samba-client-libs-4.17.12+git.485.dd39ea0501e-150500.3.26.5<>, pg)p9|76:f}WNa e{,=bkd.ǖ^nsoL2Ib4.b2*@?%4H}vޭ$yȀ|.B雯jRz_. ?n(I9E4uh-t؁{>;VM**v p${Yscfz|7lH)*FRX檓ᷛ[c dǺxJvWو07-uf_dez ^qʞBx$>Ct?dd0 > U =TZdu8u "u  u u u !u#u%u((Pu*$_c(8 9t : >@BF3GLuH uIuXlY hZ#[#\&`u](4u^2^b2c3;d3e3f3l3u3uv5cws|uxuPuyw$ z`Csamba-client-libs4.17.12+git.485.dd39ea0501e150500.3.26.5Samba client librariesThe samba-libs package contains the libraries needed by samba client programs.g)ibs-power9-150SUSE Linux Enterprise 15SUSE LLC GPL-3.0-or-laterhttps://www.suse.com/Development/Libraries/C and C++https://www.samba.org/linuxppc64le Hp y X 0(  8(   xx  /h8 8!x` @$ `Ag)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)g)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-binding.so.0.0.1libdcerpc-server-core.so.0.0.1libdcerpc.so.0.0.1libndr-krb5pac.so.0.0.1libndr-nbt.so.0.0.1libndr-standard.so.0.0.1libndr.so.3.0.0libnetapi.so.1.0.0libsamba-credentials.so.1.0.0libsamba-errors.so.1.0.0libsamba-hostconfig.so.0.0.1libsamba-passdb.so.0.28.0libsamba-util.so.0.0.1libsamdb.so.0.0.1libsmbclient.so.0.7.0libsmbconf.so.0.0.1libsmbldap.so.2.1.0libtevent-util.so.0.0.1libwbclient.so.0.15rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootsamba-4.17.12+git.485.dd39ea0501e-150500.3.26.5.src.rpmlibCHARSET3-samba4.so()(64bit)libCHARSET3-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libMESSAGING-SEND-samba4.so()(64bit)libMESSAGING-SEND-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libMESSAGING-samba4.so()(64bit)libMESSAGING-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libaddns-samba4.so()(64bit)libaddns-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libads-samba4.so()(64bit)libads-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libasn1util-samba4.so()(64bit)libasn1util-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libauth-samba4.so()(64bit)libauth-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libauthkrb5-samba4.so()(64bit)libauthkrb5-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libcli-cldap-samba4.so()(64bit)libcli-cldap-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libcli-ldap-common-samba4.so()(64bit)libcli-ldap-common-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libcli-ldap-samba4.so()(64bit)libcli-ldap-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libcli-nbt-samba4.so()(64bit)libcli-nbt-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libcli-smb-common-samba4.so()(64bit)libcli-smb-common-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libcli-spoolss-samba4.so()(64bit)libcli-spoolss-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libcliauth-samba4.so()(64bit)libcliauth-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libclidns-samba4.so()(64bit)libclidns-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libcluster-samba4.so()(64bit)libcluster-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libcmdline-contexts-samba4.so()(64bit)libcmdline-contexts-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libcmdline-samba4.so()(64bit)libcmdline-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libcommon-auth-samba4.so()(64bit)libcommon-auth-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libdbwrap-samba4.so()(64bit)libdbwrap-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libdcerpc-binding.so.0()(64bit)libdcerpc-binding.so.0(DCERPC_BINDING_0.0.1)(64bit)libdcerpc-binding0libdcerpc-pkt-auth-samba4.so()(64bit)libdcerpc-pkt-auth-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libdcerpc-samba-samba4.so()(64bit)libdcerpc-samba-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libdcerpc-samba4.so()(64bit)libdcerpc-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libdcerpc-server-core.so.0()(64bit)libdcerpc-server-core.so.0(DCERPC_SERVER_CORE_0.0.1)(64bit)libdcerpc.so.0()(64bit)libdcerpc.so.0(DCERPC_0.0.1)(64bit)libdcerpc0libevents-samba4.so()(64bit)libevents-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libflag-mapping-samba4.so()(64bit)libflag-mapping-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libgenrand-samba4.so()(64bit)libgenrand-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libgensec-samba4.so()(64bit)libgensec-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libgpo-samba4.so()(64bit)libgpo-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libgse-samba4.so()(64bit)libgse-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libhttp-samba4.so()(64bit)libhttp-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libinterfaces-samba4.so()(64bit)libinterfaces-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libiov-buf-samba4.so()(64bit)libiov-buf-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libkrb5samba-samba4.so()(64bit)libkrb5samba-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libldbsamba-samba4.so()(64bit)libldbsamba-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)liblibcli-lsa3-samba4.so()(64bit)liblibcli-lsa3-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)liblibcli-netlogon3-samba4.so()(64bit)liblibcli-netlogon3-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)liblibsmb-samba4.so()(64bit)liblibsmb-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libmessages-dgm-samba4.so()(64bit)libmessages-dgm-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libmessages-util-samba4.so()(64bit)libmessages-util-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libmscat-samba4.so()(64bit)libmscat-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libmsghdr-samba4.so()(64bit)libmsghdr-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libmsrpc3-samba4.so()(64bit)libmsrpc3-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libndr-krb5pac.so.0()(64bit)libndr-krb5pac.so.0(NDR_KRB5PAC_0.0.1)(64bit)libndr-krb5pac0libndr-nbt.so.0()(64bit)libndr-nbt.so.0(NDR_NBT_0.0.1)(64bit)libndr-nbt0libndr-samba-samba4.so()(64bit)libndr-samba-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libndr-samba4.so()(64bit)libndr-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libndr-standard.so.0()(64bit)libndr-standard.so.0(NDR_STANDARD_0.0.1)(64bit)libndr-standard0libndr.so.3()(64bit)libndr.so.3(NDR_0.0.1)(64bit)libndr.so.3(NDR_0.0.2)(64bit)libndr.so.3(NDR_0.0.3)(64bit)libndr.so.3(NDR_0.0.4)(64bit)libndr.so.3(NDR_0.0.5)(64bit)libndr.so.3(NDR_0.0.6)(64bit)libndr.so.3(NDR_0.0.7)(64bit)libndr.so.3(NDR_0.0.8)(64bit)libndr.so.3(NDR_0.0.9)(64bit)libndr.so.3(NDR_0.1.0)(64bit)libndr.so.3(NDR_0.1.1)(64bit)libndr.so.3(NDR_0.1.2)(64bit)libndr.so.3(NDR_0.2.0)(64bit)libndr.so.3(NDR_0.2.1)(64bit)libndr.so.3(NDR_1.0.0)(64bit)libndr.so.3(NDR_1.0.1)(64bit)libndr.so.3(NDR_1.0.2)(64bit)libndr.so.3(NDR_2.0.0)(64bit)libndr.so.3(NDR_3.0.0)(64bit)libndr2libnet-keytab-samba4.so()(64bit)libnet-keytab-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libnetapi.so.1()(64bit)libnetapi.so.1(NETAPI_1.0.0)(64bit)libnetapi0libnetif-samba4.so()(64bit)libnetif-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libnpa-tstream-samba4.so()(64bit)libnpa-tstream-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libprinting-migrate-samba4.so()(64bit)libprinting-migrate-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libregistry-samba4.so()(64bit)libregistry-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libreplace-samba4.so()(64bit)libreplace-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsamba-cluster-support-samba4.so()(64bit)libsamba-cluster-support-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsamba-credentials.so.1()(64bit)libsamba-credentials.so.1(SAMBA_CREDENTIALS_1.0.0)(64bit)libsamba-credentials1libsamba-debug-samba4.so()(64bit)libsamba-debug-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsamba-errors.so.1()(64bit)libsamba-errors.so.1(SAMBA_ERRORS_1.0.0)(64bit)libsamba-errors0libsamba-hostconfig.so.0()(64bit)libsamba-hostconfig.so.0(SAMBA_HOSTCONFIG_0.0.1)(64bit)libsamba-hostconfig0libsamba-modules-samba4.so()(64bit)libsamba-modules-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsamba-passdb.so.0()(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.2.0)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.24.1)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.24.2)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.25.0)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.26.0)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.27.0)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.27.1)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.27.2)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.28.0)(64bit)libsamba-passdb0libsamba-security-samba4.so()(64bit)libsamba-security-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsamba-sockets-samba4.so()(64bit)libsamba-sockets-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsamba-util.so.0()(64bit)libsamba-util.so.0(SAMBA_UTIL_0.0.1)(64bit)libsamba-util0libsamba3-util-samba4.so()(64bit)libsamba3-util-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsamdb-common-samba4.so()(64bit)libsamdb-common-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsamdb.so.0()(64bit)libsamdb.so.0(SAMDB_0.0.1)(64bit)libsamdb0libsecrets3-samba4.so()(64bit)libsecrets3-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libserver-id-db-samba4.so()(64bit)libserver-id-db-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libserver-role-samba4.so()(64bit)libserver-role-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsmb-transport-samba4.so()(64bit)libsmb-transport-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsmbclient-raw-samba4.so()(64bit)libsmbclient-raw-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsmbclient.so.0()(64bit)libsmbclient.so.0(SMBCLIENT_0.1.0)(64bit)libsmbclient.so.0(SMBCLIENT_0.2.0)(64bit)libsmbclient.so.0(SMBCLIENT_0.2.1)(64bit)libsmbclient.so.0(SMBCLIENT_0.2.2)(64bit)libsmbclient.so.0(SMBCLIENT_0.2.3)(64bit)libsmbclient.so.0(SMBCLIENT_0.3.0)(64bit)libsmbclient.so.0(SMBCLIENT_0.3.1)(64bit)libsmbclient.so.0(SMBCLIENT_0.3.2)(64bit)libsmbclient.so.0(SMBCLIENT_0.3.3)(64bit)libsmbclient.so.0(SMBCLIENT_0.4.0)(64bit)libsmbclient.so.0(SMBCLIENT_0.5.0)(64bit)libsmbclient.so.0(SMBCLIENT_0.6.0)(64bit)libsmbclient.so.0(SMBCLIENT_0.7.0)(64bit)libsmbclient0libsmbconf.so.0()(64bit)libsmbconf.so.0(SMBCONF_0.0.1)(64bit)libsmbconf0libsmbd-base-samba4.so()(64bit)libsmbd-base-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsmbd-shim-samba4.so()(64bit)libsmbd-shim-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsmbldap.so.2()(64bit)libsmbldap.so.2(SMBLDAP_0)(64bit)libsmbldap.so.2(SMBLDAP_1)(64bit)libsmbldap.so.2(SMBLDAP_2)(64bit)libsmbldap.so.2(SMBLDAP_2.1.0)(64bit)libsmbldap2libsmbldaphelper-samba4.so()(64bit)libsmbldaphelper-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsocket-blocking-samba4.so()(64bit)libsocket-blocking-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsys-rw-samba4.so()(64bit)libsys-rw-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libtalloc-report-printf-samba4.so()(64bit)libtalloc-report-printf-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libtdb-wrap-samba4.so()(64bit)libtdb-wrap-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libtevent-util.so.0()(64bit)libtevent-util.so.0(TEVENT_UTIL_0.0.1)(64bit)libtevent-util0libtime-basic-samba4.so()(64bit)libtime-basic-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libtrusts-util-samba4.so()(64bit)libtrusts-util-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libutil-reg-samba4.so()(64bit)libutil-reg-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libutil-setid-samba4.so()(64bit)libutil-setid-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libutil-tdb-samba4.so()(64bit)libutil-tdb-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libwbclient.so.0()(64bit)libwbclient.so.0(WBCLIENT_0.10)(64bit)libwbclient.so.0(WBCLIENT_0.11)(64bit)libwbclient.so.0(WBCLIENT_0.12)(64bit)libwbclient.so.0(WBCLIENT_0.13)(64bit)libwbclient.so.0(WBCLIENT_0.14)(64bit)libwbclient.so.0(WBCLIENT_0.15)(64bit)libwbclient.so.0(WBCLIENT_0.9)(64bit)libwbclient0samba-client-libssamba-client-libs(ppc-64)@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    /sbin/ldconfig/sbin/ldconfigld64.so.2()(64bit)ld64.so.2(GLIBC_2.22)(64bit)libCHARSET3-samba4.so()(64bit)libCHARSET3-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libMESSAGING-SEND-samba4.so()(64bit)libMESSAGING-SEND-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libMESSAGING-samba4.so()(64bit)libMESSAGING-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libacl.so.1()(64bit)libacl.so.1(ACL_1.0)(64bit)libaddns-samba4.so()(64bit)libaddns-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libads-samba4.so()(64bit)libads-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libasn1util-samba4.so()(64bit)libasn1util-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libauth-samba4.so()(64bit)libauth-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libauthkrb5-samba4.so()(64bit)libauthkrb5-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libavahi-client.so.3()(64bit)libavahi-common.so.3()(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libc.so.6(GLIBC_2.27)(64bit)libcli-cldap-samba4.so()(64bit)libcli-cldap-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libcli-ldap-common-samba4.so()(64bit)libcli-ldap-common-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libcli-ldap-samba4.so()(64bit)libcli-ldap-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libcli-nbt-samba4.so()(64bit)libcli-nbt-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libcli-smb-common-samba4.so()(64bit)libcli-smb-common-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libcli-spoolss-samba4.so()(64bit)libcli-spoolss-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libcliauth-samba4.so()(64bit)libcliauth-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libclidns-samba4.so()(64bit)libclidns-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libcluster-samba4.so()(64bit)libcluster-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libcom_err.so.2()(64bit)libcommon-auth-samba4.so()(64bit)libcommon-auth-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libdbwrap-samba4.so()(64bit)libdbwrap-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libdcerpc-binding.so.0()(64bit)libdcerpc-binding.so.0(DCERPC_BINDING_0.0.1)(64bit)libdcerpc-pkt-auth-samba4.so()(64bit)libdcerpc-pkt-auth-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libdcerpc-samba-samba4.so()(64bit)libdcerpc-samba-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libdcerpc.so.0()(64bit)libdcerpc.so.0(DCERPC_0.0.1)(64bit)libdl.so.2()(64bit)libdl.so.2(GLIBC_2.17)(64bit)libflag-mapping-samba4.so()(64bit)libflag-mapping-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libgenrand-samba4.so()(64bit)libgenrand-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libgensec-samba4.so()(64bit)libgensec-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libgnutls.so.30()(64bit)libgnutls.so.30(GNUTLS_3_4)(64bit)libgnutls.so.30(GNUTLS_3_6_10)(64bit)libgnutls.so.30(GNUTLS_3_6_13)(64bit)libgnutls.so.30(GNUTLS_3_6_3)(64bit)libgse-samba4.so()(64bit)libgse-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libgssapi_krb5.so.2()(64bit)libgssapi_krb5.so.2(gssapi_krb5_2_MIT)(64bit)libhttp-samba4.so()(64bit)libhttp-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libinterfaces-samba4.so()(64bit)libinterfaces-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libiov-buf-samba4.so()(64bit)libiov-buf-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libk5crypto.so.3()(64bit)libk5crypto.so.3(k5crypto_3_MIT)(64bit)libkrb5.so.3()(64bit)libkrb5.so.3(krb5_3_MIT)(64bit)libkrb5samba-samba4.so()(64bit)libkrb5samba-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)liblber-2.4.so.2()(64bit)libldap_r-2.4.so.2()(64bit)libldb.so.2()(64bit)libldb.so.2(LDB_0.9.10)(64bit)libldb.so.2(LDB_0.9.15)(64bit)libldb.so.2(LDB_0.9.16)(64bit)libldb.so.2(LDB_0.9.23)(64bit)libldb.so.2(LDB_1.1.1)(64bit)libldb.so.2(LDB_1.1.19)(64bit)libldb.so.2(LDB_1.1.30)(64bit)libldb.so.2(LDB_1.3.0)(64bit)libldb.so.2(LDB_2.6.1)(64bit)libldb.so.2(LDB_2.6.2)(64bit)libldbsamba-samba4.so()(64bit)libldbsamba-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)liblibcli-lsa3-samba4.so()(64bit)liblibcli-lsa3-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)liblibcli-netlogon3-samba4.so()(64bit)liblibcli-netlogon3-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)liblibsmb-samba4.so()(64bit)liblibsmb-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libmessages-dgm-samba4.so()(64bit)libmessages-dgm-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libmessages-util-samba4.so()(64bit)libmessages-util-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libmsghdr-samba4.so()(64bit)libmsghdr-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libmsrpc3-samba4.so()(64bit)libmsrpc3-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libndr-krb5pac.so.0()(64bit)libndr-krb5pac.so.0(NDR_KRB5PAC_0.0.1)(64bit)libndr-nbt.so.0()(64bit)libndr-nbt.so.0(NDR_NBT_0.0.1)(64bit)libndr-samba-samba4.so()(64bit)libndr-samba-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libndr-samba4.so()(64bit)libndr-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libndr-standard.so.0()(64bit)libndr-standard.so.0(NDR_STANDARD_0.0.1)(64bit)libndr.so.3()(64bit)libndr.so.3(NDR_0.0.1)(64bit)libndr.so.3(NDR_0.0.3)(64bit)libndr.so.3(NDR_0.0.4)(64bit)libndr.so.3(NDR_0.0.5)(64bit)libndr.so.3(NDR_0.0.6)(64bit)libndr.so.3(NDR_0.0.7)(64bit)libndr.so.3(NDR_0.0.8)(64bit)libndr.so.3(NDR_0.0.9)(64bit)libndr.so.3(NDR_0.1.1)(64bit)libndr.so.3(NDR_0.1.2)(64bit)libndr.so.3(NDR_0.2.0)(64bit)libndr.so.3(NDR_0.2.1)(64bit)libndr.so.3(NDR_1.0.0)(64bit)libndr.so.3(NDR_1.0.1)(64bit)libndr.so.3(NDR_1.0.2)(64bit)libndr.so.3(NDR_2.0.0)(64bit)libnetif-samba4.so()(64bit)libnetif-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libnpa-tstream-samba4.so()(64bit)libnpa-tstream-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libnscd.so.1()(64bit)libnscd.so.1(LIBNSCD_1.0)(64bit)libpam.so.0()(64bit)libpam.so.0(LIBPAM_1.0)(64bit)libpopt.so.0()(64bit)libpopt.so.0(LIBPOPT_0)(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.17)(64bit)libreplace-samba4.so()(64bit)libreplace-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libresolv.so.2()(64bit)libresolv.so.2(GLIBC_2.17)(64bit)libsamba-cluster-support-samba4.so()(64bit)libsamba-cluster-support-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsamba-credentials.so.1()(64bit)libsamba-credentials.so.1(SAMBA_CREDENTIALS_1.0.0)(64bit)libsamba-debug-samba4.so()(64bit)libsamba-debug-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsamba-errors.so.1()(64bit)libsamba-errors.so.1(SAMBA_ERRORS_1.0.0)(64bit)libsamba-hostconfig.so.0()(64bit)libsamba-hostconfig.so.0(SAMBA_HOSTCONFIG_0.0.1)(64bit)libsamba-modules-samba4.so()(64bit)libsamba-modules-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsamba-passdb.so.0()(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.2.0)(64bit)libsamba-passdb.so.0(SAMBA_PASSDB_0.27.1)(64bit)libsamba-security-samba4.so()(64bit)libsamba-security-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsamba-sockets-samba4.so()(64bit)libsamba-sockets-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsamba-util.so.0()(64bit)libsamba-util.so.0(SAMBA_UTIL_0.0.1)(64bit)libsamba3-util-samba4.so()(64bit)libsamba3-util-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsamdb-common-samba4.so()(64bit)libsamdb-common-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsamdb.so.0()(64bit)libsamdb.so.0(SAMDB_0.0.1)(64bit)libsecrets3-samba4.so()(64bit)libsecrets3-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libserver-id-db-samba4.so()(64bit)libserver-id-db-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libserver-role-samba4.so()(64bit)libserver-role-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsmb-transport-samba4.so()(64bit)libsmb-transport-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsmbclient-raw-samba4.so()(64bit)libsmbclient-raw-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsmbconf.so.0()(64bit)libsmbconf.so.0(SMBCONF_0.0.1)(64bit)libsmbd-shim-samba4.so()(64bit)libsmbd-shim-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsmbldap.so.2()(64bit)libsmbldap.so.2(SMBLDAP_0)(64bit)libsmbldap.so.2(SMBLDAP_1)(64bit)libsmbldaphelper-samba4.so()(64bit)libsmbldaphelper-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsocket-blocking-samba4.so()(64bit)libsocket-blocking-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsys-rw-samba4.so()(64bit)libsys-rw-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libsystemd.so.0()(64bit)libsystemd.so.0(LIBSYSTEMD_209)(64bit)libtalloc-report-printf-samba4.so()(64bit)libtalloc-report-printf-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libtalloc.so.2()(64bit)libtalloc.so.2(TALLOC_2.0.2)(64bit)libtalloc.so.2(TALLOC_2.1.0)(64bit)libtasn1.so.6()(64bit)libtasn1.so.6(LIBTASN1_0_3)(64bit)libtdb-wrap-samba4.so()(64bit)libtdb-wrap-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libtdb.so.1()(64bit)libtdb.so.1(TDB_1.2.1)(64bit)libtdb.so.1(TDB_1.2.2)(64bit)libtdb.so.1(TDB_1.2.5)(64bit)libtdb.so.1(TDB_1.3.0)(64bit)libtdb.so.1(TDB_1.3.11)(64bit)libtdb.so.1(TDB_1.3.17)(64bit)libtevent-util.so.0()(64bit)libtevent-util.so.0(TEVENT_UTIL_0.0.1)(64bit)libtevent.so.0()(64bit)libtevent.so.0(TEVENT_0.11.0)(64bit)libtevent.so.0(TEVENT_0.12.0)(64bit)libtevent.so.0(TEVENT_0.13.0)(64bit)libtevent.so.0(TEVENT_0.9.12)(64bit)libtevent.so.0(TEVENT_0.9.13)(64bit)libtevent.so.0(TEVENT_0.9.14)(64bit)libtevent.so.0(TEVENT_0.9.16)(64bit)libtevent.so.0(TEVENT_0.9.20)(64bit)libtevent.so.0(TEVENT_0.9.21)(64bit)libtevent.so.0(TEVENT_0.9.30)(64bit)libtevent.so.0(TEVENT_0.9.31)(64bit)libtevent.so.0(TEVENT_0.9.37)(64bit)libtevent.so.0(TEVENT_0.9.9)(64bit)libtime-basic-samba4.so()(64bit)libtime-basic-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libtrusts-util-samba4.so()(64bit)libtrusts-util-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libutil-reg-samba4.so()(64bit)libutil-reg-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libutil-setid-samba4.so()(64bit)libutil-setid-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libutil-tdb-samba4.so()(64bit)libutil-tdb-samba4.so(SAMBA_4.17.12_GIT.485.DD39EA0501E150500.3.26.5SUSE_OS15.0_PPC64LE_SAMBA4)(64bit)libwbclient.so.0()(64bit)libwbclient.so.0(WBCLIENT_0.13)(64bit)libwbclient.so.0(WBCLIENT_0.9)(64bit)libz.so.1()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.3gp@fٝ@fqvfCR@f @ee@ez@e[J@e6`@eSd@d.@dd-@d@dd@d6@d@d @cvcvc@c@c @c@cctc5cM@b@b@b@ba@banopower@suse.comddiss@suse.comnopower@suse.comnopower@suse.comdmulder@suse.comnopower@suse.comnopower@suse.comscabrero@suse.descabrero@suse.descabrero@suse.denopower@suse.comscabrero@suse.descabrero@suse.descabrero@suse.denopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comscabrero@suse.dedmulder@suse.comscabrero@suse.denopower@suse.comnopower@suse.comscabrero@suse.denopower@suse.comnopower@suse.comscabrero@suse.denopower@suse.comscabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comddiss@suse.comnopower@suse.comdmulder@suse.comdmulder@suse.comnopower@suse.comscabrero@suse.descabrero@suse.dedimstar@opensuse.orgscabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comnopower@suse.comnopower@suse.comscabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comnopower@suse.comscabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.denopower@suse.comscabrero@suse.deddiss@suse.comddiss@suse.comddiss@suse.comscabrero@suse.descabrero@suse.dedmulder@suse.comnopower@suse.comscabrero@suse.descabrero@suse.dedmulder@suse.comscabrero@suse.descabrero@suse.denopower@suse.comnopower@suse.comnopower@suse.comdmulder@suse.comscabrero@suse.denopower@suse.comddiss@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comscabrero@suse.denopower@suse.comnopower@suse.comjmcdonough@suse.comnopower@suse.comscabrero@suse.denopower@suse.comnopower@suse.comddiss@suse.comddiss@suse.comnopower@suse.comnopower@suse.comddiss@suse.comnopower@suse.comdmulder@suse.comdmulder@suse.comddiss@suse.comscabrero@suse.dedmulder@suse.comddiss@suse.comnopower@suse.comjengelh@inai.dedmulder@suse.comscabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comdmulder@suse.comdmulder@suse.comjmcdonough@suse.comdmulder@suse.comscabrero@suse.dedmulder@suse.comscabrero@suse.dedmulder@suse.comdmulder@suse.comvcizek@suse.comdmulder@suse.comdmulder@suse.comnopower@suse.comscabrero@suse.dejmcdonough@suse.comscabrero@suse.deaaptel@suse.comjengelh@inai.dedimstar@opensuse.orgdmulder@suse.comjmcdonough@suse.comdavid.mulder@suse.comjmcdonough@suse.comaaptel@suse.comdmulder@suse.comscabrero@suse.comscabrero@suse.comkukuk@suse.dedavid.mulder@suse.comscabrero@suse.comrbrown@suse.comdmulder@suse.comscabrero@suse.comdimstar@opensuse.orgscabrero@suse.comaaptel@suse.comnopower@suse.comnopower@suse.comaaptel@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comddiss@suse.comnopower@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comddiss@suse.comdmulder@suse.comnopower@suse.comjmcdonough@suse.comaaptel@suse.comkukuk@suse.comkukuk@suse.denopower@suse.comaaptel@suse.comdmulder@suse.comddiss@suse.comdmulder@suse.comddiss@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comnopower@suse.comnopower@suse.comjmcdonough@suse.comjmcdonough@suse.comnopower@suse.comnopower@suse.comddiss@suse.comjmcdonough@suse.comddiss@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comjmcdonough@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comjmcdonough@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comnopower@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comtchvatal@suse.comlmuelle@suse.comnopower@suse.comcrrodriguez@opensuse.orglmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.comnoel.power@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comnopower@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.comlmuelle@suse.comddiss@suse.comlmuelle@suse.commpluskal@suse.comlmuelle@suse.comnopower@suse.deddiss@suse.comddiss@suse.comddiss@suse.comlmuelle@suse.denopower@suse.delmuelle@suse.comnopower@suse.deddiss@suse.comlmuelle@suse.comlmuelle@suse.comlmuelle@suse.com- Adjust spec to split out rpcd_* binaries into a separate sub package; (bsc#1231414).- Incorrect FSCTL_QUERY_ALLOCATED_RANGES response when truncated; (bso#15699); (bsc#1229684).- Regression DFS not working with widelinks = true, updated to fix DFS link enumeration; (bso#15435); (bsc#1213607);- use-after-free in aio_del_req_from_fsp during smbd shutdown after failed IPC FSCTL_PIPE_TRANSCEIVE; (bsc#1223345); (bso#15423).- Reduce winbind error msg to debug for a PDC/NT4 domain (bsc#1221168).- fd_handle_destructor() panics within an smbd_smb2_close() if vfs_stat_fsp() fails in fd_close(); (bso#15527); (bsc#1219937).- Remove -x from bash shebang update-apparmor-samba-profile; (bsc#1218431).- Add new idmap_nss option 'use_upn' for those NSS modules able to handle UPNs or DOMAIN/user name format; (bsc#1215369); - Avoid unnecessary locking in idmap parent setup; (bsc#1215369);- Add "net offlinejoin composeodj" command; (bsc#1214076);- Update to samba 4.17.12 * Weird filename can cause assert to fail in openat_pathref_fsp_nosymlink(); (bso#15419); * reply_sesssetup_and_X() can dereference uninitialized tmp pointer; (bso#15420); * Missing return in reply_exit_done(); (bso#15430); * TREE_CONNECT without SETUP causes smbd to use uninitialized pointer; (bso#15432); * Improve GetNChanges to address some (but not all "Azure AD Connect") syncronisation tool looping during the initial user sync phase; (bso#15401); * Samba replication logs show (null) DN; (bso#15407); * Spotlight sometimes returns no results on latest macOS; (bso#15342); * Renaming results in NT_STATUS_SHARING_VIOLATION if previously attempted to remove the destination; (bso#15417); * Spotlight results return wrong date in result list; (bso#15427); * macOS mdfind returns only 50 results; (bso#15463); * 2-3min delays at reconnect with smb2_validate_sequence_number: bad message_id 2; (bso#15346); * samba-tool ntacl get segfault if aio_pthread appended; (bso#15441); * DCERPC_PKT_CO_CANCEL and DCERPC_PKT_ORPHANED can't be parsed; (bso#15446); * File doesn't show when user doesn't have permission if aio_pthread is loaded; (bso#15453); * net ads lookup (with unspecified realm) fails; (bso#15384); (bsc#1213826); * Regression DFS not working with widelinks = true; (bso#15435); (bsc#1213607); * ctdb_killtcp fails to work with --enable-pcap and libpcap 1.9.1; (bso#15451); * mdssvc: Do an early talloc_free() in _mdssvc_open(); (bso#15449); * Windows client join fails if a second container CN=System exists somewhere; (bso#9959); - Fix crossing automounter mount points; (bsc#1215212);- CVE-2023-4091: samba: Client can truncate file with read-only permissions; (bsc#1215904); (bso#15439). - CVE-2023-42669: samba: rpcecho, enabled and running in AD DC, allows blocking sleep on request; (bso#1215905); (bso#15474). - CVE-2023-42670: samba: The procedure number is out of range when starting Active Directory Users and Computers; (bsc#1215906); (bso#15473). - CVE-2023-3961: samba: Unsanitized client pipe name passed to local_np_connect(); (bsc#1215907); (bso#15422). - CVE-2023-4154: samba: dirsync allows SYSTEM access with only "GUID_DRS_GET_CHANGES" right, not "GUID_DRS_GET_ALL_CHANGES; (bsc#1215908); (bso#15424).- Fix DFS not working with widelinks enabled; (bsc#1213607); (bso#15435);- Move libcluster-samba4.so from samba-libs to samba-client-libs; (bsc#1213940);- net ads lookup with unspecified realm fails; (bso#15384); (bsc#1213826);- secure channel faulty since Windows 10/11 update 07/2023; (bso#15418); (bsc#1213384).- CVE-2022-2127: lm_resp_len not checked properly in winbindd_pam_auth_crap_send; (bso#15072); (bsc#1213174). - CVE-2023-34966: Samba Spotlight mdssvc RPC Request Infinite Loop Denial-of-Service Vulnerability; (bso#15340); (bsc#1213173). - CVE-2023-34967: Samba Spotlight mdssvc RPC Request Type Confusion Denial-of-Service Vulnerability; (bso#15341); (bsc#1213172). - CVE-2023-34968: Spotlight server-side Share Path Disclosure; (bso#15388); (bsc#1213171). - CVE-2023-3347: Samba doesn't require SMB2+ signing if `server signing = mandatory` is set; (bso#15397); (bsc#1213170).- Update to 4.17.9 * Backport --pidl-developer fixes; (bso#15404). * smbd_scavenger crashes when service smbd is stopped; (bso#15275). * vfs_fruit might cause a failing open for delete; (bso#15378). * named crashes on DLZ zone update; (bso#14030). * winbind recurses into itself via rpcd_lsad; (bso#15361). * cli_list loops 100% CPU against pre-lanman2 servers; (bso#15382). * smbclient leaks fds with showacls; (bso#15391). * aes256 smb3 encryption algorithms are not allowed in smb3_sid_parse(); (bso#15374). * winbindd gets stuck on NT_STATUS_RPC_SEC_PKG_ERROR; (bso#15413). * smbget memory leak if failed to download files recursively; (bso#15403).- Update to 4.17.8 * log flood: smbd_calculate_access_mask_fsp: Access denied: message level should be lower; (bso#15302). * Floating point exception (FPE) via cli_pull_send at source3/libsmb/clireadwrite.c; (bso#15306). * test_tstream_more_tcp_user_timeout_spin fails intermittently on Rackspace GitLab runners; (bso#15328). * Reduce flapping of ridalloc test; (bso#15329). * large_ldap test is unreliable; (bso#15351). * New filename parser doesn't check veto files smb.conf parameter; (bso#15143). * mdssvc may crash when initializing; (bso#15354). * Large directory optimization broken for non-lcomp path elements; (bso#15313). * streams_depot fails to create streams; (bso#15357). * shadow_copy2 and streams_depot don't play well together; (bso#15358). * wbinfo -u fails on ad dc with >1000 users; (bso#15366). * winbindd idmap child contacts the domain controller without a need; (bso#15317). * idmap_autorid may fail to map sids of trusted domains for the first time; (bso#15318). * idmap_hash doesn't use ID_TYPE_BOTH for reverse mappings; (bso#15319). * net ads search -P doesn't work against servers in other domains; (bso#15323). * DS ACEs might be inherited to unrelated object classes; (bso#15338). * Temporary smbXsrv_tcon_global.tdb can't be parsed; (bso#15353). * Setting veto files = /.*/ break listing directories; (bso#15360); (bsc#1212375). * CVE-2020-25720 [SECURITY] Create Child permission should not allow full write to all attributes (additional changes); (bso#14810). * dsgetdcname: assumes local system uses IPv4; (bso#15325).- Update to 4.17.7 * CVE-2023-0922: Samba AD DC admin tool samba-tool sends passwords in cleartext; (bso#15315); (bsc#1209481). * CVE-2023-0225: Samba AD DC "dnsHostname" attribute can be deleted by unprivileged authenticated users; (bso#15276); (bsc#1209483). * CVE-2023-0614: samba: Access controlled AD LDAP attributes can be discovered; (bso#15270); (bsc#1209485). * large_ldap test is inefficient; (bso#15332). * CVE-2020-25720 [SECURITY] Create Child permission should not allow full write to all attributes (additional changes); (bso#14810). - Update to 4.17.6 * streams_xattr is creating unexpected locks on folders; (bso#15314). * Use of the Azure AD Connect cloud sync tool is now supported for password hash synchronisation, allowing Samba AD Domains to synchronise passwords with this popular cloud environment; (bso#10635). * Spotlight doesn't work with latest macOS Ventura; (bso#15299). * New samba-dcerpc architecture does not scale gracefully; (bso#15310). * vfs_ceph incorrectly uses fsp_get_io_fd() instead of fsp_get_pathref_fd() in close and fstat; (bso#15307). * With clustering enabled samba-bgqd can core dump due to use after free; (bso#15293). * fd_load() function implicitly closes the fd where it should not; (bso#15311). - Update to 4.17.5 * smbc_getxattr() return value is incorrect; (bso#14808). * Compound SMB2 FLUSH+CLOSE requests from MacOSX are not handled correctly; (bso#15172). * synthetic_pathref AFP_AfpInfo failed errors; (bso#15210). * samba-tool gpo listall fails IPv6 only - finddcs() fails to find DC when there is only an AAAA record for the DC in DNS; (bso#15226). * smbd crashes if an FSCTL request is done on a stream handle; (bso#15236). * DFS links don't work anymore on Mac clients since 4.17; (bso#15277). * vfs_virusfilter segfault on access, directory edgecase (accessing NULL value); (bso#15283). * CVE-2022-38023 [SECURITY] Samba should refuse RC4 (aka md5) based SChannel on NETLOGON (additional changes); (bso#15240). * %U for include directive doesn't work for share listing (netshareenum); (bso#15243). * Shares missing from netshareenum response in samba 4.17.4; (bso#15266). * ctdb: use-after-free in run_proc; (bso#15269). * irpc_destructor may crash during shutdown; (bso#15280). * auth3_generate_session_info_pac leaks wbcAuthUserInfo; (bso#15286). * smbclient segfaults with use after free on an optimized build; (bso#15268). * smbstatus leaking files in msg.sock and msg.lock; (bso#15282). * Leak in wbcCtxPingDc2; (bso#15164). * Access based share enum does not work in Samba 4.16+; (bso#15265). * Crash during share enumeration; (bso#15267). * rep_listxattr on FreeBSD does not properly check for reads off end of returned buffer; (bso#15271). * Avoid relying on C89 features in a few places; (bso#15281).- Make (32bit) samba-libs conflict with old samba-ad-dc-libs package to satisfy installcheck.- Make samba-libs conflict with old samba-ad-dc-libs package to satisfy installcheck.- Remove non functioning ifup/ifdown samba-winbindd scripts; (bsc#1207414).- libdsdb-module-samba4 should be packaged as part of samba-libs and not samba-ad-dc-libs. Additionally no need for it to be removed conditionally.- Clean up logic for PAM migration settings in spec file.- Change with_dc default to 0 (for non TW builds), ADDC feature is deprecated and will no longer be included in >= SLE15-SP5; (jsc#PED-1122).- Update to 4.17.4 * CVE-2022-44640 Upstream Heimdal free of user-controlled pointer in FAST; (bsc#14929); * CVE-2021-20251 Bad password count not incremented atomically; (bsc#14611); * CVE-2022-42898 krb5_pac_parse() buffer parsing vulnerability; (bsc#15203); * CVE-2022-37966 rc4-hmac Kerberos session keys issued to modern servers; (bso#15237); * CVE-2022-37967 Kerberos constrained delegation ticket forgery possible against Samba AD DC; (bso#15231); * CVE-2022-38023 RC4/HMAC-MD5 NetLogon Secure Channel is weak and should be avoided; (bso#15240); * pam_winbind uses time_t and pointers assuming they are of the same size; (bso#15224); * Heimdal session key selection in AS-REQ examines wrong entry; (bso#15219); * filter-subunit is inefficient with large numbers of knownfails; (bso#15258); * smbd allows setting FILE_ATTRIBUTE_TEMPORARY on directories; (bso#15252); * The KDC logic arround msDs-supportedEncryptionTypes differs from Windows; (bso#13135); * libnet: change_password() doesn't work with dcerpc_samr_ChangePasswordUser4(); (bso#15206); * Heimdal session key selection in AS-REQ examines wrong entry; (bso#15219); * Memory leak in snprintf replacement functions; (bso#15230); * RODC doesn't reset badPwdCount reliable via an RWDC (CVE-2021-20251 regression); (bso#15253); * Prevent EBADF errors with vfs_glusterfs; (bso#15198); * %U for include directive doesn't work for share listing (netshareenum); (bso#15243); * Stack smashing in net offlinejoin requestodj; (bso#15257); * Windows 11 22H2 and Samba-AD 4.15 Kerberos login issue; (bso#15197); * Heimdal session key selection in AS-REQ examines wrong entry; (bso#15219); - Remove deprecated if-{down,up} scripts; (bsc#1206444); - Adjust the systemd drop-in file for named service; (bsc#1201689); * Paths are additive so do not repeat paths from named.service * Prefix the samba DLZ directory with "-" to ignore this path if it does not exists- Introduce without-smb1-server spec flag; (bsc#1205104); - Update to 4.17.3 * CVE-2022-42898: Samba buffer overflow vulnerabilities on 32-bit systems; (bsc#1205126); (bso#15203); - Replace obsolete python-gpgme with python-gpg * Upstream replaced it in v4.9.5 -- bso#13728 - Update to 4.17.2 * CVE-2022-3592 [SECURITY] samba: Wide links protection broken; (bso#15207); (bsc#1204499). * CVE-2022-3437 [SECURITY] samba: Buffer overflow in Heimdal unwrap_des3();(bso#15134); (bsc#1204254). - Update to 4.17.1 * CVE-2021-20251 [SECURITY] Bad password count not incremented atomically; (bso#14611). * smbXsrv_connection_shutdown_send result leaked; (bso#15174). * Flush on a named stream never completes; (bso#15182). * Permission denied calling SMBC_getatr when file not exists; (bso#15195). * Samba 4.5 sometimes cannot be upgraded to Samba 4.6 or later over DRS: WERROR_DS_DRA_MISSING_PARENT due to faulty GET_ANC; (bso#15189). * pytest: add file removal helpers for TestCaseInTempDir; (bso#15191). * CVE-2021-20251 [SECURITY] Bad password count not incremented atomically; (bso#14611). * Samba 4.5 sometimes cannot be upgraded to Samba 4.6 or later over DRS: WERROR_DS_DRA_MISSING_PARENT due to faulty GET_ANC; (bso#15189). * Flush on a named stream never completes; (bso#15182). * vfs_gpfs silently garbles timestamps > year 2106; (bso#15151). * CVE-2021-20251 [SECURITY] Bad password count not incremented atomically; (bso#14611). * multi-channel socket passing may hit a race if one of the involved processes already existed; (bso#15200). * memory leak on temporary of struct imessaging_post_state and struct tevent_immediate on struct imessaging_context (in rpcd_spoolss and maybe others); (bso#15201). * Since popt1.19 various use after free errors using result of poptGetArg are now exposed; (bso#15205); (boo#1204279). * Remove special case for O_CREAT in SMB_VFS_OPENAT from vfs_glusterfs; (bso#15192). * GETPWSID in memory cache grows indefinetly with each NTLM auth; (bso#15169). * CVE-2021-20251 [SECURITY] Bad password count not incremented atomically; (bso#14611). - Install a systemd drop-in file for named service to allow read/write access to the DLZ directory; (bsc#1201689); - Fix use after free errors resulting from using return of poptGetArg exposed since popt-1.19; (boo#1204279); (bso#15205). - s3: smbd: Fix memory leak in smbd_server_connection_terminate_done(); (bso#15174). - Disable SMB1 for tumbleweed builds. - Update to 4.17.0 * acl_xattr VFS module may unintentionally use filesystem permissions instead of ACL from xattr; (bso#15126). * Missing SMB2-GETINFO access checks from MS-SMB2 3.3.5.20.1; (bso#15153). * assert failed: !is_named_stream(smb_fname)") at ../../lib/util/fault.c:197; (bso#15161). * acl_xattr VFS module may unintentionally use filesystem permissions instead of ACL from xattr; (bso#15126). * assert failed: !is_named_stream(smb_fname)") at ../../lib/util/fault.c:197; (bso#15161). * Cross-node multi-channel reconnects result in SMB2 Negotiate returning NT_STATUS_NOT_SUPPORTED; (bso#15159). * winbind at info level debug can coredump when processing wb_lookupusergroups; (bso#15160). * Make use of glfs_*at() API calls in vfs_glusterfs; (bso#15157). * Possible use after free of connection_struct when iterating smbd_server_connection->connections; (bso#15128). * `net usershare add` fails with flag works with --long but fails with -l; (bso#15145). * acl_xattr VFS module may unintentionally use filesystem permissions instead of ACL from xattr; (bso#15126). * Performance regression on contended path based operations; (bso#15125). * Missing READ_LEASE break could cause data corruption; (bso#15148). * libsamba-errors uses a wrong version number; (bso#15141). * SMB1 negotiation can fail to handle connection errors; (bso#15152). * New filename parser doesn't check veto files smb.conf parameter; (bso#15143). * 4.17.rc1 still uses symlink-race prone unix_convert(); (bso#15144). * Backport fileserver related changed to 4.17.0rc2; (bso#15146). * Manpage for smbstatus json is missing; (bso#15147). * Backport fileserver related changed to 4.17.0rc2; (bso#15146). * Performance regression on contended path based operations; (bso#15125). * Backport fileserver related changed to 4.17.0rc2; (bso#15146). * Fix issues found by coverity in smbstatus json code; (bso#15140). * Backport fileserver related changed to 4.17.0rc2; (bso#15146). - Migration to /usr/etc: Saving user changed configuration files in /etc and restoring them while an RPM update. - Update to 4.16.4 * CVE-2022-2031: Samba AD users can bypass certain restrictions associated with changing passwords; (bsc#1201495); (bso#15047); * CVE-2022-32744: Samba AD users can forge password change requests for any user; (bsc#1201493); (bso#15074); * CVE-2022-32745: Samba AD users can crash the server process with an LDAP add or modify request; (bsc#1201492); (bso#15008); * CVE-2022-32746: Samba AD users can induce a use-after-free in the server process with an LDAP add or modify request; (bsc#1201490); (bso#15009); * CVE-2022-32742: Server memory information leak via SMB1; (bsc#1201496); (bso#15085); - Update to 4.16.3 * Using vfs_streams_xattr and deleting a file causes a panic; (bso#15099); * Add support for bind 9.18; (bso#14986); * logging dsdb audit to specific files does not work; (bso#15076); * Problem when winbind renews Kerberos; (bso#14979); (bsc#1196224); * Samba with new lorikeet-heimdal fails to build on gcc 12.1 in developer mode; (bso#15095); * Crash in streams_xattr because fsp->base_fsp->fsp_name is NULL; (bso#15105); * Crash in rpcd_classic - NULL pointer deference in mangle_is_mangled(); (bso#15118); * smbclient commands del & deltree fail with NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100); (bsc#1200556); * Fix check for chown when processing NFSv4 ACL; (bso#15120); * The pcap background queue process should not be stopped; (bso#15082); * testparm: Fix typo in idmap rangesize check; (bso#15097); * net ads info returns LDAP server and LDAP server name as null; (bso#15106); * ldconfig: /lib64/libsmbconf.so.0 is not a symbolic link; (bso#15108); * CTDB child process logging does not work as expected; (bso#15090); - Update spec file to fix the optional Heimdal DC build - Fix external trusts with MIT Kerberos 1.20 - Add missing samba-client requirement to samba-winbind package; (bsc#1198255); - Move pdb backends from package samba-libs to package samba-client-libs and remove samba-libs requirement from samba-winbind; (bsc#1200964); (bsc#1198255); - Add sysuser-shadow requirement for packages using systemd-sysusers - Use the canonical realm name to refresh the Kerberos tickets; (bsc#1196224); (bso#14979); - Moved logrotate files from user specific directory /etc/logrotate.d to vendor specific directory /usr/etc/logrotate.d. - Update to 4.16.2 * Use pathref fd instead of io fd in vfs_default_durable_cookie; (bso#15042); * vfs_gpfs with vfs_shadowcopy2 fail to restore file if original file had been deleted; (bso#15069); * Reintroduce netgroups support; (bso#15087); * net ads info shows LDAP Server: 0.0.0.0 depending on contacted server; (bso#14674); * Update from 4.15 to 4.16 breaks discovery of [homes] on standalone server from Win and IOS; (bso#15062); * waf produces incorrect names for python extensions with Python 3.11; (bso#15071); * smbclient -E doesn't work as advertised; (bso#15075); * The samba background daemon doesn't refresh the printcap cache on startup; (bso#15081); * Out-by-4 error in smbd read reply max_send clamp; (bso#14443); - Fix samba4.blackbox.net_ads_dns_async test with bind9 >= 9.17.7 - Support building with MIT Kerberos 1.20 - Bronze bit and S4U support with MIT Kerberos 1.20 for Samba AD DC; (CVE-2020-17049); - Resource Based Constrained Delegation (RBCD) for Samba AD DC - Support building with gcc 12.1 - Use requires_eq macro to require the libldb2 version available at samba-dsdb-modules build time; (bsc#1199362); - Update to 4.16.1 * Share and server swapped in smbget password prompt; (bso#14831); * Durable handles won't reconnect if the leased file is written to; (bso#15022); * rmdir silently fails if directory contains unreadable files and hide unreadable is yes; (bso#15023); * SMB2_CLOSE_FLAGS_FULL_INFORMATION fails to return information on renamed file handle; (bso#15038); * Need to describe --builtin-libraries= better (compare with - -bundled-libraries); (bso#8731); * vfs_shadow_copy2 breaks "smbd async dosmode" sync fallback; (bso#14957); * shadow_copy2 fails listing snapshotted dirs with shadow:fixinodes; (bso#15035); * PAM Kerberos authentication incorrectly fails with a clock skew error; (bso#15046); * Username map - samba erroneously applies unix group memberships to user account entries; (bso#15041); * KVNO off by 100000; (bso#14951); * Uninitialized litemask in variable in vfs_gpfs module; (bso#15027); * vfs_gpfs recalls=no option prevents listing files; (bso#15055); * smbd doesn't handle UPNs for looking up names; (bso#15054); - Update update-apparmor-samba-profile script, replace non-printable delimiter with more human readable separator as sed can accept separators that can appear in the input data. - Fix update-apparmor-samba-profile script, sed doesn't like multibyte separators; (bsc#1198309). - Update to 4.16.0 * New samba-dcerpcd binary to provide DCERPC in the member server setup * Certificate Auto Enrollment * Ability to add ports to dns forwarder addresses in internal DNS backend * No longer using Linux mandatory locks for sharemodes * SMB1 protocol has been deprecated, particularly older dialects * SMB1 protocol SMBCopy command removed * SMB1 server-side wildcard expansion removed - Add python3-dnspython to samba-ad-dc recommens; (bsc#1187101); - Use systemd-sysusers to create system users; (bsc#1182847);- Install a systemd drop-in file for named service to allow read/write access to the DLZ directory; (bsc#1201689);- Update to 4.15.12 * CVE-2022-42898: samba: heimdal: Samba buffer overflow vulnerabilities on 32-bit systems; (bso#15203); (bsc#1205126). - Update to 4.15.11 * Allow rebuild of Centos 8 images after move to vault for Samba 4.15; (bso#15193). * CVE-2022-3437: samba: Buffer overflow in Heimdal unwrap_des3(); (bso#15134); (bsc#1204254)- Update to 4.15.10 * Possible use after free of connection_struct when iterating smbd_server_connection->connections; (bso#15128); (bsc#1200102). * smbXsrv_connection_shutdown_send result leaked; (bso#15174). * Spotlight RPC service returns wrong response when Spotlight is disabled on a share; (bso#15086). * acl_xattr VFS module may unintentionally use filesystem permissions instead of ACL from xattr; (bso#15126). * Missing SMB2-GETINFO access checks from MS-SMB2 3.3.5.20.1; (bso#15153). * assert failed: !is_named_stream(smb_fname)") at ../../lib/util/fault.c:197; (bso#15161). * Missing READ_LEASE break could cause data corruption; (bso#15148). * rpcclient can crash using setuserinfo(2); (bso#15124). * Samba fails to build with glibc 2.36 caused by including in libreplace; (bso#15132). * SMB1 negotiation can fail to handle connection errors; (bso#15152). * samba-tool domain join segfault when joining a samba ad domain; (bso#15078). - Update to 4.15.9 * CVE-2022-32742:SMB1 code does not correct verify SMB1write, SMB1write_and_close, SMB1write_and_unlock lengths; (bso#15085); (bsc#1201496). * CVE-2022-32746: samba: Use-after-free occurring in database audit logging; (bso#15009); (bso#15096); (bsc#1201490). * CVE-2022-2031: samba, ldb: AD users can bypass certain restrictions associated with changing passwords; (bso#15047); (bsc#1201495); * CVE-2022-32745: samba: ldb: AD users can crash the server process with an LDAP add or modify request; (bso#15008); (bso#15096); (bsc#1201492). * CVE-2022-2031: samba, ldb: AD users can bypass certain restrictions associated with changing passwords; (bso#15047); (bsc#1201495); * CVE-2022-32744: samba, ldb: AD users can forge password change requests for any user; (bso#15074); (bso#15047); (bsc#1201493).- CVE-2022-1615: Do not ignore errors in random number generation; (bso#15103); (bsc#1202976); - CVE-2022-32743: Implement validated dnsHostName write rights; (bso#14833); (bsc#1202803);- Fix Use after free when iterating smbd_server_connection->connections after tree disconnect failure; (bso#15128); (bsc#1200102).- CVE-2022-32746: samba: Use-after-free occurring in database audit logging; (bso#15009); (bso#15096); (bsc#1201490). - CVE-2022-32745: samba: ldb: AD users can crash the server process with an LDAP add or modify request; (bso#15008); (bso#15096); (bsc#1201492). - CVE-2022-2031: samba, ldb: AD users can bypass certain restrictions associated with changing passwords; (bso#15047); (bsc#1201495); - CVE-2022-32742:SMB1 code does not correct verify SMB1write, SMB1write_and_close, SMB1write_and_unlock lengths; (bso#15085); (bsc#1201496). - CVE-2022-32744: samba, ldb: AD users can forge password change requests for any user; (bso#15074); (bso#15047); (bsc#1201493).- Update to 4.15.8 * Use pathref fd instead of io fd in vfs_default_durable_cookie; (bso#15042); * Setting fruit:resource = stream in vfs_fruit causes a panic; (bso#15099); * Add support for bind 9.18; (bso#14986); * logging dsdb audit to specific files does not work; (bso#15076); * vfs_gpfs with vfs_shadowcopy2 fail to restore file if original file had been deleted; (bso#15069); * netgroups support removed; (bso#15087); (bsc#1199247); * net ads info shows LDAP Server: 0.0.0.0 depending on contacted server; (bso#14674); (bsc#1199734); * waf produces incorrect names for python extensions with Python 3.11; (bso#15071); * smbclient commands del & deltree fail with NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100); (bsc#1200556); * vfs_gpfs recalls=no option prevents listing files; (bso#15055); * waf produces incorrect names for python extensions with Python 3.11; (bso#15071); * Compile error in source3/utils/regedit_hexedit.c; (bso#15091); * ldconfig: /lib64/libsmbconf.so.0 is not a symbolic link; (bso#15108); * smbd doesn't handle UPNs for looking up names; (bso#15054); * Out-by-4 error in smbd read reply max_send clamp; (bso#14443); - Move pdb backends from package samba-libs to package samba-client-libs and remove samba-libs requirement from samba-winbind; (bsc#1200964); (bsc#1198255); - Use the canonical realm name to refresh the Kerberos tickets; (bsc#1196224); (bso#14979);- Fix smbclient commands del & deltree failing with NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100); (bsc#1200556).- Revert NIS support removal; (bsc#1199247);- Use requires_eq macro to require the libldb2 version available at samba-dsdb-modules build time; (bsc#1199362);- Add missing samba-client requirement to samba-winbind package; (bsc#1198255);- Update to 4.15.7 * Share and server swapped in smbget password prompt; (bso#14831); * Durable handles won't reconnect if the leased file is written to; (bso#15022); * rmdir silently fails if directory contains unreadable files and hide unreadable is yes; (bso#15023); * SMB2_CLOSE_FLAGS_FULL_INFORMATION fails to return information on renamed file handle; (bso#15038); * vfs_shadow_copy2 breaks "smbd async dosmode" sync fallback; (bso#14957); * shadow_copy2 fails listing snapshotted dirs with shadow:fixinodes; (bso#15035); * PAM Kerberos authentication incorrectly fails with a clock skew error; (bso#15046); * username map - samba erroneously applies unix group memberships to user account entries; (bso#15041); * NT_STATUS_ACCESS_DENIED translates into EPERM instead of EACCES in SMBC_server_internal; (bso#14983); * Simple bind doesn't work against an RODC (with non-preloaded users); (bso#13879); * Crash of winbind on RODC; (bso#14641); * uncached logon on RODC always fails once; (bso#14865); * KVNO off by 100000; (bso#14951); * LDAP simple binds should honour "old password allowed period"; (bso#15001); * wbinfo -a doesn't work reliable with upn names; (bso#15003); * Simple bind doesn't work against an RODC (with non-preloaded users); (bso#13879); * Uninitialized litemask in variable in vfs_gpfs module; (bso#15027); * Regression: create krb5 conf = yes doesn't work with a single KDC; (bso#15016);- Add provides to samba-client-libs package to fix upgrades from previous versions; (bsc#1197995);- Add missing samba-libs requirement to samba-winbind package; (bsc#1198255);- Update to 4.15.6 * Renaming file on DFS root fails with NT_STATUS_OBJECT_PATH_NOT_FOUND; (bso#14169); * Samba does not response STATUS_INVALID_PARAMETER when opening 2 objects with same lease key; (bso#14737); * NT error code is not set when overwriting a file during rename in libsmbclient; (bso#14938); * Fix ldap simple bind with TLS auditing; (bso#14996); * net ads info shows LDAP Server: 0.0.0.0 depending on contacted server; (bso#14674); * Problem when winbind renews Kerberos; (bso#14979); (bsc#1196224); * pam_winbind will not allow gdm login if password about to expire; (bso#8691); * virusfilter_vfs_openat: Not scanned: Directory or special file; (bso#14971); * DFS fix for AIX broken; (bso#13631); * Solaris and AIX acl modules: wrong function arguments; (bso#14974); * Function aixacl_sys_acl_get_file not declared / coredump; (bso#7239); * Regression: Samba 4.15.2 on macOS segfaults intermittently during strcpy in tdbsam_getsampwnam; (bso#14900); * Fix a use-after-free in SMB1 server; (bso#14989); * smb2_signing_decrypt_pdu() may not decrypt with gnutls_aead_cipher_decrypt() from gnutls before 3.5.2; (bso#14968); * Changing the machine password against an RODC likely destroys the domain join; (bso#14984); * authsam_make_user_info_dc() steals memory from its struct ldb_message *msg argument; (bso#14993); * Use Heimdal 8.0 (pre) rather than an earlier snapshot; (bso#14995); * Samba autorid fails to map AD users if id rangesize fits in the id range only once; (bso#14967);- Fix mismatched version of libldb2; (bsc#1196788). - Drop obsolete SuSEfirewall2 service files.- Drop obsolete Samba fsrvp v0->v1 state upgrade functionality; (bsc#1080338).- Fix ntlm authentications with "winbind use default domain = yes"; (bso#13126); (bsc#1173429); (bsc#1196308).- Fix samba-ad-dc status warning notification message by disabling systemd notifications in bgqd; (bsc#1195896); (bso#14947).- libldb version mismatch in Samba dsdb component; (bsc#1118508);- Update to 4.15.5 * CVE-2021-44141: UNIX extensions in SMB1 disclose whether the outside target of a symlink exists; (bso#14911); (bsc#1193690). * CVE-2021-44142: Out-of-Bound Read/Write on Samba vfs_fruit module; (bso#14914); (bsc#1194859). * CVE-2022-0336: Re-adding an SPN skips subsequent SPN conflict checks; bso#14950); (bsc#1195048).- CVE-2021-44141: Information leak via symlinks of existance of files or directories outside of the exported share; (bso#14911); (bsc#1193690); - CVE-2021-44142: Out-of-bounds heap read/write vulnerability in VFS module vfs_fruit allows code execution; (bso#14914); (bsc#1194859); - CVE-2022-0336: Samba AD users with permission to write to an account can impersonate arbitrary services; (bso#14950); (bsc#1195048);- Update to 4.15.4 * Duplicate SMB file_ids leading to Windows client cache poisoning; (bso#14928); * Failed to parse NTLMv2_RESPONSE length 95 - Buffer Size Error - NT_STATUS_BUFFER_TOO_SMALL; (bso#14932); * kill_tcp_connections does not work; (bso#14934); * Can't connect to Windows shares not requiring authentication using KDE/Gnome; (bso#14935); * smbclient -L doesn't set "client max protocol" to NT1 before calling the "Reconnecting with SMB1 for workgroup listing" path; (bso#14939); * Cross device copy of the crossrename module always fails; (bso#14940); * symlinkat function from VFS cap module always fails with an error; (bso#14941); * Fix possible fsp pointer deference; (bso#14942); * Missing pop_sec_ctx() in error path inside close_directory(); (bso#14944); * "smbd --build-options" no longer works without an smb.conf file; (bso#14945);- Use pkgconfig(krb5) as dependency for the -devel package: allow OBS to pick the right flavor of krb5-devel (full vs mini). - Do not require the 'krb5' symbol by samba-client-libs: this package has an automatic dependency due to linkage on libgssapi_krb5.so.2. Automatic deps are always better. - Do not require the 'krb5' symbol from samba-libs: samba-libs requires samba-client-libs, which in turn requires krb5 libraries. Samba-libs itself has no need for krb5 (but get it indirectly anyway).- Reorganize libs packages. Split samba-libs into samba-client-libs, samba-libs, samba-winbind-libs and samba-ad-dc-libs, merging samba public libraries depending on internal samba libraries into these packages as there were dependency problems everytime one of these public libraries changed its version (bsc#1192684). The devel packages are merged into samba-devel. - Rename package samba-core-devel to samba-devel - Add python-rpm-macros to build requirements - Update the symlink create by samba-dsdb-modules to private samba ldb modules following libldb2 changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba- Update to 4.15.3 * Recursive directory delete with veto files is broken in 4.15.0; (bso#14878); * A directory containing dangling symlinks cannot be deleted by SMB2 alone when they are the only entry in the directory; (bso#14879); * SIGSEGV in rmdir_internals/synthetic_pathref - dirfsp is used uninitialized in rmdir_internals(); (bso#14892); * MaxQueryDuration not honoured in Samba AD DC LDAP; (bso#14694); * The CVE-2020-25717 username map [script] advice has undesired side effects for the local nt token; (bso#14901); (bsc#1192849); * User with multiple spaces (eg FredNurk) become un-deletable; (bso#14902); * Avoid storing NTTIME_THAW (-2) as value on disk; (bso#14127); * smbXsrv_client_global record validation leads to crash if existing record points at non-existing process; (bso#14882); * Crash in vfs_fruit asking for fsp_get_io_fd() for an XATTR call; (bso#14890); * Samba process doesn't log to logfile; (bso#14897); * set_ea_dos_attribute() fallback calling get_file_handle_for_metadata() triggers locking.tdb assert; (bso#14907); * Kerberos authentication on standalone server in MIT realm broken; (bso#14922); * Segmentation fault when joining the domain; (bso#14923); * Support for ROLE_IPA_DC is incomplete; (bso#14903); * rpcclient cannot connect to ncacn_ip_tcp services anymore; (bso#14767); * winexe crashes since 4.15.0 after popt parsing; (bso#14893); * net ads status -P broken in a clustered environment; (bso#14908); * Memory leak if ioctl(FSCTL_VALIDATE_NEGOTIATE_INFO) fails before smbd_smb2_ioctl_send; (bso#14788); * winbindd doesn't start when "allow trusted domains" is off; (bso#14899); * smbclient login without password using '-N' fails with NT_STATUS_INVALID_PARAMETER on Samba AD DC; (bso#14883); * A schannel client incorrectly detects a downgrade connecting to an AES only server; (bso#14912); * Possible null pointer dereference in winbind; (bso#14921); * Fix -k legacy option for client tools like smbclient, rpcclient, net, etc.; (bso#14846); * Add Debian 11 CI bootstrap support; (bso#14872); * Crash in recycle_unlink_internal(); (bso#14888);- Fix dependency problem upgrading from libndr0 to libndr2 and from libsamba-credentials0 to libsamba-credentials1; (bsc#1192684);- Fix regression introduced by CVE-2020-25717 patches, winbindd does not start when 'allow trusted domains' is off; (bso#14899); - Update to 4.15.2 * CVE-2016-2124: SMB1 client connections can be downgraded to plaintext authentication; (bso#12444); (bsc#1014440); * CVE-2020-25717: A user on the domain can become root on domain members; (bso#14556); (bsc#1192284); * CVE-2020-25718: Samba AD DC did not correctly sandbox Kerberos tickets issued by an RODC; (bso#14558); (bsc#1192246); * CVE-2020-25719: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets; (bso#14561); (bsc#1192247); * CVE-2020-25721: Kerberos acceptors need easy access to stable AD identifiers (eg objectSid); (bso#14557); (bsc#1192505); * CVE-2020-25722: Samba AD DC did not do suffienct access and conformance checking of data stored; (bso#14564); (bsc#1192283); * CVE-2021-3738: Use after free in Samba AD DC RPC server; (bso#14468); (bsc#1192215); * CVE-2021-23192: Subsequent DCE/RPC fragment injection vulnerability; (bso#14875); (bsc#1192214); - Update to 4.15.1 * vfs_shadow_copy2: core dump in make_relative_path; (bso#14682); * Log clutter from filename_convert_internal; (bso#14685); * MacOSX compilation fixes; (bso#14862); * rodc_rwdc test flaps; (bso#14868); * Provide a fix for MS CVE-2020-17049 in Samba [SECURITY] 'Bronze bit' S4U2Proxy Constrained Delegation bypass in Samba with embedded Heimdal; (bso#14642); * Python ldb.msg_diff() memory handling failure; (bso#14836); * "in" operator on ldb.Message is case sensitive; (bso#14845); * Release LDB 2.4.1 for Samba 4.15.1; (bso#14848); * samldb_krbtgtnumber_available() looks for incorrect string; (bso#14854); * Fix Samba support for UF_NO_AUTH_DATA_REQUIRED; (bso#14871); * Allow special chars like "@" in samAccountName when generating the salt; (bso#14874); * Correctly ignore comments in CTDB public addresses file; (bso#14826); * Fix transit path validation; (bso#12998); * Fix that child winbindd logs to log.winbindd instead of log.wb-; (bso#14852); * SMB3 cancel requests should only include the MID together with AsyncID when AES-128-GMAC is used; (bso#14855); * Prepare to operate with MIT krb5 >= 1.20; (bso#14870); * Heimdal prefers RC4 over AES for machine accounts; (bso#14864);- Enable samba-tool without ad dc.- Adjust spec to use pam macros; (bsc#1191046).- Adjust spec for size * allow some Recommends instead Requires to be configured for cifs-utils, samba-libs-python3 & samba-gpupdate; (bsc#1182847). * remove fam, undocumented and unneeded.- Add missing build dependency on bison when building with the embedded Heimdal Kerberos- Update to 4.15.0 * Removed SMB development dialects SMB2_22, SMB2_24 and SMB3_10 * VFS layer modernized. * Add the ability to set allow/deny lists for zone transfer clients in Bind DLZ plugin * Server multi-channel support no longer experimental * Improved command line user experience, unifying the options in different commands * Winbindd no longer scans trusted domains on startup and will use enterprise principals by default. * The net utility is now able to support the offline domain join feature * New options for 'samba-tool dns zoneoptions' for aging control and to mark old records as static or dynamic * DNS tombstones are now deleted as appropriate and use a consistent timestamp format * The 'samba-tool dns update' command validates and rejects now malformed IPv4 and IPv6 addresses * The 'samba-tool domain backup' command correctly takes out locks against concurrent modification during backup when using the LMDB backend * TruACL support has been removed * NIS support has been removed- Fix 'net rpc' authentication when using the machine account; (bsc#1189017); (bso#14796);- Fix dependency problem upgrading from libndr0 to libndr1; (bsc#1189875); - Fix dependency problem upgrading from libsmbldap0 to libsmbldap2; (bsc#1189875); - Fix wrong kvno exported to keytab after net ads changetrustpw due to replication delay; (bsc#1188727); - Add Certificate Auto Enrollment Policy; (jsc#SLE-18456). - Update to 4.13.10 * s3: smbd: Ensure POSIX default ACL is mapped into returned Windows ACL for directory handles; (bso#14708); * Take a copy to make sure we don't reference free'd memory; (bso#14721); * s3: lib: Fix talloc heirarcy error in parent_smb_fname(); (bso#14722); * s3: smbd: Remove erroneous TALLOC_FREE(smb_fname_parent) in change_file_owner_to_parent() error path; (bso#14736); * samba-tool: Give better error information when the 'domain backup restore' fails with a duplicate SID; (bso#14575); * smbd: Correctly initialize close timestamp fields; (bso#14714); * Spotlight RPC service doesn't work with vfs_glusterfs; (bso#14740); * ctdb: Fix a crash in run_proc_signal_handler(); (bso#14475); * gensec_krb5: Restore ipv6 support for kpasswd; (bso#14750); * smbXsrv_{open,session,tcon}: Protect smbXsrv_{open,session,tcon}_global_traverse_fn against invalid records; (bso#14752); * samba-tool domain backup offline doesn't work against bind DLZ backend; (bso#14027); * netcmd: Use next_free_rid() function to calculate a SID for restoring a backup; (bso#14669); - Update to 4.13.9 * s3: smbd: SMB1 SMBsplwr doesn't send a reply packet on success; (bso#14696); * Add documentation for dsdb_group_audit and dsdb_group_json_audit to "log level", synchronise "log level" in smb.conf with the code; (bso#14689); * Fix smbd panic when two clients open same file; (bso#14672); * Fix memory leak in the RPC server; (bso#14675); * s3: smbd: Fix deferred renames; (bso#14679); * s3-iremotewinspool: Set the per-request memory context; (bso#14675); * rpc_server3: Fix a memleak for internal pipes; (bso#14675); * third_party: Update socket_wrapper to version 1.3.2; (bso#11899); * third_party: Update socket_wrapper to version 1.3.3; (bso#14639); * idmap_rfc2307 and idmap_nss return wrong mapping for uid/gid conflict; (bso#14663); * Fix the build on OmniOS; (bso#14288); - Update to 4.13.8 * CVE-2021-20254: Fix buffer overrun in sids_to_unixids(); (bso#14571 - Update to 4.13.7 * Release with dependency on ldb version 2.2.1.- CVE-2021-20254 Buffer overrun in sids_to_unixids(); (bnc#14571); (bsc#1184677).- Fix offline domain backup not possible using lmdb version >= 0.9.26; (bso#14676); - Require libldb >= 2.2.1; (bsc#1183572); (bsc#1183574); - Update to 4.13.6 * CVE-2020-27840: samba: Unauthenticated remote heap corruption via bad DNs; (bso#14595); (bsc#1183572). * CVE-2021-20277: samba: out of bounds read in ldb_handler_fold; (bso#14655); (bsc#1183574). - Update to 4.13.5 * s3:modules:vfs_virusfilter: Recent talloc changes cause infinite start-up failure; (bso#14634); * s3: libsmb: Add missing cli_tdis() in error path if encryption setup failed on temp proxy connection; (bso#13992); * smbd: In conn_force_tdis_done() when forcing a connection closed force a full reload of services; (bso#14604); * dbcheck: Check Deleted Objects and reduce noise in reports about expired tombstones (bso#14593); * s3: Fix fcntl waf configure check; (bso#14503); * s3/auth: Implement "winbind:ignore domains"; (bso#14602); * smbd: Use fsp->conn->session_info for the initial delete-on-close token; (bso#14617); * s3: VFS: nfs4_acls. Add missing TALLOC_FREE(frame) in error path; (bso#14648); * classicupgrade: Treat old never expires value right; (bso#14624); * g_lock: Fix uninitalized variable reads; (bso#14636); * s3:pysmbd: Fix fd leak in py_smbd_create_file(); (bso#13898); * lib:util: Avoid free'ing our own pointer; (bso#14625); * HEIMDAL: krb5_storage_free(NULL) should work; (bso#12505);- Spec file fixes around systemd and requires; (bsc#1182830); - Align systemd service unit files with upstream provided ones.- Update to 4.13.4 * Work around special SMB2 IOCTL response behavior of NetApp Ontap 7.3.7; (bso#14607); * Temporary DFS share setup doesn't set case parameters in the same way as a regular share definition does; (bso#14612); * lib: Avoid declaring zero-length VLAs in various messaging functions; (bso#14605); * Do not create an empty DB when accessing a sam.ldb; (bso#14579); * vfs_fruit may close wrong backend fd; (bso#14596); * Temporary DFS share setup doesn't set case parameters in the same way as a regular share definition does; (bso#14612); * vfs_virusfilter: Allocate separate memory for config char*; (bso#14606); * vfs_fruit may close wrong backend fd; (bso#14596); * Work around special SMB2 IOCTL response behavior of NetApp Ontap 7.3.7; (bso#14607); * The cache directory for the user gencache should be created recursively; (bso#14601); * Be more flexible with repository names in CentOS 8 test environments; (bso#14594);- Uninstalling samba-client: Failed to disable unit, cifs.service does not exists; (bsc#1180388);- Update to 4.13.3 + libcli: smb2: Never print length if smb2_signing_key_valid() fails for crypto blob; (bso#14210); + s3: modules: gluster. Fix the error I made in preventing talloc leaks from a function; (bso#14486); + s3: smbd: Don't overwrite contents of fsp->aio_requests[0] with NULL via TALLOC_FREE(); (bso#14515); + s3: spoolss: Make parameters in call to user_ok_token() match all other uses; (bso#14568); + s3: smbd: Quiet log messages from usershares for an unknown share; (bso#14590); + samba process does not honor max log size; (bso#14248); + vfs_zfsacl: Add missing inherited flag on hidden "magic" everyone@ ACE; (bso#14587); + s3-libads: Pass timeout to open_socket_out in ms; (bso#13124); + s3-vfs_glusterfs: Always disable write-behind translator; (bso#14486); + smbclient: Fix recursive mget; (bso#14517); + clitar: Use do_list()'s recursion in clitar.c; (bso#14581); + manpages/vfs_glusterfs: Mention silent skipping of write-behind translator; (bso#14486); + vfs_shadow_copy2: Preserve all open flags assuming ROFS; (bso#14573); + interface: Fix if_index is not parsed correctly; (bso#14514);- Update to 4.13.2 + s3: modules: vfs_glusterfs: Fix leak of char **lines onto mem_ctx on return; (bso#14486); + RN: vfs_zfsacl: Only grant DELETE_CHILD if ACL tag is special; (bso#14471); + smb.conf.5: Add clarification how configuration changes reflected by Samba; (bso#14538); + daemons: Report status to systemd even when running in foreground; (bso#14552); + DNS Resolver: Support both dnspython before and after 2.0.0; (bso#14553); + s3-vfs_glusterfs: Refuse connection when write-behind xlator is present; (bso#14486); + provision: Add support for BIND 9.16.x; (bso#14487); + ctdb-common: Avoid aliasing errors during code optimization; (bso#14537); + libndr: Avoid assigning duplicate versions to symbols; (bso#14541); + docs: Fix default value of spoolss:architecture; (bso#14522); + winbind: Fix a memleak; (bso#14388); + s4:dsdb:acl_read: Implement "List Object" mode feature; (bso#14531); + docs-xml/manpages: Add warning about write-behind translator for vfs_glusterfs; (bso#14486); + nsswitch/nsstest.c: Avoid nss function conflicts with glibc nss.h. + vfs_shadow_copy2: Avoid closing snapsdir twice; (bso#14530); + third_party: Update resolv_wrapper to version 1.1.7; (bso#14547); + examples:auth: Do not install example plugin; (bso#14550); + ctdb-recoverd: Drop unnecessary and broken code; (bso#14513); + RN: vfs_zfsacl: Only grant DELETE_CHILD if ACL tag is special; (bso#14471);- Adjust smbcacls '--propagate-inheritance' feature to align with upstream; (bsc#1178469).- Update to samba 4.13.1 + CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with easily crafted records; (bsc#1177613); (bso#14472); + CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994); (bso#14436); + CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify; (bsc#1173902); (bso#14434); - Adjust systemd tmpfiles.d configuration, use /run/samba instead of /var/run/samba; (bsc#1177355);- Fix vfs_ceph query_directory regression; (bso#14519) - Drop liburing-devel for SLE15-SP2; (bsc#1177245)- Register CTDB recovery lock holder with ceph-mgr - Add liburing-devel dependency- Update to samba 4.13.0 + Require Python 3.6 + Move wide links functionality into VFS module + Deprecate NT4-like 'classic' Samba domain controllers + Deprecate SMBv1 only protocol options + Remove deprecated "ldap ssl ads" option + Unify asynchronous DCE-RPC server; (jsc#SES-645) + Replay multichannel lease break requests; (bso#11897); (jsc#SES-655) + Drop internal byteorder.h header from util-devel package + Remove final code for the AD DC LDAP backend + Add AD DC Group Policy Scripts + Only use gnutls_aead_cipher_encryptv2() for GnuTLS > 3.6.14; (bso#14399) + Fix %U substitutions if it contains a domain name; (bso#14467) + Fix krb5.conf creation for 'net ads join'; (bso#14479) + Fix build problem if libbsd-dev is not installed; (bso#14482) + Toggle vfs_snapper using "--with-shared-modules"; (bso#14437) + Fix idmap_ad RFC4511 response handling; (bso#14465) + Fix panic in get_lease_type(); (bso#14428)- Update to samba 4.11.13 + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2 against unencrypted passwords; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Support "server require schannel:WORKSTATION$ = no" about unsecure configurations; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): s4 torture rpc: repeated bytes in client challenge; (bsc#1176579); (bso#14497); + CVE-2020-1472(ZeroLogon): libcli/auth: Reject weak client challenges in netlogon_creds_server_init() "server require schannel:WORKSTATION$ = no"; (bsc#1176579); (bso#14497); - Update to samba 4.11.12 + s3: libsmb: Fix SMB2 client rename bug to a Windows server; (bso#14403); + dsdb: Allow "password hash userPassword schemes = CryptSHA256" to work on RHEL7; (bso#14424); + dbcheck: Allow a dangling forward link outside our known NCs; (bso#14450); + lib/debug: Set the correct default backend loglevel to MAX_DEBUG_LEVEL; (bso#14426); + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428); + lib/util: do not install "test_util_paths"; (bso#14370); + lib:util: Fix smbclient -l basename dir; (bso#14345); + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428); + util: Allow symlinks in directory_create_or_exist; (bso#14166); + docs: Fix documentation for require_membership_of of pam_winbind; (bso#14358); + s3:winbind:idmap_ad: Make failure to get attrnames for schema mode fatal; (bso#14425);- Add obsoletes to libsmbldap2 package to fix upgrades from previous versions; (bsc#1172810);- Fix net command unable to negotiate SMB2; (bsc#1174120);- Update to samba 4.11.11 + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ and VLV combined; (bso#14364); (bsc#1173159] + CVE-2020-10745: invalid DNS or NBT queries containing dots use several seconds of CPU each; (bso#14378); (bsc#1173160). + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP server with paged_result or VLV; (bso#14402); (bsc#1173161) + CVE-2020-14303: Endless loop from empty UDP packet sent to AD DC nbt_server; (bso#14417); (bsc#1173359). - Update to samba 4.11.10 + Fix segfault when using SMBC_opendir_ctx() routine for share folder that contains incorrect symbols in any file name; (bso#14374). + vfs_shadow_copy2 doesn't fail case looking in snapdirseverywhere mode; (bso#14350) + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr; (bso#14413). + Malicous SMB1 server can crash libsmbclient; (bso#14366) + winbindd: Fix a use-after-free when winbind clients exit; (bso#14382) + ldb: Bump version to 2.0.11, LMDB databases can grow without bounds. (bso#14330) - Update to samba 4.11.9 + nmblib: Avoid undefined behaviour in handle_name_ptrs(); (bso#14242). + 'samba-tool group' commands do not handle group names with special chars correctly; (bso#14296). + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo is not valid; (bso#14237). + Missing check for DMAPI offline status in async DOS attributes; (bso#14293). + smbd: Ignore set NTACL requests which contain S-1-5-88 NFS ACEs; (bso#14307). + vfs_recycle: Prevent flooding the log if we're called on non-existant paths; (bso#14316) + smbd mistakenly updates a file's write-time on close; (bso#14320). + RPC handles cannot be differentiated in source3 RPC server; (bso#14359). + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313). + nsswitch: Fix use-after-free causing segfault in _pam_delete_cred; (bso#14327). + Fix fruit:time machine max size on arm; (bso#13622) + CTDB recovery corner cases can cause record resurrection and node banning; (bso#14294). + ctdb: Fix a memleak; (bso#14348). + libsmb: Don't try to find posix stat info in SMBC_getatr(). + ctdb-tcp: Move free of inbound queue to TCP restart; (bso#14295); (bsc#1162680). + s3/librpc/crypto: Fix double free with unresolved credential cache; (bso#14344); (bsc#1169095) + s3:libads: Fix ads_get_upn(); (bso#14336). + CTDB recovery corner cases can cause record resurrection and node banning; (bso#14294) + Starting ctdb node that was powered off hard before results in recovery loop; (bso#14295); (bsc#1162680). + ctdb-recoverd: Avoid dereferencing NULL rec->nodemap; (bso#14324) - Update to samba 4.11.8 + CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with ASQ; (bso#14331); (bsc#1169850); + CVE-2020-10704: LDAP Denial of Service (stack overflow) in Samba AD DC; (bso#14334); (bsc#1169851); - Update to samba 4.11.7 + s3: lib: nmblib. Clean up and harden nmb packet processing; (bso#14239). + s3: VFS: full_audit. Use system session_info if called from a temporary share definition; (bso#14283) + dsdb: Correctly handle memory in objectclass_attrs; (bso#14258). + ldb: version 2.0.9, Samba 4.11 and later give incorrect results for SCOPE_ONE searches; (bso#14270) + auth: Fix CIDs 1458418 and 1458420 Null pointer dereferences; (bso#14247). + smbd: Handle EINTR from open(2) properly; (bso#14285) + winbind member (source3) fails local SAM auth with empty domain name; (bso#14247) + winbindd: Handling missing idmap in getgrgid(); (bso#14265). + lib:util: Log mkdir error on correct debug levels; (bso#14253). + wafsamba: Do not use 'rU' as the 'U' is deprecated in Python 3.9; (bso#14266). + ctdb-tcp: Make error handling for outbound connection consistent; (bso#14274). - Update to samba 4.11.6 + pygpo: Use correct method flags; (bso#14209). + vfs_ceph_snapshots: Fix root relative path handling; (bso#14216); (bsc#1141320). + Avoiding bad call flags with python 3.8, using METH_NOARGS instead of zero; (bso#14209). + source4/utils/oLschema2ldif: Include stdint.h before cmocka.h; (bso#14218). + docs-xml/winbindnssinfo: Clarify interaction with idmap_ad etc; (bso#14122). + smbd: Fix the build with clang; (bso#14251). + upgradedns: Ensure lmdb lock files linked; (bso#14199). + s3: VFS: glusterfs: Reset nlinks for symlink entries during readdir; (bso#14182). + smbc_stat() doesn't return the correct st_mode and also the uid/gid is not filled (SMBv1) file; (bso#14101). + librpc: Fix string length checking in ndr_pull_charset_to_null(); (bso#14219). + ctdb-scripts: Strip square brackets when gathering connection info; (bso#14227).- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);- Installing: samba - samba-ad-dc.service does not exist and unit not found; (bsc#1171437);- Fix samba_winbind package is installing python3-base without python3 package; (bsc#1169521);- Require libldb2 >= 2.0.10 after security release.- CVE-2020-10704: LDAP Denial of Service (stack overflow) in Samba AD DC; (bso#14334); (bsc#1169851); - CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with ASQ; (bso#14331); (bsc#1169850);- Fix smbclient crash with double free (with unresolved krb5 credential cache); (bso#14344); (bsc#1169095).- Starting ctdb node that was powered off hard before results in recovery loop; (bso#14295); (bsc#1162680).- CTDB doesn't retry outgoing connections on bind (and some other) failures; (bso#14274); (bsc#1162680).- Revert: Allow idmap_rid to have primary group other than "Domain Users"; (bsc#1087931).- Fix nmbstatus not reporting detailed information about workgroups; (bsc#1159464); - Fix querying all names registered within broadcast area; (bso#8927);- Update to samab 4.11.5 + CVE-2019-14902: Replication of ACLs down subtree on AD Directory is not automatic; (bso#12497); (bsc#1160850). + CVE-2019-19344: Fix server crash with dns zone scavenging = yes; (bso#14050); (bsc#1160852). + CVE-2019-14907: server-side crash after charset conversion failure (eg during NTLMSSP processing); (bso#14208); (bsc#1160888). - Update to samba 4.11.4 + Ensure SMB1 cli_qpathinfo2() doesn't return an inode number; (bso#14161). + Ensure we don't call cli_RNetShareEnum() on an SMB1 connection; (bso#14174). + NT_STATUS_ACCESS_DENIED becomes EINVAL when using SMB2 in SMBC_opendir_ctx; (bso#14176). + SMB2 - Ensure we use the correct session_id if encrypting an interim response; (bso#14189). + Prevent smbd crash after invalid SMB1 negprot; (bso#14205). + printing: Fix %J substition; (bso#13745). + Remove now unneeded call to cmdline_messaging_context(); (bso#13925). + Fix incomplete conversion of former parametric options; (bso#14069). + Fix sync dosmode fallback in async dosmode codepath; (bso#14070). + vfs_fruit returns capped resource fork length; (bso#14171). + libnet_join: Add SPNs for additional-dns-hostnames entries; (bso#14116). + smbd: Increase a debug level; (bso#14211). + Prevent azure ad connect from reporting discovery errors reference-value-not-ldap-conformant; (bso#14153). + krb5_plugin: Fix developer build with newer heimdal system library; (bso#14179). + replace: Only link libnsl and libsocket if required; (bso#14168); + ctdb: Incoming queue can be orphaned causing communication; breakdown; (bso#14175). + ldb: Release ldb 2.0.8. Cross-compile will not take cross-answers or cross-execute; (bso#13846). + heimdal-build: Avoid hard-coded /usr/include/heimdal in asn1_compile-generated code; (bso#13856).- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).- Update to samba 4.11.3 + CVE-2019-14861: DNSServer RPC server crash, an authenticated user can crash the DCE/RPC DNS management server by creating records with matching the zone name; (bso#14138); (bsc#1158108). + CVE-2019-14870: DelegationNotAllowed not being enforced, the DelegationNotAllowed Kerberos feature restriction was not being applied when processing protocol transition requests (S4U2Self), in the AD DC KDC; (bso#14187); (bsc#1158109).- CVE-2019-14861: DNSServer RPC server crash, an authenticated user can crash the DCE/RPC DNS management server by creating records with matching the zone name; (bso#14138); (bsc#1158108). - CVE-2019-14870: DelegationNotAllowed not being enforced, the DelegationNotAllowed Kerberos feature restriction was not being applied when processing protocol transition requests (S4U2Self), in the AD DC KDC; (bso#14187); (bsc#1158109).- Update to samba 4.11.2 + CVE-2019-10218: Client code can return filenames containing path separators; (bsc#1144902); (bso#14071). + CVE-2019-14833: Samba AD DC check password script does not receive the full password; (bso#12438). + CVE-2019-14847: User with "get changes" permission can crash AD DC LDAP server via dirsync; (bso#14040). - Fixes from 4.11.1 + Overlinking libreplace against librt and pthread against every binary or library causes issues; (bso#14140); + kpasswd fails when built with MIT Kerberos; (bso#14155); + Fix spnego fallback from kerberos to ntlmssp in smbd server; (bso#14106); + Stale file handle error when using mkstemp on a share; (bso#14137); + non-AES schannel broken; (bso#14134); + Joining Active Directory should not use SAMR to set the password; (bso#13884); + smbclient can blunder into the SMB1 specific cli_RNetShareEnum() call on an SMB2 connection; (bso#14152); + Deleted records can be resurrected during recovery; (bso#14147); + getpwnam and getpwuid need to return data for ID_TYPE_BOTH group; (bso#14141); + winbind does not list forest trusts with additional trust attributes; (bso#14130); + fault report points to outdated documentation; (bso#14139); + pam_winbind with krb5_auth or wbinfo -K doesn't work for users of trusted domains/forests; (bso#14124); + classicupgrade results in uncaught exception - a bytes-like object is required, not 'str'; (bso#14136); + pod2man is not longer required, stop checking at build time; (bso#14131); + Exit code of ctdb nodestatus should not be influenced by deleted nodes; (bso#14129); + username/password authentication doesn't work with CUPS and smbspool; (bso#14128); + smbc_readdirplus() is incompatible with smbc_telldir() and smbc_lseekdir(); (bso#14094);- CVE-2019-14847: User with "get changes" permission can crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598); - CVE-2019-10218: Client code can return filenames containing path separators; (bso#14071); (bsc#1144902);- CVE-2019-14833: samba: Accent with "check script password" Samba AD DC check password script does not receive the full password; (bso#12438); (bsc#1154289).- Update to samba 4.11.0 + For details on all items see WHATSNEW.txt in samba-doc package + Python2 runtime support removed; python 3.4 or later required + Security improvements: - SMB1 disabled by default - lanman and plaintext authentication deprecated - winbind: PAM_AUTH and NTLM_AUTH events logged - GnuTLS 3.2 required; system FIPS mode setting honored + CephFS Snapshot integration, exposed as previous file versions + ctdb changes: - onnode -o option removed - ctdbd logs when using more than 90% of a CPU thread - CTDB_MONITOR_SWAP_USAGE variable removed + AD Domain controller improvements: - Upgrade AD databse format - BIND9_FLATFILE deprecated - default process model chagned to prefork - bind9 dns operation duration logging - Default schema updated to 2012_R2; function level is unchanged - many performance improvements + Configuration webserver support removed- Fix broken username/password authentication with CUPS and smbspool; (bsc#1152143); (bso#14128).- Fix auth problems when printing via smbspool backend with kerberos; (bnc#1148539); (bso#13832).- Update to samba 4.10.8 + CVE-2019-10197: user escape from share path definition; (bso#14035); (bsc#1141267);- Fix build on newer systems by modifying samba.spec to use consistent non-relative paths for pammodules in configure line and specification of pam_winbind.so library to package.- Update to samba 4.10.7 + Unable to create or rename file/directory inside shares configured with vfs_glusterfs_fuse module; (bso#14010). + build: Allow build when '--disable-gnutls' is set; (bso#13844) + samba-tool: Add 'import samba.drs_utils' to fsmo.py; (bso#13973). + Fix 'Error 32 determining PSOs in system' message on old DB with FL upgrade; (bso#14008). + s4/libnet: Fix joining a Windows pre-2008R2 DC; (bso#14021) + join: Use a specific attribute order for the DsAddEntry nTDSDSA object; (bso#14046). + vfs_catia: Pass stat info to synthetic_smb_fname(); (bso#14015). + lookup_name: Allow own domain lookup when flags == 0; (bso#14091). + s4 librpc rpc pyrpc: Ensure tevent_context deleted last; (bso#13932). + DEBUGC and DEBUGADDC doesn't print into a class specific log file; (bso#13915). + Request to keep deprecated option "server schannel", VMWare Quickprep requires "auto"; (bso#13949). + dbcheck: Fallback to the default tombstoneLifetime of 180 days; (bso#13967). + dnsProperty fails to decode values from older Windows versions; (bso#13969). + samba-tool: Use only one LDAP modify for dns partition fsmo role transfer; (bso#13973). + third_party: Update waf to version 2.0.17; (bso#13960). + netcmd: Allow 'drs replicate --local' to create partitions; (bso#14051). + ctdb-config: Depend on /etc/ctdb/nodes file; (bso#14017).- CVE-2019-10197: user escape from share path definition; (bso#14035); (bsc#1141267).- Prepare for use future use of kernel keyrings, modify /etc/pam.d/samba to include pam_keyinit.so; (bsc#1144059).- Update samba-winbind script to work with systemd; (bsc#1132739); - Drop samba dhcpcd hook scripts - Update to samba 4.10.6 + s3: winbind: Fix crash when invoking winbind idmap scripts; (bso#13956). + smbd does not correctly parse arguments passed to dfree and quota scripts; (bso#13964). + samba-tool dns: use bytes for inet_ntop; (bso#13965). + samba-tool domain provision: Fix --interactive module in python3; (bso#13828). + ldb_kv: Skip @ records early in a search full scan; (bso#13893). + docs: Improve documentation of "lanman auth" and "ntlm auth" connection; (bso#13981). + python/ntacls: Use correct "state directory" smb.conf option instead of "state dir"; (bso#14002). + registry: Add a missing include; (bso#13840). + Fix SMB guest authentication; (bso#13944). + AppleDouble conversion breaks Resourceforks; (bso#13958). + vfs_fruit makes direct use of syscalls like mmap() and pread(); (bso#13968). + s3:mdssvc: Fix flex compilation error; (bso#13987). + s3/vfs_glusterfs[_fuse]: Avoid using NAME_MAX directly; (bso#13872). + dsdb:samdb: schemainfo update with relax control; (bso#13799). + s3:util: Move static file_pload() function to lib/util; (bso#13964). + smbd: Fix a panic; (bso#13957). + ldap server: Generate correct referral schemes; (bso#12478). + s4 dsdb/repl_meta_data: fix use after free in dsdb_audit_add_ldb_value; (bso#13941). + s4 dsdb: Fix use after free in samldb_rename_search_base_callback; (bso#13942). + dsdb/repl: we need to replicate the whole schema before we can apply it; (bso#12204). + ldb: Release ldb 1.5.5; (bso#12478). + Schema replication fails if link crosses chunk boundary backwards; (bso#13713). + 'samba-tool domain schemaupgrade' uses relax control and skips the schemaInfo update provision; (bso#13799). + dsdb_audit: avoid printing "... remote host [Unknown] SID [(NULL SID)] ..."; (bso#13916). + python/ntacls: We only need security.SEC_STD_READ_CONTROL in order to get the ACL; (bso#13917). + s3:loadparm: Ensure to truncate FS Volume Label at multibyte boundary; (bso#13947). + Using Kerberos credentials to print using spoolss doesn't work; (bso#13939). + wafsamba: Use native waf timer; (bso#13998). + ctdb-scripts: Fix tcp_tw_recycle existence check; (bso#13984).- Update to samba-4.10.5 (including updates for 4.10.4, 4.10.3) + CVE-2019-12435 rpc/dns: Avoid NULL deference if zone not found in DnssrvOperation2; (bso#13922); (bsc#1137815). + CVE-2019-12436 dsdb/paged_results: Ignore successful results without messages; (bso#13951); (bsc#1137816). - Update to samba-4.10.4 + s3: SMB1: Don't allow recvfile on stream fsp's; (bso#13938). + py/provision: Fix for Python 2.6; (bso#13882). + netcmd: Fix 'passwordsettings --max-pwd-age' command; (bso#13873). + s3-libnet_join: 'net ads join' to child domain fails when using "-U admin@forestroot"; (bso#13861). + vfs_ceph: Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245). + vfs_ceph: Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697). + ctdb-common: Avoid race between fd and signal events; (bso#13895). + ctdb-common: Fix memory leak in run_proc; (bso#13943). + lib: Initialize getline() arguments; (bso#13892). + winbind: Fix overlapping id ranges; (bco#13903). + lib util debug: Increase format buffer to 4KiB; (bso#13902). + nsswitch pam_winbind: Fix Asan use after free; (bso#13927). + s4 lib socket: Ensure address string owned by parent struct; (bso#13929). + s3 rpc_client: Fix Asan stack use after scope; (bso#13936). + s3:smbd: Handle IO_REPARSE_TAG_DFS in SMB_FIND_FILE_FULL_DIRECTORY_INFO; (bso#10097). + smb2_tcon: Avoid STATUS_PENDING completely on tdis; (bso#10344). + smb2_sesssetup: avoid STATUS_PENDING responses for session setup; (bso#12845). + smb2_tcon: Avoid STATUS_PENDING completely on tdis; (bso#13698). + smb2_sesssetup: avoid STATUS_PENDING responses for session setup; (bso#13796). + dbcheck: Fix the err_empty_attribute() check; (bso#13843). + vfs_snapper: Drop unneeded fstat handler; (bso#13858). + vfs_default: Fix vfswrap_offload_write_send() NT_STATUS_INVALID_VIEW_SIZE check; (bso#13862). + smb2_server: Grant all 8192 credits to clients; (bso#13863). + smbd: Implement SMB_FILE_NORMALIZED_NAME_INFORMATION handling; (bso#13919). + s3/vfs_glusterfs: Dynamically determine NAME_MAX; (bso#13872). + s3: modules: ceph: Use current working directory instead of share path; (bso#13918); (bsc#1134452). + winbind: Use domain name from lsa query for sid_to_name cache entry; (bso#13831). + memcache: Increase size of default memcache to 512k; (bso#13865). + docs: Update smbclient manpage for "--max-protocol"; (bso#13857). + s3:utils: If share is NULL in smbcacls, don't print it; (bso#13937). + s3:smbspool: Fix regression printing with Kerberos credentials; (bso#13939). + ctdb-scripts: CTDB restarts failed NFS RPC services by hand, which is incompatible with systemd; (bso#13860). + ctdb-daemon: Revert "We can not assume that just because we could complete a TCP handshake"; (bso#13888). + ctdb-daemon: Never use 0 as a client ID; (bso#13930). + ctdb-common: Fix memory leak; (bso#13943). + s3:debug: Enable logging for early startup failures; (bso#13904) - Update to samba-4.10.3 + CVE-2018-16860: Heimdal KDC: Reject PA-S4U2Self with unkeyed checksum; (bso#13685); (bsc#1134024).- CVE-2019-12435: zone operations can crash rpc server; (bso#13922); (bsc#1137815).- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697). - Add ceph_snapshots VFS module; (jsc#SES-183).- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).- Update to samba-4.10.2: + CVE-2019-3870 (World writable files in Samba AD DC private/ dir); (bso#13834). + CVE-2019-3880 (Save registry file outside share as unprivileged user); (bso#13851). + py/kcc_utils: py2.6 compatibility; (bso#13837). + libcli: permit larger values of DataLength in SMB2_ENCRYPTION_CAPABILITIES of negotiate response; (bso#13869). + regfio: Improve handling of malformed registry hive files; (bso#13840). + ctdb-version: Simplify version string usage; (bso#13789). + lib: Make fd_load work for non-regular files; (bso#13859). + dbcheck: in the middle of the tombstone garbage collection causes replication failures, dbcheck: add --selftest-check-expired-tombstones cmdline option; (bso#13816). + ndr_spoolss_buf: Fix out of scope use of stack variable in NDR_SPOOLSS_PUSH_ENUM_OUT(); (bso#13818). + s4/messaging: Fix undefined reference in linking libMESSAGING-samba4.so; (bso#13854). + acl_read: Fix regression for empty lists; (bso#13836). + s4:dlz make b9_has_soa check dc=@ node; (bso#13841). + s3:client: Fix printing via smbspool backend with kerberos auth; (bso#13832). + s4:librpc: Fix installation of Samba; (bso#13847). + s3:lib: Fix the debug message for adding cache entries; (bso#13848). + s3:utils: Add 'smbstatus -L --resolve-uids' to show username; (bso#13793). + s3:lib: Fix the debug message for adding cache entries; (bso#13848). + s3:waf: Fix the detection of makdev() macro on Linux; (bso#13853). * ctdb-build: Drop creation of .distversion in tarball; (bso#13789). * ctdb-packaging: Test package requires tcpdump, ctdb package should not own system library directory; (bso#13838). - Update to samba-4.10.1: + py/kcc_utils: py2.6 compatibility; (bso#13837); + libcli: permit larger values of DataLength in SMB2_ENCRYPTION_CAPABILITIES of negotiate response; (bso#13869); + regfio: Improve handling of malformed registry hive files; (bso#13840); + ctdb-version: Simplify version string usage; (bso#13789); + lib: Make fd_load work for non-regular files; (bso#13859); + dbcheck in the middle of the tombstone garbage collection causes replication failures, dbcheck: add --selftest-check-expired-tombstones cmdline option; (bso#13816); + ndr_spoolss_buf: Fix out of scope use of stack variable in NDR_SPOOLSS_PUSH_ENUM_OUT(); (bso#13818); + s4/messaging: Fix undefined reference in linking libMESSAGING-samba4.so; (bso#13854); + acl_read: Fix regression for empty lists; (bso#13836); + s4:dlz make b9_has_soa check dc=@ node; (bso#13841); + s3:client: Fix printing via smbspool backend with kerberos auth; (bso#13832); + s4:librpc: Fix installation of Samba; (bso#13847); + s3:lib: Fix the debug message for adding cache entries; (bso#13848); + s3:utils: Add 'smbstatus -L --resolve-uids' to show username; (bso#13793); + s3:lib: Fix the debug message for adding cache entries; (bso#13848); + s3:waf: Fix the detection of makdev() macro on Linux; (bso#13853); + ctdb-build: Drop creation of .distversion in tarball; (bso#13789); + ctdb-packaging: Test package requires tcpdump, ctdb package should not own system library directory; (bso#13838); - Update to samba-4.10.0: + s4-server: Open and close a transaction on sam.ldb at startup; (bso#13760); + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812); + s4/scripting/bin: Open unicode files with utf8 encoding and write + unicode string. + sambaundoguididx: Use the right escaped oder unescaped sam ldb files; (bso#13759); + Fix idmap cache pollution with S-1-22- IDs on winbind hickup; (bso#13813); + passdb: Update ABI to 0.27.2. + lib/winbind_util: Add winbind_xid_to_sid for --without-winbind; (bso#13813); + lib:util: Move debug message for mkdir failing to log level 1; (bso#13823);- MacOS credit accounting breaks with async SESSION SETUP; (bsc#1125601); (bso#13796). - Mac OS X SMB2 implmenetation sees Input/output error or Resource temporarily unavailable and drops connection; (bso#13698)- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).- CVE-2019-3880: Save registry file outside share as unprivileged user; (bso#13851); (bsc#1131060 ).- CVE-2019-3870 pysmbd: missing restoration of original umask after umask(0); (bso#13834); (bsc#1130703);- Update to samba-4.9.5 + audit_logging: Remove debug log header and JSON Authentication: prefix; (bso#13714); + Fix upgrade from 4.7 (or earlier) to 4.9; (bso#13760); + s3: lib: nmbname: Ensure we limit the NetBIOS name correctly; (bso# CID: 1433607; (bso#11495); + smbd: uid: Don't crash if 'force group' is added to an existing share connection; (bso#13690); + s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility code; (bso#13770); + s3: SMB1 POSIX mkdir does case insensitive name lookup; (bso#13803); + s3:utils/smbget fix recursive download with empty source directories; (bso#13199); + samba-tool drs showrepl: Do not crash if no dnsHostName found; (bso#13716); + s3:libsmb: cli_smb2_list() can sometimes fail initially on a connection; (bso#13736); + join: Throw CommandError instead of Exception for simple errors; (bso#13747); + ldb: Avoid inefficient one-level searches; (bso#13762); + s3: libsmb: use smb2cli_conn_max_trans_size() in cli_smb2_list(); (bso#13736); + tldap: Avoid use after free errors; (bso#13776); + Fix idmap xid2sid cache churn; (bso#13802); + access_check_max_allowed() doesn't process "Owner Rights" ACEs; (bso#13812); + s3-smbd: Avoid assuming fsp is always intact after close_file call; (bso#13720); + s3-vfs-fruit: Add close call; (bso#13725); + s3-smbd: Use fruit:model string for mDNS registration; (bso#13746); + s3-vfs: add glusterfs_fuse vfs module; (bso#13774); + printing: Check lp_load_printers() prior to pcap cache update; (bso#13766); + vfs_ceph: vfs_ceph strict_allocate_ftruncate calls (local FS) ftruncate and fallocate; (bso#13807); + lib/audit_logging: Actually create talloc; (bso#13737); + netcmd/user: python[3]-gpgme unsupported and replaced by python[3]-gpg; (bso#13728); + dns: Changing onelevel search for wildcard to subtree; (bso#13738); + samba-tool: Don't print backtrace on simple DNS errors; (bso#13721); + sambaundoguididx: Use the right escaped oder unescaped sam ldb files; (bso#13759); + ctdb: Print locks latency in machinereadable stats; (bso#13742); + messages_dgm: Messaging gets stuck when pids are recycled; (bso#13786); + audit_logging: auth_json_audit required auth_json; (bso#13715); + man pages: Document prefork process model; (bso#13765); + CVE-2019-3824 ldb: Release ldb 1.4.6; (bso#13773); + s3:auth: ignore create_builtin_guests() failing without a valid idmap configuration; (bso#13697); + s3:auth_winbind: Ignore a missing winbindd as NT4 PDC/BDC without trusts; (bso#13722); + s3:auth_winbind: return NT_STATUS_NO_LOGON_SERVERS if winbindd is not available; (bso#13723); + s4:server: Add support for 'smbcontrol samba shutdown' and 'smbcontrol debug/debuglevel'; (bso#13752); + Python: Ensure ldb.Dn can doesn't rencoded str with py2; (bso#13616); + vfs_glusterfs: Adapt to changes in libgfapi signatures; (bso#13330); + s3-vfs: Use ENOATTR in errno comparison for getxattr; (bso#13774); + notifyd: Fix SIGBUS on sparc; (bso#13704); + waf: Check for libnscd; (bso#13787); + s3:vfs: Correctly check if OFD locks should be enabled or not; (bso#13770); + lib/util: Count a trailing line that doesn't end in a newline; (bso#13717); + Recovery lock bug fixes; (bso#13800); + s3: net: Do not set NET_FLAGS_ANONYMOUS with -k; (bso#13726); + s3:libsmb: Honor disable_netbios option in smbsock_connect_send; (bso#13727); + vfs_fileid: Fix get_connectpath_ino; (bso#13741); + vfs_fileid: Fix fsname_norootdir algorithm; (bso#13744);- Fix vfs_ceph ftruncate and fallocate handling; (bso#13807); (bsc#1127153).- Fix update-apparmor-samba-profile script after apparmor switched to using named profiles. The change is backwards compatible; (bsc#1126377);- LoadParm().load_default() fails with "Unable to load default file"; (bsc#1089758);- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);- Update to samba-4.9.4 + libcli/smb: Don't overwrite status code; (bso#9175). + wbinfo --group-info 'NT AUTHORITY\System' does not work; (bso#12164). + Session setup reauth fails to sign response; (bso#13661). + vfs_fruit: Validation of writes on AFP_AfpInfo stream; (bso#13677). + vfs_shadow_copy2: Nicely deal with attempts to open previous version for writing; (bso#13688). + Restoring previous version of stream with vfs_shadow_copy2 fails with NT_STATUS_OBJECT_NAME_INVALID fsp->base_fsp->fsp_name; (bso#13455). + CVE-2018-16853: Fix S4U2Self crash with MIT KDC build; (bso#13571). + s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs; (bso#13708) + PEP8: fix E231: missing whitespace after ','. + winbindd: Fix crash when taking profiles;(bso#13629) + CVE-2018-14629 dns: Fix CNAME loop prevention using counter regression; (bso#13600) + 'samba-tool user syscpasswords' fails on a domain with many DCs; (bso#13686). + CVE-2018-16853: Do not segfault if client is not set; (bso#13571). + lib:util: Fix DEBUGCLASS pointer initializiation; (bso#13679) + ctdb-daemon: Exit with error if a database directory does not exist; (bso#13696). + s3:libads: Add net ads leave keep-account option; (bso#13498).- Drop more %if..%endif guards which are idempotent. - Drop requires on ldconfig which are already auto-discovered. - Do not ignore errors from useradd/groupadd.- Remove python2 build dependency from samba-libs; (bsc#1116900);- Update update-apparmor-samba-profile script to ignore the shares's paths containing substitution variables in any place, not only at the beginning of the path.- Update to samba-4.9.3 + CVE-2018-14629: Unprivileged adding of CNAME record causing loop in AD Internal DNS server; (bso#13600); (bsc#1116319); + CVE-2018-16841: Double-free in Samba AD DC KDC with PKINIT; (bso#13628); (bsc#1116320); + CVE-2018-16851: NULL pointer de-reference in Samba AD DC LDAP server; (bso#13674); (bsc#1116322); + CVE-2018-16852: NULL pointer de-reference in Samba AD DC DNS servers; (bso#13669); (bsc#1116321); + CVE-2018-16853: Samba AD DC S4U2Self crash in experimental MIT Kerberos configuration (unsupported); (bso#13678); (bsc#1116324); + CVE-2018-16857: Bad password count in AD DC not always effective; window; (bso#13683); (bsc#1116323);- Update to samba-4.9.2 + dsdb: Add comments explaining the limitations of our current backlink behaviour; (bso#13418); + Fix problems running domain backups (handling SMBv2, sites); (bso#13621); + testparm: Fix crashes with PANIC: Messaging not initialized on SLES 12 SP3; (bso#13465); + Make vfs_fruit able to cleanup AppleDouble files; (bso#13642); + File saving issues with vfs_fruit on samba >= 4.8.5; (bso#13646); + Enabling vfs_fruit looses FinderInfo; (bso#13649); + Cancelling of SMB2 aio reads and writes returns wrong error NT_STATUS_INTERNAL_ERROR; (bso#13667); + Fix CTDB recovery record resurrection from inactive nodes and simplify vacuuming; (bso#13641); + examples: Fix the smb2mount build; (bso#13465); + libtevent: Fix build due to missing open_memstream on Illiumos; (bso#13629); + winbindd_cache: Fix timeout calculation for sid<->name cache; (bso#13662); + dsdb encrypted_secrets: Allow "ldb:// and "mdb://" in file path; (bso#13653); + Extended DN SID component missing for member after switching group membership; (bso#13418); + Return STATUS_SESSION_EXPIRED error encrypted, if the request was encrypted; (bso#13624); + python: Allow forced signing via smb.SMB(); (bso#13621); + lib:socket: If returning early, set ifaces; (bso#13665); + ldb: Bump ldb version to 1.4.3, Python: Ensure ldb.Dn can accept utf8 encoded unicode; (bso#13616); + smbd: Fix DELETE_ON_CLOSE behaviour on files with READ_ONLY attribute; (bso#13673); + waf: Add -fstack-clash-protection; (bso#13601); + winbind: Fix segfault if an invalid passdb backend is configured; (bso#13668); + Fix bugs in CTDB event handling; (bso#13659); + Misbehaving nodes are sometimes not banned; (bso#13670);- lib:socket: If returning early, set ifaces; (bso#13665); (bsc#1111373);- winbind requires latest version of libtevent-util0 to start- Backport latest gpo code from master + Read policy from local gpt cache + Offline policy application + Make group policy extensible via register/unregister gpext + gpext's run via a process_group_policy method- Enable profiling data collection- Change samba-kdc package name to samba-ad-dc - Move samba-ad-dc.service to the samba-ad-dc package- Update to samba-4.9.1 + s3: nmbd: Stop nmbd network announce storm; (bso#13620); + s3-rpcclient: Use spoolss_init_spoolss_UserLevel1 in winspool cmds; (bso#13597); + CTDB recovery lock has some race conditions; (bso#13617); + s3-rpc_client: Advertise Windows 7 client info; (bso#13597); + ctdb-doc: Remove PIDFILE option from ctdbd_wrapper man page; (bso#13610);- Tumbleweed doesn't define the sle_version macro, so we must include a check for suse_version also. Otherwise python3 is disabled on Tumbleweed.- Update to samba-4.9.0 + samba_dnsupdate: Honor 'dns zone scavenging' option, only update if needed; (bso#13605); + wafsamba: Fix 'make -j'; (bso#13606);- Update to samba-4.9.0rc5 + s3: VFS: vfs_full_audit: Ensure smb_fname_str_do_log() only returns absolute pathnames; (bso#13565); + s3: util: Do not take over stderr when there is no log file; (bso#13578); + Durable Reconnect fails because cookie.allow_reconnect is not set; (bso#13549); + krb5-samba: Interdomain trust uses different salt principal; (bso#13539); + vfs_fruit: Don't unlink the main file; (bso#13441); + smbd: Fix a memleak in async search ask sharemode; (bso#13602); + Fix Samba GPO issue when Trust is enabled; (bso#11517); + samba-tool: Add "virtualKerberosSalt" attribute to 'user getpassword/syncpasswords'; (bso#13539); + Fix CTDB configuration issues; (bso#13589); + ctdbd logs an error until it can successfully connect to eventd; (bso#13592);- Update to samba-4.9.0rc4 + s3: smbd: Ensure get_real_filename() copes with empty pathnames; (bso#13585); + samba domain backup online/rename commands force user to specify password on CLI; (bso#13566); + wafsamba/samba_abi: Always hide ABI symbols which must be local; (bso#13579); + Fix a panic if fruit_access_check detects a locking conflict; (bso#13584); + Fix memory and resource leaks; (bso#13567); + python: Fix print in dns_invalid.py; (bso#13580); + Aliasing issue causes incorrect IPv6 checksum; (bso#13588); + Fix CTDB configuration issues; (bso#13589); + s3: vfs: time_audit: fix handling of token_blob in smb_time_audit_offload_read_recv(); (bso#13568);- Add missing zlib-devel dependency which was previously pulled in by libopenssl-devel- Update to samba-4.9.0rc3+git.22.3fff23ae36e + CVE-2018-10858: libsmb: Harden smbc_readdir_internal() against returns from malicious servers; (bso#13453); + CVE-2018-1140: ldbsearch '(distinguishedName=abc)' and DNS query with escapes crashes, ldb: Release LDB 1.3.5 for CVE-2018-1140; (bso#13374); + CVE-2018-10918: cracknames: Fix DoS (NULL pointer de-ref) when not servicePrincipalName is set on a user; (bso#13552); + CVE-2018-10919: acl_read: Fix unauthorized attribute access via searches; (bso#13434); + ctdb_mutex_ceph_rados_helper: Set SIGINT signal handler; (bso#13540); + CVE-2018-1139 libcli/auth: Do not allow ntlmv1 over SMB1 when it is disabled via "ntlm auth"; (bso#13360); + s3-tldap: do not install test_tldap; (bso#13529); + ctdb_mutex_ceph_rados_helper: Fix deadlock via lock renewals; (bso#13540); + CVE-2018-1140 Add NULL check for ldb_dn_get_casefold() in ltdb_index_dn_attr(); (bso#13374); + ctdb-eventd: Fix CID 1438155; (bso#13554); + Fix CIDs 1438243, (Unchecked return value) 1438244 (Unsigned compared against 0), 1438245 (Dereference before null check) and 1438246 (Unchecked return value); (bso#13553); + ctdb: Fix a cut&paste error; (bso#13554); + systemd: Only start smb when network interfaces are up; (bso#13559); + Fix quotas don't work with SMB2; (bso#13553); + s3/smbd: Ensure quota code is only called when quota support detected; (bso#13563); + s3/libsmb: Explicitly set delete_on_close token for rmdir; (bso#13204); + s3:waf: Install eventlogadm to /usr/sbin; (bso#13561); + Shorten description in vfs_linux_xfs_sgid manual; (bso#13562);- Update to samba-4.9.0rc2+git.21.a1069afb007 + s3: smbd: Using "sendfile = yes" with SMB2 can cause CPU spin; (bso#13537); + s3: smbd: Fix path check in smbd_smb2_create_durable_lease_check(); (bso#13535); + samba-tool trust: Support discovery via netr_GetDcName; (bso#13538); + s4-dsdb: Only build dsdb Python modules for AD DC; (bso#13542); + Fix portability issues on freebsd; (bso#13520); + DNS wildcard search does not handle multiple labels correctly; (bso#13536); + samba-tool domain trust: Fix trust compatibility to Windows Server 1709 and FreeIPA; (bso#13308); + Fix portability issues on freebsd; (bso#13520); + ctdb-protocol: Fix CTDB compilation issues; (bso#13545); + ctdb-docs: Replace obsolete reference to CTDB_DEBUG_HUNG_SCRIPT option; (bso#13546); + ctdb-doc: Provide an example script for migrating old configuration; (bso#13550); + ctdb-event: Implement event tool "script list" command; (bso#13551);- Update to samba-4.8.4+git.37.a7a861d7982; + CVE-2018-1139: Weak authentication protocol allowed; (bsc#1095048); (bsc#13360); + CVE-2018-1140: Denial of Service Attack on DNS and LDAP server; (bsc#1095056); (bso#13466); (bso#13374); + CVE-2018-10858: Insufficient input validation on client directory listing in libsmbclient; (bsc#1103411); (bso#13453); + CVE-2018-10918: Denial of Service Attack on AD DC DRSUAPI server; (bsc#1103414); (bso#13552); + CVE-2018-10919: Confidential attribute disclosure from the AD LDAP server; (bsc#1095057); (bso#13434); + s3:winbind: winbind normalize names' doesn't work for users; (bso#12851); + winbind: Fix UPN handling in canonicalize_username(); (bso#13369); + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428); + samdb: Fix building Samba with gcc 8.1; (bso#13437); + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440); + smbd: Flush dfree memcache on service reload; (bso#13446); + ldb: Save a copy of the index result before calling the + lib/util: No Backtrace given by Samba's AD DC by default; (bso#13454). + s3: smbd: printing: Re-implement delete-on-close semantics for print files missing since 3.5.x; (bso#13457). + python: Fix talloc frame use in make_simple_acl(); (bso#13474). + krb5_wrap: Fix keep_old_entries logic for older Kerberos libraries;(bso#13478). + krb5_plugin: Add winbind localauth plugin for MIT Kerberos; (bso#13480).- Add missing package descriptions; (bsc#1093864); - Fix dependency issue between samba-python and samba-kdc; (bsc#1062876); - Call update-apparmor-samba-profile when running samba-ad-dc; (bsc#1092099);- Update to 4.8.2 + After update to 4.8.0 DC failed with "Failed to find our own NTDS Settings objectGUID" (bso#13335). + fix incorrect reporting of stream dos attributes on a directory (bso#13380). + vfs_ceph: add asynchronous fsync; fake synchronous call (bso#13412). + vfs_ceph: add fake async pwrite/pread send/recv hooks; (bso#13425) + vfs_ceph: Fix memory leak; (bso#13424). + libsmbclient: Fix hard-coded connection error return of ETIMEDOUT; (bso#13419). + s4-lsa: Fix use-after-free in LSA server; (bso#13420). + winbindd: Do re-connect if the RPC call fails in the passdb case; (bso#13430). + cleanupd: Sends MSG_SMB_UNLOCK twice to interested peers; (bso#13416). + cleanupd: Use MSG_SMB_BRL_VALIDATE to signal cleanupd unclean process shutdown; (bso#13414). + ctdb-client: Remove ununsed functions from old client code; (bso#13411). + printing: Return the same error code as windows does on upload failures; (bso#13395). + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged pipe is not accessable; (bso#13400). + s4:lsa_lookup: remove TALLOC_FREE(state) after all dcesrv_lsa_Lookup{Names,Sids}_base_map() calls; (bso#13420). + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407). + s3:smbspool: Fix cmdline argument handling; (bso#13417).- Move libdfs-server-ad-samba4.so library from kdc to libs package, as it is required by some client libs; (bsc#1074135); - Update to 4.8.1; (bsc#1091179); + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error, we don't own it here; (bso#13244); + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't support fdopendir(); (bso#13270); + Round-tripping ACL get/set through vfs_fruit will increase the number of ACE entries without limit; (bso#13319); + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit issues; (bso#13347); + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without delete access; (bso#13358); + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372); + s3: smbd: Unix extensions attempts to change wrong field in fchown call; (bso#13375); + ms_schema/samba-tool visualize: Fix python2.6 incompatibility; (bso#13337); + Fix invocation of gnutls_aead_cipher_encrypt(); (bso#13352); + Windows 10 cannot logon on Samba NT4 domain; (bso#13328); + winbindd: Recover loss of netlogon secure channel in case the peer DC is rebooted; (bso#13332); + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363); + ctdb-client: Fix bugs in client code; (bso#13356); + ctdb-scripts: Drop "net serverid wipe" from 50.samba event script; (bso#13359); + s3: lib: messages: Don't use the result of sec_init() before calling sec_init(); (bso#13368); + libads: Fix the build '--without-ads'; (bso#13273); + winbind: Keep "force_reauth" in invalidate_cm_connection, add 'smbcontrol disconnect-dc'; (bso#13332); + vfs_virusfilter: Fix CIDs 1428738-1428740; (bso#13343); + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367); + rpc_server: Fix core dump in dfsgetinfo; (bso#13370); + smbclient: Fix notify; (bso#13382); + Fix smbd panic if the client-supplied channel sequence number wraps; (bso#13215); + Windows 10 cannot logon on Samba NT4 domain; (bso#13328); + lib/util: Remove unused '#include ' from tests/tfork.c; (bso#13342); + Fix build errors with cc from developerstudio 12.5 on Solaris; (bso#13343); + Fix the picky-developer build on FreeBSD 11; (bso#13344); + s3:modules: Fix the build of vfs_aixacl2.c; (bso#13345); + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338); + lib:replace: Fix linking when libtirpc-devel overwrites system headers; (bso#13341); + winbindd: 'wbinfo --name-to-sid' returns misleading result on invalid query; (bso#13312); + s3:passdb: Do not return OK if we don't have pinfo set up; (bso#13376); + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);- Use new foreground execution flags for systemd samba daemons; (bsc#1088574); (bsc#1071090); (bsc#1065551); + Add %post scriptlet to clear old sysconfig flags - Update vendor-files to commit 880b3e7. + Set samba sysconfig template variables to "" + Add required daemon flags directly to systemd unit- Specfile cleanup + Remove %if..%endif guards which don't affect the build + Remove redundant %clean section + Replace old $RPM_* shell vars with macros- BuildRequire pkgconfig(systemd) and pkgconfig(libsystemd) in place of systemd and systemd-devel: Allow OBS to optimize the workload by allowing the usage of the 'build-optimized' systemd packages.- Enable building samba with python3, and create a samba-python3 package.- Update to 4.8 + New GUID Index mode in sam.ldb for the AD DC + GPO support for samba KDC + Time machine support with vfs_fruit + Encrypted secrets + AD Replication visualization + Improved trust support - ability to not scan global trust list - AD external trusts have limited support - verbose trusted domain listing + VirusFilter VFS module + NT4-style replication removed + vfs_aio_linux removed- Disable samba-pidl package, due to the removal of dependency perl-Parse-Yapp; (bsc#1085150);- Update to 4.7.6; + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally; (bso#11343); (bsc#1081741); + CVE-2018-1057: Authenticated users can change other users' password; (bso#13272); (bsc#1081024).- Disable python until full python3 port is done; (bsc#1082139); + Remove contents of package samba-python + Remove contents of package libsamba-policy0 + Remove contents of package libsamba-policy-devel + Remove library libsamba-python-samba4.so from samba-libs package + Remove library libsamba-net-samba4.so from samba-libs package + Remove smbtorture binary and manpage from samba-test- samba fails to build with glibc2.27; (bsc#1081042);- Update to 4.7.5; (bsc#1080545); + smbd tries to release not leased oplock during oplock II downgrade; (bso#13193); + Fix copying file with empty FinderInfo from Windows client to Samba share with fruit; (bso#13181); + build: Deal with recent glibc sunrpc header removal; (bso#10976); + Make Samba work with tirpc and libnsl2; (bso#13238); + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208); (bsc#1075206); + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue; (bso#12986); + ctdb-recovery-helper: Deregister message handler in error paths; (bso#13188); + samba: Only use async signal-safe functions in signal handler; (bso#13240); + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue; (bso#12986); + repl_meta_data: Fix linked attribute corruption on databases with unsorted links on expunge. dbcheck: Add functionality to fix the corrupt database; (bso#13228); + Fix smbd panic when chdir returns error during exit; (bso#13189); + Make Samba work with tirpc and libnsl2; (bso#13238); + Fix POSIX ACL support on HPUX and possibly other big-endian OSs; (bso#13176);- Update to 4.7.4; (bsc#1080545); + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140); + s3: libsmb: Fix valgrind read-after-free error in cli_smb2_close_fnum_recv(); (bso#13171); + s3: libsmb: Fix reversing of oldname/newname paths when creating a reparse point symlink on Windows from smbclient; (bso#13172); + Build man page for vfs_zfsacl.8 with Samba; (bso#12934); + repl_meta_data: Allow delete of an object with dangling backlinks; (bso#13095); + s4:samba: Fix default to be running samba as a deamon; (bso#13129); + Performance regression in DNS server with introduction of DNS wildcard, ldb: Release 1.2.3; (bso#13191); + vfs_zfsacl: Fix compilation error; (bso#6133); + "smb encrypt" setting changes are not fully applied until full smbd restart; (bso#13051); + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052); + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155); + winbindd: Dependency on trusted-domain list in winbindd in critical auth codepath; (bso#13173); + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120); + ctdb: sock_daemon leaks memory; (bso#13153); + TCP tickles not getting synchronised on CTDB restart; (bso#13154); + winbindd: winbind parent and child share a ctdb connection; (bso#13150); + pthreadpool: Fix deadlock; (bso#13170); + pthreadpool: Fix starvation after fork; (bso#13179); + messaging: Always register the unique id; (bso#13180); + s4/smbd: set the process group; (bso#13129); + Fix broken linked attribute handling; (bso#13095); + The KDC on an RWDC doesn't send error replies in some situations; (bso#13132); + libnet_join: Fix 'net rpc oldjoin'; (bso#13149); + g_lock conflict detection broken when processing stale entries; (bso#13195); + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired sessions; (bso#13197); + s3:libads: net ads keytab list fails with "Key table name malformed"; (bso#13166); (bsc#1067700); + Fix crash in pthreadpool thread after failure from pthread_create; (bso#13170); + s4:samba: Allow samba daemon to run in foreground; (bso#13129); (bsc#1065551); + third_party: Link the aesni-intel library with "-z noexecstack"; (bso#13174); + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I" options; (bso#13125);- Re-enable usage of libnsl (did got lost with glibc change) - Use TI-RPC (sunrpc is deprecated and will be removed soon from glibc)- smbc_opendir should not return EEXIST with invalid login credentials; (bnc#1065868).- Update to 4.7.3; (bsc#1069666); + Non-smbd processes using kernel oplocks can hang smbd; (bso#13121); + python: use communicate to fix Popen deadlock; (bso#13127); + smbd on disk file corruption bug under heavy threaded load; (bso#13130); + tevent: version 0.9.34; (bso#13130); + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118); + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug; (bsc#1060427);(bso#13041); + CVE-2017-15275: s3: smbd: Chain code can return uninitialized memory when talloc buffer is grown; (bsc#1063008); (bso#13077); - Build with AD DC support only in openSUSE.- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- samba-tool requires samba-python; (bnc#1067771).- Run all daemons in the foreground and let systemd handle it; (bsc#1065551). - Update to 4.7.1; + Fix exporting subdirs with shadow_copy2; (bso#13091); + Currently if getwd() fails after a chdir(), we panic; (bso#13027); + Ensure default SMB_VFS_GETWD() call can't return a partially completed struct smb_filename; (bso#13068); + sys_getwd() can leak memory or possibly return the wrong errno on older systems; (bso#13069); + smbclient doesn't correctly canonicalize all local names before use; (bso#13093); + Fix broken linked attribute handling; (bso#13095); + Missing LDAP query escapes in DNS rpc server; (bso#12994); + Link to -lbsd when building replace.c by hand; (bso#13087); + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem; (bso#6133); + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module; (bso#7909); + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module; (bso#7933); + Missing assignment in sl_pack_float; (bso#12991); + Wrong Samba access checks when changing DOS attributes; (bso#12995); + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062); + groupmap cleanup should not delete BUILTIN mappings; (bso#13065); + Enabling vfs_fruit results in loss of Finder tags and other xattrs; (bso#13076); + man pages: Properly ident lists; (bso#9613); + smb.conf.5: Sort parameters alphabetically; (bso#13081); + Fix GUID string format on GetPrinter info; (bso#12993); + Remote serverid check doesn't check for the unique id; (bso#13042); + CTDB starts consuming memory if there are dead nodes in the cluster; (bso#13056); + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070); + libgpo doesn't sort the GPOs in the correct order; (bso#13046); + Remote serverid check doesn't check for the unique id; (bso#13042); + vfs_catia: Fix a potential memleak; (bso#13090); + Fix file change notification for renames; (bso#12903); + Samba DNS server does not honour wildcards; (bso#12952); + Can't change password in samba from a Windows client if Samba runs on IPv6 only interface; (bso#13079); + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086); + Apple client can't cope with SMB2 async replies when creating symlinks; (bso#13047); + s4:rpc_server:backupkey: Move variable into scope; (bso#12959); + Fix ntstatus_gen.h generation on 32bit; (bso#13099); + Fix a double free in vfs_gluster_getwd(); (bso#13100); + Fix resouce leaks and pointer issues; (bso#13101); + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);- Add samba-kdc to baselibs.conf. - Do not wrap samba-kdc's package definition into if/endif: the package won't be generated simply based on the fact that there is no files section for the package. Allows the source validator to ensure samba-kdc is a built package.- Update to 4.7.0; + Whole DB read locks: Improved LDAP and replication consistency; (bso#12858). + Samba AD with MIT Kerberos + Dynamic RPC port range: Default range changed from "1024-1300" to "49152-65535". + Authentication and Authorization audit support: New auth_audit debug class. + Multi-process LDAP Server: The LDAP server in the AD DC now honours the process model used for the rest of the 'samba' process. + Improved Read-Only Domain Controller (RODC) Support; (bso#12977). + Additional password hashes stored in supplementalCredentials. + Improvements to DNS during Active Directory domain join. + Significant AD performance and replication improvements. + Query record for open file or directory. + Removal of lpcfg_register_defaults_hook(). + Change of loadable module interface. + SHA256 LDAPS Certificates: The self-signed certificate generated for use on LDAPS will now be generated with a SHA256 self-signature, not a SHA1 self-signature. + CTDB no longer allows mixed minor versions in a cluster. + CTDB now ignores hints from Samba about TDB flags when attaching to databases. + New configuration variable CTDB_NFS_CHECKS_DIR. + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed. + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed. + The example NFS Ganesha call-out has been improved. + A new "replicated" database type is available.- CVE-2017-12163: Prevent client short SMB1 write from writing server memory to file; (bso#13020); (bsc#1058624).- CVE-2017-12150: Some code path don't enforce smb signing, when they should; (bso#12997); (bsc#1058622).- CVE-2017-12151: Keep required encryption across SMB3 dfs redirects; (bso#12996); (bsc#1058565).- Clean specfile assuming SUSE-only system and product >=SLE11 + %{ul_version}, %{rhel_version}, %{mandriva_version}, %{centos_version} are always undefined + %{_vendor} is "suse" and %{suse_version} is at least 1100- Update to 4.6.7; (bsc#1054017) + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392). + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937). + vfs_ceph provides inconsistent directory listings; (bso#12911). + Misused talloc context can cause a user to crash their smbd by chaining SMB1 commands.; (bso#12836). + Use-after free can crash libsmbclient code.; (bso#12927). + Server exit with active AIO can crash.; (bso#12925). + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910). + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs; (bso#12898). + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897). + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for authentication; (bso#12886). + finder sidebar showing question mark instead of icon when using ip to connect with vfs_fruit; (bso#12840). + Winbind stops obtaining the 'unixHomeDirectory' & 'loginShell' attributes from AD.; (bso#12720). + KCC run at selftest startup can fail spuriously due to a race; (bso#12869). + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for the remote change; (bso#12782). + rpc_pipe_client memory leaks due to long term memory context passed to rpc_pipe_open_interface(); (bso#12890). + CVE-2017-2619 breaks accessing previous versions of directories with snapshots in subdirectories of the share; (bso#12885). + dns_name_equal doing OOB read; (bso#12813). + replica_sync tests flap; (bso#12753). + Selftest should not call 'net cache flush' and wipe important winbind entries; (bso#12868). + Old Samba versions don't support using recent ldb versions (>=1.1.30); (bso#12859). + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490). + race starting winbindd against posixacl test; (bso#12843). + Crash in the reentrant smbd_smb2_create_send() if the something fails in the subsequent try; (bso#12832). + spnego.c passes the wrong argument order to gensec_update_ev() for the FALLBACK case; (bso#12788). + Clients with SMB3 support can't connect with "server max protocol = SMB2_02"; (bso#12772). + A log message of samb-tool user syncpasswords reverses string arguments in a debug message "Call Popen[...".; (bso#12768). + The smb tarmode tests kills the share dir contents; (bso#12867). + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862). + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860). + manpage/index.html lists links not in alphabetical order; (bso#12854). + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831). + If a record is locked in a database, then recovery does not complete; (bso#12857). + debug_locks.sh script does not log any information; (bso#12856). + SIGSEGV in cm_connect_lsa_tcp dereferencing conn->lsa_tcp_pipe->transport after error; (bso#12852). + smbclient can't parse DOMAIN+username if a different winbind separator is used; (bso#12849). + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845). + Related requests with TreeConnect fail with NETWORK_NAME_DELETED; (bso#12844). + cli->server_os not filled correctly; (bso#12779). + REGRESSION: smbclient doesn't print the session setup anymore; (bso#12824). + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808). + CTDB NFS call-out failures do not cause event failures; (bso#12837). + net command fails due to incorrectly return code; (bso#12828). + Fix building Samba with GCC 7.1; (bso#12827).- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again; (bsc#1048339).- fix cephwrap_chdir(); (bsc#1048790). - Update to 4.6.6 + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation; (bsc#1048278).- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).- Fix inconsistent ctdb socket path; (bsc#1048352). - Fix non-admin cephx authentication; (bsc#1048387).- Update to 4.6.5; (bsc#1040157) + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at startup; (bso#12814). + vfs_expand_msdfs tries to open the remote address as a file path; (bso#12687). + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type); (bso#12798). + With clustering get update_num_read_oplocks failed and PANIC: num_share_modes == 1 assertion failure; (bso#11844). + contend_level2_oplocks_begin_default oplock optimisation doesn't carry over to leases; (bso#12766). + `ctdb nodestatus` incorrectly displays status for all nodes with wrong exit code; (bso#12802). + CTDB can spin hard on revoking readonly delegations if a node becomes disconnected; (bso#12697). + Printing a share mode entry with leases can crash in the ndr code; (bso#12793). + Fix flakey unit tests for eventd; (bso#12792). + CTDB daemon crashes if built with clang; (bso#12770). + smbcacls fails if no password is specified; (bso#12765). + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757). + samba-tool user syncpasswords doesn't trigger the script when a user gets removed; (bso#12767). + systemd: fix detection of libsystemd; (bso#12764). + Notify subsystem only maps first inotify mask to Windows notify filter; (bso#12760). + Allow passing trusted domain password as plain-text to PASSDB layer; (bso#12751). + Can't case-rename files with vfs_fruit; (bso#12749). + wrong sid->uid mapping for SIDs residing in sIDHistory; (bso#12702). + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562). + Ordering of notify responses broken; (bso#12756).- s3: libsmb: Fix error where short name length was read as 2 bytes, should be 1; (bso#11822); (bsc#1042419).- Revert explicit winbind %{version}-%{release} dependency. + The ABI has stabilized since (bsc#936909), so remove to fix cross-media dependencies; (bsc#1037899).- Fix CVE-2017-7494 remote code execution from a writable share; (bso#12780); (bsc#1038231).- Update to 4.6.3; (bsc#1036011) + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots from shares with GlusterFS backend; (bso#12743). + Fix for Solaris C compiler; (bso#12559). + s3: locking: Update oplock optimization for the leases era; (bso#12628). + Make the Solaris C compiler happy; (bso#12693). + s3: libgpo: Allow skipping GPO objects that don't have the expected LDAP attributes; (bso#12695). + Fix buffer overflow caused by wrong use of getgroups; (bso#12747). + lib: debug: Avoid negative array access; (bso#12746). + cleanupdb: Fix a memory read error; (bso#12748). + streams_xattr and kernel oplocks results in NT_STATUS_NETWORK_BUSY; (bso#7537). + winbindd: idmap_autorid allocates ids for unknown SIDs from other backends; (bso#11961). + vfs_fruit: Resource fork open request with flags=O_CREAT|O_RDONLY; (bso#12565). + manpages/vfs_fruit: Document global options; (bso#12615). + lib/pthreadpool: Fix a memory leak; (bso#12624). + Lookup-domain for well-known SIDs on a DC; (bso#12727). + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728). + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729). + credentials_krb5: use gss_acquire_cred for client-side GSSAPI use case; (bso#12611). + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690). + ctdb-readonly: Avoid a tight loop waiting for revoke to complete; (bso#12697). + ctdb_event monitor command crashes if event is not specified; (bso#12723). + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733). + smbd: Fix smb1 findfirst with DFS; (bso#12558). + smbd: Do an early exit on negprot failure; (bso#12610). + winbindd: Fix substitution for 'template homedir'; (bso#12699). + s4:kdc: Disable principal based autodetected referral detection; (bso#12554). + idmap_autorid: Allocate new domain range if the callers knows the sid is valid; (bso#12613). + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724). + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for trusted domain; (bso#12725). + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731). + winbindd: Fix password policy for pam authentication; (bso#12725). + s3:gse: Correctly handle external trusts with MIT; (bso#12554). + auth/credentials: Always set the realm if we set the principal from the ccache; (bso#12611). + replace: Include sysmacros.h; (bso#12686). + s3:vfs_expand_msdfs: Do not open the remote address as a file; (bso#12687). + s3:libsmb: Only print error message if kerberos use is forced; (bso#12704). + winbindd: Child process crashes when kerberos-authenticating a user with wrong password; (bso#12708). + vfs_fruit: Office document opens as read-only on macOS due to CNID semantics; (bso#12715). + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is fragmented; (bso#12737).- Generate and update vendor-files tarball from Git + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).- Generate source tarball directly from Git using OBS tar_scm + use version string derived from parent Git tag and commit hash - remove obsolete vendor-files/tools/package-data version ID + explicitly generate ctdb manpages, needed without "make dist"- Update to 4.6.2 + remove bso#12721 patches now upstream- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622). + x86-64 and aarch64- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).- Build and install the html man pages (bsc#1021907).- Fix CVE-2017-2619 regression with "follow symlinks = no"; (bso#12721).- Update to 4.6.1 + symlink race permits opening files outside share directory; CVE-2017-2619; (bso#12496); (bsc#1027147) + testparm checks for valid idmap parameters + add new krb client encryption types + support for printer driver upload from windows 10 + inherit owner = 'unix only' for improved quota support + improved CTDB event support + new primary group support for idmap_ad + idmap_hash deprecated + mvxattr added to recursively rename extended attributes- Remove chkconfig requirements for systemd systems- Don't call insserv if systemd is used- Fix check if we need to require insserv- async_req: make async_connect_send() "reentrant"; (bso#12105); (bsc#1024416).- Force usage of ncurses6-config thru NCURSES_CONFIG env var; (bsc#1023847).- add missing patch for libnss_wins segfault; (bsc#995730).- Fix vfs_ceph builds against recent Ceph versions; (bsc#1021933).- Document "winbind: ignore domains" parameter; (bsc#1019416).- Add base Samba dependency to samba-ceph package.- Update to 4.5.3 + Heap-based Buffer Overflow Remote Code Execution Vulnerability; CVE-2016-2123; (bso#12409); (bsc#1014437). + Don't send delegated credentials to all servers; CVE-2016-2125; (bso#12445); (bsc#1014441). + denial of service due to a client triggered crash in the winbindd parent process; CVE-2016-2126; (bso#12446); (bsc#1014442). - 4.5.1 and 4.5.2 updates + various streams vfs fixes + various printing fixes + ntlm_auth: do not map explicitly empty domain + various stability fixes in smbd + match file compression ReFS behavior- Add missing ldb module directory; (bnc#1012092).- s3/client: obey 'disable netbios' smb.conf param, don't connect via NBT port; (bsc#1009085); (bso#12418).- Include vfstest in samba-test; (bsc#1001203).- s3/winbindd: using default domain with user@domain.com format fails; (bsc#997833).- Fix segfault in libnss_wins; (bso#12277); (bso#12269); (bsc#995730).- Update to 4.5.0 + NTLM1 Authentication disabled by default + SMB2.1 leases enabled by default + Support for OFD locks + ctdb tool rewritten + Added shadow copy snapshot prefix parameter- Fix illegal memory access after memory has been deleted; (bso#11836); (bsc#975299).- Prevent core, make sure response->extra_data.data is always cleared out; (bsc#993692).- Don't package man pages for VFS modules that aren't built; (boo#993707).- Fix population of ctdb sysconfig after source merge; (bsc#981566).- Enable vfs_ceph builds for Factory (x86-64) + Package as samba-ceph to avoid Ceph dependency in base package.- Update to 4.4.5 + Prevent client-side SMB2 signing downgrade; CVE-2016-2119; (bso#11860); (bsc#986869).- Remove obsolete syslog.target; (bsc#983938).- Honor smb.conf socket options in winbind; (bsc#975131).- Don't use htons() with IP_PROTO_RAW; (bso#11705); (bsc#969522).- Update to 4.4.4 + SMB3 multichannel: Add implementation of missing channel sequence number verification; (bso#11809). + smbd:close: Only remove kernel share modes if they had been taken at open; (bso#11919). + notifyd: Prevent NULL deref segfault in notifyd_peer_destructor; (bso#11930). + s3:rpcclient: Make '--pw-nt-hash' option work; (bso#10796). + Fix case sensitivity issues over SMB2 or above; (bso#11438). + s3:smbd: Fix anonymous authentication if signing is mandatory. (bso#11910) + Fix NTLM Authentication issue with squid; (bso#11914). + pdb: Fix segfault in pdb_ldap for missing gecos; (bso#11530). + Fix memory leak in share mode locking; (bso#11934).- Update to 4.4.3 + Various post-badlock regressions; (bso#11841); (bso#11850); (bso#11858); (bso#11870); (bso#11872). + Only allow idmap_hash for default idmap config (bso#11786). + smbd: Avoid large reads beyond EOF; (bso#11878). + vfs_acl_common: Avoid setting POSIX ACLs if "ignore system acls" is set; (bso#11806). + libads: Record session expiry for spnego sasl binds; (bso#11852).- Fix NTLMSSP regressions caused by previous CVE fixes; (bso#11849); (bsc#975962); (bsc#979268), (bsc#977669).- Revert shared library packaging to comply with SLPP- Update to 4.4.2 + A man-in-the-middle can downgrade NTLMSSP authentication; CVE-2016-2110; (bso#11688); (bsc#973031). + Domain controller netlogon member computer can be spoofed; CVE-2016-2111; (bso#11749); (bsc#973032). + LDAP conenctions vulnerable to downgrade and MITM attack; CVE-2016-2112; (bso#11644); (bsc#973033). + TLS certificate validation missing; CVE-2016-2113; (bso#11752); (bsc#973034). + Named pipe IPC vulnerable to MITM attacks; CVE-2016-2115; (bso#11756); (bsc#973036). + "Badlock" DCERPC impersonation of authenticated account possible; CVE-2016-2118; (bso#11804); (bsc#971965). + DCERPC server and client vulnerable to DOS and MITM attacks; CVE-2015-5370; (bso#11344); (bsc#936862).- Fix samba.tests.messaging test and prevent potential tdb corruption by removing obsolete now invalid tdb_close call; (bsc#974629).- Obsolete libsmbclient from libsmbclient0 while not providing it; (bsc#972197).- Update to 4.4.0. + Read of uninitialized memory DNS TXT handling; (bso#11128); (bso#11686); CVE-2016-0771. + Getting and setting Windows ACLs on symlinks can change permissions on link target; (bso#11648); CVE-2015-7560. + Sockets with htons(IPPROTO_RAW); (bso#11705); CVE-2015-8543. + s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystem with no ACL support; (bso#10489). + docs: Add example for domain logins to smbspool man page; (bso#11643). + smbd: Show correct disk size for different quota and dfree block sizes; (bso#11681). + docs: Add smbspool_krb5_wrapper manpage; (bso#11690). + winbindd: Return trust parameters when listing trusts; (bso#11691). + ctdb: Do not provide a useless pkgconfig file for ctdb; (bso#11696). + Crypto.Cipher.ARC4 is not available on some platforms, fallback to M2Crypto.RC4.RC4 then; (bso#11699). + s3:utils/smbget: Set default blocksize; (bso#11700). + Streamline 'smbget' options with the rest of the Samba utils; (bso#11700). + s3:clispnego: Fix confusing warning in spnego_gen_krb5_wrap(); (bso#11702). + s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703). + loadparm: Fix memory leak issue; (bso#11708). + lib/tsocket: Work around sockets not supporting FIONREAD; (bso#11714). + s3:vfs:glusterfs: Fix build after quota changes; (bso#11715). + ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ..."; (bso#11719). + lib:socket: Fix CID 1350010: Integer OVERFLOW_BEFORE_WIDEN; (bso#11723). + smbd: Fix CID 1351215 Improper use of negative value; (bso#11724). + smbd: Fix CID 1351216 Dereference null return value; (bso#11725). + s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new file; (bso#11727). + docs: Add manpage for cifsdd; (bso#11730). + param: Fix str_list_v3 to accept ; again; (bso#11732). + lib/socket: Fix improper use of default interface speed; (bso#11734). + lib:socket: Fix CID 1350009: Fix illegal memory accesses (BUFFER_SIZE_WARNING); (bso#11735). + libcli: Fix debug message, print sid string for new_ace trustee; (bso#11738). + Fix installation path of Samba helper binaries; (bso#11739). + Fix memory leak in loadparm; (bso#11740). + tevent: version 0.9.28: Fix memory leak when old signal action restored; (bso#11742). + smbd: Ignore SVHDX create context; (bso#11753). + Fix net join; (bso#11755). + s3:libads: setup the msDS-SupportedEncryptionTypes attribute on ldap_add; (bso#11755). + passdb: Add linefeed to debug message; (bso#11763). + s3:utils/smbget: Fix option parsing; (bso#11767). + libnet: Make Kerberos domain join site-aware; (bso#11769). + Reset TCP Connections during IP failover; (bso#11770). + ldb: Version 1.1.26; (bso#11772). + s3:smbd: Add negprot remote arch detection for OSX; (bso#11773). + vfs_glusterfs: Fix use after free in AIO callback; (bso#11774). + mkdir can return ACCESS_DENIED incorrectly on create race; (bso#11780). + "trustdom_list_done: Got invalid trustdom response" message should be avoided; (bso#11782). + Mismatch between local and remote attribute ids lets replication fail with custom schema; (bso#11783). + Quota is not supported on Solaris 10; (bso#11788). + Talloc: Version 2.1.6; (bso#11789). + smbd: Enable multi-channel if 'server multi channel support = yes' in the config; (bso#11796). + build: Fix build when '--without-quota' specified; (bso#11798). + lib/socket/interfaces: Fix some uninitialied bytes; (bso#11802). + Access based share enum: handle permission set in configuration files; (bso#8093). + See also WHATSNEW.txt from the samba-doc package.- Update to 4.3.6. + Getting and setting Windows ACLs on symlinks can change permissions on link target; CVE-2015-7560; (bso#11648); (bsc#968222). + Fix Out-of-bounds read in internal DNS server; CVE-2016-0771; (bso#11128); (bso#11686); (bsc#968223).- Upgrade on-disk FSRVP server state to new version; (bsc#924519).- Only obsolete but do not provide gplv2/3 package names; (bsc#968973).- Relocate existing lock files to /var/lib/samba/lock; (bsc#968963).- Obsolete no longer existing samba-32bit package; (bsc#967625).- Update to 4.3.5. + s3:utils/smbget: Fix recursive download; (bso#6482). + s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystemi with no ACL support; (bso#10489). + s3:smbd/oplock: Obey kernel oplock setting when releasing oplocks; (bso#11400). + vfs_shadow_copy2: Fix case where snapshots are outside the share; (bso#11580). + smbclient: Query disk usage relative to current directory; (bso#11662). + winbindd: Handle expired sessions correctly; (bso#11670). + smbd: Show correct disk size for different quota and dfree block sizes; (bso#11681). + smbcacls: Fix uninitialized variable; (bso#11682). + s3:smbd: Ignore initial allocation size for directory creation; (bso#11684). + s3-client: Add a KRB5 wrapper for smbspool; (bso#11690). + s3-parm: Clean up defaults when removing global parameters; (bso#11693). + Use M2Crypto.RC4.RC4 on platforms without Crypto.Cipher.ARC4; (bso#11699). + s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703). + ctdb: Remove error messages after kernel security update; CVE-2015-8543; (bso#11705). + loadparm: Fix memory leak issue; (bso#11708). + lib/tsocket: Work around sockets not supporting FIONREAD; (bso#11714). + ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ..."; (bso#11719). + s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new file; (bso#11727). + param: Fix str_list_v3 to accept ";" again; (bso#11732).- Shift samba-client sysconfig data into samba and samba-winbind; (bsc#947361).- Simplify shared library packaging; (bsc#966956).- Enable clustering (CTDB) support; (bsc#966271).- s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703); (bsc#964023).- Add quotes around path of update-apparmor-samba-profile; (bnc#962177).- Remove autoconf build-time requirement.- Update to 4.3.4. + vfs_fruit: Enable POSIX directory rename semantics; (bso#11065). + Crash: Bad talloc magic value - access after free; (bso#11394). + Copying files with vfs_fruit fails when using vfs_streams_xattr without stream prefix and type suffix; (bso#11466). + samba-tool: Fix uncaught exception if no fSMORoleOwner attribute is given; (bso#11613). + Fix a typo in the smb.conf manpage, explanation of idmap config; (bso#11619). + Correctly initialize the list head when keeping a list of primary followed by DFS connections; (bso#11624). + Reduce the memory footprint of empty string options; (bso#11625). + lib/async_req: Do not install async_connect_send_test; (bso#11639). + Fix typos in man vfs_gpfs; (bso#11641). + Make "hide dot files" option work with "store dos attributes = yes"; (bso#11645). + Fix a corner case of the symlink verification; (bso#11647); (bnc#960249). + Do not disable "store dos attributes" on-the-fly; (bso#11649). + Update lastLogon and lastLogonTimestamp; (bso#11659).- Prevent access denied if the share path is "/"; (bso#11647); (bnc#960249).- Update to 4.3.3. + Malicious request can cause Samba LDAP server to hang, spinning using CPU; CVE-2015-3223; (bso#11325); (bnc#958581). + Remote read memory exploit in LDB; CVE-2015-5330; (bso#11599); (bnc#958586). + Insufficient symlink verification (file access outside the share); CVE-2015-5252; (bso#11395); (bnc#958582). + No man in the middle protection when forcing smb encryption on the client side; CVE-2015-5296; (bso#11536); (bnc#958584). + Currently the snapshot browsing is not secure thru windows previous version (shadow_copy2); CVE-2015-5299; (bso#11529); (bnc#958583). + Fix Microsoft MS15-096 to prevent machine accounts from being changed into user accounts; CVE-2015-8467; (bso#11552); (bnc#958585).- Update to 4.3.2. + vfs_gpfs: Re-enable share modes; (bso#11243). + dcerpc.idl: Accept invalid dcerpc_bind_nak pdus; (bso#11327). + s3-smbd: Fix old DOS client doing wildcard delete - gives an attribute type of zero; (bso#11452). + Add libreplace dependency to texpect, fixes a linking error on Solaris; (bso#11511). + s4: Fix linking of 'smbtorture' on Solaris; (bso#11512). + s4:lib/messaging: Use correct path for names.tdb; (bso#11562). + Fix segfault of 'net ads (join|leave) -S INVALID' with nss_wins; (bso#11563). + async_req: Fix non-blocking connect(); (bso#11564). + auth: gensec: Fix a memory leak; (bso#11565). + lib: util: Make non-critical message a warning; (bso#11566). + Fix winbindd crashes with samlogon for trusted domain user; (bso#11569); (bnc#949022). + smbd: Send SMB2 oplock breaks unencrypted; (bso#11570). + ctdb: Open the RO tracking db with perms 0600 instead of 0000; (bso#11577). + s3:smb2_server: Make the logic of SMB2_CANCEL DLIST_REMOVE() clearer; (bso#11581). + s3-smbd: Fix use after issue in smbd_smb2_request_dispatch(); (bso#11581). + manpage: Correct small typo error; (bso#11584). + s3: smbd: If EAs are turned off on a share don't allow an SMB2 create containing them; (bso#11589). + Backport some valgrind fixes from upstream master; (bso#11597). + auth: Consistent handling of well-known alias as primary gid; (bso#11608). + winbind: Fix crash on invalid idmap configs; (bso#11612). + s3: smbd: have_file_open_below() fails to enumerate open files below an open directory handle; (bso#11615). + Changing log level of two entries to DBG_NOTICE; (bso#9912).- Ensure samlogon fallback requests are rerouted after kerberos failure; (bnc#953382); (bnc#953972).- Ensure to link with --as-needed flag by removing SUSE_ASNEEDED=0. - Always use the default optimization even on pre-9.2 systems.- Remove redundant configure options while adding with-relro.- Relocate the lockdir to the /var/lib/samba/lock directory.- Cleanup and enhance the pidl sub package.- Require renamed python-ldb-devel and python-talloc-devel at build-time. - Requires python-ldb and python-talloc from the python subpackage.- Update to 4.3.1. + s3: smbd: Fix our access-based enumeration on "hide unreadable" to match Windows; (bso#10252). + nss_winbind: Fix hang on Solaris on big groups; (bso#10365). + smbd: Fix file name buflen and padding in notify repsonse; (bso#10634). + kerberos: Make sure we only use prompter type when available; winbind: Fix 100% loop; (bso#11038). + source3/lib/msghdr.c: Fix compiling error on Solaris; (bso#11053). + s3:ctdbd_conn: make sure we destroy tevent_fd before closing the socket; (bso#11316). + s3: smbd: Fix mkdir race condition; (bso#11486). + pam_winbind: Fix a segfault if initialization fails; (bso#11502). + s3: dfs: Fix a crash when the dfs targets are disabled; (bso#11509). + s4:lib/messaging: Use 'msg.lock' and 'msg.sock' for messaging related subdirs; (bso#11515). + s3: smbd: Fix opening/creating :stream files on the root share directory; (bso#11522). + lib/param: Fix hiding of FLAG_SYNONYM values; (bso#11526). + net: Fix a crash with 'net ads keytab create'; (bso#11528). + s3: smbd: Fix a crash in unix_convert(); (bso#11535). + s3: smbd: Fix NULL pointer bug introduced by previous 'raw' stream fix (bso#11522); (bso#11535). + vfs_fruit: Return value of ad_pack in vfs_fruit.c; (bso#11543). + vfs_commit: set the fd on open before calling SMB_VFS_FSTAT; (bso#11547). + s3:locking: Initialize lease pointer in share_mode_traverse_fn(); (bso#11549). + s3:smbstatus: Add stream name to share_entry_forall(); (bso#11550). + s3:lib: Validate domain name in lookup_wellknown_name(); (bso#11555). + s3: lsa: lookup_name() logic for unqualified (no DOMAIN component) names is incorrect; (bso#11555).- Fix 100% CPU in winbindd when logging in with "user must change password on next logon"; (bso#11038).- Relocate the tmpfiles.d directory to the client package; (bnc#947552).- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf instead; (bnc#942716).- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).- Package /var/lib/samba/msg with 0755 permissions; (bso#11515); (bnc#945502).- Require to install libfam0-gamin from samba-libs on post-12.1 and pre-13.15 systems; (bnc#945013).- Update to 4.3.0. + Samba "map to guest = Bad uid" doesn't work; (bso#9862). + revert LDAP extended rule 1.2.840.113556.1.4.1941 LDAP_MATCHING_RULE_IN_CHAIN changes; (bso#10493). + No objectClass found in replPropertyMetaData on ordinary objects (non-deleted); (bso#10973). + Stream names with colon don't work with fruit:encoding = native; (bso#11278). + NetApp joined to a Samba/ADDC cannot resolve SIDs; (bso#11291). + tevent_fd needs to be destroyed before closing the fd; (bso#11316). + "force group" with local group not working; (bso#11320). + strsep is not available on Solaris; (bso#11359). + smbtorture does not build when configured --with-system-mitkrb5; (bso#11411). + Build with GPFS support is broken; (bso#11421). + Build broken with --disable-python; (bso#11424). + net share allowedusers crashes; (bso#11426). + nmbd incorrectly matches netbios names as own name; (bso#11427). + Python bindings don't check integer types; (bso#11429). + Python bindings don't check array sizes; (bso#11430). + CTDB's eventscript error handling is broken; (bso#11431). + Fix crash in nested ctdb banning; (bso#11432). + Cannot build ctdbpmda; (bso#11434). + samba-tool uncaught exception error; (bso#11436). + Crash in notify_remove caused by change notify = no; (bso#11444). + Poor SMB3 encryption performance with AES-GCM; (bso#11451). + Poor SMB3 encryption performance with AES-GCM (part1); (bso#11451). + fix recursion problem in rep_strtoll in lib/replace/replace.c; (bso#11455). + --bundled-libraries=!ldb,!pyldb,!pyldb-util doesn't disable ldb build and install; (bso#11458). + xid2sid gives inconsistent results; (bso#11464). + ctdb: Fix the build on FreeBSD 10.1; (bso#11465). + Handling of 0 byte resource fork stream; (bso#11467). + AD samr GetGroupsForUser fails for users with "()" in their name; (bso#11488).- Configure with --bundled-libraries=NONE; (bso#11458).- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).- Remove libiniparser-devel build-time requirement.- Update to 4.2.3. + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780). + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924). + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991). + Logon via MS Remote Desktop hangs; (bso#11061). + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068). + tevent: Add a note to tevent_add_fd(); (bso#11141). + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170). + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217). + smbd: Fix a use-after-free; (bso#11218); (bnc#919309). + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces; (bso#11245). + s3:smb2: Add padding to last command in compound requests; (bso#11277). + Add IPv6 support to ADS client side LDAP connects; (bso#11281). + Add IPv6 support for determining FQDN during ADS join; (bso#11282). + s3: IPv6 enabled DNS connections for ADS client; (bso#11283). + Fix invalid write in ctdb_lock_context_destructor; (bso#11293). + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295). + vfs_fruit: Add option "veto_appledouble"; (bso#11305). + tstream: Make socketpair nonblocking; (bso#11312). + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313). + Group creation: Add msSFU30Name only when --nis-domain was given; (bso#11315). + tevent_fd needs to be destroyed before closing the fd; (bso#11316). + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared"; (bso#11319). + smbd/trans2: Add a useful diagnostic for files with bad encoding; (bso#11323). + Change sharesec output back to previous format; (bso#11324). + Robust mutex support broken in 1.3.5; (bso#11326). + Kerberos auth info3 should contain resource group ids available from pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info exists in PAC; (bso#11328); (bnc#912457). + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329). + tevent: Fix CID 1035381 Unchecked return value; (bso#11330). + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331). + s3: smbd: Use separate flag to track become_root()/unbecome_root() state; (bso#11339). + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342). + pidl: Make the compilation of PIDL producing the same results if the content hasn't change; (bso#11356). + winbindd: Disconnect child process if request is cancelled at main process; (bso#11358). + vfs_fruit: Check offset and length for AFP_AfpInfo read requests; (bso#11363). + docs: Overhaul the description of "smb encrypt" to include SMB3 encryption; (bso#11366). + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server(); (bso#11367). + ncacn_http: Fix GNUism; (bso#11371).- Disable rpath usage; (bnc#902421).- Make the winbind package depend on the matching libwbclient version and vice versa; (bnc#936909).- Backport changes to use resource group sids obtained from pac logon_info; (bso#11328); (bnc#912457).- Order winbind.service Before and Want nss-user-lookup target.- Remove fam-devel build-time dependency for post-6 RHEL systems.- Update to 4.2.2. + s3:smbXsrv: refactor duplicate code into smbXsrv_session_clear_and_logoff(); (bso#11182). + gencache: don't fail gencache_stabilize if there were records to delete; (bso#11260). + s3: libsmbclient: After getting attribute server, ensure main srv pointer is still valid; (bso#11186). + s4: rpc: Refactor dcesrv_alter() function into setup and send steps; (bso#11236). + s3: smbd: Incorrect file size returned in the response of "FILE_SUPERSEDE Create"; (bso#11240). + Mangled names do not work with acl_xattr; (bso#11249). + nmbd rewrites browse.dat when not required; (bso#11254). + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff; (bso#11213). + s3:smbd: Add missing tevent_req_nterror; (bso#11224). + vfs: kernel_flock and named streams; (bso#11243). + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244). + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses are used; (bso#11284). + ctdb: check for talloc_asprintf() failure; (bso#11201). + spoolss: purge the printer name cache on name change; (bso#11210); (bnc#901813). + CTDB statd-callout does not scale; (bso#11204). + vfs_fruit: also map characters below 0x20; (bso#11221). + ctdb: Coverity fix for CID 1291643; (bso#11201). + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225). + Fix terminate connection behavior for asynchronous endpoint with PUSH notification flavors; (bso#11226). + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007). + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201). + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the directory is deleted; (bso#11257). + s3:winbindd: make sure we remove pending io requests before closing client sockets; (bso#11141); (bnc#931854). + Fix panic triggered by smbd_smb2_request_notify_done() -> smbXsrv_session_find_channel() in smbd; (bso#11182). + 'sharesec' output no longer matches input format; (bso#11237). + waf: Fix systemd detection; (bso#11200). + CTDB: Fix portability issues; (bso#11202). + CTDB: Fix some IPv6-related issues; (bso#11203). + CTDB statd-callout does not scale; (bso#11204). + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you enter invalid values; (bso#11234). + libads: record service ticket endtime for sealed ldap connections; (bso#11267). + lib/util: Include DEBUG macro in internal header files before samba_util.h; (bso#11033).- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).- Remove the independently built libraries ldb, talloc, tdn, and tevent and the post-10.3 renamed libsmbclient from baselibs.conf.- Drop redundant doc attribute from man pages.- Update to 4.2.1. + s3:winbind:grent: Don't stop group enumeration when a group has no gid; (bso#8905). + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791). + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with servers that don't send the 2 unused fields; (bso#10016). + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476). + waf: Fix the build on openbsd; (bso#10476). + s3: client: "client use spnego principal = yes" code checks wrong name; (bso#10888). + spoolss: Retrieve published printer GUID if not in registry; (bso#11018). + s3: lib: libsmbclient: If reusing a server struct, check every cli->timout miliseconds if it's still valid before use; (bso#11079). + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125). + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135). + replace: Remove superfluous check for gcrypt header; (bso#11135). + Backport subunit changes; (bso#11137). + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with implementation; (bso#11140). + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143). + talloc: Version 2.1.2; (bso#11144). + Update libwbclient version to 0.12; (bso#11149). + brlock: Use 0 instead of empty initializer list; (bso#11153). + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164). + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169); (bnc#913304). + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev fails in the SMB1 case; (bso#11173). + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174). + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175). + s3: libsmbclient: Add missing talloc stackframe; (bso#11177). + s4-process_model: Do not close random fds while forking; (bso#11180). + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).- Prevent samba package updates from disabling samba kerberos printing.- Add sparse file support for samba; (fate#318424).- Purge printer name cache on spoolss SetPrinter change; (bso#11210); (bnc#901813).- Correctly retain errno from Btrfs snapshot ioctls; (bnc#923374).- Simplify libxslt build requirement and README.SUSE install. - Remove no longer required cleanup steps while populating the build root.- Remove deprecated base_rid example from idmap_rid manpage; (bso#11169); (bnc#913304).- Update to 4.2.0. + smbd: Stop using vfs_Chdir after SMB_VFS_DISCONNECT; (bso#1115). + pam_winbind: fix warn_pwd_expire implementation; (bso#9056). + nsswitch: Fix soname of linux nss_*.so.2 modules; (bso#9299). + Make 'profiles' work again; (bso#9629). + s3:smb2_server: protect against integer wrap with "smb2 max credits = 65535"; (bso#9702). + Make validate_ldb of String(Generalized-Time) accept millisecond format ".000Z"; (bso#9810). + Use -R linker flag on Solaris, not -rpath; (bso#10112). + vfs: Add glusterfs manpage; (bso#10240). + Make 'smbclient' use cached creds; (bso#10279). + pdb: Fix build issues with shared modules; (bso#10355). + s4-dns: Add support for BIND 9.10; (bso#10620). + idmap: Return the correct id type to *id_to_sid methods; (bso#10720). + printing/cups: Pack requested-attributes with IPP_TAG_KEYWORD; (bso#10808). + Don't build vfs_snapper on FreeBSD; (bso#10834). + nss_winbind: Add getgroupmembership for FreeBSD; (bso#10835). + idmap_rfc2307: Fix a crash after connection problem to DC; (bso#10837). + s3: smb2cli: query info return length check was reversed; (bso#10848). + s3: lib, s3: modules: Fix compilation on Solaris; (bso#10849). + lib: uid_wrapper: Fix setgroups and syscall detection on a system without native uid_wrapper library; (bso#10851). + winbind3: Fix pwent variable substitution; (bso#10852). + Improve samba-regedit; (bso#10859). + registry: Don't leave dangling transactions; (bso#10860). + Fix build of socket_wrapper on systems without SO_PROTOCOL; (bso#10861). + build: Do not install 'texpect' binary anymore; (bso#10862). + Fix testparm to show hidden share defaults; (bso#10864). + libcli/smb: Fix smb2cli_validate_negotiate_info with min=PROTOCOL_NT1 max=PROTOCOL_SMB2_02; (bso#10866). + Integrate CTDB into top-level Samba build; (bso#10892). + samba-tool group add: Add option '--nis-domain' and '--gid'; (bso#10895). + s3-nmbd: Fix netbios name truncation; (bso#10896). + spoolss: Fix handling of bad EnumJobs levels; (bso#10898). + Fix smbclient loops doing a directory listing against Mac OS X 10 server with a non-wildcard path; (bso#10904). + Fix print job enumeration; (bso#10905); (bnc#898031). + samba-tool: Create NIS enabled users and unixHomeDirectory attribute; (bso#10909). + Add support for SMB2 leases; (bso#10911). + btrfs: Don't leak opened directory handle; (bso#10918). + s3: nmbd: Ensure NetBIOS names are only 15 characters stored; (bso#10920). + s3:smbd: Fix file corruption using "write cache size != 0"; (bso#10921). + pdb_tdb: Fix a TALLOC/SAFE_FREE mixup; (bso#10932). + s3-keytab: fix keytab array NULL termination; (bso#10933). + s3:passdb: fix logic in pdb_set_pw_history(); (bso#10940). + Cleanup add_string_to_array and usage; (bso#10942). + dbwrap_ctdb: Pass on mutex flags to tdb_open; (bso#10942). + Fix RootDSE search with extended dn control; (bso#10949). + Fix 'samba-tool dns serverinfo ' for IPv6; (bso#10952). + libcli/smb: only force signing of smb2 session setups when binding a new session; (bso#10958). + s3-smbclient: Return success if we listed the shares; (bso#10960). + s3-smbstatus: Fix exit code of profile output; (bso#10961). + socket_wrapper: Add missing prototype check for eventfd; (bso#10965). + libcli: SMB2: Pure SMB2-only negprot fix to make us behave as a Windows client does; (bso#10966). + vfs_streams_xattr: Check stream type; (bso#10971). + s3: smbd: Fix *allocate* calls to follow POSIX error return convention; (bso#10982). + vfs_fruit: Add support for AAPL; (bso#10983). + Fix spoolss IDL response marshalling when returning error without clearing info; (bso#10984). + dsdb-samldb: Check for extended access rights before we allow changes to userAccountControl; (bso#10993); CVE-2014-8143; (boo#914279). + Fix IPv6 support in CTDB; (bso#10996). + ctdb-daemon: Use correct tdb flags when enabling robust mutex support; (bso#11000). + vfs_streams_xattr: Add missing call to SMB_VFS_NEXT_CONNECT; (bso#11005). + s3-util: Fix authentication with long hostnames; (bso#11008). + ctdb-build: Fix build without xsltproc; (bso#11014). + packaging: Include CTDB man pages in the tarball; (bso#11014). + pdb_get_trusteddom_pw() fails with non valid UTF16 random passwords; (bso#11016). + Make Sharepoint search show user documents; (bso#11022). + nss_wrapper: check for nss.h; (bso#11026). + Enable mutexes in gencache_notrans.tdb; (bso#11032). + tdb_wrap: Make mutexes easier to use; (bso#11032). + lib/util: Avoid collision which alread defined consumer DEBUG macro; (bso#11033). + winbind: Retry after SESSION_EXPIRED error in ping-dc; (bso#11034). + s3-libads: Fix a possible segfault in kerberos_fetch_pac(); (bso#11037). + vfs_fruit: Fix base_fsp name conversion; (bso#11039). + vfs_fruit: mmap under FreeBSD needs PROT_READ; (bso#11040). + Fix authentication using Kerberos (not AD); (bso#11044). + net: Fix sam addgroupmem; (bso#11051). + vfs_snapper: Correctly handles multi-byte DBus strings; (bso#11055); (bnc#913238). + cli_connect_nb_send: Don't segfault on host == NULL; (bso#11058). + utils: Fix 'net time' segfault; (bso#11058). + libsmb: Provide authinfo domain for encrypted session referrals; (bso#11059). + s3-pam_smbpass: Fix memory leak in pam_sm_authenticate(); (bso#11066). + vfs_glusterfs: Add comments to the pipe(2) code; (bso#11069). + vfs/glusterfs: Change xattr key to match gluster key; (bso#11069). + vfs_glusterfs: Implement AIO support; (bso#11069). + s3-vfs: Fix developer build of vfs_ceph module; (bso#11070). + s3: netlogon: Ensure we don't call talloc_free on an uninitialized pointer; (bso#11077); CVE-2015-0240; (bnc#917376). + vfs: Add a brief vfs_ceph manpage; (bso#11088). + s3: smbclient: Allinfo leaves the file handle open; (bso#11094). + Fix Win8.1 Credentials Manager issue after KB2992611 on Samba domain; (bso#11097). + debug: Set close-on-exec for the main log file FD; (bso#11100). + s3: smbd: leases - losen paranoia check. Stat opens can grant leases; (bso#11102). + s3: smbd: SMB2 close. If a file has delete on close, store the return info before deleting; (bso#11104). + doc:man:vfs_glusterfs: improve the configuration section; (bso#11117). + snprintf: Try to support %j; (bso#11119). + ctdb-io: Do not use sys_write to write to client sockets; (bso#11124). + doc-xml: Add 'sharesec' reference to 'access based share enum'; (bso#11127).- Update to 4.2.0rc5. + Ensure we don't call talloc_free on an uninitialized pointer; CVE-2015-0240; (bso#11077); (bnc#917376).- Fix usage of freed memory on server exit; (bso#11218); (bnc#919309).- Fix tdb_store_flag_to_ntdb() gcc5 build failure.- Fix vfs_snapper DBus string handling; (bso#11055); (bnc#913238).- Update to 4.1.16. + dsdb-samldb: Check for extended access rights before we allow changes to userAccountControl; (bso#10993); CVE-2014-8143; (boo#914279).- Adjust baselibs.conf due to libpdb0 package rename to libsamba-passdb0.- Fix libsmbclient DFS referral handling. + Reuse connections derived from DFS referrals; (bso#10123); (fate#316512). + Set domain/workgroup based on authentication callback value; (bso#11059).- Update to 4.2.0rc4. - Add libsamba-debug, libsocket-blocking, libsamba-cluster-support, and libhttp to the libs package; (boo#913547). - Rename libpdb packages to libsamba-passdb. - Drop libsmbsharemodes packages.- Enable avahi support on post-12.2 systems.- Update to 4.1.15. + pam_winbind: Fix warn_pwd_expire implementation; (bso#9056). + nsswitch: Fix soname of linux nss_*.so.2 modules; (bso#9299). + Fix profiles tool; (bso#9629). + s3-lib: Do not require a password with --use-ccache; (bso#10279). + s4:dsdb/rootdse: Expand extended dn values with the AS_SYSTEM control; (bso#10949). + s4-rpc: dnsserver: Fix enumeration of IPv4 and IPv6 addresses; (bso#10952). + s3:smb2_server: Allow reauthentication without signing; (bso#10958). + s3-smbclient: Return success if we listed the shares; (bso#10960). + s3-smbstatus: Fix exit code of profile output; (bso#10961). + libcli: SMB2: Pure SMB2-only negprot fix to make us behave as a Windows client does; (bso#10966). + s3: smbd/modules: Fix *allocate* calls to follow POSIX error return convention; (bso#10982). + Fix 'domain join' by adding 'drsuapi.DsBindInfoFallBack' attribute 'supported_extensions'; (bso#11006). + idl:drsuapi: Manage all possible lengths of drsuapi_DsBindInfo; (bso#11006). + winbind: Retry LogonControl RPC in ping-dc after session expiration; (bso#11034).- yast2-samba-client should be able to specify osName and osVer on AD domain join; (bnc#873922).- Lookup FSRVP share snums at runtime rather than storing them persistently; (bnc#908627).- Specify soft dependency for network-online.target in Winbind systemd service file; (bnc#889175).- Fix spoolss error response marshalling; (bso#10984).- Update to 4.1.14. + pidl/wscript: Remove --with-perl-* options; revert buildtools/wafadmin/ Tools/perl.py back to upstream state; (bso#10472). + s4-dns: Add support for BIND 9.10; (bso#10620). + nmbd fails to accept "--piddir" option; (bso#10711). + nss_winbind: Add getgroupmembership for FreeBSD; (bso#10835). + S3: source3/smbd/process.c::srv_send_smb() returns true on the error path; (bso#10880). + vfs_glusterfs: Remove "integer fd" code and store the glfs pointers; (bso#10889). + s3-nmbd: Fix netbios name truncation; (bso#10896). + spoolss: Fix handling of bad EnumJobs levels; (bso#10898). + s3: libsmbclient-smb2. MacOSX 10 SMB2 server doesn't set STATUS_NO_MORE_FILES when handed a non-wildcard path; (bso#10904). + spoolss: Fix jobid in level 3 EnumJobs response; (bso#10905). + s3: nmbd: Ensure NetBIOS names are only 15 characters stored; (bso#10920). + s3:smbd: Fix file corruption using "write cache size != 0"; (bso#10921). + pdb_tdb: Fix a TALLOC/SAFE_FREE mixup; (bso#10932). + s3-keytab: Fix keytab array NULL termination; (bso#10933). + Cleanup add_string_to_array and usage; (bso#10942).- Remove and cleanup shares and registry state associated with externally deleted snaphots exposed as shadow copies; (bnc#876312).- Use the upstream tar ball, as signature verification is now able to handle compressed archives.- Fix leak when closing file descriptor returned from dirfd; (bso#10918).- Fix spoolss EnumJobs and GetJob responses; (bso#10905); (bnc#898031). + Fix handling of bad EnumJobs levels; (bso#10898).- Remove dependency on gpg-offline as signature checking is implemented in the source validator.- Update to 4.1.13. + s3-libnet: Add libnet_join_get_machine_spns(); (bso#9984). + s3-libnet: Make sure we do not overwrite precreated SPNs; (bso#9984). + s3-libads: Add all machine account principals to the keytab; (bso#9985). + s3: winbindd: Old NT Domain code sets struct winbind_domain->alt_name to be NULL. Ensure this is safe with modern AD-DCs; (bso#10717). + Fix unstrcpy; (bso#10735). + pthreadpool: Slightly serialize jobs; (bso#10779). + s3: smbd: streams - Ensure share mode validation ignores internal opens (op_mid == 0); (bso#10797). + s3: smbd:open_file: Open logic fix; Use a more natural check; (bso#10809). + vfs_media_harmony: Fix a crash bug; (bso#10813). + docs: Mention incompatibility between kernel oplocks and streams_xattr; (bso#10814). + nmbd: Send waiting status to systemd; (bso#10816). + libcli: Fix a segfault calling smbXcli_req_set_pending() on NULL; (bso#10817). + nsswitch: Skip groups we were not able to map; (bso#10824). + s3-winbindd: Use correct realm for trusted domains in idmap child; (bso#10826). + s3: nmbd: Ensure the main nmbd process doesn't create zombies; (bso#10830). + s3: lib: Signal handling - ensure smbrun and change password code save and restore existing SIGCHLD handlers; (bso#10831). + idmap_rfc2307: Fix a crash after connection problem to DC; (bso#10837). + s3-winbindd: Do not use domain SID from LookupSids for Sids2UnixIDs call; (bso#10838). + s3: smb2cli: Query info return length check was reversed; (bso#10848). + registry: Don't leave dangling transactions; (bso#10860).- Update to 4.2.0rc2./sbin/ldconfig/sbin/ldconfiglibdcerpc-binding0libdcerpc0libndr-krb5pac0libndr-nbt0libndr-standard0libndr0libndr1libndr2libnetapi0libsamba-credentials0libsamba-credentials1libsamba-errors0libsamba-hostconfig0libsamba-passdb0libsamba-util0libsamdb0libsmbclient0libsmbconf0libsmbldap0libsmbldap2libtevent-util0libwbclient0ibs-power9-15 1730802454  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstu4.17.12+git.485.dd39ea0501e4.17.12+git.485.dd39ea0501e4.17.12+git.485.dd39ea0501e4.17.12+git.485.dd39ea0501e4.17.12+git.485.dd39ea0501e4.17.12+git.485.dd39ea0501e4.17.12+git.485.dd39ea0501e4.17.12+git.485.dd39ea0501e4.17.12+git.485.dd39ea0501e4.17.12+git.485.dd39ea0501e4.17.12+git.485.dd39ea0501e4.17.12+git.485.dd39ea0501e4.17.12+git.485.dd39ea0501e4.17.12+git.485.dd39ea0501e4.17.12+git.485.dd39ea0501e4.17.12+git.485.dd39ea0501e4.17.12+git.485.dd39ea0501e4.17.12+git.485.dd39ea0501e4.17.12+git.485.dd39ea0501e-150500.3.26.54.17.12+git.485.dd39ea0501e-150500.3.26.54.17.12+git.485.dd39ea0501e4.17.12+git.485.dd39ea0501e4.17.12+git.485.dd39ea0501e4.17.12+git.485.dd39ea0501e4.17.12+git.485.dd39ea0501e4.17.12+git.485.dd39ea0501e4.17.12+git.485.dd39ea0501e4.17.12+git.485.dd39ea0501e4.17.12+git.485.dd39ea0501e4.17.12+git.485.dd39ea0501e4.17.12+git.485.dd39ea0501e4.17.12+git.485.dd39ea0501e4.17.12+git.485.dd39ea0501e4.17.12+git.485.dd39ea0501e4.17.12+git.485.dd39ea0501e4.17.12+git.485.dd39ea0501e4.17.12+git.485.dd39ea0501e4.17.12+git.485.dd39ea0501e4.17.12+git.485.dd39ea0501e4.17.12+git.485.dd39ea0501e4.17.12+git.485.dd39ea0501e4.17.12+git.485.dd39ea0501elibdcerpc-binding.so.0libdcerpc-binding.so.0.0.1libdcerpc-server-core.so.0libdcerpc-server-core.so.0.0.1libdcerpc.so.0libdcerpc.so.0.0.1libndr-krb5pac.so.0libndr-krb5pac.so.0.0.1libndr-nbt.so.0libndr-nbt.so.0.0.1libndr-standard.so.0libndr-standard.so.0.0.1libndr.so.3libndr.so.3.0.0libnetapi.so.1libnetapi.so.1.0.0libsamba-credentials.so.1libsamba-credentials.so.1.0.0libsamba-errors.so.1libsamba-errors.so.1.0.0libsamba-hostconfig.so.0libsamba-hostconfig.so.0.0.1libsamba-passdb.so.0libsamba-passdb.so.0.28.0libsamba-util.so.0libsamba-util.so.0.0.1libsamdb.so.0libsamdb.so.0.0.1libsmbclient.so.0libsmbclient.so.0.7.0libsmbconf.so.0libsmbconf.so.0.0.1libsmbldap.so.2libsmbldap.so.2.1.0libtevent-util.so.0libtevent-util.so.0.0.1libwbclient.so.0libwbclient.so.0.15libCHARSET3-samba4.solibMESSAGING-SEND-samba4.solibMESSAGING-samba4.solibaddns-samba4.solibads-samba4.solibasn1util-samba4.solibauth-samba4.solibauthkrb5-samba4.solibcli-cldap-samba4.solibcli-ldap-common-samba4.solibcli-ldap-samba4.solibcli-nbt-samba4.solibcli-smb-common-samba4.solibcli-spoolss-samba4.solibcliauth-samba4.solibclidns-samba4.solibcluster-samba4.solibcmdline-contexts-samba4.solibcmdline-samba4.solibcommon-auth-samba4.solibdbwrap-samba4.solibdcerpc-pkt-auth-samba4.solibdcerpc-samba-samba4.solibdcerpc-samba4.solibevents-samba4.solibflag-mapping-samba4.solibgenrand-samba4.solibgensec-samba4.solibgpo-samba4.solibgse-samba4.solibhttp-samba4.solibinterfaces-samba4.solibiov-buf-samba4.solibkrb5samba-samba4.solibldbsamba-samba4.soliblibcli-lsa3-samba4.soliblibcli-netlogon3-samba4.soliblibsmb-samba4.solibmessages-dgm-samba4.solibmessages-util-samba4.solibmscat-samba4.solibmsghdr-samba4.solibmsrpc3-samba4.solibndr-samba-samba4.solibndr-samba4.solibnet-keytab-samba4.solibnetif-samba4.solibnpa-tstream-samba4.solibprinting-migrate-samba4.solibregistry-samba4.solibreplace-samba4.solibsamba-cluster-support-samba4.solibsamba-debug-samba4.solibsamba-modules-samba4.solibsamba-security-samba4.solibsamba-sockets-samba4.solibsamba3-util-samba4.solibsamdb-common-samba4.solibsecrets3-samba4.solibserver-id-db-samba4.solibserver-role-samba4.solibsmb-transport-samba4.solibsmbclient-raw-samba4.solibsmbd-base-samba4.solibsmbd-shim-samba4.solibsmbldaphelper-samba4.solibsocket-blocking-samba4.solibsys-rw-samba4.solibtalloc-report-printf-samba4.solibtdb-wrap-samba4.solibtime-basic-samba4.solibtrusts-util-samba4.solibutil-reg-samba4.solibutil-setid-samba4.solibutil-tdb-samba4.sopdbldapsam.sosmbpasswd.sotdbsam.so/usr/lib64//usr/lib64/samba//usr/lib64/samba/pdb/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:36266/SUSE_SLE-15-SP5_Update/973d9dd70e3364b1a8a58b8bc93f5a72-samba.SUSE_SLE-15-SP5_Updatedrpmxz5ppc64le-suse-linux  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=ad8b1d9e4f016a6876e6689470313483e8aeec15, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=c257b1b02ed030b5e5db66c661ddb9299a0b36f2, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=b91dd254ce57ad0f5aba3790066079311335efb0, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=d7742edd7df9ce9d4252815e97028f0a1acef4a5, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=6c3c8ae6eed1e4bded8acc8c4ad72dac8847aae4, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=cd55277b1015d4b90395df0b3304bab69a3d5fa1, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=91acee9a8c3a78824f97920bd00504131feb9f09, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=44057ee6556d4ab73dbf0df5cc1dbd6d400f9e77, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=d5737cf759267be15b3a6359742cc1f14f70b7a3, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=5f2a29720f66e06a9bab71d161b0ebd82a467df0, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=6fff70acbf0569a7fdb2137aa1d17162cc8583e1, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=6317d69038dbc682e4e70d107a86e97cf2785477, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=630756b8c4f6398fb02854878eaa1e5acdb72c84, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=9536549d37e99dc2d2ab83309d95ac65a5bd6535, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=de63bffc7c0693e7a6d4392ef650679a9b4e20c8, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=78989cecf5874a044ed7b1be04bcac5d650d4c73, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=9c0c8b59f64411ae915ad88b77bebccb0b67abdb, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=d67944f0dd9e27ecadd8bee2b33e1b77ebaa9f91, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=069122922c5d8cb9fe5b2f2a48df73a95a3ddfd7, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=641b23e55716018b844a154629b204c792859341, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=8fcff7424ed35d3dd06030d1d2682662de87a242, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=19102af3ac60584b86d30c1be0d68cf526fd3ab3, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=3ee7a3d0b4f5b63b6ee293f1b318a91bd65da605, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=099f85549e04b2885448832142eaf99e8828a1d6, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=6153d2e4bb9ee479cb997d44002d0759fbf24e60, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=5e42e454cd9f927fe1877926c124d6cbe991b821, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=7316ee17b1e875bc935c86ff554127f4bec038ed, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=6b3cd0122ea3d60bd87e5acd2c63beadf9395475, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=50cd9d6774d086e1ea1df4ae7354f18f6af60c53, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=640ebb08ae4a25b9f41157a7ba4a859f13ff0246, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=1b915c8c4308cd985db54751a4be0bad005f473d, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=8d468af6f6d3c1edbfd91214f305e3cb582213f6, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=d704e96c912846b28f14e1b7efe43159a966e299, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=4a301bbe4f36b8f488199f0602f299cefad0a4c4, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=bf94ca4919d5a705063aef33a699aa4f5c5ea6cb, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=10b858dc48bfd27527218a24c8eec0811b13c676, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=a14d0155f76ec4a7ff10120281c6708439c6ef0a, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=f391a76288b5e2b912347964806cb0af91945d56, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=53ee7a6f5f43dffbe6d1e398664288d59cf747bc, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=52bf8fe8552d210ee49b701c10b9c08db7fcdb10, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=8757337633ff06c610a90a1b3868d9752d143148, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=1e62376048f7f641cbcdbe930202c9b19da570b7, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=691bd12d240abc27fcceefbb00dd7135264d4f28, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=b927ef617b79fcc673bf6df2feaee15c13da4a56, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=7d8273a7be2c87e5d822507656aeafb18aea0339, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=6072c1fb17126cf0c426b5771f781e8d1c44068b, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=b40b5b16c4925480b6e80a4458d880a503b0f04c, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=491376b01944b85e55592504a2d1bb443ba9e848, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=6529035de30b7f1125afcc731a94a6ce54ec43e1, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=fcb9d46a97562746bcea1c5cf6d25ebfaba2f200, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=10cf9973861ec4c794d99e0c9987b884766cd9c5, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=e464608fb2d297153bcbf1736c66661aea407658, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=81c00845f9beee98e1f8dc43d59c173663beca5a, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=5e41101bb768aef5342ee6a1d218a00fd5e45dbc, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=d24a13cf59ec8738761655cdee9113946fdabe55, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=0785eceda6ab79a9192fd0040c895f8dc5bb2a30, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=d58c80cacca111e1e007a86b53e9dda0da0692df, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=5bb6b9304b4ef4c661153b285f96e183e3b1d809, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=d2fa46f30f8d9b95c146290fb1cc7903b37b4675, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=2717f805af4bb63f19c8e72d53eb560dba4299d7, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=1de9e9b7bcf9a890ed87eebb769b817a068ce109, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=ee8a2d8d01c69b6aef644e2ac3e3b42dcd9e26c1, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=6d2fc515bf3d0274c60080d2a30c1cb8727150aa, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=066fe52601d4aead634497ef3cd2c088177d9e6a, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=a178e01d661f13f84e8f8c6dae05481afb59a363, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=7883b5eab9867a8b8bfe12453611fa6a769c71f6, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=d01cfc7b59d264ab179fdae379cab9e6db50c55a, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=d3b3128e11db9c0eea34724cdbdbc879de0286fc, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=fd5d1e1c02b93ac1ea5c8bec97599b1385b1709b, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=f70178d1c05bba42690265d2508b39ea8032bc72, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=f4021209112236faca4d9819f218f2fd16282746, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=a334fe3b757a5e8281f6bcbaa39f13e8184c8230, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=66f59c24b0ecb944507c15f904e5af1a38eedf0f, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=93de7866e27fc1f7076db83ac2189862b69e9c25, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=fc9609aa2e7bacc14c64a888d5221c75f6d30017, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=2a0583a07f66e692a08676b1ebb25b9b705ec034, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=07dac6e99e38ccc4a7e5770f600e32bf15496c57, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=b76209ff848d307400eec1a30f8401bb69dce288, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=9522e10df3a3aa482d3dec105d2a111388b00a7d, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=12e4452ea85953e2398eed6d6b67ee9c0f7d52d1, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=7d37a9e51b929db1e9bc855ac55a92d28b73ec28, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=6415618fdbf50b22c09518a6b052d1c397dfe2d4, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=36e9bd6191ebeea74530ed0ac3fcacae0957220b, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=112b860d70ea37a83af99a1baeeb7be260ff765c, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=07c26ca09ca60e51d2204436713ea419e291e77d, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=f0528698db46ebe0b05d5170a79204bf281b1454, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=a266f586543b1d6f54d623c69ba936ae3f6b042d, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=84153f89e296d8e7563ce9001ccaa717d712eaac, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=88f626c349c4449eb78d862140307ce6ec219ba2, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=bb5bba838da1388dff8ba4bb1794efe1494ebbc3, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=e6be64c7f6e381246bd63b72cfd4d5b0d0714033, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=750b08e2838af2e2819148ce35f0d2b2b5441257, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=965d86360b0937075412ca06f0b2c34bf64bfa32, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=ca6628e053d0d337f03b38390249317a1aacb207, strippeddirectoryELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=408b9b512bafaebcffc46c48ebdfdfb11c00fc2f, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=43bca1f333b647d61fe96112465e95ed0aac465f, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=33aee67b143b4722ad2e44f0e810dedd4dfbcb40, strippedF1`h\:X3J|%-E_}'a~=[aqw <^ 2 ` n t / 3 K O U [ g k '@3C/D0J\  )9G)$2+$  ;&: , :F "&2..| # P+P*RRR?RRRRRRRRRRRRRRR~RRRRRRR>RRRRP4P3R?R;RRRRRRRARRRRRyR3RRR5RRR~R4R2RRRR@RRR>RRxRRR:RRP6P5R(RRRR}RR?RR5RyRRRR RRRRR7RLRRR$RRRRARwRRRRR3R~R4R2RRRxRR#RRRR'RRvRRKR@R6RRRR|RR>RRRRRP_P^RRRR}RRRRRR~RR|RRRPbPaRRRRRRRRR~RRRRRPiPhRRRRRRRRRRRRR~RRRRRPlPmPmPnPnPoPoPpPpPqPqPrPrPsPsPtPtPuPuPvPvPwPwPxPxPyPyPzPzP{P{P|P|P}P}P~PkR?RRRRRRRRRRR>RRPPR?RRRiR{RRCRER=RRRRR}RsR(RRRRRR$RRRRRRRgRRkRRHR7R~RhRRRRRRrRR6RRRR'RfRRRR#RRRBRPPReRCR?RRRRR1RRRRRRJRRZRRVRR(RRTR~RRdR0RRRRURRRRR'RR>RRSR-RRIRBRYRPPRRRRRRPPRRR?RRRRRRRRCRRRRRRR>RRRRBRPPPPPPPPPPPPPPPPPRyR?RRRR(RRRRRRRR1RRRRRRRRRRRRRRRRRR'RRR~R0RRRRRRxR>RRRRRRRRPPR;RRRRRR?RRRRRRCRR>RRRRRRRRR:RBRRPPRJR(R?RRVR,RRRR1RRRRRReRZRRRRTRRR~RRdRRRURRRRRRR'R0RR>R+RSRRIRYRRPPPPPPPPPPPPPPPPPPPPPPPPPRRsR?RR}RR7RRRRRRRRR$RHRRkRRRRgRRR~RjRfRRrRRRRRGR#R6RRRR|RRR>RRRRRPPRRRoR;RRR?RRRNRRRRPRRRRRRRRRRRRRRRRRRRRRRRRRmRRRRRR1RRRRRRRR~RRnRRR0RRRRRRRORRlRMRRRRRRRRRRR>RRRXRRRRRWR:RRPPPPPPPRR?RRRRRRRRRRR>RRRRRXRWRRRPPRRRRRRRRRRRPPPPPPPPPPPPPR;RR:RPPRRR?RRRRR>RRPPRoRRR?RmRRRRlRnRR>RRRRPPRoR?RRRR3RRRRRR{RRRmRRRRRR~RnRRzRRRRR2RRR>RRRlRRRRPPRRRR?RRRRRRRRRJR*RR~RR)RRR>RRRRRRIRP PRRRR}RRARRkRVRRR RTRwRR?RRRRRHRRRRRR~RRjRvRRRRRUR RRRRRGR@RR|RRR>RRXRRSR-RRWRP P R?RRRRRRRR>RRRP P R RRR?RHRRRiRRRRRRRRRARRRRuRRRRR(RRgRRR/RRRRR~RhRR.R'RfRRRRRRRRRRR@RRRRRRGRR>RRRtRRRRRRPPR?RRRRRRRuRRVRRR/RRRJRRRTRCR~R.RRURRRRtRRR>RRSRQR-RRRIRBRPPRRZRRRRRRRRRRRwRRRRRRRvRRRRR~RRRRRRRYRRPPRRZRRRRRRRRRR~RRRRRRRRYRPPRRZRwRRRRR"RRRRRR RARRRRRRRRRRRR RR!RR@RRRRRRRvRRRRRRRRYRRPPRRRRRRRRwRRRR~RRvRRRRRRRRPPRRRRARR?RRRDRCRRRRRRRRRRPRRRR~RRRR@RRORRRR>RRRRRRBRPPRARRR}RRRRRRR7RRRRR@R6RR~RRRRRRR|RRPPR?RRRRRRR1RRCRRRRRRRyR~RRR0RRxRRRRRR>RRRRBRPPRRR?RRRRRRRwRRRRvRR~RR>RRRRP!P RRR1RRRRR0RRP#P"RRRRRRP%P$RR?RRRRRRRRRRRRRRRR>RRRRP'P&RyRRRRRRRRRRRRRRRRxRRR~RRRRP)P(RRRR?RRRRRRRRRRRRRRRRRR>RRRRRRP.P-RRRARR3RR@R2RR~RRP0P/RRRRyRR}R3RRR~R2R|RxRRRRP2P1RRRRRR{R3RzR~R2RRRRP9P8RRRRRRP;P:RRRRP=PRRRRR/R?RRRRRRRRCRRRRJRRVRRRRRR(RyRRRRRRRRRxRRRRRRR'R~R.RURRR>RR-RRRIRBRRPAP@RRRRRRkRRRHRRRRRRRRRRRRRRR~RRRRjRRRGRRRRRPCPBRwRR?RRRR"RRRRRRRRJRRRRRARRRVRR RRTR~RvRRRUR RRRR@RRRRRRRRRR>R!RXRRSR-RRRIRPEPDRRR*RRARRRRRRRRRR@R)RRRRRRRRRRRPGPFRRRRRRRRRRPIPHRRRRPKPJRRRRRRRRRTRJRRRRRSRQR-RRIRPMPLR?RRwRRRRRRRRRyRRR_RcR^RaR[R`RZRRRRR~RRRRxRRRR>RRRvRRRRYRPOPNRRRRRRR7RRR6RRRRRRPQPPR?RR(RR}RRRRRRsRRR$RRRRrRR'RRRRR|RR>R#RRPSPRR?RRCRRRRRVRRR(RRRRHRRR$RARRRRRRRRRRRR~RRRGRUR#RRR@RR'RRRRRRR>RRRR-RRRBRPUPTRR?RqRRRRRRRRRRRPRRR>RpRRRRRORRRRRPWPVRRRRPYPXRRRRRRCRRRRRRRBRP[PZRPRRORP]P\R?R/RHRRRRR}R1RRRRRyRRRRRRRARRRRRRRR$R(R7R3RRRkRR~R2RjR0RRRGRxRRRR'RRRR|R@R6RRR#RRR>RRR.RRRRRPePdRRRR}RRRRRwRRRRRRR~RR|RvRRRRRRRPgPfRuRRRRRRRyR}RwRRRRRRRRRR~R|RvRtRRxRRRRRPPRRHR?RRRRRRTRVRURRRGRR>RRRSR-RPPRRRRRNRRRMRRRRRRPPR?RRRRRyRRRRRRRRRxRRRRR~RR>RRRRPPRRR&RRR7RyRRRRR}RRRRR%RR6RxRR~RRRRRRR|RRRPPReR9R?RRRRR}RRRRRRRZRRR7RRdRR8R6RR~RRRR>RRR|RRRYRPPRRPPRRRRRRRRRRRRRRRRRPPRRRRRR;RRRRR:RRRPPRRRR;RRRRRR:RRPPR?RRRRRRRRRRR~RRRR>RRPPRPRR?RwRRRRRRRNRRRRRRMRvRRRORR>RRRRPPRRR?RR;RRRRRRRRR>RRRR:RRPPR?RRRyRRRR=RRRRRRRR\R]RbR[RZRRRRRRRRRRRRRRYRRPPR(RR?RRRRRRRRRVR1RTRRRRR}RRRRR~R0RRRURRRR'RRRRR>RR|RRRSR-RPPRRRRRRRRRRRRPPRRRRPPRPRRRRRRRRRRRORRRPPRR?R(RRRRCRRARRRRRRRRRwRR$RRRR~RRvRRRRR#RRR@RRR'RR>RRRBRRPPRRRVR(RmRgRR{RRRRPRRR/RRsRRRR&RHRRFRCRR1R?RRRRRRRARR}R7RoRRRRRRRRRRR R$RkRRRRRRRRRRRRRyRRR~RnR%RjRR0RRRxRURRlRRRRRRRRRORrRRRRR@R6RRGR#R'RRR|R>RRRRRzRRR.RfRR-RRRR RRBRRPPRRPPRRRRRRRRRRRRRRRRRRRRRXRPPRRPPRPRRORPPRRRRPPRRRRRRRRRRPPRRPPR?RRRRRRRRRRsR3RRRRrRRRRR2RRRR>RRRPPRRRR~RRPPRRPPRRRRRRR(RRRRRR?RRRRRRRRRRRRRR'RRRRRRR>RRRRRXRWRRRR?RRRRRRRRRRRRRR>RRRRRRRRR?RRRRRRRR1RRRRRRRR0RRRRRRRR>RRRRRR{ٟA 7G\ 5tutf-8ce0d39a80047db4751a061f6fc42b9e01fffa25b2b59c10269d2676d68e0d065?7zXZ !t/]"k&2_e#ȄjkElnMm]sC| 4Afh[C齂n"v6pCh>j4Fyf!\ O;OVYc9༇!L#zn, g ع nXjH?! _odž#Z1NZt~sSVmQtGOVQW1S_@tW]]h/קf" G0R"+z"?>“#'H;͓|$K zJB_Β:}ƨ#^w2'jNX!a?ZM;2#2e#ssg zvCëUnjrUr;yB>m LN@teźI~jŎ;ƫT%3MM|Ȫ&8цʴjOf )b "U_^Ď:\WI+=RoixPD_zW&G4QCOvcy+G#^ԗu9S>rYiWC%Yli KLeSuʰ-2n~ fډD}U&*01Kz ^?E `C ߓ4kI8$":'d˅=-*gq|0q4x-?,h/f”E ]R;ŖvpV~i]9f?1xd;N& IADy`Y7s0mKC ͪqŖ7QmB*IHYsz\}@G|1d8)S0 be}mܳqwNRz4nډ>D&G%LEjR/÷-|3_ծc"ɠ>{<3J|9bflpn;}`/K6VC|7t΍Z֛LT~!1`Vvut01, +I"OieY x޽K 4h4^jmK/vwDZ|]O_H8Ӯ7bp.-29%T6P4ŹwmQ7]n[PwV_.lhVIc 3fa;0hC_tvO$OMD,\Vr6 Wm?E Vҁhhܭ90 =ptUQIzN-%8/h-3$yaXdc: &[^3|vO e}"Et<MĬL=>+z1fa{=1f#@mKkAt$|>A 7t*6]i5&g (C}X&DbLyD~3"^rv9wە<@=(y-dHi@n8Nf0T P.a--풥cS&k|y Z"Cdy3QgMc%O[x25X/e5+S K~ N.8>\Ck>ꤱ!qԴ,&`(GeGz60-[s{'a韵 N&JR$ D\ӽ-S*8rH¹Q6DգQC°eD kCR6]<)Duj򊅗͊m AwUAQap{I2;5 t@ro7H`כxSnoUcc"!6kց-qҀd!قsjvg#.& 4+K*7S\A40q@xAlh u?wO#/|G"3.k1զEm&1枋pӖn?>` 8ɹI%G#Q; ޫ;$B?e{ ٺ+0_@ori0 @x5ň^p ݏɢLA<7CU2|`ra%`ū?Њ~µ'еA,BVEe^dK&\Юd!#;>WD`b;E™ Mh̗[i~{ia}| jz LIɉA$T 7 U_hTBurkw̨3uW'lea q|%Ms Otx!02 d0F WKE9^Ⱦ7BBS: 6lJ#ț1pfʪ3!'INٓW(ϧ: Rh J#u'nRN0~ * "YȁWn,,}0Dũ騶^4jK(ZCmu/U5ԫ]!6Q ҁʈi&h.yӈgՍiHQ#,Tn;=žV[l>/w RS WB=(8ovQĊ.f+ b~:so@{FfMF:74Y,԰,ʡK^nfu*{TgF|PjYÀZ60U'@0jJ\[Zm]V>6Jܚuxc*Z}CPQa2](N}`=qOyK|-`+@T@?¢;z2$.pT}[u"n*}WSl8rGݙr%(#á,!Yy>cS-lV"1InL]RSipA%<Ӛ } S=?UE_V\20E6`Iv ;^OӘP(D"A*kdz?E̐*B fY1'W߆zM')v 8mAq -/'(WZYd9}RJtCՍ"x'f;wpVׅ١,h'(uho0[)'j0?2w;8{7_o:/^A|B/s d[4&bG΢t&ŒmmKDϪB"/¢s;92[[T^{|C] v1 L˜`Z#Jt\Nhߣ[8<\cK 1oW;):xflBje/F]x&+|N Af{e>o Y'1]9IŶI5]DžWrt Fnfˁ,0ɪ͡oGx=IJQH+N#A#j|?XoXlq _Mz`l'-HìT=t-|h*\$]}@޾@JH.w{vX')!=CX5AFq04/JHX Rq^YW1$\Ul*;Aظ;i^v,bȞ${cB 0lZFhSBP5&T? ޛVX h^>E$#$0%9"]/ɅtH?lF^ՙ4(Ϻ{Ro{e1SQ8f~Úд7@Gq2#lsEYq_G'Fv 3}mRIM@75S!5%/z>juQM#@m &41X=j1!Ҷ;RW?4 !Qtf^!y'%w&e9e,4&U_c Q/:B H[XGJ*l0ҵ Fd2b.BޯWO3-7anOM>pJGSL8# ѝ"HSCMbR tp@ۣDžEQj84Bק^^dzӴ`I,7v'A7Gu=UI RONF7=V*KҡŢ[HQK X"YNU*x+ }U73Pm~1Ts X\zOSyNHܣDᗻ1krIƍ* AgN2w݌KSLxt7Q=UL|P42W_j:Okj-;`8\qVmt"lXuVr>IdktVV  +"^ad[Td[O2b_> B5 I t>>yWoì#[O&+,G 2 `Nڬ(O(ȊqO<R .!12ћp`!- -b!Xt$*m@ 0up8*}""UlGH1fcR,z 6rvjO8C` (D5GؿluqCY5 #Gb*8EM$Jzle/ݲ7HJ$v.}+q׸cˮ;^2 o1E{Pnx,gB5~ticЏV.b|8ط`4lv/7/{&>IZ (`U?-睢ڇMٖF1xkB+QgD\;uǢy8 (HxXW׫6s_15$o+,?t[Fgam/5iE9E5U!1TRP+'5F".w﭅fKLbeZ@ -d^4P zkjbS| (3d$M|wٺ/̈́=)d߼ 6|#Q@b$obDlk'յ#y2Áo,ݾ8vH/UXΎ UNwTg-GXԸIPӒamuPƋӡF.I66)޸¼ˋ6+ a\*s,jqF`2E _;SյE'K{iAn|7{֕J|R&E\Wŗ@:Cwt 6RpE/L%x`#[\9OScT4>) n9%fÈ<@ ?&Kez7Cs%OޜWmFvb)w<'V\/xYrdI<8AT{(MQ+A⫾|B)19ZB 9r̜c&L014J]0FNآ>6g`9uEo'MbW$)vm:fzuPRE[I:g,?)T4sMo*jY"p 迸AKOO S|g)2Rz%B`uc@ͯF?WOѷ˹crm(I l~!]_TǛ8373qq\I"p0fiB43 [WMݯqVF𐷪u++VUoύܪӌ􉄱YY7tQ:pf5*bLW|f"2#ܹ`slp@]$bY&ΗYJS]~dfۂR;l$)㊦Ɂ5CS;*٦I-}Vô^ 9Q;/[8~\vuP !_HY V]\I2Lt]-\,3lRU D8oy.Sάsgk0d-S"RGtĄLņP_0WHkX4QhZ=*vu2Z-af La'Y=lhd93 uBGnƳM]"T3Ժ$ r5ݪ;.3y{ ^@Ǽ 㖽*%q<ؗ,Na#V;=1 : #q@Yb`55h iF&p'`QT)Pev0'}gr־sd-Y#.PzqދJWg.LZM?p.p*ײ}ePyU q;_3Sҕ!LxH׉mTΘ9+E8 1ag6LJfҡ07ZIu/bȲ Ge̎y)n~IѨ &O\dB[FPٞ&%tvBس!@i!,GUd` a"Kvi총#(~l ɐ!0ayCͅ)8$7PfU6Pfo.RI/:R{>ޓK;(e֯oNm߃ \q"Zi bWAC,_2LPwvLurB8s>%m&V,"B*D"~Ly+ WcJdo!ZP9aj`5{xBÀ?zSк#7y΃bR`Q;kvX: BVrlD 8{C?:ߢ>%؁^ +]/|3bh`u,ƭ{XTn (aNOL7s~R7H3VŁʁ7PJokKzU', F3[4PtBC' Zm5u콡3ְg&nI#!Z^FuWKu~R͸V|^.T:b qSF"6sb!%HTTLtaʺDQӠ%]zXߨ).C64O 2Ȗm*ܗ禄:,8\2HFye?9`=5AkiY{k-]u1cT@B2#TRݶ P-_0"#+'6rXAJ#hrS0tb(U6e} !5$r_ɬja&4Æ0j_Dރ^'hT}.tG.c'4G2Hid(rIޫ+9:9;+;8wc^],@uө,G0G?7)f[~sX,.$LiG rm1T/satJUB+T)XR2J"CD̪B},Hhv 8#Bmz'It[Ӡ;ru ) B^ʖycA[E$@r^DmGscNy) TAϪD| 2dwL$W|mƑlj_>ugZ=RA*f/45ZtRUT$EQ8d![paԫ4,-b@Wn5gZΧB|Jq`5"SS#U k ƻ)~NQFh֪7fq+ߍWw"[I|WVEWDg赡`h.һZ0e6*>|~f$ D2̺ ]r,Dr93| xȎk ;HgGLfsWA]4xd]3/9DJo"kU._\Σ%9E΁"lztt챥=I+X >rB9c,#yQ5J'DL}oLAZsK~#\y~2Sfan OV.GI?V* !(ef` ϞWt[%A`[x`텩i."N~O/d_ǎ͉KBsz+ƿrIYad#yzXqUw8=|~Ys sO_J04l֡bs)Xm>Mvafpw_;-kL @ #h{ȣ4tN,L ٹ^G'QUTM4f$ab٫iyI;ZVCM9p'NCJ1&/0;p7f[3WX=w a`3QH4"K̆n MVa/&x'MxmZÑ[5F/T7úĊu]1=TSLvJSgR̊/L7y\I?ݿ:+ş6j#3YIB Yw/IBpK;OPf[@z.2:h`Vy؏xG"&ykۀU 'rі |gtq @kYʜD"OyaФ Ց[mky8hˤ^M,!Hl~(mڒO`.c3a(<4K2`/GvjdKim a^蚑<FBqSB9y$%!:X.qa"2)7)ؾ{" WS5I?o簹gSӪec}{y=aܚVex&ᓔj>Қ߶Si*5o@E;^Ks"&mJ Gj^Q.;,`fvE7ʵj?\9}恊DR.`6Ά rtgsͱnzJgRz[ƥXnC7= {J^E)f즾!l jײJ/رvԅ O 4b(ʠȫ~ѷm+ ~ľ8,#q=R"~jHh괂mk hcԝ2gf1s_JPГ96^>j5&1j'NF|KqE3y-8ȄڿuU'ŀ jlOrʼnY*c %A6H3~q"UYͱO),) @-ELܞ!nY{Vjh:]i̢mQ88vךGc|Lzq+|F$"Oh= IʢjmdSd+"3"O†w4lGg2 ߓ[%q8+7xb,&䆞rkpg;벛,zТ>$^o9&{hVouN=4\7]w;Wv?w2.cU(hqshfx;hOvJMۚ=r;L |ޛb:d3#'/ψ IE6cU.?/"[|#|F=g:Mȴ:e2Y (Q ezrq gyX-q:G]1!O6oj<{)KP@0K3ѩECYך`x+6ls@|m{"lbùѨQ|RXGCyW,#^9I5腮zȦ< Rg2Ev\tYS7zb\rӱ(v{Hໝ,zvm" &yX$~Uc'7,?&(<夢:y=:<ݺ^]>rSv::9[f}9T@uk<4{(C8M|{AAv A*w޾xXH84pROP&-ndaJAs('&NtxΝ|dٸ0S4*sTyŦ 4 o&51JK_ujly|~B 6KLYT`Q>EzwPPJ?J#d vIUbg!grlN}.tGX~yP(#pdW#$T'9ˠ#t bkc޹%v&) IFp)7̟-ka8yɍ8x1 ܚ fPfba40V%[Lr@2NA$K\5 iN׈KU 3-oêso/[2T?eQZʓ(|Yz6XI}Vt"pMƠ}f;_ϣ)C"4oShٲ@֜JO Ov_h788\u-i["݆2piM{ #t_\W-@c>v@JsSI%ˁ>SXtU?3BG0* () _yXV$Q2q! 2I,LcV'+E]LvKVUwBbꛛ;4SHZU3twtS(*{2Z:Ĵ!,sB!ļ< ʤYa,Q*@WFi^{{ϭMN SvqxE RR|'rrI{plI2S o6>ӳ6J>בe"P3m4>A-YcQ%e4@GUxfs$k^XbL:݁6_OČܪ3Qe";qP2 @G9 7ň/U?&S lYPı'nܐW.\tlVj~ڧdgğ顨АvF"B)yB!b5gB|x#sÑ\؊ LX>|hMb4,I0t̬OG^9a~UdH,Y93籺 y45S& f0s vn#{Fyj/sQ-:g4cc;Ji0ݟ'EemrɄ 衛dngm%R 3 cK'9#8x< VT՛=z{>>/+׷8љ'#M$CֲLƳO\*NKC3ofZ( v jIy+ev/@=W6%ht$"\іS`9[7µs%~J,Fg}񄇅ͣ-Y FjxFsp_,{v8U0c K24Aѽ'?~p~.Zj"֦4T-$t4jX"|9-Ui̧֙*RJ&۹z\lLsuiy2EE޵.Y 8}ϱ60+ma'w4lArӷd*TAkrpO>A{Cܬ&xe`mws_i,޿l@be=irS_$G5zwBGn1v?YmIeh=gQVx,PR -HHPF_[G%U6%|y_$='RD͗%Ź+Tb e"F1Ƌix'(9CmA\\/J]t,R xFn!m ̆ bhEcȵT\y[jJ s`h宀@rѵ(v):3GN} Bzr2 jQ@3?@L^qZ(ݷ]yM[lX6 a*gT0:-.%HNR/~Ru PZF, fn njkvX pf<%:̬>[zIXyfjT,!פNVôF>lN`s!l)_e{g 7oݡ)u^#A/H*z=o^;z Jàuȷ~4ͮ,?y{nc|KZ0kEBAΎWclYu|Q䨟/(5;9V}OaE 'ә,0f _;Xt@AH8@HN#W'}rس gqcG3ڸZGEeavA/~:ܻx8Z_yCsT;k}˘٩3n򘟩=+]zcHwwY  GQ~qƾZS ; f3-=T!l9y'햪I4t$\.hGũsg㾇* &qf}pKbC+rn^ݗ5/m(o3֌T4if8u833Cw,v>h3bdx4N}"mO$>{\4]2HeI`@ɴ=g<-sO;Ѕ9?cO&H[m,<Sv$U5r\k>{Y ? 2+;q"6g=]4tfcƱ=fuYw8RoiF'-pjSH\#SW+b!tlC] te9U'+R#٘b+R=VqsPiLP _fdD:&=Ks"]=6nk0( 6 !|Rb:3vBM@?o˪F܃52"R:+=G#Yo\ldlCnwOذSB_\7Q nhݭ͙NQ>yi=qbPķ˨9x`DAoVnMD?~m86JCoLY)dΟif&&>>p &5Tewb@ Jgc6l%ņ6 Isc|}L͎1oIt&UeWqyAKaw#7Ma F7Hs J5P9 }ՏpZ27l[M5 \/Q㍣iqb],-PQ|߀k' .@7Q_ӕM祉 65CTJ_ 1?OkE-Yk,~9B8զ'0O]Fl+@:$hFrYn'(6ȉz q,Dlq2IꎛSڻ+d o$f[ɋF ![>ad<>&y ư<bwzfΘYͅ%1gr$c.dDzfj̢ј)(wi/T=I"S?lآzSXQqzX<$IR}vLbZDYZ35<kR"Hmcr6A{A2bDջ> bJr.Qk˻n0F)Xp;ӒbhEī;O}$lV(UoTphZ<#G{ wv@\ %N50̇lhOi,:g^mHjk#@Upp37 ( /SmPebVҼ1R~ VF/c 1m|*j?V fa&_ŵW R|)!HZ77iBw]OtR1'E$lNQ`KCBanzcK5"bԠM͕4T9mDH'":Tc0vD}vIqI Rf05,ܨԾ>YT-Rd4ɂeX5r +-w#3*;Kw7t$h5ڙƑqlz/>G(chfJv҅UuVg.mSӧDW$O -rJۥ1w݁GS qs'Sts2aHA@e=Xk/4]+7iM _pQ<"IS18/cFifO%V q(E4>{*9-WQĒTFBmȸn P*G89n.&6hefmM.#T5UCLJTZd]_%=$;U~WVK< U 1t} ZJj,_a%62Ěΰo2B#a,ewGj́FwvkR#VtPz0Q!g1dc`PzH hZ - heR 5\H-7]~EjX{Аs HdE\`g+EKz§5m$ZO > :x]q"+< 5$Ti8?Umt/oY#JBv˦?w#C,8<615-_PexoA(IG2"1ȵ}z|}9gV᜝5"ܣB~"Om]s+mYqmʙErQhT_F',*"O0}!* "6Aa%Z}y HôdFC#Kcy1 Y^9)";Y%I=rJ6,nV~XF] /~E)CpZpp]}zڳd ?iΐE]WT&DnÕnx6=hF4-u,ԉlT)~fݥpg6 V7&T=Aǖؕrq6 mxI 3W&iH*3}U°h JFNtx_zgCj>^ hiyhVshqtA-y {I~entύk9υxk9Z;eA$W%;8F0UcctpxPpz!i͌0`zOJ͓H^1 zFz6+,IJ3rVsى2_KC \bܱ"m%1N%lj$ꗩ+eP@˄:k>V]\8c6(.rs\MKK8\=C#5ArU'1p\Ь&O@_^ѱnrP{/My騻튘C|ȍ)Q\J"hHR 3͡Q)z6b8 a5 "][%Prh(b~\7syEs(v\Y×evS UC4Z? &HHP_Zw`Ŭ,@Iu'?<<ܮS%6Z0a1jR@5|4כڮh|(fq."PĽP$zvh5srxE8>#0<NsyXz#D A=v\)@~°ۡl] /x[Ue͊nhc0&y2 ^wۧ W2'&ԆgKE/,htx !O6sv+66u/}axoÿ?slGweRw?JY`ɥ'o*mY>晶i"үl$I͸!Q3x|I)DLC!on go#3 >9&%sԍjnk'=:)q3d3)?)"",f.Mj `n|!+ '' VA[9: QC0w:F+Yix xqt֍K' 1^Gesp40ס*0ѫTsR/-E[_únPq X˸Ռy}-'ˑt4=C\@HqFʟ$@u h燳\=Emtk}i[iD-#s7à\h"X2BjJwCeu=X(" +cYoݩ5ܓf[&bm}Ӵb~kUB950d˰gpa^cfQi3ySڹh9ln#Ne٭4bb1m>:q|@Ji3ۄqn%wJ,J V$L ÑdЍj!ڃE* ͥFxebQn*FTYCGxVRD-"5WWŃH9Qǫi"7|0;n.|oaI%-"Fx*'2܍YPgeqCc&se?ae} .|U%9\B4F rTp~r:i%eٞ8[ߓ)A`2vZhټp`Z1Lg:=Et+8 `+8Fٹ]e^: |^D{ѩwwQ+\RYg14AgǛk=]&9q  T/}^*qq/aj!l2f_4v5^ImQ/eLh$Dyѩ}K:qG Cّ9q2XU܆ĺ#Ҥ,*+Qʡ34kBݍ^7Zب޲r 2 c[)X dF8Z|DN`[*Eo{zcqǖ;SXohbEQ3aMksģ'TW⿗2cSF03+VB;'R`dE,U"²1tҮѩaޢrË/S[9V)6iZVg)' |qJ`L)f`"B3oL>8h17&46` Q 5 EX 0"xw,6/eø/"Y2@::2ޡK%~Y{R+ MY/R%:) h᝻)xƜLր&*t@k?)}VOaVШJ/ͣ5LAo[:+K ǁ ל0ps4o,bizb\xJrsi| ,颤^ȃnd+3~vG9DR/|Ư2O͘IQ*y|N"PRt]Myybz R!zWޫܮGnY eb*i65WϘ j'1QRC5kIJ*Q4R(l ǝ}r5paSB4O iM_w sd;aAA> jP"Όkt {jb|OSʓw&;}Mn nC$_Jl3Q;Τ43t{ Q7]ޫOբD|X6kRZZŻo~)N(PΧ ^՞$g 'UAlC?n5~TR5Nz;rMRx3R!k{nJ`cq[晊3wey)OpÊT#llc@\۠]lc23kG9ucEf*iݴ$WrYy*K$/"f̤aSo ZL=h̊Z_=k]N $N0p|㝇^w\zQvV4=}79G^:Ⱥib踕)C:)cCuK!iZhYLuLb.3 uG4 [BB]Nޒv#d[ElY^ʶ hN\-} ]6`B@|(鶚Sepvr/$bg8|%C@Xp-WOnѭSXAZ]\6PA,ɢ%ї1+䉾YCEyfߊ8uڛÃE kР;ڑL;^ 1ă5x}1b:}5*9 uwnxs#@*ѵ pID"*킥~o)4xron9gE*5`ʷ]}JS0. ?9 NY{ =X#MOD)7'%۫LmÔDnOLrC%pAљQH#=qw(kg=ՠ;]`ßЍKAU>Hr,/>C4ʆfnA4NmD#ײ\{nA #p+$DYV"è?- a!\yP;_J2؈'5&d ԌtSsN/o^n r0*QRMշ.@ Q8E?0YO-ȷt W9H7<S (xB̀1HQlQ3 | !Z4vunm`!oK|>p 宛 9`:-R>idOƅQ (\K%yelCA-ż"ъrT[θ)&[ͳMѶ=X*¨ٓ͌uKEr'r{;cg;7e>RKZcъ۠+ F3Q)euQsȈlq-PL8l SifWK{՗TLK]E( %xjr=DR sǶ !,4 frE7H4>4D`iBgɣ܍[^J rׇ)ak޲~7D!,z 4u饀o;EAjq0,P4 sbP 7ZEϞKoNxf3ۈ5=%设7H@S;wb@ dfjRDW*ޘ蠱8mt&)YǸnMab*ڍ ؓ(ԯI-Ț$ljn_@vdiOmB7_#mD+e 3@}ux^)6C x H#{Wtg~#k.cķ}WyǮٽP;}K*e%YuYE_+Ki$tiޠAO$ 63:Gaf6>h P=M56uNnmix1SyӒ/~[91nU>J*8Vc+كZGMa\ < 5GZ6ڧ&LfՎS( DJ\][\7-ځj nƿO@!XWs!qIO >.V 6 <{2~~SGڧ_5t0k)z , ʑrBTo.Z!u<CH*·xc4 l 2κRgŧ>QZ$;, ec$ŜPh_e }ào!a7H:cKv[I5m>kU˻Ujv{ HuRwYuPƊ_~+(9+m\KY2a^n K)JXNW9vg:N=L9>H 4E e\R7v v;A5Dx鴔,KS -`V8<\z&S6c2P`A1|u]LLy*\ Ui ըG\S!V?:'KavZr9=ݍ鳘DNd$6IqFzxv"`؆읈Alf ^3 6'V Ԅչ(~!c?[]lPmՓL*ٶ\*E뒵Bܑ1[`ݦ%v9Yz˲FƚVG}f; T37BHTde42KN*;cǯv;M*p R'/m_ًӁq倉*1S}> 0K&JĎ;^UQ,'`VGVR%/]A3W9ml8-{E^aeʇ nz=L'n# e]9#BE[;r;jbdz5;QBeT U9?o'lepnPY(DrxkY/=dC;}\79Te,)+iŁ}!L:'wݸD&w=ynIRToJ(ƘKCqU;%,w ŏP0,!]-愬5@S GR0ZFvNq96a85 5~i:c٢ tu=&^s;VW:HNK`,rA8D$؋Fkg=`2+~[B*]'rPzGpECJRh k @fC-kEU]83 T&EKF+|rP;?:gٳ|FOSpjʭHz{Ň3T${uUDڅ Koq1%'|#`Xb]M}z`??^ 35򊅯ty`:eov~toe]P-G'1 ?6pN21Zcz]E8nq]FY0[Pi[GB3;iߔd ;>+'qCr11ZG 0O`ZE-ݍZZllD8aʰBPCʲSl^l^蓟D""<*{>K u5T-yx~ݥeOrt!Tٓ8_ZLf'cXt`(([k1 炂]^^BAԑ~hi˭@ S荝fa^g||L/o5 kJ3V/!v2riW/B[}I ~30hN(+ZȤIrzg- C~js4[:1Y+ u,!q%NYNCQ[}Ҧ#)*~b൫m8bⳈuU x7МC*y/<$[m0"p\^& ֣ʖKhg~D)P;fИ8blͣ!Y6sI:G-$v  6(32 3^6תqM-_VoUڵg P(ްKۂp%!X~ny#5_[ⁿ]`4F4dxk_*:y38H4hC%J6=09sPŧ_g;׮<﮳t[.G8MgU9 /b+;^N|{ۯjyޅN{lǣ*-s8 Qdfhq 7~Dd#ĄN6ZN*~JzJ) ˳Q>m<*:g s\?kTHc./:r[f2Οkh-Hn O~b^*$뒈Ec4.GDO\z~YfP|zkw;T4Ax?f ^V\5|/h.׳ (J/Vmzn5l;)f$Xf̭㷗6dި}e`YĝλWi";$zp*_zwmPС ٸ~"}Ѝ85}m76x fGOMoPw9TH4pxR9-teB~bw}!> $F e>BOkQnm{/bkg /n>fcjwFlP>_8`1̀~fcGij6{5t@e? O\<\4aq~!-Q+o Uڐ{׶:"0j OA: V%\׳7+uDj<؇xuTť̂^ bYx‹ovJZbH\0&]&x:9ׄ~GFIdɪJ~:IJ"EoAbR4Y[9.尷K!_f{GX-Wʸml s;#Z"l^!d'Rrx:Y(앯hQeE3_aԞFw΋K:^OyV7Zn-wTwZ#4+ Mfwjg|zBq=1rs"OW^9"Ȭ?M';AK ㈜Zv,mqFच}: 8]A)dW} sokLMv-ϻ+[MHHKEcμH>uF,FެMksWr%W,;6+:^3Gۼb/[ʅ*,[vLZZ#I =}<>,CoUΥ o ExΔî= #(❞emaG&+@xST+D{`6,IV W$r:Ynbb_Ɂ2^G~ZRٽ,x6A@Nevzk;K]f48H44"%;h0:Qn($aRgiUOY,'yJu+QIxٜMG.Co}ht[˫Sf)Dm*<3-gY~JB*ΐFN!HŴ|F|NRo?3 t DfǛk1(Y&OOn~cʝQT'$VFf y]5#8ڋp3k2<+'emҭnE}oEiͬ XDx/wI}5= @Yv^V\},E>=Gvv53qmZ.w!Np~ !!`!]C`Rz/;1EG%:-^uqކ0 r6഼X$ق$E$\/ct<꼥 m"2ݐ߷#ZʻݩF>ئ$]s\ )OGS7Nv_T%%- 9> :`J/皖{, Q\iNrM3IL2j/H2p/-Q\O;|`[e/YmҼ!.79-eMEVȕ&AڍKm2m7)>-ɔ TTWU=&{s/h}sOuGN<'.` J{ԋ:5 z?6+v7(߉ZZ苪nNe80if]cŊew&@䕪ܹ%b9wPݓh>|ҍݪ[w+֡ɦCmLhp.~-")hW2ЛC{XITE SAcI.]H%^"μLVrݓF] L Bdtyk\rREiỎ$l~u˯ӓ (^q0r&1=Û. v!'nl"VCq'4Ǥ;*ZX+5{R&킨n*nEPgpgI+x i,[")A ~@3~$;[߄oќvRNJRԘ'-[e,'.$'OPtKt B'Kΰ9沩i_[(슓IpO-[+ }U'Ca]nS,]MYNOKtm[' M]{jy$tvҫxPvɿ"{#"ApoRi/bLdb c`DޔH[jaADᲳW4; ԊsތtH .:L": .J)aMڿz7w󹪙0FIQkʚ>d){j+rҎK\UwK&Ϋ;cJ{z8Xz|ϙ]AQ}8?H }ydLbsʑY*vmVc5׫e$`1||CG#AFǚc>\vnqQu@Ui4"mɁŝixjur[s)4px9+u,>޿՘tAhhWJzv B?'0 r.HV6$:i"=$چ%)V,Y*?Ac4StƳ:3tNX("<={~`X^ *ε'H%I 3Ȃ67RCW=.U[mWyFIFҫtF_c?%ApiO7;Mg@ՍUh]JY'Gő_WތybV$H72p*)hnI\Ϡ3 VfGո6QY@QIYgq+& []b,m VRsG-KGexϑ`he򨑗]\tĥլ %]"rKǔcS"DDpu<T9z?@ꋜ_/r0Q \3!Ґɸ+x"|wn|RB($Qx P߭ƌG)f 6Fb%ow7O8@͸_/X{G[nJtӈ3:ܼqw}ڕs'$%G$,(5obCvVQ^mӝ]n%\_rx77XH 7k9ޭhp&M0_96qKUDM-2>_DZ/uM5Y`?!jav o~;]+ PQ%f 9r&bk(gE^4Uci\sA$Gu!y#CCC5A{CQULD6YNh.646x!7&$s ]_ Z˼1|zscJlQ\z+V(.a=!{,q.sj֓<>LGwgpj^zBT[ʊ1ΊQNԑ\$wF)/'2D9۪IT K/ Q -E!\xN>xM*x+HIY@Ɲs?wJI4i腳̳ō>@Gri <EM琾s5VӹõTtm:4?2gu*(8;5X[Rx^+*t4g!cJ$5HcSX !ܴ}%jdf6o&I-8q{BSp/pr=DpGVzS@ZRKl (cޫiïZL6ܫjhu&, '?tW1.#Zr ] 0ե(* :?igykBrDP7AAQN9>d.g4W*ȵ<ȶdbO6φ6A>i/UC71 PK`u0SCRCݟ"X@r*gYkI1C\5F6=>WyaHO Ј_3>CVcyyD\Wݸ 7/ _շ7OBx+Cz$~te; @fیe߱LGBpCMOYO"@Tjre t^#d8]Ej0 O7(x ח2i5CYd{Ħ1v0U[w?ߕ/wsL70 -U^wH>m=`{ӳ)!*iHv$ J 1ykš%38 VA$I$r6cMGRjBǞhDa<(5 .8M\`'Xd 0X'"6E^]eF{kZxWh,괱p 3(θ3;y<_ w1Οr9,39x8* L[ 8dG/tkkG]8|Y`X8ؗcccgt1Zƒ"re@ub8+u3᢬>y7k~C@ !e*EH!D:{)?U x2{Fe^tu{*@D8jǭ2 MzqD%;!&\uv3eq==V:KX-T`D#ͻ')?ӉKGp>ULfu5[~$aeXa~,89̀,pȁx jv/ɛW\oy{7 1:8S2] flJxWGeCljŠ DRۆ6mk b4.Rm徳M}}$%jr9h1y6lO&)t)X+ oXȱOHKaJj"OtƠͶ!9A? }Lۭ]q6S>.,Mס W):i(xZ"}Ѩ~&l8>U3[lAMs7ߠYR8O9vK ~$H!ع zJJz|oЩ_ ȹIൂǀf}AwK~d a01@/'4fRS\X @3FpH[]Tv'd7 gZO71x)`.4zPkl#BHHy"ٷet;?)HzJP+,v" yG)ze&d^AS ^^VᙍG38:Zs" /g %mw*(0+^5>b.昋| ۢѮْdΑGg9LXe/cm(8L-=2Kg*ê?<)Ql/_š$Xk炡x?I/kB 'nsV 4u#dާ]Ār>puE\r UHڱ.=Lyڥ4 9[:쵣xQߎXkq|OS-L)+I@0N0m(]a6!8؇/fjT ]ӷ;rPeF6#jW5&( Smf-43րU+ZVT,y44< T}Fz&25N=b'Z3Ceg[cN{iıhX$\٭ўˋ쇫wx]IXtO&R0 s/)Ie|SOdLhif{` ^(aVZx&uŸ٥hpV<<5$H~)&p#w!S@1MpK9O,u ]U ,0QءjKkWD`) &0So:Z `,BgX2I,.}-NL"ݶ3]GV݉q!fdbB<̿O|@a@̥ɔQK[5lvncPtoq6.HtEphXn W s a}gGLb,mnk"~S53=p7 SpEu&`Jdd =w<=Pw"MlOi*fu\@P4LS &ߺPDy܋,T,(~Z< }U'ݟrg $9!v=ų34 N\R9" 7> =ڰiX+br#jzDj4fFړMM?$u[&_kizJn'ۦ1%{&@.""8[*)(O_Òυi7_ͫ>uF(}![5 +#SrU0*Pjh0k=}8R[w ar57!aH)Q| "6УZz=98z |Q[|2^nd3JD+NŅsQIĴ+|<[ӂ23a|Mr^JveR(4r$mPP^XCl$;s@9.=U?2I)99,+q L뚂:i0RaL@U@IraI|Y#cO }vtps(Vzmt/,AȐf Y8`N1pR@q oNFĎ*>i^j@ٞ9,'p8Ls㱪m7ђi<wvUv,,n'G<;_pVp H}әǤFS'WA H )F:tG(f  Ȋ'kwn$la8SF3rԤ2]j"aM3vdyStoo-A(% Π[@52$p@UyՑ 3=kc?EIwrVdiZ,Qd3=Cb[?_9EI>[Z$clXSԛuѬ՞UԺaEЧfUffQ8W)^fvWS'9ԄjY)l-"Ox';|p4XǢ[<( LP'0{6vdr>Q&m8AQvw8|ДL /'/ 1fcs^̂#L* `VJQ@(0 A1YqUR|PGf@W'݊ NwTK5͆q!ASdf3鰏B"L_*hҁW&Vn;/OҍiH5N&|? Ԥ\wOa93LwY!sjHGxeـf.FӝN}OyYnʋ͵*jn~n(Q$p'Kx,N`^Z⾵GIt 50W$=@FdbՌ/q=ibX >T礪@bwP\'.l;  ()6_ L% Eu W n(O?/2L`:uĘ.gRk=LНuƶ, 2`9\? ,"S8j _\W@u)i\TYOvpf L}q^ SSdK>yJ2I% N\= jh>rTV$NiCi+Tul~Us$]~QD}V#aٓxDfme9ʧwL\oH-AgF9__(灘҂%E}ր _=c=%BK¼]UZg!{/$U)iHu' sk8ߊUexJ)8X4 <8' genmZjNH4'B8ϙԎX2pAŔ:ߔ\Y Ňݳ`w(ѠQ d(cՅyfBшZML_ eX#:+M H6T e\g p158@-njQZ/$}>t!4+ )U)[ƹǔ~h*p(um'\A¢?8sB,*{Ƕ& wq-'*ԢD?n#a\Y*C>M\Ent;&-nyVOed4W!lWхjwNܔQgaKUS$̈́ꬾYz&Ihq^dwo#*rs0pͲY[ Y$ qcd9}5)z`W$EPğ b^'jp!?D!ÖiGʹҬL>aNΈneaXg'"K S% DsMR"\濱m`8<>~kԦ|_L*T6c8dl% ž91(gUKRB+N2o jCQC|X5Ԝ=Z K' DF6D݀q1YUHNY]nXxUѧY E2s"{jŨ~ ?t*`%*x < ́ >|oWK{#ǁi3_]&qy.qH']A>JCd8^|<Ӗ|g.%o~AVIFmû{8)*DghgԈ/0UZ2bK# W:[pl4[#Bf% [`jcZ|A& ۧ(CgDA(MG1̶1cAkkLu~ 3wr~諮e 9H_+C{WF6}1@PD9 I`8FuMCEL6C}/t_nUl<4og|1L<|gU̧b3i;F+@VYjNܬ# yJq6IeP<;د1v*YùO٫f5'0B> BҜrLOBo$Q?ؚyOPhE2 3. EIȊYkĔQ~!aX-n.E|`PB5Z),N'ez1u WY =+bIzQ >:C. Di:K LN8G ‚ :x:λаr_ʞK:V,1,V }LӋ_kzh N 1b+6 s~yx^jHބ`#F*-Lȉkya }꠨|F" } Hd% BiASMe[A,=?<ʹL}$EY&$= oVڅgJ ):S |?ktaRe_E,Yc㺲aBPjZɗW!Fc,C=?Oo%5EҏjU _,'ԛĒ_vKzne\% ~jTQ=(Y,p%ZE "hj'#8'0fU^wO_)7YB{O$''5|I]G-n^A._ f}0er_N\2ҽyҮM&>:L@a97Q֧o GUĿؠlH_$ IɜT_/Q CSxP\XaA*f*{C:oz2v[v?pUX܁7,;yxs{o;6ұpдڋA k(<#2L8 RˬU,."L7ZvU&ϻrI͸by9=A OӏDbRBŀe&Ʃg}$YisCuW!Ln#yn0CVSUCڀCJ)8nDGIy\RYٱtjǘlF^q*(-QXnT`еCj 7H9^u&YEXcAe:L+9IULa;6PǝmOqu!WT#[)-08XSJ3tCԝ\6Q~SJ-K[vJa,9iRLwgAP-yV`cS&%u)>TJ cK[I=x .e|,k֤u"(8Ƀ// m>BE%c{(omE>l;J0BmJ)f9%MTo^#n!d F@=I˒{-σY?Mhn?(+,o4Zc@U:Yk=lD/#>d~cl+h2<2M`Iy7WP}ds};Tƕ_oXo,F6Ih^6.~=E@*. ܑ6dܚ&0^`7ZЮS"hB]F[pKiG}5;[v+qKrv8DCL9W6}ƚ Aɑ/Gys 6@ȸhhQY NR郢zbs~{ y% c/mJ8cf"s <)oE6¿?ECTO nbWn'^J1 -TWPQb.*KY=SmIGe9xsFF R;) e9Բo ةoPmd4:f6*08h4UjbTPF6~wCuY*2Y7\m,qKU ;"TԽ┹8]D]\x2bJmoܼ#й7mH'& f5+t_M>qDa~V@!X7 Ry#-ns IK$gr۪C!R:v٣" FE(S 󮬖VSJ:a1If][Ǖ<+!׽ychy5i1+.hsC5~R "z` 6A=Fc 0 4/`CW% ԕ-CNC̣t:OB[K WzV:MR@c٣ Bw*S+nQvFfvl6lDs=COl1CX0aN3Y`+fBs5#$tҔa{F)SzPSc)bQf]ˎ4]{oh SM ?m {YזBnQM8< :W@8X45*S#GF7kUR6IJQ9H6Yw,J9u<) rr,+ "NƋPRpwkz:TEUsDc2t@&]-IfcR+A'JfJKxM)>^g?ᐓϟ)TY:uuLS}@ J9K1Pc'‰ɒFu!!4iӂ_:OE34\ ydxO6_'&fk ç[FU\ Ϫ9U5Ruk A2>rf2BE̚Kk Tl%t >@:,KHm(E]8@`fAg3szE1eK+AdGK7."f58V%2b6w vcNedBY$t H 9S:mCZ?/wvB_Kj 9y?VԝˁP[p퍪;&!w.a2隆m@ j'&ZAPBH%R8ww ~> \܋1 lFf0߷ax7%*fB m9=)o91(b+._^_wj2ϔQ trc%2PH,}ke뱚 m$˔b2Q{+smťxroMQ&eGmg:ePA a;)LR{ -?UΜ"/]VKqwsPTBOqUzB;>f䲷.|(Y:W&phR؋zd{(mrE|m{F>J`z!i5ql< $1\jF F?1LZE)*MPL[:Bɣ6D[[m{(bNeHBE]3/ ؋ &}~HmMn E\'""/0sKh_ٍÖnm7i6VGf-lAe1a%>4 R>2޺1YoAnN-9y`M/3 N"C2^;: @{4q؏sm}3Y_ڈEa\>!=I"Nuox$Se&Skg(&ygK~6knXo> |woY !HB7׌6`>>YO cB N; ޭ/ҥrG_7_JIR Td츒є.R7X}oEq[}].4vK~;j*F#m]C(1b!#Iw V iyF`W5K83j f6rZ@e߰s?dGmCOyr &‚bƽ,REE4'üXf8\á 2˲oKIjULIu;.q}DLB<#|L.:f_Q;69wG"p=e`w']|˜Aȗs%2bTuK_SR|3#q5ˮ+.kqm"ўZϧCHyF-w]*{wh5߰Bhb+.=nokI]?=Z@_77x?TCrdNA^r(('T&Xww/xA0_79PkIv)qL,EӓMs/lcu8SeT.L)%uՋMd;0a Sp# :[x~3 8e~㵛]AIRMjT0/F$ܙ$q KҤ'GﵹJt `Tcnx{uxW6^ʿSf%ȩQm]scSHs01VktE7rd"GtFbMAwX2܀8sps;c~KRPKzF(8eMhR~T 6++O-iXbmZUЈ̰J%0~}t!JMuE!'+*1&8_# :8T3[әKTNTc$B6ZNd-VY^ȎeЗBRIz6'Dɍ3cRɰ0 Cip~Vs|?̄ys6hUSN676YmTU7'&.%j*ӿiʲTЉ,&'#i7FY'(Mh"Zϐfn~t$e$@BmM X*fށɉjUҒVKbVC Y|X'ҐՍ57/Stx1C S5MY&@g 9<4p8ӧC.& ڃ@ [A] yѓj=|CqVhaXqdz:߈p1Q1LjJ cJР0vvS]qo,!|)Hzi'}]] Lf׷iˀ\JKkIySW۳995ҾcGDX#43j48Ĥ~dBՈeK5CKv"E)q# t< @P3޻Ӧ_B;}ܨh/TkKry:Y4d*Q|>\Ha8$"~_+eE`)ZYuҞڅ|׸-`ٯVQ)*{\?NJFUQ/AmUY$ wϤ:!0G?DOcz,ywSiuW.HE";NDnrvB{F ӷ u:~O<{V/,qzQ22OmB?XwYv^'ے$QHY孀DSɚ:`wҶ/8. tY}Q؏%L,N7CvI/X&§%ħJ%f8M ivH82e.:щF sCm" ev 8HUE;Cg-5LS=ˌ~9#uV~(Nf_?کBd.SNBj=;=w3,D ư(fr EjIjp^OioB9l&R\Z,GH c.:MOhá-ͷ9ϝI̩t&s֐C W>*Rymw{QW{Ey:z Bsh́*߷)2Q3Pi897ax§%DDK}=ӍM㟤P_>bo .ٰ|:C1J&gNlbJ?<Ŝi,z94  E.k3r:n3G>+uDGNV<ɔn4>2zc;lj8vȇ4"\‚'#(RB%)d!wVu@@AF;`k_u봚E%蹙*ƨ@\qj :MŠIQ}ۛL :C6:i/ "Im&q8@~y~C +3!gfiߘVI!CpyuӗYĔ~N{x<"zy?Nʊϧr 2 ~.`G-Ik^^,'sWXg6'qz150=ZLp|UK1[7n%T;ŒRm9 ^nsg8r)vB3dYm/?c>U 8I`#j_}Kvh+1bGp(ߨx#Mˁv%wZ:6+7ҫGoΉ@D&pդIPh H-#:;(ΦM,N> wHj*2 S$:xlg?{\N8y^r]>h-t.HS;єq~ㆁi=ʊ؆v[Euc&c@hN^&[tzѹsuKWܟhݪᔘ ЧMl+KSGWsy.k豼&Tai=[[%zEaR)F:_U}Vk[JԋOʢm jXw)p@Z0%]|){64C9DrU'HمS5gd]ÀQv_|x Ǔ‹si@5M yҡX=u 0ḘK־]kxtDR4_9@aLBâcQm 8y)պ>Ń0 ZW6G(`Yfro5*9YC襝1|†] I`S6`k:gkaE`/zMS|$"[9 )4Pib#RKNufNxo[.O Q꫃<[>j@Ub{a7;Փ·XZv>}{^ *ȥʉs=%ڻDhCǦKpx0d[lNog3[@@2T bEP{軠ݲZSq¦9>-]}u;]ZlL[hsM u2l.@*Ȥe)@E Yr# `~bw Dj O(Dᬢdu@S7!+,.)HKW6mvuU#ʻKz ~(OiJ8x$/{Gr1+ e᲍Nֻ)/S\$]nv᳡2hgVJ$>s`EY.R`PgJ(MjYsJr xQ@Ln4S?ذ76_tXihu"h1Pe*%ܴ۹؉L}0oQ 1S`_tgMX'l n~{iҿ&!uYvߌjM.\EKz,L<{?%4s;7oCgt/tXP86S9E?v$A&s([gĖ+ZlI+=mx TdDA|/_mAQc)"JO,%!{uD` u}+Ay k*ny?=iN71 ;9$mo tYhu:ygƔ2~>dnjf(22+ێ #߿~eXs!" ŶkI@xaw㇏1FQB%(qu4Qv)&@$Zt4՟KҰK?9p9>M)_)*QZ\rQչ);l?A.MO}O@Er]|"r Ef~#B媸Cs~ lڼ '3#ZJPpaS7^1/5n_ɋX:BFFe@/ʻI,wjV(u&(kAhܥ!Xkc#;]̦=X'a[_Q©rn},v wARQ^l-4Y26ۊ: ߤՌOꤠ|vw4p_rԛ/@o6=X<=oC:s-w!i;#`/x{_t/bGHgJ mYKB{.tPO7ǁmM`LXo?gO@;  Xv7Edҹ͘h%뮁sc=LE*-\:/&*mֳzh" "LyYh0s蔯4>4wg9+!GmÚADL/("/+9h h ?uBtS-U8G|>`@Rc7>@t(0!. Ҟ$µ̛g=_܏'[ ep:s)O`@T,I#kY/NQZ!ˢl>;4 X`Ң!fjo b*l@5'l&ĘJhI[W0N[yg{0oyya̓whSUS@J:H-W586©rKA4H*sYu뚊S (ߊل;#fS6+Bs `q`$]L^Sx?`+'Rw0ost7|bdKzGcO[!zK ܃ºO zT$k)!tlt:sўG7z W/pÊJ)W8 D_c.6COG>+uY ',15?g2F5MV=0B +p| ͋8\W%i37*6=y^)'c^P/Hyhzgs{gJtA%8# TטgK[ִl|Ë _W϶=+C*[zغqk.m0)VДҽQe쓒q`.¥5qG(*gu 4}Dw+)V"=Cȷr͆WgKъi瘟߼_ާdmi;\J룓VSG9l1Vs_vL: y섺C?]) #U'b 1Ɩ̂bzɚ#&OLe'^G'LE8(̽o]Jb%#IcC<;|eX쑼po#感o#&CTy:!#5 ֍r_d Itq^wK:NBmc;-Oa$F&3z~]Xg|!ݟ%DΈ IA,EqT?B3ӂu FYН͞T e?!lE*$ϐȃHdU&gH-_eQ5FEvhb)! M!*[< EuY=E86M021H2#F f تj閷6b3f]+s ncr΍]@3= p{6+Tzw29&v#b2-a7`On+,qn#|y; bSV$Ŧ$Y,Mxl 䉑q%L~/( .^Ge«HP&4/?xBX tiJw8<4n'ikS.)70\zQb7cL(Ќf]&Ӫ!A*Z5:LҖ.@z&m2kǒ2b۪nߍ{UɣpG-=MaA 6,*s nZ915<䍉@Ҿi'h<^]% hmxlMz+蛀Q=ijdp/RASiN~8dPAVÖZ @~`LYOП \B š8HȈ7"{Ii$+,(1.)i,d7 E4WOEqTg.soCzܦ9e '4?Y5HyRԆ͘;>7s;| L@jR뵔A2>gc5RR,3PM]o=ԇvXzY縸)O$8N3iD  2|:FN lޑ4oQzbRL.,ؔIYEG3By sV<$SH'[1lE"wmbW;t]_zIlϠ1^hFn i,[BL'*zFk6莲4Mj'pwsgrgzʇb4ĦE?\524;|J͵|N$9oۉaxx'Bd kQ^r08封wg!'usxԏ*h睻$pL 5$>=sV;=B?J@dH³XghD\xD^5\0Q%a$ wc :)Lq"*V5i\Eh9|G_$[;9\ITRqL8wxb7ɴVu! !(iEjwXZfjllnT ܥ%Wr 7=-nSj*m`?m? ,(o| %~{.SXSm[t"W&BZyX7A9_ʹE'mH;X+#RS4+㻺Z(u$Jdmǀ|Jk>- Ff;䃂hV8UOf iQ9);-JJFb&@pZB~wl9"mԬ;3rǒ HEVV5TnT:akB #JHQfEٟ6ںIōo {!Ilb TLEmK([[xty3P~llI,Cs1~v_BH2ȡ;%cH`M3Zm#t?BafUR%"kmg;pճTȞ?iQu.~^Ym>~?cEl!G!fOƼ13KhMKSrʨ?8 pjUJl,wC,G\7Xq)]/GC=*t px|rU[-Em-pWG!rJũȅ'~sK֮Gy5$;?,q6:0oIU7LN\ zw\x {ٕ@-GAsgMє٧KoE0x6jgVy8φLY匛.6'8|i ^1UxmLRa,p[,dl>1腓0zzx9^)rwdp.1ni\MK .POJD:!]BTonlRg_vybEt/J_#@G-kR/&+$ćs^f^RQ+v *Y!/ [WF٤-^MQxxCe]sBm}MDޛ?u*W>.8cRgk]Us޺m\KC{AvMn;mI=Sxbs[l,IF}"k:×Bp8NGf*,P! ^@aLv(hT9Xbn4jS;>P:u՝J#Erf ^1ԲO'2aaMXYYfH +ԖjS*5oeNkq[(# v3Y#n<@X&>5*z)M| J;c"e.NlS歃"Kd*F?|͜iRA+N˄.T"8f=OK莴zUTs0qH"|f'Ɠ +UM.k ю_XV>YwB;,gn¦JfR2]żb?sn P!fC&G k'ku_1!P::Prφ㗪I3Y*@oeiX ?u>'4]nZ[kV#מCP3$`x3Sf3Z>ZF_M%NAE,qE4Ժ*\e;hϥv' ! 1KA[W-pg0qc\#G]ieVkϵN =CJ cɩd%[F"eBF{j<4+ݫӹ4k:]›Z NfZ 5x]TZL)Y)l Iꈪ!?Y2d? %U\PĒ$Vbu-&f92Aqb56k>=dӫbkH,2<$ddt fkQz0t!!jy떇z+S[~$JC V[C4Ya+G^PXc3AmRgqU)8RƆ=ƽ\i'\A:|腲)6s=$SAD}co6'虐?OR?|W;ȫq(dij5]ݝg˽uw9K8(Qcd)k2.paJN *!THט.|.jGxcbL tSkHAEԆԖ0n4nvuv"!@@'`ShZih!qT"ɽ" eM5(aGe;-*G}fnB'j]~XШ"EHv䬆H\Kޡ:\pj59oP=GNzR h[{堪di$DGat<PpI{n D huufu+1妓uJ4XDp_'/N}KU1 g:# >Ww`3n!ߎr'AЄ$Б+%lOBXŃz@}oa1 ̃ZEh=Otdd~+Sy*bkI^ꃜ =ޯ!M(Cدsb?.꘠7p"2PB@4U60.2ލTx#Pd_Uo٤LX>HzS'|;_UIxL Ġ:PX=hv| Sᑾ\ Q`2nc?D˚ $B6PIX`ga^"/DD՟;F{>9;["[Bm' ÁCb!' b ,\8҂Q5\ >M-'[㕕dA]nQžph=6t֟/V2kUNއ=Gx^&aUQqSTC q$oZ`^FLgExuh),kh6: $A@H$A#"D hQheŋ`l4-=j|(* m& YCl o[]cCۘEZ ~\G>#|z,2(d1MYǛҏP QĶM ;T83:Tyn&<YMm !Nl R 9=3gMi!rR!^)(iQYG_*y ɾHK=`!rQ1wWfQ* ;dV'0`!`^ DH-23j`jDQ)Qs]o^MimbR'ES($Vke@J$ 2m٦Pl#U&U) SĹO2x{21I(1"X% Wx+8++(OӂRHee9 JBX)P$ lYEB610?u̅ydЁV~xVzSO3U}xW@`bKgÿp>%X7Q(k/D>*y$F R# Z"*JVqHmًjsڥ;] J9f3QB߇P^(.9ͣ~@dAFG!?8hlQeX3lۮ{Awl꙼ƒ/B%AFwLHf44vumo(ߢlv_QݍpƟWvKTFo@Fn7Iw.S270X#Ws3?o&!gڇfnGֈ/%~y~T2Z7=yj^x:vZ?wyy}vB<.:;seבh}6X}6?#G4}k(AHV E*EA}ͯټv p>g=%K8? s΀Y"MU @%gjĘL{5ead?pA):kib&1Ľ(nW$%s&[J`CT"f(&x,IwL4<ǿ1v9d"^c:8>[Yފǃ]O5B4gaRݽg~w+Ĵ[L+Kk>XOtmno^^BM_r?=/i/_[B߱OG^.7uŤ0Qx~JNkQ0葀ݠ~N!ݰd¤2oak$eKa?_s:|;=Т,fnnh Zg] oG@<,}T `~[]2G9k"s:Cʡ2ĩrΡ.zwqi;JQ[>XP; ߋ@;M}YUػA ) , w?1q`%UdmʸopUHPqS#{xtۚN~Yz?qT3zy Fsbz'ɱ;Gě-sнa0'gmr.u7/]+Ͼ[΃mןlzMWt"bAc,How6k?y<Ғq=.fGز,G[&T9fY-ŏ=#ofm*7t-HV9Kp;w>[p0FHRk{==%rJ\B5QG>Zޗf5򝨄n{uKyess/A{:jnއڵ{ss|P*" YHRIUD(UYp5/кD[JvJ"F*U5]Y r"׿Uzb[Q JDNO=?Ed?+{}A%-cC`?kP]9|i&&k& ds]bo(4u3Y0z ^fܑHResbڢSϮwJJj2K@TrHfJ]CkC\P[D>O\vՁST VL1g1)n4DF5D)}ZW` wpuizCf"VYYx~_j%w5ML'RӬ֧qۢlbA.4L iTKW J e#LM^ L,Vmrv|R:Mjf0QFk6#ej[hoz/"oN-Z_K08=Emޛ\{~V[?@a  pI!u,v c$ QA␏kengx[; =z{lf/<ܤ~+n6ry*#gsA#C(yTnHgѲ9C!YUD`SR9 7c5| ER\zNqH3/tCuϢ=ctU&?h&q?d"w]; R#߳zXBf%;nWCۦn};8?-3o=.VO^{ 9}ljEƗ!;I1c}.Mv~V.џFX⽿tb|߭Wg޴Kإ5@4DDEǕ~*DAA#AaM"ZsPAE_Zzi_[,дpF9#`aHc*,t.$6+. @ NЇؚ&7䬈W~-c4.!cm-;3yLPw"Ŭ*z# R!P%uZii1WBR ":PS MXC3V 5%U.-򙚬,WsVjԲf)9+jS3=)"JfFXLn%jMyBZ8h\mJB6U;I`_x]:[\O3k7ηn@Uv(# [& !&c^zw-έɟ@j44|+V@j jwڳ B>j)#0ɿsQ'W^vww1ka;`ڪ%(r|xR d؄(e F0y[^Ox4Η]iY3@7*A_s:v]*Ξ&w}t+ן]Onow]mۃyq=fg熴ƝǙ?WQ CkPȞea!`۩LΒG$]ϖW¥!bY &,a՗d`I t?y~69&~pUV  E JB١/|i'~R~s}i  wEPd6) :!$1BY).ٖ!zg*?h j1Zͫk.-7~ ?{ѿKݿ=?O^ શ\"ن0(-8<v G+]i#hek>X8Nn5n2{}_2{O9q~&[~fL>2q|۾7>_h}|~eֶm?=VaMM"3sb" @z]tXJ/u+9[?IϽ_8ʲRE :f0Z>lE:)y*PܨJڧ\4+ʭD))uwwmz!:{`$-$Юׁ9gaș۫643Kt7#l3Y,5r?!S+$P睃0=YR24 +3-4HR XbYjI#J=IHfaZ_}O],8}u xzyhy-{٤kq|??ڊ1Πv~ _w`'%oca%,$@#e9$0aR$NjܺK~߻u1=v~bv̺LiR=!I ^_ֽGUsf/zKT{]ʰNBIM-k_Fٟo?;'$Q7#nt948Ey$l3j)-mOCtH1>t=ݏB%CY: >b0{Զٯ8=S11a6[尘I}3 9o7OB^L_kHi;mf;[f& v߶wxF9 9K,gNXqZ|%Vy. NYp`nol.Zx"^Wԯ*h~bڱ󇪦ך(Ug +?bւ4&秙%EyiXuU5w_J4eq=;#kU)\1-1trpm`fUx!xKhq^e]Fh{w?%. "6ܯ<;Wo9: ޞKlHXm$M{>+yo'xzH'.Corb|g9}L~v/O_iM,]spsv;kZNɳ~YUzX6) ]Nߔ]J#|28wPT y0'!XI'E`,"k2>4_+|\G8=/'tj~Уf/ٽ. \x:j E'}}o,sXnyV ݐ-G*"3jL*-W/Ӳ˫;KN}6L`zQ }ՙFÍ/DvE07 T u&hJfR>BW3}񑦊YЩX^J0@ ?]yUVR8Pb++c<0M bdji,/:^( P; CP8*v?e$DfX۝dXʰ_1EiI9(lTVX{.MO_6OgHIHS JFI"h=3 |]?d$~ !$O;Bs)`,3JdiPBd$zGXfޖKVs %T_c62٠lGG滅A &/2}Art]QsLCg]|-qnYjcC58sT%xu_ d1B@0ƮFI5UG{L?ձbÉ @⸞kP h؁%_0$ꓬEDpMZd7G6-;*R??PD (XlErT.cjc+ $ to1>{DCKv$5 VnZCXHfSLSՁ,M6'xICH a387[Dzy 8+)DQxIo6p3O6!}[mm@$$i$acC#K&ViP/mlCl~'GIㄽ^!5(_om),ml_7QvlLM7' %)H%$BݵoOn}Sz쏏7}z@Wof| |xIfOHG[cIi\_y/җ@z*Vl#E9&X[g2H{)T.S +f(TȗC;ٿSzo5ɱ]?|$lRMsFN?_sn :dH&? R٘1b~*!ߝfF&`ڗ: a ؑyMVqeit.vb  8s(PpA( fg`>gOUΞa{0e+N# !d'`D1O(?qDI0! >!If!!v@硦E SVHI486 [NԸ+\\Jl_^2>f,|{79{Nş4Ɲ/h;Ys^ڝ,+ݘ/rwW5=\Sڒvن;kɒWlI),)30 }?fWp/ߡAq+S0$4T5_jS`?("}cRzT.Nϱ <6A:Tu@s[um]?>__oXиq-Z1?gZ4m6?4dOC\/98i9j.IZta~"PE2ҿ[b9IwTe-^i>7x@'B"K9Yk ! 2C^|OTJOL[Qٴ:m/;^ g.@6צTȁB"2%?"R?Û=wPhD,1/Aɀ2AJ2,;WR0 ̘sŃtKBiznO&^&\[[iu|tt 易~cO=s)΄&2z?WuXAI_acŞlHQÞl'\ ꠨,>}d NsB\CZQi JD P(W}'kvӷˣ-Kp@Ū7ky3dXoN3[!&(2B@B'd! yBOd$P'derTtxWʆ̛ crFHFPetLgتh|C~;(#d,w&,Hs|0@ ]t]l>*8=kJK뮱P2 n[$ʇedu7<v\ @yfDp!Cũ|b$'L@j\UT:~.sk@lϮV2ǒZS!3ժ'  ݄yz R==a$@0 `e:ñfůp eb/s>;}inѫ'}g ak ""#4)Ky㠬RD ԑTi8#%Ig:-P ebUm" FCFԌr٫Xfr9 ?mnЊ..8Ri_{ 1VCJY?_\ 8g} z ;˒bHMZBL4'x5. ! (lEOhQAĕ.R,*2OpS?gzF*~%_æd+E}>ϭC0?/|aLvq37CY~*iՓgh6[b;?xǂ;czu{ u_ԥ(*[!GFP [-_˸,&-H $p4L0I&  媕pE3oUY/DV!٢7y>vOea$Au+6#8MrH>Konfv_%ߡ)ͼF^";[rF#`EɅ=0QzyF>$ 2":@YHH!qH!,sR@ڳ̄9L"!P ) 9<@$RnGՎ*oK#oyxusfVנl"މso07 .={C 6L,6Y*bafNg|>W@ﺌϻIuBH?,v̶Iv/f)PzW: -% n8/cw4ۊAO'VjǻbK]\bb=`q)}K="%g+-uX,F#3!< 0yߗ"zk=OJ:{+a8BCېxG!P:僝|T{yES޶Gg^G܈ rƿVi2cݠ.x"Q d9CHآհ@5 c=Xт@IR҈HwqI IPC~-YQ@C9m/?ǎ6 JdA,gm[kVpKe<dľHc 9L;Ooko9:ET:4əI܏>B1$':$@Y$fI! CK8Bj.Zih9[*N@ awY<4%Vܶr 5(H:S +-I7C(TW!iN~@HHZXQ- *Cwr?/ 2Ss`|w8#2 &,H4{23) $ x!BIlʁ1AwI E@|r0_~gqU]?rgmLYſqUe >#ӯ~_̶'>ISn26~a` 3ݩ(jksE7ZoyyC$qwŴ"wbcTre=%pltJ~GSN*N&ӝKE(9}6_*p\3UªŴpLVb5d=+>69; I/%YZMv_2pdé{1@j~k~h{~M6ݖ2R2:P_g]H_sO-7d>VzL"@v.@Ƌn[242GT4A ZOfE ؅e/yMՐz*y+ 0;ckCZ\⣃|OͲ_QXLmkws 7I!K{5-mdE*.ѿ Xy\yE[Nfn-ծJ/~*]xEI/|6;u>gC]=Cٝ5xP×II 9?5hn'g( PUHSH%eJ1{µp Ы~";\~>5V'&lRx3l"z uw A*PPl=z^Tbt 9!( k) e)ؤŒD &db&Wj@zc15Ne" X)ߜ 8vesSwUG%:^q6h<ۏS<;qr` ut迍$Ay21vPA) JK ;d&|=a4I?.HDP@\jeeܽз K#[]n.|:"S -#+ UWe%x m6 `mTCRwE %aXF1*O Hxلd5ytU=y(ކGvd<Cv|kNv1YVktsF*=V@l֬j2'uq"yOy^A ᓆw>YN 4QT;U\QYAU+Z-RzRA;ʆ)JOǷɺ#I#˪qI;:zrAZO2|s(hgA2ym9nwsw z;5][t #Y0SUJ,l0u>{p22M߂{~&[M:t;ٔeCiI2(DhBa0֙_~ڜJ;^BR1818 ʒ<]wEHknFIx:4+&!-_|7l^YHA30Խ) E,y Y ;\V<jnsuDYQȻu̍|dwH)A?|(]:C،YC!HBŢC?eH= Xr樑2D"NR{w'b;eFnN&? _,:Jd_0TfnȄcf_l5my[mI/.'u9Fnj3 )d\XNݶ0 y鋪3Ixu[rÁo4zhXIf9ic۲B{!+HsOnMw:tKs/_myv׊̎k~R7jCg im`Bt6/@&ZxagU`,jT؛j漺DOqfk 1 {Ok_jYx-w\<UO,*󗮉ڠA_DOӃάQʛt/I|"@* z|;Qޠm OwC"ɳY3 Vx Zl+!C*t| *päw\ oi";9*>|A213W͖3r^wjӝ7'E11wmgʹ\7\mkF=,^t aCxu7-Z]vKl[(hDЫf-"GkRkms4)pI'lQQ4f;Nu4f;֭3\  ^o`rtb7?Q֛jN]Et2@ZY1d @8Qw7Gc&HDr`V2$mӍT P˓oXfեܐ{DXn%|nV~==r-3~*=7ʭM닖_9g5nJ|Or? ܶCGnw k8rE_,Pɘ)2Sŭu6-l"ak:@ͤܒC`ނE/%bwb&ĸ::zaHq|~qb ؟M^yb 'iG7~qbGUwsQZci~VvԐ?"\+tq}97СbWjp$_ OfO̰hH aspU7JN}ʿ$ ApF}LMܭVv"g旸Y/!g96v?z{km||w~z`هJڟW?o w´l2B e~xH1!fpkK7.,9#gC={{q\v"8}krt#)D yN=o\b]8jrd} ‚ X)m6IJb&8Vd%z5pH4&z< |<~M4l~mP+O* !xK޽d"( 't>j">]Bk#:PX9 r,t1@A6L0Hٛx:ӻP)9Lfmz="sHiDQ ;Ŏ r/;y&d:c*,g [s47+`{Q6AҬ(\XY>${"CڼŕW)jĈlsAR2Fxڪ4~rŻ2{GS,HtA) y;qk==m@'jnp0,:*eLBV6)AN".6zQNةyQp>ՙTvEޕB؁3tfwNzVd6ejn!`!gIԮRך˵()NS&4YݻJJVN7.?mб@kI5צr(ηw///2NcOg3㦿߳v ԭR}Gx,q5 UL͢Zăhd<$4?Igq ɲY~pۮxVYӯǎJ5ecvCkza6[ 昦D<"'59+]în{C_\dN17)cIiϭeC{ kڭ]q^\RJi9v\lXΤRE[%*?;͗VqD@zu\2Iw5 |B3>ÂW}.rPpovnIS%q2Hۖ^8!۠Y\h9jʰNL?"*)OIТߢ F"1BP=A~V4\Ex5 e$vpj~g?r;ѡD7acTw:Wc'3nc7T3k**K6O0ߋ6.M639 "/%=O+ШBRpsƹEꈆ1FJE!ut>m,Z@ 0`eϺ!خ]oiw`WAzh{̟Ltzlto',hbaw4y?yxc~Ⱦ=&+MO8^Z5@9].ٞے}Yʵ̣/X%hjAL5]g;8L9l:9@mOH&_Us57+ީ'_@(P]8Ϲa::Ę1Z *$p8YP6C$Kѳ9rIT6LFHo=hۨ#t/'1a v/uS@\:3 C@NgRs}/O2$C@OF4>o L;- R 1UC44)%{~GN;W޵o}{> ]EV h$g OZ#+ޛ| <*qK %myֹ089D1t"D3D˸bkrl660=}pPnsm8M'}3ImaՒ ,A^]EvWnoM;/۶MNx'1 li'ӬΖ o>$B)0gUH-pżMΧ Af}odby|N}[ d(PFD 8G(!=(+IBI$ Ebf`>qr'Lo{v8ؚ.ϳ)nWc_Bt-iQt^KSȲJAX{DTҵw24iRVde4IUA(z|H2 8Ng`|~kG PRf+!wx18p5CЮ;\4 ypw@H@)E$Dŏ?ͦg5ۿٯSQGVezl>gkUuvaPݻM<"j~Kjw_M࢐\;*PW!peI$nht찐B0Se̪{ &{NogkAt.;ňV[Sd'a6,Tq̺IqJ0`y'ݤCfא*IaYRhoRzdcG<Φ5흼f3KRQ.dFU<"ۣ9 ZJ 4w /ѿ9~w0]^3IKiNYXLP;z _'~*wόFϟ4M:~v&05#I $ 7'Cj_k̉Ut  S2*U%:@$:'nj1D$3^է~ҖXOs B@;XπeU!tҊq8g6) {{=gt÷}SAO53Ca/&JAEe'}7.lsëb{`o3 ipH6}j0[N=hi缾!OO .-Y;b3ť嶺n~]TFOijI mQAa6BCŲ! '?[`@j@|gg _3>䫱 R%C%Y $Od! HF`=Z37UkI&Z~g{~n7:v44Df=Jd^onɠ>ءTT.6HQ?_;^.k0X)$9 ʠoIu?Jq0> C5ܶ!!'stB_y6nY ￊqo7PW$~G„ (I=XaUA)($bl^HQP-P-JH^Z}E`_5a,XQĕPGxEShHH`ԶYIJL࣡:#E#,!-(o JsnL5>" l7[{GW6ږDNi̿6 JvoV_o'nIo$Wa~,v9^ab݈}%R:Ԍm`0WOK4!t[m8!PqЇ ,ĻSP{<$a!.OP͌exьBMQ H4RFfLE*bMQc}틾^Q̸'% rl|@ ÞWp@\TdL)>MRknwTa8g|R2_ $.hneQʐ/f 3.2Db7`|T2AkVN-m&Yp?aNZ_Dnţ/arZRK5#Ǖjm,(Pj**-a߿ߏAu ߲L"W k\Nd_<ϛFW/6֤1ߑSI)u_7s?@:{ۙyTsNl9v8[,UC!b~ڮ]]ls3y񻯴P>2p<}* rW9`[()7\'ɗBhIšfN=~[G.)S#}$#ӻ,ظ;!b63I6y/@KmاAil_kc>F]~.Y_o5kI$l#L]B@/TDM9Qhil^gG?hj,z9hakX/uWefAEh'JuUVjd@&uT^U= z]A.uh`˦9GK">{N &\0k` ͶqI[2tP`dQ"+z%thςk\F _taKE'}te-ê˦â{CLE\c\@ŰU4^rCﵾ/E/l@sD,yP(=G.kryo[S8701PcZ `j-yZL PZ&gL5y|l[.*#YI7D:rc)rώt^jօiKIܣTWbqKCJix(4Y){Nt͝DZ՗Q+U&F2,v>UנaGcۇTaM$:Rwa̰U$EpTxA6o6qZɣ#*Zp-c`KybќP7=f0z/͘EH뚤?E`@'&z ~$.+ L' kX%gmWW]S [NHt8J:" ><}p8{>jQ}^=6QɠRy H.ȆվU#Ie tBwD ^GHخ.p'ԏ3ۢ/XUೡ.%˒_%lD B\XAk5y쪎Gsk:K2 q湣8TN@Lse# WV̫8A=pqa4!U`n9pjeu~g oY Ī󔜑tUp+PK!JVt< JS%9f{wuBVrO06id#rPllP~ۄ(%KTp&̽n I>nW tiYsyZhbdZ+m,НB64qȸԫ+!! VF2dN4p.)SU|n&]z[ˊXidͲYYk3xjg7AH?TCXf/K>=C-[cDl @F*HvmmN U#|$bE>d&*~osr !иjƐd!shCY`ի;.aI5qI!&P]xo|ۙ>!vQJfᮅO\Db1hW'VLc.(u_0A)޿%?hr`ҿq!0`(D]U@2*/G-q=kCpM, V/*A[Ia!BaT:L"y4tj=/' 7w1R9vcqv9Urگw.>/MeLqc 5|{vWQOK_j+AEܶ׺JXhDd$S߲lBv?AHS +f]5dy8 ,n nrbXj%WY}K y}o!pIk%!ByUH% C0KA?jװ ;;2D8sZv7eTߥ*#Hʬh2KiC"pmр>pj}s mtV:L`|~k[WEvZ.Ҳjv} 5:#2 uB[:'5/n]> &T݆"gQ߱kIonݾf^DpM?d6s y5N69vvx+&%@䙳,D# g+_LZ3vx?NZ1*̄(Nͷ^]KR3. ]8X`02Ъ'Ah X3g,j}FNO ŞJs]32t'17Nr1֖pO\"p$a?\ɶ,)HRO`],_ϗ _tԖEF!z%]'h]Xzqd%F}{6M׼-r$ |&{Lޥ G3 @~B$9qd!6&[&9J>dS(ľLAf}I W}!訟␸cGb5CԮ'IA6w(s(J5РR98DǬfDH(y1e&u e~_VY vw.7A>VS M.hKi%)YA'CTUBz[A2H#&k +ػtCJhK:< N7maE xLlX(֤ CgdBS pCs$5*T2u rʇ HOH,'(mmƆ?eVNp< $Tvsf"ڍ.1+~V9Y+/}+RlSBHx$@@Xb@K(-n<i!1 㰐㤀K0$PPR($rbUpd4D ô *A 'q$ja٣&6g+ : *b>iP$W[w{ė!:Jb^Y/~@HOI'l @r ުB N& QT%V |e\v {@@1 WM(_oQ^P+Uzgo&k M71@`bhWxX3TSg ŷQ9Zv1Mi3)fq&m.`fq"> *"FQVF)+=HVAK)Ecm*>|rIYR,ZQ-"%4JJQ]slnu1K>qOO9PH .$~ kPu )@dհ$R!ro5)֌@#Ә>C,#4(AYpSGUՏړb(aˬ> NF|[(hlΓ`gs_0F@QqQ@ղ@ek?A,]/{r q[ H*',(E( cU@X 8EHͬмKX#w9 j4Q` 1IB(O/.i^WNk?  =nCj'-31b+ň\}ۍ.R%$A]h6htЅd:~C ZfѱcL/gtK&>Dz}߁6-=7@*~"9rv}DSν=OaB(ʶuuv6ʡWh*G؏*ByF{g6`F;j[KgM8. Cv:FsYϸ^x{6|CEe[`<,YL>E2\:\Ijp;jJ }:)2Ȳ<0`@";neɷ\Qgdy<<xx󶨥 4ekkssOO~ߕg{ғa>B'#_߈QgV{2]ђ:+S(~>k9hםӺ&L aC{ ȁ@A^SJnnս+ A MTX"p.EG܅W'-(!V_ÈH}M U_ A63^x+2E%?r݆ܴL 9+#@Ǯ1>b~""`g3Xw+>8ʦ~. ?K M-e)BLoLģEZt-,Y.Kc}}3L֐e\}O F+2hxPf^`Eʁ:8=NgZ}S:9JuL7I:5R y8Mc:ii8;Ϥ]gAm_JfQx qwׯXJg!UOܝ1d!fN@î@)Qʒ w31xE!ciue_HE,.VW[e{8a<9\<*{BH"~أNEq1L]~J% l0XkD+y,s~"@I(uU$ yvJǢ+P Y囐Qid$`ZǾ8gXZ뛢D'mƚ1tЅ'{ j=3 *Ms(eZЩ+k__yG$̂ FƺDn50!q;$KM} ܐz:)Wp*#w18>ͥj!xJͣysԳ}Prךls= F XSyTɤȝdUc7&vUgC7}KP].1 ZgH 4*JrZx&vsND2vSp:~ln7#H!䛎Uq%C2у#t-ȯIQc̆J5sZ VoZBIp'ui^T-*/Sl-756$K襮-Ȉ*.a~Ō4AD*O|k&rz2{Χ";Y#5MJ:.֤Cjp+[@qX@fWNXzˍ@0 *er QLl\i'41 TK^KGdPaukCyT]$#Xa( p\$.=ۼa(BR/'q^MPw5wYfЯ?j^N *@3e!C!2y_fp\ "#t`@s2q'ߖ(fuu:rU wgfcvBzkE|* ^DX\\8MKC;X*Mf9Lc٢,Qy0bMȹpr&Yfr͸!'2`yNNPYw+ ;wD8l?37JazC\ǂS- hAstSӨ8 *ʤ2uȡȶzlT(U*|cb)Ѥ(`sל`1gϼ|>G]Ux4{:A9? Uv(znŃáSzT[U]z<ϡ{<)S1 Vc`% УfH0e5BI N2Z^qrvO:?62n}C*թr&--a'2LY bHs!&*b$ً; ҅?Ra"Tp"GmS#m1!/lK/[ly>j 㢄Qٮ.5(~Mv .Id$Zn{}2@н]$?TIiGVd \hh"'nDrHT+%Je&l?tiHM!4eVF{a vvɔ|hld9vzMIܥܡ#l#e=tӖ|8P="Я\bp+!!R<:^zJc *h*X@!f3;=pWdӴֶRb^)_ט"HE$M JVg[qK3FU ݩNkOuXqjL\ZzŊ._q~ ]HH*;ō/}{Io1!D 9 cOr&wx ~Bq.\s3(C `M)=Q9@@QKoXdnr2H,/5%G)PdSzߞ ) !fYRSLHSd`!p?KuPe5BúUGZau.;ClC UHI۰mj 4Ӝis6ҽ&[M-2PQJHk%=i~M=>~_T/DQCXC>7S}EL*8y ckcRSw?+Pý:I3SC-94$)2YӖO35De~ˏü$b@GHm'a$&3dVjq~_Umt{Gz X((Km=cx$3sy\Xcytp{m&҉d4ɭ/= i4C^3p[~/ oys5G_j3fA9Az{4&Tf; k \I0 bqL T`|6t\n=+Q z* )Es$a髮"B`ImeUU \B{Z U{K 2"+LDPPt"z 5LHx G ՜uw"˹&ʒUNmRĊ%%t!VJ3) :dD(Y_/Zz|T>Ze{FZ2=ݧ_^'_PXkjCa q,dL!3lbu]"Et["Ł\Dre@< J HI z_L(6ur9YZg]/jZoq(zwWݐ8 4LDH_K-+6]|f`%7o-$ #po J(mj3Mr%ʤو P,l>R)vVK:bug#Z箕r@ZxK<eq-/!@UBtDf wӵ3GR,jMB 6NϚ ֠|@"mvOf,`+-F6Eb~ u0hx]D0iJ Ymqk=% ؉eVnTB`$PіqYLǵӟȚv|G> iƠ 񊂙ޫ.43z-㳸bM*L 9xBg ٩@N$g1.|wP 9v<5hs߁}3@X^["5μ콭8tBo:4!a=c5tķ\`` )y4kSro 3~n u FKRބ<|w&K-fÖ.`'TpK\,w,O JzȺ́ T'$5E-QX|57방9»N N1vur?oO;O Tw?@; Wrװ- eHjge~%7{w?œ\~0nbнBwhlkn%KЕVlq՝),!Ec̾ OngWv-ٌ#W՗exAGlQ5#"<{r6]1@_TM{ ٚ\Ǭ+0Tcqn:RH)kIa@WW+={ylw˞5t;͡mP }-*~Gm{z^?;Zq  /VP-@B,r9&V_z O ,Zn:SOglֈ(xHtubN~iT*p |Bf劏B a@ĴC V/KDtL%VWё@%)H 0@>89n3)l imcր ׉w^s8@ $DyXǙsïe]y&rMHƳ Z}qΈ]vXs6zZK+U,eYSq6׸HWMG6- V,Ba'Oo+E7P0K')җ ^Ei)'e"`dҼ~Ⱦ~vnYZ+춢J3 &!mu{zu"UCĬՆ͒=+%nalKH]Wvp,/ĨY94t@:c9PYB 3+v<,z?Vpu<_TDEASW#jո[Y0ki~v\6/Բtų;g"6G:ֽЈ (ZڏHp_wFƊX2@$Rݿ]mb} [_}"%\5{l)T@܎"}"$N4Xd5lgf!"Vvİiaaq~47t)kJ|MNqMoo}Al]'ƸdE(|vJŒrvQ)IBJ^ç痜c@v:IJ `#+V'/qg~x+Q썤0 y S o[ln7U~jUDcT8AuegQ AXE>gYנ5i(K9TJe&tX~ǒNW본Q@^#s1!&c`t)ڔ(I2vVʇ>/wPr7w";cKM$8^ *CPﰏA"uf^1*2 BDRm3&OYp^y>VL- 5ʘ;ޡ+=Fr1=YV] t4mfWXei؛OFȈ!ShTX7,1fKKX57Wk2La艠`OwSedMӮ>)Lp^o)zɋݴE~\Dc!Z[[8  F8"#H G yHA~o&aB&yg򌇛w?|6'GG,6RJ0 z*UNu?]ՅjTOsДkm7 NQ^U$)PB*tWit0кی߉f'yU-νXc&X~e0gaŀ,@qҪU`w`UIݪ| uRpV ->*zx7}|?{ƭ|B^M/Nbme?yۣZN!osnIKkxtJ4Jұԝ>io!UTZ iC\6ܧͶI'ib;h}uᛣ,q4;~]E"kqi]j3w=^rdSEf`[)PD#}lJ1 ŝĞut.87+N7OT[u 0DN9$";AYǖDDI0PD"PY$HŊ"*EEQ{lQHႌA!SBku Cmվ҈UgC^߻kGMEf]ޓ=~kEgi_NVB .^|\7[GLQ kMCǎ#pEmvC<@T2@ 2L{0P.UHy⡿xSiaAFH T$O~ihp% /CEcY[qЕM ﮳LH]~/kUb6fz c> ikTXABSQ,t_( R C&VYij8= ц7Q8)qrX;R)T==v{/L э/B(pUl b VЖ\bbZwgmlcMخ IvU9 AdXđEaX@,wL@F hdabm/zO;<@)o\8ki9@p8@Ӭ`k鑠hrk/8~c_g&((AX PӠIEH~/W!H@4[Nk} ttkIA'q2 H*ylaŏA,Z*T^cX*l!!pbsWC>DxDFŠp~a%ϖt= z_DDeC:d6^D%C{vl}}>7IPUIL*Dn}~^lq'X~&r/ MXɪ7vǦ<j(T^VΙu~VQץ@Ԇrj u,7TFK`TP<*G[%!@y׽\+@(*x$@  Հ&4( @A%I#V jn1 8>y&VXp{Up3S0SȻN}abH g*v?pW˜ikvth7Ӡ)H%>dfrk"TqmV  :If(, Pu!Ӄ;P1Myӷrg{eL/p {IW]JFR UV\o@aD;*s/CZWfP 7=:}z[>"XP.ڍ@$k5:=x$zq`@II%PFDv Gю/O*"@FImV-Y,G d\ HJNCA! ƶڎJO Ma0[J#v鯼C-Bn{$#;yA.ʌn2>+=g7,V6 Y{._'ͥӡSBZ?G_uOr v)^ls9.Ō]R2fZǬ5{[.kc 9oS7[+ӛ_݁r|Wct\)5L~gV=]Z~} Xu4GC(BݍvW|,(u3\zFoUTrf@I nswHJ!Ү]-7xsEFpZp'!RT0B#4pW@8\&dYmW0X{Ojҫ?y@ YWc}wVoXiO MǥƓQ+su_X0#0-Qu-:u5zx7Yh]7__?Rd27cJoa*J{ P|XGʹ~1*#[ث?zR6EMk6]fVrƽ|E\NBjgdHפtOScʗELh7@E9yѫ McxtU!V$oy/5S2AҀ6w/1f~\w FzeO?nxX)$-ISi[inѰkW B~@d~v l!0Â}/s4I xKRK"̖*"L>G_s?͗ڬJ2dU{}Ǘyb1AQ)mm$_?wܴA=,ߌ$, ?~XY^\pSH2@@r'u;yN  ˞ʙ{Z5^vbF r!4$~%(gNT rT>Ua:&jȢTBf=2R(7m?Ȝ$xŸ`֢Oe~#LEy\1K/l"g|| ٔDGX"$=i"5{/s͇*WV*pr>Nw>$?D QIBZ\>&׫^ 1ػ^_@QWXu쑦OsnC),59/21#L]ml7jQ`zVlKxv ĜVy_ =5Bts( v;0<9h]ga-T}m'(rX$A1enffF׫M:;QMa5ReZ E*˔V E&[TS7;oxKC#!ɽt^IMVN@r͆іهBB E4 9>$I}f;8VkIҁۥe 8Z 6^ ؋C#V i^x:ITVöI je?R УbnOm _.n+=]d/.~&(dedr&~ M qzi;^1%jufWQ })a'Z֭v =Lgntlw ae),ju8?o9gu :lX"k6-8&g;{ZQX@r+)*#4xO5@hhi:g/ x(眫eoX\!!׽d62,8IQ@5_@9}+ֵ~{/z$YY"2"֨:H]5OZc!Td w8PaPdf[ eɩp=jN~Q)II | dCJw,DS.T`<6+DPj~@3,i;Z0u& '3Zi:ٴyĭ M5tg\~}JsST-t~{n_͠>yuF,A'8箨H^LLsj{A*| \O?HJ5[=[P~%tӢȌyw8 CA" X dY {^OC\DJCVBPB9@Z2JŊ [O  _}1#C*d_*Q>~zI3ERwM1Rާӷ_ڗ-bK$ ' :5H+|{?p)uv2da$IB?#/wV+qo~PqQ,a2~eQkæ/ &S*z _POP?O8HUG= 9P$J0iЪ aGBWS7= ?! p'PŁ=f 9d&i!8UMmW5.ȁU_i{S @r-E1H X>9 ԇm5tmX&ODjdls(@ۂ9@ F*حhPb[jP_iT)[%cjci(emJk+JbVBKEVTqzj+=D 6C&TmÚ wZei7 G"&ٳz js_R(f.qfH#z]G vlNeU.u=MEYrK7gX\7M6Q2sn%bD:4gso(:0"*ERRC[|=-twcaR աiuB:(XDa]KsO Zy^,Z"*5'T%/F- ]*s |`j#I WP9YU*"4n'Akp@o@p!@6UFLe)*,=VEƹZj){) ?v˶n`[Jr #u{ ݏӣB#~_(ìD>0O"P h oP|-ekϸVr3W#>y{^|DoOY4 9 tW$A @qE(=OGnH/r:ܢbUEw[Hm5e+F"b(F1b#QVEXG;ZFEOz/NJJH/V z- 87 D |l>X{sSS;mۃ)l .1J:zӃ`4͖~ػ.|rHb Ѡ_+JQve8B^D ^OH J7 pf6J2R C_rs%nvI pAM9L16Ym'*I]WJ:1 @`On{Gt5v# r;|X.s'Mtxɻ|r8.;  (*0”{HӜW @;wo9W* Sh]9;aENnQ LRRw/<)NFM!:ˈZvbQȥE,RP bª ALTل[qu0'JDͣ&M֠g=BB A,`iRN A,+5i`4)TOW-AH**(S!cT \aR)ddZ\\0Ʊ.lRDH`A#hb C vVP(Ss^uF́mAA"H6Gk]DD뛓w?vMt#f8g5v}2r[NAw۸ B|APp@5Xg$2{߮PɄzkFAn dfjJ 6L:L@)سPIvePMF-l;'E3p]ν4^AF.A 浖@Ir__[qxe!DPa8~VԪ U9Ͽxxs&υ`"-w%T;ċdQ Q9p H Eڊ妎 (%`wOs2ЦyalZ>)ţ|\P z(PQ{VsJ]ej3XTlWsRr0. U i(PH"UGBlDCг^giMD@v4ujfʛ9ڇ7ŚQ~۾ c i@;SЛ2Vz~^c=6_h>痓>Px֖j6J d(@BH CϖC]i~d$ysC@\AuToovcA_.zЗ}IJV3r㮓&J)kN„ ~(I5$>rA!<^4B8f6ecqZf ke p8OE=9#ցX,` d*+8Ye+@8Pluq¼P9:LsMZ _C = FY~j,SͲeI@TAHHM2׉[saN=3wF 0u*Qe E~拴e/ i3 g"zs2-7Q -@D325>uӓOr l DmjV[w]*/gʽiڅ0 0*A0V()1;ج9( %k Շ_P5GgLK߷/]O2k0O6 45o#0P0"enE"T$~h_xHIbH!K1w+lFDxq ;R'Ԫ.utRޔ%R Y0&-'0y*7ӎSpx%Z9]>yy٧9=U}$*mw qu؈TH j/Y`F/ UUDZ,8XQsVclRJԶ;LJwlCL~c~C9Z$i}B& e=BV ^9`05*6~D6j,3^>;_tlHmr 8Jy\~kgT~:ysD0JeP(, 6mFpfn^H_\JJielyv@@Z7A̒ ؃TYe&2 p+<.d7K{2 S*2s0+&X&+L!YZ8LgEi?T@%./#1ZO: 짷&Ej):5l dz$I` }^6*sǣ.vZWX%nriɸ2pCeuH,5F+u'!M[g{>&C Jv}r.UiW?/Z*UL-V-lY 2X3 ö)$G?B&cBHӱ!a`'ҋK!Dɫ̉y,ē3PQB!fjm, :5h2y*+bh_\5 X;wm%aG{sd:DQ|a1,7Kho7kG|7d*Ƞ6Wf! 6wG R⨯Wvbnv8w5Z z,2a*LD얢v2kRZRa9U ]ڗ[B}" \egGh[ 姯61Ejl%']ͫ3C;lt@}+ItMwcէ'Z<|&+g "׸J*AtP PzjBqLa-Mc _!O ˿D&=X_Z2j) {&Sʐ E@l+ÆCGtƯ_81s(z|uKm^wVϷtwY?-jY1?ؒw-l3E7ugHpP % DHE16xʨ8`FҘ ,A}iBug#l6fxZlױH0;@(OPu^JX4ˌS]7Fl!Wok;nm"L7HHim}QG'W7>I&@ފ=K8mjniP1MY%,dž{Vze]@TBPρaȫ 3K9g}4+-ţy 4򶪡 7Ep5wBB~R H];\Z$2jlN X?4X w8>N*˪UURRZ:t  LpA\eXSۻb ez#QW'o'-3J\uo\KrX,E/ӕ Ww5!4vh=@Sо>zl={Cs?7B[zpͳ 9یz/qZ-61vyϑwX,=vX ,! IA5S/pc(1KuA*1y"fb\vC,yyT䒏1SCynR_1Dtpf*BV = )^m-) w|߸vyr.kg4C Œ~ m0 +*@o㨩U+y.`(y/!t98(wh2fѱm܌ \F \+q3Aev b~ \v;ekNsnOJ:Й{ +DBTvpu%~l{t1Ӊ=ˠNN)LIVUl!/=uO; ZMVۓ:[T"-HG.XqdspF#n5ivN2w0J31bRteZl qgEgiPݶk)*oY~Ww.m>E j[RD90cw%QcڄZ5AP@PL,p'м_VKSZk3== wuGf?:kW.˫w0/,Ϲsw}JCKY2{S5fj` YVrr<ƉaΑbIec' l&_xP_z6p0.@0 HG>ABjC٫Jk؅B)e\/6>o`?Or;X0̦ $BS\h]UzWh0s%հ_g2Jth ~:1q 44k(c^qw 5!?p[k(mLgRTuBT *p9$VR))J 7KP`dd94}Px; Bd|܇?[%-KSbz$v݅XT]ǠCتəj屇}zbWJzH״Rb|:iuo!Ms@ICtswdg0튗k/}NET,~6ΞׇΔeX|M+XL۲KDt ylƩ,69΂ox픬Oޟ?r uEfAѾjgR?(ς e._Ķ"ξLPWkmF9#a@b4eVMɣa%WaiUWBI^!ZMZ(R9CGKK毨+:@&n. uXD/e1-&KEf x" _xs W\3-g"lm1wRg]APaZ \/0b8hG'=MⵣoZr"*( ݌WŌcqZ/^螃rOHtŧ3i刵!&BNݯ;[8N62Abpm-UF;"muDzt+ia;#Op3L:!^k"9j߳rԖ+2.t>WN ]1YLvʌ*L *:Lk[CI 54] > ǿ-28聑ҫQnl@ (p^\3>Ts ."ÌkUac:BSȖkKb$ [@}UG+ʰDT G`Kyn\E&1N/u)4|#Ejq*2ʉ"2$ D;'FEDٮ3lN!@x%󵣅7лI4Tgނ_y-.4ȩ櫢ZqY{={?cʍE9^{Cbu<ѤDb=nf[^C)9a\]Ȍ V\gw<\ 1R=ƃJGz?YB9Ъw(C>W[}P#*/pA VL^oxUrBv$\=yovK*J- |B}+S8ֻNfis C0cHPBFzQ<*/@Fa^RE4qA5mm6@1`3*ԏ蚸R薲n`7JY+W~kvC~wqw:`h0&o ޠ@dG\ɘaϡOփ4Aa$!NfHl9&#gF U[z2)b.N#CVL@.k LJ%HiFc=_ǺAHry2/:C7C"Oe|n!SU%ҾS\Rn`Va O-ϙuaШ'Cs)Q@ Y!RB0)SE81fNPу >ClnE[5CJ(Hi+Ҏ16 \5:+J`P(56r)ߑ:w~׎2v2VbX>¿@({`k7)rŦu^{d$PJwfζ5a'isOQX{*3p!ۤDAĀX{Y8SIN/;x*b E*J( 'fHn aͻSI3f(?BlxfPGDgu; % _k mͥJ %A"8/_3BZ,;m"w2i?IKdo\[`a.CaTOB\\b"X%2]@$UMUUr5<6fj }l(&8o\䒳>ik(H4ŀ?|n-gTD:w%$O@ Ca Lr̹r6(,ó_{yI?tp9n^h!44QGӉ:DPReQ\򊦧BID5퉆NM|kG2XCW:܄Z} }C_$2 P QU'2IH@~yrK̎XIncS: Gm^"0&ԩ t_UGl^] f3Q8nJe O?/KԞL-XBx?i@n=I_~'Iꓛ󥮯n_t3b$\K! ޥӀ` b4Qrd>¨HjVVkh+:M.Tf?Zp*Sv%>~Yon 3_xWMGFבeӴTAE _Jf\' HDgʖECGϽ5!3sﺕ܅تhJE/W ؆G.i:4~tkK@Cheg3dk uH'ŶB+@"Y*‚9f ,;}Ϫ~QP?BWy @;P5rm2k~:Js رҹmo̹N6!\vr _wX7ϫh([?LH&P;꾏m @=Gŕa$ִNNΩ12ԲD7,Tl䅳q6K ]\DTP@ws{|]>O=Mބ0~-ۄh^"HPg_£[ru9xV"_χWPxcX'<:\b°P쫬X (k%*ʉ3 &2Rêjvln"4(*3TZR>/|}E tdn>GL{v3AzZr2½??9?u9򾳥V_ѽE+42T 7~GEJ. 6W=!+#Y%y{W ]A;i\0yc@DM@CD/j`F-O ؋g wYAuJqrBT6e q(8lkd^6/Qӻ=o@0?Ph)ezr=W Wf@a%8J@R@=y]*" OZ (ZZ~#  !ZgHѾ ”3%羖kR 'fФSa2fjm]rl&_q&fCjSy ZRʀ0W'J/ gyZk R SD6V [2U "bAYs/޺#%e=Ut|yHq?@4@~"U -MWK5"Me<Q`XjhGO>{r4oa$e4Y=iJbJ?IBKnZwh]ßMu/(s+^ͻװDm{FSTekB'e Y`a'@A*6q'tI8º7@b`݄H>7\Ī :θa1wEIbAog6:&G5lcl܌Cp; #8VQ}%07de!+o,3OTA p7AJ4IEQ&P uG{W 5ҵK 1pQ361Cq _c{9VaF~U 6 `#ڠ.+jw+6_w=kj|ِHÈU 5sO_j!Ðku}rh1WG"?s-D- 9Q}?ڕ(QZWMbшV O0b͕Lײ a'(2+qdaF4cIj7#ؤE-t+בS;rCm9K-Wd-ꬫź6lx9Yrs7KRQyH8Ly63# C:Sp$?O˧_7sR=;K%".7goᕾ+x2Tړm G.~]lG4 Ү99M^ߩ)ӫSP<ʖrE8nzGÁRgn]]]ȡ)4XH'DzBUN${_SF=(w1I$*@CvƭM%L}_Sdz;cMy˕~,[vyc73)Yf{C>F; jP0NUNK9 7 0u8H nXOBA=%`=E\_Kܻ;vy=m︔Y%BS04B.܄'q+tS׳lsM`/ k! 5}Jm3!LLd[ng=(U|-u [ˇK%ifͯ9W<^{V0>4R؄wћn Y }Bc{ $f(B B=|@>(|xu\47ֲ E84v`ѱn;C~ ΏgC y]y~2\}4:0_'TS;yCpp 欺Jr$`7 /=]I UV*F%m]0b o Y1Z. q(ݮ{zn\6©8N'ǚ-*?$@*J{4(Wǩ"t3uK<5ó9e+S{' Yc: 4)CPf8EG)TP!aC7gV$џ#Uno=Vy&:%''9+={װUk]y12Ii<+1M'*2æU6[<ٛzbj*nKb`"bK!P4/I&ҽqAFDRidbI['go[@j=`*韂Nv1\VSU=Zt#<^oM>{PYc&kJ_B>H$kNa|B mM ƌfh;7Xxd'gVGnE&30^+gi v; 4GAd@S6:yqS3$93lzV0__{)Q|vW~b ,;׻~Btv4 Ī]b(oSZe^z֒Xޥ l^c,*p&Y9N?ߋTŌ;H?3g|n$lh/b'8qӡ` p0Vg -:D+a`$E<+ZX:j(=R8 2ҘlezYA{GKqTJU}/?ÚcP s_X'?P @Aʬ8¬.Ol7QmH?àe^$Ūj>7eޮ-Mf۹ssqY#3[.cM{?ɳuگs!)b<3kd~2Y=fu6^\p7yjm"9D6F=ZinG &ߢb.e *5mA`D-}^ħG__SMSF,#[6"mx+aŝ~ sV\sTfM`e7԰ %M[o3}'V&FIR9,b$䠸)pR "/LEQH0j?wf l>!hˀ%ȳe@0J@U^R}g)\ 7U$ˇ^NGȘ4زܣeBй v.8@p6kj,f7[1PWk8P4wI'q(>]6\ʬ:ݗ1Pwv{yAYY|~Ϭwo*[7ɻg hQJۮ[fxϽyS@9'?[\yN9iVf'\!Q}5 qjX?ߒߪp,?3 Hpz*bfO%7KYYcΈ2jѫ5ԅG{9mMpX+ۿxYz\Sl4[ofyI=Fin>zYV{E讣"O'~S!l,0Y=^l*j^|85&l7nQc,OAP#Q6&W&tTz~sc/u͞KEg7O'#|; 8bR0LBQ*N٭6\G+(FfX?9PF~[atl/[mkeM9f {J  Krv-فmUs=}^/Áwq&g(44I||H+w1ס ʽYEt؛nkMqBY\_lWP F5z(P`{5-us;~gPmr;;B<9br>gv=b7o,b,|9|Vx%ή-I (Y&M2z~vQ*C xOpRe`F !pC:@+aA(%wH$;d.ShiE2VU(j-<&Àqp(Q֯>C{B WdFCvM˘Dyܮ2c1^d0`o eo {Ї ٞgep_05z| L: :[!HTڵ&AHzwٳݏ彩hetkk4SBC0#Gc2G-&N8_ԹF[u8b}5ݛ?f$Im]E? ۧW%D{"Kb-mz:z,mV|"-]< =pЂ6TUhn1$;RQC^^HA ^8MuW^=P+n1$DgK? ^[lTVG)\)c[oLN֛+M' F4d^CS<ͼZn}tW(;Tz|]thA䓡y90}._Rϗ&,XnVf-J[4(Js~Ԥ89UV>cǞn!PGWv_vd- oƃD8M|jPkupJ؁:4:`8^ 0yo`g՛[%0#kv<Yw~vŏjysMYJ-'QՓt DV"A9RtFZ]4wO;rߥw;S]o\. > eNhZ<%o_5G19TpA@ 6L6_H`vx.K7CKGNX\ 9tp&n;XӰ== T&=.W_y,^KB<2i+0gA9MŢ:~+3yyfj,T|i;|'$e{7,o< nU=O{<Xm ]w:96Ҝ:%ùlnYkNϫﯚڳ@= $m:٘rkni@1k2f9Vώ Z7 \'2f3~FR٤S(zJf/)OMJI+$$dB.D3iD !8Kf/K㮫h_K.?{×\9U"@8.t_4EOG|HtL5󻾕>XބGV;RU?-d] ƚ9Rj |], Y玐ɩ:[-㔻GJ]YIž|_Łe~m}R~g/u*LAf09]HwTiSְG1h`R3T )rK ;(,U6hf}"^0mxmX.q'zx؜gȥp`p 2 N<)K@U$!>6i>Rk2N)[b)ZQih )A6X箾8Dޛ㒷SX s:X3qwx_uv Y(KԝsOg|3` Z(@tuDrJ8ab"m.lL/*Ph\B#uvKE&g@c q%[@OsȫLQ՚5RۖfSx,ӑ{12-wti;~컺Og_,6̥w3Z#eM0El;L_n΢TIPk }L<~>\u,bM״ҢBC%V2^=e+[7:炥5V R @\Uj y9B؜Zgʮ3,Iu?ן? s$ׅ 5Ny>\ .[m#u9)^daD{dqwU5q`A,լ.Ufj֫0 S@=,r ΁.P*cdR\3-8lm,?!@f~3Y"J j *yzKlZ+\L}PK }'2(7MAQS{qzԽb3k$6U\PEE^Q ~ӣ;\Ȱ:;B{E/5.#[t,EA"p>rC*Oʫ!b&)bP1'v7SswSa!K)'dH6Wxӄ@ae ET WإlE^=@kAJ߉cH 6Tک_3)g# ئV"I߉-zOK }O@β4'GZ<%$k.w-Mg]E 1i$q3K#$E$ x%N;/s 2#F-XSjrw o UkwM/ hwTIu k#BA"b T"ʦpJ+`yF,"dLEB1I,y(,% k)6V=l5Dƃ!E7$D' #ڗQB*1nثk,OڍsX fUZCxIE9s3ϬMN`P;pAOrOSͼtw;^Lt$ַt&'mqFVt&@x*q8@I∹byK'&((&K!0X?}@ f|:]7!%J'Tavi H :hK_3'8lʓy<XIg8ù<݌X]1 wal] )\^t+Խ.ݜ)H_Q1 =hZCKʪyTM3 ~2OѓON;Z˼2a~IJX! f QT QQB EBXYz1ْvsPʦUfjA u3|e x.G>r,*$2ij& Q=_U||1nCR~Il׋BQ=18~urUdrʰh+C˕wZcof[S}B؃DQ}j^*\ ֙yF/7=[~±~" K$\8]HԄRZې\|5L ^QmϽ!U]Nʉ5'>O.l?&psM{S{ zR2d@lB 9D,D%|rYwXiHbsx~ptn)ˠ/U.7.UKԽ4wt S9ׁfس_ky2w2ب~y0݈9<<疮rX ]XR4ĩ@QNV^R p?AֻQYtT58gk+#1%ܚ}U:PWtTDqHE9kƦp,{F4J  ^i7sv@%6#Y,||,;5ŰӮUiRD s׌P 3U\UcʦEl\PGȐTRITk0&#l3"`dzd"BV^P +ox/ \1 X;[}0VCWh{ 6~l!'/^a3U7yfY*1-ka[x糾ޭ_^vf0ixr2鏗̵co5rlwX~ ykL 1RGN1HBvThR0 ] ^1QfG.^} }8j!4ac]cw߫O8 C*.98~| "jV}w׆ :`DCS̗'2iX/MrJ@Fs2 +GcXţlm^a VI;?tݖSAZ?N\]Lߍ^p L``G)dP7&=-jIe8)&sM5\IoP C m/sV>5B ocɒŕּ0){Ç{t$ @58E|1k/qL/tN"Ù5H><x=Ce]{Ƀ&DH_DG}Z[_3ra@%Hmt3 )IH`'}/>f}բaBc@Q('I= N'+3%8K qn+nXޝz(ٿU>&zU:M,%`g93,vi!HS PXk3ۡ:h`,8:܌co}ETx|-/G|GؑMvw^m밀1Sn6ڱ6kg@(d9 bRǬ7k.x}T66cGwR E.Cxt!b:ϔKgaC=OroGcz6p"<[&R!a=h``/_EtqP= r*B<'Wyt\w;(<팶u aɘdA# i3DPi(YvẉKx?ǔrv9rѦ @˖-DsYo{^y $AaK,?sm/{`zܻү0dd 0,RM*>N_R ;t,õVԕţ+'{O(gJ!Iiѣ?<_}ʓA~]ÍOdsLN" RM/y_MT-nc8/\v߇:K!ڳ$t$XAVm@~ gQf Nd9\i@偊Hbd[Lœ~Gy*OɯZ !,O06+* RTig#{kaBIⓌJ8]?)$cmv&~z $ZmN[qba6L7L%ЌKGP If~5(Lصt:fRl֎ mK@'0+w,dʔY>ǩ.gЌ"ZPp fEܹ'@=gVEU\= ưͰ--T'P+~[bO8-IPԵx,rWjЈ5y?6wr?!O@kH$J!U>Ṯ!E1]u Xe5#uI~NnTmYKtO*I=@N'}l/5*Ӎ/G}q[ l5;]1˒lt_Q/}=luAuk[U?ohv-A 3_R۸;Z`Cq=}NI4~~ÄDO|#W߰HvegZg' jO@$ P3_^Wh(&#ň eh=]O>/B8f8L(A@>R325#\zN6\‘acjt>ςgIA%?Q>/EU_\[L^=[Kif4X5^BnRqWN|6j〶dKɊ"?I`6.qWMm<͉GJ2C蒵|I$֩:˜eiܧ-5 sx A:e,}?їWNlsCZCCӦLT XDn G**q7q3+H >uGVJ6h﷓3 kg6,e!vHHNi9chA1 dƙVZPH]qu}Od(mgQ7 #[l T+7FԜb5*"1 C4 D 0 H 5 b/Arg`cH.$  X&9M(3u&ћ̲0$m|Fa:lMZos 1J(P6Cxu,ۣblCCuB)Ps<$n*/-@cK piΚDs? }?}Vg.e`P*jL,xNjmv~+s;lBL]- ~:|sq>hx!f|iJICU-ܛ_sͤpZ{J"$.7=}JH[HD!zl{nOP\L/8Ԅ1ά)@ HW Q0M*d-f1KPv 5b""UfYWpLRK->mpY( FAu*(obwAse !NAQO[(5Ao\Qt, 2E1 0ˆ; XHy^E^WF滊)h 8?  (V;9"!k*ޥHLpE>` r$=kW5Au $4 \6V݈om/z~]Y ?@V4Y%,P zLw,`&gJ@_U*xv.2l}q;,Ǎ`Au0%(E{C@)%5 ҄-{- !;1iP&m:_"=q  ?kW uJ ZO&y*Tw c%7bF^Z$ z#;#QvfG6+abL2 wpH JZU $@"6{Wrv (J8A D 8s!rIS^Eaԟ9DlnEB_]->ibLgv {B?j+, X5Xx/!ݔP)u:mC.%Lf= bۊ&%:.C*-DzSxN bhM !P4lzٵ>0UMeevJ8$H)`9y%З9z9Cl1S7BtgF}E0=1-5xѢ7DF`X|3I?s]Xȵ=&Snڱ% L+@H@!svӤ,ow&X\ґࠛNۚXOF-<&d ]jMO]-J%YyDF024fmA`sySdgu?r ȂQt(U-zh,B_Vac?RΏ3ˌbfkB Ǭ@q\Tz0Xfh9rZ&{A:+TQ"FғM)gj(1y@$d>w@-ਪՍHIB?jlHiUxAS m/|ۻyT">[jVb!fÐ3fRkeZ'*dC:wT?Z\nwr ~T‰SC'Gx1E9Lgy{jٍUa!JIf<R >|:Թl5䟌-p|e,_rOm˫+}. *XiMi_1q!xօGsR؟r'3 ߝy\pwn$Qƺr۬Zz%kíxD 6%'kfY!8͜۾—~]# !2Ļ dϮRЅMM歳$I{%I")tɳ&Wh4 c:XNolƸoUnhS⨮j #enQGS͂".^ڏiɺC]b^ྟ:`1 `jI^;Xpӟ@Kus8ɜ *&2h2&\o!@2DA>OuWŭ !PuX DlQ mM]+)aT!ZE_6,1LbBl-U30T,"1 ~yn- $˗ O5? V젠A}H"j|YxiUГe|SiE.-0i}<7@\$'G% "Wc\:e٩f-sEH Xu)pK sWDRL,ܱ VRlVRvTV;uݿ[#էV$AҗBR@ ThֳMQzDWY]_;I*BCu 耀"aiZOk9tiN|Qh>Ip1 ӹ{ɞ\.)YTOGb(X @ yPDR8֞4d oٮϤpkHp,^Ey@f;ذ[2sƇDa.X,r%lʙ:e]` P rxqVW.gfd-ir~c`˞gߍw1фs QGoh=C5W鵖&E2W]#4,/XDXW^H_*u遒}o ϴҽڂd`JLh5ʚ )aʧѶ={05)j&]P[A@됅IhȢA}ZKR9|6l\s!_"#dKbNI;-&獋;'n\`"nԍr mQ/;\LLϕv`hC!T~N,0G0*Pa9B2`g.9i?a@BCꗥ!d9`.wGr& G%IO6*-/gum{ь?| L/ESQѾm|zND.{m{K?d@l@ZW suo7M BuHk 1FS ! Qk‡M?+G`!!*o. ꤢ"C!wska_eE*/sQ'1ntBR+YePB!5 OS 0$vFR+ 0&G0a/eXLpT% P3zT7(J@!`!Z_r T}8b0 8[LJ9~x.u-]?bH=geP(K)0t+r1{-""ؑS35^:*6I#UH>Kߎk4soAMߴÓq( l(Ygtv]9:T`+tW/Mcdo3МN" -y"BvOktpk& /afHși^)}1c!Xi؉x(XF!wCLMԁK"هy+o~ ߤ6&%B@˴e5w4< .L(44> ŏGnbnu_حگ|pF?Y +d y<)CP[b( K42?jcآw :O u^c|*K\WxxA3%`6EBX%)/\qS 7e0AoW=Ƅ/&y$PpmΫu˙WD)ဪirA8GF?QJƜ0&h@T_﷤J m a-e缔JӼhY;+Yy3_y޳ګ׮ځp6nEkȪ#S7:aie{s՞ '7ZF}`o}e.],"`ʐ0YjQ@ zjV &>Dy8L⣋8ɺkN:w-gz؋^ >;HN֎Ʊ em߷-m6u~Շ_[RMzӦ,0t8f@7m5tFh| 15!fr_rc6b%֮TS)f@E0 g_ fy/ D'Xe"C.M#sE#~bgYBJ^x@D@DT` A&)Y"OJyN}i/ytיJHto;]n+rh)lkIH A=Dc E ~sg|T#ȮE;cyGWʜy=z=_145մ ݃n &~mmVtTrqׄ8Z)T=^@VH|Rw%~cW_Sܞȿ_Ekǔ+CG<^"u!ڒ:+FOc]ͷy>^QJ&3pmjejvv ?0ޫTME1Mk)n`-msS˯)shy6 pqC^:dNkQa5HJԭG[f09 iwt؂>j:zu:zq,>` ݞX1!uk($8+ 07t3V,k'*砮Y1t>fP^CXcnd+{5l~Oyg;8N\@73;qaWTُ?Td9h\zGZċ!3{kuθ6*(6ITUTHDв?͙](>Eџo{hKr(w!>DϕJ֪IP SiYņMVł\<5b}Ew2(0QʹgTШ騵@$'v{Ew4#75!>vaº2/r^1z.>Azg r'4̴`8E_zΛv npgRJtpWkq]GOr]bo[08 мZڶ bdBPNC{$OO4„ܫZGҀ}hnGL9}RGOMuwta9Om8s z7fPuL e *}B*UTwC}8 Q^`qV͆ cvPWZq8Zɜi8>!QT4a5II`~#h_ͳ(j56M39]q Sh2XuA:uV#yEXSXf ~J{?}tGތ-B^[![y ˽,abE_𠼪CSJ's+OLBS; Zp!!4uܡZ︮砏R߆^p:\lQ`]BU[b \m ?}wco:őBX齉I,gN[* C+*%ԁwn&Sx7 ziT˧[p FwvpODqCb|npk1[̦Ip /y>婜8mM2 `YӀ әX'aO:gl(@dD'6uRP@nN;u=C<}i{QEu5f($P l*'>h4JhNMB28a5VS b {>[-0e[N֐DTuw<+ o%YDnk I(6>GgЫ`yUZ.n:*A`E+䖍 fӊRUL$.{OC'K(1DX HTdj2流w5{u]td#O1o[„ _9U@Xم :P%)U$r,4`m0W⩾>f-L*'Q")7TYMMz{0 ͜J̭ǺH*XPDT3FT[ L8o/V'(g)d9l͚ >WUn.ΫHٯv';T}m/WeJv:R(nnvfv e0u2b3N5tFj.r !xB~qzL !m9YzM}c x+OمJ,'4t=0:LozڦGW.h)căۜ8{vy)`̀SJ 11vo5am>qonfh\` F_]zOY3Cii?Jv6//kU΂" GHm)UC]OkAٱH`~~e2!H sKɂ|8nu/:gH43v6W=+ 3?EUR @ 3Mknys].XXg:SBybPH4\;*FZ'9MƱ2-ǭJ9I&Wuf>NJ[R eOUbx$Ǒ9qd^̗Xx+j^.5"gOWV~$f3fa$FN\RG/a~3]v]׮UK.Itݦްp4ud]Ƿrԋ3\bV&®P NA}Ȳ{>k_ RsZO!R yj2|,߼ٱPDBca0xP@`%.bi6'hld"yvpR $~FU@vۭ%zn#Al/(ݷ[ @tA'/Wsq,p~a;C}G俁mRsO?Q8X;x4Aq0 VZج*P$BO6 Rs0zWx .PnxF#Z~N ='2T~,pjQG!2'~ϙ8{>Kr2][ 2 Ve,}䱓UٳBTB7y e {~S2W7dOσ_^Ӻ7nQuHN2 +Wb8Lp'b328HOa{zIώ.>Xw9o'לzwe"d֭afmeqeex]bFD=e5JdԫҊnR  S&i5}8>/S ?7w|n00'FJXZ޼(6ԓM%&LD`+([d|Go'9oR`2K4МMi^qV͇䳙4 i "nаR̗dXaݕa:1I>Qe Ls[śWP\xDC3c|"J(b%_T*o95`-0bgsݕܓ% P%==?A~ "`F;ÓopF i[8C"P_r@.9^G@ J&*a"VkQS:A̸\wЌo~/DADP$$d2B)L9Tr"oQK3~w((#inFކlO]><+{}o|;U}c!lN iiKm9lbJ?GaᎱrŠ";53Դȁ:M+j&byD=ZFd0a( 2^ۨ_nm,f::/o n~J쓾l+-_Qw)9>w 4NZ*d[ʮI:^xY#`@aQ{aLL0G:tg5MbMXHa#H*T5 埮^t SuT, )Vs7p@BY.s3PnfP2]uJ>ۊNIvLIHo9^DXsn23?*dzDlNI >KwgM[]sƎ#$9;wlD!\ͼb_wyi 8n:iP*\,l[aN[$t[nY/i?=p΅AOi$`̭6ٻ< **ƼxJqxoHC?l]y|!~o$)ަh,,iPzv%3@B2!(EnW*LLՋ|{~cg>B$2Wyl*]loO+m@xΓy3#?~sCY"űl 0ܥ2YOK]ɂEdY zS;5jC ~I4ãU"9/rA r`O  u-'0L$N]sn^@@nm-w|[wMJƯ' (#g k5C9'uWCgLX9Y9f42N 4hBdKfYyNĀgXlh=W}1L`U続xh;ԒB&j( , 5SәavV-70yGI O+켧Ővco;6::~,M_׵=#L 1P~cCvע/q_pl k@$ ]|\i꜏ʣ᳃HSLgI?k=xt_R{O-Q|9omᘼ,fnv ")`!C`FRoqiO0rz/S[Zއ}R{AAKA WkfMp91&WdresNqyq'<^"K)EgU^g؈hE8`CDhdtn:^{0䑝jc s9P[%Z|Nk&"Ne=90hO.E ,rAE?ȁa#ɹoQA)%vÅv96yxm_ߒ<=}7URldF+E~kc{ e9:]i5`n l+Ҽ?`s\NS KJCrFBHgrܴ^f{q}+W^ #:b=|BLyj}w-u w+p0h@!.s"b>a=M %e=6wCL/l0t/sv~KO[L"D\Jȏ0a7;BYh.ntxZ#$TD]f.>oz3s Jz\CVIpN˕E}4YlaVŗDgGT[؜Bm;ِ|ifd`c̔ Gxg9gaG-6$1ZMw9O  += C?ez=U?*E~aq}{;p8eNA5:^l\@BƧ/a|}^,YZ"=4~ "L/FR@,gPfbܙV@,.O3I)@~%(-US`1xRN h{d7-P?OGYq651qlKKc'MG0Ğvap4@Iǵ_򉌱 ӄ *ej~=m1OBE|lw}c.^Ճ{0o'1_beD/' a؜F8d#'/-WfYe堇2d4s-*0`w؁Pˣ6yi$ K,FtB!~Q2i(zҤ,\4F հYr}$ {:dMr,Zjϸ*:EH* ˒(P.@(vWNN]?w? F Nr4J) 8*Sʆ?Ǐ[Q:LHtr'w>BTbs 4FN?nX'ߠ,6Ry ܉H|l_npm a&bO/K^{\PB)3'T`΢*Q6bHa^Ej>P1)C7j=WO={pg=ͅag E4闞;cxt, yw`ne<ZNb1o@z4z^?L#[|i[=5ehX1dop/.’~1u] ny%Nx"jEd!ѐPeY [ZI PپqHŖKߜd44H1"ga.fݎ?n mLBc)i5%b`TQ\xO4<<`C>ϻ o5BZDF\!:)m~ޗ˰Ų`b;CB{qܬ#h d ,WRb*UsKD$6 'N]=]?;%cTb"YXJx)F!YeS~uuPe6UDkg'MݣػO] ]~?w;L?i¬L|ȍ,FC!Zuc=7.lGb1k;pZAJpiMJ'1=xp:gGD8Yﾣ-"V A;,`PO*YjFY3jkS!WOBsv QJ)eiYRYL&V9Nea*"W9!%:P++XƔ*W#?:?PnKO*tgň4wy[j sqs 03 eqx':CJ(>_ߢWΫa@n=Cd3ٯG?>'&\q[iat<_&_VpSVl9]' ~=eoBr퓟ƾd2GV0Up4#DIGC@00eQ}lVY&|w`|Ok/ obv(:cK]VCA xN(W8bJ{Tr t8DY3pa,(7c-  6Ra:U;עjk- dnVezZ_-YI,!' 0|T;%$n'd@$d2?^}/8=9-%OcH~s-c.31IxyOc|IѨ볷Fݰ!@?賰 / ?zOuװ'ٮaGξg?{/q [M0Hksw0~C5/ 4Z1DYXMmU'n\u,vYJrZSm^t;K5AhppuNNBknsQ*ګc<<Ƌ&~|}5"w[:ZZ}9zM{Ly֩}772z{ kq %/ vDžy`>nko,^2Ƌ3.O?U[_j(Dyg`r,$ D$ZzuM>Ԧ]&(\W^uφjOad媭2Tq}zW|cƺ]L*Q q2ͪ2IUiAmߎ*XR]kSn j+_ty),F%zǥj"]Xb5r=3Йd<ʭd°W],1ġd% ۛ8ie~=+'ibޱ=.LRITdI-"'qiD^kSU$ɢK28XtG~L U G#6%CU3 nmeTA8&pXRև}~Jiºz۞Qq,ݟDhXn:H礔$.9m=W=(G4۾|%hȜk`gڒđpGAk[…jf~!B$/w_0W+pd˱u4nrY869[w/~{a9̳kxrz"ۣ;p/rM}Z(o+ dO}2\EܭS>a6o\2l%{gW'r|p lWxe-em<{4w䋯E4tܯw4?\iv=#?x`}]Ox=i`w\zdi}ww[UٝChuu)DuRYD-E)QQb0?bWOfùMZѿ^Y|Wg7캟4t,]*O%-WY4Pe xr͒femۋԂ2ԕN!_nI#,Dvv? .c9qUY 1^2348"ˉanܚ`6GޑBSE ,rtDʴ+eU]ZITUT9J˻1K:Aj=(ڜbaVFd(F$fb%ef;1 iJ,+#g_=UX b΂"Z%^ (]\ҭu16 m8u `(41>'唯ZnĘ#zB%１TMs-[rFI{?WٶcmB5?$Td*ΑT1 |_ "uy6yT/٢xv("zI:ddH:I>O#wGg8)s^7`kYp\5u*^&cP)`ic @> Y$R)Nossz}$uiS9 (/)SIfuHz,ІYmcu{S_h̓Ͻ}v=K ȧF0i]X\deR ܰ^<$;p VLjT5Y}slzpfYWWOF?}DQv|IUVXh“  廙vB?W B 2 SWa<|8IG,@b:GV_K7U?7L*C%%mP>$fV8Gc)QUFjnpCHB(jxp\=3{^.+D,3k5Фb49p[_fz4"CfP8NHf%}؜+gzVx7H(XH@E iUA_0_Kf\mW4~+~n I\P1Dg/- JFFT)oo5O^ J wھq34 Mϡ$jlRD'SrylN?&L4_6 jK#oy;P< 1)"1V/!3Y@/~wӭ F$O2Ƥ9ny _+3av_NYߪ4y;Spq2=kVǗk1%895rP|٩X`Mt>QK{TscqSq=34hƑb#"#xQEQ cYU?шc%bcoi̡9zhߣ7 e:Y bɆY6H改n| ޏZ檉ڛM$eZ(lqV/fXi\WU=Ig$ߣAL)dDz͜eVf0XC4zT1BEBF$$NPEؘϙc՚*&kU,,)D3%,5P4wYk*C;46v\֣Y@yVfg㮭y`3(ii+Dc TX|#jR)TbU^*K4} t.֦H*EYZ]z'I^r}*r҅x irPK2UOb 2Jn "Sza`MyZBM-˦BKSXO2gbbXfMJȺ֪w/4ɧP,32W-GgET42C3NQ./3LMDyFoT js.QX\,8B2F!))#(*3tv?bvGtE fG O.TB58MIir Ra/` &+-Ġ?@ ИHHgu1nk8d́iݞ_~l>?sK)w6n!~OPҾ@`.ҽD&%C~LDbB5نM]S\eOVV1+SO"-SӜQ|(Xu7N's6߰tBRqp{n1 (NTK2Mo+j̇5{'/Oe@b @H IV> ߧo\+ =nSQJ]ڶ͆)Bs܏ǻhm'}|q?殲QIy[p;^Eyq:~:WAZmh\=m2#gSՃg@O@}4@RyHIڡ %vBmKb}j?5Ody;쾍`c.1U EA}FQFɱs@~ۓ)a%$ {jĪÜݯヴKvz,=rBSVwշkM4y@b.z9׏ӏmAZvvbkw8^Sw/:S?>!#U?+W/bSSmg~xô]H1Aj:{[Ͽ͆*dm΀EHc2J C(|ys9x|-'Mdߧ>h[gvo&E/?߬*;%R@B " Q& qka^H~ˎqgd}|!(2 I?c_쾾<.kFCtADE ddWs4:߰o;r !rt8%}NaǗuOXv: t I4hM58BkG,gflB{It᫗a(S1(HOѺ'jhٹ."A9tBIR.F5WI-f 0CLu P> Ȩ; 1mQh~ԽξG_=N2d<#>B2O3OM4&%@D~ۥr :"QiSbf6#doܿ뮬ûeMӉ~R(Hfc~GGV(P̴*v)QE4§] RͧC1y|1%hL#˔p`͎wNnn7g R ]k|[_Kq(\> u$\_w{TBG1q %JA@bBp’U']zWuVy:J?t"f͑`4u tF {bش.9r1؇drZx' =8sN Ps{^37ZpOggusgs4ZJmloz MPIa4́Gd6VS)Ĺw&J7/R"NOU{J̑Awg' >/2u-.K/6®Ea@0sڅ3`PkS(v+3;`CæpB.IYjSY: ww^9$0 )$)%W>Ta־]6JIʽۙ{ XJ~Ԝ{KG+#al"dXD}q`F.nW P̣/ 2FΧ0t'kŹNJXQU2+mLqm]qתpQ.ACYD!ǩѷ=-ք-zRJm,QV3T/bc v@3מ҆ )Ju5+S^Rtk[:}_Bv>G`79+D&--{8p[FZi-3-=y]w ;Q7x\Nb%|jptkc\J  wLuEÒc~m(=/?|d꺹띣{6s{7|]<\~fͿ2ԁLƴ; N~V.W'nkd/ ppLF *V'`@q:W Oy]\f몲89>]NB{P+a^~F#sw^}ow?߻^>ʢ>9*4C$`\˓1CD.]R!ǭBj'~+=rYl3\R9qz|b˽ǹͺVKL nβp|:Gh1FF# 01Jw0Z8۸[BnFX,35!h}a"LOidd&:PUrjJY-Tr j S6weHU}aTb֊NLgh㔧a=:]'*b15e2:U>ݍUH{>è]OwU%u +}qVj6?Pd{hc,Awm[|mX#@(R ȣ& `^>lyl-oXq7S0iŃ 22,,X-U7#RǂKOx:GXwe¶gbp޾/sblW͟s]01P"UT@Acu<Ά91dAO$sWN0\yBJd7X#o`y%b/d[LeTXdže-]78`m瓖ςwƴfv(BTRn8R)RI#x{rM"ݭDj& dcP4ZiJefvHEp^ BʪR)Ԭ 5y.7bV,i23(i41 cq5΁U4$,K(U$&Hm4yÕYlfP8nh"*L6˔aR\04j[m+4f%klXSk pӄ2Vi-&&^>[VV(+vׇmk` ,r}5QEh(!*Lb)@ի")%=Vb*Qxj;J銄KM2PI9{aP f"lS H Cn;(BbQ6&XJcr [sVEfqEt&e-eqDQ+CrڊbnV'ջm'B !74KeRQcP)(Wl8]VJQ\=mXsS{2T*)eKFhm(ڧÏ^ٻ3S=E?j-!&Ệ-c&F#^cƒ\iԶ$/[`-ѽ.:H$X(g}g CCSKuܺMUv]\NkWg幍xp@+ ED1 ̧0…1Z(+ LCRCXY*_99jgntCQB,~/g-qN]G1>xd#Zq#hDusݿ\?}Tu<m<-At$C,Y0E;zaʼnc@~q`uXe$?0 Y" BCDն,dZ " ^+O"kBɿ={O:!4W{b՛IV2m!*3}JCD&"i!0[VZO5Iv+*>݉Y5`Lٖ"I)$RRAΥy*i~ϳqVchTH$;*"2 )[ hffZqRkẪ3RU4XZKj+G (V Vyfޯ2,?0< ^gRyZUUo N>\JP *86N2yP/vIɆm ^V4|U0xP-H61(Bz2[DۥjT`e[80K]aFkƮRu`&28b 16Z<hJ1f[Y 8l:i~CbI@`( %f0c_%;5"9"!, "@P!HAҖO- &,uO 14Y8'VCZ2E@vg؍ QA$ꢱ钛%d02Yu1mX9ZVZmk< #KbSk6;p]~ozym ٻn!btj_A]@n˭}>Q~x!3kVZLVՕd@(2Yo4װ\L&/'5VRK*K:.QV۰e?G`"(dS4^P>_i{C.eHҾ _Aڌ'/`?:r215<7MA%j0!:cY'~q>,.yrsl7!>|ܐЃGÚCl#5*{»N-"X0a}:JWo-ak͹]/%f ⅖ WY 1 4 WVKL7޽)[]AP$ yH$AdX  5j Pƫ L9-. ]E;J!6+dCب_X2јUs[þ<~4 #CFc%_7݈\`qeqx^.pC.jهN={|w׵B@_ۜn Yߛ  &q!~M3,ݥgg[1ϋ.*Tts$c4:`x͜BeCIr<9m6IIGTGhHl Xx Ɲƈ',nKdhRRU˦Rv+Xr(C PTF߲ Jnj~c3$QC?T4; >GDtOD&cUjԥ[qKw㔣֐ą wH&P3\vڵ5xR(~'5ù` Tt^|2xePUX`+m*O}4.hڵLR^Ω.MV_h$jУcUY'|BuL|)(veDoG"W*6ձb '77Fauw[+d &I*iVM+%`ۗGL!AݕS fX^ J1J՜J* yAR@P٠PЩ۹D(!C+3\pw+t*H6|fSi]UtQ,\Z-AF r0{>TYN\0m^$pzdR(xYg)$c05 DKDR xkD4sm/|XZ{osCgΫP8%t[+5f$(y,ӛN ν»khMs}|UW P8WE{V덱$AbߖyQ)*t˅AlXS[X)J]]6YS,8c I"c$H,ݶ6l-a$LSc2Ӎx/:Ϸbkna_ݲg?:`0Z*YF21\%fQd]J%7`R)Oy4(\VӅ$-XU ` AE(.+qX2 [e FDQdP{Wθp\'qUhO ELa)Tݭ㍸f$E^6 *V#? qѤ`&vPwgUc2dV-k;MXE櫿+q79q3t[6%[M7le4 -*\i1eb3O %Jf2e իî3vl&Kg=Tkhح_fuzL"*F$({ `NHba,_oGZrl =Y\:1 Db m[oZM(ph$ n*8Tꐄx(0!*l7ƪ 䍱Hu" 3}}ex&X+6ej9k[X"bՍ)\hqf$hn4:Q-VȲ)-l4Y+!48h.9{9۞m]pMB < ,H;AB:5&hc,WE82nRD0 Z0RVL2`,2pGr#@d^~nkU7/G-Kk9~QNZ pfݗ|…kIVPq g 3 ajLLZ(Jl4\ [-%N]m?{*y~إЍůVY q͙9kJwkء{_7:2>rAD*A(&kzn4#-"bV K2,.k/InI[gn7q|DiOduy FHe/q˧'ִ Z lIVdJ`rZkĠZRJIێ$n^kv6B[z㏕=|OwO+4SGw:i5u8u+!%aTHnֶQn G1rWX F1`*j,3JR!rD!/y޶ﺧWj{kw7>ջO"ǺҀZV T4ڷY-)ѴW =o5cD J  "J]6>Yl-." hzWh< Da ;(.(&[ HRJ"rW}l ##UXСӐd<)0EVhZv3Ϋn-aHLcj2 ICaT-5Ң?@*u3 6Tپ,"-t00Xn6`jI@UKu%RRB*xպ[4iJia>wz-/WhJj8قM[b+S_~o~Nzt0MKrءB)O5ݚ:M2#B@rmvh?%ŝ.YVSTs弅 ^-(LgOsX#0EhR([Tt5a4BbX(%v.R=)}<ӥYQM|p20/!.'A@# Y:O|3a" g=>d=%--oͺmŠCk/n kr!1 C1/o|[l#ʙ{ؙivQtR)}x޶M. ^ynYM5-FM8b_wYJWݜ_]+w)&U5>MxWBϹR5{(WKBke]?uѵo?z9:X_Sy+Q.@? iLtpRU۠u5/+󜾖NڨN^sA~q`m X0j"F7RM$?I9Nbnc換.UVr WOҨL2//`)v,Sv2Po-:p$ xk8jֲ)#JQo8(-rIk3߼z 5핪XW w!vEez$) ;r~z)ny4Ҿ_y3fdM⻌b# q9Ȁ#<@9+߬9GVES+^mJ+%xܒk#"qުݮ9hme$78R?MMe.0X|'m{?_sƩ_/KS~ ˃z~Խk#g}Ҋ\S{c>=1[i]nvnf[{`|хpe=̮cFI/Ǹn}}IW]!_\6Dpps;x/Za1'ѨJbL8f {3 ACZ`S駧 SMU>_vr>VV+-MNѦӻ:5{k|'=%zzNwsy[v+]* LY{Y8w5Bﷷf`E{=0(q{oۻT$R`($|ƗV's)KLIE$hҖْqNJXH--ny]r+;W\yʨM ٥(s@dk+ûFJjqM[svҝK*:2kRṵ ;hPsVa ;5Ӡnn ]Bvۧ[H;lt )";\nX`6p\*兆l3a՝#6glۻlTE(4VkZy17[fZR*A4ʊ@s)@=>t  1񙦚ٔT#Z$ZdclpdRNyJ1޻4@xs{0gwm{/mG/XլIOYGh` gyS'Aw`uy}ޟgKn.pNr={ô} ws{eko ܝy*eK'{{N|(Z ӥ66:Dm*@wyCRCqlk]`;9vtQtiN˔}f­jJ6@tP sE>oGu[lbQwj;w7n.z5@$CC@7s$@(}zvr{5)kmt{׺$ -/ P 2޷BDT.lm5P]-Tpkýe@}W Q@gp= {,ʒMTU֜uNejWl6ۜvv $(z+cJ(@O@1@3KPPPVݯ{ݶx年mU]klOlRv^Y ^l]jvuE^LZzz0 kWڒ!@ אCec$zNwz͵ig{w :w}|=\zy : 9!]}>{ՀݜEs$$Kw;bK٤ۇZ{c E@ P7 dLd&diHE= #! FɈb`0#S 螘 'AhOiAh #@M24`bL@4h)m4Li x4)"BbhTɦ&OTMT='4(d4M=La=@򆞧y5SF z=@4 4Ph4 2 &M4< 2LizdOO~JiL {TBOʟOѦsR1d5nՑx OfM`TCMG[|\똍]}u1tf0*N0Mu] ۭn}f.p3oq0siC-QPmi'SVqGQӻyTNjq[+\O}V5Pn 3V*_= ѵsYzwinfGt3ĆѮu&c3Ȕ|ڡEPlkq_U o7qfwyV<2@_M5 >G^_Ԓ`qT!:M2E&JՆ+pWV*֪Va+.Y+X|sE{LѕmOЈWe:QGUȘȑ@J0TCn0sȰ9!>~0ʣn26;XIxkPQsCu;{*]R9Gew'*ϽAGTY~zkh ʨ0')%܆{HEB'TGٌ+,BZIZv~Ǡۧu:{7SKMc2]h8vw/UN1c3AuT[ˎ?h][ju4In[',鰿ߒvLq;X+n(R$aY1!7K;aX f[׻^il=E@|)Pz Ef?V=$]L'ASknz4vʽưtw>ْ4a,I>&IIIRY#EOߔlZy6o屫{ѿO7RU"W K6̍yr}Wr/5MK*omwQt]鳖[,7bi}Szygr +~j㜙7 cG3:mHVٵ d]%iV:Ke3pc~u=IFHmX#-so" V4l7qڲjG]|K`] dqHI~=/J:b210 /nZ߽esը뫺t[' h.NBS4[zv6m쯌,WG&bܚLkNϹXc7׻޳_^w*4~w-EF*,hs٘O[Bcw5/ =9%C?=ڶv9ֲyO mS*un.Nv KC3O\C{[3 FK i^LԠ8t5 Rf"/n;dU:!]-vzeY8c؄a,+%S㡜Ak矦$9 n6jIH :޻MOG|{;~"-[Lo{W,OncAvcpd֘25ըS r59M}jEbt5Am'['IK1+񭝙w5ZًweIm>XѦ9KeIuWZUxyԒ6֭ 3'ׂXԃ֦]ZR$$x\$6jlͻzv!.Be\EԾgXuX. oUCyd:TgE:b{]^,)9kZo aX^RB?Ʉh\BGQQ{gZ._|Gע&@>N+Ϲ£/[)ҫ{Eze~ 9Bvf\QP=5[qfކxך:]|K?GU2YH)1Ɉ^@i]`/vMµ.ey{,~v r]MjmI'6 E͕!XKljFh"ywEq*pw}t~;t rI&c@WHg }6c-9!ֹ3+tib$ܻDDvrV$wzLȌuom]2Ra?psq4=\^$Paι\׳/\;WrLYUTQ8"钑EhϞ`fۈ,f2K!!mͳd#[F/$4~b1X_I- +dvL֪zư 2I~tiIGi|Ca姆zÿzy΢޹Ω7Vo Hi?[̻_]5`)mLjj=fE:Ǐ)K墲n/ǰe5Y\b89OD_췜#lv TxyNC Y(\ hL q%cb.Kz!*jkԶ`{qU!ޖE?_N?R}=Ǒ!u+s[ԭ:TҤ j DJ ;"I)rQ\$'9|zDDkS"u~EcU-,D`ΫR`r2S΢I*M%$R$,eH9 ¤:TsV.'C:_ZGb7&Ѳ}u4{k;ev΁S_:꓋YiN,54Ӓ00@0HithF!!bdQ~|)i,"9^gځ&݇ q`Mow~X 3S[|Y|.}I{,$$@Ռ%bBEiݛZhѨxr؍ s#[PS_N3/v_`dy%WSG񲽋{|h;FP(^cyS(>M@#7j!w]\u[J-= ^FW-&.8G {ODpfS  ΏB X)FΑ6Kk?!h;H倁hxH'/o>9`зN1o=ecҕ:Qme{pwGݘJulRkaLzhζ3S4bv$>Wa)Ux${~Z>{Ә EC Uv]?S==7kraiͩGzRzBBRd72N1#ZގVee;vN۟gJn!\|Fe n2Q+Ҩz%F<>Uȴ]`l,yd.[Ó00HB(Y$3pˀ((tarb ;bȫbalo 8 ۝[|+!]cDF:2P8ܡ,E3H@Ă%hJ[G+#'gʩol+_nj @$Dكh% .tJyQ6&LC;3R;?Oe.AڭDIR*? NL?ԏ\EnBo0r_jXǀQT ˷O& |Đ xJlF[%괯~饟Ut.rHفuc~߮{Δ'H:R:,??y Nu&fELzt|{}ӯ>/!$:0;mfcxCS<_ouzOs-vFe_-AoK!*d҈ד13 Ou[{*lڽ gdfLܕ̫bLUbE a1YoNşx7Ai/,Y)̗e]e7i&ID`_^Æz= C]׫H(W}oWV}}s[ QQJIvQEo7Stc^':X{0PJsC 7i/ot|aS0Ϯ$%9QuCḡek bt ‰(ЃF:GHx[dz&,侯Rz ugrth]幛~·x- C=Ъ5Ooz]y<:0Q +(ǒmru&=/Tl_0金αhoA,5OX@vpE| %_7OV($P>zMNIp(/hh#B%Ut1TeZ dnz˓ t:I~uKЧ2֡Nut#POַ.‹HX@QAEUDAUDFIHĈ`ZRi<2@PDIUu-*}: K8?}ZL!kCޝ8/C2|j<^'_nxu+-T䲅Qb(9SQF*bň1TB)QE"w) T /A"R (IGaDtʲ5 T8 ]a q"EݷlT;K[ہ^PO.,V P9w< s[GwU5t d~l(H3qr2%v!! jR *~bZWQEQy 3EdGu ;G m#}βh!+0(( G>f7;0 /+U#0%_{qYr]FMNHDEH *+^"( `(y~[0ܧăϗt sq hlSTJz+|e uaN^1fw7*0fŌ`A0F )" (J )|M$loȨ$|4.{&BYR/#QrqO x۪oo``ӏ7&k^]xUE,;Pny}GY6jo'7$L*ho^ᚅV_Biz VdQ5}$gN"S>@B;ʳJy崡Y/ ̩.Π*}Pc:w ,Ywt$g(ާϦ/pe Ӓ-j!54AB@b%2JX'Zfj>Q cX7ay+)b UU;pN7qJ&,K7S=\mߑޜOGU5>_=~֋O.^h\7>@! b0nā A!î,[Ժnv.~nBT*MQWkp t -bRxd&G:ā7I% [C7|sHg3JB J‹]z,]- PA}/:O\}~@0hp+xem [(<7&MCRZ&5羇ZF/ϕ*-k*œ7HZjˬ{hƏE#\W|~yիƌW&duָqSwZŖӺhH5BN3ۓ.֋aOZɮe$kl->D@ST""F҉g,|f l6]I`V?p}&ZZsQokZ愨וp̐s"4HuB\v{=d_G/r3=/VCf7~*4.?ZG `_6Q쀰*/f꧇6oZDl)3 mצyz)zyoͣDB(1YNq1=„3lR 'y:?KsL;+~E̗fÙs9]3`bչnqmdE夐wȤ͂C;T_w)QBDORSΝ=SWd,SDLàXERJnZ1tjJg}OfN ,L<W3?/Qs|SpEEQO U&OU+iHv@,U6%ߠqo 滇1 e gc0aM߳c{!C+n3AR* W!i6_&SQ/lro$̛A<>[jݣg&"",{sʶEo,uud4Ug/?;k*Q@߽S^WBPAgDc5VF8 ˯ Wضȓ+NUv]{'ǵ@(+-;md)VR`uHI+vnw] θ&#j|"n4m½ HB5ۺ=g(fɚ0x0vv,\A֧Cy?:( nl,Yv_KꦼEܲəP2x{9 \ 9-]=Cݪ}gܽ;|C%ՕlT# uqo-uY&xkrճ{޳h]Gz׎oh,^N;e8aq'aVbfR1A=ZJB2+0K(?hUUdʡQrW6gSqTrm:Q6 OU PQ?w3{ݟTv߻ zPROِk;Mә@ Jm?{ǩn < .;,Ay[|f,3&(6w5A;3>%!;??k_xx#`6`"F.b;}_>/Lq70>z1zJOS?mN΋H/?~uς &ggZZY`a$LpXsvtnWoп1 E*Dġ vAon *|fXRjwqHHK.}y-  I=mC`Іy~ "dmh= ;:No 5d Uܢkw_YfM#^rYJSEש=6!W\\NhH"! ":9xUF̤| lk31!%~JMG6,@A`l.%z Dm+02g1<^$uWiX_ߢ-乖6rhEʩܨd(Gft1w$x?ɮXި6 +.p[^vmJC#gSu@@T-lU4S\j3eg@ݗwp,R0E1`^[d%1XV'UE(YܤWfѰb<9LWz [!UΒ h(kE{EBu%{$W~$'VR<pC N+46pCCFA<>h?ToOW*bj,'GcUJa((M)"ͶC~Ц%FPQ_ ;:}>ޣョֽJ"Gejg:ɐn=x0un}\67vlVi$Q55=9t7lwgbDhsCYZzvgE}"F#Q3 eZ ө~dB & eT)[XGs&KwHI}Uԟ柅4i+D_>!9<Ѡ+O/Q_)-WFiɹn& [GU\2ryxDxpaQ]1o+l+=@7TJ9ЃQhF}RN Nx%e֒< BJ:Vsc7HU? ,EH'L+⬦H}tKv NgPX㻫8X+؄B5{W}̲R~z^g]:7هt:9?xAnkMTR]DD/^G@A\UCvV H\4?aő.BedVV-d?bsm7w:cd4%L&#ŜWٳgAʞR7\[/֗L|BNEz/DV%C*ena OkݬYSE}jm|]Z5LbGq_Gw>Gh+iBdgUu;,% P_Vq=u_88Ʊ:UAׂr{wz==be>}t vd5C_fr##][;e`J}]D) $'ۇ)RFAp (i*>:W ډV;ҵTᙾ2RY7U1Py367u/We7WYK~4|C0-]}y{ d}CPt2PVbaYJh1QE`]X.#w Ry YQb"Q1Qb+APX"ň,*+-)ɿyj&/9:,Dz@k'WZB'y`xCo'Urx>z ڕˉUuDU"M%sJ)03ũ}}R󺵵x[cBX%^tg{Ӵ?^nNxd\eBb~D-\Poq92׼.NO?IB.k$t)6 =J_j@籰>9t/߆)ȬP 9T1w 1jt.Îw.IEjnoI?~nZZP B{T S'y$PGy~<̓$ޡmj4^4X#" _GS]]šR/y;/:D^wbUiAH_քyV+Α]W`^GLmN(\ZryYNjr9 (OfY.XnpiDj͞&]a˜ S3:LKoYp;:48xD֖-6r5|bgRtl"֕[͝mFI)ToX0;D7kgȪl1 U?t׉ 1Mmi',J!HC ߱p=_#,bŨiv->?W?36^99ך =id !U8XQ%Tx~بPw$VŞ3$ؕ4TZED$FV)GI&<69tt6j<FR759h^"^n+{Uc3+E>Q/g!' ^1ŹN/J We uP@siZ~/k)N[WeC Bm`>[p=&%{/{A3u9J'TXGBb0aPwAjyK:S~y_h3>C/,W"eoVmc  f\pw}WM[ͺ\i(4jj$"DTO;K*˂.~$=gyh>M'eHD(-0@ ѶBA&pIkHnT3(.IF@.ِyFY"E2Z;z, _><;3>껁,PHLIQD>w;G V5[RuZ[سwjR҂m1߳+E5^d_\ݗq4smf~kUvo;,hȾ?Oz2۰;j.'(sFzZ?0 8!\}[}۰,mA{^Ow8e@* &oʲ2[Dw6B$ltr#+ϴ1!FjWWO 9\QLWKV^+~G]o(:mc&rENNj5۾t-̪pi1j `V>i,di B.?{vyZ`d9 QCeaX`a99hq1P^g3w4 %/^ߙmtlzOGO_mBxk$4緿_QhZ)lYLnG :ݛ5nVû&r"vl!+\tq y7<3&`ıdR3f.ꠂ?!g&l7 V1*Q]"ޏg)^t_y:[Ƒ %T` !Te 9v*-!Jt(1k~T* L(H z5ο[4(/jַxn|OC$? _L:ե:?_ϗҒ(,#3z0֑ F'6$`rj懦`ڮIֳEC͞>aۛδ'94,IܬHv!.!EJ;KRF Asnvu)~d4W@Y.\|jYXw6W=bk_ŐmD>3'_jϮ=?ط2Dע}Yzɶz|y/sp(9RGSv5iFӑcDfb` gӃUu'7Ԍx'} ΃B~ϵV0{|D{⻑j3Uvu5N?Nmu%)Fi kW1S GĦ%gR]ۇk)HpwׄAh!!8(>S̳ئI!Geת[_;>Lۙ9-;{m49{v=Sm?O݁'#K6fdЬJ!qE͘fi<["]=5*hZJZ),1v@.V~v s!ӳ.}7s R,zߣZ췰__Ew?}7p'kw7;jef'ٶM️ҁL7ɻh|!sҵN}^Kgs,w~jԪ,_za>+SίgKٸrW:~ aI2}yyAaTNZROA1&Y6ZR>L;nZ8k\V$TIfQ1s5AjV-V!.hqVrՆޛݡ1NPecK 14Ćަ֨ɏ衙kȈ1nJET!RFuk[s8hP Hpb?~4x?Cg:mWܯ 7uwZsvMV)2h-g3'J#~и|+|N+qx~,a$NIʏ`{y 'Lűs."eA#>ZAjrW~λX e]% R[^hx9ySm;潾ƍɅڈZ Z~eA+DVEx9׺/:gkoAI6ݰŜ,(kЂ*fmYEriOJ]tѕqs!^40f0c^admxKzaޕ=Tbh,.L,hĊkYHk1[#Mf{t(l5 hTЛTP_ >3s}N {U0V+$.)'uMP‘dB*LpP=iXavZ Ͻd޽7uj,_.je|PַOeɡˡߋzr9⛨}7.#8%_Op*v*ey>m@Dbg1Ψ,='"h#uayv>o?vΚEE kO]enk;R؎{'wu{"J` *bF=VZ) ȏ,JQg]i22I%rIcO,L'}tu`Ec"M,`&2y4 U*"D o{ij~M_ېjA[v6X?L,XJ"$j沕GUvv:idP֣u3`Vl;\u ݄.jޔ;4ܺ㯕*{ gBdRgC r;^Odx=Լülյؙ^S3io.Y/V- 'oM9005رc?mX0FawI6 ӆر7Rm*.=蹴rzӒAǢTѫfcԯSd eXHŀ) p(-X6l'g{ o:1' GݶkWM?~{խAp>@\a+Hwht~ zFMf ; I8S|68v9'clbfVq7Z{$:p,߁/%aRP&YL?RNزM[k/(Sԭ[kKVkWVU 4͔Ƴz<| Œ2dKɑ& [+gB$dxT$Ø#hk1,2ĀK"9Qk<)yz2 6lKXU U-^_7&Ov#/1BJOa1k74'k ERwtϟ3(^ۣZ @rC FCnE7k@֑v?Ɣ~[6y{:|{CIH"7n'#mhH(YCN]Fs*Bh>Ă' )_m^*e0?tπ}ٽ?)IP;gا9'`P, }CSִ3m|*= ֛]>{3axXWg1(j@޳NzT[7~~ V$aTREr;ށ )"H U;-lIiW4-M2' Ey>]zR4MSC&*!JTjpj!_*@Ϯ?ʬ(I 8R lH HTAd/Di#΄WD͵RUj_ű . vSp:4z=Ά~JYLwi퐮LZ¨REbE_bxw;PԔ̈́9'KkȠj%"09o;GvV֝6UH` N LTU썸ɷ}hP'Ps(qv{" =X($%*$IZ$sH4 OpX@PXA`<*18xz:/S6=w ";EDG" 5nux>M;=t].Y$yaֺaUds*T4F S?ޛXJDAIRH9 @JSpCGJNoJ|nY /]7}K}FiV)dQdR ^TkC[!`)ծȊOc,UaL!f U H""yFxĄUէ(  '܃9b.̂ph̀m(@/y|٪Y1QBC#ϔO\gw]u-JDVA ȀV"X"֢-"Uʞ)bJr"pIH% ,yORԌUJIA&w 0W%8 ܬƮP^Q57NYk;)"I{t:T > c**1j캝\~$9٘bxb~XőC EuHUFXszaWV0ZVt=5-kH<̐)9qwH5H %R4 Tb,bM#ܨ@x gk4R]Qׁkf#K >5̦,0) CTұG9 YYk FcEYX$ RJI)1eJAUFe>U aV W{S* ]u`G&vv+26<I#Ggv'9JKYr&lm;I)c̕r5HCM'ADtpĘ^qXLMQaUO LQR6KO~ " i@*"ЕˬiII&;zDCzcbDWvHaJ` xВjUqyk1`Ĥ[&$ hMli$PTT a ȌaW, d) Ʌ3(U2p a 56J!1+]3$(עw ͖]RQ2&8޾x*єm!ig]dmרPnkl6>6YT-h*P0ݎ܍f{͠4JDDU}]2M_m' ^M=[**;z˃&_OVE[t}@bIjl׏Aʻےһ5TZ-{;=pʼn[-*`I*ᖭnѹ]ljgU1, V>mnr3tWAzB< MEM)\נ&q o EcT=6riJ%9Pf^(%kdvgB7ZO:dhm 3+.9]3ᕿjQyڽ*96CZ7]]yH!Qk'dքv  A7(RƁ\z>w)4/X~ү3;`uM%B?hRBs9SW#%[tȰ0 RVc#\h=qeHT& c"D$+*Bsn * #&T@4kT\yX\J~}ܘ /pr&QF8nm>6#P5AM,%Jr+ OXqbxVcXhhMAWg8ZqsLd'e-ş{LT@5 !+؞@F|sofZ P4CnjZ eˠvÍLJo*2܄, qIoCPP2;/G۬9BAT" R( v#cJ0:N#D0(tYQ5WtRd[E4t.qk# kgFU'cAwY-Ʊhf-|%@UK6.fl RLG]qJzm jt V ܢ0g$ shn.m6#mX~R1J mHM @.1+!۷L8UHQkM6DW6Y*[4X^-gцqDkYbSlLW_ٞTqJU^U*m,TDg䐩a"*#]eEBv_qwZt*_}Un3r6%i},/ lbv++!=j<ZArzsT`,OɨtV#)mܛ~,є8O;òǏrrܛ9w(Ze_CRuXtMh4m^g.\s:Y\rɼQ;LĜn66hXc٭7cjJX̄qxQ WE@b8 AZrԫ t^մ!mo4VVVp1~,vZ/Bڤp&E!F1Fa1](҈jMz @%A˵V{a,T+IR[hK-Ztdf݆7cdPꡊRQ4pm ,$}"a\a7]uZg/ Sz47vc//!%d *[$.@)5XP)ve,gIwkNJ63e{:W։9(lJ/&@l V U^5VV݂Eb乔CDKfrZ"r.WHrg^*j]IBtZcC.x84֖^}.-Ż>T [Q֖Jߓ4fQ"A:*j9]Z:ǝ \ F|d^JkB%a/wѾd!`Uyjl{d{Sx uЋ9u(uȎ+bjWc^Uꯤv w$Yu9wQ RϟHFA;X$!mY*祷3ڍ\}=g9ssRއ)< j.K6=09+k+je^ <1ws|TvuNBIڅxp5+rTPAлߛ:-iO,PjMB"(BX!b7͎xWКf!rObhoI" 4Vsulf"H UڜRȩٰ15G\E%DU9 UW6Fnp.ΗUYɠ* M,0 -㪪u4m0-F5&:JUVKzk ,->tga]D#h.Ki˱ \razyNK@RL U:'ZbȊ1 P_l0 ڡqRٍWd2kn8Uf҇92DiESAS+;y/g:{ІdmzK!DI$I'cA{@!(_9>2SY_Sݾz)ӣ+Hd:iٞQ=pRdr@I~Լ>m\pޢʟ/pRr-ß)\[0!d0eD"X@w54mkvG58.!Ҋ]#e- \D]TUvEhr%aO-JipFĜ}8'lmD6Tt A)LH oo] +AY2mb SXuHe6Pv /R`o4$#S 5oK^3j5]YI=Vk>97NL@HҺQdžȮHFia{ɜX7s`R Pt+Ţe J'^ݪ*j_jޙ^6-r\nVXyyL\xzzDCX=9!mྵ]EyDHPE$'B!@\+H>rChL&wHJQhA"&isR޲yb}5 Ō=nSI,91,,LEp_c8Lw^ň.1iB+k2wjma??qX! F6nt4m錑H|fiW;YȫSbXAHށLW _4,pQSHrʷeMiX?ǡ?E>3^&2bs{ kKB5UX0h{J2q/(E[z_BYuk j TA$N&-MF2m5ijbUD(Xo3u YVG%C, ,^=i@7V,^G4-\bƨ( -Ps޾[H`pYJ bSJb>F?f$ }(jXNHB Zʰ!D+}}7k%V_ _PR!Lg%Q$I,Y+ ʈT1W/E83Ή%Pō`u΂HC 0f+II^TBDz_a?iœUtР<,U+K6ȕSn96  kFp%?{'n7LPEYhOP+:3@5E1UADi+cng/ĕ_EXH/& j rU})>qWG{.P/%5ɮoڨܩB6YEwq_p?M@UA` d7כwŅ\b$URACZ`5JidC^v;gIϘ4䐈RgUPs_j(W25.Z8ְ[kgQ,!Yڬ[**IX@N#j5}wƌW:2J8 %u|;БJd&'0qC˂ SpQQ %&]ՎR,#TbU}0ЕgSjE$kټ4iĺh5J$ p& ޸_v""_9 jHqsAlXRpgνY|ҷs&Z`=tKJ6TP=GXYOjl{aEG$'NzoC[ַfTDD-S .Ye聆QSIp.S=z=2` [w֣^* I/Gz)*JH~9$b5ΪzBE仏=k;ɉ Y'Z #! 'U5fz24QD 5v1Mi+[0˚O9g)f&LlJA[*P/Uu%:M2aP i5j̋lqL^?s^|~"h޵^ȎU{rwcf @25|W?K=n#}AKh9'T;~q fYFTE)uDT&;ݤ(B yޛ`(Tt(b!&I)] 2 !P] H/"Qn:S{z$ݢ_{XiK-,ln췐=;+R_j_ u ߼`7 l$S)p!%w/4M/U2SY$Cnr0"1#zyt F[$*-SJvTQ1 2쮙Kc`ސHx{hKM>ާ@Q,$8._P8P0dqbJjl;UsPMXn"\yx%Y _Y!G+JQ7$-ڹ"2BBR"*4()UgٳrpQ|i 1Ea%DEN;Tj ~S6*=oMI{lIlK% S,<*Dpf" Ue~pdЬv'kL6zNҩma`Lw(+"n4MD[w ]Y2s7 VRG>.== 6񤲚 YW*3kh! VvE5fT2IvBZ`a$fSV,*ij/H Qf"̋ jšƄ F=wmGoA~$hHcUYX鉱NyYQm1W9+-,a|w F p|n߭>F<ݽWԭ2B@TM-* 21Dj@" rS=W3DDf"4y؊ϑ]-F;|* {ѤBˏ[9tVwq-T `␎ UiU \aHl/X*0ZP}"*On%j=TWnmt}<,\^U8IuCMi'\]=C:lqĮh窉JH+i] s<9feIKU^$愊l\̩ɐa Qj;rw>0B%aijCE _oiE'F" E- ՙIt <=&æo{ಉ.zI`1మ681TlN"nu\A}Am2 0$r1̪6MAT8+BjԘNUv1k( *rjw>s3[paPzƖVr W͍ՄU 5yG 4a9I62(v$P1fGȽNZHｐ}ߴjcgMgP-X Z43Byh]Mx+|^ij".آ(+ңCpp:NT5uii ='xܩrNrpڭ5/$(Jx4j-an+_ԌD}> efhӦS7V$]j=gGlEISfAB1DE UNmՅXl[i@DU]Ɖĵ &ZJITj?AB#$Ugٿ>Q`I$(C({"+.or_NQd{=24 d@z pj:d.5&Fi99|9 (ʠr3Lf58ђ$Hdr@=F/敺ejOonM Qo#k4'"dQb i)KZ6B5{]y#ӆe4RuyW3I淡arY*ThqÖǍ ӞQ22:u k7 Sc ;ل&Hl(SZEDY`X{>ȣ=qC1~ԹںB4E$=zl!^xo w%cFDn!:n'm`cs4k3Қi5&Hk YY r] %4Ya5fbRc`eX-01cWpHLyʧoc?ۖUV,\0OxH +imK)A@ƋjTV&13O BT*+CY~; ߻]ϟj󁐟9 XX2Yk-\x f)K$m<ĮNF)"WVkxĀx:,ڮt_Lԫ0NI25i)_aYF(""f _o bkvTIvJceP_lu %Y&QZxmbBטxP*5n4lȁ#I9A=8mѶVP1Ļ#p06QB|s_'oWa۷S(D10Ѽ!`sr-ͬkh\dG5ExFN$ĀS&H恕áw?jM04=M5`u45${?(@M; kƇDݜ=^aFvn@ڎfމ 2!$֋>1vʨ%2 ( )ËVᒟ \ypC(!(Pn^V |ʹtHg+-O}Jx)]syDJ %*?j|C,D uǻ,\q BU@K$2V-^6M\{OD͔{f?4=ӗ)Dccܥ3JJbCFY!x[:NcֲeA@Di\ڟ71QonuRZ(I$?]˝ 0|R,z{6˥yiz'z- L,*+ueQ( EUIڨ/DIW-=pxW~'S&o%pj$79Xj'"1ڰZY[ԸXdJ]\Y ~N{0|^f4٫54r{kY.}RD@5^I]yapK# 4D )d3ZlѵЕڵVrMzujˌ]Ye(RLR(v,HNQeE^Ԋ v@QPXb"M(@QUP2Pj%#j)k,C) (&%bPEZDDTD ٌk2akGx.t.}l{Z gr<:e3%"=].ZxlF;=._>^ 9; %><O$+ʊa SI dA`1`EN[ }PEFRb,nȘSڶ|9(\=ۨI>!y/SН!ЩF{DiQD@bЁv%V3j4OAE`*)Z`4h !GKGYs݅om&^70Ty AEZA_o%>"7s2]Yc:۾EXjJvkbk}E3ŸbL4cK9&u W&??y U@ ,U5Qnt1=G$5eYeI#[Cl@dYУ"1یnl[{W'HGW"ܗh/@e@˝v<y*:Sń͛k|V&>]jQ=_nҦgȐ>"es|GB41Eg7іC<#ژ^7;j$`;QUsqt pQL)J4< =>.b#A7;w׃f 2ȡݲ YwH/lZyxԮ 5&J-*mi(yp%d”ZH4=ahSd&tW#Fo?yWo9Fw r Q(' U6Ĝ[DAC6DZkca#ʝDՙL›<][Yi얛TۛY,ji VmE-v42T"F&dˆnM3EI35%4YQ;%_ <<%=nVe`D ֵ{weU zθJ<Vg 2{6er5 ۱nv?}Hæ:7b} Bw;BBIs H(΁z9m$ f'c6DF7eI;??OawzK݄n třɭx2ƣs0Y 5G$ICUU+{Aq,"h#c^U.6֋2weQrÎW򳒛jZ(Fub,!j`*RC)a1PMTX );{t jUEDUiEDmu1kg]0r*h/j@US;e{3UC,2 .=%AMF yu!J]ۦ;mg ڈ x.ZBPYJJVXZڮ= %I(tOdFP)oὼ~;~+_1 'dp4w׹ HPQtT*K 6AxF( Ŋ#*B_K}_0+Y]f5PLf "V4)HKH$$ddن<1jJ@emi$0tJ`R?O**XưYbPcg/Mx|wYYazQr2֔[jꙖ*B,5ܬ%ʡdA9q؉0: xGȂ!{sx}nIW͖40@M)-%ʀ bcSYPԧs *]S$^m͊) C~w s&^swJ5ߓ p*7bQb\ւ]`1a%iiZU1H OkX; F޼GiejK&1ȋV77L&W?Xt^]:S{\O 8:moͼㅺ8ZT lEHm5/rg܊cCO|]CZa~sߥOw5xɹUa^*B=z=N~/^6pMMnb8I Uܨ\h-wnx$T %h=r>u7Wcr@ iCFA9IΨ5Z5HKLLj2Kڍ`#X4='K9}fӹr9u%|[,+biZZ "rƄ)UfmD*VKJy=|-e^b(Y"!⭬ZyEUnJ̊VzOu,9C 3vkùY=Q%MH_Kǥ PE:r {m% '[v#^d  * b*DEEU5 Y#e@cd>FiBsJZ`{ktܠVOWߐcEC|Vx5AiD[OhnӵF{{O']'m:cA6\z/teV@c \?śS^aH!zhq.;E<&Hծ^ו7Sʤa]ls\(rr]Q R#B 0P)FSa}5C}]C]J~eMdC2y|:.ͨNvRU"W"%p5)KeTD{ TfƯz%(*4=T׎q|+'_N Vijǿ1YS=6dbڗrJ*Z^7HqHČ^eCTQ6:cBJvfE0Uس 0#9\"CEBeKj4YSbHƱ0tžc?̫tl]]dTfȏ~6Y GPB2 6- fHݻC`i2ǂYH*1tЋ2,̉ %{S;'YLƎGKX41,<;hQ GJ,Rɚ uEw+ZkI{uoݰ7JM˾&bV{fÊhm.D7dZv$QhPN=U YQEATώ]uW&s dыqNilj#MP# Ra%xnxm_!H z,z _/{<2D;ׅ*H(J$gh0Uap_ ʭX })*s+ijj%RoIoÈ_^ 1$l׍CԏeF R ,AcvY+~QM( 4/ލ Q@` s M2r'/v,&_%)ASj J(0n96Trji#ŶR[}}bYYLi0Pm}$>k|U]WaB_QmQz'Dy~t.~ΠAt*\`$PbF>YQ`>b$(T"B|'L&H}:OLCBD$&O?E( TwrW!؆J-uBE5@b0vmQȡPS`gk<9jVAKG^аK5< *qX ƛUoRm kfOb $]OL;[_8lLq4 ǟ /w!VxyUYb5}Sf,Mk7wCQ&.Zƽ+Q#-o"uDwYFmQNPk4w 4+$EDD4rL'aj)m"6N푬ǼL="s IޕQ ='@A^3껓7}cEebK[!fbU55un:S7jrJ*1jdLi$!"g/)+ 0i<[ԓ@ cʍXahDB)նa:#n!*$Y4^æ\ga>mLcܴ97SW R-M<(zTT;jiJ˦pL4!3Nl>J]pw. ={Ns `} 5GSHg,2aU1$h}M4K㒬fg,mj̋:4\mhg'Tln%#qv"ՊMwvڞ O(ɱu7Wjוc1Q%EQYvA7gR!U1qp ,k]\AD qTKSmw+sEAS!3Q7oYY bE}]LDVܐ 5f< ^k :g`ޟLaA5'\vD#T.wkɉ-ņ K1>j jr`4;`V"K9ӧVS6+E+rՋf4TYjJb֤_7θf}!D qʅ'o[A~k:OeǬ_ [ݐ<-NR""E*kItߛ(F"գ~/`8Z(3r3ElmӞoQ[ SڔpWpp wʤ;8jqhl~gRH{[iғ{z@Cױ =$31 6>,ΕzSѤ~m-'ŋO޻R=8!%x(+I`Q9 MU28uDw26XDp*J!ŊOJ]"RtAzTu2Ib{~n(l SCߕurŽ}g#O5xR*ѻЍq\QSC0p(h^G>i]Է,GvrGK3+n\fLUY>腷?u劚G˱\<) Lk)j͚](XD eW;e*O%훨H oclCT 6Lj.:=ISIϐ^{Ƽ{Nc;r((uS1ygYEtJҕtP!.(hJ1C)(FY5Inp8U7jQ 7#R8׍%U2[s"sh⋓GE7zJe;<5mhX޳/J!Y+;rm@ą:4%weN|2(( lm-ü"rYyS,b fXmCs)Yxwsb3RBy38uáYwML<ۡ1kg${Wwivd}!dOG||G4w}ٔ 9<&Y2#D6N~|Т*r]4I FN`]M>ј} PE[ =7<1"4%N[G*hU =<L-9s(slĒJEE(^.dld3e#BQFć:^CZFW~橼 p//@TtppAK?::1CL~F%0 Y9fYcemFz]Y{Jdc^,5];Cfa#Qߑ^anqƆʲvkc$Z5nuOI5ihֹ+^[))UEPU(u$65)p/Q+_P$bGXOd7!KG.f rAPBwWg}aNh^o-}y:SHT ků;Ub5C k] ڱιBkUJ.bG} 6C~0@ڇX2E?"QF_XU[BD3E>L`p\Aҧ E1|W3|$W~anظ5hܜ۝I)hhPIM!пMCX8-ψ+21EL XAU˪xIy#ByݠfHp57 7bâi5bW' ʤJZ5I3ٹvn,o8ޑ6r՗Zf}.ʬ7琛lן/~qxoM_ZjSJ\7_=oV]|``G)ԕVLheH#TN %R`G\Ȩ f*A;m/O5ف{}X3I*!ػ~F7:^u: }J{f q\j>?PSY4\sk|]/Q2nga +^$IG>1O.4Qqp|;bF-#WYm1-A4NnMb0j7SwWP2z3#hڛWHǕ?%H´сn[hZY[c  ]0C&jEЋ9 &cNgXU aCR-5Pjnآ6QjVVE& UYВɂL ɕxvsQP z9fZ_Ͳĕ}g!cvň4m6]JY`U` fPZt;3 6  UXa1A#\Feκ.ߐnZp `/BP 鴆 n-Ud6%L`Q*^*(}t%5&aPmDQ ij7A۪@vC\Ipɛp6)*4" 6( EeF`"PY[2 6đ]ӊ$!&ł|lՠaȩ p)Y6ݭMűgu۪KjJn ,*Y+]+ +jZ '|ŽűؔͥylaC f eu^Q9`tvncqmgKXmR]Fjŭfn:$ ]Bzrk]BS[jY &n*-3&,NJD(ܗ]+aQ jXk(mbto7$Y4iԕhژVb驓 J$4ӡvyJZDJ^ݵRRȥH [ 30)b"?-ԝ(lF-6Q&i58`bkMT&63amV)fcvkxdWa{M)i3:̟&l8&eI1^C 0Cq&֐ӮmַJwN*p&i៘Nk84;oXI&C&CZKXְ ڧ BjB̚"MUR8MT9,ı&x~0id%A%0ņL Ē,<[$ؓ[$>tCm!(YMi먒Plҁ$ 1!@$F0 @0y8y/|l}-=aX/c=鹮|6 &BF;|GC_Y@]ΔI $;$=!Ϥ E`x IxVH3udk@bI62H]N CB{I2@!䷪=CJ@2@?$IiCá!ZB,{OT |Պ:a8m A#/7̍/ck! I[Z4T<n;$=6]}{Fm1DARd '(I~sfӹqB~m 9HO:w\Ujqp~,(6'_.+W%XsXiHx[]mn$KSbϷ79u pgJUtsQrF}-~C>V$ <@ ~N$!ǴI@eocs_G:z$i=^(4ͤ8<Fue{&&}T;+,SwVäI$My=~gGGZ?sb6.yKB/ͬNJn.JE/B:H|bb1M>U.e>}f74B]ߧ:/1J1llvKۺ~h[o>BpY{ Xcntiim"VWA;L!fO{6isw0+CX:i+뺚5Yͺ3By 1ɖ+POS *(vw_ UDcu6[KUQ#L=Wsmi:K?r.Wk=V@5;0{ 7L+RrR JF0` n1RZ0xyU` d$PһOx؝}j@H}_?'iA# hywyw@ ;G%QEz&@X ` cx?7V5+]?@!$${#=de(RԷ 61Eֱ,ѬxD n0W~= '2I6vϏJ^UcOY/e™q̬e7Ωo 8'3s}o$L9{MD!!9}cCT:)/i1 # a.Wg{|)gW6I, x.lys2s?BF1c*vG{]~V HuH@ERs;o5Lc ځ2#c w/6I}Co;ns~aNH3o=!'#E9Bsr01d@@01kCX sSt΃_]x H5Ӥ|WܕyH|W/e3Sͩ !XRÑD`c aHCcW\G^B0{/L}1 cE6[숢f(m!?~6WesHJ uCtlgnk?r@{nF?{ߖ_i$#'! $MHtT8`~ݮ)~3l}zK>#+'0$y?We ! u/R]?́XbgoT$*x ``>aQZ,@1-NŃY jGsǦff!TW $7 2? }/뼇m}'@ƓxS1U q ~XM `7߱m5 o?f`ƁvUcxa\``cƚhݣ8zan~_qz5N?P1Į0nS P A00\@h{דXR0F["\?܍OsgIc|f!KV6 \=eﰀq: SʹLݷ/pwIB_"Ơs O=zE6oTp9I.Lu]w-],Sg*? 񖹧\Nɼe(I͛뗻xSDU.%L9yR3K쑬H)\ h3wR]^PLb^ cRnָŧ~ѓ?tԼzZ E>n _y'@EKlo ;zXqڷI:MN鵲l룜}6GvAƱhB@i ڷ@p}?ZO:O`;?c;HI'їyGoB@ 尪>ּVMV)OnUÙ{s(4wz_ հg7́~/~]G=`iT= cjy a\$A0bF7Z{m2#:>nUB0^RF̌KؔWS}k.)n &;T7slO_bNH)C0#3Whn+Lc 9HmzY@gR\_Wj%I#/9 )'Jyat@>N ;rIb` ʂf0bbvDh2dQACQgH0I~3IS;FqAw4鼭}ߎ<=tG)ְI<tG]vEy42 F:iQǧ7K `:EL$` iR |٤|f;Eϴ%)<1֋_f~dLxT!td,?w~,E;GA!tn{]#YuCf {ӿͥ]qbxzy'[]vxu[ ;~MnRݕyjG̏UoA7cC_A9%QO]>ä|4Xڙ?[6uvy {Fan[wi=˚O~?=2tGU\軾t{ kp02,å-k:;JWf9 ȫK~0EH G:Uk˱n1<>}RYCV\d.7 Nsu;A޼ߩ}b!aTT (l' *>:{,0rx=S(sR땤5f;:۫(a'wI8idc   }~Yg:.ł`|_?,c3#s_$ Ke@Ȍj-#zҫ<`<90Gq3-h"pN=oxڪ Y;*c{u6ÐZn\P:xQ1#lwxJpPdjiF\uN:8uH`"ƺܴ$  eHhrZ-'Z %`0=" P iaA[4֟8. u7#GOq>/$lsF`BHt˷\d=W}_(BO¹nG>7ɮgu)ƴKj+L``kԋ^.xaF1`SՆ4,BK 0FtlT\΢T^s18 N+B @0kvוb01ƾso*{xsyZåSXl,I3ȑJ#F00g90.FhD\u-Nߛޱ`^Xc#2M_(`W0-cea疀0uGMX0 Zk{brouBDBCɧR*!71՘,07o|&ؼ-Qc }fgU/躬7{Ԡ@pXkcZ/zoԕW]zq'P*Y F# lev 7nSd\.fƔ~872nViq<>.knW11הvLGd<]bmN/ݹm̾wIߺ&ɭ^p0,;~ܕ~}wd7h`ćY.?_;7=ҼPp*UXYVc<:B7pZkᨔԬUh#ԭ)]ү)O3_ۍow :$ZnDCXA„NyckO{x/:fHuD.e!SJhW__#v|?l= tHO\mqɭ+{s}J'&J$pvѷuH0m /ֱYw=5@RƨueWpe'/v76U,51 ssG[YIZl.%ICTS*7];\tWOF]݉X7ȪrXI*= [k ,q$ŏ^]oK3_7fqI-urdZ~.NsswE}wnclk뷭MLxBC$!BOeT}! q{KU]'f} _y2˂D( HDRXtjz&ͷϥm_άL=-v2<V>sq s=ţNme/b-Q8T5TAe$g*g/'~X$/{w,$5s (֪V$)%"׼HB+?."Y,[+ݗ(`{rl:r}K>&;{*G#K:bvewA8@ZfN_VIwǡ[j*DrB"-@=ӽed?f|G !zL2fӄ^7_ּxZ ptϋwLB} IYĨNCoI  H']G?UZh~X`]׿oo,xl#2|e{Rƚ!hRu :R4U?#1(JThr.Ǩ~b]18<(N2C @!'"%D'Hu !d9L4B(BFܴHt! d%&yE(IvL,m02d)YLia I)XA@TYHB̒4$!zVBBS&agD4Tfɡ3L?+)Zm@!rC ,3C5!d2oHY m.]!! Jdd &2 &L1Y $VP)D@&a{zkQeT|4{C> ht,CɀRRB2dL%, '%0YL$} !&@%9I ǼHJu)"b%0Y()7Ei 'LCBq>zlra1$ՊBhTCK 2Y$!:$ du(BIjaul$,@XRTZ 2I$$gD c! K0Bjsd0YJ՝BΩSMT4R@۠$X@a @֒ldjd &n03H)C^Z6҃2׵BfEB,dBp"ɛٻbI݈ޡNL]Ԑ E4^V$ 4xjHS6MR@$KM)B$AɧojēK C k! elZ@&i$ I$,L!d5ebgiA$!d $7 l8ωQ^- !L54IeJaq!\  .EBebYM& ÖV2֩HM҅ (H@'5$&F,Sd 1eHBWc ,ҫӷF,ʦCȫd+:@*H IL&zPƪ&im U3dؓi$](]%Po|r$xx5,$ kd$,$ <̱@0 ,QqfHiDgS d8X fBI-j#ɪHlM(V6 A$" Sgy$۵0Cu`Pdc@F4-lB!WVMMd2ׯEIC@Ј!4$ ]ҐK>[ g0 8`r fI%ݴ Ĥ@۾vlPBd M2]5hEI%.EmPD)40͙)Ʌ-۶YUA$K `c*$I*dd&F&v+v8R)bo&%.ʓy4 @RHI4L6|CorډOT! 3`VU lVXz*Vb!,l&,m*@& Z@Ha=*Ʉ(~p0cA*hҩ7YS$"M1LnYVMM+* ZNV\40v%dw)|D 1Y:E ,p[YIh`~%BՐIz&84T8}V$0.ɬNF8ȑL47nO2:a ^ҞMo\t\.0EȶY 68;J.\fZ`Yz!J̭(jd~YYUJ.f(7E zs3DBJk\)C4Eo X=v໛(^:-K]5a$$[(Hop4ML^wU)4Du5V .lsF-Eb6} 4 "&9hvrԗbQĻ$p[Leb$0c!LieSQkah, f[#ztrDr2HMT緪iI p7uNjdXUh]x~ݸ;'uRfδ$"*ىྲ $$Chy`KRiᡪwkaR`0@dU 8o5[i.2} Hǹ 8]sD/B'nPcm<;[ՎrIɫO[Ry;tk7T}"jzj5نvt׻d=n֪VwNpA0]u]n/)]JP{<6庶]/<#/1yMt:f>ÏP=w_9wƀS^~s=Ws>~9kݝ{osޗ A-kpBBYWIiZ? 2OZr?/3Vޏ~&[TRD2&$QAP-Guͬ~~\fr(Tt1QǷLV$B bzD}ce Eoea5a7Q9<MZ=:owv߈^_&z~]2Cw9̣2ћ?;W.3-0Q|wie?S΂<&Guۉr1^&,FCg+_ 3G˲L;|}:=NMnRdee>fIԝ,wsӀ(`CZE.yբ:tps FɸejDSLHI*^Ѣ?Kv|¸셷Auo++9 }N+-n~0|U/Jסen"t3h2wE[84Fܞ%fao<`{ak6oj󳞰]WEs?m%V1R76g%lV"cZ{3) xFs`G9I˟:x]fpu^ebڇ3H>r9^./f)J*oY^\1SRp?ۣ!6.Fl`@ pF0'$t1&~YƄ-n,"(i!UN( jfRS~W/~V7QRZ_me뱕 ޻hqEocHj5_LJV] z4i9df(,%E^rs&DJ.T$o?΍@rw1X R=Wf>5sWU#YbnmpsyϷ]k77{&9f/sKWBwg'h;`a@AظpoWw%; @^s/'pW{oLt>oWa)lxV և%t__4sJ[Ӌoz*b9ڽ{rwi mŅ.L"UBpԘ򾷷dyZML"%9ʢAEan}qbSCBz=^OWuϊuQwvvyԦ6s8|㏴{4/vsX `jwXF'EKYU}F6Vk~[|]^o|?/.Sw ,͚?y"ń_fP5`uJRHVGԷQ?!!xaVeTK$P\0T TQE~{+~~וoIKt4ZR)Z)S2^RΈ޲{:?>UjZSbr CY Mh ,it-kN9u2$dTb#`EdQrjUTTEĭV'4a 2`uQ>7_(<@BHEhj2ZymAHJdm RNQ\S**Ḧ́?Gii `4&f%$s I Lkt+0Й**(ZLY?c&sȖvg88<ʁj>:p=ojVYiP$1 m4D*4=Glҷע qdŢ 0 Bۧ/w7!C{RHpG}A\?ߓ2١!fZ*Coeu2 BLMPٹʆs#7T\lhaP%6[)ɑ 1b$`EƋIR&M%[Q* B cm(hb_H睵 Jt/ž^ ~o1B*@Y8tDNڢ[ W~¿S*}oz3kR;Peܵÿ؊*1/P X .`󇽞9&췦$ WMrȜnIJpU3+~sWbl~V(ts0Ѭsbk7|ÍR>GaXYeX|'dHkKz+2O;eB$R UgYX䒙>.rb唳 eaVf <3HC`Ԅ4v<8!UT,91?_sr6|x:npApRz|~"bBV([cLPeq*WQ>GxNmYeb}?N\! P9FcPA\b=~gYRb@@Jl3@8OHMP}M %)902(AK%rTzKMߍEP Y;[szڨb˧S(l>uM)Գ܈H,9lh ^`(w, UU1w{E߆U:Kʭ Yk2Ñ }"}&D--f#n=IMpШ'GUdAD -[bsz{2M{9"hB&'4*|{-9jFT!TC"V`pNۮϫVEn5ƺ. z ]u}5z<0'h")|Y/2 l˸KLl!V*{iPo.tp˖."^Z\a0i (UQ b_ZQe+(ETж=\웟'U3tOuu6lRI+xh2ɐL%\bBgfTUv̶uNI!n0}ό"I"<YUtT.?G,x ɝCt;B:OAt!D5NZů^v@seyF/^.k62{=DX5A߸f+ͼpLi\FMg.Q֙:)T*X.<'Ğ\swQηm w:xp0"!U:<Α6̳.4)w$I_Lq(Uҗb H?c%{ Y~6SZ&Zs"zDh^gcJ"(jZ" Ԓ s@K< iw%-F&Xŕ(#BR!7ș\ E6 Ewz"Xl4v&-EẔ+lGO;hަ`G: 7:/Pp,6fgxJ^+ u!œ+ ߂ԌP { n2]'4WZG |?g)k[|5%qS =8EE|;݂5^wcYp<rSr]!9ۇ~_䅴-;Ue+?  =}%1.NOG7ôSzwg T߅USon8W{s[h+yL&ڽ>0_&ꮧj-߭htK/|xn !X4yee73՝Qν1ZG`a+uTOǏ">$XNxXk'gI p=nֈNڊ'I)7@d fq!RB!!BI t J$XHhI0! 0IHbDc. t13vMu:Zﶮdz9c־UUcmzp"t85X'{X\)~W zvʣ QϚ=ՍySy^x>(+r1Z # "*09 G b+$@μ~[}2;EeJHރ9!p bXt Ép ʧkF]t}m.%̌K =aETQYBmjrbs>9Xrg+R)y<ݏ`m"-WI={:ovm;'y nUWWs[7nsN[uxq"¦S"13Laͮ}C%__u/lv}۴M[/3&~[RՋUmGi{:Z>gIVu]:g0PiUHQA2{~Q$Jr/{?q>%$XQTDR*(Xi4%v%[/ȵX{YD(lǘL{*Ђ e/j. ?#͠Ǟa>iɽ)ԻAJZY8~pbZ!IFάc!gn (E䭿䈌ΩY*%s^L#>a p(I\ "]ՖnJ9ꥲ-0^~VpYw)1Feӏ%Vij&8 b]{NViNfRZj,O$ PiuYf*W uA~ d^HHdUH@W++fi$} QZ" *aVe6Ӄ624]э7ϯN\$q|3<]0Ye#u۞ro)UEM}q7:XEE6ԡR&݋';o0ˈrd *!hsw>yIU=١JJx'ӣ*P:)(~wҾe.FݹhKHR9 V_yΈ( pad?_b7Wfƺ˳0lD.ГCKE.cZhRxXd(;eT{)Rh",Y9rt (n4`5##rk&cijIz DeUXH D,vsS?Ju’EjU_mEMRa0kׄ(SzWtފYg7O*]| O IQ kv3 R UTQ iv4h,'ɻS+15'av+zYt{ry/mm`ocz{ưiw=>eok;|{ϞdyMcַti yPxs~G m;Ns֦̺pe?,Ga/:,|oy~#Y0_9c aI ({*5%21e<c~eRhy'IwPׅǻW>߽\p_;Sc.Е`y_/]:jmoT7}W?;7+*QW$\5l9I c5{I%?蟴d<<"@< >@BHM $ B@>K$ d II!?YlIհ$i o* Xz8P=|ybs,pqe>8'3NmBLVJ] _j LwzU$g$`x߃TzD9tOD-G99Ϗ_pk!NCH,u3" E ۯNq⬘+,mUקlka>GOŒFs)md:՝gIͽ hy? ?BƷ+$|?OCw)RPLΟa_/J5է0Pb*XPOܪAU"!F;*Ua:@-/^χDbߑ2WWJVo]X5G{+ 'IU=/u`K&vhIU濝]F*d<,JVUFnSS+iaF( 5 L'(TUud>"Y"eP.&dLWq<(gQHs3J`l* wխR,8Mh2%Eը# UY=uEI3|}[qA=ȢN󳢟$OCW_b3J-@@x8LƓ4(F W(Tqy4+xT?!I~Wّ3вd1A ~Z HuqQօa^-V9ÕZSן4Z?R;>n|.7iӋ/\=|MrZ͎y}1cc0.[ n 9yobyy`ϾC7c[X{_|/E}yo$,I4N鄗@'dHr'RB$BOrl fBɡ 2ݚY$ɩ4a>u!i$ IMH$II! 0) !h@&itHJ@?RIC#ĩ &,T$@_>zySo|d/{z#"-7+k!,>2NW K]/2gRbiҗBCFKP3è6:n$T5E^?>&_*w`\SJ\3(i\>7tm}W^\l<4q+N-7N=`TtzHcvƿNm9_C%rR+f߳Ue;,wml]js6e~'5t0zZK}UeiC.}ഥjI?vmWE6˾֑r-æ_$sSW0\PB"DlGW>IH,,PSƽeӬё4%d!/'8.P" эŞ7{HgU~R LhZB;Ie 'iX,s•xZP!fBqql겫Ca R!,lKP*QMG'h^1bw(2CeHC-,2DD"lQA~a#Etuת ᫂٦[w-KJ'98FHˍ#pJ,eוC.lTѣds^xv%-Cyn;|PŵDŽVɣ<4şZ صЮd9u dpBظ 9ЇoO?3sE)|/OwxELc gooD~m1v5RV7FKz_uY$f?x~ITz|E4vK"s)L,st{{O7pp`+`t⒨b l4x 'n7uwҮ}\<#;qwsnpƗZk=@": 5Jd ¾팓&*lRY28({jg[x7?/yPvכۊN\1?c:?[ 9@uwxϵ-o)wo[mmѴ%K׶ng'iw`s׽?I[?}ep۵[mEq=B>=U˟kUW.6aQgMz=>?.j9(;}%ɟ{{%-4(,D7Yצ񗌏AŖ;Pl|A!Uәcș r+L azj5TH&IV4"YhYΙOMg.8hf:WhM WV^zjf<?}s~Ks&PL80/j/ϗ8d2g3L@B!RaBu|PBF@A fQl2ͮN״&,##ĀzOf;z{}=EJR+/i!ۄjV_x=w>oC=o3|C{7mzr@? 'ӲrynҬig:-"@*?ҏ6o:Tr{otTʋ^BAS!=غ_$6Z+mƣct,%\螶rR9t D D:5i(`$1le!WUG$.U!/'/N2p&BAyX]5[/jj`6v^33}}P}rV״P]E'd*‹m[NR6' ;mArJBDsgWoePgI[/7+< & ~|IrVm)ZPVeSDUZ[pJC֤WNpF١[#hy "!4Q24Wjk5^دJ 8Cjtع-zvra~7cXjF %TEяe(wꬱdw}ܧ!͊7Rk]Ţ'cظ:&t`,oO1c½.r? p_WL 2It+Gۿ0$h`@&hlIĐ!'I ?! .HGM5 *>$&uP lj$ yD -E0VE{T fR55Ri*ukP`(y^Nc[o ;M^K5\Vs5x\.v&r'g09{9|l9<+)VQCꍌAO6fzGa6Xߚ'E/߀7iCDc~g'n~"e]U'xdʞM ̸3JkO+t"G(7jq՚""<ܗu\,^_yC[@mɹV*1(+B3s|${Sf|p;*85nqhgMp> ?#6_HGoxf 1m7;އ:^N>ۘ;t7awO [}|o^\>;mr8 3J@$% CH0w d'`Y! uI))?!'L$`H`BCd2@TM 'y3IRSI# 0zj~ >/Ш첷[d-NdZŤL^"ɑ0ucqG28`V 3o#kX AzЫt1w QMv|Wac{=|Z4 T3 )% ") y- h90jTen3lꔕcfHm@{;E@yx pJӞbHT^jʵ LYJ Nmxk4kWlgۮT,=eA]t`0b0َ%]* V^,ȠcrI ~_$a!5H}]jp@))虼ɽ?z[nB;Dm^hqq-O+Әڞ)'NƗXSTB[QՙQ,U Z놾/`}̸y\i.Wi{_-Xg2l͏"@, t|zgUPu^G#"=@ s ?IN)|>iahS矽zs87p2X g~]y O  CQFR0ҜbsT,)D %Ml` `R̨1*_gb3jz#-_:Jjh"Wi{V X*C2ڑʼnlF:'fiWN]PЁpr/\! ꪖ(d3!UN}%6RA@s}Bʒ%2MB@ =g0 H)òREIL$) TC} /J%+ 9їI8ϑ-)=̽.+i\U% * [ƩJy/ c!rJVn򾟣/:2|Q |~a1-1E?|NPX D7+ݗxB}NkFThY4CTAkl)<FppFF!] 'A0}NtsNXEX`blP+O)['M! 8bG46ci4_~ݳx7 ;E@<3o^L~Lc:+TO_kIJ12$ )*:u,j69%vsĮ'B:H#I"ZCSUHIn?gwZjꙪIZU sL>RX>L*&JI ]XN0xd ɩ>?nNsc")yNϚ+t,[ISc" I g1–z ƙm߱i;'UC%r5lrkU^y@Q- r4A EBeU@9@zxnj >+7TW< QI-&edقaw-;xOkX!=16& aC-I% $%Ё,($2@ dBYB, ECJ P3C;g9?ӝB4 20QKZ萷?ѽU]O4chlï-lzmE5" Kc|omQx%HNB`xq*_ý9D0ƴ)`!4?C6B4H&fE9)QM|'W~N;w@!U!8P CDzjHY"yO @Ifj@>2Ą$,$Ӣ fHYHI&iY!+iޟr+tW[p@'>aC/>i)@D~ N7PMLu:ƽ3Ϻ(6WS}t i3%^wgN?t댓ncCө# 2z^r5i: C^{)֨(]$xvo,SCTPq*}60뷟|Y'ݯ'e E5soiS5ǼTӅVS_,s[Pӝ?"|Q7Ejtp0;\Lqs BX3^MҮ&0pF: P@F#RaL}wݚ'dӴyɣޞF NRZbQG}["wXyy5178.$Dŀm~d~6J0L X mmRk&yXC1`2|cW)DrٝY>sh;}@ ӐhYA@DFz+?mSH#$Qq,3=w:a D[lkѽ-*`WN)nO.O-0{r $v pSvmvte7@A:uѮ… LXl}/Ys0ӄDܘ_('i [Xk"_\U4f<=;; Qo-leE`I) !:Mmy_6|^vϑ:{ Zr6kj3oVEo*s:ifo8<*P?$O^3p0N?g7DUᐾBvTngT~$-2gt7EC J(LN\#VJdpJTPK;1~6E[XBJ`I'륔%0ܼڼN3Jѧ(44V"]m]P"3C}_~?{E\z򩾗R|ZA pG)Ƒ%l;|z(*a>*|/c71zX[@>jdN͝}#vPvQm6SʵYuY JG:QBAҟZBIp )_Moъwp*J ۩SPnҜϖ 9(,n-rv-vgCkî0Ԏ \ÁlkpEnKQ$yQu9(gR}ok'O`t{Ie W+[v fI,9P9ZEnqj9Nq(Wf I(~pihd;}WgTF?VVva. A+-?%AE7Ʊ%ë/{mVYFM1a)T8 b;Oƻ.8<_irŁEͫ 3R>[=k`%H$I$$̈́섀@) z6$~BI BLА$0!&~̶ ; dTd}$L!2^>Gu?5~vAM㱓\2@5LPd}r<䎎!y_ZcWA1dRyX`ʏ<, DjAB#}(d췽UᏱ>UI{8l0 BH4  RJH(XA-[K))=QgGjQ]\;;^NChb2ot*$,dDY0䲫0$H!fOM- E$.@ E d$@ B$H@ HNC$=S!=aY LV$#M, "@J !)@m_u!zl' r^P?ٕn4959:hhdS| /Q`cd(G<(gu,,+[+E߲DJb A"%yq9.zO>}u*-2ut;pU'd4c,nyT/D ~jߩX ?I@O(O˦*T F(@ ܌a; y{Owwvv9wе42ī} w(`9=.GYCÞ@$)_{OS}8 udk[0AO3`g|N`! T<7I س<Aa@ b(02Y#zo\EEkF4?=TV*_rt"?aCS0Q3"D$%@'PQG ,*:ƆAHI=gcA$K$@)$B!!HI%KB\xM̡Z,Ckf;*D#3^DӚ}bòtM5whw 9_9w:L#[Lg Uڶ%-dfq2k_a͒hj'in_rfؼ ]?K=z#P*@ mۜ_4p*i+^U>')ȩ,u]=SPO|c^ZG]Uw*CjܒНNN}Co+6V:}8״}Skp\k_d'Y^d^ 놀m8ԇte )U (E! }@s$h@ TAK3""Lj(uRNKIz>;~ `nJp5Ps~!ʜ& 98i b0+1RN ,HO@@d@<#OKP!|BⰬRb2@ d쓬Aaz<؇AJ͟Lu*GB#/HF6As4u,ncEJb8^eCw4F)8E @ 6h`:vM. wa!(wPB""D#Xޡ@K Fsf{w>٩>ݱ<*jD+x}]ө|oW~6?+ƴ uMJ@>XW}S@s!Q%<wNiw_/c@ qk O AZ@nmwIWCϢA'r7or ZЀBYRH/U! ,PKTv:0 ąSc9%G=͊n T=L?^;jfjB`@#S;EJ+'}_ѧs@p dx?T0Y$8XBIK$5$wQ$ ,&HS'g]UCiHO4,CdV&wU=6fW5Z:B?M$T}LF,Yr㘺@ 0['AřTuLK2CKGgp޸U {wn'ԣk[ oQBJtCoϋѡ`:T%Szʦ^^S{MM=>ή-v  |ZHӸ t+z߉|=.{ T};._7У@<|69"Õ~_L_`v±DVAQT-S:J\L&+kt%J*@CӅĄUD" P-\wYQnXy\.(!I k;޸o c~>'Dv f~ 0O=gm?ҍJqR\}+mU:`Mp vE[g6?v,oke/E2m  ӕA,$Eڲ^h(}dѢWZQ'7zXzZt Px1/>Y﫡'UcSgEvZϲٔtVFPD :ߥB&E>Z6(?2kFS.9= ޯ/8oIr7@8r6G[AϰxC/[RG$:S-.#SfY%v&>^͢%#UѻpՕ u~UeW\F ts<:6DN=xA9 oTH# ͔2,b1`'f~ivl_ІٜO8CtÉ@ ӂ N} :f"@ENحrڅxA`ר{5%E9n6NhЩ,j,[ W9FMPPp_qr9& @sd.ݜ#g2>ee PR(BN;G[{9xqzVjtp3[Jڹ6]M=xiHb<4_{ͅ~ #ok1 .*=n4_}R""" ^qԲ.n & E~go<B" @ Jb'԰v͵4^ RuoSֳ"Q)\l,EQ̲= /EߢEmBH_YWg!&|qQtpDrZFp=izG"[/ Kg< 0f4zT#b~ԍP:kҀd.5H(|7_fl.%AI +lS;y|%_@o^j^1BX ìeû槥ݞn|hVrlqnJTBPIV(AT(UHr[51Hl^::K\:3DǷb,wjDrM+laPuλQu4#J-"Txj*Tdcdi5  #8#;XILX2 |= R)YJ 79Fg=E7K3{!7 5[/āb9|@4rIʡdBd+_^%cWͿgr(Sr |hú$TRPC IUD j&Vl \8Cq` cBt&?8[zD_#M{>J zhsQ&haPIQNn* Hɀ|4mb,H@sCh'ZKgEiss*VB"tg֋ϸNT8O CϡEU [5]Ff·0 {1eWp0y AG:BIQR3Vm>"Wk (3Mnm,'ϙ @hX83%:Af:fꊀDjL,[7Z]OEKݫ^U=ߜBΏPacH' Ӝ?iwkhFETVE"( EEXpqyO+ې+^XAuB7!r.?KS*p1 a2!J<D:IΊRJ _ѿa6R'GM㼮??ˡHCEXyƢ4^ A~uhCnBJ,$1Ǚ~lq ՝#0EpVWy癙#ueɇհ~7}zч sӃIz7Q寕B~ )J;|0woJi19 HCX@JϹU@8d?u( t_]ɍ) Ճ.3*Fg3j”ԽqV W`/Kߘ*9ޅg.4H*soy|kREf~ ᭺ݵ<>*y4+\|X ʹ K8k!:TE 7ɎAㆅuG Ns[K\ O~!Ȣ%wXF=fLD1 u:{v=I8k{\>r5t:Q% g04/O\d<{-@DPQ)b=*ğCtKi:Zvɻny[V2"9Czm*灯 QHiJYn}j.iE,jxgm_Nng(yS=~ٕ }$Ӈ2ռ|/ YW3tz1{lh{ h`.`}c+"uPNʤ~b~" 5%㭂vL4aV6 Mz.oew3_IoWGa)׻3[tv7EayJItG(%a7S[5k3wbZ`ymvq]QY Rkɿٔ1ȕXn׾ihd+RY87xX[G=?Rч'̻Q4.=\ҫ;F2nI1|la\ggy>T9},;5q$*4ma>RnWy8jvV3^zc 7C̭#W4)2E7}uj]XR#P |A[E mGb+`s9Źljн^}o|^ < ̲SYgh}$0PهS*`iCnoiI#Y0m=}U>?U[sGUfgp``~GGi_B؞}W"r/^6'>yb{0{?-޿#U3诈`u2GCy6y`T!^YID^rtxݬ9=OƵ汱AɜIػ"-O){Ggu 7MWra}\S=mg#k?ЙnOwP&vI*>&֧ +:rE\vKʔN uf~hC,/OS ߫( @E%-[8o^?BS6.FlB| nV(&U](:(B s9꒼U 5VtSjʙ;ˆkq@mK QU-X+FPfTeOSU MoN'Bǽ{}'^z[̀ 6 ,e5 ;?Mv|Y9s*1wE"-q;W(콦 ѷ; I=tTU + K \'ܻJRcӆa9]< *# OZ8&mE P@[Ks @U.;w Գqy^*h5-:b M$v]ͭxIL)d^np|A<r|6veqoWW/AD[l츸!h8V N>5vh($^iY/d@W f+JM~ g3>%O_n{7 uBT[,ʾM專jˈ=j"[I,džu9*xM%1ļtvQ o=X/rߏ,FFS6HZ}7BN9e[]E.x 730Pz P SQw<$F'a E?CJp<  pxn{5jO9<1p E㖾cO6YN' J$*ƯEs15#h>e{-iQ}a&Atqx!BH uahڑkbﵓ0+B]S_IXxHIȖ}K@b3],1w2p U$ P12G]!'ڊ.7F )<`s2 ߝo5ida%p}}R(X'b*5X!uK-v3a ɱc)?O qȅ*M_r6_cz]b;D+Ls$,{%,0f$ EeVcQXІ(WiVƅ@v6w'm,U˘ y3Om_mvj@K|}w>UN3y}M?z%a%RE,tUe&ٶ ‰p|/DJ_xiNCC^ջ{&qof(ܟDЅtuK`xeRUC`ɅĒȆ&]@*p,;;䝢ga==INӧejrg>fWS@H^dDD`+Rt]}tVIaPf|Af?u4G6mmY6m/-떎 LDߊ+^cRM|9:p_'i ]W>AS /'1mYfRv?μf!n(*YtR›]ݧ%/ݣB30C`+$)@7keKX'XP+V>4oXBUӕ w6󉡬s"buI7A סV .<]3R_ mUܲl~Z/L8Ûg݇k&臸8>m&sM|bROQVT(F(7AGM4;JT +ؐS\.aƆX"u_X=JnzNXBFy:*gGNgŏ2 ]bT$ A$T!LdP6OLp~MPz7dUO!|:=d=BNE#b5 g~k'S7TB*v@2a!I u&I!਄ ?!%/Tｍ `$4CU>BÿBR1DfɖtR#zSS5?cWM]TAb @H>[J-dx' F/{Iݮۆ]F44' 2~9swwWvozws7,;|ӥ!Qebׇaf@Ɇha7 ,^Ut:jX],1Kj=|n {Hd0r-2bc"A_+k|+ >{g 񴶴 szV>OcS׻>S ouH%ݤ :E}/^z.I{<|Q0NWY?[ѭNvj$ r !ߙR% ~ 8@!<3!fΩ͐ghzl\@<ΓCpLо@P$ԎN_Kr^P6 D4aRFV* y$!?z ,1@!I$!?< H<3.^>oRo%s~q:kٕ3;s\c5* 0A*J9ޗ6x@?]y%sG QdRU2rTQ;T4A =ۑQ lZZI]'7$f8f\^BU~FW wevRSw]׋ ԂG! H2F\s3]{㺿] YjBIϣ#<ޮy6tU޵OeT*%(2$+wG<u`piע7IJI8B$_HB}% I eI +p՘0c$nplp|Kl)@GbDܲ=ĥDRӓ~x[|y'f:ɬ: h]pt^Hde/g W VHKyφT&X#(SD8ڰ"\?R~hZ&䭷ZXiB(YÛyiMM֓K iBյJVִ2T;2 -ř{O>m)888˒L#WXl;K1,*)en37&/z7 D.WT~Y{s]z\#2d&DAo?_`J8{2vJ I@ QE} p$0BDH@T+ DaWoIA`gDt&ݘ868vT|6z|v򿊂@㤯׭T}U  S?2Ia W]KRzO^1 9E0c-N~Q P]za}bi&@B5Aؖ,5^&ѩ8805E)lt}݊[D2ƒp@ Pwf)fF=+;ylvRUrPN izm Ԓ`F .QT_XVT>WTf RZ@sTxmd8 \ܾ̆㒀^0ې%$+ ,$!?oGc@;du^5Õp3lK%/0瓇ڼ6jLoY az)>Ǝ_綺T*6NĽV,F5Lb/h{fy:X<6Y!muPIrY4 ^YqͪC,-" !a2]550Qy8j^][.< &c؏Bh*"0Z^Lݟ(uXB@ {v'Z69}>QQ[Bk lz IvtS;**OZȼ WYShbP9Xz_$J1~,%0$"!)EgY$%А$X@c_c ,^RO}^_m^3H4YYεJT69 |fBl j+d?>(CU'dZq\d3s>9MF ~dTjdwdH`E'nnc2j AAU|8vсBUHeQtWG?V%`Ifd눘^F Q1țp jBJd:>?J޳GMĀ7t\n{mGlG[L$>οRAQAAE 9O$ <tHd*I ? V$e֞,4Ys?)V樀r`:P^ [}H֝p0-Ѣۣ~t0K֒FgD&%D콭XNizΕhDT)>@eqوP`ںϣ[XOs~+U!D5~ΖÅuJQ)BkB6 "a!11E*[ /D<$qԧA-ʊ޼4T㫓ޣ!A_CXUHMy1DO'w5nLU0scA,1ظ5kQ"Y>n+E 4{]M̋[$R zbwdB%i]#EƭPԋ|:vZGUʐb;){ E[*ӧ'Р=%<>u7K71DBnQko}8?iBGb+2cƕ% W.e]ВL\~FCzK;uu=$vɷ:F&UtJQGNF4z|;G{+$%RB @m#4u$p\cp(zDn%ę7Uuv^w& ,qH(qU/^+ɤGͺjAq!$9*Gᨯ^i'ʓd/5L *l!AaC\ʽc:K#55HG n `TQ" DPRYsL&ଆH7B" p% *V2Y(* "4 oWk\~}UIW?Pǫ9e=䄠 eT)C/eSW1˦ L`W%yI 7B+uvH힮߱8!B8W^^-s64uJ7ww~=mxRƪ坭4:9I6:j2 pQu]ƶ~=qk 85Cۊ?MTr>W 5#@Y5oӳ X #iG,sKJ 9WWΐWͺ)Wv{~C Dτx㘍̝bӎiK XDʣ(#W-U(˿{Y7oʿ3GJo%#P8CL6ؗ߫,ˀ8 6SEt+\]w%bYY}GQuweC __t;.Ɔ@sU "`\ibGaS Xd,e%vP(F RyXS[˓ T:i>2ijle1B*XE5G93PZVHa@e>J: *TaЍ8b@-= )5uQIj*9iC,@ ݣ0@8[xu ۵Vw *;=>`n؈<'L0ю{0O+N~2m7,{=jB컊ϩ*nh'GKX(*RӉRNTP ˭)5l̓lvgW^l-0 'N'xyu6SS""@9?,yNUy D ؟e~]GSRbl̄{5{؄_`I𖭙#tW`4_XRU.M_VFAe-Cs^Fm !8;4wpqSI64zneA?.kE fHB4`g#&w.,:5MShDjR8)d(-sv'.ӷ;/Orhwa{V撡(AQtY]K<_^XlT SJpU4K1. y -,.*4F^8R DAEHFȴF5 X MԨ !JJ 0\zw0V5ﹰ>q V\E-M{Ipz#)0'e=)yt7=2y},yUP ZZTI̎_.{u8<]fHTJb{ E'qz-&$09j ]kxePIa*)LiSg OK*le9E@BP6Ba$EԑpQC'QajS\'XשUn]u9H/,^%`r@,0%I8CPLEIڵ40d]>`F! ETQA wkD9j`x,[?ˉ*_p=z-wÛ/7[N5Mņcp sNsӧ9@7|KЕ% ^X@^;h[ksORgX|DZ=ݾXG*`.h.|+UH`[_Yv)AYiMTtCEI/Fq؞UU+U' ԭ?=@{'m&, ki 7{.3 mqTņ;]::*O6"רZ.:,w26|"Ev_u"6 0cR[z.ASB%R4*.(*feŅ&)8F,-e}{.̈ `?UE}#[%O+܁2Fhah.).Q=K¦Bqk[}*t߃j Ph 5Նry(+xTsj(MgZ{%ߵ=JS`)8 6LfչWv ʽ:PQ m6EwgaRt x6^wW*Lss x?oFqz(J6|aY0zcWTC_|!mtPG_DܚUiuPuD^rkK0%g!@ `re@]hi>_<wp>@]9Eʳ73 Ma-\U!0[a$Eox|ke=ٍb5bϲ,' H Ȩ#Yb˗G_Fֻxy9Ҽ1ӏKN-w\Ҋ-91<`V{]E@lw؁kaӨMcs0er@cjCǨBf>RE Ú r2 .y9ď .ܹ6iRoXkL) g:r4?*Cָﲰ89%76H k=F)YznuL7mmEpqm⇩n^eD րS[Y+0U\JpTID"ШA.y/'`т^6R㩴Tk^uT݇ ߑpdf\ٸZ=k[#fve@OBi:еP%avurr1D &JNŜV0 ⎧CX:owYz|(V!R"g.J٨]+LKb+e&\d[eȴ+А]LU@U΀Yw= HmSqgCh.-y[m]o>hBqPQwtl]㬱^m_FA|lpPf`ۜwYAOٮ"rϛE 7/Yi#,%F̈|Z!Vڲq] :nˡL筛J|uU!IsR 'gXI}NcS kFw>=$λS7;с:^fSa>ד[0;(EFN/ d.F%jǛAg 9 duM"mn W0:KXa8il7#{)` vy 2P;ⱆPaS*xUek+V ~lҠDE6#zeH n9Ry6TEVۨXIX@k !,;svtz`]x(P"(8XB\G0N2aӦ\ީA q>W)HR Q+uT8$&qBA<@*OC6]W$k犮 ,~Y8is1F:[(\ y ޺%=5c_i(pn8O 7V' xe!h/Pgm!cHAzm9GtQAxThWX#_˅>AmWCSn;5屨+ 1GrЬrMP3cg:N<y^U8%'kN i7p݋nrs\}ފBċᅨS5KeS^PHn8(BBZ9G/Ը<+vE@ݦsSO$  1 I3d˹o%  9OYR',W+BQ: ț JgaRIHBaiSiI5@ԇ"拹Ô&[W$'44}f@]"/ٹlij@ 6Cu? uiZ! 5B@סHBm% R%6C0%2BBNjꝇ HF }|ɡ9?#aPZz'!*=1 r}|\ NBI! 1l`p:^\k]BJ9#pXɟ|"+Mp!Ag(M LA"TzQ?ԏUGC~\z7x_P#QOwNVz{ ʗ ?K ^j̨4Z$wo!!5Q͡!J<ݾa@f;S:dn9 (_꾬IBE@H@/KAa$AiP)(Tw\{XPcsŅoֽν|{=jQJQ*&߂~6,L&B8#!mOj5=g!ن.O-09MefJQ7e g-ΉRޜ+_9{@݌> sV;g,9 |6Hd&z4{T״_CqC}v StF Bҕt*\n\E6<(?$R|: XH+3|BB]a NJdtN۴_V׳4|pՀAF̤1kkORf$H`;tVBtHrUP_U<Np4_M8I'iv o%T]}֎CNOC[FQPUT@=Fv6n/6ZkA+Xْ^ap]k0FAe7gO9 ;/^+y}.Yu$r->BWzڀ-!9!1iPƌXx#.xj?_lDuˈa*qCa5-ay/kC/Nw|㘭 fB `I G2)2V-f?]̙[c\yKDaM6\жTWz zߡj}(/"@|9u X[qj! HVn {s%-(nmbDgMq-(#m]1w.Tfdӽ|6fDRY(Iϙ3JDJ8'^YP f.5i& j#a^hHk*zXfg7FD@{2Z&7YҘ:bԠm׸m`T3&Q"CXid ̳T(u a'r_g2G*@VQG^଩U$s"@}r{Uȫh0ChmCh֙t;G z5Dn6"2JQAT_j1#GCܺ AF$ļCugP5lZgo1Vlpw/Unb\ ub#%W^hͶLPѨ頄*&뭩TL+ة^q5o*{_:H#)p&a"]nLesvwj{5ZKL *:5zͧ skEiŃwEm2:/[F8gOUs:?g.M)|fXݱ~S,1֣ We ~=8$CP Dg{]d~%~U]aܵw7Ž9t'6τlEϟlvs7nzQFl?X^%4!! ^S%ᨅE63fcS>-, &[Xp 9Aa.~ ʄ8й1o y]^m2SWPip۹מonӍscȚ0RqB8!i7C/z ]4N-{aGWH \|X2E{!M k+qճЗvW|+n}Vy]0}8h:?x.#(Ç .[ctTb؅DdA;+}5B GQz .JDNI% 36)_ dtwu9(H;Pb qsD[SM6Ej\>l3gde{JǃFu4Lt+!12i$z'8!j 2vNPQcnnU.~p[2լZ/&"q `hJ÷JQӖUAl&k6Wφ]*d٬g biKl4E6!z(Tm \3񡏃2J"@'K1++yv=:3e T QEԴge c%cD:˗G .UCljȢ1*7N@Nc/3pl@ ֳX:ARe%{SR_b/P_RGXP'Yz ˗'^ɽdou«v8hTS~ t)Hq owz2B=MZM* s՟d%I{izJfg̤l1zr {Os:Md[]<'H٘;ȳJ: HA~·']-jTEytofGΆ-q5z ǍZ>|^۪Ġ,Q_O99Dѫ8(+IRm!(j뺤ڇH5?Į;Ҩꏧlobu>S(ON),/hBdU\3."K"mt: yYe 歷kXIc4>rg-; ̣k%=D6NhsK~..,h]LvIbT==q+RU0MA@nQVf {ɵ]p7{]^΢ynE3+ :I.8`b"UybGjjSUҌT5@F]&a$0^ߛ;m[p)z!?;cPɞ^tnlQW ɢF-lvFgr (f3gbmzV @J2p hQxze-"  ==ZuwgnN~6r(.Cwk-VYb`TPHp-Rz]ݵߊnZVoO*UD*IT3Tx$N'j:Ͻ/SD=}˝n^z*T`ij|MZ/R>|:$^kNEN~\ T^\} [*}1lȋݑ隀]_lx(ixAX8pLR+><>Rg-\8(Ps NgB@GHӓﱶ8+H_k5bW\I?9~?B6 ^p g{ry(j}B?D:Cܭ< 1҆0y[FUl=,[ZH9p*ރQn˝+VySu rPC- Ծ,LMLgṡ[pIX%ZףpStװ$3Ӥ7W +w4^bUx%,"6= r7?+bhF @%ak<#O'td|D5sBٽӵ*Zh)A+qm;7ګj)Y V4M :ag,t"Kx6ulMQ^t0~jKIg e$sS0}fϻoaٲ>Pts0B "W4n mp^fʭW`AZI^KskƖHA_$c=7ǶhSn\TByoNj_do5}s?ڹދv\(X7|~1R4Rx;W?^]Bve] 2qo@]V~Muϫs05E sb=T*3'#4b˜PPu +Fgyj\V5Ek=ftIbK4Y]* X;jT-hLV/]*I]x^7tg^$[ԠճEB鿏{uѱ?A{qEbBuUSwqxU=F^ ˓1a qe2ƮvC[ tKm]7y@aja=#Ŝ߀<&_mx먑QwI9zRyxk>;SP:L#5u AP C0$PMkov;:<*n޹bGZyЌc{xG9D(Jmp@0Up#&{Joh[  [` {QKIUciG!,zn`{ŢdI-ĉnj馸]u:l7Ωe<= XD_^k { כj4!#cyX_50K #Է\KN~4Ulټ̔2^.au\ 4r b\!Lh.B@ * =,2xj4 l!Dzց f^m+U m\vr7c6_qƹؘ - 'cnr;Rc#|*.(9_ YЙ}CV4YҰհ14X|~O=wẰ-|6M UGƾxC4an Ƣn0_ADif+eYi*z(`hz2.EWfQ}Ywo2:UN슞 d5&B(ĵ5䫂UZ6\74uvGV%WJmH'@ `8-9M+ ill KOUX9xe-ں!/*k * Ec۔t)]Kƕ b`MRiTfΈN@#w-r_g"/hKM Q;pWwhw"4SEDDxEݧRLƬ#$tNjt$`sE# ($%~- 02PK%gWDaͱGvf ŒiR#s)r+Z_UAzéF^81eTQ q;vQBgj:lE1$;=-xRXǪ3Z[A% aTCRHgn B: Q]Qe01ĉOe55JWZSˀQsp 1U\PĥVPMnbĮ6gi|1.K8iWM*|~)N\n4)Cz5/&/ˣPUD+YT8'+;&!|)(hv`u7 c7:t[^PY d 2:bw9S-@*E(݇<:[W/ 0ay+hԀ;[Y~WLjeUO{aeUZY]3zP2b?YyI Nr5W1!q$qׅFX'e>Av)F&,ޗ!i4t=u=†f>nme3v!p+R:@d aXi)h ,"B~vyx@KYuJećMV>iǯ-m3ݺڋG x)agVݤ0!i!|IagE߁>.ɨ>[3~F XnthJ,W@.7c칠:F7baTYOlP M5M>2r9vXOͯkQ>=ӋF~Ǹo4sj}~Alƃ52 ѬIG96 ¿&{f=^Z,iy@(0 Au/}v9hcvM e1Od8A9,ٳ2Rzb@"+R1ġ ߩ{6/+ӖX &%/hzC[ITYmH+,{|2fXЉÎUB  ݗ:VErzWg'ʐUz>#yuZBJf-I#oVC +a"9L\*q+P(WZ ͋ЪYd 2]%y.,%dpd|{CQ)Ý5d3xpgBaN*jSܯ jcD:4obZ_%Se۴~)̀Zw|ŽmUA0oF8zc߫pG,l)\{M\"BI6#fgUw 32Qt}"#lҗZ* WX/"TH AR)j+o,׋r]C?|CN1ɵ GF{^%>TqWS(|ݯ?eugZÙUDd6is*(6HT|QXivZhVG\LS#0Xm+E[U7uEF>겨|",c6i]2^~_˽vޡDumcf ->ϩS?S+{ypn*/*\ ϸҫGK9{pH[3SX Rh6ejeX<#EԐNp`&mz:}ϫ2]͛Weu5X3B&iFG|.~bhƂ{y4rH@B[@ZNH $ nP!+owuKh/Aכ1$ο"rpfX^󾶦 ]0s }ifʎ^]p-F3&C'N>ϥ9$.yVjWovdv Hnz-Q>^̨~k .;rP5i `rͱ߭ Js'lHYccr6SV:.G*IA* ;W#?hqcUm?w.%<ݦ-7}k}o^GL{7ݷUDy0O3h5D=Y$,dTϩ՞}[ /p8o+,o=^׌B րkS'/BID$&39lҬHd:ͱhA6K{j~%Bu=x@/L녳 -yT]ϯ}WW1_H>IBfe Ě8/-?jekU}R<-@ro:OhQi13u}3T ZWA?fCʙ* * > GXʼ;u?ۢq~m4A@ h& Hq HEQ6>ʽbb[i;=18S@f( 8x +:j!?I'+ Y7 KBO+ EojaAJ d2/j>w=K E$$߱3ۢBC`UTVt͕<ԴK-Z*d<#ωqt)᲌d|Y |Ÿ:@z\}BT5 ]UnKQ 9Tשf#& Ј]32'l%'.ߕv|OKP.L?Q@>]Y?ըI?us V7Md*@'š~' REJ7⅃ьH@**=*U Jzrt, !f%}maY~W:iCSDgrI$X y^Һ֍LEDC-d_ 1,fv?Kb=vj?lTbaQ֍wq',1V)aCY2o𪌚 Gd7E=IsJl !O-n8?>n7_j"EɒHo"M6cn5JQS_z%h^yU{ l†,|nTR?EP47BCsjD˜D9jfkQE3ql;.UՈp\.{]YbBtIV*Sa 6dOYϪ BGuenjЮ EtȪZ?’7Mi/z2 0{؏QbQnL\ox>=4/i.",^w>SH?X E͜h{bxgפ'0H0)s1%F]ɟhp4\r ΅k$^T2ҢU@G߽TBvl ԁ -,x ~O}/|IUz0+(bTMZyOaT>9;zM$qD.S 8֏gsf8lj,v3 ] ƍN_}ߚ旅łX G>_V~p΂\Ĩb"{MU#f!a~z?F TGS}{ZMQ I!gP8x=4I,0\Ѷ-؟>ĽHO͗L$%7&ΨW~=i~\W~/ɋڡg݉44P8{,5,~ ZC0pKį/`FejaZvQ^?{1WeV\.F=]GY6U1.vk{£`%_ìz> Yn՝՝z#ă_>}tla͝KmABMܸ4'SIps l)X%VU u?}ğrS| ܺ 8͉-[+| Ƅ8t W)aU?Uȼu9 "@CH/LiaR za}B?*afU e8׳Q6q~|-yãa&Ɯ r.:VaT1 ~@PTDX Bg f"e2+(gDeA4 >Є3pc֯}M lھ`Q*mђZq!@8Wr, =%L5sj3*jlUNwt4 %Jq(fQ^2|VP¢XyjΨW%Q㰲_Ҳ ŹήD^KcpS#͢$AZV5E@#BSNմDwF(ny #ituHK'M ͆u4I !(;Soo֞^t p|aZu\麐0P*ry'ɐVzR;}nΊ Eb1UD^Tk6Ͼ`ZۏVrD]f0Z':ykޥEա2ę t9F(زW1*=*KxjӖ8:J:UQM= ZoĴ 2Wt*Ц!tTp&~U+;]yíOPGwV   li9©&VM4glqvs69ߓt ?ⶎtcHQP/RZj׫T$fAP믨i}/oEܰiolQPƁ62o|~Yff-N,Dؗۍg=O3>w*(T v+]fa^V`Kǿ]eVPӫːvjr kEA_iWZvV]Ikz9pAP " ָ:DemgH_/:  zu$_)RV u7v b-$ Wȸ*OzCjJ@ J :m%rm ʸ;T:hCUZ$t1bU$&Zgym}hM6M^~1Fߧkqlyvz.{._},euqfFyTD#K%t\oX<[8˒-5@Xum"k\iIq3YtrCt(WK)ۥ7+L")f=ݗqVQK/4mrq)<"'tS6 Ŕ<,kh=6-҅vo=}1 m>C.݇qh$* #"wp{iG0禍Bi{~[œ, "i۠{DP R~2rOy .REc+p,\RhAm @6=dP5ƕUPw:V) ++$kEdluՑr;At;MT@tg?LґTS⥕ 62`B`1:igD"*:&G:ص(7P*IC* tI)tӷh_X35.]Z]$uLD]iN.C(Pka{A<;]Lu!V(&&\@;]#1ě8tmPMx")++I APL˩IOGQbz}|/*9KP[L-?5(:%/^zo qPb"0Ԭ0Y\8P6(bs[9-0N0oY O`rC1  2R(F/A2POJ&upҀonoDhѻag`N@e\؅R F8qqs嗺Jf8&c)wW^o@kuX7qY1ԟl+ad9 ׃Ie*7ia8csOi2Ȳ Io?o%x'6<-FT>Oy@W ƿ}l7OrYlJǦU"!ح_*Bgx=DGC}TPEMܽEc]cAO9U5WbH `F.;.*1ҖZ<%O6M0T -.\{ t IPʩ95Hvb 5 mDY~+Zy FſQ=3Nug-=/dQ,Z9ҙwO!z"aI~yP ]>Ņ"1lSn)V|e?KLnue VxBTك]p<#ÿQA5gr N 4\@Xص ̻ u4Sxii!'>;o|f^,y;{  sEzOOjd=rmZRdžy*T2,889,U@Mv%ˎ0q!Dٽ ޾ .'ɦ[GQ%J2aޅ C q͏9 WSZ]뭜A :cDL'l,#;)ϬX`LC@*E Ȩ]6&Bv eB#XBw0.+Ioa՜ѧmNȆcSYVlԢQi]x p bi%`b(+GwPChW Lm2קd |P ׹j*:A 0}z+M)9sUE[b}D1(zHbPB B1tŪeP6c ұe.yhyҸe ֋/I%n222~Hk|MݗrT&Mbg@}1|K[\&vH kR= c{S9T HyOzuMex_q]/ڨoÀ zT 9sq9J8&tl{rDž$|;n#`ٽSld -mPFnCl^/Fwԙ59qN[<,ҍ`Z05,h{q[L0GP(uJ| o?s5F>q_wLHsԡ]o9@)wz+c/WfI?5!7$TBs*>}RA` 94+* 'ϲ|qF@mևn&e^&ʠmK)8hgkBI5UAI$j<Ġm୷bg{=鶵CX+329F !KJ`AI8L3?j\u`OPN8=Ux-~-~FVK3mъ<={sVP`+^'jDW Q)e>]hl.(~n]W:n5KEΡ+YOvŲTEAݤ{=]D w2J"P5`E\.^^U+Ӵ`>}ūw/i mPKRB֨ {y|Qt92 c3[hVXV5h܊*ej %4Ņ UBD°ƌb'Ѳ>_?i'{'RRo_Xʘ#5?o(Ac"'lE+!4)oKROZ$П0"QqO଻cϿ9s/˛=aAGczpR6BGe\@A @I|#1\RĔUGj=ghlr9^"pVCPQ`>" {|6^0\ NBX y0`}5[O#DJ+IG}k? d0lRrYG?3˶Ci>< $Bvrt'T(Krm5o ?LisQz:NN]@gm@O.= CO[#u 9KtVh=AgyϬL$$Tpf`lF95\A|>C&]qnʓS%vlY004LL NZ+kbUڝ7wRJaӊ.nߔؗFOLG(%ʄ~=vde=zWOTp t&U꾶x;J#"d?\rߊ]P;U¿4]IɢMobO|OǢl=ii]?7VXKގ~ -I#~ $ sz`^ALGC:Y_>|γz (i0tnd-33 Z.uqW|?*4qᪧGCy= j/)]nOp )P> 1b6j{Ϧ;ڶog@B}E2$+Wr,ґޝ>vi=wO:ܾ%Bv Lisq~ա*吭^.xF{PIIK0?wֳ:*S67OrM<{.ʑz(#(UAC_/Rq- ImepU Z;K^]Je'}&X<_x4vچS, I'n=1.a[}v&iXT3 bd.GףOM#[twєmy/K/\z`xT ; T)`͓ $`~:`.{Y,">Fӗīvo]|?}Hg֊<[4\5#A $u1\O8Y$V JQ8*'0>=@;]I+l^3I)#=o>є QD7ܹyW|gbv\<)wU;$5"B%Iq$jNHEl:?ɒnnA鲪)I1W?$H%kYv[S][q K #2P*Ax#RQʪc>*BP}Ѥ \}n0:ڙO4(Ξ yW5c$hLQNpnYpa@U"MFgdc.CPfL/}Keb^d#8lypwAcR?U$#MEZ@h)#Kj (%A&[UB1BQ`ԨSR"k@+H#2eFH@q@n8Glߵ<|4ؔ'eop;O~YPޱvao46"ˁ`Q)"jҿFp .za˜$hQ$xTB`AX 띍&H.8r)tbMk{l#YIKk`V+o7HLCXs\Ӊ:JQ˜\91*$Wr7{-V*`=:ϵɿrrMys;>%(Ӷ aI5 e稉Ue({.F3O ~<j"Bͅw缽>s|R0YkQ ͝6[}C!ӥ(JrWXFt!,:򱉰\s3IK捣b0 :ݫDQ bQ'ai)tNtu =LMp[sĀu&PpAP' )A MƋȳ9v:׏b$YW֕ 68c3Z[h ~,ZmUY t&Aل\r(E%w=[ ᓇk={z51D9oWIwĴ0Ug@eZ)m ZgEyyhP8@}ͪd!X7uprmoyyyD:TUuV!,B< IFf׷ͼYɖ/L2we";W?~oyNjyDF-2 |7%jbmաc ,{=!͋R'O\. Xorv6X W⺷bf'5ںFd3 9uN忶+K HNk@뮱ؑfL;UnqqR9X)Զ:d 8Apw] Kn2dl1 1C #\>u= 0Lvihg@Ԑ@]TJ=*9>랜ff#yr T IMsNVͱ!]*2!瑯WEW&ze]]M_u G~Äט G>Îx AyZ~Ԋ`T~сID*FR.M8x2ߛ*wzO>,ntRn?nd^=@-g—\9@AQQ_RlD?P)}?vGdѮ 'Phc}N9O?DzIgi7qe{YTm#q;p@sԩQ^V_IN밽+.ِ᠑bY=P . :((:G.O~e_cr:xB *y{j<[[u"漿;$:!4}I2pZl;4k+ T3.5VYR= @Ԫf]Ē}GHXcv}"4&şYRb6OqZ(c鿓hZˬW]KXgo{NM<־Z>r`OdnQsqͭNq5mmbf|V=VȸeU !B',[wt*b1: a[Jֆ^Ϳ^1L-E˒R`G# D#`AR ˒K2+>C[^dl8Ҵ8nS=:Lά.5yw1Ŗ+|lgnJ?4ٙ`{̣z ca@24 $ܠgj8рWVU]dg]/`gF3wVk3+.h먴quuʸw4ULMEbn n%`URs'H2)`25sޭ*1#AHs+ A#hfm,U?r5To_ш`Y`R40BfxU+}Z&'alW#1佭ּ dϼ;ƅvR1V}Og-I HQOkJ`0EUıē])åEc50W#Y=v|k*Oo2j93 Dc.)tR!pĒ/ol]@UmKlrB57D_*>Ngcodt=;.[% 9ZX忺kor C(PDzoA@  Pd4BE ,3lݷ=gxn^qVˉST0Bz:䷋' 1ᓜ#BfؗHQHR~c ȃݫxaP p6 T{.m*3>J΂rNnvi*:ɠ$vxDPL hml+@nYpNrAx [ {G6ޝ4PH/,FKlY%aEObz:u_;UZ&<65V9=`=Ku/?দ/3/|*!{%=1 e!R4g++ڕF3۹!6\syewn*R"[ĽGrc׶ uJIDHHܾی-H;)tPb~~'QM!F2@@H'c5nOel5&ɖ9;L_}&bUM-O^MqvQG'+vP6 5>TttjmW /Q 7lK|}, iiU5tby$azs8oxƻOLMX<AkT\K[gKNj8kR*}|űQJ^b!(1u [BY|;skJoֆ7Rr;2dNCz)")KgMVfE\^oٔ'U b"P1Qsr!w"0ΣY\XѥC*OqyA,hb2NPw۝;=Wq^za".F4 DvKOWQc,в~*͒(@TW,T(Jed AIbS! =B03KvыN 1[ZB삪-J_Ϫ[e%g",6/-4 #y˻$t/&SefC[sX ,,)DoxѨ*]kHL'b(mwnwj-9FF6Nz^ 6^l×C9[leN{MmTyد # fj oyf=ՉEAشE2$qd@_Y>[XE6}5}}52G 1,͜j::w֘?! XxUΟ@OWպOI :Sv 32BU*txͤF;1YZ V QG&os֒_ݷ7c~֘#\MFn0rt [8ћ }o7h9*qƇ{]&nZ$J* 1o QCpZmjͽtZ٨rl!J9VX"z*uE'gauh4PU( (Q K׆D!1!s%]سۃ赥W2_O |lzG2( E)J%徐MI#>Gpp*G ==ߗ|l vKt psĽUB$>S;2ni뇵t?}f<]q}Zh~"PO`WݲCe$z*@=)s6K:}(>iݬV W;$lY~ߣ%NJ/8f䯍+mgiOYI(Q*C4%廹j$hoiZA/+V Zİ>~o|v?|;IdSi%YWA5o_?.DHS+>/e "o?(ML}f@},JU#ykD?BCd摃 Tq@Kp OR_є_/IN}k'Pt7ṷ"ʲGSjRb^U=,hOFV/~~^1$Dh~ sι(Z~#~D`9FP/2ROaB w;Hy,?~{csysfeA`wFHyA徻D㇔~ILlx %C3(J!2.lhu>i @N2ìܢzKQBCu{R/`@I0+CtUH|~ĉK,-К7OIrNk!Bl@tb]" |GO)C}]RaoC{w/UW_{﷈1:" DD@?h33}">gEk94xiWٳYi*\7O98YlUOlNs (~g,eT ~~i\7X4u4OA (OKkl1" JX" rOqMCcI~yC,(W -Z}L3C@?qR$?\7s;~@"< N{BC-'MItz`"c[I߆6Qoq^i5meJ ˕Z&+ a>7f͇~<]KvWޛfOm~u:M2*_˔s,yw% UsYU_ /Y2v;nyrKR}چk1*L;!n,!PR)~M(rǑfO ~^a'qmgdvLၗgfXLG0$tVn20 5UAĬ@j4-jzuRqU@y*#L屑 gp9@Px…U㍕ǹ8jm1iH*a9Ido |/}8P|OO_}VYur FXF6c)4Kz'J7Q CgȂ`U:\fъVv^tn)/*tYPEXsG;]0M}DjiB0Dsbv4fB.f/,pk->WOe QYv1?jt2x.RU|OGҨR9Ɲ[&%njdTNAaS?S7"N;=s[xSeb'Qm3>ͰM$|[tLŭ,]Ki"( B,YE@(W9Rzݣ-4@(7mTw3V$RFœoz3|wDsLjTlXRNR8To~`nKwsKnj%a{@CV= ov/JT׹t5 r)< =qMU=~^ٜZK)ޔEkP ]؝SI)6G Z隹y9f5kw*?Z>A`%NM~^r@#R:BB̈Z'E-;{ۃpj=œ}{"'LAlͱ B/F\=,êEA"F EQQ$6X@ypD -8aSFPU@r%[(/:7$^h~9gpE%678? rdўWwrGI{= >L"uD:MSĐ7 f.;Ol5,q@Ĝ80Br' ?=DN%,((8jKtkɁv笂lK`Ck/hNbJ;:YkYHD+`jӾ?_Z=CvLVN -0;Ac]k0;HE_|W?dpj-#({/CP` 8DCgs [ pEQۘ•}ªs?UPP6*"i#8t;~@ EYi81 eH^02URQs;^=[> 8KW}u(!m4~2 {o)FWpZZPFߝVu;_5/B< .ý}BE_O:dlߓd\Є|6 eP/TuCU )"@#D %5kX0t(-[ +$ |=/;J K{SOq|2` J3 7+}D(8)\Ug}Q ݪ*9HxM rl.EuW(Q  2s^ G<j^sU^%b<'OU"Vnvp ;r0NIsĹiL7Lmo[#q(Գ77nkrW($~W\fIm+2չqo2*Q%D H`,2--=tNN qH7;˷3m8cc-_Mt t>]"P47"%4VPD՚ zj7 068=QF]@ 1>AϾE.]--=.-+aEt/@f8|8f&^]c.ӈ8n1U͂47O 2AZN 4@T @},MJ3@=k HbVԚ$A P'Ne3%ܐ4Uq?OKB_f߰+gմ6f@Th8(K&=Lz5Ơ0%_AHH$!"BbN@>_\n+:cib,ƍ߄.,G5soCXZ cGsw4j<"<'#rL}OHXTM9?Wu+dSl**I&!#hTj4%j*>Y<0؟lQĂ;QOjzEW2I:D_73wю?opP #xlwwSvyݽJuD>:K{C3*oj3oMS9|lJHT'4%:>A~WA~zhްR6E׿fw=[Qg$X`ϝpW|QGdFT4t jW^͂a\cTxЄP*fȗ^'@_r5nUP!t;ՕCD,"h ( C} .CJth0W`'MŦ>0`#4gA_rB\A%ҎA:B']NêjZFژ܌S˝548+; KQ5Qi|K̕AA=lm.bb4!x1(.) 3R EͿ8 [>9ܬ 1$5,U:٬@RhDAA!8weE1/{=M\v*nE;s~PŠe/8 ih,5Ȭb$LlE#yXU&] :I5{0|rd280# ^aIPy,*0/;} pZuBݾ;v^j+ҵneDjD B r\b36qk%z*nRtPDůErd".Zdkv%]V"gΌqQ&8(UT0υLEAa2bP(mSgZهg't$KA "j`^;XZG,V=挐9X!e:m l6Oq|MGR)VkY!:6O- [b6kx>>tU_.Ø*n dSOV$Z\M0(7E|ӷ]lKaw!DΙ/Y&Xxc,dZwg9ᑬrW m,^ש!vG`/sիyrq"nv)PfhAns).K5"a6/ΤͷySb ?bbgV˓K6x.A {,RtwX-]c *4HpRR/;)]jg񜪦nǧ?t`Ӌࠈ"(iA E:y@;& ?`2jwUMvƓQHSf xWm:d}u^_sA(Z+YZ6jY>uaE^Q,AD5[ËvPS@Nl-T᪹ҽB%$ QT Piݎ9[f 8H2#*U$”+vDjuq;fͿYեx #+Z J. Z.fVr *"zzR%DBiB;Ӟ' N[aZЙ|q&f0@o>S2[U/d/d@pԌ*'@a.iE}l@ @ĕAWlnǝS/ \tb 's;?gɛK3{jhWn6;|e!lzeu{tϛˤR*_Hۑy9̜rxf@Vm6hl|kfYaAA/TM} N:*vHlU&1MncKMW/PRWImwIpwe\eci. 9ׂFvDB> dbgt rྵrfouL!`5pH0 ˛[LV )⪻:P܂we*b""!J*@U9直E<[[(0e4%A;R֑~o KL]6*:}={`F%rv1HBb@ƫz'pf[x5D;6Ί*rT}Nd/.&kuo'Wxmk*ÔUfBv˲7{/uP;pRVw' eL{lֿ}@=o\hx,ߧ? ,-T`=Ѐ0# @*lxÆzr}k5,*)59事ɡ"$g uu9[%{/>Y0A_h[WL͋Vet83 q; mQZY`T b>t¡t | [0ÊyX :yBV74V)~.ο1c]mk aA0B`:?TL 4rzWC7as$an%jjmZ",kNZ RT=``0UERk\w)7kueYw8 or^L,myۺ2]ͱ-ўI^ʂ5 }{>GO".wqw* {_w~G&/~W,7dCpvm?l<K?\_* jh[KPZ5hƧvź ȋ8] Q(TkՑ# `<|Ռ}Эf&սM&JFk+Ok*2e@DEA'<}UE(]oS^& BjLzWTAdp< @yRD; PJ.hʺ`TL ȈCDZ7f;UZ ꐗt;HGBihY3:8k YBgTbRbKTKojH+eØAnl9Vr< h@9 sҋ>'b|QW?4`&u5H[/{[gy5h_vqs@n^u"QdS;Ւ:#äF^9[Ǝ20Xp% 4Q 0s1 نK)[{M?Ѯ]$.aSYR+U3p ҴBguEMChl氈--#[ 8U&ZjRUU 4fhpbl}"GJ{,i߿!FPhL=2}'>&r'5bx**Fh'[b(5[MTy QA۔x$dҜ|{gۍ쬱Yld1+ɹr#]L]Q},S j Gc[lwGER!l MNr!FB*GZm(' .w|A9!my!P,h20sܭܡ\lmZ(rZ #6PyBvL!JP gmH_z+/M=; 697ʚxç~3xMUuu5Y}C!f *r}1kjL uo_<3y|ϖxZ:;QH :' Y#HU0sqg*qWHfLd2;OɠRv:%~nр]?)uȬ';֪˟7BUW#D[6*Cװo+TB``݂1׻e_S]u+CȪP ;amm  J"mIpn)Lgz~r#CR 2C_?U\0uWut\ͤQ8 uNΣXh F ETQ?"҇q;tʐo]>;ŖPs73=X,R|V2buU.U,)8˵^ w c~E,RE6@`|It~7JhNjkijs=mȫ&wwFjXz%ۛ3/|%&hiA~< MP]J2Nj]iP_ ߧ|}Z,kŎ3 v(5ΛZF tk$BP2V ҲbD$lT!u]='IʬH#P5spy*@QL=_ftg~jf$P m#( ^GܦP";3 )8s`$"9̜Z u`3%S#rc&+ *;]6~΁yόw d}ß^qj%Wj1*xR"n~b[2Ol"/@C|m׹.Lk4JH;eZ 0{;Re@knn %U c@(lI;oWpIJ'-n`g}ʂ Ur,OOO8ǭ6_ 5E@I4 Rշ%Wd0mmblNS"*mnߊ-dd`5gjO[^.#eox%q 0eu+g_ƅ_.kR[v͏[SeL}?VbmwS&my(wH'SGK7 \{Ҳp9̦nnUp_tAJ`Q۞usqfkq"*rV-/i$MA{3dacvjf-xO++nQh:*W8Y.5n Me7G;Ɠ.P,as{rr_YC U ȎeqbnFj :T%@͟jzjH$ j nT[ާ #Dj 붌kJQ]!R.QElJ$§j})rܲZExcR*S2B* &-e`cj濞׮0e¼Ҿ΋LClJ .?#4j23aJ y s@4:av8+_C:ɂ]88Ѱw YAT%*p!GIίã_XPAh8 pLFz)Α6tkVe9>$UZPAGۙy!xZpݓ1[sYhX$|ݣaHK6mݻ ( ֶJz&ʃCsiBJ35wv9J[(LF`P I[0N:d)B^<њ_u ~O}A`{E}܀nesIC3Ū9LK@`C㤲@R)AOr]3nOH 0%0'G"+r1_ ǴHwVkXqC YE#=V~8w Hϱ#;hkfP5Wũ`zCVWьa@M!.^>Qq|Lw ѬG# y"ЛD0r ;u3V3u8a3T$6UOH?riI-W-1^!0>3,}wEƶHjJ?v{W. ˳3{'YE0 BIBP"* L}.*҇''3n (SHд7h N&Y@ԠPPyP1J FW{.O5뵭<dxE1I"(r'/_~W9nޝtF͌3 uJ =g<%QM%$$=#Ѫ3?ah&xK`m 9:ze?cAa,ȯP &B50#œ'Niv8C" x={GJqx}=.4B=hX_ehfekz?Kӝ\՞"nC,?0. D@W0gpVomwD@hdlET5TH wgǐXZElYQQ+q}lr6=W?nji{ߛOڃ\"T{+ݺ r-^'#`3>K?ϻVik#fFII,JWUTǪl0mg BGĨksTd8w J(E@MS᭹ ̹_TH{^|<&ےG8r3294xt8"(bKS\hzbÓݺ P màF 9݉:f闘L+R"3<_7;,ԁA_zHѸsFXй 5_Y?mw_vJz;HZFOn̐A.&.aD`8{6~S48Pbf59%>+3$jߍ)ѐ`FAzE}H%;?Ք_i󇁳--ִ$d,/<W( ʡ|iI :Zϓ~ߚBNɪHjTM b\^N hfĶӝ=ZR<-J5ݫM-jb_}Rk)WuSSQVyZz]e^]~/~_]\ٰGJ0ujYTyu˞|`nZI 0G) UptY.5Lc#3A(|m+g۷Α( 2 WdsK5F]Q뿛da"dwJ*L ޜ9X iyFlCy6L"Gȁlt:;m3E`E-U38 pT6 IBo}\q6E$հzRꪠ5HS @AjڐC[Sg[>u~(<ԉT) ?w1׊ 8QS~Q`}WY Pg׵!|K`i`IմxYutĢIf82 @!ћZW3xL rX^/d7k gY-It3Y jZH MI+iyYyQ6nDE=KÕ8d{w,lA r<9̐~A4Ũ@z%@A 1OFr;vPS3"$ XShЎRD/i/fJ̦_PZTR*pbNjL&zz:/vKQl׾+b,BCl̀ Ro'%GonПK (}vT@BQ‘:BWѯt:0/E+û^|{9rw:!y F"I\V7h_]-'ܢпYiID@#O($"]kdsXCKU(fT`WRy`:9ew1fF%y%bћN?kZC} o &Mp Fj!WSQ@j[:Vacî~K0|wUx1@|}E೜ҵlj3E@i5~v,t͟5uBgeOh[tBpU#FqpW]Y`UAbP>;-#$o5;:fypҸY=ݺ^;}_ͬWX0=?Ԝ֌5VWCwmUQ4CR?wBٜ:Zfu>)߈uH'f‰FEY|H@u]ϝGW.`VK˖ ͹bv9f Dny`nx]*EE#"ɧo2Y_4ot)Eb.A(vKy1zÀu.| Xok/7.>h}bs(a w b Ap0[Gm; mg>jCj{j p#?DOp6gkƿ޻]OFm]!uU3E΂%bŐ$ Mј6ԛ%E'w==B|.`֒H(*#N*Ĕ!@ oz|Ogu,W\ 7 yі+9!&>e{+/%l}Zc-~k_ 8#5M_IDT cXH(͗]b})a]f:dF@Άuq 4U ( Aʑx=Nsg(QJ\Z9r(" A W@ O$c\*2@.hY'tIjUjm6nVU3$XM8++pVuGnLowhC^9.D-dΈf.#Cƒ*#٦~wkxGSzE}J\5|XY{` S5\Z/МdG. *)4i8ZӺψ*.Po0_8z?VjEo]MPT3imhhӦ{]ɼHxÈ{Y ΧzwV`_̍c(*.Cb6a<#V0 ȥo_r- _V(I~X j}G:b=l}:޶)T)hĨٵ4+J} B֨2Peѵ- +_ae$P%M]XH*;50Y{><&l&N[.d"j@ 9 KWUC$ g%\UaXQ&ruAQv',I](#VwuUP :xgد~@\FMez1,DOv4Y'ie M8GĸpR%7JS{B3Î# :)p6)/;CSԄ v ogvw@TfJD 2w+]cԒn,^'KN?&_e}DB{n*>a!S{)r8L&T̶4Oy/#Xf޻XRF(0"Ył Qb@}$^ Qpoz/. uD77H?E4XύmMOCF+Kr3YĤ{%k0KѫWͦD 7eO+;wFTO)Se!V^*şD ]@$L z~g?^׀K b *g~F! ~.8 Z#vKWWc [ýo!iU{^aPąG' [>#3xz(cMu4YﴥVb^Y{]GҼJh۰Fbsйh(ugܒ]1/uw5 9꜂~NCݧ]Ћx XR(nERY-4-3e& #qįrI~qt]v`!~0OU^ P#HcSe_˿>aQŚgS +$fbptCT9<1?nD$mCγua|#|FJe͋-F2& TK;ҍthyGn%4t+^8VO^x(w:tP$!)xtzX17wO6&w y m]& n$oh8/;ϣ%.e?K6]sf+L.f:g;k2r{_ٽ^uyR{CSy<SG}Q^71Bqcp!q{kBt]ܴkVs;s{'ſv9twD hGLaru _K-̚Aܢ {UV[_旔'lOTnVen𶾗SCwq4Ԟ//&Qb],iL\H.җanbf(HuZN ~ֽt$ZQsrtWދ]&1T֙;X-e5h~At<D!N˧qTDT7Kz$aGC&R>7[>'=%m|--\|GkA):گø~O:F7^m+6hor,|b) pXxzt*#i]F_ {a^ vk$'ލ U d.сg=졩jg^zi2]^/fq@PTAE:PJ.eTPZiKZˁ@kr醨eڽs/;<,hyb"zI7O`qԉsWϐcd{sfDx"gɈ}8ڿUw W`0ϫafL:F7x G<.4xk .5AJ^N3![v5v mv1Ƌ>tk?qg1ZSo;slA t:uV]!]^lm砽cNSC[޳BX*WfLV7+DS:e?-L}4j(ɡY o{9TP@L6 0 Uav#$8#c~[9|Ft</\ԃ"~K1^\6ۆWH1!7rh!5ⷦR.Gګ\]1ly1~,rY8mE{ L5 QuN?Cנs42-]m5*\q^;?񢾅?StEة7u, H!02MDCYvZVLo$9T}*ukomo-Aש=ʘ}:':̜FQY^b2H(և-n{[s^v)`|R16Kx*x;SCw4]ׄ>2q, TW c><)N>&J ד֩dmPT9oRy胤{`sY1@C1*&~~@eQe+gMmDu+?ϙFf2Rg3Ung|c{ -ۆ)9:sem!{qQBdkkf'v(]~r>}gE)χƋ޿^J Uߞ~~v07:4mu3 Bܞ-ޅTYp 9Q0?qN{۬jv} 9^\''xweV=d3f'w3$[SL/hTy9IDL~h`\ h /zVSbWsoGN_Ӂ@%kYT|V*xukvml $'sٴự_'?c7xS.i&[wjMlуŜ݈<:1kIJ4y:;+#~ < .6>es+] Z.iL7n-$m./ >vB)gWil,YqL5z乱bO%7. EF T׫5pI=H+E7ԁhu,M_.8JK`F5kb鮋~Z\/rD_̵)oqKeۜFWVSFJ`c zKZi1KTsIBjN29Hr0{extv('uizZ1D5UM;kj=/h& y|'g߲-h83wE7JCԌ/oԩ~^Wv\lW]Ej=hHE>ۘT)o\/PW ѹi.fὓ^ZGplw}s> >6||OHqémK$\1tU E]`YgN`0$!X;i~5:ʖF{ٕ(ij|Mnuu4- E_7{5\I?ZyE$Xs1gi^p0g>1 AS,匔i}|:A~7'PM{X5j{up=[[GBq/LViuӓ ᬧ_m,| c4Nޛwa )kV#-"&U>*A$= OEK=_d׳}Ęyukq`ukĘHuO}8*;T7|ZU[]O?VǶ~ޑ:Mt{4bdz Ή}SEY0bd+vuյW-uP'=0.TT侾 u4hG`X$eѕC3#9@zX@nrH À q*36_W?1YіFb&P#k4L=KqiCDxfڢZk.›fKnLpn 3NM=kCDpn~b:FXS]hHS?R׾;: o3WWmº/*@U.u-"uUțn7խ~vفK_:1 c@z2B~$~:ySrA^p\FsBwqP(+%tݕ+^'lfyd2{?i!<$ Y9 D89U.y9stP)4J81a?v,H*4iX4`*| o {S2~Q2)uAx%]!hk t>,wsՂm^n`-Q. ܊@4!b,#kf~s9h~e^4puAGnJo|5t|8! , hd-㴑_.oel 0EҀX{]ޥw)_1ES ˡs|u]oQAeADyg[/=K~`ު^57Q:_i]V% \͘Mki<ǴU3G8Fj0k}H/%A`^Whe$U^^Z@޳'[{ɁH1BKzZeũyfUNB4Nڠ 9oF-Oqv5I5$v^ϮBg+ Yװ@ %ձk|(ŜzA"goHXZ"%pηQ>hs7x(?G,݇|42z@,o/yl%b-_I6z0h5;0=ޯ7 BzO3Ժu.ev&dH v$^O9kksH"n!LT!R,_cZ&@WpU32f63X c%R{[^KP#Wj]XQZחh Mϒkظ?灤TivWz0neXFwh&ݍO!WK0H!tweDuM/˩4 I5:w֎?M RPz+uٚl[LF=%pBx}7Iҩ'O`q`}^ݍ_TړUcG%C9^+~lOt<7X4x;aٵ"Vɹfo7kx7[QbuuuK\ dYB"_T,)'p1;ݜv0XD^7csԈ ijzSEM{biSȘ~o26n2l x??A.pWF@ AgP˫o'̈.4>N߬Xg2쓙ѭ<^E̗r_fP5GvN<~DSFEmt}k5Qh-w.H!_Ôw>.x )8d@% iZHt34Jt4 `kSP&EL9:; kSV zGAbHH;Zq@tNc^Q"7}ì"<{Ob鵮Vjc=7G귖4Bf @>k~vsf`!Y )iAW>H0ydF^r&h2w4&%RL~q{}S8W6~GBzW?H{00""( 3A.&ƷbAtyFT`aY=ֵP3[*Vq.?:S&ڋ EHYHc{KG !4r2knk@a7@Pi=Ob3@dsI>">G4z6'RHV M7* -k (h0cT9gb> D !m XpgG?5?;^| .bchŀ]oMW^J@s"T@DCd0 -P#,}^eO'U=,P^2B;tgLޞеOxlӶNwrj &OH׺4:q,2Fd [źm~OmkMvKᰟ UJ{jcĴm(s4يvEsij.6q>>i yiIIB3J_gR!+D&|R$V@zX Nj]Rwv3`t ͵Lp-WEm8Rn 24Kp2qKEˮ8y06';OHD KgE1T~yr J:} P_O2kRš4&t5#FVP4t00~zy<\%ӕWyؘ &SQ0T+7^7~1HK_N /e֖ _/J10tL"[=k|c|i1N\Sbj5 aPDULC/'_hd_SRپp]UKKl'46E I$xok!AEnFW."&"nqL !w"/Ci}N-΀mVHq& yT i1s4e<|QD%K41uXHxj%EUfn3+Hwn;_ΰ?ƟĪ_wa#Lc 3Lef޼ES(B,'d"Ub7qgJC9.1]>cA]F-(lˢ/ڼgl`?fjtB`ۜT4/MK JNx#_f$(؆D5"SyQdGšWP<| 29[z?y^\ű b)Ҁа4O{edaRCe?!*4p9GgWJxg/[Sw`Oy]NfГښGO0őʤpFeW ,OB} g^3[3Q2ıs>V{y?!lo^cݐ.BBkɂ0EP;Q|ak&2njL+Qᒇ8!~QZV@'(EXB@O"4ɐ>7; 2ՙNYZp&lYcA;om1ZK/FR !bE g3iekFX27lz# 3c/Yv{"[}u1o8Aߐ@`/1,, }Cղb0UsGBF n>Χ-w,%:#œ,bq :P%.F+,VH|=_ /y_$~ն\b?@/\G8Ҍ"n*BëJ4hC"9cB+Ϻ| Y~jUHOtQCgX+oړ}i΋*@t?ܵ\=,yRΆg -}zzG k;". U}(}- lUFCapP5E? ҿp*Q}3Jar2Dc`HHiàM5[[5ԒK3Pz*."sCkC[ :Vko\d IgxK|^'}a_i\g[HױOEz *Y3aJX+ҕys>ھ*nǨG;Z3GmPR[i(Ry3 [%q# nǵ]4]9h#0H3-)TiU؟|8˙E!o:?zF(tOYѸK~ϔ'[EÏ>u~~mYx(X)d4stZ`rb&=6ґX,aW4De26NI(Y"+'iYf3|z*ty4Y<4""H6:?vp]ˀ)<%S %Ln/vU,n<+?*~ke1M`aNs8[e+uRst/l B'R~y=tA7!DBF՞7؜֒HdTڿ}-=IceUJlF~_77rxsѠSl9ȂF/||'bp@g o--6R盍<_g%Вv3x縰aqAB m!ѣ%!7Q|K [,Kxlf~0]M~IO;R!qj4Ya}@veo-'"-Nǻ%$Bh01$b2Dy`H85,.! DkC1~z9>8˓lCZX_Kw;QL7zq\_mŸoBjWqMk?=ZHOf6_#Vlx&QPY;&m`Gٕ?c?6)!jiv; ф:>}GX(*xo5gm>]j՗cZXs53O_vÜUI)Bh9;EH r< 큼07qr/`~h:K|YJ5T%AQqbw_"_ n'ﺗ =j-EP옶!N4*Yənk+pIx]o+Ɗ.-DEHv2V}. 1mt٩V#3 kJx~,O%#w.GγppgYLBZpd됸rوD~I g3"2͉dRijO?~uz7p]wF9vT̮ =ig>~Wq)_y}0W:D*G΍ _N[YX3IM ~GeuӖ3m6a{zԷDV8*doTr͑B+{jO̮B*mkMa5+kwG3KmޮSip*}ewnb}a's}^>okg?t|߅>5fKo>k~ra{GQn~|!6H4v7`q ʦGU~x"C}' vq UVh W%N.8ڭAWͿ\ ktq"򸏧,$0pZCR²JO$e!DfDs H9.{<-eh[WeYyw`7l3&@1$Csjհ=}{{+/-_{7zigQ{zJ8 4 3=LY 18\aGfgz_Iqf]""I$R1=ctXP[&a꯫^28eBΑWvVǧ\h3{fjӰ`QUOKZ>_ɮG:_ R]?wӼn)5m[Y$ :\F+OA09) ;n]*oܗ;!whb ݵw_Eް5Խi]ƚߝS$5 Sco:^W1Necxxx<\M'o UʻS/۵.>n,AVJIs"@tZ,7!6~g~\kFOL(ϓ]\JeeieWh!eXmM bV&sY 'S:wd?})VrG_H8OJΊ1ҭJW?ůPZL\6$eT`kQAHv٨qF1gXVlan,h%p ?aP$e!-/'u_ay iM6 ]_,HJCIrH֐m0h@aM, !dI3I aS$'`MB{6ڪ^BCzp쩥TručI/DrU'.~luQ5܆qw;Ie(+7c988/VѻB̟;PڪzA礄e=kC7 y 'B+xCFfG" [=x$DZJnF&+8[<6zǯqc[_?mS~=5a (Eטj$ pI0@c,G0X b;t'9g@YEOx][]ۢއSq$'/O7ß'.9}_3ܶ+^ qf:dj tgK ϹげǑ@ˡ@"AI ȪR(~Ϣ tt]m|vצJ:.7>)k&ZH%g8Uq=X@7CKI7S4BJIK/42: c U ijk%'̶U#&;2C:44ƳUXSq7,&(k2LROUVVEl<-zz*ԟ,%@W-un5sgM.S#T|J%ӲH39FHC T5f>s6ۻmSUC#cFI\b2Kgw-{_>=gX+;DfAH~9dm 4.JG?[^$#R;6HP9,Q^ |u[tZzh4mP,9&j  -2XZ+"[yU}oW^{s77 {ͻ^#p3ks ;fv' *^gO/9\@7Q aJ E\3ń#(!+i[ Jk½]a{=)"ZܒD,?0MBXw F -?Urr[uOɯ]]~oIh6U]?ՂZp!UW|+/m{~ ,p[NKm9 P/vw۔ t)A+\MBX"{+spKk peb0]G0uTAdD[QAi* @"4a7Cw|g~%=:ͰjEnfZ2+Eϲn=;ޖQ~d>heEfV9k2cEC`; p8$jGVKS;K3KOI z%i -ٙ/31Anfj19:fR`ܦJg*dqWIk>葔雈8[MP͕*Fաvf^r̶@զHh 7dkYm};hψG1>ijN-C@,.>"BG0Q0/|>S!MA&B~׍>'sED7^m[?hc>/pw*C9·Zzo:[Nvn-^s+g*q동s:n&.]I{(Mv%{׳ާa x)H?RC{1~ƨ>3_G,\_^qoi]5Jt&GA^swE~Hc,ͫk^V6w?PhX6hq5ll ;sk%@+m/^GE k;?m\4uey19vpK:z]ed{sv\rz oY +ǜGYtseX*H68^G<@&s (t6 k5@g'xI\=:z*zy`O޷{zyy=]-[SH\eIOF^uёl*_`YPˎ֢́yp֙ vʧEeb>nk{|ߗrxq_L@Y)ؗegoWoL b-*[l^[O~>Kӳ.qlK`JEirx^cިVذm;ۍ] aJul[oT9j>lO=>R ~'cSsy3LG]'XǀwQW [ؿaz}36l~'qZ^rF 3yo}2fy`|=7h]͕yQ_tuO&~Kd:n8s)?u][;n&C vVqXF̶?T@ a+xvWbGśa޵Mvs`߼T5$l+y1EC?m}k&G]dr߯en<OjU2-^v_[=_W_/LCDU"%5LH -,3hD2V "Y!JRLV(M9D3.ТroBBWru; nPj/ .U]:;EyG; kVf1CReg[?e1C_""PČ*; C2ۊmvBXTbOCXfDjѭK*@*^V 0V$p]^yY&$P0ƭV7f+ 2$ +DF3^:t r(F[¦ ٧eQYy5YL:twđDՁzUrإu#YxUB9۫r¥3u6{ &A )1ɛx\pGG١酄?T=ʾޛxP8: xք~|&WTR E D; zSx/M砏QB?ZϸCYdLu& 3R.Bu?I|O?u8ڡx #K|eTY~ևs쵼>-/!H/\$5A+n3U6%C IlƢ[dF$ ;nӍVn37VMֆ"\@IpTk_bDri)jgw9fb췾{,Ryl#&P`+int-͋0͇qV|n-Ł3 =1cK/n֘c ,D58uȦ$s_(\G~I36P>QS"wp(,/ɌfׂNI'˿{D33%lec ;xL< [Wfci6M'gblcz}TgK+]A~@;00,"XC2!Vc1 n 4+'I RgQC=inTrhrjܐO8{s&-foj\b?[r\~W\ڜvIU~jxNJC!c!_7 ^aq7zAE0u P R$$P؆$B~"84K9@␡F0W| >]oD jN7Dz[̩>WDlHt*MЖg|u9ڑ$kϊ7mmN\`:䄎 d]G;+ܵk?IXnG>Ud1GTO?'bе%}&XM_FFze&W[{2Nz4~܌"*{M.;`5*\fzScS{f?7L9x>/֐̭͢ٯE#: +%X]xHT!IOʏ=~GhslmJԇPXŀH @ ]ZM3]H5nXWkMȷpP*16Iz $J6TH} :۱KLT| M50~SEϙ[iG턷m)%3~'0}yŐw _r kMSno3 CyׁaMg0{ݑn*u 狕ռ_9}?"s#H&k}qki5bکg Ax_*XO^)hw5^gDվcv{g@aӲ0Yf-V&E3,XIR:;6߃yr0S~l}ԇjW!n_g~;]𻗏֯eԦ0 ^JlN4N!!pOQ,yϬ'tQ MԬb*0v?R̤<\݋MjCujTT71u/WYnCcJgoŗ ph7ۭɭx7nݽ>jïR8. sT⊵JpUasM.Wjg+&"bFT4f(F1DDD@,U2D"w/x:d oe߭W}:5z gyo՟#rnz-2wNoFtΊ߶+]O9|J RUBz"0ZE ogy"6g{GZKaqz×7༬z??eʀ6F{=Chn Iխ8گ=9]9=AU؛8evWhb]S+@kڞPsڱk ~!e:g%!w$Al(r z?I\}BFc;$Pټr<5ڭ3KC޴8ַ ?흜mQXX]eW8 (*d$cgB09M[V-yV*e+F#U۰$DA`m2g^)K m(`;qܰ0quggJM8OW^'6 8h=3|m~~?V#o_/:2>ҥ=_ZK$^vI/ȩ 2m5U6ґՕYs1#0B3qLbnDcYm?"]rxP"=)FE{ynHu_4~JDRьg@ӉDUC݂?]#OfWhp]wӬ_dUl3sr07| $S'o:լ{,>`w؛^guթ|Z{]%{gpKj̰Y~Z ĨsTQ ijfО M;rdDCBUTI` ؤ@V- T(v,5 2d9$rFgZFܥ5%Cfv*/V5dn/ +ph `D!- + :Reyk0HS]Q@7HY Q5Ҷj0 NT,.NT(HP`@UVxJ9MTHd\I}嘍ʌ y[v䁵X8`L41 ,O]%1:*)Bo?AMȎ~~nLcA! 2-̐ Qg_Կ`Yw H9b,!t1TS]֓ _͖X} 7 x: Ea ţ h&!UFj482Q;r`k' TgEE@0_"RgsB9_ͻ^fk.p9LJ^KD%) B͔-ƙNtD7WruF^S}K5UB A5KUGOxjȐX2.l5BnvqszppڹwlYDʫt“o/H9?<ݫ!=2$D!~O{z{U; {-ʗro򣇵@&HE^bq_o 8IQdyռνZm'~՞m)S{8O~G/jȁ2 pF%x5 Ubx.M)4(u*Mmg+uxxG5lF4eX"xSlVhBaqzk wV Jj$ 7wA$HT5֖%4>>ǘjUug;aO^!HL{̦-ۛzot3jyp0X$,]VȲѱ vF 7{{0zꙭ+*E]A 0,!+r^DIw8@O^թ(tn*]'G-H9΋X+q7A&ٙ,Q +Đ"6pmAeRfLIGu%n{Nj3 uoב署#TK 3?=O!wn̂ҽܭ}qO|cGꮻYs +ř0*rb#4 X2rU,K`@p X'sN9,_(j_miJ.^\,I|O)1-KaF"y%cT5?{kclDM?9'ə߷^L#ZE\ :ZF vOOsO o-ڤ[ gN>q^B Codw)n+Pț(#)N#LSR(o? 嚙Եk}'E^q;^Fk<LQ/SV#Wn<ň\XcԂ(A 8ɶ {qnbס5mH6JՄOoxX (k[T*,kې)ZW)zvg̱(`FRǞ-+Rfgn>$q=[I ?Jjuf3^lu8"DG`;m.T/q_7"IvO 9x+𹐬i*˅Ѭ0`c?59Ώ𵇒{T!&Lp3xܤD=AA5CC@Z DnUf;_5تlḰ8K~4X~(_>]QFggöbLV",e]@4PB¦Z[J(cYgi@ %6η3eDSp;/lC$~}V9ޢOo$Evi t\C0 {_(3OX@zق:pX9<^N72a0m2IHB(E*Tt:ri2&@b)a_~EzA|%5;) Wo;ZcQq~Jӈ陼^Q6#Qm~z. \eB\dY&ȈtLB5aw'A,[m>eF R0vEpՐ6""ԚH Dl;:%ؒ3E*y?O74M,cF$ s5X1T q6nc'$ᎎ̘2I(per&ޜC$SԳŶ6q-Mk3kZv٦^օ7N) %+f(FiɃ%2d-!޷0"oz4k"#6ƒ A;1y1!nL 0B%]KPA$ܪ &phiI&MF4"Q $]5誎[iY2rDu}W[N%L}s₽XW3'Bf"r>xRR}Ռ{=Vobo[qm\P{/3Y鬏W Ӫ5J"Eū.LwF= d+x~jhV[wq^]:E@Ncoh/E/Œ˱eV2+ Wm9%Y''/I?ڝ>n|eh4nN׿V)>W.밽[J:oCA™c8p|[}k&UO{ab/9֍V˔ eC,i1T%G]CoVSQx*tg|eXP^Fyq` 2?jZb20 F1H`}z*R{V^yd=,:J>ꀺ|7=l|ޚL_M}g~%̙cߨ(ڐ$i~ytME^x]b~EyTy3S$};TԾ;)Ϲށur)@>yqIwl 1hlF*S"QC Eet>@6 ç؂jz5Sw قv lhǻ4:P[ :CZ(]h P{A Cۻ@e$H۬݁^wVlB.3¹=dwPFٔ:]4(o_8: g%Eܞce} v G i,sѺʺPѥiֹ R<sӾX:gи.J'WjmUKoUzHѼJW;:2=}k[b)IR#/Y'P{=" o6)"Iװvê4 \\Ƶﱦ﹢kST =t>ly*D%u:bBvPjk݆dQ Y QT 3{sB%Sd׺{:>}A-ӼWu}.4=r{ո+pVu:ZvhL!4j` &20M2a2h 4b xh҃S@@4@{I6Fl'LOM&~e5Ym_hIyht#CYim长t,euϱ">Ĥ&l0="zm? E50CS=?tm7q:|ja16!AE?ԛHT(*0hmL|*#H[FME6,hŊj+QPAEBQj4FɐTiUبŊ1 b1L1@M4! ȤCGOw9˞a@###d ~{{|7|F"0/neDO~;͆l0Khd=UŢWݪ|FQlT4A-1QjFFW͗+xWScGRXΡ !<[NWb>?vF@W$eH50tc}@8WB[y@$ y*=?C_b^OzdB^o]T#wY_N0Dq[hڍEM&"5AA$?_Ol̓IdEZBs{ZKz*O}9 b}){uWo{FuOAÕnK~ F* ҚClD؉$ឣFzU*%9Ȅdp&i}ŁI+  D̗J'ZV%t/ꛋ#+L\ﶍhIM( 2CH2FX 3A?\v 2Wir*7򪍌+Y6~g&Dث9+UI@U9y(zIPL_@QuEY4xh4i0NIbY&q A t!_㻭3cD̊?iMֽ %;Fwpu9$C!d>en3R/|@To/ `A(qX良/XA1*4~y$c3G/f7V{6d/p3[?ד1BH"Ab(Yp,Ap1R/4$X|Fe zq=Oˋ&%YM%T6H{^?\X\Xlʬ eL̡6N=z[67GahvܫJKԿc~.N7^hMlLMSu3=vǕbF٣rɎ;Lr8'$I0LL2.Ő ۳u;rLV#VCVCȈhj  gfQ5X,M:LlCI4'94܍RmW3;W"{[A0@=O2A_Xثyd2c8ÒIA~)ln*"L)$@HL* J,.2yh|)Pmr_[= 2ITI(N,Ce0tjJDz(jq'uw<}zwt|!epgα*u W/˱"盂(hHHf'asUa^fP& /x2u>_Hۤ( jP%$S(Kpߓk.f-v,>Et>aXdp.d/@M@ r %`BHsR9&O$ά/2ZX0A H! _Ah)f0>a X<`PQz5m\cZMb(l(Ƣ,ٮk./{^djA $ $B ڀy[mxVM hl$ İ$1)DiƣyΏ8#RJ d@DAFոb}g4Va@$@(0Mm ykn|.ّnHj J.")#pc 2s4zX3+ mF1F !$I.?ˋr'k~YGW?}?c"**,Tz}Woٽ{ wlF{ͭG=C"vtoއTX|Kz^ Wșs)|E+XPňF#^ "p` 7QBٵ|}>!+x; m(*s ;RF 2' iD6F0y7qlP iF-Q:M;4N ([Uɚ3of`hA!;6 , E9G8lqu٧n;̊#0#B&lYhz1D-9H+rK1r9CMLn nM*CU8M.JUU`5B?Sg r{֔oPc_O$qf~d5`3p U]Z>b(3G b}NΤ_u!vv$kf֝#Ppi@ڜK ;+#)]1%)ɁBqns'` I6le0;8 vjCreF7!q]** Fz7 E e& $NufQpPa:a\[֋B"bTB 8{u|~OsǷni1XR=oITaJI%mwkOLشZUea`[N$ P 0@j5mТ$g`Ap' )(OOdiARAa KTh=VE 悪SVfHAIq:.d3 04<1;-%2a@U@BH-@ӷ|ZEhϯ{6ͽ? i& )τl\h5U%};=u;K cZ[IEZ-lXUlTQA6l6 "6 W.֙k`&Z61j»k/_w`0hxF ekQD>9)7[˙x%4^IW]t:&r3!LV%0|d|Q W4BjaK\AdS#ڝ ve?i_Lɢ\͞>zhW1-G,LBqY61MJi\y(¢Zʤ_fouNr#cʷqg _izۋGm,CDӏ\N14?ޭg_Y+{ebQikSJ,_qgy}'K~?G+^]nmVyۼ!đ0@7 !Hn55~a"=FWgKɼWI[ CT H6`\eh Sgo& fc=n70k=̓a$+كiYSlDn_'X_yNӁB|MlsCg8& E5p{YdV[B8?D9ubCՉe#OxARZ/Fś HupfH zɋiJFCNv1d )ضV `DZIEC8:F4O\jT*}&ȋ&>"K`\HBZd*ϙ0j-gmdx( $&gYU+x z|iQO78!)r6 QjLƒ.rѥ+TB⚏?LA)!s S;2W`GGM[w`;0J 0 +nkNY1l'6*'%C 48I$vi1 HNV2dLSV- D5:eq>!s:EŒdIAT51n4S /E\ֱ#_2:R -[.vA6%JFA᷍A0@" ""x0sV9:RKa-@m}My{Ubn:qHDxa([H%i󱡿z!'ׄһZ`hye-3Nك"I)mI$h0rhqͽ%FZʓ `nf8ϵdȠG#̂vc.S3c^G޵}<.%FTL) (ͣ{$IH!n[_a.mz~׺3Nlb2(N[\b+ji+a|Nx|+û:a^^SVaUUe:v*:."dh}򴯘}#$o^,FƉ@/2ʨ\czl&hY Lz-F$W4Z5!KYD̎/¼~ YEt?1pF+;s(6K-%,rA>H4~ORP, }9zHkHA*(3p^B˾D`bÜ[vӌJ[)$6F}&hV^2=qk肗62ߋ*kَx.2Ia o.*:NdYBtVCQקc֩gbI57oC ]-[9}0Z}n'2bRTU"w%(W\KPb+*NA68qa&ՉmazK):}1Vh6|be}!nQLR8\o_Ch@g-p e#WnTO'TOlI[fF@7u[^i$ M6qQ%?jJR^iƦe- t6|/ ȳR[-؎%Z&T]HF*A$'ԷW_>D TjSPĩbn\.]UA#$W c|!ۗ{w{w= Й] %ͥ}aQ[yf&V dA!H~`ڃs&ap@`I&$@2#.Zu7V$_)cA7&Bd4<R%A NJ c.{{^% ܷ?uC3$tE&7P LW$',\2(wLIйQ4Vkג?}#i `cQ\4_+Qs$6,~Z |[xA *$]UlE}ItkC|{ #ҽpr/EB(őBu e61o.*6QXIO[$#>PD+9$ 8w+B1"ʽOס ^uyA!D oH kGS6&0d44Oq2$)7NG}0A`NvfAϘm#oERVF@{d4!_"~`%^?p7!9:V䥤ٗ\Ydh$sh)Xe )W! ?Am˨+m R*o8 2e~+x%pkAWKk$BU&@DmwLvT)\V$ QRjc-wVyۗgq8, z$AKESM,n`Y%:F 4oμsϷޛ:W΋{&T}WأoV4EPѪ-ai619ԥA 0eH"R4H IfL}|lc Q&ٻYɸeov;W{ڧZ׵Bl6Q9hvT*X*fCē}dQi ʫ͗6DD`SDx^~)=8prrըI L-!jȤ(&ۓߟ˗1| qCHI536lWh&/u1J3nHo) EAm, sk;Nޙi ` 9mifE%EoE15PjT?k- ؞ށFw_Fh㈣%zb/ ܂JqĎ0]}oP-cWESżi6vuFZs͒)ذ\bw5֝=O:_Cpv[Z4U7òHmٷi]|c)MNB˥ua#8G"A e52Y<8o+EgFN! p@ ׈zM,ˇ!/YɴhWg{ɇfOpHrSh7bkaEy2fnX8a`ɳj*6}2l`ErW6ziYk1teW[rSY<2+q'vcrmLu3gfފ 5*GU|S Y67([VD2R ..DXU=Nԯ2ȾkQ -OZwfM ]{yGwSQauKQA\INu$AAF$NmoCXJZ.@/Ofqn+mL 0"&] ꛩcJE0ґ&Ij2/QϮȥDUH˃_>zNM ?=0֎q}ouw 4utֶ5Pr"(- ]]Kޯί:SkFc'g1UZK[5zUwwTS,wXXi,akP֮[d4,tBHB\͒6ja҈Su#?LW8huL"@)f7y7zyxٱo,mw{!ȏ^ t^memŜ-DkpK]z՟B}boYTֵNsEmWnzŋ-t+s[7hX+̙RǠ2z{D^;D!o=Y\y,Fi^c;ZkbElަ KR3.aַbo!$ax85UCaq._FfJLOmtcC!icob*ޖg 6KksYf0뙳VV+=Uȓ!*je36zN@"Gtt'M-[~NgW1(9UQƆp SY/>OKo+vVUn,fŽ HTlNRr Q"M$6-u*i%}m6f39{3-f46f,`NU NiVp[c7E^KQp(!U{4-U?W2#3pA˕zۗCW'XqFX͕cƕQO=d״ I/s:_7:cP-&=>;'HƟsN dM$˕un % p6Cwr< =冯5TͥlZ`gb ~w,k Mj ;ǾԬu2 ؽ{_}];ޞמ\^@D>2%CO>{~1k#DZ{[M٭>;:&Br?Y'pkdQ]FX2R=:DO+4P&J$*E,R$??ZeFJS맵>%OFeC"46{`;Ĉ DFwaib{R!XnfW]U{ʕ,8/]^M(2 ""AL@G4!\‚L R*%0WM&s4f1F/I6hDقd*(B(% DA^9;˕΁^42dY@#|JKz*P4sj}};}Zn\}\HsoNͼ+z=0oz-&m1˝om2N7ysFM68vj.1Tlg"rɱfY~:@i|5LhhPαvMz5YV{mBچQOwa-,%9Xle&N4&<vG_Zu}\=n0NTCmtK˻~`:W4,1~V}  x|yDu m5@ΈbI3&w~uiJ2;t>ʵZ.Xqjl j'7Z`&:G) swLhY ;gn`Y)UN?}2FN-8'z**GH<,g j%"I = K,u0 &m# z/&mq{o݉rZ0XqS(00dD<ʽw׬٦*3YlyrN\Ω 2Ѳ{:9yv1*퓙vXRcFܕH#, (!Bm4)BU6b!\nEE8͢r HUXX+>KLډG3*Wmw\IJb{_G{v:B Yͳ/^Ae$AF*WCQgB­DV2t[ .pِllhV֯k;zspp[qdލFc`42PL(#fYe6d Qa\ۡ֌'թC$\veJ0\$4wf)'s+ *21rLlX]&?gijZ g3Vg[YvӒhhdiqmv#X6Pc?H3xc0n! : DH$:\ #w6,B-qfWmy2hh~5i`Š\ЄEﺝzg#&.ط.&sc7^<ӗyWОd&x?0+4 , `-dO5Us_7@GϽh{}oL[yN^&1U) LIHa̰H{h$ X*Ƕxy7{j2Ȣ,+Azуd(bd쑺"LأHRɹ@͉۴hܮo*/cKB ~2sqdOǽbB 4D6Z'CpVz4 ȃ5HfL()eD !s@tZ"G-)O!Oٔ=4K#V?9jb A! lA( &_2 U4d Vv1,A9 /,ȭU;\>Ra7|oPl,I=sftz_X#N*10P+ZM+S0V[) kXr J@}930|ݘŒmZ["I27jggXH a"2UsZ\4  i@$@bd67#ibP c oEH.H4ɨw!DR/p`b"M#DfM%aIj)_~DI$sP @&4!GsAlùp"_k]v?zW=)o9 5M%}^!۔%X } !` `F^2H* bƊ[鑩Bpw5Ʀw4{ #mDz3-(n/Kȴ(UFskp]겺1mUdt# "C+%7SBkizըM^͵zzyLϭ@HyƨzE~{zBrTtepmARzv{1m閊VˋZUv¯'1N`l!r*HVΐV7*ATB mseះ9l7K/]Im%& ߣ޿\?}ǿ{yv{*pXt哓DW !H .Cð$Z߯BMGOr) hR6Q<981pVZvvo_VGl!c~bi`4&䌱:[LThVsDed~3DIGWBt .nؚ& "r LU >Mkc9>#4bX[D([g3#" tNmGё)1+˞c& JfKd!IEe0PV SԪH"B!'Ŷ2#q~ߨ!ExݒG9d%ԓLj%%Z(:TZP$O'!'_t "w+P?u;[RjAQ%)GCl C( сR.)$םju'{?NC? 9p5jHf:5X;,Ibbfzn6`CMS`*qx<>NˈSppo2xrxk+}NXx~ѻ037%-AMXإWD^5r/\l9 ̹ _nfX 58=z}`OU>M\c KF f%=z_hB 2k4بE"0쐎<-xOh:IsS xEMTbfI@ֺK3B7vYPAVfe/*~VuyG!^6vD>'4T9DDegz+S/w/UB i6.s2a!zk<{#e섊\:Ų!Ԙ1`0a>vh&k2f{Ui `0A0 $3- G.DG$R3*1_ 娸^sFNnρKzHN㔷 D>ǔ)Bbj+!(Bӣ@&ܳmV e:U͉rl+S'/pklx**@@;egl2$@sH8Zs-KBH 0Z!(:AĖkʣq{08ß., 4ݚl70)Hgvsƒ-l6  6n䅩lj"MNl=RXYc % KPM.tsi4xg5,V!y6^茪*GrgS{t,Zy!b溵8/6r& *j~/|a#jBiV90dnTؒ)H#U2Sb4žo{x# !g\k,.b3)gӕ`yYJҔ!c]g#G?/K-5qW90d&js !F(ch[O>J IF;kN0Ng?mk';y_SELZyޚͽX$˔\BqΩYR-#6>rAMľQ;re,0I to[퉞.6]«n -oM8} -l@WHI~7[u,g4]@`d:T_bQi Xb6iX^YbUKȒɺa*o4Oi-%i -#DP# W,;#Mt*YR;(k^ $@ u1^름Z/#U!bNm_7)mh4/5 JSM$Fp_~dۿhѝ N Z0A!b藷\z a=>GW{Sa=0fR,`܌e#I ˑhHn㈽s" iNoRv PBF I B$mBi/n-R ս}[cC(w"G&H(F$ fPm>}N0iTi^{m1swXc99y8@_^qӻeۮ Է<.w.!e_m"gƣD\ 7KRilYKZj}6$`0=x=dHg=@vr;:(C'ILet,`m6u`L BVIs)$%!]^(0t0fYvv g B(Mзy*  &3U.hQXb˼R.U=$5q=|>[^a =jM8B 0):-k!#([d@€ңCa(6= b&5'ಋHQ^uX$e$A'fDmj"/['I&,a)L^ˤ9ճ p6y 2]}! A(Koe.QȄS!3$ i GTԓ,XPCYJ"H%k|nnn~KGAϣP6*Ee3ぬm &FoQy?= +u|>o 0`C!!4|2 `E7cW1U2! q~;cě51/Z賖 w|#W"  ^zcVF4^ R 1jq{DڛF`" GM8|r|G,8GNhMtNp 2a{㑫)yz%J~Eԓs#RIZ#1` ^f% { =,fE.lS;iGG]>qrH! C$R#$>$ڔ{E=RLpAoI{ C[EjH^22]57ikYRܹ$ P/nAԒcxe,KWi:|)vX9O`&/ %AFZN(vRV:MvlHn橢lcl uޙq= {QO*w7벐w  ٯLiMlƮ_23Дkǡx&C22@V L#C^& ,pYpPEUTd?-H_~Oyu?g=)f*[NGv^$.yS?gw¡ji#ġhA)H!Q&Xz5NuJJݙ:I5![ 4IѼ}6U%d+㰌7q${>w,UXϳ;e$[[+S%u!i[|L"9g k NEgm!9E&ΓiQ/m;ێ!YbZO;Մ:]l.? GBrALhP0fNQE:ܰ-:h NJ-gLIЗ?ۗ1AM} f45Du֯ł{)}* ^1P"=6Sj9 FupLD;`o$Jȴ`s[5}$_-sQsa39fS̐`rbS:)-PZ5 DJ%6˰pzM rZ"rn$-NakJ)QnMY8Du H0Y2,Fe-**ÛZ2#q]1Sbb4ዹ@ܮd/ك~mz]$?NV-=+1i.2$&K{& cMxDC0&WnO؆b78cQa4t ZΨ4]Ȃ8IT#k޿:Jo r $J sqpY>SA$ r]c,'?+@1 [$ BȺFcaFjJ'`g3FuwXvinb2J|RF~Qvmh*LE 6KEҾsuD}~=ꀔ.Pﰗ ldCl(ɴ!*J \˒OD-P=HA(}ȅ"5@\8v hT{toIۿ<@Az)"j"**&",@PG[mjJkjE%h ʣ"cvjRkThF[8cgq1Pߺc6@19+Wp _Jo^v":\eQT6 ^Mv|쮫ȰgԨyAt_s2ʏh oGX""1QC>5+3ͩ"T2w#9cKX$"1 k(} ˆ<;" ݅ 2fiU(EA@E1(l+mb D TQQ)e\ '35W {( |OAAy (ShgA ;X!TP$# ("2!cA,*KPh C6e SeDADx袖g( T@Q%[Ȣw1;]vW_;oyw*jƓ}oכؐ@ p2H(.|$"hpDP; /KANj('Ԉ QQ~Y`KĪ';ةG \Ah!!$ bm6` Yc5-`QRlQBT*1EI(HY$F%Ai1"a3$(hC [vwnTB3l1Eb7s͍DMc&M$Y1h1IĦYc܍)(TTm4Zf+PX+lZ66-,V6655Q&Zƍ[-IPm6+3T;usmwuEh֊-bUhưFcj-mcAXV5صe[|TʏЪ?Dp6;-iЗqhNy ?S|jxQ~_S7B7SXJ eFP8;O;5 yňC7wO@MwܥhqKWӗp(lqvYǠ,!?$f(%DZ<|\ԁ{̹ޑ4r:#qX<{)=y۴]`JLwkhr{4?Fh6T=b v |6`bmLz@)1-؋&`0hHmIA1@Q%)BEEFfj#Dkfi* Y% 4T 4&i#hOR[m[Tf[U .&߅w.rVA>!Z$-dze<%[m $z};{wq̻HdS#藑)gT@ 뢎+IJhD^:wq,@\=!RDtQl೒.xʔ%v'1 @ Dybyj-ՓܜyfD@P (ׅ=y٘tfV)O}{ZPܙ zmSu!ӣϣ^l4[毃'P "||͇nˀLY ^ܭ\iP j4hHVDa[,:VOP#APdѪ/hgqltcOci+U50u7a*(.bfvs|0CuWvl5A@(V@N0q,XBD^Y3netB.;HlQ]i-=^ tBHE^φ\@W{./TE<8z .O8tZ W>#C;I+45tMgeBI ?? ֍@ BSd#5w@Ma&(+"c7;Uv0T7?2Т  :odkM/M*&DuA@.A/xU٢^Ƃ(Y+~{8R AgDPiRGC xTA(.AN D"DT hpPSs0; 'C>Ga֪ >E"]]WGܑU +( r @$@ r< A`(6 %x BU84QD$򢢧a" ?[S H^"r Ҁ'sA*7؀>r4dcQ>L Ɖ2!@GN ppT#E[8 3h4SiC<^Mr=B~ 5W*>Cb:af)B50Z& %jPDJ⥸OEFZ[M3ߋXb-g[CfOQ 2d^$l7?/~u/1ϜoCv(hSd1wL&@T| I"T()])+[F6H$(2^zZD}+: zTHm@=V,FD/W|kq1R\j@(?UHwZk8wb7̺2ڮ6*RGx?v\ !@îw:|+<,/z?w}ރ[f&M)=6ChZlcXJk|Le$9@H7לodmhlF7%r[yΗ5s_f1nf'UԴLFק!6:y({YPWU6tz8M1JkKu$uofݦ-`ڍ-΅cξd4\_W?u 9l"vIfO/mfĠGV!NIG8?ȍ0|yon[y NjM.c$۲uߔ1V =Fj.)`χș=#(G)4꼈KUawt !yc-$Mrxi7riJ-$sar*F4_ ٲ2}Nux)`w =Zũ.M, }cqM[! ڭ|R)Zua Ӌ0.WN6B~ΈQcMGMQ;!Z[HU"z^6oTwIz_ `?>Xi |̦o*zGA^ͣyoxmL\T Uu47V>Mda"#1Qy Αm'懿p&͸ 6~w҅c )وj Σ:W&D4ٴС,X2/MY uF-<" VTLZsKKƝ|=?K8k4 "/ P058?SV19w%k~𪩶]8SyT!xOW팝5*FQ#!*p?吶ik9g*MΕr\B*^K ۇ3{ԽW[ KD6MXEIU" m8] IV_L)]hܷ+ stH!wfYgdi =MIf2UDjXϟrL5UŽTD a^ [VC@P<l__ ]Vrv!S5ȣkЗrmnJ҇S˘y&N u'NΏB.8Y3 +js]G/Ͷ{}~'=ʈ,6Ts+s";j8v:f%sjKQtaJ("GUyf!/u$B/: q}K "0J.F ʹVՒ0 o3l-|N?ONڶ>ܨYQ#OBFdcd˞:xv'R#aň ZYU_S*M}c(qiCylZ447Q hUxw7ajiaJO{օUl0 L'YMGȆ֤VH2M=Gu]o٧*pr C&O2˕v tbuY>!}SuJD/ 5'MޒPνE1i;)~d;!>O~U@ $$/kl#(\;ϓ6nįpS Lv˼hqt|r[NY*+sc}Wy^]S.jMClqJ75g2#{r@U1(Z=F<c^HWz1CAj-j.Bɇ[&kvlw\ dhys0J"tin_g2:zkhH߱-l$&:h6s_k`oݿE/0;(\240֢-hJjǵ?F!Q11Ry\%<>uѫxu* j|96zu+&.j['Dy5WE#Tg`"b"13:&A7Դ_@c ={`$+~t7t)JDQCwz X 4 ƊZ&>|@':;pxs9+u*f\y*Ee2¦۸&OXD-8AR:UaJ*lk$Ofx\9-D 8T??+&z>oqxxEǔ Nb?xd\Jhw KQyy\2ˈyn/?RA8qF3[ |fo{۝܄lN'{p>.l̦Ӫ4j(HNuOOj0X&ϼj94'>/{7<-szSNN1sDaxXƿw2yٍUjȬd7~ոTZ?}Ueb+H*\[-[,,9?"k-x0Oqq*ucUš=̼vE(bBYtyy2v7[ /ѽ6 )}axԙ9wb]62EQ~jAW!hǶOb<';ȕvPW➶FꦞEoV0zvu$r(],/·wy>ퟤ0'](&wy쥚 YZk 5K*|u[swo 7×3t_$\U%ߔÍX2Q4?Tsz`.վ7Fe)ʢ:}K[f Pږ6~R!. ǵ5 .eפ}uII r^"@_1]Fa@56Mnw &P>b)"]ïD4#NWh>Wվ!+Llt+)y f&UB;k$U~[i^Q?Z+I۲3:}JLNd@}잟^K3'pXSz ק,/ "g9;mF<41\XagVJ,z.k78NB~;qMnπQJSEℰ=ap(dg\[8\3]`kQ#=9p1Wb/qPPkK9mc.ի,Z#HLcDfN*hO$ij޾;(6&25|_j_wYpU.Y (ZH":*Y RN4=h)Tw~6rLiѠ)'7"Uw\ c>Jޭ#j8П:U鲪=4Lp.foصas0T#Xx OK Ci序"g|pѥG]nx-{ o4mV?S'K6ىj87QTLU\AVuy-If r)ЬS֔"UW W'~zf"Kd *C,4LȞ!SN J 8,#*Òߏc)]GBsܮ]KRz#?p t?e5$~u://q ?s?[_*rĨԁ#V7{RSxC2ӜJ p—"R#8Ʒ)oewBc,:Pb)~P:jn`ؕQ95l@ۥ~5>U] ;GWP+?QNCGsH@⺥U8X48#^76de h㋭D2BcN}iԑXEjks <|Vܞ膸^1TwL4gX q(,XwUߕ˕2qM py8iCb}o7~Lr \szfO Sz"й_@v'ԍ߁6 _-}nR^ HR?r=՟,/fH3q<8)c+'1E-P|;!<6oMʀ=#5,'#ڡW`]k\!׆>2N.D3e㟗\ }B9#&%&Ìř3[G䏎YYYѪTwpV󓧧<{i`Imו O|!oCڵg5'd ӡJ8{AZ AGt8 @T6|ca?%J~ViE ,ư'7ӧ )=Ll\\ǎ$hm4᳐k|"@3>IA5ӸL㖸zq6 L~@xXSe32LfġGsukQn8J4$|ctCo0%NcMKҙi͙^:TgWH$JlKZ!R]q/(6CE K6 є-9!`mSCv! ]t~3Y''}T`C[-c c!;Mzt2j~HߝEc†ۛ`F}cDtY9D.1C&x#%a<GU@j  0j8tlyYF4ިy-IRۤ;#A>]/1# A^j @<ƫA\ 5*"i!L%ڡokcka!ȉ_SdLQ-*9` ؁NKk&/Gc)D>]3*t{=*5M1ožQ4|/Ɂq9,n6jCADrVqu[PMLs{IP|rVEEd!nI| J vJzCi[PV]iz8췖1FtJ#74z]NHW5ԴLk-MU1~߮a)ktvTP@ݍ ;Oc|$|Ce:rdL{U,a,&NLsЙ"d'qKӆvc LzXNrl3*8tc^"n~IklR9P.}9^6^/kJ׆yExp% ғyIkԯf6:) ;#2-i`4hy^N'\t?)`yg*rծn >LFd_B=Ͷ=J|F NBP2%_؈Sd,rPNw4h#3+8Θ?Ph)Q\B/{FG[F oGJG^E(,a %N̙$nZQ9V%@ 6HMS$B2Q h44?I{DXYx3nlP( 93E08.y?wRǓf Y;HӰ&ιT.)NӪ󟁺~ ~Bmx:i]18F{;9i(?2 ʍ<G_ l<)fWw,\!qwgI4X>)[Fof!2CNN3TJi~)\?WM/BΦ'wrҼ%o%.ǵX {%JIq{Ceb˼e !erQpl@0n%Uպڏ  7 A棨`!_jOj>QRK7)T: 䌼>/' J+o .\zQ R)&43{Q4_'?{ٗS)ez]P󮏷#|=sL=u@hThc[PoUXk;i=<[Sƴ.MNq; c0Oidz|LJ]kiYI2YN$͹zCT0Lt7hoUF4V>\/ T`i.I_o=/~!*GCqn,J2u?@q[ԖzAȆ"7V'Rd;uh+|`ʚѧW^f}Mx-BhC ̟ugR LɂhQ73=X@+|j_#>Kv^zQU&7}]vY8Uc˥aac̾m~S=g)NxW*ʸ~Jdf:.L2uIDF?Wcb:*3g}{omSv܊3j7!J\ Vr/OVp˷cҕ;S B^3VqG#! iLbAs*-H(>)`ޛ'Xrl6>RQTh>XkViB .W76ohRMXfku%j\Qk$/T S5ƆA z,uv)@s0P (n/w0B}/8{=H0v~wմB gwy(ӹr"tX2_z] ګ5Sr6=\!9TS İ`!!rXp~D:kF a8P2@&`Z`MliKƭ1Ə{Hkŝ`So2eT+"9 VI p LN0*Vn3Y*V3, &Jvqe'vޜt8p@[` z .Dg/Y@K˜oΐ1?p)O7" w9es/Ĩq%ULPgxv +2Ѣ$&Pރzt?OnNv6KQem"b4Pz8z|kSlDG 0|' H:gZSqy[fJWTQmo{]MJ"E͋DVByğ^% 0t~I+BbOAn':fMGkĽ)`U)ڼT-W_^nRh Iu*~h?|O^L|ܻ(Dt OnTj,-1D/mPFF>YD,C1?QbȯiXgZhɽNլl%)@e@#&Sy}d^KH1'.zڏ(1m NdG(1Z!KB04Tū=T%B"j#mt DvRfȺ}8I2oG:<A $U=nMjvu ﶉ3WK -哽j(R{m^53])7493# "@v3: Mޫ <BB,_P35\?-cg%5%Ac#ďcx.Jkŝ܇x7}99<4w|8jY:"+*:ĢqKYMD7 6&_~sIh#s+ZJgd  "7)"A_|m󬔭Ix Q|H$n374fZ#r AZlXDj$$c#YeFʸprҿ16Yxbl,V Bv[x?,#S1W7a(($\iy~aQݣhPL>'NUv$La]ێZ~U4A<¬6_jaVm՝2࿏RS1[]SC gr吏ʖ1?fAzdlE`,?BANo_BkPDb$۔+? t*?? Y㙂 $0"7uě#E\d5m2:f1+QV+7Kߧ:gT@W,?HߤdD+=d>tG8KB4' T:c)kt˵[O8<&q?O!^>r I(qHPoZ6$N C0Q#Eej1+=(piWb56Hl_#НGvH !69+Ȑ{&9@fyg1Ƕݹ|W' ưPՋoa}z\'qKUF?R)[X֢SS*KNp'Hܗ&8eZKvE?}VW6Yv\}n F"*mj)#to Pz'άB,xM@#l$OP2d˾d Pۯ`x_zLwXN>m*/EN|_)tv; M-XQh~cQ&+؊  G@?ֲg SQV['F`]2wbs$FEJ>&tX\`1%尿.ErDi \7LݟBa[>`EBgn4ˊ; ry. nGK6k&u#!ř>aڂ.O$hCv  *g8ѩЇvnN*/@RU |WYy c,APW WbxN z wDn"!6|/zAZ{T8--1GZ$ĔӲ/yǃë]6(B4pq- 3y|P]1b{iPvd*G~`yZ6_׬؝"a} "Q$?Ω@ Wveig[D+?H$ϲԀmK3BXLݍ=qSt 012DƤmX gC'@S"qEe5YBD wp!`d Sn贴UR[A4*&Ib%!ϫ⽺A̼ ~+P,6s^\| X^j#Wr @)HEfF f}ӭ*#ub&Ͱ& Q4Pg!KWcnD)U ..@ ٍH H_Pxp8p})&J<@Nz0Bk RD8Rfy} ɽEICzzd(qGTQ*vSr6(abYDC̆)JV$(O@[x(HYb鸗ܯ 'lOCNyWr*rui,sDEckbkcLbRhƓIJ8ЊyЭb&@L~ƘR`R`U5Gc , \!<̛G5>[ {CFۋGCg1)BBe?3򬀕T9 t.b&;o" Sf3$f "]!!~+*JN;ׇs[Vw<#ȍlåszqigq|Fa[tke)p\YQ#s+ qz #]vV8c9l6K8A^1!i=jC R x9[ ruN f?3#WPTu8LRNgROcXATvh\ ׳9HsTQ״Lad}j)%p,5u&5ȽJAYv ާ:I./Vfm -h5d͛UyJAÜ*^Qf.0dD}sH{ry;>7DJ>"<=WPb'<*R(^]C H`S@`=v7Tv3}Lx=z a ֳL,ưogT UNRh jlqoT A5%}|_7Jx^)CeK*:fpiA1vWE\x(lBT],ѩ#aSw{ + dEK.b^.cA,ZMt4=kή1yxy24]BNۮ, ?l_UrXCv"B<Nc7%!Fg2.Gm+vA a,I`BA"G|T5hYu0h+K%yR97BSnK+V}Ipq$PS\`=/z"?9>yw@T-!}n.6 0;ElF"Lt֬7<%XP1Lfb9D,C;)r8Yp)b8 ִa3[Jh3.?D[Я0[˸LSEyly,e()ZYX[_ex8 w}ųЌe=)֞t<~4{R;,PChOJapIF>jG a ؘ!<2gPqZ aXZLtDo'#Vi# 5T[6Av csg^Fޛ1{'PVrm!fv^`s{vN}G$XI7KoA-SǩF.EBmd9p$qa0;0IJ@6#KtN@CYHotiJ{^b,8?%a&UucD;Q{%HN4ۺ+#OuԓcjF܏ (7}o%G&~ .^YA`#B;iϘbPls-P[ǟC m^7/$ 9%Y K3dq wg 1?ߟ,u 氹0So쟌H /)`0B(E"2m NOp[%Wk~MXI ,`iyiWo|^4}!qrIIC@b"xnu"WŒHkcfTjӨ6V|9Ҹs:tGҶ#N(?f2:E3KRdmzjz69l.ۮS[2K;"J2㈫MthM*QsTXbFi֐7唇$8Fn&R C`<(YӉ`+N<<$FUbq`CW)7:'9n?zRH#e'VbEzr4=H#&Fd8q߆v;Q3%s ηL靈Skn۞5E̿}M-m3&h7{ ϼ=M-q677geuM} Ë9Ln+9]i'"" ѕ,ؒyzT1* ׊q¬0K`sVGPmDL7 L C폝BMS+E=u]꧚dE 3dWY5PDۼj"zco{ݽ46΋Bbj'G\hi'NDޒZ6Ƥ0q<eW@H-H0dj~d#l$B?B9P*c*ڭ>P?@5S:(jsi-0+8v }K&]{ogY'r?}IjE>J* u.FIgh] `wVCЙjrDgfUat|p[*G?a|pp|&{c$L%plpPWdOl~n?Nbh%^R>KŰV.$ZyNh-}XnBËKGddД &])TQ5b*Yj$1Dr?VW Xӈ2٩!`!3Ml;jDG2d磁Dr}Vd)K80z-iLܘyXm$G7oP8pū  | 7{-K ?by ZRtI!,HF5a)I+.X*עʗf'ї9feB b`x=lAoA <+$3#u_SJ/s-U)`="C srV|K͑sn[ P߽ vП^I:Z' )I)}ȡV 1}5&_O[Cx@tŸ;Suw2t`Jգʤѧyd R&\3r ;^ VP/e&8OWc K-o` cRӣkfĹkgޜfz1yX?m]N9<c2QDgN1VU+Sta;P23} iVETYm`c%A?lȐ 0]|XvDuXE"SuAcҙ F@L$Q5yZFPmQzׂ2iad_Q ."x1UQ: )UWHX;Up8J&g 2X#ZSfku~p51Aۛǁú(iy=D)3 iX g0@›h倓w4 ޴QB\OhQƴ^RJek;mn?"Eb}E+n[b}h:R5osľq`k*B@:u}Z[Fp2$p$GsXʸih[zC_~~(xt74`o$GS5GbsC%aj=dkdqu,OZ#MQӢ!_qQX-*U`O4WGzW9>,#kR)"D'|)I48b&T̈́|lq.]|8``wۤr K10Ez:x% O <|["@޽qA žRG8{#chRuw651C48%!] {*k3q ,om⋡\ɽTS)`* v{4`1 x7΄)~֯0:\#!`"ñ+E Aj n.m{WN_H}~<JŭlGotJJrl&oT7]@By,7UJNJii(9RZ+UjAj>o%1h &h|q]F;^C^31~oG 'zh9?3# {Xtc[silxf8x"\#`GB6{^B!K" /&uQW2:>u&X{O9Cϰ(e eߒ1Asb-}n- 2VI6^y0uk]򀅢!B\?y ѴnN> \RC3a`Y4:x3 ,QȻTx!!z@WlUX[*-B9z@/EKʢ3F đqBz1 f ߏٯO=( Ɍ.E-; Y4D}¥s})G 2,j,!QK XqR*6 m\)n¨I:`p KB)S'l-8Եk`!E[Li_*0 6w"mY"070[r76!nxN^k$]%7z* sc:!mHĂeC7>I BkU F7'VҢ@"7V쁱j]/"OP~kzU/&X̎|n72?x\U 8+:C8(ZGgwu_^, cL!&$:ו8E:xލ{\msHvO:w,ɥAzxxeY%Vi*Ex-޴6?eA1dB$993bbȊN> A]WM5]+v~~[7$Hshz ȸ~s:eߞFWbdNHN>,ұrZw)8iN) ^NfqwqdC58~S!5CI©Ď~)BXS8ḩRJ!84\@7WV!L?ŶeJ%QxDSZs26ojT i+\A XEŃșecausP$`kvK&V A43:'gJ~p^ FlGb• 17T9x%G&\~VEj%<&EtC/?TTF G16_ k|iDڬxF QeyoHxSÔJn+s4 UGᑬQHx̃Mś/V շɍ"'Ǩ%M-Ubq@ڜ61E0 'SWo/V{pRVE2X=:2Fr$%0q Is{X?ël?: /FH8 tsmL su*C (W& wSf|1P9L{E\p)ڒD48#Ő6Rn3(F_3/\d#.<69gmמ3¬bk9 +UX5ȵS->Bŭ{66XJ,J* 2% [g$QՋPs~t=Ip_asTJۇ"0fН*Wg3v-y]DVH0y Cɂ]أĢ؝S$JaodaVbVټ'4YU~\~5248w!K_4Kٖ M6iӒI0a'*|@IyJ}IT &A/_4(ni*4'wi%3_wU">Ya )F܏GBƆ?x˷a+İryQ:QOv;ͣG!`VK  ]fi4 g?3鰁0w(K me?;ǡ`%$Rn cU1IPu$I/C>VU5ePb3`9yycl/q|%%ڡ1$As,ei;T,n 6b 6|j*%ur`sAzو{@J"; 0y;c_ D0' r[Pٍ%kFNt4G 85 /we'}Q`AQl:]/浸9ú݇Zŷo%!`)A%VPr7܋zW,W>k׶R@VGyvN%hV|Ŝ>;, jR3]6-h|a+eÔj]ppB؆S7cߝb =1;bP5'uCpc3Ɩ!B][fRnE=,8h^V7D=c4ئoۉ*wCR COKJa [FLe갦{9@YKy(ќ&j4ӖXt2ETS" έ=;٬R(2z-K4DHyb2&x9 ʴB\v:l5ʂ %PW37)GRfC/`x_k]ϧ ' !N+F{S=*C&rk=Kˮ/Wg왭5~Tġ_;&2njS?1\%uߡ ޗ%s*B6lB8ɐ{ Z?9;e˚¦"IfYpFVnȲdנ~fƖA_u"Saubהz]M٠r<{1wֱBN :nR俗Cff/5 s,jD>uh!jOtJv>uauCdtdǍ|K>Mq2b3g|"c#C!R>-%_|>o28> ,#ɧo<*!N954dwѶjInN,E^LLC.%᧩& ?Pxnv3tql~>uކV<l-gPphl&1z'1eު2J!j]nd^beP䍃xnC0ėoaFm1Ggǎ%ǚgޣ_I c&2 _-Vkfw0n_ڭ&nxTYY0~p`Z֙S4gN LdV.LAov 9Cyi){8=,$w*a]랛 >fmF+<0{nn#"dhcǪ4kKi(L)/gʎ%.YRXGýZ(e3‰[%g n4k_orfeJ >9!3s1ך.9/W5 n2$$ E^ !EZGAa!0Ar݁ds/ʎK?ǩn7 !hV9gvZU8 d^Nƞlc;/2T /v5VLQ{ 8=6Omns4bq*d2C 2HMLм >h7XuQUHp*&o?\~V%B85NfTW Z5~RERfx  ovfBcjo@ wkmelN;0e]}A# f%ud=ʤ6aMDT>$[쏭thʉhu3E=%Z;2c&\!LțFAe<_2$6l1!m|@eZh6V/ad($S.L@ҌkRٹUDPcgEX +8wޤJ@Z f~j dQZw`]þn89xqy9F {χ +_l"u,WG>@F4HD*[ UDE3Xr2z\v௵.=<6CdzOTÐǨѦKbnfa|&-`3wW|='x~{p! 4/=禊"loQVK{EK\b~u ȝg]xO<}V_I@?!E^>!VY&3@:+v~H3wЙrK"TjP(L6>9:~ Z_H(~563tN6~SeJ`(UU屎hqR@Yi.[5 3HD0[f)78'5 P| 1"RLYގ)ʬ)jM/.6RA7*F]\}o -5D1QXXl<Erۄa asy%C;i&۲*NxtQa9 }h^0{+ut,.ӝ@k革&EJOA ȸ0Ng駱}L|>R3=ѽ և6ι3H4t.FuS^ iKY F-gIf=63;z2=OxC9S-q,腠D"\4GarWf|7KzXx' l@pTErh4?0}FaM!P~aI\ /* jRi̅̃\ ̮BQ6H Nkp|"/D&$O/ĎJ,Ou fe}qiHz*<5Cg", bPvQgIfi# RQ μ:.j' Iqܥ 捃8=mWy*aʶ usتnbOzM.)fT/[U‘ɍ [T/=.sYdc RTnenOW2)~5Eu&M b3!>;?4"R>IWq @яH,'FV?Dtu)5D1]}1`y1}c9߀nIwKpC!GS5Bw=“:B4 haclqC."ϛ&`Qbm nζOP;]r/ֿ9Zozp$n$fD/I~z~UT6AˆSr+3mQ aĦ%-mK3F?/؍,+]mş=#$#j 9҉0w\op^܇`Op &|sâ9-}@@c5̤^M2kaq,oc|M^;nșԽ ۼTC|$%؅xMVN#/2p& {p{)w5%\q&L.k\oxWv^~uXTPU_Gȩԏ-|DCSN أN˵,u=v2k¶cbi 'y`<#il* 2c/Ŧ]-ҌϹ]= Κ*Sd=-v J\n+$`Hΐk $,'L%$ɜ:W߂+MiJޙ49jf ->autz :Π|ˌ O.mlm6D€]2J`;9\v3U *^XRzX<^+]#NKxƴT)^1Aq:]ch,OȎixۣ҄Ax>u]r &dHB2qm{f Cy7O-Qص3\m e`Jx!2*}3[}pA~2B<R$jJdY4&yU;o]`p훔ͽ%/< Zg"<:+ ae|Qu(=@;B(-aC/Xt{ 5]_XؒL^ᖡʝR?SbIȀ)J;bPFV"|,@!S4+Cڙd6GB*i.4#e>;õ`]^5%]Uz@'Y6wL}ʭSuuxLC r[Dj дU^7Kdߦ,WT46.Քxx#egfmC|K)(61I ֑&%-}ψܲ*ZX'gs,(-lwuXo%Q@%9(ԭHcN4@gn'6@"8uO[eοBL lr<@9\-&b'،(_)%тvӊ.qSB!mkccCe# $:[Ub/9b Swvݶy "*o\׬:2~=fz^n6HŠ:xy oOEkKTFhYUt;5.{WsܓZ5t*D)>qԿ2uGgw:YruRSI9H̘c)0pntfOP!(%~}^1zVoonl>ئn4DnVk(!82ߺ'F,Ͽb`tǼ ps̯xX"QKDQlzw1HFhqyfΣPA,fߗO"ީ'49^:hLp +0PCϪfc"[KWp6g?QcU_ġv &X"(RPw8Q@Z$pGGEx M>2OH1f ѯ'Cҳz8L)P댇c񗤲~id58 >dix2#I0Žj+˴'/=?V<#o}#၅>^_M~b㈎Y͢P;ta軛c7WK#"a[ NkhX?g&jMvmVϐIvKu1~;(4Uh&r6nvmMkarv' \ %I,OT-'eA8 `Z fTC@g5xTAF["*x?@>A2@3#Dq5 p{9'xl4atk|\fOK_4xM C|O,ao,N{]=+ sAքtL }ۍ~G2$ JvJ,Ғ'f.v8M|i!MTfΝ,c5zl!;khw&bgQob?y-MV/j2ØB,)),2ڌiy'8{kK΍ \pUPQ`D4^=`j!!80ݘ,ⶥ^Rɩˣo:.K^*VUH`Ҩ2ć2B 1?c\In>AP;=1W7JF~ r&501Doi[9bȵмFg)• a!ꔯk-gtzhlt8"X]&Ac{ Гuip볲m]qa4x raުQ {G(f ZVk- {F[R[5z]ƩMIZ 'ɧ7?{儡)bScyJ`hh"$`EB՚+h)VL| t˘/.#-40jK4`jۧz$؋I2K|0^E=%渦D_ulKۺNyzq{&3n%e~|VL 6TyXyROE!>P 9]EE4=%s(oآ3"oJd!d(r^Y:'|?Pj糥DG'|mQ+[n$͑D|Vq?{X~\JZt %:*Oy/OwU8E=JT(iJ 0Bs㷺d^&;N0~hԢFf$ίefjͧv00 Xz`e;E& )@Yd}OU?7j(0C6RQrU {XI ne/( зq>8,,&ݴp QMݾtJ<{^p ѣN>;* FLA96+8ۦJ8ycf6 JDLOo4Q;P`z?g|#"qƞg0r07zĖs"]tɮm̠~4"`mҵ|\`E,' 0t'ZeYx ՀKSsCLɊfb;-HkZlr<4ݡQO6/ÞwSx` c/wm*^HM- D6Z} \#k~+kon>=w$o 0WK h2/dBDakV<0q hLYK %cM8hA+PٱTziWOuW,,P9Uk4 #n䠑ƦM'35ױ &XMF h]7B" I &<+X.oU5LIѴʰns~\MOf*r v'v߬ \笭XXgFΉqiEi5](m[ٸސ;"NR.@ɞ-t.H_JPϟł1kŬI쨺Q8#j5̚wֽZG- [a#&&h’/hY ̗AU9wx_CX#aRCx0ȶ/R`jLBWnOsl4&s<,iIMT`3DAkMȊ j:]__a_I~$Q?ِxh Sٖ M=Ьpq"9;T3[Zf? kĽ%VvPsjrsY*_&ua()\`Š;x~4UK ~Xdu]vɚ|QH5q6>|*n;Yq`aRan!R[X~!-RVww^fC\=cy\H^!h" zW?"0")o42ѻsq!|GW=hfDX".wzbi@D8T͚D۷(C(+Zwm[S٫6du0@Jh̥ c}e>-t!ߢ; #j)K$B ]Fjj.sYEPU8 ć Jfj EQ#". ? jNfШ2ʄ@m`Ei˂egdmjo \dR5(C ,{pvs(k!wzeMa\+.ufҗgO/:"hץȬU&f6 hiR4} xZ;U,2E6O $XkE*uֳ/@(0ȈlEA`)NO*=Rf`/$FOgcC yz#$lS1>ށcV<D݋Ѭ1ٰuhU85r=K.[;`/Fϔ qJ}7]Gg%i>ZS0[# %0#5:lxqvytlY$Dgw t,o5b7QJOʅedt [-*|"{YuqeU,έw"GEGۇR i}ƮYJ!TY:'m/QZ?C 8n=bBp!t(#P sO@N]7i_P6HY5!*=#em'.<"N  Gy'B-wU9ՄxDW`0(Ovi#Ss.'i`"ǞɰB΄9`F]IR45+)MyKZ[<ԓ@|.ůJteI]6cC(KQIaadjZ=4z$ uHǸ Uxoî?m{)&; c$h}n[3wTv@?BL[_g"nu4h=@ 1N +G[fo(m P%3d3t%WM#E|Vnϟ1V( #Ie 0ls]]Dgfv.qAMd\U[mTJY)o_PO] ғAJPs:\>|bh6(Gk' :9,p!('KE!fGFR5G~8 l?!HUfX? *ppQ.-CBv JR54{4"$VWGCa*`5LNCA$up!QR ! Wl5o Fg1ZBqӉoO etlJkϧ;No2{YQd^@;P\Lg웶-h d61ٖJc8+G/JQ6Dw=9 XiI5ZA|ޓt.Λ3Zd3[ 5MtH#L=ʙ]jSVScvx9▉NS%W 'yǒĩ[@k*tF>+$I( bg5"iĢb^9Yme!LI<[ºiн?a<X`u# ix}iR@QS*L w$6*: =?Rd}VEo: F#hi`IW+:0*M#y.T`1]簾mVR(JI%5rL0Z#KD POeV*k5{dN•Z<95| )ɮE~dӷp St0B}]أ9C̀F4~تP6dÓu#$"Pf2I bZ,mƺtE7̈́ ,! +u`(8/1rْz:DAlN}MLc̵Q81a<^-ScQn6O[Ecم|U:clj|&þ0X_mŦBh^]b֊eiamC8EPP4BK.ʔw  ZK#;_JL9\ּrJfo, 5h8 ?g~b{v|a n{fSo؇%ل%,~|]d nԜ xηKAR@,#zq9|i!3txDgrl&[fͽ@f2μ1&s|oH[VrCNحgoZHUcѐ,ETof FyH'<ݵm Q^$ͧ9p=QIP8~Y,8LLo@YQ> %[Y Ģ2Ɔ&*8b7Ѥ >3X!\¼ A f,[>^!WvTubi{:T9sNz>mhWSv C`B N[4Pc3Ul(8IFԢ}ۤ0@v>YfcUP*I5(C}};=-JW+R%{j,A0 Mm z/`!T*oc x׷[ynwp(JEUtg, w1Xtp]QI#~y?_K5Af&W$$tsbS@=% sD2> ˦E/9~##r;*K/JnK?4!hûhn3A T#x=HM$$0+znڐ$BmNsb\waɝrڸ⩲M]nz&c%2N$lw-٪=Rp>68C.ɪC6酕`[WҧpTwQbJSH7&=^ \ $O>>ZY Ic{2Zpz(jϒ*,A@*w >,e e!w4'c(1W⛘ u܏6>[\iLC5Tzѳ-g3w?u->{:wB` ƨ̘#sT1vq9k<\kY^_[Fsw)jq3yRH߲Φ30u`&bJ̍i#ʂ(z]`ә.)޺{"1+h:vUO_9 81ք0l^akLp9BKDsP,*13Y:YiY<`݅SUZ ߹@>~b!z>nOkNuw\8'fffh_6Mps\(>B 42SǡCzsKm֤Rv:+˦ӍJiK1\fFM!0sʐ1aْ]#+y,=Сض˾cN+8UcS1 :IU%E4`E8ec wӵ=~,{?ԹHAs\v zwʳAڋ,LhwCJ,9%?ejPGHH8uFrs\.ht2ZЕv+͗&]#~0nvWTѸ&;ǔsUS\W5(KHCoN/};z*.X 'P|1/B~&/X&m#V03gX1iGBvBK-)b$VIĐ5&-Ŀɤ _X> .d#q0k1{Nv M^zoyo?0ZkQ2(I98b4!&2%6>cS_eicd;`Um!hPAD`J99H.̛J,{j\eЕLVjXG" 02)϶X&c|KʆFcPIq!;[jvOC<л׆Z##qV Y; j˒ʆ5O+.O!t`W]uw*'Uy%&y-7P\ca\ ?KsޱSP~)o/tXQS>:<4鎁a*Z|j8S?(C 11 Ƽy,D6*`e.C [Dlj!ٓpYGp@64^sk̪m ;ܾCi4=*yc$ a`ww^,|$5oGʒ*"$P~ *H̏KH"Z oJ?uׯTVbdqop ǭNAGU:w\*K]x`9wp8A!u6)r7̅n5Z8Y@9s>TASo9bX0,%Zhkp3ง=s?^ uLk*q y@X1/@Zo0A& nSal`ds; %Wm;:zepj/^*4DX, $^lrP˴Xgfy~Kdآ zhPnT|ELr"SagRWZ&lؑEh ͔JSMT#,d- Ru=t]ۯwnMiI7&1?'Q6aѝ!pt!vh|,[183u%;X ^M^9'lDly>HNj ד|*O϶8whFB<9wQ9|娬|1wFTgg_[8sPSh˭ML5Y1֒nU; H"ZG/eŵ][ۈx.}ʖ@Gߚzf Ȥl;b< C6-bbP[@̈́WVtp?R}` pA:29<|?TbXP.fr46HRԽ]YI(C3)MJ>.T Xal@k=.lcAVmFMއ9s`FzAeE)1(#Vy=cD⡻9y nyƸ[DċLjPGȗp,hA&&d 9,Q.5FN'g?o/N| w_haRԿ˫|qhu@_V}j#淾"H>Os/4xe㵓"- cXu \ȓĻ&C`8y/ݪ4X`*Y!4_.>:Qټri&c@ @ .w&td/Ǵ@2Yj.0*eнp6J+|)k8ڔNTS)[1-FR$- kQm&Z-7o?Oy1nTpupUϕWSTbK sn+4 %x fmWpBdžW v vYv=Q Rft?+g}dv6j7^QPf7[m;=OGwh,?o藤/;Xh9oٷ5egWrI_7@o2#חmu  4=_= y UzSaT.i3@!!\a<'.7~R>eP8րg| "&y5"i qdMbN^p-2fdqcW]Ԯ~&|˟A)0Sces\jKkHW +>pz```6[T7O $5?y|ΜkmDV"pƒdA"OY> OW/vۯfoՔ魄u)"gGG'EEsPaԺz{?Zl;Nٹ"mOJr2Z OvL@?uFj ߿ =qW-"tLa v@ L$!y.B^ȏ Űvމר.)oZ'} Iumh-TY\F#V8XqZ^hM$#ȼ5ʧvt9-*](Z#b ֜޾y +g^@ttz؄7K3~>N2+!C'`c7/0 DNU&ш, 2HnC?Fo~ǾcHb,5 ^}^Z4|YEG6 Ȱ.A-VyӒ"П3Wep8 tR1S $="^C @Kp3\UeV~a\.uLJa(5雫d6z {bww~PmZbfKB+||J;eaJ8*?4\efPXHfdZE1 Lro]R?s%@3@52 -moDJt^+&ϫ_ȸ]0H˸@]6#SAE~'(՗u;񿶛aN+{_SuJؖEE"`A PsvZzc>Q'l$/-M~3bZ} aiZ|]2g3Y%-׋pxQn FʟZHF93Xcr; 6.%|2\=:~Y#;`-dd֫J['p5"ˈm[HY^cXX1 Dy:XffoSB ë&,)S(_JR8@ڙE>cL"HfDU?f>oիWm #$ep '3;jqP)W]14!MYauf(;Y(YZ$$3t!}rszis^VyZ@ܝBl&3 =2xydǬVo&&椐uspQ՞榢{T86t~"EňfÀvĬȉcGjO5蓺Ua(0Ȩmh@Z,K3jml?ρweA*R|cٻ>`(\ zxcRCᶺq=KcdRpC)|U\rR^ (ūGPe'bo'melG;Z5>:*NP@}-pBqFo3˶(_oI!Y@Nɾ !&RA=dL"MbiG$rޡ=X|n܅W iUthY KkS\E!]ikQ8r=h40߆0U;1}c_(cV p "K'&bjJYhim)v)@נS&(>uL|dv7^5`Azt]BIL >btWvexBz{TzhOxl`) Q\\bd0>v#` t@+핕BEbur(mk2~&XiDSmd5UfWWg\5REن`WJe¬EH]b㰌Q 4Xk [ozQϠ&ʌ3&d60I;&&;x4o)6^ J{÷ eILq=D#l@K5j-OL`xN Ζv M`~# ߛM .{e M/ZﺑbƬ } GQ\=*C;:4ղ<4-tn5yXs*?-2 邵 _*1VK$CaE",D% < T1)k 叧qSP.W;$cbrjw7M |%c\E7Ԇ| ]"35>!ZE'%(ǼΚ-::1 BAz'w4bIV|ѴҩDd x Apߠ{)v5cZ4l (Wƴvۧ+fϑݍS0XcPIY[F9G`Ў-qHN`R/k A2Ü֨#C$S"Kt Br&p|uc wY">.i'ݢ24$] z^s 4+Rf?6ơP@R1eɰw;|k'=y\rɸ8{Bk,7-쨛BؑZ߷zoVz+6=LWayA+,u iƟЂ[LԪĹG6P!EE9GFJcG5' ?Xodg2):IOq*LLFN#x.gjt8EU_Y1(?z Urps%HlG ZPK L?8$ύźraV覞sWU3#b@ҲmHSdRb!ZJN&\{_<I#*. t]/J&pfw񜑍ݴ84W[^ e]0_;uc06.rl3fj+5.W1zVf `fy=0QM cCwrXωQ'@͚ί̫KL|ʂi$Ѩ3mPw~!mM|y6İ0Oi[d AG 1 sh(؉X8-Y,$vQ$c6]BxKo!<׆d{*A2PZW։O*"x(%^(NWi8]urFPkWRS爾xs *icAν/_HJ>\pKˡh0P~3PhgGa`+pNS-BKI,Ʉ|OMRJF[+֦ ?{qQңN};j,\b Ԋ_ӎKCI5z'˃pҀIX y/k\zqƐ!{m+i˒BpVb*/4XbOAr1?j! dO^l^7iW>̾XDIWDo48=#JB?,l/] 1)Kjj-؁6IvOs/N7_`kS;h!ioD ;Iuyp4EO¤6Ʒ_|pu3O!C{4āpVnjc.NlO7͇%pVC[#dcH!!®F-*n]$[<֙|r~}34o~m$`>g|(]ILP%oä"q!>VCւWjC6] 3sLJŸ/]k]XO8.Ba9(>#cN~F3"׼CFyz6=dz, T-Np(5-3~ܸi*@DN]SOWac+QH\'<_Ї ۟inEGY- ޒ"k,PE:r?tHvLL ~\r@+e9'ԉe_-G+$( 1oM-c#s=R@-zɡʂlVA@D]d S''yưD|٣, 8@ԉ5VUdBS%*Ut+:d8Lo@ZHd M65Hy@W㖇i57w! em~;ߺC^Hf:ۓ.YB' ,#2@%.؅F5H9 &/O6 B3cCh+ͼD`?Oi23#)m17@Fzc9bRʤb[{Pq ̜ F"|jw Cda4:;LmX.Y8lOxh^/K(RW>{D+Ļ-lދu U@VUejle hD n=0flPر&GH,GW eWEGope9N -+uYMa ˿O0& }PS"֯ b1 z7P,XO@*g"&WltbiSnu56IJpn!7:4kG|BCcU1ZdNq /ǹC<+p☜ܲӏL*q׼py:LI 43yOphj-0R @.z(_~Zʥ9-tKMo}~004ӑ?(mm5mbq$ҌLeVC=!Boʉ$*ʸ\4*驆y@_x2x45e.th+a>;6x4\θ!D-h [G˒4;Aտ{%hMbTtў/DB |uһؽ;ua!P6O4?RI_ߜ`꫅oq] n@E<(is%iܝ FSLI"LGB;iwQ51̵neI6] 2D@L×<޿ffe$$Y^ENjr&N'jtۧ5jj(ӹYyT+LْcjLL"6.,^饝mʬK fgV5ߪRNsMOw#Cҕ~_#{묉C'ȹ~%,6f5 3&v09>rNj yM%Rdҙ~)I Cu ^ͦ(XZ7Se>w92yN(pU)(a?bJ-Kvd<f,=Q)' e{w2 EP],p-?0Yr K]56T vGgCUCZ {+~v.#+PX*ۋpuHHn{|3 >Inl*4'=b%OeѮsF 20;fLn`h(H4b&0]#LCLf%ՙ }x5oIʛJ@ xmQMP*yb$1¹Y.IGsNgQV<"?Q(Ucu1rW]}Jگh{E2#@;Ә6␅9upkE_]+pAK_~u?LʞY8ud/(Q>I@x%1ǀPi4PSVpdh*Fojlq|^JJ1ZKebD.fѰUټFZU(?$.%k\Zې$þ3扪paDTg5U=4vK@u誮j^i(͗ƠVA{)7C.$xp\Tϒ#Pc)dtN-mi+(@ c&)BK=R_xZ.w:4ªЭqp^z&]&nn':Z5Sk[蚉MR*  y{؂Ϟ35dއКYLioP\/!m' ]1鹓|(<+Ұ4:v%2H=B٢gNhwDs|'ٵ$,d sӯ ծuveFeymU9Ns[}m(u4 X>&Ųc^<@R Z&-c.Q;tk9pE_%~x4j:l4E.jncP"D>?zc/G !df!.Smͫh+EUB~E 2T_k}1XSi&ZǞ%o ߬[J2v ev s/WYd^<[@ OeR[cM @3w3f^'8M%Nw  {)p_g˺+JWqeC"߱G_^.-A wrۆ 3Hoe><9 $fً1o&SFn;ċtoR~< HI?ڔq4H9fz_&xEOeUwb}yFDE{6r"nA x~dQm !q&*\l 37pnWT)'Czq4;pX^lP@元8`nj; h,*UvNly<ѩ`0-W6t@k@m f|\{2a6 =ՋyZPKu"#]*n7SoZj7b="Y㭐63 KTΗGe:1(吗#ڀ%b&U;؟: E"D)5 mNcwtm-)p W%oШ4ΏEZx7L%jUrX9sNl%IM'fMOϙYeKRu 4Wd}=J`lz|%6ISУ@3Fl{jd4{ .}!Qe}-'q 4 hwa(bh퐮%qŬOYhYgN-.6M`LTyTІa^ӟf!Ø-e՘&*vx]wc?,_} Ă`S\˨\IF*H.\kL Sw6;> `5JKNS'p ^`%XH]\P˳&0xǿ#C1a+Xu}5˽W]p6`>87hXk-Ggs;v'˝t{ -_nSM [#ZHM@j/Ga|8 ;6^x$"NXm.ek7B% ):rHb}|$d.ēp+GS?4gs%sܐFrj9pCG)WX_9ww)U (kt!I5^^WE?#ZB; do ԲW Rzn:`oБˡ im]sY>YZV, ]v~C&_CJpEf(;WOQޏ<{2ey]1/}ȴݖK%߅u ¨?T1|R||%;L|$J6kDISO]|$M>A<J7!sGq~7`;j`*?}S< !|#ߏt.\izɳlG@C&o fVþ)t:{!+t$G/NK>EϙZv: 1(̤!!x$Yxj6:7[Te u7wj5)|k0BȐ *?Gq[ nY5523zbH":i(E)Mpj~1=\LEyKS/MHONt:^q naR6sDV8%&&Y5 ӭP=Y^XBqiDa&(GCX."?UPOJvHP[9TWo]}9&Eq.oqخP;[jT Z5*)yc{';ŐS/FȆOV!FwQGӳ4l30ч͌ޓ7%.6TdZYNiqުc dU] }ꜟugJ4Y5v$;-wͩH&8 pH:(FƎG=,іNe68 4@@F;;x/~By+hi<R+O]Eq`@ kSM6; W. kd9j3]g Qpudo@4uBw=?Ռ'$Жu(3FTL mvv5f>+td#eF!1P"~3K#^7&g1BӍ57t/͇gQdžzif:EOyQ8OWhWYPne(kUfL[;iYݰ'|K,z3 0bd(bZЉtjHvIҔٷ;çh~x&l3 m yk =1 LՑ":Q?c6 Jd؜g~+t>1r eqaH`Z/ϙl_s3w-XW>lh+ךb+wNy &oxIwrt%.EZ᫢9lm)`4;1ЭpCҿ* ?UJk\/Ocw@>60XV^JlfZ,՛c;$->j`KDm#+Ÿ^Hm.ٱ876wKz)P?x€֜/]g4q8sT6R>٩Db8KScrmzN *gbϲ۱!'a8„ rhI6k禰DGHak@}[S)JG!(?_d6(Sf~?MMJzyF_wF_h3%Tvsv!MYR%Hz^3puM1ծ^!tkpz3poʚ$(?,}=qҦ(e?4sž$DL Tjyfh [`y4c-Z c2TQ3] f~fOa3N*aǧ^ù#փ~jXBl`-*f(@}>pf?T]#/($gulsϗh?Al5zv&Ex>^nݢN+16 8ZZ tgCC<-Y$qHC,SLSi^\}JI SWaհZ}+Y^՗XN.pl tќm80/iG[ ef{d? @-?,Dù#_aP:ا_둞~=_z^Ʋ nS/O^ȹ&=YX]ddY~b9{ UвojGv(Njk9Iװ`62.^'\:XT :EKcg#^BǦt9sӻfCݯ؃5?'$_= *?*8HLМhcu1 /@jK3ʙcd^BY2]rR$;N h/2 HH jf/&@5.16w.FǤ7b*a 7+gnC@ e et6c箠W+ioh[o qh6~,ZJݻ&Ba4N`L;V{1H_rx],a51Bx.&FVP,g<@3%SGO ]!7mA-y= ?:L&S 3N&J@XϪD5@  8JwxOcYP0H*Sj8:lF5 _>ٓIpϦ'H"hfwRT{>%tTKk}qhm>8kզzPv^9l܋Wnr`;#y܏#czK-Pc} ZXEʡTD+b_sZ8zH(yc/ Owlս`ρS-sTCUs ($}&m=X\{pHa ̘wVyo_Rm7fm{/PBFSa-KnI<9q{a-g[xBoS)(h6+4£ާ"d:sj͍TI< i)k]LbE :ddbZ7a-﫸n8 &7`|. NĈoyza!!Ƽgue])mg"l=U2O=.8jcMpog*OJf32! ItŘ 2۠i]vf&7V P˼@H&"#L"c{j >6]x[lo\ "+APZkumoS'2$LD*XʡTBJӏOV>NP:; R"t٪F֜sl|V+#W[(&$]@F^5kue/ HT{ЫVy dmxo-fJdGqP0HZjI>6 ĝ蚞 kB8dBUp~Nhi+'Z˚uRy(=Gn&ܱsX U")?29 s!%i[eLN%ߌfB DQ)1bۂM,w?]& 5Ĝ<4BCQAdC!EBYZFO27驘Hun^ ښndPF0綬bs_ψ˒ 8TI. M"CekaBR'cMމUNxCO>'51坧-Y$Σ{zƓ:Z^f_4 J?S:k+(ABsCZ5ϋʼw#e{խ/ݎ=[b<}rYCH }B> iOX}ڼ5aw@o *GQyQNYqU;!kUX@2 6`(3c{f^xܑMSnԞ7Gڭ6F+k2 2VXd2ڙHԿ6KrzFNrx aU]ux6\H)BGM޻L"kf>[V t l$>_ve/Œ<_;\׮ٟq{yi% YZ