|v5z.{tJI3cRpyrjۘ1O(i ,|r|չH 4 ;F!; )T~!'5r2vGsB[ĜiY;>l^,zUBM2Etyv8Oi\+9 W|8 5l@ Em%6Y2mډcǧ9:{AGjWZLGE]_kaz HL/M;%;7:%M()7vHH\{۴b.WΛ]Jb'p D46ѽOI pÅ,'eǠZ6lHN$,>׻+;+(`xyNQ'$#2)&w-׻^J:y*¤_-YdЕpC!W~\w,豒I*y+y: R+BtG)- WdC;7H@D;S^̋!a@"g^­f7}iZ $ :$P xP|~:6"$Q3% sau) Atҕ.=w@ט8Fl ZllF9e9@=mC@Wc7Aad;.GCt?ӳuU^^]cZ7YD 5ppM: "MPBCamH@%NjVEJB2ekqPBa#@虫 NGP:ٺy Re%H xX!~a9!n-Uzu@_U.',a>Wo={,Gl` ]ioMwD2p\L8M Hp$aB= Ex=u^jqijrT[~_#کp3}7vnbϜNCq0}b8 v[ۭBh_ EGjի^7=ʠH[/R9 YUn.䶔b9SE^AGrQ\}DmR=vDs'mOz|np"L N9Ёhy(#|𵀉lH1ޗHfk I>P=ڬ><"UAίu\)[r[6H\!e'7v`y( w]pCJ=t&k=Ʒ,ltS D H틻~ul:mFeW'ڈaL/:D,EH+*qCMV5uR~eڿbwg~:ԡ\cҫFUljn3)K{v`a۪R<+>3~)^r)޼*6 ^8y1e"YL7%P ts4.`x|pbKrEM[Fmy7b1 ZX8<ѻdjWXl!l_5^{ǒfyYT7] pLF>Bkv=W^{~neTf-1ߪ$e6'fy2]T ;nN{Ss;rzO%rޓmMe-`2d/+>G=FjͭExh&fDSPQIUbg8:VjpSuU2 PbufwMyfdmoSnj#9m\̷iQLq^1>&F\C-:CKg}!e(dFAdWa@G*1A \ F_%[+TL`Rwqƴ'" H@ܾK&VڄrHGǕVľ-035Rx \}å^n6޴T Z$p;G1OM!ZǟvZdߨJ@ O޵ Q9|s^HU)a#}sx؄>V0t *-Iߞ,ˏTIj9:4tf~w:pВs '#+SBulCwa} < ]z70hO~r.fhc}"z4rQ*F[&M ^xmLM=`|iVվە"$a,YZ1WYZ 2bZa*elML/ᙞq$_g&Wb&;ED#J:#lǶjOJwZ9aU{N?5יSRIUtZv].s)8wr}k^'k^߫񻷕٨'=#z1#`DoB (1 v='w#g&F=XB-LcmO̹W{cW éH%^_:D_, 8*'kr%?B%I[omnO~$ rofGcONWcX bNdlpU\ؕSy$bdZm4<?fЩ~Rׅ֙]JOqn回q$TqYKFK ))w`hC{ c[(">9[ 0|^J^hZ8#ꓑ݊!+򲔣zju/uNK&y&b,W.`׭|w2B#IgP-AnQbҾ'B|7C_RW$qi+|7B{˃qM(^轃ǘ\< '"((Sɦ6H#x@F\vǮěwל I;pȁmUU-'ht][.ȰDrU?t `'+MA,NݳZ=Y S6qK$ /9)SŇ,6Bl$Odŝ{lH *ȵ t=^ jetÕ^'F<OKE8$e{?Iefw8bJn>oqCqsphWa\{7玏mEDQBx4'WZ=h>/4 RJH(SIE56)kRʭ)+W5) chYJ^X/'/z) 7W\i~C]uJ"MO>x E6u/ s'NH.!TWI)d~ǻ?~/hs+ Pd?@讒v"6O\?&⻺כF=R:W#J]WY9"ր+A3Z!A1%56<|oYcqcH/0 1 !B 6{I̋ߺ3TB I-W1AIotF+NdeS_"\ 7Bd68Ȉ''? =Fp{Յ@:CGkyN,txl JcWU#֓]\!߇@Ү@#j7~Ӿ?O>>!ZvS/[1XA@1bsl9i XK9 3e@S>NH}|VP윳TDVGI"NxVw}ai1WD kK ѤY,,U?QGxCAxg \b$('tK)[>||&^%S,Zc0OZZG:P0?V]3xB6 L_K5, :7ΚR!D<`$ɭ+9L%ޥVYtT;{N ;=d|2!J7)U^Gܭ&901C?/~;ӭep5dQK~-B? =MCPczG"k*DջnFiڱ<%~;@k ܓv>4%vx!-ʯLc+yI/z<4(vz2?o qW1_x뺫#,qsQ7J GXU $,T 7c,SR~_|b n9Qܵ5g{UlׇGE8*\wZYWJ^Bdp3d !.P'AAO*Mk]\e.xӑB@ $ܺi,@T;RD%atJ'5`Mr\ :+]O?EtFuGjHj%EIAw$ Ա,+\qwh}m,z?jK++jQx= ]2\q2k zEO~aV(%/Gmxc[O$Yh(erSTz;P,ie:oqj,M=_iyiz4̒SWP57lYوK_5 4z.#14!~FDʁ!Sh^EpJO.EJ~KJCQ!̸^%[KOMg}:)6=R)[9SdO8lS@yi_6f*i{RE] !/0_J{݁3AvEY}j~h{+Wv̈DkY! }űꛙ!fp[b9%ܶ@V, ̐}5LX=wT}x{귱pRH8(G|H#H7Ѿغҳ,e*(  I4HIl cĽL.+:V8a/R>ߵKO^ϑlv>CX1$o`ڡ˧dy/ǬlSQ:\/0kŖ#,#4]~ <ߐ##ưSWJETԘs$:&ۉMǽ#~Bk"F^esUPgwJw/[jnԀd{X&yܻy{ro/5t ??59dv4Und Gw+Q}]مyED1ll7qB/Q^Bjl߇M˾gމ,rk4! u=T jIw<<%܃N%+}6+`v%:$\8H@w~b6,*<4$$H(Oի-Hr=6ˆ&+/5!RIVa<J`בTfζ~2Śx]Ksޯ"*Zqζ<Йzj6R-rSsɮNsb'7{nyw;qEv߅Vhג-v+1Ftu.-ti e)':ROZ J7ES@C\9wHv9Ɓpg}6w5qӀ*_pi=m2b#@(gyV058C4b sƯ5ޟ;ݗys4>!R56b$fHS}GgO׽?Awz uJjI(&+TRֺH4>үp 0wR#Đ蜞HB& DAd>Qid ]'jgJ/AcNU!ݥ |1L -z[/<]ʵ igmR,=%)s)=){3Wk$Z;pKggKe*iExiAj?,01k9`Gur2Q2 ?9TUϞ s zwۅHYYG.~fkh!֒\kg$eH~!O ][E( |<,ZbVB5dyqvÝ٫uE&`֗[ҋgX!}ҩ ^I.iy{|{}/k:3}KOcU:h[4 DN5I1ho u1ո&|*vQ[/|^HY 3:E=3:Ï~p0潦t=O#w3M4n}*ē!b{.`_l1,THJĔJj_Mh@1!>&?m=Lc uR{voF!nI%B(ufItiv$t$?BsXZs$8N<$!RBG{^!,#"Oas,r"G=&S! :Y٦食@2!,aA3:bJDti$I6C9mḴd\?Ahb:]{|^hvR AN7.VMhO5rƀjqI/O}GUZ7xjڎfm|x+dJCt*nA 7pDV-xhL״Q 2iuN>OUw>|7=WbMρZғ[> Nv>ԬDϛ̠*^ O\VGGVq2x&Q>i, !EP%UnS5RV lk0pʿ O=tǙ:~?^7z.vkrt!AAAVEC  of̟7o7qw9U0iD֮pV~vvk9 ~,HH$S°p|Pڳ4ynj(0IjGKT}h#"2^" TƥiɉfH9(DۈJI(#{Î7ؚۡ/?f`d\Ij20FvyDSlJk9{|_oo˔OA427'kU9yC|zQR"eo Z/j|J.+߃jI2 $ - jc={jZl/<>ֻZ?Pkʁ  (K {_̱߾Ok"2l?8)ԪLB8`KeP ߵjA LɤOTn 1Í!c {I"&RHSE0$P d!H(Jd  5ӂ$+Q1v;rוpß֯Ϗ֖*S ԼKV#Ko7Y9;o*lT$36{r1b¶݁[,Y1P0}Hi]k.+V>wkY?ѠVBI%ޥbB 9½P~N2gܧTz]C)!R!$sI$o8=K3 ^_߽C9};oΞB{);9)5/FAkt:H[h>2 =UGfZԚ ~\+.cs2=}v"rZu&=ܚ,bP [U|v"YṘlCBԫ7}A )i+hyI<@Ԁ;>)@qᑥ⨑$5nOTO4 x>g=&THBHk T׹|BXA(fZ嘴Xq}Wa}ٶH`s=a=_-zeM0*R%!'j`VD}[n$FF(>۸iݺ*p\oiDOwL9BHh1`X"9N?M0vװLm`9L9!Y 9zR>eef2):Z7)aZ We;-\Ǽ.݄t1p!D"K$7fHviHS瓷$YDQpH]d֫w=z?Co@) mYR򖇖*uQyK c]kj2ά0ɍnS&]M]yLK'^WAC "EqR^(VULWeϥb.}9" r؂YWArb^3]5%YjV)5A5#:B4%"%5zN0LXo!Vpj! b^E`/P@ੳv=zmHv'Me!am;S3~)kqNŲx)HY5A 6t!fzR3)ZhH,^Jsi>%!R:8^{xLGHd(Wi+u]5@fĀzԵޥ+o, KLżǖBYR-X~+\I |5"X+E.wJ6jPjcuHc'f7^8>_7#ZhI~/B! Qˆ43^mV"u1j37૕_~,f񵚙sujIB=rGk/n{}צ n$|xU (N  ]!4[?O?;=iaq?Td=J4ԍ5yc{\gPӼqSQ+!ݔrzETi%TOz9u8oQ3HdDRxEHg" bE8|"Pg9(7U"X!^! cpdb6.OɁW=zVI=sv'\7Xqݮ޴pU]a՝Wh0Kqo^rYaI1}nUKE+#*g(GwI4#C?sEfbϮyأ|HU(R)Ŝq fTL7/NXNil̶y>B޵Ԝ[q0tqUd9Jx o#%:OY G?ʩ1R}B(tLH# 3 d%4X5r:+6;{g~uf뿼"o{o]33Jg!bL&gsDSq"RC d0ԃ l>Jß Ҁo N^|q Eicxy\k^)82ôe-;qҏ|?mZ S.`qHQcYj$mB-X(&\ ` @b"~AG^4LVH f HntK5T<ntxXk %F^!m@=Ul#qF o$TJ"I%sNY!I@!ѹ#Re4_:4 dSse[vs)]/;6=CQT߷|8XNMWFݦ6S6mwRax``0 0jDز"Awǵl%! |`8l_?}Z _Zmi([Nl!q0rI,[©>vhn6TX,3n$8P&i"C}yi#IxőAU&R%[s c]ǞTnaL(bG?a/ PE*[r0 EP|-)a=ngKX[DifA/?8F{`?e$<y>y9յrQRme93Ӄu7SS|Z|̬hobiϷű\݂_uyV$\IOsyWOGt{Ե_^+zU*d+%3 ݵKiTżSG?>3/mZ_PƘu-dk3kA~~IQkR dLiDc()dD gK)YZ~byosE"B2)4RQb%$)*( LU ODm w$'?^?EpOuiFɝ?-=d}@ca Q |/> TET?ǢajU2kL/+(|7OeA[JDx(ۨVP9aVe"/?֟pk,ܷ0_đ] LCd)2CƽjG/nِ/B1=T;Qs6wg6[.mrz])D,B(S JCdXB3@X()9f!Tj@enUv {!;}ˆ 4‹!-֢M.;|qutBIC%3QzamLCʰߙ`JOeܱqkEh9E*n~-|w?NBoБtQ3 NX`moTΫ#ðU}VFU.Deߵh|iqu󩽾OiOQo.gDNd B1{FCPt`L[;*9)bI h 8ndޮͪ[M:%UhDx$%84I0xE͕b7I9 "b &n˕B%W.,rY0C48Yxq# -Av7U\|{]0s'π,@_ -\ǪԪ"FP~ZEr7%2~.”p1wg lHQ#!@V3fqf% F|JիZ|CAEiW(Gix9|37v]7}t*;C]c_P+z\gSxsKOy%gVC6I3z@*XBH'Q)D.Z< )*.jӤDb | %OǺ7Y20 p}*[u7V`loQWK{W=i*s#@:'y!Zq9}R|fEtR>hjOу=wyJ.z"b(D"%#`()J`ߒ1C;tsY+] ^Jye}ݳv&zQ!CbE6 4D//)@y<|BGEKjK!|/vBs9xe5pIx; <7E#kP6^Ko+lG2cdh2B J_xkuzw^ǵ#\2Ƥ~^ <$E\/-P_4 7H鲾>>k% lڏ|78DH8r)zf#y+QD .o$B |(ʤ۹mô ,>nة8go;[дRP}oyaI쭼?adxCqYbuә| qܫ֗7v"X^ B~ w,Eg@(!eonQO ,<=v=Jx[y{ٜyPC~uWT\B}ZZ-R-^ OS1KH Uow.UEkۧ5ŕAm(oڬ^PAɂzRgH+~. K0;N!/[/, Հy6KB:$gH8A ?ȗ2NxZr[=l~ %kO=+fJ =sK{)HkȈSiP !Uq} _ (}#a^fr?ͻ2.t`>Yx7ݡ ,g)c»$Ԛ`sEkJYŌP@yo/|?Y eOR>'/] ۅ/[:2śqE>?VZTv}OomuWo\  #U4Tqb9TOt}VT)jG*ci(,Dط͗]{}fk[]L+i4+bF յj6 U_hxO~ݽe[ [e/4O~Ksݮm9IKm%~X~ZȀSHX=)2' #o=;ldjQR߰`w\nh2 -kDJu;)' 'bX8 dv[_ :P ~աi^ZqkÐO2#+Y266L@lK=R>M#ӘOk |u ~>=\D&.~^'i*S ?5u6hb#1Pa^zf{/4BD=?S Ig>َ[|3@+HԳgpps]?;Z;3 }`TV˳W@xJz ޒYDH1/oj,+Uw,htLÚf#{9#~I`iV9NTv%B9 ֝,gw6i"n)>@}ˀ<]d^„%Vw "/a|}=A:k0͝H4,@oKBB@QV! F=L RA"W +kx=M\6gەgqv ϰO!hm9͇pz4+3e@)igno|y Zze|@Y?aA*zxQA8*B _}ErRR+PEd*`T hJtH 3T$]LƉ̱=ν1v4?CRz(+:/ӽ&{38vS((=Y,+*O Aրe0*&ԋ`TY (+>KæQBOΠh#2J4 m<` Fdr&kVշCE;ͭmy_fŽiъо ]& !$mz?NQWM&l@AT`"mmu7M XUENwsVuiK?+S_ ϲX1wn"͌˖b=O5HT⤰Vƶ{->(tÅh0I>~V04\9F"k5BdlɊn$:bVYwk>tM*WDVsĔRP"WKlzmJڰr'şs 7ihq»X|lY5M+1$=q[yM{t޽vk61Z>襘ѤFg 4BL%$@ؒ$c\ J[2Jcx$ε{ʓj)4p+I_nVsJdy6n1džw|~QnZzIk<'{K~ypqy,[;e^8xKz1-Z墪==I4rHCbފA)υa/k s֐cr_c{f/B<>ǏM[[|gÆ]{6#݁t} dUX/|p;N ϺVħNb{ )UY]QB()*Vł ${=v7JF4bLdA8,rRu y,03 ,q>V;t$Ív;{t;G`꺏aA=kpo-C7K*FLBtLyL\7{P:LP7ϦJH>QYZ$.u}pU%B,ύxerQ<W/B#B@jQJݛ:gI Z${3JS+h IziOj_c0mYz{9At7xK}Tin6 NY!SFVyg3RR|AfsAF}z$R '-> pչQ@%&pA Y1${; k>o 's:޳ oI,>(M9Y,֓cNX̬ʚhY yB'G M.Nw=)K+ahimµK."E|U$-YxXs[hEJ˓&PZ:kAY=M] DFc)!y&1\ 8uql^-"%y"iXSSGGo? VUs_PoF%%rv0l$gY:D!{7nR }$޾O݇|nW>AkH} ;XKeA1=}ݷnIF=#v6Rq-]߷Oi% gr⎗yY@_~4[VKo]9PJ? ᏿M&bO^{1ίGuΨBv@ ]'wGX~VJLg[,Wsemre5W+:l.f'|z7}{˸;ݦN7pWn<r}o{޷L,g[ZytϜϾiU}cvza}ѭ{y>{y׫fXӢVX*NGN%aR(.%$mÐ{6`:p.\Ja@ Bf+{Ms84{{AfF6ǹL۾dzګ;g]TD{ުBS$f uΠ>x(v}>z1}А84(ݚf$h4H@4@EUkR$:ʍϾqTetWry29{n؉yy鷹tlJ{}sޏ)kW fmgcP{\v*Bx9v-7woS8.<}^mh2;wdSm:kz*w{Cw1s^梔(*vz@{Gt0CR< ۧCoZoakA<ڝ>/SK}򁧒stba{Rݬ@4/nZowg4>J*ͪNS}ϾW7=<JWzs3{Um|UZ$zժ׮Ww:-T5׻J_Sњ4^{>|_^_Rܦf»=ќ1ܸ5M)>}[qۀ3ܘseU}}'`{;׉M=홦ޝ]n5־o05loruK&m,HWYy0{=2;wni+XP(wp ],@}:Y(tuѾ}ӂMOyޝ`4v]I R+{ kP*U }B+{zEӡlw>w8^L`C:u9;`Vm{{ ]fv= v=Ҋp  P2RKǼמּn˾6n}v=|\U';O1=<7={>ow`/^sT=ghqz}6_az}>Q')R{:Р1M@@CL h0`SA@M&2hѠL M4Ѧ žM24 4 4#C 4 D H F LIj5OU?SS&6FLz˜I?F?U?i3I Sm'Aii z2LFFF&F*yI?TMz=O&j2m$?T%?SɩOP~I"ih#ѠѓM00Izh2)=?B1Ci6I➌D#4zLOSL5='2I$&CIi0##LL4 4h4L&i<#@LO@hbLdd w `yͫH|hi/( 1C}?*]1a>Q~Vox.C:tVJJ#n} 24 o#FyԲ:㋓1󙍵pvk;ڄE sh]upԚi.HU'FV͓dך?W6QGfh:"1R`[xmZ>=Lua>op (P-(doiHl'A}~9n3@˥ie B5ŬRZ_4EjQ瘞95qk\:Dv8/ Q㔯Ao0sƏ_*~~DѸ2Atl83|v>Ѐn'4 zxS+"nz&, ^E A@A` ,R}@݀g'g ZCzlF#aY3 ;r!{K.D 2"ȠȤ"tu;^|7Hn  (EEEHY a ge66`8Iqiԇá&*$E$ H"HvMvygd9%n ]wjNYOȹE;j\Tj=$USv??"R#lU9dYmMJ{حZժԧE/?~X^eɫ=ô358m@m|]A5kVR5q.eMno\V8uԾ>g0/*9vly,182rdw/ gw|F}oT J/%AJ+f(C463-:-4w$dmqg8keǁ8R]:6ֶL sځ<髁1ꑖ2v9r_u}kJ061_Qa/G14 e4a7=,/ `-_'`2ꇙLǰ>K|{ӝ%5{ݑ(iBoc| ]±cg0Mr rP_jӂc=\pk,Lαۉe96;t]8үEw^{>|NOSn26Nj'\?߫W9?VRp{wW'k1O|^%oFnnHknDez c5eW&pri:}-EfΧylcTt[[5Yh=EkmZ]vtڜգX^iz : ҩMh}DEXm_r<:gj[kۣ-ݖQߝlVQ;EQ_Tzepcd?-rm뫒4 ln8r'֩*{}jr_+1_i5;딖9SIw旃@lІٯax l[7ۭ%2/#|ŭnSc~L6'OݬG+p^*$Pz6E?[eW psxd_z}-Sv\c![~]&sMO⻴_i-?u<4vs[zz8=>}uKnEg1~>ku{9[?>S6[Z9:2gWgƩ4wOZ!t_]Mj_P>5xEg;5h#p.[~CU)bau eW=i76z+iHMv{{O?z1}  4{vVoK0]?Mʽ.,)nW]O(Žج9!a8|?Fg<?#!n籱g\~՗ǛWlǭYeouL2)c\ UִߞM˻oT^)n>b:Ӽ ޸A{{~$'OZNq=NlŊiևf>5nA_GLv/q|Wo7 억ZkUxٿܲ>gaWn'[+!V}mf[G6>;*鉅{' Vq=Ogr=ÿײd]\ҭz,XL3ZN[f!^kr3'ںj^Ko[xkmj|΃ y\~c9Is[v3ׇ0r4N]Μ, ҝVw2-!Aεi H- JOjG6QG"o?Ԗ·W8&v͕=(w/ Lχkny$V~Int%,ADnR ˻&ظK1 {ek[lyΌX/Ty$t}^HIV%&">ԘG3,$EWPmnct㿷W+m,T0\zZogoOY[[Kw 몧kr:1Pvno )v-{jo wj5pk8ݏpۜ%@%whM< ݦ[Xl3s+yӭ?f\Γ[o*tsYlg{OFkbY\i4ۄ<.J=JYBilivw\^?l29o ʺՖ<Klxd7iIQDL% J;W8S`KE%M)B6PɛR* GxSu{ݠ3њl*C&(g>|B9\p iJ MF&ke?tdǙVѱ2P PzU2SU.=?*K-i[vJY$KEk˿L}IAԫYr[-]"U|QZ߸8~"\l>+vR7OǶA%-*ut"`KǍ02l<eNDR*R~0d 8 "bs-3;qhðaS״*\r-WLoi-q_3}^kN w1:>"V$U;]x>Ojs8bOM?ko۟w>R,f7G#|xx_Bb1BlV[C|cM%8YiT²E7?N,qa暧bFp(hp #T{0y{к EanBN.]2d5sM,U_a&*=si&*G{>MC}m~8^'G}sJVk_m^eX_GZ;ڶs 㺦H,9M%K<J!}r[^jϛ/659+$X#\M*GƖa~Fg~9Nfl#8ۚ2=|gӳƶ|qUl7 4|N܎+;hۢsܭggaRٌ\׳:јXF~5?ڡ5w87Hn~^sUgsVoÕu:k>C_M1|7]MF޺)|j{.WnJlF2Rw_upN_Ke}lUYަ%Բ]\6+>=\Ԇn#[_*r+;[-z<9ody٠gq {ݴ=W}Ocz\.z28+f"7tk۳;sy?' ddN)׫b,&wwk3/f;t/N)U2j۫qF~2VIGS]1-km{S'XWbq'jdvVnA-!y;;괇RLkĕ:/)3Y?e򸬺 n58x^* VyW$ept*Kwp4+S|&ņS#ز Hv#V^u7?)ċws4O[S(FMWjt[>TQLa_Y"jn[qv;i8ι}]b{?6sJx̫˷:G޺fї[;KuOcڮooctNӳU v.ݨz68Q16> Mdv˷8u9ۗʳ_?ݶI|Cir_9ޥ֏'!Cwk-t*߾Zen2}rZ.&zC]e~$O%m2:Zk+{.{^"M>h7tokхar?Ed]z/r>a]ۿC*Oz|%r9Yׯ'UN52wꖫ))Y=sbY~_iWqC0Nh0ވnu=(4%ֵ!yϮb?WT`չSL KĥkVvV tz=}7#qO_[o~؅$_>TE^. ;X/IC=j87kU-įt7[є?%yxnn6'پiY2[%q>8+@}=x Z:fX={Ô%ȝ K/۱NytW -C[+՞azsFS\ďs`L/&Yw~z{p*:$3M9nvwcvea;zOjy32j:uOGMhoB)Xl6&o'68m\#\3%'֍Ul 7GYߒ֬Gk(0| ڮ6L[b3R2:_-9[V!U.u<&UA.+UZ*c @n{zrҚ."Ih2^GGr@r{|Yɶx@pf1GXE=?'~6՜)BF7ܽ*)o/vq8ӿܪ ^VWJ(J˹WhHm7 SSTJقudۛͯe7bh96N~'ZbWh؅" 'FDA9B*!=ͧچNCa4x``($Zc^+rE$E>̴I☩ǕPyJpR JRR@JqX߮e;͋Ge NjUl,QI8x΁F⏺$ Bp-x3u|׊<>\ļGLࢿK >PoZ֚2W5i@Dȭ)@ ~R&dhmيk 09(q>HePE52'{=pl0+A2(@T䷆vR`WJg=vޡ OHЃ;]Uc.YFq&F~f!!&5 5f̛;?\Of5pd8zv;؋i3}'TFye>azG>GqrDV!(٭ O%|uD,7rnWb}bЊh! !!9 (r=׈&AB((x^y@g`U4NdX F}LimbL&n0{׷|~ym HAGƣy y 6ZSKFrf"o,x qGāC-\@r2@^f,rs-1*F0"$շpP#9sy(b b8y@!s"xn3ު2Oq|[UݡcpڤRg/_rYw BmNߴἾk$~ct{6(HȌj﵋?’H>;S_Qlj5|? {wm\8ynKlN|ݻëI~vi|LvТiFΨ )LaR(JQ a¼? {Lvn𤁠z=y7gtWKJT'7z{?ȰʗV55i_s AY?3~kAmuDU a-8.s^pH^ls&QrWnu]f,P[8P 1@G74dG+6qy8Rvw(A ~>ޏ=1,q Z JN^Ɗ/m~gr0PE;zȆMdzos(ˀOH'rڎ>B>ǀthjܡ^E:nͅꊪ D \7h$Ue&]!f@H`,SdQjP^+ Iy`8=3C'@DMqEC oAC)l2,iRP:yRV3atgXF꼟U@H[FIЃdX+f![ur"S8Qz0 7 rOY$H٭0buSl.9mp[nmYV*&jxS"ĕ+m.LٌT~|@b(fghOלh6Hc{rw_C/_queWB 6 Yy-@8L r:T>aJ=Nm$ƚZĴۂ(H@V);Փg}?d?_dڗ|B* s C3Jtʘ%~wȟ|x{_E" y! 4 wP*wꦙ'7, W޸DL Ȁ# a1`u}dj @RA 0.lUA{7~wluNNFn=L:)vv`c's78]u$-E(DG0;)]Gەڂkgf"1U,1E14&ڴCtRP;8tEv&-T666J]r8*ah";L -,(wѷD7-'*T I9f,8EvtS 6놺j/6vu 43٩zq,7\Mo&ectR欈q;o]Rj\t~TUm6/rn~<)t/*}/ݷ> .*HAWmCi6|>R QBy85dn6i{149-[ro{ow4.0>xO=}7ͳ 凫sWͻN!30D]/kYU+ʾR4-ֵ]-zöq=/€n]h CGDz|(DeoCPxD˳byiം V) @aZ7p"'nF<#_H #s*#6>|M<֙ZyG/V:?eQ dle"v -sK>8ᯒ)<)ҧ4Ci"R70q$`Q8A$F:_s}9ڰ#w|TexFO"0D"N QI'c^٠b*&b4EFEX0\^ KF%x u %ĵ-yK*=-(G. ,uj,"(:`="w 5.H;F0I0&Y:FFy02b  ek&7)?쀡3 B(R`T{}G>mxG)CY ڹ\ݔyJ@?'nyTem0]w:Hc.muT9j'X)^U#1$zHdu()juB_Xb;ջyCm+zHT2%A)E.$J D$"1Or {Hi [lJH<&!&ԩhH1/{ {~D݈9H;>pYQDZۺ/WMAӝD1 zw_y"O7ch(QL9mdrV:[ʔW Q:u){;_2"1cEDU{,0C/Mf=g O{GXH!bQdヘ8y}mh} x󺙹ˏ奦znўGJ!o},SҘ{>w:M[<9^ф*A`"FsnzA!tD$I*YQI3'[,&3J. @b"eV*rhN@bVC "LDDG6y=@$!KH4DȠXv|"*ҁ dP" מ灣9B>,ƣTUu2BLJ^j4yn@*a<N\vhec&[ PHVetR:7$NVJ4S.'t{P7dKI%v^L25brta5} ''M;am">{o!Sw#(? DZEfV0Q1HS >xA+g=74L 1$U"Bk#m3;Z`lVs@M9:"JWKyjkD$AH'.Jy=6p4ܜAAdVbGLDΰ`*( W4 Mtlɚg5ll6KO%yrbsf$D*#etCSM筃5ƺz/{PfD1J<ˀ[}u[ɪyZT%Xkˋl F.b)o[(a[3y.Íe$8Ԭ ڻ w8]uOju:" % H..\f HS? $km- #yA'z%0%Vã:f2v[LfNhk&آ M@ 26*;k{WJTiTvMSȤHF#}XHi=%bX۟ko\Dnd1QTC>w18§L@H.SYI*#x|ϏD>b=a&FC{l"@i㼋wŘRMP0%U3$I$"'7:J h <ݗU-NZ?5{j(K:P]O$do&m0d?*O}[^>l52dihDz0lѨ]^h@A渼]2dͥtx߼!sW+iں:d'\@( T1 9 (inSHb_B(PJ$ /΂?uՅ/{mYo~@ /b*G?dޖq8 A ^?v[NqH׻jVh`?V\p6k0Ko1"۠͟& Ių2Z@O~>s_? ~kvJZջ]XoAtCxR'0ގ?8[`5%}G5Pߖ _Fd(D(qmo4g-E pnjlD)Rؾ5krٱQbC\٧ ѱg-\A .PSeż4%o&R3.+GeJԛԍj 1D fjF"~YErb,E = ёșHH(.Q,k~у_UqA()>JtA q0.w|,,-0-نh>YzWDQ#4NL j!^۳rϨ {\Tc4[ €g,V3ӺrL>FT*glGw[HƍT@C`F$1`zz"<)|WsÃ_ Xu{m3Klۛ `Je֖##ID@1"0cHIٚ?Ş8%j|ǮMu@5X}iDa=>drlW]%Hrs #Sp PYɀBӝb[,V[%h6y|22D~J{SPƳnBmCν(:%Xܞk+}?m0LvV}SUO~:>,'(uA"Qda %k <R625 mڗ>ֹ o<٦zUh%0z_8p6ۓ[nhKh9ջY\lw>Wae{ˬKbIXT-\;Kan~;e 3Q(n7bn$91%<ʒ$M:n}͉quc>V;ԣ޺sl0tdkzZe?/3uLar= Rt ]nd$6X, XQbkjfPі)ļ a&N)QFILD'CbWȜ*fʀ8cs⮷4oCue_j37ׂeqUWEB 0ʧ_U5Lmoī7m);RG/Юp{O 9'UyTC\HR#Oڤd}8C8^Q4HX`^񞄜^G?eVTU C"J IbE '}^6=kp[Xo)_[?TS${1!͡ETl,P,O1HVdl49;* 702v4M~!iuwy{PTUH#,YB#ED`mwAl.ľa u3 Sxd]q8MX3, ]v2&5'a ›JII uz+jw : R@v]r6=*{, %mOImjA 57E97~8y9E27x]ܒQ[Uh|AUauj(i&%T(Pt f dEMCoeDL|F**mhE@!Ⱥ&.'|s6AP,TRW3=X +9AކK&PK˔0NqF3 7Txd;PbR^zNZT M<뢃诿OjPKKz9ODdj([/E^Wn0$k ؛S-Ðj\U''> O"s ~SL(߹K 0񅻣K 6$kZNʔ b&  $1%e~9%LUWwubw2Zp[R.YX a Gt}k}uU eU Q)%eLё~ū~k2U4BBk (knx{H@M4͗.&pÂҰovkea9gk1q%ЖU$v-Kv&)]$NNFʆlvT7FePax =D`((y!Dv XiTL4%Rba/ଌ_tib9yX_idS 1 (s r#sQNt Jܞl]K()o׷r 3hf0 q%TIv3 v (ɽCfF cYo̮nbR9?_U#%⥎d6Cjd l@1QL93eb90!_S\B9Q"VK.7&R"X;v.A'f(ISIz&p,[pƊ]6 CΚiP3"3h czk8:^:|Y kMPxH djo 0 키)2RF3%Hǹ>8TDa'M:<&lc q{f ;DP&(lFDgj{Ǝ`LZm)-A4ܙdMb^_7S VU @$rAMK֞R'm$Ϧ96~>>?t_eZ2$X R!"*!aHvproǗ6/) 9ĉӣ6mCҖ%,B,/e*  R= nk^ 3Ux;7rKm U[sSOo6$M"[[B2Ϣ;ѣSL`2c҂ g2yk[UBOu;o9sF#brKQ6WАR;N1./t \($q^QѳfͬA~.I5|8R&f% `ebUS?A Ĕd84Gpm1j{@;c .%H0^U,9(p78yFe(d>?LSȜp܇06a o#w".iݨ6f|Ti #K&[4 לlA bk)mXww6=']x;edEUM EF 4ɏ[țb惌+lf[Ȝn_ɸG&^v~Re ESxB0MֲjW-HVײpț J6N|޼'GcTYv2EdowvFVGqpj ykb!Y=<}x[!Vq~p.$6؀2 -A*ā%c@[ڝ,Ο8Qk_{JkQmHdj`*;Ńh /;}/Af hP5"nDD͈BlP9nll67n$"6ciMM[;ɨo*uG_p(>=Vz>}I0K 2@vNԚ*G*ru9{VT;;YwǍ 69yBrᄅ|3iWݔf) t֐-t'NDbIp[e@)\'"{EI2c<qqAn9MM@S_=~ bro >2αlDZbP-]j WٳmR֤[me){9e厠{ sL'1-":0ʠeؤ@6Ols]ApX:)h4J0U,F 5k!-nv6mvVUtmJ㗲;WSL a L1'A*: ?nt43LG2hcnfm`fd'8iE,HéZ} <;3mb\KJ\.BQsYF cќ481LaF  ̂~n+͚eLtƒ3~Wn.7EՒ>S2! X^ _Kox4lP]E@,Fk^};;4#|+*{7f xf5We@/q `+Cjû>Zyqٹ4%ADh@%hopl tiXG`N`) R#5{,1+ (CB0LB4D`2`USiV]{ЈĒ% ug#jr]ʳ\D5ߎ+@ HI͙F#-ryd+A^ fuޭ`SsKru9l*ͦP*+!jX'r5:eJҲD2!"ZA[ 233S#0j5 ЭF`(Z6֥4u.kFf\C5ݘB1*0GfjUn;}5`v:{IeeS}Ġ}d"l&xlɜYhdI0 P^М&qIZD<(n.-ξy~f@ц7\3JNf6E"D0nE38Zq#fA2SN$3HR`I$!JҴz{NGBY'3@rf@0!u*X^(̥] g, 1<:@ ENIkѹ쳣q>:nM%ZblBh>Mb8&7& XvnFopyHz@ QŧS!n5*Z&K0lz# bŌ6A.rW|qXLyokq(HZs= H0 ZȢ6wӿ,Ew)(:v>\S)yIY &0U簌FT 0|#/^ۭlAAB4@P"9kgAXNf6nIcRdDa"1 gOҐ ݧzG(]EPV79MRDq:X, ?y>PAMwUc]ЋK Ԑb|.Xfo JrnVR $(T1Չ~N]:O]xص mSCQv>H3m,W#ĚkF`K~ctF-k5ێW}aW7 qip O BX&.MUt]vֵavqwd]w;.Z/y\H}v(7|.ŖU8n3f;X9 sm#N]b~ voKS̗.upQ.9m۲WD9:͸ޖ}\_oߖ,5G+9gu`Q ۣ}sR) bA էhp?Mk:7(_F=?&PJh) _~7IOzԤw/;iUyk%;=ٞawlݬ^mϷ߮?wf[+}V9TcCX|[dPNgͼ[ku넊-4v7*6No[!%sz1XF#lj0Ґƹ|_I^S0G11,@3? xm?/kKxr~kwK^-}~ʸX3.4- {w[8lUruҷvS)6X*N}ĭŦ6+δGl'/x`Yz M c1mirv/=+Uk{4/?s;}wnJB]0?wijy[YZ}+}\t\.Jl7*mW*gqa{q9=!k9=5uo~'k+yyXoRxc+̞ͧ7J#~U,JMzQzPaJ"aH"FEo}?K>G<ۻ|G`Q}=S~5TںwޖR$c4;wOu7H.N_控8Mn-q(۟heN珒ܲ޾!I\ #_ L@ Dŧ/oIN'sufu+xl"ae6yG<9J?9^KIxjt/:]'O/qa5]lZ_ĢLP%=C|G\4j(/3?ONw5rKh<ءV;vgRBϼ궾u YdvI'1vx1 z^$5?)-&iYr6ogI ?sεokB'EsAJ;>-X 鱯Ss뫠=RK>2OQ+KU⬿=>hܜSфm= ͭ= ԖD^Yͦt4lyJp3"m=\4 ~S>%.<|󷧚ggĔXs{sY;!ɍ+^)@=%κػv2߷ϣ AJ(otҳc]. ݌öD<&#\bS@فwwAW1E $!(u>:7;O9|>{G7?eƝhesQQ2Egdުo^(p]uԥp\qn_޼MKﯗڵ'χu6{pqQ]-5̋i Zjz8y{v%aO~AovPKrLGcb,g~ÿm19k5N@rBxZyzhއhkj+ܜ{GDv"u [.\Xp>?tWmf8#z,|a2l=~s$ݲUcumg.˺W|ge2SUfO/O.M_3?}, Ay7?Ys+~wGy-+7`2X$ݛ+aԽy|17wfoC}xl%w\~e?=SY]Tf?#QTǴT/ 2k}HxkscyCC5:OwzU'wAQŪmf;̿q}m.vRnO(E#5dC|oԔ}wVֹPd#Kb>؎3|S;k?Tukew5/dFo63}Ժh2_SG9(M-FgY19f[b,z-sn{2}fӢL^W,F]_V.\Wr^˭>oԶ?9˓롧 ?J Hˤ݊jZO%F_.rtnl6yF'l\gSt:%|k_5-{v ^ˢ{yӒzaj]Nf2m-^{-Eھ=ϑ1I2ѶPӜfTmeCQ'Ydڌ|rKktɦx]{CUvnK9L0=۶juawwv`!*JhMPG>?[[fv鿯zq ;ֻGyerνfq@zsw?l[=߿ry]L5U78#yewQɋEU+~[M?I2{ݺ5B=mJ6e 7\u~&&#D+**z4x.+ƳݾDw[U讛N?YyLU8忾fcc7.LgpPgz-iOwq{^ۣKo;et~ߚ1Z2~Zp\u4 .͟r\Lˁ~7VG"sd`0ùi/o._3dTDK0+~z[7Ɠ'#9Ľ?eZ+]rՁ7+4ʈjo/麗ws&4(zI9Rxjލv[_h|ߧF S@󗗋^yL!}OA1/rߏEvwRY^']%e]~N4.i}@׈kwx؎^dV\cn狵S'Ro^=ks;,%6V?7zxإlz?ϖ>u8t|Ekߣ/5~twqay1m%w)nZߑO<\#>]ձMe^{7SB;d}r># u//? }ҢK_The6ߛ? !/kes>ϛۥL~J泚oMA3¢8֫HCLBkW>9O2=rƏnț礛࠳nobDh,@viv\W~5Jm_ؿl1pmbqYsKo4>?ڸ׍wA=awkutxNUyXػ꿔ǓT~ +[7n1wZ.{[{'#_1ew1Ӯ3Fd7[OWOz;nT=XU_ktK6}z2}*~饡ec/\h켄Q~ {V1PZSuq}&}gv6y 'w5[ޗyRY1=(/`7f28U7V>kՅu~u(>`2/A $;1`}=w :@rRЏ+йg&ĢoorJEҭ~[XRS>Oc8Or68-/}ݭ/}'pṹ횹{qUѱD )_Tl볊U3䶾J#sR' S_~!WLv; ݱOH.(Fˆw_m vc]ux{۽mR<_gmg_[vKA^ث^1Um_̓}n|{;Rf8jywjZ_<ȸyi-ʑ?7:>x畗o9IUn>5%=`LLvaPJ(TdὦkcLse鳬`kqsWYa}g+Jɼ~ٜZ}]“1do>$Uo2^aP2iѾnխq[w?!x]xΩ_|UJaEGQϮvWG\@Ͽ?^ڏOQ<)s6Ikv]pS+3_Gy.ѽoй_{{#5ʃ]"L ;O|{wsk[Mt$;=?q=ɹn$v2҇S\܄cfF`툔vV|(c:wx9hI㻋X|Glg˛WK%:A4Ox(Zjot0 1[{?\amjg\1NOy{j/Lq;^_z鲗p5V"N32Ђ:f 5 qwZܲUo5sWAtR1Hd{ꑹ75te YHHa-~:{\ոfvqzK˭50x{heAwBiͲ\! .DA,CJ}Ϲ>|9;a:I,Ώe|-1*u Huc>jؙ ߃:<LHZV\;\ N&ҽ,zRëGtr9NN'ly1B juNhOXM > 8z6z~K;_ߊf31j}ӜBh0`I9GuU0U%nЦ4FgN 5h! VL z3.n3tKАmjTBT]MC"{?8(O^^G+-l+kerny8|#O^]bϫdWJP(cljDg?u9i f̆ AtY"TWŖil lcQr̋4a1bܦ@A kq9ll bICn(`awLlHdYDTYϜqv\m뜊!'_`}19h6ѕir”vlIx.em9|/RkO79GVgYS Ę4^W$04 G-˧0]7:Zv[X} l̔ ē%lߏFm E@1*ѯ h SG,HTUl6:@|sLr̩T|amcuJ a.ǘT8|@˜}{fh$ۥ9 Jg̩`m9ʎ*>οПCF9L{2<s2/<7BH /xyD__3TuBJ/8b 櫰ϧ: U3dŹN.IٞDލE( T̚T`A))q=G*{1-0 $} 'Ipwb-9b4vFN0/ fTƜ3t( Y0OtH#f@ d2Ƨ&%}&{.URx<եVՉ䓭'bu]kQ՚-*ZI-H_=ӈ50,K#N9/_\׺;><ĸ 4i L)nEB$ V C| )rIQvgQ] vaxQÔ[qz$3/ˁmƮ62YbTZU-ޓ|䬓G hnN=6]Q=8Ƃzz|=H{Xy7)}Qs; پz4{9oVGSwCO3ocX &vf { BFh[J+Ꚏ5#tbo6(+ʢSM;rLٲ_'S#<"> D~;jbm#xw&Aȣ?y%S&GJkZWAr9#k=?km}Wxe]Z9}dqO(x\>Mcy|żgٮɠ"k2Bchc^iT5O}7)x>N{{+qn3?}6 #_ j-;AKaAKowspN?E915Ʋ?| -RHЛ”azpv;&uqn4GUqq?f/8:چwJ$H H,!|iy 1{BMɅ$ ˈmae %C~s3]`{_3yEm_͕s+|4ۤ+VDߝZ;rolqqwy{TqM[ Ո!L$ m!o6uw9aM$6IHh` Y1 1)΋J&ohwBkMfh* #ʖ[Fjmwc4m3pf&gփsg Z2a}`S4UD]T؉ʋ]03+8&iro~/fm{4s5x; % -ʖ]jCA㥯n :DԶhyԛp6w 8rd,wdto fGzM۾ u`жV2;k1otc` nH3CaآyN+$foܯNi_P#nүlؘ_RiGKHC;wCn]= bOϷK-x.$7Yee ;*3k=fKb=df &뷞&/ZYnO/%S)AmP~i'@1(3K Hp@-S~˘5bsne=GwZ\7$BVWW1:G.X)>?*,8 x_w'fE& ϳvpP#р;B<;-DR=8zה- ×9 t!4B@=#5Nœ!děCܔ4$7U I0ٟѫ2OcQA0@aBA$1;z)9I-Ok**8~}0tܓ6bjH1X:$?޵vTlR}Þ_CдN`=ߥ E?b.2I_0/?ds"`lˠ`'Pخ>Ô LA'dlxjD:L9%bz3#Lq 64[8\,Goa499;("B\j/SÍAno&WZ=/=oq!Xt$'0eߩZja=Uh gHIOjsldSхjsc|a;|ɥ/6C)(}H9Q4AbSܹlfU]*RA 0Z%QbUSc ĺJ*Dv@Ē"(k(ItQɧKj2l3E qn91e(C)ڕ߳ ہt4IuJ)P`CkrBpfH(a[8iEV:"X 0r0V" Hvp6gm*܆ZY ۆxjlԹv&R jc[ 7%^O3*,9407hc;aZ=J5 kF-$@ː)CVl̷Y$Z-,R7s[`aXB@̊M$T J (Rm9%CH,(JP>&GQ96UȢvoe o-c0ppLC "M1D3EXPqXC( Y #$r5ӿG=llҒГfݹ} hT] CNuۛҸu~:CRd u HpF#geHbZp.QBXn c n":yiQl&S]/ тpԭC]\s2bE dpkL&1'Q#mNY764;tjF$VMӻ+A{niĭ-ʅJt-@{R0gb|PTTDU<<;KT"cv@N.Pr^8+:F͚!$.3w)<*o KmpЭ$]Ӣy^Xow"NoJ&R1%)J4Ec*Cq*((9.% %٪)dLjfk~{a۶.`j(ݗ@E'D, ^"ΚQjq2 J$@V >fr"cIQ`VBk~E,%F}ufx+AV1љ+bԁKq #EKsIHp6BIB^5q&!c&e!=1rx\"D2d$gWHH2v.mPpۥBGFB@ojƷ\3ټ VFv4lp$Pʤqi d"DQRCGUU FPg Xa-" PSV5ugnŬ4ȷ&th܊m98v[XI2AFʸbRQEfB6&r EBty2E"&C@Yt[a!b@<셖o8a"VۗkA GL"$'ٶچLycmzRD C`8{޿iB.V۟ĵ'UlBh |xWa:hM^jOR{MZt Zn2,tC̍L^9u-=ߎy2Կٱՙ LFZv" i~eԝEz qTM Kmp}nWHX!3a虨hP>^ЀK,٥r~P/ /ZrF:7zKhDQ%m^\4 Q;¼ÃԒylEP,U7C:kް0DW!@m$ c1_wzq"cAM)\h?{xdVN쇒u+BwOHj:;16{ס[Fge)A3֡5%H!dn4yvnWV<hHg].}jWa pa%"@( !(|dFhId%6USL{YZsG?Ɂ>AY ? w(o-O9TLù)&xG>1FFo[qT%+)V|)F~IPB RNޣB1 I5,M,͋Y^S+LPY3rd;o_;?Ń+U}4u.g9evJѯ4IX3`ߊG\:ZB-c_UW%CI8L)ȢDpa;kXY5[dI"4"03, 7֦6]kyTfCACj0FDWlɾdNaBp~tcm?Y<ɪf$X.:p1]EHx^$gk$ŇrjSмeяQQ'R_BRM(H %j?ЙӸ TI1{ѫR А,XK]uô}f7 #"엹ye%/-8jBIۀ(ЕIn RTP: EA4i ާK?_LE:.BWGhc,=ZPe2@Eߣ[l?$Tͽ?6NM\:-wU !='/~ڎw6H0'QDl3o9g+QFxLM}`\rcϳwDuC!"2H)ծuOr|.y19bD$DϺT> ޵o׿־БX}[Ή.{bF]Z)<~ٹAi;{䔥%23gy]\rGnKcmSp`:h8)j":Yu1,fO#5dH<) Kt$hۮHH&"1 *?O{n/y]O(?s}" "$ %.r a@|'E1V7a`l R{ F9D5:W)Mk 춝R‹Z"+)1ԞrMى%NTE @BQd0yV$AŰk`hp}U^RI;Ƃ L9yXͯQ XY],dN\ÇjlAA0'R]V pZw"[{L]"q_䈛O XUfE Ȱj]5ÀLFY+ӰpqZCa6&d`iPC&a3@9d(XomǏ4=^#fq0;(1ȴՌ8tphtqb /ZPݫ0:b{ա9gnQO9XFfw,3z8sWtGIzUAVjKA$Y Ntc oc[J͜w7kXt:7H Pn1 B}~b3\;{NS<L=@d3WH^J3[84m,(@H"K;JDCt>CvJѷ`;KtSV fiPg=X4. ϫt]Ww-¼ lcэ$D D2ݳ۷S-{Y Y"H!2I5o\#UwJ؋ ߲8tPD  SGo!ުMsYޛQ`( h6'+^IIn97'XکVbL2:$Q$ Tfd]D-1sbh2A;ա.Y,԰0cCH:L827: VlYUzK:I_Za i滇hْ!t*غZBSFY Dԁ)!r 0v/CSr Hҭ&@!1b*Qty`نuVEJ7J[؜ nmt+c(V%ʓLW 7cavM3*q4;e2ƭ"Ψ euQrH;#"g 7{^lcЋNSJfGT4bn) Ҋy>E7>>0A0B$<ښ ? 7k_n:> ɂ_~~{6eVFj}ߣu#Xf 7g$n劺NlU+ '(@H@^o?-]j-TBA 69{Ū,z4䕲KW_((1QPuM}?zH#5q\G"9"w8LAwT5 e$ܸ C> q'a._7t̯fs>ۮ-ekby#94POG4J+v' _SVx˟V3pU4fj԰hNp\lzgXBA 3G12N?;2w%SijtVHB#IJ_y4k5,5"fI ./`{z@cV*.D UXUuϧcSe4Њ)lrYFPhZ~㪨BP(n;יgͮМKmLOX̖\@ ۝0)a [w5Ь<@ #gj"Ld]&1EqÉnf&[b亴a8Ii֍g wIImZm0B\i&0e2x$_q?ߗT%z 3*O:߽M:jr=̀xFI !-7>pgkjq|Wme@ޅj0A#닓6/m R4sDqrfv׉S$n8L.}Lz(lgJ"qʶjIL$8L'z{[D 8a#|]B9z=F wc\S@lO' ǝ"Ҧw\zwDLe :J|bNjvWǛ蝍*tA rTmgQ,3 g&k׎y=nϽ.ʰLJmj%]/ )v$)D,RlbUx9CY=494zvs#Ѷz n=nAx5pͭ)1 8J]X%FI8]6g,-/:]X<@s ߟVjtc5Dv` 86>:`zml.l( *L:E6YMUgBGC"^,s~7QIVfq))HAVw&!d@&pk;:鱈c p;ϡ"m()e`c-6Gk#sotgС4ݵ4( ksF@Tw3Ve c5[Sg|E^SxfpKB(^OÔ3*#b Q1V9{/~znachপ۲Utġa,i^<ɐF8( n-HAJ" 6E^fe$܍߄bkC =C}l8`L pԣ”B<918Ԏi r,>"HhUCn  [K;]e`/+eIpBDH0A b:n#hI CXDIPã< {h)nF9.PC(Kt*q`@p#n3DgqBVyX^r"&"!rZj¬4(CG+& bkB+kkwc kHt\LDx E'@ 60аfAu\փZᕘ-v97(hX骟rk?ܢjLP$U1p{VTvuҰY$dZD\JpJ6E+kUn0SlBD`Ռ:H\Y=E$}bCLjR0O`B'rKsSVߎyD?3 -̲U:>#$Hd B!wAG"΢11`lĎ$~.Sb֛;!jł.l(kA)exhh^69vQA^au-$j&<|bX͙05֊ۉJqO&l5FiIH5M.rsDD `bH,TIX%eH$X XD̵ődIB $|FdEtg[;2^ˍ9/rD!9J,fU76z4yW|@n8);[^0vf+ә;&a !Ӧ2B92+ٷF})r2u y.yh j,fZY,s2^bSa Ð`0Q0V!X w&.RP֍"*t2J͋P 9GE2cym4&tK$F")LȒ5JD bqlMЃG,^`YUK%*HBGSO 82N(ᅤL'+$oسPC$ X-Ons[ͤA`' J&X)UvYǎʝkÊɪyX9L "XQ YHGc:.,?]5>g"ZQg2).K6w?[e5NJBuFJtm_P Q#wYv}༡yPrAJdFb=v!0%𨷗@qWϷ ܛľH0kQb62ҶWMl򤿧bY5-!eCt/lGFT2vY>g٪wD9ƾGocP -RCT|CTWTlJD,M~wik&fڸnpTdKjLΣM?^4 ,UAD)4 t*-luP5Q/]]דlӆM~7 6lw9F(/ }m~{ewczH}iBn;FP,?(c'|XZS+,0,$ؓAjg6?GiWggj3I! Eq(j6M)tC}׺`zKЀ1Hl+兓BJp羗Á_Np01i&j6rP.M5UflBT,ijkvd5DFf"Lek"ɻ, &k%a()$d٩=첰qov v*JS#Z $9!5lI'rI J]0 <]ēC3 V ܉+D,7"B!5(& f[Wx_Wx؁_v  R`B]Q2}i'~jLxT"R]{HarHKP@EM/&~Q|Wx ./^ j#쀙^RX"rOfdHz÷=n_A@ 6%nkrf>26%kD& > ;?#\tMr?)6o2p@vq:sQaEQ[ճrս D@/ :D&6gafAH0$=K1Dζ Ӯݱ'^_ ߯bеԾ p=B986-Hia !") J1fU ܥo{ T˄b`0ҋ$I򕾶ץMm ol [#0Zi0>"]  }k$wzYXKlIkB ]3**%.R4jg !Aj@eh2稩ݭQ]iUݐ̗Yq4F[HSA1B $20%qۃAo JH,+K$'AdI 7ԉH6~f &pY-ݞW* XVߛ0s\ PSr헁hMj}Auxm7iӡ3,zRi7 Df~9N*PV4N{;P\ܜ3.} Z#rWCXW"r|"%ZH!|:ݑ6-b)$ra (4`o,*;L@ȝ}~w;b5b-B RMgh E9Uʘ!ڪ60gʷt!H挂mwXAONC gƞO9[S\fyYe toËd*./jE}h5-P.mwz]J"",@L MIMnjT\a#V;g`FK,8D+k-\DH&TTV55Fm c49 UP ΧSS#7HIyrM,s&#E%u e 4߸/6mgp/N՞sлK<p)Rk6r 䜘*0V+2:j?׿O}}Uv1#TQ5J;R.A&x?j67.]²ӮҜ|BʤhNZ6o.rwM$iB%d.X؄MMt4-LDIæ"FLڸ٩Y.QwD$r,?DY+2'~ζ a3lE:LcZYZ4KD/2w F_\iyuYtO= rxSGZ鳺Nr)=Z" a N{ݑX xi}iȳ້%$Gk}Si/0.XPcAfZ?7p$s5@ҫX Eۚkmrmf˸7Ϥ)aas {qp-"hitڶeHA]6^R JjaoniM61[>.kevfL.:lJ BJPѷTDJU"c7a %T"ϿZ4aY`%B+eekE#pXAT^dMm@ppˌ3CP"FmL 5 !C٠A XS\< BQbY$Ȉ@\*`C;.#d,A%H!m_ ┠2f2=wc6_Z)j(_ \ruP^~ea+.SqBzmUR05tpeh_ti3 i6.Qpj5iM  D:j{gMDՏer'{6BN]=4`1 &(W5aTB7E (H2:.6!ųenQ_aiU- B[KYh^nqtnDKa-HqC W^\PZ)9ٺ񑘫 C0@ D$L`9׃s\rQ3Z̊A18^DhBH11ʇM.!p)b2Nh;|<;םAq!JdbfU:PSkvA#Q53BK@JLJ[e,s4,i>}{ldF߿sy'PEi5k-%[TEh&,E6)lagpZfZRB8-lUdfiIA5dM  3EA0KmL$L6cJwJe5 H$$2bE© r]LC6tBnBDF*^j# K#bpU)qk u`Apեvj{)>-Fk}\ex Y(m LGkL AUVÒ.MPE%VgTrP2}羸Jh3jBtDI!Yڨ yPAB\Z9.`"e9vP8hk~<ldd ZQ5"peZ JKhFpq0zoe,*͡dIc}0"JZil A:|F^` =N0Ggݛ+f"_w]Х1aQWZsHzUm5]۶[EI·.4Ujr{뷴M}3K[{a6"bIit-hŪQM 5U+AMۖ0tybMZהiRƴKx=iwZlKs*DĮ(TomP`5F4qWJ,G:6F' aPaFw|ͯQj0FH0&lfq[)xxd\\AJPlޓf2)'&6x9n{ꂐ"5M&m1gJ-NE1r2Sf̚xS>\B} *SGrZ7i=^,zZqlx"F0 vUFz1|$(\C襻w>3~ -TuoB2QqS3bF#=h(2-4C*H8bY**GD[[ŀ!vZ *29:~]_Vx5)k_oo+ۖ^7>}/CuJn=##`v82e:fU˃D&.Su^A!u҄,㔶3`V73d[-zQKv[C3Y*tsRL_䵝-|M/b%(Z]ڶ Kb A#ũbr ._}ڏgbO_4G;ebLŲ/jBAJEPR?|"?7aѼjWR}u's΀[܏zYmw?ǗpV|~Rp*2`QtS-B!FP0 ti]8fQS'Fu$i?76GM鰖 1rG3Â+ `5U4hB8224 eNVDn (;;k6C@dQT{$H4orGqW\#v ~~L?ENvjb݋U}$s'1[leMn޶(pke8[ IW*8S-mMAFL4`Nd\KCow7 O ^@d VoᑾԦy!YAIgf9 $g!O=ĊTa 'r:,H3D0 qPmpM i|H^*5&YIrjudtt7#t(İ&fs lV!9iײCnsm&3kѰ۰yw[ɯM%G;b!jm4B@-+bE$BFIg^8+N(- :U*+]myZ:%.d@ KZ~Wӯm5SوVQ\I)A@XE Ҭȵ<Ԝr4{ ֛pm15cau0@#֤32l )Mt wm*LR HHD rjwm71Xpj& UA Yd*弙4BAgCAN <5gEOA5OTP6K֯r6ao߾Qx,',F.Rj|Íf`6^%iƢ6хy8TJcmWwns9B5\>KY=HdH ( (:Y^AT݂Rtӄ9 9d$$2c"{,D&A$|_Eav8?!;.n΄GhנQ!Lj ]Bf.(:LlbP(#BP:SPDe!IlT)2FkWlnh @ZvX"gH 쮆6 Ie&3;אI" 8v[l܍IuHk@`zo Hl (H !LpBdCAӣ0HlFt ҈d&N[SVMmv 8swgONnH ܂I<$H@$Y@D y̟qDSr1* TTvbM b$068Wh^zRUi./ۻOVawfgB[!-%1-Frҁvͬ~Kl}?'<ےKd ٫RQ ux,ۚ\̂ 9@X],ca#^9r!RM% G^$8d "(P:9@d rK-3vޗDO̾qVqB荊ț0N|mp:fo7aŌ X|AZȭ Ѹ`JIRkIsH%O`ͻ ȍV!(z+ uq*\Wmݐ䵄2SBwTeH ݋ ↺24.ԼŎ3kt ቉ 0WDqpCiPjZg*DPb @@-<u-)^f rAt]t/ٚ+P C5zK~#ҖͽvP#ȫ=(M@0fD^7!cvGHe6c< ,S4+A])صysɧo1uejk-9shֹF('$r9DJ(Xˍn"P p̃]VCdqZ8;t(͝X[ T ![m%A?S;DMuG͆fMJlVZN5rzǴeuaWvfdݽh&֫qX=;ܯV94i~55PX;抩L͠ʁأ6!YT7&xearLs4f}l(H$f"HG7o3q%ME];[ܭxE)?l]ֆW|si׆mJpV#0pxB m@ tnֳ.*U`PyR8D=xDLD0s6Rh†0dչX׆i~JF%#` &Qݖ.Aw[dMzNiH&ҤqT'zF5,AED떵&v\K6p0W t0őTU{NI;{6zwf,zǑitia;M !D)lY1va.+? `6aL/j<5_ uTZ; kg5D$ޢ`ca| r}:#gAbDH@hdnNgR$q r AD(29Аd%>o ܎'0fU(ƀL7_(T0ex؆¦$%f[kt&9b]2=zC5|HK$V+J;H ׮{a  CQF/i2ؽ +xqĘ^.F=]^ mMRw+ZAS0>&.Ker '+ D6UH ŧ<ܢ Au`*ZYY c%:.tÆ5^㕮uq#c>D7Whe6cz\ލ5=.1LAϹ=dKlL՞7^CG.)`У37v&i%&q(6PMt5'L,}uij*+%D.SVPM0a!$^P($X q@!3B,eB# ѭ@Vib'fmU([TJ_Z6&Ɩrzr%3&1}5l9Y^fy\o`VDZYU nF(5_ 6~jpeߛ5L%g&jlऀs7guO*Nw,Ġ*@vVGaX"ŇKE8i%6;][ɵo W)p`mkNaJlٳ<3jH W0ӫtjYBU XVt֢;e'P`wɁV t6/xaH)bGC,c{vzZApB Qm"~AY[3PV*cn`dcSD ӌāF& 8T3}U>E{z9'YqaV UͿÒ,~-,Cmӕ]0 G &?lx|DF3\$N(oC~%2C78tw'Cˎ1E +d_daQ9^8bɁDS̻b`!>ӏ96iLכ sagng"ll4Na)ÖtP2/OD)+HL+cظ7YW_qqٷNk 罜m8 ҚhPhX90-"#+62x0tF r@F;xV#4ɬ ˆ̆y[. b"0FsISwsǽL\[nQ~YTXLJ ýk6iG A\n=5;ED&xqtW1 ZY&/k`mNl(G dB"ҤN QY"Q}-˷ هtrZu4 UJ('ssFDA.k1 z0n MDH/BBPÞ,̕FҠ 0(nѣsP:R]b|aVU4(.\gn{$  A2P把^$R)3|#S{gp;Ǜ:G QݝɦM -CHn7\qk+7 ĩ0fe9NގLD*s$+" W!O=/'Ov-]Qӳ n+)tV< HN$/ϋ8/Rhc|[Xj@h,Wp3bT{C d%* ؠ0Eu>XeUmKm`[ RJ Ma;LoD)T,tҠD.@YpT!.F~].n..JL,£b\N9w2+rN/L-5i} v$6Ju匀nWaXw>/R8_c˱@] [tƒfPt(٭)A& _;ussBIę 'Ws ttՁij7bU$ZPe2҅m9oEC{eJ f3JiakbP"QbJ+ߤ& !O%5sc).48ZZ͊وE"𳷋:ڀm+^R۟,.DIUPJ`ʆWKmT e-z@oMˇ-z8~mҺت ;OCYFѼ bI`sS2 "}_Yu|~+M''o?WA2g{ZLK|qt"Ru~k_~_˪ohb;)r31:0@4$_ul?rLgtիxы΋E<X&[.x]\ : B !( hNsٟ^˴gT7Bݿʩ˖ohVqN NI`ET XCI->$5ᖘfF㭨`9@` C*^D#@P()[M!е!oY=<{G481a̯/rr^4`c_YT*mW }|c;5R!iF%4%rO3ŌA`/-W?-CVf o]1_DdHUTEՂUl\EustT?@i-xƻMݖ9T60Ydm{\ R3G\{f|4_+HYC2\'wG+_n{OjOUHg[fR Jl:Pie>n"Ei(E#r٦6L҈d`d a0T?dVvFLSwY,/:o5>_ q% 5ʤ䳖E)%Ey9wv0I1߅'Y:b9fʿ?e:ؽRŬ,d~7^5 XT=:9pd8@)`9^l[e5:d+DB0"x JVkx`<-۶ 6!PThYBQ@H@Psh-Yl;\DXF! :El5i{XZfrМg)͑kX Zg_p}Bbnt3vl$1)1 Wf -<ƚE@9!Mb(-ѿo\k]9G ]j1}6ɽ~[rh'`/Wkl?;Wɷob'( 협sFtn8sЌ-CԀsYnGLp_{NYn?eģq2_:tSDƄbb#u :aĤJNiY^\]%,KDgYu_ipzz:t%tZf+)<"v\V3 _]i!0!Ipi?McdaBA%1qSd-AiK]@Elq2,VA$ax-7 E%;?KhL eJjjf]z$B&*XTq$ZCM;Ԁn[mG9* de;zU5K۾78.yz8ŀC{f0AZ...Yud\ xqS yxH~ߎCָL Hpz Zˣ@ "CTmSa(7b" Z[gTgAQW1xA)">ac[GWs`I IR@8MSy3+:4)P`zL=#N]#2D@N]h' 'k^6dp tyl*bUN_ mV2@p}G K*<* zo O@>&O9tYx3:I@7x] " ᢅƥ wN%I<Hާud`z˰x\7 dHBI_qn|f /BH !A H"("BE$@KؿDDUF@E T "ȀH 5Y>$#E}')'TI< Ql(E@Oՠ*1E Pv޲ @TEQ`EP7>Q(_0 PUA-T PE"'GtDR*R/YPGiT R+~vc7?;vrqʴ܈8VA(Q$H;-nB>}8IN*' _AGA}^$NgFshqpk^ @ T"j" "$g}:(")|TCq([G"(i@y{("UEN*"Z4@DS¥nLq ֤T9؆DGAM`OGVd4`(P>*(8 ^z"xT"*[YTA;K Ƞ@MUDE5"_@O @QH =ETED<=R '{7oACE Hl {6PA֊(;H(4b 8" c1TQPr" ='^DEĂ +L0q`P<("}DXDĈ`PoA@N}.ځtD (y؀J+b E71=*?ACE7Csẘˊ&.dTʉ]z3`dPt+3jhP!E5b ubX#\lS5OβA KF/ d4Mm|mD\k{No7x[rCG}@.d0|?)v ƉoRul!;"񴷴˲$) U"e@ ZM[1 J3)wx< 0A78j}xo:; lk`鸖 2W]m"?2Gc՛lynMG&;Wq0_h$?:ѥ Y$V }CV.]J]s yX?eWޟU}LkQ>!:Өn~s_e7|<.P>> '(S^ S;}ekʫ"<>ʁ^گZ VVcߠ;XN)hX(4#PTOeKDP̈G⯹Ԁ@_eM@DT`DAH" =DẢ"QDzz6Ҁ|(k ›X7( }""@gwy>TQU>TT>DPLHy AQт> h((U҂(zȨ>N""(z8{H*XnkE >WDNP؇G;H z>$( (/ST~F_ >P}Tb(y8QTT0/@|TPLj* bA *"N* hW~* pTԀ~@:""t#>n'ڂ"|.;/ς!D̀Ȩv0R +^"(HH'E(_nQĈ|E>TEܝE e̊'"/ˆ(ALhqU@1b^!>B"aQN~ 袨ob&*J(ߚ{Ȫ *)wAMQES !d'~TQ5HE$X/kHC-'Dq9>(yh U@?"cOBWÇҊ'$@:!Az*_?FΒ%AȂNvS>;XamQwšR>) 2|>C>73S?>;zh_@Ȏv1ACǹq@U"ĥ_X>MI "0GJ8ZA辅vs7u4=h2]Ѿ v>ڔOHn ~(p -)W܈F/d 5-Z-~mٛ$Is30&X/^_ GhM&"tC~ia>}KUծU*}LB,S["EƜL6e=( ϯ%]l?8 ;Hz9+ $G<[ߧ{\Z n S}@G<|BC a!~lg^+b0F-x[ #qCo{(?dM@pzL٧Noe'tM4#GIek_>#+%5)DE[ƪՆl\B"M )o$Ÿtj)YET(0\J(A!U8(*21 xͣbR*+1mҝ1~n;4[`. JDGn%QpyV04N+N]-5|&Իg#v G@##(B[vzahz_E5sf`u*nn~@psK[q^4a׮ўʑ!}t{=TjWqr˱Ł;ľ/Ga;1= mk6y7JɬMkoחf\͖gf'Nhu|^o/ۮugs}x ]CwBw#!uW ޒSOGb4TH @]cJڍs"ʿajٱ|SXjqֶhwEvV\ۏDGѧzati<=;`vK7uηMUyMkM卛ůt˖z_?%9CQ1 C/iPy1{%]§9m s9A䖀I]3Zw?&;ڱv7{ tWHZo_ݾHe/+.o1d| '|Ձc>7rzBuv]b}=r>;q9NA0ZC<_IyƊz7:̀7Y֓=;!8M k!}|)N09*N*ugOqqN= o?+n)lWH~qΕ@_ڣg*B" 9Tc76D\=9@  w-ߺgZLu_L#;P;Z[xϞiXqˡLRp?l77[ix}Cbt`@@rC)TwsQSoP۬c{~ PMv7kx]`Qi_u͐GYy?UkLϼ2\$@rEo.;|$ a*?̊YDPxT ?@8YTGiT">U@DCExedESAKn̂d@ҀÁEU "rLb"AT|Qbyx)TDSN(>aUŊMH uq<|Q :0, @NYwG|o?܊Wfoɒ2_(O>ȄMxpV:k @~GQ?/wDN)}fr6ݍ5E6Ǣ.4,6eǨxNedA,LUP%T G1ze\wgyN5{B MN-sʜ)h{XڅFm" K~mk6ۧt[#ݑ 6"jG; OSm^.\d2/6Po'ޗktD{ơKaRy@U_L++2\*qW`b3̷yx[fUJ(5Ngki˽;%^@W"D) qWTz<+IJ m^&OEDԙ~5zN=j ˬFgT6]M{&@0vo2EeBtV(ܦnE$]sMZcnhȎƎ}j  .qsSk7/Qu"#\]hZ~g`vgkqJvc}.'ltg;t~+ɷGsף/P pD La$l$1(M.:xxX*@ J75㣒zxZ,:.ǓfsùW6oj uCl1O]XEYLV\z^9nr.fmN4C/g))%ٍvMq%ؕJDnt$oz_mεD!Y3YP U..|J"g3 qy0. 8û #sTA2IH"%')ϙNʐH1B GOw`$:U8`O}}?^9tw4(i/Mi`sE!f$E2h%9P{eMX` #Ipe/AdCg6t4̙?rjQcj M5r"s:J-q |ؓ6bqnS 2DKUJ|egM՟&]+c7!Gq!oE|u xxw92 !P^N((P5bgĶ[ZWYÔK^ݲX̮ AfR)ătѿR˺ȃFT&=-WqwI`LvZ spԇ3 6R2qt3q$5t#i T~CˑگMg_K>qew}tHcgۼ51,HImH"$nU*R*a2{^ L0R<cڟe isɟcMaXۙ\e > r0+\`",'(1%Gڠ{QLH& h(E>wx,q|cu?w>[](bl@@yOEUP>s?.,8$qqu/0Ѐx"Tr2 ,%yN?]LTQɉ" ]U!zx1GL7,,L 'HLOHCf1 -h /[! arwJRôcΜ]CdeH[ A>rRwUǒÍ3v=L!Gbʲe͍牱t)2^v^·q?J2o5{{ckQ>0v>aI_:ǑaKKԯ,P[K St<۶x%es3VP@/'4i=RV ֭tU[ohuoD@VP@oFŎW<d+tll$-4"~ > |:w(4< Hwssw/{݅aY!P|6{ !dެ)IA` O =1uZP=8"-GTLNK l/aQЃB|˕#D4mZ9Or~ {E&K kR:!!PBsIu\Wepd馇24BZҋ iUЌf`>}Ft*gm (2 icyg< p}AmՄIc ^|$2 tuՔz ?Ű[R:[~UegP @W \ &Pi?l&srV4s%L%Б?* `UM7аfd&AIJ"lwjZ4.U% ڑl*+,V@8!=SGrܵh"܋Q^9חv}ǷFe!UlS{s] Ac$6]L @m{_O:͛*\zn8I'^jc t~>3d⊨l1B')8}4MŹue%Žq.8/&]\W,ZÑ﮴1Z&36[TA Ԓ,M Ŗ;́!***t.2h [#O؍+@.)qX3ա$MI+ ZlQvꮙHz9LE@^%[VrI%]#ʝl .G)uk!ݖty:UE&ynn0u1UmQ{DGU%-rlfCb!IH$(RFw.XDĘ\Be/SY[RM~ a{;MU:d@ 5{*vpN,)7xS > mT]שF 7JECŜJMZ!N'gtk=G^l|#>so-~5Sy'5˴5gg EœfXf]Hs]g(TWw(D#%0:haEڇ˞?10s]60D1f.ƌĖ 9cgDd@p n< vdہzʳSIj1&[Egf,nU[QHxhY:.q]*z"0)Hv.t xm°KO(u&ie1Aw'@KU/[wa=4=ڙusė9T{حѩAdŦ6GyU*9_M_ ʏ+7!}=eKU>rp%jOVdT:Kݒb;)SQ[Mlv͛͟BІBIeH]4 0/RRÃ]ǿ>ȇxd+ltSS1)R$x aocϢӠ JTbn"E{pVkF)DT=tt`n†BjQ߲iTVKUI$Imm;9qp}FJV,%쯈\*$Pg)!)4 Sl\Yq %E' SV4r&D>8>R=;Li5۲b'Lx,cZfK;PJ՘bNGaEjҠJVT=?w\._ )BQ$^<^kEpܞL]נV -̯{/JſT/[c^"5uҤ5@wb< n 'd6"p@H}ak_"3(@D&Յqҍ EV\p+Ώ.XR߿IEI EAHI%!\+A+Y ,BR|IEsOoe息,XH҄BF@t&v`UhNɳ"DCI8oXqׂm^ 4m>Y{J_ A:u?][RKxcUP6sk ƭ5zriLђ5Yoc]:iԤ7e?VW5\N4\Oӝ9S+MS#'ܳύw]= uAW26H,59mtZCg 2SV٠;uχj~.fXoKNzL6x[-Y}ηmRdhjm~7%;k޻?7r`U>Kq2~''U)UP\jiK uDpسpy||^s]L~& ڄrJF/ۭ]5q"0}ڤ4KԳD-KqTm2tzՙl7сmIʚKqDk_Z.om5&V|ZEd 6jFn=+ed5lԽ[dmζ( o]\m$`??%7@bF׍!l޺6+76'3|EΆ^&z#ҰoP~$𳹍C;?:#HqLRU޼ϲON9VQ4Xѹi]B?j\>]{޷zčoyFe|-|#kOG/RZVZo9tI-f(-ٸz8U⍝ ,c*1 S"Ֆ1QPsUZ!kq\Kٲ&{ Tu ^PPԶ2(;1sW$Xxwj* KCAK=e"IZm$s.<r{~ts@k둬Ćqwo `Ejaݵ9 t)Kx<R땣#bJCrR;S¢SVa~öjD!Xl~B;7ïimt:YTݺQwWW9J6PQ  ]D=- 'Sn߰s6JuN1i"MŊ..{8gf,uwT"s4FOamP,h*D\@xbHC>m5XqT$K(s"6_)oz9@V{pnELpPF(dɗQy-KRؽNYb {Ì덻Z&?݆s V`sA\HK<ԋ8]6΀ރK Q4ۋeSxIj^5W4gӞeިo`"+idEa/~e3#Z{)zw%Ŭ|I9et`5`1,wr_kY5eHF)zz򆤺65uKsQ_ )*̲Caz:pJ4IGfL>nU4]}=IJzY4eW}D,q)e/ ``j$ڭSd ; jT<;P̮Z+-)+E㫦i#Pޭtq@Sg)őCC]9L>sʐ*f0i 2ageu,pcD.F)J(ܨ@97b2;ŀf{5BqH%ˬ xG*nmuo\b6}7DI#qAS{JH6g+eU4Ly>:zlҖ RB+9XmDkg^*(?oQI7GAܤ4VCa'lTK]Gnk85i#3"Ez R3iEbxE/EٽWKZ=A)]wOkmӇe9In,7TUj4#Ҁsai iAٸxB EEHQhJiU*zgm/)B@;U;}COz)ѫ5^hYpTtYYmn<):+)HAJRT, eJen7JZ`)nimI?$֬}}m<@;N 4yp^.C{ w&^V[Yv?ݞk:F zJ~ˑaoDdB@U)?2q;25Fv ; g*v${Rf&. 5dskp*"_7 #Bo6I>`u&DǽJY*#a@ YIPYI!b닶:듳h[rB.3vkFAy}I!o[2K{+=R <6dTpRs܂R`;*yZm.6]k-Gm;鴭[kYޤ0[7SU*:Fg*Â6f8iŒTCɊ%ܦMv'+q&#GyXRmݼ.;;2WJ6"&"uQ m%#{I* YxmY9htFԙ"52oƃhȦ4p^|:X?or4u/bcQ=c6&ԇ_(O+WizJ/JqK7ݾ,239 a%7e9?N L|t4\IF n9tu,TH^5E|"7wh"$ۅpJ\)K| 益GJ<%[hFL.,USItp3@F?{%ǣly7>-e7ln ToN$ur73YfŏuUkK4r huX REi`HC*9)%lt4J,%!E2X|$xN&xWlSM}ArX'_;h/B}=1;Yy&+&y繘Q@W(B:׹F~988+ }c +-Ԙ\h;OۭcD?"p8Bmd,(5?k մhykhҭn#h ;Ϥ<O\1R̯#AlGwַr+8Ӑ7(:T$g/ӟlT-/T B8T B % VHWLǪho(l/FZ-G'(PL$'0Cz0F _Wl:{Р^t<*8e$H'Ɛq ;Stk&60B"!AZwaC T ZgZɍ:c'12_>_Xq2(~m Pڑ<sy2-/L @D$;~WH_M'znR<eL?{ e傆KCUG8Vjg՞^~UxԪs _aqyX$$m7Ï0z<9D*)W /wGZſHWb}Ȯ?& -?~=zZXKWžuX35[b@FL̤>_fc54CT\*8GrE/{vտJg;Wm[hʭEa/&_Ez -&4mhpjUwOq4Ƨ]v Ցn*] 8}j_7fADMln @J-v{?cfXل[F6c;bc_G? (#\슔M%ZWXl8X7 "ɟ__>[y R-N:ё_]&h|֏+bՌSs0F`G_JMyw/;n$yawIFnV9X_LRq&ω7ռ>aV}=Oo7`q$ WP2px8'e:ɞ7\E̲p>9X>YXJ3K[6RI!Uk洕ݺpt/FWn m ,^bb]y bzӳӏyS!i$#Vi 2WkmuLw7"-֥ST2qLM'Ų'hJf˓,3Өbh0 W+U\HHA! Ԍf5D^Hbe+qKXoK[:G_b)iǔ呷ய[־:kG%HDDF'?iW:>HE@BfshyRRSC p~_xp8ZQR^UrY ˩W*JOaK&˫Z=Z).1IP#@DB'y)|BBL.$$v.#jVpmyLI!Fr{yW`_QF(L+`"b*V0^F3sy5K}moX9.=֔Ðh@`@@&U=2?5فVN塡3 1Ky7 )QPC^=I^HVC((H/ 7Ź:5S@$*2K&".F%Rؒbe>X/||=UӖ7#o]!Ih"0QmPoʼn "H0?Qd!Ybf~[oo`G,L5JUP =T Tx{G=XUR(24oP8V(81G(6?&$~ j+*KcCs'VX E Sc4ۉ0REi= P9 rU@ț(b|?jM$YV^ Lzi(LHR !۳"4?ϯ7G`7- DdGy&A g0>績G?輟\|q藮NjFG m>~e,hL1_Ԯoh+Y.T՗3 #H3N+`JhHPB %hqsME^GR̠Ùn2t޿8{2az&/"@Lxƽ~Zro3Nb l"7> IOځ64 qG p1,AW\a | I}1}'E,S-𼰄hWҭ *6ay9FhqUY_2Wf2uU#? _p`=gA?|@q L '39*`u3^e`2^ğAS+hiz\aߥ !^*pϸ_Aj5ꕲHx~o^%Zp-C(¤.B˚[9TsEq\+&.g04Ra_JL?!m¢6=^m!`h\RYJLh,«L+ ;ULNEA; iq»{a} L!D ycoڲ01@*>ֽB$*Ī&u3sxUDSDyŘ( meoX)ALW=>TL7#A;%^AD,Ia`UãŤ} z+*(#jLUz6 A1c,mL[=euI~'OfYjj^ H!!t"׫J)zHU[vfi_%Q\O~OAf?h8^JlDq&u}NO#a_=4MuTozV+ yӲVnz+%) A(A! iUO'Ř".Lvh L(` ~Fހ H I3agZOmխa+!7aSovO4" vN#N4w yX^P" ljȠ9@ |6RNd(ģ*~/9/q{E>6p\}bOvm~_\&zC $.YD8.*UL בf=[Dr2ei|.SCJ_JUt ߴ_o!źb;co0US~=[ĻmMn2.{R]vX-$oLOeJ64>O_qX@HHGB&x-59O#F!qu*.~+87YGWN /ߞ+,?﷞kk2kb_ [:XΦ^ím}8eM|Vos QnT+{^#" ؃#GjKGwkP_ؙ>O#Jp}_ﯜ3:|C"׶D!~LI^>1 AH&}gPXؒYHP"G!Oٕp}=js}p(9[1\DK~8QFҠQ0˛%dE6 qLH9^A>oڑ:@Q2#&" #zA+6[:|=-E] oM Ey*ZOI*UƵH$>ӗRv~4~}q 陉(zyvGOo-ak0@16~%ogՊ!UE/BжaUe W؍" Ո쵨'Q(A j @G%>7<ds#Be첉'k]u ')~;8L͡MpMS+`r=wbZPyPgt ?WV9E"Nk5lG'xn`8t} t(4ۅ*dfЦѤyeSa:6\ez,K+JԼ,C> E0:I<̺|+>b# @RK=BJTzTi7UKgL[7'mFU 1vd=]2J?̓k #׻8{GKu빢Dy%PW?+b 6e'%eTC*&rN)'y)·so&NH!Vh^ $"sj2uHpf.s[/e|9fEFhauNi )I(Iލ* .%("K'D,y?BFX|fdт{,@i} WO'U/ 0{p4\6a NE \^OEclQy,Hnl -˦'6ȝѕnֳ+ZsQT|R *0,%`hD Cmt<1:( l0u"%PmROWmsR?0.yL7lEL '7hiTS#CM $ cT9$̑zy0QbF(5o'+ʼnA W92{*RT1$dr*n;9<ڇet]0pgS=Wr/߱H  _oq4ʢYyvly;yrcSeF4}_Wͧ]1NGPbӍ F`Jϐ;]@BpTlT$iJ XE"a&"ɲA"~uj{iW~nVUŬm%%eoyZx Iwd-_sk (a%=nɦH CBމx\xCzvDm|4?ѼeCx_J"Q9d[~FV[~ydeiz͆ &Ͻnr|mNnɼx&u[{XDfڜX8AB"/r&ST|xzЮ0R qnS.4's2ehM`P-4k/ [綔'k 6UUF.hrִ'AzmS/7Rw+<W\9Lr.BFZi48NR ^cm @c%b5^2MyXYw7#e>=&BB@BP $"> oZ鰇f6n._wC7) M25ۻ ed]m&YE$fvY&nTJ]u,yzPS<ߴrV $,0  :jgy^oqZ,n_ܝ~X1:DDW7zs?l'6p"g,+?%S AyPd xkQv'Qg)BM!̤ƾnuh=COOMn ߃Aёy>7_~vǧNlh* q[S+,H PddT1~G(D\ zIgiWIH=TnB ! e1s5|<%'Hwv (C/j l6skOW;cd&i!le cKo!Sj"{bЋ!ҶJp0ZnFlC@ӎȲOB1qFP}x.[xP$p\LGwwXcK = ]* Mr+?G!Ot#p;hݰ}7:Gպ>3 a#O2D$!j6HL#qg^n\uh5-v `PqbU7:y CXT]2@t_I! }9T˂TIİ@׫[ܟđa@$3|zAM AK'u7/flE0U=sDͥ>S`;$$9!d*=ewvi?mC-~eF!p̌L/)b D-[S3lBHޗ-#5+I@^ݜa(B&c]\|Qyq; *FYlgĄErExy9ʎcmnIᅴo;ͤA9鳷[int" Мwi>͗>!n[@g ̷Vf'UKNy \PxjRW5X. 6g\qkx͈nf ϧy>6mP4 ̣6s\m_x h`~”YI!|9aC$ d0H|2?VęPuw=fPN~x_ x]c'*DⷒYcƭR cro?CŎq脔YB{]0nuKgYZ#*|ocKc]7U9BF+=~?тH`-٥Qn꽗Fme$HQumdo-;O@cMVr\Ma%W53xQ.֙9F]hM H""_Lf[R=32_Q +?QxoqH JFC &tbJ)q7_5h^1p_}m֓L6}y _c)'; 5cqy6Le9JA9l2٘;\>V`5z%ֳS=O?n}hye;-8h-@%3ιzi[?H YXHd^aX .Rۋ4v4*_;d )o*p8/!\'ȵ*xRq_Ewx>_`z QC/#=C`]G.db>̮P ǃ^VB8WGA >4 } w`ص)6`''3 :8Q^p3W+ dP56ib-I}اVӷU1dh.2yPoF3nqL`" `@Ii3 EOJ6/2fM[9'FvV9GcW2IXQYCtÁ,+1w  {-u⑇+R>Oeↄ"TYPgk8]Gê48_us_O5_FߓChz)t'Â7zUhWU\BſH"W2VVfr?'eS>M@;F!/jFSѴc3~$5M(E!Heln慰(:A{#0LjuJaVU\KuĄdT0GV8 D-?_)jnݩ'$)YW?aS$pS#?K|ecϡNø١5(Z1{ ""$YxUx{)տ ;"]/n2>JpeտKV+\ߦGͅOJŕ:!Q٪NMkk`X!W&D@Dny.Np;^#A[fw ͐M|Ik[T!^$#Y5G9aS߷U=^ӸCK3$K742Aj+X T/˯bj'/]=@+" {~|NH}BX?V@KB벹<9\AA9D@MsW?b'C"rq AA^GuҢ鋋pNn:V '+ȸ ǑSd9<^+o65%QI%|8! "ʿ6mϴ61d!o3&PB[Vceq%.&CPDsY;N!+a Nf5'[w.%z*bUrPِ 7/QRtWgaql؁V2X _N(l)P2u^VE@b2Ѭ٤0D4LJVbrJ~ _S)>q`Ē|[sQ ' 0Tc4}Zkx"QDt[ϲ_y?:u[Fsl 8)s[bbn)o!GɈ2 mQW*H&4qT^p#=!G7>|ϰm-~$bro)9o r " P@vL~:z[ʻ4 ^6ӿήm)3EOghC"#4i\j/o⒐8&RuMn8VRb*#".ʢ.#[&aHbs|x+-ELZVZNs b?msa 䑭 }YqM֦Il ?H Us}k: )_} vTh5ò: DD %HH " jbLItﰕ=@@/sHCd&1DO VBzL*M ,0 8(ϕ T,GVfr'vꀘԫ;}eגHԒo*zޥX]?x ˏw e_V1n6β.9(t4@QR)? 1!j!>av(VR;1E8/RTN ̃'-d $W?j.Ɩnwj38vdzp4H M ye21[l}#+JÖL7qIkBmrb@?^p%oټzW?͇^|Ր7XCR+C^*G5sP5fFPR R6^=pcJsywjEx*L Q9 /{$qlC[,xYY6J  P(r 8QmmɪTKr7^zHxDZ!\iLa nmR@HQcgry#Wn7d3.Y/g`ZVO)Iq[qnI1_r2'^[HZ*5TS/;_u]aņ,*"@z'C_U7V幞O5X+Js-C/ko6񤅵R,U=3[fsJs!$Yٙ HbI262Жzb'mEZrS.!.L{(C)xwaBɈz5T=LֺhD-- "iPwE\GK[2aKc1 w#VhA;ѽ0_7avohttKPML MܝUտ1v)nxH3 2@&p@@K?N8cNEBb tH@.`J "6P8 #VR`EH~1[bA-hl<_¢7>};3׮K^C2qr_͞v BhDTD$BTT$Q1óQ)qb$#rȞbz(9oVPA9: %i^V]0M;z_nz@G@7A8.u@U j  ,PZ"H x<< Hyt>_?A^jA,Kϫd gLĐx>IU'|i `J$ŒE8dGjA(&:[7CՑ(xQos;s8C*u0J&(*KU hsg(T  DB+p8-Rf'2H"! eCO"L'G1{ %:Ѕ!$-@GL"?Z@pB#N!kLTlc_~qvӯ_ -`U;Vf4W{+#A'2*n90l_ic[^I {c~û }r7fבVKOoOqzݦն8Q@IX,HAfL3>!GQ_W˞ktm#kqaER>Y3/,^n<:E턦DEw_$a6"TZ"g˺,Ϲu8ɵ @E7f)u:sl]J2:12R1tJ7+憓y3wgAEFLMx_{ܾrq[۩cՕxC̎2oss F,T6_ .KQᄷ w?gA>Q $wIsyxSfM5Qh{D.8I! am 5^ 'Zpc5!Źk%;cFh9k'=iM *EJUX ŵVB2 LTYնaB[TAW}{ on[=;5M4ڠi> ް] % ,$Ӭf-m/ 64Mw%ϼ($ \r!)֢*k_)U.:r{/;Lݒ iAVVb - ^q~}oOznURq0K9i ޟ,2oIU-?)* ^I/Wu`"!fm੗ԃ)O^UWFw`cVڹ\hy,\mE?cީ$/mo ӭvXeu @IJW5FC֧ [CamѳfkfL6CZ/~q6}ɂEM f({Ļ&Kz&;}eQy8p5$Q5={&#@> ^)S !{H~jt}{B K!iЩcUXpjOVۡ-dޖD (\1ߴvŷl 0 (8rHɓIuw}w+5y>vz!e&A^CίDDnv{i9%⧭ݿܞo|V&y5*# d`@.ۦR戓5."hwa|֪:E2![K2aF.R7k`DMeWF.p0ox,OHCjI!qTH7iܵѤL$S{?}gUԑRG\a,}{~wV4_2.`H'R[UX]ߝ/j'~a{I)o$?ƷzPYcsf s6R{ 6N\zvFSfvE=| *3 jim(fA=Ңf;'/-?BSI㝬/ iJTS>⮡X'Lv|=a=dyD@g=&H\Ȧ\L=T‰1ک|R%#DP1a DNхrAmһһTt_UGÎwB$"T(TR[ !Ϟ=x;re[ȳz8$$xJwH^eW/QdȘ!! i2n/Q~)No_&]_joTO@$+Un4g72 mL']g!R[:o_ˆ0 j4R x̑Ы0IiO1ku5] l+?7ӏq^q"}&Ŕ4Y1"aP-ª{h) ,{5ÒRs a4Dy{ǗpLx {r3zeAxr-MNgވjD9(6)Ăh75Ҽ4n)"OO]-yPւp` Ÿ3ę@X! IF ;FE)i*,K*K[#TӨ^ DJQص}=k@D\&%qJmvf+WmM^t_E}پ@֫U4 '( bB9 ,juh)&6O?sbZWi4CVn}Ñp4g2YWɋSҙ=QO 97$Fٱq0r o=XI`Ц$0R_h{_yrAR HS6DWQ1*f8Jw[I4ܩg|7>mӟT<%|UW4Uy@a'AnZrᗓJ$IΡ·c* cc]۷6i"b0 y˔9tt z;* Vt;F[V%{9"ToGU6|]fh4WP+M(DNc-[&*nО!V:gI Iil@;IBl FnB\^'jc-gS` X͑jky%ׇ߲ F댩1?hՄER01b\iۅ,"@PJBZm"*]L})j\SR@A# 5A# QȖ; VWf/c{Y5֜50$`bWeLaq fަ_ ʨ6> j WzV}SV4s)TԐ_?KPM u Dffn6jh{66+ϝEO!vJؿZ˹E3f<?$ 3jܟX$+ʤz$7+4K:j @kMXj咴gdh93%K+$s((XR ;˥gBͯ>F2R=MKzKMSְw̅k}oD+W RVt|PwehF:Rr pWv:;tCZēxV -'AOIYYS?5]'k_?%A#\dhy lk/8eJ@/1o I|]这LPI Zq6< ivuJ J3iP6r.o$BעOuinMUrK],d!tSEGˈ( P ] rS!+:+gC dS)1&!8TT!_Oow$!qLf*JSGgD.z$wP-A$(I $, !0 ]aon#5!j8eb[:oYQдUĶm"YUE h ADTO爣t$BQ !PRt7HFtj"y QF+"{i@)|OAN-{bď+JX c+*B$+ bHb@1Aj @.Pj @* QA|dKEUc@KAE l\>o%iB `{k<]%_Cp}7ڶ{w@9H$ vꠝAA:xUV} P)Yo^مja;ێxGO9NE͏CljO#b}7+KDy)葺_mB?~ dbPT:RD.[%POkə곾n1P.Db uv>{W-p zn$@b(>&r\[47@GZȤ 'r?^~?[M~jǑޗ;sZ>8Uv$DQfe#PC_ ,~5 ,ނ` h#S>"(]D?z:HR@ ERrG[b)VwnK税|7{/mXް} {PUP򛔉 PKG%٠$)BNvP nKG3clvgKcl H_Wf1wbH$T`5=H]~Q-M&RyU@l}ݎ^~_65jF#kڤLW `1l;kkHlQAEj0}YA^ *7~~>w/؟,@TN[;( oEVd@6VMՑS3k0[D6pTRG+[A}PGsMZU@Лءhx!dd $و Xȧ0CBxT 9e*Ck\$aQ)""az˾aK'E)w awMX)jn9$>mf.'0!?nDఁ{,2A;e lyN_^?vdqv|zg"  QUf "KEOѲC+.%WX5noBls0 "!ł '>;EWkn15/ Z=ʮ1Ύ$(P 6d[v&~#w}O=WFyš$`v}ibzAO #e)_Wnc:H#h|ͦӌvYWZ%8.-ˇD1,c9,‘2@[%(leʬAD*:pQ(%)0@\]-} QÞ@9ȥG"_x0HNoJǕ`bB,p18~ڃ*/Hg6 WU22}5BJ$7~ED\[ K*n{|*}l fݶx\z(<41> K$t\$&v堞G"eASuRwf1yǞx8ٷsSWOͪ1zں@DEwR%B4y] z>EOiۙ(@Yu[T*؉F@U!}?ArsB&ψwGؘ~v#X7SQ߳r<˗9 @IB/4x=O奙 L ݟEal (#imP?̬pV  \7?XgJt=1 ɓ%I"TQq۰R ]J)x^p{` ̦d D@DtٚV 0I\*IU9|͑z74 {JS'8[{Nf/={H7!g)XQcUylMWӃ!}nmtný;xs{) nDҪPؐ_$Gk,a؀/ٜ<I剉26jGBE,{m {Έ^@+ :q,9s>^% AQ6o % DURh1`>~ѣ:rjl5)4J}MCĨ,l85i;NUPn? xn *7e>/ >?k=PJz>x~$@7#7RsC9oEVz?;[5a37w7yՂ`cJm4Dlő" =/7m7[qii[֮'HkZqqB_)e!Ù#(+SKHJ)4= 60 w)F}k/AEjk| K s=W*dUYU `H˖ LP"kC2ґ{iAQ^/2& H  BGb.pY!im91D-=23/h7C̢sl" (7U3gK(KqZ3Aj# ~@@ލ!Tu ~ AGENd@yD d ?V.A @Wn1llhgU:c ݇ҲEI#"Eb`학 nFJ@ (  wڤ?;-an|MR<{ <D8m<>*aXn5ײhq=%Slv%]|Zg18IF&ֆHEs*(!h KES6HQU'a RB06K6'3:qr 3lA%}pRfJlZ|kk h+ I=%z |򖺓٧}?(޸Q$h$$%ϊ/+Sw{uvx{o;ܼ}Tg@]\8*2FM;.}إA6F""lv\^uC.A?c}}^*TR%q3Y}CRa(U_\91(4yrx>ydV_Hxxe mj k\Žk 2['&}Q 7.{D$$FBCǠļfeC 1b UHX"EPU EQH #DUb+UdQV)dcF," H$UQfYd AUB(EJ1n\/+9_e=| "~`EqQuj2&VzEg&SOmE~ 9۬fuX8}U[(FfQO߮?#//>FsջF$_бuVm]`|sM7lj$w0 "h@ƋAևtzOzu|Cȧ`RJŐ4ڛ5H/hGL5}Qd@F;[ ;vyO(O~p.=N[>_; tn*h6'xO&{Ir6w/Q.W^6vs" /CϝUF^\6*ΐbEMIJ TJXCơvCAIb:@tpQ # 1GSh#-'l+ٷV7=&m7f8Bf#h:J5]N̈@GM.^#*~/?6@tiՃ;-un.ޜPdD w$J1PEX^@"adY@dE ,P"a>:?!3(BNVOJ7ַ=ʞ7[tYjWiNK;BC^<*H1)#B(ABҢG{ r TO}O!__zoHtq}%U PW;)FAh H(X,d{=*m$5u89kҏJ0;:D͊Q!! GbQ"j¸e4S<\0PJ.OsM3>f/IWsAF]!7Ye5=m0lj(J18qKŠ% } ox0Eu#WS+Qe8)>*2m$Aʤ"DVt AKk޽`Ҏ~.8ÿ%$|Fph[PS{85/ySY4}B@IポsA喭5 ߩ) 剕Yj[DvZhwn y;ΒQ7I͠14TuT(}\-1:}ttP9%|48R?edBfS0|p˩;!f-:BBP*v\@ҘO4G g xDD A"iN\ߌvw.&#tqۦS*o*><|-'le4#aQl˧T*R= Rݷ|@Ҋ[:JK4\:`*fMct`pۦB6C*CqILhT!:tൊETܚ/'-\i/S&(ajLmi2N%T}~{^>IykwxS[2@GH"JЖI3eWM3 'Ĺ3$Yɪ+α,-9pw:xMFd.i/VƠ@kYnXk/_3&( neФZm=\OzbD]1D4.!R&e1Q*b.G&ތQ%QM|! `c`/:޿XՇݞV^Xâa CerS(T8{O~g Sܩd47Γb=JbQ[j]f #5$G+r+g- >a#PE}[\jJ8a3x./M*@esCE`{cٮ./~XLÍ_u8! b 4Uph~D UE<{ #\s'Wߋu<}Ux)ƟҒ!8HG1kDʂZ!هKZm,+ P1CO?.xy Ngy+׻)DHZ甶q؎>*>܉'1mydkD:mV;x`'`@_e/'?G+嚣aU#[U*)DcҜ٥D(SFgSϷն&ڶh$<5'}.0P>[L\,s28eŶEr5=;^+=Yp@aY# "(*$Q 5|Ud۰JP\=X[嘍Eӧ;@TGoy}ek_D3Էƭ |Ek7L % Tlכa.@ɋO*V[c=/sPX&@)9,ƍҒ ^X[.M NH8jJnEZ R@Pt?.I@AO话w0sxѣZ{8ۺxcdrlM/xR.=IUnz$;hKDi6[Φt;#]@[%KٛDurwV `V/ W;Q;lK|[{=^ ˟_pW*+04T c[qmqhJ%$2F3?:mZ=AJ.xK؟sutw ?(YoEb,@TIێ@(|1(OH28V#ը.ݪNUt"@pd*j0"{<8/= S]8ߕ6xpj+2'c4]~=^= e.%ojG .rzmi<јO5› /VKwy( ަo!XZ }*m|tQBv8駧irGo'4mT~ W6,{=ǛN 3Zh.mjN:>9J[x|VMTc6"3k}mB[ 4 9:HӐ<~2T;'zpǗQ͛/eU;DZJ8ސ/,5ѫDMo ԰$;Spu=NM\0h#3$ @CQ=p'5I=29хS9k<6+!j2L D2ˆ}yMА379 FwjL&df[W|\个/:PO@ʑӳkfiVNk)CigҏNY*TkIRRӂ^6yrȮ쥞L-B4ITR:$ͦ+rwnL.s]-/ljO[XmcCoz/)>ϸh*ϟAuVp]c#ng@ H vA$X"@)Q~ "qO`[b 9x 5="HTotCN4ǩ;>-"b(0D-SÊlyݖfc ":X92իhV R̍B-m<mG Jzy`iqm9ؿ l}޼l( L7_L|n=X4l {/N8VjP @E! G if(GL1( PDKA@ SwvͻKٙXcSo;w\~{%aOh,IIڲyb4ѥ&#c1ĽJz*ۚ` ,ߌi3m 1!#ݴx<(ZcHH<+g>6'XM]"DGAm}XFλLYPJ|v6vY.+]3'3/.LޡJ=(1Kߛ)-.oJK6S{sLK1K0r6b\xf xXzKůGho@CHOnHo}`WM_tR@sbR1  X- ZήB>yxOfMUbɿK}=O%%GmHWzJW欷^qabuE62֏A $?StlB0T&c I3fҠrڏgd[-*ԕQD9_:JH9oTz?׹5=F*qpŅ*qBg;*pZ@gJ',B؀Dz.f^?V4@y^^Z~Gy 7a~ng݋.;@cu0 "|xN"7MB%2$K&1~1EhBL);N&ڰaPa}۵: 1;;(H} i5Bk!5hj4işZH}cc1oU^m4A=۲(2 B Jw=+*f ! ydDĀz,7?Huuvl+aI&pQW2eBָ|~K6?aJUOzBˍovsm3-Xsgl Q?~mkF$>yt>éq4:'qFhI%]pU^'mf^H61~ vOlXI袂VgCOL-ѭ|i if]>*?%KbJDJzPيCagؠʗ o[,Tg˨cXBM1B8[L6 /Oq0,a2''޹&2) d3h.ԪW4CMNn{ Q?] Q|j8ά=.l^鄼Dהz/iDf[2ryN ШD SUJAj}W>u gy+0yo)M'!=>_yYh6^+qBUEѣ~lw~1sw=I%3@@ *6lhȉTP ek{־"ۡdGΊ_цbSejKž~6W7 dTqS Y%T'jGT?ʱ~ԋ9j-xw0h֝~˚m.T-'<+8lJʍBɤ4A0RII VېxU}<ƾlL|Ǯ1F It TuE'DE̙t eE jva%/>@(L-eH)qX I^6}%ƐxNI#E`DDK$fȇ_4HrA jh@ydQ?6,#? =@;Đ@ DX@#C-G_TJIĐD7LH'\fpRZRH&tߛ A ªs |2N:&sTqFaηYnuh~-W#~v{: 48̮/沌OL[Q^Qa)Iuq_OqNUզVxtn}An`KA"ELa3m*77!jo@$l7$aO-guPΙ e(nwg:N:A$G"5I]]{flyMQt>L Mt:y`lD}9,qrtl%M @Z峅Ʊ?+ļQ H$ h<1w^geu/o^H?*z"OVsV޷r˵"T H3#+M-1-i}!#__7>QT@I?*7:[RkV.%cMkݫ]\gf F]@H@!"Mg2 Ao><{}9'AT _2w@j~pփÉ/U[*+]?~o(kQ@3*UC>tYRw3/~v3 ˸A]26CSZJUJuZVP?mFYߎ)ݼ 'eNp*x";ŭ"QeFF{.ua"nO~op;ά;.Mu`߿x/{ZP2"H'qe8$ ~j]T!D@C @SY#2AP{60kVI $ 1kC/=xQ #?|61?*Apn(l3wG[Wԍەk=,- }Ru&"P H(GJ*2!΀ĴU>tOyjfyi9 f s4 ϋCJqD3Pu}*[E(߱Ɲ<YUE7!!zrGсQI== PwCx{/,2%ȫ[_iw Oς%QCzHB!bI$+ 4 7<+e'3%JZvT #v!8z*m׎6䐸3. CM@D79= #DLfY[*Kus;16OMǡ@PBSHbxd'_ Y$Xp $Dy}3 T.C)X(o')M+ Yp sBS]> IF/1ڱbI7}߻;*t{k/ݿǾeݚQ66_Rhm] fAlt>ED͝_3:I=AQ1V"y`bS|h05XuH3zVV5y!IᜩU`7{| )_5f/ƾQQ:M$}ң!\y??Ǯ0eTEn#>mynY ǽʋJAm.\kkPƒ3PDQ>i$Y2`lb pALdr\G?uk~o.L)'"O)8WY{l0nz)IJmTWo\:Ry ;[ΰRQC nnp2v&ʰ*W!!&g*ɓy7NeXw~x$JWkկ>u4X"O+^ jԭ;(\ ;\tZ\zU/HꕲʶȨ*rpVt{hg <5`qH(2a΢-v,^,eSo3%NSuDeP1=G؏fnLr'T(SU]t,C O Ip#u -%WNUi٨jYHceq y7'y(J}{> K6ҿF,O؄חhV3iAվp+tD/v$BA0BЬU]]PLCX޵ğTt1*5 k9WT/=^Lɋ!DnT,td @@P@pԀ'{&mdrSE8>>S3<v׹kѓiEۅ[#oR$W)F҃i ( ysRW)j6#OLэzkA0F2'eKԁ B $ӳ ZBlMm0Iz[ſb`,Q1J{$bRAQS;_xӗ߶`3 ?)<;7[{^AzM NZUlI{7y3ᚣK){tp, $,?]#DIvsVٱ/-H2t v4,RI%N Aj7^ҦPeiDi5i]H L ؒ"M[%Dc&2vKY!EM=q~|pXaeFhU$`*ߦm3S{Z=*Nh'œ3Yض P;W5"J,!ky? 5 T'Q`:K_ \W^_VֳR_lFBwiHqBU 6z:0F>!r9Rq Պ$ `De\" z,Ƨ޽nnKwgȝ}RE#&w[QBa\Ah ^~Qy Ś? E< `!p@#q4jW \JPManyz^=hp1HQܥk.t?Ce+Ua?e/^@O@ţɻ.{vYf'%)/J9k!D·:{0s[~e7QGWD :ojjB+u4sFDY6jL]ְŸfD{/=Pp%1JSdx!AMN(,s9DAv{w`-䒩-mcGQ gC﷧gࣣJTzF^ i/ūZF@z:~0EC~6,̰by Mys42gR;Ը%,ZF3# f:zNǠU;.fn' W/<$YxI<H%)T תggLϽɱB9e4BԒ߻VwkFNB bFˣAN*Z"5|g/?yg-bJ#4~׺ˊVJ.tSXh5 Kll&mDEB='5I|_aєDñ#AFȽo^35MM\p&CF -;?ruQlgUyL/'V^NYv!p $9zcBkc2,䧬ǔALЍO|afQme/swY*qG=bvo,s+j"$H @ Wj!EPպ!^$[P`g48CC>c[\#ӈFr5snԌ=6l(4` &m=>E&d3&E,8G* hHhr?h3gxKTUٻQ~arضp o߼]RY70&g6]";}!u8S4Qn$7&~~Wrg_Q*1MG&$Vg{:: ;f;;~Ũ_\g":f$D4/#.1KS>&ClO?W4D̀ $HX4/L)` st6_R.Cp*HD{ZځCmO]mFGӪ0b!%q S/i}'_tk[P-m$`l-){}6紁գVD*b-5`s͝HC R}\Ю5TNN&f=~n8Is9&BL0rUbCep@=cfRdb%J5EY#ɕc2C/>ÜvF WRJWyG7-$a1pbEpZvFAS{NP_yqpl;][{FDD;F.;V?p@Ԙ/fѺaWWf3>˧ΎSl[d<,Ou.'#vMxZGR4,vME;%^]L=1胣*pd}?DN?IOF Dk0 esh ;l'게  8;´8@_ַ XQy@ Gp[b:}ͬ5ߏ.wt\ ])b_źHE8@ jYM)..g~3DOe<TԤf/#^4iQ_O\qooʒL}[zrk.Gܸ"@Z  bRYs u_I.J-jwFRRRFR(RP 3$\|;qWCKDKt2wZקW/JLj pTen偭 rƀ9@o9Y'\Dd[*sbw6#|$R: \**6pPG{O?l%O r7m}m~wߑ#>Qj-!~S$ 7=lյ.l7ķ:q|#5:-t5!kL#@@ѳU,79o;З".YH~UQN?U)8p%IeXu H%B y w@GpHYl\ ^Np{25[DM aQ2n:M[ f$<6?' \s  k1m? %ԬC@`Y5a9s3WW^;͞Oly>̋r\<9n}KaB#fvݲA*U$1p$wX-%ޏss7% d uY!u>unS.n .\]-uOu]5dzrBH[Š:C S ?nfL}AdJHWHZJl <9.*zm$ļZVV9J4t<#rQ oa_%f}7>Ѿt\ K)6;@EfFu~KFé!7*:nssEeE@|4|jOufO[2[-v$ N_FSPYӒ9Qb\1qxbO7aXm߂mꠌ?:L2>n{fS mC( @LJ  ́jU[mcퟳP+>iM)sٱG$  Ogq'}cҞf]" )``!H?نsIufY-ޞ&A=N mq˚c8a)Hs 8j|(\r{y' 2)[OM7sʜJۍd`1($}Pe10Bpv(f48zQT8|嗢S([.S,NY'0p{p( @a  "1XlO멡o$#u%Q@b_Ekhw`_nለ*h9 H'}tq0\)Sm+*=]o9 V Ȇ& u,wJ)CQٴboR{1fH^~v*3/,$dA ~'9b@#]Fz vܘ_yfT5ֳY6}˚7EGr/74ۅ#m?GrSޕgx!ɠrxKn<+HX g8X0 nki8F1FHzZC=~Z<4Oʘ=Mݹk$Ճ{.p|㹽 ,UmU[tO|Oh~?my>=/%cu<}ʗ(ϵ#Kʎ>ȁzKAS^ o5;[A6?ؙG{Xq j$dL {Яuo^12Mׅi[ B6pi`|mc=1e䱦osj*/NYFl"sW[?:v,r]ZQ؂`'"wIYM(MZ#g(_*/0NT^>Z8$DEaި@,S&K{HDFoڵc\;TÓ$i0-k[(${S%dvd1nHmZj`2K v?T AXcPJ @,&)&'L22ΡhfCS@q\V !Ct-k8E?Cn HɂQ d@@<-PdP rC=z[,w͏Gݶl7k?z[-o)BܟDՁY|ɒ:o#?-s{|ugGNѨO11 XeUTǙTPp&56ÂIX1Wz9As. ,M3lo'&r_ŊE6K ?ߙ0#Mn Q}bh;w؏ 6O7)Cqq`ZHJץ͉G`8qFjZ,Ebxf^g1\ds=vum~ bHԽKe~_ փwl1}H&Cxd;K|g}p+?<*:b[p,pr%PVV^,wÆ_հZ~X#Cڜ- [l&Ξ(&$NsHǤ]bkc֕薄Ҫ! Ug*}C]ZJr|'SgF;g&ԣܴ" Sxe\HC9-U8"ޯ.f&arZ9W,'ЅxmW׍{/=ñ鹛EZEzU/iG AE$;HJ8,£:.7[@bb`K2S^ *rN B+ u9?t{1hB$,ĂpK&a=dr}>>2mYnJ ~U{:QO1RH)?HGIPXRະ4 q.~wrPUѕۄ`YG FNS`6?tU|v|TID<"/Q9Qe)Zp%7S;Ggf%RUcDL\Ԑ! P6-ҋr G8Az}ߛ0wGņ-"ϯ~ͺyB'S*2DO= ϞS j 'jU TE,!F0iYy!y蜲t`{CCqf4Z.D$fe,t9:! z!($m,r H`aB gNh5(Pl*ƥ;ȡ?m$ZSrT=\!ЋSZת>E-#7Ie^wh3٢ 3T0j!@Dg~0^T{Ib|;_槊By"P=)`DX"H'AA0PDPxo؎%ł~n7cʤmd޽U#"F~4f/l3o':Leġ]rٖ;?$\M ~M6wm+f;w)>t*",E]{Z$E?lG^<63M˿}ƌ-o%D8pA942#4v"@"ӧ<ϗK>*Jn>7zmW?{~Tdkbiu53-dk!mԆq[*$6u7E_AJFDDb̄ Ntk;piScJA!5 S+:B m@A pŁ`rz#o?鞗ZدlXQcOjQoV$$#{(z߫)ƿ~X(H2տ2>oVNz\z" rN͂( +jDb(t7~ @1Rc* pp`,PbmӸ[<اk` v1{P=ټxB@D (?U$yk۫%cne_wYvzhUZ؜|(nC1&xw Gyk֫0s)dt{ȹkM]6B-Tj/&8cY.i3:}/I4f $ ,QzK-VbGvr:6 交l%e2׮̫ 75{b-H֛ߝdLz\Kjafr^)$A{vn&jj(_P2m&zF|kp{щԦ(T[$׷npƨWK֧%Lj m"0PV+"1EDJONESQ$c>X,Q[jXR1_()]e'i%*/snـ 1v~&uf/kE1@TPX(Ditd }N;[  E>owCV~yE{*H >fd! Po &,dbAb"(ŐDrS (["`1#QTV* *`F"#GZ0קn*զVQQ ǵei}) ʭ֘`ն>SaqSJV}QVG_%E({Kk婖& [K-Ϲk1*NWTkJ4gƿٶ|??u|w{!5]%w" <7Tt5H@k*15QG>_',QMMKG@D◯dѳ!wTӹm]/'^HQrs:Zxus > "AM L sp?{~.C<3R'c_%륵y~1k2/$fB~c?@ٝDŐ %f/-@ @@14v3GIɽ/ށ# TI!$b?|H#UXEUHPkȼ\V֬W=[j`ۭ/{2O6#Zml c5 Z(D L& :][m!q 7_aD'U Qd Y"pkpU٭6,bXN&iΒӘA+Ư4JzY>$6@ #,Y&2."j+)SeSf$\W0jGV$ 45(BRz3x$p"E07UlPM]k=}\Z?_5]*TCi_Bǽ H@BQ*bB[ AnV֐ &~xws޿;v }MӞR1m!>k8qQ*$dDUDEb (+ ""(",dQE*E* $W@Av(" UY1UUETUTb+iWp0őEHDdU ad "=z,(1Tb1FF"fqX6N,9(Ń #ED:Cy 7F^lH@ mNǶ$0;f=s}fuC'~H.ôү on&-2 d1A>gNdDa%FA~{hQDPFt2 GWۚpChAA/>X*""XVHwZ*ƶx\Sb>Qd9=/VanOqe}27*#s︈B8|r0yON]z[[QDeu6cjN/^Xt :HpD;W]uJUWT+2xqa,x($AJ:jی#/WG!興 tYii(]ٳN"YOB']?cOY 722O+˶ 7@FC;L ֣]DTEP%) VcyhH>~Eޏ- ~onh>{k"w@㈑4MwtqA~:&,"5I!D*;(+'P^:(4DE4HmyZH/Q ZB/raCF <ͶfWU vjie/wW6| h!ƣ0E~X|oCԶ=]O}iǓUpuHk" )5į6̤ƿ`@0Rt6ǻ7y#`Qz`|mvm'ܛE<{H>+41P֌` p mEGkY;+~ ''jz%YTk͝"=m`VE2eU7b3}O)pVm,חWl}o ~,  "W^ӑ ,`?]icLK0\[bG!>wb4L}I "du;zF]4`5i@:J$4qPFZn}-jT ʨ?cgjCRr1 b h(Q?+lw˹|;?/(Qc( c`h_f?f25E 9ZIMtt)}&}P\7BZՌ(xzη;d[%eaƺHT%=,[z@\|k_1O0YHKHrExMbF Qv q/t\!\#ssl1b &z̟'~9>ԵTQ5 VpzhS{rfVϰIu ƅt0YypXKT:Zm-pȥ~i@sJBu=Y;|e|`~{FXqG)13e-:2TJ<x%L8I}K(@Σ=-0]S8$=/؁=pI,1 :'އ6@\[f_1[<^$6%чDy b'\/-Mh, >j/a$?HCGǒbCOPt3NAlT%1ED5sM[3n"ޙ#bDwzřDA`/?b JW=흃3ZĞfxon!keT\cLlͧc7>$ (HJ@fSI$ NΜk[3mx8g<[`#{@! 4c $At)~yo{__=%ߗ뺘_7qH *K0u(5_!\ _VN ?@[49Ln8erE^L+ow7vMZҐu!vz., HӇb6v|IE HĨŐӑ/ͺA23+zLm ]f!ZEJH{ >PHMXr!nEބ?rTIIbW(>Cn9Zy+fqa9Y ŐB"OS}Q6CuTԾFPAoK*D#+o C5ը)U3ao4?I=PEDdYAUE`b"@P ȈPH,E #) ,"!"Db )QI 0E1(!U"" ,X *ebNvVlD]"bL@HRGug{&&rK۹=i/7)  2 эB x )Z5 ehP Xi(y})z9dH<35PH6`;L  )"QP D`*  bg?5!s4ԡ² YhCb[ ć7!m&,~|yK~V6]u/ϫ)Q~-Bʱ D @@4OWa®H=+]P{ *LxIHlWũU6{t%FyIiHQ#4jiĆ̱Me:KvҭՊTI}#x &VYht`n_|C. ֓ Mġ%(T&@_QH sD< DC Z ZH]__hn,)Xa,~eUTt55y"t̙V÷V ,i gc-oxޙkV,W 133/ՈN󾎵Rz.BP ?ǁrh-Vl@!"-v,RI!ao mH^j~_ỹ_T*|sFt!LkO Z*.Ԅ_ݢ60A 8BQX6R LMOO/T) TְDi%dkZI7=_^׹{h/ZઢȰ|/7zkՠ̀{8VqゆYɹɔW*@ D B:R.h1FƲZܬvY,&LjzU{U0_ȵYol}Y>=:(s(/m#XIA{KXqW08Sgk*nc m IH d;ܾp؊O+Ő1^,2pH"ph&8õXl ; =.Mę"X#)k{9%'Ufyt RڔTͯpgu1:M"홹+"ap/,x.T D@z4(k04p}yϬ % xFa/ zm Sol[nE 罵r:0dxrcӯE˕50'w~:Rbi;Hkm>k~SG84Iki5tEJo T6S̅Vmog7|W6ߧt .Q#o_ZH[%Sx,1iJ@sh3kk}OE%t(p wxf/Su%tG|BSY@YewZ 9U/Y6614CB3}^1ԘO)It6ȃݍSQ"ž@իf }`́o 6QvDult>^WnXQ`6YC kT:pk&ݮiD٭.,U:^[em=bLhUVy yǚh# lj $Q4Kw oB%' +ɕi$ylJݑ'A*&??/.#" 2iJd@TdJl0"wd} ,D4V [)$D$|(cOv>w'#Pлs7eJoQRFJ7q!]ňӳVYHh f4LCQuQQU=G/tTeU8ȨA5X&=% -sP݀/c``Kh$SDr { p,@u$E@A1R F6W.Rk$ɤ^mD9wAFfR(.޿MA mH9c"G>gLT1JB}쯎CHЯ"@OFޕI2GwhT N*RIUiwaCi3pWXX]al:]'}ps cB8^#WWʙݱӊqD EDBgeS&Т. K^W.yOK4{oTPxAlpH尓.$8YQqFclY3ݭBDd^@p>>F˙^1p~>NVp%{@Y1C8+|Ki,=̦I!t8:vYVnH2L&9璩;UzڊIS?6Y^xoPzΟɯՊ>_9sSv@E D 0@;@XU瞶ު!q-CP k(~YeS+[ҧ]{,jX aBbD p A(S)U]:k%4X1X%RӁ֑7R?|qY2œ W(lDD#܂KfZWA8 h87bz$<.a87t7iga1tr>&=eQRzs 'ZSðV$p)+d7LB_ {c9=h#,Ɍ<6<  =ռaQ5 SIMḍv Hy"OtCNט\U"K(Xa;h^mmP~4\ȯ{}˥ɤ.&:65"AԤd$aQ7?MZJ+WD\xcq-9$&^!3 4W:UCҀen{oHt r<\8y=VV`QLH\iOINt%ثjQZj?G_gInS,/Qq?XZl]( b$ >F?\n_?- q7ƆÝn>w~΍__xE|Í% :ԆD,(i!HlKSٵ ,4!F'Hʥp 1p&ժkr$EkpǑ?A4z4Q]kic!1Gpӗ:Iir%܁ySo5H"[-^&f- tw^\ <^܀rz^bA —dŢ1@ ΔphEr\mLV-" MS`&a4}&`[xj yUϲĔ)A@LW 8FI.7X[^6zEv1wW9xEX%Pt]2_6JMVY<];~SPaA(ŴY 2{ֹ$c7dbiov_tb9X?KLp-сT '!ᬉcܳ[y{Y dTqy]CJ$ow[rUCP}_[sJϚUkڤA&vf?D&٤0Fϑ/ h yFP3kQ%bT0N$`X- !a.w6i P.rk!@i裶}_GP_!sizIJ@Q(@ c/}{_kdRRYa,/VQٹQO\=5AWE;?zvr +N?M5[PF |J?@';~+}-PTja܊n{-"D dz(xόd;ٮ_鯗?~fb)x @ Ƚ1{;㮶G} QJCOW_ig=Ҡy]w Ͻn鈍E?!IpY M9E<[pyz/8Y;8mW޲q)R|סpc H!$'Ik^10a}Vmn?׏_mR-(R5l#F"v1!>_N^oICFldNt-eò=šmhB$hx>4J w: `e9 'Eġ( z,wu\n[|Mc&KCq)YlHiL(N>" LG7e?Ĺ`)ȢW3p ^{*Ԑ,lm0ZtΟN>?b?:,`s8ܧw/'3ʇfX{â[E%H*5q0rx!B kߦÁ**EA*T3}#m !O cC28 ( P uM)]TtDq(UD޻_KF YvC[x(v.q ^EA@kGNus]'t(=7ZJs|mrYbXR95d(ckociw,LzlJƲ ݷ]K0Kw) AT(BPQcȡ6>}/]\t=Dד:FxV)db(AD@EEX#)wbJlz3gYz@&dH) OZ﯂6nAoQ4黖fiM93 Ij\Ɛn,P!ܜ#o^Qh,>a9ba{P\QXb=ucμ(/Bْͧ'tp͡RO!*v #xsPkUEpX8& &$3|}!=Bnqn^$ U_Vzu/T8u<: ा,S#GnC4fy0! \IiRDxg>}ADY%NKiN TDF%@~LM >WU^þz2wؤwt6-zTCrDY{Yy0Zyykv,i_7~HJmHD`HZU?ѸM}ke0`cSljvcz>潆ڔpRW.@ddŬaeZB#?@P%GjByްq[i}M[ D:!!L~M_.c5s)ZbQ~ >:~j)K'/Q*n\ZV! G&@!J&EsnE>e,9^:GW$JVKXAJ7Uy4Yz|Lӷ$C;'I8ߖDo'<0ĠQ,JT\-usrS PƓa2!m8ӱoOMI#'\U`ғ_J(hlBJҮG8$3e8QJu/Yd,Pzmjc6;C;#C,ǫh&$6J4Ԇ BBqD A ŧpw-*e_29r?Ht, 6eJr~o/o(Pli^h@v']̮η2U0b1bWm\Q['YF=,bt!xSG3I# rjwkO:ݟyYڡ`®j)L9 )$FB 5ȌtqmH7='`X$x=hk>;\mniοy,B+()" ,~r28Bn-EW%6}&v\ BJ\5( ^s9^4b__/2_^ϱI!`!/ۘ7|s?; NO)tDGRҺ% ֻ6fb>l}=/+ri^/ p 'AA EUPS Оu>*x ݣ1 2|6(4 B!(aE$8/gf+NIУJ$z~EC.hDА R Jt yf GJ'JUOa^ΕS[s fPƇ{08$ J%/FYI`J:'HbLQ™k &HEl=G1,&9!_7U<+0W/hڿ m !BR$A~*rl9)8B+SэȭHZ pUv ; MiT0jY#EɻZ]|? ʦv .AkXu'oz%hG<~($xt7ǐGG$P:؞a|wI̐&\|?#3s[r: iG~>&unfn0(Pry*?_]ЯC$*d)vkoXøAPU*<+ _tOjz#[DpQD M `d#ȓ)w(3f&5ܙNz)M#/,P]QCl}Hxޯc(Lȃt6g/Dm&M"%0k}LCtJ22cT>T)GG6m{\0PT CÎwstuXA%TY#& C ZbN&G.8<:- HOP3;`A:/7?&٣MDq֎6E$)DXROCr{"~+&ϫx.{*8$! FI';963w,C]56|3N::8)|y"(,:Ņww@=/%O]έuZd\3R`mdH3q5{V+`cf8c)u?Hm}751dc_/VuWB=߭<b.渌ntd "$/Mz!FLYFwbHzGA[7 mJ*`H`1Tׁ20<Þk$YF K+#~qQNC;($+Ilh؇DG?I?ǒ;]N>7ݨ*͗E:3*0\-@!_fy=vWZfqe=[1eCc##:9sc74È*%ak|Fٞh0>)E|wD'~eF#NuQbIK*g;fRlz*sՇxMm;yhH_FHlfvNSqK:t^{<iz3[vNnp}͓;M60,,|€dHֿ۶(&w.Tᬙժh^P2VRp3Gw7ƶHy= dX@(  BG}omѲ+gɇsEt].j:"xt[evҸHm pc }GH(vvT?rM{5pSJefwZOT3#ǫ?[i ١B@ 2@B$ kw{Y+'MR 8+@wD"|U{q0EYN^6z{zיgyȲ &%,EV"̽_+wn(P !:;._'#[„$  :1?c6bդ!n{8$|}:@Ŧ,W@xvߝVgyV@P"{O FEI)6o=SE RnǗS"7mb4 ef 8C׵mhXȞMn)OѢ\aOJdZ3EE[δ -ݵJ' #b_}Ǫjs;3G+/kJ!ܝG}>QLG]IYKݻ:$ aTBڣ\}{j"o()KoM7r}&%mcW'k˘z9ZʶV4*:ߊ=&>lq6a'j糯lZn!đY4f!I`OmαmA̐6p4ˏYc^w$40rD'ʯ~O e[Mlim[;2 |Ia. dvx}wQ B'g n"iN7-$nPRt7sJ@guw  ֑[MznH3\9 ,Mgt\8$-zsSUAp)MHI lSVyj+% D9^QSkcrw1iW$z)~m:]uxuܙQ9_+snB}B:& v(ef$WݥcۯɆ-9q) 2 b-MOܒ_v^~>쥖{lgQ"s0۞dA;V*OhS[ح1=W7ٽ|wpg k>}EfI=G<,(rrE-BCwԕsf{R|^t ]f$@Yu>H:G'6!ё^ ~eJL00TH@c0knAH!in d> JUD퉘WѸ0o7vCkU a)7 TYVW.[D R;T}]nK1oi{go_=w䜴sS, e>.=>!~ܒAbjvZ t~k { qgkiiR{%ik@Qr7l#*(Uo:w,3d Sö”൨T^ RuLZ'z@#ܿkx;cĒ/,99=sGK,$!ᮤ8#P & %Jj-:}) 3Hdbp#vJQGNkm W{xx((&c=]Obt!ymdxrZct䩧[^+lT&}In8vf"*Sxm-fP7!%up6m܃b>AխY K3'ps5Ab*mѾv V-V=r5LN q| C &rОIЌ́jwB@v`o0.yݦ/`Ց>Zp(%%G ɏ;uT2!$ 1f!&Jsto1[yo@)Un&0[ 6a0խž-[քpVT&[\1N Ż,&#[oW:,$<wOh!DvQƛ=}5 S8dy-TC{ˎHGg1m=InX<6ḯ_byړ^.sL+Q$cz4c5}b/Pq1b|W`\vxrP`趰9Z򞟔 T?.qAϧU.ʐLU=Mjj=7<*  j"dn#ʌ_̓kO*]?:WiZ@5xB7 5y8(FOýsEnO+ߓʗtnosL';T 1CƱ/ns1v++oQƥ|үyHBDF oQy%,0D}CǖY,3X eg.eXo Uq a5IRQ)L9ڛW]f Kj#(5=;,4⁥+hWnE@=NͿ ueWDk!kXD@(ˆ*:~HL KwMӣdPD_ց"İ\#(Jyq˂7zU'!i_u ɋ] o9D]>#) mdHI$Hx yX2UZ]黛e~m)K $ dRov* )N30)Ol}*oZ_Fg_?KL=QF^]ݦMJoU۶ùx lq;hx"sMupUnyWvR'vJHp릺ߙ,yX_oV4+t@|- #AHD{)rJr3CHiݤX|7-R$eUgNLaH`݆Ia$IlY޿\d[ME\G^[TDȁ\H|L`pL)(+ EM@aH2;>F?"} ߞh!k?iAR<^O`#tuܿ%}MTUj y˗51Zz >MP qfdR~HZ(no fE>簾߃䫟odmTy uW գ+&.?7/Up75At~"~KQ|׋M g[ʹ0ag~CNX5:8v| S~B@_lOf֖fM9\@~O}Ï|];z żY.#r ?n1d6oTW˛[_SA p7DI;Z5 HQ/zN_kmqX CicK~EX!iuF\SCC(BP܌:jmnK~=f`gm@!”`@PxLu i;=D2i4Z+YōA)_ 6dnZn n _WⱬmbC(,`Bȯ* |4=Sg~ʕ{,FW0'o307̙lsz Z+,5ik'|ږZU{&ձV~Z񿣞\s16SBƕ6EU9X~:$`9P}`: W4{Vփkذ/֟ ƦT(;f232z'`ZMJ!b%ȸ~'yC gm~ g*UO.Z uۉe{_CE.7̃P wHP{$zntyd 26\q6#jj+\tٸHJWAQpMòxwIU&z[H/͓6P [H,{ahSck/U@B:M*SK5lzz9"@W4BERisu a(v!Q1-a;kc p>9:Sg`! H2  ר+n?< uTޢ_:%p_m'Ѫ1u}דܿp҃N5EB$db {â-2s SE}kQ5:g_𻏫 &.c dȠRQ,] 4TdS&c>"BIrR*& >JRfOgrv@"M?+ ao{3#<R%,T$`0-yJEuLM/}?KR=$0Јl/d D"@Q_cxLEGې9ͱtNŔ&Ac+:}mi#MV'v58?u0 <}[֪'Q^e,AnA~:'O"ɉ Ȫ9`}Z0+"鰚`*'{~Н um-T!ͮ7_x fҥ!m[Ľ0>c=O>i.6doa%z^2ݯ] _:᳗dYh1<s:n!1A,F_kZlh[4 Vy gEm#[Ʌ~} Fs% BvǦ>uExWAr21U(PLNC⽫۽'pFyY}-9Zn(҄r0FcS+qy{C<7ڜ493 HNJCkL :?ev$B#l*=) qPYU~ hk߃y+*?7_U9@ASZ{I!svYn6TkG& $ u Z26T&.j%\l3VvB>=IWtsEMFgŰ$,,i ^qnaWѿǷa/V#hhtDZh@<8$&<h_L4aꔉM #ʂ)^e)+Vmac<eӒMk>2UBe$[Ŵb1;ؤl g=»e<'0W~/=nYoeBCCEO:s@K=>7l3ZN ֢KGqDAbXSp:86!a i(GTeod;~OdZ><PY*T#"AES,}.gg#zG  2L^n>MiS;kfԒAl]K-W*) !8l-cL|\y@vٰtӭI]r2֓OR"ޚkH@^*i?lXBUWsKIē2s-8U(V̌@V3\$^Cxk6W労ByR8i4OSF^?I}'g!l19S0{`zs8$:k$)K2&$@eRwm*P)kW.J-|^M{\9x-}>P J!TH ikWGK|gwvsҊk@h09dͱ8ZiPfClZB6Ejæ$prDO*HV{Ftw`$?b/UN Xnü;߯AghJ"Z*a[N5x7z\s `*$%%}".P/Y8b+Λggj݇,MaG`.^哣8\!ܺuiclP $?V_E=FS@6+0ܕmMpn&" U- vZSM𼃹LG*1B( [[+2#~>+ۣXS6|e*R~6 s t ;D9>j2nj-('HH ΔeH5qz-I }k[v'3YpuɈVP]hztR_[m[װO~o2Kܬ4"$3Cͯ%3yxӚV0 <.l(v9Wv66M7VuyL߿^MCx w9uZa."nOqιHϕ9ޮ'H\Nc_Pn DyPЂ 2r]r2}\ޖ:Vd30Kn]G֒P1$[^l?v}5q0ϝkNR`5`,y 43BBB_9Ճm&lx9n!fJ-Po#oA==Ϝ.g]7TۂN+ZVyYtnFG1Eҥc.:D˗PmcN"‡s#be~9L Aް۰{?;JjƭxPz 4"$ (Ft @zS=' `-PAύ9@qa1"7ۇ{; o;y O#g{z{ʤ+ <8`oEDE2s.BnUy WsRKKh(_$;R8^k. V%_`r#bgkF^r"%Jar͵v%j%VYҶ%@{i3'AG-zXaF".QUYăਾ*O{lqn6 3`;0 ia F^-oF~&O*CLvmw.=nӡ\F<Zsfu0 5E7}@p%}9з5 H}845 zd=syjڛQj -)LCR,O>̚hPt'ry܎V=Ɋ[<^W[ÊoqKkuI`Im$4{$ Z0WȸƴA"=̜ĖG! $S&.t-= >_XftWu6姯|/b %}K8Jm`DsGHUSn fm )fmy-xa۾y t=-Y'F_+<niW–4Ԕ(Yd2cg- A9F(!H% ćpkrSԜ>Ԕ,Қi[-FWK> u<:|{4sդʙE"3FD%K| ܁mB񢝻ԕY>Rf<(ԟBWB'Ov"#KM v+szG-rAW'\\xQ ku#fS@5|e0@UxK7sU߿ TLŸ?bLSun. 0ʽp- -(5}+Ws(mZ$*e;?1mBMGw-SzZ؋6s2Ql<oL59ϮRs~Œ5e]K[jڒ%8].L%/z (^N]iCgSw:=Sٮwuck?yyreeG˦q>Q ̪Xv-mw\$`X?aIsf)CK*!Y`4%DMlyr5d|Ff":(/ T[!IСָkeHd ?ERP@L"(cѹZ(@J;4>Жf}>FwBFHүs8FREDi  Z.ET͠M8V wo 4Ƙ9chaG(`l`p.!n:Z䣬Q~#A6L?ԙ^"wq Jc{*D[7|6Y?\ O_! DRU)4~zegOShS{$[]7*"akl/I !PD%if(gxv[ ](Eػ^Q뢒Pc6 NPcc54zb4sFju؛3/g_AU9d.L !}c@R2Yg4El)(@/:\^р׵0 /j4?`ۭ-\lw{Z(WRY.Y4+YzG]ALt% H-+2AJ-BG֢WHUcʌz#HJ ~Lړˠ ¡"xoTϺ<]`Tqڿ'zC_ :*adu5Er/]6w3p[x#+J"Vӟ)='ϕ+iWhF@#]"Tny~xòRF,'*,׶|7='R (YmDE!åɎAbbT"#lr'J!Xj[x*qC}/mm\AGȉZKtʰE1OD7͘cHQ!⳯{47`J΄^SOw=NPZbP?70#%/BQ(P+VyڑhX:ۿi[H_Nz @W`qrA~s\OlrBdMG䨧?Yeد%#:T"J!)}1@C f %aV._]^ AxeƵ[rr6SGw4q V!  M\9npU[XfN=I@H&!lg^yIyÈrٺY9}= :2A'-kbPдpU- tw=>H`wԊ[ntw}U#0/Qtg<6Jg9 f'9jTHT)mnn_>Z=X-SnܰFUndcGQ6a_{Ƶץ>upXY# l5}=" zJ$Unb:[*M%* ӌW]2ZWjkvo\ # .,+)/eQrYnv֯.oX6DMhI!銆7Jγ w;+?{[˭MAK_}mD^kVh_LCZTl95hP.䡩ߡi4\ZMoZEl]c)W'x<8D0YW\P:ek t28/7t"HGU58ir_38ïf `4-L$3ow>͖zRDḍ?喳*&{5c|& 5h>\س^:_n'F I>:rsC!*{YXaxrI?յPprZ>9`, X5h44";%DdEDE@ڥDd]kۜ&ܶlptٵc}#PtQx*h($3@ 9ov[nϢ\G#rcRT/3,lHhD#:GIQ Ž7ֻ{r* d_t)~*(Y?=+y}O(Tؿ9.f^,=nsڥM,qۃɞe 9|q5ax=/+ٱOEʕ]aDd\ [O"rxi?W`QB\;L6]Edy,jzwI!Y}CZf9tvGV6'3*S4Q^AV^2@b# pIhRo7y,\NkCy;>)sST()s N7^(d7%ukmUH[|}HO/>`E fbzהFsmzw| >tLNǑ4K6_ÕrŗVs3j ]`%nq?qB U(p;'WK<4[c$! jBJ93H󄝋ѷګ(ԕ~IJ`$*lQH\6H >r/mY]^G8sݺ@@(@%|D{.W T-YjM ^=Q~<8#\\NJC?\ĽaH@A^9ڦzk }~MĔgW:ږm@w)2*8g vv40K<#u&Xĭix"B)b]"(E0|&;0d٦&E>F^΋; Z{aNg#v$̋o10Jy$9 {~v6c/o|[WR*hd 2``"Z;^̦v]ED9F)! >Q<.nx*9VIxhhG~zMh%M$+N ozj>s"gl7]QC6|O|m] T/,]XJ,4!/j_?{K|_/]ߺ|w-?qz n[Ch5cZ5a"0FdHλȎm޼=atL8H^ xႽx{piOjhP##m$6;bI ]zHMy A]_r7\6^&Y Z\8x<գ]]M<)}c xrSrE>+{ևy &٠|( lV5S =Qg%:@:4c}+>oe;r fJ0&Ome4~RyWP(˲g7"ёN^mټ{u|M^{tZ9Cm?P-ZQ?B$wiZwke칑Vi>j|[ׯowC` v}Y_omUE]~f =FzMy3a>RЅu_vR]+Z[/l9BDH#B)$'FןNϱ{5z]{)eicJe659Q+VWWV|)Ĥc,XjhQ3$PhH袉Xs J3|212=Ǥw|g/7:AiekCУf"%vShb\QFa ÆQ9 0} o[i3Zjw36:HedA$I$YBG3N6 K;%;ruZ$V j\3ښݗy7a@2Tf!2˖&*#GlB"yqkAo9D4=CB,N)4Gғ?9i `休"f|4[U}4fR oh2؁1$h2 T]i0)51P ok̀Q.( zCPKBv{ #a^gܡb-uC+GTb+%=!U\`V)"ZܢQ̲`<ɕ ,&[8q/+^vbϳ)(QpyU?3+xKcP׹0{^>kt{d@X1D|L([E6x9t{IU/ D2ƞCBP"bSz~Rԏg2D@DHihUQ=l5U]-w0qwZjxT5IV[;숋ü:(.]CԄ ]Y& ̄[wAyipZx%QÌz`AwPE4\D9ۚt)[& "KUzhϰ@/JوKZ2p(:9s rѪ4sIWO?u79 ʨB**%xeqܱ a|Ìq HNMd#_ǩ_,ihΡE& ϻm-2Wo1&X3ޤmו0IRRq`zoۺVyU|;SOb~m`(`"D(H 1$.0 |vqcGI0$P-,؏S P1g@9F^9;KYTIOW]%!gbtuR8cR€--lCLS`F=rOfkhYp|!6ل;zƬL+;g SoHoA76=xSUdxfj"kcquS۰$3YF,J: AS [:w"A9uD ˑ.Yit3ynS#0;pNQ.=;_YuZIVM.ĀX=wTî 8m:|{<-%bDI"Z |ii+OeI,!;< -+ư1A ;EA7֩{*Լ2=<$ZȺY-6w|C''QPP,0P6Cd4-Dփ7."ɲ^dJ!A#^ XM" @ƫS{FRIB?]^ќx컟(Vsb^Z*n7uwjhet&j C(@Ln/B/o}%2uP) Bw*V66YM}/G9JOwuʛ貔î 8X]H2kugZm7mnՂb(V{&lREIԤ}XxZ@ښD$,DeI5vm!Zu?{x @%HVBF:-d@&>1['ab/Pq1o:cMiccd5wjͱHp@ MdnSD#VqnL8>Ǣ eE UJЅcYF„AH" %s/C^ @CSv,{\f?Q|*qy>%*(RǕY.F;cɩvsJ|#%cf7<#" -/U6M]E9C6wF% 2~/kk9u8@d5o/Pm4*s'{ZLcuk} A~!Qd(LFZ>i=W3j]f 2}",3|O/\M vmU'[4MX5; ;Ŷ͉ *#OHQ3e~j4LAV!]ģ~Oaece1Hqԃo|ru{C 5K%!]'|N}O ^%'y< ^'W?3>DŜϚ \|i]7xg6ȴ޳bUZk\+=G_S@.V9ݷ*`:TP&w@zvݍ4Xo6u*}Ber$zrBLy*ұH$}o"ǭ~Hݵce9^8MgδkՍ!d.G#:V&ջ:lܧ-(CĀ"ΗvmnNA=\pMԦMKQKHoL rr}m8} 2x7`jp*^?J*6Zi`!~5C۽ve3<圼mQA$eb}!pBWm}}<7"¤IF ip*6k0j¥w<{=<٬G]JHfh"t>_ iom+&,wa5水4(% I ]KM/åsR(8̊˹]ȫq=S-Y"T,AMȉk_7G`CXKƳi\3Sq3𺰬}&tzBiĜhe慚V?ɊWr ebcu#$H#,$BA 1{LCxTH.uS( #He6rxz1C_gg8[\}*.ϖfN:R+yə>UFujy:ӘXȀM SjMUpup1aiXl(r ^kӍF7ES_ʿ:L1IÜ),.m@zpUgw7 \I"3mJ{^' fz2_n-kɫCBhlʯ{N> EJX)aBA].̾gL7L 9Nkʞ6Wu-Z#wTfejM=9jtϱym_g|g+ 9=ȠA{әGX) *R@FimQ˯vٙtӖy0ni0ct/¬pU5~P "oI:rI$%ϱyXς< b%kg V .ADv8!i@ByTZ.2͘JqD!0OVdIb *^ 4 R%vԇ5Җ>1U * pc1mi1_k۬eeooj%b g[@~3O٭gzhxh0fH!Wf^0ٛc~琼`ι}ɪQwW5=:Dz]}?.1JNg%gOcwo$q<=y׏# lyX/N^uJZu 9O$OHiQD %'MTp_rmb `$zdg7q>iŠk#Y,' |65Pe%n[SiP+-{Y8܈y.-Qn▊R>ibx ݋ c69xMG?/17c^V/x/{3@ҁ ͎j֒@]ZN,(\YV;@]fd5nx#r%zX$}PC3y7zK)BoS1A) y]=L=Yf*V)K2'ΡACMv ;fxj;viT'~Rܵ! $S$<%q  tmY0@ڮT%\ӽ?*6(5~Fnc. NȑeTRv~iTe7$#c⚛> TO lAHBJ(Y,x{> ᦐLK+P\ &htj‚n1bmNB.Nsxw8}# q#wpL)Өc[U<8PȲ-|q`a[> >GOGsj{v(`6ŕue W{l_)@zٓDL0!\c_/rA5A#`PHg x>eO&ӊA +tjkɵ7ts荰崒ry6?ǝn\43t$~4:ssT):y O+r0geW?@6̐8X;U,SpTi-|aJHMA@4a[uz[ѣ9,!BrkS~mm޲8 +h-ӌ ^D#AHWOg*6mT_t@p1GZNOqqЁmkٔ'Bzeu H|QƁ?6Kc63MݾƠ?|Gj\QBAyV3{49؍&D&\YdHwٮ*9~!2?8 C\ [h)p3;SG%!UN` = i =ot^rK>Əi]*  DJă$55SXq0JElϨVӫUw`I\\^B)>], >4<kʅ?2 @@B %}H GljVQ qٮN` !}D4(X'FGj3l_|V 7?ēǵ{* xDj G@as:ݵ8TT^NMP+ ?Ͽ-OC7j%T#P̔t~4rdD+>] l=a{ER\.̗Hcm~K6[>b2DCst$m`" $#v"ް24?7ccv \eg(6[m%I8jW>v'WOl9V/2U_$ (j'iq!IDt3K)7}.oj[It8״ʩgA1`0Y z J6Me?xMĘ& Th4޼tگijHܹ-6wԜ\;zI7ooiZkusHJNt:;`t4t]̯^~+wۅᥲ^}#gvolA2Pvޮ텲>*b-kW2u薴2/̐I@FgBt3K Qv+!!2DLdA #ٮs?cG  ]3`Kd/x) 2 K(,֒qOJG+a Z>C1rE_փ=Sýy %]suJg+=y`mfA!D(%D B_zXB&,*DrUIɖz$̗^U.cG5xA;k=Wf} O-]" RƆ!#RQpyHVrQt/r9=? mH%$ (|HRĄOj_-!:RHW4ux~~ÍE C 2y R=r7Tj+&xH <~t[/e K'y|NgLΠ`E,:RiccFnJF5啥5MV`$" Վ"a( HvS(X6,HAg|E^ug|;T;u MmX}"]3t#P̰ VNh$w'd|Ħ2 a'BV" v?M-xBBZ!P>%z9=v'qVHwpquw6pd~*k %gd.XBL@ 'gS= 5[cl&G9?s&ސϬiEr楺D* B$zk9[V==JO\pIR^)=E֘O/knkaMwb`/AvgU/Cԍ"bJ5qqާ: >oI2K$ }E A) D{@FAgIm.?[L/̂Lj !Z,=oJ_be cLI?!B2~ ~2d3s(b.QO7 U7?f|c%"a*LPH{rWy鐄*uLYcj3əyM|̈́2J~9Rv=U$sLY#0O63-+7k4mT#P@m1[%<֬PI vl_1d_-wv3H˚)! HoǼ/M !0Ҿ[q0F7ppH("lO>7dzV>_ܣ/$`Ѻ;kVӛG\Hëh܋9Ňb _TibJA>/|&V+t<.DƾwZ;`S*,DE p |dGd]hVmPrS"v mx\ \`K䲝ÏHMStaܜ9Νi:4b@C[8!*@Ŋfzf{7Nl<*X-GW34l4k= a(?yW`N$$rkiUVly`eحev|338vE! Ll_)b!coIa0Z?_aZyΝ'?N`WaGʣkǙZj7ӯ~_U"]l;|u7V>wz|h}$ i(yHF E-4'kBlo.b *YF= ivuuexn޶-*}a@!v6 6IkA@ܮ] 8Gl-y", K.\Nܧ% Ϯ _vE82" r)cX.#gb"]$!Ie {1';'}dċO#TT[0$(^:[Afcݼ`@YƒHi&bR;pˈ8,p)\ 6o}wVS:8$C^>b6[MRꁷ>lЈR>߰(W),i+n`_}t:6ol_X_\OGlKB>9ٟ,b/tQuþ?w8gW&}891u@Y "4\_6 zT@RJu&ò-&$o?I#(K! ?~mt ͞LbH$ȶ\?C 64ȣxHv @(%AI1y']kH5:Q65,ǻҥ_=ԕ* H",R.>Kab[RC56sPq &"ˆLFX/Fߡ ո>q5GɌȏu(yPb0?mA+e2BUo_[N$[Opj\'r5H)$|_ Et\yٍ\9lDnjzp;}'%D]#A h{LH5Msyj U"@{ջՈS:F0ֲnk0l"?@)@Vj>d30`D2ͻ*d"n:Ƽ4= P%-^9IB ZCGdC߄6R Ox|x 2$lSD@oF>A`I J^e8.ՃpCiޚ6@Ґfr`mk}9i[z.f >.v,{!a~Z~c{#+t~wl7ӟDkR|uRݱI.zCGMK|}㨗ۅS 먷UL|W^G+POV7HThq%oqf+1=Gk^>쒯yi $=ؗXB(TK@5MmMEm: NH5xWw‡мe](B_eqs|"gMpb>|OvZj6xܷꛋ;g%xT oi]/eXh 2rU2H؛QEB0EIw0\>f芪(8!VITydTFo(H=`?in#oR"LRGLq8$\;%g(BHD0. [>w4qՐ&EBT!Џy *$d$5\>*B2?}[K8tuԡ6bB@kr }KOB_bH5"! zJDb sY$DVeemwqԢ84+?1_iF'eΟ~HErE1;2ZR83/jİRnk 5[_X.p$*833 䇔Er45\Ϣ$2g )sPؽ-/m=wzT5wz)iACQ?'߱t WN=ox|aN1/*v?'(!;GֵboamkK}o J"z?/zکkjMY@2AoaELt=Xǚ_)7\6!k3/ZS敆q 'M^32.\ "w;_ԳfA< fDdלAezKdP9@L̟T޹HNy ԒPG/)!@I*ds6l+FE2ØTMDL?O]Tʼn$lȻ vƢǺ;K xq3,!\GF_<v$=?J^b{W=tEݦ$,&o[wy HY 2(+U~OjaR/<23L^LUJWV ~ d2h3:gh#bll}w\ǎ{?4hdkjLmɫ|#$YV;ohfdʛ]%C`-sUwW"#%I8#ʭ-"/IP NN(`ZpcS]=o!}02!Pƪ.Q; -C3'ϸYo/u"0F;kfJGF $_E:p,DKqƃnt/.rԉ|<_q3exOZAD@2Q2$GfTFn1{Ty:r$DOyn){ݾ^ ?!3G%s ETdGHjTiFQ߳eD|5:|T: Pd~}<،rX}=;Q1kv¨~7ڝ;3ib D&h?UP[FF`mlj@%{,x4hrD&"̚W%3lqp}ޝ\ap)ðfS>$JZTް[jh2 OuRlQS&nĄ$ 9L1CŨ_ڄnZ /5D>y!'Ԭ9͑^jzUMSn}(2Q_a3<2<4*7◽ [U'Q % 70ܡ,[=K}5 Vo$Sף?7$X\))c %"RND8]<_Q_YEPQ(Y@Z¾H IoopNX[gN [SqdANq#E:ǰs oL.|Nט/G>yH~hLsQl2IN5^/==tW~zQYN?FChtqϥ:6ȠU %O|"玗:8HmoQըVNH-`@ OW;[kr,Ƒ65&ǣގ"|#RVw%55G7h@Ս(:r_~U:-VN1xzղlneU9jAJjalMV5J1o?w$_MPaǸtgjqE1gv%"Tǣa?/DcDh%:J$I$f2eWZ4bS _Ѻ"*[^B=&GLdEɿf)7ù/)xMQA\1KiDN<3s  9FR X&(HnQ yl%%7t26Q-pH SZaܺDUg٤Cp`)N)'2}εT qAJ!!>#D zJ!yJ_5,ejMu}VQyM v,c>Wo^1i'l ɕzCf%1?_9ŃZG}e}a{Sa^tU|ND^ZGO.v9}8l)MKl='Ψs9&I1kȟΒ%\ԆD3&ڔ ⧪h $PZw]~y=C=^?X*Ck89+1֚" NҴ&u '̻S96o3#+:1Lew3n1sc]UsCc׌"e!,Y5ץ8, ȑzCݧE LM x>nxfVKjnb,y3ܛ>XqE/$N9;Œuq9lZ٪Q~[ImVV&S-BI\LX̤ĨXł8pEFM6TLl~@-ӐAQNfF ?#SD>*2#5!QREC@Z !~Ha,W\t ~w< d`.޽SE/VK@>o}o,vBa뻑}t"~iL@(1s4vkQXYRj;/0@2Y-MZzE[$sQs> uьn #D!Q.eTlpoL?dyTD @+ @C᧢ᔢ L-(HwGP}OɡjWug g]? 0dD E+ʂQbήcw6]K5NaB7``VRh7 G׌$b }@_0PS7I:;b(KBsz^u26:2bIQvvL.]u@jFm&vKZA,=]Nn;GBf"TR@wnR#XP$1Sq5([q1J9>Ӕ'p5TwMHf\v=!.W+!h4eiN&9:?olCa!YKp߱G)6l񷢟 NIyzu 1+:-K&%+7CۇLU%Hp<.Kp3"\+," .KFGFOsU*I`)୐3~K1)eLTsIJTm2fk9443—`auϋLښ-":(34( !4)w?V2׭jX-S眺S l W2E ²@]Srkӫ` z0J})Yz`[E6RӓV͡\P*R|]yքz{dLe BJ?=-'"x,aHWy-u; 1ւ W}~<%C5!cF+qVWrGA 7'_V>' kO>#޵>E Bg,9ʸ) 2 WFOrm)]DYH>ߓPEFlrIk\>KP/~6#l!`[lFqrZ797fz\lZ^&5 QWRȗ<@5,ׅbvv6{<_L xfpI ee ]ɷ=?\x+a<:\}(@T$"k > I>~P@ըۭ1z];̽xzҍnw9~.q~7H=K@MQr9ا29pcY+h=+7oYP;/կswzr;/mc[ߟ{/=Ş"$${\bPȊb H8,S"A&ҜaNR ]3Q;e٣/.c"W*Z5N5R˚ $#0$wÁ|0 69a86 !LC*\ki:-T~l2hџd]R\^ǖ֒B^TN(6^gaw-L|?:.4*wbBsZC2QQ&)“&Pg_(JҴlZiJOm@+%dv@BkM V}|W,?xjB)]!P| jO׎jT6vA]ң o6^୰M$CH0w'deB ^ɢO$yX*sd;/a< _2N[l̩*--%eaTB躢 Mݎ@/z!b5%]1&u?)Rl!ϵQ~<hcNO6yT% 6m:p.mP;l2 Y .ku^r{r( #@ 1уXЀp C2!XB᧝vʢ A+Hy*:2i.=F2X5d)"3(D~-_'O<'~8[d@b [T{5ܱ ?К公*V 'gϑ~ ^/o;1kuyFG>͟rlڋb+:z=[3%U./)$J5?F0 89RGj^JolhܽY>m&ve>]p|<.f1;ɟ3%~f:s9<CRuUTT>Jw@xY> 5_rOGLS㖳CoM2= BH ,B@f`s.+&NOIi{J/_췃4 A?J:t$B,Мt!ynh@%(ft\y0o.-:R FC-tRc" e?-ӾZP41[R.RSG59JX[ԿFeo4gaVqxZVcex eUlYn6m aDV#\ D" CMHL@8Ƿ' A$W Wxmk$c``aAr^՝2='cKV\KC@=%1AP%(qmǭخRcWkzX]{#D$:h ;E@h~MvgɉPa󽫸Vg'0Zc6z3Ÿ~VmcQx.V@b0 & WZR*90@;GŇ${0x%I[Wп>6|ThJR3!l"l$i(%Pm%mNj4'/&+ߏqp

EAV'@w,mȵ%0,΄tQj3;o7"TɑȚZU͙e-伉i6Y2eQCXۗEZz8_`eݟ>QӶ+/ ݦw.-7r/U1wWW5̩҇y,2wŕk-Ye 9ڕץ^Jt%>WG%=ͽu׫o[dqg5j;oN [GH :m%bv/L[ l䵄kruX u7OٔxU3n@-RLзr ^Nx;6ۂpO4qѻ JV)γ@M")or[ J3 @<Ě9)k:Q\ӊ"0U>|?[;.oFV'{@+Q1&؁ſ`]Ȓ2P;tBiHNPVIx@08@;>3j;J6𑷽U/`ݏ{t{v(h}Q*_w>ާ׼04N$A|ԵuT]zС}{|SzG;ѣ}G^[}5o=|}nw{˾iG"hhl݆GszzYy2#JЂ `L h0L 442z1iSh0M44ɓF'̌mOQ̔4D L4SLѤx4I 4cQ6&@4zĆA4h I'h5=4 1GjO<)LC'RS!0OQdz5j=@' ơ0h4i"!&@OF Qz꟒iQ$zj~S?Tޒ1⧵M=@z#F2h6I0z1FSdLxGOFiSO=MѠ#CFjz&iPii=@4ѦFh=hSFMd3PD@&L2d&GJ-: ]Sv&Ё@&n 5qgiwLwCruo ,D=̈NW>Fʮ+m-ޏm8'[}IVni~76"9I'ip{OƟ]j1e=oK~-N\]okW։kuu:>t^tnuwvv'Z?8=eeKKܽ/]rp|?Fcݯ2{ŋdXpԙ"i"8񹞛Lvg:aʰsu9DÊrL -;FOhա!Dc)Ϣw9M6Gzac<&qcb&'91+5%P&9LdP3rpZ:)lY {e*Gߘyle|'2*Ør7̛YeXw8DI/N#=v g\MdX:J}Y8E_M6C\aCZ;.'70_ _s^viws~K˘m&WpՃjk]mae!Ȏ<#fetsjpz>^ю [TZ#m qI,Fohk1p{lp,NrtJrִylDýu}wWY#AL'/Ipj} ٘{zqr;8 |0"坳r<V*I_s1PϪrt*L؍{0!ssrR?17c`͕j6C"FR0`TTD+F ʚrU;rlh̙hgBo7zt-dO:<}#@$a1\(, 5yqy q<Rl~C225o;;^ޖ!/CƼ=S[T2kxil@$RuH~G 4CP^a J\.x2 j*̨j9Yr0P?u-V/X )YY" 0\ҿexbj6ԄrIPj|6PιqHNퟡs"JRYȆ MF(k PԂ.g5E]U!nX'Yhj݋G-8=1t7o7j3^L=)X&B8kL!+#"H%$6>\R3TE&0WLG +P= aR\] չ,+=:0QIm{=@!! [n {j4yU X08ǀӉ(j{C@%klm9_{yAҾ:)()eӋGOXԬ~F4.]~߮T˯ Ox-omVvהK(0h9 KoчZnq^L=7x_~g1ثaC~=ogso=+>urc_*^;Ol.>Z f}.+wj>vsGxu.Z_<7ib_?o;a3woZ̓/3oc%:!Jŧo]RGM_ӡ蠏]: JIEcJUXZz{^V%vWMq]j~-̤NK 6̎8dfݏR|Yz}m~o;~^r޵Fӳf ߭7{_{wf;3o9iOR8Ӻ/.=u>0':y?:vױO-|o<7T*(h!BMZa.k9b]A0K¯m $"(- ISW[=ȇ/8ISN1;s aFF }SC0j5J` Q8tji qq0D@ov#2ܱ;9^Ԝo{ΈJaURc bkSzh O @6!`ƻDʸv49B@u,eM@LK3Ǿ1kQ%YIc3oALw&-PTN"ݥlR0HhnXKX1 F[i! & IL#戯g[Vb$NJ- bTqf7Na;X2$Vٝ808 T_x3 \,pLy1Q3T Ó<1ƃvM $.|0#0ţ|yݣT dAh滌ciqtfV65qZs; 5>h`k8sMшS v#hM)]!ٰbԫySqNȥ .=8YN !*U7 F.O+>!{B~5`c~Ykuej'& %R̓A+-)w$'#DS4sq~qe1'Fj/f@X3 0Q%`bhoS&AX)dߔ9,Z>ףF 6b60 ;95>ؕd+,/ru^F: x=qjO11oDz`dēCZ4k ^З=X,8u1z[ ¹ xbY,mҦ[=#DBmt;8YA@b@QW^/Tڌ\~t7vꋻ".c7ko5 1{tM ڂ&9UFҌׂ"?)+Z9'Xt;,<Q(\}y7Q,g*L`fQqU]oyA Q!!\_|x زߣ찕EU)њ}nqctw,((x4Ȑsom0+4j kżunѳ38=\Zt>u_Ztqɯ>)ZCyc/)vpX &۝sL\AbwߧG+2B Q'j&7  8vgJ@ Z]r+Q&֥wo;cŘN{j&'ִkWaSK 7j; YAhH(gݬ#w0:QL DDogFIcJ4Nγ|u""ּRSGU<l:=1dQl ɬM}K@!뜋5C!}Z2(&Zڢ"|ފ@k@,j+wgAq㞯>)`=eef̳TFFp;q0Hœc*~i ܻ\zbu@\L\T pn{,mGF.`z;5!XxIǁT ^x-0II1AT31)!֜ و7[1qO’N :>64AifH%S3;7)`\%b'ks$@ݗv ݘڋi\0 [C2h~釯%blB2qr<{lo/o@~?m|e}h^:{z[%Nvp\z`,'*psۗl;Fw 9ŵ:> ۹kl :+)m綇;,~Y%M1 a2 ⻵t3.]\S04&f#Fxv=^.`TP:])P/SH? EN0[N"Գ8Mp/rqXYoTʾmĵ%{@?n-ï 0yufWc\yrn8σ v@5ri3b# [`/I OB!}J$EwFv$/gv8eg_MZJM2"Wz"ݼnpmZ6̴w.ٲQsT呎QGt}njxm}6|JϏq`q 2cssZϬ\,BKV +A˿:a]r#]Vi{Fq[[:ߌtakRN5*B[)Y}=#nXضJN еEYtڍ 9e+]Z;ggޖɲ Ӭ%hpZ6ZEt1K0,;Lʏ.nԱU/ƌߑ1A='<E)Ӣ5Iuoڹ̞Uū::1Tnfp;w6m7nk],nJ CjS͘\Y8tMOcfFj<Q/ Фz'u&gJiwg E\?tbͻ_[0ǟ!n\ gioK\=7&vYl`꺰gbxK$cu3bF'`ݛV'tծt-ٟ934` i}ɶr 3IkjзПE5螀4螼6 gdora'NG8-q;im$ 8Qn=u!t0hPEtD*  cDY$S,*q%D> Q#(bc聾 p((HqPE-SQCb&KG? ECRfɽn[,ʷX>:2yϸ}TPq)kM/ ټPCasb @ "[ `'J {`(v:xD@bwLia@:qqZw@9A" pN 29j#|zX/]upȀ"!⢁ 3dA@GpPotg1E{w4~܈('z~ˮp#2w&P9n˞DVU yPhN<]73Ҳ *lmi0-^ ۋM)e ih" dEB dD fgf8\ɳ $dD6RNcaol" <;ewtߕ̈d6Yj D@.ZZ$@v #2]ƉBZHuhh`͵Ou*~D -z5" rb " nQ5 * ׊iЮ.$j2w$x\d @BNic {&oSY7 KlQH4w\0烂#tVOzW Q$M+ ΌM25bW^7/z\cm`3ߢ_E4 Ϙjvqwm[I5xw}:cp"8΢$CE4*iV1`c t>9:?A81kH3)vYIZ{KPJ#}_}/[s#ebق3~ ]^(w]eO+g'AhƜa'a紼= { x= EbzL`hz R BKiGk,N>_CW]acOtG>q/;z@/7/od !'zhH{,=4hB4w3^%S[׉mk[ȮRsvq@|)y6~"_]ܧ*lkNI[Sn#b5Ag$Ƚǐ]T\ipU7'D|Hgs&gV<L0\O W*ASeɠ*mL"T<Ⱍ7..(Qc`KD+PO DFxsPYβrSY~u?o[ZOȧ8blߚmu8*_h>i1-6> =s{FIvea.RG-o6 GU<?8P9{iL>¦۵*K~ꃷT nOLu#z++)|.M+/As}Dpey<\;QFsaFŦ'lw} }_ .NMLu1ҪDB  'Mf n,e\C8,{ʏti%Um[jDƩRൕJ),/#_*j-4z{hrI&~&,}v 9KisjW/kR*PGTfbԠ4^ў 3|,3WswxFZi{r=g{lr5[Zˠڧ5յX ~K/ۃe*dLcbgr溚+h\^j2.kM7^wJ}FE\wWa[@pu0\HTgrD;#(f^7|GS#iE* MeXԕO}Ain*"2Z;wgFY:k4NO-K7yIk?i'?9Ke'WKQ`0)B-l@f/Ԃ*5Y*>X6n=zi֜|z. ;ù:q髾D[*Șok盅C/{<,C#=]m0D5^81">IÔ歹âTuI :EFc5:6ul>+Q*T1pwZ]VVX~Nl\N&=Wr@%rX+cśY(#&t`دg^zr}O7Wr;?0fRhG_'MqO|Z,iO;_mk/5Blޞ) ]UUUW2wVLRK@Öm_ u^˿{ ABTdy 3_D o骗v|l:[ ҍ•ZGޒ6QxN 'ZV.PGoFP^V-Գ˂rvY%A&?S_qm皜+_ʲ!.R,q86usj628~.ڭe. ZwCm?t4ͼ͝b 0]]3tb\MDEZ0#6'k{sB y+P8]kB\Q59/e/UMq 45Ԝ|zH.S&)HfJv' Aл/YjL*+RcgU&JE_ @w;&exj\fɳ,Ҩ(#@ 3kȄJ!`[<qyv蠮$EduB@1j$LYvbr`0H+ b)PJ6D;9CPZXuL0ahc`˽\s Էy䷑դw81EG=+GBiECBynm)g3VZ TT(i/c$,!F1ʮf*@H@-;zX٩v`-H)S~R9Hnx4_ ұ@.(t60OOY"M xư?(-3V]wy%ՑUюP-^6&mܩr P n9@d5lo@P1;vۭ=cM iWr9O vm:QPߑd$$XČdA$TEBE F@FAI$A@BEVAD ) I0thZ~'Yol;-Z~ e# ع<SƂB8.'%sU< t_=2SgZzs; "5R=ݹ~r;Iuq.#@`icO2>xhw6s;Pion{C>g?ykwyM] rtJ^ÃI^AhΕ-bIT}b O;͑71e k-G(eT3tNqBkxoJu،HН}ӕTGLȦ >Mȼ EyUJeija5$geM+]ҩxt$YԌ)PJӤE,3]8 v T4%2iqx 97!a<ƭțᨘ8،rc~6w_'aH ejYçrgp87i)e59juv2Y^{iYjXTlDX;H$99ɰr6Osm[\khi#oivozS5$3l AD]城l) ''+)%8HJY&Uhstщ:g#.I1g/smmS~rUzMGcs8-f|F:Ɛvh9>mf{ɇnc6֯vH$dʿ: cAFE\e#S,YW/ʍn&mtcŷMj5n zVN vWnKH Uh7*ex;Ӌ-ul|%68UŞۖ"6+xm8d[b*l̴[ny57ْ"Y&o$\ڵaold0"MNUR@vl#T|XkNOo3T,ˆ,e;GTC|;I–D:^mE6?S2<:sND@F\Y MHw|IT|WPD#Xj!0c=/4P odӒ65 45a445H覸ю*KRQSd:6x 渴zU4fB.#Mԛ}"섕J!֮@G8p._+Dž\>$@T]ݚ"J lEsiBkm-ƫT?J'IV/ $ԓM\QWƈ'.Pt8KK0v~ah8|RQ !&59kG|ty13 EC7bRĆ'j{nzv^дɺ}t, -BXK0O;ycҗi#a PŁLwit޼WIJQ[L[ϊƣ^$[K3"E=KŀAzByjٯ"ܿKvAM/2!SF=Nm#DZo!Ge.D({v_ַ SF9 2]ThbbGFg10\ G8*m(qAi@FN.d 4. ;)q:[GfSo;)Bi( 3Nt U~tqS;5 ]箫.GDwlkcDЊj&:)z^!7CCx < =?G}Qﰬ}-8ׇ+Kf{C"Xix}-Xrѥ~<뚹#n̿ueO@ptw}sl!o1(뤽XJ¥$WP(STmT]:s9sE9z&HLSrtCН${(!`}<,*E<(9OMk[kcnJtUr{Z Ƣ|-VҶcJziDր"mk^@7k@R.Q1/\s(e#<η͆,oq35@ ;wvB1{du0bZn MFk@wԤt YSud/kxi}hne:Ɵj&rEŌHz fFhKt>="n ~6}b.z=[=͠cp$ڪ5]aI;B -U?wc%w&-_K-Lpcǰ߽\Zyw<("uTuucgbBZ5\fKϓ$oga.9?G-yE+qc`4WNk^c]:{Y-wG_;菍ǗZPs`>w=Ό"<g[P'aO)cXCb֤GO Hc̷٫x!yؘLW(Ђ_ax6Lآ#7\\XYq3ў@6 DEN0*c`vEchOgHB`׌T)6Ý?D,M,{Jp30m@y40J+> 1pW:x=7-L-Nׂ-W9-5B7PBvz mcO}92ߘc@"d:pn B~vS~;cS7QQƕs8p/L2+T2A Mg [6L1eRK ru?caF%3"fv ̽z?mC=5c\ΦUJ`@ X0 5ybq#~#cf[R:ٹfl*ާ(و)m(>-c2qv}6lA L}A{i笀@{?\Q̡\t1r֦:D c8e͟2[AF/y  G dl1kK3|ju0]CҥW?fP.8 *mjRw=X& t(U-Mnuo3#0ygJ^; 2Rg+9nX.Z2؆>/_h@وc Aw'pd=OgJK|S@qX^͍=s+x=ێ 1&0Rb#%}U5F!hH} O{F($aV_O!%!WMY2NZ(g4ϴY|̜UL򟄤9SCaQG  D#Ԟޟ7%{no{ B({v#3q:EAϱd$NMB;N3qO<܌48UV!/&ȘF5πa>ʢ8U\г3k%GE-ӔdrIyz Z ϠKLJ:>#_@sw=a=Pih*y3ڰ3H.UŪ ; tm< /\~(;n{YYy[h612JBKwpEw?rMf΂?Mb_T>O@Ew=[Xy+mVC3'Ok!W(4/8-B%ݴ} BhO!w]W0}"6drU׷]N{?6`29Ɓ4Cy<9xٮdd1>m e.iUFuD DVhߋ?buGpA+lѣOL3QC~G?``p'{g o53Y"}'}3Ɲ!i1Qz~0=Dž`yIi9D\z]5׷5.8Y+fZї݉VE^Գ),q1I:rw= mPtYf!6N0ס*=Eo`ANxG|TdұQ:_S[F'%W)vg;vF^{N.Ѐ/sp\F 3k$ uZ= ҷ&|#YGs!XH׸?3;WO%+n=8:t]yVD4P46AO:XKx7d{ttgÃ-Jܒ(;(qDZ(vH uIq`n&r&SlבwsRŎ^? EC +e}ǽ2ɓOhU?a;NcndPye Cƺ@pZUu]s`Bw;5/Ma'>͙ b2$⤋(bV(74+g/ک 6i]Y|=.C>mȕn㍓V D{u.rƱ(ĝ9-{zĘ8C[duLhdjI?װ?ֻ^KtO 00`\V ~PQ |Ϋ4ڰԨr4tSH84BvCGQ5D~JDB0=*\-n;GZ)HqZ7NI\9]* f]N3!Fr.#Ǹ-DQAtÿDf/{I(P1m p6b=SW.ZPs># I:#$WUY?B}YCRIn,h ́!W'n>՛\t/R"ȔYPY1ՠuUo`΅ OC@XKzM#Eyzq4{efdbȚÊr=>ԉe)\4Ph|ck}k=x$/WF4嗶tAzs?sGNKZȻl56yph;R5w~=J7܍vwCV IFC+hpN;3+Sk W߫I%0%I"V`!YfI*Qt$*^?7y/oNv'ѱrWnS Ԧk#6\B kPԌ;N\h8|9!uQCGDFR6a̿G*+<*9..LE k",ϲ-OpcrvJ4 J>VF(&O!ToQdЋU9o%q SgXшT$@]$@lD+0aal kԒPGݣR^g~QbOŨtUkW8c&Rw,bx@<[vBEV6&ɢ!ct㐘L9%qV"kKWK$9HL|Cfu<0]si@,/1:ɻ?a~JҳľU&Ɛ^F__yI7j7p=vfȷ-LL䃡f&x#: N 53-,3Yf HONI'Vi~6xB ^0/V-B|_;2؜+dh-xPyFO\/Ex#i@jIuƠZ^C+~cl46ALQ0o+t 9,3mP]P|Y6@W8OgSe+meSE+W!%iBV#=4[eX00*vWޮME7čYY!vj׊iF=gO()VlUo5PTTF{ Í4=@?浠 5@4ʞ6k^.dp^]7RlLET;ň`m%fI{ RƏf:l.7F~űǬsTa2cҼPh|+ț[=kw8ӣѰC{V[< 7FE/iW?S0*jɏD9ڱX& Y" B)iUҔilӋﳻ5!`Ȳ&XIiAg$SZ<7DS+ dժ㣊(=#謬*pO~tYѣ Χu`fi|}]r3ֆ“x(Sʹ@7]α*K}TP`_P(T)ZBנCD wΎGR^$H_Lgd 8ǗmDFGé@]kR=!x*rc(s?#sFk}>E.CҥP)?U튛dq0 z!%/!X} [^و!R7-*-X''7AK}3?0 ږApv}A:tPd5[3*Ӈ=5# nۅ:4J Gj#7?s"^*r\g &,7":<  _~U*-s{<6|6e b|UWҳGmMO-i$oTn (Rg e3aԶв>cc]› Y<` GZ'`haP_~ BCR)%`B(pE"!CɫG*L>J"0? _ 8k<-E H Nqt7"kSO - N,n{ic᫑zkR+HM{'FYjv5+Baq [Ns&QS‡6xjA )OO#.ISRYS75= {6eʰUd*S<+/ `LpW|0Bu`;^7Xfepa;S6${7ݺ WIE&t!K /a4%?7lƔO!xDXW +f"ur]L,id sF}z+ijMtP]gl,hfNE h>=du,'+ R }.D?z?*ޏO".$w±,c܌K{\!?<B{%mlDDO )ws&[@ I"x&!pެLQ\;![cSbOUHg#;^}k- CULUͧy'cSڣS|#2t)b7ϐcr$9n#M" +_3a*G,;aWMuR7J]{M;eׁ"!cJ>$o. $W:xUiú9`0ӺTGtGQIyb9Lߩ}qȌ9&Wwtlyc˅,1$N٬6{h=&vFlǁ3?|pXZ:,e౩+.UCUao+M'3(;*-NAXm$;RyqNKL lbٺ9UȵBFNw0X5(dK 걞0l4?}2},٢A`\X(IHN1, B:c"uN;Ӟ"Mg:Δ/e`LMoiZtX >u8D1h0e>2qdHƑV? :%L~*njaUGWWc[E|q5VzO{H>I&?`/볇[."x hwGYGWcͅM+<@OLG%sAаF4cv53a.^1axh̺GNZL/ҲlyT0}y.̶;hlXL:=hx[|hC Hԑ[ oؾÉHpQ_R*D_IodЊoNBz#ɕ` >uʚRBQ%a#zLnd.%J>5*SDy+߇9,ԱTk$q/+{SA(eH?'Αj'aG 46@zp&6`1 yr"SOѠ? qtG@cOn×p15;Bn\tt߂Ț (g-3v 9"&4h򂝁^Q֛TܳTÙb4Kg;fYH4p:.Սz}6 /NPJ!&Cm? ڿQTIee;aߏ}9cǕZ GͿ֚ZXaoI'>N rJ¾^K5t`Y0vWQ3 _ɐ4Z[F56g v~ ki?;. jt$B&RfRAq mKhݢ؅Zэٌ$Pֺb-3\~~ClJ V9i߆~h&ƈJ/%=09L}SlM^Q<9qZ r&//ꇇTGNj ˽m̖o5ž*K.lCkK|yFI>DyݿuC=_a-`ZߣA

rxhnJ%l%Mg~(J_IwH=֐>pG#lS|E ~(hlJ^I!8и#dKQ#L|UF)Vpw@CÕfFUWDmoH$}@|ەKtRLh(8MǝfC5y94eG^ϔ6Wjb91MH81 /PIPWI;,rTz%Y}a3pH&aPY(Fɤ[N dWX-X4d/?Xm纷 o ah B_LֺPe6 殀~#+d%%zGTtA4'd3I 2k)etsEpV¢iX yђ{>fe;,9^:{?.*kGƛu~%m݆0;"O\|im (ajPE>j#ذC+NC~QCm%>il)C1_fAw[̤We|pth-q2t$X$96.z31QK4BhDetl B3(=T4(,{lS%j O))󹷊(Uf)%f::Ph/WbZ)4MTq:}dN;걀QkmA A(οԖHxk@kTN6o|Tn *,+"2QNS4Oլ"g17BB˚.vNr)ݹ:*c+X0%1I_BPK Ǣ5taSzCGOKF4Ԟ ,.QD&i.Ʈ\%+L舛Dm|BzE{s91؄x?}>3yg9SOMcEd}ڀ̺]G +LuUioUh.kԄż R=;wpvxBebWmU.Шc9䞝(^YdWcҶjs`GvV x{oǮM06P~~SSLڭ}Gu-d*ylx/kIs՚NQÜKo uaIw ïx̌ѸRjksdE+^@k셑Dcfx$~(VϒdG#V6Z eTWnBF=F>TԟNTj Wntc\x4b|DyFp/ gnޘc }Cfr|_ܦ=իp  ʅU²1655u}MzcWk.9 ~/X»_ftJuy 5* B y@^^5#tꐔ{W  SZ[Fl&)Z .]]M9=HX=Sd;I_2(Vwj~T9GCEp;LӒ4n`ǫq7(E;H\lx;a[A. ۛğV^ZLabTnؠ)}lCZ}9Rҹ9J.-V)%TF9li4h)-+ZHc[;d+߻7<7YhTEF^Q] jsj.~Qmh$#SWMK3TR8m𳺎Rx/j060_s*0~6 JnU'w $OCUH):wMzEScW⛲Ă۽wBٕz[~ #. 92S>#hoXZN, <{ V7<^ ,N"}%a Mkɡ$huCُh%Z^ɒ&k\L\)q.u> ^_5?d>*YkӍFruˢ>?T'h.`qUlu"P>Qd-Q}e¼7R9W\2br8!n'䦪ynK#ZǻbLM6n HW F0˰Nx,|eu˧xX߸g ){#=$~p΄{]F0V싧&R{{i|o"@3]xkXٻ=3#k-Y@1̷ W)To}}R2B򼿀-H* "i%x ܭQ?+<9l1 HF@}Jdt1_9/c!1Xqɝ l@ ՆEK8j/᭷tθXU=;E-#^3A?$π{-\.峘n6w*g?VKY6+EV/0p# KS}t!"tL>˽||ꋨ@(Od;k8$R5=*dQ!k@ct#}`uN)NBl8l͌1*OtH0 3[ n{5]i3!lǏq~ t Q19ۙwA= -jrk`m㫯O'}|( !Q* H Ϥ g`L_*#q Z!U*Ź.v!z;ʞik>@u[h1z< b5x=#\*/ST pAXmxtTPģx5&ΒJ. S,ؕZebmSC9mn@&b 򺴙O%gW?b`N9רt50)h~/\LWWccl5yfDv1"v ,n$ZoUx-zb&qg6ULf=l"rw~V@>.cbʓ4[h{V΍.+~I!$XHJļs+Kr7cN(QKz^$$ϑXau; ԑyyHHw0g]Jk> Oe}7̴h`Kx5nVZ | >$C3,+U-zu,n[=.s3/3 ^a}d+(xRAD|p%l^G{ڊu'{^䍲dAu a(8 G$\\B.f^sTE`3GXqDX}!UӌФ.(OV&we6.q&yx݋ `ۙhuun66OEb†w! z=GOM 2W2l]Cw<̩q?CPhnG@͆s"{J~kpΎYG&qca|،~7 CC)6ʼnvvg-,/7FF;A&Qn^lY6@>u@y#{mBLYS{,{C~=^QBUm?^j!-ц^q`}m:W,l]ilq=Fu##`,DQR/vu BXb1cH7s>"lU G9َB(_xa3%^Sj Tra??#n։s^xu.Z2kPQ2#fQ0aB\|D w#Y}o %Z!X@6߾[^xMJ4E}:0׫FAHDAKutm^mGZm/D)O9D&OoqT99m1e]CdGj0>(A?DjU[A!\ic5F\e^w0thʻ}/{sJt&sK1xYݥ=g4_RUHbe7 x^S ϣ])f_mpA+Y1By`Ysx:nFX/`p,s!ʊN? $Lʉ^B%IE L0dSd<ߚ,"5zIk tPs!Ghv Ҏc .^7/Ls':(`kC .aK* S|J|^ٴu]z&!#${KwGyM$M.L|i5|ǃMRwY [oT&r0YA~h 41\+wԝRIЃ%-ģQ'0'&Hs-)7[yq J_A@EkzYѼWo>R,y]]Z[s1X<(X%tv$Eso9U𚭄 W \ O1.}ZFlEȊ0랒gb>OI+<]\6B)4n:3+9eۄ0{DgHP]<)kSj4d,_D/|g?I%0}nY ۩(H(FL y+'>%?' Vq,Jx\&uN 56hD ;\d㢰$m f9Ԥkߵ\]WV-jז6#bgDLWچ $Clo{ % EJ * BגTw<=iF1#!c^6[: jbBumTafk6HL\kd 8eߧ9D@TvFiMUwi|4G?k,?Q| Kgč<+jq9J$X_x2H&vMOO%~{U8ȳwEAZ#-)B-svRzeW[Fy9B3ܰ5iL3 w%k5 ۉlӔMtI;iRp\IgZ$~~k1(k1RPKCuDYðͤ$R[bSs'j)=ENLGHS{ڦ(g)ԙX!T`C|p/0Wh5' +'_TGѴ":F DPbVeJ2V g4Ƴ T`V6ձ? q[(Ķb $ܾb,?߼\>YIRBҟOdWy_fP T= ࠫB6thFx%폙kG8)ryMsت 3%} lRR64e#- PrY4N]U8&fN' %/h/œzK` ߅0[WUN!7C'+@~dڽWjBׯ><sFwEJe",)&0IxNvZDcpAuCf%"E@iCV aHa xc1no5͗IV&Ys}7yj~{Y u+1,vL*RntKz0ñԩ] e`.[OʿR1&a鿂r}ݺQ+";AÁU A\A0cU} '\۰nR%9ݭjf(y㛱4 49DDt:mػCHhї#碕u`Il4J\ M* cv*FJMhbF8d߻^pIx8ɜ>evU[M="r{RQG w}>,7Cܬ:){aW@!g_MuiMHa=@o8APގ^gDS5!}?%Q0z{UCl6$ۈӮY/#{T"f1;?χ|bm 9Apф%tеA0mtv@fp4#ٗFT!De|ߕ|cI-=f_Œr K0n&8Б1 ovbb.g)B&,7ej,b̉S5w;^,`4hwxi*J(>.nJ9?uf#!;!|ֹ;ΖzNǥk\&eٷqC<,Dw)PAr,1|n.STg߆?v9}DNIc~e}ͪCr6[CXRM ̗pۇSY\Eϧ?_$*[iLN$& u15 #BgBUUNUBoϾreY{H[ƢBn",0MYlLݫ zSZ-@*iሙu;ſUC&1jŠ`/F"ɮ!v [@:ah]y~ejZ ~M`0 Qgϥz~]pb)_[Sg%XX>3mqF>|2XΖY Q*@e>H׶ YZ